From 690d5d0b5122a041706cecaf3e7c56651b5cc398 Mon Sep 17 00:00:00 2001
From: Julian Wiedmann <jwi@linux.ibm.com>
Date: Thu, 2 Sep 2021 13:55:40 +0300
Subject: [PATCH 001/132] consoles: exclude iowait and steal from CPU
 Utilisation

'iowait' and 'steal' indicate specific idle/wait states, which shouldn't
be counted into CPU Utilisation. Also see
https://github.com/prometheus-operator/kube-prometheus/pull/796 and
https://github.com/kubernetes-monitoring/kubernetes-mixin/pull/667.

Per the iostat man page:

%idle
    Show the percentage of time that the CPU or CPUs were idle and the
    system did not have an outstanding disk I/O request.

%iowait
     Show the percentage of time that the CPU or CPUs were idle during
     which the system had an outstanding disk I/O request.

%steal
     Show the percentage of time spent in involuntary wait by the
     virtual CPU or CPUs while the hypervisor was servicing another
     virtual processor.

Signed-off-by: Julian Wiedmann <jwi@linux.ibm.com>
---
 consoles/node-cpu.html      | 2 +-
 consoles/node-overview.html | 2 +-
 consoles/node.html          | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/consoles/node-cpu.html b/consoles/node-cpu.html
index d6c515d2dd0..284ad738f2b 100644
--- a/consoles/node-cpu.html
+++ b/consoles/node-cpu.html
@@ -47,7 +47,7 @@ <h3>CPU Usage</h3>
   <script>
   new PromConsole.Graph({
     node: document.querySelector("#cpuGraph"),
-    expr: "sum by (mode)(irate(node_cpu_seconds_total{job='node',instance='{{ .Params.instance }}',mode!='idle'}[5m]))",
+    expr: "sum by (mode)(irate(node_cpu_seconds_total{job='node',instance='{{ .Params.instance }}',mode!='idle',mode!='iowait',mode!='steal'}[5m]))",
     renderer: 'area',
     max: {{ with printf "count(count by (cpu)(node_cpu_seconds_total{job='node',instance='%s'}))" .Params.instance | query }}{{ . | first | value }}{{ else}}undefined{{end}},
     yAxisFormatter: PromConsole.NumberFormatter.humanizeNoSmallPrefix,
diff --git a/consoles/node-overview.html b/consoles/node-overview.html
index 92f53ba8717..4ae8984b99a 100644
--- a/consoles/node-overview.html
+++ b/consoles/node-overview.html
@@ -69,7 +69,7 @@ <h3>CPU Usage</h3>
   <script>
   new PromConsole.Graph({
     node: document.querySelector("#cpuGraph"),
-    expr: "sum by (mode)(irate(node_cpu_seconds_total{job='node',instance='{{ .Params.instance }}',mode!='idle'}[5m]))",
+    expr: "sum by (mode)(irate(node_cpu_seconds_total{job='node',instance='{{ .Params.instance }}',mode!='idle',mode!='iowait',mode!='steal'}[5m]))",
     renderer: 'area',
     max: {{ with printf "count(count by (cpu)(node_cpu_seconds_total{job='node',instance='%s'}))" .Params.instance | query }}{{ . | first | value }}{{ else}}undefined{{end}},
     yAxisFormatter: PromConsole.NumberFormatter.humanizeNoSmallPrefix,
diff --git a/consoles/node.html b/consoles/node.html
index 9a37544eee0..c1dfc1a8913 100644
--- a/consoles/node.html
+++ b/consoles/node.html
@@ -21,7 +21,7 @@ <h1>Node</h1>
 <tr>
   <td><a href="node-overview.html?instance={{ .Labels.instance }}">{{ reReplaceAll "(.*?://)([^:/]+?)(:\\d+)?/.*" "$2" .Labels.instance }}</a></td>
   <td{{ if eq (. | value) 1.0 }}>Yes{{ else }} class="alert-danger">No{{ end }}</td>
-  <td>{{ template "prom_query_drilldown" (args (printf "100 * (1 - avg by(instance)(irate(node_cpu_seconds_total{job='node',mode='idle',instance='%s'}[5m])))" .Labels.instance) "%" "printf.1f") }}</td>
+  <td>{{ template "prom_query_drilldown" (args (printf "100 * (1 - avg by(instance) (sum without(mode) (irate(node_cpu_seconds_total{job='node',mode=~'idle|iowait|steal',instance='%s'}[5m]))))" .Labels.instance) "%" "printf.1f") }}</td>
   <td>{{ template "prom_query_drilldown" (args (printf "node_memory_MemFree_bytes{job='node',instance='%s'} + node_memory_Cached_bytes{job='node',instance='%s'} + node_memory_Buffers_bytes{job='node',instance='%s'}" .Labels.instance .Labels.instance .Labels.instance) "B" "humanize1024") }}</td>
 </tr>
 {{ else }}

From 67294b092539163bb8c947a00cae4a983f42524a Mon Sep 17 00:00:00 2001
From: Michael <cloudyonspring@126.com>
Date: Tue, 15 Nov 2022 21:00:15 +0800
Subject: [PATCH 002/132] Tweak line wrappings in docs/storage.md

Signed-off-by: Michael <cloudyonspring@126.com>
---
 docs/storage.md | 161 +++++++++++++++++++++++++++++++++++-------------
 1 file changed, 119 insertions(+), 42 deletions(-)

diff --git a/docs/storage.md b/docs/storage.md
index bcb8f7853e9..b4c5b6adade 100644
--- a/docs/storage.md
+++ b/docs/storage.md
@@ -17,9 +17,9 @@ Ingested samples are grouped into blocks of two hours. Each two-hour block consi
 of a directory containing a chunks subdirectory containing all the time series samples
 for that window of time, a metadata file, and an index file (which indexes metric names
 and labels to time series in the chunks directory). The samples in the chunks directory
-are grouped together into one or more segment files of up to 512MB each by default. When series are
-deleted via the API, deletion records are stored in separate tombstone files (instead
-of deleting the data immediately from the chunk segments).
+are grouped together into one or more segment files of up to 512MB each by default. When
+series are deleted via the API, deletion records are stored in separate tombstone files
+(instead of deleting the data immediately from the chunk segments).
 
 The current block for incoming samples is kept in memory and is not fully
 persisted. It is secured against crashes by a write-ahead log (WAL) that can be
@@ -58,15 +58,17 @@ A Prometheus server's data directory looks something like this:
         └── 00000000
 ```
 
-
 Note that a limitation of local storage is that it is not clustered or
 replicated. Thus, it is not arbitrarily scalable or durable in the face of
 drive or node outages and should be managed like any other single node
-database. The use of RAID is suggested for storage availability, and [snapshots](querying/api.md#snapshot)
-are recommended for backups. With proper
+database. The use of RAID is suggested for storage availability, and
+[snapshots](querying/api.md#snapshot) are recommended for backups. With proper
 architecture, it is possible to retain years of data in local storage.
 
-Alternatively, external storage may be used via the [remote read/write APIs](https://prometheus.io/docs/operating/integrations/#remote-endpoints-and-storage). Careful evaluation is required for these systems as they vary greatly in durability, performance, and efficiency.
+Alternatively, external storage may be used via the
+[remote read/write APIs](https://prometheus.io/docs/operating/integrations/#remote-endpoints-and-storage).
+Careful evaluation is required for these systems as they vary greatly in durability,
+performance, and efficiency.
 
 For further details on file format, see [TSDB format](/tsdb/docs/format/README.md).
 
@@ -74,40 +76,61 @@ For further details on file format, see [TSDB format](/tsdb/docs/format/README.m
 
 The initial two-hour blocks are eventually compacted into longer blocks in the background.
 
-Compaction will create larger blocks containing data spanning up to 10% of the retention time, or 31 days, whichever is smaller.
+Compaction will create larger blocks containing data spanning up to 10% of the retention time,
+or 31 days, whichever is smaller.
 
 ## Operational aspects
 
 Prometheus has several flags that configure local storage. The most important are:
 
-* `--storage.tsdb.path`: Where Prometheus writes its database. Defaults to `data/`.
-* `--storage.tsdb.retention.time`: When to remove old data. Defaults to `15d`. Overrides `storage.tsdb.retention` if this flag is set to anything other than default.
-* `--storage.tsdb.retention.size`: The maximum number of bytes of storage blocks to retain. The oldest data will be removed first. Defaults to `0` or disabled. Units supported: B, KB, MB, GB, TB, PB, EB. Ex: "512MB". Based on powers-of-2, so 1KB is 1024B. Only the persistent blocks are deleted to honor this retention although WAL and m-mapped chunks are counted in the total size. So the minimum requirement for the disk is the peak space taken by the `wal` (the WAL and Checkpoint) and `chunks_head` (m-mapped Head chunks) directory combined (peaks every 2 hours).
-* `--storage.tsdb.retention`: Deprecated in favor of `storage.tsdb.retention.time`.
-* `--storage.tsdb.wal-compression`: Enables compression of the write-ahead log (WAL). Depending on your data, you can expect the WAL size to be halved with little extra cpu load. This flag was introduced in 2.11.0 and enabled by default in 2.20.0. Note that once enabled, downgrading Prometheus to a version below 2.11.0 will require deleting the WAL.
-
-Prometheus stores an average of only 1-2 bytes per sample. Thus, to plan the capacity of a Prometheus server, you can use the rough formula:
+- `--storage.tsdb.path`: Where Prometheus writes its database. Defaults to `data/`.
+- `--storage.tsdb.retention.time`: When to remove old data. Defaults to `15d`.
+  Overrides `storage.tsdb.retention` if this flag is set to anything other than default.
+- `--storage.tsdb.retention.size`: The maximum number of bytes of storage blocks to retain.
+  The oldest data will be removed first. Defaults to `0` or disabled. Units supported:
+  B, KB, MB, GB, TB, PB, EB. Ex: "512MB". Based on powers-of-2, so 1KB is 1024B. Only
+  the persistent blocks are deleted to honor this retention although WAL and m-mapped
+  chunks are counted in the total size. So the minimum requirement for the disk is the
+  peak space taken by the `wal` (the WAL and Checkpoint) and `chunks_head`
+  (m-mapped Head chunks) directory combined (peaks every 2 hours).
+- `--storage.tsdb.retention`: Deprecated in favor of `storage.tsdb.retention.time`.
+- `--storage.tsdb.wal-compression`: Enables compression of the write-ahead log (WAL).
+  Depending on your data, you can expect the WAL size to be halved with little extra
+  cpu load. This flag was introduced in 2.11.0 and enabled by default in 2.20.0.
+  Note that once enabled, downgrading Prometheus to a version below 2.11.0 will
+  require deleting the WAL.
+
+Prometheus stores an average of only 1-2 bytes per sample. Thus, to plan the
+capacity of a Prometheus server, you can use the rough formula:
 
 ```
 needed_disk_space = retention_time_seconds * ingested_samples_per_second * bytes_per_sample
 ```
 
-To lower the rate of ingested samples, you can either reduce the number of time series you scrape (fewer targets or fewer series per target), or you can increase the scrape interval. However, reducing the number of series is likely more effective, due to compression of samples within a series.
+To lower the rate of ingested samples, you can either reduce the number of
+time series you scrape (fewer targets or fewer series per target), or you
+can increase the scrape interval. However, reducing the number of series is
+likely more effective, due to compression of samples within a series.
 
 If your local storage becomes corrupted for whatever reason, the best
 strategy to address the problem is to shut down Prometheus then remove the
 entire storage directory. You can also try removing individual block directories,
-or the WAL directory to resolve the problem.  Note that this means losing
+or the WAL directory to resolve the problem. Note that this means losing
 approximately two hours data per block directory. Again, Prometheus's local
 storage is not intended to be durable long-term storage; external solutions
 offer extended retention and data durability.
 
-CAUTION: Non-POSIX compliant filesystems are not supported for Prometheus' local storage as unrecoverable corruptions may happen. NFS filesystems (including AWS's EFS) are not supported. NFS could be POSIX-compliant, but most implementations are not. It is strongly recommended to use a local filesystem for reliability.
+CAUTION: Non-POSIX compliant filesystems are not supported for Prometheus'
+local storage as unrecoverable corruptions may happen. NFS filesystems
+(including AWS's EFS) are not supported. NFS could be POSIX-compliant,
+but most implementations are not. It is strongly recommended to use a
+local filesystem for reliability.
 
 If both time and size retention policies are specified, whichever triggers first
 will be used.
 
-Expired block cleanup happens in the background. It may take up to two hours to remove expired blocks. Blocks must be fully expired before they are removed.
+Expired block cleanup happens in the background. It may take up to two hours
+to remove expired blocks. Blocks must be fully expired before they are removed.
 
 ## Remote storage integrations
 
@@ -119,59 +142,101 @@ a set of interfaces that allow integrating with remote storage systems.
 
 Prometheus integrates with remote storage systems in three ways:
 
-* Prometheus can write samples that it ingests to a remote URL in a standardized format.
-* Prometheus can receive samples from other Prometheus servers in a standardized format.
-* Prometheus can read (back) sample data from a remote URL in a standardized format.
+- Prometheus can write samples that it ingests to a remote URL in a standardized format.
+- Prometheus can receive samples from other Prometheus servers in a standardized format.
+- Prometheus can read (back) sample data from a remote URL in a standardized format.
 
 ![Remote read and write architecture](images/remote_integrations.png)
 
-The read and write protocols both use a snappy-compressed protocol buffer encoding over HTTP. The protocols are not considered as stable APIs yet and may change to use gRPC over HTTP/2 in the future, when all hops between Prometheus and the remote storage can safely be assumed to support HTTP/2.
+The read and write protocols both use a snappy-compressed protocol buffer encoding over
+HTTP. The protocols are not considered as stable APIs yet and may change to use gRPC
+over HTTP/2 in the future, when all hops between Prometheus and the remote storage can
+safely be assumed to support HTTP/2.
 
-For details on configuring remote storage integrations in Prometheus, see the [remote write](configuration/configuration.md#remote_write) and [remote read](configuration/configuration.md#remote_read) sections of the Prometheus configuration documentation.
+For details on configuring remote storage integrations in Prometheus, see the
+[remote write](configuration/configuration.md#remote_write) and
+[remote read](configuration/configuration.md#remote_read) sections of the Prometheus
+configuration documentation.
 
-The built-in remote write receiver can be enabled by setting the `--web.enable-remote-write-receiver` command line flag. When enabled, the remote write receiver endpoint is `/api/v1/write`.
+The built-in remote write receiver can be enabled by setting the
+`--web.enable-remote-write-receiver` command line flag. When enabled,
+the remote write receiver endpoint is `/api/v1/write`.
 
-For details on the request and response messages, see the [remote storage protocol buffer definitions](https://github.com/prometheus/prometheus/blob/main/prompb/remote.proto).
+For details on the request and response messages, see the
+[remote storage protocol buffer definitions](https://github.com/prometheus/prometheus/blob/main/prompb/remote.proto).
 
-Note that on the read path, Prometheus only fetches raw series data for a set of label selectors and time ranges from the remote end. All PromQL evaluation on the raw data still happens in Prometheus itself. This means that remote read queries have some scalability limit, since all necessary data needs to be loaded into the querying Prometheus server first and then processed there. However, supporting fully distributed evaluation of PromQL was deemed infeasible for the time being.
+Note that on the read path, Prometheus only fetches raw series data for a set of
+label selectors and time ranges from the remote end. All PromQL evaluation on the
+raw data still happens in Prometheus itself. This means that remote read queries
+have some scalability limit, since all necessary data needs to be loaded into the
+querying Prometheus server first and then processed there. However, supporting
+fully distributed evaluation of PromQL was deemed infeasible for the time being.
 
 ### Existing integrations
 
-To learn more about existing integrations with remote storage systems, see the [Integrations documentation](https://prometheus.io/docs/operating/integrations/#remote-endpoints-and-storage).
+To learn more about existing integrations with remote storage systems, see the
+[Integrations documentation](https://prometheus.io/docs/operating/integrations/#remote-endpoints-and-storage).
 
 ## Backfilling from OpenMetrics format
 
 ### Overview
 
-If a user wants to create blocks into the TSDB from data that is in [OpenMetrics](https://openmetrics.io/) format, they can do so using backfilling. However, they should be careful and note that it is not safe to backfill data from the last 3 hours (the current head block) as this time range may overlap with the current head block Prometheus is still mutating. Backfilling will create new TSDB blocks, each containing two hours of metrics data. This limits the memory requirements of block creation. Compacting the two hour blocks into larger blocks is later done by the Prometheus server itself.
+If a user wants to create blocks into the TSDB from data that is in
+[OpenMetrics](https://openmetrics.io/) format, they can do so using backfilling.
+However, they should be careful and note that it is not safe to backfill data
+from the last 3 hours (the current head block) as this time range may overlap
+with the current head block Prometheus is still mutating. Backfilling will
+create new TSDB blocks, each containing two hours of metrics data. This limits
+the memory requirements of block creation. Compacting the two hour blocks into
+larger blocks is later done by the Prometheus server itself.
 
-A typical use case is to migrate metrics data from a different monitoring system or time-series database to Prometheus. To do so, the user must first convert the source data into [OpenMetrics](https://openmetrics.io/)  format, which is the input format for the backfilling as described below.
+A typical use case is to migrate metrics data from a different monitoring system
+or time-series database to Prometheus. To do so, the user must first convert the
+source data into [OpenMetrics](https://openmetrics.io/) format, which is the
+input format for the backfilling as described below.
 
 ### Usage
 
-Backfilling can be used via the Promtool command line. Promtool will write the blocks to a directory. By default this output directory is ./data/, you can change it by using the name of the desired output directory as an optional argument in the sub-command.
+Backfilling can be used via the Promtool command line. Promtool will write the blocks
+to a directory. By default this output directory is ./data/, you can change it by
+using the name of the desired output directory as an optional argument in the sub-command.
 
 ```
 promtool tsdb create-blocks-from openmetrics <input file> [<output directory>]
 ```
 
-After the creation of the blocks, move it to the data directory of Prometheus. If there is an overlap with the existing blocks in Prometheus, the flag `--storage.tsdb.allow-overlapping-blocks` needs to be set for Prometheus versions v2.38 and below. Note that any backfilled data is subject to the retention configured for your Prometheus server (by time or size).
+After the creation of the blocks, move it to the data directory of Prometheus.
+If there is an overlap with the existing blocks in Prometheus, the flag
+`--storage.tsdb.allow-overlapping-blocks` needs to be set for Prometheus versions
+v2.38 and below. Note that any backfilled data is subject to the retention
+configured for your Prometheus server (by time or size).
 
 #### Longer Block Durations
 
-By default, the promtool will use the default block duration (2h) for the blocks; this behavior is the most generally applicable and correct. However, when backfilling data over a long range of times, it may be advantageous to use a larger value for the block duration to backfill faster and prevent additional compactions by TSDB later.
+By default, the promtool will use the default block duration (2h) for the blocks;
+this behavior is the most generally applicable and correct. However, when backfilling
+data over a long range of times, it may be advantageous to use a larger value for
+the block duration to backfill faster and prevent additional compactions by TSDB later.
 
-The `--max-block-duration` flag allows the user to configure a maximum duration of blocks. The backfilling tool will pick a suitable block duration no larger than this.
+The `--max-block-duration` flag allows the user to configure a maximum duration of blocks.
+The backfilling tool will pick a suitable block duration no larger than this.
 
-While larger blocks may improve the performance of backfilling large datasets, drawbacks exist as well. Time-based retention policies must keep the entire block around if even one sample of the (potentially large) block is still within the retention policy. Conversely, size-based retention policies will remove the entire block even if the TSDB only goes over the size limit in a minor way.
+While larger blocks may improve the performance of backfilling large datasets,
+drawbacks exist as well. Time-based retention policies must keep the entire block
+around if even one sample of the (potentially large) block is still within the
+retention policy. Conversely, size-based retention policies will remove the entire
+block even if the TSDB only goes over the size limit in a minor way.
 
-Therefore, backfilling with few blocks, thereby choosing a larger block duration, must be done with care and is not recommended for any production instances.
+Therefore, backfilling with few blocks, thereby choosing a larger block duration,
+must be done with care and is not recommended for any production instances.
 
 ## Backfilling for Recording Rules
 
 ### Overview
 
-When a new recording rule is created, there is no historical data for it. Recording rule data only exists from the creation time on. `promtool` makes it possible to create historical recording rule data.
+When a new recording rule is created, there is no historical data for it.
+Recording rule data only exists from the creation time on.
+`promtool` makes it possible to create historical recording rule data.
 
 ### Usage
 
@@ -187,14 +252,26 @@ $ promtool tsdb create-blocks-from rules \
     rules.yaml rules2.yaml
 ```
 
-The recording rule files provided should be a normal [Prometheus rules file](https://prometheus.io/docs/prometheus/latest/configuration/recording_rules/).
+The recording rule files provided should be a normal
+[Prometheus rules file](https://prometheus.io/docs/prometheus/latest/configuration/recording_rules/).
 
-The output of `promtool tsdb create-blocks-from rules` command is a directory that contains blocks with the historical rule data for all rules in the recording rule files. By default, the output directory is `data/`. In order to make use of this new block data, the blocks must be moved to a running Prometheus instance data dir `storage.tsdb.path` (for Prometheus versions v2.38 and below, the flag `--storage.tsdb.allow-overlapping-blocks` must be enabled). Once moved, the new blocks will merge with existing blocks when the next compaction runs.
+The output of `promtool tsdb create-blocks-from rules` command is a directory that
+contains blocks with the historical rule data for all rules in the recording rule
+files. By default, the output directory is `data/`. In order to make use of this
+new block data, the blocks must be moved to a running Prometheus instance data dir
+`storage.tsdb.path` (for Prometheus versions v2.38 and below, the flag
+`--storage.tsdb.allow-overlapping-blocks` must be enabled). Once moved, the new
+blocks will merge with existing blocks when the next compaction runs.
 
 ### Limitations
 
-- If you run the rule backfiller multiple times with the overlapping start/end times, blocks containing the same data will be created each time the rule backfiller is run.
+- If you run the rule backfiller multiple times with the overlapping start/end times,
+  blocks containing the same data will be created each time the rule backfiller is run.
 - All rules in the recording rule files will be evaluated.
-- If the `interval` is set in the recording rule file that will take priority over the `eval-interval` flag in the rule backfill command.
+- If the `interval` is set in the recording rule file that will take priority over
+  the `eval-interval` flag in the rule backfill command.
 - Alerts are currently ignored if they are in the recording rule file.
-- Rules in the same group cannot see the results of previous rules. Meaning that rules that refer to other rules being backfilled is not supported. A workaround is to backfill multiple times and create the dependent data first (and move dependent data to the Prometheus server data dir so that it is accessible from the Prometheus API).
+- Rules in the same group cannot see the results of previous rules. Meaning that rules
+  that refer to other rules being backfilled is not supported. A workaround is to
+  backfill multiple times and create the dependent data first (and move dependent
+  data to the Prometheus server data dir so that it is accessible from the Prometheus API).

From 6fe8217ce4ab9a161aeba0c375a26bc2102beed0 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Sat, 21 Oct 2023 12:38:01 +0000
Subject: [PATCH 003/132] tsdb: shrink txRing with smaller integers

4 billion active transactions ought to be enough for anyone.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 tsdb/head_read.go |  2 +-
 tsdb/head_test.go |  2 +-
 tsdb/isolation.go | 16 ++++++++--------
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/tsdb/head_read.go b/tsdb/head_read.go
index 6964d5472b2..6e74b74a6ad 100644
--- a/tsdb/head_read.go
+++ b/tsdb/head_read.go
@@ -724,7 +724,7 @@ func (s *memSeries) iterator(id chunks.HeadChunkID, c chunkenc.Chunk, isoState *
 
 		// Removing the extra transactionIDs that are relevant for samples that
 		// come after this chunk, from the total transactionIDs.
-		appendIDsToConsider := s.txs.txIDCount - (totalSamples - (previousSamples + numSamples))
+		appendIDsToConsider := int(s.txs.txIDCount) - (totalSamples - (previousSamples + numSamples))
 
 		// Iterate over the appendIDs, find the first one that the isolation state says not
 		// to return.
diff --git a/tsdb/head_test.go b/tsdb/head_test.go
index 54fd469a3bb..616270100a7 100644
--- a/tsdb/head_test.go
+++ b/tsdb/head_test.go
@@ -2550,7 +2550,7 @@ func TestIsolationAppendIDZeroIsNoop(t *testing.T) {
 
 	ok, _ := s.append(0, 0, 0, cOpts)
 	require.True(t, ok, "Series append failed.")
-	require.Equal(t, 0, s.txs.txIDCount, "Series should not have an appendID after append with appendID=0.")
+	require.Equal(t, 0, int(s.txs.txIDCount), "Series should not have an appendID after append with appendID=0.")
 }
 
 func TestHeadSeriesChunkRace(t *testing.T) {
diff --git a/tsdb/isolation.go b/tsdb/isolation.go
index e436884a8db..19eba9340cb 100644
--- a/tsdb/isolation.go
+++ b/tsdb/isolation.go
@@ -240,8 +240,8 @@ func (i *isolation) closeAppend(appendID uint64) {
 // The transactionID ring buffer.
 type txRing struct {
 	txIDs     []uint64
-	txIDFirst int // Position of the first id in the ring.
-	txIDCount int // How many ids in the ring.
+	txIDFirst uint32 // Position of the first id in the ring.
+	txIDCount uint32 // How many ids in the ring.
 }
 
 func newTxRing(capacity int) *txRing {
@@ -251,7 +251,7 @@ func newTxRing(capacity int) *txRing {
 }
 
 func (txr *txRing) add(appendID uint64) {
-	if txr.txIDCount == len(txr.txIDs) {
+	if int(txr.txIDCount) == len(txr.txIDs) {
 		// Ring buffer is full, expand by doubling.
 		newRing := make([]uint64, txr.txIDCount*2)
 		idx := copy(newRing, txr.txIDs[txr.txIDFirst:])
@@ -260,12 +260,12 @@ func (txr *txRing) add(appendID uint64) {
 		txr.txIDFirst = 0
 	}
 
-	txr.txIDs[(txr.txIDFirst+txr.txIDCount)%len(txr.txIDs)] = appendID
+	txr.txIDs[int(txr.txIDFirst+txr.txIDCount)%len(txr.txIDs)] = appendID
 	txr.txIDCount++
 }
 
 func (txr *txRing) cleanupAppendIDsBelow(bound uint64) {
-	pos := txr.txIDFirst
+	pos := int(txr.txIDFirst)
 
 	for txr.txIDCount > 0 {
 		if txr.txIDs[pos] < bound {
@@ -281,7 +281,7 @@ func (txr *txRing) cleanupAppendIDsBelow(bound uint64) {
 		}
 	}
 
-	txr.txIDFirst %= len(txr.txIDs)
+	txr.txIDFirst %= uint32(len(txr.txIDs))
 }
 
 func (txr *txRing) iterator() *txRingIterator {
@@ -296,7 +296,7 @@ func (txr *txRing) iterator() *txRingIterator {
 type txRingIterator struct {
 	ids []uint64
 
-	pos int
+	pos uint32
 }
 
 func (it *txRingIterator) At() uint64 {
@@ -305,7 +305,7 @@ func (it *txRingIterator) At() uint64 {
 
 func (it *txRingIterator) Next() {
 	it.pos++
-	if it.pos == len(it.ids) {
+	if int(it.pos) == len(it.ids) {
 		it.pos = 0
 	}
 }

From 90e98e0235522451bf35d054173702c8837f97b1 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Sat, 21 Oct 2023 13:45:47 +0000
Subject: [PATCH 004/132] tsdb: create isolation transaction slice on demand

When Prometheus restarts it creates every series read in from the WAL,
but many of those series will be finished, and never receive any more
samples. By defering allocation of the txRing slice to when it is first
needed, we save 32 bytes per stale series.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 tsdb/head.go      | 2 +-
 tsdb/isolation.go | 9 ++++++++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/tsdb/head.go b/tsdb/head.go
index 0ea2b838535..4a6e6ac7390 100644
--- a/tsdb/head.go
+++ b/tsdb/head.go
@@ -2011,7 +2011,7 @@ func newMemSeries(lset labels.Labels, id chunks.HeadSeriesRef, isolationDisabled
 		nextAt: math.MinInt64,
 	}
 	if !isolationDisabled {
-		s.txs = newTxRing(4)
+		s.txs = newTxRing(0)
 	}
 	return s
 }
diff --git a/tsdb/isolation.go b/tsdb/isolation.go
index 19eba9340cb..86330f36e4c 100644
--- a/tsdb/isolation.go
+++ b/tsdb/isolation.go
@@ -253,7 +253,11 @@ func newTxRing(capacity int) *txRing {
 func (txr *txRing) add(appendID uint64) {
 	if int(txr.txIDCount) == len(txr.txIDs) {
 		// Ring buffer is full, expand by doubling.
-		newRing := make([]uint64, txr.txIDCount*2)
+		newLen := txr.txIDCount * 2
+		if newLen == 0 {
+			newLen = 4
+		}
+		newRing := make([]uint64, newLen)
 		idx := copy(newRing, txr.txIDs[txr.txIDFirst:])
 		copy(newRing[idx:], txr.txIDs[:txr.txIDFirst])
 		txr.txIDs = newRing
@@ -265,6 +269,9 @@ func (txr *txRing) add(appendID uint64) {
 }
 
 func (txr *txRing) cleanupAppendIDsBelow(bound uint64) {
+	if len(txr.txIDs) == 0 {
+		return
+	}
 	pos := int(txr.txIDFirst)
 
 	for txr.txIDCount > 0 {

From f095c33da12958b5d92a7d857264fafb8d4c549a Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Mon, 20 Nov 2023 19:28:05 +0000
Subject: [PATCH 005/132] scrape: simplify TargetsActive function

Since everything was serialized on a single mutex, it's exactly the same
if we process targets in sequence without starting goroutines.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 scrape/manager.go | 16 +---------------
 1 file changed, 1 insertion(+), 15 deletions(-)

diff --git a/scrape/manager.go b/scrape/manager.go
index a0ac38f6bac..96cad00c9fb 100644
--- a/scrape/manager.go
+++ b/scrape/manager.go
@@ -279,24 +279,10 @@ func (m *Manager) TargetsActive() map[string][]*Target {
 	m.mtxScrape.Lock()
 	defer m.mtxScrape.Unlock()
 
-	var (
-		wg  sync.WaitGroup
-		mtx sync.Mutex
-	)
-
 	targets := make(map[string][]*Target, len(m.scrapePools))
-	wg.Add(len(m.scrapePools))
 	for tset, sp := range m.scrapePools {
-		// Running in parallel limits the blocking time of scrapePool to scrape
-		// interval when there's an update from SD.
-		go func(tset string, sp *scrapePool) {
-			mtx.Lock()
-			targets[tset] = sp.ActiveTargets()
-			mtx.Unlock()
-			wg.Done()
-		}(tset, sp)
+		targets[tset] = sp.ActiveTargets()
 	}
-	wg.Wait()
 	return targets
 }
 

From 34676a240e21705e8832e7be0b40df785bc06eb8 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Wed, 22 Nov 2023 18:50:57 +0000
Subject: [PATCH 006/132] scrape: consistent function names for metadata

Too confusing to have `MetadataList` and `ListMetadata`, etc.
I standardised on the ones which are in an interface.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 scrape/metrics.go                  |  4 ++--
 scrape/target.go                   | 10 +++++-----
 storage/remote/metadata_watcher.go |  2 +-
 web/api/v1/api.go                  |  8 ++++----
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/scrape/metrics.go b/scrape/metrics.go
index d74143185ba..7082bc743bb 100644
--- a/scrape/metrics.go
+++ b/scrape/metrics.go
@@ -286,8 +286,8 @@ func (mc *MetadataMetricsCollector) Collect(ch chan<- prometheus.Metric) {
 	for tset, targets := range mc.TargetsGatherer.TargetsActive() {
 		var size, length int
 		for _, t := range targets {
-			size += t.MetadataSize()
-			length += t.MetadataLength()
+			size += t.SizeMetadata()
+			length += t.LengthMetadata()
 		}
 
 		ch <- prometheus.MustNewConstMetric(
diff --git a/scrape/target.go b/scrape/target.go
index 8cc8597a4e0..c100e1bee06 100644
--- a/scrape/target.go
+++ b/scrape/target.go
@@ -92,7 +92,7 @@ type MetricMetadata struct {
 	Unit   string
 }
 
-func (t *Target) MetadataList() []MetricMetadata {
+func (t *Target) ListMetadata() []MetricMetadata {
 	t.mtx.RLock()
 	defer t.mtx.RUnlock()
 
@@ -102,7 +102,7 @@ func (t *Target) MetadataList() []MetricMetadata {
 	return t.metadata.ListMetadata()
 }
 
-func (t *Target) MetadataSize() int {
+func (t *Target) SizeMetadata() int {
 	t.mtx.RLock()
 	defer t.mtx.RUnlock()
 
@@ -113,7 +113,7 @@ func (t *Target) MetadataSize() int {
 	return t.metadata.SizeMetadata()
 }
 
-func (t *Target) MetadataLength() int {
+func (t *Target) LengthMetadata() int {
 	t.mtx.RLock()
 	defer t.mtx.RUnlock()
 
@@ -124,8 +124,8 @@ func (t *Target) MetadataLength() int {
 	return t.metadata.LengthMetadata()
 }
 
-// Metadata returns type and help metadata for the given metric.
-func (t *Target) Metadata(metric string) (MetricMetadata, bool) {
+// GetMetadata returns type and help metadata for the given metric.
+func (t *Target) GetMetadata(metric string) (MetricMetadata, bool) {
 	t.mtx.RLock()
 	defer t.mtx.RUnlock()
 
diff --git a/storage/remote/metadata_watcher.go b/storage/remote/metadata_watcher.go
index 21de565ed92..abfea3c7b02 100644
--- a/storage/remote/metadata_watcher.go
+++ b/storage/remote/metadata_watcher.go
@@ -136,7 +136,7 @@ func (mw *MetadataWatcher) collect() {
 	metadata := []scrape.MetricMetadata{}
 	for _, tset := range mw.manager.TargetsActive() {
 		for _, target := range tset {
-			for _, entry := range target.MetadataList() {
+			for _, entry := range target.ListMetadata() {
 				if _, ok := metadataSet[entry]; !ok {
 					metadata = append(metadata, entry)
 					metadataSet[entry] = struct{}{}
diff --git a/web/api/v1/api.go b/web/api/v1/api.go
index 671df788725..8fa7ce14a82 100644
--- a/web/api/v1/api.go
+++ b/web/api/v1/api.go
@@ -1114,7 +1114,7 @@ func (api *API) targetMetadata(r *http.Request) apiFuncResult {
 			}
 			// If no metric is specified, get the full list for the target.
 			if metric == "" {
-				for _, md := range t.MetadataList() {
+				for _, md := range t.ListMetadata() {
 					res = append(res, metricMetadata{
 						Target: t.Labels(),
 						Metric: md.Metric,
@@ -1126,7 +1126,7 @@ func (api *API) targetMetadata(r *http.Request) apiFuncResult {
 				continue
 			}
 			// Get metadata for the specified metric.
-			if md, ok := t.Metadata(metric); ok {
+			if md, ok := t.GetMetadata(metric); ok {
 				res = append(res, metricMetadata{
 					Target: t.Labels(),
 					Type:   md.Type,
@@ -1249,7 +1249,7 @@ func (api *API) metricMetadata(r *http.Request) apiFuncResult {
 	for _, tt := range api.targetRetriever(r.Context()).TargetsActive() {
 		for _, t := range tt {
 			if metric == "" {
-				for _, mm := range t.MetadataList() {
+				for _, mm := range t.ListMetadata() {
 					m := metadata{Type: mm.Type, Help: mm.Help, Unit: mm.Unit}
 					ms, ok := metrics[mm.Metric]
 
@@ -1266,7 +1266,7 @@ func (api *API) metricMetadata(r *http.Request) apiFuncResult {
 				continue
 			}
 
-			if md, ok := t.Metadata(metric); ok {
+			if md, ok := t.GetMetadata(metric); ok {
 				m := metadata{Type: md.Type, Help: md.Help, Unit: md.Unit}
 				ms, ok := metrics[md.Metric]
 

From 0e585bf5c0561990867cbb424045d64de1001f85 Mon Sep 17 00:00:00 2001
From: Erik Sommer <ersotech@posteo.de>
Date: Thu, 23 Nov 2023 17:04:57 +0100
Subject: [PATCH 007/132] add cluster variable to Overview dashboard

Signed-off-by: Erik Sommer <ersotech@posteo.de>
---
 .../prometheus-mixin/dashboards.libsonnet     | 46 ++++++++++---------
 1 file changed, 24 insertions(+), 22 deletions(-)

diff --git a/documentation/prometheus-mixin/dashboards.libsonnet b/documentation/prometheus-mixin/dashboards.libsonnet
index 56db2af205c..2c508e6e0ba 100644
--- a/documentation/prometheus-mixin/dashboards.libsonnet
+++ b/documentation/prometheus-mixin/dashboards.libsonnet
@@ -13,16 +13,18 @@ local template = grafana.template;
       g.dashboard(
         '%(prefix)sOverview' % $._config.grafanaPrometheus
       )
-      .addMultiTemplate('job', 'prometheus_build_info{%(prometheusSelector)s}' % $._config, 'job')
-      .addMultiTemplate('instance', 'prometheus_build_info{job=~"$job"}', 'instance')
+      .addMultiTemplate('cluster', 'prometheus_build_info{%(prometheusSelector)s}' % $._config, 'cluster')
+      .addMultiTemplate('job', 'prometheus_build_info{cluster=~"$cluster"}', 'job')
+      .addMultiTemplate('instance', 'prometheus_build_info{cluster=~"$cluster", job=~"$job"}', 'instance')
       .addRow(
         g.row('Prometheus Stats')
         .addPanel(
           g.panel('Prometheus Stats') +
           g.tablePanel([
-            'count by (job, instance, version) (prometheus_build_info{job=~"$job", instance=~"$instance"})',
-            'max by (job, instance) (time() - process_start_time_seconds{job=~"$job", instance=~"$instance"})',
+            'count by (cluster, job, instance, version) (prometheus_build_info{cluster=~"$cluster", job=~"$job", instance=~"$instance"})',
+            'max by (cluster, job, instance) (time() - process_start_time_seconds{cluster=~"$cluster", job=~"$job", instance=~"$instance"})',
           ], {
+            cluster: { alias: 'Cluster' },
             job: { alias: 'Job' },
             instance: { alias: 'Instance' },
             version: { alias: 'Version' },
@@ -35,12 +37,12 @@ local template = grafana.template;
         g.row('Discovery')
         .addPanel(
           g.panel('Target Sync') +
-          g.queryPanel('sum(rate(prometheus_target_sync_length_seconds_sum{job=~"$job",instance=~"$instance"}[5m])) by (scrape_job) * 1e3', '{{scrape_job}}') +
+          g.queryPanel('sum(rate(prometheus_target_sync_length_seconds_sum{cluster=~"$cluster",job=~"$job",instance=~"$instance"}[5m])) by (cluster, job, scrape_job, instance) * 1e3', '{{cluster}}:{{job}}:{{scrape_job}}') +
           { yaxes: g.yaxes('ms') }
         )
         .addPanel(
           g.panel('Targets') +
-          g.queryPanel('sum(prometheus_sd_discovered_targets{job=~"$job",instance=~"$instance"})', 'Targets') +
+          g.queryPanel('sum by (cluster, job, instance) (prometheus_sd_discovered_targets{cluster=~"$cluster", job=~"$job",instance=~"$instance"})', '{{cluster}}:{{job}}') +
           g.stack
         )
       )
@@ -48,29 +50,29 @@ local template = grafana.template;
         g.row('Retrieval')
         .addPanel(
           g.panel('Average Scrape Interval Duration') +
-          g.queryPanel('rate(prometheus_target_interval_length_seconds_sum{job=~"$job",instance=~"$instance"}[5m]) / rate(prometheus_target_interval_length_seconds_count{job=~"$job",instance=~"$instance"}[5m]) * 1e3', '{{interval}} configured') +
+          g.queryPanel('rate(prometheus_target_interval_length_seconds_sum{cluster=~"$cluster", job=~"$job",instance=~"$instance"}[5m]) / rate(prometheus_target_interval_length_seconds_count{cluster=~"$cluster", job=~"$job",instance=~"$instance"}[5m]) * 1e3', '{{cluster}}:{{job}} {{interval}} configured') +
           { yaxes: g.yaxes('ms') }
         )
         .addPanel(
           g.panel('Scrape failures') +
           g.queryPanel([
-            'sum by (job) (rate(prometheus_target_scrapes_exceeded_body_size_limit_total[1m]))',
-            'sum by (job) (rate(prometheus_target_scrapes_exceeded_sample_limit_total[1m]))',
-            'sum by (job) (rate(prometheus_target_scrapes_sample_duplicate_timestamp_total[1m]))',
-            'sum by (job) (rate(prometheus_target_scrapes_sample_out_of_bounds_total[1m]))',
-            'sum by (job) (rate(prometheus_target_scrapes_sample_out_of_order_total[1m]))',
+            'sum by (cluster, job, instance) (rate(prometheus_target_scrapes_exceeded_body_size_limit_total{cluster=~"$cluster",job=~"$job",instance=~"$instance"}[1m]))',
+            'sum by (cluster, job, instance) (rate(prometheus_target_scrapes_exceeded_sample_limit_total{cluster=~"$cluster",job=~"$job",instance=~"$instance"}[1m]))',
+            'sum by (cluster, job, instance) (rate(prometheus_target_scrapes_sample_duplicate_timestamp_total{cluster=~"$cluster",job=~"$job",instance=~"$instance"}[1m]))',
+            'sum by (cluster, job, instance) (rate(prometheus_target_scrapes_sample_out_of_bounds_total{cluster=~"$cluster",job=~"$job",instance=~"$instance"}[1m]))',
+            'sum by (cluster, job, instance) (rate(prometheus_target_scrapes_sample_out_of_order_total{cluster=~"$cluster",job=~"$job",instance=~"$instance"}[1m]))',
           ], [
-            'exceeded body size limit: {{job}}',
-            'exceeded sample limit: {{job}}',
-            'duplicate timestamp: {{job}}',
-            'out of bounds: {{job}}',
-            'out of order: {{job}}',
+            'exceeded body size limit: {{cluster}} {{job}}',
+            'exceeded sample limit: {{cluster}} {{job}}',
+            'duplicate timestamp: {{cluster}} {{job}}',
+            'out of bounds: {{cluster}} {{job}}',
+            'out of order: {{cluster}} {{job}}',
           ]) +
           g.stack
         )
         .addPanel(
           g.panel('Appended Samples') +
-          g.queryPanel('rate(prometheus_tsdb_head_samples_appended_total{job=~"$job",instance=~"$instance"}[5m])', '{{job}} {{instance}}') +
+          g.queryPanel('rate(prometheus_tsdb_head_samples_appended_total{cluster=~"$cluster", job=~"$job",instance=~"$instance"}[5m])', '{{cluster}} {{job}} {{instance}}') +
           g.stack
         )
       )
@@ -78,12 +80,12 @@ local template = grafana.template;
         g.row('Storage')
         .addPanel(
           g.panel('Head Series') +
-          g.queryPanel('prometheus_tsdb_head_series{job=~"$job",instance=~"$instance"}', '{{job}} {{instance}} head series') +
+          g.queryPanel('prometheus_tsdb_head_series{cluster=~"$cluster",job=~"$job",instance=~"$instance"}', '{{cluster}} {{job}} {{instance}} head series') +
           g.stack
         )
         .addPanel(
           g.panel('Head Chunks') +
-          g.queryPanel('prometheus_tsdb_head_chunks{job=~"$job",instance=~"$instance"}', '{{job}} {{instance}} head chunks') +
+          g.queryPanel('prometheus_tsdb_head_chunks{cluster=~"$cluster",job=~"$job",instance=~"$instance"}', '{{cluster}} {{job}} {{instance}} head chunks') +
           g.stack
         )
       )
@@ -91,12 +93,12 @@ local template = grafana.template;
         g.row('Query')
         .addPanel(
           g.panel('Query Rate') +
-          g.queryPanel('rate(prometheus_engine_query_duration_seconds_count{job=~"$job",instance=~"$instance",slice="inner_eval"}[5m])', '{{job}} {{instance}}') +
+          g.queryPanel('rate(prometheus_engine_query_duration_seconds_count{cluster=~"$cluster",job=~"$job",instance=~"$instance",slice="inner_eval"}[5m])', '{{cluster}} {{job}} {{instance}}') +
           g.stack,
         )
         .addPanel(
           g.panel('Stage Duration') +
-          g.queryPanel('max by (slice) (prometheus_engine_query_duration_seconds{quantile="0.9",job=~"$job",instance=~"$instance"}) * 1e3', '{{slice}}') +
+          g.queryPanel('max by (slice) (prometheus_engine_query_duration_seconds{quantile="0.9",cluster=~"$cluster", job=~"$job",instance=~"$instance"}) * 1e3', '{{slice}}') +
           { yaxes: g.yaxes('ms') } +
           g.stack,
         )

From 237bfea46b59600cca77520de033d8896f6d3aeb Mon Sep 17 00:00:00 2001
From: Arve Knudsen <arve.knudsen@gmail.com>
Date: Tue, 28 Nov 2023 16:33:28 +0100
Subject: [PATCH 008/132] `chunks.Reader`: Fix typo in ChunkOrIterable doc
 string.

Also fix comment typo in `FloatHistogram.Sub`.

Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>
---
 model/histogram/float_histogram.go | 2 +-
 tsdb/chunks/chunks.go              | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/model/histogram/float_histogram.go b/model/histogram/float_histogram.go
index 1c2f3ebeca6..cf20b508033 100644
--- a/model/histogram/float_histogram.go
+++ b/model/histogram/float_histogram.go
@@ -303,7 +303,7 @@ func (h *FloatHistogram) Sub(other *FloatHistogram) *FloatHistogram {
 	)
 
 	if other.Schema < h.Schema {
-		panic(fmt.Errorf("cannot subtract histigram with schema %d to %d", other.Schema, h.Schema))
+		panic(fmt.Errorf("cannot subtract histogram with schema %d to %d", other.Schema, h.Schema))
 	} else if other.Schema > h.Schema {
 		otherPositiveSpans, otherPositiveBuckets = reduceResolution(otherPositiveSpans, otherPositiveBuckets, other.Schema, h.Schema, false, false)
 		otherNegativeSpans, otherNegativeBuckets = reduceResolution(otherNegativeSpans, otherNegativeBuckets, other.Schema, h.Schema, false, false)
diff --git a/tsdb/chunks/chunks.go b/tsdb/chunks/chunks.go
index f22285a0cac..2c6db3637a4 100644
--- a/tsdb/chunks/chunks.go
+++ b/tsdb/chunks/chunks.go
@@ -671,7 +671,7 @@ func (s *Reader) Size() int64 {
 	return s.size
 }
 
-// Chunk returns a chunk from a given reference.
+// ChunkOrIterable returns a chunk from a given reference.
 func (s *Reader) ChunkOrIterable(meta Meta) (chunkenc.Chunk, chunkenc.Iterable, error) {
 	sgmIndex, chkStart := BlockChunkRef(meta.Ref).Unpack()
 

From 7319ad6a0ba2f8a6450d777530f9aa6248699515 Mon Sep 17 00:00:00 2001
From: Linas Medziunas <linas.medziunas@gmail.com>
Date: Fri, 8 Dec 2023 10:59:00 +0200
Subject: [PATCH 009/132] promql: simplify Native Histogram arithmetics

Signed-off-by: Linas Medziunas <linas.medziunas@gmail.com>
---
 promql/engine.go    | 33 +++++----------------------------
 promql/functions.go | 19 +++----------------
 2 files changed, 8 insertions(+), 44 deletions(-)

diff --git a/promql/engine.go b/promql/engine.go
index 4fa2a513be2..4e090068696 100644
--- a/promql/engine.go
+++ b/promql/engine.go
@@ -2478,22 +2478,12 @@ func vectorElemBinop(op parser.ItemType, lhs, rhs float64, hlhs, hrhs *histogram
 	switch op {
 	case parser.ADD:
 		if hlhs != nil && hrhs != nil {
-			// The histogram being added must have the larger schema
-			// code (i.e. the higher resolution).
-			if hrhs.Schema >= hlhs.Schema {
-				return 0, hlhs.Copy().Add(hrhs).Compact(0), true
-			}
-			return 0, hrhs.Copy().Add(hlhs).Compact(0), true
+			return 0, hlhs.Copy().Add(hrhs).Compact(0), true
 		}
 		return lhs + rhs, nil, true
 	case parser.SUB:
 		if hlhs != nil && hrhs != nil {
-			// The histogram being subtracted must have the larger schema
-			// code (i.e. the higher resolution).
-			if hrhs.Schema >= hlhs.Schema {
-				return 0, hlhs.Copy().Sub(hrhs).Compact(0), true
-			}
-			return 0, hrhs.Copy().Mul(-1).Add(hlhs).Compact(0), true
+			return 0, hlhs.Copy().Sub(hrhs).Compact(0), true
 		}
 		return lhs - rhs, nil, true
 	case parser.MUL:
@@ -2678,13 +2668,7 @@ func (ev *evaluator) aggregation(e *parser.AggregateExpr, grouping []string, par
 			if s.H != nil {
 				group.hasHistogram = true
 				if group.histogramValue != nil {
-					// The histogram being added must have
-					// an equal or larger schema.
-					if s.H.Schema >= group.histogramValue.Schema {
-						group.histogramValue.Add(s.H)
-					} else {
-						group.histogramValue = s.H.Copy().Add(group.histogramValue)
-					}
+					group.histogramValue.Add(s.H)
 				}
 				// Otherwise the aggregation contained floats
 				// previously and will be invalid anyway. No
@@ -2701,15 +2685,8 @@ func (ev *evaluator) aggregation(e *parser.AggregateExpr, grouping []string, par
 				if group.histogramMean != nil {
 					left := s.H.Copy().Div(float64(group.groupCount))
 					right := group.histogramMean.Copy().Div(float64(group.groupCount))
-					// The histogram being added/subtracted must have
-					// an equal or larger schema.
-					if s.H.Schema >= group.histogramMean.Schema {
-						toAdd := right.Mul(-1).Add(left)
-						group.histogramMean.Add(toAdd)
-					} else {
-						toAdd := left.Sub(right)
-						group.histogramMean = toAdd.Add(group.histogramMean)
-					}
+					toAdd := left.Sub(right)
+					group.histogramMean.Add(toAdd)
 				}
 				// Otherwise the aggregation contained floats
 				// previously and will be invalid anyway. No
diff --git a/promql/functions.go b/promql/functions.go
index 06f6f8c71c0..64066edbbd5 100644
--- a/promql/functions.go
+++ b/promql/functions.go
@@ -532,15 +532,8 @@ func funcAvgOverTime(vals []parser.Value, args parser.Expressions, enh *EvalNode
 				count++
 				left := h.H.Copy().Div(float64(count))
 				right := mean.Copy().Div(float64(count))
-				// The histogram being added/subtracted must have
-				// an equal or larger schema.
-				if h.H.Schema >= mean.Schema {
-					toAdd := right.Mul(-1).Add(left)
-					mean.Add(toAdd)
-				} else {
-					toAdd := left.Sub(right)
-					mean = toAdd.Add(mean)
-				}
+				toAdd := left.Sub(right)
+				mean.Add(toAdd)
 			}
 			return mean
 		}), nil
@@ -661,13 +654,7 @@ func funcSumOverTime(vals []parser.Value, args parser.Expressions, enh *EvalNode
 		return aggrHistOverTime(vals, enh, func(s Series) *histogram.FloatHistogram {
 			sum := s.Histograms[0].H.Copy()
 			for _, h := range s.Histograms[1:] {
-				// The histogram being added must have
-				// an equal or larger schema.
-				if h.H.Schema >= sum.Schema {
-					sum.Add(h.H)
-				} else {
-					sum = h.H.Copy().Add(sum)
-				}
+				sum.Add(h.H)
 			}
 			return sum
 		}), nil

From 10a82f87fd07b89a5badc935b5535120c1122eb2 Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Wed, 29 Nov 2023 15:15:57 +0100
Subject: [PATCH 010/132] Enable reusing memory when converting between
 histogram types

The 'ToFloat' method on integer histograms currently allocates new memory
each time it is called.

This commit adds an optional *FloatHistogram parameter that can be used
to reuse span and bucket slices. It is up to the caller to make sure the
input float histogram is not used anymore after the call.

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
---
 model/histogram/histogram.go          | 83 +++++++++++++--------------
 model/histogram/histogram_test.go     | 58 +++++++++++++++++--
 promql/engine_test.go                 | 20 +++----
 rules/manager_test.go                 |  4 +-
 scrape/target_test.go                 |  2 +-
 storage/buffer.go                     |  4 +-
 storage/buffer_test.go                |  6 +-
 storage/remote/codec_test.go          |  4 +-
 storage/remote/queue_manager_test.go  |  2 +-
 storage/remote/write_handler_test.go  |  2 +-
 tsdb/block_test.go                    |  4 +-
 tsdb/chunkenc/float_histogram_test.go | 22 +++----
 tsdb/chunkenc/histogram_test.go       | 10 ++--
 tsdb/compact_test.go                  |  4 +-
 tsdb/db_test.go                       | 14 ++---
 tsdb/head_test.go                     | 10 ++--
 tsdb/record/record_test.go            |  2 +-
 tsdb/wlog/watcher_test.go             |  2 +-
 web/federate.go                       |  2 +-
 web/federate_test.go                  |  4 +-
 20 files changed, 153 insertions(+), 106 deletions(-)

diff --git a/model/histogram/histogram.go b/model/histogram/histogram.go
index fb0185a6383..1fe34248235 100644
--- a/model/histogram/histogram.go
+++ b/model/histogram/histogram.go
@@ -282,50 +282,49 @@ func (h *Histogram) Compact(maxEmptyBuckets int) *Histogram {
 	return h
 }
 
-// ToFloat returns a FloatHistogram representation of the Histogram. It is a
-// deep copy (e.g. spans are not shared).
-func (h *Histogram) ToFloat() *FloatHistogram {
-	var (
-		positiveSpans, negativeSpans     []Span
-		positiveBuckets, negativeBuckets []float64
-	)
-	if len(h.PositiveSpans) != 0 {
-		positiveSpans = make([]Span, len(h.PositiveSpans))
-		copy(positiveSpans, h.PositiveSpans)
-	}
-	if len(h.NegativeSpans) != 0 {
-		negativeSpans = make([]Span, len(h.NegativeSpans))
-		copy(negativeSpans, h.NegativeSpans)
-	}
-	if len(h.PositiveBuckets) != 0 {
-		positiveBuckets = make([]float64, len(h.PositiveBuckets))
-		var current float64
-		for i, b := range h.PositiveBuckets {
-			current += float64(b)
-			positiveBuckets[i] = current
-		}
-	}
-	if len(h.NegativeBuckets) != 0 {
-		negativeBuckets = make([]float64, len(h.NegativeBuckets))
-		var current float64
-		for i, b := range h.NegativeBuckets {
-			current += float64(b)
-			negativeBuckets[i] = current
-		}
-	}
+// ToFloat returns a FloatHistogram representation of the Histogram. It is a deep
+// copy (e.g. spans are not shared). The function accepts a FloatHistogram as an
+// argument whose memory will be reused and overwritten if provided. If this
+// argument is nil, a new FloatHistogram will be allocated.
+func (h *Histogram) ToFloat(fh *FloatHistogram) *FloatHistogram {
+	if fh == nil {
+		fh = &FloatHistogram{}
+	}
+	fh.CounterResetHint = h.CounterResetHint
+	fh.Schema = h.Schema
+	fh.ZeroThreshold = h.ZeroThreshold
+	fh.ZeroCount = float64(h.ZeroCount)
+	fh.Count = float64(h.Count)
+	fh.Sum = h.Sum
+
+	fh.PositiveSpans = resize(fh.PositiveSpans, len(h.PositiveSpans))
+	copy(fh.PositiveSpans, h.PositiveSpans)
+
+	fh.NegativeSpans = resize(fh.NegativeSpans, len(h.NegativeSpans))
+	copy(fh.NegativeSpans, h.NegativeSpans)
+
+	fh.PositiveBuckets = resize(fh.PositiveBuckets, len(h.PositiveBuckets))
+	var currentPositive float64
+	for i, b := range h.PositiveBuckets {
+		currentPositive += float64(b)
+		fh.PositiveBuckets[i] = currentPositive
+	}
+
+	fh.NegativeBuckets = resize(fh.NegativeBuckets, len(h.NegativeBuckets))
+	var currentNegative float64
+	for i, b := range h.NegativeBuckets {
+		currentNegative += float64(b)
+		fh.NegativeBuckets[i] = currentNegative
+	}
+
+	return fh
+}
 
-	return &FloatHistogram{
-		CounterResetHint: h.CounterResetHint,
-		Schema:           h.Schema,
-		ZeroThreshold:    h.ZeroThreshold,
-		ZeroCount:        float64(h.ZeroCount),
-		Count:            float64(h.Count),
-		Sum:              h.Sum,
-		PositiveSpans:    positiveSpans,
-		NegativeSpans:    negativeSpans,
-		PositiveBuckets:  positiveBuckets,
-		NegativeBuckets:  negativeBuckets,
+func resize[T any](items []T, n int) []T {
+	if len(items) < n {
+		return make([]T, n)
 	}
+	return items[:n]
 }
 
 // Validate validates consistency between span and bucket slices. Also, buckets are checked
diff --git a/model/histogram/histogram_test.go b/model/histogram/histogram_test.go
index d5aed112aef..9a64faaaae3 100644
--- a/model/histogram/histogram_test.go
+++ b/model/histogram/histogram_test.go
@@ -408,9 +408,57 @@ func TestHistogramToFloat(t *testing.T) {
 		},
 		NegativeBuckets: []int64{1, 2, -2, 1, -1, 0},
 	}
-	fh := h.ToFloat()
+	cases := []struct {
+		name string
+		fh   *FloatHistogram
+	}{
+		{name: "without prior float histogram"},
+		{name: "prior float histogram with more buckets", fh: &FloatHistogram{
+			Schema:        2,
+			Count:         3,
+			Sum:           5,
+			ZeroThreshold: 4,
+			ZeroCount:     1,
+			PositiveSpans: []Span{
+				{Offset: 1, Length: 2},
+				{Offset: 1, Length: 2},
+				{Offset: 1, Length: 2},
+			},
+			PositiveBuckets: []float64{1, 2, 3, 4, 5, 6, 7, 8, 9},
+			NegativeSpans: []Span{
+				{Offset: 20, Length: 6},
+				{Offset: 12, Length: 7},
+				{Offset: 33, Length: 10},
+			},
+			NegativeBuckets: []float64{1, 2, 3, 4, 5, 6, 7, 8, 9},
+		}},
+		{name: "prior float histogram with fewer buckets", fh: &FloatHistogram{
+			Schema:        2,
+			Count:         3,
+			Sum:           5,
+			ZeroThreshold: 4,
+			ZeroCount:     1,
+			PositiveSpans: []Span{
+				{Offset: 1, Length: 2},
+				{Offset: 1, Length: 2},
+				{Offset: 1, Length: 2},
+			},
+			PositiveBuckets: []float64{1, 2},
+			NegativeSpans: []Span{
+				{Offset: 20, Length: 6},
+				{Offset: 12, Length: 7},
+				{Offset: 33, Length: 10},
+			},
+			NegativeBuckets: []float64{1, 2},
+		}},
+	}
 
-	require.Equal(t, h.String(), fh.String())
+	for _, c := range cases {
+		t.Run(c.name, func(t *testing.T) {
+			fh := h.ToFloat(c.fh)
+			require.Equal(t, h.String(), fh.String())
+		})
+	}
 }
 
 // TestHistogramEquals tests both Histogram and FloatHistogram.
@@ -436,14 +484,14 @@ func TestHistogramEquals(t *testing.T) {
 	equals := func(h1, h2 Histogram) {
 		require.True(t, h1.Equals(&h2))
 		require.True(t, h2.Equals(&h1))
-		h1f, h2f := h1.ToFloat(), h2.ToFloat()
+		h1f, h2f := h1.ToFloat(nil), h2.ToFloat(nil)
 		require.True(t, h1f.Equals(h2f))
 		require.True(t, h2f.Equals(h1f))
 	}
 	notEquals := func(h1, h2 Histogram) {
 		require.False(t, h1.Equals(&h2))
 		require.False(t, h2.Equals(&h1))
-		h1f, h2f := h1.ToFloat(), h2.ToFloat()
+		h1f, h2f := h1.ToFloat(nil), h2.ToFloat(nil)
 		require.False(t, h1f.Equals(h2f))
 		require.False(t, h2f.Equals(h1f))
 	}
@@ -950,7 +998,7 @@ func TestHistogramValidation(t *testing.T) {
 				return
 			}
 
-			fh := tc.h.ToFloat()
+			fh := tc.h.ToFloat(nil)
 			if err := fh.Validate(); tc.errMsg != "" {
 				require.EqualError(t, err, tc.errMsg)
 			} else {
diff --git a/promql/engine_test.go b/promql/engine_test.go
index b8fd19299c7..9ab54dd16c5 100644
--- a/promql/engine_test.go
+++ b/promql/engine_test.go
@@ -3267,7 +3267,7 @@ func TestNativeHistogram_HistogramCountAndSum(t *testing.T) {
 			app := storage.Appender(context.Background())
 			var err error
 			if floatHisto {
-				_, err = app.AppendHistogram(0, lbls, ts, nil, h.ToFloat())
+				_, err = app.AppendHistogram(0, lbls, ts, nil, h.ToFloat(nil))
 			} else {
 				_, err = app.AppendHistogram(0, lbls, ts, h, nil)
 			}
@@ -3287,7 +3287,7 @@ func TestNativeHistogram_HistogramCountAndSum(t *testing.T) {
 			require.Len(t, vector, 1)
 			require.Nil(t, vector[0].H)
 			if floatHisto {
-				require.Equal(t, h.ToFloat().Count, vector[0].F)
+				require.Equal(t, h.ToFloat(nil).Count, vector[0].F)
 			} else {
 				require.Equal(t, float64(h.Count), vector[0].F)
 			}
@@ -3305,7 +3305,7 @@ func TestNativeHistogram_HistogramCountAndSum(t *testing.T) {
 			require.Len(t, vector, 1)
 			require.Nil(t, vector[0].H)
 			if floatHisto {
-				require.Equal(t, h.ToFloat().Sum, vector[0].F)
+				require.Equal(t, h.ToFloat(nil).Sum, vector[0].F)
 			} else {
 				require.Equal(t, h.Sum, vector[0].F)
 			}
@@ -3433,7 +3433,7 @@ func TestNativeHistogram_HistogramStdDevVar(t *testing.T) {
 				app := storage.Appender(context.Background())
 				var err error
 				if floatHisto {
-					_, err = app.AppendHistogram(0, lbls, ts, nil, tc.h.ToFloat())
+					_, err = app.AppendHistogram(0, lbls, ts, nil, tc.h.ToFloat(nil))
 				} else {
 					_, err = app.AppendHistogram(0, lbls, ts, tc.h, nil)
 				}
@@ -3678,7 +3678,7 @@ func TestNativeHistogram_HistogramQuantile(t *testing.T) {
 				app := storage.Appender(context.Background())
 				var err error
 				if floatHisto {
-					_, err = app.AppendHistogram(0, lbls, ts, nil, c.h.ToFloat())
+					_, err = app.AppendHistogram(0, lbls, ts, nil, c.h.ToFloat(nil))
 				} else {
 					_, err = app.AppendHistogram(0, lbls, ts, c.h, nil)
 				}
@@ -4109,7 +4109,7 @@ func TestNativeHistogram_HistogramFraction(t *testing.T) {
 				app := storage.Appender(context.Background())
 				var err error
 				if floatHisto {
-					_, err = app.AppendHistogram(0, lbls, ts, nil, c.h.ToFloat())
+					_, err = app.AppendHistogram(0, lbls, ts, nil, c.h.ToFloat(nil))
 				} else {
 					_, err = app.AppendHistogram(0, lbls, ts, c.h, nil)
 				}
@@ -4272,7 +4272,7 @@ func TestNativeHistogram_Sum_Count_Add_AvgOperator(t *testing.T) {
 					// Since we mutate h later, we need to create a copy here.
 					var err error
 					if floatHisto {
-						_, err = app.AppendHistogram(0, lbls, ts, nil, h.Copy().ToFloat())
+						_, err = app.AppendHistogram(0, lbls, ts, nil, h.Copy().ToFloat(nil))
 					} else {
 						_, err = app.AppendHistogram(0, lbls, ts, h.Copy(), nil)
 					}
@@ -4282,7 +4282,7 @@ func TestNativeHistogram_Sum_Count_Add_AvgOperator(t *testing.T) {
 					newTs := ts + int64(idx1)*int64(time.Minute/time.Millisecond)
 					// Since we mutate h later, we need to create a copy here.
 					if floatHisto {
-						_, err = app.AppendHistogram(0, lbls, newTs, nil, h.Copy().ToFloat())
+						_, err = app.AppendHistogram(0, lbls, newTs, nil, h.Copy().ToFloat(nil))
 					} else {
 						_, err = app.AppendHistogram(0, lbls, newTs, h.Copy(), nil)
 					}
@@ -4530,7 +4530,7 @@ func TestNativeHistogram_SubOperator(t *testing.T) {
 					// Since we mutate h later, we need to create a copy here.
 					var err error
 					if floatHisto {
-						_, err = app.AppendHistogram(0, lbls, ts, nil, h.Copy().ToFloat())
+						_, err = app.AppendHistogram(0, lbls, ts, nil, h.Copy().ToFloat(nil))
 					} else {
 						_, err = app.AppendHistogram(0, lbls, ts, h.Copy(), nil)
 					}
@@ -4687,7 +4687,7 @@ func TestNativeHistogram_MulDivOperator(t *testing.T) {
 				// Since we mutate h later, we need to create a copy here.
 				var err error
 				if floatHisto {
-					_, err = app.AppendHistogram(0, lbls, ts, nil, h.Copy().ToFloat())
+					_, err = app.AppendHistogram(0, lbls, ts, nil, h.Copy().ToFloat(nil))
 				} else {
 					_, err = app.AppendHistogram(0, lbls, ts, h.Copy(), nil)
 				}
diff --git a/rules/manager_test.go b/rules/manager_test.go
index 0c9a49e46ee..6418c5a3701 100644
--- a/rules/manager_test.go
+++ b/rules/manager_test.go
@@ -1390,9 +1390,9 @@ func TestNativeHistogramsInRecordingRules(t *testing.T) {
 
 	require.Equal(t, labels.FromStrings("__name__", "sum:histogram_metric"), s.Labels())
 
-	expHist := hists[0].ToFloat()
+	expHist := hists[0].ToFloat(nil)
 	for _, h := range hists[1:] {
-		expHist = expHist.Add(h.ToFloat())
+		expHist = expHist.Add(h.ToFloat(nil))
 	}
 
 	it := s.Iterator(nil)
diff --git a/scrape/target_test.go b/scrape/target_test.go
index 6631f328cc7..f37c75a7697 100644
--- a/scrape/target_test.go
+++ b/scrape/target_test.go
@@ -565,7 +565,7 @@ func TestBucketLimitAppender(t *testing.T) {
 				lbls := labels.FromStrings("__name__", "sparse_histogram_series")
 				var err error
 				if floatHisto {
-					fh := c.h.Copy().ToFloat()
+					fh := c.h.Copy().ToFloat(nil)
 					_, err = app.AppendHistogram(0, lbls, ts, nil, fh)
 					if c.expectError {
 						require.Error(t, err)
diff --git a/storage/buffer.go b/storage/buffer.go
index d2d89e04258..f686796caf9 100644
--- a/storage/buffer.go
+++ b/storage/buffer.go
@@ -202,7 +202,7 @@ func (s hSample) H() *histogram.Histogram {
 }
 
 func (s hSample) FH() *histogram.FloatHistogram {
-	return s.h.ToFloat()
+	return s.h.ToFloat(nil)
 }
 
 func (s hSample) Type() chunkenc.ValueType {
@@ -376,7 +376,7 @@ func (it *sampleRingIterator) AtHistogram() (int64, *histogram.Histogram) {
 
 func (it *sampleRingIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
 	if it.fh == nil {
-		return it.t, it.h.ToFloat()
+		return it.t, it.h.ToFloat(nil)
 	}
 	return it.t, it.fh
 }
diff --git a/storage/buffer_test.go b/storage/buffer_test.go
index c2542f3d9c3..84f94a008fa 100644
--- a/storage/buffer_test.go
+++ b/storage/buffer_test.go
@@ -233,7 +233,7 @@ func TestBufferedSeriesIteratorMixedHistograms(t *testing.T) {
 	histograms := tsdbutil.GenerateTestHistograms(2)
 
 	it := NewBufferIterator(NewListSeriesIterator(samples{
-		fhSample{t: 1, fh: histograms[0].ToFloat()},
+		fhSample{t: 1, fh: histograms[0].ToFloat(nil)},
 		hSample{t: 2, h: histograms[1]},
 	}), 2)
 
@@ -244,11 +244,11 @@ func TestBufferedSeriesIteratorMixedHistograms(t *testing.T) {
 
 	require.Equal(t, chunkenc.ValFloatHistogram, buf.Next())
 	_, fh := buf.AtFloatHistogram()
-	require.Equal(t, histograms[0].ToFloat(), fh)
+	require.Equal(t, histograms[0].ToFloat(nil), fh)
 
 	require.Equal(t, chunkenc.ValHistogram, buf.Next())
 	_, fh = buf.AtFloatHistogram()
-	require.Equal(t, histograms[1].ToFloat(), fh)
+	require.Equal(t, histograms[1].ToFloat(nil), fh)
 }
 
 func BenchmarkBufferedSeriesIterator(b *testing.B) {
diff --git a/storage/remote/codec_test.go b/storage/remote/codec_test.go
index 4df3c972e18..d2a7d45beb8 100644
--- a/storage/remote/codec_test.go
+++ b/storage/remote/codec_test.go
@@ -57,7 +57,7 @@ var writeRequestFixture = &prompb.WriteRequest{
 			},
 			Samples:    []prompb.Sample{{Value: 1, Timestamp: 0}},
 			Exemplars:  []prompb.Exemplar{{Labels: []prompb.Label{{Name: "f", Value: "g"}}, Value: 1, Timestamp: 0}},
-			Histograms: []prompb.Histogram{HistogramToHistogramProto(0, &testHistogram), FloatHistogramToHistogramProto(1, testHistogram.ToFloat())},
+			Histograms: []prompb.Histogram{HistogramToHistogramProto(0, &testHistogram), FloatHistogramToHistogramProto(1, testHistogram.ToFloat(nil))},
 		},
 		{
 			Labels: []prompb.Label{
@@ -69,7 +69,7 @@ var writeRequestFixture = &prompb.WriteRequest{
 			},
 			Samples:    []prompb.Sample{{Value: 2, Timestamp: 1}},
 			Exemplars:  []prompb.Exemplar{{Labels: []prompb.Label{{Name: "h", Value: "i"}}, Value: 2, Timestamp: 1}},
-			Histograms: []prompb.Histogram{HistogramToHistogramProto(2, &testHistogram), FloatHistogramToHistogramProto(3, testHistogram.ToFloat())},
+			Histograms: []prompb.Histogram{HistogramToHistogramProto(2, &testHistogram), FloatHistogramToHistogramProto(3, testHistogram.ToFloat(nil))},
 		},
 	},
 }
diff --git a/storage/remote/queue_manager_test.go b/storage/remote/queue_manager_test.go
index 16691a17443..c878c750bfd 100644
--- a/storage/remote/queue_manager_test.go
+++ b/storage/remote/queue_manager_test.go
@@ -619,7 +619,7 @@ func createHistograms(numSamples, numSeries int, floatHistogram bool) ([]record.
 				fh := record.RefFloatHistogramSample{
 					Ref: chunks.HeadSeriesRef(i),
 					T:   int64(j),
-					FH:  hist.ToFloat(),
+					FH:  hist.ToFloat(nil),
 				}
 				floatHistograms = append(floatHistograms, fh)
 			} else {
diff --git a/storage/remote/write_handler_test.go b/storage/remote/write_handler_test.go
index b00fe891adb..839009b2a92 100644
--- a/storage/remote/write_handler_test.go
+++ b/storage/remote/write_handler_test.go
@@ -134,7 +134,7 @@ func TestOutOfOrderExemplar(t *testing.T) {
 func TestOutOfOrderHistogram(t *testing.T) {
 	buf, _, err := buildWriteRequest([]prompb.TimeSeries{{
 		Labels:     []prompb.Label{{Name: "__name__", Value: "test_metric"}},
-		Histograms: []prompb.Histogram{HistogramToHistogramProto(0, &testHistogram), FloatHistogramToHistogramProto(1, testHistogram.ToFloat())},
+		Histograms: []prompb.Histogram{HistogramToHistogramProto(0, &testHistogram), FloatHistogramToHistogramProto(1, testHistogram.ToFloat(nil))},
 	}}, nil, nil, nil)
 	require.NoError(t, err)
 
diff --git a/tsdb/block_test.go b/tsdb/block_test.go
index 778fcf70820..7858e6b0c23 100644
--- a/tsdb/block_test.go
+++ b/tsdb/block_test.go
@@ -656,7 +656,7 @@ func genHistogramSeries(totalSeries, labelCount int, mint, maxt, step int64, flo
 			h.CounterResetHint = histogram.NotCounterReset
 		}
 		if floatHistogram {
-			return sample{t: ts, fh: h.ToFloat()}
+			return sample{t: ts, fh: h.ToFloat(nil)}
 		}
 		return sample{t: ts, h: h}
 	})
@@ -692,7 +692,7 @@ func genHistogramAndFloatSeries(totalSeries, labelCount int, mint, maxt, step in
 				h.CounterResetHint = histogram.NotCounterReset
 			}
 			if floatHistogram {
-				s = sample{t: ts, fh: h.ToFloat()}
+				s = sample{t: ts, fh: h.ToFloat(nil)}
 			} else {
 				s = sample{t: ts, h: h}
 			}
diff --git a/tsdb/chunkenc/float_histogram_test.go b/tsdb/chunkenc/float_histogram_test.go
index 05b1fa0a13d..6f5a95fb1c5 100644
--- a/tsdb/chunkenc/float_histogram_test.go
+++ b/tsdb/chunkenc/float_histogram_test.go
@@ -94,10 +94,10 @@ func TestFloatHistogramChunkSameBuckets(t *testing.T) {
 		},
 		NegativeBuckets: []int64{2, 1, -1, -1}, // counts: 2, 3, 2, 1 (total 8)
 	}
-	chk, _, app, err := app.AppendFloatHistogram(nil, ts, h.ToFloat(), false)
+	chk, _, app, err := app.AppendFloatHistogram(nil, ts, h.ToFloat(nil), false)
 	require.NoError(t, err)
 	require.Nil(t, chk)
-	exp = append(exp, floatResult{t: ts, h: h.ToFloat()})
+	exp = append(exp, floatResult{t: ts, h: h.ToFloat(nil)})
 	require.Equal(t, 1, c.NumSamples())
 
 	// Add an updated histogram.
@@ -108,10 +108,10 @@ func TestFloatHistogramChunkSameBuckets(t *testing.T) {
 	h.Sum = 24.4
 	h.PositiveBuckets = []int64{5, -2, 1, -2} // counts: 5, 3, 4, 2 (total 14)
 	h.NegativeBuckets = []int64{4, -1, 1, -1} // counts: 4, 3, 4, 4 (total 15)
-	chk, _, _, err = app.AppendFloatHistogram(nil, ts, h.ToFloat(), false)
+	chk, _, _, err = app.AppendFloatHistogram(nil, ts, h.ToFloat(nil), false)
 	require.NoError(t, err)
 	require.Nil(t, chk)
-	expH := h.ToFloat()
+	expH := h.ToFloat(nil)
 	expH.CounterResetHint = histogram.NotCounterReset
 	exp = append(exp, floatResult{t: ts, h: expH})
 	require.Equal(t, 2, c.NumSamples())
@@ -127,10 +127,10 @@ func TestFloatHistogramChunkSameBuckets(t *testing.T) {
 	h.Sum = 24.4
 	h.PositiveBuckets = []int64{6, 1, -3, 6} // counts: 6, 7, 4, 10 (total 27)
 	h.NegativeBuckets = []int64{5, 1, -2, 3} // counts: 5, 6, 4, 7 (total 22)
-	chk, _, _, err = app.AppendFloatHistogram(nil, ts, h.ToFloat(), false)
+	chk, _, _, err = app.AppendFloatHistogram(nil, ts, h.ToFloat(nil), false)
 	require.NoError(t, err)
 	require.Nil(t, chk)
-	expH = h.ToFloat()
+	expH = h.ToFloat(nil)
 	expH.CounterResetHint = histogram.NotCounterReset
 	exp = append(exp, floatResult{t: ts, h: expH})
 	require.Equal(t, 3, c.NumSamples())
@@ -217,7 +217,7 @@ func TestFloatHistogramChunkBucketChanges(t *testing.T) {
 		NegativeBuckets: []int64{1},
 	}
 
-	chk, _, app, err := app.AppendFloatHistogram(nil, ts1, h1.ToFloat(), false)
+	chk, _, app, err := app.AppendFloatHistogram(nil, ts1, h1.ToFloat(nil), false)
 	require.NoError(t, err)
 	require.Nil(t, chk)
 	require.Equal(t, 1, c.NumSamples())
@@ -245,13 +245,13 @@ func TestFloatHistogramChunkBucketChanges(t *testing.T) {
 	h2.NegativeBuckets = []int64{2, -1} // 2 1 (total 3)
 	// This is how span changes will be handled.
 	hApp, _ := app.(*FloatHistogramAppender)
-	posInterjections, negInterjections, ok, cr := hApp.appendable(h2.ToFloat())
+	posInterjections, negInterjections, ok, cr := hApp.appendable(h2.ToFloat(nil))
 	require.NotEmpty(t, posInterjections)
 	require.NotEmpty(t, negInterjections)
 	require.True(t, ok) // Only new buckets came in.
 	require.False(t, cr)
 	c, app = hApp.recode(posInterjections, negInterjections, h2.PositiveSpans, h2.NegativeSpans)
-	chk, _, _, err = app.AppendFloatHistogram(nil, ts2, h2.ToFloat(), false)
+	chk, _, _, err = app.AppendFloatHistogram(nil, ts2, h2.ToFloat(nil), false)
 	require.NoError(t, err)
 	require.Nil(t, chk)
 	require.Equal(t, 2, c.NumSamples())
@@ -263,10 +263,10 @@ func TestFloatHistogramChunkBucketChanges(t *testing.T) {
 	h1.PositiveBuckets = []int64{6, -3, -3, 3, -3, 0, 2, 2, 1, -5, 1}
 	h1.NegativeSpans = h2.NegativeSpans
 	h1.NegativeBuckets = []int64{0, 1}
-	expH2 := h2.ToFloat()
+	expH2 := h2.ToFloat(nil)
 	expH2.CounterResetHint = histogram.NotCounterReset
 	exp := []floatResult{
-		{t: ts1, h: h1.ToFloat()},
+		{t: ts1, h: h1.ToFloat(nil)},
 		{t: ts2, h: expH2},
 	}
 	it := c.Iterator(nil)
diff --git a/tsdb/chunkenc/histogram_test.go b/tsdb/chunkenc/histogram_test.go
index 768ef2e6e53..53aee89db5e 100644
--- a/tsdb/chunkenc/histogram_test.go
+++ b/tsdb/chunkenc/histogram_test.go
@@ -98,7 +98,7 @@ func TestHistogramChunkSameBuckets(t *testing.T) {
 	chk, _, app, err := app.AppendHistogram(nil, ts, h, false)
 	require.NoError(t, err)
 	require.Nil(t, chk)
-	exp = append(exp, result{t: ts, h: h, fh: h.ToFloat()})
+	exp = append(exp, result{t: ts, h: h, fh: h.ToFloat(nil)})
 	require.Equal(t, 1, c.NumSamples())
 
 	// Add an updated histogram.
@@ -114,7 +114,7 @@ func TestHistogramChunkSameBuckets(t *testing.T) {
 	require.Nil(t, chk)
 	hExp := h.Copy()
 	hExp.CounterResetHint = histogram.NotCounterReset
-	exp = append(exp, result{t: ts, h: hExp, fh: hExp.ToFloat()})
+	exp = append(exp, result{t: ts, h: hExp, fh: hExp.ToFloat(nil)})
 	require.Equal(t, 2, c.NumSamples())
 
 	// Add update with new appender.
@@ -133,7 +133,7 @@ func TestHistogramChunkSameBuckets(t *testing.T) {
 	require.Nil(t, chk)
 	hExp = h.Copy()
 	hExp.CounterResetHint = histogram.NotCounterReset
-	exp = append(exp, result{t: ts, h: hExp, fh: hExp.ToFloat()})
+	exp = append(exp, result{t: ts, h: hExp, fh: hExp.ToFloat(nil)})
 	require.Equal(t, 3, c.NumSamples())
 
 	// 1. Expand iterator in simple case.
@@ -278,8 +278,8 @@ func TestHistogramChunkBucketChanges(t *testing.T) {
 	hExp := h2.Copy()
 	hExp.CounterResetHint = histogram.NotCounterReset
 	exp := []result{
-		{t: ts1, h: h1, fh: h1.ToFloat()},
-		{t: ts2, h: hExp, fh: hExp.ToFloat()},
+		{t: ts1, h: h1, fh: h1.ToFloat(nil)},
+		{t: ts2, h: hExp, fh: hExp.ToFloat(nil)},
 	}
 	it := c.Iterator(nil)
 	var act []result
diff --git a/tsdb/compact_test.go b/tsdb/compact_test.go
index 3eb99771250..75d564139ed 100644
--- a/tsdb/compact_test.go
+++ b/tsdb/compact_test.go
@@ -1402,8 +1402,8 @@ func TestHeadCompactionWithHistograms(t *testing.T) {
 				for tsMinute := from; tsMinute <= to; tsMinute++ {
 					var err error
 					if floatTest {
-						_, err = app.AppendHistogram(0, lbls, minute(tsMinute), nil, h.ToFloat())
-						efh := h.ToFloat()
+						_, err = app.AppendHistogram(0, lbls, minute(tsMinute), nil, h.ToFloat(nil))
+						efh := h.ToFloat(nil)
 						if tsMinute == from {
 							efh.CounterResetHint = histogram.UnknownCounterReset
 						} else {
diff --git a/tsdb/db_test.go b/tsdb/db_test.go
index cc219a20b45..4dcdef858b4 100644
--- a/tsdb/db_test.go
+++ b/tsdb/db_test.go
@@ -519,7 +519,7 @@ func TestAmendHistogramDatapointCausesError(t *testing.T) {
 		},
 		PositiveBuckets: []int64{1, 2, -2, 1, -1, 0, 0},
 	}
-	fh := h.ToFloat()
+	fh := h.ToFloat(nil)
 
 	app = db.Appender(ctx)
 	_, err = app.AppendHistogram(0, labels.FromStrings("a", "c"), 0, h.Copy(), nil)
@@ -6392,8 +6392,8 @@ func testHistogramAppendAndQueryHelper(t *testing.T, floatHistogram bool) {
 		var err error
 		app := db.Appender(ctx)
 		if floatHistogram {
-			_, err = app.AppendHistogram(0, lbls, minute(tsMinute), nil, h.ToFloat())
-			efh := h.ToFloat()
+			_, err = app.AppendHistogram(0, lbls, minute(tsMinute), nil, h.ToFloat(nil))
+			efh := h.ToFloat(nil)
 			efh.CounterResetHint = expCRH
 			*exp = append(*exp, sample{t: minute(tsMinute), fh: efh})
 		} else {
@@ -6814,20 +6814,20 @@ func TestNativeHistogramFlag(t *testing.T) {
 	// Disabled by default.
 	_, err = app.AppendHistogram(0, l, 100, h, nil)
 	require.Equal(t, storage.ErrNativeHistogramsDisabled, err)
-	_, err = app.AppendHistogram(0, l, 105, nil, h.ToFloat())
+	_, err = app.AppendHistogram(0, l, 105, nil, h.ToFloat(nil))
 	require.Equal(t, storage.ErrNativeHistogramsDisabled, err)
 
 	// Enable and append.
 	db.EnableNativeHistograms()
 	_, err = app.AppendHistogram(0, l, 200, h, nil)
 	require.NoError(t, err)
-	_, err = app.AppendHistogram(0, l, 205, nil, h.ToFloat())
+	_, err = app.AppendHistogram(0, l, 205, nil, h.ToFloat(nil))
 	require.NoError(t, err)
 
 	db.DisableNativeHistograms()
 	_, err = app.AppendHistogram(0, l, 300, h, nil)
 	require.Equal(t, storage.ErrNativeHistogramsDisabled, err)
-	_, err = app.AppendHistogram(0, l, 305, nil, h.ToFloat())
+	_, err = app.AppendHistogram(0, l, 305, nil, h.ToFloat(nil))
 	require.Equal(t, storage.ErrNativeHistogramsDisabled, err)
 
 	require.NoError(t, app.Commit())
@@ -6836,7 +6836,7 @@ func TestNativeHistogramFlag(t *testing.T) {
 	require.NoError(t, err)
 	act := query(t, q, labels.MustNewMatcher(labels.MatchEqual, "foo", "bar"))
 	require.Equal(t, map[string][]chunks.Sample{
-		l.String(): {sample{t: 200, h: h}, sample{t: 205, fh: h.ToFloat()}},
+		l.String(): {sample{t: 200, h: h}, sample{t: 205, fh: h.ToFloat(nil)}},
 	}, act)
 }
 
diff --git a/tsdb/head_test.go b/tsdb/head_test.go
index 65ed7283498..d444e1496fd 100644
--- a/tsdb/head_test.go
+++ b/tsdb/head_test.go
@@ -4082,8 +4082,8 @@ func testHistogramStaleSampleHelper(t *testing.T, floatHistogram bool) {
 	for _, h := range tsdbutil.GenerateTestHistograms(numHistograms) {
 		var err error
 		if floatHistogram {
-			_, err = app.AppendHistogram(0, l, 100*int64(len(expHistograms)), nil, h.ToFloat())
-			expHistograms = append(expHistograms, timedHistogram{t: 100 * int64(len(expHistograms)), fh: h.ToFloat()})
+			_, err = app.AppendHistogram(0, l, 100*int64(len(expHistograms)), nil, h.ToFloat(nil))
+			expHistograms = append(expHistograms, timedHistogram{t: 100 * int64(len(expHistograms)), fh: h.ToFloat(nil)})
 		} else {
 			_, err = app.AppendHistogram(0, l, 100*int64(len(expHistograms)), h, nil)
 			expHistograms = append(expHistograms, timedHistogram{t: 100 * int64(len(expHistograms)), h: h})
@@ -4113,8 +4113,8 @@ func testHistogramStaleSampleHelper(t *testing.T, floatHistogram bool) {
 	for _, h := range tsdbutil.GenerateTestHistograms(2 * numHistograms)[numHistograms:] {
 		var err error
 		if floatHistogram {
-			_, err = app.AppendHistogram(0, l, 100*int64(len(expHistograms)), nil, h.ToFloat())
-			expHistograms = append(expHistograms, timedHistogram{t: 100 * int64(len(expHistograms)), fh: h.ToFloat()})
+			_, err = app.AppendHistogram(0, l, 100*int64(len(expHistograms)), nil, h.ToFloat(nil))
+			expHistograms = append(expHistograms, timedHistogram{t: 100 * int64(len(expHistograms)), fh: h.ToFloat(nil)})
 		} else {
 			_, err = app.AppendHistogram(0, l, 100*int64(len(expHistograms)), h, nil)
 			expHistograms = append(expHistograms, timedHistogram{t: 100 * int64(len(expHistograms)), h: h})
@@ -4160,7 +4160,7 @@ func TestHistogramCounterResetHeader(t *testing.T) {
 				app := head.Appender(context.Background())
 				var err error
 				if floatHisto {
-					_, err = app.AppendHistogram(0, l, ts, nil, h.ToFloat())
+					_, err = app.AppendHistogram(0, l, ts, nil, h.ToFloat(nil))
 				} else {
 					_, err = app.AppendHistogram(0, l, ts, h.Copy(), nil)
 				}
diff --git a/tsdb/record/record_test.go b/tsdb/record/record_test.go
index 544fa5af29a..57599ef6d59 100644
--- a/tsdb/record/record_test.go
+++ b/tsdb/record/record_test.go
@@ -158,7 +158,7 @@ func TestRecord_EncodeDecode(t *testing.T) {
 		floatHistograms[i] = RefFloatHistogramSample{
 			Ref: h.Ref,
 			T:   h.T,
-			FH:  h.H.ToFloat(),
+			FH:  h.H.ToFloat(nil),
 		}
 	}
 	decFloatHistograms, err := dec.FloatHistogramSamples(enc.FloatHistogramSamples(floatHistograms, nil), nil)
diff --git a/tsdb/wlog/watcher_test.go b/tsdb/wlog/watcher_test.go
index fc665b57d6f..b30dce91a36 100644
--- a/tsdb/wlog/watcher_test.go
+++ b/tsdb/wlog/watcher_test.go
@@ -199,7 +199,7 @@ func TestTailSamples(t *testing.T) {
 					floatHistogram := enc.FloatHistogramSamples([]record.RefFloatHistogramSample{{
 						Ref: chunks.HeadSeriesRef(inner),
 						T:   now.UnixNano() + 1,
-						FH:  hist.ToFloat(),
+						FH:  hist.ToFloat(nil),
 					}}, nil)
 					require.NoError(t, w.Log(floatHistogram))
 				}
diff --git a/web/federate.go b/web/federate.go
index 2b79d005320..2e7bac21d91 100644
--- a/web/federate.go
+++ b/web/federate.go
@@ -138,7 +138,7 @@ Loop:
 			case chunkenc.ValFloat:
 				f = sample.F()
 			case chunkenc.ValHistogram:
-				fh = sample.H().ToFloat()
+				fh = sample.H().ToFloat(nil)
 			case chunkenc.ValFloatHistogram:
 				fh = sample.FH()
 			default:
diff --git a/web/federate_test.go b/web/federate_test.go
index 80539861d93..94783a73990 100644
--- a/web/federate_test.go
+++ b/web/federate_test.go
@@ -354,7 +354,7 @@ func TestFederationWithNativeHistograms(t *testing.T) {
 			_, err = app.AppendHistogram(0, l, 100*60*1000, histWithoutZeroBucket.Copy(), nil)
 			expVec = append(expVec, promql.Sample{
 				T:      100 * 60 * 1000,
-				H:      histWithoutZeroBucket.ToFloat(),
+				H:      histWithoutZeroBucket.ToFloat(nil),
 				Metric: expL,
 			})
 		default:
@@ -363,7 +363,7 @@ func TestFederationWithNativeHistograms(t *testing.T) {
 			_, err = app.AppendHistogram(0, l, 100*60*1000, hist.Copy(), nil)
 			expVec = append(expVec, promql.Sample{
 				T:      100 * 60 * 1000,
-				H:      hist.ToFloat(),
+				H:      hist.ToFloat(nil),
 				Metric: expL,
 			})
 		}

From 9008271df57d4392d3e424feba80b394267428ef Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Fri, 8 Dec 2023 10:12:50 +0100
Subject: [PATCH 011/132] Use cap to determine slice capacity

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
---
 model/histogram/histogram.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/model/histogram/histogram.go b/model/histogram/histogram.go
index 1fe34248235..f4d292b344f 100644
--- a/model/histogram/histogram.go
+++ b/model/histogram/histogram.go
@@ -321,7 +321,7 @@ func (h *Histogram) ToFloat(fh *FloatHistogram) *FloatHistogram {
 }
 
 func resize[T any](items []T, n int) []T {
-	if len(items) < n {
+	if cap(items) < n {
 		return make([]T, n)
 	}
 	return items[:n]

From acbaee8c9d7d780b6bf67128e435d049d0ea685c Mon Sep 17 00:00:00 2001
From: SuperQ <superq@gmail.com>
Date: Fri, 8 Dec 2023 11:01:38 +0100
Subject: [PATCH 012/132] Sync golangci-lint version

Update `scripts/golangci-lint.yml` golangci-lint version to match
main workflow.
* Add note to keep things in sync.

Signed-off-by: SuperQ <superq@gmail.com>
---
 .github/workflows/ci.yml  | 1 +
 scripts/golangci-lint.yml | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 22d3f8ad56c..8ba154e2588 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -151,6 +151,7 @@ jobs:
         uses: golangci/golangci-lint-action@3a919529898de77ec3da873e3063ca4b10e7f5cc # v3.7.0
         with:
           args: --verbose
+          # Make sure to sync this with Makefile.common and scripts/golangci-lint.yml.
           version: v1.55.2
   fuzzing:
     uses: ./.github/workflows/fuzzing.yml
diff --git a/scripts/golangci-lint.yml b/scripts/golangci-lint.yml
index ffa6b3090e3..805c59fb7cc 100644
--- a/scripts/golangci-lint.yml
+++ b/scripts/golangci-lint.yml
@@ -29,4 +29,4 @@ jobs:
       - name: Lint
         uses: golangci/golangci-lint-action@3a919529898de77ec3da873e3063ca4b10e7f5cc # v3.7.0
         with:
-          version: v1.54.2
+          version: v1.55.2

From ee700151a3bc901bdf52b184dee60f477f1d6ea8 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Tue, 3 Jan 2023 19:11:00 +0000
Subject: [PATCH 013/132] tsdb/index: add benchmark for Postings.Merge

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 tsdb/index/postings_test.go | 34 +++++++++++++++++++++++++++++++++-
 1 file changed, 33 insertions(+), 1 deletion(-)

diff --git a/tsdb/index/postings_test.go b/tsdb/index/postings_test.go
index c20b4506fe5..e8df6dbd290 100644
--- a/tsdb/index/postings_test.go
+++ b/tsdb/index/postings_test.go
@@ -380,6 +380,38 @@ func BenchmarkIntersect(t *testing.B) {
 	})
 }
 
+func BenchmarkMerge(t *testing.B) {
+	var lps []*ListPostings
+	var refs [][]storage.SeriesRef
+
+	// Create 100000 matchers(k=100000), making sure all memory allocation is done before starting the loop.
+	for i := 0; i < 100000; i++ {
+		var temp []storage.SeriesRef
+		for j := 1; j < 100; j++ {
+			temp = append(temp, storage.SeriesRef(i+j*100000))
+		}
+		lps = append(lps, newListPostings(temp...))
+		refs = append(refs, temp)
+	}
+
+	its := make([]Postings, len(refs))
+	for _, nSeries := range []int{1, 10, 100, 1000, 10000, 100000} {
+		t.Run(fmt.Sprint(nSeries), func(bench *testing.B) {
+			ctx := context.Background()
+			for i := 0; i < bench.N; i++ {
+				// Reset the ListPostings to their original values each time round the loop.
+				for j := range refs[:nSeries] {
+					lps[j].list = refs[j]
+					its[j] = lps[j]
+				}
+				if err := consumePostings(Merge(ctx, its[:nSeries]...)); err != nil {
+					bench.Fatal(err)
+				}
+			}
+		})
+	}
+}
+
 func TestMultiMerge(t *testing.T) {
 	i1 := newListPostings(1, 2, 3, 4, 5, 6, 1000, 1001)
 	i2 := newListPostings(2, 4, 5, 6, 7, 8, 999, 1001)
@@ -481,7 +513,7 @@ func TestMergedPostings(t *testing.T) {
 			m := Merge(ctx, c.in...)
 
 			if c.res == EmptyPostings() {
-				require.Equal(t, EmptyPostings(), m)
+				require.False(t, m.Next())
 				return
 			}
 

From ab3a47b48905fb2dd91ea011480521b5f3671f95 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Mon, 4 Sep 2023 15:23:30 +0100
Subject: [PATCH 014/132] postings: use Loser Tree for merge

It's faster.

Note change to test - instead of requiring that the data structure is
identical to `EmptyPostings()`, check that calling `Next()` returns
false, which implies it was empty.

Also the check for context cancellation during initialization was
removed. Initialization should be a small portion of the work done
during merge, so it's not worth plumbing a context argument through.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 go.mod                 |   1 +
 go.sum                 |   2 +
 tsdb/index/postings.go | 125 ++++++++++-------------------------------
 3 files changed, 32 insertions(+), 96 deletions(-)

diff --git a/go.mod b/go.mod
index 95cc7b8af60..f022f09e99f 100644
--- a/go.mod
+++ b/go.mod
@@ -10,6 +10,7 @@ require (
 	github.com/alecthomas/kingpin/v2 v2.4.0
 	github.com/alecthomas/units v0.0.0-20231202071711-9a357b53e9c9
 	github.com/aws/aws-sdk-go v1.48.14
+	github.com/bboreham/go-loser v0.0.0-20230920113527-fcc2c21820a3
 	github.com/cespare/xxhash/v2 v2.2.0
 	github.com/dennwc/varint v1.0.0
 	github.com/digitalocean/godo v1.106.0
diff --git a/go.sum b/go.sum
index d29694fb9df..ae367bb90c8 100644
--- a/go.sum
+++ b/go.sum
@@ -94,6 +94,8 @@ github.com/aws/aws-sdk-go v1.38.35/go.mod h1:hcU610XS61/+aQV88ixoOzUoG7v3b31pl2z
 github.com/aws/aws-sdk-go v1.48.14 h1:nVLrp+F84SG+xGiFMfe1TE6ZV6smF+42tuuNgYGV30s=
 github.com/aws/aws-sdk-go v1.48.14/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/aws/aws-sdk-go-v2 v0.18.0/go.mod h1:JWVYvqSMppoMJC0x5wdwiImzgXTI9FuZwxzkQq9wy+g=
+github.com/bboreham/go-loser v0.0.0-20230920113527-fcc2c21820a3 h1:6df1vn4bBlDDo4tARvBm7l6KA9iVMnE3NWizDeWSrps=
+github.com/bboreham/go-loser v0.0.0-20230920113527-fcc2c21820a3/go.mod h1:CIWtjkly68+yqLPbvwwR/fjNJA/idrtULjZWh2v1ys0=
 github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
 github.com/beorn7/perks v1.0.0/go.mod h1:KWe93zE9D1o94FZ5RNwFwVgaQK1VOXiVxmqh+CedLV8=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
diff --git a/tsdb/index/postings.go b/tsdb/index/postings.go
index c839574276c..222a8b0d6f2 100644
--- a/tsdb/index/postings.go
+++ b/tsdb/index/postings.go
@@ -18,11 +18,13 @@ import (
 	"context"
 	"encoding/binary"
 	"fmt"
+	"math"
 	"runtime"
 	"sort"
 	"strings"
 	"sync"
 
+	"github.com/bboreham/go-loser"
 	"golang.org/x/exp/slices"
 
 	"github.com/prometheus/prometheus/model/labels"
@@ -525,7 +527,7 @@ func (it *intersectPostings) Err() error {
 }
 
 // Merge returns a new iterator over the union of the input iterators.
-func Merge(ctx context.Context, its ...Postings) Postings {
+func Merge(_ context.Context, its ...Postings) Postings {
 	if len(its) == 0 {
 		return EmptyPostings()
 	}
@@ -533,122 +535,48 @@ func Merge(ctx context.Context, its ...Postings) Postings {
 		return its[0]
 	}
 
-	p, ok := newMergedPostings(ctx, its)
+	p, ok := newMergedPostings(its)
 	if !ok {
 		return EmptyPostings()
 	}
 	return p
 }
 
-type postingsHeap []Postings
-
-func (h postingsHeap) Len() int           { return len(h) }
-func (h postingsHeap) Less(i, j int) bool { return h[i].At() < h[j].At() }
-func (h *postingsHeap) Swap(i, j int)     { (*h)[i], (*h)[j] = (*h)[j], (*h)[i] }
-
-func (h *postingsHeap) Push(x interface{}) {
-	*h = append(*h, x.(Postings))
-}
-
-func (h *postingsHeap) Pop() interface{} {
-	old := *h
-	n := len(old)
-	x := old[n-1]
-	*h = old[0 : n-1]
-	return x
-}
-
 type mergedPostings struct {
-	h           postingsHeap
-	initialized bool
-	cur         storage.SeriesRef
-	err         error
+	p   []Postings
+	h   *loser.Tree[storage.SeriesRef, Postings]
+	cur storage.SeriesRef
 }
 
-func newMergedPostings(ctx context.Context, p []Postings) (m *mergedPostings, nonEmpty bool) {
-	ph := make(postingsHeap, 0, len(p))
-
-	for _, it := range p {
-		// NOTE: mergedPostings struct requires the user to issue an initial Next.
-		switch {
-		case ctx.Err() != nil:
-			return &mergedPostings{err: ctx.Err()}, true
-		case it.Next():
-			ph = append(ph, it)
-		case it.Err() != nil:
-			return &mergedPostings{err: it.Err()}, true
-		}
-	}
-
-	if len(ph) == 0 {
-		return nil, false
-	}
-	return &mergedPostings{h: ph}, true
+func newMergedPostings(p []Postings) (m *mergedPostings, nonEmpty bool) {
+	const maxVal = storage.SeriesRef(math.MaxUint64) // This value must be higher than all real values used in the tree.
+	lt := loser.New(p, maxVal)
+	return &mergedPostings{p: p, h: lt}, true
 }
 
 func (it *mergedPostings) Next() bool {
-	if it.h.Len() == 0 || it.err != nil {
-		return false
-	}
-
-	// The user must issue an initial Next.
-	if !it.initialized {
-		heap.Init(&it.h)
-		it.cur = it.h[0].At()
-		it.initialized = true
-		return true
-	}
-
 	for {
-		cur := it.h[0]
-		if !cur.Next() {
-			heap.Pop(&it.h)
-			if cur.Err() != nil {
-				it.err = cur.Err()
-				return false
-			}
-			if it.h.Len() == 0 {
-				return false
-			}
-		} else {
-			// Value of top of heap has changed, re-heapify.
-			heap.Fix(&it.h, 0)
+		if !it.h.Next() {
+			return false
 		}
-
-		if it.h[0].At() != it.cur {
-			it.cur = it.h[0].At()
+		// Remove duplicate entries.
+		newItem := it.h.At()
+		if newItem != it.cur {
+			it.cur = newItem
 			return true
 		}
 	}
 }
 
 func (it *mergedPostings) Seek(id storage.SeriesRef) bool {
-	if it.h.Len() == 0 || it.err != nil {
-		return false
+	for !it.h.IsEmpty() && it.h.At() < id {
+		finished := !it.h.Winner().Seek(id)
+		it.h.Fix(finished)
 	}
-	if !it.initialized {
-		if !it.Next() {
-			return false
-		}
-	}
-	for it.cur < id {
-		cur := it.h[0]
-		if !cur.Seek(id) {
-			heap.Pop(&it.h)
-			if cur.Err() != nil {
-				it.err = cur.Err()
-				return false
-			}
-			if it.h.Len() == 0 {
-				return false
-			}
-		} else {
-			// Value of top of heap has changed, re-heapify.
-			heap.Fix(&it.h, 0)
-		}
-
-		it.cur = it.h[0].At()
+	if it.h.IsEmpty() {
+		return false
 	}
+	it.cur = it.h.At()
 	return true
 }
 
@@ -657,7 +585,12 @@ func (it mergedPostings) At() storage.SeriesRef {
 }
 
 func (it mergedPostings) Err() error {
-	return it.err
+	for _, p := range it.p {
+		if err := p.Err(); err != nil {
+			return err
+		}
+	}
+	return nil
 }
 
 // Without returns a new postings list that contains all elements from the full list that

From e2a9f8ac0f2d2b0c1565241ca46b4d3b6dc22007 Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Sun, 10 Dec 2023 21:07:19 +0100
Subject: [PATCH 015/132] Reuse float histogram objects

This commit reduces the memory needed to query native histogram objects
by reusing existing HPoint instances.

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
---
 promql/engine.go       | 33 ++++++++++++++++++++++-----------
 storage/buffer.go      |  8 ++++----
 storage/buffer_test.go |  4 ++--
 3 files changed, 28 insertions(+), 17 deletions(-)

diff --git a/promql/engine.go b/promql/engine.go
index 4fa2a513be2..8b498792171 100644
--- a/promql/engine.go
+++ b/promql/engine.go
@@ -2078,21 +2078,27 @@ loop:
 		case chunkenc.ValNone:
 			break loop
 		case chunkenc.ValFloatHistogram, chunkenc.ValHistogram:
-			t, h := buf.AtFloatHistogram()
-			if value.IsStaleNaN(h.Sum) {
-				continue loop
-			}
+			t := buf.AtT()
 			// Values in the buffer are guaranteed to be smaller than maxt.
 			if t >= mintHistograms {
-				if ev.currentSamples >= ev.maxSamples {
-					ev.error(ErrTooManySamples(env))
-				}
-				point := HPoint{T: t, H: h}
 				if histograms == nil {
 					histograms = getHPointSlice(16)
 				}
-				histograms = append(histograms, point)
-				ev.currentSamples += point.size()
+				n := len(histograms)
+				if n < cap(histograms) {
+					histograms = histograms[:n+1]
+				} else {
+					histograms = append(histograms, HPoint{})
+				}
+				histograms[n].T, histograms[n].H = buf.AtFloatHistogram(histograms[n].H)
+				if value.IsStaleNaN(histograms[n].H.Sum) {
+					histograms = histograms[:n]
+					continue loop
+				}
+				if ev.currentSamples >= ev.maxSamples {
+					ev.error(ErrTooManySamples(env))
+				}
+				ev.currentSamples += histograms[n].size()
 			}
 		case chunkenc.ValFloat:
 			t, f := buf.At()
@@ -2108,7 +2114,12 @@ loop:
 				if floats == nil {
 					floats = getFPointSlice(16)
 				}
-				floats = append(floats, FPoint{T: t, F: f})
+				if n := len(floats); n < cap(floats) {
+					floats = floats[:n+1]
+					floats[n].T, floats[n].F = t, f
+				} else {
+					floats = append(floats, FPoint{T: t, F: f})
+				}
 			}
 		}
 	}
diff --git a/storage/buffer.go b/storage/buffer.go
index f686796caf9..49dfbd29993 100644
--- a/storage/buffer.go
+++ b/storage/buffer.go
@@ -74,7 +74,7 @@ func (b *BufferedSeriesIterator) PeekBack(n int) (sample chunks.Sample, ok bool)
 
 // Buffer returns an iterator over the buffered data. Invalidates previously
 // returned iterators.
-func (b *BufferedSeriesIterator) Buffer() chunkenc.Iterator {
+func (b *BufferedSeriesIterator) Buffer() *sampleRingIterator {
 	return b.buf.iterator()
 }
 
@@ -304,7 +304,7 @@ func (r *sampleRing) reset() {
 }
 
 // Returns the current iterator. Invalidates previously returned iterators.
-func (r *sampleRing) iterator() chunkenc.Iterator {
+func (r *sampleRing) iterator() *sampleRingIterator {
 	r.it.r = r
 	r.it.i = -1
 	return &r.it
@@ -374,9 +374,9 @@ func (it *sampleRingIterator) AtHistogram() (int64, *histogram.Histogram) {
 	return it.t, it.h
 }
 
-func (it *sampleRingIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (it *sampleRingIterator) AtFloatHistogram(fh *histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	if it.fh == nil {
-		return it.t, it.h.ToFloat(nil)
+		return it.t, it.h.ToFloat(fh)
 	}
 	return it.t, it.fh
 }
diff --git a/storage/buffer_test.go b/storage/buffer_test.go
index 84f94a008fa..12e6ff0f057 100644
--- a/storage/buffer_test.go
+++ b/storage/buffer_test.go
@@ -243,11 +243,11 @@ func TestBufferedSeriesIteratorMixedHistograms(t *testing.T) {
 	buf := it.Buffer()
 
 	require.Equal(t, chunkenc.ValFloatHistogram, buf.Next())
-	_, fh := buf.AtFloatHistogram()
+	_, fh := buf.AtFloatHistogram(nil)
 	require.Equal(t, histograms[0].ToFloat(nil), fh)
 
 	require.Equal(t, chunkenc.ValHistogram, buf.Next())
-	_, fh = buf.AtFloatHistogram()
+	_, fh = buf.AtFloatHistogram(nil)
 	require.Equal(t, histograms[1].ToFloat(nil), fh)
 }
 

From 5082655392fe2eb036f24da51b54ca050496368a Mon Sep 17 00:00:00 2001
From: Arthur Silva Sens <arthur.sens@coralogix.com>
Date: Mon, 11 Dec 2023 05:43:42 -0300
Subject: [PATCH 016/132] Append Created Timestamps (#12733)

* Append created timestamps.

Signed-off-by: Arthur Silva Sens <arthur.sens@coralogix.com>

* Log when created timestamps are ignored

Signed-off-by: Arthur Silva Sens <arthur.sens@coralogix.com>

* Proposed changes to Append CT PR.

Changes:

* Changed textparse Parser interface for consistency and robustness.
* Changed CT interface to be more explicit and handle validation.
* Simplified test, change scrapeManager to allow testability.
* Added TODOs.

Signed-off-by: bwplotka <bwplotka@gmail.com>

* Updates.

Signed-off-by: bwplotka <bwplotka@gmail.com>

* Addressed comments.

Signed-off-by: bwplotka <bwplotka@gmail.com>

* Refactor head_appender test

Signed-off-by: Arthur Silva Sens <arthur.sens@coralogix.com>

* Fix linter issues

Signed-off-by: Arthur Silva Sens <arthur.sens@coralogix.com>

* Use model.Sample in head appender test

Signed-off-by: Arthur Silva Sens <arthur.sens@coralogix.com>

---------

Signed-off-by: Arthur Silva Sens <arthur.sens@coralogix.com>
Signed-off-by: bwplotka <bwplotka@gmail.com>
Co-authored-by: bwplotka <bwplotka@gmail.com>
---
 cmd/prometheus/main.go                |  14 ++-
 config/config.go                      |   9 +-
 model/textparse/interface.go          |  10 +-
 model/textparse/openmetricsparse.go   |   9 +-
 model/textparse/promparse.go          |   9 +-
 model/textparse/protobufparse.go      |  22 ++--
 model/textparse/protobufparse_test.go |  34 +++---
 scrape/helpers_test.go                |  57 ++++++++++
 scrape/manager.go                     |   6 +
 scrape/manager_test.go                | 153 ++++++++++++++++++++++++++
 scrape/scrape.go                      |  39 +++++--
 scrape/scrape_test.go                 |   8 +-
 storage/fanout.go                     |  14 +++
 storage/interface.go                  |  26 +++++
 storage/remote/write.go               |   5 +
 storage/remote/write_handler_test.go  |   5 +
 tsdb/agent/db.go                      |   5 +
 tsdb/head.go                          |   4 +
 tsdb/head_append.go                   |  95 +++++++++++++---
 tsdb/head_test.go                     |  91 +++++++++++++++
 util/runutil/runutil.go               |  37 +++++++
 21 files changed, 578 insertions(+), 74 deletions(-)
 create mode 100644 util/runutil/runutil.go

diff --git a/cmd/prometheus/main.go b/cmd/prometheus/main.go
index dfafe66c6e5..106f9d05c5b 100644
--- a/cmd/prometheus/main.go
+++ b/cmd/prometheus/main.go
@@ -206,9 +206,15 @@ func (c *flagConfig) setFeatureListOptions(logger log.Logger) error {
 			case "native-histograms":
 				c.tsdb.EnableNativeHistograms = true
 				// Change relevant global variables. Hacky, but it's hard to pass a new option or default to unmarshallers.
-				config.DefaultConfig.GlobalConfig.ScrapeProtocols = config.DefaultNativeHistogramScrapeProtocols
-				config.DefaultGlobalConfig.ScrapeProtocols = config.DefaultNativeHistogramScrapeProtocols
+				config.DefaultConfig.GlobalConfig.ScrapeProtocols = config.DefaultProtoFirstScrapeProtocols
+				config.DefaultGlobalConfig.ScrapeProtocols = config.DefaultProtoFirstScrapeProtocols
 				level.Info(logger).Log("msg", "Experimental native histogram support enabled. Changed default scrape_protocols to prefer PrometheusProto format.", "global.scrape_protocols", fmt.Sprintf("%v", config.DefaultGlobalConfig.ScrapeProtocols))
+			case "created-timestamp-zero-ingestion":
+				c.scrape.EnableCreatedTimestampZeroIngestion = true
+				// Change relevant global variables. Hacky, but it's hard to pass a new option or default to unmarshallers.
+				config.DefaultConfig.GlobalConfig.ScrapeProtocols = config.DefaultProtoFirstScrapeProtocols
+				config.DefaultGlobalConfig.ScrapeProtocols = config.DefaultProtoFirstScrapeProtocols
+				level.Info(logger).Log("msg", "Experimental created timestamp zero ingestion enabled. Changed default scrape_protocols to prefer PrometheusProto format.", "global.scrape_protocols", fmt.Sprintf("%v", config.DefaultGlobalConfig.ScrapeProtocols))
 			case "":
 				continue
 			case "promql-at-modifier", "promql-negative-offset":
@@ -1449,6 +1455,10 @@ func (n notReadyAppender) UpdateMetadata(ref storage.SeriesRef, l labels.Labels,
 	return 0, tsdb.ErrNotReady
 }
 
+func (n notReadyAppender) AppendCTZeroSample(ref storage.SeriesRef, l labels.Labels, t, ct int64) (storage.SeriesRef, error) {
+	return 0, tsdb.ErrNotReady
+}
+
 func (n notReadyAppender) Commit() error { return tsdb.ErrNotReady }
 
 func (n notReadyAppender) Rollback() error { return tsdb.ErrNotReady }
diff --git a/config/config.go b/config/config.go
index b832ac9a172..ddcca84dc78 100644
--- a/config/config.go
+++ b/config/config.go
@@ -454,12 +454,19 @@ var (
 		OpenMetricsText1_0_0: "application/openmetrics-text;version=1.0.0",
 	}
 
+	// DefaultScrapeProtocols is the set of scrape protocols that will be proposed
+	// to scrape target, ordered by priority.
 	DefaultScrapeProtocols = []ScrapeProtocol{
 		OpenMetricsText1_0_0,
 		OpenMetricsText0_0_1,
 		PrometheusText0_0_4,
 	}
-	DefaultNativeHistogramScrapeProtocols = []ScrapeProtocol{
+
+	// DefaultProtoFirstScrapeProtocols is like DefaultScrapeProtocols, but it
+	// favors protobuf Prometheus exposition format.
+	// Used by default for certain feature-flags like
+	// "native-histograms" and "created-timestamp-zero-ingestion".
+	DefaultProtoFirstScrapeProtocols = []ScrapeProtocol{
 		PrometheusProto,
 		OpenMetricsText1_0_0,
 		OpenMetricsText0_0_1,
diff --git a/model/textparse/interface.go b/model/textparse/interface.go
index 2f5fdbc3bf1..df4259c85c9 100644
--- a/model/textparse/interface.go
+++ b/model/textparse/interface.go
@@ -16,8 +16,6 @@ package textparse
 import (
 	"mime"
 
-	"github.com/gogo/protobuf/types"
-
 	"github.com/prometheus/prometheus/model/exemplar"
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
@@ -66,10 +64,10 @@ type Parser interface {
 	// retrieved (including the case where no exemplars exist at all).
 	Exemplar(l *exemplar.Exemplar) bool
 
-	// CreatedTimestamp writes the created timestamp of the current sample
-	// into the passed timestamp. It returns false if no created timestamp
-	// exists or if the metric type does not support created timestamps.
-	CreatedTimestamp(ct *types.Timestamp) bool
+	// CreatedTimestamp returns the created timestamp (in milliseconds) for the
+	// current sample. It returns nil if it is unknown e.g. if it wasn't set,
+	// if the scrape protocol or metric type does not support created timestamps.
+	CreatedTimestamp() *int64
 
 	// Next advances the parser to the next sample. It returns false if no
 	// more samples were read or an error occurred.
diff --git a/model/textparse/openmetricsparse.go b/model/textparse/openmetricsparse.go
index bb507554419..f0c383723d3 100644
--- a/model/textparse/openmetricsparse.go
+++ b/model/textparse/openmetricsparse.go
@@ -24,8 +24,6 @@ import (
 	"strings"
 	"unicode/utf8"
 
-	"github.com/gogo/protobuf/types"
-
 	"github.com/prometheus/prometheus/model/exemplar"
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
@@ -213,9 +211,10 @@ func (p *OpenMetricsParser) Exemplar(e *exemplar.Exemplar) bool {
 	return true
 }
 
-// CreatedTimestamp returns false because OpenMetricsParser does not support created timestamps (yet).
-func (p *OpenMetricsParser) CreatedTimestamp(_ *types.Timestamp) bool {
-	return false
+// CreatedTimestamp returns nil as it's not implemented yet.
+// TODO(bwplotka): https://github.com/prometheus/prometheus/issues/12980
+func (p *OpenMetricsParser) CreatedTimestamp() *int64 {
+	return nil
 }
 
 // nextToken returns the next token from the openMetricsLexer.
diff --git a/model/textparse/promparse.go b/model/textparse/promparse.go
index b3fa2d8a6df..935801fb9e6 100644
--- a/model/textparse/promparse.go
+++ b/model/textparse/promparse.go
@@ -26,8 +26,6 @@ import (
 	"unicode/utf8"
 	"unsafe"
 
-	"github.com/gogo/protobuf/types"
-
 	"github.com/prometheus/prometheus/model/exemplar"
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
@@ -247,9 +245,10 @@ func (p *PromParser) Exemplar(*exemplar.Exemplar) bool {
 	return false
 }
 
-// CreatedTimestamp returns false because PromParser does not support created timestamps.
-func (p *PromParser) CreatedTimestamp(_ *types.Timestamp) bool {
-	return false
+// CreatedTimestamp returns nil as it's not implemented yet.
+// TODO(bwplotka): https://github.com/prometheus/prometheus/issues/12980
+func (p *PromParser) CreatedTimestamp() *int64 {
+	return nil
 }
 
 // nextToken returns the next token from the promlexer. It skips over tabs
diff --git a/model/textparse/protobufparse.go b/model/textparse/protobufparse.go
index 23afb5c5962..baede7e1dd5 100644
--- a/model/textparse/protobufparse.go
+++ b/model/textparse/protobufparse.go
@@ -360,22 +360,26 @@ func (p *ProtobufParser) Exemplar(ex *exemplar.Exemplar) bool {
 	return true
 }
 
-func (p *ProtobufParser) CreatedTimestamp(ct *types.Timestamp) bool {
-	var foundCT *types.Timestamp
+// CreatedTimestamp returns CT or nil if CT is not present or
+// invalid (as timestamp e.g. negative value) on counters, summaries or histograms.
+func (p *ProtobufParser) CreatedTimestamp() *int64 {
+	var ct *types.Timestamp
 	switch p.mf.GetType() {
 	case dto.MetricType_COUNTER:
-		foundCT = p.mf.GetMetric()[p.metricPos].GetCounter().GetCreatedTimestamp()
+		ct = p.mf.GetMetric()[p.metricPos].GetCounter().GetCreatedTimestamp()
 	case dto.MetricType_SUMMARY:
-		foundCT = p.mf.GetMetric()[p.metricPos].GetSummary().GetCreatedTimestamp()
+		ct = p.mf.GetMetric()[p.metricPos].GetSummary().GetCreatedTimestamp()
 	case dto.MetricType_HISTOGRAM, dto.MetricType_GAUGE_HISTOGRAM:
-		foundCT = p.mf.GetMetric()[p.metricPos].GetHistogram().GetCreatedTimestamp()
+		ct = p.mf.GetMetric()[p.metricPos].GetHistogram().GetCreatedTimestamp()
 	default:
 	}
-	if foundCT == nil {
-		return false
+	ctAsTime, err := types.TimestampFromProto(ct)
+	if err != nil {
+		// Errors means ct == nil or invalid timestamp, which we silently ignore.
+		return nil
 	}
-	*ct = *foundCT
-	return true
+	ctMilis := ctAsTime.UnixMilli()
+	return &ctMilis
 }
 
 // Next advances the parser to the next "sample" (emulating the behavior of a
diff --git a/model/textparse/protobufparse_test.go b/model/textparse/protobufparse_test.go
index e062e64dd13..c5b672dbc0e 100644
--- a/model/textparse/protobufparse_test.go
+++ b/model/textparse/protobufparse_test.go
@@ -21,7 +21,6 @@ import (
 	"testing"
 
 	"github.com/gogo/protobuf/proto"
-	"github.com/gogo/protobuf/types"
 	"github.com/stretchr/testify/require"
 
 	"github.com/prometheus/prometheus/model/exemplar"
@@ -630,7 +629,7 @@ func TestProtobufParse(t *testing.T) {
 		shs     *histogram.Histogram
 		fhs     *histogram.FloatHistogram
 		e       []exemplar.Exemplar
-		ct      *types.Timestamp
+		ct      int64
 	}
 
 	inputBuf := createTestProtoBuf(t)
@@ -1069,7 +1068,7 @@ func TestProtobufParse(t *testing.T) {
 				{
 					m:  "test_counter_with_createdtimestamp",
 					v:  42,
-					ct: &types.Timestamp{Seconds: 1, Nanos: 1},
+					ct: 1000,
 					lset: labels.FromStrings(
 						"__name__", "test_counter_with_createdtimestamp",
 					),
@@ -1085,7 +1084,7 @@ func TestProtobufParse(t *testing.T) {
 				{
 					m:  "test_summary_with_createdtimestamp_count",
 					v:  42,
-					ct: &types.Timestamp{Seconds: 1, Nanos: 1},
+					ct: 1000,
 					lset: labels.FromStrings(
 						"__name__", "test_summary_with_createdtimestamp_count",
 					),
@@ -1093,7 +1092,7 @@ func TestProtobufParse(t *testing.T) {
 				{
 					m:  "test_summary_with_createdtimestamp_sum",
 					v:  1.234,
-					ct: &types.Timestamp{Seconds: 1, Nanos: 1},
+					ct: 1000,
 					lset: labels.FromStrings(
 						"__name__", "test_summary_with_createdtimestamp_sum",
 					),
@@ -1108,7 +1107,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:  "test_histogram_with_createdtimestamp",
-					ct: &types.Timestamp{Seconds: 1, Nanos: 1},
+					ct: 1000,
 					shs: &histogram.Histogram{
 						CounterResetHint: histogram.UnknownCounterReset,
 						PositiveSpans:    []histogram.Span{},
@@ -1128,7 +1127,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:  "test_gaugehistogram_with_createdtimestamp",
-					ct: &types.Timestamp{Seconds: 1, Nanos: 1},
+					ct: 1000,
 					shs: &histogram.Histogram{
 						CounterResetHint: histogram.GaugeType,
 						PositiveSpans:    []histogram.Span{},
@@ -1887,7 +1886,7 @@ func TestProtobufParse(t *testing.T) {
 				{ // 83
 					m:  "test_counter_with_createdtimestamp",
 					v:  42,
-					ct: &types.Timestamp{Seconds: 1, Nanos: 1},
+					ct: 1000,
 					lset: labels.FromStrings(
 						"__name__", "test_counter_with_createdtimestamp",
 					),
@@ -1903,7 +1902,7 @@ func TestProtobufParse(t *testing.T) {
 				{ // 86
 					m:  "test_summary_with_createdtimestamp_count",
 					v:  42,
-					ct: &types.Timestamp{Seconds: 1, Nanos: 1},
+					ct: 1000,
 					lset: labels.FromStrings(
 						"__name__", "test_summary_with_createdtimestamp_count",
 					),
@@ -1911,7 +1910,7 @@ func TestProtobufParse(t *testing.T) {
 				{ // 87
 					m:  "test_summary_with_createdtimestamp_sum",
 					v:  1.234,
-					ct: &types.Timestamp{Seconds: 1, Nanos: 1},
+					ct: 1000,
 					lset: labels.FromStrings(
 						"__name__", "test_summary_with_createdtimestamp_sum",
 					),
@@ -1926,7 +1925,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 90
 					m:  "test_histogram_with_createdtimestamp",
-					ct: &types.Timestamp{Seconds: 1, Nanos: 1},
+					ct: 1000,
 					shs: &histogram.Histogram{
 						CounterResetHint: histogram.UnknownCounterReset,
 						PositiveSpans:    []histogram.Span{},
@@ -1946,7 +1945,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 93
 					m:  "test_gaugehistogram_with_createdtimestamp",
-					ct: &types.Timestamp{Seconds: 1, Nanos: 1},
+					ct: 1000,
 					shs: &histogram.Histogram{
 						CounterResetHint: histogram.GaugeType,
 						PositiveSpans:    []histogram.Span{},
@@ -1981,10 +1980,9 @@ func TestProtobufParse(t *testing.T) {
 					m, ts, v := p.Series()
 
 					var e exemplar.Exemplar
-					var ct types.Timestamp
 					p.Metric(&res)
 					eFound := p.Exemplar(&e)
-					ctFound := p.CreatedTimestamp(&ct)
+					ct := p.CreatedTimestamp()
 					require.Equal(t, exp[i].m, string(m), "i: %d", i)
 					if ts != nil {
 						require.Equal(t, exp[i].t, *ts, "i: %d", i)
@@ -2000,11 +1998,11 @@ func TestProtobufParse(t *testing.T) {
 						require.Equal(t, exp[i].e[0], e, "i: %d", i)
 						require.False(t, p.Exemplar(&e), "too many exemplars returned, i: %d", i)
 					}
-					if exp[i].ct != nil {
-						require.True(t, ctFound, "i: %d", i)
-						require.Equal(t, exp[i].ct.String(), ct.String(), "i: %d", i)
+					if exp[i].ct != 0 {
+						require.NotNilf(t, ct, "i: %d", i)
+						require.Equal(t, exp[i].ct, *ct, "i: %d", i)
 					} else {
-						require.False(t, ctFound, "i: %d", i)
+						require.Nilf(t, ct, "i: %d", i)
 					}
 
 				case EntryHistogram:
diff --git a/scrape/helpers_test.go b/scrape/helpers_test.go
index c580a50510e..43ee0fcecf8 100644
--- a/scrape/helpers_test.go
+++ b/scrape/helpers_test.go
@@ -14,10 +14,18 @@
 package scrape
 
 import (
+	"bytes"
 	"context"
+	"encoding/binary"
 	"fmt"
 	"math/rand"
 	"strings"
+	"sync"
+	"testing"
+
+	"github.com/gogo/protobuf/proto"
+	dto "github.com/prometheus/client_model/go"
+	"github.com/stretchr/testify/require"
 
 	"github.com/prometheus/prometheus/model/exemplar"
 	"github.com/prometheus/prometheus/model/histogram"
@@ -50,6 +58,10 @@ func (a nopAppender) UpdateMetadata(storage.SeriesRef, labels.Labels, metadata.M
 	return 0, nil
 }
 
+func (a nopAppender) AppendCTZeroSample(storage.SeriesRef, labels.Labels, int64, int64) (storage.SeriesRef, error) {
+	return 0, nil
+}
+
 func (a nopAppender) Commit() error   { return nil }
 func (a nopAppender) Rollback() error { return nil }
 
@@ -65,9 +77,19 @@ type histogramSample struct {
 	fh *histogram.FloatHistogram
 }
 
+type collectResultAppendable struct {
+	*collectResultAppender
+}
+
+func (a *collectResultAppendable) Appender(_ context.Context) storage.Appender {
+	return a
+}
+
 // collectResultAppender records all samples that were added through the appender.
 // It can be used as its zero value or be backed by another appender it writes samples through.
 type collectResultAppender struct {
+	mtx sync.Mutex
+
 	next                 storage.Appender
 	resultFloats         []floatSample
 	pendingFloats        []floatSample
@@ -82,6 +104,8 @@ type collectResultAppender struct {
 }
 
 func (a *collectResultAppender) Append(ref storage.SeriesRef, lset labels.Labels, t int64, v float64) (storage.SeriesRef, error) {
+	a.mtx.Lock()
+	defer a.mtx.Unlock()
 	a.pendingFloats = append(a.pendingFloats, floatSample{
 		metric: lset,
 		t:      t,
@@ -103,6 +127,8 @@ func (a *collectResultAppender) Append(ref storage.SeriesRef, lset labels.Labels
 }
 
 func (a *collectResultAppender) AppendExemplar(ref storage.SeriesRef, l labels.Labels, e exemplar.Exemplar) (storage.SeriesRef, error) {
+	a.mtx.Lock()
+	defer a.mtx.Unlock()
 	a.pendingExemplars = append(a.pendingExemplars, e)
 	if a.next == nil {
 		return 0, nil
@@ -112,6 +138,8 @@ func (a *collectResultAppender) AppendExemplar(ref storage.SeriesRef, l labels.L
 }
 
 func (a *collectResultAppender) AppendHistogram(ref storage.SeriesRef, l labels.Labels, t int64, h *histogram.Histogram, fh *histogram.FloatHistogram) (storage.SeriesRef, error) {
+	a.mtx.Lock()
+	defer a.mtx.Unlock()
 	a.pendingHistograms = append(a.pendingHistograms, histogramSample{h: h, fh: fh, t: t})
 	if a.next == nil {
 		return 0, nil
@@ -121,6 +149,8 @@ func (a *collectResultAppender) AppendHistogram(ref storage.SeriesRef, l labels.
 }
 
 func (a *collectResultAppender) UpdateMetadata(ref storage.SeriesRef, l labels.Labels, m metadata.Metadata) (storage.SeriesRef, error) {
+	a.mtx.Lock()
+	defer a.mtx.Unlock()
 	a.pendingMetadata = append(a.pendingMetadata, m)
 	if ref == 0 {
 		ref = storage.SeriesRef(rand.Uint64())
@@ -132,7 +162,13 @@ func (a *collectResultAppender) UpdateMetadata(ref storage.SeriesRef, l labels.L
 	return a.next.UpdateMetadata(ref, l, m)
 }
 
+func (a *collectResultAppender) AppendCTZeroSample(ref storage.SeriesRef, l labels.Labels, t, ct int64) (storage.SeriesRef, error) {
+	return a.Append(ref, l, ct, 0.0)
+}
+
 func (a *collectResultAppender) Commit() error {
+	a.mtx.Lock()
+	defer a.mtx.Unlock()
 	a.resultFloats = append(a.resultFloats, a.pendingFloats...)
 	a.resultExemplars = append(a.resultExemplars, a.pendingExemplars...)
 	a.resultHistograms = append(a.resultHistograms, a.pendingHistograms...)
@@ -148,6 +184,8 @@ func (a *collectResultAppender) Commit() error {
 }
 
 func (a *collectResultAppender) Rollback() error {
+	a.mtx.Lock()
+	defer a.mtx.Unlock()
 	a.rolledbackFloats = a.pendingFloats
 	a.rolledbackHistograms = a.pendingHistograms
 	a.pendingFloats = nil
@@ -171,3 +209,22 @@ func (a *collectResultAppender) String() string {
 	}
 	return sb.String()
 }
+
+// protoMarshalDelimited marshals a MetricFamily into a delimited
+// Prometheus proto exposition format bytes (known as 'encoding=delimited`)
+//
+// See also https://eli.thegreenplace.net/2011/08/02/length-prefix-framing-for-protocol-buffers
+func protoMarshalDelimited(t *testing.T, mf *dto.MetricFamily) []byte {
+	t.Helper()
+
+	protoBuf, err := proto.Marshal(mf)
+	require.NoError(t, err)
+
+	varintBuf := make([]byte, binary.MaxVarintLen32)
+	varintLength := binary.PutUvarint(varintBuf, uint64(len(protoBuf)))
+
+	buf := &bytes.Buffer{}
+	buf.Write(varintBuf[:varintLength])
+	buf.Write(protoBuf)
+	return buf.Bytes()
+}
diff --git a/scrape/manager.go b/scrape/manager.go
index 3b70e48a13e..faa46f54d65 100644
--- a/scrape/manager.go
+++ b/scrape/manager.go
@@ -78,9 +78,15 @@ type Options struct {
 	EnableMetadataStorage bool
 	// Option to increase the interval used by scrape manager to throttle target groups updates.
 	DiscoveryReloadInterval model.Duration
+	// Option to enable the ingestion of the created timestamp as a synthetic zero sample.
+	// See: https://github.com/prometheus/proposals/blob/main/proposals/2023-06-13_created-timestamp.md
+	EnableCreatedTimestampZeroIngestion bool
 
 	// Optional HTTP client options to use when scraping.
 	HTTPClientOptions []config_util.HTTPClientOption
+
+	// private option for testability.
+	skipOffsetting bool
 }
 
 // Manager maintains a set of scrape pools and manages start/stop cycles
diff --git a/scrape/manager_test.go b/scrape/manager_test.go
index a689c469d43..524424269ea 100644
--- a/scrape/manager_test.go
+++ b/scrape/manager_test.go
@@ -15,14 +15,23 @@ package scrape
 
 import (
 	"context"
+	"fmt"
 	"net/http"
+	"net/http/httptest"
+	"net/url"
+	"os"
 	"strconv"
+	"sync"
 	"testing"
 	"time"
 
+	"github.com/go-kit/log"
+	"github.com/gogo/protobuf/proto"
 	"github.com/prometheus/client_golang/prometheus"
+	dto "github.com/prometheus/client_model/go"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
+	"google.golang.org/protobuf/types/known/timestamppb"
 	"gopkg.in/yaml.v2"
 
 	"github.com/prometheus/prometheus/config"
@@ -30,6 +39,7 @@ import (
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 	"github.com/prometheus/prometheus/model/labels"
 	"github.com/prometheus/prometheus/model/relabel"
+	"github.com/prometheus/prometheus/util/runutil"
 )
 
 func TestPopulateLabels(t *testing.T) {
@@ -714,3 +724,146 @@ scrape_configs:
 	reload(scrapeManager, cfg2)
 	require.ElementsMatch(t, []string{"job1", "job3"}, scrapeManager.ScrapePools())
 }
+
+// TestManagerCTZeroIngestion tests scrape manager for CT cases.
+func TestManagerCTZeroIngestion(t *testing.T) {
+	const mName = "expected_counter"
+
+	for _, tc := range []struct {
+		name                  string
+		counterSample         *dto.Counter
+		enableCTZeroIngestion bool
+
+		expectedValues []float64
+	}{
+		{
+			name: "disabled with CT on counter",
+			counterSample: &dto.Counter{
+				Value: proto.Float64(1.0),
+				// Timestamp does not matter as long as it exists in this test.
+				CreatedTimestamp: timestamppb.Now(),
+			},
+			expectedValues: []float64{1.0},
+		},
+		{
+			name: "enabled with CT on counter",
+			counterSample: &dto.Counter{
+				Value: proto.Float64(1.0),
+				// Timestamp does not matter as long as it exists in this test.
+				CreatedTimestamp: timestamppb.Now(),
+			},
+			enableCTZeroIngestion: true,
+			expectedValues:        []float64{0.0, 1.0},
+		},
+		{
+			name: "enabled without CT on counter",
+			counterSample: &dto.Counter{
+				Value: proto.Float64(1.0),
+			},
+			enableCTZeroIngestion: true,
+			expectedValues:        []float64{1.0},
+		},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			app := &collectResultAppender{}
+			scrapeManager, err := NewManager(
+				&Options{
+					EnableCreatedTimestampZeroIngestion: tc.enableCTZeroIngestion,
+					skipOffsetting:                      true,
+				},
+				log.NewLogfmtLogger(os.Stderr),
+				&collectResultAppendable{app},
+				prometheus.NewRegistry(),
+			)
+			require.NoError(t, err)
+
+			require.NoError(t, scrapeManager.ApplyConfig(&config.Config{
+				GlobalConfig: config.GlobalConfig{
+					// Disable regular scrapes.
+					ScrapeInterval: model.Duration(9999 * time.Minute),
+					ScrapeTimeout:  model.Duration(5 * time.Second),
+					// Ensure the proto is chosen. We need proto as it's the only protocol
+					// with the CT parsing support.
+					ScrapeProtocols: []config.ScrapeProtocol{config.PrometheusProto},
+				},
+				ScrapeConfigs: []*config.ScrapeConfig{{JobName: "test"}},
+			}))
+
+			once := sync.Once{}
+			// Start fake HTTP target to that allow one scrape only.
+			server := httptest.NewServer(
+				http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+					fail := true
+					once.Do(func() {
+						fail = false
+						w.Header().Set("Content-Type", `application/vnd.google.protobuf; proto=io.prometheus.client.MetricFamily; encoding=delimited`)
+
+						ctrType := dto.MetricType_COUNTER
+						w.Write(protoMarshalDelimited(t, &dto.MetricFamily{
+							Name:   proto.String(mName),
+							Type:   &ctrType,
+							Metric: []*dto.Metric{{Counter: tc.counterSample}},
+						}))
+					})
+
+					if fail {
+						w.WriteHeader(http.StatusInternalServerError)
+					}
+				}),
+			)
+			defer server.Close()
+
+			serverURL, err := url.Parse(server.URL)
+			require.NoError(t, err)
+
+			// Add fake target directly into tsets + reload. Normally users would use
+			// Manager.Run and wait for minimum 5s refresh interval.
+			scrapeManager.updateTsets(map[string][]*targetgroup.Group{
+				"test": {{
+					Targets: []model.LabelSet{{
+						model.SchemeLabel:  model.LabelValue(serverURL.Scheme),
+						model.AddressLabel: model.LabelValue(serverURL.Host),
+					}},
+				}},
+			})
+			scrapeManager.reload()
+
+			// Wait for one scrape.
+			ctx, cancel := context.WithTimeout(context.Background(), 1*time.Minute)
+			defer cancel()
+			require.NoError(t, runutil.Retry(100*time.Millisecond, ctx.Done(), func() error {
+				if countFloatSamples(app, mName) != len(tc.expectedValues) {
+					return fmt.Errorf("expected %v samples", tc.expectedValues)
+				}
+				return nil
+			}), "after 1 minute")
+			scrapeManager.Stop()
+
+			require.Equal(t, tc.expectedValues, getResultFloats(app, mName))
+		})
+	}
+}
+
+func countFloatSamples(a *collectResultAppender, expectedMetricName string) (count int) {
+	a.mtx.Lock()
+	defer a.mtx.Unlock()
+
+	for _, f := range a.resultFloats {
+		if f.metric.Get(model.MetricNameLabel) == expectedMetricName {
+			count++
+		}
+	}
+	return count
+}
+
+func getResultFloats(app *collectResultAppender, expectedMetricName string) (result []float64) {
+	app.mtx.Lock()
+	defer app.mtx.Unlock()
+
+	for _, f := range app.resultFloats {
+		if f.metric.Get(model.MetricNameLabel) == expectedMetricName {
+			result = append(result, f.f)
+		}
+	}
+	return result
+}
diff --git a/scrape/scrape.go b/scrape/scrape.go
index 9a0ba1d009b..be27a5d4874 100644
--- a/scrape/scrape.go
+++ b/scrape/scrape.go
@@ -106,9 +106,10 @@ type scrapeLoopOptions struct {
 	interval                 time.Duration
 	timeout                  time.Duration
 	scrapeClassicHistograms  bool
-	mrc                      []*relabel.Config
-	cache                    *scrapeCache
-	enableCompression        bool
+
+	mrc               []*relabel.Config
+	cache             *scrapeCache
+	enableCompression bool
 }
 
 const maxAheadTime = 10 * time.Minute
@@ -168,11 +169,13 @@ func newScrapePool(cfg *config.ScrapeConfig, app storage.Appendable, offsetSeed
 			opts.interval,
 			opts.timeout,
 			opts.scrapeClassicHistograms,
+			options.EnableCreatedTimestampZeroIngestion,
 			options.ExtraMetrics,
 			options.EnableMetadataStorage,
 			opts.target,
 			options.PassMetadataInContext,
 			metrics,
+			options.skipOffsetting,
 		)
 	}
 	sp.metrics.targetScrapePoolTargetLimit.WithLabelValues(sp.config.JobName).Set(float64(sp.config.TargetLimit))
@@ -787,6 +790,7 @@ type scrapeLoop struct {
 	interval                 time.Duration
 	timeout                  time.Duration
 	scrapeClassicHistograms  bool
+	enableCTZeroIngestion    bool
 
 	appender            func(ctx context.Context) storage.Appender
 	sampleMutator       labelsMutator
@@ -804,6 +808,8 @@ type scrapeLoop struct {
 	appendMetadataToWAL bool
 
 	metrics *scrapeMetrics
+
+	skipOffsetting bool // For testability.
 }
 
 // scrapeCache tracks mappings of exposed metric strings to label sets and
@@ -1076,11 +1082,13 @@ func newScrapeLoop(ctx context.Context,
 	interval time.Duration,
 	timeout time.Duration,
 	scrapeClassicHistograms bool,
+	enableCTZeroIngestion bool,
 	reportExtraMetrics bool,
 	appendMetadataToWAL bool,
 	target *Target,
 	passMetadataInContext bool,
 	metrics *scrapeMetrics,
+	skipOffsetting bool,
 ) *scrapeLoop {
 	if l == nil {
 		l = log.NewNopLogger()
@@ -1124,9 +1132,11 @@ func newScrapeLoop(ctx context.Context,
 		interval:                 interval,
 		timeout:                  timeout,
 		scrapeClassicHistograms:  scrapeClassicHistograms,
+		enableCTZeroIngestion:    enableCTZeroIngestion,
 		reportExtraMetrics:       reportExtraMetrics,
 		appendMetadataToWAL:      appendMetadataToWAL,
 		metrics:                  metrics,
+		skipOffsetting:           skipOffsetting,
 	}
 	sl.ctx, sl.cancel = context.WithCancel(ctx)
 
@@ -1134,12 +1144,14 @@ func newScrapeLoop(ctx context.Context,
 }
 
 func (sl *scrapeLoop) run(errc chan<- error) {
-	select {
-	case <-time.After(sl.scraper.offset(sl.interval, sl.offsetSeed)):
-		// Continue after a scraping offset.
-	case <-sl.ctx.Done():
-		close(sl.stopped)
-		return
+	if !sl.skipOffsetting {
+		select {
+		case <-time.After(sl.scraper.offset(sl.interval, sl.offsetSeed)):
+			// Continue after a scraping offset.
+		case <-sl.ctx.Done():
+			close(sl.stopped)
+			return
+		}
 	}
 
 	var last time.Time
@@ -1557,6 +1569,15 @@ loop:
 			updateMetadata(lset, true)
 		}
 
+		if ctMs := p.CreatedTimestamp(); sl.enableCTZeroIngestion && ctMs != nil {
+			ref, err = app.AppendCTZeroSample(ref, lset, t, *ctMs)
+			if err != nil && !errors.Is(err, storage.ErrOutOfOrderCT) { // OOO is a common case, ignoring completely for now.
+				// CT is an experimental feature. For now, we don't need to fail the
+				// scrape on errors updating the created timestamp, log debug.
+				level.Debug(sl.l).Log("msg", "Error when appending CT in scrape loop", "series", string(met), "ct", *ctMs, "t", t, "err", err)
+			}
+		}
+
 		if isHistogram {
 			if h != nil {
 				ref, err = app.AppendHistogram(ref, lset, t, h, nil)
diff --git a/scrape/scrape_test.go b/scrape/scrape_test.go
index 8dee1f2c74f..90578f2e95f 100644
--- a/scrape/scrape_test.go
+++ b/scrape/scrape_test.go
@@ -660,9 +660,11 @@ func newBasicScrapeLoop(t testing.TB, ctx context.Context, scraper scraper, app
 		false,
 		false,
 		false,
+		false,
 		nil,
 		false,
 		newTestScrapeMetrics(t),
+		false,
 	)
 }
 
@@ -801,9 +803,11 @@ func TestScrapeLoopRun(t *testing.T) {
 		false,
 		false,
 		false,
+		false,
 		nil,
 		false,
 		scrapeMetrics,
+		false,
 	)
 
 	// The loop must terminate during the initial offset if the context
@@ -945,9 +949,11 @@ func TestScrapeLoopMetadata(t *testing.T) {
 		false,
 		false,
 		false,
+		false,
 		nil,
 		false,
 		scrapeMetrics,
+		false,
 	)
 	defer cancel()
 
@@ -2377,7 +2383,7 @@ func TestTargetScraperScrapeOK(t *testing.T) {
 
 	runTest(acceptHeader(config.DefaultScrapeProtocols))
 	protobufParsing = true
-	runTest(acceptHeader(config.DefaultNativeHistogramScrapeProtocols))
+	runTest(acceptHeader(config.DefaultProtoFirstScrapeProtocols))
 }
 
 func TestTargetScrapeScrapeCancel(t *testing.T) {
diff --git a/storage/fanout.go b/storage/fanout.go
index 33257046f2a..a9a3f904b6c 100644
--- a/storage/fanout.go
+++ b/storage/fanout.go
@@ -202,6 +202,20 @@ func (f *fanoutAppender) UpdateMetadata(ref SeriesRef, l labels.Labels, m metada
 	return ref, nil
 }
 
+func (f *fanoutAppender) AppendCTZeroSample(ref SeriesRef, l labels.Labels, t, ct int64) (SeriesRef, error) {
+	ref, err := f.primary.AppendCTZeroSample(ref, l, t, ct)
+	if err != nil {
+		return ref, err
+	}
+
+	for _, appender := range f.secondaries {
+		if _, err := appender.AppendCTZeroSample(ref, l, t, ct); err != nil {
+			return 0, err
+		}
+	}
+	return ref, nil
+}
+
 func (f *fanoutAppender) Commit() (err error) {
 	err = f.primary.Commit()
 
diff --git a/storage/interface.go b/storage/interface.go
index 2b1b6a63eb3..675e44c0ee6 100644
--- a/storage/interface.go
+++ b/storage/interface.go
@@ -43,6 +43,13 @@ var (
 	ErrExemplarLabelLength         = fmt.Errorf("label length for exemplar exceeds maximum of %d UTF-8 characters", exemplar.ExemplarMaxLabelSetLength)
 	ErrExemplarsDisabled           = fmt.Errorf("exemplar storage is disabled or max exemplars is less than or equal to 0")
 	ErrNativeHistogramsDisabled    = fmt.Errorf("native histograms are disabled")
+
+	// ErrOutOfOrderCT indicates failed append of CT to the storage
+	// due to CT being older the then newer sample.
+	// NOTE(bwplotka): This can be both an instrumentation failure or commonly expected
+	// behaviour, and we currently don't have a way to determine this. As a result
+	// it's recommended to ignore this error for now.
+	ErrOutOfOrderCT = fmt.Errorf("created timestamp out of order, ignoring")
 )
 
 // SeriesRef is a generic series reference. In prometheus it is either a
@@ -237,6 +244,7 @@ type Appender interface {
 	ExemplarAppender
 	HistogramAppender
 	MetadataUpdater
+	CreatedTimestampAppender
 }
 
 // GetRef is an extra interface on Appenders used by downstream projects
@@ -294,6 +302,24 @@ type MetadataUpdater interface {
 	UpdateMetadata(ref SeriesRef, l labels.Labels, m metadata.Metadata) (SeriesRef, error)
 }
 
+// CreatedTimestampAppender provides an interface for appending CT to storage.
+type CreatedTimestampAppender interface {
+	// AppendCTZeroSample adds synthetic zero sample for the given ct timestamp,
+	// which will be associated with given series, labels and the incoming
+	// sample's t (timestamp). AppendCTZeroSample returns error if zero sample can't be
+	// appended, for example when ct is too old, or when it would collide with
+	// incoming sample (sample has priority).
+	//
+	// AppendCTZeroSample has to be called before the corresponding sample Append.
+	// A series reference number is returned which can be used to modify the
+	// CT for the given series in the same or later transactions.
+	// Returned reference numbers are ephemeral and may be rejected in calls
+	// to AppendCTZeroSample() at any point.
+	//
+	// If the reference is 0 it must not be used for caching.
+	AppendCTZeroSample(ref SeriesRef, l labels.Labels, t, ct int64) (SeriesRef, error)
+}
+
 // SeriesSet contains a set of series.
 type SeriesSet interface {
 	Next() bool
diff --git a/storage/remote/write.go b/storage/remote/write.go
index 237f8caa913..66455cb4dd0 100644
--- a/storage/remote/write.go
+++ b/storage/remote/write.go
@@ -303,6 +303,11 @@ func (t *timestampTracker) UpdateMetadata(_ storage.SeriesRef, _ labels.Labels,
 	return 0, nil
 }
 
+func (t *timestampTracker) AppendCTZeroSample(_ storage.SeriesRef, _ labels.Labels, _, _ int64) (storage.SeriesRef, error) {
+	// AppendCTZeroSample is no-op for remote-write for now.
+	return 0, nil
+}
+
 // Commit implements storage.Appender.
 func (t *timestampTracker) Commit() error {
 	t.writeStorage.samplesIn.incr(t.samples + t.exemplars + t.histograms)
diff --git a/storage/remote/write_handler_test.go b/storage/remote/write_handler_test.go
index 839009b2a92..fd5b34ecd2a 100644
--- a/storage/remote/write_handler_test.go
+++ b/storage/remote/write_handler_test.go
@@ -339,3 +339,8 @@ func (m *mockAppendable) UpdateMetadata(_ storage.SeriesRef, _ labels.Labels, _
 	// UpdateMetadata is no-op for remote write (where mockAppendable is being used to test) for now.
 	return 0, nil
 }
+
+func (m *mockAppendable) AppendCTZeroSample(_ storage.SeriesRef, _ labels.Labels, _, _ int64) (storage.SeriesRef, error) {
+	// AppendCTZeroSample is no-op for remote-write for now.
+	return 0, nil
+}
diff --git a/tsdb/agent/db.go b/tsdb/agent/db.go
index 6afef1389be..557fb785404 100644
--- a/tsdb/agent/db.go
+++ b/tsdb/agent/db.go
@@ -962,6 +962,11 @@ func (a *appender) UpdateMetadata(storage.SeriesRef, labels.Labels, metadata.Met
 	return 0, nil
 }
 
+func (a *appender) AppendCTZeroSample(storage.SeriesRef, labels.Labels, int64, int64) (storage.SeriesRef, error) {
+	// TODO(bwplotka): Wire metadata in the Agent's appender.
+	return 0, nil
+}
+
 // Commit submits the collected samples and purges the batch.
 func (a *appender) Commit() error {
 	if err := a.log(); err != nil {
diff --git a/tsdb/head.go b/tsdb/head.go
index 3ff2bee716c..84835735905 100644
--- a/tsdb/head.go
+++ b/tsdb/head.go
@@ -149,6 +149,10 @@ type HeadOptions struct {
 	// EnableNativeHistograms enables the ingestion of native histograms.
 	EnableNativeHistograms atomic.Bool
 
+	// EnableCreatedTimestampZeroIngestion enables the ingestion of the created timestamp as a synthetic zero sample.
+	// See: https://github.com/prometheus/proposals/blob/main/proposals/2023-06-13_created-timestamp.md
+	EnableCreatedTimestampZeroIngestion bool
+
 	ChunkRange int64
 	// ChunkDirRoot is the parent directory of the chunks directory.
 	ChunkDirRoot         string
diff --git a/tsdb/head_append.go b/tsdb/head_append.go
index be53a4f3f6e..afb461afe31 100644
--- a/tsdb/head_append.go
+++ b/tsdb/head_append.go
@@ -87,6 +87,17 @@ func (a *initAppender) UpdateMetadata(ref storage.SeriesRef, l labels.Labels, m
 	return a.app.UpdateMetadata(ref, l, m)
 }
 
+func (a *initAppender) AppendCTZeroSample(ref storage.SeriesRef, lset labels.Labels, t, ct int64) (storage.SeriesRef, error) {
+	if a.app != nil {
+		return a.app.AppendCTZeroSample(ref, lset, t, ct)
+	}
+
+	a.head.initTime(t)
+	a.app = a.head.appender()
+
+	return a.app.AppendCTZeroSample(ref, lset, t, ct)
+}
+
 // initTime initializes a head with the first timestamp. This only needs to be called
 // for a completely fresh head with an empty WAL.
 func (h *Head) initTime(t int64) {
@@ -319,28 +330,11 @@ func (a *headAppender) Append(ref storage.SeriesRef, lset labels.Labels, t int64
 
 	s := a.head.series.getByID(chunks.HeadSeriesRef(ref))
 	if s == nil {
-		// Ensure no empty labels have gotten through.
-		lset = lset.WithoutEmpty()
-		if lset.IsEmpty() {
-			return 0, errors.Wrap(ErrInvalidSample, "empty labelset")
-		}
-
-		if l, dup := lset.HasDuplicateLabelNames(); dup {
-			return 0, errors.Wrap(ErrInvalidSample, fmt.Sprintf(`label name "%s" is not unique`, l))
-		}
-
-		var created bool
 		var err error
-		s, created, err = a.head.getOrCreate(lset.Hash(), lset)
+		s, err = a.getOrCreate(lset)
 		if err != nil {
 			return 0, err
 		}
-		if created {
-			a.series = append(a.series, record.RefSeries{
-				Ref:    s.ref,
-				Labels: lset,
-			})
-		}
 	}
 
 	if value.IsStaleNaN(v) {
@@ -389,6 +383,71 @@ func (a *headAppender) Append(ref storage.SeriesRef, lset labels.Labels, t int64
 	return storage.SeriesRef(s.ref), nil
 }
 
+// AppendCTZeroSample appends synthetic zero sample for ct timestamp. It returns
+// error when sample can't be appended. See
+// storage.CreatedTimestampAppender.AppendCTZeroSample for further documentation.
+func (a *headAppender) AppendCTZeroSample(ref storage.SeriesRef, lset labels.Labels, t, ct int64) (storage.SeriesRef, error) {
+	if ct >= t {
+		return 0, fmt.Errorf("CT is newer or the same as sample's timestamp, ignoring")
+	}
+
+	s := a.head.series.getByID(chunks.HeadSeriesRef(ref))
+	if s == nil {
+		var err error
+		s, err = a.getOrCreate(lset)
+		if err != nil {
+			return 0, err
+		}
+	}
+
+	// Check if CT wouldn't be OOO vs samples we already might have for this series.
+	// NOTE(bwplotka): This will be often hit as it's expected for long living
+	// counters to share the same CT.
+	s.Lock()
+	isOOO, _, err := s.appendable(ct, 0, a.headMaxt, a.minValidTime, a.oooTimeWindow)
+	if err == nil {
+		s.pendingCommit = true
+	}
+	s.Unlock()
+	if err != nil {
+		return 0, err
+	}
+	if isOOO {
+		return storage.SeriesRef(s.ref), storage.ErrOutOfOrderCT
+	}
+
+	if ct > a.maxt {
+		a.maxt = ct
+	}
+	a.samples = append(a.samples, record.RefSample{Ref: s.ref, T: ct, V: 0.0})
+	a.sampleSeries = append(a.sampleSeries, s)
+	return storage.SeriesRef(s.ref), nil
+}
+
+func (a *headAppender) getOrCreate(lset labels.Labels) (*memSeries, error) {
+	// Ensure no empty labels have gotten through.
+	lset = lset.WithoutEmpty()
+	if lset.IsEmpty() {
+		return nil, errors.Wrap(ErrInvalidSample, "empty labelset")
+	}
+	if l, dup := lset.HasDuplicateLabelNames(); dup {
+		return nil, errors.Wrap(ErrInvalidSample, fmt.Sprintf(`label name "%s" is not unique`, l))
+	}
+	var created bool
+	var err error
+	s, created, err := a.head.getOrCreate(lset.Hash(), lset)
+	if err != nil {
+		return nil, err
+	}
+	if created {
+		a.series = append(a.series, record.RefSeries{
+			Ref:    s.ref,
+			Labels: lset,
+		})
+	}
+	return s, nil
+}
+
 // appendable checks whether the given sample is valid for appending to the series. (if we return false and no error)
 // The sample belongs to the out of order chunk if we return true and no error.
 // An error signifies the sample cannot be handled.
diff --git a/tsdb/head_test.go b/tsdb/head_test.go
index d444e1496fd..535647d3a0b 100644
--- a/tsdb/head_test.go
+++ b/tsdb/head_test.go
@@ -33,6 +33,7 @@ import (
 	"github.com/pkg/errors"
 	"github.com/prometheus/client_golang/prometheus"
 	prom_testutil "github.com/prometheus/client_golang/prometheus/testutil"
+	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"go.uber.org/atomic"
 	"golang.org/x/sync/errgroup"
@@ -5641,3 +5642,93 @@ func TestPostingsCardinalityStats(t *testing.T) {
 	// Using cache.
 	require.Equal(t, statsForSomeLabel1, head.PostingsCardinalityStats("n", 1))
 }
+
+func TestHeadAppender_AppendCTZeroSample(t *testing.T) {
+	type appendableSamples struct {
+		ts  int64
+		val float64
+		ct  int64
+	}
+	for _, tc := range []struct {
+		name              string
+		appendableSamples []appendableSamples
+		expectedSamples   []model.Sample
+	}{
+		{
+			name: "In order ct+normal sample",
+			appendableSamples: []appendableSamples{
+				{ts: 100, val: 10, ct: 1},
+			},
+			expectedSamples: []model.Sample{
+				{Timestamp: 1, Value: 0},
+				{Timestamp: 100, Value: 10},
+			},
+		},
+		{
+			name: "Consecutive appends with same ct ignore ct",
+			appendableSamples: []appendableSamples{
+				{ts: 100, val: 10, ct: 1},
+				{ts: 101, val: 10, ct: 1},
+			},
+			expectedSamples: []model.Sample{
+				{Timestamp: 1, Value: 0},
+				{Timestamp: 100, Value: 10},
+				{Timestamp: 101, Value: 10},
+			},
+		},
+		{
+			name: "Consecutive appends with newer ct do not ignore ct",
+			appendableSamples: []appendableSamples{
+				{ts: 100, val: 10, ct: 1},
+				{ts: 102, val: 10, ct: 101},
+			},
+			expectedSamples: []model.Sample{
+				{Timestamp: 1, Value: 0},
+				{Timestamp: 100, Value: 10},
+				{Timestamp: 101, Value: 0},
+				{Timestamp: 102, Value: 10},
+			},
+		},
+		{
+			name: "CT equals to previous sample timestamp is ignored",
+			appendableSamples: []appendableSamples{
+				{ts: 100, val: 10, ct: 1},
+				{ts: 101, val: 10, ct: 100},
+			},
+			expectedSamples: []model.Sample{
+				{Timestamp: 1, Value: 0},
+				{Timestamp: 100, Value: 10},
+				{Timestamp: 101, Value: 10},
+			},
+		},
+	} {
+		h, _ := newTestHead(t, DefaultBlockDuration, wlog.CompressionNone, false)
+		defer func() {
+			require.NoError(t, h.Close())
+		}()
+		a := h.Appender(context.Background())
+		lbls := labels.FromStrings("foo", "bar")
+		for _, sample := range tc.appendableSamples {
+			_, err := a.AppendCTZeroSample(0, lbls, sample.ts, sample.ct)
+			require.NoError(t, err)
+			_, err = a.Append(0, lbls, sample.ts, sample.val)
+			require.NoError(t, err)
+		}
+		require.NoError(t, a.Commit())
+
+		q, err := NewBlockQuerier(h, math.MinInt64, math.MaxInt64)
+		require.NoError(t, err)
+		ss := q.Select(context.Background(), false, nil, labels.MustNewMatcher(labels.MatchEqual, "foo", "bar"))
+		require.True(t, ss.Next())
+		s := ss.At()
+		require.False(t, ss.Next())
+		it := s.Iterator(nil)
+		for _, sample := range tc.expectedSamples {
+			require.Equal(t, chunkenc.ValFloat, it.Next())
+			timestamp, value := it.At()
+			require.Equal(t, sample.Timestamp, model.Time(timestamp))
+			require.Equal(t, sample.Value, model.SampleValue(value))
+		}
+		require.Equal(t, chunkenc.ValNone, it.Next())
+	}
+}
diff --git a/util/runutil/runutil.go b/util/runutil/runutil.go
new file mode 100644
index 00000000000..5a77c332bab
--- /dev/null
+++ b/util/runutil/runutil.go
@@ -0,0 +1,37 @@
+// Copyright 2013 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// Copied from https://github.com/efficientgo/core/blob/a21078e2c723b69e05f95c65dbc5058712b4edd8/runutil/runutil.go#L39
+// and adjusted.
+
+package runutil
+
+import "time"
+
+// Retry executes f every interval seconds until timeout or no error is returned from f.
+func Retry(interval time.Duration, stopc <-chan struct{}, f func() error) error {
+	tick := time.NewTicker(interval)
+	defer tick.Stop()
+
+	var err error
+	for {
+		if err = f(); err == nil {
+			return nil
+		}
+		select {
+		case <-stopc:
+			return err
+		case <-tick.C:
+		}
+	}
+}

From 48df9fc0203c569241d1d0c38d12a4beab65883b Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Mon, 11 Dec 2023 11:12:11 +0100
Subject: [PATCH 017/132] Export SampleRingIterator

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
---
 storage/buffer.go | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/storage/buffer.go b/storage/buffer.go
index 49dfbd29993..75a935f9dbe 100644
--- a/storage/buffer.go
+++ b/storage/buffer.go
@@ -74,7 +74,7 @@ func (b *BufferedSeriesIterator) PeekBack(n int) (sample chunks.Sample, ok bool)
 
 // Buffer returns an iterator over the buffered data. Invalidates previously
 // returned iterators.
-func (b *BufferedSeriesIterator) Buffer() *sampleRingIterator {
+func (b *BufferedSeriesIterator) Buffer() *SampleRingIterator {
 	return b.buf.iterator()
 }
 
@@ -252,7 +252,7 @@ type sampleRing struct {
 	f int // Position of first element in ring buffer.
 	l int // Number of elements in buffer.
 
-	it sampleRingIterator
+	it SampleRingIterator
 }
 
 type bufType int
@@ -304,13 +304,13 @@ func (r *sampleRing) reset() {
 }
 
 // Returns the current iterator. Invalidates previously returned iterators.
-func (r *sampleRing) iterator() *sampleRingIterator {
+func (r *sampleRing) iterator() *SampleRingIterator {
 	r.it.r = r
 	r.it.i = -1
 	return &r.it
 }
 
-type sampleRingIterator struct {
+type SampleRingIterator struct {
 	r  *sampleRing
 	i  int
 	t  int64
@@ -319,7 +319,7 @@ type sampleRingIterator struct {
 	fh *histogram.FloatHistogram
 }
 
-func (it *sampleRingIterator) Next() chunkenc.ValueType {
+func (it *SampleRingIterator) Next() chunkenc.ValueType {
 	it.i++
 	if it.i >= it.r.l {
 		return chunkenc.ValNone
@@ -358,30 +358,30 @@ func (it *sampleRingIterator) Next() chunkenc.ValueType {
 	}
 }
 
-func (it *sampleRingIterator) Seek(int64) chunkenc.ValueType {
+func (it *SampleRingIterator) Seek(int64) chunkenc.ValueType {
 	return chunkenc.ValNone
 }
 
-func (it *sampleRingIterator) Err() error {
+func (it *SampleRingIterator) Err() error {
 	return nil
 }
 
-func (it *sampleRingIterator) At() (int64, float64) {
+func (it *SampleRingIterator) At() (int64, float64) {
 	return it.t, it.f
 }
 
-func (it *sampleRingIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (it *SampleRingIterator) AtHistogram() (int64, *histogram.Histogram) {
 	return it.t, it.h
 }
 
-func (it *sampleRingIterator) AtFloatHistogram(fh *histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
+func (it *SampleRingIterator) AtFloatHistogram(fh *histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	if it.fh == nil {
 		return it.t, it.h.ToFloat(fh)
 	}
 	return it.t, it.fh
 }
 
-func (it *sampleRingIterator) AtT() int64 {
+func (it *SampleRingIterator) AtT() int64 {
 	return it.t
 }
 

From 6de80d7fb03f7cd5ed44b85559886e73d89e720d Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Mon, 23 Oct 2023 14:55:36 +0100
Subject: [PATCH 018/132] Allow non-default registry to be used for metrics of
 SD components

Signed-off-by: Paulin Todev <paulin.todev@gmail.com>
---
 cmd/prometheus/main.go                        |  28 +++-
 cmd/promtool/main.go                          |   3 +-
 cmd/promtool/sd.go                            |   5 +-
 discovery/README.md                           |   5 +
 discovery/aws/ec2.go                          |  16 +-
 discovery/aws/lightsail.go                    |  16 +-
 discovery/azure/azure.go                      |  63 ++++----
 discovery/consul/consul.go                    | 143 ++++++++++--------
 discovery/consul/consul_test.go               |  11 +-
 discovery/digitalocean/digitalocean.go        |  16 +-
 discovery/digitalocean/digitalocean_test.go   |   3 +-
 discovery/discovery.go                        |  10 ++
 discovery/dns/dns.go                          |  72 ++++-----
 discovery/dns/dns_test.go                     |   4 +-
 discovery/eureka/eureka.go                    |  16 +-
 discovery/eureka/eureka_test.go               |   3 +-
 discovery/file/file.go                        |  75 +++++----
 discovery/file/file_test.go                   |   9 +-
 discovery/gce/gce.go                          |  16 +-
 discovery/hetzner/hetzner.go                  |  16 +-
 discovery/http/http.go                        |  41 ++---
 discovery/http/http_test.go                   |  23 ++-
 discovery/ionos/ionos.go                      |  17 ++-
 discovery/kubernetes/endpoints.go             |  21 +--
 discovery/kubernetes/endpointslice.go         |  21 +--
 discovery/kubernetes/ingress.go               |  15 +-
 discovery/kubernetes/kubernetes.go            |  69 +++++----
 discovery/kubernetes/kubernetes_test.go       |  18 ++-
 discovery/kubernetes/node.go                  |  15 +-
 discovery/kubernetes/pod.go                   |  15 +-
 discovery/kubernetes/service.go               |  15 +-
 discovery/legacymanager/manager.go            |  68 +++------
 discovery/legacymanager/manager_test.go       |  27 ++--
 discovery/linode/linode.go                    |  47 +++---
 discovery/linode/linode_test.go               |   3 +-
 discovery/manager.go                          |  66 ++------
 discovery/manager_test.go                     |  39 +++--
 discovery/marathon/marathon.go                |  16 +-
 discovery/marathon/marathon_test.go           |   5 +-
 discovery/metrics.go                          | 103 +++++++++++++
 ...lient_metrics.go => metrics_k8s_client.go} |  48 +++---
 discovery/moby/docker.go                      |  16 +-
 discovery/moby/docker_test.go                 |   3 +-
 discovery/moby/dockerswarm.go                 |  16 +-
 discovery/moby/nodes_test.go                  |   3 +-
 discovery/moby/services_test.go               |   5 +-
 discovery/moby/tasks_test.go                  |   3 +-
 discovery/nomad/nomad.go                      |  53 +++----
 discovery/nomad/nomad_test.go                 |   5 +-
 discovery/openstack/openstack.go              |  16 +-
 discovery/ovhcloud/ovhcloud.go                |  16 +-
 discovery/ovhcloud/ovhcloud_test.go           |   4 +-
 discovery/puppetdb/puppetdb.go                |  16 +-
 discovery/puppetdb/puppetdb_test.go           |  11 +-
 discovery/refresh/refresh.go                  |  85 +++++++----
 discovery/refresh/refresh_test.go             |  11 +-
 discovery/scaleway/scaleway.go                |  16 +-
 discovery/triton/triton.go                    |  16 +-
 discovery/triton/triton_test.go               |   3 +-
 discovery/util.go                             |  72 +++++++++
 discovery/uyuni/uyuni.go                      |  16 +-
 discovery/uyuni/uyuni_test.go                 |   6 +-
 discovery/vultr/vultr.go                      |  16 +-
 discovery/vultr/vultr_test.go                 |   3 +-
 discovery/xds/kuma.go                         |  81 +++++-----
 discovery/xds/kuma_test.go                    |   3 +-
 discovery/xds/xds.go                          |  13 +-
 .../examples/custom-sd/adapter-usage/main.go  |  10 +-
 .../examples/custom-sd/adapter/adapter.go     |   5 +-
 .../custom-sd/adapter/adapter_test.go         |   6 +-
 70 files changed, 1057 insertions(+), 694 deletions(-)
 create mode 100644 discovery/metrics.go
 rename discovery/{kubernetes/client_metrics.go => metrics_k8s_client.go} (85%)
 create mode 100644 discovery/util.go

diff --git a/cmd/prometheus/main.go b/cmd/prometheus/main.go
index 106f9d05c5b..24fc0f8e4ac 100644
--- a/cmd/prometheus/main.go
+++ b/cmd/prometheus/main.go
@@ -620,14 +620,30 @@ func main() {
 		discoveryManagerNotify  discoveryManager
 	)
 
+	// Register the metrics used by both "scrape" and "notify" discovery managers.
+	// The same metrics are used for both discovery managers. Hence the registration
+	// needs to be done here, outside the NewManager() calls, to avoid duplicate
+	// metric registrations.
+	discoveryMetrics, err := discovery.NewMetrics(prometheus.DefaultRegisterer)
+	if err != nil {
+		level.Error(logger).Log("msg", "failed to create discovery metrics", "err", err)
+		os.Exit(1)
+	}
 	if cfg.enableNewSDManager {
-		discovery.RegisterMetrics()
-		discoveryManagerScrape = discovery.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), discovery.Name("scrape"))
-		discoveryManagerNotify = discovery.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), discovery.Name("notify"))
+		discoveryManagerScrape = discovery.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), prometheus.DefaultRegisterer, discoveryMetrics, discovery.Name("scrape"))
+		discoveryManagerNotify = discovery.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), prometheus.DefaultRegisterer, discoveryMetrics, discovery.Name("notify"))
 	} else {
-		legacymanager.RegisterMetrics()
-		discoveryManagerScrape = legacymanager.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), legacymanager.Name("scrape"))
-		discoveryManagerNotify = legacymanager.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), legacymanager.Name("notify"))
+		discoveryManagerScrape = legacymanager.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), prometheus.DefaultRegisterer, discoveryMetrics, legacymanager.Name("scrape"))
+		discoveryManagerNotify = legacymanager.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), prometheus.DefaultRegisterer, discoveryMetrics, legacymanager.Name("notify"))
+	}
+
+	if discoveryManagerScrape == nil {
+		level.Error(logger).Log("msg", "failed to create a discovery manager scrape")
+		os.Exit(1)
+	}
+	if discoveryManagerNotify == nil {
+		level.Error(logger).Log("msg", "failed to create a discovery manager notify")
+		os.Exit(1)
 	}
 
 	scrapeManager, err := scrape.NewManager(
diff --git a/cmd/promtool/main.go b/cmd/promtool/main.go
index f0b2719c90f..508b681b882 100644
--- a/cmd/promtool/main.go
+++ b/cmd/promtool/main.go
@@ -36,6 +36,7 @@ import (
 	"github.com/google/pprof/profile"
 	"github.com/prometheus/client_golang/api"
 	v1 "github.com/prometheus/client_golang/api/prometheus/v1"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/client_golang/prometheus/promhttp"
 	"github.com/prometheus/client_golang/prometheus/testutil/promlint"
 	config_util "github.com/prometheus/common/config"
@@ -317,7 +318,7 @@ func main() {
 
 	switch parsedCmd {
 	case sdCheckCmd.FullCommand():
-		os.Exit(CheckSD(*sdConfigFile, *sdJobName, *sdTimeout, noDefaultScrapePort))
+		os.Exit(CheckSD(*sdConfigFile, *sdJobName, *sdTimeout, noDefaultScrapePort, prometheus.DefaultRegisterer))
 
 	case checkConfigCmd.FullCommand():
 		os.Exit(CheckConfig(*agentMode, *checkConfigSyntaxOnly, newLintConfig(*checkConfigLint, *checkConfigLintFatal), *configFiles...))
diff --git a/cmd/promtool/sd.go b/cmd/promtool/sd.go
index 7c5ae703653..155152e1acf 100644
--- a/cmd/promtool/sd.go
+++ b/cmd/promtool/sd.go
@@ -22,6 +22,7 @@ import (
 	"time"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 
 	"github.com/prometheus/prometheus/config"
 	"github.com/prometheus/prometheus/discovery"
@@ -37,7 +38,7 @@ type sdCheckResult struct {
 }
 
 // CheckSD performs service discovery for the given job name and reports the results.
-func CheckSD(sdConfigFiles, sdJobName string, sdTimeout time.Duration, noDefaultScrapePort bool) int {
+func CheckSD(sdConfigFiles, sdJobName string, sdTimeout time.Duration, noDefaultScrapePort bool, registerer prometheus.Registerer) int {
 	logger := log.NewLogfmtLogger(log.NewSyncWriter(os.Stderr))
 
 	cfg, err := config.LoadFile(sdConfigFiles, false, false, logger)
@@ -77,7 +78,7 @@ func CheckSD(sdConfigFiles, sdJobName string, sdTimeout time.Duration, noDefault
 	defer cancel()
 
 	for _, cfg := range scrapeConfig.ServiceDiscoveryConfigs {
-		d, err := cfg.NewDiscoverer(discovery.DiscovererOptions{Logger: logger})
+		d, err := cfg.NewDiscoverer(discovery.DiscovererOptions{Logger: logger, Registerer: registerer})
 		if err != nil {
 			fmt.Fprintln(os.Stderr, "Could not create new discoverer", err)
 			return failureExitCode
diff --git a/discovery/README.md b/discovery/README.md
index 19b579b3998..4c066086256 100644
--- a/discovery/README.md
+++ b/discovery/README.md
@@ -234,6 +234,11 @@ type Config interface {
 
 type DiscovererOptions struct {
 	Logger log.Logger
+
+	// A registerer for the Discoverer's metrics.
+	Registerer prometheus.Registerer
+	
+	HTTPClientOptions []config.HTTPClientOption
 }
 ```
 
diff --git a/discovery/aws/ec2.go b/discovery/aws/ec2.go
index 64c8fdce63a..40e6e7cb798 100644
--- a/discovery/aws/ec2.go
+++ b/discovery/aws/ec2.go
@@ -30,6 +30,7 @@ import (
 	"github.com/aws/aws-sdk-go/service/ec2"
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 
@@ -101,7 +102,7 @@ func (*EC2SDConfig) Name() string { return "ec2" }
 
 // NewDiscoverer returns a Discoverer for the EC2 Config.
 func (c *EC2SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewEC2Discovery(c, opts.Logger), nil
+	return NewEC2Discovery(c, opts.Logger, opts.Registerer), nil
 }
 
 // UnmarshalYAML implements the yaml.Unmarshaler interface for the EC2 Config.
@@ -147,7 +148,7 @@ type EC2Discovery struct {
 }
 
 // NewEC2Discovery returns a new EC2Discovery which periodically refreshes its targets.
-func NewEC2Discovery(conf *EC2SDConfig, logger log.Logger) *EC2Discovery {
+func NewEC2Discovery(conf *EC2SDConfig, logger log.Logger, reg prometheus.Registerer) *EC2Discovery {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -156,10 +157,13 @@ func NewEC2Discovery(conf *EC2SDConfig, logger log.Logger) *EC2Discovery {
 		cfg:    conf,
 	}
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"ec2",
-		time.Duration(d.cfg.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "ec2",
+			Interval: time.Duration(d.cfg.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d
 }
diff --git a/discovery/aws/lightsail.go b/discovery/aws/lightsail.go
index c0198d6a775..5382ea0159e 100644
--- a/discovery/aws/lightsail.go
+++ b/discovery/aws/lightsail.go
@@ -29,6 +29,7 @@ import (
 	"github.com/aws/aws-sdk-go/aws/session"
 	"github.com/aws/aws-sdk-go/service/lightsail"
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 
@@ -84,7 +85,7 @@ func (*LightsailSDConfig) Name() string { return "lightsail" }
 
 // NewDiscoverer returns a Discoverer for the Lightsail Config.
 func (c *LightsailSDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewLightsailDiscovery(c, opts.Logger), nil
+	return NewLightsailDiscovery(c, opts.Logger, opts.Registerer), nil
 }
 
 // UnmarshalYAML implements the yaml.Unmarshaler interface for the Lightsail Config.
@@ -121,7 +122,7 @@ type LightsailDiscovery struct {
 }
 
 // NewLightsailDiscovery returns a new LightsailDiscovery which periodically refreshes its targets.
-func NewLightsailDiscovery(conf *LightsailSDConfig, logger log.Logger) *LightsailDiscovery {
+func NewLightsailDiscovery(conf *LightsailSDConfig, logger log.Logger, reg prometheus.Registerer) *LightsailDiscovery {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -129,10 +130,13 @@ func NewLightsailDiscovery(conf *LightsailSDConfig, logger log.Logger) *Lightsai
 		cfg: conf,
 	}
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"lightsail",
-		time.Duration(d.cfg.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "lightsail",
+			Interval: time.Duration(d.cfg.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d
 }
diff --git a/discovery/azure/azure.go b/discovery/azure/azure.go
index ef953b80266..3b67a8102ed 100644
--- a/discovery/azure/azure.go
+++ b/discovery/azure/azure.go
@@ -79,17 +79,6 @@ var (
 		AuthenticationMethod: authMethodOAuth,
 		HTTPClientConfig:     config_util.DefaultHTTPClientConfig,
 	}
-
-	failuresCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_azure_failures_total",
-			Help: "Number of Azure service discovery refresh failures.",
-		})
-	cacheHitCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_azure_cache_hit_total",
-			Help: "Number of cache hit during refresh.",
-		})
 )
 
 var environments = map[string]cloud.Configuration{
@@ -114,8 +103,6 @@ func CloudConfigurationFromName(name string) (cloud.Configuration, error) {
 
 func init() {
 	discovery.RegisterConfig(&SDConfig{})
-	prometheus.MustRegister(failuresCount)
-	prometheus.MustRegister(cacheHitCount)
 }
 
 // SDConfig is the configuration for Azure based service discovery.
@@ -138,7 +125,7 @@ func (*SDConfig) Name() string { return "azure" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger), nil
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 func validateAuthParam(param, name string) error {
@@ -181,14 +168,16 @@ func (c *SDConfig) UnmarshalYAML(unmarshal func(interface{}) error) error {
 
 type Discovery struct {
 	*refresh.Discovery
-	logger log.Logger
-	cfg    *SDConfig
-	port   int
-	cache  *cache.Cache[string, *armnetwork.Interface]
+	logger        log.Logger
+	cfg           *SDConfig
+	port          int
+	cache         *cache.Cache[string, *armnetwork.Interface]
+	failuresCount prometheus.Counter
+	cacheHitCount prometheus.Counter
 }
 
 // NewDiscovery returns a new AzureDiscovery which periodically refreshes its targets.
-func NewDiscovery(cfg *SDConfig, logger log.Logger) *Discovery {
+func NewDiscovery(cfg *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -198,16 +187,30 @@ func NewDiscovery(cfg *SDConfig, logger log.Logger) *Discovery {
 		port:   cfg.Port,
 		logger: logger,
 		cache:  l,
+		failuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_azure_failures_total",
+				Help: "Number of Azure service discovery refresh failures.",
+			}),
+		cacheHitCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_azure_cache_hit_total",
+				Help: "Number of cache hit during refresh.",
+			}),
 	}
 
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"azure",
-		time.Duration(cfg.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "azure",
+			Interval: time.Duration(cfg.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+			Metrics:  []prometheus.Collector{d.failuresCount, d.cacheHitCount},
+		},
 	)
 
-	return d
+	return d, nil
 }
 
 // azureClient represents multiple Azure Resource Manager providers.
@@ -329,14 +332,14 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 
 	client, err := createAzureClient(*d.cfg)
 	if err != nil {
-		failuresCount.Inc()
+		d.failuresCount.Inc()
 		return nil, fmt.Errorf("could not create Azure client: %w", err)
 	}
 	client.logger = d.logger
 
 	machines, err := client.getVMs(ctx, d.cfg.ResourceGroup)
 	if err != nil {
-		failuresCount.Inc()
+		d.failuresCount.Inc()
 		return nil, fmt.Errorf("could not get virtual machines: %w", err)
 	}
 
@@ -345,14 +348,14 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 	// Load the vms managed by scale sets.
 	scaleSets, err := client.getScaleSets(ctx, d.cfg.ResourceGroup)
 	if err != nil {
-		failuresCount.Inc()
+		d.failuresCount.Inc()
 		return nil, fmt.Errorf("could not get virtual machine scale sets: %w", err)
 	}
 
 	for _, scaleSet := range scaleSets {
 		scaleSetVms, err := client.getScaleSetVMs(ctx, scaleSet)
 		if err != nil {
-			failuresCount.Inc()
+			d.failuresCount.Inc()
 			return nil, fmt.Errorf("could not get virtual machine scale set vms: %w", err)
 		}
 		machines = append(machines, scaleSetVms...)
@@ -403,7 +406,7 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 				var networkInterface *armnetwork.Interface
 				if v, ok := d.getFromCache(nicID); ok {
 					networkInterface = v
-					cacheHitCount.Add(1)
+					d.cacheHitCount.Add(1)
 				} else {
 					networkInterface, err = client.getNetworkInterfaceByID(ctx, nicID)
 					if err != nil {
@@ -462,7 +465,7 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 	var tg targetgroup.Group
 	for tgt := range ch {
 		if tgt.err != nil {
-			failuresCount.Inc()
+			d.failuresCount.Inc()
 			return nil, fmt.Errorf("unable to complete Azure service discovery: %w", tgt.err)
 		}
 		if tgt.labelSet != nil {
diff --git a/discovery/consul/consul.go b/discovery/consul/consul.go
index b4cb1522976..50f171a78a7 100644
--- a/discovery/consul/consul.go
+++ b/discovery/consul/consul.go
@@ -71,41 +71,18 @@ const (
 	namespace = "prometheus"
 )
 
-var (
-	rpcFailuresCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Namespace: namespace,
-			Name:      "sd_consul_rpc_failures_total",
-			Help:      "The number of Consul RPC call failures.",
-		})
-	rpcDuration = prometheus.NewSummaryVec(
-		prometheus.SummaryOpts{
-			Namespace:  namespace,
-			Name:       "sd_consul_rpc_duration_seconds",
-			Help:       "The duration of a Consul RPC call in seconds.",
-			Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
-		},
-		[]string{"endpoint", "call"},
-	)
-
-	// Initialize metric vectors.
-	servicesRPCDuration = rpcDuration.WithLabelValues("catalog", "services")
-	serviceRPCDuration  = rpcDuration.WithLabelValues("catalog", "service")
-
-	// DefaultSDConfig is the default Consul SD configuration.
-	DefaultSDConfig = SDConfig{
-		TagSeparator:     ",",
-		Scheme:           "http",
-		Server:           "localhost:8500",
-		AllowStale:       true,
-		RefreshInterval:  model.Duration(30 * time.Second),
-		HTTPClientConfig: config.DefaultHTTPClientConfig,
-	}
-)
+// DefaultSDConfig is the default Consul SD configuration.
+var DefaultSDConfig = SDConfig{
+	TagSeparator:     ",",
+	Scheme:           "http",
+	Server:           "localhost:8500",
+	AllowStale:       true,
+	RefreshInterval:  model.Duration(30 * time.Second),
+	HTTPClientConfig: config.DefaultHTTPClientConfig,
+}
 
 func init() {
 	discovery.RegisterConfig(&SDConfig{})
-	prometheus.MustRegister(rpcFailuresCount, rpcDuration)
 }
 
 // SDConfig is the configuration for Consul service discovery.
@@ -147,7 +124,7 @@ func (*SDConfig) Name() string { return "consul" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger)
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -184,22 +161,27 @@ func (c *SDConfig) UnmarshalYAML(unmarshal func(interface{}) error) error {
 // Discovery retrieves target information from a Consul server
 // and updates them via watches.
 type Discovery struct {
-	client           *consul.Client
-	clientDatacenter string
-	clientNamespace  string
-	clientPartition  string
-	tagSeparator     string
-	watchedServices  []string // Set of services which will be discovered.
-	watchedTags      []string // Tags used to filter instances of a service.
-	watchedNodeMeta  map[string]string
-	allowStale       bool
-	refreshInterval  time.Duration
-	finalizer        func()
-	logger           log.Logger
+	client              *consul.Client
+	clientDatacenter    string
+	clientNamespace     string
+	clientPartition     string
+	tagSeparator        string
+	watchedServices     []string // Set of services which will be discovered.
+	watchedTags         []string // Tags used to filter instances of a service.
+	watchedNodeMeta     map[string]string
+	allowStale          bool
+	refreshInterval     time.Duration
+	finalizer           func()
+	logger              log.Logger
+	rpcFailuresCount    prometheus.Counter
+	rpcDuration         *prometheus.SummaryVec
+	servicesRPCDuration prometheus.Observer
+	serviceRPCDuration  prometheus.Observer
+	metricRegisterer    discovery.MetricRegisterer
 }
 
 // NewDiscovery returns a new Discovery for the given config.
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -237,7 +219,35 @@ func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
 		clientPartition:  conf.Partition,
 		finalizer:        wrapper.CloseIdleConnections,
 		logger:           logger,
-	}
+		rpcFailuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Namespace: namespace,
+				Name:      "sd_consul_rpc_failures_total",
+				Help:      "The number of Consul RPC call failures.",
+			}),
+		rpcDuration: prometheus.NewSummaryVec(
+			prometheus.SummaryOpts{
+				Namespace:  namespace,
+				Name:       "sd_consul_rpc_duration_seconds",
+				Help:       "The duration of a Consul RPC call in seconds.",
+				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
+			},
+			[]string{"endpoint", "call"},
+		),
+	}
+
+	cd.metricRegisterer = discovery.NewMetricRegisterer(
+		reg,
+		[]prometheus.Collector{
+			cd.rpcFailuresCount,
+			cd.rpcDuration,
+		},
+	)
+
+	// Initialize metric vectors.
+	cd.servicesRPCDuration = cd.rpcDuration.WithLabelValues("catalog", "services")
+	cd.serviceRPCDuration = cd.rpcDuration.WithLabelValues("catalog", "service")
+
 	return cd, nil
 }
 
@@ -293,7 +303,7 @@ func (d *Discovery) getDatacenter() error {
 	info, err := d.client.Agent().Self()
 	if err != nil {
 		level.Error(d.logger).Log("msg", "Error retrieving datacenter name", "err", err)
-		rpcFailuresCount.Inc()
+		d.rpcFailuresCount.Inc()
 		return err
 	}
 
@@ -334,6 +344,13 @@ func (d *Discovery) initialize(ctx context.Context) {
 
 // Run implements the Discoverer interface.
 func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
+	err := d.metricRegisterer.RegisterMetrics()
+	if err != nil {
+		level.Error(d.logger).Log("msg", "Unable to register metrics", "err", err.Error())
+		return
+	}
+	defer d.metricRegisterer.UnregisterMetrics()
+
 	if d.finalizer != nil {
 		defer d.finalizer()
 	}
@@ -382,7 +399,7 @@ func (d *Discovery) watchServices(ctx context.Context, ch chan<- []*targetgroup.
 	t0 := time.Now()
 	srvs, meta, err := catalog.Services(opts.WithContext(ctx))
 	elapsed := time.Since(t0)
-	servicesRPCDuration.Observe(elapsed.Seconds())
+	d.servicesRPCDuration.Observe(elapsed.Seconds())
 
 	// Check the context before in order to exit early.
 	select {
@@ -393,7 +410,7 @@ func (d *Discovery) watchServices(ctx context.Context, ch chan<- []*targetgroup.
 
 	if err != nil {
 		level.Error(d.logger).Log("msg", "Error refreshing service list", "err", err)
-		rpcFailuresCount.Inc()
+		d.rpcFailuresCount.Inc()
 		time.Sleep(retryInterval)
 		return
 	}
@@ -449,13 +466,15 @@ func (d *Discovery) watchServices(ctx context.Context, ch chan<- []*targetgroup.
 
 // consulService contains data belonging to the same service.
 type consulService struct {
-	name         string
-	tags         []string
-	labels       model.LabelSet
-	discovery    *Discovery
-	client       *consul.Client
-	tagSeparator string
-	logger       log.Logger
+	name               string
+	tags               []string
+	labels             model.LabelSet
+	discovery          *Discovery
+	client             *consul.Client
+	tagSeparator       string
+	logger             log.Logger
+	rpcFailuresCount   prometheus.Counter
+	serviceRPCDuration prometheus.Observer
 }
 
 // Start watching a service.
@@ -469,8 +488,10 @@ func (d *Discovery) watchService(ctx context.Context, ch chan<- []*targetgroup.G
 			serviceLabel:    model.LabelValue(name),
 			datacenterLabel: model.LabelValue(d.clientDatacenter),
 		},
-		tagSeparator: d.tagSeparator,
-		logger:       d.logger,
+		tagSeparator:       d.tagSeparator,
+		logger:             d.logger,
+		rpcFailuresCount:   d.rpcFailuresCount,
+		serviceRPCDuration: d.serviceRPCDuration,
 	}
 
 	go func() {
@@ -508,7 +529,7 @@ func (srv *consulService) watch(ctx context.Context, ch chan<- []*targetgroup.Gr
 	t0 := time.Now()
 	serviceNodes, meta, err := health.ServiceMultipleTags(srv.name, srv.tags, false, opts.WithContext(ctx))
 	elapsed := time.Since(t0)
-	serviceRPCDuration.Observe(elapsed.Seconds())
+	srv.serviceRPCDuration.Observe(elapsed.Seconds())
 
 	// Check the context before in order to exit early.
 	select {
@@ -520,7 +541,7 @@ func (srv *consulService) watch(ctx context.Context, ch chan<- []*targetgroup.Gr
 
 	if err != nil {
 		level.Error(srv.logger).Log("msg", "Error refreshing service", "service", srv.name, "tags", strings.Join(srv.tags, ","), "err", err)
-		rpcFailuresCount.Inc()
+		srv.rpcFailuresCount.Inc()
 		time.Sleep(retryInterval)
 		return
 	}
diff --git a/discovery/consul/consul_test.go b/discovery/consul/consul_test.go
index 19f7d3c4a9d..97cb8fbc9dc 100644
--- a/discovery/consul/consul_test.go
+++ b/discovery/consul/consul_test.go
@@ -22,6 +22,7 @@ import (
 	"time"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
@@ -39,7 +40,7 @@ func TestConfiguredService(t *testing.T) {
 	conf := &SDConfig{
 		Services: []string{"configuredServiceName"},
 	}
-	consulDiscovery, err := NewDiscovery(conf, nil)
+	consulDiscovery, err := NewDiscovery(conf, nil, prometheus.NewRegistry())
 	if err != nil {
 		t.Errorf("Unexpected error when initializing discovery %v", err)
 	}
@@ -56,7 +57,7 @@ func TestConfiguredServiceWithTag(t *testing.T) {
 		Services:    []string{"configuredServiceName"},
 		ServiceTags: []string{"http"},
 	}
-	consulDiscovery, err := NewDiscovery(conf, nil)
+	consulDiscovery, err := NewDiscovery(conf, nil, prometheus.NewRegistry())
 	if err != nil {
 		t.Errorf("Unexpected error when initializing discovery %v", err)
 	}
@@ -151,7 +152,7 @@ func TestConfiguredServiceWithTags(t *testing.T) {
 	}
 
 	for _, tc := range cases {
-		consulDiscovery, err := NewDiscovery(tc.conf, nil)
+		consulDiscovery, err := NewDiscovery(tc.conf, nil, prometheus.NewRegistry())
 		if err != nil {
 			t.Errorf("Unexpected error when initializing discovery %v", err)
 		}
@@ -165,7 +166,7 @@ func TestConfiguredServiceWithTags(t *testing.T) {
 
 func TestNonConfiguredService(t *testing.T) {
 	conf := &SDConfig{}
-	consulDiscovery, err := NewDiscovery(conf, nil)
+	consulDiscovery, err := NewDiscovery(conf, nil, prometheus.NewRegistry())
 	if err != nil {
 		t.Errorf("Unexpected error when initializing discovery %v", err)
 	}
@@ -262,7 +263,7 @@ func newServer(t *testing.T) (*httptest.Server, *SDConfig) {
 
 func newDiscovery(t *testing.T, config *SDConfig) *Discovery {
 	logger := log.NewNopLogger()
-	d, err := NewDiscovery(config, logger)
+	d, err := NewDiscovery(config, logger, prometheus.NewRegistry())
 	require.NoError(t, err)
 	return d
 }
diff --git a/discovery/digitalocean/digitalocean.go b/discovery/digitalocean/digitalocean.go
index e207388b3d7..970258de040 100644
--- a/discovery/digitalocean/digitalocean.go
+++ b/discovery/digitalocean/digitalocean.go
@@ -24,6 +24,7 @@ import (
 
 	"github.com/digitalocean/godo"
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"github.com/prometheus/common/version"
@@ -75,7 +76,7 @@ func (*SDConfig) Name() string { return "digitalocean" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger)
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -103,7 +104,7 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	d := &Discovery{
 		port: conf.Port,
 	}
@@ -125,10 +126,13 @@ func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
 	}
 
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"digitalocean",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "digitalocean",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d, nil
 }
diff --git a/discovery/digitalocean/digitalocean_test.go b/discovery/digitalocean/digitalocean_test.go
index df2514ecb35..a959b312c10 100644
--- a/discovery/digitalocean/digitalocean_test.go
+++ b/discovery/digitalocean/digitalocean_test.go
@@ -20,6 +20,7 @@ import (
 	"testing"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 )
@@ -46,7 +47,7 @@ func TestDigitalOceanSDRefresh(t *testing.T) {
 
 	cfg := DefaultSDConfig
 	cfg.HTTPClientConfig.BearerToken = tokenID
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 	endpoint, err := url.Parse(sdmock.Mock.Endpoint())
 	require.NoError(t, err)
diff --git a/discovery/discovery.go b/discovery/discovery.go
index 9dc010a09a8..acc4c1efe95 100644
--- a/discovery/discovery.go
+++ b/discovery/discovery.go
@@ -18,6 +18,7 @@ import (
 	"reflect"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 
 	"github.com/prometheus/prometheus/discovery/targetgroup"
@@ -42,6 +43,15 @@ type Discoverer interface {
 type DiscovererOptions struct {
 	Logger log.Logger
 
+	// A registerer for the Discoverer's metrics.
+	// Some Discoverers may ignore this registerer and use the global one instead.
+	// For now this will work, because the Prometheus `main` function uses the global registry.
+	// However, in the future the Prometheus `main` function will be updated to not use the global registry.
+	// Hence, if a discoverer wants its metrics to be visible via the Prometheus executable's
+	// `/metrics` endpoint, it should use this explicit registerer.
+	// TODO(ptodev): Update this comment once the Prometheus `main` function does not use the global registry.
+	Registerer prometheus.Registerer
+
 	// Extra HTTP client options to expose to Discoverers. This field may be
 	// ignored; Discoverer implementations must opt-in to reading it.
 	HTTPClientOptions []config.HTTPClientOption
diff --git a/discovery/dns/dns.go b/discovery/dns/dns.go
index 4838a89547a..9b6bd6741e6 100644
--- a/discovery/dns/dns.go
+++ b/discovery/dns/dns.go
@@ -49,30 +49,14 @@ const (
 	namespace = "prometheus"
 )
 
-var (
-	dnsSDLookupsCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Namespace: namespace,
-			Name:      "sd_dns_lookups_total",
-			Help:      "The number of DNS-SD lookups.",
-		})
-	dnsSDLookupFailuresCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Namespace: namespace,
-			Name:      "sd_dns_lookup_failures_total",
-			Help:      "The number of DNS-SD lookup failures.",
-		})
-
-	// DefaultSDConfig is the default DNS SD configuration.
-	DefaultSDConfig = SDConfig{
-		RefreshInterval: model.Duration(30 * time.Second),
-		Type:            "SRV",
-	}
-)
+// DefaultSDConfig is the default DNS SD configuration.
+var DefaultSDConfig = SDConfig{
+	RefreshInterval: model.Duration(30 * time.Second),
+	Type:            "SRV",
+}
 
 func init() {
 	discovery.RegisterConfig(&SDConfig{})
-	prometheus.MustRegister(dnsSDLookupFailuresCount, dnsSDLookupsCount)
 }
 
 // SDConfig is the configuration for DNS based service discovery.
@@ -88,7 +72,7 @@ func (*SDConfig) Name() string { return "dns" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(*c, opts.Logger), nil
+	return NewDiscovery(*c, opts.Logger, opts.Registerer)
 }
 
 // UnmarshalYAML implements the yaml.Unmarshaler interface.
@@ -118,16 +102,18 @@ func (c *SDConfig) UnmarshalYAML(unmarshal func(interface{}) error) error {
 // the Discoverer interface.
 type Discovery struct {
 	*refresh.Discovery
-	names  []string
-	port   int
-	qtype  uint16
-	logger log.Logger
+	names                    []string
+	port                     int
+	qtype                    uint16
+	logger                   log.Logger
+	dnsSDLookupsCount        prometheus.Counter
+	dnsSDLookupFailuresCount prometheus.Counter
 
 	lookupFn func(name string, qtype uint16, logger log.Logger) (*dns.Msg, error)
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf SDConfig, logger log.Logger) *Discovery {
+func NewDiscovery(conf SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -151,14 +137,32 @@ func NewDiscovery(conf SDConfig, logger log.Logger) *Discovery {
 		port:     conf.Port,
 		logger:   logger,
 		lookupFn: lookupWithSearchPath,
+		dnsSDLookupsCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Namespace: namespace,
+				Name:      "sd_dns_lookups_total",
+				Help:      "The number of DNS-SD lookups.",
+			}),
+		dnsSDLookupFailuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Namespace: namespace,
+				Name:      "sd_dns_lookup_failures_total",
+				Help:      "The number of DNS-SD lookup failures.",
+			}),
 	}
+
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"dns",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "dns",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: prometheus.NewRegistry(),
+			Metrics:  []prometheus.Collector{d.dnsSDLookupsCount, d.dnsSDLookupFailuresCount},
+		},
 	)
-	return d
+
+	return d, nil
 }
 
 func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
@@ -191,9 +195,9 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 
 func (d *Discovery) refreshOne(ctx context.Context, name string, ch chan<- *targetgroup.Group) error {
 	response, err := d.lookupFn(name, d.qtype, d.logger)
-	dnsSDLookupsCount.Inc()
+	d.dnsSDLookupsCount.Inc()
 	if err != nil {
-		dnsSDLookupFailuresCount.Inc()
+		d.dnsSDLookupFailuresCount.Inc()
 		return err
 	}
 
diff --git a/discovery/dns/dns_test.go b/discovery/dns/dns_test.go
index 52ca72c7974..b8dd2efaac4 100644
--- a/discovery/dns/dns_test.go
+++ b/discovery/dns/dns_test.go
@@ -22,6 +22,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/miekg/dns"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"go.uber.org/goleak"
@@ -252,7 +253,8 @@ func TestDNS(t *testing.T) {
 		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
-			sd := NewDiscovery(tc.config, nil)
+			sd, err := NewDiscovery(tc.config, nil, prometheus.NewRegistry())
+			require.NoError(t, err)
 			sd.lookupFn = tc.lookup
 
 			tgs, err := sd.refresh(context.Background())
diff --git a/discovery/eureka/eureka.go b/discovery/eureka/eureka.go
index 5d9d8d552d6..d3e4084e560 100644
--- a/discovery/eureka/eureka.go
+++ b/discovery/eureka/eureka.go
@@ -23,6 +23,7 @@ import (
 	"time"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 
@@ -80,7 +81,7 @@ func (*SDConfig) Name() string { return "eureka" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger)
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -117,7 +118,7 @@ type Discovery struct {
 }
 
 // NewDiscovery creates a new Eureka discovery for the given role.
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	rt, err := config.NewRoundTripperFromConfig(conf.HTTPClientConfig, "eureka_sd")
 	if err != nil {
 		return nil, err
@@ -128,10 +129,13 @@ func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
 		server: conf.Server,
 	}
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"eureka",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "eureka",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d, nil
 }
diff --git a/discovery/eureka/eureka_test.go b/discovery/eureka/eureka_test.go
index cb75e142892..1fe3c710e18 100644
--- a/discovery/eureka/eureka_test.go
+++ b/discovery/eureka/eureka_test.go
@@ -20,6 +20,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 
@@ -35,7 +36,7 @@ func testUpdateServices(respHandler http.HandlerFunc) ([]*targetgroup.Group, err
 		Server: ts.URL,
 	}
 
-	md, err := NewDiscovery(&conf, nil)
+	md, err := NewDiscovery(&conf, nil, prometheus.NewRegistry())
 	if err != nil {
 		return nil, err
 	}
diff --git a/discovery/file/file.go b/discovery/file/file.go
index 60b63350f53..ef6ed1f5eed 100644
--- a/discovery/file/file.go
+++ b/discovery/file/file.go
@@ -39,24 +39,6 @@ import (
 )
 
 var (
-	fileSDReadErrorsCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_file_read_errors_total",
-			Help: "The number of File-SD read errors.",
-		})
-	fileSDScanDuration = prometheus.NewSummary(
-		prometheus.SummaryOpts{
-			Name:       "prometheus_sd_file_scan_duration_seconds",
-			Help:       "The duration of the File-SD scan in seconds.",
-			Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
-		})
-	fileSDTimeStamp        = NewTimestampCollector()
-	fileWatcherErrorsCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_file_watcher_errors_total",
-			Help: "The number of File-SD errors caused by filesystem watch failures.",
-		})
-
 	patFileSDName = regexp.MustCompile(`^[^*]*(\*[^/]*)?\.(json|yml|yaml|JSON|YML|YAML)$`)
 
 	// DefaultSDConfig is the default file SD configuration.
@@ -67,7 +49,6 @@ var (
 
 func init() {
 	discovery.RegisterConfig(&SDConfig{})
-	prometheus.MustRegister(fileSDReadErrorsCount, fileSDScanDuration, fileSDTimeStamp, fileWatcherErrorsCount)
 }
 
 // SDConfig is the configuration for file based discovery.
@@ -81,7 +62,7 @@ func (*SDConfig) Name() string { return "file" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger), nil
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -187,10 +168,17 @@ type Discovery struct {
 	// This is used to detect deleted target groups.
 	lastRefresh map[string]int
 	logger      log.Logger
+
+	fileSDReadErrorsCount  prometheus.Counter
+	fileSDScanDuration     prometheus.Summary
+	fileWatcherErrorsCount prometheus.Counter
+	fileSDTimeStamp        *TimestampCollector
+
+	metricRegisterer discovery.MetricRegisterer
 }
 
 // NewDiscovery returns a new file discovery for the given paths.
-func NewDiscovery(conf *SDConfig, logger log.Logger) *Discovery {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -200,9 +188,35 @@ func NewDiscovery(conf *SDConfig, logger log.Logger) *Discovery {
 		interval:   time.Duration(conf.RefreshInterval),
 		timestamps: make(map[string]float64),
 		logger:     logger,
+		fileSDReadErrorsCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_file_read_errors_total",
+				Help: "The number of File-SD read errors.",
+			}),
+		fileSDScanDuration: prometheus.NewSummary(
+			prometheus.SummaryOpts{
+				Name:       "prometheus_sd_file_scan_duration_seconds",
+				Help:       "The duration of the File-SD scan in seconds.",
+				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
+			}),
+		fileWatcherErrorsCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_file_watcher_errors_total",
+				Help: "The number of File-SD errors caused by filesystem watch failures.",
+			}),
+		fileSDTimeStamp: NewTimestampCollector(),
 	}
-	fileSDTimeStamp.addDiscoverer(disc)
-	return disc
+
+	disc.fileSDTimeStamp.addDiscoverer(disc)
+
+	disc.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{
+		disc.fileSDReadErrorsCount,
+		disc.fileSDScanDuration,
+		disc.fileWatcherErrorsCount,
+		disc.fileSDTimeStamp,
+	})
+
+	return disc, nil
 }
 
 // listFiles returns a list of all files that match the configured patterns.
@@ -239,10 +253,17 @@ func (d *Discovery) watchFiles() {
 
 // Run implements the Discoverer interface.
 func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
+	err := d.metricRegisterer.RegisterMetrics()
+	if err != nil {
+		level.Error(d.logger).Log("msg", "Unable to register metrics", "err", err.Error())
+		return
+	}
+	defer d.metricRegisterer.UnregisterMetrics()
+
 	watcher, err := fsnotify.NewWatcher()
 	if err != nil {
 		level.Error(d.logger).Log("msg", "Error adding file watcher", "err", err)
-		fileWatcherErrorsCount.Inc()
+		d.fileWatcherErrorsCount.Inc()
 		return
 	}
 	d.watcher = watcher
@@ -306,7 +327,7 @@ func (d *Discovery) stop() {
 	done := make(chan struct{})
 	defer close(done)
 
-	fileSDTimeStamp.removeDiscoverer(d)
+	d.fileSDTimeStamp.removeDiscoverer(d)
 
 	// Closing the watcher will deadlock unless all events and errors are drained.
 	go func() {
@@ -332,13 +353,13 @@ func (d *Discovery) stop() {
 func (d *Discovery) refresh(ctx context.Context, ch chan<- []*targetgroup.Group) {
 	t0 := time.Now()
 	defer func() {
-		fileSDScanDuration.Observe(time.Since(t0).Seconds())
+		d.fileSDScanDuration.Observe(time.Since(t0).Seconds())
 	}()
 	ref := map[string]int{}
 	for _, p := range d.listFiles() {
 		tgroups, err := d.readFile(p)
 		if err != nil {
-			fileSDReadErrorsCount.Inc()
+			d.fileSDReadErrorsCount.Inc()
 
 			level.Error(d.logger).Log("msg", "Error reading file", "path", p, "err", err)
 			// Prevent deletion down below.
diff --git a/discovery/file/file_test.go b/discovery/file/file_test.go
index 76e1cebed9f..c138fc8a95e 100644
--- a/discovery/file/file_test.go
+++ b/discovery/file/file_test.go
@@ -24,6 +24,7 @@ import (
 	"testing"
 	"time"
 
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"go.uber.org/goleak"
@@ -143,7 +144,7 @@ func (t *testRunner) run(files ...string) {
 	ctx, cancel := context.WithCancel(context.Background())
 	t.cancelSD = cancel
 	go func() {
-		NewDiscovery(
+		d, err := NewDiscovery(
 			&SDConfig{
 				Files: files,
 				// Setting a high refresh interval to make sure that the tests only
@@ -151,7 +152,11 @@ func (t *testRunner) run(files ...string) {
 				RefreshInterval: model.Duration(1 * time.Hour),
 			},
 			nil,
-		).Run(ctx, t.ch)
+			prometheus.NewRegistry(),
+		)
+		require.NoError(t, err)
+
+		d.Run(ctx, t.ch)
 	}()
 }
 
diff --git a/discovery/gce/gce.go b/discovery/gce/gce.go
index fa05fbbf388..21a95ee39e6 100644
--- a/discovery/gce/gce.go
+++ b/discovery/gce/gce.go
@@ -23,6 +23,7 @@ import (
 	"time"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"golang.org/x/oauth2/google"
 	"google.golang.org/api/compute/v1"
@@ -86,7 +87,7 @@ func (*SDConfig) Name() string { return "gce" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(*c, opts.Logger)
+	return NewDiscovery(*c, opts.Logger, opts.Registerer)
 }
 
 // UnmarshalYAML implements the yaml.Unmarshaler interface.
@@ -121,7 +122,7 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf SDConfig, logger log.Logger) (*Discovery, error) {
+func NewDiscovery(conf SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	d := &Discovery{
 		project:      conf.Project,
 		zone:         conf.Zone,
@@ -141,10 +142,13 @@ func NewDiscovery(conf SDConfig, logger log.Logger) (*Discovery, error) {
 	d.isvc = compute.NewInstancesService(d.svc)
 
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"gce",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "gce",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d, nil
 }
diff --git a/discovery/hetzner/hetzner.go b/discovery/hetzner/hetzner.go
index c3f7ec39c3c..9d3e6aa65de 100644
--- a/discovery/hetzner/hetzner.go
+++ b/discovery/hetzner/hetzner.go
@@ -21,6 +21,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/hetznercloud/hcloud-go/v2/hcloud"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 
@@ -67,7 +68,7 @@ func (*SDConfig) Name() string { return "hetzner" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger)
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 type refresher interface {
@@ -127,17 +128,20 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*refresh.Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*refresh.Discovery, error) {
 	r, err := newRefresher(conf, logger)
 	if err != nil {
 		return nil, err
 	}
 
 	return refresh.NewDiscovery(
-		logger,
-		"hetzner",
-		time.Duration(conf.RefreshInterval),
-		r.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "hetzner",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: r.refresh,
+			Registry: reg,
+		},
 	), nil
 }
 
diff --git a/discovery/http/http.go b/discovery/http/http.go
index 2980d7efdad..c12fdb26d2a 100644
--- a/discovery/http/http.go
+++ b/discovery/http/http.go
@@ -45,17 +45,10 @@ var (
 	}
 	userAgent        = fmt.Sprintf("Prometheus/%s", version.Version)
 	matchContentType = regexp.MustCompile(`^(?i:application\/json(;\s*charset=("utf-8"|utf-8))?)$`)
-
-	failuresCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_http_failures_total",
-			Help: "Number of HTTP service discovery refresh failures.",
-		})
 )
 
 func init() {
 	discovery.RegisterConfig(&SDConfig{})
-	prometheus.MustRegister(failuresCount)
 }
 
 // SDConfig is the configuration for HTTP based discovery.
@@ -70,7 +63,7 @@ func (*SDConfig) Name() string { return "http" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.HTTPClientOptions)
+	return NewDiscovery(c, opts.Logger, opts.HTTPClientOptions, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -112,10 +105,11 @@ type Discovery struct {
 	client          *http.Client
 	refreshInterval time.Duration
 	tgLastLength    int
+	failuresCount   prometheus.Counter
 }
 
 // NewDiscovery returns a new HTTP discovery for the given config.
-func NewDiscovery(conf *SDConfig, logger log.Logger, clientOpts []config.HTTPClientOption) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, clientOpts []config.HTTPClientOption, reg prometheus.Registerer) (*Discovery, error) {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -130,13 +124,22 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, clientOpts []config.HTTPCli
 		url:             conf.URL,
 		client:          client,
 		refreshInterval: time.Duration(conf.RefreshInterval), // Stored to be sent as headers.
+		failuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_http_failures_total",
+				Help: "Number of HTTP service discovery refresh failures.",
+			}),
 	}
 
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"http",
-		time.Duration(conf.RefreshInterval),
-		d.Refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "http",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.Refresh,
+			Registry: reg,
+			Metrics:  []prometheus.Collector{d.failuresCount},
+		},
 	)
 	return d, nil
 }
@@ -152,7 +155,7 @@ func (d *Discovery) Refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 
 	resp, err := d.client.Do(req.WithContext(ctx))
 	if err != nil {
-		failuresCount.Inc()
+		d.failuresCount.Inc()
 		return nil, err
 	}
 	defer func() {
@@ -161,31 +164,31 @@ func (d *Discovery) Refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 	}()
 
 	if resp.StatusCode != http.StatusOK {
-		failuresCount.Inc()
+		d.failuresCount.Inc()
 		return nil, fmt.Errorf("server returned HTTP status %s", resp.Status)
 	}
 
 	if !matchContentType.MatchString(strings.TrimSpace(resp.Header.Get("Content-Type"))) {
-		failuresCount.Inc()
+		d.failuresCount.Inc()
 		return nil, fmt.Errorf("unsupported content type %q", resp.Header.Get("Content-Type"))
 	}
 
 	b, err := io.ReadAll(resp.Body)
 	if err != nil {
-		failuresCount.Inc()
+		d.failuresCount.Inc()
 		return nil, err
 	}
 
 	var targetGroups []*targetgroup.Group
 
 	if err := json.Unmarshal(b, &targetGroups); err != nil {
-		failuresCount.Inc()
+		d.failuresCount.Inc()
 		return nil, err
 	}
 
 	for i, tg := range targetGroups {
 		if tg == nil {
-			failuresCount.Inc()
+			d.failuresCount.Inc()
 			err = errors.New("nil target group item found")
 			return nil, err
 		}
diff --git a/discovery/http/http_test.go b/discovery/http/http_test.go
index 9bbda95b7f1..164719e900a 100644
--- a/discovery/http/http_test.go
+++ b/discovery/http/http_test.go
@@ -41,7 +41,7 @@ func TestHTTPValidRefresh(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil)
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
@@ -63,7 +63,7 @@ func TestHTTPValidRefresh(t *testing.T) {
 		},
 	}
 	require.Equal(t, expectedTargets, tgs)
-	require.Equal(t, 0.0, getFailureCount())
+	require.Equal(t, 0.0, getFailureCount(d.failuresCount))
 }
 
 func TestHTTPInvalidCode(t *testing.T) {
@@ -79,13 +79,13 @@ func TestHTTPInvalidCode(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil)
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
 	_, err = d.Refresh(ctx)
 	require.EqualError(t, err, "server returned HTTP status 400 Bad Request")
-	require.Equal(t, 1.0, getFailureCount())
+	require.Equal(t, 1.0, getFailureCount(d.failuresCount))
 }
 
 func TestHTTPInvalidFormat(t *testing.T) {
@@ -101,18 +101,16 @@ func TestHTTPInvalidFormat(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil)
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
 	_, err = d.Refresh(ctx)
 	require.EqualError(t, err, `unsupported content type "text/plain; charset=utf-8"`)
-	require.Equal(t, 1.0, getFailureCount())
+	require.Equal(t, 1.0, getFailureCount(d.failuresCount))
 }
 
-var lastFailureCount float64
-
-func getFailureCount() float64 {
+func getFailureCount(failuresCount prometheus.Counter) float64 {
 	failureChan := make(chan prometheus.Metric)
 
 	go func() {
@@ -129,10 +127,7 @@ func getFailureCount() float64 {
 		metric.Write(&counter)
 	}
 
-	// account for failures in prior tests
-	count := *counter.Counter.Value - lastFailureCount
-	lastFailureCount = *counter.Counter.Value
-	return count
+	return *counter.Counter.Value
 }
 
 func TestContentTypeRegex(t *testing.T) {
@@ -417,7 +412,7 @@ func TestSourceDisappeared(t *testing.T) {
 		URL:              ts.URL,
 		RefreshInterval:  model.Duration(1 * time.Second),
 	}
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil)
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, prometheus.NewRegistry())
 	require.NoError(t, err)
 	for _, test := range cases {
 		ctx := context.Background()
diff --git a/discovery/ionos/ionos.go b/discovery/ionos/ionos.go
index 3afed8d799a..36623745aba 100644
--- a/discovery/ionos/ionos.go
+++ b/discovery/ionos/ionos.go
@@ -23,6 +23,8 @@ import (
 
 	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/refresh"
+
+	"github.com/prometheus/client_golang/prometheus"
 )
 
 const (
@@ -41,7 +43,7 @@ func init() {
 type Discovery struct{}
 
 // NewDiscovery returns a new refresh.Discovery for IONOS Cloud.
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*refresh.Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*refresh.Discovery, error) {
 	if conf.ionosEndpoint == "" {
 		conf.ionosEndpoint = "https://api.ionos.com"
 	}
@@ -52,10 +54,13 @@ func NewDiscovery(conf *SDConfig, logger log.Logger) (*refresh.Discovery, error)
 	}
 
 	return refresh.NewDiscovery(
-		logger,
-		"ionos",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "ionos",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	), nil
 }
 
@@ -86,7 +91,7 @@ func (c SDConfig) Name() string {
 
 // NewDiscoverer returns a new discovery.Discoverer for IONOS Cloud.
 func (c SDConfig) NewDiscoverer(options discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(&c, options.Logger)
+	return NewDiscovery(&c, options.Logger, options.Registerer)
 }
 
 // UnmarshalYAML implements the yaml.Unmarshaler interface.
diff --git a/discovery/kubernetes/endpoints.go b/discovery/kubernetes/endpoints.go
index 708e229a2f2..801a45f7c2e 100644
--- a/discovery/kubernetes/endpoints.go
+++ b/discovery/kubernetes/endpoints.go
@@ -22,6 +22,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	apiv1 "k8s.io/api/core/v1"
 	"k8s.io/client-go/tools/cache"
@@ -30,12 +31,6 @@ import (
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
-var (
-	epAddCount    = eventCount.WithLabelValues("endpoints", "add")
-	epUpdateCount = eventCount.WithLabelValues("endpoints", "update")
-	epDeleteCount = eventCount.WithLabelValues("endpoints", "delete")
-)
-
 // Endpoints discovers new endpoint targets.
 type Endpoints struct {
 	logger log.Logger
@@ -54,7 +49,7 @@ type Endpoints struct {
 }
 
 // NewEndpoints returns a new endpoints discovery.
-func NewEndpoints(l log.Logger, eps cache.SharedIndexInformer, svc, pod, node cache.SharedInformer) *Endpoints {
+func NewEndpoints(l log.Logger, eps cache.SharedIndexInformer, svc, pod, node cache.SharedInformer, eventCount *prometheus.CounterVec) *Endpoints {
 	if l == nil {
 		l = log.NewNopLogger()
 	}
@@ -73,15 +68,15 @@ func NewEndpoints(l log.Logger, eps cache.SharedIndexInformer, svc, pod, node ca
 
 	_, err := e.endpointsInf.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			epAddCount.Inc()
+			eventCount.WithLabelValues("endpoints", "add").Inc()
 			e.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			epUpdateCount.Inc()
+			eventCount.WithLabelValues("endpoints", "update").Inc()
 			e.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			epDeleteCount.Inc()
+			eventCount.WithLabelValues("endpoints", "delete").Inc()
 			e.enqueue(o)
 		},
 	})
@@ -112,15 +107,15 @@ func NewEndpoints(l log.Logger, eps cache.SharedIndexInformer, svc, pod, node ca
 		// TODO(fabxc): potentially remove add and delete event handlers. Those should
 		// be triggered via the endpoint handlers already.
 		AddFunc: func(o interface{}) {
-			svcAddCount.Inc()
+			eventCount.WithLabelValues("service", "add").Inc()
 			serviceUpdate(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			svcUpdateCount.Inc()
+			eventCount.WithLabelValues("service", "update").Inc()
 			serviceUpdate(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			svcDeleteCount.Inc()
+			eventCount.WithLabelValues("service", "delete").Inc()
 			serviceUpdate(o)
 		},
 	})
diff --git a/discovery/kubernetes/endpointslice.go b/discovery/kubernetes/endpointslice.go
index a1686238043..e2ac1de4236 100644
--- a/discovery/kubernetes/endpointslice.go
+++ b/discovery/kubernetes/endpointslice.go
@@ -22,6 +22,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	apiv1 "k8s.io/api/core/v1"
 	v1 "k8s.io/api/discovery/v1"
@@ -33,12 +34,6 @@ import (
 	"github.com/prometheus/prometheus/util/strutil"
 )
 
-var (
-	epslAddCount    = eventCount.WithLabelValues("endpointslice", "add")
-	epslUpdateCount = eventCount.WithLabelValues("endpointslice", "update")
-	epslDeleteCount = eventCount.WithLabelValues("endpointslice", "delete")
-)
-
 // EndpointSlice discovers new endpoint targets.
 type EndpointSlice struct {
 	logger log.Logger
@@ -57,7 +52,7 @@ type EndpointSlice struct {
 }
 
 // NewEndpointSlice returns a new endpointslice discovery.
-func NewEndpointSlice(l log.Logger, eps cache.SharedIndexInformer, svc, pod, node cache.SharedInformer) *EndpointSlice {
+func NewEndpointSlice(l log.Logger, eps cache.SharedIndexInformer, svc, pod, node cache.SharedInformer, eventCount *prometheus.CounterVec) *EndpointSlice {
 	if l == nil {
 		l = log.NewNopLogger()
 	}
@@ -76,15 +71,15 @@ func NewEndpointSlice(l log.Logger, eps cache.SharedIndexInformer, svc, pod, nod
 
 	_, err := e.endpointSliceInf.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			epslAddCount.Inc()
+			eventCount.WithLabelValues("endpointslice", "add").Inc()
 			e.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			epslUpdateCount.Inc()
+			eventCount.WithLabelValues("endpointslice", "update").Inc()
 			e.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			epslDeleteCount.Inc()
+			eventCount.WithLabelValues("endpointslice", "delete").Inc()
 			e.enqueue(o)
 		},
 	})
@@ -115,15 +110,15 @@ func NewEndpointSlice(l log.Logger, eps cache.SharedIndexInformer, svc, pod, nod
 	}
 	_, err = e.serviceInf.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			svcAddCount.Inc()
+			eventCount.WithLabelValues("service", "add").Inc()
 			serviceUpdate(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			svcUpdateCount.Inc()
+			eventCount.WithLabelValues("service", "update").Inc()
 			serviceUpdate(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			svcDeleteCount.Inc()
+			eventCount.WithLabelValues("service", "delete").Inc()
 			serviceUpdate(o)
 		},
 	})
diff --git a/discovery/kubernetes/ingress.go b/discovery/kubernetes/ingress.go
index fee4cc72070..91b1fb0ee52 100644
--- a/discovery/kubernetes/ingress.go
+++ b/discovery/kubernetes/ingress.go
@@ -21,6 +21,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	v1 "k8s.io/api/networking/v1"
 	"k8s.io/api/networking/v1beta1"
@@ -30,12 +31,6 @@ import (
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
-var (
-	ingressAddCount    = eventCount.WithLabelValues("ingress", "add")
-	ingressUpdateCount = eventCount.WithLabelValues("ingress", "update")
-	ingressDeleteCount = eventCount.WithLabelValues("ingress", "delete")
-)
-
 // Ingress implements discovery of Kubernetes ingress.
 type Ingress struct {
 	logger   log.Logger
@@ -45,19 +40,19 @@ type Ingress struct {
 }
 
 // NewIngress returns a new ingress discovery.
-func NewIngress(l log.Logger, inf cache.SharedInformer) *Ingress {
+func NewIngress(l log.Logger, inf cache.SharedInformer, eventCount *prometheus.CounterVec) *Ingress {
 	s := &Ingress{logger: l, informer: inf, store: inf.GetStore(), queue: workqueue.NewNamed("ingress")}
 	_, err := s.informer.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			ingressAddCount.Inc()
+			eventCount.WithLabelValues("ingress", "add").Inc()
 			s.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			ingressDeleteCount.Inc()
+			eventCount.WithLabelValues("ingress", "delete").Inc()
 			s.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			ingressUpdateCount.Inc()
+			eventCount.WithLabelValues("ingress", "update").Inc()
 			s.enqueue(o)
 		},
 	})
diff --git a/discovery/kubernetes/kubernetes.go b/discovery/kubernetes/kubernetes.go
index 7bd96652f97..4deaf3f6834 100644
--- a/discovery/kubernetes/kubernetes.go
+++ b/discovery/kubernetes/kubernetes.go
@@ -58,24 +58,14 @@ import (
 const (
 	// metaLabelPrefix is the meta prefix used for all meta labels.
 	// in this discovery.
-	metaLabelPrefix  = model.MetaLabelPrefix + "kubernetes_"
-	namespaceLabel   = metaLabelPrefix + "namespace"
-	metricsNamespace = "prometheus_sd_kubernetes"
-	presentValue     = model.LabelValue("true")
+	metaLabelPrefix = model.MetaLabelPrefix + "kubernetes_"
+	namespaceLabel  = metaLabelPrefix + "namespace"
+	presentValue    = model.LabelValue("true")
 )
 
 var (
 	// Http header.
 	userAgent = fmt.Sprintf("Prometheus/%s", version.Version)
-	// Custom events metric.
-	eventCount = prometheus.NewCounterVec(
-		prometheus.CounterOpts{
-			Namespace: metricsNamespace,
-			Name:      "events_total",
-			Help:      "The number of Kubernetes events handled.",
-		},
-		[]string{"role", "event"},
-	)
 	// DefaultSDConfig is the default Kubernetes SD configuration.
 	DefaultSDConfig = SDConfig{
 		HTTPClientConfig: config.DefaultHTTPClientConfig,
@@ -84,15 +74,6 @@ var (
 
 func init() {
 	discovery.RegisterConfig(&SDConfig{})
-	prometheus.MustRegister(eventCount)
-	// Initialize metric vectors.
-	for _, role := range []string{"endpointslice", "endpoints", "node", "pod", "service", "ingress"} {
-		for _, evt := range []string{"add", "delete", "update"} {
-			eventCount.WithLabelValues(role, evt)
-		}
-	}
-	(&clientGoRequestMetricAdapter{}).Register(prometheus.DefaultRegisterer)
-	(&clientGoWorkqueueMetricsProvider{}).Register(prometheus.DefaultRegisterer)
 }
 
 // Role is role of the service in Kubernetes.
@@ -137,7 +118,7 @@ func (*SDConfig) Name() string { return "kubernetes" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return New(opts.Logger, c)
+	return New(opts.Logger, opts.Registerer, c)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -274,6 +255,8 @@ type Discovery struct {
 	selectors          roleSelector
 	ownNamespace       string
 	attachMetadata     AttachMetadataConfig
+	eventCount         *prometheus.CounterVec
+	metricRegisterer   discovery.MetricRegisterer
 }
 
 func (d *Discovery) getNamespaces() []string {
@@ -292,7 +275,7 @@ func (d *Discovery) getNamespaces() []string {
 }
 
 // New creates a new Kubernetes discovery for the given role.
-func New(l log.Logger, conf *SDConfig) (*Discovery, error) {
+func New(l log.Logger, reg prometheus.Registerer, conf *SDConfig) (*Discovery, error) {
 	if l == nil {
 		l = log.NewNopLogger()
 	}
@@ -346,7 +329,7 @@ func New(l log.Logger, conf *SDConfig) (*Discovery, error) {
 		return nil, err
 	}
 
-	return &Discovery{
+	d := &Discovery{
 		client:             c,
 		logger:             l,
 		role:               conf.Role,
@@ -355,7 +338,26 @@ func New(l log.Logger, conf *SDConfig) (*Discovery, error) {
 		selectors:          mapSelector(conf.Selectors),
 		ownNamespace:       ownNamespace,
 		attachMetadata:     conf.AttachMetadata,
-	}, nil
+		eventCount: prometheus.NewCounterVec(
+			prometheus.CounterOpts{
+				Namespace: discovery.KubernetesMetricsNamespace,
+				Name:      "events_total",
+				Help:      "The number of Kubernetes events handled.",
+			},
+			[]string{"role", "event"},
+		),
+	}
+
+	d.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{d.eventCount})
+
+	// Initialize metric vectors.
+	for _, role := range []string{"endpointslice", "endpoints", "node", "pod", "service", "ingress"} {
+		for _, evt := range []string{"add", "delete", "update"} {
+			d.eventCount.WithLabelValues(role, evt)
+		}
+	}
+
+	return d, nil
 }
 
 func mapSelector(rawSelector []SelectorConfig) roleSelector {
@@ -391,6 +393,14 @@ const resyncDisabled = 0
 // Run implements the discoverer interface.
 func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 	d.Lock()
+
+	err := d.metricRegisterer.RegisterMetrics()
+	if err != nil {
+		level.Error(d.logger).Log("msg", "Unable to register metrics", "err", err.Error())
+		return
+	}
+	defer d.metricRegisterer.UnregisterMetrics()
+
 	namespaces := d.getNamespaces()
 
 	switch d.role {
@@ -482,6 +492,7 @@ func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 				cache.NewSharedInformer(slw, &apiv1.Service{}, resyncDisabled),
 				cache.NewSharedInformer(plw, &apiv1.Pod{}, resyncDisabled),
 				nodeInf,
+				d.eventCount,
 			)
 			d.discoverers = append(d.discoverers, eps)
 			go eps.endpointSliceInf.Run(ctx.Done())
@@ -541,6 +552,7 @@ func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 				cache.NewSharedInformer(slw, &apiv1.Service{}, resyncDisabled),
 				cache.NewSharedInformer(plw, &apiv1.Pod{}, resyncDisabled),
 				nodeInf,
+				d.eventCount,
 			)
 			d.discoverers = append(d.discoverers, eps)
 			go eps.endpointsInf.Run(ctx.Done())
@@ -572,6 +584,7 @@ func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 				log.With(d.logger, "role", "pod"),
 				d.newPodsByNodeInformer(plw),
 				nodeInformer,
+				d.eventCount,
 			)
 			d.discoverers = append(d.discoverers, pod)
 			go pod.podInf.Run(ctx.Done())
@@ -594,6 +607,7 @@ func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 			svc := NewService(
 				log.With(d.logger, "role", "service"),
 				cache.NewSharedInformer(slw, &apiv1.Service{}, resyncDisabled),
+				d.eventCount,
 			)
 			d.discoverers = append(d.discoverers, svc)
 			go svc.informer.Run(ctx.Done())
@@ -651,13 +665,14 @@ func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 			ingress := NewIngress(
 				log.With(d.logger, "role", "ingress"),
 				informer,
+				d.eventCount,
 			)
 			d.discoverers = append(d.discoverers, ingress)
 			go ingress.informer.Run(ctx.Done())
 		}
 	case RoleNode:
 		nodeInformer := d.newNodeInformer(ctx)
-		node := NewNode(log.With(d.logger, "role", "node"), nodeInformer)
+		node := NewNode(log.With(d.logger, "role", "node"), nodeInformer, d.eventCount)
 		d.discoverers = append(d.discoverers, node)
 		go node.informer.Run(ctx.Done())
 	default:
diff --git a/discovery/kubernetes/kubernetes_test.go b/discovery/kubernetes/kubernetes_test.go
index d0ed4c6ca16..71c937e944a 100644
--- a/discovery/kubernetes/kubernetes_test.go
+++ b/discovery/kubernetes/kubernetes_test.go
@@ -29,6 +29,8 @@ import (
 	"k8s.io/client-go/kubernetes/fake"
 	"k8s.io/client-go/tools/cache"
 
+	"github.com/prometheus/client_golang/prometheus"
+
 	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 	"github.com/prometheus/prometheus/util/testutil"
@@ -49,13 +51,25 @@ func makeDiscoveryWithVersion(role Role, nsDiscovery NamespaceDiscovery, k8sVer
 	fakeDiscovery, _ := clientset.Discovery().(*fakediscovery.FakeDiscovery)
 	fakeDiscovery.FakedServerVersion = &version.Info{GitVersion: k8sVer}
 
-	return &Discovery{
+	d := &Discovery{
 		client:             clientset,
 		logger:             log.NewNopLogger(),
 		role:               role,
 		namespaceDiscovery: &nsDiscovery,
 		ownNamespace:       "own-ns",
-	}, clientset
+		eventCount: prometheus.NewCounterVec(
+			prometheus.CounterOpts{
+				Namespace: discovery.KubernetesMetricsNamespace,
+				Name:      "events_total",
+				Help:      "The number of Kubernetes events handled.",
+			},
+			[]string{"role", "event"},
+		),
+	}
+
+	d.metricRegisterer = discovery.NewMetricRegisterer(prometheus.NewRegistry(), []prometheus.Collector{d.eventCount})
+
+	return d, clientset
 }
 
 // makeDiscoveryWithMetadata creates a kubernetes.Discovery instance with the specified metadata config.
diff --git a/discovery/kubernetes/node.go b/discovery/kubernetes/node.go
index b188a3ceb17..f1e37e6fae4 100644
--- a/discovery/kubernetes/node.go
+++ b/discovery/kubernetes/node.go
@@ -22,6 +22,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	apiv1 "k8s.io/api/core/v1"
 	"k8s.io/client-go/tools/cache"
@@ -35,12 +36,6 @@ const (
 	NodeLegacyHostIP = "LegacyHostIP"
 )
 
-var (
-	nodeAddCount    = eventCount.WithLabelValues("node", "add")
-	nodeUpdateCount = eventCount.WithLabelValues("node", "update")
-	nodeDeleteCount = eventCount.WithLabelValues("node", "delete")
-)
-
 // Node discovers Kubernetes nodes.
 type Node struct {
 	logger   log.Logger
@@ -50,22 +45,22 @@ type Node struct {
 }
 
 // NewNode returns a new node discovery.
-func NewNode(l log.Logger, inf cache.SharedInformer) *Node {
+func NewNode(l log.Logger, inf cache.SharedInformer, eventCount *prometheus.CounterVec) *Node {
 	if l == nil {
 		l = log.NewNopLogger()
 	}
 	n := &Node{logger: l, informer: inf, store: inf.GetStore(), queue: workqueue.NewNamed("node")}
 	_, err := n.informer.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			nodeAddCount.Inc()
+			eventCount.WithLabelValues("node", "add").Inc()
 			n.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			nodeDeleteCount.Inc()
+			eventCount.WithLabelValues("node", "delete").Inc()
 			n.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			nodeUpdateCount.Inc()
+			eventCount.WithLabelValues("node", "update").Inc()
 			n.enqueue(o)
 		},
 	})
diff --git a/discovery/kubernetes/pod.go b/discovery/kubernetes/pod.go
index 88da7bba692..cc809b29c7e 100644
--- a/discovery/kubernetes/pod.go
+++ b/discovery/kubernetes/pod.go
@@ -23,6 +23,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	apiv1 "k8s.io/api/core/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
@@ -34,12 +35,6 @@ import (
 
 const nodeIndex = "node"
 
-var (
-	podAddCount    = eventCount.WithLabelValues("pod", "add")
-	podUpdateCount = eventCount.WithLabelValues("pod", "update")
-	podDeleteCount = eventCount.WithLabelValues("pod", "delete")
-)
-
 // Pod discovers new pod targets.
 type Pod struct {
 	podInf           cache.SharedIndexInformer
@@ -51,7 +46,7 @@ type Pod struct {
 }
 
 // NewPod creates a new pod discovery.
-func NewPod(l log.Logger, pods cache.SharedIndexInformer, nodes cache.SharedInformer) *Pod {
+func NewPod(l log.Logger, pods cache.SharedIndexInformer, nodes cache.SharedInformer, eventCount *prometheus.CounterVec) *Pod {
 	if l == nil {
 		l = log.NewNopLogger()
 	}
@@ -66,15 +61,15 @@ func NewPod(l log.Logger, pods cache.SharedIndexInformer, nodes cache.SharedInfo
 	}
 	_, err := p.podInf.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			podAddCount.Inc()
+			eventCount.WithLabelValues("pod", "add").Inc()
 			p.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			podDeleteCount.Inc()
+			eventCount.WithLabelValues("pod", "delete").Inc()
 			p.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			podUpdateCount.Inc()
+			eventCount.WithLabelValues("pod", "update").Inc()
 			p.enqueue(o)
 		},
 	})
diff --git a/discovery/kubernetes/service.go b/discovery/kubernetes/service.go
index 9fcc6644c3d..a680ebee8f2 100644
--- a/discovery/kubernetes/service.go
+++ b/discovery/kubernetes/service.go
@@ -22,6 +22,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	apiv1 "k8s.io/api/core/v1"
 	"k8s.io/client-go/tools/cache"
@@ -30,12 +31,6 @@ import (
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
-var (
-	svcAddCount    = eventCount.WithLabelValues("service", "add")
-	svcUpdateCount = eventCount.WithLabelValues("service", "update")
-	svcDeleteCount = eventCount.WithLabelValues("service", "delete")
-)
-
 // Service implements discovery of Kubernetes services.
 type Service struct {
 	logger   log.Logger
@@ -45,22 +40,22 @@ type Service struct {
 }
 
 // NewService returns a new service discovery.
-func NewService(l log.Logger, inf cache.SharedInformer) *Service {
+func NewService(l log.Logger, inf cache.SharedInformer, eventCount *prometheus.CounterVec) *Service {
 	if l == nil {
 		l = log.NewNopLogger()
 	}
 	s := &Service{logger: l, informer: inf, store: inf.GetStore(), queue: workqueue.NewNamed("service")}
 	_, err := s.informer.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			svcAddCount.Inc()
+			eventCount.WithLabelValues("service", "add").Inc()
 			s.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			svcDeleteCount.Inc()
+			eventCount.WithLabelValues("service", "delete").Inc()
 			s.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			svcUpdateCount.Inc()
+			eventCount.WithLabelValues("service", "update").Inc()
 			s.enqueue(o)
 		},
 	})
diff --git a/discovery/legacymanager/manager.go b/discovery/legacymanager/manager.go
index 74c544e7265..101012dafae 100644
--- a/discovery/legacymanager/manager.go
+++ b/discovery/legacymanager/manager.go
@@ -28,48 +28,6 @@ import (
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
-var (
-	failedConfigs = prometheus.NewGaugeVec(
-		prometheus.GaugeOpts{
-			Name: "prometheus_sd_failed_configs",
-			Help: "Current number of service discovery configurations that failed to load.",
-		},
-		[]string{"name"},
-	)
-	discoveredTargets = prometheus.NewGaugeVec(
-		prometheus.GaugeOpts{
-			Name: "prometheus_sd_discovered_targets",
-			Help: "Current number of discovered targets.",
-		},
-		[]string{"name", "config"},
-	)
-	receivedUpdates = prometheus.NewCounterVec(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_received_updates_total",
-			Help: "Total number of update events received from the SD providers.",
-		},
-		[]string{"name"},
-	)
-	delayedUpdates = prometheus.NewCounterVec(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_updates_delayed_total",
-			Help: "Total number of update events that couldn't be sent immediately.",
-		},
-		[]string{"name"},
-	)
-	sentUpdates = prometheus.NewCounterVec(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_updates_total",
-			Help: "Total number of update events sent to the SD consumers.",
-		},
-		[]string{"name"},
-	)
-)
-
-func RegisterMetrics() {
-	prometheus.MustRegister(failedConfigs, discoveredTargets, receivedUpdates, delayedUpdates, sentUpdates)
-}
-
 type poolKey struct {
 	setName  string
 	provider string
@@ -84,7 +42,7 @@ type provider struct {
 }
 
 // NewManager is the Discovery Manager constructor.
-func NewManager(ctx context.Context, logger log.Logger, options ...func(*Manager)) *Manager {
+func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Registerer, metrics *discovery.Metrics, options ...func(*Manager)) *Manager {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -96,6 +54,8 @@ func NewManager(ctx context.Context, logger log.Logger, options ...func(*Manager
 		ctx:            ctx,
 		updatert:       5 * time.Second,
 		triggerSend:    make(chan struct{}, 1),
+		registerer:     registerer,
+		metrics:        metrics,
 	}
 	for _, option := range options {
 		option(mgr)
@@ -135,6 +95,11 @@ type Manager struct {
 
 	// The triggerSend channel signals to the manager that new updates have been received from providers.
 	triggerSend chan struct{}
+
+	// A registerer for all service discovery metrics.
+	registerer prometheus.Registerer
+
+	metrics *discovery.Metrics
 }
 
 // Run starts the background processing.
@@ -157,7 +122,7 @@ func (m *Manager) ApplyConfig(cfg map[string]discovery.Configs) error {
 
 	for pk := range m.targets {
 		if _, ok := cfg[pk.setName]; !ok {
-			discoveredTargets.DeleteLabelValues(m.name, pk.setName)
+			m.metrics.DiscoveredTargets.DeleteLabelValues(m.name, pk.setName)
 		}
 	}
 	m.cancelDiscoverers()
@@ -168,9 +133,9 @@ func (m *Manager) ApplyConfig(cfg map[string]discovery.Configs) error {
 	failedCount := 0
 	for name, scfg := range cfg {
 		failedCount += m.registerProviders(scfg, name)
-		discoveredTargets.WithLabelValues(m.name, name).Set(0)
+		m.metrics.DiscoveredTargets.WithLabelValues(m.name, name).Set(0)
 	}
-	failedConfigs.WithLabelValues(m.name).Set(float64(failedCount))
+	m.metrics.FailedConfigs.WithLabelValues(m.name).Set(float64(failedCount))
 
 	for _, prov := range m.providers {
 		m.startProvider(m.ctx, prov)
@@ -207,7 +172,7 @@ func (m *Manager) updater(ctx context.Context, p *provider, updates chan []*targ
 		case <-ctx.Done():
 			return
 		case tgs, ok := <-updates:
-			receivedUpdates.WithLabelValues(m.name).Inc()
+			m.metrics.ReceivedUpdates.WithLabelValues(m.name).Inc()
 			if !ok {
 				level.Debug(m.logger).Log("msg", "Discoverer channel closed", "provider", p.name)
 				return
@@ -236,11 +201,11 @@ func (m *Manager) sender() {
 		case <-ticker.C: // Some discoverers send updates too often so we throttle these with the ticker.
 			select {
 			case <-m.triggerSend:
-				sentUpdates.WithLabelValues(m.name).Inc()
+				m.metrics.SentUpdates.WithLabelValues(m.name).Inc()
 				select {
 				case m.syncCh <- m.allGroups():
 				default:
-					delayedUpdates.WithLabelValues(m.name).Inc()
+					m.metrics.DelayedUpdates.WithLabelValues(m.name).Inc()
 					level.Debug(m.logger).Log("msg", "Discovery receiver's channel was full so will retry the next cycle")
 					select {
 					case m.triggerSend <- struct{}{}:
@@ -288,7 +253,7 @@ func (m *Manager) allGroups() map[string][]*targetgroup.Group {
 		}
 	}
 	for setName, v := range n {
-		discoveredTargets.WithLabelValues(m.name, setName).Set(float64(v))
+		m.metrics.DiscoveredTargets.WithLabelValues(m.name, setName).Set(float64(v))
 	}
 	return tSets
 }
@@ -309,7 +274,8 @@ func (m *Manager) registerProviders(cfgs discovery.Configs, setName string) int
 		}
 		typ := cfg.Name()
 		d, err := cfg.NewDiscoverer(discovery.DiscovererOptions{
-			Logger: log.With(m.logger, "discovery", typ, "config", setName),
+			Logger:     log.With(m.logger, "discovery", typ, "config", setName),
+			Registerer: m.registerer,
 		})
 		if err != nil {
 			level.Error(m.logger).Log("msg", "Cannot create service discovery", "err", err, "type", typ, "config", setName)
diff --git a/discovery/legacymanager/manager_test.go b/discovery/legacymanager/manager_test.go
index 13b84e6e368..dccb687c2c2 100644
--- a/discovery/legacymanager/manager_test.go
+++ b/discovery/legacymanager/manager_test.go
@@ -22,6 +22,7 @@ import (
 	"time"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	client_testutil "github.com/prometheus/client_golang/prometheus/testutil"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
@@ -35,6 +36,12 @@ func TestMain(m *testing.M) {
 	testutil.TolerantVerifyLeak(m)
 }
 
+func newTestDiscoveryMetrics(t *testing.T) *discovery.Metrics {
+	metrics, err := discovery.NewMetrics(prometheus.NewRegistry())
+	require.NoError(t, err)
+	return metrics
+}
+
 // TestTargetUpdatesOrder checks that the target updates are received in the expected order.
 func TestTargetUpdatesOrder(t *testing.T) {
 	// The order by which the updates are send is determined by the interval passed to the mock discovery adapter
@@ -664,7 +671,7 @@ func TestTargetUpdatesOrder(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			discoveryManager := NewManager(ctx, log.NewNopLogger())
+			discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 			discoveryManager.updatert = 100 * time.Millisecond
 
 			var totalUpdatesCount int
@@ -746,7 +753,7 @@ func verifyPresence(t *testing.T, tSets map[poolKey]map[string]*targetgroup.Grou
 func TestTargetSetRecreatesTargetGroupsEveryRun(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -774,7 +781,7 @@ func TestTargetSetRecreatesTargetGroupsEveryRun(t *testing.T) {
 func TestDiscovererConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -798,7 +805,7 @@ func TestDiscovererConfigs(t *testing.T) {
 func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -837,7 +844,7 @@ func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 func TestIdenticalConfigurationsAreCoalesced(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, nil)
+	discoveryManager := NewManager(ctx, nil, prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -868,7 +875,7 @@ func TestApplyConfigDoesNotModifyStaticTargets(t *testing.T) {
 	}
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -893,7 +900,7 @@ func (e errorConfig) NewDiscoverer(discovery.DiscovererOptions) (discovery.Disco
 func TestGaugeFailedConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -907,7 +914,7 @@ func TestGaugeFailedConfigs(t *testing.T) {
 	discoveryManager.ApplyConfig(c)
 	<-discoveryManager.SyncCh()
 
-	failedCount := client_testutil.ToFloat64(failedConfigs)
+	failedCount := client_testutil.ToFloat64(discoveryManager.metrics.FailedConfigs)
 	if failedCount != 3 {
 		t.Fatalf("Expected to have 3 failed configs, got: %v", failedCount)
 	}
@@ -918,7 +925,7 @@ func TestGaugeFailedConfigs(t *testing.T) {
 	discoveryManager.ApplyConfig(c)
 	<-discoveryManager.SyncCh()
 
-	failedCount = client_testutil.ToFloat64(failedConfigs)
+	failedCount = client_testutil.ToFloat64(discoveryManager.metrics.FailedConfigs)
 	if failedCount != 0 {
 		t.Fatalf("Expected to get no failed config, got: %v", failedCount)
 	}
@@ -1049,7 +1056,7 @@ func TestCoordinationWithReceiver(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			mgr := NewManager(ctx, nil)
+			mgr := NewManager(ctx, nil, prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 			mgr.updatert = updateDelay
 			go mgr.Run()
 
diff --git a/discovery/linode/linode.go b/discovery/linode/linode.go
index a5e047b948c..38a5cdad4b5 100644
--- a/discovery/linode/linode.go
+++ b/discovery/linode/linode.go
@@ -67,24 +67,15 @@ const (
 )
 
 // DefaultSDConfig is the default Linode SD configuration.
-var (
-	DefaultSDConfig = SDConfig{
-		TagSeparator:     ",",
-		Port:             80,
-		RefreshInterval:  model.Duration(60 * time.Second),
-		HTTPClientConfig: config.DefaultHTTPClientConfig,
-	}
-
-	failuresCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_linode_failures_total",
-			Help: "Number of Linode service discovery refresh failures.",
-		})
-)
+var DefaultSDConfig = SDConfig{
+	TagSeparator:     ",",
+	Port:             80,
+	RefreshInterval:  model.Duration(60 * time.Second),
+	HTTPClientConfig: config.DefaultHTTPClientConfig,
+}
 
 func init() {
 	discovery.RegisterConfig(&SDConfig{})
-	prometheus.MustRegister(failuresCount)
 }
 
 // SDConfig is the configuration for Linode based service discovery.
@@ -101,7 +92,7 @@ func (*SDConfig) Name() string { return "linode" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger)
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -131,16 +122,22 @@ type Discovery struct {
 	pollCount            int
 	lastResults          []*targetgroup.Group
 	eventPollingEnabled  bool
+	failuresCount        prometheus.Counter
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	d := &Discovery{
 		port:                 conf.Port,
 		tagSeparator:         conf.TagSeparator,
 		pollCount:            0,
 		lastRefreshTimestamp: time.Now().UTC(),
 		eventPollingEnabled:  true,
+		failuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_linode_failures_total",
+				Help: "Number of Linode service discovery refresh failures.",
+			}),
 	}
 
 	rt, err := config.NewRoundTripperFromConfig(conf.HTTPClientConfig, "linode_sd")
@@ -158,10 +155,14 @@ func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
 	d.client = &client
 
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"linode",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "linode",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+			Metrics:  []prometheus.Collector{d.failuresCount},
+		},
 	)
 	return d, nil
 }
@@ -222,14 +223,14 @@ func (d *Discovery) refreshData(ctx context.Context) ([]*targetgroup.Group, erro
 	// Gather all linode instances.
 	instances, err := d.client.ListInstances(ctx, &linodego.ListOptions{PageSize: 500})
 	if err != nil {
-		failuresCount.Inc()
+		d.failuresCount.Inc()
 		return nil, err
 	}
 
 	// Gather detailed IP address info for all IPs on all linode instances.
 	detailedIPs, err := d.client.ListIPAddresses(ctx, &linodego.ListOptions{PageSize: 500})
 	if err != nil {
-		failuresCount.Inc()
+		d.failuresCount.Inc()
 		return nil, err
 	}
 
diff --git a/discovery/linode/linode_test.go b/discovery/linode/linode_test.go
index db4ee9bf849..536b12090cc 100644
--- a/discovery/linode/linode_test.go
+++ b/discovery/linode/linode_test.go
@@ -20,6 +20,7 @@ import (
 	"testing"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
@@ -52,7 +53,7 @@ func TestLinodeSDRefresh(t *testing.T) {
 		Credentials: tokenID,
 		Type:        "Bearer",
 	}
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 	endpoint, err := url.Parse(sdmock.Mock.Endpoint())
 	require.NoError(t, err)
diff --git a/discovery/manager.go b/discovery/manager.go
index 86439d2c95e..6afa1b62269 100644
--- a/discovery/manager.go
+++ b/discovery/manager.go
@@ -28,48 +28,6 @@ import (
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
-var (
-	failedConfigs = prometheus.NewGaugeVec(
-		prometheus.GaugeOpts{
-			Name: "prometheus_sd_failed_configs",
-			Help: "Current number of service discovery configurations that failed to load.",
-		},
-		[]string{"name"},
-	)
-	discoveredTargets = prometheus.NewGaugeVec(
-		prometheus.GaugeOpts{
-			Name: "prometheus_sd_discovered_targets",
-			Help: "Current number of discovered targets.",
-		},
-		[]string{"name", "config"},
-	)
-	receivedUpdates = prometheus.NewCounterVec(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_received_updates_total",
-			Help: "Total number of update events received from the SD providers.",
-		},
-		[]string{"name"},
-	)
-	delayedUpdates = prometheus.NewCounterVec(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_updates_delayed_total",
-			Help: "Total number of update events that couldn't be sent immediately.",
-		},
-		[]string{"name"},
-	)
-	sentUpdates = prometheus.NewCounterVec(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_updates_total",
-			Help: "Total number of update events sent to the SD consumers.",
-		},
-		[]string{"name"},
-	)
-)
-
-func RegisterMetrics() {
-	prometheus.MustRegister(failedConfigs, discoveredTargets, receivedUpdates, delayedUpdates, sentUpdates)
-}
-
 type poolKey struct {
 	setName  string
 	provider string
@@ -107,7 +65,7 @@ func (p *Provider) Config() interface{} {
 }
 
 // NewManager is the Discovery Manager constructor.
-func NewManager(ctx context.Context, logger log.Logger, options ...func(*Manager)) *Manager {
+func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Registerer, metrics *Metrics, options ...func(*Manager)) *Manager {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -118,6 +76,8 @@ func NewManager(ctx context.Context, logger log.Logger, options ...func(*Manager
 		ctx:         ctx,
 		updatert:    5 * time.Second,
 		triggerSend: make(chan struct{}, 1),
+		registerer:  registerer,
+		metrics:     metrics,
 	}
 	for _, option := range options {
 		option(mgr)
@@ -170,6 +130,11 @@ type Manager struct {
 
 	// lastProvider counts providers registered during Manager's lifetime.
 	lastProvider uint
+
+	// A registerer for all service discovery metrics.
+	registerer prometheus.Registerer
+
+	metrics *Metrics
 }
 
 // Providers returns the currently configured SD providers.
@@ -200,7 +165,7 @@ func (m *Manager) ApplyConfig(cfg map[string]Configs) error {
 	for name, scfg := range cfg {
 		failedCount += m.registerProviders(scfg, name)
 	}
-	failedConfigs.WithLabelValues(m.name).Set(float64(failedCount))
+	m.metrics.FailedConfigs.WithLabelValues(m.name).Set(float64(failedCount))
 
 	var (
 		wg sync.WaitGroup
@@ -230,13 +195,13 @@ func (m *Manager) ApplyConfig(cfg map[string]Configs) error {
 			// Remove obsolete subs' targets.
 			if _, ok := prov.newSubs[s]; !ok {
 				delete(m.targets, poolKey{s, prov.name})
-				discoveredTargets.DeleteLabelValues(m.name, s)
+				m.metrics.DiscoveredTargets.DeleteLabelValues(m.name, s)
 			}
 		}
 		// Set metrics and targets for new subs.
 		for s := range prov.newSubs {
 			if _, ok := prov.subs[s]; !ok {
-				discoveredTargets.WithLabelValues(m.name, s).Set(0)
+				m.metrics.DiscoveredTargets.WithLabelValues(m.name, s).Set(0)
 			}
 			if l := len(refTargets); l > 0 {
 				m.targets[poolKey{s, prov.name}] = make(map[string]*targetgroup.Group, l)
@@ -316,7 +281,7 @@ func (m *Manager) updater(ctx context.Context, p *Provider, updates chan []*targ
 		case <-ctx.Done():
 			return
 		case tgs, ok := <-updates:
-			receivedUpdates.WithLabelValues(m.name).Inc()
+			m.metrics.ReceivedUpdates.WithLabelValues(m.name).Inc()
 			if !ok {
 				level.Debug(m.logger).Log("msg", "Discoverer channel closed", "provider", p.name)
 				// Wait for provider cancellation to ensure targets are cleaned up when expected.
@@ -349,11 +314,11 @@ func (m *Manager) sender() {
 		case <-ticker.C: // Some discoverers send updates too often, so we throttle these with the ticker.
 			select {
 			case <-m.triggerSend:
-				sentUpdates.WithLabelValues(m.name).Inc()
+				m.metrics.SentUpdates.WithLabelValues(m.name).Inc()
 				select {
 				case m.syncCh <- m.allGroups():
 				default:
-					delayedUpdates.WithLabelValues(m.name).Inc()
+					m.metrics.DelayedUpdates.WithLabelValues(m.name).Inc()
 					level.Debug(m.logger).Log("msg", "Discovery receiver's channel was full so will retry the next cycle")
 					select {
 					case m.triggerSend <- struct{}{}:
@@ -405,7 +370,7 @@ func (m *Manager) allGroups() map[string][]*targetgroup.Group {
 		}
 	}
 	for setName, v := range n {
-		discoveredTargets.WithLabelValues(m.name, setName).Set(float64(v))
+		m.metrics.DiscoveredTargets.WithLabelValues(m.name, setName).Set(float64(v))
 	}
 	return tSets
 }
@@ -428,6 +393,7 @@ func (m *Manager) registerProviders(cfgs Configs, setName string) int {
 		d, err := cfg.NewDiscoverer(DiscovererOptions{
 			Logger:            log.With(m.logger, "discovery", typ, "config", setName),
 			HTTPClientOptions: m.httpOpts,
+			Registerer:        m.registerer,
 		})
 		if err != nil {
 			level.Error(m.logger).Log("msg", "Cannot create service discovery", "err", err, "type", typ, "config", setName)
diff --git a/discovery/manager_test.go b/discovery/manager_test.go
index 796b01458cc..3cb2773431e 100644
--- a/discovery/manager_test.go
+++ b/discovery/manager_test.go
@@ -23,6 +23,7 @@ import (
 	"time"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	client_testutil "github.com/prometheus/client_golang/prometheus/testutil"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
@@ -35,6 +36,12 @@ func TestMain(m *testing.M) {
 	testutil.TolerantVerifyLeak(m)
 }
 
+func newTestDiscoveryMetrics(t *testing.T) *Metrics {
+	metrics, err := NewMetrics(prometheus.NewRegistry())
+	require.NoError(t, err)
+	return metrics
+}
+
 // TestTargetUpdatesOrder checks that the target updates are received in the expected order.
 func TestTargetUpdatesOrder(t *testing.T) {
 	// The order by which the updates are send is determined by the interval passed to the mock discovery adapter
@@ -664,7 +671,7 @@ func TestTargetUpdatesOrder(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			discoveryManager := NewManager(ctx, log.NewNopLogger())
+			discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 			discoveryManager.updatert = 100 * time.Millisecond
 
 			var totalUpdatesCount int
@@ -778,7 +785,7 @@ func pk(provider, setName string, n int) poolKey {
 func TestTargetSetTargetGroupsPresentOnConfigReload(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -810,7 +817,7 @@ func TestTargetSetTargetGroupsPresentOnConfigReload(t *testing.T) {
 func TestTargetSetTargetGroupsPresentOnConfigRename(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -845,7 +852,7 @@ func TestTargetSetTargetGroupsPresentOnConfigRename(t *testing.T) {
 func TestTargetSetTargetGroupsPresentOnConfigDuplicateAndDeleteOriginal(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -883,7 +890,7 @@ func TestTargetSetTargetGroupsPresentOnConfigDuplicateAndDeleteOriginal(t *testi
 func TestTargetSetTargetGroupsPresentOnConfigChange(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -944,7 +951,7 @@ func TestTargetSetTargetGroupsPresentOnConfigChange(t *testing.T) {
 func TestTargetSetRecreatesTargetGroupsOnConfigChange(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -983,7 +990,7 @@ func TestTargetSetRecreatesTargetGroupsOnConfigChange(t *testing.T) {
 func TestDiscovererConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -1015,7 +1022,7 @@ func TestDiscovererConfigs(t *testing.T) {
 func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -1062,7 +1069,7 @@ func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 func TestIdenticalConfigurationsAreCoalesced(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, nil)
+	discoveryManager := NewManager(ctx, nil, prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -1098,7 +1105,7 @@ func TestApplyConfigDoesNotModifyStaticTargets(t *testing.T) {
 	}
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -1144,7 +1151,7 @@ func (s lockStaticDiscoverer) Run(ctx context.Context, up chan<- []*targetgroup.
 func TestGaugeFailedConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -1158,7 +1165,7 @@ func TestGaugeFailedConfigs(t *testing.T) {
 	discoveryManager.ApplyConfig(c)
 	<-discoveryManager.SyncCh()
 
-	failedCount := client_testutil.ToFloat64(failedConfigs)
+	failedCount := client_testutil.ToFloat64(discoveryManager.metrics.FailedConfigs)
 	if failedCount != 3 {
 		t.Fatalf("Expected to have 3 failed configs, got: %v", failedCount)
 	}
@@ -1169,7 +1176,7 @@ func TestGaugeFailedConfigs(t *testing.T) {
 	discoveryManager.ApplyConfig(c)
 	<-discoveryManager.SyncCh()
 
-	failedCount = client_testutil.ToFloat64(failedConfigs)
+	failedCount = client_testutil.ToFloat64(discoveryManager.metrics.FailedConfigs)
 	if failedCount != 0 {
 		t.Fatalf("Expected to get no failed config, got: %v", failedCount)
 	}
@@ -1300,7 +1307,7 @@ func TestCoordinationWithReceiver(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			mgr := NewManager(ctx, nil)
+			mgr := NewManager(ctx, nil, prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 			mgr.updatert = updateDelay
 			go mgr.Run()
 
@@ -1392,10 +1399,10 @@ func (o onceProvider) Run(_ context.Context, ch chan<- []*targetgroup.Group) {
 
 // TestTargetSetTargetGroupsUpdateDuringApplyConfig is used to detect races when
 // ApplyConfig happens at the same time as targets update.
-func TestTargetSetTargetGroupsUpdateDuringApplyConfig(*testing.T) {
+func TestTargetSetTargetGroupsUpdateDuringApplyConfig(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger())
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
diff --git a/discovery/marathon/marathon.go b/discovery/marathon/marathon.go
index 27947fa8a81..a6a6252fd0a 100644
--- a/discovery/marathon/marathon.go
+++ b/discovery/marathon/marathon.go
@@ -28,6 +28,7 @@ import (
 	"time"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 
@@ -83,7 +84,7 @@ func (*SDConfig) Name() string { return "marathon" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(*c, opts.Logger)
+	return NewDiscovery(*c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -132,7 +133,7 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Marathon Discovery.
-func NewDiscovery(conf SDConfig, logger log.Logger) (*Discovery, error) {
+func NewDiscovery(conf SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	rt, err := config.NewRoundTripperFromConfig(conf.HTTPClientConfig, "marathon_sd")
 	if err != nil {
 		return nil, err
@@ -154,10 +155,13 @@ func NewDiscovery(conf SDConfig, logger log.Logger) (*Discovery, error) {
 		appsClient: fetchApps,
 	}
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"marathon",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "marathon",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d, nil
 }
diff --git a/discovery/marathon/marathon_test.go b/discovery/marathon/marathon_test.go
index 258e3c8ddf4..a1ddce9309b 100644
--- a/discovery/marathon/marathon_test.go
+++ b/discovery/marathon/marathon_test.go
@@ -21,6 +21,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 
 	"github.com/prometheus/prometheus/discovery/targetgroup"
@@ -36,7 +37,7 @@ func testConfig() SDConfig {
 }
 
 func testUpdateServices(client appListClient) ([]*targetgroup.Group, error) {
-	md, err := NewDiscovery(testConfig(), nil)
+	md, err := NewDiscovery(testConfig(), nil, prometheus.NewRegistry())
 	if err != nil {
 		return nil, err
 	}
@@ -129,7 +130,7 @@ func TestMarathonSDSendGroup(t *testing.T) {
 }
 
 func TestMarathonSDRemoveApp(t *testing.T) {
-	md, err := NewDiscovery(testConfig(), nil)
+	md, err := NewDiscovery(testConfig(), nil, prometheus.NewRegistry())
 	if err != nil {
 		t.Fatalf("%s", err)
 	}
diff --git a/discovery/metrics.go b/discovery/metrics.go
new file mode 100644
index 00000000000..04f54b542f5
--- /dev/null
+++ b/discovery/metrics.go
@@ -0,0 +1,103 @@
+// Copyright 2016 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package discovery
+
+import (
+	"fmt"
+
+	"github.com/prometheus/client_golang/prometheus"
+)
+
+var (
+	clientGoRequestMetrics  = &clientGoRequestMetricAdapter{}
+	clientGoWorkloadMetrics = &clientGoWorkqueueMetricsProvider{}
+)
+
+func init() {
+	clientGoRequestMetrics.RegisterWithK8sGoClient()
+	clientGoWorkloadMetrics.RegisterWithK8sGoClient()
+}
+
+// Metrics to be used with a discovery manager.
+type Metrics struct {
+	FailedConfigs     *prometheus.GaugeVec
+	DiscoveredTargets *prometheus.GaugeVec
+	ReceivedUpdates   *prometheus.CounterVec
+	DelayedUpdates    *prometheus.CounterVec
+	SentUpdates       *prometheus.CounterVec
+}
+
+func NewMetrics(registerer prometheus.Registerer) (*Metrics, error) {
+	m := &Metrics{}
+
+	m.FailedConfigs = prometheus.NewGaugeVec(
+		prometheus.GaugeOpts{
+			Name: "prometheus_sd_failed_configs",
+			Help: "Current number of service discovery configurations that failed to load.",
+		},
+		[]string{"name"},
+	)
+
+	m.DiscoveredTargets = prometheus.NewGaugeVec(
+		prometheus.GaugeOpts{
+			Name: "prometheus_sd_discovered_targets",
+			Help: "Current number of discovered targets.",
+		},
+		[]string{"name", "config"},
+	)
+
+	m.ReceivedUpdates = prometheus.NewCounterVec(
+		prometheus.CounterOpts{
+			Name: "prometheus_sd_received_updates_total",
+			Help: "Total number of update events received from the SD providers.",
+		},
+		[]string{"name"},
+	)
+
+	m.DelayedUpdates = prometheus.NewCounterVec(
+		prometheus.CounterOpts{
+			Name: "prometheus_sd_updates_delayed_total",
+			Help: "Total number of update events that couldn't be sent immediately.",
+		},
+		[]string{"name"},
+	)
+
+	m.SentUpdates = prometheus.NewCounterVec(
+		prometheus.CounterOpts{
+			Name: "prometheus_sd_updates_total",
+			Help: "Total number of update events sent to the SD consumers.",
+		},
+		[]string{"name"},
+	)
+
+	metrics := append(
+		[]prometheus.Collector{
+			m.FailedConfigs,
+			m.DiscoveredTargets,
+			m.ReceivedUpdates,
+			m.DelayedUpdates,
+			m.SentUpdates,
+		},
+		clientGoMetrics()...,
+	)
+
+	for _, collector := range metrics {
+		err := registerer.Register(collector)
+		if err != nil {
+			return nil, fmt.Errorf("failed to register discovery manager metrics: %w", err)
+		}
+	}
+
+	return m, nil
+}
diff --git a/discovery/kubernetes/client_metrics.go b/discovery/metrics_k8s_client.go
similarity index 85%
rename from discovery/kubernetes/client_metrics.go
rename to discovery/metrics_k8s_client.go
index 7b097b14a3f..4f161bc3e9a 100644
--- a/discovery/kubernetes/client_metrics.go
+++ b/discovery/metrics_k8s_client.go
@@ -11,7 +11,7 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
-package kubernetes
+package discovery
 
 import (
 	"context"
@@ -23,13 +23,22 @@ import (
 	"k8s.io/client-go/util/workqueue"
 )
 
-const workqueueMetricsNamespace = metricsNamespace + "_workqueue"
+// This file registers metrics used by the Kubernetes Go client (k8s.io/client-go).
+// Unfortunately, k8s.io/client-go metrics are global.
+// If we instantiate multiple k8s SD instances, their k8s/client-go metrics will overlap.
+// To prevent us from displaying misleading metrics, we register k8s.io/client-go metrics
+// outside of the Kubernetes SD.
+
+const (
+	KubernetesMetricsNamespace = "prometheus_sd_kubernetes"
+	workqueueMetricsNamespace  = KubernetesMetricsNamespace + "_workqueue"
+)
 
 var (
 	// Metrics for client-go's HTTP requests.
 	clientGoRequestResultMetricVec = prometheus.NewCounterVec(
 		prometheus.CounterOpts{
-			Namespace: metricsNamespace,
+			Namespace: KubernetesMetricsNamespace,
 			Name:      "http_request_total",
 			Help:      "Total number of HTTP requests to the Kubernetes API by status code.",
 		},
@@ -37,7 +46,7 @@ var (
 	)
 	clientGoRequestLatencyMetricVec = prometheus.NewSummaryVec(
 		prometheus.SummaryOpts{
-			Namespace:  metricsNamespace,
+			Namespace:  KubernetesMetricsNamespace,
 			Name:       "http_request_duration_seconds",
 			Help:       "Summary of latencies for HTTP requests to the Kubernetes API by endpoint.",
 			Objectives: map[float64]float64{},
@@ -109,17 +118,28 @@ func (noopMetric) Set(float64)     {}
 // Definition of client-go metrics adapters for HTTP requests observation.
 type clientGoRequestMetricAdapter struct{}
 
-func (f *clientGoRequestMetricAdapter) Register(registerer prometheus.Registerer) {
+// Returns all of the Prometheus metrics derived from k8s.io/client-go.
+// This may be used tu register and unregister the metrics.
+func clientGoMetrics() []prometheus.Collector {
+	return []prometheus.Collector{
+		clientGoRequestResultMetricVec,
+		clientGoRequestLatencyMetricVec,
+		clientGoWorkqueueDepthMetricVec,
+		clientGoWorkqueueAddsMetricVec,
+		clientGoWorkqueueLatencyMetricVec,
+		clientGoWorkqueueUnfinishedWorkSecondsMetricVec,
+		clientGoWorkqueueLongestRunningProcessorMetricVec,
+		clientGoWorkqueueWorkDurationMetricVec,
+	}
+}
+
+func (f *clientGoRequestMetricAdapter) RegisterWithK8sGoClient() {
 	metrics.Register(
 		metrics.RegisterOpts{
 			RequestLatency: f,
 			RequestResult:  f,
 		},
 	)
-	registerer.MustRegister(
-		clientGoRequestResultMetricVec,
-		clientGoRequestLatencyMetricVec,
-	)
 }
 
 func (clientGoRequestMetricAdapter) Increment(_ context.Context, code, _, _ string) {
@@ -133,16 +153,8 @@ func (clientGoRequestMetricAdapter) Observe(_ context.Context, _ string, u url.U
 // Definition of client-go workqueue metrics provider definition.
 type clientGoWorkqueueMetricsProvider struct{}
 
-func (f *clientGoWorkqueueMetricsProvider) Register(registerer prometheus.Registerer) {
+func (f *clientGoWorkqueueMetricsProvider) RegisterWithK8sGoClient() {
 	workqueue.SetProvider(f)
-	registerer.MustRegister(
-		clientGoWorkqueueDepthMetricVec,
-		clientGoWorkqueueAddsMetricVec,
-		clientGoWorkqueueLatencyMetricVec,
-		clientGoWorkqueueWorkDurationMetricVec,
-		clientGoWorkqueueUnfinishedWorkSecondsMetricVec,
-		clientGoWorkqueueLongestRunningProcessorMetricVec,
-	)
 }
 
 func (f *clientGoWorkqueueMetricsProvider) NewDepthMetric(name string) workqueue.GaugeMetric {
diff --git a/discovery/moby/docker.go b/discovery/moby/docker.go
index 162833ece45..a13bb8704ab 100644
--- a/discovery/moby/docker.go
+++ b/discovery/moby/docker.go
@@ -26,6 +26,7 @@ import (
 	"github.com/docker/docker/api/types/filters"
 	"github.com/docker/docker/client"
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 
@@ -80,7 +81,7 @@ func (*DockerSDConfig) Name() string { return "docker" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *DockerSDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDockerDiscovery(c, opts.Logger)
+	return NewDockerDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -114,7 +115,7 @@ type DockerDiscovery struct {
 }
 
 // NewDockerDiscovery returns a new DockerDiscovery which periodically refreshes its targets.
-func NewDockerDiscovery(conf *DockerSDConfig, logger log.Logger) (*DockerDiscovery, error) {
+func NewDockerDiscovery(conf *DockerSDConfig, logger log.Logger, reg prometheus.Registerer) (*DockerDiscovery, error) {
 	var err error
 
 	d := &DockerDiscovery{
@@ -165,10 +166,13 @@ func NewDockerDiscovery(conf *DockerSDConfig, logger log.Logger) (*DockerDiscove
 	}
 
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"docker",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "docker",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d, nil
 }
diff --git a/discovery/moby/docker_test.go b/discovery/moby/docker_test.go
index f80c53b61af..1a87ad2a120 100644
--- a/discovery/moby/docker_test.go
+++ b/discovery/moby/docker_test.go
@@ -19,6 +19,7 @@ import (
 	"testing"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"gopkg.in/yaml.v2"
@@ -37,7 +38,7 @@ host: %s
 	var cfg DockerSDConfig
 	require.NoError(t, yaml.Unmarshal([]byte(cfgString), &cfg))
 
-	d, err := NewDockerDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDockerDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
diff --git a/discovery/moby/dockerswarm.go b/discovery/moby/dockerswarm.go
index 371f9d5ed19..bd87fea5a3f 100644
--- a/discovery/moby/dockerswarm.go
+++ b/discovery/moby/dockerswarm.go
@@ -23,6 +23,7 @@ import (
 	"github.com/docker/docker/api/types/filters"
 	"github.com/docker/docker/client"
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"github.com/prometheus/common/version"
@@ -74,7 +75,7 @@ func (*DockerSwarmSDConfig) Name() string { return "dockerswarm" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *DockerSwarmSDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger)
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -117,7 +118,7 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *DockerSwarmSDConfig, logger log.Logger) (*Discovery, error) {
+func NewDiscovery(conf *DockerSwarmSDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	var err error
 
 	d := &Discovery{
@@ -168,10 +169,13 @@ func NewDiscovery(conf *DockerSwarmSDConfig, logger log.Logger) (*Discovery, err
 	}
 
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"dockerswarm",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "dockerswarm",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d, nil
 }
diff --git a/discovery/moby/nodes_test.go b/discovery/moby/nodes_test.go
index 2bc38337461..512ff7049d4 100644
--- a/discovery/moby/nodes_test.go
+++ b/discovery/moby/nodes_test.go
@@ -19,6 +19,7 @@ import (
 	"testing"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"gopkg.in/yaml.v2"
@@ -38,7 +39,7 @@ host: %s
 	var cfg DockerSwarmSDConfig
 	require.NoError(t, yaml.Unmarshal([]byte(cfgString), &cfg))
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
diff --git a/discovery/moby/services_test.go b/discovery/moby/services_test.go
index 81c8d31f14d..816586dd7f1 100644
--- a/discovery/moby/services_test.go
+++ b/discovery/moby/services_test.go
@@ -19,6 +19,7 @@ import (
 	"testing"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"gopkg.in/yaml.v2"
@@ -38,7 +39,7 @@ host: %s
 	var cfg DockerSwarmSDConfig
 	require.NoError(t, yaml.Unmarshal([]byte(cfgString), &cfg))
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
@@ -332,7 +333,7 @@ filters:
 	var cfg DockerSwarmSDConfig
 	require.NoError(t, yaml.Unmarshal([]byte(cfgString), &cfg))
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
diff --git a/discovery/moby/tasks_test.go b/discovery/moby/tasks_test.go
index eed5f2924b0..764fda34364 100644
--- a/discovery/moby/tasks_test.go
+++ b/discovery/moby/tasks_test.go
@@ -19,6 +19,7 @@ import (
 	"testing"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"gopkg.in/yaml.v2"
@@ -38,7 +39,7 @@ host: %s
 	var cfg DockerSwarmSDConfig
 	require.NoError(t, yaml.Unmarshal([]byte(cfgString), &cfg))
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
diff --git a/discovery/nomad/nomad.go b/discovery/nomad/nomad.go
index 7013f0737c7..3fdcf714eb6 100644
--- a/discovery/nomad/nomad.go
+++ b/discovery/nomad/nomad.go
@@ -49,27 +49,18 @@ const (
 )
 
 // DefaultSDConfig is the default nomad SD configuration.
-var (
-	DefaultSDConfig = SDConfig{
-		AllowStale:       true,
-		HTTPClientConfig: config.DefaultHTTPClientConfig,
-		Namespace:        "default",
-		RefreshInterval:  model.Duration(60 * time.Second),
-		Region:           "global",
-		Server:           "http://localhost:4646",
-		TagSeparator:     ",",
-	}
-
-	failuresCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_nomad_failures_total",
-			Help: "Number of nomad service discovery refresh failures.",
-		})
-)
+var DefaultSDConfig = SDConfig{
+	AllowStale:       true,
+	HTTPClientConfig: config.DefaultHTTPClientConfig,
+	Namespace:        "default",
+	RefreshInterval:  model.Duration(60 * time.Second),
+	Region:           "global",
+	Server:           "http://localhost:4646",
+	TagSeparator:     ",",
+}
 
 func init() {
 	discovery.RegisterConfig(&SDConfig{})
-	prometheus.MustRegister(failuresCount)
 }
 
 // SDConfig is the configuration for nomad based service discovery.
@@ -88,7 +79,7 @@ func (*SDConfig) Name() string { return "nomad" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger)
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -121,10 +112,11 @@ type Discovery struct {
 	region          string
 	server          string
 	tagSeparator    string
+	failuresCount   prometheus.Counter
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	d := &Discovery{
 		allowStale:      conf.AllowStale,
 		namespace:       conf.Namespace,
@@ -132,6 +124,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
 		region:          conf.Region,
 		server:          conf.Server,
 		tagSeparator:    conf.TagSeparator,
+		failuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_nomad_failures_total",
+				Help: "Number of nomad service discovery refresh failures.",
+			}),
 	}
 
 	HTTPClient, err := config.NewClientFromConfig(conf.HTTPClientConfig, "nomad_sd")
@@ -153,10 +150,14 @@ func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
 	d.client = client
 
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"nomad",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "nomad",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+			Metrics:  []prometheus.Collector{d.failuresCount},
+		},
 	)
 	return d, nil
 }
@@ -167,7 +168,7 @@ func (d *Discovery) refresh(context.Context) ([]*targetgroup.Group, error) {
 	}
 	stubs, _, err := d.client.Services().List(opts)
 	if err != nil {
-		failuresCount.Inc()
+		d.failuresCount.Inc()
 		return nil, err
 	}
 
@@ -179,7 +180,7 @@ func (d *Discovery) refresh(context.Context) ([]*targetgroup.Group, error) {
 		for _, service := range stub.Services {
 			instances, _, err := d.client.Services().Get(service.ServiceName, opts)
 			if err != nil {
-				failuresCount.Inc()
+				d.failuresCount.Inc()
 				return nil, fmt.Errorf("failed to fetch services: %w", err)
 			}
 
diff --git a/discovery/nomad/nomad_test.go b/discovery/nomad/nomad_test.go
index f9490f47644..ca67a877e1d 100644
--- a/discovery/nomad/nomad_test.go
+++ b/discovery/nomad/nomad_test.go
@@ -22,6 +22,7 @@ import (
 	"testing"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 )
@@ -127,7 +128,7 @@ func TestConfiguredService(t *testing.T) {
 	conf := &SDConfig{
 		Server: "http://localhost:4646",
 	}
-	_, err := NewDiscovery(conf, nil)
+	_, err := NewDiscovery(conf, nil, prometheus.NewRegistry())
 	require.NoError(t, err)
 }
 
@@ -141,7 +142,7 @@ func TestNomadSDRefresh(t *testing.T) {
 
 	cfg := DefaultSDConfig
 	cfg.Server = endpoint.String()
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	tgs, err := d.refresh(context.Background())
diff --git a/discovery/openstack/openstack.go b/discovery/openstack/openstack.go
index 92c83a4cf4c..9544a7c0f7f 100644
--- a/discovery/openstack/openstack.go
+++ b/discovery/openstack/openstack.go
@@ -24,6 +24,7 @@ import (
 	"github.com/gophercloud/gophercloud"
 	"github.com/gophercloud/gophercloud/openstack"
 	"github.com/mwitkow/go-conntrack"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 
@@ -70,7 +71,7 @@ func (*SDConfig) Name() string { return "openstack" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger)
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -134,16 +135,19 @@ type refresher interface {
 }
 
 // NewDiscovery returns a new OpenStack Discoverer which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, l log.Logger) (*refresh.Discovery, error) {
+func NewDiscovery(conf *SDConfig, l log.Logger, reg prometheus.Registerer) (*refresh.Discovery, error) {
 	r, err := newRefresher(conf, l)
 	if err != nil {
 		return nil, err
 	}
 	return refresh.NewDiscovery(
-		l,
-		"openstack",
-		time.Duration(conf.RefreshInterval),
-		r.refresh,
+		refresh.Options{
+			Logger:   l,
+			Mech:     "openstack",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: r.refresh,
+			Registry: reg,
+		},
 	), nil
 }
 
diff --git a/discovery/ovhcloud/ovhcloud.go b/discovery/ovhcloud/ovhcloud.go
index 535ade4df52..eca284a85ab 100644
--- a/discovery/ovhcloud/ovhcloud.go
+++ b/discovery/ovhcloud/ovhcloud.go
@@ -22,6 +22,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/ovh/go-ovh/ovh"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 
@@ -93,7 +94,7 @@ func createClient(config *SDConfig) (*ovh.Client, error) {
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(options discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, options.Logger)
+	return NewDiscovery(c, options.Logger, options.Registerer)
 }
 
 func init() {
@@ -140,16 +141,19 @@ func newRefresher(conf *SDConfig, logger log.Logger) (refresher, error) {
 }
 
 // NewDiscovery returns a new OVHcloud Discoverer which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*refresh.Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*refresh.Discovery, error) {
 	r, err := newRefresher(conf, logger)
 	if err != nil {
 		return nil, err
 	}
 
 	return refresh.NewDiscovery(
-		logger,
-		"ovhcloud",
-		time.Duration(conf.RefreshInterval),
-		r.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "ovhcloud",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: r.refresh,
+			Registry: reg,
+		},
 	), nil
 }
diff --git a/discovery/ovhcloud/ovhcloud_test.go b/discovery/ovhcloud/ovhcloud_test.go
index efcd95bb0df..9bd9ea95475 100644
--- a/discovery/ovhcloud/ovhcloud_test.go
+++ b/discovery/ovhcloud/ovhcloud_test.go
@@ -18,6 +18,7 @@ import (
 	"fmt"
 	"testing"
 
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/stretchr/testify/require"
 	"gopkg.in/yaml.v2"
@@ -122,7 +123,8 @@ func TestDiscoverer(t *testing.T) {
 	conf, _ := getMockConf("vps")
 	logger := testutil.NewLogger(t)
 	_, err := conf.NewDiscoverer(discovery.DiscovererOptions{
-		Logger: logger,
+		Logger:     logger,
+		Registerer: prometheus.NewRegistry(),
 	})
 
 	require.NoError(t, err)
diff --git a/discovery/puppetdb/puppetdb.go b/discovery/puppetdb/puppetdb.go
index 9484a0aa63c..616f2c61e69 100644
--- a/discovery/puppetdb/puppetdb.go
+++ b/discovery/puppetdb/puppetdb.go
@@ -29,6 +29,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/grafana/regexp"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"github.com/prometheus/common/version"
@@ -83,7 +84,7 @@ func (*SDConfig) Name() string { return "puppetdb" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger)
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -130,7 +131,7 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new PuppetDB discovery for the given config.
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -156,10 +157,13 @@ func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
 	}
 
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"http",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "http",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d, nil
 }
diff --git a/discovery/puppetdb/puppetdb_test.go b/discovery/puppetdb/puppetdb_test.go
index 236efec1647..edd9b9d0469 100644
--- a/discovery/puppetdb/puppetdb_test.go
+++ b/discovery/puppetdb/puppetdb_test.go
@@ -23,6 +23,7 @@ import (
 	"time"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
@@ -62,7 +63,7 @@ func TestPuppetSlashInURL(t *testing.T) {
 			Port:             80,
 			RefreshInterval:  model.Duration(30 * time.Second),
 		}
-		d, err := NewDiscovery(&cfg, log.NewNopLogger())
+		d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 		require.NoError(t, err)
 		require.Equal(t, apiURL, d.url)
 	}
@@ -79,7 +80,7 @@ func TestPuppetDBRefresh(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
@@ -120,7 +121,7 @@ func TestPuppetDBRefreshWithParameters(t *testing.T) {
 		RefreshInterval:   model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
@@ -172,7 +173,7 @@ func TestPuppetDBInvalidCode(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
@@ -193,7 +194,7 @@ func TestPuppetDBInvalidFormat(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 
 	ctx := context.Background()
diff --git a/discovery/refresh/refresh.go b/discovery/refresh/refresh.go
index 919567a53b3..0b0e5a921d7 100644
--- a/discovery/refresh/refresh.go
+++ b/discovery/refresh/refresh.go
@@ -22,29 +22,17 @@ import (
 	"github.com/go-kit/log/level"
 	"github.com/prometheus/client_golang/prometheus"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
-var (
-	failuresCount = prometheus.NewCounterVec(
-		prometheus.CounterOpts{
-			Name: "prometheus_sd_refresh_failures_total",
-			Help: "Number of refresh failures for the given SD mechanism.",
-		},
-		[]string{"mechanism"},
-	)
-	duration = prometheus.NewSummaryVec(
-		prometheus.SummaryOpts{
-			Name:       "prometheus_sd_refresh_duration_seconds",
-			Help:       "The duration of a refresh in seconds for the given SD mechanism.",
-			Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
-		},
-		[]string{"mechanism"},
-	)
-)
-
-func init() {
-	prometheus.MustRegister(duration, failuresCount)
+type Options struct {
+	Logger   log.Logger
+	Mech     string
+	Interval time.Duration
+	RefreshF func(ctx context.Context) ([]*targetgroup.Group, error)
+	Registry prometheus.Registerer
+	Metrics  []prometheus.Collector
 }
 
 // Discovery implements the Discoverer interface.
@@ -54,25 +42,62 @@ type Discovery struct {
 	refreshf func(ctx context.Context) ([]*targetgroup.Group, error)
 
 	failures prometheus.Counter
-	duration prometheus.Observer
+	duration prometheus.Summary
+
+	metricRegisterer discovery.MetricRegisterer
 }
 
 // NewDiscovery returns a Discoverer function that calls a refresh() function at every interval.
-func NewDiscovery(l log.Logger, mech string, interval time.Duration, refreshf func(ctx context.Context) ([]*targetgroup.Group, error)) *Discovery {
-	if l == nil {
-		l = log.NewNopLogger()
+func NewDiscovery(opts Options) *Discovery {
+	var logger log.Logger
+	if opts.Logger == nil {
+		logger = log.NewNopLogger()
+	} else {
+		logger = opts.Logger
+	}
+
+	d := Discovery{
+		logger:   logger,
+		interval: opts.Interval,
+		refreshf: opts.RefreshF,
+		failures: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_refresh_failures_total",
+				Help: "Number of refresh failures for the given SD mechanism.",
+				ConstLabels: prometheus.Labels{
+					"mechanism": opts.Mech,
+				},
+			}),
+		duration: prometheus.NewSummary(
+			prometheus.SummaryOpts{
+				Name:       "prometheus_sd_refresh_duration_seconds",
+				Help:       "The duration of a refresh in seconds for the given SD mechanism.",
+				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
+				ConstLabels: prometheus.Labels{
+					"mechanism": opts.Mech,
+				},
+			}),
 	}
-	return &Discovery{
-		logger:   l,
-		interval: interval,
-		refreshf: refreshf,
-		failures: failuresCount.WithLabelValues(mech),
-		duration: duration.WithLabelValues(mech),
+
+	metrics := []prometheus.Collector{d.failures, d.duration}
+	if opts.Metrics != nil {
+		metrics = append(metrics, opts.Metrics...)
 	}
+
+	d.metricRegisterer = discovery.NewMetricRegisterer(opts.Registry, metrics)
+
+	return &d
 }
 
 // Run implements the Discoverer interface.
 func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
+	err := d.metricRegisterer.RegisterMetrics()
+	if err != nil {
+		level.Error(d.logger).Log("msg", "Unable to register metrics", "err", err.Error())
+		return
+	}
+	defer d.metricRegisterer.UnregisterMetrics()
+
 	// Get an initial set right away.
 	tgs, err := d.refresh(ctx)
 	if err != nil {
diff --git a/discovery/refresh/refresh_test.go b/discovery/refresh/refresh_test.go
index 6decef19fcc..12e7ab3be03 100644
--- a/discovery/refresh/refresh_test.go
+++ b/discovery/refresh/refresh_test.go
@@ -19,6 +19,7 @@ import (
 	"testing"
 	"time"
 
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"go.uber.org/goleak"
@@ -65,7 +66,15 @@ func TestRefresh(t *testing.T) {
 		return nil, fmt.Errorf("some error")
 	}
 	interval := time.Millisecond
-	d := NewDiscovery(nil, "test", interval, refresh)
+	d := NewDiscovery(
+		Options{
+			Logger:   nil,
+			Mech:     "test",
+			Interval: interval,
+			RefreshF: refresh,
+			Registry: prometheus.NewRegistry(),
+		},
+	)
 
 	ch := make(chan []*targetgroup.Group)
 	ctx, cancel := context.WithCancel(context.Background())
diff --git a/discovery/scaleway/scaleway.go b/discovery/scaleway/scaleway.go
index 90091b31725..86527b34e64 100644
--- a/discovery/scaleway/scaleway.go
+++ b/discovery/scaleway/scaleway.go
@@ -23,6 +23,7 @@ import (
 	"time"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"github.com/scaleway/scaleway-sdk-go/scw"
@@ -160,7 +161,7 @@ func (c *SDConfig) UnmarshalYAML(unmarshal func(interface{}) error) error {
 }
 
 func (c SDConfig) NewDiscoverer(options discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(&c, options.Logger)
+	return NewDiscovery(&c, options.Logger, options.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -177,17 +178,20 @@ func init() {
 // the Discoverer interface.
 type Discovery struct{}
 
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*refresh.Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*refresh.Discovery, error) {
 	r, err := newRefresher(conf)
 	if err != nil {
 		return nil, err
 	}
 
 	return refresh.NewDiscovery(
-		logger,
-		"scaleway",
-		time.Duration(conf.RefreshInterval),
-		r.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "scaleway",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: r.refresh,
+			Registry: reg,
+		},
 	), nil
 }
 
diff --git a/discovery/triton/triton.go b/discovery/triton/triton.go
index c83f3b34abc..4839827ada9 100644
--- a/discovery/triton/triton.go
+++ b/discovery/triton/triton.go
@@ -26,6 +26,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/mwitkow/go-conntrack"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 
@@ -74,7 +75,7 @@ func (*SDConfig) Name() string { return "triton" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return New(opts.Logger, c)
+	return New(opts.Logger, c, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -138,7 +139,7 @@ type Discovery struct {
 }
 
 // New returns a new Discovery which periodically refreshes its targets.
-func New(logger log.Logger, conf *SDConfig) (*Discovery, error) {
+func New(logger log.Logger, conf *SDConfig, reg prometheus.Registerer) (*Discovery, error) {
 	tls, err := config.NewTLSConfig(&conf.TLSConfig)
 	if err != nil {
 		return nil, err
@@ -159,10 +160,13 @@ func New(logger log.Logger, conf *SDConfig) (*Discovery, error) {
 		sdConfig: conf,
 	}
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"triton",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "triton",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d, nil
 }
diff --git a/discovery/triton/triton_test.go b/discovery/triton/triton_test.go
index 0ed9daa6808..fa51a2e472a 100644
--- a/discovery/triton/triton_test.go
+++ b/discovery/triton/triton_test.go
@@ -24,6 +24,7 @@ import (
 	"strings"
 	"testing"
 
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
@@ -79,7 +80,7 @@ var (
 )
 
 func newTritonDiscovery(c SDConfig) (*Discovery, error) {
-	return New(nil, &c)
+	return New(nil, &c, prometheus.NewRegistry())
 }
 
 func TestTritonSDNew(t *testing.T) {
diff --git a/discovery/util.go b/discovery/util.go
new file mode 100644
index 00000000000..83cc640dd92
--- /dev/null
+++ b/discovery/util.go
@@ -0,0 +1,72 @@
+// Copyright 2020 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package discovery
+
+import (
+	"fmt"
+
+	"github.com/prometheus/client_golang/prometheus"
+)
+
+// A utility to be used by implementations of discovery.Discoverer
+// which need to manage the lifetime of their metrics.
+type MetricRegisterer interface {
+	RegisterMetrics() error
+	UnregisterMetrics()
+}
+
+// metricRegistererImpl is an implementation of MetricRegisterer.
+type metricRegistererImpl struct {
+	reg     prometheus.Registerer
+	metrics []prometheus.Collector
+}
+
+var _ MetricRegisterer = &metricRegistererImpl{}
+
+// Creates an instance of a MetricRegisterer.
+// Typically called inside the implementation of the NewDiscoverer() method.
+func NewMetricRegisterer(reg prometheus.Registerer, metrics []prometheus.Collector) MetricRegisterer {
+	return &metricRegistererImpl{
+		reg:     reg,
+		metrics: metrics,
+	}
+}
+
+// RegisterMetrics registers the metrics with a Prometheus registerer.
+// If any metric fails to register, it will unregister all metrics that
+// were registered so far, and return an error.
+// Typically called at the start of the SD's Run() method.
+func (rh *metricRegistererImpl) RegisterMetrics() error {
+	for _, collector := range rh.metrics {
+		err := rh.reg.Register(collector)
+		if err != nil {
+			// Unregister all metrics that were registered so far.
+			// This is so that if RegisterMetrics() gets called again,
+			// there will not be an error due to a duplicate registration.
+			rh.UnregisterMetrics()
+
+			return fmt.Errorf("failed to register metric: %w", err)
+		}
+	}
+	return nil
+}
+
+// UnregisterMetrics unregisters the metrics from the same Prometheus
+// registerer which was used to register them.
+// Typically called at the end of the SD's Run() method by a defer statement.
+func (rh *metricRegistererImpl) UnregisterMetrics() {
+	for _, collector := range rh.metrics {
+		rh.reg.Unregister(collector)
+	}
+}
diff --git a/discovery/uyuni/uyuni.go b/discovery/uyuni/uyuni.go
index bc33d28cba0..744f3f96cfd 100644
--- a/discovery/uyuni/uyuni.go
+++ b/discovery/uyuni/uyuni.go
@@ -25,6 +25,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/kolo/xmlrpc"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 
@@ -115,7 +116,7 @@ func (*SDConfig) Name() string { return "uyuni" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger)
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -203,7 +204,7 @@ func getEndpointInfoForSystems(
 }
 
 // NewDiscovery returns a uyuni discovery for the given configuration.
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	apiURL, err := url.Parse(conf.Server)
 	if err != nil {
 		return nil, err
@@ -227,10 +228,13 @@ func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
 	}
 
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"uyuni",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "uyuni",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d, nil
 }
diff --git a/discovery/uyuni/uyuni_test.go b/discovery/uyuni/uyuni_test.go
index 9c910a3a338..fd03c88f1b6 100644
--- a/discovery/uyuni/uyuni_test.go
+++ b/discovery/uyuni/uyuni_test.go
@@ -23,6 +23,8 @@ import (
 
 	"github.com/stretchr/testify/require"
 
+	"github.com/prometheus/client_golang/prometheus"
+
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -35,7 +37,7 @@ func testUpdateServices(respHandler http.HandlerFunc) ([]*targetgroup.Group, err
 		Server: ts.URL,
 	}
 
-	md, err := NewDiscovery(&conf, nil)
+	md, err := NewDiscovery(&conf, nil, prometheus.NewRegistry())
 	if err != nil {
 		return nil, err
 	}
@@ -108,7 +110,7 @@ func TestUyuniSDSkipLogin(t *testing.T) {
 		Server: ts.URL,
 	}
 
-	md, err := NewDiscovery(&conf, nil)
+	md, err := NewDiscovery(&conf, nil, prometheus.NewRegistry())
 	if err != nil {
 		t.Error(err)
 	}
diff --git a/discovery/vultr/vultr.go b/discovery/vultr/vultr.go
index 42881d3c192..129800048ae 100644
--- a/discovery/vultr/vultr.go
+++ b/discovery/vultr/vultr.go
@@ -23,6 +23,7 @@ import (
 	"time"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"github.com/prometheus/common/version"
@@ -78,7 +79,7 @@ func (*SDConfig) Name() string { return "vultr" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger)
+	return NewDiscovery(c, opts.Logger, opts.Registerer)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -106,7 +107,7 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
 	d := &Discovery{
 		port: conf.Port,
 	}
@@ -128,10 +129,13 @@ func NewDiscovery(conf *SDConfig, logger log.Logger) (*Discovery, error) {
 	}
 
 	d.Discovery = refresh.NewDiscovery(
-		logger,
-		"vultr",
-		time.Duration(conf.RefreshInterval),
-		d.refresh,
+		refresh.Options{
+			Logger:   logger,
+			Mech:     "vultr",
+			Interval: time.Duration(conf.RefreshInterval),
+			RefreshF: d.refresh,
+			Registry: reg,
+		},
 	)
 	return d, nil
 }
diff --git a/discovery/vultr/vultr_test.go b/discovery/vultr/vultr_test.go
index 0977238e040..c50b11d2da4 100644
--- a/discovery/vultr/vultr_test.go
+++ b/discovery/vultr/vultr_test.go
@@ -20,6 +20,7 @@ import (
 	"testing"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 )
@@ -46,7 +47,7 @@ func TestVultrSDRefresh(t *testing.T) {
 
 	cfg := DefaultSDConfig
 	cfg.HTTPClientConfig.BearerToken = APIKey
-	d, err := NewDiscovery(&cfg, log.NewNopLogger())
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
 	require.NoError(t, err)
 	endpoint, err := url.Parse(sdMock.Mock.Endpoint())
 	require.NoError(t, err)
diff --git a/discovery/xds/kuma.go b/discovery/xds/kuma.go
index bc88ba55404..5ac4a42a893 100644
--- a/discovery/xds/kuma.go
+++ b/discovery/xds/kuma.go
@@ -30,35 +30,12 @@ import (
 	"github.com/prometheus/prometheus/util/strutil"
 )
 
-var (
-	// DefaultKumaSDConfig is the default Kuma MADS SD configuration.
-	DefaultKumaSDConfig = KumaSDConfig{
-		HTTPClientConfig: config.DefaultHTTPClientConfig,
-		RefreshInterval:  model.Duration(15 * time.Second),
-		FetchTimeout:     model.Duration(2 * time.Minute),
-	}
-
-	kumaFetchFailuresCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Namespace: namespace,
-			Name:      "sd_kuma_fetch_failures_total",
-			Help:      "The number of Kuma MADS fetch call failures.",
-		})
-	kumaFetchSkipUpdateCount = prometheus.NewCounter(
-		prometheus.CounterOpts{
-			Namespace: namespace,
-			Name:      "sd_kuma_fetch_skipped_updates_total",
-			Help:      "The number of Kuma MADS fetch calls that result in no updates to the targets.",
-		})
-	kumaFetchDuration = prometheus.NewSummary(
-		prometheus.SummaryOpts{
-			Namespace:  namespace,
-			Name:       "sd_kuma_fetch_duration_seconds",
-			Help:       "The duration of a Kuma MADS fetch call.",
-			Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
-		},
-	)
-)
+// DefaultKumaSDConfig is the default Kuma MADS SD configuration.
+var DefaultKumaSDConfig = KumaSDConfig{
+	HTTPClientConfig: config.DefaultHTTPClientConfig,
+	RefreshInterval:  model.Duration(15 * time.Second),
+	FetchTimeout:     model.Duration(2 * time.Minute),
+}
 
 const (
 	// kumaMetaLabelPrefix is the meta prefix used for all kuma meta labels.
@@ -120,7 +97,7 @@ func (c *KumaSDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discover
 		logger = log.NewNopLogger()
 	}
 
-	return NewKumaHTTPDiscovery(c, logger)
+	return NewKumaHTTPDiscovery(c, logger, opts.Registerer)
 }
 
 func convertKumaV1MonitoringAssignment(assignment *MonitoringAssignment) []model.LabelSet {
@@ -176,7 +153,7 @@ func kumaMadsV1ResourceParser(resources []*anypb.Any, typeURL string) ([]model.L
 	return targets, nil
 }
 
-func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger) (discovery.Discoverer, error) {
+func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger, reg prometheus.Registerer) (discovery.Discoverer, error) {
 	// Default to "prometheus" if hostname is unavailable.
 	clientID, err := osutil.GetFQDN()
 	if err != nil {
@@ -203,15 +180,41 @@ func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger) (discovery.Disc
 	}
 
 	d := &fetchDiscovery{
-		client:               client,
-		logger:               logger,
-		refreshInterval:      time.Duration(conf.RefreshInterval),
-		source:               "kuma",
-		parseResources:       kumaMadsV1ResourceParser,
-		fetchFailuresCount:   kumaFetchFailuresCount,
-		fetchSkipUpdateCount: kumaFetchSkipUpdateCount,
-		fetchDuration:        kumaFetchDuration,
+		client:          client,
+		logger:          logger,
+		refreshInterval: time.Duration(conf.RefreshInterval),
+		source:          "kuma",
+		parseResources:  kumaMadsV1ResourceParser,
+		fetchFailuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Namespace: namespace,
+				Name:      "sd_kuma_fetch_failures_total",
+				Help:      "The number of Kuma MADS fetch call failures.",
+			}),
+		fetchSkipUpdateCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Namespace: namespace,
+				Name:      "sd_kuma_fetch_skipped_updates_total",
+				Help:      "The number of Kuma MADS fetch calls that result in no updates to the targets.",
+			}),
+		fetchDuration: prometheus.NewSummary(
+			prometheus.SummaryOpts{
+				Namespace:  namespace,
+				Name:       "sd_kuma_fetch_duration_seconds",
+				Help:       "The duration of a Kuma MADS fetch call.",
+				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
+			},
+		),
 	}
 
+	d.metricRegisterer = discovery.NewMetricRegisterer(
+		reg,
+		[]prometheus.Collector{
+			d.fetchFailuresCount,
+			d.fetchSkipUpdateCount,
+			d.fetchDuration,
+		},
+	)
+
 	return d, nil
 }
diff --git a/discovery/xds/kuma_test.go b/discovery/xds/kuma_test.go
index 581be9fb110..0626f82a01c 100644
--- a/discovery/xds/kuma_test.go
+++ b/discovery/xds/kuma_test.go
@@ -21,6 +21,7 @@ import (
 	"time"
 
 	v3 "github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"google.golang.org/protobuf/proto"
@@ -107,7 +108,7 @@ func getKumaMadsV1DiscoveryResponse(resources ...*MonitoringAssignment) (*v3.Dis
 }
 
 func newKumaTestHTTPDiscovery(c KumaSDConfig) (*fetchDiscovery, error) {
-	kd, err := NewKumaHTTPDiscovery(&c, nopLogger)
+	kd, err := NewKumaHTTPDiscovery(&c, nopLogger, prometheus.NewRegistry())
 	if err != nil {
 		return nil, err
 	}
diff --git a/discovery/xds/xds.go b/discovery/xds/xds.go
index 48bdbab02b0..a04fe6862f8 100644
--- a/discovery/xds/xds.go
+++ b/discovery/xds/xds.go
@@ -69,9 +69,6 @@ func init() {
 	// Register top-level SD Configs.
 	discovery.RegisterConfig(&KumaSDConfig{})
 
-	// Register metrics.
-	prometheus.MustRegister(kumaFetchDuration, kumaFetchSkipUpdateCount, kumaFetchFailuresCount)
-
 	// Register protobuf types that need to be marshalled/ unmarshalled.
 	mustRegisterMessage(protoTypes, (&v3.DiscoveryRequest{}).ProtoReflect().Type())
 	mustRegisterMessage(protoTypes, (&v3.DiscoveryResponse{}).ProtoReflect().Type())
@@ -109,12 +106,20 @@ type fetchDiscovery struct {
 	parseResources resourceParser
 	logger         log.Logger
 
-	fetchDuration        prometheus.Observer
+	fetchDuration        prometheus.Summary
 	fetchSkipUpdateCount prometheus.Counter
 	fetchFailuresCount   prometheus.Counter
+
+	metricRegisterer discovery.MetricRegisterer
 }
 
 func (d *fetchDiscovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
+	err := d.metricRegisterer.RegisterMetrics()
+	if err != nil {
+		level.Error(d.logger).Log("msg", "Unable to register metrics", "err", err.Error())
+		return
+	}
+	defer d.metricRegisterer.UnregisterMetrics()
 	defer d.client.Close()
 
 	ticker := time.NewTicker(d.refreshInterval)
diff --git a/documentation/examples/custom-sd/adapter-usage/main.go b/documentation/examples/custom-sd/adapter-usage/main.go
index ae656db193b..b712749dfe4 100644
--- a/documentation/examples/custom-sd/adapter-usage/main.go
+++ b/documentation/examples/custom-sd/adapter-usage/main.go
@@ -28,8 +28,10 @@ import (
 	"github.com/alecthomas/kingpin/v2"
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 
+	prom_discovery "github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 	"github.com/prometheus/prometheus/documentation/examples/custom-sd/adapter"
 	"github.com/prometheus/prometheus/util/strutil"
@@ -268,7 +270,13 @@ func main() {
 	if err != nil {
 		fmt.Println("err: ", err)
 	}
-	sdAdapter := adapter.NewAdapter(ctx, *outputFile, "exampleSD", disc, logger)
+
+	discoveryMetrics, err := prom_discovery.NewMetrics(prometheus.DefaultRegisterer)
+	if err != nil {
+		level.Error(logger).Log("msg", "failed to create discovery metrics", "err", err)
+		os.Exit(1)
+	}
+	sdAdapter := adapter.NewAdapter(ctx, *outputFile, "exampleSD", disc, logger, discoveryMetrics)
 	sdAdapter.Run()
 
 	<-ctx.Done()
diff --git a/documentation/examples/custom-sd/adapter/adapter.go b/documentation/examples/custom-sd/adapter/adapter.go
index 57c32ce4928..8aedf008444 100644
--- a/documentation/examples/custom-sd/adapter/adapter.go
+++ b/documentation/examples/custom-sd/adapter/adapter.go
@@ -25,6 +25,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 
 	"github.com/prometheus/prometheus/discovery"
@@ -162,12 +163,12 @@ func (a *Adapter) Run() {
 }
 
 // NewAdapter creates a new instance of Adapter.
-func NewAdapter(ctx context.Context, file, name string, d discovery.Discoverer, logger log.Logger) *Adapter {
+func NewAdapter(ctx context.Context, file, name string, d discovery.Discoverer, logger log.Logger, metrics *discovery.Metrics) *Adapter {
 	return &Adapter{
 		ctx:     ctx,
 		disc:    d,
 		groups:  make(map[string]*customSD),
-		manager: discovery.NewManager(ctx, logger),
+		manager: discovery.NewManager(ctx, logger, prometheus.NewRegistry(), metrics),
 		output:  file,
 		name:    name,
 		logger:  logger,
diff --git a/documentation/examples/custom-sd/adapter/adapter_test.go b/documentation/examples/custom-sd/adapter/adapter_test.go
index eaf34c6673e..14cae47b432 100644
--- a/documentation/examples/custom-sd/adapter/adapter_test.go
+++ b/documentation/examples/custom-sd/adapter/adapter_test.go
@@ -18,9 +18,11 @@ import (
 	"os"
 	"testing"
 
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -226,6 +228,8 @@ func TestWriteOutput(t *testing.T) {
 	require.NoError(t, err)
 	defer os.Remove(tmpfile.Name())
 	tmpfile.Close()
-	adapter := NewAdapter(ctx, tmpfile.Name(), "test_sd", nil, nil)
+	metrics, err := discovery.NewMetrics(prometheus.NewRegistry())
+	require.NoError(t, err)
+	adapter := NewAdapter(ctx, tmpfile.Name(), "test_sd", nil, nil, metrics)
 	require.NoError(t, adapter.writeOutput())
 }

From 6a5306a53c437b9e5817423b8431937167b410d0 Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Wed, 15 Nov 2023 17:13:40 +0000
Subject: [PATCH 019/132] Use const labels for Discovery Manager metrics.

Signed-off-by: Paulin Todev <paulin.todev@gmail.com>
---
 cmd/prometheus/main.go                        | 62 ++++++++++++-----
 discovery/legacymanager/manager.go            | 25 ++++---
 discovery/legacymanager/manager_test.go       | 30 +++++----
 discovery/manager.go                          | 25 ++++---
 discovery/manager_test.go                     | 45 +++++++------
 discovery/metrics.go                          | 66 +++++++++----------
 discovery/metrics_k8s_client.go               | 11 ++++
 .../examples/custom-sd/adapter-usage/main.go  |  5 +-
 .../examples/custom-sd/adapter/adapter.go     |  4 +-
 .../custom-sd/adapter/adapter_test.go         |  5 +-
 10 files changed, 167 insertions(+), 111 deletions(-)

diff --git a/cmd/prometheus/main.go b/cmd/prometheus/main.go
index 24fc0f8e4ac..f30fbecd984 100644
--- a/cmd/prometheus/main.go
+++ b/cmd/prometheus/main.go
@@ -620,30 +620,56 @@ func main() {
 		discoveryManagerNotify  discoveryManager
 	)
 
-	// Register the metrics used by both "scrape" and "notify" discovery managers.
-	// The same metrics are used for both discovery managers. Hence the registration
-	// needs to be done here, outside the NewManager() calls, to avoid duplicate
-	// metric registrations.
-	discoveryMetrics, err := discovery.NewMetrics(prometheus.DefaultRegisterer)
+	// Kubernetes client metrics are used by Kubernetes SD.
+	// They are registered here in the main function, because SD mechanisms
+	// can only register metrics specific to a SD instance.
+	// Kubernetes client metrics are the same for the whole process -
+	// they are not specific to an SD instance.
+	err = discovery.RegisterK8sClientMetricsWithPrometheus(prometheus.DefaultRegisterer)
 	if err != nil {
-		level.Error(logger).Log("msg", "failed to create discovery metrics", "err", err)
+		level.Error(logger).Log("msg", "failed to register Kubernetes client metrics", "err", err)
 		os.Exit(1)
 	}
 	if cfg.enableNewSDManager {
-		discoveryManagerScrape = discovery.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), prometheus.DefaultRegisterer, discoveryMetrics, discovery.Name("scrape"))
-		discoveryManagerNotify = discovery.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), prometheus.DefaultRegisterer, discoveryMetrics, discovery.Name("notify"))
+		{
+			discMgr := discovery.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), prometheus.DefaultRegisterer, discovery.Name("scrape"))
+			if discMgr == nil {
+				level.Error(logger).Log("msg", "failed to create a discovery manager scrape")
+				os.Exit(1)
+			} else {
+				discoveryManagerScrape = discMgr
+			}
+		}
+
+		{
+			discMgr := discovery.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), prometheus.DefaultRegisterer, discovery.Name("notify"))
+			if discMgr == nil {
+				level.Error(logger).Log("msg", "failed to create a discovery manager notify")
+				os.Exit(1)
+			} else {
+				discoveryManagerNotify = discMgr
+			}
+		}
 	} else {
-		discoveryManagerScrape = legacymanager.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), prometheus.DefaultRegisterer, discoveryMetrics, legacymanager.Name("scrape"))
-		discoveryManagerNotify = legacymanager.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), prometheus.DefaultRegisterer, discoveryMetrics, legacymanager.Name("notify"))
-	}
+		{
+			discMgr := legacymanager.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), prometheus.DefaultRegisterer, legacymanager.Name("scrape"))
+			if discMgr == nil {
+				level.Error(logger).Log("msg", "failed to create a discovery manager scrape")
+				os.Exit(1)
+			} else {
+				discoveryManagerScrape = discMgr
+			}
+		}
 
-	if discoveryManagerScrape == nil {
-		level.Error(logger).Log("msg", "failed to create a discovery manager scrape")
-		os.Exit(1)
-	}
-	if discoveryManagerNotify == nil {
-		level.Error(logger).Log("msg", "failed to create a discovery manager notify")
-		os.Exit(1)
+		{
+			discMgr := legacymanager.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), prometheus.DefaultRegisterer, legacymanager.Name("notify"))
+			if discMgr == nil {
+				level.Error(logger).Log("msg", "failed to create a discovery manager notify")
+				os.Exit(1)
+			} else {
+				discoveryManagerNotify = discMgr
+			}
+		}
 	}
 
 	scrapeManager, err := scrape.NewManager(
diff --git a/discovery/legacymanager/manager.go b/discovery/legacymanager/manager.go
index 101012dafae..9c80f305a82 100644
--- a/discovery/legacymanager/manager.go
+++ b/discovery/legacymanager/manager.go
@@ -42,7 +42,7 @@ type provider struct {
 }
 
 // NewManager is the Discovery Manager constructor.
-func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Registerer, metrics *discovery.Metrics, options ...func(*Manager)) *Manager {
+func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Registerer, options ...func(*Manager)) *Manager {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -55,11 +55,20 @@ func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Re
 		updatert:       5 * time.Second,
 		triggerSend:    make(chan struct{}, 1),
 		registerer:     registerer,
-		metrics:        metrics,
 	}
 	for _, option := range options {
 		option(mgr)
 	}
+
+	// Register the metrics.
+	// We have to do this after setting all options, so that the name of the Manager is set.
+	if metrics, err := discovery.NewMetrics(registerer, mgr.name); err == nil {
+		mgr.metrics = metrics
+	} else {
+		level.Error(logger).Log("msg", "Failed to create discovery manager metrics", "manager", mgr.name, "err", err)
+		return nil
+	}
+
 	return mgr
 }
 
@@ -133,9 +142,9 @@ func (m *Manager) ApplyConfig(cfg map[string]discovery.Configs) error {
 	failedCount := 0
 	for name, scfg := range cfg {
 		failedCount += m.registerProviders(scfg, name)
-		m.metrics.DiscoveredTargets.WithLabelValues(m.name, name).Set(0)
+		m.metrics.DiscoveredTargets.WithLabelValues(name).Set(0)
 	}
-	m.metrics.FailedConfigs.WithLabelValues(m.name).Set(float64(failedCount))
+	m.metrics.FailedConfigs.Set(float64(failedCount))
 
 	for _, prov := range m.providers {
 		m.startProvider(m.ctx, prov)
@@ -172,7 +181,7 @@ func (m *Manager) updater(ctx context.Context, p *provider, updates chan []*targ
 		case <-ctx.Done():
 			return
 		case tgs, ok := <-updates:
-			m.metrics.ReceivedUpdates.WithLabelValues(m.name).Inc()
+			m.metrics.ReceivedUpdates.Inc()
 			if !ok {
 				level.Debug(m.logger).Log("msg", "Discoverer channel closed", "provider", p.name)
 				return
@@ -201,11 +210,11 @@ func (m *Manager) sender() {
 		case <-ticker.C: // Some discoverers send updates too often so we throttle these with the ticker.
 			select {
 			case <-m.triggerSend:
-				m.metrics.SentUpdates.WithLabelValues(m.name).Inc()
+				m.metrics.SentUpdates.Inc()
 				select {
 				case m.syncCh <- m.allGroups():
 				default:
-					m.metrics.DelayedUpdates.WithLabelValues(m.name).Inc()
+					m.metrics.DelayedUpdates.Inc()
 					level.Debug(m.logger).Log("msg", "Discovery receiver's channel was full so will retry the next cycle")
 					select {
 					case m.triggerSend <- struct{}{}:
@@ -253,7 +262,7 @@ func (m *Manager) allGroups() map[string][]*targetgroup.Group {
 		}
 	}
 	for setName, v := range n {
-		m.metrics.DiscoveredTargets.WithLabelValues(m.name, setName).Set(float64(v))
+		m.metrics.DiscoveredTargets.WithLabelValues(setName).Set(float64(v))
 	}
 	return tSets
 }
diff --git a/discovery/legacymanager/manager_test.go b/discovery/legacymanager/manager_test.go
index dccb687c2c2..7a2e8feea45 100644
--- a/discovery/legacymanager/manager_test.go
+++ b/discovery/legacymanager/manager_test.go
@@ -36,12 +36,6 @@ func TestMain(m *testing.M) {
 	testutil.TolerantVerifyLeak(m)
 }
 
-func newTestDiscoveryMetrics(t *testing.T) *discovery.Metrics {
-	metrics, err := discovery.NewMetrics(prometheus.NewRegistry())
-	require.NoError(t, err)
-	return metrics
-}
-
 // TestTargetUpdatesOrder checks that the target updates are received in the expected order.
 func TestTargetUpdatesOrder(t *testing.T) {
 	// The order by which the updates are send is determined by the interval passed to the mock discovery adapter
@@ -671,7 +665,8 @@ func TestTargetUpdatesOrder(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+			discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+			require.NotNil(t, discoveryManager)
 			discoveryManager.updatert = 100 * time.Millisecond
 
 			var totalUpdatesCount int
@@ -753,7 +748,8 @@ func verifyPresence(t *testing.T, tSets map[poolKey]map[string]*targetgroup.Grou
 func TestTargetSetRecreatesTargetGroupsEveryRun(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -781,7 +777,8 @@ func TestTargetSetRecreatesTargetGroupsEveryRun(t *testing.T) {
 func TestDiscovererConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -805,7 +802,8 @@ func TestDiscovererConfigs(t *testing.T) {
 func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -844,7 +842,8 @@ func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 func TestIdenticalConfigurationsAreCoalesced(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, nil, prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, nil, prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -875,7 +874,8 @@ func TestApplyConfigDoesNotModifyStaticTargets(t *testing.T) {
 	}
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -900,7 +900,8 @@ func (e errorConfig) NewDiscoverer(discovery.DiscovererOptions) (discovery.Disco
 func TestGaugeFailedConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -1056,7 +1057,8 @@ func TestCoordinationWithReceiver(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			mgr := NewManager(ctx, nil, prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+			mgr := NewManager(ctx, nil, prometheus.NewRegistry())
+			require.NotNil(t, mgr)
 			mgr.updatert = updateDelay
 			go mgr.Run()
 
diff --git a/discovery/manager.go b/discovery/manager.go
index 6afa1b62269..67e326c41a9 100644
--- a/discovery/manager.go
+++ b/discovery/manager.go
@@ -65,7 +65,7 @@ func (p *Provider) Config() interface{} {
 }
 
 // NewManager is the Discovery Manager constructor.
-func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Registerer, metrics *Metrics, options ...func(*Manager)) *Manager {
+func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Registerer, options ...func(*Manager)) *Manager {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -77,11 +77,20 @@ func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Re
 		updatert:    5 * time.Second,
 		triggerSend: make(chan struct{}, 1),
 		registerer:  registerer,
-		metrics:     metrics,
 	}
 	for _, option := range options {
 		option(mgr)
 	}
+
+	// Register the metrics.
+	// We have to do this after setting all options, so that the name of the Manager is set.
+	if metrics, err := NewMetrics(registerer, mgr.name); err == nil {
+		mgr.metrics = metrics
+	} else {
+		level.Error(logger).Log("msg", "Failed to create discovery manager metrics", "manager", mgr.name, "err", err)
+		return nil
+	}
+
 	return mgr
 }
 
@@ -165,7 +174,7 @@ func (m *Manager) ApplyConfig(cfg map[string]Configs) error {
 	for name, scfg := range cfg {
 		failedCount += m.registerProviders(scfg, name)
 	}
-	m.metrics.FailedConfigs.WithLabelValues(m.name).Set(float64(failedCount))
+	m.metrics.FailedConfigs.Set(float64(failedCount))
 
 	var (
 		wg sync.WaitGroup
@@ -201,7 +210,7 @@ func (m *Manager) ApplyConfig(cfg map[string]Configs) error {
 		// Set metrics and targets for new subs.
 		for s := range prov.newSubs {
 			if _, ok := prov.subs[s]; !ok {
-				m.metrics.DiscoveredTargets.WithLabelValues(m.name, s).Set(0)
+				m.metrics.DiscoveredTargets.WithLabelValues(s).Set(0)
 			}
 			if l := len(refTargets); l > 0 {
 				m.targets[poolKey{s, prov.name}] = make(map[string]*targetgroup.Group, l)
@@ -281,7 +290,7 @@ func (m *Manager) updater(ctx context.Context, p *Provider, updates chan []*targ
 		case <-ctx.Done():
 			return
 		case tgs, ok := <-updates:
-			m.metrics.ReceivedUpdates.WithLabelValues(m.name).Inc()
+			m.metrics.ReceivedUpdates.Inc()
 			if !ok {
 				level.Debug(m.logger).Log("msg", "Discoverer channel closed", "provider", p.name)
 				// Wait for provider cancellation to ensure targets are cleaned up when expected.
@@ -314,11 +323,11 @@ func (m *Manager) sender() {
 		case <-ticker.C: // Some discoverers send updates too often, so we throttle these with the ticker.
 			select {
 			case <-m.triggerSend:
-				m.metrics.SentUpdates.WithLabelValues(m.name).Inc()
+				m.metrics.SentUpdates.Inc()
 				select {
 				case m.syncCh <- m.allGroups():
 				default:
-					m.metrics.DelayedUpdates.WithLabelValues(m.name).Inc()
+					m.metrics.DelayedUpdates.Inc()
 					level.Debug(m.logger).Log("msg", "Discovery receiver's channel was full so will retry the next cycle")
 					select {
 					case m.triggerSend <- struct{}{}:
@@ -370,7 +379,7 @@ func (m *Manager) allGroups() map[string][]*targetgroup.Group {
 		}
 	}
 	for setName, v := range n {
-		m.metrics.DiscoveredTargets.WithLabelValues(m.name, setName).Set(float64(v))
+		m.metrics.DiscoveredTargets.WithLabelValues(setName).Set(float64(v))
 	}
 	return tSets
 }
diff --git a/discovery/manager_test.go b/discovery/manager_test.go
index 3cb2773431e..f22de75a46f 100644
--- a/discovery/manager_test.go
+++ b/discovery/manager_test.go
@@ -36,12 +36,6 @@ func TestMain(m *testing.M) {
 	testutil.TolerantVerifyLeak(m)
 }
 
-func newTestDiscoveryMetrics(t *testing.T) *Metrics {
-	metrics, err := NewMetrics(prometheus.NewRegistry())
-	require.NoError(t, err)
-	return metrics
-}
-
 // TestTargetUpdatesOrder checks that the target updates are received in the expected order.
 func TestTargetUpdatesOrder(t *testing.T) {
 	// The order by which the updates are send is determined by the interval passed to the mock discovery adapter
@@ -671,7 +665,8 @@ func TestTargetUpdatesOrder(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+			discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+			require.NotNil(t, discoveryManager)
 			discoveryManager.updatert = 100 * time.Millisecond
 
 			var totalUpdatesCount int
@@ -785,7 +780,8 @@ func pk(provider, setName string, n int) poolKey {
 func TestTargetSetTargetGroupsPresentOnConfigReload(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -817,7 +813,8 @@ func TestTargetSetTargetGroupsPresentOnConfigReload(t *testing.T) {
 func TestTargetSetTargetGroupsPresentOnConfigRename(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -852,7 +849,8 @@ func TestTargetSetTargetGroupsPresentOnConfigRename(t *testing.T) {
 func TestTargetSetTargetGroupsPresentOnConfigDuplicateAndDeleteOriginal(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -890,7 +888,8 @@ func TestTargetSetTargetGroupsPresentOnConfigDuplicateAndDeleteOriginal(t *testi
 func TestTargetSetTargetGroupsPresentOnConfigChange(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -951,7 +950,8 @@ func TestTargetSetTargetGroupsPresentOnConfigChange(t *testing.T) {
 func TestTargetSetRecreatesTargetGroupsOnConfigChange(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -990,7 +990,8 @@ func TestTargetSetRecreatesTargetGroupsOnConfigChange(t *testing.T) {
 func TestDiscovererConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -1022,7 +1023,8 @@ func TestDiscovererConfigs(t *testing.T) {
 func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -1069,7 +1071,8 @@ func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 func TestIdenticalConfigurationsAreCoalesced(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, nil, prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, nil, prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -1105,7 +1108,8 @@ func TestApplyConfigDoesNotModifyStaticTargets(t *testing.T) {
 	}
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -1151,7 +1155,8 @@ func (s lockStaticDiscoverer) Run(ctx context.Context, up chan<- []*targetgroup.
 func TestGaugeFailedConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
@@ -1307,7 +1312,8 @@ func TestCoordinationWithReceiver(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			mgr := NewManager(ctx, nil, prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+			mgr := NewManager(ctx, nil, prometheus.NewRegistry())
+			require.NotNil(t, mgr)
 			mgr.updatert = updateDelay
 			go mgr.Run()
 
@@ -1402,7 +1408,8 @@ func (o onceProvider) Run(_ context.Context, ch chan<- []*targetgroup.Group) {
 func TestTargetSetTargetGroupsUpdateDuringApplyConfig(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry(), newTestDiscoveryMetrics(t))
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
 
diff --git a/discovery/metrics.go b/discovery/metrics.go
index 04f54b542f5..6a606039554 100644
--- a/discovery/metrics.go
+++ b/discovery/metrics.go
@@ -31,66 +31,64 @@ func init() {
 
 // Metrics to be used with a discovery manager.
 type Metrics struct {
-	FailedConfigs     *prometheus.GaugeVec
+	FailedConfigs     prometheus.Gauge
 	DiscoveredTargets *prometheus.GaugeVec
-	ReceivedUpdates   *prometheus.CounterVec
-	DelayedUpdates    *prometheus.CounterVec
-	SentUpdates       *prometheus.CounterVec
+	ReceivedUpdates   prometheus.Counter
+	DelayedUpdates    prometheus.Counter
+	SentUpdates       prometheus.Counter
 }
 
-func NewMetrics(registerer prometheus.Registerer) (*Metrics, error) {
+func NewMetrics(registerer prometheus.Registerer, sdManagerName string) (*Metrics, error) {
 	m := &Metrics{}
 
-	m.FailedConfigs = prometheus.NewGaugeVec(
+	m.FailedConfigs = prometheus.NewGauge(
 		prometheus.GaugeOpts{
-			Name: "prometheus_sd_failed_configs",
-			Help: "Current number of service discovery configurations that failed to load.",
+			Name:        "prometheus_sd_failed_configs",
+			Help:        "Current number of service discovery configurations that failed to load.",
+			ConstLabels: prometheus.Labels{"name": sdManagerName},
 		},
-		[]string{"name"},
 	)
 
 	m.DiscoveredTargets = prometheus.NewGaugeVec(
 		prometheus.GaugeOpts{
-			Name: "prometheus_sd_discovered_targets",
-			Help: "Current number of discovered targets.",
+			Name:        "prometheus_sd_discovered_targets",
+			Help:        "Current number of discovered targets.",
+			ConstLabels: prometheus.Labels{"name": sdManagerName},
 		},
-		[]string{"name", "config"},
+		[]string{"config"},
 	)
 
-	m.ReceivedUpdates = prometheus.NewCounterVec(
+	m.ReceivedUpdates = prometheus.NewCounter(
 		prometheus.CounterOpts{
-			Name: "prometheus_sd_received_updates_total",
-			Help: "Total number of update events received from the SD providers.",
+			Name:        "prometheus_sd_received_updates_total",
+			Help:        "Total number of update events received from the SD providers.",
+			ConstLabels: prometheus.Labels{"name": sdManagerName},
 		},
-		[]string{"name"},
 	)
 
-	m.DelayedUpdates = prometheus.NewCounterVec(
+	m.DelayedUpdates = prometheus.NewCounter(
 		prometheus.CounterOpts{
-			Name: "prometheus_sd_updates_delayed_total",
-			Help: "Total number of update events that couldn't be sent immediately.",
+			Name:        "prometheus_sd_updates_delayed_total",
+			Help:        "Total number of update events that couldn't be sent immediately.",
+			ConstLabels: prometheus.Labels{"name": sdManagerName},
 		},
-		[]string{"name"},
 	)
 
-	m.SentUpdates = prometheus.NewCounterVec(
+	m.SentUpdates = prometheus.NewCounter(
 		prometheus.CounterOpts{
-			Name: "prometheus_sd_updates_total",
-			Help: "Total number of update events sent to the SD consumers.",
+			Name:        "prometheus_sd_updates_total",
+			Help:        "Total number of update events sent to the SD consumers.",
+			ConstLabels: prometheus.Labels{"name": sdManagerName},
 		},
-		[]string{"name"},
 	)
 
-	metrics := append(
-		[]prometheus.Collector{
-			m.FailedConfigs,
-			m.DiscoveredTargets,
-			m.ReceivedUpdates,
-			m.DelayedUpdates,
-			m.SentUpdates,
-		},
-		clientGoMetrics()...,
-	)
+	metrics := []prometheus.Collector{
+		m.FailedConfigs,
+		m.DiscoveredTargets,
+		m.ReceivedUpdates,
+		m.DelayedUpdates,
+		m.SentUpdates,
+	}
 
 	for _, collector := range metrics {
 		err := registerer.Register(collector)
diff --git a/discovery/metrics_k8s_client.go b/discovery/metrics_k8s_client.go
index 4f161bc3e9a..f16245684bb 100644
--- a/discovery/metrics_k8s_client.go
+++ b/discovery/metrics_k8s_client.go
@@ -15,6 +15,7 @@ package discovery
 
 import (
 	"context"
+	"fmt"
 	"net/url"
 	"time"
 
@@ -133,6 +134,16 @@ func clientGoMetrics() []prometheus.Collector {
 	}
 }
 
+func RegisterK8sClientMetricsWithPrometheus(registerer prometheus.Registerer) error {
+	for _, collector := range clientGoMetrics() {
+		err := registerer.Register(collector)
+		if err != nil {
+			return fmt.Errorf("failed to register Kubernetes Go Client metrics: %w", err)
+		}
+	}
+	return nil
+}
+
 func (f *clientGoRequestMetricAdapter) RegisterWithK8sGoClient() {
 	metrics.Register(
 		metrics.RegisterOpts{
diff --git a/documentation/examples/custom-sd/adapter-usage/main.go b/documentation/examples/custom-sd/adapter-usage/main.go
index b712749dfe4..f4bba739441 100644
--- a/documentation/examples/custom-sd/adapter-usage/main.go
+++ b/documentation/examples/custom-sd/adapter-usage/main.go
@@ -28,10 +28,8 @@ import (
 	"github.com/alecthomas/kingpin/v2"
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
-	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 
-	prom_discovery "github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 	"github.com/prometheus/prometheus/documentation/examples/custom-sd/adapter"
 	"github.com/prometheus/prometheus/util/strutil"
@@ -271,12 +269,11 @@ func main() {
 		fmt.Println("err: ", err)
 	}
 
-	discoveryMetrics, err := prom_discovery.NewMetrics(prometheus.DefaultRegisterer)
 	if err != nil {
 		level.Error(logger).Log("msg", "failed to create discovery metrics", "err", err)
 		os.Exit(1)
 	}
-	sdAdapter := adapter.NewAdapter(ctx, *outputFile, "exampleSD", disc, logger, discoveryMetrics)
+	sdAdapter := adapter.NewAdapter(ctx, *outputFile, "exampleSD", disc, logger)
 	sdAdapter.Run()
 
 	<-ctx.Done()
diff --git a/documentation/examples/custom-sd/adapter/adapter.go b/documentation/examples/custom-sd/adapter/adapter.go
index 8aedf008444..7fbf94aa9c9 100644
--- a/documentation/examples/custom-sd/adapter/adapter.go
+++ b/documentation/examples/custom-sd/adapter/adapter.go
@@ -163,12 +163,12 @@ func (a *Adapter) Run() {
 }
 
 // NewAdapter creates a new instance of Adapter.
-func NewAdapter(ctx context.Context, file, name string, d discovery.Discoverer, logger log.Logger, metrics *discovery.Metrics) *Adapter {
+func NewAdapter(ctx context.Context, file, name string, d discovery.Discoverer, logger log.Logger) *Adapter {
 	return &Adapter{
 		ctx:     ctx,
 		disc:    d,
 		groups:  make(map[string]*customSD),
-		manager: discovery.NewManager(ctx, logger, prometheus.NewRegistry(), metrics),
+		manager: discovery.NewManager(ctx, logger, prometheus.NewRegistry()),
 		output:  file,
 		name:    name,
 		logger:  logger,
diff --git a/documentation/examples/custom-sd/adapter/adapter_test.go b/documentation/examples/custom-sd/adapter/adapter_test.go
index 14cae47b432..8e5920eb485 100644
--- a/documentation/examples/custom-sd/adapter/adapter_test.go
+++ b/documentation/examples/custom-sd/adapter/adapter_test.go
@@ -18,11 +18,9 @@ import (
 	"os"
 	"testing"
 
-	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 
-	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -228,8 +226,7 @@ func TestWriteOutput(t *testing.T) {
 	require.NoError(t, err)
 	defer os.Remove(tmpfile.Name())
 	tmpfile.Close()
-	metrics, err := discovery.NewMetrics(prometheus.NewRegistry())
 	require.NoError(t, err)
-	adapter := NewAdapter(ctx, tmpfile.Name(), "test_sd", nil, nil, metrics)
+	adapter := NewAdapter(ctx, tmpfile.Name(), "test_sd", nil, nil)
 	require.NoError(t, adapter.writeOutput())
 }

From 6279497124673eda4de899b08bbf6d66e6041892 Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Tue, 5 Dec 2023 18:01:39 +0000
Subject: [PATCH 020/132] Remove unnecessary else. This was flagged by the
 linter.

Signed-off-by: Paulin Todev <paulin.todev@gmail.com>
---
 cmd/prometheus/main.go | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/cmd/prometheus/main.go b/cmd/prometheus/main.go
index f30fbecd984..7438476c3aa 100644
--- a/cmd/prometheus/main.go
+++ b/cmd/prometheus/main.go
@@ -636,9 +636,8 @@ func main() {
 			if discMgr == nil {
 				level.Error(logger).Log("msg", "failed to create a discovery manager scrape")
 				os.Exit(1)
-			} else {
-				discoveryManagerScrape = discMgr
 			}
+			discoveryManagerScrape = discMgr
 		}
 
 		{
@@ -646,9 +645,8 @@ func main() {
 			if discMgr == nil {
 				level.Error(logger).Log("msg", "failed to create a discovery manager notify")
 				os.Exit(1)
-			} else {
-				discoveryManagerNotify = discMgr
 			}
+			discoveryManagerNotify = discMgr
 		}
 	} else {
 		{
@@ -656,9 +654,8 @@ func main() {
 			if discMgr == nil {
 				level.Error(logger).Log("msg", "failed to create a discovery manager scrape")
 				os.Exit(1)
-			} else {
-				discoveryManagerScrape = discMgr
 			}
+			discoveryManagerScrape = discMgr
 		}
 
 		{
@@ -666,9 +663,8 @@ func main() {
 			if discMgr == nil {
 				level.Error(logger).Log("msg", "failed to create a discovery manager notify")
 				os.Exit(1)
-			} else {
-				discoveryManagerNotify = discMgr
 			}
+			discoveryManagerNotify = discMgr
 		}
 	}
 

From 8f6cf3aabb1b9c0b385d57c922f8e2f571bba61b Mon Sep 17 00:00:00 2001
From: Matthieu MOREL <matthieu.morel35@gmail.com>
Date: Thu, 16 Nov 2023 19:54:41 +0100
Subject: [PATCH 021/132] tsdb: use Go standard errors

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
---
 .golangci.yml               |   6 +-
 go.mod                      |   2 +-
 tsdb/agent/db.go            |   2 +-
 tsdb/block.go               |  29 ++++---
 tsdb/blockwriter.go         |  11 +--
 tsdb/chunkenc/chunk_test.go |   5 +-
 tsdb/chunks/head_chunks.go  |   9 ++-
 tsdb/compact.go             |  50 ++++++------
 tsdb/compact_test.go        |   2 +-
 tsdb/db.go                  | 154 +++++++++++++++++++-----------------
 tsdb/db_test.go             |   3 +-
 tsdb/exemplar.go            |   3 +-
 tsdb/head.go                |  48 +++++------
 tsdb/head_append.go         |  50 ++++++------
 tsdb/head_bench_test.go     |   2 +-
 tsdb/head_read.go           |  15 ++--
 tsdb/head_test.go           |  15 ++--
 tsdb/head_wal.go            | 103 +++++++++++++-----------
 tsdb/index/index.go         |   6 +-
 tsdb/mocks_test.go          |   4 +-
 tsdb/querier.go             |  40 +++++-----
 tsdb/querier_test.go        |   4 +-
 tsdb/repair.go              |  43 ++++++----
 tsdb/wal.go                 | 101 ++++++++++++-----------
 tsdb/wlog/wlog.go           |   4 +
 25 files changed, 382 insertions(+), 329 deletions(-)

diff --git a/.golangci.yml b/.golangci.yml
index 01ba9deb048..166b2e0d480 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -36,13 +36,9 @@ issues:
     - path: _test.go
       linters:
         - errcheck
-    - path: tsdb/
+    - path: "tsdb/head_wal.go"
       linters:
         - errorlint
-    - path: tsdb/
-      text: "import 'github.com/pkg/errors' is not allowed"
-      linters:
-        - depguard
     - linters:
         - godot
       source: "^// ==="
diff --git a/go.mod b/go.mod
index 95cc7b8af60..f785de723f8 100644
--- a/go.mod
+++ b/go.mod
@@ -43,7 +43,6 @@ require (
 	github.com/oklog/run v1.1.0
 	github.com/oklog/ulid v1.3.1
 	github.com/ovh/go-ovh v1.4.3
-	github.com/pkg/errors v0.9.1
 	github.com/prometheus/alertmanager v0.26.0
 	github.com/prometheus/client_golang v1.17.0
 	github.com/prometheus/client_model v0.5.0
@@ -167,6 +166,7 @@ require (
 	github.com/opencontainers/go-digest v1.0.0 // indirect
 	github.com/opencontainers/image-spec v1.0.2 // indirect
 	github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
+	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/procfs v0.11.1 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
diff --git a/tsdb/agent/db.go b/tsdb/agent/db.go
index 557fb785404..d399897133a 100644
--- a/tsdb/agent/db.go
+++ b/tsdb/agent/db.go
@@ -359,7 +359,7 @@ func (db *DB) replayWAL() error {
 	start := time.Now()
 
 	dir, startFrom, err := wlog.LastCheckpoint(db.wal.Dir())
-	if err != nil && err != record.ErrNotFound {
+	if err != nil && !errors.Is(err, record.ErrNotFound) {
 		return fmt.Errorf("find last checkpoint: %w", err)
 	}
 
diff --git a/tsdb/block.go b/tsdb/block.go
index a586536b152..e2562de03c2 100644
--- a/tsdb/block.go
+++ b/tsdb/block.go
@@ -17,6 +17,7 @@ package tsdb
 import (
 	"context"
 	"encoding/json"
+	"errors"
 	"fmt"
 	"io"
 	"os"
@@ -26,7 +27,6 @@ import (
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
 	"github.com/oklog/ulid"
-	"github.com/pkg/errors"
 	"golang.org/x/exp/slices"
 
 	"github.com/prometheus/prometheus/model/labels"
@@ -479,14 +479,19 @@ func (r blockIndexReader) SortedLabelValues(ctx context.Context, name string, ma
 			slices.Sort(st)
 		}
 	}
-
-	return st, errors.Wrapf(err, "block: %s", r.b.Meta().ULID)
+	if err != nil {
+		return st, fmt.Errorf("block: %s: %w", r.b.Meta().ULID, err)
+	}
+	return st, nil
 }
 
 func (r blockIndexReader) LabelValues(ctx context.Context, name string, matchers ...*labels.Matcher) ([]string, error) {
 	if len(matchers) == 0 {
 		st, err := r.ir.LabelValues(ctx, name)
-		return st, errors.Wrapf(err, "block: %s", r.b.Meta().ULID)
+		if err != nil {
+			return st, fmt.Errorf("block: %s: %w", r.b.Meta().ULID, err)
+		}
+		return st, nil
 	}
 
 	return labelValuesWithMatchers(ctx, r.ir, name, matchers...)
@@ -503,7 +508,7 @@ func (r blockIndexReader) LabelNames(ctx context.Context, matchers ...*labels.Ma
 func (r blockIndexReader) Postings(ctx context.Context, name string, values ...string) (index.Postings, error) {
 	p, err := r.ir.Postings(ctx, name, values...)
 	if err != nil {
-		return p, errors.Wrapf(err, "block: %s", r.b.Meta().ULID)
+		return p, fmt.Errorf("block: %s: %w", r.b.Meta().ULID, err)
 	}
 	return p, nil
 }
@@ -514,7 +519,7 @@ func (r blockIndexReader) SortedPostings(p index.Postings) index.Postings {
 
 func (r blockIndexReader) Series(ref storage.SeriesRef, builder *labels.ScratchBuilder, chks *[]chunks.Meta) error {
 	if err := r.ir.Series(ref, builder, chks); err != nil {
-		return errors.Wrapf(err, "block: %s", r.b.Meta().ULID)
+		return fmt.Errorf("block: %s: %w", r.b.Meta().ULID, err)
 	}
 	return nil
 }
@@ -566,7 +571,7 @@ func (pb *Block) Delete(ctx context.Context, mint, maxt int64, ms ...*labels.Mat
 
 	p, err := PostingsForMatchers(ctx, pb.indexr, ms...)
 	if err != nil {
-		return errors.Wrap(err, "select series")
+		return fmt.Errorf("select series: %w", err)
 	}
 
 	ir := pb.indexr
@@ -654,12 +659,12 @@ func (pb *Block) CleanTombstones(dest string, c Compactor) (*ulid.ULID, bool, er
 func (pb *Block) Snapshot(dir string) error {
 	blockDir := filepath.Join(dir, pb.meta.ULID.String())
 	if err := os.MkdirAll(blockDir, 0o777); err != nil {
-		return errors.Wrap(err, "create snapshot block dir")
+		return fmt.Errorf("create snapshot block dir: %w", err)
 	}
 
 	chunksDir := chunkDir(blockDir)
 	if err := os.MkdirAll(chunksDir, 0o777); err != nil {
-		return errors.Wrap(err, "create snapshot chunk dir")
+		return fmt.Errorf("create snapshot chunk dir: %w", err)
 	}
 
 	// Hardlink meta, index and tombstones
@@ -669,7 +674,7 @@ func (pb *Block) Snapshot(dir string) error {
 		tombstones.TombstonesFilename,
 	} {
 		if err := os.Link(filepath.Join(pb.dir, fname), filepath.Join(blockDir, fname)); err != nil {
-			return errors.Wrapf(err, "create snapshot %s", fname)
+			return fmt.Errorf("create snapshot %s: %w", fname, err)
 		}
 	}
 
@@ -677,13 +682,13 @@ func (pb *Block) Snapshot(dir string) error {
 	curChunkDir := chunkDir(pb.dir)
 	files, err := os.ReadDir(curChunkDir)
 	if err != nil {
-		return errors.Wrap(err, "ReadDir the current chunk dir")
+		return fmt.Errorf("ReadDir the current chunk dir: %w", err)
 	}
 
 	for _, f := range files {
 		err := os.Link(filepath.Join(curChunkDir, f.Name()), filepath.Join(chunksDir, f.Name()))
 		if err != nil {
-			return errors.Wrap(err, "hardlink a chunk")
+			return fmt.Errorf("hardlink a chunk: %w", err)
 		}
 	}
 
diff --git a/tsdb/blockwriter.go b/tsdb/blockwriter.go
index 0d017e095f4..73bc5f1e35b 100644
--- a/tsdb/blockwriter.go
+++ b/tsdb/blockwriter.go
@@ -15,13 +15,14 @@ package tsdb
 
 import (
 	"context"
+	"errors"
+	"fmt"
 	"math"
 	"os"
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
 	"github.com/oklog/ulid"
-	"github.com/pkg/errors"
 
 	"github.com/prometheus/prometheus/model/timestamp"
 	"github.com/prometheus/prometheus/storage"
@@ -65,7 +66,7 @@ func NewBlockWriter(logger log.Logger, dir string, blockSize int64) (*BlockWrite
 func (w *BlockWriter) initHead() error {
 	chunkDir, err := os.MkdirTemp(os.TempDir(), "head")
 	if err != nil {
-		return errors.Wrap(err, "create temp dir")
+		return fmt.Errorf("create temp dir: %w", err)
 	}
 	w.chunkDir = chunkDir
 	opts := DefaultHeadOptions()
@@ -74,7 +75,7 @@ func (w *BlockWriter) initHead() error {
 	opts.EnableNativeHistograms.Store(true)
 	h, err := NewHead(nil, w.logger, nil, nil, opts, NewHeadStats())
 	if err != nil {
-		return errors.Wrap(err, "tsdb.NewHead")
+		return fmt.Errorf("tsdb.NewHead: %w", err)
 	}
 
 	w.head = h
@@ -102,11 +103,11 @@ func (w *BlockWriter) Flush(ctx context.Context) (ulid.ULID, error) {
 		[]int64{w.blockSize},
 		chunkenc.NewPool(), nil)
 	if err != nil {
-		return ulid.ULID{}, errors.Wrap(err, "create leveled compactor")
+		return ulid.ULID{}, fmt.Errorf("create leveled compactor: %w", err)
 	}
 	id, err := compactor.Write(w.destinationDir, w.head, mint, maxt, nil)
 	if err != nil {
-		return ulid.ULID{}, errors.Wrap(err, "compactor write")
+		return ulid.ULID{}, fmt.Errorf("compactor write: %w", err)
 	}
 
 	return id, nil
diff --git a/tsdb/chunkenc/chunk_test.go b/tsdb/chunkenc/chunk_test.go
index 3d22f74ccac..9db1bf364fe 100644
--- a/tsdb/chunkenc/chunk_test.go
+++ b/tsdb/chunkenc/chunk_test.go
@@ -14,6 +14,7 @@
 package chunkenc
 
 import (
+	"errors"
 	"fmt"
 	"io"
 	"math/rand"
@@ -153,8 +154,8 @@ func benchmarkIterator(b *testing.B, newChunk func() Chunk) {
 			res = v
 			i++
 		}
-		if it.Err() != io.EOF {
-			require.NoError(b, it.Err())
+		if err := it.Err(); err != nil && !errors.Is(err, io.EOF) {
+			require.NoError(b, err)
 		}
 		_ = res
 	}
diff --git a/tsdb/chunks/head_chunks.go b/tsdb/chunks/head_chunks.go
index b495b618283..12c3e7b900d 100644
--- a/tsdb/chunks/head_chunks.go
+++ b/tsdb/chunks/head_chunks.go
@@ -111,6 +111,10 @@ func (e *CorruptionErr) Error() string {
 	return fmt.Errorf("corruption in head chunk file %s: %w", segmentFile(e.Dir, e.FileIndex), e.Err).Error()
 }
 
+func (e *CorruptionErr) Unwrap() error {
+	return e.Err
+}
+
 // chunkPos keeps track of the position in the head chunk files.
 // chunkPos is not thread-safe, a lock must be used to protect it.
 type chunkPos struct {
@@ -400,7 +404,7 @@ func repairLastChunkFile(files map[int]string) (_ map[int]string, returnErr erro
 
 	buf := make([]byte, MagicChunksSize)
 	size, err := f.Read(buf)
-	if err != nil && err != io.EOF {
+	if err != nil && !errors.Is(err, io.EOF) {
 		return files, fmt.Errorf("failed to read magic number during last head chunk file repair: %w", err)
 	}
 	if err := f.Close(); err != nil {
@@ -892,7 +896,8 @@ func (cdm *ChunkDiskMapper) IterateAllChunks(f func(seriesRef HeadSeriesRef, chu
 			// Extract the encoding from the byte. ChunkDiskMapper uses only the last 7 bits for the encoding.
 			chkEnc = cdm.RemoveMasks(chkEnc)
 			if err := f(seriesRef, chunkRef, mint, maxt, numSamples, chkEnc, isOOO); err != nil {
-				if cerr, ok := err.(*CorruptionErr); ok {
+				var cerr *CorruptionErr
+				if errors.As(err, &cerr) {
 					cerr.Dir = cdm.dir.Name()
 					cerr.FileIndex = segID
 					return cerr
diff --git a/tsdb/compact.go b/tsdb/compact.go
index 32c88d2cc0a..7b4ff9c1b6b 100644
--- a/tsdb/compact.go
+++ b/tsdb/compact.go
@@ -16,6 +16,7 @@ package tsdb
 import (
 	"context"
 	"crypto/rand"
+	"errors"
 	"fmt"
 	"io"
 	"os"
@@ -25,7 +26,6 @@ import (
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
 	"github.com/oklog/ulid"
-	"github.com/pkg/errors"
 	"github.com/prometheus/client_golang/prometheus"
 	"golang.org/x/exp/slices"
 
@@ -485,7 +485,7 @@ func (c *LeveledCompactor) CompactWithBlockPopulator(dest string, dirs []string,
 	if !errors.Is(err, context.Canceled) {
 		for _, b := range bs {
 			if err := b.setCompactionFailed(); err != nil {
-				errs.Add(errors.Wrapf(err, "setting compaction failed for block: %s", b.Dir()))
+				errs.Add(fmt.Errorf("setting compaction failed for block: %s: %w", b.Dir(), err))
 			}
 		}
 	}
@@ -586,7 +586,7 @@ func (c *LeveledCompactor) write(dest string, meta *BlockMeta, blockPopulator Bl
 
 	chunkw, err = chunks.NewWriterWithSegSize(chunkDir(tmp), c.maxBlockChunkSegmentSize)
 	if err != nil {
-		return errors.Wrap(err, "open chunk writer")
+		return fmt.Errorf("open chunk writer: %w", err)
 	}
 	closers = append(closers, chunkw)
 	// Record written chunk sizes on level 1 compactions.
@@ -601,12 +601,12 @@ func (c *LeveledCompactor) write(dest string, meta *BlockMeta, blockPopulator Bl
 
 	indexw, err := index.NewWriter(c.ctx, filepath.Join(tmp, indexFilename))
 	if err != nil {
-		return errors.Wrap(err, "open index writer")
+		return fmt.Errorf("open index writer: %w", err)
 	}
 	closers = append(closers, indexw)
 
 	if err := blockPopulator.PopulateBlock(c.ctx, c.metrics, c.logger, c.chunkPool, c.mergeFunc, blocks, meta, indexw, chunkw); err != nil {
-		return errors.Wrap(err, "populate block")
+		return fmt.Errorf("populate block: %w", err)
 	}
 
 	select {
@@ -634,17 +634,17 @@ func (c *LeveledCompactor) write(dest string, meta *BlockMeta, blockPopulator Bl
 	}
 
 	if _, err = writeMetaFile(c.logger, tmp, meta); err != nil {
-		return errors.Wrap(err, "write merged meta")
+		return fmt.Errorf("write merged meta: %w", err)
 	}
 
 	// Create an empty tombstones file.
 	if _, err := tombstones.WriteFile(c.logger, tmp, tombstones.NewMemTombstones()); err != nil {
-		return errors.Wrap(err, "write new tombstones file")
+		return fmt.Errorf("write new tombstones file: %w", err)
 	}
 
 	df, err := fileutil.OpenDir(tmp)
 	if err != nil {
-		return errors.Wrap(err, "open temporary block dir")
+		return fmt.Errorf("open temporary block dir: %w", err)
 	}
 	defer func() {
 		if df != nil {
@@ -653,18 +653,18 @@ func (c *LeveledCompactor) write(dest string, meta *BlockMeta, blockPopulator Bl
 	}()
 
 	if err := df.Sync(); err != nil {
-		return errors.Wrap(err, "sync temporary dir file")
+		return fmt.Errorf("sync temporary dir file: %w", err)
 	}
 
 	// Close temp dir before rename block dir (for windows platform).
 	if err = df.Close(); err != nil {
-		return errors.Wrap(err, "close temporary dir")
+		return fmt.Errorf("close temporary dir: %w", err)
 	}
 	df = nil
 
 	// Block successfully written, make it visible in destination dir by moving it from tmp one.
 	if err := fileutil.Replace(tmp, dir); err != nil {
-		return errors.Wrap(err, "rename block dir")
+		return fmt.Errorf("rename block dir: %w", err)
 	}
 
 	return nil
@@ -693,7 +693,7 @@ func (c DefaultBlockPopulator) PopulateBlock(ctx context.Context, metrics *Compa
 	defer func() {
 		errs := tsdb_errors.NewMulti(err)
 		if cerr := tsdb_errors.CloseAll(closers); cerr != nil {
-			errs.Add(errors.Wrap(cerr, "close"))
+			errs.Add(fmt.Errorf("close: %w", cerr))
 		}
 		err = errs.Err()
 		metrics.PopulatingBlocks.Set(0)
@@ -721,19 +721,19 @@ func (c DefaultBlockPopulator) PopulateBlock(ctx context.Context, metrics *Compa
 
 		indexr, err := b.Index()
 		if err != nil {
-			return errors.Wrapf(err, "open index reader for block %+v", b.Meta())
+			return fmt.Errorf("open index reader for block %+v: %w", b.Meta(), err)
 		}
 		closers = append(closers, indexr)
 
 		chunkr, err := b.Chunks()
 		if err != nil {
-			return errors.Wrapf(err, "open chunk reader for block %+v", b.Meta())
+			return fmt.Errorf("open chunk reader for block %+v: %w", b.Meta(), err)
 		}
 		closers = append(closers, chunkr)
 
 		tombsr, err := b.Tombstones()
 		if err != nil {
-			return errors.Wrapf(err, "open tombstone reader for block %+v", b.Meta())
+			return fmt.Errorf("open tombstone reader for block %+v: %w", b.Meta(), err)
 		}
 		closers = append(closers, tombsr)
 
@@ -755,11 +755,11 @@ func (c DefaultBlockPopulator) PopulateBlock(ctx context.Context, metrics *Compa
 
 	for symbols.Next() {
 		if err := indexw.AddSymbol(symbols.At()); err != nil {
-			return errors.Wrap(err, "add symbol")
+			return fmt.Errorf("add symbol: %w", err)
 		}
 	}
-	if symbols.Err() != nil {
-		return errors.Wrap(symbols.Err(), "next symbol")
+	if err := symbols.Err(); err != nil {
+		return fmt.Errorf("next symbol: %w", err)
 	}
 
 	var (
@@ -791,8 +791,8 @@ func (c DefaultBlockPopulator) PopulateBlock(ctx context.Context, metrics *Compa
 			// chunk file purposes.
 			chks = append(chks, chksIter.At())
 		}
-		if chksIter.Err() != nil {
-			return errors.Wrap(chksIter.Err(), "chunk iter")
+		if err := chksIter.Err(); err != nil {
+			return fmt.Errorf("chunk iter: %w", err)
 		}
 
 		// Skip the series with all deleted chunks.
@@ -801,10 +801,10 @@ func (c DefaultBlockPopulator) PopulateBlock(ctx context.Context, metrics *Compa
 		}
 
 		if err := chunkw.WriteChunks(chks...); err != nil {
-			return errors.Wrap(err, "write chunks")
+			return fmt.Errorf("write chunks: %w", err)
 		}
 		if err := indexw.AddSeries(ref, s.Labels(), chks...); err != nil {
-			return errors.Wrap(err, "add series")
+			return fmt.Errorf("add series: %w", err)
 		}
 
 		meta.Stats.NumChunks += uint64(len(chks))
@@ -815,13 +815,13 @@ func (c DefaultBlockPopulator) PopulateBlock(ctx context.Context, metrics *Compa
 
 		for _, chk := range chks {
 			if err := chunkPool.Put(chk.Chunk); err != nil {
-				return errors.Wrap(err, "put chunk")
+				return fmt.Errorf("put chunk: %w", err)
 			}
 		}
 		ref++
 	}
-	if set.Err() != nil {
-		return errors.Wrap(set.Err(), "iterate compaction set")
+	if err := set.Err(); err != nil {
+		return fmt.Errorf("iterate compaction set: %w", err)
 	}
 
 	return nil
diff --git a/tsdb/compact_test.go b/tsdb/compact_test.go
index 75d564139ed..f33bb73c193 100644
--- a/tsdb/compact_test.go
+++ b/tsdb/compact_test.go
@@ -15,6 +15,7 @@ package tsdb
 
 import (
 	"context"
+	"errors"
 	"fmt"
 	"math"
 	"math/rand"
@@ -27,7 +28,6 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/oklog/ulid"
-	"github.com/pkg/errors"
 	prom_testutil "github.com/prometheus/client_golang/prometheus/testutil"
 	"github.com/stretchr/testify/require"
 
diff --git a/tsdb/db.go b/tsdb/db.go
index 2e3801a9e05..6d283fdd829 100644
--- a/tsdb/db.go
+++ b/tsdb/db.go
@@ -16,6 +16,7 @@ package tsdb
 
 import (
 	"context"
+	"errors"
 	"fmt"
 	"io"
 	"io/fs"
@@ -30,7 +31,6 @@ import (
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
 	"github.com/oklog/ulid"
-	"github.com/pkg/errors"
 	"github.com/prometheus/client_golang/prometheus"
 	"go.uber.org/atomic"
 	"golang.org/x/exp/slices"
@@ -386,7 +386,7 @@ type DBReadOnly struct {
 // OpenDBReadOnly opens DB in the given directory for read only operations.
 func OpenDBReadOnly(dir string, l log.Logger) (*DBReadOnly, error) {
 	if _, err := os.Stat(dir); err != nil {
-		return nil, errors.Wrap(err, "opening the db dir")
+		return nil, fmt.Errorf("opening the db dir: %w", err)
 	}
 
 	if l == nil {
@@ -407,7 +407,7 @@ func OpenDBReadOnly(dir string, l log.Logger) (*DBReadOnly, error) {
 func (db *DBReadOnly) FlushWAL(dir string) (returnErr error) {
 	blockReaders, err := db.Blocks()
 	if err != nil {
-		return errors.Wrap(err, "read blocks")
+		return fmt.Errorf("read blocks: %w", err)
 	}
 	maxBlockTime := int64(math.MinInt64)
 	if len(blockReaders) > 0 {
@@ -432,15 +432,16 @@ func (db *DBReadOnly) FlushWAL(dir string) (returnErr error) {
 		return err
 	}
 	defer func() {
-		returnErr = tsdb_errors.NewMulti(
-			returnErr,
-			errors.Wrap(head.Close(), "closing Head"),
-		).Err()
+		errs := tsdb_errors.NewMulti(returnErr)
+		if err := head.Close(); err != nil {
+			errs.Add(fmt.Errorf("closing Head: %w", err))
+		}
+		returnErr = errs.Err()
 	}()
 	// Set the min valid time for the ingested wal samples
 	// to be no lower than the maxt of the last block.
 	if err := head.Init(maxBlockTime); err != nil {
-		return errors.Wrap(err, "read WAL")
+		return fmt.Errorf("read WAL: %w", err)
 	}
 	mint := head.MinTime()
 	maxt := head.MaxTime()
@@ -454,12 +455,15 @@ func (db *DBReadOnly) FlushWAL(dir string) (returnErr error) {
 		nil,
 	)
 	if err != nil {
-		return errors.Wrap(err, "create leveled compactor")
+		return fmt.Errorf("create leveled compactor: %w", err)
 	}
 	// Add +1 millisecond to block maxt because block intervals are half-open: [b.MinTime, b.MaxTime).
 	// Because of this block intervals are always +1 than the total samples it includes.
 	_, err = compactor.Write(dir, rh, mint, maxt+1, nil)
-	return errors.Wrap(err, "writing WAL")
+	if err != nil {
+		return fmt.Errorf("writing WAL: %w", err)
+	}
+	return nil
 }
 
 func (db *DBReadOnly) loadDataAsQueryable(maxt int64) (storage.SampleAndChunkQueryable, error) {
@@ -518,7 +522,7 @@ func (db *DBReadOnly) loadDataAsQueryable(maxt int64) (storage.SampleAndChunkQue
 		// Set the min valid time for the ingested wal samples
 		// to be no lower than the maxt of the last block.
 		if err := head.Init(maxBlockTime); err != nil {
-			return nil, errors.Wrap(err, "read WAL")
+			return nil, fmt.Errorf("read WAL: %w", err)
 		}
 		// Set the wal to nil to disable all wal operations.
 		// This is mainly to avoid blocking when closing the head.
@@ -580,7 +584,9 @@ func (db *DBReadOnly) Blocks() ([]BlockReader, error) {
 		}
 		errs := tsdb_errors.NewMulti()
 		for ulid, err := range corrupted {
-			errs.Add(errors.Wrapf(err, "corrupted block %s", ulid.String()))
+			if err != nil {
+				errs.Add(fmt.Errorf("corrupted block %s: %w", ulid.String(), err))
+			}
 		}
 		return nil, errs.Err()
 	}
@@ -761,7 +767,7 @@ func open(dir string, l log.Logger, r prometheus.Registerer, opts *Options, rngs
 
 	// Fixup bad format written by Prometheus 2.1.
 	if err := repairBadIndexVersion(l, dir); err != nil {
-		return nil, errors.Wrap(err, "repair bad index version")
+		return nil, fmt.Errorf("repair bad index version: %w", err)
 	}
 
 	walDir := filepath.Join(dir, "wal")
@@ -769,12 +775,12 @@ func open(dir string, l log.Logger, r prometheus.Registerer, opts *Options, rngs
 
 	// Migrate old WAL if one exists.
 	if err := MigrateWAL(l, walDir); err != nil {
-		return nil, errors.Wrap(err, "migrate WAL")
+		return nil, fmt.Errorf("migrate WAL: %w", err)
 	}
 	for _, tmpDir := range []string{walDir, dir} {
 		// Remove tmp dirs.
 		if err := removeBestEffortTmpDirs(l, tmpDir); err != nil {
-			return nil, errors.Wrap(err, "remove tmp dirs")
+			return nil, fmt.Errorf("remove tmp dirs: %w", err)
 		}
 	}
 
@@ -797,11 +803,11 @@ func open(dir string, l log.Logger, r prometheus.Registerer, opts *Options, rngs
 		}
 
 		close(db.donec) // DB is never run if it was an error, so close this channel here.
-
-		returnedErr = tsdb_errors.NewMulti(
-			returnedErr,
-			errors.Wrap(db.Close(), "close DB after failed startup"),
-		).Err()
+		errs := tsdb_errors.NewMulti(returnedErr)
+		if err := db.Close(); err != nil {
+			errs.Add(fmt.Errorf("close DB after failed startup: %w", err))
+		}
+		returnedErr = errs.Err()
 	}()
 
 	if db.blocksToDelete == nil {
@@ -823,7 +829,7 @@ func open(dir string, l log.Logger, r prometheus.Registerer, opts *Options, rngs
 	db.compactor, err = NewLeveledCompactorWithChunkSize(ctx, r, l, rngs, db.chunkPool, opts.MaxBlockChunkSegmentSize, nil)
 	if err != nil {
 		cancel()
-		return nil, errors.Wrap(err, "create leveled compactor")
+		return nil, fmt.Errorf("create leveled compactor: %w", err)
 	}
 	db.compactCancel = cancel
 
@@ -905,17 +911,17 @@ func open(dir string, l log.Logger, r prometheus.Registerer, opts *Options, rngs
 
 	if initErr := db.head.Init(minValidTime); initErr != nil {
 		db.head.metrics.walCorruptionsTotal.Inc()
-		e, ok := initErr.(*errLoadWbl)
-		if ok {
+		var e *errLoadWbl
+		if errors.As(initErr, &e) {
 			level.Warn(db.logger).Log("msg", "Encountered WBL read error, attempting repair", "err", initErr)
 			if err := wbl.Repair(e.err); err != nil {
-				return nil, errors.Wrap(err, "repair corrupted WBL")
+				return nil, fmt.Errorf("repair corrupted WBL: %w", err)
 			}
 			level.Info(db.logger).Log("msg", "Successfully repaired WBL")
 		} else {
 			level.Warn(db.logger).Log("msg", "Encountered WAL read error, attempting repair", "err", initErr)
 			if err := wal.Repair(initErr); err != nil {
-				return nil, errors.Wrap(err, "repair corrupted WAL")
+				return nil, fmt.Errorf("repair corrupted WAL: %w", err)
 			}
 			level.Info(db.logger).Log("msg", "Successfully repaired WAL")
 		}
@@ -1131,10 +1137,11 @@ func (db *DB) Compact(ctx context.Context) (returnErr error) {
 
 	lastBlockMaxt := int64(math.MinInt64)
 	defer func() {
-		returnErr = tsdb_errors.NewMulti(
-			returnErr,
-			errors.Wrap(db.head.truncateWAL(lastBlockMaxt), "WAL truncation in Compact defer"),
-		).Err()
+		errs := tsdb_errors.NewMulti(returnErr)
+		if err := db.head.truncateWAL(lastBlockMaxt); err != nil {
+			errs.Add(fmt.Errorf("WAL truncation in Compact defer: %w", err))
+		}
+		returnErr = errs.Err()
 	}()
 
 	start := time.Now()
@@ -1168,7 +1175,7 @@ func (db *DB) Compact(ctx context.Context) (returnErr error) {
 		db.head.WaitForAppendersOverlapping(rh.MaxTime())
 
 		if err := db.compactHead(rh); err != nil {
-			return errors.Wrap(err, "compact head")
+			return fmt.Errorf("compact head: %w", err)
 		}
 		// Consider only successful compactions for WAL truncation.
 		lastBlockMaxt = maxt
@@ -1177,7 +1184,7 @@ func (db *DB) Compact(ctx context.Context) (returnErr error) {
 	// Clear some disk space before compacting blocks, especially important
 	// when Head compaction happened over a long time range.
 	if err := db.head.truncateWAL(lastBlockMaxt); err != nil {
-		return errors.Wrap(err, "WAL truncation in Compact")
+		return fmt.Errorf("WAL truncation in Compact: %w", err)
 	}
 
 	compactionDuration := time.Since(start)
@@ -1192,7 +1199,7 @@ func (db *DB) Compact(ctx context.Context) (returnErr error) {
 	if lastBlockMaxt != math.MinInt64 {
 		// The head was compacted, so we compact OOO head as well.
 		if err := db.compactOOOHead(ctx); err != nil {
-			return errors.Wrap(err, "compact ooo head")
+			return fmt.Errorf("compact ooo head: %w", err)
 		}
 	}
 
@@ -1205,11 +1212,11 @@ func (db *DB) CompactHead(head *RangeHead) error {
 	defer db.cmtx.Unlock()
 
 	if err := db.compactHead(head); err != nil {
-		return errors.Wrap(err, "compact head")
+		return fmt.Errorf("compact head: %w", err)
 	}
 
 	if err := db.head.truncateWAL(head.BlockMaxTime()); err != nil {
-		return errors.Wrap(err, "WAL truncation")
+		return fmt.Errorf("WAL truncation: %w", err)
 	}
 	return nil
 }
@@ -1228,12 +1235,12 @@ func (db *DB) compactOOOHead(ctx context.Context) error {
 	}
 	oooHead, err := NewOOOCompactionHead(ctx, db.head)
 	if err != nil {
-		return errors.Wrap(err, "get ooo compaction head")
+		return fmt.Errorf("get ooo compaction head: %w", err)
 	}
 
 	ulids, err := db.compactOOO(db.dir, oooHead)
 	if err != nil {
-		return errors.Wrap(err, "compact ooo head")
+		return fmt.Errorf("compact ooo head: %w", err)
 	}
 	if err := db.reloadBlocks(); err != nil {
 		errs := tsdb_errors.NewMulti(err)
@@ -1242,7 +1249,7 @@ func (db *DB) compactOOOHead(ctx context.Context) error {
 				errs.Add(errRemoveAll)
 			}
 		}
-		return errors.Wrap(errs.Err(), "reloadBlocks blocks after failed compact ooo head")
+		return fmt.Errorf("reloadBlocks blocks after failed compact ooo head: %w", errs.Err())
 	}
 
 	lastWBLFile, minOOOMmapRef := oooHead.LastWBLFile(), oooHead.LastMmapRef()
@@ -1262,7 +1269,7 @@ func (db *DB) compactOOOHead(ctx context.Context) error {
 		}
 
 		if err := db.head.truncateOOO(lastWBLFile, minOOOMmapRef); err != nil {
-			return errors.Wrap(err, "truncate ooo wbl")
+			return fmt.Errorf("truncate ooo wbl: %w", err)
 		}
 	}
 
@@ -1298,12 +1305,12 @@ func (db *DB) compactOOO(dest string, oooHead *OOOCompactionHead) (_ []ulid.ULID
 			blockDir := filepath.Join(dest, uid.String())
 			meta, _, err := readMetaFile(blockDir)
 			if err != nil {
-				return ulids, errors.Wrap(err, "read meta")
+				return ulids, fmt.Errorf("read meta: %w", err)
 			}
 			meta.Compaction.SetOutOfOrder()
 			_, err = writeMetaFile(db.logger, blockDir, meta)
 			if err != nil {
-				return ulids, errors.Wrap(err, "write meta")
+				return ulids, fmt.Errorf("write meta: %w", err)
 			}
 		}
 	}
@@ -1329,20 +1336,20 @@ func (db *DB) compactOOO(dest string, oooHead *OOOCompactionHead) (_ []ulid.ULID
 func (db *DB) compactHead(head *RangeHead) error {
 	uid, err := db.compactor.Write(db.dir, head, head.MinTime(), head.BlockMaxTime(), nil)
 	if err != nil {
-		return errors.Wrap(err, "persist head block")
+		return fmt.Errorf("persist head block: %w", err)
 	}
 
 	if err := db.reloadBlocks(); err != nil {
 		if errRemoveAll := os.RemoveAll(filepath.Join(db.dir, uid.String())); errRemoveAll != nil {
 			return tsdb_errors.NewMulti(
-				errors.Wrap(err, "reloadBlocks blocks"),
-				errors.Wrapf(errRemoveAll, "delete persisted head block after failed db reloadBlocks:%s", uid),
+				fmt.Errorf("reloadBlocks blocks: %w", err),
+				fmt.Errorf("delete persisted head block after failed db reloadBlocks:%s: %w", uid, errRemoveAll),
 			).Err()
 		}
-		return errors.Wrap(err, "reloadBlocks blocks")
+		return fmt.Errorf("reloadBlocks blocks: %w", err)
 	}
 	if err = db.head.truncateMemory(head.BlockMaxTime()); err != nil {
-		return errors.Wrap(err, "head memory truncate")
+		return fmt.Errorf("head memory truncate: %w", err)
 	}
 	return nil
 }
@@ -1354,7 +1361,7 @@ func (db *DB) compactBlocks() (err error) {
 	for {
 		plan, err := db.compactor.Plan(db.dir)
 		if err != nil {
-			return errors.Wrap(err, "plan compaction")
+			return fmt.Errorf("plan compaction: %w", err)
 		}
 		if len(plan) == 0 {
 			break
@@ -1368,14 +1375,14 @@ func (db *DB) compactBlocks() (err error) {
 
 		uid, err := db.compactor.Compact(db.dir, plan, db.blocks)
 		if err != nil {
-			return errors.Wrapf(err, "compact %s", plan)
+			return fmt.Errorf("compact %s: %w", plan, err)
 		}
 
 		if err := db.reloadBlocks(); err != nil {
 			if err := os.RemoveAll(filepath.Join(db.dir, uid.String())); err != nil {
-				return errors.Wrapf(err, "delete compacted block after failed db reloadBlocks:%s", uid)
+				return fmt.Errorf("delete compacted block after failed db reloadBlocks:%s: %w", uid, err)
 			}
-			return errors.Wrap(err, "reloadBlocks blocks")
+			return fmt.Errorf("reloadBlocks blocks: %w", err)
 		}
 	}
 
@@ -1396,14 +1403,14 @@ func getBlock(allBlocks []*Block, id ulid.ULID) (*Block, bool) {
 // reload reloads blocks and truncates the head and its WAL.
 func (db *DB) reload() error {
 	if err := db.reloadBlocks(); err != nil {
-		return errors.Wrap(err, "reloadBlocks")
+		return fmt.Errorf("reloadBlocks: %w", err)
 	}
 	maxt, ok := db.inOrderBlocksMaxTime()
 	if !ok {
 		return nil
 	}
 	if err := db.head.Truncate(maxt); err != nil {
-		return errors.Wrap(err, "head truncate")
+		return fmt.Errorf("head truncate: %w", err)
 	}
 	return nil
 }
@@ -1457,7 +1464,9 @@ func (db *DB) reloadBlocks() (err error) {
 		}
 		errs := tsdb_errors.NewMulti()
 		for ulid, err := range corrupted {
-			errs.Add(errors.Wrapf(err, "corrupted block %s", ulid.String()))
+			if err != nil {
+				errs.Add(fmt.Errorf("corrupted block %s: %w", ulid.String(), err))
+			}
 		}
 		return errs.Err()
 	}
@@ -1509,7 +1518,7 @@ func (db *DB) reloadBlocks() (err error) {
 		}
 	}
 	if err := db.deleteBlocks(deletable); err != nil {
-		return errors.Wrapf(err, "delete %v blocks", len(deletable))
+		return fmt.Errorf("delete %v blocks: %w", len(deletable), err)
 	}
 	return nil
 }
@@ -1517,7 +1526,7 @@ func (db *DB) reloadBlocks() (err error) {
 func openBlocks(l log.Logger, dir string, loaded []*Block, chunkPool chunkenc.Pool) (blocks []*Block, corrupted map[ulid.ULID]error, err error) {
 	bDirs, err := blockDirs(dir)
 	if err != nil {
-		return nil, nil, errors.Wrap(err, "find blocks")
+		return nil, nil, fmt.Errorf("find blocks: %w", err)
 	}
 
 	corrupted = make(map[ulid.ULID]error)
@@ -1651,16 +1660,16 @@ func (db *DB) deleteBlocks(blocks map[ulid.ULID]*Block) error {
 			// Noop.
 			continue
 		case err != nil:
-			return errors.Wrapf(err, "stat dir %v", toDelete)
+			return fmt.Errorf("stat dir %v: %w", toDelete, err)
 		}
 
 		// Replace atomically to avoid partial block when process would crash during deletion.
 		tmpToDelete := filepath.Join(db.dir, fmt.Sprintf("%s%s", ulid, tmpForDeletionBlockDirSuffix))
 		if err := fileutil.Replace(toDelete, tmpToDelete); err != nil {
-			return errors.Wrapf(err, "replace of obsolete block for deletion %s", ulid)
+			return fmt.Errorf("replace of obsolete block for deletion %s: %w", ulid, err)
 		}
 		if err := os.RemoveAll(tmpToDelete); err != nil {
-			return errors.Wrapf(err, "delete obsolete block %s", ulid)
+			return fmt.Errorf("delete obsolete block %s: %w", ulid, err)
 		}
 		level.Info(db.logger).Log("msg", "Deleting obsolete block", "block", ulid)
 	}
@@ -1868,7 +1877,7 @@ func (db *DB) Snapshot(dir string, withHead bool) error {
 		level.Info(db.logger).Log("msg", "Snapshotting block", "block", b)
 
 		if err := b.Snapshot(dir); err != nil {
-			return errors.Wrapf(err, "error snapshotting block: %s", b.Dir())
+			return fmt.Errorf("error snapshotting block: %s: %w", b.Dir(), err)
 		}
 	}
 	if !withHead {
@@ -1881,7 +1890,7 @@ func (db *DB) Snapshot(dir string, withHead bool) error {
 	// Add +1 millisecond to block maxt because block intervals are half-open: [b.MinTime, b.MaxTime).
 	// Because of this block intervals are always +1 than the total samples it includes.
 	if _, err := db.compactor.Write(dir, head, mint, maxt+1, nil); err != nil {
-		return errors.Wrap(err, "snapshot head block")
+		return fmt.Errorf("snapshot head block: %w", err)
 	}
 	return nil
 }
@@ -1916,7 +1925,7 @@ func (db *DB) Querier(mint, maxt int64) (_ storage.Querier, err error) {
 		var err error
 		inOrderHeadQuerier, err := NewBlockQuerier(rh, mint, maxt)
 		if err != nil {
-			return nil, errors.Wrapf(err, "open block querier for head %s", rh)
+			return nil, fmt.Errorf("open block querier for head %s: %w", rh, err)
 		}
 
 		// Getting the querier above registers itself in the queue that the truncation waits on.
@@ -1925,7 +1934,7 @@ func (db *DB) Querier(mint, maxt int64) (_ storage.Querier, err error) {
 		shouldClose, getNew, newMint := db.head.IsQuerierCollidingWithTruncation(mint, maxt)
 		if shouldClose {
 			if err := inOrderHeadQuerier.Close(); err != nil {
-				return nil, errors.Wrapf(err, "closing head block querier %s", rh)
+				return nil, fmt.Errorf("closing head block querier %s: %w", rh, err)
 			}
 			inOrderHeadQuerier = nil
 		}
@@ -1933,7 +1942,7 @@ func (db *DB) Querier(mint, maxt int64) (_ storage.Querier, err error) {
 			rh := NewRangeHead(db.head, newMint, maxt)
 			inOrderHeadQuerier, err = NewBlockQuerier(rh, newMint, maxt)
 			if err != nil {
-				return nil, errors.Wrapf(err, "open block querier for head while getting new querier %s", rh)
+				return nil, fmt.Errorf("open block querier for head while getting new querier %s: %w", rh, err)
 			}
 		}
 
@@ -1950,7 +1959,7 @@ func (db *DB) Querier(mint, maxt int64) (_ storage.Querier, err error) {
 			// If NewBlockQuerier() failed, make sure to clean up the pending read created by NewOOORangeHead.
 			rh.isoState.Close()
 
-			return nil, errors.Wrapf(err, "open block querier for ooo head %s", rh)
+			return nil, fmt.Errorf("open block querier for ooo head %s: %w", rh, err)
 		}
 
 		blockQueriers = append(blockQueriers, outOfOrderHeadQuerier)
@@ -1959,7 +1968,7 @@ func (db *DB) Querier(mint, maxt int64) (_ storage.Querier, err error) {
 	for _, b := range blocks {
 		q, err := NewBlockQuerier(b, mint, maxt)
 		if err != nil {
-			return nil, errors.Wrapf(err, "open querier for block %s", b)
+			return nil, fmt.Errorf("open querier for block %s: %w", b, err)
 		}
 		blockQueriers = append(blockQueriers, q)
 	}
@@ -1997,7 +2006,7 @@ func (db *DB) blockChunkQuerierForRange(mint, maxt int64) (_ []storage.ChunkQuer
 		rh := NewRangeHead(db.head, mint, maxt)
 		inOrderHeadQuerier, err := NewBlockChunkQuerier(rh, mint, maxt)
 		if err != nil {
-			return nil, errors.Wrapf(err, "open querier for head %s", rh)
+			return nil, fmt.Errorf("open querier for head %s: %w", rh, err)
 		}
 
 		// Getting the querier above registers itself in the queue that the truncation waits on.
@@ -2006,7 +2015,7 @@ func (db *DB) blockChunkQuerierForRange(mint, maxt int64) (_ []storage.ChunkQuer
 		shouldClose, getNew, newMint := db.head.IsQuerierCollidingWithTruncation(mint, maxt)
 		if shouldClose {
 			if err := inOrderHeadQuerier.Close(); err != nil {
-				return nil, errors.Wrapf(err, "closing head querier %s", rh)
+				return nil, fmt.Errorf("closing head querier %s: %w", rh, err)
 			}
 			inOrderHeadQuerier = nil
 		}
@@ -2014,7 +2023,7 @@ func (db *DB) blockChunkQuerierForRange(mint, maxt int64) (_ []storage.ChunkQuer
 			rh := NewRangeHead(db.head, newMint, maxt)
 			inOrderHeadQuerier, err = NewBlockChunkQuerier(rh, newMint, maxt)
 			if err != nil {
-				return nil, errors.Wrapf(err, "open querier for head while getting new querier %s", rh)
+				return nil, fmt.Errorf("open querier for head while getting new querier %s: %w", rh, err)
 			}
 		}
 
@@ -2027,7 +2036,7 @@ func (db *DB) blockChunkQuerierForRange(mint, maxt int64) (_ []storage.ChunkQuer
 		rh := NewOOORangeHead(db.head, mint, maxt, db.lastGarbageCollectedMmapRef)
 		outOfOrderHeadQuerier, err := NewBlockChunkQuerier(rh, mint, maxt)
 		if err != nil {
-			return nil, errors.Wrapf(err, "open block chunk querier for ooo head %s", rh)
+			return nil, fmt.Errorf("open block chunk querier for ooo head %s: %w", rh, err)
 		}
 
 		blockQueriers = append(blockQueriers, outOfOrderHeadQuerier)
@@ -2036,7 +2045,7 @@ func (db *DB) blockChunkQuerierForRange(mint, maxt int64) (_ []storage.ChunkQuer
 	for _, b := range blocks {
 		q, err := NewBlockChunkQuerier(b, mint, maxt)
 		if err != nil {
-			return nil, errors.Wrapf(err, "open querier for block %s", b)
+			return nil, fmt.Errorf("open querier for block %s: %w", b, err)
 		}
 		blockQueriers = append(blockQueriers, q)
 	}
@@ -2105,7 +2114,7 @@ func (db *DB) CleanTombstones() (err error) {
 		for _, pb := range db.Blocks() {
 			uid, safeToDelete, cleanErr := pb.CleanTombstones(db.Dir(), db.compactor)
 			if cleanErr != nil {
-				return errors.Wrapf(cleanErr, "clean tombstones: %s", pb.Dir())
+				return fmt.Errorf("clean tombstones: %s: %w", pb.Dir(), cleanErr)
 			}
 			if !safeToDelete {
 				// There was nothing to clean.
@@ -2133,7 +2142,10 @@ func (db *DB) CleanTombstones() (err error) {
 					level.Error(db.logger).Log("msg", "failed to delete block after failed `CleanTombstones`", "dir", dir, "err", err)
 				}
 			}
-			return errors.Wrap(err, "reload blocks")
+			if err != nil {
+				return fmt.Errorf("reload blocks: %w", err)
+			}
+			return nil
 		}
 	}
 	return nil
diff --git a/tsdb/db_test.go b/tsdb/db_test.go
index 4dcdef858b4..cb12f86307f 100644
--- a/tsdb/db_test.go
+++ b/tsdb/db_test.go
@@ -34,7 +34,6 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/oklog/ulid"
-	"github.com/pkg/errors"
 	"github.com/prometheus/client_golang/prometheus"
 	prom_testutil "github.com/prometheus/client_golang/prometheus/testutil"
 	"github.com/stretchr/testify/require"
@@ -355,7 +354,7 @@ func TestDBAppenderAddRef(t *testing.T) {
 
 	// Missing labels & invalid refs should fail.
 	_, err = app2.Append(9999999, labels.EmptyLabels(), 1, 1)
-	require.Equal(t, ErrInvalidSample, errors.Cause(err))
+	require.ErrorIs(t, err, ErrInvalidSample)
 
 	require.NoError(t, app2.Commit())
 
diff --git a/tsdb/exemplar.go b/tsdb/exemplar.go
index 8eaf42653c1..805de70da34 100644
--- a/tsdb/exemplar.go
+++ b/tsdb/exemplar.go
@@ -15,6 +15,7 @@ package tsdb
 
 import (
 	"context"
+	"errors"
 	"sync"
 	"unicode/utf8"
 
@@ -363,7 +364,7 @@ func (ce *CircularExemplarStorage) AddExemplar(l labels.Labels, e exemplar.Exemp
 
 	err := ce.validateExemplar(seriesLabels, e, true)
 	if err != nil {
-		if err == storage.ErrDuplicateExemplar {
+		if errors.Is(err, storage.ErrDuplicateExemplar) {
 			// Duplicate exemplar, noop.
 			return nil
 		}
diff --git a/tsdb/head.go b/tsdb/head.go
index 84835735905..63d8e9ea135 100644
--- a/tsdb/head.go
+++ b/tsdb/head.go
@@ -15,6 +15,7 @@ package tsdb
 
 import (
 	"context"
+	"errors"
 	"fmt"
 	"io"
 	"math"
@@ -27,7 +28,6 @@ import (
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
 	"github.com/oklog/ulid"
-	"github.com/pkg/errors"
 	"go.uber.org/atomic"
 
 	"github.com/prometheus/client_golang/prometheus"
@@ -623,11 +623,11 @@ func (h *Head) Init(minValidTime int64) error {
 		if h.wal != nil {
 			_, endAt, err := wlog.Segments(h.wal.Dir())
 			if err != nil {
-				return errors.Wrap(err, "finding WAL segments")
+				return fmt.Errorf("finding WAL segments: %w", err)
 			}
 
 			_, idx, _, err := LastChunkSnapshot(h.opts.ChunkDirRoot)
-			if err != nil && err != record.ErrNotFound {
+			if err != nil && !errors.Is(err, record.ErrNotFound) {
 				level.Error(h.logger).Log("msg", "Could not find last snapshot", "err", err)
 			}
 
@@ -674,7 +674,8 @@ func (h *Head) Init(minValidTime int64) error {
 		if err != nil {
 			// TODO(codesome): clear out all m-map chunks here for refSeries.
 			level.Error(h.logger).Log("msg", "Loading on-disk chunks failed", "err", err)
-			if _, ok := errors.Cause(err).(*chunks.CorruptionErr); ok {
+			var cerr *chunks.CorruptionErr
+			if errors.As(err, &cerr) {
 				h.metrics.mmapChunkCorruptionTotal.Inc()
 			}
 
@@ -701,14 +702,14 @@ func (h *Head) Init(minValidTime int64) error {
 	checkpointReplayStart := time.Now()
 	// Backfill the checkpoint first if it exists.
 	dir, startFrom, err := wlog.LastCheckpoint(h.wal.Dir())
-	if err != nil && err != record.ErrNotFound {
-		return errors.Wrap(err, "find last checkpoint")
+	if err != nil && !errors.Is(err, record.ErrNotFound) {
+		return fmt.Errorf("find last checkpoint: %w", err)
 	}
 
 	// Find the last segment.
 	_, endAt, e := wlog.Segments(h.wal.Dir())
 	if e != nil {
-		return errors.Wrap(e, "finding WAL segments")
+		return fmt.Errorf("finding WAL segments: %w", e)
 	}
 
 	h.startWALReplayStatus(startFrom, endAt)
@@ -717,7 +718,7 @@ func (h *Head) Init(minValidTime int64) error {
 	if err == nil && startFrom >= snapIdx {
 		sr, err := wlog.NewSegmentsReader(dir)
 		if err != nil {
-			return errors.Wrap(err, "open checkpoint")
+			return fmt.Errorf("open checkpoint: %w", err)
 		}
 		defer func() {
 			if err := sr.Close(); err != nil {
@@ -728,7 +729,7 @@ func (h *Head) Init(minValidTime int64) error {
 		// A corrupted checkpoint is a hard error for now and requires user
 		// intervention. There's likely little data that can be recovered anyway.
 		if err := h.loadWAL(wlog.NewReader(sr), multiRef, mmappedChunks, oooMmappedChunks); err != nil {
-			return errors.Wrap(err, "backfill checkpoint")
+			return fmt.Errorf("backfill checkpoint: %w", err)
 		}
 		h.updateWALReplayStatusRead(startFrom)
 		startFrom++
@@ -745,7 +746,7 @@ func (h *Head) Init(minValidTime int64) error {
 	for i := startFrom; i <= endAt; i++ {
 		s, err := wlog.OpenReadSegment(wlog.SegmentName(h.wal.Dir(), i))
 		if err != nil {
-			return errors.Wrap(err, fmt.Sprintf("open WAL segment: %d", i))
+			return fmt.Errorf("open WAL segment: %d: %w", i, err)
 		}
 
 		offset := 0
@@ -758,7 +759,7 @@ func (h *Head) Init(minValidTime int64) error {
 			continue
 		}
 		if err != nil {
-			return errors.Wrapf(err, "segment reader (offset=%d)", offset)
+			return fmt.Errorf("segment reader (offset=%d): %w", offset, err)
 		}
 		err = h.loadWAL(wlog.NewReader(sr), multiRef, mmappedChunks, oooMmappedChunks)
 		if err := sr.Close(); err != nil {
@@ -777,14 +778,14 @@ func (h *Head) Init(minValidTime int64) error {
 		// Replay WBL.
 		startFrom, endAt, e = wlog.Segments(h.wbl.Dir())
 		if e != nil {
-			return &errLoadWbl{errors.Wrap(e, "finding WBL segments")}
+			return &errLoadWbl{fmt.Errorf("finding WBL segments: %w", e)}
 		}
 		h.startWALReplayStatus(startFrom, endAt)
 
 		for i := startFrom; i <= endAt; i++ {
 			s, err := wlog.OpenReadSegment(wlog.SegmentName(h.wbl.Dir(), i))
 			if err != nil {
-				return &errLoadWbl{errors.Wrap(err, fmt.Sprintf("open WBL segment: %d", i))}
+				return &errLoadWbl{fmt.Errorf("open WBL segment: %d: %w", i, err)}
 			}
 
 			sr := wlog.NewSegmentBufReader(s)
@@ -905,7 +906,7 @@ func (h *Head) loadMmappedChunks(refSeries map[chunks.HeadSeriesRef]*memSeries)
 		return nil
 	}); err != nil {
 		// secondLastRef because the lastRef caused an error.
-		return nil, nil, secondLastRef, errors.Wrap(err, "iterate on on-disk chunks")
+		return nil, nil, secondLastRef, fmt.Errorf("iterate on on-disk chunks: %w", err)
 	}
 	return mmappedChunks, oooMmappedChunks, lastRef, nil
 }
@@ -1224,12 +1225,12 @@ func (h *Head) truncateWAL(mint int64) error {
 
 	first, last, err := wlog.Segments(h.wal.Dir())
 	if err != nil {
-		return errors.Wrap(err, "get segment range")
+		return fmt.Errorf("get segment range: %w", err)
 	}
 	// Start a new segment, so low ingestion volume TSDB don't have more WAL than
 	// needed.
 	if _, err := h.wal.NextSegment(); err != nil {
-		return errors.Wrap(err, "next segment")
+		return fmt.Errorf("next segment: %w", err)
 	}
 	last-- // Never consider last segment for checkpoint.
 	if last < 0 {
@@ -1256,10 +1257,11 @@ func (h *Head) truncateWAL(mint int64) error {
 	h.metrics.checkpointCreationTotal.Inc()
 	if _, err = wlog.Checkpoint(h.logger, h.wal, first, last, keep, mint); err != nil {
 		h.metrics.checkpointCreationFail.Inc()
-		if _, ok := errors.Cause(err).(*wlog.CorruptionErr); ok {
+		var cerr *chunks.CorruptionErr
+		if errors.As(err, &cerr) {
 			h.metrics.walCorruptionsTotal.Inc()
 		}
-		return errors.Wrap(err, "create checkpoint")
+		return fmt.Errorf("create checkpoint: %w", err)
 	}
 	if err := h.wal.Truncate(last + 1); err != nil {
 		// If truncating fails, we'll just try again at the next checkpoint.
@@ -1352,7 +1354,7 @@ func (h *Head) truncateSeriesAndChunkDiskMapper(caller string) error {
 
 	// Truncate the chunk m-mapper.
 	if err := h.chunkDiskMapper.Truncate(uint32(minMmapFile)); err != nil {
-		return errors.Wrap(err, "truncate chunks.HeadReadWriter by file number")
+		return fmt.Errorf("truncate chunks.HeadReadWriter by file number: %w", err)
 	}
 	return nil
 }
@@ -1467,13 +1469,13 @@ func (h *Head) Delete(ctx context.Context, mint, maxt int64, ms ...*labels.Match
 
 	p, err := PostingsForMatchers(ctx, ir, ms...)
 	if err != nil {
-		return errors.Wrap(err, "select series")
+		return fmt.Errorf("select series: %w", err)
 	}
 
 	var stones []tombstones.Stone
 	for p.Next() {
 		if err := ctx.Err(); err != nil {
-			return errors.Wrap(err, "select series")
+			return fmt.Errorf("select series: %w", err)
 		}
 
 		series := h.series.getByID(chunks.HeadSeriesRef(p.At()))
@@ -1495,8 +1497,8 @@ func (h *Head) Delete(ctx context.Context, mint, maxt int64, ms ...*labels.Match
 	if p.Err() != nil {
 		return p.Err()
 	}
-	if ctx.Err() != nil {
-		return errors.Wrap(err, "select series")
+	if err := ctx.Err(); err != nil {
+		return fmt.Errorf("select series: %w", err)
 	}
 
 	if h.wal != nil {
diff --git a/tsdb/head_append.go b/tsdb/head_append.go
index afb461afe31..f509317c831 100644
--- a/tsdb/head_append.go
+++ b/tsdb/head_append.go
@@ -15,11 +15,11 @@ package tsdb
 
 import (
 	"context"
+	"errors"
 	"fmt"
 	"math"
 
 	"github.com/go-kit/log/level"
-	"github.com/pkg/errors"
 
 	"github.com/prometheus/prometheus/model/exemplar"
 	"github.com/prometheus/prometheus/model/histogram"
@@ -358,10 +358,10 @@ func (a *headAppender) Append(ref storage.SeriesRef, lset labels.Labels, t int64
 		a.head.metrics.oooHistogram.Observe(float64(delta) / 1000)
 	}
 	if err != nil {
-		switch err {
-		case storage.ErrOutOfOrderSample:
+		switch {
+		case errors.Is(err, storage.ErrOutOfOrderSample):
 			a.head.metrics.outOfOrderSamples.WithLabelValues(sampleMetricTypeFloat).Inc()
-		case storage.ErrTooOldSample:
+		case errors.Is(err, storage.ErrTooOldSample):
 			a.head.metrics.tooOldSamples.WithLabelValues(sampleMetricTypeFloat).Inc()
 		}
 		return 0, err
@@ -428,10 +428,10 @@ func (a *headAppender) getOrCreate(lset labels.Labels) (*memSeries, error) {
 	// Ensure no empty labels have gotten through.
 	lset = lset.WithoutEmpty()
 	if lset.IsEmpty() {
-		return nil, errors.Wrap(ErrInvalidSample, "empty labelset")
+		return nil, fmt.Errorf("empty labelset: %w", ErrInvalidSample)
 	}
 	if l, dup := lset.HasDuplicateLabelNames(); dup {
-		return nil, errors.Wrap(ErrInvalidSample, fmt.Sprintf(`label name "%s" is not unique`, l))
+		return nil, fmt.Errorf(`label name "%s" is not unique: %w`, l, ErrInvalidSample)
 	}
 	var created bool
 	var err error
@@ -557,7 +557,7 @@ func (a *headAppender) AppendExemplar(ref storage.SeriesRef, lset labels.Labels,
 
 	err := a.head.exemplars.ValidateExemplar(s.lset, e)
 	if err != nil {
-		if err == storage.ErrDuplicateExemplar || err == storage.ErrExemplarsDisabled {
+		if errors.Is(err, storage.ErrDuplicateExemplar) || errors.Is(err, storage.ErrExemplarsDisabled) {
 			// Duplicate, don't return an error but don't accept the exemplar.
 			return 0, nil
 		}
@@ -596,11 +596,11 @@ func (a *headAppender) AppendHistogram(ref storage.SeriesRef, lset labels.Labels
 		// Ensure no empty labels have gotten through.
 		lset = lset.WithoutEmpty()
 		if lset.IsEmpty() {
-			return 0, errors.Wrap(ErrInvalidSample, "empty labelset")
+			return 0, fmt.Errorf("empty labelset: %w", ErrInvalidSample)
 		}
 
 		if l, dup := lset.HasDuplicateLabelNames(); dup {
-			return 0, errors.Wrap(ErrInvalidSample, fmt.Sprintf(`label name "%s" is not unique`, l))
+			return 0, fmt.Errorf(`label name "%s" is not unique: %w`, l, ErrInvalidSample)
 		}
 
 		var created bool
@@ -628,7 +628,7 @@ func (a *headAppender) AppendHistogram(ref storage.SeriesRef, lset labels.Labels
 		s.Lock()
 		if err := s.appendableHistogram(t, h); err != nil {
 			s.Unlock()
-			if err == storage.ErrOutOfOrderSample {
+			if errors.Is(err, storage.ErrOutOfOrderSample) {
 				a.head.metrics.outOfOrderSamples.WithLabelValues(sampleMetricTypeHistogram).Inc()
 			}
 			return 0, err
@@ -645,7 +645,7 @@ func (a *headAppender) AppendHistogram(ref storage.SeriesRef, lset labels.Labels
 		s.Lock()
 		if err := s.appendableFloatHistogram(t, fh); err != nil {
 			s.Unlock()
-			if err == storage.ErrOutOfOrderSample {
+			if errors.Is(err, storage.ErrOutOfOrderSample) {
 				a.head.metrics.outOfOrderSamples.WithLabelValues(sampleMetricTypeHistogram).Inc()
 			}
 			return 0, err
@@ -729,7 +729,7 @@ func (a *headAppender) log() error {
 		buf = rec[:0]
 
 		if err := a.head.wal.Log(rec); err != nil {
-			return errors.Wrap(err, "log series")
+			return fmt.Errorf("log series: %w", err)
 		}
 	}
 	if len(a.metadata) > 0 {
@@ -737,7 +737,7 @@ func (a *headAppender) log() error {
 		buf = rec[:0]
 
 		if err := a.head.wal.Log(rec); err != nil {
-			return errors.Wrap(err, "log metadata")
+			return fmt.Errorf("log metadata: %w", err)
 		}
 	}
 	if len(a.samples) > 0 {
@@ -745,21 +745,21 @@ func (a *headAppender) log() error {
 		buf = rec[:0]
 
 		if err := a.head.wal.Log(rec); err != nil {
-			return errors.Wrap(err, "log samples")
+			return fmt.Errorf("log samples: %w", err)
 		}
 	}
 	if len(a.histograms) > 0 {
 		rec = enc.HistogramSamples(a.histograms, buf)
 		buf = rec[:0]
 		if err := a.head.wal.Log(rec); err != nil {
-			return errors.Wrap(err, "log histograms")
+			return fmt.Errorf("log histograms: %w", err)
 		}
 	}
 	if len(a.floatHistograms) > 0 {
 		rec = enc.FloatHistogramSamples(a.floatHistograms, buf)
 		buf = rec[:0]
 		if err := a.head.wal.Log(rec); err != nil {
-			return errors.Wrap(err, "log float histograms")
+			return fmt.Errorf("log float histograms: %w", err)
 		}
 	}
 	// Exemplars should be logged after samples (float/native histogram/etc),
@@ -771,7 +771,7 @@ func (a *headAppender) log() error {
 		buf = rec[:0]
 
 		if err := a.head.wal.Log(rec); err != nil {
-			return errors.Wrap(err, "log exemplars")
+			return fmt.Errorf("log exemplars: %w", err)
 		}
 	}
 	return nil
@@ -800,7 +800,7 @@ func (a *headAppender) Commit() (err error) {
 
 	if err := a.log(); err != nil {
 		_ = a.Rollback() // Most likely the same error will happen again.
-		return errors.Wrap(err, "write to WAL")
+		return fmt.Errorf("write to WAL: %w", err)
 	}
 
 	if a.head.writeNotified != nil {
@@ -818,7 +818,7 @@ func (a *headAppender) Commit() (err error) {
 		}
 		// We don't instrument exemplar appends here, all is instrumented by storage.
 		if err := a.head.exemplars.AddExemplar(s.lset, e.exemplar); err != nil {
-			if err == storage.ErrOutOfOrderExemplar {
+			if errors.Is(err, storage.ErrOutOfOrderExemplar) {
 				continue
 			}
 			level.Debug(a.head.logger).Log("msg", "Unknown error while adding exemplar", "err", err)
@@ -898,16 +898,16 @@ func (a *headAppender) Commit() (err error) {
 		series.Lock()
 
 		oooSample, _, err := series.appendable(s.T, s.V, a.headMaxt, a.minValidTime, a.oooTimeWindow)
-		switch err {
-		case nil:
+		switch {
+		case err == nil:
 			// Do nothing.
-		case storage.ErrOutOfOrderSample:
+		case errors.Is(err, storage.ErrOutOfOrderSample):
 			samplesAppended--
 			oooRejected++
-		case storage.ErrOutOfBounds:
+		case errors.Is(err, storage.ErrOutOfBounds):
 			samplesAppended--
 			oobRejected++
-		case storage.ErrTooOldSample:
+		case errors.Is(err, storage.ErrTooOldSample):
 			samplesAppended--
 			tooOldRejected++
 		default:
@@ -1487,7 +1487,7 @@ func (s *memSeries) mmapChunks(chunkDiskMapper *chunks.ChunkDiskMapper) (count i
 }
 
 func handleChunkWriteError(err error) {
-	if err != nil && err != chunks.ErrChunkDiskMapperClosed {
+	if err != nil && !errors.Is(err, chunks.ErrChunkDiskMapperClosed) {
 		panic(err)
 	}
 }
diff --git a/tsdb/head_bench_test.go b/tsdb/head_bench_test.go
index 8fdf94db0e4..a037948100a 100644
--- a/tsdb/head_bench_test.go
+++ b/tsdb/head_bench_test.go
@@ -14,10 +14,10 @@
 package tsdb
 
 import (
+	"errors"
 	"strconv"
 	"testing"
 
-	"github.com/pkg/errors"
 	"github.com/stretchr/testify/require"
 	"go.uber.org/atomic"
 
diff --git a/tsdb/head_read.go b/tsdb/head_read.go
index 35ef26a58a2..362764480b2 100644
--- a/tsdb/head_read.go
+++ b/tsdb/head_read.go
@@ -15,11 +15,12 @@ package tsdb
 
 import (
 	"context"
+	"errors"
+	"fmt"
 	"math"
 	"sync"
 
 	"github.com/go-kit/log/level"
-	"github.com/pkg/errors"
 	"golang.org/x/exp/slices"
 
 	"github.com/prometheus/prometheus/model/labels"
@@ -133,7 +134,7 @@ func (h *headIndexReader) SortedPostings(p index.Postings) index.Postings {
 		}
 	}
 	if err := p.Err(); err != nil {
-		return index.ErrPostings(errors.Wrap(err, "expand postings"))
+		return index.ErrPostings(fmt.Errorf("expand postings: %w", err))
 	}
 
 	slices.SortFunc(series, func(a, b *memSeries) int {
@@ -388,7 +389,8 @@ func (s *memSeries) chunk(id chunks.HeadChunkID, chunkDiskMapper *chunks.ChunkDi
 	if ix < len(s.mmappedChunks) {
 		chk, err := chunkDiskMapper.Chunk(s.mmappedChunks[ix].ref)
 		if err != nil {
-			if _, ok := err.(*chunks.CorruptionErr); ok {
+			var cerr *chunks.CorruptionErr
+			if errors.As(err, &cerr) {
 				panic(err)
 			}
 			return nil, false, false, err
@@ -516,14 +518,15 @@ func (s *memSeries) oooMergedChunks(meta chunks.Meta, cdm *chunks.ChunkDiskMappe
 				xor, err = s.ooo.oooHeadChunk.chunk.ToXORBetweenTimestamps(meta.OOOLastMinTime, meta.OOOLastMaxTime)
 			}
 			if err != nil {
-				return nil, errors.Wrap(err, "failed to convert ooo head chunk to xor chunk")
+				return nil, fmt.Errorf("failed to convert ooo head chunk to xor chunk: %w", err)
 			}
 			iterable = xor
 		} else {
 			chk, err := cdm.Chunk(c.ref)
 			if err != nil {
-				if _, ok := err.(*chunks.CorruptionErr); ok {
-					return nil, errors.Wrap(err, "invalid ooo mmapped chunk")
+				var cerr *chunks.CorruptionErr
+				if errors.As(err, &cerr) {
+					return nil, fmt.Errorf("invalid ooo mmapped chunk: %w", err)
 				}
 				return nil, err
 			}
diff --git a/tsdb/head_test.go b/tsdb/head_test.go
index 535647d3a0b..5c2749bed21 100644
--- a/tsdb/head_test.go
+++ b/tsdb/head_test.go
@@ -30,7 +30,6 @@ import (
 	"testing"
 	"time"
 
-	"github.com/pkg/errors"
 	"github.com/prometheus/client_golang/prometheus"
 	prom_testutil "github.com/prometheus/client_golang/prometheus/testutil"
 	"github.com/prometheus/common/model"
@@ -2056,9 +2055,8 @@ func TestWalRepair_DecodingError(t *testing.T) {
 					require.Equal(t, 0.0, prom_testutil.ToFloat64(h.metrics.walCorruptionsTotal))
 					initErr := h.Init(math.MinInt64)
 
-					err = errors.Cause(initErr) // So that we can pick up errors even if wrapped.
-					_, corrErr := err.(*wlog.CorruptionErr)
-					require.True(t, corrErr, "reading the wal didn't return corruption error")
+					var cerr *wlog.CorruptionErr
+					require.ErrorAs(t, initErr, &cerr, "reading the wal didn't return corruption error")
 					require.NoError(t, h.Close()) // Head will close the wal as well.
 				}
 
@@ -2129,12 +2127,11 @@ func TestWblRepair_DecodingError(t *testing.T) {
 		require.Equal(t, 0.0, prom_testutil.ToFloat64(h.metrics.walCorruptionsTotal))
 		initErr := h.Init(math.MinInt64)
 
-		_, ok := initErr.(*errLoadWbl)
-		require.True(t, ok) // Wbl errors are wrapped into errLoadWbl, make sure we can unwrap it.
+		var elb *errLoadWbl
+		require.ErrorAs(t, initErr, &elb) // Wbl errors are wrapped into errLoadWbl, make sure we can unwrap it.
 
-		err = errors.Cause(initErr) // So that we can pick up errors even if wrapped.
-		_, corrErr := err.(*wlog.CorruptionErr)
-		require.True(t, corrErr, "reading the wal didn't return corruption error")
+		var cerr *wlog.CorruptionErr
+		require.ErrorAs(t, initErr, &cerr, "reading the wal didn't return corruption error")
 		require.NoError(t, h.Close()) // Head will close the wal as well.
 	}
 
diff --git a/tsdb/head_wal.go b/tsdb/head_wal.go
index 07fa8280ca1..a492a85a022 100644
--- a/tsdb/head_wal.go
+++ b/tsdb/head_wal.go
@@ -14,6 +14,7 @@
 package tsdb
 
 import (
+	"errors"
 	"fmt"
 	"math"
 	"os"
@@ -24,7 +25,6 @@ import (
 	"time"
 
 	"github.com/go-kit/log/level"
-	"github.com/pkg/errors"
 	"go.uber.org/atomic"
 
 	"github.com/prometheus/prometheus/model/exemplar"
@@ -128,7 +128,7 @@ func (h *Head) loadWAL(r *wlog.Reader, multiRef map[chunks.HeadSeriesRef]chunks.
 			// At the moment the only possible error here is out of order exemplars, which we shouldn't see when
 			// replaying the WAL, so lets just log the error if it's not that type.
 			err = h.exemplars.AddExemplar(ms.lset, exemplar.Exemplar{Ts: e.T, Value: e.V, Labels: e.Labels})
-			if err != nil && err == storage.ErrOutOfOrderExemplar {
+			if err != nil && errors.Is(err, storage.ErrOutOfOrderExemplar) {
 				level.Warn(h.logger).Log("msg", "Unexpected error when replaying WAL on exemplar record", "err", err)
 			}
 		}
@@ -145,7 +145,7 @@ func (h *Head) loadWAL(r *wlog.Reader, multiRef map[chunks.HeadSeriesRef]chunks.
 				series, err = dec.Series(rec, series)
 				if err != nil {
 					decodeErr = &wlog.CorruptionErr{
-						Err:     errors.Wrap(err, "decode series"),
+						Err:     fmt.Errorf("decode series: %w", err),
 						Segment: r.Segment(),
 						Offset:  r.Offset(),
 					}
@@ -157,7 +157,7 @@ func (h *Head) loadWAL(r *wlog.Reader, multiRef map[chunks.HeadSeriesRef]chunks.
 				samples, err = dec.Samples(rec, samples)
 				if err != nil {
 					decodeErr = &wlog.CorruptionErr{
-						Err:     errors.Wrap(err, "decode samples"),
+						Err:     fmt.Errorf("decode samples: %w", err),
 						Segment: r.Segment(),
 						Offset:  r.Offset(),
 					}
@@ -169,7 +169,7 @@ func (h *Head) loadWAL(r *wlog.Reader, multiRef map[chunks.HeadSeriesRef]chunks.
 				tstones, err = dec.Tombstones(rec, tstones)
 				if err != nil {
 					decodeErr = &wlog.CorruptionErr{
-						Err:     errors.Wrap(err, "decode tombstones"),
+						Err:     fmt.Errorf("decode tombstones: %w", err),
 						Segment: r.Segment(),
 						Offset:  r.Offset(),
 					}
@@ -181,7 +181,7 @@ func (h *Head) loadWAL(r *wlog.Reader, multiRef map[chunks.HeadSeriesRef]chunks.
 				exemplars, err = dec.Exemplars(rec, exemplars)
 				if err != nil {
 					decodeErr = &wlog.CorruptionErr{
-						Err:     errors.Wrap(err, "decode exemplars"),
+						Err:     fmt.Errorf("decode exemplars: %w", err),
 						Segment: r.Segment(),
 						Offset:  r.Offset(),
 					}
@@ -193,7 +193,7 @@ func (h *Head) loadWAL(r *wlog.Reader, multiRef map[chunks.HeadSeriesRef]chunks.
 				hists, err = dec.HistogramSamples(rec, hists)
 				if err != nil {
 					decodeErr = &wlog.CorruptionErr{
-						Err:     errors.Wrap(err, "decode histograms"),
+						Err:     fmt.Errorf("decode histograms: %w", err),
 						Segment: r.Segment(),
 						Offset:  r.Offset(),
 					}
@@ -205,7 +205,7 @@ func (h *Head) loadWAL(r *wlog.Reader, multiRef map[chunks.HeadSeriesRef]chunks.
 				hists, err = dec.FloatHistogramSamples(rec, hists)
 				if err != nil {
 					decodeErr = &wlog.CorruptionErr{
-						Err:     errors.Wrap(err, "decode float histograms"),
+						Err:     fmt.Errorf("decode float histograms: %w", err),
 						Segment: r.Segment(),
 						Offset:  r.Offset(),
 					}
@@ -217,7 +217,7 @@ func (h *Head) loadWAL(r *wlog.Reader, multiRef map[chunks.HeadSeriesRef]chunks.
 				meta, err := dec.Metadata(rec, meta)
 				if err != nil {
 					decodeErr = &wlog.CorruptionErr{
-						Err:     errors.Wrap(err, "decode metadata"),
+						Err:     fmt.Errorf("decode metadata: %w", err),
 						Segment: r.Segment(),
 						Offset:  r.Offset(),
 					}
@@ -416,8 +416,8 @@ Outer:
 	close(exemplarsInput)
 	wg.Wait()
 
-	if r.Err() != nil {
-		return errors.Wrap(r.Err(), "read records")
+	if err := r.Err(); err != nil {
+		return fmt.Errorf("read records: %w", err)
 	}
 
 	if unknownRefs.Load()+unknownExemplarRefs.Load()+unknownHistogramRefs.Load()+unknownMetadataRefs.Load() > 0 {
@@ -708,7 +708,7 @@ func (h *Head) loadWBL(r *wlog.Reader, multiRef map[chunks.HeadSeriesRef]chunks.
 				samples, err = dec.Samples(rec, samples)
 				if err != nil {
 					decodeErr = &wlog.CorruptionErr{
-						Err:     errors.Wrap(err, "decode samples"),
+						Err:     fmt.Errorf("decode samples: %w", err),
 						Segment: r.Segment(),
 						Offset:  r.Offset(),
 					}
@@ -720,7 +720,7 @@ func (h *Head) loadWBL(r *wlog.Reader, multiRef map[chunks.HeadSeriesRef]chunks.
 				markers, err = dec.MmapMarkers(rec, markers)
 				if err != nil {
 					decodeErr = &wlog.CorruptionErr{
-						Err:     errors.Wrap(err, "decode mmap markers"),
+						Err:     fmt.Errorf("decode mmap markers: %w", err),
 						Segment: r.Segment(),
 						Offset:  r.Offset(),
 					}
@@ -806,8 +806,8 @@ func (h *Head) loadWBL(r *wlog.Reader, multiRef map[chunks.HeadSeriesRef]chunks.
 	}
 	wg.Wait()
 
-	if r.Err() != nil {
-		return errors.Wrap(r.Err(), "read records")
+	if err := r.Err(); err != nil {
+		return fmt.Errorf("read records: %w", err)
 	}
 
 	if unknownRefs.Load() > 0 || mmapMarkerUnknownRefs.Load() > 0 {
@@ -995,7 +995,7 @@ func decodeSeriesFromChunkSnapshot(d *record.Decoder, b []byte) (csr chunkSnapsh
 
 	chk, err := chunkenc.FromData(enc, chunkBytesCopy)
 	if err != nil {
-		return csr, errors.Wrap(err, "chunk from data")
+		return csr, fmt.Errorf("chunk from data: %w", err)
 	}
 	csr.mc.chunk = chk
 
@@ -1030,7 +1030,7 @@ func encodeTombstonesToSnapshotRecord(tr tombstones.Reader) ([]byte, error) {
 	buf.PutByte(chunkSnapshotRecordTypeTombstones)
 	b, err := tombstones.Encode(tr)
 	if err != nil {
-		return nil, errors.Wrap(err, "encode tombstones")
+		return nil, fmt.Errorf("encode tombstones: %w", err)
 	}
 	buf.PutUvarintBytes(b)
 
@@ -1045,7 +1045,10 @@ func decodeTombstonesSnapshotRecord(b []byte) (tombstones.Reader, error) {
 	}
 
 	tr, err := tombstones.Decode(dec.UvarintBytes())
-	return tr, errors.Wrap(err, "decode tombstones")
+	if err != nil {
+		return tr, fmt.Errorf("decode tombstones: %w", err)
+	}
+	return tr, nil
 }
 
 const chunkSnapshotPrefix = "chunk_snapshot."
@@ -1072,13 +1075,13 @@ func (h *Head) ChunkSnapshot() (*ChunkSnapshotStats, error) {
 	stats := &ChunkSnapshotStats{}
 
 	wlast, woffset, err := h.wal.LastSegmentAndOffset()
-	if err != nil && err != record.ErrNotFound {
-		return stats, errors.Wrap(err, "get last wal segment and offset")
+	if err != nil && !errors.Is(err, record.ErrNotFound) {
+		return stats, fmt.Errorf("get last wal segment and offset: %w", err)
 	}
 
 	_, cslast, csoffset, err := LastChunkSnapshot(h.opts.ChunkDirRoot)
-	if err != nil && err != record.ErrNotFound {
-		return stats, errors.Wrap(err, "find last chunk snapshot")
+	if err != nil && !errors.Is(err, record.ErrNotFound) {
+		return stats, fmt.Errorf("find last chunk snapshot: %w", err)
 	}
 
 	if wlast == cslast && woffset == csoffset {
@@ -1093,11 +1096,11 @@ func (h *Head) ChunkSnapshot() (*ChunkSnapshotStats, error) {
 	stats.Dir = cpdir
 
 	if err := os.MkdirAll(cpdirtmp, 0o777); err != nil {
-		return stats, errors.Wrap(err, "create chunk snapshot dir")
+		return stats, fmt.Errorf("create chunk snapshot dir: %w", err)
 	}
 	cp, err := wlog.New(nil, nil, cpdirtmp, h.wal.CompressionType())
 	if err != nil {
-		return stats, errors.Wrap(err, "open chunk snapshot")
+		return stats, fmt.Errorf("open chunk snapshot: %w", err)
 	}
 
 	// Ensures that an early return caused by an error doesn't leave any tmp files.
@@ -1126,7 +1129,7 @@ func (h *Head) ChunkSnapshot() (*ChunkSnapshotStats, error) {
 			if len(buf) > 10*1024*1024 {
 				if err := cp.Log(recs...); err != nil {
 					h.series.locks[i].RUnlock()
-					return stats, errors.Wrap(err, "flush records")
+					return stats, fmt.Errorf("flush records: %w", err)
 				}
 				buf, recs = buf[:0], recs[:0]
 			}
@@ -1139,16 +1142,16 @@ func (h *Head) ChunkSnapshot() (*ChunkSnapshotStats, error) {
 	// Add tombstones to the snapshot.
 	tombstonesReader, err := h.Tombstones()
 	if err != nil {
-		return stats, errors.Wrap(err, "get tombstones")
+		return stats, fmt.Errorf("get tombstones: %w", err)
 	}
 	rec, err := encodeTombstonesToSnapshotRecord(tombstonesReader)
 	if err != nil {
-		return stats, errors.Wrap(err, "encode tombstones")
+		return stats, fmt.Errorf("encode tombstones: %w", err)
 	}
 	recs = append(recs, rec)
 	// Flush remaining series records and tombstones.
 	if err := cp.Log(recs...); err != nil {
-		return stats, errors.Wrap(err, "flush records")
+		return stats, fmt.Errorf("flush records: %w", err)
 	}
 	buf = buf[:0]
 
@@ -1167,7 +1170,7 @@ func (h *Head) ChunkSnapshot() (*ChunkSnapshotStats, error) {
 		encbuf.PutByte(chunkSnapshotRecordTypeExemplars)
 		enc.EncodeExemplarsIntoBuffer(batch, &encbuf)
 		if err := cp.Log(encbuf.Get()); err != nil {
-			return errors.Wrap(err, "log exemplars")
+			return fmt.Errorf("log exemplars: %w", err)
 		}
 		buf, batch = buf[:0], batch[:0]
 		return nil
@@ -1175,7 +1178,7 @@ func (h *Head) ChunkSnapshot() (*ChunkSnapshotStats, error) {
 	err = h.exemplars.IterateExemplars(func(seriesLabels labels.Labels, e exemplar.Exemplar) error {
 		if len(batch) >= maxExemplarsPerRecord {
 			if err := flushExemplars(); err != nil {
-				return errors.Wrap(err, "flush exemplars")
+				return fmt.Errorf("flush exemplars: %w", err)
 			}
 		}
 
@@ -1193,19 +1196,19 @@ func (h *Head) ChunkSnapshot() (*ChunkSnapshotStats, error) {
 		return nil
 	})
 	if err != nil {
-		return stats, errors.Wrap(err, "iterate exemplars")
+		return stats, fmt.Errorf("iterate exemplars: %w", err)
 	}
 
 	// Flush remaining exemplars.
 	if err := flushExemplars(); err != nil {
-		return stats, errors.Wrap(err, "flush exemplars at the end")
+		return stats, fmt.Errorf("flush exemplars at the end: %w", err)
 	}
 
 	if err := cp.Close(); err != nil {
-		return stats, errors.Wrap(err, "close chunk snapshot")
+		return stats, fmt.Errorf("close chunk snapshot: %w", err)
 	}
 	if err := fileutil.Replace(cpdirtmp, cpdir); err != nil {
-		return stats, errors.Wrap(err, "rename chunk snapshot directory")
+		return stats, fmt.Errorf("rename chunk snapshot directory: %w", err)
 	}
 
 	if err := DeleteChunkSnapshots(h.opts.ChunkDirRoot, wlast, woffset); err != nil {
@@ -1229,7 +1232,10 @@ func (h *Head) performChunkSnapshot() error {
 	if err == nil {
 		level.Info(h.logger).Log("msg", "chunk snapshot complete", "duration", elapsed.String(), "num_series", stats.TotalSeries, "dir", stats.Dir)
 	}
-	return errors.Wrap(err, "chunk snapshot")
+	if err != nil {
+		return fmt.Errorf("chunk snapshot: %w", err)
+	}
+	return nil
 }
 
 // ChunkSnapshotStats returns stats about a created chunk snapshot.
@@ -1327,16 +1333,16 @@ func DeleteChunkSnapshots(dir string, maxIndex, maxOffset int) error {
 func (h *Head) loadChunkSnapshot() (int, int, map[chunks.HeadSeriesRef]*memSeries, error) {
 	dir, snapIdx, snapOffset, err := LastChunkSnapshot(h.opts.ChunkDirRoot)
 	if err != nil {
-		if err == record.ErrNotFound {
+		if errors.Is(err, record.ErrNotFound) {
 			return snapIdx, snapOffset, nil, nil
 		}
-		return snapIdx, snapOffset, nil, errors.Wrap(err, "find last chunk snapshot")
+		return snapIdx, snapOffset, nil, fmt.Errorf("find last chunk snapshot: %w", err)
 	}
 
 	start := time.Now()
 	sr, err := wlog.NewSegmentsReader(dir)
 	if err != nil {
-		return snapIdx, snapOffset, nil, errors.Wrap(err, "open chunk snapshot")
+		return snapIdx, snapOffset, nil, fmt.Errorf("open chunk snapshot: %w", err)
 	}
 	defer func() {
 		if err := sr.Close(); err != nil {
@@ -1424,7 +1430,7 @@ Outer:
 			numSeries++
 			csr, err := decodeSeriesFromChunkSnapshot(&dec, rec)
 			if err != nil {
-				loopErr = errors.Wrap(err, "decode series record")
+				loopErr = fmt.Errorf("decode series record: %w", err)
 				break Outer
 			}
 			recordChan <- csr
@@ -1432,7 +1438,7 @@ Outer:
 		case chunkSnapshotRecordTypeTombstones:
 			tr, err := decodeTombstonesSnapshotRecord(rec)
 			if err != nil {
-				loopErr = errors.Wrap(err, "decode tombstones")
+				loopErr = fmt.Errorf("decode tombstones: %w", err)
 				break Outer
 			}
 
@@ -1440,7 +1446,7 @@ Outer:
 				h.tombstones.AddInterval(ref, ivs...)
 				return nil
 			}); err != nil {
-				loopErr = errors.Wrap(err, "iterate tombstones")
+				loopErr = fmt.Errorf("iterate tombstones: %w", err)
 				break Outer
 			}
 
@@ -1468,7 +1474,7 @@ Outer:
 			exemplarBuf = exemplarBuf[:0]
 			exemplarBuf, err = dec.ExemplarsFromBuffer(&decbuf, exemplarBuf)
 			if err != nil {
-				loopErr = errors.Wrap(err, "exemplars from buffer")
+				loopErr = fmt.Errorf("exemplars from buffer: %w", err)
 				break Outer
 			}
 
@@ -1484,7 +1490,7 @@ Outer:
 					Value:  e.V,
 					Ts:     e.T,
 				}); err != nil {
-					loopErr = errors.Wrap(err, "add exemplar")
+					loopErr = fmt.Errorf("add exemplar: %w", err)
 					break Outer
 				}
 			}
@@ -1502,16 +1508,19 @@ Outer:
 	}
 
 	close(errChan)
-	merr := tsdb_errors.NewMulti(errors.Wrap(loopErr, "decode loop"))
+	merr := tsdb_errors.NewMulti()
+	if loopErr != nil {
+		merr.Add(fmt.Errorf("decode loop: %w", loopErr))
+	}
 	for err := range errChan {
-		merr.Add(errors.Wrap(err, "record processing"))
+		merr.Add(fmt.Errorf("record processing: %w", err))
 	}
 	if err := merr.Err(); err != nil {
 		return -1, -1, nil, err
 	}
 
-	if r.Err() != nil {
-		return -1, -1, nil, errors.Wrap(r.Err(), "read records")
+	if err := r.Err(); err != nil {
+		return -1, -1, nil, fmt.Errorf("read records: %w", err)
 	}
 
 	if len(refSeries) == 0 {
diff --git a/tsdb/index/index.go b/tsdb/index/index.go
index 44ee66386f2..2b025a3528c 100644
--- a/tsdb/index/index.go
+++ b/tsdb/index/index.go
@@ -425,7 +425,7 @@ func (w *Writer) AddSeries(ref storage.SeriesRef, lset labels.Labels, chunks ...
 	// We add padding to 16 bytes to increase the addressable space we get through 4 byte
 	// series references.
 	if err := w.addPadding(16); err != nil {
-		return fmt.Errorf("failed to write padding bytes: %v", err)
+		return fmt.Errorf("failed to write padding bytes: %w", err)
 	}
 
 	if w.f.pos%16 != 0 {
@@ -442,7 +442,7 @@ func (w *Writer) AddSeries(ref storage.SeriesRef, lset labels.Labels, chunks ...
 		if !ok {
 			nameIndex, err = w.symbols.ReverseLookup(l.Name)
 			if err != nil {
-				return fmt.Errorf("symbol entry for %q does not exist, %v", l.Name, err)
+				return fmt.Errorf("symbol entry for %q does not exist, %w", l.Name, err)
 			}
 		}
 		w.labelNames[l.Name]++
@@ -452,7 +452,7 @@ func (w *Writer) AddSeries(ref storage.SeriesRef, lset labels.Labels, chunks ...
 		if !ok || cacheEntry.lastValue != l.Value {
 			valueIndex, err = w.symbols.ReverseLookup(l.Value)
 			if err != nil {
-				return fmt.Errorf("symbol entry for %q does not exist, %v", l.Value, err)
+				return fmt.Errorf("symbol entry for %q does not exist, %w", l.Value, err)
 			}
 			w.symbolCache[l.Name] = symbolCacheEntry{
 				index:          nameIndex,
diff --git a/tsdb/mocks_test.go b/tsdb/mocks_test.go
index 268017caa62..d7c2b0a4f30 100644
--- a/tsdb/mocks_test.go
+++ b/tsdb/mocks_test.go
@@ -14,7 +14,7 @@
 package tsdb
 
 import (
-	"github.com/pkg/errors"
+	"fmt"
 
 	"github.com/prometheus/prometheus/model/labels"
 	"github.com/prometheus/prometheus/storage"
@@ -41,7 +41,7 @@ func (m *mockIndexWriter) AddSeries(_ storage.SeriesRef, l labels.Labels, chks .
 	for i, chk := range chks {
 		c, err := copyChunk(chk.Chunk)
 		if err != nil {
-			return errors.Wrap(err, "mockIndexWriter: copy chunk")
+			return fmt.Errorf("mockIndexWriter: copy chunk: %w", err)
 		}
 		chksNew[i] = chunks.Meta{MaxTime: chk.MaxTime, MinTime: chk.MinTime, Chunk: c}
 	}
diff --git a/tsdb/querier.go b/tsdb/querier.go
index 6584d7da0a5..f88e4415e45 100644
--- a/tsdb/querier.go
+++ b/tsdb/querier.go
@@ -15,13 +15,13 @@ package tsdb
 
 import (
 	"context"
+	"errors"
 	"fmt"
 	"math"
 	"strings"
 	"unicode/utf8"
 
 	"github.com/oklog/ulid"
-	"github.com/pkg/errors"
 	"golang.org/x/exp/slices"
 
 	"github.com/prometheus/prometheus/model/histogram"
@@ -63,18 +63,18 @@ type blockBaseQuerier struct {
 func newBlockBaseQuerier(b BlockReader, mint, maxt int64) (*blockBaseQuerier, error) {
 	indexr, err := b.Index()
 	if err != nil {
-		return nil, errors.Wrap(err, "open index reader")
+		return nil, fmt.Errorf("open index reader: %w", err)
 	}
 	chunkr, err := b.Chunks()
 	if err != nil {
 		indexr.Close()
-		return nil, errors.Wrap(err, "open chunk reader")
+		return nil, fmt.Errorf("open chunk reader: %w", err)
 	}
 	tombsr, err := b.Tombstones()
 	if err != nil {
 		indexr.Close()
 		chunkr.Close()
-		return nil, errors.Wrap(err, "open tombstone reader")
+		return nil, fmt.Errorf("open tombstone reader: %w", err)
 	}
 
 	if tombsr == nil {
@@ -442,12 +442,12 @@ func inversePostingsForMatcher(ctx context.Context, ix IndexReader, m *labels.Ma
 func labelValuesWithMatchers(ctx context.Context, r IndexReader, name string, matchers ...*labels.Matcher) ([]string, error) {
 	p, err := PostingsForMatchers(ctx, r, matchers...)
 	if err != nil {
-		return nil, errors.Wrap(err, "fetching postings for matchers")
+		return nil, fmt.Errorf("fetching postings for matchers: %w", err)
 	}
 
 	allValues, err := r.LabelValues(ctx, name)
 	if err != nil {
-		return nil, errors.Wrapf(err, "fetching values of label %s", name)
+		return nil, fmt.Errorf("fetching values of label %s: %w", name, err)
 	}
 
 	// If we have a matcher for the label name, we can filter out values that don't match
@@ -473,12 +473,12 @@ func labelValuesWithMatchers(ctx context.Context, r IndexReader, name string, ma
 	for i, value := range allValues {
 		valuesPostings[i], err = r.Postings(ctx, name, value)
 		if err != nil {
-			return nil, errors.Wrapf(err, "fetching postings for %s=%q", name, value)
+			return nil, fmt.Errorf("fetching postings for %s=%q: %w", name, value, err)
 		}
 	}
 	indexes, err := index.FindIntersectingPostings(p, valuesPostings)
 	if err != nil {
-		return nil, errors.Wrap(err, "intersecting postings")
+		return nil, fmt.Errorf("intersecting postings: %w", err)
 	}
 
 	values := make([]string, 0, len(indexes))
@@ -499,8 +499,8 @@ func labelNamesWithMatchers(ctx context.Context, r IndexReader, matchers ...*lab
 	for p.Next() {
 		postings = append(postings, p.At())
 	}
-	if p.Err() != nil {
-		return nil, errors.Wrapf(p.Err(), "postings for label names with matchers")
+	if err := p.Err(); err != nil {
+		return nil, fmt.Errorf("postings for label names with matchers: %w", err)
 	}
 
 	return r.LabelNamesFor(ctx, postings...)
@@ -539,10 +539,10 @@ func (b *blockBaseSeriesSet) Next() bool {
 	for b.p.Next() {
 		if err := b.index.Series(b.p.At(), &b.builder, &b.bufChks); err != nil {
 			// Postings may be stale. Skip if no underlying series exists.
-			if errors.Cause(err) == storage.ErrNotFound {
+			if errors.Is(err, storage.ErrNotFound) {
 				continue
 			}
-			b.err = errors.Wrapf(err, "get series %d", b.p.At())
+			b.err = fmt.Errorf("get series %d: %w", b.p.At(), err)
 			return false
 		}
 
@@ -552,7 +552,7 @@ func (b *blockBaseSeriesSet) Next() bool {
 
 		intervals, err := b.tombstones.Get(b.p.At())
 		if err != nil {
-			b.err = errors.Wrap(err, "get tombstones")
+			b.err = fmt.Errorf("get tombstones: %w", err)
 			return false
 		}
 
@@ -702,7 +702,7 @@ func (p *populateWithDelGenericSeriesIterator) next(copyHeadChunk bool) bool {
 	}
 
 	if p.err != nil {
-		p.err = errors.Wrapf(p.err, "cannot populate chunk %d from block %s", p.currMeta.Ref, p.blockID.String())
+		p.err = fmt.Errorf("cannot populate chunk %d from block %s: %w", p.currMeta.Ref, p.blockID.String(), p.err)
 		return false
 	}
 
@@ -900,7 +900,7 @@ func (p *populateWithDelChunkSeriesIterator) populateCurrForSingleChunk() bool {
 	valueType := p.currDelIter.Next()
 	if valueType == chunkenc.ValNone {
 		if err := p.currDelIter.Err(); err != nil {
-			p.err = errors.Wrap(err, "iterate chunk while re-encoding")
+			p.err = fmt.Errorf("iterate chunk while re-encoding: %w", err)
 		}
 		return false
 	}
@@ -968,11 +968,11 @@ func (p *populateWithDelChunkSeriesIterator) populateCurrForSingleChunk() bool {
 	}
 
 	if err != nil {
-		p.err = errors.Wrap(err, "iterate chunk while re-encoding")
+		p.err = fmt.Errorf("iterate chunk while re-encoding: %w", err)
 		return false
 	}
 	if err := p.currDelIter.Err(); err != nil {
-		p.err = errors.Wrap(err, "iterate chunk while re-encoding")
+		p.err = fmt.Errorf("iterate chunk while re-encoding: %w", err)
 		return false
 	}
 
@@ -991,7 +991,7 @@ func (p *populateWithDelChunkSeriesIterator) populateChunksFromIterable() bool {
 	firstValueType := p.currDelIter.Next()
 	if firstValueType == chunkenc.ValNone {
 		if err := p.currDelIter.Err(); err != nil {
-			p.err = errors.Wrap(err, "populateChunksFromIterable: no samples could be read")
+			p.err = fmt.Errorf("populateChunksFromIterable: no samples could be read: %w", err)
 			return false
 		}
 		return false
@@ -1075,11 +1075,11 @@ func (p *populateWithDelChunkSeriesIterator) populateChunksFromIterable() bool {
 	}
 
 	if err != nil {
-		p.err = errors.Wrap(err, "populateChunksFromIterable: error when writing new chunks")
+		p.err = fmt.Errorf("populateChunksFromIterable: error when writing new chunks: %w", err)
 		return false
 	}
 	if err = p.currDelIter.Err(); err != nil {
-		p.err = errors.Wrap(err, "populateChunksFromIterable: currDelIter error when writing new chunks")
+		p.err = fmt.Errorf("populateChunksFromIterable: currDelIter error when writing new chunks: %w", err)
 		return false
 	}
 
diff --git a/tsdb/querier_test.go b/tsdb/querier_test.go
index 64e16392d21..18d81b85b47 100644
--- a/tsdb/querier_test.go
+++ b/tsdb/querier_test.go
@@ -15,6 +15,7 @@ package tsdb
 
 import (
 	"context"
+	"errors"
 	"fmt"
 	"math"
 	"math/rand"
@@ -26,7 +27,6 @@ import (
 	"time"
 
 	"github.com/oklog/ulid"
-	"github.com/pkg/errors"
 	"github.com/stretchr/testify/require"
 
 	"github.com/prometheus/prometheus/model/histogram"
@@ -2317,7 +2317,7 @@ func (m mockIndex) Postings(ctx context.Context, name string, values ...string)
 func (m mockIndex) SortedPostings(p index.Postings) index.Postings {
 	ep, err := index.ExpandPostings(p)
 	if err != nil {
-		return index.ErrPostings(errors.Wrap(err, "expand postings"))
+		return index.ErrPostings(fmt.Errorf("expand postings: %w", err))
 	}
 
 	sort.Slice(ep, func(i, j int) bool {
diff --git a/tsdb/repair.go b/tsdb/repair.go
index 08111645418..9d2c5738d17 100644
--- a/tsdb/repair.go
+++ b/tsdb/repair.go
@@ -22,7 +22,6 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
-	"github.com/pkg/errors"
 
 	tsdb_errors "github.com/prometheus/prometheus/tsdb/errors"
 	"github.com/prometheus/prometheus/tsdb/fileutil"
@@ -35,7 +34,7 @@ func repairBadIndexVersion(logger log.Logger, dir string) error {
 	// We must actually set the index file version to 2 and revert the meta.json version back to 1.
 	dirs, err := blockDirs(dir)
 	if err != nil {
-		return errors.Wrapf(err, "list block dirs in %q", dir)
+		return fmt.Errorf("list block dirs in %q: %w", dir, err)
 	}
 
 	tmpFiles := make([]string, 0, len(dirs))
@@ -71,44 +70,54 @@ func repairBadIndexVersion(logger log.Logger, dir string) error {
 
 		repl, err := os.Create(filepath.Join(d, "index.repaired"))
 		if err != nil {
-			return errors.Wrapf(err, "create index.repaired for block dir: %v", d)
+			return fmt.Errorf("create index.repaired for block dir: %v: %w", d, err)
 		}
 		tmpFiles = append(tmpFiles, repl.Name())
 
 		broken, err := os.Open(filepath.Join(d, indexFilename))
 		if err != nil {
-			return errors.Wrapf(err, "open broken index for block dir: %v", d)
+			return fmt.Errorf("open broken index for block dir: %v: %w", d, err)
 		}
 		if _, err := io.Copy(repl, broken); err != nil {
-			return errors.Wrapf(err, "copy content of index to index.repaired for block dir: %v", d)
+			return fmt.Errorf("copy content of index to index.repaired for block dir: %v: %w", d, err)
 		}
 
 		// Set the 5th byte to 2 to indicate the correct file format version.
 		if _, err := repl.WriteAt([]byte{2}, 4); err != nil {
-			return tsdb_errors.NewMulti(
-				errors.Wrapf(err, "rewrite of index.repaired for block dir: %v", d),
-				errors.Wrap(repl.Close(), "close"),
-			).Err()
+			errs := tsdb_errors.NewMulti(
+				fmt.Errorf("rewrite of index.repaired for block dir: %v: %w", d, err))
+			if err := repl.Close(); err != nil {
+				errs.Add(fmt.Errorf("close: %w", err))
+			}
+			return errs.Err()
 		}
 		if err := repl.Sync(); err != nil {
-			return tsdb_errors.NewMulti(
-				errors.Wrapf(err, "sync of index.repaired for block dir: %v", d),
-				errors.Wrap(repl.Close(), "close"),
-			).Err()
+			errs := tsdb_errors.NewMulti(
+				fmt.Errorf("sync of index.repaired for block dir: %v: %w", d, err))
+			if err := repl.Close(); err != nil {
+				errs.Add(fmt.Errorf("close: %w", err))
+			}
+			return errs.Err()
 		}
 		if err := repl.Close(); err != nil {
-			return errors.Wrapf(repl.Close(), "close repaired index for block dir: %v", d)
+			return fmt.Errorf("close repaired index for block dir: %v: %w", d, err)
 		}
 		if err := broken.Close(); err != nil {
-			return errors.Wrapf(repl.Close(), "close broken index for block dir: %v", d)
+			if err := repl.Close(); err != nil {
+				return fmt.Errorf("close broken index for block dir: %v: %w", d, err)
+			}
 		}
 		if err := fileutil.Replace(repl.Name(), broken.Name()); err != nil {
-			return errors.Wrapf(repl.Close(), "replaced broken index with index.repaired for block dir: %v", d)
+			if err := repl.Close(); err != nil {
+				return fmt.Errorf("replaced broken index with index.repaired for block dir: %v: %w", d, err)
+			}
 		}
 		// Reset version of meta.json to 1.
 		meta.Version = metaVersion1
 		if _, err := writeMetaFile(logger, d, meta); err != nil {
-			return errors.Wrapf(repl.Close(), "write meta for block dir: %v", d)
+			if err := repl.Close(); err != nil {
+				return fmt.Errorf("write meta for block dir: %v: %w", d, err)
+			}
 		}
 	}
 	return nil
diff --git a/tsdb/wal.go b/tsdb/wal.go
index bc7db35bf18..1509c9cd968 100644
--- a/tsdb/wal.go
+++ b/tsdb/wal.go
@@ -16,6 +16,7 @@ package tsdb
 import (
 	"bufio"
 	"encoding/binary"
+	"errors"
 	"fmt"
 	"hash"
 	"hash/crc32"
@@ -28,7 +29,6 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
-	"github.com/pkg/errors"
 	"github.com/prometheus/client_golang/prometheus"
 
 	"github.com/prometheus/prometheus/storage"
@@ -210,7 +210,7 @@ func OpenSegmentWAL(dir string, logger log.Logger, flushInterval time.Duration,
 
 		for _, fn := range fns[i:] {
 			if err := os.Remove(fn); err != nil {
-				return w, errors.Wrap(err, "removing segment failed")
+				return w, fmt.Errorf("removing segment failed: %w", err)
 			}
 		}
 		break
@@ -237,8 +237,8 @@ func (r *repairingWALReader) Read(
 	if err == nil {
 		return nil
 	}
-	cerr, ok := errors.Cause(err).(walCorruptionErr)
-	if !ok {
+	var cerr *walCorruptionErr
+	if !errors.As(err, &cerr) {
 		return err
 	}
 	r.wal.metrics.corruptions.Inc()
@@ -309,7 +309,7 @@ func (w *SegmentWAL) Truncate(mint int64, keep func(chunks.HeadSeriesRef) bool)
 		// Past WAL files are closed. We have to reopen them for another read.
 		f, err := w.openSegmentFile(sf.Name())
 		if err != nil {
-			return errors.Wrap(err, "open old WAL segment for read")
+			return fmt.Errorf("open old WAL segment for read: %w", err)
 		}
 		candidates = append(candidates, &segmentFile{
 			File:      f,
@@ -326,7 +326,7 @@ func (w *SegmentWAL) Truncate(mint int64, keep func(chunks.HeadSeriesRef) bool)
 	// Create a new tmp file.
 	f, err := w.createSegmentFile(filepath.Join(w.dirFile.Name(), "compact.tmp"))
 	if err != nil {
-		return errors.Wrap(err, "create compaction segment")
+		return fmt.Errorf("create compaction segment: %w", err)
 	}
 	defer func() {
 		if err := os.RemoveAll(f.Name()); err != nil {
@@ -352,7 +352,7 @@ func (w *SegmentWAL) Truncate(mint int64, keep func(chunks.HeadSeriesRef) bool)
 
 		err := r.decodeSeries(flag, byt, &decSeries)
 		if err != nil {
-			return errors.Wrap(err, "decode samples while truncating")
+			return fmt.Errorf("decode samples while truncating: %w", err)
 		}
 		for _, s := range decSeries {
 			if keep(s.Ref) {
@@ -367,11 +367,11 @@ func (w *SegmentWAL) Truncate(mint int64, keep func(chunks.HeadSeriesRef) bool)
 		w.putBuffer(buf)
 
 		if err != nil {
-			return errors.Wrap(err, "write to compaction segment")
+			return fmt.Errorf("write to compaction segment: %w", err)
 		}
 	}
-	if r.Err() != nil {
-		return errors.Wrap(r.Err(), "read candidate WAL files")
+	if err := r.Err(); err != nil {
+		return fmt.Errorf("read candidate WAL files: %w", err)
 	}
 
 	off, err := csf.Seek(0, io.SeekCurrent)
@@ -390,12 +390,12 @@ func (w *SegmentWAL) Truncate(mint int64, keep func(chunks.HeadSeriesRef) bool)
 
 	_ = candidates[0].Close() // need close before remove on platform windows
 	if err := fileutil.Replace(csf.Name(), candidates[0].Name()); err != nil {
-		return errors.Wrap(err, "rename compaction segment")
+		return fmt.Errorf("rename compaction segment: %w", err)
 	}
 	for _, f := range candidates[1:] {
 		f.Close() // need close before remove on platform windows
 		if err := os.RemoveAll(f.Name()); err != nil {
-			return errors.Wrap(err, "delete WAL segment file")
+			return fmt.Errorf("delete WAL segment file: %w", err)
 		}
 	}
 	if err := w.dirFile.Sync(); err != nil {
@@ -435,7 +435,7 @@ func (w *SegmentWAL) LogSeries(series []record.RefSeries) error {
 	w.putBuffer(buf)
 
 	if err != nil {
-		return errors.Wrap(err, "log series")
+		return fmt.Errorf("log series: %w", err)
 	}
 
 	tf := w.head()
@@ -462,7 +462,7 @@ func (w *SegmentWAL) LogSamples(samples []record.RefSample) error {
 	w.putBuffer(buf)
 
 	if err != nil {
-		return errors.Wrap(err, "log series")
+		return fmt.Errorf("log series: %w", err)
 	}
 	tf := w.head()
 
@@ -488,7 +488,7 @@ func (w *SegmentWAL) LogDeletes(stones []tombstones.Stone) error {
 	w.putBuffer(buf)
 
 	if err != nil {
-		return errors.Wrap(err, "log series")
+		return fmt.Errorf("log series: %w", err)
 	}
 	tf := w.head()
 
@@ -523,7 +523,7 @@ func (w *SegmentWAL) openSegmentFile(name string) (*os.File, error) {
 
 	switch n, err := f.Read(metab); {
 	case err != nil:
-		return nil, errors.Wrapf(err, "validate meta %q", f.Name())
+		return nil, fmt.Errorf("validate meta %q: %w", f.Name(), err)
 	case n != 8:
 		return nil, fmt.Errorf("invalid header size %d in %q", n, f.Name())
 	}
@@ -573,16 +573,16 @@ func (w *SegmentWAL) cut() error {
 			w.actorc <- func() error {
 				off, err := hf.Seek(0, io.SeekCurrent)
 				if err != nil {
-					return errors.Wrapf(err, "finish old segment %s", hf.Name())
+					return fmt.Errorf("finish old segment %s: %w", hf.Name(), err)
 				}
 				if err := hf.Truncate(off); err != nil {
-					return errors.Wrapf(err, "finish old segment %s", hf.Name())
+					return fmt.Errorf("finish old segment %s: %w", hf.Name(), err)
 				}
 				if err := hf.Sync(); err != nil {
-					return errors.Wrapf(err, "finish old segment %s", hf.Name())
+					return fmt.Errorf("finish old segment %s: %w", hf.Name(), err)
 				}
 				if err := hf.Close(); err != nil {
-					return errors.Wrapf(err, "finish old segment %s", hf.Name())
+					return fmt.Errorf("finish old segment %s: %w", hf.Name(), err)
 				}
 				return nil
 			}
@@ -600,7 +600,10 @@ func (w *SegmentWAL) cut() error {
 
 	go func() {
 		w.actorc <- func() error {
-			return errors.Wrap(w.dirFile.Sync(), "sync WAL directory")
+			if err := w.dirFile.Sync(); err != nil {
+				return fmt.Errorf("sync WAL directory: %w", err)
+			}
+			return nil
 		}
 	}()
 
@@ -635,7 +638,7 @@ func (w *SegmentWAL) Sync() error {
 		head = w.head()
 	}()
 	if err != nil {
-		return errors.Wrap(err, "flush buffer")
+		return fmt.Errorf("flush buffer: %w", err)
 	}
 	if head != nil {
 		// But only fsync the head segment after releasing the mutex as it will block on disk I/O.
@@ -726,11 +729,13 @@ func (w *SegmentWAL) Close() error {
 	// only the current segment will still be open.
 	if hf := w.head(); hf != nil {
 		if err := hf.Close(); err != nil {
-			return errors.Wrapf(err, "closing WAL head %s", hf.Name())
+			return fmt.Errorf("closing WAL head %s: %w", hf.Name(), err)
 		}
 	}
-
-	return errors.Wrapf(w.dirFile.Close(), "closing WAL dir %s", w.dirFile.Name())
+	if err := w.dirFile.Close(); err != nil {
+		return fmt.Errorf("closing WAL dir %s: %w", w.dirFile.Name(), err)
+	}
+	return nil
 }
 
 func (w *SegmentWAL) write(t WALEntryType, flag uint8, buf []byte) error {
@@ -921,7 +926,7 @@ func (r *walReader) Read(
 
 			err = r.decodeSeries(flag, b, &series)
 			if err != nil {
-				err = errors.Wrap(err, "decode series entry")
+				err = fmt.Errorf("decode series entry: %w", err)
 				break
 			}
 			datac <- series
@@ -940,7 +945,7 @@ func (r *walReader) Read(
 
 			err = r.decodeSamples(flag, b, &samples)
 			if err != nil {
-				err = errors.Wrap(err, "decode samples entry")
+				err = fmt.Errorf("decode samples entry: %w", err)
 				break
 			}
 			datac <- samples
@@ -960,7 +965,7 @@ func (r *walReader) Read(
 
 			err = r.decodeDeletes(flag, b, &deletes)
 			if err != nil {
-				err = errors.Wrap(err, "decode delete entry")
+				err = fmt.Errorf("decode delete entry: %w", err)
 				break
 			}
 			datac <- deletes
@@ -982,8 +987,8 @@ func (r *walReader) Read(
 	if err != nil {
 		return err
 	}
-	if r.Err() != nil {
-		return errors.Wrap(r.Err(), "read entry")
+	if err := r.Err(); err != nil {
+		return fmt.Errorf("read entry: %w", err)
 	}
 	return nil
 }
@@ -1046,12 +1051,16 @@ type walCorruptionErr struct {
 	lastOffset int64
 }
 
-func (e walCorruptionErr) Error() string {
+func (e *walCorruptionErr) Error() string {
 	return fmt.Sprintf("%s <file: %d, lastOffset: %d>", e.err, e.file, e.lastOffset)
 }
 
+func (e *walCorruptionErr) Unwrap() error {
+	return e.err
+}
+
 func (r *walReader) corruptionErr(s string, args ...interface{}) error {
-	return walCorruptionErr{
+	return &walCorruptionErr{
 		err:        fmt.Errorf(s, args...),
 		file:       r.cur,
 		lastOffset: r.lastOffset,
@@ -1152,8 +1161,8 @@ func (r *walReader) decodeSamples(flag byte, b []byte, res *[]record.RefSample)
 		})
 	}
 
-	if dec.Err() != nil {
-		return errors.Wrapf(dec.Err(), "decode error after %d samples", len(*res))
+	if err := dec.Err(); err != nil {
+		return fmt.Errorf("decode error after %d samples: %w", len(*res), err)
 	}
 	if len(dec.B) > 0 {
 		return fmt.Errorf("unexpected %d bytes left in entry", len(dec.B))
@@ -1185,7 +1194,7 @@ func deprecatedWALExists(logger log.Logger, dir string) (bool, error) {
 	// Detect whether we still have the old WAL.
 	fns, err := sequenceFiles(dir)
 	if err != nil && !os.IsNotExist(err) {
-		return false, errors.Wrap(err, "list sequence files")
+		return false, fmt.Errorf("list sequence files: %w", err)
 	}
 	if len(fns) == 0 {
 		return false, nil // No WAL at all yet.
@@ -1194,13 +1203,13 @@ func deprecatedWALExists(logger log.Logger, dir string) (bool, error) {
 	// old WAL.
 	f, err := os.Open(fns[0])
 	if err != nil {
-		return false, errors.Wrap(err, "check first existing segment")
+		return false, fmt.Errorf("check first existing segment: %w", err)
 	}
 	defer f.Close()
 
 	var hdr [4]byte
-	if _, err := f.Read(hdr[:]); err != nil && err != io.EOF {
-		return false, errors.Wrap(err, "read header from first segment")
+	if _, err := f.Read(hdr[:]); err != nil && !errors.Is(err, io.EOF) {
+		return false, fmt.Errorf("read header from first segment: %w", err)
 	}
 	// If we cannot read the magic header for segments of the old WAL, abort.
 	// Either it's migrated already or there's a corruption issue with which
@@ -1223,11 +1232,11 @@ func MigrateWAL(logger log.Logger, dir string) (err error) {
 
 	tmpdir := dir + ".tmp"
 	if err := os.RemoveAll(tmpdir); err != nil {
-		return errors.Wrap(err, "cleanup replacement dir")
+		return fmt.Errorf("cleanup replacement dir: %w", err)
 	}
 	repl, err := wlog.New(logger, nil, tmpdir, wlog.CompressionNone)
 	if err != nil {
-		return errors.Wrap(err, "open new WAL")
+		return fmt.Errorf("open new WAL: %w", err)
 	}
 
 	// It should've already been closed as part of the previous finalization.
@@ -1240,7 +1249,7 @@ func MigrateWAL(logger log.Logger, dir string) (err error) {
 
 	w, err := OpenSegmentWAL(dir, logger, time.Minute, nil)
 	if err != nil {
-		return errors.Wrap(err, "open old WAL")
+		return fmt.Errorf("open old WAL: %w", err)
 	}
 	defer w.Close()
 
@@ -1271,22 +1280,22 @@ func MigrateWAL(logger log.Logger, dir string) (err error) {
 		},
 	)
 	if decErr != nil {
-		return errors.Wrap(err, "decode old entries")
+		return fmt.Errorf("decode old entries: %w", err)
 	}
 	if err != nil {
-		return errors.Wrap(err, "write new entries")
+		return fmt.Errorf("write new entries: %w", err)
 	}
 	// We explicitly close even when there is a defer for Windows to be
 	// able to delete it. The defer is in place to close it in-case there
 	// are errors above.
 	if err := w.Close(); err != nil {
-		return errors.Wrap(err, "close old WAL")
+		return fmt.Errorf("close old WAL: %w", err)
 	}
 	if err := repl.Close(); err != nil {
-		return errors.Wrap(err, "close new WAL")
+		return fmt.Errorf("close new WAL: %w", err)
 	}
 	if err := fileutil.Replace(tmpdir, dir); err != nil {
-		return errors.Wrap(err, "replace old WAL")
+		return fmt.Errorf("replace old WAL: %w", err)
 	}
 	return nil
 }
diff --git a/tsdb/wlog/wlog.go b/tsdb/wlog/wlog.go
index c3ae001d989..fdea756945a 100644
--- a/tsdb/wlog/wlog.go
+++ b/tsdb/wlog/wlog.go
@@ -116,6 +116,10 @@ func (e *CorruptionErr) Error() string {
 	return fmt.Sprintf("corruption in segment %s at %d: %s", SegmentName(e.Dir, e.Segment), e.Offset, e.Err)
 }
 
+func (e *CorruptionErr) Unwrap() error {
+	return e.Err
+}
+
 // OpenWriteSegment opens segment k in dir. The returned segment is ready for new appends.
 func OpenWriteSegment(logger log.Logger, dir string, k int) (*Segment, error) {
 	segName := SegmentName(dir, k)

From 108a749a459e346de0d76c109f9cded21d4b0932 Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Mon, 11 Dec 2023 13:12:43 +0000
Subject: [PATCH 022/132] Set up labels for counters in advance

Signed-off-by: Paulin Todev <paulin.todev@gmail.com>
---
 discovery/kubernetes/endpoints.go     | 21 +++++++++++++++------
 discovery/kubernetes/endpointslice.go | 21 +++++++++++++++------
 discovery/kubernetes/ingress.go       | 19 +++++++++++++++----
 discovery/kubernetes/node.go          | 19 +++++++++++++++----
 discovery/kubernetes/pod.go           | 10 +++++++---
 discovery/kubernetes/service.go       | 19 +++++++++++++++----
 6 files changed, 82 insertions(+), 27 deletions(-)

diff --git a/discovery/kubernetes/endpoints.go b/discovery/kubernetes/endpoints.go
index 801a45f7c2e..f97f1ee566c 100644
--- a/discovery/kubernetes/endpoints.go
+++ b/discovery/kubernetes/endpoints.go
@@ -53,6 +53,15 @@ func NewEndpoints(l log.Logger, eps cache.SharedIndexInformer, svc, pod, node ca
 	if l == nil {
 		l = log.NewNopLogger()
 	}
+
+	epAddCount := eventCount.WithLabelValues("endpoints", "add")
+	epUpdateCount := eventCount.WithLabelValues("endpoints", "update")
+	epDeleteCount := eventCount.WithLabelValues("endpoints", "delete")
+
+	svcAddCount := eventCount.WithLabelValues("service", "add")
+	svcUpdateCount := eventCount.WithLabelValues("service", "update")
+	svcDeleteCount := eventCount.WithLabelValues("service", "delete")
+
 	e := &Endpoints{
 		logger:           l,
 		endpointsInf:     eps,
@@ -68,15 +77,15 @@ func NewEndpoints(l log.Logger, eps cache.SharedIndexInformer, svc, pod, node ca
 
 	_, err := e.endpointsInf.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			eventCount.WithLabelValues("endpoints", "add").Inc()
+			epAddCount.Inc()
 			e.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			eventCount.WithLabelValues("endpoints", "update").Inc()
+			epUpdateCount.Inc()
 			e.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			eventCount.WithLabelValues("endpoints", "delete").Inc()
+			epDeleteCount.Inc()
 			e.enqueue(o)
 		},
 	})
@@ -107,15 +116,15 @@ func NewEndpoints(l log.Logger, eps cache.SharedIndexInformer, svc, pod, node ca
 		// TODO(fabxc): potentially remove add and delete event handlers. Those should
 		// be triggered via the endpoint handlers already.
 		AddFunc: func(o interface{}) {
-			eventCount.WithLabelValues("service", "add").Inc()
+			svcAddCount.Inc()
 			serviceUpdate(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			eventCount.WithLabelValues("service", "update").Inc()
+			svcUpdateCount.Inc()
 			serviceUpdate(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			eventCount.WithLabelValues("service", "delete").Inc()
+			svcDeleteCount.Inc()
 			serviceUpdate(o)
 		},
 	})
diff --git a/discovery/kubernetes/endpointslice.go b/discovery/kubernetes/endpointslice.go
index e2ac1de4236..a7e0ea98c09 100644
--- a/discovery/kubernetes/endpointslice.go
+++ b/discovery/kubernetes/endpointslice.go
@@ -56,6 +56,15 @@ func NewEndpointSlice(l log.Logger, eps cache.SharedIndexInformer, svc, pod, nod
 	if l == nil {
 		l = log.NewNopLogger()
 	}
+
+	epslAddCount := eventCount.WithLabelValues("endpointslice", "add")
+	epslUpdateCount := eventCount.WithLabelValues("endpointslice", "update")
+	epslDeleteCount := eventCount.WithLabelValues("endpointslice", "delete")
+
+	svcAddCount := eventCount.WithLabelValues("service", "add")
+	svcUpdateCount := eventCount.WithLabelValues("service", "update")
+	svcDeleteCount := eventCount.WithLabelValues("service", "delete")
+
 	e := &EndpointSlice{
 		logger:             l,
 		endpointSliceInf:   eps,
@@ -71,15 +80,15 @@ func NewEndpointSlice(l log.Logger, eps cache.SharedIndexInformer, svc, pod, nod
 
 	_, err := e.endpointSliceInf.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			eventCount.WithLabelValues("endpointslice", "add").Inc()
+			epslAddCount.Inc()
 			e.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			eventCount.WithLabelValues("endpointslice", "update").Inc()
+			epslUpdateCount.Inc()
 			e.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			eventCount.WithLabelValues("endpointslice", "delete").Inc()
+			epslDeleteCount.Inc()
 			e.enqueue(o)
 		},
 	})
@@ -110,15 +119,15 @@ func NewEndpointSlice(l log.Logger, eps cache.SharedIndexInformer, svc, pod, nod
 	}
 	_, err = e.serviceInf.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			eventCount.WithLabelValues("service", "add").Inc()
+			svcAddCount.Inc()
 			serviceUpdate(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			eventCount.WithLabelValues("service", "update").Inc()
+			svcUpdateCount.Inc()
 			serviceUpdate(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			eventCount.WithLabelValues("service", "delete").Inc()
+			svcDeleteCount.Inc()
 			serviceUpdate(o)
 		},
 	})
diff --git a/discovery/kubernetes/ingress.go b/discovery/kubernetes/ingress.go
index 91b1fb0ee52..72712245a3c 100644
--- a/discovery/kubernetes/ingress.go
+++ b/discovery/kubernetes/ingress.go
@@ -41,18 +41,29 @@ type Ingress struct {
 
 // NewIngress returns a new ingress discovery.
 func NewIngress(l log.Logger, inf cache.SharedInformer, eventCount *prometheus.CounterVec) *Ingress {
-	s := &Ingress{logger: l, informer: inf, store: inf.GetStore(), queue: workqueue.NewNamed("ingress")}
+
+	ingressAddCount := eventCount.WithLabelValues("ingress", "add")
+	ingressUpdateCount := eventCount.WithLabelValues("ingress", "update")
+	ingressDeleteCount := eventCount.WithLabelValues("ingress", "delete")
+
+	s := &Ingress{
+		logger:   l,
+		informer: inf,
+		store:    inf.GetStore(),
+		queue:    workqueue.NewNamed("ingress"),
+	}
+
 	_, err := s.informer.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			eventCount.WithLabelValues("ingress", "add").Inc()
+			ingressAddCount.Inc()
 			s.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			eventCount.WithLabelValues("ingress", "delete").Inc()
+			ingressDeleteCount.Inc()
 			s.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			eventCount.WithLabelValues("ingress", "update").Inc()
+			ingressUpdateCount.Inc()
 			s.enqueue(o)
 		},
 	})
diff --git a/discovery/kubernetes/node.go b/discovery/kubernetes/node.go
index f1e37e6fae4..f9a3183365a 100644
--- a/discovery/kubernetes/node.go
+++ b/discovery/kubernetes/node.go
@@ -49,18 +49,29 @@ func NewNode(l log.Logger, inf cache.SharedInformer, eventCount *prometheus.Coun
 	if l == nil {
 		l = log.NewNopLogger()
 	}
-	n := &Node{logger: l, informer: inf, store: inf.GetStore(), queue: workqueue.NewNamed("node")}
+
+	nodeAddCount := eventCount.WithLabelValues("node", "add")
+	nodeUpdateCount := eventCount.WithLabelValues("node", "update")
+	nodeDeleteCount := eventCount.WithLabelValues("node", "delete")
+
+	n := &Node{
+		logger:   l,
+		informer: inf,
+		store:    inf.GetStore(),
+		queue:    workqueue.NewNamed("node"),
+	}
+
 	_, err := n.informer.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			eventCount.WithLabelValues("node", "add").Inc()
+			nodeAddCount.Inc()
 			n.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			eventCount.WithLabelValues("node", "delete").Inc()
+			nodeDeleteCount.Inc()
 			n.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			eventCount.WithLabelValues("node", "update").Inc()
+			nodeUpdateCount.Inc()
 			n.enqueue(o)
 		},
 	})
diff --git a/discovery/kubernetes/pod.go b/discovery/kubernetes/pod.go
index cc809b29c7e..31936f9c0c6 100644
--- a/discovery/kubernetes/pod.go
+++ b/discovery/kubernetes/pod.go
@@ -51,6 +51,10 @@ func NewPod(l log.Logger, pods cache.SharedIndexInformer, nodes cache.SharedInfo
 		l = log.NewNopLogger()
 	}
 
+	podAddCount := eventCount.WithLabelValues("pod", "add")
+	podDeleteCount := eventCount.WithLabelValues("pod", "delete")
+	podUpdateCount := eventCount.WithLabelValues("pod", "update")
+
 	p := &Pod{
 		podInf:           pods,
 		nodeInf:          nodes,
@@ -61,15 +65,15 @@ func NewPod(l log.Logger, pods cache.SharedIndexInformer, nodes cache.SharedInfo
 	}
 	_, err := p.podInf.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			eventCount.WithLabelValues("pod", "add").Inc()
+			podAddCount.Inc()
 			p.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			eventCount.WithLabelValues("pod", "delete").Inc()
+			podDeleteCount.Inc()
 			p.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			eventCount.WithLabelValues("pod", "update").Inc()
+			podUpdateCount.Inc()
 			p.enqueue(o)
 		},
 	})
diff --git a/discovery/kubernetes/service.go b/discovery/kubernetes/service.go
index a680ebee8f2..02158b124c3 100644
--- a/discovery/kubernetes/service.go
+++ b/discovery/kubernetes/service.go
@@ -44,18 +44,29 @@ func NewService(l log.Logger, inf cache.SharedInformer, eventCount *prometheus.C
 	if l == nil {
 		l = log.NewNopLogger()
 	}
-	s := &Service{logger: l, informer: inf, store: inf.GetStore(), queue: workqueue.NewNamed("service")}
+
+	svcAddCount := eventCount.WithLabelValues("service", "add")
+	svcUpdateCount := eventCount.WithLabelValues("service", "update")
+	svcDeleteCount := eventCount.WithLabelValues("service", "delete")
+
+	s := &Service{
+		logger:   l,
+		informer: inf,
+		store:    inf.GetStore(),
+		queue:    workqueue.NewNamed("service"),
+	}
+
 	_, err := s.informer.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
-			eventCount.WithLabelValues("service", "add").Inc()
+			svcAddCount.Inc()
 			s.enqueue(o)
 		},
 		DeleteFunc: func(o interface{}) {
-			eventCount.WithLabelValues("service", "delete").Inc()
+			svcDeleteCount.Inc()
 			s.enqueue(o)
 		},
 		UpdateFunc: func(_, o interface{}) {
-			eventCount.WithLabelValues("service", "update").Inc()
+			svcUpdateCount.Inc()
 			s.enqueue(o)
 		},
 	})

From 27bb57a37bd92523f932f17b202c98985888e21f Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Mon, 11 Dec 2023 13:17:47 +0000
Subject: [PATCH 023/132] Define metric label values in one place

Signed-off-by: Paulin Todev <paulin.todev@gmail.com>
---
 discovery/kubernetes/endpoints.go     | 14 +++++++-------
 discovery/kubernetes/endpointslice.go | 14 +++++++-------
 discovery/kubernetes/ingress.go       |  8 ++++----
 discovery/kubernetes/kubernetes.go    | 24 ++++++++++++++++++++++--
 discovery/kubernetes/node.go          |  8 ++++----
 discovery/kubernetes/pod.go           |  8 ++++----
 discovery/kubernetes/service.go       |  8 ++++----
 7 files changed, 52 insertions(+), 32 deletions(-)

diff --git a/discovery/kubernetes/endpoints.go b/discovery/kubernetes/endpoints.go
index f97f1ee566c..512d775523b 100644
--- a/discovery/kubernetes/endpoints.go
+++ b/discovery/kubernetes/endpoints.go
@@ -54,13 +54,13 @@ func NewEndpoints(l log.Logger, eps cache.SharedIndexInformer, svc, pod, node ca
 		l = log.NewNopLogger()
 	}
 
-	epAddCount := eventCount.WithLabelValues("endpoints", "add")
-	epUpdateCount := eventCount.WithLabelValues("endpoints", "update")
-	epDeleteCount := eventCount.WithLabelValues("endpoints", "delete")
+	epAddCount := eventCount.WithLabelValues(RoleEndpoint.String(), MetricLabelRoleAdd)
+	epUpdateCount := eventCount.WithLabelValues(RoleEndpoint.String(), MetricLabelRoleUpdate)
+	epDeleteCount := eventCount.WithLabelValues(RoleEndpoint.String(), MetricLabelRoleDelete)
 
-	svcAddCount := eventCount.WithLabelValues("service", "add")
-	svcUpdateCount := eventCount.WithLabelValues("service", "update")
-	svcDeleteCount := eventCount.WithLabelValues("service", "delete")
+	svcAddCount := eventCount.WithLabelValues(RoleService.String(), MetricLabelRoleAdd)
+	svcUpdateCount := eventCount.WithLabelValues(RoleService.String(), MetricLabelRoleUpdate)
+	svcDeleteCount := eventCount.WithLabelValues(RoleService.String(), MetricLabelRoleDelete)
 
 	e := &Endpoints{
 		logger:           l,
@@ -72,7 +72,7 @@ func NewEndpoints(l log.Logger, eps cache.SharedIndexInformer, svc, pod, node ca
 		podStore:         pod.GetStore(),
 		nodeInf:          node,
 		withNodeMetadata: node != nil,
-		queue:            workqueue.NewNamed("endpoints"),
+		queue:            workqueue.NewNamed(RoleEndpoint.String()),
 	}
 
 	_, err := e.endpointsInf.AddEventHandler(cache.ResourceEventHandlerFuncs{
diff --git a/discovery/kubernetes/endpointslice.go b/discovery/kubernetes/endpointslice.go
index a7e0ea98c09..21095df4af1 100644
--- a/discovery/kubernetes/endpointslice.go
+++ b/discovery/kubernetes/endpointslice.go
@@ -57,13 +57,13 @@ func NewEndpointSlice(l log.Logger, eps cache.SharedIndexInformer, svc, pod, nod
 		l = log.NewNopLogger()
 	}
 
-	epslAddCount := eventCount.WithLabelValues("endpointslice", "add")
-	epslUpdateCount := eventCount.WithLabelValues("endpointslice", "update")
-	epslDeleteCount := eventCount.WithLabelValues("endpointslice", "delete")
+	epslAddCount := eventCount.WithLabelValues(RoleEndpointSlice.String(), MetricLabelRoleAdd)
+	epslUpdateCount := eventCount.WithLabelValues(RoleEndpointSlice.String(), MetricLabelRoleUpdate)
+	epslDeleteCount := eventCount.WithLabelValues(RoleEndpointSlice.String(), MetricLabelRoleDelete)
 
-	svcAddCount := eventCount.WithLabelValues("service", "add")
-	svcUpdateCount := eventCount.WithLabelValues("service", "update")
-	svcDeleteCount := eventCount.WithLabelValues("service", "delete")
+	svcAddCount := eventCount.WithLabelValues(RoleService.String(), MetricLabelRoleAdd)
+	svcUpdateCount := eventCount.WithLabelValues(RoleService.String(), MetricLabelRoleUpdate)
+	svcDeleteCount := eventCount.WithLabelValues(RoleService.String(), MetricLabelRoleDelete)
 
 	e := &EndpointSlice{
 		logger:             l,
@@ -75,7 +75,7 @@ func NewEndpointSlice(l log.Logger, eps cache.SharedIndexInformer, svc, pod, nod
 		podStore:           pod.GetStore(),
 		nodeInf:            node,
 		withNodeMetadata:   node != nil,
-		queue:              workqueue.NewNamed("endpointSlice"),
+		queue:              workqueue.NewNamed(RoleEndpointSlice.String()),
 	}
 
 	_, err := e.endpointSliceInf.AddEventHandler(cache.ResourceEventHandlerFuncs{
diff --git a/discovery/kubernetes/ingress.go b/discovery/kubernetes/ingress.go
index 72712245a3c..80f508a64a7 100644
--- a/discovery/kubernetes/ingress.go
+++ b/discovery/kubernetes/ingress.go
@@ -42,15 +42,15 @@ type Ingress struct {
 // NewIngress returns a new ingress discovery.
 func NewIngress(l log.Logger, inf cache.SharedInformer, eventCount *prometheus.CounterVec) *Ingress {
 
-	ingressAddCount := eventCount.WithLabelValues("ingress", "add")
-	ingressUpdateCount := eventCount.WithLabelValues("ingress", "update")
-	ingressDeleteCount := eventCount.WithLabelValues("ingress", "delete")
+	ingressAddCount := eventCount.WithLabelValues(RoleIngress.String(), MetricLabelRoleAdd)
+	ingressUpdateCount := eventCount.WithLabelValues(RoleIngress.String(), MetricLabelRoleUpdate)
+	ingressDeleteCount := eventCount.WithLabelValues(RoleIngress.String(), MetricLabelRoleDelete)
 
 	s := &Ingress{
 		logger:   l,
 		informer: inf,
 		store:    inf.GetStore(),
-		queue:    workqueue.NewNamed("ingress"),
+		queue:    workqueue.NewNamed(RoleIngress.String()),
 	}
 
 	_, err := s.informer.AddEventHandler(cache.ResourceEventHandlerFuncs{
diff --git a/discovery/kubernetes/kubernetes.go b/discovery/kubernetes/kubernetes.go
index 4deaf3f6834..1e59c0db6af 100644
--- a/discovery/kubernetes/kubernetes.go
+++ b/discovery/kubernetes/kubernetes.go
@@ -102,6 +102,16 @@ func (c *Role) UnmarshalYAML(unmarshal func(interface{}) error) error {
 	}
 }
 
+func (c Role) String() string {
+	return string(c)
+}
+
+const (
+	MetricLabelRoleAdd    = "add"
+	MetricLabelRoleDelete = "delete"
+	MetricLabelRoleUpdate = "update"
+)
+
 // SDConfig is the configuration for Kubernetes service discovery.
 type SDConfig struct {
 	APIServer          config.URL              `yaml:"api_server,omitempty"`
@@ -351,8 +361,18 @@ func New(l log.Logger, reg prometheus.Registerer, conf *SDConfig) (*Discovery, e
 	d.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{d.eventCount})
 
 	// Initialize metric vectors.
-	for _, role := range []string{"endpointslice", "endpoints", "node", "pod", "service", "ingress"} {
-		for _, evt := range []string{"add", "delete", "update"} {
+	for _, role := range []string{
+		RoleEndpointSlice.String(),
+		RoleEndpoint.String(),
+		RoleNode.String(),
+		RolePod.String(),
+		RoleService.String(),
+		RoleIngress.String()} {
+		for _, evt := range []string{
+			MetricLabelRoleAdd,
+			MetricLabelRoleDelete,
+			MetricLabelRoleUpdate,
+		} {
 			d.eventCount.WithLabelValues(role, evt)
 		}
 	}
diff --git a/discovery/kubernetes/node.go b/discovery/kubernetes/node.go
index f9a3183365a..74d87e22c4b 100644
--- a/discovery/kubernetes/node.go
+++ b/discovery/kubernetes/node.go
@@ -50,15 +50,15 @@ func NewNode(l log.Logger, inf cache.SharedInformer, eventCount *prometheus.Coun
 		l = log.NewNopLogger()
 	}
 
-	nodeAddCount := eventCount.WithLabelValues("node", "add")
-	nodeUpdateCount := eventCount.WithLabelValues("node", "update")
-	nodeDeleteCount := eventCount.WithLabelValues("node", "delete")
+	nodeAddCount := eventCount.WithLabelValues(RoleNode.String(), MetricLabelRoleAdd)
+	nodeUpdateCount := eventCount.WithLabelValues(RoleNode.String(), MetricLabelRoleUpdate)
+	nodeDeleteCount := eventCount.WithLabelValues(RoleNode.String(), MetricLabelRoleDelete)
 
 	n := &Node{
 		logger:   l,
 		informer: inf,
 		store:    inf.GetStore(),
-		queue:    workqueue.NewNamed("node"),
+		queue:    workqueue.NewNamed(RoleNode.String()),
 	}
 
 	_, err := n.informer.AddEventHandler(cache.ResourceEventHandlerFuncs{
diff --git a/discovery/kubernetes/pod.go b/discovery/kubernetes/pod.go
index 31936f9c0c6..615717c1383 100644
--- a/discovery/kubernetes/pod.go
+++ b/discovery/kubernetes/pod.go
@@ -51,9 +51,9 @@ func NewPod(l log.Logger, pods cache.SharedIndexInformer, nodes cache.SharedInfo
 		l = log.NewNopLogger()
 	}
 
-	podAddCount := eventCount.WithLabelValues("pod", "add")
-	podDeleteCount := eventCount.WithLabelValues("pod", "delete")
-	podUpdateCount := eventCount.WithLabelValues("pod", "update")
+	podAddCount := eventCount.WithLabelValues(RolePod.String(), MetricLabelRoleAdd)
+	podDeleteCount := eventCount.WithLabelValues(RolePod.String(), MetricLabelRoleDelete)
+	podUpdateCount := eventCount.WithLabelValues(RolePod.String(), MetricLabelRoleUpdate)
 
 	p := &Pod{
 		podInf:           pods,
@@ -61,7 +61,7 @@ func NewPod(l log.Logger, pods cache.SharedIndexInformer, nodes cache.SharedInfo
 		withNodeMetadata: nodes != nil,
 		store:            pods.GetStore(),
 		logger:           l,
-		queue:            workqueue.NewNamed("pod"),
+		queue:            workqueue.NewNamed(RolePod.String()),
 	}
 	_, err := p.podInf.AddEventHandler(cache.ResourceEventHandlerFuncs{
 		AddFunc: func(o interface{}) {
diff --git a/discovery/kubernetes/service.go b/discovery/kubernetes/service.go
index 02158b124c3..51204a5a1af 100644
--- a/discovery/kubernetes/service.go
+++ b/discovery/kubernetes/service.go
@@ -45,15 +45,15 @@ func NewService(l log.Logger, inf cache.SharedInformer, eventCount *prometheus.C
 		l = log.NewNopLogger()
 	}
 
-	svcAddCount := eventCount.WithLabelValues("service", "add")
-	svcUpdateCount := eventCount.WithLabelValues("service", "update")
-	svcDeleteCount := eventCount.WithLabelValues("service", "delete")
+	svcAddCount := eventCount.WithLabelValues(RoleService.String(), MetricLabelRoleAdd)
+	svcUpdateCount := eventCount.WithLabelValues(RoleService.String(), MetricLabelRoleUpdate)
+	svcDeleteCount := eventCount.WithLabelValues(RoleService.String(), MetricLabelRoleDelete)
 
 	s := &Service{
 		logger:   l,
 		informer: inf,
 		store:    inf.GetStore(),
-		queue:    workqueue.NewNamed("service"),
+		queue:    workqueue.NewNamed(RoleService.String()),
 	}
 
 	_, err := s.informer.AddEventHandler(cache.ResourceEventHandlerFuncs{

From d2e997030ee2cbb4ee9a5c32d77ae2bdf644ec77 Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Mon, 11 Dec 2023 14:05:15 +0000
Subject: [PATCH 024/132] Fix linter issues

Signed-off-by: Paulin Todev <paulin.todev@gmail.com>
---
 discovery/kubernetes/ingress.go    | 1 -
 discovery/kubernetes/kubernetes.go | 3 ++-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/discovery/kubernetes/ingress.go b/discovery/kubernetes/ingress.go
index 80f508a64a7..7b6366b257b 100644
--- a/discovery/kubernetes/ingress.go
+++ b/discovery/kubernetes/ingress.go
@@ -41,7 +41,6 @@ type Ingress struct {
 
 // NewIngress returns a new ingress discovery.
 func NewIngress(l log.Logger, inf cache.SharedInformer, eventCount *prometheus.CounterVec) *Ingress {
-
 	ingressAddCount := eventCount.WithLabelValues(RoleIngress.String(), MetricLabelRoleAdd)
 	ingressUpdateCount := eventCount.WithLabelValues(RoleIngress.String(), MetricLabelRoleUpdate)
 	ingressDeleteCount := eventCount.WithLabelValues(RoleIngress.String(), MetricLabelRoleDelete)
diff --git a/discovery/kubernetes/kubernetes.go b/discovery/kubernetes/kubernetes.go
index 1e59c0db6af..5c5f3dfb62a 100644
--- a/discovery/kubernetes/kubernetes.go
+++ b/discovery/kubernetes/kubernetes.go
@@ -367,7 +367,8 @@ func New(l log.Logger, reg prometheus.Registerer, conf *SDConfig) (*Discovery, e
 		RoleNode.String(),
 		RolePod.String(),
 		RoleService.String(),
-		RoleIngress.String()} {
+		RoleIngress.String(),
+	} {
 		for _, evt := range []string{
 			MetricLabelRoleAdd,
 			MetricLabelRoleDelete,

From d12ccf9fa29dbc2d0f40013f04dbe7adb8a1113e Mon Sep 17 00:00:00 2001
From: Marcin Skalski <skalskimarcin33@gmail.com>
Date: Mon, 11 Dec 2023 16:33:42 +0100
Subject: [PATCH 025/132] kuma_sd: Extend Kuma SD configuration to allow users
 to specify ClientId

Signed-off-by: Marcin Skalski <skalskimarcin33@gmail.com>
---
 config/config_test.go               |  1 +
 config/testdata/conf.good.yml       |  1 +
 config/testdata/roundtrip.good.yml  |  1 +
 discovery/xds/kuma.go               | 18 ++++++++++++++----
 discovery/xds/kuma_test.go          |  2 +-
 discovery/xds/xds.go                |  1 +
 discovery/xds/xds_test.go           |  1 +
 docs/configuration/configuration.md |  5 +++++
 8 files changed, 25 insertions(+), 5 deletions(-)

diff --git a/config/config_test.go b/config/config_test.go
index 5d753a0f73e..7c061fd5486 100644
--- a/config/config_test.go
+++ b/config/config_test.go
@@ -568,6 +568,7 @@ var expectedConf = &Config{
 			ServiceDiscoveryConfigs: discovery.Configs{
 				&xds.KumaSDConfig{
 					Server:           "http://kuma-control-plane.kuma-system.svc:5676",
+					ClientId:         "main-prometheus",
 					HTTPClientConfig: config.DefaultHTTPClientConfig,
 					RefreshInterval:  model.Duration(15 * time.Second),
 					FetchTimeout:     model.Duration(2 * time.Minute),
diff --git a/config/testdata/conf.good.yml b/config/testdata/conf.good.yml
index e034eff431c..972099800c4 100644
--- a/config/testdata/conf.good.yml
+++ b/config/testdata/conf.good.yml
@@ -221,6 +221,7 @@ scrape_configs:
 
     kuma_sd_configs:
       - server: http://kuma-control-plane.kuma-system.svc:5676
+        clientId: main-prometheus
 
   - job_name: service-marathon
     marathon_sd_configs:
diff --git a/config/testdata/roundtrip.good.yml b/config/testdata/roundtrip.good.yml
index f2634d257a0..26589ad1be4 100644
--- a/config/testdata/roundtrip.good.yml
+++ b/config/testdata/roundtrip.good.yml
@@ -108,6 +108,7 @@ scrape_configs:
 
     kuma_sd_configs:
       - server: http://kuma-control-plane.kuma-system.svc:5676
+        clientId: main-prometheus
 
     marathon_sd_configs:
       - servers:
diff --git a/discovery/xds/kuma.go b/discovery/xds/kuma.go
index bc88ba55404..1cec053e44d 100644
--- a/discovery/xds/kuma.go
+++ b/discovery/xds/kuma.go
@@ -178,10 +178,11 @@ func kumaMadsV1ResourceParser(resources []*anypb.Any, typeURL string) ([]model.L
 
 func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger) (discovery.Discoverer, error) {
 	// Default to "prometheus" if hostname is unavailable.
-	clientID, err := osutil.GetFQDN()
-	if err != nil {
-		level.Debug(logger).Log("msg", "error getting FQDN", "err", err)
-		clientID = "prometheus"
+	var clientID string
+	if conf.ClientId == "" {
+		clientID = defaultClientId(logger)
+	} else {
+		clientID = conf.ClientId
 	}
 
 	clientConfig := &HTTPResourceClientConfig{
@@ -215,3 +216,12 @@ func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger) (discovery.Disc
 
 	return d, nil
 }
+
+func defaultClientId(logger log.Logger) string {
+	clientID, err := osutil.GetFQDN()
+	if err != nil {
+		level.Debug(logger).Log("msg", "error getting FQDN", "err", err)
+		clientID = "prometheus"
+	}
+	return clientID
+}
diff --git a/discovery/xds/kuma_test.go b/discovery/xds/kuma_test.go
index 581be9fb110..7f2b0ce3b46 100644
--- a/discovery/xds/kuma_test.go
+++ b/discovery/xds/kuma_test.go
@@ -204,7 +204,7 @@ func TestNewKumaHTTPDiscovery(t *testing.T) {
 	require.True(t, ok)
 	require.Equal(t, kumaConf.Server, resClient.Server())
 	require.Equal(t, KumaMadsV1ResourceTypeURL, resClient.ResourceTypeURL())
-	require.NotEmpty(t, resClient.ID())
+	require.Equal(t, kumaConf.ClientId, resClient.ID())
 	require.Equal(t, KumaMadsV1ResourceType, resClient.config.ResourceType)
 }
 
diff --git a/discovery/xds/xds.go b/discovery/xds/xds.go
index 48bdbab02b0..47baece7889 100644
--- a/discovery/xds/xds.go
+++ b/discovery/xds/xds.go
@@ -55,6 +55,7 @@ type SDConfig struct {
 	RefreshInterval  model.Duration          `yaml:"refresh_interval,omitempty"`
 	FetchTimeout     model.Duration          `yaml:"fetch_timeout,omitempty"`
 	Server           string                  `yaml:"server,omitempty"`
+	ClientId         string                  `yaml:"clientId,omitempty"`
 }
 
 // mustRegisterMessage registers the provided message type in the typeRegistry, and panics
diff --git a/discovery/xds/xds_test.go b/discovery/xds/xds_test.go
index 974a47342f8..2e0f24e19b9 100644
--- a/discovery/xds/xds_test.go
+++ b/discovery/xds/xds_test.go
@@ -36,6 +36,7 @@ var (
 	sdConf = SDConfig{
 		Server:          "http://127.0.0.1",
 		RefreshInterval: model.Duration(10 * time.Second),
+		ClientId:        "test-id",
 	}
 
 	testFetchFailuresCount = prometheus.NewCounter(
diff --git a/docs/configuration/configuration.md b/docs/configuration/configuration.md
index f05925d2b18..d3ee459bea0 100644
--- a/docs/configuration/configuration.md
+++ b/docs/configuration/configuration.md
@@ -2230,6 +2230,11 @@ See below for the configuration options for Kuma MonitoringAssignment discovery:
 # Address of the Kuma Control Plane's MADS xDS server.
 server: <string>
 
+# Client id is used by Kuma Control Plane to compute Monitoring Assignment for specific Prometheus backend. 
+# This is useful when migrating between multiple Prometheus backends, or having separate backend for each Mesh
+# When not specified, system hostname/fqdn will be used if available, if not `prometheus` will be used.
+clientId: <string>
+
 # The time to wait between polling update requests.
 [ refresh_interval: <duration> | default = 30s ]
 

From 0af810aa718a9cb9a9466785715103ad6117e959 Mon Sep 17 00:00:00 2001
From: Marcin Skalski <skalskimarcin33@gmail.com>
Date: Mon, 11 Dec 2023 17:01:52 +0100
Subject: [PATCH 026/132] fix go lint

Signed-off-by: Marcin Skalski <skalskimarcin33@gmail.com>
---
 config/testdata/conf.good.yml       | 2 +-
 config/testdata/roundtrip.good.yml  | 2 +-
 discovery/xds/kuma.go               | 8 ++++----
 discovery/xds/kuma_test.go          | 2 +-
 discovery/xds/xds.go                | 2 +-
 discovery/xds/xds_test.go           | 2 +-
 docs/configuration/configuration.md | 2 +-
 7 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/config/testdata/conf.good.yml b/config/testdata/conf.good.yml
index 972099800c4..b584301649e 100644
--- a/config/testdata/conf.good.yml
+++ b/config/testdata/conf.good.yml
@@ -221,7 +221,7 @@ scrape_configs:
 
     kuma_sd_configs:
       - server: http://kuma-control-plane.kuma-system.svc:5676
-        clientId: main-prometheus
+        client_id: main-prometheus
 
   - job_name: service-marathon
     marathon_sd_configs:
diff --git a/config/testdata/roundtrip.good.yml b/config/testdata/roundtrip.good.yml
index 26589ad1be4..24ab7d25927 100644
--- a/config/testdata/roundtrip.good.yml
+++ b/config/testdata/roundtrip.good.yml
@@ -108,7 +108,7 @@ scrape_configs:
 
     kuma_sd_configs:
       - server: http://kuma-control-plane.kuma-system.svc:5676
-        clientId: main-prometheus
+        client_id: main-prometheus
 
     marathon_sd_configs:
       - servers:
diff --git a/discovery/xds/kuma.go b/discovery/xds/kuma.go
index 1cec053e44d..e79195bb288 100644
--- a/discovery/xds/kuma.go
+++ b/discovery/xds/kuma.go
@@ -179,10 +179,10 @@ func kumaMadsV1ResourceParser(resources []*anypb.Any, typeURL string) ([]model.L
 func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger) (discovery.Discoverer, error) {
 	// Default to "prometheus" if hostname is unavailable.
 	var clientID string
-	if conf.ClientId == "" {
-		clientID = defaultClientId(logger)
+	if conf.ClientID == "" {
+		clientID = defaultClientID(logger)
 	} else {
-		clientID = conf.ClientId
+		clientID = conf.ClientID
 	}
 
 	clientConfig := &HTTPResourceClientConfig{
@@ -217,7 +217,7 @@ func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger) (discovery.Disc
 	return d, nil
 }
 
-func defaultClientId(logger log.Logger) string {
+func defaultClientID(logger log.Logger) string {
 	clientID, err := osutil.GetFQDN()
 	if err != nil {
 		level.Debug(logger).Log("msg", "error getting FQDN", "err", err)
diff --git a/discovery/xds/kuma_test.go b/discovery/xds/kuma_test.go
index 7f2b0ce3b46..6b4bb8784ba 100644
--- a/discovery/xds/kuma_test.go
+++ b/discovery/xds/kuma_test.go
@@ -204,7 +204,7 @@ func TestNewKumaHTTPDiscovery(t *testing.T) {
 	require.True(t, ok)
 	require.Equal(t, kumaConf.Server, resClient.Server())
 	require.Equal(t, KumaMadsV1ResourceTypeURL, resClient.ResourceTypeURL())
-	require.Equal(t, kumaConf.ClientId, resClient.ID())
+	require.Equal(t, kumaConf.ClientID, resClient.ID())
 	require.Equal(t, KumaMadsV1ResourceType, resClient.config.ResourceType)
 }
 
diff --git a/discovery/xds/xds.go b/discovery/xds/xds.go
index 47baece7889..16aa3f1482a 100644
--- a/discovery/xds/xds.go
+++ b/discovery/xds/xds.go
@@ -55,7 +55,7 @@ type SDConfig struct {
 	RefreshInterval  model.Duration          `yaml:"refresh_interval,omitempty"`
 	FetchTimeout     model.Duration          `yaml:"fetch_timeout,omitempty"`
 	Server           string                  `yaml:"server,omitempty"`
-	ClientId         string                  `yaml:"clientId,omitempty"`
+	ClientID         string                  `yaml:"client_id,omitempty"`
 }
 
 // mustRegisterMessage registers the provided message type in the typeRegistry, and panics
diff --git a/discovery/xds/xds_test.go b/discovery/xds/xds_test.go
index 2e0f24e19b9..f57fff9968d 100644
--- a/discovery/xds/xds_test.go
+++ b/discovery/xds/xds_test.go
@@ -36,7 +36,7 @@ var (
 	sdConf = SDConfig{
 		Server:          "http://127.0.0.1",
 		RefreshInterval: model.Duration(10 * time.Second),
-		ClientId:        "test-id",
+		ClientID:        "test-id",
 	}
 
 	testFetchFailuresCount = prometheus.NewCounter(
diff --git a/docs/configuration/configuration.md b/docs/configuration/configuration.md
index d3ee459bea0..41f54dbd22f 100644
--- a/docs/configuration/configuration.md
+++ b/docs/configuration/configuration.md
@@ -2233,7 +2233,7 @@ server: <string>
 # Client id is used by Kuma Control Plane to compute Monitoring Assignment for specific Prometheus backend. 
 # This is useful when migrating between multiple Prometheus backends, or having separate backend for each Mesh
 # When not specified, system hostname/fqdn will be used if available, if not `prometheus` will be used.
-clientId: <string>
+client_id: <string>
 
 # The time to wait between polling update requests.
 [ refresh_interval: <duration> | default = 30s ]

From 48934aaef3c8e18b91d232a436c00c802c99a77a Mon Sep 17 00:00:00 2001
From: Marcin Skalski <skalskimarcin33@gmail.com>
Date: Mon, 11 Dec 2023 17:04:56 +0100
Subject: [PATCH 027/132] fix go lint

Signed-off-by: Marcin Skalski <skalskimarcin33@gmail.com>
---
 config/config_test.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/config_test.go b/config/config_test.go
index 7c061fd5486..e614a44637e 100644
--- a/config/config_test.go
+++ b/config/config_test.go
@@ -568,7 +568,7 @@ var expectedConf = &Config{
 			ServiceDiscoveryConfigs: discovery.Configs{
 				&xds.KumaSDConfig{
 					Server:           "http://kuma-control-plane.kuma-system.svc:5676",
-					ClientId:         "main-prometheus",
+					ClientID:         "main-prometheus",
 					HTTPClientConfig: config.DefaultHTTPClientConfig,
 					RefreshInterval:  model.Duration(15 * time.Second),
 					FetchTimeout:     model.Duration(2 * time.Minute),

From e27232614a37edbc40f7778c659806a23a3dd61b Mon Sep 17 00:00:00 2001
From: Marcin Skalski <skalskimarcin33@gmail.com>
Date: Tue, 12 Dec 2023 08:32:46 +0100
Subject: [PATCH 028/132] code review

Signed-off-by: Marcin Skalski <skalskimarcin33@gmail.com>
---
 discovery/xds/kuma.go | 22 ++++++++--------------
 1 file changed, 8 insertions(+), 14 deletions(-)

diff --git a/discovery/xds/kuma.go b/discovery/xds/kuma.go
index e79195bb288..567e5ab7cd1 100644
--- a/discovery/xds/kuma.go
+++ b/discovery/xds/kuma.go
@@ -178,11 +178,14 @@ func kumaMadsV1ResourceParser(resources []*anypb.Any, typeURL string) ([]model.L
 
 func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger) (discovery.Discoverer, error) {
 	// Default to "prometheus" if hostname is unavailable.
-	var clientID string
-	if conf.ClientID == "" {
-		clientID = defaultClientID(logger)
-	} else {
-		clientID = conf.ClientID
+	clientID := conf.ClientID
+	if clientID == "" {
+		var err error
+		clientID, err = osutil.GetFQDN()
+		if err != nil {
+			level.Debug(logger).Log("msg", "error getting FQDN", "err", err)
+			clientID = "prometheus"
+		}
 	}
 
 	clientConfig := &HTTPResourceClientConfig{
@@ -216,12 +219,3 @@ func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger) (discovery.Disc
 
 	return d, nil
 }
-
-func defaultClientID(logger log.Logger) string {
-	clientID, err := osutil.GetFQDN()
-	if err != nil {
-		level.Debug(logger).Log("msg", "error getting FQDN", "err", err)
-		clientID = "prometheus"
-	}
-	return clientID
-}

From f36b56a62ce01e9852d73bd25b310985b486a17c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Giedrius=20Statkevi=C4=8Dius?=
 <giedrius.statkevicius@vinted.com>
Date: Tue, 12 Dec 2023 11:58:54 +0200
Subject: [PATCH 029/132] tsdb: remove unused option (#13282)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Digging around the TSDB code and I've found that this flag is unused so
let's remove it.

Signed-off-by: Giedrius Statkevičius <giedrius.statkevicius@vinted.com>
---
 cmd/prometheus/main.go |  1 -
 tsdb/db.go             | 35 +++++++++++++----------------------
 tsdb/db_test.go        |  3 ---
 3 files changed, 13 insertions(+), 26 deletions(-)

diff --git a/cmd/prometheus/main.go b/cmd/prometheus/main.go
index 106f9d05c5b..7e8e23444ff 100644
--- a/cmd/prometheus/main.go
+++ b/cmd/prometheus/main.go
@@ -1597,7 +1597,6 @@ func (opts tsdbOptions) ToTSDBOptions() tsdb.Options {
 		RetentionDuration:              int64(time.Duration(opts.RetentionDuration) / time.Millisecond),
 		MaxBytes:                       int64(opts.MaxBytes),
 		NoLockfile:                     opts.NoLockfile,
-		AllowOverlappingCompaction:     true,
 		WALCompression:                 wlog.ParseCompressionType(opts.WALCompression, opts.WALCompressionType),
 		HeadChunksWriteQueueSize:       opts.HeadChunksWriteQueueSize,
 		SamplesPerChunk:                opts.SamplesPerChunk,
diff --git a/tsdb/db.go b/tsdb/db.go
index 6d283fdd829..b2cc37a194f 100644
--- a/tsdb/db.go
+++ b/tsdb/db.go
@@ -70,20 +70,19 @@ var ErrNotReady = errors.New("TSDB not ready")
 // millisecond precision timestamps.
 func DefaultOptions() *Options {
 	return &Options{
-		WALSegmentSize:             wlog.DefaultSegmentSize,
-		MaxBlockChunkSegmentSize:   chunks.DefaultChunkSegmentSize,
-		RetentionDuration:          int64(15 * 24 * time.Hour / time.Millisecond),
-		MinBlockDuration:           DefaultBlockDuration,
-		MaxBlockDuration:           DefaultBlockDuration,
-		NoLockfile:                 false,
-		AllowOverlappingCompaction: true,
-		SamplesPerChunk:            DefaultSamplesPerChunk,
-		WALCompression:             wlog.CompressionNone,
-		StripeSize:                 DefaultStripeSize,
-		HeadChunksWriteBufferSize:  chunks.DefaultWriteBufferSize,
-		IsolationDisabled:          defaultIsolationDisabled,
-		HeadChunksWriteQueueSize:   chunks.DefaultWriteQueueSize,
-		OutOfOrderCapMax:           DefaultOutOfOrderCapMax,
+		WALSegmentSize:            wlog.DefaultSegmentSize,
+		MaxBlockChunkSegmentSize:  chunks.DefaultChunkSegmentSize,
+		RetentionDuration:         int64(15 * 24 * time.Hour / time.Millisecond),
+		MinBlockDuration:          DefaultBlockDuration,
+		MaxBlockDuration:          DefaultBlockDuration,
+		NoLockfile:                false,
+		SamplesPerChunk:           DefaultSamplesPerChunk,
+		WALCompression:            wlog.CompressionNone,
+		StripeSize:                DefaultStripeSize,
+		HeadChunksWriteBufferSize: chunks.DefaultWriteBufferSize,
+		IsolationDisabled:         defaultIsolationDisabled,
+		HeadChunksWriteQueueSize:  chunks.DefaultWriteQueueSize,
+		OutOfOrderCapMax:          DefaultOutOfOrderCapMax,
 	}
 }
 
@@ -115,14 +114,6 @@ type Options struct {
 	// NoLockfile disables creation and consideration of a lock file.
 	NoLockfile bool
 
-	// Compaction of overlapping blocks are allowed if AllowOverlappingCompaction is true.
-	// This is an optional flag for overlapping blocks.
-	// The reason why this flag exists is because there are various users of the TSDB
-	// that do not want vertical compaction happening on ingest time. Instead,
-	// they'd rather keep overlapping blocks and let another component do the overlapping compaction later.
-	// For Prometheus, this will always be true.
-	AllowOverlappingCompaction bool
-
 	// WALCompression configures the compression type to use on records in the WAL.
 	WALCompression wlog.CompressionType
 
diff --git a/tsdb/db_test.go b/tsdb/db_test.go
index cb12f86307f..3bc094a3da8 100644
--- a/tsdb/db_test.go
+++ b/tsdb/db_test.go
@@ -4877,7 +4877,6 @@ func Test_Querier_OOOQuery(t *testing.T) {
 	opts := DefaultOptions()
 	opts.OutOfOrderCapMax = 30
 	opts.OutOfOrderTimeWindow = 24 * time.Hour.Milliseconds()
-	opts.AllowOverlappingCompaction = false
 
 	series1 := labels.FromStrings("foo", "bar1")
 
@@ -4962,7 +4961,6 @@ func Test_ChunkQuerier_OOOQuery(t *testing.T) {
 	opts := DefaultOptions()
 	opts.OutOfOrderCapMax = 30
 	opts.OutOfOrderTimeWindow = 24 * time.Hour.Milliseconds()
-	opts.AllowOverlappingCompaction = false
 
 	series1 := labels.FromStrings("foo", "bar1")
 
@@ -6646,7 +6644,6 @@ func TestQueryHistogramFromBlocksWithCompaction(t *testing.T) {
 		t.Helper()
 
 		opts := DefaultOptions()
-		opts.AllowOverlappingCompaction = true // TODO(jesusvazquez): This replaced AllowOverlappingBlocks, make sure that works.
 		db := openTestDB(t, opts, nil)
 		t.Cleanup(func() {
 			require.NoError(t, db.Close())

From 5d5acf57446c23f42630c179bb5cac10ee2b6d17 Mon Sep 17 00:00:00 2001
From: Arianna Vespri <arianna.vespri@yahoo.it>
Date: Tue, 12 Dec 2023 12:40:08 +0100
Subject: [PATCH 030/132] Add unit protobuf parser

Signed-off-by: Arianna Vespri <arianna.vespri@yahoo.it>
---
 model/textparse/openmetricsparse.go | 1 -
 model/textparse/protobufparse.go    | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/model/textparse/openmetricsparse.go b/model/textparse/openmetricsparse.go
index bb507554419..72d4e8a4dc6 100644
--- a/model/textparse/openmetricsparse.go
+++ b/model/textparse/openmetricsparse.go
@@ -136,7 +136,6 @@ func (p *OpenMetricsParser) Type() ([]byte, MetricType) {
 // Must only be called after Next returned a unit entry.
 // The returned byte slices become invalid after the next call to Next.
 func (p *OpenMetricsParser) Unit() ([]byte, []byte) {
-	// The Prometheus format does not have units.
 	return p.l.b[p.offsets[0]:p.offsets[1]], p.text
 }
 
diff --git a/model/textparse/protobufparse.go b/model/textparse/protobufparse.go
index 23afb5c5962..9dea097a2b4 100644
--- a/model/textparse/protobufparse.go
+++ b/model/textparse/protobufparse.go
@@ -272,7 +272,7 @@ func (p *ProtobufParser) Type() ([]byte, MetricType) {
 // Unit always returns (nil, nil) because units aren't supported by the protobuf
 // format.
 func (p *ProtobufParser) Unit() ([]byte, []byte) {
-	return nil, nil
+	return p.metricBytes.Bytes(), []byte(p.mf.GetUnit())
 }
 
 // Comment always returns nil because comments aren't supported by the protobuf

From 19709f75d05deb8f24c69788fa7b5a4939394734 Mon Sep 17 00:00:00 2001
From: Marcin Skalski <skalskimarcin33@gmail.com>
Date: Tue, 12 Dec 2023 14:49:43 +0100
Subject: [PATCH 031/132] fix kuma_sd docs

Signed-off-by: Marcin Skalski <skalskimarcin33@gmail.com>
---
 docs/configuration/configuration.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/configuration/configuration.md b/docs/configuration/configuration.md
index 41f54dbd22f..5e2f31c1c66 100644
--- a/docs/configuration/configuration.md
+++ b/docs/configuration/configuration.md
@@ -2231,9 +2231,9 @@ See below for the configuration options for Kuma MonitoringAssignment discovery:
 server: <string>
 
 # Client id is used by Kuma Control Plane to compute Monitoring Assignment for specific Prometheus backend. 
-# This is useful when migrating between multiple Prometheus backends, or having separate backend for each Mesh
+# This is useful when migrating between multiple Prometheus backends, or having separate backend for each Mesh.
 # When not specified, system hostname/fqdn will be used if available, if not `prometheus` will be used.
-client_id: <string>
+[ client_id: <string> ]
 
 # The time to wait between polling update requests.
 [ refresh_interval: <duration> | default = 30s ]

From bb8363dbb30fc3864de8e837db11713022713958 Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Wed, 13 Dec 2023 08:30:02 +0100
Subject: [PATCH 032/132] Add comment on SampleRingIterator

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
---
 promql/engine.go  |  7 +------
 storage/buffer.go | 10 ++--------
 2 files changed, 3 insertions(+), 14 deletions(-)

diff --git a/promql/engine.go b/promql/engine.go
index 8b498792171..16b8ee50023 100644
--- a/promql/engine.go
+++ b/promql/engine.go
@@ -2114,12 +2114,7 @@ loop:
 				if floats == nil {
 					floats = getFPointSlice(16)
 				}
-				if n := len(floats); n < cap(floats) {
-					floats = floats[:n+1]
-					floats[n].T, floats[n].F = t, f
-				} else {
-					floats = append(floats, FPoint{T: t, F: f})
-				}
+				floats = append(floats, FPoint{T: t, F: f})
 			}
 		}
 	}
diff --git a/storage/buffer.go b/storage/buffer.go
index 75a935f9dbe..234771a7707 100644
--- a/storage/buffer.go
+++ b/storage/buffer.go
@@ -310,6 +310,8 @@ func (r *sampleRing) iterator() *SampleRingIterator {
 	return &r.it
 }
 
+// SampleRingIterator is returned by BufferedSeriesIterator.Buffer() and can be
+// used to iterate samples buffered in the lookback window.
 type SampleRingIterator struct {
 	r  *sampleRing
 	i  int
@@ -358,14 +360,6 @@ func (it *SampleRingIterator) Next() chunkenc.ValueType {
 	}
 }
 
-func (it *SampleRingIterator) Seek(int64) chunkenc.ValueType {
-	return chunkenc.ValNone
-}
-
-func (it *SampleRingIterator) Err() error {
-	return nil
-}
-
 func (it *SampleRingIterator) At() (int64, float64) {
 	return it.t, it.f
 }

From ea356c472e9926d707f873ff1bef2f8aa5bd19f8 Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Wed, 13 Dec 2023 08:35:02 +0100
Subject: [PATCH 033/132] Add comment on SampleRingIterator methods

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
---
 storage/buffer.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/storage/buffer.go b/storage/buffer.go
index 234771a7707..d19f841d43c 100644
--- a/storage/buffer.go
+++ b/storage/buffer.go
@@ -360,14 +360,20 @@ func (it *SampleRingIterator) Next() chunkenc.ValueType {
 	}
 }
 
+// At returns the current float element of the iterator.
 func (it *SampleRingIterator) At() (int64, float64) {
 	return it.t, it.f
 }
 
+// AtHistogram returns the current histogram element of the iterator.
 func (it *SampleRingIterator) AtHistogram() (int64, *histogram.Histogram) {
 	return it.t, it.h
 }
 
+// AtFloatHistogram returns the current histogram element of the iterator. If the
+// current sample is an integer histogram, it will be converted to a float histogram.
+// An optional histogram.FloatHistogram can be provided to avoid allocating a new
+// object for the conversion.
 func (it *SampleRingIterator) AtFloatHistogram(fh *histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	if it.fh == nil {
 		return it.t, it.h.ToFloat(fh)

From 103133124a55ad902b15bf02abe7eae5aecf4cc6 Mon Sep 17 00:00:00 2001
From: daniel-resdiary <109083091+daniel-resdiary@users.noreply.github.com>
Date: Wed, 13 Dec 2023 12:38:16 +0000
Subject: [PATCH 034/132] Get VM Scale Set NIC (#13283)

Calling `*armnetwork.InterfacesClient.Get()` doesn't work for Scale Set
VM NIC, because these use a different Resource ID format.

Use `*armnetwork.InterfacesClient.GetVirtualMachineScaleSetNetworkInterface()`
instead.  This needs both the scale set name and the instance ID, so
add an `InstanceID` field to the `virtualMachine` struct.  `InstanceID`
is empty for a VM that isn't a ScaleSetVM.

Signed-off-by: Daniel Nicholls <daniel.nicholls@resdiary.com>
---
 discovery/azure/azure.go      | 62 +++++++++++++++++++++++++++--------
 discovery/azure/azure_test.go |  6 ++++
 2 files changed, 55 insertions(+), 13 deletions(-)

diff --git a/discovery/azure/azure.go b/discovery/azure/azure.go
index 3b67a8102ed..4a85db23220 100644
--- a/discovery/azure/azure.go
+++ b/discovery/azure/azure.go
@@ -95,7 +95,7 @@ func CloudConfigurationFromName(name string) (cloud.Configuration, error) {
 	name = strings.ToUpper(name)
 	env, ok := environments[name]
 	if !ok {
-		return env, fmt.Errorf("There is no cloud configuration matching the name %q", name)
+		return env, fmt.Errorf("there is no cloud configuration matching the name %q", name)
 	}
 
 	return env, nil
@@ -308,6 +308,7 @@ type virtualMachine struct {
 	Location          string
 	OsType            string
 	ScaleSet          string
+	InstanceID        string
 	Tags              map[string]*string
 	NetworkInterfaces []string
 	Size              string
@@ -408,17 +409,31 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 					networkInterface = v
 					d.cacheHitCount.Add(1)
 				} else {
-					networkInterface, err = client.getNetworkInterfaceByID(ctx, nicID)
-					if err != nil {
-						if errors.Is(err, errorNotFound) {
-							level.Warn(d.logger).Log("msg", "Network interface does not exist", "name", nicID, "err", err)
-						} else {
-							ch <- target{labelSet: nil, err: err}
+					if vm.ScaleSet == "" {
+						networkInterface, err = client.getVMNetworkInterfaceByID(ctx, nicID)
+						if err != nil {
+							if errors.Is(err, errorNotFound) {
+								level.Warn(d.logger).Log("msg", "Network interface does not exist", "name", nicID, "err", err)
+							} else {
+								ch <- target{labelSet: nil, err: err}
+							}
+							// Get out of this routine because we cannot continue without a network interface.
+							return
 						}
-						// Get out of this routine because we cannot continue without a network interface.
-						return
+						d.addToCache(nicID, networkInterface)
+					} else {
+						networkInterface, err = client.getVMScaleSetVMNetworkInterfaceByID(ctx, nicID, vm.ScaleSet, vm.InstanceID)
+						if err != nil {
+							if errors.Is(err, errorNotFound) {
+								level.Warn(d.logger).Log("msg", "Network interface does not exist", "name", nicID, "err", err)
+							} else {
+								ch <- target{labelSet: nil, err: err}
+							}
+							// Get out of this routine because we cannot continue without a network interface.
+							return
+						}
+						d.addToCache(nicID, networkInterface)
 					}
-					d.addToCache(nicID, networkInterface)
 				}
 
 				if networkInterface.Properties == nil {
@@ -626,6 +641,7 @@ func mapFromVMScaleSetVM(vm armcompute.VirtualMachineScaleSetVM, scaleSetName st
 		Location:          *(vm.Location),
 		OsType:            osType,
 		ScaleSet:          scaleSetName,
+		InstanceID:        *(vm.InstanceID),
 		Tags:              tags,
 		NetworkInterfaces: networkInterfaces,
 		Size:              size,
@@ -634,9 +650,9 @@ func mapFromVMScaleSetVM(vm armcompute.VirtualMachineScaleSetVM, scaleSetName st
 
 var errorNotFound = errors.New("network interface does not exist")
 
-// getNetworkInterfaceByID gets the network interface.
+// getVMNetworkInterfaceByID gets the network interface.
 // If a 404 is returned from the Azure API, `errorNotFound` is returned.
-func (client *azureClient) getNetworkInterfaceByID(ctx context.Context, networkInterfaceID string) (*armnetwork.Interface, error) {
+func (client *azureClient) getVMNetworkInterfaceByID(ctx context.Context, networkInterfaceID string) (*armnetwork.Interface, error) {
 	r, err := newAzureResourceFromID(networkInterfaceID, client.logger)
 	if err != nil {
 		return nil, fmt.Errorf("could not parse network interface ID: %w", err)
@@ -648,7 +664,27 @@ func (client *azureClient) getNetworkInterfaceByID(ctx context.Context, networkI
 		if errors.As(err, &responseError) && responseError.StatusCode == http.StatusNotFound {
 			return nil, errorNotFound
 		}
-		return nil, fmt.Errorf("Failed to retrieve Interface %v with error: %w", networkInterfaceID, err)
+		return nil, fmt.Errorf("failed to retrieve Interface %v with error: %w", networkInterfaceID, err)
+	}
+
+	return &resp.Interface, nil
+}
+
+// getVMScaleSetVMNetworkInterfaceByID gets the network interface.
+// If a 404 is returned from the Azure API, `errorNotFound` is returned.
+func (client *azureClient) getVMScaleSetVMNetworkInterfaceByID(ctx context.Context, networkInterfaceID, scaleSetName, instanceID string) (*armnetwork.Interface, error) {
+	r, err := newAzureResourceFromID(networkInterfaceID, client.logger)
+	if err != nil {
+		return nil, fmt.Errorf("could not parse network interface ID: %w", err)
+	}
+
+	resp, err := client.nic.GetVirtualMachineScaleSetNetworkInterface(ctx, r.ResourceGroupName, scaleSetName, instanceID, r.Name, &armnetwork.InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceOptions{Expand: to.Ptr("IPConfigurations/PublicIPAddress")})
+	if err != nil {
+		var responseError *azcore.ResponseError
+		if errors.As(err, &responseError) && responseError.StatusCode == http.StatusNotFound {
+			return nil, errorNotFound
+		}
+		return nil, fmt.Errorf("failed to retrieve Interface %v with error: %w", networkInterfaceID, err)
 	}
 
 	return &resp.Interface, nil
diff --git a/discovery/azure/azure_test.go b/discovery/azure/azure_test.go
index 48f5b076c58..024cf759152 100644
--- a/discovery/azure/azure_test.go
+++ b/discovery/azure/azure_test.go
@@ -142,6 +142,7 @@ func TestMapFromVMScaleSetVMWithEmptyTags(t *testing.T) {
 	vmSize := armcompute.VirtualMachineSizeTypes(size)
 	osType := armcompute.OperatingSystemTypesLinux
 	vmType := "type"
+	instanceID := "123"
 	location := "westeurope"
 	computerName := "computer_name"
 	networkProfile := armcompute.NetworkProfile{
@@ -166,6 +167,7 @@ func TestMapFromVMScaleSetVMWithEmptyTags(t *testing.T) {
 		ID:         &id,
 		Name:       &name,
 		Type:       &vmType,
+		InstanceID: &instanceID,
 		Location:   &location,
 		Tags:       nil,
 		Properties: properties,
@@ -182,6 +184,7 @@ func TestMapFromVMScaleSetVMWithEmptyTags(t *testing.T) {
 		Tags:              map[string]*string{},
 		NetworkInterfaces: []string{},
 		ScaleSet:          scaleSet,
+		InstanceID:        instanceID,
 		Size:              size,
 	}
 
@@ -197,6 +200,7 @@ func TestMapFromVMScaleSetVMWithTags(t *testing.T) {
 	vmSize := armcompute.VirtualMachineSizeTypes(size)
 	osType := armcompute.OperatingSystemTypesLinux
 	vmType := "type"
+	instanceID := "123"
 	location := "westeurope"
 	computerName := "computer_name"
 	tags := map[string]*string{
@@ -224,6 +228,7 @@ func TestMapFromVMScaleSetVMWithTags(t *testing.T) {
 		ID:         &id,
 		Name:       &name,
 		Type:       &vmType,
+		InstanceID: &instanceID,
 		Location:   &location,
 		Tags:       tags,
 		Properties: properties,
@@ -240,6 +245,7 @@ func TestMapFromVMScaleSetVMWithTags(t *testing.T) {
 		Tags:              tags,
 		NetworkInterfaces: []string{},
 		ScaleSet:          scaleSet,
+		InstanceID:        instanceID,
 		Size:              size,
 	}
 

From 0704c7254876fefbdde85fecb8ad389106312af2 Mon Sep 17 00:00:00 2001
From: Daniel Nicholls <daniel.nicholls@resdiary.com>
Date: Wed, 13 Dec 2023 14:14:01 +0000
Subject: [PATCH 035/132] Dedup code handling getting network interface

Signed-off-by: Daniel Nicholls <daniel.nicholls@resdiary.com>
---
 discovery/azure/azure.go | 28 +++++++++-------------------
 1 file changed, 9 insertions(+), 19 deletions(-)

diff --git a/discovery/azure/azure.go b/discovery/azure/azure.go
index 4a85db23220..2a0f8380b9d 100644
--- a/discovery/azure/azure.go
+++ b/discovery/azure/azure.go
@@ -411,29 +411,19 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 				} else {
 					if vm.ScaleSet == "" {
 						networkInterface, err = client.getVMNetworkInterfaceByID(ctx, nicID)
-						if err != nil {
-							if errors.Is(err, errorNotFound) {
-								level.Warn(d.logger).Log("msg", "Network interface does not exist", "name", nicID, "err", err)
-							} else {
-								ch <- target{labelSet: nil, err: err}
-							}
-							// Get out of this routine because we cannot continue without a network interface.
-							return
-						}
-						d.addToCache(nicID, networkInterface)
 					} else {
 						networkInterface, err = client.getVMScaleSetVMNetworkInterfaceByID(ctx, nicID, vm.ScaleSet, vm.InstanceID)
-						if err != nil {
-							if errors.Is(err, errorNotFound) {
-								level.Warn(d.logger).Log("msg", "Network interface does not exist", "name", nicID, "err", err)
-							} else {
-								ch <- target{labelSet: nil, err: err}
-							}
-							// Get out of this routine because we cannot continue without a network interface.
-							return
+					}
+					if err != nil {
+						if errors.Is(err, errorNotFound) {
+							level.Warn(d.logger).Log("msg", "Network interface does not exist", "name", nicID, "err", err)
+						} else {
+							ch <- target{labelSet: nil, err: err}
 						}
-						d.addToCache(nicID, networkInterface)
+						// Get out of this routine because we cannot continue without a network interface.
+						return
 					}
+					d.addToCache(nicID, networkInterface)
 				}
 
 				if networkInterface.Properties == nil {

From 69abd6d9f65a6358025461510237366f1d939c70 Mon Sep 17 00:00:00 2001
From: Arthur Silva Sens <arthur.sens@coralogix.com>
Date: Wed, 13 Dec 2023 12:12:50 -0300
Subject: [PATCH 036/132] Document feature flag
 'created-timestamp-zero-ingestion' (#13279)

Signed-off-by: Arthur Silva Sens <arthur.sens@coralogix.com>
---
 docs/feature_flags.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/docs/feature_flags.md b/docs/feature_flags.md
index 0e585f13c23..bcf8309b5c9 100644
--- a/docs/feature_flags.md
+++ b/docs/feature_flags.md
@@ -194,3 +194,13 @@ won't work when you push OTLP metrics.
 
 Enables PromQL functions that are considered experimental and whose name or
 semantics could change.
+
+## Created Timestamps Zero Injection
+
+`--enable-feature=created-timestamp-zero-ingestion`
+
+Enables ingestion of created timestamp. Created timestamps are injected as 0 valued samples when appropriate. See [PromCon talk](https://youtu.be/nWf0BfQ5EEA) for details.
+
+Currently Prometheus supports created timestamps only on the traditional Prometheus Protobuf protocol (WIP for other protocols). As a result, when enabling this feature, the Prometheus protobuf scrape protocol will be prioritized (See `scrape_config.scrape_protocols` settings for more details).
+
+Besides enabling this feature in Prometheus, created timestamps need to be exposed by the application being scraped.

From 1a8381a5011e17328d059ab80d3963cac3e507b4 Mon Sep 17 00:00:00 2001
From: Diogo Teles Sant'Anna <diogoteles@google.com>
Date: Wed, 13 Dec 2023 16:30:06 -0300
Subject: [PATCH 037/132] Add minimal permissions to script golangci-lint.yml

Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
---
 scripts/golangci-lint.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/scripts/golangci-lint.yml b/scripts/golangci-lint.yml
index 805c59fb7cc..4b292229def 100644
--- a/scripts/golangci-lint.yml
+++ b/scripts/golangci-lint.yml
@@ -12,8 +12,14 @@ on:
       - ".golangci.yml"
   pull_request:
 
+permissions:  # added using https://github.com/step-security/secure-repo
+  contents: read
+
 jobs:
   golangci:
+    permissions:
+      contents: read  # for actions/checkout to fetch code
+      pull-requests: read  # for golangci/golangci-lint-action to fetch pull requests
     name: lint
     runs-on: ubuntu-latest
     steps:

From 1f69dcfa6bfb5c53dacbe33b8aca45a6b7540cc8 Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Thu, 14 Dec 2023 11:28:15 +0100
Subject: [PATCH 038/132] Fix reusing float histograms

In https://github.com/prometheus/prometheus/pull/13276 we started reusing float histogram objects to reduce allocations in PromQL.
That PR introduces a bug where histogram pointers gets copied to the beginning of the histograms slice,
but are still kept in the end of the slice. When a new histogram is read into the last element,
it can overwrite a previous element because the pointer is the same.

This commit fixes the issue by moving outdated points to the end of the slice
so that we don't end up with duplicate pointers in the same buffer. In other words,
the slice gets rotated so that old objects can get reused.

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
---
 promql/engine.go           |  5 +++
 promql/engine_test.go      | 91 +++++++++++++++++++++++++++++---------
 tsdb/tsdbutil/histogram.go |  8 ++++
 3 files changed, 82 insertions(+), 22 deletions(-)

diff --git a/promql/engine.go b/promql/engine.go
index 16b8ee50023..12755663dc9 100644
--- a/promql/engine.go
+++ b/promql/engine.go
@@ -2052,7 +2052,12 @@ func (ev *evaluator) matrixIterSlice(
 		var drop int
 		for drop = 0; histograms[drop].T < mint; drop++ {
 		}
+		// Rotate the buffer around the drop index so that points before mint can be
+		// reused to store new histograms.
+		tail := make([]HPoint, drop)
+		copy(tail, histograms[:drop])
 		copy(histograms, histograms[drop:])
+		copy(histograms[len(histograms)-drop:], tail)
 		histograms = histograms[:len(histograms)-drop]
 		ev.currentSamples -= totalHPointSize(histograms)
 		// Only append points with timestamps after the last timestamp we have.
diff --git a/promql/engine_test.go b/promql/engine_test.go
index 9ab54dd16c5..105cdc10d55 100644
--- a/promql/engine_test.go
+++ b/promql/engine_test.go
@@ -3169,28 +3169,75 @@ func TestNativeHistogramRate(t *testing.T) {
 	}
 	require.NoError(t, app.Commit())
 
-	queryString := fmt.Sprintf("rate(%s[1m])", seriesName)
-	qry, err := engine.NewInstantQuery(context.Background(), storage, nil, queryString, timestamp.Time(int64(5*time.Minute/time.Millisecond)))
-	require.NoError(t, err)
-	res := qry.Exec(context.Background())
-	require.NoError(t, res.Err)
-	vector, err := res.Vector()
-	require.NoError(t, err)
-	require.Len(t, vector, 1)
-	actualHistogram := vector[0].H
-	expectedHistogram := &histogram.FloatHistogram{
-		CounterResetHint: histogram.GaugeType,
-		Schema:           1,
-		ZeroThreshold:    0.001,
-		ZeroCount:        1. / 15.,
-		Count:            9. / 15.,
-		Sum:              1.226666666666667,
-		PositiveSpans:    []histogram.Span{{Offset: 0, Length: 2}, {Offset: 1, Length: 2}},
-		PositiveBuckets:  []float64{1. / 15., 1. / 15., 1. / 15., 1. / 15.},
-		NegativeSpans:    []histogram.Span{{Offset: 0, Length: 2}, {Offset: 1, Length: 2}},
-		NegativeBuckets:  []float64{1. / 15., 1. / 15., 1. / 15., 1. / 15.},
-	}
-	require.Equal(t, expectedHistogram, actualHistogram)
+	queryString := fmt.Sprintf("rate(%s[45s])", seriesName)
+	t.Run("instant_query", func(t *testing.T) {
+		qry, err := engine.NewInstantQuery(context.Background(), storage, nil, queryString, timestamp.Time(int64(5*time.Minute/time.Millisecond)))
+		require.NoError(t, err)
+		res := qry.Exec(context.Background())
+		require.NoError(t, res.Err)
+		vector, err := res.Vector()
+		require.NoError(t, err)
+		require.Len(t, vector, 1)
+		actualHistogram := vector[0].H
+		expectedHistogram := &histogram.FloatHistogram{
+			CounterResetHint: histogram.GaugeType,
+			Schema:           1,
+			ZeroThreshold:    0.001,
+			ZeroCount:        1. / 15.,
+			Count:            9. / 15.,
+			Sum:              1.2266666666666663,
+			PositiveSpans:    []histogram.Span{{Offset: 0, Length: 2}, {Offset: 1, Length: 2}},
+			PositiveBuckets:  []float64{1. / 15., 1. / 15., 1. / 15., 1. / 15.},
+			NegativeSpans:    []histogram.Span{{Offset: 0, Length: 2}, {Offset: 1, Length: 2}},
+			NegativeBuckets:  []float64{1. / 15., 1. / 15., 1. / 15., 1. / 15.},
+		}
+		require.Equal(t, expectedHistogram, actualHistogram)
+	})
+
+	t.Run("range_query", func(t *testing.T) {
+		step := 30 * time.Second
+		start := timestamp.Time(int64(5 * time.Minute / time.Millisecond))
+		end := start.Add(step)
+		qry, err := engine.NewRangeQuery(context.Background(), storage, nil, queryString, start, end, step)
+		require.NoError(t, err)
+		res := qry.Exec(context.Background())
+		require.NoError(t, res.Err)
+		matrix, err := res.Matrix()
+		require.NoError(t, err)
+		require.Len(t, matrix, 1)
+		require.Len(t, matrix[0].Histograms, 2)
+		actualHistograms := matrix[0].Histograms
+		expectedHistograms := []HPoint{{
+			T: 300000,
+			H: &histogram.FloatHistogram{
+				CounterResetHint: histogram.GaugeType,
+				Schema:           1,
+				ZeroThreshold:    0.001,
+				ZeroCount:        1. / 15.,
+				Count:            9. / 15.,
+				Sum:              1.2266666666666663,
+				PositiveSpans:    []histogram.Span{{Offset: 0, Length: 2}, {Offset: 1, Length: 2}},
+				PositiveBuckets:  []float64{1. / 15., 1. / 15., 1. / 15., 1. / 15.},
+				NegativeSpans:    []histogram.Span{{Offset: 0, Length: 2}, {Offset: 1, Length: 2}},
+				NegativeBuckets:  []float64{1. / 15., 1. / 15., 1. / 15., 1. / 15.},
+			},
+		}, {
+			T: 330000,
+			H: &histogram.FloatHistogram{
+				CounterResetHint: histogram.GaugeType,
+				Schema:           1,
+				ZeroThreshold:    0.001,
+				ZeroCount:        1. / 15.,
+				Count:            9. / 15.,
+				Sum:              1.2266666666666663,
+				PositiveSpans:    []histogram.Span{{Offset: 0, Length: 2}, {Offset: 1, Length: 2}},
+				PositiveBuckets:  []float64{1. / 15., 1. / 15., 1. / 15., 1. / 15.},
+				NegativeSpans:    []histogram.Span{{Offset: 0, Length: 2}, {Offset: 1, Length: 2}},
+				NegativeBuckets:  []float64{1. / 15., 1. / 15., 1. / 15., 1. / 15.},
+			},
+		}}
+		require.Equal(t, expectedHistograms, actualHistograms)
+	})
 }
 
 func TestNativeFloatHistogramRate(t *testing.T) {
diff --git a/tsdb/tsdbutil/histogram.go b/tsdb/tsdbutil/histogram.go
index 0847f81a8ac..bb8d49b2023 100644
--- a/tsdb/tsdbutil/histogram.go
+++ b/tsdb/tsdbutil/histogram.go
@@ -30,6 +30,14 @@ func GenerateTestHistograms(n int) (r []*histogram.Histogram) {
 	return r
 }
 
+func GenerateTestHistogramsWithUnknownResetHint(n int) []*histogram.Histogram {
+	hs := GenerateTestHistograms(n)
+	for i := range hs {
+		hs[i].CounterResetHint = histogram.UnknownCounterReset
+	}
+	return hs
+}
+
 // GenerateTestHistogram but it is up to the user to set any known counter reset hint.
 func GenerateTestHistogram(i int) *histogram.Histogram {
 	return &histogram.Histogram{

From 9fb1e9715ce9871ab95a0c0ed806e9e41a9ac7c9 Mon Sep 17 00:00:00 2001
From: Arianna Vespri <arianna.vespri@yahoo.it>
Date: Thu, 14 Dec 2023 17:00:52 +0100
Subject: [PATCH 039/132] Go on adding protobuf parsing for unit

Signed-off-by: Arianna Vespri <arianna.vespri@yahoo.it>
---
 model/textparse/protobufparse.go      | 14 ++++++++++++--
 model/textparse/protobufparse_test.go |  2 ++
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/model/textparse/protobufparse.go b/model/textparse/protobufparse.go
index 9dea097a2b4..21329e2a0c7 100644
--- a/model/textparse/protobufparse.go
+++ b/model/textparse/protobufparse.go
@@ -269,8 +269,9 @@ func (p *ProtobufParser) Type() ([]byte, MetricType) {
 	return n, MetricTypeUnknown
 }
 
-// Unit always returns (nil, nil) because units aren't supported by the protobuf
-// format.
+// Unit returns the metric unit in the current entry.
+// Must only be called after Next returned a unit entry.
+// The returned byte slices become invalid after the next call to Next.
 func (p *ProtobufParser) Unit() ([]byte, []byte) {
 	return p.metricBytes.Bytes(), []byte(p.mf.GetUnit())
 }
@@ -418,6 +419,13 @@ func (p *ProtobufParser) Next() (Entry, error) {
 		default:
 			return EntryInvalid, fmt.Errorf("unknown metric type for metric %q: %s", name, p.mf.GetType())
 		}
+		unit := p.mf.GetUnit()
+		fmt.Println("This is the unit:", unit)
+		if len(unit) > 0 {
+			if !strings.HasSuffix(name, fmt.Sprintf("_%s_total", unit)) || !strings.HasSuffix(name, fmt.Sprintf("_%s", unit)) || len(name) < len(unit)+1 {
+				return EntryInvalid, fmt.Errorf("invalid unit for metric %q: %s", name, unit)
+			}
+		}
 		p.metricBytes.Reset()
 		p.metricBytes.WriteString(name)
 
@@ -435,6 +443,8 @@ func (p *ProtobufParser) Next() (Entry, error) {
 		if err := p.updateMetricBytes(); err != nil {
 			return EntryInvalid, err
 		}
+	// case EntryUnit:
+	//	p.state = EntryType // what is the right state and place for this?
 	case EntryHistogram, EntrySeries:
 		if p.redoClassic {
 			p.redoClassic = false
diff --git a/model/textparse/protobufparse_test.go b/model/textparse/protobufparse_test.go
index e062e64dd13..a5b22e36093 100644
--- a/model/textparse/protobufparse_test.go
+++ b/model/textparse/protobufparse_test.go
@@ -58,6 +58,7 @@ metric: <
 		`name: "go_memstats_alloc_bytes_total"
 help: "Total number of bytes allocated, even if freed."
 type: COUNTER
+unit: "bytes"
 metric: <
   counter: <
     value: 1.546544e+06
@@ -665,6 +666,7 @@ func TestProtobufParse(t *testing.T) {
 				{
 					m:    "go_memstats_alloc_bytes_total",
 					help: "Total number of bytes allocated, even if freed.",
+					unit: "bytes",
 				},
 				{
 					m:   "go_memstats_alloc_bytes_total",

From 952cb41373c00a46c060ade00e8ecc85603ef758 Mon Sep 17 00:00:00 2001
From: Matthieu MOREL <matthieu.morel35@gmail.com>
Date: Fri, 15 Dec 2023 10:21:18 +0000
Subject: [PATCH 040/132] build(deps): bump
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
---
 discovery/azure/azure.go      |  4 ++--
 discovery/azure/azure_test.go |  2 +-
 go.mod                        |  7 +++----
 go.sum                        | 14 ++++++--------
 4 files changed, 12 insertions(+), 15 deletions(-)

diff --git a/discovery/azure/azure.go b/discovery/azure/azure.go
index 4a85db23220..6637e9800d6 100644
--- a/discovery/azure/azure.go
+++ b/discovery/azure/azure.go
@@ -30,8 +30,8 @@ import (
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/to"
 	"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
-	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4"
-	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2"
+	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5"
+	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4"
 	cache "github.com/Code-Hex/go-generics-cache"
 	"github.com/Code-Hex/go-generics-cache/policy/lru"
 	"github.com/go-kit/log"
diff --git a/discovery/azure/azure_test.go b/discovery/azure/azure_test.go
index 024cf759152..4ff937e0bc4 100644
--- a/discovery/azure/azure_test.go
+++ b/discovery/azure/azure_test.go
@@ -17,7 +17,7 @@ import (
 	"testing"
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/arm"
-	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4"
+	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5"
 	"github.com/stretchr/testify/require"
 	"go.uber.org/goleak"
 )
diff --git a/go.mod b/go.mod
index 770607e9cec..9ea078083f7 100644
--- a/go.mod
+++ b/go.mod
@@ -5,8 +5,9 @@ go 1.20
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0
 	github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0
-	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1
-	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.3.0
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0
+	github.com/Code-Hex/go-generics-cache v1.3.1
 	github.com/alecthomas/kingpin/v2 v2.4.0
 	github.com/alecthomas/units v0.0.0-20231202071711-9a357b53e9c9
 	github.com/aws/aws-sdk-go v1.48.14
@@ -93,9 +94,7 @@ require (
 	cloud.google.com/go/compute v1.23.3 // indirect
 	cloud.google.com/go/compute/metadata v0.2.3 // indirect
 	github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.0 // indirect
-	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork v1.1.0 // indirect
 	github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1 // indirect
-	github.com/Code-Hex/go-generics-cache v1.3.1
 	github.com/Microsoft/go-winio v0.6.1 // indirect
 	github.com/armon/go-metrics v0.4.1 // indirect
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
diff --git a/go.sum b/go.sum
index ae367bb90c8..a6f535dd72f 100644
--- a/go.sum
+++ b/go.sum
@@ -40,14 +40,12 @@ github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 h1:BMAjVKJM0U/CYF27gA0ZM
 github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0/go.mod h1:1fXstnBMas5kzG+S3q8UoJcmyU6nUeunJcMDHcRYHhs=
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.0 h1:d81/ng9rET2YqdVkVwkb6EXeRrLJIwyGnJcAlAWKwhs=
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.0/go.mod h1:s4kgfzA0covAXNicZHDMN58jExvcng2mC/DepXiF1EI=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1 h1:UPeCRD+XY7QlaGQte2EVI2iOcWvUYA2XY8w5T/8v0NQ=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1/go.mod h1:oGV6NlB0cvi1ZbYRR2UN44QHxWFyGk+iylgD0qaMXjA=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal v1.1.2 h1:mLY+pNLjCUeKhgnAJWAKhEUQM+RJQo2H1fuGSw1Ky1E=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork v1.1.0 h1:QM6sE5k2ZT/vI5BEe0r7mqjsUSnhVBFbOsVkEuaEfiA=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork v1.1.0/go.mod h1:243D9iHbcQXoFUtgHJwL7gl2zx1aDuDMjvBZVGr2uW0=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1 h1:bWh0Z2rOEDfB/ywv/l0iHN1JgyazE6kW/aIA89+CEK0=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1/go.mod h1:Bzf34hhAE9NSxailk8xVeLEZbUjOXcC+GnU1mMKdhLw=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.0.0 h1:ECsQtyERDVz3NP3kvDOTLvbQhqWp/x9EsGKtb4ogUr8=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.3.0 h1:qgs/VAMSR+9qFhwTw4OwF2NbVuw+2m83pVZJjqkKQMw=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.3.0/go.mod h1:uYt4CfhkJA9o0FN7jfE5minm/i4nUE4MjGUJkzB6Zs8=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v2 v2.0.0 h1:PTFGRSlMKCQelWwxUyYVEUqseBJVemLyqWJjvMyt0do=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0 h1:bXwSugBiSbgtz7rOtbfGf+woewp4f06orW9OP5BjHLA=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0/go.mod h1:Y/HgrePTmGy9HjdSGTqZNa+apUpTVIEVKXJyARP2lrk=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.1.1 h1:7CBQ+Ei8SP2c6ydQTGCCrS35bDxgTMfoP2miAwK++OU=
 github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 h1:UQHMgLO+TxOElx5B5HZ4hJQsoJ/PvUvKRhJHDQXO8P8=
 github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
 github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1 h1:WpB/QDNLpMw72xHJc34BNNykqSOeEJDAWkhf0u12/Jk=

From ea9708648434513cb543e00b745a2f4cff9570f5 Mon Sep 17 00:00:00 2001
From: machine424 <ayoubmrini424@gmail.com>
Date: Fri, 15 Dec 2023 18:03:50 +0100
Subject: [PATCH 041/132] ui: create a reproduction for
 https://github.com/prometheus/prometheus/issues/13292

Signed-off-by: machine424 <ayoubmrini424@gmail.com>
---
 .../pages/graph/GraphHeatmapHelpers.test.ts   | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.test.ts

diff --git a/web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.test.ts b/web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.test.ts
new file mode 100644
index 00000000000..dfc71858728
--- /dev/null
+++ b/web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.test.ts
@@ -0,0 +1,27 @@
+import { isHeatmapData } from './GraphHeatmapHelpers';
+
+describe('GraphHeatmapHelpers', () => {
+  it('isHeatmapData should return false for a vector', () => {
+    const data = {
+      resultType: 'vector',
+      result: [
+        {
+          metric: {
+            __name__: 'my_gauge',
+            job: 'target',
+          },
+          value: [1703091180.683, '6'],
+        },
+      ],
+    };
+    expect(isHeatmapData(data)).toBe(false);
+  });
+
+  it('isHeatmapData should return false for scalar resultType', () => {
+    const data = {
+      resultType: 'scalar',
+      result: [1703091180.125, '1703091180.125'],
+    };
+    expect(isHeatmapData(data)).toBe(false);
+  });
+});

From b65021d7a590810164d99afd99a13915e6ea38ec Mon Sep 17 00:00:00 2001
From: Arianna Vespri <arianna.vespri@yahoo.it>
Date: Sun, 17 Dec 2023 14:09:14 +0100
Subject: [PATCH 042/132] Get conditional right

Signed-off-by: Arianna Vespri <arianna.vespri@yahoo.it>
---
 model/textparse/protobufparse.go | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/model/textparse/protobufparse.go b/model/textparse/protobufparse.go
index 21329e2a0c7..685ad08f1aa 100644
--- a/model/textparse/protobufparse.go
+++ b/model/textparse/protobufparse.go
@@ -421,8 +421,13 @@ func (p *ProtobufParser) Next() (Entry, error) {
 		}
 		unit := p.mf.GetUnit()
 		fmt.Println("This is the unit:", unit)
+		fmt.Println("This is the name:", name)
 		if len(unit) > 0 {
-			if !strings.HasSuffix(name, fmt.Sprintf("_%s_total", unit)) || !strings.HasSuffix(name, fmt.Sprintf("_%s", unit)) || len(name) < len(unit)+1 {
+			sfx := fmt.Sprintf("_%s", unit)
+			if p.mf.GetType() == dto.MetricType_COUNTER {
+				sfx = fmt.Sprintf("_%s_total", unit)
+			}
+			if !strings.HasSuffix(name, sfx) {
 				return EntryInvalid, fmt.Errorf("invalid unit for metric %q: %s", name, unit)
 			}
 		}
@@ -443,8 +448,6 @@ func (p *ProtobufParser) Next() (Entry, error) {
 		if err := p.updateMetricBytes(); err != nil {
 			return EntryInvalid, err
 		}
-	// case EntryUnit:
-	//	p.state = EntryType // what is the right state and place for this?
 	case EntryHistogram, EntrySeries:
 		if p.redoClassic {
 			p.redoClassic = false

From 9ab7e3b3dec4b82870487154dce53baa3266a614 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Mon, 18 Dec 2023 14:52:42 +0000
Subject: [PATCH 043/132] relabel: refactor: extract config.Validate method

And add a test for it, which fails because validation is not strong enough.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 model/relabel/relabel.go      |  4 ++
 model/relabel/relabel_test.go | 72 +++++++++++++++++++++++++++++++++++
 2 files changed, 76 insertions(+)

diff --git a/model/relabel/relabel.go b/model/relabel/relabel.go
index fadf35b8670..fa0d809de81 100644
--- a/model/relabel/relabel.go
+++ b/model/relabel/relabel.go
@@ -108,6 +108,10 @@ func (c *Config) UnmarshalYAML(unmarshal func(interface{}) error) error {
 	if c.Regex.Regexp == nil {
 		c.Regex = MustNewRegexp("")
 	}
+	return c.Validate()
+}
+
+func (c *Config) Validate() error {
 	if c.Action == "" {
 		return fmt.Errorf("relabel action cannot be empty")
 	}
diff --git a/model/relabel/relabel_test.go b/model/relabel/relabel_test.go
index b50ff4010a9..fe040be3ac1 100644
--- a/model/relabel/relabel_test.go
+++ b/model/relabel/relabel_test.go
@@ -14,6 +14,7 @@
 package relabel
 
 import (
+	"fmt"
 	"testing"
 
 	"github.com/prometheus/common/model"
@@ -575,6 +576,77 @@ func TestRelabel(t *testing.T) {
 	}
 }
 
+func TestRelabelValidate(t *testing.T) {
+	tests := []struct {
+		config   Config
+		expected string
+	}{
+		{
+			config:   Config{},
+			expected: `relabel action cannot be empty`,
+		},
+		{
+			config: Config{
+				Action: Replace,
+			},
+			expected: `requires 'target_label' value`,
+		},
+		{
+			config: Config{
+				Action: Lowercase,
+			},
+			expected: `requires 'target_label' value`,
+		},
+		{
+			config: Config{
+				Action:      Lowercase,
+				Replacement: DefaultRelabelConfig.Replacement,
+				TargetLabel: "${3}",
+			},
+			expected: `"${3}" is invalid 'target_label'`,
+		},
+		{
+			config: Config{
+				SourceLabels: model.LabelNames{"a"},
+				Regex:        MustNewRegexp("some-([^-]+)-([^,]+)"),
+				Action:       Replace,
+				Replacement:  "${1}",
+				TargetLabel:  "${3}",
+			},
+		},
+		{
+			config: Config{
+				SourceLabels: model.LabelNames{"a"},
+				Regex:        MustNewRegexp("some-([^-]+)-([^,]+)"),
+				Action:       Replace,
+				Replacement:  "${1}",
+				TargetLabel:  "0${3}",
+			},
+			expected: `"0${3}" is invalid 'target_label'`,
+		},
+		{
+			config: Config{
+				SourceLabels: model.LabelNames{"a"},
+				Regex:        MustNewRegexp("some-([^-]+)-([^,]+)"),
+				Action:       Replace,
+				Replacement:  "${1}",
+				TargetLabel:  "-${3}",
+			},
+			expected: `"-${3}" is invalid 'target_label' for replace action`,
+		},
+	}
+	for i, test := range tests {
+		t.Run(fmt.Sprint(i), func(t *testing.T) {
+			err := test.config.Validate()
+			if test.expected == "" {
+				require.NoError(t, err)
+			} else {
+				require.ErrorContains(t, err, test.expected)
+			}
+		})
+	}
+}
+
 func TestTargetLabelValidity(t *testing.T) {
 	tests := []struct {
 		str   string

From 2d4c367d87cdd99eac1b4786cf1621c58d43735d Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Mon, 18 Dec 2023 14:58:56 +0000
Subject: [PATCH 044/132] relabel: stricter check that target labels are valid

For `Lowercase`, `KeepEqual`, etc., we do not expand a regexp, so
the target label name must not contain anything like `${1}`.

Also for the common case that the `Replace` target does not require any
template expansion, check that the entire string passes label name
validity rules.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 model/relabel/relabel.go | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/model/relabel/relabel.go b/model/relabel/relabel.go
index fa0d809de81..1947e627324 100644
--- a/model/relabel/relabel.go
+++ b/model/relabel/relabel.go
@@ -121,7 +121,13 @@ func (c *Config) Validate() error {
 	if (c.Action == Replace || c.Action == HashMod || c.Action == Lowercase || c.Action == Uppercase || c.Action == KeepEqual || c.Action == DropEqual) && c.TargetLabel == "" {
 		return fmt.Errorf("relabel configuration for %s action requires 'target_label' value", c.Action)
 	}
-	if (c.Action == Replace || c.Action == Lowercase || c.Action == Uppercase || c.Action == KeepEqual || c.Action == DropEqual) && !relabelTarget.MatchString(c.TargetLabel) {
+	if c.Action == Replace && !strings.Contains(c.TargetLabel, "$") && !model.LabelName(c.TargetLabel).IsValid() {
+		return fmt.Errorf("%q is invalid 'target_label' for %s action", c.TargetLabel, c.Action)
+	}
+	if c.Action == Replace && strings.Contains(c.TargetLabel, "$") && !relabelTarget.MatchString(c.TargetLabel) {
+		return fmt.Errorf("%q is invalid 'target_label' for %s action", c.TargetLabel, c.Action)
+	}
+	if (c.Action == Lowercase || c.Action == Uppercase || c.Action == KeepEqual || c.Action == DropEqual) && !model.LabelName(c.TargetLabel).IsValid() {
 		return fmt.Errorf("%q is invalid 'target_label' for %s action", c.TargetLabel, c.Action)
 	}
 	if (c.Action == Lowercase || c.Action == Uppercase || c.Action == KeepEqual || c.Action == DropEqual) && c.Replacement != DefaultRelabelConfig.Replacement {

From 000182e4b8638bfe781a583c27a1e8a366ac82bf Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Mon, 18 Dec 2023 15:03:21 +0000
Subject: [PATCH 045/132] relabel: check validity of all test cases

Thought this would be a nice check on the `Validate()` function, but
some of the test cases needed tweaking to pass.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 model/relabel/relabel_test.go | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/model/relabel/relabel_test.go b/model/relabel/relabel_test.go
index fe040be3ac1..2b8fc911d63 100644
--- a/model/relabel/relabel_test.go
+++ b/model/relabel/relabel_test.go
@@ -335,7 +335,7 @@ func TestRelabel(t *testing.T) {
 		},
 		{ // invalid target_labels
 			input: labels.FromMap(map[string]string{
-				"a": "some-name-value",
+				"a": "some-name-0",
 			}),
 			relabel: []*Config{
 				{
@@ -350,18 +350,18 @@ func TestRelabel(t *testing.T) {
 					Regex:        MustNewRegexp("some-([^-]+)-([^,]+)"),
 					Action:       Replace,
 					Replacement:  "${1}",
-					TargetLabel:  "0${3}",
+					TargetLabel:  "${3}",
 				},
 				{
 					SourceLabels: model.LabelNames{"a"},
-					Regex:        MustNewRegexp("some-([^-]+)-([^,]+)"),
+					Regex:        MustNewRegexp("some-([^-]+)(-[^,]+)"),
 					Action:       Replace,
 					Replacement:  "${1}",
-					TargetLabel:  "-${3}",
+					TargetLabel:  "${3}",
 				},
 			},
 			output: labels.FromMap(map[string]string{
-				"a": "some-name-value",
+				"a": "some-name-0",
 			}),
 		},
 		{ // more complex real-life like usecase
@@ -566,6 +566,7 @@ func TestRelabel(t *testing.T) {
 			if cfg.Replacement == "" {
 				cfg.Replacement = DefaultRelabelConfig.Replacement
 			}
+			require.NoError(t, cfg.Validate())
 		}
 
 		res, keep := Process(test.input, test.relabel...)

From 0289dd61571c7a812a235ecec5bc3f74fd7ccf50 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Mon, 18 Dec 2023 16:38:59 +0000
Subject: [PATCH 046/132] relabel: blank replacement deletes label post-regexp

If `cfg.TargetLabel` is a template like `$1`, it won't match any labels,
so no point calling `lb.Del` with it.

Similarly if `target` is not a valid label name, it won't match any
labels, so don't call with that either.

The intention seems to have been that a blank _value_ would delete the
target, so change that code to use `target` instead of `cfg.TargetLabel`.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 model/relabel/relabel.go      |  3 +--
 model/relabel/relabel_test.go | 19 +++++++++++++++++++
 2 files changed, 20 insertions(+), 2 deletions(-)

diff --git a/model/relabel/relabel.go b/model/relabel/relabel.go
index 1947e627324..d29c3d07aeb 100644
--- a/model/relabel/relabel.go
+++ b/model/relabel/relabel.go
@@ -274,12 +274,11 @@ func relabel(cfg *Config, lb *labels.Builder) (keep bool) {
 		}
 		target := model.LabelName(cfg.Regex.ExpandString([]byte{}, cfg.TargetLabel, val, indexes))
 		if !target.IsValid() {
-			lb.Del(cfg.TargetLabel)
 			break
 		}
 		res := cfg.Regex.ExpandString([]byte{}, cfg.Replacement, val, indexes)
 		if len(res) == 0 {
-			lb.Del(cfg.TargetLabel)
+			lb.Del(string(target))
 			break
 		}
 		lb.Set(string(target), string(res))
diff --git a/model/relabel/relabel_test.go b/model/relabel/relabel_test.go
index 2b8fc911d63..517b9b8223c 100644
--- a/model/relabel/relabel_test.go
+++ b/model/relabel/relabel_test.go
@@ -214,6 +214,25 @@ func TestRelabel(t *testing.T) {
 				"a": "boo",
 			}),
 		},
+		{
+			// Blank replacement should delete the label.
+			input: labels.FromMap(map[string]string{
+				"a": "foo",
+				"f": "baz",
+			}),
+			relabel: []*Config{
+				{
+					SourceLabels: model.LabelNames{"a"},
+					Regex:        MustNewRegexp("(f).*"),
+					TargetLabel:  "$1",
+					Replacement:  "$2",
+					Action:       Replace,
+				},
+			},
+			output: labels.FromMap(map[string]string{
+				"a": "foo",
+			}),
+		},
 		{
 			input: labels.FromMap(map[string]string{
 				"a": "foo",

From 8065bef172e8d88e22399504b175a8c9115e9da3 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Wed, 22 Nov 2023 14:39:21 +0000
Subject: [PATCH 047/132] Move metric type definitions to common/model

They are used in multiple repos, so common is a better place for them.
Several packages now don't depend on `model/textparse`, e.g.
`storage/remote`.

Also remove `metadata` struct from `api.go`, since it was identical to
a struct in the `metadata` package.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 go.mod                                   |   2 +-
 go.sum                                   |   4 +-
 model/metadata/metadata.go               |   4 +-
 model/textparse/interface.go             |  16 +---
 model/textparse/openmetricsparse.go      |  20 +++--
 model/textparse/openmetricsparse_test.go |  25 +++---
 model/textparse/promparse.go             |  12 +--
 model/textparse/promparse_test.go        |   6 +-
 model/textparse/protobufparse.go         |  14 +--
 model/textparse/protobufparse_test.go    |  69 +++++++--------
 scrape/scrape.go                         |   6 +-
 scrape/scrape_test.go                    |   6 +-
 storage/remote/codec.go                  |   3 +-
 storage/remote/codec_test.go             |   8 +-
 storage/remote/metadata_watcher_test.go  |   7 +-
 storage/remote/queue_manager_test.go     |   3 +-
 tsdb/head_append.go                      |   2 +-
 tsdb/head_wal.go                         |   2 +-
 tsdb/record/record.go                    |  37 ++++----
 web/api/v1/api.go                        |  32 +++----
 web/api/v1/api_test.go                   | 104 +++++++++++------------
 21 files changed, 185 insertions(+), 197 deletions(-)

diff --git a/go.mod b/go.mod
index 9ea078083f7..0ecfd437444 100644
--- a/go.mod
+++ b/go.mod
@@ -48,7 +48,7 @@ require (
 	github.com/prometheus/alertmanager v0.26.0
 	github.com/prometheus/client_golang v1.17.0
 	github.com/prometheus/client_model v0.5.0
-	github.com/prometheus/common v0.45.0
+	github.com/prometheus/common v0.45.1-0.20231122191551-832cd6e99f99
 	github.com/prometheus/common/assets v0.2.0
 	github.com/prometheus/common/sigv4 v0.1.0
 	github.com/prometheus/exporter-toolkit v0.10.0
diff --git a/go.sum b/go.sum
index a6f535dd72f..fb31c7a8491 100644
--- a/go.sum
+++ b/go.sum
@@ -653,8 +653,8 @@ github.com/prometheus/common v0.9.1/go.mod h1:yhUN8i9wzaXS3w1O07YhxHEBxD+W35wd8b
 github.com/prometheus/common v0.10.0/go.mod h1:Tlit/dnDKsSWFlCLTWaA1cyBgKHSMdTB80sz/V91rCo=
 github.com/prometheus/common v0.26.0/go.mod h1:M7rCNAaPfAosfx8veZJCuw84e35h3Cfd9VFqTh1DIvc=
 github.com/prometheus/common v0.29.0/go.mod h1:vu+V0TpY+O6vW9J44gczi3Ap/oXXR10b+M/gUGO4Hls=
-github.com/prometheus/common v0.45.0 h1:2BGz0eBc2hdMDLnO/8n0jeB3oPrt2D08CekT0lneoxM=
-github.com/prometheus/common v0.45.0/go.mod h1:YJmSTw9BoKxJplESWWxlbyttQR4uaEcGyv9MZjVOJsY=
+github.com/prometheus/common v0.45.1-0.20231122191551-832cd6e99f99 h1:V5ajRiLiCQGO+ggTr+07gMUcTqlIMMkDBfrJe5zKLmc=
+github.com/prometheus/common v0.45.1-0.20231122191551-832cd6e99f99/go.mod h1:YJmSTw9BoKxJplESWWxlbyttQR4uaEcGyv9MZjVOJsY=
 github.com/prometheus/common/assets v0.2.0 h1:0P5OrzoHrYBOSM1OigWL3mY8ZvV2N4zIE/5AahrSrfM=
 github.com/prometheus/common/assets v0.2.0/go.mod h1:D17UVUE12bHbim7HzwUvtqm6gwBEaDQ0F+hIGbFbccI=
 github.com/prometheus/common/sigv4 v0.1.0 h1:qoVebwtwwEhS85Czm2dSROY5fTo2PAPEVdDeppTwGX4=
diff --git a/model/metadata/metadata.go b/model/metadata/metadata.go
index f227af0b951..f6f2827a466 100644
--- a/model/metadata/metadata.go
+++ b/model/metadata/metadata.go
@@ -13,11 +13,11 @@
 
 package metadata
 
-import "github.com/prometheus/prometheus/model/textparse"
+import "github.com/prometheus/common/model"
 
 // Metadata stores a series' metadata information.
 type Metadata struct {
-	Type textparse.MetricType
+	Type model.MetricType
 	Unit string
 	Help string
 }
diff --git a/model/textparse/interface.go b/model/textparse/interface.go
index df4259c85c9..f6d93f06373 100644
--- a/model/textparse/interface.go
+++ b/model/textparse/interface.go
@@ -16,6 +16,8 @@ package textparse
 import (
 	"mime"
 
+	"github.com/prometheus/common/model"
+
 	"github.com/prometheus/prometheus/model/exemplar"
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
@@ -110,16 +112,4 @@ const (
 	EntryHistogram Entry = 5 // A series with a native histogram as a value.
 )
 
-// MetricType represents metric type values.
-type MetricType string
-
-const (
-	MetricTypeCounter        = MetricType("counter")
-	MetricTypeGauge          = MetricType("gauge")
-	MetricTypeHistogram      = MetricType("histogram")
-	MetricTypeGaugeHistogram = MetricType("gaugehistogram")
-	MetricTypeSummary        = MetricType("summary")
-	MetricTypeInfo           = MetricType("info")
-	MetricTypeStateset       = MetricType("stateset")
-	MetricTypeUnknown        = MetricType("unknown")
-)
+type MetricType = model.MetricType
diff --git a/model/textparse/openmetricsparse.go b/model/textparse/openmetricsparse.go
index f0c383723d3..d6b01eb8ed9 100644
--- a/model/textparse/openmetricsparse.go
+++ b/model/textparse/openmetricsparse.go
@@ -24,6 +24,8 @@ import (
 	"strings"
 	"unicode/utf8"
 
+	"github.com/prometheus/common/model"
+
 	"github.com/prometheus/prometheus/model/exemplar"
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
@@ -74,7 +76,7 @@ type OpenMetricsParser struct {
 	builder labels.ScratchBuilder
 	series  []byte
 	text    []byte
-	mtype   MetricType
+	mtype   model.MetricType
 	val     float64
 	ts      int64
 	hasTS   bool
@@ -272,21 +274,21 @@ func (p *OpenMetricsParser) Next() (Entry, error) {
 		case tType:
 			switch s := yoloString(p.text); s {
 			case "counter":
-				p.mtype = MetricTypeCounter
+				p.mtype = model.MetricTypeCounter
 			case "gauge":
-				p.mtype = MetricTypeGauge
+				p.mtype = model.MetricTypeGauge
 			case "histogram":
-				p.mtype = MetricTypeHistogram
+				p.mtype = model.MetricTypeHistogram
 			case "gaugehistogram":
-				p.mtype = MetricTypeGaugeHistogram
+				p.mtype = model.MetricTypeGaugeHistogram
 			case "summary":
-				p.mtype = MetricTypeSummary
+				p.mtype = model.MetricTypeSummary
 			case "info":
-				p.mtype = MetricTypeInfo
+				p.mtype = model.MetricTypeInfo
 			case "stateset":
-				p.mtype = MetricTypeStateset
+				p.mtype = model.MetricTypeStateset
 			case "unknown":
-				p.mtype = MetricTypeUnknown
+				p.mtype = model.MetricTypeUnknown
 			default:
 				return EntryInvalid, fmt.Errorf("invalid metric type %q", s)
 			}
diff --git a/model/textparse/openmetricsparse_test.go b/model/textparse/openmetricsparse_test.go
index eed30364c55..2b1d909f38a 100644
--- a/model/textparse/openmetricsparse_test.go
+++ b/model/textparse/openmetricsparse_test.go
@@ -18,6 +18,7 @@ import (
 	"io"
 	"testing"
 
+	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 
 	"github.com/prometheus/prometheus/model/exemplar"
@@ -77,7 +78,7 @@ foo_total 17.0 1520879607.789 # {id="counter-test"} 5`
 		m       string
 		t       *int64
 		v       float64
-		typ     MetricType
+		typ     model.MetricType
 		help    string
 		unit    string
 		comment string
@@ -88,7 +89,7 @@ foo_total 17.0 1520879607.789 # {id="counter-test"} 5`
 			help: "A summary of the GC invocation durations.",
 		}, {
 			m:   "go_gc_duration_seconds",
-			typ: MetricTypeSummary,
+			typ: model.MetricTypeSummary,
 		}, {
 			m:    "go_gc_duration_seconds",
 			unit: "seconds",
@@ -130,7 +131,7 @@ foo_total 17.0 1520879607.789 # {id="counter-test"} 5`
 			help: "Number of goroutines that currently exist.",
 		}, {
 			m:   "go_goroutines",
-			typ: MetricTypeGauge,
+			typ: model.MetricTypeGauge,
 		}, {
 			m:    `go_goroutines`,
 			v:    33,
@@ -138,21 +139,21 @@ foo_total 17.0 1520879607.789 # {id="counter-test"} 5`
 			lset: labels.FromStrings("__name__", "go_goroutines"),
 		}, {
 			m:   "hh",
-			typ: MetricTypeHistogram,
+			typ: model.MetricTypeHistogram,
 		}, {
 			m:    `hh_bucket{le="+Inf"}`,
 			v:    1,
 			lset: labels.FromStrings("__name__", "hh_bucket", "le", "+Inf"),
 		}, {
 			m:   "gh",
-			typ: MetricTypeGaugeHistogram,
+			typ: model.MetricTypeGaugeHistogram,
 		}, {
 			m:    `gh_bucket{le="+Inf"}`,
 			v:    1,
 			lset: labels.FromStrings("__name__", "gh_bucket", "le", "+Inf"),
 		}, {
 			m:   "hhh",
-			typ: MetricTypeHistogram,
+			typ: model.MetricTypeHistogram,
 		}, {
 			m:    `hhh_bucket{le="+Inf"}`,
 			v:    1,
@@ -165,7 +166,7 @@ foo_total 17.0 1520879607.789 # {id="counter-test"} 5`
 			e:    &exemplar.Exemplar{Labels: labels.FromStrings("id", "histogram-count-test"), Value: 4},
 		}, {
 			m:   "ggh",
-			typ: MetricTypeGaugeHistogram,
+			typ: model.MetricTypeGaugeHistogram,
 		}, {
 			m:    `ggh_bucket{le="+Inf"}`,
 			v:    1,
@@ -178,7 +179,7 @@ foo_total 17.0 1520879607.789 # {id="counter-test"} 5`
 			e:    &exemplar.Exemplar{Labels: labels.FromStrings("id", "gaugehistogram-count-test", "xx", "yy"), Value: 4, HasTs: true, Ts: 123123},
 		}, {
 			m:   "smr_seconds",
-			typ: MetricTypeSummary,
+			typ: model.MetricTypeSummary,
 		}, {
 			m:    `smr_seconds_count`,
 			v:    2,
@@ -191,14 +192,14 @@ foo_total 17.0 1520879607.789 # {id="counter-test"} 5`
 			e:    &exemplar.Exemplar{Labels: labels.FromStrings("id", "summary-sum-test"), Value: 1, HasTs: true, Ts: 123321},
 		}, {
 			m:   "ii",
-			typ: MetricTypeInfo,
+			typ: model.MetricTypeInfo,
 		}, {
 			m:    `ii{foo="bar"}`,
 			v:    1,
 			lset: labels.FromStrings("__name__", "ii", "foo", "bar"),
 		}, {
 			m:   "ss",
-			typ: MetricTypeStateset,
+			typ: model.MetricTypeStateset,
 		}, {
 			m:    `ss{ss="foo"}`,
 			v:    1,
@@ -213,7 +214,7 @@ foo_total 17.0 1520879607.789 # {id="counter-test"} 5`
 			lset: labels.FromStrings("A", "a", "__name__", "ss"),
 		}, {
 			m:   "un",
-			typ: MetricTypeUnknown,
+			typ: model.MetricTypeUnknown,
 		}, {
 			m:    "_metric_starting_with_underscore",
 			v:    1,
@@ -228,7 +229,7 @@ foo_total 17.0 1520879607.789 # {id="counter-test"} 5`
 			lset: labels.FromStrings("__name__", "testmetric", "label", `"bar"`),
 		}, {
 			m:   "foo",
-			typ: MetricTypeCounter,
+			typ: model.MetricTypeCounter,
 		}, {
 			m:    "foo_total",
 			v:    17,
diff --git a/model/textparse/promparse.go b/model/textparse/promparse.go
index 935801fb9e6..cd028ef9040 100644
--- a/model/textparse/promparse.go
+++ b/model/textparse/promparse.go
@@ -26,6 +26,8 @@ import (
 	"unicode/utf8"
 	"unsafe"
 
+	"github.com/prometheus/common/model"
+
 	"github.com/prometheus/prometheus/model/exemplar"
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
@@ -305,15 +307,15 @@ func (p *PromParser) Next() (Entry, error) {
 		case tType:
 			switch s := yoloString(p.text); s {
 			case "counter":
-				p.mtype = MetricTypeCounter
+				p.mtype = model.MetricTypeCounter
 			case "gauge":
-				p.mtype = MetricTypeGauge
+				p.mtype = model.MetricTypeGauge
 			case "histogram":
-				p.mtype = MetricTypeHistogram
+				p.mtype = model.MetricTypeHistogram
 			case "summary":
-				p.mtype = MetricTypeSummary
+				p.mtype = model.MetricTypeSummary
 			case "untyped":
-				p.mtype = MetricTypeUnknown
+				p.mtype = model.MetricTypeUnknown
 			default:
 				return EntryInvalid, fmt.Errorf("invalid metric type %q", s)
 			}
diff --git a/model/textparse/promparse_test.go b/model/textparse/promparse_test.go
index ac79a1394ef..d34b26ba5c7 100644
--- a/model/textparse/promparse_test.go
+++ b/model/textparse/promparse_test.go
@@ -65,7 +65,7 @@ testmetric{label="\"bar\""} 1`
 		m       string
 		t       *int64
 		v       float64
-		typ     MetricType
+		typ     model.MetricType
 		help    string
 		comment string
 	}{
@@ -74,7 +74,7 @@ testmetric{label="\"bar\""} 1`
 			help: "A summary of the GC invocation durations.",
 		}, {
 			m:   "go_gc_duration_seconds",
-			typ: MetricTypeSummary,
+			typ: model.MetricTypeSummary,
 		}, {
 			m:    `go_gc_duration_seconds{quantile="0"}`,
 			v:    4.9351e-05,
@@ -142,7 +142,7 @@ testmetric{label="\"bar\""} 1`
 			help: "Number of goroutines that currently exist.",
 		}, {
 			m:   "go_goroutines",
-			typ: MetricTypeGauge,
+			typ: model.MetricTypeGauge,
 		}, {
 			m:    `go_goroutines`,
 			v:    33,
diff --git a/model/textparse/protobufparse.go b/model/textparse/protobufparse.go
index baede7e1dd5..534bbebb203 100644
--- a/model/textparse/protobufparse.go
+++ b/model/textparse/protobufparse.go
@@ -252,21 +252,21 @@ func (p *ProtobufParser) Help() ([]byte, []byte) {
 // Type returns the metric name and type in the current entry.
 // Must only be called after Next returned a type entry.
 // The returned byte slices become invalid after the next call to Next.
-func (p *ProtobufParser) Type() ([]byte, MetricType) {
+func (p *ProtobufParser) Type() ([]byte, model.MetricType) {
 	n := p.metricBytes.Bytes()
 	switch p.mf.GetType() {
 	case dto.MetricType_COUNTER:
-		return n, MetricTypeCounter
+		return n, model.MetricTypeCounter
 	case dto.MetricType_GAUGE:
-		return n, MetricTypeGauge
+		return n, model.MetricTypeGauge
 	case dto.MetricType_HISTOGRAM:
-		return n, MetricTypeHistogram
+		return n, model.MetricTypeHistogram
 	case dto.MetricType_GAUGE_HISTOGRAM:
-		return n, MetricTypeGaugeHistogram
+		return n, model.MetricTypeGaugeHistogram
 	case dto.MetricType_SUMMARY:
-		return n, MetricTypeSummary
+		return n, model.MetricTypeSummary
 	}
-	return n, MetricTypeUnknown
+	return n, model.MetricTypeUnknown
 }
 
 // Unit always returns (nil, nil) because units aren't supported by the protobuf
diff --git a/model/textparse/protobufparse_test.go b/model/textparse/protobufparse_test.go
index c5b672dbc0e..f994ff966c0 100644
--- a/model/textparse/protobufparse_test.go
+++ b/model/textparse/protobufparse_test.go
@@ -21,6 +21,7 @@ import (
 	"testing"
 
 	"github.com/gogo/protobuf/proto"
+	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 
 	"github.com/prometheus/prometheus/model/exemplar"
@@ -649,7 +650,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "go_build_info",
-					typ: MetricTypeGauge,
+					typ: model.MetricTypeGauge,
 				},
 				{
 					m: "go_build_info\xFFchecksum\xFF\xFFpath\xFFgithub.com/prometheus/client_golang\xFFversion\xFF(devel)",
@@ -667,7 +668,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "go_memstats_alloc_bytes_total",
-					typ: MetricTypeCounter,
+					typ: model.MetricTypeCounter,
 				},
 				{
 					m: "go_memstats_alloc_bytes_total",
@@ -685,7 +686,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "something_untyped",
-					typ: MetricTypeUnknown,
+					typ: model.MetricTypeUnknown,
 				},
 				{
 					m: "something_untyped",
@@ -701,7 +702,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "test_histogram",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{
 					m: "test_histogram",
@@ -736,7 +737,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "test_gauge_histogram",
-					typ: MetricTypeGaugeHistogram,
+					typ: model.MetricTypeGaugeHistogram,
 				},
 				{
 					m: "test_gauge_histogram",
@@ -772,7 +773,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "test_float_histogram",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{
 					m: "test_float_histogram",
@@ -807,7 +808,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "test_gauge_float_histogram",
-					typ: MetricTypeGaugeHistogram,
+					typ: model.MetricTypeGaugeHistogram,
 				},
 				{
 					m: "test_gauge_float_histogram",
@@ -843,7 +844,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "test_histogram2",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{
 					m: "test_histogram2_count",
@@ -903,7 +904,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "test_histogram_family",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{
 					m: "test_histogram_family\xfffoo\xffbar",
@@ -947,7 +948,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "test_float_histogram_with_zerothreshold_zero",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{
 					m: "test_float_histogram_with_zerothreshold_zero",
@@ -971,7 +972,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "rpc_durations_seconds",
-					typ: MetricTypeSummary,
+					typ: model.MetricTypeSummary,
 				},
 				{
 					m: "rpc_durations_seconds_count\xffservice\xffexponential",
@@ -1022,7 +1023,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "without_quantiles",
-					typ: MetricTypeSummary,
+					typ: model.MetricTypeSummary,
 				},
 				{
 					m: "without_quantiles_count",
@@ -1044,7 +1045,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "empty_histogram",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{
 					m: "empty_histogram",
@@ -1063,7 +1064,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "test_counter_with_createdtimestamp",
-					typ: MetricTypeCounter,
+					typ: model.MetricTypeCounter,
 				},
 				{
 					m:  "test_counter_with_createdtimestamp",
@@ -1079,7 +1080,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "test_summary_with_createdtimestamp",
-					typ: MetricTypeSummary,
+					typ: model.MetricTypeSummary,
 				},
 				{
 					m:  "test_summary_with_createdtimestamp_count",
@@ -1103,7 +1104,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "test_histogram_with_createdtimestamp",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{
 					m:  "test_histogram_with_createdtimestamp",
@@ -1123,7 +1124,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{
 					m:   "test_gaugehistogram_with_createdtimestamp",
-					typ: MetricTypeGaugeHistogram,
+					typ: model.MetricTypeGaugeHistogram,
 				},
 				{
 					m:  "test_gaugehistogram_with_createdtimestamp",
@@ -1149,7 +1150,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 1
 					m:   "go_build_info",
-					typ: MetricTypeGauge,
+					typ: model.MetricTypeGauge,
 				},
 				{ // 2
 					m: "go_build_info\xFFchecksum\xFF\xFFpath\xFFgithub.com/prometheus/client_golang\xFFversion\xFF(devel)",
@@ -1167,7 +1168,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 4
 					m:   "go_memstats_alloc_bytes_total",
-					typ: MetricTypeCounter,
+					typ: model.MetricTypeCounter,
 				},
 				{ // 5
 					m: "go_memstats_alloc_bytes_total",
@@ -1185,7 +1186,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 7
 					m:   "something_untyped",
-					typ: MetricTypeUnknown,
+					typ: model.MetricTypeUnknown,
 				},
 				{ // 8
 					m: "something_untyped",
@@ -1201,7 +1202,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 10
 					m:   "test_histogram",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{ // 11
 					m: "test_histogram",
@@ -1294,7 +1295,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 19
 					m:   "test_gauge_histogram",
-					typ: MetricTypeGaugeHistogram,
+					typ: model.MetricTypeGaugeHistogram,
 				},
 				{ // 20
 					m: "test_gauge_histogram",
@@ -1388,7 +1389,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 28
 					m:   "test_float_histogram",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{ // 29
 					m: "test_float_histogram",
@@ -1481,7 +1482,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 37
 					m:   "test_gauge_float_histogram",
-					typ: MetricTypeGaugeHistogram,
+					typ: model.MetricTypeGaugeHistogram,
 				},
 				{ // 38
 					m: "test_gauge_float_histogram",
@@ -1575,7 +1576,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 46
 					m:   "test_histogram2",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{ // 47
 					m: "test_histogram2_count",
@@ -1635,7 +1636,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 54
 					m:   "test_histogram_family",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{ // 55
 					m: "test_histogram_family\xfffoo\xffbar",
@@ -1765,7 +1766,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 68
 					m:   "test_float_histogram_with_zerothreshold_zero",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{ // 69
 					m: "test_float_histogram_with_zerothreshold_zero",
@@ -1789,7 +1790,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 71
 					m:   "rpc_durations_seconds",
-					typ: MetricTypeSummary,
+					typ: model.MetricTypeSummary,
 				},
 				{ // 72
 					m: "rpc_durations_seconds_count\xffservice\xffexponential",
@@ -1840,7 +1841,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 78
 					m:   "without_quantiles",
-					typ: MetricTypeSummary,
+					typ: model.MetricTypeSummary,
 				},
 				{ // 79
 					m: "without_quantiles_count",
@@ -1862,7 +1863,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 79
 					m:   "empty_histogram",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{ // 80
 					m: "empty_histogram",
@@ -1881,7 +1882,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 82
 					m:   "test_counter_with_createdtimestamp",
-					typ: MetricTypeCounter,
+					typ: model.MetricTypeCounter,
 				},
 				{ // 83
 					m:  "test_counter_with_createdtimestamp",
@@ -1897,7 +1898,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 85
 					m:   "test_summary_with_createdtimestamp",
-					typ: MetricTypeSummary,
+					typ: model.MetricTypeSummary,
 				},
 				{ // 86
 					m:  "test_summary_with_createdtimestamp_count",
@@ -1921,7 +1922,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 89
 					m:   "test_histogram_with_createdtimestamp",
-					typ: MetricTypeHistogram,
+					typ: model.MetricTypeHistogram,
 				},
 				{ // 90
 					m:  "test_histogram_with_createdtimestamp",
@@ -1941,7 +1942,7 @@ func TestProtobufParse(t *testing.T) {
 				},
 				{ // 92
 					m:   "test_gaugehistogram_with_createdtimestamp",
-					typ: MetricTypeGaugeHistogram,
+					typ: model.MetricTypeGaugeHistogram,
 				},
 				{ // 93
 					m:  "test_gaugehistogram_with_createdtimestamp",
diff --git a/scrape/scrape.go b/scrape/scrape.go
index be27a5d4874..de74987cc39 100644
--- a/scrape/scrape.go
+++ b/scrape/scrape.go
@@ -966,7 +966,7 @@ func (c *scrapeCache) setType(metric []byte, t textparse.MetricType) {
 
 	e, ok := c.metadata[string(metric)]
 	if !ok {
-		e = &metaEntry{Metadata: metadata.Metadata{Type: textparse.MetricTypeUnknown}}
+		e = &metaEntry{Metadata: metadata.Metadata{Type: model.MetricTypeUnknown}}
 		c.metadata[string(metric)] = e
 	}
 	if e.Type != t {
@@ -983,7 +983,7 @@ func (c *scrapeCache) setHelp(metric, help []byte) {
 
 	e, ok := c.metadata[string(metric)]
 	if !ok {
-		e = &metaEntry{Metadata: metadata.Metadata{Type: textparse.MetricTypeUnknown}}
+		e = &metaEntry{Metadata: metadata.Metadata{Type: model.MetricTypeUnknown}}
 		c.metadata[string(metric)] = e
 	}
 	if e.Help != string(help) {
@@ -1000,7 +1000,7 @@ func (c *scrapeCache) setUnit(metric, unit []byte) {
 
 	e, ok := c.metadata[string(metric)]
 	if !ok {
-		e = &metaEntry{Metadata: metadata.Metadata{Type: textparse.MetricTypeUnknown}}
+		e = &metaEntry{Metadata: metadata.Metadata{Type: model.MetricTypeUnknown}}
 		c.metadata[string(metric)] = e
 	}
 	if e.Unit != string(unit) {
diff --git a/scrape/scrape_test.go b/scrape/scrape_test.go
index 90578f2e95f..1a416eeb6f0 100644
--- a/scrape/scrape_test.go
+++ b/scrape/scrape_test.go
@@ -971,19 +971,19 @@ test_metric 1
 
 	md, ok := cache.GetMetadata("test_metric")
 	require.True(t, ok, "expected metadata to be present")
-	require.Equal(t, textparse.MetricTypeCounter, md.Type, "unexpected metric type")
+	require.Equal(t, model.MetricTypeCounter, md.Type, "unexpected metric type")
 	require.Equal(t, "some help text", md.Help)
 	require.Equal(t, "metric", md.Unit)
 
 	md, ok = cache.GetMetadata("test_metric_no_help")
 	require.True(t, ok, "expected metadata to be present")
-	require.Equal(t, textparse.MetricTypeGauge, md.Type, "unexpected metric type")
+	require.Equal(t, model.MetricTypeGauge, md.Type, "unexpected metric type")
 	require.Equal(t, "", md.Help)
 	require.Equal(t, "", md.Unit)
 
 	md, ok = cache.GetMetadata("test_metric_no_type")
 	require.True(t, ok, "expected metadata to be present")
-	require.Equal(t, textparse.MetricTypeUnknown, md.Type, "unexpected metric type")
+	require.Equal(t, model.MetricTypeUnknown, md.Type, "unexpected metric type")
 	require.Equal(t, "other help text", md.Help)
 	require.Equal(t, "", md.Unit)
 }
diff --git a/storage/remote/codec.go b/storage/remote/codec.go
index 67035cd8ec7..ffab821a5fd 100644
--- a/storage/remote/codec.go
+++ b/storage/remote/codec.go
@@ -33,7 +33,6 @@ import (
 	"github.com/prometheus/prometheus/model/exemplar"
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
-	"github.com/prometheus/prometheus/model/textparse"
 	"github.com/prometheus/prometheus/prompb"
 	"github.com/prometheus/prometheus/storage"
 	"github.com/prometheus/prometheus/tsdb/chunkenc"
@@ -784,7 +783,7 @@ func labelsToLabelsProto(lbls labels.Labels, buf []prompb.Label) []prompb.Label
 }
 
 // metricTypeToMetricTypeProto transforms a Prometheus metricType into prompb metricType. Since the former is a string we need to transform it to an enum.
-func metricTypeToMetricTypeProto(t textparse.MetricType) prompb.MetricMetadata_MetricType {
+func metricTypeToMetricTypeProto(t model.MetricType) prompb.MetricMetadata_MetricType {
 	mt := strings.ToUpper(string(t))
 	v, ok := prompb.MetricMetadata_MetricType_value[mt]
 	if !ok {
diff --git a/storage/remote/codec_test.go b/storage/remote/codec_test.go
index d2a7d45beb8..ac8b0f0b544 100644
--- a/storage/remote/codec_test.go
+++ b/storage/remote/codec_test.go
@@ -20,11 +20,11 @@ import (
 	"testing"
 
 	"github.com/gogo/protobuf/proto"
+	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
-	"github.com/prometheus/prometheus/model/textparse"
 	"github.com/prometheus/prometheus/prompb"
 	"github.com/prometheus/prometheus/storage"
 	"github.com/prometheus/prometheus/tsdb/chunkenc"
@@ -488,17 +488,17 @@ func TestMergeLabels(t *testing.T) {
 func TestMetricTypeToMetricTypeProto(t *testing.T) {
 	tc := []struct {
 		desc     string
-		input    textparse.MetricType
+		input    model.MetricType
 		expected prompb.MetricMetadata_MetricType
 	}{
 		{
 			desc:     "with a single-word metric",
-			input:    textparse.MetricTypeCounter,
+			input:    model.MetricTypeCounter,
 			expected: prompb.MetricMetadata_COUNTER,
 		},
 		{
 			desc:     "with a two-word metric",
-			input:    textparse.MetricTypeStateset,
+			input:    model.MetricTypeStateset,
 			expected: prompb.MetricMetadata_STATESET,
 		},
 		{
diff --git a/storage/remote/metadata_watcher_test.go b/storage/remote/metadata_watcher_test.go
index cd664bc8beb..0cd6027a83b 100644
--- a/storage/remote/metadata_watcher_test.go
+++ b/storage/remote/metadata_watcher_test.go
@@ -22,7 +22,6 @@ import (
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 
-	"github.com/prometheus/prometheus/model/textparse"
 	"github.com/prometheus/prometheus/scrape"
 )
 
@@ -108,13 +107,13 @@ func TestWatchScrapeManager_ReadyForCollection(t *testing.T) {
 		Metadata: []scrape.MetricMetadata{
 			{
 				Metric: "prometheus_tsdb_head_chunks_created_total",
-				Type:   textparse.MetricTypeCounter,
+				Type:   model.MetricTypeCounter,
 				Help:   "Total number",
 				Unit:   "",
 			},
 			{
 				Metric: "prometheus_remote_storage_retried_samples_total",
-				Type:   textparse.MetricTypeCounter,
+				Type:   model.MetricTypeCounter,
 				Help:   "Total number",
 				Unit:   "",
 			},
@@ -124,7 +123,7 @@ func TestWatchScrapeManager_ReadyForCollection(t *testing.T) {
 		Metadata: []scrape.MetricMetadata{
 			{
 				Metric: "prometheus_tsdb_head_chunks_created_total",
-				Type:   textparse.MetricTypeCounter,
+				Type:   model.MetricTypeCounter,
 				Help:   "Total number",
 				Unit:   "",
 			},
diff --git a/storage/remote/queue_manager_test.go b/storage/remote/queue_manager_test.go
index c878c750bfd..17a904fcdfc 100644
--- a/storage/remote/queue_manager_test.go
+++ b/storage/remote/queue_manager_test.go
@@ -38,7 +38,6 @@ import (
 	"github.com/prometheus/prometheus/config"
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
-	"github.com/prometheus/prometheus/model/textparse"
 	"github.com/prometheus/prometheus/model/timestamp"
 	"github.com/prometheus/prometheus/prompb"
 	"github.com/prometheus/prometheus/scrape"
@@ -180,7 +179,7 @@ func TestMetadataDelivery(t *testing.T) {
 	for i := 0; i < numMetadata; i++ {
 		metadata = append(metadata, scrape.MetricMetadata{
 			Metric: "prometheus_remote_storage_sent_metadata_bytes_total_" + strconv.Itoa(i),
-			Type:   textparse.MetricTypeCounter,
+			Type:   model.MetricTypeCounter,
 			Help:   "a nice help text",
 			Unit:   "",
 		})
diff --git a/tsdb/head_append.go b/tsdb/head_append.go
index f509317c831..f112ffa3aec 100644
--- a/tsdb/head_append.go
+++ b/tsdb/head_append.go
@@ -1038,7 +1038,7 @@ func (a *headAppender) Commit() (err error) {
 	for i, m := range a.metadata {
 		series = a.metadataSeries[i]
 		series.Lock()
-		series.meta = &metadata.Metadata{Type: record.ToTextparseMetricType(m.Type), Unit: m.Unit, Help: m.Help}
+		series.meta = &metadata.Metadata{Type: record.ToMetricType(m.Type), Unit: m.Unit, Help: m.Help}
 		series.Unlock()
 	}
 
diff --git a/tsdb/head_wal.go b/tsdb/head_wal.go
index a492a85a022..1be65f1341a 100644
--- a/tsdb/head_wal.go
+++ b/tsdb/head_wal.go
@@ -388,7 +388,7 @@ Outer:
 					continue
 				}
 				s.meta = &metadata.Metadata{
-					Type: record.ToTextparseMetricType(m.Type),
+					Type: record.ToMetricType(m.Type),
 					Unit: m.Unit,
 					Help: m.Help,
 				}
diff --git a/tsdb/record/record.go b/tsdb/record/record.go
index 42a656dfe87..3931ad05d61 100644
--- a/tsdb/record/record.go
+++ b/tsdb/record/record.go
@@ -20,9 +20,10 @@ import (
 	"fmt"
 	"math"
 
+	"github.com/prometheus/common/model"
+
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
-	"github.com/prometheus/prometheus/model/textparse"
 	"github.com/prometheus/prometheus/storage"
 	"github.com/prometheus/prometheus/tsdb/chunks"
 	"github.com/prometheus/prometheus/tsdb/encoding"
@@ -90,45 +91,45 @@ const (
 	Stateset        MetricType = 7
 )
 
-func GetMetricType(t textparse.MetricType) uint8 {
+func GetMetricType(t model.MetricType) uint8 {
 	switch t {
-	case textparse.MetricTypeCounter:
+	case model.MetricTypeCounter:
 		return uint8(Counter)
-	case textparse.MetricTypeGauge:
+	case model.MetricTypeGauge:
 		return uint8(Gauge)
-	case textparse.MetricTypeHistogram:
+	case model.MetricTypeHistogram:
 		return uint8(HistogramSample)
-	case textparse.MetricTypeGaugeHistogram:
+	case model.MetricTypeGaugeHistogram:
 		return uint8(GaugeHistogram)
-	case textparse.MetricTypeSummary:
+	case model.MetricTypeSummary:
 		return uint8(Summary)
-	case textparse.MetricTypeInfo:
+	case model.MetricTypeInfo:
 		return uint8(Info)
-	case textparse.MetricTypeStateset:
+	case model.MetricTypeStateset:
 		return uint8(Stateset)
 	default:
 		return uint8(UnknownMT)
 	}
 }
 
-func ToTextparseMetricType(m uint8) textparse.MetricType {
+func ToMetricType(m uint8) model.MetricType {
 	switch m {
 	case uint8(Counter):
-		return textparse.MetricTypeCounter
+		return model.MetricTypeCounter
 	case uint8(Gauge):
-		return textparse.MetricTypeGauge
+		return model.MetricTypeGauge
 	case uint8(HistogramSample):
-		return textparse.MetricTypeHistogram
+		return model.MetricTypeHistogram
 	case uint8(GaugeHistogram):
-		return textparse.MetricTypeGaugeHistogram
+		return model.MetricTypeGaugeHistogram
 	case uint8(Summary):
-		return textparse.MetricTypeSummary
+		return model.MetricTypeSummary
 	case uint8(Info):
-		return textparse.MetricTypeInfo
+		return model.MetricTypeInfo
 	case uint8(Stateset):
-		return textparse.MetricTypeStateset
+		return model.MetricTypeStateset
 	default:
-		return textparse.MetricTypeUnknown
+		return model.MetricTypeUnknown
 	}
 }
 
diff --git a/web/api/v1/api.go b/web/api/v1/api.go
index 8fa7ce14a82..dd35d1fe995 100644
--- a/web/api/v1/api.go
+++ b/web/api/v1/api.go
@@ -41,7 +41,7 @@ import (
 
 	"github.com/prometheus/prometheus/config"
 	"github.com/prometheus/prometheus/model/labels"
-	"github.com/prometheus/prometheus/model/textparse"
+	"github.com/prometheus/prometheus/model/metadata"
 	"github.com/prometheus/prometheus/model/timestamp"
 	"github.com/prometheus/prometheus/promql"
 	"github.com/prometheus/prometheus/promql/parser"
@@ -1141,11 +1141,11 @@ func (api *API) targetMetadata(r *http.Request) apiFuncResult {
 }
 
 type metricMetadata struct {
-	Target labels.Labels        `json:"target"`
-	Metric string               `json:"metric,omitempty"`
-	Type   textparse.MetricType `json:"type"`
-	Help   string               `json:"help"`
-	Unit   string               `json:"unit"`
+	Target labels.Labels    `json:"target"`
+	Metric string           `json:"metric,omitempty"`
+	Type   model.MetricType `json:"type"`
+	Help   string           `json:"help"`
+	Unit   string           `json:"unit"`
 }
 
 // AlertmanagerDiscovery has all the active Alertmanagers.
@@ -1221,14 +1221,8 @@ func rulesAlertsToAPIAlerts(rulesAlerts []*rules.Alert) []*Alert {
 	return apiAlerts
 }
 
-type metadata struct {
-	Type textparse.MetricType `json:"type"`
-	Help string               `json:"help"`
-	Unit string               `json:"unit"`
-}
-
 func (api *API) metricMetadata(r *http.Request) apiFuncResult {
-	metrics := map[string]map[metadata]struct{}{}
+	metrics := map[string]map[metadata.Metadata]struct{}{}
 
 	limit := -1
 	if s := r.FormValue("limit"); s != "" {
@@ -1250,7 +1244,7 @@ func (api *API) metricMetadata(r *http.Request) apiFuncResult {
 		for _, t := range tt {
 			if metric == "" {
 				for _, mm := range t.ListMetadata() {
-					m := metadata{Type: mm.Type, Help: mm.Help, Unit: mm.Unit}
+					m := metadata.Metadata{Type: mm.Type, Help: mm.Help, Unit: mm.Unit}
 					ms, ok := metrics[mm.Metric]
 
 					if limitPerMetric > 0 && len(ms) >= limitPerMetric {
@@ -1258,7 +1252,7 @@ func (api *API) metricMetadata(r *http.Request) apiFuncResult {
 					}
 
 					if !ok {
-						ms = map[metadata]struct{}{}
+						ms = map[metadata.Metadata]struct{}{}
 						metrics[mm.Metric] = ms
 					}
 					ms[m] = struct{}{}
@@ -1267,7 +1261,7 @@ func (api *API) metricMetadata(r *http.Request) apiFuncResult {
 			}
 
 			if md, ok := t.GetMetadata(metric); ok {
-				m := metadata{Type: md.Type, Help: md.Help, Unit: md.Unit}
+				m := metadata.Metadata{Type: md.Type, Help: md.Help, Unit: md.Unit}
 				ms, ok := metrics[md.Metric]
 
 				if limitPerMetric > 0 && len(ms) >= limitPerMetric {
@@ -1275,7 +1269,7 @@ func (api *API) metricMetadata(r *http.Request) apiFuncResult {
 				}
 
 				if !ok {
-					ms = map[metadata]struct{}{}
+					ms = map[metadata.Metadata]struct{}{}
 					metrics[md.Metric] = ms
 				}
 				ms[m] = struct{}{}
@@ -1284,13 +1278,13 @@ func (api *API) metricMetadata(r *http.Request) apiFuncResult {
 	}
 
 	// Put the elements from the pseudo-set into a slice for marshaling.
-	res := map[string][]metadata{}
+	res := map[string][]metadata.Metadata{}
 	for name, set := range metrics {
 		if limit >= 0 && len(res) >= limit {
 			break
 		}
 
-		s := []metadata{}
+		s := []metadata.Metadata{}
 		for metadata := range set {
 			s = append(s, metadata)
 		}
diff --git a/web/api/v1/api_test.go b/web/api/v1/api_test.go
index d4da05e46e9..c9ab84087e8 100644
--- a/web/api/v1/api_test.go
+++ b/web/api/v1/api_test.go
@@ -44,7 +44,7 @@ import (
 	"github.com/prometheus/prometheus/config"
 	"github.com/prometheus/prometheus/model/exemplar"
 	"github.com/prometheus/prometheus/model/labels"
-	"github.com/prometheus/prometheus/model/textparse"
+	"github.com/prometheus/prometheus/model/metadata"
 	"github.com/prometheus/prometheus/model/timestamp"
 	"github.com/prometheus/prometheus/promql"
 	"github.com/prometheus/prometheus/promql/parser"
@@ -1584,7 +1584,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created.",
 							Unit:   "",
 						},
@@ -1597,7 +1597,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 						"job": "test",
 					}),
 					Help: "Number of OS threads created.",
-					Type: textparse.MetricTypeGauge,
+					Type: model.MetricTypeGauge,
 					Unit: "",
 				},
 			},
@@ -1614,7 +1614,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "prometheus_tsdb_storage_blocks_bytes",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "The number of bytes that are currently used for local storage by all blocks.",
 							Unit:   "",
 						},
@@ -1628,7 +1628,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					}),
 					Metric: "prometheus_tsdb_storage_blocks_bytes",
 					Help:   "The number of bytes that are currently used for local storage by all blocks.",
-					Type:   textparse.MetricTypeGauge,
+					Type:   model.MetricTypeGauge,
 					Unit:   "",
 				},
 			},
@@ -1642,7 +1642,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created.",
 							Unit:   "",
 						},
@@ -1653,7 +1653,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "prometheus_tsdb_storage_blocks_bytes",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "The number of bytes that are currently used for local storage by all blocks.",
 							Unit:   "",
 						},
@@ -1667,7 +1667,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					}),
 					Metric: "go_threads",
 					Help:   "Number of OS threads created.",
-					Type:   textparse.MetricTypeGauge,
+					Type:   model.MetricTypeGauge,
 					Unit:   "",
 				},
 				{
@@ -1676,7 +1676,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					}),
 					Metric: "prometheus_tsdb_storage_blocks_bytes",
 					Help:   "The number of bytes that are currently used for local storage by all blocks.",
-					Type:   textparse.MetricTypeGauge,
+					Type:   model.MetricTypeGauge,
 					Unit:   "",
 				},
 			},
@@ -1719,22 +1719,22 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "prometheus_engine_query_duration_seconds",
-							Type:   textparse.MetricTypeSummary,
+							Type:   model.MetricTypeSummary,
 							Help:   "Query timings",
 							Unit:   "",
 						},
 						{
 							Metric: "go_info",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Information about the Go environment.",
 							Unit:   "",
 						},
 					},
 				},
 			},
-			response: map[string][]metadata{
-				"prometheus_engine_query_duration_seconds": {{textparse.MetricTypeSummary, "Query timings", ""}},
-				"go_info": {{textparse.MetricTypeGauge, "Information about the Go environment.", ""}},
+			response: map[string][]metadata.Metadata{
+				"prometheus_engine_query_duration_seconds": {{Type: model.MetricTypeSummary, Help: "Query timings", Unit: ""}},
+				"go_info": {{Type: model.MetricTypeGauge, Help: "Information about the Go environment.", Unit: ""}},
 			},
 		},
 		// With duplicate metadata for a metric that comes from different targets.
@@ -1746,7 +1746,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created",
 							Unit:   "",
 						},
@@ -1757,15 +1757,15 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created",
 							Unit:   "",
 						},
 					},
 				},
 			},
-			response: map[string][]metadata{
-				"go_threads": {{textparse.MetricTypeGauge, "Number of OS threads created", ""}},
+			response: map[string][]metadata.Metadata{
+				"go_threads": {{Type: model.MetricTypeGauge, Help: "Number of OS threads created"}},
 			},
 		},
 		// With non-duplicate metadata for the same metric from different targets.
@@ -1777,7 +1777,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created",
 							Unit:   "",
 						},
@@ -1788,21 +1788,21 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads that were created.",
 							Unit:   "",
 						},
 					},
 				},
 			},
-			response: map[string][]metadata{
+			response: map[string][]metadata.Metadata{
 				"go_threads": {
-					{textparse.MetricTypeGauge, "Number of OS threads created", ""},
-					{textparse.MetricTypeGauge, "Number of OS threads that were created.", ""},
+					{Type: model.MetricTypeGauge, Help: "Number of OS threads created"},
+					{Type: model.MetricTypeGauge, Help: "Number of OS threads that were created."},
 				},
 			},
 			sorter: func(m interface{}) {
-				v := m.(map[string][]metadata)["go_threads"]
+				v := m.(map[string][]metadata.Metadata)["go_threads"]
 
 				sort.Slice(v, func(i, j int) bool {
 					return v[i].Help < v[j].Help
@@ -1821,13 +1821,13 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created",
 							Unit:   "",
 						},
 						{
 							Metric: "prometheus_engine_query_duration_seconds",
-							Type:   textparse.MetricTypeSummary,
+							Type:   model.MetricTypeSummary,
 							Help:   "Query Timmings.",
 							Unit:   "",
 						},
@@ -1838,7 +1838,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_gc_duration_seconds",
-							Type:   textparse.MetricTypeSummary,
+							Type:   model.MetricTypeSummary,
 							Help:   "A summary of the GC invocation durations.",
 							Unit:   "",
 						},
@@ -1857,31 +1857,31 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created",
 							Unit:   "",
 						},
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Repeated metadata",
 							Unit:   "",
 						},
 						{
 							Metric: "go_gc_duration_seconds",
-							Type:   textparse.MetricTypeSummary,
+							Type:   model.MetricTypeSummary,
 							Help:   "A summary of the GC invocation durations.",
 							Unit:   "",
 						},
 					},
 				},
 			},
-			response: map[string][]metadata{
+			response: map[string][]metadata.Metadata{
 				"go_threads": {
-					{textparse.MetricTypeGauge, "Number of OS threads created", ""},
+					{Type: model.MetricTypeGauge, Help: "Number of OS threads created"},
 				},
 				"go_gc_duration_seconds": {
-					{textparse.MetricTypeSummary, "A summary of the GC invocation durations.", ""},
+					{Type: model.MetricTypeSummary, Help: "A summary of the GC invocation durations."},
 				},
 			},
 		},
@@ -1895,19 +1895,19 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created",
 							Unit:   "",
 						},
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Repeated metadata",
 							Unit:   "",
 						},
 						{
 							Metric: "go_gc_duration_seconds",
-							Type:   textparse.MetricTypeSummary,
+							Type:   model.MetricTypeSummary,
 							Help:   "A summary of the GC invocation durations.",
 							Unit:   "",
 						},
@@ -1928,19 +1928,19 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created",
 							Unit:   "",
 						},
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Repeated metadata",
 							Unit:   "",
 						},
 						{
 							Metric: "go_gc_duration_seconds",
-							Type:   textparse.MetricTypeSummary,
+							Type:   model.MetricTypeSummary,
 							Help:   "A summary of the GC invocation durations.",
 							Unit:   "",
 						},
@@ -1951,13 +1951,13 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created, but from a different target",
 							Unit:   "",
 						},
 						{
 							Metric: "go_gc_duration_seconds",
-							Type:   textparse.MetricTypeSummary,
+							Type:   model.MetricTypeSummary,
 							Help:   "A summary of the GC invocation durations, but from a different target.",
 							Unit:   "",
 						},
@@ -1977,7 +1977,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created",
 							Unit:   "",
 						},
@@ -1988,27 +1988,27 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_gc_duration_seconds",
-							Type:   textparse.MetricTypeSummary,
+							Type:   model.MetricTypeSummary,
 							Help:   "A summary of the GC invocation durations.",
 							Unit:   "",
 						},
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads that were created.",
 							Unit:   "",
 						},
 					},
 				},
 			},
-			response: map[string][]metadata{
+			response: map[string][]metadata.Metadata{
 				"go_threads": {
-					{textparse.MetricTypeGauge, "Number of OS threads created", ""},
-					{textparse.MetricTypeGauge, "Number of OS threads that were created.", ""},
+					{Type: model.MetricTypeGauge, Help: "Number of OS threads created"},
+					{Type: model.MetricTypeGauge, Help: "Number of OS threads that were created."},
 				},
 			},
 			sorter: func(m interface{}) {
-				v := m.(map[string][]metadata)["go_threads"]
+				v := m.(map[string][]metadata.Metadata)["go_threads"]
 
 				sort.Slice(v, func(i, j int) bool {
 					return v[i].Help < v[j].Help
@@ -2025,19 +2025,19 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					metadata: []scrape.MetricMetadata{
 						{
 							Metric: "go_threads",
-							Type:   textparse.MetricTypeGauge,
+							Type:   model.MetricTypeGauge,
 							Help:   "Number of OS threads created",
 							Unit:   "",
 						},
 					},
 				},
 			},
-			response: map[string][]metadata{},
+			response: map[string][]metadata.Metadata{},
 		},
 		// With no available metadata.
 		{
 			endpoint: api.metricMetadata,
-			response: map[string][]metadata{},
+			response: map[string][]metadata.Metadata{},
 		},
 		{
 			endpoint: api.serveConfig,
@@ -2931,7 +2931,7 @@ func assertAPIResponseMetadataLen(t *testing.T, got interface{}, expLen int) {
 	t.Helper()
 
 	var gotLen int
-	response := got.(map[string][]metadata)
+	response := got.(map[string][]metadata.Metadata)
 	for _, m := range response {
 		gotLen += len(m)
 	}

From c83e1fc5748be3bd35bf0a31eb53690b412846a4 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Tue, 12 Dec 2023 12:14:36 +0000
Subject: [PATCH 048/132] textparse: remove MetricType alias

No backwards-compatibility; make a clean break.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 model/textparse/interface.go          | 4 +---
 model/textparse/openmetricsparse.go   | 2 +-
 model/textparse/promparse.go          | 4 ++--
 model/textparse/protobufparse_test.go | 2 +-
 scrape/scrape.go                      | 2 +-
 scrape/target.go                      | 3 +--
 6 files changed, 7 insertions(+), 10 deletions(-)

diff --git a/model/textparse/interface.go b/model/textparse/interface.go
index f6d93f06373..3a363ebfbc2 100644
--- a/model/textparse/interface.go
+++ b/model/textparse/interface.go
@@ -44,7 +44,7 @@ type Parser interface {
 	// Type returns the metric name and type in the current entry.
 	// Must only be called after Next returned a type entry.
 	// The returned byte slices become invalid after the next call to Next.
-	Type() ([]byte, MetricType)
+	Type() ([]byte, model.MetricType)
 
 	// Unit returns the metric name and unit in the current entry.
 	// Must only be called after Next returned a unit entry.
@@ -111,5 +111,3 @@ const (
 	EntryUnit      Entry = 4
 	EntryHistogram Entry = 5 // A series with a native histogram as a value.
 )
-
-type MetricType = model.MetricType
diff --git a/model/textparse/openmetricsparse.go b/model/textparse/openmetricsparse.go
index d6b01eb8ed9..ddfbe4fc5c2 100644
--- a/model/textparse/openmetricsparse.go
+++ b/model/textparse/openmetricsparse.go
@@ -128,7 +128,7 @@ func (p *OpenMetricsParser) Help() ([]byte, []byte) {
 // Type returns the metric name and type in the current entry.
 // Must only be called after Next returned a type entry.
 // The returned byte slices become invalid after the next call to Next.
-func (p *OpenMetricsParser) Type() ([]byte, MetricType) {
+func (p *OpenMetricsParser) Type() ([]byte, model.MetricType) {
 	return p.l.b[p.offsets[0]:p.offsets[1]], p.mtype
 }
 
diff --git a/model/textparse/promparse.go b/model/textparse/promparse.go
index cd028ef9040..7123e52c337 100644
--- a/model/textparse/promparse.go
+++ b/model/textparse/promparse.go
@@ -148,7 +148,7 @@ type PromParser struct {
 	builder labels.ScratchBuilder
 	series  []byte
 	text    []byte
-	mtype   MetricType
+	mtype   model.MetricType
 	val     float64
 	ts      int64
 	hasTS   bool
@@ -192,7 +192,7 @@ func (p *PromParser) Help() ([]byte, []byte) {
 // Type returns the metric name and type in the current entry.
 // Must only be called after Next returned a type entry.
 // The returned byte slices become invalid after the next call to Next.
-func (p *PromParser) Type() ([]byte, MetricType) {
+func (p *PromParser) Type() ([]byte, model.MetricType) {
 	return p.l.b[p.offsets[0]:p.offsets[1]], p.mtype
 }
 
diff --git a/model/textparse/protobufparse_test.go b/model/textparse/protobufparse_test.go
index f994ff966c0..7dcc85f5459 100644
--- a/model/textparse/protobufparse_test.go
+++ b/model/textparse/protobufparse_test.go
@@ -623,7 +623,7 @@ func TestProtobufParse(t *testing.T) {
 		m       string
 		t       int64
 		v       float64
-		typ     MetricType
+		typ     model.MetricType
 		help    string
 		unit    string
 		comment string
diff --git a/scrape/scrape.go b/scrape/scrape.go
index de74987cc39..dd425db907d 100644
--- a/scrape/scrape.go
+++ b/scrape/scrape.go
@@ -961,7 +961,7 @@ func (c *scrapeCache) forEachStale(f func(labels.Labels) bool) {
 	}
 }
 
-func (c *scrapeCache) setType(metric []byte, t textparse.MetricType) {
+func (c *scrapeCache) setType(metric []byte, t model.MetricType) {
 	c.metaMtx.Lock()
 
 	e, ok := c.metadata[string(metric)]
diff --git a/scrape/target.go b/scrape/target.go
index fd984f5a68c..0605f53490d 100644
--- a/scrape/target.go
+++ b/scrape/target.go
@@ -30,7 +30,6 @@ import (
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
 	"github.com/prometheus/prometheus/model/relabel"
-	"github.com/prometheus/prometheus/model/textparse"
 	"github.com/prometheus/prometheus/model/value"
 	"github.com/prometheus/prometheus/storage"
 )
@@ -87,7 +86,7 @@ type MetricMetadataStore interface {
 // MetricMetadata is a piece of metadata for a metric.
 type MetricMetadata struct {
 	Metric string
-	Type   textparse.MetricType
+	Type   model.MetricType
 	Help   string
 	Unit   string
 }

From 096ec129120b124ea14c78c8721c80dd0961b8ce Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Tue, 19 Dec 2023 18:53:09 +0000
Subject: [PATCH 049/132] Update comment about metadata in types.proto

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 prompb/types.pb.go | 2 +-
 prompb/types.proto | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/prompb/types.pb.go b/prompb/types.pb.go
index 125f868e971..93883daa133 100644
--- a/prompb/types.pb.go
+++ b/prompb/types.pb.go
@@ -164,7 +164,7 @@ func (Chunk_Encoding) EnumDescriptor() ([]byte, []int) {
 
 type MetricMetadata struct {
 	// Represents the metric type, these match the set from Prometheus.
-	// Refer to model/textparse/interface.go for details.
+	// Refer to github.com/prometheus/common/model/metadata.go for details.
 	Type                 MetricMetadata_MetricType `protobuf:"varint,1,opt,name=type,proto3,enum=prometheus.MetricMetadata_MetricType" json:"type,omitempty"`
 	MetricFamilyName     string                    `protobuf:"bytes,2,opt,name=metric_family_name,json=metricFamilyName,proto3" json:"metric_family_name,omitempty"`
 	Help                 string                    `protobuf:"bytes,4,opt,name=help,proto3" json:"help,omitempty"`
diff --git a/prompb/types.proto b/prompb/types.proto
index aa322515c3d..61fc1e0143e 100644
--- a/prompb/types.proto
+++ b/prompb/types.proto
@@ -31,7 +31,7 @@ message MetricMetadata {
   }
 
   // Represents the metric type, these match the set from Prometheus.
-  // Refer to model/textparse/interface.go for details.
+  // Refer to github.com/prometheus/common/model/metadata.go for details.
   MetricType type = 1;
   string metric_family_name = 2;
   string help = 4;

From 51e78d9a32aefc80eccdd2360a6045cbd734bdd9 Mon Sep 17 00:00:00 2001
From: Arianna Vespri <arianna.vespri@yahoo.it>
Date: Wed, 20 Dec 2023 09:31:58 +0100
Subject: [PATCH 050/132] Delete debugging lines, amend error message for unit

Signed-off-by: Arianna Vespri <arianna.vespri@yahoo.it>
---
 model/textparse/protobufparse.go | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/model/textparse/protobufparse.go b/model/textparse/protobufparse.go
index cb622cf84fb..c40176bcc75 100644
--- a/model/textparse/protobufparse.go
+++ b/model/textparse/protobufparse.go
@@ -424,15 +424,13 @@ func (p *ProtobufParser) Next() (Entry, error) {
 			return EntryInvalid, fmt.Errorf("unknown metric type for metric %q: %s", name, p.mf.GetType())
 		}
 		unit := p.mf.GetUnit()
-		fmt.Println("This is the unit:", unit)
-		fmt.Println("This is the name:", name)
 		if len(unit) > 0 {
 			sfx := fmt.Sprintf("_%s", unit)
 			if p.mf.GetType() == dto.MetricType_COUNTER {
 				sfx = fmt.Sprintf("_%s_total", unit)
 			}
 			if !strings.HasSuffix(name, sfx) {
-				return EntryInvalid, fmt.Errorf("invalid unit for metric %q: %s", name, unit)
+				return EntryInvalid, fmt.Errorf("unit %q not a suffix of metric %q", name, unit)
 			}
 		}
 		p.metricBytes.Reset()

From 9a664b515a2f86a313bd70af58de9210c7fcb04b Mon Sep 17 00:00:00 2001
From: Arianna Vespri <arianna.vespri@yahoo.it>
Date: Wed, 20 Dec 2023 09:41:37 +0100
Subject: [PATCH 051/132] Correct order in error message

Signed-off-by: Arianna Vespri <arianna.vespri@yahoo.it>
---
 model/textparse/protobufparse.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/model/textparse/protobufparse.go b/model/textparse/protobufparse.go
index c40176bcc75..5ecdbf6ef4a 100644
--- a/model/textparse/protobufparse.go
+++ b/model/textparse/protobufparse.go
@@ -430,7 +430,7 @@ func (p *ProtobufParser) Next() (Entry, error) {
 				sfx = fmt.Sprintf("_%s_total", unit)
 			}
 			if !strings.HasSuffix(name, sfx) {
-				return EntryInvalid, fmt.Errorf("unit %q not a suffix of metric %q", name, unit)
+				return EntryInvalid, fmt.Errorf("unit %q not a suffix of metric %q", unit, name)
 			}
 		}
 		p.metricBytes.Reset()

From b012366c33cb673110421b9e20e35fde99c992db Mon Sep 17 00:00:00 2001
From: Kumar Kalpadiptya Roy <kalpadiptya.roy@outlook.com>
Date: Wed, 20 Dec 2023 00:28:59 +0530
Subject: [PATCH 052/132] Issue #13268: fix quality value in accept header

Signed-off-by: Kumar Kalpadiptya Roy <kalpadiptya.roy@outlook.com>
---
 scrape/scrape.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scrape/scrape.go b/scrape/scrape.go
index be27a5d4874..cb65053bad1 100644
--- a/scrape/scrape.go
+++ b/scrape/scrape.go
@@ -675,7 +675,7 @@ func acceptHeader(sps []config.ScrapeProtocol) string {
 		weight--
 	}
 	// Default match anything.
-	vals = append(vals, fmt.Sprintf("*/*;q=%d", weight))
+	vals = append(vals, fmt.Sprintf("*/*;q=0.%d", weight))
 	return strings.Join(vals, ",")
 }
 

From 5df3820c7a5e099f0cdf8c503a01ac4b0498cf96 Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Mon, 25 Dec 2023 11:19:16 +0100
Subject: [PATCH 053/132] Copy last histogram point

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
---
 promql/engine.go | 23 +++++++++++++----------
 1 file changed, 13 insertions(+), 10 deletions(-)

diff --git a/promql/engine.go b/promql/engine.go
index 12755663dc9..5d6f7b9a08d 100644
--- a/promql/engine.go
+++ b/promql/engine.go
@@ -2126,17 +2126,20 @@ loop:
 	// The sought sample might also be in the range.
 	switch soughtValueType {
 	case chunkenc.ValFloatHistogram, chunkenc.ValHistogram:
-		t, h := it.AtFloatHistogram()
-		if t == maxt && !value.IsStaleNaN(h.Sum) {
-			if ev.currentSamples >= ev.maxSamples {
-				ev.error(ErrTooManySamples(env))
-			}
-			if histograms == nil {
-				histograms = getHPointSlice(16)
+		t := it.AtT()
+		if t == maxt {
+			_, h := it.AtFloatHistogram()
+			if !value.IsStaleNaN(h.Sum) {
+				if ev.currentSamples >= ev.maxSamples {
+					ev.error(ErrTooManySamples(env))
+				}
+				if histograms == nil {
+					histograms = getHPointSlice(16)
+				}
+				point := HPoint{T: t, H: h.Copy()}
+				histograms = append(histograms, point)
+				ev.currentSamples += point.size()
 			}
-			point := HPoint{T: t, H: h}
-			histograms = append(histograms, point)
-			ev.currentSamples += point.size()
 		}
 	case chunkenc.ValFloat:
 		t, f := it.At()

From 35f9620cd1f212b37cc3074bbd59bdfae713f87d Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Mon, 25 Dec 2023 11:30:29 +0100
Subject: [PATCH 054/132] Expand benchmark

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
---
 promql/bench_test.go | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/promql/bench_test.go b/promql/bench_test.go
index 13eba3714e3..b7a4978de26 100644
--- a/promql/bench_test.go
+++ b/promql/bench_test.go
@@ -296,8 +296,12 @@ func BenchmarkNativeHistograms(b *testing.B) {
 			query: "sum(native_histogram_series)",
 		},
 		{
-			name:  "sum rate",
-			query: "sum(rate(native_histogram_series[1m]))",
+			name:  "sum rate with short rate interval",
+			query: "sum(rate(native_histogram_series[2m]))",
+		},
+		{
+			name:  "sum rate with long rate interval",
+			query: "sum(rate(native_histogram_series[20m]))",
 		},
 	}
 

From 0e1ae1d1caa65c398d0024a4ecb7977405e15a07 Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Mon, 25 Dec 2023 11:41:07 +0100
Subject: [PATCH 055/132] Add comment

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
---
 promql/engine.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/promql/engine.go b/promql/engine.go
index 5d6f7b9a08d..2ea37dae605 100644
--- a/promql/engine.go
+++ b/promql/engine.go
@@ -2136,6 +2136,8 @@ loop:
 				if histograms == nil {
 					histograms = getHPointSlice(16)
 				}
+				// The last sample comes directly from the iterator, so we need to copy it to
+				// avoid having the same reference twice in the buffer.
 				point := HPoint{T: t, H: h.Copy()}
 				histograms = append(histograms, point)
 				ev.currentSamples += point.size()

From b2185d96af9a45c7efa384b1f57138700c95bce5 Mon Sep 17 00:00:00 2001
From: Daniel Kerbel <nmdanny@gmail.com>
Date: Tue, 26 Dec 2023 18:44:39 +0200
Subject: [PATCH 056/132] Consider storage.ErrTooOldSample as non-retryable

Signed-off-by: Daniel Kerbel <nmdanny@gmail.com>
---
 storage/remote/write_handler.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/storage/remote/write_handler.go b/storage/remote/write_handler.go
index 9891c6aae7c..971f7b457e8 100644
--- a/storage/remote/write_handler.go
+++ b/storage/remote/write_handler.go
@@ -68,7 +68,7 @@ func (h *writeHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 	err = h.write(r.Context(), req)
 	switch {
 	case err == nil:
-	case errors.Is(err, storage.ErrOutOfOrderSample), errors.Is(err, storage.ErrOutOfBounds), errors.Is(err, storage.ErrDuplicateSampleForTimestamp):
+	case errors.Is(err, storage.ErrOutOfOrderSample), errors.Is(err, storage.ErrOutOfBounds), errors.Is(err, storage.ErrDuplicateSampleForTimestamp), errors.Is(err, storage.ErrTooOldSample):
 		// Indicated an out of order sample is a bad request to prevent retries.
 		http.Error(w, err.Error(), http.StatusBadRequest)
 		return

From 2f601772034511fec65af20cd7c676a19f18d7f9 Mon Sep 17 00:00:00 2001
From: machine424 <ayoubmrini424@gmail.com>
Date: Tue, 26 Dec 2023 22:06:03 +0100
Subject: [PATCH 057/132] scrape_test.go: Increase scrape interval in
 TestScrapeLoopCache to reduce potential flakiness

Signed-off-by: machine424 <ayoubmrini424@gmail.com>
---
 scrape/scrape_test.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/scrape/scrape_test.go b/scrape/scrape_test.go
index 1a416eeb6f0..21a461a7248 100644
--- a/scrape/scrape_test.go
+++ b/scrape/scrape_test.go
@@ -1194,7 +1194,9 @@ func TestScrapeLoopCache(t *testing.T) {
 	)
 
 	ctx, cancel := context.WithCancel(context.Background())
-	sl := newBasicScrapeLoop(t, ctx, scraper, app, 10*time.Millisecond)
+	// Decreasing the scrape interval could make the test fail, as multiple scrapes might be initiated at identical millisecond timestamps.
+	// See https://github.com/prometheus/prometheus/issues/12727.
+	sl := newBasicScrapeLoop(t, ctx, scraper, app, 100*time.Millisecond)
 
 	numScrapes := 0
 

From 8f07f9dd90bd2694acb1ca5476e9d596a1449fd9 Mon Sep 17 00:00:00 2001
From: Arianna Vespri <arianna.vespri@yahoo.it>
Date: Thu, 28 Dec 2023 15:41:38 +0100
Subject: [PATCH 058/132] Avoid creating string for suffix, consider counters
 without _total suffix

Signed-off-by: Arianna Vespri <arianna.vespri@yahoo.it>
---
 model/textparse/protobufparse.go | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/model/textparse/protobufparse.go b/model/textparse/protobufparse.go
index 5ecdbf6ef4a..9ccd00f6eda 100644
--- a/model/textparse/protobufparse.go
+++ b/model/textparse/protobufparse.go
@@ -425,11 +425,11 @@ func (p *ProtobufParser) Next() (Entry, error) {
 		}
 		unit := p.mf.GetUnit()
 		if len(unit) > 0 {
-			sfx := fmt.Sprintf("_%s", unit)
-			if p.mf.GetType() == dto.MetricType_COUNTER {
-				sfx = fmt.Sprintf("_%s_total", unit)
-			}
-			if !strings.HasSuffix(name, sfx) {
+			if p.mf.GetType() == dto.MetricType_COUNTER && strings.HasSuffix(name, "_total") {
+				if !strings.HasSuffix(name[:len(name)-6], unit) || len(name)-6 < len(unit)+1 || name[len(name)-6-len(unit)-1] != '_' {
+					return EntryInvalid, fmt.Errorf("unit %q not a suffix of counter %q", unit, name)
+				}
+			} else if !strings.HasSuffix(name, unit) || len(name) < len(unit)+1 || name[len(name)-len(unit)-1] != '_' {
 				return EntryInvalid, fmt.Errorf("unit %q not a suffix of metric %q", unit, name)
 			}
 		}

From 2ddb3596ef4d2b1de482337ce1943476699b82fb Mon Sep 17 00:00:00 2001
From: Mile Druzijanic <153705375+zedGGs@users.noreply.github.com>
Date: Thu, 28 Dec 2023 21:49:57 +0100
Subject: [PATCH 059/132] Adding small test update for temp dir using t.TempDir
 (#13293)

* Adding small test update for temp dir using t.TempDir

Signed-off-by: Mile Druzijanic <miledruz@gmail.com>
Signed-off-by: Mile Druzijanic <zedsprogramms@gmail.com>

* removing not required cleanup

Signed-off-by: Mile Druzijanic <zedsprogramms@gmail.com>

---------

Signed-off-by: Mile Druzijanic <miledruz@gmail.com>
Signed-off-by: Mile Druzijanic <zedsprogramms@gmail.com>
---
 promql/engine_test.go                |  5 +----
 tsdb/tsdbutil/dir_locker_testutil.go | 10 +++-------
 2 files changed, 4 insertions(+), 11 deletions(-)

diff --git a/promql/engine_test.go b/promql/engine_test.go
index 105cdc10d55..b3e7d409486 100644
--- a/promql/engine_test.go
+++ b/promql/engine_test.go
@@ -18,7 +18,6 @@ import (
 	"errors"
 	"fmt"
 	"math"
-	"os"
 	"sort"
 	"testing"
 	"time"
@@ -47,9 +46,7 @@ func TestMain(m *testing.M) {
 func TestQueryConcurrency(t *testing.T) {
 	maxConcurrency := 10
 
-	dir, err := os.MkdirTemp("", "test_concurrency")
-	require.NoError(t, err)
-	defer os.RemoveAll(dir)
+	dir := t.TempDir()
 	queryTracker := NewActiveQueryTracker(dir, maxConcurrency, nil)
 	t.Cleanup(queryTracker.Close)
 
diff --git a/tsdb/tsdbutil/dir_locker_testutil.go b/tsdb/tsdbutil/dir_locker_testutil.go
index a4cf5abd68c..a7f43d8eee4 100644
--- a/tsdb/tsdbutil/dir_locker_testutil.go
+++ b/tsdb/tsdbutil/dir_locker_testutil.go
@@ -60,12 +60,8 @@ func TestDirLockerUsage(t *testing.T, open func(t *testing.T, data string, creat
 
 	for _, c := range cases {
 		t.Run(fmt.Sprintf("%+v", c), func(t *testing.T) {
-			tmpdir, err := os.MkdirTemp("", "test")
-			require.NoError(t, err)
-			t.Cleanup(func() {
-				require.NoError(t, os.RemoveAll(tmpdir))
-			})
-
+			tmpdir := t.TempDir()
+			
 			// Test preconditions (file already exists + lockfile option)
 			if c.fileAlreadyExists {
 				tmpLocker, err := NewDirLocker(tmpdir, "tsdb", log.NewNopLogger(), nil)
@@ -82,7 +78,7 @@ func TestDirLockerUsage(t *testing.T, open func(t *testing.T, data string, creat
 
 			// Check that the lockfile is always deleted
 			if !c.lockFileDisabled {
-				_, err = os.Stat(locker.path)
+				_, err := os.Stat(locker.path)
 				require.True(t, os.IsNotExist(err), "lockfile was not deleted")
 			}
 		})

From 252031c86f5c6fe7acad504bc6f3162175f347b2 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Sat, 30 Dec 2023 19:13:59 +0000
Subject: [PATCH 060/132] Revert "Adding small test update for temp dir using
 t.TempDir (#13293)"

This reverts commit 2ddb3596ef4d2b1de482337ce1943476699b82fb.

Various tests are failing in CI after this change; reverting to free up
other work.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 promql/engine_test.go                |  5 ++++-
 tsdb/tsdbutil/dir_locker_testutil.go | 10 +++++++---
 2 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/promql/engine_test.go b/promql/engine_test.go
index b3e7d409486..105cdc10d55 100644
--- a/promql/engine_test.go
+++ b/promql/engine_test.go
@@ -18,6 +18,7 @@ import (
 	"errors"
 	"fmt"
 	"math"
+	"os"
 	"sort"
 	"testing"
 	"time"
@@ -46,7 +47,9 @@ func TestMain(m *testing.M) {
 func TestQueryConcurrency(t *testing.T) {
 	maxConcurrency := 10
 
-	dir := t.TempDir()
+	dir, err := os.MkdirTemp("", "test_concurrency")
+	require.NoError(t, err)
+	defer os.RemoveAll(dir)
 	queryTracker := NewActiveQueryTracker(dir, maxConcurrency, nil)
 	t.Cleanup(queryTracker.Close)
 
diff --git a/tsdb/tsdbutil/dir_locker_testutil.go b/tsdb/tsdbutil/dir_locker_testutil.go
index a7f43d8eee4..a4cf5abd68c 100644
--- a/tsdb/tsdbutil/dir_locker_testutil.go
+++ b/tsdb/tsdbutil/dir_locker_testutil.go
@@ -60,8 +60,12 @@ func TestDirLockerUsage(t *testing.T, open func(t *testing.T, data string, creat
 
 	for _, c := range cases {
 		t.Run(fmt.Sprintf("%+v", c), func(t *testing.T) {
-			tmpdir := t.TempDir()
-			
+			tmpdir, err := os.MkdirTemp("", "test")
+			require.NoError(t, err)
+			t.Cleanup(func() {
+				require.NoError(t, os.RemoveAll(tmpdir))
+			})
+
 			// Test preconditions (file already exists + lockfile option)
 			if c.fileAlreadyExists {
 				tmpLocker, err := NewDirLocker(tmpdir, "tsdb", log.NewNopLogger(), nil)
@@ -78,7 +82,7 @@ func TestDirLockerUsage(t *testing.T, open func(t *testing.T, data string, creat
 
 			// Check that the lockfile is always deleted
 			if !c.lockFileDisabled {
-				_, err := os.Stat(locker.path)
+				_, err = os.Stat(locker.path)
 				require.True(t, os.IsNotExist(err), "lockfile was not deleted")
 			}
 		})

From e64d7d8928323d3ec95c5bfccb66b30a6bd5393e Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Thu, 7 Dec 2023 15:27:59 +0000
Subject: [PATCH 061/132] agent: make the global hash lookup table smaller

This is the same change made in #13040, plus subsequent improvements,
applied to agent-mode code.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 tsdb/agent/series.go      | 130 +++++++++++++++++++++++++-------------
 tsdb/agent/series_test.go |  60 ++++++++++++++++++
 2 files changed, 146 insertions(+), 44 deletions(-)

diff --git a/tsdb/agent/series.go b/tsdb/agent/series.go
index d38518f71ef..76e73421719 100644
--- a/tsdb/agent/series.go
+++ b/tsdb/agent/series.go
@@ -45,14 +45,23 @@ func (m *memSeries) updateTimestamp(newTs int64) bool {
 	return false
 }
 
-// seriesHashmap is a simple hashmap for memSeries by their label set.
-// It is built on top of a regular hashmap and holds a slice of series to
-// resolve hash collisions. Its methods require the hash to be submitted
+// seriesHashmap lets agent find a memSeries by its label set, via a 64-bit hash.
+// There is one map for the common case where the hash value is unique, and a
+// second map for the case that two series have the same hash value.
+// Each series is in only one of the maps. Its methods require the hash to be submitted
 // with the label set to avoid re-computing hash throughout the code.
-type seriesHashmap map[uint64][]*memSeries
+type seriesHashmap struct {
+	unique    map[uint64]*memSeries
+	conflicts map[uint64][]*memSeries
+}
 
-func (m seriesHashmap) Get(hash uint64, lset labels.Labels) *memSeries {
-	for _, s := range m[hash] {
+func (m *seriesHashmap) Get(hash uint64, lset labels.Labels) *memSeries {
+	if s, found := m.unique[hash]; found {
+		if labels.Equal(s.lset, lset) {
+			return s
+		}
+	}
+	for _, s := range m.conflicts[hash] {
 		if labels.Equal(s.lset, lset) {
 			return s
 		}
@@ -60,28 +69,49 @@ func (m seriesHashmap) Get(hash uint64, lset labels.Labels) *memSeries {
 	return nil
 }
 
-func (m seriesHashmap) Set(hash uint64, s *memSeries) {
-	seriesSet := m[hash]
+func (m *seriesHashmap) Set(hash uint64, s *memSeries) {
+	if existing, found := m.unique[hash]; !found || labels.Equal(existing.lset, s.lset) {
+		m.unique[hash] = s
+		return
+	}
+	if m.conflicts == nil {
+		m.conflicts = make(map[uint64][]*memSeries)
+	}
+	seriesSet := m.conflicts[hash]
 	for i, prev := range seriesSet {
 		if labels.Equal(prev.lset, s.lset) {
 			seriesSet[i] = s
 			return
 		}
 	}
-	m[hash] = append(seriesSet, s)
+	m.conflicts[hash] = append(seriesSet, s)
 }
 
-func (m seriesHashmap) Delete(hash uint64, ref chunks.HeadSeriesRef) {
+func (m *seriesHashmap) Delete(hash uint64, ref chunks.HeadSeriesRef) {
 	var rem []*memSeries
-	for _, s := range m[hash] {
-		if s.ref != ref {
-			rem = append(rem, s)
+	unique, found := m.unique[hash]
+	switch {
+	case !found: // Supplied hash is not stored.
+		return
+	case unique.ref == ref:
+		conflicts := m.conflicts[hash]
+		if len(conflicts) == 0 { // Exactly one series with this hash was stored
+			delete(m.unique, hash)
+			return
+		}
+		m.unique[hash] = conflicts[0] // First remaining series goes in 'unique'.
+		rem = conflicts[1:]           // Keep the rest.
+	default: // The series to delete is somewhere in 'conflicts'. Keep all the ones that don't match.
+		for _, s := range m.conflicts[hash] {
+			if s.ref != ref {
+				rem = append(rem, s)
+			}
 		}
 	}
 	if len(rem) == 0 {
-		delete(m, hash)
+		delete(m.conflicts, hash)
 	} else {
-		m[hash] = rem
+		m.conflicts[hash] = rem
 	}
 }
 
@@ -117,7 +147,10 @@ func newStripeSeries(stripeSize int) *stripeSeries {
 		s.series[i] = map[chunks.HeadSeriesRef]*memSeries{}
 	}
 	for i := range s.hashes {
-		s.hashes[i] = seriesHashmap{}
+		s.hashes[i] = seriesHashmap{
+			unique:    map[uint64]*memSeries{},
+			conflicts: nil, // Initialized on demand in set().
+		}
 	}
 	for i := range s.exemplars {
 		s.exemplars[i] = map[chunks.HeadSeriesRef]*exemplar.Exemplar{}
@@ -136,40 +169,49 @@ func (s *stripeSeries) GC(mint int64) map[chunks.HeadSeriesRef]struct{} {
 	defer s.gcMut.Unlock()
 
 	deleted := map[chunks.HeadSeriesRef]struct{}{}
+
+	// For one series, truncate old chunks and check if any chunks left. If not, mark as deleted and collect the ID.
+	check := func(hashLock int, hash uint64, series *memSeries) {
+		series.Lock()
+
+		// Any series that has received a write since mint is still alive.
+		if series.lastTs >= mint {
+			series.Unlock()
+			return
+		}
+
+		// The series is stale. We need to obtain a second lock for the
+		// ref if it's different than the hash lock.
+		refLock := int(series.ref) & (s.size - 1)
+		if hashLock != refLock {
+			s.locks[refLock].Lock()
+		}
+
+		deleted[series.ref] = struct{}{}
+		delete(s.series[refLock], series.ref)
+		s.hashes[hashLock].Delete(hash, series.ref)
+
+		// Since the series is gone, we'll also delete
+		// the latest stored exemplar.
+		delete(s.exemplars[refLock], series.ref)
+
+		if hashLock != refLock {
+			s.locks[refLock].Unlock()
+		}
+		series.Unlock()
+	}
+
 	for hashLock := 0; hashLock < s.size; hashLock++ {
 		s.locks[hashLock].Lock()
 
-		for hash, all := range s.hashes[hashLock] {
+		for hash, all := range s.hashes[hashLock].conflicts {
 			for _, series := range all {
-				series.Lock()
-
-				// Any series that has received a write since mint is still alive.
-				if series.lastTs >= mint {
-					series.Unlock()
-					continue
-				}
-
-				// The series is stale. We need to obtain a second lock for the
-				// ref if it's different than the hash lock.
-				refLock := int(series.ref) & (s.size - 1)
-				if hashLock != refLock {
-					s.locks[refLock].Lock()
-				}
-
-				deleted[series.ref] = struct{}{}
-				delete(s.series[refLock], series.ref)
-				s.hashes[hashLock].Delete(hash, series.ref)
-
-				// Since the series is gone, we'll also delete
-				// the latest stored exemplar.
-				delete(s.exemplars[refLock], series.ref)
-
-				if hashLock != refLock {
-					s.locks[refLock].Unlock()
-				}
-				series.Unlock()
+				check(hashLock, hash, series)
 			}
 		}
+		for hash, series := range s.hashes[hashLock].unique {
+			check(hashLock, hash, series)
+		}
 
 		s.locks[hashLock].Unlock()
 	}
diff --git a/tsdb/agent/series_test.go b/tsdb/agent/series_test.go
index 480f6c02633..ae327d8582c 100644
--- a/tsdb/agent/series_test.go
+++ b/tsdb/agent/series_test.go
@@ -74,3 +74,63 @@ func TestNoDeadlock(t *testing.T) {
 		require.FailNow(t, "deadlock detected")
 	}
 }
+
+func labelsWithHashCollision() (labels.Labels, labels.Labels) {
+	// These two series have the same XXHash; thanks to https://github.com/pstibrany/labels_hash_collisions
+	ls1 := labels.FromStrings("__name__", "metric", "lbl1", "value", "lbl2", "l6CQ5y")
+	ls2 := labels.FromStrings("__name__", "metric", "lbl1", "value", "lbl2", "v7uDlF")
+
+	if ls1.Hash() != ls2.Hash() {
+		// These ones are the same when using -tags stringlabels
+		ls1 = labels.FromStrings("__name__", "metric", "lbl", "HFnEaGl")
+		ls2 = labels.FromStrings("__name__", "metric", "lbl", "RqcXatm")
+	}
+
+	if ls1.Hash() != ls2.Hash() {
+		panic("This code needs to be updated: find new labels with colliding hash values.")
+	}
+
+	return ls1, ls2
+}
+
+// stripeSeriesWithCollidingSeries returns a stripeSeries with two memSeries having the same, colliding, hash.
+func stripeSeriesWithCollidingSeries(_ *testing.T) (*stripeSeries, *memSeries, *memSeries) {
+	lbls1, lbls2 := labelsWithHashCollision()
+	ms1 := memSeries{
+		lset: lbls1,
+	}
+	ms2 := memSeries{
+		lset: lbls2,
+	}
+	hash := lbls1.Hash()
+	s := newStripeSeries(1)
+
+	s.Set(hash, &ms1)
+	s.Set(hash, &ms2)
+
+	return s, &ms1, &ms2
+}
+
+func TestStripeSeries_Get(t *testing.T) {
+	s, ms1, ms2 := stripeSeriesWithCollidingSeries(t)
+	hash := ms1.lset.Hash()
+
+	// Verify that we can get both of the series despite the hash collision
+	got := s.GetByHash(hash, ms1.lset)
+	require.Same(t, ms1, got)
+	got = s.GetByHash(hash, ms2.lset)
+	require.Same(t, ms2, got)
+}
+
+func TestStripeSeries_gc(t *testing.T) {
+	s, ms1, ms2 := stripeSeriesWithCollidingSeries(t)
+	hash := ms1.lset.Hash()
+
+	s.GC(1)
+
+	// Verify that we can get neither ms1 nor ms2 after gc-ing corresponding series
+	got := s.GetByHash(hash, ms1.lset)
+	require.Nil(t, got)
+	got = s.GetByHash(hash, ms2.lset)
+	require.Nil(t, got)
+}

From bad3f23f23817881d8d91f3705b8c7d31ccecfe9 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Sat, 30 Dec 2023 14:07:09 +0000
Subject: [PATCH 062/132] agent: add BenchmarkCreateSeries

Based on the one in tsdb/head_test.go.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 tsdb/agent/db_test.go | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/tsdb/agent/db_test.go b/tsdb/agent/db_test.go
index 1e0976c3f16..32b7e4394e1 100644
--- a/tsdb/agent/db_test.go
+++ b/tsdb/agent/db_test.go
@@ -84,7 +84,7 @@ func TestDB_InvalidSeries(t *testing.T) {
 	})
 }
 
-func createTestAgentDB(t *testing.T, reg prometheus.Registerer, opts *Options) *DB {
+func createTestAgentDB(t testing.TB, reg prometheus.Registerer, opts *Options) *DB {
 	t.Helper()
 
 	dbDir := t.TempDir()
@@ -878,3 +878,21 @@ func TestDBAllowOOOSamples(t *testing.T) {
 	require.Equal(t, float64(80), m.Metric[1].Counter.GetValue(), "agent wal mismatch of total appended histograms")
 	require.NoError(t, db.Close())
 }
+
+func BenchmarkCreateSeries(b *testing.B) {
+	s := createTestAgentDB(b, nil, DefaultOptions())
+	defer s.Close()
+
+	app := s.Appender(context.Background()).(*appender)
+	lbls := make([]labels.Labels, b.N)
+
+	for i, l := range labelsForTest("benchmark", b.N) {
+		lbls[i] = labels.New(l...)
+	}
+
+	b.ResetTimer()
+
+	for _, l := range lbls {
+		app.getOrCreate(l)
+	}
+}

From 153632063f4140851c4303a375a7ccda46f4b31c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 1 Jan 2024 23:13:46 +0000
Subject: [PATCH 063/132] build(deps): bump github.com/prometheus/client_golang

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.17.0 to 1.18.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.17.0...v1.18.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 documentation/examples/remote_storage/go.mod |  6 +++---
 documentation/examples/remote_storage/go.sum | 12 ++++++------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/documentation/examples/remote_storage/go.mod b/documentation/examples/remote_storage/go.mod
index d0fec0f134c..3a84bfa98fd 100644
--- a/documentation/examples/remote_storage/go.mod
+++ b/documentation/examples/remote_storage/go.mod
@@ -8,7 +8,7 @@ require (
 	github.com/gogo/protobuf v1.3.2
 	github.com/golang/snappy v0.0.4
 	github.com/influxdata/influxdb v1.11.2
-	github.com/prometheus/client_golang v1.17.0
+	github.com/prometheus/client_golang v1.18.0
 	github.com/prometheus/common v0.45.0
 	github.com/prometheus/prometheus v0.48.0
 	github.com/stretchr/testify v1.8.4
@@ -48,7 +48,7 @@ require (
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/client_model v0.5.0 // indirect
 	github.com/prometheus/common/sigv4 v0.1.0 // indirect
-	github.com/prometheus/procfs v0.11.1 // indirect
+	github.com/prometheus/procfs v0.12.0 // indirect
 	github.com/xhit/go-str2duration/v2 v2.1.0 // indirect
 	go.opentelemetry.io/collector/pdata v1.0.0-rcv0016 // indirect
 	go.opentelemetry.io/collector/semconv v0.87.0 // indirect
@@ -62,7 +62,7 @@ require (
 	golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect
 	golang.org/x/net v0.17.0 // indirect
 	golang.org/x/oauth2 v0.13.0 // indirect
-	golang.org/x/sys v0.13.0 // indirect
+	golang.org/x/sys v0.15.0 // indirect
 	golang.org/x/text v0.13.0 // indirect
 	golang.org/x/time v0.3.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
diff --git a/documentation/examples/remote_storage/go.sum b/documentation/examples/remote_storage/go.sum
index a30c315b817..031c54ff037 100644
--- a/documentation/examples/remote_storage/go.sum
+++ b/documentation/examples/remote_storage/go.sum
@@ -194,8 +194,8 @@ github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXP
 github.com/prometheus/client_golang v1.0.0/go.mod h1:db9x61etRT2tGnBNRi70OPL5FsnadC4Ky3P0J6CfImo=
 github.com/prometheus/client_golang v1.7.1/go.mod h1:PY5Wy2awLA44sXw4AOSfFBetzPP4j5+D6mVACh+pe2M=
 github.com/prometheus/client_golang v1.11.0/go.mod h1:Z6t4BnS23TR94PD6BsDNk8yVqroYurpAkEiz0P2BEV0=
-github.com/prometheus/client_golang v1.17.0 h1:rl2sfwZMtSthVU752MqfjQozy7blglC+1SOtjMAMh+Q=
-github.com/prometheus/client_golang v1.17.0/go.mod h1:VeL+gMmOAxkS2IqfCq0ZmHSL+LjWfWDUmp1mBz9JgUY=
+github.com/prometheus/client_golang v1.18.0 h1:HzFfmkOzH5Q8L8G+kSJKUx5dtG87sewO+FoDDqP5Tbk=
+github.com/prometheus/client_golang v1.18.0/go.mod h1:T+GXkCk5wSJyOqMIzVgvvjFDlkOQntgjkJWKrN5txjA=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/client_model v0.2.0/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
@@ -213,8 +213,8 @@ github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R
 github.com/prometheus/procfs v0.0.2/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA=
 github.com/prometheus/procfs v0.1.3/go.mod h1:lV6e/gmhEcM9IjHGsFOCxxuZ+z1YqCvr4OA4YeYWdaU=
 github.com/prometheus/procfs v0.6.0/go.mod h1:cz+aTbrPOrUb4q7XlbU9ygM+/jj0fzG6c1xBZuNvfVA=
-github.com/prometheus/procfs v0.11.1 h1:xRC8Iq1yyca5ypa9n1EZnWZkt7dwcoRPQwX/5gwaUuI=
-github.com/prometheus/procfs v0.11.1/go.mod h1:eesXgaPo1q7lBpVMoMy0ZOFTth9hBn4W/y0/p/ScXhY=
+github.com/prometheus/procfs v0.12.0 h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo=
+github.com/prometheus/procfs v0.12.0/go.mod h1:pcuDEFsWDnvcgNzo4EEweacyhjeA9Zk3cnaOZAZEfOo=
 github.com/prometheus/prometheus v0.48.0 h1:yrBloImGQ7je4h8M10ujGh4R6oxYQJQKlMuETwNskGk=
 github.com/prometheus/prometheus v0.48.0/go.mod h1:SRw624aMAxTfryAcP8rOjg4S/sHHaetx2lyJJ2nM83g=
 github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
@@ -317,8 +317,8 @@ golang.org/x/sys v0.0.0-20210616045830-e2b7044e8c71/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.13.0 h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=
-golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.15.0 h1:h48lPFYpsTvQJZF4EKyI4aLHaev3CxivZmv7yZig9pc=
+golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=

From b90554f7a58cc2ace40dec3362f5c44145ff3231 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 1 Jan 2024 23:35:55 +0000
Subject: [PATCH 064/132] build(deps): bump actions/setup-node from 3.8.1 to
 4.0.1

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3.8.1 to 4.0.1.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d...b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8ba154e2588..f1e2b66bf1c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -197,7 +197,7 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - uses: prometheus/promci@3cb0c3871f223bd5ce1226995bd52ffb314798b6 # v0.1.0
       - name: Install nodejs
-        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
         with:
           node-version-file: "web/ui/.nvmrc"
           registry-url: "https://registry.npmjs.org"

From f29e0adb964cb9de93c56c2e2ebcd6c1fc00e12d Mon Sep 17 00:00:00 2001
From: Jan Fajerski <jfajersk@redhat.com>
Date: Tue, 2 Jan 2024 12:00:42 +0100
Subject: [PATCH 065/132] scripts: sort file list in embed directive

Otherwise the resulting string depends on find, which afaict depends on
the underlying filesystem. A stable file list make it easier to detect
UI changes in downstreams that need to track UI assets.

Signed-off-by: Jan Fajerski <jfajersk@redhat.com>
---
 scripts/compress_assets.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/compress_assets.sh b/scripts/compress_assets.sh
index 615e30c43c5..6608677bbfe 100755
--- a/scripts/compress_assets.sh
+++ b/scripts/compress_assets.sh
@@ -12,5 +12,5 @@ GZIP_OPTS="-fk"
 if ! gzip -k -h &>/dev/null; then GZIP_OPTS="-f"; fi
 
 find static -type f -name '*.gz' -delete
-find static -type f -exec gzip $GZIP_OPTS '{}' \; -print0 | xargs -0 -I % echo %.gz | xargs echo //go:embed >> embed.go
+find static -type f -exec gzip $GZIP_OPTS '{}' \; -print0 | xargs -0 -I % echo %.gz | sort | xargs echo //go:embed >> embed.go
 echo var EmbedFS embed.FS >> embed.go

From c126c21baa217c9cdce55819acb6d3483f9cd572 Mon Sep 17 00:00:00 2001
From: Kevin Mingtarja <kevin.mingtarja@gmail.com>
Date: Thu, 4 Jan 2024 01:51:56 +0700
Subject: [PATCH 066/132] Fix DataTableProps['data'] for resultType string

Signed-off-by: Kevin Mingtarja <kevin.mingtarja@gmail.com>
---
 web/ui/react-app/src/pages/graph/DataTable.test.tsx | 4 ++--
 web/ui/react-app/src/pages/graph/DataTable.tsx      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/web/ui/react-app/src/pages/graph/DataTable.test.tsx b/web/ui/react-app/src/pages/graph/DataTable.test.tsx
index d6974cf9062..1252b5bfcf7 100755
--- a/web/ui/react-app/src/pages/graph/DataTable.test.tsx
+++ b/web/ui/react-app/src/pages/graph/DataTable.test.tsx
@@ -338,7 +338,7 @@ describe('DataTable', () => {
     const dataTableProps: DataTableProps = {
       data: {
         resultType: 'string',
-        result: 'string',
+        result: [1572098246.599, 'test'],
       },
       useLocalTime: false,
     };
@@ -346,7 +346,7 @@ describe('DataTable', () => {
     it('renders a string row', () => {
       const table = dataTable.find(Table);
       const rows = table.find('tr');
-      expect(rows.text()).toEqual('stringt');
+      expect(rows.text()).toEqual('stringtest');
     });
   });
 });
diff --git a/web/ui/react-app/src/pages/graph/DataTable.tsx b/web/ui/react-app/src/pages/graph/DataTable.tsx
index 901d7bb48d7..1885c7a80f6 100644
--- a/web/ui/react-app/src/pages/graph/DataTable.tsx
+++ b/web/ui/react-app/src/pages/graph/DataTable.tsx
@@ -24,7 +24,7 @@ export interface DataTableProps {
       }
     | {
         resultType: 'string';
-        result: string;
+        result: SampleValue;
       };
   useLocalTime: boolean;
 }

From 40941d450bd85a0ec31011951b40afc0101b744f Mon Sep 17 00:00:00 2001
From: Kevin Mingtarja <kevin.mingtarja@gmail.com>
Date: Thu, 4 Jan 2024 02:48:54 +0700
Subject: [PATCH 067/132] Fix handling of scalar and string in isHeatmapData

Signed-off-by: Kevin Mingtarja <kevin.mingtarja@gmail.com>
---
 .../pages/graph/GraphHeatmapHelpers.test.ts   | 55 ++++++++++++++++---
 .../src/pages/graph/GraphHeatmapHelpers.ts    |  8 ++-
 2 files changed, 52 insertions(+), 11 deletions(-)

diff --git a/web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.test.ts b/web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.test.ts
index dfc71858728..26c44be68b2 100644
--- a/web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.test.ts
+++ b/web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.test.ts
@@ -1,8 +1,23 @@
+import { DataTableProps } from './DataTable';
 import { isHeatmapData } from './GraphHeatmapHelpers';
 
 describe('GraphHeatmapHelpers', () => {
-  it('isHeatmapData should return false for a vector', () => {
-    const data = {
+  it('isHeatmapData should return false for scalar and string resultType', () => {
+    let data = {
+      resultType: 'scalar',
+      result: [1703091180.125, '1703091180.125'],
+    } as DataTableProps['data'];
+    expect(isHeatmapData(data)).toBe(false);
+
+    data = {
+      resultType: 'string',
+      result: [1704305680.332, '2504'],
+    } as DataTableProps['data'];
+    expect(isHeatmapData(data)).toBe(false);
+  });
+
+  it('isHeatmapData should return false for a vector and matrix if length < 2', () => {
+    let data = {
       resultType: 'vector',
       result: [
         {
@@ -13,15 +28,39 @@ describe('GraphHeatmapHelpers', () => {
           value: [1703091180.683, '6'],
         },
       ],
-    };
+    } as DataTableProps['data'];
+    expect(isHeatmapData(data)).toBe(false);
+
+    data = {
+      resultType: 'matrix',
+      result: [
+        {
+          metric: {},
+          values: [[1703091180.683, '6']],
+        },
+      ],
+    } as DataTableProps['data'];
     expect(isHeatmapData(data)).toBe(false);
   });
 
-  it('isHeatmapData should return false for scalar resultType', () => {
+  it('isHeatmapData should return true for valid heatmap data', () => {
     const data = {
-      resultType: 'scalar',
-      result: [1703091180.125, '1703091180.125'],
-    };
-    expect(isHeatmapData(data)).toBe(false);
+      resultType: 'matrix',
+      result: [
+        {
+          metric: {
+            le: '100',
+          },
+          values: [[1703091180.683, '6']],
+        },
+        {
+          metric: {
+            le: '1000',
+          },
+          values: [[1703091190.683, '6.1']],
+        },
+      ],
+    } as DataTableProps['data'];
+    expect(isHeatmapData(data)).toBe(true);
   });
 });
diff --git a/web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.ts b/web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.ts
index d564959cb80..d8b249c308f 100644
--- a/web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.ts
+++ b/web/ui/react-app/src/pages/graph/GraphHeatmapHelpers.ts
@@ -1,10 +1,12 @@
+import { DataTableProps } from './DataTable';
 import { GraphProps, GraphSeries } from './Graph';
 
-export function isHeatmapData(data: GraphProps['data']) {
-  if (!data?.result?.length || data?.result?.length < 2) {
+export function isHeatmapData(data: DataTableProps['data']) {
+  if (data?.resultType === 'scalar' || data?.resultType === 'string' || !data?.result?.length || data?.result?.length < 2) {
     return false;
   }
-  const result = data.result;
+  // Type assertion to prevent TS2349 error.
+  const result = data.result as GraphProps['data']['result'];
   const firstLabels = Object.keys(result[0].metric).filter((label) => label !== 'le');
   return result.every(({ metric }) => {
     const labels = Object.keys(metric).filter((label) => label !== 'le');

From 377c75036c4f382ad5edc20008bccdc0a976ca4c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 4 Jan 2024 08:42:49 +0000
Subject: [PATCH 068/132] build(deps): bump github.com/influxdata/influxdb

Bumps [github.com/influxdata/influxdb](https://github.com/influxdata/influxdb) from 1.11.2 to 1.11.4.
- [Release notes](https://github.com/influxdata/influxdb/releases)
- [Commits](https://github.com/influxdata/influxdb/compare/v1.11.2...v1.11.4)

---
updated-dependencies:
- dependency-name: github.com/influxdata/influxdb
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 documentation/examples/remote_storage/go.mod | 2 +-
 documentation/examples/remote_storage/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/documentation/examples/remote_storage/go.mod b/documentation/examples/remote_storage/go.mod
index 3a84bfa98fd..4c33a508765 100644
--- a/documentation/examples/remote_storage/go.mod
+++ b/documentation/examples/remote_storage/go.mod
@@ -7,7 +7,7 @@ require (
 	github.com/go-kit/log v0.2.1
 	github.com/gogo/protobuf v1.3.2
 	github.com/golang/snappy v0.0.4
-	github.com/influxdata/influxdb v1.11.2
+	github.com/influxdata/influxdb v1.11.4
 	github.com/prometheus/client_golang v1.18.0
 	github.com/prometheus/common v0.45.0
 	github.com/prometheus/prometheus v0.48.0
diff --git a/documentation/examples/remote_storage/go.sum b/documentation/examples/remote_storage/go.sum
index 031c54ff037..4b052616366 100644
--- a/documentation/examples/remote_storage/go.sum
+++ b/documentation/examples/remote_storage/go.sum
@@ -123,8 +123,8 @@ github.com/hashicorp/nomad/api v0.0.0-20230721134942-515895c7690c h1:Nc3Mt2BAnq0
 github.com/hashicorp/serf v0.10.1 h1:Z1H2J60yRKvfDYAOZLd2MU0ND4AH/WDz7xYHDWQsIPY=
 github.com/hetznercloud/hcloud-go/v2 v2.4.0 h1:MqlAE+w125PLvJRCpAJmEwrIxoVdUdOyuFUhE/Ukbok=
 github.com/imdario/mergo v0.3.16 h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4=
-github.com/influxdata/influxdb v1.11.2 h1:qOF3uQN1mDfJNEKwbAgJsqehf8IXgKok2vlGm736oGo=
-github.com/influxdata/influxdb v1.11.2/go.mod h1:eUMkLTE2vQwvSk6KGMrTBLKPaqSuczuelGbggigMPFw=
+github.com/influxdata/influxdb v1.11.4 h1:H3pVW+/tWQ4lkHhZxVQ13Ov1hmhHYaAzz8L5aq3ZNtw=
+github.com/influxdata/influxdb v1.11.4/go.mod h1:VO6X2zlamfmEf+Esc9dR+7UQhdE/krspWNEZPwxCrp0=
 github.com/ionos-cloud/sdk-go/v6 v6.1.9 h1:Iq3VIXzeEbc8EbButuACgfLMiY5TPVWUPNrF+Vsddo4=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
 github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo=

From cef6eba91431f123f5a2eef997f0cb49f91fa89c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 4 Jan 2024 08:43:28 +0000
Subject: [PATCH 069/132] build(deps): bump github.com/prometheus/prometheus

Bumps [github.com/prometheus/prometheus](https://github.com/prometheus/prometheus) from 0.48.0 to 0.48.1.
- [Release notes](https://github.com/prometheus/prometheus/releases)
- [Changelog](https://github.com/prometheus/prometheus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/prometheus/compare/v0.48.0...v0.48.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/prometheus
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 documentation/examples/remote_storage/go.mod | 2 +-
 documentation/examples/remote_storage/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/documentation/examples/remote_storage/go.mod b/documentation/examples/remote_storage/go.mod
index 3a84bfa98fd..dcc643749ff 100644
--- a/documentation/examples/remote_storage/go.mod
+++ b/documentation/examples/remote_storage/go.mod
@@ -10,7 +10,7 @@ require (
 	github.com/influxdata/influxdb v1.11.2
 	github.com/prometheus/client_golang v1.18.0
 	github.com/prometheus/common v0.45.0
-	github.com/prometheus/prometheus v0.48.0
+	github.com/prometheus/prometheus v0.48.1
 	github.com/stretchr/testify v1.8.4
 )
 
diff --git a/documentation/examples/remote_storage/go.sum b/documentation/examples/remote_storage/go.sum
index 031c54ff037..c89eff124f5 100644
--- a/documentation/examples/remote_storage/go.sum
+++ b/documentation/examples/remote_storage/go.sum
@@ -215,8 +215,8 @@ github.com/prometheus/procfs v0.1.3/go.mod h1:lV6e/gmhEcM9IjHGsFOCxxuZ+z1YqCvr4O
 github.com/prometheus/procfs v0.6.0/go.mod h1:cz+aTbrPOrUb4q7XlbU9ygM+/jj0fzG6c1xBZuNvfVA=
 github.com/prometheus/procfs v0.12.0 h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo=
 github.com/prometheus/procfs v0.12.0/go.mod h1:pcuDEFsWDnvcgNzo4EEweacyhjeA9Zk3cnaOZAZEfOo=
-github.com/prometheus/prometheus v0.48.0 h1:yrBloImGQ7je4h8M10ujGh4R6oxYQJQKlMuETwNskGk=
-github.com/prometheus/prometheus v0.48.0/go.mod h1:SRw624aMAxTfryAcP8rOjg4S/sHHaetx2lyJJ2nM83g=
+github.com/prometheus/prometheus v0.48.1 h1:CTszphSNTXkuCG6O0IfpKdHcJkvvnAAE1GbELKS+NFk=
+github.com/prometheus/prometheus v0.48.1/go.mod h1:SRw624aMAxTfryAcP8rOjg4S/sHHaetx2lyJJ2nM83g=
 github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
 github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21 h1:yWfiTPwYxB0l5fGMhl/G+liULugVIHD9AU77iNLrURQ=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=

From bb9503c12c9df66403867d454aeecf0917142a0a Mon Sep 17 00:00:00 2001
From: Paschalis Tsilias <tpaschalis@users.noreply.github.com>
Date: Thu, 4 Jan 2024 15:19:19 +0200
Subject: [PATCH 070/132] Bump client_golang to v1.18.0 (#13373)

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
---
 go.mod | 4 ++--
 go.sum | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/go.mod b/go.mod
index 0ecfd437444..428b6edecf5 100644
--- a/go.mod
+++ b/go.mod
@@ -46,7 +46,7 @@ require (
 	github.com/oklog/ulid v1.3.1
 	github.com/ovh/go-ovh v1.4.3
 	github.com/prometheus/alertmanager v0.26.0
-	github.com/prometheus/client_golang v1.17.0
+	github.com/prometheus/client_golang v1.18.0
 	github.com/prometheus/client_model v0.5.0
 	github.com/prometheus/common v0.45.1-0.20231122191551-832cd6e99f99
 	github.com/prometheus/common/assets v0.2.0
@@ -168,7 +168,7 @@ require (
 	github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
-	github.com/prometheus/procfs v0.11.1 // indirect
+	github.com/prometheus/procfs v0.12.0 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/stretchr/objx v0.5.0 // indirect
 	github.com/xhit/go-str2duration/v2 v2.1.0 // indirect
diff --git a/go.sum b/go.sum
index fb31c7a8491..8ce4efb5c51 100644
--- a/go.sum
+++ b/go.sum
@@ -636,8 +636,8 @@ github.com/prometheus/client_golang v1.3.0/go.mod h1:hJaj2vgQTGQmVCsAACORcieXFeD
 github.com/prometheus/client_golang v1.4.0/go.mod h1:e9GMxYsXl05ICDXkRhurwBS4Q3OK1iX/F2sw+iXX5zU=
 github.com/prometheus/client_golang v1.7.1/go.mod h1:PY5Wy2awLA44sXw4AOSfFBetzPP4j5+D6mVACh+pe2M=
 github.com/prometheus/client_golang v1.11.0/go.mod h1:Z6t4BnS23TR94PD6BsDNk8yVqroYurpAkEiz0P2BEV0=
-github.com/prometheus/client_golang v1.17.0 h1:rl2sfwZMtSthVU752MqfjQozy7blglC+1SOtjMAMh+Q=
-github.com/prometheus/client_golang v1.17.0/go.mod h1:VeL+gMmOAxkS2IqfCq0ZmHSL+LjWfWDUmp1mBz9JgUY=
+github.com/prometheus/client_golang v1.18.0 h1:HzFfmkOzH5Q8L8G+kSJKUx5dtG87sewO+FoDDqP5Tbk=
+github.com/prometheus/client_golang v1.18.0/go.mod h1:T+GXkCk5wSJyOqMIzVgvvjFDlkOQntgjkJWKrN5txjA=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190115171406-56726106282f/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
@@ -667,8 +667,8 @@ github.com/prometheus/procfs v0.0.2/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsT
 github.com/prometheus/procfs v0.0.8/go.mod h1:7Qr8sr6344vo1JqZ6HhLceV9o3AJ1Ff+GxbHq6oeK9A=
 github.com/prometheus/procfs v0.1.3/go.mod h1:lV6e/gmhEcM9IjHGsFOCxxuZ+z1YqCvr4OA4YeYWdaU=
 github.com/prometheus/procfs v0.6.0/go.mod h1:cz+aTbrPOrUb4q7XlbU9ygM+/jj0fzG6c1xBZuNvfVA=
-github.com/prometheus/procfs v0.11.1 h1:xRC8Iq1yyca5ypa9n1EZnWZkt7dwcoRPQwX/5gwaUuI=
-github.com/prometheus/procfs v0.11.1/go.mod h1:eesXgaPo1q7lBpVMoMy0ZOFTth9hBn4W/y0/p/ScXhY=
+github.com/prometheus/procfs v0.12.0 h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo=
+github.com/prometheus/procfs v0.12.0/go.mod h1:pcuDEFsWDnvcgNzo4EEweacyhjeA9Zk3cnaOZAZEfOo=
 github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
 github.com/rogpeppe/fastuuid v0.0.0-20150106093220-6724a57986af/go.mod h1:XWv6SoW27p1b0cqNHllgS5HIMJraePCO15w5zCzIWYg=
 github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ=

From 78c5ce3196e729ded7dbe13cc5c92eb4196c2d19 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc=20Tudur=C3=AD?= <marctc@protonmail.com>
Date: Fri, 5 Jan 2024 19:40:30 +0100
Subject: [PATCH 071/132] Drop old inmemory samples (#13002)

* Drop old inmemory samples

Co-authored-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* Avoid copying timeseries when the feature is disabled

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* Run gofmt

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* Clarify docs

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* Add more logging info

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* Remove loggers

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* optimize function and add tests

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* Simplify filter

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* rename var

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* Update help info from metrics

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* use metrics to keep track of drop elements during buildWriteRequest

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* rename var in tests

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* pass time.Now as parameter

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* Change buildwriterequest during retries

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* Revert "Remove loggers"

This reverts commit 54f91dfcae20488944162335ab4ad8be459df1ab.

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* use log level debug for loggers

Signed-off-by: Marc Tuduri <marctc@protonmail.com>

* Fix linter

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

* Remove noisy debug-level logs; add 'reason' label to drop metrics

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

* Remove accidentally committed files

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

* Propagate logger to buildWriteRequest to log dropped data

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

* Fix docs comment

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

* Make drop reason more specific

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

* Remove unnecessary pass of logger

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

* Use snake_case for reason label

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

* Fix dropped samples metric

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

---------

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
Signed-off-by: Marc Tuduri <marctc@protonmail.com>
Signed-off-by: Paschalis Tsilias <tpaschalis@users.noreply.github.com>
Co-authored-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
Co-authored-by: Paschalis Tsilias <tpaschalis@users.noreply.github.com>
---
 config/config.go                     |   3 +
 docs/configuration/configuration.md  |   4 +
 storage/remote/codec_test.go         |   2 +-
 storage/remote/queue_manager.go      | 190 ++++++++++++++++---
 storage/remote/queue_manager_test.go | 272 ++++++++++++++++++++++++++-
 storage/remote/write_handler_test.go |  24 +--
 6 files changed, 449 insertions(+), 46 deletions(-)

diff --git a/config/config.go b/config/config.go
index ddcca84dc78..c544d7e7489 100644
--- a/config/config.go
+++ b/config/config.go
@@ -1124,6 +1124,9 @@ type QueueConfig struct {
 	MinBackoff       model.Duration `yaml:"min_backoff,omitempty"`
 	MaxBackoff       model.Duration `yaml:"max_backoff,omitempty"`
 	RetryOnRateLimit bool           `yaml:"retry_on_http_429,omitempty"`
+
+	// Samples older than the limit will be dropped.
+	SampleAgeLimit model.Duration `yaml:"sample_age_limit,omitempty"`
 }
 
 // MetadataConfig is the configuration for sending metadata to remote
diff --git a/docs/configuration/configuration.md b/docs/configuration/configuration.md
index 5e2f31c1c66..3a7b71a2fca 100644
--- a/docs/configuration/configuration.md
+++ b/docs/configuration/configuration.md
@@ -3619,6 +3619,10 @@ queue_config:
   # Retry upon receiving a 429 status code from the remote-write storage.
   # This is experimental and might change in the future.
   [ retry_on_http_429: <boolean> | default = false ]
+  # If set, any sample that is older than sample_age_limit
+  # will not be sent to the remote storage. The default value is 0s,
+  # which means that all samples are sent.
+  [ sample_age_limit: <duration> | default = 0s ]
 
 # Configures the sending of series metadata to remote storage.
 # Metadata configuration is subject to change at any point
diff --git a/storage/remote/codec_test.go b/storage/remote/codec_test.go
index ac8b0f0b544..dbc22a37718 100644
--- a/storage/remote/codec_test.go
+++ b/storage/remote/codec_test.go
@@ -517,7 +517,7 @@ func TestMetricTypeToMetricTypeProto(t *testing.T) {
 }
 
 func TestDecodeWriteRequest(t *testing.T) {
-	buf, _, err := buildWriteRequest(writeRequestFixture.Timeseries, nil, nil, nil)
+	buf, _, _, err := buildWriteRequest(nil, writeRequestFixture.Timeseries, nil, nil, nil, nil)
 	require.NoError(t, err)
 
 	actual, err := DecodeWriteRequest(bytes.NewReader(buf))
diff --git a/storage/remote/queue_manager.go b/storage/remote/queue_manager.go
index a25c7d90c07..e37ec8c7052 100644
--- a/storage/remote/queue_manager.go
+++ b/storage/remote/queue_manager.go
@@ -36,6 +36,7 @@ import (
 	"github.com/prometheus/prometheus/model/histogram"
 	"github.com/prometheus/prometheus/model/labels"
 	"github.com/prometheus/prometheus/model/relabel"
+	"github.com/prometheus/prometheus/model/timestamp"
 	"github.com/prometheus/prometheus/prompb"
 	"github.com/prometheus/prometheus/scrape"
 	"github.com/prometheus/prometheus/tsdb/chunks"
@@ -51,6 +52,10 @@ const (
 
 	// Allow 30% too many shards before scaling down.
 	shardToleranceFraction = 0.3
+
+	reasonTooOld                     = "too_old"
+	reasonDroppedSeries              = "dropped_series"
+	reasonUnintentionalDroppedSeries = "unintentionally_dropped_series"
 )
 
 type queueManagerMetrics struct {
@@ -68,9 +73,9 @@ type queueManagerMetrics struct {
 	retriedExemplarsTotal  prometheus.Counter
 	retriedHistogramsTotal prometheus.Counter
 	retriedMetadataTotal   prometheus.Counter
-	droppedSamplesTotal    prometheus.Counter
-	droppedExemplarsTotal  prometheus.Counter
-	droppedHistogramsTotal prometheus.Counter
+	droppedSamplesTotal    *prometheus.CounterVec
+	droppedExemplarsTotal  *prometheus.CounterVec
+	droppedHistogramsTotal *prometheus.CounterVec
 	enqueueRetriesTotal    prometheus.Counter
 	sentBatchDuration      prometheus.Histogram
 	highestSentTimestamp   *maxTimestamp
@@ -180,27 +185,27 @@ func newQueueManagerMetrics(r prometheus.Registerer, rn, e string) *queueManager
 		Help:        "Total number of metadata entries which failed on send to remote storage but were retried because the send error was recoverable.",
 		ConstLabels: constLabels,
 	})
-	m.droppedSamplesTotal = prometheus.NewCounter(prometheus.CounterOpts{
+	m.droppedSamplesTotal = prometheus.NewCounterVec(prometheus.CounterOpts{
 		Namespace:   namespace,
 		Subsystem:   subsystem,
 		Name:        "samples_dropped_total",
-		Help:        "Total number of samples which were dropped after being read from the WAL before being sent via remote write, either via relabelling or unintentionally because of an unknown reference ID.",
+		Help:        "Total number of samples which were dropped after being read from the WAL before being sent via remote write, either via relabelling, due to being too old or unintentionally because of an unknown reference ID.",
 		ConstLabels: constLabels,
-	})
-	m.droppedExemplarsTotal = prometheus.NewCounter(prometheus.CounterOpts{
+	}, []string{"reason"})
+	m.droppedExemplarsTotal = prometheus.NewCounterVec(prometheus.CounterOpts{
 		Namespace:   namespace,
 		Subsystem:   subsystem,
 		Name:        "exemplars_dropped_total",
-		Help:        "Total number of exemplars which were dropped after being read from the WAL before being sent via remote write, either via relabelling or unintentionally because of an unknown reference ID.",
+		Help:        "Total number of exemplars which were dropped after being read from the WAL before being sent via remote write, either via relabelling, due to being too old or unintentionally because of an unknown reference ID.",
 		ConstLabels: constLabels,
-	})
-	m.droppedHistogramsTotal = prometheus.NewCounter(prometheus.CounterOpts{
+	}, []string{"reason"})
+	m.droppedHistogramsTotal = prometheus.NewCounterVec(prometheus.CounterOpts{
 		Namespace:   namespace,
 		Subsystem:   subsystem,
 		Name:        "histograms_dropped_total",
-		Help:        "Total number of histograms which were dropped after being read from the WAL before being sent via remote write, either via relabelling or unintentionally because of an unknown reference ID.",
+		Help:        "Total number of histograms which were dropped after being read from the WAL before being sent via remote write, either via relabelling, due to being too old or unintentionally because of an unknown reference ID.",
 		ConstLabels: constLabels,
-	})
+	}, []string{"reason"})
 	m.enqueueRetriesTotal = prometheus.NewCounter(prometheus.CounterOpts{
 		Namespace:   namespace,
 		Subsystem:   subsystem,
@@ -391,7 +396,8 @@ type WriteClient interface {
 // indicated by the provided WriteClient. Implements writeTo interface
 // used by WAL Watcher.
 type QueueManager struct {
-	lastSendTimestamp atomic.Int64
+	lastSendTimestamp          atomic.Int64
+	buildRequestLimitTimestamp atomic.Int64
 
 	logger               log.Logger
 	flushDeadline        time.Duration
@@ -529,7 +535,7 @@ func (t *QueueManager) AppendMetadata(ctx context.Context, metadata []scrape.Met
 
 func (t *QueueManager) sendMetadataWithBackoff(ctx context.Context, metadata []prompb.MetricMetadata, pBuf *proto.Buffer) error {
 	// Build the WriteRequest with no samples.
-	req, _, err := buildWriteRequest(nil, metadata, pBuf, nil)
+	req, _, _, err := buildWriteRequest(t.logger, nil, metadata, pBuf, nil, nil)
 	if err != nil {
 		return err
 	}
@@ -575,18 +581,65 @@ func (t *QueueManager) sendMetadataWithBackoff(ctx context.Context, metadata []p
 	return nil
 }
 
+func isSampleOld(baseTime time.Time, sampleAgeLimit time.Duration, ts int64) bool {
+	if sampleAgeLimit == 0 {
+		// If sampleAgeLimit is unset, then we never skip samples due to their age.
+		return false
+	}
+	limitTs := baseTime.Add(-sampleAgeLimit)
+	sampleTs := timestamp.Time(ts)
+	return sampleTs.Before(limitTs)
+}
+
+func isTimeSeriesOldFilter(metrics *queueManagerMetrics, baseTime time.Time, sampleAgeLimit time.Duration) func(ts prompb.TimeSeries) bool {
+	return func(ts prompb.TimeSeries) bool {
+		if sampleAgeLimit == 0 {
+			// If sampleAgeLimit is unset, then we never skip samples due to their age.
+			return false
+		}
+		switch {
+		// Only the first element should be set in the series, therefore we only check the first element.
+		case len(ts.Samples) > 0:
+			if isSampleOld(baseTime, sampleAgeLimit, ts.Samples[0].Timestamp) {
+				metrics.droppedSamplesTotal.WithLabelValues(reasonTooOld).Inc()
+				return true
+			}
+		case len(ts.Histograms) > 0:
+			if isSampleOld(baseTime, sampleAgeLimit, ts.Histograms[0].Timestamp) {
+				metrics.droppedHistogramsTotal.WithLabelValues(reasonTooOld).Inc()
+				return true
+			}
+		case len(ts.Exemplars) > 0:
+			if isSampleOld(baseTime, sampleAgeLimit, ts.Exemplars[0].Timestamp) {
+				metrics.droppedExemplarsTotal.WithLabelValues(reasonTooOld).Inc()
+				return true
+			}
+		default:
+			return false
+		}
+		return false
+	}
+}
+
 // Append queues a sample to be sent to the remote storage. Blocks until all samples are
 // enqueued on their shards or a shutdown signal is received.
 func (t *QueueManager) Append(samples []record.RefSample) bool {
+	currentTime := time.Now()
 outer:
 	for _, s := range samples {
+		if isSampleOld(currentTime, time.Duration(t.cfg.SampleAgeLimit), s.T) {
+			t.metrics.droppedSamplesTotal.WithLabelValues(reasonTooOld).Inc()
+			continue
+		}
 		t.seriesMtx.Lock()
 		lbls, ok := t.seriesLabels[s.Ref]
 		if !ok {
-			t.metrics.droppedSamplesTotal.Inc()
 			t.dataDropped.incr(1)
 			if _, ok := t.droppedSeries[s.Ref]; !ok {
 				level.Info(t.logger).Log("msg", "Dropped sample for series that was not explicitly dropped via relabelling", "ref", s.Ref)
+				t.metrics.droppedSamplesTotal.WithLabelValues(reasonUnintentionalDroppedSeries).Inc()
+			} else {
+				t.metrics.droppedSamplesTotal.WithLabelValues(reasonDroppedSeries).Inc()
 			}
 			t.seriesMtx.Unlock()
 			continue
@@ -629,17 +682,23 @@ func (t *QueueManager) AppendExemplars(exemplars []record.RefExemplar) bool {
 	if !t.sendExemplars {
 		return true
 	}
-
+	currentTime := time.Now()
 outer:
 	for _, e := range exemplars {
+		if isSampleOld(currentTime, time.Duration(t.cfg.SampleAgeLimit), e.T) {
+			t.metrics.droppedExemplarsTotal.WithLabelValues(reasonTooOld).Inc()
+			continue
+		}
 		t.seriesMtx.Lock()
 		lbls, ok := t.seriesLabels[e.Ref]
 		if !ok {
-			t.metrics.droppedExemplarsTotal.Inc()
 			// Track dropped exemplars in the same EWMA for sharding calc.
 			t.dataDropped.incr(1)
 			if _, ok := t.droppedSeries[e.Ref]; !ok {
 				level.Info(t.logger).Log("msg", "Dropped exemplar for series that was not explicitly dropped via relabelling", "ref", e.Ref)
+				t.metrics.droppedExemplarsTotal.WithLabelValues(reasonUnintentionalDroppedSeries).Inc()
+			} else {
+				t.metrics.droppedExemplarsTotal.WithLabelValues(reasonDroppedSeries).Inc()
 			}
 			t.seriesMtx.Unlock()
 			continue
@@ -678,16 +737,22 @@ func (t *QueueManager) AppendHistograms(histograms []record.RefHistogramSample)
 	if !t.sendNativeHistograms {
 		return true
 	}
-
+	currentTime := time.Now()
 outer:
 	for _, h := range histograms {
+		if isSampleOld(currentTime, time.Duration(t.cfg.SampleAgeLimit), h.T) {
+			t.metrics.droppedHistogramsTotal.WithLabelValues(reasonTooOld).Inc()
+			continue
+		}
 		t.seriesMtx.Lock()
 		lbls, ok := t.seriesLabels[h.Ref]
 		if !ok {
-			t.metrics.droppedHistogramsTotal.Inc()
 			t.dataDropped.incr(1)
 			if _, ok := t.droppedSeries[h.Ref]; !ok {
 				level.Info(t.logger).Log("msg", "Dropped histogram for series that was not explicitly dropped via relabelling", "ref", h.Ref)
+				t.metrics.droppedHistogramsTotal.WithLabelValues(reasonUnintentionalDroppedSeries).Inc()
+			} else {
+				t.metrics.droppedHistogramsTotal.WithLabelValues(reasonDroppedSeries).Inc()
 			}
 			t.seriesMtx.Unlock()
 			continue
@@ -725,16 +790,22 @@ func (t *QueueManager) AppendFloatHistograms(floatHistograms []record.RefFloatHi
 	if !t.sendNativeHistograms {
 		return true
 	}
-
+	currentTime := time.Now()
 outer:
 	for _, h := range floatHistograms {
+		if isSampleOld(currentTime, time.Duration(t.cfg.SampleAgeLimit), h.T) {
+			t.metrics.droppedHistogramsTotal.WithLabelValues(reasonTooOld).Inc()
+			continue
+		}
 		t.seriesMtx.Lock()
 		lbls, ok := t.seriesLabels[h.Ref]
 		if !ok {
-			t.metrics.droppedHistogramsTotal.Inc()
 			t.dataDropped.incr(1)
 			if _, ok := t.droppedSeries[h.Ref]; !ok {
 				level.Info(t.logger).Log("msg", "Dropped histogram for series that was not explicitly dropped via relabelling", "ref", h.Ref)
+				t.metrics.droppedHistogramsTotal.WithLabelValues(reasonUnintentionalDroppedSeries).Inc()
+			} else {
+				t.metrics.droppedHistogramsTotal.WithLabelValues(reasonDroppedSeries).Inc()
 			}
 			t.seriesMtx.Unlock()
 			continue
@@ -1490,7 +1561,8 @@ func (s *shards) sendSamples(ctx context.Context, samples []prompb.TimeSeries, s
 // sendSamples to the remote storage with backoff for recoverable errors.
 func (s *shards) sendSamplesWithBackoff(ctx context.Context, samples []prompb.TimeSeries, sampleCount, exemplarCount, histogramCount int, pBuf *proto.Buffer, buf *[]byte) error {
 	// Build the WriteRequest with no metadata.
-	req, highest, err := buildWriteRequest(samples, nil, pBuf, *buf)
+	req, highest, lowest, err := buildWriteRequest(s.qm.logger, samples, nil, pBuf, *buf, nil)
+	s.qm.buildRequestLimitTimestamp.Store(lowest)
 	if err != nil {
 		// Failing to build the write request is non-recoverable, since it will
 		// only error if marshaling the proto to bytes fails.
@@ -1504,6 +1576,25 @@ func (s *shards) sendSamplesWithBackoff(ctx context.Context, samples []prompb.Ti
 	// without causing a memory leak, and it has the nice effect of not propagating any
 	// parameters for sendSamplesWithBackoff/3.
 	attemptStore := func(try int) error {
+		currentTime := time.Now()
+		lowest := s.qm.buildRequestLimitTimestamp.Load()
+		if isSampleOld(currentTime, time.Duration(s.qm.cfg.SampleAgeLimit), lowest) {
+			// This will filter out old samples during retries.
+			req, _, lowest, err := buildWriteRequest(
+				s.qm.logger,
+				samples,
+				nil,
+				pBuf,
+				*buf,
+				isTimeSeriesOldFilter(s.qm.metrics, currentTime, time.Duration(s.qm.cfg.SampleAgeLimit)),
+			)
+			s.qm.buildRequestLimitTimestamp.Store(lowest)
+			if err != nil {
+				return err
+			}
+			*buf = req
+		}
+
 		ctx, span := otel.Tracer("").Start(ctx, "Remote Send Batch")
 		defer span.End()
 
@@ -1608,9 +1699,27 @@ func sendWriteRequestWithBackoff(ctx context.Context, cfg config.QueueConfig, l
 	}
 }
 
-func buildWriteRequest(samples []prompb.TimeSeries, metadata []prompb.MetricMetadata, pBuf *proto.Buffer, buf []byte) ([]byte, int64, error) {
+func buildTimeSeries(timeSeries []prompb.TimeSeries, filter func(prompb.TimeSeries) bool) (int64, int64, []prompb.TimeSeries, int, int, int) {
 	var highest int64
-	for _, ts := range samples {
+	var lowest int64
+	var droppedSamples, droppedExemplars, droppedHistograms int
+
+	keepIdx := 0
+	lowest = math.MaxInt64
+	for i, ts := range timeSeries {
+		if filter != nil && filter(ts) {
+			if len(ts.Samples) > 0 {
+				droppedSamples++
+			}
+			if len(ts.Exemplars) > 0 {
+				droppedExemplars++
+			}
+			if len(ts.Histograms) > 0 {
+				droppedHistograms++
+			}
+			continue
+		}
+
 		// At the moment we only ever append a TimeSeries with a single sample or exemplar in it.
 		if len(ts.Samples) > 0 && ts.Samples[0].Timestamp > highest {
 			highest = ts.Samples[0].Timestamp
@@ -1621,10 +1730,37 @@ func buildWriteRequest(samples []prompb.TimeSeries, metadata []prompb.MetricMeta
 		if len(ts.Histograms) > 0 && ts.Histograms[0].Timestamp > highest {
 			highest = ts.Histograms[0].Timestamp
 		}
+
+		// Get lowest timestamp
+		if len(ts.Samples) > 0 && ts.Samples[0].Timestamp < lowest {
+			lowest = ts.Samples[0].Timestamp
+		}
+		if len(ts.Exemplars) > 0 && ts.Exemplars[0].Timestamp < lowest {
+			lowest = ts.Exemplars[0].Timestamp
+		}
+		if len(ts.Histograms) > 0 && ts.Histograms[0].Timestamp < lowest {
+			lowest = ts.Histograms[0].Timestamp
+		}
+
+		// Move the current element to the write position and increment the write pointer
+		timeSeries[keepIdx] = timeSeries[i]
+		keepIdx++
+	}
+
+	timeSeries = timeSeries[:keepIdx]
+	return highest, lowest, timeSeries, droppedSamples, droppedExemplars, droppedHistograms
+}
+
+func buildWriteRequest(logger log.Logger, timeSeries []prompb.TimeSeries, metadata []prompb.MetricMetadata, pBuf *proto.Buffer, buf []byte, filter func(prompb.TimeSeries) bool) ([]byte, int64, int64, error) {
+	highest, lowest, timeSeries,
+		droppedSamples, droppedExemplars, droppedHistograms := buildTimeSeries(timeSeries, filter)
+
+	if droppedSamples > 0 || droppedExemplars > 0 || droppedHistograms > 0 {
+		level.Debug(logger).Log("msg", "dropped data due to their age", "droppedSamples", droppedSamples, "droppedExemplars", droppedExemplars, "droppedHistograms", droppedHistograms)
 	}
 
 	req := &prompb.WriteRequest{
-		Timeseries: samples,
+		Timeseries: timeSeries,
 		Metadata:   metadata,
 	}
 
@@ -1635,7 +1771,7 @@ func buildWriteRequest(samples []prompb.TimeSeries, metadata []prompb.MetricMeta
 	}
 	err := pBuf.Marshal(req)
 	if err != nil {
-		return nil, highest, err
+		return nil, highest, lowest, err
 	}
 
 	// snappy uses len() to see if it needs to allocate a new slice. Make the
@@ -1644,5 +1780,5 @@ func buildWriteRequest(samples []prompb.TimeSeries, metadata []prompb.MetricMeta
 		buf = buf[0:cap(buf)]
 	}
 	compressed := snappy.Encode(buf, pBuf.Bytes())
-	return compressed, highest, nil
+	return compressed, highest, lowest, nil
 }
diff --git a/storage/remote/queue_manager_test.go b/storage/remote/queue_manager_test.go
index 17a904fcdfc..778861e2b7f 100644
--- a/storage/remote/queue_manager_test.go
+++ b/storage/remote/queue_manager_test.go
@@ -548,7 +548,7 @@ func TestShouldReshard(t *testing.T) {
 func createTimeseries(numSamples, numSeries int, extraLabels ...labels.Label) ([]record.RefSample, []record.RefSeries) {
 	samples := make([]record.RefSample, 0, numSamples)
 	series := make([]record.RefSeries, 0, numSeries)
-	b := labels.ScratchBuilder{}
+	lb := labels.ScratchBuilder{}
 	for i := 0; i < numSeries; i++ {
 		name := fmt.Sprintf("test_metric_%d", i)
 		for j := 0; j < numSamples; j++ {
@@ -559,15 +559,15 @@ func createTimeseries(numSamples, numSeries int, extraLabels ...labels.Label) ([
 			})
 		}
 		// Create Labels that is name of series plus any extra labels supplied.
-		b.Reset()
-		b.Add(labels.MetricName, name)
+		lb.Reset()
+		lb.Add(labels.MetricName, name)
 		for _, l := range extraLabels {
-			b.Add(l.Name, l.Value)
+			lb.Add(l.Name, l.Value)
 		}
-		b.Sort()
+		lb.Sort()
 		series = append(series, record.RefSeries{
 			Ref:    chunks.HeadSeriesRef(i),
-			Labels: b.Labels(),
+			Labels: lb.Labels(),
 		})
 	}
 	return samples, series
@@ -1321,3 +1321,263 @@ func TestQueue_FlushAndShutdownDoesNotDeadlock(t *testing.T) {
 		t.FailNow()
 	}
 }
+
+func TestDropOldTimeSeries(t *testing.T) {
+	size := 10
+	nSeries := 6
+	nSamples := config.DefaultQueueConfig.Capacity * size
+	samples, newSamples, series := createTimeseriesWithOldSamples(nSamples, nSeries)
+
+	c := NewTestWriteClient()
+	c.expectSamples(newSamples, series)
+
+	cfg := config.DefaultQueueConfig
+	mcfg := config.DefaultMetadataConfig
+	cfg.MaxShards = 1
+	cfg.SampleAgeLimit = model.Duration(60 * time.Second)
+	dir := t.TempDir()
+
+	metrics := newQueueManagerMetrics(nil, "", "")
+	m := NewQueueManager(metrics, nil, nil, nil, dir, newEWMARate(ewmaWeight, shardUpdateDuration), cfg, mcfg, labels.EmptyLabels(), nil, c, defaultFlushDeadline, newPool(), newHighestTimestampMetric(), nil, false, false)
+	m.StoreSeries(series, 0)
+
+	m.Start()
+	defer m.Stop()
+
+	m.Append(samples)
+	c.waitForExpectedData(t)
+}
+
+func TestIsSampleOld(t *testing.T) {
+	currentTime := time.Now()
+	require.True(t, isSampleOld(currentTime, 60*time.Second, timestamp.FromTime(currentTime.Add(-61*time.Second))))
+	require.False(t, isSampleOld(currentTime, 60*time.Second, timestamp.FromTime(currentTime.Add(-59*time.Second))))
+}
+
+func createTimeseriesWithOldSamples(numSamples, numSeries int, extraLabels ...labels.Label) ([]record.RefSample, []record.RefSample, []record.RefSeries) {
+	newSamples := make([]record.RefSample, 0, numSamples)
+	samples := make([]record.RefSample, 0, numSamples)
+	series := make([]record.RefSeries, 0, numSeries)
+	lb := labels.ScratchBuilder{}
+	for i := 0; i < numSeries; i++ {
+		name := fmt.Sprintf("test_metric_%d", i)
+		// We create half of the samples in the past.
+		past := timestamp.FromTime(time.Now().Add(-5 * time.Minute))
+		for j := 0; j < numSamples/2; j++ {
+			samples = append(samples, record.RefSample{
+				Ref: chunks.HeadSeriesRef(i),
+				T:   past + int64(j),
+				V:   float64(i),
+			})
+		}
+		for j := 0; j < numSamples/2; j++ {
+			sample := record.RefSample{
+				Ref: chunks.HeadSeriesRef(i),
+				T:   int64(int(time.Now().UnixMilli()) + j),
+				V:   float64(i),
+			}
+			samples = append(samples, sample)
+			newSamples = append(newSamples, sample)
+		}
+		// Create Labels that is name of series plus any extra labels supplied.
+		lb.Reset()
+		lb.Add(labels.MetricName, name)
+		for _, l := range extraLabels {
+			lb.Add(l.Name, l.Value)
+		}
+		lb.Sort()
+		series = append(series, record.RefSeries{
+			Ref:    chunks.HeadSeriesRef(i),
+			Labels: lb.Labels(),
+		})
+	}
+	return samples, newSamples, series
+}
+
+func filterTsLimit(limit int64, ts prompb.TimeSeries) bool {
+	return limit > ts.Samples[0].Timestamp
+}
+
+func TestBuildTimeSeries(t *testing.T) {
+	testCases := []struct {
+		name           string
+		ts             []prompb.TimeSeries
+		filter         func(ts prompb.TimeSeries) bool
+		lowestTs       int64
+		highestTs      int64
+		droppedSamples int
+		responseLen    int
+	}{
+		{
+			name: "No filter applied",
+			ts: []prompb.TimeSeries{
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567890,
+							Value:     1.23,
+						},
+					},
+				},
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567891,
+							Value:     2.34,
+						},
+					},
+				},
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567892,
+							Value:     3.34,
+						},
+					},
+				},
+			},
+			filter:      nil,
+			responseLen: 3,
+			lowestTs:    1234567890,
+			highestTs:   1234567892,
+		},
+		{
+			name: "Filter applied, samples in order",
+			ts: []prompb.TimeSeries{
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567890,
+							Value:     1.23,
+						},
+					},
+				},
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567891,
+							Value:     2.34,
+						},
+					},
+				},
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567892,
+							Value:     3.45,
+						},
+					},
+				},
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567893,
+							Value:     3.45,
+						},
+					},
+				},
+			},
+			filter:         func(ts prompb.TimeSeries) bool { return filterTsLimit(1234567892, ts) },
+			responseLen:    2,
+			lowestTs:       1234567892,
+			highestTs:      1234567893,
+			droppedSamples: 2,
+		},
+		{
+			name: "Filter applied, samples out of order",
+			ts: []prompb.TimeSeries{
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567892,
+							Value:     3.45,
+						},
+					},
+				},
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567890,
+							Value:     1.23,
+						},
+					},
+				},
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567893,
+							Value:     3.45,
+						},
+					},
+				},
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567891,
+							Value:     2.34,
+						},
+					},
+				},
+			},
+			filter:         func(ts prompb.TimeSeries) bool { return filterTsLimit(1234567892, ts) },
+			responseLen:    2,
+			lowestTs:       1234567892,
+			highestTs:      1234567893,
+			droppedSamples: 2,
+		},
+		{
+			name: "Filter applied, samples not consecutive",
+			ts: []prompb.TimeSeries{
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567890,
+							Value:     1.23,
+						},
+					},
+				},
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567892,
+							Value:     3.45,
+						},
+					},
+				},
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567895,
+							Value:     6.78,
+						},
+					},
+				},
+				{
+					Samples: []prompb.Sample{
+						{
+							Timestamp: 1234567897,
+							Value:     6.78,
+						},
+					},
+				},
+			},
+			filter:         func(ts prompb.TimeSeries) bool { return filterTsLimit(1234567895, ts) },
+			responseLen:    2,
+			lowestTs:       1234567895,
+			highestTs:      1234567897,
+			droppedSamples: 2,
+		},
+	}
+
+	// Run the test cases
+	for _, tc := range testCases {
+		t.Run(tc.name, func(t *testing.T) {
+			highest, lowest, result, droppedSamples, _, _ := buildTimeSeries(tc.ts, tc.filter)
+			require.NotNil(t, result)
+			require.Len(t, result, tc.responseLen)
+			require.Equal(t, tc.highestTs, highest)
+			require.Equal(t, tc.lowestTs, lowest)
+			require.Equal(t, tc.droppedSamples, droppedSamples)
+		})
+	}
+}
diff --git a/storage/remote/write_handler_test.go b/storage/remote/write_handler_test.go
index fd5b34ecd2a..9f7dcd175dc 100644
--- a/storage/remote/write_handler_test.go
+++ b/storage/remote/write_handler_test.go
@@ -38,7 +38,7 @@ import (
 )
 
 func TestRemoteWriteHandler(t *testing.T) {
-	buf, _, err := buildWriteRequest(writeRequestFixture.Timeseries, nil, nil, nil)
+	buf, _, _, err := buildWriteRequest(nil, writeRequestFixture.Timeseries, nil, nil, nil, nil)
 	require.NoError(t, err)
 
 	req, err := http.NewRequest("", "", bytes.NewReader(buf))
@@ -84,10 +84,10 @@ func TestRemoteWriteHandler(t *testing.T) {
 }
 
 func TestOutOfOrderSample(t *testing.T) {
-	buf, _, err := buildWriteRequest([]prompb.TimeSeries{{
+	buf, _, _, err := buildWriteRequest(nil, []prompb.TimeSeries{{
 		Labels:  []prompb.Label{{Name: "__name__", Value: "test_metric"}},
 		Samples: []prompb.Sample{{Value: 1, Timestamp: 0}},
-	}}, nil, nil, nil)
+	}}, nil, nil, nil, nil)
 	require.NoError(t, err)
 
 	req, err := http.NewRequest("", "", bytes.NewReader(buf))
@@ -109,10 +109,10 @@ func TestOutOfOrderSample(t *testing.T) {
 // don't fail on ingestion errors since the exemplar storage is
 // still experimental.
 func TestOutOfOrderExemplar(t *testing.T) {
-	buf, _, err := buildWriteRequest([]prompb.TimeSeries{{
+	buf, _, _, err := buildWriteRequest(nil, []prompb.TimeSeries{{
 		Labels:    []prompb.Label{{Name: "__name__", Value: "test_metric"}},
 		Exemplars: []prompb.Exemplar{{Labels: []prompb.Label{{Name: "foo", Value: "bar"}}, Value: 1, Timestamp: 0}},
-	}}, nil, nil, nil)
+	}}, nil, nil, nil, nil)
 	require.NoError(t, err)
 
 	req, err := http.NewRequest("", "", bytes.NewReader(buf))
@@ -132,10 +132,10 @@ func TestOutOfOrderExemplar(t *testing.T) {
 }
 
 func TestOutOfOrderHistogram(t *testing.T) {
-	buf, _, err := buildWriteRequest([]prompb.TimeSeries{{
+	buf, _, _, err := buildWriteRequest(nil, []prompb.TimeSeries{{
 		Labels:     []prompb.Label{{Name: "__name__", Value: "test_metric"}},
 		Histograms: []prompb.Histogram{HistogramToHistogramProto(0, &testHistogram), FloatHistogramToHistogramProto(1, testHistogram.ToFloat(nil))},
-	}}, nil, nil, nil)
+	}}, nil, nil, nil, nil)
 	require.NoError(t, err)
 
 	req, err := http.NewRequest("", "", bytes.NewReader(buf))
@@ -158,13 +158,13 @@ func BenchmarkRemoteWritehandler(b *testing.B) {
 	reqs := []*http.Request{}
 	for i := 0; i < b.N; i++ {
 		num := strings.Repeat(strconv.Itoa(i), 16)
-		buf, _, err := buildWriteRequest([]prompb.TimeSeries{{
+		buf, _, _, err := buildWriteRequest(nil, []prompb.TimeSeries{{
 			Labels: []prompb.Label{
 				{Name: "__name__", Value: "test_metric"},
 				{Name: "test_label_name_" + num, Value: labelValue + num},
 			},
 			Histograms: []prompb.Histogram{HistogramToHistogramProto(0, &testHistogram)},
-		}}, nil, nil, nil)
+		}}, nil, nil, nil, nil)
 		require.NoError(b, err)
 		req, err := http.NewRequest("", "", bytes.NewReader(buf))
 		require.NoError(b, err)
@@ -182,7 +182,7 @@ func BenchmarkRemoteWritehandler(b *testing.B) {
 }
 
 func TestCommitErr(t *testing.T) {
-	buf, _, err := buildWriteRequest(writeRequestFixture.Timeseries, nil, nil, nil)
+	buf, _, _, err := buildWriteRequest(nil, writeRequestFixture.Timeseries, nil, nil, nil, nil)
 	require.NoError(t, err)
 
 	req, err := http.NewRequest("", "", bytes.NewReader(buf))
@@ -219,7 +219,7 @@ func BenchmarkRemoteWriteOOOSamples(b *testing.B) {
 
 	handler := NewWriteHandler(log.NewNopLogger(), nil, db.Head())
 
-	buf, _, err := buildWriteRequest(genSeriesWithSample(1000, 200*time.Minute.Milliseconds()), nil, nil, nil)
+	buf, _, _, err := buildWriteRequest(nil, genSeriesWithSample(1000, 200*time.Minute.Milliseconds()), nil, nil, nil, nil)
 	require.NoError(b, err)
 
 	req, err := http.NewRequest("", "", bytes.NewReader(buf))
@@ -232,7 +232,7 @@ func BenchmarkRemoteWriteOOOSamples(b *testing.B) {
 
 	var bufRequests [][]byte
 	for i := 0; i < 100; i++ {
-		buf, _, err = buildWriteRequest(genSeriesWithSample(1000, int64(80+i)*time.Minute.Milliseconds()), nil, nil, nil)
+		buf, _, _, err = buildWriteRequest(nil, genSeriesWithSample(1000, int64(80+i)*time.Minute.Milliseconds()), nil, nil, nil, nil)
 		require.NoError(b, err)
 		bufRequests = append(bufRequests, buf)
 	}

From afc05129f1b0dc678c2744bf3823d6a81fbf65d6 Mon Sep 17 00:00:00 2001
From: machine424 <ayoubmrini424@gmail.com>
Date: Sun, 7 Jan 2024 20:57:53 +0100
Subject: [PATCH 072/132] fix(discovery): allow requireUpdate util to timeout
 in discovery/file/file_test.go.

The loop ran indefinitely if the condition isn't met.

Before, each iteration created a new timer channel which was always outpaced by
the other timer channel with smaller duration.

minor detail: There was a memory leak: resources of the ~10 previous timers were
constantly kept. With the fix, we may keep the resources of one timer around for defaultWait
but this isn't worth the changes to make it right.

Signed-off-by: machine424 <ayoubmrini424@gmail.com>
---
 discovery/file/file_test.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/discovery/file/file_test.go b/discovery/file/file_test.go
index c138fc8a95e..73161183278 100644
--- a/discovery/file/file_test.go
+++ b/discovery/file/file_test.go
@@ -193,9 +193,10 @@ func (t *testRunner) targets() []*targetgroup.Group {
 func (t *testRunner) requireUpdate(ref time.Time, expected []*targetgroup.Group) {
 	t.Helper()
 
+	timeout := time.After(defaultWait)
 	for {
 		select {
-		case <-time.After(defaultWait):
+		case <-timeout:
 			t.Fatalf("Expected update but got none")
 			return
 		case <-time.After(defaultWait / 10):

From 61b4080a14c12cd5334ee4e6a31c1b8df20503e1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Giedrius=20Statkevi=C4=8Dius?=
 <giedrius.statkevicius@vinted.com>
Date: Mon, 8 Jan 2024 11:48:27 +0200
Subject: [PATCH 073/132] tsdb/{index,compact}: allow using custom postings
 encoding format (#13242)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* tsdb/{index,compact}: allow using custom postings encoding format

We would like to experiment with a different postings encoding format in
Thanos so in this change I am proposing adding another argument to
`NewWriter` which would allow users to change the format if needed.
Also, wire the leveled compactor so that it would be possible to change
the format there too.

Signed-off-by: Giedrius Statkevičius <giedrius.statkevicius@vinted.com>

* tsdb/compact: use a struct for leveled compactor options

As discussed on Slack, let's use a struct for the options in leveled
compactor.

Signed-off-by: Giedrius Statkevičius <giedrius.statkevicius@vinted.com>

* tsdb: make changes after Bryan's review

- Make changes less intrusive
- Turn the postings encoder type into a function
- Add NewWriterWithEncoder()

Signed-off-by: Giedrius Statkevičius <giedrius.statkevicius@vinted.com>

---------

Signed-off-by: Giedrius Statkevičius <giedrius.statkevicius@vinted.com>
---
 tsdb/compact.go     | 39 ++++++++++++++++++++++++++++++++++-----
 tsdb/db.go          |  3 +--
 tsdb/index/index.go | 43 ++++++++++++++++++++++++++++++++-----------
 3 files changed, 67 insertions(+), 18 deletions(-)

diff --git a/tsdb/compact.go b/tsdb/compact.go
index 7b4ff9c1b6b..c5bd2ed2a67 100644
--- a/tsdb/compact.go
+++ b/tsdb/compact.go
@@ -82,6 +82,7 @@ type LeveledCompactor struct {
 	ctx                      context.Context
 	maxBlockChunkSegmentSize int64
 	mergeFunc                storage.VerticalChunkSeriesMergeFunc
+	postingsEncoder          index.PostingsEncoder
 }
 
 type CompactorMetrics struct {
@@ -144,12 +145,30 @@ func newCompactorMetrics(r prometheus.Registerer) *CompactorMetrics {
 	return m
 }
 
-// NewLeveledCompactor returns a LeveledCompactor.
-func NewLeveledCompactor(ctx context.Context, r prometheus.Registerer, l log.Logger, ranges []int64, pool chunkenc.Pool, mergeFunc storage.VerticalChunkSeriesMergeFunc) (*LeveledCompactor, error) {
-	return NewLeveledCompactorWithChunkSize(ctx, r, l, ranges, pool, chunks.DefaultChunkSegmentSize, mergeFunc)
+type LeveledCompactorOptions struct {
+	// PE specifies the postings encoder. It is called when compactor is writing out the postings for a label name/value pair during compaction.
+	// If it is nil then the default encoder is used. At the moment that is the "raw" encoder. See index.EncodePostingsRaw for more.
+	PE index.PostingsEncoder
+	// MaxBlockChunkSegmentSize is the max block chunk segment size. If it is 0 then the default chunks.DefaultChunkSegmentSize is used.
+	MaxBlockChunkSegmentSize int64
+	// MergeFunc is used for merging series together in vertical compaction. By default storage.NewCompactingChunkSeriesMerger(storage.ChainedSeriesMerge) is used.
+	MergeFunc storage.VerticalChunkSeriesMergeFunc
 }
 
 func NewLeveledCompactorWithChunkSize(ctx context.Context, r prometheus.Registerer, l log.Logger, ranges []int64, pool chunkenc.Pool, maxBlockChunkSegmentSize int64, mergeFunc storage.VerticalChunkSeriesMergeFunc) (*LeveledCompactor, error) {
+	return NewLeveledCompactorWithOptions(ctx, r, l, ranges, pool, LeveledCompactorOptions{
+		MaxBlockChunkSegmentSize: maxBlockChunkSegmentSize,
+		MergeFunc:                mergeFunc,
+	})
+}
+
+func NewLeveledCompactor(ctx context.Context, r prometheus.Registerer, l log.Logger, ranges []int64, pool chunkenc.Pool, mergeFunc storage.VerticalChunkSeriesMergeFunc) (*LeveledCompactor, error) {
+	return NewLeveledCompactorWithOptions(ctx, r, l, ranges, pool, LeveledCompactorOptions{
+		MergeFunc: mergeFunc,
+	})
+}
+
+func NewLeveledCompactorWithOptions(ctx context.Context, r prometheus.Registerer, l log.Logger, ranges []int64, pool chunkenc.Pool, opts LeveledCompactorOptions) (*LeveledCompactor, error) {
 	if len(ranges) == 0 {
 		return nil, fmt.Errorf("at least one range must be provided")
 	}
@@ -159,9 +178,18 @@ func NewLeveledCompactorWithChunkSize(ctx context.Context, r prometheus.Register
 	if l == nil {
 		l = log.NewNopLogger()
 	}
-	if mergeFunc == nil {
+	var mergeFunc storage.VerticalChunkSeriesMergeFunc
+	if opts.MergeFunc == nil {
 		mergeFunc = storage.NewCompactingChunkSeriesMerger(storage.ChainedSeriesMerge)
 	}
+	var maxBlockChunkSegmentSize int64
+	if opts.MaxBlockChunkSegmentSize == 0 {
+		maxBlockChunkSegmentSize = chunks.DefaultChunkSegmentSize
+	}
+	var pe index.PostingsEncoder
+	if opts.PE == nil {
+		pe = index.EncodePostingsRaw
+	}
 	return &LeveledCompactor{
 		ranges:                   ranges,
 		chunkPool:                pool,
@@ -170,6 +198,7 @@ func NewLeveledCompactorWithChunkSize(ctx context.Context, r prometheus.Register
 		ctx:                      ctx,
 		maxBlockChunkSegmentSize: maxBlockChunkSegmentSize,
 		mergeFunc:                mergeFunc,
+		postingsEncoder:          pe,
 	}, nil
 }
 
@@ -599,7 +628,7 @@ func (c *LeveledCompactor) write(dest string, meta *BlockMeta, blockPopulator Bl
 		}
 	}
 
-	indexw, err := index.NewWriter(c.ctx, filepath.Join(tmp, indexFilename))
+	indexw, err := index.NewWriterWithEncoder(c.ctx, filepath.Join(tmp, indexFilename), c.postingsEncoder)
 	if err != nil {
 		return fmt.Errorf("open index writer: %w", err)
 	}
diff --git a/tsdb/db.go b/tsdb/db.go
index b2cc37a194f..bdeb3faee83 100644
--- a/tsdb/db.go
+++ b/tsdb/db.go
@@ -442,8 +442,7 @@ func (db *DBReadOnly) FlushWAL(dir string) (returnErr error) {
 		nil,
 		db.logger,
 		ExponentialBlockRanges(DefaultOptions().MinBlockDuration, 3, 5),
-		chunkenc.NewPool(),
-		nil,
+		chunkenc.NewPool(), nil,
 	)
 	if err != nil {
 		return fmt.Errorf("create leveled compactor: %w", err)
diff --git a/tsdb/index/index.go b/tsdb/index/index.go
index 2b025a3528c..c2ca581f7ca 100644
--- a/tsdb/index/index.go
+++ b/tsdb/index/index.go
@@ -110,6 +110,8 @@ type symbolCacheEntry struct {
 	lastValue      string
 }
 
+type PostingsEncoder func(*encoding.Encbuf, []uint32) error
+
 // Writer implements the IndexWriter interface for the standard
 // serialization format.
 type Writer struct {
@@ -148,6 +150,8 @@ type Writer struct {
 	crc32 hash.Hash
 
 	Version int
+
+	postingsEncoder PostingsEncoder
 }
 
 // TOC represents index Table Of Content that states where each section of index starts.
@@ -186,7 +190,8 @@ func NewTOCFromByteSlice(bs ByteSlice) (*TOC, error) {
 }
 
 // NewWriter returns a new Writer to the given filename. It serializes data in format version 2.
-func NewWriter(ctx context.Context, fn string) (*Writer, error) {
+// It uses the given encoder to encode each postings list.
+func NewWriterWithEncoder(ctx context.Context, fn string, encoder PostingsEncoder) (*Writer, error) {
 	dir := filepath.Dir(fn)
 
 	df, err := fileutil.OpenDir(dir)
@@ -229,9 +234,10 @@ func NewWriter(ctx context.Context, fn string) (*Writer, error) {
 		buf1: encoding.Encbuf{B: make([]byte, 0, 1<<22)},
 		buf2: encoding.Encbuf{B: make([]byte, 0, 1<<22)},
 
-		symbolCache: make(map[string]symbolCacheEntry, 1<<8),
-		labelNames:  make(map[string]uint64, 1<<8),
-		crc32:       newCRC32(),
+		symbolCache:     make(map[string]symbolCacheEntry, 1<<8),
+		labelNames:      make(map[string]uint64, 1<<8),
+		crc32:           newCRC32(),
+		postingsEncoder: encoder,
 	}
 	if err := iw.writeMeta(); err != nil {
 		return nil, err
@@ -239,6 +245,12 @@ func NewWriter(ctx context.Context, fn string) (*Writer, error) {
 	return iw, nil
 }
 
+// NewWriter creates a new index writer using the default encoder. See
+// NewWriterWithEncoder.
+func NewWriter(ctx context.Context, fn string) (*Writer, error) {
+	return NewWriterWithEncoder(ctx, fn, EncodePostingsRaw)
+}
+
 func (w *Writer) write(bufs ...[]byte) error {
 	return w.f.Write(bufs...)
 }
@@ -941,6 +953,20 @@ func (w *Writer) writePostingsToTmpFiles() error {
 	return nil
 }
 
+// EncodePostingsRaw uses the "basic" postings list encoding format with no compression:
+// <BE uint32 len X><BE uint32 0><BE uint32 1>...<BE uint32 X-1>.
+func EncodePostingsRaw(e *encoding.Encbuf, offs []uint32) error {
+	e.PutBE32int(len(offs))
+
+	for _, off := range offs {
+		if off > (1<<32)-1 {
+			return fmt.Errorf("series offset %d exceeds 4 bytes", off)
+		}
+		e.PutBE32(off)
+	}
+	return nil
+}
+
 func (w *Writer) writePosting(name, value string, offs []uint32) error {
 	// Align beginning to 4 bytes for more efficient postings list scans.
 	if err := w.fP.AddPadding(4); err != nil {
@@ -959,13 +985,8 @@ func (w *Writer) writePosting(name, value string, offs []uint32) error {
 	w.cntPO++
 
 	w.buf1.Reset()
-	w.buf1.PutBE32int(len(offs))
-
-	for _, off := range offs {
-		if off > (1<<32)-1 {
-			return fmt.Errorf("series offset %d exceeds 4 bytes", off)
-		}
-		w.buf1.PutBE32(off)
+	if err := w.postingsEncoder(&w.buf1, offs); err != nil {
+		return err
 	}
 
 	w.buf2.Reset()

From 3c44fbcced24d61212b621d96adee3cc22e9b16d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Jan 2024 16:36:24 +0100
Subject: [PATCH 074/132] build(deps): bump actions/setup-go from 3.5.0 to
 5.0.0 in /scripts (#13362)

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.5.0 to 5.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/6edd4406fa81c3da01a34fa6f6343087c207a568...0c52d547c9bc32b1aa3301fd7a9cb496313a4491)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 scripts/golangci-lint.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/golangci-lint.yml b/scripts/golangci-lint.yml
index 4b292229def..8f252791119 100644
--- a/scripts/golangci-lint.yml
+++ b/scripts/golangci-lint.yml
@@ -26,7 +26,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: install Go
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
+        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
           go-version: 1.21.x
       - name: Install snmp_exporter/generator dependencies

From 88a6b3a80a7c44717bfc32b0e68410147f628cf7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Jan 2024 16:36:53 +0100
Subject: [PATCH 075/132] build(deps): bump github/codeql-action from 2.22.8 to
 3.22.12 (#13358)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.8 to 3.22.12.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/407ffafae6a767df3e0230c3df91b6443ae8df75...012739e5082ff0c22ca6d6ab32e07c36df03c4a4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql-analysis.yml | 6 +++---
 .github/workflows/scorecards.yml      | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 5e14936a95c..fd1ef19ef32 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -30,12 +30,12 @@ jobs:
           go-version: 1.21.x
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@407ffafae6a767df3e0230c3df91b6443ae8df75 # v2.22.8
+        uses: github/codeql-action/init@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v3.22.12
         with:
           languages: ${{ matrix.language }}
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@407ffafae6a767df3e0230c3df91b6443ae8df75 # v2.22.8
+        uses: github/codeql-action/autobuild@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v3.22.12
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@407ffafae6a767df3e0230c3df91b6443ae8df75 # v2.22.8
+        uses: github/codeql-action/analyze@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v3.22.12
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index f71e1331b0b..636dd1bd1a5 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -45,6 +45,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@407ffafae6a767df3e0230c3df91b6443ae8df75 # tag=v2.22.8
+        uses: github/codeql-action/upload-sarif@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # tag=v3.22.12
         with:
           sarif_file: results.sarif

From 6cd24d87b0d4e3acd4503b061d32c5aa6d8883a9 Mon Sep 17 00:00:00 2001
From: Augustin Husson <husson.augustin@gmail.com>
Date: Mon, 8 Jan 2024 17:01:24 +0100
Subject: [PATCH 076/132] put @nexucis has a release shepherd (#13383)

Signed-off-by: Augustin Husson <augustin.husson@amadeus.com>
---
 RELEASE.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/RELEASE.md b/RELEASE.md
index 6ab2f638996..6815308f477 100644
--- a/RELEASE.md
+++ b/RELEASE.md
@@ -54,7 +54,8 @@ Release cadence of first pre-releases being cut is 6 weeks.
 | v2.47          | 2023-08-23                                 | Bryan Boreham (GitHub: @bboreham)           |
 | v2.48          | 2023-10-04                                 | Levi Harrison (GitHub: @LeviHarrison)       |
 | v2.49          | 2023-12-05                                 | Bartek Plotka (GitHub: @bwplotka)           |
-| v2.50          | 2024-01-16                                 | **searching for volunteer**                 |
+| v2.50          | 2024-01-16                                 | Augustin Husson (GitHub: @nexucis)          |
+| v2.51          | 2024-02-13                                 | **searching for volunteer**                 |
 
 If you are interested in volunteering please create a pull request against the [prometheus/prometheus](https://github.com/prometheus/prometheus) repository and propose yourself for the release series of your choice.
 

From 6150e1ca0ede508e56414363cc9062ef522db518 Mon Sep 17 00:00:00 2001
From: zenador <zenador@users.noreply.github.com>
Date: Thu, 11 Jan 2024 00:32:36 +0800
Subject: [PATCH 077/132] Add analyze histograms command to promtool (#12331)

Add `query analyze` command to promtool

This command analyzes the buckets of classic and native histograms,
based on data queried from the Prometheus query API, i.e. it
doesn't require direct access to the TSDB files.

Signed-off-by: Jeanette Tan <jeanette.tan@grafana.com>

---------

Signed-off-by: Jeanette Tan <jeanette.tan@grafana.com>
---
 cmd/promtool/analyze.go       | 370 ++++++++++++++++++++++++++++++++++
 cmd/promtool/analyze_test.go  | 170 ++++++++++++++++
 cmd/promtool/main.go          | 260 ++----------------------
 cmd/promtool/query.go         | 251 +++++++++++++++++++++++
 docs/command-line/promtool.md |  19 ++
 5 files changed, 823 insertions(+), 247 deletions(-)
 create mode 100644 cmd/promtool/analyze.go
 create mode 100644 cmd/promtool/analyze_test.go
 create mode 100644 cmd/promtool/query.go

diff --git a/cmd/promtool/analyze.go b/cmd/promtool/analyze.go
new file mode 100644
index 00000000000..c1f523de525
--- /dev/null
+++ b/cmd/promtool/analyze.go
@@ -0,0 +1,370 @@
+// Copyright 2023 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package main
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"io"
+	"math"
+	"net/http"
+	"net/url"
+	"os"
+	"sort"
+	"strconv"
+	"strings"
+	"time"
+
+	v1 "github.com/prometheus/client_golang/api/prometheus/v1"
+	"github.com/prometheus/common/model"
+
+	"github.com/prometheus/prometheus/model/labels"
+)
+
+var (
+	errNotNativeHistogram = fmt.Errorf("not a native histogram")
+	errNotEnoughData      = fmt.Errorf("not enough data")
+
+	outputHeader = `Bucket stats for each histogram series over time
+------------------------------------------------
+First the min, avg, and max number of populated buckets, followed by the total
+number of buckets (only if different from the max number of populated buckets
+which is typical for classic but not native histograms).`
+	outputFooter = `Aggregated bucket stats
+-----------------------
+Each line shows min/avg/max over the series above.`
+)
+
+type QueryAnalyzeConfig struct {
+	metricType string
+	duration   time.Duration
+	time       string
+	matchers   []string
+}
+
+// run retrieves metrics that look like conventional histograms (i.e. have _bucket
+// suffixes) or native histograms, depending on metricType flag.
+func (c *QueryAnalyzeConfig) run(url *url.URL, roundtripper http.RoundTripper) error {
+	if c.metricType != "histogram" {
+		return fmt.Errorf("analyze type is %s, must be 'histogram'", c.metricType)
+	}
+
+	ctx := context.Background()
+
+	api, err := newAPI(url, roundtripper, nil)
+	if err != nil {
+		return err
+	}
+
+	var endTime time.Time
+	if c.time != "" {
+		endTime, err = parseTime(c.time)
+		if err != nil {
+			return fmt.Errorf("error parsing time '%s': %w", c.time, err)
+		}
+	} else {
+		endTime = time.Now()
+	}
+
+	return c.getStatsFromMetrics(ctx, api, endTime, os.Stdout, c.matchers)
+}
+
+func (c *QueryAnalyzeConfig) getStatsFromMetrics(ctx context.Context, api v1.API, endTime time.Time, out io.Writer, matchers []string) error {
+	fmt.Fprintf(out, "%s\n\n", outputHeader)
+	metastatsNative := newMetaStatistics()
+	metastatsClassic := newMetaStatistics()
+	for _, matcher := range matchers {
+		seriesSel := seriesSelector(matcher, c.duration)
+		matrix, err := querySamples(ctx, api, seriesSel, endTime)
+		if err != nil {
+			return err
+		}
+
+		matrices := make(map[string]model.Matrix)
+		for _, series := range matrix {
+			// We do not handle mixed types. If there are float values, we assume it is a
+			// classic histogram, otherwise we assume it is a native histogram, and we
+			// ignore series with errors if they do not match the expected type.
+			if len(series.Values) == 0 {
+				stats, err := calcNativeBucketStatistics(series)
+				if err != nil {
+					if errors.Is(err, errNotNativeHistogram) || errors.Is(err, errNotEnoughData) {
+						continue
+					}
+					return err
+				}
+				fmt.Fprintf(out, "- %s (native): %v\n", series.Metric, *stats)
+				metastatsNative.update(stats)
+			} else {
+				lbs := model.LabelSet(series.Metric).Clone()
+				if _, ok := lbs["le"]; !ok {
+					continue
+				}
+				metricName := string(lbs[labels.MetricName])
+				if !strings.HasSuffix(metricName, "_bucket") {
+					continue
+				}
+				delete(lbs, labels.MetricName)
+				delete(lbs, "le")
+				key := formatSeriesName(metricName, lbs)
+				matrices[key] = append(matrices[key], series)
+			}
+		}
+
+		for key, matrix := range matrices {
+			stats, err := calcClassicBucketStatistics(matrix)
+			if err != nil {
+				if errors.Is(err, errNotEnoughData) {
+					continue
+				}
+				return err
+			}
+			fmt.Fprintf(out, "- %s (classic): %v\n", key, *stats)
+			metastatsClassic.update(stats)
+		}
+	}
+	fmt.Fprintf(out, "\n%s\n", outputFooter)
+	if metastatsNative.Count() > 0 {
+		fmt.Fprintf(out, "\nNative %s\n", metastatsNative)
+	}
+	if metastatsClassic.Count() > 0 {
+		fmt.Fprintf(out, "\nClassic %s\n", metastatsClassic)
+	}
+	return nil
+}
+
+func seriesSelector(metricName string, duration time.Duration) string {
+	builder := strings.Builder{}
+	builder.WriteString(metricName)
+	builder.WriteRune('[')
+	builder.WriteString(duration.String())
+	builder.WriteRune(']')
+	return builder.String()
+}
+
+func formatSeriesName(metricName string, lbs model.LabelSet) string {
+	builder := strings.Builder{}
+	builder.WriteString(metricName)
+	builder.WriteString(lbs.String())
+	return builder.String()
+}
+
+func querySamples(ctx context.Context, api v1.API, query string, end time.Time) (model.Matrix, error) {
+	values, _, err := api.Query(ctx, query, end)
+	if err != nil {
+		return nil, err
+	}
+
+	matrix, ok := values.(model.Matrix)
+	if !ok {
+		return nil, fmt.Errorf("query of buckets resulted in non-Matrix")
+	}
+
+	return matrix, nil
+}
+
+// minPop/avgPop/maxPop is for the number of populated (non-zero) buckets.
+// total is the total number of buckets across all samples in the series,
+// populated or not.
+type statistics struct {
+	minPop, maxPop, total int
+	avgPop                float64
+}
+
+func (s statistics) String() string {
+	if s.maxPop == s.total {
+		return fmt.Sprintf("%d/%.3f/%d", s.minPop, s.avgPop, s.maxPop)
+	}
+	return fmt.Sprintf("%d/%.3f/%d/%d", s.minPop, s.avgPop, s.maxPop, s.total)
+}
+
+func calcClassicBucketStatistics(matrix model.Matrix) (*statistics, error) {
+	numBuckets := len(matrix)
+
+	stats := &statistics{
+		minPop: math.MaxInt,
+		total:  numBuckets,
+	}
+
+	if numBuckets == 0 || len(matrix[0].Values) < 2 {
+		return stats, errNotEnoughData
+	}
+
+	numSamples := len(matrix[0].Values)
+
+	sortMatrix(matrix)
+
+	totalPop := 0
+	for timeIdx := 0; timeIdx < numSamples; timeIdx++ {
+		curr, err := getBucketCountsAtTime(matrix, numBuckets, timeIdx)
+		if err != nil {
+			return stats, err
+		}
+		countPop := 0
+		for _, b := range curr {
+			if b != 0 {
+				countPop++
+			}
+		}
+
+		totalPop += countPop
+		if stats.minPop > countPop {
+			stats.minPop = countPop
+		}
+		if stats.maxPop < countPop {
+			stats.maxPop = countPop
+		}
+	}
+	stats.avgPop = float64(totalPop) / float64(numSamples)
+	return stats, nil
+}
+
+func sortMatrix(matrix model.Matrix) {
+	sort.SliceStable(matrix, func(i, j int) bool {
+		return getLe(matrix[i]) < getLe(matrix[j])
+	})
+}
+
+func getLe(series *model.SampleStream) float64 {
+	lbs := model.LabelSet(series.Metric)
+	le, _ := strconv.ParseFloat(string(lbs["le"]), 64)
+	return le
+}
+
+func getBucketCountsAtTime(matrix model.Matrix, numBuckets, timeIdx int) ([]int, error) {
+	counts := make([]int, numBuckets)
+	if timeIdx >= len(matrix[0].Values) {
+		// Just return zeroes instead of erroring out so we can get partial results.
+		return counts, nil
+	}
+	counts[0] = int(matrix[0].Values[timeIdx].Value)
+	for i, bucket := range matrix[1:] {
+		if timeIdx >= len(bucket.Values) {
+			// Just return zeroes instead of erroring out so we can get partial results.
+			return counts, nil
+		}
+		curr := bucket.Values[timeIdx]
+		prev := matrix[i].Values[timeIdx]
+		// Assume the results are nicely aligned.
+		if curr.Timestamp != prev.Timestamp {
+			return counts, fmt.Errorf("matrix result is not time aligned")
+		}
+		counts[i+1] = int(curr.Value - prev.Value)
+	}
+	return counts, nil
+}
+
+type bucketBounds struct {
+	boundaries   int32
+	upper, lower float64
+}
+
+func makeBucketBounds(b *model.HistogramBucket) bucketBounds {
+	return bucketBounds{
+		boundaries: b.Boundaries,
+		upper:      float64(b.Upper),
+		lower:      float64(b.Lower),
+	}
+}
+
+func calcNativeBucketStatistics(series *model.SampleStream) (*statistics, error) {
+	stats := &statistics{
+		minPop: math.MaxInt,
+	}
+
+	overall := make(map[bucketBounds]struct{})
+	totalPop := 0
+	if len(series.Histograms) == 0 {
+		return nil, errNotNativeHistogram
+	}
+	if len(series.Histograms) == 1 {
+		return nil, errNotEnoughData
+	}
+	for _, histogram := range series.Histograms {
+		for _, bucket := range histogram.Histogram.Buckets {
+			bb := makeBucketBounds(bucket)
+			overall[bb] = struct{}{}
+		}
+		countPop := len(histogram.Histogram.Buckets)
+
+		totalPop += countPop
+		if stats.minPop > countPop {
+			stats.minPop = countPop
+		}
+		if stats.maxPop < countPop {
+			stats.maxPop = countPop
+		}
+	}
+	stats.avgPop = float64(totalPop) / float64(len(series.Histograms))
+	stats.total = len(overall)
+	return stats, nil
+}
+
+type distribution struct {
+	min, max, count int
+	avg             float64
+}
+
+func newDistribution() distribution {
+	return distribution{
+		min: math.MaxInt,
+	}
+}
+
+func (d *distribution) update(num int) {
+	if d.min > num {
+		d.min = num
+	}
+	if d.max < num {
+		d.max = num
+	}
+	d.count++
+	d.avg += float64(num)/float64(d.count) - d.avg/float64(d.count)
+}
+
+func (d distribution) String() string {
+	return fmt.Sprintf("%d/%.3f/%d", d.min, d.avg, d.max)
+}
+
+type metaStatistics struct {
+	minPop, avgPop, maxPop, total distribution
+}
+
+func newMetaStatistics() *metaStatistics {
+	return &metaStatistics{
+		minPop: newDistribution(),
+		avgPop: newDistribution(),
+		maxPop: newDistribution(),
+		total:  newDistribution(),
+	}
+}
+
+func (ms metaStatistics) Count() int {
+	return ms.minPop.count
+}
+
+func (ms metaStatistics) String() string {
+	if ms.maxPop == ms.total {
+		return fmt.Sprintf("histogram series (%d in total):\n- min populated: %v\n- avg populated: %v\n- max populated: %v", ms.Count(), ms.minPop, ms.avgPop, ms.maxPop)
+	}
+	return fmt.Sprintf("histogram series (%d in total):\n- min populated: %v\n- avg populated: %v\n- max populated: %v\n- total: %v", ms.Count(), ms.minPop, ms.avgPop, ms.maxPop, ms.total)
+}
+
+func (ms *metaStatistics) update(s *statistics) {
+	ms.minPop.update(s.minPop)
+	ms.avgPop.update(int(s.avgPop))
+	ms.maxPop.update(s.maxPop)
+	ms.total.update(s.total)
+}
diff --git a/cmd/promtool/analyze_test.go b/cmd/promtool/analyze_test.go
new file mode 100644
index 00000000000..83d2ac4a3db
--- /dev/null
+++ b/cmd/promtool/analyze_test.go
@@ -0,0 +1,170 @@
+// Copyright 2023 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package main
+
+import (
+	"fmt"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+
+	"github.com/prometheus/common/model"
+)
+
+var (
+	exampleMatrix = model.Matrix{
+		&model.SampleStream{
+			Metric: model.Metric{
+				"le": "+Inf",
+			},
+			Values: []model.SamplePair{
+				{
+					Value:     31,
+					Timestamp: 100,
+				},
+				{
+					Value:     32,
+					Timestamp: 200,
+				},
+				{
+					Value:     40,
+					Timestamp: 300,
+				},
+			},
+		},
+		&model.SampleStream{
+			Metric: model.Metric{
+				"le": "0.5",
+			},
+			Values: []model.SamplePair{
+				{
+					Value:     10,
+					Timestamp: 100,
+				},
+				{
+					Value:     11,
+					Timestamp: 200,
+				},
+				{
+					Value:     11,
+					Timestamp: 300,
+				},
+			},
+		},
+		&model.SampleStream{
+			Metric: model.Metric{
+				"le": "10",
+			},
+			Values: []model.SamplePair{
+				{
+					Value:     30,
+					Timestamp: 100,
+				},
+				{
+					Value:     31,
+					Timestamp: 200,
+				},
+				{
+					Value:     37,
+					Timestamp: 300,
+				},
+			},
+		},
+		&model.SampleStream{
+			Metric: model.Metric{
+				"le": "2",
+			},
+			Values: []model.SamplePair{
+				{
+					Value:     25,
+					Timestamp: 100,
+				},
+				{
+					Value:     26,
+					Timestamp: 200,
+				},
+				{
+					Value:     27,
+					Timestamp: 300,
+				},
+			},
+		},
+	}
+	exampleMatrixLength = len(exampleMatrix)
+)
+
+func init() {
+	sortMatrix(exampleMatrix)
+}
+
+func TestGetBucketCountsAtTime(t *testing.T) {
+	cases := []struct {
+		matrix   model.Matrix
+		length   int
+		timeIdx  int
+		expected []int
+	}{
+		{
+			exampleMatrix,
+			exampleMatrixLength,
+			0,
+			[]int{10, 15, 5, 1},
+		},
+		{
+			exampleMatrix,
+			exampleMatrixLength,
+			1,
+			[]int{11, 15, 5, 1},
+		},
+		{
+			exampleMatrix,
+			exampleMatrixLength,
+			2,
+			[]int{11, 16, 10, 3},
+		},
+	}
+
+	for _, c := range cases {
+		t.Run(fmt.Sprintf("exampleMatrix@%d", c.timeIdx), func(t *testing.T) {
+			res, err := getBucketCountsAtTime(c.matrix, c.length, c.timeIdx)
+			require.NoError(t, err)
+			require.Equal(t, c.expected, res)
+		})
+	}
+}
+
+func TestCalcClassicBucketStatistics(t *testing.T) {
+	cases := []struct {
+		matrix   model.Matrix
+		expected *statistics
+	}{
+		{
+			exampleMatrix,
+			&statistics{
+				minPop: 4,
+				avgPop: 4,
+				maxPop: 4,
+				total:  4,
+			},
+		},
+	}
+
+	for i, c := range cases {
+		t.Run(fmt.Sprintf("case %d", i), func(t *testing.T) {
+			res, err := calcClassicBucketStatistics(c.matrix)
+			require.NoError(t, err)
+			require.Equal(t, c.expected, res)
+		})
+	}
+}
diff --git a/cmd/promtool/main.go b/cmd/promtool/main.go
index 508b681b882..61dcabdc612 100644
--- a/cmd/promtool/main.go
+++ b/cmd/promtool/main.go
@@ -35,9 +35,7 @@ import (
 	"github.com/go-kit/log"
 	"github.com/google/pprof/profile"
 	"github.com/prometheus/client_golang/api"
-	v1 "github.com/prometheus/client_golang/api/prometheus/v1"
 	"github.com/prometheus/client_golang/prometheus"
-	"github.com/prometheus/client_golang/prometheus/promhttp"
 	"github.com/prometheus/client_golang/prometheus/testutil/promlint"
 	config_util "github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
@@ -185,6 +183,14 @@ func main() {
 	queryLabelsEnd := queryLabelsCmd.Flag("end", "End time (RFC3339 or Unix timestamp).").String()
 	queryLabelsMatch := queryLabelsCmd.Flag("match", "Series selector. Can be specified multiple times.").Strings()
 
+	queryAnalyzeCfg := &QueryAnalyzeConfig{}
+	queryAnalyzeCmd := queryCmd.Command("analyze", "Run queries against your Prometheus to analyze the usage pattern of certain metrics.")
+	queryAnalyzeCmd.Flag("server", "Prometheus server to query.").Required().URLVar(&serverURL)
+	queryAnalyzeCmd.Flag("type", "Type of metric: histogram.").Required().StringVar(&queryAnalyzeCfg.metricType)
+	queryAnalyzeCmd.Flag("duration", "Time frame to analyze.").Default("1h").DurationVar(&queryAnalyzeCfg.duration)
+	queryAnalyzeCmd.Flag("time", "Query time (RFC3339 or Unix timestamp), defaults to now.").StringVar(&queryAnalyzeCfg.time)
+	queryAnalyzeCmd.Flag("match", "Series selector. Can be specified multiple times.").Required().StringsVar(&queryAnalyzeCfg.matchers)
+
 	pushCmd := app.Command("push", "Push to a Prometheus server.")
 	pushCmd.Flag("http.config.file", "HTTP client configuration file for promtool to connect to Prometheus.").PlaceHolder("<filename>").ExistingFileVar(&httpConfigFilePath)
 	pushMetricsCmd := pushCmd.Command("metrics", "Push metrics to a prometheus remote write (for testing purpose only).")
@@ -390,6 +396,9 @@ func main() {
 	case importRulesCmd.FullCommand():
 		os.Exit(checkErr(importRules(serverURL, httpRoundTripper, *importRulesStart, *importRulesEnd, *importRulesOutputDir, *importRulesEvalInterval, *maxBlockDuration, *importRulesFiles...)))
 
+	case queryAnalyzeCmd.FullCommand():
+		os.Exit(checkErr(queryAnalyzeCfg.run(serverURL, httpRoundTripper)))
+
 	case documentationCmd.FullCommand():
 		os.Exit(checkErr(documentcli.GenerateMarkdown(app.Model(), os.Stdout)))
 
@@ -997,246 +1006,6 @@ func checkMetricsExtended(r io.Reader) ([]metricStat, int, error) {
 	return stats, total, nil
 }
 
-// QueryInstant performs an instant query against a Prometheus server.
-func QueryInstant(url *url.URL, roundTripper http.RoundTripper, query, evalTime string, p printer) int {
-	if url.Scheme == "" {
-		url.Scheme = "http"
-	}
-	config := api.Config{
-		Address:      url.String(),
-		RoundTripper: roundTripper,
-	}
-
-	// Create new client.
-	c, err := api.NewClient(config)
-	if err != nil {
-		fmt.Fprintln(os.Stderr, "error creating API client:", err)
-		return failureExitCode
-	}
-
-	eTime := time.Now()
-	if evalTime != "" {
-		eTime, err = parseTime(evalTime)
-		if err != nil {
-			fmt.Fprintln(os.Stderr, "error parsing evaluation time:", err)
-			return failureExitCode
-		}
-	}
-
-	// Run query against client.
-	api := v1.NewAPI(c)
-
-	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
-	val, _, err := api.Query(ctx, query, eTime) // Ignoring warnings for now.
-	cancel()
-	if err != nil {
-		return handleAPIError(err)
-	}
-
-	p.printValue(val)
-
-	return successExitCode
-}
-
-// QueryRange performs a range query against a Prometheus server.
-func QueryRange(url *url.URL, roundTripper http.RoundTripper, headers map[string]string, query, start, end string, step time.Duration, p printer) int {
-	if url.Scheme == "" {
-		url.Scheme = "http"
-	}
-	config := api.Config{
-		Address:      url.String(),
-		RoundTripper: roundTripper,
-	}
-
-	if len(headers) > 0 {
-		config.RoundTripper = promhttp.RoundTripperFunc(func(req *http.Request) (*http.Response, error) {
-			for key, value := range headers {
-				req.Header.Add(key, value)
-			}
-			return roundTripper.RoundTrip(req)
-		})
-	}
-
-	// Create new client.
-	c, err := api.NewClient(config)
-	if err != nil {
-		fmt.Fprintln(os.Stderr, "error creating API client:", err)
-		return failureExitCode
-	}
-
-	var stime, etime time.Time
-
-	if end == "" {
-		etime = time.Now()
-	} else {
-		etime, err = parseTime(end)
-		if err != nil {
-			fmt.Fprintln(os.Stderr, "error parsing end time:", err)
-			return failureExitCode
-		}
-	}
-
-	if start == "" {
-		stime = etime.Add(-5 * time.Minute)
-	} else {
-		stime, err = parseTime(start)
-		if err != nil {
-			fmt.Fprintln(os.Stderr, "error parsing start time:", err)
-			return failureExitCode
-		}
-	}
-
-	if !stime.Before(etime) {
-		fmt.Fprintln(os.Stderr, "start time is not before end time")
-		return failureExitCode
-	}
-
-	if step == 0 {
-		resolution := math.Max(math.Floor(etime.Sub(stime).Seconds()/250), 1)
-		// Convert seconds to nanoseconds such that time.Duration parses correctly.
-		step = time.Duration(resolution) * time.Second
-	}
-
-	// Run query against client.
-	api := v1.NewAPI(c)
-	r := v1.Range{Start: stime, End: etime, Step: step}
-	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
-	val, _, err := api.QueryRange(ctx, query, r) // Ignoring warnings for now.
-	cancel()
-
-	if err != nil {
-		return handleAPIError(err)
-	}
-
-	p.printValue(val)
-	return successExitCode
-}
-
-// QuerySeries queries for a series against a Prometheus server.
-func QuerySeries(url *url.URL, roundTripper http.RoundTripper, matchers []string, start, end string, p printer) int {
-	if url.Scheme == "" {
-		url.Scheme = "http"
-	}
-	config := api.Config{
-		Address:      url.String(),
-		RoundTripper: roundTripper,
-	}
-
-	// Create new client.
-	c, err := api.NewClient(config)
-	if err != nil {
-		fmt.Fprintln(os.Stderr, "error creating API client:", err)
-		return failureExitCode
-	}
-
-	stime, etime, err := parseStartTimeAndEndTime(start, end)
-	if err != nil {
-		fmt.Fprintln(os.Stderr, err)
-		return failureExitCode
-	}
-
-	// Run query against client.
-	api := v1.NewAPI(c)
-	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
-	val, _, err := api.Series(ctx, matchers, stime, etime) // Ignoring warnings for now.
-	cancel()
-
-	if err != nil {
-		return handleAPIError(err)
-	}
-
-	p.printSeries(val)
-	return successExitCode
-}
-
-// QueryLabels queries for label values against a Prometheus server.
-func QueryLabels(url *url.URL, roundTripper http.RoundTripper, matchers []string, name, start, end string, p printer) int {
-	if url.Scheme == "" {
-		url.Scheme = "http"
-	}
-	config := api.Config{
-		Address:      url.String(),
-		RoundTripper: roundTripper,
-	}
-
-	// Create new client.
-	c, err := api.NewClient(config)
-	if err != nil {
-		fmt.Fprintln(os.Stderr, "error creating API client:", err)
-		return failureExitCode
-	}
-
-	stime, etime, err := parseStartTimeAndEndTime(start, end)
-	if err != nil {
-		fmt.Fprintln(os.Stderr, err)
-		return failureExitCode
-	}
-
-	// Run query against client.
-	api := v1.NewAPI(c)
-	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
-	val, warn, err := api.LabelValues(ctx, name, matchers, stime, etime)
-	cancel()
-
-	for _, v := range warn {
-		fmt.Fprintln(os.Stderr, "query warning:", v)
-	}
-	if err != nil {
-		return handleAPIError(err)
-	}
-
-	p.printLabelValues(val)
-	return successExitCode
-}
-
-func handleAPIError(err error) int {
-	var apiErr *v1.Error
-	if errors.As(err, &apiErr) && apiErr.Detail != "" {
-		fmt.Fprintf(os.Stderr, "query error: %v (detail: %s)\n", apiErr, strings.TrimSpace(apiErr.Detail))
-	} else {
-		fmt.Fprintln(os.Stderr, "query error:", err)
-	}
-
-	return failureExitCode
-}
-
-func parseStartTimeAndEndTime(start, end string) (time.Time, time.Time, error) {
-	var (
-		minTime = time.Now().Add(-9999 * time.Hour)
-		maxTime = time.Now().Add(9999 * time.Hour)
-		err     error
-	)
-
-	stime := minTime
-	etime := maxTime
-
-	if start != "" {
-		stime, err = parseTime(start)
-		if err != nil {
-			return stime, etime, fmt.Errorf("error parsing start time: %w", err)
-		}
-	}
-
-	if end != "" {
-		etime, err = parseTime(end)
-		if err != nil {
-			return stime, etime, fmt.Errorf("error parsing end time: %w", err)
-		}
-	}
-	return stime, etime, nil
-}
-
-func parseTime(s string) (time.Time, error) {
-	if t, err := strconv.ParseFloat(s, 64); err == nil {
-		s, ns := math.Modf(t)
-		return time.Unix(int64(s), int64(ns*float64(time.Second))).UTC(), nil
-	}
-	if t, err := time.Parse(time.RFC3339Nano, s); err == nil {
-		return t, nil
-	}
-	return time.Time{}, fmt.Errorf("cannot parse %q to a valid timestamp", s)
-}
-
 type endpointsGroup struct {
 	urlToFilename map[string]string
 	postProcess   func(b []byte) ([]byte, error)
@@ -1390,15 +1159,12 @@ func importRules(url *url.URL, roundTripper http.RoundTripper, start, end, outpu
 		evalInterval:     evalInterval,
 		maxBlockDuration: maxBlockDuration,
 	}
-	client, err := api.NewClient(api.Config{
-		Address:      url.String(),
-		RoundTripper: roundTripper,
-	})
+	api, err := newAPI(url, roundTripper, nil)
 	if err != nil {
 		return fmt.Errorf("new api client error: %w", err)
 	}
 
-	ruleImporter := newRuleImporter(log.NewLogfmtLogger(log.NewSyncWriter(os.Stderr)), cfg, v1.NewAPI(client))
+	ruleImporter := newRuleImporter(log.NewLogfmtLogger(log.NewSyncWriter(os.Stderr)), cfg, api)
 	errs := ruleImporter.loadGroups(ctx, files)
 	for _, err := range errs {
 		if err != nil {
diff --git a/cmd/promtool/query.go b/cmd/promtool/query.go
new file mode 100644
index 00000000000..0d7cb12cf42
--- /dev/null
+++ b/cmd/promtool/query.go
@@ -0,0 +1,251 @@
+// Copyright 2023 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package main
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"math"
+	"net/http"
+	"net/url"
+	"os"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/prometheus/client_golang/api"
+	v1 "github.com/prometheus/client_golang/api/prometheus/v1"
+	"github.com/prometheus/client_golang/prometheus/promhttp"
+
+	_ "github.com/prometheus/prometheus/plugins" // Register plugins.
+)
+
+func newAPI(url *url.URL, roundTripper http.RoundTripper, headers map[string]string) (v1.API, error) {
+	if url.Scheme == "" {
+		url.Scheme = "http"
+	}
+	config := api.Config{
+		Address:      url.String(),
+		RoundTripper: roundTripper,
+	}
+
+	if len(headers) > 0 {
+		config.RoundTripper = promhttp.RoundTripperFunc(func(req *http.Request) (*http.Response, error) {
+			for key, value := range headers {
+				req.Header.Add(key, value)
+			}
+			return roundTripper.RoundTrip(req)
+		})
+	}
+
+	// Create new client.
+	client, err := api.NewClient(config)
+	if err != nil {
+		return nil, err
+	}
+
+	api := v1.NewAPI(client)
+	return api, nil
+}
+
+// QueryInstant performs an instant query against a Prometheus server.
+func QueryInstant(url *url.URL, roundTripper http.RoundTripper, query, evalTime string, p printer) int {
+	api, err := newAPI(url, roundTripper, nil)
+	if err != nil {
+		fmt.Fprintln(os.Stderr, "error creating API client:", err)
+		return failureExitCode
+	}
+
+	eTime := time.Now()
+	if evalTime != "" {
+		eTime, err = parseTime(evalTime)
+		if err != nil {
+			fmt.Fprintln(os.Stderr, "error parsing evaluation time:", err)
+			return failureExitCode
+		}
+	}
+
+	// Run query against client.
+	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
+	val, _, err := api.Query(ctx, query, eTime) // Ignoring warnings for now.
+	cancel()
+	if err != nil {
+		return handleAPIError(err)
+	}
+
+	p.printValue(val)
+
+	return successExitCode
+}
+
+// QueryRange performs a range query against a Prometheus server.
+func QueryRange(url *url.URL, roundTripper http.RoundTripper, headers map[string]string, query, start, end string, step time.Duration, p printer) int {
+	api, err := newAPI(url, roundTripper, headers)
+	if err != nil {
+		fmt.Fprintln(os.Stderr, "error creating API client:", err)
+		return failureExitCode
+	}
+
+	var stime, etime time.Time
+
+	if end == "" {
+		etime = time.Now()
+	} else {
+		etime, err = parseTime(end)
+		if err != nil {
+			fmt.Fprintln(os.Stderr, "error parsing end time:", err)
+			return failureExitCode
+		}
+	}
+
+	if start == "" {
+		stime = etime.Add(-5 * time.Minute)
+	} else {
+		stime, err = parseTime(start)
+		if err != nil {
+			fmt.Fprintln(os.Stderr, "error parsing start time:", err)
+			return failureExitCode
+		}
+	}
+
+	if !stime.Before(etime) {
+		fmt.Fprintln(os.Stderr, "start time is not before end time")
+		return failureExitCode
+	}
+
+	if step == 0 {
+		resolution := math.Max(math.Floor(etime.Sub(stime).Seconds()/250), 1)
+		// Convert seconds to nanoseconds such that time.Duration parses correctly.
+		step = time.Duration(resolution) * time.Second
+	}
+
+	// Run query against client.
+	r := v1.Range{Start: stime, End: etime, Step: step}
+	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
+	val, _, err := api.QueryRange(ctx, query, r) // Ignoring warnings for now.
+	cancel()
+
+	if err != nil {
+		return handleAPIError(err)
+	}
+
+	p.printValue(val)
+	return successExitCode
+}
+
+// QuerySeries queries for a series against a Prometheus server.
+func QuerySeries(url *url.URL, roundTripper http.RoundTripper, matchers []string, start, end string, p printer) int {
+	api, err := newAPI(url, roundTripper, nil)
+	if err != nil {
+		fmt.Fprintln(os.Stderr, "error creating API client:", err)
+		return failureExitCode
+	}
+
+	stime, etime, err := parseStartTimeAndEndTime(start, end)
+	if err != nil {
+		fmt.Fprintln(os.Stderr, err)
+		return failureExitCode
+	}
+
+	// Run query against client.
+	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
+	val, _, err := api.Series(ctx, matchers, stime, etime) // Ignoring warnings for now.
+	cancel()
+
+	if err != nil {
+		return handleAPIError(err)
+	}
+
+	p.printSeries(val)
+	return successExitCode
+}
+
+// QueryLabels queries for label values against a Prometheus server.
+func QueryLabels(url *url.URL, roundTripper http.RoundTripper, matchers []string, name, start, end string, p printer) int {
+	api, err := newAPI(url, roundTripper, nil)
+	if err != nil {
+		fmt.Fprintln(os.Stderr, "error creating API client:", err)
+		return failureExitCode
+	}
+
+	stime, etime, err := parseStartTimeAndEndTime(start, end)
+	if err != nil {
+		fmt.Fprintln(os.Stderr, err)
+		return failureExitCode
+	}
+
+	// Run query against client.
+	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
+	val, warn, err := api.LabelValues(ctx, name, matchers, stime, etime)
+	cancel()
+
+	for _, v := range warn {
+		fmt.Fprintln(os.Stderr, "query warning:", v)
+	}
+	if err != nil {
+		return handleAPIError(err)
+	}
+
+	p.printLabelValues(val)
+	return successExitCode
+}
+
+func handleAPIError(err error) int {
+	var apiErr *v1.Error
+	if errors.As(err, &apiErr) && apiErr.Detail != "" {
+		fmt.Fprintf(os.Stderr, "query error: %v (detail: %s)\n", apiErr, strings.TrimSpace(apiErr.Detail))
+	} else {
+		fmt.Fprintln(os.Stderr, "query error:", err)
+	}
+
+	return failureExitCode
+}
+
+func parseStartTimeAndEndTime(start, end string) (time.Time, time.Time, error) {
+	var (
+		minTime = time.Now().Add(-9999 * time.Hour)
+		maxTime = time.Now().Add(9999 * time.Hour)
+		err     error
+	)
+
+	stime := minTime
+	etime := maxTime
+
+	if start != "" {
+		stime, err = parseTime(start)
+		if err != nil {
+			return stime, etime, fmt.Errorf("error parsing start time: %w", err)
+		}
+	}
+
+	if end != "" {
+		etime, err = parseTime(end)
+		if err != nil {
+			return stime, etime, fmt.Errorf("error parsing end time: %w", err)
+		}
+	}
+	return stime, etime, nil
+}
+
+func parseTime(s string) (time.Time, error) {
+	if t, err := strconv.ParseFloat(s, 64); err == nil {
+		s, ns := math.Modf(t)
+		return time.Unix(int64(s), int64(ns*float64(time.Second))).UTC(), nil
+	}
+	if t, err := time.Parse(time.RFC3339Nano, s); err == nil {
+		return t, nil
+	}
+	return time.Time{}, fmt.Errorf("cannot parse %q to a valid timestamp", s)
+}
diff --git a/docs/command-line/promtool.md b/docs/command-line/promtool.md
index 9b0fc7cc607..e9ee7597e6f 100644
--- a/docs/command-line/promtool.md
+++ b/docs/command-line/promtool.md
@@ -324,6 +324,25 @@ Run labels query.
 
 
 
+##### `promtool query analyze`
+
+Run queries against your Prometheus to analyze the usage pattern of certain metrics.
+
+
+
+###### Flags
+
+| Flag | Description | Default |
+| --- | --- | --- |
+| <code class="text-nowrap">--server</code> | Prometheus server to query. |  |
+| <code class="text-nowrap">--type</code> | Type of metric: histogram. |  |
+| <code class="text-nowrap">--duration</code> | Time frame to analyze. | `1h` |
+| <code class="text-nowrap">--time</code> | Query time (RFC3339 or Unix timestamp), defaults to now. |  |
+| <code class="text-nowrap">--match</code> | Series selector. Can be specified multiple times. |  |
+
+
+
+
 ### `promtool debug`
 
 Fetch debug information.

From d09d77b62a70f8bb2d7ad231452a47ca34d2df19 Mon Sep 17 00:00:00 2001
From: Erik Sommer <ersotech@posteo.de>
Date: Wed, 10 Jan 2024 19:37:10 +0100
Subject: [PATCH 078/132] included instance in all necessary descriptions

Signed-off-by: Erik Sommer <ersotech@posteo.de>
---
 .../prometheus-mixin/dashboards.libsonnet        | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/documentation/prometheus-mixin/dashboards.libsonnet b/documentation/prometheus-mixin/dashboards.libsonnet
index 2c508e6e0ba..efe53dbac9c 100644
--- a/documentation/prometheus-mixin/dashboards.libsonnet
+++ b/documentation/prometheus-mixin/dashboards.libsonnet
@@ -37,12 +37,12 @@ local template = grafana.template;
         g.row('Discovery')
         .addPanel(
           g.panel('Target Sync') +
-          g.queryPanel('sum(rate(prometheus_target_sync_length_seconds_sum{cluster=~"$cluster",job=~"$job",instance=~"$instance"}[5m])) by (cluster, job, scrape_job, instance) * 1e3', '{{cluster}}:{{job}}:{{scrape_job}}') +
+          g.queryPanel('sum(rate(prometheus_target_sync_length_seconds_sum{cluster=~"$cluster",job=~"$job",instance=~"$instance"}[5m])) by (cluster, job, scrape_job, instance) * 1e3', '{{cluster}}:{{job}}:{{instance}}:{{scrape_job}}') +
           { yaxes: g.yaxes('ms') }
         )
         .addPanel(
           g.panel('Targets') +
-          g.queryPanel('sum by (cluster, job, instance) (prometheus_sd_discovered_targets{cluster=~"$cluster", job=~"$job",instance=~"$instance"})', '{{cluster}}:{{job}}') +
+          g.queryPanel('sum by (cluster, job, instance) (prometheus_sd_discovered_targets{cluster=~"$cluster", job=~"$job",instance=~"$instance"})', '{{cluster}}:{{job}}:{{instance}}') +
           g.stack
         )
       )
@@ -50,7 +50,7 @@ local template = grafana.template;
         g.row('Retrieval')
         .addPanel(
           g.panel('Average Scrape Interval Duration') +
-          g.queryPanel('rate(prometheus_target_interval_length_seconds_sum{cluster=~"$cluster", job=~"$job",instance=~"$instance"}[5m]) / rate(prometheus_target_interval_length_seconds_count{cluster=~"$cluster", job=~"$job",instance=~"$instance"}[5m]) * 1e3', '{{cluster}}:{{job}} {{interval}} configured') +
+          g.queryPanel('rate(prometheus_target_interval_length_seconds_sum{cluster=~"$cluster", job=~"$job",instance=~"$instance"}[5m]) / rate(prometheus_target_interval_length_seconds_count{cluster=~"$cluster", job=~"$job",instance=~"$instance"}[5m]) * 1e3', '{{cluster}}:{{job}}:{{instance}} {{interval}} configured') +
           { yaxes: g.yaxes('ms') }
         )
         .addPanel(
@@ -62,11 +62,11 @@ local template = grafana.template;
             'sum by (cluster, job, instance) (rate(prometheus_target_scrapes_sample_out_of_bounds_total{cluster=~"$cluster",job=~"$job",instance=~"$instance"}[1m]))',
             'sum by (cluster, job, instance) (rate(prometheus_target_scrapes_sample_out_of_order_total{cluster=~"$cluster",job=~"$job",instance=~"$instance"}[1m]))',
           ], [
-            'exceeded body size limit: {{cluster}} {{job}}',
-            'exceeded sample limit: {{cluster}} {{job}}',
-            'duplicate timestamp: {{cluster}} {{job}}',
-            'out of bounds: {{cluster}} {{job}}',
-            'out of order: {{cluster}} {{job}}',
+            'exceeded body size limit: {{cluster}} {{job}} {{instance}}',
+            'exceeded sample limit: {{cluster}} {{job}} {{instance}}',
+            'duplicate timestamp: {{cluster}} {{job}} {{instance}}',
+            'out of bounds: {{cluster}} {{job}} {{instance}}',
+            'out of order: {{cluster}} {{job}} {{instance}}',
           ]) +
           g.stack
         )

From 9b759135d15ceb4c9aab0e39be260543051e8e92 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Giedrius=20Statkevi=C4=8Dius?=
 <giedrius.statkevicius@vinted.com>
Date: Thu, 11 Jan 2024 12:07:54 +0200
Subject: [PATCH 079/132] tsdb/compact: fix passing merge func
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fixing a very small logical problem I've introduced :(.

Signed-off-by: Giedrius Statkevičius <giedrius.statkevicius@vinted.com>
---
 tsdb/compact.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tsdb/compact.go b/tsdb/compact.go
index c5bd2ed2a67..e9639f1e059 100644
--- a/tsdb/compact.go
+++ b/tsdb/compact.go
@@ -178,8 +178,8 @@ func NewLeveledCompactorWithOptions(ctx context.Context, r prometheus.Registerer
 	if l == nil {
 		l = log.NewNopLogger()
 	}
-	var mergeFunc storage.VerticalChunkSeriesMergeFunc
-	if opts.MergeFunc == nil {
+	mergeFunc := opts.MergeFunc
+	if mergeFunc == nil {
 		mergeFunc = storage.NewCompactingChunkSeriesMerger(storage.ChainedSeriesMerge)
 	}
 	var maxBlockChunkSegmentSize int64

From 3a48adc54f1d77dd3956cc0f12c33b8f3454c6af Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Giedrius=20Statkevi=C4=8Dius?=
 <giedrius.statkevicius@vinted.com>
Date: Fri, 12 Jan 2024 09:56:44 +0200
Subject: [PATCH 080/132] tsdb: add enable overlapping compaction
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This functionality is needed in downstream projects because they have a
separate component that does compaction.

Upstreaming
https://github.com/grafana/mimir-prometheus/blob/7c8e9a2a76fc729e9078889782928b2fdfe240e9/tsdb/compact.go#L323-L325.

Signed-off-by: Giedrius Statkevičius <giedrius.statkevicius@vinted.com>
---
 tsdb/compact.go | 48 +++++++++++++++++++++++++++++-------------------
 1 file changed, 29 insertions(+), 19 deletions(-)

diff --git a/tsdb/compact.go b/tsdb/compact.go
index c5bd2ed2a67..b4c194de97f 100644
--- a/tsdb/compact.go
+++ b/tsdb/compact.go
@@ -75,14 +75,15 @@ type Compactor interface {
 
 // LeveledCompactor implements the Compactor interface.
 type LeveledCompactor struct {
-	metrics                  *CompactorMetrics
-	logger                   log.Logger
-	ranges                   []int64
-	chunkPool                chunkenc.Pool
-	ctx                      context.Context
-	maxBlockChunkSegmentSize int64
-	mergeFunc                storage.VerticalChunkSeriesMergeFunc
-	postingsEncoder          index.PostingsEncoder
+	metrics                     *CompactorMetrics
+	logger                      log.Logger
+	ranges                      []int64
+	chunkPool                   chunkenc.Pool
+	ctx                         context.Context
+	maxBlockChunkSegmentSize    int64
+	mergeFunc                   storage.VerticalChunkSeriesMergeFunc
+	postingsEncoder             index.PostingsEncoder
+	enableOverlappingCompaction bool
 }
 
 type CompactorMetrics struct {
@@ -153,18 +154,23 @@ type LeveledCompactorOptions struct {
 	MaxBlockChunkSegmentSize int64
 	// MergeFunc is used for merging series together in vertical compaction. By default storage.NewCompactingChunkSeriesMerger(storage.ChainedSeriesMerge) is used.
 	MergeFunc storage.VerticalChunkSeriesMergeFunc
+	// EnableOverlappingCompaction enables compaction of overlapping blocks. In Prometheus it is always enabled.
+	// It is useful for downstream projects like Mimir, Cortex, Thanos where they have a separate component that does compaction.
+	EnableOverlappingCompaction bool
 }
 
 func NewLeveledCompactorWithChunkSize(ctx context.Context, r prometheus.Registerer, l log.Logger, ranges []int64, pool chunkenc.Pool, maxBlockChunkSegmentSize int64, mergeFunc storage.VerticalChunkSeriesMergeFunc) (*LeveledCompactor, error) {
 	return NewLeveledCompactorWithOptions(ctx, r, l, ranges, pool, LeveledCompactorOptions{
-		MaxBlockChunkSegmentSize: maxBlockChunkSegmentSize,
-		MergeFunc:                mergeFunc,
+		MaxBlockChunkSegmentSize:    maxBlockChunkSegmentSize,
+		MergeFunc:                   mergeFunc,
+		EnableOverlappingCompaction: true,
 	})
 }
 
 func NewLeveledCompactor(ctx context.Context, r prometheus.Registerer, l log.Logger, ranges []int64, pool chunkenc.Pool, mergeFunc storage.VerticalChunkSeriesMergeFunc) (*LeveledCompactor, error) {
 	return NewLeveledCompactorWithOptions(ctx, r, l, ranges, pool, LeveledCompactorOptions{
-		MergeFunc: mergeFunc,
+		MergeFunc:                   mergeFunc,
+		EnableOverlappingCompaction: true,
 	})
 }
 
@@ -191,14 +197,15 @@ func NewLeveledCompactorWithOptions(ctx context.Context, r prometheus.Registerer
 		pe = index.EncodePostingsRaw
 	}
 	return &LeveledCompactor{
-		ranges:                   ranges,
-		chunkPool:                pool,
-		logger:                   l,
-		metrics:                  newCompactorMetrics(r),
-		ctx:                      ctx,
-		maxBlockChunkSegmentSize: maxBlockChunkSegmentSize,
-		mergeFunc:                mergeFunc,
-		postingsEncoder:          pe,
+		ranges:                      ranges,
+		chunkPool:                   pool,
+		logger:                      l,
+		metrics:                     newCompactorMetrics(r),
+		ctx:                         ctx,
+		maxBlockChunkSegmentSize:    maxBlockChunkSegmentSize,
+		mergeFunc:                   mergeFunc,
+		postingsEncoder:             pe,
+		enableOverlappingCompaction: opts.EnableOverlappingCompaction,
 	}, nil
 }
 
@@ -317,6 +324,9 @@ func (c *LeveledCompactor) selectDirs(ds []dirMeta) []dirMeta {
 // selectOverlappingDirs returns all dirs with overlapping time ranges.
 // It expects sorted input by mint and returns the overlapping dirs in the same order as received.
 func (c *LeveledCompactor) selectOverlappingDirs(ds []dirMeta) []string {
+	if !c.enableOverlappingCompaction {
+		return nil
+	}
 	if len(ds) < 2 {
 		return nil
 	}

From ace9c8a3da7a9c90af43ee871ad23aacbcb84877 Mon Sep 17 00:00:00 2001
From: Ayoub Mrini <ayoubmrini424@gmail.com>
Date: Mon, 15 Jan 2024 11:29:53 +0100
Subject: [PATCH 081/132] promtool: allow setting multiple matchers to
 "promtool tsdb dump" command. (#13296)

Conditions are ANDed inside the same matcher but matchers are ORed

Including unit tests for "promtool tsdb dump".

Refactor some matchers scraping utils.

Signed-off-by: machine424 <ayoubmrini424@gmail.com>
---
 cmd/promtool/main.go                   |   2 +-
 cmd/promtool/testdata/dump-test-1.prom |  15 ++++
 cmd/promtool/testdata/dump-test-2.prom |  10 +++
 cmd/promtool/testdata/dump-test-3.prom |   2 +
 cmd/promtool/tsdb.go                   |  16 +++-
 cmd/promtool/tsdb_test.go              | 107 +++++++++++++++++++++++++
 docs/command-line/promtool.md          |   2 +-
 promql/parser/parse.go                 |  14 ++++
 web/api/v1/api.go                      |  10 +--
 web/federate.go                        |  12 +--
 10 files changed, 170 insertions(+), 20 deletions(-)
 create mode 100644 cmd/promtool/testdata/dump-test-1.prom
 create mode 100644 cmd/promtool/testdata/dump-test-2.prom
 create mode 100644 cmd/promtool/testdata/dump-test-3.prom

diff --git a/cmd/promtool/main.go b/cmd/promtool/main.go
index 61dcabdc612..5a7f21d3ba0 100644
--- a/cmd/promtool/main.go
+++ b/cmd/promtool/main.go
@@ -236,7 +236,7 @@ func main() {
 	dumpPath := tsdbDumpCmd.Arg("db path", "Database path (default is "+defaultDBPath+").").Default(defaultDBPath).String()
 	dumpMinTime := tsdbDumpCmd.Flag("min-time", "Minimum timestamp to dump.").Default(strconv.FormatInt(math.MinInt64, 10)).Int64()
 	dumpMaxTime := tsdbDumpCmd.Flag("max-time", "Maximum timestamp to dump.").Default(strconv.FormatInt(math.MaxInt64, 10)).Int64()
-	dumpMatch := tsdbDumpCmd.Flag("match", "Series selector.").Default("{__name__=~'(?s:.*)'}").String()
+	dumpMatch := tsdbDumpCmd.Flag("match", "Series selector. Can be specified multiple times.").Default("{__name__=~'(?s:.*)'}").Strings()
 
 	importCmd := tsdbCmd.Command("create-blocks-from", "[Experimental] Import samples from input and produce TSDB blocks. Please refer to the storage docs for more details.")
 	importHumanReadable := importCmd.Flag("human-readable", "Print human readable values.").Short('r').Bool()
diff --git a/cmd/promtool/testdata/dump-test-1.prom b/cmd/promtool/testdata/dump-test-1.prom
new file mode 100644
index 00000000000..878cdecab8a
--- /dev/null
+++ b/cmd/promtool/testdata/dump-test-1.prom
@@ -0,0 +1,15 @@
+{__name__="heavy_metric", foo="bar"} 5 0
+{__name__="heavy_metric", foo="bar"} 4 60000
+{__name__="heavy_metric", foo="bar"} 3 120000
+{__name__="heavy_metric", foo="bar"} 2 180000
+{__name__="heavy_metric", foo="bar"} 1 240000
+{__name__="heavy_metric", foo="foo"} 5 0
+{__name__="heavy_metric", foo="foo"} 4 60000
+{__name__="heavy_metric", foo="foo"} 3 120000
+{__name__="heavy_metric", foo="foo"} 2 180000
+{__name__="heavy_metric", foo="foo"} 1 240000
+{__name__="metric", baz="abc", foo="bar"} 1 0
+{__name__="metric", baz="abc", foo="bar"} 2 60000
+{__name__="metric", baz="abc", foo="bar"} 3 120000
+{__name__="metric", baz="abc", foo="bar"} 4 180000
+{__name__="metric", baz="abc", foo="bar"} 5 240000
diff --git a/cmd/promtool/testdata/dump-test-2.prom b/cmd/promtool/testdata/dump-test-2.prom
new file mode 100644
index 00000000000..4ac2ffa5aec
--- /dev/null
+++ b/cmd/promtool/testdata/dump-test-2.prom
@@ -0,0 +1,10 @@
+{__name__="heavy_metric", foo="foo"} 5 0
+{__name__="heavy_metric", foo="foo"} 4 60000
+{__name__="heavy_metric", foo="foo"} 3 120000
+{__name__="heavy_metric", foo="foo"} 2 180000
+{__name__="heavy_metric", foo="foo"} 1 240000
+{__name__="metric", baz="abc", foo="bar"} 1 0
+{__name__="metric", baz="abc", foo="bar"} 2 60000
+{__name__="metric", baz="abc", foo="bar"} 3 120000
+{__name__="metric", baz="abc", foo="bar"} 4 180000
+{__name__="metric", baz="abc", foo="bar"} 5 240000
diff --git a/cmd/promtool/testdata/dump-test-3.prom b/cmd/promtool/testdata/dump-test-3.prom
new file mode 100644
index 00000000000..faa278101ed
--- /dev/null
+++ b/cmd/promtool/testdata/dump-test-3.prom
@@ -0,0 +1,2 @@
+{__name__="metric", baz="abc", foo="bar"} 2 60000
+{__name__="metric", baz="abc", foo="bar"} 3 120000
diff --git a/cmd/promtool/tsdb.go b/cmd/promtool/tsdb.go
index e6df9b78cf2..a9239d937ce 100644
--- a/cmd/promtool/tsdb.go
+++ b/cmd/promtool/tsdb.go
@@ -706,7 +706,7 @@ func analyzeCompaction(ctx context.Context, block tsdb.BlockReader, indexr tsdb.
 	return nil
 }
 
-func dumpSamples(ctx context.Context, path string, mint, maxt int64, match string) (err error) {
+func dumpSamples(ctx context.Context, path string, mint, maxt int64, match []string) (err error) {
 	db, err := tsdb.OpenDBReadOnly(path, nil)
 	if err != nil {
 		return err
@@ -720,11 +720,21 @@ func dumpSamples(ctx context.Context, path string, mint, maxt int64, match strin
 	}
 	defer q.Close()
 
-	matchers, err := parser.ParseMetricSelector(match)
+	matcherSets, err := parser.ParseMetricSelectors(match)
 	if err != nil {
 		return err
 	}
-	ss := q.Select(ctx, false, nil, matchers...)
+
+	var ss storage.SeriesSet
+	if len(matcherSets) > 1 {
+		var sets []storage.SeriesSet
+		for _, mset := range matcherSets {
+			sets = append(sets, q.Select(ctx, true, nil, mset...))
+		}
+		ss = storage.NewMergeSeriesSet(sets, storage.ChainedSeriesMerge)
+	} else {
+		ss = q.Select(ctx, false, nil, matcherSets[0]...)
+	}
 
 	for ss.Next() {
 		series := ss.At()
diff --git a/cmd/promtool/tsdb_test.go b/cmd/promtool/tsdb_test.go
index 0f0040cd3dc..aeb51a07e03 100644
--- a/cmd/promtool/tsdb_test.go
+++ b/cmd/promtool/tsdb_test.go
@@ -14,9 +14,18 @@
 package main
 
 import (
+	"bytes"
+	"context"
+	"io"
+	"math"
+	"os"
+	"runtime"
+	"strings"
 	"testing"
 
 	"github.com/stretchr/testify/require"
+
+	"github.com/prometheus/prometheus/promql"
 )
 
 func TestGenerateBucket(t *testing.T) {
@@ -41,3 +50,101 @@ func TestGenerateBucket(t *testing.T) {
 		require.Equal(t, tc.step, step)
 	}
 }
+
+// getDumpedSamples dumps samples and returns them.
+func getDumpedSamples(t *testing.T, path string, mint, maxt int64, match []string) string {
+	t.Helper()
+
+	oldStdout := os.Stdout
+	r, w, _ := os.Pipe()
+	os.Stdout = w
+
+	err := dumpSamples(
+		context.Background(),
+		path,
+		mint,
+		maxt,
+		match,
+	)
+	require.NoError(t, err)
+
+	w.Close()
+	os.Stdout = oldStdout
+
+	var buf bytes.Buffer
+	io.Copy(&buf, r)
+	return buf.String()
+}
+
+func TestTSDBDump(t *testing.T) {
+	storage := promql.LoadedStorage(t, `
+		load 1m
+			metric{foo="bar", baz="abc"} 1 2 3 4 5
+			heavy_metric{foo="bar"} 5 4 3 2 1
+			heavy_metric{foo="foo"} 5 4 3 2 1
+	`)
+
+	tests := []struct {
+		name         string
+		mint         int64
+		maxt         int64
+		match        []string
+		expectedDump string
+	}{
+		{
+			name:         "default match",
+			mint:         math.MinInt64,
+			maxt:         math.MaxInt64,
+			match:        []string{"{__name__=~'(?s:.*)'}"},
+			expectedDump: "testdata/dump-test-1.prom",
+		},
+		{
+			name:         "same matcher twice",
+			mint:         math.MinInt64,
+			maxt:         math.MaxInt64,
+			match:        []string{"{foo=~'.+'}", "{foo=~'.+'}"},
+			expectedDump: "testdata/dump-test-1.prom",
+		},
+		{
+			name:         "no duplication",
+			mint:         math.MinInt64,
+			maxt:         math.MaxInt64,
+			match:        []string{"{__name__=~'(?s:.*)'}", "{baz='abc'}"},
+			expectedDump: "testdata/dump-test-1.prom",
+		},
+		{
+			name:         "well merged",
+			mint:         math.MinInt64,
+			maxt:         math.MaxInt64,
+			match:        []string{"{__name__='heavy_metric'}", "{baz='abc'}"},
+			expectedDump: "testdata/dump-test-1.prom",
+		},
+		{
+			name:         "multi matchers",
+			mint:         math.MinInt64,
+			maxt:         math.MaxInt64,
+			match:        []string{"{__name__='heavy_metric',foo='foo'}", "{__name__='metric'}"},
+			expectedDump: "testdata/dump-test-2.prom",
+		},
+		{
+			name:         "with reduced mint and maxt",
+			mint:         int64(60000),
+			maxt:         int64(120000),
+			match:        []string{"{__name__='metric'}"},
+			expectedDump: "testdata/dump-test-3.prom",
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			dumpedMetrics := getDumpedSamples(t, storage.Dir(), tt.mint, tt.maxt, tt.match)
+			expectedMetrics, err := os.ReadFile(tt.expectedDump)
+			require.NoError(t, err)
+			if strings.Contains(runtime.GOOS, "windows") {
+				// We use "/n" while dumping on windows as well.
+				expectedMetrics = bytes.ReplaceAll(expectedMetrics, []byte("\r\n"), []byte("\n"))
+			}
+			// even though in case of one matcher samples are not sorted, the order in the cases above should stay the same.
+			require.Equal(t, string(expectedMetrics), dumpedMetrics)
+		})
+	}
+}
diff --git a/docs/command-line/promtool.md b/docs/command-line/promtool.md
index e9ee7597e6f..ba948685b6d 100644
--- a/docs/command-line/promtool.md
+++ b/docs/command-line/promtool.md
@@ -567,7 +567,7 @@ Dump samples from a TSDB.
 | --- | --- | --- |
 | <code class="text-nowrap">--min-time</code> | Minimum timestamp to dump. | `-9223372036854775808` |
 | <code class="text-nowrap">--max-time</code> | Maximum timestamp to dump. | `9223372036854775807` |
-| <code class="text-nowrap">--match</code> | Series selector. | `{__name__=~'(?s:.*)'}` |
+| <code class="text-nowrap">--match</code> | Series selector. Can be specified multiple times. | `{__name__=~'(?s:.*)'}` |
 
 
 
diff --git a/promql/parser/parse.go b/promql/parser/parse.go
index 122286c5517..c2a42ed153a 100644
--- a/promql/parser/parse.go
+++ b/promql/parser/parse.go
@@ -208,6 +208,20 @@ func ParseMetricSelector(input string) (m []*labels.Matcher, err error) {
 	return m, err
 }
 
+// ParseMetricSelectors parses a list of provided textual metric selectors into lists of
+// label matchers.
+func ParseMetricSelectors(matchers []string) (m [][]*labels.Matcher, err error) {
+	var matcherSets [][]*labels.Matcher
+	for _, s := range matchers {
+		matchers, err := ParseMetricSelector(s)
+		if err != nil {
+			return nil, err
+		}
+		matcherSets = append(matcherSets, matchers)
+	}
+	return matcherSets, nil
+}
+
 // SequenceValue is an omittable value in a sequence of time series values.
 type SequenceValue struct {
 	Value     float64
diff --git a/web/api/v1/api.go b/web/api/v1/api.go
index dd35d1fe995..d9d4cfd1df8 100644
--- a/web/api/v1/api.go
+++ b/web/api/v1/api.go
@@ -1848,13 +1848,9 @@ func parseDuration(s string) (time.Duration, error) {
 }
 
 func parseMatchersParam(matchers []string) ([][]*labels.Matcher, error) {
-	var matcherSets [][]*labels.Matcher
-	for _, s := range matchers {
-		matchers, err := parser.ParseMetricSelector(s)
-		if err != nil {
-			return nil, err
-		}
-		matcherSets = append(matcherSets, matchers)
+	matcherSets, err := parser.ParseMetricSelectors(matchers)
+	if err != nil {
+		return nil, err
 	}
 
 OUTER:
diff --git a/web/federate.go b/web/federate.go
index 2e7bac21d91..22384a696c7 100644
--- a/web/federate.go
+++ b/web/federate.go
@@ -65,14 +65,10 @@ func (h *Handler) federation(w http.ResponseWriter, req *http.Request) {
 		return
 	}
 
-	var matcherSets [][]*labels.Matcher
-	for _, s := range req.Form["match[]"] {
-		matchers, err := parser.ParseMetricSelector(s)
-		if err != nil {
-			http.Error(w, err.Error(), http.StatusBadRequest)
-			return
-		}
-		matcherSets = append(matcherSets, matchers)
+	matcherSets, err := parser.ParseMetricSelectors(req.Form["match[]"])
+	if err != nil {
+		http.Error(w, err.Error(), http.StatusBadRequest)
+		return
 	}
 
 	var (

From 09d351668f208feda2c56aba9f3e4b81d7480c0f Mon Sep 17 00:00:00 2001
From: bwplotka <bwplotka@gmail.com>
Date: Mon, 15 Jan 2024 11:42:09 +0000
Subject: [PATCH 082/132] Fixed changelog

Signed-off-by: bwplotka <bwplotka@gmail.com>
---
 CHANGELOG.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 116a2594bba..abe4b556c50 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # Changelog
 
+## unreleased
+
+* [ENHANCEMENT] TSDB: Make the wlog watcher read segments synchronously when not tailing. #13224
+* [BUGFIX] Agent: Participate in notify calls. #13223
+
 ## 2.49.0 / 2024-01-15
 
 * [FEATURE] Promtool: Add `--run` flag promtool test rules command. #12206

From b695e069b812bdcb56af1206b56de26c56d0f188 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Giedrius=20Statkevi=C4=8Dius?=
 <giedrius.statkevicius@vinted.com>
Date: Mon, 15 Jan 2024 17:42:40 +0200
Subject: [PATCH 083/132] tsdb/main: wire "EnableOverlappingCompaction" to
 tsdb.Options (#13398)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This added the https://github.com/prometheus/prometheus/pull/13393
"EnableOverlappingCompaction" parameter to the compactor code but not to
the tsdb.Options. I forgot about that. Add it to `tsdb.Options` too and
set it to `true` in Prometheus.

Copy/paste the description from
https://github.com/prometheus/prometheus/pull/13393#issuecomment-1891787986

Signed-off-by: Giedrius Statkevičius <giedrius.statkevicius@vinted.com>
---
 cmd/prometheus/main.go |  1 +
 tsdb/db.go             | 40 ++++++++++++++++++++++++++--------------
 2 files changed, 27 insertions(+), 14 deletions(-)

diff --git a/cmd/prometheus/main.go b/cmd/prometheus/main.go
index a8bd2f2b33b..95a581a74c8 100644
--- a/cmd/prometheus/main.go
+++ b/cmd/prometheus/main.go
@@ -1646,6 +1646,7 @@ func (opts tsdbOptions) ToTSDBOptions() tsdb.Options {
 		EnableMemorySnapshotOnShutdown: opts.EnableMemorySnapshotOnShutdown,
 		EnableNativeHistograms:         opts.EnableNativeHistograms,
 		OutOfOrderTimeWindow:           opts.OutOfOrderTimeWindow,
+		EnableOverlappingCompaction:    true,
 	}
 }
 
diff --git a/tsdb/db.go b/tsdb/db.go
index bdeb3faee83..2436fab2ace 100644
--- a/tsdb/db.go
+++ b/tsdb/db.go
@@ -70,19 +70,20 @@ var ErrNotReady = errors.New("TSDB not ready")
 // millisecond precision timestamps.
 func DefaultOptions() *Options {
 	return &Options{
-		WALSegmentSize:            wlog.DefaultSegmentSize,
-		MaxBlockChunkSegmentSize:  chunks.DefaultChunkSegmentSize,
-		RetentionDuration:         int64(15 * 24 * time.Hour / time.Millisecond),
-		MinBlockDuration:          DefaultBlockDuration,
-		MaxBlockDuration:          DefaultBlockDuration,
-		NoLockfile:                false,
-		SamplesPerChunk:           DefaultSamplesPerChunk,
-		WALCompression:            wlog.CompressionNone,
-		StripeSize:                DefaultStripeSize,
-		HeadChunksWriteBufferSize: chunks.DefaultWriteBufferSize,
-		IsolationDisabled:         defaultIsolationDisabled,
-		HeadChunksWriteQueueSize:  chunks.DefaultWriteQueueSize,
-		OutOfOrderCapMax:          DefaultOutOfOrderCapMax,
+		WALSegmentSize:              wlog.DefaultSegmentSize,
+		MaxBlockChunkSegmentSize:    chunks.DefaultChunkSegmentSize,
+		RetentionDuration:           int64(15 * 24 * time.Hour / time.Millisecond),
+		MinBlockDuration:            DefaultBlockDuration,
+		MaxBlockDuration:            DefaultBlockDuration,
+		NoLockfile:                  false,
+		SamplesPerChunk:             DefaultSamplesPerChunk,
+		WALCompression:              wlog.CompressionNone,
+		StripeSize:                  DefaultStripeSize,
+		HeadChunksWriteBufferSize:   chunks.DefaultWriteBufferSize,
+		IsolationDisabled:           defaultIsolationDisabled,
+		HeadChunksWriteQueueSize:    chunks.DefaultWriteQueueSize,
+		OutOfOrderCapMax:            DefaultOutOfOrderCapMax,
+		EnableOverlappingCompaction: true,
 	}
 }
 
@@ -177,6 +178,14 @@ type Options struct {
 	// OutOfOrderCapMax is maximum capacity for OOO chunks (in samples).
 	// If it is <=0, the default value is assumed.
 	OutOfOrderCapMax int64
+
+	// Compaction of overlapping blocks are allowed if EnableOverlappingCompaction is true.
+	// This is an optional flag for overlapping blocks.
+	// The reason why this flag exists is because there are various users of the TSDB
+	// that do not want vertical compaction happening on ingest time. Instead,
+	// they'd rather keep overlapping blocks and let another component do the overlapping compaction later.
+	// For Prometheus, this will always be true.
+	EnableOverlappingCompaction bool
 }
 
 type BlocksToDeleteFunc func(blocks []*Block) map[ulid.ULID]struct{}
@@ -816,7 +825,10 @@ func open(dir string, l log.Logger, r prometheus.Registerer, opts *Options, rngs
 	}
 
 	ctx, cancel := context.WithCancel(context.Background())
-	db.compactor, err = NewLeveledCompactorWithChunkSize(ctx, r, l, rngs, db.chunkPool, opts.MaxBlockChunkSegmentSize, nil)
+	db.compactor, err = NewLeveledCompactorWithOptions(ctx, r, l, rngs, db.chunkPool, LeveledCompactorOptions{
+		MaxBlockChunkSegmentSize:    opts.MaxBlockChunkSegmentSize,
+		EnableOverlappingCompaction: opts.EnableOverlappingCompaction,
+	})
 	if err != nil {
 		cancel()
 		return nil, fmt.Errorf("create leveled compactor: %w", err)

From 72a8f1084b29a826367049fe51362f00c86d8849 Mon Sep 17 00:00:00 2001
From: zenador <zenador@users.noreply.github.com>
Date: Tue, 16 Jan 2024 16:54:16 +0800
Subject: [PATCH 084/132] Restore more efficient version of
 NewPossibleNonCounterInfo annotation (#13022)

Restore more efficient version of NewPossibleNonCounterInfo annotation

Signed-off-by: Jeanette Tan <jeanette.tan@grafana.com>

---------

Signed-off-by: Jeanette Tan <jeanette.tan@grafana.com>
---
 promql/engine.go | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/promql/engine.go b/promql/engine.go
index 2ea37dae605..68d0962cd35 100644
--- a/promql/engine.go
+++ b/promql/engine.go
@@ -24,6 +24,7 @@ import (
 	"runtime"
 	"sort"
 	"strconv"
+	"strings"
 	"sync"
 	"time"
 
@@ -1543,6 +1544,18 @@ func (ev *evaluator) eval(expr parser.Expr) (parser.Value, annotations.Annotatio
 				}
 			}
 			ev.samplesStats.UpdatePeak(ev.currentSamples)
+
+			if e.Func.Name == "rate" || e.Func.Name == "increase" {
+				samples := inMatrix[0]
+				metricName := samples.Metric.Get(labels.MetricName)
+				if metricName != "" && len(samples.Floats) > 0 &&
+					!strings.HasSuffix(metricName, "_total") &&
+					!strings.HasSuffix(metricName, "_sum") &&
+					!strings.HasSuffix(metricName, "_count") &&
+					!strings.HasSuffix(metricName, "_bucket") {
+					warnings.Add(annotations.NewPossibleNonCounterInfo(metricName, e.Args[0].PositionRange()))
+				}
+			}
 		}
 		ev.samplesStats.UpdatePeak(ev.currentSamples)
 

From 7852a7c5162a7ebd21a8766e3a75d7de1ac1cf3c Mon Sep 17 00:00:00 2001
From: Marco Pracucci <marco@pracucci.com>
Date: Tue, 16 Jan 2024 12:00:53 +0100
Subject: [PATCH 085/132] Fix regressions introduced by #13242

Signed-off-by: Marco Pracucci <marco@pracucci.com>
---
 tsdb/compact.go | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/tsdb/compact.go b/tsdb/compact.go
index 511c518d98a..efe3306c7ca 100644
--- a/tsdb/compact.go
+++ b/tsdb/compact.go
@@ -188,12 +188,12 @@ func NewLeveledCompactorWithOptions(ctx context.Context, r prometheus.Registerer
 	if mergeFunc == nil {
 		mergeFunc = storage.NewCompactingChunkSeriesMerger(storage.ChainedSeriesMerge)
 	}
-	var maxBlockChunkSegmentSize int64
-	if opts.MaxBlockChunkSegmentSize == 0 {
+	maxBlockChunkSegmentSize := opts.MaxBlockChunkSegmentSize
+	if maxBlockChunkSegmentSize == 0 {
 		maxBlockChunkSegmentSize = chunks.DefaultChunkSegmentSize
 	}
-	var pe index.PostingsEncoder
-	if opts.PE == nil {
+	pe := opts.PE
+	if pe == nil {
 		pe = index.EncodePostingsRaw
 	}
 	return &LeveledCompactor{

From 1fa131ee033b7bced52d818c67351a8021765921 Mon Sep 17 00:00:00 2001
From: tyltr <tylitianrui@126.com>
Date: Tue, 16 Jan 2024 19:06:58 +0800
Subject: [PATCH 086/132] fix slice copy in 1.20 (#13389)

The slices package is added to the standard library in Go 1.21;
we need to import from the exp area to maintain compatibility with Go 1.20.

Signed-off-by: tyltr <tylitianrui@126.com>
---
 model/histogram/generic_test.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/model/histogram/generic_test.go b/model/histogram/generic_test.go
index b4d6585a8b1..6a22b6f1930 100644
--- a/model/histogram/generic_test.go
+++ b/model/histogram/generic_test.go
@@ -15,10 +15,10 @@ package histogram
 
 import (
 	"math"
-	"slices"
 	"testing"
 
 	"github.com/stretchr/testify/require"
+	"golang.org/x/exp/slices"
 )
 
 func TestGetBound(t *testing.T) {

From 73bbeaafbf7cd0d7dfb0ac80a49a6f5c3685f224 Mon Sep 17 00:00:00 2001
From: Ted Robertson <10043369+tredondo@users.noreply.github.com>
Date: Tue, 16 Jan 2024 06:09:51 -0500
Subject: [PATCH 087/132] Docs: Query Basics: link to rate (#10538)

Co-authored-by: Julien Pivotto <roidelapluie@o11y.eu>
---
 docs/querying/basics.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/querying/basics.md b/docs/querying/basics.md
index fa0d44a69be..dac5037857b 100644
--- a/docs/querying/basics.md
+++ b/docs/querying/basics.md
@@ -212,8 +212,8 @@ While the following would be *incorrect*:
 
     sum(http_requests_total{method="GET"}) offset 5m // INVALID.
 
-The same works for range vectors. This returns the 5-minute rate that
-`http_requests_total` had a week ago:
+The same works for range vectors. This returns the 5-minute [rate](./functions.md#rate)
+that `http_requests_total` had a week ago:
 
     rate(http_requests_total[5m] offset 1w)
 

From 2d01e566954067ac902e83eb4daca7340a492825 Mon Sep 17 00:00:00 2001
From: machine424 <ayoubmrini424@gmail.com>
Date: Tue, 16 Jan 2024 12:06:21 +0100
Subject: [PATCH 088/132] chore(kubernetes): check preconditions earlier and
 avoid unnecessary checks or iterations

Signed-off-by: machine424 <ayoubmrini424@gmail.com>
---
 discovery/kubernetes/endpoints.go     | 30 ++++++++++++++-------------
 discovery/kubernetes/endpointslice.go | 30 ++++++++++++++-------------
 2 files changed, 32 insertions(+), 28 deletions(-)

diff --git a/discovery/kubernetes/endpoints.go b/discovery/kubernetes/endpoints.go
index 512d775523b..d8c9689cad9 100644
--- a/discovery/kubernetes/endpoints.go
+++ b/discovery/kubernetes/endpoints.go
@@ -369,6 +369,11 @@ func (e *Endpoints) buildEndpoints(eps *apiv1.Endpoints) *targetgroup.Group {
 	// For all seen pods, check all container ports. If they were not covered
 	// by one of the service endpoints, generate targets for them.
 	for _, pe := range seenPods {
+		// PodIP can be empty when a pod is starting or has been evicted.
+		if len(pe.pod.Status.PodIP) == 0 {
+			continue
+		}
+
 		for _, c := range pe.pod.Spec.Containers {
 			for _, cport := range c.Ports {
 				hasSeenPort := func() bool {
@@ -383,21 +388,18 @@ func (e *Endpoints) buildEndpoints(eps *apiv1.Endpoints) *targetgroup.Group {
 					continue
 				}
 
-				// PodIP can be empty when a pod is starting or has been evicted.
-				if len(pe.pod.Status.PodIP) != 0 {
-					a := net.JoinHostPort(pe.pod.Status.PodIP, strconv.FormatUint(uint64(cport.ContainerPort), 10))
-					ports := strconv.FormatUint(uint64(cport.ContainerPort), 10)
-
-					target := model.LabelSet{
-						model.AddressLabel:            lv(a),
-						podContainerNameLabel:         lv(c.Name),
-						podContainerImageLabel:        lv(c.Image),
-						podContainerPortNameLabel:     lv(cport.Name),
-						podContainerPortNumberLabel:   lv(ports),
-						podContainerPortProtocolLabel: lv(string(cport.Protocol)),
-					}
-					tg.Targets = append(tg.Targets, target.Merge(podLabels(pe.pod)))
+				a := net.JoinHostPort(pe.pod.Status.PodIP, strconv.FormatUint(uint64(cport.ContainerPort), 10))
+				ports := strconv.FormatUint(uint64(cport.ContainerPort), 10)
+
+				target := model.LabelSet{
+					model.AddressLabel:            lv(a),
+					podContainerNameLabel:         lv(c.Name),
+					podContainerImageLabel:        lv(c.Image),
+					podContainerPortNameLabel:     lv(cport.Name),
+					podContainerPortNumberLabel:   lv(ports),
+					podContainerPortProtocolLabel: lv(string(cport.Protocol)),
 				}
+				tg.Targets = append(tg.Targets, target.Merge(podLabels(pe.pod)))
 			}
 		}
 	}
diff --git a/discovery/kubernetes/endpointslice.go b/discovery/kubernetes/endpointslice.go
index 21095df4af1..f977ce26268 100644
--- a/discovery/kubernetes/endpointslice.go
+++ b/discovery/kubernetes/endpointslice.go
@@ -405,6 +405,11 @@ func (e *EndpointSlice) buildEndpointSlice(eps endpointSliceAdaptor) *targetgrou
 	// For all seen pods, check all container ports. If they were not covered
 	// by one of the service endpoints, generate targets for them.
 	for _, pe := range seenPods {
+		// PodIP can be empty when a pod is starting or has been evicted.
+		if len(pe.pod.Status.PodIP) == 0 {
+			continue
+		}
+
 		for _, c := range pe.pod.Spec.Containers {
 			for _, cport := range c.Ports {
 				hasSeenPort := func() bool {
@@ -422,21 +427,18 @@ func (e *EndpointSlice) buildEndpointSlice(eps endpointSliceAdaptor) *targetgrou
 					continue
 				}
 
-				// PodIP can be empty when a pod is starting or has been evicted.
-				if len(pe.pod.Status.PodIP) != 0 {
-					a := net.JoinHostPort(pe.pod.Status.PodIP, strconv.FormatUint(uint64(cport.ContainerPort), 10))
-					ports := strconv.FormatUint(uint64(cport.ContainerPort), 10)
-
-					target := model.LabelSet{
-						model.AddressLabel:            lv(a),
-						podContainerNameLabel:         lv(c.Name),
-						podContainerImageLabel:        lv(c.Image),
-						podContainerPortNameLabel:     lv(cport.Name),
-						podContainerPortNumberLabel:   lv(ports),
-						podContainerPortProtocolLabel: lv(string(cport.Protocol)),
-					}
-					tg.Targets = append(tg.Targets, target.Merge(podLabels(pe.pod)))
+				a := net.JoinHostPort(pe.pod.Status.PodIP, strconv.FormatUint(uint64(cport.ContainerPort), 10))
+				ports := strconv.FormatUint(uint64(cport.ContainerPort), 10)
+
+				target := model.LabelSet{
+					model.AddressLabel:            lv(a),
+					podContainerNameLabel:         lv(c.Name),
+					podContainerImageLabel:        lv(c.Image),
+					podContainerPortNameLabel:     lv(cport.Name),
+					podContainerPortNumberLabel:   lv(ports),
+					podContainerPortProtocolLabel: lv(string(cport.Protocol)),
 				}
+				tg.Targets = append(tg.Targets, target.Merge(podLabels(pe.pod)))
 			}
 		}
 	}

From cf9e93403651e792a858f4134dd60cc3490f54e0 Mon Sep 17 00:00:00 2001
From: Ted Robertson <10043369+tredondo@users.noreply.github.com>
Date: Tue, 16 Jan 2024 06:13:52 -0500
Subject: [PATCH 089/132] Examples: link to `rate` for new users (#10535)

* Examples: link to `rate` for new users

Signed-off-by: Ted Robertson 10043369+tredondo@users.noreply.github.com
Co-authored-by: Bryan Boreham <bjboreham@gmail.com>
---
 docs/querying/examples.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/querying/examples.md b/docs/querying/examples.md
index a4fd373bf50..957c2f5f989 100644
--- a/docs/querying/examples.md
+++ b/docs/querying/examples.md
@@ -39,7 +39,7 @@ To select all HTTP status codes except 4xx ones, you could run:
 
 ## Subquery
 
-Return the 5-minute rate of the `http_requests_total` metric for the past 30 minutes, with a resolution of 1 minute.
+Return the 5-minute [rate](./functions.md#rate) of the `http_requests_total` metric for the past 30 minutes, with a resolution of 1 minute.
 
     rate(http_requests_total[5m])[30m:1m]
 

From a6b35ff304ca22c8676d8da244eb837f04f64169 Mon Sep 17 00:00:00 2001
From: Ivan Babrou <github@ivan.computer>
Date: Tue, 16 Jan 2024 16:34:09 -0800
Subject: [PATCH 090/132] promql: use natural sort in sort_by_label and
 sort_by_label_desc (#13411)

These functions are intended for humans, as robots can already sort the results
however they please. Humans like things sorted "naturally":

* https://blog.codinghorror.com/sorting-for-humans-natural-sort-order/

A similar thing has been done to Grafana, which is also used by humans:

* https://github.com/grafana/grafana/pull/78024
* https://github.com/grafana/grafana/pull/78494

Signed-off-by: Ivan Babrou <github@ivan.computer>
---
 docs/querying/functions.md     |  4 ++++
 go.mod                         |  1 +
 go.sum                         |  2 ++
 promql/functions.go            | 29 ++++++++++++++--------------
 promql/testdata/functions.test | 35 ++++++++++++++++++++++++++++++++++
 5 files changed, 56 insertions(+), 15 deletions(-)

diff --git a/docs/querying/functions.md b/docs/querying/functions.md
index dda88fccd15..607e16e8280 100644
--- a/docs/querying/functions.md
+++ b/docs/querying/functions.md
@@ -594,6 +594,8 @@ Same as `sort`, but sorts in descending order.
 
 Please note that the sort by label functions only affect the results of instant queries, as range query results always have a fixed output ordering.
 
+This function uses [natural sort order](https://en.wikipedia.org/wiki/Natural_sort_order).
+
 ## `sort_by_label_desc()`
 
 **This function has to be enabled via the [feature flag](../feature_flags/) `--enable-feature=promql-experimental-functions`.**
@@ -602,6 +604,8 @@ Same as `sort_by_label`, but sorts in descending order.
 
 Please note that the sort by label functions only affect the results of instant queries, as range query results always have a fixed output ordering.
 
+This function uses [natural sort order](https://en.wikipedia.org/wiki/Natural_sort_order).
+
 ## `sqrt()`
 
 `sqrt(v instant-vector)` calculates the square root of all elements in `v`.
diff --git a/go.mod b/go.mod
index 428b6edecf5..e7598db4293 100644
--- a/go.mod
+++ b/go.mod
@@ -19,6 +19,7 @@ require (
 	github.com/edsrzf/mmap-go v1.1.0
 	github.com/envoyproxy/go-control-plane v0.11.1
 	github.com/envoyproxy/protoc-gen-validate v1.0.2
+	github.com/facette/natsort v0.0.0-20181210072756-2cd4dd1e2dcb
 	github.com/fsnotify/fsnotify v1.7.0
 	github.com/go-kit/log v0.2.1
 	github.com/go-logfmt/logfmt v0.6.0
diff --git a/go.sum b/go.sum
index 8ce4efb5c51..fa21d23e547 100644
--- a/go.sum
+++ b/go.sum
@@ -166,6 +166,8 @@ github.com/envoyproxy/protoc-gen-validate v1.0.2 h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBF
 github.com/envoyproxy/protoc-gen-validate v1.0.2/go.mod h1:GpiZQP3dDbg4JouG/NNS7QWXpgx6x8QiMKdmN72jogE=
 github.com/evanphx/json-patch v5.6.0+incompatible h1:jBYDEEiFBPxA0v50tFdvOzQQTCvpL6mnFh5mB2/l16U=
 github.com/evanphx/json-patch v5.6.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
+github.com/facette/natsort v0.0.0-20181210072756-2cd4dd1e2dcb h1:IT4JYU7k4ikYg1SCxNI1/Tieq/NFvh6dzLdgi7eu0tM=
+github.com/facette/natsort v0.0.0-20181210072756-2cd4dd1e2dcb/go.mod h1:bH6Xx7IW64qjjJq8M2u4dxNaBiDfKK+z/3eGDpXEQhc=
 github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4=
 github.com/fatih/color v1.9.0/go.mod h1:eQcE1qtQxscV5RaZvpXrrb8Drkc3/DdQ+uUYCNjL+zU=
 github.com/fatih/color v1.13.0/go.mod h1:kLAiJbzzSOZDVNGyDpeOxJ47H46qBXwg5ILebYFFOfk=
diff --git a/promql/functions.go b/promql/functions.go
index 407a11b50aa..cb3be0aef28 100644
--- a/promql/functions.go
+++ b/promql/functions.go
@@ -21,6 +21,7 @@ import (
 	"strings"
 	"time"
 
+	"github.com/facette/natsort"
 	"github.com/grafana/regexp"
 	"github.com/prometheus/common/model"
 	"golang.org/x/exp/slices"
@@ -380,15 +381,16 @@ func funcSortByLabel(vals []parser.Value, args parser.Expressions, enh *EvalNode
 		for _, label := range labels {
 			lv1 := a.Metric.Get(label)
 			lv2 := b.Metric.Get(label)
-			// 0 if a == b, -1 if a < b, and +1 if a > b.
-			switch strings.Compare(lv1, lv2) {
-			case -1:
-				return -1
-			case +1:
-				return +1
-			default:
+
+			if lv1 == lv2 {
 				continue
 			}
+
+			if natsort.Compare(lv1, lv2) {
+				return -1
+			}
+
+			return +1
 		}
 
 		return 0
@@ -409,19 +411,16 @@ func funcSortByLabelDesc(vals []parser.Value, args parser.Expressions, enh *Eval
 		for _, label := range labels {
 			lv1 := a.Metric.Get(label)
 			lv2 := b.Metric.Get(label)
-			// If label values are the same, continue to the next label
+
 			if lv1 == lv2 {
 				continue
 			}
-			// 0 if a == b, -1 if a < b, and +1 if a > b.
-			switch strings.Compare(lv1, lv2) {
-			case -1:
+
+			if natsort.Compare(lv1, lv2) {
 				return +1
-			case +1:
-				return -1
-			default:
-				continue
 			}
+
+			return -1
 		}
 
 		return 0
diff --git a/promql/testdata/functions.test b/promql/testdata/functions.test
index b4547886a7e..c40a6272bcf 100644
--- a/promql/testdata/functions.test
+++ b/promql/testdata/functions.test
@@ -482,6 +482,19 @@ load 5m
 	http_requests{job="app-server", instance="0", group="canary"}		0+70x10
 	http_requests{job="app-server", instance="1", group="canary"}		0+80x10
 	http_requests{job="api-server", instance="2", group="production"}	0+10x10
+	cpu_time_total{job="cpu", cpu="0"} 0+10x10
+	cpu_time_total{job="cpu", cpu="1"} 0+10x10
+	cpu_time_total{job="cpu", cpu="2"} 0+10x10
+	cpu_time_total{job="cpu", cpu="3"} 0+10x10
+	cpu_time_total{job="cpu", cpu="10"} 0+10x10
+	cpu_time_total{job="cpu", cpu="11"} 0+10x10
+	cpu_time_total{job="cpu", cpu="12"} 0+10x10
+	cpu_time_total{job="cpu", cpu="20"} 0+10x10
+	cpu_time_total{job="cpu", cpu="21"} 0+10x10
+	cpu_time_total{job="cpu", cpu="100"} 0+10x10
+	node_uname_info{job="node_exporter", instance="4m600", release="1.2.3"} 0+10x10
+	node_uname_info{job="node_exporter", instance="4m5", release="1.11.3"} 0+10x10
+	node_uname_info{job="node_exporter", instance="4m1000", release="1.111.3"} 0+10x10
 
 eval_ordered instant at 50m sort_by_label(http_requests, "instance")
 	http_requests{group="production", instance="0", job="api-server"} 100
@@ -579,6 +592,28 @@ eval_ordered instant at 50m sort_by_label_desc(http_requests, "instance", "group
 	http_requests{group="canary", instance="0", job="app-server"} 700
 	http_requests{group="canary", instance="0", job="api-server"} 300
 
+eval_ordered instant at 50m sort_by_label(cpu_time_total, "cpu")
+	cpu_time_total{job="cpu", cpu="0"} 100
+	cpu_time_total{job="cpu", cpu="1"} 100
+	cpu_time_total{job="cpu", cpu="2"} 100
+	cpu_time_total{job="cpu", cpu="3"} 100
+	cpu_time_total{job="cpu", cpu="10"} 100
+	cpu_time_total{job="cpu", cpu="11"} 100
+	cpu_time_total{job="cpu", cpu="12"} 100
+	cpu_time_total{job="cpu", cpu="20"} 100
+	cpu_time_total{job="cpu", cpu="21"} 100
+	cpu_time_total{job="cpu", cpu="100"} 100
+
+eval_ordered instant at 50m sort_by_label(node_uname_info, "instance")
+	node_uname_info{job="node_exporter", instance="4m5", release="1.11.3"} 100
+	node_uname_info{job="node_exporter", instance="4m600", release="1.2.3"} 100
+	node_uname_info{job="node_exporter", instance="4m1000", release="1.111.3"} 100
+
+eval_ordered instant at 50m sort_by_label(node_uname_info, "release")
+	node_uname_info{job="node_exporter", instance="4m600", release="1.2.3"} 100
+	node_uname_info{job="node_exporter", instance="4m5", release="1.11.3"} 100
+	node_uname_info{job="node_exporter", instance="4m1000", release="1.111.3"} 100
+
 # Tests for holt_winters
 clear
 

From 8598150f48e92fc8065e5a9a983a178c66ef0ba0 Mon Sep 17 00:00:00 2001
From: Arve Knudsen <arve.knudsen@gmail.com>
Date: Wed, 17 Jan 2024 12:51:56 +0100
Subject: [PATCH 091/132] TestLabelValuesWithMatchers: Add test case

Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>
---
 tsdb/block_test.go | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/tsdb/block_test.go b/tsdb/block_test.go
index 7858e6b0c23..c155b4451df 100644
--- a/tsdb/block_test.go
+++ b/tsdb/block_test.go
@@ -235,6 +235,13 @@ func TestLabelValuesWithMatchers(t *testing.T) {
 	require.NoError(t, err)
 	defer func() { require.NoError(t, indexReader.Close()) }()
 
+	var uniqueWithout30s []string
+	for i := 0; i < 100; i++ {
+		if i/10 != 3 {
+			uniqueWithout30s = append(uniqueWithout30s, fmt.Sprintf("value%d", i))
+		}
+	}
+	sort.Strings(uniqueWithout30s)
 	testCases := []struct {
 		name           string
 		labelName      string
@@ -261,6 +268,14 @@ func TestLabelValuesWithMatchers(t *testing.T) {
 			labelName:      "tens",
 			matchers:       []*labels.Matcher{labels.MustNewMatcher(labels.MatchNotEqual, "unique", "")},
 			expectedValues: []string{"value0", "value1", "value2", "value3", "value4", "value5", "value6", "value7", "value8", "value9"},
+		}, {
+			name:      "get unique IDs based on tens not being equal to a certain value, while not empty",
+			labelName: "unique",
+			matchers: []*labels.Matcher{
+				labels.MustNewMatcher(labels.MatchNotEqual, "tens", "value3"),
+				labels.MustNewMatcher(labels.MatchNotEqual, "tens", ""),
+			},
+			expectedValues: uniqueWithout30s,
 		},
 	}
 

From f97fa2736c89947aa91a201f23775a4a47916d65 Mon Sep 17 00:00:00 2001
From: tyltr <tylitianrui@126.com>
Date: Wed, 17 Jan 2024 22:26:32 +0800
Subject: [PATCH 092/132] remove  obsolete build tag

Signed-off-by: tyltr <tylitianrui@126.com>
---
 cmd/prometheus/main_unix_test.go   | 1 -
 config/config_default_test.go      | 1 -
 plugins/generate.go                | 1 -
 promql/fuzz.go                     | 1 -
 promql/fuzz_test.go                | 1 -
 scripts/tools.go                   | 1 -
 tsdb/chunks/head_chunks_other.go   | 1 -
 tsdb/fileutil/dir_unix.go          | 1 -
 tsdb/fileutil/dir_windows.go       | 1 -
 tsdb/fileutil/flock_js.go          | 1 -
 tsdb/fileutil/flock_solaris.go     | 1 -
 tsdb/fileutil/flock_unix.go        | 1 -
 tsdb/fileutil/mmap_386.go          | 1 -
 tsdb/fileutil/mmap_amd64.go        | 1 -
 tsdb/fileutil/mmap_arm64.go        | 1 -
 tsdb/fileutil/mmap_js.go           | 1 -
 tsdb/fileutil/mmap_unix.go         | 1 -
 tsdb/fileutil/preallocate_other.go | 1 -
 tsdb/fileutil/sync.go              | 1 -
 tsdb/fileutil/sync_darwin.go       | 1 -
 tsdb/fileutil/sync_linux.go        | 1 -
 tsdb/goversion/goversion.go        | 1 -
 tsdb/wal_test.go                   | 1 -
 util/runtime/limits_default.go     | 1 -
 util/runtime/limits_windows.go     | 1 -
 util/runtime/statfs.go             | 1 -
 util/runtime/statfs_default.go     | 1 -
 util/runtime/statfs_linux_386.go   | 1 -
 util/runtime/statfs_uint32.go      | 1 -
 util/runtime/uname_default.go      | 1 -
 util/runtime/vmlimits_default.go   | 1 -
 util/runtime/vmlimits_openbsd.go   | 1 -
 web/ui/assets_embed.go             | 1 -
 web/ui/ui.go                       | 1 -
 34 files changed, 34 deletions(-)

diff --git a/cmd/prometheus/main_unix_test.go b/cmd/prometheus/main_unix_test.go
index 7224e25d708..417d062d66a 100644
--- a/cmd/prometheus/main_unix_test.go
+++ b/cmd/prometheus/main_unix_test.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 //
 //go:build !windows
-// +build !windows
 
 package main
 
diff --git a/config/config_default_test.go b/config/config_default_test.go
index f5333f4c883..26623590d96 100644
--- a/config/config_default_test.go
+++ b/config/config_default_test.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build !windows
-// +build !windows
 
 package config
 
diff --git a/plugins/generate.go b/plugins/generate.go
index 32a32d890b6..3db6de4ab03 100644
--- a/plugins/generate.go
+++ b/plugins/generate.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build plugins
-// +build plugins
 
 package main
 
diff --git a/promql/fuzz.go b/promql/fuzz.go
index aff6eb15b20..d2e5925ebc0 100644
--- a/promql/fuzz.go
+++ b/promql/fuzz.go
@@ -13,7 +13,6 @@
 
 // Only build when go-fuzz is in use
 //go:build gofuzz
-// +build gofuzz
 
 package promql
 
diff --git a/promql/fuzz_test.go b/promql/fuzz_test.go
index 08a04d98b66..1f0bbaa662e 100644
--- a/promql/fuzz_test.go
+++ b/promql/fuzz_test.go
@@ -13,7 +13,6 @@
 
 // Only build when go-fuzz is in use
 //go:build gofuzz
-// +build gofuzz
 
 package promql
 
diff --git a/scripts/tools.go b/scripts/tools.go
index 52b46491127..e1dd80232ff 100644
--- a/scripts/tools.go
+++ b/scripts/tools.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build tools
-// +build tools
 
 // Package tools tracks dependencies for tools that are required to generate the protobuf code.
 // See https://github.com/golang/go/issues/25922
diff --git a/tsdb/chunks/head_chunks_other.go b/tsdb/chunks/head_chunks_other.go
index 3d00fddc374..f30c5e55e97 100644
--- a/tsdb/chunks/head_chunks_other.go
+++ b/tsdb/chunks/head_chunks_other.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build !windows
-// +build !windows
 
 package chunks
 
diff --git a/tsdb/fileutil/dir_unix.go b/tsdb/fileutil/dir_unix.go
index db310014ef5..2afb2aeaba0 100644
--- a/tsdb/fileutil/dir_unix.go
+++ b/tsdb/fileutil/dir_unix.go
@@ -13,7 +13,6 @@
 // limitations under the License.
 
 //go:build !windows
-// +build !windows
 
 package fileutil
 
diff --git a/tsdb/fileutil/dir_windows.go b/tsdb/fileutil/dir_windows.go
index f67cc74b31b..307077ebc31 100644
--- a/tsdb/fileutil/dir_windows.go
+++ b/tsdb/fileutil/dir_windows.go
@@ -13,7 +13,6 @@
 // limitations under the License.
 
 //go:build windows
-// +build windows
 
 package fileutil
 
diff --git a/tsdb/fileutil/flock_js.go b/tsdb/fileutil/flock_js.go
index 697d2e54249..6029cdf4d82 100644
--- a/tsdb/fileutil/flock_js.go
+++ b/tsdb/fileutil/flock_js.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build js
-// +build js
 
 package fileutil
 
diff --git a/tsdb/fileutil/flock_solaris.go b/tsdb/fileutil/flock_solaris.go
index 21be384d331..8ca919f3b00 100644
--- a/tsdb/fileutil/flock_solaris.go
+++ b/tsdb/fileutil/flock_solaris.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build solaris
-// +build solaris
 
 package fileutil
 
diff --git a/tsdb/fileutil/flock_unix.go b/tsdb/fileutil/flock_unix.go
index 9637f073bff..25de0ffb22a 100644
--- a/tsdb/fileutil/flock_unix.go
+++ b/tsdb/fileutil/flock_unix.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build darwin || dragonfly || freebsd || linux || netbsd || openbsd
-// +build darwin dragonfly freebsd linux netbsd openbsd
 
 package fileutil
 
diff --git a/tsdb/fileutil/mmap_386.go b/tsdb/fileutil/mmap_386.go
index 591d722d57c..85c0cce0966 100644
--- a/tsdb/fileutil/mmap_386.go
+++ b/tsdb/fileutil/mmap_386.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build windows
-// +build windows
 
 package fileutil
 
diff --git a/tsdb/fileutil/mmap_amd64.go b/tsdb/fileutil/mmap_amd64.go
index 4c9534e93fd..71fc568bd5f 100644
--- a/tsdb/fileutil/mmap_amd64.go
+++ b/tsdb/fileutil/mmap_amd64.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build windows
-// +build windows
 
 package fileutil
 
diff --git a/tsdb/fileutil/mmap_arm64.go b/tsdb/fileutil/mmap_arm64.go
index 4c9534e93fd..71fc568bd5f 100644
--- a/tsdb/fileutil/mmap_arm64.go
+++ b/tsdb/fileutil/mmap_arm64.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build windows
-// +build windows
 
 package fileutil
 
diff --git a/tsdb/fileutil/mmap_js.go b/tsdb/fileutil/mmap_js.go
index 0c666e8bf5a..f29106fc1e0 100644
--- a/tsdb/fileutil/mmap_js.go
+++ b/tsdb/fileutil/mmap_js.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build js
-// +build js
 
 package fileutil
 
diff --git a/tsdb/fileutil/mmap_unix.go b/tsdb/fileutil/mmap_unix.go
index 1fd7f48ff58..3d15e1a8c12 100644
--- a/tsdb/fileutil/mmap_unix.go
+++ b/tsdb/fileutil/mmap_unix.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build !windows && !plan9 && !js
-// +build !windows,!plan9,!js
 
 package fileutil
 
diff --git a/tsdb/fileutil/preallocate_other.go b/tsdb/fileutil/preallocate_other.go
index 2c46dd49075..e7fd937a436 100644
--- a/tsdb/fileutil/preallocate_other.go
+++ b/tsdb/fileutil/preallocate_other.go
@@ -13,7 +13,6 @@
 // limitations under the License.
 
 //go:build !linux && !darwin
-// +build !linux,!darwin
 
 package fileutil
 
diff --git a/tsdb/fileutil/sync.go b/tsdb/fileutil/sync.go
index 5bd18b458c3..e1a4a7fd3db 100644
--- a/tsdb/fileutil/sync.go
+++ b/tsdb/fileutil/sync.go
@@ -13,7 +13,6 @@
 // limitations under the License.
 
 //go:build !linux && !darwin
-// +build !linux,!darwin
 
 package fileutil
 
diff --git a/tsdb/fileutil/sync_darwin.go b/tsdb/fileutil/sync_darwin.go
index 155b9445951..d698b896af8 100644
--- a/tsdb/fileutil/sync_darwin.go
+++ b/tsdb/fileutil/sync_darwin.go
@@ -13,7 +13,6 @@
 // limitations under the License.
 
 //go:build darwin
-// +build darwin
 
 package fileutil
 
diff --git a/tsdb/fileutil/sync_linux.go b/tsdb/fileutil/sync_linux.go
index 1c2091ea381..2b4c620bb0b 100644
--- a/tsdb/fileutil/sync_linux.go
+++ b/tsdb/fileutil/sync_linux.go
@@ -13,7 +13,6 @@
 // limitations under the License.
 
 //go:build linux
-// +build linux
 
 package fileutil
 
diff --git a/tsdb/goversion/goversion.go b/tsdb/goversion/goversion.go
index 02da2639d6c..ec23d25f2e9 100644
--- a/tsdb/goversion/goversion.go
+++ b/tsdb/goversion/goversion.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build go1.12
-// +build go1.12
 
 // Package goversion enforces the go version supported by the tsdb module.
 package goversion
diff --git a/tsdb/wal_test.go b/tsdb/wal_test.go
index 964763d7f16..9004f5093f3 100644
--- a/tsdb/wal_test.go
+++ b/tsdb/wal_test.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build !windows
-// +build !windows
 
 package tsdb
 
diff --git a/util/runtime/limits_default.go b/util/runtime/limits_default.go
index 40af5f14da5..0126adb1a84 100644
--- a/util/runtime/limits_default.go
+++ b/util/runtime/limits_default.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build !windows
-// +build !windows
 
 package runtime
 
diff --git a/util/runtime/limits_windows.go b/util/runtime/limits_windows.go
index ce514949eeb..ce82d31e6da 100644
--- a/util/runtime/limits_windows.go
+++ b/util/runtime/limits_windows.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build windows
-// +build windows
 
 package runtime
 
diff --git a/util/runtime/statfs.go b/util/runtime/statfs.go
index 2e5a624b619..66bedb5ea1e 100644
--- a/util/runtime/statfs.go
+++ b/util/runtime/statfs.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build openbsd || windows || netbsd || solaris
-// +build openbsd windows netbsd solaris
 
 package runtime
 
diff --git a/util/runtime/statfs_default.go b/util/runtime/statfs_default.go
index b6f837c478d..8d283c1e445 100644
--- a/util/runtime/statfs_default.go
+++ b/util/runtime/statfs_default.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build !windows && !openbsd && !netbsd && !solaris && !386
-// +build !windows,!openbsd,!netbsd,!solaris,!386
 
 package runtime
 
diff --git a/util/runtime/statfs_linux_386.go b/util/runtime/statfs_linux_386.go
index 7494a0adf5a..a003b2effe1 100644
--- a/util/runtime/statfs_linux_386.go
+++ b/util/runtime/statfs_linux_386.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build linux && 386
-// +build linux,386
 
 package runtime
 
diff --git a/util/runtime/statfs_uint32.go b/util/runtime/statfs_uint32.go
index 72d670a3967..fbf994ea63d 100644
--- a/util/runtime/statfs_uint32.go
+++ b/util/runtime/statfs_uint32.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build (386 && darwin) || (386 && freebsd)
-// +build 386,darwin 386,freebsd
 
 package runtime
 
diff --git a/util/runtime/uname_default.go b/util/runtime/uname_default.go
index 16133712145..0052dbab472 100644
--- a/util/runtime/uname_default.go
+++ b/util/runtime/uname_default.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build !linux
-// +build !linux
 
 package runtime
 
diff --git a/util/runtime/vmlimits_default.go b/util/runtime/vmlimits_default.go
index bf35b48fe08..aef43410610 100644
--- a/util/runtime/vmlimits_default.go
+++ b/util/runtime/vmlimits_default.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build !windows && !openbsd
-// +build !windows,!openbsd
 
 package runtime
 
diff --git a/util/runtime/vmlimits_openbsd.go b/util/runtime/vmlimits_openbsd.go
index e33ab48023e..b40f065883e 100644
--- a/util/runtime/vmlimits_openbsd.go
+++ b/util/runtime/vmlimits_openbsd.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build openbsd
-// +build openbsd
 
 package runtime
 
diff --git a/web/ui/assets_embed.go b/web/ui/assets_embed.go
index f10d5c0c23e..a5f8f5ddfa8 100644
--- a/web/ui/assets_embed.go
+++ b/web/ui/assets_embed.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build builtinassets
-// +build builtinassets
 
 package ui
 
diff --git a/web/ui/ui.go b/web/ui/ui.go
index 99ae34e5d23..2585951d4d5 100644
--- a/web/ui/ui.go
+++ b/web/ui/ui.go
@@ -12,7 +12,6 @@
 // limitations under the License.
 
 //go:build !builtinassets
-// +build !builtinassets
 
 package ui
 

From c0a66e5540d949fa7a739eac8261478b5424458a Mon Sep 17 00:00:00 2001
From: Israel Blancas <iblancasa@gmail.com>
Date: Wed, 17 Jan 2024 16:43:19 +0100
Subject: [PATCH 093/132] Upgrade some golang dependencies for resty 2.11

Signed-off-by: Israel Blancas <iblancasa@gmail.com>
---
 go.mod | 12 ++++++------
 go.sum | 24 ++++++++++++------------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/go.mod b/go.mod
index e7598db4293..17dd1eeddb3 100644
--- a/go.mod
+++ b/go.mod
@@ -39,7 +39,7 @@ require (
 	github.com/json-iterator/go v1.1.12
 	github.com/klauspost/compress v1.17.4
 	github.com/kolo/xmlrpc v0.0.0-20220921171641-a4b6fa1dd06b
-	github.com/linode/linodego v1.25.0
+	github.com/linode/linodego v1.27.1
 	github.com/miekg/dns v1.1.57
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
 	github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f
@@ -72,10 +72,10 @@ require (
 	go.uber.org/goleak v1.3.0
 	go.uber.org/multierr v1.11.0
 	golang.org/x/exp v0.0.0-20231206192017-f3f8817b8deb
-	golang.org/x/net v0.19.0
+	golang.org/x/net v0.20.0
 	golang.org/x/oauth2 v0.15.0
 	golang.org/x/sync v0.5.0
-	golang.org/x/sys v0.15.0
+	golang.org/x/sys v0.16.0
 	golang.org/x/time v0.5.0
 	golang.org/x/tools v0.16.0
 	google.golang.org/api v0.153.0
@@ -123,7 +123,7 @@ require (
 	github.com/go-openapi/spec v0.20.9 // indirect
 	github.com/go-openapi/swag v0.22.4 // indirect
 	github.com/go-openapi/validate v0.22.1 // indirect
-	github.com/go-resty/resty/v2 v2.10.0 // indirect
+	github.com/go-resty/resty/v2 v2.11.0 // indirect
 	github.com/golang-jwt/jwt/v5 v5.0.0 // indirect
 	github.com/golang/glog v1.1.2 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
@@ -177,9 +177,9 @@ require (
 	go.opencensus.io v0.24.0 // indirect
 	go.opentelemetry.io/otel/metric v1.21.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.0.0 // indirect
-	golang.org/x/crypto v0.16.0 // indirect
+	golang.org/x/crypto v0.18.0 // indirect
 	golang.org/x/mod v0.14.0 // indirect
-	golang.org/x/term v0.15.0 // indirect
+	golang.org/x/term v0.16.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
 	google.golang.org/genproto v0.0.0-20231120223509-83a465c0220f // indirect
diff --git a/go.sum b/go.sum
index fa21d23e547..5aaf586b6fe 100644
--- a/go.sum
+++ b/go.sum
@@ -240,8 +240,8 @@ github.com/go-openapi/swag v0.22.4 h1:QLMzNJnMGPRNDCbySlcj1x01tzU8/9LTTL9hZZZogB
 github.com/go-openapi/swag v0.22.4/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
 github.com/go-openapi/validate v0.22.1 h1:G+c2ub6q47kfX1sOBLwIQwzBVt8qmOAARyo/9Fqs9NU=
 github.com/go-openapi/validate v0.22.1/go.mod h1:rjnrwK57VJ7A8xqfpAOEKRH8yQSGUriMu5/zuPSQ1hg=
-github.com/go-resty/resty/v2 v2.10.0 h1:Qla4W/+TMmv0fOeeRqzEpXPLfTUnR5HZ1+lGs+CkiCo=
-github.com/go-resty/resty/v2 v2.10.0/go.mod h1:iiP/OpA0CkcL3IGt1O0+/SIItFUbkkyw5BGXiVdTu+A=
+github.com/go-resty/resty/v2 v2.11.0 h1:i7jMfNOJYMp69lq7qozJP+bjgzfAzeOhuGlyDrqxT/8=
+github.com/go-resty/resty/v2 v2.11.0/go.mod h1:iiP/OpA0CkcL3IGt1O0+/SIItFUbkkyw5BGXiVdTu+A=
 github.com/go-sql-driver/mysql v1.4.0/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
 github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 h1:tfuBGBXKqDEevZMzYi5KSi8KkcZtzBcTgAUUtapy0OI=
@@ -503,8 +503,8 @@ github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0
 github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
 github.com/lightstep/lightstep-tracer-common/golang/gogo v0.0.0-20190605223551-bc2310a04743/go.mod h1:qklhhLq1aX+mtWk9cPHPzaBjWImj5ULL6C7HFJtXQMM=
 github.com/lightstep/lightstep-tracer-go v0.18.1/go.mod h1:jlF1pusYV4pidLvZ+XD0UBX0ZE6WURAspgAczcDHrL4=
-github.com/linode/linodego v1.25.0 h1:zYMz0lTasD503jBu3tSRhzEmXHQN1zptCw5o71ibyyU=
-github.com/linode/linodego v1.25.0/go.mod h1:BMZI0pMM/YGjBis7pIXDPbcgYfCZLH0/UvzqtsGtG1c=
+github.com/linode/linodego v1.27.1 h1:KoQm5g2fppw8qIClJqUEL0yKH0+f+7te3Mewagb5QKE=
+github.com/linode/linodego v1.27.1/go.mod h1:5oAsx+uinHtVo6U77nXXXtox7MWzUW6aEkTOKXxA9uo=
 github.com/lyft/protoc-gen-validate v0.0.13/go.mod h1:XbGvPuh87YZc5TdIa2/I4pLk0QoUACkjt2znoq26NVQ=
 github.com/mailru/easyjson v0.0.0-20190614124828-94de47d64c63/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc=
 github.com/mailru/easyjson v0.0.0-20190626092158-b2ccc519800e/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc=
@@ -819,8 +819,8 @@ golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5y
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=
-golang.org/x/crypto v0.16.0 h1:mMMrFzRSCF0GvB7Ne27XVtVAaXLrPmgPC7/v0tkwHaY=
-golang.org/x/crypto v0.16.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
+golang.org/x/crypto v0.18.0 h1:PGVlW0xEltQnzFZ55hkuX5+KLyrMYhHld1YHO4AKcdc=
+golang.org/x/crypto v0.18.0/go.mod h1:R0j02AL6hcrfOiy9T4ZYp/rcWeMxM3L6QYxlOuEG1mg=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -902,8 +902,8 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
-golang.org/x/net v0.19.0 h1:zTwKpTd2XuCqf8huc7Fo2iSy+4RHPd10s4KzeTnVr1c=
-golang.org/x/net v0.19.0/go.mod h1:CfAk/cbD4CthTvqiEl8NpboMuiuOYsAr/7NOjZJtv1U=
+golang.org/x/net v0.20.0 h1:aCL9BSgETF1k+blQaYUBx9hJ9LOGP3gAVemcZlf1Kpo=
+golang.org/x/net v0.20.0/go.mod h1:z8BVo6PvndSri0LbOE3hAn0apkU+1YvI6E70E9jsnvY=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -995,15 +995,15 @@ golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.15.0 h1:h48lPFYpsTvQJZF4EKyI4aLHaev3CxivZmv7yZig9pc=
-golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.16.0 h1:xWw16ngr6ZMtmxDyKyIgsE93KNKz5HKmMa3b8ALHidU=
+golang.org/x/sys v0.16.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
 golang.org/x/term v0.13.0/go.mod h1:LTmsnFJwVN6bCy1rVCoS+qHT1HhALEFxKncY3WNNh4U=
-golang.org/x/term v0.15.0 h1:y/Oo/a/q3IXu26lQgl04j/gjuBDOBlx7X6Om1j2CPW4=
-golang.org/x/term v0.15.0/go.mod h1:BDl952bC7+uMoWR75FIrCDx79TPU9oHkTZ9yRbYOrX0=
+golang.org/x/term v0.16.0 h1:m+B6fahuftsE9qjo0VWp2FW0mB3MTJvR0BaMQrq0pmE=
+golang.org/x/term v0.16.0/go.mod h1:yn7UURbUtPyrVJPGPq404EukNFxcm/foM+bV/bfcDsY=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=

From df2a0ecf3badc8fd84a14bcb7b13eb6b8893f670 Mon Sep 17 00:00:00 2001
From: Ziqi Zhao <zhaoziqi9146@gmail.com>
Date: Wed, 17 Jan 2024 23:58:54 +0800
Subject: [PATCH 094/132] Native Histograms: support
 `native_histogram_min_bucket_factor` in scrape_config (#13222)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Native Histograms: support native_histogram_min_bucket_factor in scrape_config

---------

Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>
Signed-off-by: Björn Rabenstein <github@rabenste.in>
Co-authored-by: George Krajcsovits <krajorama@users.noreply.github.com>
Co-authored-by: Björn Rabenstein <github@rabenste.in>
---
 config/config.go                    |  7 +-
 docs/configuration/configuration.md | 40 ++++++++++++
 scrape/scrape.go                    | 34 +++++++++-
 scrape/scrape_test.go               | 99 +++++++++++++++++++++++++++--
 scrape/target.go                    | 29 +++++++++
 scrape/target_test.go               | 61 ++++++++++++++++++
 6 files changed, 260 insertions(+), 10 deletions(-)

diff --git a/config/config.go b/config/config.go
index c544d7e7489..7fa03a14450 100644
--- a/config/config.go
+++ b/config/config.go
@@ -610,9 +610,12 @@ type ScrapeConfig struct {
 	// More than this label value length post metric-relabeling will cause the
 	// scrape to fail. 0 means no limit.
 	LabelValueLengthLimit uint `yaml:"label_value_length_limit,omitempty"`
-	// More than this many buckets in a native histogram will cause the scrape to
-	// fail.
+	// If there are more than this many buckets in a native histogram,
+	// buckets will be merged to stay within the limit.
 	NativeHistogramBucketLimit uint `yaml:"native_histogram_bucket_limit,omitempty"`
+	// If the growth factor of one bucket to the next is smaller than this,
+	// buckets will be merged to increase the factor sufficiently.
+	NativeHistogramMinBucketFactor float64 `yaml:"native_histogram_min_bucket_factor,omitempty"`
 	// Keep no more than this many dropped targets per job.
 	// 0 means no limit.
 	KeepDroppedTargets uint `yaml:"keep_dropped_targets,omitempty"`
diff --git a/docs/configuration/configuration.md b/docs/configuration/configuration.md
index 3a7b71a2fca..e62d61b0991 100644
--- a/docs/configuration/configuration.md
+++ b/docs/configuration/configuration.md
@@ -451,6 +451,46 @@ metric_relabel_configs:
 # native histogram. If this is exceeded, the entire scrape will be treated as
 # failed. 0 means no limit.
 [ native_histogram_bucket_limit: <int> | default = 0 ]
+
+# Lower limit for the growth factor of one bucket to the next in each native
+# histogram. The resolution of a histogram with a lower growth factor will be
+# reduced until it is within the limit.
+# To set an upper limit for the schema (equivalent to "scale" in OTel's
+# exponential histograms), use the following factor limits:
+# 
+# +----------------------------+----------------------------+
+# |        growth factor       | resulting schema AKA scale |
+# +----------------------------+----------------------------+
+# |          65536             |             -4             |
+# +----------------------------+----------------------------+
+# |            256             |             -3             |
+# +----------------------------+----------------------------+
+# |             16             |             -2             |
+# +----------------------------+----------------------------+
+# |              4             |             -1             |
+# +----------------------------+----------------------------+
+# |              2             |              0             |
+# +----------------------------+----------------------------+
+# |              1.4           |              1             |
+# +----------------------------+----------------------------+
+# |              1.1           |              2             |
+# +----------------------------+----------------------------+
+# |              1.09          |              3             |
+# +----------------------------+----------------------------+
+# |              1.04          |              4             |
+# +----------------------------+----------------------------+
+# |              1.02          |              5             |
+# +----------------------------+----------------------------+
+# |              1.01          |              6             |
+# +----------------------------+----------------------------+
+# |              1.005         |              7             |
+# +----------------------------+----------------------------+
+# |              1.002         |              8             |
+# +----------------------------+----------------------------+
+# 
+# 0 results in the smallest supported factor (which is currently ~1.0027 or
+# schema 8, but might change in the future).
+[ native_histogram_min_bucket_factor: <float> | default = 0 ]
 ```
 
 Where `<job_name>` must be unique across all scrape configurations.
diff --git a/scrape/scrape.go b/scrape/scrape.go
index 2518912a7a5..dfa945852cb 100644
--- a/scrape/scrape.go
+++ b/scrape/scrape.go
@@ -99,6 +99,7 @@ type scrapeLoopOptions struct {
 	scraper                  scraper
 	sampleLimit              int
 	bucketLimit              int
+	maxSchema                int32
 	labelLimits              *labelLimits
 	honorLabels              bool
 	honorTimestamps          bool
@@ -165,6 +166,7 @@ func newScrapePool(cfg *config.ScrapeConfig, app storage.Appendable, offsetSeed
 			opts.enableCompression,
 			opts.sampleLimit,
 			opts.bucketLimit,
+			opts.maxSchema,
 			opts.labelLimits,
 			opts.interval,
 			opts.timeout,
@@ -270,6 +272,7 @@ func (sp *scrapePool) reload(cfg *config.ScrapeConfig) error {
 		bodySizeLimit = int64(sp.config.BodySizeLimit)
 		sampleLimit   = int(sp.config.SampleLimit)
 		bucketLimit   = int(sp.config.NativeHistogramBucketLimit)
+		maxSchema     = pickSchema(sp.config.NativeHistogramMinBucketFactor)
 		labelLimits   = &labelLimits{
 			labelLimit:            int(sp.config.LabelLimit),
 			labelNameLengthLimit:  int(sp.config.LabelNameLengthLimit),
@@ -310,6 +313,7 @@ func (sp *scrapePool) reload(cfg *config.ScrapeConfig) error {
 				scraper:                  s,
 				sampleLimit:              sampleLimit,
 				bucketLimit:              bucketLimit,
+				maxSchema:                maxSchema,
 				labelLimits:              labelLimits,
 				honorLabels:              honorLabels,
 				honorTimestamps:          honorTimestamps,
@@ -613,7 +617,7 @@ func mutateReportSampleLabels(lset labels.Labels, target *Target) labels.Labels
 }
 
 // appender returns an appender for ingested samples from the target.
-func appender(app storage.Appender, sampleLimit, bucketLimit int) storage.Appender {
+func appender(app storage.Appender, sampleLimit, bucketLimit int, maxSchema int32) storage.Appender {
 	app = &timeLimitAppender{
 		Appender: app,
 		maxTime:  timestamp.FromTime(time.Now().Add(maxAheadTime)),
@@ -633,6 +637,14 @@ func appender(app storage.Appender, sampleLimit, bucketLimit int) storage.Append
 			limit:    bucketLimit,
 		}
 	}
+
+	if maxSchema < nativeHistogramMaxSchema {
+		app = &maxSchemaAppender{
+			Appender:  app,
+			maxSchema: maxSchema,
+		}
+	}
+
 	return app
 }
 
@@ -786,6 +798,7 @@ type scrapeLoop struct {
 	forcedErrMtx             sync.Mutex
 	sampleLimit              int
 	bucketLimit              int
+	maxSchema                int32
 	labelLimits              *labelLimits
 	interval                 time.Duration
 	timeout                  time.Duration
@@ -1078,6 +1091,7 @@ func newScrapeLoop(ctx context.Context,
 	enableCompression bool,
 	sampleLimit int,
 	bucketLimit int,
+	maxSchema int32,
 	labelLimits *labelLimits,
 	interval time.Duration,
 	timeout time.Duration,
@@ -1128,6 +1142,7 @@ func newScrapeLoop(ctx context.Context,
 		enableCompression:        enableCompression,
 		sampleLimit:              sampleLimit,
 		bucketLimit:              bucketLimit,
+		maxSchema:                maxSchema,
 		labelLimits:              labelLimits,
 		interval:                 interval,
 		timeout:                  timeout,
@@ -1458,7 +1473,7 @@ func (sl *scrapeLoop) append(app storage.Appender, b []byte, contentType string,
 	}
 
 	// Take an appender with limits.
-	app = appender(app, sl.sampleLimit, sl.bucketLimit)
+	app = appender(app, sl.sampleLimit, sl.bucketLimit, sl.maxSchema)
 
 	defer func() {
 		if err != nil {
@@ -1906,3 +1921,18 @@ func TargetFromContext(ctx context.Context) (*Target, bool) {
 	t, ok := ctx.Value(ctxKeyTarget).(*Target)
 	return t, ok
 }
+
+func pickSchema(bucketFactor float64) int32 {
+	if bucketFactor <= 1 {
+		bucketFactor = 1.00271
+	}
+	floor := math.Floor(-math.Log2(math.Log2(bucketFactor)))
+	switch {
+	case floor >= float64(nativeHistogramMaxSchema):
+		return nativeHistogramMaxSchema
+	case floor <= float64(nativeHistogramMinSchema):
+		return nativeHistogramMinSchema
+	default:
+		return int32(floor)
+	}
+}
diff --git a/scrape/scrape_test.go b/scrape/scrape_test.go
index 1a416eeb6f0..b4bfdc6e46a 100644
--- a/scrape/scrape_test.go
+++ b/scrape/scrape_test.go
@@ -513,7 +513,7 @@ func TestScrapePoolAppender(t *testing.T) {
 	appl, ok := loop.(*scrapeLoop)
 	require.True(t, ok, "Expected scrapeLoop but got %T", loop)
 
-	wrapped := appender(appl.appender(context.Background()), 0, 0)
+	wrapped := appender(appl.appender(context.Background()), 0, 0, nativeHistogramMaxSchema)
 
 	tl, ok := wrapped.(*timeLimitAppender)
 	require.True(t, ok, "Expected timeLimitAppender but got %T", wrapped)
@@ -529,7 +529,7 @@ func TestScrapePoolAppender(t *testing.T) {
 	appl, ok = loop.(*scrapeLoop)
 	require.True(t, ok, "Expected scrapeLoop but got %T", loop)
 
-	wrapped = appender(appl.appender(context.Background()), sampleLimit, 0)
+	wrapped = appender(appl.appender(context.Background()), sampleLimit, 0, nativeHistogramMaxSchema)
 
 	sl, ok := wrapped.(*limitAppender)
 	require.True(t, ok, "Expected limitAppender but got %T", wrapped)
@@ -540,7 +540,7 @@ func TestScrapePoolAppender(t *testing.T) {
 	_, ok = tl.Appender.(nopAppender)
 	require.True(t, ok, "Expected base appender but got %T", tl.Appender)
 
-	wrapped = appender(appl.appender(context.Background()), sampleLimit, 100)
+	wrapped = appender(appl.appender(context.Background()), sampleLimit, 100, nativeHistogramMaxSchema)
 
 	bl, ok := wrapped.(*bucketLimitAppender)
 	require.True(t, ok, "Expected bucketLimitAppender but got %T", wrapped)
@@ -553,6 +553,23 @@ func TestScrapePoolAppender(t *testing.T) {
 
 	_, ok = tl.Appender.(nopAppender)
 	require.True(t, ok, "Expected base appender but got %T", tl.Appender)
+
+	wrapped = appender(appl.appender(context.Background()), sampleLimit, 100, 0)
+
+	ml, ok := wrapped.(*maxSchemaAppender)
+	require.True(t, ok, "Expected maxSchemaAppender but got %T", wrapped)
+
+	bl, ok = ml.Appender.(*bucketLimitAppender)
+	require.True(t, ok, "Expected bucketLimitAppender but got %T", wrapped)
+
+	sl, ok = bl.Appender.(*limitAppender)
+	require.True(t, ok, "Expected limitAppender but got %T", bl)
+
+	tl, ok = sl.Appender.(*timeLimitAppender)
+	require.True(t, ok, "Expected timeLimitAppender but got %T", sl.Appender)
+
+	_, ok = tl.Appender.(nopAppender)
+	require.True(t, ok, "Expected base appender but got %T", tl.Appender)
 }
 
 func TestScrapePoolRaces(t *testing.T) {
@@ -653,7 +670,7 @@ func newBasicScrapeLoop(t testing.TB, ctx context.Context, scraper scraper, app
 		true,
 		false,
 		true,
-		0, 0,
+		0, 0, nativeHistogramMaxSchema,
 		nil,
 		interval,
 		time.Hour,
@@ -796,7 +813,7 @@ func TestScrapeLoopRun(t *testing.T) {
 		true,
 		false,
 		true,
-		0, 0,
+		0, 0, nativeHistogramMaxSchema,
 		nil,
 		time.Second,
 		time.Hour,
@@ -942,7 +959,7 @@ func TestScrapeLoopMetadata(t *testing.T) {
 		true,
 		false,
 		true,
-		0, 0,
+		0, 0, nativeHistogramMaxSchema,
 		nil,
 		0,
 		0,
@@ -3465,3 +3482,73 @@ func TestScrapeLoopCompression(t *testing.T) {
 		})
 	}
 }
+
+func TestPickSchema(t *testing.T) {
+	tcs := []struct {
+		factor float64
+		schema int32
+	}{
+		{
+			factor: 65536,
+			schema: -4,
+		},
+		{
+			factor: 256,
+			schema: -3,
+		},
+		{
+			factor: 16,
+			schema: -2,
+		},
+		{
+			factor: 4,
+			schema: -1,
+		},
+		{
+			factor: 2,
+			schema: 0,
+		},
+		{
+			factor: 1.4,
+			schema: 1,
+		},
+		{
+			factor: 1.1,
+			schema: 2,
+		},
+		{
+			factor: 1.09,
+			schema: 3,
+		},
+		{
+			factor: 1.04,
+			schema: 4,
+		},
+		{
+			factor: 1.02,
+			schema: 5,
+		},
+		{
+			factor: 1.01,
+			schema: 6,
+		},
+		{
+			factor: 1.005,
+			schema: 7,
+		},
+		{
+			factor: 1.002,
+			schema: 8,
+		},
+		// The default value of native_histogram_min_bucket_factor
+		{
+			factor: 0,
+			schema: 8,
+		},
+	}
+
+	for _, tc := range tcs {
+		schema := pickSchema(tc.factor)
+		require.Equal(t, tc.schema, schema)
+	}
+}
diff --git a/scrape/target.go b/scrape/target.go
index 0605f53490d..c9287f818a6 100644
--- a/scrape/target.go
+++ b/scrape/target.go
@@ -387,6 +387,35 @@ func (app *bucketLimitAppender) AppendHistogram(ref storage.SeriesRef, lset labe
 	return ref, nil
 }
 
+const (
+	nativeHistogramMaxSchema int32 = 8
+	nativeHistogramMinSchema int32 = -4
+)
+
+type maxSchemaAppender struct {
+	storage.Appender
+
+	maxSchema int32
+}
+
+func (app *maxSchemaAppender) AppendHistogram(ref storage.SeriesRef, lset labels.Labels, t int64, h *histogram.Histogram, fh *histogram.FloatHistogram) (storage.SeriesRef, error) {
+	if h != nil {
+		if h.Schema > app.maxSchema {
+			h = h.ReduceResolution(app.maxSchema)
+		}
+	}
+	if fh != nil {
+		if fh.Schema > app.maxSchema {
+			fh = fh.ReduceResolution(app.maxSchema)
+		}
+	}
+	ref, err := app.Appender.AppendHistogram(ref, lset, t, h, fh)
+	if err != nil {
+		return 0, err
+	}
+	return ref, nil
+}
+
 // PopulateLabels builds a label set from the given label set and scrape configuration.
 // It returns a label set before relabeling was applied as the second return value.
 // Returns the original discovered label set found before relabelling was applied if the target is dropped during relabeling.
diff --git a/scrape/target_test.go b/scrape/target_test.go
index f37c75a7697..dac502a80e2 100644
--- a/scrape/target_test.go
+++ b/scrape/target_test.go
@@ -590,3 +590,64 @@ func TestBucketLimitAppender(t *testing.T) {
 		}
 	}
 }
+
+func TestMaxSchemaAppender(t *testing.T) {
+	example := histogram.Histogram{
+		Schema:        0,
+		Count:         21,
+		Sum:           33,
+		ZeroThreshold: 0.001,
+		ZeroCount:     3,
+		PositiveSpans: []histogram.Span{
+			{Offset: 0, Length: 3},
+		},
+		PositiveBuckets: []int64{3, 0, 0},
+		NegativeSpans: []histogram.Span{
+			{Offset: 0, Length: 3},
+		},
+		NegativeBuckets: []int64{3, 0, 0},
+	}
+
+	cases := []struct {
+		h            histogram.Histogram
+		maxSchema    int32
+		expectSchema int32
+	}{
+		{
+			h:            example,
+			maxSchema:    -1,
+			expectSchema: -1,
+		},
+		{
+			h:            example,
+			maxSchema:    0,
+			expectSchema: 0,
+		},
+	}
+
+	resApp := &collectResultAppender{}
+
+	for _, c := range cases {
+		for _, floatHisto := range []bool{true, false} {
+			t.Run(fmt.Sprintf("floatHistogram=%t", floatHisto), func(t *testing.T) {
+				app := &maxSchemaAppender{Appender: resApp, maxSchema: c.maxSchema}
+				ts := int64(10 * time.Minute / time.Millisecond)
+				lbls := labels.FromStrings("__name__", "sparse_histogram_series")
+				var err error
+				if floatHisto {
+					fh := c.h.Copy().ToFloat(nil)
+					_, err = app.AppendHistogram(0, lbls, ts, nil, fh)
+					require.Equal(t, c.expectSchema, fh.Schema)
+					require.NoError(t, err)
+
+				} else {
+					h := c.h.Copy()
+					_, err = app.AppendHistogram(0, lbls, ts, h, nil)
+					require.Equal(t, c.expectSchema, h.Schema)
+					require.NoError(t, err)
+				}
+				require.NoError(t, app.Commit())
+			})
+		}
+	}
+}

From a3ddfbd1ee3ff29821764a700cef52c7bab67236 Mon Sep 17 00:00:00 2001
From: zenador <zenador@users.noreply.github.com>
Date: Thu, 18 Jan 2024 00:06:35 +0800
Subject: [PATCH 095/132] Add warnings for histogramRate applied with isCounter
 not matching counter/gauge histogram (#13392)

Add warnings for histogramRate applied with isCounter not matching counter/gauge histogram

---------

Signed-off-by: Jeanette Tan <jeanette.tan@grafana.com>
---
 model/histogram/float_histogram.go |  4 ++--
 promql/functions.go                |  8 +++++++-
 util/annotations/annotations.go    | 20 ++++++++++++++++++++
 3 files changed, 29 insertions(+), 3 deletions(-)

diff --git a/model/histogram/float_histogram.go b/model/histogram/float_histogram.go
index 64c7b797a19..bf89f2a471d 100644
--- a/model/histogram/float_histogram.go
+++ b/model/histogram/float_histogram.go
@@ -469,8 +469,8 @@ func (h *FloatHistogram) DetectReset(previous *FloatHistogram) bool {
 	// is a counter reset or not.
 	// We do the same if the CounterResetHint is GaugeType, which should not happen, but PromQL still
 	// allows the user to apply functions to gauge histograms that are only meant for counter histograms.
-	// In this case, we treat the gauge histograms as a counter histograms
-	// (and we plan to return a warning about it to the user).
+	// In this case, we treat the gauge histograms as counter histograms. A warning should be returned
+	// to the user in this case.
 	if h.Count < previous.Count {
 		return true
 	}
diff --git a/promql/functions.go b/promql/functions.go
index cb3be0aef28..9ce577de92b 100644
--- a/promql/functions.go
+++ b/promql/functions.go
@@ -187,6 +187,8 @@ func histogramRate(points []HPoint, isCounter bool, metricName string, pos posra
 		minSchema = last.Schema
 	}
 
+	var annos annotations.Annotations
+
 	// First iteration to find out two things:
 	// - What's the smallest relevant schema?
 	// - Are all data points histograms?
@@ -197,10 +199,12 @@ func histogramRate(points []HPoint, isCounter bool, metricName string, pos posra
 		if curr == nil {
 			return nil, annotations.New().Add(annotations.NewMixedFloatsHistogramsWarning(metricName, pos))
 		}
-		// TODO(trevorwhitney): Check if isCounter is consistent with curr.CounterResetHint.
 		if !isCounter {
 			continue
 		}
+		if curr.CounterResetHint == histogram.GaugeType {
+			annos.Add(annotations.NewNativeHistogramNotCounterWarning(metricName, pos))
+		}
 		if curr.Schema < minSchema {
 			minSchema = curr.Schema
 		}
@@ -218,6 +222,8 @@ func histogramRate(points []HPoint, isCounter bool, metricName string, pos posra
 			}
 			prev = curr
 		}
+	} else if points[0].H.CounterResetHint != histogram.GaugeType || points[len(points)-1].H.CounterResetHint != histogram.GaugeType {
+		annos.Add(annotations.NewNativeHistogramNotGaugeWarning(metricName, pos))
 	}
 
 	h.CounterResetHint = histogram.GaugeType
diff --git a/util/annotations/annotations.go b/util/annotations/annotations.go
index 180d408430a..29dafeb2e90 100644
--- a/util/annotations/annotations.go
+++ b/util/annotations/annotations.go
@@ -107,6 +107,8 @@ var (
 	BadBucketLabelWarning               = fmt.Errorf("%w: bucket label %q is missing or has a malformed value", PromQLWarning, model.BucketLabel)
 	MixedFloatsHistogramsWarning        = fmt.Errorf("%w: encountered a mix of histograms and floats for metric name", PromQLWarning)
 	MixedClassicNativeHistogramsWarning = fmt.Errorf("%w: vector contains a mix of classic and native histograms for metric name", PromQLWarning)
+	NativeHistogramNotCounterWarning    = fmt.Errorf("%w: this native histogram metric is not a counter:", PromQLWarning)
+	NativeHistogramNotGaugeWarning      = fmt.Errorf("%w: this native histogram metric is not a gauge:", PromQLWarning)
 
 	PossibleNonCounterInfo                  = fmt.Errorf("%w: metric might not be a counter, name does not end in _total/_sum/_count/_bucket:", PromQLInfo)
 	HistogramQuantileForcedMonotonicityInfo = fmt.Errorf("%w: input to histogram_quantile needed to be fixed for monotonicity (see https://prometheus.io/docs/prometheus/latest/querying/functions/#histogram_quantile) for metric name", PromQLInfo)
@@ -166,6 +168,24 @@ func NewMixedClassicNativeHistogramsWarning(metricName string, pos posrange.Posi
 	}
 }
 
+// NewNativeHistogramNotCounterWarning is used when histogramRate is called
+// with isCounter set to true on a gauge histogram.
+func NewNativeHistogramNotCounterWarning(metricName string, pos posrange.PositionRange) error {
+	return annoErr{
+		PositionRange: pos,
+		Err:           fmt.Errorf("%w %q", NativeHistogramNotCounterWarning, metricName),
+	}
+}
+
+// NewNativeHistogramNotGaugeWarning is used when histogramRate is called
+// with isCounter set to false on a counter histogram.
+func NewNativeHistogramNotGaugeWarning(metricName string, pos posrange.PositionRange) error {
+	return annoErr{
+		PositionRange: pos,
+		Err:           fmt.Errorf("%w %q", NativeHistogramNotGaugeWarning, metricName),
+	}
+}
+
 // NewPossibleNonCounterInfo is used when a named counter metric with only float samples does not
 // have the suffixes _total, _sum, _count, or _bucket.
 func NewPossibleNonCounterInfo(metricName string, pos posrange.PositionRange) error {

From aee6896c4704f767ea8b0cdc42b26f23aa9ed545 Mon Sep 17 00:00:00 2001
From: Goutham <gouthamve@gmail.com>
Date: Thu, 18 Jan 2024 15:32:06 +0530
Subject: [PATCH 096/132] Minor fixes to otlp vendor update script

Signed-off-by: Goutham <gouthamve@gmail.com>
---
 .../remote/otlptranslator/prometheus/normalize_label.go   | 3 +++
 .../remote/otlptranslator/prometheus/normalize_name.go    | 2 ++
 storage/remote/otlptranslator/prometheus/unit_to_ucum.go  | 2 ++
 .../remote/otlptranslator/prometheusremotewrite/helper.go | 2 +-
 .../otlptranslator/prometheusremotewrite/histograms.go    | 2 +-
 .../prometheusremotewrite/metrics_to_prw.go               | 2 +-
 .../prometheusremotewrite/number_data_points.go           | 2 +-
 storage/remote/otlptranslator/update-copy.sh              | 8 +++++++-
 8 files changed, 18 insertions(+), 5 deletions(-)

diff --git a/storage/remote/otlptranslator/prometheus/normalize_label.go b/storage/remote/otlptranslator/prometheus/normalize_label.go
index b44ba869fe6..c02800c8bce 100644
--- a/storage/remote/otlptranslator/prometheus/normalize_label.go
+++ b/storage/remote/otlptranslator/prometheus/normalize_label.go
@@ -1,3 +1,5 @@
+// DO NOT EDIT. COPIED AS-IS. SEE ../README.md
+
 // Copyright The OpenTelemetry Authors
 // SPDX-License-Identifier: Apache-2.0
 
@@ -25,6 +27,7 @@ var dropSanitizationGate = featuregate.GlobalRegistry().MustRegister(
 //
 // Exception is made for double-underscores which are allowed
 func NormalizeLabel(label string) string {
+
 	// Trivial case
 	if len(label) == 0 {
 		return label
diff --git a/storage/remote/otlptranslator/prometheus/normalize_name.go b/storage/remote/otlptranslator/prometheus/normalize_name.go
index 72fc04cea22..7ae233a1872 100644
--- a/storage/remote/otlptranslator/prometheus/normalize_name.go
+++ b/storage/remote/otlptranslator/prometheus/normalize_name.go
@@ -1,3 +1,5 @@
+// DO NOT EDIT. COPIED AS-IS. SEE ../README.md
+
 // Copyright The OpenTelemetry Authors
 // SPDX-License-Identifier: Apache-2.0
 
diff --git a/storage/remote/otlptranslator/prometheus/unit_to_ucum.go b/storage/remote/otlptranslator/prometheus/unit_to_ucum.go
index b2f2c4f3aa2..4a72e683bb4 100644
--- a/storage/remote/otlptranslator/prometheus/unit_to_ucum.go
+++ b/storage/remote/otlptranslator/prometheus/unit_to_ucum.go
@@ -1,3 +1,5 @@
+// DO NOT EDIT. COPIED AS-IS. SEE ../README.md
+
 // Copyright The OpenTelemetry Authors
 // SPDX-License-Identifier: Apache-2.0
 
diff --git a/storage/remote/otlptranslator/prometheusremotewrite/helper.go b/storage/remote/otlptranslator/prometheusremotewrite/helper.go
index 49ad5672b34..09b39d29d9d 100644
--- a/storage/remote/otlptranslator/prometheusremotewrite/helper.go
+++ b/storage/remote/otlptranslator/prometheusremotewrite/helper.go
@@ -1,4 +1,4 @@
-// DO NOT EDIT. COPIED AS-IS. SEE README.md
+// DO NOT EDIT. COPIED AS-IS. SEE ../README.md
 
 // Copyright The OpenTelemetry Authors
 // SPDX-License-Identifier: Apache-2.0
diff --git a/storage/remote/otlptranslator/prometheusremotewrite/histograms.go b/storage/remote/otlptranslator/prometheusremotewrite/histograms.go
index 3c7494a6bfe..0a528f60741 100644
--- a/storage/remote/otlptranslator/prometheusremotewrite/histograms.go
+++ b/storage/remote/otlptranslator/prometheusremotewrite/histograms.go
@@ -1,4 +1,4 @@
-// DO NOT EDIT. COPIED AS-IS. SEE README.md
+// DO NOT EDIT. COPIED AS-IS. SEE ../README.md
 
 // Copyright The OpenTelemetry Authors
 // SPDX-License-Identifier: Apache-2.0
diff --git a/storage/remote/otlptranslator/prometheusremotewrite/metrics_to_prw.go b/storage/remote/otlptranslator/prometheusremotewrite/metrics_to_prw.go
index 6a5a6560488..6e8f42fae06 100644
--- a/storage/remote/otlptranslator/prometheusremotewrite/metrics_to_prw.go
+++ b/storage/remote/otlptranslator/prometheusremotewrite/metrics_to_prw.go
@@ -1,4 +1,4 @@
-// DO NOT EDIT. COPIED AS-IS. SEE README.md
+// DO NOT EDIT. COPIED AS-IS. SEE ../README.md
 
 // Copyright The OpenTelemetry Authors
 // SPDX-License-Identifier: Apache-2.0
diff --git a/storage/remote/otlptranslator/prometheusremotewrite/number_data_points.go b/storage/remote/otlptranslator/prometheusremotewrite/number_data_points.go
index c8e59694b85..85684ad6de4 100644
--- a/storage/remote/otlptranslator/prometheusremotewrite/number_data_points.go
+++ b/storage/remote/otlptranslator/prometheusremotewrite/number_data_points.go
@@ -1,4 +1,4 @@
-// DO NOT EDIT. COPIED AS-IS. SEE README.md
+// DO NOT EDIT. COPIED AS-IS. SEE ../README.md
 
 // Copyright The OpenTelemetry Authors
 // SPDX-License-Identifier: Apache-2.0
diff --git a/storage/remote/otlptranslator/update-copy.sh b/storage/remote/otlptranslator/update-copy.sh
index 36ad0cc35c0..44b3a3245c0 100755
--- a/storage/remote/otlptranslator/update-copy.sh
+++ b/storage/remote/otlptranslator/update-copy.sh
@@ -1,4 +1,5 @@
 #!/bin/bash
+set -xe
 
 OTEL_VERSION=v0.88.0
 
@@ -6,11 +7,16 @@ git clone https://github.com/open-telemetry/opentelemetry-collector-contrib ./tm
 cd ./tmp
 git checkout $OTEL_VERSION
 cd ..
+
 rm -rf ./prometheusremotewrite/*
 cp -r ./tmp/pkg/translator/prometheusremotewrite/*.go ./prometheusremotewrite
+rm -rf ./prometheusremotewrite/*_test.go
+
+rm -rf ./prometheus/*
 cp -r ./tmp/pkg/translator/prometheus/*.go ./prometheus
 rm -rf ./prometheus/*_test.go
+
 rm -rf ./tmp
 
 sed -i '' 's#github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/prometheus#github.com/prometheus/prometheus/storage/remote/otlptranslator/prometheus#g' ./prometheusremotewrite/*.go
-sed -i '' '1s#^#// DO NOT EDIT. COPIED AS-IS. SEE README.md\n\n#g' ./prometheusremotewrite/*.go
+sed -i '' '1s#^#// DO NOT EDIT. COPIED AS-IS. SEE ../README.md\n\n#g' ./prometheusremotewrite/*.go ./prometheus/*.go

From 110ba0a2c7e80aab13e5a215fce3ea3917b1e116 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 18 Jan 2024 10:58:49 +0000
Subject: [PATCH 097/132] build(deps): bump
 github.com/hetznercloud/hcloud-go/v2

Bumps [github.com/hetznercloud/hcloud-go/v2](https://github.com/hetznercloud/hcloud-go) from 2.4.0 to 2.6.0.
- [Release notes](https://github.com/hetznercloud/hcloud-go/releases)
- [Changelog](https://github.com/hetznercloud/hcloud-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hetznercloud/hcloud-go/compare/v2.4.0...v2.6.0)

---
updated-dependencies:
- dependency-name: github.com/hetznercloud/hcloud-go/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 17dd1eeddb3..c34d3db2eae 100644
--- a/go.mod
+++ b/go.mod
@@ -34,7 +34,7 @@ require (
 	github.com/grpc-ecosystem/grpc-gateway v1.16.0
 	github.com/hashicorp/consul/api v1.26.1
 	github.com/hashicorp/nomad/api v0.0.0-20230721134942-515895c7690c // Not upgrading this for now due to https://github.com/prometheus/prometheus/pull/13255#issuecomment-1845237409
-	github.com/hetznercloud/hcloud-go/v2 v2.4.0
+	github.com/hetznercloud/hcloud-go/v2 v2.6.0
 	github.com/ionos-cloud/sdk-go/v6 v6.1.10
 	github.com/json-iterator/go v1.1.12
 	github.com/klauspost/compress v1.17.4
diff --git a/go.sum b/go.sum
index 5aaf586b6fe..3593e39da63 100644
--- a/go.sum
+++ b/go.sum
@@ -441,8 +441,8 @@ github.com/hashicorp/nomad/api v0.0.0-20230721134942-515895c7690c/go.mod h1:O23q
 github.com/hashicorp/serf v0.8.2/go.mod h1:6hOLApaqBFA1NXqRQAsxw9QxuDEvNxSQRwA/JwenrHc=
 github.com/hashicorp/serf v0.10.1 h1:Z1H2J60yRKvfDYAOZLd2MU0ND4AH/WDz7xYHDWQsIPY=
 github.com/hashicorp/serf v0.10.1/go.mod h1:yL2t6BqATOLGc5HF7qbFkTfXoPIY0WZdWHfEvMqbG+4=
-github.com/hetznercloud/hcloud-go/v2 v2.4.0 h1:MqlAE+w125PLvJRCpAJmEwrIxoVdUdOyuFUhE/Ukbok=
-github.com/hetznercloud/hcloud-go/v2 v2.4.0/go.mod h1:l7fA5xsncFBzQTyw29/dw5Yr88yEGKKdc6BHf24ONS0=
+github.com/hetznercloud/hcloud-go/v2 v2.6.0 h1:RJOA2hHZ7rD1pScA4O1NF6qhkHyUdbbxjHgFNot8928=
+github.com/hetznercloud/hcloud-go/v2 v2.6.0/go.mod h1:4J1cSE57+g0WS93IiHLV7ubTHItcp+awzeBp5bM9mfA=
 github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
 github.com/hudl/fargo v1.3.0/go.mod h1:y3CKSmjA+wD2gak7sUSXTAoopbhU08POFhmITJgmKTg=
 github.com/ianlancetaylor/demangle v0.0.0-20181102032728-5e5cf60278f6/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=

From 102fd8cc88be0bfce83ec6dfc527be2894ae8524 Mon Sep 17 00:00:00 2001
From: Rewanth Tammana <22347290+rewanthtammana@users.noreply.github.com>
Date: Thu, 18 Jan 2024 18:49:16 +0400
Subject: [PATCH 098/132] Enhanced visibility for `promtool test rules` with
 JSON colored formatting (#13342)

* Added diff flag for unit test to improvise readability & debugging

Signed-off-by: Rewanth Tammana <22347290+rewanthtammana@users.noreply.github.com>

* Removed blank spaces

Signed-off-by: Rewanth Tammana <22347290+rewanthtammana@users.noreply.github.com>

* Fixed linting error

Signed-off-by: Rewanth Tammana <22347290+rewanthtammana@users.noreply.github.com>

* Added cli flags to documentation

Signed-off-by: Rewanth Tammana <22347290+rewanthtammana@users.noreply.github.com>

* Revert unrrelated linting fixes

Signed-off-by: Rewanth Tammana <22347290+rewanthtammana@users.noreply.github.com>

* Fixed review suggestions

Signed-off-by: Rewanth Tammana <22347290+rewanthtammana@users.noreply.github.com>

* Cleanup

Signed-off-by: Rewanth Tammana <22347290+rewanthtammana@users.noreply.github.com>

* Updated flag description

Signed-off-by: Rewanth Tammana <22347290+rewanthtammana@users.noreply.github.com>

* Updated flag description

Signed-off-by: Rewanth Tammana <22347290+rewanthtammana@users.noreply.github.com>

---------

Signed-off-by: Rewanth Tammana <22347290+rewanthtammana@users.noreply.github.com>
---
 cmd/promtool/main.go          |  2 ++
 cmd/promtool/unittest.go      | 52 ++++++++++++++++++++++++++++++-----
 cmd/promtool/unittest_test.go |  4 +--
 docs/command-line/promtool.md |  7 +++--
 go.mod                        |  1 +
 go.sum                        |  2 ++
 6 files changed, 56 insertions(+), 12 deletions(-)

diff --git a/cmd/promtool/main.go b/cmd/promtool/main.go
index 5a7f21d3ba0..0332c33eaa3 100644
--- a/cmd/promtool/main.go
+++ b/cmd/promtool/main.go
@@ -210,6 +210,7 @@ func main() {
 		"test-rule-file",
 		"The unit test file.",
 	).Required().ExistingFiles()
+	testRulesDiff := testRulesCmd.Flag("diff", "[Experimental] Print colored differential output between expected & received output.").Default("false").Bool()
 
 	defaultDBPath := "data/"
 	tsdbCmd := app.Command("tsdb", "Run tsdb commands.")
@@ -375,6 +376,7 @@ func main() {
 				EnableNegativeOffset: true,
 			},
 			*testRulesRun,
+			*testRulesDiff,
 			*testRulesFiles...),
 		)
 
diff --git a/cmd/promtool/unittest.go b/cmd/promtool/unittest.go
index a25a8596d42..a89288c44a4 100644
--- a/cmd/promtool/unittest.go
+++ b/cmd/promtool/unittest.go
@@ -15,6 +15,7 @@ package main
 
 import (
 	"context"
+	"encoding/json"
 	"errors"
 	"fmt"
 	"os"
@@ -27,6 +28,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/grafana/regexp"
+	"github.com/nsf/jsondiff"
 	"github.com/prometheus/common/model"
 	"gopkg.in/yaml.v2"
 
@@ -40,7 +42,7 @@ import (
 
 // RulesUnitTest does unit testing of rules based on the unit testing files provided.
 // More info about the file format can be found in the docs.
-func RulesUnitTest(queryOpts promql.LazyLoaderOpts, runStrings []string, files ...string) int {
+func RulesUnitTest(queryOpts promql.LazyLoaderOpts, runStrings []string, diffFlag bool, files ...string) int {
 	failed := false
 
 	var run *regexp.Regexp
@@ -49,7 +51,7 @@ func RulesUnitTest(queryOpts promql.LazyLoaderOpts, runStrings []string, files .
 	}
 
 	for _, f := range files {
-		if errs := ruleUnitTest(f, queryOpts, run); errs != nil {
+		if errs := ruleUnitTest(f, queryOpts, run, diffFlag); errs != nil {
 			fmt.Fprintln(os.Stderr, "  FAILED:")
 			for _, e := range errs {
 				fmt.Fprintln(os.Stderr, e.Error())
@@ -67,7 +69,7 @@ func RulesUnitTest(queryOpts promql.LazyLoaderOpts, runStrings []string, files .
 	return successExitCode
 }
 
-func ruleUnitTest(filename string, queryOpts promql.LazyLoaderOpts, run *regexp.Regexp) []error {
+func ruleUnitTest(filename string, queryOpts promql.LazyLoaderOpts, run *regexp.Regexp, diffFlag bool) []error {
 	fmt.Println("Unit Testing: ", filename)
 
 	b, err := os.ReadFile(filename)
@@ -109,7 +111,7 @@ func ruleUnitTest(filename string, queryOpts promql.LazyLoaderOpts, run *regexp.
 		if t.Interval == 0 {
 			t.Interval = unitTestInp.EvaluationInterval
 		}
-		ers := t.test(evalInterval, groupOrderMap, queryOpts, unitTestInp.RuleFiles...)
+		ers := t.test(evalInterval, groupOrderMap, queryOpts, diffFlag, unitTestInp.RuleFiles...)
 		if ers != nil {
 			errs = append(errs, ers...)
 		}
@@ -173,7 +175,7 @@ type testGroup struct {
 }
 
 // test performs the unit tests.
-func (tg *testGroup) test(evalInterval time.Duration, groupOrderMap map[string]int, queryOpts promql.LazyLoaderOpts, ruleFiles ...string) []error {
+func (tg *testGroup) test(evalInterval time.Duration, groupOrderMap map[string]int, queryOpts promql.LazyLoaderOpts, diffFlag bool, ruleFiles ...string) []error {
 	// Setup testing suite.
 	suite, err := promql.NewLazyLoader(nil, tg.seriesLoadingString(), queryOpts)
 	if err != nil {
@@ -345,8 +347,44 @@ func (tg *testGroup) test(evalInterval time.Duration, groupOrderMap map[string]i
 					}
 					expString := indentLines(expAlerts.String(), "            ")
 					gotString := indentLines(gotAlerts.String(), "            ")
-					errs = append(errs, fmt.Errorf("%s    alertname: %s, time: %s, \n        exp:%v, \n        got:%v",
-						testName, testcase.Alertname, testcase.EvalTime.String(), expString, gotString))
+					if diffFlag {
+						// If empty, populates an empty value
+						if gotAlerts.Len() == 0 {
+							gotAlerts = append(gotAlerts, labelAndAnnotation{
+								Labels:      labels.Labels{},
+								Annotations: labels.Labels{},
+							})
+						}
+						// If empty, populates an empty value
+						if expAlerts.Len() == 0 {
+							expAlerts = append(expAlerts, labelAndAnnotation{
+								Labels:      labels.Labels{},
+								Annotations: labels.Labels{},
+							})
+						}
+
+						diffOpts := jsondiff.DefaultConsoleOptions()
+						expAlertsJSON, err := json.Marshal(expAlerts)
+						if err != nil {
+							errs = append(errs, fmt.Errorf("error marshaling expected %s alert: [%s]", tg.TestGroupName, err.Error()))
+							continue
+						}
+
+						gotAlertsJSON, err := json.Marshal(gotAlerts)
+						if err != nil {
+							errs = append(errs, fmt.Errorf("error marshaling received %s alert: [%s]", tg.TestGroupName, err.Error()))
+							continue
+						}
+
+						res, diff := jsondiff.Compare(expAlertsJSON, gotAlertsJSON, &diffOpts)
+						if res != jsondiff.FullMatch {
+							errs = append(errs, fmt.Errorf("%s    alertname: %s, time: %s, \n        diff: %v",
+								testName, testcase.Alertname, testcase.EvalTime.String(), indentLines(diff, "            ")))
+						}
+					} else {
+						errs = append(errs, fmt.Errorf("%s    alertname: %s, time: %s, \n        exp:%v, \n        got:%v",
+							testName, testcase.Alertname, testcase.EvalTime.String(), expString, gotString))
+					}
 				}
 			}
 
diff --git a/cmd/promtool/unittest_test.go b/cmd/promtool/unittest_test.go
index fb4012e3c14..b8170d784e4 100644
--- a/cmd/promtool/unittest_test.go
+++ b/cmd/promtool/unittest_test.go
@@ -125,7 +125,7 @@ func TestRulesUnitTest(t *testing.T) {
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
-			if got := RulesUnitTest(tt.queryOpts, nil, tt.args.files...); got != tt.want {
+			if got := RulesUnitTest(tt.queryOpts, nil, false, tt.args.files...); got != tt.want {
 				t.Errorf("RulesUnitTest() = %v, want %v", got, tt.want)
 			}
 		})
@@ -178,7 +178,7 @@ func TestRulesUnitTestRun(t *testing.T) {
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
-			if got := RulesUnitTest(tt.queryOpts, tt.args.run, tt.args.files...); got != tt.want {
+			if got := RulesUnitTest(tt.queryOpts, tt.args.run, false, tt.args.files...); got != tt.want {
 				t.Errorf("RulesUnitTest() = %v, want %v", got, tt.want)
 			}
 		})
diff --git a/docs/command-line/promtool.md b/docs/command-line/promtool.md
index ba948685b6d..863bc068c34 100644
--- a/docs/command-line/promtool.md
+++ b/docs/command-line/promtool.md
@@ -450,9 +450,10 @@ Unit tests for rules.
 
 ###### Flags
 
-| Flag | Description |
-| --- | --- |
-| <code class="text-nowrap">--run</code> | If set, will only run test groups whose names match the regular expression. Can be specified multiple times. |
+| Flag | Description | Default |
+| --- | --- | --- |
+| <code class="text-nowrap">--run</code> | If set, will only run test groups whose names match the regular expression. Can be specified multiple times. |  |
+| <code class="text-nowrap">--diff</code> | [Experimental] Print colored differential output between expected & received output. | `false` |
 
 
 
diff --git a/go.mod b/go.mod
index c34d3db2eae..4833f9c1126 100644
--- a/go.mod
+++ b/go.mod
@@ -43,6 +43,7 @@ require (
 	github.com/miekg/dns v1.1.57
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
 	github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f
+	github.com/nsf/jsondiff v0.0.0-20230430225905-43f6cf3098c1
 	github.com/oklog/run v1.1.0
 	github.com/oklog/ulid v1.3.1
 	github.com/ovh/go-ovh v1.4.3
diff --git a/go.sum b/go.sum
index 3593e39da63..daac5e3203d 100644
--- a/go.sum
+++ b/go.sum
@@ -579,6 +579,8 @@ github.com/nats-io/nkeys v0.1.0/go.mod h1:xpnFELMwJABBLVhffcfd1MZx6VsNRFpEugbxzi
 github.com/nats-io/nkeys v0.1.3/go.mod h1:xpnFELMwJABBLVhffcfd1MZx6VsNRFpEugbxziKVo7w=
 github.com/nats-io/nuid v1.0.1/go.mod h1:19wcPz3Ph3q0Jbyiqsd0kePYG7A95tJPxeL+1OSON2c=
 github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno=
+github.com/nsf/jsondiff v0.0.0-20230430225905-43f6cf3098c1 h1:dOYG7LS/WK00RWZc8XGgcUTlTxpp3mKhdR2Q9z9HbXM=
+github.com/nsf/jsondiff v0.0.0-20230430225905-43f6cf3098c1/go.mod h1:mpRZBD8SJ55OIICQ3iWH0Yz3cjzA61JdqMLoWXeB2+8=
 github.com/oklog/oklog v0.3.2/go.mod h1:FCV+B7mhrz4o+ueLpx+KqkyXRGMWOYEvfiXtdGtbWGs=
 github.com/oklog/run v1.0.0/go.mod h1:dlhp/R75TPv97u0XWUtDeV/lRKWPKSdTuV0TZvrmrQA=
 github.com/oklog/run v1.1.0 h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=

From 63cdd6dbe1fa2c113b2f50d88a1634244a89a60a Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Thu, 18 Jan 2024 17:42:18 +0000
Subject: [PATCH 099/132] storage: skip merging when no remote storage
 configured

Prometheus is hard-coded to use a fanout storage between TSDB and
a remote storage which by default is empty.
This change detects the empty storage and skips merging between
result sets, which would make `Select()` sort results.

Bottom line: we skip a sort unless there really is some remote storage
configured.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 storage/fanout.go | 4 +++-
 storage/merge.go  | 3 +++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/storage/fanout.go b/storage/fanout.go
index a9a3f904b6c..e52342bc7ed 100644
--- a/storage/fanout.go
+++ b/storage/fanout.go
@@ -89,7 +89,9 @@ func (f *fanout) Querier(mint, maxt int64) (Querier, error) {
 			}
 			return nil, errs.Err()
 		}
-		secondaries = append(secondaries, querier)
+		if _, ok := querier.(noopQuerier); !ok {
+			secondaries = append(secondaries, querier)
+		}
 	}
 	return NewMergeQuerier([]Querier{primary}, secondaries, ChainedSeriesMerge), nil
 }
diff --git a/storage/merge.go b/storage/merge.go
index b4ebb440f30..bcb0f66fbc1 100644
--- a/storage/merge.go
+++ b/storage/merge.go
@@ -46,6 +46,9 @@ type mergeGenericQuerier struct {
 //
 // In case of overlaps between the data given by primaries' and secondaries' Selects, merge function will be used.
 func NewMergeQuerier(primaries, secondaries []Querier, mergeFn VerticalSeriesMergeFunc) Querier {
+	if len(primaries)+len(secondaries) == 0 {
+		return NoopQuerier()
+	}
 	queriers := make([]genericQuerier, 0, len(primaries)+len(secondaries))
 	for _, q := range primaries {
 		if _, ok := q.(noopQuerier); !ok && q != nil {

From 65cf528403b9cd2f6e4b526ee2c29d2e84c76178 Mon Sep 17 00:00:00 2001
From: Chris Marchbanks <csmarchbanks@gmail.com>
Date: Fri, 19 Jan 2024 15:37:12 -0700
Subject: [PATCH 100/132] Remove csmarchbanks from remote write owners (#13432)

I have not had the time to keep up with remote write and have no plans
to work on it in the near future so I am withdrawing my maintainership
of that part of the codebase. I continue to focus on client_python.

Signed-off-by: Chris Marchbanks <csmarchbanks@gmail.com>
---
 .github/CODEOWNERS | 2 +-
 MAINTAINERS.md     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 1aae1fff986..41530d46542 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -1,6 +1,6 @@
 /web/ui @juliusv
 /web/ui/module @juliusv @nexucis
-/storage/remote @csmarchbanks @cstyan @bwplotka @tomwilkie
+/storage/remote @cstyan @bwplotka @tomwilkie
 /storage/remote/otlptranslator @gouthamve @jesusvazquez
 /discovery/kubernetes @brancz
 /tsdb @jesusvazquez
diff --git a/MAINTAINERS.md b/MAINTAINERS.md
index 902e9a6e949..e2fa9c29491 100644
--- a/MAINTAINERS.md
+++ b/MAINTAINERS.md
@@ -9,7 +9,7 @@ Julien Pivotto (<roidelapluie@prometheus.io> / @roidelapluie) and Levi Harrison
 * `documentation`
   * `prometheus-mixin`: Matthias Loibl (<mail@matthiasloibl.com> / @metalmatze)
 * `storage`
-  * `remote`: Chris Marchbanks (<csmarchbanks@gmail.com> / @csmarchbanks), Callum Styan (<callumstyan@gmail.com> / @cstyan), Bartłomiej Płotka (<bwplotka@gmail.com> / @bwplotka), Tom Wilkie (<tom.wilkie@gmail.com> / @tomwilkie)
+  * `remote`: Callum Styan (<callumstyan@gmail.com> / @cstyan), Bartłomiej Płotka (<bwplotka@gmail.com> / @bwplotka), Tom Wilkie (<tom.wilkie@gmail.com> / @tomwilkie)
 * `tsdb`: Ganesh Vernekar (<ganesh@grafana.com> / @codesome), Bartłomiej Płotka (<bwplotka@gmail.com> / @bwplotka), Jesús Vázquez (<jesus.vazquez@grafana.com> / @jesusvazquez)
   * `agent`: Robert Fratto (<robert.fratto@grafana.com> / @rfratto)
 * `web`

From d778591fd3b98f779d5194fd30d07dd813c0ae9b Mon Sep 17 00:00:00 2001
From: Ben Ye <benye@amazon.com>
Date: Sun, 21 Jan 2024 14:19:39 -0800
Subject: [PATCH 101/132] add more context cancellation check at evaluation
 time

Signed-off-by: Ben Ye <benye@amazon.com>
---
 promql/engine.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/promql/engine.go b/promql/engine.go
index 6349ddbbe99..7165631e09a 100644
--- a/promql/engine.go
+++ b/promql/engine.go
@@ -1471,6 +1471,9 @@ func (ev *evaluator) eval(expr parser.Expr) (parser.Value, annotations.Annotatio
 		it := storage.NewBuffer(selRange)
 		var chkIter chunkenc.Iterator
 		for i, s := range selVS.Series {
+			if err := contextDone(ev.ctx, "expression evaluation"); err != nil {
+				ev.error(err)
+			}
 			ev.currentSamples -= len(floats) + totalHPointSize(histograms)
 			if floats != nil {
 				floats = floats[:0]
@@ -1690,6 +1693,9 @@ func (ev *evaluator) eval(expr parser.Expr) (parser.Value, annotations.Annotatio
 		it := storage.NewMemoizedEmptyIterator(durationMilliseconds(ev.lookbackDelta))
 		var chkIter chunkenc.Iterator
 		for i, s := range e.Series {
+			if err := contextDone(ev.ctx, "expression evaluation"); err != nil {
+				ev.error(err)
+			}
 			chkIter = s.Iterator(chkIter)
 			it.Reset(chkIter)
 			ss := Series{

From ed172a666737a11a09e56d512078b548fe9edb18 Mon Sep 17 00:00:00 2001
From: Oleg Zaytsev <mail@olegzaytsev.com>
Date: Tue, 23 Jan 2024 11:40:21 +0100
Subject: [PATCH 102/132] Optimize label values with matchers by taking
 shortcuts (#13426)

Don't calculate postings beforehand: we may not need them. If all
matchers are for the requested label, we can just filter its values.

Also, if there are no values at all, no need to run any kind of
logic.

Also add more labelValuesWithMatchers benchmarks

Signed-off-by: Oleg Zaytsev <mail@olegzaytsev.com>
---
 tsdb/ooo_head_read_test.go |  4 ++--
 tsdb/querier.go            | 21 ++++++++++++++++-----
 tsdb/querier_bench_test.go | 13 ++++++++++++-
 3 files changed, 30 insertions(+), 8 deletions(-)

diff --git a/tsdb/ooo_head_read_test.go b/tsdb/ooo_head_read_test.go
index b50a268b716..36289056b8c 100644
--- a/tsdb/ooo_head_read_test.go
+++ b/tsdb/ooo_head_read_test.go
@@ -410,7 +410,7 @@ func TestOOOHeadChunkReader_LabelValues(t *testing.T) {
 			queryMinT:  math.MinInt64,
 			queryMaxT:  math.MaxInt64,
 			expValues1: []string{"bar1"},
-			expValues2: []string{},
+			expValues2: nil,
 			expValues3: []string{"bar1", "bar2"},
 			expValues4: []string{"bar1", "bar2"},
 		},
@@ -419,7 +419,7 @@ func TestOOOHeadChunkReader_LabelValues(t *testing.T) {
 			queryMinT:  90,
 			queryMaxT:  90,
 			expValues1: []string{"bar1"},
-			expValues2: []string{},
+			expValues2: nil,
 			expValues3: []string{"bar1", "bar2"},
 			expValues4: []string{"bar1", "bar2"},
 		},
diff --git a/tsdb/querier.go b/tsdb/querier.go
index f88e4415e45..68aa9574633 100644
--- a/tsdb/querier.go
+++ b/tsdb/querier.go
@@ -440,11 +440,6 @@ func inversePostingsForMatcher(ctx context.Context, ix IndexReader, m *labels.Ma
 }
 
 func labelValuesWithMatchers(ctx context.Context, r IndexReader, name string, matchers ...*labels.Matcher) ([]string, error) {
-	p, err := PostingsForMatchers(ctx, r, matchers...)
-	if err != nil {
-		return nil, fmt.Errorf("fetching postings for matchers: %w", err)
-	}
-
 	allValues, err := r.LabelValues(ctx, name)
 	if err != nil {
 		return nil, fmt.Errorf("fetching values of label %s: %w", name, err)
@@ -453,8 +448,10 @@ func labelValuesWithMatchers(ctx context.Context, r IndexReader, name string, ma
 	// If we have a matcher for the label name, we can filter out values that don't match
 	// before we fetch postings. This is especially useful for labels with many values.
 	// e.g. __name__ with a selector like {__name__="xyz"}
+	hasMatchersForOtherLabels := false
 	for _, m := range matchers {
 		if m.Name != name {
+			hasMatchersForOtherLabels = true
 			continue
 		}
 
@@ -469,6 +466,20 @@ func labelValuesWithMatchers(ctx context.Context, r IndexReader, name string, ma
 		allValues = filteredValues
 	}
 
+	if len(allValues) == 0 {
+		return nil, nil
+	}
+
+	// If we don't have any matchers for other labels, then we're done.
+	if !hasMatchersForOtherLabels {
+		return allValues, nil
+	}
+
+	p, err := PostingsForMatchers(ctx, r, matchers...)
+	if err != nil {
+		return nil, fmt.Errorf("fetching postings for matchers: %w", err)
+	}
+
 	valuesPostings := make([]index.Postings, len(allValues))
 	for i, value := range allValues {
 		valuesPostings[i], err = r.Postings(ctx, name, value)
diff --git a/tsdb/querier_bench_test.go b/tsdb/querier_bench_test.go
index 7b839ca3487..9a823024203 100644
--- a/tsdb/querier_bench_test.go
+++ b/tsdb/querier_bench_test.go
@@ -182,13 +182,16 @@ func benchmarkPostingsForMatchers(b *testing.B, ir IndexReader) {
 
 func benchmarkLabelValuesWithMatchers(b *testing.B, ir IndexReader) {
 	i1 := labels.MustNewMatcher(labels.MatchEqual, "i", "1")
+	i1Plus := labels.MustNewMatcher(labels.MatchRegexp, "i", "1.+")
+	i1PostingsBenchSuffix := labels.MustNewMatcher(labels.MatchEqual, "i", "1"+postingsBenchSuffix)
+	iSuffix := labels.MustNewMatcher(labels.MatchRegexp, "i", ".+ddd")
 	iStar := labels.MustNewMatcher(labels.MatchRegexp, "i", "^.*$")
 	jNotFoo := labels.MustNewMatcher(labels.MatchNotEqual, "j", "foo")
 	jXXXYYY := labels.MustNewMatcher(labels.MatchRegexp, "j", "XXX|YYY")
 	jXplus := labels.MustNewMatcher(labels.MatchRegexp, "j", "X.+")
 	n1 := labels.MustNewMatcher(labels.MatchEqual, "n", "1"+postingsBenchSuffix)
 	nX := labels.MustNewMatcher(labels.MatchNotEqual, "n", "X"+postingsBenchSuffix)
-	nPlus := labels.MustNewMatcher(labels.MatchRegexp, "i", "^.+$")
+	nPlus := labels.MustNewMatcher(labels.MatchRegexp, "n", "^.+$")
 
 	ctx := context.Background()
 
@@ -197,6 +200,7 @@ func benchmarkLabelValuesWithMatchers(b *testing.B, ir IndexReader) {
 		labelName string
 		matchers  []*labels.Matcher
 	}{
+		// i is never "1", this isn't matching anything.
 		{`i with i="1"`, "i", []*labels.Matcher{i1}},
 		// i has 100k values.
 		{`i with n="1"`, "i", []*labels.Matcher{n1}},
@@ -206,9 +210,16 @@ func benchmarkLabelValuesWithMatchers(b *testing.B, ir IndexReader) {
 		{`i with n="1",j=~"XXX|YYY"`, "i", []*labels.Matcher{n1, jXXXYYY}},
 		{`i with n="X",j!="foo"`, "i", []*labels.Matcher{nX, jNotFoo}},
 		{`i with n="1",i=~"^.*$",j!="foo"`, "i", []*labels.Matcher{n1, iStar, jNotFoo}},
+		// matchers on i itself
+		{`i with i="1aaa...ddd"`, "i", []*labels.Matcher{i1PostingsBenchSuffix}},
+		{`i with i=~"1.+"`, "i", []*labels.Matcher{i1Plus}},
+		{`i with i=~"1.+",i=~".+ddd"`, "i", []*labels.Matcher{i1Plus, iSuffix}},
 		// n has 10 values.
 		{`n with j!="foo"`, "n", []*labels.Matcher{jNotFoo}},
 		{`n with i="1"`, "n", []*labels.Matcher{i1}},
+		{`n with i=~"1.+"`, "n", []*labels.Matcher{i1Plus}},
+		// there's no label "none"
+		{`none with i=~"1"`, "none", []*labels.Matcher{i1Plus}},
 	}
 
 	for _, c := range cases {

From 2c0f9d1eee1ee68d830b4c2c070b3bf2b111c83e Mon Sep 17 00:00:00 2001
From: SuperQ <superq@gmail.com>
Date: Mon, 8 Jan 2024 19:10:12 +0100
Subject: [PATCH 103/132] Add automatic memory limit handling

Enable automatic detection of memory limits and configure GOMEMLIMIT to
match.
* Also includes a flag to allow controlling the reserved ratio.

Signed-off-by: SuperQ <superq@gmail.com>
---
 cmd/prometheus/main.go          | 32 ++++++++++++++++++++++++++++++--
 docs/command-line/prometheus.md |  3 ++-
 docs/feature_flags.md           |  8 ++++++++
 go.mod                          |  7 +++++++
 go.sum                          | 15 +++++++++++++++
 5 files changed, 62 insertions(+), 3 deletions(-)

diff --git a/cmd/prometheus/main.go b/cmd/prometheus/main.go
index 95a581a74c8..d73652fbadd 100644
--- a/cmd/prometheus/main.go
+++ b/cmd/prometheus/main.go
@@ -33,6 +33,7 @@ import (
 	"syscall"
 	"time"
 
+	"github.com/KimMachineGun/automemlimit/memlimit"
 	"github.com/alecthomas/kingpin/v2"
 	"github.com/alecthomas/units"
 	"github.com/go-kit/log"
@@ -147,13 +148,15 @@ type flagConfig struct {
 	queryMaxSamples     int
 	RemoteFlushDeadline model.Duration
 
-	featureList []string
+	featureList   []string
+	memlimitRatio float64
 	// These options are extracted from featureList
 	// for ease of use.
 	enableExpandExternalLabels bool
 	enableNewSDManager         bool
 	enablePerStepStats         bool
 	enableAutoGOMAXPROCS       bool
+	enableAutoGOMEMLIMIT       bool
 
 	prometheusURL   string
 	corsRegexString string
@@ -197,6 +200,9 @@ func (c *flagConfig) setFeatureListOptions(logger log.Logger) error {
 			case "auto-gomaxprocs":
 				c.enableAutoGOMAXPROCS = true
 				level.Info(logger).Log("msg", "Automatically set GOMAXPROCS to match Linux container CPU quota")
+			case "auto-gomemlimit":
+				c.enableAutoGOMEMLIMIT = true
+				level.Info(logger).Log("msg", "Automatically set GOMEMLIMIT to match Linux container or system memory limit")
 			case "no-default-scrape-port":
 				c.scrape.NoDefaultPort = true
 				level.Info(logger).Log("msg", "No default port will be appended to scrape targets' addresses.")
@@ -262,6 +268,9 @@ func main() {
 	a.Flag("web.listen-address", "Address to listen on for UI, API, and telemetry.").
 		Default("0.0.0.0:9090").StringVar(&cfg.web.ListenAddress)
 
+	a.Flag("auto-gomemlimit.ratio", "The ratio of reserved GOMEMLIMIT memory to the detected maximum container or system memory").
+		Default("0.9").FloatVar(&cfg.memlimitRatio)
+
 	webConfig := a.Flag(
 		"web.config.file",
 		"[EXPERIMENTAL] Path to configuration file that can enable TLS or authentication.",
@@ -429,7 +438,7 @@ func main() {
 	a.Flag("scrape.discovery-reload-interval", "Interval used by scrape manager to throttle target groups updates.").
 		Hidden().Default("5s").SetValue(&cfg.scrape.DiscoveryReloadInterval)
 
-	a.Flag("enable-feature", "Comma separated feature names to enable. Valid options: agent, exemplar-storage, expand-external-labels, memory-snapshot-on-shutdown, promql-at-modifier, promql-negative-offset, promql-per-step-stats, promql-experimental-functions, remote-write-receiver (DEPRECATED), extra-scrape-metrics, new-service-discovery-manager, auto-gomaxprocs, no-default-scrape-port, native-histograms, otlp-write-receiver. See https://prometheus.io/docs/prometheus/latest/feature_flags/ for more details.").
+	a.Flag("enable-feature", "Comma separated feature names to enable. Valid options: agent, auto-gomemlimit, exemplar-storage, expand-external-labels, memory-snapshot-on-shutdown, promql-at-modifier, promql-negative-offset, promql-per-step-stats, promql-experimental-functions, remote-write-receiver (DEPRECATED), extra-scrape-metrics, new-service-discovery-manager, auto-gomaxprocs, no-default-scrape-port, native-histograms, otlp-write-receiver. See https://prometheus.io/docs/prometheus/latest/feature_flags/ for more details.").
 		Default("").StringsVar(&cfg.featureList)
 
 	promlogflag.AddFlags(a, &cfg.promlogConfig)
@@ -467,6 +476,11 @@ func main() {
 		os.Exit(3)
 	}
 
+	if cfg.memlimitRatio <= 0.0 || cfg.memlimitRatio > 1.0 {
+		fmt.Fprintf(os.Stderr, "--auto-gomemlimit.ratio must be greater than 0 and less than or equal to 1.")
+		os.Exit(1)
+	}
+
 	localStoragePath := cfg.serverStoragePath
 	if agentMode {
 		localStoragePath = cfg.agentStoragePath
@@ -695,6 +709,20 @@ func main() {
 		}
 	}
 
+	if cfg.enableAutoGOMEMLIMIT {
+		if _, err := memlimit.SetGoMemLimitWithOpts(
+			memlimit.WithRatio(cfg.memlimitRatio),
+			memlimit.WithProvider(
+				memlimit.ApplyFallback(
+					memlimit.FromCgroup,
+					memlimit.FromSystem,
+				),
+			),
+		); err != nil {
+			level.Warn(logger).Log("component", "automemlimit", "msg", "Failed to set GOMEMLIMIT automatically", "err", err)
+		}
+	}
+
 	if !agentMode {
 		opts := promql.EngineOpts{
 			Logger:                   log.With(logger, "component", "query engine"),
diff --git a/docs/command-line/prometheus.md b/docs/command-line/prometheus.md
index cd6dac555d0..747457de1da 100644
--- a/docs/command-line/prometheus.md
+++ b/docs/command-line/prometheus.md
@@ -16,6 +16,7 @@ The Prometheus monitoring server
 | <code class="text-nowrap">--version</code> | Show application version. |  |
 | <code class="text-nowrap">--config.file</code> | Prometheus configuration file path. | `prometheus.yml` |
 | <code class="text-nowrap">--web.listen-address</code> | Address to listen on for UI, API, and telemetry. | `0.0.0.0:9090` |
+| <code class="text-nowrap">--auto-gomemlimit.ratio</code> | The ratio of reserved GOMEMLIMIT memory to the detected maximum container or system memory | `0.9` |
 | <code class="text-nowrap">--web.config.file</code> | [EXPERIMENTAL] Path to configuration file that can enable TLS or authentication. |  |
 | <code class="text-nowrap">--web.read-timeout</code> | Maximum duration before timing out read of the request, and closing idle connections. | `5m` |
 | <code class="text-nowrap">--web.max-connections</code> | Maximum number of simultaneous connections. | `512` |
@@ -52,7 +53,7 @@ The Prometheus monitoring server
 | <code class="text-nowrap">--query.timeout</code> | Maximum time a query may take before being aborted. Use with server mode only. | `2m` |
 | <code class="text-nowrap">--query.max-concurrency</code> | Maximum number of queries executed concurrently. Use with server mode only. | `20` |
 | <code class="text-nowrap">--query.max-samples</code> | Maximum number of samples a single query can load into memory. Note that queries will fail if they try to load more samples than this into memory, so this also limits the number of samples a query can return. Use with server mode only. | `50000000` |
-| <code class="text-nowrap">--enable-feature</code> | Comma separated feature names to enable. Valid options: agent, exemplar-storage, expand-external-labels, memory-snapshot-on-shutdown, promql-at-modifier, promql-negative-offset, promql-per-step-stats, promql-experimental-functions, remote-write-receiver (DEPRECATED), extra-scrape-metrics, new-service-discovery-manager, auto-gomaxprocs, no-default-scrape-port, native-histograms, otlp-write-receiver. See https://prometheus.io/docs/prometheus/latest/feature_flags/ for more details. |  |
+| <code class="text-nowrap">--enable-feature</code> | Comma separated feature names to enable. Valid options: agent, auto-gomemlimit, exemplar-storage, expand-external-labels, memory-snapshot-on-shutdown, promql-at-modifier, promql-negative-offset, promql-per-step-stats, promql-experimental-functions, remote-write-receiver (DEPRECATED), extra-scrape-metrics, new-service-discovery-manager, auto-gomaxprocs, no-default-scrape-port, native-histograms, otlp-write-receiver. See https://prometheus.io/docs/prometheus/latest/feature_flags/ for more details. |  |
 | <code class="text-nowrap">--log.level</code> | Only log messages with the given severity or above. One of: [debug, info, warn, error] | `info` |
 | <code class="text-nowrap">--log.format</code> | Output format of log messages. One of: [logfmt, json] | `logfmt` |
 
diff --git a/docs/feature_flags.md b/docs/feature_flags.md
index bcf8309b5c9..adefaad4b01 100644
--- a/docs/feature_flags.md
+++ b/docs/feature_flags.md
@@ -95,6 +95,14 @@ computed at all.
 
 When enabled, GOMAXPROCS variable is automatically set to match Linux container CPU quota.
 
+## Auto GOMEMLIMIT
+
+`--enable-feature=auto-gomemlimit`
+
+When enabled, the GOMEMLIMIT variable is automatically set to match the Linux container memory limit. If there is no container limit, or the process is runing outside of containers, the system memory total is used.
+
+There is also an additional tuning flag, `--auto-gomemlimit.ratio`, which allows controling how much of the memory is used for Prometheus. The remainder is reserved for memory outside the process. For example, kernel page cache. Page cache is important for Prometheus TSDB query performance. The default is `0.9`, which means 90% of the memory limit will be used for Prometheus.
+
 ## No default scrape port
 
 `--enable-feature=no-default-scrape-port`
diff --git a/go.mod b/go.mod
index 4833f9c1126..fba6a7739da 100644
--- a/go.mod
+++ b/go.mod
@@ -8,6 +8,7 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.3.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0
 	github.com/Code-Hex/go-generics-cache v1.3.1
+	github.com/KimMachineGun/automemlimit v0.5.0
 	github.com/alecthomas/kingpin/v2 v2.4.0
 	github.com/alecthomas/units v0.0.0-20231202071711-9a357b53e9c9
 	github.com/aws/aws-sdk-go v1.48.14
@@ -102,7 +103,9 @@ require (
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/cenkalti/backoff/v4 v4.2.1 // indirect
+	github.com/cilium/ebpf v0.11.0 // indirect
 	github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4 // indirect
+	github.com/containerd/cgroups/v3 v3.0.3 // indirect
 	github.com/coreos/go-systemd/v22 v22.5.0 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/docker/distribution v2.8.2+incompatible // indirect
@@ -125,6 +128,7 @@ require (
 	github.com/go-openapi/swag v0.22.4 // indirect
 	github.com/go-openapi/validate v0.22.1 // indirect
 	github.com/go-resty/resty/v2 v2.11.0 // indirect
+	github.com/godbus/dbus/v5 v5.0.4 // indirect
 	github.com/golang-jwt/jwt/v5 v5.0.0 // indirect
 	github.com/golang/glog v1.1.2 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
@@ -167,10 +171,13 @@ require (
 	github.com/morikuni/aec v1.0.0 // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
 	github.com/opencontainers/image-spec v1.0.2 // indirect
+	github.com/opencontainers/runtime-spec v1.0.2 // indirect
+	github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58 // indirect
 	github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/procfs v0.12.0 // indirect
+	github.com/sirupsen/logrus v1.9.0 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/stretchr/objx v0.5.0 // indirect
 	github.com/xhit/go-str2duration/v2 v2.1.0 // indirect
diff --git a/go.sum b/go.sum
index daac5e3203d..e5c269f47ab 100644
--- a/go.sum
+++ b/go.sum
@@ -55,6 +55,8 @@ github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym
 github.com/Code-Hex/go-generics-cache v1.3.1 h1:i8rLwyhoyhaerr7JpjtYjJZUcCbWOdiYO3fZXLiEC4g=
 github.com/Code-Hex/go-generics-cache v1.3.1/go.mod h1:qxcC9kRVrct9rHeiYpFWSoW1vxyillCVzX13KZG8dl4=
 github.com/DataDog/datadog-go v3.2.0+incompatible/go.mod h1:LButxg5PwREeZtORoXG3tL4fMGNddJ+vMq1mwgfaqoQ=
+github.com/KimMachineGun/automemlimit v0.5.0 h1:BeOe+BbJc8L5chL3OwzVYjVzyvPALdd5wxVVOWuUZmQ=
+github.com/KimMachineGun/automemlimit v0.5.0/go.mod h1:di3GCKiu9Y+1fs92erCbUvKzPkNyViN3mA0vti/ykEQ=
 github.com/Knetic/govaluate v3.0.1-0.20171022003610-9aa49832a739+incompatible/go.mod h1:r7JcOSlj0wfOMncg0iLm8Leh48TZaKVeNIfJntJ2wa0=
 github.com/Microsoft/go-winio v0.6.1 h1:9/kr64B9VUZrLm5YYwbGtUJnMgqWVOdUAXu6Migciow=
 github.com/Microsoft/go-winio v0.6.1/go.mod h1:LRdKpFKfdobln8UmuiYcKPot9D2v6svN5+sAH+4kjUM=
@@ -110,6 +112,8 @@ github.com/cespare/xxhash/v2 v2.2.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XL
 github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI=
 github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI=
 github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
+github.com/cilium/ebpf v0.11.0 h1:V8gS/bTCCjX9uUnkUFUpPsksM8n1lXBAvHcpiFk1X2Y=
+github.com/cilium/ebpf v0.11.0/go.mod h1:WE7CZAnqOL2RouJ4f1uyNhqr2P4CCvXFIqdRDUgWsVs=
 github.com/circonus-labs/circonus-gometrics v2.3.1+incompatible/go.mod h1:nmEj6Dob7S7YxXgwXpfOuvO54S+tGdZdw9fuRZt25Ag=
 github.com/circonus-labs/circonusllhist v0.1.3/go.mod h1:kMXHVDlOchFAehlya5ePtbp5jckzBHf4XRpQvBOLI+I=
 github.com/clbanning/x2j v0.0.0-20191024224557-825249438eec/go.mod h1:jMjuTZXRI4dUb/I5gc9Hdhagfvm9+RyrPryS/auMzxE=
@@ -119,6 +123,8 @@ github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4 h1:/inchEIKaYC1Akx+H+g
 github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cockroachdb/datadriven v0.0.0-20190809214429-80d97fb3cbaa/go.mod h1:zn76sxSg3SzpJ0PPJaLDCu+Bu0Lg3sKTORVIj19EIF8=
 github.com/codahale/hdrhistogram v0.0.0-20161010025455-3a0bb77429bd/go.mod h1:sE/e/2PUdi/liOCUjSTXgM1o87ZssimdTWN964YiIeI=
+github.com/containerd/cgroups/v3 v3.0.3 h1:S5ByHZ/h9PMe5IOQoN7E+nMc2UcLEM/V48DGDJ9kip0=
+github.com/containerd/cgroups/v3 v3.0.3/go.mod h1:8HBe7V3aWGLFPd/k03swSIsGjZhHI2WzJmticMgVuz0=
 github.com/coreos/go-semver v0.2.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk=
 github.com/coreos/go-systemd v0.0.0-20180511133405-39ca1b05acc7/go.mod h1:F5haX7vjVVG0kc13fIWeqUViNPyEJxv/OmvnBo0Yme4=
 github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs=
@@ -177,6 +183,7 @@ github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2
 github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
 github.com/franela/goblin v0.0.0-20200105215937-c9ffbefa60db/go.mod h1:7dvUGVsVBjqR7JHJk0brhHOZYGmfBYOrK0ZhYMEtBr4=
 github.com/franela/goreq v0.0.0-20171204163338-bcd34c9993f8/go.mod h1:ZhphrRTfi2rbfLwlschooIH4+wKKDR4Pdxhh+TRoA20=
+github.com/frankban/quicktest v1.14.5 h1:dfYrrRyLtiqT9GyKXgdh+k4inNeTvmGbuSgZ3lx3GhA=
 github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
 github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=
 github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM=
@@ -271,6 +278,7 @@ github.com/gobuffalo/packd v0.1.0/go.mod h1:M2Juc+hhDXf/PnmBANFCqx4DM3wRbgDvnVWe
 github.com/gobuffalo/packr/v2 v2.0.9/go.mod h1:emmyGweYTm6Kdper+iywB6YK5YzuKchGtJQZ0Odn4pQ=
 github.com/gobuffalo/packr/v2 v2.2.0/go.mod h1:CaAwI0GPIAv+5wKLtv8Afwl+Cm78K/I/VCm/3ptBN+0=
 github.com/gobuffalo/syncx v0.0.0-20190224160051-33c29581e754/go.mod h1:HhnNqWY95UYwwW3uSASeV7vtgYkT2t16hJgV3AEPUpw=
+github.com/godbus/dbus/v5 v5.0.4 h1:9349emZab16e7zQvpmsbtjc18ykshndd8y2PG3sgJbA=
 github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
 github.com/gogo/googleapis v1.1.0/go.mod h1:gf4bu3Q80BeJ6H1S1vYPm8/ELATdvryBaNFGgqEef3s=
 github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
@@ -599,6 +607,8 @@ github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8
 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
 github.com/opencontainers/image-spec v1.0.2 h1:9yCKha/T5XdGtO0q9Q9a6T5NUCsTn/DrBg0D7ufOcFM=
 github.com/opencontainers/image-spec v1.0.2/go.mod h1:BtxoFyWECRxE4U/7sNtV5W15zMzWCbyJoFRP3s7yZA0=
+github.com/opencontainers/runtime-spec v1.0.2 h1:UfAcuLBJB9Coz72x1hgl8O5RVzTdNiaglX6v2DM6FI0=
+github.com/opencontainers/runtime-spec v1.0.2/go.mod h1:jwyrGlmzljRJv/Fgzds9SsS/C5hL+LL3ko9hs6T5lQ0=
 github.com/opentracing-contrib/go-observer v0.0.0-20170622124052-a52f23424492/go.mod h1:Ngi6UdF0k5OKD5t5wlmGhe/EDKPoUM3BXZSSfIuJbis=
 github.com/opentracing/basictracer-go v1.0.0/go.mod h1:QfBfYuafItcjQuMwinw9GhYKwFXS9KnPs5lxoYwgW74=
 github.com/opentracing/opentracing-go v1.0.2/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
@@ -613,6 +623,8 @@ github.com/pact-foundation/pact-go v1.0.4/go.mod h1:uExwJY4kCzNPcHRj+hCR/HBbOOIw
 github.com/pascaldekloe/goe v0.0.0-20180627143212-57f6aae5913c/go.mod h1:lzWF7FIEvWOWxwDKqyGYQf6ZUaNfKdP144TG7ZOy1lc=
 github.com/pascaldekloe/goe v0.1.0 h1:cBOtyMzM9HTpWjXfbbunk26uA6nG3a8n06Wieeh0MwY=
 github.com/pascaldekloe/goe v0.1.0/go.mod h1:lzWF7FIEvWOWxwDKqyGYQf6ZUaNfKdP144TG7ZOy1lc=
+github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58 h1:onHthvaw9LFnH4t2DcNVpwGmV9E1BkGknEliJkfwQj0=
+github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58/go.mod h1:DXv8WO4yhMYhSNPKjeNKa5WY9YCIEBRbNzFFPJbWO6Y=
 github.com/pborman/uuid v1.2.0/go.mod h1:X/NO0urCmaxf9VXbdlT7C2Yzkj2IKimNn4k+gtPdI/k=
 github.com/pelletier/go-toml v1.7.0/go.mod h1:vwGMzjaWMwyfHwgIBhI2YUM4fB6nL6lVAvS1LBMMhTE=
 github.com/performancecopilot/speed v3.0.0+incompatible/go.mod h1:/CLtqpZ5gBg1M9iaPbIdPPGyKcA8hKdoy6hAWba7Yac=
@@ -700,6 +712,8 @@ github.com/sirupsen/logrus v1.4.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPx
 github.com/sirupsen/logrus v1.4.1/go.mod h1:ni0Sbl8bgC9z8RoU9G6nDWqqs/fq4eDPysMBDgk/93Q=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/sirupsen/logrus v1.6.0/go.mod h1:7uNnSEd1DgxDLC74fIahvMZmmYsHGZGEOFrfsX/uA88=
+github.com/sirupsen/logrus v1.9.0 h1:trlNQbNUG3OdDrDil03MCb1H2o9nJ1x4/5LYw7byDE0=
+github.com/sirupsen/logrus v1.9.0/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
 github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d/go.mod h1:OnSkiWE9lh6wB0YB77sQom3nweQdgAjqCqsofrRNTgc=
 github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
 github.com/soheilhy/cmux v0.1.4/go.mod h1:IM3LyeVVIOuxMH7sFAkER9+bJ4dT7Ms6E4xg4kGIyLM=
@@ -990,6 +1004,7 @@ golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220503163025-988cb79eb6c6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

From 7bbae70b40e7201979ccbcabb9abb1437e3b4dc2 Mon Sep 17 00:00:00 2001
From: Matthieu MOREL <matthieu.morel35@gmail.com>
Date: Tue, 23 Jan 2024 16:08:22 +0100
Subject: [PATCH 104/132] Update OSSF badge link (#13433)

Provide a more user friendly interface

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 5fa6cc49e5b..0042793ff64 100644
--- a/README.md
+++ b/README.md
@@ -14,7 +14,7 @@ examples and guides.</p>
 [![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/486/badge)](https://bestpractices.coreinfrastructure.org/projects/486)
 [![Gitpod ready-to-code](https://img.shields.io/badge/Gitpod-ready--to--code-blue?logo=gitpod)](https://gitpod.io/#https://github.com/prometheus/prometheus)
 [![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/prometheus.svg)](https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened&can=1&q=proj:prometheus)
-[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/prometheus/prometheus/badge)](https://api.securityscorecards.dev/projects/github.com/prometheus/prometheus)
+[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/prometheus/prometheus/badge)](https://securityscorecards.dev/viewer/?uri=github.com/prometheus/prometheus)
 
 </div>
 

From 78411d5e8b803b590ba10bb563caab52292a11a2 Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Tue, 23 Jan 2024 15:53:55 +0000
Subject: [PATCH 105/132] SD Managers taking over responsibility for
 registration of debug metrics (#13375)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

SD Managers take over responsibility for SD metrics registration

---------

Signed-off-by: Paulin Todev <paulin.todev@gmail.com>
Signed-off-by: Björn Rabenstein <github@rabenste.in>
Co-authored-by: Björn Rabenstein <github@rabenste.in>
---
 cmd/prometheus/main.go                        | 15 ++-
 cmd/promtool/sd.go                            | 17 +++-
 discovery/aws/ec2.go                          | 28 ++++--
 discovery/aws/lightsail.go                    | 29 ++++--
 discovery/aws/metrics_ec2.go                  | 32 ++++++
 discovery/aws/metrics_lightsail.go            | 32 ++++++
 discovery/azure/azure.go                      | 67 +++++++------
 discovery/azure/metrics.go                    | 64 ++++++++++++
 discovery/consul/consul.go                    | 91 ++++++-----------
 discovery/consul/consul_test.go               | 37 +++++--
 discovery/consul/metrics.go                   | 73 ++++++++++++++
 discovery/digitalocean/digitalocean.go        | 26 +++--
 discovery/digitalocean/digitalocean_test.go   | 12 ++-
 discovery/digitalocean/metrics.go             | 32 ++++++
 discovery/discoverer_metrics_noop.go          | 28 ++++++
 discovery/discovery.go                        | 47 +++++++--
 discovery/dns/dns.go                          | 53 +++++-----
 discovery/dns/dns_test.go                     | 11 ++-
 discovery/dns/metrics.go                      | 66 +++++++++++++
 discovery/eureka/eureka.go                    | 27 +++--
 discovery/eureka/eureka_test.go               | 13 ++-
 discovery/eureka/metrics.go                   | 32 ++++++
 discovery/file/file.go                        | 66 +++++--------
 discovery/file/file_test.go                   | 24 +++--
 discovery/file/metrics.go                     | 76 ++++++++++++++
 discovery/gce/gce.go                          | 26 +++--
 discovery/gce/metrics.go                      | 32 ++++++
 discovery/hetzner/hetzner.go                  | 26 +++--
 discovery/hetzner/metrics.go                  | 32 ++++++
 discovery/http/http.go                        | 45 +++++----
 discovery/http/http_test.go                   | 44 +++++++--
 discovery/http/metrics.go                     | 57 +++++++++++
 discovery/ionos/ionos.go                      | 30 ++++--
 discovery/ionos/metrics.go                    | 32 ++++++
 discovery/kubernetes/kubernetes.go            | 65 ++++--------
 discovery/kubernetes/kubernetes_test.go       | 25 +++--
 discovery/kubernetes/metrics.go               | 75 ++++++++++++++
 discovery/legacymanager/manager.go            | 12 ++-
 discovery/legacymanager/manager_test.go       | 58 +++++++++--
 discovery/linode/linode.go                    | 37 ++++---
 discovery/linode/linode_test.go               | 12 ++-
 discovery/linode/metrics.go                   | 57 +++++++++++
 discovery/manager.go                          | 26 ++++-
 discovery/manager_test.go                     | 98 ++++++++++++++++---
 discovery/marathon/marathon.go                | 26 +++--
 discovery/marathon/marathon_test.go           | 26 ++++-
 discovery/marathon/metrics.go                 | 32 ++++++
 discovery/metrics.go                          |  2 +-
 discovery/metrics_refresh.go                  | 75 ++++++++++++++
 discovery/moby/docker.go                      | 26 +++--
 discovery/moby/docker_test.go                 | 11 ++-
 discovery/moby/dockerswarm.go                 | 26 +++--
 discovery/moby/metrics_docker.go              | 32 ++++++
 discovery/moby/metrics_dockerswarm.go         | 32 ++++++
 discovery/moby/nodes_test.go                  | 11 ++-
 discovery/moby/services_test.go               | 20 +++-
 discovery/moby/tasks_test.go                  | 11 ++-
 discovery/nomad/metrics.go                    | 57 +++++++++++
 discovery/nomad/nomad.go                      | 37 ++++---
 discovery/nomad/nomad_test.go                 | 22 ++++-
 discovery/openstack/metrics.go                | 32 ++++++
 discovery/openstack/openstack.go              | 26 +++--
 discovery/ovhcloud/metrics.go                 | 32 ++++++
 discovery/ovhcloud/ovhcloud.go                | 26 +++--
 discovery/ovhcloud/ovhcloud_test.go           | 12 ++-
 discovery/puppetdb/metrics.go                 | 32 ++++++
 discovery/puppetdb/puppetdb.go                | 26 +++--
 discovery/puppetdb/puppetdb_test.go           | 47 ++++++++-
 discovery/refresh/refresh.go                  | 56 +++--------
 discovery/refresh/refresh_test.go             | 16 ++-
 discovery/registry.go                         | 23 +++++
 discovery/scaleway/metrics.go                 | 32 ++++++
 discovery/scaleway/scaleway.go                | 26 +++--
 discovery/triton/metrics.go                   | 32 ++++++
 discovery/triton/triton.go                    | 26 +++--
 discovery/triton/triton_test.go               | 43 ++++++--
 discovery/uyuni/metrics.go                    | 32 ++++++
 discovery/uyuni/uyuni.go                      | 26 +++--
 discovery/uyuni/uyuni_test.go                 | 22 ++++-
 discovery/vultr/metrics.go                    | 32 ++++++
 discovery/vultr/vultr.go                      | 26 +++--
 discovery/vultr/vultr_test.go                 | 12 ++-
 discovery/xds/kuma.go                         | 44 +++------
 discovery/xds/kuma_test.go                    | 16 ++-
 discovery/xds/metrics.go                      | 73 ++++++++++++++
 discovery/xds/xds.go                          | 21 +---
 discovery/xds/xds_test.go                     | 91 ++++++++++-------
 discovery/zookeeper/zookeeper.go              | 11 +++
 .../examples/custom-sd/adapter-usage/main.go  | 13 ++-
 .../examples/custom-sd/adapter/adapter.go     |  4 +-
 .../custom-sd/adapter/adapter_test.go         | 10 +-
 91 files changed, 2523 insertions(+), 630 deletions(-)
 create mode 100644 discovery/aws/metrics_ec2.go
 create mode 100644 discovery/aws/metrics_lightsail.go
 create mode 100644 discovery/azure/metrics.go
 create mode 100644 discovery/consul/metrics.go
 create mode 100644 discovery/digitalocean/metrics.go
 create mode 100644 discovery/discoverer_metrics_noop.go
 create mode 100644 discovery/dns/metrics.go
 create mode 100644 discovery/eureka/metrics.go
 create mode 100644 discovery/file/metrics.go
 create mode 100644 discovery/gce/metrics.go
 create mode 100644 discovery/hetzner/metrics.go
 create mode 100644 discovery/http/metrics.go
 create mode 100644 discovery/ionos/metrics.go
 create mode 100644 discovery/kubernetes/metrics.go
 create mode 100644 discovery/linode/metrics.go
 create mode 100644 discovery/marathon/metrics.go
 create mode 100644 discovery/metrics_refresh.go
 create mode 100644 discovery/moby/metrics_docker.go
 create mode 100644 discovery/moby/metrics_dockerswarm.go
 create mode 100644 discovery/nomad/metrics.go
 create mode 100644 discovery/openstack/metrics.go
 create mode 100644 discovery/ovhcloud/metrics.go
 create mode 100644 discovery/puppetdb/metrics.go
 create mode 100644 discovery/scaleway/metrics.go
 create mode 100644 discovery/triton/metrics.go
 create mode 100644 discovery/uyuni/metrics.go
 create mode 100644 discovery/vultr/metrics.go
 create mode 100644 discovery/xds/metrics.go

diff --git a/cmd/prometheus/main.go b/cmd/prometheus/main.go
index d73652fbadd..f7244646e23 100644
--- a/cmd/prometheus/main.go
+++ b/cmd/prometheus/main.go
@@ -644,9 +644,16 @@ func main() {
 		level.Error(logger).Log("msg", "failed to register Kubernetes client metrics", "err", err)
 		os.Exit(1)
 	}
+
+	sdMetrics, err := discovery.CreateAndRegisterSDMetrics(prometheus.DefaultRegisterer)
+	if err != nil {
+		level.Error(logger).Log("msg", "failed to register service discovery metrics", "err", err)
+		os.Exit(1)
+	}
+
 	if cfg.enableNewSDManager {
 		{
-			discMgr := discovery.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), prometheus.DefaultRegisterer, discovery.Name("scrape"))
+			discMgr := discovery.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), prometheus.DefaultRegisterer, sdMetrics, discovery.Name("scrape"))
 			if discMgr == nil {
 				level.Error(logger).Log("msg", "failed to create a discovery manager scrape")
 				os.Exit(1)
@@ -655,7 +662,7 @@ func main() {
 		}
 
 		{
-			discMgr := discovery.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), prometheus.DefaultRegisterer, discovery.Name("notify"))
+			discMgr := discovery.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), prometheus.DefaultRegisterer, sdMetrics, discovery.Name("notify"))
 			if discMgr == nil {
 				level.Error(logger).Log("msg", "failed to create a discovery manager notify")
 				os.Exit(1)
@@ -664,7 +671,7 @@ func main() {
 		}
 	} else {
 		{
-			discMgr := legacymanager.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), prometheus.DefaultRegisterer, legacymanager.Name("scrape"))
+			discMgr := legacymanager.NewManager(ctxScrape, log.With(logger, "component", "discovery manager scrape"), prometheus.DefaultRegisterer, sdMetrics, legacymanager.Name("scrape"))
 			if discMgr == nil {
 				level.Error(logger).Log("msg", "failed to create a discovery manager scrape")
 				os.Exit(1)
@@ -673,7 +680,7 @@ func main() {
 		}
 
 		{
-			discMgr := legacymanager.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), prometheus.DefaultRegisterer, legacymanager.Name("notify"))
+			discMgr := legacymanager.NewManager(ctxNotify, log.With(logger, "component", "discovery manager notify"), prometheus.DefaultRegisterer, sdMetrics, legacymanager.Name("notify"))
 			if discMgr == nil {
 				level.Error(logger).Log("msg", "failed to create a discovery manager notify")
 				os.Exit(1)
diff --git a/cmd/promtool/sd.go b/cmd/promtool/sd.go
index 155152e1acf..4892743fc06 100644
--- a/cmd/promtool/sd.go
+++ b/cmd/promtool/sd.go
@@ -78,12 +78,25 @@ func CheckSD(sdConfigFiles, sdJobName string, sdTimeout time.Duration, noDefault
 	defer cancel()
 
 	for _, cfg := range scrapeConfig.ServiceDiscoveryConfigs {
-		d, err := cfg.NewDiscoverer(discovery.DiscovererOptions{Logger: logger, Registerer: registerer})
+		reg := prometheus.NewRegistry()
+		refreshMetrics := discovery.NewRefreshMetrics(reg)
+		metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+		err := metrics.Register()
+		if err != nil {
+			fmt.Fprintln(os.Stderr, "Could not register service discovery metrics", err)
+			return failureExitCode
+		}
+
+		d, err := cfg.NewDiscoverer(discovery.DiscovererOptions{Logger: logger, Metrics: metrics})
 		if err != nil {
 			fmt.Fprintln(os.Stderr, "Could not create new discoverer", err)
 			return failureExitCode
 		}
-		go d.Run(ctx, targetGroupChan)
+		go func() {
+			d.Run(ctx, targetGroupChan)
+			metrics.Unregister()
+			refreshMetrics.Unregister()
+		}()
 	}
 
 	var targetGroups []*targetgroup.Group
diff --git a/discovery/aws/ec2.go b/discovery/aws/ec2.go
index 40e6e7cb798..aa79fd9c62e 100644
--- a/discovery/aws/ec2.go
+++ b/discovery/aws/ec2.go
@@ -97,12 +97,19 @@ type EC2SDConfig struct {
 	HTTPClientConfig config.HTTPClientConfig `yaml:",inline"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*EC2SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &ec2Metrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the EC2 Config.
 func (*EC2SDConfig) Name() string { return "ec2" }
 
 // NewDiscoverer returns a Discoverer for the EC2 Config.
 func (c *EC2SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewEC2Discovery(c, opts.Logger, opts.Registerer), nil
+	return NewEC2Discovery(c, opts.Logger, opts.Metrics)
 }
 
 // UnmarshalYAML implements the yaml.Unmarshaler interface for the EC2 Config.
@@ -148,7 +155,12 @@ type EC2Discovery struct {
 }
 
 // NewEC2Discovery returns a new EC2Discovery which periodically refreshes its targets.
-func NewEC2Discovery(conf *EC2SDConfig, logger log.Logger, reg prometheus.Registerer) *EC2Discovery {
+func NewEC2Discovery(conf *EC2SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*EC2Discovery, error) {
+	m, ok := metrics.(*ec2Metrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -158,14 +170,14 @@ func NewEC2Discovery(conf *EC2SDConfig, logger log.Logger, reg prometheus.Regist
 	}
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "ec2",
-			Interval: time.Duration(d.cfg.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "ec2",
+			Interval:            time.Duration(d.cfg.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
-	return d
+	return d, nil
 }
 
 func (d *EC2Discovery) ec2Client(context.Context) (*ec2.EC2, error) {
diff --git a/discovery/aws/lightsail.go b/discovery/aws/lightsail.go
index 5382ea0159e..86b138be555 100644
--- a/discovery/aws/lightsail.go
+++ b/discovery/aws/lightsail.go
@@ -80,12 +80,19 @@ type LightsailSDConfig struct {
 	HTTPClientConfig config.HTTPClientConfig `yaml:",inline"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*LightsailSDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &lightsailMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Lightsail Config.
 func (*LightsailSDConfig) Name() string { return "lightsail" }
 
 // NewDiscoverer returns a Discoverer for the Lightsail Config.
 func (c *LightsailSDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewLightsailDiscovery(c, opts.Logger, opts.Registerer), nil
+	return NewLightsailDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // UnmarshalYAML implements the yaml.Unmarshaler interface for the Lightsail Config.
@@ -122,23 +129,29 @@ type LightsailDiscovery struct {
 }
 
 // NewLightsailDiscovery returns a new LightsailDiscovery which periodically refreshes its targets.
-func NewLightsailDiscovery(conf *LightsailSDConfig, logger log.Logger, reg prometheus.Registerer) *LightsailDiscovery {
+func NewLightsailDiscovery(conf *LightsailSDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*LightsailDiscovery, error) {
+	m, ok := metrics.(*lightsailMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
+
 	d := &LightsailDiscovery{
 		cfg: conf,
 	}
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "lightsail",
-			Interval: time.Duration(d.cfg.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "lightsail",
+			Interval:            time.Duration(d.cfg.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
-	return d
+	return d, nil
 }
 
 func (d *LightsailDiscovery) lightsailClient() (*lightsail.Lightsail, error) {
diff --git a/discovery/aws/metrics_ec2.go b/discovery/aws/metrics_ec2.go
new file mode 100644
index 00000000000..73c061c3d88
--- /dev/null
+++ b/discovery/aws/metrics_ec2.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package aws
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+type ec2Metrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+var _ discovery.DiscovererMetrics = (*ec2Metrics)(nil)
+
+// Register implements discovery.DiscovererMetrics.
+func (m *ec2Metrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *ec2Metrics) Unregister() {}
diff --git a/discovery/aws/metrics_lightsail.go b/discovery/aws/metrics_lightsail.go
new file mode 100644
index 00000000000..69593e701d5
--- /dev/null
+++ b/discovery/aws/metrics_lightsail.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package aws
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+type lightsailMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+var _ discovery.DiscovererMetrics = (*lightsailMetrics)(nil)
+
+// Register implements discovery.DiscovererMetrics.
+func (m *lightsailMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *lightsailMetrics) Unregister() {}
diff --git a/discovery/azure/azure.go b/discovery/azure/azure.go
index 64f02ec7a27..e5e6109b258 100644
--- a/discovery/azure/azure.go
+++ b/discovery/azure/azure.go
@@ -120,12 +120,17 @@ type SDConfig struct {
 	HTTPClientConfig config_util.HTTPClientConfig `yaml:",inline"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return newDiscovererMetrics(reg, rmi)
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "azure" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 func validateAuthParam(param, name string) error {
@@ -168,45 +173,39 @@ func (c *SDConfig) UnmarshalYAML(unmarshal func(interface{}) error) error {
 
 type Discovery struct {
 	*refresh.Discovery
-	logger        log.Logger
-	cfg           *SDConfig
-	port          int
-	cache         *cache.Cache[string, *armnetwork.Interface]
-	failuresCount prometheus.Counter
-	cacheHitCount prometheus.Counter
+	logger  log.Logger
+	cfg     *SDConfig
+	port    int
+	cache   *cache.Cache[string, *armnetwork.Interface]
+	metrics *azureMetrics
 }
 
 // NewDiscovery returns a new AzureDiscovery which periodically refreshes its targets.
-func NewDiscovery(cfg *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(cfg *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*azureMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
 	l := cache.New(cache.AsLRU[string, *armnetwork.Interface](lru.WithCapacity(5000)))
 	d := &Discovery{
-		cfg:    cfg,
-		port:   cfg.Port,
-		logger: logger,
-		cache:  l,
-		failuresCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Name: "prometheus_sd_azure_failures_total",
-				Help: "Number of Azure service discovery refresh failures.",
-			}),
-		cacheHitCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Name: "prometheus_sd_azure_cache_hit_total",
-				Help: "Number of cache hit during refresh.",
-			}),
+		cfg:     cfg,
+		port:    cfg.Port,
+		logger:  logger,
+		cache:   l,
+		metrics: m,
 	}
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "azure",
-			Interval: time.Duration(cfg.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
-			Metrics:  []prometheus.Collector{d.failuresCount, d.cacheHitCount},
+			Logger:              logger,
+			Mech:                "azure",
+			Interval:            time.Duration(cfg.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 
@@ -333,14 +332,14 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 
 	client, err := createAzureClient(*d.cfg)
 	if err != nil {
-		d.failuresCount.Inc()
+		d.metrics.failuresCount.Inc()
 		return nil, fmt.Errorf("could not create Azure client: %w", err)
 	}
 	client.logger = d.logger
 
 	machines, err := client.getVMs(ctx, d.cfg.ResourceGroup)
 	if err != nil {
-		d.failuresCount.Inc()
+		d.metrics.failuresCount.Inc()
 		return nil, fmt.Errorf("could not get virtual machines: %w", err)
 	}
 
@@ -349,14 +348,14 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 	// Load the vms managed by scale sets.
 	scaleSets, err := client.getScaleSets(ctx, d.cfg.ResourceGroup)
 	if err != nil {
-		d.failuresCount.Inc()
+		d.metrics.failuresCount.Inc()
 		return nil, fmt.Errorf("could not get virtual machine scale sets: %w", err)
 	}
 
 	for _, scaleSet := range scaleSets {
 		scaleSetVms, err := client.getScaleSetVMs(ctx, scaleSet)
 		if err != nil {
-			d.failuresCount.Inc()
+			d.metrics.failuresCount.Inc()
 			return nil, fmt.Errorf("could not get virtual machine scale set vms: %w", err)
 		}
 		machines = append(machines, scaleSetVms...)
@@ -407,7 +406,7 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 				var networkInterface *armnetwork.Interface
 				if v, ok := d.getFromCache(nicID); ok {
 					networkInterface = v
-					d.cacheHitCount.Add(1)
+					d.metrics.cacheHitCount.Add(1)
 				} else {
 					if vm.ScaleSet == "" {
 						networkInterface, err = client.getVMNetworkInterfaceByID(ctx, nicID)
@@ -480,7 +479,7 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 	var tg targetgroup.Group
 	for tgt := range ch {
 		if tgt.err != nil {
-			d.failuresCount.Inc()
+			d.metrics.failuresCount.Inc()
 			return nil, fmt.Errorf("unable to complete Azure service discovery: %w", tgt.err)
 		}
 		if tgt.labelSet != nil {
diff --git a/discovery/azure/metrics.go b/discovery/azure/metrics.go
new file mode 100644
index 00000000000..3e3dbdbfbbc
--- /dev/null
+++ b/discovery/azure/metrics.go
@@ -0,0 +1,64 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package azure
+
+import (
+	"github.com/prometheus/client_golang/prometheus"
+
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*azureMetrics)(nil)
+
+type azureMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+
+	failuresCount prometheus.Counter
+	cacheHitCount prometheus.Counter
+
+	metricRegisterer discovery.MetricRegisterer
+}
+
+func newDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	m := &azureMetrics{
+		refreshMetrics: rmi,
+		failuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_azure_failures_total",
+				Help: "Number of Azure service discovery refresh failures.",
+			}),
+		cacheHitCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_azure_cache_hit_total",
+				Help: "Number of cache hit during refresh.",
+			}),
+	}
+
+	m.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{
+		m.failuresCount,
+		m.cacheHitCount,
+	})
+
+	return m
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *azureMetrics) Register() error {
+	return m.metricRegisterer.RegisterMetrics()
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *azureMetrics) Unregister() {
+	m.metricRegisterer.UnregisterMetrics()
+}
diff --git a/discovery/consul/consul.go b/discovery/consul/consul.go
index 50f171a78a7..40eed7697a5 100644
--- a/discovery/consul/consul.go
+++ b/discovery/consul/consul.go
@@ -119,12 +119,17 @@ type SDConfig struct {
 	HTTPClientConfig config.HTTPClientConfig `yaml:",inline"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return newDiscovererMetrics(reg, rmi)
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "consul" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -161,27 +166,28 @@ func (c *SDConfig) UnmarshalYAML(unmarshal func(interface{}) error) error {
 // Discovery retrieves target information from a Consul server
 // and updates them via watches.
 type Discovery struct {
-	client              *consul.Client
-	clientDatacenter    string
-	clientNamespace     string
-	clientPartition     string
-	tagSeparator        string
-	watchedServices     []string // Set of services which will be discovered.
-	watchedTags         []string // Tags used to filter instances of a service.
-	watchedNodeMeta     map[string]string
-	allowStale          bool
-	refreshInterval     time.Duration
-	finalizer           func()
-	logger              log.Logger
-	rpcFailuresCount    prometheus.Counter
-	rpcDuration         *prometheus.SummaryVec
-	servicesRPCDuration prometheus.Observer
-	serviceRPCDuration  prometheus.Observer
-	metricRegisterer    discovery.MetricRegisterer
+	client           *consul.Client
+	clientDatacenter string
+	clientNamespace  string
+	clientPartition  string
+	tagSeparator     string
+	watchedServices  []string // Set of services which will be discovered.
+	watchedTags      []string // Tags used to filter instances of a service.
+	watchedNodeMeta  map[string]string
+	allowStale       bool
+	refreshInterval  time.Duration
+	finalizer        func()
+	logger           log.Logger
+	metrics          *consulMetrics
 }
 
 // NewDiscovery returns a new Discovery for the given config.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*consulMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -219,34 +225,8 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 		clientPartition:  conf.Partition,
 		finalizer:        wrapper.CloseIdleConnections,
 		logger:           logger,
-		rpcFailuresCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Namespace: namespace,
-				Name:      "sd_consul_rpc_failures_total",
-				Help:      "The number of Consul RPC call failures.",
-			}),
-		rpcDuration: prometheus.NewSummaryVec(
-			prometheus.SummaryOpts{
-				Namespace:  namespace,
-				Name:       "sd_consul_rpc_duration_seconds",
-				Help:       "The duration of a Consul RPC call in seconds.",
-				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
-			},
-			[]string{"endpoint", "call"},
-		),
-	}
-
-	cd.metricRegisterer = discovery.NewMetricRegisterer(
-		reg,
-		[]prometheus.Collector{
-			cd.rpcFailuresCount,
-			cd.rpcDuration,
-		},
-	)
-
-	// Initialize metric vectors.
-	cd.servicesRPCDuration = cd.rpcDuration.WithLabelValues("catalog", "services")
-	cd.serviceRPCDuration = cd.rpcDuration.WithLabelValues("catalog", "service")
+		metrics:          m,
+	}
 
 	return cd, nil
 }
@@ -303,7 +283,7 @@ func (d *Discovery) getDatacenter() error {
 	info, err := d.client.Agent().Self()
 	if err != nil {
 		level.Error(d.logger).Log("msg", "Error retrieving datacenter name", "err", err)
-		d.rpcFailuresCount.Inc()
+		d.metrics.rpcFailuresCount.Inc()
 		return err
 	}
 
@@ -344,13 +324,6 @@ func (d *Discovery) initialize(ctx context.Context) {
 
 // Run implements the Discoverer interface.
 func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
-	err := d.metricRegisterer.RegisterMetrics()
-	if err != nil {
-		level.Error(d.logger).Log("msg", "Unable to register metrics", "err", err.Error())
-		return
-	}
-	defer d.metricRegisterer.UnregisterMetrics()
-
 	if d.finalizer != nil {
 		defer d.finalizer()
 	}
@@ -399,7 +372,7 @@ func (d *Discovery) watchServices(ctx context.Context, ch chan<- []*targetgroup.
 	t0 := time.Now()
 	srvs, meta, err := catalog.Services(opts.WithContext(ctx))
 	elapsed := time.Since(t0)
-	d.servicesRPCDuration.Observe(elapsed.Seconds())
+	d.metrics.servicesRPCDuration.Observe(elapsed.Seconds())
 
 	// Check the context before in order to exit early.
 	select {
@@ -410,7 +383,7 @@ func (d *Discovery) watchServices(ctx context.Context, ch chan<- []*targetgroup.
 
 	if err != nil {
 		level.Error(d.logger).Log("msg", "Error refreshing service list", "err", err)
-		d.rpcFailuresCount.Inc()
+		d.metrics.rpcFailuresCount.Inc()
 		time.Sleep(retryInterval)
 		return
 	}
@@ -490,8 +463,8 @@ func (d *Discovery) watchService(ctx context.Context, ch chan<- []*targetgroup.G
 		},
 		tagSeparator:       d.tagSeparator,
 		logger:             d.logger,
-		rpcFailuresCount:   d.rpcFailuresCount,
-		serviceRPCDuration: d.serviceRPCDuration,
+		rpcFailuresCount:   d.metrics.rpcFailuresCount,
+		serviceRPCDuration: d.metrics.serviceRPCDuration,
 	}
 
 	go func() {
diff --git a/discovery/consul/consul_test.go b/discovery/consul/consul_test.go
index 97cb8fbc9dc..040040ae972 100644
--- a/discovery/consul/consul_test.go
+++ b/discovery/consul/consul_test.go
@@ -29,6 +29,7 @@ import (
 	"go.uber.org/goleak"
 	"gopkg.in/yaml.v2"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -36,11 +37,25 @@ func TestMain(m *testing.M) {
 	goleak.VerifyTestMain(m)
 }
 
+// TODO: Add ability to unregister metrics?
+func NewTestMetrics(t *testing.T, conf discovery.Config, reg prometheus.Registerer) discovery.DiscovererMetrics {
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	require.NoError(t, refreshMetrics.Register())
+
+	metrics := conf.NewDiscovererMetrics(prometheus.NewRegistry(), refreshMetrics)
+	require.NoError(t, metrics.Register())
+
+	return metrics
+}
+
 func TestConfiguredService(t *testing.T) {
 	conf := &SDConfig{
 		Services: []string{"configuredServiceName"},
 	}
-	consulDiscovery, err := NewDiscovery(conf, nil, prometheus.NewRegistry())
+
+	metrics := NewTestMetrics(t, conf, prometheus.NewRegistry())
+
+	consulDiscovery, err := NewDiscovery(conf, nil, metrics)
 	if err != nil {
 		t.Errorf("Unexpected error when initializing discovery %v", err)
 	}
@@ -57,7 +72,10 @@ func TestConfiguredServiceWithTag(t *testing.T) {
 		Services:    []string{"configuredServiceName"},
 		ServiceTags: []string{"http"},
 	}
-	consulDiscovery, err := NewDiscovery(conf, nil, prometheus.NewRegistry())
+
+	metrics := NewTestMetrics(t, conf, prometheus.NewRegistry())
+
+	consulDiscovery, err := NewDiscovery(conf, nil, metrics)
 	if err != nil {
 		t.Errorf("Unexpected error when initializing discovery %v", err)
 	}
@@ -152,7 +170,9 @@ func TestConfiguredServiceWithTags(t *testing.T) {
 	}
 
 	for _, tc := range cases {
-		consulDiscovery, err := NewDiscovery(tc.conf, nil, prometheus.NewRegistry())
+		metrics := NewTestMetrics(t, tc.conf, prometheus.NewRegistry())
+
+		consulDiscovery, err := NewDiscovery(tc.conf, nil, metrics)
 		if err != nil {
 			t.Errorf("Unexpected error when initializing discovery %v", err)
 		}
@@ -160,13 +180,15 @@ func TestConfiguredServiceWithTags(t *testing.T) {
 		if ret != tc.shouldWatch {
 			t.Errorf("Expected should watch? %t, got %t. Watched service and tags: %s %+v, input was %s %+v", tc.shouldWatch, ret, tc.conf.Services, tc.conf.ServiceTags, tc.serviceName, tc.serviceTags)
 		}
-
 	}
 }
 
 func TestNonConfiguredService(t *testing.T) {
 	conf := &SDConfig{}
-	consulDiscovery, err := NewDiscovery(conf, nil, prometheus.NewRegistry())
+
+	metrics := NewTestMetrics(t, conf, prometheus.NewRegistry())
+
+	consulDiscovery, err := NewDiscovery(conf, nil, metrics)
 	if err != nil {
 		t.Errorf("Unexpected error when initializing discovery %v", err)
 	}
@@ -263,7 +285,10 @@ func newServer(t *testing.T) (*httptest.Server, *SDConfig) {
 
 func newDiscovery(t *testing.T, config *SDConfig) *Discovery {
 	logger := log.NewNopLogger()
-	d, err := NewDiscovery(config, logger, prometheus.NewRegistry())
+
+	metrics := NewTestMetrics(t, config, prometheus.NewRegistry())
+
+	d, err := NewDiscovery(config, logger, metrics)
 	require.NoError(t, err)
 	return d
 }
diff --git a/discovery/consul/metrics.go b/discovery/consul/metrics.go
new file mode 100644
index 00000000000..8266e7cc609
--- /dev/null
+++ b/discovery/consul/metrics.go
@@ -0,0 +1,73 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package consul
+
+import (
+	"github.com/prometheus/client_golang/prometheus"
+
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*consulMetrics)(nil)
+
+type consulMetrics struct {
+	rpcFailuresCount prometheus.Counter
+	rpcDuration      *prometheus.SummaryVec
+
+	servicesRPCDuration prometheus.Observer
+	serviceRPCDuration  prometheus.Observer
+
+	metricRegisterer discovery.MetricRegisterer
+}
+
+func newDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	m := &consulMetrics{
+		rpcFailuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Namespace: namespace,
+				Name:      "sd_consul_rpc_failures_total",
+				Help:      "The number of Consul RPC call failures.",
+			}),
+		rpcDuration: prometheus.NewSummaryVec(
+			prometheus.SummaryOpts{
+				Namespace:  namespace,
+				Name:       "sd_consul_rpc_duration_seconds",
+				Help:       "The duration of a Consul RPC call in seconds.",
+				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
+			},
+			[]string{"endpoint", "call"},
+		),
+	}
+
+	m.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{
+		m.rpcFailuresCount,
+		m.rpcDuration,
+	})
+
+	// Initialize metric vectors.
+	m.servicesRPCDuration = m.rpcDuration.WithLabelValues("catalog", "services")
+	m.serviceRPCDuration = m.rpcDuration.WithLabelValues("catalog", "service")
+
+	return m
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *consulMetrics) Register() error {
+	return m.metricRegisterer.RegisterMetrics()
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *consulMetrics) Unregister() {
+	m.metricRegisterer.UnregisterMetrics()
+}
diff --git a/discovery/digitalocean/digitalocean.go b/discovery/digitalocean/digitalocean.go
index 970258de040..18380b7296f 100644
--- a/discovery/digitalocean/digitalocean.go
+++ b/discovery/digitalocean/digitalocean.go
@@ -63,6 +63,13 @@ func init() {
 	discovery.RegisterConfig(&SDConfig{})
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &digitaloceanMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // SDConfig is the configuration for DigitalOcean based service discovery.
 type SDConfig struct {
 	HTTPClientConfig config.HTTPClientConfig `yaml:",inline"`
@@ -76,7 +83,7 @@ func (*SDConfig) Name() string { return "digitalocean" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -104,7 +111,12 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*digitaloceanMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	d := &Discovery{
 		port: conf.Port,
 	}
@@ -127,11 +139,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "digitalocean",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "digitalocean",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
diff --git a/discovery/digitalocean/digitalocean_test.go b/discovery/digitalocean/digitalocean_test.go
index a959b312c10..841b5ef977a 100644
--- a/discovery/digitalocean/digitalocean_test.go
+++ b/discovery/digitalocean/digitalocean_test.go
@@ -23,6 +23,8 @@ import (
 	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
+
+	"github.com/prometheus/prometheus/discovery"
 )
 
 type DigitalOceanSDTestSuite struct {
@@ -47,7 +49,15 @@ func TestDigitalOceanSDRefresh(t *testing.T) {
 
 	cfg := DefaultSDConfig
 	cfg.HTTPClientConfig.BearerToken = tokenID
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 	endpoint, err := url.Parse(sdmock.Mock.Endpoint())
 	require.NoError(t, err)
diff --git a/discovery/digitalocean/metrics.go b/discovery/digitalocean/metrics.go
new file mode 100644
index 00000000000..91cfd9bf30e
--- /dev/null
+++ b/discovery/digitalocean/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package digitalocean
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*digitaloceanMetrics)(nil)
+
+type digitaloceanMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *digitaloceanMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *digitaloceanMetrics) Unregister() {}
diff --git a/discovery/discoverer_metrics_noop.go b/discovery/discoverer_metrics_noop.go
new file mode 100644
index 00000000000..638317ace10
--- /dev/null
+++ b/discovery/discoverer_metrics_noop.go
@@ -0,0 +1,28 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package discovery
+
+// Create a dummy metrics struct, because this SD doesn't have any metrics.
+type NoopDiscovererMetrics struct{}
+
+var _ DiscovererMetrics = (*NoopDiscovererMetrics)(nil)
+
+// Register implements discovery.DiscovererMetrics.
+func (*NoopDiscovererMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (*NoopDiscovererMetrics) Unregister() {
+}
diff --git a/discovery/discovery.go b/discovery/discovery.go
index acc4c1efe95..a5826f8176c 100644
--- a/discovery/discovery.go
+++ b/discovery/discovery.go
@@ -39,24 +39,47 @@ type Discoverer interface {
 	Run(ctx context.Context, up chan<- []*targetgroup.Group)
 }
 
+// Internal metrics of service discovery mechanisms.
+type DiscovererMetrics interface {
+	Register() error
+	Unregister()
+}
+
 // DiscovererOptions provides options for a Discoverer.
 type DiscovererOptions struct {
 	Logger log.Logger
 
-	// A registerer for the Discoverer's metrics.
-	// Some Discoverers may ignore this registerer and use the global one instead.
-	// For now this will work, because the Prometheus `main` function uses the global registry.
-	// However, in the future the Prometheus `main` function will be updated to not use the global registry.
-	// Hence, if a discoverer wants its metrics to be visible via the Prometheus executable's
-	// `/metrics` endpoint, it should use this explicit registerer.
-	// TODO(ptodev): Update this comment once the Prometheus `main` function does not use the global registry.
-	Registerer prometheus.Registerer
+	Metrics DiscovererMetrics
 
 	// Extra HTTP client options to expose to Discoverers. This field may be
 	// ignored; Discoverer implementations must opt-in to reading it.
 	HTTPClientOptions []config.HTTPClientOption
 }
 
+// Metrics used by the "refresh" package.
+// We define them here in the "discovery" package in order to avoid a cyclic dependency between
+// "discovery" and "refresh".
+type RefreshMetrics struct {
+	Failures prometheus.Counter
+	Duration prometheus.Observer
+}
+
+// Instantiate the metrics used by the "refresh" package.
+type RefreshMetricsInstantiator interface {
+	Instantiate(mech string) *RefreshMetrics
+}
+
+// An interface for registering, unregistering, and instantiating metrics for the "refresh" package.
+// Refresh metrics are registered and unregistered outside of the service discovery mechanism.
+// This is so that the same metrics can be reused across different service discovery mechanisms.
+// To manage refresh metrics inside the SD mechanism, we'd need to use const labels which are
+// specific to that SD. However, doing so would also expose too many unused metrics on
+// the Prometheus /metrics endpoint.
+type RefreshMetricsManager interface {
+	DiscovererMetrics
+	RefreshMetricsInstantiator
+}
+
 // A Config provides the configuration and constructor for a Discoverer.
 type Config interface {
 	// Name returns the name of the discovery mechanism.
@@ -65,6 +88,9 @@ type Config interface {
 	// NewDiscoverer returns a Discoverer for the Config
 	// with the given DiscovererOptions.
 	NewDiscoverer(DiscovererOptions) (Discoverer, error)
+
+	// NewDiscovererMetrics returns the metrics used by the service discovery.
+	NewDiscovererMetrics(prometheus.Registerer, RefreshMetricsInstantiator) DiscovererMetrics
 }
 
 // Configs is a slice of Config values that uses custom YAML marshaling and unmarshaling
@@ -119,6 +145,11 @@ func (c StaticConfig) NewDiscoverer(DiscovererOptions) (Discoverer, error) {
 	return staticDiscoverer(c), nil
 }
 
+// No metrics are needed for this service discovery mechanism.
+func (c StaticConfig) NewDiscovererMetrics(prometheus.Registerer, RefreshMetricsInstantiator) DiscovererMetrics {
+	return &NoopDiscovererMetrics{}
+}
+
 type staticDiscoverer []*targetgroup.Group
 
 func (c staticDiscoverer) Run(ctx context.Context, up chan<- []*targetgroup.Group) {
diff --git a/discovery/dns/dns.go b/discovery/dns/dns.go
index 9b6bd6741e6..cf56a2ad025 100644
--- a/discovery/dns/dns.go
+++ b/discovery/dns/dns.go
@@ -67,12 +67,17 @@ type SDConfig struct {
 	Port            int            `yaml:"port"` // Ignored for SRV records
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return newDiscovererMetrics(reg, rmi)
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "dns" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(*c, opts.Logger, opts.Registerer)
+	return NewDiscovery(*c, opts.Logger, opts.Metrics)
 }
 
 // UnmarshalYAML implements the yaml.Unmarshaler interface.
@@ -102,18 +107,22 @@ func (c *SDConfig) UnmarshalYAML(unmarshal func(interface{}) error) error {
 // the Discoverer interface.
 type Discovery struct {
 	*refresh.Discovery
-	names                    []string
-	port                     int
-	qtype                    uint16
-	logger                   log.Logger
-	dnsSDLookupsCount        prometheus.Counter
-	dnsSDLookupFailuresCount prometheus.Counter
+	names   []string
+	port    int
+	qtype   uint16
+	logger  log.Logger
+	metrics *dnsMetrics
 
 	lookupFn func(name string, qtype uint16, logger log.Logger) (*dns.Msg, error)
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*dnsMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -137,28 +146,16 @@ func NewDiscovery(conf SDConfig, logger log.Logger, reg prometheus.Registerer) (
 		port:     conf.Port,
 		logger:   logger,
 		lookupFn: lookupWithSearchPath,
-		dnsSDLookupsCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Namespace: namespace,
-				Name:      "sd_dns_lookups_total",
-				Help:      "The number of DNS-SD lookups.",
-			}),
-		dnsSDLookupFailuresCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Namespace: namespace,
-				Name:      "sd_dns_lookup_failures_total",
-				Help:      "The number of DNS-SD lookup failures.",
-			}),
+		metrics:  m,
 	}
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "dns",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: prometheus.NewRegistry(),
-			Metrics:  []prometheus.Collector{d.dnsSDLookupsCount, d.dnsSDLookupFailuresCount},
+			Logger:              logger,
+			Mech:                "dns",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 
@@ -195,9 +192,9 @@ func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 
 func (d *Discovery) refreshOne(ctx context.Context, name string, ch chan<- *targetgroup.Group) error {
 	response, err := d.lookupFn(name, d.qtype, d.logger)
-	d.dnsSDLookupsCount.Inc()
+	d.metrics.dnsSDLookupsCount.Inc()
 	if err != nil {
-		d.dnsSDLookupFailuresCount.Inc()
+		d.metrics.dnsSDLookupFailuresCount.Inc()
 		return err
 	}
 
diff --git a/discovery/dns/dns_test.go b/discovery/dns/dns_test.go
index b8dd2efaac4..33a976827d3 100644
--- a/discovery/dns/dns_test.go
+++ b/discovery/dns/dns_test.go
@@ -28,6 +28,7 @@ import (
 	"go.uber.org/goleak"
 	"gopkg.in/yaml.v2"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -253,13 +254,21 @@ func TestDNS(t *testing.T) {
 		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
-			sd, err := NewDiscovery(tc.config, nil, prometheus.NewRegistry())
+
+			reg := prometheus.NewRegistry()
+			refreshMetrics := discovery.NewRefreshMetrics(reg)
+			metrics := tc.config.NewDiscovererMetrics(reg, refreshMetrics)
+			require.NoError(t, metrics.Register())
+
+			sd, err := NewDiscovery(tc.config, nil, metrics)
 			require.NoError(t, err)
 			sd.lookupFn = tc.lookup
 
 			tgs, err := sd.refresh(context.Background())
 			require.NoError(t, err)
 			require.Equal(t, tc.expected, tgs)
+
+			metrics.Unregister()
 		})
 	}
 }
diff --git a/discovery/dns/metrics.go b/discovery/dns/metrics.go
new file mode 100644
index 00000000000..27c96b53e00
--- /dev/null
+++ b/discovery/dns/metrics.go
@@ -0,0 +1,66 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package dns
+
+import (
+	"github.com/prometheus/client_golang/prometheus"
+
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*dnsMetrics)(nil)
+
+type dnsMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+
+	dnsSDLookupsCount        prometheus.Counter
+	dnsSDLookupFailuresCount prometheus.Counter
+
+	metricRegisterer discovery.MetricRegisterer
+}
+
+func newDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	m := &dnsMetrics{
+		refreshMetrics: rmi,
+		dnsSDLookupsCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Namespace: namespace,
+				Name:      "sd_dns_lookups_total",
+				Help:      "The number of DNS-SD lookups.",
+			}),
+		dnsSDLookupFailuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Namespace: namespace,
+				Name:      "sd_dns_lookup_failures_total",
+				Help:      "The number of DNS-SD lookup failures.",
+			}),
+	}
+
+	m.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{
+		m.dnsSDLookupsCount,
+		m.dnsSDLookupFailuresCount,
+	})
+
+	return m
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *dnsMetrics) Register() error {
+	return m.metricRegisterer.RegisterMetrics()
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *dnsMetrics) Unregister() {
+	m.metricRegisterer.UnregisterMetrics()
+}
diff --git a/discovery/eureka/eureka.go b/discovery/eureka/eureka.go
index d3e4084e560..deed89f6f6d 100644
--- a/discovery/eureka/eureka.go
+++ b/discovery/eureka/eureka.go
@@ -16,6 +16,7 @@ package eureka
 import (
 	"context"
 	"errors"
+	"fmt"
 	"net"
 	"net/http"
 	"net/url"
@@ -76,12 +77,19 @@ type SDConfig struct {
 	RefreshInterval  model.Duration          `yaml:"refresh_interval,omitempty"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &eurekaMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "eureka" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -118,7 +126,12 @@ type Discovery struct {
 }
 
 // NewDiscovery creates a new Eureka discovery for the given role.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*eurekaMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	rt, err := config.NewRoundTripperFromConfig(conf.HTTPClientConfig, "eureka_sd")
 	if err != nil {
 		return nil, err
@@ -130,11 +143,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 	}
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "eureka",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "eureka",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
diff --git a/discovery/eureka/eureka_test.go b/discovery/eureka/eureka_test.go
index 1fe3c710e18..b499410bfcc 100644
--- a/discovery/eureka/eureka_test.go
+++ b/discovery/eureka/eureka_test.go
@@ -24,6 +24,7 @@ import (
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -36,7 +37,17 @@ func testUpdateServices(respHandler http.HandlerFunc) ([]*targetgroup.Group, err
 		Server: ts.URL,
 	}
 
-	md, err := NewDiscovery(&conf, nil, prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := conf.NewDiscovererMetrics(reg, refreshMetrics)
+	err := metrics.Register()
+	if err != nil {
+		return nil, err
+	}
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	md, err := NewDiscovery(&conf, nil, metrics)
 	if err != nil {
 		return nil, err
 	}
diff --git a/discovery/eureka/metrics.go b/discovery/eureka/metrics.go
new file mode 100644
index 00000000000..6d6463ccd38
--- /dev/null
+++ b/discovery/eureka/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package eureka
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*eurekaMetrics)(nil)
+
+type eurekaMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *eurekaMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *eurekaMetrics) Unregister() {}
diff --git a/discovery/file/file.go b/discovery/file/file.go
index ef6ed1f5eed..e7e9d0870fc 100644
--- a/discovery/file/file.go
+++ b/discovery/file/file.go
@@ -57,12 +57,17 @@ type SDConfig struct {
 	RefreshInterval model.Duration `yaml:"refresh_interval,omitempty"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return newDiscovererMetrics(reg, rmi)
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "file" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -94,6 +99,9 @@ func (c *SDConfig) UnmarshalYAML(unmarshal func(interface{}) error) error {
 const fileSDFilepathLabel = model.MetaLabelPrefix + "filepath"
 
 // TimestampCollector is a Custom Collector for Timestamps of the files.
+// TODO(ptodev): Now that each file SD has its own TimestampCollector
+// inside discovery/file/metrics.go, we can refactor this collector
+// (or get rid of it) as each TimestampCollector instance will only use one discoverer.
 type TimestampCollector struct {
 	Description *prometheus.Desc
 	discoverers map[*Discovery]struct{}
@@ -169,16 +177,16 @@ type Discovery struct {
 	lastRefresh map[string]int
 	logger      log.Logger
 
-	fileSDReadErrorsCount  prometheus.Counter
-	fileSDScanDuration     prometheus.Summary
-	fileWatcherErrorsCount prometheus.Counter
-	fileSDTimeStamp        *TimestampCollector
-
-	metricRegisterer discovery.MetricRegisterer
+	metrics *fileMetrics
 }
 
 // NewDiscovery returns a new file discovery for the given paths.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	fm, ok := metrics.(*fileMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -188,33 +196,10 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 		interval:   time.Duration(conf.RefreshInterval),
 		timestamps: make(map[string]float64),
 		logger:     logger,
-		fileSDReadErrorsCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Name: "prometheus_sd_file_read_errors_total",
-				Help: "The number of File-SD read errors.",
-			}),
-		fileSDScanDuration: prometheus.NewSummary(
-			prometheus.SummaryOpts{
-				Name:       "prometheus_sd_file_scan_duration_seconds",
-				Help:       "The duration of the File-SD scan in seconds.",
-				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
-			}),
-		fileWatcherErrorsCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Name: "prometheus_sd_file_watcher_errors_total",
-				Help: "The number of File-SD errors caused by filesystem watch failures.",
-			}),
-		fileSDTimeStamp: NewTimestampCollector(),
+		metrics:    fm,
 	}
 
-	disc.fileSDTimeStamp.addDiscoverer(disc)
-
-	disc.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{
-		disc.fileSDReadErrorsCount,
-		disc.fileSDScanDuration,
-		disc.fileWatcherErrorsCount,
-		disc.fileSDTimeStamp,
-	})
+	fm.init(disc)
 
 	return disc, nil
 }
@@ -253,17 +238,10 @@ func (d *Discovery) watchFiles() {
 
 // Run implements the Discoverer interface.
 func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
-	err := d.metricRegisterer.RegisterMetrics()
-	if err != nil {
-		level.Error(d.logger).Log("msg", "Unable to register metrics", "err", err.Error())
-		return
-	}
-	defer d.metricRegisterer.UnregisterMetrics()
-
 	watcher, err := fsnotify.NewWatcher()
 	if err != nil {
 		level.Error(d.logger).Log("msg", "Error adding file watcher", "err", err)
-		d.fileWatcherErrorsCount.Inc()
+		d.metrics.fileWatcherErrorsCount.Inc()
 		return
 	}
 	d.watcher = watcher
@@ -327,7 +305,7 @@ func (d *Discovery) stop() {
 	done := make(chan struct{})
 	defer close(done)
 
-	d.fileSDTimeStamp.removeDiscoverer(d)
+	d.metrics.fileSDTimeStamp.removeDiscoverer(d)
 
 	// Closing the watcher will deadlock unless all events and errors are drained.
 	go func() {
@@ -353,13 +331,13 @@ func (d *Discovery) stop() {
 func (d *Discovery) refresh(ctx context.Context, ch chan<- []*targetgroup.Group) {
 	t0 := time.Now()
 	defer func() {
-		d.fileSDScanDuration.Observe(time.Since(t0).Seconds())
+		d.metrics.fileSDScanDuration.Observe(time.Since(t0).Seconds())
 	}()
 	ref := map[string]int{}
 	for _, p := range d.listFiles() {
 		tgroups, err := d.readFile(p)
 		if err != nil {
-			d.fileSDReadErrorsCount.Inc()
+			d.metrics.fileSDReadErrorsCount.Inc()
 
 			level.Error(d.logger).Log("msg", "Error reading file", "path", p, "err", err)
 			// Prevent deletion down below.
diff --git a/discovery/file/file_test.go b/discovery/file/file_test.go
index 73161183278..8a505708997 100644
--- a/discovery/file/file_test.go
+++ b/discovery/file/file_test.go
@@ -29,6 +29,7 @@ import (
 	"github.com/stretchr/testify/require"
 	"go.uber.org/goleak"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -144,19 +145,28 @@ func (t *testRunner) run(files ...string) {
 	ctx, cancel := context.WithCancel(context.Background())
 	t.cancelSD = cancel
 	go func() {
+		conf := &SDConfig{
+			Files: files,
+			// Setting a high refresh interval to make sure that the tests only
+			// rely on file watches.
+			RefreshInterval: model.Duration(1 * time.Hour),
+		}
+
+		reg := prometheus.NewRegistry()
+		refreshMetrics := discovery.NewRefreshMetrics(reg)
+		metrics := conf.NewDiscovererMetrics(reg, refreshMetrics)
+		require.NoError(t, metrics.Register())
+
 		d, err := NewDiscovery(
-			&SDConfig{
-				Files: files,
-				// Setting a high refresh interval to make sure that the tests only
-				// rely on file watches.
-				RefreshInterval: model.Duration(1 * time.Hour),
-			},
+			conf,
 			nil,
-			prometheus.NewRegistry(),
+			metrics,
 		)
 		require.NoError(t, err)
 
 		d.Run(ctx, t.ch)
+
+		metrics.Unregister()
 	}()
 }
 
diff --git a/discovery/file/metrics.go b/discovery/file/metrics.go
new file mode 100644
index 00000000000..c01501e4efd
--- /dev/null
+++ b/discovery/file/metrics.go
@@ -0,0 +1,76 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package file
+
+import (
+	"github.com/prometheus/client_golang/prometheus"
+
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*fileMetrics)(nil)
+
+type fileMetrics struct {
+	fileSDReadErrorsCount  prometheus.Counter
+	fileSDScanDuration     prometheus.Summary
+	fileWatcherErrorsCount prometheus.Counter
+	fileSDTimeStamp        *TimestampCollector
+
+	metricRegisterer discovery.MetricRegisterer
+}
+
+func newDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	fm := &fileMetrics{
+		fileSDReadErrorsCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_file_read_errors_total",
+				Help: "The number of File-SD read errors.",
+			}),
+		fileSDScanDuration: prometheus.NewSummary(
+			prometheus.SummaryOpts{
+				Name:       "prometheus_sd_file_scan_duration_seconds",
+				Help:       "The duration of the File-SD scan in seconds.",
+				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
+			}),
+		fileWatcherErrorsCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_file_watcher_errors_total",
+				Help: "The number of File-SD errors caused by filesystem watch failures.",
+			}),
+		fileSDTimeStamp: NewTimestampCollector(),
+	}
+
+	fm.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{
+		fm.fileSDReadErrorsCount,
+		fm.fileSDScanDuration,
+		fm.fileWatcherErrorsCount,
+		fm.fileSDTimeStamp,
+	})
+
+	return fm
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (fm *fileMetrics) Register() error {
+	return fm.metricRegisterer.RegisterMetrics()
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (fm *fileMetrics) Unregister() {
+	fm.metricRegisterer.UnregisterMetrics()
+}
+
+func (fm *fileMetrics) init(disc *Discovery) {
+	fm.fileSDTimeStamp.addDiscoverer(disc)
+}
diff --git a/discovery/gce/gce.go b/discovery/gce/gce.go
index 21a95ee39e6..15f32dd2473 100644
--- a/discovery/gce/gce.go
+++ b/discovery/gce/gce.go
@@ -82,12 +82,19 @@ type SDConfig struct {
 	TagSeparator    string         `yaml:"tag_separator,omitempty"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &gceMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "gce" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(*c, opts.Logger, opts.Registerer)
+	return NewDiscovery(*c, opts.Logger, opts.Metrics)
 }
 
 // UnmarshalYAML implements the yaml.Unmarshaler interface.
@@ -122,7 +129,12 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*gceMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	d := &Discovery{
 		project:      conf.Project,
 		zone:         conf.Zone,
@@ -143,11 +155,11 @@ func NewDiscovery(conf SDConfig, logger log.Logger, reg prometheus.Registerer) (
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "gce",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "gce",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
diff --git a/discovery/gce/metrics.go b/discovery/gce/metrics.go
new file mode 100644
index 00000000000..f53ea5a8c6f
--- /dev/null
+++ b/discovery/gce/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package gce
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*gceMetrics)(nil)
+
+type gceMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *gceMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *gceMetrics) Unregister() {}
diff --git a/discovery/hetzner/hetzner.go b/discovery/hetzner/hetzner.go
index 9d3e6aa65de..69c823d3829 100644
--- a/discovery/hetzner/hetzner.go
+++ b/discovery/hetzner/hetzner.go
@@ -63,12 +63,19 @@ type SDConfig struct {
 	robotEndpoint   string         // For tests only.
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &hetznerMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "hetzner" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 type refresher interface {
@@ -128,7 +135,12 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*refresh.Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*refresh.Discovery, error) {
+	m, ok := metrics.(*hetznerMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	r, err := newRefresher(conf, logger)
 	if err != nil {
 		return nil, err
@@ -136,11 +148,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 
 	return refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "hetzner",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: r.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "hetzner",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            r.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	), nil
 }
diff --git a/discovery/hetzner/metrics.go b/discovery/hetzner/metrics.go
new file mode 100644
index 00000000000..27361ee755c
--- /dev/null
+++ b/discovery/hetzner/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package hetzner
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*hetznerMetrics)(nil)
+
+type hetznerMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *hetznerMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *hetznerMetrics) Unregister() {}
diff --git a/discovery/http/http.go b/discovery/http/http.go
index c12fdb26d2a..8dd21ec9e42 100644
--- a/discovery/http/http.go
+++ b/discovery/http/http.go
@@ -58,12 +58,17 @@ type SDConfig struct {
 	URL              string                  `yaml:"url"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return newDiscovererMetrics(reg, rmi)
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "http" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.HTTPClientOptions, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.HTTPClientOptions, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -105,11 +110,16 @@ type Discovery struct {
 	client          *http.Client
 	refreshInterval time.Duration
 	tgLastLength    int
-	failuresCount   prometheus.Counter
+	metrics         *httpMetrics
 }
 
 // NewDiscovery returns a new HTTP discovery for the given config.
-func NewDiscovery(conf *SDConfig, logger log.Logger, clientOpts []config.HTTPClientOption, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, clientOpts []config.HTTPClientOption, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*httpMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -124,21 +134,16 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, clientOpts []config.HTTPCli
 		url:             conf.URL,
 		client:          client,
 		refreshInterval: time.Duration(conf.RefreshInterval), // Stored to be sent as headers.
-		failuresCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Name: "prometheus_sd_http_failures_total",
-				Help: "Number of HTTP service discovery refresh failures.",
-			}),
+		metrics:         m,
 	}
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "http",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.Refresh,
-			Registry: reg,
-			Metrics:  []prometheus.Collector{d.failuresCount},
+			Logger:              logger,
+			Mech:                "http",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.Refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
@@ -155,7 +160,7 @@ func (d *Discovery) Refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 
 	resp, err := d.client.Do(req.WithContext(ctx))
 	if err != nil {
-		d.failuresCount.Inc()
+		d.metrics.failuresCount.Inc()
 		return nil, err
 	}
 	defer func() {
@@ -164,31 +169,31 @@ func (d *Discovery) Refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 	}()
 
 	if resp.StatusCode != http.StatusOK {
-		d.failuresCount.Inc()
+		d.metrics.failuresCount.Inc()
 		return nil, fmt.Errorf("server returned HTTP status %s", resp.Status)
 	}
 
 	if !matchContentType.MatchString(strings.TrimSpace(resp.Header.Get("Content-Type"))) {
-		d.failuresCount.Inc()
+		d.metrics.failuresCount.Inc()
 		return nil, fmt.Errorf("unsupported content type %q", resp.Header.Get("Content-Type"))
 	}
 
 	b, err := io.ReadAll(resp.Body)
 	if err != nil {
-		d.failuresCount.Inc()
+		d.metrics.failuresCount.Inc()
 		return nil, err
 	}
 
 	var targetGroups []*targetgroup.Group
 
 	if err := json.Unmarshal(b, &targetGroups); err != nil {
-		d.failuresCount.Inc()
+		d.metrics.failuresCount.Inc()
 		return nil, err
 	}
 
 	for i, tg := range targetGroups {
 		if tg == nil {
-			d.failuresCount.Inc()
+			d.metrics.failuresCount.Inc()
 			err = errors.New("nil target group item found")
 			return nil, err
 		}
diff --git a/discovery/http/http_test.go b/discovery/http/http_test.go
index 164719e900a..0cafe035dc3 100644
--- a/discovery/http/http_test.go
+++ b/discovery/http/http_test.go
@@ -28,6 +28,7 @@ import (
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -41,7 +42,14 @@ func TestHTTPValidRefresh(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	defer refreshMetrics.Unregister()
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
@@ -63,7 +71,7 @@ func TestHTTPValidRefresh(t *testing.T) {
 		},
 	}
 	require.Equal(t, expectedTargets, tgs)
-	require.Equal(t, 0.0, getFailureCount(d.failuresCount))
+	require.Equal(t, 0.0, getFailureCount(d.metrics.failuresCount))
 }
 
 func TestHTTPInvalidCode(t *testing.T) {
@@ -79,13 +87,20 @@ func TestHTTPInvalidCode(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	defer refreshMetrics.Unregister()
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
 	_, err = d.Refresh(ctx)
 	require.EqualError(t, err, "server returned HTTP status 400 Bad Request")
-	require.Equal(t, 1.0, getFailureCount(d.failuresCount))
+	require.Equal(t, 1.0, getFailureCount(d.metrics.failuresCount))
 }
 
 func TestHTTPInvalidFormat(t *testing.T) {
@@ -101,13 +116,20 @@ func TestHTTPInvalidFormat(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	defer refreshMetrics.Unregister()
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
 	_, err = d.Refresh(ctx)
 	require.EqualError(t, err, `unsupported content type "text/plain; charset=utf-8"`)
-	require.Equal(t, 1.0, getFailureCount(d.failuresCount))
+	require.Equal(t, 1.0, getFailureCount(d.metrics.failuresCount))
 }
 
 func getFailureCount(failuresCount prometheus.Counter) float64 {
@@ -412,7 +434,15 @@ func TestSourceDisappeared(t *testing.T) {
 		URL:              ts.URL,
 		RefreshInterval:  model.Duration(1 * time.Second),
 	}
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	defer refreshMetrics.Unregister()
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), nil, metrics)
 	require.NoError(t, err)
 	for _, test := range cases {
 		ctx := context.Background()
diff --git a/discovery/http/metrics.go b/discovery/http/metrics.go
new file mode 100644
index 00000000000..b1f8b844339
--- /dev/null
+++ b/discovery/http/metrics.go
@@ -0,0 +1,57 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package http
+
+import (
+	"github.com/prometheus/client_golang/prometheus"
+
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*httpMetrics)(nil)
+
+type httpMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+
+	failuresCount prometheus.Counter
+
+	metricRegisterer discovery.MetricRegisterer
+}
+
+func newDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	m := &httpMetrics{
+		refreshMetrics: rmi,
+		failuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_http_failures_total",
+				Help: "Number of HTTP service discovery refresh failures.",
+			}),
+	}
+
+	m.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{
+		m.failuresCount,
+	})
+
+	return m
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *httpMetrics) Register() error {
+	return m.metricRegisterer.RegisterMetrics()
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *httpMetrics) Unregister() {
+	m.metricRegisterer.UnregisterMetrics()
+}
diff --git a/discovery/ionos/ionos.go b/discovery/ionos/ionos.go
index 36623745aba..c8b4f7f8e54 100644
--- a/discovery/ionos/ionos.go
+++ b/discovery/ionos/ionos.go
@@ -15,16 +15,16 @@ package ionos
 
 import (
 	"errors"
+	"fmt"
 	"time"
 
 	"github.com/go-kit/log"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 
 	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/refresh"
-
-	"github.com/prometheus/client_golang/prometheus"
 )
 
 const (
@@ -43,7 +43,12 @@ func init() {
 type Discovery struct{}
 
 // NewDiscovery returns a new refresh.Discovery for IONOS Cloud.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*refresh.Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*refresh.Discovery, error) {
+	m, ok := metrics.(*ionosMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	if conf.ionosEndpoint == "" {
 		conf.ionosEndpoint = "https://api.ionos.com"
 	}
@@ -55,11 +60,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 
 	return refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "ionos",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "ionos",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	), nil
 }
@@ -84,6 +89,13 @@ type SDConfig struct {
 	ionosEndpoint string // For tests only.
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &ionosMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the IONOS Cloud service discovery.
 func (c SDConfig) Name() string {
 	return "ionos"
@@ -91,7 +103,7 @@ func (c SDConfig) Name() string {
 
 // NewDiscoverer returns a new discovery.Discoverer for IONOS Cloud.
 func (c SDConfig) NewDiscoverer(options discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(&c, options.Logger, options.Registerer)
+	return NewDiscovery(&c, options.Logger, options.Metrics)
 }
 
 // UnmarshalYAML implements the yaml.Unmarshaler interface.
diff --git a/discovery/ionos/metrics.go b/discovery/ionos/metrics.go
new file mode 100644
index 00000000000..88e465acf3b
--- /dev/null
+++ b/discovery/ionos/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package ionos
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*ionosMetrics)(nil)
+
+type ionosMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *ionosMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *ionosMetrics) Unregister() {}
diff --git a/discovery/kubernetes/kubernetes.go b/discovery/kubernetes/kubernetes.go
index 5c5f3dfb62a..362e053267c 100644
--- a/discovery/kubernetes/kubernetes.go
+++ b/discovery/kubernetes/kubernetes.go
@@ -123,12 +123,17 @@ type SDConfig struct {
 	AttachMetadata     AttachMetadataConfig    `yaml:"attach_metadata,omitempty"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return newDiscovererMetrics(reg, rmi)
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "kubernetes" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return New(opts.Logger, opts.Registerer, c)
+	return New(opts.Logger, opts.Metrics, c)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -265,8 +270,7 @@ type Discovery struct {
 	selectors          roleSelector
 	ownNamespace       string
 	attachMetadata     AttachMetadataConfig
-	eventCount         *prometheus.CounterVec
-	metricRegisterer   discovery.MetricRegisterer
+	metrics            *kubernetesMetrics
 }
 
 func (d *Discovery) getNamespaces() []string {
@@ -285,7 +289,12 @@ func (d *Discovery) getNamespaces() []string {
 }
 
 // New creates a new Kubernetes discovery for the given role.
-func New(l log.Logger, reg prometheus.Registerer, conf *SDConfig) (*Discovery, error) {
+func New(l log.Logger, metrics discovery.DiscovererMetrics, conf *SDConfig) (*Discovery, error) {
+	m, ok := metrics.(*kubernetesMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	if l == nil {
 		l = log.NewNopLogger()
 	}
@@ -348,34 +357,7 @@ func New(l log.Logger, reg prometheus.Registerer, conf *SDConfig) (*Discovery, e
 		selectors:          mapSelector(conf.Selectors),
 		ownNamespace:       ownNamespace,
 		attachMetadata:     conf.AttachMetadata,
-		eventCount: prometheus.NewCounterVec(
-			prometheus.CounterOpts{
-				Namespace: discovery.KubernetesMetricsNamespace,
-				Name:      "events_total",
-				Help:      "The number of Kubernetes events handled.",
-			},
-			[]string{"role", "event"},
-		),
-	}
-
-	d.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{d.eventCount})
-
-	// Initialize metric vectors.
-	for _, role := range []string{
-		RoleEndpointSlice.String(),
-		RoleEndpoint.String(),
-		RoleNode.String(),
-		RolePod.String(),
-		RoleService.String(),
-		RoleIngress.String(),
-	} {
-		for _, evt := range []string{
-			MetricLabelRoleAdd,
-			MetricLabelRoleDelete,
-			MetricLabelRoleUpdate,
-		} {
-			d.eventCount.WithLabelValues(role, evt)
-		}
+		metrics:            m,
 	}
 
 	return d, nil
@@ -415,13 +397,6 @@ const resyncDisabled = 0
 func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 	d.Lock()
 
-	err := d.metricRegisterer.RegisterMetrics()
-	if err != nil {
-		level.Error(d.logger).Log("msg", "Unable to register metrics", "err", err.Error())
-		return
-	}
-	defer d.metricRegisterer.UnregisterMetrics()
-
 	namespaces := d.getNamespaces()
 
 	switch d.role {
@@ -513,7 +488,7 @@ func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 				cache.NewSharedInformer(slw, &apiv1.Service{}, resyncDisabled),
 				cache.NewSharedInformer(plw, &apiv1.Pod{}, resyncDisabled),
 				nodeInf,
-				d.eventCount,
+				d.metrics.eventCount,
 			)
 			d.discoverers = append(d.discoverers, eps)
 			go eps.endpointSliceInf.Run(ctx.Done())
@@ -573,7 +548,7 @@ func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 				cache.NewSharedInformer(slw, &apiv1.Service{}, resyncDisabled),
 				cache.NewSharedInformer(plw, &apiv1.Pod{}, resyncDisabled),
 				nodeInf,
-				d.eventCount,
+				d.metrics.eventCount,
 			)
 			d.discoverers = append(d.discoverers, eps)
 			go eps.endpointsInf.Run(ctx.Done())
@@ -605,7 +580,7 @@ func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 				log.With(d.logger, "role", "pod"),
 				d.newPodsByNodeInformer(plw),
 				nodeInformer,
-				d.eventCount,
+				d.metrics.eventCount,
 			)
 			d.discoverers = append(d.discoverers, pod)
 			go pod.podInf.Run(ctx.Done())
@@ -628,7 +603,7 @@ func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 			svc := NewService(
 				log.With(d.logger, "role", "service"),
 				cache.NewSharedInformer(slw, &apiv1.Service{}, resyncDisabled),
-				d.eventCount,
+				d.metrics.eventCount,
 			)
 			d.discoverers = append(d.discoverers, svc)
 			go svc.informer.Run(ctx.Done())
@@ -686,14 +661,14 @@ func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 			ingress := NewIngress(
 				log.With(d.logger, "role", "ingress"),
 				informer,
-				d.eventCount,
+				d.metrics.eventCount,
 			)
 			d.discoverers = append(d.discoverers, ingress)
 			go ingress.informer.Run(ctx.Done())
 		}
 	case RoleNode:
 		nodeInformer := d.newNodeInformer(ctx)
-		node := NewNode(log.With(d.logger, "role", "node"), nodeInformer, d.eventCount)
+		node := NewNode(log.With(d.logger, "role", "node"), nodeInformer, d.metrics.eventCount)
 		d.discoverers = append(d.discoverers, node)
 		go node.informer.Run(ctx.Done())
 	default:
diff --git a/discovery/kubernetes/kubernetes_test.go b/discovery/kubernetes/kubernetes_test.go
index 71c937e944a..4071ebc34ed 100644
--- a/discovery/kubernetes/kubernetes_test.go
+++ b/discovery/kubernetes/kubernetes_test.go
@@ -51,24 +51,29 @@ func makeDiscoveryWithVersion(role Role, nsDiscovery NamespaceDiscovery, k8sVer
 	fakeDiscovery, _ := clientset.Discovery().(*fakediscovery.FakeDiscovery)
 	fakeDiscovery.FakedServerVersion = &version.Info{GitVersion: k8sVer}
 
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := newDiscovererMetrics(reg, refreshMetrics)
+	err := metrics.Register()
+	if err != nil {
+		panic(err)
+	}
+	// TODO(ptodev): Unregister the metrics at the end of the test.
+
+	kubeMetrics, ok := metrics.(*kubernetesMetrics)
+	if !ok {
+		panic("invalid discovery metrics type")
+	}
+
 	d := &Discovery{
 		client:             clientset,
 		logger:             log.NewNopLogger(),
 		role:               role,
 		namespaceDiscovery: &nsDiscovery,
 		ownNamespace:       "own-ns",
-		eventCount: prometheus.NewCounterVec(
-			prometheus.CounterOpts{
-				Namespace: discovery.KubernetesMetricsNamespace,
-				Name:      "events_total",
-				Help:      "The number of Kubernetes events handled.",
-			},
-			[]string{"role", "event"},
-		),
+		metrics:            kubeMetrics,
 	}
 
-	d.metricRegisterer = discovery.NewMetricRegisterer(prometheus.NewRegistry(), []prometheus.Collector{d.eventCount})
-
 	return d, clientset
 }
 
diff --git a/discovery/kubernetes/metrics.go b/discovery/kubernetes/metrics.go
new file mode 100644
index 00000000000..7d384fb96ac
--- /dev/null
+++ b/discovery/kubernetes/metrics.go
@@ -0,0 +1,75 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package kubernetes
+
+import (
+	"github.com/prometheus/client_golang/prometheus"
+
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*kubernetesMetrics)(nil)
+
+type kubernetesMetrics struct {
+	eventCount *prometheus.CounterVec
+
+	metricRegisterer discovery.MetricRegisterer
+}
+
+func newDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	m := &kubernetesMetrics{
+		eventCount: prometheus.NewCounterVec(
+			prometheus.CounterOpts{
+				Namespace: discovery.KubernetesMetricsNamespace,
+				Name:      "events_total",
+				Help:      "The number of Kubernetes events handled.",
+			},
+			[]string{"role", "event"},
+		),
+	}
+
+	m.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{
+		m.eventCount,
+	})
+
+	// Initialize metric vectors.
+	for _, role := range []string{
+		RoleEndpointSlice.String(),
+		RoleEndpoint.String(),
+		RoleNode.String(),
+		RolePod.String(),
+		RoleService.String(),
+		RoleIngress.String(),
+	} {
+		for _, evt := range []string{
+			MetricLabelRoleAdd,
+			MetricLabelRoleDelete,
+			MetricLabelRoleUpdate,
+		} {
+			m.eventCount.WithLabelValues(role, evt)
+		}
+	}
+
+	return m
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *kubernetesMetrics) Register() error {
+	return m.metricRegisterer.RegisterMetrics()
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *kubernetesMetrics) Unregister() {
+	m.metricRegisterer.UnregisterMetrics()
+}
diff --git a/discovery/legacymanager/manager.go b/discovery/legacymanager/manager.go
index 9c80f305a82..6fc61485d11 100644
--- a/discovery/legacymanager/manager.go
+++ b/discovery/legacymanager/manager.go
@@ -42,7 +42,7 @@ type provider struct {
 }
 
 // NewManager is the Discovery Manager constructor.
-func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Registerer, options ...func(*Manager)) *Manager {
+func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Registerer, sdMetrics map[string]discovery.DiscovererMetrics, options ...func(*Manager)) *Manager {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -55,6 +55,7 @@ func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Re
 		updatert:       5 * time.Second,
 		triggerSend:    make(chan struct{}, 1),
 		registerer:     registerer,
+		sdMetrics:      sdMetrics,
 	}
 	for _, option := range options {
 		option(mgr)
@@ -62,7 +63,7 @@ func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Re
 
 	// Register the metrics.
 	// We have to do this after setting all options, so that the name of the Manager is set.
-	if metrics, err := discovery.NewMetrics(registerer, mgr.name); err == nil {
+	if metrics, err := discovery.NewManagerMetrics(registerer, mgr.name); err == nil {
 		mgr.metrics = metrics
 	} else {
 		level.Error(logger).Log("msg", "Failed to create discovery manager metrics", "manager", mgr.name, "err", err)
@@ -108,7 +109,8 @@ type Manager struct {
 	// A registerer for all service discovery metrics.
 	registerer prometheus.Registerer
 
-	metrics *discovery.Metrics
+	metrics   *discovery.Metrics
+	sdMetrics map[string]discovery.DiscovererMetrics
 }
 
 // Run starts the background processing.
@@ -283,8 +285,8 @@ func (m *Manager) registerProviders(cfgs discovery.Configs, setName string) int
 		}
 		typ := cfg.Name()
 		d, err := cfg.NewDiscoverer(discovery.DiscovererOptions{
-			Logger:     log.With(m.logger, "discovery", typ, "config", setName),
-			Registerer: m.registerer,
+			Logger:  log.With(m.logger, "discovery", typ, "config", setName),
+			Metrics: m.sdMetrics[typ],
 		})
 		if err != nil {
 			level.Error(m.logger).Log("msg", "Cannot create service discovery", "err", err, "type", typ, "config", setName)
diff --git a/discovery/legacymanager/manager_test.go b/discovery/legacymanager/manager_test.go
index 7a2e8feea45..6fbecabc2a8 100644
--- a/discovery/legacymanager/manager_test.go
+++ b/discovery/legacymanager/manager_test.go
@@ -36,6 +36,13 @@ func TestMain(m *testing.M) {
 	testutil.TolerantVerifyLeak(m)
 }
 
+func newTestMetrics(t *testing.T, reg prometheus.Registerer) (*discovery.RefreshMetricsManager, map[string]discovery.DiscovererMetrics) {
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	sdMetrics, err := discovery.RegisterSDMetrics(reg, refreshMetrics)
+	require.NoError(t, err)
+	return &refreshMetrics, sdMetrics
+}
+
 // TestTargetUpdatesOrder checks that the target updates are received in the expected order.
 func TestTargetUpdatesOrder(t *testing.T) {
 	// The order by which the updates are send is determined by the interval passed to the mock discovery adapter
@@ -665,7 +672,10 @@ func TestTargetUpdatesOrder(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+			reg := prometheus.NewRegistry()
+			_, sdMetrics := newTestMetrics(t, reg)
+
+			discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 			require.NotNil(t, discoveryManager)
 			discoveryManager.updatert = 100 * time.Millisecond
 
@@ -748,7 +758,11 @@ func verifyPresence(t *testing.T, tSets map[poolKey]map[string]*targetgroup.Grou
 func TestTargetSetRecreatesTargetGroupsEveryRun(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := newTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -777,7 +791,11 @@ func TestTargetSetRecreatesTargetGroupsEveryRun(t *testing.T) {
 func TestDiscovererConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := newTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -802,7 +820,11 @@ func TestDiscovererConfigs(t *testing.T) {
 func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := newTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -842,7 +864,11 @@ func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 func TestIdenticalConfigurationsAreCoalesced(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, nil, prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := newTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, nil, reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -874,7 +900,11 @@ func TestApplyConfigDoesNotModifyStaticTargets(t *testing.T) {
 	}
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := newTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -897,10 +927,19 @@ func (e errorConfig) NewDiscoverer(discovery.DiscovererOptions) (discovery.Disco
 	return nil, e.err
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (errorConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &discovery.NoopDiscovererMetrics{}
+}
+
 func TestGaugeFailedConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := newTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -1057,7 +1096,10 @@ func TestCoordinationWithReceiver(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			mgr := NewManager(ctx, nil, prometheus.NewRegistry())
+			reg := prometheus.NewRegistry()
+			_, sdMetrics := newTestMetrics(t, reg)
+
+			mgr := NewManager(ctx, nil, reg, sdMetrics)
 			require.NotNil(t, mgr)
 			mgr.updatert = updateDelay
 			go mgr.Run()
diff --git a/discovery/linode/linode.go b/discovery/linode/linode.go
index 38a5cdad4b5..94f0a63bbb8 100644
--- a/discovery/linode/linode.go
+++ b/discovery/linode/linode.go
@@ -87,12 +87,17 @@ type SDConfig struct {
 	TagSeparator    string         `yaml:"tag_separator,omitempty"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return newDiscovererMetrics(reg, rmi)
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "linode" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -122,22 +127,23 @@ type Discovery struct {
 	pollCount            int
 	lastResults          []*targetgroup.Group
 	eventPollingEnabled  bool
-	failuresCount        prometheus.Counter
+	metrics              *linodeMetrics
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*linodeMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	d := &Discovery{
 		port:                 conf.Port,
 		tagSeparator:         conf.TagSeparator,
 		pollCount:            0,
 		lastRefreshTimestamp: time.Now().UTC(),
 		eventPollingEnabled:  true,
-		failuresCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Name: "prometheus_sd_linode_failures_total",
-				Help: "Number of Linode service discovery refresh failures.",
-			}),
+		metrics:              m,
 	}
 
 	rt, err := config.NewRoundTripperFromConfig(conf.HTTPClientConfig, "linode_sd")
@@ -156,12 +162,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "linode",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
-			Metrics:  []prometheus.Collector{d.failuresCount},
+			Logger:              logger,
+			Mech:                "linode",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
@@ -223,14 +228,14 @@ func (d *Discovery) refreshData(ctx context.Context) ([]*targetgroup.Group, erro
 	// Gather all linode instances.
 	instances, err := d.client.ListInstances(ctx, &linodego.ListOptions{PageSize: 500})
 	if err != nil {
-		d.failuresCount.Inc()
+		d.metrics.failuresCount.Inc()
 		return nil, err
 	}
 
 	// Gather detailed IP address info for all IPs on all linode instances.
 	detailedIPs, err := d.client.ListIPAddresses(ctx, &linodego.ListOptions{PageSize: 500})
 	if err != nil {
-		d.failuresCount.Inc()
+		d.metrics.failuresCount.Inc()
 		return nil, err
 	}
 
diff --git a/discovery/linode/linode_test.go b/discovery/linode/linode_test.go
index 536b12090cc..a6a16d82aa4 100644
--- a/discovery/linode/linode_test.go
+++ b/discovery/linode/linode_test.go
@@ -24,6 +24,8 @@ import (
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
+
+	"github.com/prometheus/prometheus/discovery"
 )
 
 type LinodeSDTestSuite struct {
@@ -53,7 +55,15 @@ func TestLinodeSDRefresh(t *testing.T) {
 		Credentials: tokenID,
 		Type:        "Bearer",
 	}
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 	endpoint, err := url.Parse(sdmock.Mock.Endpoint())
 	require.NoError(t, err)
diff --git a/discovery/linode/metrics.go b/discovery/linode/metrics.go
new file mode 100644
index 00000000000..8f813892262
--- /dev/null
+++ b/discovery/linode/metrics.go
@@ -0,0 +1,57 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package linode
+
+import (
+	"github.com/prometheus/client_golang/prometheus"
+
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*linodeMetrics)(nil)
+
+type linodeMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+
+	failuresCount prometheus.Counter
+
+	metricRegisterer discovery.MetricRegisterer
+}
+
+func newDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	m := &linodeMetrics{
+		refreshMetrics: rmi,
+		failuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_linode_failures_total",
+				Help: "Number of Linode service discovery refresh failures.",
+			}),
+	}
+
+	m.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{
+		m.failuresCount,
+	})
+
+	return m
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *linodeMetrics) Register() error {
+	return m.metricRegisterer.RegisterMetrics()
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *linodeMetrics) Unregister() {
+	m.metricRegisterer.UnregisterMetrics()
+}
diff --git a/discovery/manager.go b/discovery/manager.go
index 67e326c41a9..e3a26355757 100644
--- a/discovery/manager.go
+++ b/discovery/manager.go
@@ -64,8 +64,24 @@ func (p *Provider) Config() interface{} {
 	return p.config
 }
 
+// Registers the metrics needed for SD mechanisms.
+// Does not register the metrics for the Discovery Manager.
+// TODO(ptodev): Add ability to unregister the metrics?
+func CreateAndRegisterSDMetrics(reg prometheus.Registerer) (map[string]DiscovererMetrics, error) {
+	// Some SD mechanisms use the "refresh" package, which has its own metrics.
+	refreshSdMetrics := NewRefreshMetrics(reg)
+
+	// Register the metrics specific for each SD mechanism, and the ones for the refresh package.
+	sdMetrics, err := RegisterSDMetrics(reg, refreshSdMetrics)
+	if err != nil {
+		return nil, fmt.Errorf("failed to register service discovery metrics: %w", err)
+	}
+
+	return sdMetrics, nil
+}
+
 // NewManager is the Discovery Manager constructor.
-func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Registerer, options ...func(*Manager)) *Manager {
+func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Registerer, sdMetrics map[string]DiscovererMetrics, options ...func(*Manager)) *Manager {
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -77,6 +93,7 @@ func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Re
 		updatert:    5 * time.Second,
 		triggerSend: make(chan struct{}, 1),
 		registerer:  registerer,
+		sdMetrics:   sdMetrics,
 	}
 	for _, option := range options {
 		option(mgr)
@@ -84,7 +101,7 @@ func NewManager(ctx context.Context, logger log.Logger, registerer prometheus.Re
 
 	// Register the metrics.
 	// We have to do this after setting all options, so that the name of the Manager is set.
-	if metrics, err := NewMetrics(registerer, mgr.name); err == nil {
+	if metrics, err := NewManagerMetrics(registerer, mgr.name); err == nil {
 		mgr.metrics = metrics
 	} else {
 		level.Error(logger).Log("msg", "Failed to create discovery manager metrics", "manager", mgr.name, "err", err)
@@ -143,7 +160,8 @@ type Manager struct {
 	// A registerer for all service discovery metrics.
 	registerer prometheus.Registerer
 
-	metrics *Metrics
+	metrics   *Metrics
+	sdMetrics map[string]DiscovererMetrics
 }
 
 // Providers returns the currently configured SD providers.
@@ -402,7 +420,7 @@ func (m *Manager) registerProviders(cfgs Configs, setName string) int {
 		d, err := cfg.NewDiscoverer(DiscovererOptions{
 			Logger:            log.With(m.logger, "discovery", typ, "config", setName),
 			HTTPClientOptions: m.httpOpts,
-			Registerer:        m.registerer,
+			Metrics:           m.sdMetrics[typ],
 		})
 		if err != nil {
 			level.Error(m.logger).Log("msg", "Cannot create service discovery", "err", err, "type", typ, "config", setName)
diff --git a/discovery/manager_test.go b/discovery/manager_test.go
index f22de75a46f..2f6e03aa5ad 100644
--- a/discovery/manager_test.go
+++ b/discovery/manager_test.go
@@ -36,6 +36,13 @@ func TestMain(m *testing.M) {
 	testutil.TolerantVerifyLeak(m)
 }
 
+func NewTestMetrics(t *testing.T, reg prometheus.Registerer) (*RefreshMetricsManager, map[string]DiscovererMetrics) {
+	refreshMetrics := NewRefreshMetrics(reg)
+	sdMetrics, err := RegisterSDMetrics(reg, refreshMetrics)
+	require.NoError(t, err)
+	return &refreshMetrics, sdMetrics
+}
+
 // TestTargetUpdatesOrder checks that the target updates are received in the expected order.
 func TestTargetUpdatesOrder(t *testing.T) {
 	// The order by which the updates are send is determined by the interval passed to the mock discovery adapter
@@ -665,7 +672,10 @@ func TestTargetUpdatesOrder(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+			reg := prometheus.NewRegistry()
+			_, sdMetrics := NewTestMetrics(t, reg)
+
+			discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 			require.NotNil(t, discoveryManager)
 			discoveryManager.updatert = 100 * time.Millisecond
 
@@ -780,7 +790,11 @@ func pk(provider, setName string, n int) poolKey {
 func TestTargetSetTargetGroupsPresentOnConfigReload(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := NewTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -813,7 +827,11 @@ func TestTargetSetTargetGroupsPresentOnConfigReload(t *testing.T) {
 func TestTargetSetTargetGroupsPresentOnConfigRename(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := NewTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -849,7 +867,11 @@ func TestTargetSetTargetGroupsPresentOnConfigRename(t *testing.T) {
 func TestTargetSetTargetGroupsPresentOnConfigDuplicateAndDeleteOriginal(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := NewTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -888,7 +910,11 @@ func TestTargetSetTargetGroupsPresentOnConfigDuplicateAndDeleteOriginal(t *testi
 func TestTargetSetTargetGroupsPresentOnConfigChange(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := NewTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -950,7 +976,11 @@ func TestTargetSetTargetGroupsPresentOnConfigChange(t *testing.T) {
 func TestTargetSetRecreatesTargetGroupsOnConfigChange(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := NewTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -990,7 +1020,11 @@ func TestTargetSetRecreatesTargetGroupsOnConfigChange(t *testing.T) {
 func TestDiscovererConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := NewTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -1023,7 +1057,11 @@ func TestDiscovererConfigs(t *testing.T) {
 func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := NewTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -1071,7 +1109,11 @@ func TestTargetSetRecreatesEmptyStaticConfigs(t *testing.T) {
 func TestIdenticalConfigurationsAreCoalesced(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, nil, prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := NewTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, nil, reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -1108,7 +1150,11 @@ func TestApplyConfigDoesNotModifyStaticTargets(t *testing.T) {
 	}
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := NewTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -1129,11 +1175,21 @@ type errorConfig struct{ err error }
 func (e errorConfig) Name() string                                        { return "error" }
 func (e errorConfig) NewDiscoverer(DiscovererOptions) (Discoverer, error) { return nil, e.err }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (errorConfig) NewDiscovererMetrics(prometheus.Registerer, RefreshMetricsInstantiator) DiscovererMetrics {
+	return &NoopDiscovererMetrics{}
+}
+
 type lockStaticConfig struct {
 	mu     *sync.Mutex
 	config StaticConfig
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (lockStaticConfig) NewDiscovererMetrics(prometheus.Registerer, RefreshMetricsInstantiator) DiscovererMetrics {
+	return &NoopDiscovererMetrics{}
+}
+
 func (s lockStaticConfig) Name() string { return "lockstatic" }
 func (s lockStaticConfig) NewDiscoverer(DiscovererOptions) (Discoverer, error) {
 	return (lockStaticDiscoverer)(s), nil
@@ -1155,7 +1211,11 @@ func (s lockStaticDiscoverer) Run(ctx context.Context, up chan<- []*targetgroup.
 func TestGaugeFailedConfigs(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := NewTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -1312,7 +1372,10 @@ func TestCoordinationWithReceiver(t *testing.T) {
 			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 			defer cancel()
 
-			mgr := NewManager(ctx, nil, prometheus.NewRegistry())
+			reg := prometheus.NewRegistry()
+			_, sdMetrics := NewTestMetrics(t, reg)
+
+			mgr := NewManager(ctx, nil, reg, sdMetrics)
 			require.NotNil(t, mgr)
 			mgr.updatert = updateDelay
 			go mgr.Run()
@@ -1408,7 +1471,11 @@ func (o onceProvider) Run(_ context.Context, ch chan<- []*targetgroup.Group) {
 func TestTargetSetTargetGroupsUpdateDuringApplyConfig(t *testing.T) {
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
-	discoveryManager := NewManager(ctx, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	_, sdMetrics := NewTestMetrics(t, reg)
+
+	discoveryManager := NewManager(ctx, log.NewNopLogger(), reg, sdMetrics)
 	require.NotNil(t, discoveryManager)
 	discoveryManager.updatert = 100 * time.Millisecond
 	go discoveryManager.Run()
@@ -1470,6 +1537,11 @@ func newTestDiscoverer() *testDiscoverer {
 	}
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*testDiscoverer) NewDiscovererMetrics(prometheus.Registerer, RefreshMetricsInstantiator) DiscovererMetrics {
+	return &NoopDiscovererMetrics{}
+}
+
 // Name implements Config.
 func (t *testDiscoverer) Name() string {
 	return "test"
diff --git a/discovery/marathon/marathon.go b/discovery/marathon/marathon.go
index a6a6252fd0a..ecad108e4a5 100644
--- a/discovery/marathon/marathon.go
+++ b/discovery/marathon/marathon.go
@@ -79,12 +79,19 @@ type SDConfig struct {
 	HTTPClientConfig config.HTTPClientConfig `yaml:",inline"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &marathonMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "marathon" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(*c, opts.Logger, opts.Registerer)
+	return NewDiscovery(*c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -133,7 +140,12 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Marathon Discovery.
-func NewDiscovery(conf SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*marathonMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	rt, err := config.NewRoundTripperFromConfig(conf.HTTPClientConfig, "marathon_sd")
 	if err != nil {
 		return nil, err
@@ -156,11 +168,11 @@ func NewDiscovery(conf SDConfig, logger log.Logger, reg prometheus.Registerer) (
 	}
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "marathon",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "marathon",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
diff --git a/discovery/marathon/marathon_test.go b/discovery/marathon/marathon_test.go
index a1ddce9309b..c78cc1e3c6a 100644
--- a/discovery/marathon/marathon_test.go
+++ b/discovery/marathon/marathon_test.go
@@ -23,7 +23,9 @@ import (
 
 	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
+	"github.com/stretchr/testify/require"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -37,7 +39,19 @@ func testConfig() SDConfig {
 }
 
 func testUpdateServices(client appListClient) ([]*targetgroup.Group, error) {
-	md, err := NewDiscovery(testConfig(), nil, prometheus.NewRegistry())
+	cfg := testConfig()
+
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	err := metrics.Register()
+	if err != nil {
+		return nil, err
+	}
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	md, err := NewDiscovery(cfg, nil, metrics)
 	if err != nil {
 		return nil, err
 	}
@@ -130,7 +144,15 @@ func TestMarathonSDSendGroup(t *testing.T) {
 }
 
 func TestMarathonSDRemoveApp(t *testing.T) {
-	md, err := NewDiscovery(testConfig(), nil, prometheus.NewRegistry())
+	cfg := testConfig()
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	md, err := NewDiscovery(cfg, nil, metrics)
 	if err != nil {
 		t.Fatalf("%s", err)
 	}
diff --git a/discovery/marathon/metrics.go b/discovery/marathon/metrics.go
new file mode 100644
index 00000000000..790c1674716
--- /dev/null
+++ b/discovery/marathon/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package marathon
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*marathonMetrics)(nil)
+
+type marathonMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *marathonMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *marathonMetrics) Unregister() {}
diff --git a/discovery/metrics.go b/discovery/metrics.go
index 6a606039554..a77b86d2745 100644
--- a/discovery/metrics.go
+++ b/discovery/metrics.go
@@ -38,7 +38,7 @@ type Metrics struct {
 	SentUpdates       prometheus.Counter
 }
 
-func NewMetrics(registerer prometheus.Registerer, sdManagerName string) (*Metrics, error) {
+func NewManagerMetrics(registerer prometheus.Registerer, sdManagerName string) (*Metrics, error) {
 	m := &Metrics{}
 
 	m.FailedConfigs = prometheus.NewGauge(
diff --git a/discovery/metrics_refresh.go b/discovery/metrics_refresh.go
new file mode 100644
index 00000000000..d621165ced6
--- /dev/null
+++ b/discovery/metrics_refresh.go
@@ -0,0 +1,75 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package discovery
+
+import (
+	"github.com/prometheus/client_golang/prometheus"
+)
+
+// Metric vectors for the "refresh" package.
+// We define them here in the "discovery" package in order to avoid a cyclic dependency between
+// "discovery" and "refresh".
+type RefreshMetricsVecs struct {
+	failuresVec *prometheus.CounterVec
+	durationVec *prometheus.SummaryVec
+
+	metricRegisterer MetricRegisterer
+}
+
+var _ RefreshMetricsManager = (*RefreshMetricsVecs)(nil)
+
+func NewRefreshMetrics(reg prometheus.Registerer) RefreshMetricsManager {
+	m := &RefreshMetricsVecs{
+		failuresVec: prometheus.NewCounterVec(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_refresh_failures_total",
+				Help: "Number of refresh failures for the given SD mechanism.",
+			},
+			[]string{"mechanism"}),
+		durationVec: prometheus.NewSummaryVec(
+			prometheus.SummaryOpts{
+				Name:       "prometheus_sd_refresh_duration_seconds",
+				Help:       "The duration of a refresh in seconds for the given SD mechanism.",
+				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
+			},
+			[]string{"mechanism"}),
+	}
+
+	// The reason we register metric vectors instead of metrics is so that
+	// the metrics are not visible until they are recorded.
+	m.metricRegisterer = NewMetricRegisterer(reg, []prometheus.Collector{
+		m.failuresVec,
+		m.durationVec,
+	})
+
+	return m
+}
+
+// Instantiate returns metrics out of metric vectors.
+func (m *RefreshMetricsVecs) Instantiate(mech string) *RefreshMetrics {
+	return &RefreshMetrics{
+		Failures: m.failuresVec.WithLabelValues(mech),
+		Duration: m.durationVec.WithLabelValues(mech),
+	}
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *RefreshMetricsVecs) Register() error {
+	return m.metricRegisterer.RegisterMetrics()
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *RefreshMetricsVecs) Unregister() {
+	m.metricRegisterer.UnregisterMetrics()
+}
diff --git a/discovery/moby/docker.go b/discovery/moby/docker.go
index a13bb8704ab..57fa62bb5f2 100644
--- a/discovery/moby/docker.go
+++ b/discovery/moby/docker.go
@@ -76,12 +76,19 @@ type DockerSDConfig struct {
 	RefreshInterval model.Duration `yaml:"refresh_interval"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*DockerSDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &dockerMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Config.
 func (*DockerSDConfig) Name() string { return "docker" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *DockerSDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDockerDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDockerDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -115,8 +122,11 @@ type DockerDiscovery struct {
 }
 
 // NewDockerDiscovery returns a new DockerDiscovery which periodically refreshes its targets.
-func NewDockerDiscovery(conf *DockerSDConfig, logger log.Logger, reg prometheus.Registerer) (*DockerDiscovery, error) {
-	var err error
+func NewDockerDiscovery(conf *DockerSDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*DockerDiscovery, error) {
+	m, ok := metrics.(*dockerMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
 
 	d := &DockerDiscovery{
 		port:               conf.Port,
@@ -167,11 +177,11 @@ func NewDockerDiscovery(conf *DockerSDConfig, logger log.Logger, reg prometheus.
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "docker",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "docker",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
diff --git a/discovery/moby/docker_test.go b/discovery/moby/docker_test.go
index 1a87ad2a120..fec56d3e5fe 100644
--- a/discovery/moby/docker_test.go
+++ b/discovery/moby/docker_test.go
@@ -23,6 +23,8 @@ import (
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"gopkg.in/yaml.v2"
+
+	"github.com/prometheus/prometheus/discovery"
 )
 
 func TestDockerSDRefresh(t *testing.T) {
@@ -38,7 +40,14 @@ host: %s
 	var cfg DockerSDConfig
 	require.NoError(t, yaml.Unmarshal([]byte(cfgString), &cfg))
 
-	d, err := NewDockerDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	d, err := NewDockerDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
diff --git a/discovery/moby/dockerswarm.go b/discovery/moby/dockerswarm.go
index bd87fea5a3f..b0147467d28 100644
--- a/discovery/moby/dockerswarm.go
+++ b/discovery/moby/dockerswarm.go
@@ -70,12 +70,19 @@ type Filter struct {
 	Values []string `yaml:"values"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*DockerSwarmSDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &dockerswarmMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Config.
 func (*DockerSwarmSDConfig) Name() string { return "dockerswarm" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *DockerSwarmSDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -118,8 +125,11 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *DockerSwarmSDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
-	var err error
+func NewDiscovery(conf *DockerSwarmSDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*dockerswarmMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
 
 	d := &Discovery{
 		port: conf.Port,
@@ -170,11 +180,11 @@ func NewDiscovery(conf *DockerSwarmSDConfig, logger log.Logger, reg prometheus.R
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "dockerswarm",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "dockerswarm",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
diff --git a/discovery/moby/metrics_docker.go b/discovery/moby/metrics_docker.go
new file mode 100644
index 00000000000..457d520a0cb
--- /dev/null
+++ b/discovery/moby/metrics_docker.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package moby
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*dockerMetrics)(nil)
+
+type dockerMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *dockerMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *dockerMetrics) Unregister() {}
diff --git a/discovery/moby/metrics_dockerswarm.go b/discovery/moby/metrics_dockerswarm.go
new file mode 100644
index 00000000000..227ba6c2b09
--- /dev/null
+++ b/discovery/moby/metrics_dockerswarm.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package moby
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*dockerswarmMetrics)(nil)
+
+type dockerswarmMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *dockerswarmMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *dockerswarmMetrics) Unregister() {}
diff --git a/discovery/moby/nodes_test.go b/discovery/moby/nodes_test.go
index 512ff7049d4..4ad1088d1ab 100644
--- a/discovery/moby/nodes_test.go
+++ b/discovery/moby/nodes_test.go
@@ -23,6 +23,8 @@ import (
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"gopkg.in/yaml.v2"
+
+	"github.com/prometheus/prometheus/discovery"
 )
 
 func TestDockerSwarmNodesSDRefresh(t *testing.T) {
@@ -39,7 +41,14 @@ host: %s
 	var cfg DockerSwarmSDConfig
 	require.NoError(t, yaml.Unmarshal([]byte(cfgString), &cfg))
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
diff --git a/discovery/moby/services_test.go b/discovery/moby/services_test.go
index 816586dd7f1..47ca69e33a1 100644
--- a/discovery/moby/services_test.go
+++ b/discovery/moby/services_test.go
@@ -23,6 +23,8 @@ import (
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"gopkg.in/yaml.v2"
+
+	"github.com/prometheus/prometheus/discovery"
 )
 
 func TestDockerSwarmSDServicesRefresh(t *testing.T) {
@@ -39,7 +41,14 @@ host: %s
 	var cfg DockerSwarmSDConfig
 	require.NoError(t, yaml.Unmarshal([]byte(cfgString), &cfg))
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
@@ -333,7 +342,14 @@ filters:
 	var cfg DockerSwarmSDConfig
 	require.NoError(t, yaml.Unmarshal([]byte(cfgString), &cfg))
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
diff --git a/discovery/moby/tasks_test.go b/discovery/moby/tasks_test.go
index 764fda34364..ef71bc02f53 100644
--- a/discovery/moby/tasks_test.go
+++ b/discovery/moby/tasks_test.go
@@ -23,6 +23,8 @@ import (
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 	"gopkg.in/yaml.v2"
+
+	"github.com/prometheus/prometheus/discovery"
 )
 
 func TestDockerSwarmTasksSDRefresh(t *testing.T) {
@@ -39,7 +41,14 @@ host: %s
 	var cfg DockerSwarmSDConfig
 	require.NoError(t, yaml.Unmarshal([]byte(cfgString), &cfg))
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
diff --git a/discovery/nomad/metrics.go b/discovery/nomad/metrics.go
new file mode 100644
index 00000000000..9707153d91c
--- /dev/null
+++ b/discovery/nomad/metrics.go
@@ -0,0 +1,57 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package nomad
+
+import (
+	"github.com/prometheus/client_golang/prometheus"
+
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*nomadMetrics)(nil)
+
+type nomadMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+
+	failuresCount prometheus.Counter
+
+	metricRegisterer discovery.MetricRegisterer
+}
+
+func newDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	m := &nomadMetrics{
+		refreshMetrics: rmi,
+		failuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Name: "prometheus_sd_nomad_failures_total",
+				Help: "Number of nomad service discovery refresh failures.",
+			}),
+	}
+
+	m.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{
+		m.failuresCount,
+	})
+
+	return m
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *nomadMetrics) Register() error {
+	return m.metricRegisterer.RegisterMetrics()
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *nomadMetrics) Unregister() {
+	m.metricRegisterer.UnregisterMetrics()
+}
diff --git a/discovery/nomad/nomad.go b/discovery/nomad/nomad.go
index 3fdcf714eb6..d9c48120ae8 100644
--- a/discovery/nomad/nomad.go
+++ b/discovery/nomad/nomad.go
@@ -74,12 +74,17 @@ type SDConfig struct {
 	TagSeparator     string                  `yaml:"tag_separator,omitempty"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return newDiscovererMetrics(reg, rmi)
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "nomad" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -112,11 +117,16 @@ type Discovery struct {
 	region          string
 	server          string
 	tagSeparator    string
-	failuresCount   prometheus.Counter
+	metrics         *nomadMetrics
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*nomadMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	d := &Discovery{
 		allowStale:      conf.AllowStale,
 		namespace:       conf.Namespace,
@@ -124,11 +134,7 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 		region:          conf.Region,
 		server:          conf.Server,
 		tagSeparator:    conf.TagSeparator,
-		failuresCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Name: "prometheus_sd_nomad_failures_total",
-				Help: "Number of nomad service discovery refresh failures.",
-			}),
+		metrics:         m,
 	}
 
 	HTTPClient, err := config.NewClientFromConfig(conf.HTTPClientConfig, "nomad_sd")
@@ -151,12 +157,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "nomad",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
-			Metrics:  []prometheus.Collector{d.failuresCount},
+			Logger:              logger,
+			Mech:                "nomad",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
@@ -168,7 +173,7 @@ func (d *Discovery) refresh(context.Context) ([]*targetgroup.Group, error) {
 	}
 	stubs, _, err := d.client.Services().List(opts)
 	if err != nil {
-		d.failuresCount.Inc()
+		d.metrics.failuresCount.Inc()
 		return nil, err
 	}
 
@@ -180,7 +185,7 @@ func (d *Discovery) refresh(context.Context) ([]*targetgroup.Group, error) {
 		for _, service := range stub.Services {
 			instances, _, err := d.client.Services().Get(service.ServiceName, opts)
 			if err != nil {
-				d.failuresCount.Inc()
+				d.metrics.failuresCount.Inc()
 				return nil, fmt.Errorf("failed to fetch services: %w", err)
 			}
 
diff --git a/discovery/nomad/nomad_test.go b/discovery/nomad/nomad_test.go
index ca67a877e1d..357d4a8e9b6 100644
--- a/discovery/nomad/nomad_test.go
+++ b/discovery/nomad/nomad_test.go
@@ -25,6 +25,8 @@ import (
 	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
+
+	"github.com/prometheus/prometheus/discovery"
 )
 
 type NomadSDTestSuite struct {
@@ -128,8 +130,16 @@ func TestConfiguredService(t *testing.T) {
 	conf := &SDConfig{
 		Server: "http://localhost:4646",
 	}
-	_, err := NewDiscovery(conf, nil, prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := conf.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+
+	_, err := NewDiscovery(conf, nil, metrics)
 	require.NoError(t, err)
+
+	metrics.Unregister()
 }
 
 func TestNomadSDRefresh(t *testing.T) {
@@ -142,7 +152,15 @@ func TestNomadSDRefresh(t *testing.T) {
 
 	cfg := DefaultSDConfig
 	cfg.Server = endpoint.String()
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 
 	tgs, err := d.refresh(context.Background())
diff --git a/discovery/openstack/metrics.go b/discovery/openstack/metrics.go
new file mode 100644
index 00000000000..a64c1a6732b
--- /dev/null
+++ b/discovery/openstack/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package openstack
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+type openstackMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+var _ discovery.DiscovererMetrics = (*openstackMetrics)(nil)
+
+// Register implements discovery.DiscovererMetrics.
+func (m *openstackMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *openstackMetrics) Unregister() {}
diff --git a/discovery/openstack/openstack.go b/discovery/openstack/openstack.go
index 9544a7c0f7f..c98f78788d4 100644
--- a/discovery/openstack/openstack.go
+++ b/discovery/openstack/openstack.go
@@ -66,12 +66,19 @@ type SDConfig struct {
 	Availability                string           `yaml:"availability,omitempty"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &openstackMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "openstack" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -135,18 +142,23 @@ type refresher interface {
 }
 
 // NewDiscovery returns a new OpenStack Discoverer which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, l log.Logger, reg prometheus.Registerer) (*refresh.Discovery, error) {
+func NewDiscovery(conf *SDConfig, l log.Logger, metrics discovery.DiscovererMetrics) (*refresh.Discovery, error) {
+	m, ok := metrics.(*openstackMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	r, err := newRefresher(conf, l)
 	if err != nil {
 		return nil, err
 	}
 	return refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   l,
-			Mech:     "openstack",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: r.refresh,
-			Registry: reg,
+			Logger:              l,
+			Mech:                "openstack",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            r.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	), nil
 }
diff --git a/discovery/ovhcloud/metrics.go b/discovery/ovhcloud/metrics.go
new file mode 100644
index 00000000000..1c517094694
--- /dev/null
+++ b/discovery/ovhcloud/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package ovhcloud
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*ovhcloudMetrics)(nil)
+
+type ovhcloudMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *ovhcloudMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *ovhcloudMetrics) Unregister() {}
diff --git a/discovery/ovhcloud/ovhcloud.go b/discovery/ovhcloud/ovhcloud.go
index eca284a85ab..988b4482f22 100644
--- a/discovery/ovhcloud/ovhcloud.go
+++ b/discovery/ovhcloud/ovhcloud.go
@@ -53,6 +53,13 @@ type SDConfig struct {
 	Service           string         `yaml:"service"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &ovhcloudMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name implements the Discoverer interface.
 func (c SDConfig) Name() string {
 	return "ovhcloud"
@@ -94,7 +101,7 @@ func createClient(config *SDConfig) (*ovh.Client, error) {
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(options discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, options.Logger, options.Registerer)
+	return NewDiscovery(c, options.Logger, options.Metrics)
 }
 
 func init() {
@@ -141,7 +148,12 @@ func newRefresher(conf *SDConfig, logger log.Logger) (refresher, error) {
 }
 
 // NewDiscovery returns a new OVHcloud Discoverer which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*refresh.Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*refresh.Discovery, error) {
+	m, ok := metrics.(*ovhcloudMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	r, err := newRefresher(conf, logger)
 	if err != nil {
 		return nil, err
@@ -149,11 +161,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 
 	return refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "ovhcloud",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: r.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "ovhcloud",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            r.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	), nil
 }
diff --git a/discovery/ovhcloud/ovhcloud_test.go b/discovery/ovhcloud/ovhcloud_test.go
index 9bd9ea95475..53ec9b44595 100644
--- a/discovery/ovhcloud/ovhcloud_test.go
+++ b/discovery/ovhcloud/ovhcloud_test.go
@@ -122,9 +122,17 @@ func TestParseIPs(t *testing.T) {
 func TestDiscoverer(t *testing.T) {
 	conf, _ := getMockConf("vps")
 	logger := testutil.NewLogger(t)
+
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := conf.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
 	_, err := conf.NewDiscoverer(discovery.DiscovererOptions{
-		Logger:     logger,
-		Registerer: prometheus.NewRegistry(),
+		Logger:  logger,
+		Metrics: metrics,
 	})
 
 	require.NoError(t, err)
diff --git a/discovery/puppetdb/metrics.go b/discovery/puppetdb/metrics.go
new file mode 100644
index 00000000000..2f5faa57cef
--- /dev/null
+++ b/discovery/puppetdb/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package puppetdb
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*puppetdbMetrics)(nil)
+
+type puppetdbMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *puppetdbMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *puppetdbMetrics) Unregister() {}
diff --git a/discovery/puppetdb/puppetdb.go b/discovery/puppetdb/puppetdb.go
index 616f2c61e69..4355a7adeaa 100644
--- a/discovery/puppetdb/puppetdb.go
+++ b/discovery/puppetdb/puppetdb.go
@@ -79,12 +79,19 @@ type SDConfig struct {
 	Port              int                     `yaml:"port"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &puppetdbMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "puppetdb" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -131,7 +138,12 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new PuppetDB discovery for the given config.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*puppetdbMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	if logger == nil {
 		logger = log.NewNopLogger()
 	}
@@ -158,11 +170,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "http",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "http",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
diff --git a/discovery/puppetdb/puppetdb_test.go b/discovery/puppetdb/puppetdb_test.go
index edd9b9d0469..bf9c7b215e5 100644
--- a/discovery/puppetdb/puppetdb_test.go
+++ b/discovery/puppetdb/puppetdb_test.go
@@ -28,6 +28,7 @@ import (
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -63,9 +64,17 @@ func TestPuppetSlashInURL(t *testing.T) {
 			Port:             80,
 			RefreshInterval:  model.Duration(30 * time.Second),
 		}
-		d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+
+		reg := prometheus.NewRegistry()
+		refreshMetrics := discovery.NewRefreshMetrics(reg)
+		metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+		require.NoError(t, metrics.Register())
+
+		d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 		require.NoError(t, err)
 		require.Equal(t, apiURL, d.url)
+
+		metrics.Unregister()
 	}
 }
 
@@ -80,7 +89,12 @@ func TestPuppetDBRefresh(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
@@ -107,6 +121,8 @@ func TestPuppetDBRefresh(t *testing.T) {
 		},
 	}
 	require.Equal(t, expectedTargets, tgs)
+
+	metrics.Unregister()
 }
 
 func TestPuppetDBRefreshWithParameters(t *testing.T) {
@@ -121,7 +137,12 @@ func TestPuppetDBRefreshWithParameters(t *testing.T) {
 		RefreshInterval:   model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
@@ -158,6 +179,8 @@ func TestPuppetDBRefreshWithParameters(t *testing.T) {
 		},
 	}
 	require.Equal(t, expectedTargets, tgs)
+
+	metrics.Unregister()
 }
 
 func TestPuppetDBInvalidCode(t *testing.T) {
@@ -173,12 +196,19 @@ func TestPuppetDBInvalidCode(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
 	_, err = d.refresh(ctx)
 	require.EqualError(t, err, "server returned HTTP status 400 Bad Request")
+
+	metrics.Unregister()
 }
 
 func TestPuppetDBInvalidFormat(t *testing.T) {
@@ -194,10 +224,17 @@ func TestPuppetDBInvalidFormat(t *testing.T) {
 		RefreshInterval:  model.Duration(30 * time.Second),
 	}
 
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 
 	ctx := context.Background()
 	_, err = d.refresh(ctx)
 	require.EqualError(t, err, "unsupported content type text/plain; charset=utf-8")
+
+	metrics.Unregister()
 }
diff --git a/discovery/refresh/refresh.go b/discovery/refresh/refresh.go
index 0b0e5a921d7..f037a90cff0 100644
--- a/discovery/refresh/refresh.go
+++ b/discovery/refresh/refresh.go
@@ -20,19 +20,17 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
-	"github.com/prometheus/client_golang/prometheus"
 
 	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
 type Options struct {
-	Logger   log.Logger
-	Mech     string
-	Interval time.Duration
-	RefreshF func(ctx context.Context) ([]*targetgroup.Group, error)
-	Registry prometheus.Registerer
-	Metrics  []prometheus.Collector
+	Logger              log.Logger
+	Mech                string
+	Interval            time.Duration
+	RefreshF            func(ctx context.Context) ([]*targetgroup.Group, error)
+	MetricsInstantiator discovery.RefreshMetricsInstantiator
 }
 
 // Discovery implements the Discoverer interface.
@@ -40,15 +38,13 @@ type Discovery struct {
 	logger   log.Logger
 	interval time.Duration
 	refreshf func(ctx context.Context) ([]*targetgroup.Group, error)
-
-	failures prometheus.Counter
-	duration prometheus.Summary
-
-	metricRegisterer discovery.MetricRegisterer
+	metrics  *discovery.RefreshMetrics
 }
 
 // NewDiscovery returns a Discoverer function that calls a refresh() function at every interval.
 func NewDiscovery(opts Options) *Discovery {
+	m := opts.MetricsInstantiator.Instantiate(opts.Mech)
+
 	var logger log.Logger
 	if opts.Logger == nil {
 		logger = log.NewNopLogger()
@@ -60,44 +56,14 @@ func NewDiscovery(opts Options) *Discovery {
 		logger:   logger,
 		interval: opts.Interval,
 		refreshf: opts.RefreshF,
-		failures: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Name: "prometheus_sd_refresh_failures_total",
-				Help: "Number of refresh failures for the given SD mechanism.",
-				ConstLabels: prometheus.Labels{
-					"mechanism": opts.Mech,
-				},
-			}),
-		duration: prometheus.NewSummary(
-			prometheus.SummaryOpts{
-				Name:       "prometheus_sd_refresh_duration_seconds",
-				Help:       "The duration of a refresh in seconds for the given SD mechanism.",
-				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
-				ConstLabels: prometheus.Labels{
-					"mechanism": opts.Mech,
-				},
-			}),
-	}
-
-	metrics := []prometheus.Collector{d.failures, d.duration}
-	if opts.Metrics != nil {
-		metrics = append(metrics, opts.Metrics...)
+		metrics:  m,
 	}
 
-	d.metricRegisterer = discovery.NewMetricRegisterer(opts.Registry, metrics)
-
 	return &d
 }
 
 // Run implements the Discoverer interface.
 func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
-	err := d.metricRegisterer.RegisterMetrics()
-	if err != nil {
-		level.Error(d.logger).Log("msg", "Unable to register metrics", "err", err.Error())
-		return
-	}
-	defer d.metricRegisterer.UnregisterMetrics()
-
 	// Get an initial set right away.
 	tgs, err := d.refresh(ctx)
 	if err != nil {
@@ -140,12 +106,12 @@ func (d *Discovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
 func (d *Discovery) refresh(ctx context.Context) ([]*targetgroup.Group, error) {
 	now := time.Now()
 	defer func() {
-		d.duration.Observe(time.Since(now).Seconds())
+		d.metrics.Duration.Observe(time.Since(now).Seconds())
 	}()
 
 	tgs, err := d.refreshf(ctx)
 	if err != nil {
-		d.failures.Inc()
+		d.metrics.Failures.Inc()
 	}
 	return tgs, err
 }
diff --git a/discovery/refresh/refresh_test.go b/discovery/refresh/refresh_test.go
index 12e7ab3be03..407f0a7fa08 100644
--- a/discovery/refresh/refresh_test.go
+++ b/discovery/refresh/refresh_test.go
@@ -24,6 +24,7 @@ import (
 	"github.com/stretchr/testify/require"
 	"go.uber.org/goleak"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -66,13 +67,18 @@ func TestRefresh(t *testing.T) {
 		return nil, fmt.Errorf("some error")
 	}
 	interval := time.Millisecond
+
+	metrics := discovery.NewRefreshMetrics(prometheus.NewRegistry())
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+
 	d := NewDiscovery(
 		Options{
-			Logger:   nil,
-			Mech:     "test",
-			Interval: interval,
-			RefreshF: refresh,
-			Registry: prometheus.NewRegistry(),
+			Logger:              nil,
+			Mech:                "test",
+			Interval:            interval,
+			RefreshF:            refresh,
+			MetricsInstantiator: metrics,
 		},
 	)
 
diff --git a/discovery/registry.go b/discovery/registry.go
index 13168a07a7a..1f491d4ca9f 100644
--- a/discovery/registry.go
+++ b/discovery/registry.go
@@ -24,6 +24,8 @@ import (
 
 	"gopkg.in/yaml.v2"
 
+	"github.com/prometheus/client_golang/prometheus"
+
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -258,3 +260,24 @@ func replaceYAMLTypeError(err error, oldTyp, newTyp reflect.Type) error {
 	}
 	return err
 }
+
+// RegisterSDMetrics registers the metrics used by service discovery mechanisms.
+// RegisterSDMetrics should be called only once during the lifetime of the Prometheus process.
+// There is no need for the Prometheus process to unregister the metrics.
+func RegisterSDMetrics(registerer prometheus.Registerer, rmm RefreshMetricsManager) (map[string]DiscovererMetrics, error) {
+	err := rmm.Register()
+	if err != nil {
+		return nil, fmt.Errorf("failed to create service discovery refresh metrics")
+	}
+
+	metrics := make(map[string]DiscovererMetrics)
+	for _, conf := range configNames {
+		currentSdMetrics := conf.NewDiscovererMetrics(registerer, rmm)
+		err = currentSdMetrics.Register()
+		if err != nil {
+			return nil, fmt.Errorf("failed to create service discovery metrics")
+		}
+		metrics[conf.Name()] = currentSdMetrics
+	}
+	return metrics, nil
+}
diff --git a/discovery/scaleway/metrics.go b/discovery/scaleway/metrics.go
new file mode 100644
index 00000000000..a8277d0fb38
--- /dev/null
+++ b/discovery/scaleway/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package scaleway
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*scalewayMetrics)(nil)
+
+type scalewayMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *scalewayMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *scalewayMetrics) Unregister() {}
diff --git a/discovery/scaleway/scaleway.go b/discovery/scaleway/scaleway.go
index 86527b34e64..f8e1a83f5ee 100644
--- a/discovery/scaleway/scaleway.go
+++ b/discovery/scaleway/scaleway.go
@@ -104,6 +104,13 @@ type SDConfig struct {
 	Role role `yaml:"role"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &scalewayMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 func (c SDConfig) Name() string {
 	return "scaleway"
 }
@@ -161,7 +168,7 @@ func (c *SDConfig) UnmarshalYAML(unmarshal func(interface{}) error) error {
 }
 
 func (c SDConfig) NewDiscoverer(options discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(&c, options.Logger, options.Registerer)
+	return NewDiscovery(&c, options.Logger, options.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -178,7 +185,12 @@ func init() {
 // the Discoverer interface.
 type Discovery struct{}
 
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*refresh.Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*refresh.Discovery, error) {
+	m, ok := metrics.(*scalewayMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	r, err := newRefresher(conf)
 	if err != nil {
 		return nil, err
@@ -186,11 +198,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 
 	return refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "scaleway",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: r.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "scaleway",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            r.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	), nil
 }
diff --git a/discovery/triton/metrics.go b/discovery/triton/metrics.go
new file mode 100644
index 00000000000..3e34a840af1
--- /dev/null
+++ b/discovery/triton/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package triton
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*tritonMetrics)(nil)
+
+type tritonMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *tritonMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *tritonMetrics) Unregister() {}
diff --git a/discovery/triton/triton.go b/discovery/triton/triton.go
index 4839827ada9..e56b7951b62 100644
--- a/discovery/triton/triton.go
+++ b/discovery/triton/triton.go
@@ -70,12 +70,19 @@ type SDConfig struct {
 	Version         int              `yaml:"version"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &tritonMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "triton" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return New(opts.Logger, c, opts.Registerer)
+	return New(opts.Logger, c, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -139,7 +146,12 @@ type Discovery struct {
 }
 
 // New returns a new Discovery which periodically refreshes its targets.
-func New(logger log.Logger, conf *SDConfig, reg prometheus.Registerer) (*Discovery, error) {
+func New(logger log.Logger, conf *SDConfig, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*tritonMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	tls, err := config.NewTLSConfig(&conf.TLSConfig)
 	if err != nil {
 		return nil, err
@@ -161,11 +173,11 @@ func New(logger log.Logger, conf *SDConfig, reg prometheus.Registerer) (*Discove
 	}
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "triton",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "triton",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
diff --git a/discovery/triton/triton_test.go b/discovery/triton/triton_test.go
index fa51a2e472a..e37693e6bfc 100644
--- a/discovery/triton/triton_test.go
+++ b/discovery/triton/triton_test.go
@@ -28,6 +28,8 @@ import (
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
+
+	"github.com/prometheus/prometheus/discovery"
 )
 
 var (
@@ -79,12 +81,26 @@ var (
 	}
 )
 
-func newTritonDiscovery(c SDConfig) (*Discovery, error) {
-	return New(nil, &c, prometheus.NewRegistry())
+func newTritonDiscovery(c SDConfig) (*Discovery, discovery.DiscovererMetrics, error) {
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	// TODO(ptodev): Add the ability to unregister refresh metrics.
+	metrics := c.NewDiscovererMetrics(reg, refreshMetrics)
+	err := metrics.Register()
+	if err != nil {
+		return nil, nil, err
+	}
+
+	d, err := New(nil, &c, metrics)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	return d, metrics, nil
 }
 
 func TestTritonSDNew(t *testing.T) {
-	td, err := newTritonDiscovery(conf)
+	td, m, err := newTritonDiscovery(conf)
 	require.NoError(t, err)
 	require.NotNil(t, td)
 	require.NotNil(t, td.client)
@@ -94,16 +110,17 @@ func TestTritonSDNew(t *testing.T) {
 	require.Equal(t, conf.DNSSuffix, td.sdConfig.DNSSuffix)
 	require.Equal(t, conf.Endpoint, td.sdConfig.Endpoint)
 	require.Equal(t, conf.Port, td.sdConfig.Port)
+	m.Unregister()
 }
 
 func TestTritonSDNewBadConfig(t *testing.T) {
-	td, err := newTritonDiscovery(badconf)
+	td, _, err := newTritonDiscovery(badconf)
 	require.Error(t, err)
 	require.Nil(t, td)
 }
 
 func TestTritonSDNewGroupsConfig(t *testing.T) {
-	td, err := newTritonDiscovery(groupsconf)
+	td, m, err := newTritonDiscovery(groupsconf)
 	require.NoError(t, err)
 	require.NotNil(t, td)
 	require.NotNil(t, td.client)
@@ -114,10 +131,11 @@ func TestTritonSDNewGroupsConfig(t *testing.T) {
 	require.Equal(t, groupsconf.Endpoint, td.sdConfig.Endpoint)
 	require.Equal(t, groupsconf.Groups, td.sdConfig.Groups)
 	require.Equal(t, groupsconf.Port, td.sdConfig.Port)
+	m.Unregister()
 }
 
 func TestTritonSDNewCNConfig(t *testing.T) {
-	td, err := newTritonDiscovery(cnconf)
+	td, m, err := newTritonDiscovery(cnconf)
 	require.NoError(t, err)
 	require.NotNil(t, td)
 	require.NotNil(t, td.client)
@@ -128,6 +146,7 @@ func TestTritonSDNewCNConfig(t *testing.T) {
 	require.Equal(t, cnconf.DNSSuffix, td.sdConfig.DNSSuffix)
 	require.Equal(t, cnconf.Endpoint, td.sdConfig.Endpoint)
 	require.Equal(t, cnconf.Port, td.sdConfig.Port)
+	m.Unregister()
 }
 
 func TestTritonSDRefreshNoTargets(t *testing.T) {
@@ -160,21 +179,23 @@ func TestTritonSDRefreshMultipleTargets(t *testing.T) {
 }
 
 func TestTritonSDRefreshNoServer(t *testing.T) {
-	td, _ := newTritonDiscovery(conf)
+	td, m, _ := newTritonDiscovery(conf)
 
 	_, err := td.refresh(context.Background())
 	require.Error(t, err)
 	require.True(t, strings.Contains(err.Error(), "an error occurred when requesting targets from the discovery endpoint"))
+	m.Unregister()
 }
 
 func TestTritonSDRefreshCancelled(t *testing.T) {
-	td, _ := newTritonDiscovery(conf)
+	td, m, _ := newTritonDiscovery(conf)
 
 	ctx, cancel := context.WithCancel(context.Background())
 	cancel()
 	_, err := td.refresh(ctx)
 	require.Error(t, err)
 	require.True(t, strings.Contains(err.Error(), context.Canceled.Error()))
+	m.Unregister()
 }
 
 func TestTritonSDRefreshCNsUUIDOnly(t *testing.T) {
@@ -211,8 +232,8 @@ func TestTritonSDRefreshCNsWithHostname(t *testing.T) {
 
 func testTritonSDRefresh(t *testing.T, c SDConfig, dstr string) []model.LabelSet {
 	var (
-		td, _ = newTritonDiscovery(c)
-		s     = httptest.NewTLSServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		td, m, _ = newTritonDiscovery(c)
+		s        = httptest.NewTLSServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 			fmt.Fprintln(w, dstr)
 		}))
 	)
@@ -240,5 +261,7 @@ func testTritonSDRefresh(t *testing.T, c SDConfig, dstr string) []model.LabelSet
 	tg := tgs[0]
 	require.NotNil(t, tg)
 
+	m.Unregister()
+
 	return tg.Targets
 }
diff --git a/discovery/uyuni/metrics.go b/discovery/uyuni/metrics.go
new file mode 100644
index 00000000000..6793b592069
--- /dev/null
+++ b/discovery/uyuni/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package uyuni
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*uyuniMetrics)(nil)
+
+type uyuniMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *uyuniMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *uyuniMetrics) Unregister() {}
diff --git a/discovery/uyuni/uyuni.go b/discovery/uyuni/uyuni.go
index 744f3f96cfd..e885ef2e80b 100644
--- a/discovery/uyuni/uyuni.go
+++ b/discovery/uyuni/uyuni.go
@@ -111,12 +111,19 @@ type Discovery struct {
 	logger          log.Logger
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &uyuniMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "uyuni" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -204,7 +211,12 @@ func getEndpointInfoForSystems(
 }
 
 // NewDiscovery returns a uyuni discovery for the given configuration.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*uyuniMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	apiURL, err := url.Parse(conf.Server)
 	if err != nil {
 		return nil, err
@@ -229,11 +241,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "uyuni",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "uyuni",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
diff --git a/discovery/uyuni/uyuni_test.go b/discovery/uyuni/uyuni_test.go
index fd03c88f1b6..09be23e2b4f 100644
--- a/discovery/uyuni/uyuni_test.go
+++ b/discovery/uyuni/uyuni_test.go
@@ -25,6 +25,7 @@ import (
 
 	"github.com/prometheus/client_golang/prometheus"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -37,7 +38,17 @@ func testUpdateServices(respHandler http.HandlerFunc) ([]*targetgroup.Group, err
 		Server: ts.URL,
 	}
 
-	md, err := NewDiscovery(&conf, nil, prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := conf.NewDiscovererMetrics(reg, refreshMetrics)
+	err := metrics.Register()
+	if err != nil {
+		return nil, err
+	}
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	md, err := NewDiscovery(&conf, nil, metrics)
 	if err != nil {
 		return nil, err
 	}
@@ -110,7 +121,14 @@ func TestUyuniSDSkipLogin(t *testing.T) {
 		Server: ts.URL,
 	}
 
-	md, err := NewDiscovery(&conf, nil, prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := conf.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	md, err := NewDiscovery(&conf, nil, metrics)
 	if err != nil {
 		t.Error(err)
 	}
diff --git a/discovery/vultr/metrics.go b/discovery/vultr/metrics.go
new file mode 100644
index 00000000000..193436aad2e
--- /dev/null
+++ b/discovery/vultr/metrics.go
@@ -0,0 +1,32 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package vultr
+
+import (
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*vultrMetrics)(nil)
+
+type vultrMetrics struct {
+	refreshMetrics discovery.RefreshMetricsInstantiator
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *vultrMetrics) Register() error {
+	return nil
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *vultrMetrics) Unregister() {}
diff --git a/discovery/vultr/vultr.go b/discovery/vultr/vultr.go
index 129800048ae..aaa9c64e47a 100644
--- a/discovery/vultr/vultr.go
+++ b/discovery/vultr/vultr.go
@@ -74,12 +74,19 @@ type SDConfig struct {
 	Port            int            `yaml:"port"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*SDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &vultrMetrics{
+		refreshMetrics: rmi,
+	}
+}
+
 // Name returns the name of the Config.
 func (*SDConfig) Name() string { return "vultr" }
 
 // NewDiscoverer returns a Discoverer for the Config.
 func (c *SDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discovery.Discoverer, error) {
-	return NewDiscovery(c, opts.Logger, opts.Registerer)
+	return NewDiscovery(c, opts.Logger, opts.Metrics)
 }
 
 // SetDirectory joins any relative file paths with dir.
@@ -107,7 +114,12 @@ type Discovery struct {
 }
 
 // NewDiscovery returns a new Discovery which periodically refreshes its targets.
-func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer) (*Discovery, error) {
+func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (*Discovery, error) {
+	m, ok := metrics.(*vultrMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	d := &Discovery{
 		port: conf.Port,
 	}
@@ -130,11 +142,11 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, reg prometheus.Registerer)
 
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
-			Logger:   logger,
-			Mech:     "vultr",
-			Interval: time.Duration(conf.RefreshInterval),
-			RefreshF: d.refresh,
-			Registry: reg,
+			Logger:              logger,
+			Mech:                "vultr",
+			Interval:            time.Duration(conf.RefreshInterval),
+			RefreshF:            d.refresh,
+			MetricsInstantiator: m.refreshMetrics,
 		},
 	)
 	return d, nil
diff --git a/discovery/vultr/vultr_test.go b/discovery/vultr/vultr_test.go
index c50b11d2da4..2f12a35529f 100644
--- a/discovery/vultr/vultr_test.go
+++ b/discovery/vultr/vultr_test.go
@@ -23,6 +23,8 @@ import (
 	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
+
+	"github.com/prometheus/prometheus/discovery"
 )
 
 type VultrSDTestSuite struct {
@@ -47,7 +49,15 @@ func TestVultrSDRefresh(t *testing.T) {
 
 	cfg := DefaultSDConfig
 	cfg.HTTPClientConfig.BearerToken = APIKey
-	d, err := NewDiscovery(&cfg, log.NewNopLogger(), prometheus.NewRegistry())
+
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	defer metrics.Unregister()
+	defer refreshMetrics.Unregister()
+
+	d, err := NewDiscovery(&cfg, log.NewNopLogger(), metrics)
 	require.NoError(t, err)
 	endpoint, err := url.Parse(sdMock.Mock.Endpoint())
 	require.NoError(t, err)
diff --git a/discovery/xds/kuma.go b/discovery/xds/kuma.go
index c74bc552c7a..d1d540aaf4d 100644
--- a/discovery/xds/kuma.go
+++ b/discovery/xds/kuma.go
@@ -58,6 +58,11 @@ const (
 
 type KumaSDConfig = SDConfig
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*KumaSDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return newDiscovererMetrics(reg, rmi)
+}
+
 // UnmarshalYAML implements the yaml.Unmarshaler interface.
 func (c *KumaSDConfig) UnmarshalYAML(unmarshal func(interface{}) error) error {
 	*c = DefaultKumaSDConfig
@@ -97,7 +102,7 @@ func (c *KumaSDConfig) NewDiscoverer(opts discovery.DiscovererOptions) (discover
 		logger = log.NewNopLogger()
 	}
 
-	return NewKumaHTTPDiscovery(c, logger, opts.Registerer)
+	return NewKumaHTTPDiscovery(c, logger, opts.Metrics)
 }
 
 func convertKumaV1MonitoringAssignment(assignment *MonitoringAssignment) []model.LabelSet {
@@ -153,7 +158,12 @@ func kumaMadsV1ResourceParser(resources []*anypb.Any, typeURL string) ([]model.L
 	return targets, nil
 }
 
-func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger, reg prometheus.Registerer) (discovery.Discoverer, error) {
+func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger, metrics discovery.DiscovererMetrics) (discovery.Discoverer, error) {
+	m, ok := metrics.(*xdsMetrics)
+	if !ok {
+		return nil, fmt.Errorf("invalid discovery metrics type")
+	}
+
 	// Default to "prometheus" if hostname is unavailable.
 	clientID := conf.ClientID
 	if clientID == "" {
@@ -189,36 +199,8 @@ func NewKumaHTTPDiscovery(conf *KumaSDConfig, logger log.Logger, reg prometheus.
 		refreshInterval: time.Duration(conf.RefreshInterval),
 		source:          "kuma",
 		parseResources:  kumaMadsV1ResourceParser,
-		fetchFailuresCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Namespace: namespace,
-				Name:      "sd_kuma_fetch_failures_total",
-				Help:      "The number of Kuma MADS fetch call failures.",
-			}),
-		fetchSkipUpdateCount: prometheus.NewCounter(
-			prometheus.CounterOpts{
-				Namespace: namespace,
-				Name:      "sd_kuma_fetch_skipped_updates_total",
-				Help:      "The number of Kuma MADS fetch calls that result in no updates to the targets.",
-			}),
-		fetchDuration: prometheus.NewSummary(
-			prometheus.SummaryOpts{
-				Namespace:  namespace,
-				Name:       "sd_kuma_fetch_duration_seconds",
-				Help:       "The duration of a Kuma MADS fetch call.",
-				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
-			},
-		),
+		metrics:         m,
 	}
 
-	d.metricRegisterer = discovery.NewMetricRegisterer(
-		reg,
-		[]prometheus.Collector{
-			d.fetchFailuresCount,
-			d.fetchSkipUpdateCount,
-			d.fetchDuration,
-		},
-	)
-
 	return d, nil
 }
diff --git a/discovery/xds/kuma_test.go b/discovery/xds/kuma_test.go
index 5e2417c96fa..cfb9cbac501 100644
--- a/discovery/xds/kuma_test.go
+++ b/discovery/xds/kuma_test.go
@@ -28,6 +28,7 @@ import (
 	"google.golang.org/protobuf/types/known/anypb"
 	"gopkg.in/yaml.v2"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -108,7 +109,16 @@ func getKumaMadsV1DiscoveryResponse(resources ...*MonitoringAssignment) (*v3.Dis
 }
 
 func newKumaTestHTTPDiscovery(c KumaSDConfig) (*fetchDiscovery, error) {
-	kd, err := NewKumaHTTPDiscovery(&c, nopLogger, prometheus.NewRegistry())
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	// TODO(ptodev): Add the ability to unregister refresh metrics.
+	metrics := c.NewDiscovererMetrics(reg, refreshMetrics)
+	err := metrics.Register()
+	if err != nil {
+		return nil, err
+	}
+
+	kd, err := NewKumaHTTPDiscovery(&c, nopLogger, metrics)
 	if err != nil {
 		return nil, err
 	}
@@ -207,6 +217,8 @@ func TestNewKumaHTTPDiscovery(t *testing.T) {
 	require.Equal(t, KumaMadsV1ResourceTypeURL, resClient.ResourceTypeURL())
 	require.Equal(t, kumaConf.ClientID, resClient.ID())
 	require.Equal(t, KumaMadsV1ResourceType, resClient.config.ResourceType)
+
+	kd.metrics.Unregister()
 }
 
 func TestKumaHTTPDiscoveryRefresh(t *testing.T) {
@@ -301,4 +313,6 @@ tls_config:
 	case <-ch:
 		require.Fail(t, "no update expected")
 	}
+
+	kd.metrics.Unregister()
 }
diff --git a/discovery/xds/metrics.go b/discovery/xds/metrics.go
new file mode 100644
index 00000000000..597d516566a
--- /dev/null
+++ b/discovery/xds/metrics.go
@@ -0,0 +1,73 @@
+// Copyright 2015 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package xds
+
+import (
+	"github.com/prometheus/client_golang/prometheus"
+
+	"github.com/prometheus/prometheus/discovery"
+)
+
+var _ discovery.DiscovererMetrics = (*xdsMetrics)(nil)
+
+type xdsMetrics struct {
+	fetchDuration        prometheus.Summary
+	fetchSkipUpdateCount prometheus.Counter
+	fetchFailuresCount   prometheus.Counter
+
+	metricRegisterer discovery.MetricRegisterer
+}
+
+func newDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	m := &xdsMetrics{
+		fetchFailuresCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Namespace: namespace,
+				Name:      "sd_kuma_fetch_failures_total",
+				Help:      "The number of Kuma MADS fetch call failures.",
+			}),
+		fetchSkipUpdateCount: prometheus.NewCounter(
+			prometheus.CounterOpts{
+				Namespace: namespace,
+				Name:      "sd_kuma_fetch_skipped_updates_total",
+				Help:      "The number of Kuma MADS fetch calls that result in no updates to the targets.",
+			}),
+		fetchDuration: prometheus.NewSummary(
+			prometheus.SummaryOpts{
+				Namespace:  namespace,
+				Name:       "sd_kuma_fetch_duration_seconds",
+				Help:       "The duration of a Kuma MADS fetch call.",
+				Objectives: map[float64]float64{0.5: 0.05, 0.9: 0.01, 0.99: 0.001},
+			},
+		),
+	}
+
+	m.metricRegisterer = discovery.NewMetricRegisterer(reg, []prometheus.Collector{
+		m.fetchFailuresCount,
+		m.fetchSkipUpdateCount,
+		m.fetchDuration,
+	})
+
+	return m
+}
+
+// Register implements discovery.DiscovererMetrics.
+func (m *xdsMetrics) Register() error {
+	return m.metricRegisterer.RegisterMetrics()
+}
+
+// Unregister implements discovery.DiscovererMetrics.
+func (m *xdsMetrics) Unregister() {
+	m.metricRegisterer.UnregisterMetrics()
+}
diff --git a/discovery/xds/xds.go b/discovery/xds/xds.go
index 8b6cb7e65ed..8191d6be1ae 100644
--- a/discovery/xds/xds.go
+++ b/discovery/xds/xds.go
@@ -20,7 +20,6 @@ import (
 	v3 "github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3"
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
-	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/config"
 	"github.com/prometheus/common/model"
 	"google.golang.org/protobuf/encoding/protojson"
@@ -107,20 +106,10 @@ type fetchDiscovery struct {
 	parseResources resourceParser
 	logger         log.Logger
 
-	fetchDuration        prometheus.Summary
-	fetchSkipUpdateCount prometheus.Counter
-	fetchFailuresCount   prometheus.Counter
-
-	metricRegisterer discovery.MetricRegisterer
+	metrics *xdsMetrics
 }
 
 func (d *fetchDiscovery) Run(ctx context.Context, ch chan<- []*targetgroup.Group) {
-	err := d.metricRegisterer.RegisterMetrics()
-	if err != nil {
-		level.Error(d.logger).Log("msg", "Unable to register metrics", "err", err.Error())
-		return
-	}
-	defer d.metricRegisterer.UnregisterMetrics()
 	defer d.client.Close()
 
 	ticker := time.NewTicker(d.refreshInterval)
@@ -141,7 +130,7 @@ func (d *fetchDiscovery) poll(ctx context.Context, ch chan<- []*targetgroup.Grou
 	t0 := time.Now()
 	response, err := d.client.Fetch(ctx)
 	elapsed := time.Since(t0)
-	d.fetchDuration.Observe(elapsed.Seconds())
+	d.metrics.fetchDuration.Observe(elapsed.Seconds())
 
 	// Check the context before in order to exit early.
 	select {
@@ -152,20 +141,20 @@ func (d *fetchDiscovery) poll(ctx context.Context, ch chan<- []*targetgroup.Grou
 
 	if err != nil {
 		level.Error(d.logger).Log("msg", "error parsing resources", "err", err)
-		d.fetchFailuresCount.Inc()
+		d.metrics.fetchFailuresCount.Inc()
 		return
 	}
 
 	if response == nil {
 		// No update needed.
-		d.fetchSkipUpdateCount.Inc()
+		d.metrics.fetchSkipUpdateCount.Inc()
 		return
 	}
 
 	parsedTargets, err := d.parseResources(response.Resources, response.TypeUrl)
 	if err != nil {
 		level.Error(d.logger).Log("msg", "error parsing resources", "err", err)
-		d.fetchFailuresCount.Inc()
+		d.metrics.fetchFailuresCount.Inc()
 		return
 	}
 
diff --git a/discovery/xds/xds_test.go b/discovery/xds/xds_test.go
index f57fff9968d..7cce021c5f0 100644
--- a/discovery/xds/xds_test.go
+++ b/discovery/xds/xds_test.go
@@ -29,24 +29,15 @@ import (
 	"go.uber.org/goleak"
 	"google.golang.org/protobuf/types/known/anypb"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
-var (
-	sdConf = SDConfig{
-		Server:          "http://127.0.0.1",
-		RefreshInterval: model.Duration(10 * time.Second),
-		ClientID:        "test-id",
-	}
-
-	testFetchFailuresCount = prometheus.NewCounter(
-		prometheus.CounterOpts{})
-	testFetchSkipUpdateCount = prometheus.NewCounter(
-		prometheus.CounterOpts{})
-	testFetchDuration = prometheus.NewSummary(
-		prometheus.SummaryOpts{},
-	)
-)
+var sdConf = SDConfig{
+	Server:          "http://127.0.0.1",
+	RefreshInterval: model.Duration(10 * time.Second),
+	ClientID:        "test-id",
+}
 
 func TestMain(m *testing.M) {
 	goleak.VerifyTestMain(m)
@@ -133,12 +124,22 @@ func TestPollingRefreshSkipUpdate(t *testing.T) {
 			return nil, nil
 		},
 	}
+
+	cfg := &SDConfig{}
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+
+	xdsMetrics, ok := metrics.(*xdsMetrics)
+	if !ok {
+		require.Fail(t, "invalid discovery metrics type")
+	}
+
 	pd := &fetchDiscovery{
-		client:               rc,
-		logger:               nopLogger,
-		fetchDuration:        testFetchDuration,
-		fetchFailuresCount:   testFetchFailuresCount,
-		fetchSkipUpdateCount: testFetchSkipUpdateCount,
+		client:  rc,
+		logger:  nopLogger,
+		metrics: xdsMetrics,
 	}
 
 	ctx, cancel := context.WithCancel(context.Background())
@@ -155,6 +156,9 @@ func TestPollingRefreshSkipUpdate(t *testing.T) {
 	case <-ch:
 		require.Fail(t, "no update expected")
 	}
+
+	metrics.Unregister()
+	refreshMetrics.Unregister()
 }
 
 func TestPollingRefreshAttachesGroupMetadata(t *testing.T) {
@@ -167,13 +171,18 @@ func TestPollingRefreshAttachesGroupMetadata(t *testing.T) {
 			return &v3.DiscoveryResponse{}, nil
 		},
 	}
+
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := newDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+	xdsMetrics, ok := metrics.(*xdsMetrics)
+	require.True(t, ok)
+
 	pd := &fetchDiscovery{
-		source:               source,
-		client:               rc,
-		logger:               nopLogger,
-		fetchDuration:        testFetchDuration,
-		fetchFailuresCount:   testFetchFailuresCount,
-		fetchSkipUpdateCount: testFetchSkipUpdateCount,
+		source: source,
+		client: rc,
+		logger: nopLogger,
 		parseResources: constantResourceParser([]model.LabelSet{
 			{
 				"__meta_custom_xds_label": "a-value",
@@ -186,6 +195,7 @@ func TestPollingRefreshAttachesGroupMetadata(t *testing.T) {
 				"instance":                "prometheus-02",
 			},
 		}, nil),
+		metrics: xdsMetrics,
 	}
 	ch := make(chan []*targetgroup.Group, 1)
 	pd.poll(context.Background(), ch)
@@ -202,6 +212,9 @@ func TestPollingRefreshAttachesGroupMetadata(t *testing.T) {
 	target2 := group.Targets[1]
 	require.Contains(t, target2, model.LabelName("__meta_custom_xds_label"))
 	require.Equal(t, model.LabelValue("a-value"), target2["__meta_custom_xds_label"])
+
+	metrics.Unregister()
+	refreshMetrics.Unregister()
 }
 
 func TestPollingDisappearingTargets(t *testing.T) {
@@ -243,14 +256,23 @@ func TestPollingDisappearingTargets(t *testing.T) {
 		}, nil
 	}
 
+	cfg := &SDConfig{}
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	metrics := cfg.NewDiscovererMetrics(reg, refreshMetrics)
+	require.NoError(t, metrics.Register())
+
+	xdsMetrics, ok := metrics.(*xdsMetrics)
+	if !ok {
+		require.Fail(t, "invalid discovery metrics type")
+	}
+
 	pd := &fetchDiscovery{
-		source:               source,
-		client:               rc,
-		logger:               nopLogger,
-		fetchDuration:        testFetchDuration,
-		fetchFailuresCount:   testFetchFailuresCount,
-		fetchSkipUpdateCount: testFetchSkipUpdateCount,
-		parseResources:       parser,
+		source:         source,
+		client:         rc,
+		logger:         nopLogger,
+		parseResources: parser,
+		metrics:        xdsMetrics,
 	}
 
 	ch := make(chan []*targetgroup.Group, 1)
@@ -271,4 +293,7 @@ func TestPollingDisappearingTargets(t *testing.T) {
 
 	require.Equal(t, source, groups[0].Source)
 	require.Len(t, groups[0].Targets, 1)
+
+	metrics.Unregister()
+	refreshMetrics.Unregister()
 }
diff --git a/discovery/zookeeper/zookeeper.go b/discovery/zookeeper/zookeeper.go
index 308d63a5fcf..7d876152719 100644
--- a/discovery/zookeeper/zookeeper.go
+++ b/discovery/zookeeper/zookeeper.go
@@ -25,6 +25,7 @@ import (
 
 	"github.com/go-kit/log"
 	"github.com/go-zookeeper/zk"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 
 	"github.com/prometheus/prometheus/discovery"
@@ -56,6 +57,11 @@ type ServersetSDConfig struct {
 	Timeout model.Duration `yaml:"timeout,omitempty"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*ServersetSDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &discovery.NoopDiscovererMetrics{}
+}
+
 // Name returns the name of the Config.
 func (*ServersetSDConfig) Name() string { return "serverset" }
 
@@ -93,6 +99,11 @@ type NerveSDConfig struct {
 	Timeout model.Duration `yaml:"timeout,omitempty"`
 }
 
+// NewDiscovererMetrics implements discovery.Config.
+func (*NerveSDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+	return &discovery.NoopDiscovererMetrics{}
+}
+
 // Name returns the name of the Config.
 func (*NerveSDConfig) Name() string { return "nerve" }
 
diff --git a/documentation/examples/custom-sd/adapter-usage/main.go b/documentation/examples/custom-sd/adapter-usage/main.go
index f4bba739441..bfbca7b70cf 100644
--- a/documentation/examples/custom-sd/adapter-usage/main.go
+++ b/documentation/examples/custom-sd/adapter-usage/main.go
@@ -28,8 +28,10 @@ import (
 	"github.com/alecthomas/kingpin/v2"
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 
+	prom_discovery "github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 	"github.com/prometheus/prometheus/documentation/examples/custom-sd/adapter"
 	"github.com/prometheus/prometheus/util/strutil"
@@ -273,7 +275,16 @@ func main() {
 		level.Error(logger).Log("msg", "failed to create discovery metrics", "err", err)
 		os.Exit(1)
 	}
-	sdAdapter := adapter.NewAdapter(ctx, *outputFile, "exampleSD", disc, logger)
+
+	reg := prometheus.NewRegistry()
+	refreshMetrics := prom_discovery.NewRefreshMetrics(reg)
+	metrics, err := prom_discovery.RegisterSDMetrics(reg, refreshMetrics)
+	if err != nil {
+		level.Error(logger).Log("msg", "failed to register service discovery metrics", "err", err)
+		os.Exit(1)
+	}
+
+	sdAdapter := adapter.NewAdapter(ctx, *outputFile, "exampleSD", disc, logger, metrics, reg)
 	sdAdapter.Run()
 
 	<-ctx.Done()
diff --git a/documentation/examples/custom-sd/adapter/adapter.go b/documentation/examples/custom-sd/adapter/adapter.go
index 7fbf94aa9c9..dcf5a2b78c6 100644
--- a/documentation/examples/custom-sd/adapter/adapter.go
+++ b/documentation/examples/custom-sd/adapter/adapter.go
@@ -163,12 +163,12 @@ func (a *Adapter) Run() {
 }
 
 // NewAdapter creates a new instance of Adapter.
-func NewAdapter(ctx context.Context, file, name string, d discovery.Discoverer, logger log.Logger) *Adapter {
+func NewAdapter(ctx context.Context, file, name string, d discovery.Discoverer, logger log.Logger, sdMetrics map[string]discovery.DiscovererMetrics, registerer prometheus.Registerer) *Adapter {
 	return &Adapter{
 		ctx:     ctx,
 		disc:    d,
 		groups:  make(map[string]*customSD),
-		manager: discovery.NewManager(ctx, logger, prometheus.NewRegistry()),
+		manager: discovery.NewManager(ctx, logger, registerer, sdMetrics),
 		output:  file,
 		name:    name,
 		logger:  logger,
diff --git a/documentation/examples/custom-sd/adapter/adapter_test.go b/documentation/examples/custom-sd/adapter/adapter_test.go
index 8e5920eb485..329ca8c29ae 100644
--- a/documentation/examples/custom-sd/adapter/adapter_test.go
+++ b/documentation/examples/custom-sd/adapter/adapter_test.go
@@ -18,9 +18,11 @@ import (
 	"os"
 	"testing"
 
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/common/model"
 	"github.com/stretchr/testify/require"
 
+	"github.com/prometheus/prometheus/discovery"
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 )
 
@@ -227,6 +229,12 @@ func TestWriteOutput(t *testing.T) {
 	defer os.Remove(tmpfile.Name())
 	tmpfile.Close()
 	require.NoError(t, err)
-	adapter := NewAdapter(ctx, tmpfile.Name(), "test_sd", nil, nil)
+
+	reg := prometheus.NewRegistry()
+	refreshMetrics := discovery.NewRefreshMetrics(reg)
+	sdMetrics, err := discovery.RegisterSDMetrics(reg, refreshMetrics)
+	require.NoError(t, err)
+
+	adapter := NewAdapter(ctx, tmpfile.Name(), "test_sd", nil, nil, sdMetrics, reg)
 	require.NoError(t, adapter.writeOutput())
 }

From 583f3e587cf7b8f94b325ae72906815d5be480f4 Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Tue, 23 Jan 2024 17:02:14 +0100
Subject: [PATCH 106/132] Optimize histogram iterators (#13340)

Optimize histogram iterators

Histogram iterators allocate new objects in the AtHistogram and
AtFloatHistogram methods, which makes calculating rates over long
ranges expensive.

In #13215 we allowed an existing object to be reused
when converting an integer histogram to a float histogram. This commit follows
the same idea and allows injecting an existing object in the AtHistogram and
AtFloatHistogram methods. When the injected value is nil, iterators allocate
new histograms, otherwise they populate and return the injected object.

The commit also adds a CopyTo method to Histogram and FloatHistogram which
is used in the BufferedIterator to overwrite items in the ring instead of making
new copies.

Note that a specialized HPoint pool is needed for all of this to work
(`matrixSelectorHPool`).

---------

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
Co-authored-by: George Krajcsovits <krajorama@users.noreply.github.com>
---
 cmd/promtool/tsdb.go                    |   8 +-
 model/histogram/float_histogram.go      |  40 +++++++-
 model/histogram/float_histogram_test.go | 112 ++++++++++++++++++++++
 model/histogram/histogram.go            |  32 ++++++-
 model/histogram/histogram_test.go       | 122 ++++++++++++++++++++++++
 promql/engine.go                        |  67 +++++++++----
 promql/value.go                         |   4 +-
 rules/manager_test.go                   |   2 +-
 storage/buffer.go                       |  35 +++++--
 storage/buffer_test.go                  |   8 +-
 storage/memoized_iterator.go            |   4 +-
 storage/merge.go                        |   8 +-
 storage/merge_test.go                   |  12 +--
 storage/remote/codec.go                 |   8 +-
 storage/remote/codec_test.go            |  18 ++--
 storage/series.go                       |  12 +--
 tsdb/block_test.go                      |   4 +-
 tsdb/chunkenc/chunk.go                  |  39 +++++---
 tsdb/chunkenc/float_histogram.go        |  53 +++++++---
 tsdb/chunkenc/float_histogram_test.go   |  12 +--
 tsdb/chunkenc/histogram.go              | 115 ++++++++++++++++------
 tsdb/chunkenc/histogram_test.go         |  26 ++---
 tsdb/chunkenc/xor.go                    |   4 +-
 tsdb/chunks/chunks.go                   |   4 +-
 tsdb/compact_test.go                    |   4 +-
 tsdb/db_test.go                         |   8 +-
 tsdb/head_test.go                       |   8 +-
 tsdb/querier.go                         |  24 ++---
 tsdb/querier_test.go                    |   8 +-
 tsdb/tsdbblockutil.go                   |   4 +-
 web/federate.go                         |   2 +-
 31 files changed, 621 insertions(+), 186 deletions(-)

diff --git a/cmd/promtool/tsdb.go b/cmd/promtool/tsdb.go
index a9239d937ce..4bba8421c2d 100644
--- a/cmd/promtool/tsdb.go
+++ b/cmd/promtool/tsdb.go
@@ -667,7 +667,7 @@ func analyzeCompaction(ctx context.Context, block tsdb.BlockReader, indexr tsdb.
 				it := fhchk.Iterator(nil)
 				bucketCount := 0
 				for it.Next() == chunkenc.ValFloatHistogram {
-					_, f := it.AtFloatHistogram()
+					_, f := it.AtFloatHistogram(nil)
 					bucketCount += len(f.PositiveBuckets)
 					bucketCount += len(f.NegativeBuckets)
 				}
@@ -682,7 +682,7 @@ func analyzeCompaction(ctx context.Context, block tsdb.BlockReader, indexr tsdb.
 				it := hchk.Iterator(nil)
 				bucketCount := 0
 				for it.Next() == chunkenc.ValHistogram {
-					_, f := it.AtHistogram()
+					_, f := it.AtHistogram(nil)
 					bucketCount += len(f.PositiveBuckets)
 					bucketCount += len(f.NegativeBuckets)
 				}
@@ -745,11 +745,11 @@ func dumpSamples(ctx context.Context, path string, mint, maxt int64, match []str
 			fmt.Printf("%s %g %d\n", lbs, val, ts)
 		}
 		for it.Next() == chunkenc.ValFloatHistogram {
-			ts, fh := it.AtFloatHistogram()
+			ts, fh := it.AtFloatHistogram(nil)
 			fmt.Printf("%s %s %d\n", lbs, fh.String(), ts)
 		}
 		for it.Next() == chunkenc.ValHistogram {
-			ts, h := it.AtHistogram()
+			ts, h := it.AtHistogram(nil)
 			fmt.Printf("%s %s %d\n", lbs, h.String(), ts)
 		}
 		if it.Err() != nil {
diff --git a/model/histogram/float_histogram.go b/model/histogram/float_histogram.go
index bf89f2a471d..19a92b3d5a5 100644
--- a/model/histogram/float_histogram.go
+++ b/model/histogram/float_histogram.go
@@ -53,21 +53,28 @@ type FloatHistogram struct {
 
 // Copy returns a deep copy of the Histogram.
 func (h *FloatHistogram) Copy() *FloatHistogram {
-	c := *h
+	c := FloatHistogram{
+		CounterResetHint: h.CounterResetHint,
+		Schema:           h.Schema,
+		ZeroThreshold:    h.ZeroThreshold,
+		ZeroCount:        h.ZeroCount,
+		Count:            h.Count,
+		Sum:              h.Sum,
+	}
 
-	if h.PositiveSpans != nil {
+	if len(h.PositiveSpans) != 0 {
 		c.PositiveSpans = make([]Span, len(h.PositiveSpans))
 		copy(c.PositiveSpans, h.PositiveSpans)
 	}
-	if h.NegativeSpans != nil {
+	if len(h.NegativeSpans) != 0 {
 		c.NegativeSpans = make([]Span, len(h.NegativeSpans))
 		copy(c.NegativeSpans, h.NegativeSpans)
 	}
-	if h.PositiveBuckets != nil {
+	if len(h.PositiveBuckets) != 0 {
 		c.PositiveBuckets = make([]float64, len(h.PositiveBuckets))
 		copy(c.PositiveBuckets, h.PositiveBuckets)
 	}
-	if h.NegativeBuckets != nil {
+	if len(h.NegativeBuckets) != 0 {
 		c.NegativeBuckets = make([]float64, len(h.NegativeBuckets))
 		copy(c.NegativeBuckets, h.NegativeBuckets)
 	}
@@ -75,6 +82,29 @@ func (h *FloatHistogram) Copy() *FloatHistogram {
 	return &c
 }
 
+// CopyTo makes a deep copy into the given FloatHistogram.
+// The destination object has to be a non-nil pointer.
+func (h *FloatHistogram) CopyTo(to *FloatHistogram) {
+	to.CounterResetHint = h.CounterResetHint
+	to.Schema = h.Schema
+	to.ZeroThreshold = h.ZeroThreshold
+	to.ZeroCount = h.ZeroCount
+	to.Count = h.Count
+	to.Sum = h.Sum
+
+	to.PositiveSpans = resize(to.PositiveSpans, len(h.PositiveSpans))
+	copy(to.PositiveSpans, h.PositiveSpans)
+
+	to.NegativeSpans = resize(to.NegativeSpans, len(h.NegativeSpans))
+	copy(to.NegativeSpans, h.NegativeSpans)
+
+	to.PositiveBuckets = resize(to.PositiveBuckets, len(h.PositiveBuckets))
+	copy(to.PositiveBuckets, h.PositiveBuckets)
+
+	to.NegativeBuckets = resize(to.NegativeBuckets, len(h.NegativeBuckets))
+	copy(to.NegativeBuckets, h.NegativeBuckets)
+}
+
 // CopyToSchema works like Copy, but the returned deep copy has the provided
 // target schema, which must be ≤ the original schema (i.e. it must have a lower
 // resolution).
diff --git a/model/histogram/float_histogram_test.go b/model/histogram/float_histogram_test.go
index 3d20960f6cf..49fb77ab0b7 100644
--- a/model/histogram/float_histogram_test.go
+++ b/model/histogram/float_histogram_test.go
@@ -142,6 +142,118 @@ func TestFloatHistogramMul(t *testing.T) {
 	}
 }
 
+func TestFloatHistogramCopy(t *testing.T) {
+	cases := []struct {
+		name     string
+		orig     *FloatHistogram
+		expected *FloatHistogram
+	}{
+		{
+			name:     "without buckets",
+			orig:     &FloatHistogram{},
+			expected: &FloatHistogram{},
+		},
+		{
+			name: "with buckets",
+			orig: &FloatHistogram{
+				PositiveSpans:   []Span{{-2, 1}},
+				PositiveBuckets: []float64{1, 3, -3, 42},
+				NegativeSpans:   []Span{{3, 2}},
+				NegativeBuckets: []float64{5, 3, 1.234e5, 1000},
+			},
+			expected: &FloatHistogram{
+				PositiveSpans:   []Span{{-2, 1}},
+				PositiveBuckets: []float64{1, 3, -3, 42},
+				NegativeSpans:   []Span{{3, 2}},
+				NegativeBuckets: []float64{5, 3, 1.234e5, 1000},
+			},
+		},
+		{
+			name: "with empty buckets and non empty capacity",
+			orig: &FloatHistogram{
+				PositiveSpans:   make([]Span, 0, 1),
+				PositiveBuckets: make([]float64, 0, 1),
+				NegativeSpans:   make([]Span, 0, 1),
+				NegativeBuckets: make([]float64, 0, 1),
+			},
+			expected: &FloatHistogram{},
+		},
+	}
+
+	for _, tcase := range cases {
+		t.Run(tcase.name, func(t *testing.T) {
+			hCopy := tcase.orig.Copy()
+
+			// Modify a primitive value in the original histogram.
+			tcase.orig.Sum++
+			require.Equal(t, tcase.expected, hCopy)
+			assertDeepCopyFHSpans(t, tcase.orig, hCopy, tcase.expected)
+		})
+	}
+}
+
+func TestFloatHistogramCopyTo(t *testing.T) {
+	cases := []struct {
+		name     string
+		orig     *FloatHistogram
+		expected *FloatHistogram
+	}{
+		{
+			name:     "without buckets",
+			orig:     &FloatHistogram{},
+			expected: &FloatHistogram{},
+		},
+		{
+			name: "with buckets",
+			orig: &FloatHistogram{
+				PositiveSpans:   []Span{{-2, 1}},
+				PositiveBuckets: []float64{1, 3, -3, 42},
+				NegativeSpans:   []Span{{3, 2}},
+				NegativeBuckets: []float64{5, 3, 1.234e5, 1000},
+			},
+			expected: &FloatHistogram{
+				PositiveSpans:   []Span{{-2, 1}},
+				PositiveBuckets: []float64{1, 3, -3, 42},
+				NegativeSpans:   []Span{{3, 2}},
+				NegativeBuckets: []float64{5, 3, 1.234e5, 1000},
+			},
+		},
+		{
+			name: "with empty buckets and non empty capacity",
+			orig: &FloatHistogram{
+				PositiveSpans:   make([]Span, 0, 1),
+				PositiveBuckets: make([]float64, 0, 1),
+				NegativeSpans:   make([]Span, 0, 1),
+				NegativeBuckets: make([]float64, 0, 1),
+			},
+			expected: &FloatHistogram{},
+		},
+	}
+
+	for _, tcase := range cases {
+		t.Run(tcase.name, func(t *testing.T) {
+			hCopy := &FloatHistogram{}
+			tcase.orig.CopyTo(hCopy)
+
+			// Modify a primitive value in the original histogram.
+			tcase.orig.Sum++
+			require.Equal(t, tcase.expected, hCopy)
+			assertDeepCopyFHSpans(t, tcase.orig, hCopy, tcase.expected)
+		})
+	}
+}
+
+func assertDeepCopyFHSpans(t *testing.T, orig, hCopy, expected *FloatHistogram) {
+	// Do an in-place expansion of an original spans slice.
+	orig.PositiveSpans = expandSpans(orig.PositiveSpans)
+	orig.PositiveSpans[len(orig.PositiveSpans)-1] = Span{1, 2}
+
+	hCopy.PositiveSpans = expandSpans(hCopy.PositiveSpans)
+	expected.PositiveSpans = expandSpans(expected.PositiveSpans)
+	// Expand the copy spans and assert that modifying the original has not affected the copy.
+	require.Equal(t, expected, hCopy)
+}
+
 func TestFloatHistogramDiv(t *testing.T) {
 	cases := []struct {
 		name     string
diff --git a/model/histogram/histogram.go b/model/histogram/histogram.go
index f4d292b344f..d40adeb6209 100644
--- a/model/histogram/histogram.go
+++ b/model/histogram/histogram.go
@@ -83,7 +83,14 @@ type Span struct {
 
 // Copy returns a deep copy of the Histogram.
 func (h *Histogram) Copy() *Histogram {
-	c := *h
+	c := Histogram{
+		CounterResetHint: h.CounterResetHint,
+		Schema:           h.Schema,
+		ZeroThreshold:    h.ZeroThreshold,
+		ZeroCount:        h.ZeroCount,
+		Count:            h.Count,
+		Sum:              h.Sum,
+	}
 
 	if len(h.PositiveSpans) != 0 {
 		c.PositiveSpans = make([]Span, len(h.PositiveSpans))
@@ -105,6 +112,29 @@ func (h *Histogram) Copy() *Histogram {
 	return &c
 }
 
+// CopyTo makes a deep copy into the given Histogram object.
+// The destination object has to be a non-nil pointer.
+func (h *Histogram) CopyTo(to *Histogram) {
+	to.CounterResetHint = h.CounterResetHint
+	to.Schema = h.Schema
+	to.ZeroThreshold = h.ZeroThreshold
+	to.ZeroCount = h.ZeroCount
+	to.Count = h.Count
+	to.Sum = h.Sum
+
+	to.PositiveSpans = resize(to.PositiveSpans, len(h.PositiveSpans))
+	copy(to.PositiveSpans, h.PositiveSpans)
+
+	to.NegativeSpans = resize(to.NegativeSpans, len(h.NegativeSpans))
+	copy(to.NegativeSpans, h.NegativeSpans)
+
+	to.PositiveBuckets = resize(to.PositiveBuckets, len(h.PositiveBuckets))
+	copy(to.PositiveBuckets, h.PositiveBuckets)
+
+	to.NegativeBuckets = resize(to.NegativeBuckets, len(h.NegativeBuckets))
+	copy(to.NegativeBuckets, h.NegativeBuckets)
+}
+
 // String returns a string representation of the Histogram.
 func (h *Histogram) String() string {
 	var sb strings.Builder
diff --git a/model/histogram/histogram_test.go b/model/histogram/histogram_test.go
index 9a64faaaae3..14a948e644e 100644
--- a/model/histogram/histogram_test.go
+++ b/model/histogram/histogram_test.go
@@ -604,6 +604,128 @@ func TestHistogramEquals(t *testing.T) {
 	notEquals(*hStale, *hNaN)
 }
 
+func TestHistogramCopy(t *testing.T) {
+	cases := []struct {
+		name     string
+		orig     *Histogram
+		expected *Histogram
+	}{
+		{
+			name:     "without buckets",
+			orig:     &Histogram{},
+			expected: &Histogram{},
+		},
+		{
+			name: "with buckets",
+			orig: &Histogram{
+				PositiveSpans:   []Span{{-2, 1}},
+				PositiveBuckets: []int64{1, 3, -3, 42},
+				NegativeSpans:   []Span{{3, 2}},
+				NegativeBuckets: []int64{5, 3, 1.234e5, 1000},
+			},
+			expected: &Histogram{
+				PositiveSpans:   []Span{{-2, 1}},
+				PositiveBuckets: []int64{1, 3, -3, 42},
+				NegativeSpans:   []Span{{3, 2}},
+				NegativeBuckets: []int64{5, 3, 1.234e5, 1000},
+			},
+		},
+		{
+			name: "with empty buckets and non empty capacity",
+			orig: &Histogram{
+				PositiveSpans:   make([]Span, 0, 1),
+				PositiveBuckets: make([]int64, 0, 1),
+				NegativeSpans:   make([]Span, 0, 1),
+				NegativeBuckets: make([]int64, 0, 1),
+			},
+			expected: &Histogram{},
+		},
+	}
+
+	for _, tcase := range cases {
+		t.Run(tcase.name, func(t *testing.T) {
+			hCopy := tcase.orig.Copy()
+
+			// Modify a primitive value in the original histogram.
+			tcase.orig.Sum++
+			require.Equal(t, tcase.expected, hCopy)
+			assertDeepCopyHSpans(t, tcase.orig, hCopy, tcase.expected)
+		})
+	}
+}
+
+func TestHistogramCopyTo(t *testing.T) {
+	cases := []struct {
+		name     string
+		orig     *Histogram
+		expected *Histogram
+	}{
+		{
+			name:     "without buckets",
+			orig:     &Histogram{},
+			expected: &Histogram{},
+		},
+		{
+			name: "with buckets",
+			orig: &Histogram{
+				PositiveSpans:   []Span{{-2, 1}},
+				PositiveBuckets: []int64{1, 3, -3, 42},
+				NegativeSpans:   []Span{{3, 2}},
+				NegativeBuckets: []int64{5, 3, 1.234e5, 1000},
+			},
+			expected: &Histogram{
+				PositiveSpans:   []Span{{-2, 1}},
+				PositiveBuckets: []int64{1, 3, -3, 42},
+				NegativeSpans:   []Span{{3, 2}},
+				NegativeBuckets: []int64{5, 3, 1.234e5, 1000},
+			},
+		},
+		{
+			name: "with empty buckets and non empty capacity",
+			orig: &Histogram{
+				PositiveSpans:   make([]Span, 0, 1),
+				PositiveBuckets: make([]int64, 0, 1),
+				NegativeSpans:   make([]Span, 0, 1),
+				NegativeBuckets: make([]int64, 0, 1),
+			},
+			expected: &Histogram{},
+		},
+	}
+
+	for _, tcase := range cases {
+		t.Run(tcase.name, func(t *testing.T) {
+			hCopy := &Histogram{}
+			tcase.orig.CopyTo(hCopy)
+
+			// Modify a primitive value in the original histogram.
+			tcase.orig.Sum++
+			require.Equal(t, tcase.expected, hCopy)
+			assertDeepCopyHSpans(t, tcase.orig, hCopy, tcase.expected)
+		})
+	}
+}
+
+func assertDeepCopyHSpans(t *testing.T, orig, hCopy, expected *Histogram) {
+	// Do an in-place expansion of an original spans slice.
+	orig.PositiveSpans = expandSpans(orig.PositiveSpans)
+	orig.PositiveSpans[len(orig.PositiveSpans)-1] = Span{1, 2}
+
+	hCopy.PositiveSpans = expandSpans(hCopy.PositiveSpans)
+	expected.PositiveSpans = expandSpans(expected.PositiveSpans)
+	// Expand the copy spans and assert that modifying the original has not affected the copy.
+	require.Equal(t, expected, hCopy)
+}
+
+func expandSpans(spans []Span) []Span {
+	n := len(spans)
+	if cap(spans) > n {
+		spans = spans[:n+1]
+	} else {
+		spans = append(spans, Span{})
+	}
+	return spans
+}
+
 func TestHistogramCompact(t *testing.T) {
 	cases := []struct {
 		name            string
diff --git a/promql/engine.go b/promql/engine.go
index 7165631e09a..8c8afd181b9 100644
--- a/promql/engine.go
+++ b/promql/engine.go
@@ -66,6 +66,9 @@ const (
 	// The getHPointSlice and getFPointSlice functions are called with an estimated size which often can be
 	// over-estimated.
 	maxPointsSliceSize = 5000
+
+	// The default buffer size for points used by the matrix selector.
+	matrixSelectorSliceSize = 16
 )
 
 type engineMetrics struct {
@@ -1564,7 +1567,7 @@ func (ev *evaluator) eval(expr parser.Expr) (parser.Value, annotations.Annotatio
 
 		ev.currentSamples -= len(floats) + totalHPointSize(histograms)
 		putFPointSlice(floats)
-		putHPointSlice(histograms)
+		putMatrixSelectorHPointSlice(histograms)
 
 		// The absent_over_time function returns 0 or 1 series. So far, the matrix
 		// contains multiple series. The following code will create a new series
@@ -1940,6 +1943,13 @@ func (ev *evaluator) vectorSelectorSingle(it *storage.MemoizedSeriesIterator, no
 var (
 	fPointPool zeropool.Pool[[]FPoint]
 	hPointPool zeropool.Pool[[]HPoint]
+
+	// matrixSelectorHPool holds reusable histogram slices used by the matrix
+	// selector. The key difference between this pool and the hPointPool is that
+	// slices returned by this pool should never hold multiple copies of the same
+	// histogram pointer since histogram objects are reused across query evaluation
+	// steps.
+	matrixSelectorHPool zeropool.Pool[[]HPoint]
 )
 
 func getFPointSlice(sz int) []FPoint {
@@ -1982,6 +1992,20 @@ func putHPointSlice(p []HPoint) {
 	}
 }
 
+func getMatrixSelectorHPoints() []HPoint {
+	if p := matrixSelectorHPool.Get(); p != nil {
+		return p
+	}
+
+	return make([]HPoint, 0, matrixSelectorSliceSize)
+}
+
+func putMatrixSelectorHPointSlice(p []HPoint) {
+	if p != nil {
+		matrixSelectorHPool.Put(p[:0])
+	}
+}
+
 // matrixSelector evaluates a *parser.MatrixSelector expression.
 func (ev *evaluator) matrixSelector(node *parser.MatrixSelector) (Matrix, annotations.Annotations) {
 	var (
@@ -2106,13 +2130,13 @@ loop:
 			// Values in the buffer are guaranteed to be smaller than maxt.
 			if t >= mintHistograms {
 				if histograms == nil {
-					histograms = getHPointSlice(16)
+					histograms = getMatrixSelectorHPoints()
 				}
 				n := len(histograms)
 				if n < cap(histograms) {
 					histograms = histograms[:n+1]
 				} else {
-					histograms = append(histograms, HPoint{})
+					histograms = append(histograms, HPoint{H: &histogram.FloatHistogram{}})
 				}
 				histograms[n].T, histograms[n].H = buf.AtFloatHistogram(histograms[n].H)
 				if value.IsStaleNaN(histograms[n].H.Sum) {
@@ -2145,23 +2169,28 @@ loop:
 	// The sought sample might also be in the range.
 	switch soughtValueType {
 	case chunkenc.ValFloatHistogram, chunkenc.ValHistogram:
-		t := it.AtT()
-		if t == maxt {
-			_, h := it.AtFloatHistogram()
-			if !value.IsStaleNaN(h.Sum) {
-				if ev.currentSamples >= ev.maxSamples {
-					ev.error(ErrTooManySamples(env))
-				}
-				if histograms == nil {
-					histograms = getHPointSlice(16)
-				}
-				// The last sample comes directly from the iterator, so we need to copy it to
-				// avoid having the same reference twice in the buffer.
-				point := HPoint{T: t, H: h.Copy()}
-				histograms = append(histograms, point)
-				ev.currentSamples += point.size()
-			}
+		if it.AtT() != maxt {
+			break
+		}
+		if histograms == nil {
+			histograms = getMatrixSelectorHPoints()
 		}
+		n := len(histograms)
+		if n < cap(histograms) {
+			histograms = histograms[:n+1]
+		} else {
+			histograms = append(histograms, HPoint{H: &histogram.FloatHistogram{}})
+		}
+		histograms[n].T, histograms[n].H = it.AtFloatHistogram(histograms[n].H)
+		if value.IsStaleNaN(histograms[n].H.Sum) {
+			histograms = histograms[:n]
+			break
+		}
+		if ev.currentSamples >= ev.maxSamples {
+			ev.error(ErrTooManySamples(env))
+		}
+		ev.currentSamples += histograms[n].size()
+
 	case chunkenc.ValFloat:
 		t, f := it.At()
 		if t == maxt && !value.IsStaleNaN(f) {
diff --git a/promql/value.go b/promql/value.go
index 28cf3fe31c2..f129137d809 100644
--- a/promql/value.go
+++ b/promql/value.go
@@ -464,11 +464,11 @@ func (ssi *storageSeriesIterator) At() (t int64, v float64) {
 	return ssi.currT, ssi.currF
 }
 
-func (ssi *storageSeriesIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (ssi *storageSeriesIterator) AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram) {
 	panic(errors.New("storageSeriesIterator: AtHistogram not supported"))
 }
 
-func (ssi *storageSeriesIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (ssi *storageSeriesIterator) AtFloatHistogram(*histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	return ssi.currT, ssi.currH
 }
 
diff --git a/rules/manager_test.go b/rules/manager_test.go
index 6418c5a3701..3feae51de68 100644
--- a/rules/manager_test.go
+++ b/rules/manager_test.go
@@ -1397,7 +1397,7 @@ func TestNativeHistogramsInRecordingRules(t *testing.T) {
 
 	it := s.Iterator(nil)
 	require.Equal(t, chunkenc.ValFloatHistogram, it.Next())
-	tsp, fh := it.AtFloatHistogram()
+	tsp, fh := it.AtFloatHistogram(nil)
 	require.Equal(t, ts.Add(10*time.Second).UnixMilli(), tsp)
 	require.Equal(t, expHist, fh)
 	require.Equal(t, chunkenc.ValNone, it.Next())
diff --git a/storage/buffer.go b/storage/buffer.go
index d19f841d43c..b3c789e97d9 100644
--- a/storage/buffer.go
+++ b/storage/buffer.go
@@ -24,6 +24,9 @@ import (
 
 // BufferedSeriesIterator wraps an iterator with a look-back buffer.
 type BufferedSeriesIterator struct {
+	hReader  histogram.Histogram
+	fhReader histogram.FloatHistogram
+
 	it    chunkenc.Iterator
 	buf   *sampleRing
 	delta int64
@@ -118,10 +121,10 @@ func (b *BufferedSeriesIterator) Next() chunkenc.ValueType {
 		t, f := b.it.At()
 		b.buf.addF(fSample{t: t, f: f})
 	case chunkenc.ValHistogram:
-		t, h := b.it.AtHistogram()
+		t, h := b.it.AtHistogram(&b.hReader)
 		b.buf.addH(hSample{t: t, h: h})
 	case chunkenc.ValFloatHistogram:
-		t, fh := b.it.AtFloatHistogram()
+		t, fh := b.it.AtFloatHistogram(&b.fhReader)
 		b.buf.addFH(fhSample{t: t, fh: fh})
 	default:
 		panic(fmt.Errorf("BufferedSeriesIterator: unknown value type %v", b.valueType))
@@ -140,13 +143,13 @@ func (b *BufferedSeriesIterator) At() (int64, float64) {
 }
 
 // AtHistogram returns the current histogram element of the iterator.
-func (b *BufferedSeriesIterator) AtHistogram() (int64, *histogram.Histogram) {
-	return b.it.AtHistogram()
+func (b *BufferedSeriesIterator) AtHistogram(fh *histogram.Histogram) (int64, *histogram.Histogram) {
+	return b.it.AtHistogram(fh)
 }
 
 // AtFloatHistogram returns the current float-histogram element of the iterator.
-func (b *BufferedSeriesIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
-	return b.it.AtFloatHistogram()
+func (b *BufferedSeriesIterator) AtFloatHistogram(fh *histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
+	return b.it.AtFloatHistogram(fh)
 }
 
 // AtT returns the current timestamp of the iterator.
@@ -378,7 +381,11 @@ func (it *SampleRingIterator) AtFloatHistogram(fh *histogram.FloatHistogram) (in
 	if it.fh == nil {
 		return it.t, it.h.ToFloat(fh)
 	}
-	return it.t, it.fh
+	if fh != nil {
+		it.fh.CopyTo(fh)
+		return it.t, fh
+	}
+	return it.t, it.fh.Copy()
 }
 
 func (it *SampleRingIterator) AtT() int64 {
@@ -672,7 +679,12 @@ func addH(s hSample, buf []hSample, r *sampleRing) []hSample {
 		}
 	}
 
-	buf[r.i] = s
+	buf[r.i].t = s.t
+	if buf[r.i].h == nil {
+		buf[r.i].h = s.h.Copy()
+	} else {
+		s.h.CopyTo(buf[r.i].h)
+	}
 	r.l++
 
 	// Free head of the buffer of samples that just fell out of the range.
@@ -711,7 +723,12 @@ func addFH(s fhSample, buf []fhSample, r *sampleRing) []fhSample {
 		}
 	}
 
-	buf[r.i] = s
+	buf[r.i].t = s.t
+	if buf[r.i].fh == nil {
+		buf[r.i].fh = s.fh.Copy()
+	} else {
+		s.fh.CopyTo(buf[r.i].fh)
+	}
 	r.l++
 
 	// Free head of the buffer of samples that just fell out of the range.
diff --git a/storage/buffer_test.go b/storage/buffer_test.go
index 12e6ff0f057..61074c2122d 100644
--- a/storage/buffer_test.go
+++ b/storage/buffer_test.go
@@ -277,11 +277,11 @@ func (m *mockSeriesIterator) At() (int64, float64)            { return m.at() }
 func (m *mockSeriesIterator) Next() chunkenc.ValueType        { return m.next() }
 func (m *mockSeriesIterator) Err() error                      { return m.err() }
 
-func (m *mockSeriesIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (m *mockSeriesIterator) AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram) {
 	return 0, nil // Not really mocked.
 }
 
-func (m *mockSeriesIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (m *mockSeriesIterator) AtFloatHistogram(*histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	return 0, nil // Not really mocked.
 }
 
@@ -303,11 +303,11 @@ func (it *fakeSeriesIterator) At() (int64, float64) {
 	return it.idx * it.step, 123 // Value doesn't matter.
 }
 
-func (it *fakeSeriesIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (it *fakeSeriesIterator) AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram) {
 	return it.idx * it.step, &histogram.Histogram{} // Value doesn't matter.
 }
 
-func (it *fakeSeriesIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (it *fakeSeriesIterator) AtFloatHistogram(*histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	return it.idx * it.step, &histogram.FloatHistogram{} // Value doesn't matter.
 }
 
diff --git a/storage/memoized_iterator.go b/storage/memoized_iterator.go
index cb9fdeef46a..4ab2aa5d786 100644
--- a/storage/memoized_iterator.go
+++ b/storage/memoized_iterator.go
@@ -113,7 +113,7 @@ func (b *MemoizedSeriesIterator) Next() chunkenc.ValueType {
 		b.prevFloatHistogram = nil
 	case chunkenc.ValHistogram, chunkenc.ValFloatHistogram:
 		b.prevValue = 0
-		b.prevTime, b.prevFloatHistogram = b.it.AtFloatHistogram()
+		b.prevTime, b.prevFloatHistogram = b.it.AtFloatHistogram(nil)
 	}
 
 	b.valueType = b.it.Next()
@@ -133,7 +133,7 @@ func (b *MemoizedSeriesIterator) At() (int64, float64) {
 
 // AtFloatHistogram returns the current float-histogram element of the iterator.
 func (b *MemoizedSeriesIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
-	return b.it.AtFloatHistogram()
+	return b.it.AtFloatHistogram(nil)
 }
 
 // Err returns the last encountered error.
diff --git a/storage/merge.go b/storage/merge.go
index bcb0f66fbc1..38897449b5c 100644
--- a/storage/merge.go
+++ b/storage/merge.go
@@ -525,11 +525,11 @@ func (c *chainSampleIterator) At() (t int64, v float64) {
 	return c.curr.At()
 }
 
-func (c *chainSampleIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (c *chainSampleIterator) AtHistogram(h *histogram.Histogram) (int64, *histogram.Histogram) {
 	if c.curr == nil {
 		panic("chainSampleIterator.AtHistogram called before first .Next or after .Next returned false.")
 	}
-	t, h := c.curr.AtHistogram()
+	t, h := c.curr.AtHistogram(h)
 	// If the current sample is not consecutive with the previous one, we
 	// cannot be sure anymore about counter resets for counter histograms.
 	// TODO(beorn7): If a `NotCounterReset` sample is followed by a
@@ -542,11 +542,11 @@ func (c *chainSampleIterator) AtHistogram() (int64, *histogram.Histogram) {
 	return t, h
 }
 
-func (c *chainSampleIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (c *chainSampleIterator) AtFloatHistogram(fh *histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	if c.curr == nil {
 		panic("chainSampleIterator.AtFloatHistogram called before first .Next or after .Next returned false.")
 	}
-	t, fh := c.curr.AtFloatHistogram()
+	t, fh := c.curr.AtFloatHistogram(fh)
 	// If the current sample is not consecutive with the previous one, we
 	// cannot be sure anymore about counter resets for counter histograms.
 	// TODO(beorn7): If a `NotCounterReset` sample is followed by a
diff --git a/storage/merge_test.go b/storage/merge_test.go
index 02c2a34094d..05e1c75278c 100644
--- a/storage/merge_test.go
+++ b/storage/merge_test.go
@@ -1173,10 +1173,10 @@ func TestChainSampleIteratorSeek(t *testing.T) {
 					t, f := merged.At()
 					actual = append(actual, fSample{t, f})
 				case chunkenc.ValHistogram:
-					t, h := merged.AtHistogram()
+					t, h := merged.AtHistogram(nil)
 					actual = append(actual, hSample{t, h})
 				case chunkenc.ValFloatHistogram:
-					t, fh := merged.AtFloatHistogram()
+					t, fh := merged.AtFloatHistogram(nil)
 					actual = append(actual, fhSample{t, fh})
 				}
 				s, err := ExpandSamples(merged, nil)
@@ -1259,10 +1259,10 @@ func TestChainSampleIteratorSeekHistogramCounterResetHint(t *testing.T) {
 					t, f := merged.At()
 					actual = append(actual, fSample{t, f})
 				case chunkenc.ValHistogram:
-					t, h := merged.AtHistogram()
+					t, h := merged.AtHistogram(nil)
 					actual = append(actual, hSample{t, h})
 				case chunkenc.ValFloatHistogram:
-					t, fh := merged.AtFloatHistogram()
+					t, fh := merged.AtFloatHistogram(nil)
 					actual = append(actual, fhSample{t, fh})
 				}
 				s, err := ExpandSamples(merged, nil)
@@ -1629,11 +1629,11 @@ func (e errIterator) At() (int64, float64) {
 	return 0, 0
 }
 
-func (e errIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (e errIterator) AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram) {
 	return 0, nil
 }
 
-func (e errIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (e errIterator) AtFloatHistogram(*histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	return 0, nil
 }
 
diff --git a/storage/remote/codec.go b/storage/remote/codec.go
index ffab821a5fd..9cf1ed87128 100644
--- a/storage/remote/codec.go
+++ b/storage/remote/codec.go
@@ -152,10 +152,10 @@ func ToQueryResult(ss storage.SeriesSet, sampleLimit int) (*prompb.QueryResult,
 					Value:     val,
 				})
 			case chunkenc.ValHistogram:
-				ts, h := iter.AtHistogram()
+				ts, h := iter.AtHistogram(nil)
 				histograms = append(histograms, HistogramToHistogramProto(ts, h))
 			case chunkenc.ValFloatHistogram:
-				ts, fh := iter.AtFloatHistogram()
+				ts, fh := iter.AtFloatHistogram(nil)
 				histograms = append(histograms, FloatHistogramToHistogramProto(ts, fh))
 			default:
 				return nil, ss.Warnings(), fmt.Errorf("unrecognized value type: %s", valType)
@@ -475,7 +475,7 @@ func (c *concreteSeriesIterator) At() (t int64, v float64) {
 }
 
 // AtHistogram implements chunkenc.Iterator.
-func (c *concreteSeriesIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (c *concreteSeriesIterator) AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram) {
 	if c.curValType != chunkenc.ValHistogram {
 		panic("iterator is not on an integer histogram sample")
 	}
@@ -484,7 +484,7 @@ func (c *concreteSeriesIterator) AtHistogram() (int64, *histogram.Histogram) {
 }
 
 // AtFloatHistogram implements chunkenc.Iterator.
-func (c *concreteSeriesIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (c *concreteSeriesIterator) AtFloatHistogram(*histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	switch c.curValType {
 	case chunkenc.ValHistogram:
 		fh := c.series.histograms[c.histogramsCur]
diff --git a/storage/remote/codec_test.go b/storage/remote/codec_test.go
index dbc22a37718..0451953cb16 100644
--- a/storage/remote/codec_test.go
+++ b/storage/remote/codec_test.go
@@ -278,31 +278,31 @@ func TestConcreteSeriesIterator_HistogramSamples(t *testing.T) {
 
 	// Seek to the first sample with ts=1.
 	require.Equal(t, chunkenc.ValHistogram, it.Seek(1))
-	ts, v := it.AtHistogram()
+	ts, v := it.AtHistogram(nil)
 	require.Equal(t, int64(1), ts)
 	require.Equal(t, histograms[0], v)
 
 	// Seek one further, next sample still has ts=1.
 	require.Equal(t, chunkenc.ValHistogram, it.Next())
-	ts, v = it.AtHistogram()
+	ts, v = it.AtHistogram(nil)
 	require.Equal(t, int64(1), ts)
 	require.Equal(t, histograms[1], v)
 
 	// Seek again to 1 and make sure we stay where we are.
 	require.Equal(t, chunkenc.ValHistogram, it.Seek(1))
-	ts, v = it.AtHistogram()
+	ts, v = it.AtHistogram(nil)
 	require.Equal(t, int64(1), ts)
 	require.Equal(t, histograms[1], v)
 
 	// Another seek.
 	require.Equal(t, chunkenc.ValHistogram, it.Seek(3))
-	ts, v = it.AtHistogram()
+	ts, v = it.AtHistogram(nil)
 	require.Equal(t, int64(3), ts)
 	require.Equal(t, histograms[3], v)
 
 	// And we don't go back.
 	require.Equal(t, chunkenc.ValHistogram, it.Seek(2))
-	ts, v = it.AtHistogram()
+	ts, v = it.AtHistogram(nil)
 	require.Equal(t, int64(3), ts)
 	require.Equal(t, histograms[3], v)
 
@@ -347,12 +347,12 @@ func TestConcreteSeriesIterator_FloatAndHistogramSamples(t *testing.T) {
 		fh *histogram.FloatHistogram
 	)
 	require.Equal(t, chunkenc.ValHistogram, it.Next())
-	ts, h = it.AtHistogram()
+	ts, h = it.AtHistogram(nil)
 	require.Equal(t, int64(1), ts)
 	require.Equal(t, histograms[0], h)
 
 	require.Equal(t, chunkenc.ValHistogram, it.Next())
-	ts, h = it.AtHistogram()
+	ts, h = it.AtHistogram(nil)
 	require.Equal(t, int64(2), ts)
 	require.Equal(t, histograms[1], h)
 
@@ -393,13 +393,13 @@ func TestConcreteSeriesIterator_FloatAndHistogramSamples(t *testing.T) {
 	require.Equal(t, 8., v)
 
 	require.Equal(t, chunkenc.ValHistogram, it.Next())
-	ts, h = it.AtHistogram()
+	ts, h = it.AtHistogram(nil)
 	require.Equal(t, int64(16), ts)
 	require.Equal(t, histograms[10], h)
 
 	// Getting a float histogram from an int histogram works.
 	require.Equal(t, chunkenc.ValHistogram, it.Next())
-	ts, fh = it.AtFloatHistogram()
+	ts, fh = it.AtFloatHistogram(nil)
 	require.Equal(t, int64(17), ts)
 	expected := HistogramProtoToFloatHistogram(HistogramToHistogramProto(int64(17), histograms[11]))
 	require.Equal(t, expected, fh)
diff --git a/storage/series.go b/storage/series.go
index b111505aa37..eba11b4d9bc 100644
--- a/storage/series.go
+++ b/storage/series.go
@@ -123,12 +123,12 @@ func (it *listSeriesIterator) At() (int64, float64) {
 	return s.T(), s.F()
 }
 
-func (it *listSeriesIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (it *listSeriesIterator) AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram) {
 	s := it.samples.Get(it.idx)
 	return s.T(), s.H()
 }
 
-func (it *listSeriesIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (it *listSeriesIterator) AtFloatHistogram(*histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	s := it.samples.Get(it.idx)
 	return s.T(), s.FH()
 }
@@ -337,7 +337,7 @@ func (s *seriesToChunkEncoder) Iterator(it chunks.Iterator) chunks.Iterator {
 			t, v = seriesIter.At()
 			app.Append(t, v)
 		case chunkenc.ValHistogram:
-			t, h = seriesIter.AtHistogram()
+			t, h = seriesIter.AtHistogram(nil)
 			newChk, recoded, app, err = app.AppendHistogram(nil, t, h, false)
 			if err != nil {
 				return errChunksIterator{err: err}
@@ -352,7 +352,7 @@ func (s *seriesToChunkEncoder) Iterator(it chunks.Iterator) chunks.Iterator {
 				chk = newChk
 			}
 		case chunkenc.ValFloatHistogram:
-			t, fh = seriesIter.AtFloatHistogram()
+			t, fh = seriesIter.AtFloatHistogram(nil)
 			newChk, recoded, app, err = app.AppendFloatHistogram(nil, t, fh, false)
 			if err != nil {
 				return errChunksIterator{err: err}
@@ -438,10 +438,10 @@ func ExpandSamples(iter chunkenc.Iterator, newSampleFn func(t int64, f float64,
 			}
 			result = append(result, newSampleFn(t, f, nil, nil))
 		case chunkenc.ValHistogram:
-			t, h := iter.AtHistogram()
+			t, h := iter.AtHistogram(nil)
 			result = append(result, newSampleFn(t, 0, h, nil))
 		case chunkenc.ValFloatHistogram:
-			t, fh := iter.AtFloatHistogram()
+			t, fh := iter.AtFloatHistogram(nil)
 			result = append(result, newSampleFn(t, 0, nil, fh))
 		}
 	}
diff --git a/tsdb/block_test.go b/tsdb/block_test.go
index c155b4451df..d48418b5798 100644
--- a/tsdb/block_test.go
+++ b/tsdb/block_test.go
@@ -555,10 +555,10 @@ func createHead(tb testing.TB, w *wlog.WL, series []storage.Series, chunkDir str
 				t, v := it.At()
 				ref, err = app.Append(ref, lset, t, v)
 			case chunkenc.ValHistogram:
-				t, h := it.AtHistogram()
+				t, h := it.AtHistogram(nil)
 				ref, err = app.AppendHistogram(ref, lset, t, h, nil)
 			case chunkenc.ValFloatHistogram:
-				t, fh := it.AtFloatHistogram()
+				t, fh := it.AtFloatHistogram(nil)
 				ref, err = app.AppendHistogram(ref, lset, t, nil, fh)
 			default:
 				err = fmt.Errorf("unknown sample type %s", typ.String())
diff --git a/tsdb/chunkenc/chunk.go b/tsdb/chunkenc/chunk.go
index 0126f1fbdbb..21c41257b59 100644
--- a/tsdb/chunkenc/chunk.go
+++ b/tsdb/chunkenc/chunk.go
@@ -131,16 +131,20 @@ type Iterator interface {
 	// At returns the current timestamp/value pair if the value is a float.
 	// Before the iterator has advanced, the behaviour is unspecified.
 	At() (int64, float64)
-	// AtHistogram returns the current timestamp/value pair if the value is
-	// a histogram with integer counts. Before the iterator has advanced,
-	// the behaviour is unspecified.
-	AtHistogram() (int64, *histogram.Histogram)
+	// AtHistogram returns the current timestamp/value pair if the value is a
+	// histogram with integer counts. Before the iterator has advanced, the behaviour
+	// is unspecified.
+	// The method accepts an optional Histogram object which will be
+	// reused when not nil. Otherwise, a new Histogram object will be allocated.
+	AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram)
 	// AtFloatHistogram returns the current timestamp/value pair if the
 	// value is a histogram with floating-point counts. It also works if the
 	// value is a histogram with integer counts, in which case a
 	// FloatHistogram copy of the histogram is returned. Before the iterator
 	// has advanced, the behaviour is unspecified.
-	AtFloatHistogram() (int64, *histogram.FloatHistogram)
+	// The method accepts an optional FloatHistogram object which will be
+	// reused when not nil. Otherwise, a new FloatHistogram object will be allocated.
+	AtFloatHistogram(*histogram.FloatHistogram) (int64, *histogram.FloatHistogram)
 	// AtT returns the current timestamp.
 	// Before the iterator has advanced, the behaviour is unspecified.
 	AtT() int64
@@ -222,9 +226,11 @@ func (it *mockSeriesIterator) At() (int64, float64) {
 	return it.timeStamps[it.currIndex], it.values[it.currIndex]
 }
 
-func (it *mockSeriesIterator) AtHistogram() (int64, *histogram.Histogram) { return math.MinInt64, nil }
+func (it *mockSeriesIterator) AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram) {
+	return math.MinInt64, nil
+}
 
-func (it *mockSeriesIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (it *mockSeriesIterator) AtFloatHistogram(*histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	return math.MinInt64, nil
 }
 
@@ -249,13 +255,18 @@ func NewNopIterator() Iterator {
 
 type nopIterator struct{}
 
-func (nopIterator) Next() ValueType                                      { return ValNone }
-func (nopIterator) Seek(int64) ValueType                                 { return ValNone }
-func (nopIterator) At() (int64, float64)                                 { return math.MinInt64, 0 }
-func (nopIterator) AtHistogram() (int64, *histogram.Histogram)           { return math.MinInt64, nil }
-func (nopIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) { return math.MinInt64, nil }
-func (nopIterator) AtT() int64                                           { return math.MinInt64 }
-func (nopIterator) Err() error                                           { return nil }
+func (nopIterator) Next() ValueType      { return ValNone }
+func (nopIterator) Seek(int64) ValueType { return ValNone }
+func (nopIterator) At() (int64, float64) { return math.MinInt64, 0 }
+func (nopIterator) AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram) {
+	return math.MinInt64, nil
+}
+
+func (nopIterator) AtFloatHistogram(*histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
+	return math.MinInt64, nil
+}
+func (nopIterator) AtT() int64 { return math.MinInt64 }
+func (nopIterator) Err() error { return nil }
 
 // Pool is used to create and reuse chunk references to avoid allocations.
 type Pool interface {
diff --git a/tsdb/chunkenc/float_histogram.go b/tsdb/chunkenc/float_histogram.go
index 3d76cdf65f0..88d189254f7 100644
--- a/tsdb/chunkenc/float_histogram.go
+++ b/tsdb/chunkenc/float_histogram.go
@@ -527,7 +527,7 @@ func (a *FloatHistogramAppender) recode(
 	numPositiveBuckets, numNegativeBuckets := countSpans(positiveSpans), countSpans(negativeSpans)
 
 	for it.Next() == ValFloatHistogram {
-		tOld, hOld := it.AtFloatHistogram()
+		tOld, hOld := it.AtFloatHistogram(nil)
 
 		// We have to newly allocate slices for the modified buckets
 		// here because they are kept by the appender until the next
@@ -728,27 +728,50 @@ func (it *floatHistogramIterator) At() (int64, float64) {
 	panic("cannot call floatHistogramIterator.At")
 }
 
-func (it *floatHistogramIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (it *floatHistogramIterator) AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram) {
 	panic("cannot call floatHistogramIterator.AtHistogram")
 }
 
-func (it *floatHistogramIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (it *floatHistogramIterator) AtFloatHistogram(fh *histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	if value.IsStaleNaN(it.sum.value) {
 		return it.t, &histogram.FloatHistogram{Sum: it.sum.value}
 	}
-	it.atFloatHistogramCalled = true
-	return it.t, &histogram.FloatHistogram{
-		CounterResetHint: counterResetHint(it.counterResetHeader, it.numRead),
-		Count:            it.cnt.value,
-		ZeroCount:        it.zCnt.value,
-		Sum:              it.sum.value,
-		ZeroThreshold:    it.zThreshold,
-		Schema:           it.schema,
-		PositiveSpans:    it.pSpans,
-		NegativeSpans:    it.nSpans,
-		PositiveBuckets:  it.pBuckets,
-		NegativeBuckets:  it.nBuckets,
+	if fh == nil {
+		it.atFloatHistogramCalled = true
+		return it.t, &histogram.FloatHistogram{
+			CounterResetHint: counterResetHint(it.counterResetHeader, it.numRead),
+			Count:            it.cnt.value,
+			ZeroCount:        it.zCnt.value,
+			Sum:              it.sum.value,
+			ZeroThreshold:    it.zThreshold,
+			Schema:           it.schema,
+			PositiveSpans:    it.pSpans,
+			NegativeSpans:    it.nSpans,
+			PositiveBuckets:  it.pBuckets,
+			NegativeBuckets:  it.nBuckets,
+		}
 	}
+
+	fh.CounterResetHint = counterResetHint(it.counterResetHeader, it.numRead)
+	fh.Schema = it.schema
+	fh.ZeroThreshold = it.zThreshold
+	fh.ZeroCount = it.zCnt.value
+	fh.Count = it.cnt.value
+	fh.Sum = it.sum.value
+
+	fh.PositiveSpans = resize(fh.PositiveSpans, len(it.pSpans))
+	copy(fh.PositiveSpans, it.pSpans)
+
+	fh.NegativeSpans = resize(fh.NegativeSpans, len(it.nSpans))
+	copy(fh.NegativeSpans, it.nSpans)
+
+	fh.PositiveBuckets = resize(fh.PositiveBuckets, len(it.pBuckets))
+	copy(fh.PositiveBuckets, it.pBuckets)
+
+	fh.NegativeBuckets = resize(fh.NegativeBuckets, len(it.nBuckets))
+	copy(fh.NegativeBuckets, it.nBuckets)
+
+	return it.t, fh
 }
 
 func (it *floatHistogramIterator) AtT() int64 {
diff --git a/tsdb/chunkenc/float_histogram_test.go b/tsdb/chunkenc/float_histogram_test.go
index 6f5a95fb1c5..054c17f7d99 100644
--- a/tsdb/chunkenc/float_histogram_test.go
+++ b/tsdb/chunkenc/float_histogram_test.go
@@ -140,7 +140,7 @@ func TestFloatHistogramChunkSameBuckets(t *testing.T) {
 	require.NoError(t, it.Err())
 	var act []floatResult
 	for it.Next() == ValFloatHistogram {
-		fts, fh := it.AtFloatHistogram()
+		fts, fh := it.AtFloatHistogram(nil)
 		act = append(act, floatResult{t: fts, h: fh})
 	}
 	require.NoError(t, it.Err())
@@ -150,7 +150,7 @@ func TestFloatHistogramChunkSameBuckets(t *testing.T) {
 	it2 := c.Iterator(it)
 	var act2 []floatResult
 	for it2.Next() == ValFloatHistogram {
-		fts, fh := it2.AtFloatHistogram()
+		fts, fh := it2.AtFloatHistogram(nil)
 		act2 = append(act2, floatResult{t: fts, h: fh})
 	}
 	require.NoError(t, it2.Err())
@@ -164,7 +164,7 @@ func TestFloatHistogramChunkSameBuckets(t *testing.T) {
 	it3 := c.iterator(itX)
 	var act3 []floatResult
 	for it3.Next() == ValFloatHistogram {
-		fts, fh := it3.AtFloatHistogram()
+		fts, fh := it3.AtFloatHistogram(nil)
 		act3 = append(act3, floatResult{t: fts, h: fh})
 	}
 	require.NoError(t, it3.Err())
@@ -178,10 +178,10 @@ func TestFloatHistogramChunkSameBuckets(t *testing.T) {
 	// Below ones should not matter.
 	require.Equal(t, ValFloatHistogram, it4.Seek(exp[mid].t))
 	require.Equal(t, ValFloatHistogram, it4.Seek(exp[mid].t))
-	fts, fh := it4.AtFloatHistogram()
+	fts, fh := it4.AtFloatHistogram(nil)
 	act4 = append(act4, floatResult{t: fts, h: fh})
 	for it4.Next() == ValFloatHistogram {
-		fts, fh := it4.AtFloatHistogram()
+		fts, fh := it4.AtFloatHistogram(nil)
 		act4 = append(act4, floatResult{t: fts, h: fh})
 	}
 	require.NoError(t, it4.Err())
@@ -272,7 +272,7 @@ func TestFloatHistogramChunkBucketChanges(t *testing.T) {
 	it := c.Iterator(nil)
 	var act []floatResult
 	for it.Next() == ValFloatHistogram {
-		fts, fh := it.AtFloatHistogram()
+		fts, fh := it.AtFloatHistogram(nil)
 		act = append(act, floatResult{t: fts, h: fh})
 	}
 	require.NoError(t, it.Err())
diff --git a/tsdb/chunkenc/histogram.go b/tsdb/chunkenc/histogram.go
index ac84e7a1ef3..cb09eda26d4 100644
--- a/tsdb/chunkenc/histogram.go
+++ b/tsdb/chunkenc/histogram.go
@@ -558,7 +558,7 @@ func (a *HistogramAppender) recode(
 	numPositiveBuckets, numNegativeBuckets := countSpans(positiveSpans), countSpans(negativeSpans)
 
 	for it.Next() == ValHistogram {
-		tOld, hOld := it.AtHistogram()
+		tOld, hOld := it.AtHistogram(nil)
 
 		// We have to newly allocate slices for the modified buckets
 		// here because they are kept by the appender until the next
@@ -776,42 +776,96 @@ func (it *histogramIterator) At() (int64, float64) {
 	panic("cannot call histogramIterator.At")
 }
 
-func (it *histogramIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (it *histogramIterator) AtHistogram(h *histogram.Histogram) (int64, *histogram.Histogram) {
 	if value.IsStaleNaN(it.sum) {
 		return it.t, &histogram.Histogram{Sum: it.sum}
 	}
-	it.atHistogramCalled = true
-	return it.t, &histogram.Histogram{
-		CounterResetHint: counterResetHint(it.counterResetHeader, it.numRead),
-		Count:            it.cnt,
-		ZeroCount:        it.zCnt,
-		Sum:              it.sum,
-		ZeroThreshold:    it.zThreshold,
-		Schema:           it.schema,
-		PositiveSpans:    it.pSpans,
-		NegativeSpans:    it.nSpans,
-		PositiveBuckets:  it.pBuckets,
-		NegativeBuckets:  it.nBuckets,
+	if h == nil {
+		it.atHistogramCalled = true
+		return it.t, &histogram.Histogram{
+			CounterResetHint: counterResetHint(it.counterResetHeader, it.numRead),
+			Count:            it.cnt,
+			ZeroCount:        it.zCnt,
+			Sum:              it.sum,
+			ZeroThreshold:    it.zThreshold,
+			Schema:           it.schema,
+			PositiveSpans:    it.pSpans,
+			NegativeSpans:    it.nSpans,
+			PositiveBuckets:  it.pBuckets,
+			NegativeBuckets:  it.nBuckets,
+		}
 	}
+
+	h.CounterResetHint = counterResetHint(it.counterResetHeader, it.numRead)
+	h.Schema = it.schema
+	h.ZeroThreshold = it.zThreshold
+	h.ZeroCount = it.zCnt
+	h.Count = it.cnt
+	h.Sum = it.sum
+
+	h.PositiveSpans = resize(h.PositiveSpans, len(it.pSpans))
+	copy(h.PositiveSpans, it.pSpans)
+
+	h.NegativeSpans = resize(h.NegativeSpans, len(it.nSpans))
+	copy(h.NegativeSpans, it.nSpans)
+
+	h.PositiveBuckets = resize(h.PositiveBuckets, len(it.pBuckets))
+	copy(h.PositiveBuckets, it.pBuckets)
+
+	h.NegativeBuckets = resize(h.NegativeBuckets, len(it.nBuckets))
+	copy(h.NegativeBuckets, it.nBuckets)
+
+	return it.t, h
 }
 
-func (it *histogramIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (it *histogramIterator) AtFloatHistogram(fh *histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	if value.IsStaleNaN(it.sum) {
 		return it.t, &histogram.FloatHistogram{Sum: it.sum}
 	}
-	it.atFloatHistogramCalled = true
-	return it.t, &histogram.FloatHistogram{
-		CounterResetHint: counterResetHint(it.counterResetHeader, it.numRead),
-		Count:            float64(it.cnt),
-		ZeroCount:        float64(it.zCnt),
-		Sum:              it.sum,
-		ZeroThreshold:    it.zThreshold,
-		Schema:           it.schema,
-		PositiveSpans:    it.pSpans,
-		NegativeSpans:    it.nSpans,
-		PositiveBuckets:  it.pFloatBuckets,
-		NegativeBuckets:  it.nFloatBuckets,
+	if fh == nil {
+		it.atFloatHistogramCalled = true
+		return it.t, &histogram.FloatHistogram{
+			CounterResetHint: counterResetHint(it.counterResetHeader, it.numRead),
+			Count:            float64(it.cnt),
+			ZeroCount:        float64(it.zCnt),
+			Sum:              it.sum,
+			ZeroThreshold:    it.zThreshold,
+			Schema:           it.schema,
+			PositiveSpans:    it.pSpans,
+			NegativeSpans:    it.nSpans,
+			PositiveBuckets:  it.pFloatBuckets,
+			NegativeBuckets:  it.nFloatBuckets,
+		}
 	}
+
+	fh.CounterResetHint = counterResetHint(it.counterResetHeader, it.numRead)
+	fh.Schema = it.schema
+	fh.ZeroThreshold = it.zThreshold
+	fh.ZeroCount = float64(it.zCnt)
+	fh.Count = float64(it.cnt)
+	fh.Sum = it.sum
+
+	fh.PositiveSpans = resize(fh.PositiveSpans, len(it.pSpans))
+	copy(fh.PositiveSpans, it.pSpans)
+
+	fh.NegativeSpans = resize(fh.NegativeSpans, len(it.nSpans))
+	copy(fh.NegativeSpans, it.nSpans)
+
+	fh.PositiveBuckets = resize(fh.PositiveBuckets, len(it.pBuckets))
+	var currentPositive float64
+	for i, b := range it.pBuckets {
+		currentPositive += float64(b)
+		fh.PositiveBuckets[i] = currentPositive
+	}
+
+	fh.NegativeBuckets = resize(fh.NegativeBuckets, len(it.nBuckets))
+	var currentNegative float64
+	for i, b := range it.nBuckets {
+		currentNegative += float64(b)
+		fh.NegativeBuckets[i] = currentNegative
+	}
+
+	return it.t, fh
 }
 
 func (it *histogramIterator) AtT() int64 {
@@ -1056,3 +1110,10 @@ func (it *histogramIterator) readSum() bool {
 	}
 	return true
 }
+
+func resize[T any](items []T, n int) []T {
+	if cap(items) < n {
+		return make([]T, n)
+	}
+	return items[:n]
+}
diff --git a/tsdb/chunkenc/histogram_test.go b/tsdb/chunkenc/histogram_test.go
index 53aee89db5e..f7609c1936d 100644
--- a/tsdb/chunkenc/histogram_test.go
+++ b/tsdb/chunkenc/histogram_test.go
@@ -141,8 +141,8 @@ func TestHistogramChunkSameBuckets(t *testing.T) {
 	require.NoError(t, it.Err())
 	var act []result
 	for it.Next() == ValHistogram {
-		ts, h := it.AtHistogram()
-		fts, fh := it.AtFloatHistogram()
+		ts, h := it.AtHistogram(nil)
+		fts, fh := it.AtFloatHistogram(nil)
 		require.Equal(t, ts, fts)
 		act = append(act, result{t: ts, h: h, fh: fh})
 	}
@@ -153,8 +153,8 @@ func TestHistogramChunkSameBuckets(t *testing.T) {
 	it2 := c.Iterator(it)
 	var act2 []result
 	for it2.Next() == ValHistogram {
-		ts, h := it2.AtHistogram()
-		fts, fh := it2.AtFloatHistogram()
+		ts, h := it2.AtHistogram(nil)
+		fts, fh := it2.AtFloatHistogram(nil)
 		require.Equal(t, ts, fts)
 		act2 = append(act2, result{t: ts, h: h, fh: fh})
 	}
@@ -169,8 +169,8 @@ func TestHistogramChunkSameBuckets(t *testing.T) {
 	it3 := c.iterator(itX)
 	var act3 []result
 	for it3.Next() == ValHistogram {
-		ts, h := it3.AtHistogram()
-		fts, fh := it3.AtFloatHistogram()
+		ts, h := it3.AtHistogram(nil)
+		fts, fh := it3.AtFloatHistogram(nil)
 		require.Equal(t, ts, fts)
 		act3 = append(act3, result{t: ts, h: h, fh: fh})
 	}
@@ -185,13 +185,13 @@ func TestHistogramChunkSameBuckets(t *testing.T) {
 	// Below ones should not matter.
 	require.Equal(t, ValHistogram, it4.Seek(exp[mid].t))
 	require.Equal(t, ValHistogram, it4.Seek(exp[mid].t))
-	ts, h = it4.AtHistogram()
-	fts, fh := it4.AtFloatHistogram()
+	ts, h = it4.AtHistogram(nil)
+	fts, fh := it4.AtFloatHistogram(nil)
 	require.Equal(t, ts, fts)
 	act4 = append(act4, result{t: ts, h: h, fh: fh})
 	for it4.Next() == ValHistogram {
-		ts, h := it4.AtHistogram()
-		fts, fh := it4.AtFloatHistogram()
+		ts, h := it4.AtHistogram(nil)
+		fts, fh := it4.AtFloatHistogram(nil)
 		require.Equal(t, ts, fts)
 		act4 = append(act4, result{t: ts, h: h, fh: fh})
 	}
@@ -284,8 +284,8 @@ func TestHistogramChunkBucketChanges(t *testing.T) {
 	it := c.Iterator(nil)
 	var act []result
 	for it.Next() == ValHistogram {
-		ts, h := it.AtHistogram()
-		fts, fh := it.AtFloatHistogram()
+		ts, h := it.AtHistogram(nil)
+		fts, fh := it.AtFloatHistogram(nil)
 		require.Equal(t, ts, fts)
 		act = append(act, result{t: ts, h: h, fh: fh})
 	}
@@ -897,7 +897,7 @@ func TestAtFloatHistogram(t *testing.T) {
 	it := chk.Iterator(nil)
 	i := int64(0)
 	for it.Next() != ValNone {
-		ts, h := it.AtFloatHistogram()
+		ts, h := it.AtFloatHistogram(nil)
 		require.Equal(t, i, ts)
 		require.Equal(t, expOutput[i], h, "histogram %d unequal", i)
 		i++
diff --git a/tsdb/chunkenc/xor.go b/tsdb/chunkenc/xor.go
index d54e5dbab12..07b92383157 100644
--- a/tsdb/chunkenc/xor.go
+++ b/tsdb/chunkenc/xor.go
@@ -260,11 +260,11 @@ func (it *xorIterator) At() (int64, float64) {
 	return it.t, it.val
 }
 
-func (it *xorIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (it *xorIterator) AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram) {
 	panic("cannot call xorIterator.AtHistogram")
 }
 
-func (it *xorIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (it *xorIterator) AtFloatHistogram(*histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	panic("cannot call xorIterator.AtFloatHistogram")
 }
 
diff --git a/tsdb/chunks/chunks.go b/tsdb/chunks/chunks.go
index 2c6db3637a4..543b98c2898 100644
--- a/tsdb/chunks/chunks.go
+++ b/tsdb/chunks/chunks.go
@@ -226,10 +226,10 @@ func ChunkMetasToSamples(chunks []Meta) (result []Sample) {
 				t, v := it.At()
 				result = append(result, sample{t: t, f: v})
 			case chunkenc.ValHistogram:
-				t, h := it.AtHistogram()
+				t, h := it.AtHistogram(nil)
 				result = append(result, sample{t: t, h: h})
 			case chunkenc.ValFloatHistogram:
-				t, fh := it.AtFloatHistogram()
+				t, fh := it.AtFloatHistogram(nil)
 				result = append(result, sample{t: t, fh: fh})
 			default:
 				panic("unexpected value type")
diff --git a/tsdb/compact_test.go b/tsdb/compact_test.go
index f33bb73c193..b2d2ea6e7f1 100644
--- a/tsdb/compact_test.go
+++ b/tsdb/compact_test.go
@@ -1007,10 +1007,10 @@ func TestCompaction_populateBlock(t *testing.T) {
 							s.t, s.f = iter.At()
 							samples = append(samples, s)
 						case chunkenc.ValHistogram:
-							s.t, s.h = iter.AtHistogram()
+							s.t, s.h = iter.AtHistogram(nil)
 							samples = append(samples, s)
 						case chunkenc.ValFloatHistogram:
-							s.t, s.fh = iter.AtFloatHistogram()
+							s.t, s.fh = iter.AtFloatHistogram(nil)
 							samples = append(samples, s)
 						default:
 							require.Fail(t, "unexpected value type")
diff --git a/tsdb/db_test.go b/tsdb/db_test.go
index 3bc094a3da8..9e543ed500a 100644
--- a/tsdb/db_test.go
+++ b/tsdb/db_test.go
@@ -107,10 +107,10 @@ func query(t testing.TB, q storage.Querier, matchers ...*labels.Matcher) map[str
 				ts, v := it.At()
 				samples = append(samples, sample{t: ts, f: v})
 			case chunkenc.ValHistogram:
-				ts, h := it.AtHistogram()
+				ts, h := it.AtHistogram(nil)
 				samples = append(samples, sample{t: ts, h: h})
 			case chunkenc.ValFloatHistogram:
-				ts, fh := it.AtFloatHistogram()
+				ts, fh := it.AtFloatHistogram(nil)
 				samples = append(samples, sample{t: ts, fh: fh})
 			default:
 				t.Fatalf("unknown sample type in query %s", typ.String())
@@ -6664,10 +6664,10 @@ func TestQueryHistogramFromBlocksWithCompaction(t *testing.T) {
 						ts, v := it.At()
 						slice = append(slice, sample{t: ts, f: v})
 					case chunkenc.ValHistogram:
-						ts, h := it.AtHistogram()
+						ts, h := it.AtHistogram(nil)
 						slice = append(slice, sample{t: ts, h: h})
 					case chunkenc.ValFloatHistogram:
-						ts, h := it.AtFloatHistogram()
+						ts, h := it.AtFloatHistogram(nil)
 						slice = append(slice, sample{t: ts, fh: h})
 					default:
 						t.Fatalf("unexpected sample value type %d", typ)
diff --git a/tsdb/head_test.go b/tsdb/head_test.go
index 5c2749bed21..653c53a7401 100644
--- a/tsdb/head_test.go
+++ b/tsdb/head_test.go
@@ -3377,10 +3377,10 @@ func TestAppendHistogram(t *testing.T) {
 			for typ := it.Next(); typ != chunkenc.ValNone; typ = it.Next() {
 				switch typ {
 				case chunkenc.ValHistogram:
-					ts, h := it.AtHistogram()
+					ts, h := it.AtHistogram(nil)
 					actHistograms = append(actHistograms, sample{t: ts, h: h})
 				case chunkenc.ValFloatHistogram:
-					ts, fh := it.AtFloatHistogram()
+					ts, fh := it.AtFloatHistogram(nil)
 					actFloatHistograms = append(actFloatHistograms, sample{t: ts, fh: fh})
 				}
 			}
@@ -4025,10 +4025,10 @@ func testHistogramStaleSampleHelper(t *testing.T, floatHistogram bool) {
 		for typ := it.Next(); typ != chunkenc.ValNone; typ = it.Next() {
 			switch typ {
 			case chunkenc.ValHistogram:
-				t, h := it.AtHistogram()
+				t, h := it.AtHistogram(nil)
 				actHistograms = append(actHistograms, timedHistogram{t: t, h: h})
 			case chunkenc.ValFloatHistogram:
-				t, h := it.AtFloatHistogram()
+				t, h := it.AtFloatHistogram(nil)
 				actHistograms = append(actHistograms, timedHistogram{t: t, fh: h})
 			}
 		}
diff --git a/tsdb/querier.go b/tsdb/querier.go
index 68aa9574633..a692c98f1ad 100644
--- a/tsdb/querier.go
+++ b/tsdb/querier.go
@@ -820,12 +820,12 @@ func (p *populateWithDelSeriesIterator) At() (int64, float64) {
 	return p.curr.At()
 }
 
-func (p *populateWithDelSeriesIterator) AtHistogram() (int64, *histogram.Histogram) {
-	return p.curr.AtHistogram()
+func (p *populateWithDelSeriesIterator) AtHistogram(h *histogram.Histogram) (int64, *histogram.Histogram) {
+	return p.curr.AtHistogram(h)
 }
 
-func (p *populateWithDelSeriesIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
-	return p.curr.AtFloatHistogram()
+func (p *populateWithDelSeriesIterator) AtFloatHistogram(fh *histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
+	return p.curr.AtFloatHistogram(fh)
 }
 
 func (p *populateWithDelSeriesIterator) AtT() int64 {
@@ -937,7 +937,7 @@ func (p *populateWithDelChunkSeriesIterator) populateCurrForSingleChunk() bool {
 				break
 			}
 			var h *histogram.Histogram
-			t, h = p.currDelIter.AtHistogram()
+			t, h = p.currDelIter.AtHistogram(nil)
 			_, _, app, err = app.AppendHistogram(nil, t, h, true)
 			if err != nil {
 				break
@@ -968,7 +968,7 @@ func (p *populateWithDelChunkSeriesIterator) populateCurrForSingleChunk() bool {
 				break
 			}
 			var h *histogram.FloatHistogram
-			t, h = p.currDelIter.AtFloatHistogram()
+			t, h = p.currDelIter.AtFloatHistogram(nil)
 			_, _, app, err = app.AppendFloatHistogram(nil, t, h, true)
 			if err != nil {
 				break
@@ -1054,7 +1054,7 @@ func (p *populateWithDelChunkSeriesIterator) populateChunksFromIterable() bool {
 		case chunkenc.ValHistogram:
 			{
 				var v *histogram.Histogram
-				t, v = p.currDelIter.AtHistogram()
+				t, v = p.currDelIter.AtHistogram(nil)
 				// No need to set prevApp as AppendHistogram will set the
 				// counter reset header for the appender that's returned.
 				newChunk, recoded, app, err = app.AppendHistogram(nil, t, v, false)
@@ -1062,7 +1062,7 @@ func (p *populateWithDelChunkSeriesIterator) populateChunksFromIterable() bool {
 		case chunkenc.ValFloatHistogram:
 			{
 				var v *histogram.FloatHistogram
-				t, v = p.currDelIter.AtFloatHistogram()
+				t, v = p.currDelIter.AtFloatHistogram(nil)
 				// No need to set prevApp as AppendHistogram will set the
 				// counter reset header for the appender that's returned.
 				newChunk, recoded, app, err = app.AppendFloatHistogram(nil, t, v, false)
@@ -1233,13 +1233,13 @@ func (it *DeletedIterator) At() (int64, float64) {
 	return it.Iter.At()
 }
 
-func (it *DeletedIterator) AtHistogram() (int64, *histogram.Histogram) {
-	t, h := it.Iter.AtHistogram()
+func (it *DeletedIterator) AtHistogram(h *histogram.Histogram) (int64, *histogram.Histogram) {
+	t, h := it.Iter.AtHistogram(h)
 	return t, h
 }
 
-func (it *DeletedIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
-	t, h := it.Iter.AtFloatHistogram()
+func (it *DeletedIterator) AtFloatHistogram(fh *histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
+	t, h := it.Iter.AtFloatHistogram(fh)
 	return t, h
 }
 
diff --git a/tsdb/querier_test.go b/tsdb/querier_test.go
index 18d81b85b47..1ed59ef1aee 100644
--- a/tsdb/querier_test.go
+++ b/tsdb/querier_test.go
@@ -775,11 +775,11 @@ func (it *mockSampleIterator) At() (int64, float64) {
 	return it.s[it.idx].T(), it.s[it.idx].F()
 }
 
-func (it *mockSampleIterator) AtHistogram() (int64, *histogram.Histogram) {
+func (it *mockSampleIterator) AtHistogram(*histogram.Histogram) (int64, *histogram.Histogram) {
 	return it.s[it.idx].T(), it.s[it.idx].H()
 }
 
-func (it *mockSampleIterator) AtFloatHistogram() (int64, *histogram.FloatHistogram) {
+func (it *mockSampleIterator) AtFloatHistogram(*histogram.FloatHistogram) (int64, *histogram.FloatHistogram) {
 	return it.s[it.idx].T(), it.s[it.idx].FH()
 }
 
@@ -1822,12 +1822,12 @@ func checkCurrVal(t *testing.T, valType chunkenc.ValueType, it *populateWithDelS
 		require.Equal(t, int64(expectedTs), ts)
 		require.Equal(t, float64(expectedValue), v)
 	case chunkenc.ValHistogram:
-		ts, h := it.AtHistogram()
+		ts, h := it.AtHistogram(nil)
 		require.Equal(t, int64(expectedTs), ts)
 		h.CounterResetHint = histogram.UnknownCounterReset
 		require.Equal(t, tsdbutil.GenerateTestHistogram(expectedValue), h)
 	case chunkenc.ValFloatHistogram:
-		ts, h := it.AtFloatHistogram()
+		ts, h := it.AtFloatHistogram(nil)
 		require.Equal(t, int64(expectedTs), ts)
 		h.CounterResetHint = histogram.UnknownCounterReset
 		require.Equal(t, tsdbutil.GenerateTestFloatHistogram(expectedValue), h)
diff --git a/tsdb/tsdbblockutil.go b/tsdb/tsdbblockutil.go
index d4e43b73ccf..f7b27c2e08e 100644
--- a/tsdb/tsdbblockutil.go
+++ b/tsdb/tsdbblockutil.go
@@ -73,10 +73,10 @@ func CreateBlock(series []storage.Series, dir string, chunkRange int64, logger l
 				t, v := it.At()
 				ref, err = app.Append(ref, lset, t, v)
 			case chunkenc.ValHistogram:
-				t, h := it.AtHistogram()
+				t, h := it.AtHistogram(nil)
 				ref, err = app.AppendHistogram(ref, lset, t, h, nil)
 			case chunkenc.ValFloatHistogram:
-				t, fh := it.AtFloatHistogram()
+				t, fh := it.AtFloatHistogram(nil)
 				ref, err = app.AppendHistogram(ref, lset, t, nil, fh)
 			default:
 				return "", fmt.Errorf("unknown sample type %s", typ.String())
diff --git a/web/federate.go b/web/federate.go
index 22384a696c7..62e8c97b741 100644
--- a/web/federate.go
+++ b/web/federate.go
@@ -123,7 +123,7 @@ Loop:
 		case chunkenc.ValFloat:
 			t, f = it.At()
 		case chunkenc.ValFloatHistogram, chunkenc.ValHistogram:
-			t, fh = it.AtFloatHistogram()
+			t, fh = it.AtFloatHistogram(nil)
 		default:
 			sample, ok := it.PeekBack(1)
 			if !ok {

From 89523cf9b300fd0178c49dd6a7d36e56d3f654d8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bj=C3=B6rn=20Rabenstein?= <beorn@grafana.com>
Date: Tue, 23 Jan 2024 17:05:34 +0100
Subject: [PATCH 107/132] doc: Mark `mad_over_time` as experimental (#13440)

We forgot to do that in
https://github.com/prometheus/prometheus/pull/13059

Signed-off-by: beorn7 <beorn@grafana.com>
---
 docs/querying/functions.md | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/docs/querying/functions.md b/docs/querying/functions.md
index 607e16e8280..375104a0da2 100644
--- a/docs/querying/functions.md
+++ b/docs/querying/functions.md
@@ -644,10 +644,15 @@ over time and return an instant vector with per-series aggregation results:
 * `quantile_over_time(scalar, range-vector)`: the φ-quantile (0 ≤ φ ≤ 1) of the values in the specified interval.
 * `stddev_over_time(range-vector)`: the population standard deviation of the values in the specified interval.
 * `stdvar_over_time(range-vector)`: the population standard variance of the values in the specified interval.
-* `mad_over_time(range-vector)`: the median absolute deviation of all points in the specified interval.
 * `last_over_time(range-vector)`: the most recent point value in the specified interval.
 * `present_over_time(range-vector)`: the value 1 for any series in the specified interval.
 
+If the [feature flag](../feature_flags/)
+`--enable-feature=promql-experimental-functions` is set, the following
+additional functions are available:
+
+* `mad_over_time(range-vector)`: the median absolute deviation of all points in the specified interval.
+
 Note that all values in the specified interval have the same weight in the
 aggregation even if the values are not equally spaced throughout the interval.
 

From 53589fde4fb80f462fb545137b36415f08c58a35 Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Tue, 23 Jan 2024 19:24:13 +0000
Subject: [PATCH 108/132] Change metric label for Puppetdb from 'http' to
 'puppetdb'

Signed-off-by: Paulin Todev <paulin.todev@gmail.com>
---
 discovery/puppetdb/puppetdb.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/discovery/puppetdb/puppetdb.go b/discovery/puppetdb/puppetdb.go
index 4355a7adeaa..3f9ad1f113e 100644
--- a/discovery/puppetdb/puppetdb.go
+++ b/discovery/puppetdb/puppetdb.go
@@ -171,7 +171,7 @@ func NewDiscovery(conf *SDConfig, logger log.Logger, metrics discovery.Discovere
 	d.Discovery = refresh.NewDiscovery(
 		refresh.Options{
 			Logger:              logger,
-			Mech:                "http",
+			Mech:                "puppetdb",
 			Interval:            time.Duration(conf.RefreshInterval),
 			RefreshF:            d.refresh,
 			MetricsInstantiator: m.refreshMetrics,

From 033c9b229df1dbe04d4d548305befe022743b602 Mon Sep 17 00:00:00 2001
From: Ziqi Zhao <zhaoziqi9146@gmail.com>
Date: Wed, 24 Jan 2024 14:01:23 +0800
Subject: [PATCH 109/132] mirror metrics.proto change & generate code

Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>
---
 prompb/io/prometheus/client/metrics.pb.go | 200 ++++++++++++++--------
 prompb/io/prometheus/client/metrics.proto |   3 +
 2 files changed, 136 insertions(+), 67 deletions(-)

diff --git a/prompb/io/prometheus/client/metrics.pb.go b/prompb/io/prometheus/client/metrics.pb.go
index 702ee62fce4..17cab6081e2 100644
--- a/prompb/io/prometheus/client/metrics.pb.go
+++ b/prompb/io/prometheus/client/metrics.pb.go
@@ -438,11 +438,13 @@ type Histogram struct {
 	// Use either "positive_delta" or "positive_count", the former for
 	// regular histograms with integer counts, the latter for float
 	// histograms.
-	PositiveDelta        []int64   `protobuf:"zigzag64,13,rep,packed,name=positive_delta,json=positiveDelta,proto3" json:"positive_delta,omitempty"`
-	PositiveCount        []float64 `protobuf:"fixed64,14,rep,packed,name=positive_count,json=positiveCount,proto3" json:"positive_count,omitempty"`
-	XXX_NoUnkeyedLiteral struct{}  `json:"-"`
-	XXX_unrecognized     []byte    `json:"-"`
-	XXX_sizecache        int32     `json:"-"`
+	PositiveDelta []int64   `protobuf:"zigzag64,13,rep,packed,name=positive_delta,json=positiveDelta,proto3" json:"positive_delta,omitempty"`
+	PositiveCount []float64 `protobuf:"fixed64,14,rep,packed,name=positive_count,json=positiveCount,proto3" json:"positive_count,omitempty"`
+	// Only used for native histograms. These exemplars MUST have a timestamp.
+	Exemplars            []*Exemplar `protobuf:"bytes,16,rep,name=exemplars,proto3" json:"exemplars,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}    `json:"-"`
+	XXX_unrecognized     []byte      `json:"-"`
+	XXX_sizecache        int32       `json:"-"`
 }
 
 func (m *Histogram) Reset()         { *m = Histogram{} }
@@ -583,6 +585,13 @@ func (m *Histogram) GetPositiveCount() []float64 {
 	return nil
 }
 
+func (m *Histogram) GetExemplars() []*Exemplar {
+	if m != nil {
+		return m.Exemplars
+	}
+	return nil
+}
+
 type Bucket struct {
 	CumulativeCount      uint64    `protobuf:"varint,1,opt,name=cumulative_count,json=cumulativeCount,proto3" json:"cumulative_count,omitempty"`
 	CumulativeCountFloat float64   `protobuf:"fixed64,4,opt,name=cumulative_count_float,json=cumulativeCountFloat,proto3" json:"cumulative_count_float,omitempty"`
@@ -973,68 +982,69 @@ func init() {
 }
 
 var fileDescriptor_d1e5ddb18987a258 = []byte{
-	// 969 bytes of a gzipped FileDescriptorProto
-	0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0xff, 0xa4, 0x56, 0xdd, 0x8e, 0xdb, 0x44,
-	0x14, 0xae, 0x9b, 0x5f, 0x9f, 0x6c, 0x76, 0xbd, 0x43, 0x54, 0x59, 0x0b, 0xbb, 0x09, 0x96, 0x90,
-	0x16, 0x84, 0x12, 0x01, 0x45, 0xa0, 0x52, 0x24, 0x76, 0xdb, 0x6d, 0x8a, 0x4a, 0xda, 0x32, 0x49,
-	0x2e, 0xca, 0x8d, 0x35, 0x49, 0x66, 0x1d, 0x0b, 0xdb, 0x63, 0xec, 0x71, 0xc5, 0x72, 0xcf, 0x33,
-	0xf0, 0x02, 0x3c, 0x06, 0xe2, 0x12, 0xf5, 0x92, 0x2b, 0x2e, 0x11, 0xda, 0x27, 0x41, 0xf3, 0x63,
-	0x3b, 0x5b, 0x39, 0x0b, 0x0b, 0x77, 0x33, 0x5f, 0xbe, 0x73, 0xe6, 0x3b, 0xdf, 0x4c, 0xce, 0x31,
-	0x38, 0x3e, 0x1b, 0xc5, 0x09, 0x0b, 0x29, 0x5f, 0xd3, 0x2c, 0x1d, 0x2d, 0x03, 0x9f, 0x46, 0x7c,
-	0x14, 0x52, 0x9e, 0xf8, 0xcb, 0x74, 0x18, 0x27, 0x8c, 0x33, 0xd4, 0xf3, 0xd9, 0xb0, 0xe4, 0x0c,
-	0x15, 0xe7, 0xa0, 0xe7, 0x31, 0x8f, 0x49, 0xc2, 0x48, 0xac, 0x14, 0xf7, 0xa0, 0xef, 0x31, 0xe6,
-	0x05, 0x74, 0x24, 0x77, 0x8b, 0xec, 0x7c, 0xc4, 0xfd, 0x90, 0xa6, 0x9c, 0x84, 0xb1, 0x22, 0x38,
-	0x1f, 0x83, 0xf9, 0x15, 0x59, 0xd0, 0xe0, 0x39, 0xf1, 0x13, 0x84, 0xa0, 0x1e, 0x91, 0x90, 0xda,
-	0xc6, 0xc0, 0x38, 0x36, 0xb1, 0x5c, 0xa3, 0x1e, 0x34, 0x5e, 0x92, 0x20, 0xa3, 0xf6, 0x6d, 0x09,
-	0xaa, 0x8d, 0x73, 0x08, 0x8d, 0x31, 0xc9, 0xbc, 0x8d, 0x9f, 0x45, 0x8c, 0x91, 0xff, 0xfc, 0xb3,
-	0x01, 0xad, 0x07, 0x2c, 0x8b, 0x38, 0x4d, 0xaa, 0x19, 0xe8, 0x1e, 0xb4, 0xe9, 0xf7, 0x34, 0x8c,
-	0x03, 0x92, 0xc8, 0xcc, 0x9d, 0x0f, 0x8f, 0x86, 0x55, 0x75, 0x0d, 0xcf, 0x34, 0x0b, 0x17, 0x7c,
-	0x34, 0x86, 0xfd, 0x65, 0x42, 0x09, 0xa7, 0x2b, 0xb7, 0x28, 0xc7, 0xae, 0xc9, 0x24, 0x07, 0x43,
-	0x55, 0xf0, 0x30, 0x2f, 0x78, 0x38, 0xcb, 0x19, 0xd8, 0xd2, 0x41, 0x05, 0xe2, 0xdc, 0x87, 0xf6,
-	0xd7, 0x19, 0x89, 0xb8, 0x1f, 0x50, 0x74, 0x00, 0xed, 0xef, 0xf4, 0x5a, 0x2b, 0x2d, 0xf6, 0x57,
-	0x3d, 0x28, 0x8a, 0xfc, 0xc3, 0x80, 0xd6, 0x34, 0x0b, 0x43, 0x92, 0x5c, 0xa0, 0xb7, 0x61, 0x27,
-	0x25, 0x61, 0x1c, 0x50, 0x77, 0x29, 0xca, 0x96, 0x19, 0xea, 0xb8, 0xa3, 0x30, 0xe9, 0x04, 0x3a,
-	0x04, 0xd0, 0x94, 0x34, 0x0b, 0x75, 0x26, 0x53, 0x21, 0xd3, 0x2c, 0x44, 0x5f, 0x6c, 0x9c, 0x5f,
-	0x1b, 0xd4, 0xb6, 0x1b, 0x92, 0x2b, 0x3e, 0xad, 0xbf, 0xfa, 0xb3, 0x7f, 0x6b, 0x43, 0x65, 0xa5,
-	0x2d, 0xf5, 0xff, 0x60, 0x4b, 0x1f, 0x5a, 0xf3, 0x88, 0x5f, 0xc4, 0x74, 0xb5, 0xe5, 0x7a, 0x7f,
-	0x6d, 0x80, 0xf9, 0xd8, 0x4f, 0x39, 0xf3, 0x12, 0x12, 0xfe, 0x9b, 0xda, 0xdf, 0x07, 0xb4, 0x49,
-	0x71, 0xcf, 0x03, 0x46, 0xb8, 0xd4, 0x66, 0x60, 0x6b, 0x83, 0xf8, 0x48, 0xe0, 0xff, 0xe4, 0xd4,
-	0x3d, 0x68, 0x2e, 0xb2, 0xe5, 0xb7, 0x94, 0x6b, 0x9f, 0xde, 0xaa, 0xf6, 0xe9, 0x54, 0x72, 0xb4,
-	0x4b, 0x3a, 0xa2, 0xda, 0xa3, 0xbd, 0x9b, 0x7b, 0x84, 0xee, 0x40, 0x33, 0x5d, 0xae, 0x69, 0x48,
-	0xec, 0xc6, 0xc0, 0x38, 0xde, 0xc7, 0x7a, 0x87, 0xde, 0x81, 0xdd, 0x1f, 0x68, 0xc2, 0x5c, 0xbe,
-	0x4e, 0x68, 0xba, 0x66, 0xc1, 0xca, 0x6e, 0x4a, 0xfd, 0x5d, 0x81, 0xce, 0x72, 0x50, 0x94, 0x28,
-	0x69, 0xca, 0xb1, 0x96, 0x74, 0xcc, 0x14, 0x88, 0xf2, 0xeb, 0x18, 0xac, 0xf2, 0x67, 0xed, 0x56,
-	0x5b, 0xe6, 0xd9, 0x2d, 0x48, 0xca, 0xab, 0x27, 0xd0, 0x8d, 0xa8, 0x47, 0xb8, 0xff, 0x92, 0xba,
-	0x69, 0x4c, 0x22, 0xdb, 0x94, 0x9e, 0x0c, 0xae, 0xf3, 0x64, 0x1a, 0x93, 0x48, 0xfb, 0xb2, 0x93,
-	0x07, 0x0b, 0x4c, 0x88, 0x2f, 0x92, 0xad, 0x68, 0xc0, 0x89, 0x0d, 0x83, 0xda, 0x31, 0xc2, 0xc5,
-	0x11, 0x0f, 0x05, 0x78, 0x85, 0xa6, 0x0a, 0xe8, 0x0c, 0x6a, 0xa2, 0xc6, 0x1c, 0x55, 0x45, 0x3c,
-	0x81, 0x6e, 0xcc, 0x52, 0xbf, 0x94, 0xb6, 0x73, 0x33, 0x69, 0x79, 0x70, 0x2e, 0xad, 0x48, 0xa6,
-	0xa4, 0x75, 0x95, 0xb4, 0x1c, 0x2d, 0xa4, 0x15, 0x34, 0x25, 0x6d, 0x57, 0x49, 0xcb, 0x51, 0x29,
-	0xcd, 0xf9, 0xcd, 0x80, 0xa6, 0x3a, 0x10, 0xbd, 0x0b, 0xd6, 0x32, 0x0b, 0xb3, 0x60, 0xb3, 0x1c,
-	0xf5, 0x82, 0xf7, 0x4a, 0x5c, 0x15, 0x74, 0x17, 0xee, 0xbc, 0x4e, 0xbd, 0xf2, 0x92, 0x7b, 0xaf,
-	0x05, 0xa8, 0x1b, 0xea, 0x43, 0x27, 0x8b, 0x63, 0x9a, 0xb8, 0x0b, 0x96, 0x45, 0x2b, 0xfd, 0x9c,
-	0x41, 0x42, 0xa7, 0x02, 0xb9, 0xd2, 0x0a, 0x6b, 0x37, 0x6b, 0x85, 0xce, 0x7d, 0x80, 0xd2, 0x38,
-	0xf1, 0x28, 0xd9, 0xf9, 0x79, 0x4a, 0x55, 0x05, 0xfb, 0x58, 0xef, 0x04, 0x1e, 0xd0, 0xc8, 0xe3,
-	0x6b, 0x79, 0x7a, 0x17, 0xeb, 0x9d, 0xf3, 0x93, 0x01, 0xed, 0x3c, 0x29, 0xfa, 0x0c, 0x1a, 0x81,
-	0x98, 0x04, 0xb6, 0x21, 0xaf, 0xa9, 0x5f, 0xad, 0xa1, 0x18, 0x16, 0xfa, 0x96, 0x54, 0x4c, 0x75,
-	0x87, 0x44, 0x9f, 0x82, 0x79, 0x93, 0x06, 0x5d, 0x92, 0x9d, 0x1f, 0x6b, 0xd0, 0x9c, 0xc8, 0xa9,
-	0xf7, 0xff, 0x74, 0x7d, 0x00, 0x0d, 0x4f, 0xcc, 0x29, 0x3d, 0x63, 0xde, 0xac, 0x0e, 0x96, 0xa3,
-	0x0c, 0x2b, 0x26, 0xfa, 0x04, 0x5a, 0x4b, 0x35, 0xba, 0xb4, 0xe4, 0xc3, 0xea, 0x20, 0x3d, 0xdf,
-	0x70, 0xce, 0x16, 0x81, 0xa9, 0x1a, 0x07, 0xba, 0xeb, 0x6e, 0x09, 0xd4, 0x33, 0x03, 0xe7, 0x6c,
-	0x11, 0x98, 0xa9, 0x7e, 0x2b, 0x9b, 0xc9, 0xd6, 0x40, 0xdd, 0x94, 0x71, 0xce, 0x46, 0x9f, 0x83,
-	0xb9, 0xce, 0xdb, 0xb0, 0x6c, 0x22, 0x5b, 0xed, 0x29, 0xba, 0x35, 0x2e, 0x23, 0x44, 0xe3, 0x2e,
-	0x1c, 0x77, 0xc3, 0x54, 0x76, 0xaa, 0x1a, 0xee, 0x14, 0xd8, 0x24, 0x75, 0x7e, 0x31, 0x60, 0x47,
-	0xdd, 0xc3, 0x23, 0x12, 0xfa, 0xc1, 0x45, 0xe5, 0x27, 0x02, 0x82, 0xfa, 0x9a, 0x06, 0xb1, 0xfe,
-	0x42, 0x90, 0x6b, 0x74, 0x17, 0xea, 0x42, 0xa3, 0xb4, 0x70, 0x77, 0xdb, 0x7f, 0x5e, 0x65, 0x9e,
-	0x5d, 0xc4, 0x14, 0x4b, 0xb6, 0x68, 0xed, 0xea, 0x5b, 0xc7, 0xae, 0x5f, 0xd7, 0xda, 0x55, 0x5c,
-	0xde, 0xda, 0x55, 0x84, 0x50, 0x91, 0x45, 0x3e, 0x97, 0x16, 0x9a, 0x58, 0xae, 0xdf, 0x5b, 0x00,
-	0x94, 0x67, 0xa0, 0x0e, 0xb4, 0x1e, 0x3c, 0x9b, 0x3f, 0x9d, 0x9d, 0x61, 0xeb, 0x16, 0x32, 0xa1,
-	0x31, 0x3e, 0x99, 0x8f, 0xcf, 0x2c, 0x43, 0xe0, 0xd3, 0xf9, 0x64, 0x72, 0x82, 0x5f, 0x58, 0xb7,
-	0xc5, 0x66, 0xfe, 0x74, 0xf6, 0xe2, 0xf9, 0xd9, 0x43, 0xab, 0x86, 0xba, 0x60, 0x3e, 0xfe, 0x72,
-	0x3a, 0x7b, 0x36, 0xc6, 0x27, 0x13, 0xab, 0x8e, 0xde, 0x80, 0x3d, 0x19, 0xe3, 0x96, 0x60, 0xe3,
-	0xd4, 0x79, 0x75, 0x79, 0x64, 0xfc, 0x7e, 0x79, 0x64, 0xfc, 0x75, 0x79, 0x64, 0x7c, 0xd3, 0xf3,
-	0x99, 0x5b, 0x0a, 0x76, 0x95, 0xe0, 0x45, 0x53, 0xbe, 0xf6, 0x8f, 0xfe, 0x0e, 0x00, 0x00, 0xff,
-	0xff, 0x6d, 0x53, 0xc5, 0x1e, 0xdf, 0x09, 0x00, 0x00,
+	// 982 bytes of a gzipped FileDescriptorProto
+	0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0xff, 0xa4, 0x56, 0x4d, 0x8f, 0xdb, 0x44,
+	0x18, 0xae, 0x9b, 0x4f, 0xbf, 0xd9, 0x6c, 0xbd, 0x43, 0x54, 0x59, 0x0b, 0xbb, 0x09, 0x96, 0x90,
+	0x16, 0x84, 0x12, 0x01, 0x45, 0xa0, 0xb2, 0x48, 0xec, 0xb6, 0xdb, 0x14, 0x95, 0xb4, 0x65, 0x92,
+	0x1c, 0xca, 0xc5, 0x9a, 0x24, 0xb3, 0x8e, 0x85, 0xbf, 0xb0, 0xc7, 0x15, 0xcb, 0x9d, 0xdf, 0xc0,
+	0x1f, 0xe0, 0x67, 0x70, 0x46, 0x3d, 0x72, 0xe2, 0x88, 0xd0, 0xfe, 0x0e, 0x0e, 0x68, 0xbe, 0xec,
+	0x6c, 0xe5, 0x2c, 0x2c, 0xdc, 0x3c, 0x8f, 0x9f, 0x67, 0xe6, 0x79, 0x1f, 0xdb, 0xef, 0x6b, 0x70,
+	0xfc, 0x78, 0x94, 0xa4, 0x71, 0x48, 0xd9, 0x9a, 0xe6, 0xd9, 0x68, 0x19, 0xf8, 0x34, 0x62, 0xa3,
+	0x90, 0xb2, 0xd4, 0x5f, 0x66, 0xc3, 0x24, 0x8d, 0x59, 0x8c, 0x7a, 0x7e, 0x3c, 0x2c, 0x39, 0x43,
+	0xc9, 0xd9, 0xef, 0x79, 0xb1, 0x17, 0x0b, 0xc2, 0x88, 0x5f, 0x49, 0xee, 0x7e, 0xdf, 0x8b, 0x63,
+	0x2f, 0xa0, 0x23, 0xb1, 0x5a, 0xe4, 0xe7, 0x23, 0xe6, 0x87, 0x34, 0x63, 0x24, 0x4c, 0x24, 0xc1,
+	0xf9, 0x18, 0xcc, 0xaf, 0xc8, 0x82, 0x06, 0xcf, 0x89, 0x9f, 0x22, 0x04, 0xf5, 0x88, 0x84, 0xd4,
+	0x36, 0x06, 0xc6, 0x91, 0x89, 0xc5, 0x35, 0xea, 0x41, 0xe3, 0x25, 0x09, 0x72, 0x6a, 0xdf, 0x16,
+	0xa0, 0x5c, 0x38, 0x07, 0xd0, 0x18, 0x93, 0xdc, 0xdb, 0xb8, 0xcd, 0x35, 0x86, 0xbe, 0xfd, 0xb3,
+	0x01, 0xad, 0x07, 0x71, 0x1e, 0x31, 0x9a, 0x56, 0x33, 0xd0, 0x7d, 0x68, 0xd3, 0xef, 0x69, 0x98,
+	0x04, 0x24, 0x15, 0x3b, 0x77, 0x3e, 0x3c, 0x1c, 0x56, 0xd5, 0x35, 0x3c, 0x53, 0x2c, 0x5c, 0xf0,
+	0xd1, 0x18, 0xf6, 0x96, 0x29, 0x25, 0x8c, 0xae, 0xdc, 0xa2, 0x1c, 0xbb, 0x26, 0x36, 0xd9, 0x1f,
+	0xca, 0x82, 0x87, 0xba, 0xe0, 0xe1, 0x4c, 0x33, 0xb0, 0xa5, 0x44, 0x05, 0xe2, 0x1c, 0x43, 0xfb,
+	0xeb, 0x9c, 0x44, 0xcc, 0x0f, 0x28, 0xda, 0x87, 0xf6, 0x77, 0xea, 0x5a, 0x39, 0x2d, 0xd6, 0x57,
+	0x33, 0x28, 0x8a, 0xfc, 0xdd, 0x80, 0xd6, 0x34, 0x0f, 0x43, 0x92, 0x5e, 0xa0, 0xb7, 0x61, 0x27,
+	0x23, 0x61, 0x12, 0x50, 0x77, 0xc9, 0xcb, 0x16, 0x3b, 0xd4, 0x71, 0x47, 0x62, 0x22, 0x09, 0x74,
+	0x00, 0xa0, 0x28, 0x59, 0x1e, 0xaa, 0x9d, 0x4c, 0x89, 0x4c, 0xf3, 0x10, 0x7d, 0xb1, 0x71, 0x7e,
+	0x6d, 0x50, 0xdb, 0x1e, 0x88, 0x76, 0x7c, 0x5a, 0x7f, 0xf5, 0x47, 0xff, 0xd6, 0x86, 0xcb, 0xca,
+	0x58, 0xea, 0xff, 0x21, 0x96, 0x3e, 0xb4, 0xe6, 0x11, 0xbb, 0x48, 0xe8, 0x6a, 0xcb, 0xe3, 0xfd,
+	0xab, 0x01, 0xe6, 0x63, 0x3f, 0x63, 0xb1, 0x97, 0x92, 0xf0, 0xdf, 0xd4, 0xfe, 0x3e, 0xa0, 0x4d,
+	0x8a, 0x7b, 0x1e, 0xc4, 0x84, 0x09, 0x6f, 0x06, 0xb6, 0x36, 0x88, 0x8f, 0x38, 0xfe, 0x4f, 0x49,
+	0xdd, 0x87, 0xe6, 0x22, 0x5f, 0x7e, 0x4b, 0x99, 0xca, 0xe9, 0xad, 0xea, 0x9c, 0x4e, 0x05, 0x47,
+	0xa5, 0xa4, 0x14, 0xd5, 0x19, 0xdd, 0xb9, 0x79, 0x46, 0xe8, 0x2e, 0x34, 0xb3, 0xe5, 0x9a, 0x86,
+	0xc4, 0x6e, 0x0c, 0x8c, 0xa3, 0x3d, 0xac, 0x56, 0xe8, 0x1d, 0xd8, 0xfd, 0x81, 0xa6, 0xb1, 0xcb,
+	0xd6, 0x29, 0xcd, 0xd6, 0x71, 0xb0, 0xb2, 0x9b, 0xc2, 0x7f, 0x97, 0xa3, 0x33, 0x0d, 0xf2, 0x12,
+	0x05, 0x4d, 0x26, 0xd6, 0x12, 0x89, 0x99, 0x1c, 0x91, 0x79, 0x1d, 0x81, 0x55, 0xde, 0x56, 0x69,
+	0xb5, 0xc5, 0x3e, 0xbb, 0x05, 0x49, 0x66, 0xf5, 0x04, 0xba, 0x11, 0xf5, 0x08, 0xf3, 0x5f, 0x52,
+	0x37, 0x4b, 0x48, 0x64, 0x9b, 0x22, 0x93, 0xc1, 0x75, 0x99, 0x4c, 0x13, 0x12, 0xa9, 0x5c, 0x76,
+	0xb4, 0x98, 0x63, 0xdc, 0x7c, 0xb1, 0xd9, 0x8a, 0x06, 0x8c, 0xd8, 0x30, 0xa8, 0x1d, 0x21, 0x5c,
+	0x1c, 0xf1, 0x90, 0x83, 0x57, 0x68, 0xb2, 0x80, 0xce, 0xa0, 0xc6, 0x6b, 0xd4, 0xa8, 0x2c, 0xe2,
+	0x09, 0x74, 0x93, 0x38, 0xf3, 0x4b, 0x6b, 0x3b, 0x37, 0xb3, 0xa6, 0xc5, 0xda, 0x5a, 0xb1, 0x99,
+	0xb4, 0xd6, 0x95, 0xd6, 0x34, 0x5a, 0x58, 0x2b, 0x68, 0xd2, 0xda, 0xae, 0xb4, 0xa6, 0x51, 0x69,
+	0xed, 0x18, 0x4c, 0xdd, 0x4d, 0x32, 0xdb, 0xba, 0xee, 0x6b, 0x2b, 0xda, 0x4f, 0x29, 0x70, 0x7e,
+	0x35, 0xa0, 0x29, 0xed, 0xa2, 0x77, 0xc1, 0x5a, 0xe6, 0x61, 0x1e, 0x6c, 0x86, 0x21, 0xdf, 0xff,
+	0x3b, 0x25, 0x2e, 0xcf, 0xbc, 0x07, 0x77, 0x5f, 0xa7, 0x5e, 0xf9, 0x0e, 0x7a, 0xaf, 0x09, 0xe4,
+	0xf3, 0xed, 0x43, 0x27, 0x4f, 0x12, 0x9a, 0xba, 0x8b, 0x38, 0x8f, 0x56, 0xea, 0x63, 0x00, 0x01,
+	0x9d, 0x72, 0xe4, 0x4a, 0x23, 0xad, 0xdd, 0xac, 0x91, 0x3a, 0xc7, 0x00, 0x65, 0xec, 0xfc, 0x95,
+	0x8e, 0xcf, 0xcf, 0x33, 0x2a, 0x2b, 0xd8, 0xc3, 0x6a, 0xc5, 0xf1, 0x80, 0x46, 0x1e, 0x5b, 0x8b,
+	0xd3, 0xbb, 0x58, 0xad, 0x9c, 0x9f, 0x0c, 0x68, 0xeb, 0x4d, 0xd1, 0x67, 0xd0, 0x08, 0xf8, 0x1c,
+	0xb1, 0x0d, 0x91, 0x66, 0xbf, 0xda, 0x43, 0x31, 0x6a, 0xd4, 0x33, 0x96, 0x9a, 0xea, 0xfe, 0x8a,
+	0x3e, 0x05, 0xf3, 0x26, 0xed, 0xbd, 0x24, 0x3b, 0x3f, 0xd6, 0xa0, 0x39, 0x11, 0x33, 0xf3, 0xff,
+	0xf9, 0xfa, 0x00, 0x1a, 0x1e, 0x9f, 0x72, 0x6a, 0x42, 0xbd, 0x59, 0x2d, 0x16, 0x83, 0x10, 0x4b,
+	0x26, 0xfa, 0x04, 0x5a, 0x4b, 0x39, 0xf8, 0x94, 0xe5, 0x83, 0x6a, 0x91, 0x9a, 0x8e, 0x58, 0xb3,
+	0xb9, 0x30, 0x93, 0xc3, 0x44, 0xf5, 0xec, 0x2d, 0x42, 0x35, 0x71, 0xb0, 0x66, 0x73, 0x61, 0x2e,
+	0xbb, 0xb5, 0x68, 0x45, 0x5b, 0x85, 0xaa, 0xa5, 0x63, 0xcd, 0x46, 0x9f, 0x83, 0xb9, 0xd6, 0x4d,
+	0x5c, 0xb4, 0xa0, 0xad, 0xf1, 0x14, 0xbd, 0x1e, 0x97, 0x0a, 0xde, 0xf6, 0x8b, 0xc4, 0xdd, 0x30,
+	0x13, 0x7d, 0xae, 0x86, 0x3b, 0x05, 0x36, 0xc9, 0x9c, 0x5f, 0x0c, 0xd8, 0x91, 0xcf, 0xe1, 0x11,
+	0x09, 0xfd, 0xe0, 0xa2, 0xf2, 0x07, 0x03, 0x41, 0x7d, 0x4d, 0x83, 0x44, 0xfd, 0x5f, 0x88, 0x6b,
+	0x74, 0x0f, 0xea, 0xdc, 0xa3, 0x88, 0x70, 0x77, 0x5b, 0xc7, 0x90, 0x3b, 0xcf, 0x2e, 0x12, 0x8a,
+	0x05, 0x9b, 0x0f, 0x06, 0xf9, 0xa7, 0x64, 0xd7, 0xaf, 0x1b, 0x0c, 0x52, 0xa7, 0x07, 0x83, 0x54,
+	0x70, 0x17, 0x79, 0xe4, 0x33, 0x11, 0xa1, 0x89, 0xc5, 0xf5, 0x7b, 0x0b, 0x80, 0xf2, 0x0c, 0xd4,
+	0x81, 0xd6, 0x83, 0x67, 0xf3, 0xa7, 0xb3, 0x33, 0x6c, 0xdd, 0x42, 0x26, 0x34, 0xc6, 0x27, 0xf3,
+	0xf1, 0x99, 0x65, 0x70, 0x7c, 0x3a, 0x9f, 0x4c, 0x4e, 0xf0, 0x0b, 0xeb, 0x36, 0x5f, 0xcc, 0x9f,
+	0xce, 0x5e, 0x3c, 0x3f, 0x7b, 0x68, 0xd5, 0x50, 0x17, 0xcc, 0xc7, 0x5f, 0x4e, 0x67, 0xcf, 0xc6,
+	0xf8, 0x64, 0x62, 0xd5, 0xd1, 0x1b, 0x70, 0x47, 0x68, 0xdc, 0x12, 0x6c, 0x9c, 0x3a, 0xaf, 0x2e,
+	0x0f, 0x8d, 0xdf, 0x2e, 0x0f, 0x8d, 0x3f, 0x2f, 0x0f, 0x8d, 0x6f, 0x7a, 0x7e, 0xec, 0x96, 0x86,
+	0x5d, 0x69, 0x78, 0xd1, 0x14, 0x6f, 0xfb, 0x47, 0x7f, 0x07, 0x00, 0x00, 0xff, 0xff, 0x1c, 0xe1,
+	0xcf, 0xb8, 0x1d, 0x0a, 0x00, 0x00,
 }
 
 func (m *LabelPair) Marshal() (dAtA []byte, err error) {
@@ -1328,6 +1338,22 @@ func (m *Histogram) MarshalToSizedBuffer(dAtA []byte) (int, error) {
 		i -= len(m.XXX_unrecognized)
 		copy(dAtA[i:], m.XXX_unrecognized)
 	}
+	if len(m.Exemplars) > 0 {
+		for iNdEx := len(m.Exemplars) - 1; iNdEx >= 0; iNdEx-- {
+			{
+				size, err := m.Exemplars[iNdEx].MarshalToSizedBuffer(dAtA[:i])
+				if err != nil {
+					return 0, err
+				}
+				i -= size
+				i = encodeVarintMetrics(dAtA, i, uint64(size))
+			}
+			i--
+			dAtA[i] = 0x1
+			i--
+			dAtA[i] = 0x82
+		}
+	}
 	if m.CreatedTimestamp != nil {
 		{
 			size, err := m.CreatedTimestamp.MarshalToSizedBuffer(dAtA[:i])
@@ -2006,6 +2032,12 @@ func (m *Histogram) Size() (n int) {
 		l = m.CreatedTimestamp.Size()
 		n += 1 + l + sovMetrics(uint64(l))
 	}
+	if len(m.Exemplars) > 0 {
+		for _, e := range m.Exemplars {
+			l = e.Size()
+			n += 2 + l + sovMetrics(uint64(l))
+		}
+	}
 	if m.XXX_unrecognized != nil {
 		n += len(m.XXX_unrecognized)
 	}
@@ -3291,6 +3323,40 @@ func (m *Histogram) Unmarshal(dAtA []byte) error {
 				return err
 			}
 			iNdEx = postIndex
+		case 16:
+			if wireType != 2 {
+				return fmt.Errorf("proto: wrong wireType = %d for field Exemplars", wireType)
+			}
+			var msglen int
+			for shift := uint(0); ; shift += 7 {
+				if shift >= 64 {
+					return ErrIntOverflowMetrics
+				}
+				if iNdEx >= l {
+					return io.ErrUnexpectedEOF
+				}
+				b := dAtA[iNdEx]
+				iNdEx++
+				msglen |= int(b&0x7F) << shift
+				if b < 0x80 {
+					break
+				}
+			}
+			if msglen < 0 {
+				return ErrInvalidLengthMetrics
+			}
+			postIndex := iNdEx + msglen
+			if postIndex < 0 {
+				return ErrInvalidLengthMetrics
+			}
+			if postIndex > l {
+				return io.ErrUnexpectedEOF
+			}
+			m.Exemplars = append(m.Exemplars, &Exemplar{})
+			if err := m.Exemplars[len(m.Exemplars)-1].Unmarshal(dAtA[iNdEx:postIndex]); err != nil {
+				return err
+			}
+			iNdEx = postIndex
 		default:
 			iNdEx = preIndex
 			skippy, err := skipMetrics(dAtA[iNdEx:])
diff --git a/prompb/io/prometheus/client/metrics.proto b/prompb/io/prometheus/client/metrics.proto
index 06dcc34afbe..fe55638bb78 100644
--- a/prompb/io/prometheus/client/metrics.proto
+++ b/prompb/io/prometheus/client/metrics.proto
@@ -112,6 +112,9 @@ message Histogram {
   // histograms.
   repeated sint64 positive_delta = 13; // Count delta of each bucket compared to previous one (or to zero for 1st bucket).
   repeated double positive_count = 14; // Absolute count of each bucket.
+
+  // Only used for native histograms. These exemplars MUST have a timestamp.
+  repeated Exemplar exemplars = 16;
 }
 
 message Bucket {

From ba7012ec6a7c104beb8866b79f6d07972c9e27c4 Mon Sep 17 00:00:00 2001
From: Arve Knudsen <arve.knudsen@gmail.com>
Date: Wed, 24 Jan 2024 10:47:56 +0100
Subject: [PATCH 110/132] TestHeadLabelValuesWithMatchers: Add test case
 (#13414)

Add test case to TestHeadLabelValuesWithMatchers, while fixing a couple
of typos in other test cases. Also enclosing some implicit sub-tests in a
`t.Run` call to make them explicitly sub-tests.

Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>
---
 tsdb/block_test.go   |  2 +-
 tsdb/head_test.go    | 17 ++++++++++++++++-
 tsdb/querier_test.go | 16 +++++++++-------
 3 files changed, 26 insertions(+), 9 deletions(-)

diff --git a/tsdb/block_test.go b/tsdb/block_test.go
index d48418b5798..ad7eb555753 100644
--- a/tsdb/block_test.go
+++ b/tsdb/block_test.go
@@ -264,7 +264,7 @@ func TestLabelValuesWithMatchers(t *testing.T) {
 			matchers:       []*labels.Matcher{labels.MustNewMatcher(labels.MatchRegexp, "unique", "value[5-7]5")},
 			expectedValues: []string{"value5", "value6", "value7"},
 		}, {
-			name:           "get tens by matching for absence of unique label",
+			name:           "get tens by matching for presence of unique label",
 			labelName:      "tens",
 			matchers:       []*labels.Matcher{labels.MustNewMatcher(labels.MatchNotEqual, "unique", "")},
 			expectedValues: []string{"value0", "value1", "value2", "value3", "value4", "value5", "value6", "value7", "value8", "value9"},
diff --git a/tsdb/head_test.go b/tsdb/head_test.go
index 653c53a7401..e30f16d4600 100644
--- a/tsdb/head_test.go
+++ b/tsdb/head_test.go
@@ -2772,6 +2772,13 @@ func TestHeadLabelValuesWithMatchers(t *testing.T) {
 	}
 	require.NoError(t, app.Commit())
 
+	var uniqueWithout30s []string
+	for i := 0; i < 100; i++ {
+		if i/10 != 3 {
+			uniqueWithout30s = append(uniqueWithout30s, fmt.Sprintf("value%d", i))
+		}
+	}
+	sort.Strings(uniqueWithout30s)
 	testCases := []struct {
 		name           string
 		labelName      string
@@ -2794,10 +2801,18 @@ func TestHeadLabelValuesWithMatchers(t *testing.T) {
 			matchers:       []*labels.Matcher{labels.MustNewMatcher(labels.MatchRegexp, "unique", "value[5-7]5")},
 			expectedValues: []string{"value5", "value6", "value7"},
 		}, {
-			name:           "get tens by matching for absence of unique label",
+			name:           "get tens by matching for presence of unique label",
 			labelName:      "tens",
 			matchers:       []*labels.Matcher{labels.MustNewMatcher(labels.MatchNotEqual, "unique", "")},
 			expectedValues: []string{"value0", "value1", "value2", "value3", "value4", "value5", "value6", "value7", "value8", "value9"},
+		}, {
+			name:      "get unique IDs based on tens not being equal to a certain value, while not empty",
+			labelName: "unique",
+			matchers: []*labels.Matcher{
+				labels.MustNewMatcher(labels.MatchNotEqual, "tens", "value3"),
+				labels.MustNewMatcher(labels.MatchNotEqual, "tens", ""),
+			},
+			expectedValues: uniqueWithout30s,
 		},
 	}
 
diff --git a/tsdb/querier_test.go b/tsdb/querier_test.go
index 1ed59ef1aee..fcedc546210 100644
--- a/tsdb/querier_test.go
+++ b/tsdb/querier_test.go
@@ -3309,13 +3309,15 @@ func TestPostingsForMatcher(t *testing.T) {
 	}
 
 	for _, tc := range cases {
-		ir := &mockMatcherIndex{}
-		_, err := postingsForMatcher(ctx, ir, tc.matcher)
-		if tc.hasError {
-			require.Error(t, err)
-		} else {
-			require.NoError(t, err)
-		}
+		t.Run(tc.matcher.String(), func(t *testing.T) {
+			ir := &mockMatcherIndex{}
+			_, err := postingsForMatcher(ctx, ir, tc.matcher)
+			if tc.hasError {
+				require.Error(t, err)
+			} else {
+				require.NoError(t, err)
+			}
+		})
 	}
 }
 

From 9a9e73b34a7d6a34083f486a66ce4243b89f45c6 Mon Sep 17 00:00:00 2001
From: Augustin Husson <husson.augustin@gmail.com>
Date: Wed, 24 Jan 2024 16:53:32 +0100
Subject: [PATCH 111/132] update all go dependencies (#13438)

Signed-off-by: Augustin Husson <husson.augustin@gmail.com>
---
 discovery/moby/docker.go                     |   6 +-
 documentation/examples/remote_storage/go.mod |  17 +-
 documentation/examples/remote_storage/go.sum | 114 +++++++--
 go.mod                                       | 110 ++++-----
 go.sum                                       | 236 ++++++++++---------
 tracing/tracing.go                           |   2 +-
 6 files changed, 292 insertions(+), 193 deletions(-)

diff --git a/discovery/moby/docker.go b/discovery/moby/docker.go
index 57fa62bb5f2..6a2b2d93025 100644
--- a/discovery/moby/docker.go
+++ b/discovery/moby/docker.go
@@ -22,7 +22,7 @@ import (
 	"strconv"
 	"time"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 	"github.com/docker/docker/api/types/filters"
 	"github.com/docker/docker/client"
 	"github.com/go-kit/log"
@@ -77,7 +77,7 @@ type DockerSDConfig struct {
 }
 
 // NewDiscovererMetrics implements discovery.Config.
-func (*DockerSDConfig) NewDiscovererMetrics(reg prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
+func (*DockerSDConfig) NewDiscovererMetrics(_ prometheus.Registerer, rmi discovery.RefreshMetricsInstantiator) discovery.DiscovererMetrics {
 	return &dockerMetrics{
 		refreshMetrics: rmi,
 	}
@@ -192,7 +192,7 @@ func (d *DockerDiscovery) refresh(ctx context.Context) ([]*targetgroup.Group, er
 		Source: "Docker",
 	}
 
-	containers, err := d.client.ContainerList(ctx, types.ContainerListOptions{Filters: d.filters})
+	containers, err := d.client.ContainerList(ctx, container.ListOptions{Filters: d.filters})
 	if err != nil {
 		return nil, fmt.Errorf("error while listing containers: %w", err)
 	}
diff --git a/documentation/examples/remote_storage/go.mod b/documentation/examples/remote_storage/go.mod
index fa54daacc5f..e7b5bb8be56 100644
--- a/documentation/examples/remote_storage/go.mod
+++ b/documentation/examples/remote_storage/go.mod
@@ -1,6 +1,6 @@
 module github.com/prometheus/prometheus/documentation/examples/remote_storage
 
-go 1.20
+go 1.21
 
 require (
 	github.com/alecthomas/kingpin/v2 v2.4.0
@@ -9,7 +9,7 @@ require (
 	github.com/golang/snappy v0.0.4
 	github.com/influxdata/influxdb v1.11.4
 	github.com/prometheus/client_golang v1.18.0
-	github.com/prometheus/common v0.45.0
+	github.com/prometheus/common v0.46.0
 	github.com/prometheus/prometheus v0.48.1
 	github.com/stretchr/testify v1.8.4
 )
@@ -39,7 +39,6 @@ require (
 	github.com/klauspost/compress v1.17.1 // indirect
 	github.com/kr/text v0.2.0 // indirect
 	github.com/kylelemons/godebug v1.1.0 // indirect
-	github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f // indirect
@@ -58,17 +57,17 @@ require (
 	go.opentelemetry.io/otel/trace v1.19.0 // indirect
 	go.uber.org/atomic v1.11.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/crypto v0.14.0 // indirect
+	golang.org/x/crypto v0.18.0 // indirect
 	golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect
-	golang.org/x/net v0.17.0 // indirect
-	golang.org/x/oauth2 v0.13.0 // indirect
-	golang.org/x/sys v0.15.0 // indirect
-	golang.org/x/text v0.13.0 // indirect
+	golang.org/x/net v0.20.0 // indirect
+	golang.org/x/oauth2 v0.16.0 // indirect
+	golang.org/x/sys v0.16.0 // indirect
+	golang.org/x/text v0.14.0 // indirect
 	golang.org/x/time v0.3.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20231009173412-8bfb1ae86b6c // indirect
 	google.golang.org/grpc v1.58.3 // indirect
-	google.golang.org/protobuf v1.31.0 // indirect
+	google.golang.org/protobuf v1.32.0 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
diff --git a/documentation/examples/remote_storage/go.sum b/documentation/examples/remote_storage/go.sum
index 2e3af173bfb..9b8208baa21 100644
--- a/documentation/examples/remote_storage/go.sum
+++ b/documentation/examples/remote_storage/go.sum
@@ -5,11 +5,14 @@ github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0/go.mod h1:1fXstnBMas5kzG
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0 h1:sXr+ck84g/ZlZUOZiNELInmMgOsuGwdjjVkEIde0OtY=
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0/go.mod h1:okt5dMMTOFjX/aovMlrjvvXoPMBVSPzk9185BT0+eZM=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1 h1:UPeCRD+XY7QlaGQte2EVI2iOcWvUYA2XY8w5T/8v0NQ=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1/go.mod h1:oGV6NlB0cvi1ZbYRR2UN44QHxWFyGk+iylgD0qaMXjA=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork v1.1.0 h1:QM6sE5k2ZT/vI5BEe0r7mqjsUSnhVBFbOsVkEuaEfiA=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1 h1:bWh0Z2rOEDfB/ywv/l0iHN1JgyazE6kW/aIA89+CEK0=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1/go.mod h1:Bzf34hhAE9NSxailk8xVeLEZbUjOXcC+GnU1mMKdhLw=
 github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1 h1:WpB/QDNLpMw72xHJc34BNNykqSOeEJDAWkhf0u12/Jk=
 github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1/go.mod h1:wP83P5OoQ5p6ip3ScPr0BAq0BvuPAvacpEuSzyouqAI=
 github.com/Microsoft/go-winio v0.6.1 h1:9/kr64B9VUZrLm5YYwbGtUJnMgqWVOdUAXu6Migciow=
+github.com/Microsoft/go-winio v0.6.1/go.mod h1:LRdKpFKfdobln8UmuiYcKPot9D2v6svN5+sAH+4kjUM=
 github.com/alecthomas/kingpin/v2 v2.4.0 h1:f48lwail6p8zpO1bC4TxtqACaGqHYA22qkHjHpqDjYY=
 github.com/alecthomas/kingpin/v2 v2.4.0/go.mod h1:0gyi0zQnjuFk8xrkNKamJoyUo382HRL7ATRpFZCw6tE=
 github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
@@ -20,6 +23,7 @@ github.com/alecthomas/units v0.0.0-20190924025748-f65c72e2690d/go.mod h1:rBZYJk5
 github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137 h1:s6gZFSlWYmbqAuRjVTiNNhvNRfY2Wxp9nhfyel4rklc=
 github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137/go.mod h1:OMCwj8VM1Kc9e19TLln2VL61YJF0x1XFtfdL4JdbSyE=
 github.com/armon/go-metrics v0.4.1 h1:hR91U9KYmb6bLBYLQjyM+3j+rcd/UhE+G78SFnF8gJA=
+github.com/armon/go-metrics v0.4.1/go.mod h1:E6amYzXo6aW1tqzoZGT755KkbgrJsSdpwZ+3JqfkOG4=
 github.com/aws/aws-sdk-go v1.38.35/go.mod h1:hcU610XS61/+aQV88ixoOzUoG7v3b31pl2zKMmprdro=
 github.com/aws/aws-sdk-go v1.45.25 h1:c4fLlh5sLdK2DCRTY1z0hyuJZU4ygxX8m1FswL6/nF4=
 github.com/aws/aws-sdk-go v1.45.25/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
@@ -31,6 +35,7 @@ github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XL
 github.com/cespare/xxhash/v2 v2.2.0 h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj44=
 github.com/cespare/xxhash/v2 v2.2.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4 h1:/inchEIKaYC1Akx+H+gqO04wryn5h75LSazbRlnya1k=
+github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
@@ -39,19 +44,31 @@ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8Yc
 github.com/dennwc/varint v1.0.0 h1:kGNFFSSw8ToIy3obO/kKr8U9GZYUAxQEVuix4zfDWzE=
 github.com/dennwc/varint v1.0.0/go.mod h1:hnItb35rvZvJrbTALZtY/iQfDs48JKRG1RPpgziApxA=
 github.com/digitalocean/godo v1.104.1 h1:SZNxjAsskM/su0YW9P8Wx3gU0W1Z13b6tZlYNpl5BnA=
+github.com/digitalocean/godo v1.104.1/go.mod h1:VAI/L5YDzMuPRU01lEEUSQ/sp5Z//1HnnFv/RBTEdbg=
 github.com/dnaeon/go-vcr v1.2.0 h1:zHCHvJYTMh1N7xnV7zf1m1GPBF9Ad0Jk/whtQ1663qI=
+github.com/dnaeon/go-vcr v1.2.0/go.mod h1:R4UdLID7HZT3taECzJs4YgbbH6PIGXB6W/sc5OLb6RQ=
 github.com/docker/distribution v2.8.2+incompatible h1:T3de5rq0dB1j30rp0sA2rER+m322EBzniBPB6ZIzuh8=
+github.com/docker/distribution v2.8.2+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
 github.com/docker/docker v24.0.6+incompatible h1:hceabKCtUgDqPu+qm0NgsaXf28Ljf4/pWFL7xjWWDgE=
+github.com/docker/docker v24.0.6+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=
+github.com/docker/go-connections v0.4.0/go.mod h1:Gbd7IOopHjR8Iph03tsViu4nIes5XhDvyHbTtUxmeec=
 github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4=
+github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
 github.com/edsrzf/mmap-go v1.1.0 h1:6EUwBLQ/Mcr1EYLE4Tn1VdW1A4ckqCQWZBw8Hr0kjpQ=
+github.com/edsrzf/mmap-go v1.1.0/go.mod h1:19H/e8pUPLicwkyNgOykDXkJ9F0MHE+Z52B8EIth78Q=
 github.com/emicklei/go-restful/v3 v3.10.2 h1:hIovbnmBTLjHXkqEBUz3HGpXZdM7ZrE9fJIZIqlJLqE=
+github.com/emicklei/go-restful/v3 v3.10.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
 github.com/envoyproxy/go-control-plane v0.11.1 h1:wSUXTlLfiAQRWs2F+p+EKOY9rUyis1MyGqJ2DIk5HpM=
+github.com/envoyproxy/go-control-plane v0.11.1/go.mod h1:uhMcXKCQMEJHiAb0w+YGefQLaTEw+YhGluxZkrTmD0g=
 github.com/envoyproxy/protoc-gen-validate v1.0.2 h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=
+github.com/envoyproxy/protoc-gen-validate v1.0.2/go.mod h1:GpiZQP3dDbg4JouG/NNS7QWXpgx6x8QiMKdmN72jogE=
 github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=
+github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw=
 github.com/felixge/httpsnoop v1.0.3 h1:s/nj+GCswXYzN5v2DpNMuMQYe+0DDwt5WVCU6CWBdXk=
 github.com/felixge/httpsnoop v1.0.3/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
 github.com/fsnotify/fsnotify v1.6.0 h1:n+5WquG0fcWoWp6xPWfHdbskMCQaFnG6PfBrh1Ky4HY=
+github.com/fsnotify/fsnotify v1.6.0/go.mod h1:sl3t1tCWJFWoRz9R8WJCbQihKKwmorjAbSClcnxKAGw=
 github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
 github.com/go-kit/kit v0.9.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
 github.com/go-kit/log v0.1.0/go.mod h1:zbhenjAZHb184qTLMA9ZjW7ThYL0H2mk7Q6pNt4vbaY=
@@ -68,11 +85,16 @@ github.com/go-logr/logr v1.2.4/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbV
 github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
 github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
 github.com/go-openapi/jsonpointer v0.20.0 h1:ESKJdU9ASRfaPNOPRx12IUyA1vn3R9GiE3KYD14BXdQ=
+github.com/go-openapi/jsonpointer v0.20.0/go.mod h1:6PGzBjjIIumbLYysB73Klnms1mwnU4G3YHOECG3CedA=
 github.com/go-openapi/jsonreference v0.20.2 h1:3sVjiK66+uXK/6oQ8xgcRKcFgQ5KXa2KvnJRumpMGbE=
+github.com/go-openapi/jsonreference v0.20.2/go.mod h1:Bl1zwGIM8/wsvqjsOQLJ/SH+En5Ap4rVB5KVcIDZG2k=
 github.com/go-openapi/swag v0.22.4 h1:QLMzNJnMGPRNDCbySlcj1x01tzU8/9LTTL9hZZZogBU=
+github.com/go-openapi/swag v0.22.4/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
 github.com/go-resty/resty/v2 v2.7.0 h1:me+K9p3uhSmXtrBZ4k9jcEAfJmuC8IivWHwaLZwPrFY=
+github.com/go-resty/resty/v2 v2.7.0/go.mod h1:9PWDzw47qPphMRFfhsyk0NnSgvluHcljSMVIq3w7q0I=
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
 github.com/go-zookeeper/zk v1.0.3 h1:7M2kwOsc//9VeeFiPtf+uSJlVpU66x9Ba5+8XK7/TDg=
+github.com/go-zookeeper/zk v1.0.3/go.mod h1:nOB03cncLtlp4t+UAkGSV+9beXP/akpekBwL+UX1Qcw=
 github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
@@ -94,43 +116,65 @@ github.com/golang/protobuf v1.5.3/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiu
 github.com/golang/snappy v0.0.4 h1:yAGX7huGHXlcLOEtBnF4w7FQwA26wojNCwOYAEhLjQM=
 github.com/golang/snappy v0.0.4/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
 github.com/google/gnostic-models v0.6.8 h1:yo/ABAfM5IMRsS1VnXjTBvUb61tFIHozhlYvRgGre9I=
+github.com/google/gnostic-models v0.6.8/go.mod h1:5n7qKqH0f5wFt+aWF8CW6pZLLNOfYuF5OpfBSENuI8U=
 github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.4/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
+github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/google/go-querystring v1.1.0 h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8=
+github.com/google/go-querystring v1.1.0/go.mod h1:Kcdr2DB4koayq7X8pmAG4sNG59So17icRSOU623lUBU=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
+github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/uuid v1.3.1 h1:KjJaJ9iWZ3jOFZIf1Lqf4laDRCasjl0BCmnEGxkdLb4=
 github.com/google/uuid v1.3.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/gophercloud/gophercloud v1.7.0 h1:fyJGKh0LBvIZKLvBWvQdIgkaV5yTM3Jh9EYUh+UNCAs=
+github.com/gophercloud/gophercloud v1.7.0/go.mod h1:aAVqcocTSXh2vYFZ1JTvx4EQmfgzxRcNupUfxZbBNDM=
 github.com/gorilla/websocket v1.5.0 h1:PPwGk2jz7EePpoHN/+ClbZu8SPxiqlu12wZP/3sWmnc=
+github.com/gorilla/websocket v1.5.0/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
 github.com/grafana/regexp v0.0.0-20221122212121-6b5c0a4cb7fd h1:PpuIBO5P3e9hpqBD0O/HjhShYuM6XE0i/lbE6J94kww=
 github.com/grafana/regexp v0.0.0-20221122212121-6b5c0a4cb7fd/go.mod h1:M5qHK+eWfAv8VR/265dIuEpL3fNfeC21tXXp9itM24A=
 github.com/hashicorp/consul/api v1.25.1 h1:CqrdhYzc8XZuPnhIYZWH45toM0LB9ZeYr/gvpLVI3PE=
+github.com/hashicorp/consul/api v1.25.1/go.mod h1:iiLVwR/htV7mas/sy0O+XSuEnrdBUUydemjxcUrAt4g=
 github.com/hashicorp/cronexpr v1.1.2 h1:wG/ZYIKT+RT3QkOdgYc+xsKWVRgnxJ1OJtjjy84fJ9A=
+github.com/hashicorp/cronexpr v1.1.2/go.mod h1:P4wA0KBl9C5q2hABiMO7cp6jcIg96CDh1Efb3g1PWA4=
 github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
+github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
+github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=
 github.com/hashicorp/go-hclog v1.5.0 h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=
+github.com/hashicorp/go-hclog v1.5.0/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M=
 github.com/hashicorp/go-immutable-radix v1.3.1 h1:DKHmCUm2hRBK510BaiZlwvpD40f8bJFeZnpfm2KLowc=
+github.com/hashicorp/go-immutable-radix v1.3.1/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
 github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
+github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
 github.com/hashicorp/go-retryablehttp v0.7.4 h1:ZQgVdpTdAL7WpMIwLzCfbalOcSUdkDZnpUv3/+BxzFA=
+github.com/hashicorp/go-retryablehttp v0.7.4/go.mod h1:Jy/gPYAdjqffZ/yFGCFV2doI5wjtH1ewM9u8iYVjtX8=
 github.com/hashicorp/go-rootcerts v1.0.2 h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc=
+github.com/hashicorp/go-rootcerts v1.0.2/go.mod h1:pqUvnprVnM5bf7AOirdbb01K4ccR319Vf4pU3K5EGc8=
 github.com/hashicorp/golang-lru v0.6.0 h1:uL2shRDx7RTrOrTCUZEGP/wJUFiUI8QT6E7z5o8jga4=
+github.com/hashicorp/golang-lru v0.6.0/go.mod h1:iADmTwqILo4mZ8BN3D2Q6+9jd8WM5uGBxy+E8yxSoD4=
 github.com/hashicorp/nomad/api v0.0.0-20230721134942-515895c7690c h1:Nc3Mt2BAnq0/VoLEntF/nipX+K1S7pG+RgwiitSv6v0=
+github.com/hashicorp/nomad/api v0.0.0-20230721134942-515895c7690c/go.mod h1:O23qLAZuCx4htdY9zBaO4cJPXgleSFEdq6D/sezGgYE=
 github.com/hashicorp/serf v0.10.1 h1:Z1H2J60yRKvfDYAOZLd2MU0ND4AH/WDz7xYHDWQsIPY=
+github.com/hashicorp/serf v0.10.1/go.mod h1:yL2t6BqATOLGc5HF7qbFkTfXoPIY0WZdWHfEvMqbG+4=
 github.com/hetznercloud/hcloud-go/v2 v2.4.0 h1:MqlAE+w125PLvJRCpAJmEwrIxoVdUdOyuFUhE/Ukbok=
+github.com/hetznercloud/hcloud-go/v2 v2.4.0/go.mod h1:l7fA5xsncFBzQTyw29/dw5Yr88yEGKKdc6BHf24ONS0=
 github.com/imdario/mergo v0.3.16 h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4=
+github.com/imdario/mergo v0.3.16/go.mod h1:WBLT9ZmE3lPoWsEzCh9LPo3TiwVN+ZKEjmz+hD27ysY=
 github.com/influxdata/influxdb v1.11.4 h1:H3pVW+/tWQ4lkHhZxVQ13Ov1hmhHYaAzz8L5aq3ZNtw=
 github.com/influxdata/influxdb v1.11.4/go.mod h1:VO6X2zlamfmEf+Esc9dR+7UQhdE/krspWNEZPwxCrp0=
 github.com/ionos-cloud/sdk-go/v6 v6.1.9 h1:Iq3VIXzeEbc8EbButuACgfLMiY5TPVWUPNrF+Vsddo4=
+github.com/ionos-cloud/sdk-go/v6 v6.1.9/go.mod h1:EzEgRIDxBELvfoa/uBN0kOQaqovLjUWEB7iW4/Q+t4k=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
 github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo=
 github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8=
 github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U=
 github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
+github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
 github.com/jpillora/backoff v1.0.0 h1:uvFg412JmmHBHw7iwprIxkPMI+sGQ4kzOWsMeHnm2EA=
 github.com/jpillora/backoff v1.0.0/go.mod h1:J/6gKK9jxlEcS3zixgDgUAsiuZ7yrSoa/FX5e0EB2j4=
 github.com/json-iterator/go v1.1.6/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
@@ -145,11 +189,13 @@ github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+o
 github.com/klauspost/compress v1.17.1 h1:NE3C767s2ak2bweCZo3+rdP4U/HoyVXLv/X9f2gPS5g=
 github.com/klauspost/compress v1.17.1/go.mod h1:ntbaceVETuRiXiv4DpjP66DpAtAGkEQskQzEyD//IeE=
 github.com/kolo/xmlrpc v0.0.0-20220921171641-a4b6fa1dd06b h1:udzkj9S/zlT5X367kqJis0QP7YMxobob6zhzq6Yre00=
+github.com/kolo/xmlrpc v0.0.0-20220921171641-a4b6fa1dd06b/go.mod h1:pcaDhQK0/NJZEvtCO0qQPPropqV0sJOJ6YW7X+9kRwM=
 github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/konsorten/go-windows-terminal-sequences v1.0.3/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515/go.mod h1:+0opPa2QZZtGFBFZlji/RkVcI2GknAs/DXo4wKdlNEc=
 github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
@@ -157,15 +203,20 @@ github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
 github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
 github.com/linode/linodego v1.23.0 h1:s0ReCZtuN9Z1IoUN9w1RLeYO1dMZUGPwOQ/IBFsBHtU=
+github.com/linode/linodego v1.23.0/go.mod h1:0U7wj/UQOqBNbKv1FYTXiBUXueR8DY4HvIotwE0ENgg=
 github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0=
+github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
 github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
+github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
 github.com/mattn/go-isatty v0.0.19 h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=
+github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
-github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 h1:jWpvCLoY8Z/e3VKvlsiIGKtc+UG6U5vzxaoagmhXfyg=
-github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0/go.mod h1:QUyp042oQthUoa9bqDv0ER0wrtXnBruoNd7aNjkbP+k=
 github.com/miekg/dns v1.1.56 h1:5imZaSeoRNvpM9SzWNhEcP9QliKiz20/dA2QabIGVnE=
+github.com/miekg/dns v1.1.56/go.mod h1:cRm6Oo2C8TY9ZS/TqsSrseAcncm74lfK5G+ikN2SWWY=
 github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
+github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY=
+github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
 github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
@@ -174,13 +225,18 @@ github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3Rllmb
 github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
 github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
+github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
 github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f h1:KUppIJq7/+SVif2QVs3tOP0zanoHgBEVAwHxUSIzRqU=
 github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/oklog/ulid v1.3.1 h1:EGfNDEx6MqHz8B3uNV6QAib1UR2Lm97sHi3ocA6ESJ4=
+github.com/oklog/ulid v1.3.1/go.mod h1:CirwcVhetQ6Lv90oh/F+FBtV6XMibvdAFo93nm5qn4U=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
+github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
 github.com/opencontainers/image-spec v1.0.2 h1:9yCKha/T5XdGtO0q9Q9a6T5NUCsTn/DrBg0D7ufOcFM=
+github.com/opencontainers/image-spec v1.0.2/go.mod h1:BtxoFyWECRxE4U/7sNtV5W15zMzWCbyJoFRP3s7yZA0=
 github.com/ovh/go-ovh v1.4.3 h1:Gs3V823zwTFpzgGLZNI6ILS4rmxZgJwJCz54Er9LwD0=
+github.com/ovh/go-ovh v1.4.3/go.mod h1:AkPXVtgwB6xlKblMjRKJJmjRp+ogrE7fz2lVgcQY8SY=
 github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 h1:KoWmjvw+nsYOo29YJK9vDA65RGE3NrOnUtO7a+RF9HU=
 github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8/go.mod h1:HKlIX3XHQyzLZPlr7++PzdhaXEj94dEiJgZDTsxEqUI=
 github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
@@ -205,8 +261,8 @@ github.com/prometheus/common v0.4.1/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y8
 github.com/prometheus/common v0.10.0/go.mod h1:Tlit/dnDKsSWFlCLTWaA1cyBgKHSMdTB80sz/V91rCo=
 github.com/prometheus/common v0.26.0/go.mod h1:M7rCNAaPfAosfx8veZJCuw84e35h3Cfd9VFqTh1DIvc=
 github.com/prometheus/common v0.29.0/go.mod h1:vu+V0TpY+O6vW9J44gczi3Ap/oXXR10b+M/gUGO4Hls=
-github.com/prometheus/common v0.45.0 h1:2BGz0eBc2hdMDLnO/8n0jeB3oPrt2D08CekT0lneoxM=
-github.com/prometheus/common v0.45.0/go.mod h1:YJmSTw9BoKxJplESWWxlbyttQR4uaEcGyv9MZjVOJsY=
+github.com/prometheus/common v0.46.0 h1:doXzt5ybi1HBKpsZOL0sSkaNHJJqkyfEWZGGqqScV0Y=
+github.com/prometheus/common v0.46.0/go.mod h1:Tp0qkxpb9Jsg54QMe+EAmqXkSV7Evdy1BTn+g2pa/hQ=
 github.com/prometheus/common/sigv4 v0.1.0 h1:qoVebwtwwEhS85Czm2dSROY5fTo2PAPEVdDeppTwGX4=
 github.com/prometheus/common/sigv4 v0.1.0/go.mod h1:2Jkxxk9yYvCkE5G1sQT7GuEXm57JrvHu9k5YwTjsNtI=
 github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
@@ -218,14 +274,18 @@ github.com/prometheus/procfs v0.12.0/go.mod h1:pcuDEFsWDnvcgNzo4EEweacyhjeA9Zk3c
 github.com/prometheus/prometheus v0.48.1 h1:CTszphSNTXkuCG6O0IfpKdHcJkvvnAAE1GbELKS+NFk=
 github.com/prometheus/prometheus v0.48.1/go.mod h1:SRw624aMAxTfryAcP8rOjg4S/sHHaetx2lyJJ2nM83g=
 github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
+github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
 github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21 h1:yWfiTPwYxB0l5fGMhl/G+liULugVIHD9AU77iNLrURQ=
+github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21/go.mod h1:fCa7OJZ/9DRTnOKmxvT6pn+LPWUptQAmHF/SBJUGEcg=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/sirupsen/logrus v1.6.0/go.mod h1:7uNnSEd1DgxDLC74fIahvMZmmYsHGZGEOFrfsX/uA88=
 github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
+github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.5.0 h1:1zr/of2m5FGMsad5YfcqgdqdWrIhu+EBEJRhR1U7z/c=
+github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
@@ -233,6 +293,7 @@ github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/
 github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
 github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
 github.com/vultr/govultr/v2 v2.17.2 h1:gej/rwr91Puc/tgh+j33p/BLR16UrIPnSr+AIwYWZQs=
+github.com/vultr/govultr/v2 v2.17.2/go.mod h1:ZFOKGWmgjytfyjeyAdhQlSWwTjh2ig+X49cAp50dzXI=
 github.com/xhit/go-str2duration/v2 v2.1.0 h1:lxklc02Drh6ynqX+DdPyp5pCKLUQpRT8bp8Ydu2Bstc=
 github.com/xhit/go-str2duration/v2 v2.1.0/go.mod h1:ohY8p+0f07DiV6Em5LKB0s2YpLtXVyJfNt1+BlmyAsU=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
@@ -253,6 +314,7 @@ go.opentelemetry.io/otel/trace v1.19.0/go.mod h1:mfaSyvGyEJEI0nyV2I4qhNQnbBOUUmY
 go.uber.org/atomic v1.11.0 h1:ZvwS0R+56ePWxUNi+Atn9dWONBPp/AUETXlHW0DxSjE=
 go.uber.org/atomic v1.11.0/go.mod h1:LUxbIzbOniOlMKjJjyPfpl4v+PKK2cNJn91OQbhoJI0=
 go.uber.org/goleak v1.2.1 h1:NBol2c7O1ZokfZ0LEU9K6Whx/KnwvepVetCUhtKja4A=
+go.uber.org/goleak v1.2.1/go.mod h1:qlT2yGI9QafXHhZZLxlSuNsMw3FFLxBr+tBRlmO1xH4=
 go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
 go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
 golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
@@ -260,14 +322,15 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.14.0 h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=
-golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=
+golang.org/x/crypto v0.18.0 h1:PGVlW0xEltQnzFZ55hkuX5+KLyrMYhHld1YHO4AKcdc=
+golang.org/x/crypto v0.18.0/go.mod h1:R0j02AL6hcrfOiy9T4ZYp/rcWeMxM3L6QYxlOuEG1mg=
 golang.org/x/exp v0.0.0-20231006140011-7918f672742d h1:jtJma62tbqLibJ5sFQz8bKtEM8rJBtfilJ2qTU199MI=
 golang.org/x/exp v0.0.0-20231006140011-7918f672742d/go.mod h1:ldy0pHrwJyGW56pPQzzkH36rKxoZW1tw7ZJpeKx+hdo=
 golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/mod v0.13.0 h1:I/DsJXRlw/8l/0c24sM9yb0T4z9liZTduXvdAWYiysY=
+golang.org/x/mod v0.13.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -284,12 +347,12 @@ golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v
 golang.org/x/net v0.0.0-20210525063256-abc453219eb5/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco=
-golang.org/x/net v0.17.0 h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=
-golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
+golang.org/x/net v0.20.0 h1:aCL9BSgETF1k+blQaYUBx9hJ9LOGP3gAVemcZlf1Kpo=
+golang.org/x/net v0.20.0/go.mod h1:z8BVo6PvndSri0LbOE3hAn0apkU+1YvI6E70E9jsnvY=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20210514164344-f6687ab2804c/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
-golang.org/x/oauth2 v0.13.0 h1:jDDenyj+WgFtmV3zYVoi8aE2BwtXFLWOA67ZfNWftiY=
-golang.org/x/oauth2 v0.13.0/go.mod h1:/JMhi4ZRXAf4HG9LiNmxvk+45+96RUlVThiH8FzNBn0=
+golang.org/x/oauth2 v0.16.0 h1:aDkGMBSYxElaoP81NpoUoz2oo2R2wHdZpGToUxfyQrQ=
+golang.org/x/oauth2 v0.16.0/go.mod h1:hqZ+0LWXsiVoZpeld6jVt06P3adbS2Uu911W1SsJv2o=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -298,6 +361,7 @@ golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.4.0 h1:zxkM55ReGkDlKSM+Fu41A+zmbZuaPVbGMzvvdUPznYQ=
+golang.org/x/sync v0.4.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -317,20 +381,21 @@ golang.org/x/sys v0.0.0-20210616045830-e2b7044e8c71/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.15.0 h1:h48lPFYpsTvQJZF4EKyI4aLHaev3CxivZmv7yZig9pc=
-golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.16.0 h1:xWw16ngr6ZMtmxDyKyIgsE93KNKz5HKmMa3b8ALHidU=
+golang.org/x/sys v0.16.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
-golang.org/x/term v0.13.0 h1:bb+I9cTfFazGW51MZqBVmZy7+JEJMouUHTUSKVQLBek=
+golang.org/x/term v0.16.0 h1:m+B6fahuftsE9qjo0VWp2FW0mB3MTJvR0BaMQrq0pmE=
+golang.org/x/term v0.16.0/go.mod h1:yn7UURbUtPyrVJPGPq404EukNFxcm/foM+bV/bfcDsY=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.13.0 h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=
-golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
+golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
+golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/time v0.3.0 h1:rg5rLMjNzMS1RkNLzCG38eapWhnYLFYXDXj2gOlr8j4=
 golang.org/x/time v0.3.0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
@@ -339,6 +404,7 @@ golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roY
 golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.14.0 h1:jvNa2pY0M4r62jkRQ6RwEZZyPcymeL9XZMLBbV7U2nc=
+golang.org/x/tools v0.14.0/go.mod h1:uYBEerGOWcJyEORxN+Ek8+TT266gXkNlHdJBwexUsBg=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -348,7 +414,9 @@ google.golang.org/appengine v1.6.6/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCID
 google.golang.org/appengine v1.6.7 h1:FZR1q0exgwxzPzp/aF+VccGrSfxfPpkBqjIIEq3ru6c=
 google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
 google.golang.org/genproto v0.0.0-20231002182017-d307bd883b97 h1:SeZZZx0cP0fqUyA+oRzP9k7cSwJlvDFiROO72uwD6i0=
+google.golang.org/genproto v0.0.0-20231002182017-d307bd883b97/go.mod h1:t1VqOqqvce95G3hIDCT5FeO3YUc6Q4Oe24L/+rNMxRk=
 google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a h1:myvhA4is3vrit1a6NZCWBIwN0kNEnX21DJOJX/NvIfI=
+google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a/go.mod h1:SUBoKXbI1Efip18FClrQVGjWcyd0QZd8KkvdP34t7ww=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20231009173412-8bfb1ae86b6c h1:jHkCUWkseRf+W+edG5hMzr/Uh1xkDREY4caybAq4dpY=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20231009173412-8bfb1ae86b6c/go.mod h1:4cYg8o5yUbm77w8ZX00LhMVNl/YVBFJRYWDc0uYWMs0=
 google.golang.org/grpc v1.58.3 h1:BjnpXut1btbtgN/6sp+brB2Kbm2LjNXnidYujAVbSoQ=
@@ -361,14 +429,17 @@ google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzi
 google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
 google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
 google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
-google.golang.org/protobuf v1.31.0 h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=
-google.golang.org/protobuf v1.31.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
+google.golang.org/protobuf v1.32.0 h1:pPC6BG5ex8PDFnkbrGU3EixyhKcQ2aDuBS36lqK/C7I=
+google.golang.org/protobuf v1.32.0/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
 gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
 gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
+gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
 gopkg.in/ini.v1 v1.67.0 h1:Dgnx+6+nfE+IfzjUEISNeydPJh9AXNNsWbGP9KzCsOA=
+gopkg.in/ini.v1 v1.67.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
@@ -381,12 +452,21 @@ gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 k8s.io/api v0.28.2 h1:9mpl5mOb6vXZvqbQmankOfPIGiudghwCoLl1EYfUZbw=
+k8s.io/api v0.28.2/go.mod h1:RVnJBsjU8tcMq7C3iaRSGMeaKt2TWEUXcpIt/90fjEg=
 k8s.io/apimachinery v0.28.2 h1:KCOJLrc6gu+wV1BYgwik4AF4vXOlVJPdiqn0yAWWwXQ=
+k8s.io/apimachinery v0.28.2/go.mod h1:RdzF87y/ngqk9H4z3EL2Rppv5jj95vGS/HaFXrLDApU=
 k8s.io/client-go v0.28.2 h1:DNoYI1vGq0slMBN/SWKMZMw0Rq+0EQW6/AK4v9+3VeY=
+k8s.io/client-go v0.28.2/go.mod h1:sMkApowspLuc7omj1FOSUxSoqjr+d5Q0Yc0LOFnYFJY=
 k8s.io/klog v1.0.0 h1:Pt+yjF5aB1xDSVbau4VsWe+dQNzA0qv1LlXdC2dF6Q8=
 k8s.io/klog/v2 v2.100.1 h1:7WCHKK6K8fNhTqfBhISHQ97KrnJNFZMcQvKp7gP/tmg=
+k8s.io/klog/v2 v2.100.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
 k8s.io/kube-openapi v0.0.0-20230717233707-2695361300d9 h1:LyMgNKD2P8Wn1iAwQU5OhxCKlKJy0sHc+PcDwFB24dQ=
+k8s.io/kube-openapi v0.0.0-20230717233707-2695361300d9/go.mod h1:wZK2AVp1uHCp4VamDVgBP2COHZjqD1T68Rf0CM3YjSM=
 k8s.io/utils v0.0.0-20230711102312-30195339c3c7 h1:ZgnF1KZsYxWIifwSNZFZgNtWE89WI5yiP5WwlfDoIyc=
+k8s.io/utils v0.0.0-20230711102312-30195339c3c7/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
+sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
 sigs.k8s.io/structured-merge-diff/v4 v4.3.0 h1:UZbZAZfX0wV2zr7YZorDz6GXROfDFj6LvqCRm4VUVKk=
+sigs.k8s.io/structured-merge-diff/v4 v4.3.0/go.mod h1:N8hJocpFajUSSeSJ9bOZ77VzejKZaXsTtZo4/u7Io08=
 sigs.k8s.io/yaml v1.3.0 h1:a2VclLzOGrwOHDiV8EfBGhvjHvP46CtW5j6POvhYGGo=
+sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8=
diff --git a/go.mod b/go.mod
index fba6a7739da..5147eaa9ec3 100644
--- a/go.mod
+++ b/go.mod
@@ -1,47 +1,47 @@
 module github.com/prometheus/prometheus
 
-go 1.20
+go 1.21
 
 require (
-	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0
-	github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0
-	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.3.0
+	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.1
+	github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.5.1
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.4.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0
 	github.com/Code-Hex/go-generics-cache v1.3.1
 	github.com/KimMachineGun/automemlimit v0.5.0
 	github.com/alecthomas/kingpin/v2 v2.4.0
 	github.com/alecthomas/units v0.0.0-20231202071711-9a357b53e9c9
-	github.com/aws/aws-sdk-go v1.48.14
+	github.com/aws/aws-sdk-go v1.50.0
 	github.com/bboreham/go-loser v0.0.0-20230920113527-fcc2c21820a3
 	github.com/cespare/xxhash/v2 v2.2.0
 	github.com/dennwc/varint v1.0.0
-	github.com/digitalocean/godo v1.106.0
-	github.com/docker/docker v24.0.7+incompatible
+	github.com/digitalocean/godo v1.108.0
+	github.com/docker/docker v25.0.0+incompatible
 	github.com/edsrzf/mmap-go v1.1.0
-	github.com/envoyproxy/go-control-plane v0.11.1
-	github.com/envoyproxy/protoc-gen-validate v1.0.2
+	github.com/envoyproxy/go-control-plane v0.12.0
+	github.com/envoyproxy/protoc-gen-validate v1.0.4
 	github.com/facette/natsort v0.0.0-20181210072756-2cd4dd1e2dcb
 	github.com/fsnotify/fsnotify v1.7.0
 	github.com/go-kit/log v0.2.1
 	github.com/go-logfmt/logfmt v0.6.0
-	github.com/go-openapi/strfmt v0.21.9
+	github.com/go-openapi/strfmt v0.22.0
 	github.com/go-zookeeper/zk v1.0.3
 	github.com/gogo/protobuf v1.3.2
 	github.com/golang/snappy v0.0.4
-	github.com/google/pprof v0.0.0-20231205033806-a5a03c77bf08
-	github.com/google/uuid v1.4.0
+	github.com/google/pprof v0.0.0-20240117000934-35fc243c5815
+	github.com/google/uuid v1.5.0
 	github.com/gophercloud/gophercloud v1.8.0
 	github.com/grafana/regexp v0.0.0-20221122212121-6b5c0a4cb7fd
 	github.com/grpc-ecosystem/grpc-gateway v1.16.0
-	github.com/hashicorp/consul/api v1.26.1
+	github.com/hashicorp/consul/api v1.27.0
 	github.com/hashicorp/nomad/api v0.0.0-20230721134942-515895c7690c // Not upgrading this for now due to https://github.com/prometheus/prometheus/pull/13255#issuecomment-1845237409
 	github.com/hetznercloud/hcloud-go/v2 v2.6.0
-	github.com/ionos-cloud/sdk-go/v6 v6.1.10
+	github.com/ionos-cloud/sdk-go/v6 v6.1.11
 	github.com/json-iterator/go v1.1.12
 	github.com/klauspost/compress v1.17.4
 	github.com/kolo/xmlrpc v0.0.0-20220921171641-a4b6fa1dd06b
 	github.com/linode/linodego v1.27.1
-	github.com/miekg/dns v1.1.57
+	github.com/miekg/dns v1.1.58
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
 	github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f
 	github.com/nsf/jsondiff v0.0.0-20230430225905-43f6cf3098c1
@@ -51,76 +51,77 @@ require (
 	github.com/prometheus/alertmanager v0.26.0
 	github.com/prometheus/client_golang v1.18.0
 	github.com/prometheus/client_model v0.5.0
-	github.com/prometheus/common v0.45.1-0.20231122191551-832cd6e99f99
+	github.com/prometheus/common v0.46.0
 	github.com/prometheus/common/assets v0.2.0
 	github.com/prometheus/common/sigv4 v0.1.0
-	github.com/prometheus/exporter-toolkit v0.10.0
-	github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21
+	github.com/prometheus/exporter-toolkit v0.11.0
+	github.com/scaleway/scaleway-sdk-go v1.0.0-beta.22
 	github.com/shurcooL/httpfs v0.0.0-20230704072500-f1e31cf0ba5c
 	github.com/stretchr/testify v1.8.4
 	github.com/vultr/govultr/v2 v2.17.2
-	go.opentelemetry.io/collector/featuregate v1.0.0
-	go.opentelemetry.io/collector/pdata v1.0.0
-	go.opentelemetry.io/collector/semconv v0.90.1
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1
-	go.opentelemetry.io/otel v1.21.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.21.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0
-	go.opentelemetry.io/otel/sdk v1.21.0
-	go.opentelemetry.io/otel/trace v1.21.0
+	go.opentelemetry.io/collector/featuregate v1.0.1
+	go.opentelemetry.io/collector/pdata v1.0.1
+	go.opentelemetry.io/collector/semconv v0.92.0
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.47.0
+	go.opentelemetry.io/otel v1.22.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.22.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.22.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.22.0
+	go.opentelemetry.io/otel/sdk v1.22.0
+	go.opentelemetry.io/otel/trace v1.22.0
 	go.uber.org/atomic v1.11.0
 	go.uber.org/automaxprocs v1.5.3
 	go.uber.org/goleak v1.3.0
 	go.uber.org/multierr v1.11.0
-	golang.org/x/exp v0.0.0-20231206192017-f3f8817b8deb
+	golang.org/x/exp v0.0.0-20240119083558-1b970713d09a
 	golang.org/x/net v0.20.0
-	golang.org/x/oauth2 v0.15.0
-	golang.org/x/sync v0.5.0
+	golang.org/x/oauth2 v0.16.0
+	golang.org/x/sync v0.6.0
 	golang.org/x/sys v0.16.0
 	golang.org/x/time v0.5.0
-	golang.org/x/tools v0.16.0
-	google.golang.org/api v0.153.0
-	google.golang.org/genproto/googleapis/api v0.0.0-20231127180814-3a041ad873d4
-	google.golang.org/grpc v1.59.0
-	google.golang.org/protobuf v1.31.0
+	golang.org/x/tools v0.17.0
+	google.golang.org/api v0.157.0
+	google.golang.org/genproto/googleapis/api v0.0.0-20240116215550-a9fa1716bcac
+	google.golang.org/grpc v1.61.0
+	google.golang.org/protobuf v1.32.0
 	gopkg.in/yaml.v2 v2.4.0
 	gopkg.in/yaml.v3 v3.0.1
 	k8s.io/api v0.28.4
 	k8s.io/apimachinery v0.28.4
 	k8s.io/client-go v0.28.4
 	k8s.io/klog v1.0.0
-	k8s.io/klog/v2 v2.110.1
+	k8s.io/klog/v2 v2.120.1
 )
 
 require (
 	cloud.google.com/go/compute v1.23.3 // indirect
 	cloud.google.com/go/compute/metadata v0.2.3 // indirect
-	github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.0 // indirect
-	github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1 // indirect
+	github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.1 // indirect
+	github.com/AzureAD/microsoft-authentication-library-for-go v1.2.1 // indirect
 	github.com/Microsoft/go-winio v0.6.1 // indirect
 	github.com/armon/go-metrics v0.4.1 // indirect
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/cenkalti/backoff/v4 v4.2.1 // indirect
 	github.com/cilium/ebpf v0.11.0 // indirect
-	github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4 // indirect
+	github.com/cncf/xds/go v0.0.0-20231109132714-523115ebc101 // indirect
 	github.com/containerd/cgroups/v3 v3.0.3 // indirect
+	github.com/containerd/log v0.1.0 // indirect
 	github.com/coreos/go-systemd/v22 v22.5.0 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
-	github.com/docker/distribution v2.8.2+incompatible // indirect
+	github.com/distribution/reference v0.5.0 // indirect
 	github.com/docker/go-connections v0.4.0 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
-	github.com/emicklei/go-restful/v3 v3.10.2 // indirect
+	github.com/emicklei/go-restful/v3 v3.11.0 // indirect
 	github.com/evanphx/json-patch v5.6.0+incompatible // indirect
 	github.com/fatih/color v1.15.0 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/ghodss/yaml v1.0.0 // indirect
 	github.com/go-kit/kit v0.12.0 // indirect
-	github.com/go-logr/logr v1.3.0 // indirect
+	github.com/go-logr/logr v1.4.1 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-openapi/analysis v0.21.4 // indirect
-	github.com/go-openapi/errors v0.20.4 // indirect
+	github.com/go-openapi/errors v0.21.0 // indirect
 	github.com/go-openapi/jsonpointer v0.20.0 // indirect
 	github.com/go-openapi/jsonreference v0.20.2 // indirect
 	github.com/go-openapi/loads v0.21.2 // indirect
@@ -129,7 +130,7 @@ require (
 	github.com/go-openapi/validate v0.22.1 // indirect
 	github.com/go-resty/resty/v2 v2.11.0 // indirect
 	github.com/godbus/dbus/v5 v5.0.4 // indirect
-	github.com/golang-jwt/jwt/v5 v5.0.0 // indirect
+	github.com/golang-jwt/jwt/v5 v5.2.0 // indirect
 	github.com/golang/glog v1.1.2 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.3 // indirect
@@ -162,7 +163,6 @@ require (
 	github.com/mailru/easyjson v0.7.7 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.19 // indirect
-	github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 // indirect
 	github.com/mitchellh/go-homedir v1.1.0 // indirect
 	github.com/mitchellh/mapstructure v1.5.0 // indirect
 	github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6 // indirect
@@ -173,32 +173,32 @@ require (
 	github.com/opencontainers/image-spec v1.0.2 // indirect
 	github.com/opencontainers/runtime-spec v1.0.2 // indirect
 	github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58 // indirect
-	github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
+	github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/procfs v0.12.0 // indirect
-	github.com/sirupsen/logrus v1.9.0 // indirect
+	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/stretchr/objx v0.5.0 // indirect
 	github.com/xhit/go-str2duration/v2 v2.1.0 // indirect
 	go.mongodb.org/mongo-driver v1.13.1 // indirect
 	go.opencensus.io v0.24.0 // indirect
-	go.opentelemetry.io/otel/metric v1.21.0 // indirect
+	go.opentelemetry.io/otel/metric v1.22.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.0.0 // indirect
 	golang.org/x/crypto v0.18.0 // indirect
 	golang.org/x/mod v0.14.0 // indirect
 	golang.org/x/term v0.16.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
-	google.golang.org/appengine v1.6.7 // indirect
-	google.golang.org/genproto v0.0.0-20231120223509-83a465c0220f // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f // indirect
+	google.golang.org/appengine v1.6.8 // indirect
+	google.golang.org/genproto v0.0.0-20240102182953-50ed04b92917 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20240116215550-a9fa1716bcac // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/ini.v1 v1.67.0 // indirect
 	gotest.tools/v3 v3.0.3 // indirect
-	k8s.io/kube-openapi v0.0.0-20230717233707-2695361300d9 // indirect
-	k8s.io/utils v0.0.0-20230711102312-30195339c3c7 // indirect
+	k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 // indirect
+	k8s.io/utils v0.0.0-20230726121419-3b25d923346b // indirect
 	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.3.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
 	sigs.k8s.io/yaml v1.3.0 // indirect
 )
 
diff --git a/go.sum b/go.sum
index e5c269f47ab..209f58cbb4b 100644
--- a/go.sum
+++ b/go.sum
@@ -34,22 +34,24 @@ cloud.google.com/go/storage v1.6.0/go.mod h1:N7U0C8pVQ/+NIKOBQyamJIeKQKkZ+mxpohl
 cloud.google.com/go/storage v1.8.0/go.mod h1:Wv1Oy7z6Yz3DshWRJFhqM/UCfaWIRTdp0RXyy7KQOVs=
 cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9ullr3+Kg0=
 dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
-github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0 h1:fb8kj/Dh4CSwgsOzHeZY4Xh68cFVbzXx+ONXGMY//4w=
-github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0/go.mod h1:uReU2sSxZExRPBAg3qKzmAucSi51+SP1OhohieR821Q=
-github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 h1:BMAjVKJM0U/CYF27gA0ZMmXGkOcvfFtD0oHVZ1TIPRI=
-github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0/go.mod h1:1fXstnBMas5kzG+S3q8UoJcmyU6nUeunJcMDHcRYHhs=
-github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.0 h1:d81/ng9rET2YqdVkVwkb6EXeRrLJIwyGnJcAlAWKwhs=
-github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.0/go.mod h1:s4kgfzA0covAXNicZHDMN58jExvcng2mC/DepXiF1EI=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.3.0 h1:qgs/VAMSR+9qFhwTw4OwF2NbVuw+2m83pVZJjqkKQMw=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.3.0/go.mod h1:uYt4CfhkJA9o0FN7jfE5minm/i4nUE4MjGUJkzB6Zs8=
+github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.1 h1:lGlwhPtrX6EVml1hO0ivjkUxsSyl4dsiw9qcA1k/3IQ=
+github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.1/go.mod h1:RKUqNu35KJYcVG/fqTRqmuXJZYNhYkBrnC/hX7yGbTA=
+github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.5.1 h1:sO0/P7g68FrryJzljemN+6GTssUXdANk6aJ7T1ZxnsQ=
+github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.5.1/go.mod h1:h8hyGFDsU5HMivxiS2iYFZsgDbU9OnnJ163x5UGVKYo=
+github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.1 h1:6oNBlSdi1QqM1PNW7FPA6xOGA5UNsXnkaYZz9vdPGhA=
+github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.1/go.mod h1:s4kgfzA0covAXNicZHDMN58jExvcng2mC/DepXiF1EI=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.4.0 h1:QfV5XZt6iNa2aWMAt96CZEbfJ7kgG/qYIpq465Shr5E=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.4.0/go.mod h1:uYt4CfhkJA9o0FN7jfE5minm/i4nUE4MjGUJkzB6Zs8=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v2 v2.0.0 h1:PTFGRSlMKCQelWwxUyYVEUqseBJVemLyqWJjvMyt0do=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v2 v2.0.0/go.mod h1:LRr2FzBTQlONPPa5HREE5+RjSCTXl7BwOvYOaWTqCaI=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0 h1:bXwSugBiSbgtz7rOtbfGf+woewp4f06orW9OP5BjHLA=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0/go.mod h1:Y/HgrePTmGy9HjdSGTqZNa+apUpTVIEVKXJyARP2lrk=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.1.1 h1:7CBQ+Ei8SP2c6ydQTGCCrS35bDxgTMfoP2miAwK++OU=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.1.1/go.mod h1:c/wcGeGx5FUPbM/JltUYHZcKmigwyVLJlDq+4HdtXaw=
 github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 h1:UQHMgLO+TxOElx5B5HZ4hJQsoJ/PvUvKRhJHDQXO8P8=
 github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
-github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1 h1:WpB/QDNLpMw72xHJc34BNNykqSOeEJDAWkhf0u12/Jk=
-github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1/go.mod h1:wP83P5OoQ5p6ip3ScPr0BAq0BvuPAvacpEuSzyouqAI=
+github.com/AzureAD/microsoft-authentication-library-for-go v1.2.1 h1:DzHpqpoJVaCgOUdVHxE8QB52S6NiVdDQvGlny1qvPqA=
+github.com/AzureAD/microsoft-authentication-library-for-go v1.2.1/go.mod h1:wP83P5OoQ5p6ip3ScPr0BAq0BvuPAvacpEuSzyouqAI=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
 github.com/Code-Hex/go-generics-cache v1.3.1 h1:i8rLwyhoyhaerr7JpjtYjJZUcCbWOdiYO3fZXLiEC4g=
@@ -91,8 +93,8 @@ github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2/go.mod h1:W
 github.com/aws/aws-lambda-go v1.13.3/go.mod h1:4UKl9IzQMoD+QF79YdCuzCwp8VbmG4VAQwij/eHl5CU=
 github.com/aws/aws-sdk-go v1.27.0/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
 github.com/aws/aws-sdk-go v1.38.35/go.mod h1:hcU610XS61/+aQV88ixoOzUoG7v3b31pl2zKMmprdro=
-github.com/aws/aws-sdk-go v1.48.14 h1:nVLrp+F84SG+xGiFMfe1TE6ZV6smF+42tuuNgYGV30s=
-github.com/aws/aws-sdk-go v1.48.14/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
+github.com/aws/aws-sdk-go v1.50.0 h1:HBtrLeO+QyDKnc3t1+5DR1RxodOHCGr8ZcrHudpv7jI=
+github.com/aws/aws-sdk-go v1.50.0/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/aws/aws-sdk-go-v2 v0.18.0/go.mod h1:JWVYvqSMppoMJC0x5wdwiImzgXTI9FuZwxzkQq9wy+g=
 github.com/bboreham/go-loser v0.0.0-20230920113527-fcc2c21820a3 h1:6df1vn4bBlDDo4tARvBm7l6KA9iVMnE3NWizDeWSrps=
 github.com/bboreham/go-loser v0.0.0-20230920113527-fcc2c21820a3/go.mod h1:CIWtjkly68+yqLPbvwwR/fjNJA/idrtULjZWh2v1ys0=
@@ -119,12 +121,14 @@ github.com/circonus-labs/circonusllhist v0.1.3/go.mod h1:kMXHVDlOchFAehlya5ePtbp
 github.com/clbanning/x2j v0.0.0-20191024224557-825249438eec/go.mod h1:jMjuTZXRI4dUb/I5gc9Hdhagfvm9+RyrPryS/auMzxE=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
-github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4 h1:/inchEIKaYC1Akx+H+gqO04wryn5h75LSazbRlnya1k=
-github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
+github.com/cncf/xds/go v0.0.0-20231109132714-523115ebc101 h1:7To3pQ+pZo0i3dsWEbinPNFs5gPSBOsJtx3wTT94VBY=
+github.com/cncf/xds/go v0.0.0-20231109132714-523115ebc101/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cockroachdb/datadriven v0.0.0-20190809214429-80d97fb3cbaa/go.mod h1:zn76sxSg3SzpJ0PPJaLDCu+Bu0Lg3sKTORVIj19EIF8=
 github.com/codahale/hdrhistogram v0.0.0-20161010025455-3a0bb77429bd/go.mod h1:sE/e/2PUdi/liOCUjSTXgM1o87ZssimdTWN964YiIeI=
 github.com/containerd/cgroups/v3 v3.0.3 h1:S5ByHZ/h9PMe5IOQoN7E+nMc2UcLEM/V48DGDJ9kip0=
 github.com/containerd/cgroups/v3 v3.0.3/go.mod h1:8HBe7V3aWGLFPd/k03swSIsGjZhHI2WzJmticMgVuz0=
+github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I=
+github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo=
 github.com/coreos/go-semver v0.2.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk=
 github.com/coreos/go-systemd v0.0.0-20180511133405-39ca1b05acc7/go.mod h1:F5haX7vjVVG0kc13fIWeqUViNPyEJxv/OmvnBo0Yme4=
 github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs=
@@ -141,13 +145,14 @@ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8Yc
 github.com/dennwc/varint v1.0.0 h1:kGNFFSSw8ToIy3obO/kKr8U9GZYUAxQEVuix4zfDWzE=
 github.com/dennwc/varint v1.0.0/go.mod h1:hnItb35rvZvJrbTALZtY/iQfDs48JKRG1RPpgziApxA=
 github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ=
-github.com/digitalocean/godo v1.106.0 h1:m5iErwl3xHovGFlawd50n54ntgXHt1BLsvU6BXsVxEU=
-github.com/digitalocean/godo v1.106.0/go.mod h1:R6EmmWI8CT1+fCtjWY9UCB+L5uufuZH13wk3YhxycCs=
+github.com/digitalocean/godo v1.108.0 h1:fWyMENvtxpCpva1UbKzOFnyAS04N1FNuBWWfPeTGquQ=
+github.com/digitalocean/godo v1.108.0/go.mod h1:R6EmmWI8CT1+fCtjWY9UCB+L5uufuZH13wk3YhxycCs=
+github.com/distribution/reference v0.5.0 h1:/FUIFXtfc/x2gpa5/VGfiGLuOIdYa1t65IKK2OFGvA0=
+github.com/distribution/reference v0.5.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
 github.com/dnaeon/go-vcr v1.2.0 h1:zHCHvJYTMh1N7xnV7zf1m1GPBF9Ad0Jk/whtQ1663qI=
-github.com/docker/distribution v2.8.2+incompatible h1:T3de5rq0dB1j30rp0sA2rER+m322EBzniBPB6ZIzuh8=
-github.com/docker/distribution v2.8.2+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
-github.com/docker/docker v24.0.7+incompatible h1:Wo6l37AuwP3JaMnZa226lzVXGA3F9Ig1seQen0cKYlM=
-github.com/docker/docker v24.0.7+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
+github.com/dnaeon/go-vcr v1.2.0/go.mod h1:R4UdLID7HZT3taECzJs4YgbbH6PIGXB6W/sc5OLb6RQ=
+github.com/docker/docker v25.0.0+incompatible h1:g9b6wZTblhMgzOT2tspESstfw6ySZ9kdm94BLDKaZac=
+github.com/docker/docker v25.0.0+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=
 github.com/docker/go-connections v0.4.0/go.mod h1:Gbd7IOopHjR8Iph03tsViu4nIes5XhDvyHbTtUxmeec=
 github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4=
@@ -159,17 +164,17 @@ github.com/eapache/queue v1.1.0/go.mod h1:6eCeP0CKFpHLu8blIFXhExK/dRa7WDZfr6jVFP
 github.com/edsrzf/mmap-go v1.0.0/go.mod h1:YO35OhQPt3KJa3ryjFM5Bs14WD66h8eGKpfaBNrHW5M=
 github.com/edsrzf/mmap-go v1.1.0 h1:6EUwBLQ/Mcr1EYLE4Tn1VdW1A4ckqCQWZBw8Hr0kjpQ=
 github.com/edsrzf/mmap-go v1.1.0/go.mod h1:19H/e8pUPLicwkyNgOykDXkJ9F0MHE+Z52B8EIth78Q=
-github.com/emicklei/go-restful/v3 v3.10.2 h1:hIovbnmBTLjHXkqEBUz3HGpXZdM7ZrE9fJIZIqlJLqE=
-github.com/emicklei/go-restful/v3 v3.10.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
+github.com/emicklei/go-restful/v3 v3.11.0 h1:rAQeMHw1c7zTmncogyy8VvRZwtkmkZ4FxERmMY4rD+g=
+github.com/emicklei/go-restful/v3 v3.11.0/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
 github.com/envoyproxy/go-control-plane v0.6.9/go.mod h1:SBwIajubJHhxtWwsL9s8ss4safvEdbitLhGGK48rN6g=
 github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
 github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
 github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
-github.com/envoyproxy/go-control-plane v0.11.1 h1:wSUXTlLfiAQRWs2F+p+EKOY9rUyis1MyGqJ2DIk5HpM=
-github.com/envoyproxy/go-control-plane v0.11.1/go.mod h1:uhMcXKCQMEJHiAb0w+YGefQLaTEw+YhGluxZkrTmD0g=
+github.com/envoyproxy/go-control-plane v0.12.0 h1:4X+VP1GHd1Mhj6IB5mMeGbLCleqxjletLK6K0rbxyZI=
+github.com/envoyproxy/go-control-plane v0.12.0/go.mod h1:ZBTaoJ23lqITozF0M6G4/IragXCQKCnYbmlmtHvwRG0=
 github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
-github.com/envoyproxy/protoc-gen-validate v1.0.2 h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=
-github.com/envoyproxy/protoc-gen-validate v1.0.2/go.mod h1:GpiZQP3dDbg4JouG/NNS7QWXpgx6x8QiMKdmN72jogE=
+github.com/envoyproxy/protoc-gen-validate v1.0.4 h1:gVPz/FMfvh57HdSJQyvBtF00j8JU4zdyUgIUNhlgg0A=
+github.com/envoyproxy/protoc-gen-validate v1.0.4/go.mod h1:qys6tmnRsYrQqIhm2bvKZH4Blx/1gTIZ2UKVY1M+Yew=
 github.com/evanphx/json-patch v5.6.0+incompatible h1:jBYDEEiFBPxA0v50tFdvOzQQTCvpL6mnFh5mB2/l16U=
 github.com/evanphx/json-patch v5.6.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
 github.com/facette/natsort v0.0.0-20181210072756-2cd4dd1e2dcb h1:IT4JYU7k4ikYg1SCxNI1/Tieq/NFvh6dzLdgi7eu0tM=
@@ -184,6 +189,7 @@ github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSw
 github.com/franela/goblin v0.0.0-20200105215937-c9ffbefa60db/go.mod h1:7dvUGVsVBjqR7JHJk0brhHOZYGmfBYOrK0ZhYMEtBr4=
 github.com/franela/goreq v0.0.0-20171204163338-bcd34c9993f8/go.mod h1:ZhphrRTfi2rbfLwlschooIH4+wKKDR4Pdxhh+TRoA20=
 github.com/frankban/quicktest v1.14.5 h1:dfYrrRyLtiqT9GyKXgdh+k4inNeTvmGbuSgZ3lx3GhA=
+github.com/frankban/quicktest v1.14.5/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
 github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
 github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=
 github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM=
@@ -206,8 +212,8 @@ github.com/go-logfmt/logfmt v0.5.0/go.mod h1:wCYkCAKZfumFQihp8CzCvQ3paCTfi41vtzG
 github.com/go-logfmt/logfmt v0.6.0 h1:wGYYu3uicYdqXVgoYbvnkrPVXkuLM1p1ifugDMEdRi4=
 github.com/go-logfmt/logfmt v0.6.0/go.mod h1:WYhtIu8zTZfxdn5+rREduYbwxfcBr/Vr6KEVveWlfTs=
 github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
-github.com/go-logr/logr v1.3.0 h1:2y3SDp0ZXuc6/cjLSZ+Q3ir+QB9T/iG5yYRXqsagWSY=
-github.com/go-logr/logr v1.3.0/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
+github.com/go-logr/logr v1.4.1 h1:pKouT5E8xu9zeFC39JXRDukb6JFQPXM5p5I91188VAQ=
+github.com/go-logr/logr v1.4.1/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
 github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
 github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
 github.com/go-openapi/analysis v0.21.2/go.mod h1:HZwRk4RRisyG8vx2Oe6aqeSQcoxRp47Xkp3+K6q+LdY=
@@ -216,8 +222,8 @@ github.com/go-openapi/analysis v0.21.4/go.mod h1:4zQ35W4neeZTqh3ol0rv/O8JBbka9Qy
 github.com/go-openapi/errors v0.19.8/go.mod h1:cM//ZKUKyO06HSwqAelJ5NsEMMcpa6VpXe8DOa1Mi1M=
 github.com/go-openapi/errors v0.19.9/go.mod h1:cM//ZKUKyO06HSwqAelJ5NsEMMcpa6VpXe8DOa1Mi1M=
 github.com/go-openapi/errors v0.20.2/go.mod h1:cM//ZKUKyO06HSwqAelJ5NsEMMcpa6VpXe8DOa1Mi1M=
-github.com/go-openapi/errors v0.20.4 h1:unTcVm6PispJsMECE3zWgvG4xTiKda1LIR5rCRWLG6M=
-github.com/go-openapi/errors v0.20.4/go.mod h1:Z3FlZ4I8jEGxjUK+bugx3on2mIAk4txuAOhlsB1FSgk=
+github.com/go-openapi/errors v0.21.0 h1:FhChC/duCnfoLj1gZ0BgaBmzhJC2SL/sJr8a2vAobSY=
+github.com/go-openapi/errors v0.21.0/go.mod h1:jxNTMUxRCKj65yb/okJGEtahVd7uvWnuWfj53bse4ho=
 github.com/go-openapi/jsonpointer v0.19.3/go.mod h1:Pl9vOtqEWErmShwVjC8pYs9cog34VGT37dQOVbmoatg=
 github.com/go-openapi/jsonpointer v0.19.5/go.mod h1:Pl9vOtqEWErmShwVjC8pYs9cog34VGT37dQOVbmoatg=
 github.com/go-openapi/jsonpointer v0.19.6/go.mod h1:osyAmYz/mB/C3I+WsTTSgw1ONzaLJoLCyoi6/zppojs=
@@ -237,8 +243,8 @@ github.com/go-openapi/spec v0.20.9/go.mod h1:2OpW+JddWPrpXSCIX8eOx7lZ5iyuWj3RYR6
 github.com/go-openapi/strfmt v0.21.0/go.mod h1:ZRQ409bWMj+SOgXofQAGTIo2Ebu72Gs+WaRADcS5iNg=
 github.com/go-openapi/strfmt v0.21.1/go.mod h1:I/XVKeLc5+MM5oPNN7P6urMOpuLXEcNrCX/rPGuWb0k=
 github.com/go-openapi/strfmt v0.21.3/go.mod h1:k+RzNO0Da+k3FrrynSNN8F7n/peCmQQqbbXjtDfvmGg=
-github.com/go-openapi/strfmt v0.21.9 h1:LnEGOO9qyEC1v22Bzr323M98G13paIUGPU7yeJtG9Xs=
-github.com/go-openapi/strfmt v0.21.9/go.mod h1:0k3v301mglEaZRJdDDGSlN6Npq4VMVU69DE0LUyf7uA=
+github.com/go-openapi/strfmt v0.22.0 h1:Ew9PnEYc246TwrEspvBdDHS4BVKXy/AOVsfqGDgAcaI=
+github.com/go-openapi/strfmt v0.22.0/go.mod h1:HzJ9kokGIju3/K6ap8jL+OlGAbjpSv27135Yr9OivU4=
 github.com/go-openapi/swag v0.19.5/go.mod h1:POnQmlKehdgb5mhVOsnJFsivZCEZ/vjK9gh66Z9tfKk=
 github.com/go-openapi/swag v0.19.15/go.mod h1:QYRuS/SOXUCsnplDa677K7+DxSOj6IPNl/eQntq43wQ=
 github.com/go-openapi/swag v0.21.1/go.mod h1:QYRuS/SOXUCsnplDa677K7+DxSOj6IPNl/eQntq43wQ=
@@ -252,6 +258,7 @@ github.com/go-resty/resty/v2 v2.11.0/go.mod h1:iiP/OpA0CkcL3IGt1O0+/SIItFUbkkyw5
 github.com/go-sql-driver/mysql v1.4.0/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
 github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 h1:tfuBGBXKqDEevZMzYi5KSi8KkcZtzBcTgAUUtapy0OI=
+github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572/go.mod h1:9Pwr4B2jHnOSGXyyzV8ROjYa2ojvAY6HCGYYfMoC3Ls=
 github.com/go-zookeeper/zk v1.0.3 h1:7M2kwOsc//9VeeFiPtf+uSJlVpU66x9Ba5+8XK7/TDg=
 github.com/go-zookeeper/zk v1.0.3/go.mod h1:nOB03cncLtlp4t+UAkGSV+9beXP/akpekBwL+UX1Qcw=
 github.com/gobuffalo/attrs v0.0.0-20190224210810-a9411de4debd/go.mod h1:4duuawTqi2wkkpB4ePgWMaai6/Kc6WEz83bhFwpHzj0=
@@ -286,8 +293,8 @@ github.com/gogo/protobuf v1.2.0/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7a
 github.com/gogo/protobuf v1.2.1/go.mod h1:hp+jE20tsWTFYpLwKvXlhS1hjn+gTNwPg2I6zVXpSg4=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
-github.com/golang-jwt/jwt/v5 v5.0.0 h1:1n1XNM9hk7O9mnQoNBGolZvzebBQ7p93ULHRc28XJUE=
-github.com/golang-jwt/jwt/v5 v5.0.0/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
+github.com/golang-jwt/jwt/v5 v5.2.0 h1:d/ix8ftRUorsN+5eMIlF4T6J8CAt9rch3My2winC1Jw=
+github.com/golang-jwt/jwt/v5 v5.2.0/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 github.com/golang/glog v1.1.2 h1:DVjP2PbBOzHyzA+dn3WhHIq4NdVu3Q+pvivFICf/7fo=
 github.com/golang/glog v1.1.2/go.mod h1:zR+okUeTbrL6EL3xHUDxZuEtGv04p5shwip1+mL/rLQ=
@@ -319,6 +326,7 @@ github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QD
 github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
 github.com/golang/protobuf v1.4.3/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
 github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
+github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
 github.com/golang/protobuf v1.5.3 h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=
 github.com/golang/protobuf v1.5.3/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
 github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
@@ -328,6 +336,7 @@ github.com/golang/snappy v0.0.4/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEW
 github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
 github.com/google/btree v1.0.0/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
 github.com/google/btree v1.0.1 h1:gK4Kx5IaGY9CD5sPJ36FHiBJ6ZXl0kilRiiCj+jdYp4=
+github.com/google/btree v1.0.1/go.mod h1:xXMiIv4Fb/0kKde4SpL7qlzvu5cMJDRkFDxJfI9uaxA=
 github.com/google/gnostic-models v0.6.8 h1:yo/ABAfM5IMRsS1VnXjTBvUb61tFIHozhlYvRgGre9I=
 github.com/google/gnostic-models v0.6.8/go.mod h1:5n7qKqH0f5wFt+aWF8CW6pZLLNOfYuF5OpfBSENuI8U=
 github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
@@ -358,16 +367,16 @@ github.com/google/pprof v0.0.0-20200212024743-f11f1df84d12/go.mod h1:ZgVRPoUq/hf
 github.com/google/pprof v0.0.0-20200229191704-1ebb73c60ed3/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
 github.com/google/pprof v0.0.0-20200430221834-fc25d7d30c6d/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
 github.com/google/pprof v0.0.0-20200708004538-1a94d8640e99/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM=
-github.com/google/pprof v0.0.0-20231205033806-a5a03c77bf08 h1:PxlBVtIFHR/mtWk2i0gTEdCz+jBnqiuHNSki0epDbVs=
-github.com/google/pprof v0.0.0-20231205033806-a5a03c77bf08/go.mod h1:czg5+yv1E0ZGTi6S6vVK1mke0fV+FaUhNGcd6VRS9Ik=
+github.com/google/pprof v0.0.0-20240117000934-35fc243c5815 h1:WzfWbQz/Ze8v6l++GGbGNFZnUShVpP/0xffCPLL+ax8=
+github.com/google/pprof v0.0.0-20240117000934-35fc243c5815/go.mod h1:czg5+yv1E0ZGTi6S6vVK1mke0fV+FaUhNGcd6VRS9Ik=
 github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
 github.com/google/s2a-go v0.1.7 h1:60BLSyTrOV4/haCDW4zb1guZItoSq8foHCXrAnjBo/o=
 github.com/google/s2a-go v0.1.7/go.mod h1:50CgR4k1jNlWBu4UfS4AcfhVe1r6pdZPygJ3R8F0Qdw=
 github.com/google/uuid v1.0.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/google/uuid v1.4.0 h1:MtMxsa51/r9yyhkyLsVeVt0B+BGQZzpQiTQ4eHZ8bc4=
-github.com/google/uuid v1.4.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/google/uuid v1.5.0 h1:1p67kYwdtXjb0gL0BPiP1Av9wiZPo5A8z2cWkTZ+eyU=
+github.com/google/uuid v1.5.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/googleapis/enterprise-certificate-proxy v0.3.2 h1:Vie5ybvEvT75RniqhfFxPRy3Bf7vr3h0cechB90XaQs=
 github.com/googleapis/enterprise-certificate-proxy v0.3.2/go.mod h1:VLSiSSBs/ksPL8kq3OBOQ6WRI2QnaFynd1DCjZ62+V0=
 github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+vpHVxEJEs9eg=
@@ -393,10 +402,11 @@ github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFb
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 h1:YBftPWNWd4WwGqtY2yeZL2ef8rHAxPBD8KFhJpmcqms=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0/go.mod h1:YN5jB8ie0yfIUg6VvR9Kz84aCaG7AsGZnLjhHbUqwPg=
 github.com/hashicorp/consul/api v1.3.0/go.mod h1:MmDNSzIMUjNpY/mQ398R4bk2FnqQLoPndWW5VkKPlCE=
-github.com/hashicorp/consul/api v1.26.1 h1:5oSXOO5fboPZeW5SN+TdGFP/BILDgBm19OrPZ/pICIM=
-github.com/hashicorp/consul/api v1.26.1/go.mod h1:B4sQTeaSO16NtynqrAdwOlahJ7IUDZM9cj2420xYL8A=
+github.com/hashicorp/consul/api v1.27.0 h1:gmJ6DPKQog1426xsdmgk5iqDyoRiNc+ipBdJOqKQFjc=
+github.com/hashicorp/consul/api v1.27.0/go.mod h1:JkekNRSou9lANFdt+4IKx3Za7XY0JzzpQjEb4Ivo1c8=
 github.com/hashicorp/consul/sdk v0.3.0/go.mod h1:VKf9jXwCTEY1QZP2MOLRhb5i/I/ssyNV1vwHyQBF0x8=
-github.com/hashicorp/consul/sdk v0.15.0 h1:2qK9nDrr4tiJKRoxPGhm6B7xJjLVIQqkjiab2M4aKjU=
+github.com/hashicorp/consul/sdk v0.15.1 h1:kKIGxc7CZtflcF5DLfHeq7rOQmRq3vk7kwISN9bif8Q=
+github.com/hashicorp/consul/sdk v0.15.1/go.mod h1:7pxqqhqoaPqnBnzXD1StKed62LqJeClzVsUEy85Zr0A=
 github.com/hashicorp/cronexpr v1.1.2 h1:wG/ZYIKT+RT3QkOdgYc+xsKWVRgnxJ1OJtjjy84fJ9A=
 github.com/hashicorp/cronexpr v1.1.2/go.mod h1:P4wA0KBl9C5q2hABiMO7cp6jcIg96CDh1Efb3g1PWA4=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
@@ -414,6 +424,7 @@ github.com/hashicorp/go-immutable-radix v1.3.1 h1:DKHmCUm2hRBK510BaiZlwvpD40f8bJ
 github.com/hashicorp/go-immutable-radix v1.3.1/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
 github.com/hashicorp/go-msgpack v0.5.3/go.mod h1:ahLV/dePpqEmjfWmKiqvPkv/twdG7iPBM1vqhUKIvfM=
 github.com/hashicorp/go-msgpack v0.5.5 h1:i9R9JSrqIz0QVLz3sz+i3YJdT7TTSLcfLLzJi9aZTuI=
+github.com/hashicorp/go-msgpack v0.5.5/go.mod h1:ahLV/dePpqEmjfWmKiqvPkv/twdG7iPBM1vqhUKIvfM=
 github.com/hashicorp/go-multierror v1.0.0/go.mod h1:dHtQlpGsu+cZNNAkkCN/P3hoUDHhCYQXV3UM06sGGrk=
 github.com/hashicorp/go-multierror v1.1.0/go.mod h1:spPvp8C1qA32ftKqdAHm4hHTbPw+vmowP0z+KUhOZdA=
 github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
@@ -426,10 +437,12 @@ github.com/hashicorp/go-rootcerts v1.0.2 h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5O
 github.com/hashicorp/go-rootcerts v1.0.2/go.mod h1:pqUvnprVnM5bf7AOirdbb01K4ccR319Vf4pU3K5EGc8=
 github.com/hashicorp/go-sockaddr v1.0.0/go.mod h1:7Xibr9yA9JjQq1JpNB2Vw7kxv8xerXegt+ozgdvDeDU=
 github.com/hashicorp/go-sockaddr v1.0.2 h1:ztczhD1jLxIRjVejw8gFomI1BQZOe2WoVOu0SyteCQc=
+github.com/hashicorp/go-sockaddr v1.0.2/go.mod h1:rB4wwRAUzs07qva3c5SdrY/NEtAUjGlgmH/UkBUC97A=
 github.com/hashicorp/go-syslog v1.0.0/go.mod h1:qPfqrKkXGihmCqbJM2mZgkZGvKG1dFdvsLplgctolz4=
 github.com/hashicorp/go-uuid v1.0.0/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
 github.com/hashicorp/go-uuid v1.0.1/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
 github.com/hashicorp/go-uuid v1.0.3 h1:2gKiV6YVmrJ1i2CKKa9obLvRieoRGviZFL26PcT/Co8=
+github.com/hashicorp/go-uuid v1.0.3/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
 github.com/hashicorp/go-version v1.2.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
 github.com/hashicorp/go-version v1.6.0 h1:feTTfFNnjP967rlCxM/I9g701jU+RN74YKx2mOkIeek=
 github.com/hashicorp/go-version v1.6.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
@@ -458,9 +471,10 @@ github.com/imdario/mergo v0.3.16 h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4=
 github.com/imdario/mergo v0.3.16/go.mod h1:WBLT9ZmE3lPoWsEzCh9LPo3TiwVN+ZKEjmz+hD27ysY=
 github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8=
 github.com/influxdata/influxdb1-client v0.0.0-20191209144304-8bf82d3c094d/go.mod h1:qj24IKcXYK6Iy9ceXlo3Tc+vtHo9lIhSX5JddghvEPo=
-github.com/ionos-cloud/sdk-go/v6 v6.1.10 h1:3815Q2Hw/wc4cJ8wD7bwfsmDsdfIEp80B7BQMj0YP2w=
-github.com/ionos-cloud/sdk-go/v6 v6.1.10/go.mod h1:EzEgRIDxBELvfoa/uBN0kOQaqovLjUWEB7iW4/Q+t4k=
+github.com/ionos-cloud/sdk-go/v6 v6.1.11 h1:J/uRN4UWO3wCyGOeDdMKv8LWRzKu6UIkLEaes38Kzh8=
+github.com/ionos-cloud/sdk-go/v6 v6.1.11/go.mod h1:EzEgRIDxBELvfoa/uBN0kOQaqovLjUWEB7iW4/Q+t4k=
 github.com/jarcoal/httpmock v1.3.0 h1:2RJ8GP0IIaWwcC9Fp2BmVi8Kog3v2Hn7VXM3fTd+nuc=
+github.com/jarcoal/httpmock v1.3.0/go.mod h1:3yb8rc4BI7TCBhFY8ng0gjuLKJNquuDNiPaZjnENuYg=
 github.com/jmespath/go-jmespath v0.0.0-20180206201540-c2b33e8439af/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
 github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo=
@@ -503,6 +517,7 @@ github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515/go.mod h1:+0opPa2QZZtGFB
 github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
@@ -539,14 +554,13 @@ github.com/mattn/go-isatty v0.0.19 h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APP
 github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/mattn/go-runewidth v0.0.2/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU=
 github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
-github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 h1:jWpvCLoY8Z/e3VKvlsiIGKtc+UG6U5vzxaoagmhXfyg=
-github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0/go.mod h1:QUyp042oQthUoa9bqDv0ER0wrtXnBruoNd7aNjkbP+k=
 github.com/maxatome/go-testdeep v1.12.0 h1:Ql7Go8Tg0C1D/uMMX59LAoYK7LffeJQ6X2T04nTH68g=
+github.com/maxatome/go-testdeep v1.12.0/go.mod h1:lPZc/HAcJMP92l7yI6TRz1aZN5URwUBUAfUNvrclaNM=
 github.com/miekg/dns v1.0.14/go.mod h1:W1PPwlIAgtquWBMBEV9nkV9Cazfe8ScdGz/Lj7v3Nrg=
 github.com/miekg/dns v1.1.26/go.mod h1:bPDLeHnStXmXAq1m/Ch/hvfNHr14JKNPMBo3VZKjuso=
 github.com/miekg/dns v1.1.41/go.mod h1:p6aan82bvRIyn+zDIv9xYNUpwa73JcSh9BKwknJysuI=
-github.com/miekg/dns v1.1.57 h1:Jzi7ApEIzwEPLHWRcafCN9LZSBbqQpxjt/wpgvg7wcM=
-github.com/miekg/dns v1.1.57/go.mod h1:uqRjCRUuEAA6qsOiJvDd+CFo/vW+y5WR6SNmHE55hZk=
+github.com/miekg/dns v1.1.58 h1:ca2Hdkz+cDg/7eNF6V56jjzuZ4aCAE+DbVkILdQWG/4=
+github.com/miekg/dns v1.1.58/go.mod h1:Ypv+3b/KadlvW9vJfXOTf300O4UqaHFzFCuHz+rPkBY=
 github.com/mitchellh/cli v1.0.0/go.mod h1:hNIlj7HEI86fIcpObd7a0FcrxTWetlwJDGcceTlRvqc=
 github.com/mitchellh/cli v1.1.0/go.mod h1:xcISNoH86gajksDmfB23e/pu+B+GeFRMYmoHXxx3xhI=
 github.com/mitchellh/go-homedir v1.0.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
@@ -554,6 +568,7 @@ github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG
 github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/go-testing-interface v1.0.0/go.mod h1:kRemZodwjscx+RGhAo8eIhFbs2+BFgRtFPeD/KE+zxI=
 github.com/mitchellh/go-testing-interface v1.14.1 h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=
+github.com/mitchellh/go-testing-interface v1.14.1/go.mod h1:gfgS7OtZj6MA4U1UrDRp04twqAjfvlZyCfX3sDjEym8=
 github.com/mitchellh/gox v0.4.0/go.mod h1:Sd9lOJ0+aimLBi73mGofS1ycjY8lL3uZM3JPS42BGNg=
 github.com/mitchellh/iochan v1.0.0/go.mod h1:JwYml1nuB7xOzsp52dPpHFffvOCDupsG0QubkSMEySY=
 github.com/mitchellh/mapstructure v0.0.0-20160808181253-ca63d7c062ee/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
@@ -600,8 +615,10 @@ github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+W
 github.com/onsi/ginkgo v1.7.0 h1:WSHQ+IS43OoUrWtD1/bbclrwK8TTH5hzp+umCiuxHgs=
 github.com/onsi/ginkgo v1.7.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo/v2 v2.9.4 h1:xR7vG4IXt5RWx6FfIjyAtsoMAtnc3C/rFXBBd2AjZwE=
+github.com/onsi/ginkgo/v2 v2.9.4/go.mod h1:gCQYp2Q+kSoIj7ykSVb9nskRSsR6PUj4AiLywzIhbKM=
 github.com/onsi/gomega v1.4.3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
 github.com/onsi/gomega v1.27.6 h1:ENqfyGeS5AX/rlXDd/ETokDz93u0YufY1Pgxuy/PvWE=
+github.com/onsi/gomega v1.27.6/go.mod h1:PIQNjfQwkP3aQAH7lf7j87O/5FiNr+ZR8+ipb+qQlhg=
 github.com/op/go-logging v0.0.0-20160315200505-970db520ece7/go.mod h1:HzydrMdWErDVzsI23lYNej1Htcns9BCg93Dk0bBINWk=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
@@ -630,8 +647,8 @@ github.com/pelletier/go-toml v1.7.0/go.mod h1:vwGMzjaWMwyfHwgIBhI2YUM4fB6nL6lVAv
 github.com/performancecopilot/speed v3.0.0+incompatible/go.mod h1:/CLtqpZ5gBg1M9iaPbIdPPGyKcA8hKdoy6hAWba7Yac=
 github.com/pierrec/lz4 v1.0.2-0.20190131084431-473cd7ce01a1/go.mod h1:3/3N9NVKO0jef7pBehbT1qWhCMrIgbYNnFAZCqQ5LRc=
 github.com/pierrec/lz4 v2.0.5+incompatible/go.mod h1:pdkljMzZIN41W+lC3N2tnIh5sFi+IEE17M5jbnwPHcY=
-github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 h1:KoWmjvw+nsYOo29YJK9vDA65RGE3NrOnUtO7a+RF9HU=
-github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8/go.mod h1:HKlIX3XHQyzLZPlr7++PzdhaXEj94dEiJgZDTsxEqUI=
+github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ=
+github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c/go.mod h1:7rwL4CYBLnjLxUqIJNnCWiEdr3bn6IUYi15bNlnbCCU=
 github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
@@ -643,6 +660,7 @@ github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH
 github.com/posener/complete v1.1.1/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndrE9hABlRI=
 github.com/posener/complete v1.2.3/go.mod h1:WZIdtGGp+qx0sLrYKtIRAruyNpv6hFCicSgv7Sy7s/s=
 github.com/prashantv/gostub v1.1.0 h1:BTyx3RfQjRHnUWaGF9oQos79AlQ5k8WNktv7VGvVH4g=
+github.com/prashantv/gostub v1.1.0/go.mod h1:A5zLQHz7ieHGG7is6LLXLz7I8+3LZzsrV0P1IAHhP5U=
 github.com/prometheus/alertmanager v0.26.0 h1:uOMJWfIwJguc3NaM3appWNbbrh6G/OjvaHMk22aBBYc=
 github.com/prometheus/alertmanager v0.26.0/go.mod h1:rVcnARltVjavgVaNnmevxK7kOn7IZavyf0KNgHkbEpU=
 github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
@@ -669,14 +687,14 @@ github.com/prometheus/common v0.9.1/go.mod h1:yhUN8i9wzaXS3w1O07YhxHEBxD+W35wd8b
 github.com/prometheus/common v0.10.0/go.mod h1:Tlit/dnDKsSWFlCLTWaA1cyBgKHSMdTB80sz/V91rCo=
 github.com/prometheus/common v0.26.0/go.mod h1:M7rCNAaPfAosfx8veZJCuw84e35h3Cfd9VFqTh1DIvc=
 github.com/prometheus/common v0.29.0/go.mod h1:vu+V0TpY+O6vW9J44gczi3Ap/oXXR10b+M/gUGO4Hls=
-github.com/prometheus/common v0.45.1-0.20231122191551-832cd6e99f99 h1:V5ajRiLiCQGO+ggTr+07gMUcTqlIMMkDBfrJe5zKLmc=
-github.com/prometheus/common v0.45.1-0.20231122191551-832cd6e99f99/go.mod h1:YJmSTw9BoKxJplESWWxlbyttQR4uaEcGyv9MZjVOJsY=
+github.com/prometheus/common v0.46.0 h1:doXzt5ybi1HBKpsZOL0sSkaNHJJqkyfEWZGGqqScV0Y=
+github.com/prometheus/common v0.46.0/go.mod h1:Tp0qkxpb9Jsg54QMe+EAmqXkSV7Evdy1BTn+g2pa/hQ=
 github.com/prometheus/common/assets v0.2.0 h1:0P5OrzoHrYBOSM1OigWL3mY8ZvV2N4zIE/5AahrSrfM=
 github.com/prometheus/common/assets v0.2.0/go.mod h1:D17UVUE12bHbim7HzwUvtqm6gwBEaDQ0F+hIGbFbccI=
 github.com/prometheus/common/sigv4 v0.1.0 h1:qoVebwtwwEhS85Czm2dSROY5fTo2PAPEVdDeppTwGX4=
 github.com/prometheus/common/sigv4 v0.1.0/go.mod h1:2Jkxxk9yYvCkE5G1sQT7GuEXm57JrvHu9k5YwTjsNtI=
-github.com/prometheus/exporter-toolkit v0.10.0 h1:yOAzZTi4M22ZzVxD+fhy1URTuNRj/36uQJJ5S8IPza8=
-github.com/prometheus/exporter-toolkit v0.10.0/go.mod h1:+sVFzuvV5JDyw+Ih6p3zFxZNVnKQa3x5qPmDSiPu4ZY=
+github.com/prometheus/exporter-toolkit v0.11.0 h1:yNTsuZ0aNCNFQ3aFTD2uhPOvr4iD7fdBvKPAEGkNf+g=
+github.com/prometheus/exporter-toolkit v0.11.0/go.mod h1:BVnENhnNecpwoTLiABx7mrPB/OLRIgN74qlQbV+FK1Q=
 github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
 github.com/prometheus/procfs v0.0.0-20190117184657-bf6a532e95b1/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
 github.com/prometheus/procfs v0.0.2/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsTZCD3I8kEA=
@@ -692,14 +710,16 @@ github.com/rogpeppe/go-internal v1.1.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFR
 github.com/rogpeppe/go-internal v1.2.2/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
+github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
 github.com/russross/blackfriday/v2 v2.0.1/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/ryanuber/columnize v0.0.0-20160712163229-9b3edd62028f/go.mod h1:sm1tb6uqfes/u+d4ooFouqFdy9/2g9QGwK3SQygK0Ts=
 github.com/samuel/go-zookeeper v0.0.0-20190923202752-2cc03de413da/go.mod h1:gi+0XIa01GRL2eRQVjQkKGqKF3SF9vZR/HnPullcV2E=
-github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21 h1:yWfiTPwYxB0l5fGMhl/G+liULugVIHD9AU77iNLrURQ=
-github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21/go.mod h1:fCa7OJZ/9DRTnOKmxvT6pn+LPWUptQAmHF/SBJUGEcg=
+github.com/scaleway/scaleway-sdk-go v1.0.0-beta.22 h1:wJrcTdddKOI8TFxs8cemnhKP2EmKy3yfUKHj3ZdfzYo=
+github.com/scaleway/scaleway-sdk-go v1.0.0-beta.22/go.mod h1:fCa7OJZ/9DRTnOKmxvT6pn+LPWUptQAmHF/SBJUGEcg=
 github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 h1:nn5Wsu0esKSJiIVhscUtVbo7ada43DJhG55ua/hjS5I=
 github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529/go.mod h1:DxrIzT+xaE7yg65j358z/aeFdxmN0P9QXhEzd20vsDc=
 github.com/shoenig/test v0.6.6 h1:Oe8TPH9wAbv++YPNDKJWUnI8Q4PPWCx3UbOfH+FxiMU=
+github.com/shoenig/test v0.6.6/go.mod h1:byHiCGXqrVaflBLAMq/srcZIHynQPQgeyvkvXnjqq0k=
 github.com/shurcooL/httpfs v0.0.0-20230704072500-f1e31cf0ba5c h1:aqg5Vm5dwtvL+YgDpBcK1ITf3o96N/K7/wsRXQnUTEs=
 github.com/shurcooL/httpfs v0.0.0-20230704072500-f1e31cf0ba5c/go.mod h1:owqhoLW1qZoYLZzLnBw+QkPP9WZnjlSWihhxAJC1+/M=
 github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
@@ -712,8 +732,8 @@ github.com/sirupsen/logrus v1.4.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPx
 github.com/sirupsen/logrus v1.4.1/go.mod h1:ni0Sbl8bgC9z8RoU9G6nDWqqs/fq4eDPysMBDgk/93Q=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/sirupsen/logrus v1.6.0/go.mod h1:7uNnSEd1DgxDLC74fIahvMZmmYsHGZGEOFrfsX/uA88=
-github.com/sirupsen/logrus v1.9.0 h1:trlNQbNUG3OdDrDil03MCb1H2o9nJ1x4/5LYw7byDE0=
-github.com/sirupsen/logrus v1.9.0/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
+github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
+github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
 github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d/go.mod h1:OnSkiWE9lh6wB0YB77sQom3nweQdgAjqCqsofrRNTgc=
 github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
 github.com/soheilhy/cmux v0.1.4/go.mod h1:IM3LyeVVIOuxMH7sFAkER9+bJ4dT7Ms6E4xg4kGIyLM=
@@ -781,28 +801,28 @@ go.opencensus.io v0.22.3/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
 go.opencensus.io v0.22.4/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw=
 go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0=
 go.opencensus.io v0.24.0/go.mod h1:vNK8G9p7aAivkbmorf4v+7Hgx+Zs0yY+0fOtgBfjQKo=
-go.opentelemetry.io/collector/featuregate v1.0.0 h1:5MGqe2v5zxaoo73BUOvUTunftX5J8RGrbFsC2Ha7N3g=
-go.opentelemetry.io/collector/featuregate v1.0.0/go.mod h1:xGbRuw+GbutRtVVSEy3YR2yuOlEyiUMhN2M9DJljgqY=
-go.opentelemetry.io/collector/pdata v1.0.0 h1:ECP2jnLztewsHmL1opL8BeMtWVc7/oSlKNhfY9jP8ec=
-go.opentelemetry.io/collector/pdata v1.0.0/go.mod h1:TsDFgs4JLNG7t6x9D8kGswXUz4mme+MyNChHx8zSF6k=
-go.opentelemetry.io/collector/semconv v0.90.1 h1:2fkQZbefQBbIcNb9Rk1mRcWlFZgQOk7CpST1e1BK8eg=
-go.opentelemetry.io/collector/semconv v0.90.1/go.mod h1:j/8THcqVxFna1FpvA2zYIsUperEtOaRaqoLYIN4doWw=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1 h1:aFJWCqJMNjENlcleuuOkGAPH82y0yULBScfXcIEdS24=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1/go.mod h1:sEGXWArGqc3tVa+ekntsN65DmVbVeW+7lTKTjZF3/Fo=
-go.opentelemetry.io/otel v1.21.0 h1:hzLeKBZEL7Okw2mGzZ0cc4k/A7Fta0uoPgaJCr8fsFc=
-go.opentelemetry.io/otel v1.21.0/go.mod h1:QZzNPQPm1zLX4gZK4cMi+71eaorMSGT3A4znnUvNNEo=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.21.0 h1:cl5P5/GIfFh4t6xyruOgJP5QiA1pw4fYYdv6nc6CBWw=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.21.0/go.mod h1:zgBdWWAu7oEEMC06MMKc5NLbA/1YDXV1sMpSqEeLQLg=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0 h1:tIqheXEFWAZ7O8A7m+J0aPTmpJN3YQ7qetUAdkkkKpk=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0/go.mod h1:nUeKExfxAQVbiVFn32YXpXZZHZ61Cc3s3Rn1pDBGAb0=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0 h1:digkEZCJWobwBqMwC0cwCq8/wkkRy/OowZg5OArWZrM=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0/go.mod h1:/OpE/y70qVkndM0TrxT4KBoN3RsFZP0QaofcfYrj76I=
-go.opentelemetry.io/otel/metric v1.21.0 h1:tlYWfeo+Bocx5kLEloTjbcDwBuELRrIFxwdQ36PlJu4=
-go.opentelemetry.io/otel/metric v1.21.0/go.mod h1:o1p3CA8nNHW8j5yuQLdc1eeqEaPfzug24uvsyIEJRWM=
-go.opentelemetry.io/otel/sdk v1.21.0 h1:FTt8qirL1EysG6sTQRZ5TokkU8d0ugCj8htOgThZXQ8=
-go.opentelemetry.io/otel/sdk v1.21.0/go.mod h1:Nna6Yv7PWTdgJHVRD9hIYywQBRx7pbox6nwBnZIxl/E=
-go.opentelemetry.io/otel/trace v1.21.0 h1:WD9i5gzvoUPuXIXH24ZNBudiarZDKuekPqi/E8fpfLc=
-go.opentelemetry.io/otel/trace v1.21.0/go.mod h1:LGbsEB0f9LGjN+OZaQQ26sohbOmiMR+BaslueVtS/qQ=
+go.opentelemetry.io/collector/featuregate v1.0.1 h1:ok//hLSXttBbyu4sSV1pTx1nKdr5udSmrWy5sFMIIbM=
+go.opentelemetry.io/collector/featuregate v1.0.1/go.mod h1:QQXjP4etmJQhkQ20j4P/rapWuItYxoFozg/iIwuKnYg=
+go.opentelemetry.io/collector/pdata v1.0.1 h1:dGX2h7maA6zHbl5D3AsMnF1c3Nn+3EUftbVCLzeyNvA=
+go.opentelemetry.io/collector/pdata v1.0.1/go.mod h1:jutXeu0QOXYY8wcZ/hege+YAnSBP3+jpTqYU1+JTI5Y=
+go.opentelemetry.io/collector/semconv v0.92.0 h1:3+OGPPuVu4rtrz8qGbpbiw7eKKULj4iJaSDTV52HM40=
+go.opentelemetry.io/collector/semconv v0.92.0/go.mod h1:gZ0uzkXsN+J5NpiRcdp9xOhNGQDDui8Y62p15sKrlzo=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.47.0 h1:sv9kVfal0MK0wBMCOGr+HeJm9v803BkJxGrk2au7j08=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.47.0/go.mod h1:SK2UL73Zy1quvRPonmOmRDiWk1KBV3LyIeeIxcEApWw=
+go.opentelemetry.io/otel v1.22.0 h1:xS7Ku+7yTFvDfDraDIJVpw7XPyuHlB9MCiqqX5mcJ6Y=
+go.opentelemetry.io/otel v1.22.0/go.mod h1:eoV4iAi3Ea8LkAEI9+GFT44O6T/D0GWAVFyZVCC6pMI=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.22.0 h1:9M3+rhx7kZCIQQhQRYaZCdNu1V73tm4TvXs2ntl98C4=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.22.0/go.mod h1:noq80iT8rrHP1SfybmPiRGc9dc5M8RPmGvtwo7Oo7tc=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.22.0 h1:H2JFgRcGiyHg7H7bwcwaQJYrNFqCqrbTQ8K4p1OvDu8=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.22.0/go.mod h1:WfCWp1bGoYK8MeULtI15MmQVczfR+bFkk0DF3h06QmQ=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.22.0 h1:FyjCyI9jVEfqhUh2MoSkmolPjfh5fp2hnV0b0irxH4Q=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.22.0/go.mod h1:hYwym2nDEeZfG/motx0p7L7J1N1vyzIThemQsb4g2qY=
+go.opentelemetry.io/otel/metric v1.22.0 h1:lypMQnGyJYeuYPhOM/bgjbFM6WE44W1/T45er4d8Hhg=
+go.opentelemetry.io/otel/metric v1.22.0/go.mod h1:evJGjVpZv0mQ5QBRJoBF64yMuOf4xCWdXjK8pzFvliY=
+go.opentelemetry.io/otel/sdk v1.22.0 h1:6coWHw9xw7EfClIC/+O31R8IY3/+EiRFHevmHafB2Gw=
+go.opentelemetry.io/otel/sdk v1.22.0/go.mod h1:iu7luyVGYovrRpe2fmj3CVKouQNdTOkxtLzPvPz1DOc=
+go.opentelemetry.io/otel/trace v1.22.0 h1:Hg6pPujv0XG9QaVbGOBVHunyuLcCC3jN7WEhPx83XD0=
+go.opentelemetry.io/otel/trace v1.22.0/go.mod h1:RbbHXVqKES9QhzZq/fE5UnOSILqRt40a21sPw2He1xo=
 go.opentelemetry.io/proto/otlp v1.0.0 h1:T0TX0tmXU8a3CbNXzEKGeU5mIVOdf0oykP+u2lIVU/I=
 go.opentelemetry.io/proto/otlp v1.0.0/go.mod h1:Sy6pihPLfYHkr3NkUbEhGHFhINUSI/v80hjKIs5JXpM=
 go.uber.org/atomic v1.3.2/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE=
@@ -847,8 +867,8 @@ golang.org/x/exp v0.0.0-20191227195350-da58074b4299/go.mod h1:2RIsYlXP63K8oxa1u0
 golang.org/x/exp v0.0.0-20200119233911-0405dc783f0a/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
 golang.org/x/exp v0.0.0-20200207192155-f17229e696bd/go.mod h1:J/WKrq2StrnmMY6+EHIKF9dgMWnmCNThgcyBT1FY9mM=
 golang.org/x/exp v0.0.0-20200224162631-6cc2880d07d6/go.mod h1:3jZMyOhIsHpP37uCMkUooju7aAi5cS1Q23tOzKc+0MU=
-golang.org/x/exp v0.0.0-20231206192017-f3f8817b8deb h1:c0vyKkb6yr3KR7jEfJaOSv4lG7xPkbN6r52aJz1d8a8=
-golang.org/x/exp v0.0.0-20231206192017-f3f8817b8deb/go.mod h1:iRJReGqOEeBhDZGkGbynYwcHlctCvnjTYIamk7uXpHI=
+golang.org/x/exp v0.0.0-20240119083558-1b970713d09a h1:Q8/wZp0KX97QFTc2ywcOE0YRjZPVIx+MXInMzdvQqcA=
+golang.org/x/exp v0.0.0-20240119083558-1b970713d09a/go.mod h1:idGWGoKP1toJGkd5/ig9ZLuPcZBC3ewk7SzmH0uou08=
 golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js=
 golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0=
 golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
@@ -926,8 +946,8 @@ golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4Iltr
 golang.org/x/oauth2 v0.0.0-20191202225959-858c2ad4c8b6/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20210514164344-f6687ab2804c/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
-golang.org/x/oauth2 v0.15.0 h1:s8pnnxNVzjWyrvYdFUQq5llS1PX2zhPXmccZv99h7uQ=
-golang.org/x/oauth2 v0.15.0/go.mod h1:q48ptWNTY5XWf+JNten23lcvHpLJ0ZSxF5ttTHKVCAM=
+golang.org/x/oauth2 v0.16.0 h1:aDkGMBSYxElaoP81NpoUoz2oo2R2wHdZpGToUxfyQrQ=
+golang.org/x/oauth2 v0.16.0/go.mod h1:hqZ+0LWXsiVoZpeld6jVt06P3adbS2Uu911W1SsJv2o=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -942,8 +962,8 @@ golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.5.0 h1:60k92dhOjHxJkrqnwsfl8KuaHbn/5dl0lUPUklKo3qE=
-golang.org/x/sync v0.5.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.6.0 h1:5BMeUDZ7vkXGfEr1x9B4bRcTH4lpkTkpdh0T/J+qjbQ=
+golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -998,7 +1018,6 @@ golang.org/x/sys v0.0.0-20210420072515-93ed5bcd2bfe/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210603081109-ebe580a85c40/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20210616045830-e2b7044e8c71/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -1008,6 +1027,7 @@ golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -1096,8 +1116,8 @@ golang.org/x/tools v0.0.0-20200825202427-b303f430e36d/go.mod h1:njjCfa9FT2d7l9Bc
 golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
-golang.org/x/tools v0.16.0 h1:GO788SKMRunPIBCXiQyo2AaexLstOrVhuAL5YwsckQM=
-golang.org/x/tools v0.16.0/go.mod h1:kYVVN6I1mBNoB1OX+noeBjbRk4IUEPa7JJ+TJMEooJ0=
+golang.org/x/tools v0.17.0 h1:FvmRgNOcs3kOa+T20R1uhfP9F6HgG2mfxDv1vrx1Htc=
+golang.org/x/tools v0.17.0/go.mod h1:xsh6VxdV005rRVaS6SSAf9oiAqljS7UZUacMZ8Bnsps=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -1117,8 +1137,8 @@ google.golang.org/api v0.20.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/
 google.golang.org/api v0.22.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE=
 google.golang.org/api v0.24.0/go.mod h1:lIXQywCXRcnZPGlsd8NbLnOjtAoL6em04bJ9+z0MncE=
 google.golang.org/api v0.28.0/go.mod h1:lIXQywCXRcnZPGlsd8NbLnOjtAoL6em04bJ9+z0MncE=
-google.golang.org/api v0.153.0 h1:N1AwGhielyKFaUqH07/ZSIQR3uNPcV7NVw0vj+j4iR4=
-google.golang.org/api v0.153.0/go.mod h1:3qNJX5eOmhiWYc67jRA/3GsDw97UFb5ivv7Y2PrriAY=
+google.golang.org/api v0.157.0 h1:ORAeqmbrrozeyw5NjnMxh7peHO0UzV4wWYSwZeCUb20=
+google.golang.org/api v0.157.0/go.mod h1:+z4v4ufbZ1WEpld6yMGHyggs+PmAHiaLNj5ytP3N01g=
 google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.2.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
@@ -1126,8 +1146,8 @@ google.golang.org/appengine v1.5.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7
 google.golang.org/appengine v1.6.1/go.mod h1:i06prIuMbXzDqacNJfV5OdTW448YApPu5ww/cMBSeb0=
 google.golang.org/appengine v1.6.5/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
 google.golang.org/appengine v1.6.6/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
-google.golang.org/appengine v1.6.7 h1:FZR1q0exgwxzPzp/aF+VccGrSfxfPpkBqjIIEq3ru6c=
-google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
+google.golang.org/appengine v1.6.8 h1:IhEN5q69dyKagZPYMSdIjS2HqprW324FRQZJcGqPAsM=
+google.golang.org/appengine v1.6.8/go.mod h1:1jJ3jBArFh5pcgW8gCtRJnepW8FzD1V44FJffLiz/Ds=
 google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
 google.golang.org/genproto v0.0.0-20190307195333-5fe7a883aa19/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
 google.golang.org/genproto v0.0.0-20190418145605-e7d98fc518a7/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE=
@@ -1157,12 +1177,12 @@ google.golang.org/genproto v0.0.0-20200515170657-fc4c6c6a6587/go.mod h1:YsZOwe1m
 google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo=
 google.golang.org/genproto v0.0.0-20200618031413-b414f8b61790/go.mod h1:jDfRM7FcilCzHH/e9qn6dsT145K34l5v+OpcnNgKAAA=
 google.golang.org/genproto v0.0.0-20200825200019-8632dd797987/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
-google.golang.org/genproto v0.0.0-20231120223509-83a465c0220f h1:Vn+VyHU5guc9KjB5KrjI2q0wCOWEOIh0OEsleqakHJg=
-google.golang.org/genproto v0.0.0-20231120223509-83a465c0220f/go.mod h1:nWSwAFPb+qfNJXsoeO3Io7zf4tMSfN8EA8RlDA04GhY=
-google.golang.org/genproto/googleapis/api v0.0.0-20231127180814-3a041ad873d4 h1:ZcOkrmX74HbKFYnpPY8Qsw93fC29TbJXspYKaBkSXDQ=
-google.golang.org/genproto/googleapis/api v0.0.0-20231127180814-3a041ad873d4/go.mod h1:k2dtGpRrbsSyKcNPKKI5sstZkrNCZwpU/ns96JoHbGg=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f h1:ultW7fxlIvee4HYrtnaRPon9HpEgFk5zYpmfMgtKB5I=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f/go.mod h1:L9KNLi232K1/xB6f7AlSX692koaRnKaWSR0stBki0Yc=
+google.golang.org/genproto v0.0.0-20240102182953-50ed04b92917 h1:nz5NESFLZbJGPFxDT/HCn+V1mZ8JGNoY4nUpmW/Y2eg=
+google.golang.org/genproto v0.0.0-20240102182953-50ed04b92917/go.mod h1:pZqR+glSb11aJ+JQcczCvgf47+duRuzNSKqE8YAQnV0=
+google.golang.org/genproto/googleapis/api v0.0.0-20240116215550-a9fa1716bcac h1:OZkkudMUu9LVQMCoRUbI/1p5VCo9BOrlvkqMvWtqa6s=
+google.golang.org/genproto/googleapis/api v0.0.0-20240116215550-a9fa1716bcac/go.mod h1:B5xPO//w8qmBDjGReYLpR6UJPnkldGkCSMoH/2vxJeg=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20240116215550-a9fa1716bcac h1:nUQEQmH/csSvFECKYRv6HWEyypysidKl2I6Qpsglq/0=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20240116215550-a9fa1716bcac/go.mod h1:daQN87bsDqDoe316QbbvX60nMoJQa4r6Ds0ZuoAe5yA=
 google.golang.org/grpc v1.17.0/go.mod h1:6QZJwpn2B+Zp71q/5VxRsJ6NXXVCE5NRUHRo+f3cWCs=
 google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
 google.golang.org/grpc v1.20.0/go.mod h1:chYK+tFQF0nDUGJgXMSgLCQk3phJEuONr2DCgLDdAQM=
@@ -1181,8 +1201,8 @@ google.golang.org/grpc v1.29.1/go.mod h1:itym6AZVZYACWQqET3MqgPpjcuV5QH3BxFS3Iji
 google.golang.org/grpc v1.31.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak=
 google.golang.org/grpc v1.33.1/go.mod h1:fr5YgcSWrqhRRxogOsw7RzIpsmvOZ6IcH4kBYTpR3n0=
 google.golang.org/grpc v1.33.2/go.mod h1:JMHMWHQWaTccqQQlmk3MJZS+GWXOdAesneDmEnv2fbc=
-google.golang.org/grpc v1.59.0 h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=
-google.golang.org/grpc v1.59.0/go.mod h1:aUPDwccQo6OTjy7Hct4AfBPD1GptF4fyUjIkQ9YtF98=
+google.golang.org/grpc v1.61.0 h1:TOvOcuXn30kRao+gfcvsebNEa5iZIiLkisYEkf7R7o0=
+google.golang.org/grpc v1.61.0/go.mod h1:VUbo7IFqmF1QtCAstipjG0GIoq49KvMe9+h1jFLBNJs=
 google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
 google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
 google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
@@ -1195,8 +1215,8 @@ google.golang.org/protobuf v1.24.0/go.mod h1:r/3tXBNzIEhYS9I1OUVjXDlt8tc493IdKGj
 google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c=
 google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
 google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
-google.golang.org/protobuf v1.31.0 h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=
-google.golang.org/protobuf v1.31.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
+google.golang.org/protobuf v1.32.0 h1:pPC6BG5ex8PDFnkbrGU3EixyhKcQ2aDuBS36lqK/C7I=
+google.golang.org/protobuf v1.32.0/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
 gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
@@ -1248,17 +1268,17 @@ k8s.io/apimachinery v0.28.4 h1:zOSJe1mc+GxuMnFzD4Z/U1wst50X28ZNsn5bhgIIao8=
 k8s.io/apimachinery v0.28.4/go.mod h1:wI37ncBvfAoswfq626yPTe6Bz1c22L7uaJ8dho83mgg=
 k8s.io/client-go v0.28.4 h1:Np5ocjlZcTrkyRJ3+T3PkXDpe4UpatQxj85+xjaD2wY=
 k8s.io/client-go v0.28.4/go.mod h1:0VDZFpgoZfelyP5Wqu0/r/TRYcLYuJ2U1KEeoaPa1N4=
-k8s.io/kube-openapi v0.0.0-20230717233707-2695361300d9 h1:LyMgNKD2P8Wn1iAwQU5OhxCKlKJy0sHc+PcDwFB24dQ=
-k8s.io/kube-openapi v0.0.0-20230717233707-2695361300d9/go.mod h1:wZK2AVp1uHCp4VamDVgBP2COHZjqD1T68Rf0CM3YjSM=
-k8s.io/utils v0.0.0-20230711102312-30195339c3c7 h1:ZgnF1KZsYxWIifwSNZFZgNtWE89WI5yiP5WwlfDoIyc=
-k8s.io/utils v0.0.0-20230711102312-30195339c3c7/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
+k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 h1:aVUu9fTY98ivBPKR9Y5w/AuzbMm96cd3YHRTU83I780=
+k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00/go.mod h1:AsvuZPBlUDVuCdzJ87iajxtXuR9oktsTctW/R9wwouA=
+k8s.io/utils v0.0.0-20230726121419-3b25d923346b h1:sgn3ZU783SCgtaSJjpcVVlRqd6GSnlTLKgpAAttJvpI=
+k8s.io/utils v0.0.0-20230726121419-3b25d923346b/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
 rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
 rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=
 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
-sigs.k8s.io/structured-merge-diff/v4 v4.3.0 h1:UZbZAZfX0wV2zr7YZorDz6GXROfDFj6LvqCRm4VUVKk=
-sigs.k8s.io/structured-merge-diff/v4 v4.3.0/go.mod h1:N8hJocpFajUSSeSJ9bOZ77VzejKZaXsTtZo4/u7Io08=
+sigs.k8s.io/structured-merge-diff/v4 v4.4.1 h1:150L+0vs/8DA78h1u02ooW1/fFq/Lwr+sGiqlzvrtq4=
+sigs.k8s.io/structured-merge-diff/v4 v4.4.1/go.mod h1:N8hJocpFajUSSeSJ9bOZ77VzejKZaXsTtZo4/u7Io08=
 sigs.k8s.io/yaml v1.1.0/go.mod h1:UJmg0vDUVViEyp3mgSv9WPwZCDxu4rQW1olrI1uml+o=
 sigs.k8s.io/yaml v1.3.0 h1:a2VclLzOGrwOHDiV8EfBGhvjHvP46CtW5j6POvhYGGo=
 sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8=
diff --git a/tracing/tracing.go b/tracing/tracing.go
index d17540a919c..6a191373703 100644
--- a/tracing/tracing.go
+++ b/tracing/tracing.go
@@ -30,7 +30,7 @@ import (
 	"go.opentelemetry.io/otel/propagation"
 	"go.opentelemetry.io/otel/sdk/resource"
 	tracesdk "go.opentelemetry.io/otel/sdk/trace"
-	semconv "go.opentelemetry.io/otel/semconv/v1.21.0"
+	semconv "go.opentelemetry.io/otel/semconv/v1.24.0"
 	"go.opentelemetry.io/otel/trace"
 	"go.opentelemetry.io/otel/trace/noop"
 	"google.golang.org/grpc/credentials"

From 94ced726e27629d25e5668db7eb51ba2b3aad923 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 25 Jan 2024 10:20:14 +0100
Subject: [PATCH 112/132] build(deps): bump the k8s-io group with 2 updates
 (#13454)

Bumps the k8s-io group with 2 updates: [k8s.io/api](https://github.com/kubernetes/api) and [k8s.io/client-go](https://github.com/kubernetes/client-go).


Updates `k8s.io/api` from 0.28.4 to 0.29.1
- [Commits](https://github.com/kubernetes/api/compare/v0.28.4...v0.29.1)

Updates `k8s.io/client-go` from 0.28.4 to 0.29.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.28.4...v0.29.1)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-io
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-io
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 go.mod |  6 +++---
 go.sum | 20 ++++++++++----------
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/go.mod b/go.mod
index 5147eaa9ec3..c3c7facb5ff 100644
--- a/go.mod
+++ b/go.mod
@@ -86,9 +86,9 @@ require (
 	google.golang.org/protobuf v1.32.0
 	gopkg.in/yaml.v2 v2.4.0
 	gopkg.in/yaml.v3 v3.0.1
-	k8s.io/api v0.28.4
-	k8s.io/apimachinery v0.28.4
-	k8s.io/client-go v0.28.4
+	k8s.io/api v0.29.1
+	k8s.io/apimachinery v0.29.1
+	k8s.io/client-go v0.29.1
 	k8s.io/klog v1.0.0
 	k8s.io/klog/v2 v2.120.1
 )
diff --git a/go.sum b/go.sum
index 209f58cbb4b..f221d99d228 100644
--- a/go.sum
+++ b/go.sum
@@ -614,11 +614,11 @@ github.com/olekukonko/tablewriter v0.0.0-20170122224234-a0225b3f23b5/go.mod h1:v
 github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo v1.7.0 h1:WSHQ+IS43OoUrWtD1/bbclrwK8TTH5hzp+umCiuxHgs=
 github.com/onsi/ginkgo v1.7.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
-github.com/onsi/ginkgo/v2 v2.9.4 h1:xR7vG4IXt5RWx6FfIjyAtsoMAtnc3C/rFXBBd2AjZwE=
-github.com/onsi/ginkgo/v2 v2.9.4/go.mod h1:gCQYp2Q+kSoIj7ykSVb9nskRSsR6PUj4AiLywzIhbKM=
+github.com/onsi/ginkgo/v2 v2.13.0 h1:0jY9lJquiL8fcf3M4LAXN5aMlS/b2BV86HFFPCPMgE4=
+github.com/onsi/ginkgo/v2 v2.13.0/go.mod h1:TE309ZR8s5FsKKpuB1YAQYBzCaAfUgatB/xlT/ETL/o=
 github.com/onsi/gomega v1.4.3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
-github.com/onsi/gomega v1.27.6 h1:ENqfyGeS5AX/rlXDd/ETokDz93u0YufY1Pgxuy/PvWE=
-github.com/onsi/gomega v1.27.6/go.mod h1:PIQNjfQwkP3aQAH7lf7j87O/5FiNr+ZR8+ipb+qQlhg=
+github.com/onsi/gomega v1.29.0 h1:KIA/t2t5UBzoirT4H9tsML45GEbo3ouUnBHsCfD2tVg=
+github.com/onsi/gomega v1.29.0/go.mod h1:9sxs+SwGrKI0+PWe4Fxa9tFQQBG5xSsSbMXOI8PPpoQ=
 github.com/op/go-logging v0.0.0-20160315200505-970db520ece7/go.mod h1:HzydrMdWErDVzsI23lYNej1Htcns9BCg93Dk0bBINWk=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
@@ -1262,12 +1262,12 @@ honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWh
 honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
 honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
-k8s.io/api v0.28.4 h1:8ZBrLjwosLl/NYgv1P7EQLqoO8MGQApnbgH8tu3BMzY=
-k8s.io/api v0.28.4/go.mod h1:axWTGrY88s/5YE+JSt4uUi6NMM+gur1en2REMR7IRj0=
-k8s.io/apimachinery v0.28.4 h1:zOSJe1mc+GxuMnFzD4Z/U1wst50X28ZNsn5bhgIIao8=
-k8s.io/apimachinery v0.28.4/go.mod h1:wI37ncBvfAoswfq626yPTe6Bz1c22L7uaJ8dho83mgg=
-k8s.io/client-go v0.28.4 h1:Np5ocjlZcTrkyRJ3+T3PkXDpe4UpatQxj85+xjaD2wY=
-k8s.io/client-go v0.28.4/go.mod h1:0VDZFpgoZfelyP5Wqu0/r/TRYcLYuJ2U1KEeoaPa1N4=
+k8s.io/api v0.29.1 h1:DAjwWX/9YT7NQD4INu49ROJuZAAAP/Ijki48GUPzxqw=
+k8s.io/api v0.29.1/go.mod h1:7Kl10vBRUXhnQQI8YR/R327zXC8eJ7887/+Ybta+RoQ=
+k8s.io/apimachinery v0.29.1 h1:KY4/E6km/wLBguvCZv8cKTeOwwOBqFNjwJIdMkMbbRc=
+k8s.io/apimachinery v0.29.1/go.mod h1:6HVkd1FwxIagpYrHSwJlQqZI3G9LfYWRPAkUvLnXTKU=
+k8s.io/client-go v0.29.1 h1:19B/+2NGEwnFLzt0uB5kNJnfTsbV8w6TgQRz9l7ti7A=
+k8s.io/client-go v0.29.1/go.mod h1:TDG/psL9hdet0TI9mGyHJSgRkW3H9JZk2dNEUS7bRks=
 k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 h1:aVUu9fTY98ivBPKR9Y5w/AuzbMm96cd3YHRTU83I780=
 k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00/go.mod h1:AsvuZPBlUDVuCdzJ87iajxtXuR9oktsTctW/R9wwouA=
 k8s.io/utils v0.0.0-20230726121419-3b25d923346b h1:sgn3ZU783SCgtaSJjpcVVlRqd6GSnlTLKgpAAttJvpI=

From 7f837694d9c3e9f308f87892a27bdcfd8e1a5bc0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 25 Jan 2024 10:20:35 +0100
Subject: [PATCH 113/132] build(deps): bump the go-opentelemetry-io group with
 1 update (#13453)

Bumps the go-opentelemetry-io group with 1 update: [go.opentelemetry.io/collector/semconv](https://github.com/open-telemetry/opentelemetry-collector).


Updates `go.opentelemetry.io/collector/semconv` from 0.92.0 to 0.93.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-collector/compare/v0.92.0...v0.93.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/collector/semconv
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-opentelemetry-io
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index c3c7facb5ff..3c0d01e413b 100644
--- a/go.mod
+++ b/go.mod
@@ -61,7 +61,7 @@ require (
 	github.com/vultr/govultr/v2 v2.17.2
 	go.opentelemetry.io/collector/featuregate v1.0.1
 	go.opentelemetry.io/collector/pdata v1.0.1
-	go.opentelemetry.io/collector/semconv v0.92.0
+	go.opentelemetry.io/collector/semconv v0.93.0
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.47.0
 	go.opentelemetry.io/otel v1.22.0
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.22.0
diff --git a/go.sum b/go.sum
index f221d99d228..c7850fd7bb6 100644
--- a/go.sum
+++ b/go.sum
@@ -805,8 +805,8 @@ go.opentelemetry.io/collector/featuregate v1.0.1 h1:ok//hLSXttBbyu4sSV1pTx1nKdr5
 go.opentelemetry.io/collector/featuregate v1.0.1/go.mod h1:QQXjP4etmJQhkQ20j4P/rapWuItYxoFozg/iIwuKnYg=
 go.opentelemetry.io/collector/pdata v1.0.1 h1:dGX2h7maA6zHbl5D3AsMnF1c3Nn+3EUftbVCLzeyNvA=
 go.opentelemetry.io/collector/pdata v1.0.1/go.mod h1:jutXeu0QOXYY8wcZ/hege+YAnSBP3+jpTqYU1+JTI5Y=
-go.opentelemetry.io/collector/semconv v0.92.0 h1:3+OGPPuVu4rtrz8qGbpbiw7eKKULj4iJaSDTV52HM40=
-go.opentelemetry.io/collector/semconv v0.92.0/go.mod h1:gZ0uzkXsN+J5NpiRcdp9xOhNGQDDui8Y62p15sKrlzo=
+go.opentelemetry.io/collector/semconv v0.93.0 h1:eBlMcVNTwYYsVdAsCVDs4wvVYs75K1xcIDpqj16PG4c=
+go.opentelemetry.io/collector/semconv v0.93.0/go.mod h1:gZ0uzkXsN+J5NpiRcdp9xOhNGQDDui8Y62p15sKrlzo=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.47.0 h1:sv9kVfal0MK0wBMCOGr+HeJm9v803BkJxGrk2au7j08=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.47.0/go.mod h1:SK2UL73Zy1quvRPonmOmRDiWk1KBV3LyIeeIxcEApWw=
 go.opentelemetry.io/otel v1.22.0 h1:xS7Ku+7yTFvDfDraDIJVpw7XPyuHlB9MCiqqX5mcJ6Y=

From 97c186e2c883f5d3c56277fd0f5b2c7d613661ef Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 25 Jan 2024 10:24:14 +0100
Subject: [PATCH 114/132] build(deps): bump actions/upload-artifact from 3.1.3
 to 4.0.0 (#13355)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.3 to 4.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/a8a3f3ad30e3422c9c7b888a15615d19a852ae32...c7d193f32edcb7bfad88892161225aeda64e9392)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/fuzzing.yml    | 2 +-
 .github/workflows/scorecards.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/fuzzing.yml b/.github/workflows/fuzzing.yml
index 13f04f772ed..59975706071 100644
--- a/.github/workflows/fuzzing.yml
+++ b/.github/workflows/fuzzing.yml
@@ -21,7 +21,7 @@ jobs:
           fuzz-seconds: 600
           dry-run: false
       - name: Upload Crash
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
         if: failure() && steps.build.outcome == 'success'
         with:
           name: artifacts
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 636dd1bd1a5..a668a4ceb0c 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -37,7 +37,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # tag=v3.1.3
+        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # tag=v4.0.0
         with:
           name: SARIF file
           path: results.sarif

From 1069c1f4950214f348f1bb2f6f4db7a2b1de41bf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 25 Jan 2024 10:24:37 +0100
Subject: [PATCH 115/132] build(deps): bump bufbuild/buf-push-action (#13357)

Bumps [bufbuild/buf-push-action](https://github.com/bufbuild/buf-push-action) from 342fc4cdcf29115a01cf12a2c6dd6aac68dc51e1 to a654ff18effe4641ebea4a4ce242c49800728459.
- [Release notes](https://github.com/bufbuild/buf-push-action/releases)
- [Commits](https://github.com/bufbuild/buf-push-action/compare/342fc4cdcf29115a01cf12a2c6dd6aac68dc51e1...a654ff18effe4641ebea4a4ce242c49800728459)

---
updated-dependencies:
- dependency-name: bufbuild/buf-push-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/buf.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/buf.yml b/.github/workflows/buf.yml
index f6d5c9191a3..dc0694394bf 100644
--- a/.github/workflows/buf.yml
+++ b/.github/workflows/buf.yml
@@ -23,7 +23,7 @@ jobs:
         with:
           input: 'prompb'
           against: 'https://github.com/prometheus/prometheus.git#branch=main,ref=HEAD~1,subdir=prompb'
-      - uses: bufbuild/buf-push-action@342fc4cdcf29115a01cf12a2c6dd6aac68dc51e1 # v1.1.1
+      - uses: bufbuild/buf-push-action@a654ff18effe4641ebea4a4ce242c49800728459 # v1.1.1
         with:
           input: 'prompb'
           buf_token: ${{ secrets.BUF_TOKEN }}

From 74b73d1e2cd7ae97f08974234b25425c4241b1d5 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Thu, 25 Jan 2024 10:48:49 +0000
Subject: [PATCH 116/132] Labels: Add DropMetricName function, used in PromQL
 (#13446)

This function is called very frequently when executing PromQL functions,
and we can do it much more efficiently inside Labels.

In the common case that `__name__` comes first in the labels, we simply
re-point to start at the next label, which is nearly free.

`DropMetricName` is now so cheap I removed the cache - benchmarks show
everything still goes faster.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 model/labels/labels.go              | 13 +++++++++++++
 model/labels/labels_stringlabels.go | 21 +++++++++++++++++++++
 model/labels/labels_test.go         |  6 ++++++
 promql/engine.go                    | 29 +++++------------------------
 promql/functions.go                 | 26 +++++++++++++-------------
 5 files changed, 58 insertions(+), 37 deletions(-)

diff --git a/model/labels/labels.go b/model/labels/labels.go
index bf67224bbab..b6663dad244 100644
--- a/model/labels/labels.go
+++ b/model/labels/labels.go
@@ -342,6 +342,19 @@ func (ls Labels) Validate(f func(l Label) error) error {
 	return nil
 }
 
+// DropMetricName returns Labels with "__name__" removed.
+func (ls Labels) DropMetricName() Labels {
+	for i, l := range ls {
+		if l.Name == MetricName {
+			if i == 0 { // Make common case fast with no allocations.
+				return ls[1:]
+			}
+			return append(ls[:i], ls[i+1:]...)
+		}
+	}
+	return ls
+}
+
 // InternStrings calls intern on every string value inside ls, replacing them with what it returns.
 func (ls *Labels) InternStrings(intern func(string) string) {
 	for i, l := range *ls {
diff --git a/model/labels/labels_stringlabels.go b/model/labels/labels_stringlabels.go
index d79a836796b..f53c3b2d058 100644
--- a/model/labels/labels_stringlabels.go
+++ b/model/labels/labels_stringlabels.go
@@ -429,6 +429,27 @@ func (ls Labels) Validate(f func(l Label) error) error {
 	return nil
 }
 
+// DropMetricName returns Labels with "__name__" removed.
+func (ls Labels) DropMetricName() Labels {
+	for i := 0; i < len(ls.data); {
+		lName, i2 := decodeString(ls.data, i)
+		size, i2 := decodeSize(ls.data, i2)
+		i2 += size
+		if lName == MetricName {
+			if i == 0 { // Make common case fast with no allocations.
+				ls.data = ls.data[i2:]
+			} else {
+				ls.data = ls.data[:i] + ls.data[i2:]
+			}
+			break
+		} else if lName[0] > MetricName[0] { // Stop looking if we've gone past.
+			break
+		}
+		i = i2
+	}
+	return ls
+}
+
 // InternStrings calls intern on every string value inside ls, replacing them with what it returns.
 func (ls *Labels) InternStrings(intern func(string) string) {
 	ls.data = intern(ls.data)
diff --git a/model/labels/labels_test.go b/model/labels/labels_test.go
index 44369278df2..c497851d1b1 100644
--- a/model/labels/labels_test.go
+++ b/model/labels/labels_test.go
@@ -447,6 +447,12 @@ func TestLabels_Get(t *testing.T) {
 	require.Equal(t, "222", FromStrings("aaaa", "111", "bbb", "222").Get("bbb"))
 }
 
+func TestLabels_DropMetricName(t *testing.T) {
+	require.True(t, Equal(FromStrings("aaa", "111", "bbb", "222"), FromStrings("aaa", "111", "bbb", "222").DropMetricName()))
+	require.True(t, Equal(FromStrings("aaa", "111"), FromStrings(MetricName, "myname", "aaa", "111").DropMetricName()))
+	require.True(t, Equal(FromStrings("__aaa__", "111", "bbb", "222"), FromStrings("__aaa__", "111", MetricName, "myname", "bbb", "222").DropMetricName()))
+}
+
 // BenchmarkLabels_Get was written to check whether a binary search can improve the performance vs the linear search implementation
 // The results have shown that binary search would only be better when searching last labels in scenarios with more than 10 labels.
 // In the following list, `old` is the linear search while `new` is the binary search implementation (without calling sort.Search, which performs even worse here)
diff --git a/promql/engine.go b/promql/engine.go
index 8c8afd181b9..786b76e1f4d 100644
--- a/promql/engine.go
+++ b/promql/engine.go
@@ -1076,7 +1076,7 @@ type EvalNodeHelper struct {
 	Out Vector
 
 	// Caches.
-	// DropMetricName and label_*.
+	// label_*.
 	Dmn map[uint64]labels.Labels
 	// funcHistogramQuantile for classic histograms.
 	signatureToMetricWithBuckets map[string]*metricWithBuckets
@@ -1101,21 +1101,6 @@ func (enh *EvalNodeHelper) resetBuilder(lbls labels.Labels) {
 	}
 }
 
-// DropMetricName is a cached version of DropMetricName.
-func (enh *EvalNodeHelper) DropMetricName(l labels.Labels) labels.Labels {
-	if enh.Dmn == nil {
-		enh.Dmn = make(map[uint64]labels.Labels, len(enh.Out))
-	}
-	h := l.Hash()
-	ret, ok := enh.Dmn[h]
-	if ok {
-		return ret
-	}
-	ret = dropMetricName(l)
-	enh.Dmn[h] = ret
-	return ret
-}
-
 // rangeEval evaluates the given expressions, and then for each step calls
 // the given funcCall with the values computed for each expression at that
 // step. The return value is the combination into time series of all the
@@ -1492,7 +1477,7 @@ func (ev *evaluator) eval(expr parser.Expr) (parser.Value, annotations.Annotatio
 			// vector functions, the only change needed is to drop the
 			// metric name in the output.
 			if e.Func.Name != "last_over_time" {
-				metric = dropMetricName(metric)
+				metric = metric.DropMetricName()
 			}
 			ss := Series{
 				Metric: metric,
@@ -1624,7 +1609,7 @@ func (ev *evaluator) eval(expr parser.Expr) (parser.Value, annotations.Annotatio
 		mat := val.(Matrix)
 		if e.Op == parser.SUB {
 			for i := range mat {
-				mat[i].Metric = dropMetricName(mat[i].Metric)
+				mat[i].Metric = mat[i].Metric.DropMetricName()
 				for j := range mat[i].Floats {
 					mat[i].Floats[j].F = -mat[i].Floats[j].F
 				}
@@ -2370,7 +2355,7 @@ func (ev *evaluator) VectorBinop(op parser.ItemType, lhs, rhs Vector, matching *
 		}
 		metric := resultMetric(ls.Metric, rs.Metric, op, matching, enh)
 		if returnBool {
-			metric = enh.DropMetricName(metric)
+			metric = metric.DropMetricName()
 		}
 		insertedSigs, exists := matchedSigs[sig]
 		if matching.Card == parser.CardOneToOne {
@@ -2492,7 +2477,7 @@ func (ev *evaluator) VectorscalarBinop(op parser.ItemType, lhs Vector, rhs Scala
 			lhsSample.F = float
 			lhsSample.H = histogram
 			if shouldDropMetricName(op) || returnBool {
-				lhsSample.Metric = enh.DropMetricName(lhsSample.Metric)
+				lhsSample.Metric = lhsSample.Metric.DropMetricName()
 			}
 			enh.Out = append(enh.Out, lhsSample)
 		}
@@ -2500,10 +2485,6 @@ func (ev *evaluator) VectorscalarBinop(op parser.ItemType, lhs Vector, rhs Scala
 	return enh.Out
 }
 
-func dropMetricName(l labels.Labels) labels.Labels {
-	return labels.NewBuilder(l).Del(labels.MetricName).Labels()
-}
-
 // scalarBinop evaluates a binary operation between two Scalars.
 func scalarBinop(op parser.ItemType, lhs, rhs float64) float64 {
 	switch op {
diff --git a/promql/functions.go b/promql/functions.go
index 64cbd8e0fce..aef73e7f2b5 100644
--- a/promql/functions.go
+++ b/promql/functions.go
@@ -445,7 +445,7 @@ func funcClamp(vals []parser.Value, args parser.Expressions, enh *EvalNodeHelper
 	}
 	for _, el := range vec {
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(el.Metric),
+			Metric: el.Metric.DropMetricName(),
 			F:      math.Max(min, math.Min(max, el.F)),
 		})
 	}
@@ -458,7 +458,7 @@ func funcClampMax(vals []parser.Value, args parser.Expressions, enh *EvalNodeHel
 	max := vals[1].(Vector)[0].F
 	for _, el := range vec {
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(el.Metric),
+			Metric: el.Metric.DropMetricName(),
 			F:      math.Min(max, el.F),
 		})
 	}
@@ -471,7 +471,7 @@ func funcClampMin(vals []parser.Value, args parser.Expressions, enh *EvalNodeHel
 	min := vals[1].(Vector)[0].F
 	for _, el := range vec {
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(el.Metric),
+			Metric: el.Metric.DropMetricName(),
 			F:      math.Max(min, el.F),
 		})
 	}
@@ -493,7 +493,7 @@ func funcRound(vals []parser.Value, args parser.Expressions, enh *EvalNodeHelper
 	for _, el := range vec {
 		f := math.Floor(el.F*toNearestInverse+0.5) / toNearestInverse
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(el.Metric),
+			Metric: el.Metric.DropMetricName(),
 			F:      f,
 		})
 	}
@@ -797,7 +797,7 @@ func simpleFunc(vals []parser.Value, enh *EvalNodeHelper, f func(float64) float6
 	for _, el := range vals[0].(Vector) {
 		if el.H == nil { // Process only float samples.
 			enh.Out = append(enh.Out, Sample{
-				Metric: enh.DropMetricName(el.Metric),
+				Metric: el.Metric.DropMetricName(),
 				F:      f(el.F),
 			})
 		}
@@ -943,7 +943,7 @@ func funcTimestamp(vals []parser.Value, args parser.Expressions, enh *EvalNodeHe
 	vec := vals[0].(Vector)
 	for _, el := range vec {
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(el.Metric),
+			Metric: el.Metric.DropMetricName(),
 			F:      float64(el.T) / 1000,
 		})
 	}
@@ -1057,7 +1057,7 @@ func funcHistogramCount(vals []parser.Value, args parser.Expressions, enh *EvalN
 			continue
 		}
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(sample.Metric),
+			Metric: sample.Metric.DropMetricName(),
 			F:      sample.H.Count,
 		})
 	}
@@ -1074,7 +1074,7 @@ func funcHistogramSum(vals []parser.Value, args parser.Expressions, enh *EvalNod
 			continue
 		}
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(sample.Metric),
+			Metric: sample.Metric.DropMetricName(),
 			F:      sample.H.Sum,
 		})
 	}
@@ -1107,7 +1107,7 @@ func funcHistogramStdDev(vals []parser.Value, args parser.Expressions, enh *Eval
 		variance += cVariance
 		variance /= sample.H.Count
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(sample.Metric),
+			Metric: sample.Metric.DropMetricName(),
 			F:      math.Sqrt(variance),
 		})
 	}
@@ -1140,7 +1140,7 @@ func funcHistogramStdVar(vals []parser.Value, args parser.Expressions, enh *Eval
 		variance += cVariance
 		variance /= sample.H.Count
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(sample.Metric),
+			Metric: sample.Metric.DropMetricName(),
 			F:      variance,
 		})
 	}
@@ -1159,7 +1159,7 @@ func funcHistogramFraction(vals []parser.Value, args parser.Expressions, enh *Ev
 			continue
 		}
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(sample.Metric),
+			Metric: sample.Metric.DropMetricName(),
 			F:      histogramFraction(lower, upper, sample.H),
 		})
 	}
@@ -1230,7 +1230,7 @@ func funcHistogramQuantile(vals []parser.Value, args parser.Expressions, enh *Ev
 		}
 
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(sample.Metric),
+			Metric: sample.Metric.DropMetricName(),
 			F:      histogramQuantile(q, sample.H),
 		})
 	}
@@ -1440,7 +1440,7 @@ func dateWrapper(vals []parser.Value, enh *EvalNodeHelper, f func(time.Time) flo
 	for _, el := range vals[0].(Vector) {
 		t := time.Unix(int64(el.F), 0).UTC()
 		enh.Out = append(enh.Out, Sample{
-			Metric: enh.DropMetricName(el.Metric),
+			Metric: el.Metric.DropMetricName(),
 			F:      f(t),
 		})
 	}

From b9eab6e4b8436650559ff8ecf2a77cc31d24fc31 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Thu, 25 Jan 2024 10:57:54 +0000
Subject: [PATCH 117/132] tsdb: simplify internal series delete function
 (#13261)

Lifting an optimisation from Agent code, `seriesHashmap.del` can use
the unique series reference, doesn't need to check Labels.
Also streamline the logic for deleting from `unique` and `conflicts` maps,
and add some comments to help the next person.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 tsdb/head.go | 23 +++++++++++------------
 1 file changed, 11 insertions(+), 12 deletions(-)

diff --git a/tsdb/head.go b/tsdb/head.go
index 692f7f77acb..cdcd3ea5687 100644
--- a/tsdb/head.go
+++ b/tsdb/head.go
@@ -1751,32 +1751,31 @@ func (m *seriesHashmap) set(hash uint64, s *memSeries) {
 	m.conflicts[hash] = append(l, s)
 }
 
-func (m *seriesHashmap) del(hash uint64, lset labels.Labels) {
+func (m *seriesHashmap) del(hash uint64, ref chunks.HeadSeriesRef) {
 	var rem []*memSeries
 	unique, found := m.unique[hash]
 	switch {
-	case !found:
+	case !found: // Supplied hash is not stored.
 		return
-	case labels.Equal(unique.lset, lset):
+	case unique.ref == ref:
 		conflicts := m.conflicts[hash]
-		if len(conflicts) == 0 {
+		if len(conflicts) == 0 { // Exactly one series with this hash was stored
 			delete(m.unique, hash)
 			return
 		}
-		rem = conflicts
-	default:
-		rem = append(rem, unique)
+		m.unique[hash] = conflicts[0] // First remaining series goes in 'unique'.
+		rem = conflicts[1:]           // Keep the rest.
+	default: // The series to delete is somewhere in 'conflicts'. Keep all the ones that don't match.
 		for _, s := range m.conflicts[hash] {
-			if !labels.Equal(s.lset, lset) {
+			if s.ref != ref {
 				rem = append(rem, s)
 			}
 		}
 	}
-	m.unique[hash] = rem[0]
-	if len(rem) == 1 {
+	if len(rem) == 0 {
 		delete(m.conflicts, hash)
 	} else {
-		m.conflicts[hash] = rem[1:]
+		m.conflicts[hash] = rem
 	}
 }
 
@@ -1891,7 +1890,7 @@ func (s *stripeSeries) gc(mint int64, minOOOMmapRef chunks.ChunkDiskMapperRef) (
 		}
 
 		deleted[storage.SeriesRef(series.ref)] = struct{}{}
-		s.hashes[hashShard].del(hash, series.lset)
+		s.hashes[hashShard].del(hash, series.ref)
 		delete(s.series[refShard], series.ref)
 		deletedForCallback[series.ref] = series.lset
 	}

From 660df3488dc9fc43dcd6c80caa9c82334942c0c5 Mon Sep 17 00:00:00 2001
From: Arve Knudsen <arve.knudsen@gmail.com>
Date: Thu, 25 Jan 2024 13:48:21 +0100
Subject: [PATCH 118/132] otlptranslator/update-copy.sh: Fix sed command lines

Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>
---
 storage/remote/otlptranslator/update-copy.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/storage/remote/otlptranslator/update-copy.sh b/storage/remote/otlptranslator/update-copy.sh
index 44b3a3245c0..ee7198706a6 100755
--- a/storage/remote/otlptranslator/update-copy.sh
+++ b/storage/remote/otlptranslator/update-copy.sh
@@ -18,5 +18,5 @@ rm -rf ./prometheus/*_test.go
 
 rm -rf ./tmp
 
-sed -i '' 's#github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/prometheus#github.com/prometheus/prometheus/storage/remote/otlptranslator/prometheus#g' ./prometheusremotewrite/*.go
-sed -i '' '1s#^#// DO NOT EDIT. COPIED AS-IS. SEE ../README.md\n\n#g' ./prometheusremotewrite/*.go ./prometheus/*.go
+sed -i 's#github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/prometheus#github.com/prometheus/prometheus/storage/remote/otlptranslator/prometheus#g' ./prometheusremotewrite/*.go
+sed -i '1s#^#// DO NOT EDIT. COPIED AS-IS. SEE ../README.md\n\n#g' ./prometheusremotewrite/*.go ./prometheus/*.go

From c3b8ef1694ffd1ef4325eace32c6e3dddca8e710 Mon Sep 17 00:00:00 2001
From: Ben Kochie <superq@gmail.com>
Date: Thu, 25 Jan 2024 14:18:47 +0100
Subject: [PATCH 119/132] Rollback k8s.io requirements (#13462)

Rollback k8s.io Go modules to v0.28.6 to avoid forcing upgrade of Go to
1.21. This allows us to keep compatibility with the currently supported
upstream Go releases.

Signed-off-by: SuperQ <superq@gmail.com>
---
 documentation/examples/remote_storage/go.mod |  2 +-
 documentation/examples/remote_storage/go.sum | 82 --------------------
 go.mod                                       |  8 +-
 go.sum                                       | 35 ++-------
 4 files changed, 13 insertions(+), 114 deletions(-)

diff --git a/documentation/examples/remote_storage/go.mod b/documentation/examples/remote_storage/go.mod
index e7b5bb8be56..6faa5efc27f 100644
--- a/documentation/examples/remote_storage/go.mod
+++ b/documentation/examples/remote_storage/go.mod
@@ -1,6 +1,6 @@
 module github.com/prometheus/prometheus/documentation/examples/remote_storage
 
-go 1.21
+go 1.20
 
 require (
 	github.com/alecthomas/kingpin/v2 v2.4.0
diff --git a/documentation/examples/remote_storage/go.sum b/documentation/examples/remote_storage/go.sum
index 9b8208baa21..da503b74aa5 100644
--- a/documentation/examples/remote_storage/go.sum
+++ b/documentation/examples/remote_storage/go.sum
@@ -5,14 +5,11 @@ github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0/go.mod h1:1fXstnBMas5kzG
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0 h1:sXr+ck84g/ZlZUOZiNELInmMgOsuGwdjjVkEIde0OtY=
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0/go.mod h1:okt5dMMTOFjX/aovMlrjvvXoPMBVSPzk9185BT0+eZM=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1 h1:UPeCRD+XY7QlaGQte2EVI2iOcWvUYA2XY8w5T/8v0NQ=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1/go.mod h1:oGV6NlB0cvi1ZbYRR2UN44QHxWFyGk+iylgD0qaMXjA=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork v1.1.0 h1:QM6sE5k2ZT/vI5BEe0r7mqjsUSnhVBFbOsVkEuaEfiA=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1 h1:bWh0Z2rOEDfB/ywv/l0iHN1JgyazE6kW/aIA89+CEK0=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1/go.mod h1:Bzf34hhAE9NSxailk8xVeLEZbUjOXcC+GnU1mMKdhLw=
 github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1 h1:WpB/QDNLpMw72xHJc34BNNykqSOeEJDAWkhf0u12/Jk=
 github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1/go.mod h1:wP83P5OoQ5p6ip3ScPr0BAq0BvuPAvacpEuSzyouqAI=
 github.com/Microsoft/go-winio v0.6.1 h1:9/kr64B9VUZrLm5YYwbGtUJnMgqWVOdUAXu6Migciow=
-github.com/Microsoft/go-winio v0.6.1/go.mod h1:LRdKpFKfdobln8UmuiYcKPot9D2v6svN5+sAH+4kjUM=
 github.com/alecthomas/kingpin/v2 v2.4.0 h1:f48lwail6p8zpO1bC4TxtqACaGqHYA22qkHjHpqDjYY=
 github.com/alecthomas/kingpin/v2 v2.4.0/go.mod h1:0gyi0zQnjuFk8xrkNKamJoyUo382HRL7ATRpFZCw6tE=
 github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
@@ -23,7 +20,6 @@ github.com/alecthomas/units v0.0.0-20190924025748-f65c72e2690d/go.mod h1:rBZYJk5
 github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137 h1:s6gZFSlWYmbqAuRjVTiNNhvNRfY2Wxp9nhfyel4rklc=
 github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137/go.mod h1:OMCwj8VM1Kc9e19TLln2VL61YJF0x1XFtfdL4JdbSyE=
 github.com/armon/go-metrics v0.4.1 h1:hR91U9KYmb6bLBYLQjyM+3j+rcd/UhE+G78SFnF8gJA=
-github.com/armon/go-metrics v0.4.1/go.mod h1:E6amYzXo6aW1tqzoZGT755KkbgrJsSdpwZ+3JqfkOG4=
 github.com/aws/aws-sdk-go v1.38.35/go.mod h1:hcU610XS61/+aQV88ixoOzUoG7v3b31pl2zKMmprdro=
 github.com/aws/aws-sdk-go v1.45.25 h1:c4fLlh5sLdK2DCRTY1z0hyuJZU4ygxX8m1FswL6/nF4=
 github.com/aws/aws-sdk-go v1.45.25/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
@@ -35,7 +31,6 @@ github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XL
 github.com/cespare/xxhash/v2 v2.2.0 h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj44=
 github.com/cespare/xxhash/v2 v2.2.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4 h1:/inchEIKaYC1Akx+H+gqO04wryn5h75LSazbRlnya1k=
-github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
@@ -44,31 +39,19 @@ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8Yc
 github.com/dennwc/varint v1.0.0 h1:kGNFFSSw8ToIy3obO/kKr8U9GZYUAxQEVuix4zfDWzE=
 github.com/dennwc/varint v1.0.0/go.mod h1:hnItb35rvZvJrbTALZtY/iQfDs48JKRG1RPpgziApxA=
 github.com/digitalocean/godo v1.104.1 h1:SZNxjAsskM/su0YW9P8Wx3gU0W1Z13b6tZlYNpl5BnA=
-github.com/digitalocean/godo v1.104.1/go.mod h1:VAI/L5YDzMuPRU01lEEUSQ/sp5Z//1HnnFv/RBTEdbg=
 github.com/dnaeon/go-vcr v1.2.0 h1:zHCHvJYTMh1N7xnV7zf1m1GPBF9Ad0Jk/whtQ1663qI=
-github.com/dnaeon/go-vcr v1.2.0/go.mod h1:R4UdLID7HZT3taECzJs4YgbbH6PIGXB6W/sc5OLb6RQ=
 github.com/docker/distribution v2.8.2+incompatible h1:T3de5rq0dB1j30rp0sA2rER+m322EBzniBPB6ZIzuh8=
-github.com/docker/distribution v2.8.2+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
 github.com/docker/docker v24.0.6+incompatible h1:hceabKCtUgDqPu+qm0NgsaXf28Ljf4/pWFL7xjWWDgE=
-github.com/docker/docker v24.0.6+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=
-github.com/docker/go-connections v0.4.0/go.mod h1:Gbd7IOopHjR8Iph03tsViu4nIes5XhDvyHbTtUxmeec=
 github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4=
-github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
 github.com/edsrzf/mmap-go v1.1.0 h1:6EUwBLQ/Mcr1EYLE4Tn1VdW1A4ckqCQWZBw8Hr0kjpQ=
-github.com/edsrzf/mmap-go v1.1.0/go.mod h1:19H/e8pUPLicwkyNgOykDXkJ9F0MHE+Z52B8EIth78Q=
 github.com/emicklei/go-restful/v3 v3.10.2 h1:hIovbnmBTLjHXkqEBUz3HGpXZdM7ZrE9fJIZIqlJLqE=
-github.com/emicklei/go-restful/v3 v3.10.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
 github.com/envoyproxy/go-control-plane v0.11.1 h1:wSUXTlLfiAQRWs2F+p+EKOY9rUyis1MyGqJ2DIk5HpM=
-github.com/envoyproxy/go-control-plane v0.11.1/go.mod h1:uhMcXKCQMEJHiAb0w+YGefQLaTEw+YhGluxZkrTmD0g=
 github.com/envoyproxy/protoc-gen-validate v1.0.2 h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=
-github.com/envoyproxy/protoc-gen-validate v1.0.2/go.mod h1:GpiZQP3dDbg4JouG/NNS7QWXpgx6x8QiMKdmN72jogE=
 github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=
-github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw=
 github.com/felixge/httpsnoop v1.0.3 h1:s/nj+GCswXYzN5v2DpNMuMQYe+0DDwt5WVCU6CWBdXk=
 github.com/felixge/httpsnoop v1.0.3/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
 github.com/fsnotify/fsnotify v1.6.0 h1:n+5WquG0fcWoWp6xPWfHdbskMCQaFnG6PfBrh1Ky4HY=
-github.com/fsnotify/fsnotify v1.6.0/go.mod h1:sl3t1tCWJFWoRz9R8WJCbQihKKwmorjAbSClcnxKAGw=
 github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
 github.com/go-kit/kit v0.9.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
 github.com/go-kit/log v0.1.0/go.mod h1:zbhenjAZHb184qTLMA9ZjW7ThYL0H2mk7Q6pNt4vbaY=
@@ -85,16 +68,11 @@ github.com/go-logr/logr v1.2.4/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbV
 github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
 github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
 github.com/go-openapi/jsonpointer v0.20.0 h1:ESKJdU9ASRfaPNOPRx12IUyA1vn3R9GiE3KYD14BXdQ=
-github.com/go-openapi/jsonpointer v0.20.0/go.mod h1:6PGzBjjIIumbLYysB73Klnms1mwnU4G3YHOECG3CedA=
 github.com/go-openapi/jsonreference v0.20.2 h1:3sVjiK66+uXK/6oQ8xgcRKcFgQ5KXa2KvnJRumpMGbE=
-github.com/go-openapi/jsonreference v0.20.2/go.mod h1:Bl1zwGIM8/wsvqjsOQLJ/SH+En5Ap4rVB5KVcIDZG2k=
 github.com/go-openapi/swag v0.22.4 h1:QLMzNJnMGPRNDCbySlcj1x01tzU8/9LTTL9hZZZogBU=
-github.com/go-openapi/swag v0.22.4/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
 github.com/go-resty/resty/v2 v2.7.0 h1:me+K9p3uhSmXtrBZ4k9jcEAfJmuC8IivWHwaLZwPrFY=
-github.com/go-resty/resty/v2 v2.7.0/go.mod h1:9PWDzw47qPphMRFfhsyk0NnSgvluHcljSMVIq3w7q0I=
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
 github.com/go-zookeeper/zk v1.0.3 h1:7M2kwOsc//9VeeFiPtf+uSJlVpU66x9Ba5+8XK7/TDg=
-github.com/go-zookeeper/zk v1.0.3/go.mod h1:nOB03cncLtlp4t+UAkGSV+9beXP/akpekBwL+UX1Qcw=
 github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
@@ -116,65 +94,43 @@ github.com/golang/protobuf v1.5.3/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiu
 github.com/golang/snappy v0.0.4 h1:yAGX7huGHXlcLOEtBnF4w7FQwA26wojNCwOYAEhLjQM=
 github.com/golang/snappy v0.0.4/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
 github.com/google/gnostic-models v0.6.8 h1:yo/ABAfM5IMRsS1VnXjTBvUb61tFIHozhlYvRgGre9I=
-github.com/google/gnostic-models v0.6.8/go.mod h1:5n7qKqH0f5wFt+aWF8CW6pZLLNOfYuF5OpfBSENuI8U=
 github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.4/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
-github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/google/go-querystring v1.1.0 h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8=
-github.com/google/go-querystring v1.1.0/go.mod h1:Kcdr2DB4koayq7X8pmAG4sNG59So17icRSOU623lUBU=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
-github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/uuid v1.3.1 h1:KjJaJ9iWZ3jOFZIf1Lqf4laDRCasjl0BCmnEGxkdLb4=
 github.com/google/uuid v1.3.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/gophercloud/gophercloud v1.7.0 h1:fyJGKh0LBvIZKLvBWvQdIgkaV5yTM3Jh9EYUh+UNCAs=
-github.com/gophercloud/gophercloud v1.7.0/go.mod h1:aAVqcocTSXh2vYFZ1JTvx4EQmfgzxRcNupUfxZbBNDM=
 github.com/gorilla/websocket v1.5.0 h1:PPwGk2jz7EePpoHN/+ClbZu8SPxiqlu12wZP/3sWmnc=
-github.com/gorilla/websocket v1.5.0/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
 github.com/grafana/regexp v0.0.0-20221122212121-6b5c0a4cb7fd h1:PpuIBO5P3e9hpqBD0O/HjhShYuM6XE0i/lbE6J94kww=
 github.com/grafana/regexp v0.0.0-20221122212121-6b5c0a4cb7fd/go.mod h1:M5qHK+eWfAv8VR/265dIuEpL3fNfeC21tXXp9itM24A=
 github.com/hashicorp/consul/api v1.25.1 h1:CqrdhYzc8XZuPnhIYZWH45toM0LB9ZeYr/gvpLVI3PE=
-github.com/hashicorp/consul/api v1.25.1/go.mod h1:iiLVwR/htV7mas/sy0O+XSuEnrdBUUydemjxcUrAt4g=
 github.com/hashicorp/cronexpr v1.1.2 h1:wG/ZYIKT+RT3QkOdgYc+xsKWVRgnxJ1OJtjjy84fJ9A=
-github.com/hashicorp/cronexpr v1.1.2/go.mod h1:P4wA0KBl9C5q2hABiMO7cp6jcIg96CDh1Efb3g1PWA4=
 github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
-github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
-github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=
 github.com/hashicorp/go-hclog v1.5.0 h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=
-github.com/hashicorp/go-hclog v1.5.0/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M=
 github.com/hashicorp/go-immutable-radix v1.3.1 h1:DKHmCUm2hRBK510BaiZlwvpD40f8bJFeZnpfm2KLowc=
-github.com/hashicorp/go-immutable-radix v1.3.1/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
 github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
-github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
 github.com/hashicorp/go-retryablehttp v0.7.4 h1:ZQgVdpTdAL7WpMIwLzCfbalOcSUdkDZnpUv3/+BxzFA=
-github.com/hashicorp/go-retryablehttp v0.7.4/go.mod h1:Jy/gPYAdjqffZ/yFGCFV2doI5wjtH1ewM9u8iYVjtX8=
 github.com/hashicorp/go-rootcerts v1.0.2 h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc=
-github.com/hashicorp/go-rootcerts v1.0.2/go.mod h1:pqUvnprVnM5bf7AOirdbb01K4ccR319Vf4pU3K5EGc8=
 github.com/hashicorp/golang-lru v0.6.0 h1:uL2shRDx7RTrOrTCUZEGP/wJUFiUI8QT6E7z5o8jga4=
-github.com/hashicorp/golang-lru v0.6.0/go.mod h1:iADmTwqILo4mZ8BN3D2Q6+9jd8WM5uGBxy+E8yxSoD4=
 github.com/hashicorp/nomad/api v0.0.0-20230721134942-515895c7690c h1:Nc3Mt2BAnq0/VoLEntF/nipX+K1S7pG+RgwiitSv6v0=
-github.com/hashicorp/nomad/api v0.0.0-20230721134942-515895c7690c/go.mod h1:O23qLAZuCx4htdY9zBaO4cJPXgleSFEdq6D/sezGgYE=
 github.com/hashicorp/serf v0.10.1 h1:Z1H2J60yRKvfDYAOZLd2MU0ND4AH/WDz7xYHDWQsIPY=
-github.com/hashicorp/serf v0.10.1/go.mod h1:yL2t6BqATOLGc5HF7qbFkTfXoPIY0WZdWHfEvMqbG+4=
 github.com/hetznercloud/hcloud-go/v2 v2.4.0 h1:MqlAE+w125PLvJRCpAJmEwrIxoVdUdOyuFUhE/Ukbok=
-github.com/hetznercloud/hcloud-go/v2 v2.4.0/go.mod h1:l7fA5xsncFBzQTyw29/dw5Yr88yEGKKdc6BHf24ONS0=
 github.com/imdario/mergo v0.3.16 h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4=
-github.com/imdario/mergo v0.3.16/go.mod h1:WBLT9ZmE3lPoWsEzCh9LPo3TiwVN+ZKEjmz+hD27ysY=
 github.com/influxdata/influxdb v1.11.4 h1:H3pVW+/tWQ4lkHhZxVQ13Ov1hmhHYaAzz8L5aq3ZNtw=
 github.com/influxdata/influxdb v1.11.4/go.mod h1:VO6X2zlamfmEf+Esc9dR+7UQhdE/krspWNEZPwxCrp0=
 github.com/ionos-cloud/sdk-go/v6 v6.1.9 h1:Iq3VIXzeEbc8EbButuACgfLMiY5TPVWUPNrF+Vsddo4=
-github.com/ionos-cloud/sdk-go/v6 v6.1.9/go.mod h1:EzEgRIDxBELvfoa/uBN0kOQaqovLjUWEB7iW4/Q+t4k=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
 github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo=
 github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8=
 github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U=
 github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
-github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
 github.com/jpillora/backoff v1.0.0 h1:uvFg412JmmHBHw7iwprIxkPMI+sGQ4kzOWsMeHnm2EA=
 github.com/jpillora/backoff v1.0.0/go.mod h1:J/6gKK9jxlEcS3zixgDgUAsiuZ7yrSoa/FX5e0EB2j4=
 github.com/json-iterator/go v1.1.6/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
@@ -189,13 +145,11 @@ github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+o
 github.com/klauspost/compress v1.17.1 h1:NE3C767s2ak2bweCZo3+rdP4U/HoyVXLv/X9f2gPS5g=
 github.com/klauspost/compress v1.17.1/go.mod h1:ntbaceVETuRiXiv4DpjP66DpAtAGkEQskQzEyD//IeE=
 github.com/kolo/xmlrpc v0.0.0-20220921171641-a4b6fa1dd06b h1:udzkj9S/zlT5X367kqJis0QP7YMxobob6zhzq6Yre00=
-github.com/kolo/xmlrpc v0.0.0-20220921171641-a4b6fa1dd06b/go.mod h1:pcaDhQK0/NJZEvtCO0qQPPropqV0sJOJ6YW7X+9kRwM=
 github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/konsorten/go-windows-terminal-sequences v1.0.3/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
 github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515/go.mod h1:+0opPa2QZZtGFBFZlji/RkVcI2GknAs/DXo4wKdlNEc=
 github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
-github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
@@ -203,20 +157,13 @@ github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
 github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
 github.com/linode/linodego v1.23.0 h1:s0ReCZtuN9Z1IoUN9w1RLeYO1dMZUGPwOQ/IBFsBHtU=
-github.com/linode/linodego v1.23.0/go.mod h1:0U7wj/UQOqBNbKv1FYTXiBUXueR8DY4HvIotwE0ENgg=
 github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0=
-github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
 github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
-github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
 github.com/mattn/go-isatty v0.0.19 h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=
-github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
 github.com/miekg/dns v1.1.56 h1:5imZaSeoRNvpM9SzWNhEcP9QliKiz20/dA2QabIGVnE=
-github.com/miekg/dns v1.1.56/go.mod h1:cRm6Oo2C8TY9ZS/TqsSrseAcncm74lfK5G+ikN2SWWY=
 github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
-github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY=
-github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
 github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
 github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
@@ -225,18 +172,13 @@ github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3Rllmb
 github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
 github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
-github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
 github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f h1:KUppIJq7/+SVif2QVs3tOP0zanoHgBEVAwHxUSIzRqU=
 github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/oklog/ulid v1.3.1 h1:EGfNDEx6MqHz8B3uNV6QAib1UR2Lm97sHi3ocA6ESJ4=
-github.com/oklog/ulid v1.3.1/go.mod h1:CirwcVhetQ6Lv90oh/F+FBtV6XMibvdAFo93nm5qn4U=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
-github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
 github.com/opencontainers/image-spec v1.0.2 h1:9yCKha/T5XdGtO0q9Q9a6T5NUCsTn/DrBg0D7ufOcFM=
-github.com/opencontainers/image-spec v1.0.2/go.mod h1:BtxoFyWECRxE4U/7sNtV5W15zMzWCbyJoFRP3s7yZA0=
 github.com/ovh/go-ovh v1.4.3 h1:Gs3V823zwTFpzgGLZNI6ILS4rmxZgJwJCz54Er9LwD0=
-github.com/ovh/go-ovh v1.4.3/go.mod h1:AkPXVtgwB6xlKblMjRKJJmjRp+ogrE7fz2lVgcQY8SY=
 github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 h1:KoWmjvw+nsYOo29YJK9vDA65RGE3NrOnUtO7a+RF9HU=
 github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8/go.mod h1:HKlIX3XHQyzLZPlr7++PzdhaXEj94dEiJgZDTsxEqUI=
 github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
@@ -274,18 +216,14 @@ github.com/prometheus/procfs v0.12.0/go.mod h1:pcuDEFsWDnvcgNzo4EEweacyhjeA9Zk3c
 github.com/prometheus/prometheus v0.48.1 h1:CTszphSNTXkuCG6O0IfpKdHcJkvvnAAE1GbELKS+NFk=
 github.com/prometheus/prometheus v0.48.1/go.mod h1:SRw624aMAxTfryAcP8rOjg4S/sHHaetx2lyJJ2nM83g=
 github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
-github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
 github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21 h1:yWfiTPwYxB0l5fGMhl/G+liULugVIHD9AU77iNLrURQ=
-github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21/go.mod h1:fCa7OJZ/9DRTnOKmxvT6pn+LPWUptQAmHF/SBJUGEcg=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/sirupsen/logrus v1.6.0/go.mod h1:7uNnSEd1DgxDLC74fIahvMZmmYsHGZGEOFrfsX/uA88=
 github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
-github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.5.0 h1:1zr/of2m5FGMsad5YfcqgdqdWrIhu+EBEJRhR1U7z/c=
-github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
@@ -293,7 +231,6 @@ github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/
 github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
 github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
 github.com/vultr/govultr/v2 v2.17.2 h1:gej/rwr91Puc/tgh+j33p/BLR16UrIPnSr+AIwYWZQs=
-github.com/vultr/govultr/v2 v2.17.2/go.mod h1:ZFOKGWmgjytfyjeyAdhQlSWwTjh2ig+X49cAp50dzXI=
 github.com/xhit/go-str2duration/v2 v2.1.0 h1:lxklc02Drh6ynqX+DdPyp5pCKLUQpRT8bp8Ydu2Bstc=
 github.com/xhit/go-str2duration/v2 v2.1.0/go.mod h1:ohY8p+0f07DiV6Em5LKB0s2YpLtXVyJfNt1+BlmyAsU=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
@@ -314,7 +251,6 @@ go.opentelemetry.io/otel/trace v1.19.0/go.mod h1:mfaSyvGyEJEI0nyV2I4qhNQnbBOUUmY
 go.uber.org/atomic v1.11.0 h1:ZvwS0R+56ePWxUNi+Atn9dWONBPp/AUETXlHW0DxSjE=
 go.uber.org/atomic v1.11.0/go.mod h1:LUxbIzbOniOlMKjJjyPfpl4v+PKK2cNJn91OQbhoJI0=
 go.uber.org/goleak v1.2.1 h1:NBol2c7O1ZokfZ0LEU9K6Whx/KnwvepVetCUhtKja4A=
-go.uber.org/goleak v1.2.1/go.mod h1:qlT2yGI9QafXHhZZLxlSuNsMw3FFLxBr+tBRlmO1xH4=
 go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
 go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
 golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
@@ -330,7 +266,6 @@ golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/mod v0.13.0 h1:I/DsJXRlw/8l/0c24sM9yb0T4z9liZTduXvdAWYiysY=
-golang.org/x/mod v0.13.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -361,7 +296,6 @@ golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.4.0 h1:zxkM55ReGkDlKSM+Fu41A+zmbZuaPVbGMzvvdUPznYQ=
-golang.org/x/sync v0.4.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -387,7 +321,6 @@ golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9sn
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.16.0 h1:m+B6fahuftsE9qjo0VWp2FW0mB3MTJvR0BaMQrq0pmE=
-golang.org/x/term v0.16.0/go.mod h1:yn7UURbUtPyrVJPGPq404EukNFxcm/foM+bV/bfcDsY=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
@@ -404,7 +337,6 @@ golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roY
 golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.14.0 h1:jvNa2pY0M4r62jkRQ6RwEZZyPcymeL9XZMLBbV7U2nc=
-golang.org/x/tools v0.14.0/go.mod h1:uYBEerGOWcJyEORxN+Ek8+TT266gXkNlHdJBwexUsBg=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -414,9 +346,7 @@ google.golang.org/appengine v1.6.6/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCID
 google.golang.org/appengine v1.6.7 h1:FZR1q0exgwxzPzp/aF+VccGrSfxfPpkBqjIIEq3ru6c=
 google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
 google.golang.org/genproto v0.0.0-20231002182017-d307bd883b97 h1:SeZZZx0cP0fqUyA+oRzP9k7cSwJlvDFiROO72uwD6i0=
-google.golang.org/genproto v0.0.0-20231002182017-d307bd883b97/go.mod h1:t1VqOqqvce95G3hIDCT5FeO3YUc6Q4Oe24L/+rNMxRk=
 google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a h1:myvhA4is3vrit1a6NZCWBIwN0kNEnX21DJOJX/NvIfI=
-google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a/go.mod h1:SUBoKXbI1Efip18FClrQVGjWcyd0QZd8KkvdP34t7ww=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20231009173412-8bfb1ae86b6c h1:jHkCUWkseRf+W+edG5hMzr/Uh1xkDREY4caybAq4dpY=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20231009173412-8bfb1ae86b6c/go.mod h1:4cYg8o5yUbm77w8ZX00LhMVNl/YVBFJRYWDc0uYWMs0=
 google.golang.org/grpc v1.58.3 h1:BjnpXut1btbtgN/6sp+brB2Kbm2LjNXnidYujAVbSoQ=
@@ -435,11 +365,8 @@ gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLks
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
-gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
 gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
-gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
 gopkg.in/ini.v1 v1.67.0 h1:Dgnx+6+nfE+IfzjUEISNeydPJh9AXNNsWbGP9KzCsOA=
-gopkg.in/ini.v1 v1.67.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
 gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
@@ -452,21 +379,12 @@ gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 k8s.io/api v0.28.2 h1:9mpl5mOb6vXZvqbQmankOfPIGiudghwCoLl1EYfUZbw=
-k8s.io/api v0.28.2/go.mod h1:RVnJBsjU8tcMq7C3iaRSGMeaKt2TWEUXcpIt/90fjEg=
 k8s.io/apimachinery v0.28.2 h1:KCOJLrc6gu+wV1BYgwik4AF4vXOlVJPdiqn0yAWWwXQ=
-k8s.io/apimachinery v0.28.2/go.mod h1:RdzF87y/ngqk9H4z3EL2Rppv5jj95vGS/HaFXrLDApU=
 k8s.io/client-go v0.28.2 h1:DNoYI1vGq0slMBN/SWKMZMw0Rq+0EQW6/AK4v9+3VeY=
-k8s.io/client-go v0.28.2/go.mod h1:sMkApowspLuc7omj1FOSUxSoqjr+d5Q0Yc0LOFnYFJY=
 k8s.io/klog v1.0.0 h1:Pt+yjF5aB1xDSVbau4VsWe+dQNzA0qv1LlXdC2dF6Q8=
 k8s.io/klog/v2 v2.100.1 h1:7WCHKK6K8fNhTqfBhISHQ97KrnJNFZMcQvKp7gP/tmg=
-k8s.io/klog/v2 v2.100.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
 k8s.io/kube-openapi v0.0.0-20230717233707-2695361300d9 h1:LyMgNKD2P8Wn1iAwQU5OhxCKlKJy0sHc+PcDwFB24dQ=
-k8s.io/kube-openapi v0.0.0-20230717233707-2695361300d9/go.mod h1:wZK2AVp1uHCp4VamDVgBP2COHZjqD1T68Rf0CM3YjSM=
 k8s.io/utils v0.0.0-20230711102312-30195339c3c7 h1:ZgnF1KZsYxWIifwSNZFZgNtWE89WI5yiP5WwlfDoIyc=
-k8s.io/utils v0.0.0-20230711102312-30195339c3c7/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
-sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
 sigs.k8s.io/structured-merge-diff/v4 v4.3.0 h1:UZbZAZfX0wV2zr7YZorDz6GXROfDFj6LvqCRm4VUVKk=
-sigs.k8s.io/structured-merge-diff/v4 v4.3.0/go.mod h1:N8hJocpFajUSSeSJ9bOZ77VzejKZaXsTtZo4/u7Io08=
 sigs.k8s.io/yaml v1.3.0 h1:a2VclLzOGrwOHDiV8EfBGhvjHvP46CtW5j6POvhYGGo=
-sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8=
diff --git a/go.mod b/go.mod
index 3c0d01e413b..7e586580e68 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/prometheus/prometheus
 
-go 1.21
+go 1.20
 
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.1
@@ -86,9 +86,9 @@ require (
 	google.golang.org/protobuf v1.32.0
 	gopkg.in/yaml.v2 v2.4.0
 	gopkg.in/yaml.v3 v3.0.1
-	k8s.io/api v0.29.1
-	k8s.io/apimachinery v0.29.1
-	k8s.io/client-go v0.29.1
+	k8s.io/api v0.28.6
+	k8s.io/apimachinery v0.28.6
+	k8s.io/client-go v0.28.6
 	k8s.io/klog v1.0.0
 	k8s.io/klog/v2 v2.120.1
 )
diff --git a/go.sum b/go.sum
index c7850fd7bb6..fd9c104ca16 100644
--- a/go.sum
+++ b/go.sum
@@ -43,11 +43,9 @@ github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.1/go.mod h1:s4kgfzA0covAXNic
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.4.0 h1:QfV5XZt6iNa2aWMAt96CZEbfJ7kgG/qYIpq465Shr5E=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.4.0/go.mod h1:uYt4CfhkJA9o0FN7jfE5minm/i4nUE4MjGUJkzB6Zs8=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v2 v2.0.0 h1:PTFGRSlMKCQelWwxUyYVEUqseBJVemLyqWJjvMyt0do=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v2 v2.0.0/go.mod h1:LRr2FzBTQlONPPa5HREE5+RjSCTXl7BwOvYOaWTqCaI=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0 h1:bXwSugBiSbgtz7rOtbfGf+woewp4f06orW9OP5BjHLA=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0/go.mod h1:Y/HgrePTmGy9HjdSGTqZNa+apUpTVIEVKXJyARP2lrk=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.1.1 h1:7CBQ+Ei8SP2c6ydQTGCCrS35bDxgTMfoP2miAwK++OU=
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.1.1/go.mod h1:c/wcGeGx5FUPbM/JltUYHZcKmigwyVLJlDq+4HdtXaw=
 github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 h1:UQHMgLO+TxOElx5B5HZ4hJQsoJ/PvUvKRhJHDQXO8P8=
 github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
 github.com/AzureAD/microsoft-authentication-library-for-go v1.2.1 h1:DzHpqpoJVaCgOUdVHxE8QB52S6NiVdDQvGlny1qvPqA=
@@ -150,7 +148,6 @@ github.com/digitalocean/godo v1.108.0/go.mod h1:R6EmmWI8CT1+fCtjWY9UCB+L5uufuZH1
 github.com/distribution/reference v0.5.0 h1:/FUIFXtfc/x2gpa5/VGfiGLuOIdYa1t65IKK2OFGvA0=
 github.com/distribution/reference v0.5.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
 github.com/dnaeon/go-vcr v1.2.0 h1:zHCHvJYTMh1N7xnV7zf1m1GPBF9Ad0Jk/whtQ1663qI=
-github.com/dnaeon/go-vcr v1.2.0/go.mod h1:R4UdLID7HZT3taECzJs4YgbbH6PIGXB6W/sc5OLb6RQ=
 github.com/docker/docker v25.0.0+incompatible h1:g9b6wZTblhMgzOT2tspESstfw6ySZ9kdm94BLDKaZac=
 github.com/docker/docker v25.0.0+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=
@@ -189,7 +186,6 @@ github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSw
 github.com/franela/goblin v0.0.0-20200105215937-c9ffbefa60db/go.mod h1:7dvUGVsVBjqR7JHJk0brhHOZYGmfBYOrK0ZhYMEtBr4=
 github.com/franela/goreq v0.0.0-20171204163338-bcd34c9993f8/go.mod h1:ZhphrRTfi2rbfLwlschooIH4+wKKDR4Pdxhh+TRoA20=
 github.com/frankban/quicktest v1.14.5 h1:dfYrrRyLtiqT9GyKXgdh+k4inNeTvmGbuSgZ3lx3GhA=
-github.com/frankban/quicktest v1.14.5/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
 github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
 github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=
 github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM=
@@ -258,7 +254,6 @@ github.com/go-resty/resty/v2 v2.11.0/go.mod h1:iiP/OpA0CkcL3IGt1O0+/SIItFUbkkyw5
 github.com/go-sql-driver/mysql v1.4.0/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
 github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 h1:tfuBGBXKqDEevZMzYi5KSi8KkcZtzBcTgAUUtapy0OI=
-github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572/go.mod h1:9Pwr4B2jHnOSGXyyzV8ROjYa2ojvAY6HCGYYfMoC3Ls=
 github.com/go-zookeeper/zk v1.0.3 h1:7M2kwOsc//9VeeFiPtf+uSJlVpU66x9Ba5+8XK7/TDg=
 github.com/go-zookeeper/zk v1.0.3/go.mod h1:nOB03cncLtlp4t+UAkGSV+9beXP/akpekBwL+UX1Qcw=
 github.com/gobuffalo/attrs v0.0.0-20190224210810-a9411de4debd/go.mod h1:4duuawTqi2wkkpB4ePgWMaai6/Kc6WEz83bhFwpHzj0=
@@ -336,7 +331,6 @@ github.com/golang/snappy v0.0.4/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEW
 github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
 github.com/google/btree v1.0.0/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
 github.com/google/btree v1.0.1 h1:gK4Kx5IaGY9CD5sPJ36FHiBJ6ZXl0kilRiiCj+jdYp4=
-github.com/google/btree v1.0.1/go.mod h1:xXMiIv4Fb/0kKde4SpL7qlzvu5cMJDRkFDxJfI9uaxA=
 github.com/google/gnostic-models v0.6.8 h1:yo/ABAfM5IMRsS1VnXjTBvUb61tFIHozhlYvRgGre9I=
 github.com/google/gnostic-models v0.6.8/go.mod h1:5n7qKqH0f5wFt+aWF8CW6pZLLNOfYuF5OpfBSENuI8U=
 github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
@@ -406,7 +400,6 @@ github.com/hashicorp/consul/api v1.27.0 h1:gmJ6DPKQog1426xsdmgk5iqDyoRiNc+ipBdJO
 github.com/hashicorp/consul/api v1.27.0/go.mod h1:JkekNRSou9lANFdt+4IKx3Za7XY0JzzpQjEb4Ivo1c8=
 github.com/hashicorp/consul/sdk v0.3.0/go.mod h1:VKf9jXwCTEY1QZP2MOLRhb5i/I/ssyNV1vwHyQBF0x8=
 github.com/hashicorp/consul/sdk v0.15.1 h1:kKIGxc7CZtflcF5DLfHeq7rOQmRq3vk7kwISN9bif8Q=
-github.com/hashicorp/consul/sdk v0.15.1/go.mod h1:7pxqqhqoaPqnBnzXD1StKed62LqJeClzVsUEy85Zr0A=
 github.com/hashicorp/cronexpr v1.1.2 h1:wG/ZYIKT+RT3QkOdgYc+xsKWVRgnxJ1OJtjjy84fJ9A=
 github.com/hashicorp/cronexpr v1.1.2/go.mod h1:P4wA0KBl9C5q2hABiMO7cp6jcIg96CDh1Efb3g1PWA4=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
@@ -424,7 +417,6 @@ github.com/hashicorp/go-immutable-radix v1.3.1 h1:DKHmCUm2hRBK510BaiZlwvpD40f8bJ
 github.com/hashicorp/go-immutable-radix v1.3.1/go.mod h1:0y9vanUI8NX6FsYoO3zeMjhV/C5i9g4Q3DwcSNZ4P60=
 github.com/hashicorp/go-msgpack v0.5.3/go.mod h1:ahLV/dePpqEmjfWmKiqvPkv/twdG7iPBM1vqhUKIvfM=
 github.com/hashicorp/go-msgpack v0.5.5 h1:i9R9JSrqIz0QVLz3sz+i3YJdT7TTSLcfLLzJi9aZTuI=
-github.com/hashicorp/go-msgpack v0.5.5/go.mod h1:ahLV/dePpqEmjfWmKiqvPkv/twdG7iPBM1vqhUKIvfM=
 github.com/hashicorp/go-multierror v1.0.0/go.mod h1:dHtQlpGsu+cZNNAkkCN/P3hoUDHhCYQXV3UM06sGGrk=
 github.com/hashicorp/go-multierror v1.1.0/go.mod h1:spPvp8C1qA32ftKqdAHm4hHTbPw+vmowP0z+KUhOZdA=
 github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
@@ -437,12 +429,10 @@ github.com/hashicorp/go-rootcerts v1.0.2 h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5O
 github.com/hashicorp/go-rootcerts v1.0.2/go.mod h1:pqUvnprVnM5bf7AOirdbb01K4ccR319Vf4pU3K5EGc8=
 github.com/hashicorp/go-sockaddr v1.0.0/go.mod h1:7Xibr9yA9JjQq1JpNB2Vw7kxv8xerXegt+ozgdvDeDU=
 github.com/hashicorp/go-sockaddr v1.0.2 h1:ztczhD1jLxIRjVejw8gFomI1BQZOe2WoVOu0SyteCQc=
-github.com/hashicorp/go-sockaddr v1.0.2/go.mod h1:rB4wwRAUzs07qva3c5SdrY/NEtAUjGlgmH/UkBUC97A=
 github.com/hashicorp/go-syslog v1.0.0/go.mod h1:qPfqrKkXGihmCqbJM2mZgkZGvKG1dFdvsLplgctolz4=
 github.com/hashicorp/go-uuid v1.0.0/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
 github.com/hashicorp/go-uuid v1.0.1/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
 github.com/hashicorp/go-uuid v1.0.3 h1:2gKiV6YVmrJ1i2CKKa9obLvRieoRGviZFL26PcT/Co8=
-github.com/hashicorp/go-uuid v1.0.3/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=
 github.com/hashicorp/go-version v1.2.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
 github.com/hashicorp/go-version v1.6.0 h1:feTTfFNnjP967rlCxM/I9g701jU+RN74YKx2mOkIeek=
 github.com/hashicorp/go-version v1.6.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
@@ -474,7 +464,6 @@ github.com/influxdata/influxdb1-client v0.0.0-20191209144304-8bf82d3c094d/go.mod
 github.com/ionos-cloud/sdk-go/v6 v6.1.11 h1:J/uRN4UWO3wCyGOeDdMKv8LWRzKu6UIkLEaes38Kzh8=
 github.com/ionos-cloud/sdk-go/v6 v6.1.11/go.mod h1:EzEgRIDxBELvfoa/uBN0kOQaqovLjUWEB7iW4/Q+t4k=
 github.com/jarcoal/httpmock v1.3.0 h1:2RJ8GP0IIaWwcC9Fp2BmVi8Kog3v2Hn7VXM3fTd+nuc=
-github.com/jarcoal/httpmock v1.3.0/go.mod h1:3yb8rc4BI7TCBhFY8ng0gjuLKJNquuDNiPaZjnENuYg=
 github.com/jmespath/go-jmespath v0.0.0-20180206201540-c2b33e8439af/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
 github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo=
@@ -517,7 +506,6 @@ github.com/kr/logfmt v0.0.0-20140226030751-b84e30acd515/go.mod h1:+0opPa2QZZtGFB
 github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
-github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
@@ -555,7 +543,6 @@ github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D
 github.com/mattn/go-runewidth v0.0.2/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU=
 github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
 github.com/maxatome/go-testdeep v1.12.0 h1:Ql7Go8Tg0C1D/uMMX59LAoYK7LffeJQ6X2T04nTH68g=
-github.com/maxatome/go-testdeep v1.12.0/go.mod h1:lPZc/HAcJMP92l7yI6TRz1aZN5URwUBUAfUNvrclaNM=
 github.com/miekg/dns v1.0.14/go.mod h1:W1PPwlIAgtquWBMBEV9nkV9Cazfe8ScdGz/Lj7v3Nrg=
 github.com/miekg/dns v1.1.26/go.mod h1:bPDLeHnStXmXAq1m/Ch/hvfNHr14JKNPMBo3VZKjuso=
 github.com/miekg/dns v1.1.41/go.mod h1:p6aan82bvRIyn+zDIv9xYNUpwa73JcSh9BKwknJysuI=
@@ -568,7 +555,6 @@ github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG
 github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/mitchellh/go-testing-interface v1.0.0/go.mod h1:kRemZodwjscx+RGhAo8eIhFbs2+BFgRtFPeD/KE+zxI=
 github.com/mitchellh/go-testing-interface v1.14.1 h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=
-github.com/mitchellh/go-testing-interface v1.14.1/go.mod h1:gfgS7OtZj6MA4U1UrDRp04twqAjfvlZyCfX3sDjEym8=
 github.com/mitchellh/gox v0.4.0/go.mod h1:Sd9lOJ0+aimLBi73mGofS1ycjY8lL3uZM3JPS42BGNg=
 github.com/mitchellh/iochan v1.0.0/go.mod h1:JwYml1nuB7xOzsp52dPpHFffvOCDupsG0QubkSMEySY=
 github.com/mitchellh/mapstructure v0.0.0-20160808181253-ca63d7c062ee/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
@@ -614,11 +600,9 @@ github.com/olekukonko/tablewriter v0.0.0-20170122224234-a0225b3f23b5/go.mod h1:v
 github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo v1.7.0 h1:WSHQ+IS43OoUrWtD1/bbclrwK8TTH5hzp+umCiuxHgs=
 github.com/onsi/ginkgo v1.7.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
-github.com/onsi/ginkgo/v2 v2.13.0 h1:0jY9lJquiL8fcf3M4LAXN5aMlS/b2BV86HFFPCPMgE4=
-github.com/onsi/ginkgo/v2 v2.13.0/go.mod h1:TE309ZR8s5FsKKpuB1YAQYBzCaAfUgatB/xlT/ETL/o=
+github.com/onsi/ginkgo/v2 v2.9.4 h1:xR7vG4IXt5RWx6FfIjyAtsoMAtnc3C/rFXBBd2AjZwE=
 github.com/onsi/gomega v1.4.3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
-github.com/onsi/gomega v1.29.0 h1:KIA/t2t5UBzoirT4H9tsML45GEbo3ouUnBHsCfD2tVg=
-github.com/onsi/gomega v1.29.0/go.mod h1:9sxs+SwGrKI0+PWe4Fxa9tFQQBG5xSsSbMXOI8PPpoQ=
+github.com/onsi/gomega v1.27.6 h1:ENqfyGeS5AX/rlXDd/ETokDz93u0YufY1Pgxuy/PvWE=
 github.com/op/go-logging v0.0.0-20160315200505-970db520ece7/go.mod h1:HzydrMdWErDVzsI23lYNej1Htcns9BCg93Dk0bBINWk=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
@@ -660,7 +644,6 @@ github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH
 github.com/posener/complete v1.1.1/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndrE9hABlRI=
 github.com/posener/complete v1.2.3/go.mod h1:WZIdtGGp+qx0sLrYKtIRAruyNpv6hFCicSgv7Sy7s/s=
 github.com/prashantv/gostub v1.1.0 h1:BTyx3RfQjRHnUWaGF9oQos79AlQ5k8WNktv7VGvVH4g=
-github.com/prashantv/gostub v1.1.0/go.mod h1:A5zLQHz7ieHGG7is6LLXLz7I8+3LZzsrV0P1IAHhP5U=
 github.com/prometheus/alertmanager v0.26.0 h1:uOMJWfIwJguc3NaM3appWNbbrh6G/OjvaHMk22aBBYc=
 github.com/prometheus/alertmanager v0.26.0/go.mod h1:rVcnARltVjavgVaNnmevxK7kOn7IZavyf0KNgHkbEpU=
 github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
@@ -710,7 +693,6 @@ github.com/rogpeppe/go-internal v1.1.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFR
 github.com/rogpeppe/go-internal v1.2.2/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
-github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
 github.com/russross/blackfriday/v2 v2.0.1/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/ryanuber/columnize v0.0.0-20160712163229-9b3edd62028f/go.mod h1:sm1tb6uqfes/u+d4ooFouqFdy9/2g9QGwK3SQygK0Ts=
 github.com/samuel/go-zookeeper v0.0.0-20190923202752-2cc03de413da/go.mod h1:gi+0XIa01GRL2eRQVjQkKGqKF3SF9vZR/HnPullcV2E=
@@ -719,7 +701,6 @@ github.com/scaleway/scaleway-sdk-go v1.0.0-beta.22/go.mod h1:fCa7OJZ/9DRTnOKmxvT
 github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 h1:nn5Wsu0esKSJiIVhscUtVbo7ada43DJhG55ua/hjS5I=
 github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529/go.mod h1:DxrIzT+xaE7yg65j358z/aeFdxmN0P9QXhEzd20vsDc=
 github.com/shoenig/test v0.6.6 h1:Oe8TPH9wAbv++YPNDKJWUnI8Q4PPWCx3UbOfH+FxiMU=
-github.com/shoenig/test v0.6.6/go.mod h1:byHiCGXqrVaflBLAMq/srcZIHynQPQgeyvkvXnjqq0k=
 github.com/shurcooL/httpfs v0.0.0-20230704072500-f1e31cf0ba5c h1:aqg5Vm5dwtvL+YgDpBcK1ITf3o96N/K7/wsRXQnUTEs=
 github.com/shurcooL/httpfs v0.0.0-20230704072500-f1e31cf0ba5c/go.mod h1:owqhoLW1qZoYLZzLnBw+QkPP9WZnjlSWihhxAJC1+/M=
 github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
@@ -1262,12 +1243,12 @@ honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWh
 honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
 honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
-k8s.io/api v0.29.1 h1:DAjwWX/9YT7NQD4INu49ROJuZAAAP/Ijki48GUPzxqw=
-k8s.io/api v0.29.1/go.mod h1:7Kl10vBRUXhnQQI8YR/R327zXC8eJ7887/+Ybta+RoQ=
-k8s.io/apimachinery v0.29.1 h1:KY4/E6km/wLBguvCZv8cKTeOwwOBqFNjwJIdMkMbbRc=
-k8s.io/apimachinery v0.29.1/go.mod h1:6HVkd1FwxIagpYrHSwJlQqZI3G9LfYWRPAkUvLnXTKU=
-k8s.io/client-go v0.29.1 h1:19B/+2NGEwnFLzt0uB5kNJnfTsbV8w6TgQRz9l7ti7A=
-k8s.io/client-go v0.29.1/go.mod h1:TDG/psL9hdet0TI9mGyHJSgRkW3H9JZk2dNEUS7bRks=
+k8s.io/api v0.28.6 h1:yy6u9CuIhmg55YvF/BavPBBXB+5QicB64njJXxVnzLo=
+k8s.io/api v0.28.6/go.mod h1:AM6Ys6g9MY3dl/XNaNfg/GePI0FT7WBGu8efU/lirAo=
+k8s.io/apimachinery v0.28.6 h1:RsTeR4z6S07srPg6XYrwXpTJVMXsjPXn0ODakMytSW0=
+k8s.io/apimachinery v0.28.6/go.mod h1:QFNX/kCl/EMT2WTSz8k4WLCv2XnkOLMaL8GAVRMdpsA=
+k8s.io/client-go v0.28.6 h1:Gge6ziyIdafRchfoBKcpaARuz7jfrK1R1azuwORIsQI=
+k8s.io/client-go v0.28.6/go.mod h1:+nu0Yp21Oeo/cBCsprNVXB2BfJTV51lFfe5tXl2rUL8=
 k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 h1:aVUu9fTY98ivBPKR9Y5w/AuzbMm96cd3YHRTU83I780=
 k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00/go.mod h1:AsvuZPBlUDVuCdzJ87iajxtXuR9oktsTctW/R9wwouA=
 k8s.io/utils v0.0.0-20230726121419-3b25d923346b h1:sgn3ZU783SCgtaSJjpcVVlRqd6GSnlTLKgpAAttJvpI=

From de284944344a9746cf4d7465e3b23a2018a2ecba Mon Sep 17 00:00:00 2001
From: Arve Knudsen <arve.knudsen@gmail.com>
Date: Thu, 25 Jan 2024 14:27:43 +0100
Subject: [PATCH 120/132] Make update-copy.sh work for both OSX and GNU sed

Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>
---
 storage/remote/otlptranslator/update-copy.sh | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/storage/remote/otlptranslator/update-copy.sh b/storage/remote/otlptranslator/update-copy.sh
index ee7198706a6..10dc194d043 100755
--- a/storage/remote/otlptranslator/update-copy.sh
+++ b/storage/remote/otlptranslator/update-copy.sh
@@ -18,5 +18,10 @@ rm -rf ./prometheus/*_test.go
 
 rm -rf ./tmp
 
-sed -i 's#github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/prometheus#github.com/prometheus/prometheus/storage/remote/otlptranslator/prometheus#g' ./prometheusremotewrite/*.go
-sed -i '1s#^#// DO NOT EDIT. COPIED AS-IS. SEE ../README.md\n\n#g' ./prometheusremotewrite/*.go ./prometheus/*.go
+case $(sed --help 2>&1) in
+  *GNU*) set sed -i;;
+  *)     set sed -i '';;
+esac
+
+"$@" -e 's#github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/prometheus#github.com/prometheus/prometheus/storage/remote/otlptranslator/prometheus#g' ./prometheusremotewrite/*.go
+"$@" -e '1s#^#// DO NOT EDIT. COPIED AS-IS. SEE ../README.md\n\n#g' ./prometheusremotewrite/*.go ./prometheus/*.go

From a598ddfbc491a79d1c09964b51bb947ff198d660 Mon Sep 17 00:00:00 2001
From: Yury Molodov <yurymolodov@gmail.com>
Date: Fri, 26 Jan 2024 09:25:23 +0100
Subject: [PATCH 121/132] ui/fix: correct url handling for stacked graphs
 (#13460)

Signed-off-by: Yury Moladau <yurymolodov@gmail.com>
---
 web/ui/react-app/src/pages/graph/Panel.tsx | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/web/ui/react-app/src/pages/graph/Panel.tsx b/web/ui/react-app/src/pages/graph/Panel.tsx
index 501ab67c940..f60812a5031 100644
--- a/web/ui/react-app/src/pages/graph/Panel.tsx
+++ b/web/ui/react-app/src/pages/graph/Panel.tsx
@@ -194,7 +194,8 @@ class Panel extends Component<PanelProps, PanelState> {
       }
 
       const isHeatmap = isHeatmapData(query.data);
-      if (!isHeatmap) {
+      const isHeatmapDisplayMode = this.props.options.displayMode === GraphDisplayMode.Heatmap;
+      if (!isHeatmap && isHeatmapDisplayMode) {
         this.setOptions({ displayMode: GraphDisplayMode.Lines });
       }
 

From a577a0a542c01e863e6d53effd23457031b97e47 Mon Sep 17 00:00:00 2001
From: Filip Petkovski <filip.petkovsky@gmail.com>
Date: Fri, 26 Jan 2024 10:04:02 +0100
Subject: [PATCH 122/132] Fix last_over_time for native histograms

The last_over_time retains a histogram sample without making a copy.
This sample is now coming from the buffered iterator used for windowing functions,
and can be reused for reading subsequent samples as the iterator progresses.

I would propose copying the sample in the last_over_time function, similar to
how it is done for rate, sum_over_time and others.

Signed-off-by: Filip Petkovski <filip.petkovsky@gmail.com>
---
 promql/functions.go                    |  2 +-
 promql/testdata/native_histograms.test | 11 +++++++++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/promql/functions.go b/promql/functions.go
index aef73e7f2b5..a0a118c114b 100644
--- a/promql/functions.go
+++ b/promql/functions.go
@@ -603,7 +603,7 @@ func funcLastOverTime(vals []parser.Value, args parser.Expressions, enh *EvalNod
 	}
 	return append(enh.Out, Sample{
 		Metric: el.Metric,
-		H:      h.H,
+		H:      h.H.Copy(),
 	}), nil
 }
 
diff --git a/promql/testdata/native_histograms.test b/promql/testdata/native_histograms.test
index b74886f73e7..5f0945d32f5 100644
--- a/promql/testdata/native_histograms.test
+++ b/promql/testdata/native_histograms.test
@@ -224,3 +224,14 @@ eval instant at 5m histogram_fraction(0, 4, balanced_histogram)
 # the first populated bucket after the span of empty buckets.
 eval instant at 5m histogram_quantile(0.5, balanced_histogram)
 	{} 0.5
+
+# Add histogram to test sum(last_over_time) regression
+load 5m
+    incr_sum_histogram{number="1"} {{schema:0 sum:0 count:0 buckets:[1]}}+{{schema:0 sum:1 count:1 buckets:[1]}}x10
+    incr_sum_histogram{number="2"} {{schema:0 sum:0 count:0 buckets:[1]}}+{{schema:0 sum:2 count:1 buckets:[1]}}x10
+
+eval instant at 50m histogram_sum(sum(incr_sum_histogram))
+    {} 30
+
+eval instant at 50m histogram_sum(sum(last_over_time(incr_sum_histogram[5m])))
+    {} 30

From 452f4c96b790f2ed1d25c2f7daff2ac92a92448c Mon Sep 17 00:00:00 2001
From: Augustin Husson <husson.augustin@gmail.com>
Date: Tue, 13 Feb 2024 10:21:23 +0100
Subject: [PATCH 123/132] Cut v2.50.0-rc.0 (#13465)

Signed-off-by: Augustin Husson <husson.augustin@gmail.com>
---
 CHANGELOG.md                                 | 27 ++++++++++++++++++++
 VERSION                                      |  2 +-
 web/ui/module/codemirror-promql/package.json |  4 +--
 web/ui/module/lezer-promql/package.json      |  2 +-
 web/ui/package-lock.json                     | 14 +++++-----
 web/ui/package.json                          |  2 +-
 web/ui/react-app/package.json                |  4 +--
 7 files changed, 41 insertions(+), 14 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1f71eb49ba7..c1f8bf8003f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,32 @@
 # Changelog
 
+## 2.50.0-rc.0 / 2024-02-07
+
+* [CHANGE] Remote Write: Error `storage.ErrTooOldSample` is now generating HTTP error 400 instead of HTTP error 500. #13335
+* [FEATURE] Remote Write: Drop old inmemory samples. Activated using the config entry `sample_age_limit`. #13002
+* [FEATURE] **Experimental**: Add support for ingesting zeros as created timestamps. (enabled under the feature-flag `created-timestamp-zero-ingestion`). #12733 #13279
+* [FEATURE] Promtool: Add `analyze` histograms command. #12331
+* [FEATURE] TSDB/compaction: Add a way to enable overlapping compaction. #13282 #13393 #13398
+* [FEATURE] Add automatic memory limit handling. Activated using the feature flag. `auto-gomemlimit` #13395
+* [ENHANCEMENT] Promtool: allow specifying multiple matchers in `promtool tsdb dump`. #13296
+* [ENHANCEMENT] PromQL: Restore more efficient version of `NewPossibleNonCounterInfo` annotation. #13022
+* [ENHANCEMENT] Kuma SD: Extend configuration to allow users to specify client ID. #13278
+* [ENHANCEMENT] PromQL: Use natural sort in `sort_by_label` and `sort_by_label_desc`. This is **experimental**. #13411
+* [ENHANCEMENT] Native Histograms: support `native_histogram_min_bucket_factor` in scrape_config. #13222
+* [ENHANCEMENT] Native Histograms: Issue warning if histogramRate is applied to the wrong kind of histogram. #13392
+* [ENHANCEMENT] TSDB: Make transaction isolation data structures smaller. #13015
+* [ENHANCEMENT] TSDB/postings: Optimize merge using Loser Tree. #12878
+* [ENHANCEMENT] TSDB: Simplify internal series delete function. #13261
+* [ENHANCEMENT] Agent: Performance improvement by making the global hash lookup table smaller. #13262
+* [ENHANCEMENT] PromQL: faster execution of metric functions, e.g. abs(), rate() #13446
+* [ENHANCEMENT] TSDB: Optimize label values with matchers by taking shortcuts. #13426
+* [ENHANCEMENT] Kubernetes SD: Check preconditions earlier and avoid unnecessary checks or iterations in kube_sd. #13408
+* [ENHANCEMENT] Promtool: Improve visibility for `promtool test rules` with JSON colored formatting. #13342
+* [ENHANCEMENT] Consoles: Exclude iowait and steal from CPU Utilisation. #9593
+* [ENHANCEMENT] Various improvements and optimizations on Native Histograms. #13267, #13215, #13276 #13289, #13340
+* [BUGFIX] Scraping: Fix quality value in HTTP Accept header. #13313
+* [BUGFIX] UI: Fix usage of the function `time()` that was crashing. #13371
+
 ## 2.49.1 / 2024-01-15
 
 * [BUGFIX] TSDB: Fixed a wrong `q=` value in scrape accept header #13313
diff --git a/VERSION b/VERSION
index f5518081bd1..9f02570d13a 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-2.49.1
+2.50.0-rc.0
diff --git a/web/ui/module/codemirror-promql/package.json b/web/ui/module/codemirror-promql/package.json
index fb13605825e..bfbdd56e232 100644
--- a/web/ui/module/codemirror-promql/package.json
+++ b/web/ui/module/codemirror-promql/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/codemirror-promql",
-  "version": "0.49.1",
+  "version": "0.50.0-rc.0",
   "description": "a CodeMirror mode for the PromQL language",
   "types": "dist/esm/index.d.ts",
   "module": "dist/esm/index.js",
@@ -29,7 +29,7 @@
   },
   "homepage": "https://github.com/prometheus/prometheus/blob/main/web/ui/module/codemirror-promql/README.md",
   "dependencies": {
-    "@prometheus-io/lezer-promql": "0.49.1",
+    "@prometheus-io/lezer-promql": "0.50.0-rc.0",
     "lru-cache": "^7.18.3"
   },
   "devDependencies": {
diff --git a/web/ui/module/lezer-promql/package.json b/web/ui/module/lezer-promql/package.json
index a6bb3f3eb8a..aca68a67a05 100644
--- a/web/ui/module/lezer-promql/package.json
+++ b/web/ui/module/lezer-promql/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/lezer-promql",
-  "version": "0.49.1",
+  "version": "0.50.0-rc.0",
   "description": "lezer-based PromQL grammar",
   "main": "dist/index.cjs",
   "type": "module",
diff --git a/web/ui/package-lock.json b/web/ui/package-lock.json
index 5f1db6ce0ae..b2d136ceb99 100644
--- a/web/ui/package-lock.json
+++ b/web/ui/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "prometheus-io",
-  "version": "0.49.1",
+  "version": "0.50.0-rc.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "prometheus-io",
-      "version": "0.49.1",
+      "version": "0.50.0-rc.0",
       "workspaces": [
         "react-app",
         "module/*"
@@ -30,10 +30,10 @@
     },
     "module/codemirror-promql": {
       "name": "@prometheus-io/codemirror-promql",
-      "version": "0.49.1",
+      "version": "0.50.0-rc.0",
       "license": "Apache-2.0",
       "dependencies": {
-        "@prometheus-io/lezer-promql": "0.49.1",
+        "@prometheus-io/lezer-promql": "0.50.0-rc.0",
         "lru-cache": "^7.18.3"
       },
       "devDependencies": {
@@ -69,7 +69,7 @@
     },
     "module/lezer-promql": {
       "name": "@prometheus-io/lezer-promql",
-      "version": "0.49.1",
+      "version": "0.50.0-rc.0",
       "license": "Apache-2.0",
       "devDependencies": {
         "@lezer/generator": "^1.5.1",
@@ -19233,7 +19233,7 @@
     },
     "react-app": {
       "name": "@prometheus-io/app",
-      "version": "0.49.1",
+      "version": "0.50.0-rc.0",
       "dependencies": {
         "@codemirror/autocomplete": "^6.11.1",
         "@codemirror/commands": "^6.3.2",
@@ -19251,7 +19251,7 @@
         "@lezer/lr": "^1.3.14",
         "@nexucis/fuzzy": "^0.4.1",
         "@nexucis/kvsearch": "^0.8.1",
-        "@prometheus-io/codemirror-promql": "0.49.1",
+        "@prometheus-io/codemirror-promql": "0.50.0-rc.0",
         "bootstrap": "^4.6.2",
         "css.escape": "^1.5.1",
         "downshift": "^7.6.2",
diff --git a/web/ui/package.json b/web/ui/package.json
index 026c1663b3e..86a18f466ab 100644
--- a/web/ui/package.json
+++ b/web/ui/package.json
@@ -28,5 +28,5 @@
     "ts-jest": "^29.1.1",
     "typescript": "^4.9.5"
   },
-  "version": "0.49.1"
+  "version": "0.50.0-rc.0"
 }
diff --git a/web/ui/react-app/package.json b/web/ui/react-app/package.json
index 33fccf5c7c0..4bd707e98b0 100644
--- a/web/ui/react-app/package.json
+++ b/web/ui/react-app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/app",
-  "version": "0.49.1",
+  "version": "0.50.0-rc.0",
   "private": true,
   "dependencies": {
     "@codemirror/autocomplete": "^6.11.1",
@@ -19,7 +19,7 @@
     "@lezer/lr": "^1.3.14",
     "@nexucis/fuzzy": "^0.4.1",
     "@nexucis/kvsearch": "^0.8.1",
-    "@prometheus-io/codemirror-promql": "0.49.1",
+    "@prometheus-io/codemirror-promql": "0.50.0-rc.0",
     "bootstrap": "^4.6.2",
     "css.escape": "^1.5.1",
     "downshift": "^7.6.2",

From 0e8a2e44a4c54f70d1de052d52bb1304148ddfa5 Mon Sep 17 00:00:00 2001
From: Darshan Chaudhary <deathbullet@gmail.com>
Date: Wed, 14 Feb 2024 22:29:01 +0530
Subject: [PATCH 124/132] Azure SD: check for nil before accessing and
 dereferencing  (#13578)

Signed-off-by: darshanime <deathbullet@gmail.com>
---
 discovery/azure/azure.go      |  16 +++++-
 discovery/azure/azure_test.go | 101 ++++++++++++++++++++++++++++++++++
 2 files changed, 115 insertions(+), 2 deletions(-)

diff --git a/discovery/azure/azure.go b/discovery/azure/azure.go
index e5e6109b258..a5d81f4ff6e 100644
--- a/discovery/azure/azure.go
+++ b/discovery/azure/azure.go
@@ -569,7 +569,7 @@ func (client *azureClient) getScaleSetVMs(ctx context.Context, scaleSet armcompu
 }
 
 func mapFromVM(vm armcompute.VirtualMachine) virtualMachine {
-	osType := string(*vm.Properties.StorageProfile.OSDisk.OSType)
+	var osType string
 	tags := map[string]*string{}
 	networkInterfaces := []string{}
 	var computerName string
@@ -580,6 +580,12 @@ func mapFromVM(vm armcompute.VirtualMachine) virtualMachine {
 	}
 
 	if vm.Properties != nil {
+		if vm.Properties.StorageProfile != nil &&
+			vm.Properties.StorageProfile.OSDisk != nil &&
+			vm.Properties.StorageProfile.OSDisk.OSType != nil {
+			osType = string(*vm.Properties.StorageProfile.OSDisk.OSType)
+		}
+
 		if vm.Properties.NetworkProfile != nil {
 			for _, vmNIC := range vm.Properties.NetworkProfile.NetworkInterfaces {
 				networkInterfaces = append(networkInterfaces, *vmNIC.ID)
@@ -608,7 +614,7 @@ func mapFromVM(vm armcompute.VirtualMachine) virtualMachine {
 }
 
 func mapFromVMScaleSetVM(vm armcompute.VirtualMachineScaleSetVM, scaleSetName string) virtualMachine {
-	osType := string(*vm.Properties.StorageProfile.OSDisk.OSType)
+	var osType string
 	tags := map[string]*string{}
 	networkInterfaces := []string{}
 	var computerName string
@@ -619,6 +625,12 @@ func mapFromVMScaleSetVM(vm armcompute.VirtualMachineScaleSetVM, scaleSetName st
 	}
 
 	if vm.Properties != nil {
+		if vm.Properties.StorageProfile != nil &&
+			vm.Properties.StorageProfile.OSDisk != nil &&
+			vm.Properties.StorageProfile.OSDisk.OSType != nil {
+			osType = string(*vm.Properties.StorageProfile.OSDisk.OSType)
+		}
+
 		if vm.Properties.NetworkProfile != nil {
 			for _, vmNIC := range vm.Properties.NetworkProfile.NetworkInterfaces {
 				networkInterfaces = append(networkInterfaces, *vmNIC.ID)
diff --git a/discovery/azure/azure_test.go b/discovery/azure/azure_test.go
index 4ff937e0bc4..1e437c75f21 100644
--- a/discovery/azure/azure_test.go
+++ b/discovery/azure/azure_test.go
@@ -79,6 +79,55 @@ func TestMapFromVMWithEmptyTags(t *testing.T) {
 	require.Equal(t, expectedVM, actualVM)
 }
 
+func TestMapFromVMWithEmptyOSType(t *testing.T) {
+	id := "test"
+	name := "name"
+	size := "size"
+	vmSize := armcompute.VirtualMachineSizeTypes(size)
+	vmType := "type"
+	location := "westeurope"
+	computerName := "computer_name"
+	networkProfile := armcompute.NetworkProfile{
+		NetworkInterfaces: []*armcompute.NetworkInterfaceReference{},
+	}
+	properties := &armcompute.VirtualMachineProperties{
+		OSProfile: &armcompute.OSProfile{
+			ComputerName: &computerName,
+		},
+		StorageProfile: &armcompute.StorageProfile{
+			OSDisk: &armcompute.OSDisk{},
+		},
+		NetworkProfile: &networkProfile,
+		HardwareProfile: &armcompute.HardwareProfile{
+			VMSize: &vmSize,
+		},
+	}
+
+	testVM := armcompute.VirtualMachine{
+		ID:         &id,
+		Name:       &name,
+		Type:       &vmType,
+		Location:   &location,
+		Tags:       nil,
+		Properties: properties,
+	}
+
+	expectedVM := virtualMachine{
+		ID:                id,
+		Name:              name,
+		ComputerName:      computerName,
+		Type:              vmType,
+		Location:          location,
+		Tags:              map[string]*string{},
+		NetworkInterfaces: []string{},
+		Size:              size,
+	}
+
+	actualVM := mapFromVM(testVM)
+
+	require.Equal(t, expectedVM, actualVM)
+}
+
 func TestMapFromVMWithTags(t *testing.T) {
 	id := "test"
 	name := "name"
@@ -193,6 +242,58 @@ func TestMapFromVMScaleSetVMWithEmptyTags(t *testing.T) {
 	require.Equal(t, expectedVM, actualVM)
 }
 
+func TestMapFromVMScaleSetVMWithEmptyOSType(t *testing.T) {
+	id := "test"
+	name := "name"
+	size := "size"
+	vmSize := armcompute.VirtualMachineSizeTypes(size)
+	vmType := "type"
+	instanceID := "123"
+	location := "westeurope"
+	computerName := "computer_name"
+	networkProfile := armcompute.NetworkProfile{
+		NetworkInterfaces: []*armcompute.NetworkInterfaceReference{},
+	}
+	properties := &armcompute.VirtualMachineScaleSetVMProperties{
+		OSProfile: &armcompute.OSProfile{
+			ComputerName: &computerName,
+		},
+		StorageProfile: &armcompute.StorageProfile{},
+		NetworkProfile: &networkProfile,
+		HardwareProfile: &armcompute.HardwareProfile{
+			VMSize: &vmSize,
+		},
+	}
+
+	testVM := armcompute.VirtualMachineScaleSetVM{
+		ID:         &id,
+		Name:       &name,
+		Type:       &vmType,
+		InstanceID: &instanceID,
+		Location:   &location,
+		Tags:       nil,
+		Properties: properties,
+	}
+
+	scaleSet := "testSet"
+	expectedVM := virtualMachine{
+		ID:                id,
+		Name:              name,
+		ComputerName:      computerName,
+		Type:              vmType,
+		Location:          location,
+		Tags:              map[string]*string{},
+		NetworkInterfaces: []string{},
+		ScaleSet:          scaleSet,
+		InstanceID:        instanceID,
+		Size:              size,
+	}
+
+	actualVM := mapFromVMScaleSetVM(testVM, scaleSet)
+
+	require.Equal(t, expectedVM, actualVM)
+}
+
 func TestMapFromVMScaleSetVMWithTags(t *testing.T) {
 	id := "test"
 	name := "name"

From 93591ec5cc00a4459c74c777bd06b58af8857e23 Mon Sep 17 00:00:00 2001
From: Augustin Husson <husson.augustin@gmail.com>
Date: Mon, 19 Feb 2024 14:15:03 +0100
Subject: [PATCH 125/132] Cut v2.50.0-rc.1 (#13602)

Signed-off-by: Augustin Husson <husson.augustin@gmail.com>
---
 CHANGELOG.md                                 |  4 ++++
 VERSION                                      |  2 +-
 web/ui/module/codemirror-promql/package.json |  4 ++--
 web/ui/module/lezer-promql/package.json      |  2 +-
 web/ui/package-lock.json                     | 14 +++++++-------
 web/ui/package.json                          |  2 +-
 web/ui/react-app/package.json                |  4 ++--
 7 files changed, 18 insertions(+), 14 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c1f8bf8003f..4b3f13b4324 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 2.50.0-rc.1 / 2024-02-19
+
+[BUGFIX] Azure SD: Fix SD crashing when it finds a VM scale set. #13578
+
 ## 2.50.0-rc.0 / 2024-02-07
 
 * [CHANGE] Remote Write: Error `storage.ErrTooOldSample` is now generating HTTP error 400 instead of HTTP error 500. #13335
diff --git a/VERSION b/VERSION
index 9f02570d13a..782980c6115 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-2.50.0-rc.0
+2.50.0-rc.1
diff --git a/web/ui/module/codemirror-promql/package.json b/web/ui/module/codemirror-promql/package.json
index bfbdd56e232..3975c7a4b49 100644
--- a/web/ui/module/codemirror-promql/package.json
+++ b/web/ui/module/codemirror-promql/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/codemirror-promql",
-  "version": "0.50.0-rc.0",
+  "version": "0.50.0-rc.1",
   "description": "a CodeMirror mode for the PromQL language",
   "types": "dist/esm/index.d.ts",
   "module": "dist/esm/index.js",
@@ -29,7 +29,7 @@
   },
   "homepage": "https://github.com/prometheus/prometheus/blob/main/web/ui/module/codemirror-promql/README.md",
   "dependencies": {
-    "@prometheus-io/lezer-promql": "0.50.0-rc.0",
+    "@prometheus-io/lezer-promql": "0.50.0-rc.1",
     "lru-cache": "^7.18.3"
   },
   "devDependencies": {
diff --git a/web/ui/module/lezer-promql/package.json b/web/ui/module/lezer-promql/package.json
index aca68a67a05..0eb5b3473f8 100644
--- a/web/ui/module/lezer-promql/package.json
+++ b/web/ui/module/lezer-promql/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/lezer-promql",
-  "version": "0.50.0-rc.0",
+  "version": "0.50.0-rc.1",
   "description": "lezer-based PromQL grammar",
   "main": "dist/index.cjs",
   "type": "module",
diff --git a/web/ui/package-lock.json b/web/ui/package-lock.json
index b2d136ceb99..dab335a77b4 100644
--- a/web/ui/package-lock.json
+++ b/web/ui/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "prometheus-io",
-  "version": "0.50.0-rc.0",
+  "version": "0.50.0-rc.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "prometheus-io",
-      "version": "0.50.0-rc.0",
+      "version": "0.50.0-rc.1",
       "workspaces": [
         "react-app",
         "module/*"
@@ -30,10 +30,10 @@
     },
     "module/codemirror-promql": {
       "name": "@prometheus-io/codemirror-promql",
-      "version": "0.50.0-rc.0",
+      "version": "0.50.0-rc.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@prometheus-io/lezer-promql": "0.50.0-rc.0",
+        "@prometheus-io/lezer-promql": "0.50.0-rc.1",
         "lru-cache": "^7.18.3"
       },
       "devDependencies": {
@@ -69,7 +69,7 @@
     },
     "module/lezer-promql": {
       "name": "@prometheus-io/lezer-promql",
-      "version": "0.50.0-rc.0",
+      "version": "0.50.0-rc.1",
       "license": "Apache-2.0",
       "devDependencies": {
         "@lezer/generator": "^1.5.1",
@@ -19233,7 +19233,7 @@
     },
     "react-app": {
       "name": "@prometheus-io/app",
-      "version": "0.50.0-rc.0",
+      "version": "0.50.0-rc.1",
       "dependencies": {
         "@codemirror/autocomplete": "^6.11.1",
         "@codemirror/commands": "^6.3.2",
@@ -19251,7 +19251,7 @@
         "@lezer/lr": "^1.3.14",
         "@nexucis/fuzzy": "^0.4.1",
         "@nexucis/kvsearch": "^0.8.1",
-        "@prometheus-io/codemirror-promql": "0.50.0-rc.0",
+        "@prometheus-io/codemirror-promql": "0.50.0-rc.1",
         "bootstrap": "^4.6.2",
         "css.escape": "^1.5.1",
         "downshift": "^7.6.2",
diff --git a/web/ui/package.json b/web/ui/package.json
index 86a18f466ab..5b2cb68e5d2 100644
--- a/web/ui/package.json
+++ b/web/ui/package.json
@@ -28,5 +28,5 @@
     "ts-jest": "^29.1.1",
     "typescript": "^4.9.5"
   },
-  "version": "0.50.0-rc.0"
+  "version": "0.50.0-rc.1"
 }
diff --git a/web/ui/react-app/package.json b/web/ui/react-app/package.json
index 4bd707e98b0..ab75cda7844 100644
--- a/web/ui/react-app/package.json
+++ b/web/ui/react-app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/app",
-  "version": "0.50.0-rc.0",
+  "version": "0.50.0-rc.1",
   "private": true,
   "dependencies": {
     "@codemirror/autocomplete": "^6.11.1",
@@ -19,7 +19,7 @@
     "@lezer/lr": "^1.3.14",
     "@nexucis/fuzzy": "^0.4.1",
     "@nexucis/kvsearch": "^0.8.1",
-    "@prometheus-io/codemirror-promql": "0.50.0-rc.0",
+    "@prometheus-io/codemirror-promql": "0.50.0-rc.1",
     "bootstrap": "^4.6.2",
     "css.escape": "^1.5.1",
     "downshift": "^7.6.2",

From 814b920e8a6345d35712b5857ebd4cb5e90fc107 Mon Sep 17 00:00:00 2001
From: Augustin Husson <husson.augustin@gmail.com>
Date: Thu, 22 Feb 2024 10:21:59 +0100
Subject: [PATCH 126/132] Cut v2.50.0 (#13612)

Signed-off-by: Augustin Husson <husson.augustin@gmail.com>
---
 CHANGELOG.md                                 |  7 ++-----
 VERSION                                      |  2 +-
 web/ui/module/codemirror-promql/package.json |  4 ++--
 web/ui/module/lezer-promql/package.json      |  2 +-
 web/ui/package-lock.json                     | 14 +++++++-------
 web/ui/package.json                          |  2 +-
 web/ui/react-app/package.json                |  4 ++--
 7 files changed, 16 insertions(+), 19 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4b3f13b4324..0b8a42c8ff1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,10 +1,6 @@
 # Changelog
 
-## 2.50.0-rc.1 / 2024-02-19
-
-[BUGFIX] Azure SD: Fix SD crashing when it finds a VM scale set. #13578
-
-## 2.50.0-rc.0 / 2024-02-07
+## 2.50.0 / 2024-02-22
 
 * [CHANGE] Remote Write: Error `storage.ErrTooOldSample` is now generating HTTP error 400 instead of HTTP error 500. #13335
 * [FEATURE] Remote Write: Drop old inmemory samples. Activated using the config entry `sample_age_limit`. #13002
@@ -30,6 +26,7 @@
 * [ENHANCEMENT] Various improvements and optimizations on Native Histograms. #13267, #13215, #13276 #13289, #13340
 * [BUGFIX] Scraping: Fix quality value in HTTP Accept header. #13313
 * [BUGFIX] UI: Fix usage of the function `time()` that was crashing. #13371
+* [BUGFIX] Azure SD: Fix SD crashing when it finds a VM scale set. #13578
 
 ## 2.49.1 / 2024-01-15
 
diff --git a/VERSION b/VERSION
index 782980c6115..9e29315acba 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-2.50.0-rc.1
+2.50.0
diff --git a/web/ui/module/codemirror-promql/package.json b/web/ui/module/codemirror-promql/package.json
index 3975c7a4b49..fb199ff5dba 100644
--- a/web/ui/module/codemirror-promql/package.json
+++ b/web/ui/module/codemirror-promql/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/codemirror-promql",
-  "version": "0.50.0-rc.1",
+  "version": "0.50.0",
   "description": "a CodeMirror mode for the PromQL language",
   "types": "dist/esm/index.d.ts",
   "module": "dist/esm/index.js",
@@ -29,7 +29,7 @@
   },
   "homepage": "https://github.com/prometheus/prometheus/blob/main/web/ui/module/codemirror-promql/README.md",
   "dependencies": {
-    "@prometheus-io/lezer-promql": "0.50.0-rc.1",
+    "@prometheus-io/lezer-promql": "0.50.0",
     "lru-cache": "^7.18.3"
   },
   "devDependencies": {
diff --git a/web/ui/module/lezer-promql/package.json b/web/ui/module/lezer-promql/package.json
index 0eb5b3473f8..8490a37208f 100644
--- a/web/ui/module/lezer-promql/package.json
+++ b/web/ui/module/lezer-promql/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/lezer-promql",
-  "version": "0.50.0-rc.1",
+  "version": "0.50.0",
   "description": "lezer-based PromQL grammar",
   "main": "dist/index.cjs",
   "type": "module",
diff --git a/web/ui/package-lock.json b/web/ui/package-lock.json
index dab335a77b4..62aad797273 100644
--- a/web/ui/package-lock.json
+++ b/web/ui/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "prometheus-io",
-  "version": "0.50.0-rc.1",
+  "version": "0.50.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "prometheus-io",
-      "version": "0.50.0-rc.1",
+      "version": "0.50.0",
       "workspaces": [
         "react-app",
         "module/*"
@@ -30,10 +30,10 @@
     },
     "module/codemirror-promql": {
       "name": "@prometheus-io/codemirror-promql",
-      "version": "0.50.0-rc.1",
+      "version": "0.50.0",
       "license": "Apache-2.0",
       "dependencies": {
-        "@prometheus-io/lezer-promql": "0.50.0-rc.1",
+        "@prometheus-io/lezer-promql": "0.50.0",
         "lru-cache": "^7.18.3"
       },
       "devDependencies": {
@@ -69,7 +69,7 @@
     },
     "module/lezer-promql": {
       "name": "@prometheus-io/lezer-promql",
-      "version": "0.50.0-rc.1",
+      "version": "0.50.0",
       "license": "Apache-2.0",
       "devDependencies": {
         "@lezer/generator": "^1.5.1",
@@ -19233,7 +19233,7 @@
     },
     "react-app": {
       "name": "@prometheus-io/app",
-      "version": "0.50.0-rc.1",
+      "version": "0.50.0",
       "dependencies": {
         "@codemirror/autocomplete": "^6.11.1",
         "@codemirror/commands": "^6.3.2",
@@ -19251,7 +19251,7 @@
         "@lezer/lr": "^1.3.14",
         "@nexucis/fuzzy": "^0.4.1",
         "@nexucis/kvsearch": "^0.8.1",
-        "@prometheus-io/codemirror-promql": "0.50.0-rc.1",
+        "@prometheus-io/codemirror-promql": "0.50.0",
         "bootstrap": "^4.6.2",
         "css.escape": "^1.5.1",
         "downshift": "^7.6.2",
diff --git a/web/ui/package.json b/web/ui/package.json
index 5b2cb68e5d2..af6bc6ddd06 100644
--- a/web/ui/package.json
+++ b/web/ui/package.json
@@ -28,5 +28,5 @@
     "ts-jest": "^29.1.1",
     "typescript": "^4.9.5"
   },
-  "version": "0.50.0-rc.1"
+  "version": "0.50.0"
 }
diff --git a/web/ui/react-app/package.json b/web/ui/react-app/package.json
index ab75cda7844..1164b0f774e 100644
--- a/web/ui/react-app/package.json
+++ b/web/ui/react-app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/app",
-  "version": "0.50.0-rc.1",
+  "version": "0.50.0",
   "private": true,
   "dependencies": {
     "@codemirror/autocomplete": "^6.11.1",
@@ -19,7 +19,7 @@
     "@lezer/lr": "^1.3.14",
     "@nexucis/fuzzy": "^0.4.1",
     "@nexucis/kvsearch": "^0.8.1",
-    "@prometheus-io/codemirror-promql": "0.50.0-rc.1",
+    "@prometheus-io/codemirror-promql": "0.50.0",
     "bootstrap": "^4.6.2",
     "css.escape": "^1.5.1",
     "downshift": "^7.6.2",

From eecaa71ff1c7ea3ede1b92949e93dec29a3693fc Mon Sep 17 00:00:00 2001
From: ismail simsek <ismailsimsek09@gmail.com>
Date: Mon, 26 Feb 2024 10:53:39 +0100
Subject: [PATCH 127/132] Fix: metadata API using wrong field names (#13633)

Fix is to add json tags to `Metadata` struct. Absence of these tags
causes Go to use the field name, which starts with an upper-case
letter and breaks the protocol.

Extend tests to verify the JSON response.

Signed-off-by: ismail simsek <ismailsimsek09@gmail.com>
---
 model/metadata/metadata.go |  6 +++---
 web/api/v1/api_test.go     | 19 ++++++++++++++++++-
 2 files changed, 21 insertions(+), 4 deletions(-)

diff --git a/model/metadata/metadata.go b/model/metadata/metadata.go
index f6f2827a466..1b7e63e0f35 100644
--- a/model/metadata/metadata.go
+++ b/model/metadata/metadata.go
@@ -17,7 +17,7 @@ import "github.com/prometheus/common/model"
 
 // Metadata stores a series' metadata information.
 type Metadata struct {
-	Type model.MetricType
-	Unit string
-	Help string
+	Type model.MetricType `json:"type"`
+	Unit string           `json:"unit"`
+	Help string           `json:"help"`
 }
diff --git a/web/api/v1/api_test.go b/web/api/v1/api_test.go
index c9ab84087e8..c3f88e20dfb 100644
--- a/web/api/v1/api_test.go
+++ b/web/api/v1/api_test.go
@@ -1066,6 +1066,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 		response              interface{}
 		responseLen           int
 		responseMetadataTotal int
+		responseAsJSON        string
 		errType               errorType
 		sorter                func(interface{})
 		metadata              []targetMetadata
@@ -1736,6 +1737,9 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 				"prometheus_engine_query_duration_seconds": {{Type: model.MetricTypeSummary, Help: "Query timings", Unit: ""}},
 				"go_info": {{Type: model.MetricTypeGauge, Help: "Information about the Go environment.", Unit: ""}},
 			},
+			responseAsJSON: `{"prometheus_engine_query_duration_seconds":[{"type":"summary","unit":"",
+"help":"Query timings"}], "go_info":[{"type":"gauge","unit":"",
+"help":"Information about the Go environment."}]}`,
 		},
 		// With duplicate metadata for a metric that comes from different targets.
 		{
@@ -1767,6 +1771,8 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 			response: map[string][]metadata.Metadata{
 				"go_threads": {{Type: model.MetricTypeGauge, Help: "Number of OS threads created"}},
 			},
+			responseAsJSON: `{"go_threads": [{"type":"gauge","unit":"",
+"help":"Number of OS threads created"}]}`,
 		},
 		// With non-duplicate metadata for the same metric from different targets.
 		{
@@ -1801,6 +1807,9 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					{Type: model.MetricTypeGauge, Help: "Number of OS threads that were created."},
 				},
 			},
+			responseAsJSON: `{"go_threads": [{"type":"gauge","unit":"",
+"help":"Number of OS threads created"},{"type":"gauge","unit":"",
+"help":"Number of OS threads that were created."}]}`,
 			sorter: func(m interface{}) {
 				v := m.(map[string][]metadata.Metadata)["go_threads"]
 
@@ -1828,7 +1837,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 						{
 							Metric: "prometheus_engine_query_duration_seconds",
 							Type:   model.MetricTypeSummary,
-							Help:   "Query Timmings.",
+							Help:   "Query Timings.",
 							Unit:   "",
 						},
 					},
@@ -1884,6 +1893,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					{Type: model.MetricTypeSummary, Help: "A summary of the GC invocation durations."},
 				},
 			},
+			responseAsJSON: `{"go_gc_duration_seconds":[{"help":"A summary of the GC invocation durations.","type":"summary","unit":""}],"go_threads": [{"type":"gauge","unit":"","help":"Number of OS threads created"}]}`,
 		},
 		// With a limit for the number of metadata per metric and per metric.
 		{
@@ -2007,6 +2017,7 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 					{Type: model.MetricTypeGauge, Help: "Number of OS threads that were created."},
 				},
 			},
+			responseAsJSON: `{"go_threads": [{"type":"gauge","unit":"","help":"Number of OS threads created"},{"type":"gauge","unit":"","help":"Number of OS threads that were created."}]}`,
 			sorter: func(m interface{}) {
 				v := m.(map[string][]metadata.Metadata)["go_threads"]
 
@@ -2880,6 +2891,12 @@ func testEndpoints(t *testing.T, api *API, tr *testTargetRetriever, es storage.E
 						}
 						assertAPIResponse(t, res.data, test.response)
 					}
+
+					if test.responseAsJSON != "" {
+						s, err := json.Marshal(res.data)
+						require.NoError(t, err)
+						require.JSONEq(t, test.responseAsJSON, string(s))
+					}
 				})
 			}
 		})

From e537d6d1c198af5ab2c6fe493db8072165accb36 Mon Sep 17 00:00:00 2001
From: Bryan Boreham <bjboreham@gmail.com>
Date: Mon, 26 Feb 2024 10:00:21 +0000
Subject: [PATCH 128/132] Cut 2.50.1 with metadata api bugfix

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
---
 CHANGELOG.md                                 |  4 ++++
 VERSION                                      |  2 +-
 web/ui/module/codemirror-promql/package.json |  4 ++--
 web/ui/module/lezer-promql/package.json      |  2 +-
 web/ui/package-lock.json                     | 14 +++++++-------
 web/ui/package.json                          |  2 +-
 web/ui/react-app/package.json                |  4 ++--
 7 files changed, 18 insertions(+), 14 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0b8a42c8ff1..0b0350004fd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 2.50.1 / 2024-02-26
+
+* [BUGFIX] API: Fix metadata API using wrong field names. #13633
+
 ## 2.50.0 / 2024-02-22
 
 * [CHANGE] Remote Write: Error `storage.ErrTooOldSample` is now generating HTTP error 400 instead of HTTP error 500. #13335
diff --git a/VERSION b/VERSION
index 9e29315acba..895eb8a3b25 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-2.50.0
+2.50.1
diff --git a/web/ui/module/codemirror-promql/package.json b/web/ui/module/codemirror-promql/package.json
index fb199ff5dba..89aa2e9ea25 100644
--- a/web/ui/module/codemirror-promql/package.json
+++ b/web/ui/module/codemirror-promql/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/codemirror-promql",
-  "version": "0.50.0",
+  "version": "0.50.1",
   "description": "a CodeMirror mode for the PromQL language",
   "types": "dist/esm/index.d.ts",
   "module": "dist/esm/index.js",
@@ -29,7 +29,7 @@
   },
   "homepage": "https://github.com/prometheus/prometheus/blob/main/web/ui/module/codemirror-promql/README.md",
   "dependencies": {
-    "@prometheus-io/lezer-promql": "0.50.0",
+    "@prometheus-io/lezer-promql": "0.50.1",
     "lru-cache": "^7.18.3"
   },
   "devDependencies": {
diff --git a/web/ui/module/lezer-promql/package.json b/web/ui/module/lezer-promql/package.json
index 8490a37208f..16f3f42637a 100644
--- a/web/ui/module/lezer-promql/package.json
+++ b/web/ui/module/lezer-promql/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/lezer-promql",
-  "version": "0.50.0",
+  "version": "0.50.1",
   "description": "lezer-based PromQL grammar",
   "main": "dist/index.cjs",
   "type": "module",
diff --git a/web/ui/package-lock.json b/web/ui/package-lock.json
index 62aad797273..c241d42e575 100644
--- a/web/ui/package-lock.json
+++ b/web/ui/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "prometheus-io",
-  "version": "0.50.0",
+  "version": "0.50.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "prometheus-io",
-      "version": "0.50.0",
+      "version": "0.50.1",
       "workspaces": [
         "react-app",
         "module/*"
@@ -30,10 +30,10 @@
     },
     "module/codemirror-promql": {
       "name": "@prometheus-io/codemirror-promql",
-      "version": "0.50.0",
+      "version": "0.50.1",
       "license": "Apache-2.0",
       "dependencies": {
-        "@prometheus-io/lezer-promql": "0.50.0",
+        "@prometheus-io/lezer-promql": "0.50.1",
         "lru-cache": "^7.18.3"
       },
       "devDependencies": {
@@ -69,7 +69,7 @@
     },
     "module/lezer-promql": {
       "name": "@prometheus-io/lezer-promql",
-      "version": "0.50.0",
+      "version": "0.50.1",
       "license": "Apache-2.0",
       "devDependencies": {
         "@lezer/generator": "^1.5.1",
@@ -19233,7 +19233,7 @@
     },
     "react-app": {
       "name": "@prometheus-io/app",
-      "version": "0.50.0",
+      "version": "0.50.1",
       "dependencies": {
         "@codemirror/autocomplete": "^6.11.1",
         "@codemirror/commands": "^6.3.2",
@@ -19251,7 +19251,7 @@
         "@lezer/lr": "^1.3.14",
         "@nexucis/fuzzy": "^0.4.1",
         "@nexucis/kvsearch": "^0.8.1",
-        "@prometheus-io/codemirror-promql": "0.50.0",
+        "@prometheus-io/codemirror-promql": "0.50.1",
         "bootstrap": "^4.6.2",
         "css.escape": "^1.5.1",
         "downshift": "^7.6.2",
diff --git a/web/ui/package.json b/web/ui/package.json
index af6bc6ddd06..a28cb80657b 100644
--- a/web/ui/package.json
+++ b/web/ui/package.json
@@ -28,5 +28,5 @@
     "ts-jest": "^29.1.1",
     "typescript": "^4.9.5"
   },
-  "version": "0.50.0"
+  "version": "0.50.1"
 }
diff --git a/web/ui/react-app/package.json b/web/ui/react-app/package.json
index 1164b0f774e..113b2298ce1 100644
--- a/web/ui/react-app/package.json
+++ b/web/ui/react-app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@prometheus-io/app",
-  "version": "0.50.0",
+  "version": "0.50.1",
   "private": true,
   "dependencies": {
     "@codemirror/autocomplete": "^6.11.1",
@@ -19,7 +19,7 @@
     "@lezer/lr": "^1.3.14",
     "@nexucis/fuzzy": "^0.4.1",
     "@nexucis/kvsearch": "^0.8.1",
-    "@prometheus-io/codemirror-promql": "0.50.0",
+    "@prometheus-io/codemirror-promql": "0.50.1",
     "bootstrap": "^4.6.2",
     "css.escape": "^1.5.1",
     "downshift": "^7.6.2",

From 8f4c990c273b752a9c27bbb32f4a4e2319ac0b83 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Wed, 28 Feb 2024 00:24:26 +0000
Subject: [PATCH 129/132] [bot] vendor: revendor

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
---
 .../azure-sdk-for-go/sdk/azcore/CHANGELOG.md  |   10 +
 .../sdk/azcore/internal/shared/constants.go   |    4 +-
 .../sdk/azcore/internal/shared/shared.go      |   62 +-
 .../sdk/azidentity/CHANGELOG.md               |   39 +-
 .../sdk/azidentity/MIGRATION.md               |    6 +-
 .../azure-sdk-for-go/sdk/azidentity/README.md |   40 +-
 .../sdk/azidentity/TOKEN_CACHING.MD           |   70 +
 .../sdk/azidentity/TROUBLESHOOTING.md         |   46 +-
 .../sdk/azidentity/assets.json                |    2 +-
 .../sdk/azidentity/authentication_record.go   |   95 +
 .../sdk/azidentity/azidentity.go              |   51 +-
 .../sdk/azidentity/azure_cli_credential.go    |   70 +-
 .../azure_developer_cli_credential.go         |  169 +
 .../azure-sdk-for-go/sdk/azidentity/ci.yml    |    1 +
 .../azidentity/client_assertion_credential.go |   26 +-
 .../client_certificate_credential.go          |   25 +-
 .../azidentity/client_secret_credential.go    |   24 +-
 .../sdk/azidentity/confidential_client.go     |   32 +-
 .../azidentity/default_azure_credential.go    |   16 +-
 .../azidentity/developer_credential_util.go   |   38 +
 .../sdk/azidentity/device_code_credential.go  |   54 +-
 .../sdk/azidentity/environment_credential.go  |    4 +-
 .../azure-sdk-for-go/sdk/azidentity/errors.go |   14 +-
 .../azure-sdk-for-go/sdk/azidentity/go.work   |    6 +
 .../sdk/azidentity/go.work.sum                |   39 +
 .../interactive_browser_credential.go         |   50 +-
 .../sdk/azidentity/internal/exported.go       |   18 +
 .../sdk/azidentity/internal/internal.go       |   31 +
 .../sdk/azidentity/managed_identity_client.go |   54 +-
 .../azidentity/managed_identity_credential.go |   20 +-
 .../sdk/azidentity/on_behalf_of_credential.go |   17 +-
 .../sdk/azidentity/public_client.go           |  133 +-
 .../username_password_credential.go           |   40 +-
 .../sdk/azidentity/version.go                 |    5 +-
 .../sdk/azidentity/workload_identity.go       |   11 +-
 .../compute/armcompute/v4/autorest.md         |   12 -
 .../armcompute/{v4 => v5}/CHANGELOG.md        |  146 +-
 .../compute/armcompute/{v4 => v5}/LICENSE.txt |    0
 .../compute/armcompute/{v4 => v5}/README.md   |   12 +-
 .../compute/armcompute/{v4 => v5}/assets.json |    2 +-
 .../compute/armcompute/v5/autorest.md         |   13 +
 .../{v4 => v5}/availabilitysets_client.go     |  144 +-
 .../compute/armcompute/{v4 => v5}/build.go    |    0
 .../capacityreservationgroups_client.go       |  146 +-
 .../{v4 => v5}/capacityreservations_client.go |  146 +-
 .../compute/armcompute/{v4 => v5}/ci.yml      |    0
 .../armcompute/{v4 => v5}/client_factory.go   |  250 +-
 .../cloudserviceoperatingsystems_client.go    |   77 +-
 .../cloudserviceroleinstances_client.go       |  162 +-
 .../{v4 => v5}/cloudserviceroles_client.go    |   41 +-
 .../{v4 => v5}/cloudservices_client.go        |  314 +-
 .../cloudservicesupdatedomain_client.go       |   69 +-
 .../{v4 => v5}/communitygalleries_client.go   |   24 +-
 .../communitygalleryimages_client.go          |   49 +-
 .../communitygalleryimageversions_client.go   |   49 +-
 .../armcompute/{v4 => v5}/constants.go        |  420 +-
 .../{v4 => v5}/dedicatedhostgroups_client.go  |  138 +-
 .../{v4 => v5}/dedicatedhosts_client.go       |  338 +-
 .../{v4 => v5}/diskaccesses_client.go         |  297 +-
 .../{v4 => v5}/diskencryptionsets_client.go   |  196 +-
 .../{v4 => v5}/diskrestorepoint_client.go     |  110 +-
 .../armcompute/{v4 => v5}/disks_client.go     |  232 +-
 .../armcompute/{v4 => v5}/galleries_client.go |  171 +-
 .../{v4 => v5}/galleryapplications_client.go  |  146 +-
 .../galleryapplicationversions_client.go      |  146 +-
 .../{v4 => v5}/galleryimages_client.go        |  146 +-
 .../{v4 => v5}/galleryimageversions_client.go |  146 +-
 .../gallerysharingprofile_client.go           |   39 +-
 .../armcompute/{v4 => v5}/images_client.go    |  174 +-
 .../{v4 => v5}/loganalytics_client.go         |   71 +-
 .../compute/armcompute/{v4 => v5}/models.go   | 3081 +++------
 .../armcompute/{v4 => v5}/models_serde.go     | 1190 +++-
 .../{v4 => v5}/operations_client.go           |   11 +-
 .../compute/armcompute/v5/options.go          | 1979 ++++++
 .../proximityplacementgroups_client.go        |  138 +-
 .../{v4 => v5}/resourceskus_client.go         |   26 +-
 .../armcompute/{v4 => v5}/response_types.go   |  258 +-
 .../restorepointcollections_client.go         |  151 +-
 .../{v4 => v5}/restorepoints_client.go        |   87 +-
 .../{v4 => v5}/sharedgalleries_client.go      |   49 +-
 .../{v4 => v5}/sharedgalleryimages_client.go  |   49 +-
 .../sharedgalleryimageversions_client.go      |   49 +-
 .../armcompute/{v4 => v5}/snapshots_client.go |  232 +-
 .../{v4 => v5}/sshpublickeys_client.go        |  163 +-
 .../armcompute/{v4 => v5}/time_rfc3339.go     |   43 +-
 .../armcompute/{v4 => v5}/usage_client.go     |   30 +-
 .../virtualmachineextensionimages_client.go   |   62 +-
 .../virtualmachineextensions_client.go        |  140 +-
 .../{v4 => v5}/virtualmachineimages_client.go |  119 +-
 .../virtualmachineimagesedgezone_client.go    |  100 +-
 .../virtualmachineruncommands_client.go       |  190 +-
 .../{v4 => v5}/virtualmachines_client.go      |  764 ++-
 ...virtualmachinescalesetextensions_client.go |  146 +-
 ...almachinescalesetrollingupgrades_client.go |  111 +-
 .../virtualmachinescalesets_client.go         |  855 ++-
 ...rtualmachinescalesetvmextensions_client.go |  140 +-
 ...tualmachinescalesetvmruncommands_client.go |  146 +-
 .../virtualmachinescalesetvms_client.go       |  609 +-
 .../{v4 => v5}/virtualmachinesizes_client.go  |   11 +-
 .../network/armnetwork/v2/autorest.md         |   12 -
 .../armnetwork/{v2 => v4}/CHANGELOG.md        |  118 +
 .../network/armnetwork/{v2 => v4}/LICENSE.txt |    0
 .../network/armnetwork/{v2 => v4}/README.md   |    8 +
 .../{v2 => v4}/adminrulecollections_client.go |  101 +-
 .../{v2 => v4}/adminrules_client.go           |  101 +-
 ...atewayprivateendpointconnections_client.go |  110 +-
 ...ationgatewayprivatelinkresources_client.go |   30 +-
 .../{v2 => v4}/applicationgateways_client.go  |  415 +-
 ...cationgatewaywafdynamicmanifests_client.go |   30 +-
 ...atewaywafdynamicmanifestsdefault_client.go |   24 +-
 .../applicationsecuritygroups_client.go       |  159 +-
 .../network/armnetwork/{v2 => v4}/assets.json |    2 +-
 .../network/armnetwork/v4/autorest.md         |   13 +
 .../{v2 => v4}/availabledelegations_client.go |   30 +-
 .../availableendpointservices_client.go       |   30 +-
 .../availableprivateendpointtypes_client.go   |   55 +-
 ...vailableresourcegroupdelegations_client.go |   30 +-
 .../availableservicealiases_client.go         |   55 +-
 .../azurefirewallfqdntags_client.go           |   30 +-
 .../{v2 => v4}/azurefirewalls_client.go       |  277 +-
 .../{v2 => v4}/bastionhosts_client.go         |  168 +-
 .../bgpservicecommunities_client.go           |   30 +-
 .../network/armnetwork/{v2 => v4}/build.go    |    0
 .../network/armnetwork/{v2 => v4}/ci.yml      |    0
 .../armnetwork/{v2 => v4}/client_factory.go   |  597 +-
 .../configurationpolicygroups_client.go       |  110 +-
 .../{v2 => v4}/connectionmonitors_client.go   |  199 +-
 .../connectivityconfigurations_client.go      |  101 +-
 .../armnetwork/{v2 => v4}/constants.go        |  265 +-
 .../{v2 => v4}/customipprefixes_client.go     |  159 +-
 .../{v2 => v4}/ddoscustompolicies_client.go   |  109 +-
 .../{v2 => v4}/ddosprotectionplans_client.go  |  159 +-
 .../{v2 => v4}/defaultsecurityrules_client.go |   49 +-
 .../{v2 => v4}/dscpconfiguration_client.go    |  135 +-
 ...xpressroutecircuitauthorizations_client.go |  110 +-
 .../expressroutecircuitconnections_client.go  |  110 +-
 .../expressroutecircuitpeerings_client.go     |  110 +-
 .../{v2 => v4}/expressroutecircuits_client.go |  281 +-
 .../expressrouteconnections_client.go         |  104 +-
 ...ressroutecrossconnectionpeerings_client.go |  110 +-
 .../expressroutecrossconnections_client.go    |  215 +-
 .../{v2 => v4}/expressroutegateways_client.go |  156 +-
 .../{v2 => v4}/expressroutelinks_client.go    |   49 +-
 .../expressrouteportauthorizations_client.go  |  110 +-
 .../{v2 => v4}/expressrouteports_client.go    |  183 +-
 .../expressrouteportslocations_client.go      |   49 +-
 ...xpressrouteproviderportslocation_client.go |   24 +-
 .../expressrouteserviceproviders_client.go    |   30 +-
 .../{v2 => v4}/firewallpolicies_client.go     |  159 +-
 .../firewallpolicyidpssignatures_client.go    |   29 +-
 ...policyidpssignaturesfiltervalues_client.go |   29 +-
 ...allpolicyidpssignaturesoverrides_client.go |   91 +-
 ...rewallpolicyrulecollectiongroups_client.go |  110 +-
 .../armnetwork/{v2 => v4}/flowlogs_client.go  |  134 +-
 .../armnetwork/{v2 => v4}/groups_client.go    |  101 +-
 .../{v2 => v4}/hubroutetables_client.go       |  110 +-
 .../hubvirtualnetworkconnections_client.go    |  110 +-
 .../{v2 => v4}/inboundnatrules_client.go      |  110 +-
 .../{v2 => v4}/inboundsecurityrule_client.go  |   38 +-
 .../interfaceipconfigurations_client.go       |   49 +-
 .../interfaceloadbalancers_client.go          |   30 +-
 .../network/armnetwork/v4/interfaces.go       |   54 +
 .../{v2 => v4}/interfaces_client.go           |  377 +-
 .../interfacetapconfigurations_client.go      |  110 +-
 .../{v2 => v4}/ipallocations_client.go        |  159 +-
 .../armnetwork/{v2 => v4}/ipgroups_client.go  |  159 +-
 .../loadbalancerbackendaddresspools_client.go |  110 +-
 ...balancerfrontendipconfigurations_client.go |   49 +-
 .../loadbalancerloadbalancingrules_client.go  |   49 +-
 .../loadbalancernetworkinterfaces_client.go   |   30 +-
 .../loadbalanceroutboundrules_client.go       |   49 +-
 .../{v2 => v4}/loadbalancerprobes_client.go   |   49 +-
 .../{v2 => v4}/loadbalancers_client.go        |  296 +-
 .../{v2 => v4}/localnetworkgateways_client.go |  134 +-
 .../{v2 => v4}/management_client.go           |  365 +-
 ...ntgroupnetworkmanagerconnections_client.go |   89 +-
 .../{v2 => v4}/managercommits_client.go       |   38 +-
 .../managerdeploymentstatus_client.go         |   29 +-
 .../armnetwork/{v2 => v4}/managers_client.go  |  150 +-
 .../network/armnetwork/{v2 => v4}/models.go   | 4260 +------------
 .../armnetwork/{v2 => v4}/models_serde.go     |  967 ++-
 .../{v2 => v4}/natgateways_client.go          |  159 +-
 .../armnetwork/{v2 => v4}/natrules_client.go  |  110 +-
 .../{v2 => v4}/operations_client.go           |   30 +-
 .../network/armnetwork/v4/options.go          | 3927 ++++++++++++
 .../{v2 => v4}/p2svpngateways_client.go       |  323 +-
 .../{v2 => v4}/packetcaptures_client.go       |  147 +-
 ...erexpressroutecircuitconnections_client.go |   49 +-
 .../{v2 => v4}/polymorphic_helpers.go         |   28 +-
 .../{v2 => v4}/privatednszonegroups_client.go |  110 +-
 .../{v2 => v4}/privateendpoints_client.go     |  135 +-
 .../{v2 => v4}/privatelinkservices_client.go  |  347 +-
 .../armnetwork/{v2 => v4}/profiles_client.go  |  150 +-
 .../{v2 => v4}/publicipaddresses_client.go    |  313 +-
 .../{v2 => v4}/publicipprefixes_client.go     |  159 +-
 .../resourcenavigationlinks_client.go         |   24 +-
 .../armnetwork/{v2 => v4}/response_types.go   |  581 +-
 .../{v2 => v4}/routefilterrules_client.go     |  110 +-
 .../{v2 => v4}/routefilters_client.go         |  159 +-
 .../armnetwork/{v2 => v4}/routemaps_client.go |  110 +-
 .../armnetwork/{v2 => v4}/routes_client.go    |  110 +-
 .../{v2 => v4}/routetables_client.go          |  159 +-
 .../{v2 => v4}/routingintent_client.go        |  110 +-
 .../{v2 => v4}/scopeconnections_client.go     |   89 +-
 .../securityadminconfigurations_client.go     |  101 +-
 .../{v2 => v4}/securitygroups_client.go       |  159 +-
 .../securitypartnerproviders_client.go        |  159 +-
 .../{v2 => v4}/securityrules_client.go        |  110 +-
 .../serviceassociationlinks_client.go         |   24 +-
 .../serviceendpointpolicies_client.go         |  159 +-
 ...serviceendpointpolicydefinitions_client.go |  110 +-
 .../servicetaginformation_client.go           |   30 +-
 .../{v2 => v4}/servicetags_client.go          |   24 +-
 .../{v2 => v4}/staticmembers_client.go        |   89 +-
 .../armnetwork/{v2 => v4}/subnets_client.go   |  176 +-
 ...riptionnetworkmanagerconnections_client.go |   89 +-
 .../armnetwork/{v2 => v4}/time_rfc3339.go     |   43 +-
 .../armnetwork/{v2 => v4}/usages_client.go    |   30 +-
 .../armnetwork/{v2 => v4}/vipswap_client.go   |   77 +-
 .../v4/virtualapplianceconnections_client.go  |  349 +
 .../{v2 => v4}/virtualappliances_client.go    |  159 +-
 .../virtualappliancesites_client.go           |  110 +-
 .../{v2 => v4}/virtualapplianceskus_client.go |   49 +-
 .../virtualhubbgpconnection_client.go         |   85 +-
 .../virtualhubbgpconnections_client.go        |   86 +-
 .../virtualhubipconfiguration_client.go       |  110 +-
 .../virtualhubroutetablev2s_client.go         |  110 +-
 .../{v2 => v4}/virtualhubs_client.go          |  258 +-
 ...virtualnetworkgatewayconnections_client.go |  350 +-
 .../virtualnetworkgatewaynatrules_client.go   |  110 +-
 .../virtualnetworkgateways_client.go          |  633 +-
 .../virtualnetworkpeerings_client.go          |  110 +-
 .../{v2 => v4}/virtualnetworks_client.go      |  241 +-
 .../{v2 => v4}/virtualnetworktaps_client.go   |  159 +-
 .../virtualrouterpeerings_client.go           |  110 +-
 .../{v2 => v4}/virtualrouters_client.go       |  135 +-
 .../{v2 => v4}/virtualwans_client.go          |  159 +-
 .../{v2 => v4}/vpnconnections_client.go       |  176 +-
 .../{v2 => v4}/vpngateways_client.go          |  262 +-
 .../{v2 => v4}/vpnlinkconnections_client.go   |   86 +-
 .../vpnserverconfigurations_client.go         |  159 +-
 ...urationsassociatedwithvirtualwan_client.go |   33 +-
 .../vpnsitelinkconnections_client.go          |   24 +-
 .../{v2 => v4}/vpnsitelinks_client.go         |   49 +-
 .../armnetwork/{v2 => v4}/vpnsites_client.go  |  159 +-
 .../vpnsitesconfiguration_client.go           |   38 +-
 .../armnetwork/{v2 => v4}/watchers_client.go  |  499 +-
 .../webapplicationfirewallpolicies_client.go  |  126 +-
 .../{v2 => v4}/webcategories_client.go        |   49 +-
 .../apps/confidential/confidential.go         |   36 +-
 .../apps/internal/base/base.go                |   10 +
 .../internal/base/internal/storage/items.go   |   12 +-
 .../internal/storage/partitioned_storage.go   |   18 +-
 .../internal/base/internal/storage/storage.go |   97 +-
 .../apps/internal/oauth/oauth.go              |    1 +
 .../oauth/ops/accesstokens/accesstokens.go    |    6 +
 .../internal/oauth/ops/accesstokens/tokens.go |    1 +
 .../internal/oauth/ops/authority/authority.go |   37 +
 .../apps/internal/version/version.go          |    2 +-
 .../apps/public/public.go                     |   37 +-
 .../KimMachineGun/automemlimit/LICENSE        |   21 +
 .../automemlimit/memlimit/cgroups.go          |   12 +
 .../automemlimit/memlimit/cgroups_linux.go    |   98 +
 .../memlimit/cgroups_unsupported.go           |   20 +
 .../automemlimit/memlimit/exp_system.go       |   14 +
 .../automemlimit/memlimit/experiment.go       |   59 +
 .../automemlimit/memlimit/memlimit.go         |  177 +
 .../automemlimit/memlimit/provider.go         |   40 +
 .../github.com/aws/aws-sdk-go/aws/config.go   |   11 +
 .../aws/ec2metadata/token_provider.go         |    5 +-
 .../aws/aws-sdk-go/aws/endpoints/defaults.go  | 1961 +++++-
 .../github.com/aws/aws-sdk-go/aws/version.go  |    2 +-
 .../aws/aws-sdk-go/service/ec2/api.go         |  389 +-
 .../aws/aws-sdk-go/service/lightsail/api.go   | 1063 +++-
 .../github.com/bboreham/go-loser/.gitignore   |   21 +
 .../v2 => bboreham/go-loser}/LICENSE          |    4 +-
 vendor/github.com/bboreham/go-loser/README.md |    8 +
 vendor/github.com/bboreham/go-loser/tree.go   |  153 +
 vendor/github.com/cilium/ebpf/.clang-format   |   19 +
 vendor/github.com/cilium/ebpf/.gitignore      |   14 +
 vendor/github.com/cilium/ebpf/.golangci.yaml  |   26 +
 vendor/github.com/cilium/ebpf/ARCHITECTURE.md |   92 +
 .../github.com/cilium/ebpf/CODE_OF_CONDUCT.md |   46 +
 vendor/github.com/cilium/ebpf/CONTRIBUTING.md |   48 +
 vendor/github.com/cilium/ebpf/LICENSE         |   23 +
 vendor/github.com/cilium/ebpf/MAINTAINERS.md  |    3 +
 vendor/github.com/cilium/ebpf/Makefile        |  115 +
 vendor/github.com/cilium/ebpf/README.md       |   82 +
 vendor/github.com/cilium/ebpf/asm/alu.go      |  149 +
 .../github.com/cilium/ebpf/asm/alu_string.go  |  107 +
 vendor/github.com/cilium/ebpf/asm/doc.go      |    2 +
 vendor/github.com/cilium/ebpf/asm/func.go     |  250 +
 .../github.com/cilium/ebpf/asm/func_string.go |  235 +
 .../github.com/cilium/ebpf/asm/instruction.go |  877 +++
 vendor/github.com/cilium/ebpf/asm/jump.go     |  127 +
 .../github.com/cilium/ebpf/asm/jump_string.go |   53 +
 .../github.com/cilium/ebpf/asm/load_store.go  |  204 +
 .../cilium/ebpf/asm/load_store_string.go      |   80 +
 vendor/github.com/cilium/ebpf/asm/metadata.go |   80 +
 vendor/github.com/cilium/ebpf/asm/opcode.go   |  271 +
 .../cilium/ebpf/asm/opcode_string.go          |   30 +
 vendor/github.com/cilium/ebpf/asm/register.go |   51 +
 .../cilium/ebpf/attachtype_string.go          |   66 +
 vendor/github.com/cilium/ebpf/btf/btf.go      |  869 +++
 .../github.com/cilium/ebpf/btf/btf_types.go   |  371 ++
 .../cilium/ebpf/btf/btf_types_string.go       |   80 +
 vendor/github.com/cilium/ebpf/btf/core.go     | 1011 +++
 vendor/github.com/cilium/ebpf/btf/doc.go      |    5 +
 vendor/github.com/cilium/ebpf/btf/ext_info.go |  768 +++
 vendor/github.com/cilium/ebpf/btf/format.go   |  344 +
 vendor/github.com/cilium/ebpf/btf/handle.go   |  287 +
 vendor/github.com/cilium/ebpf/btf/marshal.go  |  543 ++
 vendor/github.com/cilium/ebpf/btf/strings.go  |  214 +
 .../github.com/cilium/ebpf/btf/traversal.go   |  141 +
 vendor/github.com/cilium/ebpf/btf/types.go    | 1258 ++++
 .../github.com/cilium/ebpf/btf/workarounds.go |   26 +
 vendor/github.com/cilium/ebpf/collection.go   |  841 +++
 vendor/github.com/cilium/ebpf/doc.go          |   25 +
 vendor/github.com/cilium/ebpf/elf_reader.go   | 1314 ++++
 vendor/github.com/cilium/ebpf/info.go         |  373 ++
 .../github.com/cilium/ebpf/internal/align.go  |    8 +
 .../github.com/cilium/ebpf/internal/buffer.go |   31 +
 vendor/github.com/cilium/ebpf/internal/cpu.go |   51 +
 .../github.com/cilium/ebpf/internal/deque.go  |   91 +
 vendor/github.com/cilium/ebpf/internal/elf.go |  102 +
 .../cilium/ebpf/internal/endian_be.go         |   12 +
 .../cilium/ebpf/internal/endian_le.go         |   12 +
 .../github.com/cilium/ebpf/internal/errors.go |  198 +
 .../cilium/ebpf/internal/feature.go           |  184 +
 vendor/github.com/cilium/ebpf/internal/io.go  |  128 +
 .../cilium/ebpf/internal/kconfig/kconfig.go   |  267 +
 .../cilium/ebpf/internal/memoize.go           |   26 +
 .../github.com/cilium/ebpf/internal/output.go |   97 +
 .../cilium/ebpf/internal/pinning.go           |   65 +
 .../cilium/ebpf/internal/platform.go          |   43 +
 .../github.com/cilium/ebpf/internal/prog.go   |   11 +
 .../github.com/cilium/ebpf/internal/statfs.go |   23 +
 .../cilium/ebpf/internal/sys/doc.go           |    6 +
 .../github.com/cilium/ebpf/internal/sys/fd.go |  133 +
 .../cilium/ebpf/internal/sys/fd_trace.go      |   93 +
 .../ebpf/internal/sys/mapflags_string.go      |   49 +
 .../cilium/ebpf/internal/sys/ptr.go           |   52 +
 .../cilium/ebpf/internal/sys/ptr_32_be.go     |   14 +
 .../cilium/ebpf/internal/sys/ptr_32_le.go     |   14 +
 .../cilium/ebpf/internal/sys/ptr_64.go        |   13 +
 .../cilium/ebpf/internal/sys/signals.go       |   83 +
 .../cilium/ebpf/internal/sys/syscall.go       |  178 +
 .../cilium/ebpf/internal/sys/types.go         | 1117 ++++
 .../cilium/ebpf/internal/tracefs/kprobe.go    |  359 ++
 .../ebpf/internal/tracefs/probetype_string.go |   24 +
 .../cilium/ebpf/internal/tracefs/uprobe.go    |   16 +
 .../cilium/ebpf/internal/unix/doc.go          |   11 +
 .../cilium/ebpf/internal/unix/types_linux.go  |  202 +
 .../cilium/ebpf/internal/unix/types_other.go  |  294 +
 .../github.com/cilium/ebpf/internal/vdso.go   |  153 +
 .../cilium/ebpf/internal/version.go           |  106 +
 vendor/github.com/cilium/ebpf/link/cgroup.go  |  190 +
 vendor/github.com/cilium/ebpf/link/doc.go     |    2 +
 vendor/github.com/cilium/ebpf/link/iter.go    |   85 +
 vendor/github.com/cilium/ebpf/link/kprobe.go  |  357 ++
 .../cilium/ebpf/link/kprobe_multi.go          |  180 +
 vendor/github.com/cilium/ebpf/link/link.go    |  336 +
 vendor/github.com/cilium/ebpf/link/netns.go   |   36 +
 .../github.com/cilium/ebpf/link/perf_event.go |  270 +
 vendor/github.com/cilium/ebpf/link/program.go |   76 +
 vendor/github.com/cilium/ebpf/link/query.go   |   63 +
 .../cilium/ebpf/link/raw_tracepoint.go        |   87 +
 .../cilium/ebpf/link/socket_filter.go         |   40 +
 .../github.com/cilium/ebpf/link/syscalls.go   |  123 +
 .../github.com/cilium/ebpf/link/tracepoint.go |   68 +
 vendor/github.com/cilium/ebpf/link/tracing.go |  199 +
 vendor/github.com/cilium/ebpf/link/uprobe.go  |  328 +
 vendor/github.com/cilium/ebpf/link/xdp.go     |   54 +
 vendor/github.com/cilium/ebpf/linker.go       |  391 ++
 vendor/github.com/cilium/ebpf/map.go          | 1478 +++++
 vendor/github.com/cilium/ebpf/marshalers.go   |  249 +
 vendor/github.com/cilium/ebpf/prog.go         | 1026 +++
 vendor/github.com/cilium/ebpf/run-tests.sh    |  152 +
 vendor/github.com/cilium/ebpf/syscalls.go     |  305 +
 vendor/github.com/cilium/ebpf/types.go        |  279 +
 vendor/github.com/cilium/ebpf/types_string.go |  118 +
 .../xds/go/udpa/annotations/migrate.pb.go     |    7 +-
 .../xds/go/udpa/annotations/security.pb.go    |    7 +-
 .../xds/go/udpa/annotations/sensitive.pb.go   |    7 +-
 .../cncf/xds/go/udpa/annotations/status.pb.go |    7 +-
 .../xds/go/udpa/annotations/versioning.pb.go  |    7 +-
 .../xds/go/xds/annotations/v3/migrate.pb.go   |    7 +-
 .../xds/go/xds/annotations/v3/security.pb.go  |    7 +-
 .../xds/go/xds/annotations/v3/sensitive.pb.go |    7 +-
 .../xds/go/xds/annotations/v3/status.pb.go    |    7 +-
 .../go/xds/annotations/v3/versioning.pb.go    |    7 +-
 .../cncf/xds/go/xds/core/v3/authority.pb.go   |    7 +-
 .../cncf/xds/go/xds/core/v3/cidr.pb.go        |    7 +-
 .../xds/go/xds/core/v3/collection_entry.pb.go |   20 +-
 .../xds/go/xds/core/v3/context_params.pb.go   |    7 +-
 .../cncf/xds/go/xds/core/v3/extension.pb.go   |   17 +-
 .../cncf/xds/go/xds/core/v3/resource.pb.go    |   15 +-
 .../xds/go/xds/core/v3/resource_locator.pb.go |    9 +-
 .../xds/go/xds/core/v3/resource_name.pb.go    |    7 +-
 .../containerd/cgroups/v3/.gitignore          |    2 +
 .../github.com/containerd/cgroups/v3/LICENSE  |  201 +
 .../github.com/containerd/cgroups/v3/Makefile |   29 +
 .../containerd/cgroups/v3/Protobuild.toml     |   31 +
 .../containerd/cgroups/v3/README.md           |  238 +
 .../containerd/cgroups/v3/cgroup1/blkio.go    |  361 ++
 .../containerd/cgroups/v3/cgroup1/cgroup.go   |  575 ++
 .../containerd/cgroups/v3/cgroup1/control.go  |   99 +
 .../containerd/cgroups/v3/cgroup1/cpu.go      |  125 +
 .../containerd/cgroups/v3/cgroup1/cpuacct.go  |  129 +
 .../containerd/cgroups/v3/cgroup1/cpuset.go   |  158 +
 .../containerd/cgroups/v3/cgroup1/devices.go  |   92 +
 .../containerd/cgroups/v3/cgroup1/errors.go   |   47 +
 .../containerd/cgroups/v3/cgroup1/freezer.go  |   82 +
 .../cgroups/v3/cgroup1/hierarchy.go           |   20 +
 .../containerd/cgroups/v3/cgroup1/hugetlb.go  |  109 +
 .../containerd/cgroups/v3/cgroup1/memory.go   |  483 ++
 .../containerd/cgroups/v3/cgroup1/named.go    |   39 +
 .../containerd/cgroups/v3/cgroup1/net_cls.go  |   61 +
 .../containerd/cgroups/v3/cgroup1/net_prio.go |   65 +
 .../containerd/cgroups/v3/cgroup1/opts.go     |   72 +
 .../containerd/cgroups/v3/cgroup1/paths.go    |  106 +
 .../cgroups/v3/cgroup1/perf_event.go          |   37 +
 .../containerd/cgroups/v3/cgroup1/pids.go     |   78 +
 .../containerd/cgroups/v3/cgroup1/rdma.go     |  153 +
 .../containerd/cgroups/v3/cgroup1/state.go    |   28 +
 .../cgroups/v3/cgroup1/stats/doc.go           |   17 +
 .../cgroups/v3/cgroup1/stats/metrics.pb.go    | 1959 ++++++
 .../cgroups/v3/cgroup1/stats/metrics.pb.txt   |  771 +++
 .../cgroups/v3/cgroup1/stats/metrics.proto    |  158 +
 .../cgroups/v3/cgroup1/subsystem.go           |  117 +
 .../containerd/cgroups/v3/cgroup1/systemd.go  |  157 +
 .../containerd/cgroups/v3/cgroup1/ticks.go    |   26 +
 .../containerd/cgroups/v3/cgroup1/utils.go    |  280 +
 .../containerd/cgroups/v3/cgroup1/v1.go       |   73 +
 .../containerd/cgroups/v3/cgroup2/cpu.go      |   83 +
 .../cgroups/v3/cgroup2/devicefilter.go        |  200 +
 .../containerd/cgroups/v3/cgroup2/ebpf.go     |   96 +
 .../containerd/cgroups/v3/cgroup2/errors.go   |   26 +
 .../containerd/cgroups/v3/cgroup2/hugetlb.go  |   37 +
 .../containerd/cgroups/v3/cgroup2/io.go       |   64 +
 .../containerd/cgroups/v3/cgroup2/manager.go  |  984 +++
 .../containerd/cgroups/v3/cgroup2/memory.go   |   59 +
 .../containerd/cgroups/v3/cgroup2/paths.go    |   60 +
 .../containerd/cgroups/v3/cgroup2/pids.go     |   37 +
 .../containerd/cgroups/v3/cgroup2/rdma.go     |   46 +
 .../containerd/cgroups/v3/cgroup2/state.go    |   65 +
 .../cgroups/v3/cgroup2/stats/doc.go           |   17 +
 .../cgroups/v3/cgroup2/stats/metrics.pb.go    | 1558 +++++
 .../cgroups/v3/cgroup2/stats/metrics.pb.txt   |  626 ++
 .../cgroups/v3/cgroup2/stats/metrics.proto    |  122 +
 .../containerd/cgroups/v3/cgroup2/utils.go    |  561 ++
 .../github.com/containerd/cgroups/v3/utils.go |  150 +
 .../coreos/go-systemd/v22/dbus/dbus.go        |  266 +
 .../coreos/go-systemd/v22/dbus/methods.go     |  864 +++
 .../coreos/go-systemd/v22/dbus/properties.go  |  237 +
 .../coreos/go-systemd/v22/dbus/set.go         |   47 +
 .../go-systemd/v22/dbus/subscription.go       |  333 +
 .../go-systemd/v22/dbus/subscription_set.go   |   57 +
 .../github.com/digitalocean/godo/CHANGELOG.md |   10 +
 .../github.com/digitalocean/godo/apps.gen.go  |   24 +-
 vendor/github.com/digitalocean/godo/apps.go   |    2 +
 .../digitalocean/godo/apps_accessors.go       |   24 +
 .../github.com/digitalocean/godo/databases.go |   23 +
 vendor/github.com/digitalocean/godo/godo.go   |    2 +-
 .../distribution/reference/.gitattributes     |    1 +
 .../distribution/reference/.gitignore         |    2 +
 .../distribution/reference/.golangci.yml      |   18 +
 .../distribution/reference/CODE-OF-CONDUCT.md |    5 +
 .../distribution/reference/CONTRIBUTING.md    |  114 +
 .../distribution/reference/GOVERNANCE.md      |  144 +
 .../reference}/LICENSE                        |    0
 .../distribution/reference/MAINTAINERS        |   26 +
 .../distribution/reference/Makefile           |   25 +
 .../distribution/reference/README.md          |   30 +
 .../distribution/reference/SECURITY.md        |    7 +
 .../reference/distribution-logo.svg           |    1 +
 .../distribution/reference/helpers.go         |    2 +-
 .../distribution/reference/normalize.go       |  131 +-
 .../distribution/reference/reference.go       |   27 +-
 .../distribution/reference/regexp.go          |  163 +
 .../github.com/distribution/reference/sort.go |   75 +
 .../docker/distribution/digestset/set.go      |  247 -
 .../docker/distribution/reference/regexp.go   |  143 -
 vendor/github.com/docker/docker/AUTHORS       |   49 +-
 vendor/github.com/docker/docker/api/README.md |    2 +-
 vendor/github.com/docker/docker/api/common.go |    2 +-
 .../docker/docker/api/common_unix.go          |    7 -
 .../docker/docker/api/common_windows.go       |    8 -
 .../github.com/docker/docker/api/swagger.yaml |  355 +-
 .../docker/docker/api/types/auth.go           |    7 -
 .../docker/api/types/checkpoint/list.go       |    7 +
 .../docker/api/types/checkpoint/options.go    |   19 +
 .../docker/docker/api/types/client.go         |   91 -
 .../docker/docker/api/types/configs.go        |   49 -
 .../container/change_response_deprecated.go   |    6 -
 .../docker/api/types/container/config.go      |   36 +-
 .../docker/api/types/container/errors.go      |    9 +
 .../docker/api/types/container/hostconfig.go  |   52 +-
 .../api/types/container/hostconfig_unix.go    |   15 +-
 .../api/types/container/hostconfig_windows.go |   10 +-
 .../docker/api/types/container/options.go     |   67 +
 .../docker/docker/api/types/events/events.go  |   84 +-
 .../delete_response.go}                       |    8 +-
 .../docker/docker/api/types/image/image.go    |    9 +
 .../{image_summary.go => image/summary.go}    |   15 +-
 .../docker/docker/api/types/mount/mount.go    |    7 +-
 .../docker/api/types/network/endpoint.go      |  144 +
 .../docker/docker/api/types/network/ipam.go   |  151 +
 .../docker/api/types/network/network.go       |   82 +-
 .../docker/api/types/registry/registry.go     |    4 +-
 .../docker/api/types/swarm/container.go       |   43 +-
 .../docker/api/types/swarm/runtime/gen.go     |    2 +-
 .../api/types/swarm/runtime/plugin.pb.go      |  400 +-
 .../api/types/swarm/runtime/plugin.proto      |    2 -
 .../docker/docker/api/types/swarm/service.go  |    6 +-
 .../types/swarm/service_create_response.go    |   20 +
 .../{ => swarm}/service_update_response.go    |    2 +-
 .../docker/docker/api/types/system/info.go    |  116 +
 .../docker/docker/api/types/system/runtime.go |   20 +
 .../docker/api/types/system/security_opts.go  |   48 +
 .../docker/docker/api/types/types.go          |  238 +-
 .../docker/api/types/types_deprecated.go      |  138 +
 .../github.com/docker/docker/client/README.md |   19 +-
 .../docker/docker/client/build_prune.go       |    2 +-
 .../docker/docker/client/checkpoint_create.go |    4 +-
 .../docker/docker/client/checkpoint_delete.go |    4 +-
 .../docker/docker/client/checkpoint_list.go   |    6 +-
 .../github.com/docker/docker/client/client.go |  168 +-
 .../docker/docker/client/client_unix.go       |    1 -
 .../docker/docker/client/config_create.go     |    2 +-
 .../docker/docker/client/config_inspect.go    |    2 +-
 .../docker/docker/client/config_list.go       |    2 +-
 .../docker/docker/client/config_remove.go     |    2 +-
 .../docker/docker/client/config_update.go     |    2 +-
 .../docker/docker/client/container_attach.go  |    9 +-
 .../docker/docker/client/container_commit.go  |    5 +-
 .../docker/docker/client/container_create.go  |   35 +-
 .../docker/docker/client/container_exec.go    |   15 +-
 .../docker/docker/client/container_list.go    |    4 +-
 .../docker/docker/client/container_logs.go    |    4 +-
 .../docker/docker/client/container_prune.go   |    2 +-
 .../docker/docker/client/container_remove.go  |    4 +-
 .../docker/docker/client/container_resize.go  |    6 +-
 .../docker/docker/client/container_restart.go |   12 +-
 .../docker/docker/client/container_start.go   |    4 +-
 .../docker/docker/client/container_stats.go   |   12 +-
 .../docker/docker/client/container_stop.go    |   12 +-
 .../docker/docker/client/container_wait.go    |   14 +-
 .../docker/client/distribution_inspect.go     |    7 +-
 .../github.com/docker/docker/client/errors.go |   30 +-
 .../github.com/docker/docker/client/hijack.go |   73 +-
 .../docker/docker/client/image_build.go       |   16 +-
 .../docker/docker/client/image_create.go      |    8 +-
 .../docker/docker/client/image_import.go      |    2 +-
 .../docker/docker/client/image_list.go        |   12 +-
 .../docker/docker/client/image_load.go        |    6 +-
 .../docker/docker/client/image_prune.go       |    2 +-
 .../docker/docker/client/image_pull.go        |    2 +-
 .../docker/docker/client/image_push.go        |    8 +-
 .../docker/docker/client/image_remove.go      |    5 +-
 .../docker/docker/client/image_search.go      |    6 +-
 .../docker/docker/client/image_tag.go         |    2 +-
 .../github.com/docker/docker/client/info.go   |    6 +-
 .../docker/docker/client/interface.go         |   31 +-
 .../docker/client/interface_experimental.go   |    8 +-
 .../docker/docker/client/network_create.go    |   12 +
 .../docker/docker/client/network_prune.go     |    2 +-
 .../docker/docker/client/node_list.go         |    1 -
 .../docker/docker/client/options.go           |  105 +-
 .../github.com/docker/docker/client/ping.go   |   12 +-
 .../docker/docker/client/plugin_install.go    |   13 +-
 .../docker/docker/client/plugin_push.go       |    6 +-
 .../docker/docker/client/plugin_upgrade.go    |   10 +-
 .../docker/docker/client/request.go           |   89 +-
 .../docker/docker/client/secret_create.go     |    2 +-
 .../docker/docker/client/secret_inspect.go    |    2 +-
 .../docker/docker/client/secret_list.go       |    2 +-
 .../docker/docker/client/secret_remove.go     |    2 +-
 .../docker/docker/client/secret_update.go     |    2 +-
 .../docker/docker/client/service_create.go    |   30 +-
 .../docker/docker/client/service_logs.go      |    4 +-
 .../docker/docker/client/service_update.go    |   31 +-
 .../docker/docker/client/task_logs.go         |    4 +-
 .../docker/docker/client/transport.go         |   17 -
 .../docker/docker/client/volume_prune.go      |    2 +-
 .../docker/docker/client/volume_remove.go     |   10 +-
 .../docker/docker/client/volume_update.go     |    2 +-
 .../github.com/docker/docker/errdefs/defs.go  |    2 +-
 .../docker/docker/errdefs/helpers.go          |    2 +-
 .../docker/docker/errdefs/http_helpers.go     |    2 +-
 vendor/github.com/docker/docker/errdefs/is.go |   18 +-
 .../docker/image/spec/specs-go/v1/image.go    |   54 +
 .../docker/internal/multierror/multierror.go  |   46 +
 .../emicklei/go-restful/v3/CHANGES.md         |    8 +-
 .../emicklei/go-restful/v3/README.md          |    9 +-
 .../emicklei/go-restful/v3/route.go           |   17 +-
 .../emicklei/go-restful/v3/route_builder.go   |   59 +-
 .../envoy/annotations/deprecation.pb.go       |    4 +-
 .../envoy/annotations/resource.pb.go          |    4 +-
 .../envoy/config/core/v3/address.pb.go        |  359 +-
 .../config/core/v3/address.pb.validate.go     |   29 +
 .../envoy/config/core/v3/backoff.pb.go        |   22 +-
 .../envoy/config/core/v3/base.pb.go           |  388 +-
 .../envoy/config/core/v3/base.pb.validate.go  |   11 +
 .../envoy/config/core/v3/config_source.pb.go  |   82 +-
 .../config/core/v3/event_service_config.pb.go |   25 +-
 .../envoy/config/core/v3/extension.pb.go      |   28 +-
 .../config/core/v3/grpc_method_list.pb.go     |   24 +-
 .../envoy/config/core/v3/grpc_service.pb.go   |   44 +-
 .../envoy/config/core/v3/health_check.pb.go   |   89 +-
 .../envoy/config/core/v3/http_service.pb.go   |  194 +
 .../core/v3/http_service.pb.validate.go       |  209 +
 .../envoy/config/core/v3/http_uri.pb.go       |   36 +-
 .../config/core/v3/http_uri.pb.validate.go    |    5 +-
 .../envoy/config/core/v3/protocol.pb.go       |  787 +--
 .../config/core/v3/protocol.pb.validate.go    |    4 +
 .../envoy/config/core/v3/proxy_protocol.pb.go |   24 +-
 .../envoy/config/core/v3/resolver.pb.go       |   22 +-
 .../envoy/config/core/v3/socket_option.pb.go  |   37 +-
 .../core/v3/substitution_format_string.pb.go  |  255 +-
 .../substitution_format_string.pb.validate.go |  133 +
 .../config/core/v3/udp_socket_config.pb.go    |   24 +-
 .../envoy/service/discovery/v3/ads.pb.go      |   24 +-
 .../service/discovery/v3/discovery.pb.go      |   70 +-
 .../envoy/type/matcher/v3/filter_state.pb.go  |   25 +-
 .../envoy/type/matcher/v3/http_inputs.pb.go   |   34 +-
 .../envoy/type/matcher/v3/metadata.pb.go      |   23 +-
 .../envoy/type/matcher/v3/node.pb.go          |   22 +-
 .../envoy/type/matcher/v3/number.pb.go        |   23 +-
 .../envoy/type/matcher/v3/path.pb.go          |   27 +-
 .../envoy/type/matcher/v3/regex.pb.go         |   60 +-
 .../type/matcher/v3/status_code_input.pb.go   |   24 +-
 .../envoy/type/matcher/v3/string.pb.go        |   35 +-
 .../envoy/type/matcher/v3/struct.pb.go        |   85 +-
 .../envoy/type/matcher/v3/value.pb.go         |  183 +-
 .../type/matcher/v3/value.pb.validate.go      |  186 +
 .../envoy/type/v3/hash_policy.pb.go           |   23 +-
 .../go-control-plane/envoy/type/v3/http.pb.go |   20 +-
 .../envoy/type/v3/http_status.pb.go           |   22 +-
 .../envoy/type/v3/percent.pb.go               |   20 +-
 .../envoy/type/v3/range.pb.go                 |   20 +-
 .../envoy/type/v3/ratelimit_strategy.pb.go    |   29 +-
 .../envoy/type/v3/ratelimit_unit.pb.go        |   20 +-
 .../envoy/type/v3/semantic_version.pb.go      |   22 +-
 .../envoy/type/v3/token_bucket.pb.go          |   24 +-
 .../validate/validate.proto                   |    8 +-
 vendor/github.com/facette/natsort/LICENSE     |   29 +
 vendor/github.com/facette/natsort/README.md   |  104 +
 vendor/github.com/facette/natsort/natsort.go  |   85 +
 vendor/github.com/go-logr/logr/README.md      |   73 +-
 vendor/github.com/go-logr/logr/context.go     |   33 +
 .../github.com/go-logr/logr/context_noslog.go |   49 +
 .../github.com/go-logr/logr/context_slog.go   |   83 +
 vendor/github.com/go-logr/logr/funcr/funcr.go |  185 +-
 .../github.com/go-logr/logr/funcr/slogsink.go |  105 +
 vendor/github.com/go-logr/logr/logr.go        |   43 -
 vendor/github.com/go-logr/logr/sloghandler.go |  192 +
 vendor/github.com/go-logr/logr/slogr.go       |  100 +
 vendor/github.com/go-logr/logr/slogsink.go    |  120 +
 .../go-openapi/errors/.golangci.yml           |   52 +-
 vendor/github.com/go-openapi/errors/README.md |    5 +-
 vendor/github.com/go-openapi/errors/api.go    |   18 +-
 vendor/github.com/go-openapi/errors/schema.go |    6 +-
 .../github.com/go-openapi/strfmt/default.go   |   52 +-
 vendor/github.com/go-resty/resty/v2/README.md |    6 +-
 vendor/github.com/go-resty/resty/v2/digest.go |    9 +-
 .../go-resty/resty/v2/middleware.go           |    1 -
 .../github.com/godbus/dbus/v5/CONTRIBUTING.md |   50 +
 vendor/github.com/godbus/dbus/v5/LICENSE      |   25 +
 vendor/github.com/godbus/dbus/v5/MAINTAINERS  |    3 +
 .../github.com/godbus/dbus/v5/README.markdown |   46 +
 vendor/github.com/godbus/dbus/v5/auth.go      |  252 +
 .../godbus/dbus/v5/auth_anonymous.go          |   16 +
 .../godbus/dbus/v5/auth_external.go           |   26 +
 vendor/github.com/godbus/dbus/v5/auth_sha1.go |  102 +
 vendor/github.com/godbus/dbus/v5/call.go      |   69 +
 vendor/github.com/godbus/dbus/v5/conn.go      |  959 +++
 .../github.com/godbus/dbus/v5/conn_darwin.go  |   37 +
 .../github.com/godbus/dbus/v5/conn_other.go   |   93 +
 vendor/github.com/godbus/dbus/v5/conn_unix.go |   17 +
 .../github.com/godbus/dbus/v5/conn_windows.go |   15 +
 vendor/github.com/godbus/dbus/v5/dbus.go      |  432 ++
 vendor/github.com/godbus/dbus/v5/decoder.go   |  286 +
 .../godbus/dbus/v5/default_handler.go         |  342 +
 vendor/github.com/godbus/dbus/v5/doc.go       |   69 +
 vendor/github.com/godbus/dbus/v5/encoder.go   |  210 +
 vendor/github.com/godbus/dbus/v5/export.go    |  441 ++
 vendor/github.com/godbus/dbus/v5/homedir.go   |   28 +
 .../godbus/dbus/v5/homedir_dynamic.go         |   15 +
 .../godbus/dbus/v5/homedir_static.go          |   45 +
 vendor/github.com/godbus/dbus/v5/match.go     |   89 +
 vendor/github.com/godbus/dbus/v5/message.go   |  353 ++
 vendor/github.com/godbus/dbus/v5/object.go    |  174 +
 vendor/github.com/godbus/dbus/v5/sequence.go  |   24 +
 .../godbus/dbus/v5/sequential_handler.go      |  125 +
 .../godbus/dbus/v5/server_interfaces.go       |  107 +
 vendor/github.com/godbus/dbus/v5/sig.go       |  259 +
 .../godbus/dbus/v5/transport_darwin.go        |    6 +
 .../godbus/dbus/v5/transport_generic.go       |   50 +
 .../godbus/dbus/v5/transport_nonce_tcp.go     |   39 +
 .../godbus/dbus/v5/transport_tcp.go           |   41 +
 .../godbus/dbus/v5/transport_unix.go          |  214 +
 .../dbus/v5/transport_unixcred_dragonfly.go   |   95 +
 .../dbus/v5/transport_unixcred_freebsd.go     |   92 +
 .../dbus/v5/transport_unixcred_linux.go       |   25 +
 .../dbus/v5/transport_unixcred_openbsd.go     |   14 +
 vendor/github.com/godbus/dbus/v5/variant.go   |  150 +
 .../godbus/dbus/v5/variant_lexer.go           |  284 +
 .../godbus/dbus/v5/variant_parser.go          |  817 +++
 .../golang-jwt/jwt/v5/MIGRATION_GUIDE.md      |   14 +-
 vendor/github.com/golang-jwt/jwt/v5/ecdsa.go  |    4 +-
 .../github.com/golang-jwt/jwt/v5/ed25519.go   |    7 +-
 .../golang-jwt/jwt/v5/errors_go_other.go      |    2 +-
 vendor/github.com/golang-jwt/jwt/v5/hmac.go   |    4 +-
 vendor/github.com/golang-jwt/jwt/v5/none.go   |    2 +-
 vendor/github.com/golang-jwt/jwt/v5/parser.go |   81 +-
 .../golang-jwt/jwt/v5/parser_option.go        |    8 +
 vendor/github.com/golang-jwt/jwt/v5/rsa.go    |    4 +-
 .../github.com/golang-jwt/jwt/v5/rsa_pss.go   |    4 +-
 vendor/github.com/golang-jwt/jwt/v5/token.go  |   14 +
 vendor/github.com/golang-jwt/jwt/v5/types.go  |    5 +-
 .../github.com/golang-jwt/jwt/v5/validator.go |   47 +-
 .../github.com/google/pprof/profile/encode.go |    3 +
 .../pprof/profile/legacy_java_profile.go      |    4 +-
 .../github.com/google/pprof/profile/merge.go  |    4 +-
 .../google/pprof/profile/profile.go           |   14 +-
 vendor/github.com/google/uuid/CHANGELOG.md    |    7 +
 vendor/github.com/google/uuid/time.go         |   21 +-
 vendor/github.com/google/uuid/uuid.go         |   53 +
 vendor/github.com/google/uuid/version6.go     |   56 +
 vendor/github.com/google/uuid/version7.go     |   75 +
 .../hashicorp/consul/api/.copywrite.hcl       |    2 +-
 vendor/github.com/hashicorp/consul/api/acl.go |    3 +
 .../hashicorp/consul/api/config_entry.go      |    1 +
 .../hcloud-go/v2/hcloud/client.go             |   15 +-
 .../hcloud-go/v2/hcloud/datacenter.go         |    5 +-
 .../hetznercloud/hcloud-go/v2/hcloud/error.go |    7 +
 .../hcloud-go/v2/hcloud/hcloud.go             |    2 +-
 .../hcloud-go/v2/hcloud/interface_gen.go      |   22 +
 .../internal/instrumentation/metrics.go       |    6 +-
 .../hcloud-go/v2/hcloud/load_balancer_type.go |    1 +
 .../hcloud-go/v2/hcloud/schema.go             | 1317 +---
 .../hcloud-go/v2/hcloud/schema/datacenter.go  |   20 +-
 .../hcloud-go/v2/hcloud/schema/image.go       |    6 +-
 .../hcloud-go/v2/hcloud/schema/iso.go         |   13 +-
 .../v2/hcloud/schema/load_balancer_type.go    |    1 +
 .../hcloud-go/v2/hcloud/schema/server.go      |    1 +
 .../hcloud-go/v2/hcloud/schema/server_type.go |    1 +
 .../hcloud-go/v2/hcloud/schema_assign.go      |   15 +
 .../hcloud-go/v2/hcloud/schema_gen.go         |  928 +++
 .../hcloud-go/v2/hcloud/server.go             |    1 +
 .../v2/hcloud/zz_action_client_iface.go       |   60 +
 .../v2/hcloud/zz_certificate_client_iface.go  |   40 +
 .../v2/hcloud/zz_datacenter_client_iface.go   |   27 +
 .../v2/hcloud/zz_firewall_client_iface.go     |   37 +
 .../v2/hcloud/zz_floating_ip_client_iface.go  |   43 +
 .../v2/hcloud/zz_image_client_iface.go        |   48 +
 .../v2/hcloud/zz_iso_client_iface.go          |   26 +
 .../hcloud/zz_load_balancer_client_iface.go   |   71 +
 .../zz_load_balancer_type_client_iface.go     |   27 +
 .../v2/hcloud/zz_location_client_iface.go     |   27 +
 .../v2/hcloud/zz_network_client_iface.go      |   45 +
 .../hcloud/zz_placement_group_client_iface.go |   33 +
 .../v2/hcloud/zz_pricing_client_iface.go      |   13 +
 .../v2/hcloud/zz_primary_ip_client_iface.go   |   43 +
 .../v2/hcloud/zz_rdns_client_iface.go         |   15 +
 .../hcloud/zz_resource_action_client_iface.go |   20 +
 .../hcloud-go/v2/hcloud/zz_schema.go          | 2476 ++++++++
 .../v2/hcloud/zz_server_client_iface.go       |   90 +
 .../v2/hcloud/zz_server_type_client_iface.go  |   27 +
 .../v2/hcloud/zz_ssh_key_client_iface.go      |   35 +
 .../v2/hcloud/zz_volume_client_iface.go       |   43 +
 .../ionos-cloud/sdk-go/v6/client.go           |    2 +-
 .../ionos-cloud/sdk-go/v6/configuration.go    |    2 +-
 .../sdk-go/v6/model_datacenter_properties.go  |    2 +-
 .../v6/model_kubernetes_cluster_properties.go |  182 +-
 ..._kubernetes_cluster_properties_for_post.go |  182 +-
 .../sdk-go/v6/model_lan_properties.go         |    2 +-
 .../sdk-go/v6/model_lan_properties_post.go    |    2 +-
 .../sdk-go/v6/model_nic_properties.go         |    6 +-
 vendor/github.com/linode/linodego/.gitmodules |    3 +
 .../linode/linodego/account_availability.go   |   62 +
 vendor/github.com/linode/linodego/errors.go   |   17 +-
 vendor/github.com/linode/linodego/go.work.sum |    5 +
 .../linode/linodego/instance_firewalls.go     |   41 +
 .../github.com/linode/linodego/instances.go   |   26 +-
 .../linode/linodego/nodebalancer_firewalls.go |   41 +
 vendor/github.com/linode/linodego/waitfor.go  |   10 +-
 .../golang_protobuf_extensions/v2/NOTICE      |    1 -
 .../v2/pbutil/.gitignore                      |    1 -
 .../v2/pbutil/Makefile                        |    7 -
 .../v2/pbutil/decode.go                       |   81 -
 .../v2/pbutil/encode.go                       |   49 -
 vendor/github.com/miekg/dns/README.md         |    2 +
 vendor/github.com/miekg/dns/dnssec_keyscan.go |    2 +-
 vendor/github.com/miekg/dns/generate.go       |    2 +-
 vendor/github.com/miekg/dns/privaterr.go      |    2 +-
 vendor/github.com/miekg/dns/scan.go           |   97 +-
 vendor/github.com/miekg/dns/scan_rr.go        |  384 +-
 vendor/github.com/miekg/dns/svcb.go           |   20 +-
 vendor/github.com/miekg/dns/types.go          |   28 +-
 vendor/github.com/miekg/dns/version.go        |    2 +-
 vendor/github.com/miekg/dns/zduplicate.go     |   35 +
 vendor/github.com/miekg/dns/zmsg.go           |   60 +
 vendor/github.com/miekg/dns/ztypes.go         |   19 +
 .../github.com/nsf/jsondiff/.atom-build.json  |   18 +
 vendor/github.com/nsf/jsondiff/.gitignore     |    2 +
 vendor/github.com/nsf/jsondiff/LICENSE        |   19 +
 vendor/github.com/nsf/jsondiff/README.md      |   29 +
 vendor/github.com/nsf/jsondiff/jsondiff.go    |  664 ++
 .../opencontainers/runtime-spec/LICENSE       |  191 +
 .../runtime-spec/specs-go/config.go           |  689 ++
 .../runtime-spec/specs-go/state.go            |   17 +
 .../runtime-spec/specs-go/version.go          |   18 +
 vendor/github.com/pbnjay/memory/LICENSE       |   29 +
 vendor/github.com/pbnjay/memory/README.md     |   41 +
 vendor/github.com/pbnjay/memory/doc.go        |   24 +
 vendor/github.com/pbnjay/memory/memory_bsd.go |   19 +
 .../github.com/pbnjay/memory/memory_darwin.go |   49 +
 .../github.com/pbnjay/memory/memory_linux.go  |   29 +
 .../pbnjay/memory/memory_windows.go           |   60 +
 vendor/github.com/pbnjay/memory/memsysctl.go  |   21 +
 vendor/github.com/pbnjay/memory/stub.go       |   10 +
 .../client_golang/prometheus/histogram.go     |   56 +-
 .../client_golang/prometheus/labels.go        |    2 +
 .../prometheus/process_collector_other.go     |    4 +-
 .../prometheus/process_collector_wasip1.go    |   26 +
 .../prometheus/testutil/promlint/problem.go   |   33 +
 .../prometheus/testutil/promlint/promlint.go  |  308 +-
 .../testutil/promlint/validation.go           |   33 +
 .../validations/counter_validations.go        |   40 +
 .../validations/generic_name_validations.go   |  101 +
 .../promlint/validations/help_validations.go  |   32 +
 .../validations/histogram_validations.go      |   63 +
 .../testutil/promlint/validations/units.go    |  118 +
 .../prometheus/testutil/testutil.go           |   15 +
 .../prometheus/common/config/http_config.go   |   22 +-
 .../prometheus/common/expfmt/decode.go        |    9 +-
 .../prometheus/common/expfmt/encode.go        |    7 +-
 .../prometheus/common/expfmt/text_parse.go    |    8 +-
 .../prometheus/common/model/alert.go          |    4 +-
 .../prometheus/common/model/metadata.go       |   28 +
 .../prometheus/common/model/metric.go         |   10 +-
 .../prometheus/common/model/signature.go      |    6 +-
 .../prometheus/common/model/silence.go        |    2 +-
 .../prometheus/common/model/value.go          |   16 +-
 .../prometheus/common/model/value_float.go    |   14 +-
 .../prometheus/common/promlog/flag/flag.go    |   13 +-
 .../prometheus/common/promlog/log.go          |    3 +
 .../prometheus/common/version/info.go         |   12 +-
 .../prometheus/common/version/info_default.go |    2 +-
 .../prometheus/common/version/info_go118.go   |   10 +-
 .../exporter-toolkit/web/tls_config.go        |   79 +-
 .../prometheus/procfs/Makefile.common         |    2 +-
 .../prometheus/procfs/fs_statfs_notype.go     |    4 +-
 .../prometheus/procfs/fs_statfs_type.go       |    4 +-
 .../prometheus/procfs/mountstats.go           |   83 +-
 .../prometheus/procfs/proc_fdinfo.go          |    8 +-
 .../github.com/prometheus/procfs/proc_maps.go |   20 +-
 .../prometheus/procfs/proc_status.go          |   21 +-
 .../api/baremetal/v1/baremetal_sdk.go         | 1847 +++---
 .../api/block/v1alpha1/block_sdk.go           | 1250 ++++
 .../api/block/v1alpha1/snapshot_utils.go      |   59 +
 .../api/block/v1alpha1/volume_utils.go        |  149 +
 .../api/instance/v1/image_utils.go            |   67 -
 .../api/instance/v1/instance_metadata_sdk.go  |   72 +-
 .../api/instance/v1/instance_sdk.go           | 5598 ++++++++++-------
 .../api/instance/v1/instance_utils.go         |  104 +-
 .../api/instance/v1/security_group_utils.go   |  222 -
 .../api/instance/v1/snapshot_utils.go         |   66 -
 .../api/instance/v1/volume_utils.go           |   57 +
 .../api/marketplace/v1/marketplace_sdk.go     |  242 +-
 .../api/marketplace/v1/marketplace_utils.go   |    6 -
 .../internal/parameter/query.go               |    8 +-
 .../scaleway-sdk-go/scw/custom_types.go       |   31 +
 vendor/github.com/sirupsen/logrus/.gitignore  |    4 +
 .../github.com/sirupsen/logrus/.golangci.yml  |   40 +
 vendor/github.com/sirupsen/logrus/.travis.yml |   15 +
 .../github.com/sirupsen/logrus/CHANGELOG.md   |  259 +
 vendor/github.com/sirupsen/logrus/LICENSE     |   21 +
 vendor/github.com/sirupsen/logrus/README.md   |  515 ++
 vendor/github.com/sirupsen/logrus/alt_exit.go |   76 +
 .../github.com/sirupsen/logrus/appveyor.yml   |   14 +
 .../github.com/sirupsen/logrus/buffer_pool.go |   43 +
 vendor/github.com/sirupsen/logrus/doc.go      |   26 +
 vendor/github.com/sirupsen/logrus/entry.go    |  442 ++
 vendor/github.com/sirupsen/logrus/exported.go |  270 +
 .../github.com/sirupsen/logrus/formatter.go   |   78 +
 vendor/github.com/sirupsen/logrus/hooks.go    |   34 +
 .../sirupsen/logrus/json_formatter.go         |  128 +
 vendor/github.com/sirupsen/logrus/logger.go   |  417 ++
 vendor/github.com/sirupsen/logrus/logrus.go   |  186 +
 .../logrus/terminal_check_appengine.go        |   11 +
 .../sirupsen/logrus/terminal_check_bsd.go     |   13 +
 .../sirupsen/logrus/terminal_check_js.go      |    7 +
 .../logrus/terminal_check_no_terminal.go      |   11 +
 .../logrus/terminal_check_notappengine.go     |   17 +
 .../sirupsen/logrus/terminal_check_solaris.go |   11 +
 .../sirupsen/logrus/terminal_check_unix.go    |   13 +
 .../sirupsen/logrus/terminal_check_windows.go |   27 +
 .../sirupsen/logrus/text_formatter.go         |  339 +
 vendor/github.com/sirupsen/logrus/writer.go   |  102 +
 .../collector/pdata/pcommon/value.go          |   26 +-
 .../net/http/otelhttp/handler.go              |   28 +-
 .../otelhttp/internal/semconvutil/httpconv.go |  182 +-
 .../otelhttp/internal/semconvutil/netconv.go  |   12 +-
 .../net/http/otelhttp/version.go              |    2 +-
 vendor/go.opentelemetry.io/otel/CHANGELOG.md  |   43 +-
 .../go.opentelemetry.io/otel/CONTRIBUTING.md  |   21 +
 vendor/go.opentelemetry.io/otel/README.md     |    2 +-
 vendor/go.opentelemetry.io/otel/RELEASING.md  |    6 +-
 .../go.opentelemetry.io/otel/attribute/set.go |   87 +-
 .../otel/baggage/baggage.go                   |  330 +-
 vendor/go.opentelemetry.io/otel/doc.go        |    2 +-
 .../otel/exporters/otlp/otlptrace/version.go  |    2 +-
 .../otel/propagation/trace_context.go         |   94 +-
 .../otel/sdk/resource/builtin.go              |    2 +-
 .../otel/sdk/resource/container.go            |    2 +-
 .../otel/sdk/resource/env.go                  |    2 +-
 .../otel/sdk/resource/host_id.go              |    2 +-
 .../otel/sdk/resource/os.go                   |    2 +-
 .../otel/sdk/resource/process.go              |    2 +-
 .../otel/sdk/trace/span.go                    |   19 +-
 .../go.opentelemetry.io/otel/sdk/version.go   |    2 +-
 .../otel/semconv/v1.20.0/attribute_group.go   | 1209 ++++
 .../otel/semconv/{v1.17.0 => v1.20.0}/doc.go  |    4 +-
 .../semconv/{v1.17.0 => v1.20.0}/event.go     |    2 +-
 .../semconv/{v1.17.0 => v1.20.0}/exception.go |    2 +-
 .../otel/semconv/{v1.17.0 => v1.20.0}/http.go |    2 +-
 .../semconv/{v1.17.0 => v1.20.0}/resource.go  |  297 +-
 .../semconv/{v1.17.0 => v1.20.0}/schema.go    |    4 +-
 .../semconv/{v1.17.0 => v1.20.0}/trace.go     | 1733 ++---
 .../otel/semconv/v1.21.0/doc.go               |    4 +-
 .../otel/semconv/v1.24.0/attribute_group.go   | 4398 +++++++++++++
 .../otel/semconv/v1.24.0/doc.go               |   20 +
 .../otel/semconv/v1.24.0/event.go             |  211 +
 .../otel/semconv/v1.24.0/exception.go}        |   10 +-
 .../otel/semconv/v1.24.0/resource.go          | 2556 ++++++++
 .../otel/semconv/v1.24.0/schema.go            |   20 +
 .../otel/semconv/v1.24.0/trace.go             | 1334 ++++
 .../otel/trace/tracestate.go                  |  197 +-
 vendor/go.opentelemetry.io/otel/version.go    |    2 +-
 vendor/go.opentelemetry.io/otel/versions.yaml |    4 +-
 .../x/crypto/internal/poly1305/bits_compat.go |   39 -
 .../x/crypto/internal/poly1305/bits_go1.13.go |   21 -
 .../x/crypto/internal/poly1305/sum_generic.go |   43 +-
 vendor/golang.org/x/exp/slices/slices.go      |   44 +-
 vendor/golang.org/x/net/context/context.go    |   56 -
 vendor/golang.org/x/net/context/go17.go       |   72 -
 vendor/golang.org/x/net/context/go19.go       |   20 -
 vendor/golang.org/x/net/context/pre_go17.go   |  300 -
 vendor/golang.org/x/net/context/pre_go19.go   |  109 -
 vendor/golang.org/x/oauth2/google/default.go  |   72 +-
 vendor/golang.org/x/sync/errgroup/errgroup.go |    3 +
 vendor/golang.org/x/sys/unix/mkerrors.sh      |   37 +-
 vendor/golang.org/x/sys/unix/zerrors_linux.go |   54 +
 .../x/sys/unix/zsyscall_openbsd_386.go        |    2 -
 .../x/sys/unix/zsyscall_openbsd_amd64.go      |    2 -
 .../x/sys/unix/zsyscall_openbsd_arm.go        |    2 -
 .../x/sys/unix/zsyscall_openbsd_arm64.go      |    2 -
 .../x/sys/unix/zsyscall_openbsd_mips64.go     |    2 -
 .../x/sys/unix/zsyscall_openbsd_ppc64.go      |    2 -
 .../x/sys/unix/zsyscall_openbsd_riscv64.go    |    2 -
 .../x/sys/windows/syscall_windows.go          |    1 +
 .../x/sys/windows/zsyscall_windows.go         |    9 +
 .../x/tools/cmd/goimports/goimports_gc.go     |    2 +-
 .../x/tools/go/ast/astutil/enclosing.go       |    8 +-
 .../x/tools/go/ast/astutil/rewrite.go         |    8 +-
 vendor/golang.org/x/tools/go/packages/doc.go  |   34 +-
 .../x/tools/go/packages/packages.go           |    3 +-
 .../x/tools/go/types/objectpath/objectpath.go |   14 +-
 .../x/tools/internal/event/keys/util.go       |   21 +
 .../x/tools/internal/gcimporter/iexport.go    |   31 +-
 .../x/tools/internal/gcimporter/iimport.go    |   39 +-
 .../x/tools/internal/imports/fix.go           |   56 +-
 .../x/tools/internal/typeparams/common.go     |   24 +-
 .../x/tools/internal/typeparams/coretype.go   |    8 +-
 .../internal/typeparams/enabled_go117.go      |   12 -
 .../internal/typeparams/enabled_go118.go      |   15 -
 .../x/tools/internal/typeparams/normalize.go  |   20 +-
 .../internal/typeparams/typeparams_go117.go   |  197 -
 .../internal/typeparams/typeparams_go118.go   |  151 -
 .../{versions_go121.go => versions.go}        |    9 +-
 .../tools/internal/versions/versions_go122.go |   38 -
 .../api/compute/v1/compute-api.json           |  434 +-
 .../api/compute/v1/compute-gen.go             | 1208 +++-
 .../api/internal/settings.go                  |    1 +
 .../google.golang.org/api/internal/version.go |    2 +-
 .../option/internaloption/internaloption.go   |   27 +
 .../api/transport/http/dial.go                |   11 +
 .../google.golang.org/appengine/.travis.yml   |   18 -
 .../appengine/CONTRIBUTING.md                 |    6 +-
 vendor/google.golang.org/appengine/README.md  |    6 +-
 .../google.golang.org/appengine/appengine.go  |   23 +-
 .../appengine/appengine_vm.go                 |   12 +-
 .../google.golang.org/appengine/identity.go   |    3 +-
 .../appengine/internal/api.go                 |  347 +-
 .../appengine/internal/api_classic.go         |   29 +-
 .../appengine/internal/api_common.go          |   50 +-
 .../appengine/internal/identity.go            |    7 +-
 .../appengine/internal/identity_classic.go    |   23 +-
 .../appengine/internal/identity_flex.go       |    1 +
 .../appengine/internal/identity_vm.go         |   20 +-
 .../appengine/internal/main.go                |    1 +
 .../appengine/internal/main_vm.go             |    3 +-
 .../appengine/internal/transaction.go         |   10 +-
 .../google.golang.org/appengine/namespace.go  |    3 +-
 vendor/google.golang.org/appengine/timeout.go |    2 +-
 .../appengine/travis_install.sh               |   18 -
 .../appengine/travis_test.sh                  |   12 -
 .../appengine/urlfetch/urlfetch.go            |    9 +-
 ...r_conn_wrappers.go => balancer_wrapper.go} |  304 +-
 .../grpc_binarylog_v1/binarylog.pb.go         |    2 +-
 vendor/google.golang.org/grpc/clientconn.go   |  518 +-
 vendor/google.golang.org/grpc/codes/codes.go  |    8 +-
 .../google.golang.org/grpc/credentials/tls.go |   75 +-
 vendor/google.golang.org/grpc/dialoptions.go  |   48 +-
 .../grpc/internal/buffer/unbounded.go         |   41 +-
 .../grpc/internal/channelz/funcs.go           |    7 +
 .../grpc/internal/envconfig/envconfig.go      |    3 -
 .../grpc/internal/envconfig/xds.go            |   39 -
 .../grpc/internal/experimental.go             |   28 +
 .../internal/grpcsync/callback_serializer.go  |   51 +-
 .../grpc/internal/idle/idle.go                |  175 +-
 .../grpc/internal/internal.go                 |   29 +-
 .../internal/resolver/dns/dns_resolver.go     |   69 +-
 .../resolver/dns/internal/internal.go         |   70 +
 .../grpc/internal/resolver/unix/unix.go       |    4 +
 .../grpc/internal/tcp_keepalive_others.go     |   29 +
 .../grpc/internal/tcp_keepalive_unix.go       |   54 +
 .../grpc/internal/tcp_keepalive_windows.go    |   54 +
 .../grpc/internal/transport/handler_server.go |   65 +-
 .../grpc/internal/transport/http2_client.go   |   22 +-
 .../grpc/internal/transport/http2_server.go   |  114 +-
 .../grpc/internal/transport/proxy.go          |   14 +-
 .../grpc/internal/transport/transport.go      |   22 +-
 .../grpc/metadata/metadata.go                 |   31 +-
 vendor/google.golang.org/grpc/peer/peer.go    |    2 +
 .../google.golang.org/grpc/picker_wrapper.go  |   21 +-
 vendor/google.golang.org/grpc/pickfirst.go    |   14 -
 .../grpc/resolver/dns/dns_resolver.go         |   36 +
 vendor/google.golang.org/grpc/resolver/map.go |  113 +
 .../grpc/resolver/resolver.go                 |   20 +-
 .../grpc/resolver_conn_wrapper.go             |  247 -
 .../grpc/resolver_wrapper.go                  |  197 +
 vendor/google.golang.org/grpc/rpc_util.go     |    8 +-
 vendor/google.golang.org/grpc/server.go       |  264 +-
 vendor/google.golang.org/grpc/stream.go       |    4 +-
 vendor/google.golang.org/grpc/version.go      |    2 +-
 vendor/google.golang.org/grpc/vet.sh          |  166 +-
 .../encoding/protodelim/protodelim.go         |  160 +
 .../protobuf/encoding/protojson/decode.go     |   38 +-
 .../protobuf/encoding/protojson/doc.go        |    2 +-
 .../protobuf/encoding/protojson/encode.go     |   39 +-
 .../encoding/protojson/well_known_types.go    |   55 +-
 .../protobuf/encoding/prototext/decode.go     |    8 +-
 .../protobuf/encoding/prototext/encode.go     |    4 +-
 .../protobuf/encoding/protowire/wire.go       |   28 +-
 .../protobuf/internal/descfmt/stringer.go     |  183 +-
 .../protobuf/internal/filedesc/desc.go        |   47 +-
 .../protobuf/internal/genid/descriptor_gen.go |  212 +-
 .../protobuf/internal/impl/codec_gen.go       |  113 +-
 .../protobuf/internal/impl/legacy_message.go  |   19 +-
 .../protobuf/internal/impl/message.go         |   17 +-
 .../protobuf/internal/impl/pointer_reflect.go |   36 +
 .../protobuf/internal/impl/pointer_unsafe.go  |   40 +
 ...ings_unsafe.go => strings_unsafe_go120.go} |    4 +-
 .../internal/strs/strings_unsafe_go121.go     |   74 +
 .../protobuf/internal/version/version.go      |    2 +-
 .../protobuf/proto/decode.go                  |    2 +-
 .../google.golang.org/protobuf/proto/doc.go   |   58 +-
 .../protobuf/proto/encode.go                  |    2 +-
 .../protobuf/proto/extension.go               |    2 +-
 .../google.golang.org/protobuf/proto/merge.go |    2 +-
 .../google.golang.org/protobuf/proto/proto.go |   18 +-
 .../protobuf/reflect/protodesc/desc.go        |   29 +-
 .../protobuf/reflect/protodesc/desc_init.go   |   24 +
 .../protobuf/reflect/protodesc/editions.go    |  177 +
 .../reflect/protodesc/editions_defaults.binpb |    4 +
 .../protobuf/reflect/protodesc/proto.go       |   18 +-
 .../protobuf/reflect/protoreflect/proto.go    |   83 +-
 .../reflect/protoreflect/source_gen.go        |   62 +-
 .../protobuf/reflect/protoreflect/type.go     |   44 +-
 .../protobuf/reflect/protoreflect/value.go    |   24 +-
 .../reflect/protoreflect/value_equal.go       |    8 +-
 .../reflect/protoreflect/value_union.go       |   44 +-
 ...{value_unsafe.go => value_unsafe_go120.go} |    4 +-
 .../protoreflect/value_unsafe_go121.go        |   87 +
 .../reflect/protoregistry/registry.go         |   24 +-
 .../types/descriptorpb/descriptor.pb.go       | 2467 +++++---
 .../protobuf/types/known/anypb/any.pb.go      |    3 +-
 .../protobuf/types/pluginpb/plugin.pb.go      |  161 +-
 .../kube-openapi/pkg/builder3/util/util.go    |   51 -
 .../k8s.io/kube-openapi/pkg/cached/cache.go   |  268 +-
 .../k8s.io/kube-openapi/pkg/common/common.go  |   38 -
 .../kube-openapi/pkg/handler3/handler.go      |   77 +-
 .../k8s.io/kube-openapi/pkg/internal/flags.go |    1 +
 .../kube-openapi/pkg/openapiconv/convert.go   |  322 -
 .../kube-openapi/pkg/schemamutation/walker.go |  519 --
 .../k8s.io/kube-openapi/pkg/spec3/encoding.go |   21 +
 .../k8s.io/kube-openapi/pkg/spec3/example.go  |   14 +
 .../pkg/spec3/external_documentation.go       |   13 +
 vendor/k8s.io/kube-openapi/pkg/spec3/fuzz.go  |   27 +
 .../k8s.io/kube-openapi/pkg/spec3/header.go   |   31 +
 .../kube-openapi/pkg/spec3/media_type.go      |   20 +
 .../kube-openapi/pkg/spec3/operation.go       |   27 +
 .../kube-openapi/pkg/spec3/parameter.go       |   31 +
 vendor/k8s.io/kube-openapi/pkg/spec3/path.go  |   47 +-
 .../kube-openapi/pkg/spec3/request_body.go    |   21 +
 .../k8s.io/kube-openapi/pkg/spec3/response.go |   52 +
 .../kube-openapi/pkg/spec3/security_scheme.go |   17 +
 .../k8s.io/kube-openapi/pkg/spec3/server.go   |   26 +
 vendor/k8s.io/kube-openapi/pkg/spec3/spec.go  |   25 +
 .../kube-openapi/pkg/validation/spec/fuzz.go  |  502 --
 vendor/k8s.io/utils/pointer/pointer.go        |  283 +-
 vendor/k8s.io/utils/ptr/OWNERS                |   10 +
 vendor/k8s.io/utils/ptr/README.md             |    3 +
 vendor/k8s.io/utils/ptr/ptr.go                |   73 +
 vendor/modules.txt                            |  211 +-
 .../v4/fieldpath/pathelementmap.go            |   45 +-
 .../structured-merge-diff/v4/merge/update.go  |   33 +-
 .../v4/schema/schemaschema.go                 |    1 +
 .../structured-merge-diff/v4/typed/compare.go |  460 ++
 .../structured-merge-diff/v4/typed/helpers.go |   21 +-
 .../structured-merge-diff/v4/typed/merge.go   |   50 +-
 .../structured-merge-diff/v4/typed/parser.go  |   12 +-
 .../structured-merge-diff/v4/typed/remove.go  |    4 +-
 .../v4/typed/tofieldset.go                    |   24 +-
 .../structured-merge-diff/v4/typed/typed.go   |  184 +-
 .../structured-merge-diff/v4/typed/union.go   |  276 -
 .../v4/typed/validate.go                      |    8 +-
 1131 files changed, 118184 insertions(+), 34540 deletions(-)
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/TOKEN_CACHING.MD
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/authentication_record.go
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azure_developer_cli_credential.go
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/developer_credential_util.go
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/go.work
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/go.work.sum
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal/exported.go
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal/internal.go
 delete mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/autorest.md
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/CHANGELOG.md (60%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/LICENSE.txt (100%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/README.md (90%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/assets.json (69%)
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/autorest.md
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/availabilitysets_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/build.go (100%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/capacityreservationgroups_client.go (82%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/capacityreservations_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/ci.yml (100%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/client_factory.go (71%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/cloudserviceoperatingsystems_client.go (86%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/cloudserviceroleinstances_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/cloudserviceroles_client.go (86%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/cloudservices_client.go (77%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/cloudservicesupdatedomain_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/communitygalleries_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/communitygalleryimages_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/communitygalleryimageversions_client.go (86%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/constants.go (88%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/dedicatedhostgroups_client.go (81%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/dedicatedhosts_client.go (58%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/diskaccesses_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/diskencryptionsets_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/diskrestorepoint_client.go (82%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/disks_client.go (75%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/galleries_client.go (77%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/galleryapplications_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/galleryapplicationversions_client.go (82%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/galleryimages_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/galleryimageversions_client.go (81%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/gallerysharingprofile_client.go (77%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/images_client.go (75%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/loganalytics_client.go (74%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/models.go (73%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/models_serde.go (94%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/operations_client.go (89%)
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/options.go
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/proximityplacementgroups_client.go (82%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/resourceskus_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/response_types.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/restorepointcollections_client.go (81%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/restorepoints_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/sharedgalleries_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/sharedgalleryimages_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/sharedgalleryimageversions_client.go (86%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/snapshots_client.go (76%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/sshpublickeys_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/time_rfc3339.go (59%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/usage_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachineextensionimages_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachineextensions_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachineimages_client.go (82%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachineimagesedgezone_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachineruncommands_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachines_client.go (72%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachinescalesetextensions_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachinescalesetrollingupgrades_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachinescalesets_client.go (70%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachinescalesetvmextensions_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachinescalesetvmruncommands_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachinescalesetvms_client.go (68%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/{v4 => v5}/virtualmachinesizes_client.go (92%)
 delete mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/autorest.md
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/CHANGELOG.md (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/LICENSE.txt (100%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/README.md (90%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/adminrulecollections_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/adminrules_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/applicationgatewayprivateendpointconnections_client.go (81%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/applicationgatewayprivatelinkresources_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/applicationgateways_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/applicationgatewaywafdynamicmanifests_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/applicationgatewaywafdynamicmanifestsdefault_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/applicationsecuritygroups_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/assets.json (69%)
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/autorest.md
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/availabledelegations_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/availableendpointservices_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/availableprivateendpointtypes_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/availableresourcegroupdelegations_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/availableservicealiases_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/azurefirewallfqdntags_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/azurefirewalls_client.go (66%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/bastionhosts_client.go (77%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/bgpservicecommunities_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/build.go (100%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/ci.yml (100%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/client_factory.go (69%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/configurationpolicygroups_client.go (81%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/connectionmonitors_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/connectivityconfigurations_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/constants.go (93%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/customipprefixes_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/ddoscustompolicies_client.go (77%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/ddosprotectionplans_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/defaultsecurityrules_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/dscpconfiguration_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressroutecircuitauthorizations_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressroutecircuitconnections_client.go (81%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressroutecircuitpeerings_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressroutecircuits_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressrouteconnections_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressroutecrossconnectionpeerings_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressroutecrossconnections_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressroutegateways_client.go (77%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressroutelinks_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressrouteportauthorizations_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressrouteports_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressrouteportslocations_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressrouteproviderportslocation_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/expressrouteserviceproviders_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/firewallpolicies_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/firewallpolicyidpssignatures_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/firewallpolicyidpssignaturesfiltervalues_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/firewallpolicyidpssignaturesoverrides_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/firewallpolicyrulecollectiongroups_client.go (81%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/flowlogs_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/groups_client.go (81%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/hubroutetables_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/hubvirtualnetworkconnections_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/inboundnatrules_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/inboundsecurityrule_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/interfaceipconfigurations_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/interfaceloadbalancers_client.go (85%)
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaces.go
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/interfaces_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/interfacetapconfigurations_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/ipallocations_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/ipgroups_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/loadbalancerbackendaddresspools_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/loadbalancerfrontendipconfigurations_client.go (86%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/loadbalancerloadbalancingrules_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/loadbalancernetworkinterfaces_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/loadbalanceroutboundrules_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/loadbalancerprobes_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/loadbalancers_client.go (68%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/localnetworkgateways_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/management_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/managementgroupnetworkmanagerconnections_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/managercommits_client.go (77%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/managerdeploymentstatus_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/managers_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/models.go (71%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/models_serde.go (97%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/natgateways_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/natrules_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/operations_client.go (80%)
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/options.go
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/p2svpngateways_client.go (75%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/packetcaptures_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/peerexpressroutecircuitconnections_client.go (87%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/polymorphic_helpers.go (92%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/privatednszonegroups_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/privateendpoints_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/privatelinkservices_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/profiles_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/publicipaddresses_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/publicipprefixes_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/resourcenavigationlinks_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/response_types.go (81%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/routefilterrules_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/routefilters_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/routemaps_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/routes_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/routetables_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/routingintent_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/scopeconnections_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/securityadminconfigurations_client.go (82%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/securitygroups_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/securitypartnerproviders_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/securityrules_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/serviceassociationlinks_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/serviceendpointpolicies_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/serviceendpointpolicydefinitions_client.go (81%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/servicetaginformation_client.go (85%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/servicetags_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/staticmembers_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/subnets_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/subscriptionnetworkmanagerconnections_client.go (82%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/time_rfc3339.go (59%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/usages_client.go (83%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/vipswap_client.go (79%)
 create mode 100644 vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualapplianceconnections_client.go
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualappliances_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualappliancesites_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualapplianceskus_client.go (82%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualhubbgpconnection_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualhubbgpconnections_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualhubipconfiguration_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualhubroutetablev2s_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualhubs_client.go (76%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualnetworkgatewayconnections_client.go (77%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualnetworkgatewaynatrules_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualnetworkgateways_client.go (76%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualnetworkpeerings_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualnetworks_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualnetworktaps_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualrouterpeerings_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualrouters_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/virtualwans_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/vpnconnections_client.go (77%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/vpngateways_client.go (75%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/vpnlinkconnections_client.go (81%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/vpnserverconfigurations_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/vpnserverconfigurationsassociatedwithvirtualwan_client.go (79%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/vpnsitelinkconnections_client.go (86%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/vpnsitelinks_client.go (84%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/vpnsites_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/vpnsitesconfiguration_client.go (78%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/watchers_client.go (76%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/webapplicationfirewallpolicies_client.go (80%)
 rename vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/{v2 => v4}/webcategories_client.go (82%)
 create mode 100644 vendor/github.com/KimMachineGun/automemlimit/LICENSE
 create mode 100644 vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups.go
 create mode 100644 vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups_linux.go
 create mode 100644 vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups_unsupported.go
 create mode 100644 vendor/github.com/KimMachineGun/automemlimit/memlimit/exp_system.go
 create mode 100644 vendor/github.com/KimMachineGun/automemlimit/memlimit/experiment.go
 create mode 100644 vendor/github.com/KimMachineGun/automemlimit/memlimit/memlimit.go
 create mode 100644 vendor/github.com/KimMachineGun/automemlimit/memlimit/provider.go
 create mode 100644 vendor/github.com/bboreham/go-loser/.gitignore
 rename vendor/github.com/{matttproud/golang_protobuf_extensions/v2 => bboreham/go-loser}/LICENSE (99%)
 create mode 100644 vendor/github.com/bboreham/go-loser/README.md
 create mode 100644 vendor/github.com/bboreham/go-loser/tree.go
 create mode 100644 vendor/github.com/cilium/ebpf/.clang-format
 create mode 100644 vendor/github.com/cilium/ebpf/.gitignore
 create mode 100644 vendor/github.com/cilium/ebpf/.golangci.yaml
 create mode 100644 vendor/github.com/cilium/ebpf/ARCHITECTURE.md
 create mode 100644 vendor/github.com/cilium/ebpf/CODE_OF_CONDUCT.md
 create mode 100644 vendor/github.com/cilium/ebpf/CONTRIBUTING.md
 create mode 100644 vendor/github.com/cilium/ebpf/LICENSE
 create mode 100644 vendor/github.com/cilium/ebpf/MAINTAINERS.md
 create mode 100644 vendor/github.com/cilium/ebpf/Makefile
 create mode 100644 vendor/github.com/cilium/ebpf/README.md
 create mode 100644 vendor/github.com/cilium/ebpf/asm/alu.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/alu_string.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/doc.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/func.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/func_string.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/instruction.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/jump.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/jump_string.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/load_store.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/load_store_string.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/metadata.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/opcode.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/opcode_string.go
 create mode 100644 vendor/github.com/cilium/ebpf/asm/register.go
 create mode 100644 vendor/github.com/cilium/ebpf/attachtype_string.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/btf.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/btf_types.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/btf_types_string.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/core.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/doc.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/ext_info.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/format.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/handle.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/marshal.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/strings.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/traversal.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/types.go
 create mode 100644 vendor/github.com/cilium/ebpf/btf/workarounds.go
 create mode 100644 vendor/github.com/cilium/ebpf/collection.go
 create mode 100644 vendor/github.com/cilium/ebpf/doc.go
 create mode 100644 vendor/github.com/cilium/ebpf/elf_reader.go
 create mode 100644 vendor/github.com/cilium/ebpf/info.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/align.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/buffer.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/cpu.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/deque.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/elf.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/endian_be.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/endian_le.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/errors.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/feature.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/io.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/kconfig/kconfig.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/memoize.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/output.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/pinning.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/platform.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/prog.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/statfs.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/sys/doc.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/sys/fd.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/sys/fd_trace.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/sys/mapflags_string.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/sys/ptr.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/sys/ptr_32_be.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/sys/ptr_32_le.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/sys/ptr_64.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/sys/signals.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/sys/syscall.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/sys/types.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/tracefs/kprobe.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/tracefs/probetype_string.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/tracefs/uprobe.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/unix/doc.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/unix/types_linux.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/unix/types_other.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/vdso.go
 create mode 100644 vendor/github.com/cilium/ebpf/internal/version.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/cgroup.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/doc.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/iter.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/kprobe.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/kprobe_multi.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/link.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/netns.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/perf_event.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/program.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/query.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/raw_tracepoint.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/socket_filter.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/syscalls.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/tracepoint.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/tracing.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/uprobe.go
 create mode 100644 vendor/github.com/cilium/ebpf/link/xdp.go
 create mode 100644 vendor/github.com/cilium/ebpf/linker.go
 create mode 100644 vendor/github.com/cilium/ebpf/map.go
 create mode 100644 vendor/github.com/cilium/ebpf/marshalers.go
 create mode 100644 vendor/github.com/cilium/ebpf/prog.go
 create mode 100644 vendor/github.com/cilium/ebpf/run-tests.sh
 create mode 100644 vendor/github.com/cilium/ebpf/syscalls.go
 create mode 100644 vendor/github.com/cilium/ebpf/types.go
 create mode 100644 vendor/github.com/cilium/ebpf/types_string.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/.gitignore
 create mode 100644 vendor/github.com/containerd/cgroups/v3/LICENSE
 create mode 100644 vendor/github.com/containerd/cgroups/v3/Makefile
 create mode 100644 vendor/github.com/containerd/cgroups/v3/Protobuild.toml
 create mode 100644 vendor/github.com/containerd/cgroups/v3/README.md
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/blkio.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/cgroup.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/control.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/cpu.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/cpuacct.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/cpuset.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/devices.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/errors.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/freezer.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/hierarchy.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/hugetlb.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/memory.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/named.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/net_cls.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/net_prio.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/opts.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/paths.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/perf_event.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/pids.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/rdma.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/state.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/stats/doc.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.pb.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.pb.txt
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.proto
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/subsystem.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/systemd.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/ticks.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/utils.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup1/v1.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/cpu.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/devicefilter.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/ebpf.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/errors.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/hugetlb.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/io.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/manager.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/memory.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/paths.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/pids.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/rdma.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/state.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/stats/doc.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.pb.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.pb.txt
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.proto
 create mode 100644 vendor/github.com/containerd/cgroups/v3/cgroup2/utils.go
 create mode 100644 vendor/github.com/containerd/cgroups/v3/utils.go
 create mode 100644 vendor/github.com/coreos/go-systemd/v22/dbus/dbus.go
 create mode 100644 vendor/github.com/coreos/go-systemd/v22/dbus/methods.go
 create mode 100644 vendor/github.com/coreos/go-systemd/v22/dbus/properties.go
 create mode 100644 vendor/github.com/coreos/go-systemd/v22/dbus/set.go
 create mode 100644 vendor/github.com/coreos/go-systemd/v22/dbus/subscription.go
 create mode 100644 vendor/github.com/coreos/go-systemd/v22/dbus/subscription_set.go
 create mode 100644 vendor/github.com/distribution/reference/.gitattributes
 create mode 100644 vendor/github.com/distribution/reference/.gitignore
 create mode 100644 vendor/github.com/distribution/reference/.golangci.yml
 create mode 100644 vendor/github.com/distribution/reference/CODE-OF-CONDUCT.md
 create mode 100644 vendor/github.com/distribution/reference/CONTRIBUTING.md
 create mode 100644 vendor/github.com/distribution/reference/GOVERNANCE.md
 rename vendor/github.com/{docker/distribution => distribution/reference}/LICENSE (100%)
 create mode 100644 vendor/github.com/distribution/reference/MAINTAINERS
 create mode 100644 vendor/github.com/distribution/reference/Makefile
 create mode 100644 vendor/github.com/distribution/reference/README.md
 create mode 100644 vendor/github.com/distribution/reference/SECURITY.md
 create mode 100644 vendor/github.com/distribution/reference/distribution-logo.svg
 rename vendor/github.com/{docker => }/distribution/reference/helpers.go (94%)
 rename vendor/github.com/{docker => }/distribution/reference/normalize.go (52%)
 rename vendor/github.com/{docker => }/distribution/reference/reference.go (93%)
 create mode 100644 vendor/github.com/distribution/reference/regexp.go
 create mode 100644 vendor/github.com/distribution/reference/sort.go
 delete mode 100644 vendor/github.com/docker/distribution/digestset/set.go
 delete mode 100644 vendor/github.com/docker/distribution/reference/regexp.go
 delete mode 100644 vendor/github.com/docker/docker/api/common_unix.go
 delete mode 100644 vendor/github.com/docker/docker/api/common_windows.go
 delete mode 100644 vendor/github.com/docker/docker/api/types/auth.go
 create mode 100644 vendor/github.com/docker/docker/api/types/checkpoint/list.go
 create mode 100644 vendor/github.com/docker/docker/api/types/checkpoint/options.go
 delete mode 100644 vendor/github.com/docker/docker/api/types/container/change_response_deprecated.go
 create mode 100644 vendor/github.com/docker/docker/api/types/container/errors.go
 create mode 100644 vendor/github.com/docker/docker/api/types/container/options.go
 rename vendor/github.com/docker/docker/api/types/{image_delete_response_item.go => image/delete_response.go} (68%)
 create mode 100644 vendor/github.com/docker/docker/api/types/image/image.go
 rename vendor/github.com/docker/docker/api/types/{image_summary.go => image/summary.go} (85%)
 create mode 100644 vendor/github.com/docker/docker/api/types/network/endpoint.go
 create mode 100644 vendor/github.com/docker/docker/api/types/network/ipam.go
 create mode 100644 vendor/github.com/docker/docker/api/types/swarm/service_create_response.go
 rename vendor/github.com/docker/docker/api/types/{ => swarm}/service_update_response.go (95%)
 create mode 100644 vendor/github.com/docker/docker/api/types/system/info.go
 create mode 100644 vendor/github.com/docker/docker/api/types/system/runtime.go
 create mode 100644 vendor/github.com/docker/docker/api/types/system/security_opts.go
 create mode 100644 vendor/github.com/docker/docker/api/types/types_deprecated.go
 delete mode 100644 vendor/github.com/docker/docker/client/transport.go
 create mode 100644 vendor/github.com/docker/docker/image/spec/specs-go/v1/image.go
 create mode 100644 vendor/github.com/docker/docker/internal/multierror/multierror.go
 create mode 100644 vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_service.pb.go
 create mode 100644 vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_service.pb.validate.go
 create mode 100644 vendor/github.com/facette/natsort/LICENSE
 create mode 100644 vendor/github.com/facette/natsort/README.md
 create mode 100644 vendor/github.com/facette/natsort/natsort.go
 create mode 100644 vendor/github.com/go-logr/logr/context.go
 create mode 100644 vendor/github.com/go-logr/logr/context_noslog.go
 create mode 100644 vendor/github.com/go-logr/logr/context_slog.go
 create mode 100644 vendor/github.com/go-logr/logr/funcr/slogsink.go
 create mode 100644 vendor/github.com/go-logr/logr/sloghandler.go
 create mode 100644 vendor/github.com/go-logr/logr/slogr.go
 create mode 100644 vendor/github.com/go-logr/logr/slogsink.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/CONTRIBUTING.md
 create mode 100644 vendor/github.com/godbus/dbus/v5/LICENSE
 create mode 100644 vendor/github.com/godbus/dbus/v5/MAINTAINERS
 create mode 100644 vendor/github.com/godbus/dbus/v5/README.markdown
 create mode 100644 vendor/github.com/godbus/dbus/v5/auth.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/auth_anonymous.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/auth_external.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/auth_sha1.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/call.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/conn.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/conn_darwin.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/conn_other.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/conn_unix.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/conn_windows.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/dbus.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/decoder.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/default_handler.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/doc.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/encoder.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/export.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/homedir.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/homedir_dynamic.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/homedir_static.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/match.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/message.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/object.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/sequence.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/sequential_handler.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/server_interfaces.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/sig.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/transport_darwin.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/transport_generic.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/transport_nonce_tcp.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/transport_tcp.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/transport_unix.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/transport_unixcred_dragonfly.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/transport_unixcred_freebsd.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/transport_unixcred_linux.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/transport_unixcred_openbsd.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/variant.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/variant_lexer.go
 create mode 100644 vendor/github.com/godbus/dbus/v5/variant_parser.go
 create mode 100644 vendor/github.com/google/uuid/version6.go
 create mode 100644 vendor/github.com/google/uuid/version7.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/interface_gen.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema_assign.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema_gen.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_action_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_certificate_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_datacenter_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_firewall_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_floating_ip_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_image_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_iso_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_load_balancer_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_load_balancer_type_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_location_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_network_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_placement_group_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_pricing_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_primary_ip_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_rdns_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_resource_action_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_schema.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_server_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_server_type_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_ssh_key_client_iface.go
 create mode 100644 vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_volume_client_iface.go
 create mode 100644 vendor/github.com/linode/linodego/.gitmodules
 create mode 100644 vendor/github.com/linode/linodego/account_availability.go
 create mode 100644 vendor/github.com/linode/linodego/instance_firewalls.go
 create mode 100644 vendor/github.com/linode/linodego/nodebalancer_firewalls.go
 delete mode 100644 vendor/github.com/matttproud/golang_protobuf_extensions/v2/NOTICE
 delete mode 100644 vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/.gitignore
 delete mode 100644 vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/Makefile
 delete mode 100644 vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/decode.go
 delete mode 100644 vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/encode.go
 create mode 100644 vendor/github.com/nsf/jsondiff/.atom-build.json
 create mode 100644 vendor/github.com/nsf/jsondiff/.gitignore
 create mode 100644 vendor/github.com/nsf/jsondiff/LICENSE
 create mode 100644 vendor/github.com/nsf/jsondiff/README.md
 create mode 100644 vendor/github.com/nsf/jsondiff/jsondiff.go
 create mode 100644 vendor/github.com/opencontainers/runtime-spec/LICENSE
 create mode 100644 vendor/github.com/opencontainers/runtime-spec/specs-go/config.go
 create mode 100644 vendor/github.com/opencontainers/runtime-spec/specs-go/state.go
 create mode 100644 vendor/github.com/opencontainers/runtime-spec/specs-go/version.go
 create mode 100644 vendor/github.com/pbnjay/memory/LICENSE
 create mode 100644 vendor/github.com/pbnjay/memory/README.md
 create mode 100644 vendor/github.com/pbnjay/memory/doc.go
 create mode 100644 vendor/github.com/pbnjay/memory/memory_bsd.go
 create mode 100644 vendor/github.com/pbnjay/memory/memory_darwin.go
 create mode 100644 vendor/github.com/pbnjay/memory/memory_linux.go
 create mode 100644 vendor/github.com/pbnjay/memory/memory_windows.go
 create mode 100644 vendor/github.com/pbnjay/memory/memsysctl.go
 create mode 100644 vendor/github.com/pbnjay/memory/stub.go
 create mode 100644 vendor/github.com/prometheus/client_golang/prometheus/process_collector_wasip1.go
 create mode 100644 vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/problem.go
 create mode 100644 vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validation.go
 create mode 100644 vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/counter_validations.go
 create mode 100644 vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/generic_name_validations.go
 create mode 100644 vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/help_validations.go
 create mode 100644 vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/histogram_validations.go
 create mode 100644 vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/units.go
 create mode 100644 vendor/github.com/prometheus/common/model/metadata.go
 create mode 100644 vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/block_sdk.go
 create mode 100644 vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/snapshot_utils.go
 create mode 100644 vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/volume_utils.go
 delete mode 100644 vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/security_group_utils.go
 create mode 100644 vendor/github.com/sirupsen/logrus/.gitignore
 create mode 100644 vendor/github.com/sirupsen/logrus/.golangci.yml
 create mode 100644 vendor/github.com/sirupsen/logrus/.travis.yml
 create mode 100644 vendor/github.com/sirupsen/logrus/CHANGELOG.md
 create mode 100644 vendor/github.com/sirupsen/logrus/LICENSE
 create mode 100644 vendor/github.com/sirupsen/logrus/README.md
 create mode 100644 vendor/github.com/sirupsen/logrus/alt_exit.go
 create mode 100644 vendor/github.com/sirupsen/logrus/appveyor.yml
 create mode 100644 vendor/github.com/sirupsen/logrus/buffer_pool.go
 create mode 100644 vendor/github.com/sirupsen/logrus/doc.go
 create mode 100644 vendor/github.com/sirupsen/logrus/entry.go
 create mode 100644 vendor/github.com/sirupsen/logrus/exported.go
 create mode 100644 vendor/github.com/sirupsen/logrus/formatter.go
 create mode 100644 vendor/github.com/sirupsen/logrus/hooks.go
 create mode 100644 vendor/github.com/sirupsen/logrus/json_formatter.go
 create mode 100644 vendor/github.com/sirupsen/logrus/logger.go
 create mode 100644 vendor/github.com/sirupsen/logrus/logrus.go
 create mode 100644 vendor/github.com/sirupsen/logrus/terminal_check_appengine.go
 create mode 100644 vendor/github.com/sirupsen/logrus/terminal_check_bsd.go
 create mode 100644 vendor/github.com/sirupsen/logrus/terminal_check_js.go
 create mode 100644 vendor/github.com/sirupsen/logrus/terminal_check_no_terminal.go
 create mode 100644 vendor/github.com/sirupsen/logrus/terminal_check_notappengine.go
 create mode 100644 vendor/github.com/sirupsen/logrus/terminal_check_solaris.go
 create mode 100644 vendor/github.com/sirupsen/logrus/terminal_check_unix.go
 create mode 100644 vendor/github.com/sirupsen/logrus/terminal_check_windows.go
 create mode 100644 vendor/github.com/sirupsen/logrus/text_formatter.go
 create mode 100644 vendor/github.com/sirupsen/logrus/writer.go
 create mode 100644 vendor/go.opentelemetry.io/otel/semconv/v1.20.0/attribute_group.go
 rename vendor/go.opentelemetry.io/otel/semconv/{v1.17.0 => v1.20.0}/doc.go (85%)
 rename vendor/go.opentelemetry.io/otel/semconv/{v1.17.0 => v1.20.0}/event.go (99%)
 rename vendor/go.opentelemetry.io/otel/semconv/{v1.17.0 => v1.20.0}/exception.go (91%)
 rename vendor/go.opentelemetry.io/otel/semconv/{v1.17.0 => v1.20.0}/http.go (91%)
 rename vendor/go.opentelemetry.io/otel/semconv/{v1.17.0 => v1.20.0}/resource.go (92%)
 rename vendor/go.opentelemetry.io/otel/semconv/{v1.17.0 => v1.20.0}/schema.go (86%)
 rename vendor/go.opentelemetry.io/otel/semconv/{v1.17.0 => v1.20.0}/trace.go (63%)
 create mode 100644 vendor/go.opentelemetry.io/otel/semconv/v1.24.0/attribute_group.go
 create mode 100644 vendor/go.opentelemetry.io/otel/semconv/v1.24.0/doc.go
 create mode 100644 vendor/go.opentelemetry.io/otel/semconv/v1.24.0/event.go
 rename vendor/{github.com/matttproud/golang_protobuf_extensions/v2/pbutil/doc.go => go.opentelemetry.io/otel/semconv/v1.24.0/exception.go} (70%)
 create mode 100644 vendor/go.opentelemetry.io/otel/semconv/v1.24.0/resource.go
 create mode 100644 vendor/go.opentelemetry.io/otel/semconv/v1.24.0/schema.go
 create mode 100644 vendor/go.opentelemetry.io/otel/semconv/v1.24.0/trace.go
 delete mode 100644 vendor/golang.org/x/crypto/internal/poly1305/bits_compat.go
 delete mode 100644 vendor/golang.org/x/crypto/internal/poly1305/bits_go1.13.go
 delete mode 100644 vendor/golang.org/x/net/context/context.go
 delete mode 100644 vendor/golang.org/x/net/context/go17.go
 delete mode 100644 vendor/golang.org/x/net/context/go19.go
 delete mode 100644 vendor/golang.org/x/net/context/pre_go17.go
 delete mode 100644 vendor/golang.org/x/net/context/pre_go19.go
 create mode 100644 vendor/golang.org/x/tools/internal/event/keys/util.go
 delete mode 100644 vendor/golang.org/x/tools/internal/typeparams/enabled_go117.go
 delete mode 100644 vendor/golang.org/x/tools/internal/typeparams/enabled_go118.go
 delete mode 100644 vendor/golang.org/x/tools/internal/typeparams/typeparams_go117.go
 delete mode 100644 vendor/golang.org/x/tools/internal/typeparams/typeparams_go118.go
 rename vendor/golang.org/x/tools/internal/versions/{versions_go121.go => versions.go} (80%)
 delete mode 100644 vendor/golang.org/x/tools/internal/versions/versions_go122.go
 delete mode 100644 vendor/google.golang.org/appengine/.travis.yml
 delete mode 100644 vendor/google.golang.org/appengine/travis_install.sh
 delete mode 100644 vendor/google.golang.org/appengine/travis_test.sh
 rename vendor/google.golang.org/grpc/{balancer_conn_wrappers.go => balancer_wrapper.go} (57%)
 create mode 100644 vendor/google.golang.org/grpc/internal/experimental.go
 create mode 100644 vendor/google.golang.org/grpc/internal/resolver/dns/internal/internal.go
 create mode 100644 vendor/google.golang.org/grpc/internal/tcp_keepalive_others.go
 create mode 100644 vendor/google.golang.org/grpc/internal/tcp_keepalive_unix.go
 create mode 100644 vendor/google.golang.org/grpc/internal/tcp_keepalive_windows.go
 create mode 100644 vendor/google.golang.org/grpc/resolver/dns/dns_resolver.go
 delete mode 100644 vendor/google.golang.org/grpc/resolver_conn_wrapper.go
 create mode 100644 vendor/google.golang.org/grpc/resolver_wrapper.go
 create mode 100644 vendor/google.golang.org/protobuf/encoding/protodelim/protodelim.go
 rename vendor/google.golang.org/protobuf/internal/strs/{strings_unsafe.go => strings_unsafe_go120.go} (96%)
 create mode 100644 vendor/google.golang.org/protobuf/internal/strs/strings_unsafe_go121.go
 create mode 100644 vendor/google.golang.org/protobuf/reflect/protodesc/editions.go
 create mode 100644 vendor/google.golang.org/protobuf/reflect/protodesc/editions_defaults.binpb
 rename vendor/google.golang.org/protobuf/reflect/protoreflect/{value_unsafe.go => value_unsafe_go120.go} (97%)
 create mode 100644 vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe_go121.go
 delete mode 100644 vendor/k8s.io/kube-openapi/pkg/builder3/util/util.go
 delete mode 100644 vendor/k8s.io/kube-openapi/pkg/openapiconv/convert.go
 delete mode 100644 vendor/k8s.io/kube-openapi/pkg/schemamutation/walker.go
 delete mode 100644 vendor/k8s.io/kube-openapi/pkg/validation/spec/fuzz.go
 create mode 100644 vendor/k8s.io/utils/ptr/OWNERS
 create mode 100644 vendor/k8s.io/utils/ptr/README.md
 create mode 100644 vendor/k8s.io/utils/ptr/ptr.go
 create mode 100644 vendor/sigs.k8s.io/structured-merge-diff/v4/typed/compare.go
 delete mode 100644 vendor/sigs.k8s.io/structured-merge-diff/v4/typed/union.go

diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/CHANGELOG.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/CHANGELOG.md
index aa30abf3739..5c8411cb575 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/CHANGELOG.md
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Release History
 
+## 1.9.1 (2023-12-11)
+
+### Bugs Fixed
+
+* The `retry-after-ms` and `x-ms-retry-after-ms` headers weren't being checked during retries.
+
+### Other Changes
+
+* Update dependencies.
+
 ## 1.9.0 (2023-11-06)
 
 ### Breaking Changes
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/shared/constants.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/shared/constants.go
index 272f06155ea..bb93daee681 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/shared/constants.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/shared/constants.go
@@ -22,11 +22,13 @@ const (
 	HeaderLocation               = "Location"
 	HeaderOperationLocation      = "Operation-Location"
 	HeaderRetryAfter             = "Retry-After"
+	HeaderRetryAfterMS           = "Retry-After-Ms"
 	HeaderUserAgent              = "User-Agent"
 	HeaderWWWAuthenticate        = "WWW-Authenticate"
 	HeaderXMSClientRequestID     = "x-ms-client-request-id"
 	HeaderXMSRequestID           = "x-ms-request-id"
 	HeaderXMSErrorCode           = "x-ms-error-code"
+	HeaderXMSRetryAfterMS        = "x-ms-retry-after-ms"
 )
 
 const BearerTokenPrefix = "Bearer "
@@ -38,5 +40,5 @@ const (
 	Module = "azcore"
 
 	// Version is the semantic version (see http://semver.org) of this module.
-	Version = "v1.9.0"
+	Version = "v1.9.1"
 )
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/shared/shared.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/shared/shared.go
index 16bc105f481..d3da2c5fdfa 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/shared/shared.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/shared/shared.go
@@ -44,22 +44,64 @@ func Delay(ctx context.Context, delay time.Duration) error {
 	}
 }
 
-// RetryAfter returns non-zero if the response contains a Retry-After header value.
+// RetryAfter returns non-zero if the response contains one of the headers with a "retry after" value.
+// Headers are checked in the following order: retry-after-ms, x-ms-retry-after-ms, retry-after
 func RetryAfter(resp *http.Response) time.Duration {
 	if resp == nil {
 		return 0
 	}
-	ra := resp.Header.Get(HeaderRetryAfter)
-	if ra == "" {
-		return 0
+
+	type retryData struct {
+		header string
+		units  time.Duration
+
+		// custom is used when the regular algorithm failed and is optional.
+		// the returned duration is used verbatim (units is not applied).
+		custom func(string) time.Duration
 	}
-	// retry-after values are expressed in either number of
-	// seconds or an HTTP-date indicating when to try again
-	if retryAfter, _ := strconv.Atoi(ra); retryAfter > 0 {
-		return time.Duration(retryAfter) * time.Second
-	} else if t, err := time.Parse(time.RFC1123, ra); err == nil {
-		return time.Until(t)
+
+	nop := func(string) time.Duration { return 0 }
+
+	// the headers are listed in order of preference
+	retries := []retryData{
+		{
+			header: HeaderRetryAfterMS,
+			units:  time.Millisecond,
+			custom: nop,
+		},
+		{
+			header: HeaderXMSRetryAfterMS,
+			units:  time.Millisecond,
+			custom: nop,
+		},
+		{
+			header: HeaderRetryAfter,
+			units:  time.Second,
+
+			// retry-after values are expressed in either number of
+			// seconds or an HTTP-date indicating when to try again
+			custom: func(ra string) time.Duration {
+				t, err := time.Parse(time.RFC1123, ra)
+				if err != nil {
+					return 0
+				}
+				return time.Until(t)
+			},
+		},
 	}
+
+	for _, retry := range retries {
+		v := resp.Header.Get(retry.header)
+		if v == "" {
+			continue
+		}
+		if retryAfter, _ := strconv.Atoi(v); retryAfter > 0 {
+			return time.Duration(retryAfter) * retry.units
+		} else if d := retry.custom(v); d > 0 {
+			return d
+		}
+	}
+
 	return 0
 }
 
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/CHANGELOG.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/CHANGELOG.md
index 7ea119ab30d..71dcb5f3e95 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/CHANGELOG.md
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/CHANGELOG.md
@@ -1,5 +1,38 @@
 # Release History
 
+## 1.5.1 (2024-01-17)
+
+### Bugs Fixed
+* `InteractiveBrowserCredential` handles `AdditionallyAllowedTenants` correctly
+
+## 1.5.0 (2024-01-16)
+
+### Breaking Changes
+> These changes affect only code written against a beta version such as v1.5.0-beta.1
+* Removed persistent token caching. It will return in v1.6.0-beta.1
+
+### Bugs Fixed
+* Credentials now preserve MSAL headers e.g. X-Client-Sku
+
+### Other Changes
+* Upgraded dependencies
+
+## 1.5.0-beta.2 (2023-11-07)
+
+### Features Added
+* `DefaultAzureCredential` and `ManagedIdentityCredential` support Azure ML managed identity
+* Added spans for distributed tracing.
+
+## 1.5.0-beta.1 (2023-10-10)
+
+### Features Added
+* Optional persistent token caching for most credentials. Set `TokenCachePersistenceOptions`
+  on a credential's options to enable and configure this. See the package documentation for
+  this version and [TOKEN_CACHING.md](https://aka.ms/azsdk/go/identity/caching) for more
+  details.
+* `AzureDeveloperCLICredential` authenticates with the Azure Developer CLI (`azd`). This
+  credential is also part of the `DefaultAzureCredential` authentication flow.
+
 ## 1.4.0 (2023-10-10)
 
 ### Bugs Fixed
@@ -94,14 +127,14 @@
 ### Features Added
 * By default, credentials set client capability "CP1" to enable support for
   [Continuous Access Evaluation (CAE)](https://docs.microsoft.com/azure/active-directory/develop/app-resilience-continuous-access-evaluation).
-  This indicates to Azure Active Directory that your application can handle CAE claims challenges.
+  This indicates to Microsoft Entra ID that your application can handle CAE claims challenges.
   You can disable this behavior by setting the environment variable "AZURE_IDENTITY_DISABLE_CP1" to "true".
 * `InteractiveBrowserCredentialOptions.LoginHint` enables pre-populating the login
   prompt with a username ([#15599](https://github.com/Azure/azure-sdk-for-go/pull/15599))
 * Service principal and user credentials support ADFS authentication on Azure Stack.
   Specify "adfs" as the credential's tenant.
 * Applications running in private or disconnected clouds can prevent credentials from
-  requesting Azure AD instance metadata by setting the `DisableInstanceDiscovery`
+  requesting Microsoft Entra instance metadata by setting the `DisableInstanceDiscovery`
   field on credential options.
 * Many credentials can now be configured to authenticate in multiple tenants. The
   options types for these credentials have an `AdditionallyAllowedTenants` field
@@ -454,4 +487,4 @@
 
 ## 0.1.0 (2020-07-23)
 ### Features Added
-* Initial Release. Azure Identity library that provides Azure Active Directory token authentication support for the SDK.
+* Initial Release. Azure Identity library that provides Microsoft Entra token authentication support for the SDK.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/MIGRATION.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/MIGRATION.md
index 4ac53eb7b27..1a649202303 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/MIGRATION.md
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/MIGRATION.md
@@ -1,6 +1,6 @@
 # Migrating from autorest/adal to azidentity
 
-`azidentity` provides Azure Active Directory (Azure AD) authentication for the newest Azure SDK modules (`github.com/azure-sdk-for-go/sdk/...`). Older Azure SDK packages (`github.com/azure-sdk-for-go/services/...`) use types from `github.com/go-autorest/autorest/adal` instead.
+`azidentity` provides Microsoft Entra ID ([formerly Azure Active Directory](https://learn.microsoft.com/azure/active-directory/fundamentals/new-name)) authentication for the newest Azure SDK modules (`github.com/azure-sdk-for-go/sdk/...`). Older Azure SDK packages (`github.com/azure-sdk-for-go/services/...`) use types from `github.com/go-autorest/autorest/adal` instead.
 
 This guide shows common authentication code using `autorest/adal` and its equivalent using `azidentity`.
 
@@ -18,7 +18,7 @@ This guide shows common authentication code using `autorest/adal` and its equiva
 
 ### `autorest/adal`
 
-Token providers require a token audience (resource identifier) and an instance of `adal.OAuthConfig`, which requires an Azure AD endpoint and tenant:
+Token providers require a token audience (resource identifier) and an instance of `adal.OAuthConfig`, which requires a Microsoft Entra endpoint and tenant:
 
 ```go
 import "github.com/Azure/go-autorest/autorest/adal"
@@ -284,7 +284,7 @@ if err == nil {
 }
 ```
 
-Note that `azidentity` credentials use the Azure AD v2.0 endpoint, which requires OAuth 2 scopes instead of the resource identifiers `autorest/adal` expects. For more information, see [Azure AD documentation](https://docs.microsoft.com/azure/active-directory/develop/v2-permissions-and-consent).
+Note that `azidentity` credentials use the Microsoft Entra endpoint, which requires OAuth 2 scopes instead of the resource identifiers `autorest/adal` expects. For more information, see [Microsoft Entra ID documentation](https://learn.microsoft.com/azure/active-directory/develop/permissions-consent-overview).
 
 ## Use azidentity credentials with older packages
 
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/README.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/README.md
index da0baa9add3..b6ad2d39f84 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/README.md
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/README.md
@@ -1,9 +1,9 @@
 # Azure Identity Client Module for Go
 
-The Azure Identity module provides Azure Active Directory (Azure AD) token authentication support across the Azure SDK. It includes a set of `TokenCredential` implementations, which can be used with Azure SDK clients supporting token authentication.
+The Azure Identity module provides Microsoft Entra ID ([formerly Azure Active Directory](https://learn.microsoft.com/azure/active-directory/fundamentals/new-name)) token authentication support across the Azure SDK. It includes a set of `TokenCredential` implementations, which can be used with Azure SDK clients supporting token authentication.
 
 [![PkgGoDev](https://pkg.go.dev/badge/github.com/Azure/azure-sdk-for-go/sdk/azidentity)](https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity)
-| [Azure Active Directory documentation](https://docs.microsoft.com/azure/active-directory/)
+| [Microsoft Entra ID documentation](https://learn.microsoft.com/azure/active-directory/)
 | [Source code](https://github.com/Azure/azure-sdk-for-go/tree/main/sdk/azidentity)
 
 # Getting started
@@ -35,6 +35,12 @@ signed in to the [Azure CLI](https://docs.microsoft.com/cli/azure). To sign in t
 When no default browser is available, `az login` will use the device code
 authentication flow. This can also be selected manually by running `az login --use-device-code`.
 
+#### Authenticate via the Azure Developer CLI
+
+Developers coding outside of an IDE can also use the [Azure Developer CLI](https://aka.ms/azure-dev) to authenticate. Applications using the `DefaultAzureCredential` or the `AzureDeveloperCLICredential` can use the account logged in to the Azure Developer CLI to authenticate calls in their application when running locally.
+
+To authenticate with the Azure Developer CLI, run `azd auth login`. On a system with a default web browser, `azd` will launch the browser to authenticate. On systems without a default web browser, run `azd auth login --use-device-code` to use the device code authentication flow.
+
 ## Key concepts
 
 ### Credentials
@@ -44,9 +50,7 @@ service client to authenticate requests. Service clients across the Azure SDK
 accept a credential instance when they are constructed, and use that credential
 to authenticate requests.
 
-The `azidentity` module focuses on OAuth authentication with Azure Active
-Directory (AAD). It offers a variety of credential types capable of acquiring
-an Azure AD access token. See [Credential Types](#credential-types "Credential Types") for a list of this module's credential types.
+The `azidentity` module focuses on OAuth authentication with Microsoft Entra ID. It offers a variety of credential types capable of acquiring a Microsoft Entra access token. See [Credential Types](#credential-types "Credential Types") for a list of this module's credential types.
 
 ### DefaultAzureCredential
 
@@ -58,6 +62,7 @@ an Azure AD access token. See [Credential Types](#credential-types "Credential T
 1. **Workload Identity** - If the app is deployed on Kubernetes with environment variables set by the workload identity webhook, `DefaultAzureCredential` will authenticate the configured identity.
 1. **Managed Identity** - If the app is deployed to an Azure host with managed identity enabled, `DefaultAzureCredential` will authenticate with it.
 1. **Azure CLI** - If a user or service principal has authenticated via the Azure CLI `az login` command, `DefaultAzureCredential` will authenticate that identity.
+1. **Azure Developer CLI** - If the developer has authenticated via the Azure Developer CLI `azd auth login` command, the `DefaultAzureCredential` will authenticate with that account.
 
 > Note: `DefaultAzureCredential` is intended to simplify getting started with the SDK by handling common scenarios with reasonable default behaviors. Developers who want more control or whose scenario isn't served by the default settings should use other credential types.
 
@@ -152,6 +157,7 @@ client := armresources.NewResourceGroupsClient("subscription ID", chain, nil)
 |Credential|Usage
 |-|-
 |[AzureCLICredential](https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity#AzureCLICredential)|Authenticate as the user signed in to the Azure CLI
+|[`AzureDeveloperCLICredential`](https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity#AzureDeveloperCLICredential)|Authenticates as the user signed in to the Azure Developer CLI
 
 ## Environment Variables
 
@@ -161,16 +167,16 @@ client := armresources.NewResourceGroupsClient("subscription ID", chain, nil)
 
 |variable name|value
 |-|-
-|`AZURE_CLIENT_ID`|ID of an Azure Active Directory application
-|`AZURE_TENANT_ID`|ID of the application's Azure Active Directory tenant
+|`AZURE_CLIENT_ID`|ID of a Microsoft Entra application
+|`AZURE_TENANT_ID`|ID of the application's Microsoft Entra tenant
 |`AZURE_CLIENT_SECRET`|one of the application's client secrets
 
 #### Service principal with certificate
 
 |variable name|value
 |-|-
-|`AZURE_CLIENT_ID`|ID of an Azure Active Directory application
-|`AZURE_TENANT_ID`|ID of the application's Azure Active Directory tenant
+|`AZURE_CLIENT_ID`|ID of a Microsoft Entra application
+|`AZURE_TENANT_ID`|ID of the application's Microsoft Entra tenant
 |`AZURE_CLIENT_CERTIFICATE_PATH`|path to a certificate file including private key
 |`AZURE_CLIENT_CERTIFICATE_PASSWORD`|password of the certificate file, if any
 
@@ -178,22 +184,30 @@ client := armresources.NewResourceGroupsClient("subscription ID", chain, nil)
 
 |variable name|value
 |-|-
-|`AZURE_CLIENT_ID`|ID of an Azure Active Directory application
+|`AZURE_CLIENT_ID`|ID of a Microsoft Entra application
 |`AZURE_USERNAME`|a username (usually an email address)
 |`AZURE_PASSWORD`|that user's password
 
 Configuration is attempted in the above order. For example, if values for a
 client secret and certificate are both present, the client secret will be used.
 
+## Token caching
+
+Token caching is an `azidentity` feature that allows apps to:
+
+* Cache tokens in memory (default) or on disk (opt-in).
+* Improve resilience and performance.
+* Reduce the number of requests made to Microsoft Entra ID to obtain access tokens.
+
+For more details, see the [token caching documentation](https://aka.ms/azsdk/go/identity/caching).
+
 ## Troubleshooting
 
 ### Error Handling
 
 Credentials return an `error` when they fail to authenticate or lack data they require to authenticate. For guidance on resolving errors from specific credential types, see the [troubleshooting guide](https://aka.ms/azsdk/go/identity/troubleshoot).
 
-For more details on handling specific Azure Active Directory errors please refer to the
-Azure Active Directory
-[error code documentation](https://docs.microsoft.com/azure/active-directory/develop/reference-aadsts-error-codes).
+For more details on handling specific Microsoft Entra errors, see the Microsoft Entra [error code documentation](https://learn.microsoft.com/azure/active-directory/develop/reference-error-codes).
 
 ### Logging
 
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/TOKEN_CACHING.MD b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/TOKEN_CACHING.MD
new file mode 100644
index 00000000000..c0d6601469c
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/TOKEN_CACHING.MD
@@ -0,0 +1,70 @@
+## Token caching in the Azure Identity client module
+
+*Token caching* is a feature provided by the Azure Identity library that allows apps to:
+
+- Improve their resilience and performance.
+- Reduce the number of requests made to Microsoft Entra ID to obtain access tokens.
+- Reduce the number of times the user is prompted to authenticate.
+
+When an app needs to access a protected Azure resource, it typically needs to obtain an access token from Entra ID. Obtaining that token involves sending a request to Entra ID and may also involve prompting the user. Entra ID then validates the credentials provided in the request and issues an access token.
+
+Token caching, via the Azure Identity library, allows the app to store this access token [in memory](#in-memory-token-caching), where it's accessible to the current process, or [on disk](#persistent-token-caching) where it can be accessed across application or process invocations. The token can then be retrieved quickly and easily the next time the app needs to access the same resource. The app can avoid making another request to Entra ID, which reduces network traffic and improves resilience. Additionally, in scenarios where the app is authenticating users, token caching also avoids prompting the user each time new tokens are requested.
+
+### In-memory token caching
+
+*In-memory token caching* is the default option provided by the Azure Identity library. This caching approach allows apps to store access tokens in memory. With in-memory token caching, the library first determines if a valid access token for the requested resource is already stored in memory. If a valid token is found, it's returned to the app without the need to make another request to Entra ID. If a valid token isn't found, the library will automatically acquire a token by sending a request to Entra ID. The in-memory token cache provided by the Azure Identity library is thread-safe.
+
+**Note:** When Azure Identity library credentials are used with Azure service libraries (for example, Azure Blob Storage), the in-memory token caching is active in the `Pipeline` layer as well. All `TokenCredential` implementations are supported there, including custom implementations external to the Azure Identity library.
+
+#### Caching cannot be disabled
+
+As there are many levels of caching, it's not possible disable in-memory caching. However, the in-memory cache may be cleared by creating a new credential instance.
+
+### Persistent token caching
+
+> Only azidentity v1.5.0-beta versions support persistent token caching
+
+*Persistent disk token caching* is an opt-in feature in the Azure Identity library. The feature allows apps to cache access tokens in an encrypted, persistent storage mechanism. As indicated in the following table, the storage mechanism differs across operating systems.
+
+| Operating system | Storage mechanism                     |
+|------------------|---------------------------------------|
+| Linux            | kernel key retention service (keyctl) |
+| macOS            | Keychain                              |
+| Windows          | DPAPI                                 |
+
+By default the token cache will protect any data which is persisted using the user data protection APIs available on the current platform.
+However, there are cases where no data protection is available, and applications may choose to allow storing the token cache in an unencrypted state by setting `TokenCachePersistenceOptions.AllowUnencryptedStorage` to `true`. This allows a credential to fall back to unencrypted storage if it can't encrypt the cache. However, we do not recommend using this storage method due to its significantly lower security measures. In addition, tokens are not encrypted solely to the current user, which could potentially allow unauthorized access to the cache by individuals with machine access.
+
+With persistent disk token caching enabled, the library first determines if a valid access token for the requested resource is already stored in the persistent cache. If a valid token is found, it's returned to the app without the need to make another request to Entra ID. Additionally, the tokens are preserved across app runs, which:
+
+- Makes the app more resilient to failures.
+- Ensures the app can continue to function during an Entra ID outage or disruption.
+- Avoids having to prompt users to authenticate each time the process is restarted.
+
+>IMPORTANT! The token cache contains sensitive data and **MUST** be protected to prevent compromising accounts. All application decisions regarding the persistence of the token cache must consider that a breach of its content will fully compromise all the accounts it contains.
+
+#### Example code
+
+See the [package documentation](https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.0-beta.1#pkg-overview) for code examples demonstrating how to configure persistent caching and access cached data.
+
+### Credentials supporting token caching
+
+The following table indicates the state of in-memory and persistent caching in each credential type.
+
+**Note:** In-memory caching is activated by default. Persistent token caching needs to be enabled as shown in [this example](https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.0-beta.1#example-package-PersistentCache).
+
+| Credential                     | In-memory token caching                                             | Persistent token caching |
+|--------------------------------|---------------------------------------------------------------------|--------------------------|
+| `AzureCLICredential`           | Not Supported                                                       | Not Supported            |
+| `AzureDeveloperCLICredential`  | Not Supported                                                       | Not Supported            |
+| `ClientAssertionCredential`    | Supported                                                           | Supported                |
+| `ClientCertificateCredential`  | Supported                                                           | Supported                |
+| `ClientSecretCredential`       | Supported                                                           | Supported                |
+| `DefaultAzureCredential`       | Supported if the target credential in the default chain supports it | Not Supported            |
+| `DeviceCodeCredential`         | Supported                                                           | Supported                |
+| `EnvironmentCredential`        | Supported                                                           | Not Supported            |
+| `InteractiveBrowserCredential` | Supported                                                           | Supported                |
+| `ManagedIdentityCredential`    | Supported                                                           | Not Supported            |
+| `OnBehalfOfCredential`         | Supported                                                           | Supported                |
+| `UsernamePasswordCredential`   | Supported                                                           | Supported                |
+| `WorkloadIdentityCredential`   | Supported                                                           | Supported                |
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/TROUBLESHOOTING.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/TROUBLESHOOTING.md
index fef099813c8..832c599eb90 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/TROUBLESHOOTING.md
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/TROUBLESHOOTING.md
@@ -8,7 +8,8 @@ This troubleshooting guide covers failure investigation techniques, common error
   - [Permission issues](#permission-issues)
 - [Find relevant information in errors](#find-relevant-information-in-errors)
 - [Enable and configure logging](#enable-and-configure-logging)
-- [Troubleshoot AzureCliCredential authentication issues](#troubleshoot-azureclicredential-authentication-issues)
+- [Troubleshoot AzureCLICredential authentication issues](#troubleshoot-azureclicredential-authentication-issues)
+- [Troubleshoot AzureDeveloperCLICredential authentication issues](#troubleshoot-azuredeveloperclicredential-authentication-issues)
 - [Troubleshoot ClientCertificateCredential authentication issues](#troubleshoot-clientcertificatecredential-authentication-issues)
 - [Troubleshoot ClientSecretCredential authentication issues](#troubleshoot-clientsecretcredential-authentication-issues)
 - [Troubleshoot DefaultAzureCredential authentication issues](#troubleshoot-defaultazurecredential-authentication-issues)
@@ -23,7 +24,7 @@ This troubleshooting guide covers failure investigation techniques, common error
 
 ## Handle azidentity errors
 
-Any service client method that makes a request to the service may return an error due to authentication failure. This is because the credential authenticates on the first call to the service and on any subsequent call that needs to refresh an access token. Authentication errors include a description of the failure and possibly an error message from Azure Active Directory (Azure AD). Depending on the application, these errors may or may not be recoverable.
+Any service client method that makes a request to the service may return an error due to authentication failure. This is because the credential authenticates on the first call to the service and on any subsequent call that needs to refresh an access token. Authentication errors include a description of the failure and possibly an error message from Microsoft Entra ID. Depending on the application, these errors may or may not be recoverable.
 
 ### Permission issues
 
@@ -31,7 +32,7 @@ Service client errors with a status code of 401 or 403 often indicate that authe
 
 ## Find relevant information in errors
 
-Authentication errors can include responses from Azure AD and often contain information helpful in diagnosis. Consider the following error message:
+Authentication errors can include responses from Microsoft Entra ID and often contain information helpful in diagnosis. Consider the following error message:
 
 ```
 ClientSecretCredential authentication failed
@@ -57,9 +58,9 @@ This error contains several pieces of information:
 
 - __Failing Credential Type__: The type of credential that failed to authenticate. This can be helpful when diagnosing issues with chained credential types such as `DefaultAzureCredential` or `ChainedTokenCredential`.
 
-- __Azure AD Error Code and Message__: The error code and message returned by Azure AD. This can give insight into the specific reason the request failed. For instance, in this case authentication failed because the provided client secret is incorrect. [Azure AD documentation](https://docs.microsoft.com/azure/active-directory/develop/reference-aadsts-error-codes#aadsts-error-codes) has more information on AADSTS error codes.
+- __Microsoft Entra ID Error Code and Message__: The error code and message returned by Microsoft Entra ID. This can give insight into the specific reason the request failed. For instance, in this case authentication failed because the provided client secret is incorrect. [Microsoft Entra ID documentation](https://learn.microsoft.com/azure/active-directory/develop/reference-error-codes#aadsts-error-codes) has more information on AADSTS error codes.
 
-- __Correlation ID and Timestamp__: The correlation ID and timestamp identify the request in server-side logs. This information can be useful to support engineers diagnosing unexpected Azure AD failures.
+- __Correlation ID and Timestamp__: The correlation ID and timestamp identify the request in server-side logs. This information can be useful to support engineers diagnosing unexpected Microsoft Entra failures.
 
 ### Enable and configure logging
 
@@ -96,17 +97,17 @@ azlog.SetEvents(azidentity.EventAuthentication)
 
 | Error Code | Issue | Mitigation |
 |---|---|---|
-|AADSTS7000215|An invalid client secret was provided.|Ensure the secret provided to the credential constructor is valid. If unsure, create a new client secret using the Azure portal. Details on creating a new client secret are in [Azure AD documentation](https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal#option-2-create-a-new-application-secret).|
-|AADSTS7000222|An expired client secret was provided.|Create a new client secret using the Azure portal. Details on creating a new client secret are in [Azure AD documentation](https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal#option-2-create-a-new-application-secret).|
-|AADSTS700016|The specified application wasn't found in the specified tenant.|Ensure the client and tenant IDs provided to the credential constructor are correct for your application registration. For multi-tenant apps, ensure the application has been added to the desired tenant by a tenant admin. To add a new application in the desired tenant, follow the [Azure AD instructions](https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal).|
+|AADSTS7000215|An invalid client secret was provided.|Ensure the secret provided to the credential constructor is valid. If unsure, create a new client secret using the Azure portal. Details on creating a new client secret are in [Microsoft Entra ID documentation](https://learn.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal#option-2-create-a-new-application-secret).|
+|AADSTS7000222|An expired client secret was provided.|Create a new client secret using the Azure portal. Details on creating a new client secret are in [Microsoft Entra ID documentation](https://learn.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal#option-2-create-a-new-application-secret).|
+|AADSTS700016|The specified application wasn't found in the specified tenant.|Ensure the client and tenant IDs provided to the credential constructor are correct for your application registration. For multi-tenant apps, ensure the application has been added to the desired tenant by a tenant admin. To add a new application in the desired tenant, follow the [Microsoft Entra ID instructions](https://learn.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal).|
 
 <a id="client-cert"></a>
 ## Troubleshoot ClientCertificateCredential authentication issues
 
 | Error Code | Description | Mitigation |
 |---|---|---|
-|AADSTS700027|Client assertion contains an invalid signature.|Ensure the specified certificate has been uploaded to the application registration as described in [Azure AD documentation](https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal#option-1-upload-a-certificate).|
-|AADSTS700016|The specified application wasn't found in the specified tenant.|Ensure the client and tenant IDs provided to the credential constructor are correct for your application registration. For multi-tenant apps, ensure the application has been added to the desired tenant by a tenant admin. To add a new application in the desired tenant, follow the [Azure AD instructions](https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal).|
+|AADSTS700027|Client assertion contains an invalid signature.|Ensure the specified certificate has been uploaded to the application registration as described in [Microsoft Entra ID documentation](https://learn.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal#option-1-upload-a-certificate).|
+|AADSTS700016|The specified application wasn't found in the specified tenant.|Ensure the client and tenant IDs provided to the credential constructor are correct for your application registration. For multi-tenant apps, ensure the application has been added to the desired tenant by a tenant admin. To add a new application in the desired tenant, follow the [Microsoft Entra ID instructions](https://learn.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal).|
 
 <a id="username-password"></a>
 ## Troubleshoot UsernamePasswordCredential authentication issues
@@ -172,7 +173,7 @@ curl "$IDENTITY_ENDPOINT?resource=https://management.core.windows.net&api-versio
 |"no azure identity found for request clientID"|The application attempted to authenticate before an identity was assigned to its pod|Verify the pod is labeled correctly. This also occurs when a correctly labeled pod authenticates before the identity is ready. To prevent initialization races, configure NMI to set the Retry-After header in its responses as described in [Pod Identity documentation](https://azure.github.io/aad-pod-identity/docs/configure/feature_flags/#set-retry-after-header-in-nmi-response).
 
 <a id="azure-cli"></a>
-## Troubleshoot AzureCliCredential authentication issues
+## Troubleshoot AzureCLICredential authentication issues
 
 | Error Message |Description| Mitigation |
 |---|---|---|
@@ -195,6 +196,29 @@ az account get-access-token --output json --resource https://management.core.win
 
 > This command's output will contain an access token and SHOULD NOT BE SHARED, to avoid compromising account security.
 
+<a id="azd"></a>
+## Troubleshoot AzureDeveloperCLICredential authentication issues
+
+| Error Message |Description| Mitigation |
+|---|---|---|
+|Azure Developer CLI not found on path|The Azure Developer CLI isn't installed or couldn't be found.|<ul><li>Ensure the Azure Developer CLI is properly installed. See the installation instructions at [Install or update the Azure Developer CLI](https://learn.microsoft.com/azure/developer/azure-developer-cli/install-azd).</li><li>Validate the installation location has been added to the `PATH` environment variable.</li></ul>|
+|Please run "azd auth login"|No account is logged into the Azure Developer CLI, or the login has expired.|<ul><li>Log in to the Azure Developer CLI using the `azd login` command.</li><li>Validate that the Azure Developer CLI can obtain tokens. For instructions, see [Verify the Azure Developer CLI can obtain tokens](#verify-the-azure-developer-cli-can-obtain-tokens).</li></ul>|
+
+#### Verify the Azure Developer CLI can obtain tokens
+
+You can manually verify that the Azure Developer CLI is properly authenticated and can obtain tokens. First, use the `config` command to verify the account that is currently logged in to the Azure Developer CLI.
+
+```sh
+azd config list
+```
+
+Once you've verified the Azure Developer CLI is using correct account, you can validate that it's able to obtain tokens for this account.
+
+```sh
+azd auth token --output json --scope https://management.core.windows.net/.default
+```
+>Note that output of this command will contain a valid access token, and SHOULD NOT BE SHARED to avoid compromising account security.
+
 <a id="workload"></a>
 ## Troubleshoot `WorkloadIdentityCredential` authentication issues
 
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/assets.json b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/assets.json
index 47e77f88e3f..173ce2b3cda 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/assets.json
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/assets.json
@@ -2,5 +2,5 @@
   "AssetsRepo": "Azure/azure-sdk-assets",
   "AssetsRepoPrefixPath": "go",
   "TagPrefix": "go/azidentity",
-  "Tag": "go/azidentity_6225ab0470"
+  "Tag": "go/azidentity_db4a26f583"
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/authentication_record.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/authentication_record.go
new file mode 100644
index 00000000000..ada4d6501d2
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/authentication_record.go
@@ -0,0 +1,95 @@
+//go:build go1.18
+// +build go1.18
+
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+package azidentity
+
+import (
+	"encoding/json"
+	"errors"
+	"fmt"
+	"net/url"
+	"strings"
+
+	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/public"
+)
+
+var supportedAuthRecordVersions = []string{"1.0"}
+
+// authenticationRecord is non-secret account information about an authenticated user that user credentials such as
+// [DeviceCodeCredential] and [InteractiveBrowserCredential] can use to access previously cached authentication
+// data. Call these credentials' Authenticate method to get an authenticationRecord for a user.
+type authenticationRecord struct {
+	// Authority is the URL of the authority that issued the token.
+	Authority string `json:"authority"`
+
+	// ClientID is the ID of the application that authenticated the user.
+	ClientID string `json:"clientId"`
+
+	// HomeAccountID uniquely identifies the account.
+	HomeAccountID string `json:"homeAccountId"`
+
+	// TenantID identifies the tenant in which the user authenticated.
+	TenantID string `json:"tenantId"`
+
+	// Username is the user's preferred username.
+	Username string `json:"username"`
+
+	// Version of the AuthenticationRecord.
+	Version string `json:"version"`
+}
+
+// UnmarshalJSON implements json.Unmarshaler for AuthenticationRecord
+func (a *authenticationRecord) UnmarshalJSON(b []byte) error {
+	// Default unmarshaling is fine but we want to return an error if the record's version isn't supported i.e., we
+	// want to inspect the unmarshalled values before deciding whether to return an error. Unmarshaling a formally
+	// different type enables this by assigning all the fields without recursing into this method.
+	type r authenticationRecord
+	err := json.Unmarshal(b, (*r)(a))
+	if err != nil {
+		return err
+	}
+	if a.Version == "" {
+		return errors.New("AuthenticationRecord must have a version")
+	}
+	for _, v := range supportedAuthRecordVersions {
+		if a.Version == v {
+			return nil
+		}
+	}
+	return fmt.Errorf("unsupported AuthenticationRecord version %q. This module supports %v", a.Version, supportedAuthRecordVersions)
+}
+
+// account returns the AuthenticationRecord as an MSAL Account. The account is zero-valued when the AuthenticationRecord is zero-valued.
+func (a *authenticationRecord) account() public.Account {
+	return public.Account{
+		Environment:       a.Authority,
+		HomeAccountID:     a.HomeAccountID,
+		PreferredUsername: a.Username,
+	}
+}
+
+func newAuthenticationRecord(ar public.AuthResult) (authenticationRecord, error) {
+	u, err := url.Parse(ar.IDToken.Issuer)
+	if err != nil {
+		return authenticationRecord{}, fmt.Errorf("Authenticate expected a URL issuer but got %q", ar.IDToken.Issuer)
+	}
+	tenant := ar.IDToken.TenantID
+	if tenant == "" {
+		tenant = strings.Trim(u.Path, "/")
+	}
+	username := ar.IDToken.PreferredUsername
+	if username == "" {
+		username = ar.IDToken.UPN
+	}
+	return authenticationRecord{
+		Authority:     fmt.Sprintf("%s://%s", u.Scheme, u.Host),
+		ClientID:      ar.IDToken.Audience,
+		HomeAccountID: ar.Account.HomeAccountID,
+		TenantID:      tenant,
+		Username:      username,
+		Version:       "1.0",
+	}, nil
+}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azidentity.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azidentity.go
index 10b742ce1a1..c3bcfb56c0a 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azidentity.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azidentity.go
@@ -15,12 +15,12 @@ import (
 	"net/http"
 	"net/url"
 	"os"
-	"regexp"
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/cloud"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/streaming"
+	"github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal"
 	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential"
 	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/public"
 )
@@ -41,6 +41,10 @@ const (
 	organizationsTenantID   = "organizations"
 	developerSignOnClientID = "04b07795-8ddb-461a-bbee-02f9e1bf7b46"
 	defaultSuffix           = "/.default"
+
+	traceNamespace      = "Microsoft.Entra"
+	traceOpGetToken     = "GetToken"
+	traceOpAuthenticate = "Authenticate"
 )
 
 var (
@@ -49,6 +53,9 @@ var (
 	errInvalidTenantID = errors.New("invalid tenantID. You can locate your tenantID by following the instructions listed here: https://learn.microsoft.com/partner-center/find-ids-and-domain-names")
 )
 
+// tokenCachePersistenceOptions contains options for persistent token caching
+type tokenCachePersistenceOptions = internal.TokenCachePersistenceOptions
+
 // setAuthorityHost initializes the authority host for credentials. Precedence is:
 //  1. cloud.Configuration.ActiveDirectoryAuthorityHost value set by user
 //  2. value of AZURE_AUTHORITY_HOST
@@ -109,29 +116,20 @@ func resolveTenant(defaultTenant, specified, credName string, additionalTenants
 	return "", fmt.Errorf(`%s isn't configured to acquire tokens for tenant %q. To enable acquiring tokens for this tenant add it to the AdditionallyAllowedTenants on the credential options, or add "*" to allow acquiring tokens for any tenant`, credName, specified)
 }
 
-// validTenantID return true is it receives a valid tenantID, returns false otherwise
-func validTenantID(tenantID string) bool {
-	match, err := regexp.MatchString("^[0-9a-zA-Z-.]+$", tenantID)
-	if err != nil {
-		return false
-	}
-	return match
-}
-
-func newPipelineAdapter(opts *azcore.ClientOptions) pipelineAdapter {
-	pl := runtime.NewPipeline(component, version, runtime.PipelineOptions{}, opts)
-	return pipelineAdapter{pl: pl}
-}
-
-type pipelineAdapter struct {
-	pl runtime.Pipeline
+func alphanumeric(r rune) bool {
+	return ('0' <= r && r <= '9') || ('a' <= r && r <= 'z') || ('A' <= r && r <= 'Z')
 }
 
-func (p pipelineAdapter) CloseIdleConnections() {
-	// do nothing
+func validTenantID(tenantID string) bool {
+	for _, r := range tenantID {
+		if !(alphanumeric(r) || r == '.' || r == '-') {
+			return false
+		}
+	}
+	return true
 }
 
-func (p pipelineAdapter) Do(r *http.Request) (*http.Response, error) {
+func doForClient(client *azcore.Client, r *http.Request) (*http.Response, error) {
 	req, err := runtime.NewRequest(r.Context(), r.Method, r.URL.String())
 	if err != nil {
 		return nil, err
@@ -153,7 +151,18 @@ func (p pipelineAdapter) Do(r *http.Request) (*http.Response, error) {
 			return nil, err
 		}
 	}
-	resp, err := p.pl.Do(req)
+
+	// copy headers to the new request, ignoring any for which the new request has a value
+	h := req.Raw().Header
+	for key, vals := range r.Header {
+		if _, has := h[key]; !has {
+			for _, val := range vals {
+				h.Add(key, val)
+			}
+		}
+	}
+
+	resp, err := client.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azure_cli_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azure_cli_credential.go
index 55a0d654347..43577ab3c5f 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azure_cli_credential.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azure_cli_credential.go
@@ -14,7 +14,6 @@ import (
 	"fmt"
 	"os"
 	"os/exec"
-	"regexp"
 	"runtime"
 	"strings"
 	"sync"
@@ -25,13 +24,9 @@ import (
 	"github.com/Azure/azure-sdk-for-go/sdk/internal/log"
 )
 
-const (
-	credNameAzureCLI  = "AzureCLICredential"
-	timeoutCLIRequest = 10 * time.Second
-)
+const credNameAzureCLI = "AzureCLICredential"
 
-// used by tests to fake invoking the CLI
-type azureCLITokenProvider func(ctx context.Context, resource string, tenantID string) ([]byte, error)
+type azTokenProvider func(ctx context.Context, scopes []string, tenant, subscription string) ([]byte, error)
 
 // AzureCLICredentialOptions contains optional parameters for AzureCLICredential.
 type AzureCLICredentialOptions struct {
@@ -39,17 +34,25 @@ type AzureCLICredentialOptions struct {
 	// to TenantID. Add the wildcard value "*" to allow the credential to acquire tokens for any tenant the
 	// logged in account can access.
 	AdditionallyAllowedTenants []string
+
+	// subscription is the name or ID of a subscription. Set this to acquire tokens for an account other
+	// than the Azure CLI's current account.
+	subscription string
+
 	// TenantID identifies the tenant the credential should authenticate in.
 	// Defaults to the CLI's default tenant, which is typically the home tenant of the logged in user.
 	TenantID string
 
-	tokenProvider azureCLITokenProvider
+	// inDefaultChain is true when the credential is part of DefaultAzureCredential
+	inDefaultChain bool
+	// tokenProvider is used by tests to fake invoking az
+	tokenProvider azTokenProvider
 }
 
 // init returns an instance of AzureCLICredentialOptions initialized with default values.
 func (o *AzureCLICredentialOptions) init() {
 	if o.tokenProvider == nil {
-		o.tokenProvider = defaultTokenProvider
+		o.tokenProvider = defaultAzTokenProvider
 	}
 }
 
@@ -65,6 +68,14 @@ func NewAzureCLICredential(options *AzureCLICredentialOptions) (*AzureCLICredent
 	if options != nil {
 		cp = *options
 	}
+	for _, r := range cp.subscription {
+		if !(alphanumeric(r) || r == '-' || r == '_' || r == ' ' || r == '.') {
+			return nil, fmt.Errorf("%s: invalid Subscription %q", credNameAzureCLI, cp.subscription)
+		}
+	}
+	if cp.TenantID != "" && !validTenantID(cp.TenantID) {
+		return nil, errInvalidTenantID
+	}
 	cp.init()
 	cp.AdditionallyAllowedTenants = resolveAdditionalTenants(cp.AdditionallyAllowedTenants)
 	return &AzureCLICredential{mu: &sync.Mutex{}, opts: cp}, nil
@@ -73,50 +84,51 @@ func NewAzureCLICredential(options *AzureCLICredentialOptions) (*AzureCLICredent
 // GetToken requests a token from the Azure CLI. This credential doesn't cache tokens, so every call invokes the CLI.
 // This method is called automatically by Azure SDK clients.
 func (c *AzureCLICredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
+	at := azcore.AccessToken{}
 	if len(opts.Scopes) != 1 {
-		return azcore.AccessToken{}, errors.New(credNameAzureCLI + ": GetToken() requires exactly one scope")
+		return at, errors.New(credNameAzureCLI + ": GetToken() requires exactly one scope")
+	}
+	if !validScope(opts.Scopes[0]) {
+		return at, fmt.Errorf("%s.GetToken(): invalid scope %q", credNameAzureCLI, opts.Scopes[0])
 	}
 	tenant, err := resolveTenant(c.opts.TenantID, opts.TenantID, credNameAzureCLI, c.opts.AdditionallyAllowedTenants)
 	if err != nil {
-		return azcore.AccessToken{}, err
+		return at, err
 	}
-	// pass the CLI an AAD v1 resource because we don't know which CLI version is installed and older ones don't support v2 scopes
-	opts.Scopes = []string{strings.TrimSuffix(opts.Scopes[0], defaultSuffix)}
 	c.mu.Lock()
 	defer c.mu.Unlock()
-	b, err := c.opts.tokenProvider(ctx, opts.Scopes[0], tenant)
-	if err != nil {
-		return azcore.AccessToken{}, err
+	b, err := c.opts.tokenProvider(ctx, opts.Scopes, tenant, c.opts.subscription)
+	if err == nil {
+		at, err = c.createAccessToken(b)
 	}
-	at, err := c.createAccessToken(b)
 	if err != nil {
-		return azcore.AccessToken{}, err
+		err = unavailableIfInChain(err, c.opts.inDefaultChain)
+		return at, err
 	}
 	msg := fmt.Sprintf("%s.GetToken() acquired a token for scope %q", credNameAzureCLI, strings.Join(opts.Scopes, ", "))
 	log.Write(EventAuthentication, msg)
 	return at, nil
 }
 
-var defaultTokenProvider azureCLITokenProvider = func(ctx context.Context, resource string, tenantID string) ([]byte, error) {
-	match, err := regexp.MatchString("^[0-9a-zA-Z-.:/]+$", resource)
-	if err != nil {
-		return nil, err
-	}
-	if !match {
-		return nil, fmt.Errorf(`%s: unexpected scope "%s". Only alphanumeric characters and ".", ";", "-", and "/" are allowed`, credNameAzureCLI, resource)
-	}
-
+// defaultAzTokenProvider invokes the Azure CLI to acquire a token. It assumes
+// callers have verified that all string arguments are safe to pass to the CLI.
+var defaultAzTokenProvider azTokenProvider = func(ctx context.Context, scopes []string, tenantID, subscription string) ([]byte, error) {
+	// pass the CLI a Microsoft Entra ID v1 resource because we don't know which CLI version is installed and older ones don't support v2 scopes
+	resource := strings.TrimSuffix(scopes[0], defaultSuffix)
 	// set a default timeout for this authentication iff the application hasn't done so already
 	var cancel context.CancelFunc
 	if _, hasDeadline := ctx.Deadline(); !hasDeadline {
-		ctx, cancel = context.WithTimeout(ctx, timeoutCLIRequest)
+		ctx, cancel = context.WithTimeout(ctx, cliTimeout)
 		defer cancel()
 	}
-
 	commandLine := "az account get-access-token -o json --resource " + resource
 	if tenantID != "" {
 		commandLine += " --tenant " + tenantID
 	}
+	if subscription != "" {
+		// subscription needs quotes because it may contain spaces
+		commandLine += ` --subscription "` + subscription + `"`
+	}
 	var cliCmd *exec.Cmd
 	if runtime.GOOS == "windows" {
 		dir := os.Getenv("SYSTEMROOT")
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azure_developer_cli_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azure_developer_cli_credential.go
new file mode 100644
index 00000000000..cbe7c4c2db1
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azure_developer_cli_credential.go
@@ -0,0 +1,169 @@
+//go:build go1.18
+// +build go1.18
+
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+package azidentity
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"os"
+	"os/exec"
+	"runtime"
+	"strings"
+	"sync"
+	"time"
+
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
+	"github.com/Azure/azure-sdk-for-go/sdk/internal/log"
+)
+
+const credNameAzureDeveloperCLI = "AzureDeveloperCLICredential"
+
+type azdTokenProvider func(ctx context.Context, scopes []string, tenant string) ([]byte, error)
+
+// AzureDeveloperCLICredentialOptions contains optional parameters for AzureDeveloperCLICredential.
+type AzureDeveloperCLICredentialOptions struct {
+	// AdditionallyAllowedTenants specifies tenants for which the credential may acquire tokens, in addition
+	// to TenantID. Add the wildcard value "*" to allow the credential to acquire tokens for any tenant the
+	// logged in account can access.
+	AdditionallyAllowedTenants []string
+
+	// TenantID identifies the tenant the credential should authenticate in. Defaults to the azd environment,
+	// which is the tenant of the selected Azure subscription.
+	TenantID string
+
+	// inDefaultChain is true when the credential is part of DefaultAzureCredential
+	inDefaultChain bool
+	// tokenProvider is used by tests to fake invoking azd
+	tokenProvider azdTokenProvider
+}
+
+// AzureDeveloperCLICredential authenticates as the identity logged in to the [Azure Developer CLI].
+//
+// [Azure Developer CLI]: https://learn.microsoft.com/azure/developer/azure-developer-cli/overview
+type AzureDeveloperCLICredential struct {
+	mu   *sync.Mutex
+	opts AzureDeveloperCLICredentialOptions
+}
+
+// NewAzureDeveloperCLICredential constructs an AzureDeveloperCLICredential. Pass nil to accept default options.
+func NewAzureDeveloperCLICredential(options *AzureDeveloperCLICredentialOptions) (*AzureDeveloperCLICredential, error) {
+	cp := AzureDeveloperCLICredentialOptions{}
+	if options != nil {
+		cp = *options
+	}
+	if cp.TenantID != "" && !validTenantID(cp.TenantID) {
+		return nil, errInvalidTenantID
+	}
+	if cp.tokenProvider == nil {
+		cp.tokenProvider = defaultAzdTokenProvider
+	}
+	return &AzureDeveloperCLICredential{mu: &sync.Mutex{}, opts: cp}, nil
+}
+
+// GetToken requests a token from the Azure Developer CLI. This credential doesn't cache tokens, so every call invokes azd.
+// This method is called automatically by Azure SDK clients.
+func (c *AzureDeveloperCLICredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
+	at := azcore.AccessToken{}
+	if len(opts.Scopes) == 0 {
+		return at, errors.New(credNameAzureDeveloperCLI + ": GetToken() requires at least one scope")
+	}
+	for _, scope := range opts.Scopes {
+		if !validScope(scope) {
+			return at, fmt.Errorf("%s.GetToken(): invalid scope %q", credNameAzureDeveloperCLI, scope)
+		}
+	}
+	tenant, err := resolveTenant(c.opts.TenantID, opts.TenantID, credNameAzureDeveloperCLI, c.opts.AdditionallyAllowedTenants)
+	if err != nil {
+		return at, err
+	}
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	b, err := c.opts.tokenProvider(ctx, opts.Scopes, tenant)
+	if err == nil {
+		at, err = c.createAccessToken(b)
+	}
+	if err != nil {
+		err = unavailableIfInChain(err, c.opts.inDefaultChain)
+		return at, err
+	}
+	msg := fmt.Sprintf("%s.GetToken() acquired a token for scope %q", credNameAzureDeveloperCLI, strings.Join(opts.Scopes, ", "))
+	log.Write(EventAuthentication, msg)
+	return at, nil
+}
+
+// defaultAzTokenProvider invokes the Azure Developer CLI to acquire a token. It assumes
+// callers have verified that all string arguments are safe to pass to the CLI.
+var defaultAzdTokenProvider azdTokenProvider = func(ctx context.Context, scopes []string, tenant string) ([]byte, error) {
+	// set a default timeout for this authentication iff the application hasn't done so already
+	var cancel context.CancelFunc
+	if _, hasDeadline := ctx.Deadline(); !hasDeadline {
+		ctx, cancel = context.WithTimeout(ctx, cliTimeout)
+		defer cancel()
+	}
+	commandLine := "azd auth token -o json"
+	if tenant != "" {
+		commandLine += " --tenant-id " + tenant
+	}
+	for _, scope := range scopes {
+		commandLine += " --scope " + scope
+	}
+	var cliCmd *exec.Cmd
+	if runtime.GOOS == "windows" {
+		dir := os.Getenv("SYSTEMROOT")
+		if dir == "" {
+			return nil, newCredentialUnavailableError(credNameAzureDeveloperCLI, "environment variable 'SYSTEMROOT' has no value")
+		}
+		cliCmd = exec.CommandContext(ctx, "cmd.exe", "/c", commandLine)
+		cliCmd.Dir = dir
+	} else {
+		cliCmd = exec.CommandContext(ctx, "/bin/sh", "-c", commandLine)
+		cliCmd.Dir = "/bin"
+	}
+	cliCmd.Env = os.Environ()
+	var stderr bytes.Buffer
+	cliCmd.Stderr = &stderr
+	output, err := cliCmd.Output()
+	if err != nil {
+		msg := stderr.String()
+		var exErr *exec.ExitError
+		if errors.As(err, &exErr) && exErr.ExitCode() == 127 || strings.HasPrefix(msg, "'azd' is not recognized") {
+			msg = "Azure Developer CLI not found on path"
+		} else if strings.Contains(msg, "azd auth login") {
+			msg = `please run "azd auth login" from a command prompt to authenticate before using this credential`
+		}
+		if msg == "" {
+			msg = err.Error()
+		}
+		return nil, newCredentialUnavailableError(credNameAzureDeveloperCLI, msg)
+	}
+	return output, nil
+}
+
+func (c *AzureDeveloperCLICredential) createAccessToken(tk []byte) (azcore.AccessToken, error) {
+	t := struct {
+		AccessToken string `json:"token"`
+		ExpiresOn   string `json:"expiresOn"`
+	}{}
+	err := json.Unmarshal(tk, &t)
+	if err != nil {
+		return azcore.AccessToken{}, err
+	}
+	exp, err := time.Parse("2006-01-02T15:04:05Z", t.ExpiresOn)
+	if err != nil {
+		return azcore.AccessToken{}, fmt.Errorf("error parsing token expiration time %q: %v", t.ExpiresOn, err)
+	}
+	return azcore.AccessToken{
+		ExpiresOn: exp.UTC(),
+		Token:     t.AccessToken,
+	}, nil
+}
+
+var _ azcore.TokenCredential = (*AzureDeveloperCLICredential)(nil)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/ci.yml b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/ci.yml
index 9002ea0b050..d077682c5c2 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/ci.yml
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/ci.yml
@@ -25,6 +25,7 @@ stages:
 - template: /eng/pipelines/templates/jobs/archetype-sdk-client.yml
   parameters:
     RunLiveTests: true
+    UsePipelineProxy: false
     ServiceDirectory: 'azidentity'
     CloudConfig:
       Public:
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_assertion_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_assertion_credential.go
index 303d5fc0925..fc3df68eb19 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_assertion_credential.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_assertion_credential.go
@@ -12,6 +12,7 @@ import (
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
 	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential"
 )
 
@@ -20,9 +21,9 @@ const credNameAssertion = "ClientAssertionCredential"
 // ClientAssertionCredential authenticates an application with assertions provided by a callback function.
 // This credential is for advanced scenarios. [ClientCertificateCredential] has a more convenient API for
 // the most common assertion scenario, authenticating a service principal with a certificate. See
-// [Azure AD documentation] for details of the assertion format.
+// [Microsoft Entra ID documentation] for details of the assertion format.
 //
-// [Azure AD documentation]: https://docs.microsoft.com/azure/active-directory/develop/active-directory-certificate-credentials#assertion-format
+// [Microsoft Entra ID documentation]: https://learn.microsoft.com/azure/active-directory/develop/active-directory-certificate-credentials#assertion-format
 type ClientAssertionCredential struct {
 	client *confidentialClient
 }
@@ -35,11 +36,15 @@ type ClientAssertionCredentialOptions struct {
 	// Add the wildcard value "*" to allow the credential to acquire tokens for any tenant in which the
 	// application is registered.
 	AdditionallyAllowedTenants []string
+
 	// DisableInstanceDiscovery should be set true only by applications authenticating in disconnected clouds, or
-	// private clouds such as Azure Stack. It determines whether the credential requests Azure AD instance metadata
+	// private clouds such as Azure Stack. It determines whether the credential requests Microsoft Entra instance metadata
 	// from https://login.microsoft.com before authenticating. Setting this to true will skip this request, making
 	// the application responsible for ensuring the configured authority is valid and trustworthy.
 	DisableInstanceDiscovery bool
+
+	// tokenCachePersistenceOptions enables persistent token caching when not nil.
+	tokenCachePersistenceOptions *tokenCachePersistenceOptions
 }
 
 // NewClientAssertionCredential constructs a ClientAssertionCredential. The getAssertion function must be thread safe. Pass nil for options to accept defaults.
@@ -56,9 +61,10 @@ func NewClientAssertionCredential(tenantID, clientID string, getAssertion func(c
 		},
 	)
 	msalOpts := confidentialClientOptions{
-		AdditionallyAllowedTenants: options.AdditionallyAllowedTenants,
-		ClientOptions:              options.ClientOptions,
-		DisableInstanceDiscovery:   options.DisableInstanceDiscovery,
+		AdditionallyAllowedTenants:   options.AdditionallyAllowedTenants,
+		ClientOptions:                options.ClientOptions,
+		DisableInstanceDiscovery:     options.DisableInstanceDiscovery,
+		tokenCachePersistenceOptions: options.tokenCachePersistenceOptions,
 	}
 	c, err := newConfidentialClient(tenantID, clientID, credNameAssertion, cred, msalOpts)
 	if err != nil {
@@ -67,9 +73,13 @@ func NewClientAssertionCredential(tenantID, clientID string, getAssertion func(c
 	return &ClientAssertionCredential{client: c}, nil
 }
 
-// GetToken requests an access token from Azure Active Directory. This method is called automatically by Azure SDK clients.
+// GetToken requests an access token from Microsoft Entra ID. This method is called automatically by Azure SDK clients.
 func (c *ClientAssertionCredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
-	return c.client.GetToken(ctx, opts)
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameAssertion+"."+traceOpGetToken, c.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	tk, err := c.client.GetToken(ctx, opts)
+	return tk, err
 }
 
 var _ azcore.TokenCredential = (*ClientAssertionCredential)(nil)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_certificate_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_certificate_credential.go
index d3300e3053b..607533f486e 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_certificate_credential.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_certificate_credential.go
@@ -15,6 +15,7 @@ import (
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
 	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential"
 	"golang.org/x/crypto/pkcs12"
 )
@@ -29,15 +30,20 @@ type ClientCertificateCredentialOptions struct {
 	// Add the wildcard value "*" to allow the credential to acquire tokens for any tenant in which the
 	// application is registered.
 	AdditionallyAllowedTenants []string
+
 	// DisableInstanceDiscovery should be set true only by applications authenticating in disconnected clouds, or
-	// private clouds such as Azure Stack. It determines whether the credential requests Azure AD instance metadata
+	// private clouds such as Azure Stack. It determines whether the credential requests Microsoft Entra instance metadata
 	// from https://login.microsoft.com before authenticating. Setting this to true will skip this request, making
 	// the application responsible for ensuring the configured authority is valid and trustworthy.
 	DisableInstanceDiscovery bool
+
 	// SendCertificateChain controls whether the credential sends the public certificate chain in the x5c
 	// header of each token request's JWT. This is required for Subject Name/Issuer (SNI) authentication.
 	// Defaults to False.
 	SendCertificateChain bool
+
+	// tokenCachePersistenceOptions enables persistent token caching when not nil.
+	tokenCachePersistenceOptions *tokenCachePersistenceOptions
 }
 
 // ClientCertificateCredential authenticates a service principal with a certificate.
@@ -58,10 +64,11 @@ func NewClientCertificateCredential(tenantID string, clientID string, certs []*x
 		return nil, err
 	}
 	msalOpts := confidentialClientOptions{
-		AdditionallyAllowedTenants: options.AdditionallyAllowedTenants,
-		ClientOptions:              options.ClientOptions,
-		DisableInstanceDiscovery:   options.DisableInstanceDiscovery,
-		SendX5C:                    options.SendCertificateChain,
+		AdditionallyAllowedTenants:   options.AdditionallyAllowedTenants,
+		ClientOptions:                options.ClientOptions,
+		DisableInstanceDiscovery:     options.DisableInstanceDiscovery,
+		SendX5C:                      options.SendCertificateChain,
+		tokenCachePersistenceOptions: options.tokenCachePersistenceOptions,
 	}
 	c, err := newConfidentialClient(tenantID, clientID, credNameCert, cred, msalOpts)
 	if err != nil {
@@ -70,9 +77,13 @@ func NewClientCertificateCredential(tenantID string, clientID string, certs []*x
 	return &ClientCertificateCredential{client: c}, nil
 }
 
-// GetToken requests an access token from Azure Active Directory. This method is called automatically by Azure SDK clients.
+// GetToken requests an access token from Microsoft Entra ID. This method is called automatically by Azure SDK clients.
 func (c *ClientCertificateCredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
-	return c.client.GetToken(ctx, opts)
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameCert+"."+traceOpGetToken, c.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	tk, err := c.client.GetToken(ctx, opts)
+	return tk, err
 }
 
 // ParseCertificates loads certificates and a private key, in PEM or PKCS12 format, for use with NewClientCertificateCredential.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_secret_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_secret_credential.go
index d2ff7582b99..9e6772e9b80 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_secret_credential.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_secret_credential.go
@@ -11,6 +11,7 @@ import (
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
 	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential"
 )
 
@@ -24,11 +25,15 @@ type ClientSecretCredentialOptions struct {
 	// Add the wildcard value "*" to allow the credential to acquire tokens for any tenant in which the
 	// application is registered.
 	AdditionallyAllowedTenants []string
+
 	// DisableInstanceDiscovery should be set true only by applications authenticating in disconnected clouds, or
-	// private clouds such as Azure Stack. It determines whether the credential requests Azure AD instance metadata
+	// private clouds such as Azure Stack. It determines whether the credential requests Microsoft Entra instance metadata
 	// from https://login.microsoft.com before authenticating. Setting this to true will skip this request, making
 	// the application responsible for ensuring the configured authority is valid and trustworthy.
 	DisableInstanceDiscovery bool
+
+	// tokenCachePersistenceOptions enables persistent token caching when not nil.
+	tokenCachePersistenceOptions *tokenCachePersistenceOptions
 }
 
 // ClientSecretCredential authenticates an application with a client secret.
@@ -46,20 +51,25 @@ func NewClientSecretCredential(tenantID string, clientID string, clientSecret st
 		return nil, err
 	}
 	msalOpts := confidentialClientOptions{
-		AdditionallyAllowedTenants: options.AdditionallyAllowedTenants,
-		ClientOptions:              options.ClientOptions,
-		DisableInstanceDiscovery:   options.DisableInstanceDiscovery,
+		AdditionallyAllowedTenants:   options.AdditionallyAllowedTenants,
+		ClientOptions:                options.ClientOptions,
+		DisableInstanceDiscovery:     options.DisableInstanceDiscovery,
+		tokenCachePersistenceOptions: options.tokenCachePersistenceOptions,
 	}
 	c, err := newConfidentialClient(tenantID, clientID, credNameSecret, cred, msalOpts)
 	if err != nil {
 		return nil, err
 	}
-	return &ClientSecretCredential{c}, nil
+	return &ClientSecretCredential{client: c}, nil
 }
 
-// GetToken requests an access token from Azure Active Directory. This method is called automatically by Azure SDK clients.
+// GetToken requests an access token from Microsoft Entra ID. This method is called automatically by Azure SDK clients.
 func (c *ClientSecretCredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
-	return c.client.GetToken(ctx, opts)
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameSecret+"."+traceOpGetToken, c.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	tk, err := c.client.GetToken(ctx, opts)
+	return tk, err
 }
 
 var _ azcore.TokenCredential = (*ClientSecretCredential)(nil)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/confidential_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/confidential_client.go
index 4853a9a0095..854267bdbfd 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/confidential_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/confidential_client.go
@@ -10,6 +10,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"net/http"
 	"os"
 	"strings"
 	"sync"
@@ -17,6 +18,7 @@ import (
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
+	"github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal"
 	"github.com/Azure/azure-sdk-for-go/sdk/internal/log"
 	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential"
 )
@@ -28,6 +30,7 @@ type confidentialClientOptions struct {
 	// Assertion for on-behalf-of authentication
 	Assertion                         string
 	DisableInstanceDiscovery, SendX5C bool
+	tokenCachePersistenceOptions      *tokenCachePersistenceOptions
 }
 
 // confidentialClient wraps the MSAL confidential client
@@ -40,6 +43,7 @@ type confidentialClient struct {
 	name                     string
 	opts                     confidentialClientOptions
 	region                   string
+	azClient                 *azcore.Client
 }
 
 func newConfidentialClient(tenantID, clientID, name string, cred confidential.Credential, opts confidentialClientOptions) (*confidentialClient, error) {
@@ -50,6 +54,14 @@ func newConfidentialClient(tenantID, clientID, name string, cred confidential.Cr
 	if err != nil {
 		return nil, err
 	}
+	client, err := azcore.NewClient(module, version, runtime.PipelineOptions{
+		Tracing: runtime.TracingOptions{
+			Namespace: traceNamespace,
+		},
+	}, &opts.ClientOptions)
+	if err != nil {
+		return nil, err
+	}
 	opts.AdditionallyAllowedTenants = resolveAdditionalTenants(opts.AdditionallyAllowedTenants)
 	return &confidentialClient{
 		caeMu:    &sync.Mutex{},
@@ -62,6 +74,7 @@ func newConfidentialClient(tenantID, clientID, name string, cred confidential.Cr
 		opts:     opts,
 		region:   os.Getenv(azureRegionalAuthorityName),
 		tenantID: tenantID,
+		azClient: client,
 	}, nil
 }
 
@@ -132,10 +145,15 @@ func (c *confidentialClient) client(ctx context.Context, tro policy.TokenRequest
 }
 
 func (c *confidentialClient) newMSALClient(enableCAE bool) (msalConfidentialClient, error) {
+	cache, err := internal.NewCache(c.opts.tokenCachePersistenceOptions, enableCAE)
+	if err != nil {
+		return nil, err
+	}
 	authority := runtime.JoinPaths(c.host, c.tenantID)
 	o := []confidential.Option{
 		confidential.WithAzureRegion(c.region),
-		confidential.WithHTTPClient(newPipelineAdapter(&c.opts.ClientOptions)),
+		confidential.WithCache(cache),
+		confidential.WithHTTPClient(c),
 	}
 	if enableCAE {
 		o = append(o, confidential.WithClientCapabilities(cp1))
@@ -149,8 +167,18 @@ func (c *confidentialClient) newMSALClient(enableCAE bool) (msalConfidentialClie
 	return confidential.New(authority, c.clientID, c.cred, o...)
 }
 
-// resolveTenant returns the correct tenant for a token request given the client's
+// resolveTenant returns the correct WithTenantID() argument for a token request given the client's
 // configuration, or an error when that configuration doesn't allow the specified tenant
 func (c *confidentialClient) resolveTenant(specified string) (string, error) {
 	return resolveTenant(c.tenantID, specified, c.name, c.opts.AdditionallyAllowedTenants)
 }
+
+// these methods satisfy the MSAL ops.HTTPClient interface
+
+func (c *confidentialClient) CloseIdleConnections() {
+	// do nothing
+}
+
+func (c *confidentialClient) Do(r *http.Request) (*http.Response, error) {
+	return doForClient(c.azClient, r)
+}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/default_azure_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/default_azure_credential.go
index 7647c60b1cb..35aeef86747 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/default_azure_credential.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/default_azure_credential.go
@@ -30,7 +30,7 @@ type DefaultAzureCredentialOptions struct {
 	// set as a semicolon delimited list of tenants in the environment variable AZURE_ADDITIONALLY_ALLOWED_TENANTS.
 	AdditionallyAllowedTenants []string
 	// DisableInstanceDiscovery should be set true only by applications authenticating in disconnected clouds, or
-	// private clouds such as Azure Stack. It determines whether the credential requests Azure AD instance metadata
+	// private clouds such as Azure Stack. It determines whether the credential requests Microsoft Entra instance metadata
 	// from https://login.microsoft.com before authenticating. Setting this to true will skip this request, making
 	// the application responsible for ensuring the configured authority is valid and trustworthy.
 	DisableInstanceDiscovery bool
@@ -49,6 +49,7 @@ type DefaultAzureCredentialOptions struct {
 //     more control over its configuration.
 //   - [ManagedIdentityCredential]
 //   - [AzureCLICredential]
+//   - [AzureDeveloperCLICredential]
 //
 // Consult the documentation for these credential types for more information on how they authenticate.
 // Once a credential has successfully authenticated, DefaultAzureCredential will use that credential for
@@ -117,6 +118,17 @@ func NewDefaultAzureCredential(options *DefaultAzureCredentialOptions) (*Default
 		creds = append(creds, &defaultCredentialErrorReporter{credType: credNameAzureCLI, err: err})
 	}
 
+	azdCred, err := NewAzureDeveloperCLICredential(&AzureDeveloperCLICredentialOptions{
+		AdditionallyAllowedTenants: additionalTenants,
+		TenantID:                   options.TenantID,
+	})
+	if err == nil {
+		creds = append(creds, azdCred)
+	} else {
+		errorMessages = append(errorMessages, credNameAzureDeveloperCLI+": "+err.Error())
+		creds = append(creds, &defaultCredentialErrorReporter{credType: credNameAzureDeveloperCLI, err: err})
+	}
+
 	if len(errorMessages) > 0 {
 		log.Writef(EventAuthentication, "NewDefaultAzureCredential failed to initialize some credentials:\n\t%s", strings.Join(errorMessages, "\n\t"))
 	}
@@ -129,7 +141,7 @@ func NewDefaultAzureCredential(options *DefaultAzureCredentialOptions) (*Default
 	return &DefaultAzureCredential{chain: chain}, nil
 }
 
-// GetToken requests an access token from Azure Active Directory. This method is called automatically by Azure SDK clients.
+// GetToken requests an access token from Microsoft Entra ID. This method is called automatically by Azure SDK clients.
 func (c *DefaultAzureCredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
 	return c.chain.GetToken(ctx, opts)
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/developer_credential_util.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/developer_credential_util.go
new file mode 100644
index 00000000000..d8b952f532e
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/developer_credential_util.go
@@ -0,0 +1,38 @@
+//go:build go1.18
+// +build go1.18
+
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+package azidentity
+
+import (
+	"errors"
+	"time"
+)
+
+// cliTimeout is the default timeout for authentication attempts via CLI tools
+const cliTimeout = 10 * time.Second
+
+// unavailableIfInChain returns err or, if the credential was invoked by DefaultAzureCredential, a
+// credentialUnavailableError having the same message. This ensures DefaultAzureCredential will try
+// the next credential in its chain (another developer credential).
+func unavailableIfInChain(err error, inDefaultChain bool) error {
+	if err != nil && inDefaultChain {
+		var unavailableErr *credentialUnavailableError
+		if !errors.As(err, &unavailableErr) {
+			err = newCredentialUnavailableError(credNameAzureDeveloperCLI, err.Error())
+		}
+	}
+	return err
+}
+
+// validScope is for credentials authenticating via external tools. The authority validates scopes for all other credentials.
+func validScope(scope string) bool {
+	for _, r := range scope {
+		if !(alphanumeric(r) || r == '.' || r == '-' || r == '_' || r == '/' || r == ':') {
+			return false
+		}
+	}
+	return true
+}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/device_code_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/device_code_credential.go
index d245c269a76..1b7a283703a 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/device_code_credential.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/device_code_credential.go
@@ -12,6 +12,7 @@ import (
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
 )
 
 const credNameDeviceCode = "DeviceCodeCredential"
@@ -23,19 +24,34 @@ type DeviceCodeCredentialOptions struct {
 	// AdditionallyAllowedTenants specifies additional tenants for which the credential may acquire
 	// tokens. Add the wildcard value "*" to allow the credential to acquire tokens for any tenant.
 	AdditionallyAllowedTenants []string
+
+	// authenticationRecord returned by a call to a credential's Authenticate method. Set this option
+	// to enable the credential to use data from a previous authentication.
+	authenticationRecord authenticationRecord
+
 	// ClientID is the ID of the application users will authenticate to.
 	// Defaults to the ID of an Azure development application.
 	ClientID string
+
+	// disableAutomaticAuthentication prevents the credential from automatically prompting the user to authenticate.
+	// When this option is true, [DeviceCodeCredential.GetToken] will return [ErrAuthenticationRequired] when user
+	// interaction is necessary to acquire a token.
+	disableAutomaticAuthentication bool
+
 	// DisableInstanceDiscovery should be set true only by applications authenticating in disconnected clouds, or
-	// private clouds such as Azure Stack. It determines whether the credential requests Azure AD instance metadata
+	// private clouds such as Azure Stack. It determines whether the credential requests Microsoft Entra instance metadata
 	// from https://login.microsoft.com before authenticating. Setting this to true will skip this request, making
 	// the application responsible for ensuring the configured authority is valid and trustworthy.
 	DisableInstanceDiscovery bool
-	// TenantID is the Azure Active Directory tenant the credential authenticates in. Defaults to the
+
+	// TenantID is the Microsoft Entra tenant the credential authenticates in. Defaults to the
 	// "organizations" tenant, which can authenticate work and school accounts. Required for single-tenant
 	// applications.
 	TenantID string
 
+	// tokenCachePersistenceOptions enables persistent token caching when not nil.
+	tokenCachePersistenceOptions *tokenCachePersistenceOptions
+
 	// UserPrompt controls how the credential presents authentication instructions. The credential calls
 	// this function with authentication details when it receives a device code. By default, the credential
 	// prints these details to stdout.
@@ -63,14 +79,14 @@ type DeviceCodeMessage struct {
 	UserCode string `json:"user_code"`
 	// VerificationURL is the URL at which the user must authenticate.
 	VerificationURL string `json:"verification_uri"`
-	// Message is user instruction from Azure Active Directory.
+	// Message is user instruction from Microsoft Entra ID.
 	Message string `json:"message"`
 }
 
 // DeviceCodeCredential acquires tokens for a user via the device code flow, which has the
-// user browse to an Azure Active Directory URL, enter a code, and authenticate. It's useful
+// user browse to a Microsoft Entra URL, enter a code, and authenticate. It's useful
 // for authenticating a user in an environment without a web browser, such as an SSH session.
-// If a web browser is available, InteractiveBrowserCredential is more convenient because it
+// If a web browser is available, [InteractiveBrowserCredential] is more convenient because it
 // automatically opens a browser to the login page.
 type DeviceCodeCredential struct {
 	client *publicClient
@@ -84,10 +100,13 @@ func NewDeviceCodeCredential(options *DeviceCodeCredentialOptions) (*DeviceCodeC
 	}
 	cp.init()
 	msalOpts := publicClientOptions{
-		AdditionallyAllowedTenants: cp.AdditionallyAllowedTenants,
-		ClientOptions:              cp.ClientOptions,
-		DeviceCodePrompt:           cp.UserPrompt,
-		DisableInstanceDiscovery:   cp.DisableInstanceDiscovery,
+		AdditionallyAllowedTenants:     cp.AdditionallyAllowedTenants,
+		ClientOptions:                  cp.ClientOptions,
+		DeviceCodePrompt:               cp.UserPrompt,
+		DisableAutomaticAuthentication: cp.disableAutomaticAuthentication,
+		DisableInstanceDiscovery:       cp.DisableInstanceDiscovery,
+		Record:                         cp.authenticationRecord,
+		TokenCachePersistenceOptions:   cp.tokenCachePersistenceOptions,
 	}
 	c, err := newPublicClient(cp.TenantID, cp.ClientID, credNameDeviceCode, msalOpts)
 	if err != nil {
@@ -97,10 +116,23 @@ func NewDeviceCodeCredential(options *DeviceCodeCredentialOptions) (*DeviceCodeC
 	return &DeviceCodeCredential{client: c}, nil
 }
 
-// GetToken requests an access token from Azure Active Directory. It will begin the device code flow and poll until the user completes authentication.
+// Authenticate a user via the device code flow. Subsequent calls to GetToken will automatically use the returned AuthenticationRecord.
+func (c *DeviceCodeCredential) authenticate(ctx context.Context, opts *policy.TokenRequestOptions) (authenticationRecord, error) {
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameDeviceCode+"."+traceOpAuthenticate, c.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	tk, err := c.client.Authenticate(ctx, opts)
+	return tk, err
+}
+
+// GetToken requests an access token from Microsoft Entra ID. It will begin the device code flow and poll until the user completes authentication.
 // This method is called automatically by Azure SDK clients.
 func (c *DeviceCodeCredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
-	return c.client.GetToken(ctx, opts)
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameDeviceCode+"."+traceOpGetToken, c.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	tk, err := c.client.GetToken(ctx, opts)
+	return tk, err
 }
 
 var _ azcore.TokenCredential = (*DeviceCodeCredential)(nil)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/environment_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/environment_credential.go
index 7ecd928e024..42f84875e23 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/environment_credential.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/environment_credential.go
@@ -25,7 +25,7 @@ type EnvironmentCredentialOptions struct {
 	azcore.ClientOptions
 
 	// DisableInstanceDiscovery should be set true only by applications authenticating in disconnected clouds, or
-	// private clouds such as Azure Stack. It determines whether the credential requests Azure AD instance metadata
+	// private clouds such as Azure Stack. It determines whether the credential requests Microsoft Entra instance metadata
 	// from https://login.microsoft.com before authenticating. Setting this to true will skip this request, making
 	// the application responsible for ensuring the configured authority is valid and trustworthy.
 	DisableInstanceDiscovery bool
@@ -156,7 +156,7 @@ func NewEnvironmentCredential(options *EnvironmentCredentialOptions) (*Environme
 	return nil, errors.New("incomplete environment variable configuration. Only AZURE_TENANT_ID and AZURE_CLIENT_ID are set")
 }
 
-// GetToken requests an access token from Azure Active Directory. This method is called automatically by Azure SDK clients.
+// GetToken requests an access token from Microsoft Entra ID. This method is called automatically by Azure SDK clients.
 func (c *EnvironmentCredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
 	return c.cred.GetToken(ctx, opts)
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/errors.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/errors.go
index e1a21e0030a..335d2b7dcf2 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/errors.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/errors.go
@@ -18,6 +18,10 @@ import (
 	msal "github.com/AzureAD/microsoft-authentication-library-for-go/apps/errors"
 )
 
+// errAuthenticationRequired indicates a credential's Authenticate method must be called to acquire a token
+// because user interaction is required and the credential is configured not to automatically prompt the user.
+var errAuthenticationRequired error = &credentialUnavailableError{"can't acquire a token without user interaction. Call Authenticate to interactively authenticate a user"}
+
 // getResponseFromError retrieves the response carried by
 // an AuthenticationFailedError or MSAL CallErr, if any
 func getResponseFromError(err error) *http.Response {
@@ -53,7 +57,13 @@ func (e *AuthenticationFailedError) Error() string {
 	}
 	msg := &bytes.Buffer{}
 	fmt.Fprintf(msg, e.credType+" authentication failed\n")
-	fmt.Fprintf(msg, "%s %s://%s%s\n", e.RawResponse.Request.Method, e.RawResponse.Request.URL.Scheme, e.RawResponse.Request.URL.Host, e.RawResponse.Request.URL.Path)
+	if e.RawResponse.Request != nil {
+		fmt.Fprintf(msg, "%s %s://%s%s\n", e.RawResponse.Request.Method, e.RawResponse.Request.URL.Scheme, e.RawResponse.Request.URL.Host, e.RawResponse.Request.URL.Path)
+	} else {
+		// this happens when the response is created from a custom HTTP transporter,
+		// which doesn't guarantee to bind the original request to the response
+		fmt.Fprintln(msg, "Request information not available")
+	}
 	fmt.Fprintln(msg, "--------------------------------------------------------------------------------")
 	fmt.Fprintf(msg, "RESPONSE %s\n", e.RawResponse.Status)
 	fmt.Fprintln(msg, "--------------------------------------------------------------------------------")
@@ -74,6 +84,8 @@ func (e *AuthenticationFailedError) Error() string {
 	switch e.credType {
 	case credNameAzureCLI:
 		anchor = "azure-cli"
+	case credNameAzureDeveloperCLI:
+		anchor = "azd"
 	case credNameCert:
 		anchor = "client-cert"
 	case credNameSecret:
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/go.work b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/go.work
new file mode 100644
index 00000000000..04ea962b422
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/go.work
@@ -0,0 +1,6 @@
+go 1.18
+
+use (
+	.
+	./cache
+)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/go.work.sum b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/go.work.sum
new file mode 100644
index 00000000000..7cd86b0019e
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/go.work.sum
@@ -0,0 +1,39 @@
+github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0-beta.1 h1:ODs3brnqQM99Tq1PffODpAViYv3Bf8zOg464MU7p5ew=
+github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0-beta.1/go.mod h1:3Ug6Qzto9anB6mGlEdgYMDF5zHQ+wwhEaYR4s17PHMw=
+github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0 h1:fb8kj/Dh4CSwgsOzHeZY4Xh68cFVbzXx+ONXGMY//4w=
+github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0/go.mod h1:uReU2sSxZExRPBAg3qKzmAucSi51+SP1OhohieR821Q=
+github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0/go.mod h1:okt5dMMTOFjX/aovMlrjvvXoPMBVSPzk9185BT0+eZM=
+github.com/AzureAD/microsoft-authentication-library-for-go v1.2.1 h1:DzHpqpoJVaCgOUdVHxE8QB52S6NiVdDQvGlny1qvPqA=
+github.com/AzureAD/microsoft-authentication-library-for-go v1.2.1/go.mod h1:wP83P5OoQ5p6ip3ScPr0BAq0BvuPAvacpEuSzyouqAI=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/montanaflynn/stats v0.7.0/go.mod h1:etXPPgVO6n31NxCd9KQUMvCM+ve0ruNzt6R8Bnaayow=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+golang.org/x/crypto v0.13.0/go.mod h1:y6Z2r+Rw4iayiXXAIxJIDAJ1zMW4yaTpebo8fPOliYc=
+golang.org/x/crypto v0.16.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
+golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
+golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
+golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
+golang.org/x/net v0.15.0/go.mod h1:idbUs1IY1+zTqbi8yxTbhexhEEk5ur9LInksu6HrEpk=
+golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.7.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/term v0.7.0/go.mod h1:P32HKFT3hSsZrRxla30E9HqToFYAQPCMs/zFMBUFqPY=
+golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
+golang.org/x/term v0.10.0/go.mod h1:lpqdcUyK/oCiQxvxVrppt5ggO2KCZ5QblwqPnfZ6d5o=
+golang.org/x/term v0.11.0/go.mod h1:zC9APTIj3jG3FdV/Ons+XE1riIZXG4aZ4GTHiPZJPIU=
+golang.org/x/term v0.12.0/go.mod h1:owVbMEjm3cBLCHdkQu9b1opXd4ETQWc3BhuQGKgXgvU=
+golang.org/x/term v0.13.0/go.mod h1:LTmsnFJwVN6bCy1rVCoS+qHT1HhALEFxKncY3WNNh4U=
+golang.org/x/term v0.15.0/go.mod h1:BDl952bC7+uMoWR75FIrCDx79TPU9oHkTZ9yRbYOrX0=
+golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
+golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/interactive_browser_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/interactive_browser_credential.go
index 08f3efbf3ec..bd829698375 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/interactive_browser_credential.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/interactive_browser_credential.go
@@ -11,6 +11,7 @@ import (
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
 )
 
 const credNameBrowser = "InteractiveBrowserCredential"
@@ -22,26 +23,40 @@ type InteractiveBrowserCredentialOptions struct {
 	// AdditionallyAllowedTenants specifies additional tenants for which the credential may acquire
 	// tokens. Add the wildcard value "*" to allow the credential to acquire tokens for any tenant.
 	AdditionallyAllowedTenants []string
+
+	// authenticationRecord returned by a call to a credential's Authenticate method. Set this option
+	// to enable the credential to use data from a previous authentication.
+	authenticationRecord authenticationRecord
+
 	// ClientID is the ID of the application users will authenticate to.
 	// Defaults to the ID of an Azure development application.
 	ClientID string
 
+	// disableAutomaticAuthentication prevents the credential from automatically prompting the user to authenticate.
+	// When this option is true, [InteractiveBrowserCredential.GetToken] will return [ErrAuthenticationRequired] when
+	// user interaction is necessary to acquire a token.
+	disableAutomaticAuthentication bool
+
 	// DisableInstanceDiscovery should be set true only by applications authenticating in disconnected clouds, or
-	// private clouds such as Azure Stack. It determines whether the credential requests Azure AD instance metadata
+	// private clouds such as Azure Stack. It determines whether the credential requests Microsoft Entra instance metadata
 	// from https://login.microsoft.com before authenticating. Setting this to true will skip this request, making
 	// the application responsible for ensuring the configured authority is valid and trustworthy.
 	DisableInstanceDiscovery bool
 
 	// LoginHint pre-populates the account prompt with a username. Users may choose to authenticate a different account.
 	LoginHint string
-	// RedirectURL is the URL Azure Active Directory will redirect to with the access token. This is required
+
+	// RedirectURL is the URL Microsoft Entra ID will redirect to with the access token. This is required
 	// only when setting ClientID, and must match a redirect URI in the application's registration.
 	// Applications which have registered "http://localhost" as a redirect URI need not set this option.
 	RedirectURL string
 
-	// TenantID is the Azure Active Directory tenant the credential authenticates in. Defaults to the
+	// TenantID is the Microsoft Entra tenant the credential authenticates in. Defaults to the
 	// "organizations" tenant, which can authenticate work and school accounts.
 	TenantID string
+
+	// tokenCachePersistenceOptions enables persistent token caching when not nil.
+	tokenCachePersistenceOptions *tokenCachePersistenceOptions
 }
 
 func (o *InteractiveBrowserCredentialOptions) init() {
@@ -66,10 +81,14 @@ func NewInteractiveBrowserCredential(options *InteractiveBrowserCredentialOption
 	}
 	cp.init()
 	msalOpts := publicClientOptions{
-		ClientOptions:            cp.ClientOptions,
-		DisableInstanceDiscovery: cp.DisableInstanceDiscovery,
-		LoginHint:                cp.LoginHint,
-		RedirectURL:              cp.RedirectURL,
+		AdditionallyAllowedTenants:     cp.AdditionallyAllowedTenants,
+		ClientOptions:                  cp.ClientOptions,
+		DisableAutomaticAuthentication: cp.disableAutomaticAuthentication,
+		DisableInstanceDiscovery:       cp.DisableInstanceDiscovery,
+		LoginHint:                      cp.LoginHint,
+		Record:                         cp.authenticationRecord,
+		RedirectURL:                    cp.RedirectURL,
+		TokenCachePersistenceOptions:   cp.tokenCachePersistenceOptions,
 	}
 	c, err := newPublicClient(cp.TenantID, cp.ClientID, credNameBrowser, msalOpts)
 	if err != nil {
@@ -78,9 +97,22 @@ func NewInteractiveBrowserCredential(options *InteractiveBrowserCredentialOption
 	return &InteractiveBrowserCredential{client: c}, nil
 }
 
-// GetToken requests an access token from Azure Active Directory. This method is called automatically by Azure SDK clients.
+// Authenticate a user via the default browser. Subsequent calls to GetToken will automatically use the returned AuthenticationRecord.
+func (c *InteractiveBrowserCredential) authenticate(ctx context.Context, opts *policy.TokenRequestOptions) (authenticationRecord, error) {
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameBrowser+"."+traceOpAuthenticate, c.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	tk, err := c.client.Authenticate(ctx, opts)
+	return tk, err
+}
+
+// GetToken requests an access token from Microsoft Entra ID. This method is called automatically by Azure SDK clients.
 func (c *InteractiveBrowserCredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
-	return c.client.GetToken(ctx, opts)
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameBrowser+"."+traceOpGetToken, c.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	tk, err := c.client.GetToken(ctx, opts)
+	return tk, err
 }
 
 var _ azcore.TokenCredential = (*InteractiveBrowserCredential)(nil)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal/exported.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal/exported.go
new file mode 100644
index 00000000000..b1b4d5c8bd3
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal/exported.go
@@ -0,0 +1,18 @@
+//go:build go1.18
+// +build go1.18
+
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+package internal
+
+// TokenCachePersistenceOptions contains options for persistent token caching
+type TokenCachePersistenceOptions struct {
+	// AllowUnencryptedStorage controls whether the cache should fall back to storing its data in plain text
+	// when encryption isn't possible. Setting this true doesn't disable encryption. The cache always attempts
+	// encryption before falling back to plaintext storage.
+	AllowUnencryptedStorage bool
+
+	// Name identifies the cache. Set this to isolate data from other applications.
+	Name string
+}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal/internal.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal/internal.go
new file mode 100644
index 00000000000..c1498b46447
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal/internal.go
@@ -0,0 +1,31 @@
+//go:build go1.18
+// +build go1.18
+
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+package internal
+
+import (
+	"errors"
+
+	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/cache"
+)
+
+var errMissingImport = errors.New("import github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache to enable persistent caching")
+
+// NewCache constructs a persistent token cache when "o" isn't nil. Applications that intend to
+// use a persistent cache must first import the cache module, which will replace this function
+// with a platform-specific implementation.
+var NewCache = func(o *TokenCachePersistenceOptions, enableCAE bool) (cache.ExportReplace, error) {
+	if o == nil {
+		return nil, nil
+	}
+	return nil, errMissingImport
+}
+
+// CacheFilePath returns the path to the cache file for the given name.
+// Defining it in this package makes it available to azidentity tests.
+var CacheFilePath = func(name string) (string, error) {
+	return "", errMissingImport
+}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/managed_identity_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/managed_identity_client.go
index fdc3c1f6776..7c25cb8bdd5 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/managed_identity_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/managed_identity_client.go
@@ -28,12 +28,14 @@ import (
 
 const (
 	arcIMDSEndpoint          = "IMDS_ENDPOINT"
+	defaultIdentityClientID  = "DEFAULT_IDENTITY_CLIENT_ID"
 	identityEndpoint         = "IDENTITY_ENDPOINT"
 	identityHeader           = "IDENTITY_HEADER"
 	identityServerThumbprint = "IDENTITY_SERVER_THUMBPRINT"
 	headerMetadata           = "Metadata"
 	imdsEndpoint             = "http://169.254.169.254/metadata/identity/oauth2/token"
 	msiEndpoint              = "MSI_ENDPOINT"
+	msiSecret                = "MSI_SECRET"
 	imdsAPIVersion           = "2018-02-01"
 	azureArcAPIVersion       = "2019-08-15"
 	serviceFabricAPIVersion  = "2019-07-01-preview"
@@ -47,6 +49,7 @@ type msiType int
 const (
 	msiTypeAppService msiType = iota
 	msiTypeAzureArc
+	msiTypeAzureML
 	msiTypeCloudShell
 	msiTypeIMDS
 	msiTypeServiceFabric
@@ -55,7 +58,7 @@ const (
 // managedIdentityClient provides the base for authenticating in managed identity environments
 // This type includes an runtime.Pipeline and TokenCredentialOptions.
 type managedIdentityClient struct {
-	pipeline runtime.Pipeline
+	azClient *azcore.Client
 	msiType  msiType
 	endpoint string
 	id       ManagedIDKind
@@ -135,13 +138,27 @@ func newManagedIdentityClient(options *ManagedIdentityCredentialOptions) (*manag
 			c.msiType = msiTypeAzureArc
 		}
 	} else if endpoint, ok := os.LookupEnv(msiEndpoint); ok {
-		env = "Cloud Shell"
 		c.endpoint = endpoint
-		c.msiType = msiTypeCloudShell
+		if _, ok := os.LookupEnv(msiSecret); ok {
+			env = "Azure ML"
+			c.msiType = msiTypeAzureML
+		} else {
+			env = "Cloud Shell"
+			c.msiType = msiTypeCloudShell
+		}
 	} else {
 		setIMDSRetryOptionDefaults(&cp.Retry)
 	}
-	c.pipeline = runtime.NewPipeline(component, version, runtime.PipelineOptions{}, &cp)
+
+	client, err := azcore.NewClient(module, version, runtime.PipelineOptions{
+		Tracing: runtime.TracingOptions{
+			Namespace: traceNamespace,
+		},
+	}, &cp)
+	if err != nil {
+		return nil, err
+	}
+	c.azClient = client
 
 	if log.Should(EventAuthentication) {
 		log.Writef(EventAuthentication, "Managed Identity Credential will use %s managed identity", env)
@@ -168,7 +185,7 @@ func (c *managedIdentityClient) authenticate(ctx context.Context, id ManagedIDKi
 		return azcore.AccessToken{}, err
 	}
 
-	resp, err := c.pipeline.Do(msg)
+	resp, err := c.azClient.Pipeline().Do(msg)
 	if err != nil {
 		return azcore.AccessToken{}, newAuthenticationFailedError(credNameManagedIdentity, err.Error(), nil, err)
 	}
@@ -247,6 +264,8 @@ func (c *managedIdentityClient) createAuthRequest(ctx context.Context, id Manage
 			return nil, newAuthenticationFailedError(credNameManagedIdentity, msg, nil, err)
 		}
 		return c.createAzureArcAuthRequest(ctx, id, scopes, key)
+	case msiTypeAzureML:
+		return c.createAzureMLAuthRequest(ctx, id, scopes)
 	case msiTypeServiceFabric:
 		return c.createServiceFabricAuthRequest(ctx, id, scopes)
 	case msiTypeCloudShell:
@@ -296,6 +315,29 @@ func (c *managedIdentityClient) createAppServiceAuthRequest(ctx context.Context,
 	return request, nil
 }
 
+func (c *managedIdentityClient) createAzureMLAuthRequest(ctx context.Context, id ManagedIDKind, scopes []string) (*policy.Request, error) {
+	request, err := runtime.NewRequest(ctx, http.MethodGet, c.endpoint)
+	if err != nil {
+		return nil, err
+	}
+	request.Raw().Header.Set("secret", os.Getenv(msiSecret))
+	q := request.Raw().URL.Query()
+	q.Add("api-version", "2017-09-01")
+	q.Add("resource", strings.Join(scopes, " "))
+	q.Add("clientid", os.Getenv(defaultIdentityClientID))
+	if id != nil {
+		if id.idKind() == miResourceID {
+			log.Write(EventAuthentication, "WARNING: Azure ML doesn't support specifying a managed identity by resource ID")
+			q.Set("clientid", "")
+			q.Set(qpResID, id.String())
+		} else {
+			q.Set("clientid", id.String())
+		}
+	}
+	request.Raw().URL.RawQuery = q.Encode()
+	return request, nil
+}
+
 func (c *managedIdentityClient) createServiceFabricAuthRequest(ctx context.Context, id ManagedIDKind, scopes []string) (*policy.Request, error) {
 	request, err := runtime.NewRequest(ctx, http.MethodGet, c.endpoint)
 	if err != nil {
@@ -330,7 +372,7 @@ func (c *managedIdentityClient) getAzureArcSecretKey(ctx context.Context, resour
 	q.Add("resource", strings.Join(resources, " "))
 	request.Raw().URL.RawQuery = q.Encode()
 	// send the initial request to get the short-lived secret key
-	response, err := c.pipeline.Do(request)
+	response, err := c.azClient.Pipeline().Do(request)
 	if err != nil {
 		return "", err
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/managed_identity_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/managed_identity_credential.go
index 35c5e6725cd..dcd278befa1 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/managed_identity_credential.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/managed_identity_credential.go
@@ -13,6 +13,7 @@ import (
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
 	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential"
 )
 
@@ -67,8 +68,8 @@ type ManagedIdentityCredentialOptions struct {
 
 // ManagedIdentityCredential authenticates an Azure managed identity in any hosting environment supporting managed identities.
 // This credential authenticates a system-assigned identity by default. Use ManagedIdentityCredentialOptions.ID to specify a
-// user-assigned identity. See Azure Active Directory documentation for more information about managed identities:
-// https://docs.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview
+// user-assigned identity. See Microsoft Entra ID documentation for more information about managed identities:
+// https://learn.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview
 type ManagedIdentityCredential struct {
 	client *confidentialClient
 	mic    *managedIdentityClient
@@ -92,7 +93,9 @@ func NewManagedIdentityCredential(options *ManagedIdentityCredentialOptions) (*M
 		clientID = options.ID.String()
 	}
 	// similarly, it's okay to give MSAL an incorrect tenant because MSAL won't use the value
-	c, err := newConfidentialClient("common", clientID, credNameManagedIdentity, cred, confidentialClientOptions{})
+	c, err := newConfidentialClient("common", clientID, credNameManagedIdentity, cred, confidentialClientOptions{
+		ClientOptions: options.ClientOptions,
+	})
 	if err != nil {
 		return nil, err
 	}
@@ -101,13 +104,18 @@ func NewManagedIdentityCredential(options *ManagedIdentityCredentialOptions) (*M
 
 // GetToken requests an access token from the hosting environment. This method is called automatically by Azure SDK clients.
 func (c *ManagedIdentityCredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameManagedIdentity+"."+traceOpGetToken, c.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+
 	if len(opts.Scopes) != 1 {
-		err := fmt.Errorf("%s.GetToken() requires exactly one scope", credNameManagedIdentity)
+		err = fmt.Errorf("%s.GetToken() requires exactly one scope", credNameManagedIdentity)
 		return azcore.AccessToken{}, err
 	}
-	// managed identity endpoints require an AADv1 resource (i.e. token audience), not a v2 scope, so we remove "/.default" here
+	// managed identity endpoints require a Microsoft Entra ID v1 resource (i.e. token audience), not a v2 scope, so we remove "/.default" here
 	opts.Scopes = []string{strings.TrimSuffix(opts.Scopes[0], defaultSuffix)}
-	return c.client.GetToken(ctx, opts)
+	tk, err := c.client.GetToken(ctx, opts)
+	return tk, err
 }
 
 var _ azcore.TokenCredential = (*ManagedIdentityCredential)(nil)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/on_behalf_of_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/on_behalf_of_credential.go
index 2b360b681df..5e67cf02145 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/on_behalf_of_credential.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/on_behalf_of_credential.go
@@ -13,6 +13,7 @@ import (
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
 	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential"
 )
 
@@ -21,9 +22,9 @@ const credNameOBO = "OnBehalfOfCredential"
 // OnBehalfOfCredential authenticates a service principal via the on-behalf-of flow. This is typically used by
 // middle-tier services that authorize requests to other services with a delegated user identity. Because this
 // is not an interactive authentication flow, an application using it must have admin consent for any delegated
-// permissions before requesting tokens for them. See [Azure Active Directory documentation] for more details.
+// permissions before requesting tokens for them. See [Microsoft Entra ID documentation] for more details.
 //
-// [Azure Active Directory documentation]: https://docs.microsoft.com/azure/active-directory/develop/v2-oauth2-on-behalf-of-flow
+// [Microsoft Entra ID documentation]: https://learn.microsoft.com/azure/active-directory/develop/v2-oauth2-on-behalf-of-flow
 type OnBehalfOfCredential struct {
 	client *confidentialClient
 }
@@ -36,11 +37,13 @@ type OnBehalfOfCredentialOptions struct {
 	// Add the wildcard value "*" to allow the credential to acquire tokens for any tenant in which the
 	// application is registered.
 	AdditionallyAllowedTenants []string
+
 	// DisableInstanceDiscovery should be set true only by applications authenticating in disconnected clouds, or
-	// private clouds such as Azure Stack. It determines whether the credential requests Azure AD instance metadata
+	// private clouds such as Azure Stack. It determines whether the credential requests Microsoft Entra instance metadata
 	// from https://login.microsoft.com before authenticating. Setting this to true will skip this request, making
 	// the application responsible for ensuring the configured authority is valid and trustworthy.
 	DisableInstanceDiscovery bool
+
 	// SendCertificateChain applies only when the credential is configured to authenticate with a certificate.
 	// This setting controls whether the credential sends the public certificate chain in the x5c header of each
 	// token request's JWT. This is required for, and only used in, Subject Name/Issuer (SNI) authentication.
@@ -84,9 +87,13 @@ func newOnBehalfOfCredential(tenantID, clientID, userAssertion string, cred conf
 	return &OnBehalfOfCredential{c}, nil
 }
 
-// GetToken requests an access token from Azure Active Directory. This method is called automatically by Azure SDK clients.
+// GetToken requests an access token from Microsoft Entra ID. This method is called automatically by Azure SDK clients.
 func (o *OnBehalfOfCredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
-	return o.client.GetToken(ctx, opts)
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameOBO+"."+traceOpGetToken, o.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	tk, err := o.client.GetToken(ctx, opts)
+	return tk, err
 }
 
 var _ azcore.TokenCredential = (*OnBehalfOfCredential)(nil)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/public_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/public_client.go
index 6512d3e25fd..63c31190d18 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/public_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/public_client.go
@@ -8,38 +8,52 @@ package azidentity
 
 import (
 	"context"
+	"errors"
 	"fmt"
+	"net/http"
 	"strings"
 	"sync"
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/cloud"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
+	"github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal"
 	"github.com/Azure/azure-sdk-for-go/sdk/internal/log"
 	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/public"
+
+	// this import ensures well-known configurations in azcore/cloud have ARM audiences for Authenticate()
+	_ "github.com/Azure/azure-sdk-for-go/sdk/azcore/arm/runtime"
 )
 
 type publicClientOptions struct {
 	azcore.ClientOptions
 
-	AdditionallyAllowedTenants []string
-	DeviceCodePrompt           func(context.Context, DeviceCodeMessage) error
-	DisableInstanceDiscovery   bool
-	LoginHint, RedirectURL     string
-	Username, Password         string
+	AdditionallyAllowedTenants     []string
+	DeviceCodePrompt               func(context.Context, DeviceCodeMessage) error
+	DisableAutomaticAuthentication bool
+	DisableInstanceDiscovery       bool
+	LoginHint, RedirectURL         string
+	Record                         authenticationRecord
+	TokenCachePersistenceOptions   *tokenCachePersistenceOptions
+	Username, Password             string
 }
 
 // publicClient wraps the MSAL public client
 type publicClient struct {
-	account                  public.Account
 	cae, noCAE               msalPublicClient
 	caeMu, noCAEMu, clientMu *sync.Mutex
 	clientID, tenantID       string
+	defaultScope             []string
 	host                     string
 	name                     string
 	opts                     publicClientOptions
+	record                   authenticationRecord
+	azClient                 *azcore.Client
 }
 
+var errScopeRequired = errors.New("authenticating in this environment requires specifying a scope in TokenRequestOptions")
+
 func newPublicClient(tenantID, clientID, name string, o publicClientOptions) (*publicClient, error) {
 	if !validTenantID(tenantID) {
 		return nil, errInvalidTenantID
@@ -48,19 +62,76 @@ func newPublicClient(tenantID, clientID, name string, o publicClientOptions) (*p
 	if err != nil {
 		return nil, err
 	}
+	// if the application specified a cloud configuration, use its ARM audience as the default scope for Authenticate()
+	audience := o.Cloud.Services[cloud.ResourceManager].Audience
+	if audience == "" {
+		// no cloud configuration, or no ARM audience, specified; try to map the host to a well-known one (all of which have a trailing slash)
+		if !strings.HasSuffix(host, "/") {
+			host += "/"
+		}
+		switch host {
+		case cloud.AzureChina.ActiveDirectoryAuthorityHost:
+			audience = cloud.AzureChina.Services[cloud.ResourceManager].Audience
+		case cloud.AzureGovernment.ActiveDirectoryAuthorityHost:
+			audience = cloud.AzureGovernment.Services[cloud.ResourceManager].Audience
+		case cloud.AzurePublic.ActiveDirectoryAuthorityHost:
+			audience = cloud.AzurePublic.Services[cloud.ResourceManager].Audience
+		}
+	}
+	// if we didn't come up with an audience, the application will have to specify a scope for Authenticate()
+	var defaultScope []string
+	if audience != "" {
+		defaultScope = []string{audience + defaultSuffix}
+	}
+	client, err := azcore.NewClient(module, version, runtime.PipelineOptions{
+		Tracing: runtime.TracingOptions{
+			Namespace: traceNamespace,
+		},
+	}, &o.ClientOptions)
+	if err != nil {
+		return nil, err
+	}
 	o.AdditionallyAllowedTenants = resolveAdditionalTenants(o.AdditionallyAllowedTenants)
 	return &publicClient{
-		caeMu:    &sync.Mutex{},
-		clientID: clientID,
-		clientMu: &sync.Mutex{},
-		host:     host,
-		name:     name,
-		noCAEMu:  &sync.Mutex{},
-		opts:     o,
-		tenantID: tenantID,
+		caeMu:        &sync.Mutex{},
+		clientID:     clientID,
+		clientMu:     &sync.Mutex{},
+		defaultScope: defaultScope,
+		host:         host,
+		name:         name,
+		noCAEMu:      &sync.Mutex{},
+		opts:         o,
+		record:       o.Record,
+		tenantID:     tenantID,
+		azClient:     client,
 	}, nil
 }
 
+func (p *publicClient) Authenticate(ctx context.Context, tro *policy.TokenRequestOptions) (authenticationRecord, error) {
+	if tro == nil {
+		tro = &policy.TokenRequestOptions{}
+	}
+	if len(tro.Scopes) == 0 {
+		if p.defaultScope == nil {
+			return authenticationRecord{}, errScopeRequired
+		}
+		tro.Scopes = p.defaultScope
+	}
+	client, mu, err := p.client(*tro)
+	if err != nil {
+		return authenticationRecord{}, err
+	}
+	mu.Lock()
+	defer mu.Unlock()
+	_, err = p.reqToken(ctx, client, *tro)
+	if err == nil {
+		scope := strings.Join(tro.Scopes, ", ")
+		msg := fmt.Sprintf("%s.Authenticate() acquired a token for scope %q", p.name, scope)
+		log.Write(EventAuthentication, msg)
+	}
+	return p.record, err
+}
+
 // GetToken requests an access token from MSAL, checking the cache first.
 func (p *publicClient) GetToken(ctx context.Context, tro policy.TokenRequestOptions) (azcore.AccessToken, error) {
 	if len(tro.Scopes) < 1 {
@@ -76,10 +147,13 @@ func (p *publicClient) GetToken(ctx context.Context, tro policy.TokenRequestOpti
 	}
 	mu.Lock()
 	defer mu.Unlock()
-	ar, err := client.AcquireTokenSilent(ctx, tro.Scopes, public.WithSilentAccount(p.account), public.WithClaims(tro.Claims), public.WithTenantID(tenant))
+	ar, err := client.AcquireTokenSilent(ctx, tro.Scopes, public.WithSilentAccount(p.record.account()), public.WithClaims(tro.Claims), public.WithTenantID(tenant))
 	if err == nil {
 		return p.token(ar, err)
 	}
+	if p.opts.DisableAutomaticAuthentication {
+		return azcore.AccessToken{}, errAuthenticationRequired
+	}
 	at, err := p.reqToken(ctx, client, tro)
 	if err == nil {
 		msg := fmt.Sprintf("%s.GetToken() acquired a token for scope %q", p.name, strings.Join(ar.GrantedScopes, ", "))
@@ -148,9 +222,14 @@ func (p *publicClient) client(tro policy.TokenRequestOptions) (msalPublicClient,
 }
 
 func (p *publicClient) newMSALClient(enableCAE bool) (msalPublicClient, error) {
+	cache, err := internal.NewCache(p.opts.TokenCachePersistenceOptions, enableCAE)
+	if err != nil {
+		return nil, err
+	}
 	o := []public.Option{
 		public.WithAuthority(runtime.JoinPaths(p.host, p.tenantID)),
-		public.WithHTTPClient(newPipelineAdapter(&p.opts.ClientOptions)),
+		public.WithCache(cache),
+		public.WithHTTPClient(p),
 	}
 	if enableCAE {
 		o = append(o, public.WithClientCapabilities(cp1))
@@ -163,7 +242,7 @@ func (p *publicClient) newMSALClient(enableCAE bool) (msalPublicClient, error) {
 
 func (p *publicClient) token(ar public.AuthResult, err error) (azcore.AccessToken, error) {
 	if err == nil {
-		p.account = ar.Account
+		p.record, err = newAuthenticationRecord(ar)
 	} else {
 		res := getResponseFromError(err)
 		err = newAuthenticationFailedError(p.name, err.Error(), res, err)
@@ -171,8 +250,24 @@ func (p *publicClient) token(ar public.AuthResult, err error) (azcore.AccessToke
 	return azcore.AccessToken{Token: ar.AccessToken, ExpiresOn: ar.ExpiresOn.UTC()}, err
 }
 
-// resolveTenant returns the correct tenant for a token request given the client's
+// resolveTenant returns the correct WithTenantID() argument for a token request given the client's
 // configuration, or an error when that configuration doesn't allow the specified tenant
 func (p *publicClient) resolveTenant(specified string) (string, error) {
-	return resolveTenant(p.tenantID, specified, p.name, p.opts.AdditionallyAllowedTenants)
+	t, err := resolveTenant(p.tenantID, specified, p.name, p.opts.AdditionallyAllowedTenants)
+	if t == p.tenantID {
+		// callers pass this value to MSAL's WithTenantID(). There's no need to redundantly specify
+		// the client's default tenant and doing so is an error when that tenant is "organizations"
+		t = ""
+	}
+	return t, err
+}
+
+// these methods satisfy the MSAL ops.HTTPClient interface
+
+func (p *publicClient) CloseIdleConnections() {
+	// do nothing
+}
+
+func (p *publicClient) Do(r *http.Request) (*http.Response, error) {
+	return doForClient(p.azClient, r)
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/username_password_credential.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/username_password_credential.go
index f787ec0ce18..294ed81e951 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/username_password_credential.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/username_password_credential.go
@@ -11,6 +11,7 @@ import (
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
 )
 
 const credNameUserPassword = "UsernamePasswordCredential"
@@ -23,11 +24,19 @@ type UsernamePasswordCredentialOptions struct {
 	// Add the wildcard value "*" to allow the credential to acquire tokens for any tenant in which the
 	// application is registered.
 	AdditionallyAllowedTenants []string
+
+	// authenticationRecord returned by a call to a credential's Authenticate method. Set this option
+	// to enable the credential to use data from a previous authentication.
+	authenticationRecord authenticationRecord
+
 	// DisableInstanceDiscovery should be set true only by applications authenticating in disconnected clouds, or
-	// private clouds such as Azure Stack. It determines whether the credential requests Azure AD instance metadata
+	// private clouds such as Azure Stack. It determines whether the credential requests Microsoft Entra instance metadata
 	// from https://login.microsoft.com before authenticating. Setting this to true will skip this request, making
 	// the application responsible for ensuring the configured authority is valid and trustworthy.
 	DisableInstanceDiscovery bool
+
+	// tokenCachePersistenceOptions enables persistent token caching when not nil.
+	tokenCachePersistenceOptions *tokenCachePersistenceOptions
 }
 
 // UsernamePasswordCredential authenticates a user with a password. Microsoft doesn't recommend this kind of authentication,
@@ -45,11 +54,13 @@ func NewUsernamePasswordCredential(tenantID string, clientID string, username st
 		options = &UsernamePasswordCredentialOptions{}
 	}
 	opts := publicClientOptions{
-		AdditionallyAllowedTenants: options.AdditionallyAllowedTenants,
-		ClientOptions:              options.ClientOptions,
-		DisableInstanceDiscovery:   options.DisableInstanceDiscovery,
-		Password:                   password,
-		Username:                   username,
+		AdditionallyAllowedTenants:   options.AdditionallyAllowedTenants,
+		ClientOptions:                options.ClientOptions,
+		DisableInstanceDiscovery:     options.DisableInstanceDiscovery,
+		Password:                     password,
+		Record:                       options.authenticationRecord,
+		TokenCachePersistenceOptions: options.tokenCachePersistenceOptions,
+		Username:                     username,
 	}
 	c, err := newPublicClient(tenantID, clientID, credNameUserPassword, opts)
 	if err != nil {
@@ -58,9 +69,22 @@ func NewUsernamePasswordCredential(tenantID string, clientID string, username st
 	return &UsernamePasswordCredential{client: c}, err
 }
 
-// GetToken requests an access token from Azure Active Directory. This method is called automatically by Azure SDK clients.
+// Authenticate the user. Subsequent calls to GetToken will automatically use the returned AuthenticationRecord.
+func (c *UsernamePasswordCredential) authenticate(ctx context.Context, opts *policy.TokenRequestOptions) (authenticationRecord, error) {
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameUserPassword+"."+traceOpAuthenticate, c.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	tk, err := c.client.Authenticate(ctx, opts)
+	return tk, err
+}
+
+// GetToken requests an access token from Microsoft Entra ID. This method is called automatically by Azure SDK clients.
 func (c *UsernamePasswordCredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
-	return c.client.GetToken(ctx, opts)
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameUserPassword+"."+traceOpGetToken, c.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	tk, err := c.client.GetToken(ctx, opts)
+	return tk, err
 }
 
 var _ azcore.TokenCredential = (*UsernamePasswordCredential)(nil)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/version.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/version.go
index 65e74e31e3b..e8caeea71ef 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/version.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/version.go
@@ -10,6 +10,9 @@ const (
 	// UserAgent is the string to be used in the user agent string when making requests.
 	component = "azidentity"
 
+	// module is the fully qualified name of the module used in telemetry and distributed tracing.
+	module = "github.com/Azure/azure-sdk-for-go/sdk/" + component
+
 	// Version is the semantic version (see http://semver.org) of this module.
-	version = "v1.4.0"
+	version = "v1.5.1"
 )
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/workload_identity.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/workload_identity.go
index 7e016324d22..3e43e788e93 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/workload_identity.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/workload_identity.go
@@ -15,6 +15,7 @@ import (
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
 )
 
 const credNameWorkloadIdentity = "WorkloadIdentityCredential"
@@ -41,7 +42,7 @@ type WorkloadIdentityCredentialOptions struct {
 	// ClientID of the service principal. Defaults to the value of the environment variable AZURE_CLIENT_ID.
 	ClientID string
 	// DisableInstanceDiscovery should be set true only by applications authenticating in disconnected clouds, or
-	// private clouds such as Azure Stack. It determines whether the credential requests Azure AD instance metadata
+	// private clouds such as Azure Stack. It determines whether the credential requests Microsoft Entra instance metadata
 	// from https://login.microsoft.com before authenticating. Setting this to true will skip this request, making
 	// the application responsible for ensuring the configured authority is valid and trustworthy.
 	DisableInstanceDiscovery bool
@@ -93,9 +94,13 @@ func NewWorkloadIdentityCredential(options *WorkloadIdentityCredentialOptions) (
 	return &w, nil
 }
 
-// GetToken requests an access token from Azure Active Directory. Azure SDK clients call this method automatically.
+// GetToken requests an access token from Microsoft Entra ID. Azure SDK clients call this method automatically.
 func (w *WorkloadIdentityCredential) GetToken(ctx context.Context, opts policy.TokenRequestOptions) (azcore.AccessToken, error) {
-	return w.cred.GetToken(ctx, opts)
+	var err error
+	ctx, endSpan := runtime.StartSpan(ctx, credNameWorkloadIdentity+"."+traceOpGetToken, w.cred.client.azClient.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	tk, err := w.cred.GetToken(ctx, opts)
+	return tk, err
 }
 
 // getAssertion returns the specified file's content, which is expected to be a Kubernetes service account token.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/autorest.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/autorest.md
deleted file mode 100644
index 31fe98659ae..00000000000
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/autorest.md
+++ /dev/null
@@ -1,12 +0,0 @@
-### AutoRest Configuration
-
-> see https://aka.ms/autorest
-
-``` yaml
-azure-arm: true
-require:
-- https://github.com/Azure/azure-rest-api-specs/blob/19f98c9f526f8db961f172276dd6d6882a86ed86/specification/compute/resource-manager/readme.md
-- https://github.com/Azure/azure-rest-api-specs/blob/19f98c9f526f8db961f172276dd6d6882a86ed86/specification/compute/resource-manager/readme.go.md
-license-header: MICROSOFT_MIT_NO_VERSION
-module-version: 4.2.1
-```
\ No newline at end of file
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/CHANGELOG.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/CHANGELOG.md
similarity index 60%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/CHANGELOG.md
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/CHANGELOG.md
index 1d41ffefe88..b19244d4651 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/CHANGELOG.md
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/CHANGELOG.md
@@ -1,5 +1,149 @@
 # Release History
 
+## 5.4.0 (2023-12-22)
+### Features Added
+
+- New value `ConfidentialVMEncryptionTypeNonPersistedTPM` added to enum type `ConfidentialVMEncryptionType`
+- New value `ReplicationStatusTypesUefiSettings` added to enum type `ReplicationStatusTypes`
+- New value `SecurityEncryptionTypesNonPersistedTPM` added to enum type `SecurityEncryptionTypes`
+- New enum type `Mode` with values `ModeAudit`, `ModeEnforce`
+- New enum type `SSHEncryptionTypes` with values `SSHEncryptionTypesEd25519`, `SSHEncryptionTypesRSA`
+- New enum type `UefiKeyType` with values `UefiKeyTypeSHA256`, `UefiKeyTypeX509`
+- New enum type `UefiSignatureTemplateName` with values `UefiSignatureTemplateNameMicrosoftUefiCertificateAuthorityTemplate`, `UefiSignatureTemplateNameMicrosoftWindowsTemplate`, `UefiSignatureTemplateNameNoSignatureTemplate`
+- New function `*DedicatedHostsClient.BeginRedeploy(context.Context, string, string, string, *DedicatedHostsClientBeginRedeployOptions) (*runtime.Poller[DedicatedHostsClientRedeployResponse], error)`
+- New function `*VirtualMachineScaleSetVMsClient.BeginApproveRollingUpgrade(context.Context, string, string, string, *VirtualMachineScaleSetVMsClientBeginApproveRollingUpgradeOptions) (*runtime.Poller[VirtualMachineScaleSetVMsClientApproveRollingUpgradeResponse], error)`
+- New function `*VirtualMachineScaleSetVMsClient.BeginAttachDetachDataDisks(context.Context, string, string, string, AttachDetachDataDisksRequest, *VirtualMachineScaleSetVMsClientBeginAttachDetachDataDisksOptions) (*runtime.Poller[VirtualMachineScaleSetVMsClientAttachDetachDataDisksResponse], error)`
+- New function `*VirtualMachineScaleSetsClient.BeginApproveRollingUpgrade(context.Context, string, string, *VirtualMachineScaleSetsClientBeginApproveRollingUpgradeOptions) (*runtime.Poller[VirtualMachineScaleSetsClientApproveRollingUpgradeResponse], error)`
+- New function `*VirtualMachinesClient.BeginAttachDetachDataDisks(context.Context, string, string, AttachDetachDataDisksRequest, *VirtualMachinesClientBeginAttachDetachDataDisksOptions) (*runtime.Poller[VirtualMachinesClientAttachDetachDataDisksResponse], error)`
+- New struct `AttachDetachDataDisksRequest`
+- New struct `CommunityGalleryMetadata`
+- New struct `CommunityGalleryProperties`
+- New struct `DataDisksToAttach`
+- New struct `DataDisksToDetach`
+- New struct `EncryptionIdentity`
+- New struct `GalleryImageVersionUefiSettings`
+- New struct `ImageVersionSecurityProfile`
+- New struct `ProxyAgentSettings`
+- New struct `ResiliencyPolicy`
+- New struct `ResilientVMCreationPolicy`
+- New struct `ResilientVMDeletionPolicy`
+- New struct `ResourceSharingProfile`
+- New struct `SSHGenerateKeyPairInputParameters`
+- New struct `SharedGalleryProperties`
+- New struct `UefiKey`
+- New struct `UefiKeySignatures`
+- New field `OSRollingUpgradeDeferral` in struct `AutomaticOSUpgradePolicy`
+- New field `SharedSubscriptionIDs` in struct `CapacityReservationGroupInstanceView`
+- New field `SharingProfile` in struct `CapacityReservationGroupProperties`
+- New field `Properties` in struct `CommunityGallery`
+- New field `ArtifactTags`, `Disclaimer` in struct `CommunityGalleryImageProperties`
+- New field `ArtifactTags`, `Disclaimer` in struct `CommunityGalleryImageVersionProperties`
+- New field `SecurityProfile` in struct `GalleryImageVersionProperties`
+- New field `DiskControllerType` in struct `RestorePointSourceVMStorageProfile`
+- New field `Parameters` in struct `SSHPublicKeysClientGenerateKeyPairOptions`
+- New field `EncryptionIdentity`, `ProxyAgentSettings` in struct `SecurityProfile`
+- New field `Properties` in struct `SharedGallery`
+- New field `ArtifactTags` in struct `SharedGalleryImageProperties`
+- New field `ArtifactTags` in struct `SharedGalleryImageVersionProperties`
+- New field `Etag`, `ManagedBy` in struct `VirtualMachine`
+- New field `IsVMInStandbyPool` in struct `VirtualMachineInstanceView`
+- New field `Etag` in struct `VirtualMachineScaleSet`
+- New field `ResiliencyPolicy` in struct `VirtualMachineScaleSetProperties`
+- New field `ResiliencyPolicy` in struct `VirtualMachineScaleSetUpdateProperties`
+- New field `Etag` in struct `VirtualMachineScaleSetVM`
+- New field `TimeCreated` in struct `VirtualMachineScaleSetVMProfile`
+- New field `IfMatch`, `IfNoneMatch` in struct `VirtualMachineScaleSetVMsClientBeginUpdateOptions`
+- New field `IfMatch`, `IfNoneMatch` in struct `VirtualMachineScaleSetsClientBeginCreateOrUpdateOptions`
+- New field `IfMatch`, `IfNoneMatch` in struct `VirtualMachineScaleSetsClientBeginUpdateOptions`
+- New field `IfMatch`, `IfNoneMatch` in struct `VirtualMachinesClientBeginCreateOrUpdateOptions`
+- New field `IfMatch`, `IfNoneMatch` in struct `VirtualMachinesClientBeginUpdateOptions`
+
+
+## 5.3.0 (2023-11-24)
+### Features Added
+
+- Support for test fakes and OpenTelemetry trace spans.
+
+
+## 5.3.0-beta.2 (2023-10-30)
+
+### Other Changes
+
+- Updated with latest code generator to fix a few issues in fakes.
+
+## 5.3.0-beta.1 (2023-10-09)
+### Features Added
+
+- Support for test fakes and OpenTelemetry trace spans.
+
+## 5.2.0 (2023-09-22)
+### Features Added
+
+- New value `DiskCreateOptionCopyFromSanSnapshot` added to enum type `DiskCreateOption`
+- New enum type `DomainNameLabelScopeTypes` with values `DomainNameLabelScopeTypesNoReuse`, `DomainNameLabelScopeTypesResourceGroupReuse`, `DomainNameLabelScopeTypesSubscriptionReuse`, `DomainNameLabelScopeTypesTenantReuse`
+- New enum type `NetworkInterfaceAuxiliaryMode` with values `NetworkInterfaceAuxiliaryModeAcceleratedConnections`, `NetworkInterfaceAuxiliaryModeFloating`, `NetworkInterfaceAuxiliaryModeNone`
+- New enum type `NetworkInterfaceAuxiliarySKU` with values `NetworkInterfaceAuxiliarySKUA1`, `NetworkInterfaceAuxiliarySKUA2`, `NetworkInterfaceAuxiliarySKUA4`, `NetworkInterfaceAuxiliarySKUA8`, `NetworkInterfaceAuxiliarySKUNone`
+- New field `ElasticSanResourceID` in struct `CreationData`
+- New field `LastOwnershipUpdateTime` in struct `DiskProperties`
+- New field `AuxiliaryMode`, `AuxiliarySKU` in struct `VirtualMachineNetworkInterfaceConfigurationProperties`
+- New field `DomainNameLabelScope` in struct `VirtualMachinePublicIPAddressDNSSettingsConfiguration`
+- New field `AuxiliaryMode`, `AuxiliarySKU` in struct `VirtualMachineScaleSetNetworkConfigurationProperties`
+- New field `DomainNameLabelScope` in struct `VirtualMachineScaleSetPublicIPAddressConfigurationDNSSettings`
+- New field `AuxiliaryMode`, `AuxiliarySKU` in struct `VirtualMachineScaleSetUpdateNetworkConfigurationProperties`
+- New field `TimeCreated` in struct `VirtualMachineScaleSetVMProperties`
+
+
+## 5.1.0 (2023-07-28)
+### Features Added
+
+- New enum type `FileFormat` with values `FileFormatVHD`, `FileFormatVHDX`
+- New field `FileFormat` in struct `GrantAccessData`
+
+
+## 5.0.0 (2023-05-26)
+### Breaking Changes
+
+- Type of `CommunityGalleryImageProperties.Identifier` has been changed from `*GalleryImageIdentifier` to `*CommunityGalleryImageIdentifier`
+- Type of `GalleryTargetExtendedLocation.StorageAccountType` has been changed from `*StorageAccountType` to `*EdgeZoneStorageAccountType`
+- Type of `RestorePointSourceVMDataDisk.DiskRestorePoint` has been changed from `*APIEntityReference` to `*DiskRestorePointAttributes`
+- Type of `RestorePointSourceVMOSDisk.DiskRestorePoint` has been changed from `*APIEntityReference` to `*DiskRestorePointAttributes`
+- `StorageAccountTypeStandardSSDLRS` from enum `StorageAccountType` has been removed
+- Field `ID` of struct `VirtualMachineScaleSetIPConfiguration` has been removed
+- Field `ID` of struct `VirtualMachineScaleSetNetworkConfiguration` has been removed
+- Field `ID` of struct `VirtualMachineScaleSetUpdateIPConfiguration` has been removed
+- Field `ID` of struct `VirtualMachineScaleSetUpdateNetworkConfiguration` has been removed
+
+### Features Added
+
+- New enum type `EdgeZoneStorageAccountType` with values `EdgeZoneStorageAccountTypePremiumLRS`, `EdgeZoneStorageAccountTypeStandardLRS`, `EdgeZoneStorageAccountTypeStandardSSDLRS`, `EdgeZoneStorageAccountTypeStandardZRS`
+- New enum type `ExpandTypeForListVMs` with values `ExpandTypeForListVMsInstanceView`
+- New enum type `ExpandTypesForListVMs` with values `ExpandTypesForListVMsInstanceView`
+- New enum type `RestorePointEncryptionType` with values `RestorePointEncryptionTypeEncryptionAtRestWithCustomerKey`, `RestorePointEncryptionTypeEncryptionAtRestWithPlatformAndCustomerKeys`, `RestorePointEncryptionTypeEncryptionAtRestWithPlatformKey`
+- New function `*DedicatedHostsClient.NewListAvailableSizesPager(string, string, string, *DedicatedHostsClientListAvailableSizesOptions) *runtime.Pager[DedicatedHostsClientListAvailableSizesResponse]`
+- New function `*VirtualMachineScaleSetsClient.BeginReapply(context.Context, string, string, *VirtualMachineScaleSetsClientBeginReapplyOptions) (*runtime.Poller[VirtualMachineScaleSetsClientReapplyResponse], error)`
+- New struct `CommunityGalleryImageIdentifier`
+- New struct `DedicatedHostSizeListResult`
+- New struct `DiskRestorePointAttributes`
+- New struct `RestorePointEncryption`
+- New struct `RunCommandManagedIdentity`
+- New struct `SecurityPostureReference`
+- New field `SKU` in struct `DedicatedHostUpdate`
+- New field `BypassPlatformSafetyChecksOnUserSchedule` in struct `LinuxVMGuestPatchAutomaticByPlatformSettings`
+- New field `HyperVGeneration` in struct `RestorePointSourceMetadata`
+- New field `WriteAcceleratorEnabled` in struct `RestorePointSourceVMDataDisk`
+- New field `WriteAcceleratorEnabled` in struct `RestorePointSourceVMOSDisk`
+- New field `ProvisionAfterExtensions` in struct `VirtualMachineExtensionProperties`
+- New field `ErrorBlobManagedIdentity`, `OutputBlobManagedIdentity`, `TreatFailureAsDeploymentFailure` in struct `VirtualMachineRunCommandProperties`
+- New field `ScriptURIManagedIdentity` in struct `VirtualMachineRunCommandScriptSource`
+- New field `PriorityMixPolicy`, `SpotRestorePolicy` in struct `VirtualMachineScaleSetUpdateProperties`
+- New field `Location` in struct `VirtualMachineScaleSetVMExtension`
+- New field `SecurityPostureReference` in struct `VirtualMachineScaleSetVMProfile`
+- New field `Hibernate` in struct `VirtualMachineScaleSetsClientBeginDeallocateOptions`
+- New field `Expand` in struct `VirtualMachinesClientListAllOptions`
+- New field `Expand` in struct `VirtualMachinesClientListOptions`
+- New field `BypassPlatformSafetyChecksOnUserSchedule` in struct `WindowsVMGuestPatchAutomaticByPlatformSettings`
+
+
 ## 4.2.1 (2023-04-14)
 ### Bug Fixes
 
@@ -239,4 +383,4 @@ The package of `github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/ar
 
 To migrate the existing applications to the latest version, please refer to [Migration Guide](https://aka.ms/azsdk/go/mgmt/migration).
 
-To learn more, please refer to our documentation [Quick Start](https://aka.ms/azsdk/go/mgmt).
\ No newline at end of file
+To learn more, please refer to our documentation [Quick Start](https://aka.ms/azsdk/go/mgmt).
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/LICENSE.txt b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/LICENSE.txt
similarity index 100%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/LICENSE.txt
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/LICENSE.txt
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/README.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/README.md
similarity index 90%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/README.md
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/README.md
index 39f86b0b998..7c8d1e3e138 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/README.md
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/README.md
@@ -1,6 +1,6 @@
 # Azure Compute Module for Go
 
-[![PkgGoDev](https://pkg.go.dev/badge/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4)](https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4)
+[![PkgGoDev](https://pkg.go.dev/badge/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5)](https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5)
 
 The `armcompute` module provides operations for working with Azure Compute.
 
@@ -20,7 +20,7 @@ This project uses [Go modules](https://github.com/golang/go/wiki/Modules) for ve
 Install the Azure Compute module:
 
 ```sh
-go get github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4
+go get github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5
 ```
 
 ## Authorization
@@ -60,9 +60,17 @@ A client groups a set of related APIs, providing access to its functionality.  C
 client := clientFactory.NewLogAnalyticsClient()
 ```
 
+## Fakes
+
+The fake package contains types used for constructing in-memory fake servers used in unit tests.
+This allows writing tests to cover various success/error conditions without the need for connecting to a live service.
+
+Please see https://github.com/Azure/azure-sdk-for-go/tree/main/sdk/samples/fakes for details and examples on how to use fakes.
+
 ## More sample code
 
 - [Availability Set](https://aka.ms/azsdk/go/mgmt/samples?path=sdk/resourcemanager/compute/availabilityset)
+- [Creating a Fake](https://github.com/Azure/azure-sdk-for-go/blob/main/sdk/resourcemanager/compute/armcompute/fake_example_test.go)
 - [Virtual Machine](https://aka.ms/azsdk/go/mgmt/samples?path=sdk/resourcemanager/compute/create_vm)
 - [Dedicated Host](https://aka.ms/azsdk/go/mgmt/samples?path=sdk/resourcemanager/compute/dedicated_host)
 - [Disk](https://aka.ms/azsdk/go/mgmt/samples?path=sdk/resourcemanager/compute/disk)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/assets.json b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/assets.json
similarity index 69%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/assets.json
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/assets.json
index 740c95e5380..1feae4c5caa 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/assets.json
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/assets.json
@@ -2,5 +2,5 @@
   "AssetsRepo": "Azure/azure-sdk-assets",
   "AssetsRepoPrefixPath": "go",
   "TagPrefix": "go/resourcemanager/compute/armcompute",
-  "Tag": "go/resourcemanager/compute/armcompute_7dca156240"
+  "Tag": "go/resourcemanager/compute/armcompute_323718962d"
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/autorest.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/autorest.md
new file mode 100644
index 00000000000..9d88c8a6d6d
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/autorest.md
@@ -0,0 +1,13 @@
+### AutoRest Configuration
+
+> see https://aka.ms/autorest
+
+``` yaml
+azure-arm: true
+require:
+- https://github.com/Azure/azure-rest-api-specs/blob/60679ee3db06e93eb73faa0587fed93ed843d6dc/specification/compute/resource-manager/readme.md
+- https://github.com/Azure/azure-rest-api-specs/blob/60679ee3db06e93eb73faa0587fed93ed843d6dc/specification/compute/resource-manager/readme.go.md
+license-header: MICROSOFT_MIT_NO_VERSION
+module-version: 5.4.0
+tag: package-2023-09-01
+```
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/availabilitysets_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/availabilitysets_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/availabilitysets_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/availabilitysets_client.go
index 10a9f162b70..3b568f54ae9 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/availabilitysets_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/availabilitysets_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type AvailabilitySetsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewAvailabilitySetsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*AvailabilitySetsClient, error) {
-	cl, err := arm.NewClient(moduleName+".AvailabilitySetsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewAvailabilitySetsClient(subscriptionID string, credential azcore.TokenCre
 // CreateOrUpdate - Create or update an availability set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - availabilitySetName - The name of the availability set.
 //   - parameters - Parameters supplied to the Create Availability Set operation.
 //   - options - AvailabilitySetsClientCreateOrUpdateOptions contains the optional parameters for the AvailabilitySetsClient.CreateOrUpdate
 //     method.
 func (client *AvailabilitySetsClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, availabilitySetName string, parameters AvailabilitySet, options *AvailabilitySetsClientCreateOrUpdateOptions) (AvailabilitySetsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "AvailabilitySetsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, availabilitySetName, parameters, options)
 	if err != nil {
 		return AvailabilitySetsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return AvailabilitySetsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return AvailabilitySetsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return AvailabilitySetsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -89,10 +95,13 @@ func (client *AvailabilitySetsClient) createOrUpdateCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -107,21 +116,27 @@ func (client *AvailabilitySetsClient) createOrUpdateHandleResponse(resp *http.Re
 // Delete - Delete an availability set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - availabilitySetName - The name of the availability set.
 //   - options - AvailabilitySetsClientDeleteOptions contains the optional parameters for the AvailabilitySetsClient.Delete method.
 func (client *AvailabilitySetsClient) Delete(ctx context.Context, resourceGroupName string, availabilitySetName string, options *AvailabilitySetsClientDeleteOptions) (AvailabilitySetsClientDeleteResponse, error) {
+	var err error
+	const operationName = "AvailabilitySetsClient.Delete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, availabilitySetName, options)
 	if err != nil {
 		return AvailabilitySetsClientDeleteResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return AvailabilitySetsClientDeleteResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusNoContent) {
-		return AvailabilitySetsClientDeleteResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return AvailabilitySetsClientDeleteResponse{}, err
 	}
 	return AvailabilitySetsClientDeleteResponse{}, nil
 }
@@ -146,7 +161,7 @@ func (client *AvailabilitySetsClient) deleteCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -155,23 +170,30 @@ func (client *AvailabilitySetsClient) deleteCreateRequest(ctx context.Context, r
 // Get - Retrieves information about an availability set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - availabilitySetName - The name of the availability set.
 //   - options - AvailabilitySetsClientGetOptions contains the optional parameters for the AvailabilitySetsClient.Get method.
 func (client *AvailabilitySetsClient) Get(ctx context.Context, resourceGroupName string, availabilitySetName string, options *AvailabilitySetsClientGetOptions) (AvailabilitySetsClientGetResponse, error) {
+	var err error
+	const operationName = "AvailabilitySetsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, availabilitySetName, options)
 	if err != nil {
 		return AvailabilitySetsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return AvailabilitySetsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return AvailabilitySetsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return AvailabilitySetsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -194,7 +216,7 @@ func (client *AvailabilitySetsClient) getCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -211,7 +233,7 @@ func (client *AvailabilitySetsClient) getHandleResponse(resp *http.Response) (Av
 
 // NewListPager - Lists all availability sets in a resource group.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - AvailabilitySetsClientListOptions contains the optional parameters for the AvailabilitySetsClient.NewListPager
 //     method.
@@ -221,25 +243,20 @@ func (client *AvailabilitySetsClient) NewListPager(resourceGroupName string, opt
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AvailabilitySetsClientListResponse) (AvailabilitySetsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AvailabilitySetsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return AvailabilitySetsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AvailabilitySetsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AvailabilitySetsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -259,7 +276,7 @@ func (client *AvailabilitySetsClient) listCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -277,7 +294,7 @@ func (client *AvailabilitySetsClient) listHandleResponse(resp *http.Response) (A
 // NewListAvailableSizesPager - Lists all available virtual machine sizes that can be used to create a new virtual machine
 // in an existing availability set.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - availabilitySetName - The name of the availability set.
 //   - options - AvailabilitySetsClientListAvailableSizesOptions contains the optional parameters for the AvailabilitySetsClient.NewListAvailableSizesPager
@@ -288,6 +305,7 @@ func (client *AvailabilitySetsClient) NewListAvailableSizesPager(resourceGroupNa
 			return false
 		},
 		Fetcher: func(ctx context.Context, page *AvailabilitySetsClientListAvailableSizesResponse) (AvailabilitySetsClientListAvailableSizesResponse, error) {
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AvailabilitySetsClient.NewListAvailableSizesPager")
 			req, err := client.listAvailableSizesCreateRequest(ctx, resourceGroupName, availabilitySetName, options)
 			if err != nil {
 				return AvailabilitySetsClientListAvailableSizesResponse{}, err
@@ -301,6 +319,7 @@ func (client *AvailabilitySetsClient) NewListAvailableSizesPager(resourceGroupNa
 			}
 			return client.listAvailableSizesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -324,7 +343,7 @@ func (client *AvailabilitySetsClient) listAvailableSizesCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -341,7 +360,7 @@ func (client *AvailabilitySetsClient) listAvailableSizesHandleResponse(resp *htt
 
 // NewListBySubscriptionPager - Lists all availability sets in a subscription.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - options - AvailabilitySetsClientListBySubscriptionOptions contains the optional parameters for the AvailabilitySetsClient.NewListBySubscriptionPager
 //     method.
 func (client *AvailabilitySetsClient) NewListBySubscriptionPager(options *AvailabilitySetsClientListBySubscriptionOptions) *runtime.Pager[AvailabilitySetsClientListBySubscriptionResponse] {
@@ -350,25 +369,20 @@ func (client *AvailabilitySetsClient) NewListBySubscriptionPager(options *Availa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AvailabilitySetsClientListBySubscriptionResponse) (AvailabilitySetsClientListBySubscriptionResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listBySubscriptionCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return AvailabilitySetsClientListBySubscriptionResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AvailabilitySetsClient.NewListBySubscriptionPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listBySubscriptionCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return AvailabilitySetsClientListBySubscriptionResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AvailabilitySetsClientListBySubscriptionResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listBySubscriptionHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -384,7 +398,7 @@ func (client *AvailabilitySetsClient) listBySubscriptionCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -405,24 +419,31 @@ func (client *AvailabilitySetsClient) listBySubscriptionHandleResponse(resp *htt
 // Update - Update an availability set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - availabilitySetName - The name of the availability set.
 //   - parameters - Parameters supplied to the Update Availability Set operation.
 //   - options - AvailabilitySetsClientUpdateOptions contains the optional parameters for the AvailabilitySetsClient.Update method.
 func (client *AvailabilitySetsClient) Update(ctx context.Context, resourceGroupName string, availabilitySetName string, parameters AvailabilitySetUpdate, options *AvailabilitySetsClientUpdateOptions) (AvailabilitySetsClientUpdateResponse, error) {
+	var err error
+	const operationName = "AvailabilitySetsClient.Update"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, availabilitySetName, parameters, options)
 	if err != nil {
 		return AvailabilitySetsClientUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return AvailabilitySetsClientUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return AvailabilitySetsClientUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return AvailabilitySetsClientUpdateResponse{}, err
 	}
-	return client.updateHandleResponse(resp)
+	resp, err := client.updateHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateCreateRequest creates the Update request.
@@ -445,10 +466,13 @@ func (client *AvailabilitySetsClient) updateCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateHandleResponse handles the Update response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/build.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/build.go
similarity index 100%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/build.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/build.go
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/capacityreservationgroups_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/capacityreservationgroups_client.go
similarity index 82%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/capacityreservationgroups_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/capacityreservationgroups_client.go
index 102dfbe04c7..96e32e9668f 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/capacityreservationgroups_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/capacityreservationgroups_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type CapacityReservationGroupsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewCapacityReservationGroupsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*CapacityReservationGroupsClient, error) {
-	cl, err := arm.NewClient(moduleName+".CapacityReservationGroupsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -46,29 +45,36 @@ func NewCapacityReservationGroupsClient(subscriptionID string, credential azcore
 }
 
 // CreateOrUpdate - The operation to create or update a capacity reservation group. When updating a capacity reservation group,
-// only tags may be modified. Please refer to https://aka.ms/CapacityReservation for more
-// details.
+// only tags and sharing profile may be modified. Please refer to
+// https://aka.ms/CapacityReservation for more details.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - capacityReservationGroupName - The name of the capacity reservation group.
 //   - parameters - Parameters supplied to the Create capacity reservation Group.
 //   - options - CapacityReservationGroupsClientCreateOrUpdateOptions contains the optional parameters for the CapacityReservationGroupsClient.CreateOrUpdate
 //     method.
 func (client *CapacityReservationGroupsClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, capacityReservationGroupName string, parameters CapacityReservationGroup, options *CapacityReservationGroupsClientCreateOrUpdateOptions) (CapacityReservationGroupsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "CapacityReservationGroupsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, capacityReservationGroupName, parameters, options)
 	if err != nil {
 		return CapacityReservationGroupsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CapacityReservationGroupsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return CapacityReservationGroupsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return CapacityReservationGroupsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -91,10 +97,13 @@ func (client *CapacityReservationGroupsClient) createOrUpdateCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -111,22 +120,28 @@ func (client *CapacityReservationGroupsClient) createOrUpdateHandleResponse(resp
 // the reservation group have also been deleted. Please refer to https://aka.ms/CapacityReservation for more details.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - capacityReservationGroupName - The name of the capacity reservation group.
 //   - options - CapacityReservationGroupsClientDeleteOptions contains the optional parameters for the CapacityReservationGroupsClient.Delete
 //     method.
 func (client *CapacityReservationGroupsClient) Delete(ctx context.Context, resourceGroupName string, capacityReservationGroupName string, options *CapacityReservationGroupsClientDeleteOptions) (CapacityReservationGroupsClientDeleteResponse, error) {
+	var err error
+	const operationName = "CapacityReservationGroupsClient.Delete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, capacityReservationGroupName, options)
 	if err != nil {
 		return CapacityReservationGroupsClientDeleteResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CapacityReservationGroupsClientDeleteResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusNoContent) {
-		return CapacityReservationGroupsClientDeleteResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return CapacityReservationGroupsClientDeleteResponse{}, err
 	}
 	return CapacityReservationGroupsClientDeleteResponse{}, nil
 }
@@ -151,7 +166,7 @@ func (client *CapacityReservationGroupsClient) deleteCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -160,24 +175,31 @@ func (client *CapacityReservationGroupsClient) deleteCreateRequest(ctx context.C
 // Get - The operation that retrieves information about a capacity reservation group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - capacityReservationGroupName - The name of the capacity reservation group.
 //   - options - CapacityReservationGroupsClientGetOptions contains the optional parameters for the CapacityReservationGroupsClient.Get
 //     method.
 func (client *CapacityReservationGroupsClient) Get(ctx context.Context, resourceGroupName string, capacityReservationGroupName string, options *CapacityReservationGroupsClientGetOptions) (CapacityReservationGroupsClientGetResponse, error) {
+	var err error
+	const operationName = "CapacityReservationGroupsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, capacityReservationGroupName, options)
 	if err != nil {
 		return CapacityReservationGroupsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CapacityReservationGroupsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CapacityReservationGroupsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CapacityReservationGroupsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -203,7 +225,7 @@ func (client *CapacityReservationGroupsClient) getCreateRequest(ctx context.Cont
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -221,7 +243,7 @@ func (client *CapacityReservationGroupsClient) getHandleResponse(resp *http.Resp
 // NewListByResourceGroupPager - Lists all of the capacity reservation groups in the specified resource group. Use the nextLink
 // property in the response to get the next page of capacity reservation groups.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - CapacityReservationGroupsClientListByResourceGroupOptions contains the optional parameters for the CapacityReservationGroupsClient.NewListByResourceGroupPager
 //     method.
@@ -231,25 +253,20 @@ func (client *CapacityReservationGroupsClient) NewListByResourceGroupPager(resou
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CapacityReservationGroupsClientListByResourceGroupResponse) (CapacityReservationGroupsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return CapacityReservationGroupsClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CapacityReservationGroupsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return CapacityReservationGroupsClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CapacityReservationGroupsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -269,7 +286,7 @@ func (client *CapacityReservationGroupsClient) listByResourceGroupCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
@@ -290,7 +307,7 @@ func (client *CapacityReservationGroupsClient) listByResourceGroupHandleResponse
 // NewListBySubscriptionPager - Lists all of the capacity reservation groups in the subscription. Use the nextLink property
 // in the response to get the next page of capacity reservation groups.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - options - CapacityReservationGroupsClientListBySubscriptionOptions contains the optional parameters for the CapacityReservationGroupsClient.NewListBySubscriptionPager
 //     method.
 func (client *CapacityReservationGroupsClient) NewListBySubscriptionPager(options *CapacityReservationGroupsClientListBySubscriptionOptions) *runtime.Pager[CapacityReservationGroupsClientListBySubscriptionResponse] {
@@ -299,25 +316,20 @@ func (client *CapacityReservationGroupsClient) NewListBySubscriptionPager(option
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CapacityReservationGroupsClientListBySubscriptionResponse) (CapacityReservationGroupsClientListBySubscriptionResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listBySubscriptionCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CapacityReservationGroupsClient.NewListBySubscriptionPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listBySubscriptionCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return CapacityReservationGroupsClientListBySubscriptionResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return CapacityReservationGroupsClientListBySubscriptionResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CapacityReservationGroupsClientListBySubscriptionResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listBySubscriptionHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -333,7 +345,7 @@ func (client *CapacityReservationGroupsClient) listBySubscriptionCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
@@ -351,29 +363,36 @@ func (client *CapacityReservationGroupsClient) listBySubscriptionHandleResponse(
 	return result, nil
 }
 
-// Update - The operation to update a capacity reservation group. When updating a capacity reservation group, only tags may
-// be modified.
+// Update - The operation to update a capacity reservation group. When updating a capacity reservation group, only tags and
+// sharing profile may be modified.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - capacityReservationGroupName - The name of the capacity reservation group.
 //   - parameters - Parameters supplied to the Update capacity reservation Group operation.
 //   - options - CapacityReservationGroupsClientUpdateOptions contains the optional parameters for the CapacityReservationGroupsClient.Update
 //     method.
 func (client *CapacityReservationGroupsClient) Update(ctx context.Context, resourceGroupName string, capacityReservationGroupName string, parameters CapacityReservationGroupUpdate, options *CapacityReservationGroupsClientUpdateOptions) (CapacityReservationGroupsClientUpdateResponse, error) {
+	var err error
+	const operationName = "CapacityReservationGroupsClient.Update"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, capacityReservationGroupName, parameters, options)
 	if err != nil {
 		return CapacityReservationGroupsClientUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CapacityReservationGroupsClientUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CapacityReservationGroupsClientUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CapacityReservationGroupsClientUpdateResponse{}, err
 	}
-	return client.updateHandleResponse(resp)
+	resp, err := client.updateHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateCreateRequest creates the Update request.
@@ -396,10 +415,13 @@ func (client *CapacityReservationGroupsClient) updateCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateHandleResponse handles the Update response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/capacityreservations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/capacityreservations_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/capacityreservations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/capacityreservations_client.go
index f1cfacc68fa..951b0ac91c4 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/capacityreservations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/capacityreservations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type CapacityReservationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewCapacityReservationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*CapacityReservationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".CapacityReservationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -50,7 +49,7 @@ func NewCapacityReservationsClient(subscriptionID string, credential azcore.Toke
 // details.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - capacityReservationGroupName - The name of the capacity reservation group.
 //   - capacityReservationName - The name of the capacity reservation.
@@ -63,9 +62,14 @@ func (client *CapacityReservationsClient) BeginCreateOrUpdate(ctx context.Contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CapacityReservationsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CapacityReservationsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CapacityReservationsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CapacityReservationsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -74,20 +78,26 @@ func (client *CapacityReservationsClient) BeginCreateOrUpdate(ctx context.Contex
 // details.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *CapacityReservationsClient) createOrUpdate(ctx context.Context, resourceGroupName string, capacityReservationGroupName string, capacityReservationName string, parameters CapacityReservation, options *CapacityReservationsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CapacityReservationsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, capacityReservationGroupName, capacityReservationName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -114,10 +124,13 @@ func (client *CapacityReservationsClient) createOrUpdateCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - The operation to delete a capacity reservation. This operation is allowed only when all the associated resources
@@ -125,7 +138,7 @@ func (client *CapacityReservationsClient) createOrUpdateCreateRequest(ctx contex
 // https://aka.ms/CapacityReservation for more details.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - capacityReservationGroupName - The name of the capacity reservation group.
 //   - capacityReservationName - The name of the capacity reservation.
@@ -137,9 +150,14 @@ func (client *CapacityReservationsClient) BeginDelete(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CapacityReservationsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CapacityReservationsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CapacityReservationsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CapacityReservationsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -148,20 +166,26 @@ func (client *CapacityReservationsClient) BeginDelete(ctx context.Context, resou
 // https://aka.ms/CapacityReservation for more details.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *CapacityReservationsClient) deleteOperation(ctx context.Context, resourceGroupName string, capacityReservationGroupName string, capacityReservationName string, options *CapacityReservationsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CapacityReservationsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, capacityReservationGroupName, capacityReservationName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -188,7 +212,7 @@ func (client *CapacityReservationsClient) deleteCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -197,25 +221,32 @@ func (client *CapacityReservationsClient) deleteCreateRequest(ctx context.Contex
 // Get - The operation that retrieves information about the capacity reservation.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - capacityReservationGroupName - The name of the capacity reservation group.
 //   - capacityReservationName - The name of the capacity reservation.
 //   - options - CapacityReservationsClientGetOptions contains the optional parameters for the CapacityReservationsClient.Get
 //     method.
 func (client *CapacityReservationsClient) Get(ctx context.Context, resourceGroupName string, capacityReservationGroupName string, capacityReservationName string, options *CapacityReservationsClientGetOptions) (CapacityReservationsClientGetResponse, error) {
+	var err error
+	const operationName = "CapacityReservationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, capacityReservationGroupName, capacityReservationName, options)
 	if err != nil {
 		return CapacityReservationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CapacityReservationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CapacityReservationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CapacityReservationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -245,7 +276,7 @@ func (client *CapacityReservationsClient) getCreateRequest(ctx context.Context,
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -263,7 +294,7 @@ func (client *CapacityReservationsClient) getHandleResponse(resp *http.Response)
 // NewListByCapacityReservationGroupPager - Lists all of the capacity reservations in the specified capacity reservation group.
 // Use the nextLink property in the response to get the next page of capacity reservations.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - capacityReservationGroupName - The name of the capacity reservation group.
 //   - options - CapacityReservationsClientListByCapacityReservationGroupOptions contains the optional parameters for the CapacityReservationsClient.NewListByCapacityReservationGroupPager
@@ -274,25 +305,20 @@ func (client *CapacityReservationsClient) NewListByCapacityReservationGroupPager
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CapacityReservationsClientListByCapacityReservationGroupResponse) (CapacityReservationsClientListByCapacityReservationGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByCapacityReservationGroupCreateRequest(ctx, resourceGroupName, capacityReservationGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return CapacityReservationsClientListByCapacityReservationGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CapacityReservationsClient.NewListByCapacityReservationGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByCapacityReservationGroupCreateRequest(ctx, resourceGroupName, capacityReservationGroupName, options)
+			}, nil)
 			if err != nil {
 				return CapacityReservationsClientListByCapacityReservationGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CapacityReservationsClientListByCapacityReservationGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByCapacityReservationGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -316,7 +342,7 @@ func (client *CapacityReservationsClient) listByCapacityReservationGroupCreateRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -334,7 +360,7 @@ func (client *CapacityReservationsClient) listByCapacityReservationGroupHandleRe
 // BeginUpdate - The operation to update a capacity reservation.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - capacityReservationGroupName - The name of the capacity reservation group.
 //   - capacityReservationName - The name of the capacity reservation.
@@ -347,29 +373,40 @@ func (client *CapacityReservationsClient) BeginUpdate(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CapacityReservationsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CapacityReservationsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CapacityReservationsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CapacityReservationsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - The operation to update a capacity reservation.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *CapacityReservationsClient) update(ctx context.Context, resourceGroupName string, capacityReservationGroupName string, capacityReservationName string, parameters CapacityReservationUpdate, options *CapacityReservationsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CapacityReservationsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, capacityReservationGroupName, capacityReservationName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -396,8 +433,11 @@ func (client *CapacityReservationsClient) updateCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/ci.yml b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/ci.yml
similarity index 100%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/ci.yml
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/ci.yml
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/client_factory.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/client_factory.go
similarity index 71%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/client_factory.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/client_factory.go
index 3942d46fca2..b8600b614a3 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/client_factory.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/client_factory.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -29,7 +28,7 @@ type ClientFactory struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewClientFactory(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ClientFactory, error) {
-	_, err := arm.NewClient(moduleName+".ClientFactory", moduleVersion, credential, options)
+	_, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -39,247 +38,296 @@ func NewClientFactory(subscriptionID string, credential azcore.TokenCredential,
 	}, nil
 }
 
-func (c *ClientFactory) NewOperationsClient() *OperationsClient {
-	subClient, _ := NewOperationsClient(c.credential, c.options)
+// NewAvailabilitySetsClient creates a new instance of AvailabilitySetsClient.
+func (c *ClientFactory) NewAvailabilitySetsClient() *AvailabilitySetsClient {
+	subClient, _ := NewAvailabilitySetsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewUsageClient() *UsageClient {
-	subClient, _ := NewUsageClient(c.subscriptionID, c.credential, c.options)
+// NewCapacityReservationGroupsClient creates a new instance of CapacityReservationGroupsClient.
+func (c *ClientFactory) NewCapacityReservationGroupsClient() *CapacityReservationGroupsClient {
+	subClient, _ := NewCapacityReservationGroupsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineSizesClient() *VirtualMachineSizesClient {
-	subClient, _ := NewVirtualMachineSizesClient(c.subscriptionID, c.credential, c.options)
+// NewCapacityReservationsClient creates a new instance of CapacityReservationsClient.
+func (c *ClientFactory) NewCapacityReservationsClient() *CapacityReservationsClient {
+	subClient, _ := NewCapacityReservationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineScaleSetsClient() *VirtualMachineScaleSetsClient {
-	subClient, _ := NewVirtualMachineScaleSetsClient(c.subscriptionID, c.credential, c.options)
+// NewCloudServiceOperatingSystemsClient creates a new instance of CloudServiceOperatingSystemsClient.
+func (c *ClientFactory) NewCloudServiceOperatingSystemsClient() *CloudServiceOperatingSystemsClient {
+	subClient, _ := NewCloudServiceOperatingSystemsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineScaleSetExtensionsClient() *VirtualMachineScaleSetExtensionsClient {
-	subClient, _ := NewVirtualMachineScaleSetExtensionsClient(c.subscriptionID, c.credential, c.options)
+// NewCloudServiceRoleInstancesClient creates a new instance of CloudServiceRoleInstancesClient.
+func (c *ClientFactory) NewCloudServiceRoleInstancesClient() *CloudServiceRoleInstancesClient {
+	subClient, _ := NewCloudServiceRoleInstancesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineScaleSetRollingUpgradesClient() *VirtualMachineScaleSetRollingUpgradesClient {
-	subClient, _ := NewVirtualMachineScaleSetRollingUpgradesClient(c.subscriptionID, c.credential, c.options)
+// NewCloudServiceRolesClient creates a new instance of CloudServiceRolesClient.
+func (c *ClientFactory) NewCloudServiceRolesClient() *CloudServiceRolesClient {
+	subClient, _ := NewCloudServiceRolesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineScaleSetVMExtensionsClient() *VirtualMachineScaleSetVMExtensionsClient {
-	subClient, _ := NewVirtualMachineScaleSetVMExtensionsClient(c.subscriptionID, c.credential, c.options)
+// NewCloudServicesClient creates a new instance of CloudServicesClient.
+func (c *ClientFactory) NewCloudServicesClient() *CloudServicesClient {
+	subClient, _ := NewCloudServicesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineScaleSetVMsClient() *VirtualMachineScaleSetVMsClient {
-	subClient, _ := NewVirtualMachineScaleSetVMsClient(c.subscriptionID, c.credential, c.options)
+// NewCloudServicesUpdateDomainClient creates a new instance of CloudServicesUpdateDomainClient.
+func (c *ClientFactory) NewCloudServicesUpdateDomainClient() *CloudServicesUpdateDomainClient {
+	subClient, _ := NewCloudServicesUpdateDomainClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineExtensionsClient() *VirtualMachineExtensionsClient {
-	subClient, _ := NewVirtualMachineExtensionsClient(c.subscriptionID, c.credential, c.options)
+// NewCommunityGalleriesClient creates a new instance of CommunityGalleriesClient.
+func (c *ClientFactory) NewCommunityGalleriesClient() *CommunityGalleriesClient {
+	subClient, _ := NewCommunityGalleriesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachinesClient() *VirtualMachinesClient {
-	subClient, _ := NewVirtualMachinesClient(c.subscriptionID, c.credential, c.options)
+// NewCommunityGalleryImageVersionsClient creates a new instance of CommunityGalleryImageVersionsClient.
+func (c *ClientFactory) NewCommunityGalleryImageVersionsClient() *CommunityGalleryImageVersionsClient {
+	subClient, _ := NewCommunityGalleryImageVersionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineImagesClient() *VirtualMachineImagesClient {
-	subClient, _ := NewVirtualMachineImagesClient(c.subscriptionID, c.credential, c.options)
+// NewCommunityGalleryImagesClient creates a new instance of CommunityGalleryImagesClient.
+func (c *ClientFactory) NewCommunityGalleryImagesClient() *CommunityGalleryImagesClient {
+	subClient, _ := NewCommunityGalleryImagesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineImagesEdgeZoneClient() *VirtualMachineImagesEdgeZoneClient {
-	subClient, _ := NewVirtualMachineImagesEdgeZoneClient(c.subscriptionID, c.credential, c.options)
+// NewDedicatedHostGroupsClient creates a new instance of DedicatedHostGroupsClient.
+func (c *ClientFactory) NewDedicatedHostGroupsClient() *DedicatedHostGroupsClient {
+	subClient, _ := NewDedicatedHostGroupsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineExtensionImagesClient() *VirtualMachineExtensionImagesClient {
-	subClient, _ := NewVirtualMachineExtensionImagesClient(c.subscriptionID, c.credential, c.options)
+// NewDedicatedHostsClient creates a new instance of DedicatedHostsClient.
+func (c *ClientFactory) NewDedicatedHostsClient() *DedicatedHostsClient {
+	subClient, _ := NewDedicatedHostsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewAvailabilitySetsClient() *AvailabilitySetsClient {
-	subClient, _ := NewAvailabilitySetsClient(c.subscriptionID, c.credential, c.options)
+// NewDiskAccessesClient creates a new instance of DiskAccessesClient.
+func (c *ClientFactory) NewDiskAccessesClient() *DiskAccessesClient {
+	subClient, _ := NewDiskAccessesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewProximityPlacementGroupsClient() *ProximityPlacementGroupsClient {
-	subClient, _ := NewProximityPlacementGroupsClient(c.subscriptionID, c.credential, c.options)
+// NewDiskEncryptionSetsClient creates a new instance of DiskEncryptionSetsClient.
+func (c *ClientFactory) NewDiskEncryptionSetsClient() *DiskEncryptionSetsClient {
+	subClient, _ := NewDiskEncryptionSetsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewDedicatedHostGroupsClient() *DedicatedHostGroupsClient {
-	subClient, _ := NewDedicatedHostGroupsClient(c.subscriptionID, c.credential, c.options)
+// NewDiskRestorePointClient creates a new instance of DiskRestorePointClient.
+func (c *ClientFactory) NewDiskRestorePointClient() *DiskRestorePointClient {
+	subClient, _ := NewDiskRestorePointClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewDedicatedHostsClient() *DedicatedHostsClient {
-	subClient, _ := NewDedicatedHostsClient(c.subscriptionID, c.credential, c.options)
+// NewDisksClient creates a new instance of DisksClient.
+func (c *ClientFactory) NewDisksClient() *DisksClient {
+	subClient, _ := NewDisksClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewSSHPublicKeysClient() *SSHPublicKeysClient {
-	subClient, _ := NewSSHPublicKeysClient(c.subscriptionID, c.credential, c.options)
+// NewGalleriesClient creates a new instance of GalleriesClient.
+func (c *ClientFactory) NewGalleriesClient() *GalleriesClient {
+	subClient, _ := NewGalleriesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewImagesClient() *ImagesClient {
-	subClient, _ := NewImagesClient(c.subscriptionID, c.credential, c.options)
+// NewGalleryApplicationVersionsClient creates a new instance of GalleryApplicationVersionsClient.
+func (c *ClientFactory) NewGalleryApplicationVersionsClient() *GalleryApplicationVersionsClient {
+	subClient, _ := NewGalleryApplicationVersionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewRestorePointCollectionsClient() *RestorePointCollectionsClient {
-	subClient, _ := NewRestorePointCollectionsClient(c.subscriptionID, c.credential, c.options)
+// NewGalleryApplicationsClient creates a new instance of GalleryApplicationsClient.
+func (c *ClientFactory) NewGalleryApplicationsClient() *GalleryApplicationsClient {
+	subClient, _ := NewGalleryApplicationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewRestorePointsClient() *RestorePointsClient {
-	subClient, _ := NewRestorePointsClient(c.subscriptionID, c.credential, c.options)
+// NewGalleryImageVersionsClient creates a new instance of GalleryImageVersionsClient.
+func (c *ClientFactory) NewGalleryImageVersionsClient() *GalleryImageVersionsClient {
+	subClient, _ := NewGalleryImageVersionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewCapacityReservationGroupsClient() *CapacityReservationGroupsClient {
-	subClient, _ := NewCapacityReservationGroupsClient(c.subscriptionID, c.credential, c.options)
+// NewGalleryImagesClient creates a new instance of GalleryImagesClient.
+func (c *ClientFactory) NewGalleryImagesClient() *GalleryImagesClient {
+	subClient, _ := NewGalleryImagesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewCapacityReservationsClient() *CapacityReservationsClient {
-	subClient, _ := NewCapacityReservationsClient(c.subscriptionID, c.credential, c.options)
+// NewGallerySharingProfileClient creates a new instance of GallerySharingProfileClient.
+func (c *ClientFactory) NewGallerySharingProfileClient() *GallerySharingProfileClient {
+	subClient, _ := NewGallerySharingProfileClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewLogAnalyticsClient() *LogAnalyticsClient {
-	subClient, _ := NewLogAnalyticsClient(c.subscriptionID, c.credential, c.options)
+// NewImagesClient creates a new instance of ImagesClient.
+func (c *ClientFactory) NewImagesClient() *ImagesClient {
+	subClient, _ := NewImagesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineRunCommandsClient() *VirtualMachineRunCommandsClient {
-	subClient, _ := NewVirtualMachineRunCommandsClient(c.subscriptionID, c.credential, c.options)
+// NewLogAnalyticsClient creates a new instance of LogAnalyticsClient.
+func (c *ClientFactory) NewLogAnalyticsClient() *LogAnalyticsClient {
+	subClient, _ := NewLogAnalyticsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualMachineScaleSetVMRunCommandsClient() *VirtualMachineScaleSetVMRunCommandsClient {
-	subClient, _ := NewVirtualMachineScaleSetVMRunCommandsClient(c.subscriptionID, c.credential, c.options)
+// NewOperationsClient creates a new instance of OperationsClient.
+func (c *ClientFactory) NewOperationsClient() *OperationsClient {
+	subClient, _ := NewOperationsClient(c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewDisksClient() *DisksClient {
-	subClient, _ := NewDisksClient(c.subscriptionID, c.credential, c.options)
+// NewProximityPlacementGroupsClient creates a new instance of ProximityPlacementGroupsClient.
+func (c *ClientFactory) NewProximityPlacementGroupsClient() *ProximityPlacementGroupsClient {
+	subClient, _ := NewProximityPlacementGroupsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewDiskAccessesClient() *DiskAccessesClient {
-	subClient, _ := NewDiskAccessesClient(c.subscriptionID, c.credential, c.options)
+// NewResourceSKUsClient creates a new instance of ResourceSKUsClient.
+func (c *ClientFactory) NewResourceSKUsClient() *ResourceSKUsClient {
+	subClient, _ := NewResourceSKUsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewDiskEncryptionSetsClient() *DiskEncryptionSetsClient {
-	subClient, _ := NewDiskEncryptionSetsClient(c.subscriptionID, c.credential, c.options)
+// NewRestorePointCollectionsClient creates a new instance of RestorePointCollectionsClient.
+func (c *ClientFactory) NewRestorePointCollectionsClient() *RestorePointCollectionsClient {
+	subClient, _ := NewRestorePointCollectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewDiskRestorePointClient() *DiskRestorePointClient {
-	subClient, _ := NewDiskRestorePointClient(c.subscriptionID, c.credential, c.options)
+// NewRestorePointsClient creates a new instance of RestorePointsClient.
+func (c *ClientFactory) NewRestorePointsClient() *RestorePointsClient {
+	subClient, _ := NewRestorePointsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewSnapshotsClient() *SnapshotsClient {
-	subClient, _ := NewSnapshotsClient(c.subscriptionID, c.credential, c.options)
+// NewSSHPublicKeysClient creates a new instance of SSHPublicKeysClient.
+func (c *ClientFactory) NewSSHPublicKeysClient() *SSHPublicKeysClient {
+	subClient, _ := NewSSHPublicKeysClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewResourceSKUsClient() *ResourceSKUsClient {
-	subClient, _ := NewResourceSKUsClient(c.subscriptionID, c.credential, c.options)
+// NewSharedGalleriesClient creates a new instance of SharedGalleriesClient.
+func (c *ClientFactory) NewSharedGalleriesClient() *SharedGalleriesClient {
+	subClient, _ := NewSharedGalleriesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewGalleriesClient() *GalleriesClient {
-	subClient, _ := NewGalleriesClient(c.subscriptionID, c.credential, c.options)
+// NewSharedGalleryImageVersionsClient creates a new instance of SharedGalleryImageVersionsClient.
+func (c *ClientFactory) NewSharedGalleryImageVersionsClient() *SharedGalleryImageVersionsClient {
+	subClient, _ := NewSharedGalleryImageVersionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewGalleryImagesClient() *GalleryImagesClient {
-	subClient, _ := NewGalleryImagesClient(c.subscriptionID, c.credential, c.options)
+// NewSharedGalleryImagesClient creates a new instance of SharedGalleryImagesClient.
+func (c *ClientFactory) NewSharedGalleryImagesClient() *SharedGalleryImagesClient {
+	subClient, _ := NewSharedGalleryImagesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewGalleryImageVersionsClient() *GalleryImageVersionsClient {
-	subClient, _ := NewGalleryImageVersionsClient(c.subscriptionID, c.credential, c.options)
+// NewSnapshotsClient creates a new instance of SnapshotsClient.
+func (c *ClientFactory) NewSnapshotsClient() *SnapshotsClient {
+	subClient, _ := NewSnapshotsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewGalleryApplicationsClient() *GalleryApplicationsClient {
-	subClient, _ := NewGalleryApplicationsClient(c.subscriptionID, c.credential, c.options)
+// NewUsageClient creates a new instance of UsageClient.
+func (c *ClientFactory) NewUsageClient() *UsageClient {
+	subClient, _ := NewUsageClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewGalleryApplicationVersionsClient() *GalleryApplicationVersionsClient {
-	subClient, _ := NewGalleryApplicationVersionsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineExtensionImagesClient creates a new instance of VirtualMachineExtensionImagesClient.
+func (c *ClientFactory) NewVirtualMachineExtensionImagesClient() *VirtualMachineExtensionImagesClient {
+	subClient, _ := NewVirtualMachineExtensionImagesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewGallerySharingProfileClient() *GallerySharingProfileClient {
-	subClient, _ := NewGallerySharingProfileClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineExtensionsClient creates a new instance of VirtualMachineExtensionsClient.
+func (c *ClientFactory) NewVirtualMachineExtensionsClient() *VirtualMachineExtensionsClient {
+	subClient, _ := NewVirtualMachineExtensionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewSharedGalleriesClient() *SharedGalleriesClient {
-	subClient, _ := NewSharedGalleriesClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineImagesClient creates a new instance of VirtualMachineImagesClient.
+func (c *ClientFactory) NewVirtualMachineImagesClient() *VirtualMachineImagesClient {
+	subClient, _ := NewVirtualMachineImagesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewSharedGalleryImagesClient() *SharedGalleryImagesClient {
-	subClient, _ := NewSharedGalleryImagesClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineImagesEdgeZoneClient creates a new instance of VirtualMachineImagesEdgeZoneClient.
+func (c *ClientFactory) NewVirtualMachineImagesEdgeZoneClient() *VirtualMachineImagesEdgeZoneClient {
+	subClient, _ := NewVirtualMachineImagesEdgeZoneClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewSharedGalleryImageVersionsClient() *SharedGalleryImageVersionsClient {
-	subClient, _ := NewSharedGalleryImageVersionsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineRunCommandsClient creates a new instance of VirtualMachineRunCommandsClient.
+func (c *ClientFactory) NewVirtualMachineRunCommandsClient() *VirtualMachineRunCommandsClient {
+	subClient, _ := NewVirtualMachineRunCommandsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewCommunityGalleriesClient() *CommunityGalleriesClient {
-	subClient, _ := NewCommunityGalleriesClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineScaleSetExtensionsClient creates a new instance of VirtualMachineScaleSetExtensionsClient.
+func (c *ClientFactory) NewVirtualMachineScaleSetExtensionsClient() *VirtualMachineScaleSetExtensionsClient {
+	subClient, _ := NewVirtualMachineScaleSetExtensionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewCommunityGalleryImagesClient() *CommunityGalleryImagesClient {
-	subClient, _ := NewCommunityGalleryImagesClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineScaleSetRollingUpgradesClient creates a new instance of VirtualMachineScaleSetRollingUpgradesClient.
+func (c *ClientFactory) NewVirtualMachineScaleSetRollingUpgradesClient() *VirtualMachineScaleSetRollingUpgradesClient {
+	subClient, _ := NewVirtualMachineScaleSetRollingUpgradesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewCommunityGalleryImageVersionsClient() *CommunityGalleryImageVersionsClient {
-	subClient, _ := NewCommunityGalleryImageVersionsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineScaleSetVMExtensionsClient creates a new instance of VirtualMachineScaleSetVMExtensionsClient.
+func (c *ClientFactory) NewVirtualMachineScaleSetVMExtensionsClient() *VirtualMachineScaleSetVMExtensionsClient {
+	subClient, _ := NewVirtualMachineScaleSetVMExtensionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewCloudServiceRoleInstancesClient() *CloudServiceRoleInstancesClient {
-	subClient, _ := NewCloudServiceRoleInstancesClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineScaleSetVMRunCommandsClient creates a new instance of VirtualMachineScaleSetVMRunCommandsClient.
+func (c *ClientFactory) NewVirtualMachineScaleSetVMRunCommandsClient() *VirtualMachineScaleSetVMRunCommandsClient {
+	subClient, _ := NewVirtualMachineScaleSetVMRunCommandsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewCloudServiceRolesClient() *CloudServiceRolesClient {
-	subClient, _ := NewCloudServiceRolesClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineScaleSetVMsClient creates a new instance of VirtualMachineScaleSetVMsClient.
+func (c *ClientFactory) NewVirtualMachineScaleSetVMsClient() *VirtualMachineScaleSetVMsClient {
+	subClient, _ := NewVirtualMachineScaleSetVMsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewCloudServicesClient() *CloudServicesClient {
-	subClient, _ := NewCloudServicesClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineScaleSetsClient creates a new instance of VirtualMachineScaleSetsClient.
+func (c *ClientFactory) NewVirtualMachineScaleSetsClient() *VirtualMachineScaleSetsClient {
+	subClient, _ := NewVirtualMachineScaleSetsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewCloudServicesUpdateDomainClient() *CloudServicesUpdateDomainClient {
-	subClient, _ := NewCloudServicesUpdateDomainClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachineSizesClient creates a new instance of VirtualMachineSizesClient.
+func (c *ClientFactory) NewVirtualMachineSizesClient() *VirtualMachineSizesClient {
+	subClient, _ := NewVirtualMachineSizesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewCloudServiceOperatingSystemsClient() *CloudServiceOperatingSystemsClient {
-	subClient, _ := NewCloudServiceOperatingSystemsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualMachinesClient creates a new instance of VirtualMachinesClient.
+func (c *ClientFactory) NewVirtualMachinesClient() *VirtualMachinesClient {
+	subClient, _ := NewVirtualMachinesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudserviceoperatingsystems_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceoperatingsystems_client.go
similarity index 86%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudserviceoperatingsystems_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceoperatingsystems_client.go
index 6f3f88dae2d..bd0cda902fb 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudserviceoperatingsystems_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceoperatingsystems_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type CloudServiceOperatingSystemsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewCloudServiceOperatingSystemsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*CloudServiceOperatingSystemsClient, error) {
-	cl, err := arm.NewClient(moduleName+".CloudServiceOperatingSystemsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -55,18 +54,25 @@ func NewCloudServiceOperatingSystemsClient(subscriptionID string, credential azc
 //   - options - CloudServiceOperatingSystemsClientGetOSFamilyOptions contains the optional parameters for the CloudServiceOperatingSystemsClient.GetOSFamily
 //     method.
 func (client *CloudServiceOperatingSystemsClient) GetOSFamily(ctx context.Context, location string, osFamilyName string, options *CloudServiceOperatingSystemsClientGetOSFamilyOptions) (CloudServiceOperatingSystemsClientGetOSFamilyResponse, error) {
+	var err error
+	const operationName = "CloudServiceOperatingSystemsClient.GetOSFamily"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getOSFamilyCreateRequest(ctx, location, osFamilyName, options)
 	if err != nil {
 		return CloudServiceOperatingSystemsClientGetOSFamilyResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CloudServiceOperatingSystemsClientGetOSFamilyResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CloudServiceOperatingSystemsClientGetOSFamilyResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CloudServiceOperatingSystemsClientGetOSFamilyResponse{}, err
 	}
-	return client.getOSFamilyHandleResponse(resp)
+	resp, err := client.getOSFamilyHandleResponse(httpResp)
+	return resp, err
 }
 
 // getOSFamilyCreateRequest creates the GetOSFamily request.
@@ -114,18 +120,25 @@ func (client *CloudServiceOperatingSystemsClient) getOSFamilyHandleResponse(resp
 //   - options - CloudServiceOperatingSystemsClientGetOSVersionOptions contains the optional parameters for the CloudServiceOperatingSystemsClient.GetOSVersion
 //     method.
 func (client *CloudServiceOperatingSystemsClient) GetOSVersion(ctx context.Context, location string, osVersionName string, options *CloudServiceOperatingSystemsClientGetOSVersionOptions) (CloudServiceOperatingSystemsClientGetOSVersionResponse, error) {
+	var err error
+	const operationName = "CloudServiceOperatingSystemsClient.GetOSVersion"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getOSVersionCreateRequest(ctx, location, osVersionName, options)
 	if err != nil {
 		return CloudServiceOperatingSystemsClientGetOSVersionResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CloudServiceOperatingSystemsClientGetOSVersionResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CloudServiceOperatingSystemsClientGetOSVersionResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CloudServiceOperatingSystemsClientGetOSVersionResponse{}, err
 	}
-	return client.getOSVersionHandleResponse(resp)
+	resp, err := client.getOSVersionHandleResponse(httpResp)
+	return resp, err
 }
 
 // getOSVersionCreateRequest creates the GetOSVersion request.
@@ -177,25 +190,20 @@ func (client *CloudServiceOperatingSystemsClient) NewListOSFamiliesPager(locatio
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CloudServiceOperatingSystemsClientListOSFamiliesResponse) (CloudServiceOperatingSystemsClientListOSFamiliesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listOSFamiliesCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return CloudServiceOperatingSystemsClientListOSFamiliesResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CloudServiceOperatingSystemsClient.NewListOSFamiliesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listOSFamiliesCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return CloudServiceOperatingSystemsClientListOSFamiliesResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CloudServiceOperatingSystemsClientListOSFamiliesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listOSFamiliesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -244,25 +252,20 @@ func (client *CloudServiceOperatingSystemsClient) NewListOSVersionsPager(locatio
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CloudServiceOperatingSystemsClientListOSVersionsResponse) (CloudServiceOperatingSystemsClientListOSVersionsResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listOSVersionsCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CloudServiceOperatingSystemsClient.NewListOSVersionsPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listOSVersionsCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return CloudServiceOperatingSystemsClientListOSVersionsResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return CloudServiceOperatingSystemsClientListOSVersionsResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CloudServiceOperatingSystemsClientListOSVersionsResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listOSVersionsHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudserviceroleinstances_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceroleinstances_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudserviceroleinstances_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceroleinstances_client.go
index 603191776b1..b845301668a 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudserviceroleinstances_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceroleinstances_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type CloudServiceRoleInstancesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewCloudServiceRoleInstancesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*CloudServiceRoleInstancesClient, error) {
-	cl, err := arm.NewClient(moduleName+".CloudServiceRoleInstancesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -60,9 +59,14 @@ func (client *CloudServiceRoleInstancesClient) BeginDelete(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServiceRoleInstancesClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServiceRoleInstancesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServiceRoleInstancesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServiceRoleInstancesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -71,18 +75,24 @@ func (client *CloudServiceRoleInstancesClient) BeginDelete(ctx context.Context,
 //
 // Generated from API version 2022-09-04
 func (client *CloudServiceRoleInstancesClient) deleteOperation(ctx context.Context, roleInstanceName string, resourceGroupName string, cloudServiceName string, options *CloudServiceRoleInstancesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServiceRoleInstancesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, roleInstanceName, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -125,18 +135,25 @@ func (client *CloudServiceRoleInstancesClient) deleteCreateRequest(ctx context.C
 //   - options - CloudServiceRoleInstancesClientGetOptions contains the optional parameters for the CloudServiceRoleInstancesClient.Get
 //     method.
 func (client *CloudServiceRoleInstancesClient) Get(ctx context.Context, roleInstanceName string, resourceGroupName string, cloudServiceName string, options *CloudServiceRoleInstancesClientGetOptions) (CloudServiceRoleInstancesClientGetResponse, error) {
+	var err error
+	const operationName = "CloudServiceRoleInstancesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, roleInstanceName, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return CloudServiceRoleInstancesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CloudServiceRoleInstancesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CloudServiceRoleInstancesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CloudServiceRoleInstancesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -191,18 +208,25 @@ func (client *CloudServiceRoleInstancesClient) getHandleResponse(resp *http.Resp
 //   - options - CloudServiceRoleInstancesClientGetInstanceViewOptions contains the optional parameters for the CloudServiceRoleInstancesClient.GetInstanceView
 //     method.
 func (client *CloudServiceRoleInstancesClient) GetInstanceView(ctx context.Context, roleInstanceName string, resourceGroupName string, cloudServiceName string, options *CloudServiceRoleInstancesClientGetInstanceViewOptions) (CloudServiceRoleInstancesClientGetInstanceViewResponse, error) {
+	var err error
+	const operationName = "CloudServiceRoleInstancesClient.GetInstanceView"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getInstanceViewCreateRequest(ctx, roleInstanceName, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return CloudServiceRoleInstancesClientGetInstanceViewResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CloudServiceRoleInstancesClientGetInstanceViewResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CloudServiceRoleInstancesClientGetInstanceViewResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CloudServiceRoleInstancesClientGetInstanceViewResponse{}, err
 	}
-	return client.getInstanceViewHandleResponse(resp)
+	resp, err := client.getInstanceViewHandleResponse(httpResp)
+	return resp, err
 }
 
 // getInstanceViewCreateRequest creates the GetInstanceView request.
@@ -254,18 +278,24 @@ func (client *CloudServiceRoleInstancesClient) getInstanceViewHandleResponse(res
 //   - options - CloudServiceRoleInstancesClientGetRemoteDesktopFileOptions contains the optional parameters for the CloudServiceRoleInstancesClient.GetRemoteDesktopFile
 //     method.
 func (client *CloudServiceRoleInstancesClient) GetRemoteDesktopFile(ctx context.Context, roleInstanceName string, resourceGroupName string, cloudServiceName string, options *CloudServiceRoleInstancesClientGetRemoteDesktopFileOptions) (CloudServiceRoleInstancesClientGetRemoteDesktopFileResponse, error) {
+	var err error
+	const operationName = "CloudServiceRoleInstancesClient.GetRemoteDesktopFile"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getRemoteDesktopFileCreateRequest(ctx, roleInstanceName, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return CloudServiceRoleInstancesClientGetRemoteDesktopFileResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CloudServiceRoleInstancesClientGetRemoteDesktopFileResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CloudServiceRoleInstancesClientGetRemoteDesktopFileResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CloudServiceRoleInstancesClientGetRemoteDesktopFileResponse{}, err
 	}
-	return CloudServiceRoleInstancesClientGetRemoteDesktopFileResponse{Body: resp.Body}, nil
+	return CloudServiceRoleInstancesClientGetRemoteDesktopFileResponse{Body: httpResp.Body}, nil
 }
 
 // getRemoteDesktopFileCreateRequest creates the GetRemoteDesktopFile request.
@@ -313,25 +343,20 @@ func (client *CloudServiceRoleInstancesClient) NewListPager(resourceGroupName st
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CloudServiceRoleInstancesClientListResponse) (CloudServiceRoleInstancesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CloudServiceRoleInstancesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
+			}, nil)
 			if err != nil {
 				return CloudServiceRoleInstancesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return CloudServiceRoleInstancesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CloudServiceRoleInstancesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -390,9 +415,14 @@ func (client *CloudServiceRoleInstancesClient) BeginRebuild(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServiceRoleInstancesClientRebuildResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServiceRoleInstancesClientRebuildResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServiceRoleInstancesClientRebuildResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServiceRoleInstancesClientRebuildResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -403,18 +433,24 @@ func (client *CloudServiceRoleInstancesClient) BeginRebuild(ctx context.Context,
 //
 // Generated from API version 2022-09-04
 func (client *CloudServiceRoleInstancesClient) rebuild(ctx context.Context, roleInstanceName string, resourceGroupName string, cloudServiceName string, options *CloudServiceRoleInstancesClientBeginRebuildOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServiceRoleInstancesClient.BeginRebuild"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.rebuildCreateRequest(ctx, roleInstanceName, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // rebuildCreateRequest creates the Rebuild request.
@@ -463,9 +499,14 @@ func (client *CloudServiceRoleInstancesClient) BeginReimage(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServiceRoleInstancesClientReimageResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServiceRoleInstancesClientReimageResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServiceRoleInstancesClientReimageResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServiceRoleInstancesClientReimageResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -475,18 +516,24 @@ func (client *CloudServiceRoleInstancesClient) BeginReimage(ctx context.Context,
 //
 // Generated from API version 2022-09-04
 func (client *CloudServiceRoleInstancesClient) reimage(ctx context.Context, roleInstanceName string, resourceGroupName string, cloudServiceName string, options *CloudServiceRoleInstancesClientBeginReimageOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServiceRoleInstancesClient.BeginReimage"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.reimageCreateRequest(ctx, roleInstanceName, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // reimageCreateRequest creates the Reimage request.
@@ -534,9 +581,14 @@ func (client *CloudServiceRoleInstancesClient) BeginRestart(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServiceRoleInstancesClientRestartResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServiceRoleInstancesClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServiceRoleInstancesClientRestartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServiceRoleInstancesClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -545,18 +597,24 @@ func (client *CloudServiceRoleInstancesClient) BeginRestart(ctx context.Context,
 //
 // Generated from API version 2022-09-04
 func (client *CloudServiceRoleInstancesClient) restart(ctx context.Context, roleInstanceName string, resourceGroupName string, cloudServiceName string, options *CloudServiceRoleInstancesClientBeginRestartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServiceRoleInstancesClient.BeginRestart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.restartCreateRequest(ctx, roleInstanceName, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // restartCreateRequest creates the Restart request.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudserviceroles_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceroles_client.go
similarity index 86%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudserviceroles_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceroles_client.go
index 926dd8d21b2..a4572cf143d 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudserviceroles_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceroles_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type CloudServiceRolesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewCloudServiceRolesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*CloudServiceRolesClient, error) {
-	cl, err := arm.NewClient(moduleName+".CloudServiceRolesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -54,18 +53,25 @@ func NewCloudServiceRolesClient(subscriptionID string, credential azcore.TokenCr
 //   - cloudServiceName - Name of the cloud service.
 //   - options - CloudServiceRolesClientGetOptions contains the optional parameters for the CloudServiceRolesClient.Get method.
 func (client *CloudServiceRolesClient) Get(ctx context.Context, roleName string, resourceGroupName string, cloudServiceName string, options *CloudServiceRolesClientGetOptions) (CloudServiceRolesClientGetResponse, error) {
+	var err error
+	const operationName = "CloudServiceRolesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, roleName, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return CloudServiceRolesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CloudServiceRolesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CloudServiceRolesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CloudServiceRolesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -121,25 +127,20 @@ func (client *CloudServiceRolesClient) NewListPager(resourceGroupName string, cl
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CloudServiceRolesClientListResponse) (CloudServiceRolesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CloudServiceRolesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
+			}, nil)
 			if err != nil {
 				return CloudServiceRolesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return CloudServiceRolesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CloudServiceRolesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudservices_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudservices_client.go
similarity index 77%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudservices_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudservices_client.go
index 656d8112ace..283d3a6feb7 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudservices_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudservices_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type CloudServicesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewCloudServicesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*CloudServicesClient, error) {
-	cl, err := arm.NewClient(moduleName+".CloudServicesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -61,9 +60,14 @@ func (client *CloudServicesClient) BeginCreateOrUpdate(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServicesClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServicesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServicesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServicesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -72,18 +76,24 @@ func (client *CloudServicesClient) BeginCreateOrUpdate(ctx context.Context, reso
 //
 // Generated from API version 2022-09-04
 func (client *CloudServicesClient) createOrUpdate(ctx context.Context, resourceGroupName string, cloudServiceName string, parameters CloudService, options *CloudServicesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServicesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, cloudServiceName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -109,7 +119,10 @@ func (client *CloudServicesClient) createOrUpdateCreateRequest(ctx context.Conte
 	reqQP.Set("api-version", "2022-09-04")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a cloud service.
@@ -126,9 +139,14 @@ func (client *CloudServicesClient) BeginDelete(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServicesClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServicesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServicesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServicesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -137,18 +155,24 @@ func (client *CloudServicesClient) BeginDelete(ctx context.Context, resourceGrou
 //
 // Generated from API version 2022-09-04
 func (client *CloudServicesClient) deleteOperation(ctx context.Context, resourceGroupName string, cloudServiceName string, options *CloudServicesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServicesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -191,9 +215,14 @@ func (client *CloudServicesClient) BeginDeleteInstances(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServicesClientDeleteInstancesResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServicesClientDeleteInstancesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServicesClientDeleteInstancesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServicesClientDeleteInstancesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -202,18 +231,24 @@ func (client *CloudServicesClient) BeginDeleteInstances(ctx context.Context, res
 //
 // Generated from API version 2022-09-04
 func (client *CloudServicesClient) deleteInstances(ctx context.Context, resourceGroupName string, cloudServiceName string, options *CloudServicesClientBeginDeleteInstancesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServicesClient.BeginDeleteInstances"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteInstancesCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteInstancesCreateRequest creates the DeleteInstances request.
@@ -240,7 +275,10 @@ func (client *CloudServicesClient) deleteInstancesCreateRequest(ctx context.Cont
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.Parameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.Parameters)
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -253,18 +291,25 @@ func (client *CloudServicesClient) deleteInstancesCreateRequest(ctx context.Cont
 //   - cloudServiceName - Name of the cloud service.
 //   - options - CloudServicesClientGetOptions contains the optional parameters for the CloudServicesClient.Get method.
 func (client *CloudServicesClient) Get(ctx context.Context, resourceGroupName string, cloudServiceName string, options *CloudServicesClientGetOptions) (CloudServicesClientGetResponse, error) {
+	var err error
+	const operationName = "CloudServicesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return CloudServicesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CloudServicesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CloudServicesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CloudServicesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -311,18 +356,25 @@ func (client *CloudServicesClient) getHandleResponse(resp *http.Response) (Cloud
 //   - options - CloudServicesClientGetInstanceViewOptions contains the optional parameters for the CloudServicesClient.GetInstanceView
 //     method.
 func (client *CloudServicesClient) GetInstanceView(ctx context.Context, resourceGroupName string, cloudServiceName string, options *CloudServicesClientGetInstanceViewOptions) (CloudServicesClientGetInstanceViewResponse, error) {
+	var err error
+	const operationName = "CloudServicesClient.GetInstanceView"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getInstanceViewCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return CloudServicesClientGetInstanceViewResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CloudServicesClientGetInstanceViewResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CloudServicesClientGetInstanceViewResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CloudServicesClientGetInstanceViewResponse{}, err
 	}
-	return client.getInstanceViewHandleResponse(resp)
+	resp, err := client.getInstanceViewHandleResponse(httpResp)
+	return resp, err
 }
 
 // getInstanceViewCreateRequest creates the GetInstanceView request.
@@ -372,25 +424,20 @@ func (client *CloudServicesClient) NewListPager(resourceGroupName string, option
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CloudServicesClientListResponse) (CloudServicesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return CloudServicesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CloudServicesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return CloudServicesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CloudServicesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -438,25 +485,20 @@ func (client *CloudServicesClient) NewListAllPager(options *CloudServicesClientL
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CloudServicesClientListAllResponse) (CloudServicesClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return CloudServicesClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CloudServicesClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return CloudServicesClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CloudServicesClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -502,9 +544,14 @@ func (client *CloudServicesClient) BeginPowerOff(ctx context.Context, resourceGr
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServicesClientPowerOffResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServicesClientPowerOffResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServicesClientPowerOffResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServicesClientPowerOffResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -513,18 +560,24 @@ func (client *CloudServicesClient) BeginPowerOff(ctx context.Context, resourceGr
 //
 // Generated from API version 2022-09-04
 func (client *CloudServicesClient) powerOff(ctx context.Context, resourceGroupName string, cloudServiceName string, options *CloudServicesClientBeginPowerOffOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServicesClient.BeginPowerOff"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.powerOffCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // powerOffCreateRequest creates the PowerOff request.
@@ -569,9 +622,14 @@ func (client *CloudServicesClient) BeginRebuild(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServicesClientRebuildResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServicesClientRebuildResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServicesClientRebuildResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServicesClientRebuildResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -582,18 +640,24 @@ func (client *CloudServicesClient) BeginRebuild(ctx context.Context, resourceGro
 //
 // Generated from API version 2022-09-04
 func (client *CloudServicesClient) rebuild(ctx context.Context, resourceGroupName string, cloudServiceName string, options *CloudServicesClientBeginRebuildOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServicesClient.BeginRebuild"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.rebuildCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // rebuildCreateRequest creates the Rebuild request.
@@ -620,7 +684,10 @@ func (client *CloudServicesClient) rebuildCreateRequest(ctx context.Context, res
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.Parameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.Parameters)
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -639,9 +706,14 @@ func (client *CloudServicesClient) BeginReimage(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServicesClientReimageResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServicesClientReimageResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServicesClientReimageResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServicesClientReimageResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -650,18 +722,24 @@ func (client *CloudServicesClient) BeginReimage(ctx context.Context, resourceGro
 //
 // Generated from API version 2022-09-04
 func (client *CloudServicesClient) reimage(ctx context.Context, resourceGroupName string, cloudServiceName string, options *CloudServicesClientBeginReimageOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServicesClient.BeginReimage"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.reimageCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // reimageCreateRequest creates the Reimage request.
@@ -688,7 +766,10 @@ func (client *CloudServicesClient) reimageCreateRequest(ctx context.Context, res
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.Parameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.Parameters)
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -707,9 +788,14 @@ func (client *CloudServicesClient) BeginRestart(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServicesClientRestartResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServicesClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServicesClientRestartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServicesClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -718,18 +804,24 @@ func (client *CloudServicesClient) BeginRestart(ctx context.Context, resourceGro
 //
 // Generated from API version 2022-09-04
 func (client *CloudServicesClient) restart(ctx context.Context, resourceGroupName string, cloudServiceName string, options *CloudServicesClientBeginRestartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServicesClient.BeginRestart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.restartCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // restartCreateRequest creates the Restart request.
@@ -756,7 +848,10 @@ func (client *CloudServicesClient) restartCreateRequest(ctx context.Context, res
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.Parameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.Parameters)
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -775,9 +870,14 @@ func (client *CloudServicesClient) BeginStart(ctx context.Context, resourceGroup
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServicesClientStartResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServicesClientStartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServicesClientStartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServicesClientStartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -786,18 +886,24 @@ func (client *CloudServicesClient) BeginStart(ctx context.Context, resourceGroup
 //
 // Generated from API version 2022-09-04
 func (client *CloudServicesClient) start(ctx context.Context, resourceGroupName string, cloudServiceName string, options *CloudServicesClientBeginStartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServicesClient.BeginStart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startCreateRequest creates the Start request.
@@ -841,9 +947,14 @@ func (client *CloudServicesClient) BeginUpdate(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServicesClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServicesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServicesClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServicesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -852,18 +963,24 @@ func (client *CloudServicesClient) BeginUpdate(ctx context.Context, resourceGrou
 //
 // Generated from API version 2022-09-04
 func (client *CloudServicesClient) update(ctx context.Context, resourceGroupName string, cloudServiceName string, parameters CloudServiceUpdate, options *CloudServicesClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServicesClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, cloudServiceName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -889,5 +1006,8 @@ func (client *CloudServicesClient) updateCreateRequest(ctx context.Context, reso
 	reqQP.Set("api-version", "2022-09-04")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudservicesupdatedomain_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudservicesupdatedomain_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudservicesupdatedomain_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudservicesupdatedomain_client.go
index 32f10ba85fd..a4bd1e7b126 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/cloudservicesupdatedomain_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudservicesupdatedomain_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -35,7 +34,7 @@ type CloudServicesUpdateDomainClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewCloudServicesUpdateDomainClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*CloudServicesUpdateDomainClient, error) {
-	cl, err := arm.NewClient(moduleName+".CloudServicesUpdateDomainClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -58,18 +57,25 @@ func NewCloudServicesUpdateDomainClient(subscriptionID string, credential azcore
 //   - options - CloudServicesUpdateDomainClientGetUpdateDomainOptions contains the optional parameters for the CloudServicesUpdateDomainClient.GetUpdateDomain
 //     method.
 func (client *CloudServicesUpdateDomainClient) GetUpdateDomain(ctx context.Context, resourceGroupName string, cloudServiceName string, updateDomain int32, options *CloudServicesUpdateDomainClientGetUpdateDomainOptions) (CloudServicesUpdateDomainClientGetUpdateDomainResponse, error) {
+	var err error
+	const operationName = "CloudServicesUpdateDomainClient.GetUpdateDomain"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getUpdateDomainCreateRequest(ctx, resourceGroupName, cloudServiceName, updateDomain, options)
 	if err != nil {
 		return CloudServicesUpdateDomainClientGetUpdateDomainResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CloudServicesUpdateDomainClientGetUpdateDomainResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CloudServicesUpdateDomainClientGetUpdateDomainResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CloudServicesUpdateDomainClientGetUpdateDomainResponse{}, err
 	}
-	return client.getUpdateDomainHandleResponse(resp)
+	resp, err := client.getUpdateDomainHandleResponse(httpResp)
+	return resp, err
 }
 
 // getUpdateDomainCreateRequest creates the GetUpdateDomain request.
@@ -121,25 +127,20 @@ func (client *CloudServicesUpdateDomainClient) NewListUpdateDomainsPager(resourc
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CloudServicesUpdateDomainClientListUpdateDomainsResponse) (CloudServicesUpdateDomainClientListUpdateDomainsResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listUpdateDomainsCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CloudServicesUpdateDomainClient.NewListUpdateDomainsPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listUpdateDomainsCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
+			}, nil)
 			if err != nil {
 				return CloudServicesUpdateDomainClientListUpdateDomainsResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return CloudServicesUpdateDomainClientListUpdateDomainsResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CloudServicesUpdateDomainClientListUpdateDomainsResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listUpdateDomainsHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -195,9 +196,14 @@ func (client *CloudServicesUpdateDomainClient) BeginWalkUpdateDomain(ctx context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[CloudServicesUpdateDomainClientWalkUpdateDomainResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CloudServicesUpdateDomainClientWalkUpdateDomainResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CloudServicesUpdateDomainClientWalkUpdateDomainResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CloudServicesUpdateDomainClientWalkUpdateDomainResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -206,18 +212,24 @@ func (client *CloudServicesUpdateDomainClient) BeginWalkUpdateDomain(ctx context
 //
 // Generated from API version 2022-09-04
 func (client *CloudServicesUpdateDomainClient) walkUpdateDomain(ctx context.Context, resourceGroupName string, cloudServiceName string, updateDomain int32, parameters UpdateDomain, options *CloudServicesUpdateDomainClientBeginWalkUpdateDomainOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CloudServicesUpdateDomainClient.BeginWalkUpdateDomain"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.walkUpdateDomainCreateRequest(ctx, resourceGroupName, cloudServiceName, updateDomain, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // walkUpdateDomainCreateRequest creates the WalkUpdateDomain request.
@@ -244,5 +256,8 @@ func (client *CloudServicesUpdateDomainClient) walkUpdateDomainCreateRequest(ctx
 	reqQP.Set("api-version", "2022-09-04")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/communitygalleries_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleries_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/communitygalleries_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleries_client.go
index 4c0a55f739b..2bfc798f355 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/communitygalleries_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleries_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type CommunityGalleriesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewCommunityGalleriesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*CommunityGalleriesClient, error) {
-	cl, err := arm.NewClient(moduleName+".CommunityGalleriesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,23 +47,30 @@ func NewCommunityGalleriesClient(subscriptionID string, credential azcore.TokenC
 // Get - Get a community gallery by gallery public name.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - location - Resource location.
 //   - publicGalleryName - The public name of the community gallery.
 //   - options - CommunityGalleriesClientGetOptions contains the optional parameters for the CommunityGalleriesClient.Get method.
 func (client *CommunityGalleriesClient) Get(ctx context.Context, location string, publicGalleryName string, options *CommunityGalleriesClientGetOptions) (CommunityGalleriesClientGetResponse, error) {
+	var err error
+	const operationName = "CommunityGalleriesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, location, publicGalleryName, options)
 	if err != nil {
 		return CommunityGalleriesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CommunityGalleriesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CommunityGalleriesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CommunityGalleriesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -87,7 +93,7 @@ func (client *CommunityGalleriesClient) getCreateRequest(ctx context.Context, lo
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/communitygalleryimages_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleryimages_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/communitygalleryimages_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleryimages_client.go
index 23b341df208..25b118f072a 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/communitygalleryimages_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleryimages_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type CommunityGalleryImagesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewCommunityGalleryImagesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*CommunityGalleryImagesClient, error) {
-	cl, err := arm.NewClient(moduleName+".CommunityGalleryImagesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewCommunityGalleryImagesClient(subscriptionID string, credential azcore.To
 // Get - Get a community gallery image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - location - Resource location.
 //   - publicGalleryName - The public name of the community gallery.
 //   - galleryImageName - The name of the community gallery image definition.
 //   - options - CommunityGalleryImagesClientGetOptions contains the optional parameters for the CommunityGalleryImagesClient.Get
 //     method.
 func (client *CommunityGalleryImagesClient) Get(ctx context.Context, location string, publicGalleryName string, galleryImageName string, options *CommunityGalleryImagesClientGetOptions) (CommunityGalleryImagesClientGetResponse, error) {
+	var err error
+	const operationName = "CommunityGalleryImagesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, location, publicGalleryName, galleryImageName, options)
 	if err != nil {
 		return CommunityGalleryImagesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CommunityGalleryImagesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CommunityGalleryImagesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CommunityGalleryImagesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -93,7 +99,7 @@ func (client *CommunityGalleryImagesClient) getCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -110,7 +116,7 @@ func (client *CommunityGalleryImagesClient) getHandleResponse(resp *http.Respons
 
 // NewListPager - List community gallery images inside a gallery.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - location - Resource location.
 //   - publicGalleryName - The public name of the community gallery.
 //   - options - CommunityGalleryImagesClientListOptions contains the optional parameters for the CommunityGalleryImagesClient.NewListPager
@@ -121,25 +127,20 @@ func (client *CommunityGalleryImagesClient) NewListPager(location string, public
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CommunityGalleryImagesClientListResponse) (CommunityGalleryImagesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, publicGalleryName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CommunityGalleryImagesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, publicGalleryName, options)
+			}, nil)
 			if err != nil {
 				return CommunityGalleryImagesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return CommunityGalleryImagesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CommunityGalleryImagesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -163,7 +164,7 @@ func (client *CommunityGalleryImagesClient) listCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/communitygalleryimageversions_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleryimageversions_client.go
similarity index 86%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/communitygalleryimageversions_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleryimageversions_client.go
index a05c5d729ce..5e382b36d1d 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/communitygalleryimageversions_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleryimageversions_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type CommunityGalleryImageVersionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewCommunityGalleryImageVersionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*CommunityGalleryImageVersionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".CommunityGalleryImageVersionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewCommunityGalleryImageVersionsClient(subscriptionID string, credential az
 // Get - Get a community gallery image version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - location - Resource location.
 //   - publicGalleryName - The public name of the community gallery.
 //   - galleryImageName - The name of the community gallery image definition.
@@ -58,18 +57,25 @@ func NewCommunityGalleryImageVersionsClient(subscriptionID string, credential az
 //   - options - CommunityGalleryImageVersionsClientGetOptions contains the optional parameters for the CommunityGalleryImageVersionsClient.Get
 //     method.
 func (client *CommunityGalleryImageVersionsClient) Get(ctx context.Context, location string, publicGalleryName string, galleryImageName string, galleryImageVersionName string, options *CommunityGalleryImageVersionsClientGetOptions) (CommunityGalleryImageVersionsClientGetResponse, error) {
+	var err error
+	const operationName = "CommunityGalleryImageVersionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, location, publicGalleryName, galleryImageName, galleryImageVersionName, options)
 	if err != nil {
 		return CommunityGalleryImageVersionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CommunityGalleryImageVersionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CommunityGalleryImageVersionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CommunityGalleryImageVersionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -100,7 +106,7 @@ func (client *CommunityGalleryImageVersionsClient) getCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -117,7 +123,7 @@ func (client *CommunityGalleryImageVersionsClient) getHandleResponse(resp *http.
 
 // NewListPager - List community gallery image versions inside an image.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - location - Resource location.
 //   - publicGalleryName - The public name of the community gallery.
 //   - galleryImageName - The name of the community gallery image definition.
@@ -129,25 +135,20 @@ func (client *CommunityGalleryImageVersionsClient) NewListPager(location string,
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CommunityGalleryImageVersionsClientListResponse) (CommunityGalleryImageVersionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, publicGalleryName, galleryImageName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CommunityGalleryImageVersionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, publicGalleryName, galleryImageName, options)
+			}, nil)
 			if err != nil {
 				return CommunityGalleryImageVersionsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return CommunityGalleryImageVersionsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CommunityGalleryImageVersionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -175,7 +176,7 @@ func (client *CommunityGalleryImageVersionsClient) listCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/constants.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/constants.go
similarity index 88%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/constants.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/constants.go
index 93029435769..d635d4f51f7 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/constants.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/constants.go
@@ -3,15 +3,14 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
 const (
-	moduleName    = "armcompute"
-	moduleVersion = "v4.2.1"
+	moduleName    = "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute"
+	moduleVersion = "v5.4.0"
 )
 
 type AccessLevel string
@@ -118,12 +117,8 @@ func PossibleAvailabilitySetSKUTypesValues() []AvailabilitySetSKUTypes {
 	}
 }
 
-// CachingTypes - Specifies the caching requirements.
-// Possible values are:
-// None
-// ReadOnly
-// ReadWrite
-// Default: None for Standard storage. ReadOnly for Premium storage
+// CachingTypes - Specifies the caching requirements. Possible values are: None, ReadOnly, ReadWrite. The default values are:
+// None for Standard storage. ReadOnly for Premium storage
 type CachingTypes string
 
 const (
@@ -219,6 +214,7 @@ const (
 	ConfidentialVMEncryptionTypeEncryptedVMGuestStateOnlyWithPmk ConfidentialVMEncryptionType = "EncryptedVMGuestStateOnlyWithPmk"
 	ConfidentialVMEncryptionTypeEncryptedWithCmk                 ConfidentialVMEncryptionType = "EncryptedWithCmk"
 	ConfidentialVMEncryptionTypeEncryptedWithPmk                 ConfidentialVMEncryptionType = "EncryptedWithPmk"
+	ConfidentialVMEncryptionTypeNonPersistedTPM                  ConfidentialVMEncryptionType = "NonPersistedTPM"
 )
 
 // PossibleConfidentialVMEncryptionTypeValues returns the possible values for the ConfidentialVMEncryptionType const type.
@@ -227,6 +223,7 @@ func PossibleConfidentialVMEncryptionTypeValues() []ConfidentialVMEncryptionType
 		ConfidentialVMEncryptionTypeEncryptedVMGuestStateOnlyWithPmk,
 		ConfidentialVMEncryptionTypeEncryptedWithCmk,
 		ConfidentialVMEncryptionTypeEncryptedWithPmk,
+		ConfidentialVMEncryptionTypeNonPersistedTPM,
 	}
 }
 
@@ -287,12 +284,7 @@ func PossibleDataAccessAuthModeValues() []DataAccessAuthMode {
 }
 
 // DedicatedHostLicenseTypes - Specifies the software license type that will be applied to the VMs deployed on the dedicated
-// host.
-// Possible values are:
-// None
-// WindowsServerHybrid
-// WindowsServerPerpetual
-// Default: None
+// host. Possible values are: None, WindowsServerHybrid, WindowsServerPerpetual. The default value is: None.
 type DedicatedHostLicenseTypes string
 
 const (
@@ -365,8 +357,9 @@ func PossibleDiffDiskPlacementValues() []DiffDiskPlacement {
 // is only supported for virtual machines whose operating system disk and VM sku supports Generation 2
 // (https://docs.microsoft.com/en-us/azure/virtual-machines/generation-2), please check the HyperVGenerations capability returned
 // as part of VM sku capabilities in the response of Microsoft.Compute SKUs
-// api for the region contains V2 (https://docs.microsoft.com/rest/api/compute/resourceskus/list) .
-// For more information about Disk Controller Types supported please refer to https://aka.ms/azure-diskcontrollertypes.
+// api for the region contains V2 (https://docs.microsoft.com/rest/api/compute/resourceskus/list). For more information about
+// Disk Controller Types supported please refer to
+// https://aka.ms/azure-diskcontrollertypes.
 type DiskControllerTypes string
 
 const (
@@ -390,6 +383,8 @@ const (
 	DiskCreateOptionAttach DiskCreateOption = "Attach"
 	// DiskCreateOptionCopy - Create a new disk or snapshot by copying from a disk or snapshot specified by the given sourceResourceId.
 	DiskCreateOptionCopy DiskCreateOption = "Copy"
+	// DiskCreateOptionCopyFromSanSnapshot - Create a new disk by exporting from elastic san volume snapshot
+	DiskCreateOptionCopyFromSanSnapshot DiskCreateOption = "CopyFromSanSnapshot"
 	// DiskCreateOptionCopyStart - Create a new disk by using a deep copy process, where the resource creation is considered complete
 	// only after all data has been copied from the source.
 	DiskCreateOptionCopyStart DiskCreateOption = "CopyStart"
@@ -418,6 +413,7 @@ func PossibleDiskCreateOptionValues() []DiskCreateOption {
 	return []DiskCreateOption{
 		DiskCreateOptionAttach,
 		DiskCreateOptionCopy,
+		DiskCreateOptionCopyFromSanSnapshot,
 		DiskCreateOptionCopyStart,
 		DiskCreateOptionEmpty,
 		DiskCreateOptionFromImage,
@@ -429,12 +425,11 @@ func PossibleDiskCreateOptionValues() []DiskCreateOption {
 	}
 }
 
-// DiskCreateOptionTypes - Specifies how the virtual machine should be created.
-// Possible values are:
-// Attach \u2013 This value is used when you are using a specialized disk to create the virtual machine.
-// FromImage \u2013 This value is used when you are using an image to create the virtual machine. If you are using a platform
-// image, you also use the imageReference element described above. If you are
-// using a marketplace image, you also use the plan element previously described.
+// DiskCreateOptionTypes - Specifies how the virtual machine should be created. Possible values are: Attach. This value is
+// used when you are using a specialized disk to create the virtual machine. FromImage. This value is used
+// when you are using an image to create the virtual machine. If you are using a platform image, you also use the imageReference
+// element described above. If you are using a marketplace image, you also
+// use the plan element previously described.
 type DiskCreateOptionTypes string
 
 const (
@@ -452,11 +447,10 @@ func PossibleDiskCreateOptionTypesValues() []DiskCreateOptionTypes {
 	}
 }
 
-// DiskDeleteOptionTypes - Specifies the behavior of the managed disk when the VM gets deleted i.e whether the managed disk
-// is deleted or detached. Supported values:
-// Delete If this value is used, the managed disk is deleted when VM gets deleted.
-// Detach If this value is used, the managed disk is retained after VM gets deleted.
-// Minimum api-version: 2021-03-01
+// DiskDeleteOptionTypes - Specifies the behavior of the managed disk when the VM gets deleted, for example whether the managed
+// disk is deleted or detached. Supported values are: Delete. If this value is used, the managed disk
+// is deleted when VM gets deleted. Detach. If this value is used, the managed disk is retained after VM gets deleted. Minimum
+// api-version: 2021-03-01.
 type DiskDeleteOptionTypes string
 
 const (
@@ -473,13 +467,13 @@ func PossibleDiskDeleteOptionTypesValues() []DiskDeleteOptionTypes {
 }
 
 // DiskDetachOptionTypes - Specifies the detach behavior to be used while detaching a disk or which is already in the process
-// of detachment from the virtual machine. Supported values: ForceDetach.
-// detachOption: ForceDetach is applicable only for managed data disks. If a previous detachment attempt of the data disk
-// did not complete due to an unexpected failure from the virtual machine and the
-// disk is still not released then use force-detach as a last resort option to detach the disk forcibly from the VM. All writes
-// might not have been flushed when using this detach behavior.
-// This feature is still in preview mode and is not supported for VirtualMachineScaleSet. To force-detach a data disk update
-// toBeDetached to 'true' along with setting detachOption: 'ForceDetach'.
+// of detachment from the virtual machine. Supported values are: ForceDetach. detachOption: ForceDetach
+// is applicable only for managed data disks. If a previous detachment attempt of the data disk did not complete due to an
+// unexpected failure from the virtual machine and the disk is still not released
+// then use force-detach as a last resort option to detach the disk forcibly from the VM. All writes might not have been flushed
+// when using this detach behavior. This feature is still in preview mode and
+// is not supported for VirtualMachineScaleSet. To force-detach a data disk update toBeDetached to 'true' along with setting
+// detachOption: 'ForceDetach'.
 type DiskDetachOptionTypes string
 
 const (
@@ -643,6 +637,48 @@ func PossibleDiskStorageAccountTypesValues() []DiskStorageAccountTypes {
 	}
 }
 
+// DomainNameLabelScopeTypes - The Domain name label scope.The concatenation of the hashed domain name label that generated
+// according to the policy from domain name label scope and vm index will be the domain name labels of the
+// PublicIPAddress resources that will be created
+type DomainNameLabelScopeTypes string
+
+const (
+	DomainNameLabelScopeTypesNoReuse            DomainNameLabelScopeTypes = "NoReuse"
+	DomainNameLabelScopeTypesResourceGroupReuse DomainNameLabelScopeTypes = "ResourceGroupReuse"
+	DomainNameLabelScopeTypesSubscriptionReuse  DomainNameLabelScopeTypes = "SubscriptionReuse"
+	DomainNameLabelScopeTypesTenantReuse        DomainNameLabelScopeTypes = "TenantReuse"
+)
+
+// PossibleDomainNameLabelScopeTypesValues returns the possible values for the DomainNameLabelScopeTypes const type.
+func PossibleDomainNameLabelScopeTypesValues() []DomainNameLabelScopeTypes {
+	return []DomainNameLabelScopeTypes{
+		DomainNameLabelScopeTypesNoReuse,
+		DomainNameLabelScopeTypesResourceGroupReuse,
+		DomainNameLabelScopeTypesSubscriptionReuse,
+		DomainNameLabelScopeTypesTenantReuse,
+	}
+}
+
+// EdgeZoneStorageAccountType - Specifies the storage account type to be used to store the image. This property is not updatable.
+type EdgeZoneStorageAccountType string
+
+const (
+	EdgeZoneStorageAccountTypePremiumLRS     EdgeZoneStorageAccountType = "Premium_LRS"
+	EdgeZoneStorageAccountTypeStandardLRS    EdgeZoneStorageAccountType = "Standard_LRS"
+	EdgeZoneStorageAccountTypeStandardSSDLRS EdgeZoneStorageAccountType = "StandardSSD_LRS"
+	EdgeZoneStorageAccountTypeStandardZRS    EdgeZoneStorageAccountType = "Standard_ZRS"
+)
+
+// PossibleEdgeZoneStorageAccountTypeValues returns the possible values for the EdgeZoneStorageAccountType const type.
+func PossibleEdgeZoneStorageAccountTypeValues() []EdgeZoneStorageAccountType {
+	return []EdgeZoneStorageAccountType{
+		EdgeZoneStorageAccountTypePremiumLRS,
+		EdgeZoneStorageAccountTypeStandardLRS,
+		EdgeZoneStorageAccountTypeStandardSSDLRS,
+		EdgeZoneStorageAccountTypeStandardZRS,
+	}
+}
+
 // EncryptionType - The type of key used to encrypt the data of the disk.
 type EncryptionType string
 
@@ -693,6 +729,19 @@ func PossibleExecutionStateValues() []ExecutionState {
 	}
 }
 
+type ExpandTypeForListVMs string
+
+const (
+	ExpandTypeForListVMsInstanceView ExpandTypeForListVMs = "instanceView"
+)
+
+// PossibleExpandTypeForListVMsValues returns the possible values for the ExpandTypeForListVMs const type.
+func PossibleExpandTypeForListVMsValues() []ExpandTypeForListVMs {
+	return []ExpandTypeForListVMs{
+		ExpandTypeForListVMsInstanceView,
+	}
+}
+
 type ExpandTypesForGetCapacityReservationGroups string
 
 const (
@@ -721,6 +770,19 @@ func PossibleExpandTypesForGetVMScaleSetsValues() []ExpandTypesForGetVMScaleSets
 	}
 }
 
+type ExpandTypesForListVMs string
+
+const (
+	ExpandTypesForListVMsInstanceView ExpandTypesForListVMs = "instanceView"
+)
+
+// PossibleExpandTypesForListVMsValues returns the possible values for the ExpandTypesForListVMs const type.
+func PossibleExpandTypesForListVMsValues() []ExpandTypesForListVMs {
+	return []ExpandTypesForListVMs{
+		ExpandTypesForListVMsInstanceView,
+	}
+}
+
 // ExtendedLocationType - The type of the extended location.
 type ExtendedLocationType string
 
@@ -749,22 +811,40 @@ func PossibleExtendedLocationTypesValues() []ExtendedLocationTypes {
 	}
 }
 
+// FileFormat - Used to specify the file format when making request for SAS on a VHDX file format snapshot
+type FileFormat string
+
+const (
+	// FileFormatVHD - A VHD file is a disk image file in the Virtual Hard Disk file format.
+	FileFormatVHD FileFormat = "VHD"
+	// FileFormatVHDX - A VHDX file is a disk image file in the Virtual Hard Disk v2 file format.
+	FileFormatVHDX FileFormat = "VHDX"
+)
+
+// PossibleFileFormatValues returns the possible values for the FileFormat const type.
+func PossibleFileFormatValues() []FileFormat {
+	return []FileFormat{
+		FileFormatVHD,
+		FileFormatVHDX,
+	}
+}
+
 // GalleryApplicationCustomActionParameterType - Specifies the type of the custom action parameter. Possible values are: String,
 // ConfigurationDataBlob or LogOutputBlob
 type GalleryApplicationCustomActionParameterType string
 
 const (
-	GalleryApplicationCustomActionParameterTypeString                GalleryApplicationCustomActionParameterType = "String"
 	GalleryApplicationCustomActionParameterTypeConfigurationDataBlob GalleryApplicationCustomActionParameterType = "ConfigurationDataBlob"
 	GalleryApplicationCustomActionParameterTypeLogOutputBlob         GalleryApplicationCustomActionParameterType = "LogOutputBlob"
+	GalleryApplicationCustomActionParameterTypeString                GalleryApplicationCustomActionParameterType = "String"
 )
 
 // PossibleGalleryApplicationCustomActionParameterTypeValues returns the possible values for the GalleryApplicationCustomActionParameterType const type.
 func PossibleGalleryApplicationCustomActionParameterTypeValues() []GalleryApplicationCustomActionParameterType {
 	return []GalleryApplicationCustomActionParameterType{
-		GalleryApplicationCustomActionParameterTypeString,
 		GalleryApplicationCustomActionParameterTypeConfigurationDataBlob,
 		GalleryApplicationCustomActionParameterTypeLogOutputBlob,
+		GalleryApplicationCustomActionParameterTypeString,
 	}
 }
 
@@ -821,11 +901,8 @@ func PossibleGalleryProvisioningStateValues() []GalleryProvisioningState {
 	}
 }
 
-// GallerySharingPermissionTypes - This property allows you to specify the permission of sharing gallery.
-// Possible values are:
-// Private
-// Groups
-// Community
+// GallerySharingPermissionTypes - This property allows you to specify the permission of sharing gallery. Possible values
+// are: Private, Groups, Community.
 type GallerySharingPermissionTypes string
 
 const (
@@ -980,19 +1057,19 @@ func PossibleInstanceViewTypesValues() []InstanceViewTypes {
 type IntervalInMins string
 
 const (
-	IntervalInMinsThreeMins  IntervalInMins = "ThreeMins"
 	IntervalInMinsFiveMins   IntervalInMins = "FiveMins"
-	IntervalInMinsThirtyMins IntervalInMins = "ThirtyMins"
 	IntervalInMinsSixtyMins  IntervalInMins = "SixtyMins"
+	IntervalInMinsThirtyMins IntervalInMins = "ThirtyMins"
+	IntervalInMinsThreeMins  IntervalInMins = "ThreeMins"
 )
 
 // PossibleIntervalInMinsValues returns the possible values for the IntervalInMins const type.
 func PossibleIntervalInMinsValues() []IntervalInMins {
 	return []IntervalInMins{
-		IntervalInMinsThreeMins,
 		IntervalInMinsFiveMins,
-		IntervalInMinsThirtyMins,
 		IntervalInMinsSixtyMins,
+		IntervalInMinsThirtyMins,
+		IntervalInMinsThreeMins,
 	}
 }
 
@@ -1061,19 +1138,37 @@ func PossibleLinuxVMGuestPatchModeValues() []LinuxVMGuestPatchMode {
 type MaintenanceOperationResultCodeTypes string
 
 const (
-	MaintenanceOperationResultCodeTypesNone                 MaintenanceOperationResultCodeTypes = "None"
-	MaintenanceOperationResultCodeTypesRetryLater           MaintenanceOperationResultCodeTypes = "RetryLater"
 	MaintenanceOperationResultCodeTypesMaintenanceAborted   MaintenanceOperationResultCodeTypes = "MaintenanceAborted"
 	MaintenanceOperationResultCodeTypesMaintenanceCompleted MaintenanceOperationResultCodeTypes = "MaintenanceCompleted"
+	MaintenanceOperationResultCodeTypesNone                 MaintenanceOperationResultCodeTypes = "None"
+	MaintenanceOperationResultCodeTypesRetryLater           MaintenanceOperationResultCodeTypes = "RetryLater"
 )
 
 // PossibleMaintenanceOperationResultCodeTypesValues returns the possible values for the MaintenanceOperationResultCodeTypes const type.
 func PossibleMaintenanceOperationResultCodeTypesValues() []MaintenanceOperationResultCodeTypes {
 	return []MaintenanceOperationResultCodeTypes{
-		MaintenanceOperationResultCodeTypesNone,
-		MaintenanceOperationResultCodeTypesRetryLater,
 		MaintenanceOperationResultCodeTypesMaintenanceAborted,
 		MaintenanceOperationResultCodeTypesMaintenanceCompleted,
+		MaintenanceOperationResultCodeTypesNone,
+		MaintenanceOperationResultCodeTypesRetryLater,
+	}
+}
+
+// Mode - Specifies the mode that ProxyAgent will execute on if the feature is enabled. ProxyAgent will start to audit or
+// monitor but not enforce access control over requests to host endpoints in Audit mode,
+// while in Enforce mode it will enforce access control. The default value is Enforce mode.
+type Mode string
+
+const (
+	ModeAudit   Mode = "Audit"
+	ModeEnforce Mode = "Enforce"
+)
+
+// PossibleModeValues returns the possible values for the Mode const type.
+func PossibleModeValues() []Mode {
+	return []Mode{
+		ModeAudit,
+		ModeEnforce,
 	}
 }
 
@@ -1113,6 +1208,46 @@ func PossibleNetworkAccessPolicyValues() []NetworkAccessPolicy {
 	}
 }
 
+// NetworkInterfaceAuxiliaryMode - Specifies whether the Auxiliary mode is enabled for the Network Interface resource.
+type NetworkInterfaceAuxiliaryMode string
+
+const (
+	NetworkInterfaceAuxiliaryModeAcceleratedConnections NetworkInterfaceAuxiliaryMode = "AcceleratedConnections"
+	NetworkInterfaceAuxiliaryModeFloating               NetworkInterfaceAuxiliaryMode = "Floating"
+	NetworkInterfaceAuxiliaryModeNone                   NetworkInterfaceAuxiliaryMode = "None"
+)
+
+// PossibleNetworkInterfaceAuxiliaryModeValues returns the possible values for the NetworkInterfaceAuxiliaryMode const type.
+func PossibleNetworkInterfaceAuxiliaryModeValues() []NetworkInterfaceAuxiliaryMode {
+	return []NetworkInterfaceAuxiliaryMode{
+		NetworkInterfaceAuxiliaryModeAcceleratedConnections,
+		NetworkInterfaceAuxiliaryModeFloating,
+		NetworkInterfaceAuxiliaryModeNone,
+	}
+}
+
+// NetworkInterfaceAuxiliarySKU - Specifies whether the Auxiliary sku is enabled for the Network Interface resource.
+type NetworkInterfaceAuxiliarySKU string
+
+const (
+	NetworkInterfaceAuxiliarySKUA1   NetworkInterfaceAuxiliarySKU = "A1"
+	NetworkInterfaceAuxiliarySKUA2   NetworkInterfaceAuxiliarySKU = "A2"
+	NetworkInterfaceAuxiliarySKUA4   NetworkInterfaceAuxiliarySKU = "A4"
+	NetworkInterfaceAuxiliarySKUA8   NetworkInterfaceAuxiliarySKU = "A8"
+	NetworkInterfaceAuxiliarySKUNone NetworkInterfaceAuxiliarySKU = "None"
+)
+
+// PossibleNetworkInterfaceAuxiliarySKUValues returns the possible values for the NetworkInterfaceAuxiliarySKU const type.
+func PossibleNetworkInterfaceAuxiliarySKUValues() []NetworkInterfaceAuxiliarySKU {
+	return []NetworkInterfaceAuxiliarySKU{
+		NetworkInterfaceAuxiliarySKUA1,
+		NetworkInterfaceAuxiliarySKUA2,
+		NetworkInterfaceAuxiliarySKUA4,
+		NetworkInterfaceAuxiliarySKUA8,
+		NetworkInterfaceAuxiliarySKUNone,
+	}
+}
+
 // OperatingSystemStateTypes - This property allows the user to specify whether the virtual machines created under this image
 // are 'Generalized' or 'Specialized'.
 type OperatingSystemStateTypes string
@@ -1147,21 +1282,19 @@ func PossibleOperatingSystemTypeValues() []OperatingSystemType {
 }
 
 // OperatingSystemTypes - This property allows you to specify the supported type of the OS that application is built for.
-// Possible values are:
-// Windows
-// Linux
+// Possible values are: Windows, Linux.
 type OperatingSystemTypes string
 
 const (
-	OperatingSystemTypesWindows OperatingSystemTypes = "Windows"
 	OperatingSystemTypesLinux   OperatingSystemTypes = "Linux"
+	OperatingSystemTypesWindows OperatingSystemTypes = "Windows"
 )
 
 // PossibleOperatingSystemTypesValues returns the possible values for the OperatingSystemTypes const type.
 func PossibleOperatingSystemTypesValues() []OperatingSystemTypes {
 	return []OperatingSystemTypes{
-		OperatingSystemTypesWindows,
 		OperatingSystemTypesLinux,
+		OperatingSystemTypesWindows,
 	}
 }
 
@@ -1351,10 +1484,7 @@ func PossiblePrivateEndpointServiceConnectionStatusValues() []PrivateEndpointSer
 	}
 }
 
-// ProtocolTypes - Specifies the protocol of WinRM listener.
-// Possible values are:
-// http
-// https
+// ProtocolTypes - Specifies the protocol of WinRM listener. Possible values are: http, https.
 type ProtocolTypes string
 
 const (
@@ -1370,10 +1500,8 @@ func PossibleProtocolTypesValues() []ProtocolTypes {
 	}
 }
 
-// ProximityPlacementGroupType - Specifies the type of the proximity placement group.
-// Possible values are:
-// Standard : Co-locate resources within an Azure region or Availability Zone.
-// Ultra : For future use.
+// ProximityPlacementGroupType - Specifies the type of the proximity placement group. Possible values are: Standard : Co-locate
+// resources within an Azure region or Availability Zone. Ultra : For future use.
 type ProximityPlacementGroupType string
 
 const (
@@ -1518,12 +1646,14 @@ type ReplicationStatusTypes string
 
 const (
 	ReplicationStatusTypesReplicationStatus ReplicationStatusTypes = "ReplicationStatus"
+	ReplicationStatusTypesUefiSettings      ReplicationStatusTypes = "UefiSettings"
 )
 
 // PossibleReplicationStatusTypesValues returns the possible values for the ReplicationStatusTypes const type.
 func PossibleReplicationStatusTypesValues() []ReplicationStatusTypes {
 	return []ReplicationStatusTypes{
 		ReplicationStatusTypesReplicationStatus,
+		ReplicationStatusTypesUefiSettings,
 	}
 }
 
@@ -1533,19 +1663,19 @@ func PossibleReplicationStatusTypesValues() []ReplicationStatusTypes {
 type ResourceIdentityType string
 
 const (
+	ResourceIdentityTypeNone                       ResourceIdentityType = "None"
 	ResourceIdentityTypeSystemAssigned             ResourceIdentityType = "SystemAssigned"
-	ResourceIdentityTypeUserAssigned               ResourceIdentityType = "UserAssigned"
 	ResourceIdentityTypeSystemAssignedUserAssigned ResourceIdentityType = "SystemAssigned, UserAssigned"
-	ResourceIdentityTypeNone                       ResourceIdentityType = "None"
+	ResourceIdentityTypeUserAssigned               ResourceIdentityType = "UserAssigned"
 )
 
 // PossibleResourceIdentityTypeValues returns the possible values for the ResourceIdentityType const type.
 func PossibleResourceIdentityTypeValues() []ResourceIdentityType {
 	return []ResourceIdentityType{
+		ResourceIdentityTypeNone,
 		ResourceIdentityTypeSystemAssigned,
-		ResourceIdentityTypeUserAssigned,
 		ResourceIdentityTypeSystemAssignedUserAssigned,
-		ResourceIdentityTypeNone,
+		ResourceIdentityTypeUserAssigned,
 	}
 }
 
@@ -1571,15 +1701,15 @@ func PossibleResourceSKUCapacityScaleTypeValues() []ResourceSKUCapacityScaleType
 type ResourceSKURestrictionsReasonCode string
 
 const (
-	ResourceSKURestrictionsReasonCodeQuotaID                     ResourceSKURestrictionsReasonCode = "QuotaId"
 	ResourceSKURestrictionsReasonCodeNotAvailableForSubscription ResourceSKURestrictionsReasonCode = "NotAvailableForSubscription"
+	ResourceSKURestrictionsReasonCodeQuotaID                     ResourceSKURestrictionsReasonCode = "QuotaId"
 )
 
 // PossibleResourceSKURestrictionsReasonCodeValues returns the possible values for the ResourceSKURestrictionsReasonCode const type.
 func PossibleResourceSKURestrictionsReasonCodeValues() []ResourceSKURestrictionsReasonCode {
 	return []ResourceSKURestrictionsReasonCode{
-		ResourceSKURestrictionsReasonCodeQuotaID,
 		ResourceSKURestrictionsReasonCodeNotAvailableForSubscription,
+		ResourceSKURestrictionsReasonCodeQuotaID,
 	}
 }
 
@@ -1612,6 +1742,30 @@ func PossibleRestorePointCollectionExpandOptionsValues() []RestorePointCollectio
 	}
 }
 
+// RestorePointEncryptionType - The type of key used to encrypt the data of the disk restore point.
+type RestorePointEncryptionType string
+
+const (
+	// RestorePointEncryptionTypeEncryptionAtRestWithCustomerKey - Disk Restore Point is encrypted at rest with Customer managed
+	// key that can be changed and revoked by a customer.
+	RestorePointEncryptionTypeEncryptionAtRestWithCustomerKey RestorePointEncryptionType = "EncryptionAtRestWithCustomerKey"
+	// RestorePointEncryptionTypeEncryptionAtRestWithPlatformAndCustomerKeys - Disk Restore Point is encrypted at rest with 2
+	// layers of encryption. One of the keys is Customer managed and the other key is Platform managed.
+	RestorePointEncryptionTypeEncryptionAtRestWithPlatformAndCustomerKeys RestorePointEncryptionType = "EncryptionAtRestWithPlatformAndCustomerKeys"
+	// RestorePointEncryptionTypeEncryptionAtRestWithPlatformKey - Disk Restore Point is encrypted at rest with Platform managed
+	// key.
+	RestorePointEncryptionTypeEncryptionAtRestWithPlatformKey RestorePointEncryptionType = "EncryptionAtRestWithPlatformKey"
+)
+
+// PossibleRestorePointEncryptionTypeValues returns the possible values for the RestorePointEncryptionType const type.
+func PossibleRestorePointEncryptionTypeValues() []RestorePointEncryptionType {
+	return []RestorePointEncryptionType{
+		RestorePointEncryptionTypeEncryptionAtRestWithCustomerKey,
+		RestorePointEncryptionTypeEncryptionAtRestWithPlatformAndCustomerKeys,
+		RestorePointEncryptionTypeEncryptionAtRestWithPlatformKey,
+	}
+}
+
 type RestorePointExpandOptions string
 
 const (
@@ -1629,15 +1783,15 @@ func PossibleRestorePointExpandOptionsValues() []RestorePointExpandOptions {
 type RollingUpgradeActionType string
 
 const (
-	RollingUpgradeActionTypeStart  RollingUpgradeActionType = "Start"
 	RollingUpgradeActionTypeCancel RollingUpgradeActionType = "Cancel"
+	RollingUpgradeActionTypeStart  RollingUpgradeActionType = "Start"
 )
 
 // PossibleRollingUpgradeActionTypeValues returns the possible values for the RollingUpgradeActionType const type.
 func PossibleRollingUpgradeActionTypeValues() []RollingUpgradeActionType {
 	return []RollingUpgradeActionType{
-		RollingUpgradeActionTypeStart,
 		RollingUpgradeActionTypeCancel,
+		RollingUpgradeActionTypeStart,
 	}
 }
 
@@ -1645,30 +1799,48 @@ func PossibleRollingUpgradeActionTypeValues() []RollingUpgradeActionType {
 type RollingUpgradeStatusCode string
 
 const (
-	RollingUpgradeStatusCodeRollingForward RollingUpgradeStatusCode = "RollingForward"
 	RollingUpgradeStatusCodeCancelled      RollingUpgradeStatusCode = "Cancelled"
 	RollingUpgradeStatusCodeCompleted      RollingUpgradeStatusCode = "Completed"
 	RollingUpgradeStatusCodeFaulted        RollingUpgradeStatusCode = "Faulted"
+	RollingUpgradeStatusCodeRollingForward RollingUpgradeStatusCode = "RollingForward"
 )
 
 // PossibleRollingUpgradeStatusCodeValues returns the possible values for the RollingUpgradeStatusCode const type.
 func PossibleRollingUpgradeStatusCodeValues() []RollingUpgradeStatusCode {
 	return []RollingUpgradeStatusCode{
-		RollingUpgradeStatusCodeRollingForward,
 		RollingUpgradeStatusCodeCancelled,
 		RollingUpgradeStatusCodeCompleted,
 		RollingUpgradeStatusCodeFaulted,
+		RollingUpgradeStatusCodeRollingForward,
 	}
 }
 
-// SecurityEncryptionTypes - Specifies the EncryptionType of the managed disk.
-// It is set to DiskWithVMGuestState for encryption of the managed disk along with VMGuestState blob, and VMGuestStateOnly
-// for encryption of just the VMGuestState blob.
-// NOTE: It can be set for only Confidential VMs.
+// SSHEncryptionTypes - The encryption type of the SSH keys to be generated. See SshEncryptionTypes for possible set of values.
+// If not provided, will default to RSA
+type SSHEncryptionTypes string
+
+const (
+	SSHEncryptionTypesEd25519 SSHEncryptionTypes = "Ed25519"
+	SSHEncryptionTypesRSA     SSHEncryptionTypes = "RSA"
+)
+
+// PossibleSSHEncryptionTypesValues returns the possible values for the SSHEncryptionTypes const type.
+func PossibleSSHEncryptionTypesValues() []SSHEncryptionTypes {
+	return []SSHEncryptionTypes{
+		SSHEncryptionTypesEd25519,
+		SSHEncryptionTypesRSA,
+	}
+}
+
+// SecurityEncryptionTypes - Specifies the EncryptionType of the managed disk. It is set to DiskWithVMGuestState for encryption
+// of the managed disk along with VMGuestState blob, VMGuestStateOnly for encryption of just the
+// VMGuestState blob, and NonPersistedTPM for not persisting firmware state in the VMGuestState blob.. Note: It can be set
+// for only Confidential VMs.
 type SecurityEncryptionTypes string
 
 const (
 	SecurityEncryptionTypesDiskWithVMGuestState SecurityEncryptionTypes = "DiskWithVMGuestState"
+	SecurityEncryptionTypesNonPersistedTPM      SecurityEncryptionTypes = "NonPersistedTPM"
 	SecurityEncryptionTypesVMGuestStateOnly     SecurityEncryptionTypes = "VMGuestStateOnly"
 )
 
@@ -1676,12 +1848,14 @@ const (
 func PossibleSecurityEncryptionTypesValues() []SecurityEncryptionTypes {
 	return []SecurityEncryptionTypes{
 		SecurityEncryptionTypesDiskWithVMGuestState,
+		SecurityEncryptionTypesNonPersistedTPM,
 		SecurityEncryptionTypesVMGuestStateOnly,
 	}
 }
 
 // SecurityTypes - Specifies the SecurityType of the virtual machine. It has to be set to any specified value to enable UefiSettings.
-// Default: UefiSettings will not be enabled unless this property is set.
+// The default behavior is: UefiSettings will not be enabled unless this property is
+// set.
 type SecurityTypes string
 
 const (
@@ -1758,10 +1932,8 @@ func PossibleSharedToValuesValues() []SharedToValues {
 	}
 }
 
-// SharingProfileGroupTypes - This property allows you to specify the type of sharing group.
-// Possible values are:
-// Subscriptions
-// AADTenants
+// SharingProfileGroupTypes - This property allows you to specify the type of sharing group. Possible values are: Subscriptions,
+// AADTenants.
 type SharingProfileGroupTypes string
 
 const (
@@ -1797,11 +1969,8 @@ func PossibleSharingStateValues() []SharingState {
 	}
 }
 
-// SharingUpdateOperationTypes - This property allows you to specify the operation type of gallery sharing update.
-// Possible values are:
-// Add
-// Remove
-// Reset
+// SharingUpdateOperationTypes - This property allows you to specify the operation type of gallery sharing update. Possible
+// values are: Add, Remove, Reset.
 type SharingUpdateOperationTypes string
 
 const (
@@ -1846,17 +2015,17 @@ func PossibleSnapshotStorageAccountTypesValues() []SnapshotStorageAccountTypes {
 type StatusLevelTypes string
 
 const (
+	StatusLevelTypesError   StatusLevelTypes = "Error"
 	StatusLevelTypesInfo    StatusLevelTypes = "Info"
 	StatusLevelTypesWarning StatusLevelTypes = "Warning"
-	StatusLevelTypesError   StatusLevelTypes = "Error"
 )
 
 // PossibleStatusLevelTypesValues returns the possible values for the StatusLevelTypes const type.
 func PossibleStatusLevelTypesValues() []StatusLevelTypes {
 	return []StatusLevelTypes{
+		StatusLevelTypesError,
 		StatusLevelTypesInfo,
 		StatusLevelTypesWarning,
-		StatusLevelTypesError,
 	}
 }
 
@@ -1864,10 +2033,9 @@ func PossibleStatusLevelTypesValues() []StatusLevelTypes {
 type StorageAccountType string
 
 const (
-	StorageAccountTypePremiumLRS     StorageAccountType = "Premium_LRS"
-	StorageAccountTypeStandardLRS    StorageAccountType = "Standard_LRS"
-	StorageAccountTypeStandardSSDLRS StorageAccountType = "StandardSSD_LRS"
-	StorageAccountTypeStandardZRS    StorageAccountType = "Standard_ZRS"
+	StorageAccountTypePremiumLRS  StorageAccountType = "Premium_LRS"
+	StorageAccountTypeStandardLRS StorageAccountType = "Standard_LRS"
+	StorageAccountTypeStandardZRS StorageAccountType = "Standard_ZRS"
 )
 
 // PossibleStorageAccountTypeValues returns the possible values for the StorageAccountType const type.
@@ -1875,7 +2043,6 @@ func PossibleStorageAccountTypeValues() []StorageAccountType {
 	return []StorageAccountType{
 		StorageAccountTypePremiumLRS,
 		StorageAccountTypeStandardLRS,
-		StorageAccountTypeStandardSSDLRS,
 		StorageAccountTypeStandardZRS,
 	}
 }
@@ -1912,6 +2079,40 @@ func PossibleStorageAccountTypesValues() []StorageAccountTypes {
 	}
 }
 
+// UefiKeyType - The type of key signature.
+type UefiKeyType string
+
+const (
+	UefiKeyTypeSHA256 UefiKeyType = "sha256"
+	UefiKeyTypeX509   UefiKeyType = "x509"
+)
+
+// PossibleUefiKeyTypeValues returns the possible values for the UefiKeyType const type.
+func PossibleUefiKeyTypeValues() []UefiKeyType {
+	return []UefiKeyType{
+		UefiKeyTypeSHA256,
+		UefiKeyTypeX509,
+	}
+}
+
+// UefiSignatureTemplateName - The name of the signature template that contains default UEFI keys.
+type UefiSignatureTemplateName string
+
+const (
+	UefiSignatureTemplateNameMicrosoftUefiCertificateAuthorityTemplate UefiSignatureTemplateName = "MicrosoftUefiCertificateAuthorityTemplate"
+	UefiSignatureTemplateNameMicrosoftWindowsTemplate                  UefiSignatureTemplateName = "MicrosoftWindowsTemplate"
+	UefiSignatureTemplateNameNoSignatureTemplate                       UefiSignatureTemplateName = "NoSignatureTemplate"
+)
+
+// PossibleUefiSignatureTemplateNameValues returns the possible values for the UefiSignatureTemplateName const type.
+func PossibleUefiSignatureTemplateNameValues() []UefiSignatureTemplateName {
+	return []UefiSignatureTemplateName{
+		UefiSignatureTemplateNameMicrosoftUefiCertificateAuthorityTemplate,
+		UefiSignatureTemplateNameMicrosoftWindowsTemplate,
+		UefiSignatureTemplateNameNoSignatureTemplate,
+	}
+}
+
 // UpgradeMode - Specifies the mode of an upgrade to virtual machines in the scale set.
 // Possible values are:
 // Manual - You control the application of updates to virtual machines in the scale set. You do this by using the manualUpgrade
@@ -1938,17 +2139,17 @@ func PossibleUpgradeModeValues() []UpgradeMode {
 type UpgradeOperationInvoker string
 
 const (
+	UpgradeOperationInvokerPlatform UpgradeOperationInvoker = "Platform"
 	UpgradeOperationInvokerUnknown  UpgradeOperationInvoker = "Unknown"
 	UpgradeOperationInvokerUser     UpgradeOperationInvoker = "User"
-	UpgradeOperationInvokerPlatform UpgradeOperationInvoker = "Platform"
 )
 
 // PossibleUpgradeOperationInvokerValues returns the possible values for the UpgradeOperationInvoker const type.
 func PossibleUpgradeOperationInvokerValues() []UpgradeOperationInvoker {
 	return []UpgradeOperationInvoker{
+		UpgradeOperationInvokerPlatform,
 		UpgradeOperationInvokerUnknown,
 		UpgradeOperationInvokerUser,
-		UpgradeOperationInvokerPlatform,
 	}
 }
 
@@ -1956,19 +2157,19 @@ func PossibleUpgradeOperationInvokerValues() []UpgradeOperationInvoker {
 type UpgradeState string
 
 const (
-	UpgradeStateRollingForward UpgradeState = "RollingForward"
 	UpgradeStateCancelled      UpgradeState = "Cancelled"
 	UpgradeStateCompleted      UpgradeState = "Completed"
 	UpgradeStateFaulted        UpgradeState = "Faulted"
+	UpgradeStateRollingForward UpgradeState = "RollingForward"
 )
 
 // PossibleUpgradeStateValues returns the possible values for the UpgradeState const type.
 func PossibleUpgradeStateValues() []UpgradeState {
 	return []UpgradeState{
-		UpgradeStateRollingForward,
 		UpgradeStateCancelled,
 		UpgradeStateCompleted,
 		UpgradeStateFaulted,
+		UpgradeStateRollingForward,
 	}
 }
 
@@ -2111,8 +2312,8 @@ func PossibleVirtualMachineEvictionPolicyTypesValues() []VirtualMachineEvictionP
 }
 
 // VirtualMachinePriorityTypes - Specifies the priority for a standalone virtual machine or the virtual machines in the scale
-// set.
-// 'Low' enum will be deprecated in the future, please use 'Spot' as the enum to deploy Azure Spot VM/VMSS.
+// set. 'Low' enum will be deprecated in the future, please use 'Spot' as the enum to deploy Azure Spot
+// VM/VMSS.
 type VirtualMachinePriorityTypes string
 
 const (
@@ -2163,15 +2364,14 @@ func PossibleVirtualMachineScaleSetScaleInRulesValues() []VirtualMachineScaleSet
 	}
 }
 
-// VirtualMachineSizeTypes - Specifies the size of the virtual machine.
-// The enum data type is currently deprecated and will be removed by December 23rd 2023.
-// Recommended way to get the list of available sizes is using these APIs:
-// List all available virtual machine sizes in an availability set [https://docs.microsoft.com/rest/api/compute/availabilitysets/listavailablesizes]
-// List all available virtual machine sizes in a region [https://docs.microsoft.com/rest/api/compute/resourceskus/list]
-// List all available virtual machine sizes for resizing [https://docs.microsoft.com/rest/api/compute/virtualmachines/listavailablesizes].
-// For more information about virtual machine sizes, see Sizes for
-// virtual machines [https://docs.microsoft.com/azure/virtual-machines/sizes].
-// The available VM sizes depend on region and availability set.
+// VirtualMachineSizeTypes - Specifies the size of the virtual machine. The enum data type is currently deprecated and will
+// be removed by December 23rd 2023. The recommended way to get the list of available sizes is using these
+// APIs: List all available virtual machine sizes in an availability set [https://docs.microsoft.com/rest/api/compute/availabilitysets/listavailablesizes],
+// List all available virtual machine sizes in a
+// region [https://docs.microsoft.com/rest/api/compute/resourceskus/list], List all available virtual machine sizes for resizing
+// [https://docs.microsoft.com/rest/api/compute/virtualmachines/listavailablesizes]. For more information about virtual machine
+// sizes, see Sizes for virtual machines
+// [https://docs.microsoft.com/azure/virtual-machines/sizes]. The available VM sizes depend on region and availability set.
 type VirtualMachineSizeTypes string
 
 const (
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/dedicatedhostgroups_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/dedicatedhostgroups_client.go
similarity index 81%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/dedicatedhostgroups_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/dedicatedhostgroups_client.go
index 757e6926b18..99434bfabb2 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/dedicatedhostgroups_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/dedicatedhostgroups_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type DedicatedHostGroupsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewDedicatedHostGroupsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*DedicatedHostGroupsClient, error) {
-	cl, err := arm.NewClient(moduleName+".DedicatedHostGroupsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,25 +48,32 @@ func NewDedicatedHostGroupsClient(subscriptionID string, credential azcore.Token
 // see Dedicated Host Documentation [https://go.microsoft.com/fwlink/?linkid=2082596]
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - hostGroupName - The name of the dedicated host group.
 //   - parameters - Parameters supplied to the Create Dedicated Host Group.
 //   - options - DedicatedHostGroupsClientCreateOrUpdateOptions contains the optional parameters for the DedicatedHostGroupsClient.CreateOrUpdate
 //     method.
 func (client *DedicatedHostGroupsClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, hostGroupName string, parameters DedicatedHostGroup, options *DedicatedHostGroupsClientCreateOrUpdateOptions) (DedicatedHostGroupsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "DedicatedHostGroupsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, hostGroupName, parameters, options)
 	if err != nil {
 		return DedicatedHostGroupsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DedicatedHostGroupsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return DedicatedHostGroupsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return DedicatedHostGroupsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -90,10 +96,13 @@ func (client *DedicatedHostGroupsClient) createOrUpdateCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -108,22 +117,28 @@ func (client *DedicatedHostGroupsClient) createOrUpdateHandleResponse(resp *http
 // Delete - Delete a dedicated host group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - hostGroupName - The name of the dedicated host group.
 //   - options - DedicatedHostGroupsClientDeleteOptions contains the optional parameters for the DedicatedHostGroupsClient.Delete
 //     method.
 func (client *DedicatedHostGroupsClient) Delete(ctx context.Context, resourceGroupName string, hostGroupName string, options *DedicatedHostGroupsClientDeleteOptions) (DedicatedHostGroupsClientDeleteResponse, error) {
+	var err error
+	const operationName = "DedicatedHostGroupsClient.Delete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, hostGroupName, options)
 	if err != nil {
 		return DedicatedHostGroupsClientDeleteResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DedicatedHostGroupsClientDeleteResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusNoContent) {
-		return DedicatedHostGroupsClientDeleteResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return DedicatedHostGroupsClientDeleteResponse{}, err
 	}
 	return DedicatedHostGroupsClientDeleteResponse{}, nil
 }
@@ -148,7 +163,7 @@ func (client *DedicatedHostGroupsClient) deleteCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -157,23 +172,30 @@ func (client *DedicatedHostGroupsClient) deleteCreateRequest(ctx context.Context
 // Get - Retrieves information about a dedicated host group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - hostGroupName - The name of the dedicated host group.
 //   - options - DedicatedHostGroupsClientGetOptions contains the optional parameters for the DedicatedHostGroupsClient.Get method.
 func (client *DedicatedHostGroupsClient) Get(ctx context.Context, resourceGroupName string, hostGroupName string, options *DedicatedHostGroupsClientGetOptions) (DedicatedHostGroupsClientGetResponse, error) {
+	var err error
+	const operationName = "DedicatedHostGroupsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, hostGroupName, options)
 	if err != nil {
 		return DedicatedHostGroupsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DedicatedHostGroupsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DedicatedHostGroupsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DedicatedHostGroupsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -199,7 +221,7 @@ func (client *DedicatedHostGroupsClient) getCreateRequest(ctx context.Context, r
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -217,7 +239,7 @@ func (client *DedicatedHostGroupsClient) getHandleResponse(resp *http.Response)
 // NewListByResourceGroupPager - Lists all of the dedicated host groups in the specified resource group. Use the nextLink
 // property in the response to get the next page of dedicated host groups.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - DedicatedHostGroupsClientListByResourceGroupOptions contains the optional parameters for the DedicatedHostGroupsClient.NewListByResourceGroupPager
 //     method.
@@ -227,25 +249,20 @@ func (client *DedicatedHostGroupsClient) NewListByResourceGroupPager(resourceGro
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DedicatedHostGroupsClientListByResourceGroupResponse) (DedicatedHostGroupsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return DedicatedHostGroupsClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DedicatedHostGroupsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return DedicatedHostGroupsClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DedicatedHostGroupsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -265,7 +282,7 @@ func (client *DedicatedHostGroupsClient) listByResourceGroupCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -283,7 +300,7 @@ func (client *DedicatedHostGroupsClient) listByResourceGroupHandleResponse(resp
 // NewListBySubscriptionPager - Lists all of the dedicated host groups in the subscription. Use the nextLink property in the
 // response to get the next page of dedicated host groups.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - options - DedicatedHostGroupsClientListBySubscriptionOptions contains the optional parameters for the DedicatedHostGroupsClient.NewListBySubscriptionPager
 //     method.
 func (client *DedicatedHostGroupsClient) NewListBySubscriptionPager(options *DedicatedHostGroupsClientListBySubscriptionOptions) *runtime.Pager[DedicatedHostGroupsClientListBySubscriptionResponse] {
@@ -292,25 +309,20 @@ func (client *DedicatedHostGroupsClient) NewListBySubscriptionPager(options *Ded
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DedicatedHostGroupsClientListBySubscriptionResponse) (DedicatedHostGroupsClientListBySubscriptionResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listBySubscriptionCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DedicatedHostGroupsClient.NewListBySubscriptionPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listBySubscriptionCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return DedicatedHostGroupsClientListBySubscriptionResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return DedicatedHostGroupsClientListBySubscriptionResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DedicatedHostGroupsClientListBySubscriptionResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listBySubscriptionHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -326,7 +338,7 @@ func (client *DedicatedHostGroupsClient) listBySubscriptionCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -344,25 +356,32 @@ func (client *DedicatedHostGroupsClient) listBySubscriptionHandleResponse(resp *
 // Update - Update an dedicated host group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - hostGroupName - The name of the dedicated host group.
 //   - parameters - Parameters supplied to the Update Dedicated Host Group operation.
 //   - options - DedicatedHostGroupsClientUpdateOptions contains the optional parameters for the DedicatedHostGroupsClient.Update
 //     method.
 func (client *DedicatedHostGroupsClient) Update(ctx context.Context, resourceGroupName string, hostGroupName string, parameters DedicatedHostGroupUpdate, options *DedicatedHostGroupsClientUpdateOptions) (DedicatedHostGroupsClientUpdateResponse, error) {
+	var err error
+	const operationName = "DedicatedHostGroupsClient.Update"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, hostGroupName, parameters, options)
 	if err != nil {
 		return DedicatedHostGroupsClientUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DedicatedHostGroupsClientUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DedicatedHostGroupsClientUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DedicatedHostGroupsClientUpdateResponse{}, err
 	}
-	return client.updateHandleResponse(resp)
+	resp, err := client.updateHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateCreateRequest creates the Update request.
@@ -385,10 +404,13 @@ func (client *DedicatedHostGroupsClient) updateCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateHandleResponse handles the Update response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/dedicatedhosts_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/dedicatedhosts_client.go
similarity index 58%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/dedicatedhosts_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/dedicatedhosts_client.go
index e0331ac64f8..b50a3ec65bf 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/dedicatedhosts_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/dedicatedhosts_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type DedicatedHostsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewDedicatedHostsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*DedicatedHostsClient, error) {
-	cl, err := arm.NewClient(moduleName+".DedicatedHostsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewDedicatedHostsClient(subscriptionID string, credential azcore.TokenCrede
 // BeginCreateOrUpdate - Create or update a dedicated host .
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - hostGroupName - The name of the dedicated host group.
 //   - hostName - The name of the dedicated host .
@@ -61,29 +60,40 @@ func (client *DedicatedHostsClient) BeginCreateOrUpdate(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DedicatedHostsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DedicatedHostsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DedicatedHostsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DedicatedHostsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Create or update a dedicated host .
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *DedicatedHostsClient) createOrUpdate(ctx context.Context, resourceGroupName string, hostGroupName string, hostName string, parameters DedicatedHost, options *DedicatedHostsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DedicatedHostsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, hostGroupName, hostName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -110,16 +120,19 @@ func (client *DedicatedHostsClient) createOrUpdateCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Delete a dedicated host.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - hostGroupName - The name of the dedicated host group.
 //   - hostName - The name of the dedicated host.
@@ -131,29 +144,40 @@ func (client *DedicatedHostsClient) BeginDelete(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DedicatedHostsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DedicatedHostsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DedicatedHostsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DedicatedHostsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Delete a dedicated host.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *DedicatedHostsClient) deleteOperation(ctx context.Context, resourceGroupName string, hostGroupName string, hostName string, options *DedicatedHostsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DedicatedHostsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, hostGroupName, hostName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -180,7 +204,7 @@ func (client *DedicatedHostsClient) deleteCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -189,24 +213,31 @@ func (client *DedicatedHostsClient) deleteCreateRequest(ctx context.Context, res
 // Get - Retrieves information about a dedicated host.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - hostGroupName - The name of the dedicated host group.
 //   - hostName - The name of the dedicated host.
 //   - options - DedicatedHostsClientGetOptions contains the optional parameters for the DedicatedHostsClient.Get method.
 func (client *DedicatedHostsClient) Get(ctx context.Context, resourceGroupName string, hostGroupName string, hostName string, options *DedicatedHostsClientGetOptions) (DedicatedHostsClientGetResponse, error) {
+	var err error
+	const operationName = "DedicatedHostsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, hostGroupName, hostName, options)
 	if err != nil {
 		return DedicatedHostsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DedicatedHostsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DedicatedHostsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DedicatedHostsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -236,7 +267,7 @@ func (client *DedicatedHostsClient) getCreateRequest(ctx context.Context, resour
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -251,10 +282,82 @@ func (client *DedicatedHostsClient) getHandleResponse(resp *http.Response) (Dedi
 	return result, nil
 }
 
+// NewListAvailableSizesPager - Lists all available dedicated host sizes to which the specified dedicated host can be resized.
+// NOTE: The dedicated host sizes provided can be used to only scale up the existing dedicated host.
+//
+// Generated from API version 2023-09-01
+//   - resourceGroupName - The name of the resource group.
+//   - hostGroupName - The name of the dedicated host group.
+//   - hostName - The name of the dedicated host.
+//   - options - DedicatedHostsClientListAvailableSizesOptions contains the optional parameters for the DedicatedHostsClient.NewListAvailableSizesPager
+//     method.
+func (client *DedicatedHostsClient) NewListAvailableSizesPager(resourceGroupName string, hostGroupName string, hostName string, options *DedicatedHostsClientListAvailableSizesOptions) *runtime.Pager[DedicatedHostsClientListAvailableSizesResponse] {
+	return runtime.NewPager(runtime.PagingHandler[DedicatedHostsClientListAvailableSizesResponse]{
+		More: func(page DedicatedHostsClientListAvailableSizesResponse) bool {
+			return false
+		},
+		Fetcher: func(ctx context.Context, page *DedicatedHostsClientListAvailableSizesResponse) (DedicatedHostsClientListAvailableSizesResponse, error) {
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DedicatedHostsClient.NewListAvailableSizesPager")
+			req, err := client.listAvailableSizesCreateRequest(ctx, resourceGroupName, hostGroupName, hostName, options)
+			if err != nil {
+				return DedicatedHostsClientListAvailableSizesResponse{}, err
+			}
+			resp, err := client.internal.Pipeline().Do(req)
+			if err != nil {
+				return DedicatedHostsClientListAvailableSizesResponse{}, err
+			}
+			if !runtime.HasStatusCode(resp, http.StatusOK) {
+				return DedicatedHostsClientListAvailableSizesResponse{}, runtime.NewResponseError(resp)
+			}
+			return client.listAvailableSizesHandleResponse(resp)
+		},
+		Tracer: client.internal.Tracer(),
+	})
+}
+
+// listAvailableSizesCreateRequest creates the ListAvailableSizes request.
+func (client *DedicatedHostsClient) listAvailableSizesCreateRequest(ctx context.Context, resourceGroupName string, hostGroupName string, hostName string, options *DedicatedHostsClientListAvailableSizesOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}/hosts/{hostName}/hostSizes"
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if hostGroupName == "" {
+		return nil, errors.New("parameter hostGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{hostGroupName}", url.PathEscape(hostGroupName))
+	if hostName == "" {
+		return nil, errors.New("parameter hostName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{hostName}", url.PathEscape(hostName))
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	req, err := runtime.NewRequest(ctx, http.MethodGet, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-09-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	return req, nil
+}
+
+// listAvailableSizesHandleResponse handles the ListAvailableSizes response.
+func (client *DedicatedHostsClient) listAvailableSizesHandleResponse(resp *http.Response) (DedicatedHostsClientListAvailableSizesResponse, error) {
+	result := DedicatedHostsClientListAvailableSizesResponse{}
+	if err := runtime.UnmarshalAsJSON(resp, &result.DedicatedHostSizeListResult); err != nil {
+		return DedicatedHostsClientListAvailableSizesResponse{}, err
+	}
+	return result, nil
+}
+
 // NewListByHostGroupPager - Lists all of the dedicated hosts in the specified dedicated host group. Use the nextLink property
 // in the response to get the next page of dedicated hosts.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - hostGroupName - The name of the dedicated host group.
 //   - options - DedicatedHostsClientListByHostGroupOptions contains the optional parameters for the DedicatedHostsClient.NewListByHostGroupPager
@@ -265,25 +368,20 @@ func (client *DedicatedHostsClient) NewListByHostGroupPager(resourceGroupName st
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DedicatedHostsClientListByHostGroupResponse) (DedicatedHostsClientListByHostGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByHostGroupCreateRequest(ctx, resourceGroupName, hostGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DedicatedHostsClient.NewListByHostGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByHostGroupCreateRequest(ctx, resourceGroupName, hostGroupName, options)
+			}, nil)
 			if err != nil {
 				return DedicatedHostsClientListByHostGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return DedicatedHostsClientListByHostGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DedicatedHostsClientListByHostGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByHostGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -307,7 +405,7 @@ func (client *DedicatedHostsClient) listByHostGroupCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -322,13 +420,100 @@ func (client *DedicatedHostsClient) listByHostGroupHandleResponse(resp *http.Res
 	return result, nil
 }
 
+// BeginRedeploy - Redeploy the dedicated host. The operation will complete successfully once the dedicated host has migrated
+// to a new node and is running. To determine the health of VMs deployed on the dedicated host
+// after the redeploy check the Resource Health Center in the Azure Portal. Please refer to https://docs.microsoft.com/azure/service-health/resource-health-overview
+// for more details.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+//   - resourceGroupName - The name of the resource group.
+//   - hostGroupName - The name of the dedicated host group.
+//   - hostName - The name of the dedicated host.
+//   - options - DedicatedHostsClientBeginRedeployOptions contains the optional parameters for the DedicatedHostsClient.BeginRedeploy
+//     method.
+func (client *DedicatedHostsClient) BeginRedeploy(ctx context.Context, resourceGroupName string, hostGroupName string, hostName string, options *DedicatedHostsClientBeginRedeployOptions) (*runtime.Poller[DedicatedHostsClientRedeployResponse], error) {
+	if options == nil || options.ResumeToken == "" {
+		resp, err := client.redeploy(ctx, resourceGroupName, hostGroupName, hostName, options)
+		if err != nil {
+			return nil, err
+		}
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DedicatedHostsClientRedeployResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
+	} else {
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DedicatedHostsClientRedeployResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+	}
+}
+
+// Redeploy - Redeploy the dedicated host. The operation will complete successfully once the dedicated host has migrated to
+// a new node and is running. To determine the health of VMs deployed on the dedicated host
+// after the redeploy check the Resource Health Center in the Azure Portal. Please refer to https://docs.microsoft.com/azure/service-health/resource-health-overview
+// for more details.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+func (client *DedicatedHostsClient) redeploy(ctx context.Context, resourceGroupName string, hostGroupName string, hostName string, options *DedicatedHostsClientBeginRedeployOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DedicatedHostsClient.BeginRedeploy"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	req, err := client.redeployCreateRequest(ctx, resourceGroupName, hostGroupName, hostName, options)
+	if err != nil {
+		return nil, err
+	}
+	httpResp, err := client.internal.Pipeline().Do(req)
+	if err != nil {
+		return nil, err
+	}
+	if !runtime.HasStatusCode(httpResp, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
+	}
+	return httpResp, nil
+}
+
+// redeployCreateRequest creates the Redeploy request.
+func (client *DedicatedHostsClient) redeployCreateRequest(ctx context.Context, resourceGroupName string, hostGroupName string, hostName string, options *DedicatedHostsClientBeginRedeployOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}/hosts/{hostName}/redeploy"
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if hostGroupName == "" {
+		return nil, errors.New("parameter hostGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{hostGroupName}", url.PathEscape(hostGroupName))
+	if hostName == "" {
+		return nil, errors.New("parameter hostName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{hostName}", url.PathEscape(hostName))
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	req, err := runtime.NewRequest(ctx, http.MethodPost, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-09-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	return req, nil
+}
+
 // BeginRestart - Restart the dedicated host. The operation will complete successfully once the dedicated host has restarted
 // and is running. To determine the health of VMs deployed on the dedicated host after the
 // restart check the Resource Health Center in the Azure Portal. Please refer to https://docs.microsoft.com/azure/service-health/resource-health-overview
 // for more details.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - hostGroupName - The name of the dedicated host group.
 //   - hostName - The name of the dedicated host.
@@ -340,9 +525,14 @@ func (client *DedicatedHostsClient) BeginRestart(ctx context.Context, resourceGr
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DedicatedHostsClientRestartResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DedicatedHostsClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DedicatedHostsClientRestartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DedicatedHostsClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -352,20 +542,26 @@ func (client *DedicatedHostsClient) BeginRestart(ctx context.Context, resourceGr
 // for more details.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *DedicatedHostsClient) restart(ctx context.Context, resourceGroupName string, hostGroupName string, hostName string, options *DedicatedHostsClientBeginRestartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DedicatedHostsClient.BeginRestart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.restartCreateRequest(ctx, resourceGroupName, hostGroupName, hostName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // restartCreateRequest creates the Restart request.
@@ -392,16 +588,16 @@ func (client *DedicatedHostsClient) restartCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
 }
 
-// BeginUpdate - Update an dedicated host .
+// BeginUpdate - Update a dedicated host .
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - hostGroupName - The name of the dedicated host group.
 //   - hostName - The name of the dedicated host .
@@ -414,29 +610,40 @@ func (client *DedicatedHostsClient) BeginUpdate(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DedicatedHostsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DedicatedHostsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DedicatedHostsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DedicatedHostsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
-// Update - Update an dedicated host .
+// Update - Update a dedicated host .
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *DedicatedHostsClient) update(ctx context.Context, resourceGroupName string, hostGroupName string, hostName string, parameters DedicatedHostUpdate, options *DedicatedHostsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DedicatedHostsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, hostGroupName, hostName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -463,8 +670,11 @@ func (client *DedicatedHostsClient) updateCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/diskaccesses_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskaccesses_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/diskaccesses_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskaccesses_client.go
index 4c0e205530e..b189a03400d 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/diskaccesses_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskaccesses_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type DiskAccessesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewDiskAccessesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*DiskAccessesClient, error) {
-	cl, err := arm.NewClient(moduleName+".DiskAccessesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewDiskAccessesClient(subscriptionID string, credential azcore.TokenCredent
 // BeginCreateOrUpdate - Creates or updates a disk access resource
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskAccessName - The name of the disk access resource that is being created. The name can't be changed after the disk encryption
 //     set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The
@@ -62,29 +61,40 @@ func (client *DiskAccessesClient) BeginCreateOrUpdate(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DiskAccessesClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskAccessesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DiskAccessesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DiskAccessesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a disk access resource
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DiskAccessesClient) createOrUpdate(ctx context.Context, resourceGroupName string, diskAccessName string, diskAccess DiskAccess, options *DiskAccessesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DiskAccessesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, diskAccessName, diskAccess, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +117,19 @@ func (client *DiskAccessesClient) createOrUpdateCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, diskAccess)
+	if err := runtime.MarshalAsJSON(req, diskAccess); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a disk access resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskAccessName - The name of the disk access resource that is being created. The name can't be changed after the disk encryption
 //     set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The
@@ -129,29 +142,40 @@ func (client *DiskAccessesClient) BeginDelete(ctx context.Context, resourceGroup
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DiskAccessesClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskAccessesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DiskAccessesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DiskAccessesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a disk access resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DiskAccessesClient) deleteOperation(ctx context.Context, resourceGroupName string, diskAccessName string, options *DiskAccessesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DiskAccessesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, diskAccessName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +198,7 @@ func (client *DiskAccessesClient) deleteCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,7 +207,7 @@ func (client *DiskAccessesClient) deleteCreateRequest(ctx context.Context, resou
 // BeginDeleteAPrivateEndpointConnection - Deletes a private endpoint connection under a disk access resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskAccessName - The name of the disk access resource that is being created. The name can't be changed after the disk encryption
 //     set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The
@@ -197,29 +221,40 @@ func (client *DiskAccessesClient) BeginDeleteAPrivateEndpointConnection(ctx cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DiskAccessesClientDeleteAPrivateEndpointConnectionResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskAccessesClientDeleteAPrivateEndpointConnectionResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DiskAccessesClientDeleteAPrivateEndpointConnectionResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DiskAccessesClientDeleteAPrivateEndpointConnectionResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // DeleteAPrivateEndpointConnection - Deletes a private endpoint connection under a disk access resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DiskAccessesClient) deleteAPrivateEndpointConnection(ctx context.Context, resourceGroupName string, diskAccessName string, privateEndpointConnectionName string, options *DiskAccessesClientBeginDeleteAPrivateEndpointConnectionOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DiskAccessesClient.BeginDeleteAPrivateEndpointConnection"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteAPrivateEndpointConnectionCreateRequest(ctx, resourceGroupName, diskAccessName, privateEndpointConnectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteAPrivateEndpointConnectionCreateRequest creates the DeleteAPrivateEndpointConnection request.
@@ -246,7 +281,7 @@ func (client *DiskAccessesClient) deleteAPrivateEndpointConnectionCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,25 +290,32 @@ func (client *DiskAccessesClient) deleteAPrivateEndpointConnectionCreateRequest(
 // Get - Gets information about a disk access resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskAccessName - The name of the disk access resource that is being created. The name can't be changed after the disk encryption
 //     set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The
 //     maximum name length is 80 characters.
 //   - options - DiskAccessesClientGetOptions contains the optional parameters for the DiskAccessesClient.Get method.
 func (client *DiskAccessesClient) Get(ctx context.Context, resourceGroupName string, diskAccessName string, options *DiskAccessesClientGetOptions) (DiskAccessesClientGetResponse, error) {
+	var err error
+	const operationName = "DiskAccessesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, diskAccessName, options)
 	if err != nil {
 		return DiskAccessesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DiskAccessesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DiskAccessesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DiskAccessesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -296,7 +338,7 @@ func (client *DiskAccessesClient) getCreateRequest(ctx context.Context, resource
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -314,7 +356,7 @@ func (client *DiskAccessesClient) getHandleResponse(resp *http.Response) (DiskAc
 // GetAPrivateEndpointConnection - Gets information about a private endpoint connection under a disk access resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskAccessName - The name of the disk access resource that is being created. The name can't be changed after the disk encryption
 //     set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The
@@ -323,18 +365,25 @@ func (client *DiskAccessesClient) getHandleResponse(resp *http.Response) (DiskAc
 //   - options - DiskAccessesClientGetAPrivateEndpointConnectionOptions contains the optional parameters for the DiskAccessesClient.GetAPrivateEndpointConnection
 //     method.
 func (client *DiskAccessesClient) GetAPrivateEndpointConnection(ctx context.Context, resourceGroupName string, diskAccessName string, privateEndpointConnectionName string, options *DiskAccessesClientGetAPrivateEndpointConnectionOptions) (DiskAccessesClientGetAPrivateEndpointConnectionResponse, error) {
+	var err error
+	const operationName = "DiskAccessesClient.GetAPrivateEndpointConnection"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getAPrivateEndpointConnectionCreateRequest(ctx, resourceGroupName, diskAccessName, privateEndpointConnectionName, options)
 	if err != nil {
 		return DiskAccessesClientGetAPrivateEndpointConnectionResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DiskAccessesClientGetAPrivateEndpointConnectionResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DiskAccessesClientGetAPrivateEndpointConnectionResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DiskAccessesClientGetAPrivateEndpointConnectionResponse{}, err
 	}
-	return client.getAPrivateEndpointConnectionHandleResponse(resp)
+	resp, err := client.getAPrivateEndpointConnectionHandleResponse(httpResp)
+	return resp, err
 }
 
 // getAPrivateEndpointConnectionCreateRequest creates the GetAPrivateEndpointConnection request.
@@ -361,7 +410,7 @@ func (client *DiskAccessesClient) getAPrivateEndpointConnectionCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -379,7 +428,7 @@ func (client *DiskAccessesClient) getAPrivateEndpointConnectionHandleResponse(re
 // GetPrivateLinkResources - Gets the private link resources possible under disk access resource
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskAccessName - The name of the disk access resource that is being created. The name can't be changed after the disk encryption
 //     set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The
@@ -387,18 +436,25 @@ func (client *DiskAccessesClient) getAPrivateEndpointConnectionHandleResponse(re
 //   - options - DiskAccessesClientGetPrivateLinkResourcesOptions contains the optional parameters for the DiskAccessesClient.GetPrivateLinkResources
 //     method.
 func (client *DiskAccessesClient) GetPrivateLinkResources(ctx context.Context, resourceGroupName string, diskAccessName string, options *DiskAccessesClientGetPrivateLinkResourcesOptions) (DiskAccessesClientGetPrivateLinkResourcesResponse, error) {
+	var err error
+	const operationName = "DiskAccessesClient.GetPrivateLinkResources"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getPrivateLinkResourcesCreateRequest(ctx, resourceGroupName, diskAccessName, options)
 	if err != nil {
 		return DiskAccessesClientGetPrivateLinkResourcesResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DiskAccessesClientGetPrivateLinkResourcesResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DiskAccessesClientGetPrivateLinkResourcesResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DiskAccessesClientGetPrivateLinkResourcesResponse{}, err
 	}
-	return client.getPrivateLinkResourcesHandleResponse(resp)
+	resp, err := client.getPrivateLinkResourcesHandleResponse(httpResp)
+	return resp, err
 }
 
 // getPrivateLinkResourcesCreateRequest creates the GetPrivateLinkResources request.
@@ -421,7 +477,7 @@ func (client *DiskAccessesClient) getPrivateLinkResourcesCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -438,7 +494,7 @@ func (client *DiskAccessesClient) getPrivateLinkResourcesHandleResponse(resp *ht
 
 // NewListPager - Lists all the disk access resources under a subscription.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - options - DiskAccessesClientListOptions contains the optional parameters for the DiskAccessesClient.NewListPager method.
 func (client *DiskAccessesClient) NewListPager(options *DiskAccessesClientListOptions) *runtime.Pager[DiskAccessesClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[DiskAccessesClientListResponse]{
@@ -446,25 +502,20 @@ func (client *DiskAccessesClient) NewListPager(options *DiskAccessesClientListOp
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DiskAccessesClientListResponse) (DiskAccessesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return DiskAccessesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DiskAccessesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return DiskAccessesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DiskAccessesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -480,7 +531,7 @@ func (client *DiskAccessesClient) listCreateRequest(ctx context.Context, options
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -497,7 +548,7 @@ func (client *DiskAccessesClient) listHandleResponse(resp *http.Response) (DiskA
 
 // NewListByResourceGroupPager - Lists all the disk access resources under a resource group.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - options - DiskAccessesClientListByResourceGroupOptions contains the optional parameters for the DiskAccessesClient.NewListByResourceGroupPager
 //     method.
@@ -507,25 +558,20 @@ func (client *DiskAccessesClient) NewListByResourceGroupPager(resourceGroupName
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DiskAccessesClientListByResourceGroupResponse) (DiskAccessesClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DiskAccessesClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return DiskAccessesClientListByResourceGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return DiskAccessesClientListByResourceGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DiskAccessesClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -545,7 +591,7 @@ func (client *DiskAccessesClient) listByResourceGroupCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -562,7 +608,7 @@ func (client *DiskAccessesClient) listByResourceGroupHandleResponse(resp *http.R
 
 // NewListPrivateEndpointConnectionsPager - List information about private endpoint connections under a disk access resource
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskAccessName - The name of the disk access resource that is being created. The name can't be changed after the disk encryption
 //     set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The
@@ -575,25 +621,20 @@ func (client *DiskAccessesClient) NewListPrivateEndpointConnectionsPager(resourc
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DiskAccessesClientListPrivateEndpointConnectionsResponse) (DiskAccessesClientListPrivateEndpointConnectionsResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listPrivateEndpointConnectionsCreateRequest(ctx, resourceGroupName, diskAccessName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DiskAccessesClient.NewListPrivateEndpointConnectionsPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listPrivateEndpointConnectionsCreateRequest(ctx, resourceGroupName, diskAccessName, options)
+			}, nil)
 			if err != nil {
 				return DiskAccessesClientListPrivateEndpointConnectionsResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return DiskAccessesClientListPrivateEndpointConnectionsResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DiskAccessesClientListPrivateEndpointConnectionsResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listPrivateEndpointConnectionsHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -617,7 +658,7 @@ func (client *DiskAccessesClient) listPrivateEndpointConnectionsCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -635,7 +676,7 @@ func (client *DiskAccessesClient) listPrivateEndpointConnectionsHandleResponse(r
 // BeginUpdate - Updates (patches) a disk access resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskAccessName - The name of the disk access resource that is being created. The name can't be changed after the disk encryption
 //     set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The
@@ -649,29 +690,40 @@ func (client *DiskAccessesClient) BeginUpdate(ctx context.Context, resourceGroup
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DiskAccessesClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskAccessesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DiskAccessesClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DiskAccessesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Updates (patches) a disk access resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DiskAccessesClient) update(ctx context.Context, resourceGroupName string, diskAccessName string, diskAccess DiskAccessUpdate, options *DiskAccessesClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DiskAccessesClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, diskAccessName, diskAccess, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -694,17 +746,20 @@ func (client *DiskAccessesClient) updateCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, diskAccess)
+	if err := runtime.MarshalAsJSON(req, diskAccess); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginUpdateAPrivateEndpointConnection - Approve or reject a private endpoint connection under disk access resource, this
 // can't be used to create a new private endpoint connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskAccessName - The name of the disk access resource that is being created. The name can't be changed after the disk encryption
 //     set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The
@@ -720,9 +775,14 @@ func (client *DiskAccessesClient) BeginUpdateAPrivateEndpointConnection(ctx cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DiskAccessesClientUpdateAPrivateEndpointConnectionResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskAccessesClientUpdateAPrivateEndpointConnectionResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DiskAccessesClientUpdateAPrivateEndpointConnectionResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DiskAccessesClientUpdateAPrivateEndpointConnectionResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -730,20 +790,26 @@ func (client *DiskAccessesClient) BeginUpdateAPrivateEndpointConnection(ctx cont
 // be used to create a new private endpoint connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DiskAccessesClient) updateAPrivateEndpointConnection(ctx context.Context, resourceGroupName string, diskAccessName string, privateEndpointConnectionName string, privateEndpointConnection PrivateEndpointConnection, options *DiskAccessesClientBeginUpdateAPrivateEndpointConnectionOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DiskAccessesClient.BeginUpdateAPrivateEndpointConnection"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateAPrivateEndpointConnectionCreateRequest(ctx, resourceGroupName, diskAccessName, privateEndpointConnectionName, privateEndpointConnection, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateAPrivateEndpointConnectionCreateRequest creates the UpdateAPrivateEndpointConnection request.
@@ -770,8 +836,11 @@ func (client *DiskAccessesClient) updateAPrivateEndpointConnectionCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, privateEndpointConnection)
+	if err := runtime.MarshalAsJSON(req, privateEndpointConnection); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/diskencryptionsets_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskencryptionsets_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/diskencryptionsets_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskencryptionsets_client.go
index 05d1c3d1ce4..9306f9c0d7c 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/diskencryptionsets_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskencryptionsets_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type DiskEncryptionSetsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewDiskEncryptionSetsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*DiskEncryptionSetsClient, error) {
-	cl, err := arm.NewClient(moduleName+".DiskEncryptionSetsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewDiskEncryptionSetsClient(subscriptionID string, credential azcore.TokenC
 // BeginCreateOrUpdate - Creates or updates a disk encryption set
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskEncryptionSetName - The name of the disk encryption set that is being created. The name can't be changed after the
 //     disk encryption set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum
@@ -62,29 +61,40 @@ func (client *DiskEncryptionSetsClient) BeginCreateOrUpdate(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DiskEncryptionSetsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskEncryptionSetsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DiskEncryptionSetsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DiskEncryptionSetsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a disk encryption set
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DiskEncryptionSetsClient) createOrUpdate(ctx context.Context, resourceGroupName string, diskEncryptionSetName string, diskEncryptionSet DiskEncryptionSet, options *DiskEncryptionSetsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DiskEncryptionSetsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, diskEncryptionSetName, diskEncryptionSet, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +117,19 @@ func (client *DiskEncryptionSetsClient) createOrUpdateCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, diskEncryptionSet)
+	if err := runtime.MarshalAsJSON(req, diskEncryptionSet); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a disk encryption set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskEncryptionSetName - The name of the disk encryption set that is being created. The name can't be changed after the
 //     disk encryption set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum
@@ -129,29 +142,40 @@ func (client *DiskEncryptionSetsClient) BeginDelete(ctx context.Context, resourc
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DiskEncryptionSetsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskEncryptionSetsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DiskEncryptionSetsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DiskEncryptionSetsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a disk encryption set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DiskEncryptionSetsClient) deleteOperation(ctx context.Context, resourceGroupName string, diskEncryptionSetName string, options *DiskEncryptionSetsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DiskEncryptionSetsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, diskEncryptionSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +198,7 @@ func (client *DiskEncryptionSetsClient) deleteCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,25 +207,32 @@ func (client *DiskEncryptionSetsClient) deleteCreateRequest(ctx context.Context,
 // Get - Gets information about a disk encryption set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskEncryptionSetName - The name of the disk encryption set that is being created. The name can't be changed after the
 //     disk encryption set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum
 //     name length is 80 characters.
 //   - options - DiskEncryptionSetsClientGetOptions contains the optional parameters for the DiskEncryptionSetsClient.Get method.
 func (client *DiskEncryptionSetsClient) Get(ctx context.Context, resourceGroupName string, diskEncryptionSetName string, options *DiskEncryptionSetsClientGetOptions) (DiskEncryptionSetsClientGetResponse, error) {
+	var err error
+	const operationName = "DiskEncryptionSetsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, diskEncryptionSetName, options)
 	if err != nil {
 		return DiskEncryptionSetsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DiskEncryptionSetsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DiskEncryptionSetsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DiskEncryptionSetsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -224,7 +255,7 @@ func (client *DiskEncryptionSetsClient) getCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -241,7 +272,7 @@ func (client *DiskEncryptionSetsClient) getHandleResponse(resp *http.Response) (
 
 // NewListPager - Lists all the disk encryption sets under a subscription.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - options - DiskEncryptionSetsClientListOptions contains the optional parameters for the DiskEncryptionSetsClient.NewListPager
 //     method.
 func (client *DiskEncryptionSetsClient) NewListPager(options *DiskEncryptionSetsClientListOptions) *runtime.Pager[DiskEncryptionSetsClientListResponse] {
@@ -250,25 +281,20 @@ func (client *DiskEncryptionSetsClient) NewListPager(options *DiskEncryptionSets
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DiskEncryptionSetsClientListResponse) (DiskEncryptionSetsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DiskEncryptionSetsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return DiskEncryptionSetsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return DiskEncryptionSetsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DiskEncryptionSetsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -284,7 +310,7 @@ func (client *DiskEncryptionSetsClient) listCreateRequest(ctx context.Context, o
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -301,7 +327,7 @@ func (client *DiskEncryptionSetsClient) listHandleResponse(resp *http.Response)
 
 // NewListAssociatedResourcesPager - Lists all resources that are encrypted with this disk encryption set.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskEncryptionSetName - The name of the disk encryption set that is being created. The name can't be changed after the
 //     disk encryption set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum
@@ -314,25 +340,20 @@ func (client *DiskEncryptionSetsClient) NewListAssociatedResourcesPager(resource
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DiskEncryptionSetsClientListAssociatedResourcesResponse) (DiskEncryptionSetsClientListAssociatedResourcesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAssociatedResourcesCreateRequest(ctx, resourceGroupName, diskEncryptionSetName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return DiskEncryptionSetsClientListAssociatedResourcesResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DiskEncryptionSetsClient.NewListAssociatedResourcesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAssociatedResourcesCreateRequest(ctx, resourceGroupName, diskEncryptionSetName, options)
+			}, nil)
 			if err != nil {
 				return DiskEncryptionSetsClientListAssociatedResourcesResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DiskEncryptionSetsClientListAssociatedResourcesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAssociatedResourcesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -356,7 +377,7 @@ func (client *DiskEncryptionSetsClient) listAssociatedResourcesCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -373,7 +394,7 @@ func (client *DiskEncryptionSetsClient) listAssociatedResourcesHandleResponse(re
 
 // NewListByResourceGroupPager - Lists all the disk encryption sets under a resource group.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - options - DiskEncryptionSetsClientListByResourceGroupOptions contains the optional parameters for the DiskEncryptionSetsClient.NewListByResourceGroupPager
 //     method.
@@ -383,25 +404,20 @@ func (client *DiskEncryptionSetsClient) NewListByResourceGroupPager(resourceGrou
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DiskEncryptionSetsClientListByResourceGroupResponse) (DiskEncryptionSetsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return DiskEncryptionSetsClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DiskEncryptionSetsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return DiskEncryptionSetsClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DiskEncryptionSetsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -421,7 +437,7 @@ func (client *DiskEncryptionSetsClient) listByResourceGroupCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -439,7 +455,7 @@ func (client *DiskEncryptionSetsClient) listByResourceGroupHandleResponse(resp *
 // BeginUpdate - Updates (patches) a disk encryption set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskEncryptionSetName - The name of the disk encryption set that is being created. The name can't be changed after the
 //     disk encryption set is created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum
@@ -453,29 +469,40 @@ func (client *DiskEncryptionSetsClient) BeginUpdate(ctx context.Context, resourc
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DiskEncryptionSetsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskEncryptionSetsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DiskEncryptionSetsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DiskEncryptionSetsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Updates (patches) a disk encryption set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DiskEncryptionSetsClient) update(ctx context.Context, resourceGroupName string, diskEncryptionSetName string, diskEncryptionSet DiskEncryptionSetUpdate, options *DiskEncryptionSetsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DiskEncryptionSetsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, diskEncryptionSetName, diskEncryptionSet, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -498,8 +525,11 @@ func (client *DiskEncryptionSetsClient) updateCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, diskEncryptionSet)
+	if err := runtime.MarshalAsJSON(req, diskEncryptionSet); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/diskrestorepoint_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskrestorepoint_client.go
similarity index 82%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/diskrestorepoint_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskrestorepoint_client.go
index 73a56d912b0..54b5769575e 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/diskrestorepoint_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskrestorepoint_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type DiskRestorePointClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewDiskRestorePointClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*DiskRestorePointClient, error) {
-	cl, err := arm.NewClient(moduleName+".DiskRestorePointClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewDiskRestorePointClient(subscriptionID string, credential azcore.TokenCre
 // Get - Get disk restorePoint resource
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - restorePointCollectionName - The name of the restore point collection that the disk restore point belongs.
 //   - vmRestorePointName - The name of the vm restore point that the disk disk restore point belongs.
 //   - diskRestorePointName - The name of the disk restore point created.
 //   - options - DiskRestorePointClientGetOptions contains the optional parameters for the DiskRestorePointClient.Get method.
 func (client *DiskRestorePointClient) Get(ctx context.Context, resourceGroupName string, restorePointCollectionName string, vmRestorePointName string, diskRestorePointName string, options *DiskRestorePointClientGetOptions) (DiskRestorePointClientGetResponse, error) {
+	var err error
+	const operationName = "DiskRestorePointClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, restorePointCollectionName, vmRestorePointName, diskRestorePointName, options)
 	if err != nil {
 		return DiskRestorePointClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DiskRestorePointClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DiskRestorePointClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DiskRestorePointClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -97,7 +103,7 @@ func (client *DiskRestorePointClient) getCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -115,7 +121,7 @@ func (client *DiskRestorePointClient) getHandleResponse(resp *http.Response) (Di
 // BeginGrantAccess - Grants access to a diskRestorePoint.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - restorePointCollectionName - The name of the restore point collection that the disk restore point belongs.
 //   - vmRestorePointName - The name of the vm restore point that the disk disk restore point belongs.
@@ -129,31 +135,41 @@ func (client *DiskRestorePointClient) BeginGrantAccess(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskRestorePointClientGrantAccessResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskRestorePointClientGrantAccessResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DiskRestorePointClientGrantAccessResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DiskRestorePointClientGrantAccessResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GrantAccess - Grants access to a diskRestorePoint.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DiskRestorePointClient) grantAccess(ctx context.Context, resourceGroupName string, restorePointCollectionName string, vmRestorePointName string, diskRestorePointName string, grantAccessData GrantAccessData, options *DiskRestorePointClientBeginGrantAccessOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DiskRestorePointClient.BeginGrantAccess"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.grantAccessCreateRequest(ctx, resourceGroupName, restorePointCollectionName, vmRestorePointName, diskRestorePointName, grantAccessData, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // grantAccessCreateRequest creates the GrantAccess request.
@@ -184,15 +200,18 @@ func (client *DiskRestorePointClient) grantAccessCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, grantAccessData)
+	if err := runtime.MarshalAsJSON(req, grantAccessData); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // NewListByRestorePointPager - Lists diskRestorePoints under a vmRestorePoint.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - restorePointCollectionName - The name of the restore point collection that the disk restore point belongs.
 //   - vmRestorePointName - The name of the vm restore point that the disk disk restore point belongs.
@@ -204,25 +223,20 @@ func (client *DiskRestorePointClient) NewListByRestorePointPager(resourceGroupNa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DiskRestorePointClientListByRestorePointResponse) (DiskRestorePointClientListByRestorePointResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByRestorePointCreateRequest(ctx, resourceGroupName, restorePointCollectionName, vmRestorePointName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DiskRestorePointClient.NewListByRestorePointPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByRestorePointCreateRequest(ctx, resourceGroupName, restorePointCollectionName, vmRestorePointName, options)
+			}, nil)
 			if err != nil {
 				return DiskRestorePointClientListByRestorePointResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return DiskRestorePointClientListByRestorePointResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DiskRestorePointClientListByRestorePointResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByRestorePointHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -250,7 +264,7 @@ func (client *DiskRestorePointClient) listByRestorePointCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -268,7 +282,7 @@ func (client *DiskRestorePointClient) listByRestorePointHandleResponse(resp *htt
 // BeginRevokeAccess - Revokes access to a diskRestorePoint.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - restorePointCollectionName - The name of the restore point collection that the disk restore point belongs.
 //   - vmRestorePointName - The name of the vm restore point that the disk disk restore point belongs.
@@ -281,31 +295,41 @@ func (client *DiskRestorePointClient) BeginRevokeAccess(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskRestorePointClientRevokeAccessResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DiskRestorePointClientRevokeAccessResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DiskRestorePointClientRevokeAccessResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DiskRestorePointClientRevokeAccessResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // RevokeAccess - Revokes access to a diskRestorePoint.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DiskRestorePointClient) revokeAccess(ctx context.Context, resourceGroupName string, restorePointCollectionName string, vmRestorePointName string, diskRestorePointName string, options *DiskRestorePointClientBeginRevokeAccessOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DiskRestorePointClient.BeginRevokeAccess"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.revokeAccessCreateRequest(ctx, resourceGroupName, restorePointCollectionName, vmRestorePointName, diskRestorePointName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // revokeAccessCreateRequest creates the RevokeAccess request.
@@ -336,7 +360,7 @@ func (client *DiskRestorePointClient) revokeAccessCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/disks_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/disks_client.go
similarity index 75%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/disks_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/disks_client.go
index 9bbb442973a..854a8ffd68b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/disks_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/disks_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type DisksClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewDisksClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*DisksClient, error) {
-	cl, err := arm.NewClient(moduleName+".DisksClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewDisksClient(subscriptionID string, credential azcore.TokenCredential, op
 // BeginCreateOrUpdate - Creates or updates a disk.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskName - The name of the managed disk that is being created. The name can't be changed after the disk is created. Supported
 //     characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80
@@ -62,29 +61,40 @@ func (client *DisksClient) BeginCreateOrUpdate(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DisksClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DisksClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DisksClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DisksClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a disk.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DisksClient) createOrUpdate(ctx context.Context, resourceGroupName string, diskName string, disk Disk, options *DisksClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DisksClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, diskName, disk, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +117,19 @@ func (client *DisksClient) createOrUpdateCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, disk)
+	if err := runtime.MarshalAsJSON(req, disk); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a disk.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskName - The name of the managed disk that is being created. The name can't be changed after the disk is created. Supported
 //     characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80
@@ -128,29 +141,40 @@ func (client *DisksClient) BeginDelete(ctx context.Context, resourceGroupName st
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DisksClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DisksClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DisksClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DisksClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a disk.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DisksClient) deleteOperation(ctx context.Context, resourceGroupName string, diskName string, options *DisksClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DisksClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, diskName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -173,7 +197,7 @@ func (client *DisksClient) deleteCreateRequest(ctx context.Context, resourceGrou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	return req, nil
 }
@@ -181,25 +205,32 @@ func (client *DisksClient) deleteCreateRequest(ctx context.Context, resourceGrou
 // Get - Gets information about a disk.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskName - The name of the managed disk that is being created. The name can't be changed after the disk is created. Supported
 //     characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80
 //     characters.
 //   - options - DisksClientGetOptions contains the optional parameters for the DisksClient.Get method.
 func (client *DisksClient) Get(ctx context.Context, resourceGroupName string, diskName string, options *DisksClientGetOptions) (DisksClientGetResponse, error) {
+	var err error
+	const operationName = "DisksClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, diskName, options)
 	if err != nil {
 		return DisksClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DisksClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DisksClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DisksClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +253,7 @@ func (client *DisksClient) getCreateRequest(ctx context.Context, resourceGroupNa
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -240,7 +271,7 @@ func (client *DisksClient) getHandleResponse(resp *http.Response) (DisksClientGe
 // BeginGrantAccess - Grants access to a disk.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskName - The name of the managed disk that is being created. The name can't be changed after the disk is created. Supported
 //     characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80
@@ -253,31 +284,41 @@ func (client *DisksClient) BeginGrantAccess(ctx context.Context, resourceGroupNa
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DisksClientGrantAccessResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DisksClientGrantAccessResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DisksClientGrantAccessResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DisksClientGrantAccessResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GrantAccess - Grants access to a disk.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DisksClient) grantAccess(ctx context.Context, resourceGroupName string, diskName string, grantAccessData GrantAccessData, options *DisksClientBeginGrantAccessOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DisksClient.BeginGrantAccess"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.grantAccessCreateRequest(ctx, resourceGroupName, diskName, grantAccessData, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // grantAccessCreateRequest creates the GrantAccess request.
@@ -300,15 +341,18 @@ func (client *DisksClient) grantAccessCreateRequest(ctx context.Context, resourc
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, grantAccessData)
+	if err := runtime.MarshalAsJSON(req, grantAccessData); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // NewListPager - Lists all the disks under a subscription.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - options - DisksClientListOptions contains the optional parameters for the DisksClient.NewListPager method.
 func (client *DisksClient) NewListPager(options *DisksClientListOptions) *runtime.Pager[DisksClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[DisksClientListResponse]{
@@ -316,25 +360,20 @@ func (client *DisksClient) NewListPager(options *DisksClientListOptions) *runtim
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DisksClientListResponse) (DisksClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DisksClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return DisksClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return DisksClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DisksClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -350,7 +389,7 @@ func (client *DisksClient) listCreateRequest(ctx context.Context, options *Disks
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -367,7 +406,7 @@ func (client *DisksClient) listHandleResponse(resp *http.Response) (DisksClientL
 
 // NewListByResourceGroupPager - Lists all the disks under a resource group.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - options - DisksClientListByResourceGroupOptions contains the optional parameters for the DisksClient.NewListByResourceGroupPager
 //     method.
@@ -377,25 +416,20 @@ func (client *DisksClient) NewListByResourceGroupPager(resourceGroupName string,
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DisksClientListByResourceGroupResponse) (DisksClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return DisksClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DisksClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return DisksClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DisksClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -415,7 +449,7 @@ func (client *DisksClient) listByResourceGroupCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -433,7 +467,7 @@ func (client *DisksClient) listByResourceGroupHandleResponse(resp *http.Response
 // BeginRevokeAccess - Revokes access to a disk.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskName - The name of the managed disk that is being created. The name can't be changed after the disk is created. Supported
 //     characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80
@@ -445,31 +479,41 @@ func (client *DisksClient) BeginRevokeAccess(ctx context.Context, resourceGroupN
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DisksClientRevokeAccessResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DisksClientRevokeAccessResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DisksClientRevokeAccessResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DisksClientRevokeAccessResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // RevokeAccess - Revokes access to a disk.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DisksClient) revokeAccess(ctx context.Context, resourceGroupName string, diskName string, options *DisksClientBeginRevokeAccessOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DisksClient.BeginRevokeAccess"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.revokeAccessCreateRequest(ctx, resourceGroupName, diskName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // revokeAccessCreateRequest creates the RevokeAccess request.
@@ -492,7 +536,7 @@ func (client *DisksClient) revokeAccessCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	return req, nil
 }
@@ -500,7 +544,7 @@ func (client *DisksClient) revokeAccessCreateRequest(ctx context.Context, resour
 // BeginUpdate - Updates (patches) a disk.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - diskName - The name of the managed disk that is being created. The name can't be changed after the disk is created. Supported
 //     characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80
@@ -513,29 +557,40 @@ func (client *DisksClient) BeginUpdate(ctx context.Context, resourceGroupName st
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[DisksClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DisksClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DisksClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DisksClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Updates (patches) a disk.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *DisksClient) update(ctx context.Context, resourceGroupName string, diskName string, disk DiskUpdate, options *DisksClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DisksClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, diskName, disk, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -558,8 +613,11 @@ func (client *DisksClient) updateCreateRequest(ctx context.Context, resourceGrou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, disk)
+	if err := runtime.MarshalAsJSON(req, disk); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleries_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleries_client.go
similarity index 77%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleries_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleries_client.go
index 1faff1f6cd3..8fac494c787 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleries_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleries_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type GalleriesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewGalleriesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*GalleriesClient, error) {
-	cl, err := arm.NewClient(moduleName+".GalleriesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewGalleriesClient(subscriptionID string, credential azcore.TokenCredential
 // BeginCreateOrUpdate - Create or update a Shared Image Gallery.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery. The allowed characters are alphabets and numbers with dots and periods
 //     allowed in the middle. The maximum length is 80 characters.
@@ -61,29 +60,40 @@ func (client *GalleriesClient) BeginCreateOrUpdate(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleriesClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleriesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleriesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleriesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Create or update a Shared Image Gallery.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleriesClient) createOrUpdate(ctx context.Context, resourceGroupName string, galleryName string, gallery Gallery, options *GalleriesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleriesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, galleryName, gallery, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -106,16 +116,19 @@ func (client *GalleriesClient) createOrUpdateCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, gallery)
+	if err := runtime.MarshalAsJSON(req, gallery); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Delete a Shared Image Gallery.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery to be deleted.
 //   - options - GalleriesClientBeginDeleteOptions contains the optional parameters for the GalleriesClient.BeginDelete method.
@@ -125,29 +138,40 @@ func (client *GalleriesClient) BeginDelete(ctx context.Context, resourceGroupNam
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleriesClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleriesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleriesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleriesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Delete a Shared Image Gallery.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleriesClient) deleteOperation(ctx context.Context, resourceGroupName string, galleryName string, options *GalleriesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleriesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, galleryName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -170,7 +194,7 @@ func (client *GalleriesClient) deleteCreateRequest(ctx context.Context, resource
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -179,23 +203,30 @@ func (client *GalleriesClient) deleteCreateRequest(ctx context.Context, resource
 // Get - Retrieves information about a Shared Image Gallery.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery.
 //   - options - GalleriesClientGetOptions contains the optional parameters for the GalleriesClient.Get method.
 func (client *GalleriesClient) Get(ctx context.Context, resourceGroupName string, galleryName string, options *GalleriesClientGetOptions) (GalleriesClientGetResponse, error) {
+	var err error
+	const operationName = "GalleriesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, galleryName, options)
 	if err != nil {
 		return GalleriesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return GalleriesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return GalleriesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return GalleriesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -218,7 +249,7 @@ func (client *GalleriesClient) getCreateRequest(ctx context.Context, resourceGro
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	if options != nil && options.Select != nil {
 		reqQP.Set("$select", string(*options.Select))
 	}
@@ -241,7 +272,7 @@ func (client *GalleriesClient) getHandleResponse(resp *http.Response) (Galleries
 
 // NewListPager - List galleries under a subscription.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - options - GalleriesClientListOptions contains the optional parameters for the GalleriesClient.NewListPager method.
 func (client *GalleriesClient) NewListPager(options *GalleriesClientListOptions) *runtime.Pager[GalleriesClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[GalleriesClientListResponse]{
@@ -249,25 +280,20 @@ func (client *GalleriesClient) NewListPager(options *GalleriesClientListOptions)
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *GalleriesClientListResponse) (GalleriesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return GalleriesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "GalleriesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return GalleriesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return GalleriesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -283,7 +309,7 @@ func (client *GalleriesClient) listCreateRequest(ctx context.Context, options *G
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -300,7 +326,7 @@ func (client *GalleriesClient) listHandleResponse(resp *http.Response) (Gallerie
 
 // NewListByResourceGroupPager - List galleries under a resource group.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - options - GalleriesClientListByResourceGroupOptions contains the optional parameters for the GalleriesClient.NewListByResourceGroupPager
 //     method.
@@ -310,25 +336,20 @@ func (client *GalleriesClient) NewListByResourceGroupPager(resourceGroupName str
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *GalleriesClientListByResourceGroupResponse) (GalleriesClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "GalleriesClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return GalleriesClientListByResourceGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return GalleriesClientListByResourceGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return GalleriesClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -348,7 +369,7 @@ func (client *GalleriesClient) listByResourceGroupCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -366,7 +387,7 @@ func (client *GalleriesClient) listByResourceGroupHandleResponse(resp *http.Resp
 // BeginUpdate - Update a Shared Image Gallery.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery. The allowed characters are alphabets and numbers with dots and periods
 //     allowed in the middle. The maximum length is 80 characters.
@@ -378,29 +399,40 @@ func (client *GalleriesClient) BeginUpdate(ctx context.Context, resourceGroupNam
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleriesClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleriesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleriesClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleriesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Update a Shared Image Gallery.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleriesClient) update(ctx context.Context, resourceGroupName string, galleryName string, gallery GalleryUpdate, options *GalleriesClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleriesClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, galleryName, gallery, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -423,8 +455,11 @@ func (client *GalleriesClient) updateCreateRequest(ctx context.Context, resource
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, gallery)
+	if err := runtime.MarshalAsJSON(req, gallery); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryapplications_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryapplications_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryapplications_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryapplications_client.go
index 36ae2d7d969..1ebec623b45 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryapplications_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryapplications_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type GalleryApplicationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewGalleryApplicationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*GalleryApplicationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".GalleryApplicationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewGalleryApplicationsClient(subscriptionID string, credential azcore.Token
 // BeginCreateOrUpdate - Create or update a gallery Application Definition.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Application Gallery in which the Application Definition is to be created.
 //   - galleryApplicationName - The name of the gallery Application Definition to be created or updated. The allowed characters
@@ -63,29 +62,40 @@ func (client *GalleryApplicationsClient) BeginCreateOrUpdate(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryApplicationsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryApplicationsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryApplicationsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryApplicationsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Create or update a gallery Application Definition.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryApplicationsClient) createOrUpdate(ctx context.Context, resourceGroupName string, galleryName string, galleryApplicationName string, galleryApplication GalleryApplication, options *GalleryApplicationsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryApplicationsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, galleryName, galleryApplicationName, galleryApplication, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +122,19 @@ func (client *GalleryApplicationsClient) createOrUpdateCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, galleryApplication)
+	if err := runtime.MarshalAsJSON(req, galleryApplication); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Delete a gallery Application.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Application Gallery in which the Application Definition is to be deleted.
 //   - galleryApplicationName - The name of the gallery Application Definition to be deleted.
@@ -133,29 +146,40 @@ func (client *GalleryApplicationsClient) BeginDelete(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryApplicationsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryApplicationsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryApplicationsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryApplicationsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Delete a gallery Application.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryApplicationsClient) deleteOperation(ctx context.Context, resourceGroupName string, galleryName string, galleryApplicationName string, options *GalleryApplicationsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryApplicationsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, galleryName, galleryApplicationName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -182,7 +206,7 @@ func (client *GalleryApplicationsClient) deleteCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -191,24 +215,31 @@ func (client *GalleryApplicationsClient) deleteCreateRequest(ctx context.Context
 // Get - Retrieves information about a gallery Application Definition.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Application Gallery from which the Application Definitions are to be retrieved.
 //   - galleryApplicationName - The name of the gallery Application Definition to be retrieved.
 //   - options - GalleryApplicationsClientGetOptions contains the optional parameters for the GalleryApplicationsClient.Get method.
 func (client *GalleryApplicationsClient) Get(ctx context.Context, resourceGroupName string, galleryName string, galleryApplicationName string, options *GalleryApplicationsClientGetOptions) (GalleryApplicationsClientGetResponse, error) {
+	var err error
+	const operationName = "GalleryApplicationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, galleryName, galleryApplicationName, options)
 	if err != nil {
 		return GalleryApplicationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return GalleryApplicationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return GalleryApplicationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return GalleryApplicationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -235,7 +266,7 @@ func (client *GalleryApplicationsClient) getCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -252,7 +283,7 @@ func (client *GalleryApplicationsClient) getHandleResponse(resp *http.Response)
 
 // NewListByGalleryPager - List gallery Application Definitions in a gallery.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Application Gallery from which Application Definitions are to be listed.
 //   - options - GalleryApplicationsClientListByGalleryOptions contains the optional parameters for the GalleryApplicationsClient.NewListByGalleryPager
@@ -263,25 +294,20 @@ func (client *GalleryApplicationsClient) NewListByGalleryPager(resourceGroupName
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *GalleryApplicationsClientListByGalleryResponse) (GalleryApplicationsClientListByGalleryResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByGalleryCreateRequest(ctx, resourceGroupName, galleryName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return GalleryApplicationsClientListByGalleryResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "GalleryApplicationsClient.NewListByGalleryPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByGalleryCreateRequest(ctx, resourceGroupName, galleryName, options)
+			}, nil)
 			if err != nil {
 				return GalleryApplicationsClientListByGalleryResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return GalleryApplicationsClientListByGalleryResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByGalleryHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -305,7 +331,7 @@ func (client *GalleryApplicationsClient) listByGalleryCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -323,7 +349,7 @@ func (client *GalleryApplicationsClient) listByGalleryHandleResponse(resp *http.
 // BeginUpdate - Update a gallery Application Definition.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Application Gallery in which the Application Definition is to be updated.
 //   - galleryApplicationName - The name of the gallery Application Definition to be updated. The allowed characters are alphabets
@@ -338,29 +364,40 @@ func (client *GalleryApplicationsClient) BeginUpdate(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryApplicationsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryApplicationsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryApplicationsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryApplicationsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Update a gallery Application Definition.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryApplicationsClient) update(ctx context.Context, resourceGroupName string, galleryName string, galleryApplicationName string, galleryApplication GalleryApplicationUpdate, options *GalleryApplicationsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryApplicationsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, galleryName, galleryApplicationName, galleryApplication, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -387,8 +424,11 @@ func (client *GalleryApplicationsClient) updateCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, galleryApplication)
+	if err := runtime.MarshalAsJSON(req, galleryApplication); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryapplicationversions_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryapplicationversions_client.go
similarity index 82%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryapplicationversions_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryapplicationversions_client.go
index c9f3f47191d..3d885cb93e0 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryapplicationversions_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryapplicationversions_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type GalleryApplicationVersionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewGalleryApplicationVersionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*GalleryApplicationVersionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".GalleryApplicationVersionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewGalleryApplicationVersionsClient(subscriptionID string, credential azcor
 // BeginCreateOrUpdate - Create or update a gallery Application Version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Application Gallery in which the Application Definition resides.
 //   - galleryApplicationName - The name of the gallery Application Definition in which the Application Version is to be created.
@@ -64,29 +63,40 @@ func (client *GalleryApplicationVersionsClient) BeginCreateOrUpdate(ctx context.
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryApplicationVersionsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryApplicationVersionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryApplicationVersionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryApplicationVersionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Create or update a gallery Application Version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryApplicationVersionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, galleryName string, galleryApplicationName string, galleryApplicationVersionName string, galleryApplicationVersion GalleryApplicationVersion, options *GalleryApplicationVersionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryApplicationVersionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, galleryName, galleryApplicationName, galleryApplicationVersionName, galleryApplicationVersion, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -117,16 +127,19 @@ func (client *GalleryApplicationVersionsClient) createOrUpdateCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, galleryApplicationVersion)
+	if err := runtime.MarshalAsJSON(req, galleryApplicationVersion); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Delete a gallery Application Version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Application Gallery in which the Application Definition resides.
 //   - galleryApplicationName - The name of the gallery Application Definition in which the Application Version resides.
@@ -139,29 +152,40 @@ func (client *GalleryApplicationVersionsClient) BeginDelete(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryApplicationVersionsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryApplicationVersionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryApplicationVersionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryApplicationVersionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Delete a gallery Application Version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryApplicationVersionsClient) deleteOperation(ctx context.Context, resourceGroupName string, galleryName string, galleryApplicationName string, galleryApplicationVersionName string, options *GalleryApplicationVersionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryApplicationVersionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, galleryName, galleryApplicationName, galleryApplicationVersionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -192,7 +216,7 @@ func (client *GalleryApplicationVersionsClient) deleteCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -201,7 +225,7 @@ func (client *GalleryApplicationVersionsClient) deleteCreateRequest(ctx context.
 // Get - Retrieves information about a gallery Application Version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Application Gallery in which the Application Definition resides.
 //   - galleryApplicationName - The name of the gallery Application Definition in which the Application Version resides.
@@ -209,18 +233,25 @@ func (client *GalleryApplicationVersionsClient) deleteCreateRequest(ctx context.
 //   - options - GalleryApplicationVersionsClientGetOptions contains the optional parameters for the GalleryApplicationVersionsClient.Get
 //     method.
 func (client *GalleryApplicationVersionsClient) Get(ctx context.Context, resourceGroupName string, galleryName string, galleryApplicationName string, galleryApplicationVersionName string, options *GalleryApplicationVersionsClientGetOptions) (GalleryApplicationVersionsClientGetResponse, error) {
+	var err error
+	const operationName = "GalleryApplicationVersionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, galleryName, galleryApplicationName, galleryApplicationVersionName, options)
 	if err != nil {
 		return GalleryApplicationVersionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return GalleryApplicationVersionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return GalleryApplicationVersionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return GalleryApplicationVersionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -254,7 +285,7 @@ func (client *GalleryApplicationVersionsClient) getCreateRequest(ctx context.Con
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -271,7 +302,7 @@ func (client *GalleryApplicationVersionsClient) getHandleResponse(resp *http.Res
 
 // NewListByGalleryApplicationPager - List gallery Application Versions in a gallery Application Definition.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Application Gallery in which the Application Definition resides.
 //   - galleryApplicationName - The name of the Shared Application Gallery Application Definition from which the Application Versions
@@ -284,25 +315,20 @@ func (client *GalleryApplicationVersionsClient) NewListByGalleryApplicationPager
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *GalleryApplicationVersionsClientListByGalleryApplicationResponse) (GalleryApplicationVersionsClientListByGalleryApplicationResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByGalleryApplicationCreateRequest(ctx, resourceGroupName, galleryName, galleryApplicationName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return GalleryApplicationVersionsClientListByGalleryApplicationResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "GalleryApplicationVersionsClient.NewListByGalleryApplicationPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByGalleryApplicationCreateRequest(ctx, resourceGroupName, galleryName, galleryApplicationName, options)
+			}, nil)
 			if err != nil {
 				return GalleryApplicationVersionsClientListByGalleryApplicationResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return GalleryApplicationVersionsClientListByGalleryApplicationResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByGalleryApplicationHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -330,7 +356,7 @@ func (client *GalleryApplicationVersionsClient) listByGalleryApplicationCreateRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -348,7 +374,7 @@ func (client *GalleryApplicationVersionsClient) listByGalleryApplicationHandleRe
 // BeginUpdate - Update a gallery Application Version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Application Gallery in which the Application Definition resides.
 //   - galleryApplicationName - The name of the gallery Application Definition in which the Application Version is to be updated.
@@ -364,29 +390,40 @@ func (client *GalleryApplicationVersionsClient) BeginUpdate(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryApplicationVersionsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryApplicationVersionsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryApplicationVersionsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryApplicationVersionsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Update a gallery Application Version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryApplicationVersionsClient) update(ctx context.Context, resourceGroupName string, galleryName string, galleryApplicationName string, galleryApplicationVersionName string, galleryApplicationVersion GalleryApplicationVersionUpdate, options *GalleryApplicationVersionsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryApplicationVersionsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, galleryName, galleryApplicationName, galleryApplicationVersionName, galleryApplicationVersion, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -417,8 +454,11 @@ func (client *GalleryApplicationVersionsClient) updateCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, galleryApplicationVersion)
+	if err := runtime.MarshalAsJSON(req, galleryApplicationVersion); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryimages_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryimages_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryimages_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryimages_client.go
index bf438722757..6a684b3ed61 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryimages_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryimages_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type GalleryImagesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewGalleryImagesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*GalleryImagesClient, error) {
-	cl, err := arm.NewClient(moduleName+".GalleryImagesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewGalleryImagesClient(subscriptionID string, credential azcore.TokenCreden
 // BeginCreateOrUpdate - Create or update a gallery image definition.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery in which the Image Definition is to be created.
 //   - galleryImageName - The name of the gallery image definition to be created or updated. The allowed characters are alphabets
@@ -63,29 +62,40 @@ func (client *GalleryImagesClient) BeginCreateOrUpdate(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryImagesClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryImagesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryImagesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryImagesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Create or update a gallery image definition.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryImagesClient) createOrUpdate(ctx context.Context, resourceGroupName string, galleryName string, galleryImageName string, galleryImage GalleryImage, options *GalleryImagesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryImagesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, galleryName, galleryImageName, galleryImage, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +122,19 @@ func (client *GalleryImagesClient) createOrUpdateCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, galleryImage)
+	if err := runtime.MarshalAsJSON(req, galleryImage); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Delete a gallery image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery in which the Image Definition is to be deleted.
 //   - galleryImageName - The name of the gallery image definition to be deleted.
@@ -133,29 +146,40 @@ func (client *GalleryImagesClient) BeginDelete(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryImagesClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryImagesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryImagesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryImagesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Delete a gallery image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryImagesClient) deleteOperation(ctx context.Context, resourceGroupName string, galleryName string, galleryImageName string, options *GalleryImagesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryImagesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, galleryName, galleryImageName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -182,7 +206,7 @@ func (client *GalleryImagesClient) deleteCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -191,24 +215,31 @@ func (client *GalleryImagesClient) deleteCreateRequest(ctx context.Context, reso
 // Get - Retrieves information about a gallery image definition.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery from which the Image Definitions are to be retrieved.
 //   - galleryImageName - The name of the gallery image definition to be retrieved.
 //   - options - GalleryImagesClientGetOptions contains the optional parameters for the GalleryImagesClient.Get method.
 func (client *GalleryImagesClient) Get(ctx context.Context, resourceGroupName string, galleryName string, galleryImageName string, options *GalleryImagesClientGetOptions) (GalleryImagesClientGetResponse, error) {
+	var err error
+	const operationName = "GalleryImagesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, galleryName, galleryImageName, options)
 	if err != nil {
 		return GalleryImagesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return GalleryImagesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return GalleryImagesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return GalleryImagesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -235,7 +266,7 @@ func (client *GalleryImagesClient) getCreateRequest(ctx context.Context, resourc
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -252,7 +283,7 @@ func (client *GalleryImagesClient) getHandleResponse(resp *http.Response) (Galle
 
 // NewListByGalleryPager - List gallery image definitions in a gallery.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery from which Image Definitions are to be listed.
 //   - options - GalleryImagesClientListByGalleryOptions contains the optional parameters for the GalleryImagesClient.NewListByGalleryPager
@@ -263,25 +294,20 @@ func (client *GalleryImagesClient) NewListByGalleryPager(resourceGroupName strin
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *GalleryImagesClientListByGalleryResponse) (GalleryImagesClientListByGalleryResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByGalleryCreateRequest(ctx, resourceGroupName, galleryName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return GalleryImagesClientListByGalleryResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "GalleryImagesClient.NewListByGalleryPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByGalleryCreateRequest(ctx, resourceGroupName, galleryName, options)
+			}, nil)
 			if err != nil {
 				return GalleryImagesClientListByGalleryResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return GalleryImagesClientListByGalleryResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByGalleryHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -305,7 +331,7 @@ func (client *GalleryImagesClient) listByGalleryCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -323,7 +349,7 @@ func (client *GalleryImagesClient) listByGalleryHandleResponse(resp *http.Respon
 // BeginUpdate - Update a gallery image definition.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery in which the Image Definition is to be updated.
 //   - galleryImageName - The name of the gallery image definition to be updated. The allowed characters are alphabets and numbers
@@ -337,29 +363,40 @@ func (client *GalleryImagesClient) BeginUpdate(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryImagesClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryImagesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryImagesClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryImagesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Update a gallery image definition.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryImagesClient) update(ctx context.Context, resourceGroupName string, galleryName string, galleryImageName string, galleryImage GalleryImageUpdate, options *GalleryImagesClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryImagesClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, galleryName, galleryImageName, galleryImage, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -386,8 +423,11 @@ func (client *GalleryImagesClient) updateCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, galleryImage)
+	if err := runtime.MarshalAsJSON(req, galleryImage); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryimageversions_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryimageversions_client.go
similarity index 81%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryimageversions_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryimageversions_client.go
index 5854c87eebe..05f3cf3526b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/galleryimageversions_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryimageversions_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type GalleryImageVersionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewGalleryImageVersionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*GalleryImageVersionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".GalleryImageVersionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewGalleryImageVersionsClient(subscriptionID string, credential azcore.Toke
 // BeginCreateOrUpdate - Create or update a gallery image version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery in which the Image Definition resides.
 //   - galleryImageName - The name of the gallery image definition in which the Image Version is to be created.
@@ -64,29 +63,40 @@ func (client *GalleryImageVersionsClient) BeginCreateOrUpdate(ctx context.Contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryImageVersionsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryImageVersionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryImageVersionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryImageVersionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Create or update a gallery image version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryImageVersionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, galleryName string, galleryImageName string, galleryImageVersionName string, galleryImageVersion GalleryImageVersion, options *GalleryImageVersionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryImageVersionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, galleryName, galleryImageName, galleryImageVersionName, galleryImageVersion, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -117,16 +127,19 @@ func (client *GalleryImageVersionsClient) createOrUpdateCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, galleryImageVersion)
+	if err := runtime.MarshalAsJSON(req, galleryImageVersion); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Delete a gallery image version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery in which the Image Definition resides.
 //   - galleryImageName - The name of the gallery image definition in which the Image Version resides.
@@ -139,29 +152,40 @@ func (client *GalleryImageVersionsClient) BeginDelete(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryImageVersionsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryImageVersionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryImageVersionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryImageVersionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Delete a gallery image version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryImageVersionsClient) deleteOperation(ctx context.Context, resourceGroupName string, galleryName string, galleryImageName string, galleryImageVersionName string, options *GalleryImageVersionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryImageVersionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, galleryName, galleryImageName, galleryImageVersionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -192,7 +216,7 @@ func (client *GalleryImageVersionsClient) deleteCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -201,7 +225,7 @@ func (client *GalleryImageVersionsClient) deleteCreateRequest(ctx context.Contex
 // Get - Retrieves information about a gallery image version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery in which the Image Definition resides.
 //   - galleryImageName - The name of the gallery image definition in which the Image Version resides.
@@ -209,18 +233,25 @@ func (client *GalleryImageVersionsClient) deleteCreateRequest(ctx context.Contex
 //   - options - GalleryImageVersionsClientGetOptions contains the optional parameters for the GalleryImageVersionsClient.Get
 //     method.
 func (client *GalleryImageVersionsClient) Get(ctx context.Context, resourceGroupName string, galleryName string, galleryImageName string, galleryImageVersionName string, options *GalleryImageVersionsClientGetOptions) (GalleryImageVersionsClientGetResponse, error) {
+	var err error
+	const operationName = "GalleryImageVersionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, galleryName, galleryImageName, galleryImageVersionName, options)
 	if err != nil {
 		return GalleryImageVersionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return GalleryImageVersionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return GalleryImageVersionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return GalleryImageVersionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -254,7 +285,7 @@ func (client *GalleryImageVersionsClient) getCreateRequest(ctx context.Context,
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -271,7 +302,7 @@ func (client *GalleryImageVersionsClient) getHandleResponse(resp *http.Response)
 
 // NewListByGalleryImagePager - List gallery image versions in a gallery image definition.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery in which the Image Definition resides.
 //   - galleryImageName - The name of the Shared Image Gallery Image Definition from which the Image Versions are to be listed.
@@ -283,25 +314,20 @@ func (client *GalleryImageVersionsClient) NewListByGalleryImagePager(resourceGro
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *GalleryImageVersionsClientListByGalleryImageResponse) (GalleryImageVersionsClientListByGalleryImageResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByGalleryImageCreateRequest(ctx, resourceGroupName, galleryName, galleryImageName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return GalleryImageVersionsClientListByGalleryImageResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "GalleryImageVersionsClient.NewListByGalleryImagePager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByGalleryImageCreateRequest(ctx, resourceGroupName, galleryName, galleryImageName, options)
+			}, nil)
 			if err != nil {
 				return GalleryImageVersionsClientListByGalleryImageResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return GalleryImageVersionsClientListByGalleryImageResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByGalleryImageHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -329,7 +355,7 @@ func (client *GalleryImageVersionsClient) listByGalleryImageCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -347,7 +373,7 @@ func (client *GalleryImageVersionsClient) listByGalleryImageHandleResponse(resp
 // BeginUpdate - Update a gallery image version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery in which the Image Definition resides.
 //   - galleryImageName - The name of the gallery image definition in which the Image Version is to be updated.
@@ -363,29 +389,40 @@ func (client *GalleryImageVersionsClient) BeginUpdate(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GalleryImageVersionsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GalleryImageVersionsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GalleryImageVersionsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GalleryImageVersionsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Update a gallery image version.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GalleryImageVersionsClient) update(ctx context.Context, resourceGroupName string, galleryName string, galleryImageName string, galleryImageVersionName string, galleryImageVersion GalleryImageVersionUpdate, options *GalleryImageVersionsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GalleryImageVersionsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, galleryName, galleryImageName, galleryImageVersionName, galleryImageVersion, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -416,8 +453,11 @@ func (client *GalleryImageVersionsClient) updateCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, galleryImageVersion)
+	if err := runtime.MarshalAsJSON(req, galleryImageVersion); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/gallerysharingprofile_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/gallerysharingprofile_client.go
similarity index 77%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/gallerysharingprofile_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/gallerysharingprofile_client.go
index 1e6b646054a..28d024e9727 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/gallerysharingprofile_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/gallerysharingprofile_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type GallerySharingProfileClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewGallerySharingProfileClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*GallerySharingProfileClient, error) {
-	cl, err := arm.NewClient(moduleName+".GallerySharingProfileClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewGallerySharingProfileClient(subscriptionID string, credential azcore.Tok
 // BeginUpdate - Update sharing profile of a gallery.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - resourceGroupName - The name of the resource group.
 //   - galleryName - The name of the Shared Image Gallery.
 //   - sharingUpdate - Parameters supplied to the update gallery sharing profile.
@@ -60,29 +59,40 @@ func (client *GallerySharingProfileClient) BeginUpdate(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[GallerySharingProfileClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GallerySharingProfileClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GallerySharingProfileClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GallerySharingProfileClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Update sharing profile of a gallery.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 func (client *GallerySharingProfileClient) update(ctx context.Context, resourceGroupName string, galleryName string, sharingUpdate SharingUpdate, options *GallerySharingProfileClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GallerySharingProfileClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, galleryName, sharingUpdate, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -105,8 +115,11 @@ func (client *GallerySharingProfileClient) updateCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, sharingUpdate)
+	if err := runtime.MarshalAsJSON(req, sharingUpdate); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/images_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/images_client.go
similarity index 75%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/images_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/images_client.go
index e7b8c19b291..5c5ab8a9367 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/images_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/images_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type ImagesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewImagesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ImagesClient, error) {
-	cl, err := arm.NewClient(moduleName+".ImagesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewImagesClient(subscriptionID string, credential azcore.TokenCredential, o
 // BeginCreateOrUpdate - Create or update an image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - imageName - The name of the image.
 //   - parameters - Parameters supplied to the Create Image operation.
@@ -60,29 +59,40 @@ func (client *ImagesClient) BeginCreateOrUpdate(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[ImagesClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ImagesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ImagesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ImagesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Create or update an image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *ImagesClient) createOrUpdate(ctx context.Context, resourceGroupName string, imageName string, parameters Image, options *ImagesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ImagesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, imageName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -105,16 +115,19 @@ func (client *ImagesClient) createOrUpdateCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes an Image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - imageName - The name of the image.
 //   - options - ImagesClientBeginDeleteOptions contains the optional parameters for the ImagesClient.BeginDelete method.
@@ -124,29 +137,40 @@ func (client *ImagesClient) BeginDelete(ctx context.Context, resourceGroupName s
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[ImagesClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ImagesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ImagesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ImagesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes an Image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *ImagesClient) deleteOperation(ctx context.Context, resourceGroupName string, imageName string, options *ImagesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ImagesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, imageName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -169,7 +193,7 @@ func (client *ImagesClient) deleteCreateRequest(ctx context.Context, resourceGro
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -178,23 +202,30 @@ func (client *ImagesClient) deleteCreateRequest(ctx context.Context, resourceGro
 // Get - Gets an image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - imageName - The name of the image.
 //   - options - ImagesClientGetOptions contains the optional parameters for the ImagesClient.Get method.
 func (client *ImagesClient) Get(ctx context.Context, resourceGroupName string, imageName string, options *ImagesClientGetOptions) (ImagesClientGetResponse, error) {
+	var err error
+	const operationName = "ImagesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, imageName, options)
 	if err != nil {
 		return ImagesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ImagesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ImagesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ImagesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -220,7 +251,7 @@ func (client *ImagesClient) getCreateRequest(ctx context.Context, resourceGroupN
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -238,7 +269,7 @@ func (client *ImagesClient) getHandleResponse(resp *http.Response) (ImagesClient
 // NewListPager - Gets the list of Images in the subscription. Use nextLink property in the response to get the next page
 // of Images. Do this till nextLink is null to fetch all the Images.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - options - ImagesClientListOptions contains the optional parameters for the ImagesClient.NewListPager method.
 func (client *ImagesClient) NewListPager(options *ImagesClientListOptions) *runtime.Pager[ImagesClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[ImagesClientListResponse]{
@@ -246,25 +277,20 @@ func (client *ImagesClient) NewListPager(options *ImagesClientListOptions) *runt
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ImagesClientListResponse) (ImagesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ImagesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ImagesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ImagesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ImagesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -280,7 +306,7 @@ func (client *ImagesClient) listCreateRequest(ctx context.Context, options *Imag
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -295,9 +321,10 @@ func (client *ImagesClient) listHandleResponse(resp *http.Response) (ImagesClien
 	return result, nil
 }
 
-// NewListByResourceGroupPager - Gets the list of images under a resource group.
+// NewListByResourceGroupPager - Gets the list of images under a resource group. Use nextLink property in the response to
+// get the next page of Images. Do this till nextLink is null to fetch all the Images.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - ImagesClientListByResourceGroupOptions contains the optional parameters for the ImagesClient.NewListByResourceGroupPager
 //     method.
@@ -307,25 +334,20 @@ func (client *ImagesClient) NewListByResourceGroupPager(resourceGroupName string
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ImagesClientListByResourceGroupResponse) (ImagesClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ImagesClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return ImagesClientListByResourceGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ImagesClientListByResourceGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ImagesClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -345,7 +367,7 @@ func (client *ImagesClient) listByResourceGroupCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -363,7 +385,7 @@ func (client *ImagesClient) listByResourceGroupHandleResponse(resp *http.Respons
 // BeginUpdate - Update an image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - imageName - The name of the image.
 //   - parameters - Parameters supplied to the Update Image operation.
@@ -374,29 +396,40 @@ func (client *ImagesClient) BeginUpdate(ctx context.Context, resourceGroupName s
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[ImagesClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ImagesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ImagesClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ImagesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Update an image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *ImagesClient) update(ctx context.Context, resourceGroupName string, imageName string, parameters ImageUpdate, options *ImagesClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ImagesClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, imageName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -419,8 +452,11 @@ func (client *ImagesClient) updateCreateRequest(ctx context.Context, resourceGro
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/loganalytics_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/loganalytics_client.go
similarity index 74%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/loganalytics_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/loganalytics_client.go
index dc0dee2e82a..a48766ffd1b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/loganalytics_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/loganalytics_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type LogAnalyticsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewLogAnalyticsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*LogAnalyticsClient, error) {
-	cl, err := arm.NewClient(moduleName+".LogAnalyticsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewLogAnalyticsClient(subscriptionID string, credential azcore.TokenCredent
 // to show throttling activities.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The location upon which virtual-machine-sizes is queried.
 //   - parameters - Parameters supplied to the LogAnalytics getRequestRateByInterval Api.
 //   - options - LogAnalyticsClientBeginExportRequestRateByIntervalOptions contains the optional parameters for the LogAnalyticsClient.BeginExportRequestRateByInterval
@@ -60,11 +59,15 @@ func (client *LogAnalyticsClient) BeginExportRequestRateByInterval(ctx context.C
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LogAnalyticsClientExportRequestRateByIntervalResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LogAnalyticsClientExportRequestRateByIntervalResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[LogAnalyticsClientExportRequestRateByIntervalResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[LogAnalyticsClientExportRequestRateByIntervalResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -72,20 +75,26 @@ func (client *LogAnalyticsClient) BeginExportRequestRateByInterval(ctx context.C
 // show throttling activities.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *LogAnalyticsClient) exportRequestRateByInterval(ctx context.Context, location string, parameters RequestRateByIntervalInput, options *LogAnalyticsClientBeginExportRequestRateByIntervalOptions) (*http.Response, error) {
+	var err error
+	const operationName = "LogAnalyticsClient.BeginExportRequestRateByInterval"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.exportRequestRateByIntervalCreateRequest(ctx, location, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // exportRequestRateByIntervalCreateRequest creates the ExportRequestRateByInterval request.
@@ -104,17 +113,20 @@ func (client *LogAnalyticsClient) exportRequestRateByIntervalCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginExportThrottledRequests - Export logs that show total throttled Api requests for this subscription in the given time
 // window.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The location upon which virtual-machine-sizes is queried.
 //   - parameters - Parameters supplied to the LogAnalytics getThrottledRequests Api.
 //   - options - LogAnalyticsClientBeginExportThrottledRequestsOptions contains the optional parameters for the LogAnalyticsClient.BeginExportThrottledRequests
@@ -125,31 +137,41 @@ func (client *LogAnalyticsClient) BeginExportThrottledRequests(ctx context.Conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LogAnalyticsClientExportThrottledRequestsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LogAnalyticsClientExportThrottledRequestsResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[LogAnalyticsClientExportThrottledRequestsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[LogAnalyticsClientExportThrottledRequestsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // ExportThrottledRequests - Export logs that show total throttled Api requests for this subscription in the given time window.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *LogAnalyticsClient) exportThrottledRequests(ctx context.Context, location string, parameters ThrottledRequestsInput, options *LogAnalyticsClientBeginExportThrottledRequestsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "LogAnalyticsClient.BeginExportThrottledRequests"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.exportThrottledRequestsCreateRequest(ctx, location, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // exportThrottledRequestsCreateRequest creates the ExportThrottledRequests request.
@@ -168,8 +190,11 @@ func (client *LogAnalyticsClient) exportThrottledRequestsCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/models.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/models.go
similarity index 73%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/models.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/models.go
index 061236a13db..5b5a3197bab 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/models.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/models.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -102,18 +101,32 @@ type ApplicationProfile struct {
 	GalleryApplications []*VMGalleryApplication
 }
 
+// AttachDetachDataDisksRequest - Specifies the input for attaching and detaching a list of managed data disks.
+type AttachDetachDataDisksRequest struct {
+	// The list of managed data disks to be attached.
+	DataDisksToAttach []*DataDisksToAttach
+
+	// The list of managed data disks to be detached.
+	DataDisksToDetach []*DataDisksToDetach
+}
+
 // AutomaticOSUpgradePolicy - The configuration parameters used for performing automatic OS upgrade.
 type AutomaticOSUpgradePolicy struct {
 	// Whether OS image rollback feature should be disabled. Default value is false.
 	DisableAutomaticRollback *bool
 
 	// Indicates whether OS upgrades should automatically be applied to scale set instances in a rolling fashion when a newer
-	// version of the OS image becomes available. Default value is false.
-	// If this is set to true for Windows based scale sets, enableAutomaticUpdates
+	// version of the OS image becomes available. Default value is false. If this is set
+	// to true for Windows based scale sets, enableAutomaticUpdates
 	// [https://docs.microsoft.com/dotnet/api/microsoft.azure.management.compute.models.windowsconfiguration.enableautomaticupdates?view=azure-dotnet]
 	// is automatically set to false and cannot be set to true.
 	EnableAutomaticOSUpgrade *bool
 
+	// Indicates whether Auto OS Upgrade should undergo deferral. Deferred OS upgrades will send advanced notifications on a per-VM
+	// basis that an OS upgrade from rolling upgrades is incoming, via the IMDS
+	// tag 'Platform.PendingOSUpgrade'. The upgrade then defers until the upgrade is approved via an ApproveRollingUpgrade call.
+	OSRollingUpgradeDeferral *bool
+
 	// Indicates whether rolling upgrade policy should be used during Auto OS Upgrade. Default value is false. Auto OS Upgrade
 	// will fallback to the default policy if no policy is defined on the VMSS.
 	UseRollingUpgradePolicy *bool
@@ -145,9 +158,10 @@ type AutomaticRepairsPolicy struct {
 // AvailabilitySet - Specifies information about the availability set that the virtual machine should be assigned to. Virtual
 // machines specified in the same availability set are allocated to different nodes to maximize
 // availability. For more information about availability sets, see Availability sets overview [https://docs.microsoft.com/azure/virtual-machines/availability-set-overview].
-// For more information on Azure planned maintenance, see Maintenance and updates for Virtual Machines in Azure [https://docs.microsoft.com/azure/virtual-machines/maintenance-and-updates]
-// Currently, a VM can only be added to availability set at creation time. An existing VM cannot be added to an availability
-// set.
+// For more information on Azure
+// planned maintenance, see Maintenance and updates for Virtual Machines in Azure [https://docs.microsoft.com/azure/virtual-machines/maintenance-and-updates].
+// Currently, a VM can only be added to an
+// availability set at creation time. An existing VM cannot be added to an availability set.
 type AvailabilitySet struct {
 	// REQUIRED; Resource location
 	Location *string
@@ -190,8 +204,8 @@ type AvailabilitySetProperties struct {
 	// Update Domain count.
 	PlatformUpdateDomainCount *int32
 
-	// Specifies information about the proximity placement group that the availability set should be assigned to.
-	// Minimum api-version: 2018-04-01.
+	// Specifies information about the proximity placement group that the availability set should be assigned to. Minimum api-version:
+	// 2018-04-01.
 	ProximityPlacementGroup *SubResource
 
 	// A list of references to all virtual machines in the availability set.
@@ -214,45 +228,6 @@ type AvailabilitySetUpdate struct {
 	Tags map[string]*string
 }
 
-// AvailabilitySetsClientCreateOrUpdateOptions contains the optional parameters for the AvailabilitySetsClient.CreateOrUpdate
-// method.
-type AvailabilitySetsClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AvailabilitySetsClientDeleteOptions contains the optional parameters for the AvailabilitySetsClient.Delete method.
-type AvailabilitySetsClientDeleteOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AvailabilitySetsClientGetOptions contains the optional parameters for the AvailabilitySetsClient.Get method.
-type AvailabilitySetsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AvailabilitySetsClientListAvailableSizesOptions contains the optional parameters for the AvailabilitySetsClient.NewListAvailableSizesPager
-// method.
-type AvailabilitySetsClientListAvailableSizesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AvailabilitySetsClientListBySubscriptionOptions contains the optional parameters for the AvailabilitySetsClient.NewListBySubscriptionPager
-// method.
-type AvailabilitySetsClientListBySubscriptionOptions struct {
-	// The expand expression to apply to the operation. Allowed values are 'instanceView'.
-	Expand *string
-}
-
-// AvailabilitySetsClientListOptions contains the optional parameters for the AvailabilitySetsClient.NewListPager method.
-type AvailabilitySetsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AvailabilitySetsClientUpdateOptions contains the optional parameters for the AvailabilitySetsClient.Update method.
-type AvailabilitySetsClientUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
 // AvailablePatchSummary - Describes the properties of an virtual machine instance view for available patch summary.
 type AvailablePatchSummary struct {
 	// READ-ONLY; The activity ID of the operation that produced this result. It is used to correlate across CRP and extension
@@ -284,8 +259,7 @@ type AvailablePatchSummary struct {
 	Status *PatchOperationStatus
 }
 
-// BillingProfile - Specifies the billing related details of a Azure Spot VM or VMSS.
-// Minimum api-version: 2019-03-01.
+// BillingProfile - Specifies the billing related details of a Azure Spot VM or VMSS. Minimum api-version: 2019-03-01.
 type BillingProfile struct {
 	// Specifies the maximum price you are willing to pay for a Azure Spot VM/VMSS. This price is in US Dollars.
 	// This price will be compared with the current Azure Spot price for the VM size. Also, the prices are compared at the time
@@ -303,30 +277,29 @@ type BillingProfile struct {
 }
 
 // BootDiagnostics - Boot Diagnostics is a debugging feature which allows you to view Console Output and Screenshot to diagnose
-// VM status.
-// You can easily view the output of your console log.
-// Azure also enables you to see a screenshot of the VM from the hypervisor.
+// VM status. You can easily view the output of your console log. Azure also enables you to see
+// a screenshot of the VM from the hypervisor.
 type BootDiagnostics struct {
 	// Whether boot diagnostics should be enabled on the Virtual Machine.
 	Enabled *bool
 
-	// Uri of the storage account to use for placing the console output and screenshot.
-	// If storageUri is not specified while enabling boot diagnostics, managed storage will be used.
+	// Uri of the storage account to use for placing the console output and screenshot. If storageUri is not specified while enabling
+	// boot diagnostics, managed storage will be used.
 	StorageURI *string
 }
 
 // BootDiagnosticsInstanceView - The instance view of a virtual machine boot diagnostics.
 type BootDiagnosticsInstanceView struct {
-	// READ-ONLY; The console screenshot blob URI.
-	// NOTE: This will not be set if boot diagnostics is currently enabled with managed storage.
+	// READ-ONLY; The console screenshot blob URI. Note: This will not be set if boot diagnostics is currently enabled with managed
+	// storage.
 	ConsoleScreenshotBlobURI *string
 
-	// READ-ONLY; The serial console log blob Uri.
-	// NOTE: This will not be set if boot diagnostics is currently enabled with managed storage.
+	// READ-ONLY; The serial console log blob Uri. Note: This will not be set if boot diagnostics is currently enabled with managed
+	// storage.
 	SerialConsoleLogBlobURI *string
 
-	// READ-ONLY; The boot diagnostics status information for the VM.
-	// NOTE: It will be set only if there are errors encountered in enabling boot diagnostics.
+	// READ-ONLY; The boot diagnostics status information for the VM. Note: It will be set only if there are errors encountered
+	// in enabling boot diagnostics.
 	Status *InstanceViewStatus
 }
 
@@ -364,9 +337,8 @@ type CapacityReservation struct {
 }
 
 // CapacityReservationGroup - Specifies information about the capacity reservation group that the capacity reservations should
-// be assigned to.
-// Currently, a capacity reservation can only be added to a capacity reservation group at creation time. An existing capacity
-// reservation cannot be added or moved to another capacity reservation group.
+// be assigned to. Currently, a capacity reservation can only be added to a capacity reservation group at
+// creation time. An existing capacity reservation cannot be added or moved to another capacity reservation group.
 type CapacityReservationGroup struct {
 	// REQUIRED; Resource location
 	Location *string
@@ -395,6 +367,10 @@ type CapacityReservationGroup struct {
 type CapacityReservationGroupInstanceView struct {
 	// READ-ONLY; List of instance view of the capacity reservations under the capacity reservation group.
 	CapacityReservations []*CapacityReservationInstanceViewWithName
+
+	// READ-ONLY; List of the subscriptions that the capacity reservation group is shared with. Note: Minimum api-version: 2023-09-01.
+	// Please refer to https://aka.ms/computereservationsharing for more details.
+	SharedSubscriptionIDs []*SubResourceReadOnly
 }
 
 // CapacityReservationGroupListResult - The List capacity reservation group with resource group response.
@@ -409,6 +385,13 @@ type CapacityReservationGroupListResult struct {
 
 // CapacityReservationGroupProperties - capacity reservation group Properties.
 type CapacityReservationGroupProperties struct {
+	// Specifies the settings to enable sharing across subscriptions for the capacity reservation group resource. Pls. keep in
+	// mind the capacity reservation group resource generally can be shared across
+	// subscriptions belonging to a single azure AAD tenant or cross AAD tenant if there is a trust relationship established between
+	// the AAD tenants. Note: Minimum api-version: 2023-09-01. Please refer to
+	// https://aka.ms/computereservationsharing for more details.
+	SharingProfile *ResourceSharingProfile
+
 	// READ-ONLY; A list of all capacity reservation resource ids that belong to capacity reservation group.
 	CapacityReservations []*SubResourceReadOnly
 
@@ -429,51 +412,6 @@ type CapacityReservationGroupUpdate struct {
 	Tags map[string]*string
 }
 
-// CapacityReservationGroupsClientCreateOrUpdateOptions contains the optional parameters for the CapacityReservationGroupsClient.CreateOrUpdate
-// method.
-type CapacityReservationGroupsClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CapacityReservationGroupsClientDeleteOptions contains the optional parameters for the CapacityReservationGroupsClient.Delete
-// method.
-type CapacityReservationGroupsClientDeleteOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CapacityReservationGroupsClientGetOptions contains the optional parameters for the CapacityReservationGroupsClient.Get
-// method.
-type CapacityReservationGroupsClientGetOptions struct {
-	// The expand expression to apply on the operation. 'InstanceView' will retrieve the list of instance views of the capacity
-	// reservations under the capacity reservation group which is a snapshot of the
-	// runtime properties of a capacity reservation that is managed by the platform and can change outside of control plane operations.
-	Expand *CapacityReservationGroupInstanceViewTypes
-}
-
-// CapacityReservationGroupsClientListByResourceGroupOptions contains the optional parameters for the CapacityReservationGroupsClient.NewListByResourceGroupPager
-// method.
-type CapacityReservationGroupsClientListByResourceGroupOptions struct {
-	// The expand expression to apply on the operation. Based on the expand param(s) specified we return Virtual Machine or ScaleSet
-	// VM Instance or both resource Ids which are associated to capacity
-	// reservation group in the response.
-	Expand *ExpandTypesForGetCapacityReservationGroups
-}
-
-// CapacityReservationGroupsClientListBySubscriptionOptions contains the optional parameters for the CapacityReservationGroupsClient.NewListBySubscriptionPager
-// method.
-type CapacityReservationGroupsClientListBySubscriptionOptions struct {
-	// The expand expression to apply on the operation. Based on the expand param(s) specified we return Virtual Machine or ScaleSet
-	// VM Instance or both resource Ids which are associated to capacity
-	// reservation group in the response.
-	Expand *ExpandTypesForGetCapacityReservationGroups
-}
-
-// CapacityReservationGroupsClientUpdateOptions contains the optional parameters for the CapacityReservationGroupsClient.Update
-// method.
-type CapacityReservationGroupsClientUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
 // CapacityReservationInstanceView - The instance view of a capacity reservation that provides as snapshot of the runtime
 // properties of the capacity reservation that is managed by the platform and can change outside of control plane
 // operations.
@@ -521,10 +459,9 @@ type CapacityReservationProperties struct {
 	// READ-ONLY; The Capacity reservation instance view.
 	InstanceView *CapacityReservationInstanceView
 
-	// READ-ONLY; Specifies the value of fault domain count that Capacity Reservation supports for requested VM size.
-	// NOTE: The fault domain count specified for a resource (like virtual machines scale set) must be less than or equal to this
-	// value if it deploys using capacity reservation.
-	// Minimum api-version: 2022-08-01.
+	// READ-ONLY; Specifies the value of fault domain count that Capacity Reservation supports for requested VM size. Note: The
+	// fault domain count specified for a resource (like virtual machines scale set) must be less
+	// than or equal to this value if it deploys using capacity reservation. Minimum api-version: 2022-08-01.
 	PlatformFaultDomainCount *int32
 
 	// READ-ONLY; The provisioning state, which only appears in the response.
@@ -537,8 +474,7 @@ type CapacityReservationProperties struct {
 	// the lifetime of the resource.
 	ReservationID *string
 
-	// READ-ONLY; Specifies the time at which the Capacity Reservation resource was created.
-	// Minimum api-version: 2021-11-01.
+	// READ-ONLY; Specifies the time at which the Capacity Reservation resource was created. Minimum api-version: 2021-11-01.
 	TimeCreated *time.Time
 
 	// READ-ONLY; A list of all virtual machine resource ids that are associated with the capacity reservation.
@@ -563,49 +499,13 @@ type CapacityReservationUpdate struct {
 // CapacityReservationUtilization - Represents the capacity reservation utilization in terms of resources allocated.
 type CapacityReservationUtilization struct {
 	// READ-ONLY; The value provides the current capacity of the VM size which was reserved successfully and for which the customer
-	// is getting billed.
-	// Minimum api-version: 2022-08-01.
+	// is getting billed. Minimum api-version: 2022-08-01.
 	CurrentCapacity *int32
 
 	// READ-ONLY; A list of all virtual machines resource ids allocated against the capacity reservation.
 	VirtualMachinesAllocated []*SubResourceReadOnly
 }
 
-// CapacityReservationsClientBeginCreateOrUpdateOptions contains the optional parameters for the CapacityReservationsClient.BeginCreateOrUpdate
-// method.
-type CapacityReservationsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CapacityReservationsClientBeginDeleteOptions contains the optional parameters for the CapacityReservationsClient.BeginDelete
-// method.
-type CapacityReservationsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CapacityReservationsClientBeginUpdateOptions contains the optional parameters for the CapacityReservationsClient.BeginUpdate
-// method.
-type CapacityReservationsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CapacityReservationsClientGetOptions contains the optional parameters for the CapacityReservationsClient.Get method.
-type CapacityReservationsClientGetOptions struct {
-	// The expand expression to apply on the operation. 'InstanceView' retrieves a snapshot of the runtime properties of the capacity
-	// reservation that is managed by the platform and can change outside of
-	// control plane operations.
-	Expand *CapacityReservationInstanceViewTypes
-}
-
-// CapacityReservationsClientListByCapacityReservationGroupOptions contains the optional parameters for the CapacityReservationsClient.NewListByCapacityReservationGroupPager
-// method.
-type CapacityReservationsClientListByCapacityReservationGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
 // CloudService - Describes the cloud service.
 type CloudService struct {
 	// REQUIRED; Resource location.
@@ -729,30 +629,6 @@ type CloudServiceNetworkProfile struct {
 	SwappableCloudService *SubResource
 }
 
-// CloudServiceOperatingSystemsClientGetOSFamilyOptions contains the optional parameters for the CloudServiceOperatingSystemsClient.GetOSFamily
-// method.
-type CloudServiceOperatingSystemsClientGetOSFamilyOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CloudServiceOperatingSystemsClientGetOSVersionOptions contains the optional parameters for the CloudServiceOperatingSystemsClient.GetOSVersion
-// method.
-type CloudServiceOperatingSystemsClientGetOSVersionOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CloudServiceOperatingSystemsClientListOSFamiliesOptions contains the optional parameters for the CloudServiceOperatingSystemsClient.NewListOSFamiliesPager
-// method.
-type CloudServiceOperatingSystemsClientListOSFamiliesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CloudServiceOperatingSystemsClientListOSVersionsOptions contains the optional parameters for the CloudServiceOperatingSystemsClient.NewListOSVersionsPager
-// method.
-type CloudServiceOperatingSystemsClientListOSVersionsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // CloudServiceOsProfile - Describes the OS profile for the cloud service.
 type CloudServiceOsProfile struct {
 	// Specifies set of certificates that should be installed onto the role instances.
@@ -836,60 +712,6 @@ type CloudServiceRole struct {
 	Type *string
 }
 
-// CloudServiceRoleInstancesClientBeginDeleteOptions contains the optional parameters for the CloudServiceRoleInstancesClient.BeginDelete
-// method.
-type CloudServiceRoleInstancesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServiceRoleInstancesClientBeginRebuildOptions contains the optional parameters for the CloudServiceRoleInstancesClient.BeginRebuild
-// method.
-type CloudServiceRoleInstancesClientBeginRebuildOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServiceRoleInstancesClientBeginReimageOptions contains the optional parameters for the CloudServiceRoleInstancesClient.BeginReimage
-// method.
-type CloudServiceRoleInstancesClientBeginReimageOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServiceRoleInstancesClientBeginRestartOptions contains the optional parameters for the CloudServiceRoleInstancesClient.BeginRestart
-// method.
-type CloudServiceRoleInstancesClientBeginRestartOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServiceRoleInstancesClientGetInstanceViewOptions contains the optional parameters for the CloudServiceRoleInstancesClient.GetInstanceView
-// method.
-type CloudServiceRoleInstancesClientGetInstanceViewOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CloudServiceRoleInstancesClientGetOptions contains the optional parameters for the CloudServiceRoleInstancesClient.Get
-// method.
-type CloudServiceRoleInstancesClientGetOptions struct {
-	// The expand expression to apply to the operation. 'UserData' is not supported for cloud services.
-	Expand *InstanceViewTypes
-}
-
-// CloudServiceRoleInstancesClientGetRemoteDesktopFileOptions contains the optional parameters for the CloudServiceRoleInstancesClient.GetRemoteDesktopFile
-// method.
-type CloudServiceRoleInstancesClientGetRemoteDesktopFileOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CloudServiceRoleInstancesClientListOptions contains the optional parameters for the CloudServiceRoleInstancesClient.NewListPager
-// method.
-type CloudServiceRoleInstancesClientListOptions struct {
-	// The expand expression to apply to the operation. 'UserData' is not supported for cloud services.
-	Expand *InstanceViewTypes
-}
-
 // CloudServiceRoleListResult - The list operation result.
 type CloudServiceRoleListResult struct {
 	// REQUIRED; The list of resources.
@@ -936,16 +758,6 @@ type CloudServiceRoleSKU struct {
 	Tier *string
 }
 
-// CloudServiceRolesClientGetOptions contains the optional parameters for the CloudServiceRolesClient.Get method.
-type CloudServiceRolesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CloudServiceRolesClientListOptions contains the optional parameters for the CloudServiceRolesClient.NewListPager method.
-type CloudServiceRolesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 type CloudServiceUpdate struct {
 	// Resource tags
 	Tags map[string]*string
@@ -977,120 +789,14 @@ type CloudServiceVaultSecretGroup struct {
 	VaultCertificates []*CloudServiceVaultCertificate
 }
 
-// CloudServicesClientBeginCreateOrUpdateOptions contains the optional parameters for the CloudServicesClient.BeginCreateOrUpdate
-// method.
-type CloudServicesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServicesClientBeginDeleteInstancesOptions contains the optional parameters for the CloudServicesClient.BeginDeleteInstances
-// method.
-type CloudServicesClientBeginDeleteInstancesOptions struct {
-	// List of cloud service role instance names.
-	Parameters *RoleInstances
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServicesClientBeginDeleteOptions contains the optional parameters for the CloudServicesClient.BeginDelete method.
-type CloudServicesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServicesClientBeginPowerOffOptions contains the optional parameters for the CloudServicesClient.BeginPowerOff method.
-type CloudServicesClientBeginPowerOffOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServicesClientBeginRebuildOptions contains the optional parameters for the CloudServicesClient.BeginRebuild method.
-type CloudServicesClientBeginRebuildOptions struct {
-	// List of cloud service role instance names.
-	Parameters *RoleInstances
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServicesClientBeginReimageOptions contains the optional parameters for the CloudServicesClient.BeginReimage method.
-type CloudServicesClientBeginReimageOptions struct {
-	// List of cloud service role instance names.
-	Parameters *RoleInstances
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServicesClientBeginRestartOptions contains the optional parameters for the CloudServicesClient.BeginRestart method.
-type CloudServicesClientBeginRestartOptions struct {
-	// List of cloud service role instance names.
-	Parameters *RoleInstances
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServicesClientBeginStartOptions contains the optional parameters for the CloudServicesClient.BeginStart method.
-type CloudServicesClientBeginStartOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServicesClientBeginUpdateOptions contains the optional parameters for the CloudServicesClient.BeginUpdate method.
-type CloudServicesClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServicesClientGetInstanceViewOptions contains the optional parameters for the CloudServicesClient.GetInstanceView
-// method.
-type CloudServicesClientGetInstanceViewOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CloudServicesClientGetOptions contains the optional parameters for the CloudServicesClient.Get method.
-type CloudServicesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CloudServicesClientListAllOptions contains the optional parameters for the CloudServicesClient.NewListAllPager method.
-type CloudServicesClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CloudServicesClientListOptions contains the optional parameters for the CloudServicesClient.NewListPager method.
-type CloudServicesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CloudServicesUpdateDomainClientBeginWalkUpdateDomainOptions contains the optional parameters for the CloudServicesUpdateDomainClient.BeginWalkUpdateDomain
-// method.
-type CloudServicesUpdateDomainClientBeginWalkUpdateDomainOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CloudServicesUpdateDomainClientGetUpdateDomainOptions contains the optional parameters for the CloudServicesUpdateDomainClient.GetUpdateDomain
-// method.
-type CloudServicesUpdateDomainClientGetUpdateDomainOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CloudServicesUpdateDomainClientListUpdateDomainsOptions contains the optional parameters for the CloudServicesUpdateDomainClient.NewListUpdateDomainsPager
-// method.
-type CloudServicesUpdateDomainClientListUpdateDomainsOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CommunityGalleriesClientGetOptions contains the optional parameters for the CommunityGalleriesClient.Get method.
-type CommunityGalleriesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
 // CommunityGallery - Specifies information about the Community Gallery that you want to create or update.
 type CommunityGallery struct {
 	// The identifier information of community gallery.
 	Identifier *CommunityGalleryIdentifier
 
+	// Describes the properties of a community gallery.
+	Properties *CommunityGalleryProperties
+
 	// READ-ONLY; Resource location
 	Location *string
 
@@ -1125,43 +831,58 @@ type CommunityGalleryImage struct {
 	Type *string
 }
 
+// CommunityGalleryImageIdentifier - This is the community gallery image definition identifier.
+type CommunityGalleryImageIdentifier struct {
+	// The name of the gallery image definition offer.
+	Offer *string
+
+	// The name of the gallery image definition publisher.
+	Publisher *string
+
+	// The name of the gallery image definition SKU.
+	SKU *string
+}
+
 // CommunityGalleryImageList - The List Community Gallery Images operation response.
 type CommunityGalleryImageList struct {
 	// REQUIRED; A list of community gallery images.
 	Value []*CommunityGalleryImage
 
-	// The uri to fetch the next page of community gallery images. Call ListNext() with this to fetch the next page of community
+	// The URI to fetch the next page of community gallery images. Call ListNext() with this to fetch the next page of community
 	// gallery images.
 	NextLink *string
 }
 
 // CommunityGalleryImageProperties - Describes the properties of a gallery image definition.
 type CommunityGalleryImageProperties struct {
-	// REQUIRED; This is the gallery image definition identifier.
-	Identifier *GalleryImageIdentifier
+	// REQUIRED; This is the community gallery image definition identifier.
+	Identifier *CommunityGalleryImageIdentifier
 
 	// REQUIRED; This property allows the user to specify whether the virtual machines created under this image are 'Generalized'
 	// or 'Specialized'.
 	OSState *OperatingSystemStateTypes
 
 	// REQUIRED; This property allows you to specify the type of the OS that is included in the disk when creating a VM from a
-	// managed image.
-	// Possible values are:
-	// Windows
-	// Linux
+	// managed image. Possible values are: Windows, Linux.
 	OSType *OperatingSystemTypes
 
 	// The architecture of the image. Applicable to OS disks only.
 	Architecture *Architecture
 
+	// The artifact tags of a community gallery resource.
+	ArtifactTags map[string]*string
+
 	// Describes the disallowed disk types.
 	Disallowed *Disallowed
 
+	// The disclaimer for a community gallery resource.
+	Disclaimer *string
+
 	// The end of life date of the gallery image definition. This property can be used for decommissioning purposes. This property
 	// is updatable.
 	EndOfLifeDate *time.Time
 
-	// End-user license agreement for the current community gallery image.
+	// The end-user license agreement for the current community gallery image.
 	Eula *string
 
 	// A list of gallery image features.
@@ -1170,7 +891,7 @@ type CommunityGalleryImageProperties struct {
 	// The hypervisor generation of the Virtual Machine. Applicable to OS disks only.
 	HyperVGeneration *HyperVGeneration
 
-	// Privacy statement uri for the current community gallery image.
+	// Privacy statement URI for the current community gallery image.
 	PrivacyStatementURI *string
 
 	// Describes the gallery image definition purchase plan. This is used by marketplace images.
@@ -1203,13 +924,19 @@ type CommunityGalleryImageVersionList struct {
 	// REQUIRED; A list of community gallery image versions.
 	Value []*CommunityGalleryImageVersion
 
-	// The uri to fetch the next page of community gallery image versions. Call ListNext() with this to fetch the next page of
+	// The URI to fetch the next page of community gallery image versions. Call ListNext() with this to fetch the next page of
 	// community gallery image versions.
 	NextLink *string
 }
 
 // CommunityGalleryImageVersionProperties - Describes the properties of a gallery image version.
 type CommunityGalleryImageVersionProperties struct {
+	// The artifact tags of a community gallery resource.
+	ArtifactTags map[string]*string
+
+	// The disclaimer for a community gallery resource.
+	Disclaimer *string
+
 	// The end of life date of the gallery image version Definition. This property can be used for decommissioning purposes. This
 	// property is updatable.
 	EndOfLifeDate *time.Time
@@ -1225,29 +952,6 @@ type CommunityGalleryImageVersionProperties struct {
 	StorageProfile *SharedGalleryImageVersionStorageProfile
 }
 
-// CommunityGalleryImageVersionsClientGetOptions contains the optional parameters for the CommunityGalleryImageVersionsClient.Get
-// method.
-type CommunityGalleryImageVersionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CommunityGalleryImageVersionsClientListOptions contains the optional parameters for the CommunityGalleryImageVersionsClient.NewListPager
-// method.
-type CommunityGalleryImageVersionsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CommunityGalleryImagesClientGetOptions contains the optional parameters for the CommunityGalleryImagesClient.Get method.
-type CommunityGalleryImagesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CommunityGalleryImagesClientListOptions contains the optional parameters for the CommunityGalleryImagesClient.NewListPager
-// method.
-type CommunityGalleryImagesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // CommunityGalleryInfo - Information of community gallery if current gallery is shared to community
 type CommunityGalleryInfo struct {
 	// End-user license agreement for community gallery image.
@@ -1269,6 +973,36 @@ type CommunityGalleryInfo struct {
 	PublicNames []*string
 }
 
+// CommunityGalleryMetadata - The metadata of community gallery.
+type CommunityGalleryMetadata struct {
+	// REQUIRED; A list of public names the gallery has.
+	PublicNames []*string
+
+	// REQUIRED; The publisher email id of this community gallery.
+	PublisherContact *string
+
+	// The end-user license agreement for this community gallery.
+	Eula *string
+
+	// The link for the privacy statement of this community gallery from the gallery publisher.
+	PrivacyStatementURI *string
+
+	// The publisher URI of this community gallery.
+	PublisherURI *string
+}
+
+// CommunityGalleryProperties - Describes the properties of a community gallery.
+type CommunityGalleryProperties struct {
+	// The artifact tags of a community gallery resource.
+	ArtifactTags map[string]*string
+
+	// The metadata of community gallery.
+	CommunityMetadata *CommunityGalleryMetadata
+
+	// The disclaimer for a community gallery resource.
+	Disclaimer *string
+}
+
 // CopyCompletionError - Indicates the error details if the background copy of a resource created via the CopyStart operation
 // fails.
 type CopyCompletionError struct {
@@ -1284,6 +1018,9 @@ type CreationData struct {
 	// REQUIRED; This enumerates the possible sources of a disk's creation.
 	CreateOption *DiskCreateOption
 
+	// Required if createOption is CopyFromSanSnapshot. This is the ARM id of the source elastic san volume snapshot.
+	ElasticSanResourceID *string
+
 	// Required if creating from a Gallery Image. The id/sharedGalleryImageId/communityGalleryImageId of the ImageDiskReference
 	// will be the ARM id of the shared galley image version from which to create a
 	// disk.
@@ -1324,46 +1061,39 @@ type CreationData struct {
 
 // DataDisk - Describes a data disk.
 type DataDisk struct {
-	// REQUIRED; Specifies how the virtual machine should be created.
-	// Possible values are:
-	// Attach \u2013 This value is used when you are using a specialized disk to create the virtual machine.
-	// FromImage \u2013 This value is used when you are using an image to create the virtual machine. If you are using a platform
-	// image, you also use the imageReference element described above. If you are
-	// using a marketplace image, you also use the plan element previously described.
+	// REQUIRED; Specifies how the virtual machine should be created. Possible values are: Attach. This value is used when you
+	// are using a specialized disk to create the virtual machine. FromImage. This value is used
+	// when you are using an image to create the virtual machine. If you are using a platform image, you should also use the imageReference
+	// element described above. If you are using a marketplace image, you
+	// should also use the plan element previously described.
 	CreateOption *DiskCreateOptionTypes
 
 	// REQUIRED; Specifies the logical unit number of the data disk. This value is used to identify data disks within the VM and
 	// therefore must be unique for each data disk attached to a VM.
 	Lun *int32
 
-	// Specifies the caching requirements.
-	// Possible values are:
-	// None
-	// ReadOnly
-	// ReadWrite
-	// Default: None for Standard storage. ReadOnly for Premium storage
+	// Specifies the caching requirements. Possible values are: None, ReadOnly, ReadWrite. The defaulting behavior is: None for
+	// Standard storage. ReadOnly for Premium storage.
 	Caching *CachingTypes
 
-	// Specifies whether data disk should be deleted or detached upon VM deletion.
-	// Possible values:
-	// Delete If this value is used, the data disk is deleted when VM is deleted.
-	// Detach If this value is used, the data disk is retained after VM is deleted.
-	// The default value is set to detach
+	// Specifies whether data disk should be deleted or detached upon VM deletion. Possible values are: Delete. If this value
+	// is used, the data disk is deleted when VM is deleted. Detach. If this value is
+	// used, the data disk is retained after VM is deleted. The default value is set to Detach.
 	DeleteOption *DiskDeleteOptionTypes
 
 	// Specifies the detach behavior to be used while detaching a disk or which is already in the process of detachment from the
-	// virtual machine. Supported values: ForceDetach.
-	// detachOption: ForceDetach is applicable only for managed data disks. If a previous detachment attempt of the data disk
-	// did not complete due to an unexpected failure from the virtual machine and the
-	// disk is still not released then use force-detach as a last resort option to detach the disk forcibly from the VM. All writes
-	// might not have been flushed when using this detach behavior.
-	// This feature is still in preview mode and is not supported for VirtualMachineScaleSet. To force-detach a data disk update
-	// toBeDetached to 'true' along with setting detachOption: 'ForceDetach'.
+	// virtual machine. Supported values: ForceDetach. detachOption: ForceDetach is
+	// applicable only for managed data disks. If a previous detachment attempt of the data disk did not complete due to an unexpected
+	// failure from the virtual machine and the disk is still not released then
+	// use force-detach as a last resort option to detach the disk forcibly from the VM. All writes might not have been flushed
+	// when using this detach behavior. This feature is still in preview mode and is
+	// not supported for VirtualMachineScaleSet. To force-detach a data disk update toBeDetached to 'true' along with setting
+	// detachOption: 'ForceDetach'.
 	DetachOption *DiskDetachOptionTypes
 
 	// Specifies the size of an empty data disk in gigabytes. This element can be used to overwrite the size of the disk in a
-	// virtual machine image.
-	// diskSizeGB is the number of bytes x 1024^3 for the disk and the value cannot be larger than 1023
+	// virtual machine image. The property 'diskSizeGB' is the number of bytes x 1024^3
+	// for the disk and the value cannot be larger than 1023.
 	DiskSizeGB *int32
 
 	// The source user image virtual hard disk. The virtual hard disk will be copied before being attached to the virtual machine.
@@ -1415,6 +1145,26 @@ type DataDiskImageEncryption struct {
 	DiskEncryptionSetID *string
 }
 
+// DataDisksToAttach - Describes the data disk to be attached.
+type DataDisksToAttach struct {
+	// REQUIRED; ID of the managed data disk.
+	DiskID *string
+
+	// The logical unit number of the data disk. This value is used to identify data disks within the VM and therefore must be
+	// unique for each data disk attached to a VM. If not specified, lun would be auto
+	// assigned.
+	Lun *int32
+}
+
+// DataDisksToDetach - Describes the data disk to be detached.
+type DataDisksToDetach struct {
+	// REQUIRED; ID of the managed data disk.
+	DiskID *string
+
+	// Supported options available for Detach of a disk from a VM. Refer to DetachOption object reference for more details.
+	DetachOption *DiskDetachOptionTypes
+}
+
 // DedicatedHost - Specifies information about the Dedicated host.
 type DedicatedHost struct {
 	// REQUIRED; Resource location
@@ -1457,8 +1207,8 @@ type DedicatedHostAvailableCapacity struct {
 }
 
 // DedicatedHostGroup - Specifies information about the dedicated host group that the dedicated hosts should be assigned to.
-// Currently, a dedicated host can only be added to a dedicated host group at creation time. An existing dedicated host cannot
-// be added to another dedicated host group.
+// Currently, a dedicated host can only be added to a dedicated host group at creation time. An
+// existing dedicated host cannot be added to another dedicated host group.
 type DedicatedHostGroup struct {
 	// REQUIRED; Resource location
 	Location *string
@@ -1504,14 +1254,13 @@ type DedicatedHostGroupProperties struct {
 	// REQUIRED; Number of fault domains that the host group can span.
 	PlatformFaultDomainCount *int32
 
-	// Enables or disables a capability on the dedicated host group.
-	// Minimum api-version: 2022-03-01.
+	// Enables or disables a capability on the dedicated host group. Minimum api-version: 2022-03-01.
 	AdditionalCapabilities *DedicatedHostGroupPropertiesAdditionalCapabilities
 
 	// Specifies whether virtual machines or virtual machine scale sets can be placed automatically on the dedicated host group.
 	// Automatic placement means resources are allocated on dedicated hosts, that are
-	// chosen by Azure, under the dedicated host group. The value is defaulted to 'false' when not provided.
-	// Minimum api-version: 2020-06-01.
+	// chosen by Azure, under the dedicated host group. The value is defaulted to 'false' when not provided. Minimum api-version:
+	// 2020-06-01.
 	SupportAutomaticPlacement *bool
 
 	// READ-ONLY; A list of references to all dedicated hosts in the dedicated host group.
@@ -1522,16 +1271,16 @@ type DedicatedHostGroupProperties struct {
 	InstanceView *DedicatedHostGroupInstanceView
 }
 
-// DedicatedHostGroupPropertiesAdditionalCapabilities - Enables or disables a capability on the dedicated host group.
-// Minimum api-version: 2022-03-01.
+// DedicatedHostGroupPropertiesAdditionalCapabilities - Enables or disables a capability on the dedicated host group. Minimum
+// api-version: 2022-03-01.
 type DedicatedHostGroupPropertiesAdditionalCapabilities struct {
 	// The flag that enables or disables a capability to have UltraSSD Enabled Virtual Machines on Dedicated Hosts of the Dedicated
 	// Host Group. For the Virtual Machines to be UltraSSD Enabled,
 	// UltraSSDEnabled flag for the resource needs to be set true as well. The value is defaulted to 'false' when not provided.
 	// Please refer to
-	// https://docs.microsoft.com/en-us/azure/virtual-machines/disks-enable-ultra-ssd for more details on Ultra SSD feature.
-	// NOTE: The ultraSSDEnabled setting can only be enabled for Host Groups that are created as zonal.
-	// Minimum api-version: 2022-03-01.
+	// https://docs.microsoft.com/en-us/azure/virtual-machines/disks-enable-ultra-ssd for more details on Ultra SSD feature. Note:
+	// The ultraSSDEnabled setting can only be enabled for Host Groups that are
+	// created as zonal. Minimum api-version: 2022-03-01.
 	UltraSSDEnabled *bool
 }
 
@@ -1550,42 +1299,6 @@ type DedicatedHostGroupUpdate struct {
 	Zones []*string
 }
 
-// DedicatedHostGroupsClientCreateOrUpdateOptions contains the optional parameters for the DedicatedHostGroupsClient.CreateOrUpdate
-// method.
-type DedicatedHostGroupsClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DedicatedHostGroupsClientDeleteOptions contains the optional parameters for the DedicatedHostGroupsClient.Delete method.
-type DedicatedHostGroupsClientDeleteOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DedicatedHostGroupsClientGetOptions contains the optional parameters for the DedicatedHostGroupsClient.Get method.
-type DedicatedHostGroupsClientGetOptions struct {
-	// The expand expression to apply on the operation. 'InstanceView' will retrieve the list of instance views of the dedicated
-	// hosts under the dedicated host group. 'UserData' is not supported for
-	// dedicated host group.
-	Expand *InstanceViewTypes
-}
-
-// DedicatedHostGroupsClientListByResourceGroupOptions contains the optional parameters for the DedicatedHostGroupsClient.NewListByResourceGroupPager
-// method.
-type DedicatedHostGroupsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DedicatedHostGroupsClientListBySubscriptionOptions contains the optional parameters for the DedicatedHostGroupsClient.NewListBySubscriptionPager
-// method.
-type DedicatedHostGroupsClientListBySubscriptionOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DedicatedHostGroupsClientUpdateOptions contains the optional parameters for the DedicatedHostGroupsClient.Update method.
-type DedicatedHostGroupsClientUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
 // DedicatedHostInstanceView - The instance view of a dedicated host.
 type DedicatedHostInstanceView struct {
 	// Unutilized capacity of the dedicated host.
@@ -1629,19 +1342,15 @@ type DedicatedHostProperties struct {
 	// when not provided.
 	AutoReplaceOnFailure *bool
 
-	// Specifies the software license type that will be applied to the VMs deployed on the dedicated host.
-	// Possible values are:
-	// None
-	// WindowsServerHybrid
-	// WindowsServerPerpetual
-	// Default: None
+	// Specifies the software license type that will be applied to the VMs deployed on the dedicated host. Possible values are:
+	// None, WindowsServerHybrid, WindowsServerPerpetual. The default value is: None.
 	LicenseType *DedicatedHostLicenseTypes
 
 	// Fault domain of the dedicated host within a dedicated host group.
 	PlatformFaultDomain *int32
 
-	// READ-ONLY; A unique id generated and assigned to the dedicated host by the platform.
-	// Does not change throughout the lifetime of the host.
+	// READ-ONLY; A unique id generated and assigned to the dedicated host by the platform. Does not change throughout the lifetime
+	// of the host.
 	HostID *string
 
 	// READ-ONLY; The dedicated host instance view.
@@ -1653,87 +1362,54 @@ type DedicatedHostProperties struct {
 	// READ-ONLY; The date when the host was first provisioned.
 	ProvisioningTime *time.Time
 
-	// READ-ONLY; Specifies the time at which the Dedicated Host resource was created.
-	// Minimum api-version: 2021-11-01.
+	// READ-ONLY; Specifies the time at which the Dedicated Host resource was created. Minimum api-version: 2021-11-01.
 	TimeCreated *time.Time
 
 	// READ-ONLY; A list of references to all virtual machines in the Dedicated Host.
 	VirtualMachines []*SubResourceReadOnly
 }
 
+// DedicatedHostSizeListResult - The List Dedicated Host sizes operation response.
+type DedicatedHostSizeListResult struct {
+	// The list of dedicated host sizes.
+	Value []*string
+}
+
 // DedicatedHostUpdate - Specifies information about the dedicated host. Only tags, autoReplaceOnFailure and licenseType may
 // be updated.
 type DedicatedHostUpdate struct {
 	// Properties of the dedicated host.
 	Properties *DedicatedHostProperties
 
+	// List all available dedicated host sizes for resizing [https://docs.microsoft.com/rest/api/compute/dedicated-hosts/listavailablesizes].
+	// Resizing can be only used to scale up DedicatedHost. Only name is
+	// required to be set.
+	SKU *SKU
+
 	// Resource tags
 	Tags map[string]*string
 }
 
-// DedicatedHostsClientBeginCreateOrUpdateOptions contains the optional parameters for the DedicatedHostsClient.BeginCreateOrUpdate
-// method.
-type DedicatedHostsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DedicatedHostsClientBeginDeleteOptions contains the optional parameters for the DedicatedHostsClient.BeginDelete method.
-type DedicatedHostsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DedicatedHostsClientBeginRestartOptions contains the optional parameters for the DedicatedHostsClient.BeginRestart method.
-type DedicatedHostsClientBeginRestartOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DedicatedHostsClientBeginUpdateOptions contains the optional parameters for the DedicatedHostsClient.BeginUpdate method.
-type DedicatedHostsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DedicatedHostsClientGetOptions contains the optional parameters for the DedicatedHostsClient.Get method.
-type DedicatedHostsClientGetOptions struct {
-	// The expand expression to apply on the operation. 'InstanceView' will retrieve the list of instance views of the dedicated
-	// host. 'UserData' is not supported for dedicated host.
-	Expand *InstanceViewTypes
-}
-
-// DedicatedHostsClientListByHostGroupOptions contains the optional parameters for the DedicatedHostsClient.NewListByHostGroupPager
-// method.
-type DedicatedHostsClientListByHostGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DiagnosticsProfile - Specifies the boot diagnostic settings state.
-// Minimum api-version: 2015-06-15.
+// DiagnosticsProfile - Specifies the boot diagnostic settings state. Minimum api-version: 2015-06-15.
 type DiagnosticsProfile struct {
-	// Boot Diagnostics is a debugging feature which allows you to view Console Output and Screenshot to diagnose VM status.
-	// NOTE: If storageUri is being specified then ensure that the storage account is in the same region and subscription as the
-	// VM.
-	// You can easily view the output of your console log.
-	// Azure also enables you to see a screenshot of the VM from the hypervisor.
+	// Boot Diagnostics is a debugging feature which allows you to view Console Output and Screenshot to diagnose VM status. NOTE:
+	// If storageUri is being specified then ensure that the storage account is in
+	// the same region and subscription as the VM. You can easily view the output of your console log. Azure also enables you
+	// to see a screenshot of the VM from the hypervisor.
 	BootDiagnostics *BootDiagnostics
 }
 
 // DiffDiskSettings - Describes the parameters of ephemeral disk settings that can be specified for operating system disk.
-// NOTE: The ephemeral disk settings can only be specified for managed disk.
+// Note: The ephemeral disk settings can only be specified for managed disk.
 type DiffDiskSettings struct {
 	// Specifies the ephemeral disk settings for operating system disk.
 	Option *DiffDiskOptions
 
-	// Specifies the ephemeral disk placement for operating system disk.
-	// Possible values are:
-	// CacheDisk
-	// ResourceDisk
-	// Default: CacheDisk if one is configured for the VM size otherwise ResourceDisk is used.
-	// Refer to VM size documentation for Windows VM at https://docs.microsoft.com/azure/virtual-machines/windows/sizes and Linux
-	// VM at https://docs.microsoft.com/azure/virtual-machines/linux/sizes to check
-	// which VM sizes exposes a cache disk.
+	// Specifies the ephemeral disk placement for operating system disk. Possible values are: CacheDisk, ResourceDisk. The defaulting
+	// behavior is: CacheDisk if one is configured for the VM size otherwise
+	// ResourceDisk is used. Refer to the VM size documentation for Windows VM at https://docs.microsoft.com/azure/virtual-machines/windows/sizes
+	// and Linux VM at
+	// https://docs.microsoft.com/azure/virtual-machines/linux/sizes to check which VM sizes exposes a cache disk.
 	Placement *DiffDiskPlacement
 }
 
@@ -1836,73 +1512,6 @@ type DiskAccessUpdate struct {
 	Tags map[string]*string
 }
 
-// DiskAccessesClientBeginCreateOrUpdateOptions contains the optional parameters for the DiskAccessesClient.BeginCreateOrUpdate
-// method.
-type DiskAccessesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DiskAccessesClientBeginDeleteAPrivateEndpointConnectionOptions contains the optional parameters for the DiskAccessesClient.BeginDeleteAPrivateEndpointConnection
-// method.
-type DiskAccessesClientBeginDeleteAPrivateEndpointConnectionOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DiskAccessesClientBeginDeleteOptions contains the optional parameters for the DiskAccessesClient.BeginDelete method.
-type DiskAccessesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DiskAccessesClientBeginUpdateAPrivateEndpointConnectionOptions contains the optional parameters for the DiskAccessesClient.BeginUpdateAPrivateEndpointConnection
-// method.
-type DiskAccessesClientBeginUpdateAPrivateEndpointConnectionOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DiskAccessesClientBeginUpdateOptions contains the optional parameters for the DiskAccessesClient.BeginUpdate method.
-type DiskAccessesClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DiskAccessesClientGetAPrivateEndpointConnectionOptions contains the optional parameters for the DiskAccessesClient.GetAPrivateEndpointConnection
-// method.
-type DiskAccessesClientGetAPrivateEndpointConnectionOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DiskAccessesClientGetOptions contains the optional parameters for the DiskAccessesClient.Get method.
-type DiskAccessesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DiskAccessesClientGetPrivateLinkResourcesOptions contains the optional parameters for the DiskAccessesClient.GetPrivateLinkResources
-// method.
-type DiskAccessesClientGetPrivateLinkResourcesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DiskAccessesClientListByResourceGroupOptions contains the optional parameters for the DiskAccessesClient.NewListByResourceGroupPager
-// method.
-type DiskAccessesClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DiskAccessesClientListOptions contains the optional parameters for the DiskAccessesClient.NewListPager method.
-type DiskAccessesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DiskAccessesClientListPrivateEndpointConnectionsOptions contains the optional parameters for the DiskAccessesClient.NewListPrivateEndpointConnectionsPager
-// method.
-type DiskAccessesClientListPrivateEndpointConnectionsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // DiskEncryptionSet - disk encryption set resource.
 type DiskEncryptionSet struct {
 	// REQUIRED; Resource location
@@ -1937,9 +1546,8 @@ type DiskEncryptionSetList struct {
 }
 
 // DiskEncryptionSetParameters - Describes the parameter of customer managed disk encryption set resource id that can be specified
-// for disk.
-// NOTE: The disk encryption set resource id can only be specified for managed disk. Please refer https://aka.ms/mdssewithcmkoverview
-// for more details.
+// for disk. Note: The disk encryption set resource id can only be specified for managed disk. Please
+// refer https://aka.ms/mdssewithcmkoverview for more details.
 type DiskEncryptionSetParameters struct {
 	// Resource Id
 	ID *string
@@ -1974,49 +1582,6 @@ type DiskEncryptionSetUpdateProperties struct {
 	RotationToLatestKeyVersionEnabled *bool
 }
 
-// DiskEncryptionSetsClientBeginCreateOrUpdateOptions contains the optional parameters for the DiskEncryptionSetsClient.BeginCreateOrUpdate
-// method.
-type DiskEncryptionSetsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DiskEncryptionSetsClientBeginDeleteOptions contains the optional parameters for the DiskEncryptionSetsClient.BeginDelete
-// method.
-type DiskEncryptionSetsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DiskEncryptionSetsClientBeginUpdateOptions contains the optional parameters for the DiskEncryptionSetsClient.BeginUpdate
-// method.
-type DiskEncryptionSetsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DiskEncryptionSetsClientGetOptions contains the optional parameters for the DiskEncryptionSetsClient.Get method.
-type DiskEncryptionSetsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DiskEncryptionSetsClientListAssociatedResourcesOptions contains the optional parameters for the DiskEncryptionSetsClient.NewListAssociatedResourcesPager
-// method.
-type DiskEncryptionSetsClientListAssociatedResourcesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DiskEncryptionSetsClientListByResourceGroupOptions contains the optional parameters for the DiskEncryptionSetsClient.NewListByResourceGroupPager
-// method.
-type DiskEncryptionSetsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DiskEncryptionSetsClientListOptions contains the optional parameters for the DiskEncryptionSetsClient.NewListPager method.
-type DiskEncryptionSetsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // DiskEncryptionSettings - Describes a Encryption Settings for a Disk
 type DiskEncryptionSettings struct {
 	// Specifies the location of the disk encryption key, which is a Key Vault Secret.
@@ -2150,6 +1715,11 @@ type DiskProperties struct {
 	// READ-ONLY; The state of the disk.
 	DiskState *DiskState
 
+	// READ-ONLY; The UTC time when the ownership state of the disk was last changed i.e., the time the disk was last attached
+	// or detached from a VM or the time when the VM to which the disk was attached was
+	// deallocated or started.
+	LastOwnershipUpdateTime *time.Time
+
 	// READ-ONLY; Properties of the disk for which update is pending.
 	PropertyUpdatesInProgress *PropertyUpdatesInProgress
 
@@ -2198,29 +1768,17 @@ type DiskRestorePoint struct {
 	Type *string
 }
 
-// DiskRestorePointClientBeginGrantAccessOptions contains the optional parameters for the DiskRestorePointClient.BeginGrantAccess
-// method.
-type DiskRestorePointClientBeginGrantAccessOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
+// DiskRestorePointAttributes - Disk Restore Point details.
+type DiskRestorePointAttributes struct {
+	// Encryption at rest settings for disk restore point. It is an optional property that can be specified in the input while
+	// creating a restore point.
+	Encryption *RestorePointEncryption
 
-// DiskRestorePointClientBeginRevokeAccessOptions contains the optional parameters for the DiskRestorePointClient.BeginRevokeAccess
-// method.
-type DiskRestorePointClientBeginRevokeAccessOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DiskRestorePointClientGetOptions contains the optional parameters for the DiskRestorePointClient.Get method.
-type DiskRestorePointClientGetOptions struct {
-	// placeholder for future optional parameters
-}
+	// Resource Id of the source disk restore point.
+	SourceDiskRestorePoint *APIEntityReference
 
-// DiskRestorePointClientListByRestorePointOptions contains the optional parameters for the DiskRestorePointClient.NewListByRestorePointPager
-// method.
-type DiskRestorePointClientListByRestorePointOptions struct {
-	// placeholder for future optional parameters
+	// READ-ONLY; Resource Id
+	ID *string
 }
 
 // DiskRestorePointInstanceView - The instance view of a disk restore point.
@@ -2411,52 +1969,6 @@ type DiskUpdateProperties struct {
 	PropertyUpdatesInProgress *PropertyUpdatesInProgress
 }
 
-// DisksClientBeginCreateOrUpdateOptions contains the optional parameters for the DisksClient.BeginCreateOrUpdate method.
-type DisksClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DisksClientBeginDeleteOptions contains the optional parameters for the DisksClient.BeginDelete method.
-type DisksClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DisksClientBeginGrantAccessOptions contains the optional parameters for the DisksClient.BeginGrantAccess method.
-type DisksClientBeginGrantAccessOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DisksClientBeginRevokeAccessOptions contains the optional parameters for the DisksClient.BeginRevokeAccess method.
-type DisksClientBeginRevokeAccessOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DisksClientBeginUpdateOptions contains the optional parameters for the DisksClient.BeginUpdate method.
-type DisksClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DisksClientGetOptions contains the optional parameters for the DisksClient.Get method.
-type DisksClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DisksClientListByResourceGroupOptions contains the optional parameters for the DisksClient.NewListByResourceGroupPager
-// method.
-type DisksClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DisksClientListOptions contains the optional parameters for the DisksClient.NewListPager method.
-type DisksClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // Encryption at rest settings for disk or snapshot
 type Encryption struct {
 	// ResourceId of the disk encryption set to use for enabling encryption at rest.
@@ -2466,6 +1978,12 @@ type Encryption struct {
 	Type *EncryptionType
 }
 
+// EncryptionIdentity - Specifies the Managed Identity used by ADE to get access token for keyvault operations.
+type EncryptionIdentity struct {
+	// Specifies ARM Resource ID of one of the user identities associated with the VM.
+	UserAssignedIdentityResourceID *string
+}
+
 // EncryptionImages - Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the
 // gallery artifact.
 type EncryptionImages struct {
@@ -2572,44 +2090,6 @@ type Extension struct {
 	Properties *CloudServiceExtensionProperties
 }
 
-// GalleriesClientBeginCreateOrUpdateOptions contains the optional parameters for the GalleriesClient.BeginCreateOrUpdate
-// method.
-type GalleriesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleriesClientBeginDeleteOptions contains the optional parameters for the GalleriesClient.BeginDelete method.
-type GalleriesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleriesClientBeginUpdateOptions contains the optional parameters for the GalleriesClient.BeginUpdate method.
-type GalleriesClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleriesClientGetOptions contains the optional parameters for the GalleriesClient.Get method.
-type GalleriesClientGetOptions struct {
-	// The expand query option to apply on the operation.
-	Expand *GalleryExpandParams
-	// The select expression to apply on the operation.
-	Select *SelectPermissions
-}
-
-// GalleriesClientListByResourceGroupOptions contains the optional parameters for the GalleriesClient.NewListByResourceGroupPager
-// method.
-type GalleriesClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// GalleriesClientListOptions contains the optional parameters for the GalleriesClient.NewListPager method.
-type GalleriesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // Gallery - Specifies information about the Shared Image Gallery that you want to create or update.
 type Gallery struct {
 	// REQUIRED; Resource location
@@ -2698,10 +2178,8 @@ type GalleryApplicationList struct {
 
 // GalleryApplicationProperties - Describes the properties of a gallery Application Definition.
 type GalleryApplicationProperties struct {
-	// REQUIRED; This property allows you to specify the supported type of the OS that application is built for.
-	// Possible values are:
-	// Windows
-	// Linux
+	// REQUIRED; This property allows you to specify the supported type of the OS that application is built for. Possible values
+	// are: Windows, Linux.
 	SupportedOSType *OperatingSystemTypes
 
 	// A list of custom actions that can be performed with all of the Gallery Application Versions within this Gallery Application.
@@ -2858,72 +2336,6 @@ type GalleryApplicationVersionUpdate struct {
 	Type *string
 }
 
-// GalleryApplicationVersionsClientBeginCreateOrUpdateOptions contains the optional parameters for the GalleryApplicationVersionsClient.BeginCreateOrUpdate
-// method.
-type GalleryApplicationVersionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleryApplicationVersionsClientBeginDeleteOptions contains the optional parameters for the GalleryApplicationVersionsClient.BeginDelete
-// method.
-type GalleryApplicationVersionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleryApplicationVersionsClientBeginUpdateOptions contains the optional parameters for the GalleryApplicationVersionsClient.BeginUpdate
-// method.
-type GalleryApplicationVersionsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleryApplicationVersionsClientGetOptions contains the optional parameters for the GalleryApplicationVersionsClient.Get
-// method.
-type GalleryApplicationVersionsClientGetOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *ReplicationStatusTypes
-}
-
-// GalleryApplicationVersionsClientListByGalleryApplicationOptions contains the optional parameters for the GalleryApplicationVersionsClient.NewListByGalleryApplicationPager
-// method.
-type GalleryApplicationVersionsClientListByGalleryApplicationOptions struct {
-	// placeholder for future optional parameters
-}
-
-// GalleryApplicationsClientBeginCreateOrUpdateOptions contains the optional parameters for the GalleryApplicationsClient.BeginCreateOrUpdate
-// method.
-type GalleryApplicationsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleryApplicationsClientBeginDeleteOptions contains the optional parameters for the GalleryApplicationsClient.BeginDelete
-// method.
-type GalleryApplicationsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleryApplicationsClientBeginUpdateOptions contains the optional parameters for the GalleryApplicationsClient.BeginUpdate
-// method.
-type GalleryApplicationsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleryApplicationsClientGetOptions contains the optional parameters for the GalleryApplicationsClient.Get method.
-type GalleryApplicationsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// GalleryApplicationsClientListByGalleryOptions contains the optional parameters for the GalleryApplicationsClient.NewListByGalleryPager
-// method.
-type GalleryApplicationsClientListByGalleryOptions struct {
-	// placeholder for future optional parameters
-}
-
 // GalleryArtifactPublishingProfileBase - Describes the basic gallery artifact publishing profile.
 type GalleryArtifactPublishingProfileBase struct {
 	// The end of life date of the gallery image version. This property can be used for decommissioning purposes. This property
@@ -3097,10 +2509,7 @@ type GalleryImageProperties struct {
 	OSState *OperatingSystemStateTypes
 
 	// REQUIRED; This property allows you to specify the type of the OS that is included in the disk when creating a VM from a
-	// managed image.
-	// Possible values are:
-	// Windows
-	// Linux
+	// managed image. Possible values are: Windows, Linux.
 	OSType *OperatingSystemTypes
 
 	// The architecture of the image. Applicable to OS disks only.
@@ -3201,6 +2610,9 @@ type GalleryImageVersionProperties struct {
 	// This is the safety profile of the Gallery Image Version.
 	SafetyProfile *GalleryImageVersionSafetyProfile
 
+	// The security profile of a gallery image version
+	SecurityProfile *ImageVersionSecurityProfile
+
 	// READ-ONLY; The provisioning state, which only appears in the response.
 	ProvisioningState *GalleryProvisioningState
 
@@ -3261,85 +2673,31 @@ type GalleryImageVersionStorageProfile struct {
 	Source *GalleryArtifactVersionFullSource
 }
 
+// GalleryImageVersionUefiSettings - Contains UEFI settings for the image version.
+type GalleryImageVersionUefiSettings struct {
+	// Additional UEFI key signatures that will be added to the image in addition to the signature templates
+	AdditionalSignatures *UefiKeySignatures
+
+	// The name of the template(s) that contains default UEFI key signatures that will be added to the image.
+	SignatureTemplateNames []*UefiSignatureTemplateName
+}
+
 // GalleryImageVersionUpdate - Specifies information about the gallery image version that you want to update.
 type GalleryImageVersionUpdate struct {
 	// Describes the properties of a gallery image version.
 	Properties *GalleryImageVersionProperties
 
 	// Resource tags
-	Tags map[string]*string
-
-	// READ-ONLY; Resource Id
-	ID *string
-
-	// READ-ONLY; Resource name
-	Name *string
-
-	// READ-ONLY; Resource type
-	Type *string
-}
-
-// GalleryImageVersionsClientBeginCreateOrUpdateOptions contains the optional parameters for the GalleryImageVersionsClient.BeginCreateOrUpdate
-// method.
-type GalleryImageVersionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleryImageVersionsClientBeginDeleteOptions contains the optional parameters for the GalleryImageVersionsClient.BeginDelete
-// method.
-type GalleryImageVersionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleryImageVersionsClientBeginUpdateOptions contains the optional parameters for the GalleryImageVersionsClient.BeginUpdate
-// method.
-type GalleryImageVersionsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleryImageVersionsClientGetOptions contains the optional parameters for the GalleryImageVersionsClient.Get method.
-type GalleryImageVersionsClientGetOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *ReplicationStatusTypes
-}
-
-// GalleryImageVersionsClientListByGalleryImageOptions contains the optional parameters for the GalleryImageVersionsClient.NewListByGalleryImagePager
-// method.
-type GalleryImageVersionsClientListByGalleryImageOptions struct {
-	// placeholder for future optional parameters
-}
-
-// GalleryImagesClientBeginCreateOrUpdateOptions contains the optional parameters for the GalleryImagesClient.BeginCreateOrUpdate
-// method.
-type GalleryImagesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GalleryImagesClientBeginDeleteOptions contains the optional parameters for the GalleryImagesClient.BeginDelete method.
-type GalleryImagesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
+	Tags map[string]*string
 
-// GalleryImagesClientBeginUpdateOptions contains the optional parameters for the GalleryImagesClient.BeginUpdate method.
-type GalleryImagesClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
+	// READ-ONLY; Resource Id
+	ID *string
 
-// GalleryImagesClientGetOptions contains the optional parameters for the GalleryImagesClient.Get method.
-type GalleryImagesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
+	// READ-ONLY; Resource name
+	Name *string
 
-// GalleryImagesClientListByGalleryOptions contains the optional parameters for the GalleryImagesClient.NewListByGalleryPager
-// method.
-type GalleryImagesClientListByGalleryOptions struct {
-	// placeholder for future optional parameters
+	// READ-ONLY; Resource type
+	Type *string
 }
 
 // GalleryList - The List Galleries operation response.
@@ -3384,13 +2742,6 @@ type GalleryProperties struct {
 	SharingStatus *SharingStatus
 }
 
-// GallerySharingProfileClientBeginUpdateOptions contains the optional parameters for the GallerySharingProfileClient.BeginUpdate
-// method.
-type GallerySharingProfileClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
 type GalleryTargetExtendedLocation struct {
 	// Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
 	Encryption *EncryptionImages
@@ -3405,7 +2756,7 @@ type GalleryTargetExtendedLocation struct {
 	Name *string
 
 	// Specifies the storage account type to be used to store the image. This property is not updatable.
-	StorageAccountType *StorageAccountType
+	StorageAccountType *EdgeZoneStorageAccountType
 }
 
 // GalleryUpdate - Specifies information about the Shared Image Gallery that you want to update.
@@ -3434,26 +2785,28 @@ type GrantAccessData struct {
 	// REQUIRED; Time duration in seconds until the SAS access expires.
 	DurationInSeconds *int32
 
+	// Used to specify the file format when making request for SAS on a VHDX file format snapshot
+	FileFormat *FileFormat
+
 	// Set this flag to true to get additional SAS for VM guest state
 	GetSecureVMGuestStateSAS *bool
 }
 
 // HardwareProfile - Specifies the hardware settings for the virtual machine.
 type HardwareProfile struct {
-	// Specifies the size of the virtual machine.
-	// The enum data type is currently deprecated and will be removed by December 23rd 2023.
-	// Recommended way to get the list of available sizes is using these APIs:
-	// List all available virtual machine sizes in an availability set [https://docs.microsoft.com/rest/api/compute/availabilitysets/listavailablesizes]
-	// List all available virtual machine sizes in a region [https://docs.microsoft.com/rest/api/compute/resourceskus/list]
-	// List all available virtual machine sizes for resizing [https://docs.microsoft.com/rest/api/compute/virtualmachines/listavailablesizes].
-	// For more information about virtual machine sizes, see Sizes for
-	// virtual machines [https://docs.microsoft.com/azure/virtual-machines/sizes].
-	// The available VM sizes depend on region and availability set.
+	// Specifies the size of the virtual machine. The enum data type is currently deprecated and will be removed by December 23rd
+	// 2023. The recommended way to get the list of available sizes is using these
+	// APIs: List all available virtual machine sizes in an availability set [https://docs.microsoft.com/rest/api/compute/availabilitysets/listavailablesizes],
+	// List all available virtual machine sizes in a
+	// region [https://docs.microsoft.com/rest/api/compute/resourceskus/list], List all available virtual machine sizes for resizing
+	// [https://docs.microsoft.com/rest/api/compute/virtualmachines/listavailablesizes]. For more information about virtual machine
+	// sizes, see Sizes for virtual machines
+	// [https://docs.microsoft.com/azure/virtual-machines/sizes]. The available VM sizes depend on region and availability set.
 	VMSize *VirtualMachineSizeTypes
 
-	// Specifies the properties for customizing the size of the virtual machine. Minimum api-version: 2021-07-01.
-	// This feature is still in preview mode and is not supported for VirtualMachineScaleSet.
-	// Please follow the instructions in VM Customization [https://aka.ms/vmcustomization] for more details.
+	// Specifies the properties for customizing the size of the virtual machine. Minimum api-version: 2021-07-01. This feature
+	// is still in preview mode and is not supported for VirtualMachineScaleSet. Please
+	// follow the instructions in VM Customization [https://aka.ms/vmcustomization] for more details.
 	VMSizeProperties *VMSizeProperties
 }
 
@@ -3492,20 +2845,15 @@ type ImageDataDisk struct {
 	// The Virtual Hard Disk.
 	BlobURI *string
 
-	// Specifies the caching requirements.
-	// Possible values are:
-	// None
-	// ReadOnly
-	// ReadWrite
-	// Default: None for Standard storage. ReadOnly for Premium storage
+	// Specifies the caching requirements. Possible values are: None, ReadOnly, ReadWrite. The default values are: None for Standard
+	// storage. ReadOnly for Premium storage.
 	Caching *CachingTypes
 
 	// Specifies the customer managed disk encryption set resource id for the managed image disk.
 	DiskEncryptionSet *DiskEncryptionSetParameters
 
 	// Specifies the size of empty data disks in gigabytes. This element can be used to overwrite the name of the disk in a virtual
-	// machine image.
-	// This value cannot be larger than 1023 GB
+	// machine image. This value cannot be larger than 1023 GB.
 	DiskSizeGB *int32
 
 	// The managedDisk.
@@ -3536,20 +2884,15 @@ type ImageDisk struct {
 	// The Virtual Hard Disk.
 	BlobURI *string
 
-	// Specifies the caching requirements.
-	// Possible values are:
-	// None
-	// ReadOnly
-	// ReadWrite
-	// Default: None for Standard storage. ReadOnly for Premium storage
+	// Specifies the caching requirements. Possible values are: None, ReadOnly, ReadWrite. The default values are: None for Standard
+	// storage. ReadOnly for Premium storage.
 	Caching *CachingTypes
 
 	// Specifies the customer managed disk encryption set resource id for the managed image disk.
 	DiskEncryptionSet *DiskEncryptionSetParameters
 
 	// Specifies the size of empty data disks in gigabytes. This element can be used to overwrite the name of the disk in a virtual
-	// machine image.
-	// This value cannot be larger than 1023 GB
+	// machine image. This value cannot be larger than 1023 GB.
 	DiskSizeGB *int32
 
 	// The managedDisk.
@@ -3594,29 +2937,21 @@ type ImageOSDisk struct {
 	OSState *OperatingSystemStateTypes
 
 	// REQUIRED; This property allows you to specify the type of the OS that is included in the disk if creating a VM from a custom
-	// image.
-	// Possible values are:
-	// Windows
-	// Linux
+	// image. Possible values are: Windows, Linux.
 	OSType *OperatingSystemTypes
 
 	// The Virtual Hard Disk.
 	BlobURI *string
 
-	// Specifies the caching requirements.
-	// Possible values are:
-	// None
-	// ReadOnly
-	// ReadWrite
-	// Default: None for Standard storage. ReadOnly for Premium storage
+	// Specifies the caching requirements. Possible values are: None, ReadOnly, ReadWrite. The default values are: None for Standard
+	// storage. ReadOnly for Premium storage.
 	Caching *CachingTypes
 
 	// Specifies the customer managed disk encryption set resource id for the managed image disk.
 	DiskEncryptionSet *DiskEncryptionSetParameters
 
 	// Specifies the size of empty data disks in gigabytes. This element can be used to overwrite the name of the disk in a virtual
-	// machine image.
-	// This value cannot be larger than 1023 GB
+	// machine image. This value cannot be larger than 1023 GB.
 	DiskSizeGB *int32
 
 	// The managedDisk.
@@ -3724,39 +3059,10 @@ type ImageUpdate struct {
 	Tags map[string]*string
 }
 
-// ImagesClientBeginCreateOrUpdateOptions contains the optional parameters for the ImagesClient.BeginCreateOrUpdate method.
-type ImagesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ImagesClientBeginDeleteOptions contains the optional parameters for the ImagesClient.BeginDelete method.
-type ImagesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ImagesClientBeginUpdateOptions contains the optional parameters for the ImagesClient.BeginUpdate method.
-type ImagesClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ImagesClientGetOptions contains the optional parameters for the ImagesClient.Get method.
-type ImagesClientGetOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *string
-}
-
-// ImagesClientListByResourceGroupOptions contains the optional parameters for the ImagesClient.NewListByResourceGroupPager
-// method.
-type ImagesClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ImagesClientListOptions contains the optional parameters for the ImagesClient.NewListPager method.
-type ImagesClientListOptions struct {
-	// placeholder for future optional parameters
+// ImageVersionSecurityProfile - The security profile of a gallery image version
+type ImageVersionSecurityProfile struct {
+	// Contains UEFI settings for the image version.
+	UefiSettings *GalleryImageVersionUefiSettings
 }
 
 // InnerError - Inner error details.
@@ -3898,8 +3204,9 @@ type LatestGalleryImageVersion struct {
 	Location *string
 }
 
-// LinuxConfiguration - Specifies the Linux operating system settings on the virtual machine.
-// For a list of supported Linux distributions, see Linux on Azure-Endorsed Distributions [https://docs.microsoft.com/azure/virtual-machines/linux/endorsed-distros].
+// LinuxConfiguration - Specifies the Linux operating system settings on the virtual machine. For a list of supported Linux
+// distributions, see Linux on Azure-Endorsed Distributions
+// [https://docs.microsoft.com/azure/virtual-machines/linux/endorsed-distros].
 type LinuxConfiguration struct {
 	// Specifies whether password authentication should be disabled.
 	DisablePasswordAuthentication *bool
@@ -3910,9 +3217,9 @@ type LinuxConfiguration struct {
 	// [Preview Feature] Specifies settings related to VM Guest Patching on Linux.
 	PatchSettings *LinuxPatchSettings
 
-	// Indicates whether virtual machine agent should be provisioned on the virtual machine.
-	// When this property is not specified in the request body, default behavior is to set it to true. This will ensure that VM
-	// Agent is installed on the VM so that extensions can be added to the VM later.
+	// Indicates whether virtual machine agent should be provisioned on the virtual machine. When this property is not specified
+	// in the request body, default behavior is to set it to true. This will ensure
+	// that VM Agent is installed on the VM so that extensions can be added to the VM later.
 	ProvisionVMAgent *bool
 
 	// Specifies the ssh key configuration for a Linux OS.
@@ -3957,6 +3264,9 @@ type LinuxPatchSettings struct {
 // LinuxVMGuestPatchAutomaticByPlatformSettings - Specifies additional settings to be applied when patch mode AutomaticByPlatform
 // is selected in Linux patch settings.
 type LinuxVMGuestPatchAutomaticByPlatformSettings struct {
+	// Enables customer to schedule patching without accidental upgrades
+	BypassPlatformSafetyChecksOnUserSchedule *bool
+
 	// Specifies the reboot setting for all AutomaticByPlatform patch installation operations.
 	RebootSetting *LinuxVMGuestPatchAutomaticByPlatformRebootSetting
 }
@@ -4013,20 +3323,6 @@ type LoadBalancerFrontendIPConfigurationProperties struct {
 	Subnet *SubResource
 }
 
-// LogAnalyticsClientBeginExportRequestRateByIntervalOptions contains the optional parameters for the LogAnalyticsClient.BeginExportRequestRateByInterval
-// method.
-type LogAnalyticsClientBeginExportRequestRateByIntervalOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// LogAnalyticsClientBeginExportThrottledRequestsOptions contains the optional parameters for the LogAnalyticsClient.BeginExportThrottledRequests
-// method.
-type LogAnalyticsClientBeginExportThrottledRequestsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
 // LogAnalyticsInputBase - Api input base class for LogAnalytics Api.
 type LogAnalyticsInputBase struct {
 	// REQUIRED; SAS Uri of the logging blob container to which LogAnalytics Api writes output logs to.
@@ -4142,43 +3438,37 @@ type NetworkProfile struct {
 	NetworkInterfaces []*NetworkInterfaceReference
 }
 
-// OSDisk - Specifies information about the operating system disk used by the virtual machine.
-// For more information about disks, see About disks and VHDs for Azure virtual machines [https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview].
+// OSDisk - Specifies information about the operating system disk used by the virtual machine. For more information about
+// disks, see About disks and VHDs for Azure virtual machines
+// [https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview].
 type OSDisk struct {
-	// REQUIRED; Specifies how the virtual machine should be created.
-	// Possible values are:
-	// Attach \u2013 This value is used when you are using a specialized disk to create the virtual machine.
-	// FromImage \u2013 This value is used when you are using an image to create the virtual machine. If you are using a platform
-	// image, you also use the imageReference element described above. If you are
-	// using a marketplace image, you also use the plan element previously described.
+	// REQUIRED; Specifies how the virtual machine should be created. Possible values are: Attach. This value is used when you
+	// are using a specialized disk to create the virtual machine. FromImage. This value is used
+	// when you are using an image to create the virtual machine. If you are using a platform image, you should also use the imageReference
+	// element described above. If you are using a marketplace image, you
+	// should also use the plan element previously described.
 	CreateOption *DiskCreateOptionTypes
 
-	// Specifies the caching requirements.
-	// Possible values are:
-	// None
-	// ReadOnly
-	// ReadWrite
-	// Default: None for Standard storage. ReadOnly for Premium storage.
+	// Specifies the caching requirements. Possible values are: None, ReadOnly, ReadWrite. The defaulting behavior is: None for
+	// Standard storage. ReadOnly for Premium storage.
 	Caching *CachingTypes
 
-	// Specifies whether OS Disk should be deleted or detached upon VM deletion.
-	// Possible values:
-	// Delete If this value is used, the OS disk is deleted when VM is deleted.
-	// Detach If this value is used, the os disk is retained after VM is deleted.
-	// The default value is set to detach. For an ephemeral OS Disk, the default value is set to Delete. User cannot change the
-	// delete option for ephemeral OS Disk.
+	// Specifies whether OS Disk should be deleted or detached upon VM deletion. Possible values are: Delete. If this value is
+	// used, the OS disk is deleted when VM is deleted. Detach. If this value is used,
+	// the os disk is retained after VM is deleted. The default value is set to Detach. For an ephemeral OS Disk, the default
+	// value is set to Delete. The user cannot change the delete option for an ephemeral
+	// OS Disk.
 	DeleteOption *DiskDeleteOptionTypes
 
 	// Specifies the ephemeral Disk Settings for the operating system disk used by the virtual machine.
 	DiffDiskSettings *DiffDiskSettings
 
 	// Specifies the size of an empty data disk in gigabytes. This element can be used to overwrite the size of the disk in a
-	// virtual machine image.
-	// diskSizeGB is the number of bytes x 1024^3 for the disk and the value cannot be larger than 1023
+	// virtual machine image. The property 'diskSizeGB' is the number of bytes x 1024^3
+	// for the disk and the value cannot be larger than 1023.
 	DiskSizeGB *int32
 
-	// Specifies the encryption settings for the OS Disk.
-	// Minimum api-version: 2015-06-15
+	// Specifies the encryption settings for the OS Disk. Minimum api-version: 2015-06-15.
 	EncryptionSettings *DiskEncryptionSettings
 
 	// The source user image virtual hard disk. The virtual hard disk will be copied before being attached to the virtual machine.
@@ -4193,10 +3483,7 @@ type OSDisk struct {
 	Name *string
 
 	// This property allows you to specify the type of the OS that is included in the disk if creating a VM from user-image or
-	// a specialized VHD.
-	// Possible values are:
-	// Windows
-	// Linux
+	// a specialized VHD. Possible values are: Windows, Linux.
 	OSType *OperatingSystemTypes
 
 	// The virtual hard disk.
@@ -4311,28 +3598,27 @@ type OSProfile struct {
 	// Max-length (Windows): 20 characters.
 	AdminUsername *string
 
-	// Specifies whether extension operations should be allowed on the virtual machine.
-	// This may only be set to False when no extensions are present on the virtual machine.
+	// Specifies whether extension operations should be allowed on the virtual machine. This may only be set to False when no
+	// extensions are present on the virtual machine.
 	AllowExtensionOperations *bool
 
-	// Specifies the host OS name of the virtual machine.
-	// This name cannot be updated after the VM is created.
-	// Max-length (Windows): 15 characters
-	// Max-length (Linux): 64 characters.
-	// For naming conventions and restrictions see Azure infrastructure services implementation guidelines [https://docs.microsoft.com/azure/azure-resource-manager/management/resource-name-rules].
+	// Specifies the host OS name of the virtual machine. This name cannot be updated after the VM is created. Max-length (Windows):
+	// 15 characters. Max-length (Linux): 64 characters. For naming conventions
+	// and restrictions see Azure infrastructure services implementation guidelines [https://docs.microsoft.com/azure/azure-resource-manager/management/resource-name-rules].
 	ComputerName *string
 
 	// Specifies a base-64 encoded string of custom data. The base-64 encoded string is decoded to a binary array that is saved
 	// as a file on the Virtual Machine. The maximum length of the binary array is
-	// 65535 bytes.
-	// Note: Do not pass any secrets or passwords in customData property
-	// This property cannot be updated after the VM is created.
-	// customData is passed to the VM to be saved as a file, for more information see Custom Data on Azure VMs [https://azure.microsoft.com/blog/custom-data-and-cloud-init-on-windows-azure/]
-	// For using cloud-init for your Linux VM, see Using cloud-init to customize a Linux VM during creation [https://docs.microsoft.com/azure/virtual-machines/linux/using-cloud-init]
+	// 65535 bytes. Note: Do not pass any secrets or passwords in customData property. This property cannot be updated after the
+	// VM is created. The property 'customData' is passed to the VM to be saved as a
+	// file, for more information see Custom Data on Azure VMs [https://azure.microsoft.com/blog/custom-data-and-cloud-init-on-windows-azure/].
+	// For using cloud-init for your Linux VM, see Using cloud-init to
+	// customize a Linux VM during creation [https://docs.microsoft.com/azure/virtual-machines/linux/using-cloud-init].
 	CustomData *string
 
-	// Specifies the Linux operating system settings on the virtual machine.
-	// For a list of supported Linux distributions, see Linux on Azure-Endorsed Distributions [https://docs.microsoft.com/azure/virtual-machines/linux/endorsed-distros].
+	// Specifies the Linux operating system settings on the virtual machine. For a list of supported Linux distributions, see
+	// Linux on Azure-Endorsed Distributions
+	// [https://docs.microsoft.com/azure/virtual-machines/linux/endorsed-distros].
 	LinuxConfiguration *LinuxConfiguration
 
 	// Optional property which must either be set to True or omitted.
@@ -4370,11 +3656,11 @@ type OSProfileProvisioningData struct {
 
 	// Specifies a base-64 encoded string of custom data. The base-64 encoded string is decoded to a binary array that is saved
 	// as a file on the Virtual Machine. The maximum length of the binary array is
-	// 65535 bytes.
-	// Note: Do not pass any secrets or passwords in customData property
-	// This property cannot be updated after the VM is created.
-	// customData is passed to the VM to be saved as a file, for more information see Custom Data on Azure VMs [https://azure.microsoft.com/blog/custom-data-and-cloud-init-on-windows-azure/]
-	// For using cloud-init for your Linux VM, see Using cloud-init to customize a Linux VM during creation [https://docs.microsoft.com/azure/virtual-machines/linux/using-cloud-init]
+	// 65535 bytes. Note: Do not pass any secrets or passwords in customData property. This property cannot be updated after the
+	// VM is created. The property customData is passed to the VM to be saved as a
+	// file, for more information see Custom Data on Azure VMs [https://azure.microsoft.com/blog/custom-data-and-cloud-init-on-windows-azure/].
+	// If using cloud-init for your Linux VM, see Using cloud-init to
+	// customize a Linux VM during creation [https://docs.microsoft.com/azure/virtual-machines/linux/using-cloud-init].
 	CustomData *string
 }
 
@@ -4475,11 +3761,6 @@ type OperationValueDisplay struct {
 	Resource *string
 }
 
-// OperationsClientListOptions contains the optional parameters for the OperationsClient.NewListPager method.
-type OperationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // OrchestrationServiceStateInput - The input for OrchestrationServiceState
 type OrchestrationServiceStateInput struct {
 	// REQUIRED; The action to be performed.
@@ -4547,7 +3828,7 @@ type PatchSettings struct {
 	PatchMode *WindowsVMGuestPatchMode
 }
 
-// PirCommunityGalleryResource - Base information about the community gallery resource in pir.
+// PirCommunityGalleryResource - Base information about the community gallery resource in azure compute gallery.
 type PirCommunityGalleryResource struct {
 	// The identifier information of community gallery.
 	Identifier *CommunityGalleryIdentifier
@@ -4612,9 +3893,8 @@ type PolicyViolation struct {
 }
 
 // PriorityMixPolicy - Specifies the target splits for Spot and Regular priority VMs within a scale set with flexible orchestration
-// mode.
-// With this property the customer is able to specify the base number of regular priority VMs created as the VMSS flex instance
-// scales out and the split between Spot and Regular priority VMs after this
+// mode. With this property the customer is able to specify the base number of regular
+// priority VMs created as the VMSS flex instance scales out and the split between Spot and Regular priority VMs after this
 // base target has been reached.
 type PriorityMixPolicy struct {
 	// The base number of regular priority VMs that will be created in this scale set as it scales out.
@@ -4761,10 +4041,8 @@ type ProximityPlacementGroupProperties struct {
 	// Specifies the user intent of the proximity placement group.
 	Intent *ProximityPlacementGroupPropertiesIntent
 
-	// Specifies the type of the proximity placement group.
-	// Possible values are:
-	// Standard : Co-locate resources within an Azure region or Availability Zone.
-	// Ultra : For future use.
+	// Specifies the type of the proximity placement group. Possible values are: Standard : Co-locate resources within an Azure
+	// region or Availability Zone. Ultra : For future use.
 	ProximityPlacementGroupType *ProximityPlacementGroupType
 
 	// READ-ONLY; A list of references to all availability sets in the proximity placement group.
@@ -4789,40 +4067,19 @@ type ProximityPlacementGroupUpdate struct {
 	Tags map[string]*string
 }
 
-// ProximityPlacementGroupsClientCreateOrUpdateOptions contains the optional parameters for the ProximityPlacementGroupsClient.CreateOrUpdate
-// method.
-type ProximityPlacementGroupsClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ProximityPlacementGroupsClientDeleteOptions contains the optional parameters for the ProximityPlacementGroupsClient.Delete
-// method.
-type ProximityPlacementGroupsClientDeleteOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ProximityPlacementGroupsClientGetOptions contains the optional parameters for the ProximityPlacementGroupsClient.Get method.
-type ProximityPlacementGroupsClientGetOptions struct {
-	// includeColocationStatus=true enables fetching the colocation status of all the resources in the proximity placement group.
-	IncludeColocationStatus *string
-}
-
-// ProximityPlacementGroupsClientListByResourceGroupOptions contains the optional parameters for the ProximityPlacementGroupsClient.NewListByResourceGroupPager
-// method.
-type ProximityPlacementGroupsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
+// ProxyAgentSettings - Specifies ProxyAgent settings while creating the virtual machine. Minimum api-version: 2023-09-01.
+type ProxyAgentSettings struct {
+	// Specifies whether ProxyAgent feature should be enabled on the virtual machine or virtual machine scale set.
+	Enabled *bool
 
-// ProximityPlacementGroupsClientListBySubscriptionOptions contains the optional parameters for the ProximityPlacementGroupsClient.NewListBySubscriptionPager
-// method.
-type ProximityPlacementGroupsClientListBySubscriptionOptions struct {
-	// placeholder for future optional parameters
-}
+	// Increase the value of this property allows user to reset the key used for securing communication channel between guest
+	// and host.
+	KeyIncarnationID *int32
 
-// ProximityPlacementGroupsClientUpdateOptions contains the optional parameters for the ProximityPlacementGroupsClient.Update
-// method.
-type ProximityPlacementGroupsClientUpdateOptions struct {
-	// placeholder for future optional parameters
+	// Specifies the mode that ProxyAgent will execute on if the feature is enabled. ProxyAgent will start to audit or monitor
+	// but not enforce access control over requests to host endpoints in Audit mode,
+	// while in Enforce mode it will enforce access control. The default value is Enforce mode.
+	Mode *Mode
 }
 
 // ProxyOnlyResource - The ProxyOnly Resource model definition.
@@ -4957,6 +4214,27 @@ type RequestRateByIntervalInput struct {
 	GroupByUserAgent *bool
 }
 
+// ResiliencyPolicy - Describes an resiliency policy - resilientVMCreationPolicy and/or resilientVMDeletionPolicy.
+type ResiliencyPolicy struct {
+	// The configuration parameters used while performing resilient VM creation.
+	ResilientVMCreationPolicy *ResilientVMCreationPolicy
+
+	// The configuration parameters used while performing resilient VM deletion.
+	ResilientVMDeletionPolicy *ResilientVMDeletionPolicy
+}
+
+// ResilientVMCreationPolicy - The configuration parameters used while performing resilient VM creation.
+type ResilientVMCreationPolicy struct {
+	// Specifies whether resilient VM creation should be enabled on the virtual machine scale set. The default value is false.
+	Enabled *bool
+}
+
+// ResilientVMDeletionPolicy - The configuration parameters used while performing resilient VM deletion.
+type ResilientVMDeletionPolicy struct {
+	// Specifies whether resilient VM deletion should be enabled on the virtual machine scale set. The default value is false.
+	Enabled *bool
+}
+
 // Resource - The Resource model definition.
 type Resource struct {
 	// REQUIRED; Resource location
@@ -5135,14 +4413,6 @@ type ResourceSKUZoneDetails struct {
 	Name []*string
 }
 
-// ResourceSKUsClientListOptions contains the optional parameters for the ResourceSKUsClient.NewListPager method.
-type ResourceSKUsClientListOptions struct {
-	// The filter to apply on the operation. Only location filter is supported currently.
-	Filter *string
-	// To Include Extended Locations information or not in the response.
-	IncludeExtendedLocations *string
-}
-
 // ResourceSKUsResult - The List Resource Skus operation response.
 type ResourceSKUsResult struct {
 	// REQUIRED; The list of skus available for the subscription.
@@ -5152,6 +4422,13 @@ type ResourceSKUsResult struct {
 	NextLink *string
 }
 
+type ResourceSharingProfile struct {
+	// Specifies an array of subscription resource IDs that capacity reservation group is shared with. Note: Minimum api-version:
+	// 2023-09-01. Please refer to https://aka.ms/computereservationsharing for more
+	// details.
+	SubscriptionIDs []*SubResource
+}
+
 // ResourceURIList - The List resources which are encrypted with the disk encryption set.
 type ResourceURIList struct {
 	// REQUIRED; A list of IDs or Owner IDs of resources which are encrypted with the disk encryption set.
@@ -5258,42 +4535,16 @@ type RestorePointCollectionUpdate struct {
 	Tags map[string]*string
 }
 
-// RestorePointCollectionsClientBeginDeleteOptions contains the optional parameters for the RestorePointCollectionsClient.BeginDelete
-// method.
-type RestorePointCollectionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RestorePointCollectionsClientCreateOrUpdateOptions contains the optional parameters for the RestorePointCollectionsClient.CreateOrUpdate
-// method.
-type RestorePointCollectionsClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RestorePointCollectionsClientGetOptions contains the optional parameters for the RestorePointCollectionsClient.Get method.
-type RestorePointCollectionsClientGetOptions struct {
-	// The expand expression to apply on the operation. If expand=restorePoints, server will return all contained restore points
-	// in the restorePointCollection.
-	Expand *RestorePointCollectionExpandOptions
-}
-
-// RestorePointCollectionsClientListAllOptions contains the optional parameters for the RestorePointCollectionsClient.NewListAllPager
-// method.
-type RestorePointCollectionsClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RestorePointCollectionsClientListOptions contains the optional parameters for the RestorePointCollectionsClient.NewListPager
-// method.
-type RestorePointCollectionsClientListOptions struct {
-	// placeholder for future optional parameters
-}
+// RestorePointEncryption - Encryption at rest settings for disk restore point. It is an optional property that can be specified
+// in the input while creating a restore point.
+type RestorePointEncryption struct {
+	// Describes the parameter of customer managed disk encryption set resource id that can be specified for disk. Note: The disk
+	// encryption set resource id can only be specified for managed disk. Please
+	// refer https://aka.ms/mdssewithcmkoverview for more details.
+	DiskEncryptionSet *DiskEncryptionSetParameters
 
-// RestorePointCollectionsClientUpdateOptions contains the optional parameters for the RestorePointCollectionsClient.Update
-// method.
-type RestorePointCollectionsClientUpdateOptions struct {
-	// placeholder for future optional parameters
+	// The type of key used to encrypt the data of the disk restore point.
+	Type *RestorePointEncryptionType
 }
 
 // RestorePointInstanceView - The instance view of a restore point.
@@ -5316,6 +4567,9 @@ type RestorePointProperties struct {
 	// will be included.
 	ExcludeDisks []*APIEntityReference
 
+	// Gets the details of the VM captured at the time of the restore point creation.
+	SourceMetadata *RestorePointSourceMetadata
+
 	// Resource Id of the source restore point from which a copy needs to be created.
 	SourceRestorePoint *APIEntityReference
 
@@ -5327,86 +4581,92 @@ type RestorePointProperties struct {
 
 	// READ-ONLY; Gets the provisioning state of the restore point.
 	ProvisioningState *string
-
-	// READ-ONLY; Gets the details of the VM captured at the time of the restore point creation.
-	SourceMetadata *RestorePointSourceMetadata
 }
 
 // RestorePointSourceMetadata - Describes the properties of the Virtual Machine for which the restore point was created. The
 // properties provided are a subset and the snapshot of the overall Virtual Machine properties captured at the
 // time of the restore point creation.
 type RestorePointSourceMetadata struct {
-	// Gets the diagnostics profile.
+	// Gets the storage profile.
+	StorageProfile *RestorePointSourceVMStorageProfile
+
+	// READ-ONLY; Gets the diagnostics profile.
 	DiagnosticsProfile *DiagnosticsProfile
 
-	// Gets the hardware profile.
+	// READ-ONLY; Gets the hardware profile.
 	HardwareProfile *HardwareProfile
 
-	// Gets the license type, which is for bring your own license scenario.
+	// READ-ONLY; HyperVGeneration of the source VM for which restore point is captured.
+	HyperVGeneration *HyperVGenerationTypes
+
+	// READ-ONLY; Gets the license type, which is for bring your own license scenario.
 	LicenseType *string
 
-	// Location of the VM from which the restore point was created.
+	// READ-ONLY; Location of the VM from which the restore point was created.
 	Location *string
 
-	// Gets the OS profile.
+	// READ-ONLY; Gets the OS profile.
 	OSProfile *OSProfile
 
-	// Gets the security profile.
+	// READ-ONLY; Gets the security profile.
 	SecurityProfile *SecurityProfile
 
-	// Gets the storage profile.
-	StorageProfile *RestorePointSourceVMStorageProfile
-
-	// UserData associated with the source VM for which restore point is captured, which is a base-64 encoded value.
+	// READ-ONLY; UserData associated with the source VM for which restore point is captured, which is a base-64 encoded value.
 	UserData *string
 
-	// Gets the virtual machine unique id.
+	// READ-ONLY; Gets the virtual machine unique id.
 	VMID *string
 }
 
 // RestorePointSourceVMDataDisk - Describes a data disk.
 type RestorePointSourceVMDataDisk struct {
-	// Gets the caching type.
-	Caching *CachingTypes
+	// Contains Disk Restore Point properties.
+	DiskRestorePoint *DiskRestorePointAttributes
+
+	// Contains the managed disk details.
+	ManagedDisk *ManagedDiskParameters
 
-	// Gets the disk restore point Id.
-	DiskRestorePoint *APIEntityReference
+	// READ-ONLY; Gets the caching type.
+	Caching *CachingTypes
 
-	// Gets the initial disk size in GB for blank data disks, and the new desired size for existing OS and Data disks.
+	// READ-ONLY; Gets the initial disk size in GB for blank data disks, and the new desired size for existing OS and Data disks.
 	DiskSizeGB *int32
 
-	// Gets the logical unit number.
+	// READ-ONLY; Gets the logical unit number.
 	Lun *int32
 
-	// Gets the managed disk details
-	ManagedDisk *ManagedDiskParameters
-
-	// Gets the disk name.
+	// READ-ONLY; Gets the disk name.
 	Name *string
+
+	// READ-ONLY; Shows true if the disk is write-accelerator enabled.
+	WriteAcceleratorEnabled *bool
 }
 
 // RestorePointSourceVMOSDisk - Describes an Operating System disk.
 type RestorePointSourceVMOSDisk struct {
-	// Gets the caching type.
-	Caching *CachingTypes
+	// Contains Disk Restore Point properties.
+	DiskRestorePoint *DiskRestorePointAttributes
+
+	// Gets the managed disk details
+	ManagedDisk *ManagedDiskParameters
 
-	// Gets the disk restore point Id.
-	DiskRestorePoint *APIEntityReference
+	// READ-ONLY; Gets the caching type.
+	Caching *CachingTypes
 
-	// Gets the disk size in GB.
+	// READ-ONLY; Gets the disk size in GB.
 	DiskSizeGB *int32
 
-	// Gets the disk encryption settings.
+	// READ-ONLY; Gets the disk encryption settings.
 	EncryptionSettings *DiskEncryptionSettings
 
-	// Gets the managed disk details
-	ManagedDisk *ManagedDiskParameters
-
-	// Gets the disk name.
+	// READ-ONLY; Gets the disk name.
 	Name *string
 
-	// Gets the Operating System type.
+	// READ-ONLY; Gets the Operating System type.
 	OSType *OperatingSystemType
+
+	// READ-ONLY; Shows true if the disk is write-accelerator enabled.
+	WriteAcceleratorEnabled *bool
 }
 
 // RestorePointSourceVMStorageProfile - Describes the storage profile.
@@ -5416,25 +4676,9 @@ type RestorePointSourceVMStorageProfile struct {
 
 	// Gets the OS disk of the VM captured at the time of the restore point creation.
 	OSDisk *RestorePointSourceVMOSDisk
-}
-
-// RestorePointsClientBeginCreateOptions contains the optional parameters for the RestorePointsClient.BeginCreate method.
-type RestorePointsClientBeginCreateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RestorePointsClientBeginDeleteOptions contains the optional parameters for the RestorePointsClient.BeginDelete method.
-type RestorePointsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
 
-// RestorePointsClientGetOptions contains the optional parameters for the RestorePointsClient.Get method.
-type RestorePointsClientGetOptions struct {
-	// The expand expression to apply on the operation. 'InstanceView' retrieves information about the run-time state of a restore
-	// point.
-	Expand *RestorePointExpandOptions
+	// READ-ONLY; Gets the disk controller type of the VM captured at the time of the restore point creation.
+	DiskControllerType *DiskControllerTypes
 }
 
 // RetrieveBootDiagnosticsDataResult - The SAS URIs of the console screenshot and serial log blobs.
@@ -5708,6 +4952,21 @@ type RunCommandListResult struct {
 	NextLink *string
 }
 
+// RunCommandManagedIdentity - Contains clientId or objectId (use only one, not both) of a user-assigned managed identity
+// that has access to storage blob used in Run Command. Use an empty RunCommandManagedIdentity object in case of
+// system-assigned identity. Make sure the Azure storage blob exists in case of scriptUri, and managed identity has been given
+// access to blob's container with 'Storage Blob Data Reader' role assignment
+// with scriptUri blob and 'Storage Blob Data Contributor' for Append blobs(outputBlobUri, errorBlobUri). In case of user
+// assigned identity, make sure you add it under VM's identity. For more info on
+// managed identity and Run Command, refer https://aka.ms/ManagedIdentity and https://aka.ms/RunCommandManaged.
+type RunCommandManagedIdentity struct {
+	// Client Id (GUID value) of the user-assigned managed identity. ObjectId should not be used if this is provided.
+	ClientID *string
+
+	// Object Id (GUID value) of the user-assigned managed identity. ClientId should not be used if this is provided.
+	ObjectID *string
+}
+
 // RunCommandParameterDefinition - Describes the properties of a run command parameter.
 type RunCommandParameterDefinition struct {
 	// REQUIRED; The run command parameter name.
@@ -5751,12 +5010,19 @@ type SSHConfiguration struct {
 	PublicKeys []*SSHPublicKey
 }
 
+// SSHGenerateKeyPairInputParameters - Parameters for GenerateSshKeyPair.
+type SSHGenerateKeyPairInputParameters struct {
+	// The encryption type of the SSH keys to be generated. See SshEncryptionTypes for possible set of values. If not provided,
+	// will default to RSA
+	EncryptionType *SSHEncryptionTypes
+}
+
 // SSHPublicKey - Contains information about SSH certificate public key and the path on the Linux VM where the public key
 // is placed.
 type SSHPublicKey struct {
 	// SSH public key certificate used to authenticate with the VM through ssh. The key needs to be at least 2048-bit and in ssh-rsa
-	// format.
-	// For creating ssh keys, see [Create SSH keys on Linux and Mac for Linux VMs in Azure]https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed).
+	// format. For creating ssh keys, see [Create SSH keys on Linux and Mac for
+	// Linux VMs in Azure]https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed).
 	KeyData *string
 
 	// Specifies the full path on the created VM where ssh public key is stored. If the file already exists, the specified key
@@ -5817,44 +5083,6 @@ type SSHPublicKeyUpdateResource struct {
 	Tags map[string]*string
 }
 
-// SSHPublicKeysClientCreateOptions contains the optional parameters for the SSHPublicKeysClient.Create method.
-type SSHPublicKeysClientCreateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SSHPublicKeysClientDeleteOptions contains the optional parameters for the SSHPublicKeysClient.Delete method.
-type SSHPublicKeysClientDeleteOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SSHPublicKeysClientGenerateKeyPairOptions contains the optional parameters for the SSHPublicKeysClient.GenerateKeyPair
-// method.
-type SSHPublicKeysClientGenerateKeyPairOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SSHPublicKeysClientGetOptions contains the optional parameters for the SSHPublicKeysClient.Get method.
-type SSHPublicKeysClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SSHPublicKeysClientListByResourceGroupOptions contains the optional parameters for the SSHPublicKeysClient.NewListByResourceGroupPager
-// method.
-type SSHPublicKeysClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SSHPublicKeysClientListBySubscriptionOptions contains the optional parameters for the SSHPublicKeysClient.NewListBySubscriptionPager
-// method.
-type SSHPublicKeysClientListBySubscriptionOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SSHPublicKeysClientUpdateOptions contains the optional parameters for the SSHPublicKeysClient.Update method.
-type SSHPublicKeysClientUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
 // SSHPublicKeysGroupListResult - The list SSH public keys operation response.
 type SSHPublicKeysGroupListResult struct {
 	// REQUIRED; The list of SSH public keys
@@ -5894,20 +5122,37 @@ type ScheduledEventsProfile struct {
 	TerminateNotificationProfile *TerminateNotificationProfile
 }
 
+// SecurityPostureReference - Specifies the security posture to be used for all virtual machines in the scale set. Minimum
+// api-version: 2023-03-01
+type SecurityPostureReference struct {
+	// List of virtual machine extensions to exclude when applying the Security Posture.
+	ExcludeExtensions []*VirtualMachineExtension
+
+	// The security posture reference id in the form of /CommunityGalleries/{communityGalleryName}/securityPostures/{securityPostureName}/versions/{major.minor.patch}|{major.*}|latest
+	ID *string
+}
+
 // SecurityProfile - Specifies the Security profile settings for the virtual machine or virtual machine scale set.
 type SecurityProfile struct {
 	// This property can be used by user in the request to enable or disable the Host Encryption for the virtual machine or virtual
 	// machine scale set. This will enable the encryption for all the disks
-	// including Resource/Temp disk at host itself.
-	// Default: The Encryption at host will be disabled unless this property is set to true for the resource.
+	// including Resource/Temp disk at host itself. The default behavior is: The Encryption at host will be disabled unless this
+	// property is set to true for the resource.
 	EncryptionAtHost *bool
 
-	// Specifies the SecurityType of the virtual machine. It has to be set to any specified value to enable UefiSettings.
-	// Default: UefiSettings will not be enabled unless this property is set.
+	// Specifies the Managed Identity used by ADE to get access token for keyvault operations.
+	EncryptionIdentity *EncryptionIdentity
+
+	// Specifies ProxyAgent settings while creating the virtual machine. Minimum api-version: 2023-09-01.
+	ProxyAgentSettings *ProxyAgentSettings
+
+	// Specifies the SecurityType of the virtual machine. It has to be set to any specified value to enable UefiSettings. The
+	// default behavior is: UefiSettings will not be enabled unless this property is
+	// set.
 	SecurityType *SecurityTypes
 
-	// Specifies the security settings like secure boot and vTPM used while creating the virtual machine.
-	// Minimum api-version: 2020-12-01
+	// Specifies the security settings like secure boot and vTPM used while creating the virtual machine. Minimum api-version:
+	// 2020-12-01.
 	UefiSettings *UefiSettings
 }
 
@@ -5924,22 +5169,14 @@ type ShareInfoElement struct {
 	VMURI *string
 }
 
-// SharedGalleriesClientGetOptions contains the optional parameters for the SharedGalleriesClient.Get method.
-type SharedGalleriesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SharedGalleriesClientListOptions contains the optional parameters for the SharedGalleriesClient.NewListPager method.
-type SharedGalleriesClientListOptions struct {
-	// The query parameter to decide what shared galleries to fetch when doing listing operations.
-	SharedTo *SharedToValues
-}
-
 // SharedGallery - Specifies information about the Shared Gallery that you want to create or update.
 type SharedGallery struct {
 	// The identifier information of shared gallery.
 	Identifier *SharedGalleryIdentifier
 
+	// Specifies the properties of a shared gallery
+	Properties *SharedGalleryProperties
+
 	// READ-ONLY; Resource location
 	Location *string
 
@@ -6011,15 +5248,15 @@ type SharedGalleryImageProperties struct {
 	OSState *OperatingSystemStateTypes
 
 	// REQUIRED; This property allows you to specify the type of the OS that is included in the disk when creating a VM from a
-	// managed image.
-	// Possible values are:
-	// Windows
-	// Linux
+	// managed image. Possible values are: Windows, Linux.
 	OSType *OperatingSystemTypes
 
 	// The architecture of the image. Applicable to OS disks only.
 	Architecture *Architecture
 
+	// The artifact tags of a shared gallery resource.
+	ArtifactTags map[string]*string
+
 	// Describes the disallowed disk types.
 	Disallowed *Disallowed
 
@@ -6073,6 +5310,9 @@ type SharedGalleryImageVersionList struct {
 
 // SharedGalleryImageVersionProperties - Describes the properties of a gallery image version.
 type SharedGalleryImageVersionProperties struct {
+	// The artifact tags of a shared gallery resource.
+	ArtifactTags map[string]*string
+
 	// The end of life date of the gallery image version Definition. This property can be used for decommissioning purposes. This
 	// property is updatable.
 	EndOfLifeDate *time.Time
@@ -6097,30 +5337,6 @@ type SharedGalleryImageVersionStorageProfile struct {
 	OSDiskImage *SharedGalleryOSDiskImage
 }
 
-// SharedGalleryImageVersionsClientGetOptions contains the optional parameters for the SharedGalleryImageVersionsClient.Get
-// method.
-type SharedGalleryImageVersionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SharedGalleryImageVersionsClientListOptions contains the optional parameters for the SharedGalleryImageVersionsClient.NewListPager
-// method.
-type SharedGalleryImageVersionsClientListOptions struct {
-	// The query parameter to decide what shared galleries to fetch when doing listing operations.
-	SharedTo *SharedToValues
-}
-
-// SharedGalleryImagesClientGetOptions contains the optional parameters for the SharedGalleryImagesClient.Get method.
-type SharedGalleryImagesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SharedGalleryImagesClientListOptions contains the optional parameters for the SharedGalleryImagesClient.NewListPager method.
-type SharedGalleryImagesClientListOptions struct {
-	// The query parameter to decide what shared galleries to fetch when doing listing operations.
-	SharedTo *SharedToValues
-}
-
 // SharedGalleryList - The List Shared Galleries operation response.
 type SharedGalleryList struct {
 	// REQUIRED; A list of shared galleries.
@@ -6139,16 +5355,18 @@ type SharedGalleryOSDiskImage struct {
 	DiskSizeGB *int32
 }
 
+// SharedGalleryProperties - Specifies the properties of a shared gallery
+type SharedGalleryProperties struct {
+	// READ-ONLY; The artifact tags of a shared gallery resource.
+	ArtifactTags map[string]*string
+}
+
 // SharingProfile - Profile for gallery sharing to subscription or tenant
 type SharingProfile struct {
 	// Information of community gallery if current gallery is shared to community.
 	CommunityGalleryInfo *CommunityGalleryInfo
 
-	// This property allows you to specify the permission of sharing gallery.
-	// Possible values are:
-	// Private
-	// Groups
-	// Community
+	// This property allows you to specify the permission of sharing gallery. Possible values are: Private, Groups, Community.
 	Permissions *GallerySharingPermissionTypes
 
 	// READ-ONLY; A list of sharing profile groups.
@@ -6160,10 +5378,7 @@ type SharingProfileGroup struct {
 	// A list of subscription/tenant ids the gallery is aimed to be shared to.
 	IDs []*string
 
-	// This property allows you to specify the type of sharing group.
-	// Possible values are:
-	// Subscriptions
-	// AADTenants
+	// This property allows you to specify the type of sharing group. Possible values are: Subscriptions, AADTenants.
 	Type *SharingProfileGroupTypes
 }
 
@@ -6178,11 +5393,8 @@ type SharingStatus struct {
 
 // SharingUpdate - Specifies information about the gallery sharing profile update.
 type SharingUpdate struct {
-	// REQUIRED; This property allows you to specify the operation type of gallery sharing update.
-	// Possible values are:
-	// Add
-	// Remove
-	// Reset
+	// REQUIRED; This property allows you to specify the operation type of gallery sharing update. Possible values are: Add, Remove,
+	// Reset.
 	OperationType *SharingUpdateOperationTypes
 
 	// A list of sharing profile groups.
@@ -6366,53 +5578,6 @@ type SnapshotUpdateProperties struct {
 	SupportsHibernation *bool
 }
 
-// SnapshotsClientBeginCreateOrUpdateOptions contains the optional parameters for the SnapshotsClient.BeginCreateOrUpdate
-// method.
-type SnapshotsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SnapshotsClientBeginDeleteOptions contains the optional parameters for the SnapshotsClient.BeginDelete method.
-type SnapshotsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SnapshotsClientBeginGrantAccessOptions contains the optional parameters for the SnapshotsClient.BeginGrantAccess method.
-type SnapshotsClientBeginGrantAccessOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SnapshotsClientBeginRevokeAccessOptions contains the optional parameters for the SnapshotsClient.BeginRevokeAccess method.
-type SnapshotsClientBeginRevokeAccessOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SnapshotsClientBeginUpdateOptions contains the optional parameters for the SnapshotsClient.BeginUpdate method.
-type SnapshotsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SnapshotsClientGetOptions contains the optional parameters for the SnapshotsClient.Get method.
-type SnapshotsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SnapshotsClientListByResourceGroupOptions contains the optional parameters for the SnapshotsClient.NewListByResourceGroupPager
-// method.
-type SnapshotsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SnapshotsClientListOptions contains the optional parameters for the SnapshotsClient.NewListPager method.
-type SnapshotsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // SoftDeletePolicy - Contains information about the soft deletion policy of the gallery.
 type SoftDeletePolicy struct {
 	// Enables soft-deletion for resources in this gallery, allowing them to be recovered within retention time.
@@ -6425,8 +5590,8 @@ type SourceVault struct {
 	ID *string
 }
 
-// SpotRestorePolicy - Specifies the Spot-Try-Restore properties for the virtual machine scale set.
-// With this property customer can enable or disable automatic restore of the evicted Spot VMSS VM instances opportunistically
+// SpotRestorePolicy - Specifies the Spot-Try-Restore properties for the virtual machine scale set. With this property customer
+// can enable or disable automatic restore of the evicted Spot VMSS VM instances opportunistically
 // based on capacity availability and pricing constraint.
 type SpotRestorePolicy struct {
 	// Enables the Spot-Try-Restore feature where evicted VMSS SPOT instances will be tried to be restored opportunistically based
@@ -6448,17 +5613,17 @@ type StatusCodeCount struct {
 
 // StorageProfile - Specifies the storage settings for the virtual machine disks.
 type StorageProfile struct {
-	// Specifies the parameters that are used to add a data disk to a virtual machine.
-	// For more information about disks, see About disks and VHDs for Azure virtual machines [https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview].
+	// Specifies the parameters that are used to add a data disk to a virtual machine. For more information about disks, see About
+	// disks and VHDs for Azure virtual machines
+	// [https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview].
 	DataDisks []*DataDisk
 
-	// Specifies the disk controller type configured for the VM.
-	// NOTE: This property will be set to the default disk controller type if not specified provided virtual machine is being
-	// created as a hyperVGeneration: V2 based on the capabilities of the operating
-	// system disk and VM size from the the specified minimum api version.
-	// You need to deallocate the VM before updating its disk controller type unless you are updating the VM size in the VM configuration
-	// which implicitly deallocates and reallocates the VM.
-	// Minimum api-version: 2022-08-01
+	// Specifies the disk controller type configured for the VM. Note: This property will be set to the default disk controller
+	// type if not specified provided virtual machine is being created with
+	// 'hyperVGeneration' set to V2 based on the capabilities of the operating system disk and VM size from the the specified
+	// minimum api version. You need to deallocate the VM before updating its disk
+	// controller type unless you are updating the VM size in the VM configuration which implicitly deallocates and reallocates
+	// the VM. Minimum api-version: 2022-08-01.
 	DiskControllerType *DiskControllerTypes
 
 	// Specifies information about the image to use. You can specify information about platform images, marketplace images, or
@@ -6466,8 +5631,9 @@ type StorageProfile struct {
 	// image, marketplace image, or virtual machine image, but is not used in other creation operations.
 	ImageReference *ImageReference
 
-	// Specifies information about the operating system disk used by the virtual machine.
-	// For more information about disks, see About disks and VHDs for Azure virtual machines [https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview].
+	// Specifies information about the operating system disk used by the virtual machine. For more information about disks, see
+	// About disks and VHDs for Azure virtual machines
+	// [https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview].
 	OSDisk *OSDisk
 }
 
@@ -6567,15 +5733,37 @@ type ThrottledRequestsInput struct {
 	GroupByUserAgent *bool
 }
 
-// UefiSettings - Specifies the security settings like secure boot and vTPM used while creating the virtual machine.
-// Minimum api-version: 2020-12-01
+// UefiKey - A UEFI key signature.
+type UefiKey struct {
+	// The type of key signature.
+	Type *UefiKeyType
+
+	// The value of the key signature.
+	Value []*string
+}
+
+// UefiKeySignatures - Additional UEFI key signatures that will be added to the image in addition to the signature templates
+type UefiKeySignatures struct {
+	// The database of UEFI keys for this image version.
+	Db []*UefiKey
+
+	// The database of revoked UEFI keys for this image version.
+	Dbx []*UefiKey
+
+	// The Key Encryption Keys of this image version.
+	Kek []*UefiKey
+
+	// The Platform Key of this image version.
+	Pk *UefiKey
+}
+
+// UefiSettings - Specifies the security settings like secure boot and vTPM used while creating the virtual machine. Minimum
+// api-version: 2020-12-01.
 type UefiSettings struct {
-	// Specifies whether secure boot should be enabled on the virtual machine.
-	// Minimum api-version: 2020-12-01
+	// Specifies whether secure boot should be enabled on the virtual machine. Minimum api-version: 2020-12-01.
 	SecureBootEnabled *bool
 
-	// Specifies whether vTPM should be enabled on the virtual machine.
-	// Minimum api-version: 2020-12-01
+	// Specifies whether vTPM should be enabled on the virtual machine. Minimum api-version: 2020-12-01.
 	VTpmEnabled *bool
 }
 
@@ -6695,11 +5883,6 @@ type Usage struct {
 	Unit *string
 }
 
-// UsageClientListOptions contains the optional parameters for the UsageClient.NewListPager method.
-type UsageClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // UsageName - The Usage Names.
 type UsageName struct {
 	// The localized name of the resource.
@@ -6752,17 +5935,17 @@ type UserAssignedIdentitiesValue struct {
 	PrincipalID *string
 }
 
-// VMDiskSecurityProfile - Specifies the security profile settings for the managed disk.
-// NOTE: It can only be set for Confidential VMs
+// VMDiskSecurityProfile - Specifies the security profile settings for the managed disk. Note: It can only be set for Confidential
+// VMs.
 type VMDiskSecurityProfile struct {
 	// Specifies the customer managed disk encryption set resource id for the managed disk that is used for Customer Managed Key
 	// encrypted ConfidentialVM OS Disk and VMGuest blob.
 	DiskEncryptionSet *DiskEncryptionSetParameters
 
-	// Specifies the EncryptionType of the managed disk.
-	// It is set to DiskWithVMGuestState for encryption of the managed disk along with VMGuestState blob, and VMGuestStateOnly
-	// for encryption of just the VMGuestState blob.
-	// NOTE: It can be set for only Confidential VMs.
+	// Specifies the EncryptionType of the managed disk. It is set to DiskWithVMGuestState for encryption of the managed disk
+	// along with VMGuestState blob, VMGuestStateOnly for encryption of just the
+	// VMGuestState blob, and NonPersistedTPM for not persisting firmware state in the VMGuestState blob.. Note: It can be set
+	// for only Confidential VMs.
 	SecurityEncryptionType *SecurityEncryptionTypes
 }
 
@@ -6807,16 +5990,14 @@ type VMScaleSetConvertToSinglePlacementGroupInput struct {
 
 // VMSizeProperties - Specifies VM Size Property settings on the virtual machine.
 type VMSizeProperties struct {
-	// Specifies the number of vCPUs available for the VM.
-	// When this property is not specified in the request body the default behavior is to set it to the value of vCPUs available
-	// for that VM size exposed in api response of List all available virtual machine
-	// sizes in a region [https://docs.microsoft.com/en-us/rest/api/compute/resource-skus/list] .
+	// Specifies the number of vCPUs available for the VM. When this property is not specified in the request body the default
+	// behavior is to set it to the value of vCPUs available for that VM size exposed
+	// in api response of List all available virtual machine sizes in a region [https://docs.microsoft.com/en-us/rest/api/compute/resource-skus/list].
 	VCPUsAvailable *int32
 
-	// Specifies the vCPU to physical core ratio.
-	// When this property is not specified in the request body the default behavior is set to the value of vCPUsPerCore for the
-	// VM Size exposed in api response of List all available virtual machine sizes in
-	// a region [https://docs.microsoft.com/en-us/rest/api/compute/resource-skus/list]
+	// Specifies the vCPU to physical core ratio. When this property is not specified in the request body the default behavior
+	// is set to the value of vCPUsPerCore for the VM Size exposed in api response of
+	// List all available virtual machine sizes in a region [https://docs.microsoft.com/en-us/rest/api/compute/resource-skus/list].
 	// Setting this property to 1 also means that hyper-threading is disabled.
 	VCPUsPerCore *int32
 }
@@ -6825,10 +6006,10 @@ type VMSizeProperties struct {
 // the VM.
 type VaultCertificate struct {
 	// For Windows VMs, specifies the certificate store on the Virtual Machine to which the certificate should be added. The specified
-	// certificate store is implicitly in the LocalMachine account.
-	// For Linux VMs, the certificate file is placed under the /var/lib/waagent directory, with the file name <UppercaseThumbprint>.crt
-	// for the X509 certificate file and <UppercaseThumbprint>.prv for private
-	// key. Both of these files are .pem formatted.
+	// certificate store is implicitly in the LocalMachine account. For Linux
+	// VMs, the certificate file is placed under the /var/lib/waagent directory, with the file name <UppercaseThumbprint>.crt
+	// for the X509 certificate file and <UppercaseThumbprint>.prv for private key. Both
+	// of these files are .pem formatted.
 	CertificateStore *string
 
 	// This is the URL of a certificate that has been uploaded to Key Vault as a secret. For adding a secret to the Key Vault,
@@ -6890,9 +6071,17 @@ type VirtualMachine struct {
 	// The virtual machine zones.
 	Zones []*string
 
+	// READ-ONLY; Etag is property returned in Create/Update/Get response of the VM, so that customer can supply it in the header
+	// to ensure optimistic updates.
+	Etag *string
+
 	// READ-ONLY; Resource Id
 	ID *string
 
+	// READ-ONLY; ManagedBy is set to Virtual Machine Scale Set(VMSS) flex ARM resourceID, if the VM is part of the VMSS. This
+	// property is used by platform for internal resource group delete optimization.
+	ManagedBy *string
+
 	// READ-ONLY; Resource name
 	Name *string
 
@@ -7050,27 +6239,6 @@ type VirtualMachineExtensionImageProperties struct {
 	VMScaleSetEnabled *bool
 }
 
-// VirtualMachineExtensionImagesClientGetOptions contains the optional parameters for the VirtualMachineExtensionImagesClient.Get
-// method.
-type VirtualMachineExtensionImagesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineExtensionImagesClientListTypesOptions contains the optional parameters for the VirtualMachineExtensionImagesClient.ListTypes
-// method.
-type VirtualMachineExtensionImagesClientListTypesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineExtensionImagesClientListVersionsOptions contains the optional parameters for the VirtualMachineExtensionImagesClient.ListVersions
-// method.
-type VirtualMachineExtensionImagesClientListVersionsOptions struct {
-	// The filter to apply on the operation.
-	Filter  *string
-	Orderby *string
-	Top     *int32
-}
-
 // VirtualMachineExtensionInstanceView - The instance view of a virtual machine extension.
 type VirtualMachineExtensionInstanceView struct {
 	// The virtual machine extension name.
@@ -7112,6 +6280,9 @@ type VirtualMachineExtensionProperties struct {
 	// The extensions protected settings that are passed by reference, and consumed from key vault
 	ProtectedSettingsFromKeyVault *KeyVaultSecretReference
 
+	// Collection of extension names after which this extension needs to be provisioned.
+	ProvisionAfterExtensions []*string
+
 	// The name of the extension handler publisher.
 	Publisher *string
 
@@ -7178,40 +6349,6 @@ type VirtualMachineExtensionUpdateProperties struct {
 	TypeHandlerVersion *string
 }
 
-// VirtualMachineExtensionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineExtensionsClient.BeginCreateOrUpdate
-// method.
-type VirtualMachineExtensionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineExtensionsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineExtensionsClient.BeginDelete
-// method.
-type VirtualMachineExtensionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineExtensionsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineExtensionsClient.BeginUpdate
-// method.
-type VirtualMachineExtensionsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineExtensionsClientGetOptions contains the optional parameters for the VirtualMachineExtensionsClient.Get method.
-type VirtualMachineExtensionsClientGetOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *string
-}
-
-// VirtualMachineExtensionsClientListOptions contains the optional parameters for the VirtualMachineExtensionsClient.List
-// method.
-type VirtualMachineExtensionsClientListOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *string
-}
-
 // VirtualMachineExtensionsListResult - The List Extension operation response
 type VirtualMachineExtensionsListResult struct {
 	// The list of extensions
@@ -7311,96 +6448,24 @@ type VirtualMachineImageProperties struct {
 	Plan *PurchasePlan
 }
 
-// VirtualMachineImageResource - Virtual machine image resource information.
-type VirtualMachineImageResource struct {
-	// REQUIRED; The supported Azure location of the resource.
-	Location *string
-
-	// REQUIRED; The name of the resource.
-	Name *string
-
-	// The extended location of the Virtual Machine.
-	ExtendedLocation *ExtendedLocation
-
-	// Resource Id
-	ID *string
-
-	// Specifies the tags that are assigned to the virtual machine. For more information about using tags, see Using tags to organize
-	// your Azure resources
-	// [https://docs.microsoft.com/azure/azure-resource-manager/resource-group-using-tags.md].
-	Tags map[string]*string
-}
-
-// VirtualMachineImagesClientGetOptions contains the optional parameters for the VirtualMachineImagesClient.Get method.
-type VirtualMachineImagesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineImagesClientListByEdgeZoneOptions contains the optional parameters for the VirtualMachineImagesClient.ListByEdgeZone
-// method.
-type VirtualMachineImagesClientListByEdgeZoneOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineImagesClientListOffersOptions contains the optional parameters for the VirtualMachineImagesClient.ListOffers
-// method.
-type VirtualMachineImagesClientListOffersOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineImagesClientListOptions contains the optional parameters for the VirtualMachineImagesClient.List method.
-type VirtualMachineImagesClientListOptions struct {
-	// The expand expression to apply on the operation.
-	Expand  *string
-	Orderby *string
-	Top     *int32
-}
-
-// VirtualMachineImagesClientListPublishersOptions contains the optional parameters for the VirtualMachineImagesClient.ListPublishers
-// method.
-type VirtualMachineImagesClientListPublishersOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineImagesClientListSKUsOptions contains the optional parameters for the VirtualMachineImagesClient.ListSKUs
-// method.
-type VirtualMachineImagesClientListSKUsOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineImagesEdgeZoneClientGetOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.Get
-// method.
-type VirtualMachineImagesEdgeZoneClientGetOptions struct {
-	// placeholder for future optional parameters
-}
+// VirtualMachineImageResource - Virtual machine image resource information.
+type VirtualMachineImageResource struct {
+	// REQUIRED; The supported Azure location of the resource.
+	Location *string
 
-// VirtualMachineImagesEdgeZoneClientListOffersOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.ListOffers
-// method.
-type VirtualMachineImagesEdgeZoneClientListOffersOptions struct {
-	// placeholder for future optional parameters
-}
+	// REQUIRED; The name of the resource.
+	Name *string
 
-// VirtualMachineImagesEdgeZoneClientListOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.List
-// method.
-type VirtualMachineImagesEdgeZoneClientListOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *string
-	// Specifies the order of the results returned. Formatted as an OData query.
-	Orderby *string
-	// An integer value specifying the number of images to return that matches supplied values.
-	Top *int32
-}
+	// The extended location of the Virtual Machine.
+	ExtendedLocation *ExtendedLocation
 
-// VirtualMachineImagesEdgeZoneClientListPublishersOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.ListPublishers
-// method.
-type VirtualMachineImagesEdgeZoneClientListPublishersOptions struct {
-	// placeholder for future optional parameters
-}
+	// Resource Id
+	ID *string
 
-// VirtualMachineImagesEdgeZoneClientListSKUsOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.ListSKUs
-// method.
-type VirtualMachineImagesEdgeZoneClientListSKUsOptions struct {
-	// placeholder for future optional parameters
+	// Specifies the tags that are assigned to the virtual machine. For more information about using tags, see Using tags to organize
+	// your Azure resources
+	// [https://docs.microsoft.com/azure/azure-resource-manager/resource-group-using-tags.md].
+	Tags map[string]*string
 }
 
 // VirtualMachineInstallPatchesParameters - Input for InstallPatches as directly received by the API
@@ -7463,9 +6528,9 @@ type VirtualMachineInstallPatchesResult struct {
 
 // VirtualMachineInstanceView - The instance view of a virtual machine.
 type VirtualMachineInstanceView struct {
-	// Boot Diagnostics is a debugging feature which allows you to view Console Output and Screenshot to diagnose VM status.
-	// You can easily view the output of your console log.
-	// Azure also enables you to see a screenshot of the VM from the hypervisor.
+	// Boot Diagnostics is a debugging feature which allows you to view Console Output and Screenshot to diagnose VM status. You
+	// can easily view the output of your console log. Azure also enables you to see
+	// a screenshot of the VM from the hypervisor.
 	BootDiagnostics *BootDiagnosticsInstanceView
 
 	// The computer name assigned to the virtual machine.
@@ -7509,10 +6574,12 @@ type VirtualMachineInstanceView struct {
 
 	// READ-ONLY; Resource id of the dedicated host, on which the virtual machine is allocated through automatic placement, when
 	// the virtual machine is associated with a dedicated host group that has automatic
-	// placement enabled.
-	// Minimum api-version: 2020-06-01.
+	// placement enabled. Minimum api-version: 2020-06-01.
 	AssignedHost *string
 
+	// READ-ONLY; [Preview Feature] Specifies whether the VM is currently in or out of the Standby Pool.
+	IsVMInStandbyPool *bool
+
 	// READ-ONLY; The health status for the VM.
 	VMHealth *VirtualMachineHealthStatus
 }
@@ -7540,6 +6607,12 @@ type VirtualMachineNetworkInterfaceConfigurationProperties struct {
 	// REQUIRED; Specifies the IP configurations of the network interface.
 	IPConfigurations []*VirtualMachineNetworkInterfaceIPConfiguration
 
+	// Specifies whether the Auxiliary mode is enabled for the Network Interface resource.
+	AuxiliaryMode *NetworkInterfaceAuxiliaryMode
+
+	// Specifies whether the Auxiliary sku is enabled for the Network Interface resource.
+	AuxiliarySKU *NetworkInterfaceAuxiliarySKU
+
 	// The dns settings to be applied on the network interfaces.
 	DNSSettings *VirtualMachineNetworkInterfaceDNSSettingsConfiguration
 
@@ -7628,52 +6701,47 @@ type VirtualMachineProperties struct {
 	// Specifies additional capabilities enabled or disabled on the virtual machine.
 	AdditionalCapabilities *AdditionalCapabilities
 
-	// Specifies the gallery applications that should be made available to the VM/VMSS
+	// Specifies the gallery applications that should be made available to the VM/VMSS.
 	ApplicationProfile *ApplicationProfile
 
 	// Specifies information about the availability set that the virtual machine should be assigned to. Virtual machines specified
 	// in the same availability set are allocated to different nodes to maximize
 	// availability. For more information about availability sets, see Availability sets overview [https://docs.microsoft.com/azure/virtual-machines/availability-set-overview].
-	// For more information on Azure planned maintenance, see Maintenance and updates for Virtual Machines in Azure [https://docs.microsoft.com/azure/virtual-machines/maintenance-and-updates]
-	// Currently, a VM can only be added to availability set at creation time. The availability set to which the VM is being added
-	// should be under the same resource group as the availability set resource. An
-	// existing VM cannot be added to an availability set.
-	// This property cannot exist along with a non-null properties.virtualMachineScaleSet reference.
+	// For more information on Azure
+	// planned maintenance, see Maintenance and updates for Virtual Machines in Azure [https://docs.microsoft.com/azure/virtual-machines/maintenance-and-updates].
+	// Currently, a VM can only be added to
+	// availability set at creation time. The availability set to which the VM is being added should be under the same resource
+	// group as the availability set resource. An existing VM cannot be added to an
+	// availability set. This property cannot exist along with a non-null properties.virtualMachineScaleSet reference.
 	AvailabilitySet *SubResource
 
-	// Specifies the billing related details of a Azure Spot virtual machine.
-	// Minimum api-version: 2019-03-01.
+	// Specifies the billing related details of a Azure Spot virtual machine. Minimum api-version: 2019-03-01.
 	BillingProfile *BillingProfile
 
-	// Specifies information about the capacity reservation that is used to allocate virtual machine.
-	// Minimum api-version: 2021-04-01.
+	// Specifies information about the capacity reservation that is used to allocate virtual machine. Minimum api-version: 2021-04-01.
 	CapacityReservation *CapacityReservationProfile
 
-	// Specifies the boot diagnostic settings state.
-	// Minimum api-version: 2015-06-15.
+	// Specifies the boot diagnostic settings state. Minimum api-version: 2015-06-15.
 	DiagnosticsProfile *DiagnosticsProfile
 
-	// Specifies the eviction policy for the Azure Spot virtual machine and Azure Spot scale set.
-	// For Azure Spot virtual machines, both 'Deallocate' and 'Delete' are supported and the minimum api-version is 2019-03-01.
-	// For Azure Spot scale sets, both 'Deallocate' and 'Delete' are supported and the minimum api-version is 2017-10-30-preview.
+	// Specifies the eviction policy for the Azure Spot virtual machine and Azure Spot scale set. For Azure Spot virtual machines,
+	// both 'Deallocate' and 'Delete' are supported and the minimum api-version is
+	// 2019-03-01. For Azure Spot scale sets, both 'Deallocate' and 'Delete' are supported and the minimum api-version is 2017-10-30-preview.
 	EvictionPolicy *VirtualMachineEvictionPolicyTypes
 
 	// Specifies the time alloted for all extensions to start. The time duration should be between 15 minutes and 120 minutes
 	// (inclusive) and should be specified in ISO 8601 format. The default value is 90
-	// minutes (PT1H30M).
-	// Minimum api-version: 2020-06-01
+	// minutes (PT1H30M). Minimum api-version: 2020-06-01.
 	ExtensionsTimeBudget *string
 
 	// Specifies the hardware settings for the virtual machine.
 	HardwareProfile *HardwareProfile
 
-	// Specifies information about the dedicated host that the virtual machine resides in.
-	// Minimum api-version: 2018-10-01.
+	// Specifies information about the dedicated host that the virtual machine resides in. Minimum api-version: 2018-10-01.
 	Host *SubResource
 
-	// Specifies information about the dedicated host group that the virtual machine resides in.
-	// Minimum api-version: 2020-06-01.
-	// NOTE: User cannot specify both host and hostGroup properties.
+	// Specifies information about the dedicated host group that the virtual machine resides in. Note: User cannot specify both
+	// host and hostGroup properties. Minimum api-version: 2020-06-01.
 	HostGroup *SubResource
 
 	// Specifies that the image or disk that is being used was licensed on-premises.
@@ -7697,20 +6765,18 @@ type VirtualMachineProperties struct {
 
 	// Specifies the scale set logical fault domain into which the Virtual Machine will be created. By default, the Virtual Machine
 	// will by automatically assigned to a fault domain that best maintains
-	// balance across available fault domains.
-	// This is applicable only if the 'virtualMachineScaleSet' property of this Virtual Machine is set.The Virtual Machine Scale
-	// Set that is referenced, must have 'platformFaultDomainCount' > 1.This property
-	// cannot be updated once the Virtual Machine is created.Fault domain assignment can be viewed in the Virtual Machine Instance
-	// View.
-	// Minimum api‐version: 2020‐12‐01
+	// balance across available fault domains. This is applicable only if the 'virtualMachineScaleSet' property of this Virtual
+	// Machine is set. The Virtual Machine Scale Set that is referenced, must have
+	// 'platformFaultDomainCount' greater than 1. This property cannot be updated once the Virtual Machine is created. Fault domain
+	// assignment can be viewed in the Virtual Machine Instance View. Minimum
+	// api‐version: 2020‐12‐01.
 	PlatformFaultDomain *int32
 
-	// Specifies the priority for the virtual machine.
-	// Minimum api-version: 2019-03-01
+	// Specifies the priority for the virtual machine. Minimum api-version: 2019-03-01
 	Priority *VirtualMachinePriorityTypes
 
-	// Specifies information about the proximity placement group that the virtual machine should be assigned to.
-	// Minimum api-version: 2018-04-01.
+	// Specifies information about the proximity placement group that the virtual machine should be assigned to. Minimum api-version:
+	// 2018-04-01.
 	ProximityPlacementGroup *SubResource
 
 	// Specifies Scheduled Event related configurations.
@@ -7722,16 +6788,15 @@ type VirtualMachineProperties struct {
 	// Specifies the storage settings for the virtual machine disks.
 	StorageProfile *StorageProfile
 
-	// UserData for the VM, which must be base-64 encoded. Customer should not pass any secrets in here.
-	// Minimum api-version: 2021-03-01
+	// UserData for the VM, which must be base-64 encoded. Customer should not pass any secrets in here. Minimum api-version:
+	// 2021-03-01.
 	UserData *string
 
 	// Specifies information about the virtual machine scale set that the virtual machine should be assigned to. Virtual machines
 	// specified in the same virtual machine scale set are allocated to different
 	// nodes to maximize availability. Currently, a VM can only be added to virtual machine scale set at creation time. An existing
-	// VM cannot be added to a virtual machine scale set.
-	// This property cannot exist along with a non-null properties.availabilitySet reference.
-	// Minimum api‐version: 2019‐03‐01
+	// VM cannot be added to a virtual machine scale set. This property cannot
+	// exist along with a non-null properties.availabilitySet reference. Minimum api‐version: 2019‐03‐01.
 	VirtualMachineScaleSet *SubResource
 
 	// READ-ONLY; The virtual machine instance view.
@@ -7740,8 +6805,7 @@ type VirtualMachineProperties struct {
 	// READ-ONLY; The provisioning state, which only appears in the response.
 	ProvisioningState *string
 
-	// READ-ONLY; Specifies the time at which the Virtual Machine resource was created.
-	// Minimum api-version: 2021-11-01.
+	// READ-ONLY; Specifies the time at which the Virtual Machine resource was created. Minimum api-version: 2021-11-01.
 	TimeCreated *time.Time
 
 	// READ-ONLY; Specifies the VM unique ID which is a 128-bits identifier that is encoded and stored in all Azure IaaS VMs SMBIOS
@@ -7792,6 +6856,11 @@ type VirtualMachinePublicIPAddressDNSSettingsConfiguration struct {
 	// REQUIRED; The Domain name label prefix of the PublicIPAddress resources that will be created. The generated name label
 	// is the concatenation of the domain name label and vm network profile unique ID.
 	DomainNameLabel *string
+
+	// The Domain name label scope of the PublicIPAddress resources that will be created. The generated name label is the concatenation
+	// of the hashed domain name label with policy according to the domain
+	// name label scope and vm network profile unique ID.
+	DomainNameLabelScope *DomainNameLabelScopeTypes
 }
 
 // VirtualMachineReimageParameters - Parameters for Reimaging Virtual Machine. NOTE: Virtual Machine OS disk will always be
@@ -7862,10 +6931,28 @@ type VirtualMachineRunCommandProperties struct {
 	// Optional. If set to true, provisioning will complete as soon as the script starts and will not wait for script to complete.
 	AsyncExecution *bool
 
-	// Specifies the Azure storage blob where script error stream will be uploaded.
+	// User-assigned managed identity that has access to errorBlobUri storage blob. Use an empty object in case of system-assigned
+	// identity. Make sure managed identity has been given access to blob's
+	// container with 'Storage Blob Data Contributor' role assignment. In case of user-assigned identity, make sure you add it
+	// under VM's identity. For more info on managed identity and Run Command, refer
+	// https://aka.ms/ManagedIdentity and https://aka.ms/RunCommandManaged
+	ErrorBlobManagedIdentity *RunCommandManagedIdentity
+
+	// Specifies the Azure storage blob where script error stream will be uploaded. Use a SAS URI with read, append, create, write
+	// access OR use managed identity to provide the VM access to the blob. Refer
+	// errorBlobManagedIdentity parameter.
 	ErrorBlobURI *string
 
-	// Specifies the Azure storage blob where script output stream will be uploaded.
+	// User-assigned managed identity that has access to outputBlobUri storage blob. Use an empty object in case of system-assigned
+	// identity. Make sure managed identity has been given access to blob's
+	// container with 'Storage Blob Data Contributor' role assignment. In case of user-assigned identity, make sure you add it
+	// under VM's identity. For more info on managed identity and Run Command, refer
+	// https://aka.ms/ManagedIdentity and https://aka.ms/RunCommandManaged
+	OutputBlobManagedIdentity *RunCommandManagedIdentity
+
+	// Specifies the Azure storage blob where script output stream will be uploaded. Use a SAS URI with read, append, create,
+	// write access OR use managed identity to provide the VM access to the blob. Refer
+	// outputBlobManagedIdentity parameter.
 	OutputBlobURI *string
 
 	// The parameters used by the script.
@@ -7886,14 +6973,27 @@ type VirtualMachineRunCommandProperties struct {
 	// The timeout in seconds to execute the run command.
 	TimeoutInSeconds *int32
 
+	// Optional. If set to true, any failure in the script will fail the deployment and ProvisioningState will be marked as Failed.
+	// If set to false, ProvisioningState would only reflect whether the run
+	// command was run or not by the extensions platform, it would not indicate whether script failed in case of script failures.
+	// See instance view of run command in case of script failures to see
+	// executionMessage, output, error: https://aka.ms/runcommandmanaged#get-execution-status-and-results
+	TreatFailureAsDeploymentFailure *bool
+
 	// READ-ONLY; The virtual machine run command instance view.
 	InstanceView *VirtualMachineRunCommandInstanceView
 
-	// READ-ONLY; The provisioning state, which only appears in the response.
+	// READ-ONLY; The provisioning state, which only appears in the response. If treatFailureAsDeploymentFailure set to true,
+	// any failure in the script will fail the deployment and ProvisioningState will be marked as
+	// Failed. If treatFailureAsDeploymentFailure set to false, ProvisioningState would only reflect whether the run command was
+	// run or not by the extensions platform, it would not indicate whether script
+	// failed in case of script failures. See instance view of run command in case of script failures to see executionMessage,
+	// output, error: https://aka.ms/runcommandmanaged#get-execution-status-and-results
 	ProvisioningState *string
 }
 
-// VirtualMachineRunCommandScriptSource - Describes the script sources for run command.
+// VirtualMachineRunCommandScriptSource - Describes the script sources for run command. Use only one of script, scriptUri,
+// commandId.
 type VirtualMachineRunCommandScriptSource struct {
 	// Specifies a commandId of predefined built-in script.
 	CommandID *string
@@ -7901,8 +7001,15 @@ type VirtualMachineRunCommandScriptSource struct {
 	// Specifies the script content to be executed on the VM.
 	Script *string
 
-	// Specifies the script download location.
+	// Specifies the script download location. It can be either SAS URI of an Azure storage blob with read access or public URI.
 	ScriptURI *string
+
+	// User-assigned managed identity that has access to scriptUri in case of Azure storage blob. Use an empty object in case
+	// of system-assigned identity. Make sure the Azure storage blob exists, and managed
+	// identity has been given access to blob's container with 'Storage Blob Data Reader' role assignment. In case of user-assigned
+	// identity, make sure you add it under VM's identity. For more info on
+	// managed identity and Run Command, refer https://aka.ms/ManagedIdentity and https://aka.ms/RunCommandManaged.
+	ScriptURIManagedIdentity *RunCommandManagedIdentity
 }
 
 // VirtualMachineRunCommandUpdate - Describes a Virtual Machine run command.
@@ -7914,53 +7021,6 @@ type VirtualMachineRunCommandUpdate struct {
 	Tags map[string]*string
 }
 
-// VirtualMachineRunCommandsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineRunCommandsClient.BeginCreateOrUpdate
-// method.
-type VirtualMachineRunCommandsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineRunCommandsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineRunCommandsClient.BeginDelete
-// method.
-type VirtualMachineRunCommandsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineRunCommandsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineRunCommandsClient.BeginUpdate
-// method.
-type VirtualMachineRunCommandsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineRunCommandsClientGetByVirtualMachineOptions contains the optional parameters for the VirtualMachineRunCommandsClient.GetByVirtualMachine
-// method.
-type VirtualMachineRunCommandsClientGetByVirtualMachineOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *string
-}
-
-// VirtualMachineRunCommandsClientGetOptions contains the optional parameters for the VirtualMachineRunCommandsClient.Get
-// method.
-type VirtualMachineRunCommandsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineRunCommandsClientListByVirtualMachineOptions contains the optional parameters for the VirtualMachineRunCommandsClient.NewListByVirtualMachinePager
-// method.
-type VirtualMachineRunCommandsClientListByVirtualMachineOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *string
-}
-
-// VirtualMachineRunCommandsClientListOptions contains the optional parameters for the VirtualMachineRunCommandsClient.NewListPager
-// method.
-type VirtualMachineRunCommandsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualMachineRunCommandsListResult - The List run command operation response
 type VirtualMachineRunCommandsListResult struct {
 	// REQUIRED; The list of run commands
@@ -8000,6 +7060,10 @@ type VirtualMachineScaleSet struct {
 	// The virtual machine scale set zones. NOTE: Availability zones can only be set when you create the scale set
 	Zones []*string
 
+	// READ-ONLY; Etag is property returned in Create/Update/Get response of the VMSS, so that customer can supply it in the header
+	// to ensure optimistic updates
+	Etag *string
+
 	// READ-ONLY; Resource Id
 	ID *string
 
@@ -8019,12 +7083,8 @@ type VirtualMachineScaleSetDataDisk struct {
 	// therefore must be unique for each data disk attached to a VM.
 	Lun *int32
 
-	// Specifies the caching requirements.
-	// Possible values are:
-	// None
-	// ReadOnly
-	// ReadWrite
-	// Default: None for Standard storage. ReadOnly for Premium storage
+	// Specifies the caching requirements. Possible values are: None, ReadOnly, ReadWrite. The default values are: None for Standard
+	// storage. ReadOnly for Premium storage.
 	Caching *CachingTypes
 
 	// Specifies whether data disk should be deleted or detached upon VMSS Flex deletion (This feature is available for VMSS with
@@ -8044,8 +7104,8 @@ type VirtualMachineScaleSetDataDisk struct {
 	DiskMBpsReadWrite *int64
 
 	// Specifies the size of an empty data disk in gigabytes. This element can be used to overwrite the size of the disk in a
-	// virtual machine image.
-	// diskSizeGB is the number of bytes x 1024^3 for the disk and the value cannot be larger than 1023
+	// virtual machine image. The property diskSizeGB is the number of bytes x 1024^3
+	// for the disk and the value cannot be larger than 1023.
 	DiskSizeGB *int32
 
 	// The managed disk parameters.
@@ -8090,8 +7150,7 @@ type VirtualMachineScaleSetExtensionProfile struct {
 
 	// Specifies the time alloted for all extensions to start. The time duration should be between 15 minutes and 120 minutes
 	// (inclusive) and should be specified in ISO 8601 format. The default value is 90
-	// minutes (PT1H30M).
-	// Minimum api-version: 2020-06-01
+	// minutes (PT1H30M). Minimum api-version: 2020-06-01.
 	ExtensionsTimeBudget *string
 }
 
@@ -8154,44 +7213,11 @@ type VirtualMachineScaleSetExtensionUpdate struct {
 	Type *string
 }
 
-// VirtualMachineScaleSetExtensionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.BeginCreateOrUpdate
-// method.
-type VirtualMachineScaleSetExtensionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetExtensionsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.BeginDelete
-// method.
-type VirtualMachineScaleSetExtensionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetExtensionsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.BeginUpdate
-// method.
-type VirtualMachineScaleSetExtensionsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetExtensionsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.Get
-// method.
-type VirtualMachineScaleSetExtensionsClientGetOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *string
-}
-
-// VirtualMachineScaleSetExtensionsClientListOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.NewListPager
-// method.
-type VirtualMachineScaleSetExtensionsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualMachineScaleSetHardwareProfile - Specifies the hardware settings for the virtual machine scale set.
 type VirtualMachineScaleSetHardwareProfile struct {
-	// Specifies the properties for customizing the size of the virtual machine. Minimum api-version: 2021-11-01.
-	// Please follow the instructions in VM Customization [https://aka.ms/vmcustomization] for more details.
+	// Specifies the properties for customizing the size of the virtual machine. Minimum api-version: 2021-11-01. Please follow
+	// the instructions in VM Customization [https://aka.ms/vmcustomization] for more
+	// details.
 	VMSizeProperties *VMSizeProperties
 }
 
@@ -8200,9 +7226,6 @@ type VirtualMachineScaleSetIPConfiguration struct {
 	// REQUIRED; The IP configuration name.
 	Name *string
 
-	// Resource Id
-	ID *string
-
 	// Describes a virtual machine scale set network profile's IP configuration properties.
 	Properties *VirtualMachineScaleSetIPConfigurationProperties
 }
@@ -8350,9 +7373,6 @@ type VirtualMachineScaleSetNetworkConfiguration struct {
 	// REQUIRED; The network configuration name.
 	Name *string
 
-	// Resource Id
-	ID *string
-
 	// Describes a virtual machine scale set network profile's IP configuration.
 	Properties *VirtualMachineScaleSetNetworkConfigurationProperties
 }
@@ -8369,6 +7389,12 @@ type VirtualMachineScaleSetNetworkConfigurationProperties struct {
 	// REQUIRED; Specifies the IP configurations of the network interface.
 	IPConfigurations []*VirtualMachineScaleSetIPConfiguration
 
+	// Specifies whether the Auxiliary mode is enabled for the Network Interface resource.
+	AuxiliaryMode *NetworkInterfaceAuxiliaryMode
+
+	// Specifies whether the Auxiliary sku is enabled for the Network Interface resource.
+	AuxiliarySKU *NetworkInterfaceAuxiliarySKU
+
 	// The dns settings to be applied on the network interfaces.
 	DNSSettings *VirtualMachineScaleSetNetworkConfigurationDNSSettings
 
@@ -8411,18 +7437,14 @@ type VirtualMachineScaleSetNetworkProfile struct {
 
 // VirtualMachineScaleSetOSDisk - Describes a virtual machine scale set operating system disk.
 type VirtualMachineScaleSetOSDisk struct {
-	// REQUIRED; Specifies how the virtual machines in the scale set should be created.
-	// The only allowed value is: FromImage \u2013 This value is used when you are using an image to create the virtual machine.
-	// If you are using a platform image, you also use the imageReference element
-	// described above. If you are using a marketplace image, you also use the plan element previously described.
+	// REQUIRED; Specifies how the virtual machines in the scale set should be created. The only allowed value is: FromImage.
+	// This value is used when you are using an image to create the virtual machine. If you are
+	// using a platform image, you also use the imageReference element described above. If you are using a marketplace image,
+	// you also use the plan element previously described.
 	CreateOption *DiskCreateOptionTypes
 
-	// Specifies the caching requirements.
-	// Possible values are:
-	// None
-	// ReadOnly
-	// ReadWrite
-	// Default: None for Standard storage. ReadOnly for Premium storage
+	// Specifies the caching requirements. Possible values are: None, ReadOnly, ReadWrite. The default values are: None for Standard
+	// storage. ReadOnly for Premium storage.
 	Caching *CachingTypes
 
 	// Specifies whether OS Disk should be deleted or detached upon VMSS Flex deletion (This feature is available for VMSS with
@@ -8438,8 +7460,8 @@ type VirtualMachineScaleSetOSDisk struct {
 	DiffDiskSettings *DiffDiskSettings
 
 	// Specifies the size of an empty data disk in gigabytes. This element can be used to overwrite the size of the disk in a
-	// virtual machine image.
-	// diskSizeGB is the number of bytes x 1024^3 for the disk and the value cannot be larger than 1023
+	// virtual machine image. The property 'diskSizeGB' is the number of bytes x 1024^3
+	// for the disk and the value cannot be larger than 1023.
 	DiskSizeGB *int32
 
 	// Specifies information about the unmanaged user image to base the scale set on.
@@ -8452,10 +7474,7 @@ type VirtualMachineScaleSetOSDisk struct {
 	Name *string
 
 	// This property allows you to specify the type of the OS that is included in the disk if creating a VM from user-image or
-	// a specialized VHD.
-	// Possible values are:
-	// Windows
-	// Linux
+	// a specialized VHD. Possible values are: Windows, Linux.
 	OSType *OperatingSystemTypes
 
 	// Specifies the container urls that are used to store operating system disks for the scale set.
@@ -8494,8 +7513,8 @@ type VirtualMachineScaleSetOSProfile struct {
 	// Max-length (Windows): 20 characters
 	AdminUsername *string
 
-	// Specifies whether extension operations should be allowed on the virtual machine scale set.
-	// This may only be set to False when no extensions are present on the virtual machine scale set.
+	// Specifies whether extension operations should be allowed on the virtual machine scale set. This may only be set to False
+	// when no extensions are present on the virtual machine scale set.
 	AllowExtensionOperations *bool
 
 	// Specifies the computer name prefix for all of the virtual machines in the scale set. Computer name prefixes must be 1 to
@@ -8504,12 +7523,12 @@ type VirtualMachineScaleSetOSProfile struct {
 
 	// Specifies a base-64 encoded string of custom data. The base-64 encoded string is decoded to a binary array that is saved
 	// as a file on the Virtual Machine. The maximum length of the binary array is
-	// 65535 bytes.
-	// For using cloud-init for your VM, see Using cloud-init to customize a Linux VM during creation [https://docs.microsoft.com/azure/virtual-machines/linux/using-cloud-init]
+	// 65535 bytes. For using cloud-init for your VM, see Using cloud-init to customize a Linux VM during creation [https://docs.microsoft.com/azure/virtual-machines/linux/using-cloud-init]
 	CustomData *string
 
-	// Specifies the Linux operating system settings on the virtual machine.
-	// For a list of supported Linux distributions, see Linux on Azure-Endorsed Distributions [https://docs.microsoft.com/azure/virtual-machines/linux/endorsed-distros].
+	// Specifies the Linux operating system settings on the virtual machine. For a list of supported Linux distributions, see
+	// Linux on Azure-Endorsed Distributions
+	// [https://docs.microsoft.com/azure/virtual-machines/linux/endorsed-distros].
 	LinuxConfiguration *LinuxConfiguration
 
 	// Optional property which must either be set to True or omitted.
@@ -8544,8 +7563,8 @@ type VirtualMachineScaleSetProperties struct {
 	// overprovisioned VMs.
 	DoNotRunExtensionsOnOverprovisionedVMs *bool
 
-	// Specifies information about the dedicated host group that the virtual machine scale set resides in.
-	// Minimum api-version: 2020-06-01.
+	// Specifies information about the dedicated host group that the virtual machine scale set resides in. Minimum api-version:
+	// 2020-06-01.
 	HostGroup *SubResource
 
 	// Specifies the orchestration mode for the virtual machine scale set.
@@ -8560,10 +7579,13 @@ type VirtualMachineScaleSetProperties struct {
 	// Specifies the desired targets for mixing Spot and Regular priority VMs within the same VMSS Flex instance.
 	PriorityMixPolicy *PriorityMixPolicy
 
-	// Specifies information about the proximity placement group that the virtual machine scale set should be assigned to.
-	// Minimum api-version: 2018-04-01.
+	// Specifies information about the proximity placement group that the virtual machine scale set should be assigned to. Minimum
+	// api-version: 2018-04-01.
 	ProximityPlacementGroup *SubResource
 
+	// Policy for Resiliency
+	ResiliencyPolicy *ResiliencyPolicy
+
 	// Specifies the policies applied when scaling in Virtual Machines in the Virtual Machine Scale Set.
 	ScaleInPolicy *ScaleInPolicy
 
@@ -8589,8 +7611,7 @@ type VirtualMachineScaleSetProperties struct {
 	// READ-ONLY; The provisioning state, which only appears in the response.
 	ProvisioningState *string
 
-	// READ-ONLY; Specifies the time at which the Virtual Machine Scale Set resource was created.
-	// Minimum api-version: 2021-11-01.
+	// READ-ONLY; Specifies the time at which the Virtual Machine Scale Set resource was created. Minimum api-version: 2021-11-01.
 	TimeCreated *time.Time
 
 	// READ-ONLY; Specifies the ID which uniquely identifies a Virtual Machine Scale Set.
@@ -8616,6 +7637,11 @@ type VirtualMachineScaleSetPublicIPAddressConfigurationDNSSettings struct {
 	// REQUIRED; The Domain name label.The concatenation of the domain name label and vm index will be the domain name labels
 	// of the PublicIPAddress resources that will be created
 	DomainNameLabel *string
+
+	// The Domain name label scope.The concatenation of the hashed domain name label that generated according to the policy from
+	// domain name label scope and vm index will be the domain name labels of the
+	// PublicIPAddress resources that will be created
+	DomainNameLabelScope *DomainNameLabelScopeTypes
 }
 
 // VirtualMachineScaleSetPublicIPAddressConfigurationProperties - Describes a virtual machines scale set IP Configuration's
@@ -8659,33 +7685,6 @@ type VirtualMachineScaleSetReimageParameters struct {
 	TempDisk *bool
 }
 
-// VirtualMachineScaleSetRollingUpgradesClientBeginCancelOptions contains the optional parameters for the VirtualMachineScaleSetRollingUpgradesClient.BeginCancel
-// method.
-type VirtualMachineScaleSetRollingUpgradesClientBeginCancelOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetRollingUpgradesClientBeginStartExtensionUpgradeOptions contains the optional parameters for the VirtualMachineScaleSetRollingUpgradesClient.BeginStartExtensionUpgrade
-// method.
-type VirtualMachineScaleSetRollingUpgradesClientBeginStartExtensionUpgradeOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetRollingUpgradesClientBeginStartOSUpgradeOptions contains the optional parameters for the VirtualMachineScaleSetRollingUpgradesClient.BeginStartOSUpgrade
-// method.
-type VirtualMachineScaleSetRollingUpgradesClientBeginStartOSUpgradeOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetRollingUpgradesClientGetLatestOptions contains the optional parameters for the VirtualMachineScaleSetRollingUpgradesClient.GetLatest
-// method.
-type VirtualMachineScaleSetRollingUpgradesClientGetLatestOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualMachineScaleSetSKU - Describes an available virtual machine scale set sku.
 type VirtualMachineScaleSetSKU struct {
 	// READ-ONLY; Specifies the number of virtual machines in the scale set.
@@ -8715,8 +7714,9 @@ type VirtualMachineScaleSetSKUCapacity struct {
 
 // VirtualMachineScaleSetStorageProfile - Describes a virtual machine scale set storage profile.
 type VirtualMachineScaleSetStorageProfile struct {
-	// Specifies the parameters that are used to add data disks to the virtual machines in the scale set.
-	// For more information about disks, see About disks and VHDs for Azure virtual machines [https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview].
+	// Specifies the parameters that are used to add data disks to the virtual machines in the scale set. For more information
+	// about disks, see About disks and VHDs for Azure virtual machines
+	// [https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview].
 	DataDisks          []*VirtualMachineScaleSetDataDisk
 	DiskControllerType *string
 
@@ -8725,8 +7725,9 @@ type VirtualMachineScaleSetStorageProfile struct {
 	// image, marketplace image, or virtual machine image, but is not used in other creation operations.
 	ImageReference *ImageReference
 
-	// Specifies information about the operating system disk used by the virtual machines in the scale set.
-	// For more information about disks, see About disks and VHDs for Azure virtual machines [https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview].
+	// Specifies information about the operating system disk used by the virtual machines in the scale set. For more information
+	// about disks, see About disks and VHDs for Azure virtual machines
+	// [https://docs.microsoft.com/azure/virtual-machines/managed-disks-overview].
 	OSDisk *VirtualMachineScaleSetOSDisk
 }
 
@@ -8752,9 +7753,6 @@ type VirtualMachineScaleSetUpdate struct {
 // NOTE: The subnet of a scale set may be modified as long as the original subnet and the new subnet are in the same virtual
 // network
 type VirtualMachineScaleSetUpdateIPConfiguration struct {
-	// Resource Id
-	ID *string
-
 	// The IP configuration name.
 	Name *string
 
@@ -8793,9 +7791,6 @@ type VirtualMachineScaleSetUpdateIPConfigurationProperties struct {
 
 // VirtualMachineScaleSetUpdateNetworkConfiguration - Describes a virtual machine scale set network profile's network configurations.
 type VirtualMachineScaleSetUpdateNetworkConfiguration struct {
-	// Resource Id
-	ID *string
-
 	// The network configuration name.
 	Name *string
 
@@ -8807,6 +7802,12 @@ type VirtualMachineScaleSetUpdateNetworkConfiguration struct {
 // VirtualMachineScaleSetUpdateNetworkConfigurationProperties - Describes a virtual machine scale set updatable network profile's
 // IP configuration.Use this object for updating network profile's IP Configuration.
 type VirtualMachineScaleSetUpdateNetworkConfigurationProperties struct {
+	// Specifies whether the Auxiliary mode is enabled for the Network Interface resource.
+	AuxiliaryMode *NetworkInterfaceAuxiliaryMode
+
+	// Specifies whether the Auxiliary sku is enabled for the Network Interface resource.
+	AuxiliarySKU *NetworkInterfaceAuxiliarySKU
+
 	// The dns settings to be applied on the network interfaces.
 	DNSSettings *VirtualMachineScaleSetNetworkConfigurationDNSSettings
 
@@ -8918,10 +7919,16 @@ type VirtualMachineScaleSetUpdateProperties struct {
 	// Specifies whether the Virtual Machine Scale Set should be overprovisioned.
 	Overprovision *bool
 
+	// Specifies the desired targets for mixing Spot and Regular priority VMs within the same VMSS Flex instance.
+	PriorityMixPolicy *PriorityMixPolicy
+
 	// Specifies information about the proximity placement group that the virtual machine scale set should be assigned to.
 	// Minimum api-version: 2018-04-01.
 	ProximityPlacementGroup *SubResource
 
+	// Policy for Resiliency
+	ResiliencyPolicy *ResiliencyPolicy
+
 	// Specifies the policies applied when scaling in Virtual Machines in the Virtual Machine Scale Set.
 	ScaleInPolicy *ScaleInPolicy
 
@@ -8930,6 +7937,9 @@ type VirtualMachineScaleSetUpdateProperties struct {
 	// is false, it may not be modified to true.
 	SinglePlacementGroup *bool
 
+	// Specifies the Spot Restore properties for the virtual machine scale set.
+	SpotRestorePolicy *SpotRestorePolicy
+
 	// The upgrade policy.
 	UpgradePolicy *UpgradePolicy
 
@@ -8978,8 +7988,7 @@ type VirtualMachineScaleSetUpdateStorageProfile struct {
 
 // VirtualMachineScaleSetUpdateVMProfile - Describes a virtual machine scale set virtual machine profile.
 type VirtualMachineScaleSetUpdateVMProfile struct {
-	// Specifies the billing related details of a Azure Spot VMSS.
-	// Minimum api-version: 2019-03-01.
+	// Specifies the billing related details of a Azure Spot VMSS. Minimum api-version: 2019-03-01.
 	BillingProfile *BillingProfile
 
 	// The virtual machine scale set diagnostics profile.
@@ -8988,8 +7997,7 @@ type VirtualMachineScaleSetUpdateVMProfile struct {
 	// The virtual machine scale set extension profile.
 	ExtensionProfile *VirtualMachineScaleSetExtensionProfile
 
-	// Specifies the hardware profile related details of a scale set.
-	// Minimum api-version: 2021-11-01.
+	// Specifies the hardware profile related details of a scale set. Minimum api-version: 2021-11-01.
 	HardwareProfile *VirtualMachineScaleSetHardwareProfile
 
 	// The license type, which is for bring your own license scenario.
@@ -9036,6 +8044,10 @@ type VirtualMachineScaleSetVM struct {
 	// Resource tags
 	Tags map[string]*string
 
+	// READ-ONLY; Etag is property returned in Update/Get response of the VMSS VM, so that customer can supply it in the header
+	// to ensure optimistic updates.
+	Etag *string
+
 	// READ-ONLY; Resource Id
 	ID *string
 
@@ -9060,6 +8072,9 @@ type VirtualMachineScaleSetVM struct {
 
 // VirtualMachineScaleSetVMExtension - Describes a VMSS VM Extension.
 type VirtualMachineScaleSetVMExtension struct {
+	// The location of the extension.
+	Location *string
+
 	// Describes the properties of a Virtual Machine Extension.
 	Properties *VirtualMachineExtensionProperties
 
@@ -9088,41 +8103,6 @@ type VirtualMachineScaleSetVMExtensionUpdate struct {
 	Type *string
 }
 
-// VirtualMachineScaleSetVMExtensionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.BeginCreateOrUpdate
-// method.
-type VirtualMachineScaleSetVMExtensionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMExtensionsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.BeginDelete
-// method.
-type VirtualMachineScaleSetVMExtensionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMExtensionsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.BeginUpdate
-// method.
-type VirtualMachineScaleSetVMExtensionsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMExtensionsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.Get
-// method.
-type VirtualMachineScaleSetVMExtensionsClientGetOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *string
-}
-
-// VirtualMachineScaleSetVMExtensionsClientListOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.List
-// method.
-type VirtualMachineScaleSetVMExtensionsClientListOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *string
-}
-
 // VirtualMachineScaleSetVMExtensionsListResult - The List VMSS VM Extension operation response
 type VirtualMachineScaleSetVMExtensionsListResult struct {
 	// The list of VMSS VM extensions
@@ -9153,9 +8133,9 @@ type VirtualMachineScaleSetVMInstanceRequiredIDs struct {
 
 // VirtualMachineScaleSetVMInstanceView - The instance view of a virtual machine scale set VM.
 type VirtualMachineScaleSetVMInstanceView struct {
-	// Boot Diagnostics is a debugging feature which allows you to view Console Output and Screenshot to diagnose VM status.
-	// You can easily view the output of your console log.
-	// Azure also enables you to see a screenshot of the VM from the hypervisor.
+	// Boot Diagnostics is a debugging feature which allows you to view Console Output and Screenshot to diagnose VM status. You
+	// can easily view the output of your console log. Azure also enables you to see
+	// a screenshot of the VM from the hypervisor.
 	BootDiagnostics *BootDiagnosticsInstanceView
 
 	// Specifies the host OS name of the virtual machine.
@@ -9204,8 +8184,7 @@ type VirtualMachineScaleSetVMInstanceView struct {
 
 	// READ-ONLY; Resource id of the dedicated host, on which the virtual machine is allocated through automatic placement, when
 	// the virtual machine is associated with a dedicated host group that has automatic
-	// placement enabled.
-	// Minimum api-version: 2020-06-01.
+	// placement enabled. Minimum api-version: 2020-06-01.
 	AssignedHost *string
 
 	// READ-ONLY; The health status for the VM.
@@ -9233,28 +8212,24 @@ type VirtualMachineScaleSetVMProfile struct {
 	// Specifies the gallery applications that should be made available to the VM/VMSS
 	ApplicationProfile *ApplicationProfile
 
-	// Specifies the billing related details of a Azure Spot VMSS.
-	// Minimum api-version: 2019-03-01.
+	// Specifies the billing related details of a Azure Spot VMSS. Minimum api-version: 2019-03-01.
 	BillingProfile *BillingProfile
 
-	// Specifies the capacity reservation related details of a scale set.
-	// Minimum api-version: 2021-04-01.
+	// Specifies the capacity reservation related details of a scale set. Minimum api-version: 2021-04-01.
 	CapacityReservation *CapacityReservationProfile
 
-	// Specifies the boot diagnostic settings state.
-	// Minimum api-version: 2015-06-15.
+	// Specifies the boot diagnostic settings state. Minimum api-version: 2015-06-15.
 	DiagnosticsProfile *DiagnosticsProfile
 
-	// Specifies the eviction policy for the Azure Spot virtual machine and Azure Spot scale set.
-	// For Azure Spot virtual machines, both 'Deallocate' and 'Delete' are supported and the minimum api-version is 2019-03-01.
-	// For Azure Spot scale sets, both 'Deallocate' and 'Delete' are supported and the minimum api-version is 2017-10-30-preview.
+	// Specifies the eviction policy for the Azure Spot virtual machine and Azure Spot scale set. For Azure Spot virtual machines,
+	// both 'Deallocate' and 'Delete' are supported and the minimum api-version is
+	// 2019-03-01. For Azure Spot scale sets, both 'Deallocate' and 'Delete' are supported and the minimum api-version is 2017-10-30-preview.
 	EvictionPolicy *VirtualMachineEvictionPolicyTypes
 
 	// Specifies a collection of settings for extensions installed on virtual machines in the scale set.
 	ExtensionProfile *VirtualMachineScaleSetExtensionProfile
 
-	// Specifies the hardware profile related details of a scale set.
-	// Minimum api-version: 2021-11-01.
+	// Specifies the hardware profile related details of a scale set. Minimum api-version: 2021-11-01.
 	HardwareProfile *VirtualMachineScaleSetHardwareProfile
 
 	// Specifies that the image or disk that is being used was licensed on-premises.
@@ -9275,13 +8250,15 @@ type VirtualMachineScaleSetVMProfile struct {
 	// Specifies the operating system settings for the virtual machines in the scale set.
 	OSProfile *VirtualMachineScaleSetOSProfile
 
-	// Specifies the priority for the virtual machines in the scale set.
-	// Minimum api-version: 2017-10-30-preview
+	// Specifies the priority for the virtual machines in the scale set. Minimum api-version: 2017-10-30-preview.
 	Priority *VirtualMachinePriorityTypes
 
 	// Specifies Scheduled Event related configurations.
 	ScheduledEventsProfile *ScheduledEventsProfile
 
+	// Specifies the security posture to be used for all virtual machines in the scale set. Minimum api-version: 2023-03-01
+	SecurityPostureReference *SecurityPostureReference
+
 	// Specifies the Security related profile settings for the virtual machines in the scale set.
 	SecurityProfile *SecurityProfile
 
@@ -9293,9 +8270,13 @@ type VirtualMachineScaleSetVMProfile struct {
 	StorageProfile *VirtualMachineScaleSetStorageProfile
 
 	// UserData for the virtual machines in the scale set, which must be base-64 encoded. Customer should not pass any secrets
-	// in here.
-	// Minimum api-version: 2021-03-01
+	// in here. Minimum api-version: 2021-03-01.
 	UserData *string
+
+	// READ-ONLY; Specifies the time in which this VM profile for the Virtual Machine Scale Set was created. Minimum API version
+	// for this property is 2023-09-01. This value will be added to VMSS Flex VM tags when
+	// creating/updating the VMSS VM Profile with minimum api-version 2023-09-01.
+	TimeCreated *time.Time
 }
 
 // VirtualMachineScaleSetVMProperties - Describes the properties of a virtual machine scale set virtual machine.
@@ -9308,13 +8289,13 @@ type VirtualMachineScaleSetVMProperties struct {
 	// Specifies information about the availability set that the virtual machine should be assigned to. Virtual machines specified
 	// in the same availability set are allocated to different nodes to maximize
 	// availability. For more information about availability sets, see Availability sets overview [https://docs.microsoft.com/azure/virtual-machines/availability-set-overview].
-	// For more information on Azure planned maintenance, see Maintenance and updates for Virtual Machines in Azure [https://docs.microsoft.com/azure/virtual-machines/maintenance-and-updates]
-	// Currently, a VM can only be added to availability set at creation time. An existing VM cannot be added to an availability
-	// set.
+	// For more information on Azure
+	// planned maintenance, see Maintenance and updates for Virtual Machines in Azure [https://docs.microsoft.com/azure/virtual-machines/maintenance-and-updates].
+	// Currently, a VM can only be added to
+	// availability set at creation time. An existing VM cannot be added to an availability set.
 	AvailabilitySet *SubResource
 
-	// Specifies the boot diagnostic settings state.
-	// Minimum api-version: 2015-06-15.
+	// Specifies the boot diagnostic settings state. Minimum api-version: 2015-06-15.
 	DiagnosticsProfile *DiagnosticsProfile
 
 	// Specifies the hardware settings for the virtual machine.
@@ -9367,6 +8348,10 @@ type VirtualMachineScaleSetVMProperties struct {
 	// READ-ONLY; The provisioning state, which only appears in the response.
 	ProvisioningState *string
 
+	// READ-ONLY; Specifies the time at which the Virtual Machine resource was created.
+	// Minimum api-version: 2021-11-01.
+	TimeCreated *time.Time
+
 	// READ-ONLY; Azure VM unique ID.
 	VMID *string
 }
@@ -9395,345 +8380,6 @@ type VirtualMachineScaleSetVMReimageParameters struct {
 	TempDisk *bool
 }
 
-// VirtualMachineScaleSetVMRunCommandsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineScaleSetVMRunCommandsClient.BeginCreateOrUpdate
-// method.
-type VirtualMachineScaleSetVMRunCommandsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMRunCommandsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineScaleSetVMRunCommandsClient.BeginDelete
-// method.
-type VirtualMachineScaleSetVMRunCommandsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMRunCommandsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineScaleSetVMRunCommandsClient.BeginUpdate
-// method.
-type VirtualMachineScaleSetVMRunCommandsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMRunCommandsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetVMRunCommandsClient.Get
-// method.
-type VirtualMachineScaleSetVMRunCommandsClientGetOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *string
-}
-
-// VirtualMachineScaleSetVMRunCommandsClientListOptions contains the optional parameters for the VirtualMachineScaleSetVMRunCommandsClient.NewListPager
-// method.
-type VirtualMachineScaleSetVMRunCommandsClientListOptions struct {
-	// The expand expression to apply on the operation.
-	Expand *string
-}
-
-// VirtualMachineScaleSetVMsClientBeginDeallocateOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginDeallocate
-// method.
-type VirtualMachineScaleSetVMsClientBeginDeallocateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginDelete
-// method.
-type VirtualMachineScaleSetVMsClientBeginDeleteOptions struct {
-	// Optional parameter to force delete a virtual machine from a VM scale set. (Feature in Preview)
-	ForceDeletion *bool
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMsClientBeginPerformMaintenanceOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginPerformMaintenance
-// method.
-type VirtualMachineScaleSetVMsClientBeginPerformMaintenanceOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMsClientBeginPowerOffOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginPowerOff
-// method.
-type VirtualMachineScaleSetVMsClientBeginPowerOffOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// The parameter to request non-graceful VM shutdown. True value for this flag indicates non-graceful shutdown whereas false
-	// indicates otherwise. Default value for this flag is false if not specified
-	SkipShutdown *bool
-}
-
-// VirtualMachineScaleSetVMsClientBeginRedeployOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginRedeploy
-// method.
-type VirtualMachineScaleSetVMsClientBeginRedeployOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMsClientBeginReimageAllOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginReimageAll
-// method.
-type VirtualMachineScaleSetVMsClientBeginReimageAllOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMsClientBeginReimageOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginReimage
-// method.
-type VirtualMachineScaleSetVMsClientBeginReimageOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// Parameters for the Reimaging Virtual machine in ScaleSet.
-	VMScaleSetVMReimageInput *VirtualMachineScaleSetVMReimageParameters
-}
-
-// VirtualMachineScaleSetVMsClientBeginRestartOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginRestart
-// method.
-type VirtualMachineScaleSetVMsClientBeginRestartOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMsClientBeginRunCommandOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginRunCommand
-// method.
-type VirtualMachineScaleSetVMsClientBeginRunCommandOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMsClientBeginStartOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginStart
-// method.
-type VirtualMachineScaleSetVMsClientBeginStartOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginUpdate
-// method.
-type VirtualMachineScaleSetVMsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetVMsClientGetInstanceViewOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.GetInstanceView
-// method.
-type VirtualMachineScaleSetVMsClientGetInstanceViewOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineScaleSetVMsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.Get
-// method.
-type VirtualMachineScaleSetVMsClientGetOptions struct {
-	// The expand expression to apply on the operation. 'InstanceView' will retrieve the instance view of the virtual machine.
-	// 'UserData' will retrieve the UserData of the virtual machine.
-	Expand *InstanceViewTypes
-}
-
-// VirtualMachineScaleSetVMsClientListOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.NewListPager
-// method.
-type VirtualMachineScaleSetVMsClientListOptions struct {
-	// The expand expression to apply to the operation. Allowed values are 'instanceView'.
-	Expand *string
-	// The filter to apply to the operation. Allowed values are 'startswith(instanceView/statuses/code, 'PowerState') eq true',
-	// 'properties/latestModelApplied eq true', 'properties/latestModelApplied eq
-	// false'.
-	Filter *string
-	// The list parameters. Allowed values are 'instanceView', 'instanceView/statuses'.
-	Select *string
-}
-
-// VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.RetrieveBootDiagnosticsData
-// method.
-type VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataOptions struct {
-	// Expiration duration in minutes for the SAS URIs with a value between 1 to 1440 minutes.
-	// NOTE: If not specified, SAS URIs will be generated with a default expiration duration of 120 minutes.
-	SasURIExpirationTimeInMinutes *int32
-}
-
-// VirtualMachineScaleSetVMsClientSimulateEvictionOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.SimulateEviction
-// method.
-type VirtualMachineScaleSetVMsClientSimulateEvictionOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineScaleSetsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginCreateOrUpdate
-// method.
-type VirtualMachineScaleSetsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetsClientBeginDeallocateOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginDeallocate
-// method.
-type VirtualMachineScaleSetsClientBeginDeallocateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// A list of virtual machine instance IDs from the VM scale set.
-	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
-}
-
-// VirtualMachineScaleSetsClientBeginDeleteInstancesOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginDeleteInstances
-// method.
-type VirtualMachineScaleSetsClientBeginDeleteInstancesOptions struct {
-	// Optional parameter to force delete virtual machines from the VM scale set. (Feature in Preview)
-	ForceDeletion *bool
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginDelete
-// method.
-type VirtualMachineScaleSetsClientBeginDeleteOptions struct {
-	// Optional parameter to force delete a VM scale set. (Feature in Preview)
-	ForceDeletion *bool
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetsClientBeginPerformMaintenanceOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginPerformMaintenance
-// method.
-type VirtualMachineScaleSetsClientBeginPerformMaintenanceOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// A list of virtual machine instance IDs from the VM scale set.
-	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
-}
-
-// VirtualMachineScaleSetsClientBeginPowerOffOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginPowerOff
-// method.
-type VirtualMachineScaleSetsClientBeginPowerOffOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// The parameter to request non-graceful VM shutdown. True value for this flag indicates non-graceful shutdown whereas false
-	// indicates otherwise. Default value for this flag is false if not specified
-	SkipShutdown *bool
-	// A list of virtual machine instance IDs from the VM scale set.
-	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
-}
-
-// VirtualMachineScaleSetsClientBeginRedeployOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginRedeploy
-// method.
-type VirtualMachineScaleSetsClientBeginRedeployOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// A list of virtual machine instance IDs from the VM scale set.
-	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
-}
-
-// VirtualMachineScaleSetsClientBeginReimageAllOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginReimageAll
-// method.
-type VirtualMachineScaleSetsClientBeginReimageAllOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// A list of virtual machine instance IDs from the VM scale set.
-	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
-}
-
-// VirtualMachineScaleSetsClientBeginReimageOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginReimage
-// method.
-type VirtualMachineScaleSetsClientBeginReimageOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// Parameters for Reimaging VM ScaleSet.
-	VMScaleSetReimageInput *VirtualMachineScaleSetReimageParameters
-}
-
-// VirtualMachineScaleSetsClientBeginRestartOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginRestart
-// method.
-type VirtualMachineScaleSetsClientBeginRestartOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// A list of virtual machine instance IDs from the VM scale set.
-	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
-}
-
-// VirtualMachineScaleSetsClientBeginSetOrchestrationServiceStateOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginSetOrchestrationServiceState
-// method.
-type VirtualMachineScaleSetsClientBeginSetOrchestrationServiceStateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetsClientBeginStartOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginStart
-// method.
-type VirtualMachineScaleSetsClientBeginStartOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// A list of virtual machine instance IDs from the VM scale set.
-	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
-}
-
-// VirtualMachineScaleSetsClientBeginUpdateInstancesOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginUpdateInstances
-// method.
-type VirtualMachineScaleSetsClientBeginUpdateInstancesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginUpdate
-// method.
-type VirtualMachineScaleSetsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachineScaleSetsClientConvertToSinglePlacementGroupOptions contains the optional parameters for the VirtualMachineScaleSetsClient.ConvertToSinglePlacementGroup
-// method.
-type VirtualMachineScaleSetsClientConvertToSinglePlacementGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkOptions contains the optional parameters
-// for the VirtualMachineScaleSetsClient.ForceRecoveryServiceFabricPlatformUpdateDomainWalk method.
-type VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkOptions struct {
-	// The placement group id for which the manual recovery walk is requested.
-	PlacementGroupID *string
-	// The zone in which the manual recovery walk is requested for cross zone virtual machine scale set
-	Zone *string
-}
-
-// VirtualMachineScaleSetsClientGetInstanceViewOptions contains the optional parameters for the VirtualMachineScaleSetsClient.GetInstanceView
-// method.
-type VirtualMachineScaleSetsClientGetInstanceViewOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineScaleSetsClientGetOSUpgradeHistoryOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewGetOSUpgradeHistoryPager
-// method.
-type VirtualMachineScaleSetsClientGetOSUpgradeHistoryOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineScaleSetsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetsClient.Get method.
-type VirtualMachineScaleSetsClientGetOptions struct {
-	// The expand expression to apply on the operation. 'UserData' retrieves the UserData property of the VM scale set that was
-	// provided by the user during the VM scale set Create/Update operation
-	Expand *ExpandTypesForGetVMScaleSets
-}
-
-// VirtualMachineScaleSetsClientListAllOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListAllPager
-// method.
-type VirtualMachineScaleSetsClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineScaleSetsClientListByLocationOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListByLocationPager
-// method.
-type VirtualMachineScaleSetsClientListByLocationOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineScaleSetsClientListOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListPager
-// method.
-type VirtualMachineScaleSetsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachineScaleSetsClientListSKUsOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListSKUsPager
-// method.
-type VirtualMachineScaleSetsClientListSKUsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualMachineSize - Describes the properties of a VM size.
 type VirtualMachineSize struct {
 	// The maximum number of data disks that can be attached to the virtual machine size.
@@ -9763,11 +8409,6 @@ type VirtualMachineSizeListResult struct {
 	Value []*VirtualMachineSize
 }
 
-// VirtualMachineSizesClientListOptions contains the optional parameters for the VirtualMachineSizesClient.NewListPager method.
-type VirtualMachineSizesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualMachineSoftwarePatchProperties - Describes the properties of a Virtual Machine software patch.
 type VirtualMachineSoftwarePatchProperties struct {
 	// READ-ONLY; The activity ID of the operation that produced this result. It is used to correlate across CRP and extension
@@ -9833,181 +8474,6 @@ type VirtualMachineUpdate struct {
 	Zones []*string
 }
 
-// VirtualMachinesClientBeginAssessPatchesOptions contains the optional parameters for the VirtualMachinesClient.BeginAssessPatches
-// method.
-type VirtualMachinesClientBeginAssessPatchesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginCaptureOptions contains the optional parameters for the VirtualMachinesClient.BeginCapture method.
-type VirtualMachinesClientBeginCaptureOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginConvertToManagedDisksOptions contains the optional parameters for the VirtualMachinesClient.BeginConvertToManagedDisks
-// method.
-type VirtualMachinesClientBeginConvertToManagedDisksOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachinesClient.BeginCreateOrUpdate
-// method.
-type VirtualMachinesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginDeallocateOptions contains the optional parameters for the VirtualMachinesClient.BeginDeallocate
-// method.
-type VirtualMachinesClientBeginDeallocateOptions struct {
-	// Optional parameter to hibernate a virtual machine. (Feature in Preview)
-	Hibernate *bool
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginDeleteOptions contains the optional parameters for the VirtualMachinesClient.BeginDelete method.
-type VirtualMachinesClientBeginDeleteOptions struct {
-	// Optional parameter to force delete virtual machines.
-	ForceDeletion *bool
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginInstallPatchesOptions contains the optional parameters for the VirtualMachinesClient.BeginInstallPatches
-// method.
-type VirtualMachinesClientBeginInstallPatchesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginPerformMaintenanceOptions contains the optional parameters for the VirtualMachinesClient.BeginPerformMaintenance
-// method.
-type VirtualMachinesClientBeginPerformMaintenanceOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginPowerOffOptions contains the optional parameters for the VirtualMachinesClient.BeginPowerOff
-// method.
-type VirtualMachinesClientBeginPowerOffOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// The parameter to request non-graceful VM shutdown. True value for this flag indicates non-graceful shutdown whereas false
-	// indicates otherwise. Default value for this flag is false if not specified
-	SkipShutdown *bool
-}
-
-// VirtualMachinesClientBeginReapplyOptions contains the optional parameters for the VirtualMachinesClient.BeginReapply method.
-type VirtualMachinesClientBeginReapplyOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginRedeployOptions contains the optional parameters for the VirtualMachinesClient.BeginRedeploy
-// method.
-type VirtualMachinesClientBeginRedeployOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginReimageOptions contains the optional parameters for the VirtualMachinesClient.BeginReimage method.
-type VirtualMachinesClientBeginReimageOptions struct {
-	// Parameters supplied to the Reimage Virtual Machine operation.
-	Parameters *VirtualMachineReimageParameters
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginRestartOptions contains the optional parameters for the VirtualMachinesClient.BeginRestart method.
-type VirtualMachinesClientBeginRestartOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginRunCommandOptions contains the optional parameters for the VirtualMachinesClient.BeginRunCommand
-// method.
-type VirtualMachinesClientBeginRunCommandOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginStartOptions contains the optional parameters for the VirtualMachinesClient.BeginStart method.
-type VirtualMachinesClientBeginStartOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientBeginUpdateOptions contains the optional parameters for the VirtualMachinesClient.BeginUpdate method.
-type VirtualMachinesClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualMachinesClientGeneralizeOptions contains the optional parameters for the VirtualMachinesClient.Generalize method.
-type VirtualMachinesClientGeneralizeOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachinesClientGetOptions contains the optional parameters for the VirtualMachinesClient.Get method.
-type VirtualMachinesClientGetOptions struct {
-	// The expand expression to apply on the operation. 'InstanceView' retrieves a snapshot of the runtime properties of the virtual
-	// machine that is managed by the platform and can change outside of control
-	// plane operations. 'UserData' retrieves the UserData property as part of the VM model view that was provided by the user
-	// during the VM Create/Update operation.
-	Expand *InstanceViewTypes
-}
-
-// VirtualMachinesClientInstanceViewOptions contains the optional parameters for the VirtualMachinesClient.InstanceView method.
-type VirtualMachinesClientInstanceViewOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachinesClientListAllOptions contains the optional parameters for the VirtualMachinesClient.NewListAllPager method.
-type VirtualMachinesClientListAllOptions struct {
-	// The system query option to filter VMs returned in the response. Allowed value is 'virtualMachineScaleSet/id' eq
-	// /subscriptions/{subId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachineScaleSets/{vmssName}'
-	Filter *string
-	// statusOnly=true enables fetching run time status of all Virtual Machines in the subscription.
-	StatusOnly *string
-}
-
-// VirtualMachinesClientListAvailableSizesOptions contains the optional parameters for the VirtualMachinesClient.NewListAvailableSizesPager
-// method.
-type VirtualMachinesClientListAvailableSizesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachinesClientListByLocationOptions contains the optional parameters for the VirtualMachinesClient.NewListByLocationPager
-// method.
-type VirtualMachinesClientListByLocationOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualMachinesClientListOptions contains the optional parameters for the VirtualMachinesClient.NewListPager method.
-type VirtualMachinesClientListOptions struct {
-	// The system query option to filter VMs returned in the response. Allowed value is 'virtualMachineScaleSet/id' eq
-	// /subscriptions/{subId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachineScaleSets/{vmssName}'
-	Filter *string
-}
-
-// VirtualMachinesClientRetrieveBootDiagnosticsDataOptions contains the optional parameters for the VirtualMachinesClient.RetrieveBootDiagnosticsData
-// method.
-type VirtualMachinesClientRetrieveBootDiagnosticsDataOptions struct {
-	// Expiration duration in minutes for the SAS URIs with a value between 1 to 1440 minutes.
-	// NOTE: If not specified, SAS URIs will be generated with a default expiration duration of 120 minutes.
-	SasURIExpirationTimeInMinutes *int32
-}
-
-// VirtualMachinesClientSimulateEvictionOptions contains the optional parameters for the VirtualMachinesClient.SimulateEviction
-// method.
-type VirtualMachinesClientSimulateEvictionOptions struct {
-	// placeholder for future optional parameters
-}
-
 // WinRMConfiguration - Describes Windows Remote Management configuration of the VM
 type WinRMConfiguration struct {
 	// The list of Windows Remote Management listeners
@@ -10018,8 +8484,8 @@ type WinRMConfiguration struct {
 type WinRMListener struct {
 	// This is the URL of a certificate that has been uploaded to Key Vault as a secret. For adding a secret to the Key Vault,
 	// see Add a key or secret to the key vault
-	// [https://docs.microsoft.com/azure/key-vault/key-vault-get-started/#add]. In this case, your certificate needs to be It
-	// is the Base64 encoding of the following JSON Object which is encoded in UTF-8:
+	// [https://docs.microsoft.com/azure/key-vault/key-vault-get-started/#add]. In this case, your certificate needs to be the
+	// Base64 encoding of the following JSON Object which is encoded in UTF-8:
 	// {
 	// "data":"",
 	// "dataType":"pfx",
@@ -10032,10 +8498,7 @@ type WinRMListener struct {
 	// [https://docs.microsoft.com/azure/virtual-machines/extensions/key-vault-windows].
 	CertificateURL *string
 
-	// Specifies the protocol of WinRM listener.
-	// Possible values are:
-	// http
-	// https
+	// Specifies the protocol of WinRM listener. Possible values are: http, https.
 	Protocol *ProtocolTypes
 }
 
@@ -10045,8 +8508,9 @@ type WindowsConfiguration struct {
 	// used by Windows Setup.
 	AdditionalUnattendContent []*AdditionalUnattendContent
 
-	// Indicates whether Automatic Updates is enabled for the Windows virtual machine. Default value is true.
-	// For virtual machine scale sets, this property can be updated and updates will take effect on OS reprovisioning.
+	// Indicates whether Automatic Updates is enabled for the Windows virtual machine. Default value is true. For virtual machine
+	// scale sets, this property can be updated and updates will take effect on OS
+	// reprovisioning.
 	EnableAutomaticUpdates *bool
 
 	// Indicates whether VMAgent Platform Updates is enabled for the Windows virtual machine. Default value is false.
@@ -10055,14 +8519,14 @@ type WindowsConfiguration struct {
 	// [Preview Feature] Specifies settings related to VM Guest Patching on Windows.
 	PatchSettings *PatchSettings
 
-	// Indicates whether virtual machine agent should be provisioned on the virtual machine.
-	// When this property is not specified in the request body, default behavior is to set it to true. This will ensure that VM
+	// Indicates whether virtual machine agent should be provisioned on the virtual machine. When this property is not specified
+	// in the request body, it is set to true by default. This will ensure that VM
 	// Agent is installed on the VM so that extensions can be added to the VM later.
 	ProvisionVMAgent *bool
 
-	// Specifies the time zone of the virtual machine. e.g. "Pacific Standard Time".
-	// Possible values can be TimeZoneInfo.Id [https://docs.microsoft.com/dotnet/api/system.timezoneinfo.id?#System_TimeZoneInfo_Id]
-	// value from time zones returned by TimeZoneInfo.GetSystemTimeZones
+	// Specifies the time zone of the virtual machine. e.g. "Pacific Standard Time". Possible values can be TimeZoneInfo.Id
+	// [https://docs.microsoft.com/dotnet/api/system.timezoneinfo.id?#System_TimeZoneInfo_Id] value from time zones returned by
+	// TimeZoneInfo.GetSystemTimeZones
 	// [https://docs.microsoft.com/dotnet/api/system.timezoneinfo.getsystemtimezones].
 	TimeZone *string
 
@@ -10091,6 +8555,9 @@ type WindowsParameters struct {
 // WindowsVMGuestPatchAutomaticByPlatformSettings - Specifies additional settings to be applied when patch mode AutomaticByPlatform
 // is selected in Windows patch settings.
 type WindowsVMGuestPatchAutomaticByPlatformSettings struct {
+	// Enables customer to schedule patching without accidental upgrades
+	BypassPlatformSafetyChecksOnUserSchedule *bool
+
 	// Specifies the reboot setting for all AutomaticByPlatform patch installation operations.
 	RebootSetting *WindowsVMGuestPatchAutomaticByPlatformRebootSetting
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/models_serde.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/models_serde.go
similarity index 94%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/models_serde.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/models_serde.go
index b1734e9e602..3c63478d02f 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/models_serde.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/models_serde.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -280,11 +279,43 @@ func (a *ApplicationProfile) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type AttachDetachDataDisksRequest.
+func (a AttachDetachDataDisksRequest) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "dataDisksToAttach", a.DataDisksToAttach)
+	populate(objectMap, "dataDisksToDetach", a.DataDisksToDetach)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type AttachDetachDataDisksRequest.
+func (a *AttachDetachDataDisksRequest) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", a, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "dataDisksToAttach":
+			err = unpopulate(val, "DataDisksToAttach", &a.DataDisksToAttach)
+			delete(rawMsg, key)
+		case "dataDisksToDetach":
+			err = unpopulate(val, "DataDisksToDetach", &a.DataDisksToDetach)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", a, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type AutomaticOSUpgradePolicy.
 func (a AutomaticOSUpgradePolicy) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "disableAutomaticRollback", a.DisableAutomaticRollback)
 	populate(objectMap, "enableAutomaticOSUpgrade", a.EnableAutomaticOSUpgrade)
+	populate(objectMap, "osRollingUpgradeDeferral", a.OSRollingUpgradeDeferral)
 	populate(objectMap, "useRollingUpgradePolicy", a.UseRollingUpgradePolicy)
 	return json.Marshal(objectMap)
 }
@@ -304,6 +335,9 @@ func (a *AutomaticOSUpgradePolicy) UnmarshalJSON(data []byte) error {
 		case "enableAutomaticOSUpgrade":
 			err = unpopulate(val, "EnableAutomaticOSUpgrade", &a.EnableAutomaticOSUpgrade)
 			delete(rawMsg, key)
+		case "osRollingUpgradeDeferral":
+			err = unpopulate(val, "OSRollingUpgradeDeferral", &a.OSRollingUpgradeDeferral)
+			delete(rawMsg, key)
 		case "useRollingUpgradePolicy":
 			err = unpopulate(val, "UseRollingUpgradePolicy", &a.UseRollingUpgradePolicy)
 			delete(rawMsg, key)
@@ -543,10 +577,10 @@ func (a AvailablePatchSummary) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "assessmentActivityId", a.AssessmentActivityID)
 	populate(objectMap, "criticalAndSecurityPatchCount", a.CriticalAndSecurityPatchCount)
 	populate(objectMap, "error", a.Error)
-	populateTimeRFC3339(objectMap, "lastModifiedTime", a.LastModifiedTime)
+	populateDateTimeRFC3339(objectMap, "lastModifiedTime", a.LastModifiedTime)
 	populate(objectMap, "otherPatchCount", a.OtherPatchCount)
 	populate(objectMap, "rebootPending", a.RebootPending)
-	populateTimeRFC3339(objectMap, "startTime", a.StartTime)
+	populateDateTimeRFC3339(objectMap, "startTime", a.StartTime)
 	populate(objectMap, "status", a.Status)
 	return json.Marshal(objectMap)
 }
@@ -570,7 +604,7 @@ func (a *AvailablePatchSummary) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "Error", &a.Error)
 			delete(rawMsg, key)
 		case "lastModifiedTime":
-			err = unpopulateTimeRFC3339(val, "LastModifiedTime", &a.LastModifiedTime)
+			err = unpopulateDateTimeRFC3339(val, "LastModifiedTime", &a.LastModifiedTime)
 			delete(rawMsg, key)
 		case "otherPatchCount":
 			err = unpopulate(val, "OtherPatchCount", &a.OtherPatchCount)
@@ -579,7 +613,7 @@ func (a *AvailablePatchSummary) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "RebootPending", &a.RebootPending)
 			delete(rawMsg, key)
 		case "startTime":
-			err = unpopulateTimeRFC3339(val, "StartTime", &a.StartTime)
+			err = unpopulateDateTimeRFC3339(val, "StartTime", &a.StartTime)
 			delete(rawMsg, key)
 		case "status":
 			err = unpopulate(val, "Status", &a.Status)
@@ -795,6 +829,7 @@ func (c *CapacityReservationGroup) UnmarshalJSON(data []byte) error {
 func (c CapacityReservationGroupInstanceView) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "capacityReservations", c.CapacityReservations)
+	populate(objectMap, "sharedSubscriptionIds", c.SharedSubscriptionIDs)
 	return json.Marshal(objectMap)
 }
 
@@ -810,6 +845,9 @@ func (c *CapacityReservationGroupInstanceView) UnmarshalJSON(data []byte) error
 		case "capacityReservations":
 			err = unpopulate(val, "CapacityReservations", &c.CapacityReservations)
 			delete(rawMsg, key)
+		case "sharedSubscriptionIds":
+			err = unpopulate(val, "SharedSubscriptionIDs", &c.SharedSubscriptionIDs)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", c, err)
@@ -854,6 +892,7 @@ func (c CapacityReservationGroupProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "capacityReservations", c.CapacityReservations)
 	populate(objectMap, "instanceView", c.InstanceView)
+	populate(objectMap, "sharingProfile", c.SharingProfile)
 	populate(objectMap, "virtualMachinesAssociated", c.VirtualMachinesAssociated)
 	return json.Marshal(objectMap)
 }
@@ -873,6 +912,9 @@ func (c *CapacityReservationGroupProperties) UnmarshalJSON(data []byte) error {
 		case "instanceView":
 			err = unpopulate(val, "InstanceView", &c.InstanceView)
 			delete(rawMsg, key)
+		case "sharingProfile":
+			err = unpopulate(val, "SharingProfile", &c.SharingProfile)
+			delete(rawMsg, key)
 		case "virtualMachinesAssociated":
 			err = unpopulate(val, "VirtualMachinesAssociated", &c.VirtualMachinesAssociated)
 			delete(rawMsg, key)
@@ -1045,9 +1087,9 @@ func (c CapacityReservationProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "instanceView", c.InstanceView)
 	populate(objectMap, "platformFaultDomainCount", c.PlatformFaultDomainCount)
 	populate(objectMap, "provisioningState", c.ProvisioningState)
-	populateTimeRFC3339(objectMap, "provisioningTime", c.ProvisioningTime)
+	populateDateTimeRFC3339(objectMap, "provisioningTime", c.ProvisioningTime)
 	populate(objectMap, "reservationId", c.ReservationID)
-	populateTimeRFC3339(objectMap, "timeCreated", c.TimeCreated)
+	populateDateTimeRFC3339(objectMap, "timeCreated", c.TimeCreated)
 	populate(objectMap, "virtualMachinesAssociated", c.VirtualMachinesAssociated)
 	return json.Marshal(objectMap)
 }
@@ -1071,13 +1113,13 @@ func (c *CapacityReservationProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "ProvisioningState", &c.ProvisioningState)
 			delete(rawMsg, key)
 		case "provisioningTime":
-			err = unpopulateTimeRFC3339(val, "ProvisioningTime", &c.ProvisioningTime)
+			err = unpopulateDateTimeRFC3339(val, "ProvisioningTime", &c.ProvisioningTime)
 			delete(rawMsg, key)
 		case "reservationId":
 			err = unpopulate(val, "ReservationID", &c.ReservationID)
 			delete(rawMsg, key)
 		case "timeCreated":
-			err = unpopulateTimeRFC3339(val, "TimeCreated", &c.TimeCreated)
+			err = unpopulateDateTimeRFC3339(val, "TimeCreated", &c.TimeCreated)
 			delete(rawMsg, key)
 		case "virtualMachinesAssociated":
 			err = unpopulate(val, "VirtualMachinesAssociated", &c.VirtualMachinesAssociated)
@@ -1824,6 +1866,7 @@ func (c CommunityGallery) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "identifier", c.Identifier)
 	populate(objectMap, "location", c.Location)
 	populate(objectMap, "name", c.Name)
+	populate(objectMap, "properties", c.Properties)
 	populate(objectMap, "type", c.Type)
 	return json.Marshal(objectMap)
 }
@@ -1846,6 +1889,9 @@ func (c *CommunityGallery) UnmarshalJSON(data []byte) error {
 		case "name":
 			err = unpopulate(val, "Name", &c.Name)
 			delete(rawMsg, key)
+		case "properties":
+			err = unpopulate(val, "Properties", &c.Properties)
+			delete(rawMsg, key)
 		case "type":
 			err = unpopulate(val, "Type", &c.Type)
 			delete(rawMsg, key)
@@ -1927,6 +1973,41 @@ func (c *CommunityGalleryImage) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type CommunityGalleryImageIdentifier.
+func (c CommunityGalleryImageIdentifier) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "offer", c.Offer)
+	populate(objectMap, "publisher", c.Publisher)
+	populate(objectMap, "sku", c.SKU)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type CommunityGalleryImageIdentifier.
+func (c *CommunityGalleryImageIdentifier) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", c, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "offer":
+			err = unpopulate(val, "Offer", &c.Offer)
+			delete(rawMsg, key)
+		case "publisher":
+			err = unpopulate(val, "Publisher", &c.Publisher)
+			delete(rawMsg, key)
+		case "sku":
+			err = unpopulate(val, "SKU", &c.SKU)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", c, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type CommunityGalleryImageList.
 func (c CommunityGalleryImageList) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -1962,8 +2043,10 @@ func (c *CommunityGalleryImageList) UnmarshalJSON(data []byte) error {
 func (c CommunityGalleryImageProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "architecture", c.Architecture)
+	populate(objectMap, "artifactTags", c.ArtifactTags)
 	populate(objectMap, "disallowed", c.Disallowed)
-	populateTimeRFC3339(objectMap, "endOfLifeDate", c.EndOfLifeDate)
+	populate(objectMap, "disclaimer", c.Disclaimer)
+	populateDateTimeRFC3339(objectMap, "endOfLifeDate", c.EndOfLifeDate)
 	populate(objectMap, "eula", c.Eula)
 	populate(objectMap, "features", c.Features)
 	populate(objectMap, "hyperVGeneration", c.HyperVGeneration)
@@ -1988,11 +2071,17 @@ func (c *CommunityGalleryImageProperties) UnmarshalJSON(data []byte) error {
 		case "architecture":
 			err = unpopulate(val, "Architecture", &c.Architecture)
 			delete(rawMsg, key)
+		case "artifactTags":
+			err = unpopulate(val, "ArtifactTags", &c.ArtifactTags)
+			delete(rawMsg, key)
 		case "disallowed":
 			err = unpopulate(val, "Disallowed", &c.Disallowed)
 			delete(rawMsg, key)
+		case "disclaimer":
+			err = unpopulate(val, "Disclaimer", &c.Disclaimer)
+			delete(rawMsg, key)
 		case "endOfLifeDate":
-			err = unpopulateTimeRFC3339(val, "EndOfLifeDate", &c.EndOfLifeDate)
+			err = unpopulateDateTimeRFC3339(val, "EndOfLifeDate", &c.EndOfLifeDate)
 			delete(rawMsg, key)
 		case "eula":
 			err = unpopulate(val, "Eula", &c.Eula)
@@ -2106,9 +2195,11 @@ func (c *CommunityGalleryImageVersionList) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type CommunityGalleryImageVersionProperties.
 func (c CommunityGalleryImageVersionProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "endOfLifeDate", c.EndOfLifeDate)
+	populate(objectMap, "artifactTags", c.ArtifactTags)
+	populate(objectMap, "disclaimer", c.Disclaimer)
+	populateDateTimeRFC3339(objectMap, "endOfLifeDate", c.EndOfLifeDate)
 	populate(objectMap, "excludeFromLatest", c.ExcludeFromLatest)
-	populateTimeRFC3339(objectMap, "publishedDate", c.PublishedDate)
+	populateDateTimeRFC3339(objectMap, "publishedDate", c.PublishedDate)
 	populate(objectMap, "storageProfile", c.StorageProfile)
 	return json.Marshal(objectMap)
 }
@@ -2122,14 +2213,20 @@ func (c *CommunityGalleryImageVersionProperties) UnmarshalJSON(data []byte) erro
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "artifactTags":
+			err = unpopulate(val, "ArtifactTags", &c.ArtifactTags)
+			delete(rawMsg, key)
+		case "disclaimer":
+			err = unpopulate(val, "Disclaimer", &c.Disclaimer)
+			delete(rawMsg, key)
 		case "endOfLifeDate":
-			err = unpopulateTimeRFC3339(val, "EndOfLifeDate", &c.EndOfLifeDate)
+			err = unpopulateDateTimeRFC3339(val, "EndOfLifeDate", &c.EndOfLifeDate)
 			delete(rawMsg, key)
 		case "excludeFromLatest":
 			err = unpopulate(val, "ExcludeFromLatest", &c.ExcludeFromLatest)
 			delete(rawMsg, key)
 		case "publishedDate":
-			err = unpopulateTimeRFC3339(val, "PublishedDate", &c.PublishedDate)
+			err = unpopulateDateTimeRFC3339(val, "PublishedDate", &c.PublishedDate)
 			delete(rawMsg, key)
 		case "storageProfile":
 			err = unpopulate(val, "StorageProfile", &c.StorageProfile)
@@ -2189,6 +2286,84 @@ func (c *CommunityGalleryInfo) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type CommunityGalleryMetadata.
+func (c CommunityGalleryMetadata) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "eula", c.Eula)
+	populate(objectMap, "privacyStatementUri", c.PrivacyStatementURI)
+	populate(objectMap, "publicNames", c.PublicNames)
+	populate(objectMap, "publisherContact", c.PublisherContact)
+	populate(objectMap, "publisherUri", c.PublisherURI)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type CommunityGalleryMetadata.
+func (c *CommunityGalleryMetadata) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", c, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "eula":
+			err = unpopulate(val, "Eula", &c.Eula)
+			delete(rawMsg, key)
+		case "privacyStatementUri":
+			err = unpopulate(val, "PrivacyStatementURI", &c.PrivacyStatementURI)
+			delete(rawMsg, key)
+		case "publicNames":
+			err = unpopulate(val, "PublicNames", &c.PublicNames)
+			delete(rawMsg, key)
+		case "publisherContact":
+			err = unpopulate(val, "PublisherContact", &c.PublisherContact)
+			delete(rawMsg, key)
+		case "publisherUri":
+			err = unpopulate(val, "PublisherURI", &c.PublisherURI)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", c, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type CommunityGalleryProperties.
+func (c CommunityGalleryProperties) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "artifactTags", c.ArtifactTags)
+	populate(objectMap, "communityMetadata", c.CommunityMetadata)
+	populate(objectMap, "disclaimer", c.Disclaimer)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type CommunityGalleryProperties.
+func (c *CommunityGalleryProperties) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", c, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "artifactTags":
+			err = unpopulate(val, "ArtifactTags", &c.ArtifactTags)
+			delete(rawMsg, key)
+		case "communityMetadata":
+			err = unpopulate(val, "CommunityMetadata", &c.CommunityMetadata)
+			delete(rawMsg, key)
+		case "disclaimer":
+			err = unpopulate(val, "Disclaimer", &c.Disclaimer)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", c, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type CopyCompletionError.
 func (c CopyCompletionError) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -2224,6 +2399,7 @@ func (c *CopyCompletionError) UnmarshalJSON(data []byte) error {
 func (c CreationData) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "createOption", c.CreateOption)
+	populate(objectMap, "elasticSanResourceId", c.ElasticSanResourceID)
 	populate(objectMap, "galleryImageReference", c.GalleryImageReference)
 	populate(objectMap, "imageReference", c.ImageReference)
 	populate(objectMap, "logicalSectorSize", c.LogicalSectorSize)
@@ -2249,6 +2425,9 @@ func (c *CreationData) UnmarshalJSON(data []byte) error {
 		case "createOption":
 			err = unpopulate(val, "CreateOption", &c.CreateOption)
 			delete(rawMsg, key)
+		case "elasticSanResourceId":
+			err = unpopulate(val, "ElasticSanResourceID", &c.ElasticSanResourceID)
+			delete(rawMsg, key)
 		case "galleryImageReference":
 			err = unpopulate(val, "GalleryImageReference", &c.GalleryImageReference)
 			delete(rawMsg, key)
@@ -2424,6 +2603,68 @@ func (d *DataDiskImageEncryption) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type DataDisksToAttach.
+func (d DataDisksToAttach) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "diskId", d.DiskID)
+	populate(objectMap, "lun", d.Lun)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type DataDisksToAttach.
+func (d *DataDisksToAttach) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", d, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "diskId":
+			err = unpopulate(val, "DiskID", &d.DiskID)
+			delete(rawMsg, key)
+		case "lun":
+			err = unpopulate(val, "Lun", &d.Lun)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", d, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type DataDisksToDetach.
+func (d DataDisksToDetach) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "detachOption", d.DetachOption)
+	populate(objectMap, "diskId", d.DiskID)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type DataDisksToDetach.
+func (d *DataDisksToDetach) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", d, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "detachOption":
+			err = unpopulate(val, "DetachOption", &d.DetachOption)
+			delete(rawMsg, key)
+		case "diskId":
+			err = unpopulate(val, "DiskID", &d.DiskID)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", d, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type DedicatedHost.
 func (d DedicatedHost) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -2861,8 +3102,8 @@ func (d DedicatedHostProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "licenseType", d.LicenseType)
 	populate(objectMap, "platformFaultDomain", d.PlatformFaultDomain)
 	populate(objectMap, "provisioningState", d.ProvisioningState)
-	populateTimeRFC3339(objectMap, "provisioningTime", d.ProvisioningTime)
-	populateTimeRFC3339(objectMap, "timeCreated", d.TimeCreated)
+	populateDateTimeRFC3339(objectMap, "provisioningTime", d.ProvisioningTime)
+	populateDateTimeRFC3339(objectMap, "timeCreated", d.TimeCreated)
 	populate(objectMap, "virtualMachines", d.VirtualMachines)
 	return json.Marshal(objectMap)
 }
@@ -2895,10 +3136,10 @@ func (d *DedicatedHostProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "ProvisioningState", &d.ProvisioningState)
 			delete(rawMsg, key)
 		case "provisioningTime":
-			err = unpopulateTimeRFC3339(val, "ProvisioningTime", &d.ProvisioningTime)
+			err = unpopulateDateTimeRFC3339(val, "ProvisioningTime", &d.ProvisioningTime)
 			delete(rawMsg, key)
 		case "timeCreated":
-			err = unpopulateTimeRFC3339(val, "TimeCreated", &d.TimeCreated)
+			err = unpopulateDateTimeRFC3339(val, "TimeCreated", &d.TimeCreated)
 			delete(rawMsg, key)
 		case "virtualMachines":
 			err = unpopulate(val, "VirtualMachines", &d.VirtualMachines)
@@ -2911,10 +3152,38 @@ func (d *DedicatedHostProperties) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type DedicatedHostSizeListResult.
+func (d DedicatedHostSizeListResult) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "value", d.Value)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type DedicatedHostSizeListResult.
+func (d *DedicatedHostSizeListResult) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", d, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "value":
+			err = unpopulate(val, "Value", &d.Value)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", d, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type DedicatedHostUpdate.
 func (d DedicatedHostUpdate) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "properties", d.Properties)
+	populate(objectMap, "sku", d.SKU)
 	populate(objectMap, "tags", d.Tags)
 	return json.Marshal(objectMap)
 }
@@ -2931,6 +3200,9 @@ func (d *DedicatedHostUpdate) UnmarshalJSON(data []byte) error {
 		case "properties":
 			err = unpopulate(val, "Properties", &d.Properties)
 			delete(rawMsg, key)
+		case "sku":
+			err = unpopulate(val, "SKU", &d.SKU)
+			delete(rawMsg, key)
 		case "tags":
 			err = unpopulate(val, "Tags", &d.Tags)
 			delete(rawMsg, key)
@@ -3208,7 +3480,7 @@ func (d DiskAccessProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "privateEndpointConnections", d.PrivateEndpointConnections)
 	populate(objectMap, "provisioningState", d.ProvisioningState)
-	populateTimeRFC3339(objectMap, "timeCreated", d.TimeCreated)
+	populateDateTimeRFC3339(objectMap, "timeCreated", d.TimeCreated)
 	return json.Marshal(objectMap)
 }
 
@@ -3228,7 +3500,7 @@ func (d *DiskAccessProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "ProvisioningState", &d.ProvisioningState)
 			delete(rawMsg, key)
 		case "timeCreated":
-			err = unpopulateTimeRFC3339(val, "TimeCreated", &d.TimeCreated)
+			err = unpopulateDateTimeRFC3339(val, "TimeCreated", &d.TimeCreated)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -3580,7 +3852,7 @@ func (d *DiskList) UnmarshalJSON(data []byte) error {
 func (d DiskProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "burstingEnabled", d.BurstingEnabled)
-	populateTimeRFC3339(objectMap, "burstingEnabledTime", d.BurstingEnabledTime)
+	populateDateTimeRFC3339(objectMap, "burstingEnabledTime", d.BurstingEnabledTime)
 	populate(objectMap, "completionPercent", d.CompletionPercent)
 	populate(objectMap, "creationData", d.CreationData)
 	populate(objectMap, "dataAccessAuthMode", d.DataAccessAuthMode)
@@ -3595,6 +3867,7 @@ func (d DiskProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "encryption", d.Encryption)
 	populate(objectMap, "encryptionSettingsCollection", d.EncryptionSettingsCollection)
 	populate(objectMap, "hyperVGeneration", d.HyperVGeneration)
+	populateDateTimeRFC3339(objectMap, "LastOwnershipUpdateTime", d.LastOwnershipUpdateTime)
 	populate(objectMap, "maxShares", d.MaxShares)
 	populate(objectMap, "networkAccessPolicy", d.NetworkAccessPolicy)
 	populate(objectMap, "osType", d.OSType)
@@ -3608,7 +3881,7 @@ func (d DiskProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "supportedCapabilities", d.SupportedCapabilities)
 	populate(objectMap, "supportsHibernation", d.SupportsHibernation)
 	populate(objectMap, "tier", d.Tier)
-	populateTimeRFC3339(objectMap, "timeCreated", d.TimeCreated)
+	populateDateTimeRFC3339(objectMap, "timeCreated", d.TimeCreated)
 	populate(objectMap, "uniqueId", d.UniqueID)
 	return json.Marshal(objectMap)
 }
@@ -3626,7 +3899,7 @@ func (d *DiskProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "BurstingEnabled", &d.BurstingEnabled)
 			delete(rawMsg, key)
 		case "burstingEnabledTime":
-			err = unpopulateTimeRFC3339(val, "BurstingEnabledTime", &d.BurstingEnabledTime)
+			err = unpopulateDateTimeRFC3339(val, "BurstingEnabledTime", &d.BurstingEnabledTime)
 			delete(rawMsg, key)
 		case "completionPercent":
 			err = unpopulate(val, "CompletionPercent", &d.CompletionPercent)
@@ -3670,6 +3943,9 @@ func (d *DiskProperties) UnmarshalJSON(data []byte) error {
 		case "hyperVGeneration":
 			err = unpopulate(val, "HyperVGeneration", &d.HyperVGeneration)
 			delete(rawMsg, key)
+		case "LastOwnershipUpdateTime":
+			err = unpopulateDateTimeRFC3339(val, "LastOwnershipUpdateTime", &d.LastOwnershipUpdateTime)
+			delete(rawMsg, key)
 		case "maxShares":
 			err = unpopulate(val, "MaxShares", &d.MaxShares)
 			delete(rawMsg, key)
@@ -3710,7 +3986,7 @@ func (d *DiskProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "Tier", &d.Tier)
 			delete(rawMsg, key)
 		case "timeCreated":
-			err = unpopulateTimeRFC3339(val, "TimeCreated", &d.TimeCreated)
+			err = unpopulateDateTimeRFC3339(val, "TimeCreated", &d.TimeCreated)
 			delete(rawMsg, key)
 		case "uniqueId":
 			err = unpopulate(val, "UniqueID", &d.UniqueID)
@@ -3801,6 +4077,41 @@ func (d *DiskRestorePoint) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type DiskRestorePointAttributes.
+func (d DiskRestorePointAttributes) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "encryption", d.Encryption)
+	populate(objectMap, "id", d.ID)
+	populate(objectMap, "sourceDiskRestorePoint", d.SourceDiskRestorePoint)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type DiskRestorePointAttributes.
+func (d *DiskRestorePointAttributes) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", d, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "encryption":
+			err = unpopulate(val, "Encryption", &d.Encryption)
+			delete(rawMsg, key)
+		case "id":
+			err = unpopulate(val, "ID", &d.ID)
+			delete(rawMsg, key)
+		case "sourceDiskRestorePoint":
+			err = unpopulate(val, "SourceDiskRestorePoint", &d.SourceDiskRestorePoint)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", d, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type DiskRestorePointInstanceView.
 func (d DiskRestorePointInstanceView) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -3882,7 +4193,7 @@ func (d DiskRestorePointProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "sourceUniqueId", d.SourceUniqueID)
 	populate(objectMap, "supportedCapabilities", d.SupportedCapabilities)
 	populate(objectMap, "supportsHibernation", d.SupportsHibernation)
-	populateTimeRFC3339(objectMap, "timeCreated", d.TimeCreated)
+	populateDateTimeRFC3339(objectMap, "timeCreated", d.TimeCreated)
 	return json.Marshal(objectMap)
 }
 
@@ -3944,7 +4255,7 @@ func (d *DiskRestorePointProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "SupportsHibernation", &d.SupportsHibernation)
 			delete(rawMsg, key)
 		case "timeCreated":
-			err = unpopulateTimeRFC3339(val, "TimeCreated", &d.TimeCreated)
+			err = unpopulateDateTimeRFC3339(val, "TimeCreated", &d.TimeCreated)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -4216,6 +4527,33 @@ func (e *Encryption) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type EncryptionIdentity.
+func (e EncryptionIdentity) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "userAssignedIdentityResourceId", e.UserAssignedIdentityResourceID)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type EncryptionIdentity.
+func (e *EncryptionIdentity) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", e, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "userAssignedIdentityResourceId":
+			err = unpopulate(val, "UserAssignedIdentityResourceID", &e.UserAssignedIdentityResourceID)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", e, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type EncryptionImages.
 func (e EncryptionImages) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -4293,7 +4631,7 @@ func (e EncryptionSetProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "autoKeyRotationError", e.AutoKeyRotationError)
 	populate(objectMap, "encryptionType", e.EncryptionType)
 	populate(objectMap, "federatedClientId", e.FederatedClientID)
-	populateTimeRFC3339(objectMap, "lastKeyRotationTimestamp", e.LastKeyRotationTimestamp)
+	populateDateTimeRFC3339(objectMap, "lastKeyRotationTimestamp", e.LastKeyRotationTimestamp)
 	populate(objectMap, "previousKeys", e.PreviousKeys)
 	populate(objectMap, "provisioningState", e.ProvisioningState)
 	populate(objectMap, "rotationToLatestKeyVersionEnabled", e.RotationToLatestKeyVersionEnabled)
@@ -4322,7 +4660,7 @@ func (e *EncryptionSetProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "FederatedClientID", &e.FederatedClientID)
 			delete(rawMsg, key)
 		case "lastKeyRotationTimestamp":
-			err = unpopulateTimeRFC3339(val, "LastKeyRotationTimestamp", &e.LastKeyRotationTimestamp)
+			err = unpopulateDateTimeRFC3339(val, "LastKeyRotationTimestamp", &e.LastKeyRotationTimestamp)
 			delete(rawMsg, key)
 		case "previousKeys":
 			err = unpopulate(val, "PreviousKeys", &e.PreviousKeys)
@@ -4681,7 +5019,7 @@ func (g GalleryApplicationProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "customActions", g.CustomActions)
 	populate(objectMap, "description", g.Description)
-	populateTimeRFC3339(objectMap, "endOfLifeDate", g.EndOfLifeDate)
+	populateDateTimeRFC3339(objectMap, "endOfLifeDate", g.EndOfLifeDate)
 	populate(objectMap, "eula", g.Eula)
 	populate(objectMap, "privacyStatementUri", g.PrivacyStatementURI)
 	populate(objectMap, "releaseNoteUri", g.ReleaseNoteURI)
@@ -4705,7 +5043,7 @@ func (g *GalleryApplicationProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "Description", &g.Description)
 			delete(rawMsg, key)
 		case "endOfLifeDate":
-			err = unpopulateTimeRFC3339(val, "EndOfLifeDate", &g.EndOfLifeDate)
+			err = unpopulateDateTimeRFC3339(val, "EndOfLifeDate", &g.EndOfLifeDate)
 			delete(rawMsg, key)
 		case "eula":
 			err = unpopulate(val, "Eula", &g.Eula)
@@ -4893,10 +5231,10 @@ func (g GalleryApplicationVersionPublishingProfile) MarshalJSON() ([]byte, error
 	populate(objectMap, "advancedSettings", g.AdvancedSettings)
 	populate(objectMap, "customActions", g.CustomActions)
 	populate(objectMap, "enableHealthCheck", g.EnableHealthCheck)
-	populateTimeRFC3339(objectMap, "endOfLifeDate", g.EndOfLifeDate)
+	populateDateTimeRFC3339(objectMap, "endOfLifeDate", g.EndOfLifeDate)
 	populate(objectMap, "excludeFromLatest", g.ExcludeFromLatest)
 	populate(objectMap, "manageActions", g.ManageActions)
-	populateTimeRFC3339(objectMap, "publishedDate", g.PublishedDate)
+	populateDateTimeRFC3339(objectMap, "publishedDate", g.PublishedDate)
 	populate(objectMap, "replicaCount", g.ReplicaCount)
 	populate(objectMap, "replicationMode", g.ReplicationMode)
 	populate(objectMap, "settings", g.Settings)
@@ -4926,7 +5264,7 @@ func (g *GalleryApplicationVersionPublishingProfile) UnmarshalJSON(data []byte)
 			err = unpopulate(val, "EnableHealthCheck", &g.EnableHealthCheck)
 			delete(rawMsg, key)
 		case "endOfLifeDate":
-			err = unpopulateTimeRFC3339(val, "EndOfLifeDate", &g.EndOfLifeDate)
+			err = unpopulateDateTimeRFC3339(val, "EndOfLifeDate", &g.EndOfLifeDate)
 			delete(rawMsg, key)
 		case "excludeFromLatest":
 			err = unpopulate(val, "ExcludeFromLatest", &g.ExcludeFromLatest)
@@ -4935,7 +5273,7 @@ func (g *GalleryApplicationVersionPublishingProfile) UnmarshalJSON(data []byte)
 			err = unpopulate(val, "ManageActions", &g.ManageActions)
 			delete(rawMsg, key)
 		case "publishedDate":
-			err = unpopulateTimeRFC3339(val, "PublishedDate", &g.PublishedDate)
+			err = unpopulateDateTimeRFC3339(val, "PublishedDate", &g.PublishedDate)
 			delete(rawMsg, key)
 		case "replicaCount":
 			err = unpopulate(val, "ReplicaCount", &g.ReplicaCount)
@@ -5039,9 +5377,9 @@ func (g *GalleryApplicationVersionUpdate) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type GalleryArtifactPublishingProfileBase.
 func (g GalleryArtifactPublishingProfileBase) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "endOfLifeDate", g.EndOfLifeDate)
+	populateDateTimeRFC3339(objectMap, "endOfLifeDate", g.EndOfLifeDate)
 	populate(objectMap, "excludeFromLatest", g.ExcludeFromLatest)
-	populateTimeRFC3339(objectMap, "publishedDate", g.PublishedDate)
+	populateDateTimeRFC3339(objectMap, "publishedDate", g.PublishedDate)
 	populate(objectMap, "replicaCount", g.ReplicaCount)
 	populate(objectMap, "replicationMode", g.ReplicationMode)
 	populate(objectMap, "storageAccountType", g.StorageAccountType)
@@ -5060,13 +5398,13 @@ func (g *GalleryArtifactPublishingProfileBase) UnmarshalJSON(data []byte) error
 		var err error
 		switch key {
 		case "endOfLifeDate":
-			err = unpopulateTimeRFC3339(val, "EndOfLifeDate", &g.EndOfLifeDate)
+			err = unpopulateDateTimeRFC3339(val, "EndOfLifeDate", &g.EndOfLifeDate)
 			delete(rawMsg, key)
 		case "excludeFromLatest":
 			err = unpopulate(val, "ExcludeFromLatest", &g.ExcludeFromLatest)
 			delete(rawMsg, key)
 		case "publishedDate":
-			err = unpopulateTimeRFC3339(val, "PublishedDate", &g.PublishedDate)
+			err = unpopulateDateTimeRFC3339(val, "PublishedDate", &g.PublishedDate)
 			delete(rawMsg, key)
 		case "replicaCount":
 			err = unpopulate(val, "ReplicaCount", &g.ReplicaCount)
@@ -5520,7 +5858,7 @@ func (g GalleryImageProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "architecture", g.Architecture)
 	populate(objectMap, "description", g.Description)
 	populate(objectMap, "disallowed", g.Disallowed)
-	populateTimeRFC3339(objectMap, "endOfLifeDate", g.EndOfLifeDate)
+	populateDateTimeRFC3339(objectMap, "endOfLifeDate", g.EndOfLifeDate)
 	populate(objectMap, "eula", g.Eula)
 	populate(objectMap, "features", g.Features)
 	populate(objectMap, "hyperVGeneration", g.HyperVGeneration)
@@ -5554,7 +5892,7 @@ func (g *GalleryImageProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "Disallowed", &g.Disallowed)
 			delete(rawMsg, key)
 		case "endOfLifeDate":
-			err = unpopulateTimeRFC3339(val, "EndOfLifeDate", &g.EndOfLifeDate)
+			err = unpopulateDateTimeRFC3339(val, "EndOfLifeDate", &g.EndOfLifeDate)
 			delete(rawMsg, key)
 		case "eula":
 			err = unpopulate(val, "Eula", &g.Eula)
@@ -5725,6 +6063,7 @@ func (g GalleryImageVersionProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "publishingProfile", g.PublishingProfile)
 	populate(objectMap, "replicationStatus", g.ReplicationStatus)
 	populate(objectMap, "safetyProfile", g.SafetyProfile)
+	populate(objectMap, "securityProfile", g.SecurityProfile)
 	populate(objectMap, "storageProfile", g.StorageProfile)
 	return json.Marshal(objectMap)
 }
@@ -5750,6 +6089,9 @@ func (g *GalleryImageVersionProperties) UnmarshalJSON(data []byte) error {
 		case "safetyProfile":
 			err = unpopulate(val, "SafetyProfile", &g.SafetyProfile)
 			delete(rawMsg, key)
+		case "securityProfile":
+			err = unpopulate(val, "SecurityProfile", &g.SecurityProfile)
+			delete(rawMsg, key)
 		case "storageProfile":
 			err = unpopulate(val, "StorageProfile", &g.StorageProfile)
 			delete(rawMsg, key)
@@ -5764,9 +6106,9 @@ func (g *GalleryImageVersionProperties) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type GalleryImageVersionPublishingProfile.
 func (g GalleryImageVersionPublishingProfile) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "endOfLifeDate", g.EndOfLifeDate)
+	populateDateTimeRFC3339(objectMap, "endOfLifeDate", g.EndOfLifeDate)
 	populate(objectMap, "excludeFromLatest", g.ExcludeFromLatest)
-	populateTimeRFC3339(objectMap, "publishedDate", g.PublishedDate)
+	populateDateTimeRFC3339(objectMap, "publishedDate", g.PublishedDate)
 	populate(objectMap, "replicaCount", g.ReplicaCount)
 	populate(objectMap, "replicationMode", g.ReplicationMode)
 	populate(objectMap, "storageAccountType", g.StorageAccountType)
@@ -5785,13 +6127,13 @@ func (g *GalleryImageVersionPublishingProfile) UnmarshalJSON(data []byte) error
 		var err error
 		switch key {
 		case "endOfLifeDate":
-			err = unpopulateTimeRFC3339(val, "EndOfLifeDate", &g.EndOfLifeDate)
+			err = unpopulateDateTimeRFC3339(val, "EndOfLifeDate", &g.EndOfLifeDate)
 			delete(rawMsg, key)
 		case "excludeFromLatest":
 			err = unpopulate(val, "ExcludeFromLatest", &g.ExcludeFromLatest)
 			delete(rawMsg, key)
 		case "publishedDate":
-			err = unpopulateTimeRFC3339(val, "PublishedDate", &g.PublishedDate)
+			err = unpopulateDateTimeRFC3339(val, "PublishedDate", &g.PublishedDate)
 			delete(rawMsg, key)
 		case "replicaCount":
 			err = unpopulate(val, "ReplicaCount", &g.ReplicaCount)
@@ -5886,6 +6228,37 @@ func (g *GalleryImageVersionStorageProfile) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type GalleryImageVersionUefiSettings.
+func (g GalleryImageVersionUefiSettings) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "additionalSignatures", g.AdditionalSignatures)
+	populate(objectMap, "signatureTemplateNames", g.SignatureTemplateNames)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type GalleryImageVersionUefiSettings.
+func (g *GalleryImageVersionUefiSettings) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", g, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "additionalSignatures":
+			err = unpopulate(val, "AdditionalSignatures", &g.AdditionalSignatures)
+			delete(rawMsg, key)
+		case "signatureTemplateNames":
+			err = unpopulate(val, "SignatureTemplateNames", &g.SignatureTemplateNames)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", g, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type GalleryImageVersionUpdate.
 func (g GalleryImageVersionUpdate) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -6133,6 +6506,7 @@ func (g GrantAccessData) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "access", g.Access)
 	populate(objectMap, "durationInSeconds", g.DurationInSeconds)
+	populate(objectMap, "fileFormat", g.FileFormat)
 	populate(objectMap, "getSecureVMGuestStateSAS", g.GetSecureVMGuestStateSAS)
 	return json.Marshal(objectMap)
 }
@@ -6152,6 +6526,9 @@ func (g *GrantAccessData) UnmarshalJSON(data []byte) error {
 		case "durationInSeconds":
 			err = unpopulate(val, "DurationInSeconds", &g.DurationInSeconds)
 			delete(rawMsg, key)
+		case "fileFormat":
+			err = unpopulate(val, "FileFormat", &g.FileFormat)
+			delete(rawMsg, key)
 		case "getSecureVMGuestStateSAS":
 			err = unpopulate(val, "GetSecureVMGuestStateSAS", &g.GetSecureVMGuestStateSAS)
 			delete(rawMsg, key)
@@ -6305,7 +6682,7 @@ func (i ImageDeprecationStatus) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "alternativeOption", i.AlternativeOption)
 	populate(objectMap, "imageState", i.ImageState)
-	populateTimeRFC3339(objectMap, "scheduledDeprecationTime", i.ScheduledDeprecationTime)
+	populateDateTimeRFC3339(objectMap, "scheduledDeprecationTime", i.ScheduledDeprecationTime)
 	return json.Marshal(objectMap)
 }
 
@@ -6325,7 +6702,7 @@ func (i *ImageDeprecationStatus) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "ImageState", &i.ImageState)
 			delete(rawMsg, key)
 		case "scheduledDeprecationTime":
-			err = unpopulateTimeRFC3339(val, "ScheduledDeprecationTime", &i.ScheduledDeprecationTime)
+			err = unpopulateDateTimeRFC3339(val, "ScheduledDeprecationTime", &i.ScheduledDeprecationTime)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -6710,6 +7087,33 @@ func (i *ImageUpdate) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type ImageVersionSecurityProfile.
+func (i ImageVersionSecurityProfile) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "uefiSettings", i.UefiSettings)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type ImageVersionSecurityProfile.
+func (i *ImageVersionSecurityProfile) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", i, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "uefiSettings":
+			err = unpopulate(val, "UefiSettings", &i.UefiSettings)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", i, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type InnerError.
 func (i InnerError) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -6779,7 +7183,7 @@ func (i InstanceViewStatus) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "displayStatus", i.DisplayStatus)
 	populate(objectMap, "level", i.Level)
 	populate(objectMap, "message", i.Message)
-	populateTimeRFC3339(objectMap, "time", i.Time)
+	populateDateTimeRFC3339(objectMap, "time", i.Time)
 	return json.Marshal(objectMap)
 }
 
@@ -6805,7 +7209,7 @@ func (i *InstanceViewStatus) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "Message", &i.Message)
 			delete(rawMsg, key)
 		case "time":
-			err = unpopulateTimeRFC3339(val, "Time", &i.Time)
+			err = unpopulateDateTimeRFC3339(val, "Time", &i.Time)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -7005,11 +7409,11 @@ func (l LastPatchInstallationSummary) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "failedPatchCount", l.FailedPatchCount)
 	populate(objectMap, "installationActivityId", l.InstallationActivityID)
 	populate(objectMap, "installedPatchCount", l.InstalledPatchCount)
-	populateTimeRFC3339(objectMap, "lastModifiedTime", l.LastModifiedTime)
+	populateDateTimeRFC3339(objectMap, "lastModifiedTime", l.LastModifiedTime)
 	populate(objectMap, "maintenanceWindowExceeded", l.MaintenanceWindowExceeded)
 	populate(objectMap, "notSelectedPatchCount", l.NotSelectedPatchCount)
 	populate(objectMap, "pendingPatchCount", l.PendingPatchCount)
-	populateTimeRFC3339(objectMap, "startTime", l.StartTime)
+	populateDateTimeRFC3339(objectMap, "startTime", l.StartTime)
 	populate(objectMap, "status", l.Status)
 	return json.Marshal(objectMap)
 }
@@ -7039,7 +7443,7 @@ func (l *LastPatchInstallationSummary) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "InstalledPatchCount", &l.InstalledPatchCount)
 			delete(rawMsg, key)
 		case "lastModifiedTime":
-			err = unpopulateTimeRFC3339(val, "LastModifiedTime", &l.LastModifiedTime)
+			err = unpopulateDateTimeRFC3339(val, "LastModifiedTime", &l.LastModifiedTime)
 			delete(rawMsg, key)
 		case "maintenanceWindowExceeded":
 			err = unpopulate(val, "MaintenanceWindowExceeded", &l.MaintenanceWindowExceeded)
@@ -7051,7 +7455,7 @@ func (l *LastPatchInstallationSummary) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "PendingPatchCount", &l.PendingPatchCount)
 			delete(rawMsg, key)
 		case "startTime":
-			err = unpopulateTimeRFC3339(val, "StartTime", &l.StartTime)
+			err = unpopulateDateTimeRFC3339(val, "StartTime", &l.StartTime)
 			delete(rawMsg, key)
 		case "status":
 			err = unpopulate(val, "Status", &l.Status)
@@ -7215,6 +7619,7 @@ func (l *LinuxPatchSettings) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type LinuxVMGuestPatchAutomaticByPlatformSettings.
 func (l LinuxVMGuestPatchAutomaticByPlatformSettings) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
+	populate(objectMap, "bypassPlatformSafetyChecksOnUserSchedule", l.BypassPlatformSafetyChecksOnUserSchedule)
 	populate(objectMap, "rebootSetting", l.RebootSetting)
 	return json.Marshal(objectMap)
 }
@@ -7228,6 +7633,9 @@ func (l *LinuxVMGuestPatchAutomaticByPlatformSettings) UnmarshalJSON(data []byte
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "bypassPlatformSafetyChecksOnUserSchedule":
+			err = unpopulate(val, "BypassPlatformSafetyChecksOnUserSchedule", &l.BypassPlatformSafetyChecksOnUserSchedule)
+			delete(rawMsg, key)
 		case "rebootSetting":
 			err = unpopulate(val, "RebootSetting", &l.RebootSetting)
 			delete(rawMsg, key)
@@ -7402,13 +7810,13 @@ func (l *LoadBalancerFrontendIPConfigurationProperties) UnmarshalJSON(data []byt
 func (l LogAnalyticsInputBase) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "blobContainerSasUri", l.BlobContainerSasURI)
-	populateTimeRFC3339(objectMap, "fromTime", l.FromTime)
+	populateDateTimeRFC3339(objectMap, "fromTime", l.FromTime)
 	populate(objectMap, "groupByClientApplicationId", l.GroupByClientApplicationID)
 	populate(objectMap, "groupByOperationName", l.GroupByOperationName)
 	populate(objectMap, "groupByResourceName", l.GroupByResourceName)
 	populate(objectMap, "groupByThrottlePolicy", l.GroupByThrottlePolicy)
 	populate(objectMap, "groupByUserAgent", l.GroupByUserAgent)
-	populateTimeRFC3339(objectMap, "toTime", l.ToTime)
+	populateDateTimeRFC3339(objectMap, "toTime", l.ToTime)
 	return json.Marshal(objectMap)
 }
 
@@ -7425,7 +7833,7 @@ func (l *LogAnalyticsInputBase) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "BlobContainerSasURI", &l.BlobContainerSasURI)
 			delete(rawMsg, key)
 		case "fromTime":
-			err = unpopulateTimeRFC3339(val, "FromTime", &l.FromTime)
+			err = unpopulateDateTimeRFC3339(val, "FromTime", &l.FromTime)
 			delete(rawMsg, key)
 		case "groupByClientApplicationId":
 			err = unpopulate(val, "GroupByClientApplicationID", &l.GroupByClientApplicationID)
@@ -7443,7 +7851,7 @@ func (l *LogAnalyticsInputBase) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "GroupByUserAgent", &l.GroupByUserAgent)
 			delete(rawMsg, key)
 		case "toTime":
-			err = unpopulateTimeRFC3339(val, "ToTime", &l.ToTime)
+			err = unpopulateDateTimeRFC3339(val, "ToTime", &l.ToTime)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -7513,10 +7921,10 @@ func (m MaintenanceRedeployStatus) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "isCustomerInitiatedMaintenanceAllowed", m.IsCustomerInitiatedMaintenanceAllowed)
 	populate(objectMap, "lastOperationMessage", m.LastOperationMessage)
 	populate(objectMap, "lastOperationResultCode", m.LastOperationResultCode)
-	populateTimeRFC3339(objectMap, "maintenanceWindowEndTime", m.MaintenanceWindowEndTime)
-	populateTimeRFC3339(objectMap, "maintenanceWindowStartTime", m.MaintenanceWindowStartTime)
-	populateTimeRFC3339(objectMap, "preMaintenanceWindowEndTime", m.PreMaintenanceWindowEndTime)
-	populateTimeRFC3339(objectMap, "preMaintenanceWindowStartTime", m.PreMaintenanceWindowStartTime)
+	populateDateTimeRFC3339(objectMap, "maintenanceWindowEndTime", m.MaintenanceWindowEndTime)
+	populateDateTimeRFC3339(objectMap, "maintenanceWindowStartTime", m.MaintenanceWindowStartTime)
+	populateDateTimeRFC3339(objectMap, "preMaintenanceWindowEndTime", m.PreMaintenanceWindowEndTime)
+	populateDateTimeRFC3339(objectMap, "preMaintenanceWindowStartTime", m.PreMaintenanceWindowStartTime)
 	return json.Marshal(objectMap)
 }
 
@@ -7539,16 +7947,16 @@ func (m *MaintenanceRedeployStatus) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "LastOperationResultCode", &m.LastOperationResultCode)
 			delete(rawMsg, key)
 		case "maintenanceWindowEndTime":
-			err = unpopulateTimeRFC3339(val, "MaintenanceWindowEndTime", &m.MaintenanceWindowEndTime)
+			err = unpopulateDateTimeRFC3339(val, "MaintenanceWindowEndTime", &m.MaintenanceWindowEndTime)
 			delete(rawMsg, key)
 		case "maintenanceWindowStartTime":
-			err = unpopulateTimeRFC3339(val, "MaintenanceWindowStartTime", &m.MaintenanceWindowStartTime)
+			err = unpopulateDateTimeRFC3339(val, "MaintenanceWindowStartTime", &m.MaintenanceWindowStartTime)
 			delete(rawMsg, key)
 		case "preMaintenanceWindowEndTime":
-			err = unpopulateTimeRFC3339(val, "PreMaintenanceWindowEndTime", &m.PreMaintenanceWindowEndTime)
+			err = unpopulateDateTimeRFC3339(val, "PreMaintenanceWindowEndTime", &m.PreMaintenanceWindowEndTime)
 			delete(rawMsg, key)
 		case "preMaintenanceWindowStartTime":
-			err = unpopulateTimeRFC3339(val, "PreMaintenanceWindowStartTime", &m.PreMaintenanceWindowStartTime)
+			err = unpopulateDateTimeRFC3339(val, "PreMaintenanceWindowStartTime", &m.PreMaintenanceWindowStartTime)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -9204,6 +9612,41 @@ func (p *ProximityPlacementGroupUpdate) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type ProxyAgentSettings.
+func (p ProxyAgentSettings) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "enabled", p.Enabled)
+	populate(objectMap, "keyIncarnationId", p.KeyIncarnationID)
+	populate(objectMap, "mode", p.Mode)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type ProxyAgentSettings.
+func (p *ProxyAgentSettings) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", p, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "enabled":
+			err = unpopulate(val, "Enabled", &p.Enabled)
+			delete(rawMsg, key)
+		case "keyIncarnationId":
+			err = unpopulate(val, "KeyIncarnationID", &p.KeyIncarnationID)
+			delete(rawMsg, key)
+		case "mode":
+			err = unpopulate(val, "Mode", &p.Mode)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", p, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type ProxyOnlyResource.
 func (p ProxyOnlyResource) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -9511,14 +9954,14 @@ func (r *ReplicationStatus) UnmarshalJSON(data []byte) error {
 func (r RequestRateByIntervalInput) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "blobContainerSasUri", r.BlobContainerSasURI)
-	populateTimeRFC3339(objectMap, "fromTime", r.FromTime)
+	populateDateTimeRFC3339(objectMap, "fromTime", r.FromTime)
 	populate(objectMap, "groupByClientApplicationId", r.GroupByClientApplicationID)
 	populate(objectMap, "groupByOperationName", r.GroupByOperationName)
 	populate(objectMap, "groupByResourceName", r.GroupByResourceName)
 	populate(objectMap, "groupByThrottlePolicy", r.GroupByThrottlePolicy)
 	populate(objectMap, "groupByUserAgent", r.GroupByUserAgent)
 	populate(objectMap, "intervalLength", r.IntervalLength)
-	populateTimeRFC3339(objectMap, "toTime", r.ToTime)
+	populateDateTimeRFC3339(objectMap, "toTime", r.ToTime)
 	return json.Marshal(objectMap)
 }
 
@@ -9535,7 +9978,7 @@ func (r *RequestRateByIntervalInput) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "BlobContainerSasURI", &r.BlobContainerSasURI)
 			delete(rawMsg, key)
 		case "fromTime":
-			err = unpopulateTimeRFC3339(val, "FromTime", &r.FromTime)
+			err = unpopulateDateTimeRFC3339(val, "FromTime", &r.FromTime)
 			delete(rawMsg, key)
 		case "groupByClientApplicationId":
 			err = unpopulate(val, "GroupByClientApplicationID", &r.GroupByClientApplicationID)
@@ -9556,7 +9999,92 @@ func (r *RequestRateByIntervalInput) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "IntervalLength", &r.IntervalLength)
 			delete(rawMsg, key)
 		case "toTime":
-			err = unpopulateTimeRFC3339(val, "ToTime", &r.ToTime)
+			err = unpopulateDateTimeRFC3339(val, "ToTime", &r.ToTime)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", r, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type ResiliencyPolicy.
+func (r ResiliencyPolicy) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "resilientVMCreationPolicy", r.ResilientVMCreationPolicy)
+	populate(objectMap, "resilientVMDeletionPolicy", r.ResilientVMDeletionPolicy)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type ResiliencyPolicy.
+func (r *ResiliencyPolicy) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", r, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "resilientVMCreationPolicy":
+			err = unpopulate(val, "ResilientVMCreationPolicy", &r.ResilientVMCreationPolicy)
+			delete(rawMsg, key)
+		case "resilientVMDeletionPolicy":
+			err = unpopulate(val, "ResilientVMDeletionPolicy", &r.ResilientVMDeletionPolicy)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", r, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type ResilientVMCreationPolicy.
+func (r ResilientVMCreationPolicy) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "enabled", r.Enabled)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type ResilientVMCreationPolicy.
+func (r *ResilientVMCreationPolicy) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", r, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "enabled":
+			err = unpopulate(val, "Enabled", &r.Enabled)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", r, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type ResilientVMDeletionPolicy.
+func (r ResilientVMDeletionPolicy) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "enabled", r.Enabled)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type ResilientVMDeletionPolicy.
+func (r *ResilientVMDeletionPolicy) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", r, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "enabled":
+			err = unpopulate(val, "Enabled", &r.Enabled)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -9616,7 +10144,7 @@ func (r ResourceInstanceViewStatus) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "displayStatus", r.DisplayStatus)
 	populate(objectMap, "level", r.Level)
 	populate(objectMap, "message", r.Message)
-	populateTimeRFC3339(objectMap, "time", r.Time)
+	populateDateTimeRFC3339(objectMap, "time", r.Time)
 	return json.Marshal(objectMap)
 }
 
@@ -9642,7 +10170,7 @@ func (r *ResourceInstanceViewStatus) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "Message", &r.Message)
 			delete(rawMsg, key)
 		case "time":
-			err = unpopulateTimeRFC3339(val, "Time", &r.Time)
+			err = unpopulateDateTimeRFC3339(val, "Time", &r.Time)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -9996,8 +10524,39 @@ func (r *ResourceSKUZoneDetails) UnmarshalJSON(data []byte) error {
 		case "capabilities":
 			err = unpopulate(val, "Capabilities", &r.Capabilities)
 			delete(rawMsg, key)
-		case "name":
-			err = unpopulate(val, "Name", &r.Name)
+		case "name":
+			err = unpopulate(val, "Name", &r.Name)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", r, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type ResourceSKUsResult.
+func (r ResourceSKUsResult) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "nextLink", r.NextLink)
+	populate(objectMap, "value", r.Value)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type ResourceSKUsResult.
+func (r *ResourceSKUsResult) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", r, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "nextLink":
+			err = unpopulate(val, "NextLink", &r.NextLink)
+			delete(rawMsg, key)
+		case "value":
+			err = unpopulate(val, "Value", &r.Value)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -10007,16 +10566,15 @@ func (r *ResourceSKUZoneDetails) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
-// MarshalJSON implements the json.Marshaller interface for type ResourceSKUsResult.
-func (r ResourceSKUsResult) MarshalJSON() ([]byte, error) {
+// MarshalJSON implements the json.Marshaller interface for type ResourceSharingProfile.
+func (r ResourceSharingProfile) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populate(objectMap, "nextLink", r.NextLink)
-	populate(objectMap, "value", r.Value)
+	populate(objectMap, "subscriptionIds", r.SubscriptionIDs)
 	return json.Marshal(objectMap)
 }
 
-// UnmarshalJSON implements the json.Unmarshaller interface for type ResourceSKUsResult.
-func (r *ResourceSKUsResult) UnmarshalJSON(data []byte) error {
+// UnmarshalJSON implements the json.Unmarshaller interface for type ResourceSharingProfile.
+func (r *ResourceSharingProfile) UnmarshalJSON(data []byte) error {
 	var rawMsg map[string]json.RawMessage
 	if err := json.Unmarshal(data, &rawMsg); err != nil {
 		return fmt.Errorf("unmarshalling type %T: %v", r, err)
@@ -10024,11 +10582,8 @@ func (r *ResourceSKUsResult) UnmarshalJSON(data []byte) error {
 	for key, val := range rawMsg {
 		var err error
 		switch key {
-		case "nextLink":
-			err = unpopulate(val, "NextLink", &r.NextLink)
-			delete(rawMsg, key)
-		case "value":
-			err = unpopulate(val, "Value", &r.Value)
+		case "subscriptionIds":
+			err = unpopulate(val, "SubscriptionIDs", &r.SubscriptionIDs)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -10330,6 +10885,37 @@ func (r *RestorePointCollectionUpdate) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type RestorePointEncryption.
+func (r RestorePointEncryption) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "diskEncryptionSet", r.DiskEncryptionSet)
+	populate(objectMap, "type", r.Type)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type RestorePointEncryption.
+func (r *RestorePointEncryption) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", r, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "diskEncryptionSet":
+			err = unpopulate(val, "DiskEncryptionSet", &r.DiskEncryptionSet)
+			delete(rawMsg, key)
+		case "type":
+			err = unpopulate(val, "Type", &r.Type)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", r, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type RestorePointInstanceView.
 func (r RestorePointInstanceView) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -10370,7 +10956,7 @@ func (r RestorePointProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "provisioningState", r.ProvisioningState)
 	populate(objectMap, "sourceMetadata", r.SourceMetadata)
 	populate(objectMap, "sourceRestorePoint", r.SourceRestorePoint)
-	populateTimeRFC3339(objectMap, "timeCreated", r.TimeCreated)
+	populateDateTimeRFC3339(objectMap, "timeCreated", r.TimeCreated)
 	return json.Marshal(objectMap)
 }
 
@@ -10402,7 +10988,7 @@ func (r *RestorePointProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "SourceRestorePoint", &r.SourceRestorePoint)
 			delete(rawMsg, key)
 		case "timeCreated":
-			err = unpopulateTimeRFC3339(val, "TimeCreated", &r.TimeCreated)
+			err = unpopulateDateTimeRFC3339(val, "TimeCreated", &r.TimeCreated)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -10417,6 +11003,7 @@ func (r RestorePointSourceMetadata) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "diagnosticsProfile", r.DiagnosticsProfile)
 	populate(objectMap, "hardwareProfile", r.HardwareProfile)
+	populate(objectMap, "hyperVGeneration", r.HyperVGeneration)
 	populate(objectMap, "licenseType", r.LicenseType)
 	populate(objectMap, "location", r.Location)
 	populate(objectMap, "osProfile", r.OSProfile)
@@ -10442,6 +11029,9 @@ func (r *RestorePointSourceMetadata) UnmarshalJSON(data []byte) error {
 		case "hardwareProfile":
 			err = unpopulate(val, "HardwareProfile", &r.HardwareProfile)
 			delete(rawMsg, key)
+		case "hyperVGeneration":
+			err = unpopulate(val, "HyperVGeneration", &r.HyperVGeneration)
+			delete(rawMsg, key)
 		case "licenseType":
 			err = unpopulate(val, "LicenseType", &r.LicenseType)
 			delete(rawMsg, key)
@@ -10480,6 +11070,7 @@ func (r RestorePointSourceVMDataDisk) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "lun", r.Lun)
 	populate(objectMap, "managedDisk", r.ManagedDisk)
 	populate(objectMap, "name", r.Name)
+	populate(objectMap, "writeAcceleratorEnabled", r.WriteAcceleratorEnabled)
 	return json.Marshal(objectMap)
 }
 
@@ -10510,6 +11101,9 @@ func (r *RestorePointSourceVMDataDisk) UnmarshalJSON(data []byte) error {
 		case "name":
 			err = unpopulate(val, "Name", &r.Name)
 			delete(rawMsg, key)
+		case "writeAcceleratorEnabled":
+			err = unpopulate(val, "WriteAcceleratorEnabled", &r.WriteAcceleratorEnabled)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", r, err)
@@ -10528,6 +11122,7 @@ func (r RestorePointSourceVMOSDisk) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "managedDisk", r.ManagedDisk)
 	populate(objectMap, "name", r.Name)
 	populate(objectMap, "osType", r.OSType)
+	populate(objectMap, "writeAcceleratorEnabled", r.WriteAcceleratorEnabled)
 	return json.Marshal(objectMap)
 }
 
@@ -10561,6 +11156,9 @@ func (r *RestorePointSourceVMOSDisk) UnmarshalJSON(data []byte) error {
 		case "osType":
 			err = unpopulate(val, "OSType", &r.OSType)
 			delete(rawMsg, key)
+		case "writeAcceleratorEnabled":
+			err = unpopulate(val, "WriteAcceleratorEnabled", &r.WriteAcceleratorEnabled)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", r, err)
@@ -10573,6 +11171,7 @@ func (r *RestorePointSourceVMOSDisk) UnmarshalJSON(data []byte) error {
 func (r RestorePointSourceVMStorageProfile) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "dataDisks", r.DataDisks)
+	populate(objectMap, "diskControllerType", r.DiskControllerType)
 	populate(objectMap, "osDisk", r.OSDisk)
 	return json.Marshal(objectMap)
 }
@@ -10589,6 +11188,9 @@ func (r *RestorePointSourceVMStorageProfile) UnmarshalJSON(data []byte) error {
 		case "dataDisks":
 			err = unpopulate(val, "DataDisks", &r.DataDisks)
 			delete(rawMsg, key)
+		case "diskControllerType":
+			err = unpopulate(val, "DiskControllerType", &r.DiskControllerType)
+			delete(rawMsg, key)
 		case "osDisk":
 			err = unpopulate(val, "OSDisk", &r.OSDisk)
 			delete(rawMsg, key)
@@ -10971,8 +11573,8 @@ func (r RollingUpgradeRunningStatus) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "code", r.Code)
 	populate(objectMap, "lastAction", r.LastAction)
-	populateTimeRFC3339(objectMap, "lastActionTime", r.LastActionTime)
-	populateTimeRFC3339(objectMap, "startTime", r.StartTime)
+	populateDateTimeRFC3339(objectMap, "lastActionTime", r.LastActionTime)
+	populateDateTimeRFC3339(objectMap, "startTime", r.StartTime)
 	return json.Marshal(objectMap)
 }
 
@@ -10992,10 +11594,10 @@ func (r *RollingUpgradeRunningStatus) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "LastAction", &r.LastAction)
 			delete(rawMsg, key)
 		case "lastActionTime":
-			err = unpopulateTimeRFC3339(val, "LastActionTime", &r.LastActionTime)
+			err = unpopulateDateTimeRFC3339(val, "LastActionTime", &r.LastActionTime)
 			delete(rawMsg, key)
 		case "startTime":
-			err = unpopulateTimeRFC3339(val, "StartTime", &r.StartTime)
+			err = unpopulateDateTimeRFC3339(val, "StartTime", &r.StartTime)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -11282,6 +11884,37 @@ func (r *RunCommandListResult) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type RunCommandManagedIdentity.
+func (r RunCommandManagedIdentity) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "clientId", r.ClientID)
+	populate(objectMap, "objectId", r.ObjectID)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type RunCommandManagedIdentity.
+func (r *RunCommandManagedIdentity) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", r, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "clientId":
+			err = unpopulate(val, "ClientID", &r.ClientID)
+			delete(rawMsg, key)
+		case "objectId":
+			err = unpopulate(val, "ObjectID", &r.ObjectID)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", r, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type RunCommandParameterDefinition.
 func (r RunCommandParameterDefinition) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -11410,6 +12043,33 @@ func (s *SSHConfiguration) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type SSHGenerateKeyPairInputParameters.
+func (s SSHGenerateKeyPairInputParameters) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "encryptionType", s.EncryptionType)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type SSHGenerateKeyPairInputParameters.
+func (s *SSHGenerateKeyPairInputParameters) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", s, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "encryptionType":
+			err = unpopulate(val, "EncryptionType", &s.EncryptionType)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", s, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type SSHPublicKey.
 func (s SSHPublicKey) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -11674,10 +12334,43 @@ func (s *ScheduledEventsProfile) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type SecurityPostureReference.
+func (s SecurityPostureReference) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "excludeExtensions", s.ExcludeExtensions)
+	populate(objectMap, "id", s.ID)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type SecurityPostureReference.
+func (s *SecurityPostureReference) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", s, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "excludeExtensions":
+			err = unpopulate(val, "ExcludeExtensions", &s.ExcludeExtensions)
+			delete(rawMsg, key)
+		case "id":
+			err = unpopulate(val, "ID", &s.ID)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", s, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type SecurityProfile.
 func (s SecurityProfile) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "encryptionAtHost", s.EncryptionAtHost)
+	populate(objectMap, "encryptionIdentity", s.EncryptionIdentity)
+	populate(objectMap, "proxyAgentSettings", s.ProxyAgentSettings)
 	populate(objectMap, "securityType", s.SecurityType)
 	populate(objectMap, "uefiSettings", s.UefiSettings)
 	return json.Marshal(objectMap)
@@ -11695,6 +12388,12 @@ func (s *SecurityProfile) UnmarshalJSON(data []byte) error {
 		case "encryptionAtHost":
 			err = unpopulate(val, "EncryptionAtHost", &s.EncryptionAtHost)
 			delete(rawMsg, key)
+		case "encryptionIdentity":
+			err = unpopulate(val, "EncryptionIdentity", &s.EncryptionIdentity)
+			delete(rawMsg, key)
+		case "proxyAgentSettings":
+			err = unpopulate(val, "ProxyAgentSettings", &s.ProxyAgentSettings)
+			delete(rawMsg, key)
 		case "securityType":
 			err = unpopulate(val, "SecurityType", &s.SecurityType)
 			delete(rawMsg, key)
@@ -11769,6 +12468,7 @@ func (s SharedGallery) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "identifier", s.Identifier)
 	populate(objectMap, "location", s.Location)
 	populate(objectMap, "name", s.Name)
+	populate(objectMap, "properties", s.Properties)
 	return json.Marshal(objectMap)
 }
 
@@ -11790,6 +12490,9 @@ func (s *SharedGallery) UnmarshalJSON(data []byte) error {
 		case "name":
 			err = unpopulate(val, "Name", &s.Name)
 			delete(rawMsg, key)
+		case "properties":
+			err = unpopulate(val, "Properties", &s.Properties)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", s, err)
@@ -11965,8 +12668,9 @@ func (s *SharedGalleryImageList) UnmarshalJSON(data []byte) error {
 func (s SharedGalleryImageProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "architecture", s.Architecture)
+	populate(objectMap, "artifactTags", s.ArtifactTags)
 	populate(objectMap, "disallowed", s.Disallowed)
-	populateTimeRFC3339(objectMap, "endOfLifeDate", s.EndOfLifeDate)
+	populateDateTimeRFC3339(objectMap, "endOfLifeDate", s.EndOfLifeDate)
 	populate(objectMap, "eula", s.Eula)
 	populate(objectMap, "features", s.Features)
 	populate(objectMap, "hyperVGeneration", s.HyperVGeneration)
@@ -11991,11 +12695,14 @@ func (s *SharedGalleryImageProperties) UnmarshalJSON(data []byte) error {
 		case "architecture":
 			err = unpopulate(val, "Architecture", &s.Architecture)
 			delete(rawMsg, key)
+		case "artifactTags":
+			err = unpopulate(val, "ArtifactTags", &s.ArtifactTags)
+			delete(rawMsg, key)
 		case "disallowed":
 			err = unpopulate(val, "Disallowed", &s.Disallowed)
 			delete(rawMsg, key)
 		case "endOfLifeDate":
-			err = unpopulateTimeRFC3339(val, "EndOfLifeDate", &s.EndOfLifeDate)
+			err = unpopulateDateTimeRFC3339(val, "EndOfLifeDate", &s.EndOfLifeDate)
 			delete(rawMsg, key)
 		case "eula":
 			err = unpopulate(val, "Eula", &s.Eula)
@@ -12105,9 +12812,10 @@ func (s *SharedGalleryImageVersionList) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type SharedGalleryImageVersionProperties.
 func (s SharedGalleryImageVersionProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "endOfLifeDate", s.EndOfLifeDate)
+	populate(objectMap, "artifactTags", s.ArtifactTags)
+	populateDateTimeRFC3339(objectMap, "endOfLifeDate", s.EndOfLifeDate)
 	populate(objectMap, "excludeFromLatest", s.ExcludeFromLatest)
-	populateTimeRFC3339(objectMap, "publishedDate", s.PublishedDate)
+	populateDateTimeRFC3339(objectMap, "publishedDate", s.PublishedDate)
 	populate(objectMap, "storageProfile", s.StorageProfile)
 	return json.Marshal(objectMap)
 }
@@ -12121,14 +12829,17 @@ func (s *SharedGalleryImageVersionProperties) UnmarshalJSON(data []byte) error {
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "artifactTags":
+			err = unpopulate(val, "ArtifactTags", &s.ArtifactTags)
+			delete(rawMsg, key)
 		case "endOfLifeDate":
-			err = unpopulateTimeRFC3339(val, "EndOfLifeDate", &s.EndOfLifeDate)
+			err = unpopulateDateTimeRFC3339(val, "EndOfLifeDate", &s.EndOfLifeDate)
 			delete(rawMsg, key)
 		case "excludeFromLatest":
 			err = unpopulate(val, "ExcludeFromLatest", &s.ExcludeFromLatest)
 			delete(rawMsg, key)
 		case "publishedDate":
-			err = unpopulateTimeRFC3339(val, "PublishedDate", &s.PublishedDate)
+			err = unpopulateDateTimeRFC3339(val, "PublishedDate", &s.PublishedDate)
 			delete(rawMsg, key)
 		case "storageProfile":
 			err = unpopulate(val, "StorageProfile", &s.StorageProfile)
@@ -12234,6 +12945,33 @@ func (s *SharedGalleryOSDiskImage) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type SharedGalleryProperties.
+func (s SharedGalleryProperties) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "artifactTags", s.ArtifactTags)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type SharedGalleryProperties.
+func (s *SharedGalleryProperties) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", s, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "artifactTags":
+			err = unpopulate(val, "ArtifactTags", &s.ArtifactTags)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", s, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type SharingProfile.
 func (s SharingProfile) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -12476,7 +13214,7 @@ func (s SnapshotProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "securityProfile", s.SecurityProfile)
 	populate(objectMap, "supportedCapabilities", s.SupportedCapabilities)
 	populate(objectMap, "supportsHibernation", s.SupportsHibernation)
-	populateTimeRFC3339(objectMap, "timeCreated", s.TimeCreated)
+	populateDateTimeRFC3339(objectMap, "timeCreated", s.TimeCreated)
 	populate(objectMap, "uniqueId", s.UniqueID)
 	return json.Marshal(objectMap)
 }
@@ -12554,7 +13292,7 @@ func (s *SnapshotProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "SupportsHibernation", &s.SupportsHibernation)
 			delete(rawMsg, key)
 		case "timeCreated":
-			err = unpopulateTimeRFC3339(val, "TimeCreated", &s.TimeCreated)
+			err = unpopulateDateTimeRFC3339(val, "TimeCreated", &s.TimeCreated)
 			delete(rawMsg, key)
 		case "uniqueId":
 			err = unpopulate(val, "UniqueID", &s.UniqueID)
@@ -12974,8 +13712,8 @@ func (s *SupportedCapabilities) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type SystemData.
 func (s SystemData) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "createdAt", s.CreatedAt)
-	populateTimeRFC3339(objectMap, "lastModifiedAt", s.LastModifiedAt)
+	populateDateTimeRFC3339(objectMap, "createdAt", s.CreatedAt)
+	populateDateTimeRFC3339(objectMap, "lastModifiedAt", s.LastModifiedAt)
 	return json.Marshal(objectMap)
 }
 
@@ -12989,10 +13727,10 @@ func (s *SystemData) UnmarshalJSON(data []byte) error {
 		var err error
 		switch key {
 		case "createdAt":
-			err = unpopulateTimeRFC3339(val, "CreatedAt", &s.CreatedAt)
+			err = unpopulateDateTimeRFC3339(val, "CreatedAt", &s.CreatedAt)
 			delete(rawMsg, key)
 		case "lastModifiedAt":
-			err = unpopulateTimeRFC3339(val, "LastModifiedAt", &s.LastModifiedAt)
+			err = unpopulateDateTimeRFC3339(val, "LastModifiedAt", &s.LastModifiedAt)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -13080,13 +13818,13 @@ func (t *TerminateNotificationProfile) UnmarshalJSON(data []byte) error {
 func (t ThrottledRequestsInput) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "blobContainerSasUri", t.BlobContainerSasURI)
-	populateTimeRFC3339(objectMap, "fromTime", t.FromTime)
+	populateDateTimeRFC3339(objectMap, "fromTime", t.FromTime)
 	populate(objectMap, "groupByClientApplicationId", t.GroupByClientApplicationID)
 	populate(objectMap, "groupByOperationName", t.GroupByOperationName)
 	populate(objectMap, "groupByResourceName", t.GroupByResourceName)
 	populate(objectMap, "groupByThrottlePolicy", t.GroupByThrottlePolicy)
 	populate(objectMap, "groupByUserAgent", t.GroupByUserAgent)
-	populateTimeRFC3339(objectMap, "toTime", t.ToTime)
+	populateDateTimeRFC3339(objectMap, "toTime", t.ToTime)
 	return json.Marshal(objectMap)
 }
 
@@ -13103,7 +13841,7 @@ func (t *ThrottledRequestsInput) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "BlobContainerSasURI", &t.BlobContainerSasURI)
 			delete(rawMsg, key)
 		case "fromTime":
-			err = unpopulateTimeRFC3339(val, "FromTime", &t.FromTime)
+			err = unpopulateDateTimeRFC3339(val, "FromTime", &t.FromTime)
 			delete(rawMsg, key)
 		case "groupByClientApplicationId":
 			err = unpopulate(val, "GroupByClientApplicationID", &t.GroupByClientApplicationID)
@@ -13121,7 +13859,7 @@ func (t *ThrottledRequestsInput) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "GroupByUserAgent", &t.GroupByUserAgent)
 			delete(rawMsg, key)
 		case "toTime":
-			err = unpopulateTimeRFC3339(val, "ToTime", &t.ToTime)
+			err = unpopulateDateTimeRFC3339(val, "ToTime", &t.ToTime)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -13131,6 +13869,76 @@ func (t *ThrottledRequestsInput) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type UefiKey.
+func (u UefiKey) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "type", u.Type)
+	populate(objectMap, "value", u.Value)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type UefiKey.
+func (u *UefiKey) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", u, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "type":
+			err = unpopulate(val, "Type", &u.Type)
+			delete(rawMsg, key)
+		case "value":
+			err = unpopulate(val, "Value", &u.Value)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", u, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type UefiKeySignatures.
+func (u UefiKeySignatures) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "db", u.Db)
+	populate(objectMap, "dbx", u.Dbx)
+	populate(objectMap, "kek", u.Kek)
+	populate(objectMap, "pk", u.Pk)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type UefiKeySignatures.
+func (u *UefiKeySignatures) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", u, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "db":
+			err = unpopulate(val, "Db", &u.Db)
+			delete(rawMsg, key)
+		case "dbx":
+			err = unpopulate(val, "Dbx", &u.Dbx)
+			delete(rawMsg, key)
+		case "kek":
+			err = unpopulate(val, "Kek", &u.Kek)
+			delete(rawMsg, key)
+		case "pk":
+			err = unpopulate(val, "Pk", &u.Pk)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", u, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type UefiSettings.
 func (u UefiSettings) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -13376,8 +14184,8 @@ func (u *UpgradeOperationHistoricalStatusInfoProperties) UnmarshalJSON(data []by
 func (u UpgradeOperationHistoryStatus) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "code", u.Code)
-	populateTimeRFC3339(objectMap, "endTime", u.EndTime)
-	populateTimeRFC3339(objectMap, "startTime", u.StartTime)
+	populateDateTimeRFC3339(objectMap, "endTime", u.EndTime)
+	populateDateTimeRFC3339(objectMap, "startTime", u.StartTime)
 	return json.Marshal(objectMap)
 }
 
@@ -13394,10 +14202,10 @@ func (u *UpgradeOperationHistoryStatus) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "Code", &u.Code)
 			delete(rawMsg, key)
 		case "endTime":
-			err = unpopulateTimeRFC3339(val, "EndTime", &u.EndTime)
+			err = unpopulateDateTimeRFC3339(val, "EndTime", &u.EndTime)
 			delete(rawMsg, key)
 		case "startTime":
-			err = unpopulateTimeRFC3339(val, "StartTime", &u.StartTime)
+			err = unpopulateDateTimeRFC3339(val, "StartTime", &u.StartTime)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -13899,10 +14707,12 @@ func (v *VirtualHardDisk) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type VirtualMachine.
 func (v VirtualMachine) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
+	populate(objectMap, "etag", v.Etag)
 	populate(objectMap, "extendedLocation", v.ExtendedLocation)
 	populate(objectMap, "id", v.ID)
 	populate(objectMap, "identity", v.Identity)
 	populate(objectMap, "location", v.Location)
+	populate(objectMap, "managedBy", v.ManagedBy)
 	populate(objectMap, "name", v.Name)
 	populate(objectMap, "plan", v.Plan)
 	populate(objectMap, "properties", v.Properties)
@@ -13922,6 +14732,9 @@ func (v *VirtualMachine) UnmarshalJSON(data []byte) error {
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "etag":
+			err = unpopulate(val, "Etag", &v.Etag)
+			delete(rawMsg, key)
 		case "extendedLocation":
 			err = unpopulate(val, "ExtendedLocation", &v.ExtendedLocation)
 			delete(rawMsg, key)
@@ -13934,6 +14747,9 @@ func (v *VirtualMachine) UnmarshalJSON(data []byte) error {
 		case "location":
 			err = unpopulate(val, "Location", &v.Location)
 			delete(rawMsg, key)
+		case "managedBy":
+			err = unpopulate(val, "ManagedBy", &v.ManagedBy)
+			delete(rawMsg, key)
 		case "name":
 			err = unpopulate(val, "Name", &v.Name)
 			delete(rawMsg, key)
@@ -14007,7 +14823,7 @@ func (v VirtualMachineAssessPatchesResult) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "error", v.Error)
 	populate(objectMap, "otherPatchCount", v.OtherPatchCount)
 	populate(objectMap, "rebootPending", v.RebootPending)
-	populateTimeRFC3339(objectMap, "startDateTime", v.StartDateTime)
+	populateDateTimeRFC3339(objectMap, "startDateTime", v.StartDateTime)
 	populate(objectMap, "status", v.Status)
 	return json.Marshal(objectMap)
 }
@@ -14040,7 +14856,7 @@ func (v *VirtualMachineAssessPatchesResult) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "RebootPending", &v.RebootPending)
 			delete(rawMsg, key)
 		case "startDateTime":
-			err = unpopulateTimeRFC3339(val, "StartDateTime", &v.StartDateTime)
+			err = unpopulateDateTimeRFC3339(val, "StartDateTime", &v.StartDateTime)
 			delete(rawMsg, key)
 		case "status":
 			err = unpopulate(val, "Status", &v.Status)
@@ -14355,6 +15171,7 @@ func (v VirtualMachineExtensionProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "instanceView", v.InstanceView)
 	populateAny(objectMap, "protectedSettings", v.ProtectedSettings)
 	populate(objectMap, "protectedSettingsFromKeyVault", v.ProtectedSettingsFromKeyVault)
+	populate(objectMap, "provisionAfterExtensions", v.ProvisionAfterExtensions)
 	populate(objectMap, "provisioningState", v.ProvisioningState)
 	populate(objectMap, "publisher", v.Publisher)
 	populateAny(objectMap, "settings", v.Settings)
@@ -14391,6 +15208,9 @@ func (v *VirtualMachineExtensionProperties) UnmarshalJSON(data []byte) error {
 		case "protectedSettingsFromKeyVault":
 			err = unpopulate(val, "ProtectedSettingsFromKeyVault", &v.ProtectedSettingsFromKeyVault)
 			delete(rawMsg, key)
+		case "provisionAfterExtensions":
+			err = unpopulate(val, "ProvisionAfterExtensions", &v.ProvisionAfterExtensions)
+			delete(rawMsg, key)
 		case "provisioningState":
 			err = unpopulate(val, "ProvisioningState", &v.ProvisioningState)
 			delete(rawMsg, key)
@@ -14867,7 +15687,7 @@ func (v VirtualMachineInstallPatchesResult) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "patches", v.Patches)
 	populate(objectMap, "pendingPatchCount", v.PendingPatchCount)
 	populate(objectMap, "rebootStatus", v.RebootStatus)
-	populateTimeRFC3339(objectMap, "startDateTime", v.StartDateTime)
+	populateDateTimeRFC3339(objectMap, "startDateTime", v.StartDateTime)
 	populate(objectMap, "status", v.Status)
 	return json.Marshal(objectMap)
 }
@@ -14912,7 +15732,7 @@ func (v *VirtualMachineInstallPatchesResult) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "RebootStatus", &v.RebootStatus)
 			delete(rawMsg, key)
 		case "startDateTime":
-			err = unpopulateTimeRFC3339(val, "StartDateTime", &v.StartDateTime)
+			err = unpopulateDateTimeRFC3339(val, "StartDateTime", &v.StartDateTime)
 			delete(rawMsg, key)
 		case "status":
 			err = unpopulate(val, "Status", &v.Status)
@@ -14934,6 +15754,7 @@ func (v VirtualMachineInstanceView) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "disks", v.Disks)
 	populate(objectMap, "extensions", v.Extensions)
 	populate(objectMap, "hyperVGeneration", v.HyperVGeneration)
+	populate(objectMap, "isVMInStandbyPool", v.IsVMInStandbyPool)
 	populate(objectMap, "maintenanceRedeployStatus", v.MaintenanceRedeployStatus)
 	populate(objectMap, "osName", v.OSName)
 	populate(objectMap, "osVersion", v.OSVersion)
@@ -14974,6 +15795,9 @@ func (v *VirtualMachineInstanceView) UnmarshalJSON(data []byte) error {
 		case "hyperVGeneration":
 			err = unpopulate(val, "HyperVGeneration", &v.HyperVGeneration)
 			delete(rawMsg, key)
+		case "isVMInStandbyPool":
+			err = unpopulate(val, "IsVMInStandbyPool", &v.IsVMInStandbyPool)
+			delete(rawMsg, key)
 		case "maintenanceRedeployStatus":
 			err = unpopulate(val, "MaintenanceRedeployStatus", &v.MaintenanceRedeployStatus)
 			delete(rawMsg, key)
@@ -15077,6 +15901,8 @@ func (v *VirtualMachineNetworkInterfaceConfiguration) UnmarshalJSON(data []byte)
 // MarshalJSON implements the json.Marshaller interface for type VirtualMachineNetworkInterfaceConfigurationProperties.
 func (v VirtualMachineNetworkInterfaceConfigurationProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
+	populate(objectMap, "auxiliaryMode", v.AuxiliaryMode)
+	populate(objectMap, "auxiliarySku", v.AuxiliarySKU)
 	populate(objectMap, "dnsSettings", v.DNSSettings)
 	populate(objectMap, "deleteOption", v.DeleteOption)
 	populate(objectMap, "disableTcpStateTracking", v.DisableTCPStateTracking)
@@ -15099,6 +15925,12 @@ func (v *VirtualMachineNetworkInterfaceConfigurationProperties) UnmarshalJSON(da
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "auxiliaryMode":
+			err = unpopulate(val, "AuxiliaryMode", &v.AuxiliaryMode)
+			delete(rawMsg, key)
+		case "auxiliarySku":
+			err = unpopulate(val, "AuxiliarySKU", &v.AuxiliarySKU)
+			delete(rawMsg, key)
 		case "dnsSettings":
 			err = unpopulate(val, "DNSSettings", &v.DNSSettings)
 			delete(rawMsg, key)
@@ -15306,7 +16138,7 @@ func (v VirtualMachineProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "scheduledEventsProfile", v.ScheduledEventsProfile)
 	populate(objectMap, "securityProfile", v.SecurityProfile)
 	populate(objectMap, "storageProfile", v.StorageProfile)
-	populateTimeRFC3339(objectMap, "timeCreated", v.TimeCreated)
+	populateDateTimeRFC3339(objectMap, "timeCreated", v.TimeCreated)
 	populate(objectMap, "userData", v.UserData)
 	populate(objectMap, "vmId", v.VMID)
 	populate(objectMap, "virtualMachineScaleSet", v.VirtualMachineScaleSet)
@@ -15389,7 +16221,7 @@ func (v *VirtualMachineProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "StorageProfile", &v.StorageProfile)
 			delete(rawMsg, key)
 		case "timeCreated":
-			err = unpopulateTimeRFC3339(val, "TimeCreated", &v.TimeCreated)
+			err = unpopulateDateTimeRFC3339(val, "TimeCreated", &v.TimeCreated)
 			delete(rawMsg, key)
 		case "userData":
 			err = unpopulate(val, "UserData", &v.UserData)
@@ -15498,6 +16330,7 @@ func (v *VirtualMachinePublicIPAddressConfigurationProperties) UnmarshalJSON(dat
 func (v VirtualMachinePublicIPAddressDNSSettingsConfiguration) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "domainNameLabel", v.DomainNameLabel)
+	populate(objectMap, "domainNameLabelScope", v.DomainNameLabelScope)
 	return json.Marshal(objectMap)
 }
 
@@ -15513,6 +16346,9 @@ func (v *VirtualMachinePublicIPAddressDNSSettingsConfiguration) UnmarshalJSON(da
 		case "domainNameLabel":
 			err = unpopulate(val, "DomainNameLabel", &v.DomainNameLabel)
 			delete(rawMsg, key)
+		case "domainNameLabelScope":
+			err = unpopulate(val, "DomainNameLabelScope", &v.DomainNameLabelScope)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", v, err)
@@ -15606,13 +16442,13 @@ func (v *VirtualMachineRunCommand) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type VirtualMachineRunCommandInstanceView.
 func (v VirtualMachineRunCommandInstanceView) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "endTime", v.EndTime)
+	populateDateTimeRFC3339(objectMap, "endTime", v.EndTime)
 	populate(objectMap, "error", v.Error)
 	populate(objectMap, "executionMessage", v.ExecutionMessage)
 	populate(objectMap, "executionState", v.ExecutionState)
 	populate(objectMap, "exitCode", v.ExitCode)
 	populate(objectMap, "output", v.Output)
-	populateTimeRFC3339(objectMap, "startTime", v.StartTime)
+	populateDateTimeRFC3339(objectMap, "startTime", v.StartTime)
 	populate(objectMap, "statuses", v.Statuses)
 	return json.Marshal(objectMap)
 }
@@ -15627,7 +16463,7 @@ func (v *VirtualMachineRunCommandInstanceView) UnmarshalJSON(data []byte) error
 		var err error
 		switch key {
 		case "endTime":
-			err = unpopulateTimeRFC3339(val, "EndTime", &v.EndTime)
+			err = unpopulateDateTimeRFC3339(val, "EndTime", &v.EndTime)
 			delete(rawMsg, key)
 		case "error":
 			err = unpopulate(val, "Error", &v.Error)
@@ -15645,7 +16481,7 @@ func (v *VirtualMachineRunCommandInstanceView) UnmarshalJSON(data []byte) error
 			err = unpopulate(val, "Output", &v.Output)
 			delete(rawMsg, key)
 		case "startTime":
-			err = unpopulateTimeRFC3339(val, "StartTime", &v.StartTime)
+			err = unpopulateDateTimeRFC3339(val, "StartTime", &v.StartTime)
 			delete(rawMsg, key)
 		case "statuses":
 			err = unpopulate(val, "Statuses", &v.Statuses)
@@ -15662,8 +16498,10 @@ func (v *VirtualMachineRunCommandInstanceView) UnmarshalJSON(data []byte) error
 func (v VirtualMachineRunCommandProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "asyncExecution", v.AsyncExecution)
+	populate(objectMap, "errorBlobManagedIdentity", v.ErrorBlobManagedIdentity)
 	populate(objectMap, "errorBlobUri", v.ErrorBlobURI)
 	populate(objectMap, "instanceView", v.InstanceView)
+	populate(objectMap, "outputBlobManagedIdentity", v.OutputBlobManagedIdentity)
 	populate(objectMap, "outputBlobUri", v.OutputBlobURI)
 	populate(objectMap, "parameters", v.Parameters)
 	populate(objectMap, "protectedParameters", v.ProtectedParameters)
@@ -15672,6 +16510,7 @@ func (v VirtualMachineRunCommandProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "runAsUser", v.RunAsUser)
 	populate(objectMap, "source", v.Source)
 	populate(objectMap, "timeoutInSeconds", v.TimeoutInSeconds)
+	populate(objectMap, "treatFailureAsDeploymentFailure", v.TreatFailureAsDeploymentFailure)
 	return json.Marshal(objectMap)
 }
 
@@ -15687,12 +16526,18 @@ func (v *VirtualMachineRunCommandProperties) UnmarshalJSON(data []byte) error {
 		case "asyncExecution":
 			err = unpopulate(val, "AsyncExecution", &v.AsyncExecution)
 			delete(rawMsg, key)
+		case "errorBlobManagedIdentity":
+			err = unpopulate(val, "ErrorBlobManagedIdentity", &v.ErrorBlobManagedIdentity)
+			delete(rawMsg, key)
 		case "errorBlobUri":
 			err = unpopulate(val, "ErrorBlobURI", &v.ErrorBlobURI)
 			delete(rawMsg, key)
 		case "instanceView":
 			err = unpopulate(val, "InstanceView", &v.InstanceView)
 			delete(rawMsg, key)
+		case "outputBlobManagedIdentity":
+			err = unpopulate(val, "OutputBlobManagedIdentity", &v.OutputBlobManagedIdentity)
+			delete(rawMsg, key)
 		case "outputBlobUri":
 			err = unpopulate(val, "OutputBlobURI", &v.OutputBlobURI)
 			delete(rawMsg, key)
@@ -15717,6 +16562,9 @@ func (v *VirtualMachineRunCommandProperties) UnmarshalJSON(data []byte) error {
 		case "timeoutInSeconds":
 			err = unpopulate(val, "TimeoutInSeconds", &v.TimeoutInSeconds)
 			delete(rawMsg, key)
+		case "treatFailureAsDeploymentFailure":
+			err = unpopulate(val, "TreatFailureAsDeploymentFailure", &v.TreatFailureAsDeploymentFailure)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", v, err)
@@ -15731,6 +16579,7 @@ func (v VirtualMachineRunCommandScriptSource) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "commandId", v.CommandID)
 	populate(objectMap, "script", v.Script)
 	populate(objectMap, "scriptUri", v.ScriptURI)
+	populate(objectMap, "scriptUriManagedIdentity", v.ScriptURIManagedIdentity)
 	return json.Marshal(objectMap)
 }
 
@@ -15752,6 +16601,9 @@ func (v *VirtualMachineRunCommandScriptSource) UnmarshalJSON(data []byte) error
 		case "scriptUri":
 			err = unpopulate(val, "ScriptURI", &v.ScriptURI)
 			delete(rawMsg, key)
+		case "scriptUriManagedIdentity":
+			err = unpopulate(val, "ScriptURIManagedIdentity", &v.ScriptURIManagedIdentity)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", v, err)
@@ -15825,6 +16677,7 @@ func (v *VirtualMachineRunCommandsListResult) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type VirtualMachineScaleSet.
 func (v VirtualMachineScaleSet) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
+	populate(objectMap, "etag", v.Etag)
 	populate(objectMap, "extendedLocation", v.ExtendedLocation)
 	populate(objectMap, "id", v.ID)
 	populate(objectMap, "identity", v.Identity)
@@ -15848,6 +16701,9 @@ func (v *VirtualMachineScaleSet) UnmarshalJSON(data []byte) error {
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "etag":
+			err = unpopulate(val, "Etag", &v.Etag)
+			delete(rawMsg, key)
 		case "extendedLocation":
 			err = unpopulate(val, "ExtendedLocation", &v.ExtendedLocation)
 			delete(rawMsg, key)
@@ -16193,7 +17049,6 @@ func (v *VirtualMachineScaleSetHardwareProfile) UnmarshalJSON(data []byte) error
 // MarshalJSON implements the json.Marshaller interface for type VirtualMachineScaleSetIPConfiguration.
 func (v VirtualMachineScaleSetIPConfiguration) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populate(objectMap, "id", v.ID)
 	populate(objectMap, "name", v.Name)
 	populate(objectMap, "properties", v.Properties)
 	return json.Marshal(objectMap)
@@ -16208,9 +17063,6 @@ func (v *VirtualMachineScaleSetIPConfiguration) UnmarshalJSON(data []byte) error
 	for key, val := range rawMsg {
 		var err error
 		switch key {
-		case "id":
-			err = unpopulate(val, "ID", &v.ID)
-			delete(rawMsg, key)
 		case "name":
 			err = unpopulate(val, "Name", &v.Name)
 			delete(rawMsg, key)
@@ -16578,7 +17430,6 @@ func (v *VirtualMachineScaleSetManagedDiskParameters) UnmarshalJSON(data []byte)
 // MarshalJSON implements the json.Marshaller interface for type VirtualMachineScaleSetNetworkConfiguration.
 func (v VirtualMachineScaleSetNetworkConfiguration) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populate(objectMap, "id", v.ID)
 	populate(objectMap, "name", v.Name)
 	populate(objectMap, "properties", v.Properties)
 	return json.Marshal(objectMap)
@@ -16593,9 +17444,6 @@ func (v *VirtualMachineScaleSetNetworkConfiguration) UnmarshalJSON(data []byte)
 	for key, val := range rawMsg {
 		var err error
 		switch key {
-		case "id":
-			err = unpopulate(val, "ID", &v.ID)
-			delete(rawMsg, key)
 		case "name":
 			err = unpopulate(val, "Name", &v.Name)
 			delete(rawMsg, key)
@@ -16640,6 +17488,8 @@ func (v *VirtualMachineScaleSetNetworkConfigurationDNSSettings) UnmarshalJSON(da
 // MarshalJSON implements the json.Marshaller interface for type VirtualMachineScaleSetNetworkConfigurationProperties.
 func (v VirtualMachineScaleSetNetworkConfigurationProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
+	populate(objectMap, "auxiliaryMode", v.AuxiliaryMode)
+	populate(objectMap, "auxiliarySku", v.AuxiliarySKU)
 	populate(objectMap, "dnsSettings", v.DNSSettings)
 	populate(objectMap, "deleteOption", v.DeleteOption)
 	populate(objectMap, "disableTcpStateTracking", v.DisableTCPStateTracking)
@@ -16661,6 +17511,12 @@ func (v *VirtualMachineScaleSetNetworkConfigurationProperties) UnmarshalJSON(dat
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "auxiliaryMode":
+			err = unpopulate(val, "AuxiliaryMode", &v.AuxiliaryMode)
+			delete(rawMsg, key)
+		case "auxiliarySku":
+			err = unpopulate(val, "AuxiliarySKU", &v.AuxiliarySKU)
+			delete(rawMsg, key)
 		case "dnsSettings":
 			err = unpopulate(val, "DNSSettings", &v.DNSSettings)
 			delete(rawMsg, key)
@@ -16871,10 +17727,11 @@ func (v VirtualMachineScaleSetProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "priorityMixPolicy", v.PriorityMixPolicy)
 	populate(objectMap, "provisioningState", v.ProvisioningState)
 	populate(objectMap, "proximityPlacementGroup", v.ProximityPlacementGroup)
+	populate(objectMap, "resiliencyPolicy", v.ResiliencyPolicy)
 	populate(objectMap, "scaleInPolicy", v.ScaleInPolicy)
 	populate(objectMap, "singlePlacementGroup", v.SinglePlacementGroup)
 	populate(objectMap, "spotRestorePolicy", v.SpotRestorePolicy)
-	populateTimeRFC3339(objectMap, "timeCreated", v.TimeCreated)
+	populateDateTimeRFC3339(objectMap, "timeCreated", v.TimeCreated)
 	populate(objectMap, "uniqueId", v.UniqueID)
 	populate(objectMap, "upgradePolicy", v.UpgradePolicy)
 	populate(objectMap, "virtualMachineProfile", v.VirtualMachineProfile)
@@ -16924,6 +17781,9 @@ func (v *VirtualMachineScaleSetProperties) UnmarshalJSON(data []byte) error {
 		case "proximityPlacementGroup":
 			err = unpopulate(val, "ProximityPlacementGroup", &v.ProximityPlacementGroup)
 			delete(rawMsg, key)
+		case "resiliencyPolicy":
+			err = unpopulate(val, "ResiliencyPolicy", &v.ResiliencyPolicy)
+			delete(rawMsg, key)
 		case "scaleInPolicy":
 			err = unpopulate(val, "ScaleInPolicy", &v.ScaleInPolicy)
 			delete(rawMsg, key)
@@ -16934,7 +17794,7 @@ func (v *VirtualMachineScaleSetProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "SpotRestorePolicy", &v.SpotRestorePolicy)
 			delete(rawMsg, key)
 		case "timeCreated":
-			err = unpopulateTimeRFC3339(val, "TimeCreated", &v.TimeCreated)
+			err = unpopulateDateTimeRFC3339(val, "TimeCreated", &v.TimeCreated)
 			delete(rawMsg, key)
 		case "uniqueId":
 			err = unpopulate(val, "UniqueID", &v.UniqueID)
@@ -16995,6 +17855,7 @@ func (v *VirtualMachineScaleSetPublicIPAddressConfiguration) UnmarshalJSON(data
 func (v VirtualMachineScaleSetPublicIPAddressConfigurationDNSSettings) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "domainNameLabel", v.DomainNameLabel)
+	populate(objectMap, "domainNameLabelScope", v.DomainNameLabelScope)
 	return json.Marshal(objectMap)
 }
 
@@ -17010,6 +17871,9 @@ func (v *VirtualMachineScaleSetPublicIPAddressConfigurationDNSSettings) Unmarsha
 		case "domainNameLabel":
 			err = unpopulate(val, "DomainNameLabel", &v.DomainNameLabel)
 			delete(rawMsg, key)
+		case "domainNameLabelScope":
+			err = unpopulate(val, "DomainNameLabelScope", &v.DomainNameLabelScope)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", v, err)
@@ -17263,7 +18127,6 @@ func (v *VirtualMachineScaleSetUpdate) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type VirtualMachineScaleSetUpdateIPConfiguration.
 func (v VirtualMachineScaleSetUpdateIPConfiguration) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populate(objectMap, "id", v.ID)
 	populate(objectMap, "name", v.Name)
 	populate(objectMap, "properties", v.Properties)
 	return json.Marshal(objectMap)
@@ -17278,9 +18141,6 @@ func (v *VirtualMachineScaleSetUpdateIPConfiguration) UnmarshalJSON(data []byte)
 	for key, val := range rawMsg {
 		var err error
 		switch key {
-		case "id":
-			err = unpopulate(val, "ID", &v.ID)
-			delete(rawMsg, key)
 		case "name":
 			err = unpopulate(val, "Name", &v.Name)
 			delete(rawMsg, key)
@@ -17353,7 +18213,6 @@ func (v *VirtualMachineScaleSetUpdateIPConfigurationProperties) UnmarshalJSON(da
 // MarshalJSON implements the json.Marshaller interface for type VirtualMachineScaleSetUpdateNetworkConfiguration.
 func (v VirtualMachineScaleSetUpdateNetworkConfiguration) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populate(objectMap, "id", v.ID)
 	populate(objectMap, "name", v.Name)
 	populate(objectMap, "properties", v.Properties)
 	return json.Marshal(objectMap)
@@ -17368,9 +18227,6 @@ func (v *VirtualMachineScaleSetUpdateNetworkConfiguration) UnmarshalJSON(data []
 	for key, val := range rawMsg {
 		var err error
 		switch key {
-		case "id":
-			err = unpopulate(val, "ID", &v.ID)
-			delete(rawMsg, key)
 		case "name":
 			err = unpopulate(val, "Name", &v.Name)
 			delete(rawMsg, key)
@@ -17388,6 +18244,8 @@ func (v *VirtualMachineScaleSetUpdateNetworkConfiguration) UnmarshalJSON(data []
 // MarshalJSON implements the json.Marshaller interface for type VirtualMachineScaleSetUpdateNetworkConfigurationProperties.
 func (v VirtualMachineScaleSetUpdateNetworkConfigurationProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
+	populate(objectMap, "auxiliaryMode", v.AuxiliaryMode)
+	populate(objectMap, "auxiliarySku", v.AuxiliarySKU)
 	populate(objectMap, "dnsSettings", v.DNSSettings)
 	populate(objectMap, "deleteOption", v.DeleteOption)
 	populate(objectMap, "disableTcpStateTracking", v.DisableTCPStateTracking)
@@ -17409,6 +18267,12 @@ func (v *VirtualMachineScaleSetUpdateNetworkConfigurationProperties) UnmarshalJS
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "auxiliaryMode":
+			err = unpopulate(val, "AuxiliaryMode", &v.AuxiliaryMode)
+			delete(rawMsg, key)
+		case "auxiliarySku":
+			err = unpopulate(val, "AuxiliarySKU", &v.AuxiliarySKU)
+			delete(rawMsg, key)
 		case "dnsSettings":
 			err = unpopulate(val, "DNSSettings", &v.DNSSettings)
 			delete(rawMsg, key)
@@ -17576,9 +18440,12 @@ func (v VirtualMachineScaleSetUpdateProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "automaticRepairsPolicy", v.AutomaticRepairsPolicy)
 	populate(objectMap, "doNotRunExtensionsOnOverprovisionedVMs", v.DoNotRunExtensionsOnOverprovisionedVMs)
 	populate(objectMap, "overprovision", v.Overprovision)
+	populate(objectMap, "priorityMixPolicy", v.PriorityMixPolicy)
 	populate(objectMap, "proximityPlacementGroup", v.ProximityPlacementGroup)
+	populate(objectMap, "resiliencyPolicy", v.ResiliencyPolicy)
 	populate(objectMap, "scaleInPolicy", v.ScaleInPolicy)
 	populate(objectMap, "singlePlacementGroup", v.SinglePlacementGroup)
+	populate(objectMap, "spotRestorePolicy", v.SpotRestorePolicy)
 	populate(objectMap, "upgradePolicy", v.UpgradePolicy)
 	populate(objectMap, "virtualMachineProfile", v.VirtualMachineProfile)
 	return json.Marshal(objectMap)
@@ -17605,15 +18472,24 @@ func (v *VirtualMachineScaleSetUpdateProperties) UnmarshalJSON(data []byte) erro
 		case "overprovision":
 			err = unpopulate(val, "Overprovision", &v.Overprovision)
 			delete(rawMsg, key)
+		case "priorityMixPolicy":
+			err = unpopulate(val, "PriorityMixPolicy", &v.PriorityMixPolicy)
+			delete(rawMsg, key)
 		case "proximityPlacementGroup":
 			err = unpopulate(val, "ProximityPlacementGroup", &v.ProximityPlacementGroup)
 			delete(rawMsg, key)
+		case "resiliencyPolicy":
+			err = unpopulate(val, "ResiliencyPolicy", &v.ResiliencyPolicy)
+			delete(rawMsg, key)
 		case "scaleInPolicy":
 			err = unpopulate(val, "ScaleInPolicy", &v.ScaleInPolicy)
 			delete(rawMsg, key)
 		case "singlePlacementGroup":
 			err = unpopulate(val, "SinglePlacementGroup", &v.SinglePlacementGroup)
 			delete(rawMsg, key)
+		case "spotRestorePolicy":
+			err = unpopulate(val, "SpotRestorePolicy", &v.SpotRestorePolicy)
+			delete(rawMsg, key)
 		case "upgradePolicy":
 			err = unpopulate(val, "UpgradePolicy", &v.UpgradePolicy)
 			delete(rawMsg, key)
@@ -17807,6 +18683,7 @@ func (v *VirtualMachineScaleSetUpdateVMProfile) UnmarshalJSON(data []byte) error
 // MarshalJSON implements the json.Marshaller interface for type VirtualMachineScaleSetVM.
 func (v VirtualMachineScaleSetVM) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
+	populate(objectMap, "etag", v.Etag)
 	populate(objectMap, "id", v.ID)
 	populate(objectMap, "identity", v.Identity)
 	populate(objectMap, "instanceId", v.InstanceID)
@@ -17831,6 +18708,9 @@ func (v *VirtualMachineScaleSetVM) UnmarshalJSON(data []byte) error {
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "etag":
+			err = unpopulate(val, "Etag", &v.Etag)
+			delete(rawMsg, key)
 		case "id":
 			err = unpopulate(val, "ID", &v.ID)
 			delete(rawMsg, key)
@@ -17879,6 +18759,7 @@ func (v *VirtualMachineScaleSetVM) UnmarshalJSON(data []byte) error {
 func (v VirtualMachineScaleSetVMExtension) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "id", v.ID)
+	populate(objectMap, "location", v.Location)
 	populate(objectMap, "name", v.Name)
 	populate(objectMap, "properties", v.Properties)
 	populate(objectMap, "type", v.Type)
@@ -17897,6 +18778,9 @@ func (v *VirtualMachineScaleSetVMExtension) UnmarshalJSON(data []byte) error {
 		case "id":
 			err = unpopulate(val, "ID", &v.ID)
 			delete(rawMsg, key)
+		case "location":
+			err = unpopulate(val, "Location", &v.Location)
+			delete(rawMsg, key)
 		case "name":
 			err = unpopulate(val, "Name", &v.Name)
 			delete(rawMsg, key)
@@ -18225,9 +19109,11 @@ func (v VirtualMachineScaleSetVMProfile) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "osProfile", v.OSProfile)
 	populate(objectMap, "priority", v.Priority)
 	populate(objectMap, "scheduledEventsProfile", v.ScheduledEventsProfile)
+	populate(objectMap, "securityPostureReference", v.SecurityPostureReference)
 	populate(objectMap, "securityProfile", v.SecurityProfile)
 	populate(objectMap, "serviceArtifactReference", v.ServiceArtifactReference)
 	populate(objectMap, "storageProfile", v.StorageProfile)
+	populateDateTimeRFC3339(objectMap, "timeCreated", v.TimeCreated)
 	populate(objectMap, "userData", v.UserData)
 	return json.Marshal(objectMap)
 }
@@ -18277,6 +19163,9 @@ func (v *VirtualMachineScaleSetVMProfile) UnmarshalJSON(data []byte) error {
 		case "scheduledEventsProfile":
 			err = unpopulate(val, "ScheduledEventsProfile", &v.ScheduledEventsProfile)
 			delete(rawMsg, key)
+		case "securityPostureReference":
+			err = unpopulate(val, "SecurityPostureReference", &v.SecurityPostureReference)
+			delete(rawMsg, key)
 		case "securityProfile":
 			err = unpopulate(val, "SecurityProfile", &v.SecurityProfile)
 			delete(rawMsg, key)
@@ -18286,6 +19175,9 @@ func (v *VirtualMachineScaleSetVMProfile) UnmarshalJSON(data []byte) error {
 		case "storageProfile":
 			err = unpopulate(val, "StorageProfile", &v.StorageProfile)
 			delete(rawMsg, key)
+		case "timeCreated":
+			err = unpopulateDateTimeRFC3339(val, "TimeCreated", &v.TimeCreated)
+			delete(rawMsg, key)
 		case "userData":
 			err = unpopulate(val, "UserData", &v.UserData)
 			delete(rawMsg, key)
@@ -18315,6 +19207,7 @@ func (v VirtualMachineScaleSetVMProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "provisioningState", v.ProvisioningState)
 	populate(objectMap, "securityProfile", v.SecurityProfile)
 	populate(objectMap, "storageProfile", v.StorageProfile)
+	populateDateTimeRFC3339(objectMap, "timeCreated", v.TimeCreated)
 	populate(objectMap, "userData", v.UserData)
 	populate(objectMap, "vmId", v.VMID)
 	return json.Marshal(objectMap)
@@ -18374,6 +19267,9 @@ func (v *VirtualMachineScaleSetVMProperties) UnmarshalJSON(data []byte) error {
 		case "storageProfile":
 			err = unpopulate(val, "StorageProfile", &v.StorageProfile)
 			delete(rawMsg, key)
+		case "timeCreated":
+			err = unpopulateDateTimeRFC3339(val, "TimeCreated", &v.TimeCreated)
+			delete(rawMsg, key)
 		case "userData":
 			err = unpopulate(val, "UserData", &v.UserData)
 			delete(rawMsg, key)
@@ -18535,10 +19431,10 @@ func (v VirtualMachineSoftwarePatchProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "assessmentState", v.AssessmentState)
 	populate(objectMap, "classifications", v.Classifications)
 	populate(objectMap, "kbId", v.KbID)
-	populateTimeRFC3339(objectMap, "lastModifiedDateTime", v.LastModifiedDateTime)
+	populateDateTimeRFC3339(objectMap, "lastModifiedDateTime", v.LastModifiedDateTime)
 	populate(objectMap, "name", v.Name)
 	populate(objectMap, "patchId", v.PatchID)
-	populateTimeRFC3339(objectMap, "publishedDate", v.PublishedDate)
+	populateDateTimeRFC3339(objectMap, "publishedDate", v.PublishedDate)
 	populate(objectMap, "rebootBehavior", v.RebootBehavior)
 	populate(objectMap, "version", v.Version)
 	return json.Marshal(objectMap)
@@ -18566,7 +19462,7 @@ func (v *VirtualMachineSoftwarePatchProperties) UnmarshalJSON(data []byte) error
 			err = unpopulate(val, "KbID", &v.KbID)
 			delete(rawMsg, key)
 		case "lastModifiedDateTime":
-			err = unpopulateTimeRFC3339(val, "LastModifiedDateTime", &v.LastModifiedDateTime)
+			err = unpopulateDateTimeRFC3339(val, "LastModifiedDateTime", &v.LastModifiedDateTime)
 			delete(rawMsg, key)
 		case "name":
 			err = unpopulate(val, "Name", &v.Name)
@@ -18575,7 +19471,7 @@ func (v *VirtualMachineSoftwarePatchProperties) UnmarshalJSON(data []byte) error
 			err = unpopulate(val, "PatchID", &v.PatchID)
 			delete(rawMsg, key)
 		case "publishedDate":
-			err = unpopulateTimeRFC3339(val, "PublishedDate", &v.PublishedDate)
+			err = unpopulateDateTimeRFC3339(val, "PublishedDate", &v.PublishedDate)
 			delete(rawMsg, key)
 		case "rebootBehavior":
 			err = unpopulate(val, "RebootBehavior", &v.RebootBehavior)
@@ -18781,7 +19677,7 @@ func (w WindowsParameters) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "excludeKbsRequiringReboot", w.ExcludeKbsRequiringReboot)
 	populate(objectMap, "kbNumbersToExclude", w.KbNumbersToExclude)
 	populate(objectMap, "kbNumbersToInclude", w.KbNumbersToInclude)
-	populateTimeRFC3339(objectMap, "maxPatchPublishDate", w.MaxPatchPublishDate)
+	populateDateTimeRFC3339(objectMap, "maxPatchPublishDate", w.MaxPatchPublishDate)
 	return json.Marshal(objectMap)
 }
 
@@ -18807,7 +19703,7 @@ func (w *WindowsParameters) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "KbNumbersToInclude", &w.KbNumbersToInclude)
 			delete(rawMsg, key)
 		case "maxPatchPublishDate":
-			err = unpopulateTimeRFC3339(val, "MaxPatchPublishDate", &w.MaxPatchPublishDate)
+			err = unpopulateDateTimeRFC3339(val, "MaxPatchPublishDate", &w.MaxPatchPublishDate)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -18820,6 +19716,7 @@ func (w *WindowsParameters) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type WindowsVMGuestPatchAutomaticByPlatformSettings.
 func (w WindowsVMGuestPatchAutomaticByPlatformSettings) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
+	populate(objectMap, "bypassPlatformSafetyChecksOnUserSchedule", w.BypassPlatformSafetyChecksOnUserSchedule)
 	populate(objectMap, "rebootSetting", w.RebootSetting)
 	return json.Marshal(objectMap)
 }
@@ -18833,6 +19730,9 @@ func (w *WindowsVMGuestPatchAutomaticByPlatformSettings) UnmarshalJSON(data []by
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "bypassPlatformSafetyChecksOnUserSchedule":
+			err = unpopulate(val, "BypassPlatformSafetyChecksOnUserSchedule", &w.BypassPlatformSafetyChecksOnUserSchedule)
+			delete(rawMsg, key)
 		case "rebootSetting":
 			err = unpopulate(val, "RebootSetting", &w.RebootSetting)
 			delete(rawMsg, key)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/operations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/operations_client.go
similarity index 89%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/operations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/operations_client.go
index 04db3e70ec8..f7fded74ad6 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/operations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/operations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -28,7 +27,7 @@ type OperationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewOperationsClient(credential azcore.TokenCredential, options *arm.ClientOptions) (*OperationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".OperationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -40,7 +39,7 @@ func NewOperationsClient(credential azcore.TokenCredential, options *arm.ClientO
 
 // NewListPager - Gets a list of compute operations.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - options - OperationsClientListOptions contains the optional parameters for the OperationsClient.NewListPager method.
 func (client *OperationsClient) NewListPager(options *OperationsClientListOptions) *runtime.Pager[OperationsClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[OperationsClientListResponse]{
@@ -48,6 +47,7 @@ func (client *OperationsClient) NewListPager(options *OperationsClientListOption
 			return false
 		},
 		Fetcher: func(ctx context.Context, page *OperationsClientListResponse) (OperationsClientListResponse, error) {
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "OperationsClient.NewListPager")
 			req, err := client.listCreateRequest(ctx, options)
 			if err != nil {
 				return OperationsClientListResponse{}, err
@@ -61,6 +61,7 @@ func (client *OperationsClient) NewListPager(options *OperationsClientListOption
 			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -72,7 +73,7 @@ func (client *OperationsClient) listCreateRequest(ctx context.Context, options *
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/options.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/options.go
new file mode 100644
index 00000000000..0c363663aaf
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/options.go
@@ -0,0 +1,1979 @@
+//go:build go1.18
+// +build go1.18
+
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License. See License.txt in the project root for license information.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
+// Changes may cause incorrect behavior and will be lost if the code is regenerated.
+
+package armcompute
+
+// AvailabilitySetsClientCreateOrUpdateOptions contains the optional parameters for the AvailabilitySetsClient.CreateOrUpdate
+// method.
+type AvailabilitySetsClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailabilitySetsClientDeleteOptions contains the optional parameters for the AvailabilitySetsClient.Delete method.
+type AvailabilitySetsClientDeleteOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailabilitySetsClientGetOptions contains the optional parameters for the AvailabilitySetsClient.Get method.
+type AvailabilitySetsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailabilitySetsClientListAvailableSizesOptions contains the optional parameters for the AvailabilitySetsClient.NewListAvailableSizesPager
+// method.
+type AvailabilitySetsClientListAvailableSizesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailabilitySetsClientListBySubscriptionOptions contains the optional parameters for the AvailabilitySetsClient.NewListBySubscriptionPager
+// method.
+type AvailabilitySetsClientListBySubscriptionOptions struct {
+	// The expand expression to apply to the operation. Allowed values are 'instanceView'.
+	Expand *string
+}
+
+// AvailabilitySetsClientListOptions contains the optional parameters for the AvailabilitySetsClient.NewListPager method.
+type AvailabilitySetsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailabilitySetsClientUpdateOptions contains the optional parameters for the AvailabilitySetsClient.Update method.
+type AvailabilitySetsClientUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CapacityReservationGroupsClientCreateOrUpdateOptions contains the optional parameters for the CapacityReservationGroupsClient.CreateOrUpdate
+// method.
+type CapacityReservationGroupsClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CapacityReservationGroupsClientDeleteOptions contains the optional parameters for the CapacityReservationGroupsClient.Delete
+// method.
+type CapacityReservationGroupsClientDeleteOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CapacityReservationGroupsClientGetOptions contains the optional parameters for the CapacityReservationGroupsClient.Get
+// method.
+type CapacityReservationGroupsClientGetOptions struct {
+	// The expand expression to apply on the operation. 'InstanceView' will retrieve the list of instance views of the capacity
+	// reservations under the capacity reservation group which is a snapshot of the
+	// runtime properties of a capacity reservation that is managed by the platform and can change outside of control plane operations.
+	Expand *CapacityReservationGroupInstanceViewTypes
+}
+
+// CapacityReservationGroupsClientListByResourceGroupOptions contains the optional parameters for the CapacityReservationGroupsClient.NewListByResourceGroupPager
+// method.
+type CapacityReservationGroupsClientListByResourceGroupOptions struct {
+	// The expand expression to apply on the operation. Based on the expand param(s) specified we return Virtual Machine or ScaleSet
+	// VM Instance or both resource Ids which are associated to capacity
+	// reservation group in the response.
+	Expand *ExpandTypesForGetCapacityReservationGroups
+}
+
+// CapacityReservationGroupsClientListBySubscriptionOptions contains the optional parameters for the CapacityReservationGroupsClient.NewListBySubscriptionPager
+// method.
+type CapacityReservationGroupsClientListBySubscriptionOptions struct {
+	// The expand expression to apply on the operation. Based on the expand param(s) specified we return Virtual Machine or ScaleSet
+	// VM Instance or both resource Ids which are associated to capacity
+	// reservation group in the response.
+	Expand *ExpandTypesForGetCapacityReservationGroups
+}
+
+// CapacityReservationGroupsClientUpdateOptions contains the optional parameters for the CapacityReservationGroupsClient.Update
+// method.
+type CapacityReservationGroupsClientUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CapacityReservationsClientBeginCreateOrUpdateOptions contains the optional parameters for the CapacityReservationsClient.BeginCreateOrUpdate
+// method.
+type CapacityReservationsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CapacityReservationsClientBeginDeleteOptions contains the optional parameters for the CapacityReservationsClient.BeginDelete
+// method.
+type CapacityReservationsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CapacityReservationsClientBeginUpdateOptions contains the optional parameters for the CapacityReservationsClient.BeginUpdate
+// method.
+type CapacityReservationsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CapacityReservationsClientGetOptions contains the optional parameters for the CapacityReservationsClient.Get method.
+type CapacityReservationsClientGetOptions struct {
+	// The expand expression to apply on the operation. 'InstanceView' retrieves a snapshot of the runtime properties of the capacity
+	// reservation that is managed by the platform and can change outside of
+	// control plane operations.
+	Expand *CapacityReservationInstanceViewTypes
+}
+
+// CapacityReservationsClientListByCapacityReservationGroupOptions contains the optional parameters for the CapacityReservationsClient.NewListByCapacityReservationGroupPager
+// method.
+type CapacityReservationsClientListByCapacityReservationGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServiceOperatingSystemsClientGetOSFamilyOptions contains the optional parameters for the CloudServiceOperatingSystemsClient.GetOSFamily
+// method.
+type CloudServiceOperatingSystemsClientGetOSFamilyOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServiceOperatingSystemsClientGetOSVersionOptions contains the optional parameters for the CloudServiceOperatingSystemsClient.GetOSVersion
+// method.
+type CloudServiceOperatingSystemsClientGetOSVersionOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServiceOperatingSystemsClientListOSFamiliesOptions contains the optional parameters for the CloudServiceOperatingSystemsClient.NewListOSFamiliesPager
+// method.
+type CloudServiceOperatingSystemsClientListOSFamiliesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServiceOperatingSystemsClientListOSVersionsOptions contains the optional parameters for the CloudServiceOperatingSystemsClient.NewListOSVersionsPager
+// method.
+type CloudServiceOperatingSystemsClientListOSVersionsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServiceRoleInstancesClientBeginDeleteOptions contains the optional parameters for the CloudServiceRoleInstancesClient.BeginDelete
+// method.
+type CloudServiceRoleInstancesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServiceRoleInstancesClientBeginRebuildOptions contains the optional parameters for the CloudServiceRoleInstancesClient.BeginRebuild
+// method.
+type CloudServiceRoleInstancesClientBeginRebuildOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServiceRoleInstancesClientBeginReimageOptions contains the optional parameters for the CloudServiceRoleInstancesClient.BeginReimage
+// method.
+type CloudServiceRoleInstancesClientBeginReimageOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServiceRoleInstancesClientBeginRestartOptions contains the optional parameters for the CloudServiceRoleInstancesClient.BeginRestart
+// method.
+type CloudServiceRoleInstancesClientBeginRestartOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServiceRoleInstancesClientGetInstanceViewOptions contains the optional parameters for the CloudServiceRoleInstancesClient.GetInstanceView
+// method.
+type CloudServiceRoleInstancesClientGetInstanceViewOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServiceRoleInstancesClientGetOptions contains the optional parameters for the CloudServiceRoleInstancesClient.Get
+// method.
+type CloudServiceRoleInstancesClientGetOptions struct {
+	// The expand expression to apply to the operation. 'UserData' is not supported for cloud services.
+	Expand *InstanceViewTypes
+}
+
+// CloudServiceRoleInstancesClientGetRemoteDesktopFileOptions contains the optional parameters for the CloudServiceRoleInstancesClient.GetRemoteDesktopFile
+// method.
+type CloudServiceRoleInstancesClientGetRemoteDesktopFileOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServiceRoleInstancesClientListOptions contains the optional parameters for the CloudServiceRoleInstancesClient.NewListPager
+// method.
+type CloudServiceRoleInstancesClientListOptions struct {
+	// The expand expression to apply to the operation. 'UserData' is not supported for cloud services.
+	Expand *InstanceViewTypes
+}
+
+// CloudServiceRolesClientGetOptions contains the optional parameters for the CloudServiceRolesClient.Get method.
+type CloudServiceRolesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServiceRolesClientListOptions contains the optional parameters for the CloudServiceRolesClient.NewListPager method.
+type CloudServiceRolesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServicesClientBeginCreateOrUpdateOptions contains the optional parameters for the CloudServicesClient.BeginCreateOrUpdate
+// method.
+type CloudServicesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServicesClientBeginDeleteInstancesOptions contains the optional parameters for the CloudServicesClient.BeginDeleteInstances
+// method.
+type CloudServicesClientBeginDeleteInstancesOptions struct {
+	// List of cloud service role instance names.
+	Parameters *RoleInstances
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServicesClientBeginDeleteOptions contains the optional parameters for the CloudServicesClient.BeginDelete method.
+type CloudServicesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServicesClientBeginPowerOffOptions contains the optional parameters for the CloudServicesClient.BeginPowerOff method.
+type CloudServicesClientBeginPowerOffOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServicesClientBeginRebuildOptions contains the optional parameters for the CloudServicesClient.BeginRebuild method.
+type CloudServicesClientBeginRebuildOptions struct {
+	// List of cloud service role instance names.
+	Parameters *RoleInstances
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServicesClientBeginReimageOptions contains the optional parameters for the CloudServicesClient.BeginReimage method.
+type CloudServicesClientBeginReimageOptions struct {
+	// List of cloud service role instance names.
+	Parameters *RoleInstances
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServicesClientBeginRestartOptions contains the optional parameters for the CloudServicesClient.BeginRestart method.
+type CloudServicesClientBeginRestartOptions struct {
+	// List of cloud service role instance names.
+	Parameters *RoleInstances
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServicesClientBeginStartOptions contains the optional parameters for the CloudServicesClient.BeginStart method.
+type CloudServicesClientBeginStartOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServicesClientBeginUpdateOptions contains the optional parameters for the CloudServicesClient.BeginUpdate method.
+type CloudServicesClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServicesClientGetInstanceViewOptions contains the optional parameters for the CloudServicesClient.GetInstanceView
+// method.
+type CloudServicesClientGetInstanceViewOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServicesClientGetOptions contains the optional parameters for the CloudServicesClient.Get method.
+type CloudServicesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServicesClientListAllOptions contains the optional parameters for the CloudServicesClient.NewListAllPager method.
+type CloudServicesClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServicesClientListOptions contains the optional parameters for the CloudServicesClient.NewListPager method.
+type CloudServicesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServicesUpdateDomainClientBeginWalkUpdateDomainOptions contains the optional parameters for the CloudServicesUpdateDomainClient.BeginWalkUpdateDomain
+// method.
+type CloudServicesUpdateDomainClientBeginWalkUpdateDomainOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CloudServicesUpdateDomainClientGetUpdateDomainOptions contains the optional parameters for the CloudServicesUpdateDomainClient.GetUpdateDomain
+// method.
+type CloudServicesUpdateDomainClientGetUpdateDomainOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CloudServicesUpdateDomainClientListUpdateDomainsOptions contains the optional parameters for the CloudServicesUpdateDomainClient.NewListUpdateDomainsPager
+// method.
+type CloudServicesUpdateDomainClientListUpdateDomainsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CommunityGalleriesClientGetOptions contains the optional parameters for the CommunityGalleriesClient.Get method.
+type CommunityGalleriesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CommunityGalleryImageVersionsClientGetOptions contains the optional parameters for the CommunityGalleryImageVersionsClient.Get
+// method.
+type CommunityGalleryImageVersionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CommunityGalleryImageVersionsClientListOptions contains the optional parameters for the CommunityGalleryImageVersionsClient.NewListPager
+// method.
+type CommunityGalleryImageVersionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CommunityGalleryImagesClientGetOptions contains the optional parameters for the CommunityGalleryImagesClient.Get method.
+type CommunityGalleryImagesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CommunityGalleryImagesClientListOptions contains the optional parameters for the CommunityGalleryImagesClient.NewListPager
+// method.
+type CommunityGalleryImagesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DedicatedHostGroupsClientCreateOrUpdateOptions contains the optional parameters for the DedicatedHostGroupsClient.CreateOrUpdate
+// method.
+type DedicatedHostGroupsClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DedicatedHostGroupsClientDeleteOptions contains the optional parameters for the DedicatedHostGroupsClient.Delete method.
+type DedicatedHostGroupsClientDeleteOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DedicatedHostGroupsClientGetOptions contains the optional parameters for the DedicatedHostGroupsClient.Get method.
+type DedicatedHostGroupsClientGetOptions struct {
+	// The expand expression to apply on the operation. 'InstanceView' will retrieve the list of instance views of the dedicated
+	// hosts under the dedicated host group. 'UserData' is not supported for
+	// dedicated host group.
+	Expand *InstanceViewTypes
+}
+
+// DedicatedHostGroupsClientListByResourceGroupOptions contains the optional parameters for the DedicatedHostGroupsClient.NewListByResourceGroupPager
+// method.
+type DedicatedHostGroupsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DedicatedHostGroupsClientListBySubscriptionOptions contains the optional parameters for the DedicatedHostGroupsClient.NewListBySubscriptionPager
+// method.
+type DedicatedHostGroupsClientListBySubscriptionOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DedicatedHostGroupsClientUpdateOptions contains the optional parameters for the DedicatedHostGroupsClient.Update method.
+type DedicatedHostGroupsClientUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DedicatedHostsClientBeginCreateOrUpdateOptions contains the optional parameters for the DedicatedHostsClient.BeginCreateOrUpdate
+// method.
+type DedicatedHostsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DedicatedHostsClientBeginDeleteOptions contains the optional parameters for the DedicatedHostsClient.BeginDelete method.
+type DedicatedHostsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DedicatedHostsClientBeginRedeployOptions contains the optional parameters for the DedicatedHostsClient.BeginRedeploy method.
+type DedicatedHostsClientBeginRedeployOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DedicatedHostsClientBeginRestartOptions contains the optional parameters for the DedicatedHostsClient.BeginRestart method.
+type DedicatedHostsClientBeginRestartOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DedicatedHostsClientBeginUpdateOptions contains the optional parameters for the DedicatedHostsClient.BeginUpdate method.
+type DedicatedHostsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DedicatedHostsClientGetOptions contains the optional parameters for the DedicatedHostsClient.Get method.
+type DedicatedHostsClientGetOptions struct {
+	// The expand expression to apply on the operation. 'InstanceView' will retrieve the list of instance views of the dedicated
+	// host. 'UserData' is not supported for dedicated host.
+	Expand *InstanceViewTypes
+}
+
+// DedicatedHostsClientListAvailableSizesOptions contains the optional parameters for the DedicatedHostsClient.NewListAvailableSizesPager
+// method.
+type DedicatedHostsClientListAvailableSizesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DedicatedHostsClientListByHostGroupOptions contains the optional parameters for the DedicatedHostsClient.NewListByHostGroupPager
+// method.
+type DedicatedHostsClientListByHostGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskAccessesClientBeginCreateOrUpdateOptions contains the optional parameters for the DiskAccessesClient.BeginCreateOrUpdate
+// method.
+type DiskAccessesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DiskAccessesClientBeginDeleteAPrivateEndpointConnectionOptions contains the optional parameters for the DiskAccessesClient.BeginDeleteAPrivateEndpointConnection
+// method.
+type DiskAccessesClientBeginDeleteAPrivateEndpointConnectionOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DiskAccessesClientBeginDeleteOptions contains the optional parameters for the DiskAccessesClient.BeginDelete method.
+type DiskAccessesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DiskAccessesClientBeginUpdateAPrivateEndpointConnectionOptions contains the optional parameters for the DiskAccessesClient.BeginUpdateAPrivateEndpointConnection
+// method.
+type DiskAccessesClientBeginUpdateAPrivateEndpointConnectionOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DiskAccessesClientBeginUpdateOptions contains the optional parameters for the DiskAccessesClient.BeginUpdate method.
+type DiskAccessesClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DiskAccessesClientGetAPrivateEndpointConnectionOptions contains the optional parameters for the DiskAccessesClient.GetAPrivateEndpointConnection
+// method.
+type DiskAccessesClientGetAPrivateEndpointConnectionOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskAccessesClientGetOptions contains the optional parameters for the DiskAccessesClient.Get method.
+type DiskAccessesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskAccessesClientGetPrivateLinkResourcesOptions contains the optional parameters for the DiskAccessesClient.GetPrivateLinkResources
+// method.
+type DiskAccessesClientGetPrivateLinkResourcesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskAccessesClientListByResourceGroupOptions contains the optional parameters for the DiskAccessesClient.NewListByResourceGroupPager
+// method.
+type DiskAccessesClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskAccessesClientListOptions contains the optional parameters for the DiskAccessesClient.NewListPager method.
+type DiskAccessesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskAccessesClientListPrivateEndpointConnectionsOptions contains the optional parameters for the DiskAccessesClient.NewListPrivateEndpointConnectionsPager
+// method.
+type DiskAccessesClientListPrivateEndpointConnectionsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskEncryptionSetsClientBeginCreateOrUpdateOptions contains the optional parameters for the DiskEncryptionSetsClient.BeginCreateOrUpdate
+// method.
+type DiskEncryptionSetsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DiskEncryptionSetsClientBeginDeleteOptions contains the optional parameters for the DiskEncryptionSetsClient.BeginDelete
+// method.
+type DiskEncryptionSetsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DiskEncryptionSetsClientBeginUpdateOptions contains the optional parameters for the DiskEncryptionSetsClient.BeginUpdate
+// method.
+type DiskEncryptionSetsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DiskEncryptionSetsClientGetOptions contains the optional parameters for the DiskEncryptionSetsClient.Get method.
+type DiskEncryptionSetsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskEncryptionSetsClientListAssociatedResourcesOptions contains the optional parameters for the DiskEncryptionSetsClient.NewListAssociatedResourcesPager
+// method.
+type DiskEncryptionSetsClientListAssociatedResourcesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskEncryptionSetsClientListByResourceGroupOptions contains the optional parameters for the DiskEncryptionSetsClient.NewListByResourceGroupPager
+// method.
+type DiskEncryptionSetsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskEncryptionSetsClientListOptions contains the optional parameters for the DiskEncryptionSetsClient.NewListPager method.
+type DiskEncryptionSetsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskRestorePointClientBeginGrantAccessOptions contains the optional parameters for the DiskRestorePointClient.BeginGrantAccess
+// method.
+type DiskRestorePointClientBeginGrantAccessOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DiskRestorePointClientBeginRevokeAccessOptions contains the optional parameters for the DiskRestorePointClient.BeginRevokeAccess
+// method.
+type DiskRestorePointClientBeginRevokeAccessOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DiskRestorePointClientGetOptions contains the optional parameters for the DiskRestorePointClient.Get method.
+type DiskRestorePointClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DiskRestorePointClientListByRestorePointOptions contains the optional parameters for the DiskRestorePointClient.NewListByRestorePointPager
+// method.
+type DiskRestorePointClientListByRestorePointOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DisksClientBeginCreateOrUpdateOptions contains the optional parameters for the DisksClient.BeginCreateOrUpdate method.
+type DisksClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DisksClientBeginDeleteOptions contains the optional parameters for the DisksClient.BeginDelete method.
+type DisksClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DisksClientBeginGrantAccessOptions contains the optional parameters for the DisksClient.BeginGrantAccess method.
+type DisksClientBeginGrantAccessOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DisksClientBeginRevokeAccessOptions contains the optional parameters for the DisksClient.BeginRevokeAccess method.
+type DisksClientBeginRevokeAccessOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DisksClientBeginUpdateOptions contains the optional parameters for the DisksClient.BeginUpdate method.
+type DisksClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DisksClientGetOptions contains the optional parameters for the DisksClient.Get method.
+type DisksClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DisksClientListByResourceGroupOptions contains the optional parameters for the DisksClient.NewListByResourceGroupPager
+// method.
+type DisksClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DisksClientListOptions contains the optional parameters for the DisksClient.NewListPager method.
+type DisksClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// GalleriesClientBeginCreateOrUpdateOptions contains the optional parameters for the GalleriesClient.BeginCreateOrUpdate
+// method.
+type GalleriesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleriesClientBeginDeleteOptions contains the optional parameters for the GalleriesClient.BeginDelete method.
+type GalleriesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleriesClientBeginUpdateOptions contains the optional parameters for the GalleriesClient.BeginUpdate method.
+type GalleriesClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleriesClientGetOptions contains the optional parameters for the GalleriesClient.Get method.
+type GalleriesClientGetOptions struct {
+	// The expand query option to apply on the operation.
+	Expand *GalleryExpandParams
+
+	// The select expression to apply on the operation.
+	Select *SelectPermissions
+}
+
+// GalleriesClientListByResourceGroupOptions contains the optional parameters for the GalleriesClient.NewListByResourceGroupPager
+// method.
+type GalleriesClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// GalleriesClientListOptions contains the optional parameters for the GalleriesClient.NewListPager method.
+type GalleriesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// GalleryApplicationVersionsClientBeginCreateOrUpdateOptions contains the optional parameters for the GalleryApplicationVersionsClient.BeginCreateOrUpdate
+// method.
+type GalleryApplicationVersionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryApplicationVersionsClientBeginDeleteOptions contains the optional parameters for the GalleryApplicationVersionsClient.BeginDelete
+// method.
+type GalleryApplicationVersionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryApplicationVersionsClientBeginUpdateOptions contains the optional parameters for the GalleryApplicationVersionsClient.BeginUpdate
+// method.
+type GalleryApplicationVersionsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryApplicationVersionsClientGetOptions contains the optional parameters for the GalleryApplicationVersionsClient.Get
+// method.
+type GalleryApplicationVersionsClientGetOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *ReplicationStatusTypes
+}
+
+// GalleryApplicationVersionsClientListByGalleryApplicationOptions contains the optional parameters for the GalleryApplicationVersionsClient.NewListByGalleryApplicationPager
+// method.
+type GalleryApplicationVersionsClientListByGalleryApplicationOptions struct {
+	// placeholder for future optional parameters
+}
+
+// GalleryApplicationsClientBeginCreateOrUpdateOptions contains the optional parameters for the GalleryApplicationsClient.BeginCreateOrUpdate
+// method.
+type GalleryApplicationsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryApplicationsClientBeginDeleteOptions contains the optional parameters for the GalleryApplicationsClient.BeginDelete
+// method.
+type GalleryApplicationsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryApplicationsClientBeginUpdateOptions contains the optional parameters for the GalleryApplicationsClient.BeginUpdate
+// method.
+type GalleryApplicationsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryApplicationsClientGetOptions contains the optional parameters for the GalleryApplicationsClient.Get method.
+type GalleryApplicationsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// GalleryApplicationsClientListByGalleryOptions contains the optional parameters for the GalleryApplicationsClient.NewListByGalleryPager
+// method.
+type GalleryApplicationsClientListByGalleryOptions struct {
+	// placeholder for future optional parameters
+}
+
+// GalleryImageVersionsClientBeginCreateOrUpdateOptions contains the optional parameters for the GalleryImageVersionsClient.BeginCreateOrUpdate
+// method.
+type GalleryImageVersionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryImageVersionsClientBeginDeleteOptions contains the optional parameters for the GalleryImageVersionsClient.BeginDelete
+// method.
+type GalleryImageVersionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryImageVersionsClientBeginUpdateOptions contains the optional parameters for the GalleryImageVersionsClient.BeginUpdate
+// method.
+type GalleryImageVersionsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryImageVersionsClientGetOptions contains the optional parameters for the GalleryImageVersionsClient.Get method.
+type GalleryImageVersionsClientGetOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *ReplicationStatusTypes
+}
+
+// GalleryImageVersionsClientListByGalleryImageOptions contains the optional parameters for the GalleryImageVersionsClient.NewListByGalleryImagePager
+// method.
+type GalleryImageVersionsClientListByGalleryImageOptions struct {
+	// placeholder for future optional parameters
+}
+
+// GalleryImagesClientBeginCreateOrUpdateOptions contains the optional parameters for the GalleryImagesClient.BeginCreateOrUpdate
+// method.
+type GalleryImagesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryImagesClientBeginDeleteOptions contains the optional parameters for the GalleryImagesClient.BeginDelete method.
+type GalleryImagesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryImagesClientBeginUpdateOptions contains the optional parameters for the GalleryImagesClient.BeginUpdate method.
+type GalleryImagesClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GalleryImagesClientGetOptions contains the optional parameters for the GalleryImagesClient.Get method.
+type GalleryImagesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// GalleryImagesClientListByGalleryOptions contains the optional parameters for the GalleryImagesClient.NewListByGalleryPager
+// method.
+type GalleryImagesClientListByGalleryOptions struct {
+	// placeholder for future optional parameters
+}
+
+// GallerySharingProfileClientBeginUpdateOptions contains the optional parameters for the GallerySharingProfileClient.BeginUpdate
+// method.
+type GallerySharingProfileClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ImagesClientBeginCreateOrUpdateOptions contains the optional parameters for the ImagesClient.BeginCreateOrUpdate method.
+type ImagesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ImagesClientBeginDeleteOptions contains the optional parameters for the ImagesClient.BeginDelete method.
+type ImagesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ImagesClientBeginUpdateOptions contains the optional parameters for the ImagesClient.BeginUpdate method.
+type ImagesClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ImagesClientGetOptions contains the optional parameters for the ImagesClient.Get method.
+type ImagesClientGetOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *string
+}
+
+// ImagesClientListByResourceGroupOptions contains the optional parameters for the ImagesClient.NewListByResourceGroupPager
+// method.
+type ImagesClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ImagesClientListOptions contains the optional parameters for the ImagesClient.NewListPager method.
+type ImagesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LogAnalyticsClientBeginExportRequestRateByIntervalOptions contains the optional parameters for the LogAnalyticsClient.BeginExportRequestRateByInterval
+// method.
+type LogAnalyticsClientBeginExportRequestRateByIntervalOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// LogAnalyticsClientBeginExportThrottledRequestsOptions contains the optional parameters for the LogAnalyticsClient.BeginExportThrottledRequests
+// method.
+type LogAnalyticsClientBeginExportThrottledRequestsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// OperationsClientListOptions contains the optional parameters for the OperationsClient.NewListPager method.
+type OperationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ProximityPlacementGroupsClientCreateOrUpdateOptions contains the optional parameters for the ProximityPlacementGroupsClient.CreateOrUpdate
+// method.
+type ProximityPlacementGroupsClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ProximityPlacementGroupsClientDeleteOptions contains the optional parameters for the ProximityPlacementGroupsClient.Delete
+// method.
+type ProximityPlacementGroupsClientDeleteOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ProximityPlacementGroupsClientGetOptions contains the optional parameters for the ProximityPlacementGroupsClient.Get method.
+type ProximityPlacementGroupsClientGetOptions struct {
+	// includeColocationStatus=true enables fetching the colocation status of all the resources in the proximity placement group.
+	IncludeColocationStatus *string
+}
+
+// ProximityPlacementGroupsClientListByResourceGroupOptions contains the optional parameters for the ProximityPlacementGroupsClient.NewListByResourceGroupPager
+// method.
+type ProximityPlacementGroupsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ProximityPlacementGroupsClientListBySubscriptionOptions contains the optional parameters for the ProximityPlacementGroupsClient.NewListBySubscriptionPager
+// method.
+type ProximityPlacementGroupsClientListBySubscriptionOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ProximityPlacementGroupsClientUpdateOptions contains the optional parameters for the ProximityPlacementGroupsClient.Update
+// method.
+type ProximityPlacementGroupsClientUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ResourceSKUsClientListOptions contains the optional parameters for the ResourceSKUsClient.NewListPager method.
+type ResourceSKUsClientListOptions struct {
+	// The filter to apply on the operation. Only location filter is supported currently.
+	Filter *string
+
+	// To Include Extended Locations information or not in the response.
+	IncludeExtendedLocations *string
+}
+
+// RestorePointCollectionsClientBeginDeleteOptions contains the optional parameters for the RestorePointCollectionsClient.BeginDelete
+// method.
+type RestorePointCollectionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RestorePointCollectionsClientCreateOrUpdateOptions contains the optional parameters for the RestorePointCollectionsClient.CreateOrUpdate
+// method.
+type RestorePointCollectionsClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RestorePointCollectionsClientGetOptions contains the optional parameters for the RestorePointCollectionsClient.Get method.
+type RestorePointCollectionsClientGetOptions struct {
+	// The expand expression to apply on the operation. If expand=restorePoints, server will return all contained restore points
+	// in the restorePointCollection.
+	Expand *RestorePointCollectionExpandOptions
+}
+
+// RestorePointCollectionsClientListAllOptions contains the optional parameters for the RestorePointCollectionsClient.NewListAllPager
+// method.
+type RestorePointCollectionsClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RestorePointCollectionsClientListOptions contains the optional parameters for the RestorePointCollectionsClient.NewListPager
+// method.
+type RestorePointCollectionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RestorePointCollectionsClientUpdateOptions contains the optional parameters for the RestorePointCollectionsClient.Update
+// method.
+type RestorePointCollectionsClientUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RestorePointsClientBeginCreateOptions contains the optional parameters for the RestorePointsClient.BeginCreate method.
+type RestorePointsClientBeginCreateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RestorePointsClientBeginDeleteOptions contains the optional parameters for the RestorePointsClient.BeginDelete method.
+type RestorePointsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RestorePointsClientGetOptions contains the optional parameters for the RestorePointsClient.Get method.
+type RestorePointsClientGetOptions struct {
+	// The expand expression to apply on the operation. 'InstanceView' retrieves information about the run-time state of a restore
+	// point.
+	Expand *RestorePointExpandOptions
+}
+
+// SSHPublicKeysClientCreateOptions contains the optional parameters for the SSHPublicKeysClient.Create method.
+type SSHPublicKeysClientCreateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SSHPublicKeysClientDeleteOptions contains the optional parameters for the SSHPublicKeysClient.Delete method.
+type SSHPublicKeysClientDeleteOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SSHPublicKeysClientGenerateKeyPairOptions contains the optional parameters for the SSHPublicKeysClient.GenerateKeyPair
+// method.
+type SSHPublicKeysClientGenerateKeyPairOptions struct {
+	// Parameters supplied to generate the SSH public key.
+	Parameters *SSHGenerateKeyPairInputParameters
+}
+
+// SSHPublicKeysClientGetOptions contains the optional parameters for the SSHPublicKeysClient.Get method.
+type SSHPublicKeysClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SSHPublicKeysClientListByResourceGroupOptions contains the optional parameters for the SSHPublicKeysClient.NewListByResourceGroupPager
+// method.
+type SSHPublicKeysClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SSHPublicKeysClientListBySubscriptionOptions contains the optional parameters for the SSHPublicKeysClient.NewListBySubscriptionPager
+// method.
+type SSHPublicKeysClientListBySubscriptionOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SSHPublicKeysClientUpdateOptions contains the optional parameters for the SSHPublicKeysClient.Update method.
+type SSHPublicKeysClientUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SharedGalleriesClientGetOptions contains the optional parameters for the SharedGalleriesClient.Get method.
+type SharedGalleriesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SharedGalleriesClientListOptions contains the optional parameters for the SharedGalleriesClient.NewListPager method.
+type SharedGalleriesClientListOptions struct {
+	// The query parameter to decide what shared galleries to fetch when doing listing operations.
+	SharedTo *SharedToValues
+}
+
+// SharedGalleryImageVersionsClientGetOptions contains the optional parameters for the SharedGalleryImageVersionsClient.Get
+// method.
+type SharedGalleryImageVersionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SharedGalleryImageVersionsClientListOptions contains the optional parameters for the SharedGalleryImageVersionsClient.NewListPager
+// method.
+type SharedGalleryImageVersionsClientListOptions struct {
+	// The query parameter to decide what shared galleries to fetch when doing listing operations.
+	SharedTo *SharedToValues
+}
+
+// SharedGalleryImagesClientGetOptions contains the optional parameters for the SharedGalleryImagesClient.Get method.
+type SharedGalleryImagesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SharedGalleryImagesClientListOptions contains the optional parameters for the SharedGalleryImagesClient.NewListPager method.
+type SharedGalleryImagesClientListOptions struct {
+	// The query parameter to decide what shared galleries to fetch when doing listing operations.
+	SharedTo *SharedToValues
+}
+
+// SnapshotsClientBeginCreateOrUpdateOptions contains the optional parameters for the SnapshotsClient.BeginCreateOrUpdate
+// method.
+type SnapshotsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SnapshotsClientBeginDeleteOptions contains the optional parameters for the SnapshotsClient.BeginDelete method.
+type SnapshotsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SnapshotsClientBeginGrantAccessOptions contains the optional parameters for the SnapshotsClient.BeginGrantAccess method.
+type SnapshotsClientBeginGrantAccessOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SnapshotsClientBeginRevokeAccessOptions contains the optional parameters for the SnapshotsClient.BeginRevokeAccess method.
+type SnapshotsClientBeginRevokeAccessOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SnapshotsClientBeginUpdateOptions contains the optional parameters for the SnapshotsClient.BeginUpdate method.
+type SnapshotsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SnapshotsClientGetOptions contains the optional parameters for the SnapshotsClient.Get method.
+type SnapshotsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SnapshotsClientListByResourceGroupOptions contains the optional parameters for the SnapshotsClient.NewListByResourceGroupPager
+// method.
+type SnapshotsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SnapshotsClientListOptions contains the optional parameters for the SnapshotsClient.NewListPager method.
+type SnapshotsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// UsageClientListOptions contains the optional parameters for the UsageClient.NewListPager method.
+type UsageClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineExtensionImagesClientGetOptions contains the optional parameters for the VirtualMachineExtensionImagesClient.Get
+// method.
+type VirtualMachineExtensionImagesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineExtensionImagesClientListTypesOptions contains the optional parameters for the VirtualMachineExtensionImagesClient.ListTypes
+// method.
+type VirtualMachineExtensionImagesClientListTypesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineExtensionImagesClientListVersionsOptions contains the optional parameters for the VirtualMachineExtensionImagesClient.ListVersions
+// method.
+type VirtualMachineExtensionImagesClientListVersionsOptions struct {
+	// The filter to apply on the operation.
+	Filter  *string
+	Orderby *string
+	Top     *int32
+}
+
+// VirtualMachineExtensionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineExtensionsClient.BeginCreateOrUpdate
+// method.
+type VirtualMachineExtensionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineExtensionsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineExtensionsClient.BeginDelete
+// method.
+type VirtualMachineExtensionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineExtensionsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineExtensionsClient.BeginUpdate
+// method.
+type VirtualMachineExtensionsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineExtensionsClientGetOptions contains the optional parameters for the VirtualMachineExtensionsClient.Get method.
+type VirtualMachineExtensionsClientGetOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *string
+}
+
+// VirtualMachineExtensionsClientListOptions contains the optional parameters for the VirtualMachineExtensionsClient.List
+// method.
+type VirtualMachineExtensionsClientListOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *string
+}
+
+// VirtualMachineImagesClientGetOptions contains the optional parameters for the VirtualMachineImagesClient.Get method.
+type VirtualMachineImagesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineImagesClientListByEdgeZoneOptions contains the optional parameters for the VirtualMachineImagesClient.ListByEdgeZone
+// method.
+type VirtualMachineImagesClientListByEdgeZoneOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineImagesClientListOffersOptions contains the optional parameters for the VirtualMachineImagesClient.ListOffers
+// method.
+type VirtualMachineImagesClientListOffersOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineImagesClientListOptions contains the optional parameters for the VirtualMachineImagesClient.List method.
+type VirtualMachineImagesClientListOptions struct {
+	// The expand expression to apply on the operation.
+	Expand  *string
+	Orderby *string
+	Top     *int32
+}
+
+// VirtualMachineImagesClientListPublishersOptions contains the optional parameters for the VirtualMachineImagesClient.ListPublishers
+// method.
+type VirtualMachineImagesClientListPublishersOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineImagesClientListSKUsOptions contains the optional parameters for the VirtualMachineImagesClient.ListSKUs
+// method.
+type VirtualMachineImagesClientListSKUsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineImagesEdgeZoneClientGetOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.Get
+// method.
+type VirtualMachineImagesEdgeZoneClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineImagesEdgeZoneClientListOffersOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.ListOffers
+// method.
+type VirtualMachineImagesEdgeZoneClientListOffersOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineImagesEdgeZoneClientListOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.List
+// method.
+type VirtualMachineImagesEdgeZoneClientListOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *string
+
+	// Specifies the order of the results returned. Formatted as an OData query.
+	Orderby *string
+
+	// An integer value specifying the number of images to return that matches supplied values.
+	Top *int32
+}
+
+// VirtualMachineImagesEdgeZoneClientListPublishersOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.ListPublishers
+// method.
+type VirtualMachineImagesEdgeZoneClientListPublishersOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineImagesEdgeZoneClientListSKUsOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.ListSKUs
+// method.
+type VirtualMachineImagesEdgeZoneClientListSKUsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineRunCommandsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineRunCommandsClient.BeginCreateOrUpdate
+// method.
+type VirtualMachineRunCommandsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineRunCommandsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineRunCommandsClient.BeginDelete
+// method.
+type VirtualMachineRunCommandsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineRunCommandsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineRunCommandsClient.BeginUpdate
+// method.
+type VirtualMachineRunCommandsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineRunCommandsClientGetByVirtualMachineOptions contains the optional parameters for the VirtualMachineRunCommandsClient.GetByVirtualMachine
+// method.
+type VirtualMachineRunCommandsClientGetByVirtualMachineOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *string
+}
+
+// VirtualMachineRunCommandsClientGetOptions contains the optional parameters for the VirtualMachineRunCommandsClient.Get
+// method.
+type VirtualMachineRunCommandsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineRunCommandsClientListByVirtualMachineOptions contains the optional parameters for the VirtualMachineRunCommandsClient.NewListByVirtualMachinePager
+// method.
+type VirtualMachineRunCommandsClientListByVirtualMachineOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *string
+}
+
+// VirtualMachineRunCommandsClientListOptions contains the optional parameters for the VirtualMachineRunCommandsClient.NewListPager
+// method.
+type VirtualMachineRunCommandsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineScaleSetExtensionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.BeginCreateOrUpdate
+// method.
+type VirtualMachineScaleSetExtensionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetExtensionsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.BeginDelete
+// method.
+type VirtualMachineScaleSetExtensionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetExtensionsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.BeginUpdate
+// method.
+type VirtualMachineScaleSetExtensionsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetExtensionsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.Get
+// method.
+type VirtualMachineScaleSetExtensionsClientGetOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *string
+}
+
+// VirtualMachineScaleSetExtensionsClientListOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.NewListPager
+// method.
+type VirtualMachineScaleSetExtensionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineScaleSetRollingUpgradesClientBeginCancelOptions contains the optional parameters for the VirtualMachineScaleSetRollingUpgradesClient.BeginCancel
+// method.
+type VirtualMachineScaleSetRollingUpgradesClientBeginCancelOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetRollingUpgradesClientBeginStartExtensionUpgradeOptions contains the optional parameters for the VirtualMachineScaleSetRollingUpgradesClient.BeginStartExtensionUpgrade
+// method.
+type VirtualMachineScaleSetRollingUpgradesClientBeginStartExtensionUpgradeOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetRollingUpgradesClientBeginStartOSUpgradeOptions contains the optional parameters for the VirtualMachineScaleSetRollingUpgradesClient.BeginStartOSUpgrade
+// method.
+type VirtualMachineScaleSetRollingUpgradesClientBeginStartOSUpgradeOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetRollingUpgradesClientGetLatestOptions contains the optional parameters for the VirtualMachineScaleSetRollingUpgradesClient.GetLatest
+// method.
+type VirtualMachineScaleSetRollingUpgradesClientGetLatestOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineScaleSetVMExtensionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.BeginCreateOrUpdate
+// method.
+type VirtualMachineScaleSetVMExtensionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMExtensionsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.BeginDelete
+// method.
+type VirtualMachineScaleSetVMExtensionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMExtensionsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.BeginUpdate
+// method.
+type VirtualMachineScaleSetVMExtensionsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMExtensionsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.Get
+// method.
+type VirtualMachineScaleSetVMExtensionsClientGetOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *string
+}
+
+// VirtualMachineScaleSetVMExtensionsClientListOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.List
+// method.
+type VirtualMachineScaleSetVMExtensionsClientListOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *string
+}
+
+// VirtualMachineScaleSetVMRunCommandsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineScaleSetVMRunCommandsClient.BeginCreateOrUpdate
+// method.
+type VirtualMachineScaleSetVMRunCommandsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMRunCommandsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineScaleSetVMRunCommandsClient.BeginDelete
+// method.
+type VirtualMachineScaleSetVMRunCommandsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMRunCommandsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineScaleSetVMRunCommandsClient.BeginUpdate
+// method.
+type VirtualMachineScaleSetVMRunCommandsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMRunCommandsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetVMRunCommandsClient.Get
+// method.
+type VirtualMachineScaleSetVMRunCommandsClientGetOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *string
+}
+
+// VirtualMachineScaleSetVMRunCommandsClientListOptions contains the optional parameters for the VirtualMachineScaleSetVMRunCommandsClient.NewListPager
+// method.
+type VirtualMachineScaleSetVMRunCommandsClientListOptions struct {
+	// The expand expression to apply on the operation.
+	Expand *string
+}
+
+// VirtualMachineScaleSetVMsClientBeginApproveRollingUpgradeOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginApproveRollingUpgrade
+// method.
+type VirtualMachineScaleSetVMsClientBeginApproveRollingUpgradeOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMsClientBeginAttachDetachDataDisksOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginAttachDetachDataDisks
+// method.
+type VirtualMachineScaleSetVMsClientBeginAttachDetachDataDisksOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMsClientBeginDeallocateOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginDeallocate
+// method.
+type VirtualMachineScaleSetVMsClientBeginDeallocateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginDelete
+// method.
+type VirtualMachineScaleSetVMsClientBeginDeleteOptions struct {
+	// Optional parameter to force delete a virtual machine from a VM scale set. (Feature in Preview)
+	ForceDeletion *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMsClientBeginPerformMaintenanceOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginPerformMaintenance
+// method.
+type VirtualMachineScaleSetVMsClientBeginPerformMaintenanceOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMsClientBeginPowerOffOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginPowerOff
+// method.
+type VirtualMachineScaleSetVMsClientBeginPowerOffOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// The parameter to request non-graceful VM shutdown. True value for this flag indicates non-graceful shutdown whereas false
+	// indicates otherwise. Default value for this flag is false if not specified
+	SkipShutdown *bool
+}
+
+// VirtualMachineScaleSetVMsClientBeginRedeployOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginRedeploy
+// method.
+type VirtualMachineScaleSetVMsClientBeginRedeployOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMsClientBeginReimageAllOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginReimageAll
+// method.
+type VirtualMachineScaleSetVMsClientBeginReimageAllOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMsClientBeginReimageOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginReimage
+// method.
+type VirtualMachineScaleSetVMsClientBeginReimageOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// Parameters for the Reimaging Virtual machine in ScaleSet.
+	VMScaleSetVMReimageInput *VirtualMachineScaleSetVMReimageParameters
+}
+
+// VirtualMachineScaleSetVMsClientBeginRestartOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginRestart
+// method.
+type VirtualMachineScaleSetVMsClientBeginRestartOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMsClientBeginRunCommandOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginRunCommand
+// method.
+type VirtualMachineScaleSetVMsClientBeginRunCommandOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMsClientBeginStartOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginStart
+// method.
+type VirtualMachineScaleSetVMsClientBeginStartOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginUpdate
+// method.
+type VirtualMachineScaleSetVMsClientBeginUpdateOptions struct {
+	// The ETag of the transformation. Omit this value to always overwrite the current resource. Specify the last-seen ETag value
+	// to prevent accidentally overwriting concurrent changes.
+	IfMatch *string
+
+	// Set to '*' to allow a new record set to be created, but to prevent updating an existing record set. Other values will result
+	// in error from server as they are not supported.
+	IfNoneMatch *string
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetVMsClientGetInstanceViewOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.GetInstanceView
+// method.
+type VirtualMachineScaleSetVMsClientGetInstanceViewOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineScaleSetVMsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.Get
+// method.
+type VirtualMachineScaleSetVMsClientGetOptions struct {
+	// The expand expression to apply on the operation. 'InstanceView' will retrieve the instance view of the virtual machine.
+	// 'UserData' will retrieve the UserData of the virtual machine.
+	Expand *InstanceViewTypes
+}
+
+// VirtualMachineScaleSetVMsClientListOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.NewListPager
+// method.
+type VirtualMachineScaleSetVMsClientListOptions struct {
+	// The expand expression to apply to the operation. Allowed values are 'instanceView'.
+	Expand *string
+
+	// The filter to apply to the operation. Allowed values are 'startswith(instanceView/statuses/code, 'PowerState') eq true',
+	// 'properties/latestModelApplied eq true', 'properties/latestModelApplied eq
+	// false'.
+	Filter *string
+
+	// The list parameters. Allowed values are 'instanceView', 'instanceView/statuses'.
+	Select *string
+}
+
+// VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.RetrieveBootDiagnosticsData
+// method.
+type VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataOptions struct {
+	// Expiration duration in minutes for the SAS URIs with a value between 1 to 1440 minutes. Note: If not specified, SAS URIs
+	// will be generated with a default expiration duration of 120 minutes.
+	SasURIExpirationTimeInMinutes *int32
+}
+
+// VirtualMachineScaleSetVMsClientSimulateEvictionOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.SimulateEviction
+// method.
+type VirtualMachineScaleSetVMsClientSimulateEvictionOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineScaleSetsClientBeginApproveRollingUpgradeOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginApproveRollingUpgrade
+// method.
+type VirtualMachineScaleSetsClientBeginApproveRollingUpgradeOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// A list of virtual machine instance IDs from the VM scale set.
+	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
+}
+
+// VirtualMachineScaleSetsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginCreateOrUpdate
+// method.
+type VirtualMachineScaleSetsClientBeginCreateOrUpdateOptions struct {
+	// The ETag of the transformation. Omit this value to always overwrite the current resource. Specify the last-seen ETag value
+	// to prevent accidentally overwriting concurrent changes.
+	IfMatch *string
+
+	// Set to '*' to allow a new record set to be created, but to prevent updating an existing record set. Other values will result
+	// in error from server as they are not supported.
+	IfNoneMatch *string
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetsClientBeginDeallocateOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginDeallocate
+// method.
+type VirtualMachineScaleSetsClientBeginDeallocateOptions struct {
+	// Optional parameter to hibernate a virtual machine from the VM scale set. (This feature is available for VMSS with Flexible
+	// OrchestrationMode only)
+	Hibernate *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// A list of virtual machine instance IDs from the VM scale set.
+	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
+}
+
+// VirtualMachineScaleSetsClientBeginDeleteInstancesOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginDeleteInstances
+// method.
+type VirtualMachineScaleSetsClientBeginDeleteInstancesOptions struct {
+	// Optional parameter to force delete virtual machines from the VM scale set. (Feature in Preview)
+	ForceDeletion *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginDelete
+// method.
+type VirtualMachineScaleSetsClientBeginDeleteOptions struct {
+	// Optional parameter to force delete a VM scale set. (Feature in Preview)
+	ForceDeletion *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetsClientBeginPerformMaintenanceOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginPerformMaintenance
+// method.
+type VirtualMachineScaleSetsClientBeginPerformMaintenanceOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// A list of virtual machine instance IDs from the VM scale set.
+	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
+}
+
+// VirtualMachineScaleSetsClientBeginPowerOffOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginPowerOff
+// method.
+type VirtualMachineScaleSetsClientBeginPowerOffOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// The parameter to request non-graceful VM shutdown. True value for this flag indicates non-graceful shutdown whereas false
+	// indicates otherwise. Default value for this flag is false if not specified
+	SkipShutdown *bool
+
+	// A list of virtual machine instance IDs from the VM scale set.
+	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
+}
+
+// VirtualMachineScaleSetsClientBeginReapplyOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginReapply
+// method.
+type VirtualMachineScaleSetsClientBeginReapplyOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetsClientBeginRedeployOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginRedeploy
+// method.
+type VirtualMachineScaleSetsClientBeginRedeployOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// A list of virtual machine instance IDs from the VM scale set.
+	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
+}
+
+// VirtualMachineScaleSetsClientBeginReimageAllOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginReimageAll
+// method.
+type VirtualMachineScaleSetsClientBeginReimageAllOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// A list of virtual machine instance IDs from the VM scale set.
+	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
+}
+
+// VirtualMachineScaleSetsClientBeginReimageOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginReimage
+// method.
+type VirtualMachineScaleSetsClientBeginReimageOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// Parameters for Reimaging VM ScaleSet.
+	VMScaleSetReimageInput *VirtualMachineScaleSetReimageParameters
+}
+
+// VirtualMachineScaleSetsClientBeginRestartOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginRestart
+// method.
+type VirtualMachineScaleSetsClientBeginRestartOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// A list of virtual machine instance IDs from the VM scale set.
+	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
+}
+
+// VirtualMachineScaleSetsClientBeginSetOrchestrationServiceStateOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginSetOrchestrationServiceState
+// method.
+type VirtualMachineScaleSetsClientBeginSetOrchestrationServiceStateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetsClientBeginStartOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginStart
+// method.
+type VirtualMachineScaleSetsClientBeginStartOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// A list of virtual machine instance IDs from the VM scale set.
+	VMInstanceIDs *VirtualMachineScaleSetVMInstanceIDs
+}
+
+// VirtualMachineScaleSetsClientBeginUpdateInstancesOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginUpdateInstances
+// method.
+type VirtualMachineScaleSetsClientBeginUpdateInstancesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetsClientBeginUpdateOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginUpdate
+// method.
+type VirtualMachineScaleSetsClientBeginUpdateOptions struct {
+	// The ETag of the transformation. Omit this value to always overwrite the current resource. Specify the last-seen ETag value
+	// to prevent accidentally overwriting concurrent changes.
+	IfMatch *string
+
+	// Set to '*' to allow a new record set to be created, but to prevent updating an existing record set. Other values will result
+	// in error from server as they are not supported.
+	IfNoneMatch *string
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachineScaleSetsClientConvertToSinglePlacementGroupOptions contains the optional parameters for the VirtualMachineScaleSetsClient.ConvertToSinglePlacementGroup
+// method.
+type VirtualMachineScaleSetsClientConvertToSinglePlacementGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkOptions contains the optional parameters
+// for the VirtualMachineScaleSetsClient.ForceRecoveryServiceFabricPlatformUpdateDomainWalk method.
+type VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkOptions struct {
+	// The placement group id for which the manual recovery walk is requested.
+	PlacementGroupID *string
+
+	// The zone in which the manual recovery walk is requested for cross zone virtual machine scale set
+	Zone *string
+}
+
+// VirtualMachineScaleSetsClientGetInstanceViewOptions contains the optional parameters for the VirtualMachineScaleSetsClient.GetInstanceView
+// method.
+type VirtualMachineScaleSetsClientGetInstanceViewOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineScaleSetsClientGetOSUpgradeHistoryOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewGetOSUpgradeHistoryPager
+// method.
+type VirtualMachineScaleSetsClientGetOSUpgradeHistoryOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineScaleSetsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetsClient.Get method.
+type VirtualMachineScaleSetsClientGetOptions struct {
+	// The expand expression to apply on the operation. 'UserData' retrieves the UserData property of the VM scale set that was
+	// provided by the user during the VM scale set Create/Update operation
+	Expand *ExpandTypesForGetVMScaleSets
+}
+
+// VirtualMachineScaleSetsClientListAllOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListAllPager
+// method.
+type VirtualMachineScaleSetsClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineScaleSetsClientListByLocationOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListByLocationPager
+// method.
+type VirtualMachineScaleSetsClientListByLocationOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineScaleSetsClientListOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListPager
+// method.
+type VirtualMachineScaleSetsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineScaleSetsClientListSKUsOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListSKUsPager
+// method.
+type VirtualMachineScaleSetsClientListSKUsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachineSizesClientListOptions contains the optional parameters for the VirtualMachineSizesClient.NewListPager method.
+type VirtualMachineSizesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachinesClientBeginAssessPatchesOptions contains the optional parameters for the VirtualMachinesClient.BeginAssessPatches
+// method.
+type VirtualMachinesClientBeginAssessPatchesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginAttachDetachDataDisksOptions contains the optional parameters for the VirtualMachinesClient.BeginAttachDetachDataDisks
+// method.
+type VirtualMachinesClientBeginAttachDetachDataDisksOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginCaptureOptions contains the optional parameters for the VirtualMachinesClient.BeginCapture method.
+type VirtualMachinesClientBeginCaptureOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginConvertToManagedDisksOptions contains the optional parameters for the VirtualMachinesClient.BeginConvertToManagedDisks
+// method.
+type VirtualMachinesClientBeginConvertToManagedDisksOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualMachinesClient.BeginCreateOrUpdate
+// method.
+type VirtualMachinesClientBeginCreateOrUpdateOptions struct {
+	// The ETag of the transformation. Omit this value to always overwrite the current resource. Specify the last-seen ETag value
+	// to prevent accidentally overwriting concurrent changes.
+	IfMatch *string
+
+	// Set to '*' to allow a new record set to be created, but to prevent updating an existing record set. Other values will result
+	// in error from server as they are not supported.
+	IfNoneMatch *string
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginDeallocateOptions contains the optional parameters for the VirtualMachinesClient.BeginDeallocate
+// method.
+type VirtualMachinesClientBeginDeallocateOptions struct {
+	// Optional parameter to hibernate a virtual machine. (Feature in Preview)
+	Hibernate *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginDeleteOptions contains the optional parameters for the VirtualMachinesClient.BeginDelete method.
+type VirtualMachinesClientBeginDeleteOptions struct {
+	// Optional parameter to force delete virtual machines.
+	ForceDeletion *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginInstallPatchesOptions contains the optional parameters for the VirtualMachinesClient.BeginInstallPatches
+// method.
+type VirtualMachinesClientBeginInstallPatchesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginPerformMaintenanceOptions contains the optional parameters for the VirtualMachinesClient.BeginPerformMaintenance
+// method.
+type VirtualMachinesClientBeginPerformMaintenanceOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginPowerOffOptions contains the optional parameters for the VirtualMachinesClient.BeginPowerOff
+// method.
+type VirtualMachinesClientBeginPowerOffOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// The parameter to request non-graceful VM shutdown. True value for this flag indicates non-graceful shutdown whereas false
+	// indicates otherwise. Default value for this flag is false if not specified
+	SkipShutdown *bool
+}
+
+// VirtualMachinesClientBeginReapplyOptions contains the optional parameters for the VirtualMachinesClient.BeginReapply method.
+type VirtualMachinesClientBeginReapplyOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginRedeployOptions contains the optional parameters for the VirtualMachinesClient.BeginRedeploy
+// method.
+type VirtualMachinesClientBeginRedeployOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginReimageOptions contains the optional parameters for the VirtualMachinesClient.BeginReimage method.
+type VirtualMachinesClientBeginReimageOptions struct {
+	// Parameters supplied to the Reimage Virtual Machine operation.
+	Parameters *VirtualMachineReimageParameters
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginRestartOptions contains the optional parameters for the VirtualMachinesClient.BeginRestart method.
+type VirtualMachinesClientBeginRestartOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginRunCommandOptions contains the optional parameters for the VirtualMachinesClient.BeginRunCommand
+// method.
+type VirtualMachinesClientBeginRunCommandOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginStartOptions contains the optional parameters for the VirtualMachinesClient.BeginStart method.
+type VirtualMachinesClientBeginStartOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientBeginUpdateOptions contains the optional parameters for the VirtualMachinesClient.BeginUpdate method.
+type VirtualMachinesClientBeginUpdateOptions struct {
+	// The ETag of the transformation. Omit this value to always overwrite the current resource. Specify the last-seen ETag value
+	// to prevent accidentally overwriting concurrent changes.
+	IfMatch *string
+
+	// Set to '*' to allow a new record set to be created, but to prevent updating an existing record set. Other values will result
+	// in error from server as they are not supported.
+	IfNoneMatch *string
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualMachinesClientGeneralizeOptions contains the optional parameters for the VirtualMachinesClient.Generalize method.
+type VirtualMachinesClientGeneralizeOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachinesClientGetOptions contains the optional parameters for the VirtualMachinesClient.Get method.
+type VirtualMachinesClientGetOptions struct {
+	// The expand expression to apply on the operation. 'InstanceView' retrieves a snapshot of the runtime properties of the virtual
+	// machine that is managed by the platform and can change outside of control
+	// plane operations. 'UserData' retrieves the UserData property as part of the VM model view that was provided by the user
+	// during the VM Create/Update operation.
+	Expand *InstanceViewTypes
+}
+
+// VirtualMachinesClientInstanceViewOptions contains the optional parameters for the VirtualMachinesClient.InstanceView method.
+type VirtualMachinesClientInstanceViewOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachinesClientListAllOptions contains the optional parameters for the VirtualMachinesClient.NewListAllPager method.
+type VirtualMachinesClientListAllOptions struct {
+	// The expand expression to apply on operation. 'instanceView' enables fetching run time status of all Virtual Machines, this
+	// can only be specified if a valid $filter option is specified
+	Expand *ExpandTypesForListVMs
+
+	// The system query option to filter VMs returned in the response. Allowed value is 'virtualMachineScaleSet/id' eq
+	// /subscriptions/{subId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachineScaleSets/{vmssName}'
+	Filter *string
+
+	// statusOnly=true enables fetching run time status of all Virtual Machines in the subscription.
+	StatusOnly *string
+}
+
+// VirtualMachinesClientListAvailableSizesOptions contains the optional parameters for the VirtualMachinesClient.NewListAvailableSizesPager
+// method.
+type VirtualMachinesClientListAvailableSizesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachinesClientListByLocationOptions contains the optional parameters for the VirtualMachinesClient.NewListByLocationPager
+// method.
+type VirtualMachinesClientListByLocationOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualMachinesClientListOptions contains the optional parameters for the VirtualMachinesClient.NewListPager method.
+type VirtualMachinesClientListOptions struct {
+	// The expand expression to apply on operation. 'instanceView' enables fetching run time status of all Virtual Machines, this
+	// can only be specified if a valid $filter option is specified
+	Expand *ExpandTypeForListVMs
+
+	// The system query option to filter VMs returned in the response. Allowed value is 'virtualMachineScaleSet/id' eq
+	// /subscriptions/{subId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachineScaleSets/{vmssName}'
+	Filter *string
+}
+
+// VirtualMachinesClientRetrieveBootDiagnosticsDataOptions contains the optional parameters for the VirtualMachinesClient.RetrieveBootDiagnosticsData
+// method.
+type VirtualMachinesClientRetrieveBootDiagnosticsDataOptions struct {
+	// Expiration duration in minutes for the SAS URIs with a value between 1 to 1440 minutes. Note: If not specified, SAS URIs
+	// will be generated with a default expiration duration of 120 minutes.
+	SasURIExpirationTimeInMinutes *int32
+}
+
+// VirtualMachinesClientSimulateEvictionOptions contains the optional parameters for the VirtualMachinesClient.SimulateEviction
+// method.
+type VirtualMachinesClientSimulateEvictionOptions struct {
+	// placeholder for future optional parameters
+}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/proximityplacementgroups_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/proximityplacementgroups_client.go
similarity index 82%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/proximityplacementgroups_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/proximityplacementgroups_client.go
index 62c35492c18..947d8373647 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/proximityplacementgroups_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/proximityplacementgroups_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type ProximityPlacementGroupsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewProximityPlacementGroupsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ProximityPlacementGroupsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ProximityPlacementGroupsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewProximityPlacementGroupsClient(subscriptionID string, credential azcore.
 // CreateOrUpdate - Create or update a proximity placement group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - proximityPlacementGroupName - The name of the proximity placement group.
 //   - parameters - Parameters supplied to the Create Proximity Placement Group operation.
 //   - options - ProximityPlacementGroupsClientCreateOrUpdateOptions contains the optional parameters for the ProximityPlacementGroupsClient.CreateOrUpdate
 //     method.
 func (client *ProximityPlacementGroupsClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, proximityPlacementGroupName string, parameters ProximityPlacementGroup, options *ProximityPlacementGroupsClientCreateOrUpdateOptions) (ProximityPlacementGroupsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "ProximityPlacementGroupsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, proximityPlacementGroupName, parameters, options)
 	if err != nil {
 		return ProximityPlacementGroupsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ProximityPlacementGroupsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return ProximityPlacementGroupsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return ProximityPlacementGroupsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -89,10 +95,13 @@ func (client *ProximityPlacementGroupsClient) createOrUpdateCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -107,22 +116,28 @@ func (client *ProximityPlacementGroupsClient) createOrUpdateHandleResponse(resp
 // Delete - Delete a proximity placement group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - proximityPlacementGroupName - The name of the proximity placement group.
 //   - options - ProximityPlacementGroupsClientDeleteOptions contains the optional parameters for the ProximityPlacementGroupsClient.Delete
 //     method.
 func (client *ProximityPlacementGroupsClient) Delete(ctx context.Context, resourceGroupName string, proximityPlacementGroupName string, options *ProximityPlacementGroupsClientDeleteOptions) (ProximityPlacementGroupsClientDeleteResponse, error) {
+	var err error
+	const operationName = "ProximityPlacementGroupsClient.Delete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, proximityPlacementGroupName, options)
 	if err != nil {
 		return ProximityPlacementGroupsClientDeleteResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ProximityPlacementGroupsClientDeleteResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ProximityPlacementGroupsClientDeleteResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ProximityPlacementGroupsClientDeleteResponse{}, err
 	}
 	return ProximityPlacementGroupsClientDeleteResponse{}, nil
 }
@@ -147,7 +162,7 @@ func (client *ProximityPlacementGroupsClient) deleteCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -156,24 +171,31 @@ func (client *ProximityPlacementGroupsClient) deleteCreateRequest(ctx context.Co
 // Get - Retrieves information about a proximity placement group .
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - proximityPlacementGroupName - The name of the proximity placement group.
 //   - options - ProximityPlacementGroupsClientGetOptions contains the optional parameters for the ProximityPlacementGroupsClient.Get
 //     method.
 func (client *ProximityPlacementGroupsClient) Get(ctx context.Context, resourceGroupName string, proximityPlacementGroupName string, options *ProximityPlacementGroupsClientGetOptions) (ProximityPlacementGroupsClientGetResponse, error) {
+	var err error
+	const operationName = "ProximityPlacementGroupsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, proximityPlacementGroupName, options)
 	if err != nil {
 		return ProximityPlacementGroupsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ProximityPlacementGroupsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ProximityPlacementGroupsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ProximityPlacementGroupsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -199,7 +221,7 @@ func (client *ProximityPlacementGroupsClient) getCreateRequest(ctx context.Conte
 	if options != nil && options.IncludeColocationStatus != nil {
 		reqQP.Set("includeColocationStatus", *options.IncludeColocationStatus)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -216,7 +238,7 @@ func (client *ProximityPlacementGroupsClient) getHandleResponse(resp *http.Respo
 
 // NewListByResourceGroupPager - Lists all proximity placement groups in a resource group.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - ProximityPlacementGroupsClientListByResourceGroupOptions contains the optional parameters for the ProximityPlacementGroupsClient.NewListByResourceGroupPager
 //     method.
@@ -226,25 +248,20 @@ func (client *ProximityPlacementGroupsClient) NewListByResourceGroupPager(resour
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ProximityPlacementGroupsClientListByResourceGroupResponse) (ProximityPlacementGroupsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ProximityPlacementGroupsClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ProximityPlacementGroupsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return ProximityPlacementGroupsClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ProximityPlacementGroupsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -264,7 +281,7 @@ func (client *ProximityPlacementGroupsClient) listByResourceGroupCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -281,7 +298,7 @@ func (client *ProximityPlacementGroupsClient) listByResourceGroupHandleResponse(
 
 // NewListBySubscriptionPager - Lists all proximity placement groups in a subscription.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - options - ProximityPlacementGroupsClientListBySubscriptionOptions contains the optional parameters for the ProximityPlacementGroupsClient.NewListBySubscriptionPager
 //     method.
 func (client *ProximityPlacementGroupsClient) NewListBySubscriptionPager(options *ProximityPlacementGroupsClientListBySubscriptionOptions) *runtime.Pager[ProximityPlacementGroupsClientListBySubscriptionResponse] {
@@ -290,25 +307,20 @@ func (client *ProximityPlacementGroupsClient) NewListBySubscriptionPager(options
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ProximityPlacementGroupsClientListBySubscriptionResponse) (ProximityPlacementGroupsClientListBySubscriptionResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listBySubscriptionCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ProximityPlacementGroupsClient.NewListBySubscriptionPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listBySubscriptionCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ProximityPlacementGroupsClientListBySubscriptionResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ProximityPlacementGroupsClientListBySubscriptionResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ProximityPlacementGroupsClientListBySubscriptionResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listBySubscriptionHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -324,7 +336,7 @@ func (client *ProximityPlacementGroupsClient) listBySubscriptionCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -342,25 +354,32 @@ func (client *ProximityPlacementGroupsClient) listBySubscriptionHandleResponse(r
 // Update - Update a proximity placement group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - proximityPlacementGroupName - The name of the proximity placement group.
 //   - parameters - Parameters supplied to the Update Proximity Placement Group operation.
 //   - options - ProximityPlacementGroupsClientUpdateOptions contains the optional parameters for the ProximityPlacementGroupsClient.Update
 //     method.
 func (client *ProximityPlacementGroupsClient) Update(ctx context.Context, resourceGroupName string, proximityPlacementGroupName string, parameters ProximityPlacementGroupUpdate, options *ProximityPlacementGroupsClientUpdateOptions) (ProximityPlacementGroupsClientUpdateResponse, error) {
+	var err error
+	const operationName = "ProximityPlacementGroupsClient.Update"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, proximityPlacementGroupName, parameters, options)
 	if err != nil {
 		return ProximityPlacementGroupsClientUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ProximityPlacementGroupsClientUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ProximityPlacementGroupsClientUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ProximityPlacementGroupsClientUpdateResponse{}, err
 	}
-	return client.updateHandleResponse(resp)
+	resp, err := client.updateHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateCreateRequest creates the Update request.
@@ -383,10 +402,13 @@ func (client *ProximityPlacementGroupsClient) updateCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateHandleResponse handles the Update response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/resourceskus_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/resourceskus_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/resourceskus_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/resourceskus_client.go
index 55799292b6b..e0dd1afa435 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/resourceskus_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/resourceskus_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type ResourceSKUsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewResourceSKUsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ResourceSKUsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ResourceSKUsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -55,25 +54,20 @@ func (client *ResourceSKUsClient) NewListPager(options *ResourceSKUsClientListOp
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ResourceSKUsClientListResponse) (ResourceSKUsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ResourceSKUsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ResourceSKUsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ResourceSKUsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ResourceSKUsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/response_types.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/response_types.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/response_types.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/response_types.go
index efcb524334d..db4fc2bd38e 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/response_types.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/response_types.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -13,6 +12,12 @@ import "io"
 
 // AvailabilitySetsClientCreateOrUpdateResponse contains the response from method AvailabilitySetsClient.CreateOrUpdate.
 type AvailabilitySetsClientCreateOrUpdateResponse struct {
+	// Specifies information about the availability set that the virtual machine should be assigned to. Virtual machines specified
+	// in the same availability set are allocated to different nodes to maximize availability. For more information about availability
+	// sets, see [Availability sets overview](https://docs.microsoft.com/azure/virtual-machines/availability-set-overview). For
+	// more information on Azure planned maintenance, see [Maintenance and updates for Virtual Machines in Azure](https://docs.microsoft.com/azure/virtual-machines/maintenance-and-updates).
+	// Currently, a VM can only be added to an availability set at creation time. An existing VM cannot be added to an availability
+	// set.
 	AvailabilitySet
 }
 
@@ -23,31 +28,49 @@ type AvailabilitySetsClientDeleteResponse struct {
 
 // AvailabilitySetsClientGetResponse contains the response from method AvailabilitySetsClient.Get.
 type AvailabilitySetsClientGetResponse struct {
+	// Specifies information about the availability set that the virtual machine should be assigned to. Virtual machines specified
+	// in the same availability set are allocated to different nodes to maximize availability. For more information about availability
+	// sets, see [Availability sets overview](https://docs.microsoft.com/azure/virtual-machines/availability-set-overview). For
+	// more information on Azure planned maintenance, see [Maintenance and updates for Virtual Machines in Azure](https://docs.microsoft.com/azure/virtual-machines/maintenance-and-updates).
+	// Currently, a VM can only be added to an availability set at creation time. An existing VM cannot be added to an availability
+	// set.
 	AvailabilitySet
 }
 
 // AvailabilitySetsClientListAvailableSizesResponse contains the response from method AvailabilitySetsClient.NewListAvailableSizesPager.
 type AvailabilitySetsClientListAvailableSizesResponse struct {
+	// The List Virtual Machine operation response.
 	VirtualMachineSizeListResult
 }
 
 // AvailabilitySetsClientListBySubscriptionResponse contains the response from method AvailabilitySetsClient.NewListBySubscriptionPager.
 type AvailabilitySetsClientListBySubscriptionResponse struct {
+	// The List Availability Set operation response.
 	AvailabilitySetListResult
 }
 
 // AvailabilitySetsClientListResponse contains the response from method AvailabilitySetsClient.NewListPager.
 type AvailabilitySetsClientListResponse struct {
+	// The List Availability Set operation response.
 	AvailabilitySetListResult
 }
 
 // AvailabilitySetsClientUpdateResponse contains the response from method AvailabilitySetsClient.Update.
 type AvailabilitySetsClientUpdateResponse struct {
+	// Specifies information about the availability set that the virtual machine should be assigned to. Virtual machines specified
+	// in the same availability set are allocated to different nodes to maximize availability. For more information about availability
+	// sets, see [Availability sets overview](https://docs.microsoft.com/azure/virtual-machines/availability-set-overview). For
+	// more information on Azure planned maintenance, see [Maintenance and updates for Virtual Machines in Azure](https://docs.microsoft.com/azure/virtual-machines/maintenance-and-updates).
+	// Currently, a VM can only be added to an availability set at creation time. An existing VM cannot be added to an availability
+	// set.
 	AvailabilitySet
 }
 
 // CapacityReservationGroupsClientCreateOrUpdateResponse contains the response from method CapacityReservationGroupsClient.CreateOrUpdate.
 type CapacityReservationGroupsClientCreateOrUpdateResponse struct {
+	// Specifies information about the capacity reservation group that the capacity reservations should be assigned to. Currently,
+	// a capacity reservation can only be added to a capacity reservation group at creation time. An existing capacity reservation
+	// cannot be added or moved to another capacity reservation group.
 	CapacityReservationGroup
 }
 
@@ -58,26 +81,35 @@ type CapacityReservationGroupsClientDeleteResponse struct {
 
 // CapacityReservationGroupsClientGetResponse contains the response from method CapacityReservationGroupsClient.Get.
 type CapacityReservationGroupsClientGetResponse struct {
+	// Specifies information about the capacity reservation group that the capacity reservations should be assigned to. Currently,
+	// a capacity reservation can only be added to a capacity reservation group at creation time. An existing capacity reservation
+	// cannot be added or moved to another capacity reservation group.
 	CapacityReservationGroup
 }
 
 // CapacityReservationGroupsClientListByResourceGroupResponse contains the response from method CapacityReservationGroupsClient.NewListByResourceGroupPager.
 type CapacityReservationGroupsClientListByResourceGroupResponse struct {
+	// The List capacity reservation group with resource group response.
 	CapacityReservationGroupListResult
 }
 
 // CapacityReservationGroupsClientListBySubscriptionResponse contains the response from method CapacityReservationGroupsClient.NewListBySubscriptionPager.
 type CapacityReservationGroupsClientListBySubscriptionResponse struct {
+	// The List capacity reservation group with resource group response.
 	CapacityReservationGroupListResult
 }
 
 // CapacityReservationGroupsClientUpdateResponse contains the response from method CapacityReservationGroupsClient.Update.
 type CapacityReservationGroupsClientUpdateResponse struct {
+	// Specifies information about the capacity reservation group that the capacity reservations should be assigned to. Currently,
+	// a capacity reservation can only be added to a capacity reservation group at creation time. An existing capacity reservation
+	// cannot be added or moved to another capacity reservation group.
 	CapacityReservationGroup
 }
 
 // CapacityReservationsClientCreateOrUpdateResponse contains the response from method CapacityReservationsClient.BeginCreateOrUpdate.
 type CapacityReservationsClientCreateOrUpdateResponse struct {
+	// Specifies information about the capacity reservation.
 	CapacityReservation
 }
 
@@ -88,36 +120,43 @@ type CapacityReservationsClientDeleteResponse struct {
 
 // CapacityReservationsClientGetResponse contains the response from method CapacityReservationsClient.Get.
 type CapacityReservationsClientGetResponse struct {
+	// Specifies information about the capacity reservation.
 	CapacityReservation
 }
 
 // CapacityReservationsClientListByCapacityReservationGroupResponse contains the response from method CapacityReservationsClient.NewListByCapacityReservationGroupPager.
 type CapacityReservationsClientListByCapacityReservationGroupResponse struct {
+	// The list capacity reservation operation response.
 	CapacityReservationListResult
 }
 
 // CapacityReservationsClientUpdateResponse contains the response from method CapacityReservationsClient.BeginUpdate.
 type CapacityReservationsClientUpdateResponse struct {
+	// Specifies information about the capacity reservation.
 	CapacityReservation
 }
 
 // CloudServiceOperatingSystemsClientGetOSFamilyResponse contains the response from method CloudServiceOperatingSystemsClient.GetOSFamily.
 type CloudServiceOperatingSystemsClientGetOSFamilyResponse struct {
+	// Describes a cloud service OS family.
 	OSFamily
 }
 
 // CloudServiceOperatingSystemsClientGetOSVersionResponse contains the response from method CloudServiceOperatingSystemsClient.GetOSVersion.
 type CloudServiceOperatingSystemsClientGetOSVersionResponse struct {
+	// Describes a cloud service OS version.
 	OSVersion
 }
 
 // CloudServiceOperatingSystemsClientListOSFamiliesResponse contains the response from method CloudServiceOperatingSystemsClient.NewListOSFamiliesPager.
 type CloudServiceOperatingSystemsClientListOSFamiliesResponse struct {
+	// The list operation result.
 	OSFamilyListResult
 }
 
 // CloudServiceOperatingSystemsClientListOSVersionsResponse contains the response from method CloudServiceOperatingSystemsClient.NewListOSVersionsPager.
 type CloudServiceOperatingSystemsClientListOSVersionsResponse struct {
+	// The list operation result.
 	OSVersionListResult
 }
 
@@ -128,6 +167,7 @@ type CloudServiceRoleInstancesClientDeleteResponse struct {
 
 // CloudServiceRoleInstancesClientGetInstanceViewResponse contains the response from method CloudServiceRoleInstancesClient.GetInstanceView.
 type CloudServiceRoleInstancesClientGetInstanceViewResponse struct {
+	// The instance view of the role instance.
 	RoleInstanceView
 }
 
@@ -139,11 +179,13 @@ type CloudServiceRoleInstancesClientGetRemoteDesktopFileResponse struct {
 
 // CloudServiceRoleInstancesClientGetResponse contains the response from method CloudServiceRoleInstancesClient.Get.
 type CloudServiceRoleInstancesClientGetResponse struct {
+	// Describes the cloud service role instance.
 	RoleInstance
 }
 
 // CloudServiceRoleInstancesClientListResponse contains the response from method CloudServiceRoleInstancesClient.NewListPager.
 type CloudServiceRoleInstancesClientListResponse struct {
+	// The list operation result.
 	RoleInstanceListResult
 }
 
@@ -164,16 +206,19 @@ type CloudServiceRoleInstancesClientRestartResponse struct {
 
 // CloudServiceRolesClientGetResponse contains the response from method CloudServiceRolesClient.Get.
 type CloudServiceRolesClientGetResponse struct {
+	// Describes a role of the cloud service.
 	CloudServiceRole
 }
 
 // CloudServiceRolesClientListResponse contains the response from method CloudServiceRolesClient.NewListPager.
 type CloudServiceRolesClientListResponse struct {
+	// The list operation result.
 	CloudServiceRoleListResult
 }
 
 // CloudServicesClientCreateOrUpdateResponse contains the response from method CloudServicesClient.BeginCreateOrUpdate.
 type CloudServicesClientCreateOrUpdateResponse struct {
+	// Describes the cloud service.
 	CloudService
 }
 
@@ -189,21 +234,25 @@ type CloudServicesClientDeleteResponse struct {
 
 // CloudServicesClientGetInstanceViewResponse contains the response from method CloudServicesClient.GetInstanceView.
 type CloudServicesClientGetInstanceViewResponse struct {
+	// InstanceView of CloudService as a whole
 	CloudServiceInstanceView
 }
 
 // CloudServicesClientGetResponse contains the response from method CloudServicesClient.Get.
 type CloudServicesClientGetResponse struct {
+	// Describes the cloud service.
 	CloudService
 }
 
 // CloudServicesClientListAllResponse contains the response from method CloudServicesClient.NewListAllPager.
 type CloudServicesClientListAllResponse struct {
+	// The list operation result.
 	CloudServiceListResult
 }
 
 // CloudServicesClientListResponse contains the response from method CloudServicesClient.NewListPager.
 type CloudServicesClientListResponse struct {
+	// The list operation result.
 	CloudServiceListResult
 }
 
@@ -234,16 +283,19 @@ type CloudServicesClientStartResponse struct {
 
 // CloudServicesClientUpdateResponse contains the response from method CloudServicesClient.BeginUpdate.
 type CloudServicesClientUpdateResponse struct {
+	// Describes the cloud service.
 	CloudService
 }
 
 // CloudServicesUpdateDomainClientGetUpdateDomainResponse contains the response from method CloudServicesUpdateDomainClient.GetUpdateDomain.
 type CloudServicesUpdateDomainClientGetUpdateDomainResponse struct {
+	// Defines an update domain for the cloud service.
 	UpdateDomain
 }
 
 // CloudServicesUpdateDomainClientListUpdateDomainsResponse contains the response from method CloudServicesUpdateDomainClient.NewListUpdateDomainsPager.
 type CloudServicesUpdateDomainClientListUpdateDomainsResponse struct {
+	// The list operation result.
 	UpdateDomainListResult
 }
 
@@ -254,31 +306,39 @@ type CloudServicesUpdateDomainClientWalkUpdateDomainResponse struct {
 
 // CommunityGalleriesClientGetResponse contains the response from method CommunityGalleriesClient.Get.
 type CommunityGalleriesClientGetResponse struct {
+	// Specifies information about the Community Gallery that you want to create or update.
 	CommunityGallery
 }
 
 // CommunityGalleryImageVersionsClientGetResponse contains the response from method CommunityGalleryImageVersionsClient.Get.
 type CommunityGalleryImageVersionsClientGetResponse struct {
+	// Specifies information about the gallery image version that you want to create or update.
 	CommunityGalleryImageVersion
 }
 
 // CommunityGalleryImageVersionsClientListResponse contains the response from method CommunityGalleryImageVersionsClient.NewListPager.
 type CommunityGalleryImageVersionsClientListResponse struct {
+	// The List Community Gallery Image versions operation response.
 	CommunityGalleryImageVersionList
 }
 
 // CommunityGalleryImagesClientGetResponse contains the response from method CommunityGalleryImagesClient.Get.
 type CommunityGalleryImagesClientGetResponse struct {
+	// Specifies information about the gallery image definition that you want to create or update.
 	CommunityGalleryImage
 }
 
 // CommunityGalleryImagesClientListResponse contains the response from method CommunityGalleryImagesClient.NewListPager.
 type CommunityGalleryImagesClientListResponse struct {
+	// The List Community Gallery Images operation response.
 	CommunityGalleryImageList
 }
 
 // DedicatedHostGroupsClientCreateOrUpdateResponse contains the response from method DedicatedHostGroupsClient.CreateOrUpdate.
 type DedicatedHostGroupsClientCreateOrUpdateResponse struct {
+	// Specifies information about the dedicated host group that the dedicated hosts should be assigned to. Currently, a dedicated
+	// host can only be added to a dedicated host group at creation time. An existing dedicated host cannot be added to another
+	// dedicated host group.
 	DedicatedHostGroup
 }
 
@@ -289,26 +349,35 @@ type DedicatedHostGroupsClientDeleteResponse struct {
 
 // DedicatedHostGroupsClientGetResponse contains the response from method DedicatedHostGroupsClient.Get.
 type DedicatedHostGroupsClientGetResponse struct {
+	// Specifies information about the dedicated host group that the dedicated hosts should be assigned to. Currently, a dedicated
+	// host can only be added to a dedicated host group at creation time. An existing dedicated host cannot be added to another
+	// dedicated host group.
 	DedicatedHostGroup
 }
 
 // DedicatedHostGroupsClientListByResourceGroupResponse contains the response from method DedicatedHostGroupsClient.NewListByResourceGroupPager.
 type DedicatedHostGroupsClientListByResourceGroupResponse struct {
+	// The List Dedicated Host Group with resource group response.
 	DedicatedHostGroupListResult
 }
 
 // DedicatedHostGroupsClientListBySubscriptionResponse contains the response from method DedicatedHostGroupsClient.NewListBySubscriptionPager.
 type DedicatedHostGroupsClientListBySubscriptionResponse struct {
+	// The List Dedicated Host Group with resource group response.
 	DedicatedHostGroupListResult
 }
 
 // DedicatedHostGroupsClientUpdateResponse contains the response from method DedicatedHostGroupsClient.Update.
 type DedicatedHostGroupsClientUpdateResponse struct {
+	// Specifies information about the dedicated host group that the dedicated hosts should be assigned to. Currently, a dedicated
+	// host can only be added to a dedicated host group at creation time. An existing dedicated host cannot be added to another
+	// dedicated host group.
 	DedicatedHostGroup
 }
 
 // DedicatedHostsClientCreateOrUpdateResponse contains the response from method DedicatedHostsClient.BeginCreateOrUpdate.
 type DedicatedHostsClientCreateOrUpdateResponse struct {
+	// Specifies information about the Dedicated host.
 	DedicatedHost
 }
 
@@ -319,14 +388,27 @@ type DedicatedHostsClientDeleteResponse struct {
 
 // DedicatedHostsClientGetResponse contains the response from method DedicatedHostsClient.Get.
 type DedicatedHostsClientGetResponse struct {
+	// Specifies information about the Dedicated host.
 	DedicatedHost
 }
 
+// DedicatedHostsClientListAvailableSizesResponse contains the response from method DedicatedHostsClient.NewListAvailableSizesPager.
+type DedicatedHostsClientListAvailableSizesResponse struct {
+	// The List Dedicated Host sizes operation response.
+	DedicatedHostSizeListResult
+}
+
 // DedicatedHostsClientListByHostGroupResponse contains the response from method DedicatedHostsClient.NewListByHostGroupPager.
 type DedicatedHostsClientListByHostGroupResponse struct {
+	// The list dedicated host operation response.
 	DedicatedHostListResult
 }
 
+// DedicatedHostsClientRedeployResponse contains the response from method DedicatedHostsClient.BeginRedeploy.
+type DedicatedHostsClientRedeployResponse struct {
+	// placeholder for future response values
+}
+
 // DedicatedHostsClientRestartResponse contains the response from method DedicatedHostsClient.BeginRestart.
 type DedicatedHostsClientRestartResponse struct {
 	// placeholder for future response values
@@ -334,11 +416,13 @@ type DedicatedHostsClientRestartResponse struct {
 
 // DedicatedHostsClientUpdateResponse contains the response from method DedicatedHostsClient.BeginUpdate.
 type DedicatedHostsClientUpdateResponse struct {
+	// Specifies information about the Dedicated host.
 	DedicatedHost
 }
 
 // DiskAccessesClientCreateOrUpdateResponse contains the response from method DiskAccessesClient.BeginCreateOrUpdate.
 type DiskAccessesClientCreateOrUpdateResponse struct {
+	// disk access resource.
 	DiskAccess
 }
 
@@ -354,46 +438,55 @@ type DiskAccessesClientDeleteResponse struct {
 
 // DiskAccessesClientGetAPrivateEndpointConnectionResponse contains the response from method DiskAccessesClient.GetAPrivateEndpointConnection.
 type DiskAccessesClientGetAPrivateEndpointConnectionResponse struct {
+	// The Private Endpoint Connection resource.
 	PrivateEndpointConnection
 }
 
 // DiskAccessesClientGetPrivateLinkResourcesResponse contains the response from method DiskAccessesClient.GetPrivateLinkResources.
 type DiskAccessesClientGetPrivateLinkResourcesResponse struct {
+	// A list of private link resources
 	PrivateLinkResourceListResult
 }
 
 // DiskAccessesClientGetResponse contains the response from method DiskAccessesClient.Get.
 type DiskAccessesClientGetResponse struct {
+	// disk access resource.
 	DiskAccess
 }
 
 // DiskAccessesClientListByResourceGroupResponse contains the response from method DiskAccessesClient.NewListByResourceGroupPager.
 type DiskAccessesClientListByResourceGroupResponse struct {
+	// The List disk access operation response.
 	DiskAccessList
 }
 
 // DiskAccessesClientListPrivateEndpointConnectionsResponse contains the response from method DiskAccessesClient.NewListPrivateEndpointConnectionsPager.
 type DiskAccessesClientListPrivateEndpointConnectionsResponse struct {
+	// A list of private link resources
 	PrivateEndpointConnectionListResult
 }
 
 // DiskAccessesClientListResponse contains the response from method DiskAccessesClient.NewListPager.
 type DiskAccessesClientListResponse struct {
+	// The List disk access operation response.
 	DiskAccessList
 }
 
 // DiskAccessesClientUpdateAPrivateEndpointConnectionResponse contains the response from method DiskAccessesClient.BeginUpdateAPrivateEndpointConnection.
 type DiskAccessesClientUpdateAPrivateEndpointConnectionResponse struct {
+	// The Private Endpoint Connection resource.
 	PrivateEndpointConnection
 }
 
 // DiskAccessesClientUpdateResponse contains the response from method DiskAccessesClient.BeginUpdate.
 type DiskAccessesClientUpdateResponse struct {
+	// disk access resource.
 	DiskAccess
 }
 
 // DiskEncryptionSetsClientCreateOrUpdateResponse contains the response from method DiskEncryptionSetsClient.BeginCreateOrUpdate.
 type DiskEncryptionSetsClientCreateOrUpdateResponse struct {
+	// disk encryption set resource.
 	DiskEncryptionSet
 }
 
@@ -404,41 +497,49 @@ type DiskEncryptionSetsClientDeleteResponse struct {
 
 // DiskEncryptionSetsClientGetResponse contains the response from method DiskEncryptionSetsClient.Get.
 type DiskEncryptionSetsClientGetResponse struct {
+	// disk encryption set resource.
 	DiskEncryptionSet
 }
 
 // DiskEncryptionSetsClientListAssociatedResourcesResponse contains the response from method DiskEncryptionSetsClient.NewListAssociatedResourcesPager.
 type DiskEncryptionSetsClientListAssociatedResourcesResponse struct {
+	// The List resources which are encrypted with the disk encryption set.
 	ResourceURIList
 }
 
 // DiskEncryptionSetsClientListByResourceGroupResponse contains the response from method DiskEncryptionSetsClient.NewListByResourceGroupPager.
 type DiskEncryptionSetsClientListByResourceGroupResponse struct {
+	// The List disk encryption set operation response.
 	DiskEncryptionSetList
 }
 
 // DiskEncryptionSetsClientListResponse contains the response from method DiskEncryptionSetsClient.NewListPager.
 type DiskEncryptionSetsClientListResponse struct {
+	// The List disk encryption set operation response.
 	DiskEncryptionSetList
 }
 
 // DiskEncryptionSetsClientUpdateResponse contains the response from method DiskEncryptionSetsClient.BeginUpdate.
 type DiskEncryptionSetsClientUpdateResponse struct {
+	// disk encryption set resource.
 	DiskEncryptionSet
 }
 
 // DiskRestorePointClientGetResponse contains the response from method DiskRestorePointClient.Get.
 type DiskRestorePointClientGetResponse struct {
+	// Properties of disk restore point
 	DiskRestorePoint
 }
 
 // DiskRestorePointClientGrantAccessResponse contains the response from method DiskRestorePointClient.BeginGrantAccess.
 type DiskRestorePointClientGrantAccessResponse struct {
+	// A disk access SAS uri.
 	AccessURI
 }
 
 // DiskRestorePointClientListByRestorePointResponse contains the response from method DiskRestorePointClient.NewListByRestorePointPager.
 type DiskRestorePointClientListByRestorePointResponse struct {
+	// The List Disk Restore Points operation response.
 	DiskRestorePointList
 }
 
@@ -449,6 +550,7 @@ type DiskRestorePointClientRevokeAccessResponse struct {
 
 // DisksClientCreateOrUpdateResponse contains the response from method DisksClient.BeginCreateOrUpdate.
 type DisksClientCreateOrUpdateResponse struct {
+	// Disk resource.
 	Disk
 }
 
@@ -459,21 +561,25 @@ type DisksClientDeleteResponse struct {
 
 // DisksClientGetResponse contains the response from method DisksClient.Get.
 type DisksClientGetResponse struct {
+	// Disk resource.
 	Disk
 }
 
 // DisksClientGrantAccessResponse contains the response from method DisksClient.BeginGrantAccess.
 type DisksClientGrantAccessResponse struct {
+	// A disk access SAS uri.
 	AccessURI
 }
 
 // DisksClientListByResourceGroupResponse contains the response from method DisksClient.NewListByResourceGroupPager.
 type DisksClientListByResourceGroupResponse struct {
+	// The List Disks operation response.
 	DiskList
 }
 
 // DisksClientListResponse contains the response from method DisksClient.NewListPager.
 type DisksClientListResponse struct {
+	// The List Disks operation response.
 	DiskList
 }
 
@@ -484,11 +590,13 @@ type DisksClientRevokeAccessResponse struct {
 
 // DisksClientUpdateResponse contains the response from method DisksClient.BeginUpdate.
 type DisksClientUpdateResponse struct {
+	// Disk resource.
 	Disk
 }
 
 // GalleriesClientCreateOrUpdateResponse contains the response from method GalleriesClient.BeginCreateOrUpdate.
 type GalleriesClientCreateOrUpdateResponse struct {
+	// Specifies information about the Shared Image Gallery that you want to create or update.
 	Gallery
 }
 
@@ -499,26 +607,31 @@ type GalleriesClientDeleteResponse struct {
 
 // GalleriesClientGetResponse contains the response from method GalleriesClient.Get.
 type GalleriesClientGetResponse struct {
+	// Specifies information about the Shared Image Gallery that you want to create or update.
 	Gallery
 }
 
 // GalleriesClientListByResourceGroupResponse contains the response from method GalleriesClient.NewListByResourceGroupPager.
 type GalleriesClientListByResourceGroupResponse struct {
+	// The List Galleries operation response.
 	GalleryList
 }
 
 // GalleriesClientListResponse contains the response from method GalleriesClient.NewListPager.
 type GalleriesClientListResponse struct {
+	// The List Galleries operation response.
 	GalleryList
 }
 
 // GalleriesClientUpdateResponse contains the response from method GalleriesClient.BeginUpdate.
 type GalleriesClientUpdateResponse struct {
+	// Specifies information about the Shared Image Gallery that you want to create or update.
 	Gallery
 }
 
 // GalleryApplicationVersionsClientCreateOrUpdateResponse contains the response from method GalleryApplicationVersionsClient.BeginCreateOrUpdate.
 type GalleryApplicationVersionsClientCreateOrUpdateResponse struct {
+	// Specifies information about the gallery Application Version that you want to create or update.
 	GalleryApplicationVersion
 }
 
@@ -529,21 +642,25 @@ type GalleryApplicationVersionsClientDeleteResponse struct {
 
 // GalleryApplicationVersionsClientGetResponse contains the response from method GalleryApplicationVersionsClient.Get.
 type GalleryApplicationVersionsClientGetResponse struct {
+	// Specifies information about the gallery Application Version that you want to create or update.
 	GalleryApplicationVersion
 }
 
 // GalleryApplicationVersionsClientListByGalleryApplicationResponse contains the response from method GalleryApplicationVersionsClient.NewListByGalleryApplicationPager.
 type GalleryApplicationVersionsClientListByGalleryApplicationResponse struct {
+	// The List Gallery Application version operation response.
 	GalleryApplicationVersionList
 }
 
 // GalleryApplicationVersionsClientUpdateResponse contains the response from method GalleryApplicationVersionsClient.BeginUpdate.
 type GalleryApplicationVersionsClientUpdateResponse struct {
+	// Specifies information about the gallery Application Version that you want to create or update.
 	GalleryApplicationVersion
 }
 
 // GalleryApplicationsClientCreateOrUpdateResponse contains the response from method GalleryApplicationsClient.BeginCreateOrUpdate.
 type GalleryApplicationsClientCreateOrUpdateResponse struct {
+	// Specifies information about the gallery Application Definition that you want to create or update.
 	GalleryApplication
 }
 
@@ -554,21 +671,25 @@ type GalleryApplicationsClientDeleteResponse struct {
 
 // GalleryApplicationsClientGetResponse contains the response from method GalleryApplicationsClient.Get.
 type GalleryApplicationsClientGetResponse struct {
+	// Specifies information about the gallery Application Definition that you want to create or update.
 	GalleryApplication
 }
 
 // GalleryApplicationsClientListByGalleryResponse contains the response from method GalleryApplicationsClient.NewListByGalleryPager.
 type GalleryApplicationsClientListByGalleryResponse struct {
+	// The List Gallery Applications operation response.
 	GalleryApplicationList
 }
 
 // GalleryApplicationsClientUpdateResponse contains the response from method GalleryApplicationsClient.BeginUpdate.
 type GalleryApplicationsClientUpdateResponse struct {
+	// Specifies information about the gallery Application Definition that you want to create or update.
 	GalleryApplication
 }
 
 // GalleryImageVersionsClientCreateOrUpdateResponse contains the response from method GalleryImageVersionsClient.BeginCreateOrUpdate.
 type GalleryImageVersionsClientCreateOrUpdateResponse struct {
+	// Specifies information about the gallery image version that you want to create or update.
 	GalleryImageVersion
 }
 
@@ -579,21 +700,25 @@ type GalleryImageVersionsClientDeleteResponse struct {
 
 // GalleryImageVersionsClientGetResponse contains the response from method GalleryImageVersionsClient.Get.
 type GalleryImageVersionsClientGetResponse struct {
+	// Specifies information about the gallery image version that you want to create or update.
 	GalleryImageVersion
 }
 
 // GalleryImageVersionsClientListByGalleryImageResponse contains the response from method GalleryImageVersionsClient.NewListByGalleryImagePager.
 type GalleryImageVersionsClientListByGalleryImageResponse struct {
+	// The List Gallery Image version operation response.
 	GalleryImageVersionList
 }
 
 // GalleryImageVersionsClientUpdateResponse contains the response from method GalleryImageVersionsClient.BeginUpdate.
 type GalleryImageVersionsClientUpdateResponse struct {
+	// Specifies information about the gallery image version that you want to create or update.
 	GalleryImageVersion
 }
 
 // GalleryImagesClientCreateOrUpdateResponse contains the response from method GalleryImagesClient.BeginCreateOrUpdate.
 type GalleryImagesClientCreateOrUpdateResponse struct {
+	// Specifies information about the gallery image definition that you want to create or update.
 	GalleryImage
 }
 
@@ -604,26 +729,32 @@ type GalleryImagesClientDeleteResponse struct {
 
 // GalleryImagesClientGetResponse contains the response from method GalleryImagesClient.Get.
 type GalleryImagesClientGetResponse struct {
+	// Specifies information about the gallery image definition that you want to create or update.
 	GalleryImage
 }
 
 // GalleryImagesClientListByGalleryResponse contains the response from method GalleryImagesClient.NewListByGalleryPager.
 type GalleryImagesClientListByGalleryResponse struct {
+	// The List Gallery Images operation response.
 	GalleryImageList
 }
 
 // GalleryImagesClientUpdateResponse contains the response from method GalleryImagesClient.BeginUpdate.
 type GalleryImagesClientUpdateResponse struct {
+	// Specifies information about the gallery image definition that you want to create or update.
 	GalleryImage
 }
 
 // GallerySharingProfileClientUpdateResponse contains the response from method GallerySharingProfileClient.BeginUpdate.
 type GallerySharingProfileClientUpdateResponse struct {
+	// Specifies information about the gallery sharing profile update.
 	SharingUpdate
 }
 
 // ImagesClientCreateOrUpdateResponse contains the response from method ImagesClient.BeginCreateOrUpdate.
 type ImagesClientCreateOrUpdateResponse struct {
+	// The source user image virtual hard disk. The virtual hard disk will be copied before being attached to the virtual machine.
+	// If SourceImage is provided, the destination virtual hard drive must not exist.
 	Image
 }
 
@@ -634,41 +765,51 @@ type ImagesClientDeleteResponse struct {
 
 // ImagesClientGetResponse contains the response from method ImagesClient.Get.
 type ImagesClientGetResponse struct {
+	// The source user image virtual hard disk. The virtual hard disk will be copied before being attached to the virtual machine.
+	// If SourceImage is provided, the destination virtual hard drive must not exist.
 	Image
 }
 
 // ImagesClientListByResourceGroupResponse contains the response from method ImagesClient.NewListByResourceGroupPager.
 type ImagesClientListByResourceGroupResponse struct {
+	// The List Image operation response.
 	ImageListResult
 }
 
 // ImagesClientListResponse contains the response from method ImagesClient.NewListPager.
 type ImagesClientListResponse struct {
+	// The List Image operation response.
 	ImageListResult
 }
 
 // ImagesClientUpdateResponse contains the response from method ImagesClient.BeginUpdate.
 type ImagesClientUpdateResponse struct {
+	// The source user image virtual hard disk. The virtual hard disk will be copied before being attached to the virtual machine.
+	// If SourceImage is provided, the destination virtual hard drive must not exist.
 	Image
 }
 
 // LogAnalyticsClientExportRequestRateByIntervalResponse contains the response from method LogAnalyticsClient.BeginExportRequestRateByInterval.
 type LogAnalyticsClientExportRequestRateByIntervalResponse struct {
+	// LogAnalytics operation status response
 	LogAnalyticsOperationResult
 }
 
 // LogAnalyticsClientExportThrottledRequestsResponse contains the response from method LogAnalyticsClient.BeginExportThrottledRequests.
 type LogAnalyticsClientExportThrottledRequestsResponse struct {
+	// LogAnalytics operation status response
 	LogAnalyticsOperationResult
 }
 
 // OperationsClientListResponse contains the response from method OperationsClient.NewListPager.
 type OperationsClientListResponse struct {
+	// The List Compute Operation operation response.
 	OperationListResult
 }
 
 // ProximityPlacementGroupsClientCreateOrUpdateResponse contains the response from method ProximityPlacementGroupsClient.CreateOrUpdate.
 type ProximityPlacementGroupsClientCreateOrUpdateResponse struct {
+	// Specifies information about the proximity placement group.
 	ProximityPlacementGroup
 }
 
@@ -679,31 +820,37 @@ type ProximityPlacementGroupsClientDeleteResponse struct {
 
 // ProximityPlacementGroupsClientGetResponse contains the response from method ProximityPlacementGroupsClient.Get.
 type ProximityPlacementGroupsClientGetResponse struct {
+	// Specifies information about the proximity placement group.
 	ProximityPlacementGroup
 }
 
 // ProximityPlacementGroupsClientListByResourceGroupResponse contains the response from method ProximityPlacementGroupsClient.NewListByResourceGroupPager.
 type ProximityPlacementGroupsClientListByResourceGroupResponse struct {
+	// The List Proximity Placement Group operation response.
 	ProximityPlacementGroupListResult
 }
 
 // ProximityPlacementGroupsClientListBySubscriptionResponse contains the response from method ProximityPlacementGroupsClient.NewListBySubscriptionPager.
 type ProximityPlacementGroupsClientListBySubscriptionResponse struct {
+	// The List Proximity Placement Group operation response.
 	ProximityPlacementGroupListResult
 }
 
 // ProximityPlacementGroupsClientUpdateResponse contains the response from method ProximityPlacementGroupsClient.Update.
 type ProximityPlacementGroupsClientUpdateResponse struct {
+	// Specifies information about the proximity placement group.
 	ProximityPlacementGroup
 }
 
 // ResourceSKUsClientListResponse contains the response from method ResourceSKUsClient.NewListPager.
 type ResourceSKUsClientListResponse struct {
+	// The List Resource Skus operation response.
 	ResourceSKUsResult
 }
 
 // RestorePointCollectionsClientCreateOrUpdateResponse contains the response from method RestorePointCollectionsClient.CreateOrUpdate.
 type RestorePointCollectionsClientCreateOrUpdateResponse struct {
+	// Create or update Restore Point collection parameters.
 	RestorePointCollection
 }
 
@@ -714,26 +861,31 @@ type RestorePointCollectionsClientDeleteResponse struct {
 
 // RestorePointCollectionsClientGetResponse contains the response from method RestorePointCollectionsClient.Get.
 type RestorePointCollectionsClientGetResponse struct {
+	// Create or update Restore Point collection parameters.
 	RestorePointCollection
 }
 
 // RestorePointCollectionsClientListAllResponse contains the response from method RestorePointCollectionsClient.NewListAllPager.
 type RestorePointCollectionsClientListAllResponse struct {
+	// The List restore point collection operation response.
 	RestorePointCollectionListResult
 }
 
 // RestorePointCollectionsClientListResponse contains the response from method RestorePointCollectionsClient.NewListPager.
 type RestorePointCollectionsClientListResponse struct {
+	// The List restore point collection operation response.
 	RestorePointCollectionListResult
 }
 
 // RestorePointCollectionsClientUpdateResponse contains the response from method RestorePointCollectionsClient.Update.
 type RestorePointCollectionsClientUpdateResponse struct {
+	// Create or update Restore Point collection parameters.
 	RestorePointCollection
 }
 
 // RestorePointsClientCreateResponse contains the response from method RestorePointsClient.BeginCreate.
 type RestorePointsClientCreateResponse struct {
+	// Restore Point details.
 	RestorePoint
 }
 
@@ -744,11 +896,13 @@ type RestorePointsClientDeleteResponse struct {
 
 // RestorePointsClientGetResponse contains the response from method RestorePointsClient.Get.
 type RestorePointsClientGetResponse struct {
+	// Restore Point details.
 	RestorePoint
 }
 
 // SSHPublicKeysClientCreateResponse contains the response from method SSHPublicKeysClient.Create.
 type SSHPublicKeysClientCreateResponse struct {
+	// Specifies information about the SSH public key.
 	SSHPublicKeyResource
 }
 
@@ -759,61 +913,73 @@ type SSHPublicKeysClientDeleteResponse struct {
 
 // SSHPublicKeysClientGenerateKeyPairResponse contains the response from method SSHPublicKeysClient.GenerateKeyPair.
 type SSHPublicKeysClientGenerateKeyPairResponse struct {
+	// Response from generation of an SSH key pair.
 	SSHPublicKeyGenerateKeyPairResult
 }
 
 // SSHPublicKeysClientGetResponse contains the response from method SSHPublicKeysClient.Get.
 type SSHPublicKeysClientGetResponse struct {
+	// Specifies information about the SSH public key.
 	SSHPublicKeyResource
 }
 
 // SSHPublicKeysClientListByResourceGroupResponse contains the response from method SSHPublicKeysClient.NewListByResourceGroupPager.
 type SSHPublicKeysClientListByResourceGroupResponse struct {
+	// The list SSH public keys operation response.
 	SSHPublicKeysGroupListResult
 }
 
 // SSHPublicKeysClientListBySubscriptionResponse contains the response from method SSHPublicKeysClient.NewListBySubscriptionPager.
 type SSHPublicKeysClientListBySubscriptionResponse struct {
+	// The list SSH public keys operation response.
 	SSHPublicKeysGroupListResult
 }
 
 // SSHPublicKeysClientUpdateResponse contains the response from method SSHPublicKeysClient.Update.
 type SSHPublicKeysClientUpdateResponse struct {
+	// Specifies information about the SSH public key.
 	SSHPublicKeyResource
 }
 
 // SharedGalleriesClientGetResponse contains the response from method SharedGalleriesClient.Get.
 type SharedGalleriesClientGetResponse struct {
+	// Specifies information about the Shared Gallery that you want to create or update.
 	SharedGallery
 }
 
 // SharedGalleriesClientListResponse contains the response from method SharedGalleriesClient.NewListPager.
 type SharedGalleriesClientListResponse struct {
+	// The List Shared Galleries operation response.
 	SharedGalleryList
 }
 
 // SharedGalleryImageVersionsClientGetResponse contains the response from method SharedGalleryImageVersionsClient.Get.
 type SharedGalleryImageVersionsClientGetResponse struct {
+	// Specifies information about the gallery image version that you want to create or update.
 	SharedGalleryImageVersion
 }
 
 // SharedGalleryImageVersionsClientListResponse contains the response from method SharedGalleryImageVersionsClient.NewListPager.
 type SharedGalleryImageVersionsClientListResponse struct {
+	// The List Shared Gallery Image versions operation response.
 	SharedGalleryImageVersionList
 }
 
 // SharedGalleryImagesClientGetResponse contains the response from method SharedGalleryImagesClient.Get.
 type SharedGalleryImagesClientGetResponse struct {
+	// Specifies information about the gallery image definition that you want to create or update.
 	SharedGalleryImage
 }
 
 // SharedGalleryImagesClientListResponse contains the response from method SharedGalleryImagesClient.NewListPager.
 type SharedGalleryImagesClientListResponse struct {
+	// The List Shared Gallery Images operation response.
 	SharedGalleryImageList
 }
 
 // SnapshotsClientCreateOrUpdateResponse contains the response from method SnapshotsClient.BeginCreateOrUpdate.
 type SnapshotsClientCreateOrUpdateResponse struct {
+	// Snapshot resource.
 	Snapshot
 }
 
@@ -824,21 +990,25 @@ type SnapshotsClientDeleteResponse struct {
 
 // SnapshotsClientGetResponse contains the response from method SnapshotsClient.Get.
 type SnapshotsClientGetResponse struct {
+	// Snapshot resource.
 	Snapshot
 }
 
 // SnapshotsClientGrantAccessResponse contains the response from method SnapshotsClient.BeginGrantAccess.
 type SnapshotsClientGrantAccessResponse struct {
+	// A disk access SAS uri.
 	AccessURI
 }
 
 // SnapshotsClientListByResourceGroupResponse contains the response from method SnapshotsClient.NewListByResourceGroupPager.
 type SnapshotsClientListByResourceGroupResponse struct {
+	// The List Snapshots operation response.
 	SnapshotList
 }
 
 // SnapshotsClientListResponse contains the response from method SnapshotsClient.NewListPager.
 type SnapshotsClientListResponse struct {
+	// The List Snapshots operation response.
 	SnapshotList
 }
 
@@ -849,16 +1019,19 @@ type SnapshotsClientRevokeAccessResponse struct {
 
 // SnapshotsClientUpdateResponse contains the response from method SnapshotsClient.BeginUpdate.
 type SnapshotsClientUpdateResponse struct {
+	// Snapshot resource.
 	Snapshot
 }
 
 // UsageClientListResponse contains the response from method UsageClient.NewListPager.
 type UsageClientListResponse struct {
+	// The List Usages operation response.
 	ListUsagesResult
 }
 
 // VirtualMachineExtensionImagesClientGetResponse contains the response from method VirtualMachineExtensionImagesClient.Get.
 type VirtualMachineExtensionImagesClientGetResponse struct {
+	// Describes a Virtual Machine Extension Image.
 	VirtualMachineExtensionImage
 }
 
@@ -876,6 +1049,7 @@ type VirtualMachineExtensionImagesClientListVersionsResponse struct {
 
 // VirtualMachineExtensionsClientCreateOrUpdateResponse contains the response from method VirtualMachineExtensionsClient.BeginCreateOrUpdate.
 type VirtualMachineExtensionsClientCreateOrUpdateResponse struct {
+	// Describes a Virtual Machine Extension.
 	VirtualMachineExtension
 }
 
@@ -886,26 +1060,31 @@ type VirtualMachineExtensionsClientDeleteResponse struct {
 
 // VirtualMachineExtensionsClientGetResponse contains the response from method VirtualMachineExtensionsClient.Get.
 type VirtualMachineExtensionsClientGetResponse struct {
+	// Describes a Virtual Machine Extension.
 	VirtualMachineExtension
 }
 
 // VirtualMachineExtensionsClientListResponse contains the response from method VirtualMachineExtensionsClient.List.
 type VirtualMachineExtensionsClientListResponse struct {
+	// The List Extension operation response
 	VirtualMachineExtensionsListResult
 }
 
 // VirtualMachineExtensionsClientUpdateResponse contains the response from method VirtualMachineExtensionsClient.BeginUpdate.
 type VirtualMachineExtensionsClientUpdateResponse struct {
+	// Describes a Virtual Machine Extension.
 	VirtualMachineExtension
 }
 
 // VirtualMachineImagesClientGetResponse contains the response from method VirtualMachineImagesClient.Get.
 type VirtualMachineImagesClientGetResponse struct {
+	// Describes a Virtual Machine Image.
 	VirtualMachineImage
 }
 
 // VirtualMachineImagesClientListByEdgeZoneResponse contains the response from method VirtualMachineImagesClient.ListByEdgeZone.
 type VirtualMachineImagesClientListByEdgeZoneResponse struct {
+	// The List VmImages in EdgeZone operation response.
 	VMImagesInEdgeZoneListResult
 }
 
@@ -935,6 +1114,7 @@ type VirtualMachineImagesClientListSKUsResponse struct {
 
 // VirtualMachineImagesEdgeZoneClientGetResponse contains the response from method VirtualMachineImagesEdgeZoneClient.Get.
 type VirtualMachineImagesEdgeZoneClientGetResponse struct {
+	// Describes a Virtual Machine Image.
 	VirtualMachineImage
 }
 
@@ -964,6 +1144,7 @@ type VirtualMachineImagesEdgeZoneClientListSKUsResponse struct {
 
 // VirtualMachineRunCommandsClientCreateOrUpdateResponse contains the response from method VirtualMachineRunCommandsClient.BeginCreateOrUpdate.
 type VirtualMachineRunCommandsClientCreateOrUpdateResponse struct {
+	// Describes a Virtual Machine run command.
 	VirtualMachineRunCommand
 }
 
@@ -974,31 +1155,37 @@ type VirtualMachineRunCommandsClientDeleteResponse struct {
 
 // VirtualMachineRunCommandsClientGetByVirtualMachineResponse contains the response from method VirtualMachineRunCommandsClient.GetByVirtualMachine.
 type VirtualMachineRunCommandsClientGetByVirtualMachineResponse struct {
+	// Describes a Virtual Machine run command.
 	VirtualMachineRunCommand
 }
 
 // VirtualMachineRunCommandsClientGetResponse contains the response from method VirtualMachineRunCommandsClient.Get.
 type VirtualMachineRunCommandsClientGetResponse struct {
+	// Describes the properties of a Run Command.
 	RunCommandDocument
 }
 
 // VirtualMachineRunCommandsClientListByVirtualMachineResponse contains the response from method VirtualMachineRunCommandsClient.NewListByVirtualMachinePager.
 type VirtualMachineRunCommandsClientListByVirtualMachineResponse struct {
+	// The List run command operation response
 	VirtualMachineRunCommandsListResult
 }
 
 // VirtualMachineRunCommandsClientListResponse contains the response from method VirtualMachineRunCommandsClient.NewListPager.
 type VirtualMachineRunCommandsClientListResponse struct {
+	// The List Virtual Machine operation response.
 	RunCommandListResult
 }
 
 // VirtualMachineRunCommandsClientUpdateResponse contains the response from method VirtualMachineRunCommandsClient.BeginUpdate.
 type VirtualMachineRunCommandsClientUpdateResponse struct {
+	// Describes a Virtual Machine run command.
 	VirtualMachineRunCommand
 }
 
 // VirtualMachineScaleSetExtensionsClientCreateOrUpdateResponse contains the response from method VirtualMachineScaleSetExtensionsClient.BeginCreateOrUpdate.
 type VirtualMachineScaleSetExtensionsClientCreateOrUpdateResponse struct {
+	// Describes a Virtual Machine Scale Set Extension.
 	VirtualMachineScaleSetExtension
 }
 
@@ -1009,16 +1196,19 @@ type VirtualMachineScaleSetExtensionsClientDeleteResponse struct {
 
 // VirtualMachineScaleSetExtensionsClientGetResponse contains the response from method VirtualMachineScaleSetExtensionsClient.Get.
 type VirtualMachineScaleSetExtensionsClientGetResponse struct {
+	// Describes a Virtual Machine Scale Set Extension.
 	VirtualMachineScaleSetExtension
 }
 
 // VirtualMachineScaleSetExtensionsClientListResponse contains the response from method VirtualMachineScaleSetExtensionsClient.NewListPager.
 type VirtualMachineScaleSetExtensionsClientListResponse struct {
+	// The List VM scale set extension operation response.
 	VirtualMachineScaleSetExtensionListResult
 }
 
 // VirtualMachineScaleSetExtensionsClientUpdateResponse contains the response from method VirtualMachineScaleSetExtensionsClient.BeginUpdate.
 type VirtualMachineScaleSetExtensionsClientUpdateResponse struct {
+	// Describes a Virtual Machine Scale Set Extension.
 	VirtualMachineScaleSetExtension
 }
 
@@ -1029,6 +1219,7 @@ type VirtualMachineScaleSetRollingUpgradesClientCancelResponse struct {
 
 // VirtualMachineScaleSetRollingUpgradesClientGetLatestResponse contains the response from method VirtualMachineScaleSetRollingUpgradesClient.GetLatest.
 type VirtualMachineScaleSetRollingUpgradesClientGetLatestResponse struct {
+	// The status of the latest virtual machine scale set rolling upgrade.
 	RollingUpgradeStatusInfo
 }
 
@@ -1044,6 +1235,7 @@ type VirtualMachineScaleSetRollingUpgradesClientStartOSUpgradeResponse struct {
 
 // VirtualMachineScaleSetVMExtensionsClientCreateOrUpdateResponse contains the response from method VirtualMachineScaleSetVMExtensionsClient.BeginCreateOrUpdate.
 type VirtualMachineScaleSetVMExtensionsClientCreateOrUpdateResponse struct {
+	// Describes a VMSS VM Extension.
 	VirtualMachineScaleSetVMExtension
 }
 
@@ -1054,21 +1246,25 @@ type VirtualMachineScaleSetVMExtensionsClientDeleteResponse struct {
 
 // VirtualMachineScaleSetVMExtensionsClientGetResponse contains the response from method VirtualMachineScaleSetVMExtensionsClient.Get.
 type VirtualMachineScaleSetVMExtensionsClientGetResponse struct {
+	// Describes a VMSS VM Extension.
 	VirtualMachineScaleSetVMExtension
 }
 
 // VirtualMachineScaleSetVMExtensionsClientListResponse contains the response from method VirtualMachineScaleSetVMExtensionsClient.List.
 type VirtualMachineScaleSetVMExtensionsClientListResponse struct {
+	// The List VMSS VM Extension operation response
 	VirtualMachineScaleSetVMExtensionsListResult
 }
 
 // VirtualMachineScaleSetVMExtensionsClientUpdateResponse contains the response from method VirtualMachineScaleSetVMExtensionsClient.BeginUpdate.
 type VirtualMachineScaleSetVMExtensionsClientUpdateResponse struct {
+	// Describes a VMSS VM Extension.
 	VirtualMachineScaleSetVMExtension
 }
 
 // VirtualMachineScaleSetVMRunCommandsClientCreateOrUpdateResponse contains the response from method VirtualMachineScaleSetVMRunCommandsClient.BeginCreateOrUpdate.
 type VirtualMachineScaleSetVMRunCommandsClientCreateOrUpdateResponse struct {
+	// Describes a Virtual Machine run command.
 	VirtualMachineRunCommand
 }
 
@@ -1079,19 +1275,33 @@ type VirtualMachineScaleSetVMRunCommandsClientDeleteResponse struct {
 
 // VirtualMachineScaleSetVMRunCommandsClientGetResponse contains the response from method VirtualMachineScaleSetVMRunCommandsClient.Get.
 type VirtualMachineScaleSetVMRunCommandsClientGetResponse struct {
+	// Describes a Virtual Machine run command.
 	VirtualMachineRunCommand
 }
 
 // VirtualMachineScaleSetVMRunCommandsClientListResponse contains the response from method VirtualMachineScaleSetVMRunCommandsClient.NewListPager.
 type VirtualMachineScaleSetVMRunCommandsClientListResponse struct {
+	// The List run command operation response
 	VirtualMachineRunCommandsListResult
 }
 
 // VirtualMachineScaleSetVMRunCommandsClientUpdateResponse contains the response from method VirtualMachineScaleSetVMRunCommandsClient.BeginUpdate.
 type VirtualMachineScaleSetVMRunCommandsClientUpdateResponse struct {
+	// Describes a Virtual Machine run command.
 	VirtualMachineRunCommand
 }
 
+// VirtualMachineScaleSetVMsClientApproveRollingUpgradeResponse contains the response from method VirtualMachineScaleSetVMsClient.BeginApproveRollingUpgrade.
+type VirtualMachineScaleSetVMsClientApproveRollingUpgradeResponse struct {
+	// placeholder for future response values
+}
+
+// VirtualMachineScaleSetVMsClientAttachDetachDataDisksResponse contains the response from method VirtualMachineScaleSetVMsClient.BeginAttachDetachDataDisks.
+type VirtualMachineScaleSetVMsClientAttachDetachDataDisksResponse struct {
+	// Specifies the storage settings for the virtual machine disks.
+	StorageProfile
+}
+
 // VirtualMachineScaleSetVMsClientDeallocateResponse contains the response from method VirtualMachineScaleSetVMsClient.BeginDeallocate.
 type VirtualMachineScaleSetVMsClientDeallocateResponse struct {
 	// placeholder for future response values
@@ -1104,16 +1314,19 @@ type VirtualMachineScaleSetVMsClientDeleteResponse struct {
 
 // VirtualMachineScaleSetVMsClientGetInstanceViewResponse contains the response from method VirtualMachineScaleSetVMsClient.GetInstanceView.
 type VirtualMachineScaleSetVMsClientGetInstanceViewResponse struct {
+	// The instance view of a virtual machine scale set VM.
 	VirtualMachineScaleSetVMInstanceView
 }
 
 // VirtualMachineScaleSetVMsClientGetResponse contains the response from method VirtualMachineScaleSetVMsClient.Get.
 type VirtualMachineScaleSetVMsClientGetResponse struct {
+	// Describes a virtual machine scale set virtual machine.
 	VirtualMachineScaleSetVM
 }
 
 // VirtualMachineScaleSetVMsClientListResponse contains the response from method VirtualMachineScaleSetVMsClient.NewListPager.
 type VirtualMachineScaleSetVMsClientListResponse struct {
+	// The List Virtual Machine Scale Set VMs operation response.
 	VirtualMachineScaleSetVMListResult
 }
 
@@ -1149,6 +1362,7 @@ type VirtualMachineScaleSetVMsClientRestartResponse struct {
 
 // VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataResponse contains the response from method VirtualMachineScaleSetVMsClient.RetrieveBootDiagnosticsData.
 type VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataResponse struct {
+	// The SAS URIs of the console screenshot and serial log blobs.
 	RetrieveBootDiagnosticsDataResult
 }
 
@@ -1169,9 +1383,15 @@ type VirtualMachineScaleSetVMsClientStartResponse struct {
 
 // VirtualMachineScaleSetVMsClientUpdateResponse contains the response from method VirtualMachineScaleSetVMsClient.BeginUpdate.
 type VirtualMachineScaleSetVMsClientUpdateResponse struct {
+	// Describes a virtual machine scale set virtual machine.
 	VirtualMachineScaleSetVM
 }
 
+// VirtualMachineScaleSetsClientApproveRollingUpgradeResponse contains the response from method VirtualMachineScaleSetsClient.BeginApproveRollingUpgrade.
+type VirtualMachineScaleSetsClientApproveRollingUpgradeResponse struct {
+	// placeholder for future response values
+}
+
 // VirtualMachineScaleSetsClientConvertToSinglePlacementGroupResponse contains the response from method VirtualMachineScaleSetsClient.ConvertToSinglePlacementGroup.
 type VirtualMachineScaleSetsClientConvertToSinglePlacementGroupResponse struct {
 	// placeholder for future response values
@@ -1179,6 +1399,7 @@ type VirtualMachineScaleSetsClientConvertToSinglePlacementGroupResponse struct {
 
 // VirtualMachineScaleSetsClientCreateOrUpdateResponse contains the response from method VirtualMachineScaleSetsClient.BeginCreateOrUpdate.
 type VirtualMachineScaleSetsClientCreateOrUpdateResponse struct {
+	// Describes a Virtual Machine Scale Set.
 	VirtualMachineScaleSet
 }
 
@@ -1200,41 +1421,49 @@ type VirtualMachineScaleSetsClientDeleteResponse struct {
 // VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkResponse contains the response from method
 // VirtualMachineScaleSetsClient.ForceRecoveryServiceFabricPlatformUpdateDomainWalk.
 type VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkResponse struct {
+	// Response after calling a manual recovery walk
 	RecoveryWalkResponse
 }
 
 // VirtualMachineScaleSetsClientGetInstanceViewResponse contains the response from method VirtualMachineScaleSetsClient.GetInstanceView.
 type VirtualMachineScaleSetsClientGetInstanceViewResponse struct {
+	// The instance view of a virtual machine scale set.
 	VirtualMachineScaleSetInstanceView
 }
 
 // VirtualMachineScaleSetsClientGetOSUpgradeHistoryResponse contains the response from method VirtualMachineScaleSetsClient.NewGetOSUpgradeHistoryPager.
 type VirtualMachineScaleSetsClientGetOSUpgradeHistoryResponse struct {
+	// List of Virtual Machine Scale Set OS Upgrade History operation response.
 	VirtualMachineScaleSetListOSUpgradeHistory
 }
 
 // VirtualMachineScaleSetsClientGetResponse contains the response from method VirtualMachineScaleSetsClient.Get.
 type VirtualMachineScaleSetsClientGetResponse struct {
+	// Describes a Virtual Machine Scale Set.
 	VirtualMachineScaleSet
 }
 
 // VirtualMachineScaleSetsClientListAllResponse contains the response from method VirtualMachineScaleSetsClient.NewListAllPager.
 type VirtualMachineScaleSetsClientListAllResponse struct {
+	// The List Virtual Machine operation response.
 	VirtualMachineScaleSetListWithLinkResult
 }
 
 // VirtualMachineScaleSetsClientListByLocationResponse contains the response from method VirtualMachineScaleSetsClient.NewListByLocationPager.
 type VirtualMachineScaleSetsClientListByLocationResponse struct {
+	// The List Virtual Machine operation response.
 	VirtualMachineScaleSetListResult
 }
 
 // VirtualMachineScaleSetsClientListResponse contains the response from method VirtualMachineScaleSetsClient.NewListPager.
 type VirtualMachineScaleSetsClientListResponse struct {
+	// The List Virtual Machine operation response.
 	VirtualMachineScaleSetListResult
 }
 
 // VirtualMachineScaleSetsClientListSKUsResponse contains the response from method VirtualMachineScaleSetsClient.NewListSKUsPager.
 type VirtualMachineScaleSetsClientListSKUsResponse struct {
+	// The Virtual Machine Scale Set List Skus operation response.
 	VirtualMachineScaleSetListSKUsResult
 }
 
@@ -1248,6 +1477,11 @@ type VirtualMachineScaleSetsClientPowerOffResponse struct {
 	// placeholder for future response values
 }
 
+// VirtualMachineScaleSetsClientReapplyResponse contains the response from method VirtualMachineScaleSetsClient.BeginReapply.
+type VirtualMachineScaleSetsClientReapplyResponse struct {
+	// placeholder for future response values
+}
+
 // VirtualMachineScaleSetsClientRedeployResponse contains the response from method VirtualMachineScaleSetsClient.BeginRedeploy.
 type VirtualMachineScaleSetsClientRedeployResponse struct {
 	// placeholder for future response values
@@ -1285,21 +1519,31 @@ type VirtualMachineScaleSetsClientUpdateInstancesResponse struct {
 
 // VirtualMachineScaleSetsClientUpdateResponse contains the response from method VirtualMachineScaleSetsClient.BeginUpdate.
 type VirtualMachineScaleSetsClientUpdateResponse struct {
+	// Describes a Virtual Machine Scale Set.
 	VirtualMachineScaleSet
 }
 
 // VirtualMachineSizesClientListResponse contains the response from method VirtualMachineSizesClient.NewListPager.
 type VirtualMachineSizesClientListResponse struct {
+	// The List Virtual Machine operation response.
 	VirtualMachineSizeListResult
 }
 
 // VirtualMachinesClientAssessPatchesResponse contains the response from method VirtualMachinesClient.BeginAssessPatches.
 type VirtualMachinesClientAssessPatchesResponse struct {
+	// Describes the properties of an AssessPatches result.
 	VirtualMachineAssessPatchesResult
 }
 
+// VirtualMachinesClientAttachDetachDataDisksResponse contains the response from method VirtualMachinesClient.BeginAttachDetachDataDisks.
+type VirtualMachinesClientAttachDetachDataDisksResponse struct {
+	// Specifies the storage settings for the virtual machine disks.
+	StorageProfile
+}
+
 // VirtualMachinesClientCaptureResponse contains the response from method VirtualMachinesClient.BeginCapture.
 type VirtualMachinesClientCaptureResponse struct {
+	// Output of virtual machine capture operation.
 	VirtualMachineCaptureResult
 }
 
@@ -1310,6 +1554,7 @@ type VirtualMachinesClientConvertToManagedDisksResponse struct {
 
 // VirtualMachinesClientCreateOrUpdateResponse contains the response from method VirtualMachinesClient.BeginCreateOrUpdate.
 type VirtualMachinesClientCreateOrUpdateResponse struct {
+	// Describes a Virtual Machine.
 	VirtualMachine
 }
 
@@ -1330,36 +1575,43 @@ type VirtualMachinesClientGeneralizeResponse struct {
 
 // VirtualMachinesClientGetResponse contains the response from method VirtualMachinesClient.Get.
 type VirtualMachinesClientGetResponse struct {
+	// Describes a Virtual Machine.
 	VirtualMachine
 }
 
 // VirtualMachinesClientInstallPatchesResponse contains the response from method VirtualMachinesClient.BeginInstallPatches.
 type VirtualMachinesClientInstallPatchesResponse struct {
+	// The result summary of an installation operation.
 	VirtualMachineInstallPatchesResult
 }
 
 // VirtualMachinesClientInstanceViewResponse contains the response from method VirtualMachinesClient.InstanceView.
 type VirtualMachinesClientInstanceViewResponse struct {
+	// The instance view of a virtual machine.
 	VirtualMachineInstanceView
 }
 
 // VirtualMachinesClientListAllResponse contains the response from method VirtualMachinesClient.NewListAllPager.
 type VirtualMachinesClientListAllResponse struct {
+	// The List Virtual Machine operation response.
 	VirtualMachineListResult
 }
 
 // VirtualMachinesClientListAvailableSizesResponse contains the response from method VirtualMachinesClient.NewListAvailableSizesPager.
 type VirtualMachinesClientListAvailableSizesResponse struct {
+	// The List Virtual Machine operation response.
 	VirtualMachineSizeListResult
 }
 
 // VirtualMachinesClientListByLocationResponse contains the response from method VirtualMachinesClient.NewListByLocationPager.
 type VirtualMachinesClientListByLocationResponse struct {
+	// The List Virtual Machine operation response.
 	VirtualMachineListResult
 }
 
 // VirtualMachinesClientListResponse contains the response from method VirtualMachinesClient.NewListPager.
 type VirtualMachinesClientListResponse struct {
+	// The List Virtual Machine operation response.
 	VirtualMachineListResult
 }
 
@@ -1395,6 +1647,7 @@ type VirtualMachinesClientRestartResponse struct {
 
 // VirtualMachinesClientRetrieveBootDiagnosticsDataResponse contains the response from method VirtualMachinesClient.RetrieveBootDiagnosticsData.
 type VirtualMachinesClientRetrieveBootDiagnosticsDataResponse struct {
+	// The SAS URIs of the console screenshot and serial log blobs.
 	RetrieveBootDiagnosticsDataResult
 }
 
@@ -1415,5 +1668,6 @@ type VirtualMachinesClientStartResponse struct {
 
 // VirtualMachinesClientUpdateResponse contains the response from method VirtualMachinesClient.BeginUpdate.
 type VirtualMachinesClientUpdateResponse struct {
+	// Describes a Virtual Machine.
 	VirtualMachine
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/restorepointcollections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/restorepointcollections_client.go
similarity index 81%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/restorepointcollections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/restorepointcollections_client.go
index 9d2fa6d4ac4..b07477e6da7 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/restorepointcollections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/restorepointcollections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type RestorePointCollectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewRestorePointCollectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*RestorePointCollectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".RestorePointCollectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,25 +48,32 @@ func NewRestorePointCollectionsClient(subscriptionID string, credential azcore.T
 // for more details. When updating a restore point collection, only tags may be modified.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - restorePointCollectionName - The name of the restore point collection.
 //   - parameters - Parameters supplied to the Create or Update restore point collection operation.
 //   - options - RestorePointCollectionsClientCreateOrUpdateOptions contains the optional parameters for the RestorePointCollectionsClient.CreateOrUpdate
 //     method.
 func (client *RestorePointCollectionsClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, restorePointCollectionName string, parameters RestorePointCollection, options *RestorePointCollectionsClientCreateOrUpdateOptions) (RestorePointCollectionsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "RestorePointCollectionsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, restorePointCollectionName, parameters, options)
 	if err != nil {
 		return RestorePointCollectionsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RestorePointCollectionsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return RestorePointCollectionsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return RestorePointCollectionsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -90,10 +96,13 @@ func (client *RestorePointCollectionsClient) createOrUpdateCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -109,7 +118,7 @@ func (client *RestorePointCollectionsClient) createOrUpdateHandleResponse(resp *
 // points.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - restorePointCollectionName - The name of the Restore Point Collection.
 //   - options - RestorePointCollectionsClientBeginDeleteOptions contains the optional parameters for the RestorePointCollectionsClient.BeginDelete
@@ -120,9 +129,14 @@ func (client *RestorePointCollectionsClient) BeginDelete(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[RestorePointCollectionsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RestorePointCollectionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RestorePointCollectionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RestorePointCollectionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -130,20 +144,26 @@ func (client *RestorePointCollectionsClient) BeginDelete(ctx context.Context, re
 // points.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *RestorePointCollectionsClient) deleteOperation(ctx context.Context, resourceGroupName string, restorePointCollectionName string, options *RestorePointCollectionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RestorePointCollectionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, restorePointCollectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -166,7 +186,7 @@ func (client *RestorePointCollectionsClient) deleteCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -175,24 +195,31 @@ func (client *RestorePointCollectionsClient) deleteCreateRequest(ctx context.Con
 // Get - The operation to get the restore point collection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - restorePointCollectionName - The name of the restore point collection.
 //   - options - RestorePointCollectionsClientGetOptions contains the optional parameters for the RestorePointCollectionsClient.Get
 //     method.
 func (client *RestorePointCollectionsClient) Get(ctx context.Context, resourceGroupName string, restorePointCollectionName string, options *RestorePointCollectionsClientGetOptions) (RestorePointCollectionsClientGetResponse, error) {
+	var err error
+	const operationName = "RestorePointCollectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, restorePointCollectionName, options)
 	if err != nil {
 		return RestorePointCollectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RestorePointCollectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return RestorePointCollectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return RestorePointCollectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -218,7 +245,7 @@ func (client *RestorePointCollectionsClient) getCreateRequest(ctx context.Contex
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -235,7 +262,7 @@ func (client *RestorePointCollectionsClient) getHandleResponse(resp *http.Respon
 
 // NewListPager - Gets the list of restore point collections in a resource group.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - RestorePointCollectionsClientListOptions contains the optional parameters for the RestorePointCollectionsClient.NewListPager
 //     method.
@@ -245,25 +272,20 @@ func (client *RestorePointCollectionsClient) NewListPager(resourceGroupName stri
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *RestorePointCollectionsClientListResponse) (RestorePointCollectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return RestorePointCollectionsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "RestorePointCollectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return RestorePointCollectionsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return RestorePointCollectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -283,7 +305,7 @@ func (client *RestorePointCollectionsClient) listCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -302,7 +324,7 @@ func (client *RestorePointCollectionsClient) listHandleResponse(resp *http.Respo
 // to get the next page of restore point collections. Do this till nextLink is not null to fetch all
 // the restore point collections.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - options - RestorePointCollectionsClientListAllOptions contains the optional parameters for the RestorePointCollectionsClient.NewListAllPager
 //     method.
 func (client *RestorePointCollectionsClient) NewListAllPager(options *RestorePointCollectionsClientListAllOptions) *runtime.Pager[RestorePointCollectionsClientListAllResponse] {
@@ -311,25 +333,20 @@ func (client *RestorePointCollectionsClient) NewListAllPager(options *RestorePoi
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *RestorePointCollectionsClientListAllResponse) (RestorePointCollectionsClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "RestorePointCollectionsClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return RestorePointCollectionsClientListAllResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return RestorePointCollectionsClientListAllResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return RestorePointCollectionsClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -345,7 +362,7 @@ func (client *RestorePointCollectionsClient) listAllCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -363,25 +380,32 @@ func (client *RestorePointCollectionsClient) listAllHandleResponse(resp *http.Re
 // Update - The operation to update the restore point collection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - restorePointCollectionName - The name of the restore point collection.
 //   - parameters - Parameters supplied to the Update restore point collection operation.
 //   - options - RestorePointCollectionsClientUpdateOptions contains the optional parameters for the RestorePointCollectionsClient.Update
 //     method.
 func (client *RestorePointCollectionsClient) Update(ctx context.Context, resourceGroupName string, restorePointCollectionName string, parameters RestorePointCollectionUpdate, options *RestorePointCollectionsClientUpdateOptions) (RestorePointCollectionsClientUpdateResponse, error) {
+	var err error
+	const operationName = "RestorePointCollectionsClient.Update"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, restorePointCollectionName, parameters, options)
 	if err != nil {
 		return RestorePointCollectionsClientUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RestorePointCollectionsClientUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return RestorePointCollectionsClientUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return RestorePointCollectionsClientUpdateResponse{}, err
 	}
-	return client.updateHandleResponse(resp)
+	resp, err := client.updateHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateCreateRequest creates the Update request.
@@ -404,10 +428,13 @@ func (client *RestorePointCollectionsClient) updateCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateHandleResponse handles the Update response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/restorepoints_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/restorepoints_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/restorepoints_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/restorepoints_client.go
index 724a7ac574c..7b6364f929f 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/restorepoints_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/restorepoints_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type RestorePointsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewRestorePointsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*RestorePointsClient, error) {
-	cl, err := arm.NewClient(moduleName+".RestorePointsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewRestorePointsClient(subscriptionID string, credential azcore.TokenCreden
 // BeginCreate - The operation to create the restore point. Updating properties of an existing restore point is not allowed
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - restorePointCollectionName - The name of the restore point collection.
 //   - restorePointName - The name of the restore point.
@@ -61,29 +60,40 @@ func (client *RestorePointsClient) BeginCreate(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[RestorePointsClientCreateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RestorePointsClientCreateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RestorePointsClientCreateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RestorePointsClientCreateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Create - The operation to create the restore point. Updating properties of an existing restore point is not allowed
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *RestorePointsClient) create(ctx context.Context, resourceGroupName string, restorePointCollectionName string, restorePointName string, parameters RestorePoint, options *RestorePointsClientBeginCreateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RestorePointsClient.BeginCreate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createCreateRequest(ctx, resourceGroupName, restorePointCollectionName, restorePointName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createCreateRequest creates the Create request.
@@ -110,16 +120,19 @@ func (client *RestorePointsClient) createCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - The operation to delete the restore point.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - restorePointCollectionName - The name of the Restore Point Collection.
 //   - restorePointName - The name of the restore point.
@@ -131,29 +144,40 @@ func (client *RestorePointsClient) BeginDelete(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[RestorePointsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RestorePointsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RestorePointsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RestorePointsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - The operation to delete the restore point.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *RestorePointsClient) deleteOperation(ctx context.Context, resourceGroupName string, restorePointCollectionName string, restorePointName string, options *RestorePointsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RestorePointsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, restorePointCollectionName, restorePointName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -180,7 +204,7 @@ func (client *RestorePointsClient) deleteCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -189,24 +213,31 @@ func (client *RestorePointsClient) deleteCreateRequest(ctx context.Context, reso
 // Get - The operation to get the restore point.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - restorePointCollectionName - The name of the restore point collection.
 //   - restorePointName - The name of the restore point.
 //   - options - RestorePointsClientGetOptions contains the optional parameters for the RestorePointsClient.Get method.
 func (client *RestorePointsClient) Get(ctx context.Context, resourceGroupName string, restorePointCollectionName string, restorePointName string, options *RestorePointsClientGetOptions) (RestorePointsClientGetResponse, error) {
+	var err error
+	const operationName = "RestorePointsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, restorePointCollectionName, restorePointName, options)
 	if err != nil {
 		return RestorePointsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RestorePointsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return RestorePointsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return RestorePointsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -236,7 +267,7 @@ func (client *RestorePointsClient) getCreateRequest(ctx context.Context, resourc
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sharedgalleries_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleries_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sharedgalleries_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleries_client.go
index b9a9467e6f4..4bf2d09608d 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sharedgalleries_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleries_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type SharedGalleriesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewSharedGalleriesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*SharedGalleriesClient, error) {
-	cl, err := arm.NewClient(moduleName+".SharedGalleriesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,23 +47,30 @@ func NewSharedGalleriesClient(subscriptionID string, credential azcore.TokenCred
 // Get - Get a shared gallery by subscription id or tenant id.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - location - Resource location.
 //   - galleryUniqueName - The unique name of the Shared Gallery.
 //   - options - SharedGalleriesClientGetOptions contains the optional parameters for the SharedGalleriesClient.Get method.
 func (client *SharedGalleriesClient) Get(ctx context.Context, location string, galleryUniqueName string, options *SharedGalleriesClientGetOptions) (SharedGalleriesClientGetResponse, error) {
+	var err error
+	const operationName = "SharedGalleriesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, location, galleryUniqueName, options)
 	if err != nil {
 		return SharedGalleriesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SharedGalleriesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SharedGalleriesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SharedGalleriesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -87,7 +93,7 @@ func (client *SharedGalleriesClient) getCreateRequest(ctx context.Context, locat
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -104,7 +110,7 @@ func (client *SharedGalleriesClient) getHandleResponse(resp *http.Response) (Sha
 
 // NewListPager - List shared galleries by subscription id or tenant id.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - location - Resource location.
 //   - options - SharedGalleriesClientListOptions contains the optional parameters for the SharedGalleriesClient.NewListPager
 //     method.
@@ -114,25 +120,20 @@ func (client *SharedGalleriesClient) NewListPager(location string, options *Shar
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SharedGalleriesClientListResponse) (SharedGalleriesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SharedGalleriesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return SharedGalleriesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return SharedGalleriesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SharedGalleriesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -152,7 +153,7 @@ func (client *SharedGalleriesClient) listCreateRequest(ctx context.Context, loca
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	if options != nil && options.SharedTo != nil {
 		reqQP.Set("sharedTo", string(*options.SharedTo))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sharedgalleryimages_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleryimages_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sharedgalleryimages_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleryimages_client.go
index 0f6618d263f..ad549b1406e 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sharedgalleryimages_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleryimages_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type SharedGalleryImagesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewSharedGalleryImagesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*SharedGalleryImagesClient, error) {
-	cl, err := arm.NewClient(moduleName+".SharedGalleryImagesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,24 +47,31 @@ func NewSharedGalleryImagesClient(subscriptionID string, credential azcore.Token
 // Get - Get a shared gallery image by subscription id or tenant id.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - location - Resource location.
 //   - galleryUniqueName - The unique name of the Shared Gallery.
 //   - galleryImageName - The name of the Shared Gallery Image Definition from which the Image Versions are to be listed.
 //   - options - SharedGalleryImagesClientGetOptions contains the optional parameters for the SharedGalleryImagesClient.Get method.
 func (client *SharedGalleryImagesClient) Get(ctx context.Context, location string, galleryUniqueName string, galleryImageName string, options *SharedGalleryImagesClientGetOptions) (SharedGalleryImagesClientGetResponse, error) {
+	var err error
+	const operationName = "SharedGalleryImagesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, location, galleryUniqueName, galleryImageName, options)
 	if err != nil {
 		return SharedGalleryImagesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SharedGalleryImagesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SharedGalleryImagesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SharedGalleryImagesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -92,7 +98,7 @@ func (client *SharedGalleryImagesClient) getCreateRequest(ctx context.Context, l
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -109,7 +115,7 @@ func (client *SharedGalleryImagesClient) getHandleResponse(resp *http.Response)
 
 // NewListPager - List shared gallery images by subscription id or tenant id.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - location - Resource location.
 //   - galleryUniqueName - The unique name of the Shared Gallery.
 //   - options - SharedGalleryImagesClientListOptions contains the optional parameters for the SharedGalleryImagesClient.NewListPager
@@ -120,25 +126,20 @@ func (client *SharedGalleryImagesClient) NewListPager(location string, galleryUn
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SharedGalleryImagesClientListResponse) (SharedGalleryImagesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, galleryUniqueName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SharedGalleryImagesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, galleryUniqueName, options)
+			}, nil)
 			if err != nil {
 				return SharedGalleryImagesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return SharedGalleryImagesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SharedGalleryImagesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -162,7 +163,7 @@ func (client *SharedGalleryImagesClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	if options != nil && options.SharedTo != nil {
 		reqQP.Set("sharedTo", string(*options.SharedTo))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sharedgalleryimageversions_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleryimageversions_client.go
similarity index 86%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sharedgalleryimageversions_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleryimageversions_client.go
index a688c3cbfcd..5c64dc84421 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sharedgalleryimageversions_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleryimageversions_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type SharedGalleryImageVersionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewSharedGalleryImageVersionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*SharedGalleryImageVersionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".SharedGalleryImageVersionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewSharedGalleryImageVersionsClient(subscriptionID string, credential azcor
 // Get - Get a shared gallery image version by subscription id or tenant id.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - location - Resource location.
 //   - galleryUniqueName - The unique name of the Shared Gallery.
 //   - galleryImageName - The name of the Shared Gallery Image Definition from which the Image Versions are to be listed.
@@ -58,18 +57,25 @@ func NewSharedGalleryImageVersionsClient(subscriptionID string, credential azcor
 //   - options - SharedGalleryImageVersionsClientGetOptions contains the optional parameters for the SharedGalleryImageVersionsClient.Get
 //     method.
 func (client *SharedGalleryImageVersionsClient) Get(ctx context.Context, location string, galleryUniqueName string, galleryImageName string, galleryImageVersionName string, options *SharedGalleryImageVersionsClientGetOptions) (SharedGalleryImageVersionsClientGetResponse, error) {
+	var err error
+	const operationName = "SharedGalleryImageVersionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, location, galleryUniqueName, galleryImageName, galleryImageVersionName, options)
 	if err != nil {
 		return SharedGalleryImageVersionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SharedGalleryImageVersionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SharedGalleryImageVersionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SharedGalleryImageVersionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -100,7 +106,7 @@ func (client *SharedGalleryImageVersionsClient) getCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -117,7 +123,7 @@ func (client *SharedGalleryImageVersionsClient) getHandleResponse(resp *http.Res
 
 // NewListPager - List shared gallery image versions by subscription id or tenant id.
 //
-// Generated from API version 2022-03-03
+// Generated from API version 2022-08-03
 //   - location - Resource location.
 //   - galleryUniqueName - The unique name of the Shared Gallery.
 //   - galleryImageName - The name of the Shared Gallery Image Definition from which the Image Versions are to be listed.
@@ -129,25 +135,20 @@ func (client *SharedGalleryImageVersionsClient) NewListPager(location string, ga
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SharedGalleryImageVersionsClientListResponse) (SharedGalleryImageVersionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, galleryUniqueName, galleryImageName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SharedGalleryImageVersionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, galleryUniqueName, galleryImageName, options)
+			}, nil)
 			if err != nil {
 				return SharedGalleryImageVersionsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return SharedGalleryImageVersionsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SharedGalleryImageVersionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -175,7 +176,7 @@ func (client *SharedGalleryImageVersionsClient) listCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-03-03")
+	reqQP.Set("api-version", "2022-08-03")
 	if options != nil && options.SharedTo != nil {
 		reqQP.Set("sharedTo", string(*options.SharedTo))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/snapshots_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/snapshots_client.go
similarity index 76%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/snapshots_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/snapshots_client.go
index 169c5aadea1..a0d26361362 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/snapshots_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/snapshots_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type SnapshotsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewSnapshotsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*SnapshotsClient, error) {
-	cl, err := arm.NewClient(moduleName+".SnapshotsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewSnapshotsClient(subscriptionID string, credential azcore.TokenCredential
 // BeginCreateOrUpdate - Creates or updates a snapshot.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - snapshotName - The name of the snapshot that is being created. The name can't be changed after the snapshot is created.
 //     Supported characters for the name are a-z, A-Z, 0-9, _ and -. The max name length is 80
@@ -62,29 +61,40 @@ func (client *SnapshotsClient) BeginCreateOrUpdate(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[SnapshotsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SnapshotsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SnapshotsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SnapshotsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a snapshot.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *SnapshotsClient) createOrUpdate(ctx context.Context, resourceGroupName string, snapshotName string, snapshot Snapshot, options *SnapshotsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SnapshotsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, snapshotName, snapshot, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +117,19 @@ func (client *SnapshotsClient) createOrUpdateCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, snapshot)
+	if err := runtime.MarshalAsJSON(req, snapshot); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a snapshot.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - snapshotName - The name of the snapshot that is being created. The name can't be changed after the snapshot is created.
 //     Supported characters for the name are a-z, A-Z, 0-9, _ and -. The max name length is 80
@@ -128,29 +141,40 @@ func (client *SnapshotsClient) BeginDelete(ctx context.Context, resourceGroupNam
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[SnapshotsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SnapshotsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SnapshotsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SnapshotsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a snapshot.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *SnapshotsClient) deleteOperation(ctx context.Context, resourceGroupName string, snapshotName string, options *SnapshotsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SnapshotsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, snapshotName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -173,7 +197,7 @@ func (client *SnapshotsClient) deleteCreateRequest(ctx context.Context, resource
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	return req, nil
 }
@@ -181,25 +205,32 @@ func (client *SnapshotsClient) deleteCreateRequest(ctx context.Context, resource
 // Get - Gets information about a snapshot.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - snapshotName - The name of the snapshot that is being created. The name can't be changed after the snapshot is created.
 //     Supported characters for the name are a-z, A-Z, 0-9, _ and -. The max name length is 80
 //     characters.
 //   - options - SnapshotsClientGetOptions contains the optional parameters for the SnapshotsClient.Get method.
 func (client *SnapshotsClient) Get(ctx context.Context, resourceGroupName string, snapshotName string, options *SnapshotsClientGetOptions) (SnapshotsClientGetResponse, error) {
+	var err error
+	const operationName = "SnapshotsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, snapshotName, options)
 	if err != nil {
 		return SnapshotsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SnapshotsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SnapshotsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SnapshotsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +253,7 @@ func (client *SnapshotsClient) getCreateRequest(ctx context.Context, resourceGro
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -240,7 +271,7 @@ func (client *SnapshotsClient) getHandleResponse(resp *http.Response) (Snapshots
 // BeginGrantAccess - Grants access to a snapshot.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - snapshotName - The name of the snapshot that is being created. The name can't be changed after the snapshot is created.
 //     Supported characters for the name are a-z, A-Z, 0-9, _ and -. The max name length is 80
@@ -254,31 +285,41 @@ func (client *SnapshotsClient) BeginGrantAccess(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SnapshotsClientGrantAccessResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SnapshotsClientGrantAccessResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SnapshotsClientGrantAccessResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SnapshotsClientGrantAccessResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GrantAccess - Grants access to a snapshot.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *SnapshotsClient) grantAccess(ctx context.Context, resourceGroupName string, snapshotName string, grantAccessData GrantAccessData, options *SnapshotsClientBeginGrantAccessOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SnapshotsClient.BeginGrantAccess"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.grantAccessCreateRequest(ctx, resourceGroupName, snapshotName, grantAccessData, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // grantAccessCreateRequest creates the GrantAccess request.
@@ -301,15 +342,18 @@ func (client *SnapshotsClient) grantAccessCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, grantAccessData)
+	if err := runtime.MarshalAsJSON(req, grantAccessData); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // NewListPager - Lists snapshots under a subscription.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - options - SnapshotsClientListOptions contains the optional parameters for the SnapshotsClient.NewListPager method.
 func (client *SnapshotsClient) NewListPager(options *SnapshotsClientListOptions) *runtime.Pager[SnapshotsClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[SnapshotsClientListResponse]{
@@ -317,25 +361,20 @@ func (client *SnapshotsClient) NewListPager(options *SnapshotsClientListOptions)
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SnapshotsClientListResponse) (SnapshotsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SnapshotsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return SnapshotsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return SnapshotsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SnapshotsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -351,7 +390,7 @@ func (client *SnapshotsClient) listCreateRequest(ctx context.Context, options *S
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -368,7 +407,7 @@ func (client *SnapshotsClient) listHandleResponse(resp *http.Response) (Snapshot
 
 // NewListByResourceGroupPager - Lists snapshots under a resource group.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - options - SnapshotsClientListByResourceGroupOptions contains the optional parameters for the SnapshotsClient.NewListByResourceGroupPager
 //     method.
@@ -378,25 +417,20 @@ func (client *SnapshotsClient) NewListByResourceGroupPager(resourceGroupName str
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SnapshotsClientListByResourceGroupResponse) (SnapshotsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return SnapshotsClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SnapshotsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return SnapshotsClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SnapshotsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -416,7 +450,7 @@ func (client *SnapshotsClient) listByResourceGroupCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -434,7 +468,7 @@ func (client *SnapshotsClient) listByResourceGroupHandleResponse(resp *http.Resp
 // BeginRevokeAccess - Revokes access to a snapshot.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - snapshotName - The name of the snapshot that is being created. The name can't be changed after the snapshot is created.
 //     Supported characters for the name are a-z, A-Z, 0-9, _ and -. The max name length is 80
@@ -447,31 +481,41 @@ func (client *SnapshotsClient) BeginRevokeAccess(ctx context.Context, resourceGr
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SnapshotsClientRevokeAccessResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SnapshotsClientRevokeAccessResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SnapshotsClientRevokeAccessResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SnapshotsClientRevokeAccessResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // RevokeAccess - Revokes access to a snapshot.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *SnapshotsClient) revokeAccess(ctx context.Context, resourceGroupName string, snapshotName string, options *SnapshotsClientBeginRevokeAccessOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SnapshotsClient.BeginRevokeAccess"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.revokeAccessCreateRequest(ctx, resourceGroupName, snapshotName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // revokeAccessCreateRequest creates the RevokeAccess request.
@@ -494,7 +538,7 @@ func (client *SnapshotsClient) revokeAccessCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	return req, nil
 }
@@ -502,7 +546,7 @@ func (client *SnapshotsClient) revokeAccessCreateRequest(ctx context.Context, re
 // BeginUpdate - Updates (patches) a snapshot.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 //   - resourceGroupName - The name of the resource group.
 //   - snapshotName - The name of the snapshot that is being created. The name can't be changed after the snapshot is created.
 //     Supported characters for the name are a-z, A-Z, 0-9, _ and -. The max name length is 80
@@ -515,29 +559,40 @@ func (client *SnapshotsClient) BeginUpdate(ctx context.Context, resourceGroupNam
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[SnapshotsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SnapshotsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SnapshotsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SnapshotsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Updates (patches) a snapshot.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-07-02
+// Generated from API version 2023-04-02
 func (client *SnapshotsClient) update(ctx context.Context, resourceGroupName string, snapshotName string, snapshot SnapshotUpdate, options *SnapshotsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SnapshotsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, snapshotName, snapshot, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -560,8 +615,11 @@ func (client *SnapshotsClient) updateCreateRequest(ctx context.Context, resource
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-07-02")
+	reqQP.Set("api-version", "2023-04-02")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, snapshot)
+	if err := runtime.MarshalAsJSON(req, snapshot); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sshpublickeys_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sshpublickeys_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sshpublickeys_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sshpublickeys_client.go
index 04c6b435059..a577d55d210 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/sshpublickeys_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sshpublickeys_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type SSHPublicKeysClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewSSHPublicKeysClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*SSHPublicKeysClient, error) {
-	cl, err := arm.NewClient(moduleName+".SSHPublicKeysClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,24 +47,31 @@ func NewSSHPublicKeysClient(subscriptionID string, credential azcore.TokenCreden
 // Create - Creates a new SSH public key resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - sshPublicKeyName - The name of the SSH public key.
 //   - parameters - Parameters supplied to create the SSH public key.
 //   - options - SSHPublicKeysClientCreateOptions contains the optional parameters for the SSHPublicKeysClient.Create method.
 func (client *SSHPublicKeysClient) Create(ctx context.Context, resourceGroupName string, sshPublicKeyName string, parameters SSHPublicKeyResource, options *SSHPublicKeysClientCreateOptions) (SSHPublicKeysClientCreateResponse, error) {
+	var err error
+	const operationName = "SSHPublicKeysClient.Create"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createCreateRequest(ctx, resourceGroupName, sshPublicKeyName, parameters, options)
 	if err != nil {
 		return SSHPublicKeysClientCreateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SSHPublicKeysClientCreateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return SSHPublicKeysClientCreateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return SSHPublicKeysClientCreateResponse{}, err
 	}
-	return client.createHandleResponse(resp)
+	resp, err := client.createHandleResponse(httpResp)
+	return resp, err
 }
 
 // createCreateRequest creates the Create request.
@@ -88,10 +94,13 @@ func (client *SSHPublicKeysClient) createCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createHandleResponse handles the Create response.
@@ -106,21 +115,27 @@ func (client *SSHPublicKeysClient) createHandleResponse(resp *http.Response) (SS
 // Delete - Delete an SSH public key.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - sshPublicKeyName - The name of the SSH public key.
 //   - options - SSHPublicKeysClientDeleteOptions contains the optional parameters for the SSHPublicKeysClient.Delete method.
 func (client *SSHPublicKeysClient) Delete(ctx context.Context, resourceGroupName string, sshPublicKeyName string, options *SSHPublicKeysClientDeleteOptions) (SSHPublicKeysClientDeleteResponse, error) {
+	var err error
+	const operationName = "SSHPublicKeysClient.Delete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, sshPublicKeyName, options)
 	if err != nil {
 		return SSHPublicKeysClientDeleteResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SSHPublicKeysClientDeleteResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusNoContent) {
-		return SSHPublicKeysClientDeleteResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return SSHPublicKeysClientDeleteResponse{}, err
 	}
 	return SSHPublicKeysClientDeleteResponse{}, nil
 }
@@ -145,7 +160,7 @@ func (client *SSHPublicKeysClient) deleteCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -156,24 +171,31 @@ func (client *SSHPublicKeysClient) deleteCreateRequest(ctx context.Context, reso
 // SSH public key resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - sshPublicKeyName - The name of the SSH public key.
 //   - options - SSHPublicKeysClientGenerateKeyPairOptions contains the optional parameters for the SSHPublicKeysClient.GenerateKeyPair
 //     method.
 func (client *SSHPublicKeysClient) GenerateKeyPair(ctx context.Context, resourceGroupName string, sshPublicKeyName string, options *SSHPublicKeysClientGenerateKeyPairOptions) (SSHPublicKeysClientGenerateKeyPairResponse, error) {
+	var err error
+	const operationName = "SSHPublicKeysClient.GenerateKeyPair"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.generateKeyPairCreateRequest(ctx, resourceGroupName, sshPublicKeyName, options)
 	if err != nil {
 		return SSHPublicKeysClientGenerateKeyPairResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SSHPublicKeysClientGenerateKeyPairResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SSHPublicKeysClientGenerateKeyPairResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SSHPublicKeysClientGenerateKeyPairResponse{}, err
 	}
-	return client.generateKeyPairHandleResponse(resp)
+	resp, err := client.generateKeyPairHandleResponse(httpResp)
+	return resp, err
 }
 
 // generateKeyPairCreateRequest creates the GenerateKeyPair request.
@@ -196,9 +218,15 @@ func (client *SSHPublicKeysClient) generateKeyPairCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
+	if options != nil && options.Parameters != nil {
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
+	}
 	return req, nil
 }
 
@@ -214,23 +242,30 @@ func (client *SSHPublicKeysClient) generateKeyPairHandleResponse(resp *http.Resp
 // Get - Retrieves information about an SSH public key.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - sshPublicKeyName - The name of the SSH public key.
 //   - options - SSHPublicKeysClientGetOptions contains the optional parameters for the SSHPublicKeysClient.Get method.
 func (client *SSHPublicKeysClient) Get(ctx context.Context, resourceGroupName string, sshPublicKeyName string, options *SSHPublicKeysClientGetOptions) (SSHPublicKeysClientGetResponse, error) {
+	var err error
+	const operationName = "SSHPublicKeysClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, sshPublicKeyName, options)
 	if err != nil {
 		return SSHPublicKeysClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SSHPublicKeysClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SSHPublicKeysClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SSHPublicKeysClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -253,7 +288,7 @@ func (client *SSHPublicKeysClient) getCreateRequest(ctx context.Context, resourc
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -271,7 +306,7 @@ func (client *SSHPublicKeysClient) getHandleResponse(resp *http.Response) (SSHPu
 // NewListByResourceGroupPager - Lists all of the SSH public keys in the specified resource group. Use the nextLink property
 // in the response to get the next page of SSH public keys.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - SSHPublicKeysClientListByResourceGroupOptions contains the optional parameters for the SSHPublicKeysClient.NewListByResourceGroupPager
 //     method.
@@ -281,25 +316,20 @@ func (client *SSHPublicKeysClient) NewListByResourceGroupPager(resourceGroupName
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SSHPublicKeysClientListByResourceGroupResponse) (SSHPublicKeysClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return SSHPublicKeysClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SSHPublicKeysClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return SSHPublicKeysClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SSHPublicKeysClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -319,7 +349,7 @@ func (client *SSHPublicKeysClient) listByResourceGroupCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -337,7 +367,7 @@ func (client *SSHPublicKeysClient) listByResourceGroupHandleResponse(resp *http.
 // NewListBySubscriptionPager - Lists all of the SSH public keys in the subscription. Use the nextLink property in the response
 // to get the next page of SSH public keys.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - options - SSHPublicKeysClientListBySubscriptionOptions contains the optional parameters for the SSHPublicKeysClient.NewListBySubscriptionPager
 //     method.
 func (client *SSHPublicKeysClient) NewListBySubscriptionPager(options *SSHPublicKeysClientListBySubscriptionOptions) *runtime.Pager[SSHPublicKeysClientListBySubscriptionResponse] {
@@ -346,25 +376,20 @@ func (client *SSHPublicKeysClient) NewListBySubscriptionPager(options *SSHPublic
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SSHPublicKeysClientListBySubscriptionResponse) (SSHPublicKeysClientListBySubscriptionResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listBySubscriptionCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return SSHPublicKeysClientListBySubscriptionResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SSHPublicKeysClient.NewListBySubscriptionPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listBySubscriptionCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return SSHPublicKeysClientListBySubscriptionResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SSHPublicKeysClientListBySubscriptionResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listBySubscriptionHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -380,7 +405,7 @@ func (client *SSHPublicKeysClient) listBySubscriptionCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -398,24 +423,31 @@ func (client *SSHPublicKeysClient) listBySubscriptionHandleResponse(resp *http.R
 // Update - Updates a new SSH public key resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - sshPublicKeyName - The name of the SSH public key.
 //   - parameters - Parameters supplied to update the SSH public key.
 //   - options - SSHPublicKeysClientUpdateOptions contains the optional parameters for the SSHPublicKeysClient.Update method.
 func (client *SSHPublicKeysClient) Update(ctx context.Context, resourceGroupName string, sshPublicKeyName string, parameters SSHPublicKeyUpdateResource, options *SSHPublicKeysClientUpdateOptions) (SSHPublicKeysClientUpdateResponse, error) {
+	var err error
+	const operationName = "SSHPublicKeysClient.Update"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, sshPublicKeyName, parameters, options)
 	if err != nil {
 		return SSHPublicKeysClientUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SSHPublicKeysClientUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SSHPublicKeysClientUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SSHPublicKeysClientUpdateResponse{}, err
 	}
-	return client.updateHandleResponse(resp)
+	resp, err := client.updateHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateCreateRequest creates the Update request.
@@ -438,10 +470,13 @@ func (client *SSHPublicKeysClient) updateCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateHandleResponse handles the Update response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/time_rfc3339.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/time_rfc3339.go
similarity index 59%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/time_rfc3339.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/time_rfc3339.go
index 9181b3d076f..4f75ccd6f1d 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/time_rfc3339.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/time_rfc3339.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -19,50 +18,50 @@ import (
 	"time"
 )
 
-const (
-	utcLayoutJSON = `"2006-01-02T15:04:05.999999999"`
-	utcLayout     = "2006-01-02T15:04:05.999999999"
-	rfc3339JSON   = `"` + time.RFC3339Nano + `"`
-)
-
 // Azure reports time in UTC but it doesn't include the 'Z' time zone suffix in some cases.
 var tzOffsetRegex = regexp.MustCompile(`(Z|z|\+|-)(\d+:\d+)*"*$`)
 
-type timeRFC3339 time.Time
+const (
+	utcDateTimeJSON = `"2006-01-02T15:04:05.999999999"`
+	utcDateTime     = "2006-01-02T15:04:05.999999999"
+	dateTimeJSON    = `"` + time.RFC3339Nano + `"`
+)
+
+type dateTimeRFC3339 time.Time
 
-func (t timeRFC3339) MarshalJSON() (json []byte, err error) {
+func (t dateTimeRFC3339) MarshalJSON() ([]byte, error) {
 	tt := time.Time(t)
 	return tt.MarshalJSON()
 }
 
-func (t timeRFC3339) MarshalText() (text []byte, err error) {
+func (t dateTimeRFC3339) MarshalText() ([]byte, error) {
 	tt := time.Time(t)
 	return tt.MarshalText()
 }
 
-func (t *timeRFC3339) UnmarshalJSON(data []byte) error {
-	layout := utcLayoutJSON
+func (t *dateTimeRFC3339) UnmarshalJSON(data []byte) error {
+	layout := utcDateTimeJSON
 	if tzOffsetRegex.Match(data) {
-		layout = rfc3339JSON
+		layout = dateTimeJSON
 	}
 	return t.Parse(layout, string(data))
 }
 
-func (t *timeRFC3339) UnmarshalText(data []byte) (err error) {
-	layout := utcLayout
+func (t *dateTimeRFC3339) UnmarshalText(data []byte) error {
+	layout := utcDateTime
 	if tzOffsetRegex.Match(data) {
 		layout = time.RFC3339Nano
 	}
 	return t.Parse(layout, string(data))
 }
 
-func (t *timeRFC3339) Parse(layout, value string) error {
+func (t *dateTimeRFC3339) Parse(layout, value string) error {
 	p, err := time.Parse(layout, strings.ToUpper(value))
-	*t = timeRFC3339(p)
+	*t = dateTimeRFC3339(p)
 	return err
 }
 
-func populateTimeRFC3339(m map[string]any, k string, t *time.Time) {
+func populateDateTimeRFC3339(m map[string]any, k string, t *time.Time) {
 	if t == nil {
 		return
 	} else if azcore.IsNullValue(t) {
@@ -71,14 +70,14 @@ func populateTimeRFC3339(m map[string]any, k string, t *time.Time) {
 	} else if reflect.ValueOf(t).IsNil() {
 		return
 	}
-	m[k] = (*timeRFC3339)(t)
+	m[k] = (*dateTimeRFC3339)(t)
 }
 
-func unpopulateTimeRFC3339(data json.RawMessage, fn string, t **time.Time) error {
+func unpopulateDateTimeRFC3339(data json.RawMessage, fn string, t **time.Time) error {
 	if data == nil || strings.EqualFold(string(data), "null") {
 		return nil
 	}
-	var aux timeRFC3339
+	var aux dateTimeRFC3339
 	if err := json.Unmarshal(data, &aux); err != nil {
 		return fmt.Errorf("struct field %s: %v", fn, err)
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/usage_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/usage_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/usage_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/usage_client.go
index c27c4d18d8c..afb6852b052 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/usage_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/usage_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type UsageClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewUsageClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*UsageClient, error) {
-	cl, err := arm.NewClient(moduleName+".UsageClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewUsageClient(subscriptionID string, credential azcore.TokenCredential, op
 // NewListPager - Gets, for the specified location, the current compute resource usage information as well as the limits for
 // compute resources under the subscription.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The location for which resource usage is queried.
 //   - options - UsageClientListOptions contains the optional parameters for the UsageClient.NewListPager method.
 func (client *UsageClient) NewListPager(location string, options *UsageClientListOptions) *runtime.Pager[UsageClientListResponse] {
@@ -57,25 +56,20 @@ func (client *UsageClient) NewListPager(location string, options *UsageClientLis
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *UsageClientListResponse) (UsageClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "UsageClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return UsageClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return UsageClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return UsageClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -95,7 +89,7 @@ func (client *UsageClient) listCreateRequest(ctx context.Context, location strin
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineextensionimages_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineextensionimages_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineextensionimages_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineextensionimages_client.go
index 68da1c042f4..a8e90c4b13d 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineextensionimages_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineextensionimages_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -35,7 +34,7 @@ type VirtualMachineExtensionImagesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineExtensionImagesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineExtensionImagesClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineExtensionImagesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,23 +48,30 @@ func NewVirtualMachineExtensionImagesClient(subscriptionID string, credential az
 // Get - Gets a virtual machine extension image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - options - VirtualMachineExtensionImagesClientGetOptions contains the optional parameters for the VirtualMachineExtensionImagesClient.Get
 //     method.
 func (client *VirtualMachineExtensionImagesClient) Get(ctx context.Context, location string, publisherName string, typeParam string, version string, options *VirtualMachineExtensionImagesClientGetOptions) (VirtualMachineExtensionImagesClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualMachineExtensionImagesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, location, publisherName, typeParam, version, options)
 	if err != nil {
 		return VirtualMachineExtensionImagesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineExtensionImagesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineExtensionImagesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineExtensionImagesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -96,7 +102,7 @@ func (client *VirtualMachineExtensionImagesClient) getCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -114,23 +120,30 @@ func (client *VirtualMachineExtensionImagesClient) getHandleResponse(resp *http.
 // ListTypes - Gets a list of virtual machine extension image types.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - options - VirtualMachineExtensionImagesClientListTypesOptions contains the optional parameters for the VirtualMachineExtensionImagesClient.ListTypes
 //     method.
 func (client *VirtualMachineExtensionImagesClient) ListTypes(ctx context.Context, location string, publisherName string, options *VirtualMachineExtensionImagesClientListTypesOptions) (VirtualMachineExtensionImagesClientListTypesResponse, error) {
+	var err error
+	const operationName = "VirtualMachineExtensionImagesClient.ListTypes"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listTypesCreateRequest(ctx, location, publisherName, options)
 	if err != nil {
 		return VirtualMachineExtensionImagesClientListTypesResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineExtensionImagesClientListTypesResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineExtensionImagesClientListTypesResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineExtensionImagesClientListTypesResponse{}, err
 	}
-	return client.listTypesHandleResponse(resp)
+	resp, err := client.listTypesHandleResponse(httpResp)
+	return resp, err
 }
 
 // listTypesCreateRequest creates the ListTypes request.
@@ -153,7 +166,7 @@ func (client *VirtualMachineExtensionImagesClient) listTypesCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -171,23 +184,30 @@ func (client *VirtualMachineExtensionImagesClient) listTypesHandleResponse(resp
 // ListVersions - Gets a list of virtual machine extension image versions.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - options - VirtualMachineExtensionImagesClientListVersionsOptions contains the optional parameters for the VirtualMachineExtensionImagesClient.ListVersions
 //     method.
 func (client *VirtualMachineExtensionImagesClient) ListVersions(ctx context.Context, location string, publisherName string, typeParam string, options *VirtualMachineExtensionImagesClientListVersionsOptions) (VirtualMachineExtensionImagesClientListVersionsResponse, error) {
+	var err error
+	const operationName = "VirtualMachineExtensionImagesClient.ListVersions"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listVersionsCreateRequest(ctx, location, publisherName, typeParam, options)
 	if err != nil {
 		return VirtualMachineExtensionImagesClientListVersionsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineExtensionImagesClientListVersionsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineExtensionImagesClientListVersionsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineExtensionImagesClientListVersionsResponse{}, err
 	}
-	return client.listVersionsHandleResponse(resp)
+	resp, err := client.listVersionsHandleResponse(httpResp)
+	return resp, err
 }
 
 // listVersionsCreateRequest creates the ListVersions request.
@@ -223,7 +243,7 @@ func (client *VirtualMachineExtensionImagesClient) listVersionsCreateRequest(ctx
 	if options != nil && options.Orderby != nil {
 		reqQP.Set("$orderby", *options.Orderby)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineextensions_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineextensions_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineextensions_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineextensions_client.go
index 7f68f6a179b..9d658bb4ecc 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineextensions_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineextensions_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type VirtualMachineExtensionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineExtensionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineExtensionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineExtensionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualMachineExtensionsClient(subscriptionID string, credential azcore.
 // BeginCreateOrUpdate - The operation to create or update the extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine where the extension should be created or updated.
 //   - vmExtensionName - The name of the virtual machine extension.
@@ -61,29 +60,40 @@ func (client *VirtualMachineExtensionsClient) BeginCreateOrUpdate(ctx context.Co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineExtensionsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineExtensionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineExtensionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineExtensionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - The operation to create or update the extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineExtensionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, vmName string, vmExtensionName string, extensionParameters VirtualMachineExtension, options *VirtualMachineExtensionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineExtensionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, vmName, vmExtensionName, extensionParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -110,16 +120,19 @@ func (client *VirtualMachineExtensionsClient) createOrUpdateCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, extensionParameters)
+	if err := runtime.MarshalAsJSON(req, extensionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - The operation to delete the extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine where the extension should be deleted.
 //   - vmExtensionName - The name of the virtual machine extension.
@@ -131,29 +144,40 @@ func (client *VirtualMachineExtensionsClient) BeginDelete(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineExtensionsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineExtensionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineExtensionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineExtensionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - The operation to delete the extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineExtensionsClient) deleteOperation(ctx context.Context, resourceGroupName string, vmName string, vmExtensionName string, options *VirtualMachineExtensionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineExtensionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, vmName, vmExtensionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -180,7 +204,7 @@ func (client *VirtualMachineExtensionsClient) deleteCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -189,25 +213,32 @@ func (client *VirtualMachineExtensionsClient) deleteCreateRequest(ctx context.Co
 // Get - The operation to get the extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine containing the extension.
 //   - vmExtensionName - The name of the virtual machine extension.
 //   - options - VirtualMachineExtensionsClientGetOptions contains the optional parameters for the VirtualMachineExtensionsClient.Get
 //     method.
 func (client *VirtualMachineExtensionsClient) Get(ctx context.Context, resourceGroupName string, vmName string, vmExtensionName string, options *VirtualMachineExtensionsClientGetOptions) (VirtualMachineExtensionsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualMachineExtensionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, vmName, vmExtensionName, options)
 	if err != nil {
 		return VirtualMachineExtensionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineExtensionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineExtensionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineExtensionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -237,7 +268,7 @@ func (client *VirtualMachineExtensionsClient) getCreateRequest(ctx context.Conte
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,24 +286,31 @@ func (client *VirtualMachineExtensionsClient) getHandleResponse(resp *http.Respo
 // List - The operation to get all extensions of a Virtual Machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine containing the extension.
 //   - options - VirtualMachineExtensionsClientListOptions contains the optional parameters for the VirtualMachineExtensionsClient.List
 //     method.
 func (client *VirtualMachineExtensionsClient) List(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachineExtensionsClientListOptions) (VirtualMachineExtensionsClientListResponse, error) {
+	var err error
+	const operationName = "VirtualMachineExtensionsClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return VirtualMachineExtensionsClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineExtensionsClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineExtensionsClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineExtensionsClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -298,7 +336,7 @@ func (client *VirtualMachineExtensionsClient) listCreateRequest(ctx context.Cont
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -316,7 +354,7 @@ func (client *VirtualMachineExtensionsClient) listHandleResponse(resp *http.Resp
 // BeginUpdate - The operation to update the extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine where the extension should be updated.
 //   - vmExtensionName - The name of the virtual machine extension.
@@ -329,29 +367,40 @@ func (client *VirtualMachineExtensionsClient) BeginUpdate(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineExtensionsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineExtensionsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineExtensionsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineExtensionsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - The operation to update the extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineExtensionsClient) update(ctx context.Context, resourceGroupName string, vmName string, vmExtensionName string, extensionParameters VirtualMachineExtensionUpdate, options *VirtualMachineExtensionsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineExtensionsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, vmName, vmExtensionName, extensionParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -378,8 +427,11 @@ func (client *VirtualMachineExtensionsClient) updateCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, extensionParameters)
+	if err := runtime.MarshalAsJSON(req, extensionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineimages_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineimages_client.go
similarity index 82%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineimages_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineimages_client.go
index 0fc0b2e5d4d..1c5ab27e5ea 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineimages_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineimages_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -35,7 +34,7 @@ type VirtualMachineImagesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineImagesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineImagesClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineImagesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewVirtualMachineImagesClient(subscriptionID string, credential azcore.Toke
 // Get - Gets a virtual machine image.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - publisherName - A valid image publisher.
 //   - offer - A valid image publisher offer.
@@ -58,18 +57,25 @@ func NewVirtualMachineImagesClient(subscriptionID string, credential azcore.Toke
 //   - options - VirtualMachineImagesClientGetOptions contains the optional parameters for the VirtualMachineImagesClient.Get
 //     method.
 func (client *VirtualMachineImagesClient) Get(ctx context.Context, location string, publisherName string, offer string, skus string, version string, options *VirtualMachineImagesClientGetOptions) (VirtualMachineImagesClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualMachineImagesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, location, publisherName, offer, skus, version, options)
 	if err != nil {
 		return VirtualMachineImagesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineImagesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineImagesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineImagesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -104,7 +110,7 @@ func (client *VirtualMachineImagesClient) getCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -122,7 +128,7 @@ func (client *VirtualMachineImagesClient) getHandleResponse(resp *http.Response)
 // List - Gets a list of all virtual machine image versions for the specified location, publisher, offer, and SKU.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - publisherName - A valid image publisher.
 //   - offer - A valid image publisher offer.
@@ -130,18 +136,25 @@ func (client *VirtualMachineImagesClient) getHandleResponse(resp *http.Response)
 //   - options - VirtualMachineImagesClientListOptions contains the optional parameters for the VirtualMachineImagesClient.List
 //     method.
 func (client *VirtualMachineImagesClient) List(ctx context.Context, location string, publisherName string, offer string, skus string, options *VirtualMachineImagesClientListOptions) (VirtualMachineImagesClientListResponse, error) {
+	var err error
+	const operationName = "VirtualMachineImagesClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, location, publisherName, offer, skus, options)
 	if err != nil {
 		return VirtualMachineImagesClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineImagesClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineImagesClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineImagesClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -181,7 +194,7 @@ func (client *VirtualMachineImagesClient) listCreateRequest(ctx context.Context,
 	if options != nil && options.Orderby != nil {
 		reqQP.Set("$orderby", *options.Orderby)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -199,24 +212,31 @@ func (client *VirtualMachineImagesClient) listHandleResponse(resp *http.Response
 // ListByEdgeZone - Gets a list of all virtual machine image versions for the specified edge zone
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - edgeZone - The name of the edge zone.
 //   - options - VirtualMachineImagesClientListByEdgeZoneOptions contains the optional parameters for the VirtualMachineImagesClient.ListByEdgeZone
 //     method.
 func (client *VirtualMachineImagesClient) ListByEdgeZone(ctx context.Context, location string, edgeZone string, options *VirtualMachineImagesClientListByEdgeZoneOptions) (VirtualMachineImagesClientListByEdgeZoneResponse, error) {
+	var err error
+	const operationName = "VirtualMachineImagesClient.ListByEdgeZone"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listByEdgeZoneCreateRequest(ctx, location, edgeZone, options)
 	if err != nil {
 		return VirtualMachineImagesClientListByEdgeZoneResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineImagesClientListByEdgeZoneResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineImagesClientListByEdgeZoneResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineImagesClientListByEdgeZoneResponse{}, err
 	}
-	return client.listByEdgeZoneHandleResponse(resp)
+	resp, err := client.listByEdgeZoneHandleResponse(httpResp)
+	return resp, err
 }
 
 // listByEdgeZoneCreateRequest creates the ListByEdgeZone request.
@@ -239,7 +259,7 @@ func (client *VirtualMachineImagesClient) listByEdgeZoneCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -257,24 +277,31 @@ func (client *VirtualMachineImagesClient) listByEdgeZoneHandleResponse(resp *htt
 // ListOffers - Gets a list of virtual machine image offers for the specified location and publisher.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - publisherName - A valid image publisher.
 //   - options - VirtualMachineImagesClientListOffersOptions contains the optional parameters for the VirtualMachineImagesClient.ListOffers
 //     method.
 func (client *VirtualMachineImagesClient) ListOffers(ctx context.Context, location string, publisherName string, options *VirtualMachineImagesClientListOffersOptions) (VirtualMachineImagesClientListOffersResponse, error) {
+	var err error
+	const operationName = "VirtualMachineImagesClient.ListOffers"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listOffersCreateRequest(ctx, location, publisherName, options)
 	if err != nil {
 		return VirtualMachineImagesClientListOffersResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineImagesClientListOffersResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineImagesClientListOffersResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineImagesClientListOffersResponse{}, err
 	}
-	return client.listOffersHandleResponse(resp)
+	resp, err := client.listOffersHandleResponse(httpResp)
+	return resp, err
 }
 
 // listOffersCreateRequest creates the ListOffers request.
@@ -297,7 +324,7 @@ func (client *VirtualMachineImagesClient) listOffersCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -315,23 +342,30 @@ func (client *VirtualMachineImagesClient) listOffersHandleResponse(resp *http.Re
 // ListPublishers - Gets a list of virtual machine image publishers for the specified Azure location.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - options - VirtualMachineImagesClientListPublishersOptions contains the optional parameters for the VirtualMachineImagesClient.ListPublishers
 //     method.
 func (client *VirtualMachineImagesClient) ListPublishers(ctx context.Context, location string, options *VirtualMachineImagesClientListPublishersOptions) (VirtualMachineImagesClientListPublishersResponse, error) {
+	var err error
+	const operationName = "VirtualMachineImagesClient.ListPublishers"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listPublishersCreateRequest(ctx, location, options)
 	if err != nil {
 		return VirtualMachineImagesClientListPublishersResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineImagesClientListPublishersResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineImagesClientListPublishersResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineImagesClientListPublishersResponse{}, err
 	}
-	return client.listPublishersHandleResponse(resp)
+	resp, err := client.listPublishersHandleResponse(httpResp)
+	return resp, err
 }
 
 // listPublishersCreateRequest creates the ListPublishers request.
@@ -350,7 +384,7 @@ func (client *VirtualMachineImagesClient) listPublishersCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -368,25 +402,32 @@ func (client *VirtualMachineImagesClient) listPublishersHandleResponse(resp *htt
 // ListSKUs - Gets a list of virtual machine image SKUs for the specified location, publisher, and offer.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - publisherName - A valid image publisher.
 //   - offer - A valid image publisher offer.
 //   - options - VirtualMachineImagesClientListSKUsOptions contains the optional parameters for the VirtualMachineImagesClient.ListSKUs
 //     method.
 func (client *VirtualMachineImagesClient) ListSKUs(ctx context.Context, location string, publisherName string, offer string, options *VirtualMachineImagesClientListSKUsOptions) (VirtualMachineImagesClientListSKUsResponse, error) {
+	var err error
+	const operationName = "VirtualMachineImagesClient.ListSKUs"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listSKUsCreateRequest(ctx, location, publisherName, offer, options)
 	if err != nil {
 		return VirtualMachineImagesClientListSKUsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineImagesClientListSKUsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineImagesClientListSKUsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineImagesClientListSKUsResponse{}, err
 	}
-	return client.listSKUsHandleResponse(resp)
+	resp, err := client.listSKUsHandleResponse(httpResp)
+	return resp, err
 }
 
 // listSKUsCreateRequest creates the ListSKUs request.
@@ -413,7 +454,7 @@ func (client *VirtualMachineImagesClient) listSKUsCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineimagesedgezone_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineimagesedgezone_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineimagesedgezone_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineimagesedgezone_client.go
index 1dc0f71c505..4151b10d3c8 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineimagesedgezone_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineimagesedgezone_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -35,7 +34,7 @@ type VirtualMachineImagesEdgeZoneClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineImagesEdgeZoneClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineImagesEdgeZoneClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineImagesEdgeZoneClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewVirtualMachineImagesEdgeZoneClient(subscriptionID string, credential azc
 // Get - Gets a virtual machine image in an edge zone.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - edgeZone - The name of the edge zone.
 //   - publisherName - A valid image publisher.
@@ -59,18 +58,25 @@ func NewVirtualMachineImagesEdgeZoneClient(subscriptionID string, credential azc
 //   - options - VirtualMachineImagesEdgeZoneClientGetOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.Get
 //     method.
 func (client *VirtualMachineImagesEdgeZoneClient) Get(ctx context.Context, location string, edgeZone string, publisherName string, offer string, skus string, version string, options *VirtualMachineImagesEdgeZoneClientGetOptions) (VirtualMachineImagesEdgeZoneClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualMachineImagesEdgeZoneClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, location, edgeZone, publisherName, offer, skus, version, options)
 	if err != nil {
 		return VirtualMachineImagesEdgeZoneClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineImagesEdgeZoneClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineImagesEdgeZoneClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineImagesEdgeZoneClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -109,7 +115,7 @@ func (client *VirtualMachineImagesEdgeZoneClient) getCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -127,7 +133,7 @@ func (client *VirtualMachineImagesEdgeZoneClient) getHandleResponse(resp *http.R
 // List - Gets a list of all virtual machine image versions for the specified location, edge zone, publisher, offer, and SKU.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - edgeZone - The name of the edge zone.
 //   - publisherName - A valid image publisher.
@@ -136,18 +142,25 @@ func (client *VirtualMachineImagesEdgeZoneClient) getHandleResponse(resp *http.R
 //   - options - VirtualMachineImagesEdgeZoneClientListOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.List
 //     method.
 func (client *VirtualMachineImagesEdgeZoneClient) List(ctx context.Context, location string, edgeZone string, publisherName string, offer string, skus string, options *VirtualMachineImagesEdgeZoneClientListOptions) (VirtualMachineImagesEdgeZoneClientListResponse, error) {
+	var err error
+	const operationName = "VirtualMachineImagesEdgeZoneClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, location, edgeZone, publisherName, offer, skus, options)
 	if err != nil {
 		return VirtualMachineImagesEdgeZoneClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineImagesEdgeZoneClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineImagesEdgeZoneClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineImagesEdgeZoneClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -191,7 +204,7 @@ func (client *VirtualMachineImagesEdgeZoneClient) listCreateRequest(ctx context.
 	if options != nil && options.Orderby != nil {
 		reqQP.Set("$orderby", *options.Orderby)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -209,25 +222,32 @@ func (client *VirtualMachineImagesEdgeZoneClient) listHandleResponse(resp *http.
 // ListOffers - Gets a list of virtual machine image offers for the specified location, edge zone and publisher.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - edgeZone - The name of the edge zone.
 //   - publisherName - A valid image publisher.
 //   - options - VirtualMachineImagesEdgeZoneClientListOffersOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.ListOffers
 //     method.
 func (client *VirtualMachineImagesEdgeZoneClient) ListOffers(ctx context.Context, location string, edgeZone string, publisherName string, options *VirtualMachineImagesEdgeZoneClientListOffersOptions) (VirtualMachineImagesEdgeZoneClientListOffersResponse, error) {
+	var err error
+	const operationName = "VirtualMachineImagesEdgeZoneClient.ListOffers"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listOffersCreateRequest(ctx, location, edgeZone, publisherName, options)
 	if err != nil {
 		return VirtualMachineImagesEdgeZoneClientListOffersResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineImagesEdgeZoneClientListOffersResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineImagesEdgeZoneClientListOffersResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineImagesEdgeZoneClientListOffersResponse{}, err
 	}
-	return client.listOffersHandleResponse(resp)
+	resp, err := client.listOffersHandleResponse(httpResp)
+	return resp, err
 }
 
 // listOffersCreateRequest creates the ListOffers request.
@@ -254,7 +274,7 @@ func (client *VirtualMachineImagesEdgeZoneClient) listOffersCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -272,24 +292,31 @@ func (client *VirtualMachineImagesEdgeZoneClient) listOffersHandleResponse(resp
 // ListPublishers - Gets a list of virtual machine image publishers for the specified Azure location and edge zone.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - edgeZone - The name of the edge zone.
 //   - options - VirtualMachineImagesEdgeZoneClientListPublishersOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.ListPublishers
 //     method.
 func (client *VirtualMachineImagesEdgeZoneClient) ListPublishers(ctx context.Context, location string, edgeZone string, options *VirtualMachineImagesEdgeZoneClientListPublishersOptions) (VirtualMachineImagesEdgeZoneClientListPublishersResponse, error) {
+	var err error
+	const operationName = "VirtualMachineImagesEdgeZoneClient.ListPublishers"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listPublishersCreateRequest(ctx, location, edgeZone, options)
 	if err != nil {
 		return VirtualMachineImagesEdgeZoneClientListPublishersResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineImagesEdgeZoneClientListPublishersResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineImagesEdgeZoneClientListPublishersResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineImagesEdgeZoneClientListPublishersResponse{}, err
 	}
-	return client.listPublishersHandleResponse(resp)
+	resp, err := client.listPublishersHandleResponse(httpResp)
+	return resp, err
 }
 
 // listPublishersCreateRequest creates the ListPublishers request.
@@ -312,7 +339,7 @@ func (client *VirtualMachineImagesEdgeZoneClient) listPublishersCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -330,7 +357,7 @@ func (client *VirtualMachineImagesEdgeZoneClient) listPublishersHandleResponse(r
 // ListSKUs - Gets a list of virtual machine image SKUs for the specified location, edge zone, publisher, and offer.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The name of a supported Azure region.
 //   - edgeZone - The name of the edge zone.
 //   - publisherName - A valid image publisher.
@@ -338,18 +365,25 @@ func (client *VirtualMachineImagesEdgeZoneClient) listPublishersHandleResponse(r
 //   - options - VirtualMachineImagesEdgeZoneClientListSKUsOptions contains the optional parameters for the VirtualMachineImagesEdgeZoneClient.ListSKUs
 //     method.
 func (client *VirtualMachineImagesEdgeZoneClient) ListSKUs(ctx context.Context, location string, edgeZone string, publisherName string, offer string, options *VirtualMachineImagesEdgeZoneClientListSKUsOptions) (VirtualMachineImagesEdgeZoneClientListSKUsResponse, error) {
+	var err error
+	const operationName = "VirtualMachineImagesEdgeZoneClient.ListSKUs"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listSKUsCreateRequest(ctx, location, edgeZone, publisherName, offer, options)
 	if err != nil {
 		return VirtualMachineImagesEdgeZoneClientListSKUsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineImagesEdgeZoneClientListSKUsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineImagesEdgeZoneClientListSKUsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineImagesEdgeZoneClientListSKUsResponse{}, err
 	}
-	return client.listSKUsHandleResponse(resp)
+	resp, err := client.listSKUsHandleResponse(httpResp)
+	return resp, err
 }
 
 // listSKUsCreateRequest creates the ListSKUs request.
@@ -380,7 +414,7 @@ func (client *VirtualMachineImagesEdgeZoneClient) listSKUsCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineruncommands_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineruncommands_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineruncommands_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineruncommands_client.go
index afbd2a35dae..348c59ade50 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachineruncommands_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineruncommands_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type VirtualMachineRunCommandsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineRunCommandsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineRunCommandsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineRunCommandsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualMachineRunCommandsClient(subscriptionID string, credential azcore
 // BeginCreateOrUpdate - The operation to create or update the run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine where the run command should be created or updated.
 //   - runCommandName - The name of the virtual machine run command.
@@ -61,29 +60,40 @@ func (client *VirtualMachineRunCommandsClient) BeginCreateOrUpdate(ctx context.C
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineRunCommandsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineRunCommandsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineRunCommandsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineRunCommandsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - The operation to create or update the run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineRunCommandsClient) createOrUpdate(ctx context.Context, resourceGroupName string, vmName string, runCommandName string, runCommand VirtualMachineRunCommand, options *VirtualMachineRunCommandsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineRunCommandsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, vmName, runCommandName, runCommand, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -110,16 +120,19 @@ func (client *VirtualMachineRunCommandsClient) createOrUpdateCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
-	return req, runtime.MarshalAsJSON(req, runCommand)
+	if err := runtime.MarshalAsJSON(req, runCommand); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - The operation to delete the run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine where the run command should be deleted.
 //   - runCommandName - The name of the virtual machine run command.
@@ -131,29 +144,40 @@ func (client *VirtualMachineRunCommandsClient) BeginDelete(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineRunCommandsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineRunCommandsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineRunCommandsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineRunCommandsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - The operation to delete the run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineRunCommandsClient) deleteOperation(ctx context.Context, resourceGroupName string, vmName string, runCommandName string, options *VirtualMachineRunCommandsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineRunCommandsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, vmName, runCommandName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -180,7 +204,7 @@ func (client *VirtualMachineRunCommandsClient) deleteCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
 	return req, nil
@@ -189,24 +213,31 @@ func (client *VirtualMachineRunCommandsClient) deleteCreateRequest(ctx context.C
 // Get - Gets specific run command for a subscription in a location.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The location upon which run commands is queried.
 //   - commandID - The command id.
 //   - options - VirtualMachineRunCommandsClientGetOptions contains the optional parameters for the VirtualMachineRunCommandsClient.Get
 //     method.
 func (client *VirtualMachineRunCommandsClient) Get(ctx context.Context, location string, commandID string, options *VirtualMachineRunCommandsClientGetOptions) (VirtualMachineRunCommandsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualMachineRunCommandsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, location, commandID, options)
 	if err != nil {
 		return VirtualMachineRunCommandsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineRunCommandsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineRunCommandsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineRunCommandsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -229,7 +260,7 @@ func (client *VirtualMachineRunCommandsClient) getCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
 	return req, nil
@@ -247,25 +278,32 @@ func (client *VirtualMachineRunCommandsClient) getHandleResponse(resp *http.Resp
 // GetByVirtualMachine - The operation to get the run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine containing the run command.
 //   - runCommandName - The name of the virtual machine run command.
 //   - options - VirtualMachineRunCommandsClientGetByVirtualMachineOptions contains the optional parameters for the VirtualMachineRunCommandsClient.GetByVirtualMachine
 //     method.
 func (client *VirtualMachineRunCommandsClient) GetByVirtualMachine(ctx context.Context, resourceGroupName string, vmName string, runCommandName string, options *VirtualMachineRunCommandsClientGetByVirtualMachineOptions) (VirtualMachineRunCommandsClientGetByVirtualMachineResponse, error) {
+	var err error
+	const operationName = "VirtualMachineRunCommandsClient.GetByVirtualMachine"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getByVirtualMachineCreateRequest(ctx, resourceGroupName, vmName, runCommandName, options)
 	if err != nil {
 		return VirtualMachineRunCommandsClientGetByVirtualMachineResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineRunCommandsClientGetByVirtualMachineResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineRunCommandsClientGetByVirtualMachineResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineRunCommandsClientGetByVirtualMachineResponse{}, err
 	}
-	return client.getByVirtualMachineHandleResponse(resp)
+	resp, err := client.getByVirtualMachineHandleResponse(httpResp)
+	return resp, err
 }
 
 // getByVirtualMachineCreateRequest creates the GetByVirtualMachine request.
@@ -295,7 +333,7 @@ func (client *VirtualMachineRunCommandsClient) getByVirtualMachineCreateRequest(
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
 	return req, nil
@@ -312,7 +350,7 @@ func (client *VirtualMachineRunCommandsClient) getByVirtualMachineHandleResponse
 
 // NewListPager - Lists all available run commands for a subscription in a location.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The location upon which run commands is queried.
 //   - options - VirtualMachineRunCommandsClientListOptions contains the optional parameters for the VirtualMachineRunCommandsClient.NewListPager
 //     method.
@@ -322,25 +360,20 @@ func (client *VirtualMachineRunCommandsClient) NewListPager(location string, opt
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachineRunCommandsClientListResponse) (VirtualMachineRunCommandsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualMachineRunCommandsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachineRunCommandsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachineRunCommandsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachineRunCommandsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -360,7 +393,7 @@ func (client *VirtualMachineRunCommandsClient) listCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
 	return req, nil
@@ -377,7 +410,7 @@ func (client *VirtualMachineRunCommandsClient) listHandleResponse(resp *http.Res
 
 // NewListByVirtualMachinePager - The operation to get all run commands of a Virtual Machine.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine containing the run command.
 //   - options - VirtualMachineRunCommandsClientListByVirtualMachineOptions contains the optional parameters for the VirtualMachineRunCommandsClient.NewListByVirtualMachinePager
@@ -388,25 +421,20 @@ func (client *VirtualMachineRunCommandsClient) NewListByVirtualMachinePager(reso
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachineRunCommandsClientListByVirtualMachineResponse) (VirtualMachineRunCommandsClientListByVirtualMachineResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByVirtualMachineCreateRequest(ctx, resourceGroupName, vmName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachineRunCommandsClient.NewListByVirtualMachinePager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByVirtualMachineCreateRequest(ctx, resourceGroupName, vmName, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachineRunCommandsClientListByVirtualMachineResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualMachineRunCommandsClientListByVirtualMachineResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachineRunCommandsClientListByVirtualMachineResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByVirtualMachineHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -433,7 +461,7 @@ func (client *VirtualMachineRunCommandsClient) listByVirtualMachineCreateRequest
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
 	return req, nil
@@ -451,7 +479,7 @@ func (client *VirtualMachineRunCommandsClient) listByVirtualMachineHandleRespons
 // BeginUpdate - The operation to update the run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine where the run command should be updated.
 //   - runCommandName - The name of the virtual machine run command.
@@ -464,29 +492,40 @@ func (client *VirtualMachineRunCommandsClient) BeginUpdate(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineRunCommandsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineRunCommandsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineRunCommandsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineRunCommandsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - The operation to update the run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineRunCommandsClient) update(ctx context.Context, resourceGroupName string, vmName string, runCommandName string, runCommand VirtualMachineRunCommandUpdate, options *VirtualMachineRunCommandsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineRunCommandsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, vmName, runCommandName, runCommand, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -513,8 +552,11 @@ func (client *VirtualMachineRunCommandsClient) updateCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
-	return req, runtime.MarshalAsJSON(req, runCommand)
+	if err := runtime.MarshalAsJSON(req, runCommand); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachines_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachines_client.go
similarity index 72%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachines_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachines_client.go
index bd194cc22da..b665b49f529 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachines_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachines_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -35,7 +34,7 @@ type VirtualMachinesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachinesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachinesClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachinesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewVirtualMachinesClient(subscriptionID string, credential azcore.TokenCred
 // BeginAssessPatches - Assess patches on the VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientBeginAssessPatchesOptions contains the optional parameters for the VirtualMachinesClient.BeginAssessPatches
@@ -60,31 +59,41 @@ func (client *VirtualMachinesClient) BeginAssessPatches(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientAssessPatchesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientAssessPatchesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientAssessPatchesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientAssessPatchesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // AssessPatches - Assess patches on the VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) assessPatches(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientBeginAssessPatchesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginAssessPatches"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.assessPatchesCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // assessPatchesCreateRequest creates the AssessPatches request.
@@ -107,17 +116,98 @@ func (client *VirtualMachinesClient) assessPatchesCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
 }
 
+// BeginAttachDetachDataDisks - Attach and detach data disks to/from the virtual machine.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+//   - resourceGroupName - The name of the resource group.
+//   - vmName - The name of the virtual machine.
+//   - parameters - Parameters supplied to the attach and detach data disks operation on the virtual machine.
+//   - options - VirtualMachinesClientBeginAttachDetachDataDisksOptions contains the optional parameters for the VirtualMachinesClient.BeginAttachDetachDataDisks
+//     method.
+func (client *VirtualMachinesClient) BeginAttachDetachDataDisks(ctx context.Context, resourceGroupName string, vmName string, parameters AttachDetachDataDisksRequest, options *VirtualMachinesClientBeginAttachDetachDataDisksOptions) (*runtime.Poller[VirtualMachinesClientAttachDetachDataDisksResponse], error) {
+	if options == nil || options.ResumeToken == "" {
+		resp, err := client.attachDetachDataDisks(ctx, resourceGroupName, vmName, parameters, options)
+		if err != nil {
+			return nil, err
+		}
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientAttachDetachDataDisksResponse]{
+			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
+		})
+		return poller, err
+	} else {
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientAttachDetachDataDisksResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+	}
+}
+
+// AttachDetachDataDisks - Attach and detach data disks to/from the virtual machine.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+func (client *VirtualMachinesClient) attachDetachDataDisks(ctx context.Context, resourceGroupName string, vmName string, parameters AttachDetachDataDisksRequest, options *VirtualMachinesClientBeginAttachDetachDataDisksOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginAttachDetachDataDisks"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	req, err := client.attachDetachDataDisksCreateRequest(ctx, resourceGroupName, vmName, parameters, options)
+	if err != nil {
+		return nil, err
+	}
+	httpResp, err := client.internal.Pipeline().Do(req)
+	if err != nil {
+		return nil, err
+	}
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
+	}
+	return httpResp, nil
+}
+
+// attachDetachDataDisksCreateRequest creates the AttachDetachDataDisks request.
+func (client *VirtualMachinesClient) attachDetachDataDisksCreateRequest(ctx context.Context, resourceGroupName string, vmName string, parameters AttachDetachDataDisksRequest, options *VirtualMachinesClientBeginAttachDetachDataDisksOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachines/{vmName}/attachDetachDataDisks"
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if vmName == "" {
+		return nil, errors.New("parameter vmName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{vmName}", url.PathEscape(vmName))
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	req, err := runtime.NewRequest(ctx, http.MethodPost, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-09-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
+}
+
 // BeginCapture - Captures the VM by copying virtual hard disks of the VM and outputs a template that can be used to create
 // similar VMs.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - parameters - Parameters supplied to the Capture Virtual Machine operation.
@@ -129,11 +219,15 @@ func (client *VirtualMachinesClient) BeginCapture(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientCaptureResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientCaptureResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientCaptureResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientCaptureResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -141,20 +235,26 @@ func (client *VirtualMachinesClient) BeginCapture(ctx context.Context, resourceG
 // VMs.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) capture(ctx context.Context, resourceGroupName string, vmName string, parameters VirtualMachineCaptureParameters, options *VirtualMachinesClientBeginCaptureOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginCapture"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.captureCreateRequest(ctx, resourceGroupName, vmName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // captureCreateRequest creates the Capture request.
@@ -177,17 +277,20 @@ func (client *VirtualMachinesClient) captureCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginConvertToManagedDisks - Converts virtual machine disks from blob-based to managed disks. Virtual machine must be stop-deallocated
 // before invoking this operation.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientBeginConvertToManagedDisksOptions contains the optional parameters for the VirtualMachinesClient.BeginConvertToManagedDisks
@@ -198,9 +301,14 @@ func (client *VirtualMachinesClient) BeginConvertToManagedDisks(ctx context.Cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientConvertToManagedDisksResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientConvertToManagedDisksResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientConvertToManagedDisksResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientConvertToManagedDisksResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -208,20 +316,26 @@ func (client *VirtualMachinesClient) BeginConvertToManagedDisks(ctx context.Cont
 // before invoking this operation.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) convertToManagedDisks(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientBeginConvertToManagedDisksOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginConvertToManagedDisks"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.convertToManagedDisksCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // convertToManagedDisksCreateRequest creates the ConvertToManagedDisks request.
@@ -244,7 +358,7 @@ func (client *VirtualMachinesClient) convertToManagedDisksCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -254,7 +368,7 @@ func (client *VirtualMachinesClient) convertToManagedDisksCreateRequest(ctx cont
 // during virtual machine creation.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - parameters - Parameters supplied to the Create Virtual Machine operation.
@@ -266,9 +380,14 @@ func (client *VirtualMachinesClient) BeginCreateOrUpdate(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -276,20 +395,26 @@ func (client *VirtualMachinesClient) BeginCreateOrUpdate(ctx context.Context, re
 // virtual machine creation.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) createOrUpdate(ctx context.Context, resourceGroupName string, vmName string, parameters VirtualMachine, options *VirtualMachinesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, vmName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -312,17 +437,26 @@ func (client *VirtualMachinesClient) createOrUpdateCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
+	if options != nil && options.IfMatch != nil {
+		req.Raw().Header["If-Match"] = []string{*options.IfMatch}
+	}
+	if options != nil && options.IfNoneMatch != nil {
+		req.Raw().Header["If-None-Match"] = []string{*options.IfNoneMatch}
+	}
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDeallocate - Shuts down the virtual machine and releases the compute resources. You are not billed for the compute
 // resources that this virtual machine uses.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientBeginDeallocateOptions contains the optional parameters for the VirtualMachinesClient.BeginDeallocate
@@ -333,9 +467,14 @@ func (client *VirtualMachinesClient) BeginDeallocate(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientDeallocateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientDeallocateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientDeallocateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientDeallocateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -343,20 +482,26 @@ func (client *VirtualMachinesClient) BeginDeallocate(ctx context.Context, resour
 // that this virtual machine uses.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) deallocate(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientBeginDeallocateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginDeallocate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deallocateCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deallocateCreateRequest creates the Deallocate request.
@@ -382,7 +527,7 @@ func (client *VirtualMachinesClient) deallocateCreateRequest(ctx context.Context
 	if options != nil && options.Hibernate != nil {
 		reqQP.Set("hibernate", strconv.FormatBool(*options.Hibernate))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -391,7 +536,7 @@ func (client *VirtualMachinesClient) deallocateCreateRequest(ctx context.Context
 // BeginDelete - The operation to delete a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientBeginDeleteOptions contains the optional parameters for the VirtualMachinesClient.BeginDelete
@@ -402,29 +547,40 @@ func (client *VirtualMachinesClient) BeginDelete(ctx context.Context, resourceGr
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - The operation to delete a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) deleteOperation(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -450,7 +606,7 @@ func (client *VirtualMachinesClient) deleteCreateRequest(ctx context.Context, re
 	if options != nil && options.ForceDeletion != nil {
 		reqQP.Set("forceDeletion", strconv.FormatBool(*options.ForceDeletion))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -463,22 +619,28 @@ func (client *VirtualMachinesClient) deleteCreateRequest(ctx context.Context, re
 // [https://docs.microsoft.com/azure/virtual-machines/linux/capture-image].
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientGeneralizeOptions contains the optional parameters for the VirtualMachinesClient.Generalize
 //     method.
 func (client *VirtualMachinesClient) Generalize(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientGeneralizeOptions) (VirtualMachinesClientGeneralizeResponse, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.Generalize"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.generalizeCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return VirtualMachinesClientGeneralizeResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachinesClientGeneralizeResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachinesClientGeneralizeResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachinesClientGeneralizeResponse{}, err
 	}
 	return VirtualMachinesClientGeneralizeResponse{}, nil
 }
@@ -503,7 +665,7 @@ func (client *VirtualMachinesClient) generalizeCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -512,23 +674,30 @@ func (client *VirtualMachinesClient) generalizeCreateRequest(ctx context.Context
 // Get - Retrieves information about the model view or the instance view of a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientGetOptions contains the optional parameters for the VirtualMachinesClient.Get method.
 func (client *VirtualMachinesClient) Get(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientGetOptions) (VirtualMachinesClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return VirtualMachinesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachinesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachinesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachinesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -554,7 +723,7 @@ func (client *VirtualMachinesClient) getCreateRequest(ctx context.Context, resou
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -572,7 +741,7 @@ func (client *VirtualMachinesClient) getHandleResponse(resp *http.Response) (Vir
 // BeginInstallPatches - Installs patches on the VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - installPatchesInput - Input for InstallPatches as directly received by the API
@@ -584,31 +753,41 @@ func (client *VirtualMachinesClient) BeginInstallPatches(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientInstallPatchesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientInstallPatchesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientInstallPatchesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientInstallPatchesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // InstallPatches - Installs patches on the VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) installPatches(ctx context.Context, resourceGroupName string, vmName string, installPatchesInput VirtualMachineInstallPatchesParameters, options *VirtualMachinesClientBeginInstallPatchesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginInstallPatches"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.installPatchesCreateRequest(ctx, resourceGroupName, vmName, installPatchesInput, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // installPatchesCreateRequest creates the InstallPatches request.
@@ -631,33 +810,43 @@ func (client *VirtualMachinesClient) installPatchesCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, installPatchesInput)
+	if err := runtime.MarshalAsJSON(req, installPatchesInput); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // InstanceView - Retrieves information about the run-time state of a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientInstanceViewOptions contains the optional parameters for the VirtualMachinesClient.InstanceView
 //     method.
 func (client *VirtualMachinesClient) InstanceView(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientInstanceViewOptions) (VirtualMachinesClientInstanceViewResponse, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.InstanceView"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.instanceViewCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return VirtualMachinesClientInstanceViewResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachinesClientInstanceViewResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachinesClientInstanceViewResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachinesClientInstanceViewResponse{}, err
 	}
-	return client.instanceViewHandleResponse(resp)
+	resp, err := client.instanceViewHandleResponse(httpResp)
+	return resp, err
 }
 
 // instanceViewCreateRequest creates the InstanceView request.
@@ -680,7 +869,7 @@ func (client *VirtualMachinesClient) instanceViewCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -698,7 +887,7 @@ func (client *VirtualMachinesClient) instanceViewHandleResponse(resp *http.Respo
 // NewListPager - Lists all of the virtual machines in the specified resource group. Use the nextLink property in the response
 // to get the next page of virtual machines.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - VirtualMachinesClientListOptions contains the optional parameters for the VirtualMachinesClient.NewListPager
 //     method.
@@ -708,25 +897,20 @@ func (client *VirtualMachinesClient) NewListPager(resourceGroupName string, opti
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachinesClientListResponse) (VirtualMachinesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachinesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachinesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualMachinesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachinesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -749,7 +933,10 @@ func (client *VirtualMachinesClient) listCreateRequest(ctx context.Context, reso
 	if options != nil && options.Filter != nil {
 		reqQP.Set("$filter", *options.Filter)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	if options != nil && options.Expand != nil {
+		reqQP.Set("$expand", string(*options.Expand))
+	}
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -767,7 +954,7 @@ func (client *VirtualMachinesClient) listHandleResponse(resp *http.Response) (Vi
 // NewListAllPager - Lists all of the virtual machines in the specified subscription. Use the nextLink property in the response
 // to get the next page of virtual machines.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - options - VirtualMachinesClientListAllOptions contains the optional parameters for the VirtualMachinesClient.NewListAllPager
 //     method.
 func (client *VirtualMachinesClient) NewListAllPager(options *VirtualMachinesClientListAllOptions) *runtime.Pager[VirtualMachinesClientListAllResponse] {
@@ -776,25 +963,20 @@ func (client *VirtualMachinesClient) NewListAllPager(options *VirtualMachinesCli
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachinesClientListAllResponse) (VirtualMachinesClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachinesClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachinesClientListAllResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualMachinesClientListAllResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachinesClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -810,13 +992,16 @@ func (client *VirtualMachinesClient) listAllCreateRequest(ctx context.Context, o
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	if options != nil && options.StatusOnly != nil {
 		reqQP.Set("statusOnly", *options.StatusOnly)
 	}
 	if options != nil && options.Filter != nil {
 		reqQP.Set("$filter", *options.Filter)
 	}
+	if options != nil && options.Expand != nil {
+		reqQP.Set("$expand", string(*options.Expand))
+	}
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -833,7 +1018,7 @@ func (client *VirtualMachinesClient) listAllHandleResponse(resp *http.Response)
 
 // NewListAvailableSizesPager - Lists all available virtual machine sizes to which the specified virtual machine can be resized.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientListAvailableSizesOptions contains the optional parameters for the VirtualMachinesClient.NewListAvailableSizesPager
@@ -844,6 +1029,7 @@ func (client *VirtualMachinesClient) NewListAvailableSizesPager(resourceGroupNam
 			return false
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachinesClientListAvailableSizesResponse) (VirtualMachinesClientListAvailableSizesResponse, error) {
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachinesClient.NewListAvailableSizesPager")
 			req, err := client.listAvailableSizesCreateRequest(ctx, resourceGroupName, vmName, options)
 			if err != nil {
 				return VirtualMachinesClientListAvailableSizesResponse{}, err
@@ -857,6 +1043,7 @@ func (client *VirtualMachinesClient) NewListAvailableSizesPager(resourceGroupNam
 			}
 			return client.listAvailableSizesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -880,7 +1067,7 @@ func (client *VirtualMachinesClient) listAvailableSizesCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -897,7 +1084,7 @@ func (client *VirtualMachinesClient) listAvailableSizesHandleResponse(resp *http
 
 // NewListByLocationPager - Gets all the virtual machines under the specified subscription for the specified location.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The location for which virtual machines under the subscription are queried.
 //   - options - VirtualMachinesClientListByLocationOptions contains the optional parameters for the VirtualMachinesClient.NewListByLocationPager
 //     method.
@@ -907,25 +1094,20 @@ func (client *VirtualMachinesClient) NewListByLocationPager(location string, opt
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachinesClientListByLocationResponse) (VirtualMachinesClientListByLocationResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByLocationCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachinesClient.NewListByLocationPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByLocationCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachinesClientListByLocationResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualMachinesClientListByLocationResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachinesClientListByLocationResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByLocationHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -945,7 +1127,7 @@ func (client *VirtualMachinesClient) listByLocationCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -963,7 +1145,7 @@ func (client *VirtualMachinesClient) listByLocationHandleResponse(resp *http.Res
 // BeginPerformMaintenance - The operation to perform maintenance on a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientBeginPerformMaintenanceOptions contains the optional parameters for the VirtualMachinesClient.BeginPerformMaintenance
@@ -974,29 +1156,40 @@ func (client *VirtualMachinesClient) BeginPerformMaintenance(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientPerformMaintenanceResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientPerformMaintenanceResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientPerformMaintenanceResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientPerformMaintenanceResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // PerformMaintenance - The operation to perform maintenance on a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) performMaintenance(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientBeginPerformMaintenanceOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginPerformMaintenance"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.performMaintenanceCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // performMaintenanceCreateRequest creates the PerformMaintenance request.
@@ -1019,7 +1212,7 @@ func (client *VirtualMachinesClient) performMaintenanceCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1029,7 +1222,7 @@ func (client *VirtualMachinesClient) performMaintenanceCreateRequest(ctx context
 // provisioned resources. You are still charged for this virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientBeginPowerOffOptions contains the optional parameters for the VirtualMachinesClient.BeginPowerOff
@@ -1040,9 +1233,14 @@ func (client *VirtualMachinesClient) BeginPowerOff(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientPowerOffResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientPowerOffResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientPowerOffResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientPowerOffResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -1050,20 +1248,26 @@ func (client *VirtualMachinesClient) BeginPowerOff(ctx context.Context, resource
 // resources. You are still charged for this virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) powerOff(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientBeginPowerOffOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginPowerOff"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.powerOffCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // powerOffCreateRequest creates the PowerOff request.
@@ -1089,7 +1293,7 @@ func (client *VirtualMachinesClient) powerOffCreateRequest(ctx context.Context,
 	if options != nil && options.SkipShutdown != nil {
 		reqQP.Set("skipShutdown", strconv.FormatBool(*options.SkipShutdown))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1098,7 +1302,7 @@ func (client *VirtualMachinesClient) powerOffCreateRequest(ctx context.Context,
 // BeginReapply - The operation to reapply a virtual machine's state.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientBeginReapplyOptions contains the optional parameters for the VirtualMachinesClient.BeginReapply
@@ -1109,29 +1313,40 @@ func (client *VirtualMachinesClient) BeginReapply(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientReapplyResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientReapplyResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientReapplyResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientReapplyResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Reapply - The operation to reapply a virtual machine's state.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) reapply(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientBeginReapplyOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginReapply"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.reapplyCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // reapplyCreateRequest creates the Reapply request.
@@ -1154,7 +1369,7 @@ func (client *VirtualMachinesClient) reapplyCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1163,7 +1378,7 @@ func (client *VirtualMachinesClient) reapplyCreateRequest(ctx context.Context, r
 // BeginRedeploy - Shuts down the virtual machine, moves it to a new node, and powers it back on.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientBeginRedeployOptions contains the optional parameters for the VirtualMachinesClient.BeginRedeploy
@@ -1174,29 +1389,40 @@ func (client *VirtualMachinesClient) BeginRedeploy(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientRedeployResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientRedeployResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientRedeployResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientRedeployResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Redeploy - Shuts down the virtual machine, moves it to a new node, and powers it back on.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) redeploy(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientBeginRedeployOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginRedeploy"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.redeployCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // redeployCreateRequest creates the Redeploy request.
@@ -1219,7 +1445,7 @@ func (client *VirtualMachinesClient) redeployCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1232,7 +1458,7 @@ func (client *VirtualMachinesClient) redeployCreateRequest(ctx context.Context,
 // will be deleted after reimage. The deleteOption of the OS disk should be updated accordingly before performing the reimage.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientBeginReimageOptions contains the optional parameters for the VirtualMachinesClient.BeginReimage
@@ -1243,9 +1469,14 @@ func (client *VirtualMachinesClient) BeginReimage(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientReimageResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientReimageResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientReimageResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientReimageResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -1256,20 +1487,26 @@ func (client *VirtualMachinesClient) BeginReimage(ctx context.Context, resourceG
 // will be deleted after reimage. The deleteOption of the OS disk should be updated accordingly before performing the reimage.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) reimage(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientBeginReimageOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginReimage"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.reimageCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // reimageCreateRequest creates the Reimage request.
@@ -1292,11 +1529,14 @@ func (client *VirtualMachinesClient) reimageCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.Parameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.Parameters)
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -1304,7 +1544,7 @@ func (client *VirtualMachinesClient) reimageCreateRequest(ctx context.Context, r
 // BeginRestart - The operation to restart a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientBeginRestartOptions contains the optional parameters for the VirtualMachinesClient.BeginRestart
@@ -1315,29 +1555,40 @@ func (client *VirtualMachinesClient) BeginRestart(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientRestartResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientRestartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Restart - The operation to restart a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) restart(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientBeginRestartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginRestart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.restartCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // restartCreateRequest creates the Restart request.
@@ -1360,7 +1611,7 @@ func (client *VirtualMachinesClient) restartCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1369,24 +1620,31 @@ func (client *VirtualMachinesClient) restartCreateRequest(ctx context.Context, r
 // RetrieveBootDiagnosticsData - The operation to retrieve SAS URIs for a virtual machine's boot diagnostic logs.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientRetrieveBootDiagnosticsDataOptions contains the optional parameters for the VirtualMachinesClient.RetrieveBootDiagnosticsData
 //     method.
 func (client *VirtualMachinesClient) RetrieveBootDiagnosticsData(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientRetrieveBootDiagnosticsDataOptions) (VirtualMachinesClientRetrieveBootDiagnosticsDataResponse, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.RetrieveBootDiagnosticsData"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.retrieveBootDiagnosticsDataCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return VirtualMachinesClientRetrieveBootDiagnosticsDataResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachinesClientRetrieveBootDiagnosticsDataResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachinesClientRetrieveBootDiagnosticsDataResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachinesClientRetrieveBootDiagnosticsDataResponse{}, err
 	}
-	return client.retrieveBootDiagnosticsDataHandleResponse(resp)
+	resp, err := client.retrieveBootDiagnosticsDataHandleResponse(httpResp)
+	return resp, err
 }
 
 // retrieveBootDiagnosticsDataCreateRequest creates the RetrieveBootDiagnosticsData request.
@@ -1412,7 +1670,7 @@ func (client *VirtualMachinesClient) retrieveBootDiagnosticsDataCreateRequest(ct
 	if options != nil && options.SasURIExpirationTimeInMinutes != nil {
 		reqQP.Set("sasUriExpirationTimeInMinutes", strconv.FormatInt(int64(*options.SasURIExpirationTimeInMinutes), 10))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1430,7 +1688,7 @@ func (client *VirtualMachinesClient) retrieveBootDiagnosticsDataHandleResponse(r
 // BeginRunCommand - Run command on the VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - parameters - Parameters supplied to the Run command operation.
@@ -1442,31 +1700,41 @@ func (client *VirtualMachinesClient) BeginRunCommand(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientRunCommandResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientRunCommandResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientRunCommandResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientRunCommandResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // RunCommand - Run command on the VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) runCommand(ctx context.Context, resourceGroupName string, vmName string, parameters RunCommandInput, options *VirtualMachinesClientBeginRunCommandOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginRunCommand"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.runCommandCreateRequest(ctx, resourceGroupName, vmName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // runCommandCreateRequest creates the RunCommand request.
@@ -1489,31 +1757,40 @@ func (client *VirtualMachinesClient) runCommandCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // SimulateEviction - The operation to simulate the eviction of spot virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientSimulateEvictionOptions contains the optional parameters for the VirtualMachinesClient.SimulateEviction
 //     method.
 func (client *VirtualMachinesClient) SimulateEviction(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientSimulateEvictionOptions) (VirtualMachinesClientSimulateEvictionResponse, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.SimulateEviction"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.simulateEvictionCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return VirtualMachinesClientSimulateEvictionResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachinesClientSimulateEvictionResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusNoContent) {
-		return VirtualMachinesClientSimulateEvictionResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachinesClientSimulateEvictionResponse{}, err
 	}
 	return VirtualMachinesClientSimulateEvictionResponse{}, nil
 }
@@ -1538,7 +1815,7 @@ func (client *VirtualMachinesClient) simulateEvictionCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1547,7 +1824,7 @@ func (client *VirtualMachinesClient) simulateEvictionCreateRequest(ctx context.C
 // BeginStart - The operation to start a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - options - VirtualMachinesClientBeginStartOptions contains the optional parameters for the VirtualMachinesClient.BeginStart
@@ -1558,29 +1835,40 @@ func (client *VirtualMachinesClient) BeginStart(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientStartResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientStartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientStartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientStartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Start - The operation to start a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) start(ctx context.Context, resourceGroupName string, vmName string, options *VirtualMachinesClientBeginStartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginStart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startCreateRequest(ctx, resourceGroupName, vmName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startCreateRequest creates the Start request.
@@ -1603,7 +1891,7 @@ func (client *VirtualMachinesClient) startCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1612,7 +1900,7 @@ func (client *VirtualMachinesClient) startCreateRequest(ctx context.Context, res
 // BeginUpdate - The operation to update a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmName - The name of the virtual machine.
 //   - parameters - Parameters supplied to the Update Virtual Machine operation.
@@ -1624,29 +1912,40 @@ func (client *VirtualMachinesClient) BeginUpdate(ctx context.Context, resourceGr
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachinesClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachinesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachinesClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachinesClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - The operation to update a virtual machine.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachinesClient) update(ctx context.Context, resourceGroupName string, vmName string, parameters VirtualMachineUpdate, options *VirtualMachinesClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachinesClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, vmName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -1669,8 +1968,17 @@ func (client *VirtualMachinesClient) updateCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
+	if options != nil && options.IfMatch != nil {
+		req.Raw().Header["If-Match"] = []string{*options.IfMatch}
+	}
+	if options != nil && options.IfNoneMatch != nil {
+		req.Raw().Header["If-None-Match"] = []string{*options.IfNoneMatch}
+	}
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetextensions_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetextensions_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetextensions_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetextensions_client.go
index 4e5ce4c39c5..585b4265786 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetextensions_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetextensions_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type VirtualMachineScaleSetExtensionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineScaleSetExtensionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineScaleSetExtensionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineScaleSetExtensionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualMachineScaleSetExtensionsClient(subscriptionID string, credential
 // BeginCreateOrUpdate - The operation to create or update an extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set where the extension should be create or updated.
 //   - vmssExtensionName - The name of the VM scale set extension.
@@ -61,29 +60,40 @@ func (client *VirtualMachineScaleSetExtensionsClient) BeginCreateOrUpdate(ctx co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetExtensionsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetExtensionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetExtensionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetExtensionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - The operation to create or update an extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetExtensionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, vmScaleSetName string, vmssExtensionName string, extensionParameters VirtualMachineScaleSetExtension, options *VirtualMachineScaleSetExtensionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetExtensionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, vmScaleSetName, vmssExtensionName, extensionParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -110,16 +120,19 @@ func (client *VirtualMachineScaleSetExtensionsClient) createOrUpdateCreateReques
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, extensionParameters)
+	if err := runtime.MarshalAsJSON(req, extensionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - The operation to delete the extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set where the extension should be deleted.
 //   - vmssExtensionName - The name of the VM scale set extension.
@@ -131,29 +144,40 @@ func (client *VirtualMachineScaleSetExtensionsClient) BeginDelete(ctx context.Co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetExtensionsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetExtensionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetExtensionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetExtensionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - The operation to delete the extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetExtensionsClient) deleteOperation(ctx context.Context, resourceGroupName string, vmScaleSetName string, vmssExtensionName string, options *VirtualMachineScaleSetExtensionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetExtensionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, vmScaleSetName, vmssExtensionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -180,7 +204,7 @@ func (client *VirtualMachineScaleSetExtensionsClient) deleteCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -189,25 +213,32 @@ func (client *VirtualMachineScaleSetExtensionsClient) deleteCreateRequest(ctx co
 // Get - The operation to get the extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set containing the extension.
 //   - vmssExtensionName - The name of the VM scale set extension.
 //   - options - VirtualMachineScaleSetExtensionsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.Get
 //     method.
 func (client *VirtualMachineScaleSetExtensionsClient) Get(ctx context.Context, resourceGroupName string, vmScaleSetName string, vmssExtensionName string, options *VirtualMachineScaleSetExtensionsClientGetOptions) (VirtualMachineScaleSetExtensionsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetExtensionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, vmScaleSetName, vmssExtensionName, options)
 	if err != nil {
 		return VirtualMachineScaleSetExtensionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetExtensionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetExtensionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetExtensionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -237,7 +268,7 @@ func (client *VirtualMachineScaleSetExtensionsClient) getCreateRequest(ctx conte
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -254,7 +285,7 @@ func (client *VirtualMachineScaleSetExtensionsClient) getHandleResponse(resp *ht
 
 // NewListPager - Gets a list of all extensions in a VM scale set.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set containing the extension.
 //   - options - VirtualMachineScaleSetExtensionsClientListOptions contains the optional parameters for the VirtualMachineScaleSetExtensionsClient.NewListPager
@@ -265,25 +296,20 @@ func (client *VirtualMachineScaleSetExtensionsClient) NewListPager(resourceGroup
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachineScaleSetExtensionsClientListResponse) (VirtualMachineScaleSetExtensionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualMachineScaleSetExtensionsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachineScaleSetExtensionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachineScaleSetExtensionsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachineScaleSetExtensionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -307,7 +333,7 @@ func (client *VirtualMachineScaleSetExtensionsClient) listCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -325,7 +351,7 @@ func (client *VirtualMachineScaleSetExtensionsClient) listHandleResponse(resp *h
 // BeginUpdate - The operation to update an extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set where the extension should be updated.
 //   - vmssExtensionName - The name of the VM scale set extension.
@@ -338,29 +364,40 @@ func (client *VirtualMachineScaleSetExtensionsClient) BeginUpdate(ctx context.Co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetExtensionsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetExtensionsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetExtensionsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetExtensionsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - The operation to update an extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetExtensionsClient) update(ctx context.Context, resourceGroupName string, vmScaleSetName string, vmssExtensionName string, extensionParameters VirtualMachineScaleSetExtensionUpdate, options *VirtualMachineScaleSetExtensionsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetExtensionsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, vmScaleSetName, vmssExtensionName, extensionParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -387,8 +424,11 @@ func (client *VirtualMachineScaleSetExtensionsClient) updateCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, extensionParameters)
+	if err := runtime.MarshalAsJSON(req, extensionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetrollingupgrades_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetrollingupgrades_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetrollingupgrades_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetrollingupgrades_client.go
index c5555664155..9ef8a1902a9 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetrollingupgrades_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetrollingupgrades_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type VirtualMachineScaleSetRollingUpgradesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineScaleSetRollingUpgradesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineScaleSetRollingUpgradesClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineScaleSetRollingUpgradesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualMachineScaleSetRollingUpgradesClient(subscriptionID string, crede
 // BeginCancel - Cancels the current virtual machine scale set rolling upgrade.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetRollingUpgradesClientBeginCancelOptions contains the optional parameters for the VirtualMachineScaleSetRollingUpgradesClient.BeginCancel
@@ -59,29 +58,40 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) BeginCancel(ctx conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetRollingUpgradesClientCancelResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetRollingUpgradesClientCancelResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetRollingUpgradesClientCancelResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetRollingUpgradesClientCancelResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Cancel - Cancels the current virtual machine scale set rolling upgrade.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetRollingUpgradesClient) cancel(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetRollingUpgradesClientBeginCancelOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetRollingUpgradesClient.BeginCancel"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.cancelCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // cancelCreateRequest creates the Cancel request.
@@ -104,7 +114,7 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) cancelCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -113,24 +123,31 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) cancelCreateRequest(c
 // GetLatest - Gets the status of the latest virtual machine scale set rolling upgrade.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetRollingUpgradesClientGetLatestOptions contains the optional parameters for the VirtualMachineScaleSetRollingUpgradesClient.GetLatest
 //     method.
 func (client *VirtualMachineScaleSetRollingUpgradesClient) GetLatest(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetRollingUpgradesClientGetLatestOptions) (VirtualMachineScaleSetRollingUpgradesClientGetLatestResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetRollingUpgradesClient.GetLatest"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getLatestCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return VirtualMachineScaleSetRollingUpgradesClientGetLatestResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetRollingUpgradesClientGetLatestResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetRollingUpgradesClientGetLatestResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetRollingUpgradesClientGetLatestResponse{}, err
 	}
-	return client.getLatestHandleResponse(resp)
+	resp, err := client.getLatestHandleResponse(httpResp)
+	return resp, err
 }
 
 // getLatestCreateRequest creates the GetLatest request.
@@ -153,7 +170,7 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) getLatestCreateReques
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -173,7 +190,7 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) getLatestHandleRespon
 // are not affected.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetRollingUpgradesClientBeginStartExtensionUpgradeOptions contains the optional parameters
@@ -184,9 +201,14 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) BeginStartExtensionUp
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetRollingUpgradesClientStartExtensionUpgradeResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetRollingUpgradesClientStartExtensionUpgradeResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetRollingUpgradesClientStartExtensionUpgradeResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetRollingUpgradesClientStartExtensionUpgradeResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -195,20 +217,26 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) BeginStartExtensionUp
 // are not affected.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetRollingUpgradesClient) startExtensionUpgrade(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetRollingUpgradesClientBeginStartExtensionUpgradeOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetRollingUpgradesClient.BeginStartExtensionUpgrade"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startExtensionUpgradeCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startExtensionUpgradeCreateRequest creates the StartExtensionUpgrade request.
@@ -231,7 +259,7 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) startExtensionUpgrade
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -242,7 +270,7 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) startExtensionUpgrade
 // affected.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetRollingUpgradesClientBeginStartOSUpgradeOptions contains the optional parameters for the
@@ -253,9 +281,14 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) BeginStartOSUpgrade(c
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetRollingUpgradesClientStartOSUpgradeResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetRollingUpgradesClientStartOSUpgradeResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetRollingUpgradesClientStartOSUpgradeResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetRollingUpgradesClientStartOSUpgradeResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -264,20 +297,26 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) BeginStartOSUpgrade(c
 // affected.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetRollingUpgradesClient) startOSUpgrade(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetRollingUpgradesClientBeginStartOSUpgradeOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetRollingUpgradesClient.BeginStartOSUpgrade"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startOSUpgradeCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startOSUpgradeCreateRequest creates the StartOSUpgrade request.
@@ -300,7 +339,7 @@ func (client *VirtualMachineScaleSetRollingUpgradesClient) startOSUpgradeCreateR
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesets_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesets_client.go
similarity index 70%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesets_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesets_client.go
index 362e29720cd..eb6506c1599 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesets_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesets_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -35,7 +34,7 @@ type VirtualMachineScaleSetsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineScaleSetsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineScaleSetsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineScaleSetsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -46,26 +45,116 @@ func NewVirtualMachineScaleSetsClient(subscriptionID string, credential azcore.T
 	return client, nil
 }
 
+// BeginApproveRollingUpgrade - Approve upgrade on deferred rolling upgrades for OS disks in the virtual machines in a VM
+// scale set.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+//   - resourceGroupName - The name of the resource group.
+//   - vmScaleSetName - The name of the VM scale set.
+//   - options - VirtualMachineScaleSetsClientBeginApproveRollingUpgradeOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginApproveRollingUpgrade
+//     method.
+func (client *VirtualMachineScaleSetsClient) BeginApproveRollingUpgrade(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginApproveRollingUpgradeOptions) (*runtime.Poller[VirtualMachineScaleSetsClientApproveRollingUpgradeResponse], error) {
+	if options == nil || options.ResumeToken == "" {
+		resp, err := client.approveRollingUpgrade(ctx, resourceGroupName, vmScaleSetName, options)
+		if err != nil {
+			return nil, err
+		}
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientApproveRollingUpgradeResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
+	} else {
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientApproveRollingUpgradeResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+	}
+}
+
+// ApproveRollingUpgrade - Approve upgrade on deferred rolling upgrades for OS disks in the virtual machines in a VM scale
+// set.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+func (client *VirtualMachineScaleSetsClient) approveRollingUpgrade(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginApproveRollingUpgradeOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginApproveRollingUpgrade"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	req, err := client.approveRollingUpgradeCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
+	if err != nil {
+		return nil, err
+	}
+	httpResp, err := client.internal.Pipeline().Do(req)
+	if err != nil {
+		return nil, err
+	}
+	if !runtime.HasStatusCode(httpResp, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
+	}
+	return httpResp, nil
+}
+
+// approveRollingUpgradeCreateRequest creates the ApproveRollingUpgrade request.
+func (client *VirtualMachineScaleSetsClient) approveRollingUpgradeCreateRequest(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginApproveRollingUpgradeOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachineScaleSets/{vmScaleSetName}/approveRollingUpgrade"
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if vmScaleSetName == "" {
+		return nil, errors.New("parameter vmScaleSetName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{vmScaleSetName}", url.PathEscape(vmScaleSetName))
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	req, err := runtime.NewRequest(ctx, http.MethodPost, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-09-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	if options != nil && options.VMInstanceIDs != nil {
+		if err := runtime.MarshalAsJSON(req, *options.VMInstanceIDs); err != nil {
+			return nil, err
+		}
+		return req, nil
+	}
+	return req, nil
+}
+
 // ConvertToSinglePlacementGroup - Converts SinglePlacementGroup property to false for a existing virtual machine scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the virtual machine scale set to create or update.
 //   - parameters - The input object for ConvertToSinglePlacementGroup API.
 //   - options - VirtualMachineScaleSetsClientConvertToSinglePlacementGroupOptions contains the optional parameters for the VirtualMachineScaleSetsClient.ConvertToSinglePlacementGroup
 //     method.
 func (client *VirtualMachineScaleSetsClient) ConvertToSinglePlacementGroup(ctx context.Context, resourceGroupName string, vmScaleSetName string, parameters VMScaleSetConvertToSinglePlacementGroupInput, options *VirtualMachineScaleSetsClientConvertToSinglePlacementGroupOptions) (VirtualMachineScaleSetsClientConvertToSinglePlacementGroupResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.ConvertToSinglePlacementGroup"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.convertToSinglePlacementGroupCreateRequest(ctx, resourceGroupName, vmScaleSetName, parameters, options)
 	if err != nil {
 		return VirtualMachineScaleSetsClientConvertToSinglePlacementGroupResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetsClientConvertToSinglePlacementGroupResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetsClientConvertToSinglePlacementGroupResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetsClientConvertToSinglePlacementGroupResponse{}, err
 	}
 	return VirtualMachineScaleSetsClientConvertToSinglePlacementGroupResponse{}, nil
 }
@@ -90,16 +179,19 @@ func (client *VirtualMachineScaleSetsClient) convertToSinglePlacementGroupCreate
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginCreateOrUpdate - Create or update a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set to create or update.
 //   - parameters - The scale set object.
@@ -111,29 +203,40 @@ func (client *VirtualMachineScaleSetsClient) BeginCreateOrUpdate(ctx context.Con
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Create or update a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) createOrUpdate(ctx context.Context, resourceGroupName string, vmScaleSetName string, parameters VirtualMachineScaleSet, options *VirtualMachineScaleSetsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, vmScaleSetName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -156,10 +259,19 @@ func (client *VirtualMachineScaleSetsClient) createOrUpdateCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
+	if options != nil && options.IfMatch != nil {
+		req.Raw().Header["If-Match"] = []string{*options.IfMatch}
+	}
+	if options != nil && options.IfNoneMatch != nil {
+		req.Raw().Header["If-None-Match"] = []string{*options.IfNoneMatch}
+	}
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDeallocate - Deallocates specific virtual machines in a VM scale set. Shuts down the virtual machines and releases
@@ -167,7 +279,7 @@ func (client *VirtualMachineScaleSetsClient) createOrUpdateCreateRequest(ctx con
 // scale set deallocates.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientBeginDeallocateOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginDeallocate
@@ -178,9 +290,14 @@ func (client *VirtualMachineScaleSetsClient) BeginDeallocate(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientDeallocateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientDeallocateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientDeallocateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientDeallocateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -189,20 +306,26 @@ func (client *VirtualMachineScaleSetsClient) BeginDeallocate(ctx context.Context
 // scale set deallocates.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) deallocate(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginDeallocateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginDeallocate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deallocateCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deallocateCreateRequest creates the Deallocate request.
@@ -225,11 +348,17 @@ func (client *VirtualMachineScaleSetsClient) deallocateCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	if options != nil && options.Hibernate != nil {
+		reqQP.Set("hibernate", strconv.FormatBool(*options.Hibernate))
+	}
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.VMInstanceIDs != nil {
-		return req, runtime.MarshalAsJSON(req, *options.VMInstanceIDs)
+		if err := runtime.MarshalAsJSON(req, *options.VMInstanceIDs); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -237,7 +366,7 @@ func (client *VirtualMachineScaleSetsClient) deallocateCreateRequest(ctx context
 // BeginDelete - Deletes a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientBeginDeleteOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginDelete
@@ -248,29 +377,40 @@ func (client *VirtualMachineScaleSetsClient) BeginDelete(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) deleteOperation(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -296,7 +436,7 @@ func (client *VirtualMachineScaleSetsClient) deleteCreateRequest(ctx context.Con
 	if options != nil && options.ForceDeletion != nil {
 		reqQP.Set("forceDeletion", strconv.FormatBool(*options.ForceDeletion))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -305,7 +445,7 @@ func (client *VirtualMachineScaleSetsClient) deleteCreateRequest(ctx context.Con
 // BeginDeleteInstances - Deletes virtual machines in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - vmInstanceIDs - A list of virtual machine instance IDs from the VM scale set.
@@ -317,29 +457,40 @@ func (client *VirtualMachineScaleSetsClient) BeginDeleteInstances(ctx context.Co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientDeleteInstancesResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientDeleteInstancesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientDeleteInstancesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientDeleteInstancesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // DeleteInstances - Deletes virtual machines in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) deleteInstances(ctx context.Context, resourceGroupName string, vmScaleSetName string, vmInstanceIDs VirtualMachineScaleSetVMInstanceRequiredIDs, options *VirtualMachineScaleSetsClientBeginDeleteInstancesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginDeleteInstances"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteInstancesCreateRequest(ctx, resourceGroupName, vmScaleSetName, vmInstanceIDs, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteInstancesCreateRequest creates the DeleteInstances request.
@@ -365,35 +516,45 @@ func (client *VirtualMachineScaleSetsClient) deleteInstancesCreateRequest(ctx co
 	if options != nil && options.ForceDeletion != nil {
 		reqQP.Set("forceDeletion", strconv.FormatBool(*options.ForceDeletion))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vmInstanceIDs)
+	if err := runtime.MarshalAsJSON(req, vmInstanceIDs); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // ForceRecoveryServiceFabricPlatformUpdateDomainWalk - Manual platform update domain walk to update virtual machines in a
 // service fabric virtual machine scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - platformUpdateDomain - The platform update domain for which a manual recovery walk is requested
 //   - options - VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkOptions contains the optional
 //     parameters for the VirtualMachineScaleSetsClient.ForceRecoveryServiceFabricPlatformUpdateDomainWalk method.
 func (client *VirtualMachineScaleSetsClient) ForceRecoveryServiceFabricPlatformUpdateDomainWalk(ctx context.Context, resourceGroupName string, vmScaleSetName string, platformUpdateDomain int32, options *VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkOptions) (VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.ForceRecoveryServiceFabricPlatformUpdateDomainWalk"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.forceRecoveryServiceFabricPlatformUpdateDomainWalkCreateRequest(ctx, resourceGroupName, vmScaleSetName, platformUpdateDomain, options)
 	if err != nil {
 		return VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetsClientForceRecoveryServiceFabricPlatformUpdateDomainWalkResponse{}, err
 	}
-	return client.forceRecoveryServiceFabricPlatformUpdateDomainWalkHandleResponse(resp)
+	resp, err := client.forceRecoveryServiceFabricPlatformUpdateDomainWalkHandleResponse(httpResp)
+	return resp, err
 }
 
 // forceRecoveryServiceFabricPlatformUpdateDomainWalkCreateRequest creates the ForceRecoveryServiceFabricPlatformUpdateDomainWalk request.
@@ -416,7 +577,7 @@ func (client *VirtualMachineScaleSetsClient) forceRecoveryServiceFabricPlatformU
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	reqQP.Set("platformUpdateDomain", strconv.FormatInt(int64(platformUpdateDomain), 10))
 	if options != nil && options.Zone != nil {
 		reqQP.Set("zone", *options.Zone)
@@ -441,24 +602,31 @@ func (client *VirtualMachineScaleSetsClient) forceRecoveryServiceFabricPlatformU
 // Get - Display information about a virtual machine scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetsClient.Get
 //     method.
 func (client *VirtualMachineScaleSetsClient) Get(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientGetOptions) (VirtualMachineScaleSetsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return VirtualMachineScaleSetsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -481,7 +649,7 @@ func (client *VirtualMachineScaleSetsClient) getCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
@@ -502,24 +670,31 @@ func (client *VirtualMachineScaleSetsClient) getHandleResponse(resp *http.Respon
 // GetInstanceView - Gets the status of a VM scale set instance.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientGetInstanceViewOptions contains the optional parameters for the VirtualMachineScaleSetsClient.GetInstanceView
 //     method.
 func (client *VirtualMachineScaleSetsClient) GetInstanceView(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientGetInstanceViewOptions) (VirtualMachineScaleSetsClientGetInstanceViewResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.GetInstanceView"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getInstanceViewCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return VirtualMachineScaleSetsClientGetInstanceViewResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetsClientGetInstanceViewResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetsClientGetInstanceViewResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetsClientGetInstanceViewResponse{}, err
 	}
-	return client.getInstanceViewHandleResponse(resp)
+	resp, err := client.getInstanceViewHandleResponse(httpResp)
+	return resp, err
 }
 
 // getInstanceViewCreateRequest creates the GetInstanceView request.
@@ -542,7 +717,7 @@ func (client *VirtualMachineScaleSetsClient) getInstanceViewCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -559,7 +734,7 @@ func (client *VirtualMachineScaleSetsClient) getInstanceViewHandleResponse(resp
 
 // NewGetOSUpgradeHistoryPager - Gets list of OS upgrades on a VM scale set instance.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientGetOSUpgradeHistoryOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewGetOSUpgradeHistoryPager
@@ -570,25 +745,20 @@ func (client *VirtualMachineScaleSetsClient) NewGetOSUpgradeHistoryPager(resourc
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachineScaleSetsClientGetOSUpgradeHistoryResponse) (VirtualMachineScaleSetsClientGetOSUpgradeHistoryResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.getOSUpgradeHistoryCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachineScaleSetsClient.NewGetOSUpgradeHistoryPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.getOSUpgradeHistoryCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachineScaleSetsClientGetOSUpgradeHistoryResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualMachineScaleSetsClientGetOSUpgradeHistoryResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachineScaleSetsClientGetOSUpgradeHistoryResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.getOSUpgradeHistoryHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -612,7 +782,7 @@ func (client *VirtualMachineScaleSetsClient) getOSUpgradeHistoryCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -629,7 +799,7 @@ func (client *VirtualMachineScaleSetsClient) getOSUpgradeHistoryHandleResponse(r
 
 // NewListPager - Gets a list of all VM scale sets under a resource group.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - VirtualMachineScaleSetsClientListOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListPager
 //     method.
@@ -639,25 +809,20 @@ func (client *VirtualMachineScaleSetsClient) NewListPager(resourceGroupName stri
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachineScaleSetsClientListResponse) (VirtualMachineScaleSetsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachineScaleSetsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachineScaleSetsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualMachineScaleSetsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachineScaleSetsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -677,7 +842,7 @@ func (client *VirtualMachineScaleSetsClient) listCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -696,7 +861,7 @@ func (client *VirtualMachineScaleSetsClient) listHandleResponse(resp *http.Respo
 // nextLink property in the response to get the next page of VM Scale Sets. Do this till nextLink is
 // null to fetch all the VM Scale Sets.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - options - VirtualMachineScaleSetsClientListAllOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListAllPager
 //     method.
 func (client *VirtualMachineScaleSetsClient) NewListAllPager(options *VirtualMachineScaleSetsClientListAllOptions) *runtime.Pager[VirtualMachineScaleSetsClientListAllResponse] {
@@ -705,25 +870,20 @@ func (client *VirtualMachineScaleSetsClient) NewListAllPager(options *VirtualMac
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachineScaleSetsClientListAllResponse) (VirtualMachineScaleSetsClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachineScaleSetsClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachineScaleSetsClientListAllResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualMachineScaleSetsClientListAllResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachineScaleSetsClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -739,7 +899,7 @@ func (client *VirtualMachineScaleSetsClient) listAllCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -756,7 +916,7 @@ func (client *VirtualMachineScaleSetsClient) listAllHandleResponse(resp *http.Re
 
 // NewListByLocationPager - Gets all the VM scale sets under the specified subscription for the specified location.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The location for which VM scale sets under the subscription are queried.
 //   - options - VirtualMachineScaleSetsClientListByLocationOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListByLocationPager
 //     method.
@@ -766,25 +926,20 @@ func (client *VirtualMachineScaleSetsClient) NewListByLocationPager(location str
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachineScaleSetsClientListByLocationResponse) (VirtualMachineScaleSetsClientListByLocationResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByLocationCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualMachineScaleSetsClientListByLocationResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachineScaleSetsClient.NewListByLocationPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByLocationCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachineScaleSetsClientListByLocationResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachineScaleSetsClientListByLocationResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByLocationHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -804,7 +959,7 @@ func (client *VirtualMachineScaleSetsClient) listByLocationCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -822,7 +977,7 @@ func (client *VirtualMachineScaleSetsClient) listByLocationHandleResponse(resp *
 // NewListSKUsPager - Gets a list of SKUs available for your VM scale set, including the minimum and maximum VM instances
 // allowed for each SKU.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientListSKUsOptions contains the optional parameters for the VirtualMachineScaleSetsClient.NewListSKUsPager
@@ -833,25 +988,20 @@ func (client *VirtualMachineScaleSetsClient) NewListSKUsPager(resourceGroupName
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachineScaleSetsClientListSKUsResponse) (VirtualMachineScaleSetsClientListSKUsResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listSKUsCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualMachineScaleSetsClientListSKUsResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachineScaleSetsClient.NewListSKUsPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listSKUsCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachineScaleSetsClientListSKUsResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachineScaleSetsClientListSKUsResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listSKUsHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -875,7 +1025,7 @@ func (client *VirtualMachineScaleSetsClient) listSKUsCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -895,7 +1045,7 @@ func (client *VirtualMachineScaleSetsClient) listSKUsHandleResponse(resp *http.R
 // details: https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-maintenance-notifications
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientBeginPerformMaintenanceOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginPerformMaintenance
@@ -906,9 +1056,14 @@ func (client *VirtualMachineScaleSetsClient) BeginPerformMaintenance(ctx context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientPerformMaintenanceResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientPerformMaintenanceResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientPerformMaintenanceResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientPerformMaintenanceResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -917,20 +1072,26 @@ func (client *VirtualMachineScaleSetsClient) BeginPerformMaintenance(ctx context
 // details: https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-maintenance-notifications
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) performMaintenance(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginPerformMaintenanceOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginPerformMaintenance"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.performMaintenanceCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // performMaintenanceCreateRequest creates the PerformMaintenance request.
@@ -953,11 +1114,14 @@ func (client *VirtualMachineScaleSetsClient) performMaintenanceCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.VMInstanceIDs != nil {
-		return req, runtime.MarshalAsJSON(req, *options.VMInstanceIDs)
+		if err := runtime.MarshalAsJSON(req, *options.VMInstanceIDs); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -967,7 +1131,7 @@ func (client *VirtualMachineScaleSetsClient) performMaintenanceCreateRequest(ctx
 // avoid charges.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientBeginPowerOffOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginPowerOff
@@ -978,9 +1142,14 @@ func (client *VirtualMachineScaleSetsClient) BeginPowerOff(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientPowerOffResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientPowerOffResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientPowerOffResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientPowerOffResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -989,20 +1158,26 @@ func (client *VirtualMachineScaleSetsClient) BeginPowerOff(ctx context.Context,
 // avoid charges.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) powerOff(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginPowerOffOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginPowerOff"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.powerOffCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // powerOffCreateRequest creates the PowerOff request.
@@ -1028,20 +1203,100 @@ func (client *VirtualMachineScaleSetsClient) powerOffCreateRequest(ctx context.C
 	if options != nil && options.SkipShutdown != nil {
 		reqQP.Set("skipShutdown", strconv.FormatBool(*options.SkipShutdown))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.VMInstanceIDs != nil {
-		return req, runtime.MarshalAsJSON(req, *options.VMInstanceIDs)
+		if err := runtime.MarshalAsJSON(req, *options.VMInstanceIDs); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
 
+// BeginReapply - Reapplies the Virtual Machine Scale Set Virtual Machine Profile to the Virtual Machine Instances
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+//   - resourceGroupName - The name of the resource group.
+//   - vmScaleSetName - The name of the VM scale set.
+//   - options - VirtualMachineScaleSetsClientBeginReapplyOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginReapply
+//     method.
+func (client *VirtualMachineScaleSetsClient) BeginReapply(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginReapplyOptions) (*runtime.Poller[VirtualMachineScaleSetsClientReapplyResponse], error) {
+	if options == nil || options.ResumeToken == "" {
+		resp, err := client.reapply(ctx, resourceGroupName, vmScaleSetName, options)
+		if err != nil {
+			return nil, err
+		}
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientReapplyResponse]{
+			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
+		})
+		return poller, err
+	} else {
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientReapplyResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+	}
+}
+
+// Reapply - Reapplies the Virtual Machine Scale Set Virtual Machine Profile to the Virtual Machine Instances
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+func (client *VirtualMachineScaleSetsClient) reapply(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginReapplyOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginReapply"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	req, err := client.reapplyCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
+	if err != nil {
+		return nil, err
+	}
+	httpResp, err := client.internal.Pipeline().Do(req)
+	if err != nil {
+		return nil, err
+	}
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
+	}
+	return httpResp, nil
+}
+
+// reapplyCreateRequest creates the Reapply request.
+func (client *VirtualMachineScaleSetsClient) reapplyCreateRequest(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginReapplyOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachineScaleSets/{vmScaleSetName}/reapply"
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if vmScaleSetName == "" {
+		return nil, errors.New("parameter vmScaleSetName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{vmScaleSetName}", url.PathEscape(vmScaleSetName))
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	req, err := runtime.NewRequest(ctx, http.MethodPost, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-09-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	return req, nil
+}
+
 // BeginRedeploy - Shuts down all the virtual machines in the virtual machine scale set, moves them to a new node, and powers
 // them back on.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientBeginRedeployOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginRedeploy
@@ -1052,9 +1307,14 @@ func (client *VirtualMachineScaleSetsClient) BeginRedeploy(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientRedeployResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientRedeployResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientRedeployResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientRedeployResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -1062,20 +1322,26 @@ func (client *VirtualMachineScaleSetsClient) BeginRedeploy(ctx context.Context,
 // back on.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) redeploy(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginRedeployOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginRedeploy"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.redeployCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // redeployCreateRequest creates the Redeploy request.
@@ -1098,11 +1364,14 @@ func (client *VirtualMachineScaleSetsClient) redeployCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.VMInstanceIDs != nil {
-		return req, runtime.MarshalAsJSON(req, *options.VMInstanceIDs)
+		if err := runtime.MarshalAsJSON(req, *options.VMInstanceIDs); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -1112,7 +1381,7 @@ func (client *VirtualMachineScaleSetsClient) redeployCreateRequest(ctx context.C
 // reset to initial state.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientBeginReimageOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginReimage
@@ -1123,9 +1392,14 @@ func (client *VirtualMachineScaleSetsClient) BeginReimage(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientReimageResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientReimageResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientReimageResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientReimageResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -1134,20 +1408,26 @@ func (client *VirtualMachineScaleSetsClient) BeginReimage(ctx context.Context, r
 // reset to initial state.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) reimage(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginReimageOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginReimage"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.reimageCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // reimageCreateRequest creates the Reimage request.
@@ -1170,11 +1450,14 @@ func (client *VirtualMachineScaleSetsClient) reimageCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.VMScaleSetReimageInput != nil {
-		return req, runtime.MarshalAsJSON(req, *options.VMScaleSetReimageInput)
+		if err := runtime.MarshalAsJSON(req, *options.VMScaleSetReimageInput); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -1183,7 +1466,7 @@ func (client *VirtualMachineScaleSetsClient) reimageCreateRequest(ctx context.Co
 // is only supported for managed disks.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientBeginReimageAllOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginReimageAll
@@ -1194,9 +1477,14 @@ func (client *VirtualMachineScaleSetsClient) BeginReimageAll(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientReimageAllResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientReimageAllResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientReimageAllResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientReimageAllResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -1204,20 +1492,26 @@ func (client *VirtualMachineScaleSetsClient) BeginReimageAll(ctx context.Context
 // is only supported for managed disks.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) reimageAll(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginReimageAllOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginReimageAll"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.reimageAllCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // reimageAllCreateRequest creates the ReimageAll request.
@@ -1240,11 +1534,14 @@ func (client *VirtualMachineScaleSetsClient) reimageAllCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.VMInstanceIDs != nil {
-		return req, runtime.MarshalAsJSON(req, *options.VMInstanceIDs)
+		if err := runtime.MarshalAsJSON(req, *options.VMInstanceIDs); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -1252,7 +1549,7 @@ func (client *VirtualMachineScaleSetsClient) reimageAllCreateRequest(ctx context
 // BeginRestart - Restarts one or more virtual machines in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientBeginRestartOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginRestart
@@ -1263,29 +1560,40 @@ func (client *VirtualMachineScaleSetsClient) BeginRestart(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientRestartResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientRestartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Restart - Restarts one or more virtual machines in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) restart(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginRestartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginRestart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.restartCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // restartCreateRequest creates the Restart request.
@@ -1308,11 +1616,14 @@ func (client *VirtualMachineScaleSetsClient) restartCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.VMInstanceIDs != nil {
-		return req, runtime.MarshalAsJSON(req, *options.VMInstanceIDs)
+		if err := runtime.MarshalAsJSON(req, *options.VMInstanceIDs); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -1320,7 +1631,7 @@ func (client *VirtualMachineScaleSetsClient) restartCreateRequest(ctx context.Co
 // BeginSetOrchestrationServiceState - Changes ServiceState property for a given service
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the virtual machine scale set to create or update.
 //   - parameters - The input object for SetOrchestrationServiceState API.
@@ -1332,29 +1643,40 @@ func (client *VirtualMachineScaleSetsClient) BeginSetOrchestrationServiceState(c
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientSetOrchestrationServiceStateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientSetOrchestrationServiceStateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientSetOrchestrationServiceStateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientSetOrchestrationServiceStateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // SetOrchestrationServiceState - Changes ServiceState property for a given service
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) setOrchestrationServiceState(ctx context.Context, resourceGroupName string, vmScaleSetName string, parameters OrchestrationServiceStateInput, options *VirtualMachineScaleSetsClientBeginSetOrchestrationServiceStateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginSetOrchestrationServiceState"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.setOrchestrationServiceStateCreateRequest(ctx, resourceGroupName, vmScaleSetName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // setOrchestrationServiceStateCreateRequest creates the SetOrchestrationServiceState request.
@@ -1377,16 +1699,19 @@ func (client *VirtualMachineScaleSetsClient) setOrchestrationServiceStateCreateR
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginStart - Starts one or more virtual machines in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetsClientBeginStartOptions contains the optional parameters for the VirtualMachineScaleSetsClient.BeginStart
@@ -1397,29 +1722,40 @@ func (client *VirtualMachineScaleSetsClient) BeginStart(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientStartResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientStartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientStartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientStartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Start - Starts one or more virtual machines in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) start(ctx context.Context, resourceGroupName string, vmScaleSetName string, options *VirtualMachineScaleSetsClientBeginStartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginStart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startCreateRequest(ctx, resourceGroupName, vmScaleSetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startCreateRequest creates the Start request.
@@ -1442,11 +1778,14 @@ func (client *VirtualMachineScaleSetsClient) startCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.VMInstanceIDs != nil {
-		return req, runtime.MarshalAsJSON(req, *options.VMInstanceIDs)
+		if err := runtime.MarshalAsJSON(req, *options.VMInstanceIDs); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -1454,7 +1793,7 @@ func (client *VirtualMachineScaleSetsClient) startCreateRequest(ctx context.Cont
 // BeginUpdate - Update a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set to create or update.
 //   - parameters - The scale set object.
@@ -1466,29 +1805,40 @@ func (client *VirtualMachineScaleSetsClient) BeginUpdate(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Update a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) update(ctx context.Context, resourceGroupName string, vmScaleSetName string, parameters VirtualMachineScaleSetUpdate, options *VirtualMachineScaleSetsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, vmScaleSetName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -1511,16 +1861,25 @@ func (client *VirtualMachineScaleSetsClient) updateCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
+	if options != nil && options.IfMatch != nil {
+		req.Raw().Header["If-Match"] = []string{*options.IfMatch}
+	}
+	if options != nil && options.IfNoneMatch != nil {
+		req.Raw().Header["If-None-Match"] = []string{*options.IfNoneMatch}
+	}
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginUpdateInstances - Upgrades one or more virtual machines to the latest SKU set in the VM scale set model.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - vmInstanceIDs - A list of virtual machine instance IDs from the VM scale set.
@@ -1532,29 +1891,40 @@ func (client *VirtualMachineScaleSetsClient) BeginUpdateInstances(ctx context.Co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetsClientUpdateInstancesResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetsClientUpdateInstancesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetsClientUpdateInstancesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetsClientUpdateInstancesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // UpdateInstances - Upgrades one or more virtual machines to the latest SKU set in the VM scale set model.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetsClient) updateInstances(ctx context.Context, resourceGroupName string, vmScaleSetName string, vmInstanceIDs VirtualMachineScaleSetVMInstanceRequiredIDs, options *VirtualMachineScaleSetsClientBeginUpdateInstancesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetsClient.BeginUpdateInstances"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateInstancesCreateRequest(ctx, resourceGroupName, vmScaleSetName, vmInstanceIDs, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateInstancesCreateRequest creates the UpdateInstances request.
@@ -1577,8 +1947,11 @@ func (client *VirtualMachineScaleSetsClient) updateInstancesCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vmInstanceIDs)
+	if err := runtime.MarshalAsJSON(req, vmInstanceIDs); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetvmextensions_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvmextensions_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetvmextensions_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvmextensions_client.go
index fb02b3bea91..ff23476236a 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetvmextensions_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvmextensions_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type VirtualMachineScaleSetVMExtensionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineScaleSetVMExtensionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineScaleSetVMExtensionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineScaleSetVMExtensionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualMachineScaleSetVMExtensionsClient(subscriptionID string, credenti
 // BeginCreateOrUpdate - The operation to create or update the VMSS VM extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -62,29 +61,40 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) BeginCreateOrUpdate(ctx
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMExtensionsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMExtensionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMExtensionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMExtensionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - The operation to create or update the VMSS VM extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMExtensionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, vmExtensionName string, extensionParameters VirtualMachineScaleSetVMExtension, options *VirtualMachineScaleSetVMExtensionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMExtensionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, vmExtensionName, extensionParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -115,16 +125,19 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) createOrUpdateCreateRequ
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, extensionParameters)
+	if err := runtime.MarshalAsJSON(req, extensionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - The operation to delete the VMSS VM extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -137,29 +150,40 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) BeginDelete(ctx context.
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMExtensionsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMExtensionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMExtensionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMExtensionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - The operation to delete the VMSS VM extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMExtensionsClient) deleteOperation(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, vmExtensionName string, options *VirtualMachineScaleSetVMExtensionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMExtensionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, vmExtensionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -190,7 +214,7 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) deleteCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -199,7 +223,7 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) deleteCreateRequest(ctx
 // Get - The operation to get the VMSS VM extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -207,18 +231,25 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) deleteCreateRequest(ctx
 //   - options - VirtualMachineScaleSetVMExtensionsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.Get
 //     method.
 func (client *VirtualMachineScaleSetVMExtensionsClient) Get(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, vmExtensionName string, options *VirtualMachineScaleSetVMExtensionsClientGetOptions) (VirtualMachineScaleSetVMExtensionsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMExtensionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, vmExtensionName, options)
 	if err != nil {
 		return VirtualMachineScaleSetVMExtensionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetVMExtensionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetVMExtensionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetVMExtensionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -252,7 +283,7 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) getCreateRequest(ctx con
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -270,25 +301,32 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) getHandleResponse(resp *
 // List - The operation to get all extensions of an instance in Virtual Machine Scaleset.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
 //   - options - VirtualMachineScaleSetVMExtensionsClientListOptions contains the optional parameters for the VirtualMachineScaleSetVMExtensionsClient.List
 //     method.
 func (client *VirtualMachineScaleSetVMExtensionsClient) List(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMExtensionsClientListOptions) (VirtualMachineScaleSetVMExtensionsClientListResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMExtensionsClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return VirtualMachineScaleSetVMExtensionsClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetVMExtensionsClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetVMExtensionsClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetVMExtensionsClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -318,7 +356,7 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) listCreateRequest(ctx co
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -336,7 +374,7 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) listHandleResponse(resp
 // BeginUpdate - The operation to update the VMSS VM extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -350,29 +388,40 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) BeginUpdate(ctx context.
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMExtensionsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMExtensionsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMExtensionsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMExtensionsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - The operation to update the VMSS VM extension.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMExtensionsClient) update(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, vmExtensionName string, extensionParameters VirtualMachineScaleSetVMExtensionUpdate, options *VirtualMachineScaleSetVMExtensionsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMExtensionsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, vmExtensionName, extensionParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -403,8 +452,11 @@ func (client *VirtualMachineScaleSetVMExtensionsClient) updateCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, extensionParameters)
+	if err := runtime.MarshalAsJSON(req, extensionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetvmruncommands_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvmruncommands_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetvmruncommands_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvmruncommands_client.go
index 67642752097..9736973fc5a 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetvmruncommands_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvmruncommands_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type VirtualMachineScaleSetVMRunCommandsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineScaleSetVMRunCommandsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineScaleSetVMRunCommandsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineScaleSetVMRunCommandsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualMachineScaleSetVMRunCommandsClient(subscriptionID string, credent
 // BeginCreateOrUpdate - The operation to create or update the VMSS VM run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -62,29 +61,40 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) BeginCreateOrUpdate(ctx
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMRunCommandsClientCreateOrUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMRunCommandsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMRunCommandsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMRunCommandsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - The operation to create or update the VMSS VM run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMRunCommandsClient) createOrUpdate(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, runCommandName string, runCommand VirtualMachineRunCommand, options *VirtualMachineScaleSetVMRunCommandsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMRunCommandsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, runCommandName, runCommand, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -115,16 +125,19 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) createOrUpdateCreateReq
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
-	return req, runtime.MarshalAsJSON(req, runCommand)
+	if err := runtime.MarshalAsJSON(req, runCommand); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - The operation to delete the VMSS VM run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -137,29 +150,40 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) BeginDelete(ctx context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMRunCommandsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMRunCommandsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMRunCommandsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMRunCommandsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - The operation to delete the VMSS VM run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMRunCommandsClient) deleteOperation(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, runCommandName string, options *VirtualMachineScaleSetVMRunCommandsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMRunCommandsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, runCommandName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -190,7 +214,7 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) deleteCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
 	return req, nil
@@ -199,7 +223,7 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) deleteCreateRequest(ctx
 // Get - The operation to get the VMSS VM run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -207,18 +231,25 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) deleteCreateRequest(ctx
 //   - options - VirtualMachineScaleSetVMRunCommandsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetVMRunCommandsClient.Get
 //     method.
 func (client *VirtualMachineScaleSetVMRunCommandsClient) Get(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, runCommandName string, options *VirtualMachineScaleSetVMRunCommandsClientGetOptions) (VirtualMachineScaleSetVMRunCommandsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMRunCommandsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, runCommandName, options)
 	if err != nil {
 		return VirtualMachineScaleSetVMRunCommandsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetVMRunCommandsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetVMRunCommandsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetVMRunCommandsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -252,7 +283,7 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) getCreateRequest(ctx co
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
 	return req, nil
@@ -269,7 +300,7 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) getHandleResponse(resp
 
 // NewListPager - The operation to get all run commands of an instance in Virtual Machine Scaleset.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -281,25 +312,20 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) NewListPager(resourceGr
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachineScaleSetVMRunCommandsClientListResponse) (VirtualMachineScaleSetVMRunCommandsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualMachineScaleSetVMRunCommandsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachineScaleSetVMRunCommandsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachineScaleSetVMRunCommandsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachineScaleSetVMRunCommandsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -330,7 +356,7 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) listCreateRequest(ctx c
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
 	return req, nil
@@ -348,7 +374,7 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) listHandleResponse(resp
 // BeginUpdate - The operation to update the VMSS VM run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -362,29 +388,40 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) BeginUpdate(ctx context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMRunCommandsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMRunCommandsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMRunCommandsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMRunCommandsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - The operation to update the VMSS VM run command.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMRunCommandsClient) update(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, runCommandName string, runCommand VirtualMachineRunCommandUpdate, options *VirtualMachineScaleSetVMRunCommandsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMRunCommandsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, runCommandName, runCommand, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -415,8 +452,11 @@ func (client *VirtualMachineScaleSetVMRunCommandsClient) updateCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
-	return req, runtime.MarshalAsJSON(req, runCommand)
+	if err := runtime.MarshalAsJSON(req, runCommand); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetvms_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvms_client.go
similarity index 68%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetvms_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvms_client.go
index e6e52c0a42c..e1da5fc116e 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinescalesetvms_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvms_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -35,7 +34,7 @@ type VirtualMachineScaleSetVMsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineScaleSetVMsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineScaleSetVMsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineScaleSetVMsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -46,12 +45,179 @@ func NewVirtualMachineScaleSetVMsClient(subscriptionID string, credential azcore
 	return client, nil
 }
 
+// BeginApproveRollingUpgrade - Approve upgrade on deferred rolling upgrade for OS disk on a VM scale set instance.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+//   - resourceGroupName - The name of the resource group.
+//   - vmScaleSetName - The name of the VM scale set.
+//   - instanceID - The instance ID of the virtual machine.
+//   - options - VirtualMachineScaleSetVMsClientBeginApproveRollingUpgradeOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginApproveRollingUpgrade
+//     method.
+func (client *VirtualMachineScaleSetVMsClient) BeginApproveRollingUpgrade(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginApproveRollingUpgradeOptions) (*runtime.Poller[VirtualMachineScaleSetVMsClientApproveRollingUpgradeResponse], error) {
+	if options == nil || options.ResumeToken == "" {
+		resp, err := client.approveRollingUpgrade(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
+		if err != nil {
+			return nil, err
+		}
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientApproveRollingUpgradeResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
+	} else {
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientApproveRollingUpgradeResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+	}
+}
+
+// ApproveRollingUpgrade - Approve upgrade on deferred rolling upgrade for OS disk on a VM scale set instance.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+func (client *VirtualMachineScaleSetVMsClient) approveRollingUpgrade(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginApproveRollingUpgradeOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginApproveRollingUpgrade"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	req, err := client.approveRollingUpgradeCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
+	if err != nil {
+		return nil, err
+	}
+	httpResp, err := client.internal.Pipeline().Do(req)
+	if err != nil {
+		return nil, err
+	}
+	if !runtime.HasStatusCode(httpResp, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
+	}
+	return httpResp, nil
+}
+
+// approveRollingUpgradeCreateRequest creates the ApproveRollingUpgrade request.
+func (client *VirtualMachineScaleSetVMsClient) approveRollingUpgradeCreateRequest(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginApproveRollingUpgradeOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachineScaleSets/{vmScaleSetName}/virtualMachines/{instanceId}/approveRollingUpgrade"
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if vmScaleSetName == "" {
+		return nil, errors.New("parameter vmScaleSetName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{vmScaleSetName}", url.PathEscape(vmScaleSetName))
+	if instanceID == "" {
+		return nil, errors.New("parameter instanceID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{instanceId}", url.PathEscape(instanceID))
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	req, err := runtime.NewRequest(ctx, http.MethodPost, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-09-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	return req, nil
+}
+
+// BeginAttachDetachDataDisks - Attach and detach data disks to/from a virtual machine in a VM scale set.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+//   - resourceGroupName - The name of the resource group.
+//   - vmScaleSetName - The name of the VM scale set.
+//   - instanceID - The instance ID of the virtual machine.
+//   - parameters - Parameters supplied to the attach and detach data disks operation on a Virtual Machine Scale Sets VM.
+//   - options - VirtualMachineScaleSetVMsClientBeginAttachDetachDataDisksOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.BeginAttachDetachDataDisks
+//     method.
+func (client *VirtualMachineScaleSetVMsClient) BeginAttachDetachDataDisks(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, parameters AttachDetachDataDisksRequest, options *VirtualMachineScaleSetVMsClientBeginAttachDetachDataDisksOptions) (*runtime.Poller[VirtualMachineScaleSetVMsClientAttachDetachDataDisksResponse], error) {
+	if options == nil || options.ResumeToken == "" {
+		resp, err := client.attachDetachDataDisks(ctx, resourceGroupName, vmScaleSetName, instanceID, parameters, options)
+		if err != nil {
+			return nil, err
+		}
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientAttachDetachDataDisksResponse]{
+			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
+		})
+		return poller, err
+	} else {
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientAttachDetachDataDisksResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+	}
+}
+
+// AttachDetachDataDisks - Attach and detach data disks to/from a virtual machine in a VM scale set.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-09-01
+func (client *VirtualMachineScaleSetVMsClient) attachDetachDataDisks(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, parameters AttachDetachDataDisksRequest, options *VirtualMachineScaleSetVMsClientBeginAttachDetachDataDisksOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginAttachDetachDataDisks"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	req, err := client.attachDetachDataDisksCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, parameters, options)
+	if err != nil {
+		return nil, err
+	}
+	httpResp, err := client.internal.Pipeline().Do(req)
+	if err != nil {
+		return nil, err
+	}
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
+	}
+	return httpResp, nil
+}
+
+// attachDetachDataDisksCreateRequest creates the AttachDetachDataDisks request.
+func (client *VirtualMachineScaleSetVMsClient) attachDetachDataDisksCreateRequest(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, parameters AttachDetachDataDisksRequest, options *VirtualMachineScaleSetVMsClientBeginAttachDetachDataDisksOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachineScaleSets/{vmScaleSetName}/virtualmachines/{instanceId}/attachDetachDataDisks"
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if vmScaleSetName == "" {
+		return nil, errors.New("parameter vmScaleSetName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{vmScaleSetName}", url.PathEscape(vmScaleSetName))
+	if instanceID == "" {
+		return nil, errors.New("parameter instanceID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{instanceId}", url.PathEscape(instanceID))
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	req, err := runtime.NewRequest(ctx, http.MethodPost, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-09-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
+}
+
 // BeginDeallocate - Deallocates a specific virtual machine in a VM scale set. Shuts down the virtual machine and releases
 // the compute resources it uses. You are not billed for the compute resources of this virtual
 // machine once it is deallocated.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -63,9 +229,14 @@ func (client *VirtualMachineScaleSetVMsClient) BeginDeallocate(ctx context.Conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMsClientDeallocateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientDeallocateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMsClientDeallocateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientDeallocateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -74,20 +245,26 @@ func (client *VirtualMachineScaleSetVMsClient) BeginDeallocate(ctx context.Conte
 // machine once it is deallocated.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMsClient) deallocate(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginDeallocateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginDeallocate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deallocateCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deallocateCreateRequest creates the Deallocate request.
@@ -114,7 +291,7 @@ func (client *VirtualMachineScaleSetVMsClient) deallocateCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -123,7 +300,7 @@ func (client *VirtualMachineScaleSetVMsClient) deallocateCreateRequest(ctx conte
 // BeginDelete - Deletes a virtual machine from a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -135,29 +312,40 @@ func (client *VirtualMachineScaleSetVMsClient) BeginDelete(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMsClientDeleteResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a virtual machine from a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMsClient) deleteOperation(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -187,7 +375,7 @@ func (client *VirtualMachineScaleSetVMsClient) deleteCreateRequest(ctx context.C
 	if options != nil && options.ForceDeletion != nil {
 		reqQP.Set("forceDeletion", strconv.FormatBool(*options.ForceDeletion))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -196,25 +384,32 @@ func (client *VirtualMachineScaleSetVMsClient) deleteCreateRequest(ctx context.C
 // Get - Gets a virtual machine from a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
 //   - options - VirtualMachineScaleSetVMsClientGetOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.Get
 //     method.
 func (client *VirtualMachineScaleSetVMsClient) Get(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientGetOptions) (VirtualMachineScaleSetVMsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return VirtualMachineScaleSetVMsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetVMsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetVMsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetVMsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -244,7 +439,7 @@ func (client *VirtualMachineScaleSetVMsClient) getCreateRequest(ctx context.Cont
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", string(*options.Expand))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -262,25 +457,32 @@ func (client *VirtualMachineScaleSetVMsClient) getHandleResponse(resp *http.Resp
 // GetInstanceView - Gets the status of a virtual machine from a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
 //   - options - VirtualMachineScaleSetVMsClientGetInstanceViewOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.GetInstanceView
 //     method.
 func (client *VirtualMachineScaleSetVMsClient) GetInstanceView(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientGetInstanceViewOptions) (VirtualMachineScaleSetVMsClientGetInstanceViewResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.GetInstanceView"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getInstanceViewCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return VirtualMachineScaleSetVMsClientGetInstanceViewResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetVMsClientGetInstanceViewResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetVMsClientGetInstanceViewResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetVMsClientGetInstanceViewResponse{}, err
 	}
-	return client.getInstanceViewHandleResponse(resp)
+	resp, err := client.getInstanceViewHandleResponse(httpResp)
+	return resp, err
 }
 
 // getInstanceViewCreateRequest creates the GetInstanceView request.
@@ -307,7 +509,7 @@ func (client *VirtualMachineScaleSetVMsClient) getInstanceViewCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -324,7 +526,7 @@ func (client *VirtualMachineScaleSetVMsClient) getInstanceViewHandleResponse(res
 
 // NewListPager - Gets a list of all virtual machines in a VM scale sets.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualMachineScaleSetName - The name of the VM scale set.
 //   - options - VirtualMachineScaleSetVMsClientListOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.NewListPager
@@ -335,25 +537,20 @@ func (client *VirtualMachineScaleSetVMsClient) NewListPager(resourceGroupName st
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachineScaleSetVMsClientListResponse) (VirtualMachineScaleSetVMsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualMachineScaleSetVMsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachineScaleSetVMsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, options)
+			}, nil)
 			if err != nil {
 				return VirtualMachineScaleSetVMsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualMachineScaleSetVMsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -386,7 +583,7 @@ func (client *VirtualMachineScaleSetVMsClient) listCreateRequest(ctx context.Con
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -404,7 +601,7 @@ func (client *VirtualMachineScaleSetVMsClient) listHandleResponse(resp *http.Res
 // BeginPerformMaintenance - Performs maintenance on a virtual machine in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -416,29 +613,40 @@ func (client *VirtualMachineScaleSetVMsClient) BeginPerformMaintenance(ctx conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMsClientPerformMaintenanceResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientPerformMaintenanceResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMsClientPerformMaintenanceResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientPerformMaintenanceResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // PerformMaintenance - Performs maintenance on a virtual machine in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMsClient) performMaintenance(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginPerformMaintenanceOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginPerformMaintenance"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.performMaintenanceCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // performMaintenanceCreateRequest creates the PerformMaintenance request.
@@ -465,7 +673,7 @@ func (client *VirtualMachineScaleSetVMsClient) performMaintenanceCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -476,7 +684,7 @@ func (client *VirtualMachineScaleSetVMsClient) performMaintenanceCreateRequest(c
 // charges.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -488,9 +696,14 @@ func (client *VirtualMachineScaleSetVMsClient) BeginPowerOff(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMsClientPowerOffResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientPowerOffResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMsClientPowerOffResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientPowerOffResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -499,20 +712,26 @@ func (client *VirtualMachineScaleSetVMsClient) BeginPowerOff(ctx context.Context
 // charges.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMsClient) powerOff(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginPowerOffOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginPowerOff"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.powerOffCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // powerOffCreateRequest creates the PowerOff request.
@@ -542,7 +761,7 @@ func (client *VirtualMachineScaleSetVMsClient) powerOffCreateRequest(ctx context
 	if options != nil && options.SkipShutdown != nil {
 		reqQP.Set("skipShutdown", strconv.FormatBool(*options.SkipShutdown))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -552,7 +771,7 @@ func (client *VirtualMachineScaleSetVMsClient) powerOffCreateRequest(ctx context
 // back on.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -564,9 +783,14 @@ func (client *VirtualMachineScaleSetVMsClient) BeginRedeploy(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMsClientRedeployResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientRedeployResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMsClientRedeployResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientRedeployResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -574,20 +798,26 @@ func (client *VirtualMachineScaleSetVMsClient) BeginRedeploy(ctx context.Context
 // on.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMsClient) redeploy(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginRedeployOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginRedeploy"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.redeployCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // redeployCreateRequest creates the Redeploy request.
@@ -614,7 +844,7 @@ func (client *VirtualMachineScaleSetVMsClient) redeployCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -623,7 +853,7 @@ func (client *VirtualMachineScaleSetVMsClient) redeployCreateRequest(ctx context
 // BeginReimage - Reimages (upgrade the operating system) a specific virtual machine in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -635,29 +865,40 @@ func (client *VirtualMachineScaleSetVMsClient) BeginReimage(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMsClientReimageResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientReimageResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMsClientReimageResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientReimageResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Reimage - Reimages (upgrade the operating system) a specific virtual machine in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMsClient) reimage(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginReimageOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginReimage"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.reimageCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // reimageCreateRequest creates the Reimage request.
@@ -684,11 +925,14 @@ func (client *VirtualMachineScaleSetVMsClient) reimageCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.VMScaleSetVMReimageInput != nil {
-		return req, runtime.MarshalAsJSON(req, *options.VMScaleSetVMReimageInput)
+		if err := runtime.MarshalAsJSON(req, *options.VMScaleSetVMReimageInput); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -697,7 +941,7 @@ func (client *VirtualMachineScaleSetVMsClient) reimageCreateRequest(ctx context.
 // is only supported for managed disks.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -709,9 +953,14 @@ func (client *VirtualMachineScaleSetVMsClient) BeginReimageAll(ctx context.Conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMsClientReimageAllResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientReimageAllResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMsClientReimageAllResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientReimageAllResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -719,20 +968,26 @@ func (client *VirtualMachineScaleSetVMsClient) BeginReimageAll(ctx context.Conte
 // is only supported for managed disks.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMsClient) reimageAll(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginReimageAllOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginReimageAll"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.reimageAllCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // reimageAllCreateRequest creates the ReimageAll request.
@@ -759,7 +1014,7 @@ func (client *VirtualMachineScaleSetVMsClient) reimageAllCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -768,7 +1023,7 @@ func (client *VirtualMachineScaleSetVMsClient) reimageAllCreateRequest(ctx conte
 // BeginRestart - Restarts a virtual machine in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -780,29 +1035,40 @@ func (client *VirtualMachineScaleSetVMsClient) BeginRestart(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMsClientRestartResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMsClientRestartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientRestartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Restart - Restarts a virtual machine in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMsClient) restart(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginRestartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginRestart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.restartCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // restartCreateRequest creates the Restart request.
@@ -829,7 +1095,7 @@ func (client *VirtualMachineScaleSetVMsClient) restartCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -839,25 +1105,32 @@ func (client *VirtualMachineScaleSetVMsClient) restartCreateRequest(ctx context.
 // scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
 //   - options - VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.RetrieveBootDiagnosticsData
 //     method.
 func (client *VirtualMachineScaleSetVMsClient) RetrieveBootDiagnosticsData(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataOptions) (VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.RetrieveBootDiagnosticsData"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.retrieveBootDiagnosticsDataCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetVMsClientRetrieveBootDiagnosticsDataResponse{}, err
 	}
-	return client.retrieveBootDiagnosticsDataHandleResponse(resp)
+	resp, err := client.retrieveBootDiagnosticsDataHandleResponse(httpResp)
+	return resp, err
 }
 
 // retrieveBootDiagnosticsDataCreateRequest creates the RetrieveBootDiagnosticsData request.
@@ -887,7 +1160,7 @@ func (client *VirtualMachineScaleSetVMsClient) retrieveBootDiagnosticsDataCreate
 	if options != nil && options.SasURIExpirationTimeInMinutes != nil {
 		reqQP.Set("sasUriExpirationTimeInMinutes", strconv.FormatInt(int64(*options.SasURIExpirationTimeInMinutes), 10))
 	}
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -905,7 +1178,7 @@ func (client *VirtualMachineScaleSetVMsClient) retrieveBootDiagnosticsDataHandle
 // BeginRunCommand - Run command on a virtual machine in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -918,31 +1191,41 @@ func (client *VirtualMachineScaleSetVMsClient) BeginRunCommand(ctx context.Conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientRunCommandResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientRunCommandResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMsClientRunCommandResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientRunCommandResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // RunCommand - Run command on a virtual machine in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMsClient) runCommand(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, parameters RunCommandInput, options *VirtualMachineScaleSetVMsClientBeginRunCommandOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginRunCommand"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.runCommandCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // runCommandCreateRequest creates the RunCommand request.
@@ -969,32 +1252,41 @@ func (client *VirtualMachineScaleSetVMsClient) runCommandCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json, text/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // SimulateEviction - The operation to simulate the eviction of spot virtual machine in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
 //   - options - VirtualMachineScaleSetVMsClientSimulateEvictionOptions contains the optional parameters for the VirtualMachineScaleSetVMsClient.SimulateEviction
 //     method.
 func (client *VirtualMachineScaleSetVMsClient) SimulateEviction(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientSimulateEvictionOptions) (VirtualMachineScaleSetVMsClientSimulateEvictionResponse, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.SimulateEviction"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.simulateEvictionCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return VirtualMachineScaleSetVMsClientSimulateEvictionResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualMachineScaleSetVMsClientSimulateEvictionResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusNoContent) {
-		return VirtualMachineScaleSetVMsClientSimulateEvictionResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualMachineScaleSetVMsClientSimulateEvictionResponse{}, err
 	}
 	return VirtualMachineScaleSetVMsClientSimulateEvictionResponse{}, nil
 }
@@ -1023,7 +1315,7 @@ func (client *VirtualMachineScaleSetVMsClient) simulateEvictionCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1032,7 +1324,7 @@ func (client *VirtualMachineScaleSetVMsClient) simulateEvictionCreateRequest(ctx
 // BeginStart - Starts a virtual machine in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set.
 //   - instanceID - The instance ID of the virtual machine.
@@ -1044,29 +1336,40 @@ func (client *VirtualMachineScaleSetVMsClient) BeginStart(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMsClientStartResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientStartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMsClientStartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientStartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Start - Starts a virtual machine in a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMsClient) start(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, options *VirtualMachineScaleSetVMsClientBeginStartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginStart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startCreateRequest creates the Start request.
@@ -1093,7 +1396,7 @@ func (client *VirtualMachineScaleSetVMsClient) startCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1102,7 +1405,7 @@ func (client *VirtualMachineScaleSetVMsClient) startCreateRequest(ctx context.Co
 // BeginUpdate - Updates a virtual machine of a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - resourceGroupName - The name of the resource group.
 //   - vmScaleSetName - The name of the VM scale set where the extension should be create or updated.
 //   - instanceID - The instance ID of the virtual machine.
@@ -1115,29 +1418,40 @@ func (client *VirtualMachineScaleSetVMsClient) BeginUpdate(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VirtualMachineScaleSetVMsClientUpdateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualMachineScaleSetVMsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualMachineScaleSetVMsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualMachineScaleSetVMsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Updates a virtual machine of a VM scale set.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 func (client *VirtualMachineScaleSetVMsClient) update(ctx context.Context, resourceGroupName string, vmScaleSetName string, instanceID string, parameters VirtualMachineScaleSetVM, options *VirtualMachineScaleSetVMsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualMachineScaleSetVMsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, vmScaleSetName, instanceID, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -1164,8 +1478,17 @@ func (client *VirtualMachineScaleSetVMsClient) updateCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
+	if options != nil && options.IfMatch != nil {
+		req.Raw().Header["If-Match"] = []string{*options.IfMatch}
+	}
+	if options != nil && options.IfNoneMatch != nil {
+		req.Raw().Header["If-None-Match"] = []string{*options.IfNoneMatch}
+	}
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinesizes_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinesizes_client.go
similarity index 92%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinesizes_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinesizes_client.go
index 0ec5a12a44e..02aadc8c2c6 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4/virtualmachinesizes_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinesizes_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armcompute
 
@@ -34,7 +33,7 @@ type VirtualMachineSizesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualMachineSizesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualMachineSizesClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualMachineSizesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewVirtualMachineSizesClient(subscriptionID string, credential azcore.Token
 
 // NewListPager - This API is deprecated. Use Resources Skus [https://docs.microsoft.com/rest/api/compute/resourceskus/list]
 //
-// Generated from API version 2022-11-01
+// Generated from API version 2023-09-01
 //   - location - The location upon which virtual-machine-sizes is queried.
 //   - options - VirtualMachineSizesClientListOptions contains the optional parameters for the VirtualMachineSizesClient.NewListPager
 //     method.
@@ -57,6 +56,7 @@ func (client *VirtualMachineSizesClient) NewListPager(location string, options *
 			return false
 		},
 		Fetcher: func(ctx context.Context, page *VirtualMachineSizesClientListResponse) (VirtualMachineSizesClientListResponse, error) {
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualMachineSizesClient.NewListPager")
 			req, err := client.listCreateRequest(ctx, location, options)
 			if err != nil {
 				return VirtualMachineSizesClientListResponse{}, err
@@ -70,6 +70,7 @@ func (client *VirtualMachineSizesClient) NewListPager(location string, options *
 			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -89,7 +90,7 @@ func (client *VirtualMachineSizesClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-11-01")
+	reqQP.Set("api-version", "2023-09-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/autorest.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/autorest.md
deleted file mode 100644
index d0e49fa0adc..00000000000
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/autorest.md
+++ /dev/null
@@ -1,12 +0,0 @@
-### AutoRest Configuration
-
-> see https://aka.ms/autorest
-
-``` yaml
-azure-arm: true
-require:
-- https://github.com/Azure/azure-rest-api-specs/blob/a60468a0c5e2beb054680ae488fb9f92699f0a0d/specification/network/resource-manager/readme.md
-- https://github.com/Azure/azure-rest-api-specs/blob/a60468a0c5e2beb054680ae488fb9f92699f0a0d/specification/network/resource-manager/readme.go.md
-license-header: MICROSOFT_MIT_NO_VERSION
-module-version: 2.2.1
-```
\ No newline at end of file
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/CHANGELOG.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/CHANGELOG.md
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/CHANGELOG.md
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/CHANGELOG.md
index cf63a807bfd..0d27c077349 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/CHANGELOG.md
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/CHANGELOG.md
@@ -1,5 +1,123 @@
 # Release History
 
+## 4.3.0 (2023-11-24)
+### Features Added
+
+- Support for test fakes and OpenTelemetry trace spans.
+
+
+## 4.3.0-beta.1 (2023-10-09)
+### Features Added
+
+- Support for test fakes and OpenTelemetry trace spans.
+
+## 4.2.0 (2023-09-22)
+### Features Added
+
+- New struct `BastionHostPropertiesFormatNetworkACLs`
+- New struct `IPRule`
+- New struct `VirtualNetworkGatewayAutoScaleBounds`
+- New struct `VirtualNetworkGatewayAutoScaleConfiguration`
+- New field `NetworkACLs`, `VirtualNetwork` in struct `BastionHostPropertiesFormat`
+- New field `Size` in struct `FirewallPolicyPropertiesFormat`
+- New field `Size` in struct `FirewallPolicyRuleCollectionGroupProperties`
+- New field `DefaultOutboundAccess` in struct `SubnetPropertiesFormat`
+- New field `AutoScaleConfiguration` in struct `VirtualNetworkGatewayPropertiesFormat`
+
+
+## 4.1.0 (2023-08-25)
+### Features Added
+
+- New value `ApplicationGatewaySKUNameBasic` added to enum type `ApplicationGatewaySKUName`
+- New value `ApplicationGatewayTierBasic` added to enum type `ApplicationGatewayTier`
+- New enum type `SyncMode` with values `SyncModeAutomatic`, `SyncModeManual`
+- New function `*LoadBalancersClient.MigrateToIPBased(context.Context, string, string, *LoadBalancersClientMigrateToIPBasedOptions) (LoadBalancersClientMigrateToIPBasedResponse, error)`
+- New struct `MigrateLoadBalancerToIPBasedRequest`
+- New struct `MigratedPools`
+- New field `SyncMode` in struct `BackendAddressPoolPropertiesFormat`
+
+
+## 4.0.0 (2023-07-11)
+### Breaking Changes
+
+- `ApplicationGatewayCustomErrorStatusCodeHTTPStatus499` from enum `ApplicationGatewayCustomErrorStatusCode` has been removed
+
+### Features Added
+
+- New enum type `AdminState` with values `AdminStateDisabled`, `AdminStateEnabled`
+- New field `ResourceGUID` in struct `AdminPropertiesFormat`
+- New field `ResourceGUID` in struct `AdminRuleCollectionPropertiesFormat`
+- New field `DefaultPredefinedSSLPolicy` in struct `ApplicationGatewayPropertiesFormat`
+- New field `ResourceGUID` in struct `ConnectivityConfigurationProperties`
+- New field `ResourceGUID` in struct `DefaultAdminPropertiesFormat`
+- New field `ResourceGUID` in struct `GroupProperties`
+- New field `ResourceGUID` in struct `ManagerProperties`
+- New field `ResourceGUID` in struct `SecurityAdminConfigurationPropertiesFormat`
+- New field `AdminState` in struct `VirtualNetworkGatewayPropertiesFormat`
+
+
+## 3.0.0 (2023-05-26)
+### Breaking Changes
+
+- Type of `EffectiveRouteMapRoute.Prefix` has been changed from `[]*string` to `*string`
+- `LoadBalancerBackendAddressAdminStateDrain` from enum `LoadBalancerBackendAddressAdminState` has been removed
+- Struct `PeerRouteList` has been removed
+- Field `PeerRouteList` of struct `VirtualHubBgpConnectionsClientListAdvertisedRoutesResponse` has been removed
+- Field `PeerRouteList` of struct `VirtualHubBgpConnectionsClientListLearnedRoutesResponse` has been removed
+
+### Features Added
+
+- New value `NetworkInterfaceAuxiliaryModeAcceleratedConnections` added to enum type `NetworkInterfaceAuxiliaryMode`
+- New value `WebApplicationFirewallRuleTypeRateLimitRule` added to enum type `WebApplicationFirewallRuleType`
+- New enum type `ApplicationGatewayFirewallRateLimitDuration` with values `ApplicationGatewayFirewallRateLimitDurationFiveMins`, `ApplicationGatewayFirewallRateLimitDurationOneMin`
+- New enum type `ApplicationGatewayFirewallUserSessionVariable` with values `ApplicationGatewayFirewallUserSessionVariableClientAddr`, `ApplicationGatewayFirewallUserSessionVariableGeoLocation`, `ApplicationGatewayFirewallUserSessionVariableNone`
+- New enum type `AzureFirewallPacketCaptureFlagsType` with values `AzureFirewallPacketCaptureFlagsTypeAck`, `AzureFirewallPacketCaptureFlagsTypeFin`, `AzureFirewallPacketCaptureFlagsTypePush`, `AzureFirewallPacketCaptureFlagsTypeRst`, `AzureFirewallPacketCaptureFlagsTypeSyn`, `AzureFirewallPacketCaptureFlagsTypeUrg`
+- New enum type `NetworkInterfaceAuxiliarySKU` with values `NetworkInterfaceAuxiliarySKUA1`, `NetworkInterfaceAuxiliarySKUA2`, `NetworkInterfaceAuxiliarySKUA4`, `NetworkInterfaceAuxiliarySKUA8`, `NetworkInterfaceAuxiliarySKUNone`
+- New enum type `PublicIPAddressDNSSettingsDomainNameLabelScope` with values `PublicIPAddressDNSSettingsDomainNameLabelScopeNoReuse`, `PublicIPAddressDNSSettingsDomainNameLabelScopeResourceGroupReuse`, `PublicIPAddressDNSSettingsDomainNameLabelScopeSubscriptionReuse`, `PublicIPAddressDNSSettingsDomainNameLabelScopeTenantReuse`
+- New enum type `ScrubbingRuleEntryMatchOperator` with values `ScrubbingRuleEntryMatchOperatorEquals`, `ScrubbingRuleEntryMatchOperatorEqualsAny`
+- New enum type `ScrubbingRuleEntryMatchVariable` with values `ScrubbingRuleEntryMatchVariableRequestArgNames`, `ScrubbingRuleEntryMatchVariableRequestCookieNames`, `ScrubbingRuleEntryMatchVariableRequestHeaderNames`, `ScrubbingRuleEntryMatchVariableRequestIPAddress`, `ScrubbingRuleEntryMatchVariableRequestJSONArgNames`, `ScrubbingRuleEntryMatchVariableRequestPostArgNames`
+- New enum type `ScrubbingRuleEntryState` with values `ScrubbingRuleEntryStateDisabled`, `ScrubbingRuleEntryStateEnabled`
+- New enum type `WebApplicationFirewallScrubbingState` with values `WebApplicationFirewallScrubbingStateDisabled`, `WebApplicationFirewallScrubbingStateEnabled`
+- New function `*AzureFirewallsClient.BeginPacketCapture(context.Context, string, string, FirewallPacketCaptureParameters, *AzureFirewallsClientBeginPacketCaptureOptions) (*runtime.Poller[AzureFirewallsClientPacketCaptureResponse], error)`
+- New function `*ClientFactory.NewVirtualApplianceConnectionsClient() *VirtualApplianceConnectionsClient`
+- New function `NewVirtualApplianceConnectionsClient(string, azcore.TokenCredential, *arm.ClientOptions) (*VirtualApplianceConnectionsClient, error)`
+- New function `*VirtualApplianceConnectionsClient.BeginCreateOrUpdate(context.Context, string, string, string, VirtualApplianceConnection, *VirtualApplianceConnectionsClientBeginCreateOrUpdateOptions) (*runtime.Poller[VirtualApplianceConnectionsClientCreateOrUpdateResponse], error)`
+- New function `*VirtualApplianceConnectionsClient.BeginDelete(context.Context, string, string, string, *VirtualApplianceConnectionsClientBeginDeleteOptions) (*runtime.Poller[VirtualApplianceConnectionsClientDeleteResponse], error)`
+- New function `*VirtualApplianceConnectionsClient.Get(context.Context, string, string, string, *VirtualApplianceConnectionsClientGetOptions) (VirtualApplianceConnectionsClientGetResponse, error)`
+- New function `*VirtualApplianceConnectionsClient.NewListPager(string, string, *VirtualApplianceConnectionsClientListOptions) *runtime.Pager[VirtualApplianceConnectionsClientListResponse]`
+- New struct `AzureFirewallPacketCaptureFlags`
+- New struct `AzureFirewallPacketCaptureRule`
+- New struct `EffectiveRouteMapRouteList`
+- New struct `FirewallPacketCaptureParameters`
+- New struct `FirewallPacketCaptureParametersFormat`
+- New struct `FirewallPolicyHTTPHeaderToInsert`
+- New struct `GroupByUserSession`
+- New struct `GroupByVariable`
+- New struct `PolicySettingsLogScrubbing`
+- New struct `PropagatedRouteTableNfv`
+- New struct `RoutingConfigurationNfv`
+- New struct `RoutingConfigurationNfvSubResource`
+- New struct `VirtualApplianceAdditionalNicProperties`
+- New struct `VirtualApplianceConnection`
+- New struct `VirtualApplianceConnectionList`
+- New struct `VirtualApplianceConnectionProperties`
+- New struct `WebApplicationFirewallScrubbingRules`
+- New field `HTTPHeadersToInsert` in struct `ApplicationRule`
+- New field `EnableKerberos` in struct `BastionHostPropertiesFormat`
+- New field `AuxiliarySKU` in struct `InterfacePropertiesFormat`
+- New field `FileUploadEnforcement`, `LogScrubbing`, `RequestBodyEnforcement`, `RequestBodyInspectLimitInKB` in struct `PolicySettings`
+- New field `PrivateEndpointLocation` in struct `PrivateEndpointConnectionProperties`
+- New field `DomainNameLabelScope` in struct `PublicIPAddressDNSSettings`
+- New field `InstanceName` in struct `VirtualApplianceNicProperties`
+- New field `AdditionalNics`, `VirtualApplianceConnections` in struct `VirtualAppliancePropertiesFormat`
+- New field `Value` in struct `VirtualHubBgpConnectionsClientListAdvertisedRoutesResponse`
+- New field `Value` in struct `VirtualHubBgpConnectionsClientListLearnedRoutesResponse`
+- New anonymous field `VirtualHubEffectiveRouteList` in struct `VirtualHubsClientGetEffectiveVirtualHubRoutesResponse`
+- New anonymous field `EffectiveRouteMapRouteList` in struct `VirtualHubsClientGetInboundRoutesResponse`
+- New anonymous field `EffectiveRouteMapRouteList` in struct `VirtualHubsClientGetOutboundRoutesResponse`
+- New field `GroupByUserSession`, `RateLimitDuration`, `RateLimitThreshold` in struct `WebApplicationFirewallCustomRule`
+
+
 ## 2.2.1 (2023-04-14)
 ### Bug Fixes
 
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/LICENSE.txt b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/LICENSE.txt
similarity index 100%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/LICENSE.txt
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/LICENSE.txt
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/README.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/README.md
similarity index 90%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/README.md
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/README.md
index 8ffb5332b45..0935650383a 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/README.md
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/README.md
@@ -60,8 +60,16 @@ A client groups a set of related APIs, providing access to its functionality.  C
 client := clientFactory.NewVirtualHubBgpConnectionsClient()
 ```
 
+## Fakes
+
+The fake package contains types used for constructing in-memory fake servers used in unit tests.
+This allows writing tests to cover various success/error conditions without the need for connecting to a live service.
+
+Please see https://github.com/Azure/azure-sdk-for-go/tree/main/sdk/samples/fakes for details and examples on how to use fakes.
+
 ## More sample code
 
+- [Creating a Fake](https://github.com/Azure/azure-sdk-for-go/blob/main/sdk/resourcemanager/network/armnetwork/fake_example_test.go)
 - [IP Address](https://aka.ms/azsdk/go/mgmt/samples?path=sdk/resourcemanager/network/ipaddress)
 - [Load Balancer](https://aka.ms/azsdk/go/mgmt/samples?path=sdk/resourcemanager/network/loadbalancer)
 - [Network Interface](https://aka.ms/azsdk/go/mgmt/samples?path=sdk/resourcemanager/network/networkInterface)
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/adminrulecollections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/adminrulecollections_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/adminrulecollections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/adminrulecollections_client.go
index d09b9f0cff6..c3b96670a98 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/adminrulecollections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/adminrulecollections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type AdminRuleCollectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewAdminRuleCollectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*AdminRuleCollectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".AdminRuleCollectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewAdminRuleCollectionsClient(subscriptionID string, credential azcore.Toke
 // CreateOrUpdate - Creates or updates an admin rule collection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager Security Configuration.
@@ -58,18 +57,25 @@ func NewAdminRuleCollectionsClient(subscriptionID string, credential azcore.Toke
 //   - options - AdminRuleCollectionsClientCreateOrUpdateOptions contains the optional parameters for the AdminRuleCollectionsClient.CreateOrUpdate
 //     method.
 func (client *AdminRuleCollectionsClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, ruleCollectionName string, ruleCollection AdminRuleCollection, options *AdminRuleCollectionsClientCreateOrUpdateOptions) (AdminRuleCollectionsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "AdminRuleCollectionsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, ruleCollectionName, ruleCollection, options)
 	if err != nil {
 		return AdminRuleCollectionsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return AdminRuleCollectionsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return AdminRuleCollectionsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return AdminRuleCollectionsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -100,10 +106,13 @@ func (client *AdminRuleCollectionsClient) createOrUpdateCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, ruleCollection)
+	if err := runtime.MarshalAsJSON(req, ruleCollection); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -118,7 +127,7 @@ func (client *AdminRuleCollectionsClient) createOrUpdateHandleResponse(resp *htt
 // BeginDelete - Deletes an admin rule collection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager Security Configuration.
@@ -131,31 +140,41 @@ func (client *AdminRuleCollectionsClient) BeginDelete(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AdminRuleCollectionsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AdminRuleCollectionsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[AdminRuleCollectionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[AdminRuleCollectionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes an admin rule collection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *AdminRuleCollectionsClient) deleteOperation(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, ruleCollectionName string, options *AdminRuleCollectionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "AdminRuleCollectionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, ruleCollectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -186,7 +205,7 @@ func (client *AdminRuleCollectionsClient) deleteCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Force != nil {
 		reqQP.Set("force", strconv.FormatBool(*options.Force))
 	}
@@ -198,7 +217,7 @@ func (client *AdminRuleCollectionsClient) deleteCreateRequest(ctx context.Contex
 // Get - Gets a network manager security admin configuration rule collection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager Security Configuration.
@@ -206,18 +225,25 @@ func (client *AdminRuleCollectionsClient) deleteCreateRequest(ctx context.Contex
 //   - options - AdminRuleCollectionsClientGetOptions contains the optional parameters for the AdminRuleCollectionsClient.Get
 //     method.
 func (client *AdminRuleCollectionsClient) Get(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, ruleCollectionName string, options *AdminRuleCollectionsClientGetOptions) (AdminRuleCollectionsClientGetResponse, error) {
+	var err error
+	const operationName = "AdminRuleCollectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, ruleCollectionName, options)
 	if err != nil {
 		return AdminRuleCollectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return AdminRuleCollectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return AdminRuleCollectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return AdminRuleCollectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -248,7 +274,7 @@ func (client *AdminRuleCollectionsClient) getCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -265,7 +291,7 @@ func (client *AdminRuleCollectionsClient) getHandleResponse(resp *http.Response)
 
 // NewListPager - Lists all the rule collections in a security admin configuration, in a paginated format.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager Security Configuration.
@@ -277,25 +303,20 @@ func (client *AdminRuleCollectionsClient) NewListPager(resourceGroupName string,
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AdminRuleCollectionsClientListResponse) (AdminRuleCollectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AdminRuleCollectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, options)
+			}, nil)
 			if err != nil {
 				return AdminRuleCollectionsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AdminRuleCollectionsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AdminRuleCollectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -323,7 +344,7 @@ func (client *AdminRuleCollectionsClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/adminrules_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/adminrules_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/adminrules_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/adminrules_client.go
index 6dd3543649d..f5928b3dfb5 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/adminrules_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/adminrules_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type AdminRulesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewAdminRulesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*AdminRulesClient, error) {
-	cl, err := arm.NewClient(moduleName+".AdminRulesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewAdminRulesClient(subscriptionID string, credential azcore.TokenCredentia
 // CreateOrUpdate - Creates or updates an admin rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager Security Configuration.
@@ -59,18 +58,25 @@ func NewAdminRulesClient(subscriptionID string, credential azcore.TokenCredentia
 //   - options - AdminRulesClientCreateOrUpdateOptions contains the optional parameters for the AdminRulesClient.CreateOrUpdate
 //     method.
 func (client *AdminRulesClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, ruleCollectionName string, ruleName string, adminRule BaseAdminRuleClassification, options *AdminRulesClientCreateOrUpdateOptions) (AdminRulesClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "AdminRulesClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, ruleCollectionName, ruleName, adminRule, options)
 	if err != nil {
 		return AdminRulesClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return AdminRulesClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return AdminRulesClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return AdminRulesClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -105,10 +111,13 @@ func (client *AdminRulesClient) createOrUpdateCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, adminRule)
+	if err := runtime.MarshalAsJSON(req, adminRule); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -123,7 +132,7 @@ func (client *AdminRulesClient) createOrUpdateHandleResponse(resp *http.Response
 // BeginDelete - Deletes an admin rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager Security Configuration.
@@ -136,31 +145,41 @@ func (client *AdminRulesClient) BeginDelete(ctx context.Context, resourceGroupNa
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AdminRulesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AdminRulesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[AdminRulesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[AdminRulesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes an admin rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *AdminRulesClient) deleteOperation(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, ruleCollectionName string, ruleName string, options *AdminRulesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "AdminRulesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, ruleCollectionName, ruleName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -195,7 +214,7 @@ func (client *AdminRulesClient) deleteCreateRequest(ctx context.Context, resourc
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Force != nil {
 		reqQP.Set("force", strconv.FormatBool(*options.Force))
 	}
@@ -207,7 +226,7 @@ func (client *AdminRulesClient) deleteCreateRequest(ctx context.Context, resourc
 // Get - Gets a network manager security configuration admin rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager Security Configuration.
@@ -215,18 +234,25 @@ func (client *AdminRulesClient) deleteCreateRequest(ctx context.Context, resourc
 //   - ruleName - The name of the rule.
 //   - options - AdminRulesClientGetOptions contains the optional parameters for the AdminRulesClient.Get method.
 func (client *AdminRulesClient) Get(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, ruleCollectionName string, ruleName string, options *AdminRulesClientGetOptions) (AdminRulesClientGetResponse, error) {
+	var err error
+	const operationName = "AdminRulesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, ruleCollectionName, ruleName, options)
 	if err != nil {
 		return AdminRulesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return AdminRulesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return AdminRulesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return AdminRulesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -261,7 +287,7 @@ func (client *AdminRulesClient) getCreateRequest(ctx context.Context, resourceGr
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -278,7 +304,7 @@ func (client *AdminRulesClient) getHandleResponse(resp *http.Response) (AdminRul
 
 // NewListPager - List all network manager security configuration admin rules.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager Security Configuration.
@@ -290,25 +316,20 @@ func (client *AdminRulesClient) NewListPager(resourceGroupName string, networkMa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AdminRulesClientListResponse) (AdminRulesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, ruleCollectionName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AdminRulesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, ruleCollectionName, options)
+			}, nil)
 			if err != nil {
 				return AdminRulesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AdminRulesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AdminRulesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -340,7 +361,7 @@ func (client *AdminRulesClient) listCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewayprivateendpointconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewayprivateendpointconnections_client.go
similarity index 81%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewayprivateendpointconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewayprivateendpointconnections_client.go
index de02ae41004..6632c4bd21c 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewayprivateendpointconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewayprivateendpointconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ApplicationGatewayPrivateEndpointConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewApplicationGatewayPrivateEndpointConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ApplicationGatewayPrivateEndpointConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ApplicationGatewayPrivateEndpointConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewApplicationGatewayPrivateEndpointConnectionsClient(subscriptionID string
 // BeginDelete - Deletes the specified private endpoint connection on application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - connectionName - The name of the application gateway private endpoint connection.
@@ -60,31 +59,41 @@ func (client *ApplicationGatewayPrivateEndpointConnectionsClient) BeginDelete(ct
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewayPrivateEndpointConnectionsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewayPrivateEndpointConnectionsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ApplicationGatewayPrivateEndpointConnectionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ApplicationGatewayPrivateEndpointConnectionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified private endpoint connection on application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ApplicationGatewayPrivateEndpointConnectionsClient) deleteOperation(ctx context.Context, resourceGroupName string, applicationGatewayName string, connectionName string, options *ApplicationGatewayPrivateEndpointConnectionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ApplicationGatewayPrivateEndpointConnectionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, applicationGatewayName, connectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -111,7 +120,7 @@ func (client *ApplicationGatewayPrivateEndpointConnectionsClient) deleteCreateRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -120,25 +129,32 @@ func (client *ApplicationGatewayPrivateEndpointConnectionsClient) deleteCreateRe
 // Get - Gets the specified private endpoint connection on application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - connectionName - The name of the application gateway private endpoint connection.
 //   - options - ApplicationGatewayPrivateEndpointConnectionsClientGetOptions contains the optional parameters for the ApplicationGatewayPrivateEndpointConnectionsClient.Get
 //     method.
 func (client *ApplicationGatewayPrivateEndpointConnectionsClient) Get(ctx context.Context, resourceGroupName string, applicationGatewayName string, connectionName string, options *ApplicationGatewayPrivateEndpointConnectionsClientGetOptions) (ApplicationGatewayPrivateEndpointConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "ApplicationGatewayPrivateEndpointConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, applicationGatewayName, connectionName, options)
 	if err != nil {
 		return ApplicationGatewayPrivateEndpointConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationGatewayPrivateEndpointConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationGatewayPrivateEndpointConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationGatewayPrivateEndpointConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -165,7 +181,7 @@ func (client *ApplicationGatewayPrivateEndpointConnectionsClient) getCreateReque
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -182,7 +198,7 @@ func (client *ApplicationGatewayPrivateEndpointConnectionsClient) getHandleRespo
 
 // NewListPager - Lists all private endpoint connections on an application gateway.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - options - ApplicationGatewayPrivateEndpointConnectionsClientListOptions contains the optional parameters for the ApplicationGatewayPrivateEndpointConnectionsClient.NewListPager
@@ -193,25 +209,20 @@ func (client *ApplicationGatewayPrivateEndpointConnectionsClient) NewListPager(r
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ApplicationGatewayPrivateEndpointConnectionsClientListResponse) (ApplicationGatewayPrivateEndpointConnectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, applicationGatewayName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ApplicationGatewayPrivateEndpointConnectionsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ApplicationGatewayPrivateEndpointConnectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, applicationGatewayName, options)
+			}, nil)
 			if err != nil {
 				return ApplicationGatewayPrivateEndpointConnectionsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ApplicationGatewayPrivateEndpointConnectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -235,7 +246,7 @@ func (client *ApplicationGatewayPrivateEndpointConnectionsClient) listCreateRequ
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -253,7 +264,7 @@ func (client *ApplicationGatewayPrivateEndpointConnectionsClient) listHandleResp
 // BeginUpdate - Updates the specified private endpoint connection on application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - connectionName - The name of the application gateway private endpoint connection.
@@ -266,31 +277,41 @@ func (client *ApplicationGatewayPrivateEndpointConnectionsClient) BeginUpdate(ct
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewayPrivateEndpointConnectionsClientUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewayPrivateEndpointConnectionsClientUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ApplicationGatewayPrivateEndpointConnectionsClientUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ApplicationGatewayPrivateEndpointConnectionsClientUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Update - Updates the specified private endpoint connection on application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ApplicationGatewayPrivateEndpointConnectionsClient) update(ctx context.Context, resourceGroupName string, applicationGatewayName string, connectionName string, parameters ApplicationGatewayPrivateEndpointConnection, options *ApplicationGatewayPrivateEndpointConnectionsClientBeginUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ApplicationGatewayPrivateEndpointConnectionsClient.BeginUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateCreateRequest(ctx, resourceGroupName, applicationGatewayName, connectionName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateCreateRequest creates the Update request.
@@ -317,8 +338,11 @@ func (client *ApplicationGatewayPrivateEndpointConnectionsClient) updateCreateRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewayprivatelinkresources_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewayprivatelinkresources_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewayprivatelinkresources_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewayprivatelinkresources_client.go
index 8e704f721f2..a57e95d5211 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewayprivatelinkresources_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewayprivatelinkresources_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ApplicationGatewayPrivateLinkResourcesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewApplicationGatewayPrivateLinkResourcesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ApplicationGatewayPrivateLinkResourcesClient, error) {
-	cl, err := arm.NewClient(moduleName+".ApplicationGatewayPrivateLinkResourcesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewApplicationGatewayPrivateLinkResourcesClient(subscriptionID string, cred
 
 // NewListPager - Lists all private link resources on an application gateway.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - options - ApplicationGatewayPrivateLinkResourcesClientListOptions contains the optional parameters for the ApplicationGatewayPrivateLinkResourcesClient.NewListPager
@@ -58,25 +57,20 @@ func (client *ApplicationGatewayPrivateLinkResourcesClient) NewListPager(resourc
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ApplicationGatewayPrivateLinkResourcesClientListResponse) (ApplicationGatewayPrivateLinkResourcesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, applicationGatewayName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ApplicationGatewayPrivateLinkResourcesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, applicationGatewayName, options)
+			}, nil)
 			if err != nil {
 				return ApplicationGatewayPrivateLinkResourcesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ApplicationGatewayPrivateLinkResourcesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ApplicationGatewayPrivateLinkResourcesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -100,7 +94,7 @@ func (client *ApplicationGatewayPrivateLinkResourcesClient) listCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgateways_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgateways_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgateways_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgateways_client.go
index 6773ca68898..713c18f0e37 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgateways_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgateways_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ApplicationGatewaysClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewApplicationGatewaysClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ApplicationGatewaysClient, error) {
-	cl, err := arm.NewClient(moduleName+".ApplicationGatewaysClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewApplicationGatewaysClient(subscriptionID string, credential azcore.Token
 // BeginBackendHealth - Gets the backend health of the specified application gateway in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - options - ApplicationGatewaysClientBeginBackendHealthOptions contains the optional parameters for the ApplicationGatewaysClient.BeginBackendHealth
@@ -59,31 +58,41 @@ func (client *ApplicationGatewaysClient) BeginBackendHealth(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientBackendHealthResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientBackendHealthResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ApplicationGatewaysClientBackendHealthResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ApplicationGatewaysClientBackendHealthResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // BackendHealth - Gets the backend health of the specified application gateway in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ApplicationGatewaysClient) backendHealth(ctx context.Context, resourceGroupName string, applicationGatewayName string, options *ApplicationGatewaysClientBeginBackendHealthOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.BeginBackendHealth"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.backendHealthCreateRequest(ctx, resourceGroupName, applicationGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // backendHealthCreateRequest creates the BackendHealth request.
@@ -106,7 +115,7 @@ func (client *ApplicationGatewaysClient) backendHealthCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -119,7 +128,7 @@ func (client *ApplicationGatewaysClient) backendHealthCreateRequest(ctx context.
 // application gateway in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - probeRequest - Request body for on-demand test probe operation.
@@ -131,11 +140,15 @@ func (client *ApplicationGatewaysClient) BeginBackendHealthOnDemand(ctx context.
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientBackendHealthOnDemandResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientBackendHealthOnDemandResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ApplicationGatewaysClientBackendHealthOnDemandResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ApplicationGatewaysClientBackendHealthOnDemandResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -143,20 +156,26 @@ func (client *ApplicationGatewaysClient) BeginBackendHealthOnDemand(ctx context.
 // application gateway in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ApplicationGatewaysClient) backendHealthOnDemand(ctx context.Context, resourceGroupName string, applicationGatewayName string, probeRequest ApplicationGatewayOnDemandProbe, options *ApplicationGatewaysClientBeginBackendHealthOnDemandOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.BeginBackendHealthOnDemand"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.backendHealthOnDemandCreateRequest(ctx, resourceGroupName, applicationGatewayName, probeRequest, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // backendHealthOnDemandCreateRequest creates the BackendHealthOnDemand request.
@@ -179,19 +198,22 @@ func (client *ApplicationGatewaysClient) backendHealthOnDemandCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, probeRequest)
+	if err := runtime.MarshalAsJSON(req, probeRequest); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginCreateOrUpdate - Creates or updates the specified application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - parameters - Parameters supplied to the create or update application gateway operation.
@@ -203,31 +225,41 @@ func (client *ApplicationGatewaysClient) BeginCreateOrUpdate(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ApplicationGatewaysClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ApplicationGatewaysClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ApplicationGatewaysClient) createOrUpdate(ctx context.Context, resourceGroupName string, applicationGatewayName string, parameters ApplicationGateway, options *ApplicationGatewaysClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, applicationGatewayName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -250,16 +282,19 @@ func (client *ApplicationGatewaysClient) createOrUpdateCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - options - ApplicationGatewaysClientBeginDeleteOptions contains the optional parameters for the ApplicationGatewaysClient.BeginDelete
@@ -270,31 +305,41 @@ func (client *ApplicationGatewaysClient) BeginDelete(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ApplicationGatewaysClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ApplicationGatewaysClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ApplicationGatewaysClient) deleteOperation(ctx context.Context, resourceGroupName string, applicationGatewayName string, options *ApplicationGatewaysClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, applicationGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -317,7 +362,7 @@ func (client *ApplicationGatewaysClient) deleteCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -326,23 +371,30 @@ func (client *ApplicationGatewaysClient) deleteCreateRequest(ctx context.Context
 // Get - Gets the specified application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - options - ApplicationGatewaysClientGetOptions contains the optional parameters for the ApplicationGatewaysClient.Get method.
 func (client *ApplicationGatewaysClient) Get(ctx context.Context, resourceGroupName string, applicationGatewayName string, options *ApplicationGatewaysClientGetOptions) (ApplicationGatewaysClientGetResponse, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, applicationGatewayName, options)
 	if err != nil {
 		return ApplicationGatewaysClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationGatewaysClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationGatewaysClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationGatewaysClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -365,7 +417,7 @@ func (client *ApplicationGatewaysClient) getCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -383,23 +435,30 @@ func (client *ApplicationGatewaysClient) getHandleResponse(resp *http.Response)
 // GetSSLPredefinedPolicy - Gets Ssl predefined policy with the specified policy name.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - predefinedPolicyName - Name of Ssl predefined policy.
 //   - options - ApplicationGatewaysClientGetSSLPredefinedPolicyOptions contains the optional parameters for the ApplicationGatewaysClient.GetSSLPredefinedPolicy
 //     method.
 func (client *ApplicationGatewaysClient) GetSSLPredefinedPolicy(ctx context.Context, predefinedPolicyName string, options *ApplicationGatewaysClientGetSSLPredefinedPolicyOptions) (ApplicationGatewaysClientGetSSLPredefinedPolicyResponse, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.GetSSLPredefinedPolicy"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getSSLPredefinedPolicyCreateRequest(ctx, predefinedPolicyName, options)
 	if err != nil {
 		return ApplicationGatewaysClientGetSSLPredefinedPolicyResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationGatewaysClientGetSSLPredefinedPolicyResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationGatewaysClientGetSSLPredefinedPolicyResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationGatewaysClientGetSSLPredefinedPolicyResponse{}, err
 	}
-	return client.getSSLPredefinedPolicyHandleResponse(resp)
+	resp, err := client.getSSLPredefinedPolicyHandleResponse(httpResp)
+	return resp, err
 }
 
 // getSSLPredefinedPolicyCreateRequest creates the GetSSLPredefinedPolicy request.
@@ -418,7 +477,7 @@ func (client *ApplicationGatewaysClient) getSSLPredefinedPolicyCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -435,7 +494,7 @@ func (client *ApplicationGatewaysClient) getSSLPredefinedPolicyHandleResponse(re
 
 // NewListPager - Lists all application gateways in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - ApplicationGatewaysClientListOptions contains the optional parameters for the ApplicationGatewaysClient.NewListPager
 //     method.
@@ -445,25 +504,20 @@ func (client *ApplicationGatewaysClient) NewListPager(resourceGroupName string,
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ApplicationGatewaysClientListResponse) (ApplicationGatewaysClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ApplicationGatewaysClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return ApplicationGatewaysClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ApplicationGatewaysClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ApplicationGatewaysClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -483,7 +537,7 @@ func (client *ApplicationGatewaysClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -500,7 +554,7 @@ func (client *ApplicationGatewaysClient) listHandleResponse(resp *http.Response)
 
 // NewListAllPager - Gets all the application gateways in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ApplicationGatewaysClientListAllOptions contains the optional parameters for the ApplicationGatewaysClient.NewListAllPager
 //     method.
 func (client *ApplicationGatewaysClient) NewListAllPager(options *ApplicationGatewaysClientListAllOptions) *runtime.Pager[ApplicationGatewaysClientListAllResponse] {
@@ -509,25 +563,20 @@ func (client *ApplicationGatewaysClient) NewListAllPager(options *ApplicationGat
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ApplicationGatewaysClientListAllResponse) (ApplicationGatewaysClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ApplicationGatewaysClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ApplicationGatewaysClientListAllResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ApplicationGatewaysClientListAllResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ApplicationGatewaysClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -543,7 +592,7 @@ func (client *ApplicationGatewaysClient) listAllCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -561,22 +610,29 @@ func (client *ApplicationGatewaysClient) listAllHandleResponse(resp *http.Respon
 // ListAvailableRequestHeaders - Lists all available request headers.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ApplicationGatewaysClientListAvailableRequestHeadersOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableRequestHeaders
 //     method.
 func (client *ApplicationGatewaysClient) ListAvailableRequestHeaders(ctx context.Context, options *ApplicationGatewaysClientListAvailableRequestHeadersOptions) (ApplicationGatewaysClientListAvailableRequestHeadersResponse, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.ListAvailableRequestHeaders"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listAvailableRequestHeadersCreateRequest(ctx, options)
 	if err != nil {
 		return ApplicationGatewaysClientListAvailableRequestHeadersResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationGatewaysClientListAvailableRequestHeadersResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationGatewaysClientListAvailableRequestHeadersResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationGatewaysClientListAvailableRequestHeadersResponse{}, err
 	}
-	return client.listAvailableRequestHeadersHandleResponse(resp)
+	resp, err := client.listAvailableRequestHeadersHandleResponse(httpResp)
+	return resp, err
 }
 
 // listAvailableRequestHeadersCreateRequest creates the ListAvailableRequestHeaders request.
@@ -591,7 +647,7 @@ func (client *ApplicationGatewaysClient) listAvailableRequestHeadersCreateReques
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -609,22 +665,29 @@ func (client *ApplicationGatewaysClient) listAvailableRequestHeadersHandleRespon
 // ListAvailableResponseHeaders - Lists all available response headers.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ApplicationGatewaysClientListAvailableResponseHeadersOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableResponseHeaders
 //     method.
 func (client *ApplicationGatewaysClient) ListAvailableResponseHeaders(ctx context.Context, options *ApplicationGatewaysClientListAvailableResponseHeadersOptions) (ApplicationGatewaysClientListAvailableResponseHeadersResponse, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.ListAvailableResponseHeaders"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listAvailableResponseHeadersCreateRequest(ctx, options)
 	if err != nil {
 		return ApplicationGatewaysClientListAvailableResponseHeadersResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationGatewaysClientListAvailableResponseHeadersResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationGatewaysClientListAvailableResponseHeadersResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationGatewaysClientListAvailableResponseHeadersResponse{}, err
 	}
-	return client.listAvailableResponseHeadersHandleResponse(resp)
+	resp, err := client.listAvailableResponseHeadersHandleResponse(httpResp)
+	return resp, err
 }
 
 // listAvailableResponseHeadersCreateRequest creates the ListAvailableResponseHeaders request.
@@ -639,7 +702,7 @@ func (client *ApplicationGatewaysClient) listAvailableResponseHeadersCreateReque
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -657,22 +720,29 @@ func (client *ApplicationGatewaysClient) listAvailableResponseHeadersHandleRespo
 // ListAvailableSSLOptions - Lists available Ssl options for configuring Ssl policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ApplicationGatewaysClientListAvailableSSLOptionsOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableSSLOptions
 //     method.
 func (client *ApplicationGatewaysClient) ListAvailableSSLOptions(ctx context.Context, options *ApplicationGatewaysClientListAvailableSSLOptionsOptions) (ApplicationGatewaysClientListAvailableSSLOptionsResponse, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.ListAvailableSSLOptions"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listAvailableSSLOptionsCreateRequest(ctx, options)
 	if err != nil {
 		return ApplicationGatewaysClientListAvailableSSLOptionsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationGatewaysClientListAvailableSSLOptionsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationGatewaysClientListAvailableSSLOptionsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationGatewaysClientListAvailableSSLOptionsResponse{}, err
 	}
-	return client.listAvailableSSLOptionsHandleResponse(resp)
+	resp, err := client.listAvailableSSLOptionsHandleResponse(httpResp)
+	return resp, err
 }
 
 // listAvailableSSLOptionsCreateRequest creates the ListAvailableSSLOptions request.
@@ -687,7 +757,7 @@ func (client *ApplicationGatewaysClient) listAvailableSSLOptionsCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -704,7 +774,7 @@ func (client *ApplicationGatewaysClient) listAvailableSSLOptionsHandleResponse(r
 
 // NewListAvailableSSLPredefinedPoliciesPager - Lists all SSL predefined policies for configuring Ssl policy.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesOptions contains the optional parameters for the ApplicationGatewaysClient.NewListAvailableSSLPredefinedPoliciesPager
 //     method.
 func (client *ApplicationGatewaysClient) NewListAvailableSSLPredefinedPoliciesPager(options *ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesOptions) *runtime.Pager[ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesResponse] {
@@ -713,25 +783,20 @@ func (client *ApplicationGatewaysClient) NewListAvailableSSLPredefinedPoliciesPa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesResponse) (ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAvailableSSLPredefinedPoliciesCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ApplicationGatewaysClient.NewListAvailableSSLPredefinedPoliciesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAvailableSSLPredefinedPoliciesCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAvailableSSLPredefinedPoliciesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -747,7 +812,7 @@ func (client *ApplicationGatewaysClient) listAvailableSSLPredefinedPoliciesCreat
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -765,22 +830,29 @@ func (client *ApplicationGatewaysClient) listAvailableSSLPredefinedPoliciesHandl
 // ListAvailableServerVariables - Lists all available server variables.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ApplicationGatewaysClientListAvailableServerVariablesOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableServerVariables
 //     method.
 func (client *ApplicationGatewaysClient) ListAvailableServerVariables(ctx context.Context, options *ApplicationGatewaysClientListAvailableServerVariablesOptions) (ApplicationGatewaysClientListAvailableServerVariablesResponse, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.ListAvailableServerVariables"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listAvailableServerVariablesCreateRequest(ctx, options)
 	if err != nil {
 		return ApplicationGatewaysClientListAvailableServerVariablesResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationGatewaysClientListAvailableServerVariablesResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationGatewaysClientListAvailableServerVariablesResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationGatewaysClientListAvailableServerVariablesResponse{}, err
 	}
-	return client.listAvailableServerVariablesHandleResponse(resp)
+	resp, err := client.listAvailableServerVariablesHandleResponse(httpResp)
+	return resp, err
 }
 
 // listAvailableServerVariablesCreateRequest creates the ListAvailableServerVariables request.
@@ -795,7 +867,7 @@ func (client *ApplicationGatewaysClient) listAvailableServerVariablesCreateReque
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -813,22 +885,29 @@ func (client *ApplicationGatewaysClient) listAvailableServerVariablesHandleRespo
 // ListAvailableWafRuleSets - Lists all available web application firewall rule sets.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ApplicationGatewaysClientListAvailableWafRuleSetsOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableWafRuleSets
 //     method.
 func (client *ApplicationGatewaysClient) ListAvailableWafRuleSets(ctx context.Context, options *ApplicationGatewaysClientListAvailableWafRuleSetsOptions) (ApplicationGatewaysClientListAvailableWafRuleSetsResponse, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.ListAvailableWafRuleSets"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listAvailableWafRuleSetsCreateRequest(ctx, options)
 	if err != nil {
 		return ApplicationGatewaysClientListAvailableWafRuleSetsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationGatewaysClientListAvailableWafRuleSetsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationGatewaysClientListAvailableWafRuleSetsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationGatewaysClientListAvailableWafRuleSetsResponse{}, err
 	}
-	return client.listAvailableWafRuleSetsHandleResponse(resp)
+	resp, err := client.listAvailableWafRuleSetsHandleResponse(httpResp)
+	return resp, err
 }
 
 // listAvailableWafRuleSetsCreateRequest creates the ListAvailableWafRuleSets request.
@@ -843,7 +922,7 @@ func (client *ApplicationGatewaysClient) listAvailableWafRuleSetsCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -861,7 +940,7 @@ func (client *ApplicationGatewaysClient) listAvailableWafRuleSetsHandleResponse(
 // BeginStart - Starts the specified application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - options - ApplicationGatewaysClientBeginStartOptions contains the optional parameters for the ApplicationGatewaysClient.BeginStart
@@ -872,31 +951,41 @@ func (client *ApplicationGatewaysClient) BeginStart(ctx context.Context, resourc
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientStartResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientStartResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ApplicationGatewaysClientStartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ApplicationGatewaysClientStartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Start - Starts the specified application gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ApplicationGatewaysClient) start(ctx context.Context, resourceGroupName string, applicationGatewayName string, options *ApplicationGatewaysClientBeginStartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.BeginStart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startCreateRequest(ctx, resourceGroupName, applicationGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startCreateRequest creates the Start request.
@@ -919,7 +1008,7 @@ func (client *ApplicationGatewaysClient) startCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -928,7 +1017,7 @@ func (client *ApplicationGatewaysClient) startCreateRequest(ctx context.Context,
 // BeginStop - Stops the specified application gateway in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - options - ApplicationGatewaysClientBeginStopOptions contains the optional parameters for the ApplicationGatewaysClient.BeginStop
@@ -939,31 +1028,41 @@ func (client *ApplicationGatewaysClient) BeginStop(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientStopResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationGatewaysClientStopResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ApplicationGatewaysClientStopResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ApplicationGatewaysClientStopResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Stop - Stops the specified application gateway in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ApplicationGatewaysClient) stop(ctx context.Context, resourceGroupName string, applicationGatewayName string, options *ApplicationGatewaysClientBeginStopOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.BeginStop"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.stopCreateRequest(ctx, resourceGroupName, applicationGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // stopCreateRequest creates the Stop request.
@@ -986,7 +1085,7 @@ func (client *ApplicationGatewaysClient) stopCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -995,25 +1094,32 @@ func (client *ApplicationGatewaysClient) stopCreateRequest(ctx context.Context,
 // UpdateTags - Updates the specified application gateway tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationGatewayName - The name of the application gateway.
 //   - parameters - Parameters supplied to update application gateway tags.
 //   - options - ApplicationGatewaysClientUpdateTagsOptions contains the optional parameters for the ApplicationGatewaysClient.UpdateTags
 //     method.
 func (client *ApplicationGatewaysClient) UpdateTags(ctx context.Context, resourceGroupName string, applicationGatewayName string, parameters TagsObject, options *ApplicationGatewaysClientUpdateTagsOptions) (ApplicationGatewaysClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "ApplicationGatewaysClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, applicationGatewayName, parameters, options)
 	if err != nil {
 		return ApplicationGatewaysClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationGatewaysClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationGatewaysClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationGatewaysClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -1036,10 +1142,13 @@ func (client *ApplicationGatewaysClient) updateTagsCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewaywafdynamicmanifests_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewaywafdynamicmanifests_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewaywafdynamicmanifests_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewaywafdynamicmanifests_client.go
index 0f7d39f2bcd..6821c976926 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewaywafdynamicmanifests_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewaywafdynamicmanifests_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ApplicationGatewayWafDynamicManifestsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewApplicationGatewayWafDynamicManifestsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ApplicationGatewayWafDynamicManifestsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ApplicationGatewayWafDynamicManifestsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewApplicationGatewayWafDynamicManifestsClient(subscriptionID string, crede
 
 // NewGetPager - Gets the regional application gateway waf manifest.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The region where the nrp are located at.
 //   - options - ApplicationGatewayWafDynamicManifestsClientGetOptions contains the optional parameters for the ApplicationGatewayWafDynamicManifestsClient.NewGetPager
 //     method.
@@ -57,25 +56,20 @@ func (client *ApplicationGatewayWafDynamicManifestsClient) NewGetPager(location
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ApplicationGatewayWafDynamicManifestsClientGetResponse) (ApplicationGatewayWafDynamicManifestsClientGetResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.getCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ApplicationGatewayWafDynamicManifestsClient.NewGetPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.getCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return ApplicationGatewayWafDynamicManifestsClientGetResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ApplicationGatewayWafDynamicManifestsClientGetResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ApplicationGatewayWafDynamicManifestsClientGetResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.getHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -95,7 +89,7 @@ func (client *ApplicationGatewayWafDynamicManifestsClient) getCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewaywafdynamicmanifestsdefault_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewaywafdynamicmanifestsdefault_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewaywafdynamicmanifestsdefault_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewaywafdynamicmanifestsdefault_client.go
index 99797e22ef1..d189a5614f2 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationgatewaywafdynamicmanifestsdefault_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationgatewaywafdynamicmanifestsdefault_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ApplicationGatewayWafDynamicManifestsDefaultClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewApplicationGatewayWafDynamicManifestsDefaultClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ApplicationGatewayWafDynamicManifestsDefaultClient, error) {
-	cl, err := arm.NewClient(moduleName+".ApplicationGatewayWafDynamicManifestsDefaultClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,23 +47,30 @@ func NewApplicationGatewayWafDynamicManifestsDefaultClient(subscriptionID string
 // Get - Gets the regional application gateway waf manifest.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The region where the nrp are located at.
 //   - options - ApplicationGatewayWafDynamicManifestsDefaultClientGetOptions contains the optional parameters for the ApplicationGatewayWafDynamicManifestsDefaultClient.Get
 //     method.
 func (client *ApplicationGatewayWafDynamicManifestsDefaultClient) Get(ctx context.Context, location string, options *ApplicationGatewayWafDynamicManifestsDefaultClientGetOptions) (ApplicationGatewayWafDynamicManifestsDefaultClientGetResponse, error) {
+	var err error
+	const operationName = "ApplicationGatewayWafDynamicManifestsDefaultClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, location, options)
 	if err != nil {
 		return ApplicationGatewayWafDynamicManifestsDefaultClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationGatewayWafDynamicManifestsDefaultClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationGatewayWafDynamicManifestsDefaultClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationGatewayWafDynamicManifestsDefaultClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -83,7 +89,7 @@ func (client *ApplicationGatewayWafDynamicManifestsDefaultClient) getCreateReque
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationsecuritygroups_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationsecuritygroups_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationsecuritygroups_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationsecuritygroups_client.go
index 51adf8360f6..74f42055f4c 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/applicationsecuritygroups_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/applicationsecuritygroups_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ApplicationSecurityGroupsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewApplicationSecurityGroupsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ApplicationSecurityGroupsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ApplicationSecurityGroupsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewApplicationSecurityGroupsClient(subscriptionID string, credential azcore
 // BeginCreateOrUpdate - Creates or updates an application security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationSecurityGroupName - The name of the application security group.
 //   - parameters - Parameters supplied to the create or update ApplicationSecurityGroup operation.
@@ -60,31 +59,41 @@ func (client *ApplicationSecurityGroupsClient) BeginCreateOrUpdate(ctx context.C
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationSecurityGroupsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationSecurityGroupsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ApplicationSecurityGroupsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ApplicationSecurityGroupsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates an application security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ApplicationSecurityGroupsClient) createOrUpdate(ctx context.Context, resourceGroupName string, applicationSecurityGroupName string, parameters ApplicationSecurityGroup, options *ApplicationSecurityGroupsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ApplicationSecurityGroupsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, applicationSecurityGroupName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *ApplicationSecurityGroupsClient) createOrUpdateCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified application security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationSecurityGroupName - The name of the application security group.
 //   - options - ApplicationSecurityGroupsClientBeginDeleteOptions contains the optional parameters for the ApplicationSecurityGroupsClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *ApplicationSecurityGroupsClient) BeginDelete(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationSecurityGroupsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ApplicationSecurityGroupsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ApplicationSecurityGroupsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ApplicationSecurityGroupsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified application security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ApplicationSecurityGroupsClient) deleteOperation(ctx context.Context, resourceGroupName string, applicationSecurityGroupName string, options *ApplicationSecurityGroupsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ApplicationSecurityGroupsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, applicationSecurityGroupName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *ApplicationSecurityGroupsClient) deleteCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,24 +205,31 @@ func (client *ApplicationSecurityGroupsClient) deleteCreateRequest(ctx context.C
 // Get - Gets information about the specified application security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationSecurityGroupName - The name of the application security group.
 //   - options - ApplicationSecurityGroupsClientGetOptions contains the optional parameters for the ApplicationSecurityGroupsClient.Get
 //     method.
 func (client *ApplicationSecurityGroupsClient) Get(ctx context.Context, resourceGroupName string, applicationSecurityGroupName string, options *ApplicationSecurityGroupsClientGetOptions) (ApplicationSecurityGroupsClientGetResponse, error) {
+	var err error
+	const operationName = "ApplicationSecurityGroupsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, applicationSecurityGroupName, options)
 	if err != nil {
 		return ApplicationSecurityGroupsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationSecurityGroupsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationSecurityGroupsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationSecurityGroupsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -223,7 +252,7 @@ func (client *ApplicationSecurityGroupsClient) getCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -240,7 +269,7 @@ func (client *ApplicationSecurityGroupsClient) getHandleResponse(resp *http.Resp
 
 // NewListPager - Gets all the application security groups in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - ApplicationSecurityGroupsClientListOptions contains the optional parameters for the ApplicationSecurityGroupsClient.NewListPager
 //     method.
@@ -250,25 +279,20 @@ func (client *ApplicationSecurityGroupsClient) NewListPager(resourceGroupName st
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ApplicationSecurityGroupsClientListResponse) (ApplicationSecurityGroupsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ApplicationSecurityGroupsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ApplicationSecurityGroupsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return ApplicationSecurityGroupsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ApplicationSecurityGroupsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -288,7 +312,7 @@ func (client *ApplicationSecurityGroupsClient) listCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -305,7 +329,7 @@ func (client *ApplicationSecurityGroupsClient) listHandleResponse(resp *http.Res
 
 // NewListAllPager - Gets all application security groups in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ApplicationSecurityGroupsClientListAllOptions contains the optional parameters for the ApplicationSecurityGroupsClient.NewListAllPager
 //     method.
 func (client *ApplicationSecurityGroupsClient) NewListAllPager(options *ApplicationSecurityGroupsClientListAllOptions) *runtime.Pager[ApplicationSecurityGroupsClientListAllResponse] {
@@ -314,25 +338,20 @@ func (client *ApplicationSecurityGroupsClient) NewListAllPager(options *Applicat
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ApplicationSecurityGroupsClientListAllResponse) (ApplicationSecurityGroupsClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ApplicationSecurityGroupsClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ApplicationSecurityGroupsClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ApplicationSecurityGroupsClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ApplicationSecurityGroupsClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -348,7 +367,7 @@ func (client *ApplicationSecurityGroupsClient) listAllCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -366,25 +385,32 @@ func (client *ApplicationSecurityGroupsClient) listAllHandleResponse(resp *http.
 // UpdateTags - Updates an application security group's tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - applicationSecurityGroupName - The name of the application security group.
 //   - parameters - Parameters supplied to update application security group tags.
 //   - options - ApplicationSecurityGroupsClientUpdateTagsOptions contains the optional parameters for the ApplicationSecurityGroupsClient.UpdateTags
 //     method.
 func (client *ApplicationSecurityGroupsClient) UpdateTags(ctx context.Context, resourceGroupName string, applicationSecurityGroupName string, parameters TagsObject, options *ApplicationSecurityGroupsClientUpdateTagsOptions) (ApplicationSecurityGroupsClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "ApplicationSecurityGroupsClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, applicationSecurityGroupName, parameters, options)
 	if err != nil {
 		return ApplicationSecurityGroupsClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ApplicationSecurityGroupsClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ApplicationSecurityGroupsClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ApplicationSecurityGroupsClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -407,10 +433,13 @@ func (client *ApplicationSecurityGroupsClient) updateTagsCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/assets.json b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/assets.json
similarity index 69%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/assets.json
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/assets.json
index 04dbda1a080..c83bdc67ff9 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/assets.json
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/assets.json
@@ -2,5 +2,5 @@
   "AssetsRepo": "Azure/azure-sdk-assets",
   "AssetsRepoPrefixPath": "go",
   "TagPrefix": "go/resourcemanager/network/armnetwork",
-  "Tag": "go/resourcemanager/network/armnetwork_98a17ae925"
+  "Tag": "go/resourcemanager/network/armnetwork_66967391f3"
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/autorest.md b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/autorest.md
new file mode 100644
index 00000000000..1982a9354f1
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/autorest.md
@@ -0,0 +1,13 @@
+### AutoRest Configuration
+
+> see https://aka.ms/autorest
+
+``` yaml
+azure-arm: true
+require:
+- https://github.com/Azure/azure-rest-api-specs/blob/80c21c17b4a7aa57f637ee594f7cfd653255a7e0/specification/network/resource-manager/readme.md
+- https://github.com/Azure/azure-rest-api-specs/blob/80c21c17b4a7aa57f637ee594f7cfd653255a7e0/specification/network/resource-manager/readme.go.md
+license-header: MICROSOFT_MIT_NO_VERSION
+module-version: 4.3.0
+tag: package-2023-05
+```
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availabledelegations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availabledelegations_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availabledelegations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availabledelegations_client.go
index dbecf99dfb3..cd58ab741af 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availabledelegations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availabledelegations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type AvailableDelegationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewAvailableDelegationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*AvailableDelegationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".AvailableDelegationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewAvailableDelegationsClient(subscriptionID string, credential azcore.Toke
 
 // NewListPager - Gets all of the available subnet delegations for this subscription in this region.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location of the subnet.
 //   - options - AvailableDelegationsClientListOptions contains the optional parameters for the AvailableDelegationsClient.NewListPager
 //     method.
@@ -57,25 +56,20 @@ func (client *AvailableDelegationsClient) NewListPager(location string, options
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AvailableDelegationsClientListResponse) (AvailableDelegationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AvailableDelegationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return AvailableDelegationsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AvailableDelegationsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AvailableDelegationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -95,7 +89,7 @@ func (client *AvailableDelegationsClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableendpointservices_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableendpointservices_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableendpointservices_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableendpointservices_client.go
index b8bb8ef681a..e64ff0ed738 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableendpointservices_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableendpointservices_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type AvailableEndpointServicesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewAvailableEndpointServicesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*AvailableEndpointServicesClient, error) {
-	cl, err := arm.NewClient(moduleName+".AvailableEndpointServicesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewAvailableEndpointServicesClient(subscriptionID string, credential azcore
 
 // NewListPager - List what values of endpoint services are available for use.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location to check available endpoint services.
 //   - options - AvailableEndpointServicesClientListOptions contains the optional parameters for the AvailableEndpointServicesClient.NewListPager
 //     method.
@@ -57,25 +56,20 @@ func (client *AvailableEndpointServicesClient) NewListPager(location string, opt
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AvailableEndpointServicesClientListResponse) (AvailableEndpointServicesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AvailableEndpointServicesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return AvailableEndpointServicesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AvailableEndpointServicesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AvailableEndpointServicesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -95,7 +89,7 @@ func (client *AvailableEndpointServicesClient) listCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableprivateendpointtypes_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableprivateendpointtypes_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableprivateendpointtypes_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableprivateendpointtypes_client.go
index b8cfc64fc13..dec555fa185 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableprivateendpointtypes_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableprivateendpointtypes_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type AvailablePrivateEndpointTypesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewAvailablePrivateEndpointTypesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*AvailablePrivateEndpointTypesClient, error) {
-	cl, err := arm.NewClient(moduleName+".AvailablePrivateEndpointTypesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewAvailablePrivateEndpointTypesClient(subscriptionID string, credential az
 // NewListPager - Returns all of the resource types that can be linked to a Private Endpoint in this subscription in this
 // region.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location of the domain name.
 //   - options - AvailablePrivateEndpointTypesClientListOptions contains the optional parameters for the AvailablePrivateEndpointTypesClient.NewListPager
 //     method.
@@ -58,25 +57,20 @@ func (client *AvailablePrivateEndpointTypesClient) NewListPager(location string,
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AvailablePrivateEndpointTypesClientListResponse) (AvailablePrivateEndpointTypesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AvailablePrivateEndpointTypesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return AvailablePrivateEndpointTypesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AvailablePrivateEndpointTypesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AvailablePrivateEndpointTypesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -96,7 +90,7 @@ func (client *AvailablePrivateEndpointTypesClient) listCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -114,7 +108,7 @@ func (client *AvailablePrivateEndpointTypesClient) listHandleResponse(resp *http
 // NewListByResourceGroupPager - Returns all of the resource types that can be linked to a Private Endpoint in this subscription
 // in this region.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location of the domain name.
 //   - resourceGroupName - The name of the resource group.
 //   - options - AvailablePrivateEndpointTypesClientListByResourceGroupOptions contains the optional parameters for the AvailablePrivateEndpointTypesClient.NewListByResourceGroupPager
@@ -125,25 +119,20 @@ func (client *AvailablePrivateEndpointTypesClient) NewListByResourceGroupPager(l
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AvailablePrivateEndpointTypesClientListByResourceGroupResponse) (AvailablePrivateEndpointTypesClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, location, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AvailablePrivateEndpointTypesClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, location, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return AvailablePrivateEndpointTypesClientListByResourceGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AvailablePrivateEndpointTypesClientListByResourceGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AvailablePrivateEndpointTypesClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -167,7 +156,7 @@ func (client *AvailablePrivateEndpointTypesClient) listByResourceGroupCreateRequ
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableresourcegroupdelegations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableresourcegroupdelegations_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableresourcegroupdelegations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableresourcegroupdelegations_client.go
index deed83f58ab..c4916fbfc1b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableresourcegroupdelegations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableresourcegroupdelegations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type AvailableResourceGroupDelegationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewAvailableResourceGroupDelegationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*AvailableResourceGroupDelegationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".AvailableResourceGroupDelegationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewAvailableResourceGroupDelegationsClient(subscriptionID string, credentia
 
 // NewListPager - Gets all of the available subnet delegations for this resource group in this region.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location of the domain name.
 //   - resourceGroupName - The name of the resource group.
 //   - options - AvailableResourceGroupDelegationsClientListOptions contains the optional parameters for the AvailableResourceGroupDelegationsClient.NewListPager
@@ -58,25 +57,20 @@ func (client *AvailableResourceGroupDelegationsClient) NewListPager(location str
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AvailableResourceGroupDelegationsClientListResponse) (AvailableResourceGroupDelegationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AvailableResourceGroupDelegationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return AvailableResourceGroupDelegationsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AvailableResourceGroupDelegationsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AvailableResourceGroupDelegationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -100,7 +94,7 @@ func (client *AvailableResourceGroupDelegationsClient) listCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableservicealiases_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableservicealiases_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableservicealiases_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableservicealiases_client.go
index 0c7da64e984..ccb45a0c6f1 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/availableservicealiases_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/availableservicealiases_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type AvailableServiceAliasesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewAvailableServiceAliasesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*AvailableServiceAliasesClient, error) {
-	cl, err := arm.NewClient(moduleName+".AvailableServiceAliasesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewAvailableServiceAliasesClient(subscriptionID string, credential azcore.T
 
 // NewListPager - Gets all available service aliases for this subscription in this region.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location.
 //   - options - AvailableServiceAliasesClientListOptions contains the optional parameters for the AvailableServiceAliasesClient.NewListPager
 //     method.
@@ -57,25 +56,20 @@ func (client *AvailableServiceAliasesClient) NewListPager(location string, optio
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AvailableServiceAliasesClientListResponse) (AvailableServiceAliasesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AvailableServiceAliasesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return AvailableServiceAliasesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AvailableServiceAliasesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AvailableServiceAliasesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -95,7 +89,7 @@ func (client *AvailableServiceAliasesClient) listCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -112,7 +106,7 @@ func (client *AvailableServiceAliasesClient) listHandleResponse(resp *http.Respo
 
 // NewListByResourceGroupPager - Gets all available service aliases for this resource group in this region.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - location - The location.
 //   - options - AvailableServiceAliasesClientListByResourceGroupOptions contains the optional parameters for the AvailableServiceAliasesClient.NewListByResourceGroupPager
@@ -123,25 +117,20 @@ func (client *AvailableServiceAliasesClient) NewListByResourceGroupPager(resourc
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AvailableServiceAliasesClientListByResourceGroupResponse) (AvailableServiceAliasesClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AvailableServiceAliasesClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, location, options)
+			}, nil)
 			if err != nil {
 				return AvailableServiceAliasesClientListByResourceGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AvailableServiceAliasesClientListByResourceGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AvailableServiceAliasesClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -165,7 +154,7 @@ func (client *AvailableServiceAliasesClient) listByResourceGroupCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/azurefirewallfqdntags_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/azurefirewallfqdntags_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/azurefirewallfqdntags_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/azurefirewallfqdntags_client.go
index cb7fa11f701..dfd02e2ef7d 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/azurefirewallfqdntags_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/azurefirewallfqdntags_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type AzureFirewallFqdnTagsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewAzureFirewallFqdnTagsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*AzureFirewallFqdnTagsClient, error) {
-	cl, err := arm.NewClient(moduleName+".AzureFirewallFqdnTagsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewAzureFirewallFqdnTagsClient(subscriptionID string, credential azcore.Tok
 
 // NewListAllPager - Gets all the Azure Firewall FQDN Tags in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - AzureFirewallFqdnTagsClientListAllOptions contains the optional parameters for the AzureFirewallFqdnTagsClient.NewListAllPager
 //     method.
 func (client *AzureFirewallFqdnTagsClient) NewListAllPager(options *AzureFirewallFqdnTagsClientListAllOptions) *runtime.Pager[AzureFirewallFqdnTagsClientListAllResponse] {
@@ -56,25 +55,20 @@ func (client *AzureFirewallFqdnTagsClient) NewListAllPager(options *AzureFirewal
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AzureFirewallFqdnTagsClientListAllResponse) (AzureFirewallFqdnTagsClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AzureFirewallFqdnTagsClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return AzureFirewallFqdnTagsClientListAllResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AzureFirewallFqdnTagsClientListAllResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AzureFirewallFqdnTagsClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -90,7 +84,7 @@ func (client *AzureFirewallFqdnTagsClient) listAllCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/azurefirewalls_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/azurefirewalls_client.go
similarity index 66%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/azurefirewalls_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/azurefirewalls_client.go
index 533662773ad..f46875f7c97 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/azurefirewalls_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/azurefirewalls_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type AzureFirewallsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewAzureFirewallsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*AzureFirewallsClient, error) {
-	cl, err := arm.NewClient(moduleName+".AzureFirewallsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewAzureFirewallsClient(subscriptionID string, credential azcore.TokenCrede
 // BeginCreateOrUpdate - Creates or updates the specified Azure Firewall.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - azureFirewallName - The name of the Azure Firewall.
 //   - parameters - Parameters supplied to the create or update Azure Firewall operation.
@@ -60,31 +59,41 @@ func (client *AzureFirewallsClient) BeginCreateOrUpdate(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AzureFirewallsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AzureFirewallsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[AzureFirewallsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[AzureFirewallsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified Azure Firewall.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *AzureFirewallsClient) createOrUpdate(ctx context.Context, resourceGroupName string, azureFirewallName string, parameters AzureFirewall, options *AzureFirewallsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "AzureFirewallsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, azureFirewallName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *AzureFirewallsClient) createOrUpdateCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified Azure Firewall.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - azureFirewallName - The name of the Azure Firewall.
 //   - options - AzureFirewallsClientBeginDeleteOptions contains the optional parameters for the AzureFirewallsClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *AzureFirewallsClient) BeginDelete(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AzureFirewallsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AzureFirewallsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[AzureFirewallsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[AzureFirewallsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified Azure Firewall.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *AzureFirewallsClient) deleteOperation(ctx context.Context, resourceGroupName string, azureFirewallName string, options *AzureFirewallsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "AzureFirewallsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, azureFirewallName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *AzureFirewallsClient) deleteCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *AzureFirewallsClient) deleteCreateRequest(ctx context.Context, res
 // Get - Gets the specified Azure Firewall.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - azureFirewallName - The name of the Azure Firewall.
 //   - options - AzureFirewallsClientGetOptions contains the optional parameters for the AzureFirewallsClient.Get method.
 func (client *AzureFirewallsClient) Get(ctx context.Context, resourceGroupName string, azureFirewallName string, options *AzureFirewallsClientGetOptions) (AzureFirewallsClientGetResponse, error) {
+	var err error
+	const operationName = "AzureFirewallsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, azureFirewallName, options)
 	if err != nil {
 		return AzureFirewallsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return AzureFirewallsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return AzureFirewallsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return AzureFirewallsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *AzureFirewallsClient) getCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -239,7 +268,7 @@ func (client *AzureFirewallsClient) getHandleResponse(resp *http.Response) (Azur
 
 // NewListPager - Lists all Azure Firewalls in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - AzureFirewallsClientListOptions contains the optional parameters for the AzureFirewallsClient.NewListPager method.
 func (client *AzureFirewallsClient) NewListPager(resourceGroupName string, options *AzureFirewallsClientListOptions) *runtime.Pager[AzureFirewallsClientListResponse] {
@@ -248,25 +277,20 @@ func (client *AzureFirewallsClient) NewListPager(resourceGroupName string, optio
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AzureFirewallsClientListResponse) (AzureFirewallsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AzureFirewallsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return AzureFirewallsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return AzureFirewallsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AzureFirewallsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -286,7 +310,7 @@ func (client *AzureFirewallsClient) listCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -303,7 +327,7 @@ func (client *AzureFirewallsClient) listHandleResponse(resp *http.Response) (Azu
 
 // NewListAllPager - Gets all the Azure Firewalls in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - AzureFirewallsClientListAllOptions contains the optional parameters for the AzureFirewallsClient.NewListAllPager
 //     method.
 func (client *AzureFirewallsClient) NewListAllPager(options *AzureFirewallsClientListAllOptions) *runtime.Pager[AzureFirewallsClientListAllResponse] {
@@ -312,25 +336,20 @@ func (client *AzureFirewallsClient) NewListAllPager(options *AzureFirewallsClien
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *AzureFirewallsClientListAllResponse) (AzureFirewallsClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return AzureFirewallsClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "AzureFirewallsClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return AzureFirewallsClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return AzureFirewallsClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -346,7 +365,7 @@ func (client *AzureFirewallsClient) listAllCreateRequest(ctx context.Context, op
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -364,7 +383,7 @@ func (client *AzureFirewallsClient) listAllHandleResponse(resp *http.Response) (
 // BeginListLearnedPrefixes - Retrieves a list of all IP prefixes that azure firewall has learned to not SNAT.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - azureFirewallName - The name of the azure firewall.
 //   - options - AzureFirewallsClientBeginListLearnedPrefixesOptions contains the optional parameters for the AzureFirewallsClient.BeginListLearnedPrefixes
@@ -375,31 +394,41 @@ func (client *AzureFirewallsClient) BeginListLearnedPrefixes(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AzureFirewallsClientListLearnedPrefixesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AzureFirewallsClientListLearnedPrefixesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[AzureFirewallsClientListLearnedPrefixesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[AzureFirewallsClientListLearnedPrefixesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // ListLearnedPrefixes - Retrieves a list of all IP prefixes that azure firewall has learned to not SNAT.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *AzureFirewallsClient) listLearnedPrefixes(ctx context.Context, resourceGroupName string, azureFirewallName string, options *AzureFirewallsClientBeginListLearnedPrefixesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "AzureFirewallsClient.BeginListLearnedPrefixes"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listLearnedPrefixesCreateRequest(ctx, resourceGroupName, azureFirewallName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listLearnedPrefixesCreateRequest creates the ListLearnedPrefixes request.
@@ -422,16 +451,97 @@ func (client *AzureFirewallsClient) listLearnedPrefixesCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
 }
 
+// BeginPacketCapture - Runs a packet capture on AzureFirewall.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-05-01
+//   - resourceGroupName - The name of the resource group.
+//   - azureFirewallName - The name of the Azure Firewall.
+//   - parameters - Parameters supplied to run packet capture on azure firewall.
+//   - options - AzureFirewallsClientBeginPacketCaptureOptions contains the optional parameters for the AzureFirewallsClient.BeginPacketCapture
+//     method.
+func (client *AzureFirewallsClient) BeginPacketCapture(ctx context.Context, resourceGroupName string, azureFirewallName string, parameters FirewallPacketCaptureParameters, options *AzureFirewallsClientBeginPacketCaptureOptions) (*runtime.Poller[AzureFirewallsClientPacketCaptureResponse], error) {
+	if options == nil || options.ResumeToken == "" {
+		resp, err := client.packetCapture(ctx, resourceGroupName, azureFirewallName, parameters, options)
+		if err != nil {
+			return nil, err
+		}
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AzureFirewallsClientPacketCaptureResponse]{
+			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
+		})
+		return poller, err
+	} else {
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[AzureFirewallsClientPacketCaptureResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+	}
+}
+
+// PacketCapture - Runs a packet capture on AzureFirewall.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-05-01
+func (client *AzureFirewallsClient) packetCapture(ctx context.Context, resourceGroupName string, azureFirewallName string, parameters FirewallPacketCaptureParameters, options *AzureFirewallsClientBeginPacketCaptureOptions) (*http.Response, error) {
+	var err error
+	const operationName = "AzureFirewallsClient.BeginPacketCapture"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	req, err := client.packetCaptureCreateRequest(ctx, resourceGroupName, azureFirewallName, parameters, options)
+	if err != nil {
+		return nil, err
+	}
+	httpResp, err := client.internal.Pipeline().Do(req)
+	if err != nil {
+		return nil, err
+	}
+	if !runtime.HasStatusCode(httpResp, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
+	}
+	return httpResp, nil
+}
+
+// packetCaptureCreateRequest creates the PacketCapture request.
+func (client *AzureFirewallsClient) packetCaptureCreateRequest(ctx context.Context, resourceGroupName string, azureFirewallName string, parameters FirewallPacketCaptureParameters, options *AzureFirewallsClientBeginPacketCaptureOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/azureFirewalls/{azureFirewallName}/packetCapture"
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if azureFirewallName == "" {
+		return nil, errors.New("parameter azureFirewallName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{azureFirewallName}", url.PathEscape(azureFirewallName))
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	req, err := runtime.NewRequest(ctx, http.MethodPost, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-05-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
+}
+
 // BeginUpdateTags - Updates tags of an Azure Firewall resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - azureFirewallName - The name of the Azure Firewall.
 //   - parameters - Parameters supplied to update azure firewall tags.
@@ -443,31 +553,41 @@ func (client *AzureFirewallsClient) BeginUpdateTags(ctx context.Context, resourc
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AzureFirewallsClientUpdateTagsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[AzureFirewallsClientUpdateTagsResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[AzureFirewallsClientUpdateTagsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[AzureFirewallsClientUpdateTagsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // UpdateTags - Updates tags of an Azure Firewall resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *AzureFirewallsClient) updateTags(ctx context.Context, resourceGroupName string, azureFirewallName string, parameters TagsObject, options *AzureFirewallsClientBeginUpdateTagsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "AzureFirewallsClient.BeginUpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, azureFirewallName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -490,8 +610,11 @@ func (client *AzureFirewallsClient) updateTagsCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/bastionhosts_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/bastionhosts_client.go
similarity index 77%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/bastionhosts_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/bastionhosts_client.go
index 2fba66d646a..315c2d66be9 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/bastionhosts_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/bastionhosts_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type BastionHostsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewBastionHostsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*BastionHostsClient, error) {
-	cl, err := arm.NewClient(moduleName+".BastionHostsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewBastionHostsClient(subscriptionID string, credential azcore.TokenCredent
 // BeginCreateOrUpdate - Creates or updates the specified Bastion Host.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - bastionHostName - The name of the Bastion Host.
 //   - parameters - Parameters supplied to the create or update Bastion Host operation.
@@ -60,31 +59,41 @@ func (client *BastionHostsClient) BeginCreateOrUpdate(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[BastionHostsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[BastionHostsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[BastionHostsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[BastionHostsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified Bastion Host.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *BastionHostsClient) createOrUpdate(ctx context.Context, resourceGroupName string, bastionHostName string, parameters BastionHost, options *BastionHostsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "BastionHostsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, bastionHostName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *BastionHostsClient) createOrUpdateCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified Bastion Host.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - bastionHostName - The name of the Bastion Host.
 //   - options - BastionHostsClientBeginDeleteOptions contains the optional parameters for the BastionHostsClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *BastionHostsClient) BeginDelete(ctx context.Context, resourceGroup
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[BastionHostsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[BastionHostsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[BastionHostsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[BastionHostsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified Bastion Host.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *BastionHostsClient) deleteOperation(ctx context.Context, resourceGroupName string, bastionHostName string, options *BastionHostsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "BastionHostsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, bastionHostName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *BastionHostsClient) deleteCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *BastionHostsClient) deleteCreateRequest(ctx context.Context, resou
 // Get - Gets the specified Bastion Host.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - bastionHostName - The name of the Bastion Host.
 //   - options - BastionHostsClientGetOptions contains the optional parameters for the BastionHostsClient.Get method.
 func (client *BastionHostsClient) Get(ctx context.Context, resourceGroupName string, bastionHostName string, options *BastionHostsClientGetOptions) (BastionHostsClientGetResponse, error) {
+	var err error
+	const operationName = "BastionHostsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, bastionHostName, options)
 	if err != nil {
 		return BastionHostsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return BastionHostsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return BastionHostsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return BastionHostsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *BastionHostsClient) getCreateRequest(ctx context.Context, resource
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -239,7 +268,7 @@ func (client *BastionHostsClient) getHandleResponse(resp *http.Response) (Bastio
 
 // NewListPager - Lists all Bastion Hosts in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - BastionHostsClientListOptions contains the optional parameters for the BastionHostsClient.NewListPager method.
 func (client *BastionHostsClient) NewListPager(options *BastionHostsClientListOptions) *runtime.Pager[BastionHostsClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[BastionHostsClientListResponse]{
@@ -247,25 +276,20 @@ func (client *BastionHostsClient) NewListPager(options *BastionHostsClientListOp
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *BastionHostsClientListResponse) (BastionHostsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return BastionHostsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "BastionHostsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return BastionHostsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return BastionHostsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -281,7 +305,7 @@ func (client *BastionHostsClient) listCreateRequest(ctx context.Context, options
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -298,7 +322,7 @@ func (client *BastionHostsClient) listHandleResponse(resp *http.Response) (Basti
 
 // NewListByResourceGroupPager - Lists all Bastion Hosts in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - BastionHostsClientListByResourceGroupOptions contains the optional parameters for the BastionHostsClient.NewListByResourceGroupPager
 //     method.
@@ -308,25 +332,20 @@ func (client *BastionHostsClient) NewListByResourceGroupPager(resourceGroupName
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *BastionHostsClientListByResourceGroupResponse) (BastionHostsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "BastionHostsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return BastionHostsClientListByResourceGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return BastionHostsClientListByResourceGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return BastionHostsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -346,7 +365,7 @@ func (client *BastionHostsClient) listByResourceGroupCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -364,7 +383,7 @@ func (client *BastionHostsClient) listByResourceGroupHandleResponse(resp *http.R
 // BeginUpdateTags - Updates Tags for BastionHost resource
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - bastionHostName - The name of the Bastion Host.
 //   - parameters - Parameters supplied to update BastionHost tags.
@@ -376,31 +395,41 @@ func (client *BastionHostsClient) BeginUpdateTags(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[BastionHostsClientUpdateTagsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[BastionHostsClientUpdateTagsResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[BastionHostsClientUpdateTagsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[BastionHostsClientUpdateTagsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // UpdateTags - Updates Tags for BastionHost resource
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *BastionHostsClient) updateTags(ctx context.Context, resourceGroupName string, bastionHostName string, parameters TagsObject, options *BastionHostsClientBeginUpdateTagsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "BastionHostsClient.BeginUpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, bastionHostName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -423,8 +452,11 @@ func (client *BastionHostsClient) updateTagsCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/bgpservicecommunities_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/bgpservicecommunities_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/bgpservicecommunities_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/bgpservicecommunities_client.go
index 1c7044126e1..5364936f35e 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/bgpservicecommunities_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/bgpservicecommunities_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type BgpServiceCommunitiesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewBgpServiceCommunitiesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*BgpServiceCommunitiesClient, error) {
-	cl, err := arm.NewClient(moduleName+".BgpServiceCommunitiesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewBgpServiceCommunitiesClient(subscriptionID string, credential azcore.Tok
 
 // NewListPager - Gets all the available bgp service communities.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - BgpServiceCommunitiesClientListOptions contains the optional parameters for the BgpServiceCommunitiesClient.NewListPager
 //     method.
 func (client *BgpServiceCommunitiesClient) NewListPager(options *BgpServiceCommunitiesClientListOptions) *runtime.Pager[BgpServiceCommunitiesClientListResponse] {
@@ -56,25 +55,20 @@ func (client *BgpServiceCommunitiesClient) NewListPager(options *BgpServiceCommu
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *BgpServiceCommunitiesClientListResponse) (BgpServiceCommunitiesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "BgpServiceCommunitiesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return BgpServiceCommunitiesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return BgpServiceCommunitiesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return BgpServiceCommunitiesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -90,7 +84,7 @@ func (client *BgpServiceCommunitiesClient) listCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/build.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/build.go
similarity index 100%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/build.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/build.go
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ci.yml b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ci.yml
similarity index 100%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ci.yml
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ci.yml
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/client_factory.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/client_factory.go
similarity index 69%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/client_factory.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/client_factory.go
index 497fca222fe..b354e3dbbf4 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/client_factory.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/client_factory.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -29,7 +28,7 @@ type ClientFactory struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewClientFactory(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ClientFactory, error) {
-	_, err := arm.NewClient(moduleName+".ClientFactory", moduleVersion, credential, options)
+	_, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -39,662 +38,800 @@ func NewClientFactory(subscriptionID string, credential azcore.TokenCredential,
 	}, nil
 }
 
-func (c *ClientFactory) NewApplicationGatewaysClient() *ApplicationGatewaysClient {
-	subClient, _ := NewApplicationGatewaysClient(c.subscriptionID, c.credential, c.options)
+// NewAdminRuleCollectionsClient creates a new instance of AdminRuleCollectionsClient.
+func (c *ClientFactory) NewAdminRuleCollectionsClient() *AdminRuleCollectionsClient {
+	subClient, _ := NewAdminRuleCollectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewApplicationGatewayPrivateLinkResourcesClient() *ApplicationGatewayPrivateLinkResourcesClient {
-	subClient, _ := NewApplicationGatewayPrivateLinkResourcesClient(c.subscriptionID, c.credential, c.options)
+// NewAdminRulesClient creates a new instance of AdminRulesClient.
+func (c *ClientFactory) NewAdminRulesClient() *AdminRulesClient {
+	subClient, _ := NewAdminRulesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewApplicationGatewayPrivateEndpointConnectionsClient creates a new instance of ApplicationGatewayPrivateEndpointConnectionsClient.
 func (c *ClientFactory) NewApplicationGatewayPrivateEndpointConnectionsClient() *ApplicationGatewayPrivateEndpointConnectionsClient {
 	subClient, _ := NewApplicationGatewayPrivateEndpointConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewApplicationGatewayWafDynamicManifestsDefaultClient() *ApplicationGatewayWafDynamicManifestsDefaultClient {
-	subClient, _ := NewApplicationGatewayWafDynamicManifestsDefaultClient(c.subscriptionID, c.credential, c.options)
+// NewApplicationGatewayPrivateLinkResourcesClient creates a new instance of ApplicationGatewayPrivateLinkResourcesClient.
+func (c *ClientFactory) NewApplicationGatewayPrivateLinkResourcesClient() *ApplicationGatewayPrivateLinkResourcesClient {
+	subClient, _ := NewApplicationGatewayPrivateLinkResourcesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewApplicationGatewayWafDynamicManifestsClient creates a new instance of ApplicationGatewayWafDynamicManifestsClient.
 func (c *ClientFactory) NewApplicationGatewayWafDynamicManifestsClient() *ApplicationGatewayWafDynamicManifestsClient {
 	subClient, _ := NewApplicationGatewayWafDynamicManifestsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewApplicationGatewayWafDynamicManifestsDefaultClient creates a new instance of ApplicationGatewayWafDynamicManifestsDefaultClient.
+func (c *ClientFactory) NewApplicationGatewayWafDynamicManifestsDefaultClient() *ApplicationGatewayWafDynamicManifestsDefaultClient {
+	subClient, _ := NewApplicationGatewayWafDynamicManifestsDefaultClient(c.subscriptionID, c.credential, c.options)
+	return subClient
+}
+
+// NewApplicationGatewaysClient creates a new instance of ApplicationGatewaysClient.
+func (c *ClientFactory) NewApplicationGatewaysClient() *ApplicationGatewaysClient {
+	subClient, _ := NewApplicationGatewaysClient(c.subscriptionID, c.credential, c.options)
+	return subClient
+}
+
+// NewApplicationSecurityGroupsClient creates a new instance of ApplicationSecurityGroupsClient.
 func (c *ClientFactory) NewApplicationSecurityGroupsClient() *ApplicationSecurityGroupsClient {
 	subClient, _ := NewApplicationSecurityGroupsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewAvailableDelegationsClient creates a new instance of AvailableDelegationsClient.
 func (c *ClientFactory) NewAvailableDelegationsClient() *AvailableDelegationsClient {
 	subClient, _ := NewAvailableDelegationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewAvailableEndpointServicesClient creates a new instance of AvailableEndpointServicesClient.
+func (c *ClientFactory) NewAvailableEndpointServicesClient() *AvailableEndpointServicesClient {
+	subClient, _ := NewAvailableEndpointServicesClient(c.subscriptionID, c.credential, c.options)
+	return subClient
+}
+
+// NewAvailablePrivateEndpointTypesClient creates a new instance of AvailablePrivateEndpointTypesClient.
+func (c *ClientFactory) NewAvailablePrivateEndpointTypesClient() *AvailablePrivateEndpointTypesClient {
+	subClient, _ := NewAvailablePrivateEndpointTypesClient(c.subscriptionID, c.credential, c.options)
+	return subClient
+}
+
+// NewAvailableResourceGroupDelegationsClient creates a new instance of AvailableResourceGroupDelegationsClient.
 func (c *ClientFactory) NewAvailableResourceGroupDelegationsClient() *AvailableResourceGroupDelegationsClient {
 	subClient, _ := NewAvailableResourceGroupDelegationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewAvailableServiceAliasesClient creates a new instance of AvailableServiceAliasesClient.
 func (c *ClientFactory) NewAvailableServiceAliasesClient() *AvailableServiceAliasesClient {
 	subClient, _ := NewAvailableServiceAliasesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewAzureFirewallsClient() *AzureFirewallsClient {
-	subClient, _ := NewAzureFirewallsClient(c.subscriptionID, c.credential, c.options)
-	return subClient
-}
-
+// NewAzureFirewallFqdnTagsClient creates a new instance of AzureFirewallFqdnTagsClient.
 func (c *ClientFactory) NewAzureFirewallFqdnTagsClient() *AzureFirewallFqdnTagsClient {
 	subClient, _ := NewAzureFirewallFqdnTagsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewWebCategoriesClient() *WebCategoriesClient {
-	subClient, _ := NewWebCategoriesClient(c.subscriptionID, c.credential, c.options)
+// NewAzureFirewallsClient creates a new instance of AzureFirewallsClient.
+func (c *ClientFactory) NewAzureFirewallsClient() *AzureFirewallsClient {
+	subClient, _ := NewAzureFirewallsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewBastionHostsClient creates a new instance of BastionHostsClient.
 func (c *ClientFactory) NewBastionHostsClient() *BastionHostsClient {
 	subClient, _ := NewBastionHostsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewManagementClient() *ManagementClient {
-	subClient, _ := NewManagementClient(c.subscriptionID, c.credential, c.options)
+// NewBgpServiceCommunitiesClient creates a new instance of BgpServiceCommunitiesClient.
+func (c *ClientFactory) NewBgpServiceCommunitiesClient() *BgpServiceCommunitiesClient {
+	subClient, _ := NewBgpServiceCommunitiesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewInterfacesClient() *InterfacesClient {
-	subClient, _ := NewInterfacesClient(c.subscriptionID, c.credential, c.options)
+// NewConfigurationPolicyGroupsClient creates a new instance of ConfigurationPolicyGroupsClient.
+func (c *ClientFactory) NewConfigurationPolicyGroupsClient() *ConfigurationPolicyGroupsClient {
+	subClient, _ := NewConfigurationPolicyGroupsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewPublicIPAddressesClient() *PublicIPAddressesClient {
-	subClient, _ := NewPublicIPAddressesClient(c.subscriptionID, c.credential, c.options)
+// NewConnectionMonitorsClient creates a new instance of ConnectionMonitorsClient.
+func (c *ClientFactory) NewConnectionMonitorsClient() *ConnectionMonitorsClient {
+	subClient, _ := NewConnectionMonitorsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVipSwapClient() *VipSwapClient {
-	subClient, _ := NewVipSwapClient(c.subscriptionID, c.credential, c.options)
+// NewConnectivityConfigurationsClient creates a new instance of ConnectivityConfigurationsClient.
+func (c *ClientFactory) NewConnectivityConfigurationsClient() *ConnectivityConfigurationsClient {
+	subClient, _ := NewConnectivityConfigurationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewCustomIPPrefixesClient creates a new instance of CustomIPPrefixesClient.
 func (c *ClientFactory) NewCustomIPPrefixesClient() *CustomIPPrefixesClient {
 	subClient, _ := NewCustomIPPrefixesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewDdosCustomPoliciesClient creates a new instance of DdosCustomPoliciesClient.
 func (c *ClientFactory) NewDdosCustomPoliciesClient() *DdosCustomPoliciesClient {
 	subClient, _ := NewDdosCustomPoliciesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewDdosProtectionPlansClient creates a new instance of DdosProtectionPlansClient.
 func (c *ClientFactory) NewDdosProtectionPlansClient() *DdosProtectionPlansClient {
 	subClient, _ := NewDdosProtectionPlansClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewDscpConfigurationClient() *DscpConfigurationClient {
-	subClient, _ := NewDscpConfigurationClient(c.subscriptionID, c.credential, c.options)
+// NewDefaultSecurityRulesClient creates a new instance of DefaultSecurityRulesClient.
+func (c *ClientFactory) NewDefaultSecurityRulesClient() *DefaultSecurityRulesClient {
+	subClient, _ := NewDefaultSecurityRulesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewAvailableEndpointServicesClient() *AvailableEndpointServicesClient {
-	subClient, _ := NewAvailableEndpointServicesClient(c.subscriptionID, c.credential, c.options)
+// NewDscpConfigurationClient creates a new instance of DscpConfigurationClient.
+func (c *ClientFactory) NewDscpConfigurationClient() *DscpConfigurationClient {
+	subClient, _ := NewDscpConfigurationClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewExpressRouteCircuitAuthorizationsClient creates a new instance of ExpressRouteCircuitAuthorizationsClient.
 func (c *ClientFactory) NewExpressRouteCircuitAuthorizationsClient() *ExpressRouteCircuitAuthorizationsClient {
 	subClient, _ := NewExpressRouteCircuitAuthorizationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewExpressRouteCircuitPeeringsClient() *ExpressRouteCircuitPeeringsClient {
-	subClient, _ := NewExpressRouteCircuitPeeringsClient(c.subscriptionID, c.credential, c.options)
-	return subClient
-}
-
+// NewExpressRouteCircuitConnectionsClient creates a new instance of ExpressRouteCircuitConnectionsClient.
 func (c *ClientFactory) NewExpressRouteCircuitConnectionsClient() *ExpressRouteCircuitConnectionsClient {
 	subClient, _ := NewExpressRouteCircuitConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewPeerExpressRouteCircuitConnectionsClient() *PeerExpressRouteCircuitConnectionsClient {
-	subClient, _ := NewPeerExpressRouteCircuitConnectionsClient(c.subscriptionID, c.credential, c.options)
+// NewExpressRouteCircuitPeeringsClient creates a new instance of ExpressRouteCircuitPeeringsClient.
+func (c *ClientFactory) NewExpressRouteCircuitPeeringsClient() *ExpressRouteCircuitPeeringsClient {
+	subClient, _ := NewExpressRouteCircuitPeeringsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewExpressRouteCircuitsClient creates a new instance of ExpressRouteCircuitsClient.
 func (c *ClientFactory) NewExpressRouteCircuitsClient() *ExpressRouteCircuitsClient {
 	subClient, _ := NewExpressRouteCircuitsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewExpressRouteServiceProvidersClient() *ExpressRouteServiceProvidersClient {
-	subClient, _ := NewExpressRouteServiceProvidersClient(c.subscriptionID, c.credential, c.options)
-	return subClient
-}
-
-func (c *ClientFactory) NewExpressRouteCrossConnectionsClient() *ExpressRouteCrossConnectionsClient {
-	subClient, _ := NewExpressRouteCrossConnectionsClient(c.subscriptionID, c.credential, c.options)
+// NewExpressRouteConnectionsClient creates a new instance of ExpressRouteConnectionsClient.
+func (c *ClientFactory) NewExpressRouteConnectionsClient() *ExpressRouteConnectionsClient {
+	subClient, _ := NewExpressRouteConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewExpressRouteCrossConnectionPeeringsClient creates a new instance of ExpressRouteCrossConnectionPeeringsClient.
 func (c *ClientFactory) NewExpressRouteCrossConnectionPeeringsClient() *ExpressRouteCrossConnectionPeeringsClient {
 	subClient, _ := NewExpressRouteCrossConnectionPeeringsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewExpressRoutePortsLocationsClient() *ExpressRoutePortsLocationsClient {
-	subClient, _ := NewExpressRoutePortsLocationsClient(c.subscriptionID, c.credential, c.options)
+// NewExpressRouteCrossConnectionsClient creates a new instance of ExpressRouteCrossConnectionsClient.
+func (c *ClientFactory) NewExpressRouteCrossConnectionsClient() *ExpressRouteCrossConnectionsClient {
+	subClient, _ := NewExpressRouteCrossConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewExpressRoutePortsClient() *ExpressRoutePortsClient {
-	subClient, _ := NewExpressRoutePortsClient(c.subscriptionID, c.credential, c.options)
+// NewExpressRouteGatewaysClient creates a new instance of ExpressRouteGatewaysClient.
+func (c *ClientFactory) NewExpressRouteGatewaysClient() *ExpressRouteGatewaysClient {
+	subClient, _ := NewExpressRouteGatewaysClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewExpressRouteLinksClient creates a new instance of ExpressRouteLinksClient.
 func (c *ClientFactory) NewExpressRouteLinksClient() *ExpressRouteLinksClient {
 	subClient, _ := NewExpressRouteLinksClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewExpressRoutePortAuthorizationsClient creates a new instance of ExpressRoutePortAuthorizationsClient.
 func (c *ClientFactory) NewExpressRoutePortAuthorizationsClient() *ExpressRoutePortAuthorizationsClient {
 	subClient, _ := NewExpressRoutePortAuthorizationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewExpressRouteProviderPortsLocationClient() *ExpressRouteProviderPortsLocationClient {
-	subClient, _ := NewExpressRouteProviderPortsLocationClient(c.subscriptionID, c.credential, c.options)
+// NewExpressRoutePortsClient creates a new instance of ExpressRoutePortsClient.
+func (c *ClientFactory) NewExpressRoutePortsClient() *ExpressRoutePortsClient {
+	subClient, _ := NewExpressRoutePortsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewFirewallPoliciesClient() *FirewallPoliciesClient {
-	subClient, _ := NewFirewallPoliciesClient(c.subscriptionID, c.credential, c.options)
+// NewExpressRoutePortsLocationsClient creates a new instance of ExpressRoutePortsLocationsClient.
+func (c *ClientFactory) NewExpressRoutePortsLocationsClient() *ExpressRoutePortsLocationsClient {
+	subClient, _ := NewExpressRoutePortsLocationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewFirewallPolicyRuleCollectionGroupsClient() *FirewallPolicyRuleCollectionGroupsClient {
-	subClient, _ := NewFirewallPolicyRuleCollectionGroupsClient(c.subscriptionID, c.credential, c.options)
+// NewExpressRouteProviderPortsLocationClient creates a new instance of ExpressRouteProviderPortsLocationClient.
+func (c *ClientFactory) NewExpressRouteProviderPortsLocationClient() *ExpressRouteProviderPortsLocationClient {
+	subClient, _ := NewExpressRouteProviderPortsLocationClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewFirewallPolicyIdpsSignaturesClient() *FirewallPolicyIdpsSignaturesClient {
-	subClient, _ := NewFirewallPolicyIdpsSignaturesClient(c.subscriptionID, c.credential, c.options)
+// NewExpressRouteServiceProvidersClient creates a new instance of ExpressRouteServiceProvidersClient.
+func (c *ClientFactory) NewExpressRouteServiceProvidersClient() *ExpressRouteServiceProvidersClient {
+	subClient, _ := NewExpressRouteServiceProvidersClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewFirewallPolicyIdpsSignaturesOverridesClient() *FirewallPolicyIdpsSignaturesOverridesClient {
-	subClient, _ := NewFirewallPolicyIdpsSignaturesOverridesClient(c.subscriptionID, c.credential, c.options)
+// NewFirewallPoliciesClient creates a new instance of FirewallPoliciesClient.
+func (c *ClientFactory) NewFirewallPoliciesClient() *FirewallPoliciesClient {
+	subClient, _ := NewFirewallPoliciesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewFirewallPolicyIdpsSignaturesFilterValuesClient() *FirewallPolicyIdpsSignaturesFilterValuesClient {
-	subClient, _ := NewFirewallPolicyIdpsSignaturesFilterValuesClient(c.subscriptionID, c.credential, c.options)
+// NewFirewallPolicyIdpsSignaturesClient creates a new instance of FirewallPolicyIdpsSignaturesClient.
+func (c *ClientFactory) NewFirewallPolicyIdpsSignaturesClient() *FirewallPolicyIdpsSignaturesClient {
+	subClient, _ := NewFirewallPolicyIdpsSignaturesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewIPAllocationsClient() *IPAllocationsClient {
-	subClient, _ := NewIPAllocationsClient(c.subscriptionID, c.credential, c.options)
+// NewFirewallPolicyIdpsSignaturesFilterValuesClient creates a new instance of FirewallPolicyIdpsSignaturesFilterValuesClient.
+func (c *ClientFactory) NewFirewallPolicyIdpsSignaturesFilterValuesClient() *FirewallPolicyIdpsSignaturesFilterValuesClient {
+	subClient, _ := NewFirewallPolicyIdpsSignaturesFilterValuesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewIPGroupsClient() *IPGroupsClient {
-	subClient, _ := NewIPGroupsClient(c.subscriptionID, c.credential, c.options)
+// NewFirewallPolicyIdpsSignaturesOverridesClient creates a new instance of FirewallPolicyIdpsSignaturesOverridesClient.
+func (c *ClientFactory) NewFirewallPolicyIdpsSignaturesOverridesClient() *FirewallPolicyIdpsSignaturesOverridesClient {
+	subClient, _ := NewFirewallPolicyIdpsSignaturesOverridesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewLoadBalancersClient() *LoadBalancersClient {
-	subClient, _ := NewLoadBalancersClient(c.subscriptionID, c.credential, c.options)
+// NewFirewallPolicyRuleCollectionGroupsClient creates a new instance of FirewallPolicyRuleCollectionGroupsClient.
+func (c *ClientFactory) NewFirewallPolicyRuleCollectionGroupsClient() *FirewallPolicyRuleCollectionGroupsClient {
+	subClient, _ := NewFirewallPolicyRuleCollectionGroupsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewLoadBalancerBackendAddressPoolsClient() *LoadBalancerBackendAddressPoolsClient {
-	subClient, _ := NewLoadBalancerBackendAddressPoolsClient(c.subscriptionID, c.credential, c.options)
+// NewFlowLogsClient creates a new instance of FlowLogsClient.
+func (c *ClientFactory) NewFlowLogsClient() *FlowLogsClient {
+	subClient, _ := NewFlowLogsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewLoadBalancerFrontendIPConfigurationsClient() *LoadBalancerFrontendIPConfigurationsClient {
-	subClient, _ := NewLoadBalancerFrontendIPConfigurationsClient(c.subscriptionID, c.credential, c.options)
+// NewGroupsClient creates a new instance of GroupsClient.
+func (c *ClientFactory) NewGroupsClient() *GroupsClient {
+	subClient, _ := NewGroupsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewInboundNatRulesClient() *InboundNatRulesClient {
-	subClient, _ := NewInboundNatRulesClient(c.subscriptionID, c.credential, c.options)
+// NewHubRouteTablesClient creates a new instance of HubRouteTablesClient.
+func (c *ClientFactory) NewHubRouteTablesClient() *HubRouteTablesClient {
+	subClient, _ := NewHubRouteTablesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewLoadBalancerLoadBalancingRulesClient() *LoadBalancerLoadBalancingRulesClient {
-	subClient, _ := NewLoadBalancerLoadBalancingRulesClient(c.subscriptionID, c.credential, c.options)
+// NewHubVirtualNetworkConnectionsClient creates a new instance of HubVirtualNetworkConnectionsClient.
+func (c *ClientFactory) NewHubVirtualNetworkConnectionsClient() *HubVirtualNetworkConnectionsClient {
+	subClient, _ := NewHubVirtualNetworkConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewLoadBalancerOutboundRulesClient() *LoadBalancerOutboundRulesClient {
-	subClient, _ := NewLoadBalancerOutboundRulesClient(c.subscriptionID, c.credential, c.options)
+// NewIPAllocationsClient creates a new instance of IPAllocationsClient.
+func (c *ClientFactory) NewIPAllocationsClient() *IPAllocationsClient {
+	subClient, _ := NewIPAllocationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewLoadBalancerNetworkInterfacesClient() *LoadBalancerNetworkInterfacesClient {
-	subClient, _ := NewLoadBalancerNetworkInterfacesClient(c.subscriptionID, c.credential, c.options)
+// NewIPGroupsClient creates a new instance of IPGroupsClient.
+func (c *ClientFactory) NewIPGroupsClient() *IPGroupsClient {
+	subClient, _ := NewIPGroupsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewLoadBalancerProbesClient() *LoadBalancerProbesClient {
-	subClient, _ := NewLoadBalancerProbesClient(c.subscriptionID, c.credential, c.options)
+// NewInboundNatRulesClient creates a new instance of InboundNatRulesClient.
+func (c *ClientFactory) NewInboundNatRulesClient() *InboundNatRulesClient {
+	subClient, _ := NewInboundNatRulesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewNatGatewaysClient() *NatGatewaysClient {
-	subClient, _ := NewNatGatewaysClient(c.subscriptionID, c.credential, c.options)
+// NewInboundSecurityRuleClient creates a new instance of InboundSecurityRuleClient.
+func (c *ClientFactory) NewInboundSecurityRuleClient() *InboundSecurityRuleClient {
+	subClient, _ := NewInboundSecurityRuleClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewInterfaceIPConfigurationsClient creates a new instance of InterfaceIPConfigurationsClient.
 func (c *ClientFactory) NewInterfaceIPConfigurationsClient() *InterfaceIPConfigurationsClient {
 	subClient, _ := NewInterfaceIPConfigurationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewInterfaceLoadBalancersClient creates a new instance of InterfaceLoadBalancersClient.
 func (c *ClientFactory) NewInterfaceLoadBalancersClient() *InterfaceLoadBalancersClient {
 	subClient, _ := NewInterfaceLoadBalancersClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewInterfaceTapConfigurationsClient creates a new instance of InterfaceTapConfigurationsClient.
 func (c *ClientFactory) NewInterfaceTapConfigurationsClient() *InterfaceTapConfigurationsClient {
 	subClient, _ := NewInterfaceTapConfigurationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewManagersClient() *ManagersClient {
-	subClient, _ := NewManagersClient(c.subscriptionID, c.credential, c.options)
-	return subClient
-}
-
-func (c *ClientFactory) NewManagerCommitsClient() *ManagerCommitsClient {
-	subClient, _ := NewManagerCommitsClient(c.subscriptionID, c.credential, c.options)
-	return subClient
-}
-
-func (c *ClientFactory) NewManagerDeploymentStatusClient() *ManagerDeploymentStatusClient {
-	subClient, _ := NewManagerDeploymentStatusClient(c.subscriptionID, c.credential, c.options)
-	return subClient
-}
-
-func (c *ClientFactory) NewSubscriptionNetworkManagerConnectionsClient() *SubscriptionNetworkManagerConnectionsClient {
-	subClient, _ := NewSubscriptionNetworkManagerConnectionsClient(c.subscriptionID, c.credential, c.options)
+// NewInterfacesClient creates a new instance of InterfacesClient.
+func (c *ClientFactory) NewInterfacesClient() *InterfacesClient {
+	subClient, _ := NewInterfacesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewManagementGroupNetworkManagerConnectionsClient() *ManagementGroupNetworkManagerConnectionsClient {
-	subClient, _ := NewManagementGroupNetworkManagerConnectionsClient(c.credential, c.options)
+// NewLoadBalancerBackendAddressPoolsClient creates a new instance of LoadBalancerBackendAddressPoolsClient.
+func (c *ClientFactory) NewLoadBalancerBackendAddressPoolsClient() *LoadBalancerBackendAddressPoolsClient {
+	subClient, _ := NewLoadBalancerBackendAddressPoolsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewConnectivityConfigurationsClient() *ConnectivityConfigurationsClient {
-	subClient, _ := NewConnectivityConfigurationsClient(c.subscriptionID, c.credential, c.options)
+// NewLoadBalancerFrontendIPConfigurationsClient creates a new instance of LoadBalancerFrontendIPConfigurationsClient.
+func (c *ClientFactory) NewLoadBalancerFrontendIPConfigurationsClient() *LoadBalancerFrontendIPConfigurationsClient {
+	subClient, _ := NewLoadBalancerFrontendIPConfigurationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewGroupsClient() *GroupsClient {
-	subClient, _ := NewGroupsClient(c.subscriptionID, c.credential, c.options)
+// NewLoadBalancerLoadBalancingRulesClient creates a new instance of LoadBalancerLoadBalancingRulesClient.
+func (c *ClientFactory) NewLoadBalancerLoadBalancingRulesClient() *LoadBalancerLoadBalancingRulesClient {
+	subClient, _ := NewLoadBalancerLoadBalancingRulesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewStaticMembersClient() *StaticMembersClient {
-	subClient, _ := NewStaticMembersClient(c.subscriptionID, c.credential, c.options)
+// NewLoadBalancerNetworkInterfacesClient creates a new instance of LoadBalancerNetworkInterfacesClient.
+func (c *ClientFactory) NewLoadBalancerNetworkInterfacesClient() *LoadBalancerNetworkInterfacesClient {
+	subClient, _ := NewLoadBalancerNetworkInterfacesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewScopeConnectionsClient() *ScopeConnectionsClient {
-	subClient, _ := NewScopeConnectionsClient(c.subscriptionID, c.credential, c.options)
+// NewLoadBalancerOutboundRulesClient creates a new instance of LoadBalancerOutboundRulesClient.
+func (c *ClientFactory) NewLoadBalancerOutboundRulesClient() *LoadBalancerOutboundRulesClient {
+	subClient, _ := NewLoadBalancerOutboundRulesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewSecurityAdminConfigurationsClient() *SecurityAdminConfigurationsClient {
-	subClient, _ := NewSecurityAdminConfigurationsClient(c.subscriptionID, c.credential, c.options)
+// NewLoadBalancerProbesClient creates a new instance of LoadBalancerProbesClient.
+func (c *ClientFactory) NewLoadBalancerProbesClient() *LoadBalancerProbesClient {
+	subClient, _ := NewLoadBalancerProbesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewAdminRuleCollectionsClient() *AdminRuleCollectionsClient {
-	subClient, _ := NewAdminRuleCollectionsClient(c.subscriptionID, c.credential, c.options)
+// NewLoadBalancersClient creates a new instance of LoadBalancersClient.
+func (c *ClientFactory) NewLoadBalancersClient() *LoadBalancersClient {
+	subClient, _ := NewLoadBalancersClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewAdminRulesClient() *AdminRulesClient {
-	subClient, _ := NewAdminRulesClient(c.subscriptionID, c.credential, c.options)
+// NewLocalNetworkGatewaysClient creates a new instance of LocalNetworkGatewaysClient.
+func (c *ClientFactory) NewLocalNetworkGatewaysClient() *LocalNetworkGatewaysClient {
+	subClient, _ := NewLocalNetworkGatewaysClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewProfilesClient() *ProfilesClient {
-	subClient, _ := NewProfilesClient(c.subscriptionID, c.credential, c.options)
+// NewManagementClient creates a new instance of ManagementClient.
+func (c *ClientFactory) NewManagementClient() *ManagementClient {
+	subClient, _ := NewManagementClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewSecurityGroupsClient() *SecurityGroupsClient {
-	subClient, _ := NewSecurityGroupsClient(c.subscriptionID, c.credential, c.options)
+// NewManagementGroupNetworkManagerConnectionsClient creates a new instance of ManagementGroupNetworkManagerConnectionsClient.
+func (c *ClientFactory) NewManagementGroupNetworkManagerConnectionsClient() *ManagementGroupNetworkManagerConnectionsClient {
+	subClient, _ := NewManagementGroupNetworkManagerConnectionsClient(c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewSecurityRulesClient() *SecurityRulesClient {
-	subClient, _ := NewSecurityRulesClient(c.subscriptionID, c.credential, c.options)
+// NewManagerCommitsClient creates a new instance of ManagerCommitsClient.
+func (c *ClientFactory) NewManagerCommitsClient() *ManagerCommitsClient {
+	subClient, _ := NewManagerCommitsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewDefaultSecurityRulesClient() *DefaultSecurityRulesClient {
-	subClient, _ := NewDefaultSecurityRulesClient(c.subscriptionID, c.credential, c.options)
+// NewManagerDeploymentStatusClient creates a new instance of ManagerDeploymentStatusClient.
+func (c *ClientFactory) NewManagerDeploymentStatusClient() *ManagerDeploymentStatusClient {
+	subClient, _ := NewManagerDeploymentStatusClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualAppliancesClient() *VirtualAppliancesClient {
-	subClient, _ := NewVirtualAppliancesClient(c.subscriptionID, c.credential, c.options)
+// NewManagersClient creates a new instance of ManagersClient.
+func (c *ClientFactory) NewManagersClient() *ManagersClient {
+	subClient, _ := NewManagersClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualApplianceSitesClient() *VirtualApplianceSitesClient {
-	subClient, _ := NewVirtualApplianceSitesClient(c.subscriptionID, c.credential, c.options)
+// NewNatGatewaysClient creates a new instance of NatGatewaysClient.
+func (c *ClientFactory) NewNatGatewaysClient() *NatGatewaysClient {
+	subClient, _ := NewNatGatewaysClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualApplianceSKUsClient() *VirtualApplianceSKUsClient {
-	subClient, _ := NewVirtualApplianceSKUsClient(c.subscriptionID, c.credential, c.options)
+// NewNatRulesClient creates a new instance of NatRulesClient.
+func (c *ClientFactory) NewNatRulesClient() *NatRulesClient {
+	subClient, _ := NewNatRulesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewInboundSecurityRuleClient() *InboundSecurityRuleClient {
-	subClient, _ := NewInboundSecurityRuleClient(c.subscriptionID, c.credential, c.options)
+// NewOperationsClient creates a new instance of OperationsClient.
+func (c *ClientFactory) NewOperationsClient() *OperationsClient {
+	subClient, _ := NewOperationsClient(c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewWatchersClient() *WatchersClient {
-	subClient, _ := NewWatchersClient(c.subscriptionID, c.credential, c.options)
+// NewP2SVPNGatewaysClient creates a new instance of P2SVPNGatewaysClient.
+func (c *ClientFactory) NewP2SVPNGatewaysClient() *P2SVPNGatewaysClient {
+	subClient, _ := NewP2SVPNGatewaysClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewPacketCapturesClient creates a new instance of PacketCapturesClient.
 func (c *ClientFactory) NewPacketCapturesClient() *PacketCapturesClient {
 	subClient, _ := NewPacketCapturesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewConnectionMonitorsClient() *ConnectionMonitorsClient {
-	subClient, _ := NewConnectionMonitorsClient(c.subscriptionID, c.credential, c.options)
-	return subClient
-}
-
-func (c *ClientFactory) NewFlowLogsClient() *FlowLogsClient {
-	subClient, _ := NewFlowLogsClient(c.subscriptionID, c.credential, c.options)
+// NewPeerExpressRouteCircuitConnectionsClient creates a new instance of PeerExpressRouteCircuitConnectionsClient.
+func (c *ClientFactory) NewPeerExpressRouteCircuitConnectionsClient() *PeerExpressRouteCircuitConnectionsClient {
+	subClient, _ := NewPeerExpressRouteCircuitConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewOperationsClient() *OperationsClient {
-	subClient, _ := NewOperationsClient(c.credential, c.options)
+// NewPrivateDNSZoneGroupsClient creates a new instance of PrivateDNSZoneGroupsClient.
+func (c *ClientFactory) NewPrivateDNSZoneGroupsClient() *PrivateDNSZoneGroupsClient {
+	subClient, _ := NewPrivateDNSZoneGroupsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewPrivateEndpointsClient creates a new instance of PrivateEndpointsClient.
 func (c *ClientFactory) NewPrivateEndpointsClient() *PrivateEndpointsClient {
 	subClient, _ := NewPrivateEndpointsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewAvailablePrivateEndpointTypesClient() *AvailablePrivateEndpointTypesClient {
-	subClient, _ := NewAvailablePrivateEndpointTypesClient(c.subscriptionID, c.credential, c.options)
+// NewPrivateLinkServicesClient creates a new instance of PrivateLinkServicesClient.
+func (c *ClientFactory) NewPrivateLinkServicesClient() *PrivateLinkServicesClient {
+	subClient, _ := NewPrivateLinkServicesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewPrivateDNSZoneGroupsClient() *PrivateDNSZoneGroupsClient {
-	subClient, _ := NewPrivateDNSZoneGroupsClient(c.subscriptionID, c.credential, c.options)
+// NewProfilesClient creates a new instance of ProfilesClient.
+func (c *ClientFactory) NewProfilesClient() *ProfilesClient {
+	subClient, _ := NewProfilesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewPrivateLinkServicesClient() *PrivateLinkServicesClient {
-	subClient, _ := NewPrivateLinkServicesClient(c.subscriptionID, c.credential, c.options)
+// NewPublicIPAddressesClient creates a new instance of PublicIPAddressesClient.
+func (c *ClientFactory) NewPublicIPAddressesClient() *PublicIPAddressesClient {
+	subClient, _ := NewPublicIPAddressesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewPublicIPPrefixesClient creates a new instance of PublicIPPrefixesClient.
 func (c *ClientFactory) NewPublicIPPrefixesClient() *PublicIPPrefixesClient {
 	subClient, _ := NewPublicIPPrefixesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewRouteFiltersClient() *RouteFiltersClient {
-	subClient, _ := NewRouteFiltersClient(c.subscriptionID, c.credential, c.options)
+// NewResourceNavigationLinksClient creates a new instance of ResourceNavigationLinksClient.
+func (c *ClientFactory) NewResourceNavigationLinksClient() *ResourceNavigationLinksClient {
+	subClient, _ := NewResourceNavigationLinksClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewRouteFilterRulesClient creates a new instance of RouteFilterRulesClient.
 func (c *ClientFactory) NewRouteFilterRulesClient() *RouteFilterRulesClient {
 	subClient, _ := NewRouteFilterRulesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewRouteFiltersClient creates a new instance of RouteFiltersClient.
+func (c *ClientFactory) NewRouteFiltersClient() *RouteFiltersClient {
+	subClient, _ := NewRouteFiltersClient(c.subscriptionID, c.credential, c.options)
+	return subClient
+}
+
+// NewRouteMapsClient creates a new instance of RouteMapsClient.
+func (c *ClientFactory) NewRouteMapsClient() *RouteMapsClient {
+	subClient, _ := NewRouteMapsClient(c.subscriptionID, c.credential, c.options)
+	return subClient
+}
+
+// NewRouteTablesClient creates a new instance of RouteTablesClient.
 func (c *ClientFactory) NewRouteTablesClient() *RouteTablesClient {
 	subClient, _ := NewRouteTablesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewRoutesClient creates a new instance of RoutesClient.
 func (c *ClientFactory) NewRoutesClient() *RoutesClient {
 	subClient, _ := NewRoutesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewSecurityPartnerProvidersClient() *SecurityPartnerProvidersClient {
-	subClient, _ := NewSecurityPartnerProvidersClient(c.subscriptionID, c.credential, c.options)
+// NewRoutingIntentClient creates a new instance of RoutingIntentClient.
+func (c *ClientFactory) NewRoutingIntentClient() *RoutingIntentClient {
+	subClient, _ := NewRoutingIntentClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewBgpServiceCommunitiesClient() *BgpServiceCommunitiesClient {
-	subClient, _ := NewBgpServiceCommunitiesClient(c.subscriptionID, c.credential, c.options)
+// NewScopeConnectionsClient creates a new instance of ScopeConnectionsClient.
+func (c *ClientFactory) NewScopeConnectionsClient() *ScopeConnectionsClient {
+	subClient, _ := NewScopeConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewServiceEndpointPoliciesClient() *ServiceEndpointPoliciesClient {
-	subClient, _ := NewServiceEndpointPoliciesClient(c.subscriptionID, c.credential, c.options)
+// NewSecurityAdminConfigurationsClient creates a new instance of SecurityAdminConfigurationsClient.
+func (c *ClientFactory) NewSecurityAdminConfigurationsClient() *SecurityAdminConfigurationsClient {
+	subClient, _ := NewSecurityAdminConfigurationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewServiceEndpointPolicyDefinitionsClient() *ServiceEndpointPolicyDefinitionsClient {
-	subClient, _ := NewServiceEndpointPolicyDefinitionsClient(c.subscriptionID, c.credential, c.options)
+// NewSecurityGroupsClient creates a new instance of SecurityGroupsClient.
+func (c *ClientFactory) NewSecurityGroupsClient() *SecurityGroupsClient {
+	subClient, _ := NewSecurityGroupsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewServiceTagsClient() *ServiceTagsClient {
-	subClient, _ := NewServiceTagsClient(c.subscriptionID, c.credential, c.options)
+// NewSecurityPartnerProvidersClient creates a new instance of SecurityPartnerProvidersClient.
+func (c *ClientFactory) NewSecurityPartnerProvidersClient() *SecurityPartnerProvidersClient {
+	subClient, _ := NewSecurityPartnerProvidersClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewServiceTagInformationClient() *ServiceTagInformationClient {
-	subClient, _ := NewServiceTagInformationClient(c.subscriptionID, c.credential, c.options)
+// NewSecurityRulesClient creates a new instance of SecurityRulesClient.
+func (c *ClientFactory) NewSecurityRulesClient() *SecurityRulesClient {
+	subClient, _ := NewSecurityRulesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewUsagesClient() *UsagesClient {
-	subClient, _ := NewUsagesClient(c.subscriptionID, c.credential, c.options)
+// NewServiceAssociationLinksClient creates a new instance of ServiceAssociationLinksClient.
+func (c *ClientFactory) NewServiceAssociationLinksClient() *ServiceAssociationLinksClient {
+	subClient, _ := NewServiceAssociationLinksClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualNetworksClient() *VirtualNetworksClient {
-	subClient, _ := NewVirtualNetworksClient(c.subscriptionID, c.credential, c.options)
+// NewServiceEndpointPoliciesClient creates a new instance of ServiceEndpointPoliciesClient.
+func (c *ClientFactory) NewServiceEndpointPoliciesClient() *ServiceEndpointPoliciesClient {
+	subClient, _ := NewServiceEndpointPoliciesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewSubnetsClient() *SubnetsClient {
-	subClient, _ := NewSubnetsClient(c.subscriptionID, c.credential, c.options)
+// NewServiceEndpointPolicyDefinitionsClient creates a new instance of ServiceEndpointPolicyDefinitionsClient.
+func (c *ClientFactory) NewServiceEndpointPolicyDefinitionsClient() *ServiceEndpointPolicyDefinitionsClient {
+	subClient, _ := NewServiceEndpointPolicyDefinitionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewResourceNavigationLinksClient() *ResourceNavigationLinksClient {
-	subClient, _ := NewResourceNavigationLinksClient(c.subscriptionID, c.credential, c.options)
+// NewServiceTagInformationClient creates a new instance of ServiceTagInformationClient.
+func (c *ClientFactory) NewServiceTagInformationClient() *ServiceTagInformationClient {
+	subClient, _ := NewServiceTagInformationClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewServiceAssociationLinksClient() *ServiceAssociationLinksClient {
-	subClient, _ := NewServiceAssociationLinksClient(c.subscriptionID, c.credential, c.options)
+// NewServiceTagsClient creates a new instance of ServiceTagsClient.
+func (c *ClientFactory) NewServiceTagsClient() *ServiceTagsClient {
+	subClient, _ := NewServiceTagsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualNetworkPeeringsClient() *VirtualNetworkPeeringsClient {
-	subClient, _ := NewVirtualNetworkPeeringsClient(c.subscriptionID, c.credential, c.options)
+// NewStaticMembersClient creates a new instance of StaticMembersClient.
+func (c *ClientFactory) NewStaticMembersClient() *StaticMembersClient {
+	subClient, _ := NewStaticMembersClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualNetworkGatewaysClient() *VirtualNetworkGatewaysClient {
-	subClient, _ := NewVirtualNetworkGatewaysClient(c.subscriptionID, c.credential, c.options)
+// NewSubnetsClient creates a new instance of SubnetsClient.
+func (c *ClientFactory) NewSubnetsClient() *SubnetsClient {
+	subClient, _ := NewSubnetsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualNetworkGatewayConnectionsClient() *VirtualNetworkGatewayConnectionsClient {
-	subClient, _ := NewVirtualNetworkGatewayConnectionsClient(c.subscriptionID, c.credential, c.options)
+// NewSubscriptionNetworkManagerConnectionsClient creates a new instance of SubscriptionNetworkManagerConnectionsClient.
+func (c *ClientFactory) NewSubscriptionNetworkManagerConnectionsClient() *SubscriptionNetworkManagerConnectionsClient {
+	subClient, _ := NewSubscriptionNetworkManagerConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewLocalNetworkGatewaysClient() *LocalNetworkGatewaysClient {
-	subClient, _ := NewLocalNetworkGatewaysClient(c.subscriptionID, c.credential, c.options)
+// NewUsagesClient creates a new instance of UsagesClient.
+func (c *ClientFactory) NewUsagesClient() *UsagesClient {
+	subClient, _ := NewUsagesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualNetworkGatewayNatRulesClient() *VirtualNetworkGatewayNatRulesClient {
-	subClient, _ := NewVirtualNetworkGatewayNatRulesClient(c.subscriptionID, c.credential, c.options)
+// NewVPNConnectionsClient creates a new instance of VPNConnectionsClient.
+func (c *ClientFactory) NewVPNConnectionsClient() *VPNConnectionsClient {
+	subClient, _ := NewVPNConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualNetworkTapsClient() *VirtualNetworkTapsClient {
-	subClient, _ := NewVirtualNetworkTapsClient(c.subscriptionID, c.credential, c.options)
+// NewVPNGatewaysClient creates a new instance of VPNGatewaysClient.
+func (c *ClientFactory) NewVPNGatewaysClient() *VPNGatewaysClient {
+	subClient, _ := NewVPNGatewaysClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualRoutersClient() *VirtualRoutersClient {
-	subClient, _ := NewVirtualRoutersClient(c.subscriptionID, c.credential, c.options)
+// NewVPNLinkConnectionsClient creates a new instance of VPNLinkConnectionsClient.
+func (c *ClientFactory) NewVPNLinkConnectionsClient() *VPNLinkConnectionsClient {
+	subClient, _ := NewVPNLinkConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualRouterPeeringsClient() *VirtualRouterPeeringsClient {
-	subClient, _ := NewVirtualRouterPeeringsClient(c.subscriptionID, c.credential, c.options)
+// NewVPNServerConfigurationsAssociatedWithVirtualWanClient creates a new instance of VPNServerConfigurationsAssociatedWithVirtualWanClient.
+func (c *ClientFactory) NewVPNServerConfigurationsAssociatedWithVirtualWanClient() *VPNServerConfigurationsAssociatedWithVirtualWanClient {
+	subClient, _ := NewVPNServerConfigurationsAssociatedWithVirtualWanClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualWansClient() *VirtualWansClient {
-	subClient, _ := NewVirtualWansClient(c.subscriptionID, c.credential, c.options)
+// NewVPNServerConfigurationsClient creates a new instance of VPNServerConfigurationsClient.
+func (c *ClientFactory) NewVPNServerConfigurationsClient() *VPNServerConfigurationsClient {
+	subClient, _ := NewVPNServerConfigurationsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVPNSitesClient() *VPNSitesClient {
-	subClient, _ := NewVPNSitesClient(c.subscriptionID, c.credential, c.options)
+// NewVPNSiteLinkConnectionsClient creates a new instance of VPNSiteLinkConnectionsClient.
+func (c *ClientFactory) NewVPNSiteLinkConnectionsClient() *VPNSiteLinkConnectionsClient {
+	subClient, _ := NewVPNSiteLinkConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewVPNSiteLinksClient creates a new instance of VPNSiteLinksClient.
 func (c *ClientFactory) NewVPNSiteLinksClient() *VPNSiteLinksClient {
 	subClient, _ := NewVPNSiteLinksClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewVPNSitesClient creates a new instance of VPNSitesClient.
+func (c *ClientFactory) NewVPNSitesClient() *VPNSitesClient {
+	subClient, _ := NewVPNSitesClient(c.subscriptionID, c.credential, c.options)
+	return subClient
+}
+
+// NewVPNSitesConfigurationClient creates a new instance of VPNSitesConfigurationClient.
 func (c *ClientFactory) NewVPNSitesConfigurationClient() *VPNSitesConfigurationClient {
 	subClient, _ := NewVPNSitesConfigurationClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVPNServerConfigurationsClient() *VPNServerConfigurationsClient {
-	subClient, _ := NewVPNServerConfigurationsClient(c.subscriptionID, c.credential, c.options)
+// NewVipSwapClient creates a new instance of VipSwapClient.
+func (c *ClientFactory) NewVipSwapClient() *VipSwapClient {
+	subClient, _ := NewVipSwapClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewConfigurationPolicyGroupsClient() *ConfigurationPolicyGroupsClient {
-	subClient, _ := NewConfigurationPolicyGroupsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualApplianceConnectionsClient creates a new instance of VirtualApplianceConnectionsClient.
+func (c *ClientFactory) NewVirtualApplianceConnectionsClient() *VirtualApplianceConnectionsClient {
+	subClient, _ := NewVirtualApplianceConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualHubsClient() *VirtualHubsClient {
-	subClient, _ := NewVirtualHubsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualApplianceSKUsClient creates a new instance of VirtualApplianceSKUsClient.
+func (c *ClientFactory) NewVirtualApplianceSKUsClient() *VirtualApplianceSKUsClient {
+	subClient, _ := NewVirtualApplianceSKUsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewRouteMapsClient() *RouteMapsClient {
-	subClient, _ := NewRouteMapsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualApplianceSitesClient creates a new instance of VirtualApplianceSitesClient.
+func (c *ClientFactory) NewVirtualApplianceSitesClient() *VirtualApplianceSitesClient {
+	subClient, _ := NewVirtualApplianceSitesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewHubVirtualNetworkConnectionsClient() *HubVirtualNetworkConnectionsClient {
-	subClient, _ := NewHubVirtualNetworkConnectionsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualAppliancesClient creates a new instance of VirtualAppliancesClient.
+func (c *ClientFactory) NewVirtualAppliancesClient() *VirtualAppliancesClient {
+	subClient, _ := NewVirtualAppliancesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVPNGatewaysClient() *VPNGatewaysClient {
-	subClient, _ := NewVPNGatewaysClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualHubBgpConnectionClient creates a new instance of VirtualHubBgpConnectionClient.
+func (c *ClientFactory) NewVirtualHubBgpConnectionClient() *VirtualHubBgpConnectionClient {
+	subClient, _ := NewVirtualHubBgpConnectionClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVPNLinkConnectionsClient() *VPNLinkConnectionsClient {
-	subClient, _ := NewVPNLinkConnectionsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualHubBgpConnectionsClient creates a new instance of VirtualHubBgpConnectionsClient.
+func (c *ClientFactory) NewVirtualHubBgpConnectionsClient() *VirtualHubBgpConnectionsClient {
+	subClient, _ := NewVirtualHubBgpConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVPNConnectionsClient() *VPNConnectionsClient {
-	subClient, _ := NewVPNConnectionsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualHubIPConfigurationClient creates a new instance of VirtualHubIPConfigurationClient.
+func (c *ClientFactory) NewVirtualHubIPConfigurationClient() *VirtualHubIPConfigurationClient {
+	subClient, _ := NewVirtualHubIPConfigurationClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVPNSiteLinkConnectionsClient() *VPNSiteLinkConnectionsClient {
-	subClient, _ := NewVPNSiteLinkConnectionsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualHubRouteTableV2SClient creates a new instance of VirtualHubRouteTableV2SClient.
+func (c *ClientFactory) NewVirtualHubRouteTableV2SClient() *VirtualHubRouteTableV2SClient {
+	subClient, _ := NewVirtualHubRouteTableV2SClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewNatRulesClient() *NatRulesClient {
-	subClient, _ := NewNatRulesClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualHubsClient creates a new instance of VirtualHubsClient.
+func (c *ClientFactory) NewVirtualHubsClient() *VirtualHubsClient {
+	subClient, _ := NewVirtualHubsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewP2SVPNGatewaysClient() *P2SVPNGatewaysClient {
-	subClient, _ := NewP2SVPNGatewaysClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualNetworkGatewayConnectionsClient creates a new instance of VirtualNetworkGatewayConnectionsClient.
+func (c *ClientFactory) NewVirtualNetworkGatewayConnectionsClient() *VirtualNetworkGatewayConnectionsClient {
+	subClient, _ := NewVirtualNetworkGatewayConnectionsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVPNServerConfigurationsAssociatedWithVirtualWanClient() *VPNServerConfigurationsAssociatedWithVirtualWanClient {
-	subClient, _ := NewVPNServerConfigurationsAssociatedWithVirtualWanClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualNetworkGatewayNatRulesClient creates a new instance of VirtualNetworkGatewayNatRulesClient.
+func (c *ClientFactory) NewVirtualNetworkGatewayNatRulesClient() *VirtualNetworkGatewayNatRulesClient {
+	subClient, _ := NewVirtualNetworkGatewayNatRulesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualHubRouteTableV2SClient() *VirtualHubRouteTableV2SClient {
-	subClient, _ := NewVirtualHubRouteTableV2SClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualNetworkGatewaysClient creates a new instance of VirtualNetworkGatewaysClient.
+func (c *ClientFactory) NewVirtualNetworkGatewaysClient() *VirtualNetworkGatewaysClient {
+	subClient, _ := NewVirtualNetworkGatewaysClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewExpressRouteGatewaysClient() *ExpressRouteGatewaysClient {
-	subClient, _ := NewExpressRouteGatewaysClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualNetworkPeeringsClient creates a new instance of VirtualNetworkPeeringsClient.
+func (c *ClientFactory) NewVirtualNetworkPeeringsClient() *VirtualNetworkPeeringsClient {
+	subClient, _ := NewVirtualNetworkPeeringsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewExpressRouteConnectionsClient() *ExpressRouteConnectionsClient {
-	subClient, _ := NewExpressRouteConnectionsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualNetworkTapsClient creates a new instance of VirtualNetworkTapsClient.
+func (c *ClientFactory) NewVirtualNetworkTapsClient() *VirtualNetworkTapsClient {
+	subClient, _ := NewVirtualNetworkTapsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualHubBgpConnectionClient() *VirtualHubBgpConnectionClient {
-	subClient, _ := NewVirtualHubBgpConnectionClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualNetworksClient creates a new instance of VirtualNetworksClient.
+func (c *ClientFactory) NewVirtualNetworksClient() *VirtualNetworksClient {
+	subClient, _ := NewVirtualNetworksClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualHubBgpConnectionsClient() *VirtualHubBgpConnectionsClient {
-	subClient, _ := NewVirtualHubBgpConnectionsClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualRouterPeeringsClient creates a new instance of VirtualRouterPeeringsClient.
+func (c *ClientFactory) NewVirtualRouterPeeringsClient() *VirtualRouterPeeringsClient {
+	subClient, _ := NewVirtualRouterPeeringsClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewVirtualHubIPConfigurationClient() *VirtualHubIPConfigurationClient {
-	subClient, _ := NewVirtualHubIPConfigurationClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualRoutersClient creates a new instance of VirtualRoutersClient.
+func (c *ClientFactory) NewVirtualRoutersClient() *VirtualRoutersClient {
+	subClient, _ := NewVirtualRoutersClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewHubRouteTablesClient() *HubRouteTablesClient {
-	subClient, _ := NewHubRouteTablesClient(c.subscriptionID, c.credential, c.options)
+// NewVirtualWansClient creates a new instance of VirtualWansClient.
+func (c *ClientFactory) NewVirtualWansClient() *VirtualWansClient {
+	subClient, _ := NewVirtualWansClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
-func (c *ClientFactory) NewRoutingIntentClient() *RoutingIntentClient {
-	subClient, _ := NewRoutingIntentClient(c.subscriptionID, c.credential, c.options)
+// NewWatchersClient creates a new instance of WatchersClient.
+func (c *ClientFactory) NewWatchersClient() *WatchersClient {
+	subClient, _ := NewWatchersClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
 
+// NewWebApplicationFirewallPoliciesClient creates a new instance of WebApplicationFirewallPoliciesClient.
 func (c *ClientFactory) NewWebApplicationFirewallPoliciesClient() *WebApplicationFirewallPoliciesClient {
 	subClient, _ := NewWebApplicationFirewallPoliciesClient(c.subscriptionID, c.credential, c.options)
 	return subClient
 }
+
+// NewWebCategoriesClient creates a new instance of WebCategoriesClient.
+func (c *ClientFactory) NewWebCategoriesClient() *WebCategoriesClient {
+	subClient, _ := NewWebCategoriesClient(c.subscriptionID, c.credential, c.options)
+	return subClient
+}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/configurationpolicygroups_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/configurationpolicygroups_client.go
similarity index 81%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/configurationpolicygroups_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/configurationpolicygroups_client.go
index afdd1c7d617..feeea87c144 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/configurationpolicygroups_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/configurationpolicygroups_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ConfigurationPolicyGroupsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewConfigurationPolicyGroupsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ConfigurationPolicyGroupsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ConfigurationPolicyGroupsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewConfigurationPolicyGroupsClient(subscriptionID string, credential azcore
 // BeginCreateOrUpdate - Creates a ConfigurationPolicyGroup if it doesn't exist else updates the existing one.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the ConfigurationPolicyGroup.
 //   - vpnServerConfigurationName - The name of the VpnServerConfiguration.
 //   - configurationPolicyGroupName - The name of the ConfigurationPolicyGroup.
@@ -61,31 +60,41 @@ func (client *ConfigurationPolicyGroupsClient) BeginCreateOrUpdate(ctx context.C
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConfigurationPolicyGroupsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConfigurationPolicyGroupsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ConfigurationPolicyGroupsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ConfigurationPolicyGroupsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a ConfigurationPolicyGroup if it doesn't exist else updates the existing one.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ConfigurationPolicyGroupsClient) createOrUpdate(ctx context.Context, resourceGroupName string, vpnServerConfigurationName string, configurationPolicyGroupName string, vpnServerConfigurationPolicyGroupParameters VPNServerConfigurationPolicyGroup, options *ConfigurationPolicyGroupsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ConfigurationPolicyGroupsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, vpnServerConfigurationName, configurationPolicyGroupName, vpnServerConfigurationPolicyGroupParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *ConfigurationPolicyGroupsClient) createOrUpdateCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vpnServerConfigurationPolicyGroupParameters)
+	if err := runtime.MarshalAsJSON(req, vpnServerConfigurationPolicyGroupParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a ConfigurationPolicyGroup.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the ConfigurationPolicyGroup.
 //   - vpnServerConfigurationName - The name of the VpnServerConfiguration.
 //   - configurationPolicyGroupName - The name of the ConfigurationPolicyGroup.
@@ -133,31 +145,41 @@ func (client *ConfigurationPolicyGroupsClient) BeginDelete(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConfigurationPolicyGroupsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConfigurationPolicyGroupsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ConfigurationPolicyGroupsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ConfigurationPolicyGroupsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a ConfigurationPolicyGroup.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ConfigurationPolicyGroupsClient) deleteOperation(ctx context.Context, resourceGroupName string, vpnServerConfigurationName string, configurationPolicyGroupName string, options *ConfigurationPolicyGroupsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ConfigurationPolicyGroupsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, vpnServerConfigurationName, configurationPolicyGroupName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *ConfigurationPolicyGroupsClient) deleteCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *ConfigurationPolicyGroupsClient) deleteCreateRequest(ctx context.C
 // Get - Retrieves the details of a ConfigurationPolicyGroup.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnServerConfiguration.
 //   - vpnServerConfigurationName - The name of the VpnServerConfiguration.
 //   - configurationPolicyGroupName - The name of the ConfigurationPolicyGroup being retrieved.
 //   - options - ConfigurationPolicyGroupsClientGetOptions contains the optional parameters for the ConfigurationPolicyGroupsClient.Get
 //     method.
 func (client *ConfigurationPolicyGroupsClient) Get(ctx context.Context, resourceGroupName string, vpnServerConfigurationName string, configurationPolicyGroupName string, options *ConfigurationPolicyGroupsClientGetOptions) (ConfigurationPolicyGroupsClientGetResponse, error) {
+	var err error
+	const operationName = "ConfigurationPolicyGroupsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, vpnServerConfigurationName, configurationPolicyGroupName, options)
 	if err != nil {
 		return ConfigurationPolicyGroupsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ConfigurationPolicyGroupsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ConfigurationPolicyGroupsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ConfigurationPolicyGroupsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *ConfigurationPolicyGroupsClient) getCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *ConfigurationPolicyGroupsClient) getHandleResponse(resp *http.Resp
 
 // NewListByVPNServerConfigurationPager - Lists all the configurationPolicyGroups in a resource group for a vpnServerConfiguration.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnServerConfiguration.
 //   - vpnServerConfigurationName - The name of the VpnServerConfiguration.
 //   - options - ConfigurationPolicyGroupsClientListByVPNServerConfigurationOptions contains the optional parameters for the ConfigurationPolicyGroupsClient.NewListByVPNServerConfigurationPager
@@ -266,25 +295,20 @@ func (client *ConfigurationPolicyGroupsClient) NewListByVPNServerConfigurationPa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ConfigurationPolicyGroupsClientListByVPNServerConfigurationResponse) (ConfigurationPolicyGroupsClientListByVPNServerConfigurationResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByVPNServerConfigurationCreateRequest(ctx, resourceGroupName, vpnServerConfigurationName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ConfigurationPolicyGroupsClientListByVPNServerConfigurationResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ConfigurationPolicyGroupsClient.NewListByVPNServerConfigurationPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByVPNServerConfigurationCreateRequest(ctx, resourceGroupName, vpnServerConfigurationName, options)
+			}, nil)
 			if err != nil {
 				return ConfigurationPolicyGroupsClientListByVPNServerConfigurationResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ConfigurationPolicyGroupsClientListByVPNServerConfigurationResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByVPNServerConfigurationHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *ConfigurationPolicyGroupsClient) listByVPNServerConfigurationCreat
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/connectionmonitors_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/connectionmonitors_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/connectionmonitors_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/connectionmonitors_client.go
index fabf621b020..90552344376 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/connectionmonitors_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/connectionmonitors_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ConnectionMonitorsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewConnectionMonitorsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ConnectionMonitorsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ConnectionMonitorsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewConnectionMonitorsClient(subscriptionID string, credential azcore.TokenC
 // BeginCreateOrUpdate - Create or update a connection monitor.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group containing Network Watcher.
 //   - networkWatcherName - The name of the Network Watcher resource.
 //   - connectionMonitorName - The name of the connection monitor.
@@ -61,31 +60,41 @@ func (client *ConnectionMonitorsClient) BeginCreateOrUpdate(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectionMonitorsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectionMonitorsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ConnectionMonitorsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ConnectionMonitorsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Create or update a connection monitor.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ConnectionMonitorsClient) createOrUpdate(ctx context.Context, resourceGroupName string, networkWatcherName string, connectionMonitorName string, parameters ConnectionMonitor, options *ConnectionMonitorsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ConnectionMonitorsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkWatcherName, connectionMonitorName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,19 +121,22 @@ func (client *ConnectionMonitorsClient) createOrUpdateCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Migrate != nil {
 		reqQP.Set("migrate", *options.Migrate)
 	}
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified connection monitor.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group containing Network Watcher.
 //   - networkWatcherName - The name of the Network Watcher resource.
 //   - connectionMonitorName - The name of the connection monitor.
@@ -136,31 +148,41 @@ func (client *ConnectionMonitorsClient) BeginDelete(ctx context.Context, resourc
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectionMonitorsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectionMonitorsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ConnectionMonitorsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ConnectionMonitorsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified connection monitor.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ConnectionMonitorsClient) deleteOperation(ctx context.Context, resourceGroupName string, networkWatcherName string, connectionMonitorName string, options *ConnectionMonitorsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ConnectionMonitorsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkWatcherName, connectionMonitorName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -187,7 +209,7 @@ func (client *ConnectionMonitorsClient) deleteCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -196,24 +218,31 @@ func (client *ConnectionMonitorsClient) deleteCreateRequest(ctx context.Context,
 // Get - Gets a connection monitor by name.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group containing Network Watcher.
 //   - networkWatcherName - The name of the Network Watcher resource.
 //   - connectionMonitorName - The name of the connection monitor.
 //   - options - ConnectionMonitorsClientGetOptions contains the optional parameters for the ConnectionMonitorsClient.Get method.
 func (client *ConnectionMonitorsClient) Get(ctx context.Context, resourceGroupName string, networkWatcherName string, connectionMonitorName string, options *ConnectionMonitorsClientGetOptions) (ConnectionMonitorsClientGetResponse, error) {
+	var err error
+	const operationName = "ConnectionMonitorsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkWatcherName, connectionMonitorName, options)
 	if err != nil {
 		return ConnectionMonitorsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ConnectionMonitorsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ConnectionMonitorsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ConnectionMonitorsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -240,7 +269,7 @@ func (client *ConnectionMonitorsClient) getCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -257,7 +286,7 @@ func (client *ConnectionMonitorsClient) getHandleResponse(resp *http.Response) (
 
 // NewListPager - Lists all connection monitors for the specified Network Watcher.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group containing Network Watcher.
 //   - networkWatcherName - The name of the Network Watcher resource.
 //   - options - ConnectionMonitorsClientListOptions contains the optional parameters for the ConnectionMonitorsClient.NewListPager
@@ -268,6 +297,7 @@ func (client *ConnectionMonitorsClient) NewListPager(resourceGroupName string, n
 			return false
 		},
 		Fetcher: func(ctx context.Context, page *ConnectionMonitorsClientListResponse) (ConnectionMonitorsClientListResponse, error) {
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ConnectionMonitorsClient.NewListPager")
 			req, err := client.listCreateRequest(ctx, resourceGroupName, networkWatcherName, options)
 			if err != nil {
 				return ConnectionMonitorsClientListResponse{}, err
@@ -281,6 +311,7 @@ func (client *ConnectionMonitorsClient) NewListPager(resourceGroupName string, n
 			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -304,7 +335,7 @@ func (client *ConnectionMonitorsClient) listCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -322,7 +353,7 @@ func (client *ConnectionMonitorsClient) listHandleResponse(resp *http.Response)
 // BeginQuery - Query a snapshot of the most recent connection states.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group containing Network Watcher.
 //   - networkWatcherName - The name of the Network Watcher resource.
 //   - connectionMonitorName - The name given to the connection monitor.
@@ -334,31 +365,41 @@ func (client *ConnectionMonitorsClient) BeginQuery(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectionMonitorsClientQueryResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectionMonitorsClientQueryResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ConnectionMonitorsClientQueryResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ConnectionMonitorsClientQueryResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Query - Query a snapshot of the most recent connection states.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ConnectionMonitorsClient) query(ctx context.Context, resourceGroupName string, networkWatcherName string, connectionMonitorName string, options *ConnectionMonitorsClientBeginQueryOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ConnectionMonitorsClient.BeginQuery"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.queryCreateRequest(ctx, resourceGroupName, networkWatcherName, connectionMonitorName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // queryCreateRequest creates the Query request.
@@ -385,7 +426,7 @@ func (client *ConnectionMonitorsClient) queryCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -394,7 +435,7 @@ func (client *ConnectionMonitorsClient) queryCreateRequest(ctx context.Context,
 // BeginStart - Starts the specified connection monitor.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group containing Network Watcher.
 //   - networkWatcherName - The name of the Network Watcher resource.
 //   - connectionMonitorName - The name of the connection monitor.
@@ -406,31 +447,41 @@ func (client *ConnectionMonitorsClient) BeginStart(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectionMonitorsClientStartResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectionMonitorsClientStartResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ConnectionMonitorsClientStartResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ConnectionMonitorsClientStartResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Start - Starts the specified connection monitor.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ConnectionMonitorsClient) start(ctx context.Context, resourceGroupName string, networkWatcherName string, connectionMonitorName string, options *ConnectionMonitorsClientBeginStartOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ConnectionMonitorsClient.BeginStart"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startCreateRequest(ctx, resourceGroupName, networkWatcherName, connectionMonitorName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startCreateRequest creates the Start request.
@@ -457,7 +508,7 @@ func (client *ConnectionMonitorsClient) startCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -466,7 +517,7 @@ func (client *ConnectionMonitorsClient) startCreateRequest(ctx context.Context,
 // BeginStop - Stops the specified connection monitor.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group containing Network Watcher.
 //   - networkWatcherName - The name of the Network Watcher resource.
 //   - connectionMonitorName - The name of the connection monitor.
@@ -478,31 +529,41 @@ func (client *ConnectionMonitorsClient) BeginStop(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectionMonitorsClientStopResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectionMonitorsClientStopResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ConnectionMonitorsClientStopResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ConnectionMonitorsClientStopResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Stop - Stops the specified connection monitor.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ConnectionMonitorsClient) stop(ctx context.Context, resourceGroupName string, networkWatcherName string, connectionMonitorName string, options *ConnectionMonitorsClientBeginStopOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ConnectionMonitorsClient.BeginStop"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.stopCreateRequest(ctx, resourceGroupName, networkWatcherName, connectionMonitorName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // stopCreateRequest creates the Stop request.
@@ -529,7 +590,7 @@ func (client *ConnectionMonitorsClient) stopCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -538,7 +599,7 @@ func (client *ConnectionMonitorsClient) stopCreateRequest(ctx context.Context, r
 // UpdateTags - Update tags of the specified connection monitor.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - connectionMonitorName - The name of the connection monitor.
@@ -546,18 +607,25 @@ func (client *ConnectionMonitorsClient) stopCreateRequest(ctx context.Context, r
 //   - options - ConnectionMonitorsClientUpdateTagsOptions contains the optional parameters for the ConnectionMonitorsClient.UpdateTags
 //     method.
 func (client *ConnectionMonitorsClient) UpdateTags(ctx context.Context, resourceGroupName string, networkWatcherName string, connectionMonitorName string, parameters TagsObject, options *ConnectionMonitorsClientUpdateTagsOptions) (ConnectionMonitorsClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "ConnectionMonitorsClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, networkWatcherName, connectionMonitorName, parameters, options)
 	if err != nil {
 		return ConnectionMonitorsClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ConnectionMonitorsClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ConnectionMonitorsClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ConnectionMonitorsClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -584,10 +652,13 @@ func (client *ConnectionMonitorsClient) updateTagsCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/connectivityconfigurations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/connectivityconfigurations_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/connectivityconfigurations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/connectivityconfigurations_client.go
index 94c27959024..0e0317c1785 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/connectivityconfigurations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/connectivityconfigurations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type ConnectivityConfigurationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewConnectivityConfigurationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ConnectivityConfigurationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ConnectivityConfigurationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewConnectivityConfigurationsClient(subscriptionID string, credential azcor
 // CreateOrUpdate - Creates/Updates a new network manager connectivity configuration
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager connectivity configuration.
@@ -57,18 +56,25 @@ func NewConnectivityConfigurationsClient(subscriptionID string, credential azcor
 //   - options - ConnectivityConfigurationsClientCreateOrUpdateOptions contains the optional parameters for the ConnectivityConfigurationsClient.CreateOrUpdate
 //     method.
 func (client *ConnectivityConfigurationsClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, connectivityConfiguration ConnectivityConfiguration, options *ConnectivityConfigurationsClientCreateOrUpdateOptions) (ConnectivityConfigurationsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "ConnectivityConfigurationsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, connectivityConfiguration, options)
 	if err != nil {
 		return ConnectivityConfigurationsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ConnectivityConfigurationsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return ConnectivityConfigurationsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return ConnectivityConfigurationsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -95,10 +101,13 @@ func (client *ConnectivityConfigurationsClient) createOrUpdateCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, connectivityConfiguration)
+	if err := runtime.MarshalAsJSON(req, connectivityConfiguration); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -114,7 +123,7 @@ func (client *ConnectivityConfigurationsClient) createOrUpdateHandleResponse(res
 // and connectivity configuration name
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager connectivity configuration.
@@ -126,11 +135,15 @@ func (client *ConnectivityConfigurationsClient) BeginDelete(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectivityConfigurationsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ConnectivityConfigurationsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ConnectivityConfigurationsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ConnectivityConfigurationsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -138,20 +151,26 @@ func (client *ConnectivityConfigurationsClient) BeginDelete(ctx context.Context,
 // connectivity configuration name
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ConnectivityConfigurationsClient) deleteOperation(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, options *ConnectivityConfigurationsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ConnectivityConfigurationsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -178,7 +197,7 @@ func (client *ConnectivityConfigurationsClient) deleteCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Force != nil {
 		reqQP.Set("force", strconv.FormatBool(*options.Force))
 	}
@@ -191,25 +210,32 @@ func (client *ConnectivityConfigurationsClient) deleteCreateRequest(ctx context.
 // Configuration name
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager connectivity configuration.
 //   - options - ConnectivityConfigurationsClientGetOptions contains the optional parameters for the ConnectivityConfigurationsClient.Get
 //     method.
 func (client *ConnectivityConfigurationsClient) Get(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, options *ConnectivityConfigurationsClientGetOptions) (ConnectivityConfigurationsClientGetResponse, error) {
+	var err error
+	const operationName = "ConnectivityConfigurationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, options)
 	if err != nil {
 		return ConnectivityConfigurationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ConnectivityConfigurationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ConnectivityConfigurationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ConnectivityConfigurationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -236,7 +262,7 @@ func (client *ConnectivityConfigurationsClient) getCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -253,7 +279,7 @@ func (client *ConnectivityConfigurationsClient) getHandleResponse(resp *http.Res
 
 // NewListPager - Lists all the network manager connectivity configuration in a specified network manager.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - options - ConnectivityConfigurationsClientListOptions contains the optional parameters for the ConnectivityConfigurationsClient.NewListPager
@@ -264,25 +290,20 @@ func (client *ConnectivityConfigurationsClient) NewListPager(resourceGroupName s
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ConnectivityConfigurationsClientListResponse) (ConnectivityConfigurationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkManagerName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ConnectivityConfigurationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkManagerName, options)
+			}, nil)
 			if err != nil {
 				return ConnectivityConfigurationsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ConnectivityConfigurationsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ConnectivityConfigurationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -306,7 +327,7 @@ func (client *ConnectivityConfigurationsClient) listCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/constants.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/constants.go
similarity index 93%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/constants.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/constants.go
index 74ebc60f5c7..6ec8bdb326b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/constants.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/constants.go
@@ -3,15 +3,14 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
 const (
-	moduleName    = "armnetwork"
-	moduleVersion = "v2.2.1"
+	moduleName    = "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork"
+	moduleVersion = "v4.3.0"
 )
 
 // Access - Access to be allowed or denied.
@@ -82,6 +81,23 @@ func PossibleAdminRuleKindValues() []AdminRuleKind {
 	}
 }
 
+// AdminState - Property to indicate if the Express Route Gateway serves traffic when there are multiple Express Route Gateways
+// in the vnet
+type AdminState string
+
+const (
+	AdminStateDisabled AdminState = "Disabled"
+	AdminStateEnabled  AdminState = "Enabled"
+)
+
+// PossibleAdminStateValues returns the possible values for the AdminState const type.
+func PossibleAdminStateValues() []AdminState {
+	return []AdminState{
+		AdminStateDisabled,
+		AdminStateEnabled,
+	}
+}
+
 // ApplicationGatewayBackendHealthServerHealth - Health of backend server.
 type ApplicationGatewayBackendHealthServerHealth string
 
@@ -145,7 +161,6 @@ const (
 	ApplicationGatewayCustomErrorStatusCodeHTTPStatus404 ApplicationGatewayCustomErrorStatusCode = "HttpStatus404"
 	ApplicationGatewayCustomErrorStatusCodeHTTPStatus405 ApplicationGatewayCustomErrorStatusCode = "HttpStatus405"
 	ApplicationGatewayCustomErrorStatusCodeHTTPStatus408 ApplicationGatewayCustomErrorStatusCode = "HttpStatus408"
-	ApplicationGatewayCustomErrorStatusCodeHTTPStatus499 ApplicationGatewayCustomErrorStatusCode = "HttpStatus499"
 	ApplicationGatewayCustomErrorStatusCodeHTTPStatus500 ApplicationGatewayCustomErrorStatusCode = "HttpStatus500"
 	ApplicationGatewayCustomErrorStatusCodeHTTPStatus502 ApplicationGatewayCustomErrorStatusCode = "HttpStatus502"
 	ApplicationGatewayCustomErrorStatusCodeHTTPStatus503 ApplicationGatewayCustomErrorStatusCode = "HttpStatus503"
@@ -160,7 +175,6 @@ func PossibleApplicationGatewayCustomErrorStatusCodeValues() []ApplicationGatewa
 		ApplicationGatewayCustomErrorStatusCodeHTTPStatus404,
 		ApplicationGatewayCustomErrorStatusCodeHTTPStatus405,
 		ApplicationGatewayCustomErrorStatusCodeHTTPStatus408,
-		ApplicationGatewayCustomErrorStatusCodeHTTPStatus499,
 		ApplicationGatewayCustomErrorStatusCodeHTTPStatus500,
 		ApplicationGatewayCustomErrorStatusCodeHTTPStatus502,
 		ApplicationGatewayCustomErrorStatusCodeHTTPStatus503,
@@ -184,6 +198,41 @@ func PossibleApplicationGatewayFirewallModeValues() []ApplicationGatewayFirewall
 	}
 }
 
+// ApplicationGatewayFirewallRateLimitDuration - Duration over which Rate Limit policy will be applied. Applies only when
+// ruleType is RateLimitRule.
+type ApplicationGatewayFirewallRateLimitDuration string
+
+const (
+	ApplicationGatewayFirewallRateLimitDurationFiveMins ApplicationGatewayFirewallRateLimitDuration = "FiveMins"
+	ApplicationGatewayFirewallRateLimitDurationOneMin   ApplicationGatewayFirewallRateLimitDuration = "OneMin"
+)
+
+// PossibleApplicationGatewayFirewallRateLimitDurationValues returns the possible values for the ApplicationGatewayFirewallRateLimitDuration const type.
+func PossibleApplicationGatewayFirewallRateLimitDurationValues() []ApplicationGatewayFirewallRateLimitDuration {
+	return []ApplicationGatewayFirewallRateLimitDuration{
+		ApplicationGatewayFirewallRateLimitDurationFiveMins,
+		ApplicationGatewayFirewallRateLimitDurationOneMin,
+	}
+}
+
+// ApplicationGatewayFirewallUserSessionVariable - User Session clause variable.
+type ApplicationGatewayFirewallUserSessionVariable string
+
+const (
+	ApplicationGatewayFirewallUserSessionVariableClientAddr  ApplicationGatewayFirewallUserSessionVariable = "ClientAddr"
+	ApplicationGatewayFirewallUserSessionVariableGeoLocation ApplicationGatewayFirewallUserSessionVariable = "GeoLocation"
+	ApplicationGatewayFirewallUserSessionVariableNone        ApplicationGatewayFirewallUserSessionVariable = "None"
+)
+
+// PossibleApplicationGatewayFirewallUserSessionVariableValues returns the possible values for the ApplicationGatewayFirewallUserSessionVariable const type.
+func PossibleApplicationGatewayFirewallUserSessionVariableValues() []ApplicationGatewayFirewallUserSessionVariable {
+	return []ApplicationGatewayFirewallUserSessionVariable{
+		ApplicationGatewayFirewallUserSessionVariableClientAddr,
+		ApplicationGatewayFirewallUserSessionVariableGeoLocation,
+		ApplicationGatewayFirewallUserSessionVariableNone,
+	}
+}
+
 // ApplicationGatewayLoadDistributionAlgorithm - Load Distribution Algorithm enums.
 type ApplicationGatewayLoadDistributionAlgorithm string
 
@@ -302,6 +351,7 @@ func PossibleApplicationGatewayRuleSetStatusOptionsValues() []ApplicationGateway
 type ApplicationGatewaySKUName string
 
 const (
+	ApplicationGatewaySKUNameBasic          ApplicationGatewaySKUName = "Basic"
 	ApplicationGatewaySKUNameStandardLarge  ApplicationGatewaySKUName = "Standard_Large"
 	ApplicationGatewaySKUNameStandardMedium ApplicationGatewaySKUName = "Standard_Medium"
 	ApplicationGatewaySKUNameStandardSmall  ApplicationGatewaySKUName = "Standard_Small"
@@ -314,6 +364,7 @@ const (
 // PossibleApplicationGatewaySKUNameValues returns the possible values for the ApplicationGatewaySKUName const type.
 func PossibleApplicationGatewaySKUNameValues() []ApplicationGatewaySKUName {
 	return []ApplicationGatewaySKUName{
+		ApplicationGatewaySKUNameBasic,
 		ApplicationGatewaySKUNameStandardLarge,
 		ApplicationGatewaySKUNameStandardMedium,
 		ApplicationGatewaySKUNameStandardSmall,
@@ -456,6 +507,7 @@ func PossibleApplicationGatewaySSLProtocolValues() []ApplicationGatewaySSLProtoc
 type ApplicationGatewayTier string
 
 const (
+	ApplicationGatewayTierBasic      ApplicationGatewayTier = "Basic"
 	ApplicationGatewayTierStandard   ApplicationGatewayTier = "Standard"
 	ApplicationGatewayTierStandardV2 ApplicationGatewayTier = "Standard_v2"
 	ApplicationGatewayTierWAF        ApplicationGatewayTier = "WAF"
@@ -465,6 +517,7 @@ const (
 // PossibleApplicationGatewayTierValues returns the possible values for the ApplicationGatewayTier const type.
 func PossibleApplicationGatewayTierValues() []ApplicationGatewayTier {
 	return []ApplicationGatewayTier{
+		ApplicationGatewayTierBasic,
 		ApplicationGatewayTierStandard,
 		ApplicationGatewayTierStandardV2,
 		ApplicationGatewayTierWAF,
@@ -647,6 +700,30 @@ func PossibleAzureFirewallNetworkRuleProtocolValues() []AzureFirewallNetworkRule
 	}
 }
 
+// AzureFirewallPacketCaptureFlagsType - The flags type to be captured.
+type AzureFirewallPacketCaptureFlagsType string
+
+const (
+	AzureFirewallPacketCaptureFlagsTypeAck  AzureFirewallPacketCaptureFlagsType = "ack"
+	AzureFirewallPacketCaptureFlagsTypeFin  AzureFirewallPacketCaptureFlagsType = "fin"
+	AzureFirewallPacketCaptureFlagsTypePush AzureFirewallPacketCaptureFlagsType = "push"
+	AzureFirewallPacketCaptureFlagsTypeRst  AzureFirewallPacketCaptureFlagsType = "rst"
+	AzureFirewallPacketCaptureFlagsTypeSyn  AzureFirewallPacketCaptureFlagsType = "syn"
+	AzureFirewallPacketCaptureFlagsTypeUrg  AzureFirewallPacketCaptureFlagsType = "urg"
+)
+
+// PossibleAzureFirewallPacketCaptureFlagsTypeValues returns the possible values for the AzureFirewallPacketCaptureFlagsType const type.
+func PossibleAzureFirewallPacketCaptureFlagsTypeValues() []AzureFirewallPacketCaptureFlagsType {
+	return []AzureFirewallPacketCaptureFlagsType{
+		AzureFirewallPacketCaptureFlagsTypeAck,
+		AzureFirewallPacketCaptureFlagsTypeFin,
+		AzureFirewallPacketCaptureFlagsTypePush,
+		AzureFirewallPacketCaptureFlagsTypeRst,
+		AzureFirewallPacketCaptureFlagsTypeSyn,
+		AzureFirewallPacketCaptureFlagsTypeUrg,
+	}
+}
+
 // AzureFirewallRCActionType - The action type of a rule collection.
 type AzureFirewallRCActionType string
 
@@ -1547,17 +1624,17 @@ func PossibleFirewallPolicyIDPSQuerySortOrderValues() []FirewallPolicyIDPSQueryS
 type FirewallPolicyIDPSSignatureDirection int32
 
 const (
-	FirewallPolicyIDPSSignatureDirectionZero FirewallPolicyIDPSSignatureDirection = 0
 	FirewallPolicyIDPSSignatureDirectionOne  FirewallPolicyIDPSSignatureDirection = 1
 	FirewallPolicyIDPSSignatureDirectionTwo  FirewallPolicyIDPSSignatureDirection = 2
+	FirewallPolicyIDPSSignatureDirectionZero FirewallPolicyIDPSSignatureDirection = 0
 )
 
 // PossibleFirewallPolicyIDPSSignatureDirectionValues returns the possible values for the FirewallPolicyIDPSSignatureDirection const type.
 func PossibleFirewallPolicyIDPSSignatureDirectionValues() []FirewallPolicyIDPSSignatureDirection {
 	return []FirewallPolicyIDPSSignatureDirection{
-		FirewallPolicyIDPSSignatureDirectionZero,
 		FirewallPolicyIDPSSignatureDirectionOne,
 		FirewallPolicyIDPSSignatureDirectionTwo,
+		FirewallPolicyIDPSSignatureDirectionZero,
 	}
 }
 
@@ -1565,17 +1642,17 @@ func PossibleFirewallPolicyIDPSSignatureDirectionValues() []FirewallPolicyIDPSSi
 type FirewallPolicyIDPSSignatureMode int32
 
 const (
-	FirewallPolicyIDPSSignatureModeZero FirewallPolicyIDPSSignatureMode = 0
 	FirewallPolicyIDPSSignatureModeOne  FirewallPolicyIDPSSignatureMode = 1
 	FirewallPolicyIDPSSignatureModeTwo  FirewallPolicyIDPSSignatureMode = 2
+	FirewallPolicyIDPSSignatureModeZero FirewallPolicyIDPSSignatureMode = 0
 )
 
 // PossibleFirewallPolicyIDPSSignatureModeValues returns the possible values for the FirewallPolicyIDPSSignatureMode const type.
 func PossibleFirewallPolicyIDPSSignatureModeValues() []FirewallPolicyIDPSSignatureMode {
 	return []FirewallPolicyIDPSSignatureMode{
-		FirewallPolicyIDPSSignatureModeZero,
 		FirewallPolicyIDPSSignatureModeOne,
 		FirewallPolicyIDPSSignatureModeTwo,
+		FirewallPolicyIDPSSignatureModeZero,
 	}
 }
 
@@ -1584,16 +1661,16 @@ type FirewallPolicyIDPSSignatureSeverity int32
 
 const (
 	FirewallPolicyIDPSSignatureSeverityOne   FirewallPolicyIDPSSignatureSeverity = 1
-	FirewallPolicyIDPSSignatureSeverityTwo   FirewallPolicyIDPSSignatureSeverity = 2
 	FirewallPolicyIDPSSignatureSeverityThree FirewallPolicyIDPSSignatureSeverity = 3
+	FirewallPolicyIDPSSignatureSeverityTwo   FirewallPolicyIDPSSignatureSeverity = 2
 )
 
 // PossibleFirewallPolicyIDPSSignatureSeverityValues returns the possible values for the FirewallPolicyIDPSSignatureSeverity const type.
 func PossibleFirewallPolicyIDPSSignatureSeverityValues() []FirewallPolicyIDPSSignatureSeverity {
 	return []FirewallPolicyIDPSSignatureSeverity{
 		FirewallPolicyIDPSSignatureSeverityOne,
-		FirewallPolicyIDPSSignatureSeverityTwo,
 		FirewallPolicyIDPSSignatureSeverityThree,
+		FirewallPolicyIDPSSignatureSeverityTwo,
 	}
 }
 
@@ -2172,17 +2249,15 @@ func PossibleIssueTypeValues() []IssueType {
 type LoadBalancerBackendAddressAdminState string
 
 const (
-	LoadBalancerBackendAddressAdminStateDown  LoadBalancerBackendAddressAdminState = "Down"
-	LoadBalancerBackendAddressAdminStateDrain LoadBalancerBackendAddressAdminState = "Drain"
-	LoadBalancerBackendAddressAdminStateNone  LoadBalancerBackendAddressAdminState = "None"
-	LoadBalancerBackendAddressAdminStateUp    LoadBalancerBackendAddressAdminState = "Up"
+	LoadBalancerBackendAddressAdminStateDown LoadBalancerBackendAddressAdminState = "Down"
+	LoadBalancerBackendAddressAdminStateNone LoadBalancerBackendAddressAdminState = "None"
+	LoadBalancerBackendAddressAdminStateUp   LoadBalancerBackendAddressAdminState = "Up"
 )
 
 // PossibleLoadBalancerBackendAddressAdminStateValues returns the possible values for the LoadBalancerBackendAddressAdminState const type.
 func PossibleLoadBalancerBackendAddressAdminStateValues() []LoadBalancerBackendAddressAdminState {
 	return []LoadBalancerBackendAddressAdminState{
 		LoadBalancerBackendAddressAdminStateDown,
-		LoadBalancerBackendAddressAdminStateDrain,
 		LoadBalancerBackendAddressAdminStateNone,
 		LoadBalancerBackendAddressAdminStateUp,
 	}
@@ -2310,20 +2385,44 @@ func PossibleNetworkIntentPolicyBasedServiceValues() []NetworkIntentPolicyBasedS
 type NetworkInterfaceAuxiliaryMode string
 
 const (
-	NetworkInterfaceAuxiliaryModeFloating       NetworkInterfaceAuxiliaryMode = "Floating"
-	NetworkInterfaceAuxiliaryModeMaxConnections NetworkInterfaceAuxiliaryMode = "MaxConnections"
-	NetworkInterfaceAuxiliaryModeNone           NetworkInterfaceAuxiliaryMode = "None"
+	NetworkInterfaceAuxiliaryModeAcceleratedConnections NetworkInterfaceAuxiliaryMode = "AcceleratedConnections"
+	NetworkInterfaceAuxiliaryModeFloating               NetworkInterfaceAuxiliaryMode = "Floating"
+	NetworkInterfaceAuxiliaryModeMaxConnections         NetworkInterfaceAuxiliaryMode = "MaxConnections"
+	NetworkInterfaceAuxiliaryModeNone                   NetworkInterfaceAuxiliaryMode = "None"
 )
 
 // PossibleNetworkInterfaceAuxiliaryModeValues returns the possible values for the NetworkInterfaceAuxiliaryMode const type.
 func PossibleNetworkInterfaceAuxiliaryModeValues() []NetworkInterfaceAuxiliaryMode {
 	return []NetworkInterfaceAuxiliaryMode{
+		NetworkInterfaceAuxiliaryModeAcceleratedConnections,
 		NetworkInterfaceAuxiliaryModeFloating,
 		NetworkInterfaceAuxiliaryModeMaxConnections,
 		NetworkInterfaceAuxiliaryModeNone,
 	}
 }
 
+// NetworkInterfaceAuxiliarySKU - Auxiliary sku of Network Interface resource.
+type NetworkInterfaceAuxiliarySKU string
+
+const (
+	NetworkInterfaceAuxiliarySKUA1   NetworkInterfaceAuxiliarySKU = "A1"
+	NetworkInterfaceAuxiliarySKUA2   NetworkInterfaceAuxiliarySKU = "A2"
+	NetworkInterfaceAuxiliarySKUA4   NetworkInterfaceAuxiliarySKU = "A4"
+	NetworkInterfaceAuxiliarySKUA8   NetworkInterfaceAuxiliarySKU = "A8"
+	NetworkInterfaceAuxiliarySKUNone NetworkInterfaceAuxiliarySKU = "None"
+)
+
+// PossibleNetworkInterfaceAuxiliarySKUValues returns the possible values for the NetworkInterfaceAuxiliarySKU const type.
+func PossibleNetworkInterfaceAuxiliarySKUValues() []NetworkInterfaceAuxiliarySKU {
+	return []NetworkInterfaceAuxiliarySKU{
+		NetworkInterfaceAuxiliarySKUA1,
+		NetworkInterfaceAuxiliarySKUA2,
+		NetworkInterfaceAuxiliarySKUA4,
+		NetworkInterfaceAuxiliarySKUA8,
+		NetworkInterfaceAuxiliarySKUNone,
+	}
+}
+
 // NetworkInterfaceMigrationPhase - Migration phase of Network Interface resource.
 type NetworkInterfaceMigrationPhase string
 
@@ -2775,6 +2874,29 @@ func PossibleProvisioningStateValues() []ProvisioningState {
 	}
 }
 
+// PublicIPAddressDNSSettingsDomainNameLabelScope - The domain name label scope. If a domain name label and a domain name
+// label scope are specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system with a hashed
+// value
+// includes in FQDN.
+type PublicIPAddressDNSSettingsDomainNameLabelScope string
+
+const (
+	PublicIPAddressDNSSettingsDomainNameLabelScopeNoReuse            PublicIPAddressDNSSettingsDomainNameLabelScope = "NoReuse"
+	PublicIPAddressDNSSettingsDomainNameLabelScopeResourceGroupReuse PublicIPAddressDNSSettingsDomainNameLabelScope = "ResourceGroupReuse"
+	PublicIPAddressDNSSettingsDomainNameLabelScopeSubscriptionReuse  PublicIPAddressDNSSettingsDomainNameLabelScope = "SubscriptionReuse"
+	PublicIPAddressDNSSettingsDomainNameLabelScopeTenantReuse        PublicIPAddressDNSSettingsDomainNameLabelScope = "TenantReuse"
+)
+
+// PossiblePublicIPAddressDNSSettingsDomainNameLabelScopeValues returns the possible values for the PublicIPAddressDNSSettingsDomainNameLabelScope const type.
+func PossiblePublicIPAddressDNSSettingsDomainNameLabelScopeValues() []PublicIPAddressDNSSettingsDomainNameLabelScope {
+	return []PublicIPAddressDNSSettingsDomainNameLabelScope{
+		PublicIPAddressDNSSettingsDomainNameLabelScopeNoReuse,
+		PublicIPAddressDNSSettingsDomainNameLabelScopeResourceGroupReuse,
+		PublicIPAddressDNSSettingsDomainNameLabelScopeSubscriptionReuse,
+		PublicIPAddressDNSSettingsDomainNameLabelScopeTenantReuse,
+	}
+}
+
 // PublicIPAddressMigrationPhase - Migration phase of Public IP Address.
 type PublicIPAddressMigrationPhase string
 
@@ -2865,19 +2987,19 @@ func PossiblePublicIPPrefixSKUTierValues() []PublicIPPrefixSKUTier {
 type ResourceIdentityType string
 
 const (
+	ResourceIdentityTypeNone                       ResourceIdentityType = "None"
 	ResourceIdentityTypeSystemAssigned             ResourceIdentityType = "SystemAssigned"
-	ResourceIdentityTypeUserAssigned               ResourceIdentityType = "UserAssigned"
 	ResourceIdentityTypeSystemAssignedUserAssigned ResourceIdentityType = "SystemAssigned, UserAssigned"
-	ResourceIdentityTypeNone                       ResourceIdentityType = "None"
+	ResourceIdentityTypeUserAssigned               ResourceIdentityType = "UserAssigned"
 )
 
 // PossibleResourceIdentityTypeValues returns the possible values for the ResourceIdentityType const type.
 func PossibleResourceIdentityTypeValues() []ResourceIdentityType {
 	return []ResourceIdentityType{
+		ResourceIdentityTypeNone,
 		ResourceIdentityTypeSystemAssigned,
-		ResourceIdentityTypeUserAssigned,
 		ResourceIdentityTypeSystemAssignedUserAssigned,
-		ResourceIdentityTypeNone,
+		ResourceIdentityTypeUserAssigned,
 	}
 }
 
@@ -3004,6 +3126,63 @@ func PossibleScopeConnectionStateValues() []ScopeConnectionState {
 	}
 }
 
+// ScrubbingRuleEntryMatchOperator - When matchVariable is a collection, operate on the selector to specify which elements
+// in the collection this rule applies to.
+type ScrubbingRuleEntryMatchOperator string
+
+const (
+	ScrubbingRuleEntryMatchOperatorEquals    ScrubbingRuleEntryMatchOperator = "Equals"
+	ScrubbingRuleEntryMatchOperatorEqualsAny ScrubbingRuleEntryMatchOperator = "EqualsAny"
+)
+
+// PossibleScrubbingRuleEntryMatchOperatorValues returns the possible values for the ScrubbingRuleEntryMatchOperator const type.
+func PossibleScrubbingRuleEntryMatchOperatorValues() []ScrubbingRuleEntryMatchOperator {
+	return []ScrubbingRuleEntryMatchOperator{
+		ScrubbingRuleEntryMatchOperatorEquals,
+		ScrubbingRuleEntryMatchOperatorEqualsAny,
+	}
+}
+
+// ScrubbingRuleEntryMatchVariable - The variable to be scrubbed from the logs.
+type ScrubbingRuleEntryMatchVariable string
+
+const (
+	ScrubbingRuleEntryMatchVariableRequestArgNames     ScrubbingRuleEntryMatchVariable = "RequestArgNames"
+	ScrubbingRuleEntryMatchVariableRequestCookieNames  ScrubbingRuleEntryMatchVariable = "RequestCookieNames"
+	ScrubbingRuleEntryMatchVariableRequestHeaderNames  ScrubbingRuleEntryMatchVariable = "RequestHeaderNames"
+	ScrubbingRuleEntryMatchVariableRequestIPAddress    ScrubbingRuleEntryMatchVariable = "RequestIPAddress"
+	ScrubbingRuleEntryMatchVariableRequestJSONArgNames ScrubbingRuleEntryMatchVariable = "RequestJSONArgNames"
+	ScrubbingRuleEntryMatchVariableRequestPostArgNames ScrubbingRuleEntryMatchVariable = "RequestPostArgNames"
+)
+
+// PossibleScrubbingRuleEntryMatchVariableValues returns the possible values for the ScrubbingRuleEntryMatchVariable const type.
+func PossibleScrubbingRuleEntryMatchVariableValues() []ScrubbingRuleEntryMatchVariable {
+	return []ScrubbingRuleEntryMatchVariable{
+		ScrubbingRuleEntryMatchVariableRequestArgNames,
+		ScrubbingRuleEntryMatchVariableRequestCookieNames,
+		ScrubbingRuleEntryMatchVariableRequestHeaderNames,
+		ScrubbingRuleEntryMatchVariableRequestIPAddress,
+		ScrubbingRuleEntryMatchVariableRequestJSONArgNames,
+		ScrubbingRuleEntryMatchVariableRequestPostArgNames,
+	}
+}
+
+// ScrubbingRuleEntryState - Defines the state of log scrubbing rule. Default value is Enabled.
+type ScrubbingRuleEntryState string
+
+const (
+	ScrubbingRuleEntryStateDisabled ScrubbingRuleEntryState = "Disabled"
+	ScrubbingRuleEntryStateEnabled  ScrubbingRuleEntryState = "Enabled"
+)
+
+// PossibleScrubbingRuleEntryStateValues returns the possible values for the ScrubbingRuleEntryState const type.
+func PossibleScrubbingRuleEntryStateValues() []ScrubbingRuleEntryState {
+	return []ScrubbingRuleEntryState{
+		ScrubbingRuleEntryStateDisabled,
+		ScrubbingRuleEntryStateEnabled,
+	}
+}
+
 // SecurityConfigurationRuleAccess - Whether network traffic is allowed or denied.
 type SecurityConfigurationRuleAccess string
 
@@ -3210,6 +3389,22 @@ func PossibleSlotTypeValues() []SlotType {
 	}
 }
 
+// SyncMode - Backend address synchronous mode for the backend pool
+type SyncMode string
+
+const (
+	SyncModeAutomatic SyncMode = "Automatic"
+	SyncModeManual    SyncMode = "Manual"
+)
+
+// PossibleSyncModeValues returns the possible values for the SyncMode const type.
+func PossibleSyncModeValues() []SyncMode {
+	return []SyncMode{
+		SyncModeAutomatic,
+		SyncModeManual,
+	}
+}
+
 type SyncRemoteAddressSpace string
 
 const (
@@ -3929,8 +4124,9 @@ func PossibleWebApplicationFirewallPolicyResourceStateValues() []WebApplicationF
 type WebApplicationFirewallRuleType string
 
 const (
-	WebApplicationFirewallRuleTypeInvalid   WebApplicationFirewallRuleType = "Invalid"
-	WebApplicationFirewallRuleTypeMatchRule WebApplicationFirewallRuleType = "MatchRule"
+	WebApplicationFirewallRuleTypeInvalid       WebApplicationFirewallRuleType = "Invalid"
+	WebApplicationFirewallRuleTypeMatchRule     WebApplicationFirewallRuleType = "MatchRule"
+	WebApplicationFirewallRuleTypeRateLimitRule WebApplicationFirewallRuleType = "RateLimitRule"
 )
 
 // PossibleWebApplicationFirewallRuleTypeValues returns the possible values for the WebApplicationFirewallRuleType const type.
@@ -3938,6 +4134,23 @@ func PossibleWebApplicationFirewallRuleTypeValues() []WebApplicationFirewallRule
 	return []WebApplicationFirewallRuleType{
 		WebApplicationFirewallRuleTypeInvalid,
 		WebApplicationFirewallRuleTypeMatchRule,
+		WebApplicationFirewallRuleTypeRateLimitRule,
+	}
+}
+
+// WebApplicationFirewallScrubbingState - State of the log scrubbing config. Default value is Enabled.
+type WebApplicationFirewallScrubbingState string
+
+const (
+	WebApplicationFirewallScrubbingStateDisabled WebApplicationFirewallScrubbingState = "Disabled"
+	WebApplicationFirewallScrubbingStateEnabled  WebApplicationFirewallScrubbingState = "Enabled"
+)
+
+// PossibleWebApplicationFirewallScrubbingStateValues returns the possible values for the WebApplicationFirewallScrubbingState const type.
+func PossibleWebApplicationFirewallScrubbingStateValues() []WebApplicationFirewallScrubbingState {
+	return []WebApplicationFirewallScrubbingState{
+		WebApplicationFirewallScrubbingStateDisabled,
+		WebApplicationFirewallScrubbingStateEnabled,
 	}
 }
 
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/customipprefixes_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/customipprefixes_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/customipprefixes_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/customipprefixes_client.go
index bc379720b89..52935bf8679 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/customipprefixes_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/customipprefixes_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type CustomIPPrefixesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewCustomIPPrefixesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*CustomIPPrefixesClient, error) {
-	cl, err := arm.NewClient(moduleName+".CustomIPPrefixesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewCustomIPPrefixesClient(subscriptionID string, credential azcore.TokenCre
 // BeginCreateOrUpdate - Creates or updates a custom IP prefix.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - customIPPrefixName - The name of the custom IP prefix.
 //   - parameters - Parameters supplied to the create or update custom IP prefix operation.
@@ -60,31 +59,41 @@ func (client *CustomIPPrefixesClient) BeginCreateOrUpdate(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CustomIPPrefixesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CustomIPPrefixesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CustomIPPrefixesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CustomIPPrefixesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a custom IP prefix.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *CustomIPPrefixesClient) createOrUpdate(ctx context.Context, resourceGroupName string, customIPPrefixName string, parameters CustomIPPrefix, options *CustomIPPrefixesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CustomIPPrefixesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, customIPPrefixName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *CustomIPPrefixesClient) createOrUpdateCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified custom IP prefix.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - customIPPrefixName - The name of the CustomIpPrefix.
 //   - options - CustomIPPrefixesClientBeginDeleteOptions contains the optional parameters for the CustomIPPrefixesClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *CustomIPPrefixesClient) BeginDelete(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CustomIPPrefixesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[CustomIPPrefixesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[CustomIPPrefixesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[CustomIPPrefixesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified custom IP prefix.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *CustomIPPrefixesClient) deleteOperation(ctx context.Context, resourceGroupName string, customIPPrefixName string, options *CustomIPPrefixesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "CustomIPPrefixesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, customIPPrefixName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *CustomIPPrefixesClient) deleteCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *CustomIPPrefixesClient) deleteCreateRequest(ctx context.Context, r
 // Get - Gets the specified custom IP prefix in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - customIPPrefixName - The name of the custom IP prefix.
 //   - options - CustomIPPrefixesClientGetOptions contains the optional parameters for the CustomIPPrefixesClient.Get method.
 func (client *CustomIPPrefixesClient) Get(ctx context.Context, resourceGroupName string, customIPPrefixName string, options *CustomIPPrefixesClientGetOptions) (CustomIPPrefixesClientGetResponse, error) {
+	var err error
+	const operationName = "CustomIPPrefixesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, customIPPrefixName, options)
 	if err != nil {
 		return CustomIPPrefixesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CustomIPPrefixesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CustomIPPrefixesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CustomIPPrefixesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *CustomIPPrefixesClient) getCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -242,7 +271,7 @@ func (client *CustomIPPrefixesClient) getHandleResponse(resp *http.Response) (Cu
 
 // NewListPager - Gets all custom IP prefixes in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - CustomIPPrefixesClientListOptions contains the optional parameters for the CustomIPPrefixesClient.NewListPager
 //     method.
@@ -252,25 +281,20 @@ func (client *CustomIPPrefixesClient) NewListPager(resourceGroupName string, opt
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CustomIPPrefixesClientListResponse) (CustomIPPrefixesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return CustomIPPrefixesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CustomIPPrefixesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return CustomIPPrefixesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CustomIPPrefixesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -290,7 +314,7 @@ func (client *CustomIPPrefixesClient) listCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -307,7 +331,7 @@ func (client *CustomIPPrefixesClient) listHandleResponse(resp *http.Response) (C
 
 // NewListAllPager - Gets all the custom IP prefixes in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - CustomIPPrefixesClientListAllOptions contains the optional parameters for the CustomIPPrefixesClient.NewListAllPager
 //     method.
 func (client *CustomIPPrefixesClient) NewListAllPager(options *CustomIPPrefixesClientListAllOptions) *runtime.Pager[CustomIPPrefixesClientListAllResponse] {
@@ -316,25 +340,20 @@ func (client *CustomIPPrefixesClient) NewListAllPager(options *CustomIPPrefixesC
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *CustomIPPrefixesClientListAllResponse) (CustomIPPrefixesClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return CustomIPPrefixesClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "CustomIPPrefixesClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return CustomIPPrefixesClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return CustomIPPrefixesClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -350,7 +369,7 @@ func (client *CustomIPPrefixesClient) listAllCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -368,25 +387,32 @@ func (client *CustomIPPrefixesClient) listAllHandleResponse(resp *http.Response)
 // UpdateTags - Updates custom IP prefix tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - customIPPrefixName - The name of the custom IP prefix.
 //   - parameters - Parameters supplied to update custom IP prefix tags.
 //   - options - CustomIPPrefixesClientUpdateTagsOptions contains the optional parameters for the CustomIPPrefixesClient.UpdateTags
 //     method.
 func (client *CustomIPPrefixesClient) UpdateTags(ctx context.Context, resourceGroupName string, customIPPrefixName string, parameters TagsObject, options *CustomIPPrefixesClientUpdateTagsOptions) (CustomIPPrefixesClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "CustomIPPrefixesClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, customIPPrefixName, parameters, options)
 	if err != nil {
 		return CustomIPPrefixesClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return CustomIPPrefixesClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return CustomIPPrefixesClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return CustomIPPrefixesClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -409,10 +435,13 @@ func (client *CustomIPPrefixesClient) updateTagsCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ddoscustompolicies_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ddoscustompolicies_client.go
similarity index 77%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ddoscustompolicies_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ddoscustompolicies_client.go
index 7c237262eb4..97593c1f109 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ddoscustompolicies_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ddoscustompolicies_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type DdosCustomPoliciesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewDdosCustomPoliciesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*DdosCustomPoliciesClient, error) {
-	cl, err := arm.NewClient(moduleName+".DdosCustomPoliciesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewDdosCustomPoliciesClient(subscriptionID string, credential azcore.TokenC
 // BeginCreateOrUpdate - Creates or updates a DDoS custom policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ddosCustomPolicyName - The name of the DDoS custom policy.
 //   - parameters - Parameters supplied to the create or update operation.
@@ -60,31 +59,41 @@ func (client *DdosCustomPoliciesClient) BeginCreateOrUpdate(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DdosCustomPoliciesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DdosCustomPoliciesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DdosCustomPoliciesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DdosCustomPoliciesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a DDoS custom policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *DdosCustomPoliciesClient) createOrUpdate(ctx context.Context, resourceGroupName string, ddosCustomPolicyName string, parameters DdosCustomPolicy, options *DdosCustomPoliciesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DdosCustomPoliciesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, ddosCustomPolicyName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *DdosCustomPoliciesClient) createOrUpdateCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified DDoS custom policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ddosCustomPolicyName - The name of the DDoS custom policy.
 //   - options - DdosCustomPoliciesClientBeginDeleteOptions contains the optional parameters for the DdosCustomPoliciesClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *DdosCustomPoliciesClient) BeginDelete(ctx context.Context, resourc
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DdosCustomPoliciesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DdosCustomPoliciesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DdosCustomPoliciesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DdosCustomPoliciesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified DDoS custom policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *DdosCustomPoliciesClient) deleteOperation(ctx context.Context, resourceGroupName string, ddosCustomPolicyName string, options *DdosCustomPoliciesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DdosCustomPoliciesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, ddosCustomPolicyName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *DdosCustomPoliciesClient) deleteCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *DdosCustomPoliciesClient) deleteCreateRequest(ctx context.Context,
 // Get - Gets information about the specified DDoS custom policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ddosCustomPolicyName - The name of the DDoS custom policy.
 //   - options - DdosCustomPoliciesClientGetOptions contains the optional parameters for the DdosCustomPoliciesClient.Get method.
 func (client *DdosCustomPoliciesClient) Get(ctx context.Context, resourceGroupName string, ddosCustomPolicyName string, options *DdosCustomPoliciesClientGetOptions) (DdosCustomPoliciesClientGetResponse, error) {
+	var err error
+	const operationName = "DdosCustomPoliciesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, ddosCustomPolicyName, options)
 	if err != nil {
 		return DdosCustomPoliciesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DdosCustomPoliciesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DdosCustomPoliciesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DdosCustomPoliciesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *DdosCustomPoliciesClient) getCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -240,25 +269,32 @@ func (client *DdosCustomPoliciesClient) getHandleResponse(resp *http.Response) (
 // UpdateTags - Update a DDoS custom policy tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ddosCustomPolicyName - The name of the DDoS custom policy.
 //   - parameters - Parameters supplied to update DDoS custom policy resource tags.
 //   - options - DdosCustomPoliciesClientUpdateTagsOptions contains the optional parameters for the DdosCustomPoliciesClient.UpdateTags
 //     method.
 func (client *DdosCustomPoliciesClient) UpdateTags(ctx context.Context, resourceGroupName string, ddosCustomPolicyName string, parameters TagsObject, options *DdosCustomPoliciesClientUpdateTagsOptions) (DdosCustomPoliciesClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "DdosCustomPoliciesClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, ddosCustomPolicyName, parameters, options)
 	if err != nil {
 		return DdosCustomPoliciesClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DdosCustomPoliciesClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DdosCustomPoliciesClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DdosCustomPoliciesClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -281,10 +317,13 @@ func (client *DdosCustomPoliciesClient) updateTagsCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ddosprotectionplans_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ddosprotectionplans_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ddosprotectionplans_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ddosprotectionplans_client.go
index d85735dbd2d..24e240859ec 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ddosprotectionplans_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ddosprotectionplans_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type DdosProtectionPlansClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewDdosProtectionPlansClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*DdosProtectionPlansClient, error) {
-	cl, err := arm.NewClient(moduleName+".DdosProtectionPlansClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewDdosProtectionPlansClient(subscriptionID string, credential azcore.Token
 // BeginCreateOrUpdate - Creates or updates a DDoS protection plan.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ddosProtectionPlanName - The name of the DDoS protection plan.
 //   - parameters - Parameters supplied to the create or update operation.
@@ -60,31 +59,41 @@ func (client *DdosProtectionPlansClient) BeginCreateOrUpdate(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DdosProtectionPlansClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DdosProtectionPlansClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DdosProtectionPlansClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DdosProtectionPlansClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a DDoS protection plan.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *DdosProtectionPlansClient) createOrUpdate(ctx context.Context, resourceGroupName string, ddosProtectionPlanName string, parameters DdosProtectionPlan, options *DdosProtectionPlansClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DdosProtectionPlansClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, ddosProtectionPlanName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *DdosProtectionPlansClient) createOrUpdateCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified DDoS protection plan.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ddosProtectionPlanName - The name of the DDoS protection plan.
 //   - options - DdosProtectionPlansClientBeginDeleteOptions contains the optional parameters for the DdosProtectionPlansClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *DdosProtectionPlansClient) BeginDelete(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DdosProtectionPlansClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DdosProtectionPlansClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DdosProtectionPlansClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DdosProtectionPlansClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified DDoS protection plan.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *DdosProtectionPlansClient) deleteOperation(ctx context.Context, resourceGroupName string, ddosProtectionPlanName string, options *DdosProtectionPlansClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DdosProtectionPlansClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, ddosProtectionPlanName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *DdosProtectionPlansClient) deleteCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *DdosProtectionPlansClient) deleteCreateRequest(ctx context.Context
 // Get - Gets information about the specified DDoS protection plan.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ddosProtectionPlanName - The name of the DDoS protection plan.
 //   - options - DdosProtectionPlansClientGetOptions contains the optional parameters for the DdosProtectionPlansClient.Get method.
 func (client *DdosProtectionPlansClient) Get(ctx context.Context, resourceGroupName string, ddosProtectionPlanName string, options *DdosProtectionPlansClientGetOptions) (DdosProtectionPlansClientGetResponse, error) {
+	var err error
+	const operationName = "DdosProtectionPlansClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, ddosProtectionPlanName, options)
 	if err != nil {
 		return DdosProtectionPlansClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DdosProtectionPlansClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DdosProtectionPlansClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DdosProtectionPlansClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *DdosProtectionPlansClient) getCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -239,7 +268,7 @@ func (client *DdosProtectionPlansClient) getHandleResponse(resp *http.Response)
 
 // NewListPager - Gets all DDoS protection plans in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - DdosProtectionPlansClientListOptions contains the optional parameters for the DdosProtectionPlansClient.NewListPager
 //     method.
 func (client *DdosProtectionPlansClient) NewListPager(options *DdosProtectionPlansClientListOptions) *runtime.Pager[DdosProtectionPlansClientListResponse] {
@@ -248,25 +277,20 @@ func (client *DdosProtectionPlansClient) NewListPager(options *DdosProtectionPla
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DdosProtectionPlansClientListResponse) (DdosProtectionPlansClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return DdosProtectionPlansClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DdosProtectionPlansClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return DdosProtectionPlansClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DdosProtectionPlansClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -282,7 +306,7 @@ func (client *DdosProtectionPlansClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -299,7 +323,7 @@ func (client *DdosProtectionPlansClient) listHandleResponse(resp *http.Response)
 
 // NewListByResourceGroupPager - Gets all the DDoS protection plans in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - DdosProtectionPlansClientListByResourceGroupOptions contains the optional parameters for the DdosProtectionPlansClient.NewListByResourceGroupPager
 //     method.
@@ -309,25 +333,20 @@ func (client *DdosProtectionPlansClient) NewListByResourceGroupPager(resourceGro
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DdosProtectionPlansClientListByResourceGroupResponse) (DdosProtectionPlansClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return DdosProtectionPlansClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DdosProtectionPlansClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return DdosProtectionPlansClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DdosProtectionPlansClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -347,7 +366,7 @@ func (client *DdosProtectionPlansClient) listByResourceGroupCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -365,25 +384,32 @@ func (client *DdosProtectionPlansClient) listByResourceGroupHandleResponse(resp
 // UpdateTags - Update a DDoS protection plan tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ddosProtectionPlanName - The name of the DDoS protection plan.
 //   - parameters - Parameters supplied to the update DDoS protection plan resource tags.
 //   - options - DdosProtectionPlansClientUpdateTagsOptions contains the optional parameters for the DdosProtectionPlansClient.UpdateTags
 //     method.
 func (client *DdosProtectionPlansClient) UpdateTags(ctx context.Context, resourceGroupName string, ddosProtectionPlanName string, parameters TagsObject, options *DdosProtectionPlansClientUpdateTagsOptions) (DdosProtectionPlansClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "DdosProtectionPlansClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, ddosProtectionPlanName, parameters, options)
 	if err != nil {
 		return DdosProtectionPlansClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DdosProtectionPlansClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DdosProtectionPlansClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DdosProtectionPlansClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -406,10 +432,13 @@ func (client *DdosProtectionPlansClient) updateTagsCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/defaultsecurityrules_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/defaultsecurityrules_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/defaultsecurityrules_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/defaultsecurityrules_client.go
index d29988e29b4..3ebcfd56e99 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/defaultsecurityrules_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/defaultsecurityrules_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type DefaultSecurityRulesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewDefaultSecurityRulesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*DefaultSecurityRulesClient, error) {
-	cl, err := arm.NewClient(moduleName+".DefaultSecurityRulesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewDefaultSecurityRulesClient(subscriptionID string, credential azcore.Toke
 // Get - Get the specified default network security rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkSecurityGroupName - The name of the network security group.
 //   - defaultSecurityRuleName - The name of the default security rule.
 //   - options - DefaultSecurityRulesClientGetOptions contains the optional parameters for the DefaultSecurityRulesClient.Get
 //     method.
 func (client *DefaultSecurityRulesClient) Get(ctx context.Context, resourceGroupName string, networkSecurityGroupName string, defaultSecurityRuleName string, options *DefaultSecurityRulesClientGetOptions) (DefaultSecurityRulesClientGetResponse, error) {
+	var err error
+	const operationName = "DefaultSecurityRulesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, defaultSecurityRuleName, options)
 	if err != nil {
 		return DefaultSecurityRulesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DefaultSecurityRulesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DefaultSecurityRulesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DefaultSecurityRulesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -93,7 +99,7 @@ func (client *DefaultSecurityRulesClient) getCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -110,7 +116,7 @@ func (client *DefaultSecurityRulesClient) getHandleResponse(resp *http.Response)
 
 // NewListPager - Gets all default security rules in a network security group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkSecurityGroupName - The name of the network security group.
 //   - options - DefaultSecurityRulesClientListOptions contains the optional parameters for the DefaultSecurityRulesClient.NewListPager
@@ -121,25 +127,20 @@ func (client *DefaultSecurityRulesClient) NewListPager(resourceGroupName string,
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DefaultSecurityRulesClientListResponse) (DefaultSecurityRulesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DefaultSecurityRulesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, options)
+			}, nil)
 			if err != nil {
 				return DefaultSecurityRulesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return DefaultSecurityRulesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DefaultSecurityRulesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -163,7 +164,7 @@ func (client *DefaultSecurityRulesClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/dscpconfiguration_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/dscpconfiguration_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/dscpconfiguration_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/dscpconfiguration_client.go
index 399a7a8c8bb..733734d3cf1 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/dscpconfiguration_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/dscpconfiguration_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type DscpConfigurationClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewDscpConfigurationClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*DscpConfigurationClient, error) {
-	cl, err := arm.NewClient(moduleName+".DscpConfigurationClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewDscpConfigurationClient(subscriptionID string, credential azcore.TokenCr
 // BeginCreateOrUpdate - Creates or updates a DSCP Configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - dscpConfigurationName - The name of the resource.
 //   - parameters - Parameters supplied to the create or update dscp configuration operation.
@@ -60,31 +59,41 @@ func (client *DscpConfigurationClient) BeginCreateOrUpdate(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DscpConfigurationClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DscpConfigurationClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DscpConfigurationClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DscpConfigurationClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a DSCP Configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *DscpConfigurationClient) createOrUpdate(ctx context.Context, resourceGroupName string, dscpConfigurationName string, parameters DscpConfiguration, options *DscpConfigurationClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DscpConfigurationClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, dscpConfigurationName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *DscpConfigurationClient) createOrUpdateCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a DSCP Configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - dscpConfigurationName - The name of the resource.
 //   - options - DscpConfigurationClientBeginDeleteOptions contains the optional parameters for the DscpConfigurationClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *DscpConfigurationClient) BeginDelete(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DscpConfigurationClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[DscpConfigurationClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[DscpConfigurationClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[DscpConfigurationClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a DSCP Configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *DscpConfigurationClient) deleteOperation(ctx context.Context, resourceGroupName string, dscpConfigurationName string, options *DscpConfigurationClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "DscpConfigurationClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, dscpConfigurationName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *DscpConfigurationClient) deleteCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *DscpConfigurationClient) deleteCreateRequest(ctx context.Context,
 // Get - Gets a DSCP Configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - dscpConfigurationName - The name of the resource.
 //   - options - DscpConfigurationClientGetOptions contains the optional parameters for the DscpConfigurationClient.Get method.
 func (client *DscpConfigurationClient) Get(ctx context.Context, resourceGroupName string, dscpConfigurationName string, options *DscpConfigurationClientGetOptions) (DscpConfigurationClientGetResponse, error) {
+	var err error
+	const operationName = "DscpConfigurationClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, dscpConfigurationName, options)
 	if err != nil {
 		return DscpConfigurationClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return DscpConfigurationClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return DscpConfigurationClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return DscpConfigurationClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *DscpConfigurationClient) getCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -239,7 +268,7 @@ func (client *DscpConfigurationClient) getHandleResponse(resp *http.Response) (D
 
 // NewListPager - Gets a DSCP Configuration.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - DscpConfigurationClientListOptions contains the optional parameters for the DscpConfigurationClient.NewListPager
 //     method.
@@ -249,25 +278,20 @@ func (client *DscpConfigurationClient) NewListPager(resourceGroupName string, op
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DscpConfigurationClientListResponse) (DscpConfigurationClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DscpConfigurationClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return DscpConfigurationClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return DscpConfigurationClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DscpConfigurationClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -287,7 +311,7 @@ func (client *DscpConfigurationClient) listCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -304,7 +328,7 @@ func (client *DscpConfigurationClient) listHandleResponse(resp *http.Response) (
 
 // NewListAllPager - Gets all dscp configurations in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - DscpConfigurationClientListAllOptions contains the optional parameters for the DscpConfigurationClient.NewListAllPager
 //     method.
 func (client *DscpConfigurationClient) NewListAllPager(options *DscpConfigurationClientListAllOptions) *runtime.Pager[DscpConfigurationClientListAllResponse] {
@@ -313,25 +337,20 @@ func (client *DscpConfigurationClient) NewListAllPager(options *DscpConfiguratio
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *DscpConfigurationClientListAllResponse) (DscpConfigurationClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "DscpConfigurationClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return DscpConfigurationClientListAllResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return DscpConfigurationClientListAllResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return DscpConfigurationClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -347,7 +366,7 @@ func (client *DscpConfigurationClient) listAllCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuitauthorizations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuitauthorizations_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuitauthorizations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuitauthorizations_client.go
index ce42f8729a2..91d2d8c29b5 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuitauthorizations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuitauthorizations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRouteCircuitAuthorizationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRouteCircuitAuthorizationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRouteCircuitAuthorizationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRouteCircuitAuthorizationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewExpressRouteCircuitAuthorizationsClient(subscriptionID string, credentia
 // BeginCreateOrUpdate - Creates or updates an authorization in the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - authorizationName - The name of the authorization.
@@ -61,31 +60,41 @@ func (client *ExpressRouteCircuitAuthorizationsClient) BeginCreateOrUpdate(ctx c
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitAuthorizationsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitAuthorizationsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCircuitAuthorizationsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCircuitAuthorizationsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates an authorization in the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCircuitAuthorizationsClient) createOrUpdate(ctx context.Context, resourceGroupName string, circuitName string, authorizationName string, authorizationParameters ExpressRouteCircuitAuthorization, options *ExpressRouteCircuitAuthorizationsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitAuthorizationsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, circuitName, authorizationName, authorizationParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *ExpressRouteCircuitAuthorizationsClient) createOrUpdateCreateReque
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, authorizationParameters)
+	if err := runtime.MarshalAsJSON(req, authorizationParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified authorization from the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - authorizationName - The name of the authorization.
@@ -133,31 +145,41 @@ func (client *ExpressRouteCircuitAuthorizationsClient) BeginDelete(ctx context.C
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitAuthorizationsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitAuthorizationsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCircuitAuthorizationsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCircuitAuthorizationsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified authorization from the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCircuitAuthorizationsClient) deleteOperation(ctx context.Context, resourceGroupName string, circuitName string, authorizationName string, options *ExpressRouteCircuitAuthorizationsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitAuthorizationsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, circuitName, authorizationName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *ExpressRouteCircuitAuthorizationsClient) deleteCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *ExpressRouteCircuitAuthorizationsClient) deleteCreateRequest(ctx c
 // Get - Gets the specified authorization from the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - authorizationName - The name of the authorization.
 //   - options - ExpressRouteCircuitAuthorizationsClientGetOptions contains the optional parameters for the ExpressRouteCircuitAuthorizationsClient.Get
 //     method.
 func (client *ExpressRouteCircuitAuthorizationsClient) Get(ctx context.Context, resourceGroupName string, circuitName string, authorizationName string, options *ExpressRouteCircuitAuthorizationsClientGetOptions) (ExpressRouteCircuitAuthorizationsClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitAuthorizationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, circuitName, authorizationName, options)
 	if err != nil {
 		return ExpressRouteCircuitAuthorizationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteCircuitAuthorizationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteCircuitAuthorizationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteCircuitAuthorizationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *ExpressRouteCircuitAuthorizationsClient) getCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *ExpressRouteCircuitAuthorizationsClient) getHandleResponse(resp *h
 
 // NewListPager - Gets all authorizations in an express route circuit.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the circuit.
 //   - options - ExpressRouteCircuitAuthorizationsClientListOptions contains the optional parameters for the ExpressRouteCircuitAuthorizationsClient.NewListPager
@@ -266,25 +295,20 @@ func (client *ExpressRouteCircuitAuthorizationsClient) NewListPager(resourceGrou
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRouteCircuitAuthorizationsClientListResponse) (ExpressRouteCircuitAuthorizationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, circuitName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ExpressRouteCircuitAuthorizationsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRouteCircuitAuthorizationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, circuitName, options)
+			}, nil)
 			if err != nil {
 				return ExpressRouteCircuitAuthorizationsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRouteCircuitAuthorizationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *ExpressRouteCircuitAuthorizationsClient) listCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuitconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuitconnections_client.go
similarity index 81%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuitconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuitconnections_client.go
index 39fc5921728..e07aaa0b089 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuitconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuitconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRouteCircuitConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRouteCircuitConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRouteCircuitConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRouteCircuitConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewExpressRouteCircuitConnectionsClient(subscriptionID string, credential a
 // BeginCreateOrUpdate - Creates or updates a Express Route Circuit Connection in the specified express route circuits.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - peeringName - The name of the peering.
@@ -63,31 +62,41 @@ func (client *ExpressRouteCircuitConnectionsClient) BeginCreateOrUpdate(ctx cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitConnectionsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitConnectionsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCircuitConnectionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCircuitConnectionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a Express Route Circuit Connection in the specified express route circuits.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCircuitConnectionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, circuitName string, peeringName string, connectionName string, expressRouteCircuitConnectionParameters ExpressRouteCircuitConnection, options *ExpressRouteCircuitConnectionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitConnectionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, circuitName, peeringName, connectionName, expressRouteCircuitConnectionParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -118,16 +127,19 @@ func (client *ExpressRouteCircuitConnectionsClient) createOrUpdateCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, expressRouteCircuitConnectionParameters)
+	if err := runtime.MarshalAsJSON(req, expressRouteCircuitConnectionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified Express Route Circuit Connection from the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - peeringName - The name of the peering.
@@ -140,31 +152,41 @@ func (client *ExpressRouteCircuitConnectionsClient) BeginDelete(ctx context.Cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitConnectionsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitConnectionsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCircuitConnectionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCircuitConnectionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified Express Route Circuit Connection from the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCircuitConnectionsClient) deleteOperation(ctx context.Context, resourceGroupName string, circuitName string, peeringName string, connectionName string, options *ExpressRouteCircuitConnectionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitConnectionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, circuitName, peeringName, connectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -195,7 +217,7 @@ func (client *ExpressRouteCircuitConnectionsClient) deleteCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -204,7 +226,7 @@ func (client *ExpressRouteCircuitConnectionsClient) deleteCreateRequest(ctx cont
 // Get - Gets the specified Express Route Circuit Connection from the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - peeringName - The name of the peering.
@@ -212,18 +234,25 @@ func (client *ExpressRouteCircuitConnectionsClient) deleteCreateRequest(ctx cont
 //   - options - ExpressRouteCircuitConnectionsClientGetOptions contains the optional parameters for the ExpressRouteCircuitConnectionsClient.Get
 //     method.
 func (client *ExpressRouteCircuitConnectionsClient) Get(ctx context.Context, resourceGroupName string, circuitName string, peeringName string, connectionName string, options *ExpressRouteCircuitConnectionsClientGetOptions) (ExpressRouteCircuitConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, circuitName, peeringName, connectionName, options)
 	if err != nil {
 		return ExpressRouteCircuitConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteCircuitConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteCircuitConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteCircuitConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -254,7 +283,7 @@ func (client *ExpressRouteCircuitConnectionsClient) getCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -271,7 +300,7 @@ func (client *ExpressRouteCircuitConnectionsClient) getHandleResponse(resp *http
 
 // NewListPager - Gets all global reach connections associated with a private peering in an express route circuit.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the circuit.
 //   - peeringName - The name of the peering.
@@ -283,25 +312,20 @@ func (client *ExpressRouteCircuitConnectionsClient) NewListPager(resourceGroupNa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRouteCircuitConnectionsClientListResponse) (ExpressRouteCircuitConnectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, circuitName, peeringName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ExpressRouteCircuitConnectionsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRouteCircuitConnectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, circuitName, peeringName, options)
+			}, nil)
 			if err != nil {
 				return ExpressRouteCircuitConnectionsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRouteCircuitConnectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -329,7 +353,7 @@ func (client *ExpressRouteCircuitConnectionsClient) listCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuitpeerings_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuitpeerings_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuitpeerings_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuitpeerings_client.go
index 915899eaa66..4d849efaf03 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuitpeerings_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuitpeerings_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRouteCircuitPeeringsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRouteCircuitPeeringsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRouteCircuitPeeringsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRouteCircuitPeeringsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewExpressRouteCircuitPeeringsClient(subscriptionID string, credential azco
 // BeginCreateOrUpdate - Creates or updates a peering in the specified express route circuits.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - peeringName - The name of the peering.
@@ -61,31 +60,41 @@ func (client *ExpressRouteCircuitPeeringsClient) BeginCreateOrUpdate(ctx context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitPeeringsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitPeeringsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCircuitPeeringsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCircuitPeeringsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a peering in the specified express route circuits.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCircuitPeeringsClient) createOrUpdate(ctx context.Context, resourceGroupName string, circuitName string, peeringName string, peeringParameters ExpressRouteCircuitPeering, options *ExpressRouteCircuitPeeringsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitPeeringsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, circuitName, peeringName, peeringParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *ExpressRouteCircuitPeeringsClient) createOrUpdateCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, peeringParameters)
+	if err := runtime.MarshalAsJSON(req, peeringParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified peering from the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - peeringName - The name of the peering.
@@ -133,31 +145,41 @@ func (client *ExpressRouteCircuitPeeringsClient) BeginDelete(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitPeeringsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitPeeringsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCircuitPeeringsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCircuitPeeringsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified peering from the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCircuitPeeringsClient) deleteOperation(ctx context.Context, resourceGroupName string, circuitName string, peeringName string, options *ExpressRouteCircuitPeeringsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitPeeringsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, circuitName, peeringName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *ExpressRouteCircuitPeeringsClient) deleteCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *ExpressRouteCircuitPeeringsClient) deleteCreateRequest(ctx context
 // Get - Gets the specified peering for the express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - peeringName - The name of the peering.
 //   - options - ExpressRouteCircuitPeeringsClientGetOptions contains the optional parameters for the ExpressRouteCircuitPeeringsClient.Get
 //     method.
 func (client *ExpressRouteCircuitPeeringsClient) Get(ctx context.Context, resourceGroupName string, circuitName string, peeringName string, options *ExpressRouteCircuitPeeringsClientGetOptions) (ExpressRouteCircuitPeeringsClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitPeeringsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, circuitName, peeringName, options)
 	if err != nil {
 		return ExpressRouteCircuitPeeringsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteCircuitPeeringsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteCircuitPeeringsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteCircuitPeeringsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *ExpressRouteCircuitPeeringsClient) getCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *ExpressRouteCircuitPeeringsClient) getHandleResponse(resp *http.Re
 
 // NewListPager - Gets all peerings in a specified express route circuit.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - options - ExpressRouteCircuitPeeringsClientListOptions contains the optional parameters for the ExpressRouteCircuitPeeringsClient.NewListPager
@@ -266,25 +295,20 @@ func (client *ExpressRouteCircuitPeeringsClient) NewListPager(resourceGroupName
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRouteCircuitPeeringsClientListResponse) (ExpressRouteCircuitPeeringsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, circuitName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ExpressRouteCircuitPeeringsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRouteCircuitPeeringsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, circuitName, options)
+			}, nil)
 			if err != nil {
 				return ExpressRouteCircuitPeeringsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRouteCircuitPeeringsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *ExpressRouteCircuitPeeringsClient) listCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuits_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuits_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuits_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuits_client.go
index 331207e1813..e106f07bc37 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecircuits_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecircuits_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRouteCircuitsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRouteCircuitsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRouteCircuitsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRouteCircuitsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewExpressRouteCircuitsClient(subscriptionID string, credential azcore.Toke
 // BeginCreateOrUpdate - Creates or updates an express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the circuit.
 //   - parameters - Parameters supplied to the create or update express route circuit operation.
@@ -60,31 +59,41 @@ func (client *ExpressRouteCircuitsClient) BeginCreateOrUpdate(ctx context.Contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCircuitsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCircuitsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates an express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCircuitsClient) createOrUpdate(ctx context.Context, resourceGroupName string, circuitName string, parameters ExpressRouteCircuit, options *ExpressRouteCircuitsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, circuitName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *ExpressRouteCircuitsClient) createOrUpdateCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - options - ExpressRouteCircuitsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteCircuitsClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *ExpressRouteCircuitsClient) BeginDelete(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCircuitsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCircuitsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCircuitsClient) deleteOperation(ctx context.Context, resourceGroupName string, circuitName string, options *ExpressRouteCircuitsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, circuitName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *ExpressRouteCircuitsClient) deleteCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,24 +205,31 @@ func (client *ExpressRouteCircuitsClient) deleteCreateRequest(ctx context.Contex
 // Get - Gets information about the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of express route circuit.
 //   - options - ExpressRouteCircuitsClientGetOptions contains the optional parameters for the ExpressRouteCircuitsClient.Get
 //     method.
 func (client *ExpressRouteCircuitsClient) Get(ctx context.Context, resourceGroupName string, circuitName string, options *ExpressRouteCircuitsClientGetOptions) (ExpressRouteCircuitsClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, circuitName, options)
 	if err != nil {
 		return ExpressRouteCircuitsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteCircuitsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteCircuitsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteCircuitsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -223,7 +252,7 @@ func (client *ExpressRouteCircuitsClient) getCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -241,25 +270,32 @@ func (client *ExpressRouteCircuitsClient) getHandleResponse(resp *http.Response)
 // GetPeeringStats - Gets all stats from an express route circuit in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - peeringName - The name of the peering.
 //   - options - ExpressRouteCircuitsClientGetPeeringStatsOptions contains the optional parameters for the ExpressRouteCircuitsClient.GetPeeringStats
 //     method.
 func (client *ExpressRouteCircuitsClient) GetPeeringStats(ctx context.Context, resourceGroupName string, circuitName string, peeringName string, options *ExpressRouteCircuitsClientGetPeeringStatsOptions) (ExpressRouteCircuitsClientGetPeeringStatsResponse, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitsClient.GetPeeringStats"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getPeeringStatsCreateRequest(ctx, resourceGroupName, circuitName, peeringName, options)
 	if err != nil {
 		return ExpressRouteCircuitsClientGetPeeringStatsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteCircuitsClientGetPeeringStatsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteCircuitsClientGetPeeringStatsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteCircuitsClientGetPeeringStatsResponse{}, err
 	}
-	return client.getPeeringStatsHandleResponse(resp)
+	resp, err := client.getPeeringStatsHandleResponse(httpResp)
+	return resp, err
 }
 
 // getPeeringStatsCreateRequest creates the GetPeeringStats request.
@@ -286,7 +322,7 @@ func (client *ExpressRouteCircuitsClient) getPeeringStatsCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -304,24 +340,31 @@ func (client *ExpressRouteCircuitsClient) getPeeringStatsHandleResponse(resp *ht
 // GetStats - Gets all the stats from an express route circuit in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - options - ExpressRouteCircuitsClientGetStatsOptions contains the optional parameters for the ExpressRouteCircuitsClient.GetStats
 //     method.
 func (client *ExpressRouteCircuitsClient) GetStats(ctx context.Context, resourceGroupName string, circuitName string, options *ExpressRouteCircuitsClientGetStatsOptions) (ExpressRouteCircuitsClientGetStatsResponse, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitsClient.GetStats"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getStatsCreateRequest(ctx, resourceGroupName, circuitName, options)
 	if err != nil {
 		return ExpressRouteCircuitsClientGetStatsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteCircuitsClientGetStatsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteCircuitsClientGetStatsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteCircuitsClientGetStatsResponse{}, err
 	}
-	return client.getStatsHandleResponse(resp)
+	resp, err := client.getStatsHandleResponse(httpResp)
+	return resp, err
 }
 
 // getStatsCreateRequest creates the GetStats request.
@@ -344,7 +387,7 @@ func (client *ExpressRouteCircuitsClient) getStatsCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -361,7 +404,7 @@ func (client *ExpressRouteCircuitsClient) getStatsHandleResponse(resp *http.Resp
 
 // NewListPager - Gets all the express route circuits in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - ExpressRouteCircuitsClientListOptions contains the optional parameters for the ExpressRouteCircuitsClient.NewListPager
 //     method.
@@ -371,25 +414,20 @@ func (client *ExpressRouteCircuitsClient) NewListPager(resourceGroupName string,
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRouteCircuitsClientListResponse) (ExpressRouteCircuitsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRouteCircuitsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return ExpressRouteCircuitsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ExpressRouteCircuitsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRouteCircuitsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -409,7 +447,7 @@ func (client *ExpressRouteCircuitsClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -426,7 +464,7 @@ func (client *ExpressRouteCircuitsClient) listHandleResponse(resp *http.Response
 
 // NewListAllPager - Gets all the express route circuits in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ExpressRouteCircuitsClientListAllOptions contains the optional parameters for the ExpressRouteCircuitsClient.NewListAllPager
 //     method.
 func (client *ExpressRouteCircuitsClient) NewListAllPager(options *ExpressRouteCircuitsClientListAllOptions) *runtime.Pager[ExpressRouteCircuitsClientListAllResponse] {
@@ -435,25 +473,20 @@ func (client *ExpressRouteCircuitsClient) NewListAllPager(options *ExpressRouteC
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRouteCircuitsClientListAllResponse) (ExpressRouteCircuitsClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRouteCircuitsClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ExpressRouteCircuitsClientListAllResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ExpressRouteCircuitsClientListAllResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRouteCircuitsClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -469,7 +502,7 @@ func (client *ExpressRouteCircuitsClient) listAllCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -487,7 +520,7 @@ func (client *ExpressRouteCircuitsClient) listAllHandleResponse(resp *http.Respo
 // BeginListArpTable - Gets the currently advertised ARP table associated with the express route circuit in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - peeringName - The name of the peering.
@@ -500,31 +533,41 @@ func (client *ExpressRouteCircuitsClient) BeginListArpTable(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitsClientListArpTableResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitsClientListArpTableResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCircuitsClientListArpTableResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCircuitsClientListArpTableResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // ListArpTable - Gets the currently advertised ARP table associated with the express route circuit in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCircuitsClient) listArpTable(ctx context.Context, resourceGroupName string, circuitName string, peeringName string, devicePath string, options *ExpressRouteCircuitsClientBeginListArpTableOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitsClient.BeginListArpTable"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listArpTableCreateRequest(ctx, resourceGroupName, circuitName, peeringName, devicePath, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listArpTableCreateRequest creates the ListArpTable request.
@@ -555,7 +598,7 @@ func (client *ExpressRouteCircuitsClient) listArpTableCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -565,7 +608,7 @@ func (client *ExpressRouteCircuitsClient) listArpTableCreateRequest(ctx context.
 // group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - peeringName - The name of the peering.
@@ -578,31 +621,41 @@ func (client *ExpressRouteCircuitsClient) BeginListRoutesTable(ctx context.Conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitsClientListRoutesTableResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitsClientListRoutesTableResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCircuitsClientListRoutesTableResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCircuitsClientListRoutesTableResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // ListRoutesTable - Gets the currently advertised routes table associated with the express route circuit in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCircuitsClient) listRoutesTable(ctx context.Context, resourceGroupName string, circuitName string, peeringName string, devicePath string, options *ExpressRouteCircuitsClientBeginListRoutesTableOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitsClient.BeginListRoutesTable"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listRoutesTableCreateRequest(ctx, resourceGroupName, circuitName, peeringName, devicePath, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listRoutesTableCreateRequest creates the ListRoutesTable request.
@@ -633,7 +686,7 @@ func (client *ExpressRouteCircuitsClient) listRoutesTableCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -643,7 +696,7 @@ func (client *ExpressRouteCircuitsClient) listRoutesTableCreateRequest(ctx conte
 // in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - peeringName - The name of the peering.
@@ -656,11 +709,15 @@ func (client *ExpressRouteCircuitsClient) BeginListRoutesTableSummary(ctx contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitsClientListRoutesTableSummaryResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCircuitsClientListRoutesTableSummaryResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCircuitsClientListRoutesTableSummaryResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCircuitsClientListRoutesTableSummaryResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -668,20 +725,26 @@ func (client *ExpressRouteCircuitsClient) BeginListRoutesTableSummary(ctx contex
 // a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCircuitsClient) listRoutesTableSummary(ctx context.Context, resourceGroupName string, circuitName string, peeringName string, devicePath string, options *ExpressRouteCircuitsClientBeginListRoutesTableSummaryOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitsClient.BeginListRoutesTableSummary"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listRoutesTableSummaryCreateRequest(ctx, resourceGroupName, circuitName, peeringName, devicePath, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listRoutesTableSummaryCreateRequest creates the ListRoutesTableSummary request.
@@ -712,7 +775,7 @@ func (client *ExpressRouteCircuitsClient) listRoutesTableSummaryCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -721,25 +784,32 @@ func (client *ExpressRouteCircuitsClient) listRoutesTableSummaryCreateRequest(ct
 // UpdateTags - Updates an express route circuit tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the circuit.
 //   - parameters - Parameters supplied to update express route circuit tags.
 //   - options - ExpressRouteCircuitsClientUpdateTagsOptions contains the optional parameters for the ExpressRouteCircuitsClient.UpdateTags
 //     method.
 func (client *ExpressRouteCircuitsClient) UpdateTags(ctx context.Context, resourceGroupName string, circuitName string, parameters TagsObject, options *ExpressRouteCircuitsClientUpdateTagsOptions) (ExpressRouteCircuitsClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "ExpressRouteCircuitsClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, circuitName, parameters, options)
 	if err != nil {
 		return ExpressRouteCircuitsClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteCircuitsClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteCircuitsClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteCircuitsClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -762,10 +832,13 @@ func (client *ExpressRouteCircuitsClient) updateTagsCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteconnections_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteconnections_client.go
index a206732f280..40d45409053 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRouteConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRouteConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRouteConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRouteConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewExpressRouteConnectionsClient(subscriptionID string, credential azcore.T
 // BeginCreateOrUpdate - Creates a connection between an ExpressRoute gateway and an ExpressRoute circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRouteGatewayName - The name of the ExpressRoute gateway.
 //   - connectionName - The name of the connection subresource.
@@ -61,31 +60,41 @@ func (client *ExpressRouteConnectionsClient) BeginCreateOrUpdate(ctx context.Con
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteConnectionsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteConnectionsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteConnectionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteConnectionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a connection between an ExpressRoute gateway and an ExpressRoute circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteConnectionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, expressRouteGatewayName string, connectionName string, putExpressRouteConnectionParameters ExpressRouteConnection, options *ExpressRouteConnectionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteConnectionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, expressRouteGatewayName, connectionName, putExpressRouteConnectionParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *ExpressRouteConnectionsClient) createOrUpdateCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, putExpressRouteConnectionParameters)
+	if err := runtime.MarshalAsJSON(req, putExpressRouteConnectionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a connection to a ExpressRoute circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRouteGatewayName - The name of the ExpressRoute gateway.
 //   - connectionName - The name of the connection subresource.
@@ -133,31 +145,41 @@ func (client *ExpressRouteConnectionsClient) BeginDelete(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteConnectionsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteConnectionsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteConnectionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteConnectionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a connection to a ExpressRoute circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteConnectionsClient) deleteOperation(ctx context.Context, resourceGroupName string, expressRouteGatewayName string, connectionName string, options *ExpressRouteConnectionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteConnectionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, expressRouteGatewayName, connectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *ExpressRouteConnectionsClient) deleteCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *ExpressRouteConnectionsClient) deleteCreateRequest(ctx context.Con
 // Get - Gets the specified ExpressRouteConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRouteGatewayName - The name of the ExpressRoute gateway.
 //   - connectionName - The name of the ExpressRoute connection.
 //   - options - ExpressRouteConnectionsClientGetOptions contains the optional parameters for the ExpressRouteConnectionsClient.Get
 //     method.
 func (client *ExpressRouteConnectionsClient) Get(ctx context.Context, resourceGroupName string, expressRouteGatewayName string, connectionName string, options *ExpressRouteConnectionsClientGetOptions) (ExpressRouteConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRouteConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, expressRouteGatewayName, connectionName, options)
 	if err != nil {
 		return ExpressRouteConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *ExpressRouteConnectionsClient) getCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -256,24 +285,31 @@ func (client *ExpressRouteConnectionsClient) getHandleResponse(resp *http.Respon
 // List - Lists ExpressRouteConnections.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRouteGatewayName - The name of the ExpressRoute gateway.
 //   - options - ExpressRouteConnectionsClientListOptions contains the optional parameters for the ExpressRouteConnectionsClient.List
 //     method.
 func (client *ExpressRouteConnectionsClient) List(ctx context.Context, resourceGroupName string, expressRouteGatewayName string, options *ExpressRouteConnectionsClientListOptions) (ExpressRouteConnectionsClientListResponse, error) {
+	var err error
+	const operationName = "ExpressRouteConnectionsClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, resourceGroupName, expressRouteGatewayName, options)
 	if err != nil {
 		return ExpressRouteConnectionsClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteConnectionsClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteConnectionsClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteConnectionsClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -296,7 +332,7 @@ func (client *ExpressRouteConnectionsClient) listCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecrossconnectionpeerings_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecrossconnectionpeerings_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecrossconnectionpeerings_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecrossconnectionpeerings_client.go
index 62638a0a2ef..b3eb6901b2f 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecrossconnectionpeerings_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecrossconnectionpeerings_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRouteCrossConnectionPeeringsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRouteCrossConnectionPeeringsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRouteCrossConnectionPeeringsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRouteCrossConnectionPeeringsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewExpressRouteCrossConnectionPeeringsClient(subscriptionID string, credent
 // BeginCreateOrUpdate - Creates or updates a peering in the specified ExpressRouteCrossConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - crossConnectionName - The name of the ExpressRouteCrossConnection.
 //   - peeringName - The name of the peering.
@@ -61,31 +60,41 @@ func (client *ExpressRouteCrossConnectionPeeringsClient) BeginCreateOrUpdate(ctx
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionPeeringsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionPeeringsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCrossConnectionPeeringsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCrossConnectionPeeringsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a peering in the specified ExpressRouteCrossConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCrossConnectionPeeringsClient) createOrUpdate(ctx context.Context, resourceGroupName string, crossConnectionName string, peeringName string, peeringParameters ExpressRouteCrossConnectionPeering, options *ExpressRouteCrossConnectionPeeringsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCrossConnectionPeeringsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, crossConnectionName, peeringName, peeringParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *ExpressRouteCrossConnectionPeeringsClient) createOrUpdateCreateReq
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, peeringParameters)
+	if err := runtime.MarshalAsJSON(req, peeringParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified peering from the ExpressRouteCrossConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - crossConnectionName - The name of the ExpressRouteCrossConnection.
 //   - peeringName - The name of the peering.
@@ -133,31 +145,41 @@ func (client *ExpressRouteCrossConnectionPeeringsClient) BeginDelete(ctx context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionPeeringsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionPeeringsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCrossConnectionPeeringsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCrossConnectionPeeringsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified peering from the ExpressRouteCrossConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCrossConnectionPeeringsClient) deleteOperation(ctx context.Context, resourceGroupName string, crossConnectionName string, peeringName string, options *ExpressRouteCrossConnectionPeeringsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCrossConnectionPeeringsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, crossConnectionName, peeringName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *ExpressRouteCrossConnectionPeeringsClient) deleteCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *ExpressRouteCrossConnectionPeeringsClient) deleteCreateRequest(ctx
 // Get - Gets the specified peering for the ExpressRouteCrossConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - crossConnectionName - The name of the ExpressRouteCrossConnection.
 //   - peeringName - The name of the peering.
 //   - options - ExpressRouteCrossConnectionPeeringsClientGetOptions contains the optional parameters for the ExpressRouteCrossConnectionPeeringsClient.Get
 //     method.
 func (client *ExpressRouteCrossConnectionPeeringsClient) Get(ctx context.Context, resourceGroupName string, crossConnectionName string, peeringName string, options *ExpressRouteCrossConnectionPeeringsClientGetOptions) (ExpressRouteCrossConnectionPeeringsClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRouteCrossConnectionPeeringsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, crossConnectionName, peeringName, options)
 	if err != nil {
 		return ExpressRouteCrossConnectionPeeringsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteCrossConnectionPeeringsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteCrossConnectionPeeringsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteCrossConnectionPeeringsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *ExpressRouteCrossConnectionPeeringsClient) getCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *ExpressRouteCrossConnectionPeeringsClient) getHandleResponse(resp
 
 // NewListPager - Gets all peerings in a specified ExpressRouteCrossConnection.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - crossConnectionName - The name of the ExpressRouteCrossConnection.
 //   - options - ExpressRouteCrossConnectionPeeringsClientListOptions contains the optional parameters for the ExpressRouteCrossConnectionPeeringsClient.NewListPager
@@ -266,25 +295,20 @@ func (client *ExpressRouteCrossConnectionPeeringsClient) NewListPager(resourceGr
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRouteCrossConnectionPeeringsClientListResponse) (ExpressRouteCrossConnectionPeeringsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, crossConnectionName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ExpressRouteCrossConnectionPeeringsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRouteCrossConnectionPeeringsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, crossConnectionName, options)
+			}, nil)
 			if err != nil {
 				return ExpressRouteCrossConnectionPeeringsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRouteCrossConnectionPeeringsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *ExpressRouteCrossConnectionPeeringsClient) listCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecrossconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecrossconnections_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecrossconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecrossconnections_client.go
index 41eef028861..0419a55559f 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutecrossconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutecrossconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRouteCrossConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRouteCrossConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRouteCrossConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRouteCrossConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewExpressRouteCrossConnectionsClient(subscriptionID string, credential azc
 // BeginCreateOrUpdate - Update the specified ExpressRouteCrossConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - crossConnectionName - The name of the ExpressRouteCrossConnection.
 //   - parameters - Parameters supplied to the update express route crossConnection operation.
@@ -60,31 +59,41 @@ func (client *ExpressRouteCrossConnectionsClient) BeginCreateOrUpdate(ctx contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCrossConnectionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCrossConnectionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Update the specified ExpressRouteCrossConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCrossConnectionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, crossConnectionName string, parameters ExpressRouteCrossConnection, options *ExpressRouteCrossConnectionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCrossConnectionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, crossConnectionName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,33 +116,43 @@ func (client *ExpressRouteCrossConnectionsClient) createOrUpdateCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // Get - Gets details about the specified ExpressRouteCrossConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group (peering location of the circuit).
 //   - crossConnectionName - The name of the ExpressRouteCrossConnection (service key of the circuit).
 //   - options - ExpressRouteCrossConnectionsClientGetOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.Get
 //     method.
 func (client *ExpressRouteCrossConnectionsClient) Get(ctx context.Context, resourceGroupName string, crossConnectionName string, options *ExpressRouteCrossConnectionsClientGetOptions) (ExpressRouteCrossConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRouteCrossConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, crossConnectionName, options)
 	if err != nil {
 		return ExpressRouteCrossConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteCrossConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteCrossConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteCrossConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -156,7 +175,7 @@ func (client *ExpressRouteCrossConnectionsClient) getCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -173,7 +192,7 @@ func (client *ExpressRouteCrossConnectionsClient) getHandleResponse(resp *http.R
 
 // NewListPager - Retrieves all the ExpressRouteCrossConnections in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ExpressRouteCrossConnectionsClientListOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.NewListPager
 //     method.
 func (client *ExpressRouteCrossConnectionsClient) NewListPager(options *ExpressRouteCrossConnectionsClientListOptions) *runtime.Pager[ExpressRouteCrossConnectionsClientListResponse] {
@@ -182,25 +201,20 @@ func (client *ExpressRouteCrossConnectionsClient) NewListPager(options *ExpressR
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRouteCrossConnectionsClientListResponse) (ExpressRouteCrossConnectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRouteCrossConnectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ExpressRouteCrossConnectionsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ExpressRouteCrossConnectionsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRouteCrossConnectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -216,7 +230,7 @@ func (client *ExpressRouteCrossConnectionsClient) listCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -235,7 +249,7 @@ func (client *ExpressRouteCrossConnectionsClient) listHandleResponse(resp *http.
 // group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - crossConnectionName - The name of the ExpressRouteCrossConnection.
 //   - peeringName - The name of the peering.
@@ -248,11 +262,15 @@ func (client *ExpressRouteCrossConnectionsClient) BeginListArpTable(ctx context.
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionsClientListArpTableResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionsClientListArpTableResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCrossConnectionsClientListArpTableResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCrossConnectionsClientListArpTableResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -260,20 +278,26 @@ func (client *ExpressRouteCrossConnectionsClient) BeginListArpTable(ctx context.
 // group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCrossConnectionsClient) listArpTable(ctx context.Context, resourceGroupName string, crossConnectionName string, peeringName string, devicePath string, options *ExpressRouteCrossConnectionsClientBeginListArpTableOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCrossConnectionsClient.BeginListArpTable"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listArpTableCreateRequest(ctx, resourceGroupName, crossConnectionName, peeringName, devicePath, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listArpTableCreateRequest creates the ListArpTable request.
@@ -304,7 +328,7 @@ func (client *ExpressRouteCrossConnectionsClient) listArpTableCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -312,7 +336,7 @@ func (client *ExpressRouteCrossConnectionsClient) listArpTableCreateRequest(ctx
 
 // NewListByResourceGroupPager - Retrieves all the ExpressRouteCrossConnections in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - ExpressRouteCrossConnectionsClientListByResourceGroupOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.NewListByResourceGroupPager
 //     method.
@@ -322,25 +346,20 @@ func (client *ExpressRouteCrossConnectionsClient) NewListByResourceGroupPager(re
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRouteCrossConnectionsClientListByResourceGroupResponse) (ExpressRouteCrossConnectionsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRouteCrossConnectionsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return ExpressRouteCrossConnectionsClientListByResourceGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ExpressRouteCrossConnectionsClientListByResourceGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRouteCrossConnectionsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -360,7 +379,7 @@ func (client *ExpressRouteCrossConnectionsClient) listByResourceGroupCreateReque
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -379,7 +398,7 @@ func (client *ExpressRouteCrossConnectionsClient) listByResourceGroupHandleRespo
 // a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - crossConnectionName - The name of the ExpressRouteCrossConnection.
 //   - peeringName - The name of the peering.
@@ -392,11 +411,15 @@ func (client *ExpressRouteCrossConnectionsClient) BeginListRoutesTable(ctx conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionsClientListRoutesTableResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionsClientListRoutesTableResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCrossConnectionsClientListRoutesTableResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCrossConnectionsClientListRoutesTableResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -404,20 +427,26 @@ func (client *ExpressRouteCrossConnectionsClient) BeginListRoutesTable(ctx conte
 // group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCrossConnectionsClient) listRoutesTable(ctx context.Context, resourceGroupName string, crossConnectionName string, peeringName string, devicePath string, options *ExpressRouteCrossConnectionsClientBeginListRoutesTableOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCrossConnectionsClient.BeginListRoutesTable"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listRoutesTableCreateRequest(ctx, resourceGroupName, crossConnectionName, peeringName, devicePath, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listRoutesTableCreateRequest creates the ListRoutesTable request.
@@ -448,7 +477,7 @@ func (client *ExpressRouteCrossConnectionsClient) listRoutesTableCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -458,7 +487,7 @@ func (client *ExpressRouteCrossConnectionsClient) listRoutesTableCreateRequest(c
 // group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - crossConnectionName - The name of the ExpressRouteCrossConnection.
 //   - peeringName - The name of the peering.
@@ -471,11 +500,15 @@ func (client *ExpressRouteCrossConnectionsClient) BeginListRoutesTableSummary(ct
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionsClientListRoutesTableSummaryResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteCrossConnectionsClientListRoutesTableSummaryResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteCrossConnectionsClientListRoutesTableSummaryResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteCrossConnectionsClientListRoutesTableSummaryResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -483,20 +516,26 @@ func (client *ExpressRouteCrossConnectionsClient) BeginListRoutesTableSummary(ct
 // group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteCrossConnectionsClient) listRoutesTableSummary(ctx context.Context, resourceGroupName string, crossConnectionName string, peeringName string, devicePath string, options *ExpressRouteCrossConnectionsClientBeginListRoutesTableSummaryOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteCrossConnectionsClient.BeginListRoutesTableSummary"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listRoutesTableSummaryCreateRequest(ctx, resourceGroupName, crossConnectionName, peeringName, devicePath, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listRoutesTableSummaryCreateRequest creates the ListRoutesTableSummary request.
@@ -527,7 +566,7 @@ func (client *ExpressRouteCrossConnectionsClient) listRoutesTableSummaryCreateRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -536,25 +575,32 @@ func (client *ExpressRouteCrossConnectionsClient) listRoutesTableSummaryCreateRe
 // UpdateTags - Updates an express route cross connection tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - crossConnectionName - The name of the cross connection.
 //   - crossConnectionParameters - Parameters supplied to update express route cross connection tags.
 //   - options - ExpressRouteCrossConnectionsClientUpdateTagsOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.UpdateTags
 //     method.
 func (client *ExpressRouteCrossConnectionsClient) UpdateTags(ctx context.Context, resourceGroupName string, crossConnectionName string, crossConnectionParameters TagsObject, options *ExpressRouteCrossConnectionsClientUpdateTagsOptions) (ExpressRouteCrossConnectionsClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "ExpressRouteCrossConnectionsClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, crossConnectionName, crossConnectionParameters, options)
 	if err != nil {
 		return ExpressRouteCrossConnectionsClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteCrossConnectionsClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteCrossConnectionsClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteCrossConnectionsClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -577,10 +623,13 @@ func (client *ExpressRouteCrossConnectionsClient) updateTagsCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, crossConnectionParameters)
+	if err := runtime.MarshalAsJSON(req, crossConnectionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutegateways_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutegateways_client.go
similarity index 77%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutegateways_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutegateways_client.go
index 923a8319717..e2b0b5e7a31 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutegateways_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutegateways_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRouteGatewaysClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRouteGatewaysClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRouteGatewaysClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRouteGatewaysClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewExpressRouteGatewaysClient(subscriptionID string, credential azcore.Toke
 // BeginCreateOrUpdate - Creates or updates a ExpressRoute gateway in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRouteGatewayName - The name of the ExpressRoute gateway.
 //   - putExpressRouteGatewayParameters - Parameters required in an ExpressRoute gateway PUT operation.
@@ -60,31 +59,41 @@ func (client *ExpressRouteGatewaysClient) BeginCreateOrUpdate(ctx context.Contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteGatewaysClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteGatewaysClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteGatewaysClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteGatewaysClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a ExpressRoute gateway in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteGatewaysClient) createOrUpdate(ctx context.Context, resourceGroupName string, expressRouteGatewayName string, putExpressRouteGatewayParameters ExpressRouteGateway, options *ExpressRouteGatewaysClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteGatewaysClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, expressRouteGatewayName, putExpressRouteGatewayParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,17 +116,20 @@ func (client *ExpressRouteGatewaysClient) createOrUpdateCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, putExpressRouteGatewayParameters)
+	if err := runtime.MarshalAsJSON(req, putExpressRouteGatewayParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified ExpressRoute gateway in a resource group. An ExpressRoute gateway resource can only
 // be deleted when there are no connection subresources.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRouteGatewayName - The name of the ExpressRoute gateway.
 //   - options - ExpressRouteGatewaysClientBeginDeleteOptions contains the optional parameters for the ExpressRouteGatewaysClient.BeginDelete
@@ -128,11 +140,15 @@ func (client *ExpressRouteGatewaysClient) BeginDelete(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteGatewaysClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteGatewaysClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteGatewaysClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteGatewaysClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -140,20 +156,26 @@ func (client *ExpressRouteGatewaysClient) BeginDelete(ctx context.Context, resou
 // when there are no connection subresources.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteGatewaysClient) deleteOperation(ctx context.Context, resourceGroupName string, expressRouteGatewayName string, options *ExpressRouteGatewaysClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteGatewaysClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, expressRouteGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -176,7 +198,7 @@ func (client *ExpressRouteGatewaysClient) deleteCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -185,24 +207,31 @@ func (client *ExpressRouteGatewaysClient) deleteCreateRequest(ctx context.Contex
 // Get - Fetches the details of a ExpressRoute gateway in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRouteGatewayName - The name of the ExpressRoute gateway.
 //   - options - ExpressRouteGatewaysClientGetOptions contains the optional parameters for the ExpressRouteGatewaysClient.Get
 //     method.
 func (client *ExpressRouteGatewaysClient) Get(ctx context.Context, resourceGroupName string, expressRouteGatewayName string, options *ExpressRouteGatewaysClientGetOptions) (ExpressRouteGatewaysClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRouteGatewaysClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, expressRouteGatewayName, options)
 	if err != nil {
 		return ExpressRouteGatewaysClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteGatewaysClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteGatewaysClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteGatewaysClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -225,7 +254,7 @@ func (client *ExpressRouteGatewaysClient) getCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -243,23 +272,30 @@ func (client *ExpressRouteGatewaysClient) getHandleResponse(resp *http.Response)
 // ListByResourceGroup - Lists ExpressRoute gateways in a given resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - ExpressRouteGatewaysClientListByResourceGroupOptions contains the optional parameters for the ExpressRouteGatewaysClient.ListByResourceGroup
 //     method.
 func (client *ExpressRouteGatewaysClient) ListByResourceGroup(ctx context.Context, resourceGroupName string, options *ExpressRouteGatewaysClientListByResourceGroupOptions) (ExpressRouteGatewaysClientListByResourceGroupResponse, error) {
+	var err error
+	const operationName = "ExpressRouteGatewaysClient.ListByResourceGroup"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
 	if err != nil {
 		return ExpressRouteGatewaysClientListByResourceGroupResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteGatewaysClientListByResourceGroupResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteGatewaysClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteGatewaysClientListByResourceGroupResponse{}, err
 	}
-	return client.listByResourceGroupHandleResponse(resp)
+	resp, err := client.listByResourceGroupHandleResponse(httpResp)
+	return resp, err
 }
 
 // listByResourceGroupCreateRequest creates the ListByResourceGroup request.
@@ -278,7 +314,7 @@ func (client *ExpressRouteGatewaysClient) listByResourceGroupCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -296,22 +332,29 @@ func (client *ExpressRouteGatewaysClient) listByResourceGroupHandleResponse(resp
 // ListBySubscription - Lists ExpressRoute gateways under a given subscription.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ExpressRouteGatewaysClientListBySubscriptionOptions contains the optional parameters for the ExpressRouteGatewaysClient.ListBySubscription
 //     method.
 func (client *ExpressRouteGatewaysClient) ListBySubscription(ctx context.Context, options *ExpressRouteGatewaysClientListBySubscriptionOptions) (ExpressRouteGatewaysClientListBySubscriptionResponse, error) {
+	var err error
+	const operationName = "ExpressRouteGatewaysClient.ListBySubscription"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listBySubscriptionCreateRequest(ctx, options)
 	if err != nil {
 		return ExpressRouteGatewaysClientListBySubscriptionResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteGatewaysClientListBySubscriptionResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteGatewaysClientListBySubscriptionResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteGatewaysClientListBySubscriptionResponse{}, err
 	}
-	return client.listBySubscriptionHandleResponse(resp)
+	resp, err := client.listBySubscriptionHandleResponse(httpResp)
+	return resp, err
 }
 
 // listBySubscriptionCreateRequest creates the ListBySubscription request.
@@ -326,7 +369,7 @@ func (client *ExpressRouteGatewaysClient) listBySubscriptionCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -344,7 +387,7 @@ func (client *ExpressRouteGatewaysClient) listBySubscriptionHandleResponse(resp
 // BeginUpdateTags - Updates express route gateway tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the ExpressRouteGateway.
 //   - expressRouteGatewayName - The name of the gateway.
 //   - expressRouteGatewayParameters - Parameters supplied to update a virtual wan express route gateway tags.
@@ -356,31 +399,41 @@ func (client *ExpressRouteGatewaysClient) BeginUpdateTags(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteGatewaysClientUpdateTagsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRouteGatewaysClientUpdateTagsResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRouteGatewaysClientUpdateTagsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRouteGatewaysClientUpdateTagsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // UpdateTags - Updates express route gateway tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRouteGatewaysClient) updateTags(ctx context.Context, resourceGroupName string, expressRouteGatewayName string, expressRouteGatewayParameters TagsObject, options *ExpressRouteGatewaysClientBeginUpdateTagsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRouteGatewaysClient.BeginUpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, expressRouteGatewayName, expressRouteGatewayParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -403,8 +456,11 @@ func (client *ExpressRouteGatewaysClient) updateTagsCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, expressRouteGatewayParameters)
+	if err := runtime.MarshalAsJSON(req, expressRouteGatewayParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutelinks_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutelinks_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutelinks_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutelinks_client.go
index e63cef5137c..99ea0d4b624 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressroutelinks_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressroutelinks_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRouteLinksClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRouteLinksClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRouteLinksClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRouteLinksClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,24 +47,31 @@ func NewExpressRouteLinksClient(subscriptionID string, credential azcore.TokenCr
 // Get - Retrieves the specified ExpressRouteLink resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRoutePortName - The name of the ExpressRoutePort resource.
 //   - linkName - The name of the ExpressRouteLink resource.
 //   - options - ExpressRouteLinksClientGetOptions contains the optional parameters for the ExpressRouteLinksClient.Get method.
 func (client *ExpressRouteLinksClient) Get(ctx context.Context, resourceGroupName string, expressRoutePortName string, linkName string, options *ExpressRouteLinksClientGetOptions) (ExpressRouteLinksClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRouteLinksClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, expressRoutePortName, linkName, options)
 	if err != nil {
 		return ExpressRouteLinksClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteLinksClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteLinksClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteLinksClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -92,7 +98,7 @@ func (client *ExpressRouteLinksClient) getCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -109,7 +115,7 @@ func (client *ExpressRouteLinksClient) getHandleResponse(resp *http.Response) (E
 
 // NewListPager - Retrieve the ExpressRouteLink sub-resources of the specified ExpressRoutePort resource.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRoutePortName - The name of the ExpressRoutePort resource.
 //   - options - ExpressRouteLinksClientListOptions contains the optional parameters for the ExpressRouteLinksClient.NewListPager
@@ -120,25 +126,20 @@ func (client *ExpressRouteLinksClient) NewListPager(resourceGroupName string, ex
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRouteLinksClientListResponse) (ExpressRouteLinksClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, expressRoutePortName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRouteLinksClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, expressRoutePortName, options)
+			}, nil)
 			if err != nil {
 				return ExpressRouteLinksClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ExpressRouteLinksClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRouteLinksClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -162,7 +163,7 @@ func (client *ExpressRouteLinksClient) listCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteportauthorizations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteportauthorizations_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteportauthorizations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteportauthorizations_client.go
index 6d7705a4b55..ec6e1737b9c 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteportauthorizations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteportauthorizations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRoutePortAuthorizationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRoutePortAuthorizationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRoutePortAuthorizationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRoutePortAuthorizationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewExpressRoutePortAuthorizationsClient(subscriptionID string, credential a
 // BeginCreateOrUpdate - Creates or updates an authorization in the specified express route port.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRoutePortName - The name of the express route port.
 //   - authorizationName - The name of the authorization.
@@ -61,31 +60,41 @@ func (client *ExpressRoutePortAuthorizationsClient) BeginCreateOrUpdate(ctx cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRoutePortAuthorizationsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRoutePortAuthorizationsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRoutePortAuthorizationsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRoutePortAuthorizationsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates an authorization in the specified express route port.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRoutePortAuthorizationsClient) createOrUpdate(ctx context.Context, resourceGroupName string, expressRoutePortName string, authorizationName string, authorizationParameters ExpressRoutePortAuthorization, options *ExpressRoutePortAuthorizationsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRoutePortAuthorizationsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, expressRoutePortName, authorizationName, authorizationParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *ExpressRoutePortAuthorizationsClient) createOrUpdateCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, authorizationParameters)
+	if err := runtime.MarshalAsJSON(req, authorizationParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified authorization from the specified express route port.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRoutePortName - The name of the express route port.
 //   - authorizationName - The name of the authorization.
@@ -133,31 +145,41 @@ func (client *ExpressRoutePortAuthorizationsClient) BeginDelete(ctx context.Cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRoutePortAuthorizationsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRoutePortAuthorizationsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRoutePortAuthorizationsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRoutePortAuthorizationsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified authorization from the specified express route port.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRoutePortAuthorizationsClient) deleteOperation(ctx context.Context, resourceGroupName string, expressRoutePortName string, authorizationName string, options *ExpressRoutePortAuthorizationsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRoutePortAuthorizationsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, expressRoutePortName, authorizationName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *ExpressRoutePortAuthorizationsClient) deleteCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *ExpressRoutePortAuthorizationsClient) deleteCreateRequest(ctx cont
 // Get - Gets the specified authorization from the specified express route port.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRoutePortName - The name of the express route port.
 //   - authorizationName - The name of the authorization.
 //   - options - ExpressRoutePortAuthorizationsClientGetOptions contains the optional parameters for the ExpressRoutePortAuthorizationsClient.Get
 //     method.
 func (client *ExpressRoutePortAuthorizationsClient) Get(ctx context.Context, resourceGroupName string, expressRoutePortName string, authorizationName string, options *ExpressRoutePortAuthorizationsClientGetOptions) (ExpressRoutePortAuthorizationsClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRoutePortAuthorizationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, expressRoutePortName, authorizationName, options)
 	if err != nil {
 		return ExpressRoutePortAuthorizationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRoutePortAuthorizationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRoutePortAuthorizationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRoutePortAuthorizationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *ExpressRoutePortAuthorizationsClient) getCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *ExpressRoutePortAuthorizationsClient) getHandleResponse(resp *http
 
 // NewListPager - Gets all authorizations in an express route port.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRoutePortName - The name of the express route port.
 //   - options - ExpressRoutePortAuthorizationsClientListOptions contains the optional parameters for the ExpressRoutePortAuthorizationsClient.NewListPager
@@ -266,25 +295,20 @@ func (client *ExpressRoutePortAuthorizationsClient) NewListPager(resourceGroupNa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRoutePortAuthorizationsClientListResponse) (ExpressRoutePortAuthorizationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, expressRoutePortName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ExpressRoutePortAuthorizationsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRoutePortAuthorizationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, expressRoutePortName, options)
+			}, nil)
 			if err != nil {
 				return ExpressRoutePortAuthorizationsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRoutePortAuthorizationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *ExpressRoutePortAuthorizationsClient) listCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteports_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteports_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteports_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteports_client.go
index 27656cf2ec0..4811abea7b3 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteports_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteports_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRoutePortsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRoutePortsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRoutePortsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRoutePortsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewExpressRoutePortsClient(subscriptionID string, credential azcore.TokenCr
 // BeginCreateOrUpdate - Creates or updates the specified ExpressRoutePort resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRoutePortName - The name of the ExpressRoutePort resource.
 //   - parameters - Parameters supplied to the create ExpressRoutePort operation.
@@ -60,31 +59,41 @@ func (client *ExpressRoutePortsClient) BeginCreateOrUpdate(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRoutePortsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRoutePortsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRoutePortsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRoutePortsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified ExpressRoutePort resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRoutePortsClient) createOrUpdate(ctx context.Context, resourceGroupName string, expressRoutePortName string, parameters ExpressRoutePort, options *ExpressRoutePortsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRoutePortsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, expressRoutePortName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *ExpressRoutePortsClient) createOrUpdateCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified ExpressRoutePort resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRoutePortName - The name of the ExpressRoutePort resource.
 //   - options - ExpressRoutePortsClientBeginDeleteOptions contains the optional parameters for the ExpressRoutePortsClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *ExpressRoutePortsClient) BeginDelete(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRoutePortsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ExpressRoutePortsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ExpressRoutePortsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ExpressRoutePortsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified ExpressRoutePort resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ExpressRoutePortsClient) deleteOperation(ctx context.Context, resourceGroupName string, expressRoutePortName string, options *ExpressRoutePortsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ExpressRoutePortsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, expressRoutePortName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *ExpressRoutePortsClient) deleteCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,25 +205,32 @@ func (client *ExpressRoutePortsClient) deleteCreateRequest(ctx context.Context,
 // GenerateLOA - Generate a letter of authorization for the requested ExpressRoutePort resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRoutePortName - The name of ExpressRoutePort.
 //   - request - Request parameters supplied to generate a letter of authorization.
 //   - options - ExpressRoutePortsClientGenerateLOAOptions contains the optional parameters for the ExpressRoutePortsClient.GenerateLOA
 //     method.
 func (client *ExpressRoutePortsClient) GenerateLOA(ctx context.Context, resourceGroupName string, expressRoutePortName string, request GenerateExpressRoutePortsLOARequest, options *ExpressRoutePortsClientGenerateLOAOptions) (ExpressRoutePortsClientGenerateLOAResponse, error) {
+	var err error
+	const operationName = "ExpressRoutePortsClient.GenerateLOA"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.generateLOACreateRequest(ctx, resourceGroupName, expressRoutePortName, request, options)
 	if err != nil {
 		return ExpressRoutePortsClientGenerateLOAResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRoutePortsClientGenerateLOAResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRoutePortsClientGenerateLOAResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRoutePortsClientGenerateLOAResponse{}, err
 	}
-	return client.generateLOAHandleResponse(resp)
+	resp, err := client.generateLOAHandleResponse(httpResp)
+	return resp, err
 }
 
 // generateLOACreateRequest creates the GenerateLOA request.
@@ -224,10 +253,13 @@ func (client *ExpressRoutePortsClient) generateLOACreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, request)
+	if err := runtime.MarshalAsJSON(req, request); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // generateLOAHandleResponse handles the GenerateLOA response.
@@ -242,23 +274,30 @@ func (client *ExpressRoutePortsClient) generateLOAHandleResponse(resp *http.Resp
 // Get - Retrieves the requested ExpressRoutePort resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRoutePortName - The name of ExpressRoutePort.
 //   - options - ExpressRoutePortsClientGetOptions contains the optional parameters for the ExpressRoutePortsClient.Get method.
 func (client *ExpressRoutePortsClient) Get(ctx context.Context, resourceGroupName string, expressRoutePortName string, options *ExpressRoutePortsClientGetOptions) (ExpressRoutePortsClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRoutePortsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, expressRoutePortName, options)
 	if err != nil {
 		return ExpressRoutePortsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRoutePortsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRoutePortsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRoutePortsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -281,7 +320,7 @@ func (client *ExpressRoutePortsClient) getCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -298,7 +337,7 @@ func (client *ExpressRoutePortsClient) getHandleResponse(resp *http.Response) (E
 
 // NewListPager - List all the ExpressRoutePort resources in the specified subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ExpressRoutePortsClientListOptions contains the optional parameters for the ExpressRoutePortsClient.NewListPager
 //     method.
 func (client *ExpressRoutePortsClient) NewListPager(options *ExpressRoutePortsClientListOptions) *runtime.Pager[ExpressRoutePortsClientListResponse] {
@@ -307,25 +346,20 @@ func (client *ExpressRoutePortsClient) NewListPager(options *ExpressRoutePortsCl
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRoutePortsClientListResponse) (ExpressRoutePortsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRoutePortsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ExpressRoutePortsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ExpressRoutePortsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRoutePortsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -341,7 +375,7 @@ func (client *ExpressRoutePortsClient) listCreateRequest(ctx context.Context, op
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -358,7 +392,7 @@ func (client *ExpressRoutePortsClient) listHandleResponse(resp *http.Response) (
 
 // NewListByResourceGroupPager - List all the ExpressRoutePort resources in the specified resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - ExpressRoutePortsClientListByResourceGroupOptions contains the optional parameters for the ExpressRoutePortsClient.NewListByResourceGroupPager
 //     method.
@@ -368,25 +402,20 @@ func (client *ExpressRoutePortsClient) NewListByResourceGroupPager(resourceGroup
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRoutePortsClientListByResourceGroupResponse) (ExpressRoutePortsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ExpressRoutePortsClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRoutePortsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return ExpressRoutePortsClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRoutePortsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -406,7 +435,7 @@ func (client *ExpressRoutePortsClient) listByResourceGroupCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -424,25 +453,32 @@ func (client *ExpressRoutePortsClient) listByResourceGroupHandleResponse(resp *h
 // UpdateTags - Update ExpressRoutePort tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - expressRoutePortName - The name of the ExpressRoutePort resource.
 //   - parameters - Parameters supplied to update ExpressRoutePort resource tags.
 //   - options - ExpressRoutePortsClientUpdateTagsOptions contains the optional parameters for the ExpressRoutePortsClient.UpdateTags
 //     method.
 func (client *ExpressRoutePortsClient) UpdateTags(ctx context.Context, resourceGroupName string, expressRoutePortName string, parameters TagsObject, options *ExpressRoutePortsClientUpdateTagsOptions) (ExpressRoutePortsClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "ExpressRoutePortsClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, expressRoutePortName, parameters, options)
 	if err != nil {
 		return ExpressRoutePortsClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRoutePortsClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRoutePortsClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRoutePortsClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -465,10 +501,13 @@ func (client *ExpressRoutePortsClient) updateTagsCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteportslocations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteportslocations_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteportslocations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteportslocations_client.go
index 5ffb3af9ca8..60221bb4a8f 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteportslocations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteportslocations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRoutePortsLocationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRoutePortsLocationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRoutePortsLocationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRoutePortsLocationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,23 +48,30 @@ func NewExpressRoutePortsLocationsClient(subscriptionID string, credential azcor
 // peering location.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - locationName - Name of the requested ExpressRoutePort peering location.
 //   - options - ExpressRoutePortsLocationsClientGetOptions contains the optional parameters for the ExpressRoutePortsLocationsClient.Get
 //     method.
 func (client *ExpressRoutePortsLocationsClient) Get(ctx context.Context, locationName string, options *ExpressRoutePortsLocationsClientGetOptions) (ExpressRoutePortsLocationsClientGetResponse, error) {
+	var err error
+	const operationName = "ExpressRoutePortsLocationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, locationName, options)
 	if err != nil {
 		return ExpressRoutePortsLocationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRoutePortsLocationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRoutePortsLocationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRoutePortsLocationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -84,7 +90,7 @@ func (client *ExpressRoutePortsLocationsClient) getCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -102,7 +108,7 @@ func (client *ExpressRoutePortsLocationsClient) getHandleResponse(resp *http.Res
 // NewListPager - Retrieves all ExpressRoutePort peering locations. Does not return available bandwidths for each location.
 // Available bandwidths can only be obtained when retrieving a specific peering location.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ExpressRoutePortsLocationsClientListOptions contains the optional parameters for the ExpressRoutePortsLocationsClient.NewListPager
 //     method.
 func (client *ExpressRoutePortsLocationsClient) NewListPager(options *ExpressRoutePortsLocationsClientListOptions) *runtime.Pager[ExpressRoutePortsLocationsClientListResponse] {
@@ -111,25 +117,20 @@ func (client *ExpressRoutePortsLocationsClient) NewListPager(options *ExpressRou
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRoutePortsLocationsClientListResponse) (ExpressRoutePortsLocationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRoutePortsLocationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ExpressRoutePortsLocationsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ExpressRoutePortsLocationsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRoutePortsLocationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -145,7 +146,7 @@ func (client *ExpressRoutePortsLocationsClient) listCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteproviderportslocation_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteproviderportslocation_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteproviderportslocation_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteproviderportslocation_client.go
index 923651de44b..b3b55c5fac1 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteproviderportslocation_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteproviderportslocation_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRouteProviderPortsLocationClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRouteProviderPortsLocationClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRouteProviderPortsLocationClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRouteProviderPortsLocationClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,22 +47,29 @@ func NewExpressRouteProviderPortsLocationClient(subscriptionID string, credentia
 // List - Retrieves all the ExpressRouteProviderPorts in a subscription.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ExpressRouteProviderPortsLocationClientListOptions contains the optional parameters for the ExpressRouteProviderPortsLocationClient.List
 //     method.
 func (client *ExpressRouteProviderPortsLocationClient) List(ctx context.Context, options *ExpressRouteProviderPortsLocationClientListOptions) (ExpressRouteProviderPortsLocationClientListResponse, error) {
+	var err error
+	const operationName = "ExpressRouteProviderPortsLocationClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, options)
 	if err != nil {
 		return ExpressRouteProviderPortsLocationClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ExpressRouteProviderPortsLocationClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ExpressRouteProviderPortsLocationClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ExpressRouteProviderPortsLocationClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -78,7 +84,7 @@ func (client *ExpressRouteProviderPortsLocationClient) listCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Filter != nil {
 		reqQP.Set("$filter", *options.Filter)
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteserviceproviders_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteserviceproviders_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteserviceproviders_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteserviceproviders_client.go
index 916139130ff..5efbab7180b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/expressrouteserviceproviders_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/expressrouteserviceproviders_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ExpressRouteServiceProvidersClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewExpressRouteServiceProvidersClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ExpressRouteServiceProvidersClient, error) {
-	cl, err := arm.NewClient(moduleName+".ExpressRouteServiceProvidersClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewExpressRouteServiceProvidersClient(subscriptionID string, credential azc
 
 // NewListPager - Gets all the available express route service providers.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ExpressRouteServiceProvidersClientListOptions contains the optional parameters for the ExpressRouteServiceProvidersClient.NewListPager
 //     method.
 func (client *ExpressRouteServiceProvidersClient) NewListPager(options *ExpressRouteServiceProvidersClientListOptions) *runtime.Pager[ExpressRouteServiceProvidersClientListResponse] {
@@ -56,25 +55,20 @@ func (client *ExpressRouteServiceProvidersClient) NewListPager(options *ExpressR
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ExpressRouteServiceProvidersClientListResponse) (ExpressRouteServiceProvidersClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ExpressRouteServiceProvidersClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ExpressRouteServiceProvidersClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ExpressRouteServiceProvidersClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ExpressRouteServiceProvidersClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -90,7 +84,7 @@ func (client *ExpressRouteServiceProvidersClient) listCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicies_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicies_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicies_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicies_client.go
index 6ee904eb435..8c6460375f6 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicies_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicies_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type FirewallPoliciesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewFirewallPoliciesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*FirewallPoliciesClient, error) {
-	cl, err := arm.NewClient(moduleName+".FirewallPoliciesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewFirewallPoliciesClient(subscriptionID string, credential azcore.TokenCre
 // BeginCreateOrUpdate - Creates or updates the specified Firewall Policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - parameters - Parameters supplied to the create or update Firewall Policy operation.
@@ -60,31 +59,41 @@ func (client *FirewallPoliciesClient) BeginCreateOrUpdate(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FirewallPoliciesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FirewallPoliciesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[FirewallPoliciesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[FirewallPoliciesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified Firewall Policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *FirewallPoliciesClient) createOrUpdate(ctx context.Context, resourceGroupName string, firewallPolicyName string, parameters FirewallPolicy, options *FirewallPoliciesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "FirewallPoliciesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, firewallPolicyName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *FirewallPoliciesClient) createOrUpdateCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified Firewall Policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - options - FirewallPoliciesClientBeginDeleteOptions contains the optional parameters for the FirewallPoliciesClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *FirewallPoliciesClient) BeginDelete(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FirewallPoliciesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FirewallPoliciesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[FirewallPoliciesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[FirewallPoliciesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified Firewall Policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *FirewallPoliciesClient) deleteOperation(ctx context.Context, resourceGroupName string, firewallPolicyName string, options *FirewallPoliciesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "FirewallPoliciesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, firewallPolicyName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *FirewallPoliciesClient) deleteCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *FirewallPoliciesClient) deleteCreateRequest(ctx context.Context, r
 // Get - Gets the specified Firewall Policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - options - FirewallPoliciesClientGetOptions contains the optional parameters for the FirewallPoliciesClient.Get method.
 func (client *FirewallPoliciesClient) Get(ctx context.Context, resourceGroupName string, firewallPolicyName string, options *FirewallPoliciesClientGetOptions) (FirewallPoliciesClientGetResponse, error) {
+	var err error
+	const operationName = "FirewallPoliciesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, firewallPolicyName, options)
 	if err != nil {
 		return FirewallPoliciesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return FirewallPoliciesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return FirewallPoliciesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return FirewallPoliciesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *FirewallPoliciesClient) getCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -242,7 +271,7 @@ func (client *FirewallPoliciesClient) getHandleResponse(resp *http.Response) (Fi
 
 // NewListPager - Lists all Firewall Policies in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - FirewallPoliciesClientListOptions contains the optional parameters for the FirewallPoliciesClient.NewListPager
 //     method.
@@ -252,25 +281,20 @@ func (client *FirewallPoliciesClient) NewListPager(resourceGroupName string, opt
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *FirewallPoliciesClientListResponse) (FirewallPoliciesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return FirewallPoliciesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "FirewallPoliciesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return FirewallPoliciesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return FirewallPoliciesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -290,7 +314,7 @@ func (client *FirewallPoliciesClient) listCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -307,7 +331,7 @@ func (client *FirewallPoliciesClient) listHandleResponse(resp *http.Response) (F
 
 // NewListAllPager - Gets all the Firewall Policies in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - FirewallPoliciesClientListAllOptions contains the optional parameters for the FirewallPoliciesClient.NewListAllPager
 //     method.
 func (client *FirewallPoliciesClient) NewListAllPager(options *FirewallPoliciesClientListAllOptions) *runtime.Pager[FirewallPoliciesClientListAllResponse] {
@@ -316,25 +340,20 @@ func (client *FirewallPoliciesClient) NewListAllPager(options *FirewallPoliciesC
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *FirewallPoliciesClientListAllResponse) (FirewallPoliciesClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return FirewallPoliciesClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "FirewallPoliciesClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return FirewallPoliciesClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return FirewallPoliciesClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -350,7 +369,7 @@ func (client *FirewallPoliciesClient) listAllCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -368,25 +387,32 @@ func (client *FirewallPoliciesClient) listAllHandleResponse(resp *http.Response)
 // UpdateTags - Updates tags of a Azure Firewall Policy resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - parameters - Parameters supplied to update Azure Firewall Policy tags.
 //   - options - FirewallPoliciesClientUpdateTagsOptions contains the optional parameters for the FirewallPoliciesClient.UpdateTags
 //     method.
 func (client *FirewallPoliciesClient) UpdateTags(ctx context.Context, resourceGroupName string, firewallPolicyName string, parameters TagsObject, options *FirewallPoliciesClientUpdateTagsOptions) (FirewallPoliciesClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "FirewallPoliciesClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, firewallPolicyName, parameters, options)
 	if err != nil {
 		return FirewallPoliciesClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return FirewallPoliciesClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return FirewallPoliciesClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return FirewallPoliciesClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -409,10 +435,13 @@ func (client *FirewallPoliciesClient) updateTagsCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyidpssignatures_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyidpssignatures_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyidpssignatures_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyidpssignatures_client.go
index ba5361dda16..db57d88302c 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyidpssignatures_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyidpssignatures_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type FirewallPolicyIdpsSignaturesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewFirewallPolicyIdpsSignaturesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*FirewallPolicyIdpsSignaturesClient, error) {
-	cl, err := arm.NewClient(moduleName+".FirewallPolicyIdpsSignaturesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,24 +47,31 @@ func NewFirewallPolicyIdpsSignaturesClient(subscriptionID string, credential azc
 // List - Retrieves the current status of IDPS signatures for the relevant policy
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - options - FirewallPolicyIdpsSignaturesClientListOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesClient.List
 //     method.
 func (client *FirewallPolicyIdpsSignaturesClient) List(ctx context.Context, resourceGroupName string, firewallPolicyName string, parameters IDPSQueryObject, options *FirewallPolicyIdpsSignaturesClientListOptions) (FirewallPolicyIdpsSignaturesClientListResponse, error) {
+	var err error
+	const operationName = "FirewallPolicyIdpsSignaturesClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, resourceGroupName, firewallPolicyName, parameters, options)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return FirewallPolicyIdpsSignaturesClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return FirewallPolicyIdpsSignaturesClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -88,10 +94,13 @@ func (client *FirewallPolicyIdpsSignaturesClient) listCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // listHandleResponse handles the List response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyidpssignaturesfiltervalues_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyidpssignaturesfiltervalues_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyidpssignaturesfiltervalues_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyidpssignaturesfiltervalues_client.go
index a6801d933e4..2b23adb7b93 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyidpssignaturesfiltervalues_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyidpssignaturesfiltervalues_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type FirewallPolicyIdpsSignaturesFilterValuesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewFirewallPolicyIdpsSignaturesFilterValuesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*FirewallPolicyIdpsSignaturesFilterValuesClient, error) {
-	cl, err := arm.NewClient(moduleName+".FirewallPolicyIdpsSignaturesFilterValuesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,24 +47,31 @@ func NewFirewallPolicyIdpsSignaturesFilterValuesClient(subscriptionID string, cr
 // List - Retrieves the current filter values for the signatures overrides
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - options - FirewallPolicyIdpsSignaturesFilterValuesClientListOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesFilterValuesClient.List
 //     method.
 func (client *FirewallPolicyIdpsSignaturesFilterValuesClient) List(ctx context.Context, resourceGroupName string, firewallPolicyName string, parameters SignatureOverridesFilterValuesQuery, options *FirewallPolicyIdpsSignaturesFilterValuesClientListOptions) (FirewallPolicyIdpsSignaturesFilterValuesClientListResponse, error) {
+	var err error
+	const operationName = "FirewallPolicyIdpsSignaturesFilterValuesClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, resourceGroupName, firewallPolicyName, parameters, options)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesFilterValuesClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesFilterValuesClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return FirewallPolicyIdpsSignaturesFilterValuesClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return FirewallPolicyIdpsSignaturesFilterValuesClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -88,10 +94,13 @@ func (client *FirewallPolicyIdpsSignaturesFilterValuesClient) listCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // listHandleResponse handles the List response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyidpssignaturesoverrides_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyidpssignaturesoverrides_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyidpssignaturesoverrides_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyidpssignaturesoverrides_client.go
index eef79210bd7..18a77c798d4 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyidpssignaturesoverrides_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyidpssignaturesoverrides_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type FirewallPolicyIdpsSignaturesOverridesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewFirewallPolicyIdpsSignaturesOverridesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*FirewallPolicyIdpsSignaturesOverridesClient, error) {
-	cl, err := arm.NewClient(moduleName+".FirewallPolicyIdpsSignaturesOverridesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,24 +47,31 @@ func NewFirewallPolicyIdpsSignaturesOverridesClient(subscriptionID string, crede
 // Get - Returns all signatures overrides for a specific policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - options - FirewallPolicyIdpsSignaturesOverridesClientGetOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.Get
 //     method.
 func (client *FirewallPolicyIdpsSignaturesOverridesClient) Get(ctx context.Context, resourceGroupName string, firewallPolicyName string, options *FirewallPolicyIdpsSignaturesOverridesClientGetOptions) (FirewallPolicyIdpsSignaturesOverridesClientGetResponse, error) {
+	var err error
+	const operationName = "FirewallPolicyIdpsSignaturesOverridesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, firewallPolicyName, options)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesOverridesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesOverridesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return FirewallPolicyIdpsSignaturesOverridesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return FirewallPolicyIdpsSignaturesOverridesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -88,7 +94,7 @@ func (client *FirewallPolicyIdpsSignaturesOverridesClient) getCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -106,24 +112,31 @@ func (client *FirewallPolicyIdpsSignaturesOverridesClient) getHandleResponse(res
 // List - Returns all signatures overrides objects for a specific policy as a list containing a single value.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - options - FirewallPolicyIdpsSignaturesOverridesClientListOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.List
 //     method.
 func (client *FirewallPolicyIdpsSignaturesOverridesClient) List(ctx context.Context, resourceGroupName string, firewallPolicyName string, options *FirewallPolicyIdpsSignaturesOverridesClientListOptions) (FirewallPolicyIdpsSignaturesOverridesClientListResponse, error) {
+	var err error
+	const operationName = "FirewallPolicyIdpsSignaturesOverridesClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, resourceGroupName, firewallPolicyName, options)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesOverridesClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesOverridesClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return FirewallPolicyIdpsSignaturesOverridesClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return FirewallPolicyIdpsSignaturesOverridesClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -146,7 +159,7 @@ func (client *FirewallPolicyIdpsSignaturesOverridesClient) listCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -164,25 +177,32 @@ func (client *FirewallPolicyIdpsSignaturesOverridesClient) listHandleResponse(re
 // Patch - Will update the status of policy's signature overrides for IDPS
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - parameters - Will contain all properties of the object to put
 //   - options - FirewallPolicyIdpsSignaturesOverridesClientPatchOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.Patch
 //     method.
 func (client *FirewallPolicyIdpsSignaturesOverridesClient) Patch(ctx context.Context, resourceGroupName string, firewallPolicyName string, parameters SignaturesOverrides, options *FirewallPolicyIdpsSignaturesOverridesClientPatchOptions) (FirewallPolicyIdpsSignaturesOverridesClientPatchResponse, error) {
+	var err error
+	const operationName = "FirewallPolicyIdpsSignaturesOverridesClient.Patch"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.patchCreateRequest(ctx, resourceGroupName, firewallPolicyName, parameters, options)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesOverridesClientPatchResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesOverridesClientPatchResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return FirewallPolicyIdpsSignaturesOverridesClientPatchResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return FirewallPolicyIdpsSignaturesOverridesClientPatchResponse{}, err
 	}
-	return client.patchHandleResponse(resp)
+	resp, err := client.patchHandleResponse(httpResp)
+	return resp, err
 }
 
 // patchCreateRequest creates the Patch request.
@@ -205,10 +225,13 @@ func (client *FirewallPolicyIdpsSignaturesOverridesClient) patchCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // patchHandleResponse handles the Patch response.
@@ -223,25 +246,32 @@ func (client *FirewallPolicyIdpsSignaturesOverridesClient) patchHandleResponse(r
 // Put - Will override/create a new signature overrides for the policy's IDPS
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - parameters - Will contain all properties of the object to put
 //   - options - FirewallPolicyIdpsSignaturesOverridesClientPutOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.Put
 //     method.
 func (client *FirewallPolicyIdpsSignaturesOverridesClient) Put(ctx context.Context, resourceGroupName string, firewallPolicyName string, parameters SignaturesOverrides, options *FirewallPolicyIdpsSignaturesOverridesClientPutOptions) (FirewallPolicyIdpsSignaturesOverridesClientPutResponse, error) {
+	var err error
+	const operationName = "FirewallPolicyIdpsSignaturesOverridesClient.Put"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.putCreateRequest(ctx, resourceGroupName, firewallPolicyName, parameters, options)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesOverridesClientPutResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return FirewallPolicyIdpsSignaturesOverridesClientPutResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return FirewallPolicyIdpsSignaturesOverridesClientPutResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return FirewallPolicyIdpsSignaturesOverridesClientPutResponse{}, err
 	}
-	return client.putHandleResponse(resp)
+	resp, err := client.putHandleResponse(httpResp)
+	return resp, err
 }
 
 // putCreateRequest creates the Put request.
@@ -264,10 +294,13 @@ func (client *FirewallPolicyIdpsSignaturesOverridesClient) putCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // putHandleResponse handles the Put response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyrulecollectiongroups_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyrulecollectiongroups_client.go
similarity index 81%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyrulecollectiongroups_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyrulecollectiongroups_client.go
index 17ab5be817e..beaba2afd16 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/firewallpolicyrulecollectiongroups_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/firewallpolicyrulecollectiongroups_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type FirewallPolicyRuleCollectionGroupsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewFirewallPolicyRuleCollectionGroupsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*FirewallPolicyRuleCollectionGroupsClient, error) {
-	cl, err := arm.NewClient(moduleName+".FirewallPolicyRuleCollectionGroupsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewFirewallPolicyRuleCollectionGroupsClient(subscriptionID string, credenti
 // BeginCreateOrUpdate - Creates or updates the specified FirewallPolicyRuleCollectionGroup.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - ruleCollectionGroupName - The name of the FirewallPolicyRuleCollectionGroup.
@@ -61,31 +60,41 @@ func (client *FirewallPolicyRuleCollectionGroupsClient) BeginCreateOrUpdate(ctx
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FirewallPolicyRuleCollectionGroupsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FirewallPolicyRuleCollectionGroupsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[FirewallPolicyRuleCollectionGroupsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[FirewallPolicyRuleCollectionGroupsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified FirewallPolicyRuleCollectionGroup.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *FirewallPolicyRuleCollectionGroupsClient) createOrUpdate(ctx context.Context, resourceGroupName string, firewallPolicyName string, ruleCollectionGroupName string, parameters FirewallPolicyRuleCollectionGroup, options *FirewallPolicyRuleCollectionGroupsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "FirewallPolicyRuleCollectionGroupsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, firewallPolicyName, ruleCollectionGroupName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *FirewallPolicyRuleCollectionGroupsClient) createOrUpdateCreateRequ
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified FirewallPolicyRuleCollectionGroup.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - ruleCollectionGroupName - The name of the FirewallPolicyRuleCollectionGroup.
@@ -133,31 +145,41 @@ func (client *FirewallPolicyRuleCollectionGroupsClient) BeginDelete(ctx context.
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FirewallPolicyRuleCollectionGroupsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FirewallPolicyRuleCollectionGroupsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[FirewallPolicyRuleCollectionGroupsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[FirewallPolicyRuleCollectionGroupsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified FirewallPolicyRuleCollectionGroup.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *FirewallPolicyRuleCollectionGroupsClient) deleteOperation(ctx context.Context, resourceGroupName string, firewallPolicyName string, ruleCollectionGroupName string, options *FirewallPolicyRuleCollectionGroupsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "FirewallPolicyRuleCollectionGroupsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, firewallPolicyName, ruleCollectionGroupName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *FirewallPolicyRuleCollectionGroupsClient) deleteCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *FirewallPolicyRuleCollectionGroupsClient) deleteCreateRequest(ctx
 // Get - Gets the specified FirewallPolicyRuleCollectionGroup.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - ruleCollectionGroupName - The name of the FirewallPolicyRuleCollectionGroup.
 //   - options - FirewallPolicyRuleCollectionGroupsClientGetOptions contains the optional parameters for the FirewallPolicyRuleCollectionGroupsClient.Get
 //     method.
 func (client *FirewallPolicyRuleCollectionGroupsClient) Get(ctx context.Context, resourceGroupName string, firewallPolicyName string, ruleCollectionGroupName string, options *FirewallPolicyRuleCollectionGroupsClientGetOptions) (FirewallPolicyRuleCollectionGroupsClientGetResponse, error) {
+	var err error
+	const operationName = "FirewallPolicyRuleCollectionGroupsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, firewallPolicyName, ruleCollectionGroupName, options)
 	if err != nil {
 		return FirewallPolicyRuleCollectionGroupsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return FirewallPolicyRuleCollectionGroupsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return FirewallPolicyRuleCollectionGroupsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return FirewallPolicyRuleCollectionGroupsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *FirewallPolicyRuleCollectionGroupsClient) getCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *FirewallPolicyRuleCollectionGroupsClient) getHandleResponse(resp *
 
 // NewListPager - Lists all FirewallPolicyRuleCollectionGroups in a FirewallPolicy resource.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - firewallPolicyName - The name of the Firewall Policy.
 //   - options - FirewallPolicyRuleCollectionGroupsClientListOptions contains the optional parameters for the FirewallPolicyRuleCollectionGroupsClient.NewListPager
@@ -266,25 +295,20 @@ func (client *FirewallPolicyRuleCollectionGroupsClient) NewListPager(resourceGro
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *FirewallPolicyRuleCollectionGroupsClientListResponse) (FirewallPolicyRuleCollectionGroupsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, firewallPolicyName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return FirewallPolicyRuleCollectionGroupsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "FirewallPolicyRuleCollectionGroupsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, firewallPolicyName, options)
+			}, nil)
 			if err != nil {
 				return FirewallPolicyRuleCollectionGroupsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return FirewallPolicyRuleCollectionGroupsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *FirewallPolicyRuleCollectionGroupsClient) listCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/flowlogs_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/flowlogs_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/flowlogs_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/flowlogs_client.go
index 44d7cccd8a1..25a9005f841 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/flowlogs_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/flowlogs_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type FlowLogsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewFlowLogsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*FlowLogsClient, error) {
-	cl, err := arm.NewClient(moduleName+".FlowLogsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewFlowLogsClient(subscriptionID string, credential azcore.TokenCredential,
 // BeginCreateOrUpdate - Create or update a flow log for the specified network security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - flowLogName - The name of the flow log.
@@ -61,31 +60,41 @@ func (client *FlowLogsClient) BeginCreateOrUpdate(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FlowLogsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FlowLogsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[FlowLogsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[FlowLogsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Create or update a flow log for the specified network security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *FlowLogsClient) createOrUpdate(ctx context.Context, resourceGroupName string, networkWatcherName string, flowLogName string, parameters FlowLog, options *FlowLogsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "FlowLogsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkWatcherName, flowLogName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *FlowLogsClient) createOrUpdateCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified flow log resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - flowLogName - The name of the flow log resource.
@@ -132,31 +144,41 @@ func (client *FlowLogsClient) BeginDelete(ctx context.Context, resourceGroupName
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FlowLogsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[FlowLogsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[FlowLogsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[FlowLogsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified flow log resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *FlowLogsClient) deleteOperation(ctx context.Context, resourceGroupName string, networkWatcherName string, flowLogName string, options *FlowLogsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "FlowLogsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkWatcherName, flowLogName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -183,7 +205,7 @@ func (client *FlowLogsClient) deleteCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -192,24 +214,31 @@ func (client *FlowLogsClient) deleteCreateRequest(ctx context.Context, resourceG
 // Get - Gets a flow log resource by name.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - flowLogName - The name of the flow log resource.
 //   - options - FlowLogsClientGetOptions contains the optional parameters for the FlowLogsClient.Get method.
 func (client *FlowLogsClient) Get(ctx context.Context, resourceGroupName string, networkWatcherName string, flowLogName string, options *FlowLogsClientGetOptions) (FlowLogsClientGetResponse, error) {
+	var err error
+	const operationName = "FlowLogsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkWatcherName, flowLogName, options)
 	if err != nil {
 		return FlowLogsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return FlowLogsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return FlowLogsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return FlowLogsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -236,7 +265,7 @@ func (client *FlowLogsClient) getCreateRequest(ctx context.Context, resourceGrou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -253,7 +282,7 @@ func (client *FlowLogsClient) getHandleResponse(resp *http.Response) (FlowLogsCl
 
 // NewListPager - Lists all flow log resources for the specified Network Watcher.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group containing Network Watcher.
 //   - networkWatcherName - The name of the Network Watcher resource.
 //   - options - FlowLogsClientListOptions contains the optional parameters for the FlowLogsClient.NewListPager method.
@@ -263,25 +292,20 @@ func (client *FlowLogsClient) NewListPager(resourceGroupName string, networkWatc
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *FlowLogsClientListResponse) (FlowLogsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkWatcherName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "FlowLogsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkWatcherName, options)
+			}, nil)
 			if err != nil {
 				return FlowLogsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return FlowLogsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return FlowLogsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -305,7 +329,7 @@ func (client *FlowLogsClient) listCreateRequest(ctx context.Context, resourceGro
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -323,25 +347,32 @@ func (client *FlowLogsClient) listHandleResponse(resp *http.Response) (FlowLogsC
 // UpdateTags - Update tags of the specified flow log.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - flowLogName - The name of the flow log.
 //   - parameters - Parameters supplied to update flow log tags.
 //   - options - FlowLogsClientUpdateTagsOptions contains the optional parameters for the FlowLogsClient.UpdateTags method.
 func (client *FlowLogsClient) UpdateTags(ctx context.Context, resourceGroupName string, networkWatcherName string, flowLogName string, parameters TagsObject, options *FlowLogsClientUpdateTagsOptions) (FlowLogsClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "FlowLogsClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, networkWatcherName, flowLogName, parameters, options)
 	if err != nil {
 		return FlowLogsClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return FlowLogsClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return FlowLogsClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return FlowLogsClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -368,10 +399,13 @@ func (client *FlowLogsClient) updateTagsCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/groups_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/groups_client.go
similarity index 81%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/groups_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/groups_client.go
index 4cf5766fcc1..113bcc3bb6f 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/groups_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/groups_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type GroupsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewGroupsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*GroupsClient, error) {
-	cl, err := arm.NewClient(moduleName+".GroupsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,25 +48,32 @@ func NewGroupsClient(subscriptionID string, credential azcore.TokenCredential, o
 // CreateOrUpdate - Creates or updates a network group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - networkGroupName - The name of the network group.
 //   - parameters - Parameters supplied to the specify which network group need to create
 //   - options - GroupsClientCreateOrUpdateOptions contains the optional parameters for the GroupsClient.CreateOrUpdate method.
 func (client *GroupsClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, networkManagerName string, networkGroupName string, parameters Group, options *GroupsClientCreateOrUpdateOptions) (GroupsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "GroupsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkManagerName, networkGroupName, parameters, options)
 	if err != nil {
 		return GroupsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return GroupsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return GroupsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return GroupsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -94,13 +100,16 @@ func (client *GroupsClient) createOrUpdateCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	if options != nil && options.IfMatch != nil {
 		req.Raw().Header["If-Match"] = []string{*options.IfMatch}
 	}
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -118,7 +127,7 @@ func (client *GroupsClient) createOrUpdateHandleResponse(resp *http.Response) (G
 // BeginDelete - Deletes a network group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - networkGroupName - The name of the network group.
@@ -129,31 +138,41 @@ func (client *GroupsClient) BeginDelete(ctx context.Context, resourceGroupName s
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GroupsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[GroupsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[GroupsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[GroupsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a network group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *GroupsClient) deleteOperation(ctx context.Context, resourceGroupName string, networkManagerName string, networkGroupName string, options *GroupsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "GroupsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkManagerName, networkGroupName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -180,7 +199,7 @@ func (client *GroupsClient) deleteCreateRequest(ctx context.Context, resourceGro
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Force != nil {
 		reqQP.Set("force", strconv.FormatBool(*options.Force))
 	}
@@ -192,24 +211,31 @@ func (client *GroupsClient) deleteCreateRequest(ctx context.Context, resourceGro
 // Get - Gets the specified network group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - networkGroupName - The name of the network group.
 //   - options - GroupsClientGetOptions contains the optional parameters for the GroupsClient.Get method.
 func (client *GroupsClient) Get(ctx context.Context, resourceGroupName string, networkManagerName string, networkGroupName string, options *GroupsClientGetOptions) (GroupsClientGetResponse, error) {
+	var err error
+	const operationName = "GroupsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkManagerName, networkGroupName, options)
 	if err != nil {
 		return GroupsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return GroupsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return GroupsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return GroupsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -236,7 +262,7 @@ func (client *GroupsClient) getCreateRequest(ctx context.Context, resourceGroupN
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -253,7 +279,7 @@ func (client *GroupsClient) getHandleResponse(resp *http.Response) (GroupsClient
 
 // NewListPager - Lists the specified network group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - options - GroupsClientListOptions contains the optional parameters for the GroupsClient.NewListPager method.
@@ -263,25 +289,20 @@ func (client *GroupsClient) NewListPager(resourceGroupName string, networkManage
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *GroupsClientListResponse) (GroupsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkManagerName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "GroupsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkManagerName, options)
+			}, nil)
 			if err != nil {
 				return GroupsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return GroupsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return GroupsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -305,7 +326,7 @@ func (client *GroupsClient) listCreateRequest(ctx context.Context, resourceGroup
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/hubroutetables_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/hubroutetables_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/hubroutetables_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/hubroutetables_client.go
index 4454e3bca49..d906077a55d 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/hubroutetables_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/hubroutetables_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type HubRouteTablesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewHubRouteTablesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*HubRouteTablesClient, error) {
-	cl, err := arm.NewClient(moduleName+".HubRouteTablesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewHubRouteTablesClient(subscriptionID string, credential azcore.TokenCrede
 // BeginCreateOrUpdate - Creates a RouteTable resource if it doesn't exist else updates the existing RouteTable.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - routeTableName - The name of the RouteTable.
@@ -61,31 +60,41 @@ func (client *HubRouteTablesClient) BeginCreateOrUpdate(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[HubRouteTablesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[HubRouteTablesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[HubRouteTablesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[HubRouteTablesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a RouteTable resource if it doesn't exist else updates the existing RouteTable.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *HubRouteTablesClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualHubName string, routeTableName string, routeTableParameters HubRouteTable, options *HubRouteTablesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "HubRouteTablesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualHubName, routeTableName, routeTableParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *HubRouteTablesClient) createOrUpdateCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, routeTableParameters)
+	if err := runtime.MarshalAsJSON(req, routeTableParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a RouteTable.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the RouteTable.
 //   - virtualHubName - The name of the VirtualHub.
 //   - routeTableName - The name of the RouteTable.
@@ -133,31 +145,41 @@ func (client *HubRouteTablesClient) BeginDelete(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[HubRouteTablesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[HubRouteTablesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[HubRouteTablesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[HubRouteTablesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a RouteTable.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *HubRouteTablesClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualHubName string, routeTableName string, options *HubRouteTablesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "HubRouteTablesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualHubName, routeTableName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *HubRouteTablesClient) deleteCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,24 +215,31 @@ func (client *HubRouteTablesClient) deleteCreateRequest(ctx context.Context, res
 // Get - Retrieves the details of a RouteTable.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - routeTableName - The name of the RouteTable.
 //   - options - HubRouteTablesClientGetOptions contains the optional parameters for the HubRouteTablesClient.Get method.
 func (client *HubRouteTablesClient) Get(ctx context.Context, resourceGroupName string, virtualHubName string, routeTableName string, options *HubRouteTablesClientGetOptions) (HubRouteTablesClientGetResponse, error) {
+	var err error
+	const operationName = "HubRouteTablesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualHubName, routeTableName, options)
 	if err != nil {
 		return HubRouteTablesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return HubRouteTablesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return HubRouteTablesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return HubRouteTablesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -237,7 +266,7 @@ func (client *HubRouteTablesClient) getCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -254,7 +283,7 @@ func (client *HubRouteTablesClient) getHandleResponse(resp *http.Response) (HubR
 
 // NewListPager - Retrieves the details of all RouteTables.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - options - HubRouteTablesClientListOptions contains the optional parameters for the HubRouteTablesClient.NewListPager method.
@@ -264,25 +293,20 @@ func (client *HubRouteTablesClient) NewListPager(resourceGroupName string, virtu
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *HubRouteTablesClientListResponse) (HubRouteTablesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return HubRouteTablesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "HubRouteTablesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
+			}, nil)
 			if err != nil {
 				return HubRouteTablesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return HubRouteTablesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -306,7 +330,7 @@ func (client *HubRouteTablesClient) listCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/hubvirtualnetworkconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/hubvirtualnetworkconnections_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/hubvirtualnetworkconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/hubvirtualnetworkconnections_client.go
index daf4dba11e0..e47c8bb56f4 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/hubvirtualnetworkconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/hubvirtualnetworkconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type HubVirtualNetworkConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewHubVirtualNetworkConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*HubVirtualNetworkConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".HubVirtualNetworkConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewHubVirtualNetworkConnectionsClient(subscriptionID string, credential azc
 // BeginCreateOrUpdate - Creates a hub virtual network connection if it doesn't exist else updates the existing one.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the HubVirtualNetworkConnection.
 //   - virtualHubName - The name of the VirtualHub.
 //   - connectionName - The name of the HubVirtualNetworkConnection.
@@ -61,31 +60,41 @@ func (client *HubVirtualNetworkConnectionsClient) BeginCreateOrUpdate(ctx contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[HubVirtualNetworkConnectionsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[HubVirtualNetworkConnectionsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[HubVirtualNetworkConnectionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[HubVirtualNetworkConnectionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a hub virtual network connection if it doesn't exist else updates the existing one.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *HubVirtualNetworkConnectionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualHubName string, connectionName string, hubVirtualNetworkConnectionParameters HubVirtualNetworkConnection, options *HubVirtualNetworkConnectionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "HubVirtualNetworkConnectionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualHubName, connectionName, hubVirtualNetworkConnectionParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *HubVirtualNetworkConnectionsClient) createOrUpdateCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, hubVirtualNetworkConnectionParameters)
+	if err := runtime.MarshalAsJSON(req, hubVirtualNetworkConnectionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a HubVirtualNetworkConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - connectionName - The name of the HubVirtualNetworkConnection.
@@ -133,31 +145,41 @@ func (client *HubVirtualNetworkConnectionsClient) BeginDelete(ctx context.Contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[HubVirtualNetworkConnectionsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[HubVirtualNetworkConnectionsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[HubVirtualNetworkConnectionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[HubVirtualNetworkConnectionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a HubVirtualNetworkConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *HubVirtualNetworkConnectionsClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualHubName string, connectionName string, options *HubVirtualNetworkConnectionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "HubVirtualNetworkConnectionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualHubName, connectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *HubVirtualNetworkConnectionsClient) deleteCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *HubVirtualNetworkConnectionsClient) deleteCreateRequest(ctx contex
 // Get - Retrieves the details of a HubVirtualNetworkConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - connectionName - The name of the vpn connection.
 //   - options - HubVirtualNetworkConnectionsClientGetOptions contains the optional parameters for the HubVirtualNetworkConnectionsClient.Get
 //     method.
 func (client *HubVirtualNetworkConnectionsClient) Get(ctx context.Context, resourceGroupName string, virtualHubName string, connectionName string, options *HubVirtualNetworkConnectionsClientGetOptions) (HubVirtualNetworkConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "HubVirtualNetworkConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualHubName, connectionName, options)
 	if err != nil {
 		return HubVirtualNetworkConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return HubVirtualNetworkConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return HubVirtualNetworkConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return HubVirtualNetworkConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *HubVirtualNetworkConnectionsClient) getCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *HubVirtualNetworkConnectionsClient) getHandleResponse(resp *http.R
 
 // NewListPager - Retrieves the details of all HubVirtualNetworkConnections.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - options - HubVirtualNetworkConnectionsClientListOptions contains the optional parameters for the HubVirtualNetworkConnectionsClient.NewListPager
@@ -266,25 +295,20 @@ func (client *HubVirtualNetworkConnectionsClient) NewListPager(resourceGroupName
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *HubVirtualNetworkConnectionsClientListResponse) (HubVirtualNetworkConnectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return HubVirtualNetworkConnectionsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "HubVirtualNetworkConnectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
+			}, nil)
 			if err != nil {
 				return HubVirtualNetworkConnectionsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return HubVirtualNetworkConnectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *HubVirtualNetworkConnectionsClient) listCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/inboundnatrules_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/inboundnatrules_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/inboundnatrules_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/inboundnatrules_client.go
index bd9720cb183..464d80dc081 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/inboundnatrules_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/inboundnatrules_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type InboundNatRulesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewInboundNatRulesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*InboundNatRulesClient, error) {
-	cl, err := arm.NewClient(moduleName+".InboundNatRulesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewInboundNatRulesClient(subscriptionID string, credential azcore.TokenCred
 // BeginCreateOrUpdate - Creates or updates a load balancer inbound NAT rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - inboundNatRuleName - The name of the inbound NAT rule.
@@ -61,31 +60,41 @@ func (client *InboundNatRulesClient) BeginCreateOrUpdate(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InboundNatRulesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InboundNatRulesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[InboundNatRulesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[InboundNatRulesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a load balancer inbound NAT rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *InboundNatRulesClient) createOrUpdate(ctx context.Context, resourceGroupName string, loadBalancerName string, inboundNatRuleName string, inboundNatRuleParameters InboundNatRule, options *InboundNatRulesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "InboundNatRulesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, loadBalancerName, inboundNatRuleName, inboundNatRuleParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *InboundNatRulesClient) createOrUpdateCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, inboundNatRuleParameters)
+	if err := runtime.MarshalAsJSON(req, inboundNatRuleParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified load balancer inbound NAT rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - inboundNatRuleName - The name of the inbound NAT rule.
@@ -133,31 +145,41 @@ func (client *InboundNatRulesClient) BeginDelete(ctx context.Context, resourceGr
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InboundNatRulesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InboundNatRulesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[InboundNatRulesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[InboundNatRulesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified load balancer inbound NAT rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *InboundNatRulesClient) deleteOperation(ctx context.Context, resourceGroupName string, loadBalancerName string, inboundNatRuleName string, options *InboundNatRulesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "InboundNatRulesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, loadBalancerName, inboundNatRuleName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *InboundNatRulesClient) deleteCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,24 +215,31 @@ func (client *InboundNatRulesClient) deleteCreateRequest(ctx context.Context, re
 // Get - Gets the specified load balancer inbound NAT rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - inboundNatRuleName - The name of the inbound NAT rule.
 //   - options - InboundNatRulesClientGetOptions contains the optional parameters for the InboundNatRulesClient.Get method.
 func (client *InboundNatRulesClient) Get(ctx context.Context, resourceGroupName string, loadBalancerName string, inboundNatRuleName string, options *InboundNatRulesClientGetOptions) (InboundNatRulesClientGetResponse, error) {
+	var err error
+	const operationName = "InboundNatRulesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, loadBalancerName, inboundNatRuleName, options)
 	if err != nil {
 		return InboundNatRulesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return InboundNatRulesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return InboundNatRulesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return InboundNatRulesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -237,7 +266,7 @@ func (client *InboundNatRulesClient) getCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -257,7 +286,7 @@ func (client *InboundNatRulesClient) getHandleResponse(resp *http.Response) (Inb
 
 // NewListPager - Gets all the inbound NAT rules in a load balancer.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - options - InboundNatRulesClientListOptions contains the optional parameters for the InboundNatRulesClient.NewListPager
@@ -268,25 +297,20 @@ func (client *InboundNatRulesClient) NewListPager(resourceGroupName string, load
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *InboundNatRulesClientListResponse) (InboundNatRulesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return InboundNatRulesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "InboundNatRulesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
+			}, nil)
 			if err != nil {
 				return InboundNatRulesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return InboundNatRulesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -310,7 +334,7 @@ func (client *InboundNatRulesClient) listCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/inboundsecurityrule_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/inboundsecurityrule_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/inboundsecurityrule_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/inboundsecurityrule_client.go
index bc000960131..41108ace5cd 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/inboundsecurityrule_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/inboundsecurityrule_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type InboundSecurityRuleClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewInboundSecurityRuleClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*InboundSecurityRuleClient, error) {
-	cl, err := arm.NewClient(moduleName+".InboundSecurityRuleClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewInboundSecurityRuleClient(subscriptionID string, credential azcore.Token
 // BeginCreateOrUpdate - Creates or updates the specified Network Virtual Appliance Inbound Security Rules.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkVirtualApplianceName - The name of the Network Virtual Appliance.
 //   - ruleCollectionName - The name of security rule collection.
@@ -61,31 +60,41 @@ func (client *InboundSecurityRuleClient) BeginCreateOrUpdate(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InboundSecurityRuleClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InboundSecurityRuleClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[InboundSecurityRuleClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[InboundSecurityRuleClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified Network Virtual Appliance Inbound Security Rules.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *InboundSecurityRuleClient) createOrUpdate(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, ruleCollectionName string, parameters InboundSecurityRule, options *InboundSecurityRuleClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "InboundSecurityRuleClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, ruleCollectionName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,8 +121,11 @@ func (client *InboundSecurityRuleClient) createOrUpdateCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfaceipconfigurations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaceipconfigurations_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfaceipconfigurations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaceipconfigurations_client.go
index fe261280b27..805f961c7ca 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfaceipconfigurations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaceipconfigurations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type InterfaceIPConfigurationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewInterfaceIPConfigurationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*InterfaceIPConfigurationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".InterfaceIPConfigurationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewInterfaceIPConfigurationsClient(subscriptionID string, credential azcore
 // Get - Gets the specified network interface ip configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - ipConfigurationName - The name of the ip configuration name.
 //   - options - InterfaceIPConfigurationsClientGetOptions contains the optional parameters for the InterfaceIPConfigurationsClient.Get
 //     method.
 func (client *InterfaceIPConfigurationsClient) Get(ctx context.Context, resourceGroupName string, networkInterfaceName string, ipConfigurationName string, options *InterfaceIPConfigurationsClientGetOptions) (InterfaceIPConfigurationsClientGetResponse, error) {
+	var err error
+	const operationName = "InterfaceIPConfigurationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkInterfaceName, ipConfigurationName, options)
 	if err != nil {
 		return InterfaceIPConfigurationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return InterfaceIPConfigurationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return InterfaceIPConfigurationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return InterfaceIPConfigurationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -93,7 +99,7 @@ func (client *InterfaceIPConfigurationsClient) getCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -110,7 +116,7 @@ func (client *InterfaceIPConfigurationsClient) getHandleResponse(resp *http.Resp
 
 // NewListPager - Get all ip configurations in a network interface.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - options - InterfaceIPConfigurationsClientListOptions contains the optional parameters for the InterfaceIPConfigurationsClient.NewListPager
@@ -121,25 +127,20 @@ func (client *InterfaceIPConfigurationsClient) NewListPager(resourceGroupName st
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *InterfaceIPConfigurationsClientListResponse) (InterfaceIPConfigurationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkInterfaceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "InterfaceIPConfigurationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkInterfaceName, options)
+			}, nil)
 			if err != nil {
 				return InterfaceIPConfigurationsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return InterfaceIPConfigurationsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return InterfaceIPConfigurationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -163,7 +164,7 @@ func (client *InterfaceIPConfigurationsClient) listCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfaceloadbalancers_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaceloadbalancers_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfaceloadbalancers_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaceloadbalancers_client.go
index c48641276ab..dd7e2473313 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfaceloadbalancers_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaceloadbalancers_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type InterfaceLoadBalancersClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewInterfaceLoadBalancersClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*InterfaceLoadBalancersClient, error) {
-	cl, err := arm.NewClient(moduleName+".InterfaceLoadBalancersClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewInterfaceLoadBalancersClient(subscriptionID string, credential azcore.To
 
 // NewListPager - List all load balancers in a network interface.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - options - InterfaceLoadBalancersClientListOptions contains the optional parameters for the InterfaceLoadBalancersClient.NewListPager
@@ -58,25 +57,20 @@ func (client *InterfaceLoadBalancersClient) NewListPager(resourceGroupName strin
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *InterfaceLoadBalancersClientListResponse) (InterfaceLoadBalancersClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkInterfaceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "InterfaceLoadBalancersClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkInterfaceName, options)
+			}, nil)
 			if err != nil {
 				return InterfaceLoadBalancersClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return InterfaceLoadBalancersClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return InterfaceLoadBalancersClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -100,7 +94,7 @@ func (client *InterfaceLoadBalancersClient) listCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaces.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaces.go
new file mode 100644
index 00000000000..a153dd5768c
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaces.go
@@ -0,0 +1,54 @@
+//go:build go1.18
+// +build go1.18
+
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License. See License.txt in the project root for license information.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
+// Changes may cause incorrect behavior and will be lost if the code is regenerated.
+
+package armnetwork
+
+// ActiveBaseSecurityAdminRuleClassification provides polymorphic access to related types.
+// Call the interface's GetActiveBaseSecurityAdminRule() method to access the common type.
+// Use a type switch to determine the concrete type.  The possible types are:
+// - *ActiveBaseSecurityAdminRule, *ActiveDefaultSecurityAdminRule, *ActiveSecurityAdminRule
+type ActiveBaseSecurityAdminRuleClassification interface {
+	// GetActiveBaseSecurityAdminRule returns the ActiveBaseSecurityAdminRule content of the underlying type.
+	GetActiveBaseSecurityAdminRule() *ActiveBaseSecurityAdminRule
+}
+
+// BaseAdminRuleClassification provides polymorphic access to related types.
+// Call the interface's GetBaseAdminRule() method to access the common type.
+// Use a type switch to determine the concrete type.  The possible types are:
+// - *AdminRule, *BaseAdminRule, *DefaultAdminRule
+type BaseAdminRuleClassification interface {
+	// GetBaseAdminRule returns the BaseAdminRule content of the underlying type.
+	GetBaseAdminRule() *BaseAdminRule
+}
+
+// EffectiveBaseSecurityAdminRuleClassification provides polymorphic access to related types.
+// Call the interface's GetEffectiveBaseSecurityAdminRule() method to access the common type.
+// Use a type switch to determine the concrete type.  The possible types are:
+// - *EffectiveBaseSecurityAdminRule, *EffectiveDefaultSecurityAdminRule, *EffectiveSecurityAdminRule
+type EffectiveBaseSecurityAdminRuleClassification interface {
+	// GetEffectiveBaseSecurityAdminRule returns the EffectiveBaseSecurityAdminRule content of the underlying type.
+	GetEffectiveBaseSecurityAdminRule() *EffectiveBaseSecurityAdminRule
+}
+
+// FirewallPolicyRuleClassification provides polymorphic access to related types.
+// Call the interface's GetFirewallPolicyRule() method to access the common type.
+// Use a type switch to determine the concrete type.  The possible types are:
+// - *ApplicationRule, *FirewallPolicyRule, *NatRule, *Rule
+type FirewallPolicyRuleClassification interface {
+	// GetFirewallPolicyRule returns the FirewallPolicyRule content of the underlying type.
+	GetFirewallPolicyRule() *FirewallPolicyRule
+}
+
+// FirewallPolicyRuleCollectionClassification provides polymorphic access to related types.
+// Call the interface's GetFirewallPolicyRuleCollection() method to access the common type.
+// Use a type switch to determine the concrete type.  The possible types are:
+// - *FirewallPolicyFilterRuleCollection, *FirewallPolicyNatRuleCollection, *FirewallPolicyRuleCollection
+type FirewallPolicyRuleCollectionClassification interface {
+	// GetFirewallPolicyRuleCollection returns the FirewallPolicyRuleCollection content of the underlying type.
+	GetFirewallPolicyRuleCollection() *FirewallPolicyRuleCollection
+}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfaces_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaces_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfaces_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaces_client.go
index c66931fb54a..e28e01c0bd4 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfaces_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfaces_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type InterfacesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewInterfacesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*InterfacesClient, error) {
-	cl, err := arm.NewClient(moduleName+".InterfacesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewInterfacesClient(subscriptionID string, credential azcore.TokenCredentia
 // BeginCreateOrUpdate - Creates or updates a network interface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - parameters - Parameters supplied to the create or update network interface operation.
@@ -60,31 +59,41 @@ func (client *InterfacesClient) BeginCreateOrUpdate(ctx context.Context, resourc
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfacesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfacesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[InterfacesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[InterfacesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a network interface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *InterfacesClient) createOrUpdate(ctx context.Context, resourceGroupName string, networkInterfaceName string, parameters Interface, options *InterfacesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "InterfacesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkInterfaceName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *InterfacesClient) createOrUpdateCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified network interface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - options - InterfacesClientBeginDeleteOptions contains the optional parameters for the InterfacesClient.BeginDelete method.
@@ -126,31 +138,41 @@ func (client *InterfacesClient) BeginDelete(ctx context.Context, resourceGroupNa
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfacesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfacesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[InterfacesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[InterfacesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified network interface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *InterfacesClient) deleteOperation(ctx context.Context, resourceGroupName string, networkInterfaceName string, options *InterfacesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "InterfacesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkInterfaceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -173,7 +195,7 @@ func (client *InterfacesClient) deleteCreateRequest(ctx context.Context, resourc
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -182,23 +204,30 @@ func (client *InterfacesClient) deleteCreateRequest(ctx context.Context, resourc
 // Get - Gets information about the specified network interface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - options - InterfacesClientGetOptions contains the optional parameters for the InterfacesClient.Get method.
 func (client *InterfacesClient) Get(ctx context.Context, resourceGroupName string, networkInterfaceName string, options *InterfacesClientGetOptions) (InterfacesClientGetResponse, error) {
+	var err error
+	const operationName = "InterfacesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkInterfaceName, options)
 	if err != nil {
 		return InterfacesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return InterfacesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return InterfacesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return InterfacesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -221,7 +250,7 @@ func (client *InterfacesClient) getCreateRequest(ctx context.Context, resourceGr
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -242,7 +271,7 @@ func (client *InterfacesClient) getHandleResponse(resp *http.Response) (Interfac
 // GetCloudServiceNetworkInterface - Get the specified network interface in a cloud service.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - cloudServiceName - The name of the cloud service.
 //   - roleInstanceName - The name of role instance.
@@ -250,18 +279,25 @@ func (client *InterfacesClient) getHandleResponse(resp *http.Response) (Interfac
 //   - options - InterfacesClientGetCloudServiceNetworkInterfaceOptions contains the optional parameters for the InterfacesClient.GetCloudServiceNetworkInterface
 //     method.
 func (client *InterfacesClient) GetCloudServiceNetworkInterface(ctx context.Context, resourceGroupName string, cloudServiceName string, roleInstanceName string, networkInterfaceName string, options *InterfacesClientGetCloudServiceNetworkInterfaceOptions) (InterfacesClientGetCloudServiceNetworkInterfaceResponse, error) {
+	var err error
+	const operationName = "InterfacesClient.GetCloudServiceNetworkInterface"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCloudServiceNetworkInterfaceCreateRequest(ctx, resourceGroupName, cloudServiceName, roleInstanceName, networkInterfaceName, options)
 	if err != nil {
 		return InterfacesClientGetCloudServiceNetworkInterfaceResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return InterfacesClientGetCloudServiceNetworkInterfaceResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return InterfacesClientGetCloudServiceNetworkInterfaceResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return InterfacesClientGetCloudServiceNetworkInterfaceResponse{}, err
 	}
-	return client.getCloudServiceNetworkInterfaceHandleResponse(resp)
+	resp, err := client.getCloudServiceNetworkInterfaceHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCloudServiceNetworkInterfaceCreateRequest creates the GetCloudServiceNetworkInterface request.
@@ -292,7 +328,7 @@ func (client *InterfacesClient) getCloudServiceNetworkInterfaceCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -313,7 +349,7 @@ func (client *InterfacesClient) getCloudServiceNetworkInterfaceHandleResponse(re
 // BeginGetEffectiveRouteTable - Gets all route tables applied to a network interface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - options - InterfacesClientBeginGetEffectiveRouteTableOptions contains the optional parameters for the InterfacesClient.BeginGetEffectiveRouteTable
@@ -324,31 +360,41 @@ func (client *InterfacesClient) BeginGetEffectiveRouteTable(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfacesClientGetEffectiveRouteTableResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfacesClientGetEffectiveRouteTableResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[InterfacesClientGetEffectiveRouteTableResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[InterfacesClientGetEffectiveRouteTableResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetEffectiveRouteTable - Gets all route tables applied to a network interface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *InterfacesClient) getEffectiveRouteTable(ctx context.Context, resourceGroupName string, networkInterfaceName string, options *InterfacesClientBeginGetEffectiveRouteTableOptions) (*http.Response, error) {
+	var err error
+	const operationName = "InterfacesClient.BeginGetEffectiveRouteTable"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getEffectiveRouteTableCreateRequest(ctx, resourceGroupName, networkInterfaceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getEffectiveRouteTableCreateRequest creates the GetEffectiveRouteTable request.
@@ -371,7 +417,7 @@ func (client *InterfacesClient) getEffectiveRouteTableCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -390,18 +436,25 @@ func (client *InterfacesClient) getEffectiveRouteTableCreateRequest(ctx context.
 //   - options - InterfacesClientGetVirtualMachineScaleSetIPConfigurationOptions contains the optional parameters for the InterfacesClient.GetVirtualMachineScaleSetIPConfiguration
 //     method.
 func (client *InterfacesClient) GetVirtualMachineScaleSetIPConfiguration(ctx context.Context, resourceGroupName string, virtualMachineScaleSetName string, virtualmachineIndex string, networkInterfaceName string, ipConfigurationName string, options *InterfacesClientGetVirtualMachineScaleSetIPConfigurationOptions) (InterfacesClientGetVirtualMachineScaleSetIPConfigurationResponse, error) {
+	var err error
+	const operationName = "InterfacesClient.GetVirtualMachineScaleSetIPConfiguration"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getVirtualMachineScaleSetIPConfigurationCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, virtualmachineIndex, networkInterfaceName, ipConfigurationName, options)
 	if err != nil {
 		return InterfacesClientGetVirtualMachineScaleSetIPConfigurationResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return InterfacesClientGetVirtualMachineScaleSetIPConfigurationResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return InterfacesClientGetVirtualMachineScaleSetIPConfigurationResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return InterfacesClientGetVirtualMachineScaleSetIPConfigurationResponse{}, err
 	}
-	return client.getVirtualMachineScaleSetIPConfigurationHandleResponse(resp)
+	resp, err := client.getVirtualMachineScaleSetIPConfigurationHandleResponse(httpResp)
+	return resp, err
 }
 
 // getVirtualMachineScaleSetIPConfigurationCreateRequest creates the GetVirtualMachineScaleSetIPConfiguration request.
@@ -465,18 +518,25 @@ func (client *InterfacesClient) getVirtualMachineScaleSetIPConfigurationHandleRe
 //   - options - InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceOptions contains the optional parameters for the InterfacesClient.GetVirtualMachineScaleSetNetworkInterface
 //     method.
 func (client *InterfacesClient) GetVirtualMachineScaleSetNetworkInterface(ctx context.Context, resourceGroupName string, virtualMachineScaleSetName string, virtualmachineIndex string, networkInterfaceName string, options *InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceOptions) (InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceResponse, error) {
+	var err error
+	const operationName = "InterfacesClient.GetVirtualMachineScaleSetNetworkInterface"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getVirtualMachineScaleSetNetworkInterfaceCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, virtualmachineIndex, networkInterfaceName, options)
 	if err != nil {
 		return InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceResponse{}, err
 	}
-	return client.getVirtualMachineScaleSetNetworkInterfaceHandleResponse(resp)
+	resp, err := client.getVirtualMachineScaleSetNetworkInterfaceHandleResponse(httpResp)
+	return resp, err
 }
 
 // getVirtualMachineScaleSetNetworkInterfaceCreateRequest creates the GetVirtualMachineScaleSetNetworkInterface request.
@@ -527,7 +587,7 @@ func (client *InterfacesClient) getVirtualMachineScaleSetNetworkInterfaceHandleR
 
 // NewListPager - Gets all network interfaces in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - InterfacesClientListOptions contains the optional parameters for the InterfacesClient.NewListPager method.
 func (client *InterfacesClient) NewListPager(resourceGroupName string, options *InterfacesClientListOptions) *runtime.Pager[InterfacesClientListResponse] {
@@ -536,25 +596,20 @@ func (client *InterfacesClient) NewListPager(resourceGroupName string, options *
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *InterfacesClientListResponse) (InterfacesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return InterfacesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "InterfacesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return InterfacesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return InterfacesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -574,7 +629,7 @@ func (client *InterfacesClient) listCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -591,7 +646,7 @@ func (client *InterfacesClient) listHandleResponse(resp *http.Response) (Interfa
 
 // NewListAllPager - Gets all network interfaces in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - InterfacesClientListAllOptions contains the optional parameters for the InterfacesClient.NewListAllPager method.
 func (client *InterfacesClient) NewListAllPager(options *InterfacesClientListAllOptions) *runtime.Pager[InterfacesClientListAllResponse] {
 	return runtime.NewPager(runtime.PagingHandler[InterfacesClientListAllResponse]{
@@ -599,25 +654,20 @@ func (client *InterfacesClient) NewListAllPager(options *InterfacesClientListAll
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *InterfacesClientListAllResponse) (InterfacesClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return InterfacesClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "InterfacesClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return InterfacesClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return InterfacesClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -633,7 +683,7 @@ func (client *InterfacesClient) listAllCreateRequest(ctx context.Context, option
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -650,7 +700,7 @@ func (client *InterfacesClient) listAllHandleResponse(resp *http.Response) (Inte
 
 // NewListCloudServiceNetworkInterfacesPager - Gets all network interfaces in a cloud service.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - cloudServiceName - The name of the cloud service.
 //   - options - InterfacesClientListCloudServiceNetworkInterfacesOptions contains the optional parameters for the InterfacesClient.NewListCloudServiceNetworkInterfacesPager
@@ -661,25 +711,20 @@ func (client *InterfacesClient) NewListCloudServiceNetworkInterfacesPager(resour
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *InterfacesClientListCloudServiceNetworkInterfacesResponse) (InterfacesClientListCloudServiceNetworkInterfacesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCloudServiceNetworkInterfacesCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return InterfacesClientListCloudServiceNetworkInterfacesResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "InterfacesClient.NewListCloudServiceNetworkInterfacesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCloudServiceNetworkInterfacesCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
+			}, nil)
 			if err != nil {
 				return InterfacesClientListCloudServiceNetworkInterfacesResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return InterfacesClientListCloudServiceNetworkInterfacesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listCloudServiceNetworkInterfacesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -703,7 +748,7 @@ func (client *InterfacesClient) listCloudServiceNetworkInterfacesCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -721,7 +766,7 @@ func (client *InterfacesClient) listCloudServiceNetworkInterfacesHandleResponse(
 // NewListCloudServiceRoleInstanceNetworkInterfacesPager - Gets information about all network interfaces in a role instance
 // in a cloud service.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - cloudServiceName - The name of the cloud service.
 //   - roleInstanceName - The name of role instance.
@@ -733,25 +778,20 @@ func (client *InterfacesClient) NewListCloudServiceRoleInstanceNetworkInterfaces
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *InterfacesClientListCloudServiceRoleInstanceNetworkInterfacesResponse) (InterfacesClientListCloudServiceRoleInstanceNetworkInterfacesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCloudServiceRoleInstanceNetworkInterfacesCreateRequest(ctx, resourceGroupName, cloudServiceName, roleInstanceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return InterfacesClientListCloudServiceRoleInstanceNetworkInterfacesResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "InterfacesClient.NewListCloudServiceRoleInstanceNetworkInterfacesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCloudServiceRoleInstanceNetworkInterfacesCreateRequest(ctx, resourceGroupName, cloudServiceName, roleInstanceName, options)
+			}, nil)
 			if err != nil {
 				return InterfacesClientListCloudServiceRoleInstanceNetworkInterfacesResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return InterfacesClientListCloudServiceRoleInstanceNetworkInterfacesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listCloudServiceRoleInstanceNetworkInterfacesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -779,7 +819,7 @@ func (client *InterfacesClient) listCloudServiceRoleInstanceNetworkInterfacesCre
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -797,7 +837,7 @@ func (client *InterfacesClient) listCloudServiceRoleInstanceNetworkInterfacesHan
 // BeginListEffectiveNetworkSecurityGroups - Gets all network security groups applied to a network interface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - options - InterfacesClientBeginListEffectiveNetworkSecurityGroupsOptions contains the optional parameters for the InterfacesClient.BeginListEffectiveNetworkSecurityGroups
@@ -808,31 +848,41 @@ func (client *InterfacesClient) BeginListEffectiveNetworkSecurityGroups(ctx cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfacesClientListEffectiveNetworkSecurityGroupsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfacesClientListEffectiveNetworkSecurityGroupsResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[InterfacesClientListEffectiveNetworkSecurityGroupsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[InterfacesClientListEffectiveNetworkSecurityGroupsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // ListEffectiveNetworkSecurityGroups - Gets all network security groups applied to a network interface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *InterfacesClient) listEffectiveNetworkSecurityGroups(ctx context.Context, resourceGroupName string, networkInterfaceName string, options *InterfacesClientBeginListEffectiveNetworkSecurityGroupsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "InterfacesClient.BeginListEffectiveNetworkSecurityGroups"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listEffectiveNetworkSecurityGroupsCreateRequest(ctx, resourceGroupName, networkInterfaceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listEffectiveNetworkSecurityGroupsCreateRequest creates the ListEffectiveNetworkSecurityGroups request.
@@ -855,7 +905,7 @@ func (client *InterfacesClient) listEffectiveNetworkSecurityGroupsCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -877,25 +927,20 @@ func (client *InterfacesClient) NewListVirtualMachineScaleSetIPConfigurationsPag
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *InterfacesClientListVirtualMachineScaleSetIPConfigurationsResponse) (InterfacesClientListVirtualMachineScaleSetIPConfigurationsResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listVirtualMachineScaleSetIPConfigurationsCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, virtualmachineIndex, networkInterfaceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return InterfacesClientListVirtualMachineScaleSetIPConfigurationsResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "InterfacesClient.NewListVirtualMachineScaleSetIPConfigurationsPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listVirtualMachineScaleSetIPConfigurationsCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, virtualmachineIndex, networkInterfaceName, options)
+			}, nil)
 			if err != nil {
 				return InterfacesClientListVirtualMachineScaleSetIPConfigurationsResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return InterfacesClientListVirtualMachineScaleSetIPConfigurationsResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listVirtualMachineScaleSetIPConfigurationsHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -958,25 +1003,20 @@ func (client *InterfacesClient) NewListVirtualMachineScaleSetNetworkInterfacesPa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *InterfacesClientListVirtualMachineScaleSetNetworkInterfacesResponse) (InterfacesClientListVirtualMachineScaleSetNetworkInterfacesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listVirtualMachineScaleSetNetworkInterfacesCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "InterfacesClient.NewListVirtualMachineScaleSetNetworkInterfacesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listVirtualMachineScaleSetNetworkInterfacesCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, options)
+			}, nil)
 			if err != nil {
 				return InterfacesClientListVirtualMachineScaleSetNetworkInterfacesResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return InterfacesClientListVirtualMachineScaleSetNetworkInterfacesResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return InterfacesClientListVirtualMachineScaleSetNetworkInterfacesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listVirtualMachineScaleSetNetworkInterfacesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -1030,25 +1070,20 @@ func (client *InterfacesClient) NewListVirtualMachineScaleSetVMNetworkInterfaces
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *InterfacesClientListVirtualMachineScaleSetVMNetworkInterfacesResponse) (InterfacesClientListVirtualMachineScaleSetVMNetworkInterfacesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listVirtualMachineScaleSetVMNetworkInterfacesCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, virtualmachineIndex, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return InterfacesClientListVirtualMachineScaleSetVMNetworkInterfacesResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "InterfacesClient.NewListVirtualMachineScaleSetVMNetworkInterfacesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listVirtualMachineScaleSetVMNetworkInterfacesCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, virtualmachineIndex, options)
+			}, nil)
 			if err != nil {
 				return InterfacesClientListVirtualMachineScaleSetVMNetworkInterfacesResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return InterfacesClientListVirtualMachineScaleSetVMNetworkInterfacesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listVirtualMachineScaleSetVMNetworkInterfacesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -1094,24 +1129,31 @@ func (client *InterfacesClient) listVirtualMachineScaleSetVMNetworkInterfacesHan
 // UpdateTags - Updates a network interface tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - parameters - Parameters supplied to update network interface tags.
 //   - options - InterfacesClientUpdateTagsOptions contains the optional parameters for the InterfacesClient.UpdateTags method.
 func (client *InterfacesClient) UpdateTags(ctx context.Context, resourceGroupName string, networkInterfaceName string, parameters TagsObject, options *InterfacesClientUpdateTagsOptions) (InterfacesClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "InterfacesClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, networkInterfaceName, parameters, options)
 	if err != nil {
 		return InterfacesClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return InterfacesClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return InterfacesClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return InterfacesClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -1134,10 +1176,13 @@ func (client *InterfacesClient) updateTagsCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfacetapconfigurations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfacetapconfigurations_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfacetapconfigurations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfacetapconfigurations_client.go
index 59818413bda..fdff9756b2b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/interfacetapconfigurations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/interfacetapconfigurations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type InterfaceTapConfigurationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewInterfaceTapConfigurationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*InterfaceTapConfigurationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".InterfaceTapConfigurationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewInterfaceTapConfigurationsClient(subscriptionID string, credential azcor
 // BeginCreateOrUpdate - Creates or updates a Tap configuration in the specified NetworkInterface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - tapConfigurationName - The name of the tap configuration.
@@ -61,31 +60,41 @@ func (client *InterfaceTapConfigurationsClient) BeginCreateOrUpdate(ctx context.
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfaceTapConfigurationsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfaceTapConfigurationsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[InterfaceTapConfigurationsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[InterfaceTapConfigurationsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a Tap configuration in the specified NetworkInterface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *InterfaceTapConfigurationsClient) createOrUpdate(ctx context.Context, resourceGroupName string, networkInterfaceName string, tapConfigurationName string, tapConfigurationParameters InterfaceTapConfiguration, options *InterfaceTapConfigurationsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "InterfaceTapConfigurationsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkInterfaceName, tapConfigurationName, tapConfigurationParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *InterfaceTapConfigurationsClient) createOrUpdateCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, tapConfigurationParameters)
+	if err := runtime.MarshalAsJSON(req, tapConfigurationParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified tap configuration from the NetworkInterface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - tapConfigurationName - The name of the tap configuration.
@@ -133,31 +145,41 @@ func (client *InterfaceTapConfigurationsClient) BeginDelete(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfaceTapConfigurationsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[InterfaceTapConfigurationsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[InterfaceTapConfigurationsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[InterfaceTapConfigurationsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified tap configuration from the NetworkInterface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *InterfaceTapConfigurationsClient) deleteOperation(ctx context.Context, resourceGroupName string, networkInterfaceName string, tapConfigurationName string, options *InterfaceTapConfigurationsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "InterfaceTapConfigurationsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkInterfaceName, tapConfigurationName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *InterfaceTapConfigurationsClient) deleteCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *InterfaceTapConfigurationsClient) deleteCreateRequest(ctx context.
 // Get - Get the specified tap configuration on a network interface.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - tapConfigurationName - The name of the tap configuration.
 //   - options - InterfaceTapConfigurationsClientGetOptions contains the optional parameters for the InterfaceTapConfigurationsClient.Get
 //     method.
 func (client *InterfaceTapConfigurationsClient) Get(ctx context.Context, resourceGroupName string, networkInterfaceName string, tapConfigurationName string, options *InterfaceTapConfigurationsClientGetOptions) (InterfaceTapConfigurationsClientGetResponse, error) {
+	var err error
+	const operationName = "InterfaceTapConfigurationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkInterfaceName, tapConfigurationName, options)
 	if err != nil {
 		return InterfaceTapConfigurationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return InterfaceTapConfigurationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return InterfaceTapConfigurationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return InterfaceTapConfigurationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *InterfaceTapConfigurationsClient) getCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *InterfaceTapConfigurationsClient) getHandleResponse(resp *http.Res
 
 // NewListPager - Get all Tap configurations in a network interface.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkInterfaceName - The name of the network interface.
 //   - options - InterfaceTapConfigurationsClientListOptions contains the optional parameters for the InterfaceTapConfigurationsClient.NewListPager
@@ -266,25 +295,20 @@ func (client *InterfaceTapConfigurationsClient) NewListPager(resourceGroupName s
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *InterfaceTapConfigurationsClientListResponse) (InterfaceTapConfigurationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkInterfaceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return InterfaceTapConfigurationsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "InterfaceTapConfigurationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkInterfaceName, options)
+			}, nil)
 			if err != nil {
 				return InterfaceTapConfigurationsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return InterfaceTapConfigurationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *InterfaceTapConfigurationsClient) listCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ipallocations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ipallocations_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ipallocations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ipallocations_client.go
index a629a748c83..3aff2a84d90 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ipallocations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ipallocations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type IPAllocationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewIPAllocationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*IPAllocationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".IPAllocationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewIPAllocationsClient(subscriptionID string, credential azcore.TokenCreden
 // BeginCreateOrUpdate - Creates or updates an IpAllocation in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ipAllocationName - The name of the IpAllocation.
 //   - parameters - Parameters supplied to the create or update virtual network operation.
@@ -60,31 +59,41 @@ func (client *IPAllocationsClient) BeginCreateOrUpdate(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[IPAllocationsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[IPAllocationsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[IPAllocationsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[IPAllocationsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates an IpAllocation in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *IPAllocationsClient) createOrUpdate(ctx context.Context, resourceGroupName string, ipAllocationName string, parameters IPAllocation, options *IPAllocationsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "IPAllocationsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, ipAllocationName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *IPAllocationsClient) createOrUpdateCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified IpAllocation.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ipAllocationName - The name of the IpAllocation.
 //   - options - IPAllocationsClientBeginDeleteOptions contains the optional parameters for the IPAllocationsClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *IPAllocationsClient) BeginDelete(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[IPAllocationsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[IPAllocationsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[IPAllocationsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[IPAllocationsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified IpAllocation.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *IPAllocationsClient) deleteOperation(ctx context.Context, resourceGroupName string, ipAllocationName string, options *IPAllocationsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "IPAllocationsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, ipAllocationName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *IPAllocationsClient) deleteCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *IPAllocationsClient) deleteCreateRequest(ctx context.Context, reso
 // Get - Gets the specified IpAllocation by resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ipAllocationName - The name of the IpAllocation.
 //   - options - IPAllocationsClientGetOptions contains the optional parameters for the IPAllocationsClient.Get method.
 func (client *IPAllocationsClient) Get(ctx context.Context, resourceGroupName string, ipAllocationName string, options *IPAllocationsClientGetOptions) (IPAllocationsClientGetResponse, error) {
+	var err error
+	const operationName = "IPAllocationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, ipAllocationName, options)
 	if err != nil {
 		return IPAllocationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return IPAllocationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return IPAllocationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return IPAllocationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *IPAllocationsClient) getCreateRequest(ctx context.Context, resourc
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -242,7 +271,7 @@ func (client *IPAllocationsClient) getHandleResponse(resp *http.Response) (IPAll
 
 // NewListPager - Gets all IpAllocations in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - IPAllocationsClientListOptions contains the optional parameters for the IPAllocationsClient.NewListPager method.
 func (client *IPAllocationsClient) NewListPager(options *IPAllocationsClientListOptions) *runtime.Pager[IPAllocationsClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[IPAllocationsClientListResponse]{
@@ -250,25 +279,20 @@ func (client *IPAllocationsClient) NewListPager(options *IPAllocationsClientList
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *IPAllocationsClientListResponse) (IPAllocationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return IPAllocationsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "IPAllocationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return IPAllocationsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return IPAllocationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -284,7 +308,7 @@ func (client *IPAllocationsClient) listCreateRequest(ctx context.Context, option
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -301,7 +325,7 @@ func (client *IPAllocationsClient) listHandleResponse(resp *http.Response) (IPAl
 
 // NewListByResourceGroupPager - Gets all IpAllocations in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - IPAllocationsClientListByResourceGroupOptions contains the optional parameters for the IPAllocationsClient.NewListByResourceGroupPager
 //     method.
@@ -311,25 +335,20 @@ func (client *IPAllocationsClient) NewListByResourceGroupPager(resourceGroupName
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *IPAllocationsClientListByResourceGroupResponse) (IPAllocationsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return IPAllocationsClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "IPAllocationsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return IPAllocationsClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return IPAllocationsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -349,7 +368,7 @@ func (client *IPAllocationsClient) listByResourceGroupCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -367,25 +386,32 @@ func (client *IPAllocationsClient) listByResourceGroupHandleResponse(resp *http.
 // UpdateTags - Updates a IpAllocation tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ipAllocationName - The name of the IpAllocation.
 //   - parameters - Parameters supplied to update IpAllocation tags.
 //   - options - IPAllocationsClientUpdateTagsOptions contains the optional parameters for the IPAllocationsClient.UpdateTags
 //     method.
 func (client *IPAllocationsClient) UpdateTags(ctx context.Context, resourceGroupName string, ipAllocationName string, parameters TagsObject, options *IPAllocationsClientUpdateTagsOptions) (IPAllocationsClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "IPAllocationsClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, ipAllocationName, parameters, options)
 	if err != nil {
 		return IPAllocationsClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return IPAllocationsClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return IPAllocationsClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return IPAllocationsClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -408,10 +434,13 @@ func (client *IPAllocationsClient) updateTagsCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ipgroups_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ipgroups_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ipgroups_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ipgroups_client.go
index f1135d06a53..e64510aa57e 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/ipgroups_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/ipgroups_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type IPGroupsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewIPGroupsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*IPGroupsClient, error) {
-	cl, err := arm.NewClient(moduleName+".IPGroupsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewIPGroupsClient(subscriptionID string, credential azcore.TokenCredential,
 // BeginCreateOrUpdate - Creates or updates an ipGroups in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ipGroupsName - The name of the ipGroups.
 //   - parameters - Parameters supplied to the create or update IpGroups operation.
@@ -60,31 +59,41 @@ func (client *IPGroupsClient) BeginCreateOrUpdate(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[IPGroupsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[IPGroupsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[IPGroupsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[IPGroupsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates an ipGroups in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *IPGroupsClient) createOrUpdate(ctx context.Context, resourceGroupName string, ipGroupsName string, parameters IPGroup, options *IPGroupsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "IPGroupsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, ipGroupsName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *IPGroupsClient) createOrUpdateCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified ipGroups.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ipGroupsName - The name of the ipGroups.
 //   - options - IPGroupsClientBeginDeleteOptions contains the optional parameters for the IPGroupsClient.BeginDelete method.
@@ -126,31 +138,41 @@ func (client *IPGroupsClient) BeginDelete(ctx context.Context, resourceGroupName
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[IPGroupsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[IPGroupsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[IPGroupsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[IPGroupsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified ipGroups.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *IPGroupsClient) deleteOperation(ctx context.Context, resourceGroupName string, ipGroupsName string, options *IPGroupsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "IPGroupsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, ipGroupsName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -173,7 +195,7 @@ func (client *IPGroupsClient) deleteCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -182,23 +204,30 @@ func (client *IPGroupsClient) deleteCreateRequest(ctx context.Context, resourceG
 // Get - Gets the specified ipGroups.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ipGroupsName - The name of the ipGroups.
 //   - options - IPGroupsClientGetOptions contains the optional parameters for the IPGroupsClient.Get method.
 func (client *IPGroupsClient) Get(ctx context.Context, resourceGroupName string, ipGroupsName string, options *IPGroupsClientGetOptions) (IPGroupsClientGetResponse, error) {
+	var err error
+	const operationName = "IPGroupsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, ipGroupsName, options)
 	if err != nil {
 		return IPGroupsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return IPGroupsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return IPGroupsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return IPGroupsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -221,7 +250,7 @@ func (client *IPGroupsClient) getCreateRequest(ctx context.Context, resourceGrou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -241,7 +270,7 @@ func (client *IPGroupsClient) getHandleResponse(resp *http.Response) (IPGroupsCl
 
 // NewListPager - Gets all IpGroups in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - IPGroupsClientListOptions contains the optional parameters for the IPGroupsClient.NewListPager method.
 func (client *IPGroupsClient) NewListPager(options *IPGroupsClientListOptions) *runtime.Pager[IPGroupsClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[IPGroupsClientListResponse]{
@@ -249,25 +278,20 @@ func (client *IPGroupsClient) NewListPager(options *IPGroupsClientListOptions) *
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *IPGroupsClientListResponse) (IPGroupsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return IPGroupsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "IPGroupsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return IPGroupsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return IPGroupsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -283,7 +307,7 @@ func (client *IPGroupsClient) listCreateRequest(ctx context.Context, options *IP
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -300,7 +324,7 @@ func (client *IPGroupsClient) listHandleResponse(resp *http.Response) (IPGroupsC
 
 // NewListByResourceGroupPager - Gets all IpGroups in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - IPGroupsClientListByResourceGroupOptions contains the optional parameters for the IPGroupsClient.NewListByResourceGroupPager
 //     method.
@@ -310,25 +334,20 @@ func (client *IPGroupsClient) NewListByResourceGroupPager(resourceGroupName stri
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *IPGroupsClientListByResourceGroupResponse) (IPGroupsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return IPGroupsClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "IPGroupsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return IPGroupsClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return IPGroupsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -348,7 +367,7 @@ func (client *IPGroupsClient) listByResourceGroupCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -366,24 +385,31 @@ func (client *IPGroupsClient) listByResourceGroupHandleResponse(resp *http.Respo
 // UpdateGroups - Updates tags of an IpGroups resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - ipGroupsName - The name of the ipGroups.
 //   - parameters - Parameters supplied to the update ipGroups operation.
 //   - options - IPGroupsClientUpdateGroupsOptions contains the optional parameters for the IPGroupsClient.UpdateGroups method.
 func (client *IPGroupsClient) UpdateGroups(ctx context.Context, resourceGroupName string, ipGroupsName string, parameters TagsObject, options *IPGroupsClientUpdateGroupsOptions) (IPGroupsClientUpdateGroupsResponse, error) {
+	var err error
+	const operationName = "IPGroupsClient.UpdateGroups"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateGroupsCreateRequest(ctx, resourceGroupName, ipGroupsName, parameters, options)
 	if err != nil {
 		return IPGroupsClientUpdateGroupsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return IPGroupsClientUpdateGroupsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return IPGroupsClientUpdateGroupsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return IPGroupsClientUpdateGroupsResponse{}, err
 	}
-	return client.updateGroupsHandleResponse(resp)
+	resp, err := client.updateGroupsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateGroupsCreateRequest creates the UpdateGroups request.
@@ -406,10 +432,13 @@ func (client *IPGroupsClient) updateGroupsCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateGroupsHandleResponse handles the UpdateGroups response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerbackendaddresspools_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerbackendaddresspools_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerbackendaddresspools_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerbackendaddresspools_client.go
index 5f16f4a96da..f0c7b034f03 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerbackendaddresspools_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerbackendaddresspools_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type LoadBalancerBackendAddressPoolsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewLoadBalancerBackendAddressPoolsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*LoadBalancerBackendAddressPoolsClient, error) {
-	cl, err := arm.NewClient(moduleName+".LoadBalancerBackendAddressPoolsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewLoadBalancerBackendAddressPoolsClient(subscriptionID string, credential
 // BeginCreateOrUpdate - Creates or updates a load balancer backend address pool.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - backendAddressPoolName - The name of the backend address pool.
@@ -61,31 +60,41 @@ func (client *LoadBalancerBackendAddressPoolsClient) BeginCreateOrUpdate(ctx con
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancerBackendAddressPoolsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancerBackendAddressPoolsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[LoadBalancerBackendAddressPoolsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[LoadBalancerBackendAddressPoolsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a load balancer backend address pool.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *LoadBalancerBackendAddressPoolsClient) createOrUpdate(ctx context.Context, resourceGroupName string, loadBalancerName string, backendAddressPoolName string, parameters BackendAddressPool, options *LoadBalancerBackendAddressPoolsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "LoadBalancerBackendAddressPoolsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, loadBalancerName, backendAddressPoolName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *LoadBalancerBackendAddressPoolsClient) createOrUpdateCreateRequest
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified load balancer backend address pool.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - backendAddressPoolName - The name of the backend address pool.
@@ -133,31 +145,41 @@ func (client *LoadBalancerBackendAddressPoolsClient) BeginDelete(ctx context.Con
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancerBackendAddressPoolsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancerBackendAddressPoolsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[LoadBalancerBackendAddressPoolsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[LoadBalancerBackendAddressPoolsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified load balancer backend address pool.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *LoadBalancerBackendAddressPoolsClient) deleteOperation(ctx context.Context, resourceGroupName string, loadBalancerName string, backendAddressPoolName string, options *LoadBalancerBackendAddressPoolsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "LoadBalancerBackendAddressPoolsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, loadBalancerName, backendAddressPoolName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *LoadBalancerBackendAddressPoolsClient) deleteCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *LoadBalancerBackendAddressPoolsClient) deleteCreateRequest(ctx con
 // Get - Gets load balancer backend address pool.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - backendAddressPoolName - The name of the backend address pool.
 //   - options - LoadBalancerBackendAddressPoolsClientGetOptions contains the optional parameters for the LoadBalancerBackendAddressPoolsClient.Get
 //     method.
 func (client *LoadBalancerBackendAddressPoolsClient) Get(ctx context.Context, resourceGroupName string, loadBalancerName string, backendAddressPoolName string, options *LoadBalancerBackendAddressPoolsClientGetOptions) (LoadBalancerBackendAddressPoolsClientGetResponse, error) {
+	var err error
+	const operationName = "LoadBalancerBackendAddressPoolsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, loadBalancerName, backendAddressPoolName, options)
 	if err != nil {
 		return LoadBalancerBackendAddressPoolsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return LoadBalancerBackendAddressPoolsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return LoadBalancerBackendAddressPoolsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return LoadBalancerBackendAddressPoolsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *LoadBalancerBackendAddressPoolsClient) getCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *LoadBalancerBackendAddressPoolsClient) getHandleResponse(resp *htt
 
 // NewListPager - Gets all the load balancer backed address pools.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - options - LoadBalancerBackendAddressPoolsClientListOptions contains the optional parameters for the LoadBalancerBackendAddressPoolsClient.NewListPager
@@ -266,25 +295,20 @@ func (client *LoadBalancerBackendAddressPoolsClient) NewListPager(resourceGroupN
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *LoadBalancerBackendAddressPoolsClientListResponse) (LoadBalancerBackendAddressPoolsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return LoadBalancerBackendAddressPoolsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "LoadBalancerBackendAddressPoolsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
+			}, nil)
 			if err != nil {
 				return LoadBalancerBackendAddressPoolsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return LoadBalancerBackendAddressPoolsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *LoadBalancerBackendAddressPoolsClient) listCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerfrontendipconfigurations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerfrontendipconfigurations_client.go
similarity index 86%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerfrontendipconfigurations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerfrontendipconfigurations_client.go
index 38c18105901..8d996375c7f 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerfrontendipconfigurations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerfrontendipconfigurations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type LoadBalancerFrontendIPConfigurationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewLoadBalancerFrontendIPConfigurationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*LoadBalancerFrontendIPConfigurationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".LoadBalancerFrontendIPConfigurationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewLoadBalancerFrontendIPConfigurationsClient(subscriptionID string, creden
 // Get - Gets load balancer frontend IP configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - frontendIPConfigurationName - The name of the frontend IP configuration.
 //   - options - LoadBalancerFrontendIPConfigurationsClientGetOptions contains the optional parameters for the LoadBalancerFrontendIPConfigurationsClient.Get
 //     method.
 func (client *LoadBalancerFrontendIPConfigurationsClient) Get(ctx context.Context, resourceGroupName string, loadBalancerName string, frontendIPConfigurationName string, options *LoadBalancerFrontendIPConfigurationsClientGetOptions) (LoadBalancerFrontendIPConfigurationsClientGetResponse, error) {
+	var err error
+	const operationName = "LoadBalancerFrontendIPConfigurationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, loadBalancerName, frontendIPConfigurationName, options)
 	if err != nil {
 		return LoadBalancerFrontendIPConfigurationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return LoadBalancerFrontendIPConfigurationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return LoadBalancerFrontendIPConfigurationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return LoadBalancerFrontendIPConfigurationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -93,7 +99,7 @@ func (client *LoadBalancerFrontendIPConfigurationsClient) getCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -110,7 +116,7 @@ func (client *LoadBalancerFrontendIPConfigurationsClient) getHandleResponse(resp
 
 // NewListPager - Gets all the load balancer frontend IP configurations.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - options - LoadBalancerFrontendIPConfigurationsClientListOptions contains the optional parameters for the LoadBalancerFrontendIPConfigurationsClient.NewListPager
@@ -121,25 +127,20 @@ func (client *LoadBalancerFrontendIPConfigurationsClient) NewListPager(resourceG
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *LoadBalancerFrontendIPConfigurationsClientListResponse) (LoadBalancerFrontendIPConfigurationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "LoadBalancerFrontendIPConfigurationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
+			}, nil)
 			if err != nil {
 				return LoadBalancerFrontendIPConfigurationsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return LoadBalancerFrontendIPConfigurationsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return LoadBalancerFrontendIPConfigurationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -163,7 +164,7 @@ func (client *LoadBalancerFrontendIPConfigurationsClient) listCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerloadbalancingrules_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerloadbalancingrules_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerloadbalancingrules_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerloadbalancingrules_client.go
index ca40f46b6ed..2e30390961b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerloadbalancingrules_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerloadbalancingrules_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type LoadBalancerLoadBalancingRulesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewLoadBalancerLoadBalancingRulesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*LoadBalancerLoadBalancingRulesClient, error) {
-	cl, err := arm.NewClient(moduleName+".LoadBalancerLoadBalancingRulesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewLoadBalancerLoadBalancingRulesClient(subscriptionID string, credential a
 // Get - Gets the specified load balancer load balancing rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - loadBalancingRuleName - The name of the load balancing rule.
 //   - options - LoadBalancerLoadBalancingRulesClientGetOptions contains the optional parameters for the LoadBalancerLoadBalancingRulesClient.Get
 //     method.
 func (client *LoadBalancerLoadBalancingRulesClient) Get(ctx context.Context, resourceGroupName string, loadBalancerName string, loadBalancingRuleName string, options *LoadBalancerLoadBalancingRulesClientGetOptions) (LoadBalancerLoadBalancingRulesClientGetResponse, error) {
+	var err error
+	const operationName = "LoadBalancerLoadBalancingRulesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, loadBalancerName, loadBalancingRuleName, options)
 	if err != nil {
 		return LoadBalancerLoadBalancingRulesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return LoadBalancerLoadBalancingRulesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return LoadBalancerLoadBalancingRulesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return LoadBalancerLoadBalancingRulesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -93,7 +99,7 @@ func (client *LoadBalancerLoadBalancingRulesClient) getCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -110,7 +116,7 @@ func (client *LoadBalancerLoadBalancingRulesClient) getHandleResponse(resp *http
 
 // NewListPager - Gets all the load balancing rules in a load balancer.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - options - LoadBalancerLoadBalancingRulesClientListOptions contains the optional parameters for the LoadBalancerLoadBalancingRulesClient.NewListPager
@@ -121,25 +127,20 @@ func (client *LoadBalancerLoadBalancingRulesClient) NewListPager(resourceGroupNa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *LoadBalancerLoadBalancingRulesClientListResponse) (LoadBalancerLoadBalancingRulesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "LoadBalancerLoadBalancingRulesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
+			}, nil)
 			if err != nil {
 				return LoadBalancerLoadBalancingRulesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return LoadBalancerLoadBalancingRulesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return LoadBalancerLoadBalancingRulesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -163,7 +164,7 @@ func (client *LoadBalancerLoadBalancingRulesClient) listCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancernetworkinterfaces_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancernetworkinterfaces_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancernetworkinterfaces_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancernetworkinterfaces_client.go
index 39acf075b03..379161ac52b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancernetworkinterfaces_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancernetworkinterfaces_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type LoadBalancerNetworkInterfacesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewLoadBalancerNetworkInterfacesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*LoadBalancerNetworkInterfacesClient, error) {
-	cl, err := arm.NewClient(moduleName+".LoadBalancerNetworkInterfacesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewLoadBalancerNetworkInterfacesClient(subscriptionID string, credential az
 
 // NewListPager - Gets associated load balancer network interfaces.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - options - LoadBalancerNetworkInterfacesClientListOptions contains the optional parameters for the LoadBalancerNetworkInterfacesClient.NewListPager
@@ -58,25 +57,20 @@ func (client *LoadBalancerNetworkInterfacesClient) NewListPager(resourceGroupNam
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *LoadBalancerNetworkInterfacesClientListResponse) (LoadBalancerNetworkInterfacesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "LoadBalancerNetworkInterfacesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
+			}, nil)
 			if err != nil {
 				return LoadBalancerNetworkInterfacesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return LoadBalancerNetworkInterfacesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return LoadBalancerNetworkInterfacesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -100,7 +94,7 @@ func (client *LoadBalancerNetworkInterfacesClient) listCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalanceroutboundrules_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalanceroutboundrules_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalanceroutboundrules_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalanceroutboundrules_client.go
index 0deea06b898..1c4826487bb 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalanceroutboundrules_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalanceroutboundrules_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type LoadBalancerOutboundRulesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewLoadBalancerOutboundRulesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*LoadBalancerOutboundRulesClient, error) {
-	cl, err := arm.NewClient(moduleName+".LoadBalancerOutboundRulesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewLoadBalancerOutboundRulesClient(subscriptionID string, credential azcore
 // Get - Gets the specified load balancer outbound rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - outboundRuleName - The name of the outbound rule.
 //   - options - LoadBalancerOutboundRulesClientGetOptions contains the optional parameters for the LoadBalancerOutboundRulesClient.Get
 //     method.
 func (client *LoadBalancerOutboundRulesClient) Get(ctx context.Context, resourceGroupName string, loadBalancerName string, outboundRuleName string, options *LoadBalancerOutboundRulesClientGetOptions) (LoadBalancerOutboundRulesClientGetResponse, error) {
+	var err error
+	const operationName = "LoadBalancerOutboundRulesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, loadBalancerName, outboundRuleName, options)
 	if err != nil {
 		return LoadBalancerOutboundRulesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return LoadBalancerOutboundRulesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return LoadBalancerOutboundRulesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return LoadBalancerOutboundRulesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -93,7 +99,7 @@ func (client *LoadBalancerOutboundRulesClient) getCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -110,7 +116,7 @@ func (client *LoadBalancerOutboundRulesClient) getHandleResponse(resp *http.Resp
 
 // NewListPager - Gets all the outbound rules in a load balancer.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - options - LoadBalancerOutboundRulesClientListOptions contains the optional parameters for the LoadBalancerOutboundRulesClient.NewListPager
@@ -121,25 +127,20 @@ func (client *LoadBalancerOutboundRulesClient) NewListPager(resourceGroupName st
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *LoadBalancerOutboundRulesClientListResponse) (LoadBalancerOutboundRulesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "LoadBalancerOutboundRulesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
+			}, nil)
 			if err != nil {
 				return LoadBalancerOutboundRulesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return LoadBalancerOutboundRulesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return LoadBalancerOutboundRulesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -163,7 +164,7 @@ func (client *LoadBalancerOutboundRulesClient) listCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerprobes_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerprobes_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerprobes_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerprobes_client.go
index bfa80c7ca60..8ab5b64e814 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancerprobes_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancerprobes_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type LoadBalancerProbesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewLoadBalancerProbesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*LoadBalancerProbesClient, error) {
-	cl, err := arm.NewClient(moduleName+".LoadBalancerProbesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,24 +47,31 @@ func NewLoadBalancerProbesClient(subscriptionID string, credential azcore.TokenC
 // Get - Gets load balancer probe.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - probeName - The name of the probe.
 //   - options - LoadBalancerProbesClientGetOptions contains the optional parameters for the LoadBalancerProbesClient.Get method.
 func (client *LoadBalancerProbesClient) Get(ctx context.Context, resourceGroupName string, loadBalancerName string, probeName string, options *LoadBalancerProbesClientGetOptions) (LoadBalancerProbesClientGetResponse, error) {
+	var err error
+	const operationName = "LoadBalancerProbesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, loadBalancerName, probeName, options)
 	if err != nil {
 		return LoadBalancerProbesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return LoadBalancerProbesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return LoadBalancerProbesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return LoadBalancerProbesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -92,7 +98,7 @@ func (client *LoadBalancerProbesClient) getCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -109,7 +115,7 @@ func (client *LoadBalancerProbesClient) getHandleResponse(resp *http.Response) (
 
 // NewListPager - Gets all the load balancer probes.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - options - LoadBalancerProbesClientListOptions contains the optional parameters for the LoadBalancerProbesClient.NewListPager
@@ -120,25 +126,20 @@ func (client *LoadBalancerProbesClient) NewListPager(resourceGroupName string, l
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *LoadBalancerProbesClientListResponse) (LoadBalancerProbesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "LoadBalancerProbesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
+			}, nil)
 			if err != nil {
 				return LoadBalancerProbesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return LoadBalancerProbesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return LoadBalancerProbesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -162,7 +163,7 @@ func (client *LoadBalancerProbesClient) listCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancers_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancers_client.go
similarity index 68%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancers_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancers_client.go
index 9060535fef9..3dc0f757c89 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/loadbalancers_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/loadbalancers_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type LoadBalancersClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewLoadBalancersClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*LoadBalancersClient, error) {
-	cl, err := arm.NewClient(moduleName+".LoadBalancersClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewLoadBalancersClient(subscriptionID string, credential azcore.TokenCreden
 // BeginCreateOrUpdate - Creates or updates a load balancer.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - parameters - Parameters supplied to the create or update load balancer operation.
@@ -60,31 +59,41 @@ func (client *LoadBalancersClient) BeginCreateOrUpdate(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancersClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancersClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[LoadBalancersClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[LoadBalancersClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a load balancer.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *LoadBalancersClient) createOrUpdate(ctx context.Context, resourceGroupName string, loadBalancerName string, parameters LoadBalancer, options *LoadBalancersClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "LoadBalancersClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, loadBalancerName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *LoadBalancersClient) createOrUpdateCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified load balancer.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - options - LoadBalancersClientBeginDeleteOptions contains the optional parameters for the LoadBalancersClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *LoadBalancersClient) BeginDelete(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancersClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancersClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[LoadBalancersClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[LoadBalancersClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified load balancer.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *LoadBalancersClient) deleteOperation(ctx context.Context, resourceGroupName string, loadBalancerName string, options *LoadBalancersClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "LoadBalancersClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *LoadBalancersClient) deleteCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *LoadBalancersClient) deleteCreateRequest(ctx context.Context, reso
 // Get - Gets the specified load balancer.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - options - LoadBalancersClientGetOptions contains the optional parameters for the LoadBalancersClient.Get method.
 func (client *LoadBalancersClient) Get(ctx context.Context, resourceGroupName string, loadBalancerName string, options *LoadBalancersClientGetOptions) (LoadBalancersClientGetResponse, error) {
+	var err error
+	const operationName = "LoadBalancersClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, loadBalancerName, options)
 	if err != nil {
 		return LoadBalancersClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return LoadBalancersClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return LoadBalancersClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return LoadBalancersClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *LoadBalancersClient) getCreateRequest(ctx context.Context, resourc
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -242,7 +271,7 @@ func (client *LoadBalancersClient) getHandleResponse(resp *http.Response) (LoadB
 
 // NewListPager - Gets all the load balancers in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - LoadBalancersClientListOptions contains the optional parameters for the LoadBalancersClient.NewListPager method.
 func (client *LoadBalancersClient) NewListPager(resourceGroupName string, options *LoadBalancersClientListOptions) *runtime.Pager[LoadBalancersClientListResponse] {
@@ -251,25 +280,20 @@ func (client *LoadBalancersClient) NewListPager(resourceGroupName string, option
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *LoadBalancersClientListResponse) (LoadBalancersClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return LoadBalancersClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "LoadBalancersClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return LoadBalancersClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return LoadBalancersClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -289,7 +313,7 @@ func (client *LoadBalancersClient) listCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -306,7 +330,7 @@ func (client *LoadBalancersClient) listHandleResponse(resp *http.Response) (Load
 
 // NewListAllPager - Gets all the load balancers in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - LoadBalancersClientListAllOptions contains the optional parameters for the LoadBalancersClient.NewListAllPager
 //     method.
 func (client *LoadBalancersClient) NewListAllPager(options *LoadBalancersClientListAllOptions) *runtime.Pager[LoadBalancersClientListAllResponse] {
@@ -315,25 +339,20 @@ func (client *LoadBalancersClient) NewListAllPager(options *LoadBalancersClientL
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *LoadBalancersClientListAllResponse) (LoadBalancersClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "LoadBalancersClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return LoadBalancersClientListAllResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return LoadBalancersClientListAllResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return LoadBalancersClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -349,7 +368,7 @@ func (client *LoadBalancersClient) listAllCreateRequest(ctx context.Context, opt
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -367,7 +386,7 @@ func (client *LoadBalancersClient) listAllHandleResponse(resp *http.Response) (L
 // BeginListInboundNatRulePortMappings - List of inbound NAT rule port mappings.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - groupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - backendPoolName - The name of the load balancer backend address pool.
@@ -380,31 +399,41 @@ func (client *LoadBalancersClient) BeginListInboundNatRulePortMappings(ctx conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancersClientListInboundNatRulePortMappingsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancersClientListInboundNatRulePortMappingsResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[LoadBalancersClientListInboundNatRulePortMappingsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[LoadBalancersClientListInboundNatRulePortMappingsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // ListInboundNatRulePortMappings - List of inbound NAT rule port mappings.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *LoadBalancersClient) listInboundNatRulePortMappings(ctx context.Context, groupName string, loadBalancerName string, backendPoolName string, parameters QueryInboundNatRulePortMappingRequest, options *LoadBalancersClientBeginListInboundNatRulePortMappingsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "LoadBalancersClient.BeginListInboundNatRulePortMappings"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listInboundNatRulePortMappingsCreateRequest(ctx, groupName, loadBalancerName, backendPoolName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listInboundNatRulePortMappingsCreateRequest creates the ListInboundNatRulePortMappings request.
@@ -431,16 +460,90 @@ func (client *LoadBalancersClient) listInboundNatRulePortMappingsCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
+}
+
+// MigrateToIPBased - Migrate load balancer to IP Based
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-05-01
+//   - groupName - The name of the resource group.
+//   - loadBalancerName - The name of the load balancer.
+//   - options - LoadBalancersClientMigrateToIPBasedOptions contains the optional parameters for the LoadBalancersClient.MigrateToIPBased
+//     method.
+func (client *LoadBalancersClient) MigrateToIPBased(ctx context.Context, groupName string, loadBalancerName string, options *LoadBalancersClientMigrateToIPBasedOptions) (LoadBalancersClientMigrateToIPBasedResponse, error) {
+	var err error
+	const operationName = "LoadBalancersClient.MigrateToIPBased"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	req, err := client.migrateToIPBasedCreateRequest(ctx, groupName, loadBalancerName, options)
+	if err != nil {
+		return LoadBalancersClientMigrateToIPBasedResponse{}, err
+	}
+	httpResp, err := client.internal.Pipeline().Do(req)
+	if err != nil {
+		return LoadBalancersClientMigrateToIPBasedResponse{}, err
+	}
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return LoadBalancersClientMigrateToIPBasedResponse{}, err
+	}
+	resp, err := client.migrateToIPBasedHandleResponse(httpResp)
+	return resp, err
+}
+
+// migrateToIPBasedCreateRequest creates the MigrateToIPBased request.
+func (client *LoadBalancersClient) migrateToIPBasedCreateRequest(ctx context.Context, groupName string, loadBalancerName string, options *LoadBalancersClientMigrateToIPBasedOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/loadBalancers/{loadBalancerName}/migrateToIpBased"
+	if groupName == "" {
+		return nil, errors.New("parameter groupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{groupName}", url.PathEscape(groupName))
+	if loadBalancerName == "" {
+		return nil, errors.New("parameter loadBalancerName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{loadBalancerName}", url.PathEscape(loadBalancerName))
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	req, err := runtime.NewRequest(ctx, http.MethodPost, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-05-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	if options != nil && options.Parameters != nil {
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
+	}
+	return req, nil
+}
+
+// migrateToIPBasedHandleResponse handles the MigrateToIPBased response.
+func (client *LoadBalancersClient) migrateToIPBasedHandleResponse(resp *http.Response) (LoadBalancersClientMigrateToIPBasedResponse, error) {
+	result := LoadBalancersClientMigrateToIPBasedResponse{}
+	if err := runtime.UnmarshalAsJSON(resp, &result.MigratedPools); err != nil {
+		return LoadBalancersClientMigrateToIPBasedResponse{}, err
+	}
+	return result, nil
 }
 
 // BeginSwapPublicIPAddresses - Swaps VIPs between two load balancers.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The region where load balancers are located at.
 //   - parameters - Parameters that define which VIPs should be swapped.
 //   - options - LoadBalancersClientBeginSwapPublicIPAddressesOptions contains the optional parameters for the LoadBalancersClient.BeginSwapPublicIPAddresses
@@ -451,31 +554,41 @@ func (client *LoadBalancersClient) BeginSwapPublicIPAddresses(ctx context.Contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancersClientSwapPublicIPAddressesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LoadBalancersClientSwapPublicIPAddressesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[LoadBalancersClientSwapPublicIPAddressesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[LoadBalancersClientSwapPublicIPAddressesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // SwapPublicIPAddresses - Swaps VIPs between two load balancers.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *LoadBalancersClient) swapPublicIPAddresses(ctx context.Context, location string, parameters LoadBalancerVipSwapRequest, options *LoadBalancersClientBeginSwapPublicIPAddressesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "LoadBalancersClient.BeginSwapPublicIPAddresses"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.swapPublicIPAddressesCreateRequest(ctx, location, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // swapPublicIPAddressesCreateRequest creates the SwapPublicIPAddresses request.
@@ -494,34 +607,44 @@ func (client *LoadBalancersClient) swapPublicIPAddressesCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // UpdateTags - Updates a load balancer tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - loadBalancerName - The name of the load balancer.
 //   - parameters - Parameters supplied to update load balancer tags.
 //   - options - LoadBalancersClientUpdateTagsOptions contains the optional parameters for the LoadBalancersClient.UpdateTags
 //     method.
 func (client *LoadBalancersClient) UpdateTags(ctx context.Context, resourceGroupName string, loadBalancerName string, parameters TagsObject, options *LoadBalancersClientUpdateTagsOptions) (LoadBalancersClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "LoadBalancersClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, loadBalancerName, parameters, options)
 	if err != nil {
 		return LoadBalancersClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return LoadBalancersClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return LoadBalancersClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return LoadBalancersClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -544,10 +667,13 @@ func (client *LoadBalancersClient) updateTagsCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/localnetworkgateways_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/localnetworkgateways_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/localnetworkgateways_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/localnetworkgateways_client.go
index b6dd37d9be8..9f5a5e7c163 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/localnetworkgateways_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/localnetworkgateways_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type LocalNetworkGatewaysClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewLocalNetworkGatewaysClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*LocalNetworkGatewaysClient, error) {
-	cl, err := arm.NewClient(moduleName+".LocalNetworkGatewaysClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewLocalNetworkGatewaysClient(subscriptionID string, credential azcore.Toke
 // BeginCreateOrUpdate - Creates or updates a local network gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - localNetworkGatewayName - The name of the local network gateway.
 //   - parameters - Parameters supplied to the create or update local network gateway operation.
@@ -60,31 +59,41 @@ func (client *LocalNetworkGatewaysClient) BeginCreateOrUpdate(ctx context.Contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LocalNetworkGatewaysClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LocalNetworkGatewaysClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[LocalNetworkGatewaysClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[LocalNetworkGatewaysClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a local network gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *LocalNetworkGatewaysClient) createOrUpdate(ctx context.Context, resourceGroupName string, localNetworkGatewayName string, parameters LocalNetworkGateway, options *LocalNetworkGatewaysClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "LocalNetworkGatewaysClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, localNetworkGatewayName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *LocalNetworkGatewaysClient) createOrUpdateCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified local network gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - localNetworkGatewayName - The name of the local network gateway.
 //   - options - LocalNetworkGatewaysClientBeginDeleteOptions contains the optional parameters for the LocalNetworkGatewaysClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *LocalNetworkGatewaysClient) BeginDelete(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LocalNetworkGatewaysClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[LocalNetworkGatewaysClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[LocalNetworkGatewaysClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[LocalNetworkGatewaysClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified local network gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *LocalNetworkGatewaysClient) deleteOperation(ctx context.Context, resourceGroupName string, localNetworkGatewayName string, options *LocalNetworkGatewaysClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "LocalNetworkGatewaysClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, localNetworkGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *LocalNetworkGatewaysClient) deleteCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,24 +205,31 @@ func (client *LocalNetworkGatewaysClient) deleteCreateRequest(ctx context.Contex
 // Get - Gets the specified local network gateway in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - localNetworkGatewayName - The name of the local network gateway.
 //   - options - LocalNetworkGatewaysClientGetOptions contains the optional parameters for the LocalNetworkGatewaysClient.Get
 //     method.
 func (client *LocalNetworkGatewaysClient) Get(ctx context.Context, resourceGroupName string, localNetworkGatewayName string, options *LocalNetworkGatewaysClientGetOptions) (LocalNetworkGatewaysClientGetResponse, error) {
+	var err error
+	const operationName = "LocalNetworkGatewaysClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, localNetworkGatewayName, options)
 	if err != nil {
 		return LocalNetworkGatewaysClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return LocalNetworkGatewaysClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return LocalNetworkGatewaysClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return LocalNetworkGatewaysClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -223,7 +252,7 @@ func (client *LocalNetworkGatewaysClient) getCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -240,7 +269,7 @@ func (client *LocalNetworkGatewaysClient) getHandleResponse(resp *http.Response)
 
 // NewListPager - Gets all the local network gateways in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - LocalNetworkGatewaysClientListOptions contains the optional parameters for the LocalNetworkGatewaysClient.NewListPager
 //     method.
@@ -250,25 +279,20 @@ func (client *LocalNetworkGatewaysClient) NewListPager(resourceGroupName string,
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *LocalNetworkGatewaysClientListResponse) (LocalNetworkGatewaysClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "LocalNetworkGatewaysClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return LocalNetworkGatewaysClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return LocalNetworkGatewaysClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return LocalNetworkGatewaysClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -288,7 +312,7 @@ func (client *LocalNetworkGatewaysClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -306,25 +330,32 @@ func (client *LocalNetworkGatewaysClient) listHandleResponse(resp *http.Response
 // UpdateTags - Updates a local network gateway tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - localNetworkGatewayName - The name of the local network gateway.
 //   - parameters - Parameters supplied to update local network gateway tags.
 //   - options - LocalNetworkGatewaysClientUpdateTagsOptions contains the optional parameters for the LocalNetworkGatewaysClient.UpdateTags
 //     method.
 func (client *LocalNetworkGatewaysClient) UpdateTags(ctx context.Context, resourceGroupName string, localNetworkGatewayName string, parameters TagsObject, options *LocalNetworkGatewaysClientUpdateTagsOptions) (LocalNetworkGatewaysClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "LocalNetworkGatewaysClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, localNetworkGatewayName, parameters, options)
 	if err != nil {
 		return LocalNetworkGatewaysClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return LocalNetworkGatewaysClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return LocalNetworkGatewaysClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return LocalNetworkGatewaysClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -347,10 +378,13 @@ func (client *LocalNetworkGatewaysClient) updateTagsCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/management_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/management_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/management_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/management_client.go
index 479c688fd57..2955b415a02 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/management_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/management_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type ManagementClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewManagementClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ManagementClient, error) {
-	cl, err := arm.NewClient(moduleName+".ManagementClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,24 +48,31 @@ func NewManagementClient(subscriptionID string, credential azcore.TokenCredentia
 // CheckDNSNameAvailability - Checks whether a domain name in the cloudapp.azure.com zone is available for use.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location of the domain name.
 //   - domainNameLabel - The domain name to be verified. It must conform to the following regular expression: ^[a-z][a-z0-9-]{1,61}[a-z0-9]$.
 //   - options - ManagementClientCheckDNSNameAvailabilityOptions contains the optional parameters for the ManagementClient.CheckDNSNameAvailability
 //     method.
 func (client *ManagementClient) CheckDNSNameAvailability(ctx context.Context, location string, domainNameLabel string, options *ManagementClientCheckDNSNameAvailabilityOptions) (ManagementClientCheckDNSNameAvailabilityResponse, error) {
+	var err error
+	const operationName = "ManagementClient.CheckDNSNameAvailability"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.checkDNSNameAvailabilityCreateRequest(ctx, location, domainNameLabel, options)
 	if err != nil {
 		return ManagementClientCheckDNSNameAvailabilityResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagementClientCheckDNSNameAvailabilityResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ManagementClientCheckDNSNameAvailabilityResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagementClientCheckDNSNameAvailabilityResponse{}, err
 	}
-	return client.checkDNSNameAvailabilityHandleResponse(resp)
+	resp, err := client.checkDNSNameAvailabilityHandleResponse(httpResp)
+	return resp, err
 }
 
 // checkDNSNameAvailabilityCreateRequest creates the CheckDNSNameAvailability request.
@@ -86,7 +92,7 @@ func (client *ManagementClient) checkDNSNameAvailabilityCreateRequest(ctx contex
 	}
 	reqQP := req.Raw().URL.Query()
 	reqQP.Set("domainNameLabel", domainNameLabel)
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -104,7 +110,7 @@ func (client *ManagementClient) checkDNSNameAvailabilityHandleResponse(resp *htt
 // BeginDeleteBastionShareableLink - Deletes the Bastion Shareable Links for all the VMs specified in the request.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - bastionHostName - The name of the Bastion Host.
 //   - bslRequest - Post request for all the Bastion Shareable Link endpoints.
@@ -116,31 +122,41 @@ func (client *ManagementClient) BeginDeleteBastionShareableLink(ctx context.Cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ManagementClientDeleteBastionShareableLinkResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ManagementClientDeleteBastionShareableLinkResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ManagementClientDeleteBastionShareableLinkResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ManagementClientDeleteBastionShareableLinkResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // DeleteBastionShareableLink - Deletes the Bastion Shareable Links for all the VMs specified in the request.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ManagementClient) deleteBastionShareableLink(ctx context.Context, resourceGroupName string, bastionHostName string, bslRequest BastionShareableLinkListRequest, options *ManagementClientBeginDeleteBastionShareableLinkOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ManagementClient.BeginDeleteBastionShareableLink"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteBastionShareableLinkCreateRequest(ctx, resourceGroupName, bastionHostName, bslRequest, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteBastionShareableLinkCreateRequest creates the DeleteBastionShareableLink request.
@@ -163,15 +179,18 @@ func (client *ManagementClient) deleteBastionShareableLinkCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, bslRequest)
+	if err := runtime.MarshalAsJSON(req, bslRequest); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // NewDisconnectActiveSessionsPager - Returns the list of currently active sessions on the Bastion.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - bastionHostName - The name of the Bastion Host.
 //   - sessionIDs - The list of sessionids to disconnect.
@@ -183,25 +202,20 @@ func (client *ManagementClient) NewDisconnectActiveSessionsPager(resourceGroupNa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ManagementClientDisconnectActiveSessionsResponse) (ManagementClientDisconnectActiveSessionsResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.disconnectActiveSessionsCreateRequest(ctx, resourceGroupName, bastionHostName, sessionIDs, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ManagementClientDisconnectActiveSessionsResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ManagementClient.NewDisconnectActiveSessionsPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.disconnectActiveSessionsCreateRequest(ctx, resourceGroupName, bastionHostName, sessionIDs, options)
+			}, nil)
 			if err != nil {
 				return ManagementClientDisconnectActiveSessionsResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ManagementClientDisconnectActiveSessionsResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.disconnectActiveSessionsHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -225,10 +239,13 @@ func (client *ManagementClient) disconnectActiveSessionsCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, sessionIDs)
+	if err := runtime.MarshalAsJSON(req, sessionIDs); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // disconnectActiveSessionsHandleResponse handles the DisconnectActiveSessions response.
@@ -243,23 +260,30 @@ func (client *ManagementClient) disconnectActiveSessionsHandleResponse(resp *htt
 // ExpressRouteProviderPort - Retrieves detail of a provider port.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - providerport - The name of the provider port.
 //   - options - ManagementClientExpressRouteProviderPortOptions contains the optional parameters for the ManagementClient.ExpressRouteProviderPort
 //     method.
 func (client *ManagementClient) ExpressRouteProviderPort(ctx context.Context, providerport string, options *ManagementClientExpressRouteProviderPortOptions) (ManagementClientExpressRouteProviderPortResponse, error) {
+	var err error
+	const operationName = "ManagementClient.ExpressRouteProviderPort"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.expressRouteProviderPortCreateRequest(ctx, providerport, options)
 	if err != nil {
 		return ManagementClientExpressRouteProviderPortResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagementClientExpressRouteProviderPortResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ManagementClientExpressRouteProviderPortResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagementClientExpressRouteProviderPortResponse{}, err
 	}
-	return client.expressRouteProviderPortHandleResponse(resp)
+	resp, err := client.expressRouteProviderPortHandleResponse(httpResp)
+	return resp, err
 }
 
 // expressRouteProviderPortCreateRequest creates the ExpressRouteProviderPort request.
@@ -278,7 +302,7 @@ func (client *ManagementClient) expressRouteProviderPortCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -297,7 +321,7 @@ func (client *ManagementClient) expressRouteProviderPortHandleResponse(resp *htt
 // and associated VpnServerConfiguration combination in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name.
 //   - virtualWANName - The name of the VirtualWAN whose associated VpnServerConfigurations is needed.
 //   - vpnClientParams - Parameters supplied to the generate VirtualWan VPN profile generation operation.
@@ -309,11 +333,15 @@ func (client *ManagementClient) BeginGeneratevirtualwanvpnserverconfigurationvpn
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ManagementClientGeneratevirtualwanvpnserverconfigurationvpnprofileResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ManagementClientGeneratevirtualwanvpnserverconfigurationvpnprofileResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ManagementClientGeneratevirtualwanvpnserverconfigurationvpnprofileResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ManagementClientGeneratevirtualwanvpnserverconfigurationvpnprofileResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -321,20 +349,26 @@ func (client *ManagementClient) BeginGeneratevirtualwanvpnserverconfigurationvpn
 // associated VpnServerConfiguration combination in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ManagementClient) generatevirtualwanvpnserverconfigurationvpnprofile(ctx context.Context, resourceGroupName string, virtualWANName string, vpnClientParams VirtualWanVPNProfileParameters, options *ManagementClientBeginGeneratevirtualwanvpnserverconfigurationvpnprofileOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ManagementClient.BeginGeneratevirtualwanvpnserverconfigurationvpnprofile"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.generatevirtualwanvpnserverconfigurationvpnprofileCreateRequest(ctx, resourceGroupName, virtualWANName, vpnClientParams, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // generatevirtualwanvpnserverconfigurationvpnprofileCreateRequest creates the Generatevirtualwanvpnserverconfigurationvpnprofile request.
@@ -357,15 +391,18 @@ func (client *ManagementClient) generatevirtualwanvpnserverconfigurationvpnprofi
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vpnClientParams)
+	if err := runtime.MarshalAsJSON(req, vpnClientParams); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginGetActiveSessions - Returns the list of currently active sessions on the Bastion.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - bastionHostName - The name of the Bastion Host.
 //   - options - ManagementClientBeginGetActiveSessionsOptions contains the optional parameters for the ManagementClient.BeginGetActiveSessions
@@ -376,52 +413,58 @@ func (client *ManagementClient) BeginGetActiveSessions(ctx context.Context, reso
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ManagementClientGetActiveSessionsResponse) (ManagementClientGetActiveSessionsResponse, error) {
-			req, err := runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			if err != nil {
-				return ManagementClientGetActiveSessionsResponse{}, err
-			}
-			resp, err := client.internal.Pipeline().Do(req)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ManagementClient.BeginGetActiveSessions")
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), *page.NextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.getActiveSessionsCreateRequest(ctx, resourceGroupName, bastionHostName, options)
+			}, nil)
 			if err != nil {
 				return ManagementClientGetActiveSessionsResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ManagementClientGetActiveSessionsResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.getActiveSessionsHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 	if options == nil || options.ResumeToken == "" {
 		resp, err := client.getActiveSessions(ctx, resourceGroupName, bastionHostName, options)
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[*runtime.Pager[ManagementClientGetActiveSessionsResponse]]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[*runtime.Pager[ManagementClientGetActiveSessionsResponse]]{
 			FinalStateVia: runtime.FinalStateViaLocation,
 			Response:      &pager,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
 		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[*runtime.Pager[ManagementClientGetActiveSessionsResponse]]{
 			Response: &pager,
+			Tracer:   client.internal.Tracer(),
 		})
 	}
 }
 
 // GetActiveSessions - Returns the list of currently active sessions on the Bastion.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ManagementClient) getActiveSessions(ctx context.Context, resourceGroupName string, bastionHostName string, options *ManagementClientBeginGetActiveSessionsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ManagementClient.BeginGetActiveSessions"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getActiveSessionsCreateRequest(ctx, resourceGroupName, bastionHostName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getActiveSessionsCreateRequest creates the GetActiveSessions request.
@@ -444,7 +487,7 @@ func (client *ManagementClient) getActiveSessionsCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -461,7 +504,7 @@ func (client *ManagementClient) getActiveSessionsHandleResponse(resp *http.Respo
 
 // NewGetBastionShareableLinkPager - Return the Bastion Shareable Links for all the VMs specified in the request.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - bastionHostName - The name of the Bastion Host.
 //   - bslRequest - Post request for all the Bastion Shareable Link endpoints.
@@ -473,25 +516,20 @@ func (client *ManagementClient) NewGetBastionShareableLinkPager(resourceGroupNam
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ManagementClientGetBastionShareableLinkResponse) (ManagementClientGetBastionShareableLinkResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.getBastionShareableLinkCreateRequest(ctx, resourceGroupName, bastionHostName, bslRequest, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ManagementClient.NewGetBastionShareableLinkPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.getBastionShareableLinkCreateRequest(ctx, resourceGroupName, bastionHostName, bslRequest, options)
+			}, nil)
 			if err != nil {
 				return ManagementClientGetBastionShareableLinkResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ManagementClientGetBastionShareableLinkResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ManagementClientGetBastionShareableLinkResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.getBastionShareableLinkHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -515,10 +553,13 @@ func (client *ManagementClient) getBastionShareableLinkCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, bslRequest)
+	if err := runtime.MarshalAsJSON(req, bslRequest); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // getBastionShareableLinkHandleResponse handles the GetBastionShareableLink response.
@@ -533,25 +574,32 @@ func (client *ManagementClient) getBastionShareableLinkHandleResponse(resp *http
 // ListActiveConnectivityConfigurations - Lists active connectivity configurations in a network manager.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - parameters - Active Configuration Parameter.
 //   - options - ManagementClientListActiveConnectivityConfigurationsOptions contains the optional parameters for the ManagementClient.ListActiveConnectivityConfigurations
 //     method.
 func (client *ManagementClient) ListActiveConnectivityConfigurations(ctx context.Context, resourceGroupName string, networkManagerName string, parameters ActiveConfigurationParameter, options *ManagementClientListActiveConnectivityConfigurationsOptions) (ManagementClientListActiveConnectivityConfigurationsResponse, error) {
+	var err error
+	const operationName = "ManagementClient.ListActiveConnectivityConfigurations"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listActiveConnectivityConfigurationsCreateRequest(ctx, resourceGroupName, networkManagerName, parameters, options)
 	if err != nil {
 		return ManagementClientListActiveConnectivityConfigurationsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagementClientListActiveConnectivityConfigurationsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ManagementClientListActiveConnectivityConfigurationsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagementClientListActiveConnectivityConfigurationsResponse{}, err
 	}
-	return client.listActiveConnectivityConfigurationsHandleResponse(resp)
+	resp, err := client.listActiveConnectivityConfigurationsHandleResponse(httpResp)
+	return resp, err
 }
 
 // listActiveConnectivityConfigurationsCreateRequest creates the ListActiveConnectivityConfigurations request.
@@ -574,13 +622,16 @@ func (client *ManagementClient) listActiveConnectivityConfigurationsCreateReques
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // listActiveConnectivityConfigurationsHandleResponse handles the ListActiveConnectivityConfigurations response.
@@ -595,25 +646,32 @@ func (client *ManagementClient) listActiveConnectivityConfigurationsHandleRespon
 // ListActiveSecurityAdminRules - Lists active security admin rules in a network manager.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - parameters - Active Configuration Parameter.
 //   - options - ManagementClientListActiveSecurityAdminRulesOptions contains the optional parameters for the ManagementClient.ListActiveSecurityAdminRules
 //     method.
 func (client *ManagementClient) ListActiveSecurityAdminRules(ctx context.Context, resourceGroupName string, networkManagerName string, parameters ActiveConfigurationParameter, options *ManagementClientListActiveSecurityAdminRulesOptions) (ManagementClientListActiveSecurityAdminRulesResponse, error) {
+	var err error
+	const operationName = "ManagementClient.ListActiveSecurityAdminRules"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listActiveSecurityAdminRulesCreateRequest(ctx, resourceGroupName, networkManagerName, parameters, options)
 	if err != nil {
 		return ManagementClientListActiveSecurityAdminRulesResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagementClientListActiveSecurityAdminRulesResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ManagementClientListActiveSecurityAdminRulesResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagementClientListActiveSecurityAdminRulesResponse{}, err
 	}
-	return client.listActiveSecurityAdminRulesHandleResponse(resp)
+	resp, err := client.listActiveSecurityAdminRulesHandleResponse(httpResp)
+	return resp, err
 }
 
 // listActiveSecurityAdminRulesCreateRequest creates the ListActiveSecurityAdminRules request.
@@ -636,13 +694,16 @@ func (client *ManagementClient) listActiveSecurityAdminRulesCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // listActiveSecurityAdminRulesHandleResponse handles the ListActiveSecurityAdminRules response.
@@ -658,25 +719,32 @@ func (client *ManagementClient) listActiveSecurityAdminRulesHandleResponse(resp
 // network.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - parameters - Parameters supplied to list correct page.
 //   - options - ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsOptions contains the optional parameters
 //     for the ManagementClient.ListNetworkManagerEffectiveConnectivityConfigurations method.
 func (client *ManagementClient) ListNetworkManagerEffectiveConnectivityConfigurations(ctx context.Context, resourceGroupName string, virtualNetworkName string, parameters QueryRequestOptions, options *ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsOptions) (ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsResponse, error) {
+	var err error
+	const operationName = "ManagementClient.ListNetworkManagerEffectiveConnectivityConfigurations"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listNetworkManagerEffectiveConnectivityConfigurationsCreateRequest(ctx, resourceGroupName, virtualNetworkName, parameters, options)
 	if err != nil {
 		return ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsResponse{}, err
 	}
-	return client.listNetworkManagerEffectiveConnectivityConfigurationsHandleResponse(resp)
+	resp, err := client.listNetworkManagerEffectiveConnectivityConfigurationsHandleResponse(httpResp)
+	return resp, err
 }
 
 // listNetworkManagerEffectiveConnectivityConfigurationsCreateRequest creates the ListNetworkManagerEffectiveConnectivityConfigurations request.
@@ -699,13 +767,16 @@ func (client *ManagementClient) listNetworkManagerEffectiveConnectivityConfigura
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // listNetworkManagerEffectiveConnectivityConfigurationsHandleResponse handles the ListNetworkManagerEffectiveConnectivityConfigurations response.
@@ -720,25 +791,32 @@ func (client *ManagementClient) listNetworkManagerEffectiveConnectivityConfigura
 // ListNetworkManagerEffectiveSecurityAdminRules - List all effective security admin rules applied on a virtual network.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - parameters - Parameters supplied to list correct page.
 //   - options - ManagementClientListNetworkManagerEffectiveSecurityAdminRulesOptions contains the optional parameters for the
 //     ManagementClient.ListNetworkManagerEffectiveSecurityAdminRules method.
 func (client *ManagementClient) ListNetworkManagerEffectiveSecurityAdminRules(ctx context.Context, resourceGroupName string, virtualNetworkName string, parameters QueryRequestOptions, options *ManagementClientListNetworkManagerEffectiveSecurityAdminRulesOptions) (ManagementClientListNetworkManagerEffectiveSecurityAdminRulesResponse, error) {
+	var err error
+	const operationName = "ManagementClient.ListNetworkManagerEffectiveSecurityAdminRules"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listNetworkManagerEffectiveSecurityAdminRulesCreateRequest(ctx, resourceGroupName, virtualNetworkName, parameters, options)
 	if err != nil {
 		return ManagementClientListNetworkManagerEffectiveSecurityAdminRulesResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagementClientListNetworkManagerEffectiveSecurityAdminRulesResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ManagementClientListNetworkManagerEffectiveSecurityAdminRulesResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagementClientListNetworkManagerEffectiveSecurityAdminRulesResponse{}, err
 	}
-	return client.listNetworkManagerEffectiveSecurityAdminRulesHandleResponse(resp)
+	resp, err := client.listNetworkManagerEffectiveSecurityAdminRulesHandleResponse(httpResp)
+	return resp, err
 }
 
 // listNetworkManagerEffectiveSecurityAdminRulesCreateRequest creates the ListNetworkManagerEffectiveSecurityAdminRules request.
@@ -761,13 +839,16 @@ func (client *ManagementClient) listNetworkManagerEffectiveSecurityAdminRulesCre
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // listNetworkManagerEffectiveSecurityAdminRulesHandleResponse handles the ListNetworkManagerEffectiveSecurityAdminRules response.
@@ -781,7 +862,7 @@ func (client *ManagementClient) listNetworkManagerEffectiveSecurityAdminRulesHan
 
 // BeginPutBastionShareableLink - Creates a Bastion Shareable Links for all the VMs specified in the request.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - bastionHostName - The name of the Bastion Host.
 //   - bslRequest - Post request for all the Bastion Shareable Link endpoints.
@@ -793,52 +874,58 @@ func (client *ManagementClient) BeginPutBastionShareableLink(ctx context.Context
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ManagementClientPutBastionShareableLinkResponse) (ManagementClientPutBastionShareableLinkResponse, error) {
-			req, err := runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			if err != nil {
-				return ManagementClientPutBastionShareableLinkResponse{}, err
-			}
-			resp, err := client.internal.Pipeline().Do(req)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ManagementClient.BeginPutBastionShareableLink")
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), *page.NextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.putBastionShareableLinkCreateRequest(ctx, resourceGroupName, bastionHostName, bslRequest, options)
+			}, nil)
 			if err != nil {
 				return ManagementClientPutBastionShareableLinkResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ManagementClientPutBastionShareableLinkResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.putBastionShareableLinkHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 	if options == nil || options.ResumeToken == "" {
 		resp, err := client.putBastionShareableLink(ctx, resourceGroupName, bastionHostName, bslRequest, options)
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[*runtime.Pager[ManagementClientPutBastionShareableLinkResponse]]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[*runtime.Pager[ManagementClientPutBastionShareableLinkResponse]]{
 			FinalStateVia: runtime.FinalStateViaLocation,
 			Response:      &pager,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
 		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[*runtime.Pager[ManagementClientPutBastionShareableLinkResponse]]{
 			Response: &pager,
+			Tracer:   client.internal.Tracer(),
 		})
 	}
 }
 
 // PutBastionShareableLink - Creates a Bastion Shareable Links for all the VMs specified in the request.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ManagementClient) putBastionShareableLink(ctx context.Context, resourceGroupName string, bastionHostName string, bslRequest BastionShareableLinkListRequest, options *ManagementClientBeginPutBastionShareableLinkOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ManagementClient.BeginPutBastionShareableLink"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.putBastionShareableLinkCreateRequest(ctx, resourceGroupName, bastionHostName, bslRequest, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // putBastionShareableLinkCreateRequest creates the PutBastionShareableLink request.
@@ -861,10 +948,13 @@ func (client *ManagementClient) putBastionShareableLinkCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, bslRequest)
+	if err := runtime.MarshalAsJSON(req, bslRequest); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // putBastionShareableLinkHandleResponse handles the PutBastionShareableLink response.
@@ -879,24 +969,31 @@ func (client *ManagementClient) putBastionShareableLinkHandleResponse(resp *http
 // SupportedSecurityProviders - Gives the supported security providers for the virtual wan.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name.
 //   - virtualWANName - The name of the VirtualWAN for which supported security providers are needed.
 //   - options - ManagementClientSupportedSecurityProvidersOptions contains the optional parameters for the ManagementClient.SupportedSecurityProviders
 //     method.
 func (client *ManagementClient) SupportedSecurityProviders(ctx context.Context, resourceGroupName string, virtualWANName string, options *ManagementClientSupportedSecurityProvidersOptions) (ManagementClientSupportedSecurityProvidersResponse, error) {
+	var err error
+	const operationName = "ManagementClient.SupportedSecurityProviders"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.supportedSecurityProvidersCreateRequest(ctx, resourceGroupName, virtualWANName, options)
 	if err != nil {
 		return ManagementClientSupportedSecurityProvidersResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagementClientSupportedSecurityProvidersResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ManagementClientSupportedSecurityProvidersResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagementClientSupportedSecurityProvidersResponse{}, err
 	}
-	return client.supportedSecurityProvidersHandleResponse(resp)
+	resp, err := client.supportedSecurityProvidersHandleResponse(httpResp)
+	return resp, err
 }
 
 // supportedSecurityProvidersCreateRequest creates the SupportedSecurityProviders request.
@@ -919,7 +1016,7 @@ func (client *ManagementClient) supportedSecurityProvidersCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managementgroupnetworkmanagerconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managementgroupnetworkmanagerconnections_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managementgroupnetworkmanagerconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managementgroupnetworkmanagerconnections_client.go
index af94b26e6e9..a672f6e343b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managementgroupnetworkmanagerconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managementgroupnetworkmanagerconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -32,7 +31,7 @@ type ManagementGroupNetworkManagerConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewManagementGroupNetworkManagerConnectionsClient(credential azcore.TokenCredential, options *arm.ClientOptions) (*ManagementGroupNetworkManagerConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ManagementGroupNetworkManagerConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -45,25 +44,32 @@ func NewManagementGroupNetworkManagerConnectionsClient(credential azcore.TokenCr
 // CreateOrUpdate - Create a network manager connection on this management group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - managementGroupID - The management group Id which uniquely identify the Microsoft Azure management group.
 //   - networkManagerConnectionName - Name for the network manager connection.
 //   - parameters - Network manager connection to be created/updated.
 //   - options - ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateOptions contains the optional parameters for the
 //     ManagementGroupNetworkManagerConnectionsClient.CreateOrUpdate method.
 func (client *ManagementGroupNetworkManagerConnectionsClient) CreateOrUpdate(ctx context.Context, managementGroupID string, networkManagerConnectionName string, parameters ManagerConnection, options *ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateOptions) (ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "ManagementGroupNetworkManagerConnectionsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, managementGroupID, networkManagerConnectionName, parameters, options)
 	if err != nil {
 		return ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -82,10 +88,13 @@ func (client *ManagementGroupNetworkManagerConnectionsClient) createOrUpdateCrea
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -100,22 +109,28 @@ func (client *ManagementGroupNetworkManagerConnectionsClient) createOrUpdateHand
 // Delete - Delete specified pending connection created by this management group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - managementGroupID - The management group Id which uniquely identify the Microsoft Azure management group.
 //   - networkManagerConnectionName - Name for the network manager connection.
 //   - options - ManagementGroupNetworkManagerConnectionsClientDeleteOptions contains the optional parameters for the ManagementGroupNetworkManagerConnectionsClient.Delete
 //     method.
 func (client *ManagementGroupNetworkManagerConnectionsClient) Delete(ctx context.Context, managementGroupID string, networkManagerConnectionName string, options *ManagementGroupNetworkManagerConnectionsClientDeleteOptions) (ManagementGroupNetworkManagerConnectionsClientDeleteResponse, error) {
+	var err error
+	const operationName = "ManagementGroupNetworkManagerConnectionsClient.Delete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, managementGroupID, networkManagerConnectionName, options)
 	if err != nil {
 		return ManagementGroupNetworkManagerConnectionsClientDeleteResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagementGroupNetworkManagerConnectionsClientDeleteResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusNoContent) {
-		return ManagementGroupNetworkManagerConnectionsClientDeleteResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagementGroupNetworkManagerConnectionsClientDeleteResponse{}, err
 	}
 	return ManagementGroupNetworkManagerConnectionsClientDeleteResponse{}, nil
 }
@@ -136,7 +151,7 @@ func (client *ManagementGroupNetworkManagerConnectionsClient) deleteCreateReques
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -145,24 +160,31 @@ func (client *ManagementGroupNetworkManagerConnectionsClient) deleteCreateReques
 // Get - Get a specified connection created by this management group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - managementGroupID - The management group Id which uniquely identify the Microsoft Azure management group.
 //   - networkManagerConnectionName - Name for the network manager connection.
 //   - options - ManagementGroupNetworkManagerConnectionsClientGetOptions contains the optional parameters for the ManagementGroupNetworkManagerConnectionsClient.Get
 //     method.
 func (client *ManagementGroupNetworkManagerConnectionsClient) Get(ctx context.Context, managementGroupID string, networkManagerConnectionName string, options *ManagementGroupNetworkManagerConnectionsClientGetOptions) (ManagementGroupNetworkManagerConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "ManagementGroupNetworkManagerConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, managementGroupID, networkManagerConnectionName, options)
 	if err != nil {
 		return ManagementGroupNetworkManagerConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagementGroupNetworkManagerConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ManagementGroupNetworkManagerConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagementGroupNetworkManagerConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -181,7 +203,7 @@ func (client *ManagementGroupNetworkManagerConnectionsClient) getCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -198,7 +220,7 @@ func (client *ManagementGroupNetworkManagerConnectionsClient) getHandleResponse(
 
 // NewListPager - List all network manager connections created by this management group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - managementGroupID - The management group Id which uniquely identify the Microsoft Azure management group.
 //   - options - ManagementGroupNetworkManagerConnectionsClientListOptions contains the optional parameters for the ManagementGroupNetworkManagerConnectionsClient.NewListPager
 //     method.
@@ -208,25 +230,20 @@ func (client *ManagementGroupNetworkManagerConnectionsClient) NewListPager(manag
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ManagementGroupNetworkManagerConnectionsClientListResponse) (ManagementGroupNetworkManagerConnectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, managementGroupID, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ManagementGroupNetworkManagerConnectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, managementGroupID, options)
+			}, nil)
 			if err != nil {
 				return ManagementGroupNetworkManagerConnectionsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ManagementGroupNetworkManagerConnectionsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ManagementGroupNetworkManagerConnectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -242,7 +259,7 @@ func (client *ManagementGroupNetworkManagerConnectionsClient) listCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managercommits_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managercommits_client.go
similarity index 77%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managercommits_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managercommits_client.go
index 42a44f7206f..6643369700b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managercommits_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managercommits_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ManagerCommitsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewManagerCommitsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ManagerCommitsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ManagerCommitsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewManagerCommitsClient(subscriptionID string, credential azcore.TokenCrede
 // BeginPost - Post a Network Manager Commit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - parameters - Parameters supplied to specify which Managed Network commit is.
@@ -60,31 +59,41 @@ func (client *ManagerCommitsClient) BeginPost(ctx context.Context, resourceGroup
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ManagerCommitsClientPostResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ManagerCommitsClientPostResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ManagerCommitsClientPostResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ManagerCommitsClientPostResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Post - Post a Network Manager Commit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ManagerCommitsClient) post(ctx context.Context, resourceGroupName string, networkManagerName string, parameters ManagerCommit, options *ManagerCommitsClientBeginPostOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ManagerCommitsClient.BeginPost"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.postCreateRequest(ctx, resourceGroupName, networkManagerName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // postCreateRequest creates the Post request.
@@ -107,8 +116,11 @@ func (client *ManagerCommitsClient) postCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managerdeploymentstatus_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managerdeploymentstatus_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managerdeploymentstatus_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managerdeploymentstatus_client.go
index 9dd15e01af7..d4d5b858026 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managerdeploymentstatus_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managerdeploymentstatus_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type ManagerDeploymentStatusClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewManagerDeploymentStatusClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ManagerDeploymentStatusClient, error) {
-	cl, err := arm.NewClient(moduleName+".ManagerDeploymentStatusClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,25 +48,32 @@ func NewManagerDeploymentStatusClient(subscriptionID string, credential azcore.T
 // List - Post to List of Network Manager Deployment Status.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - parameters - Parameters supplied to specify which Managed Network deployment status is.
 //   - options - ManagerDeploymentStatusClientListOptions contains the optional parameters for the ManagerDeploymentStatusClient.List
 //     method.
 func (client *ManagerDeploymentStatusClient) List(ctx context.Context, resourceGroupName string, networkManagerName string, parameters ManagerDeploymentStatusParameter, options *ManagerDeploymentStatusClientListOptions) (ManagerDeploymentStatusClientListResponse, error) {
+	var err error
+	const operationName = "ManagerDeploymentStatusClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, resourceGroupName, networkManagerName, parameters, options)
 	if err != nil {
 		return ManagerDeploymentStatusClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagerDeploymentStatusClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ManagerDeploymentStatusClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagerDeploymentStatusClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -90,13 +96,16 @@ func (client *ManagerDeploymentStatusClient) listCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // listHandleResponse handles the List response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managers_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managers_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managers_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managers_client.go
index d2ac751dfac..4bb745c863f 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/managers_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/managers_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type ManagersClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewManagersClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ManagersClient, error) {
-	cl, err := arm.NewClient(moduleName+".ManagersClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,24 +48,31 @@ func NewManagersClient(subscriptionID string, credential azcore.TokenCredential,
 // CreateOrUpdate - Creates or updates a Network Manager.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - parameters - Parameters supplied to specify which network manager is.
 //   - options - ManagersClientCreateOrUpdateOptions contains the optional parameters for the ManagersClient.CreateOrUpdate method.
 func (client *ManagersClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, networkManagerName string, parameters Manager, options *ManagersClientCreateOrUpdateOptions) (ManagersClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "ManagersClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkManagerName, parameters, options)
 	if err != nil {
 		return ManagersClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagersClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return ManagersClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagersClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -89,10 +95,13 @@ func (client *ManagersClient) createOrUpdateCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -107,7 +116,7 @@ func (client *ManagersClient) createOrUpdateHandleResponse(resp *http.Response)
 // BeginDelete - Deletes a network manager.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - options - ManagersClientBeginDeleteOptions contains the optional parameters for the ManagersClient.BeginDelete method.
@@ -117,31 +126,41 @@ func (client *ManagersClient) BeginDelete(ctx context.Context, resourceGroupName
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ManagersClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ManagersClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ManagersClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ManagersClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a network manager.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ManagersClient) deleteOperation(ctx context.Context, resourceGroupName string, networkManagerName string, options *ManagersClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ManagersClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkManagerName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -164,7 +183,7 @@ func (client *ManagersClient) deleteCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Force != nil {
 		reqQP.Set("force", strconv.FormatBool(*options.Force))
 	}
@@ -176,23 +195,30 @@ func (client *ManagersClient) deleteCreateRequest(ctx context.Context, resourceG
 // Get - Gets the specified Network Manager.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - options - ManagersClientGetOptions contains the optional parameters for the ManagersClient.Get method.
 func (client *ManagersClient) Get(ctx context.Context, resourceGroupName string, networkManagerName string, options *ManagersClientGetOptions) (ManagersClientGetResponse, error) {
+	var err error
+	const operationName = "ManagersClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkManagerName, options)
 	if err != nil {
 		return ManagersClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagersClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ManagersClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagersClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -215,7 +241,7 @@ func (client *ManagersClient) getCreateRequest(ctx context.Context, resourceGrou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -232,7 +258,7 @@ func (client *ManagersClient) getHandleResponse(resp *http.Response) (ManagersCl
 
 // NewListPager - List network managers in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - ManagersClientListOptions contains the optional parameters for the ManagersClient.NewListPager method.
 func (client *ManagersClient) NewListPager(resourceGroupName string, options *ManagersClientListOptions) *runtime.Pager[ManagersClientListResponse] {
@@ -241,25 +267,20 @@ func (client *ManagersClient) NewListPager(resourceGroupName string, options *Ma
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ManagersClientListResponse) (ManagersClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ManagersClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ManagersClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return ManagersClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ManagersClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -279,7 +300,7 @@ func (client *ManagersClient) listCreateRequest(ctx context.Context, resourceGro
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
@@ -302,7 +323,7 @@ func (client *ManagersClient) listHandleResponse(resp *http.Response) (ManagersC
 
 // NewListBySubscriptionPager - List all network managers in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ManagersClientListBySubscriptionOptions contains the optional parameters for the ManagersClient.NewListBySubscriptionPager
 //     method.
 func (client *ManagersClient) NewListBySubscriptionPager(options *ManagersClientListBySubscriptionOptions) *runtime.Pager[ManagersClientListBySubscriptionResponse] {
@@ -311,25 +332,20 @@ func (client *ManagersClient) NewListBySubscriptionPager(options *ManagersClient
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ManagersClientListBySubscriptionResponse) (ManagersClientListBySubscriptionResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listBySubscriptionCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ManagersClient.NewListBySubscriptionPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listBySubscriptionCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ManagersClientListBySubscriptionResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ManagersClientListBySubscriptionResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ManagersClientListBySubscriptionResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listBySubscriptionHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -345,7 +361,7 @@ func (client *ManagersClient) listBySubscriptionCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
@@ -369,24 +385,31 @@ func (client *ManagersClient) listBySubscriptionHandleResponse(resp *http.Respon
 // Patch - Patch NetworkManager.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - parameters - Parameters supplied to specify which network manager is.
 //   - options - ManagersClientPatchOptions contains the optional parameters for the ManagersClient.Patch method.
 func (client *ManagersClient) Patch(ctx context.Context, resourceGroupName string, networkManagerName string, parameters PatchObject, options *ManagersClientPatchOptions) (ManagersClientPatchResponse, error) {
+	var err error
+	const operationName = "ManagersClient.Patch"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.patchCreateRequest(ctx, resourceGroupName, networkManagerName, parameters, options)
 	if err != nil {
 		return ManagersClientPatchResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ManagersClientPatchResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ManagersClientPatchResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ManagersClientPatchResponse{}, err
 	}
-	return client.patchHandleResponse(resp)
+	resp, err := client.patchHandleResponse(httpResp)
+	return resp, err
 }
 
 // patchCreateRequest creates the Patch request.
@@ -409,10 +432,13 @@ func (client *ManagersClient) patchCreateRequest(ctx context.Context, resourceGr
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // patchHandleResponse handles the Patch response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/models.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/models.go
similarity index 71%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/models.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/models.go
index c1bbfa98ee5..da6f4953782 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/models.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/models.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -33,15 +32,6 @@ type Action struct {
 	Type *RouteMapActionType
 }
 
-// ActiveBaseSecurityAdminRuleClassification provides polymorphic access to related types.
-// Call the interface's GetActiveBaseSecurityAdminRule() method to access the common type.
-// Use a type switch to determine the concrete type.  The possible types are:
-// - *ActiveBaseSecurityAdminRule, *ActiveDefaultSecurityAdminRule, *ActiveSecurityAdminRule
-type ActiveBaseSecurityAdminRuleClassification interface {
-	// GetActiveBaseSecurityAdminRule returns the ActiveBaseSecurityAdminRule content of the underlying type.
-	GetActiveBaseSecurityAdminRule() *ActiveBaseSecurityAdminRule
-}
-
 // ActiveBaseSecurityAdminRule - Network base admin rule.
 type ActiveBaseSecurityAdminRule struct {
 	// REQUIRED; Whether the rule is custom or default.
@@ -146,14 +136,14 @@ type ActiveDefaultSecurityAdminRule struct {
 // GetActiveBaseSecurityAdminRule implements the ActiveBaseSecurityAdminRuleClassification interface for type ActiveDefaultSecurityAdminRule.
 func (a *ActiveDefaultSecurityAdminRule) GetActiveBaseSecurityAdminRule() *ActiveBaseSecurityAdminRule {
 	return &ActiveBaseSecurityAdminRule{
-		ID:                            a.ID,
 		CommitTime:                    a.CommitTime,
-		Region:                        a.Region,
 		ConfigurationDescription:      a.ConfigurationDescription,
-		RuleCollectionDescription:     a.RuleCollectionDescription,
+		ID:                            a.ID,
+		Kind:                          a.Kind,
+		Region:                        a.Region,
 		RuleCollectionAppliesToGroups: a.RuleCollectionAppliesToGroups,
+		RuleCollectionDescription:     a.RuleCollectionDescription,
 		RuleGroups:                    a.RuleGroups,
-		Kind:                          a.Kind,
 	}
 }
 
@@ -190,14 +180,14 @@ type ActiveSecurityAdminRule struct {
 // GetActiveBaseSecurityAdminRule implements the ActiveBaseSecurityAdminRuleClassification interface for type ActiveSecurityAdminRule.
 func (a *ActiveSecurityAdminRule) GetActiveBaseSecurityAdminRule() *ActiveBaseSecurityAdminRule {
 	return &ActiveBaseSecurityAdminRule{
-		ID:                            a.ID,
 		CommitTime:                    a.CommitTime,
-		Region:                        a.Region,
 		ConfigurationDescription:      a.ConfigurationDescription,
-		RuleCollectionDescription:     a.RuleCollectionDescription,
+		ID:                            a.ID,
+		Kind:                          a.Kind,
+		Region:                        a.Region,
 		RuleCollectionAppliesToGroups: a.RuleCollectionAppliesToGroups,
+		RuleCollectionDescription:     a.RuleCollectionDescription,
 		RuleGroups:                    a.RuleGroups,
-		Kind:                          a.Kind,
 	}
 }
 
@@ -259,6 +249,9 @@ type AdminPropertiesFormat struct {
 
 	// READ-ONLY; The provisioning state of the resource.
 	ProvisioningState *ProvisioningState
+
+	// READ-ONLY; Unique identifier for this resource.
+	ResourceGUID *string
 }
 
 // AdminRule - Network admin rule.
@@ -288,12 +281,12 @@ type AdminRule struct {
 // GetBaseAdminRule implements the BaseAdminRuleClassification interface for type AdminRule.
 func (a *AdminRule) GetBaseAdminRule() *BaseAdminRule {
 	return &BaseAdminRule{
-		Kind:       a.Kind,
-		SystemData: a.SystemData,
+		Etag:       a.Etag,
 		ID:         a.ID,
+		Kind:       a.Kind,
 		Name:       a.Name,
+		SystemData: a.SystemData,
 		Type:       a.Type,
-		Etag:       a.Etag,
 	}
 }
 
@@ -337,38 +330,9 @@ type AdminRuleCollectionPropertiesFormat struct {
 
 	// READ-ONLY; The provisioning state of the resource.
 	ProvisioningState *ProvisioningState
-}
-
-// AdminRuleCollectionsClientBeginDeleteOptions contains the optional parameters for the AdminRuleCollectionsClient.BeginDelete
-// method.
-type AdminRuleCollectionsClientBeginDeleteOptions struct {
-	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
-	// will do a cleanup deployment in the background, prior to the delete.
-	Force *bool
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// AdminRuleCollectionsClientCreateOrUpdateOptions contains the optional parameters for the AdminRuleCollectionsClient.CreateOrUpdate
-// method.
-type AdminRuleCollectionsClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AdminRuleCollectionsClientGetOptions contains the optional parameters for the AdminRuleCollectionsClient.Get method.
-type AdminRuleCollectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
 
-// AdminRuleCollectionsClientListOptions contains the optional parameters for the AdminRuleCollectionsClient.NewListPager
-// method.
-type AdminRuleCollectionsClientListOptions struct {
-	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
-	// the value of the nextLink element will include a skipToken parameter that
-	// specifies a starting point to use for subsequent calls.
-	SkipToken *string
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
+	// READ-ONLY; Unique identifier for this resource.
+	ResourceGUID *string
 }
 
 // AdminRuleListResult - security configuration admin rule list result.
@@ -380,35 +344,6 @@ type AdminRuleListResult struct {
 	Value []BaseAdminRuleClassification
 }
 
-// AdminRulesClientBeginDeleteOptions contains the optional parameters for the AdminRulesClient.BeginDelete method.
-type AdminRulesClientBeginDeleteOptions struct {
-	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
-	// will do a cleanup deployment in the background, prior to the delete.
-	Force *bool
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// AdminRulesClientCreateOrUpdateOptions contains the optional parameters for the AdminRulesClient.CreateOrUpdate method.
-type AdminRulesClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AdminRulesClientGetOptions contains the optional parameters for the AdminRulesClient.Get method.
-type AdminRulesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AdminRulesClientListOptions contains the optional parameters for the AdminRulesClient.NewListPager method.
-type AdminRulesClientListOptions struct {
-	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
-	// the value of the nextLink element will include a skipToken parameter that
-	// specifies a starting point to use for subsequent calls.
-	SkipToken *string
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
 // ApplicationGateway - Application gateway resource.
 type ApplicationGateway struct {
 	// Resource ID.
@@ -1248,32 +1183,6 @@ type ApplicationGatewayPrivateEndpointConnectionProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// ApplicationGatewayPrivateEndpointConnectionsClientBeginDeleteOptions contains the optional parameters for the ApplicationGatewayPrivateEndpointConnectionsClient.BeginDelete
-// method.
-type ApplicationGatewayPrivateEndpointConnectionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ApplicationGatewayPrivateEndpointConnectionsClientBeginUpdateOptions contains the optional parameters for the ApplicationGatewayPrivateEndpointConnectionsClient.BeginUpdate
-// method.
-type ApplicationGatewayPrivateEndpointConnectionsClientBeginUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ApplicationGatewayPrivateEndpointConnectionsClientGetOptions contains the optional parameters for the ApplicationGatewayPrivateEndpointConnectionsClient.Get
-// method.
-type ApplicationGatewayPrivateEndpointConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewayPrivateEndpointConnectionsClientListOptions contains the optional parameters for the ApplicationGatewayPrivateEndpointConnectionsClient.NewListPager
-// method.
-type ApplicationGatewayPrivateEndpointConnectionsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ApplicationGatewayPrivateLinkConfiguration - Private Link Configuration on an application gateway.
 type ApplicationGatewayPrivateLinkConfiguration struct {
 	// Resource ID.
@@ -1377,12 +1286,6 @@ type ApplicationGatewayPrivateLinkResourceProperties struct {
 	RequiredMembers []*string
 }
 
-// ApplicationGatewayPrivateLinkResourcesClientListOptions contains the optional parameters for the ApplicationGatewayPrivateLinkResourcesClient.NewListPager
-// method.
-type ApplicationGatewayPrivateLinkResourcesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ApplicationGatewayProbe - Probe of the application gateway.
 type ApplicationGatewayProbe struct {
 	// Resource ID.
@@ -1435,8 +1338,8 @@ type ApplicationGatewayProbePropertiesFormat struct {
 	PickHostNameFromBackendSettings *bool
 
 	// Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set,
-	// port from http settings will be used. This property is valid for Standardv2 and
-	// WAFv2 only.
+	// port from http settings will be used. This property is valid for Basic,
+	// Standardv2 and WAFv2 only.
 	Port *int32
 
 	// The protocol used for the probe.
@@ -1558,6 +1461,9 @@ type ApplicationGatewayPropertiesFormat struct {
 	// Web application firewall configuration.
 	WebApplicationFirewallConfiguration *ApplicationGatewayWebApplicationFirewallConfiguration
 
+	// READ-ONLY; The default predefined SSL Policy applied on the application gateway resource.
+	DefaultPredefinedSSLPolicy *ApplicationGatewaySSLPolicyName
+
 	// READ-ONLY; Operational state of the application gateway resource.
 	OperationalState *ApplicationGatewayOperationalState
 
@@ -2043,18 +1949,6 @@ type ApplicationGatewayWafDynamicManifestResultList struct {
 	Value []*ApplicationGatewayWafDynamicManifestResult
 }
 
-// ApplicationGatewayWafDynamicManifestsClientGetOptions contains the optional parameters for the ApplicationGatewayWafDynamicManifestsClient.NewGetPager
-// method.
-type ApplicationGatewayWafDynamicManifestsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewayWafDynamicManifestsDefaultClientGetOptions contains the optional parameters for the ApplicationGatewayWafDynamicManifestsDefaultClient.Get
-// method.
-type ApplicationGatewayWafDynamicManifestsDefaultClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ApplicationGatewayWebApplicationFirewallConfiguration - Application gateway web application firewall configuration.
 type ApplicationGatewayWebApplicationFirewallConfiguration struct {
 	// REQUIRED; Whether the web application firewall is enabled or not.
@@ -2088,116 +1982,6 @@ type ApplicationGatewayWebApplicationFirewallConfiguration struct {
 	RequestBodyCheck *bool
 }
 
-// ApplicationGatewaysClientBeginBackendHealthOnDemandOptions contains the optional parameters for the ApplicationGatewaysClient.BeginBackendHealthOnDemand
-// method.
-type ApplicationGatewaysClientBeginBackendHealthOnDemandOptions struct {
-	// Expands BackendAddressPool and BackendHttpSettings referenced in backend health.
-	Expand *string
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ApplicationGatewaysClientBeginBackendHealthOptions contains the optional parameters for the ApplicationGatewaysClient.BeginBackendHealth
-// method.
-type ApplicationGatewaysClientBeginBackendHealthOptions struct {
-	// Expands BackendAddressPool and BackendHttpSettings referenced in backend health.
-	Expand *string
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ApplicationGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the ApplicationGatewaysClient.BeginCreateOrUpdate
-// method.
-type ApplicationGatewaysClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ApplicationGatewaysClientBeginDeleteOptions contains the optional parameters for the ApplicationGatewaysClient.BeginDelete
-// method.
-type ApplicationGatewaysClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ApplicationGatewaysClientBeginStartOptions contains the optional parameters for the ApplicationGatewaysClient.BeginStart
-// method.
-type ApplicationGatewaysClientBeginStartOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ApplicationGatewaysClientBeginStopOptions contains the optional parameters for the ApplicationGatewaysClient.BeginStop
-// method.
-type ApplicationGatewaysClientBeginStopOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ApplicationGatewaysClientGetOptions contains the optional parameters for the ApplicationGatewaysClient.Get method.
-type ApplicationGatewaysClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewaysClientGetSSLPredefinedPolicyOptions contains the optional parameters for the ApplicationGatewaysClient.GetSSLPredefinedPolicy
-// method.
-type ApplicationGatewaysClientGetSSLPredefinedPolicyOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewaysClientListAllOptions contains the optional parameters for the ApplicationGatewaysClient.NewListAllPager
-// method.
-type ApplicationGatewaysClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewaysClientListAvailableRequestHeadersOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableRequestHeaders
-// method.
-type ApplicationGatewaysClientListAvailableRequestHeadersOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewaysClientListAvailableResponseHeadersOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableResponseHeaders
-// method.
-type ApplicationGatewaysClientListAvailableResponseHeadersOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewaysClientListAvailableSSLOptionsOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableSSLOptions
-// method.
-type ApplicationGatewaysClientListAvailableSSLOptionsOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesOptions contains the optional parameters for the ApplicationGatewaysClient.NewListAvailableSSLPredefinedPoliciesPager
-// method.
-type ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewaysClientListAvailableServerVariablesOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableServerVariables
-// method.
-type ApplicationGatewaysClientListAvailableServerVariablesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewaysClientListAvailableWafRuleSetsOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableWafRuleSets
-// method.
-type ApplicationGatewaysClientListAvailableWafRuleSetsOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewaysClientListOptions contains the optional parameters for the ApplicationGatewaysClient.NewListPager method.
-type ApplicationGatewaysClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationGatewaysClientUpdateTagsOptions contains the optional parameters for the ApplicationGatewaysClient.UpdateTags
-// method.
-type ApplicationGatewaysClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ApplicationRule - Rule of type application.
 type ApplicationRule struct {
 	// REQUIRED; Rule Type.
@@ -2212,6 +1996,9 @@ type ApplicationRule struct {
 	// List of FQDN Tags for this rule.
 	FqdnTags []*string
 
+	// List of HTTP/S headers to insert.
+	HTTPHeadersToInsert []*FirewallPolicyHTTPHeaderToInsert
+
 	// Name of the rule.
 	Name *string
 
@@ -2240,8 +2027,8 @@ type ApplicationRule struct {
 // GetFirewallPolicyRule implements the FirewallPolicyRuleClassification interface for type ApplicationRule.
 func (a *ApplicationRule) GetFirewallPolicyRule() *FirewallPolicyRule {
 	return &FirewallPolicyRule{
-		Name:        a.Name,
 		Description: a.Description,
+		Name:        a.Name,
 		RuleType:    a.RuleType,
 	}
 }
@@ -2290,44 +2077,6 @@ type ApplicationSecurityGroupPropertiesFormat struct {
 	ResourceGUID *string
 }
 
-// ApplicationSecurityGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the ApplicationSecurityGroupsClient.BeginCreateOrUpdate
-// method.
-type ApplicationSecurityGroupsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ApplicationSecurityGroupsClientBeginDeleteOptions contains the optional parameters for the ApplicationSecurityGroupsClient.BeginDelete
-// method.
-type ApplicationSecurityGroupsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ApplicationSecurityGroupsClientGetOptions contains the optional parameters for the ApplicationSecurityGroupsClient.Get
-// method.
-type ApplicationSecurityGroupsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationSecurityGroupsClientListAllOptions contains the optional parameters for the ApplicationSecurityGroupsClient.NewListAllPager
-// method.
-type ApplicationSecurityGroupsClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationSecurityGroupsClientListOptions contains the optional parameters for the ApplicationSecurityGroupsClient.NewListPager
-// method.
-type ApplicationSecurityGroupsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ApplicationSecurityGroupsClientUpdateTagsOptions contains the optional parameters for the ApplicationSecurityGroupsClient.UpdateTags
-// method.
-type ApplicationSecurityGroupsClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // AuthorizationListResult - Response for ListAuthorizations API service call retrieves all authorizations that belongs to
 // an ExpressRouteCircuit.
 type AuthorizationListResult struct {
@@ -2396,12 +2145,6 @@ type AvailableDelegation struct {
 	Type *string
 }
 
-// AvailableDelegationsClientListOptions contains the optional parameters for the AvailableDelegationsClient.NewListPager
-// method.
-type AvailableDelegationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // AvailableDelegationsResult - An array of available delegations.
 type AvailableDelegationsResult struct {
 	// An array of available delegations.
@@ -2411,12 +2154,6 @@ type AvailableDelegationsResult struct {
 	NextLink *string
 }
 
-// AvailableEndpointServicesClientListOptions contains the optional parameters for the AvailableEndpointServicesClient.NewListPager
-// method.
-type AvailableEndpointServicesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // AvailablePrivateEndpointType - The information of an AvailablePrivateEndpointType.
 type AvailablePrivateEndpointType struct {
 	// Display name of the resource.
@@ -2435,18 +2172,6 @@ type AvailablePrivateEndpointType struct {
 	Type *string
 }
 
-// AvailablePrivateEndpointTypesClientListByResourceGroupOptions contains the optional parameters for the AvailablePrivateEndpointTypesClient.NewListByResourceGroupPager
-// method.
-type AvailablePrivateEndpointTypesClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AvailablePrivateEndpointTypesClientListOptions contains the optional parameters for the AvailablePrivateEndpointTypesClient.NewListPager
-// method.
-type AvailablePrivateEndpointTypesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // AvailablePrivateEndpointTypesResult - An array of available PrivateEndpoint types.
 type AvailablePrivateEndpointTypesResult struct {
 	// An array of available privateEndpoint type.
@@ -2510,12 +2235,6 @@ type AvailableProvidersListState struct {
 	StateName *string
 }
 
-// AvailableResourceGroupDelegationsClientListOptions contains the optional parameters for the AvailableResourceGroupDelegationsClient.NewListPager
-// method.
-type AvailableResourceGroupDelegationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // AvailableServiceAlias - The available service alias.
 type AvailableServiceAlias struct {
 	// The ID of the service alias.
@@ -2531,18 +2250,6 @@ type AvailableServiceAlias struct {
 	Type *string
 }
 
-// AvailableServiceAliasesClientListByResourceGroupOptions contains the optional parameters for the AvailableServiceAliasesClient.NewListByResourceGroupPager
-// method.
-type AvailableServiceAliasesClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AvailableServiceAliasesClientListOptions contains the optional parameters for the AvailableServiceAliasesClient.NewListPager
-// method.
-type AvailableServiceAliasesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // AvailableServiceAliasesResult - An array of available service aliases.
 type AvailableServiceAliasesResult struct {
 	// An array of available service aliases.
@@ -2698,12 +2405,6 @@ type AzureFirewallFqdnTagPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// AzureFirewallFqdnTagsClientListAllOptions contains the optional parameters for the AzureFirewallFqdnTagsClient.NewListAllPager
-// method.
-type AzureFirewallFqdnTagsClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
 // AzureFirewallIPConfiguration - IP configuration of an Azure Firewall.
 type AzureFirewallIPConfiguration struct {
 	// Resource ID.
@@ -2884,6 +2585,24 @@ type AzureFirewallNetworkRuleCollectionPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
+// AzureFirewallPacketCaptureFlags - Properties of the AzureFirewallRCAction.
+type AzureFirewallPacketCaptureFlags struct {
+	// Flags to capture
+	Type *AzureFirewallPacketCaptureFlagsType
+}
+
+// AzureFirewallPacketCaptureRule - Group of src/dest ips and ports to be captured.
+type AzureFirewallPacketCaptureRule struct {
+	// List of ports to be captured.
+	DestinationPorts []*string
+
+	// List of destination IP addresses/subnets to be captured.
+	Destinations []*string
+
+	// List of source IP addresses/subnets to be captured.
+	Sources []*string
+}
+
 // AzureFirewallPropertiesFormat - Properties of the Azure Firewall.
 type AzureFirewallPropertiesFormat struct {
 	// The additional properties used to further config this azure firewall.
@@ -2947,48 +2666,6 @@ type AzureFirewallSKU struct {
 	Tier *AzureFirewallSKUTier
 }
 
-// AzureFirewallsClientBeginCreateOrUpdateOptions contains the optional parameters for the AzureFirewallsClient.BeginCreateOrUpdate
-// method.
-type AzureFirewallsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// AzureFirewallsClientBeginDeleteOptions contains the optional parameters for the AzureFirewallsClient.BeginDelete method.
-type AzureFirewallsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// AzureFirewallsClientBeginListLearnedPrefixesOptions contains the optional parameters for the AzureFirewallsClient.BeginListLearnedPrefixes
-// method.
-type AzureFirewallsClientBeginListLearnedPrefixesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// AzureFirewallsClientBeginUpdateTagsOptions contains the optional parameters for the AzureFirewallsClient.BeginUpdateTags
-// method.
-type AzureFirewallsClientBeginUpdateTagsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// AzureFirewallsClientGetOptions contains the optional parameters for the AzureFirewallsClient.Get method.
-type AzureFirewallsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AzureFirewallsClientListAllOptions contains the optional parameters for the AzureFirewallsClient.NewListAllPager method.
-type AzureFirewallsClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// AzureFirewallsClientListOptions contains the optional parameters for the AzureFirewallsClient.NewListPager method.
-type AzureFirewallsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // AzureReachabilityReport - Azure reachability report details.
 type AzureReachabilityReport struct {
 	// REQUIRED; The aggregation level of Azure reachability report. Can be Country, State or City.
@@ -3142,6 +2819,9 @@ type BackendAddressPoolPropertiesFormat struct {
 	// The location of the backend address pool.
 	Location *string
 
+	// Backend address synchronous mode for the backend pool
+	SyncMode *SyncMode
+
 	// An array of gateway load balancer tunnel interfaces.
 	TunnelInterfaces []*GatewayLoadBalancerTunnelInterface
 
@@ -3167,15 +2847,6 @@ type BackendAddressPoolPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// BaseAdminRuleClassification provides polymorphic access to related types.
-// Call the interface's GetBaseAdminRule() method to access the common type.
-// Use a type switch to determine the concrete type.  The possible types are:
-// - *AdminRule, *BaseAdminRule, *DefaultAdminRule
-type BaseAdminRuleClassification interface {
-	// GetBaseAdminRule returns the BaseAdminRule content of the underlying type.
-	GetBaseAdminRule() *BaseAdminRule
-}
-
 // BaseAdminRule - Network base admin rule.
 type BaseAdminRule struct {
 	// REQUIRED; Whether the rule is custom or default.
@@ -3328,6 +2999,9 @@ type BastionHostPropertiesFormat struct {
 	// Enable/Disable IP Connect feature of the Bastion Host resource.
 	EnableIPConnect *bool
 
+	// Enable/Disable Kerberos feature of the Bastion Host resource.
+	EnableKerberos *bool
+
 	// Enable/Disable Shareable Link of the Bastion Host resource.
 	EnableShareableLink *bool
 
@@ -3336,47 +3010,21 @@ type BastionHostPropertiesFormat struct {
 
 	// IP configuration of the Bastion Host resource.
 	IPConfigurations []*BastionHostIPConfiguration
+	NetworkACLs      *BastionHostPropertiesFormatNetworkACLs
 
 	// The scale units for the Bastion Host resource.
 	ScaleUnits *int32
 
+	// Reference to an existing virtual network required for Developer Bastion Host only.
+	VirtualNetwork *SubResource
+
 	// READ-ONLY; The provisioning state of the bastion host resource.
 	ProvisioningState *ProvisioningState
 }
 
-// BastionHostsClientBeginCreateOrUpdateOptions contains the optional parameters for the BastionHostsClient.BeginCreateOrUpdate
-// method.
-type BastionHostsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// BastionHostsClientBeginDeleteOptions contains the optional parameters for the BastionHostsClient.BeginDelete method.
-type BastionHostsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// BastionHostsClientBeginUpdateTagsOptions contains the optional parameters for the BastionHostsClient.BeginUpdateTags method.
-type BastionHostsClientBeginUpdateTagsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// BastionHostsClientGetOptions contains the optional parameters for the BastionHostsClient.Get method.
-type BastionHostsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// BastionHostsClientListByResourceGroupOptions contains the optional parameters for the BastionHostsClient.NewListByResourceGroupPager
-// method.
-type BastionHostsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// BastionHostsClientListOptions contains the optional parameters for the BastionHostsClient.NewListPager method.
-type BastionHostsClientListOptions struct {
-	// placeholder for future optional parameters
+type BastionHostPropertiesFormatNetworkACLs struct {
+	// Sets the IP ACL rules for Developer Bastion Host.
+	IPRules []*IPRule
 }
 
 // BastionSessionDeleteResult - Response for DisconnectActiveSessions.
@@ -3499,12 +3147,6 @@ type BgpPeerStatusListResult struct {
 	Value []*BgpPeerStatus
 }
 
-// BgpServiceCommunitiesClientListOptions contains the optional parameters for the BgpServiceCommunitiesClient.NewListPager
-// method.
-type BgpServiceCommunitiesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // BgpServiceCommunity - Service Community Properties.
 type BgpServiceCommunity struct {
 	// Resource ID.
@@ -3655,32 +3297,6 @@ type ConfigurationGroup struct {
 	Properties *GroupProperties
 }
 
-// ConfigurationPolicyGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the ConfigurationPolicyGroupsClient.BeginCreateOrUpdate
-// method.
-type ConfigurationPolicyGroupsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ConfigurationPolicyGroupsClientBeginDeleteOptions contains the optional parameters for the ConfigurationPolicyGroupsClient.BeginDelete
-// method.
-type ConfigurationPolicyGroupsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ConfigurationPolicyGroupsClientGetOptions contains the optional parameters for the ConfigurationPolicyGroupsClient.Get
-// method.
-type ConfigurationPolicyGroupsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ConfigurationPolicyGroupsClientListByVPNServerConfigurationOptions contains the optional parameters for the ConfigurationPolicyGroupsClient.NewListByVPNServerConfigurationPager
-// method.
-type ConfigurationPolicyGroupsClientListByVPNServerConfigurationOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ConnectionMonitor - Parameters that define the operation to create a connection monitor.
 type ConnectionMonitor struct {
 	// REQUIRED; Properties of the connection monitor.
@@ -3991,58 +3607,6 @@ type ConnectionMonitorWorkspaceSettings struct {
 	WorkspaceResourceID *string
 }
 
-// ConnectionMonitorsClientBeginCreateOrUpdateOptions contains the optional parameters for the ConnectionMonitorsClient.BeginCreateOrUpdate
-// method.
-type ConnectionMonitorsClientBeginCreateOrUpdateOptions struct {
-	// Value indicating whether connection monitor V1 should be migrated to V2 format.
-	Migrate *string
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ConnectionMonitorsClientBeginDeleteOptions contains the optional parameters for the ConnectionMonitorsClient.BeginDelete
-// method.
-type ConnectionMonitorsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ConnectionMonitorsClientBeginQueryOptions contains the optional parameters for the ConnectionMonitorsClient.BeginQuery
-// method.
-type ConnectionMonitorsClientBeginQueryOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ConnectionMonitorsClientBeginStartOptions contains the optional parameters for the ConnectionMonitorsClient.BeginStart
-// method.
-type ConnectionMonitorsClientBeginStartOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ConnectionMonitorsClientBeginStopOptions contains the optional parameters for the ConnectionMonitorsClient.BeginStop method.
-type ConnectionMonitorsClientBeginStopOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ConnectionMonitorsClientGetOptions contains the optional parameters for the ConnectionMonitorsClient.Get method.
-type ConnectionMonitorsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ConnectionMonitorsClientListOptions contains the optional parameters for the ConnectionMonitorsClient.NewListPager method.
-type ConnectionMonitorsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ConnectionMonitorsClientUpdateTagsOptions contains the optional parameters for the ConnectionMonitorsClient.UpdateTags
-// method.
-type ConnectionMonitorsClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ConnectionResetSharedKey - The virtual network connection reset shared key.
 type ConnectionResetSharedKey struct {
 	// REQUIRED; The virtual network connection reset shared key length, should between 1 and 128.
@@ -4144,39 +3708,9 @@ type ConnectivityConfigurationProperties struct {
 
 	// READ-ONLY; The provisioning state of the connectivity configuration resource.
 	ProvisioningState *ProvisioningState
-}
-
-// ConnectivityConfigurationsClientBeginDeleteOptions contains the optional parameters for the ConnectivityConfigurationsClient.BeginDelete
-// method.
-type ConnectivityConfigurationsClientBeginDeleteOptions struct {
-	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
-	// will do a cleanup deployment in the background, prior to the delete.
-	Force *bool
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
 
-// ConnectivityConfigurationsClientCreateOrUpdateOptions contains the optional parameters for the ConnectivityConfigurationsClient.CreateOrUpdate
-// method.
-type ConnectivityConfigurationsClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ConnectivityConfigurationsClientGetOptions contains the optional parameters for the ConnectivityConfigurationsClient.Get
-// method.
-type ConnectivityConfigurationsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ConnectivityConfigurationsClientListOptions contains the optional parameters for the ConnectivityConfigurationsClient.NewListPager
-// method.
-type ConnectivityConfigurationsClientListOptions struct {
-	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
-	// the value of the nextLink element will include a skipToken parameter that
-	// specifies a starting point to use for subsequent calls.
-	SkipToken *string
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
+	// READ-ONLY; Unique identifier for this resource.
+	ResourceGUID *string
 }
 
 // ConnectivityDestination - Parameters that define destination of connection.
@@ -4515,40 +4049,6 @@ type CustomIPPrefixPropertiesFormat struct {
 	ResourceGUID *string
 }
 
-// CustomIPPrefixesClientBeginCreateOrUpdateOptions contains the optional parameters for the CustomIPPrefixesClient.BeginCreateOrUpdate
-// method.
-type CustomIPPrefixesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CustomIPPrefixesClientBeginDeleteOptions contains the optional parameters for the CustomIPPrefixesClient.BeginDelete method.
-type CustomIPPrefixesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// CustomIPPrefixesClientGetOptions contains the optional parameters for the CustomIPPrefixesClient.Get method.
-type CustomIPPrefixesClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// CustomIPPrefixesClientListAllOptions contains the optional parameters for the CustomIPPrefixesClient.NewListAllPager method.
-type CustomIPPrefixesClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CustomIPPrefixesClientListOptions contains the optional parameters for the CustomIPPrefixesClient.NewListPager method.
-type CustomIPPrefixesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// CustomIPPrefixesClientUpdateTagsOptions contains the optional parameters for the CustomIPPrefixesClient.UpdateTags method.
-type CustomIPPrefixesClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // DNSNameAvailabilityResult - Response for the CheckDnsNameAvailability API service call.
 type DNSNameAvailabilityResult struct {
 	// Domain availability (True/False).
@@ -4567,31 +4067,6 @@ type DNSSettings struct {
 	Servers []*string
 }
 
-// DdosCustomPoliciesClientBeginCreateOrUpdateOptions contains the optional parameters for the DdosCustomPoliciesClient.BeginCreateOrUpdate
-// method.
-type DdosCustomPoliciesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DdosCustomPoliciesClientBeginDeleteOptions contains the optional parameters for the DdosCustomPoliciesClient.BeginDelete
-// method.
-type DdosCustomPoliciesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DdosCustomPoliciesClientGetOptions contains the optional parameters for the DdosCustomPoliciesClient.Get method.
-type DdosCustomPoliciesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DdosCustomPoliciesClientUpdateTagsOptions contains the optional parameters for the DdosCustomPoliciesClient.UpdateTags
-// method.
-type DdosCustomPoliciesClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // DdosCustomPolicy - A DDoS custom policy in a resource group.
 type DdosCustomPolicy struct {
 	// Resource ID.
@@ -4675,42 +4150,6 @@ type DdosProtectionPlanPropertiesFormat struct {
 	VirtualNetworks []*SubResource
 }
 
-// DdosProtectionPlansClientBeginCreateOrUpdateOptions contains the optional parameters for the DdosProtectionPlansClient.BeginCreateOrUpdate
-// method.
-type DdosProtectionPlansClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DdosProtectionPlansClientBeginDeleteOptions contains the optional parameters for the DdosProtectionPlansClient.BeginDelete
-// method.
-type DdosProtectionPlansClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DdosProtectionPlansClientGetOptions contains the optional parameters for the DdosProtectionPlansClient.Get method.
-type DdosProtectionPlansClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DdosProtectionPlansClientListByResourceGroupOptions contains the optional parameters for the DdosProtectionPlansClient.NewListByResourceGroupPager
-// method.
-type DdosProtectionPlansClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DdosProtectionPlansClientListOptions contains the optional parameters for the DdosProtectionPlansClient.NewListPager method.
-type DdosProtectionPlansClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DdosProtectionPlansClientUpdateTagsOptions contains the optional parameters for the DdosProtectionPlansClient.UpdateTags
-// method.
-type DdosProtectionPlansClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // DdosSettings - Contains the DDoS protection settings of the public IP.
 type DdosSettings struct {
 	// The DDoS protection plan associated with the public IP. Can only be set if ProtectionMode is Enabled
@@ -4750,6 +4189,9 @@ type DefaultAdminPropertiesFormat struct {
 	// READ-ONLY; The provisioning state of the resource.
 	ProvisioningState *ProvisioningState
 
+	// READ-ONLY; Unique identifier for this resource.
+	ResourceGUID *string
+
 	// READ-ONLY; The source port ranges.
 	SourcePortRanges []*string
 
@@ -4784,12 +4226,12 @@ type DefaultAdminRule struct {
 // GetBaseAdminRule implements the BaseAdminRuleClassification interface for type DefaultAdminRule.
 func (d *DefaultAdminRule) GetBaseAdminRule() *BaseAdminRule {
 	return &BaseAdminRule{
-		Kind:       d.Kind,
-		SystemData: d.SystemData,
+		Etag:       d.Etag,
 		ID:         d.ID,
+		Kind:       d.Kind,
 		Name:       d.Name,
+		SystemData: d.SystemData,
 		Type:       d.Type,
-		Etag:       d.Etag,
 	}
 }
 
@@ -4802,17 +4244,6 @@ type DefaultRuleSetPropertyFormat struct {
 	RuleSetVersion *string
 }
 
-// DefaultSecurityRulesClientGetOptions contains the optional parameters for the DefaultSecurityRulesClient.Get method.
-type DefaultSecurityRulesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DefaultSecurityRulesClientListOptions contains the optional parameters for the DefaultSecurityRulesClient.NewListPager
-// method.
-type DefaultSecurityRulesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // Delegation - Details the service to which the subnet is delegated.
 type Delegation struct {
 	// Resource ID.
@@ -4895,36 +4326,6 @@ type DscpConfiguration struct {
 	Type *string
 }
 
-// DscpConfigurationClientBeginCreateOrUpdateOptions contains the optional parameters for the DscpConfigurationClient.BeginCreateOrUpdate
-// method.
-type DscpConfigurationClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DscpConfigurationClientBeginDeleteOptions contains the optional parameters for the DscpConfigurationClient.BeginDelete
-// method.
-type DscpConfigurationClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// DscpConfigurationClientGetOptions contains the optional parameters for the DscpConfigurationClient.Get method.
-type DscpConfigurationClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DscpConfigurationClientListAllOptions contains the optional parameters for the DscpConfigurationClient.NewListAllPager
-// method.
-type DscpConfigurationClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// DscpConfigurationClientListOptions contains the optional parameters for the DscpConfigurationClient.NewListPager method.
-type DscpConfigurationClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // DscpConfigurationListResult - Response for the DscpConfigurationList API service call.
 type DscpConfigurationListResult struct {
 	// A list of dscp configurations in a resource group.
@@ -4970,15 +4371,6 @@ type DscpConfigurationPropertiesFormat struct {
 	ResourceGUID *string
 }
 
-// EffectiveBaseSecurityAdminRuleClassification provides polymorphic access to related types.
-// Call the interface's GetEffectiveBaseSecurityAdminRule() method to access the common type.
-// Use a type switch to determine the concrete type.  The possible types are:
-// - *EffectiveBaseSecurityAdminRule, *EffectiveDefaultSecurityAdminRule, *EffectiveSecurityAdminRule
-type EffectiveBaseSecurityAdminRuleClassification interface {
-	// GetEffectiveBaseSecurityAdminRule returns the EffectiveBaseSecurityAdminRule content of the underlying type.
-	GetEffectiveBaseSecurityAdminRule() *EffectiveBaseSecurityAdminRule
-}
-
 // EffectiveBaseSecurityAdminRule - Network base admin rule.
 type EffectiveBaseSecurityAdminRule struct {
 	// REQUIRED; Whether the rule is custom or default.
@@ -5044,12 +4436,12 @@ type EffectiveDefaultSecurityAdminRule struct {
 // GetEffectiveBaseSecurityAdminRule implements the EffectiveBaseSecurityAdminRuleClassification interface for type EffectiveDefaultSecurityAdminRule.
 func (e *EffectiveDefaultSecurityAdminRule) GetEffectiveBaseSecurityAdminRule() *EffectiveBaseSecurityAdminRule {
 	return &EffectiveBaseSecurityAdminRule{
-		ID:                            e.ID,
 		ConfigurationDescription:      e.ConfigurationDescription,
-		RuleCollectionDescription:     e.RuleCollectionDescription,
+		ID:                            e.ID,
+		Kind:                          e.Kind,
 		RuleCollectionAppliesToGroups: e.RuleCollectionAppliesToGroups,
+		RuleCollectionDescription:     e.RuleCollectionDescription,
 		RuleGroups:                    e.RuleGroups,
-		Kind:                          e.Kind,
 	}
 }
 
@@ -5183,7 +4575,13 @@ type EffectiveRouteMapRoute struct {
 	BgpCommunities *string
 
 	// The address prefix of the route.
-	Prefix []*string
+	Prefix *string
+}
+
+// EffectiveRouteMapRouteList - EffectiveRouteMapRoute List.
+type EffectiveRouteMapRouteList struct {
+	// The list of Effective RouteMap Routes configured on the connection resource.
+	Value []*EffectiveRouteMapRoute
 }
 
 // EffectiveRoutesParameters - The parameters specifying the resource whose effective routes are being requested.
@@ -5223,12 +4621,12 @@ type EffectiveSecurityAdminRule struct {
 // GetEffectiveBaseSecurityAdminRule implements the EffectiveBaseSecurityAdminRuleClassification interface for type EffectiveSecurityAdminRule.
 func (e *EffectiveSecurityAdminRule) GetEffectiveBaseSecurityAdminRule() *EffectiveBaseSecurityAdminRule {
 	return &EffectiveBaseSecurityAdminRule{
-		ID:                            e.ID,
 		ConfigurationDescription:      e.ConfigurationDescription,
-		RuleCollectionDescription:     e.RuleCollectionDescription,
+		ID:                            e.ID,
+		Kind:                          e.Kind,
 		RuleCollectionAppliesToGroups: e.RuleCollectionAppliesToGroups,
+		RuleCollectionDescription:     e.RuleCollectionDescription,
 		RuleGroups:                    e.RuleGroups,
-		Kind:                          e.Kind,
 	}
 }
 
@@ -5412,32 +4810,6 @@ type ExpressRouteCircuitAuthorization struct {
 	Type *string
 }
 
-// ExpressRouteCircuitAuthorizationsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCircuitAuthorizationsClient.BeginCreateOrUpdate
-// method.
-type ExpressRouteCircuitAuthorizationsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCircuitAuthorizationsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteCircuitAuthorizationsClient.BeginDelete
-// method.
-type ExpressRouteCircuitAuthorizationsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCircuitAuthorizationsClientGetOptions contains the optional parameters for the ExpressRouteCircuitAuthorizationsClient.Get
-// method.
-type ExpressRouteCircuitAuthorizationsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCircuitAuthorizationsClientListOptions contains the optional parameters for the ExpressRouteCircuitAuthorizationsClient.NewListPager
-// method.
-type ExpressRouteCircuitAuthorizationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRouteCircuitConnection - Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.
 type ExpressRouteCircuitConnection struct {
 	// Resource ID.
@@ -5490,32 +4862,6 @@ type ExpressRouteCircuitConnectionPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// ExpressRouteCircuitConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCircuitConnectionsClient.BeginCreateOrUpdate
-// method.
-type ExpressRouteCircuitConnectionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCircuitConnectionsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteCircuitConnectionsClient.BeginDelete
-// method.
-type ExpressRouteCircuitConnectionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCircuitConnectionsClientGetOptions contains the optional parameters for the ExpressRouteCircuitConnectionsClient.Get
-// method.
-type ExpressRouteCircuitConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCircuitConnectionsClientListOptions contains the optional parameters for the ExpressRouteCircuitConnectionsClient.NewListPager
-// method.
-type ExpressRouteCircuitConnectionsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRouteCircuitListResult - Response for ListExpressRouteCircuit API service call.
 type ExpressRouteCircuitListResult struct {
 	// The URL to get the next set of results.
@@ -5643,32 +4989,6 @@ type ExpressRouteCircuitPeeringPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// ExpressRouteCircuitPeeringsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCircuitPeeringsClient.BeginCreateOrUpdate
-// method.
-type ExpressRouteCircuitPeeringsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCircuitPeeringsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteCircuitPeeringsClient.BeginDelete
-// method.
-type ExpressRouteCircuitPeeringsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCircuitPeeringsClientGetOptions contains the optional parameters for the ExpressRouteCircuitPeeringsClient.Get
-// method.
-type ExpressRouteCircuitPeeringsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCircuitPeeringsClientListOptions contains the optional parameters for the ExpressRouteCircuitPeeringsClient.NewListPager
-// method.
-type ExpressRouteCircuitPeeringsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRouteCircuitPropertiesFormat - Properties of ExpressRouteCircuit.
 type ExpressRouteCircuitPropertiesFormat struct {
 	// Allow classic operations.
@@ -5811,76 +5131,6 @@ type ExpressRouteCircuitsArpTableListResult struct {
 	Value []*ExpressRouteCircuitArpTable
 }
 
-// ExpressRouteCircuitsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCircuitsClient.BeginCreateOrUpdate
-// method.
-type ExpressRouteCircuitsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCircuitsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteCircuitsClient.BeginDelete
-// method.
-type ExpressRouteCircuitsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCircuitsClientBeginListArpTableOptions contains the optional parameters for the ExpressRouteCircuitsClient.BeginListArpTable
-// method.
-type ExpressRouteCircuitsClientBeginListArpTableOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCircuitsClientBeginListRoutesTableOptions contains the optional parameters for the ExpressRouteCircuitsClient.BeginListRoutesTable
-// method.
-type ExpressRouteCircuitsClientBeginListRoutesTableOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCircuitsClientBeginListRoutesTableSummaryOptions contains the optional parameters for the ExpressRouteCircuitsClient.BeginListRoutesTableSummary
-// method.
-type ExpressRouteCircuitsClientBeginListRoutesTableSummaryOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCircuitsClientGetOptions contains the optional parameters for the ExpressRouteCircuitsClient.Get method.
-type ExpressRouteCircuitsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCircuitsClientGetPeeringStatsOptions contains the optional parameters for the ExpressRouteCircuitsClient.GetPeeringStats
-// method.
-type ExpressRouteCircuitsClientGetPeeringStatsOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCircuitsClientGetStatsOptions contains the optional parameters for the ExpressRouteCircuitsClient.GetStats
-// method.
-type ExpressRouteCircuitsClientGetStatsOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCircuitsClientListAllOptions contains the optional parameters for the ExpressRouteCircuitsClient.NewListAllPager
-// method.
-type ExpressRouteCircuitsClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCircuitsClientListOptions contains the optional parameters for the ExpressRouteCircuitsClient.NewListPager
-// method.
-type ExpressRouteCircuitsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCircuitsClientUpdateTagsOptions contains the optional parameters for the ExpressRouteCircuitsClient.UpdateTags
-// method.
-type ExpressRouteCircuitsClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRouteCircuitsRoutesTableListResult - Response for ListRoutesTable associated with the Express Route Circuits API.
 type ExpressRouteCircuitsRoutesTableListResult struct {
 	// The URL to get the next set of results.
@@ -5952,30 +5202,6 @@ type ExpressRouteConnectionProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// ExpressRouteConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteConnectionsClient.BeginCreateOrUpdate
-// method.
-type ExpressRouteConnectionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteConnectionsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteConnectionsClient.BeginDelete
-// method.
-type ExpressRouteConnectionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteConnectionsClientGetOptions contains the optional parameters for the ExpressRouteConnectionsClient.Get method.
-type ExpressRouteConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteConnectionsClientListOptions contains the optional parameters for the ExpressRouteConnectionsClient.List method.
-type ExpressRouteConnectionsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRouteCrossConnection resource.
 type ExpressRouteCrossConnection struct {
 	// Resource ID.
@@ -6082,32 +5308,6 @@ type ExpressRouteCrossConnectionPeeringProperties struct {
 	SecondaryAzurePort *string
 }
 
-// ExpressRouteCrossConnectionPeeringsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCrossConnectionPeeringsClient.BeginCreateOrUpdate
-// method.
-type ExpressRouteCrossConnectionPeeringsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCrossConnectionPeeringsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteCrossConnectionPeeringsClient.BeginDelete
-// method.
-type ExpressRouteCrossConnectionPeeringsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCrossConnectionPeeringsClientGetOptions contains the optional parameters for the ExpressRouteCrossConnectionPeeringsClient.Get
-// method.
-type ExpressRouteCrossConnectionPeeringsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCrossConnectionPeeringsClientListOptions contains the optional parameters for the ExpressRouteCrossConnectionPeeringsClient.NewListPager
-// method.
-type ExpressRouteCrossConnectionPeeringsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRouteCrossConnectionProperties - Properties of ExpressRouteCrossConnection.
 type ExpressRouteCrossConnectionProperties struct {
 	// The ExpressRouteCircuit.
@@ -6157,58 +5357,6 @@ type ExpressRouteCrossConnectionRoutesTableSummary struct {
 	UpDown *string
 }
 
-// ExpressRouteCrossConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.BeginCreateOrUpdate
-// method.
-type ExpressRouteCrossConnectionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCrossConnectionsClientBeginListArpTableOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.BeginListArpTable
-// method.
-type ExpressRouteCrossConnectionsClientBeginListArpTableOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCrossConnectionsClientBeginListRoutesTableOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.BeginListRoutesTable
-// method.
-type ExpressRouteCrossConnectionsClientBeginListRoutesTableOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCrossConnectionsClientBeginListRoutesTableSummaryOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.BeginListRoutesTableSummary
-// method.
-type ExpressRouteCrossConnectionsClientBeginListRoutesTableSummaryOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteCrossConnectionsClientGetOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.Get
-// method.
-type ExpressRouteCrossConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCrossConnectionsClientListByResourceGroupOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.NewListByResourceGroupPager
-// method.
-type ExpressRouteCrossConnectionsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCrossConnectionsClientListOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.NewListPager
-// method.
-type ExpressRouteCrossConnectionsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteCrossConnectionsClientUpdateTagsOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.UpdateTags
-// method.
-type ExpressRouteCrossConnectionsClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRouteCrossConnectionsRoutesTableSummaryListResult - Response for ListRoutesTable associated with the Express Route
 // Cross Connections.
 type ExpressRouteCrossConnectionsRoutesTableSummaryListResult struct {
@@ -6282,44 +5430,6 @@ type ExpressRouteGatewayPropertiesAutoScaleConfigurationBounds struct {
 	Min *int32
 }
 
-// ExpressRouteGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteGatewaysClient.BeginCreateOrUpdate
-// method.
-type ExpressRouteGatewaysClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteGatewaysClientBeginDeleteOptions contains the optional parameters for the ExpressRouteGatewaysClient.BeginDelete
-// method.
-type ExpressRouteGatewaysClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteGatewaysClientBeginUpdateTagsOptions contains the optional parameters for the ExpressRouteGatewaysClient.BeginUpdateTags
-// method.
-type ExpressRouteGatewaysClientBeginUpdateTagsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRouteGatewaysClientGetOptions contains the optional parameters for the ExpressRouteGatewaysClient.Get method.
-type ExpressRouteGatewaysClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteGatewaysClientListByResourceGroupOptions contains the optional parameters for the ExpressRouteGatewaysClient.ListByResourceGroup
-// method.
-type ExpressRouteGatewaysClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteGatewaysClientListBySubscriptionOptions contains the optional parameters for the ExpressRouteGatewaysClient.ListBySubscription
-// method.
-type ExpressRouteGatewaysClientListBySubscriptionOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRouteLink child resource definition.
 type ExpressRouteLink struct {
 	// Resource ID.
@@ -6389,16 +5499,6 @@ type ExpressRouteLinkPropertiesFormat struct {
 	RouterName *string
 }
 
-// ExpressRouteLinksClientGetOptions contains the optional parameters for the ExpressRouteLinksClient.Get method.
-type ExpressRouteLinksClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRouteLinksClientListOptions contains the optional parameters for the ExpressRouteLinksClient.NewListPager method.
-type ExpressRouteLinksClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRoutePort resource definition.
 type ExpressRoutePort struct {
 	// Resource ID.
@@ -6468,32 +5568,6 @@ type ExpressRoutePortAuthorizationPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// ExpressRoutePortAuthorizationsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRoutePortAuthorizationsClient.BeginCreateOrUpdate
-// method.
-type ExpressRoutePortAuthorizationsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRoutePortAuthorizationsClientBeginDeleteOptions contains the optional parameters for the ExpressRoutePortAuthorizationsClient.BeginDelete
-// method.
-type ExpressRoutePortAuthorizationsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRoutePortAuthorizationsClientGetOptions contains the optional parameters for the ExpressRoutePortAuthorizationsClient.Get
-// method.
-type ExpressRoutePortAuthorizationsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRoutePortAuthorizationsClientListOptions contains the optional parameters for the ExpressRoutePortAuthorizationsClient.NewListPager
-// method.
-type ExpressRoutePortAuthorizationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRoutePortListResult - Response for ListExpressRoutePorts API service call.
 type ExpressRoutePortListResult struct {
 	// The URL to get the next set of results.
@@ -6542,47 +5616,6 @@ type ExpressRoutePortPropertiesFormat struct {
 	ResourceGUID *string
 }
 
-// ExpressRoutePortsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRoutePortsClient.BeginCreateOrUpdate
-// method.
-type ExpressRoutePortsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRoutePortsClientBeginDeleteOptions contains the optional parameters for the ExpressRoutePortsClient.BeginDelete
-// method.
-type ExpressRoutePortsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ExpressRoutePortsClientGenerateLOAOptions contains the optional parameters for the ExpressRoutePortsClient.GenerateLOA
-// method.
-type ExpressRoutePortsClientGenerateLOAOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRoutePortsClientGetOptions contains the optional parameters for the ExpressRoutePortsClient.Get method.
-type ExpressRoutePortsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRoutePortsClientListByResourceGroupOptions contains the optional parameters for the ExpressRoutePortsClient.NewListByResourceGroupPager
-// method.
-type ExpressRoutePortsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRoutePortsClientListOptions contains the optional parameters for the ExpressRoutePortsClient.NewListPager method.
-type ExpressRoutePortsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRoutePortsClientUpdateTagsOptions contains the optional parameters for the ExpressRoutePortsClient.UpdateTags method.
-type ExpressRoutePortsClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRoutePortsLocation - Definition of the ExpressRoutePorts peering location resource.
 type ExpressRoutePortsLocation struct {
 	// Resource ID.
@@ -6637,18 +5670,6 @@ type ExpressRoutePortsLocationPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// ExpressRoutePortsLocationsClientGetOptions contains the optional parameters for the ExpressRoutePortsLocationsClient.Get
-// method.
-type ExpressRoutePortsLocationsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ExpressRoutePortsLocationsClientListOptions contains the optional parameters for the ExpressRoutePortsLocationsClient.NewListPager
-// method.
-type ExpressRoutePortsLocationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExpressRouteProviderPort resource.
 type ExpressRouteProviderPort struct {
 	// Resource ID.
@@ -6709,13 +5730,6 @@ type ExpressRouteProviderPortProperties struct {
 	SecondaryAzurePort *string
 }
 
-// ExpressRouteProviderPortsLocationClientListOptions contains the optional parameters for the ExpressRouteProviderPortsLocationClient.List
-// method.
-type ExpressRouteProviderPortsLocationClientListOptions struct {
-	// The filter to apply on the operation. For example, you can use $filter=location eq '{state}'.
-	Filter *string
-}
-
 // ExpressRouteServiceProvider - A ExpressRouteResourceProvider object.
 type ExpressRouteServiceProvider struct {
 	// Resource ID.
@@ -6767,12 +5781,6 @@ type ExpressRouteServiceProviderPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// ExpressRouteServiceProvidersClientListOptions contains the optional parameters for the ExpressRouteServiceProvidersClient.NewListPager
-// method.
-type ExpressRouteServiceProvidersClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ExtendedLocation complex type.
 type ExtendedLocation struct {
 	// The name of the extended location.
@@ -6791,38 +5799,37 @@ type FilterItems struct {
 	Values []*string
 }
 
-// FirewallPoliciesClientBeginCreateOrUpdateOptions contains the optional parameters for the FirewallPoliciesClient.BeginCreateOrUpdate
-// method.
-type FirewallPoliciesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
+// FirewallPacketCaptureParameters - Azure Firewall Packet Capture Parameters resource.
+type FirewallPacketCaptureParameters struct {
+	// Resource ID.
+	ID *string
 
-// FirewallPoliciesClientBeginDeleteOptions contains the optional parameters for the FirewallPoliciesClient.BeginDelete method.
-type FirewallPoliciesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
+	// Properties of the azure firewall.
+	Properties *FirewallPacketCaptureParametersFormat
 }
 
-// FirewallPoliciesClientGetOptions contains the optional parameters for the FirewallPoliciesClient.Get method.
-type FirewallPoliciesClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
+// FirewallPacketCaptureParametersFormat - Packet capture parameters on azure firewall.
+type FirewallPacketCaptureParametersFormat struct {
+	// Duration of packet capture in seconds.
+	DurationInSeconds *int32
 
-// FirewallPoliciesClientListAllOptions contains the optional parameters for the FirewallPoliciesClient.NewListAllPager method.
-type FirewallPoliciesClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
+	// Name of file to be uploaded to sasURL
+	FileName *string
 
-// FirewallPoliciesClientListOptions contains the optional parameters for the FirewallPoliciesClient.NewListPager method.
-type FirewallPoliciesClientListOptions struct {
-	// placeholder for future optional parameters
-}
+	// Rules to filter packet captures.
+	Filters []*AzureFirewallPacketCaptureRule
 
-// FirewallPoliciesClientUpdateTagsOptions contains the optional parameters for the FirewallPoliciesClient.UpdateTags method.
-type FirewallPoliciesClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
+	// The tcp-flag type to be captured. Used with protocol TCP
+	Flags []*AzureFirewallPacketCaptureFlags
+
+	// Number of packets to be captured.
+	NumberOfPacketsToCapture *int32
+
+	// The protocol of packets to capture
+	Protocol *AzureFirewallNetworkRuleProtocol
+
+	// Upload capture location
+	SasURL *string
 }
 
 // FirewallPolicy Resource.
@@ -6882,9 +5889,9 @@ type FirewallPolicyFilterRuleCollection struct {
 // GetFirewallPolicyRuleCollection implements the FirewallPolicyRuleCollectionClassification interface for type FirewallPolicyFilterRuleCollection.
 func (f *FirewallPolicyFilterRuleCollection) GetFirewallPolicyRuleCollection() *FirewallPolicyRuleCollection {
 	return &FirewallPolicyRuleCollection{
-		RuleCollectionType: f.RuleCollectionType,
 		Name:               f.Name,
 		Priority:           f.Priority,
+		RuleCollectionType: f.RuleCollectionType,
 	}
 }
 
@@ -6894,40 +5901,13 @@ type FirewallPolicyFilterRuleCollectionAction struct {
 	Type *FirewallPolicyFilterRuleCollectionActionType
 }
 
-// FirewallPolicyIdpsSignaturesClientListOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesClient.List
-// method.
-type FirewallPolicyIdpsSignaturesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// FirewallPolicyIdpsSignaturesFilterValuesClientListOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesFilterValuesClient.List
-// method.
-type FirewallPolicyIdpsSignaturesFilterValuesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// FirewallPolicyIdpsSignaturesOverridesClientGetOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.Get
-// method.
-type FirewallPolicyIdpsSignaturesOverridesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// FirewallPolicyIdpsSignaturesOverridesClientListOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.List
-// method.
-type FirewallPolicyIdpsSignaturesOverridesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// FirewallPolicyIdpsSignaturesOverridesClientPatchOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.Patch
-// method.
-type FirewallPolicyIdpsSignaturesOverridesClientPatchOptions struct {
-	// placeholder for future optional parameters
-}
+// FirewallPolicyHTTPHeaderToInsert - name and value of HTTP/S header to insert
+type FirewallPolicyHTTPHeaderToInsert struct {
+	// Contains the name of the header
+	HeaderName *string
 
-// FirewallPolicyIdpsSignaturesOverridesClientPutOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.Put
-// method.
-type FirewallPolicyIdpsSignaturesOverridesClientPutOptions struct {
-	// placeholder for future optional parameters
+	// Contains the value of the header
+	HeaderValue *string
 }
 
 // FirewallPolicyInsights - Firewall Policy Insights.
@@ -7049,9 +6029,9 @@ type FirewallPolicyNatRuleCollection struct {
 // GetFirewallPolicyRuleCollection implements the FirewallPolicyRuleCollectionClassification interface for type FirewallPolicyNatRuleCollection.
 func (f *FirewallPolicyNatRuleCollection) GetFirewallPolicyRuleCollection() *FirewallPolicyRuleCollection {
 	return &FirewallPolicyRuleCollection{
-		RuleCollectionType: f.RuleCollectionType,
 		Name:               f.Name,
 		Priority:           f.Priority,
+		RuleCollectionType: f.RuleCollectionType,
 	}
 }
 
@@ -7107,15 +6087,9 @@ type FirewallPolicyPropertiesFormat struct {
 
 	// READ-ONLY; List of references to FirewallPolicyRuleCollectionGroups.
 	RuleCollectionGroups []*SubResource
-}
 
-// FirewallPolicyRuleClassification provides polymorphic access to related types.
-// Call the interface's GetFirewallPolicyRule() method to access the common type.
-// Use a type switch to determine the concrete type.  The possible types are:
-// - *ApplicationRule, *FirewallPolicyRule, *NatRule, *Rule
-type FirewallPolicyRuleClassification interface {
-	// GetFirewallPolicyRule returns the FirewallPolicyRule content of the underlying type.
-	GetFirewallPolicyRule() *FirewallPolicyRule
+	// READ-ONLY; A read-only string that represents the size of the FirewallPolicyPropertiesFormat in MB. (ex 0.5MB)
+	Size *string
 }
 
 // FirewallPolicyRule - Properties of a rule.
@@ -7142,15 +6116,6 @@ type FirewallPolicyRuleApplicationProtocol struct {
 	ProtocolType *FirewallPolicyRuleApplicationProtocolType
 }
 
-// FirewallPolicyRuleCollectionClassification provides polymorphic access to related types.
-// Call the interface's GetFirewallPolicyRuleCollection() method to access the common type.
-// Use a type switch to determine the concrete type.  The possible types are:
-// - *FirewallPolicyFilterRuleCollection, *FirewallPolicyNatRuleCollection, *FirewallPolicyRuleCollection
-type FirewallPolicyRuleCollectionClassification interface {
-	// GetFirewallPolicyRuleCollection returns the FirewallPolicyRuleCollection content of the underlying type.
-	GetFirewallPolicyRuleCollection() *FirewallPolicyRuleCollection
-}
-
 // FirewallPolicyRuleCollection - Properties of the rule collection.
 type FirewallPolicyRuleCollection struct {
 	// REQUIRED; The type of the rule collection.
@@ -7205,32 +6170,9 @@ type FirewallPolicyRuleCollectionGroupProperties struct {
 
 	// READ-ONLY; The provisioning state of the firewall policy rule collection group resource.
 	ProvisioningState *ProvisioningState
-}
-
-// FirewallPolicyRuleCollectionGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the FirewallPolicyRuleCollectionGroupsClient.BeginCreateOrUpdate
-// method.
-type FirewallPolicyRuleCollectionGroupsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// FirewallPolicyRuleCollectionGroupsClientBeginDeleteOptions contains the optional parameters for the FirewallPolicyRuleCollectionGroupsClient.BeginDelete
-// method.
-type FirewallPolicyRuleCollectionGroupsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// FirewallPolicyRuleCollectionGroupsClientGetOptions contains the optional parameters for the FirewallPolicyRuleCollectionGroupsClient.Get
-// method.
-type FirewallPolicyRuleCollectionGroupsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
 
-// FirewallPolicyRuleCollectionGroupsClientListOptions contains the optional parameters for the FirewallPolicyRuleCollectionGroupsClient.NewListPager
-// method.
-type FirewallPolicyRuleCollectionGroupsClientListOptions struct {
-	// placeholder for future optional parameters
+	// READ-ONLY; A read-only string that represents the size of the FirewallPolicyRuleCollectionGroupProperties in MB. (ex 1.2MB)
+	Size *string
 }
 
 // FirewallPolicySKU - SKU of Firewall policy.
@@ -7371,33 +6313,6 @@ type FlowLogStatusParameters struct {
 	TargetResourceID *string
 }
 
-// FlowLogsClientBeginCreateOrUpdateOptions contains the optional parameters for the FlowLogsClient.BeginCreateOrUpdate method.
-type FlowLogsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// FlowLogsClientBeginDeleteOptions contains the optional parameters for the FlowLogsClient.BeginDelete method.
-type FlowLogsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// FlowLogsClientGetOptions contains the optional parameters for the FlowLogsClient.Get method.
-type FlowLogsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// FlowLogsClientListOptions contains the optional parameters for the FlowLogsClient.NewListPager method.
-type FlowLogsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// FlowLogsClientUpdateTagsOptions contains the optional parameters for the FlowLogsClient.UpdateTags method.
-type FlowLogsClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // FrontendIPConfiguration - Frontend IP address of the load balancer.
 type FrontendIPConfiguration struct {
 	// Resource ID.
@@ -7575,6 +6490,18 @@ type Group struct {
 	Type *string
 }
 
+// GroupByUserSession - Define user session identifier group by clauses.
+type GroupByUserSession struct {
+	// REQUIRED; List of group by clause variables.
+	GroupByVariables []*GroupByVariable
+}
+
+// GroupByVariable - Define user session group by clause variables.
+type GroupByVariable struct {
+	// REQUIRED; User Session clause variable.
+	VariableName *ApplicationGatewayFirewallUserSessionVariable
+}
+
 // GroupListResult - Result of the request to list NetworkGroup. It contains a list of groups and a URL link to get the next
 // set of results.
 type GroupListResult struct {
@@ -7592,37 +6519,9 @@ type GroupProperties struct {
 
 	// READ-ONLY; The provisioning state of the scope assignment resource.
 	ProvisioningState *ProvisioningState
-}
-
-// GroupsClientBeginDeleteOptions contains the optional parameters for the GroupsClient.BeginDelete method.
-type GroupsClientBeginDeleteOptions struct {
-	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
-	// will do a cleanup deployment in the background, prior to the delete.
-	Force *bool
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// GroupsClientCreateOrUpdateOptions contains the optional parameters for the GroupsClient.CreateOrUpdate method.
-type GroupsClientCreateOrUpdateOptions struct {
-	// The ETag of the transformation. Omit this value to always overwrite the current resource. Specify the last-seen ETag value
-	// to prevent accidentally overwriting concurrent changes.
-	IfMatch *string
-}
 
-// GroupsClientGetOptions contains the optional parameters for the GroupsClient.Get method.
-type GroupsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// GroupsClientListOptions contains the optional parameters for the GroupsClient.NewListPager method.
-type GroupsClientListOptions struct {
-	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
-	// the value of the nextLink element will include a skipToken parameter that
-	// specifies a starting point to use for subsequent calls.
-	SkipToken *string
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
+	// READ-ONLY; Unique identifier for this resource.
+	ResourceGUID *string
 }
 
 // HTTPConfiguration - HTTP configuration of the connectivity check.
@@ -7796,29 +6695,6 @@ type HubRouteTableProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// HubRouteTablesClientBeginCreateOrUpdateOptions contains the optional parameters for the HubRouteTablesClient.BeginCreateOrUpdate
-// method.
-type HubRouteTablesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// HubRouteTablesClientBeginDeleteOptions contains the optional parameters for the HubRouteTablesClient.BeginDelete method.
-type HubRouteTablesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// HubRouteTablesClientGetOptions contains the optional parameters for the HubRouteTablesClient.Get method.
-type HubRouteTablesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// HubRouteTablesClientListOptions contains the optional parameters for the HubRouteTablesClient.NewListPager method.
-type HubRouteTablesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // HubVirtualNetworkConnection Resource.
 type HubVirtualNetworkConnection struct {
 	// Resource ID.
@@ -7855,32 +6731,6 @@ type HubVirtualNetworkConnectionProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// HubVirtualNetworkConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the HubVirtualNetworkConnectionsClient.BeginCreateOrUpdate
-// method.
-type HubVirtualNetworkConnectionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// HubVirtualNetworkConnectionsClientBeginDeleteOptions contains the optional parameters for the HubVirtualNetworkConnectionsClient.BeginDelete
-// method.
-type HubVirtualNetworkConnectionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// HubVirtualNetworkConnectionsClientGetOptions contains the optional parameters for the HubVirtualNetworkConnectionsClient.Get
-// method.
-type HubVirtualNetworkConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// HubVirtualNetworkConnectionsClientListOptions contains the optional parameters for the HubVirtualNetworkConnectionsClient.NewListPager
-// method.
-type HubVirtualNetworkConnectionsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // IDPSQueryObject - Will describe the query to run against the IDPS signatures DB
 type IDPSQueryObject struct {
 	// Contain all filters names and values
@@ -7971,41 +6821,6 @@ type IPAllocationPropertiesFormat struct {
 	VirtualNetwork *SubResource
 }
 
-// IPAllocationsClientBeginCreateOrUpdateOptions contains the optional parameters for the IPAllocationsClient.BeginCreateOrUpdate
-// method.
-type IPAllocationsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// IPAllocationsClientBeginDeleteOptions contains the optional parameters for the IPAllocationsClient.BeginDelete method.
-type IPAllocationsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// IPAllocationsClientGetOptions contains the optional parameters for the IPAllocationsClient.Get method.
-type IPAllocationsClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// IPAllocationsClientListByResourceGroupOptions contains the optional parameters for the IPAllocationsClient.NewListByResourceGroupPager
-// method.
-type IPAllocationsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// IPAllocationsClientListOptions contains the optional parameters for the IPAllocationsClient.NewListPager method.
-type IPAllocationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// IPAllocationsClientUpdateTagsOptions contains the optional parameters for the IPAllocationsClient.UpdateTags method.
-type IPAllocationsClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // IPConfiguration - IP configuration.
 type IPConfiguration struct {
 	// Resource ID.
@@ -8129,46 +6944,17 @@ type IPGroupPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// IPGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the IPGroupsClient.BeginCreateOrUpdate method.
-type IPGroupsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// IPGroupsClientBeginDeleteOptions contains the optional parameters for the IPGroupsClient.BeginDelete method.
-type IPGroupsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// IPGroupsClientGetOptions contains the optional parameters for the IPGroupsClient.Get method.
-type IPGroupsClientGetOptions struct {
-	// Expands resourceIds (of Firewalls/Network Security Groups etc.) back referenced by the IpGroups resource.
-	Expand *string
-}
-
-// IPGroupsClientListByResourceGroupOptions contains the optional parameters for the IPGroupsClient.NewListByResourceGroupPager
-// method.
-type IPGroupsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// IPGroupsClientListOptions contains the optional parameters for the IPGroupsClient.NewListPager method.
-type IPGroupsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// IPGroupsClientUpdateGroupsOptions contains the optional parameters for the IPGroupsClient.UpdateGroups method.
-type IPGroupsClientUpdateGroupsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // IPPrefixesList - List of SNAT IP Prefixes learnt by firewall to not SNAT
 type IPPrefixesList struct {
 	// IP Prefix value.
 	IPPrefixes []*string
 }
 
+type IPRule struct {
+	// Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
+	AddressPrefix *string
+}
+
 // IPSecPolicy - An IPSec Policy configuration for a virtual network gateway connection.
 type IPSecPolicy struct {
 	// REQUIRED; The DH Group used in IKE Phase 1 for initial SA.
@@ -8381,30 +7167,6 @@ type InboundNatRulePropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// InboundNatRulesClientBeginCreateOrUpdateOptions contains the optional parameters for the InboundNatRulesClient.BeginCreateOrUpdate
-// method.
-type InboundNatRulesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// InboundNatRulesClientBeginDeleteOptions contains the optional parameters for the InboundNatRulesClient.BeginDelete method.
-type InboundNatRulesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// InboundNatRulesClientGetOptions contains the optional parameters for the InboundNatRulesClient.Get method.
-type InboundNatRulesClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// InboundNatRulesClientListOptions contains the optional parameters for the InboundNatRulesClient.NewListPager method.
-type InboundNatRulesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // InboundSecurityRule - NVA Inbound Security Rule resource.
 type InboundSecurityRule struct {
 	// Resource ID.
@@ -8423,13 +7185,6 @@ type InboundSecurityRule struct {
 	Type *string
 }
 
-// InboundSecurityRuleClientBeginCreateOrUpdateOptions contains the optional parameters for the InboundSecurityRuleClient.BeginCreateOrUpdate
-// method.
-type InboundSecurityRuleClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
 // InboundSecurityRuleProperties - Properties of the Inbound Security Rules resource.
 type InboundSecurityRuleProperties struct {
 	// List of allowed rules.
@@ -8625,18 +7380,6 @@ type InterfaceIPConfigurationPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// InterfaceIPConfigurationsClientGetOptions contains the optional parameters for the InterfaceIPConfigurationsClient.Get
-// method.
-type InterfaceIPConfigurationsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// InterfaceIPConfigurationsClientListOptions contains the optional parameters for the InterfaceIPConfigurationsClient.NewListPager
-// method.
-type InterfaceIPConfigurationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // InterfaceListResult - Response for the ListNetworkInterface API service call.
 type InterfaceListResult struct {
 	// A list of network interfaces in a resource group.
@@ -8655,17 +7398,14 @@ type InterfaceLoadBalancerListResult struct {
 	NextLink *string
 }
 
-// InterfaceLoadBalancersClientListOptions contains the optional parameters for the InterfaceLoadBalancersClient.NewListPager
-// method.
-type InterfaceLoadBalancersClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // InterfacePropertiesFormat - NetworkInterface properties.
 type InterfacePropertiesFormat struct {
 	// Auxiliary mode of Network Interface resource.
 	AuxiliaryMode *NetworkInterfaceAuxiliaryMode
 
+	// Auxiliary sku of Network Interface resource.
+	AuxiliarySKU *NetworkInterfaceAuxiliarySKU
+
 	// The DNS settings in network interface.
 	DNSSettings *InterfaceDNSSettings
 
@@ -8764,132 +7504,6 @@ type InterfaceTapConfigurationPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// InterfaceTapConfigurationsClientBeginCreateOrUpdateOptions contains the optional parameters for the InterfaceTapConfigurationsClient.BeginCreateOrUpdate
-// method.
-type InterfaceTapConfigurationsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// InterfaceTapConfigurationsClientBeginDeleteOptions contains the optional parameters for the InterfaceTapConfigurationsClient.BeginDelete
-// method.
-type InterfaceTapConfigurationsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// InterfaceTapConfigurationsClientGetOptions contains the optional parameters for the InterfaceTapConfigurationsClient.Get
-// method.
-type InterfaceTapConfigurationsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// InterfaceTapConfigurationsClientListOptions contains the optional parameters for the InterfaceTapConfigurationsClient.NewListPager
-// method.
-type InterfaceTapConfigurationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// InterfacesClientBeginCreateOrUpdateOptions contains the optional parameters for the InterfacesClient.BeginCreateOrUpdate
-// method.
-type InterfacesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// InterfacesClientBeginDeleteOptions contains the optional parameters for the InterfacesClient.BeginDelete method.
-type InterfacesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// InterfacesClientBeginGetEffectiveRouteTableOptions contains the optional parameters for the InterfacesClient.BeginGetEffectiveRouteTable
-// method.
-type InterfacesClientBeginGetEffectiveRouteTableOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// InterfacesClientBeginListEffectiveNetworkSecurityGroupsOptions contains the optional parameters for the InterfacesClient.BeginListEffectiveNetworkSecurityGroups
-// method.
-type InterfacesClientBeginListEffectiveNetworkSecurityGroupsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// InterfacesClientGetCloudServiceNetworkInterfaceOptions contains the optional parameters for the InterfacesClient.GetCloudServiceNetworkInterface
-// method.
-type InterfacesClientGetCloudServiceNetworkInterfaceOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// InterfacesClientGetOptions contains the optional parameters for the InterfacesClient.Get method.
-type InterfacesClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// InterfacesClientGetVirtualMachineScaleSetIPConfigurationOptions contains the optional parameters for the InterfacesClient.GetVirtualMachineScaleSetIPConfiguration
-// method.
-type InterfacesClientGetVirtualMachineScaleSetIPConfigurationOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceOptions contains the optional parameters for the InterfacesClient.GetVirtualMachineScaleSetNetworkInterface
-// method.
-type InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// InterfacesClientListAllOptions contains the optional parameters for the InterfacesClient.NewListAllPager method.
-type InterfacesClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// InterfacesClientListCloudServiceNetworkInterfacesOptions contains the optional parameters for the InterfacesClient.NewListCloudServiceNetworkInterfacesPager
-// method.
-type InterfacesClientListCloudServiceNetworkInterfacesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// InterfacesClientListCloudServiceRoleInstanceNetworkInterfacesOptions contains the optional parameters for the InterfacesClient.NewListCloudServiceRoleInstanceNetworkInterfacesPager
-// method.
-type InterfacesClientListCloudServiceRoleInstanceNetworkInterfacesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// InterfacesClientListOptions contains the optional parameters for the InterfacesClient.NewListPager method.
-type InterfacesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// InterfacesClientListVirtualMachineScaleSetIPConfigurationsOptions contains the optional parameters for the InterfacesClient.NewListVirtualMachineScaleSetIPConfigurationsPager
-// method.
-type InterfacesClientListVirtualMachineScaleSetIPConfigurationsOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// InterfacesClientListVirtualMachineScaleSetNetworkInterfacesOptions contains the optional parameters for the InterfacesClient.NewListVirtualMachineScaleSetNetworkInterfacesPager
-// method.
-type InterfacesClientListVirtualMachineScaleSetNetworkInterfacesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// InterfacesClientListVirtualMachineScaleSetVMNetworkInterfacesOptions contains the optional parameters for the InterfacesClient.NewListVirtualMachineScaleSetVMNetworkInterfacesPager
-// method.
-type InterfacesClientListVirtualMachineScaleSetVMNetworkInterfacesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// InterfacesClientUpdateTagsOptions contains the optional parameters for the InterfacesClient.UpdateTags method.
-type InterfacesClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ListHubRouteTablesResult - List of RouteTables and a URL nextLink to get the next set of results.
 type ListHubRouteTablesResult struct {
 	// URL to get the next set of operation list results if there are any.
@@ -9122,32 +7736,6 @@ type LoadBalancerBackendAddressPoolListResult struct {
 	NextLink *string
 }
 
-// LoadBalancerBackendAddressPoolsClientBeginCreateOrUpdateOptions contains the optional parameters for the LoadBalancerBackendAddressPoolsClient.BeginCreateOrUpdate
-// method.
-type LoadBalancerBackendAddressPoolsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// LoadBalancerBackendAddressPoolsClientBeginDeleteOptions contains the optional parameters for the LoadBalancerBackendAddressPoolsClient.BeginDelete
-// method.
-type LoadBalancerBackendAddressPoolsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// LoadBalancerBackendAddressPoolsClientGetOptions contains the optional parameters for the LoadBalancerBackendAddressPoolsClient.Get
-// method.
-type LoadBalancerBackendAddressPoolsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// LoadBalancerBackendAddressPoolsClientListOptions contains the optional parameters for the LoadBalancerBackendAddressPoolsClient.NewListPager
-// method.
-type LoadBalancerBackendAddressPoolsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // LoadBalancerBackendAddressPropertiesFormat - Properties of the load balancer backend addresses.
 type LoadBalancerBackendAddressPropertiesFormat struct {
 	// A list of administrative states which once set can override health probe so that Load Balancer will always forward new
@@ -9182,18 +7770,6 @@ type LoadBalancerFrontendIPConfigurationListResult struct {
 	NextLink *string
 }
 
-// LoadBalancerFrontendIPConfigurationsClientGetOptions contains the optional parameters for the LoadBalancerFrontendIPConfigurationsClient.Get
-// method.
-type LoadBalancerFrontendIPConfigurationsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// LoadBalancerFrontendIPConfigurationsClientListOptions contains the optional parameters for the LoadBalancerFrontendIPConfigurationsClient.NewListPager
-// method.
-type LoadBalancerFrontendIPConfigurationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // LoadBalancerListResult - Response for ListLoadBalancers API service call.
 type LoadBalancerListResult struct {
 	// A list of load balancers in a resource group.
@@ -9212,24 +7788,6 @@ type LoadBalancerLoadBalancingRuleListResult struct {
 	NextLink *string
 }
 
-// LoadBalancerLoadBalancingRulesClientGetOptions contains the optional parameters for the LoadBalancerLoadBalancingRulesClient.Get
-// method.
-type LoadBalancerLoadBalancingRulesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// LoadBalancerLoadBalancingRulesClientListOptions contains the optional parameters for the LoadBalancerLoadBalancingRulesClient.NewListPager
-// method.
-type LoadBalancerLoadBalancingRulesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// LoadBalancerNetworkInterfacesClientListOptions contains the optional parameters for the LoadBalancerNetworkInterfacesClient.NewListPager
-// method.
-type LoadBalancerNetworkInterfacesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // LoadBalancerOutboundRuleListResult - Response for ListOutboundRule API service call.
 type LoadBalancerOutboundRuleListResult struct {
 	// A list of outbound rules in a load balancer.
@@ -9239,18 +7797,6 @@ type LoadBalancerOutboundRuleListResult struct {
 	NextLink *string
 }
 
-// LoadBalancerOutboundRulesClientGetOptions contains the optional parameters for the LoadBalancerOutboundRulesClient.Get
-// method.
-type LoadBalancerOutboundRulesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// LoadBalancerOutboundRulesClientListOptions contains the optional parameters for the LoadBalancerOutboundRulesClient.NewListPager
-// method.
-type LoadBalancerOutboundRulesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // LoadBalancerProbeListResult - Response for ListProbe API service call.
 type LoadBalancerProbeListResult struct {
 	// A list of probes in a load balancer.
@@ -9260,16 +7806,6 @@ type LoadBalancerProbeListResult struct {
 	NextLink *string
 }
 
-// LoadBalancerProbesClientGetOptions contains the optional parameters for the LoadBalancerProbesClient.Get method.
-type LoadBalancerProbesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// LoadBalancerProbesClientListOptions contains the optional parameters for the LoadBalancerProbesClient.NewListPager method.
-type LoadBalancerProbesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // LoadBalancerPropertiesFormat - Properties of the load balancer.
 type LoadBalancerPropertiesFormat struct {
 	// Collection of backend address pools used by a load balancer.
@@ -9339,54 +7875,6 @@ type LoadBalancerVipSwapRequestFrontendIPConfigurationProperties struct {
 	PublicIPAddress *SubResource
 }
 
-// LoadBalancersClientBeginCreateOrUpdateOptions contains the optional parameters for the LoadBalancersClient.BeginCreateOrUpdate
-// method.
-type LoadBalancersClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// LoadBalancersClientBeginDeleteOptions contains the optional parameters for the LoadBalancersClient.BeginDelete method.
-type LoadBalancersClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// LoadBalancersClientBeginListInboundNatRulePortMappingsOptions contains the optional parameters for the LoadBalancersClient.BeginListInboundNatRulePortMappings
-// method.
-type LoadBalancersClientBeginListInboundNatRulePortMappingsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// LoadBalancersClientBeginSwapPublicIPAddressesOptions contains the optional parameters for the LoadBalancersClient.BeginSwapPublicIPAddresses
-// method.
-type LoadBalancersClientBeginSwapPublicIPAddressesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// LoadBalancersClientGetOptions contains the optional parameters for the LoadBalancersClient.Get method.
-type LoadBalancersClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// LoadBalancersClientListAllOptions contains the optional parameters for the LoadBalancersClient.NewListAllPager method.
-type LoadBalancersClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// LoadBalancersClientListOptions contains the optional parameters for the LoadBalancersClient.NewListPager method.
-type LoadBalancersClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// LoadBalancersClientUpdateTagsOptions contains the optional parameters for the LoadBalancersClient.UpdateTags method.
-type LoadBalancersClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // LoadBalancingRule - A load balancing rule for a load balancer.
 type LoadBalancingRule struct {
 	// Resource ID.
@@ -9509,37 +7997,6 @@ type LocalNetworkGatewayPropertiesFormat struct {
 	ResourceGUID *string
 }
 
-// LocalNetworkGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the LocalNetworkGatewaysClient.BeginCreateOrUpdate
-// method.
-type LocalNetworkGatewaysClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// LocalNetworkGatewaysClientBeginDeleteOptions contains the optional parameters for the LocalNetworkGatewaysClient.BeginDelete
-// method.
-type LocalNetworkGatewaysClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// LocalNetworkGatewaysClientGetOptions contains the optional parameters for the LocalNetworkGatewaysClient.Get method.
-type LocalNetworkGatewaysClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// LocalNetworkGatewaysClientListOptions contains the optional parameters for the LocalNetworkGatewaysClient.NewListPager
-// method.
-type LocalNetworkGatewaysClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// LocalNetworkGatewaysClientUpdateTagsOptions contains the optional parameters for the LocalNetworkGatewaysClient.UpdateTags
-// method.
-type LocalNetworkGatewaysClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // LogSpecification - Description of logging specification.
 type LogSpecification struct {
 	// Duration of the blob.
@@ -9614,121 +8071,6 @@ type ManagedServiceIdentity struct {
 	TenantID *string
 }
 
-// ManagementClientBeginDeleteBastionShareableLinkOptions contains the optional parameters for the ManagementClient.BeginDeleteBastionShareableLink
-// method.
-type ManagementClientBeginDeleteBastionShareableLinkOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ManagementClientBeginGeneratevirtualwanvpnserverconfigurationvpnprofileOptions contains the optional parameters for the
-// ManagementClient.BeginGeneratevirtualwanvpnserverconfigurationvpnprofile method.
-type ManagementClientBeginGeneratevirtualwanvpnserverconfigurationvpnprofileOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ManagementClientBeginGetActiveSessionsOptions contains the optional parameters for the ManagementClient.BeginGetActiveSessions
-// method.
-type ManagementClientBeginGetActiveSessionsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ManagementClientBeginPutBastionShareableLinkOptions contains the optional parameters for the ManagementClient.BeginPutBastionShareableLink
-// method.
-type ManagementClientBeginPutBastionShareableLinkOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ManagementClientCheckDNSNameAvailabilityOptions contains the optional parameters for the ManagementClient.CheckDNSNameAvailability
-// method.
-type ManagementClientCheckDNSNameAvailabilityOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ManagementClientDisconnectActiveSessionsOptions contains the optional parameters for the ManagementClient.NewDisconnectActiveSessionsPager
-// method.
-type ManagementClientDisconnectActiveSessionsOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ManagementClientExpressRouteProviderPortOptions contains the optional parameters for the ManagementClient.ExpressRouteProviderPort
-// method.
-type ManagementClientExpressRouteProviderPortOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ManagementClientGetBastionShareableLinkOptions contains the optional parameters for the ManagementClient.NewGetBastionShareableLinkPager
-// method.
-type ManagementClientGetBastionShareableLinkOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ManagementClientListActiveConnectivityConfigurationsOptions contains the optional parameters for the ManagementClient.ListActiveConnectivityConfigurations
-// method.
-type ManagementClientListActiveConnectivityConfigurationsOptions struct {
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
-// ManagementClientListActiveSecurityAdminRulesOptions contains the optional parameters for the ManagementClient.ListActiveSecurityAdminRules
-// method.
-type ManagementClientListActiveSecurityAdminRulesOptions struct {
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
-// ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsOptions contains the optional parameters for the ManagementClient.ListNetworkManagerEffectiveConnectivityConfigurations
-// method.
-type ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsOptions struct {
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
-// ManagementClientListNetworkManagerEffectiveSecurityAdminRulesOptions contains the optional parameters for the ManagementClient.ListNetworkManagerEffectiveSecurityAdminRules
-// method.
-type ManagementClientListNetworkManagerEffectiveSecurityAdminRulesOptions struct {
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
-// ManagementClientSupportedSecurityProvidersOptions contains the optional parameters for the ManagementClient.SupportedSecurityProviders
-// method.
-type ManagementClientSupportedSecurityProvidersOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateOptions contains the optional parameters for the ManagementGroupNetworkManagerConnectionsClient.CreateOrUpdate
-// method.
-type ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ManagementGroupNetworkManagerConnectionsClientDeleteOptions contains the optional parameters for the ManagementGroupNetworkManagerConnectionsClient.Delete
-// method.
-type ManagementGroupNetworkManagerConnectionsClientDeleteOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ManagementGroupNetworkManagerConnectionsClientGetOptions contains the optional parameters for the ManagementGroupNetworkManagerConnectionsClient.Get
-// method.
-type ManagementGroupNetworkManagerConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ManagementGroupNetworkManagerConnectionsClientListOptions contains the optional parameters for the ManagementGroupNetworkManagerConnectionsClient.NewListPager
-// method.
-type ManagementGroupNetworkManagerConnectionsClientListOptions struct {
-	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
-	// the value of the nextLink element will include a skipToken parameter that
-	// specifies a starting point to use for subsequent calls.
-	SkipToken *string
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
 // Manager - The Managed Network resource
 type Manager struct {
 	// Resource ID.
@@ -9771,12 +8113,6 @@ type ManagerCommit struct {
 	CommitID *string
 }
 
-// ManagerCommitsClientBeginPostOptions contains the optional parameters for the ManagerCommitsClient.BeginPost method.
-type ManagerCommitsClientBeginPostOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
 // ManagerConnection - The Network Manager Connection resource
 type ManagerConnection struct {
 	// The scope connection properties
@@ -9840,12 +8176,6 @@ type ManagerDeploymentStatus struct {
 	Region *string
 }
 
-// ManagerDeploymentStatusClientListOptions contains the optional parameters for the ManagerDeploymentStatusClient.List method.
-type ManagerDeploymentStatusClientListOptions struct {
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
 // ManagerDeploymentStatusListResult - A list of Network Manager Deployment Status
 type ManagerDeploymentStatusListResult struct {
 	// When present, the value can be passed to a subsequent query call (together with the same query and scopes used in the current
@@ -9913,6 +8243,9 @@ type ManagerProperties struct {
 
 	// READ-ONLY; The provisioning state of the network manager resource.
 	ProvisioningState *ProvisioningState
+
+	// READ-ONLY; Unique identifier for this resource.
+	ResourceGUID *string
 }
 
 // ManagerPropertiesNetworkManagerScopes - Scope of Network Manager.
@@ -9933,51 +8266,6 @@ type ManagerSecurityGroupItem struct {
 	NetworkGroupID *string
 }
 
-// ManagersClientBeginDeleteOptions contains the optional parameters for the ManagersClient.BeginDelete method.
-type ManagersClientBeginDeleteOptions struct {
-	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
-	// will do a cleanup deployment in the background, prior to the delete.
-	Force *bool
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ManagersClientCreateOrUpdateOptions contains the optional parameters for the ManagersClient.CreateOrUpdate method.
-type ManagersClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ManagersClientGetOptions contains the optional parameters for the ManagersClient.Get method.
-type ManagersClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ManagersClientListBySubscriptionOptions contains the optional parameters for the ManagersClient.NewListBySubscriptionPager
-// method.
-type ManagersClientListBySubscriptionOptions struct {
-	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
-	// the value of the nextLink element will include a skipToken parameter that
-	// specifies a starting point to use for subsequent calls.
-	SkipToken *string
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
-// ManagersClientListOptions contains the optional parameters for the ManagersClient.NewListPager method.
-type ManagersClientListOptions struct {
-	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
-	// the value of the nextLink element will include a skipToken parameter that
-	// specifies a starting point to use for subsequent calls.
-	SkipToken *string
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
-// ManagersClientPatchOptions contains the optional parameters for the ManagersClient.Patch method.
-type ManagersClientPatchOptions struct {
-	// placeholder for future optional parameters
-}
-
 // MatchCondition - Define match conditions.
 type MatchCondition struct {
 	// REQUIRED; Match value.
@@ -10059,6 +8347,18 @@ type MetricSpecification struct {
 	Unit *string
 }
 
+// MigrateLoadBalancerToIPBasedRequest - The request for a migrateToIpBased API.
+type MigrateLoadBalancerToIPBasedRequest struct {
+	// A list of pool names that should be migrated from Nic based to IP based pool
+	Pools []*string
+}
+
+// MigratedPools - The response for a migrateToIpBased API.
+type MigratedPools struct {
+	// A list of pools migrated from Nic based to IP based pool
+	MigratedPools []*string
+}
+
 // NatGateway - Nat Gateway resource.
 type NatGateway struct {
 	// Resource ID.
@@ -10125,40 +8425,6 @@ type NatGatewaySKU struct {
 	Name *NatGatewaySKUName
 }
 
-// NatGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the NatGatewaysClient.BeginCreateOrUpdate
-// method.
-type NatGatewaysClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// NatGatewaysClientBeginDeleteOptions contains the optional parameters for the NatGatewaysClient.BeginDelete method.
-type NatGatewaysClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// NatGatewaysClientGetOptions contains the optional parameters for the NatGatewaysClient.Get method.
-type NatGatewaysClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// NatGatewaysClientListAllOptions contains the optional parameters for the NatGatewaysClient.NewListAllPager method.
-type NatGatewaysClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// NatGatewaysClientListOptions contains the optional parameters for the NatGatewaysClient.NewListPager method.
-type NatGatewaysClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// NatGatewaysClientUpdateTagsOptions contains the optional parameters for the NatGatewaysClient.UpdateTags method.
-type NatGatewaysClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // NatRule - Rule of type nat.
 type NatRule struct {
 	// REQUIRED; Rule Type.
@@ -10198,8 +8464,8 @@ type NatRule struct {
 // GetFirewallPolicyRule implements the FirewallPolicyRuleClassification interface for type NatRule.
 func (n *NatRule) GetFirewallPolicyRule() *FirewallPolicyRule {
 	return &FirewallPolicyRule{
-		Name:        n.Name,
 		Description: n.Description,
+		Name:        n.Name,
 		RuleType:    n.RuleType,
 	}
 }
@@ -10216,29 +8482,6 @@ type NatRulePortMapping struct {
 	InboundNatRuleName *string
 }
 
-// NatRulesClientBeginCreateOrUpdateOptions contains the optional parameters for the NatRulesClient.BeginCreateOrUpdate method.
-type NatRulesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// NatRulesClientBeginDeleteOptions contains the optional parameters for the NatRulesClient.BeginDelete method.
-type NatRulesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// NatRulesClientGetOptions contains the optional parameters for the NatRulesClient.Get method.
-type NatRulesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// NatRulesClientListByVPNGatewayOptions contains the optional parameters for the NatRulesClient.NewListByVPNGatewayPager
-// method.
-type NatRulesClientListByVPNGatewayOptions struct {
-	// placeholder for future optional parameters
-}
-
 // NextHopParameters - Parameters that define the source and destination endpoint.
 type NextHopParameters struct {
 	// REQUIRED; The destination IP address.
@@ -10348,11 +8591,6 @@ type OperationPropertiesFormatServiceSpecification struct {
 	MetricSpecifications []*MetricSpecification
 }
 
-// OperationsClientListOptions contains the optional parameters for the OperationsClient.NewListPager method.
-type OperationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // OrderBy - Describes a column to sort
 type OrderBy struct {
 	// Describes the actual column name to sort by
@@ -10531,76 +8769,6 @@ type P2SVPNGatewayProperties struct {
 	VPNClientConnectionHealth *VPNClientConnectionHealth
 }
 
-// P2SVPNGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginCreateOrUpdate
-// method.
-type P2SVPNGatewaysClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// P2SVPNGatewaysClientBeginDeleteOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginDelete method.
-type P2SVPNGatewaysClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// P2SVPNGatewaysClientBeginDisconnectP2SVPNConnectionsOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginDisconnectP2SVPNConnections
-// method.
-type P2SVPNGatewaysClientBeginDisconnectP2SVPNConnectionsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// P2SVPNGatewaysClientBeginGenerateVPNProfileOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginGenerateVPNProfile
-// method.
-type P2SVPNGatewaysClientBeginGenerateVPNProfileOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// P2SVPNGatewaysClientBeginGetP2SVPNConnectionHealthDetailedOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginGetP2SVPNConnectionHealthDetailed
-// method.
-type P2SVPNGatewaysClientBeginGetP2SVPNConnectionHealthDetailedOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// P2SVPNGatewaysClientBeginGetP2SVPNConnectionHealthOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginGetP2SVPNConnectionHealth
-// method.
-type P2SVPNGatewaysClientBeginGetP2SVPNConnectionHealthOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// P2SVPNGatewaysClientBeginResetOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginReset method.
-type P2SVPNGatewaysClientBeginResetOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// P2SVPNGatewaysClientBeginUpdateTagsOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginUpdateTags
-// method.
-type P2SVPNGatewaysClientBeginUpdateTagsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// P2SVPNGatewaysClientGetOptions contains the optional parameters for the P2SVPNGatewaysClient.Get method.
-type P2SVPNGatewaysClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// P2SVPNGatewaysClientListByResourceGroupOptions contains the optional parameters for the P2SVPNGatewaysClient.NewListByResourceGroupPager
-// method.
-type P2SVPNGatewaysClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// P2SVPNGatewaysClientListOptions contains the optional parameters for the P2SVPNGatewaysClient.NewListPager method.
-type P2SVPNGatewaysClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // P2SVPNProfileParameters - Vpn Client Parameters for package generation.
 type P2SVPNProfileParameters struct {
 	// VPN client authentication method.
@@ -10765,41 +8933,6 @@ type PacketCaptureStorageLocation struct {
 	StoragePath *string
 }
 
-// PacketCapturesClientBeginCreateOptions contains the optional parameters for the PacketCapturesClient.BeginCreate method.
-type PacketCapturesClientBeginCreateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PacketCapturesClientBeginDeleteOptions contains the optional parameters for the PacketCapturesClient.BeginDelete method.
-type PacketCapturesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PacketCapturesClientBeginGetStatusOptions contains the optional parameters for the PacketCapturesClient.BeginGetStatus
-// method.
-type PacketCapturesClientBeginGetStatusOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PacketCapturesClientBeginStopOptions contains the optional parameters for the PacketCapturesClient.BeginStop method.
-type PacketCapturesClientBeginStopOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PacketCapturesClientGetOptions contains the optional parameters for the PacketCapturesClient.Get method.
-type PacketCapturesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PacketCapturesClientListOptions contains the optional parameters for the PacketCapturesClient.NewListPager method.
-type PacketCapturesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // Parameters for an Action.
 type Parameter struct {
 	// List of AS paths.
@@ -10918,18 +9051,6 @@ type PeerExpressRouteCircuitConnectionPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// PeerExpressRouteCircuitConnectionsClientGetOptions contains the optional parameters for the PeerExpressRouteCircuitConnectionsClient.Get
-// method.
-type PeerExpressRouteCircuitConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PeerExpressRouteCircuitConnectionsClientListOptions contains the optional parameters for the PeerExpressRouteCircuitConnectionsClient.NewListPager
-// method.
-type PeerExpressRouteCircuitConnectionsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // PeerRoute - Peer routing details.
 type PeerRoute struct {
 	// READ-ONLY; The route's AS path sequence.
@@ -10954,12 +9075,6 @@ type PeerRoute struct {
 	Weight *int32
 }
 
-// PeerRouteList - List of virtual router peer routes.
-type PeerRouteList struct {
-	// List of peer routes.
-	Value []*PeerRoute
-}
-
 // PolicySettings - Defines contents of a web application firewall global configuration.
 type PolicySettings struct {
 	// If the action type is block, customer can override the response body. The body must be specified in base64 encoding.
@@ -10968,9 +9083,15 @@ type PolicySettings struct {
 	// If the action type is block, customer can override the response status code.
 	CustomBlockResponseStatusCode *int32
 
+	// Whether allow WAF to enforce file upload limits.
+	FileUploadEnforcement *bool
+
 	// Maximum file upload size in Mb for WAF.
 	FileUploadLimitInMb *int32
 
+	// To scrub sensitive log fields
+	LogScrubbing *PolicySettingsLogScrubbing
+
 	// Maximum request body size in Kb for WAF.
 	MaxRequestBodySizeInKb *int32
 
@@ -10980,10 +9101,25 @@ type PolicySettings struct {
 	// Whether to allow WAF to check request Body.
 	RequestBodyCheck *bool
 
+	// Whether allow WAF to enforce request body limits.
+	RequestBodyEnforcement *bool
+
+	// Max inspection limit in KB for request body inspection for WAF.
+	RequestBodyInspectLimitInKB *int32
+
 	// The state of the policy.
 	State *WebApplicationFirewallEnabledState
 }
 
+// PolicySettingsLogScrubbing - To scrub sensitive log fields
+type PolicySettingsLogScrubbing struct {
+	// The rules that are applied to the logs for scrubbing.
+	ScrubbingRules []*WebApplicationFirewallScrubbingRules
+
+	// State of the log scrubbing config. Default value is Enabled.
+	State *WebApplicationFirewallScrubbingState
+}
+
 // PrepareNetworkPoliciesRequest - Details of PrepareNetworkPolicies for Subnet.
 type PrepareNetworkPoliciesRequest struct {
 	// A list of NetworkIntentPolicyConfiguration.
@@ -11035,31 +9171,6 @@ type PrivateDNSZoneGroupPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// PrivateDNSZoneGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the PrivateDNSZoneGroupsClient.BeginCreateOrUpdate
-// method.
-type PrivateDNSZoneGroupsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PrivateDNSZoneGroupsClientBeginDeleteOptions contains the optional parameters for the PrivateDNSZoneGroupsClient.BeginDelete
-// method.
-type PrivateDNSZoneGroupsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PrivateDNSZoneGroupsClientGetOptions contains the optional parameters for the PrivateDNSZoneGroupsClient.Get method.
-type PrivateDNSZoneGroupsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PrivateDNSZoneGroupsClientListOptions contains the optional parameters for the PrivateDNSZoneGroupsClient.NewListPager
-// method.
-type PrivateDNSZoneGroupsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // PrivateDNSZonePropertiesFormat - Properties of the private dns zone configuration resource.
 type PrivateDNSZonePropertiesFormat struct {
 	// The resource id of the private dns zone.
@@ -11134,6 +9245,9 @@ type PrivateEndpointConnectionProperties struct {
 	// READ-ONLY; The resource of private end point.
 	PrivateEndpoint *PrivateEndpoint
 
+	// READ-ONLY; The location of the private endpoint.
+	PrivateEndpointLocation *string
+
 	// READ-ONLY; The provisioning state of the private endpoint connection resource.
 	ProvisioningState *ProvisioningState
 }
@@ -11205,36 +9319,6 @@ type PrivateEndpointProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// PrivateEndpointsClientBeginCreateOrUpdateOptions contains the optional parameters for the PrivateEndpointsClient.BeginCreateOrUpdate
-// method.
-type PrivateEndpointsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PrivateEndpointsClientBeginDeleteOptions contains the optional parameters for the PrivateEndpointsClient.BeginDelete method.
-type PrivateEndpointsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PrivateEndpointsClientGetOptions contains the optional parameters for the PrivateEndpointsClient.Get method.
-type PrivateEndpointsClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// PrivateEndpointsClientListBySubscriptionOptions contains the optional parameters for the PrivateEndpointsClient.NewListBySubscriptionPager
-// method.
-type PrivateEndpointsClientListBySubscriptionOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PrivateEndpointsClientListOptions contains the optional parameters for the PrivateEndpointsClient.NewListPager method.
-type PrivateEndpointsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // PrivateLinkService - Private link service resource.
 type PrivateLinkService struct {
 	// The extended location of the load balancer.
@@ -11410,103 +9494,20 @@ type PrivateLinkServiceVisibility struct {
 	Visible *bool
 }
 
-// PrivateLinkServicesClientBeginCheckPrivateLinkServiceVisibilityByResourceGroupOptions contains the optional parameters
-// for the PrivateLinkServicesClient.BeginCheckPrivateLinkServiceVisibilityByResourceGroup method.
-type PrivateLinkServicesClientBeginCheckPrivateLinkServiceVisibilityByResourceGroupOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
+// Probe - A load balancer probe.
+type Probe struct {
+	// Resource ID.
+	ID *string
 
-// PrivateLinkServicesClientBeginCheckPrivateLinkServiceVisibilityOptions contains the optional parameters for the PrivateLinkServicesClient.BeginCheckPrivateLinkServiceVisibility
-// method.
-type PrivateLinkServicesClientBeginCheckPrivateLinkServiceVisibilityOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
+	// The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access
+	// the resource.
+	Name *string
 
-// PrivateLinkServicesClientBeginCreateOrUpdateOptions contains the optional parameters for the PrivateLinkServicesClient.BeginCreateOrUpdate
-// method.
-type PrivateLinkServicesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
+	// Properties of load balancer probe.
+	Properties *ProbePropertiesFormat
 
-// PrivateLinkServicesClientBeginDeleteOptions contains the optional parameters for the PrivateLinkServicesClient.BeginDelete
-// method.
-type PrivateLinkServicesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PrivateLinkServicesClientBeginDeletePrivateEndpointConnectionOptions contains the optional parameters for the PrivateLinkServicesClient.BeginDeletePrivateEndpointConnection
-// method.
-type PrivateLinkServicesClientBeginDeletePrivateEndpointConnectionOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PrivateLinkServicesClientGetOptions contains the optional parameters for the PrivateLinkServicesClient.Get method.
-type PrivateLinkServicesClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// PrivateLinkServicesClientGetPrivateEndpointConnectionOptions contains the optional parameters for the PrivateLinkServicesClient.GetPrivateEndpointConnection
-// method.
-type PrivateLinkServicesClientGetPrivateEndpointConnectionOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupOptions contains the optional parameters for
-// the PrivateLinkServicesClient.NewListAutoApprovedPrivateLinkServicesByResourceGroupPager method.
-type PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesOptions contains the optional parameters for the PrivateLinkServicesClient.NewListAutoApprovedPrivateLinkServicesPager
-// method.
-type PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PrivateLinkServicesClientListBySubscriptionOptions contains the optional parameters for the PrivateLinkServicesClient.NewListBySubscriptionPager
-// method.
-type PrivateLinkServicesClientListBySubscriptionOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PrivateLinkServicesClientListOptions contains the optional parameters for the PrivateLinkServicesClient.NewListPager method.
-type PrivateLinkServicesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PrivateLinkServicesClientListPrivateEndpointConnectionsOptions contains the optional parameters for the PrivateLinkServicesClient.NewListPrivateEndpointConnectionsPager
-// method.
-type PrivateLinkServicesClientListPrivateEndpointConnectionsOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PrivateLinkServicesClientUpdatePrivateEndpointConnectionOptions contains the optional parameters for the PrivateLinkServicesClient.UpdatePrivateEndpointConnection
-// method.
-type PrivateLinkServicesClientUpdatePrivateEndpointConnectionOptions struct {
-	// placeholder for future optional parameters
-}
-
-// Probe - A load balancer probe.
-type Probe struct {
-	// Resource ID.
-	ID *string
-
-	// The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access
-	// the resource.
-	Name *string
-
-	// Properties of load balancer probe.
-	Properties *ProbePropertiesFormat
-
-	// READ-ONLY; A unique read-only string that changes whenever the resource is updated.
-	Etag *string
+	// READ-ONLY; A unique read-only string that changes whenever the resource is updated.
+	Etag *string
 
 	// READ-ONLY; Type of the resource.
 	Type *string
@@ -11597,38 +9598,6 @@ type ProfilePropertiesFormat struct {
 	ResourceGUID *string
 }
 
-// ProfilesClientBeginDeleteOptions contains the optional parameters for the ProfilesClient.BeginDelete method.
-type ProfilesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ProfilesClientCreateOrUpdateOptions contains the optional parameters for the ProfilesClient.CreateOrUpdate method.
-type ProfilesClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ProfilesClientGetOptions contains the optional parameters for the ProfilesClient.Get method.
-type ProfilesClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// ProfilesClientListAllOptions contains the optional parameters for the ProfilesClient.NewListAllPager method.
-type ProfilesClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ProfilesClientListOptions contains the optional parameters for the ProfilesClient.NewListPager method.
-type ProfilesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ProfilesClientUpdateTagsOptions contains the optional parameters for the ProfilesClient.UpdateTags method.
-type ProfilesClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // PropagatedRouteTable - The list of RouteTables to advertise the routes to.
 type PropagatedRouteTable struct {
 	// The list of resource ids of all the RouteTables.
@@ -11638,6 +9607,15 @@ type PropagatedRouteTable struct {
 	Labels []*string
 }
 
+// PropagatedRouteTableNfv - Nfv version of the list of RouteTables to advertise the routes to.
+type PropagatedRouteTableNfv struct {
+	// The list of resource ids of all the RouteTables.
+	IDs []*RoutingConfigurationNfvSubResource
+
+	// The list of labels.
+	Labels []*string
+}
+
 // ProtocolConfiguration - Configuration of the protocol.
 type ProtocolConfiguration struct {
 	// HTTP configuration of the connectivity check.
@@ -11684,6 +9662,11 @@ type PublicIPAddressDNSSettings struct {
 	// specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.
 	DomainNameLabel *string
 
+	// The domain name label scope. If a domain name label and a domain name label scope are specified, an A DNS record is created
+	// for the public IP in the Microsoft Azure DNS system with a hashed value
+	// includes in FQDN.
+	DomainNameLabelScope *PublicIPAddressDNSSettingsDomainNameLabelScope
+
 	// The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel
 	// and the regionalized DNS zone.
 	Fqdn *string
@@ -11763,87 +9746,6 @@ type PublicIPAddressSKU struct {
 	Tier *PublicIPAddressSKUTier
 }
 
-// PublicIPAddressesClientBeginCreateOrUpdateOptions contains the optional parameters for the PublicIPAddressesClient.BeginCreateOrUpdate
-// method.
-type PublicIPAddressesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PublicIPAddressesClientBeginDdosProtectionStatusOptions contains the optional parameters for the PublicIPAddressesClient.BeginDdosProtectionStatus
-// method.
-type PublicIPAddressesClientBeginDdosProtectionStatusOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PublicIPAddressesClientBeginDeleteOptions contains the optional parameters for the PublicIPAddressesClient.BeginDelete
-// method.
-type PublicIPAddressesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PublicIPAddressesClientGetCloudServicePublicIPAddressOptions contains the optional parameters for the PublicIPAddressesClient.GetCloudServicePublicIPAddress
-// method.
-type PublicIPAddressesClientGetCloudServicePublicIPAddressOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// PublicIPAddressesClientGetOptions contains the optional parameters for the PublicIPAddressesClient.Get method.
-type PublicIPAddressesClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressOptions contains the optional parameters for the PublicIPAddressesClient.GetVirtualMachineScaleSetPublicIPAddress
-// method.
-type PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// PublicIPAddressesClientListAllOptions contains the optional parameters for the PublicIPAddressesClient.NewListAllPager
-// method.
-type PublicIPAddressesClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PublicIPAddressesClientListCloudServicePublicIPAddressesOptions contains the optional parameters for the PublicIPAddressesClient.NewListCloudServicePublicIPAddressesPager
-// method.
-type PublicIPAddressesClientListCloudServicePublicIPAddressesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PublicIPAddressesClientListCloudServiceRoleInstancePublicIPAddressesOptions contains the optional parameters for the PublicIPAddressesClient.NewListCloudServiceRoleInstancePublicIPAddressesPager
-// method.
-type PublicIPAddressesClientListCloudServiceRoleInstancePublicIPAddressesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PublicIPAddressesClientListOptions contains the optional parameters for the PublicIPAddressesClient.NewListPager method.
-type PublicIPAddressesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PublicIPAddressesClientListVirtualMachineScaleSetPublicIPAddressesOptions contains the optional parameters for the PublicIPAddressesClient.NewListVirtualMachineScaleSetPublicIPAddressesPager
-// method.
-type PublicIPAddressesClientListVirtualMachineScaleSetPublicIPAddressesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PublicIPAddressesClientListVirtualMachineScaleSetVMPublicIPAddressesOptions contains the optional parameters for the PublicIPAddressesClient.NewListVirtualMachineScaleSetVMPublicIPAddressesPager
-// method.
-type PublicIPAddressesClientListVirtualMachineScaleSetVMPublicIPAddressesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PublicIPAddressesClientUpdateTagsOptions contains the optional parameters for the PublicIPAddressesClient.UpdateTags method.
-type PublicIPAddressesClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // PublicIPDdosProtectionStatusResult - Response for GetPublicIpAddressDdosProtectionStatusOperation API service call.
 type PublicIPDdosProtectionStatusResult struct {
 	// DDoS protection plan Resource Id of a if IP address is protected through a plan.
@@ -11943,40 +9845,6 @@ type PublicIPPrefixSKU struct {
 	Tier *PublicIPPrefixSKUTier
 }
 
-// PublicIPPrefixesClientBeginCreateOrUpdateOptions contains the optional parameters for the PublicIPPrefixesClient.BeginCreateOrUpdate
-// method.
-type PublicIPPrefixesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PublicIPPrefixesClientBeginDeleteOptions contains the optional parameters for the PublicIPPrefixesClient.BeginDelete method.
-type PublicIPPrefixesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// PublicIPPrefixesClientGetOptions contains the optional parameters for the PublicIPPrefixesClient.Get method.
-type PublicIPPrefixesClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// PublicIPPrefixesClientListAllOptions contains the optional parameters for the PublicIPPrefixesClient.NewListAllPager method.
-type PublicIPPrefixesClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PublicIPPrefixesClientListOptions contains the optional parameters for the PublicIPPrefixesClient.NewListPager method.
-type PublicIPPrefixesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// PublicIPPrefixesClientUpdateTagsOptions contains the optional parameters for the PublicIPPrefixesClient.UpdateTags method.
-type PublicIPPrefixesClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // QosDefinition - Quality of Service defines the traffic configuration between endpoints. Mandatory to have one marking.
 type QosDefinition struct {
 	// Destination IP ranges.
@@ -12135,11 +10003,6 @@ type ResourceNavigationLinkFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// ResourceNavigationLinksClientListOptions contains the optional parameters for the ResourceNavigationLinksClient.List method.
-type ResourceNavigationLinksClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ResourceNavigationLinksListResult - Response for ResourceNavigationLinks_List operation.
 type ResourceNavigationLinksListResult struct {
 	// The resource navigation links in a subnet.
@@ -12272,65 +10135,6 @@ type RouteFilterRulePropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// RouteFilterRulesClientBeginCreateOrUpdateOptions contains the optional parameters for the RouteFilterRulesClient.BeginCreateOrUpdate
-// method.
-type RouteFilterRulesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RouteFilterRulesClientBeginDeleteOptions contains the optional parameters for the RouteFilterRulesClient.BeginDelete method.
-type RouteFilterRulesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RouteFilterRulesClientGetOptions contains the optional parameters for the RouteFilterRulesClient.Get method.
-type RouteFilterRulesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RouteFilterRulesClientListByRouteFilterOptions contains the optional parameters for the RouteFilterRulesClient.NewListByRouteFilterPager
-// method.
-type RouteFilterRulesClientListByRouteFilterOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RouteFiltersClientBeginCreateOrUpdateOptions contains the optional parameters for the RouteFiltersClient.BeginCreateOrUpdate
-// method.
-type RouteFiltersClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RouteFiltersClientBeginDeleteOptions contains the optional parameters for the RouteFiltersClient.BeginDelete method.
-type RouteFiltersClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RouteFiltersClientGetOptions contains the optional parameters for the RouteFiltersClient.Get method.
-type RouteFiltersClientGetOptions struct {
-	// Expands referenced express route bgp peering resources.
-	Expand *string
-}
-
-// RouteFiltersClientListByResourceGroupOptions contains the optional parameters for the RouteFiltersClient.NewListByResourceGroupPager
-// method.
-type RouteFiltersClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RouteFiltersClientListOptions contains the optional parameters for the RouteFiltersClient.NewListPager method.
-type RouteFiltersClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RouteFiltersClientUpdateTagsOptions contains the optional parameters for the RouteFiltersClient.UpdateTags method.
-type RouteFiltersClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // RouteListResult - Response for the ListRoute API service call.
 type RouteListResult struct {
 	// The URL to get the next set of results.
@@ -12388,29 +10192,6 @@ type RouteMapRule struct {
 	NextStepIfMatched *NextStep
 }
 
-// RouteMapsClientBeginCreateOrUpdateOptions contains the optional parameters for the RouteMapsClient.BeginCreateOrUpdate
-// method.
-type RouteMapsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RouteMapsClientBeginDeleteOptions contains the optional parameters for the RouteMapsClient.BeginDelete method.
-type RouteMapsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RouteMapsClientGetOptions contains the optional parameters for the RouteMapsClient.Get method.
-type RouteMapsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RouteMapsClientListOptions contains the optional parameters for the RouteMapsClient.NewListPager method.
-type RouteMapsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // RoutePropertiesFormat - Route resource.
 type RoutePropertiesFormat struct {
 	// REQUIRED; The type of Azure hop the packet should be sent to.
@@ -12480,62 +10261,6 @@ type RouteTablePropertiesFormat struct {
 	Subnets []*Subnet
 }
 
-// RouteTablesClientBeginCreateOrUpdateOptions contains the optional parameters for the RouteTablesClient.BeginCreateOrUpdate
-// method.
-type RouteTablesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RouteTablesClientBeginDeleteOptions contains the optional parameters for the RouteTablesClient.BeginDelete method.
-type RouteTablesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RouteTablesClientGetOptions contains the optional parameters for the RouteTablesClient.Get method.
-type RouteTablesClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// RouteTablesClientListAllOptions contains the optional parameters for the RouteTablesClient.NewListAllPager method.
-type RouteTablesClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RouteTablesClientListOptions contains the optional parameters for the RouteTablesClient.NewListPager method.
-type RouteTablesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RouteTablesClientUpdateTagsOptions contains the optional parameters for the RouteTablesClient.UpdateTags method.
-type RouteTablesClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RoutesClientBeginCreateOrUpdateOptions contains the optional parameters for the RoutesClient.BeginCreateOrUpdate method.
-type RoutesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RoutesClientBeginDeleteOptions contains the optional parameters for the RoutesClient.BeginDelete method.
-type RoutesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RoutesClientGetOptions contains the optional parameters for the RoutesClient.Get method.
-type RoutesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RoutesClientListOptions contains the optional parameters for the RoutesClient.NewListPager method.
-type RoutesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // RoutingConfiguration - Routing Configuration indicating the associated and propagated route tables for this connection.
 type RoutingConfiguration struct {
 	// The resource id RouteTable associated with this RoutingConfiguration.
@@ -12554,6 +10279,28 @@ type RoutingConfiguration struct {
 	VnetRoutes *VnetRoute
 }
 
+// RoutingConfigurationNfv - NFV version of Routing Configuration indicating the associated and propagated route tables for
+// this connection.
+type RoutingConfigurationNfv struct {
+	// The resource id RouteTable associated with this RoutingConfiguration.
+	AssociatedRouteTable *RoutingConfigurationNfvSubResource
+
+	// The resource id of the RouteMap associated with this RoutingConfiguration for inbound learned routes.
+	InboundRouteMap *RoutingConfigurationNfvSubResource
+
+	// The resource id of the RouteMap associated with this RoutingConfiguration for outbound advertised routes.
+	OutboundRouteMap *RoutingConfigurationNfvSubResource
+
+	// The list of RouteTables to advertise the routes to.
+	PropagatedRouteTables *PropagatedRouteTableNfv
+}
+
+// RoutingConfigurationNfvSubResource - Reference to RouteTableV3 associated with the connection.
+type RoutingConfigurationNfvSubResource struct {
+	// Resource ID.
+	ResourceURI *string
+}
+
 // RoutingIntent - The routing intent child resource of a Virtual hub.
 type RoutingIntent struct {
 	// Resource ID.
@@ -12572,29 +10319,6 @@ type RoutingIntent struct {
 	Type *string
 }
 
-// RoutingIntentClientBeginCreateOrUpdateOptions contains the optional parameters for the RoutingIntentClient.BeginCreateOrUpdate
-// method.
-type RoutingIntentClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RoutingIntentClientBeginDeleteOptions contains the optional parameters for the RoutingIntentClient.BeginDelete method.
-type RoutingIntentClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// RoutingIntentClientGetOptions contains the optional parameters for the RoutingIntentClient.Get method.
-type RoutingIntentClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// RoutingIntentClientListOptions contains the optional parameters for the RoutingIntentClient.NewListPager method.
-type RoutingIntentClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // RoutingIntentProperties - The properties of a RoutingIntent resource.
 type RoutingIntentProperties struct {
 	// List of routing policies.
@@ -12652,8 +10376,8 @@ type Rule struct {
 // GetFirewallPolicyRule implements the FirewallPolicyRuleClassification interface for type Rule.
 func (r *Rule) GetFirewallPolicyRule() *FirewallPolicyRule {
 	return &FirewallPolicyRule{
-		Name:        r.Name,
 		Description: r.Description,
+		Name:        r.Name,
 		RuleType:    r.RuleType,
 	}
 }
@@ -12709,32 +10433,6 @@ type ScopeConnectionProperties struct {
 	ConnectionState *ScopeConnectionState
 }
 
-// ScopeConnectionsClientCreateOrUpdateOptions contains the optional parameters for the ScopeConnectionsClient.CreateOrUpdate
-// method.
-type ScopeConnectionsClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ScopeConnectionsClientDeleteOptions contains the optional parameters for the ScopeConnectionsClient.Delete method.
-type ScopeConnectionsClientDeleteOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ScopeConnectionsClientGetOptions contains the optional parameters for the ScopeConnectionsClient.Get method.
-type ScopeConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ScopeConnectionsClientListOptions contains the optional parameters for the ScopeConnectionsClient.NewListPager method.
-type ScopeConnectionsClientListOptions struct {
-	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
-	// the value of the nextLink element will include a skipToken parameter that
-	// specifies a starting point to use for subsequent calls.
-	SkipToken *string
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
 // SecurityAdminConfiguration - Defines the security admin configuration
 type SecurityAdminConfiguration struct {
 	// Indicates the properties for the network manager security admin configuration.
@@ -12775,39 +10473,9 @@ type SecurityAdminConfigurationPropertiesFormat struct {
 
 	// READ-ONLY; The provisioning state of the resource.
 	ProvisioningState *ProvisioningState
-}
-
-// SecurityAdminConfigurationsClientBeginDeleteOptions contains the optional parameters for the SecurityAdminConfigurationsClient.BeginDelete
-// method.
-type SecurityAdminConfigurationsClientBeginDeleteOptions struct {
-	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
-	// will do a cleanup deployment in the background, prior to the delete.
-	Force *bool
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SecurityAdminConfigurationsClientCreateOrUpdateOptions contains the optional parameters for the SecurityAdminConfigurationsClient.CreateOrUpdate
-// method.
-type SecurityAdminConfigurationsClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
 
-// SecurityAdminConfigurationsClientGetOptions contains the optional parameters for the SecurityAdminConfigurationsClient.Get
-// method.
-type SecurityAdminConfigurationsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SecurityAdminConfigurationsClientListOptions contains the optional parameters for the SecurityAdminConfigurationsClient.NewListPager
-// method.
-type SecurityAdminConfigurationsClientListOptions struct {
-	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
-	// the value of the nextLink element will include a skipToken parameter that
-	// specifies a starting point to use for subsequent calls.
-	SkipToken *string
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
+	// READ-ONLY; Unique identifier for this resource.
+	ResourceGUID *string
 }
 
 // SecurityGroup - NetworkSecurityGroup resource.
@@ -12901,40 +10569,6 @@ type SecurityGroupViewResult struct {
 	NetworkInterfaces []*SecurityGroupNetworkInterface
 }
 
-// SecurityGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the SecurityGroupsClient.BeginCreateOrUpdate
-// method.
-type SecurityGroupsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SecurityGroupsClientBeginDeleteOptions contains the optional parameters for the SecurityGroupsClient.BeginDelete method.
-type SecurityGroupsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SecurityGroupsClientGetOptions contains the optional parameters for the SecurityGroupsClient.Get method.
-type SecurityGroupsClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// SecurityGroupsClientListAllOptions contains the optional parameters for the SecurityGroupsClient.NewListAllPager method.
-type SecurityGroupsClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SecurityGroupsClientListOptions contains the optional parameters for the SecurityGroupsClient.NewListPager method.
-type SecurityGroupsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SecurityGroupsClientUpdateTagsOptions contains the optional parameters for the SecurityGroupsClient.UpdateTags method.
-type SecurityGroupsClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // SecurityPartnerProvider - Security Partner Provider resource.
 type SecurityPartnerProvider struct {
 	// Resource ID.
@@ -12983,43 +10617,6 @@ type SecurityPartnerProviderPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// SecurityPartnerProvidersClientBeginCreateOrUpdateOptions contains the optional parameters for the SecurityPartnerProvidersClient.BeginCreateOrUpdate
-// method.
-type SecurityPartnerProvidersClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SecurityPartnerProvidersClientBeginDeleteOptions contains the optional parameters for the SecurityPartnerProvidersClient.BeginDelete
-// method.
-type SecurityPartnerProvidersClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SecurityPartnerProvidersClientGetOptions contains the optional parameters for the SecurityPartnerProvidersClient.Get method.
-type SecurityPartnerProvidersClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SecurityPartnerProvidersClientListByResourceGroupOptions contains the optional parameters for the SecurityPartnerProvidersClient.NewListByResourceGroupPager
-// method.
-type SecurityPartnerProvidersClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SecurityPartnerProvidersClientListOptions contains the optional parameters for the SecurityPartnerProvidersClient.NewListPager
-// method.
-type SecurityPartnerProvidersClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SecurityPartnerProvidersClientUpdateTagsOptions contains the optional parameters for the SecurityPartnerProvidersClient.UpdateTags
-// method.
-type SecurityPartnerProvidersClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // SecurityRule - Network security rule.
 type SecurityRule struct {
 	// Resource ID.
@@ -13071,6 +10668,10 @@ type SecurityRulePropertiesFormat struct {
 	// REQUIRED; The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.
 	Direction *SecurityRuleDirection
 
+	// REQUIRED; The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each
+	// rule in the collection. The lower the priority number, the higher the priority of the rule.
+	Priority *int32
+
 	// REQUIRED; Network protocol this rule applies to.
 	Protocol *SecurityRuleProtocol
 
@@ -13094,10 +10695,6 @@ type SecurityRulePropertiesFormat struct {
 	// The destination port ranges.
 	DestinationPortRanges []*string
 
-	// The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the
-	// collection. The lower the priority number, the higher the priority of the rule.
-	Priority *int32
-
 	// The CIDR or source IP range. Asterisk '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork',
 	// 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress
 	// rule, specifies where network traffic originates from.
@@ -13119,29 +10716,6 @@ type SecurityRulePropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// SecurityRulesClientBeginCreateOrUpdateOptions contains the optional parameters for the SecurityRulesClient.BeginCreateOrUpdate
-// method.
-type SecurityRulesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SecurityRulesClientBeginDeleteOptions contains the optional parameters for the SecurityRulesClient.BeginDelete method.
-type SecurityRulesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SecurityRulesClientGetOptions contains the optional parameters for the SecurityRulesClient.Get method.
-type SecurityRulesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SecurityRulesClientListOptions contains the optional parameters for the SecurityRulesClient.NewListPager method.
-type SecurityRulesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // SecurityRulesEvaluationResult - Network security rules evaluation result.
 type SecurityRulesEvaluationResult struct {
 	// Value indicating whether destination is matched.
@@ -13199,11 +10773,6 @@ type ServiceAssociationLinkPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// ServiceAssociationLinksClientListOptions contains the optional parameters for the ServiceAssociationLinksClient.List method.
-type ServiceAssociationLinksClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ServiceAssociationLinksListResult - Response for ServiceAssociationLinks_List operation.
 type ServiceAssociationLinksListResult struct {
 	// The service association links in a subnet.
@@ -13225,44 +10794,6 @@ type ServiceDelegationPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// ServiceEndpointPoliciesClientBeginCreateOrUpdateOptions contains the optional parameters for the ServiceEndpointPoliciesClient.BeginCreateOrUpdate
-// method.
-type ServiceEndpointPoliciesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ServiceEndpointPoliciesClientBeginDeleteOptions contains the optional parameters for the ServiceEndpointPoliciesClient.BeginDelete
-// method.
-type ServiceEndpointPoliciesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ServiceEndpointPoliciesClientGetOptions contains the optional parameters for the ServiceEndpointPoliciesClient.Get method.
-type ServiceEndpointPoliciesClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// ServiceEndpointPoliciesClientListByResourceGroupOptions contains the optional parameters for the ServiceEndpointPoliciesClient.NewListByResourceGroupPager
-// method.
-type ServiceEndpointPoliciesClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ServiceEndpointPoliciesClientListOptions contains the optional parameters for the ServiceEndpointPoliciesClient.NewListPager
-// method.
-type ServiceEndpointPoliciesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ServiceEndpointPoliciesClientUpdateTagsOptions contains the optional parameters for the ServiceEndpointPoliciesClient.UpdateTags
-// method.
-type ServiceEndpointPoliciesClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ServiceEndpointPolicy - Service End point policy resource.
 type ServiceEndpointPolicy struct {
 	// Resource ID.
@@ -13333,32 +10864,6 @@ type ServiceEndpointPolicyDefinitionPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// ServiceEndpointPolicyDefinitionsClientBeginCreateOrUpdateOptions contains the optional parameters for the ServiceEndpointPolicyDefinitionsClient.BeginCreateOrUpdate
-// method.
-type ServiceEndpointPolicyDefinitionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ServiceEndpointPolicyDefinitionsClientBeginDeleteOptions contains the optional parameters for the ServiceEndpointPolicyDefinitionsClient.BeginDelete
-// method.
-type ServiceEndpointPolicyDefinitionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// ServiceEndpointPolicyDefinitionsClientGetOptions contains the optional parameters for the ServiceEndpointPolicyDefinitionsClient.Get
-// method.
-type ServiceEndpointPolicyDefinitionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// ServiceEndpointPolicyDefinitionsClientListByResourceGroupOptions contains the optional parameters for the ServiceEndpointPolicyDefinitionsClient.NewListByResourceGroupPager
-// method.
-type ServiceEndpointPolicyDefinitionsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ServiceEndpointPolicyListResult - Response for ListServiceEndpointPolicies API service call.
 type ServiceEndpointPolicyListResult struct {
 	// A list of ServiceEndpointPolicy resources.
@@ -13416,15 +10921,6 @@ type ServiceTagInformation struct {
 	ServiceTagChangeNumber *string
 }
 
-// ServiceTagInformationClientListOptions contains the optional parameters for the ServiceTagInformationClient.NewListPager
-// method.
-type ServiceTagInformationClientListOptions struct {
-	// Do not return address prefixes for the tag(s).
-	NoAddressPrefixes *bool
-	// Return tag information for a particular tag.
-	TagName *string
-}
-
 // ServiceTagInformationListResult - Response for Get ServiceTagInformation API service call. Retrieves the list of service
 // tag information resources.
 type ServiceTagInformationListResult struct {
@@ -13453,11 +10949,6 @@ type ServiceTagInformationPropertiesFormat struct {
 	SystemService *string
 }
 
-// ServiceTagsClientListOptions contains the optional parameters for the ServiceTagsClient.List method.
-type ServiceTagsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // ServiceTagsListResult - Response for the ListServiceTags API service call.
 type ServiceTagsListResult struct {
 	// READ-ONLY; The iteration number.
@@ -13605,31 +11096,6 @@ type StaticMemberProperties struct {
 	Region *string
 }
 
-// StaticMembersClientCreateOrUpdateOptions contains the optional parameters for the StaticMembersClient.CreateOrUpdate method.
-type StaticMembersClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// StaticMembersClientDeleteOptions contains the optional parameters for the StaticMembersClient.Delete method.
-type StaticMembersClientDeleteOptions struct {
-	// placeholder for future optional parameters
-}
-
-// StaticMembersClientGetOptions contains the optional parameters for the StaticMembersClient.Get method.
-type StaticMembersClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// StaticMembersClientListOptions contains the optional parameters for the StaticMembersClient.NewListPager method.
-type StaticMembersClientListOptions struct {
-	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
-	// the value of the nextLink element will include a skipToken parameter that
-	// specifies a starting point to use for subsequent calls.
-	SkipToken *string
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
 // StaticRoute - List of all Static Routes.
 type StaticRoute struct {
 	// List of all address prefixes.
@@ -13705,6 +11171,11 @@ type SubnetPropertiesFormat struct {
 	// Application gateway IP configurations of virtual network resource.
 	ApplicationGatewayIPConfigurations []*ApplicationGatewayIPConfiguration
 
+	// Set this property to false to disable default outbound connectivity for all VMs in the subnet. This property can only be
+	// set at the time of subnet creation and cannot be updated for an existing
+	// subnet.
+	DefaultOutboundAccess *bool
+
 	// An array of references to the delegations on the subnet.
 	Delegations []*Delegation
 
@@ -13755,72 +11226,6 @@ type SubnetPropertiesFormat struct {
 	ServiceAssociationLinks []*ServiceAssociationLink
 }
 
-// SubnetsClientBeginCreateOrUpdateOptions contains the optional parameters for the SubnetsClient.BeginCreateOrUpdate method.
-type SubnetsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SubnetsClientBeginDeleteOptions contains the optional parameters for the SubnetsClient.BeginDelete method.
-type SubnetsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SubnetsClientBeginPrepareNetworkPoliciesOptions contains the optional parameters for the SubnetsClient.BeginPrepareNetworkPolicies
-// method.
-type SubnetsClientBeginPrepareNetworkPoliciesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SubnetsClientBeginUnprepareNetworkPoliciesOptions contains the optional parameters for the SubnetsClient.BeginUnprepareNetworkPolicies
-// method.
-type SubnetsClientBeginUnprepareNetworkPoliciesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// SubnetsClientGetOptions contains the optional parameters for the SubnetsClient.Get method.
-type SubnetsClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// SubnetsClientListOptions contains the optional parameters for the SubnetsClient.NewListPager method.
-type SubnetsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SubscriptionNetworkManagerConnectionsClientCreateOrUpdateOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.CreateOrUpdate
-// method.
-type SubscriptionNetworkManagerConnectionsClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SubscriptionNetworkManagerConnectionsClientDeleteOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.Delete
-// method.
-type SubscriptionNetworkManagerConnectionsClientDeleteOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SubscriptionNetworkManagerConnectionsClientGetOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.Get
-// method.
-type SubscriptionNetworkManagerConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// SubscriptionNetworkManagerConnectionsClientListOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.NewListPager
-// method.
-type SubscriptionNetworkManagerConnectionsClientListOptions struct {
-	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
-	// the value of the nextLink element will include a skipToken parameter that
-	// specifies a starting point to use for subsequent calls.
-	SkipToken *string
-	// An optional query parameter which specifies the maximum number of records to be returned by the server.
-	Top *int32
-}
-
 // SwapResource to represent slot type on the specified cloud service.
 type SwapResource struct {
 	// Swap resource properties
@@ -14078,11 +11483,6 @@ type UsageName struct {
 	Value *string
 }
 
-// UsagesClientListOptions contains the optional parameters for the UsagesClient.NewListPager method.
-type UsagesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // UsagesListResult - The list usages operation response.
 type UsagesListResult struct {
 	// URL to get the next set of results.
@@ -14400,48 +11800,6 @@ type VPNConnectionProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// VPNConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VPNConnectionsClient.BeginCreateOrUpdate
-// method.
-type VPNConnectionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNConnectionsClientBeginDeleteOptions contains the optional parameters for the VPNConnectionsClient.BeginDelete method.
-type VPNConnectionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNConnectionsClientBeginStartPacketCaptureOptions contains the optional parameters for the VPNConnectionsClient.BeginStartPacketCapture
-// method.
-type VPNConnectionsClientBeginStartPacketCaptureOptions struct {
-	// Vpn Connection packet capture parameters supplied to start packet capture on gateway connection.
-	Parameters *VPNConnectionPacketCaptureStartParameters
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNConnectionsClientBeginStopPacketCaptureOptions contains the optional parameters for the VPNConnectionsClient.BeginStopPacketCapture
-// method.
-type VPNConnectionsClientBeginStopPacketCaptureOptions struct {
-	// Vpn Connection packet capture parameters supplied to stop packet capture on gateway connection.
-	Parameters *VPNConnectionPacketCaptureStopParameters
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNConnectionsClientGetOptions contains the optional parameters for the VPNConnectionsClient.Get method.
-type VPNConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VPNConnectionsClientListByVPNGatewayOptions contains the optional parameters for the VPNConnectionsClient.NewListByVPNGatewayPager
-// method.
-type VPNConnectionsClientListByVPNGatewayOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VPNDeviceScriptParameters - Vpn device configuration script generation parameters.
 type VPNDeviceScriptParameters struct {
 	// The device family for the vpn device.
@@ -14577,67 +11935,6 @@ type VPNGatewayProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// VPNGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the VPNGatewaysClient.BeginCreateOrUpdate
-// method.
-type VPNGatewaysClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNGatewaysClientBeginDeleteOptions contains the optional parameters for the VPNGatewaysClient.BeginDelete method.
-type VPNGatewaysClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNGatewaysClientBeginResetOptions contains the optional parameters for the VPNGatewaysClient.BeginReset method.
-type VPNGatewaysClientBeginResetOptions struct {
-	// VpnGateway ipConfigurationId to specify the gateway instance.
-	IPConfigurationID *string
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNGatewaysClientBeginStartPacketCaptureOptions contains the optional parameters for the VPNGatewaysClient.BeginStartPacketCapture
-// method.
-type VPNGatewaysClientBeginStartPacketCaptureOptions struct {
-	// Vpn gateway packet capture parameters supplied to start packet capture on vpn gateway.
-	Parameters *VPNGatewayPacketCaptureStartParameters
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNGatewaysClientBeginStopPacketCaptureOptions contains the optional parameters for the VPNGatewaysClient.BeginStopPacketCapture
-// method.
-type VPNGatewaysClientBeginStopPacketCaptureOptions struct {
-	// Vpn gateway packet capture parameters supplied to stop packet capture on vpn gateway.
-	Parameters *VPNGatewayPacketCaptureStopParameters
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNGatewaysClientBeginUpdateTagsOptions contains the optional parameters for the VPNGatewaysClient.BeginUpdateTags method.
-type VPNGatewaysClientBeginUpdateTagsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNGatewaysClientGetOptions contains the optional parameters for the VPNGatewaysClient.Get method.
-type VPNGatewaysClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VPNGatewaysClientListByResourceGroupOptions contains the optional parameters for the VPNGatewaysClient.NewListByResourceGroupPager
-// method.
-type VPNGatewaysClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VPNGatewaysClientListOptions contains the optional parameters for the VPNGatewaysClient.NewListPager method.
-type VPNGatewaysClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VPNLinkBgpSettings - BGP settings details for a link.
 type VPNLinkBgpSettings struct {
 	// The BGP speaker's ASN.
@@ -14647,26 +11944,6 @@ type VPNLinkBgpSettings struct {
 	BgpPeeringAddress *string
 }
 
-// VPNLinkConnectionsClientBeginGetIkeSasOptions contains the optional parameters for the VPNLinkConnectionsClient.BeginGetIkeSas
-// method.
-type VPNLinkConnectionsClientBeginGetIkeSasOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNLinkConnectionsClientBeginResetConnectionOptions contains the optional parameters for the VPNLinkConnectionsClient.BeginResetConnection
-// method.
-type VPNLinkConnectionsClientBeginResetConnectionOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNLinkConnectionsClientListByVPNConnectionOptions contains the optional parameters for the VPNLinkConnectionsClient.NewListByVPNConnectionPager
-// method.
-type VPNLinkConnectionsClientListByVPNConnectionOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VPNLinkProviderProperties - List of properties of a link provider.
 type VPNLinkProviderProperties struct {
 	// Name of the link provider.
@@ -14863,50 +12140,6 @@ type VPNServerConfigurationProperties struct {
 	ProvisioningState *string
 }
 
-// VPNServerConfigurationsAssociatedWithVirtualWanClientBeginListOptions contains the optional parameters for the VPNServerConfigurationsAssociatedWithVirtualWanClient.BeginList
-// method.
-type VPNServerConfigurationsAssociatedWithVirtualWanClientBeginListOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNServerConfigurationsClientBeginCreateOrUpdateOptions contains the optional parameters for the VPNServerConfigurationsClient.BeginCreateOrUpdate
-// method.
-type VPNServerConfigurationsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNServerConfigurationsClientBeginDeleteOptions contains the optional parameters for the VPNServerConfigurationsClient.BeginDelete
-// method.
-type VPNServerConfigurationsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNServerConfigurationsClientGetOptions contains the optional parameters for the VPNServerConfigurationsClient.Get method.
-type VPNServerConfigurationsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VPNServerConfigurationsClientListByResourceGroupOptions contains the optional parameters for the VPNServerConfigurationsClient.NewListByResourceGroupPager
-// method.
-type VPNServerConfigurationsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VPNServerConfigurationsClientListOptions contains the optional parameters for the VPNServerConfigurationsClient.NewListPager
-// method.
-type VPNServerConfigurationsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VPNServerConfigurationsClientUpdateTagsOptions contains the optional parameters for the VPNServerConfigurationsClient.UpdateTags
-// method.
-type VPNServerConfigurationsClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VPNServerConfigurationsResponse - VpnServerConfigurations list associated with VirtualWan Response.
 type VPNServerConfigurationsResponse struct {
 	// List of VpnServerConfigurations associated with VirtualWan.
@@ -15036,11 +12269,6 @@ type VPNSiteLinkConnectionProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// VPNSiteLinkConnectionsClientGetOptions contains the optional parameters for the VPNSiteLinkConnectionsClient.Get method.
-type VPNSiteLinkConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VPNSiteLinkProperties - Parameters for VpnSite.
 type VPNSiteLinkProperties struct {
 	// The set of bgp properties.
@@ -15059,17 +12287,6 @@ type VPNSiteLinkProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// VPNSiteLinksClientGetOptions contains the optional parameters for the VPNSiteLinksClient.Get method.
-type VPNSiteLinksClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VPNSiteLinksClientListByVPNSiteOptions contains the optional parameters for the VPNSiteLinksClient.NewListByVPNSitePager
-// method.
-type VPNSiteLinksClientListByVPNSiteOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VPNSiteProperties - Parameters for VpnSite.
 type VPNSiteProperties struct {
 	// The AddressSpace that contains an array of IP address ranges.
@@ -15103,46 +12320,6 @@ type VPNSiteProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// VPNSitesClientBeginCreateOrUpdateOptions contains the optional parameters for the VPNSitesClient.BeginCreateOrUpdate method.
-type VPNSitesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNSitesClientBeginDeleteOptions contains the optional parameters for the VPNSitesClient.BeginDelete method.
-type VPNSitesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VPNSitesClientGetOptions contains the optional parameters for the VPNSitesClient.Get method.
-type VPNSitesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VPNSitesClientListByResourceGroupOptions contains the optional parameters for the VPNSitesClient.NewListByResourceGroupPager
-// method.
-type VPNSitesClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VPNSitesClientListOptions contains the optional parameters for the VPNSitesClient.NewListPager method.
-type VPNSitesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VPNSitesClientUpdateTagsOptions contains the optional parameters for the VPNSitesClient.UpdateTags method.
-type VPNSitesClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VPNSitesConfigurationClientBeginDownloadOptions contains the optional parameters for the VPNSitesConfigurationClient.BeginDownload
-// method.
-type VPNSitesConfigurationClientBeginDownloadOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
 // VerificationIPFlowParameters - Parameters that define the IP flow to be verified.
 type VerificationIPFlowParameters struct {
 	// REQUIRED; The direction of the packet represented as a 5-tuple.
@@ -15182,22 +12359,6 @@ type VerificationIPFlowResult struct {
 	RuleName *string
 }
 
-// VipSwapClientBeginCreateOptions contains the optional parameters for the VipSwapClient.BeginCreate method.
-type VipSwapClientBeginCreateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VipSwapClientGetOptions contains the optional parameters for the VipSwapClient.Get method.
-type VipSwapClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VipSwapClientListOptions contains the optional parameters for the VipSwapClient.List method.
-type VipSwapClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualAppliance - NetworkVirtualAppliance Resource.
 type VirtualAppliance struct {
 	// Resource ID.
@@ -15225,6 +12386,60 @@ type VirtualAppliance struct {
 	Type *string
 }
 
+// VirtualApplianceAdditionalNicProperties - Network Virtual Appliance Additional NIC properties.
+type VirtualApplianceAdditionalNicProperties struct {
+	// Flag (true or false) for Intent for Public Ip on additional nic
+	HasPublicIP *bool
+
+	// Name of additional nic
+	Name *string
+}
+
+// VirtualApplianceConnection - NetworkVirtualApplianceConnection resource.
+type VirtualApplianceConnection struct {
+	// Resource ID.
+	ID *string
+
+	// The name of the resource.
+	Name *string
+
+	// Properties of the express route connection.
+	Properties *VirtualApplianceConnectionProperties
+}
+
+// VirtualApplianceConnectionList - NetworkVirtualApplianceConnection list.
+type VirtualApplianceConnectionList struct {
+	// URL to get the next set of results.
+	NextLink *string
+
+	// The list of NetworkVirtualAppliance connections.
+	Value []*VirtualApplianceConnection
+}
+
+// VirtualApplianceConnectionProperties - Properties of the NetworkVirtualApplianceConnection subresource.
+type VirtualApplianceConnectionProperties struct {
+	// Network Virtual Appliance ASN.
+	Asn *int64
+
+	// List of bgpPeerAddresses for the NVA instances
+	BgpPeerAddress []*string
+
+	// Enable internet security.
+	EnableInternetSecurity *bool
+
+	// The name of the resource.
+	Name *string
+
+	// The Routing Configuration indicating the associated and propagated route tables on this connection.
+	RoutingConfiguration *RoutingConfigurationNfv
+
+	// Unique identifier for the connection.
+	TunnelIdentifier *int64
+
+	// READ-ONLY; The provisioning state of the NetworkVirtualApplianceConnection resource.
+	ProvisioningState *ProvisioningState
+}
+
 // VirtualApplianceListResult - Response for ListNetworkVirtualAppliances API service call.
 type VirtualApplianceListResult struct {
 	// URL to get the next set of results.
@@ -15236,6 +12451,9 @@ type VirtualApplianceListResult struct {
 
 // VirtualApplianceNicProperties - Network Virtual Appliance NIC properties.
 type VirtualApplianceNicProperties struct {
+	// READ-ONLY; Instance on which nic is attached.
+	InstanceName *string
+
 	// READ-ONLY; NIC name.
 	Name *string
 
@@ -15248,6 +12466,9 @@ type VirtualApplianceNicProperties struct {
 
 // VirtualAppliancePropertiesFormat - Network Virtual Appliance definition.
 type VirtualAppliancePropertiesFormat struct {
+	// Details required for Additional Network Interface.
+	AdditionalNics []*VirtualApplianceAdditionalNicProperties
+
 	// BootStrapConfigurationBlobs storage URLs.
 	BootStrapConfigurationBlobs []*string
 
@@ -15287,6 +12508,9 @@ type VirtualAppliancePropertiesFormat struct {
 	// READ-ONLY; The provisioning state of the resource.
 	ProvisioningState *ProvisioningState
 
+	// READ-ONLY; List of references to VirtualApplianceConnections.
+	VirtualApplianceConnections []*SubResource
+
 	// READ-ONLY; List of Virtual Appliance Network Interfaces.
 	VirtualApplianceNics []*VirtualApplianceNicProperties
 
@@ -15360,17 +12584,6 @@ type VirtualApplianceSKUPropertiesFormat struct {
 	Vendor *string
 }
 
-// VirtualApplianceSKUsClientGetOptions contains the optional parameters for the VirtualApplianceSKUsClient.Get method.
-type VirtualApplianceSKUsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualApplianceSKUsClientListOptions contains the optional parameters for the VirtualApplianceSKUsClient.NewListPager
-// method.
-type VirtualApplianceSKUsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualApplianceSite - Virtual Appliance Site resource.
 type VirtualApplianceSite struct {
 	// Resource ID.
@@ -15410,67 +12623,6 @@ type VirtualApplianceSiteProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// VirtualApplianceSitesClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualApplianceSitesClient.BeginCreateOrUpdate
-// method.
-type VirtualApplianceSitesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualApplianceSitesClientBeginDeleteOptions contains the optional parameters for the VirtualApplianceSitesClient.BeginDelete
-// method.
-type VirtualApplianceSitesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualApplianceSitesClientGetOptions contains the optional parameters for the VirtualApplianceSitesClient.Get method.
-type VirtualApplianceSitesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualApplianceSitesClientListOptions contains the optional parameters for the VirtualApplianceSitesClient.NewListPager
-// method.
-type VirtualApplianceSitesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualAppliancesClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualAppliancesClient.BeginCreateOrUpdate
-// method.
-type VirtualAppliancesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualAppliancesClientBeginDeleteOptions contains the optional parameters for the VirtualAppliancesClient.BeginDelete
-// method.
-type VirtualAppliancesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualAppliancesClientGetOptions contains the optional parameters for the VirtualAppliancesClient.Get method.
-type VirtualAppliancesClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// VirtualAppliancesClientListByResourceGroupOptions contains the optional parameters for the VirtualAppliancesClient.NewListByResourceGroupPager
-// method.
-type VirtualAppliancesClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualAppliancesClientListOptions contains the optional parameters for the VirtualAppliancesClient.NewListPager method.
-type VirtualAppliancesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualAppliancesClientUpdateTagsOptions contains the optional parameters for the VirtualAppliancesClient.UpdateTags method.
-type VirtualAppliancesClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualHub Resource.
 type VirtualHub struct {
 	// Resource ID.
@@ -15498,45 +12650,6 @@ type VirtualHub struct {
 	Type *string
 }
 
-// VirtualHubBgpConnectionClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualHubBgpConnectionClient.BeginCreateOrUpdate
-// method.
-type VirtualHubBgpConnectionClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubBgpConnectionClientBeginDeleteOptions contains the optional parameters for the VirtualHubBgpConnectionClient.BeginDelete
-// method.
-type VirtualHubBgpConnectionClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubBgpConnectionClientGetOptions contains the optional parameters for the VirtualHubBgpConnectionClient.Get method.
-type VirtualHubBgpConnectionClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualHubBgpConnectionsClientBeginListAdvertisedRoutesOptions contains the optional parameters for the VirtualHubBgpConnectionsClient.BeginListAdvertisedRoutes
-// method.
-type VirtualHubBgpConnectionsClientBeginListAdvertisedRoutesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubBgpConnectionsClientBeginListLearnedRoutesOptions contains the optional parameters for the VirtualHubBgpConnectionsClient.BeginListLearnedRoutes
-// method.
-type VirtualHubBgpConnectionsClientBeginListLearnedRoutesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubBgpConnectionsClientListOptions contains the optional parameters for the VirtualHubBgpConnectionsClient.NewListPager
-// method.
-type VirtualHubBgpConnectionsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualHubEffectiveRoute - The effective route configured on the virtual hub or specified resource.
 type VirtualHubEffectiveRoute struct {
 	// The list of address prefixes.
@@ -15568,32 +12681,6 @@ type VirtualHubID struct {
 	ID *string
 }
 
-// VirtualHubIPConfigurationClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualHubIPConfigurationClient.BeginCreateOrUpdate
-// method.
-type VirtualHubIPConfigurationClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubIPConfigurationClientBeginDeleteOptions contains the optional parameters for the VirtualHubIPConfigurationClient.BeginDelete
-// method.
-type VirtualHubIPConfigurationClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubIPConfigurationClientGetOptions contains the optional parameters for the VirtualHubIPConfigurationClient.Get
-// method.
-type VirtualHubIPConfigurationClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualHubIPConfigurationClientListOptions contains the optional parameters for the VirtualHubIPConfigurationClient.NewListPager
-// method.
-type VirtualHubIPConfigurationClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualHubProperties - Parameters for VirtualHub.
 type VirtualHubProperties struct {
 	// Address-prefix for this VirtualHub.
@@ -15705,31 +12792,6 @@ type VirtualHubRouteTableV2Properties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// VirtualHubRouteTableV2SClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualHubRouteTableV2SClient.BeginCreateOrUpdate
-// method.
-type VirtualHubRouteTableV2SClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubRouteTableV2SClientBeginDeleteOptions contains the optional parameters for the VirtualHubRouteTableV2SClient.BeginDelete
-// method.
-type VirtualHubRouteTableV2SClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubRouteTableV2SClientGetOptions contains the optional parameters for the VirtualHubRouteTableV2SClient.Get method.
-type VirtualHubRouteTableV2SClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualHubRouteTableV2SClientListOptions contains the optional parameters for the VirtualHubRouteTableV2SClient.NewListPager
-// method.
-type VirtualHubRouteTableV2SClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualHubRouteV2 - VirtualHubRouteTableV2 route.
 type VirtualHubRouteV2 struct {
 	// The type of destinations.
@@ -15745,63 +12807,6 @@ type VirtualHubRouteV2 struct {
 	NextHops []*string
 }
 
-// VirtualHubsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualHubsClient.BeginCreateOrUpdate
-// method.
-type VirtualHubsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubsClientBeginDeleteOptions contains the optional parameters for the VirtualHubsClient.BeginDelete method.
-type VirtualHubsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubsClientBeginGetEffectiveVirtualHubRoutesOptions contains the optional parameters for the VirtualHubsClient.BeginGetEffectiveVirtualHubRoutes
-// method.
-type VirtualHubsClientBeginGetEffectiveVirtualHubRoutesOptions struct {
-	// Parameters supplied to get the effective routes for a specific resource.
-	EffectiveRoutesParameters *EffectiveRoutesParameters
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubsClientBeginGetInboundRoutesOptions contains the optional parameters for the VirtualHubsClient.BeginGetInboundRoutes
-// method.
-type VirtualHubsClientBeginGetInboundRoutesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubsClientBeginGetOutboundRoutesOptions contains the optional parameters for the VirtualHubsClient.BeginGetOutboundRoutes
-// method.
-type VirtualHubsClientBeginGetOutboundRoutesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualHubsClientGetOptions contains the optional parameters for the VirtualHubsClient.Get method.
-type VirtualHubsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualHubsClientListByResourceGroupOptions contains the optional parameters for the VirtualHubsClient.NewListByResourceGroupPager
-// method.
-type VirtualHubsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualHubsClientListOptions contains the optional parameters for the VirtualHubsClient.NewListPager method.
-type VirtualHubsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualHubsClientUpdateTagsOptions contains the optional parameters for the VirtualHubsClient.UpdateTags method.
-type VirtualHubsClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualNetwork - Virtual Network resource.
 type VirtualNetwork struct {
 	// The extended location of the virtual network.
@@ -15891,6 +12896,20 @@ type VirtualNetworkGateway struct {
 	Type *string
 }
 
+type VirtualNetworkGatewayAutoScaleBounds struct {
+	// Maximum Scale Units for Autoscale configuration
+	Max *int32
+
+	// Minimum scale Units for Autoscale configuration
+	Min *int32
+}
+
+// VirtualNetworkGatewayAutoScaleConfiguration - Virtual Network Gateway Autoscale Configuration details
+type VirtualNetworkGatewayAutoScaleConfiguration struct {
+	// The bounds of the autoscale configuration
+	Bounds *VirtualNetworkGatewayAutoScaleBounds
+}
+
 // VirtualNetworkGatewayConnection - A common class for general resource information.
 type VirtualNetworkGatewayConnection struct {
 	// REQUIRED; Properties of the virtual network gateway connection.
@@ -16106,89 +13125,6 @@ type VirtualNetworkGatewayConnectionPropertiesFormat struct {
 	TunnelConnectionStatus []*TunnelConnectionHealth
 }
 
-// VirtualNetworkGatewayConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginCreateOrUpdate
-// method.
-type VirtualNetworkGatewayConnectionsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewayConnectionsClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginDelete
-// method.
-type VirtualNetworkGatewayConnectionsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewayConnectionsClientBeginGetIkeSasOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginGetIkeSas
-// method.
-type VirtualNetworkGatewayConnectionsClientBeginGetIkeSasOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewayConnectionsClientBeginResetConnectionOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginResetConnection
-// method.
-type VirtualNetworkGatewayConnectionsClientBeginResetConnectionOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewayConnectionsClientBeginResetSharedKeyOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginResetSharedKey
-// method.
-type VirtualNetworkGatewayConnectionsClientBeginResetSharedKeyOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewayConnectionsClientBeginSetSharedKeyOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginSetSharedKey
-// method.
-type VirtualNetworkGatewayConnectionsClientBeginSetSharedKeyOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewayConnectionsClientBeginStartPacketCaptureOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginStartPacketCapture
-// method.
-type VirtualNetworkGatewayConnectionsClientBeginStartPacketCaptureOptions struct {
-	// Virtual network gateway packet capture parameters supplied to start packet capture on gateway connection.
-	Parameters *VPNPacketCaptureStartParameters
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewayConnectionsClientBeginStopPacketCaptureOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginStopPacketCapture
-// method.
-type VirtualNetworkGatewayConnectionsClientBeginStopPacketCaptureOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewayConnectionsClientBeginUpdateTagsOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginUpdateTags
-// method.
-type VirtualNetworkGatewayConnectionsClientBeginUpdateTagsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewayConnectionsClientGetOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.Get
-// method.
-type VirtualNetworkGatewayConnectionsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworkGatewayConnectionsClientGetSharedKeyOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.GetSharedKey
-// method.
-type VirtualNetworkGatewayConnectionsClientGetSharedKeyOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworkGatewayConnectionsClientListOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.NewListPager
-// method.
-type VirtualNetworkGatewayConnectionsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualNetworkGatewayIPConfiguration - IP configuration for virtual network gateway.
 type VirtualNetworkGatewayIPConfiguration struct {
 	// Resource ID.
@@ -16279,32 +13215,6 @@ type VirtualNetworkGatewayNatRuleProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// VirtualNetworkGatewayNatRulesClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworkGatewayNatRulesClient.BeginCreateOrUpdate
-// method.
-type VirtualNetworkGatewayNatRulesClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewayNatRulesClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkGatewayNatRulesClient.BeginDelete
-// method.
-type VirtualNetworkGatewayNatRulesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewayNatRulesClientGetOptions contains the optional parameters for the VirtualNetworkGatewayNatRulesClient.Get
-// method.
-type VirtualNetworkGatewayNatRulesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayOptions contains the optional parameters for the VirtualNetworkGatewayNatRulesClient.NewListByVirtualNetworkGatewayPager
-// method.
-type VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualNetworkGatewayPolicyGroup - Parameters for VirtualNetworkGatewayPolicyGroup.
 type VirtualNetworkGatewayPolicyGroup struct {
 	// Resource ID.
@@ -16355,6 +13265,10 @@ type VirtualNetworkGatewayPropertiesFormat struct {
 	// ActiveActive flag.
 	Active *bool
 
+	// Property to indicate if the Express Route Gateway serves traffic when there are multiple Express Route Gateways in the
+	// vnet
+	AdminState *AdminState
+
 	// Configure this gateway to accept traffic from other Azure Virtual Networks. This configuration does not support connectivity
 	// to Azure Virtual WAN.
 	AllowRemoteVnetTraffic *bool
@@ -16362,6 +13276,9 @@ type VirtualNetworkGatewayPropertiesFormat struct {
 	// Configures this gateway to accept traffic from remote Virtual WAN networks.
 	AllowVirtualWanTraffic *bool
 
+	// Autoscale configuration for virutal network gateway
+	AutoScaleConfiguration *VirtualNetworkGatewayAutoScaleConfiguration
+
 	// Virtual network gateway's BGP speaker settings.
 	BgpSettings *BgpSettings
 
@@ -16438,160 +13355,6 @@ type VirtualNetworkGatewaySKU struct {
 	Capacity *int32
 }
 
-// VirtualNetworkGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginCreateOrUpdate
-// method.
-type VirtualNetworkGatewaysClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginDelete
-// method.
-type VirtualNetworkGatewaysClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginDisconnectVirtualNetworkGatewayVPNConnectionsOptions contains the optional parameters
-// for the VirtualNetworkGatewaysClient.BeginDisconnectVirtualNetworkGatewayVPNConnections method.
-type VirtualNetworkGatewaysClientBeginDisconnectVirtualNetworkGatewayVPNConnectionsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginGenerateVPNProfileOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGenerateVPNProfile
-// method.
-type VirtualNetworkGatewaysClientBeginGenerateVPNProfileOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginGeneratevpnclientpackageOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGeneratevpnclientpackage
-// method.
-type VirtualNetworkGatewaysClientBeginGeneratevpnclientpackageOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginGetAdvertisedRoutesOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetAdvertisedRoutes
-// method.
-type VirtualNetworkGatewaysClientBeginGetAdvertisedRoutesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginGetBgpPeerStatusOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetBgpPeerStatus
-// method.
-type VirtualNetworkGatewaysClientBeginGetBgpPeerStatusOptions struct {
-	// The IP address of the peer to retrieve the status of.
-	Peer *string
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginGetLearnedRoutesOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetLearnedRoutes
-// method.
-type VirtualNetworkGatewaysClientBeginGetLearnedRoutesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginGetVPNProfilePackageURLOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetVPNProfilePackageURL
-// method.
-type VirtualNetworkGatewaysClientBeginGetVPNProfilePackageURLOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginGetVpnclientConnectionHealthOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetVpnclientConnectionHealth
-// method.
-type VirtualNetworkGatewaysClientBeginGetVpnclientConnectionHealthOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginGetVpnclientIPSecParametersOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetVpnclientIPSecParameters
-// method.
-type VirtualNetworkGatewaysClientBeginGetVpnclientIPSecParametersOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginResetOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginReset
-// method.
-type VirtualNetworkGatewaysClientBeginResetOptions struct {
-	// Virtual network gateway vip address supplied to the begin reset of the active-active feature enabled gateway.
-	GatewayVip *string
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginResetVPNClientSharedKeyOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginResetVPNClientSharedKey
-// method.
-type VirtualNetworkGatewaysClientBeginResetVPNClientSharedKeyOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginSetVpnclientIPSecParametersOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginSetVpnclientIPSecParameters
-// method.
-type VirtualNetworkGatewaysClientBeginSetVpnclientIPSecParametersOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginStartPacketCaptureOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginStartPacketCapture
-// method.
-type VirtualNetworkGatewaysClientBeginStartPacketCaptureOptions struct {
-	// Virtual network gateway packet capture parameters supplied to start packet capture on gateway.
-	Parameters *VPNPacketCaptureStartParameters
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginStopPacketCaptureOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginStopPacketCapture
-// method.
-type VirtualNetworkGatewaysClientBeginStopPacketCaptureOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientBeginUpdateTagsOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginUpdateTags
-// method.
-type VirtualNetworkGatewaysClientBeginUpdateTagsOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkGatewaysClientGetOptions contains the optional parameters for the VirtualNetworkGatewaysClient.Get method.
-type VirtualNetworkGatewaysClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworkGatewaysClientListConnectionsOptions contains the optional parameters for the VirtualNetworkGatewaysClient.NewListConnectionsPager
-// method.
-type VirtualNetworkGatewaysClientListConnectionsOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworkGatewaysClientListOptions contains the optional parameters for the VirtualNetworkGatewaysClient.NewListPager
-// method.
-type VirtualNetworkGatewaysClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworkGatewaysClientSupportedVPNDevicesOptions contains the optional parameters for the VirtualNetworkGatewaysClient.SupportedVPNDevices
-// method.
-type VirtualNetworkGatewaysClientSupportedVPNDevicesOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptOptions contains the optional parameters for the VirtualNetworkGatewaysClient.VPNDeviceConfigurationScript
-// method.
-type VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualNetworkListResult - Response for the ListVirtualNetworks API service call.
 type VirtualNetworkListResult struct {
 	// The URL to get the next set of results.
@@ -16688,33 +13451,6 @@ type VirtualNetworkPeeringPropertiesFormat struct {
 	ResourceGUID *string
 }
 
-// VirtualNetworkPeeringsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworkPeeringsClient.BeginCreateOrUpdate
-// method.
-type VirtualNetworkPeeringsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// Parameter indicates the intention to sync the peering with the current address space on the remote vNet after it's updated.
-	SyncRemoteAddressSpace *SyncRemoteAddressSpace
-}
-
-// VirtualNetworkPeeringsClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkPeeringsClient.BeginDelete
-// method.
-type VirtualNetworkPeeringsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkPeeringsClientGetOptions contains the optional parameters for the VirtualNetworkPeeringsClient.Get method.
-type VirtualNetworkPeeringsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworkPeeringsClientListOptions contains the optional parameters for the VirtualNetworkPeeringsClient.NewListPager
-// method.
-type VirtualNetworkPeeringsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualNetworkPropertiesFormat - Properties of the virtual network.
 type VirtualNetworkPropertiesFormat struct {
 	// The AddressSpace that contains an array of IP address ranges that can be used by subnets.
@@ -16815,43 +13551,6 @@ type VirtualNetworkTapPropertiesFormat struct {
 	ResourceGUID *string
 }
 
-// VirtualNetworkTapsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworkTapsClient.BeginCreateOrUpdate
-// method.
-type VirtualNetworkTapsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkTapsClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkTapsClient.BeginDelete
-// method.
-type VirtualNetworkTapsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworkTapsClientGetOptions contains the optional parameters for the VirtualNetworkTapsClient.Get method.
-type VirtualNetworkTapsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworkTapsClientListAllOptions contains the optional parameters for the VirtualNetworkTapsClient.NewListAllPager
-// method.
-type VirtualNetworkTapsClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworkTapsClientListByResourceGroupOptions contains the optional parameters for the VirtualNetworkTapsClient.NewListByResourceGroupPager
-// method.
-type VirtualNetworkTapsClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworkTapsClientUpdateTagsOptions contains the optional parameters for the VirtualNetworkTapsClient.UpdateTags
-// method.
-type VirtualNetworkTapsClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualNetworkUsage - Usage details for subnet.
 type VirtualNetworkUsage struct {
 	// READ-ONLY; Indicates number of IPs used from the Subnet.
@@ -16879,63 +13578,6 @@ type VirtualNetworkUsageName struct {
 	Value *string
 }
 
-// VirtualNetworksClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworksClient.BeginCreateOrUpdate
-// method.
-type VirtualNetworksClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworksClientBeginDeleteOptions contains the optional parameters for the VirtualNetworksClient.BeginDelete method.
-type VirtualNetworksClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualNetworksClientBeginListDdosProtectionStatusOptions contains the optional parameters for the VirtualNetworksClient.BeginListDdosProtectionStatus
-// method.
-type VirtualNetworksClientBeginListDdosProtectionStatusOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-	// The skipToken that is given with nextLink.
-	SkipToken *string
-	// The max number of ip addresses to return.
-	Top *int32
-}
-
-// VirtualNetworksClientCheckIPAddressAvailabilityOptions contains the optional parameters for the VirtualNetworksClient.CheckIPAddressAvailability
-// method.
-type VirtualNetworksClientCheckIPAddressAvailabilityOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworksClientGetOptions contains the optional parameters for the VirtualNetworksClient.Get method.
-type VirtualNetworksClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// VirtualNetworksClientListAllOptions contains the optional parameters for the VirtualNetworksClient.NewListAllPager method.
-type VirtualNetworksClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworksClientListOptions contains the optional parameters for the VirtualNetworksClient.NewListPager method.
-type VirtualNetworksClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworksClientListUsageOptions contains the optional parameters for the VirtualNetworksClient.NewListUsagePager
-// method.
-type VirtualNetworksClientListUsageOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualNetworksClientUpdateTagsOptions contains the optional parameters for the VirtualNetworksClient.UpdateTags method.
-type VirtualNetworksClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualRouter Resource.
 type VirtualRouter struct {
 	// Resource ID.
@@ -17014,31 +13656,6 @@ type VirtualRouterPeeringProperties struct {
 	ProvisioningState *ProvisioningState
 }
 
-// VirtualRouterPeeringsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualRouterPeeringsClient.BeginCreateOrUpdate
-// method.
-type VirtualRouterPeeringsClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualRouterPeeringsClientBeginDeleteOptions contains the optional parameters for the VirtualRouterPeeringsClient.BeginDelete
-// method.
-type VirtualRouterPeeringsClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualRouterPeeringsClientGetOptions contains the optional parameters for the VirtualRouterPeeringsClient.Get method.
-type VirtualRouterPeeringsClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualRouterPeeringsClientListOptions contains the optional parameters for the VirtualRouterPeeringsClient.NewListPager
-// method.
-type VirtualRouterPeeringsClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualRouterPropertiesFormat - Virtual Router definition.
 type VirtualRouterPropertiesFormat struct {
 	// The Gateway on which VirtualRouter is hosted.
@@ -17060,36 +13677,6 @@ type VirtualRouterPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// VirtualRoutersClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualRoutersClient.BeginCreateOrUpdate
-// method.
-type VirtualRoutersClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualRoutersClientBeginDeleteOptions contains the optional parameters for the VirtualRoutersClient.BeginDelete method.
-type VirtualRoutersClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualRoutersClientGetOptions contains the optional parameters for the VirtualRoutersClient.Get method.
-type VirtualRoutersClientGetOptions struct {
-	// Expands referenced resources.
-	Expand *string
-}
-
-// VirtualRoutersClientListByResourceGroupOptions contains the optional parameters for the VirtualRoutersClient.NewListByResourceGroupPager
-// method.
-type VirtualRoutersClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualRoutersClientListOptions contains the optional parameters for the VirtualRoutersClient.NewListPager method.
-type VirtualRoutersClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VirtualWAN Resource.
 type VirtualWAN struct {
 	// Resource ID.
@@ -17168,40 +13755,6 @@ type VirtualWanVPNProfileParameters struct {
 	VPNServerConfigurationResourceID *string
 }
 
-// VirtualWansClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualWansClient.BeginCreateOrUpdate
-// method.
-type VirtualWansClientBeginCreateOrUpdateOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualWansClientBeginDeleteOptions contains the optional parameters for the VirtualWansClient.BeginDelete method.
-type VirtualWansClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// VirtualWansClientGetOptions contains the optional parameters for the VirtualWansClient.Get method.
-type VirtualWansClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualWansClientListByResourceGroupOptions contains the optional parameters for the VirtualWansClient.NewListByResourceGroupPager
-// method.
-type VirtualWansClientListByResourceGroupOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualWansClientListOptions contains the optional parameters for the VirtualWansClient.NewListPager method.
-type VirtualWansClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// VirtualWansClientUpdateTagsOptions contains the optional parameters for the VirtualWansClient.UpdateTags method.
-type VirtualWansClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // VnetRoute - List of routes that control routing from VirtualHub into a virtual network connection.
 type VnetRoute struct {
 	// List of all Static Routes.
@@ -17277,117 +13830,6 @@ type WatcherPropertiesFormat struct {
 	ProvisioningState *ProvisioningState
 }
 
-// WatchersClientBeginCheckConnectivityOptions contains the optional parameters for the WatchersClient.BeginCheckConnectivity
-// method.
-type WatchersClientBeginCheckConnectivityOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientBeginDeleteOptions contains the optional parameters for the WatchersClient.BeginDelete method.
-type WatchersClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientBeginGetAzureReachabilityReportOptions contains the optional parameters for the WatchersClient.BeginGetAzureReachabilityReport
-// method.
-type WatchersClientBeginGetAzureReachabilityReportOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientBeginGetFlowLogStatusOptions contains the optional parameters for the WatchersClient.BeginGetFlowLogStatus
-// method.
-type WatchersClientBeginGetFlowLogStatusOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientBeginGetNetworkConfigurationDiagnosticOptions contains the optional parameters for the WatchersClient.BeginGetNetworkConfigurationDiagnostic
-// method.
-type WatchersClientBeginGetNetworkConfigurationDiagnosticOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientBeginGetNextHopOptions contains the optional parameters for the WatchersClient.BeginGetNextHop method.
-type WatchersClientBeginGetNextHopOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientBeginGetTroubleshootingOptions contains the optional parameters for the WatchersClient.BeginGetTroubleshooting
-// method.
-type WatchersClientBeginGetTroubleshootingOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientBeginGetTroubleshootingResultOptions contains the optional parameters for the WatchersClient.BeginGetTroubleshootingResult
-// method.
-type WatchersClientBeginGetTroubleshootingResultOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientBeginGetVMSecurityRulesOptions contains the optional parameters for the WatchersClient.BeginGetVMSecurityRules
-// method.
-type WatchersClientBeginGetVMSecurityRulesOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientBeginListAvailableProvidersOptions contains the optional parameters for the WatchersClient.BeginListAvailableProviders
-// method.
-type WatchersClientBeginListAvailableProvidersOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientBeginSetFlowLogConfigurationOptions contains the optional parameters for the WatchersClient.BeginSetFlowLogConfiguration
-// method.
-type WatchersClientBeginSetFlowLogConfigurationOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientBeginVerifyIPFlowOptions contains the optional parameters for the WatchersClient.BeginVerifyIPFlow method.
-type WatchersClientBeginVerifyIPFlowOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WatchersClientCreateOrUpdateOptions contains the optional parameters for the WatchersClient.CreateOrUpdate method.
-type WatchersClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// WatchersClientGetOptions contains the optional parameters for the WatchersClient.Get method.
-type WatchersClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// WatchersClientGetTopologyOptions contains the optional parameters for the WatchersClient.GetTopology method.
-type WatchersClientGetTopologyOptions struct {
-	// placeholder for future optional parameters
-}
-
-// WatchersClientListAllOptions contains the optional parameters for the WatchersClient.NewListAllPager method.
-type WatchersClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// WatchersClientListOptions contains the optional parameters for the WatchersClient.NewListPager method.
-type WatchersClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
-// WatchersClientUpdateTagsOptions contains the optional parameters for the WatchersClient.UpdateTags method.
-type WatchersClientUpdateTagsOptions struct {
-	// placeholder for future optional parameters
-}
-
 // WebApplicationFirewallCustomRule - Defines contents of a web application rule.
 type WebApplicationFirewallCustomRule struct {
 	// REQUIRED; Type of Actions.
@@ -17402,9 +13844,18 @@ type WebApplicationFirewallCustomRule struct {
 	// REQUIRED; The rule type.
 	RuleType *WebApplicationFirewallRuleType
 
+	// List of user session identifier group by clauses.
+	GroupByUserSession []*GroupByUserSession
+
 	// The name of the resource that is unique within a policy. This name can be used to access the resource.
 	Name *string
 
+	// Duration over which Rate Limit policy will be applied. Applies only when ruleType is RateLimitRule.
+	RateLimitDuration *ApplicationGatewayFirewallRateLimitDuration
+
+	// Rate Limit threshold to apply in case ruleType is RateLimitRule. Must be greater than or equal to 1
+	RateLimitThreshold *int32
+
 	// Describes if the custom rule is in enabled or disabled state. Defaults to Enabled if not specified.
 	State *WebApplicationFirewallState
 
@@ -17412,37 +13863,6 @@ type WebApplicationFirewallCustomRule struct {
 	Etag *string
 }
 
-// WebApplicationFirewallPoliciesClientBeginDeleteOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.BeginDelete
-// method.
-type WebApplicationFirewallPoliciesClientBeginDeleteOptions struct {
-	// Resumes the LRO from the provided token.
-	ResumeToken string
-}
-
-// WebApplicationFirewallPoliciesClientCreateOrUpdateOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.CreateOrUpdate
-// method.
-type WebApplicationFirewallPoliciesClientCreateOrUpdateOptions struct {
-	// placeholder for future optional parameters
-}
-
-// WebApplicationFirewallPoliciesClientGetOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.Get
-// method.
-type WebApplicationFirewallPoliciesClientGetOptions struct {
-	// placeholder for future optional parameters
-}
-
-// WebApplicationFirewallPoliciesClientListAllOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.NewListAllPager
-// method.
-type WebApplicationFirewallPoliciesClientListAllOptions struct {
-	// placeholder for future optional parameters
-}
-
-// WebApplicationFirewallPoliciesClientListOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.NewListPager
-// method.
-type WebApplicationFirewallPoliciesClientListOptions struct {
-	// placeholder for future optional parameters
-}
-
 // WebApplicationFirewallPolicy - Defines web application firewall policy.
 type WebApplicationFirewallPolicy struct {
 	// Resource ID.
@@ -17504,14 +13924,18 @@ type WebApplicationFirewallPolicyPropertiesFormat struct {
 	ResourceState *WebApplicationFirewallPolicyResourceState
 }
 
-// WebCategoriesClientGetOptions contains the optional parameters for the WebCategoriesClient.Get method.
-type WebCategoriesClientGetOptions struct {
-	// Expands resourceIds back referenced by the azureWebCategory resource.
-	Expand *string
-}
+// WebApplicationFirewallScrubbingRules - Allow certain variables to be scrubbed on WAF logs
+type WebApplicationFirewallScrubbingRules struct {
+	// REQUIRED; The variable to be scrubbed from the logs.
+	MatchVariable *ScrubbingRuleEntryMatchVariable
+
+	// REQUIRED; When matchVariable is a collection, operate on the selector to specify which elements in the collection this
+	// rule applies to.
+	SelectorMatchOperator *ScrubbingRuleEntryMatchOperator
+
+	// When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
+	Selector *string
 
-// WebCategoriesClientListBySubscriptionOptions contains the optional parameters for the WebCategoriesClient.NewListBySubscriptionPager
-// method.
-type WebCategoriesClientListBySubscriptionOptions struct {
-	// placeholder for future optional parameters
+	// Defines the state of log scrubbing rule. Default value is Enabled.
+	State *ScrubbingRuleEntryState
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/models_serde.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/models_serde.go
similarity index 97%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/models_serde.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/models_serde.go
index 4c01ad60ed4..affbe8f6323 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/models_serde.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/models_serde.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -85,7 +84,7 @@ func (a *Action) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type ActiveBaseSecurityAdminRule.
 func (a ActiveBaseSecurityAdminRule) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "commitTime", a.CommitTime)
+	populateDateTimeRFC3339(objectMap, "commitTime", a.CommitTime)
 	populate(objectMap, "configurationDescription", a.ConfigurationDescription)
 	populate(objectMap, "id", a.ID)
 	objectMap["kind"] = a.Kind
@@ -106,7 +105,7 @@ func (a *ActiveBaseSecurityAdminRule) UnmarshalJSON(data []byte) error {
 		var err error
 		switch key {
 		case "commitTime":
-			err = unpopulateTimeRFC3339(val, "CommitTime", &a.CommitTime)
+			err = unpopulateDateTimeRFC3339(val, "CommitTime", &a.CommitTime)
 			delete(rawMsg, key)
 		case "configurationDescription":
 			err = unpopulate(val, "ConfigurationDescription", &a.ConfigurationDescription)
@@ -171,7 +170,7 @@ func (a *ActiveConfigurationParameter) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type ActiveConnectivityConfiguration.
 func (a ActiveConnectivityConfiguration) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "commitTime", a.CommitTime)
+	populateDateTimeRFC3339(objectMap, "commitTime", a.CommitTime)
 	populate(objectMap, "configurationGroups", a.ConfigurationGroups)
 	populate(objectMap, "id", a.ID)
 	populate(objectMap, "properties", a.Properties)
@@ -189,7 +188,7 @@ func (a *ActiveConnectivityConfiguration) UnmarshalJSON(data []byte) error {
 		var err error
 		switch key {
 		case "commitTime":
-			err = unpopulateTimeRFC3339(val, "CommitTime", &a.CommitTime)
+			err = unpopulateDateTimeRFC3339(val, "CommitTime", &a.CommitTime)
 			delete(rawMsg, key)
 		case "configurationGroups":
 			err = unpopulate(val, "ConfigurationGroups", &a.ConfigurationGroups)
@@ -245,7 +244,7 @@ func (a *ActiveConnectivityConfigurationsListResult) UnmarshalJSON(data []byte)
 // MarshalJSON implements the json.Marshaller interface for type ActiveDefaultSecurityAdminRule.
 func (a ActiveDefaultSecurityAdminRule) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "commitTime", a.CommitTime)
+	populateDateTimeRFC3339(objectMap, "commitTime", a.CommitTime)
 	populate(objectMap, "configurationDescription", a.ConfigurationDescription)
 	populate(objectMap, "id", a.ID)
 	objectMap["kind"] = EffectiveAdminRuleKindDefault
@@ -267,7 +266,7 @@ func (a *ActiveDefaultSecurityAdminRule) UnmarshalJSON(data []byte) error {
 		var err error
 		switch key {
 		case "commitTime":
-			err = unpopulateTimeRFC3339(val, "CommitTime", &a.CommitTime)
+			err = unpopulateDateTimeRFC3339(val, "CommitTime", &a.CommitTime)
 			delete(rawMsg, key)
 		case "configurationDescription":
 			err = unpopulate(val, "ConfigurationDescription", &a.ConfigurationDescription)
@@ -304,7 +303,7 @@ func (a *ActiveDefaultSecurityAdminRule) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type ActiveSecurityAdminRule.
 func (a ActiveSecurityAdminRule) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "commitTime", a.CommitTime)
+	populateDateTimeRFC3339(objectMap, "commitTime", a.CommitTime)
 	populate(objectMap, "configurationDescription", a.ConfigurationDescription)
 	populate(objectMap, "id", a.ID)
 	objectMap["kind"] = EffectiveAdminRuleKindCustom
@@ -326,7 +325,7 @@ func (a *ActiveSecurityAdminRule) UnmarshalJSON(data []byte) error {
 		var err error
 		switch key {
 		case "commitTime":
-			err = unpopulateTimeRFC3339(val, "CommitTime", &a.CommitTime)
+			err = unpopulateDateTimeRFC3339(val, "CommitTime", &a.CommitTime)
 			delete(rawMsg, key)
 		case "configurationDescription":
 			err = unpopulate(val, "ConfigurationDescription", &a.ConfigurationDescription)
@@ -460,6 +459,7 @@ func (a AdminPropertiesFormat) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "priority", a.Priority)
 	populate(objectMap, "protocol", a.Protocol)
 	populate(objectMap, "provisioningState", a.ProvisioningState)
+	populate(objectMap, "resourceGuid", a.ResourceGUID)
 	populate(objectMap, "sourcePortRanges", a.SourcePortRanges)
 	populate(objectMap, "sources", a.Sources)
 	return json.Marshal(objectMap)
@@ -498,6 +498,9 @@ func (a *AdminPropertiesFormat) UnmarshalJSON(data []byte) error {
 		case "provisioningState":
 			err = unpopulate(val, "ProvisioningState", &a.ProvisioningState)
 			delete(rawMsg, key)
+		case "resourceGuid":
+			err = unpopulate(val, "ResourceGUID", &a.ResourceGUID)
+			delete(rawMsg, key)
 		case "sourcePortRanges":
 			err = unpopulate(val, "SourcePortRanges", &a.SourcePortRanges)
 			delete(rawMsg, key)
@@ -647,6 +650,7 @@ func (a AdminRuleCollectionPropertiesFormat) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "appliesToGroups", a.AppliesToGroups)
 	populate(objectMap, "description", a.Description)
 	populate(objectMap, "provisioningState", a.ProvisioningState)
+	populate(objectMap, "resourceGuid", a.ResourceGUID)
 	return json.Marshal(objectMap)
 }
 
@@ -668,6 +672,9 @@ func (a *AdminRuleCollectionPropertiesFormat) UnmarshalJSON(data []byte) error {
 		case "provisioningState":
 			err = unpopulate(val, "ProvisioningState", &a.ProvisioningState)
 			delete(rawMsg, key)
+		case "resourceGuid":
+			err = unpopulate(val, "ResourceGUID", &a.ResourceGUID)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", a, err)
@@ -3245,6 +3252,7 @@ func (a ApplicationGatewayPropertiesFormat) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "backendHttpSettingsCollection", a.BackendHTTPSettingsCollection)
 	populate(objectMap, "backendSettingsCollection", a.BackendSettingsCollection)
 	populate(objectMap, "customErrorConfigurations", a.CustomErrorConfigurations)
+	populate(objectMap, "defaultPredefinedSslPolicy", a.DefaultPredefinedSSLPolicy)
 	populate(objectMap, "enableFips", a.EnableFips)
 	populate(objectMap, "enableHttp2", a.EnableHTTP2)
 	populate(objectMap, "firewallPolicy", a.FirewallPolicy)
@@ -3304,6 +3312,9 @@ func (a *ApplicationGatewayPropertiesFormat) UnmarshalJSON(data []byte) error {
 		case "customErrorConfigurations":
 			err = unpopulate(val, "CustomErrorConfigurations", &a.CustomErrorConfigurations)
 			delete(rawMsg, key)
+		case "defaultPredefinedSslPolicy":
+			err = unpopulate(val, "DefaultPredefinedSSLPolicy", &a.DefaultPredefinedSSLPolicy)
+			delete(rawMsg, key)
 		case "enableFips":
 			err = unpopulate(val, "EnableFips", &a.EnableFips)
 			delete(rawMsg, key)
@@ -4647,6 +4658,7 @@ func (a ApplicationRule) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "description", a.Description)
 	populate(objectMap, "destinationAddresses", a.DestinationAddresses)
 	populate(objectMap, "fqdnTags", a.FqdnTags)
+	populate(objectMap, "httpHeadersToInsert", a.HTTPHeadersToInsert)
 	populate(objectMap, "name", a.Name)
 	populate(objectMap, "protocols", a.Protocols)
 	objectMap["ruleType"] = FirewallPolicyRuleTypeApplicationRule
@@ -4677,6 +4689,9 @@ func (a *ApplicationRule) UnmarshalJSON(data []byte) error {
 		case "fqdnTags":
 			err = unpopulate(val, "FqdnTags", &a.FqdnTags)
 			delete(rawMsg, key)
+		case "httpHeadersToInsert":
+			err = unpopulate(val, "HTTPHeadersToInsert", &a.HTTPHeadersToInsert)
+			delete(rawMsg, key)
 		case "name":
 			err = unpopulate(val, "Name", &a.Name)
 			delete(rawMsg, key)
@@ -6177,6 +6192,68 @@ func (a *AzureFirewallNetworkRuleCollectionPropertiesFormat) UnmarshalJSON(data
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type AzureFirewallPacketCaptureFlags.
+func (a AzureFirewallPacketCaptureFlags) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "type", a.Type)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type AzureFirewallPacketCaptureFlags.
+func (a *AzureFirewallPacketCaptureFlags) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", a, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "type":
+			err = unpopulate(val, "Type", &a.Type)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", a, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type AzureFirewallPacketCaptureRule.
+func (a AzureFirewallPacketCaptureRule) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "destinationPorts", a.DestinationPorts)
+	populate(objectMap, "destinations", a.Destinations)
+	populate(objectMap, "sources", a.Sources)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type AzureFirewallPacketCaptureRule.
+func (a *AzureFirewallPacketCaptureRule) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", a, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "destinationPorts":
+			err = unpopulate(val, "DestinationPorts", &a.DestinationPorts)
+			delete(rawMsg, key)
+		case "destinations":
+			err = unpopulate(val, "Destinations", &a.Destinations)
+			delete(rawMsg, key)
+		case "sources":
+			err = unpopulate(val, "Sources", &a.Sources)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", a, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type AzureFirewallPropertiesFormat.
 func (a AzureFirewallPropertiesFormat) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -6411,7 +6488,7 @@ func (a *AzureReachabilityReportItem) UnmarshalJSON(data []byte) error {
 func (a AzureReachabilityReportLatencyInfo) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "score", a.Score)
-	populateTimeRFC3339(objectMap, "timeStamp", a.TimeStamp)
+	populateDateTimeRFC3339(objectMap, "timeStamp", a.TimeStamp)
 	return json.Marshal(objectMap)
 }
 
@@ -6428,7 +6505,7 @@ func (a *AzureReachabilityReportLatencyInfo) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "Score", &a.Score)
 			delete(rawMsg, key)
 		case "timeStamp":
-			err = unpopulateTimeRFC3339(val, "TimeStamp", &a.TimeStamp)
+			err = unpopulateDateTimeRFC3339(val, "TimeStamp", &a.TimeStamp)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -6477,10 +6554,10 @@ func (a *AzureReachabilityReportLocation) UnmarshalJSON(data []byte) error {
 func (a AzureReachabilityReportParameters) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "azureLocations", a.AzureLocations)
-	populateTimeRFC3339(objectMap, "endTime", a.EndTime)
+	populateDateTimeRFC3339(objectMap, "endTime", a.EndTime)
 	populate(objectMap, "providerLocation", a.ProviderLocation)
 	populate(objectMap, "providers", a.Providers)
-	populateTimeRFC3339(objectMap, "startTime", a.StartTime)
+	populateDateTimeRFC3339(objectMap, "startTime", a.StartTime)
 	return json.Marshal(objectMap)
 }
 
@@ -6497,7 +6574,7 @@ func (a *AzureReachabilityReportParameters) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "AzureLocations", &a.AzureLocations)
 			delete(rawMsg, key)
 		case "endTime":
-			err = unpopulateTimeRFC3339(val, "EndTime", &a.EndTime)
+			err = unpopulateDateTimeRFC3339(val, "EndTime", &a.EndTime)
 			delete(rawMsg, key)
 		case "providerLocation":
 			err = unpopulate(val, "ProviderLocation", &a.ProviderLocation)
@@ -6506,7 +6583,7 @@ func (a *AzureReachabilityReportParameters) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "Providers", &a.Providers)
 			delete(rawMsg, key)
 		case "startTime":
-			err = unpopulateTimeRFC3339(val, "StartTime", &a.StartTime)
+			err = unpopulateDateTimeRFC3339(val, "StartTime", &a.StartTime)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -6746,6 +6823,7 @@ func (b BackendAddressPoolPropertiesFormat) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "outboundRule", b.OutboundRule)
 	populate(objectMap, "outboundRules", b.OutboundRules)
 	populate(objectMap, "provisioningState", b.ProvisioningState)
+	populate(objectMap, "syncMode", b.SyncMode)
 	populate(objectMap, "tunnelInterfaces", b.TunnelInterfaces)
 	populate(objectMap, "virtualNetwork", b.VirtualNetwork)
 	return json.Marshal(objectMap)
@@ -6787,6 +6865,9 @@ func (b *BackendAddressPoolPropertiesFormat) UnmarshalJSON(data []byte) error {
 		case "provisioningState":
 			err = unpopulate(val, "ProvisioningState", &b.ProvisioningState)
 			delete(rawMsg, key)
+		case "syncMode":
+			err = unpopulate(val, "SyncMode", &b.SyncMode)
+			delete(rawMsg, key)
 		case "tunnelInterfaces":
 			err = unpopulate(val, "TunnelInterfaces", &b.TunnelInterfaces)
 			delete(rawMsg, key)
@@ -7121,11 +7202,14 @@ func (b BastionHostPropertiesFormat) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "disableCopyPaste", b.DisableCopyPaste)
 	populate(objectMap, "enableFileCopy", b.EnableFileCopy)
 	populate(objectMap, "enableIpConnect", b.EnableIPConnect)
+	populate(objectMap, "enableKerberos", b.EnableKerberos)
 	populate(objectMap, "enableShareableLink", b.EnableShareableLink)
 	populate(objectMap, "enableTunneling", b.EnableTunneling)
 	populate(objectMap, "ipConfigurations", b.IPConfigurations)
+	populate(objectMap, "networkAcls", b.NetworkACLs)
 	populate(objectMap, "provisioningState", b.ProvisioningState)
 	populate(objectMap, "scaleUnits", b.ScaleUnits)
+	populate(objectMap, "virtualNetwork", b.VirtualNetwork)
 	return json.Marshal(objectMap)
 }
 
@@ -7150,6 +7234,9 @@ func (b *BastionHostPropertiesFormat) UnmarshalJSON(data []byte) error {
 		case "enableIpConnect":
 			err = unpopulate(val, "EnableIPConnect", &b.EnableIPConnect)
 			delete(rawMsg, key)
+		case "enableKerberos":
+			err = unpopulate(val, "EnableKerberos", &b.EnableKerberos)
+			delete(rawMsg, key)
 		case "enableShareableLink":
 			err = unpopulate(val, "EnableShareableLink", &b.EnableShareableLink)
 			delete(rawMsg, key)
@@ -7159,12 +7246,45 @@ func (b *BastionHostPropertiesFormat) UnmarshalJSON(data []byte) error {
 		case "ipConfigurations":
 			err = unpopulate(val, "IPConfigurations", &b.IPConfigurations)
 			delete(rawMsg, key)
+		case "networkAcls":
+			err = unpopulate(val, "NetworkACLs", &b.NetworkACLs)
+			delete(rawMsg, key)
 		case "provisioningState":
 			err = unpopulate(val, "ProvisioningState", &b.ProvisioningState)
 			delete(rawMsg, key)
 		case "scaleUnits":
 			err = unpopulate(val, "ScaleUnits", &b.ScaleUnits)
 			delete(rawMsg, key)
+		case "virtualNetwork":
+			err = unpopulate(val, "VirtualNetwork", &b.VirtualNetwork)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", b, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type BastionHostPropertiesFormatNetworkACLs.
+func (b BastionHostPropertiesFormatNetworkACLs) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "ipRules", b.IPRules)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type BastionHostPropertiesFormatNetworkACLs.
+func (b *BastionHostPropertiesFormatNetworkACLs) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", b, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "ipRules":
+			err = unpopulate(val, "IPRules", &b.IPRules)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", b, err)
@@ -8478,7 +8598,7 @@ func (c ConnectionMonitorResultProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "outputs", c.Outputs)
 	populate(objectMap, "provisioningState", c.ProvisioningState)
 	populate(objectMap, "source", c.Source)
-	populateTimeRFC3339(objectMap, "startTime", c.StartTime)
+	populateDateTimeRFC3339(objectMap, "startTime", c.StartTime)
 	populate(objectMap, "testConfigurations", c.TestConfigurations)
 	populate(objectMap, "testGroups", c.TestGroups)
 	return json.Marshal(objectMap)
@@ -8524,7 +8644,7 @@ func (c *ConnectionMonitorResultProperties) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "Source", &c.Source)
 			delete(rawMsg, key)
 		case "startTime":
-			err = unpopulateTimeRFC3339(val, "StartTime", &c.StartTime)
+			err = unpopulateDateTimeRFC3339(val, "StartTime", &c.StartTime)
 			delete(rawMsg, key)
 		case "testConfigurations":
 			err = unpopulate(val, "TestConfigurations", &c.TestConfigurations)
@@ -8825,14 +8945,14 @@ func (c ConnectionStateSnapshot) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "avgLatencyInMs", c.AvgLatencyInMs)
 	populate(objectMap, "connectionState", c.ConnectionState)
-	populateTimeRFC3339(objectMap, "endTime", c.EndTime)
+	populateDateTimeRFC3339(objectMap, "endTime", c.EndTime)
 	populate(objectMap, "evaluationState", c.EvaluationState)
 	populate(objectMap, "hops", c.Hops)
 	populate(objectMap, "maxLatencyInMs", c.MaxLatencyInMs)
 	populate(objectMap, "minLatencyInMs", c.MinLatencyInMs)
 	populate(objectMap, "probesFailed", c.ProbesFailed)
 	populate(objectMap, "probesSent", c.ProbesSent)
-	populateTimeRFC3339(objectMap, "startTime", c.StartTime)
+	populateDateTimeRFC3339(objectMap, "startTime", c.StartTime)
 	return json.Marshal(objectMap)
 }
 
@@ -8852,7 +8972,7 @@ func (c *ConnectionStateSnapshot) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "ConnectionState", &c.ConnectionState)
 			delete(rawMsg, key)
 		case "endTime":
-			err = unpopulateTimeRFC3339(val, "EndTime", &c.EndTime)
+			err = unpopulateDateTimeRFC3339(val, "EndTime", &c.EndTime)
 			delete(rawMsg, key)
 		case "evaluationState":
 			err = unpopulate(val, "EvaluationState", &c.EvaluationState)
@@ -8873,7 +8993,7 @@ func (c *ConnectionStateSnapshot) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "ProbesSent", &c.ProbesSent)
 			delete(rawMsg, key)
 		case "startTime":
-			err = unpopulateTimeRFC3339(val, "StartTime", &c.StartTime)
+			err = unpopulateDateTimeRFC3339(val, "StartTime", &c.StartTime)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -8971,6 +9091,7 @@ func (c ConnectivityConfigurationProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "hubs", c.Hubs)
 	populate(objectMap, "isGlobal", c.IsGlobal)
 	populate(objectMap, "provisioningState", c.ProvisioningState)
+	populate(objectMap, "resourceGuid", c.ResourceGUID)
 	return json.Marshal(objectMap)
 }
 
@@ -9004,6 +9125,9 @@ func (c *ConnectivityConfigurationProperties) UnmarshalJSON(data []byte) error {
 		case "provisioningState":
 			err = unpopulate(val, "ProvisioningState", &c.ProvisioningState)
 			delete(rawMsg, key)
+		case "resourceGuid":
+			err = unpopulate(val, "ResourceGUID", &c.ResourceGUID)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", c, err)
@@ -10148,6 +10272,7 @@ func (d DefaultAdminPropertiesFormat) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "priority", d.Priority)
 	populate(objectMap, "protocol", d.Protocol)
 	populate(objectMap, "provisioningState", d.ProvisioningState)
+	populate(objectMap, "resourceGuid", d.ResourceGUID)
 	populate(objectMap, "sourcePortRanges", d.SourcePortRanges)
 	populate(objectMap, "sources", d.Sources)
 	return json.Marshal(objectMap)
@@ -10189,6 +10314,9 @@ func (d *DefaultAdminPropertiesFormat) UnmarshalJSON(data []byte) error {
 		case "provisioningState":
 			err = unpopulate(val, "ProvisioningState", &d.ProvisioningState)
 			delete(rawMsg, key)
+		case "resourceGuid":
+			err = unpopulate(val, "ResourceGUID", &d.ResourceGUID)
+			delete(rawMsg, key)
 		case "sourcePortRanges":
 			err = unpopulate(val, "SourcePortRanges", &d.SourcePortRanges)
 			delete(rawMsg, key)
@@ -11043,6 +11171,33 @@ func (e *EffectiveRouteMapRoute) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type EffectiveRouteMapRouteList.
+func (e EffectiveRouteMapRouteList) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "value", e.Value)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type EffectiveRouteMapRouteList.
+func (e *EffectiveRouteMapRouteList) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", e, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "value":
+			err = unpopulate(val, "Value", &e.Value)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", e, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type EffectiveRoutesParameters.
 func (e EffectiveRoutesParameters) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -14041,6 +14196,88 @@ func (f *FilterItems) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type FirewallPacketCaptureParameters.
+func (f FirewallPacketCaptureParameters) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "id", f.ID)
+	populate(objectMap, "properties", f.Properties)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type FirewallPacketCaptureParameters.
+func (f *FirewallPacketCaptureParameters) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", f, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "id":
+			err = unpopulate(val, "ID", &f.ID)
+			delete(rawMsg, key)
+		case "properties":
+			err = unpopulate(val, "Properties", &f.Properties)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", f, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type FirewallPacketCaptureParametersFormat.
+func (f FirewallPacketCaptureParametersFormat) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "durationInSeconds", f.DurationInSeconds)
+	populate(objectMap, "fileName", f.FileName)
+	populate(objectMap, "filters", f.Filters)
+	populate(objectMap, "flags", f.Flags)
+	populate(objectMap, "numberOfPacketsToCapture", f.NumberOfPacketsToCapture)
+	populate(objectMap, "protocol", f.Protocol)
+	populate(objectMap, "sasUrl", f.SasURL)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type FirewallPacketCaptureParametersFormat.
+func (f *FirewallPacketCaptureParametersFormat) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", f, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "durationInSeconds":
+			err = unpopulate(val, "DurationInSeconds", &f.DurationInSeconds)
+			delete(rawMsg, key)
+		case "fileName":
+			err = unpopulate(val, "FileName", &f.FileName)
+			delete(rawMsg, key)
+		case "filters":
+			err = unpopulate(val, "Filters", &f.Filters)
+			delete(rawMsg, key)
+		case "flags":
+			err = unpopulate(val, "Flags", &f.Flags)
+			delete(rawMsg, key)
+		case "numberOfPacketsToCapture":
+			err = unpopulate(val, "NumberOfPacketsToCapture", &f.NumberOfPacketsToCapture)
+			delete(rawMsg, key)
+		case "protocol":
+			err = unpopulate(val, "Protocol", &f.Protocol)
+			delete(rawMsg, key)
+		case "sasUrl":
+			err = unpopulate(val, "SasURL", &f.SasURL)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", f, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type FirewallPolicy.
 func (f FirewallPolicy) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -14197,6 +14434,37 @@ func (f *FirewallPolicyFilterRuleCollectionAction) UnmarshalJSON(data []byte) er
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type FirewallPolicyHTTPHeaderToInsert.
+func (f FirewallPolicyHTTPHeaderToInsert) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "headerName", f.HeaderName)
+	populate(objectMap, "headerValue", f.HeaderValue)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type FirewallPolicyHTTPHeaderToInsert.
+func (f *FirewallPolicyHTTPHeaderToInsert) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", f, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "headerName":
+			err = unpopulate(val, "HeaderName", &f.HeaderName)
+			delete(rawMsg, key)
+		case "headerValue":
+			err = unpopulate(val, "HeaderValue", &f.HeaderValue)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", f, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type FirewallPolicyInsights.
 func (f FirewallPolicyInsights) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -14561,6 +14829,7 @@ func (f FirewallPolicyPropertiesFormat) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "ruleCollectionGroups", f.RuleCollectionGroups)
 	populate(objectMap, "sku", f.SKU)
 	populate(objectMap, "sql", f.SQL)
+	populate(objectMap, "size", f.Size)
 	populate(objectMap, "snat", f.Snat)
 	populate(objectMap, "threatIntelMode", f.ThreatIntelMode)
 	populate(objectMap, "threatIntelWhitelist", f.ThreatIntelWhitelist)
@@ -14610,6 +14879,9 @@ func (f *FirewallPolicyPropertiesFormat) UnmarshalJSON(data []byte) error {
 		case "sql":
 			err = unpopulate(val, "SQL", &f.SQL)
 			delete(rawMsg, key)
+		case "size":
+			err = unpopulate(val, "Size", &f.Size)
+			delete(rawMsg, key)
 		case "snat":
 			err = unpopulate(val, "Snat", &f.Snat)
 			delete(rawMsg, key)
@@ -14811,6 +15083,7 @@ func (f FirewallPolicyRuleCollectionGroupProperties) MarshalJSON() ([]byte, erro
 	populate(objectMap, "priority", f.Priority)
 	populate(objectMap, "provisioningState", f.ProvisioningState)
 	populate(objectMap, "ruleCollections", f.RuleCollections)
+	populate(objectMap, "size", f.Size)
 	return json.Marshal(objectMap)
 }
 
@@ -14832,6 +15105,9 @@ func (f *FirewallPolicyRuleCollectionGroupProperties) UnmarshalJSON(data []byte)
 		case "ruleCollections":
 			f.RuleCollections, err = unmarshalFirewallPolicyRuleCollectionClassificationArray(val)
 			delete(rawMsg, key)
+		case "size":
+			err = unpopulate(val, "Size", &f.Size)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", f, err)
@@ -15712,6 +15988,60 @@ func (g *Group) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type GroupByUserSession.
+func (g GroupByUserSession) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "groupByVariables", g.GroupByVariables)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type GroupByUserSession.
+func (g *GroupByUserSession) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", g, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "groupByVariables":
+			err = unpopulate(val, "GroupByVariables", &g.GroupByVariables)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", g, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type GroupByVariable.
+func (g GroupByVariable) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "variableName", g.VariableName)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type GroupByVariable.
+func (g *GroupByVariable) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", g, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "variableName":
+			err = unpopulate(val, "VariableName", &g.VariableName)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", g, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type GroupListResult.
 func (g GroupListResult) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -15748,6 +16078,7 @@ func (g GroupProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "description", g.Description)
 	populate(objectMap, "provisioningState", g.ProvisioningState)
+	populate(objectMap, "resourceGuid", g.ResourceGUID)
 	return json.Marshal(objectMap)
 }
 
@@ -15766,6 +16097,9 @@ func (g *GroupProperties) UnmarshalJSON(data []byte) error {
 		case "provisioningState":
 			err = unpopulate(val, "ProvisioningState", &g.ProvisioningState)
 			delete(rawMsg, key)
+		case "resourceGuid":
+			err = unpopulate(val, "ResourceGUID", &g.ResourceGUID)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", g, err)
@@ -16874,6 +17208,33 @@ func (i *IPPrefixesList) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type IPRule.
+func (i IPRule) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "addressPrefix", i.AddressPrefix)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type IPRule.
+func (i *IPRule) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", i, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "addressPrefix":
+			err = unpopulate(val, "AddressPrefix", &i.AddressPrefix)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", i, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type IPSecPolicy.
 func (i IPSecPolicy) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -17890,6 +18251,7 @@ func (i *InterfaceLoadBalancerListResult) UnmarshalJSON(data []byte) error {
 func (i InterfacePropertiesFormat) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "auxiliaryMode", i.AuxiliaryMode)
+	populate(objectMap, "auxiliarySku", i.AuxiliarySKU)
 	populate(objectMap, "dnsSettings", i.DNSSettings)
 	populate(objectMap, "disableTcpStateTracking", i.DisableTCPStateTracking)
 	populate(objectMap, "dscpConfiguration", i.DscpConfiguration)
@@ -17925,6 +18287,9 @@ func (i *InterfacePropertiesFormat) UnmarshalJSON(data []byte) error {
 		case "auxiliaryMode":
 			err = unpopulate(val, "AuxiliaryMode", &i.AuxiliaryMode)
 			delete(rawMsg, key)
+		case "auxiliarySku":
+			err = unpopulate(val, "AuxiliarySKU", &i.AuxiliarySKU)
+			delete(rawMsg, key)
 		case "dnsSettings":
 			err = unpopulate(val, "DNSSettings", &i.DNSSettings)
 			delete(rawMsg, key)
@@ -19852,7 +20217,7 @@ func (m *ManagerConnectionProperties) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type ManagerDeploymentStatus.
 func (m ManagerDeploymentStatus) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "commitTime", m.CommitTime)
+	populateDateTimeRFC3339(objectMap, "commitTime", m.CommitTime)
 	populate(objectMap, "configurationIds", m.ConfigurationIDs)
 	populate(objectMap, "deploymentStatus", m.DeploymentStatus)
 	populate(objectMap, "deploymentType", m.DeploymentType)
@@ -19871,7 +20236,7 @@ func (m *ManagerDeploymentStatus) UnmarshalJSON(data []byte) error {
 		var err error
 		switch key {
 		case "commitTime":
-			err = unpopulateTimeRFC3339(val, "CommitTime", &m.CommitTime)
+			err = unpopulateDateTimeRFC3339(val, "CommitTime", &m.CommitTime)
 			delete(rawMsg, key)
 		case "configurationIds":
 			err = unpopulate(val, "ConfigurationIDs", &m.ConfigurationIDs)
@@ -20062,6 +20427,7 @@ func (m ManagerProperties) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "networkManagerScopeAccesses", m.NetworkManagerScopeAccesses)
 	populate(objectMap, "networkManagerScopes", m.NetworkManagerScopes)
 	populate(objectMap, "provisioningState", m.ProvisioningState)
+	populate(objectMap, "resourceGuid", m.ResourceGUID)
 	return json.Marshal(objectMap)
 }
 
@@ -20086,6 +20452,9 @@ func (m *ManagerProperties) UnmarshalJSON(data []byte) error {
 		case "provisioningState":
 			err = unpopulate(val, "ProvisioningState", &m.ProvisioningState)
 			delete(rawMsg, key)
+		case "resourceGuid":
+			err = unpopulate(val, "ResourceGUID", &m.ResourceGUID)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", m, err)
@@ -20340,6 +20709,60 @@ func (m *MetricSpecification) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type MigrateLoadBalancerToIPBasedRequest.
+func (m MigrateLoadBalancerToIPBasedRequest) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "pools", m.Pools)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type MigrateLoadBalancerToIPBasedRequest.
+func (m *MigrateLoadBalancerToIPBasedRequest) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", m, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "pools":
+			err = unpopulate(val, "Pools", &m.Pools)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", m, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type MigratedPools.
+func (m MigratedPools) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "migratedPools", m.MigratedPools)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type MigratedPools.
+func (m *MigratedPools) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", m, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "migratedPools":
+			err = unpopulate(val, "MigratedPools", &m.MigratedPools)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", m, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type NatGateway.
 func (n NatGateway) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -21590,7 +22013,7 @@ func (p *PacketCaptureParameters) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type PacketCaptureQueryStatusResult.
 func (p PacketCaptureQueryStatusResult) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "captureStartTime", p.CaptureStartTime)
+	populateDateTimeRFC3339(objectMap, "captureStartTime", p.CaptureStartTime)
 	populate(objectMap, "id", p.ID)
 	populate(objectMap, "name", p.Name)
 	populate(objectMap, "packetCaptureError", p.PacketCaptureError)
@@ -21609,7 +22032,7 @@ func (p *PacketCaptureQueryStatusResult) UnmarshalJSON(data []byte) error {
 		var err error
 		switch key {
 		case "captureStartTime":
-			err = unpopulateTimeRFC3339(val, "CaptureStartTime", &p.CaptureStartTime)
+			err = unpopulateDateTimeRFC3339(val, "CaptureStartTime", &p.CaptureStartTime)
 			delete(rawMsg, key)
 		case "id":
 			err = unpopulate(val, "ID", &p.ID)
@@ -22126,42 +22549,19 @@ func (p *PeerRoute) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
-// MarshalJSON implements the json.Marshaller interface for type PeerRouteList.
-func (p PeerRouteList) MarshalJSON() ([]byte, error) {
-	objectMap := make(map[string]any)
-	populate(objectMap, "value", p.Value)
-	return json.Marshal(objectMap)
-}
-
-// UnmarshalJSON implements the json.Unmarshaller interface for type PeerRouteList.
-func (p *PeerRouteList) UnmarshalJSON(data []byte) error {
-	var rawMsg map[string]json.RawMessage
-	if err := json.Unmarshal(data, &rawMsg); err != nil {
-		return fmt.Errorf("unmarshalling type %T: %v", p, err)
-	}
-	for key, val := range rawMsg {
-		var err error
-		switch key {
-		case "value":
-			err = unpopulate(val, "Value", &p.Value)
-			delete(rawMsg, key)
-		}
-		if err != nil {
-			return fmt.Errorf("unmarshalling type %T: %v", p, err)
-		}
-	}
-	return nil
-}
-
 // MarshalJSON implements the json.Marshaller interface for type PolicySettings.
 func (p PolicySettings) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "customBlockResponseBody", p.CustomBlockResponseBody)
 	populate(objectMap, "customBlockResponseStatusCode", p.CustomBlockResponseStatusCode)
+	populate(objectMap, "fileUploadEnforcement", p.FileUploadEnforcement)
 	populate(objectMap, "fileUploadLimitInMb", p.FileUploadLimitInMb)
+	populate(objectMap, "logScrubbing", p.LogScrubbing)
 	populate(objectMap, "maxRequestBodySizeInKb", p.MaxRequestBodySizeInKb)
 	populate(objectMap, "mode", p.Mode)
 	populate(objectMap, "requestBodyCheck", p.RequestBodyCheck)
+	populate(objectMap, "requestBodyEnforcement", p.RequestBodyEnforcement)
+	populate(objectMap, "requestBodyInspectLimitInKB", p.RequestBodyInspectLimitInKB)
 	populate(objectMap, "state", p.State)
 	return json.Marshal(objectMap)
 }
@@ -22181,9 +22581,15 @@ func (p *PolicySettings) UnmarshalJSON(data []byte) error {
 		case "customBlockResponseStatusCode":
 			err = unpopulate(val, "CustomBlockResponseStatusCode", &p.CustomBlockResponseStatusCode)
 			delete(rawMsg, key)
+		case "fileUploadEnforcement":
+			err = unpopulate(val, "FileUploadEnforcement", &p.FileUploadEnforcement)
+			delete(rawMsg, key)
 		case "fileUploadLimitInMb":
 			err = unpopulate(val, "FileUploadLimitInMb", &p.FileUploadLimitInMb)
 			delete(rawMsg, key)
+		case "logScrubbing":
+			err = unpopulate(val, "LogScrubbing", &p.LogScrubbing)
+			delete(rawMsg, key)
 		case "maxRequestBodySizeInKb":
 			err = unpopulate(val, "MaxRequestBodySizeInKb", &p.MaxRequestBodySizeInKb)
 			delete(rawMsg, key)
@@ -22193,6 +22599,43 @@ func (p *PolicySettings) UnmarshalJSON(data []byte) error {
 		case "requestBodyCheck":
 			err = unpopulate(val, "RequestBodyCheck", &p.RequestBodyCheck)
 			delete(rawMsg, key)
+		case "requestBodyEnforcement":
+			err = unpopulate(val, "RequestBodyEnforcement", &p.RequestBodyEnforcement)
+			delete(rawMsg, key)
+		case "requestBodyInspectLimitInKB":
+			err = unpopulate(val, "RequestBodyInspectLimitInKB", &p.RequestBodyInspectLimitInKB)
+			delete(rawMsg, key)
+		case "state":
+			err = unpopulate(val, "State", &p.State)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", p, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type PolicySettingsLogScrubbing.
+func (p PolicySettingsLogScrubbing) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "scrubbingRules", p.ScrubbingRules)
+	populate(objectMap, "state", p.State)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type PolicySettingsLogScrubbing.
+func (p *PolicySettingsLogScrubbing) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", p, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "scrubbingRules":
+			err = unpopulate(val, "ScrubbingRules", &p.ScrubbingRules)
+			delete(rawMsg, key)
 		case "state":
 			err = unpopulate(val, "State", &p.State)
 			delete(rawMsg, key)
@@ -22532,6 +22975,7 @@ func (p PrivateEndpointConnectionProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "linkIdentifier", p.LinkIdentifier)
 	populate(objectMap, "privateEndpoint", p.PrivateEndpoint)
+	populate(objectMap, "privateEndpointLocation", p.PrivateEndpointLocation)
 	populate(objectMap, "privateLinkServiceConnectionState", p.PrivateLinkServiceConnectionState)
 	populate(objectMap, "provisioningState", p.ProvisioningState)
 	return json.Marshal(objectMap)
@@ -22552,6 +22996,9 @@ func (p *PrivateEndpointConnectionProperties) UnmarshalJSON(data []byte) error {
 		case "privateEndpoint":
 			err = unpopulate(val, "PrivateEndpoint", &p.PrivateEndpoint)
 			delete(rawMsg, key)
+		case "privateEndpointLocation":
+			err = unpopulate(val, "PrivateEndpointLocation", &p.PrivateEndpointLocation)
+			delete(rawMsg, key)
 		case "privateLinkServiceConnectionState":
 			err = unpopulate(val, "PrivateLinkServiceConnectionState", &p.PrivateLinkServiceConnectionState)
 			delete(rawMsg, key)
@@ -23421,6 +23868,37 @@ func (p *PropagatedRouteTable) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type PropagatedRouteTableNfv.
+func (p PropagatedRouteTableNfv) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "ids", p.IDs)
+	populate(objectMap, "labels", p.Labels)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type PropagatedRouteTableNfv.
+func (p *PropagatedRouteTableNfv) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", p, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "ids":
+			err = unpopulate(val, "IDs", &p.IDs)
+			delete(rawMsg, key)
+		case "labels":
+			err = unpopulate(val, "Labels", &p.Labels)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", p, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type ProtocolConfiguration.
 func (p ProtocolConfiguration) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -23515,6 +23993,7 @@ func (p *PublicIPAddress) UnmarshalJSON(data []byte) error {
 func (p PublicIPAddressDNSSettings) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "domainNameLabel", p.DomainNameLabel)
+	populate(objectMap, "domainNameLabelScope", p.DomainNameLabelScope)
 	populate(objectMap, "fqdn", p.Fqdn)
 	populate(objectMap, "reverseFqdn", p.ReverseFqdn)
 	return json.Marshal(objectMap)
@@ -23532,6 +24011,9 @@ func (p *PublicIPAddressDNSSettings) UnmarshalJSON(data []byte) error {
 		case "domainNameLabel":
 			err = unpopulate(val, "DomainNameLabel", &p.DomainNameLabel)
 			delete(rawMsg, key)
+		case "domainNameLabelScope":
+			err = unpopulate(val, "DomainNameLabelScope", &p.DomainNameLabelScope)
+			delete(rawMsg, key)
 		case "fqdn":
 			err = unpopulate(val, "Fqdn", &p.Fqdn)
 			delete(rawMsg, key)
@@ -25106,6 +25588,72 @@ func (r *RoutingConfiguration) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type RoutingConfigurationNfv.
+func (r RoutingConfigurationNfv) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "associatedRouteTable", r.AssociatedRouteTable)
+	populate(objectMap, "inboundRouteMap", r.InboundRouteMap)
+	populate(objectMap, "outboundRouteMap", r.OutboundRouteMap)
+	populate(objectMap, "propagatedRouteTables", r.PropagatedRouteTables)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type RoutingConfigurationNfv.
+func (r *RoutingConfigurationNfv) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", r, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "associatedRouteTable":
+			err = unpopulate(val, "AssociatedRouteTable", &r.AssociatedRouteTable)
+			delete(rawMsg, key)
+		case "inboundRouteMap":
+			err = unpopulate(val, "InboundRouteMap", &r.InboundRouteMap)
+			delete(rawMsg, key)
+		case "outboundRouteMap":
+			err = unpopulate(val, "OutboundRouteMap", &r.OutboundRouteMap)
+			delete(rawMsg, key)
+		case "propagatedRouteTables":
+			err = unpopulate(val, "PropagatedRouteTables", &r.PropagatedRouteTables)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", r, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type RoutingConfigurationNfvSubResource.
+func (r RoutingConfigurationNfvSubResource) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "resourceUri", r.ResourceURI)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type RoutingConfigurationNfvSubResource.
+func (r *RoutingConfigurationNfvSubResource) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", r, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "resourceUri":
+			err = unpopulate(val, "ResourceURI", &r.ResourceURI)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", r, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type RoutingIntent.
 func (r RoutingIntent) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -25506,6 +26054,7 @@ func (s SecurityAdminConfigurationPropertiesFormat) MarshalJSON() ([]byte, error
 	populate(objectMap, "applyOnNetworkIntentPolicyBasedServices", s.ApplyOnNetworkIntentPolicyBasedServices)
 	populate(objectMap, "description", s.Description)
 	populate(objectMap, "provisioningState", s.ProvisioningState)
+	populate(objectMap, "resourceGuid", s.ResourceGUID)
 	return json.Marshal(objectMap)
 }
 
@@ -25527,6 +26076,9 @@ func (s *SecurityAdminConfigurationPropertiesFormat) UnmarshalJSON(data []byte)
 		case "provisioningState":
 			err = unpopulate(val, "ProvisioningState", &s.ProvisioningState)
 			delete(rawMsg, key)
+		case "resourceGuid":
+			err = unpopulate(val, "ResourceGUID", &s.ResourceGUID)
+			delete(rawMsg, key)
 		}
 		if err != nil {
 			return fmt.Errorf("unmarshalling type %T: %v", s, err)
@@ -27310,7 +27862,8 @@ func (s SubnetPropertiesFormat) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "addressPrefix", s.AddressPrefix)
 	populate(objectMap, "addressPrefixes", s.AddressPrefixes)
-	populate(objectMap, "applicationGatewayIpConfigurations", s.ApplicationGatewayIPConfigurations)
+	populate(objectMap, "applicationGatewayIPConfigurations", s.ApplicationGatewayIPConfigurations)
+	populate(objectMap, "defaultOutboundAccess", s.DefaultOutboundAccess)
 	populate(objectMap, "delegations", s.Delegations)
 	populate(objectMap, "ipAllocations", s.IPAllocations)
 	populate(objectMap, "ipConfigurationProfiles", s.IPConfigurationProfiles)
@@ -27345,9 +27898,12 @@ func (s *SubnetPropertiesFormat) UnmarshalJSON(data []byte) error {
 		case "addressPrefixes":
 			err = unpopulate(val, "AddressPrefixes", &s.AddressPrefixes)
 			delete(rawMsg, key)
-		case "applicationGatewayIpConfigurations":
+		case "applicationGatewayIPConfigurations":
 			err = unpopulate(val, "ApplicationGatewayIPConfigurations", &s.ApplicationGatewayIPConfigurations)
 			delete(rawMsg, key)
+		case "defaultOutboundAccess":
+			err = unpopulate(val, "DefaultOutboundAccess", &s.DefaultOutboundAccess)
+			delete(rawMsg, key)
 		case "delegations":
 			err = unpopulate(val, "Delegations", &s.Delegations)
 			delete(rawMsg, key)
@@ -27500,10 +28056,10 @@ func (s *SwapResourceProperties) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type SystemData.
 func (s SystemData) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "createdAt", s.CreatedAt)
+	populateDateTimeRFC3339(objectMap, "createdAt", s.CreatedAt)
 	populate(objectMap, "createdBy", s.CreatedBy)
 	populate(objectMap, "createdByType", s.CreatedByType)
-	populateTimeRFC3339(objectMap, "lastModifiedAt", s.LastModifiedAt)
+	populateDateTimeRFC3339(objectMap, "lastModifiedAt", s.LastModifiedAt)
 	populate(objectMap, "lastModifiedBy", s.LastModifiedBy)
 	populate(objectMap, "lastModifiedByType", s.LastModifiedByType)
 	return json.Marshal(objectMap)
@@ -27519,7 +28075,7 @@ func (s *SystemData) UnmarshalJSON(data []byte) error {
 		var err error
 		switch key {
 		case "createdAt":
-			err = unpopulateTimeRFC3339(val, "CreatedAt", &s.CreatedAt)
+			err = unpopulateDateTimeRFC3339(val, "CreatedAt", &s.CreatedAt)
 			delete(rawMsg, key)
 		case "createdBy":
 			err = unpopulate(val, "CreatedBy", &s.CreatedBy)
@@ -27528,7 +28084,7 @@ func (s *SystemData) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "CreatedByType", &s.CreatedByType)
 			delete(rawMsg, key)
 		case "lastModifiedAt":
-			err = unpopulateTimeRFC3339(val, "LastModifiedAt", &s.LastModifiedAt)
+			err = unpopulateDateTimeRFC3339(val, "LastModifiedAt", &s.LastModifiedAt)
 			delete(rawMsg, key)
 		case "lastModifiedBy":
 			err = unpopulate(val, "LastModifiedBy", &s.LastModifiedBy)
@@ -27574,9 +28130,9 @@ func (t *TagsObject) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type Topology.
 func (t Topology) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
-	populateTimeRFC3339(objectMap, "createdDateTime", t.CreatedDateTime)
+	populateDateTimeRFC3339(objectMap, "createdDateTime", t.CreatedDateTime)
 	populate(objectMap, "id", t.ID)
-	populateTimeRFC3339(objectMap, "lastModified", t.LastModified)
+	populateDateTimeRFC3339(objectMap, "lastModified", t.LastModified)
 	populate(objectMap, "resources", t.Resources)
 	return json.Marshal(objectMap)
 }
@@ -27591,13 +28147,13 @@ func (t *Topology) UnmarshalJSON(data []byte) error {
 		var err error
 		switch key {
 		case "createdDateTime":
-			err = unpopulateTimeRFC3339(val, "CreatedDateTime", &t.CreatedDateTime)
+			err = unpopulateDateTimeRFC3339(val, "CreatedDateTime", &t.CreatedDateTime)
 			delete(rawMsg, key)
 		case "id":
 			err = unpopulate(val, "ID", &t.ID)
 			delete(rawMsg, key)
 		case "lastModified":
-			err = unpopulateTimeRFC3339(val, "LastModified", &t.LastModified)
+			err = unpopulateDateTimeRFC3339(val, "LastModified", &t.LastModified)
 			delete(rawMsg, key)
 		case "resources":
 			err = unpopulate(val, "Resources", &t.Resources)
@@ -27968,9 +28524,9 @@ func (t *TroubleshootingRecommendedActions) UnmarshalJSON(data []byte) error {
 func (t TroubleshootingResult) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "code", t.Code)
-	populateTimeRFC3339(objectMap, "endTime", t.EndTime)
+	populateDateTimeRFC3339(objectMap, "endTime", t.EndTime)
 	populate(objectMap, "results", t.Results)
-	populateTimeRFC3339(objectMap, "startTime", t.StartTime)
+	populateDateTimeRFC3339(objectMap, "startTime", t.StartTime)
 	return json.Marshal(objectMap)
 }
 
@@ -27987,13 +28543,13 @@ func (t *TroubleshootingResult) UnmarshalJSON(data []byte) error {
 			err = unpopulate(val, "Code", &t.Code)
 			delete(rawMsg, key)
 		case "endTime":
-			err = unpopulateTimeRFC3339(val, "EndTime", &t.EndTime)
+			err = unpopulateDateTimeRFC3339(val, "EndTime", &t.EndTime)
 			delete(rawMsg, key)
 		case "results":
 			err = unpopulate(val, "Results", &t.Results)
 			delete(rawMsg, key)
 		case "startTime":
-			err = unpopulateTimeRFC3339(val, "StartTime", &t.StartTime)
+			err = unpopulateDateTimeRFC3339(val, "StartTime", &t.StartTime)
 			delete(rawMsg, key)
 		}
 		if err != nil {
@@ -30289,6 +30845,154 @@ func (v *VirtualAppliance) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type VirtualApplianceAdditionalNicProperties.
+func (v VirtualApplianceAdditionalNicProperties) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "hasPublicIp", v.HasPublicIP)
+	populate(objectMap, "name", v.Name)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type VirtualApplianceAdditionalNicProperties.
+func (v *VirtualApplianceAdditionalNicProperties) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", v, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "hasPublicIp":
+			err = unpopulate(val, "HasPublicIP", &v.HasPublicIP)
+			delete(rawMsg, key)
+		case "name":
+			err = unpopulate(val, "Name", &v.Name)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", v, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type VirtualApplianceConnection.
+func (v VirtualApplianceConnection) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "id", v.ID)
+	populate(objectMap, "name", v.Name)
+	populate(objectMap, "properties", v.Properties)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type VirtualApplianceConnection.
+func (v *VirtualApplianceConnection) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", v, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "id":
+			err = unpopulate(val, "ID", &v.ID)
+			delete(rawMsg, key)
+		case "name":
+			err = unpopulate(val, "Name", &v.Name)
+			delete(rawMsg, key)
+		case "properties":
+			err = unpopulate(val, "Properties", &v.Properties)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", v, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type VirtualApplianceConnectionList.
+func (v VirtualApplianceConnectionList) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "nextLink", v.NextLink)
+	populate(objectMap, "value", v.Value)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type VirtualApplianceConnectionList.
+func (v *VirtualApplianceConnectionList) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", v, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "nextLink":
+			err = unpopulate(val, "NextLink", &v.NextLink)
+			delete(rawMsg, key)
+		case "value":
+			err = unpopulate(val, "Value", &v.Value)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", v, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type VirtualApplianceConnectionProperties.
+func (v VirtualApplianceConnectionProperties) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "asn", v.Asn)
+	populate(objectMap, "bgpPeerAddress", v.BgpPeerAddress)
+	populate(objectMap, "enableInternetSecurity", v.EnableInternetSecurity)
+	populate(objectMap, "name", v.Name)
+	populate(objectMap, "provisioningState", v.ProvisioningState)
+	populate(objectMap, "routingConfiguration", v.RoutingConfiguration)
+	populate(objectMap, "tunnelIdentifier", v.TunnelIdentifier)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type VirtualApplianceConnectionProperties.
+func (v *VirtualApplianceConnectionProperties) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", v, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "asn":
+			err = unpopulate(val, "Asn", &v.Asn)
+			delete(rawMsg, key)
+		case "bgpPeerAddress":
+			err = unpopulate(val, "BgpPeerAddress", &v.BgpPeerAddress)
+			delete(rawMsg, key)
+		case "enableInternetSecurity":
+			err = unpopulate(val, "EnableInternetSecurity", &v.EnableInternetSecurity)
+			delete(rawMsg, key)
+		case "name":
+			err = unpopulate(val, "Name", &v.Name)
+			delete(rawMsg, key)
+		case "provisioningState":
+			err = unpopulate(val, "ProvisioningState", &v.ProvisioningState)
+			delete(rawMsg, key)
+		case "routingConfiguration":
+			err = unpopulate(val, "RoutingConfiguration", &v.RoutingConfiguration)
+			delete(rawMsg, key)
+		case "tunnelIdentifier":
+			err = unpopulate(val, "TunnelIdentifier", &v.TunnelIdentifier)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", v, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type VirtualApplianceListResult.
 func (v VirtualApplianceListResult) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -30323,6 +31027,7 @@ func (v *VirtualApplianceListResult) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type VirtualApplianceNicProperties.
 func (v VirtualApplianceNicProperties) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
+	populate(objectMap, "instanceName", v.InstanceName)
 	populate(objectMap, "name", v.Name)
 	populate(objectMap, "privateIpAddress", v.PrivateIPAddress)
 	populate(objectMap, "publicIpAddress", v.PublicIPAddress)
@@ -30338,6 +31043,9 @@ func (v *VirtualApplianceNicProperties) UnmarshalJSON(data []byte) error {
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "instanceName":
+			err = unpopulate(val, "InstanceName", &v.InstanceName)
+			delete(rawMsg, key)
 		case "name":
 			err = unpopulate(val, "Name", &v.Name)
 			delete(rawMsg, key)
@@ -30358,6 +31066,7 @@ func (v *VirtualApplianceNicProperties) UnmarshalJSON(data []byte) error {
 // MarshalJSON implements the json.Marshaller interface for type VirtualAppliancePropertiesFormat.
 func (v VirtualAppliancePropertiesFormat) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
+	populate(objectMap, "additionalNics", v.AdditionalNics)
 	populate(objectMap, "addressPrefix", v.AddressPrefix)
 	populate(objectMap, "bootStrapConfigurationBlobs", v.BootStrapConfigurationBlobs)
 	populate(objectMap, "cloudInitConfiguration", v.CloudInitConfiguration)
@@ -30370,6 +31079,7 @@ func (v VirtualAppliancePropertiesFormat) MarshalJSON() ([]byte, error) {
 	populate(objectMap, "provisioningState", v.ProvisioningState)
 	populate(objectMap, "sshPublicKey", v.SSHPublicKey)
 	populate(objectMap, "virtualApplianceAsn", v.VirtualApplianceAsn)
+	populate(objectMap, "virtualApplianceConnections", v.VirtualApplianceConnections)
 	populate(objectMap, "virtualApplianceNics", v.VirtualApplianceNics)
 	populate(objectMap, "virtualApplianceSites", v.VirtualApplianceSites)
 	populate(objectMap, "virtualHub", v.VirtualHub)
@@ -30385,6 +31095,9 @@ func (v *VirtualAppliancePropertiesFormat) UnmarshalJSON(data []byte) error {
 	for key, val := range rawMsg {
 		var err error
 		switch key {
+		case "additionalNics":
+			err = unpopulate(val, "AdditionalNics", &v.AdditionalNics)
+			delete(rawMsg, key)
 		case "addressPrefix":
 			err = unpopulate(val, "AddressPrefix", &v.AddressPrefix)
 			delete(rawMsg, key)
@@ -30421,6 +31134,9 @@ func (v *VirtualAppliancePropertiesFormat) UnmarshalJSON(data []byte) error {
 		case "virtualApplianceAsn":
 			err = unpopulate(val, "VirtualApplianceAsn", &v.VirtualApplianceAsn)
 			delete(rawMsg, key)
+		case "virtualApplianceConnections":
+			err = unpopulate(val, "VirtualApplianceConnections", &v.VirtualApplianceConnections)
+			delete(rawMsg, key)
 		case "virtualApplianceNics":
 			err = unpopulate(val, "VirtualApplianceNics", &v.VirtualApplianceNics)
 			delete(rawMsg, key)
@@ -31394,6 +32110,64 @@ func (v *VirtualNetworkGateway) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type VirtualNetworkGatewayAutoScaleBounds.
+func (v VirtualNetworkGatewayAutoScaleBounds) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "max", v.Max)
+	populate(objectMap, "min", v.Min)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type VirtualNetworkGatewayAutoScaleBounds.
+func (v *VirtualNetworkGatewayAutoScaleBounds) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", v, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "max":
+			err = unpopulate(val, "Max", &v.Max)
+			delete(rawMsg, key)
+		case "min":
+			err = unpopulate(val, "Min", &v.Min)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", v, err)
+		}
+	}
+	return nil
+}
+
+// MarshalJSON implements the json.Marshaller interface for type VirtualNetworkGatewayAutoScaleConfiguration.
+func (v VirtualNetworkGatewayAutoScaleConfiguration) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "bounds", v.Bounds)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type VirtualNetworkGatewayAutoScaleConfiguration.
+func (v *VirtualNetworkGatewayAutoScaleConfiguration) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", v, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "bounds":
+			err = unpopulate(val, "Bounds", &v.Bounds)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", v, err)
+		}
+	}
+	return nil
+}
+
 // MarshalJSON implements the json.Marshaller interface for type VirtualNetworkGatewayConnection.
 func (v VirtualNetworkGatewayConnection) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
@@ -32128,8 +32902,10 @@ func (v *VirtualNetworkGatewayPolicyGroupProperties) UnmarshalJSON(data []byte)
 func (v VirtualNetworkGatewayPropertiesFormat) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "activeActive", v.Active)
+	populate(objectMap, "adminState", v.AdminState)
 	populate(objectMap, "allowRemoteVnetTraffic", v.AllowRemoteVnetTraffic)
 	populate(objectMap, "allowVirtualWanTraffic", v.AllowVirtualWanTraffic)
+	populate(objectMap, "autoScaleConfiguration", v.AutoScaleConfiguration)
 	populate(objectMap, "bgpSettings", v.BgpSettings)
 	populate(objectMap, "customRoutes", v.CustomRoutes)
 	populate(objectMap, "disableIPSecReplayProtection", v.DisableIPSecReplayProtection)
@@ -32165,12 +32941,18 @@ func (v *VirtualNetworkGatewayPropertiesFormat) UnmarshalJSON(data []byte) error
 		case "activeActive":
 			err = unpopulate(val, "Active", &v.Active)
 			delete(rawMsg, key)
+		case "adminState":
+			err = unpopulate(val, "AdminState", &v.AdminState)
+			delete(rawMsg, key)
 		case "allowRemoteVnetTraffic":
 			err = unpopulate(val, "AllowRemoteVnetTraffic", &v.AllowRemoteVnetTraffic)
 			delete(rawMsg, key)
 		case "allowVirtualWanTraffic":
 			err = unpopulate(val, "AllowVirtualWanTraffic", &v.AllowVirtualWanTraffic)
 			delete(rawMsg, key)
+		case "autoScaleConfiguration":
+			err = unpopulate(val, "AutoScaleConfiguration", &v.AutoScaleConfiguration)
+			delete(rawMsg, key)
 		case "bgpSettings":
 			err = unpopulate(val, "BgpSettings", &v.BgpSettings)
 			delete(rawMsg, key)
@@ -33454,9 +34236,12 @@ func (w WebApplicationFirewallCustomRule) MarshalJSON() ([]byte, error) {
 	objectMap := make(map[string]any)
 	populate(objectMap, "action", w.Action)
 	populate(objectMap, "etag", w.Etag)
+	populate(objectMap, "groupByUserSession", w.GroupByUserSession)
 	populate(objectMap, "matchConditions", w.MatchConditions)
 	populate(objectMap, "name", w.Name)
 	populate(objectMap, "priority", w.Priority)
+	populate(objectMap, "rateLimitDuration", w.RateLimitDuration)
+	populate(objectMap, "rateLimitThreshold", w.RateLimitThreshold)
 	populate(objectMap, "ruleType", w.RuleType)
 	populate(objectMap, "state", w.State)
 	return json.Marshal(objectMap)
@@ -33477,6 +34262,9 @@ func (w *WebApplicationFirewallCustomRule) UnmarshalJSON(data []byte) error {
 		case "etag":
 			err = unpopulate(val, "Etag", &w.Etag)
 			delete(rawMsg, key)
+		case "groupByUserSession":
+			err = unpopulate(val, "GroupByUserSession", &w.GroupByUserSession)
+			delete(rawMsg, key)
 		case "matchConditions":
 			err = unpopulate(val, "MatchConditions", &w.MatchConditions)
 			delete(rawMsg, key)
@@ -33486,6 +34274,12 @@ func (w *WebApplicationFirewallCustomRule) UnmarshalJSON(data []byte) error {
 		case "priority":
 			err = unpopulate(val, "Priority", &w.Priority)
 			delete(rawMsg, key)
+		case "rateLimitDuration":
+			err = unpopulate(val, "RateLimitDuration", &w.RateLimitDuration)
+			delete(rawMsg, key)
+		case "rateLimitThreshold":
+			err = unpopulate(val, "RateLimitThreshold", &w.RateLimitThreshold)
+			delete(rawMsg, key)
 		case "ruleType":
 			err = unpopulate(val, "RuleType", &w.RuleType)
 			delete(rawMsg, key)
@@ -33637,6 +34431,45 @@ func (w *WebApplicationFirewallPolicyPropertiesFormat) UnmarshalJSON(data []byte
 	return nil
 }
 
+// MarshalJSON implements the json.Marshaller interface for type WebApplicationFirewallScrubbingRules.
+func (w WebApplicationFirewallScrubbingRules) MarshalJSON() ([]byte, error) {
+	objectMap := make(map[string]any)
+	populate(objectMap, "matchVariable", w.MatchVariable)
+	populate(objectMap, "selector", w.Selector)
+	populate(objectMap, "selectorMatchOperator", w.SelectorMatchOperator)
+	populate(objectMap, "state", w.State)
+	return json.Marshal(objectMap)
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type WebApplicationFirewallScrubbingRules.
+func (w *WebApplicationFirewallScrubbingRules) UnmarshalJSON(data []byte) error {
+	var rawMsg map[string]json.RawMessage
+	if err := json.Unmarshal(data, &rawMsg); err != nil {
+		return fmt.Errorf("unmarshalling type %T: %v", w, err)
+	}
+	for key, val := range rawMsg {
+		var err error
+		switch key {
+		case "matchVariable":
+			err = unpopulate(val, "MatchVariable", &w.MatchVariable)
+			delete(rawMsg, key)
+		case "selector":
+			err = unpopulate(val, "Selector", &w.Selector)
+			delete(rawMsg, key)
+		case "selectorMatchOperator":
+			err = unpopulate(val, "SelectorMatchOperator", &w.SelectorMatchOperator)
+			delete(rawMsg, key)
+		case "state":
+			err = unpopulate(val, "State", &w.State)
+			delete(rawMsg, key)
+		}
+		if err != nil {
+			return fmt.Errorf("unmarshalling type %T: %v", w, err)
+		}
+	}
+	return nil
+}
+
 func populate(m map[string]any, k string, v any) {
 	if v == nil {
 		return
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/natgateways_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/natgateways_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/natgateways_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/natgateways_client.go
index a62b572ea3a..d7cf68098c4 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/natgateways_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/natgateways_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type NatGatewaysClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewNatGatewaysClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*NatGatewaysClient, error) {
-	cl, err := arm.NewClient(moduleName+".NatGatewaysClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewNatGatewaysClient(subscriptionID string, credential azcore.TokenCredenti
 // BeginCreateOrUpdate - Creates or updates a nat gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - natGatewayName - The name of the nat gateway.
 //   - parameters - Parameters supplied to the create or update nat gateway operation.
@@ -60,31 +59,41 @@ func (client *NatGatewaysClient) BeginCreateOrUpdate(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[NatGatewaysClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[NatGatewaysClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[NatGatewaysClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[NatGatewaysClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a nat gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *NatGatewaysClient) createOrUpdate(ctx context.Context, resourceGroupName string, natGatewayName string, parameters NatGateway, options *NatGatewaysClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "NatGatewaysClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, natGatewayName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *NatGatewaysClient) createOrUpdateCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified nat gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - natGatewayName - The name of the nat gateway.
 //   - options - NatGatewaysClientBeginDeleteOptions contains the optional parameters for the NatGatewaysClient.BeginDelete method.
@@ -126,31 +138,41 @@ func (client *NatGatewaysClient) BeginDelete(ctx context.Context, resourceGroupN
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[NatGatewaysClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[NatGatewaysClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[NatGatewaysClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[NatGatewaysClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified nat gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *NatGatewaysClient) deleteOperation(ctx context.Context, resourceGroupName string, natGatewayName string, options *NatGatewaysClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "NatGatewaysClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, natGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -173,7 +195,7 @@ func (client *NatGatewaysClient) deleteCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -182,23 +204,30 @@ func (client *NatGatewaysClient) deleteCreateRequest(ctx context.Context, resour
 // Get - Gets the specified nat gateway in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - natGatewayName - The name of the nat gateway.
 //   - options - NatGatewaysClientGetOptions contains the optional parameters for the NatGatewaysClient.Get method.
 func (client *NatGatewaysClient) Get(ctx context.Context, resourceGroupName string, natGatewayName string, options *NatGatewaysClientGetOptions) (NatGatewaysClientGetResponse, error) {
+	var err error
+	const operationName = "NatGatewaysClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, natGatewayName, options)
 	if err != nil {
 		return NatGatewaysClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return NatGatewaysClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return NatGatewaysClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return NatGatewaysClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -221,7 +250,7 @@ func (client *NatGatewaysClient) getCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -241,7 +270,7 @@ func (client *NatGatewaysClient) getHandleResponse(resp *http.Response) (NatGate
 
 // NewListPager - Gets all nat gateways in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - NatGatewaysClientListOptions contains the optional parameters for the NatGatewaysClient.NewListPager method.
 func (client *NatGatewaysClient) NewListPager(resourceGroupName string, options *NatGatewaysClientListOptions) *runtime.Pager[NatGatewaysClientListResponse] {
@@ -250,25 +279,20 @@ func (client *NatGatewaysClient) NewListPager(resourceGroupName string, options
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *NatGatewaysClientListResponse) (NatGatewaysClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return NatGatewaysClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "NatGatewaysClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return NatGatewaysClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return NatGatewaysClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -288,7 +312,7 @@ func (client *NatGatewaysClient) listCreateRequest(ctx context.Context, resource
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -305,7 +329,7 @@ func (client *NatGatewaysClient) listHandleResponse(resp *http.Response) (NatGat
 
 // NewListAllPager - Gets all the Nat Gateways in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - NatGatewaysClientListAllOptions contains the optional parameters for the NatGatewaysClient.NewListAllPager method.
 func (client *NatGatewaysClient) NewListAllPager(options *NatGatewaysClientListAllOptions) *runtime.Pager[NatGatewaysClientListAllResponse] {
 	return runtime.NewPager(runtime.PagingHandler[NatGatewaysClientListAllResponse]{
@@ -313,25 +337,20 @@ func (client *NatGatewaysClient) NewListAllPager(options *NatGatewaysClientListA
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *NatGatewaysClientListAllResponse) (NatGatewaysClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return NatGatewaysClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "NatGatewaysClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return NatGatewaysClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return NatGatewaysClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -347,7 +366,7 @@ func (client *NatGatewaysClient) listAllCreateRequest(ctx context.Context, optio
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -365,24 +384,31 @@ func (client *NatGatewaysClient) listAllHandleResponse(resp *http.Response) (Nat
 // UpdateTags - Updates nat gateway tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - natGatewayName - The name of the nat gateway.
 //   - parameters - Parameters supplied to update nat gateway tags.
 //   - options - NatGatewaysClientUpdateTagsOptions contains the optional parameters for the NatGatewaysClient.UpdateTags method.
 func (client *NatGatewaysClient) UpdateTags(ctx context.Context, resourceGroupName string, natGatewayName string, parameters TagsObject, options *NatGatewaysClientUpdateTagsOptions) (NatGatewaysClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "NatGatewaysClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, natGatewayName, parameters, options)
 	if err != nil {
 		return NatGatewaysClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return NatGatewaysClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return NatGatewaysClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return NatGatewaysClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -405,10 +431,13 @@ func (client *NatGatewaysClient) updateTagsCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/natrules_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/natrules_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/natrules_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/natrules_client.go
index f4d06a2ef69..3bfc0b6ae54 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/natrules_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/natrules_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type NatRulesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewNatRulesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*NatRulesClient, error) {
-	cl, err := arm.NewClient(moduleName+".NatRulesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewNatRulesClient(subscriptionID string, credential azcore.TokenCredential,
 // BeginCreateOrUpdate - Creates a nat rule to a scalable vpn gateway if it doesn't exist else updates the existing nat rules.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - natRuleName - The name of the nat rule.
@@ -61,31 +60,41 @@ func (client *NatRulesClient) BeginCreateOrUpdate(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[NatRulesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[NatRulesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[NatRulesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[NatRulesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a nat rule to a scalable vpn gateway if it doesn't exist else updates the existing nat rules.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *NatRulesClient) createOrUpdate(ctx context.Context, resourceGroupName string, gatewayName string, natRuleName string, natRuleParameters VPNGatewayNatRule, options *NatRulesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "NatRulesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, gatewayName, natRuleName, natRuleParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *NatRulesClient) createOrUpdateCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, natRuleParameters)
+	if err := runtime.MarshalAsJSON(req, natRuleParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a nat rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - natRuleName - The name of the nat rule.
@@ -132,31 +144,41 @@ func (client *NatRulesClient) BeginDelete(ctx context.Context, resourceGroupName
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[NatRulesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[NatRulesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[NatRulesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[NatRulesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a nat rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *NatRulesClient) deleteOperation(ctx context.Context, resourceGroupName string, gatewayName string, natRuleName string, options *NatRulesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "NatRulesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, gatewayName, natRuleName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -183,7 +205,7 @@ func (client *NatRulesClient) deleteCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -192,24 +214,31 @@ func (client *NatRulesClient) deleteCreateRequest(ctx context.Context, resourceG
 // Get - Retrieves the details of a nat ruleGet.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - natRuleName - The name of the nat rule.
 //   - options - NatRulesClientGetOptions contains the optional parameters for the NatRulesClient.Get method.
 func (client *NatRulesClient) Get(ctx context.Context, resourceGroupName string, gatewayName string, natRuleName string, options *NatRulesClientGetOptions) (NatRulesClientGetResponse, error) {
+	var err error
+	const operationName = "NatRulesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, gatewayName, natRuleName, options)
 	if err != nil {
 		return NatRulesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return NatRulesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return NatRulesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return NatRulesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -236,7 +265,7 @@ func (client *NatRulesClient) getCreateRequest(ctx context.Context, resourceGrou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -253,7 +282,7 @@ func (client *NatRulesClient) getHandleResponse(resp *http.Response) (NatRulesCl
 
 // NewListByVPNGatewayPager - Retrieves all nat rules for a particular virtual wan vpn gateway.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - options - NatRulesClientListByVPNGatewayOptions contains the optional parameters for the NatRulesClient.NewListByVPNGatewayPager
@@ -264,25 +293,20 @@ func (client *NatRulesClient) NewListByVPNGatewayPager(resourceGroupName string,
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *NatRulesClientListByVPNGatewayResponse) (NatRulesClientListByVPNGatewayResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByVPNGatewayCreateRequest(ctx, resourceGroupName, gatewayName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return NatRulesClientListByVPNGatewayResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "NatRulesClient.NewListByVPNGatewayPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByVPNGatewayCreateRequest(ctx, resourceGroupName, gatewayName, options)
+			}, nil)
 			if err != nil {
 				return NatRulesClientListByVPNGatewayResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return NatRulesClientListByVPNGatewayResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByVPNGatewayHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -306,7 +330,7 @@ func (client *NatRulesClient) listByVPNGatewayCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/operations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/operations_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/operations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/operations_client.go
index 8a122570e42..3312c5ba414 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/operations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/operations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -28,7 +27,7 @@ type OperationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewOperationsClient(credential azcore.TokenCredential, options *arm.ClientOptions) (*OperationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".OperationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -40,7 +39,7 @@ func NewOperationsClient(credential azcore.TokenCredential, options *arm.ClientO
 
 // NewListPager - Lists all of the available Network Rest API operations.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - OperationsClientListOptions contains the optional parameters for the OperationsClient.NewListPager method.
 func (client *OperationsClient) NewListPager(options *OperationsClientListOptions) *runtime.Pager[OperationsClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[OperationsClientListResponse]{
@@ -48,25 +47,20 @@ func (client *OperationsClient) NewListPager(options *OperationsClientListOption
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *OperationsClientListResponse) (OperationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "OperationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return OperationsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return OperationsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return OperationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -78,7 +72,7 @@ func (client *OperationsClient) listCreateRequest(ctx context.Context, options *
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/options.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/options.go
new file mode 100644
index 00000000000..5efa1c6ccef
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/options.go
@@ -0,0 +1,3927 @@
+//go:build go1.18
+// +build go1.18
+
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License. See License.txt in the project root for license information.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
+// Changes may cause incorrect behavior and will be lost if the code is regenerated.
+
+package armnetwork
+
+// AdminRuleCollectionsClientBeginDeleteOptions contains the optional parameters for the AdminRuleCollectionsClient.BeginDelete
+// method.
+type AdminRuleCollectionsClientBeginDeleteOptions struct {
+	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
+	// will do a cleanup deployment in the background, prior to the delete.
+	Force *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// AdminRuleCollectionsClientCreateOrUpdateOptions contains the optional parameters for the AdminRuleCollectionsClient.CreateOrUpdate
+// method.
+type AdminRuleCollectionsClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AdminRuleCollectionsClientGetOptions contains the optional parameters for the AdminRuleCollectionsClient.Get method.
+type AdminRuleCollectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AdminRuleCollectionsClientListOptions contains the optional parameters for the AdminRuleCollectionsClient.NewListPager
+// method.
+type AdminRuleCollectionsClientListOptions struct {
+	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
+	// the value of the nextLink element will include a skipToken parameter that
+	// specifies a starting point to use for subsequent calls.
+	SkipToken *string
+
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// AdminRulesClientBeginDeleteOptions contains the optional parameters for the AdminRulesClient.BeginDelete method.
+type AdminRulesClientBeginDeleteOptions struct {
+	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
+	// will do a cleanup deployment in the background, prior to the delete.
+	Force *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// AdminRulesClientCreateOrUpdateOptions contains the optional parameters for the AdminRulesClient.CreateOrUpdate method.
+type AdminRulesClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AdminRulesClientGetOptions contains the optional parameters for the AdminRulesClient.Get method.
+type AdminRulesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AdminRulesClientListOptions contains the optional parameters for the AdminRulesClient.NewListPager method.
+type AdminRulesClientListOptions struct {
+	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
+	// the value of the nextLink element will include a skipToken parameter that
+	// specifies a starting point to use for subsequent calls.
+	SkipToken *string
+
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// ApplicationGatewayPrivateEndpointConnectionsClientBeginDeleteOptions contains the optional parameters for the ApplicationGatewayPrivateEndpointConnectionsClient.BeginDelete
+// method.
+type ApplicationGatewayPrivateEndpointConnectionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ApplicationGatewayPrivateEndpointConnectionsClientBeginUpdateOptions contains the optional parameters for the ApplicationGatewayPrivateEndpointConnectionsClient.BeginUpdate
+// method.
+type ApplicationGatewayPrivateEndpointConnectionsClientBeginUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ApplicationGatewayPrivateEndpointConnectionsClientGetOptions contains the optional parameters for the ApplicationGatewayPrivateEndpointConnectionsClient.Get
+// method.
+type ApplicationGatewayPrivateEndpointConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewayPrivateEndpointConnectionsClientListOptions contains the optional parameters for the ApplicationGatewayPrivateEndpointConnectionsClient.NewListPager
+// method.
+type ApplicationGatewayPrivateEndpointConnectionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewayPrivateLinkResourcesClientListOptions contains the optional parameters for the ApplicationGatewayPrivateLinkResourcesClient.NewListPager
+// method.
+type ApplicationGatewayPrivateLinkResourcesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewayWafDynamicManifestsClientGetOptions contains the optional parameters for the ApplicationGatewayWafDynamicManifestsClient.NewGetPager
+// method.
+type ApplicationGatewayWafDynamicManifestsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewayWafDynamicManifestsDefaultClientGetOptions contains the optional parameters for the ApplicationGatewayWafDynamicManifestsDefaultClient.Get
+// method.
+type ApplicationGatewayWafDynamicManifestsDefaultClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewaysClientBeginBackendHealthOnDemandOptions contains the optional parameters for the ApplicationGatewaysClient.BeginBackendHealthOnDemand
+// method.
+type ApplicationGatewaysClientBeginBackendHealthOnDemandOptions struct {
+	// Expands BackendAddressPool and BackendHttpSettings referenced in backend health.
+	Expand *string
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ApplicationGatewaysClientBeginBackendHealthOptions contains the optional parameters for the ApplicationGatewaysClient.BeginBackendHealth
+// method.
+type ApplicationGatewaysClientBeginBackendHealthOptions struct {
+	// Expands BackendAddressPool and BackendHttpSettings referenced in backend health.
+	Expand *string
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ApplicationGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the ApplicationGatewaysClient.BeginCreateOrUpdate
+// method.
+type ApplicationGatewaysClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ApplicationGatewaysClientBeginDeleteOptions contains the optional parameters for the ApplicationGatewaysClient.BeginDelete
+// method.
+type ApplicationGatewaysClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ApplicationGatewaysClientBeginStartOptions contains the optional parameters for the ApplicationGatewaysClient.BeginStart
+// method.
+type ApplicationGatewaysClientBeginStartOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ApplicationGatewaysClientBeginStopOptions contains the optional parameters for the ApplicationGatewaysClient.BeginStop
+// method.
+type ApplicationGatewaysClientBeginStopOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ApplicationGatewaysClientGetOptions contains the optional parameters for the ApplicationGatewaysClient.Get method.
+type ApplicationGatewaysClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewaysClientGetSSLPredefinedPolicyOptions contains the optional parameters for the ApplicationGatewaysClient.GetSSLPredefinedPolicy
+// method.
+type ApplicationGatewaysClientGetSSLPredefinedPolicyOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewaysClientListAllOptions contains the optional parameters for the ApplicationGatewaysClient.NewListAllPager
+// method.
+type ApplicationGatewaysClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewaysClientListAvailableRequestHeadersOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableRequestHeaders
+// method.
+type ApplicationGatewaysClientListAvailableRequestHeadersOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewaysClientListAvailableResponseHeadersOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableResponseHeaders
+// method.
+type ApplicationGatewaysClientListAvailableResponseHeadersOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewaysClientListAvailableSSLOptionsOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableSSLOptions
+// method.
+type ApplicationGatewaysClientListAvailableSSLOptionsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesOptions contains the optional parameters for the ApplicationGatewaysClient.NewListAvailableSSLPredefinedPoliciesPager
+// method.
+type ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewaysClientListAvailableServerVariablesOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableServerVariables
+// method.
+type ApplicationGatewaysClientListAvailableServerVariablesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewaysClientListAvailableWafRuleSetsOptions contains the optional parameters for the ApplicationGatewaysClient.ListAvailableWafRuleSets
+// method.
+type ApplicationGatewaysClientListAvailableWafRuleSetsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewaysClientListOptions contains the optional parameters for the ApplicationGatewaysClient.NewListPager method.
+type ApplicationGatewaysClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationGatewaysClientUpdateTagsOptions contains the optional parameters for the ApplicationGatewaysClient.UpdateTags
+// method.
+type ApplicationGatewaysClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationSecurityGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the ApplicationSecurityGroupsClient.BeginCreateOrUpdate
+// method.
+type ApplicationSecurityGroupsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ApplicationSecurityGroupsClientBeginDeleteOptions contains the optional parameters for the ApplicationSecurityGroupsClient.BeginDelete
+// method.
+type ApplicationSecurityGroupsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ApplicationSecurityGroupsClientGetOptions contains the optional parameters for the ApplicationSecurityGroupsClient.Get
+// method.
+type ApplicationSecurityGroupsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationSecurityGroupsClientListAllOptions contains the optional parameters for the ApplicationSecurityGroupsClient.NewListAllPager
+// method.
+type ApplicationSecurityGroupsClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationSecurityGroupsClientListOptions contains the optional parameters for the ApplicationSecurityGroupsClient.NewListPager
+// method.
+type ApplicationSecurityGroupsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ApplicationSecurityGroupsClientUpdateTagsOptions contains the optional parameters for the ApplicationSecurityGroupsClient.UpdateTags
+// method.
+type ApplicationSecurityGroupsClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailableDelegationsClientListOptions contains the optional parameters for the AvailableDelegationsClient.NewListPager
+// method.
+type AvailableDelegationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailableEndpointServicesClientListOptions contains the optional parameters for the AvailableEndpointServicesClient.NewListPager
+// method.
+type AvailableEndpointServicesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailablePrivateEndpointTypesClientListByResourceGroupOptions contains the optional parameters for the AvailablePrivateEndpointTypesClient.NewListByResourceGroupPager
+// method.
+type AvailablePrivateEndpointTypesClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailablePrivateEndpointTypesClientListOptions contains the optional parameters for the AvailablePrivateEndpointTypesClient.NewListPager
+// method.
+type AvailablePrivateEndpointTypesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailableResourceGroupDelegationsClientListOptions contains the optional parameters for the AvailableResourceGroupDelegationsClient.NewListPager
+// method.
+type AvailableResourceGroupDelegationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailableServiceAliasesClientListByResourceGroupOptions contains the optional parameters for the AvailableServiceAliasesClient.NewListByResourceGroupPager
+// method.
+type AvailableServiceAliasesClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AvailableServiceAliasesClientListOptions contains the optional parameters for the AvailableServiceAliasesClient.NewListPager
+// method.
+type AvailableServiceAliasesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AzureFirewallFqdnTagsClientListAllOptions contains the optional parameters for the AzureFirewallFqdnTagsClient.NewListAllPager
+// method.
+type AzureFirewallFqdnTagsClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AzureFirewallsClientBeginCreateOrUpdateOptions contains the optional parameters for the AzureFirewallsClient.BeginCreateOrUpdate
+// method.
+type AzureFirewallsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// AzureFirewallsClientBeginDeleteOptions contains the optional parameters for the AzureFirewallsClient.BeginDelete method.
+type AzureFirewallsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// AzureFirewallsClientBeginListLearnedPrefixesOptions contains the optional parameters for the AzureFirewallsClient.BeginListLearnedPrefixes
+// method.
+type AzureFirewallsClientBeginListLearnedPrefixesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// AzureFirewallsClientBeginPacketCaptureOptions contains the optional parameters for the AzureFirewallsClient.BeginPacketCapture
+// method.
+type AzureFirewallsClientBeginPacketCaptureOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// AzureFirewallsClientBeginUpdateTagsOptions contains the optional parameters for the AzureFirewallsClient.BeginUpdateTags
+// method.
+type AzureFirewallsClientBeginUpdateTagsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// AzureFirewallsClientGetOptions contains the optional parameters for the AzureFirewallsClient.Get method.
+type AzureFirewallsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AzureFirewallsClientListAllOptions contains the optional parameters for the AzureFirewallsClient.NewListAllPager method.
+type AzureFirewallsClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// AzureFirewallsClientListOptions contains the optional parameters for the AzureFirewallsClient.NewListPager method.
+type AzureFirewallsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// BastionHostsClientBeginCreateOrUpdateOptions contains the optional parameters for the BastionHostsClient.BeginCreateOrUpdate
+// method.
+type BastionHostsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// BastionHostsClientBeginDeleteOptions contains the optional parameters for the BastionHostsClient.BeginDelete method.
+type BastionHostsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// BastionHostsClientBeginUpdateTagsOptions contains the optional parameters for the BastionHostsClient.BeginUpdateTags method.
+type BastionHostsClientBeginUpdateTagsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// BastionHostsClientGetOptions contains the optional parameters for the BastionHostsClient.Get method.
+type BastionHostsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// BastionHostsClientListByResourceGroupOptions contains the optional parameters for the BastionHostsClient.NewListByResourceGroupPager
+// method.
+type BastionHostsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// BastionHostsClientListOptions contains the optional parameters for the BastionHostsClient.NewListPager method.
+type BastionHostsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// BgpServiceCommunitiesClientListOptions contains the optional parameters for the BgpServiceCommunitiesClient.NewListPager
+// method.
+type BgpServiceCommunitiesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ConfigurationPolicyGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the ConfigurationPolicyGroupsClient.BeginCreateOrUpdate
+// method.
+type ConfigurationPolicyGroupsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ConfigurationPolicyGroupsClientBeginDeleteOptions contains the optional parameters for the ConfigurationPolicyGroupsClient.BeginDelete
+// method.
+type ConfigurationPolicyGroupsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ConfigurationPolicyGroupsClientGetOptions contains the optional parameters for the ConfigurationPolicyGroupsClient.Get
+// method.
+type ConfigurationPolicyGroupsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ConfigurationPolicyGroupsClientListByVPNServerConfigurationOptions contains the optional parameters for the ConfigurationPolicyGroupsClient.NewListByVPNServerConfigurationPager
+// method.
+type ConfigurationPolicyGroupsClientListByVPNServerConfigurationOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ConnectionMonitorsClientBeginCreateOrUpdateOptions contains the optional parameters for the ConnectionMonitorsClient.BeginCreateOrUpdate
+// method.
+type ConnectionMonitorsClientBeginCreateOrUpdateOptions struct {
+	// Value indicating whether connection monitor V1 should be migrated to V2 format.
+	Migrate *string
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ConnectionMonitorsClientBeginDeleteOptions contains the optional parameters for the ConnectionMonitorsClient.BeginDelete
+// method.
+type ConnectionMonitorsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ConnectionMonitorsClientBeginQueryOptions contains the optional parameters for the ConnectionMonitorsClient.BeginQuery
+// method.
+type ConnectionMonitorsClientBeginQueryOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ConnectionMonitorsClientBeginStartOptions contains the optional parameters for the ConnectionMonitorsClient.BeginStart
+// method.
+type ConnectionMonitorsClientBeginStartOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ConnectionMonitorsClientBeginStopOptions contains the optional parameters for the ConnectionMonitorsClient.BeginStop method.
+type ConnectionMonitorsClientBeginStopOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ConnectionMonitorsClientGetOptions contains the optional parameters for the ConnectionMonitorsClient.Get method.
+type ConnectionMonitorsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ConnectionMonitorsClientListOptions contains the optional parameters for the ConnectionMonitorsClient.NewListPager method.
+type ConnectionMonitorsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ConnectionMonitorsClientUpdateTagsOptions contains the optional parameters for the ConnectionMonitorsClient.UpdateTags
+// method.
+type ConnectionMonitorsClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ConnectivityConfigurationsClientBeginDeleteOptions contains the optional parameters for the ConnectivityConfigurationsClient.BeginDelete
+// method.
+type ConnectivityConfigurationsClientBeginDeleteOptions struct {
+	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
+	// will do a cleanup deployment in the background, prior to the delete.
+	Force *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ConnectivityConfigurationsClientCreateOrUpdateOptions contains the optional parameters for the ConnectivityConfigurationsClient.CreateOrUpdate
+// method.
+type ConnectivityConfigurationsClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ConnectivityConfigurationsClientGetOptions contains the optional parameters for the ConnectivityConfigurationsClient.Get
+// method.
+type ConnectivityConfigurationsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ConnectivityConfigurationsClientListOptions contains the optional parameters for the ConnectivityConfigurationsClient.NewListPager
+// method.
+type ConnectivityConfigurationsClientListOptions struct {
+	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
+	// the value of the nextLink element will include a skipToken parameter that
+	// specifies a starting point to use for subsequent calls.
+	SkipToken *string
+
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// CustomIPPrefixesClientBeginCreateOrUpdateOptions contains the optional parameters for the CustomIPPrefixesClient.BeginCreateOrUpdate
+// method.
+type CustomIPPrefixesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CustomIPPrefixesClientBeginDeleteOptions contains the optional parameters for the CustomIPPrefixesClient.BeginDelete method.
+type CustomIPPrefixesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// CustomIPPrefixesClientGetOptions contains the optional parameters for the CustomIPPrefixesClient.Get method.
+type CustomIPPrefixesClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// CustomIPPrefixesClientListAllOptions contains the optional parameters for the CustomIPPrefixesClient.NewListAllPager method.
+type CustomIPPrefixesClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CustomIPPrefixesClientListOptions contains the optional parameters for the CustomIPPrefixesClient.NewListPager method.
+type CustomIPPrefixesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// CustomIPPrefixesClientUpdateTagsOptions contains the optional parameters for the CustomIPPrefixesClient.UpdateTags method.
+type CustomIPPrefixesClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DdosCustomPoliciesClientBeginCreateOrUpdateOptions contains the optional parameters for the DdosCustomPoliciesClient.BeginCreateOrUpdate
+// method.
+type DdosCustomPoliciesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DdosCustomPoliciesClientBeginDeleteOptions contains the optional parameters for the DdosCustomPoliciesClient.BeginDelete
+// method.
+type DdosCustomPoliciesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DdosCustomPoliciesClientGetOptions contains the optional parameters for the DdosCustomPoliciesClient.Get method.
+type DdosCustomPoliciesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DdosCustomPoliciesClientUpdateTagsOptions contains the optional parameters for the DdosCustomPoliciesClient.UpdateTags
+// method.
+type DdosCustomPoliciesClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DdosProtectionPlansClientBeginCreateOrUpdateOptions contains the optional parameters for the DdosProtectionPlansClient.BeginCreateOrUpdate
+// method.
+type DdosProtectionPlansClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DdosProtectionPlansClientBeginDeleteOptions contains the optional parameters for the DdosProtectionPlansClient.BeginDelete
+// method.
+type DdosProtectionPlansClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DdosProtectionPlansClientGetOptions contains the optional parameters for the DdosProtectionPlansClient.Get method.
+type DdosProtectionPlansClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DdosProtectionPlansClientListByResourceGroupOptions contains the optional parameters for the DdosProtectionPlansClient.NewListByResourceGroupPager
+// method.
+type DdosProtectionPlansClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DdosProtectionPlansClientListOptions contains the optional parameters for the DdosProtectionPlansClient.NewListPager method.
+type DdosProtectionPlansClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DdosProtectionPlansClientUpdateTagsOptions contains the optional parameters for the DdosProtectionPlansClient.UpdateTags
+// method.
+type DdosProtectionPlansClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DefaultSecurityRulesClientGetOptions contains the optional parameters for the DefaultSecurityRulesClient.Get method.
+type DefaultSecurityRulesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DefaultSecurityRulesClientListOptions contains the optional parameters for the DefaultSecurityRulesClient.NewListPager
+// method.
+type DefaultSecurityRulesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DscpConfigurationClientBeginCreateOrUpdateOptions contains the optional parameters for the DscpConfigurationClient.BeginCreateOrUpdate
+// method.
+type DscpConfigurationClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DscpConfigurationClientBeginDeleteOptions contains the optional parameters for the DscpConfigurationClient.BeginDelete
+// method.
+type DscpConfigurationClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// DscpConfigurationClientGetOptions contains the optional parameters for the DscpConfigurationClient.Get method.
+type DscpConfigurationClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DscpConfigurationClientListAllOptions contains the optional parameters for the DscpConfigurationClient.NewListAllPager
+// method.
+type DscpConfigurationClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// DscpConfigurationClientListOptions contains the optional parameters for the DscpConfigurationClient.NewListPager method.
+type DscpConfigurationClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitAuthorizationsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCircuitAuthorizationsClient.BeginCreateOrUpdate
+// method.
+type ExpressRouteCircuitAuthorizationsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCircuitAuthorizationsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteCircuitAuthorizationsClient.BeginDelete
+// method.
+type ExpressRouteCircuitAuthorizationsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCircuitAuthorizationsClientGetOptions contains the optional parameters for the ExpressRouteCircuitAuthorizationsClient.Get
+// method.
+type ExpressRouteCircuitAuthorizationsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitAuthorizationsClientListOptions contains the optional parameters for the ExpressRouteCircuitAuthorizationsClient.NewListPager
+// method.
+type ExpressRouteCircuitAuthorizationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCircuitConnectionsClient.BeginCreateOrUpdate
+// method.
+type ExpressRouteCircuitConnectionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCircuitConnectionsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteCircuitConnectionsClient.BeginDelete
+// method.
+type ExpressRouteCircuitConnectionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCircuitConnectionsClientGetOptions contains the optional parameters for the ExpressRouteCircuitConnectionsClient.Get
+// method.
+type ExpressRouteCircuitConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitConnectionsClientListOptions contains the optional parameters for the ExpressRouteCircuitConnectionsClient.NewListPager
+// method.
+type ExpressRouteCircuitConnectionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitPeeringsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCircuitPeeringsClient.BeginCreateOrUpdate
+// method.
+type ExpressRouteCircuitPeeringsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCircuitPeeringsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteCircuitPeeringsClient.BeginDelete
+// method.
+type ExpressRouteCircuitPeeringsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCircuitPeeringsClientGetOptions contains the optional parameters for the ExpressRouteCircuitPeeringsClient.Get
+// method.
+type ExpressRouteCircuitPeeringsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitPeeringsClientListOptions contains the optional parameters for the ExpressRouteCircuitPeeringsClient.NewListPager
+// method.
+type ExpressRouteCircuitPeeringsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCircuitsClient.BeginCreateOrUpdate
+// method.
+type ExpressRouteCircuitsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCircuitsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteCircuitsClient.BeginDelete
+// method.
+type ExpressRouteCircuitsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCircuitsClientBeginListArpTableOptions contains the optional parameters for the ExpressRouteCircuitsClient.BeginListArpTable
+// method.
+type ExpressRouteCircuitsClientBeginListArpTableOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCircuitsClientBeginListRoutesTableOptions contains the optional parameters for the ExpressRouteCircuitsClient.BeginListRoutesTable
+// method.
+type ExpressRouteCircuitsClientBeginListRoutesTableOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCircuitsClientBeginListRoutesTableSummaryOptions contains the optional parameters for the ExpressRouteCircuitsClient.BeginListRoutesTableSummary
+// method.
+type ExpressRouteCircuitsClientBeginListRoutesTableSummaryOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCircuitsClientGetOptions contains the optional parameters for the ExpressRouteCircuitsClient.Get method.
+type ExpressRouteCircuitsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitsClientGetPeeringStatsOptions contains the optional parameters for the ExpressRouteCircuitsClient.GetPeeringStats
+// method.
+type ExpressRouteCircuitsClientGetPeeringStatsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitsClientGetStatsOptions contains the optional parameters for the ExpressRouteCircuitsClient.GetStats
+// method.
+type ExpressRouteCircuitsClientGetStatsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitsClientListAllOptions contains the optional parameters for the ExpressRouteCircuitsClient.NewListAllPager
+// method.
+type ExpressRouteCircuitsClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitsClientListOptions contains the optional parameters for the ExpressRouteCircuitsClient.NewListPager
+// method.
+type ExpressRouteCircuitsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCircuitsClientUpdateTagsOptions contains the optional parameters for the ExpressRouteCircuitsClient.UpdateTags
+// method.
+type ExpressRouteCircuitsClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteConnectionsClient.BeginCreateOrUpdate
+// method.
+type ExpressRouteConnectionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteConnectionsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteConnectionsClient.BeginDelete
+// method.
+type ExpressRouteConnectionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteConnectionsClientGetOptions contains the optional parameters for the ExpressRouteConnectionsClient.Get method.
+type ExpressRouteConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteConnectionsClientListOptions contains the optional parameters for the ExpressRouteConnectionsClient.List method.
+type ExpressRouteConnectionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCrossConnectionPeeringsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCrossConnectionPeeringsClient.BeginCreateOrUpdate
+// method.
+type ExpressRouteCrossConnectionPeeringsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCrossConnectionPeeringsClientBeginDeleteOptions contains the optional parameters for the ExpressRouteCrossConnectionPeeringsClient.BeginDelete
+// method.
+type ExpressRouteCrossConnectionPeeringsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCrossConnectionPeeringsClientGetOptions contains the optional parameters for the ExpressRouteCrossConnectionPeeringsClient.Get
+// method.
+type ExpressRouteCrossConnectionPeeringsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCrossConnectionPeeringsClientListOptions contains the optional parameters for the ExpressRouteCrossConnectionPeeringsClient.NewListPager
+// method.
+type ExpressRouteCrossConnectionPeeringsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCrossConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.BeginCreateOrUpdate
+// method.
+type ExpressRouteCrossConnectionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCrossConnectionsClientBeginListArpTableOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.BeginListArpTable
+// method.
+type ExpressRouteCrossConnectionsClientBeginListArpTableOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCrossConnectionsClientBeginListRoutesTableOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.BeginListRoutesTable
+// method.
+type ExpressRouteCrossConnectionsClientBeginListRoutesTableOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCrossConnectionsClientBeginListRoutesTableSummaryOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.BeginListRoutesTableSummary
+// method.
+type ExpressRouteCrossConnectionsClientBeginListRoutesTableSummaryOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteCrossConnectionsClientGetOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.Get
+// method.
+type ExpressRouteCrossConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCrossConnectionsClientListByResourceGroupOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.NewListByResourceGroupPager
+// method.
+type ExpressRouteCrossConnectionsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCrossConnectionsClientListOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.NewListPager
+// method.
+type ExpressRouteCrossConnectionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteCrossConnectionsClientUpdateTagsOptions contains the optional parameters for the ExpressRouteCrossConnectionsClient.UpdateTags
+// method.
+type ExpressRouteCrossConnectionsClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRouteGatewaysClient.BeginCreateOrUpdate
+// method.
+type ExpressRouteGatewaysClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteGatewaysClientBeginDeleteOptions contains the optional parameters for the ExpressRouteGatewaysClient.BeginDelete
+// method.
+type ExpressRouteGatewaysClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteGatewaysClientBeginUpdateTagsOptions contains the optional parameters for the ExpressRouteGatewaysClient.BeginUpdateTags
+// method.
+type ExpressRouteGatewaysClientBeginUpdateTagsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRouteGatewaysClientGetOptions contains the optional parameters for the ExpressRouteGatewaysClient.Get method.
+type ExpressRouteGatewaysClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteGatewaysClientListByResourceGroupOptions contains the optional parameters for the ExpressRouteGatewaysClient.ListByResourceGroup
+// method.
+type ExpressRouteGatewaysClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteGatewaysClientListBySubscriptionOptions contains the optional parameters for the ExpressRouteGatewaysClient.ListBySubscription
+// method.
+type ExpressRouteGatewaysClientListBySubscriptionOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteLinksClientGetOptions contains the optional parameters for the ExpressRouteLinksClient.Get method.
+type ExpressRouteLinksClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteLinksClientListOptions contains the optional parameters for the ExpressRouteLinksClient.NewListPager method.
+type ExpressRouteLinksClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRoutePortAuthorizationsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRoutePortAuthorizationsClient.BeginCreateOrUpdate
+// method.
+type ExpressRoutePortAuthorizationsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRoutePortAuthorizationsClientBeginDeleteOptions contains the optional parameters for the ExpressRoutePortAuthorizationsClient.BeginDelete
+// method.
+type ExpressRoutePortAuthorizationsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRoutePortAuthorizationsClientGetOptions contains the optional parameters for the ExpressRoutePortAuthorizationsClient.Get
+// method.
+type ExpressRoutePortAuthorizationsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRoutePortAuthorizationsClientListOptions contains the optional parameters for the ExpressRoutePortAuthorizationsClient.NewListPager
+// method.
+type ExpressRoutePortAuthorizationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRoutePortsClientBeginCreateOrUpdateOptions contains the optional parameters for the ExpressRoutePortsClient.BeginCreateOrUpdate
+// method.
+type ExpressRoutePortsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRoutePortsClientBeginDeleteOptions contains the optional parameters for the ExpressRoutePortsClient.BeginDelete
+// method.
+type ExpressRoutePortsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ExpressRoutePortsClientGenerateLOAOptions contains the optional parameters for the ExpressRoutePortsClient.GenerateLOA
+// method.
+type ExpressRoutePortsClientGenerateLOAOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRoutePortsClientGetOptions contains the optional parameters for the ExpressRoutePortsClient.Get method.
+type ExpressRoutePortsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRoutePortsClientListByResourceGroupOptions contains the optional parameters for the ExpressRoutePortsClient.NewListByResourceGroupPager
+// method.
+type ExpressRoutePortsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRoutePortsClientListOptions contains the optional parameters for the ExpressRoutePortsClient.NewListPager method.
+type ExpressRoutePortsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRoutePortsClientUpdateTagsOptions contains the optional parameters for the ExpressRoutePortsClient.UpdateTags method.
+type ExpressRoutePortsClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRoutePortsLocationsClientGetOptions contains the optional parameters for the ExpressRoutePortsLocationsClient.Get
+// method.
+type ExpressRoutePortsLocationsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRoutePortsLocationsClientListOptions contains the optional parameters for the ExpressRoutePortsLocationsClient.NewListPager
+// method.
+type ExpressRoutePortsLocationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ExpressRouteProviderPortsLocationClientListOptions contains the optional parameters for the ExpressRouteProviderPortsLocationClient.List
+// method.
+type ExpressRouteProviderPortsLocationClientListOptions struct {
+	// The filter to apply on the operation. For example, you can use $filter=location eq '{state}'.
+	Filter *string
+}
+
+// ExpressRouteServiceProvidersClientListOptions contains the optional parameters for the ExpressRouteServiceProvidersClient.NewListPager
+// method.
+type ExpressRouteServiceProvidersClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FirewallPoliciesClientBeginCreateOrUpdateOptions contains the optional parameters for the FirewallPoliciesClient.BeginCreateOrUpdate
+// method.
+type FirewallPoliciesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// FirewallPoliciesClientBeginDeleteOptions contains the optional parameters for the FirewallPoliciesClient.BeginDelete method.
+type FirewallPoliciesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// FirewallPoliciesClientGetOptions contains the optional parameters for the FirewallPoliciesClient.Get method.
+type FirewallPoliciesClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// FirewallPoliciesClientListAllOptions contains the optional parameters for the FirewallPoliciesClient.NewListAllPager method.
+type FirewallPoliciesClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FirewallPoliciesClientListOptions contains the optional parameters for the FirewallPoliciesClient.NewListPager method.
+type FirewallPoliciesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FirewallPoliciesClientUpdateTagsOptions contains the optional parameters for the FirewallPoliciesClient.UpdateTags method.
+type FirewallPoliciesClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FirewallPolicyIdpsSignaturesClientListOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesClient.List
+// method.
+type FirewallPolicyIdpsSignaturesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FirewallPolicyIdpsSignaturesFilterValuesClientListOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesFilterValuesClient.List
+// method.
+type FirewallPolicyIdpsSignaturesFilterValuesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FirewallPolicyIdpsSignaturesOverridesClientGetOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.Get
+// method.
+type FirewallPolicyIdpsSignaturesOverridesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FirewallPolicyIdpsSignaturesOverridesClientListOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.List
+// method.
+type FirewallPolicyIdpsSignaturesOverridesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FirewallPolicyIdpsSignaturesOverridesClientPatchOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.Patch
+// method.
+type FirewallPolicyIdpsSignaturesOverridesClientPatchOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FirewallPolicyIdpsSignaturesOverridesClientPutOptions contains the optional parameters for the FirewallPolicyIdpsSignaturesOverridesClient.Put
+// method.
+type FirewallPolicyIdpsSignaturesOverridesClientPutOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FirewallPolicyRuleCollectionGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the FirewallPolicyRuleCollectionGroupsClient.BeginCreateOrUpdate
+// method.
+type FirewallPolicyRuleCollectionGroupsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// FirewallPolicyRuleCollectionGroupsClientBeginDeleteOptions contains the optional parameters for the FirewallPolicyRuleCollectionGroupsClient.BeginDelete
+// method.
+type FirewallPolicyRuleCollectionGroupsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// FirewallPolicyRuleCollectionGroupsClientGetOptions contains the optional parameters for the FirewallPolicyRuleCollectionGroupsClient.Get
+// method.
+type FirewallPolicyRuleCollectionGroupsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FirewallPolicyRuleCollectionGroupsClientListOptions contains the optional parameters for the FirewallPolicyRuleCollectionGroupsClient.NewListPager
+// method.
+type FirewallPolicyRuleCollectionGroupsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FlowLogsClientBeginCreateOrUpdateOptions contains the optional parameters for the FlowLogsClient.BeginCreateOrUpdate method.
+type FlowLogsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// FlowLogsClientBeginDeleteOptions contains the optional parameters for the FlowLogsClient.BeginDelete method.
+type FlowLogsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// FlowLogsClientGetOptions contains the optional parameters for the FlowLogsClient.Get method.
+type FlowLogsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FlowLogsClientListOptions contains the optional parameters for the FlowLogsClient.NewListPager method.
+type FlowLogsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// FlowLogsClientUpdateTagsOptions contains the optional parameters for the FlowLogsClient.UpdateTags method.
+type FlowLogsClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// GroupsClientBeginDeleteOptions contains the optional parameters for the GroupsClient.BeginDelete method.
+type GroupsClientBeginDeleteOptions struct {
+	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
+	// will do a cleanup deployment in the background, prior to the delete.
+	Force *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// GroupsClientCreateOrUpdateOptions contains the optional parameters for the GroupsClient.CreateOrUpdate method.
+type GroupsClientCreateOrUpdateOptions struct {
+	// The ETag of the transformation. Omit this value to always overwrite the current resource. Specify the last-seen ETag value
+	// to prevent accidentally overwriting concurrent changes.
+	IfMatch *string
+}
+
+// GroupsClientGetOptions contains the optional parameters for the GroupsClient.Get method.
+type GroupsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// GroupsClientListOptions contains the optional parameters for the GroupsClient.NewListPager method.
+type GroupsClientListOptions struct {
+	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
+	// the value of the nextLink element will include a skipToken parameter that
+	// specifies a starting point to use for subsequent calls.
+	SkipToken *string
+
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// HubRouteTablesClientBeginCreateOrUpdateOptions contains the optional parameters for the HubRouteTablesClient.BeginCreateOrUpdate
+// method.
+type HubRouteTablesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// HubRouteTablesClientBeginDeleteOptions contains the optional parameters for the HubRouteTablesClient.BeginDelete method.
+type HubRouteTablesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// HubRouteTablesClientGetOptions contains the optional parameters for the HubRouteTablesClient.Get method.
+type HubRouteTablesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// HubRouteTablesClientListOptions contains the optional parameters for the HubRouteTablesClient.NewListPager method.
+type HubRouteTablesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// HubVirtualNetworkConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the HubVirtualNetworkConnectionsClient.BeginCreateOrUpdate
+// method.
+type HubVirtualNetworkConnectionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// HubVirtualNetworkConnectionsClientBeginDeleteOptions contains the optional parameters for the HubVirtualNetworkConnectionsClient.BeginDelete
+// method.
+type HubVirtualNetworkConnectionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// HubVirtualNetworkConnectionsClientGetOptions contains the optional parameters for the HubVirtualNetworkConnectionsClient.Get
+// method.
+type HubVirtualNetworkConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// HubVirtualNetworkConnectionsClientListOptions contains the optional parameters for the HubVirtualNetworkConnectionsClient.NewListPager
+// method.
+type HubVirtualNetworkConnectionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// IPAllocationsClientBeginCreateOrUpdateOptions contains the optional parameters for the IPAllocationsClient.BeginCreateOrUpdate
+// method.
+type IPAllocationsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// IPAllocationsClientBeginDeleteOptions contains the optional parameters for the IPAllocationsClient.BeginDelete method.
+type IPAllocationsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// IPAllocationsClientGetOptions contains the optional parameters for the IPAllocationsClient.Get method.
+type IPAllocationsClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// IPAllocationsClientListByResourceGroupOptions contains the optional parameters for the IPAllocationsClient.NewListByResourceGroupPager
+// method.
+type IPAllocationsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// IPAllocationsClientListOptions contains the optional parameters for the IPAllocationsClient.NewListPager method.
+type IPAllocationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// IPAllocationsClientUpdateTagsOptions contains the optional parameters for the IPAllocationsClient.UpdateTags method.
+type IPAllocationsClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// IPGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the IPGroupsClient.BeginCreateOrUpdate method.
+type IPGroupsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// IPGroupsClientBeginDeleteOptions contains the optional parameters for the IPGroupsClient.BeginDelete method.
+type IPGroupsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// IPGroupsClientGetOptions contains the optional parameters for the IPGroupsClient.Get method.
+type IPGroupsClientGetOptions struct {
+	// Expands resourceIds (of Firewalls/Network Security Groups etc.) back referenced by the IpGroups resource.
+	Expand *string
+}
+
+// IPGroupsClientListByResourceGroupOptions contains the optional parameters for the IPGroupsClient.NewListByResourceGroupPager
+// method.
+type IPGroupsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// IPGroupsClientListOptions contains the optional parameters for the IPGroupsClient.NewListPager method.
+type IPGroupsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// IPGroupsClientUpdateGroupsOptions contains the optional parameters for the IPGroupsClient.UpdateGroups method.
+type IPGroupsClientUpdateGroupsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InboundNatRulesClientBeginCreateOrUpdateOptions contains the optional parameters for the InboundNatRulesClient.BeginCreateOrUpdate
+// method.
+type InboundNatRulesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// InboundNatRulesClientBeginDeleteOptions contains the optional parameters for the InboundNatRulesClient.BeginDelete method.
+type InboundNatRulesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// InboundNatRulesClientGetOptions contains the optional parameters for the InboundNatRulesClient.Get method.
+type InboundNatRulesClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// InboundNatRulesClientListOptions contains the optional parameters for the InboundNatRulesClient.NewListPager method.
+type InboundNatRulesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InboundSecurityRuleClientBeginCreateOrUpdateOptions contains the optional parameters for the InboundSecurityRuleClient.BeginCreateOrUpdate
+// method.
+type InboundSecurityRuleClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// InterfaceIPConfigurationsClientGetOptions contains the optional parameters for the InterfaceIPConfigurationsClient.Get
+// method.
+type InterfaceIPConfigurationsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InterfaceIPConfigurationsClientListOptions contains the optional parameters for the InterfaceIPConfigurationsClient.NewListPager
+// method.
+type InterfaceIPConfigurationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InterfaceLoadBalancersClientListOptions contains the optional parameters for the InterfaceLoadBalancersClient.NewListPager
+// method.
+type InterfaceLoadBalancersClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InterfaceTapConfigurationsClientBeginCreateOrUpdateOptions contains the optional parameters for the InterfaceTapConfigurationsClient.BeginCreateOrUpdate
+// method.
+type InterfaceTapConfigurationsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// InterfaceTapConfigurationsClientBeginDeleteOptions contains the optional parameters for the InterfaceTapConfigurationsClient.BeginDelete
+// method.
+type InterfaceTapConfigurationsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// InterfaceTapConfigurationsClientGetOptions contains the optional parameters for the InterfaceTapConfigurationsClient.Get
+// method.
+type InterfaceTapConfigurationsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InterfaceTapConfigurationsClientListOptions contains the optional parameters for the InterfaceTapConfigurationsClient.NewListPager
+// method.
+type InterfaceTapConfigurationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InterfacesClientBeginCreateOrUpdateOptions contains the optional parameters for the InterfacesClient.BeginCreateOrUpdate
+// method.
+type InterfacesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// InterfacesClientBeginDeleteOptions contains the optional parameters for the InterfacesClient.BeginDelete method.
+type InterfacesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// InterfacesClientBeginGetEffectiveRouteTableOptions contains the optional parameters for the InterfacesClient.BeginGetEffectiveRouteTable
+// method.
+type InterfacesClientBeginGetEffectiveRouteTableOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// InterfacesClientBeginListEffectiveNetworkSecurityGroupsOptions contains the optional parameters for the InterfacesClient.BeginListEffectiveNetworkSecurityGroups
+// method.
+type InterfacesClientBeginListEffectiveNetworkSecurityGroupsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// InterfacesClientGetCloudServiceNetworkInterfaceOptions contains the optional parameters for the InterfacesClient.GetCloudServiceNetworkInterface
+// method.
+type InterfacesClientGetCloudServiceNetworkInterfaceOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// InterfacesClientGetOptions contains the optional parameters for the InterfacesClient.Get method.
+type InterfacesClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// InterfacesClientGetVirtualMachineScaleSetIPConfigurationOptions contains the optional parameters for the InterfacesClient.GetVirtualMachineScaleSetIPConfiguration
+// method.
+type InterfacesClientGetVirtualMachineScaleSetIPConfigurationOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceOptions contains the optional parameters for the InterfacesClient.GetVirtualMachineScaleSetNetworkInterface
+// method.
+type InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// InterfacesClientListAllOptions contains the optional parameters for the InterfacesClient.NewListAllPager method.
+type InterfacesClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InterfacesClientListCloudServiceNetworkInterfacesOptions contains the optional parameters for the InterfacesClient.NewListCloudServiceNetworkInterfacesPager
+// method.
+type InterfacesClientListCloudServiceNetworkInterfacesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InterfacesClientListCloudServiceRoleInstanceNetworkInterfacesOptions contains the optional parameters for the InterfacesClient.NewListCloudServiceRoleInstanceNetworkInterfacesPager
+// method.
+type InterfacesClientListCloudServiceRoleInstanceNetworkInterfacesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InterfacesClientListOptions contains the optional parameters for the InterfacesClient.NewListPager method.
+type InterfacesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InterfacesClientListVirtualMachineScaleSetIPConfigurationsOptions contains the optional parameters for the InterfacesClient.NewListVirtualMachineScaleSetIPConfigurationsPager
+// method.
+type InterfacesClientListVirtualMachineScaleSetIPConfigurationsOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// InterfacesClientListVirtualMachineScaleSetNetworkInterfacesOptions contains the optional parameters for the InterfacesClient.NewListVirtualMachineScaleSetNetworkInterfacesPager
+// method.
+type InterfacesClientListVirtualMachineScaleSetNetworkInterfacesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InterfacesClientListVirtualMachineScaleSetVMNetworkInterfacesOptions contains the optional parameters for the InterfacesClient.NewListVirtualMachineScaleSetVMNetworkInterfacesPager
+// method.
+type InterfacesClientListVirtualMachineScaleSetVMNetworkInterfacesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// InterfacesClientUpdateTagsOptions contains the optional parameters for the InterfacesClient.UpdateTags method.
+type InterfacesClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancerBackendAddressPoolsClientBeginCreateOrUpdateOptions contains the optional parameters for the LoadBalancerBackendAddressPoolsClient.BeginCreateOrUpdate
+// method.
+type LoadBalancerBackendAddressPoolsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// LoadBalancerBackendAddressPoolsClientBeginDeleteOptions contains the optional parameters for the LoadBalancerBackendAddressPoolsClient.BeginDelete
+// method.
+type LoadBalancerBackendAddressPoolsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// LoadBalancerBackendAddressPoolsClientGetOptions contains the optional parameters for the LoadBalancerBackendAddressPoolsClient.Get
+// method.
+type LoadBalancerBackendAddressPoolsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancerBackendAddressPoolsClientListOptions contains the optional parameters for the LoadBalancerBackendAddressPoolsClient.NewListPager
+// method.
+type LoadBalancerBackendAddressPoolsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancerFrontendIPConfigurationsClientGetOptions contains the optional parameters for the LoadBalancerFrontendIPConfigurationsClient.Get
+// method.
+type LoadBalancerFrontendIPConfigurationsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancerFrontendIPConfigurationsClientListOptions contains the optional parameters for the LoadBalancerFrontendIPConfigurationsClient.NewListPager
+// method.
+type LoadBalancerFrontendIPConfigurationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancerLoadBalancingRulesClientGetOptions contains the optional parameters for the LoadBalancerLoadBalancingRulesClient.Get
+// method.
+type LoadBalancerLoadBalancingRulesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancerLoadBalancingRulesClientListOptions contains the optional parameters for the LoadBalancerLoadBalancingRulesClient.NewListPager
+// method.
+type LoadBalancerLoadBalancingRulesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancerNetworkInterfacesClientListOptions contains the optional parameters for the LoadBalancerNetworkInterfacesClient.NewListPager
+// method.
+type LoadBalancerNetworkInterfacesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancerOutboundRulesClientGetOptions contains the optional parameters for the LoadBalancerOutboundRulesClient.Get
+// method.
+type LoadBalancerOutboundRulesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancerOutboundRulesClientListOptions contains the optional parameters for the LoadBalancerOutboundRulesClient.NewListPager
+// method.
+type LoadBalancerOutboundRulesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancerProbesClientGetOptions contains the optional parameters for the LoadBalancerProbesClient.Get method.
+type LoadBalancerProbesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancerProbesClientListOptions contains the optional parameters for the LoadBalancerProbesClient.NewListPager method.
+type LoadBalancerProbesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancersClientBeginCreateOrUpdateOptions contains the optional parameters for the LoadBalancersClient.BeginCreateOrUpdate
+// method.
+type LoadBalancersClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// LoadBalancersClientBeginDeleteOptions contains the optional parameters for the LoadBalancersClient.BeginDelete method.
+type LoadBalancersClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// LoadBalancersClientBeginListInboundNatRulePortMappingsOptions contains the optional parameters for the LoadBalancersClient.BeginListInboundNatRulePortMappings
+// method.
+type LoadBalancersClientBeginListInboundNatRulePortMappingsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// LoadBalancersClientBeginSwapPublicIPAddressesOptions contains the optional parameters for the LoadBalancersClient.BeginSwapPublicIPAddresses
+// method.
+type LoadBalancersClientBeginSwapPublicIPAddressesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// LoadBalancersClientGetOptions contains the optional parameters for the LoadBalancersClient.Get method.
+type LoadBalancersClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// LoadBalancersClientListAllOptions contains the optional parameters for the LoadBalancersClient.NewListAllPager method.
+type LoadBalancersClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancersClientListOptions contains the optional parameters for the LoadBalancersClient.NewListPager method.
+type LoadBalancersClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LoadBalancersClientMigrateToIPBasedOptions contains the optional parameters for the LoadBalancersClient.MigrateToIPBased
+// method.
+type LoadBalancersClientMigrateToIPBasedOptions struct {
+	// Parameters supplied to the migrateToIpBased Api.
+	Parameters *MigrateLoadBalancerToIPBasedRequest
+}
+
+// LoadBalancersClientUpdateTagsOptions contains the optional parameters for the LoadBalancersClient.UpdateTags method.
+type LoadBalancersClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LocalNetworkGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the LocalNetworkGatewaysClient.BeginCreateOrUpdate
+// method.
+type LocalNetworkGatewaysClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// LocalNetworkGatewaysClientBeginDeleteOptions contains the optional parameters for the LocalNetworkGatewaysClient.BeginDelete
+// method.
+type LocalNetworkGatewaysClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// LocalNetworkGatewaysClientGetOptions contains the optional parameters for the LocalNetworkGatewaysClient.Get method.
+type LocalNetworkGatewaysClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LocalNetworkGatewaysClientListOptions contains the optional parameters for the LocalNetworkGatewaysClient.NewListPager
+// method.
+type LocalNetworkGatewaysClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// LocalNetworkGatewaysClientUpdateTagsOptions contains the optional parameters for the LocalNetworkGatewaysClient.UpdateTags
+// method.
+type LocalNetworkGatewaysClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ManagementClientBeginDeleteBastionShareableLinkOptions contains the optional parameters for the ManagementClient.BeginDeleteBastionShareableLink
+// method.
+type ManagementClientBeginDeleteBastionShareableLinkOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ManagementClientBeginGeneratevirtualwanvpnserverconfigurationvpnprofileOptions contains the optional parameters for the
+// ManagementClient.BeginGeneratevirtualwanvpnserverconfigurationvpnprofile method.
+type ManagementClientBeginGeneratevirtualwanvpnserverconfigurationvpnprofileOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ManagementClientBeginGetActiveSessionsOptions contains the optional parameters for the ManagementClient.BeginGetActiveSessions
+// method.
+type ManagementClientBeginGetActiveSessionsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ManagementClientBeginPutBastionShareableLinkOptions contains the optional parameters for the ManagementClient.BeginPutBastionShareableLink
+// method.
+type ManagementClientBeginPutBastionShareableLinkOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ManagementClientCheckDNSNameAvailabilityOptions contains the optional parameters for the ManagementClient.CheckDNSNameAvailability
+// method.
+type ManagementClientCheckDNSNameAvailabilityOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ManagementClientDisconnectActiveSessionsOptions contains the optional parameters for the ManagementClient.NewDisconnectActiveSessionsPager
+// method.
+type ManagementClientDisconnectActiveSessionsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ManagementClientExpressRouteProviderPortOptions contains the optional parameters for the ManagementClient.ExpressRouteProviderPort
+// method.
+type ManagementClientExpressRouteProviderPortOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ManagementClientGetBastionShareableLinkOptions contains the optional parameters for the ManagementClient.NewGetBastionShareableLinkPager
+// method.
+type ManagementClientGetBastionShareableLinkOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ManagementClientListActiveConnectivityConfigurationsOptions contains the optional parameters for the ManagementClient.ListActiveConnectivityConfigurations
+// method.
+type ManagementClientListActiveConnectivityConfigurationsOptions struct {
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// ManagementClientListActiveSecurityAdminRulesOptions contains the optional parameters for the ManagementClient.ListActiveSecurityAdminRules
+// method.
+type ManagementClientListActiveSecurityAdminRulesOptions struct {
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsOptions contains the optional parameters for the ManagementClient.ListNetworkManagerEffectiveConnectivityConfigurations
+// method.
+type ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsOptions struct {
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// ManagementClientListNetworkManagerEffectiveSecurityAdminRulesOptions contains the optional parameters for the ManagementClient.ListNetworkManagerEffectiveSecurityAdminRules
+// method.
+type ManagementClientListNetworkManagerEffectiveSecurityAdminRulesOptions struct {
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// ManagementClientSupportedSecurityProvidersOptions contains the optional parameters for the ManagementClient.SupportedSecurityProviders
+// method.
+type ManagementClientSupportedSecurityProvidersOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateOptions contains the optional parameters for the ManagementGroupNetworkManagerConnectionsClient.CreateOrUpdate
+// method.
+type ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ManagementGroupNetworkManagerConnectionsClientDeleteOptions contains the optional parameters for the ManagementGroupNetworkManagerConnectionsClient.Delete
+// method.
+type ManagementGroupNetworkManagerConnectionsClientDeleteOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ManagementGroupNetworkManagerConnectionsClientGetOptions contains the optional parameters for the ManagementGroupNetworkManagerConnectionsClient.Get
+// method.
+type ManagementGroupNetworkManagerConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ManagementGroupNetworkManagerConnectionsClientListOptions contains the optional parameters for the ManagementGroupNetworkManagerConnectionsClient.NewListPager
+// method.
+type ManagementGroupNetworkManagerConnectionsClientListOptions struct {
+	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
+	// the value of the nextLink element will include a skipToken parameter that
+	// specifies a starting point to use for subsequent calls.
+	SkipToken *string
+
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// ManagerCommitsClientBeginPostOptions contains the optional parameters for the ManagerCommitsClient.BeginPost method.
+type ManagerCommitsClientBeginPostOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ManagerDeploymentStatusClientListOptions contains the optional parameters for the ManagerDeploymentStatusClient.List method.
+type ManagerDeploymentStatusClientListOptions struct {
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// ManagersClientBeginDeleteOptions contains the optional parameters for the ManagersClient.BeginDelete method.
+type ManagersClientBeginDeleteOptions struct {
+	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
+	// will do a cleanup deployment in the background, prior to the delete.
+	Force *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ManagersClientCreateOrUpdateOptions contains the optional parameters for the ManagersClient.CreateOrUpdate method.
+type ManagersClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ManagersClientGetOptions contains the optional parameters for the ManagersClient.Get method.
+type ManagersClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ManagersClientListBySubscriptionOptions contains the optional parameters for the ManagersClient.NewListBySubscriptionPager
+// method.
+type ManagersClientListBySubscriptionOptions struct {
+	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
+	// the value of the nextLink element will include a skipToken parameter that
+	// specifies a starting point to use for subsequent calls.
+	SkipToken *string
+
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// ManagersClientListOptions contains the optional parameters for the ManagersClient.NewListPager method.
+type ManagersClientListOptions struct {
+	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
+	// the value of the nextLink element will include a skipToken parameter that
+	// specifies a starting point to use for subsequent calls.
+	SkipToken *string
+
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// ManagersClientPatchOptions contains the optional parameters for the ManagersClient.Patch method.
+type ManagersClientPatchOptions struct {
+	// placeholder for future optional parameters
+}
+
+// NatGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the NatGatewaysClient.BeginCreateOrUpdate
+// method.
+type NatGatewaysClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// NatGatewaysClientBeginDeleteOptions contains the optional parameters for the NatGatewaysClient.BeginDelete method.
+type NatGatewaysClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// NatGatewaysClientGetOptions contains the optional parameters for the NatGatewaysClient.Get method.
+type NatGatewaysClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// NatGatewaysClientListAllOptions contains the optional parameters for the NatGatewaysClient.NewListAllPager method.
+type NatGatewaysClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// NatGatewaysClientListOptions contains the optional parameters for the NatGatewaysClient.NewListPager method.
+type NatGatewaysClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// NatGatewaysClientUpdateTagsOptions contains the optional parameters for the NatGatewaysClient.UpdateTags method.
+type NatGatewaysClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// NatRulesClientBeginCreateOrUpdateOptions contains the optional parameters for the NatRulesClient.BeginCreateOrUpdate method.
+type NatRulesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// NatRulesClientBeginDeleteOptions contains the optional parameters for the NatRulesClient.BeginDelete method.
+type NatRulesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// NatRulesClientGetOptions contains the optional parameters for the NatRulesClient.Get method.
+type NatRulesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// NatRulesClientListByVPNGatewayOptions contains the optional parameters for the NatRulesClient.NewListByVPNGatewayPager
+// method.
+type NatRulesClientListByVPNGatewayOptions struct {
+	// placeholder for future optional parameters
+}
+
+// OperationsClientListOptions contains the optional parameters for the OperationsClient.NewListPager method.
+type OperationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// P2SVPNGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginCreateOrUpdate
+// method.
+type P2SVPNGatewaysClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// P2SVPNGatewaysClientBeginDeleteOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginDelete method.
+type P2SVPNGatewaysClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// P2SVPNGatewaysClientBeginDisconnectP2SVPNConnectionsOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginDisconnectP2SVPNConnections
+// method.
+type P2SVPNGatewaysClientBeginDisconnectP2SVPNConnectionsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// P2SVPNGatewaysClientBeginGenerateVPNProfileOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginGenerateVPNProfile
+// method.
+type P2SVPNGatewaysClientBeginGenerateVPNProfileOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// P2SVPNGatewaysClientBeginGetP2SVPNConnectionHealthDetailedOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginGetP2SVPNConnectionHealthDetailed
+// method.
+type P2SVPNGatewaysClientBeginGetP2SVPNConnectionHealthDetailedOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// P2SVPNGatewaysClientBeginGetP2SVPNConnectionHealthOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginGetP2SVPNConnectionHealth
+// method.
+type P2SVPNGatewaysClientBeginGetP2SVPNConnectionHealthOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// P2SVPNGatewaysClientBeginResetOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginReset method.
+type P2SVPNGatewaysClientBeginResetOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// P2SVPNGatewaysClientBeginUpdateTagsOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginUpdateTags
+// method.
+type P2SVPNGatewaysClientBeginUpdateTagsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// P2SVPNGatewaysClientGetOptions contains the optional parameters for the P2SVPNGatewaysClient.Get method.
+type P2SVPNGatewaysClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// P2SVPNGatewaysClientListByResourceGroupOptions contains the optional parameters for the P2SVPNGatewaysClient.NewListByResourceGroupPager
+// method.
+type P2SVPNGatewaysClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// P2SVPNGatewaysClientListOptions contains the optional parameters for the P2SVPNGatewaysClient.NewListPager method.
+type P2SVPNGatewaysClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PacketCapturesClientBeginCreateOptions contains the optional parameters for the PacketCapturesClient.BeginCreate method.
+type PacketCapturesClientBeginCreateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PacketCapturesClientBeginDeleteOptions contains the optional parameters for the PacketCapturesClient.BeginDelete method.
+type PacketCapturesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PacketCapturesClientBeginGetStatusOptions contains the optional parameters for the PacketCapturesClient.BeginGetStatus
+// method.
+type PacketCapturesClientBeginGetStatusOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PacketCapturesClientBeginStopOptions contains the optional parameters for the PacketCapturesClient.BeginStop method.
+type PacketCapturesClientBeginStopOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PacketCapturesClientGetOptions contains the optional parameters for the PacketCapturesClient.Get method.
+type PacketCapturesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PacketCapturesClientListOptions contains the optional parameters for the PacketCapturesClient.NewListPager method.
+type PacketCapturesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PeerExpressRouteCircuitConnectionsClientGetOptions contains the optional parameters for the PeerExpressRouteCircuitConnectionsClient.Get
+// method.
+type PeerExpressRouteCircuitConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PeerExpressRouteCircuitConnectionsClientListOptions contains the optional parameters for the PeerExpressRouteCircuitConnectionsClient.NewListPager
+// method.
+type PeerExpressRouteCircuitConnectionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PrivateDNSZoneGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the PrivateDNSZoneGroupsClient.BeginCreateOrUpdate
+// method.
+type PrivateDNSZoneGroupsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PrivateDNSZoneGroupsClientBeginDeleteOptions contains the optional parameters for the PrivateDNSZoneGroupsClient.BeginDelete
+// method.
+type PrivateDNSZoneGroupsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PrivateDNSZoneGroupsClientGetOptions contains the optional parameters for the PrivateDNSZoneGroupsClient.Get method.
+type PrivateDNSZoneGroupsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PrivateDNSZoneGroupsClientListOptions contains the optional parameters for the PrivateDNSZoneGroupsClient.NewListPager
+// method.
+type PrivateDNSZoneGroupsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PrivateEndpointsClientBeginCreateOrUpdateOptions contains the optional parameters for the PrivateEndpointsClient.BeginCreateOrUpdate
+// method.
+type PrivateEndpointsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PrivateEndpointsClientBeginDeleteOptions contains the optional parameters for the PrivateEndpointsClient.BeginDelete method.
+type PrivateEndpointsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PrivateEndpointsClientGetOptions contains the optional parameters for the PrivateEndpointsClient.Get method.
+type PrivateEndpointsClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// PrivateEndpointsClientListBySubscriptionOptions contains the optional parameters for the PrivateEndpointsClient.NewListBySubscriptionPager
+// method.
+type PrivateEndpointsClientListBySubscriptionOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PrivateEndpointsClientListOptions contains the optional parameters for the PrivateEndpointsClient.NewListPager method.
+type PrivateEndpointsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PrivateLinkServicesClientBeginCheckPrivateLinkServiceVisibilityByResourceGroupOptions contains the optional parameters
+// for the PrivateLinkServicesClient.BeginCheckPrivateLinkServiceVisibilityByResourceGroup method.
+type PrivateLinkServicesClientBeginCheckPrivateLinkServiceVisibilityByResourceGroupOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PrivateLinkServicesClientBeginCheckPrivateLinkServiceVisibilityOptions contains the optional parameters for the PrivateLinkServicesClient.BeginCheckPrivateLinkServiceVisibility
+// method.
+type PrivateLinkServicesClientBeginCheckPrivateLinkServiceVisibilityOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PrivateLinkServicesClientBeginCreateOrUpdateOptions contains the optional parameters for the PrivateLinkServicesClient.BeginCreateOrUpdate
+// method.
+type PrivateLinkServicesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PrivateLinkServicesClientBeginDeleteOptions contains the optional parameters for the PrivateLinkServicesClient.BeginDelete
+// method.
+type PrivateLinkServicesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PrivateLinkServicesClientBeginDeletePrivateEndpointConnectionOptions contains the optional parameters for the PrivateLinkServicesClient.BeginDeletePrivateEndpointConnection
+// method.
+type PrivateLinkServicesClientBeginDeletePrivateEndpointConnectionOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PrivateLinkServicesClientGetOptions contains the optional parameters for the PrivateLinkServicesClient.Get method.
+type PrivateLinkServicesClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// PrivateLinkServicesClientGetPrivateEndpointConnectionOptions contains the optional parameters for the PrivateLinkServicesClient.GetPrivateEndpointConnection
+// method.
+type PrivateLinkServicesClientGetPrivateEndpointConnectionOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupOptions contains the optional parameters for
+// the PrivateLinkServicesClient.NewListAutoApprovedPrivateLinkServicesByResourceGroupPager method.
+type PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesOptions contains the optional parameters for the PrivateLinkServicesClient.NewListAutoApprovedPrivateLinkServicesPager
+// method.
+type PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PrivateLinkServicesClientListBySubscriptionOptions contains the optional parameters for the PrivateLinkServicesClient.NewListBySubscriptionPager
+// method.
+type PrivateLinkServicesClientListBySubscriptionOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PrivateLinkServicesClientListOptions contains the optional parameters for the PrivateLinkServicesClient.NewListPager method.
+type PrivateLinkServicesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PrivateLinkServicesClientListPrivateEndpointConnectionsOptions contains the optional parameters for the PrivateLinkServicesClient.NewListPrivateEndpointConnectionsPager
+// method.
+type PrivateLinkServicesClientListPrivateEndpointConnectionsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PrivateLinkServicesClientUpdatePrivateEndpointConnectionOptions contains the optional parameters for the PrivateLinkServicesClient.UpdatePrivateEndpointConnection
+// method.
+type PrivateLinkServicesClientUpdatePrivateEndpointConnectionOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ProfilesClientBeginDeleteOptions contains the optional parameters for the ProfilesClient.BeginDelete method.
+type ProfilesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ProfilesClientCreateOrUpdateOptions contains the optional parameters for the ProfilesClient.CreateOrUpdate method.
+type ProfilesClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ProfilesClientGetOptions contains the optional parameters for the ProfilesClient.Get method.
+type ProfilesClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// ProfilesClientListAllOptions contains the optional parameters for the ProfilesClient.NewListAllPager method.
+type ProfilesClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ProfilesClientListOptions contains the optional parameters for the ProfilesClient.NewListPager method.
+type ProfilesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ProfilesClientUpdateTagsOptions contains the optional parameters for the ProfilesClient.UpdateTags method.
+type ProfilesClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PublicIPAddressesClientBeginCreateOrUpdateOptions contains the optional parameters for the PublicIPAddressesClient.BeginCreateOrUpdate
+// method.
+type PublicIPAddressesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PublicIPAddressesClientBeginDdosProtectionStatusOptions contains the optional parameters for the PublicIPAddressesClient.BeginDdosProtectionStatus
+// method.
+type PublicIPAddressesClientBeginDdosProtectionStatusOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PublicIPAddressesClientBeginDeleteOptions contains the optional parameters for the PublicIPAddressesClient.BeginDelete
+// method.
+type PublicIPAddressesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PublicIPAddressesClientGetCloudServicePublicIPAddressOptions contains the optional parameters for the PublicIPAddressesClient.GetCloudServicePublicIPAddress
+// method.
+type PublicIPAddressesClientGetCloudServicePublicIPAddressOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// PublicIPAddressesClientGetOptions contains the optional parameters for the PublicIPAddressesClient.Get method.
+type PublicIPAddressesClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressOptions contains the optional parameters for the PublicIPAddressesClient.GetVirtualMachineScaleSetPublicIPAddress
+// method.
+type PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// PublicIPAddressesClientListAllOptions contains the optional parameters for the PublicIPAddressesClient.NewListAllPager
+// method.
+type PublicIPAddressesClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PublicIPAddressesClientListCloudServicePublicIPAddressesOptions contains the optional parameters for the PublicIPAddressesClient.NewListCloudServicePublicIPAddressesPager
+// method.
+type PublicIPAddressesClientListCloudServicePublicIPAddressesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PublicIPAddressesClientListCloudServiceRoleInstancePublicIPAddressesOptions contains the optional parameters for the PublicIPAddressesClient.NewListCloudServiceRoleInstancePublicIPAddressesPager
+// method.
+type PublicIPAddressesClientListCloudServiceRoleInstancePublicIPAddressesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PublicIPAddressesClientListOptions contains the optional parameters for the PublicIPAddressesClient.NewListPager method.
+type PublicIPAddressesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PublicIPAddressesClientListVirtualMachineScaleSetPublicIPAddressesOptions contains the optional parameters for the PublicIPAddressesClient.NewListVirtualMachineScaleSetPublicIPAddressesPager
+// method.
+type PublicIPAddressesClientListVirtualMachineScaleSetPublicIPAddressesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PublicIPAddressesClientListVirtualMachineScaleSetVMPublicIPAddressesOptions contains the optional parameters for the PublicIPAddressesClient.NewListVirtualMachineScaleSetVMPublicIPAddressesPager
+// method.
+type PublicIPAddressesClientListVirtualMachineScaleSetVMPublicIPAddressesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PublicIPAddressesClientUpdateTagsOptions contains the optional parameters for the PublicIPAddressesClient.UpdateTags method.
+type PublicIPAddressesClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PublicIPPrefixesClientBeginCreateOrUpdateOptions contains the optional parameters for the PublicIPPrefixesClient.BeginCreateOrUpdate
+// method.
+type PublicIPPrefixesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PublicIPPrefixesClientBeginDeleteOptions contains the optional parameters for the PublicIPPrefixesClient.BeginDelete method.
+type PublicIPPrefixesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// PublicIPPrefixesClientGetOptions contains the optional parameters for the PublicIPPrefixesClient.Get method.
+type PublicIPPrefixesClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// PublicIPPrefixesClientListAllOptions contains the optional parameters for the PublicIPPrefixesClient.NewListAllPager method.
+type PublicIPPrefixesClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PublicIPPrefixesClientListOptions contains the optional parameters for the PublicIPPrefixesClient.NewListPager method.
+type PublicIPPrefixesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// PublicIPPrefixesClientUpdateTagsOptions contains the optional parameters for the PublicIPPrefixesClient.UpdateTags method.
+type PublicIPPrefixesClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ResourceNavigationLinksClientListOptions contains the optional parameters for the ResourceNavigationLinksClient.List method.
+type ResourceNavigationLinksClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RouteFilterRulesClientBeginCreateOrUpdateOptions contains the optional parameters for the RouteFilterRulesClient.BeginCreateOrUpdate
+// method.
+type RouteFilterRulesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RouteFilterRulesClientBeginDeleteOptions contains the optional parameters for the RouteFilterRulesClient.BeginDelete method.
+type RouteFilterRulesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RouteFilterRulesClientGetOptions contains the optional parameters for the RouteFilterRulesClient.Get method.
+type RouteFilterRulesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RouteFilterRulesClientListByRouteFilterOptions contains the optional parameters for the RouteFilterRulesClient.NewListByRouteFilterPager
+// method.
+type RouteFilterRulesClientListByRouteFilterOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RouteFiltersClientBeginCreateOrUpdateOptions contains the optional parameters for the RouteFiltersClient.BeginCreateOrUpdate
+// method.
+type RouteFiltersClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RouteFiltersClientBeginDeleteOptions contains the optional parameters for the RouteFiltersClient.BeginDelete method.
+type RouteFiltersClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RouteFiltersClientGetOptions contains the optional parameters for the RouteFiltersClient.Get method.
+type RouteFiltersClientGetOptions struct {
+	// Expands referenced express route bgp peering resources.
+	Expand *string
+}
+
+// RouteFiltersClientListByResourceGroupOptions contains the optional parameters for the RouteFiltersClient.NewListByResourceGroupPager
+// method.
+type RouteFiltersClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RouteFiltersClientListOptions contains the optional parameters for the RouteFiltersClient.NewListPager method.
+type RouteFiltersClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RouteFiltersClientUpdateTagsOptions contains the optional parameters for the RouteFiltersClient.UpdateTags method.
+type RouteFiltersClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RouteMapsClientBeginCreateOrUpdateOptions contains the optional parameters for the RouteMapsClient.BeginCreateOrUpdate
+// method.
+type RouteMapsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RouteMapsClientBeginDeleteOptions contains the optional parameters for the RouteMapsClient.BeginDelete method.
+type RouteMapsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RouteMapsClientGetOptions contains the optional parameters for the RouteMapsClient.Get method.
+type RouteMapsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RouteMapsClientListOptions contains the optional parameters for the RouteMapsClient.NewListPager method.
+type RouteMapsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RouteTablesClientBeginCreateOrUpdateOptions contains the optional parameters for the RouteTablesClient.BeginCreateOrUpdate
+// method.
+type RouteTablesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RouteTablesClientBeginDeleteOptions contains the optional parameters for the RouteTablesClient.BeginDelete method.
+type RouteTablesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RouteTablesClientGetOptions contains the optional parameters for the RouteTablesClient.Get method.
+type RouteTablesClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// RouteTablesClientListAllOptions contains the optional parameters for the RouteTablesClient.NewListAllPager method.
+type RouteTablesClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RouteTablesClientListOptions contains the optional parameters for the RouteTablesClient.NewListPager method.
+type RouteTablesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RouteTablesClientUpdateTagsOptions contains the optional parameters for the RouteTablesClient.UpdateTags method.
+type RouteTablesClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RoutesClientBeginCreateOrUpdateOptions contains the optional parameters for the RoutesClient.BeginCreateOrUpdate method.
+type RoutesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RoutesClientBeginDeleteOptions contains the optional parameters for the RoutesClient.BeginDelete method.
+type RoutesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RoutesClientGetOptions contains the optional parameters for the RoutesClient.Get method.
+type RoutesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RoutesClientListOptions contains the optional parameters for the RoutesClient.NewListPager method.
+type RoutesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RoutingIntentClientBeginCreateOrUpdateOptions contains the optional parameters for the RoutingIntentClient.BeginCreateOrUpdate
+// method.
+type RoutingIntentClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RoutingIntentClientBeginDeleteOptions contains the optional parameters for the RoutingIntentClient.BeginDelete method.
+type RoutingIntentClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// RoutingIntentClientGetOptions contains the optional parameters for the RoutingIntentClient.Get method.
+type RoutingIntentClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// RoutingIntentClientListOptions contains the optional parameters for the RoutingIntentClient.NewListPager method.
+type RoutingIntentClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ScopeConnectionsClientCreateOrUpdateOptions contains the optional parameters for the ScopeConnectionsClient.CreateOrUpdate
+// method.
+type ScopeConnectionsClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ScopeConnectionsClientDeleteOptions contains the optional parameters for the ScopeConnectionsClient.Delete method.
+type ScopeConnectionsClientDeleteOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ScopeConnectionsClientGetOptions contains the optional parameters for the ScopeConnectionsClient.Get method.
+type ScopeConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ScopeConnectionsClientListOptions contains the optional parameters for the ScopeConnectionsClient.NewListPager method.
+type ScopeConnectionsClientListOptions struct {
+	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
+	// the value of the nextLink element will include a skipToken parameter that
+	// specifies a starting point to use for subsequent calls.
+	SkipToken *string
+
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// SecurityAdminConfigurationsClientBeginDeleteOptions contains the optional parameters for the SecurityAdminConfigurationsClient.BeginDelete
+// method.
+type SecurityAdminConfigurationsClientBeginDeleteOptions struct {
+	// Deletes the resource even if it is part of a deployed configuration. If the configuration has been deployed, the service
+	// will do a cleanup deployment in the background, prior to the delete.
+	Force *bool
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SecurityAdminConfigurationsClientCreateOrUpdateOptions contains the optional parameters for the SecurityAdminConfigurationsClient.CreateOrUpdate
+// method.
+type SecurityAdminConfigurationsClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SecurityAdminConfigurationsClientGetOptions contains the optional parameters for the SecurityAdminConfigurationsClient.Get
+// method.
+type SecurityAdminConfigurationsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SecurityAdminConfigurationsClientListOptions contains the optional parameters for the SecurityAdminConfigurationsClient.NewListPager
+// method.
+type SecurityAdminConfigurationsClientListOptions struct {
+	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
+	// the value of the nextLink element will include a skipToken parameter that
+	// specifies a starting point to use for subsequent calls.
+	SkipToken *string
+
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// SecurityGroupsClientBeginCreateOrUpdateOptions contains the optional parameters for the SecurityGroupsClient.BeginCreateOrUpdate
+// method.
+type SecurityGroupsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SecurityGroupsClientBeginDeleteOptions contains the optional parameters for the SecurityGroupsClient.BeginDelete method.
+type SecurityGroupsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SecurityGroupsClientGetOptions contains the optional parameters for the SecurityGroupsClient.Get method.
+type SecurityGroupsClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// SecurityGroupsClientListAllOptions contains the optional parameters for the SecurityGroupsClient.NewListAllPager method.
+type SecurityGroupsClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SecurityGroupsClientListOptions contains the optional parameters for the SecurityGroupsClient.NewListPager method.
+type SecurityGroupsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SecurityGroupsClientUpdateTagsOptions contains the optional parameters for the SecurityGroupsClient.UpdateTags method.
+type SecurityGroupsClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SecurityPartnerProvidersClientBeginCreateOrUpdateOptions contains the optional parameters for the SecurityPartnerProvidersClient.BeginCreateOrUpdate
+// method.
+type SecurityPartnerProvidersClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SecurityPartnerProvidersClientBeginDeleteOptions contains the optional parameters for the SecurityPartnerProvidersClient.BeginDelete
+// method.
+type SecurityPartnerProvidersClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SecurityPartnerProvidersClientGetOptions contains the optional parameters for the SecurityPartnerProvidersClient.Get method.
+type SecurityPartnerProvidersClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SecurityPartnerProvidersClientListByResourceGroupOptions contains the optional parameters for the SecurityPartnerProvidersClient.NewListByResourceGroupPager
+// method.
+type SecurityPartnerProvidersClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SecurityPartnerProvidersClientListOptions contains the optional parameters for the SecurityPartnerProvidersClient.NewListPager
+// method.
+type SecurityPartnerProvidersClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SecurityPartnerProvidersClientUpdateTagsOptions contains the optional parameters for the SecurityPartnerProvidersClient.UpdateTags
+// method.
+type SecurityPartnerProvidersClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SecurityRulesClientBeginCreateOrUpdateOptions contains the optional parameters for the SecurityRulesClient.BeginCreateOrUpdate
+// method.
+type SecurityRulesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SecurityRulesClientBeginDeleteOptions contains the optional parameters for the SecurityRulesClient.BeginDelete method.
+type SecurityRulesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SecurityRulesClientGetOptions contains the optional parameters for the SecurityRulesClient.Get method.
+type SecurityRulesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SecurityRulesClientListOptions contains the optional parameters for the SecurityRulesClient.NewListPager method.
+type SecurityRulesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ServiceAssociationLinksClientListOptions contains the optional parameters for the ServiceAssociationLinksClient.List method.
+type ServiceAssociationLinksClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ServiceEndpointPoliciesClientBeginCreateOrUpdateOptions contains the optional parameters for the ServiceEndpointPoliciesClient.BeginCreateOrUpdate
+// method.
+type ServiceEndpointPoliciesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ServiceEndpointPoliciesClientBeginDeleteOptions contains the optional parameters for the ServiceEndpointPoliciesClient.BeginDelete
+// method.
+type ServiceEndpointPoliciesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ServiceEndpointPoliciesClientGetOptions contains the optional parameters for the ServiceEndpointPoliciesClient.Get method.
+type ServiceEndpointPoliciesClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// ServiceEndpointPoliciesClientListByResourceGroupOptions contains the optional parameters for the ServiceEndpointPoliciesClient.NewListByResourceGroupPager
+// method.
+type ServiceEndpointPoliciesClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ServiceEndpointPoliciesClientListOptions contains the optional parameters for the ServiceEndpointPoliciesClient.NewListPager
+// method.
+type ServiceEndpointPoliciesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ServiceEndpointPoliciesClientUpdateTagsOptions contains the optional parameters for the ServiceEndpointPoliciesClient.UpdateTags
+// method.
+type ServiceEndpointPoliciesClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ServiceEndpointPolicyDefinitionsClientBeginCreateOrUpdateOptions contains the optional parameters for the ServiceEndpointPolicyDefinitionsClient.BeginCreateOrUpdate
+// method.
+type ServiceEndpointPolicyDefinitionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ServiceEndpointPolicyDefinitionsClientBeginDeleteOptions contains the optional parameters for the ServiceEndpointPolicyDefinitionsClient.BeginDelete
+// method.
+type ServiceEndpointPolicyDefinitionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// ServiceEndpointPolicyDefinitionsClientGetOptions contains the optional parameters for the ServiceEndpointPolicyDefinitionsClient.Get
+// method.
+type ServiceEndpointPolicyDefinitionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ServiceEndpointPolicyDefinitionsClientListByResourceGroupOptions contains the optional parameters for the ServiceEndpointPolicyDefinitionsClient.NewListByResourceGroupPager
+// method.
+type ServiceEndpointPolicyDefinitionsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// ServiceTagInformationClientListOptions contains the optional parameters for the ServiceTagInformationClient.NewListPager
+// method.
+type ServiceTagInformationClientListOptions struct {
+	// Do not return address prefixes for the tag(s).
+	NoAddressPrefixes *bool
+
+	// Return tag information for a particular tag.
+	TagName *string
+}
+
+// ServiceTagsClientListOptions contains the optional parameters for the ServiceTagsClient.List method.
+type ServiceTagsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// StaticMembersClientCreateOrUpdateOptions contains the optional parameters for the StaticMembersClient.CreateOrUpdate method.
+type StaticMembersClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// StaticMembersClientDeleteOptions contains the optional parameters for the StaticMembersClient.Delete method.
+type StaticMembersClientDeleteOptions struct {
+	// placeholder for future optional parameters
+}
+
+// StaticMembersClientGetOptions contains the optional parameters for the StaticMembersClient.Get method.
+type StaticMembersClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// StaticMembersClientListOptions contains the optional parameters for the StaticMembersClient.NewListPager method.
+type StaticMembersClientListOptions struct {
+	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
+	// the value of the nextLink element will include a skipToken parameter that
+	// specifies a starting point to use for subsequent calls.
+	SkipToken *string
+
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// SubnetsClientBeginCreateOrUpdateOptions contains the optional parameters for the SubnetsClient.BeginCreateOrUpdate method.
+type SubnetsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SubnetsClientBeginDeleteOptions contains the optional parameters for the SubnetsClient.BeginDelete method.
+type SubnetsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SubnetsClientBeginPrepareNetworkPoliciesOptions contains the optional parameters for the SubnetsClient.BeginPrepareNetworkPolicies
+// method.
+type SubnetsClientBeginPrepareNetworkPoliciesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SubnetsClientBeginUnprepareNetworkPoliciesOptions contains the optional parameters for the SubnetsClient.BeginUnprepareNetworkPolicies
+// method.
+type SubnetsClientBeginUnprepareNetworkPoliciesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// SubnetsClientGetOptions contains the optional parameters for the SubnetsClient.Get method.
+type SubnetsClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// SubnetsClientListOptions contains the optional parameters for the SubnetsClient.NewListPager method.
+type SubnetsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SubscriptionNetworkManagerConnectionsClientCreateOrUpdateOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.CreateOrUpdate
+// method.
+type SubscriptionNetworkManagerConnectionsClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SubscriptionNetworkManagerConnectionsClientDeleteOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.Delete
+// method.
+type SubscriptionNetworkManagerConnectionsClientDeleteOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SubscriptionNetworkManagerConnectionsClientGetOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.Get
+// method.
+type SubscriptionNetworkManagerConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// SubscriptionNetworkManagerConnectionsClientListOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.NewListPager
+// method.
+type SubscriptionNetworkManagerConnectionsClientListOptions struct {
+	// SkipToken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element,
+	// the value of the nextLink element will include a skipToken parameter that
+	// specifies a starting point to use for subsequent calls.
+	SkipToken *string
+
+	// An optional query parameter which specifies the maximum number of records to be returned by the server.
+	Top *int32
+}
+
+// UsagesClientListOptions contains the optional parameters for the UsagesClient.NewListPager method.
+type UsagesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VPNConnectionsClient.BeginCreateOrUpdate
+// method.
+type VPNConnectionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNConnectionsClientBeginDeleteOptions contains the optional parameters for the VPNConnectionsClient.BeginDelete method.
+type VPNConnectionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNConnectionsClientBeginStartPacketCaptureOptions contains the optional parameters for the VPNConnectionsClient.BeginStartPacketCapture
+// method.
+type VPNConnectionsClientBeginStartPacketCaptureOptions struct {
+	// Vpn Connection packet capture parameters supplied to start packet capture on gateway connection.
+	Parameters *VPNConnectionPacketCaptureStartParameters
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNConnectionsClientBeginStopPacketCaptureOptions contains the optional parameters for the VPNConnectionsClient.BeginStopPacketCapture
+// method.
+type VPNConnectionsClientBeginStopPacketCaptureOptions struct {
+	// Vpn Connection packet capture parameters supplied to stop packet capture on gateway connection.
+	Parameters *VPNConnectionPacketCaptureStopParameters
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNConnectionsClientGetOptions contains the optional parameters for the VPNConnectionsClient.Get method.
+type VPNConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNConnectionsClientListByVPNGatewayOptions contains the optional parameters for the VPNConnectionsClient.NewListByVPNGatewayPager
+// method.
+type VPNConnectionsClientListByVPNGatewayOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the VPNGatewaysClient.BeginCreateOrUpdate
+// method.
+type VPNGatewaysClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNGatewaysClientBeginDeleteOptions contains the optional parameters for the VPNGatewaysClient.BeginDelete method.
+type VPNGatewaysClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNGatewaysClientBeginResetOptions contains the optional parameters for the VPNGatewaysClient.BeginReset method.
+type VPNGatewaysClientBeginResetOptions struct {
+	// VpnGateway ipConfigurationId to specify the gateway instance.
+	IPConfigurationID *string
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNGatewaysClientBeginStartPacketCaptureOptions contains the optional parameters for the VPNGatewaysClient.BeginStartPacketCapture
+// method.
+type VPNGatewaysClientBeginStartPacketCaptureOptions struct {
+	// Vpn gateway packet capture parameters supplied to start packet capture on vpn gateway.
+	Parameters *VPNGatewayPacketCaptureStartParameters
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNGatewaysClientBeginStopPacketCaptureOptions contains the optional parameters for the VPNGatewaysClient.BeginStopPacketCapture
+// method.
+type VPNGatewaysClientBeginStopPacketCaptureOptions struct {
+	// Vpn gateway packet capture parameters supplied to stop packet capture on vpn gateway.
+	Parameters *VPNGatewayPacketCaptureStopParameters
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNGatewaysClientBeginUpdateTagsOptions contains the optional parameters for the VPNGatewaysClient.BeginUpdateTags method.
+type VPNGatewaysClientBeginUpdateTagsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNGatewaysClientGetOptions contains the optional parameters for the VPNGatewaysClient.Get method.
+type VPNGatewaysClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNGatewaysClientListByResourceGroupOptions contains the optional parameters for the VPNGatewaysClient.NewListByResourceGroupPager
+// method.
+type VPNGatewaysClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNGatewaysClientListOptions contains the optional parameters for the VPNGatewaysClient.NewListPager method.
+type VPNGatewaysClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNLinkConnectionsClientBeginGetIkeSasOptions contains the optional parameters for the VPNLinkConnectionsClient.BeginGetIkeSas
+// method.
+type VPNLinkConnectionsClientBeginGetIkeSasOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNLinkConnectionsClientBeginResetConnectionOptions contains the optional parameters for the VPNLinkConnectionsClient.BeginResetConnection
+// method.
+type VPNLinkConnectionsClientBeginResetConnectionOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNLinkConnectionsClientListByVPNConnectionOptions contains the optional parameters for the VPNLinkConnectionsClient.NewListByVPNConnectionPager
+// method.
+type VPNLinkConnectionsClientListByVPNConnectionOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNServerConfigurationsAssociatedWithVirtualWanClientBeginListOptions contains the optional parameters for the VPNServerConfigurationsAssociatedWithVirtualWanClient.BeginList
+// method.
+type VPNServerConfigurationsAssociatedWithVirtualWanClientBeginListOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNServerConfigurationsClientBeginCreateOrUpdateOptions contains the optional parameters for the VPNServerConfigurationsClient.BeginCreateOrUpdate
+// method.
+type VPNServerConfigurationsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNServerConfigurationsClientBeginDeleteOptions contains the optional parameters for the VPNServerConfigurationsClient.BeginDelete
+// method.
+type VPNServerConfigurationsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNServerConfigurationsClientGetOptions contains the optional parameters for the VPNServerConfigurationsClient.Get method.
+type VPNServerConfigurationsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNServerConfigurationsClientListByResourceGroupOptions contains the optional parameters for the VPNServerConfigurationsClient.NewListByResourceGroupPager
+// method.
+type VPNServerConfigurationsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNServerConfigurationsClientListOptions contains the optional parameters for the VPNServerConfigurationsClient.NewListPager
+// method.
+type VPNServerConfigurationsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNServerConfigurationsClientUpdateTagsOptions contains the optional parameters for the VPNServerConfigurationsClient.UpdateTags
+// method.
+type VPNServerConfigurationsClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNSiteLinkConnectionsClientGetOptions contains the optional parameters for the VPNSiteLinkConnectionsClient.Get method.
+type VPNSiteLinkConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNSiteLinksClientGetOptions contains the optional parameters for the VPNSiteLinksClient.Get method.
+type VPNSiteLinksClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNSiteLinksClientListByVPNSiteOptions contains the optional parameters for the VPNSiteLinksClient.NewListByVPNSitePager
+// method.
+type VPNSiteLinksClientListByVPNSiteOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNSitesClientBeginCreateOrUpdateOptions contains the optional parameters for the VPNSitesClient.BeginCreateOrUpdate method.
+type VPNSitesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNSitesClientBeginDeleteOptions contains the optional parameters for the VPNSitesClient.BeginDelete method.
+type VPNSitesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VPNSitesClientGetOptions contains the optional parameters for the VPNSitesClient.Get method.
+type VPNSitesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNSitesClientListByResourceGroupOptions contains the optional parameters for the VPNSitesClient.NewListByResourceGroupPager
+// method.
+type VPNSitesClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNSitesClientListOptions contains the optional parameters for the VPNSitesClient.NewListPager method.
+type VPNSitesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNSitesClientUpdateTagsOptions contains the optional parameters for the VPNSitesClient.UpdateTags method.
+type VPNSitesClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VPNSitesConfigurationClientBeginDownloadOptions contains the optional parameters for the VPNSitesConfigurationClient.BeginDownload
+// method.
+type VPNSitesConfigurationClientBeginDownloadOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VipSwapClientBeginCreateOptions contains the optional parameters for the VipSwapClient.BeginCreate method.
+type VipSwapClientBeginCreateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VipSwapClientGetOptions contains the optional parameters for the VipSwapClient.Get method.
+type VipSwapClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VipSwapClientListOptions contains the optional parameters for the VipSwapClient.List method.
+type VipSwapClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualApplianceConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualApplianceConnectionsClient.BeginCreateOrUpdate
+// method.
+type VirtualApplianceConnectionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualApplianceConnectionsClientBeginDeleteOptions contains the optional parameters for the VirtualApplianceConnectionsClient.BeginDelete
+// method.
+type VirtualApplianceConnectionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualApplianceConnectionsClientGetOptions contains the optional parameters for the VirtualApplianceConnectionsClient.Get
+// method.
+type VirtualApplianceConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualApplianceConnectionsClientListOptions contains the optional parameters for the VirtualApplianceConnectionsClient.NewListPager
+// method.
+type VirtualApplianceConnectionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualApplianceSKUsClientGetOptions contains the optional parameters for the VirtualApplianceSKUsClient.Get method.
+type VirtualApplianceSKUsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualApplianceSKUsClientListOptions contains the optional parameters for the VirtualApplianceSKUsClient.NewListPager
+// method.
+type VirtualApplianceSKUsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualApplianceSitesClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualApplianceSitesClient.BeginCreateOrUpdate
+// method.
+type VirtualApplianceSitesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualApplianceSitesClientBeginDeleteOptions contains the optional parameters for the VirtualApplianceSitesClient.BeginDelete
+// method.
+type VirtualApplianceSitesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualApplianceSitesClientGetOptions contains the optional parameters for the VirtualApplianceSitesClient.Get method.
+type VirtualApplianceSitesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualApplianceSitesClientListOptions contains the optional parameters for the VirtualApplianceSitesClient.NewListPager
+// method.
+type VirtualApplianceSitesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualAppliancesClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualAppliancesClient.BeginCreateOrUpdate
+// method.
+type VirtualAppliancesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualAppliancesClientBeginDeleteOptions contains the optional parameters for the VirtualAppliancesClient.BeginDelete
+// method.
+type VirtualAppliancesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualAppliancesClientGetOptions contains the optional parameters for the VirtualAppliancesClient.Get method.
+type VirtualAppliancesClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// VirtualAppliancesClientListByResourceGroupOptions contains the optional parameters for the VirtualAppliancesClient.NewListByResourceGroupPager
+// method.
+type VirtualAppliancesClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualAppliancesClientListOptions contains the optional parameters for the VirtualAppliancesClient.NewListPager method.
+type VirtualAppliancesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualAppliancesClientUpdateTagsOptions contains the optional parameters for the VirtualAppliancesClient.UpdateTags method.
+type VirtualAppliancesClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualHubBgpConnectionClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualHubBgpConnectionClient.BeginCreateOrUpdate
+// method.
+type VirtualHubBgpConnectionClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubBgpConnectionClientBeginDeleteOptions contains the optional parameters for the VirtualHubBgpConnectionClient.BeginDelete
+// method.
+type VirtualHubBgpConnectionClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubBgpConnectionClientGetOptions contains the optional parameters for the VirtualHubBgpConnectionClient.Get method.
+type VirtualHubBgpConnectionClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualHubBgpConnectionsClientBeginListAdvertisedRoutesOptions contains the optional parameters for the VirtualHubBgpConnectionsClient.BeginListAdvertisedRoutes
+// method.
+type VirtualHubBgpConnectionsClientBeginListAdvertisedRoutesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubBgpConnectionsClientBeginListLearnedRoutesOptions contains the optional parameters for the VirtualHubBgpConnectionsClient.BeginListLearnedRoutes
+// method.
+type VirtualHubBgpConnectionsClientBeginListLearnedRoutesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubBgpConnectionsClientListOptions contains the optional parameters for the VirtualHubBgpConnectionsClient.NewListPager
+// method.
+type VirtualHubBgpConnectionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualHubIPConfigurationClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualHubIPConfigurationClient.BeginCreateOrUpdate
+// method.
+type VirtualHubIPConfigurationClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubIPConfigurationClientBeginDeleteOptions contains the optional parameters for the VirtualHubIPConfigurationClient.BeginDelete
+// method.
+type VirtualHubIPConfigurationClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubIPConfigurationClientGetOptions contains the optional parameters for the VirtualHubIPConfigurationClient.Get
+// method.
+type VirtualHubIPConfigurationClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualHubIPConfigurationClientListOptions contains the optional parameters for the VirtualHubIPConfigurationClient.NewListPager
+// method.
+type VirtualHubIPConfigurationClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualHubRouteTableV2SClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualHubRouteTableV2SClient.BeginCreateOrUpdate
+// method.
+type VirtualHubRouteTableV2SClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubRouteTableV2SClientBeginDeleteOptions contains the optional parameters for the VirtualHubRouteTableV2SClient.BeginDelete
+// method.
+type VirtualHubRouteTableV2SClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubRouteTableV2SClientGetOptions contains the optional parameters for the VirtualHubRouteTableV2SClient.Get method.
+type VirtualHubRouteTableV2SClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualHubRouteTableV2SClientListOptions contains the optional parameters for the VirtualHubRouteTableV2SClient.NewListPager
+// method.
+type VirtualHubRouteTableV2SClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualHubsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualHubsClient.BeginCreateOrUpdate
+// method.
+type VirtualHubsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubsClientBeginDeleteOptions contains the optional parameters for the VirtualHubsClient.BeginDelete method.
+type VirtualHubsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubsClientBeginGetEffectiveVirtualHubRoutesOptions contains the optional parameters for the VirtualHubsClient.BeginGetEffectiveVirtualHubRoutes
+// method.
+type VirtualHubsClientBeginGetEffectiveVirtualHubRoutesOptions struct {
+	// Parameters supplied to get the effective routes for a specific resource.
+	EffectiveRoutesParameters *EffectiveRoutesParameters
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubsClientBeginGetInboundRoutesOptions contains the optional parameters for the VirtualHubsClient.BeginGetInboundRoutes
+// method.
+type VirtualHubsClientBeginGetInboundRoutesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubsClientBeginGetOutboundRoutesOptions contains the optional parameters for the VirtualHubsClient.BeginGetOutboundRoutes
+// method.
+type VirtualHubsClientBeginGetOutboundRoutesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualHubsClientGetOptions contains the optional parameters for the VirtualHubsClient.Get method.
+type VirtualHubsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualHubsClientListByResourceGroupOptions contains the optional parameters for the VirtualHubsClient.NewListByResourceGroupPager
+// method.
+type VirtualHubsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualHubsClientListOptions contains the optional parameters for the VirtualHubsClient.NewListPager method.
+type VirtualHubsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualHubsClientUpdateTagsOptions contains the optional parameters for the VirtualHubsClient.UpdateTags method.
+type VirtualHubsClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkGatewayConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginCreateOrUpdate
+// method.
+type VirtualNetworkGatewayConnectionsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewayConnectionsClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginDelete
+// method.
+type VirtualNetworkGatewayConnectionsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewayConnectionsClientBeginGetIkeSasOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginGetIkeSas
+// method.
+type VirtualNetworkGatewayConnectionsClientBeginGetIkeSasOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewayConnectionsClientBeginResetConnectionOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginResetConnection
+// method.
+type VirtualNetworkGatewayConnectionsClientBeginResetConnectionOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewayConnectionsClientBeginResetSharedKeyOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginResetSharedKey
+// method.
+type VirtualNetworkGatewayConnectionsClientBeginResetSharedKeyOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewayConnectionsClientBeginSetSharedKeyOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginSetSharedKey
+// method.
+type VirtualNetworkGatewayConnectionsClientBeginSetSharedKeyOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewayConnectionsClientBeginStartPacketCaptureOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginStartPacketCapture
+// method.
+type VirtualNetworkGatewayConnectionsClientBeginStartPacketCaptureOptions struct {
+	// Virtual network gateway packet capture parameters supplied to start packet capture on gateway connection.
+	Parameters *VPNPacketCaptureStartParameters
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewayConnectionsClientBeginStopPacketCaptureOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginStopPacketCapture
+// method.
+type VirtualNetworkGatewayConnectionsClientBeginStopPacketCaptureOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewayConnectionsClientBeginUpdateTagsOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginUpdateTags
+// method.
+type VirtualNetworkGatewayConnectionsClientBeginUpdateTagsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewayConnectionsClientGetOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.Get
+// method.
+type VirtualNetworkGatewayConnectionsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkGatewayConnectionsClientGetSharedKeyOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.GetSharedKey
+// method.
+type VirtualNetworkGatewayConnectionsClientGetSharedKeyOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkGatewayConnectionsClientListOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.NewListPager
+// method.
+type VirtualNetworkGatewayConnectionsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkGatewayNatRulesClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworkGatewayNatRulesClient.BeginCreateOrUpdate
+// method.
+type VirtualNetworkGatewayNatRulesClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewayNatRulesClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkGatewayNatRulesClient.BeginDelete
+// method.
+type VirtualNetworkGatewayNatRulesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewayNatRulesClientGetOptions contains the optional parameters for the VirtualNetworkGatewayNatRulesClient.Get
+// method.
+type VirtualNetworkGatewayNatRulesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayOptions contains the optional parameters for the VirtualNetworkGatewayNatRulesClient.NewListByVirtualNetworkGatewayPager
+// method.
+type VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkGatewaysClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginCreateOrUpdate
+// method.
+type VirtualNetworkGatewaysClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginDelete
+// method.
+type VirtualNetworkGatewaysClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginDisconnectVirtualNetworkGatewayVPNConnectionsOptions contains the optional parameters
+// for the VirtualNetworkGatewaysClient.BeginDisconnectVirtualNetworkGatewayVPNConnections method.
+type VirtualNetworkGatewaysClientBeginDisconnectVirtualNetworkGatewayVPNConnectionsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginGenerateVPNProfileOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGenerateVPNProfile
+// method.
+type VirtualNetworkGatewaysClientBeginGenerateVPNProfileOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginGeneratevpnclientpackageOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGeneratevpnclientpackage
+// method.
+type VirtualNetworkGatewaysClientBeginGeneratevpnclientpackageOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginGetAdvertisedRoutesOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetAdvertisedRoutes
+// method.
+type VirtualNetworkGatewaysClientBeginGetAdvertisedRoutesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginGetBgpPeerStatusOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetBgpPeerStatus
+// method.
+type VirtualNetworkGatewaysClientBeginGetBgpPeerStatusOptions struct {
+	// The IP address of the peer to retrieve the status of.
+	Peer *string
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginGetLearnedRoutesOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetLearnedRoutes
+// method.
+type VirtualNetworkGatewaysClientBeginGetLearnedRoutesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginGetVPNProfilePackageURLOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetVPNProfilePackageURL
+// method.
+type VirtualNetworkGatewaysClientBeginGetVPNProfilePackageURLOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginGetVpnclientConnectionHealthOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetVpnclientConnectionHealth
+// method.
+type VirtualNetworkGatewaysClientBeginGetVpnclientConnectionHealthOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginGetVpnclientIPSecParametersOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetVpnclientIPSecParameters
+// method.
+type VirtualNetworkGatewaysClientBeginGetVpnclientIPSecParametersOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginResetOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginReset
+// method.
+type VirtualNetworkGatewaysClientBeginResetOptions struct {
+	// Virtual network gateway vip address supplied to the begin reset of the active-active feature enabled gateway.
+	GatewayVip *string
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginResetVPNClientSharedKeyOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginResetVPNClientSharedKey
+// method.
+type VirtualNetworkGatewaysClientBeginResetVPNClientSharedKeyOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginSetVpnclientIPSecParametersOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginSetVpnclientIPSecParameters
+// method.
+type VirtualNetworkGatewaysClientBeginSetVpnclientIPSecParametersOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginStartPacketCaptureOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginStartPacketCapture
+// method.
+type VirtualNetworkGatewaysClientBeginStartPacketCaptureOptions struct {
+	// Virtual network gateway packet capture parameters supplied to start packet capture on gateway.
+	Parameters *VPNPacketCaptureStartParameters
+
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginStopPacketCaptureOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginStopPacketCapture
+// method.
+type VirtualNetworkGatewaysClientBeginStopPacketCaptureOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientBeginUpdateTagsOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginUpdateTags
+// method.
+type VirtualNetworkGatewaysClientBeginUpdateTagsOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkGatewaysClientGetOptions contains the optional parameters for the VirtualNetworkGatewaysClient.Get method.
+type VirtualNetworkGatewaysClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkGatewaysClientListConnectionsOptions contains the optional parameters for the VirtualNetworkGatewaysClient.NewListConnectionsPager
+// method.
+type VirtualNetworkGatewaysClientListConnectionsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkGatewaysClientListOptions contains the optional parameters for the VirtualNetworkGatewaysClient.NewListPager
+// method.
+type VirtualNetworkGatewaysClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkGatewaysClientSupportedVPNDevicesOptions contains the optional parameters for the VirtualNetworkGatewaysClient.SupportedVPNDevices
+// method.
+type VirtualNetworkGatewaysClientSupportedVPNDevicesOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptOptions contains the optional parameters for the VirtualNetworkGatewaysClient.VPNDeviceConfigurationScript
+// method.
+type VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkPeeringsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworkPeeringsClient.BeginCreateOrUpdate
+// method.
+type VirtualNetworkPeeringsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// Parameter indicates the intention to sync the peering with the current address space on the remote vNet after it's updated.
+	SyncRemoteAddressSpace *SyncRemoteAddressSpace
+}
+
+// VirtualNetworkPeeringsClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkPeeringsClient.BeginDelete
+// method.
+type VirtualNetworkPeeringsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkPeeringsClientGetOptions contains the optional parameters for the VirtualNetworkPeeringsClient.Get method.
+type VirtualNetworkPeeringsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkPeeringsClientListOptions contains the optional parameters for the VirtualNetworkPeeringsClient.NewListPager
+// method.
+type VirtualNetworkPeeringsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkTapsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworkTapsClient.BeginCreateOrUpdate
+// method.
+type VirtualNetworkTapsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkTapsClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkTapsClient.BeginDelete
+// method.
+type VirtualNetworkTapsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworkTapsClientGetOptions contains the optional parameters for the VirtualNetworkTapsClient.Get method.
+type VirtualNetworkTapsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkTapsClientListAllOptions contains the optional parameters for the VirtualNetworkTapsClient.NewListAllPager
+// method.
+type VirtualNetworkTapsClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkTapsClientListByResourceGroupOptions contains the optional parameters for the VirtualNetworkTapsClient.NewListByResourceGroupPager
+// method.
+type VirtualNetworkTapsClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworkTapsClientUpdateTagsOptions contains the optional parameters for the VirtualNetworkTapsClient.UpdateTags
+// method.
+type VirtualNetworkTapsClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworksClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualNetworksClient.BeginCreateOrUpdate
+// method.
+type VirtualNetworksClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworksClientBeginDeleteOptions contains the optional parameters for the VirtualNetworksClient.BeginDelete method.
+type VirtualNetworksClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualNetworksClientBeginListDdosProtectionStatusOptions contains the optional parameters for the VirtualNetworksClient.BeginListDdosProtectionStatus
+// method.
+type VirtualNetworksClientBeginListDdosProtectionStatusOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+
+	// The skipToken that is given with nextLink.
+	SkipToken *string
+
+	// The max number of ip addresses to return.
+	Top *int32
+}
+
+// VirtualNetworksClientCheckIPAddressAvailabilityOptions contains the optional parameters for the VirtualNetworksClient.CheckIPAddressAvailability
+// method.
+type VirtualNetworksClientCheckIPAddressAvailabilityOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworksClientGetOptions contains the optional parameters for the VirtualNetworksClient.Get method.
+type VirtualNetworksClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// VirtualNetworksClientListAllOptions contains the optional parameters for the VirtualNetworksClient.NewListAllPager method.
+type VirtualNetworksClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworksClientListOptions contains the optional parameters for the VirtualNetworksClient.NewListPager method.
+type VirtualNetworksClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworksClientListUsageOptions contains the optional parameters for the VirtualNetworksClient.NewListUsagePager
+// method.
+type VirtualNetworksClientListUsageOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualNetworksClientUpdateTagsOptions contains the optional parameters for the VirtualNetworksClient.UpdateTags method.
+type VirtualNetworksClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualRouterPeeringsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualRouterPeeringsClient.BeginCreateOrUpdate
+// method.
+type VirtualRouterPeeringsClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualRouterPeeringsClientBeginDeleteOptions contains the optional parameters for the VirtualRouterPeeringsClient.BeginDelete
+// method.
+type VirtualRouterPeeringsClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualRouterPeeringsClientGetOptions contains the optional parameters for the VirtualRouterPeeringsClient.Get method.
+type VirtualRouterPeeringsClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualRouterPeeringsClientListOptions contains the optional parameters for the VirtualRouterPeeringsClient.NewListPager
+// method.
+type VirtualRouterPeeringsClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualRoutersClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualRoutersClient.BeginCreateOrUpdate
+// method.
+type VirtualRoutersClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualRoutersClientBeginDeleteOptions contains the optional parameters for the VirtualRoutersClient.BeginDelete method.
+type VirtualRoutersClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualRoutersClientGetOptions contains the optional parameters for the VirtualRoutersClient.Get method.
+type VirtualRoutersClientGetOptions struct {
+	// Expands referenced resources.
+	Expand *string
+}
+
+// VirtualRoutersClientListByResourceGroupOptions contains the optional parameters for the VirtualRoutersClient.NewListByResourceGroupPager
+// method.
+type VirtualRoutersClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualRoutersClientListOptions contains the optional parameters for the VirtualRoutersClient.NewListPager method.
+type VirtualRoutersClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualWansClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualWansClient.BeginCreateOrUpdate
+// method.
+type VirtualWansClientBeginCreateOrUpdateOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualWansClientBeginDeleteOptions contains the optional parameters for the VirtualWansClient.BeginDelete method.
+type VirtualWansClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// VirtualWansClientGetOptions contains the optional parameters for the VirtualWansClient.Get method.
+type VirtualWansClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualWansClientListByResourceGroupOptions contains the optional parameters for the VirtualWansClient.NewListByResourceGroupPager
+// method.
+type VirtualWansClientListByResourceGroupOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualWansClientListOptions contains the optional parameters for the VirtualWansClient.NewListPager method.
+type VirtualWansClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// VirtualWansClientUpdateTagsOptions contains the optional parameters for the VirtualWansClient.UpdateTags method.
+type VirtualWansClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// WatchersClientBeginCheckConnectivityOptions contains the optional parameters for the WatchersClient.BeginCheckConnectivity
+// method.
+type WatchersClientBeginCheckConnectivityOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientBeginDeleteOptions contains the optional parameters for the WatchersClient.BeginDelete method.
+type WatchersClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientBeginGetAzureReachabilityReportOptions contains the optional parameters for the WatchersClient.BeginGetAzureReachabilityReport
+// method.
+type WatchersClientBeginGetAzureReachabilityReportOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientBeginGetFlowLogStatusOptions contains the optional parameters for the WatchersClient.BeginGetFlowLogStatus
+// method.
+type WatchersClientBeginGetFlowLogStatusOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientBeginGetNetworkConfigurationDiagnosticOptions contains the optional parameters for the WatchersClient.BeginGetNetworkConfigurationDiagnostic
+// method.
+type WatchersClientBeginGetNetworkConfigurationDiagnosticOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientBeginGetNextHopOptions contains the optional parameters for the WatchersClient.BeginGetNextHop method.
+type WatchersClientBeginGetNextHopOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientBeginGetTroubleshootingOptions contains the optional parameters for the WatchersClient.BeginGetTroubleshooting
+// method.
+type WatchersClientBeginGetTroubleshootingOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientBeginGetTroubleshootingResultOptions contains the optional parameters for the WatchersClient.BeginGetTroubleshootingResult
+// method.
+type WatchersClientBeginGetTroubleshootingResultOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientBeginGetVMSecurityRulesOptions contains the optional parameters for the WatchersClient.BeginGetVMSecurityRules
+// method.
+type WatchersClientBeginGetVMSecurityRulesOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientBeginListAvailableProvidersOptions contains the optional parameters for the WatchersClient.BeginListAvailableProviders
+// method.
+type WatchersClientBeginListAvailableProvidersOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientBeginSetFlowLogConfigurationOptions contains the optional parameters for the WatchersClient.BeginSetFlowLogConfiguration
+// method.
+type WatchersClientBeginSetFlowLogConfigurationOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientBeginVerifyIPFlowOptions contains the optional parameters for the WatchersClient.BeginVerifyIPFlow method.
+type WatchersClientBeginVerifyIPFlowOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WatchersClientCreateOrUpdateOptions contains the optional parameters for the WatchersClient.CreateOrUpdate method.
+type WatchersClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// WatchersClientGetOptions contains the optional parameters for the WatchersClient.Get method.
+type WatchersClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// WatchersClientGetTopologyOptions contains the optional parameters for the WatchersClient.GetTopology method.
+type WatchersClientGetTopologyOptions struct {
+	// placeholder for future optional parameters
+}
+
+// WatchersClientListAllOptions contains the optional parameters for the WatchersClient.NewListAllPager method.
+type WatchersClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// WatchersClientListOptions contains the optional parameters for the WatchersClient.NewListPager method.
+type WatchersClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// WatchersClientUpdateTagsOptions contains the optional parameters for the WatchersClient.UpdateTags method.
+type WatchersClientUpdateTagsOptions struct {
+	// placeholder for future optional parameters
+}
+
+// WebApplicationFirewallPoliciesClientBeginDeleteOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.BeginDelete
+// method.
+type WebApplicationFirewallPoliciesClientBeginDeleteOptions struct {
+	// Resumes the LRO from the provided token.
+	ResumeToken string
+}
+
+// WebApplicationFirewallPoliciesClientCreateOrUpdateOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.CreateOrUpdate
+// method.
+type WebApplicationFirewallPoliciesClientCreateOrUpdateOptions struct {
+	// placeholder for future optional parameters
+}
+
+// WebApplicationFirewallPoliciesClientGetOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.Get
+// method.
+type WebApplicationFirewallPoliciesClientGetOptions struct {
+	// placeholder for future optional parameters
+}
+
+// WebApplicationFirewallPoliciesClientListAllOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.NewListAllPager
+// method.
+type WebApplicationFirewallPoliciesClientListAllOptions struct {
+	// placeholder for future optional parameters
+}
+
+// WebApplicationFirewallPoliciesClientListOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.NewListPager
+// method.
+type WebApplicationFirewallPoliciesClientListOptions struct {
+	// placeholder for future optional parameters
+}
+
+// WebCategoriesClientGetOptions contains the optional parameters for the WebCategoriesClient.Get method.
+type WebCategoriesClientGetOptions struct {
+	// Expands resourceIds back referenced by the azureWebCategory resource.
+	Expand *string
+}
+
+// WebCategoriesClientListBySubscriptionOptions contains the optional parameters for the WebCategoriesClient.NewListBySubscriptionPager
+// method.
+type WebCategoriesClientListBySubscriptionOptions struct {
+	// placeholder for future optional parameters
+}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/p2svpngateways_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/p2svpngateways_client.go
similarity index 75%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/p2svpngateways_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/p2svpngateways_client.go
index 6ecd0934016..112e1e5c908 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/p2svpngateways_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/p2svpngateways_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type P2SVPNGatewaysClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewP2SVPNGatewaysClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*P2SVPNGatewaysClient, error) {
-	cl, err := arm.NewClient(moduleName+".P2SVPNGatewaysClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewP2SVPNGatewaysClient(subscriptionID string, credential azcore.TokenCrede
 // BeginCreateOrUpdate - Creates a virtual wan p2s vpn gateway if it doesn't exist else updates the existing gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the P2SVpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - p2SVPNGatewayParameters - Parameters supplied to create or Update a virtual wan p2s vpn gateway.
@@ -60,31 +59,41 @@ func (client *P2SVPNGatewaysClient) BeginCreateOrUpdate(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[P2SVPNGatewaysClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[P2SVPNGatewaysClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a virtual wan p2s vpn gateway if it doesn't exist else updates the existing gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *P2SVPNGatewaysClient) createOrUpdate(ctx context.Context, resourceGroupName string, gatewayName string, p2SVPNGatewayParameters P2SVPNGateway, options *P2SVPNGatewaysClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "P2SVPNGatewaysClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, gatewayName, p2SVPNGatewayParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *P2SVPNGatewaysClient) createOrUpdateCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, p2SVPNGatewayParameters)
+	if err := runtime.MarshalAsJSON(req, p2SVPNGatewayParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a virtual wan p2s vpn gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the P2SVpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - options - P2SVPNGatewaysClientBeginDeleteOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *P2SVPNGatewaysClient) BeginDelete(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[P2SVPNGatewaysClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[P2SVPNGatewaysClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a virtual wan p2s vpn gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *P2SVPNGatewaysClient) deleteOperation(ctx context.Context, resourceGroupName string, gatewayName string, options *P2SVPNGatewaysClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "P2SVPNGatewaysClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, gatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *P2SVPNGatewaysClient) deleteCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -184,7 +206,7 @@ func (client *P2SVPNGatewaysClient) deleteCreateRequest(ctx context.Context, res
 // group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - p2SVPNGatewayName - The name of the P2S Vpn Gateway.
 //   - request - The parameters are supplied to disconnect p2s vpn connections.
@@ -196,11 +218,15 @@ func (client *P2SVPNGatewaysClient) BeginDisconnectP2SVPNConnections(ctx context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientDisconnectP2SVPNConnectionsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientDisconnectP2SVPNConnectionsResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[P2SVPNGatewaysClientDisconnectP2SVPNConnectionsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[P2SVPNGatewaysClientDisconnectP2SVPNConnectionsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -208,20 +234,26 @@ func (client *P2SVPNGatewaysClient) BeginDisconnectP2SVPNConnections(ctx context
 // group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *P2SVPNGatewaysClient) disconnectP2SVPNConnections(ctx context.Context, resourceGroupName string, p2SVPNGatewayName string, request P2SVPNConnectionRequest, options *P2SVPNGatewaysClientBeginDisconnectP2SVPNConnectionsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "P2SVPNGatewaysClient.BeginDisconnectP2SVPNConnections"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.disconnectP2SVPNConnectionsCreateRequest(ctx, resourceGroupName, p2SVPNGatewayName, request, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // disconnectP2SVPNConnectionsCreateRequest creates the DisconnectP2SVPNConnections request.
@@ -244,16 +276,19 @@ func (client *P2SVPNGatewaysClient) disconnectP2SVPNConnectionsCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, request)
+	if err := runtime.MarshalAsJSON(req, request); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginGenerateVPNProfile - Generates VPN profile for P2S client of the P2SVpnGateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - gatewayName - The name of the P2SVpnGateway.
 //   - parameters - Parameters supplied to the generate P2SVpnGateway VPN client package operation.
@@ -265,31 +300,41 @@ func (client *P2SVPNGatewaysClient) BeginGenerateVPNProfile(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientGenerateVPNProfileResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientGenerateVPNProfileResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[P2SVPNGatewaysClientGenerateVPNProfileResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[P2SVPNGatewaysClientGenerateVPNProfileResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GenerateVPNProfile - Generates VPN profile for P2S client of the P2SVpnGateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *P2SVPNGatewaysClient) generateVPNProfile(ctx context.Context, resourceGroupName string, gatewayName string, parameters P2SVPNProfileParameters, options *P2SVPNGatewaysClientBeginGenerateVPNProfileOptions) (*http.Response, error) {
+	var err error
+	const operationName = "P2SVPNGatewaysClient.BeginGenerateVPNProfile"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.generateVPNProfileCreateRequest(ctx, resourceGroupName, gatewayName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // generateVPNProfileCreateRequest creates the GenerateVPNProfile request.
@@ -312,32 +357,42 @@ func (client *P2SVPNGatewaysClient) generateVPNProfileCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // Get - Retrieves the details of a virtual wan p2s vpn gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the P2SVpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - options - P2SVPNGatewaysClientGetOptions contains the optional parameters for the P2SVPNGatewaysClient.Get method.
 func (client *P2SVPNGatewaysClient) Get(ctx context.Context, resourceGroupName string, gatewayName string, options *P2SVPNGatewaysClientGetOptions) (P2SVPNGatewaysClientGetResponse, error) {
+	var err error
+	const operationName = "P2SVPNGatewaysClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, gatewayName, options)
 	if err != nil {
 		return P2SVPNGatewaysClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return P2SVPNGatewaysClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return P2SVPNGatewaysClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return P2SVPNGatewaysClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -360,7 +415,7 @@ func (client *P2SVPNGatewaysClient) getCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -379,7 +434,7 @@ func (client *P2SVPNGatewaysClient) getHandleResponse(resp *http.Response) (P2SV
 // resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - gatewayName - The name of the P2SVpnGateway.
 //   - options - P2SVPNGatewaysClientBeginGetP2SVPNConnectionHealthOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginGetP2SVPNConnectionHealth
@@ -390,11 +445,15 @@ func (client *P2SVPNGatewaysClient) BeginGetP2SVPNConnectionHealth(ctx context.C
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientGetP2SVPNConnectionHealthResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientGetP2SVPNConnectionHealthResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[P2SVPNGatewaysClientGetP2SVPNConnectionHealthResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[P2SVPNGatewaysClientGetP2SVPNConnectionHealthResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -402,20 +461,26 @@ func (client *P2SVPNGatewaysClient) BeginGetP2SVPNConnectionHealth(ctx context.C
 // resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *P2SVPNGatewaysClient) getP2SVPNConnectionHealth(ctx context.Context, resourceGroupName string, gatewayName string, options *P2SVPNGatewaysClientBeginGetP2SVPNConnectionHealthOptions) (*http.Response, error) {
+	var err error
+	const operationName = "P2SVPNGatewaysClient.BeginGetP2SVPNConnectionHealth"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getP2SVPNConnectionHealthCreateRequest(ctx, resourceGroupName, gatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getP2SVPNConnectionHealthCreateRequest creates the GetP2SVPNConnectionHealth request.
@@ -438,7 +503,7 @@ func (client *P2SVPNGatewaysClient) getP2SVPNConnectionHealthCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -448,7 +513,7 @@ func (client *P2SVPNGatewaysClient) getP2SVPNConnectionHealthCreateRequest(ctx c
 // wan P2SVpnGateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - gatewayName - The name of the P2SVpnGateway.
 //   - request - Request parameters supplied to get p2s vpn connections detailed health.
@@ -460,11 +525,15 @@ func (client *P2SVPNGatewaysClient) BeginGetP2SVPNConnectionHealthDetailed(ctx c
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientGetP2SVPNConnectionHealthDetailedResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientGetP2SVPNConnectionHealthDetailedResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[P2SVPNGatewaysClientGetP2SVPNConnectionHealthDetailedResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[P2SVPNGatewaysClientGetP2SVPNConnectionHealthDetailedResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -472,20 +541,26 @@ func (client *P2SVPNGatewaysClient) BeginGetP2SVPNConnectionHealthDetailed(ctx c
 // wan P2SVpnGateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *P2SVPNGatewaysClient) getP2SVPNConnectionHealthDetailed(ctx context.Context, resourceGroupName string, gatewayName string, request P2SVPNConnectionHealthRequest, options *P2SVPNGatewaysClientBeginGetP2SVPNConnectionHealthDetailedOptions) (*http.Response, error) {
+	var err error
+	const operationName = "P2SVPNGatewaysClient.BeginGetP2SVPNConnectionHealthDetailed"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getP2SVPNConnectionHealthDetailedCreateRequest(ctx, resourceGroupName, gatewayName, request, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getP2SVPNConnectionHealthDetailedCreateRequest creates the GetP2SVPNConnectionHealthDetailed request.
@@ -508,15 +583,18 @@ func (client *P2SVPNGatewaysClient) getP2SVPNConnectionHealthDetailedCreateReque
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, request)
+	if err := runtime.MarshalAsJSON(req, request); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // NewListPager - Lists all the P2SVpnGateways in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - P2SVPNGatewaysClientListOptions contains the optional parameters for the P2SVPNGatewaysClient.NewListPager method.
 func (client *P2SVPNGatewaysClient) NewListPager(options *P2SVPNGatewaysClientListOptions) *runtime.Pager[P2SVPNGatewaysClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[P2SVPNGatewaysClientListResponse]{
@@ -524,25 +602,20 @@ func (client *P2SVPNGatewaysClient) NewListPager(options *P2SVPNGatewaysClientLi
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *P2SVPNGatewaysClientListResponse) (P2SVPNGatewaysClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "P2SVPNGatewaysClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return P2SVPNGatewaysClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return P2SVPNGatewaysClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return P2SVPNGatewaysClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -558,7 +631,7 @@ func (client *P2SVPNGatewaysClient) listCreateRequest(ctx context.Context, optio
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -575,7 +648,7 @@ func (client *P2SVPNGatewaysClient) listHandleResponse(resp *http.Response) (P2S
 
 // NewListByResourceGroupPager - Lists all the P2SVpnGateways in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the P2SVpnGateway.
 //   - options - P2SVPNGatewaysClientListByResourceGroupOptions contains the optional parameters for the P2SVPNGatewaysClient.NewListByResourceGroupPager
 //     method.
@@ -585,25 +658,20 @@ func (client *P2SVPNGatewaysClient) NewListByResourceGroupPager(resourceGroupNam
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *P2SVPNGatewaysClientListByResourceGroupResponse) (P2SVPNGatewaysClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return P2SVPNGatewaysClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "P2SVPNGatewaysClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return P2SVPNGatewaysClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return P2SVPNGatewaysClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -623,7 +691,7 @@ func (client *P2SVPNGatewaysClient) listByResourceGroupCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -641,7 +709,7 @@ func (client *P2SVPNGatewaysClient) listByResourceGroupHandleResponse(resp *http
 // BeginReset - Resets the primary of the p2s vpn gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the P2SVpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - options - P2SVPNGatewaysClientBeginResetOptions contains the optional parameters for the P2SVPNGatewaysClient.BeginReset
@@ -652,31 +720,41 @@ func (client *P2SVPNGatewaysClient) BeginReset(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientResetResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientResetResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[P2SVPNGatewaysClientResetResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[P2SVPNGatewaysClientResetResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Reset - Resets the primary of the p2s vpn gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *P2SVPNGatewaysClient) reset(ctx context.Context, resourceGroupName string, gatewayName string, options *P2SVPNGatewaysClientBeginResetOptions) (*http.Response, error) {
+	var err error
+	const operationName = "P2SVPNGatewaysClient.BeginReset"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.resetCreateRequest(ctx, resourceGroupName, gatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // resetCreateRequest creates the Reset request.
@@ -699,7 +777,7 @@ func (client *P2SVPNGatewaysClient) resetCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -708,7 +786,7 @@ func (client *P2SVPNGatewaysClient) resetCreateRequest(ctx context.Context, reso
 // BeginUpdateTags - Updates virtual wan p2s vpn gateway tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the P2SVpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - p2SVPNGatewayParameters - Parameters supplied to update a virtual wan p2s vpn gateway tags.
@@ -720,31 +798,41 @@ func (client *P2SVPNGatewaysClient) BeginUpdateTags(ctx context.Context, resourc
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientUpdateTagsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[P2SVPNGatewaysClientUpdateTagsResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[P2SVPNGatewaysClientUpdateTagsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[P2SVPNGatewaysClientUpdateTagsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // UpdateTags - Updates virtual wan p2s vpn gateway tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *P2SVPNGatewaysClient) updateTags(ctx context.Context, resourceGroupName string, gatewayName string, p2SVPNGatewayParameters TagsObject, options *P2SVPNGatewaysClientBeginUpdateTagsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "P2SVPNGatewaysClient.BeginUpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, gatewayName, p2SVPNGatewayParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -767,8 +855,11 @@ func (client *P2SVPNGatewaysClient) updateTagsCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, p2SVPNGatewayParameters)
+	if err := runtime.MarshalAsJSON(req, p2SVPNGatewayParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/packetcaptures_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/packetcaptures_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/packetcaptures_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/packetcaptures_client.go
index fdaf0ebf598..3b19453fb9b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/packetcaptures_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/packetcaptures_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type PacketCapturesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewPacketCapturesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*PacketCapturesClient, error) {
-	cl, err := arm.NewClient(moduleName+".PacketCapturesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewPacketCapturesClient(subscriptionID string, credential azcore.TokenCrede
 // BeginCreate - Create and start a packet capture on the specified VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - packetCaptureName - The name of the packet capture session.
@@ -61,31 +60,41 @@ func (client *PacketCapturesClient) BeginCreate(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PacketCapturesClientCreateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PacketCapturesClientCreateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PacketCapturesClientCreateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PacketCapturesClientCreateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Create - Create and start a packet capture on the specified VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PacketCapturesClient) create(ctx context.Context, resourceGroupName string, networkWatcherName string, packetCaptureName string, parameters PacketCapture, options *PacketCapturesClientBeginCreateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PacketCapturesClient.BeginCreate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createCreateRequest(ctx, resourceGroupName, networkWatcherName, packetCaptureName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createCreateRequest creates the Create request.
@@ -112,16 +121,19 @@ func (client *PacketCapturesClient) createCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified packet capture session.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - packetCaptureName - The name of the packet capture session.
@@ -133,31 +145,41 @@ func (client *PacketCapturesClient) BeginDelete(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PacketCapturesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PacketCapturesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PacketCapturesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PacketCapturesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified packet capture session.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PacketCapturesClient) deleteOperation(ctx context.Context, resourceGroupName string, networkWatcherName string, packetCaptureName string, options *PacketCapturesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PacketCapturesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkWatcherName, packetCaptureName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *PacketCapturesClient) deleteCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,24 +215,31 @@ func (client *PacketCapturesClient) deleteCreateRequest(ctx context.Context, res
 // Get - Gets a packet capture session by name.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - packetCaptureName - The name of the packet capture session.
 //   - options - PacketCapturesClientGetOptions contains the optional parameters for the PacketCapturesClient.Get method.
 func (client *PacketCapturesClient) Get(ctx context.Context, resourceGroupName string, networkWatcherName string, packetCaptureName string, options *PacketCapturesClientGetOptions) (PacketCapturesClientGetResponse, error) {
+	var err error
+	const operationName = "PacketCapturesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkWatcherName, packetCaptureName, options)
 	if err != nil {
 		return PacketCapturesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PacketCapturesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PacketCapturesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PacketCapturesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -237,7 +266,7 @@ func (client *PacketCapturesClient) getCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *PacketCapturesClient) getHandleResponse(resp *http.Response) (Pack
 // BeginGetStatus - Query the status of a running packet capture session.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the Network Watcher resource.
 //   - packetCaptureName - The name given to the packet capture session.
@@ -267,31 +296,41 @@ func (client *PacketCapturesClient) BeginGetStatus(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PacketCapturesClientGetStatusResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PacketCapturesClientGetStatusResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PacketCapturesClientGetStatusResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PacketCapturesClientGetStatusResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetStatus - Query the status of a running packet capture session.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PacketCapturesClient) getStatus(ctx context.Context, resourceGroupName string, networkWatcherName string, packetCaptureName string, options *PacketCapturesClientBeginGetStatusOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PacketCapturesClient.BeginGetStatus"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getStatusCreateRequest(ctx, resourceGroupName, networkWatcherName, packetCaptureName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getStatusCreateRequest creates the GetStatus request.
@@ -318,7 +357,7 @@ func (client *PacketCapturesClient) getStatusCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -326,7 +365,7 @@ func (client *PacketCapturesClient) getStatusCreateRequest(ctx context.Context,
 
 // NewListPager - Lists all packet capture sessions within the specified resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the Network Watcher resource.
 //   - options - PacketCapturesClientListOptions contains the optional parameters for the PacketCapturesClient.NewListPager method.
@@ -336,6 +375,7 @@ func (client *PacketCapturesClient) NewListPager(resourceGroupName string, netwo
 			return false
 		},
 		Fetcher: func(ctx context.Context, page *PacketCapturesClientListResponse) (PacketCapturesClientListResponse, error) {
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PacketCapturesClient.NewListPager")
 			req, err := client.listCreateRequest(ctx, resourceGroupName, networkWatcherName, options)
 			if err != nil {
 				return PacketCapturesClientListResponse{}, err
@@ -349,6 +389,7 @@ func (client *PacketCapturesClient) NewListPager(resourceGroupName string, netwo
 			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -372,7 +413,7 @@ func (client *PacketCapturesClient) listCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -390,7 +431,7 @@ func (client *PacketCapturesClient) listHandleResponse(resp *http.Response) (Pac
 // BeginStop - Stops a specified packet capture session.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - packetCaptureName - The name of the packet capture session.
@@ -402,31 +443,41 @@ func (client *PacketCapturesClient) BeginStop(ctx context.Context, resourceGroup
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PacketCapturesClientStopResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PacketCapturesClientStopResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PacketCapturesClientStopResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PacketCapturesClientStopResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Stop - Stops a specified packet capture session.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PacketCapturesClient) stop(ctx context.Context, resourceGroupName string, networkWatcherName string, packetCaptureName string, options *PacketCapturesClientBeginStopOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PacketCapturesClient.BeginStop"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.stopCreateRequest(ctx, resourceGroupName, networkWatcherName, packetCaptureName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // stopCreateRequest creates the Stop request.
@@ -453,7 +504,7 @@ func (client *PacketCapturesClient) stopCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/peerexpressroutecircuitconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/peerexpressroutecircuitconnections_client.go
similarity index 87%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/peerexpressroutecircuitconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/peerexpressroutecircuitconnections_client.go
index 00e6229c375..d8a87d68cbe 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/peerexpressroutecircuitconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/peerexpressroutecircuitconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type PeerExpressRouteCircuitConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewPeerExpressRouteCircuitConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*PeerExpressRouteCircuitConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".PeerExpressRouteCircuitConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewPeerExpressRouteCircuitConnectionsClient(subscriptionID string, credenti
 // Get - Gets the specified Peer Express Route Circuit Connection from the specified express route circuit.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the express route circuit.
 //   - peeringName - The name of the peering.
@@ -56,18 +55,25 @@ func NewPeerExpressRouteCircuitConnectionsClient(subscriptionID string, credenti
 //   - options - PeerExpressRouteCircuitConnectionsClientGetOptions contains the optional parameters for the PeerExpressRouteCircuitConnectionsClient.Get
 //     method.
 func (client *PeerExpressRouteCircuitConnectionsClient) Get(ctx context.Context, resourceGroupName string, circuitName string, peeringName string, connectionName string, options *PeerExpressRouteCircuitConnectionsClientGetOptions) (PeerExpressRouteCircuitConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "PeerExpressRouteCircuitConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, circuitName, peeringName, connectionName, options)
 	if err != nil {
 		return PeerExpressRouteCircuitConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PeerExpressRouteCircuitConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PeerExpressRouteCircuitConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PeerExpressRouteCircuitConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -98,7 +104,7 @@ func (client *PeerExpressRouteCircuitConnectionsClient) getCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -115,7 +121,7 @@ func (client *PeerExpressRouteCircuitConnectionsClient) getHandleResponse(resp *
 
 // NewListPager - Gets all global reach peer connections associated with a private peering in an express route circuit.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - circuitName - The name of the circuit.
 //   - peeringName - The name of the peering.
@@ -127,25 +133,20 @@ func (client *PeerExpressRouteCircuitConnectionsClient) NewListPager(resourceGro
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PeerExpressRouteCircuitConnectionsClientListResponse) (PeerExpressRouteCircuitConnectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, circuitName, peeringName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PeerExpressRouteCircuitConnectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, circuitName, peeringName, options)
+			}, nil)
 			if err != nil {
 				return PeerExpressRouteCircuitConnectionsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return PeerExpressRouteCircuitConnectionsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PeerExpressRouteCircuitConnectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -173,7 +174,7 @@ func (client *PeerExpressRouteCircuitConnectionsClient) listCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/polymorphic_helpers.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/polymorphic_helpers.go
similarity index 92%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/polymorphic_helpers.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/polymorphic_helpers.go
index 882756d3f50..0f6cd182a47 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/polymorphic_helpers.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/polymorphic_helpers.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -28,7 +27,10 @@ func unmarshalActiveBaseSecurityAdminRuleClassification(rawMsg json.RawMessage)
 	default:
 		b = &ActiveBaseSecurityAdminRule{}
 	}
-	return b, json.Unmarshal(rawMsg, b)
+	if err := json.Unmarshal(rawMsg, b); err != nil {
+		return nil, err
+	}
+	return b, nil
 }
 
 func unmarshalActiveBaseSecurityAdminRuleClassificationArray(rawMsg json.RawMessage) ([]ActiveBaseSecurityAdminRuleClassification, error) {
@@ -67,7 +69,10 @@ func unmarshalBaseAdminRuleClassification(rawMsg json.RawMessage) (BaseAdminRule
 	default:
 		b = &BaseAdminRule{}
 	}
-	return b, json.Unmarshal(rawMsg, b)
+	if err := json.Unmarshal(rawMsg, b); err != nil {
+		return nil, err
+	}
+	return b, nil
 }
 
 func unmarshalBaseAdminRuleClassificationArray(rawMsg json.RawMessage) ([]BaseAdminRuleClassification, error) {
@@ -106,7 +111,10 @@ func unmarshalEffectiveBaseSecurityAdminRuleClassification(rawMsg json.RawMessag
 	default:
 		b = &EffectiveBaseSecurityAdminRule{}
 	}
-	return b, json.Unmarshal(rawMsg, b)
+	if err := json.Unmarshal(rawMsg, b); err != nil {
+		return nil, err
+	}
+	return b, nil
 }
 
 func unmarshalEffectiveBaseSecurityAdminRuleClassificationArray(rawMsg json.RawMessage) ([]EffectiveBaseSecurityAdminRuleClassification, error) {
@@ -147,7 +155,10 @@ func unmarshalFirewallPolicyRuleClassification(rawMsg json.RawMessage) (Firewall
 	default:
 		b = &FirewallPolicyRule{}
 	}
-	return b, json.Unmarshal(rawMsg, b)
+	if err := json.Unmarshal(rawMsg, b); err != nil {
+		return nil, err
+	}
+	return b, nil
 }
 
 func unmarshalFirewallPolicyRuleClassificationArray(rawMsg json.RawMessage) ([]FirewallPolicyRuleClassification, error) {
@@ -186,7 +197,10 @@ func unmarshalFirewallPolicyRuleCollectionClassification(rawMsg json.RawMessage)
 	default:
 		b = &FirewallPolicyRuleCollection{}
 	}
-	return b, json.Unmarshal(rawMsg, b)
+	if err := json.Unmarshal(rawMsg, b); err != nil {
+		return nil, err
+	}
+	return b, nil
 }
 
 func unmarshalFirewallPolicyRuleCollectionClassificationArray(rawMsg json.RawMessage) ([]FirewallPolicyRuleCollectionClassification, error) {
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/privatednszonegroups_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/privatednszonegroups_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/privatednszonegroups_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/privatednszonegroups_client.go
index e7d94f5c1f1..e4177612bdf 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/privatednszonegroups_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/privatednszonegroups_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type PrivateDNSZoneGroupsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewPrivateDNSZoneGroupsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*PrivateDNSZoneGroupsClient, error) {
-	cl, err := arm.NewClient(moduleName+".PrivateDNSZoneGroupsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewPrivateDNSZoneGroupsClient(subscriptionID string, credential azcore.Toke
 // BeginCreateOrUpdate - Creates or updates a private dns zone group in the specified private endpoint.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - privateEndpointName - The name of the private endpoint.
 //   - privateDNSZoneGroupName - The name of the private dns zone group.
@@ -61,31 +60,41 @@ func (client *PrivateDNSZoneGroupsClient) BeginCreateOrUpdate(ctx context.Contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateDNSZoneGroupsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateDNSZoneGroupsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PrivateDNSZoneGroupsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PrivateDNSZoneGroupsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a private dns zone group in the specified private endpoint.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PrivateDNSZoneGroupsClient) createOrUpdate(ctx context.Context, resourceGroupName string, privateEndpointName string, privateDNSZoneGroupName string, parameters PrivateDNSZoneGroup, options *PrivateDNSZoneGroupsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PrivateDNSZoneGroupsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, privateEndpointName, privateDNSZoneGroupName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *PrivateDNSZoneGroupsClient) createOrUpdateCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified private dns zone group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - privateEndpointName - The name of the private endpoint.
 //   - privateDNSZoneGroupName - The name of the private dns zone group.
@@ -133,31 +145,41 @@ func (client *PrivateDNSZoneGroupsClient) BeginDelete(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateDNSZoneGroupsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateDNSZoneGroupsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PrivateDNSZoneGroupsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PrivateDNSZoneGroupsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified private dns zone group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PrivateDNSZoneGroupsClient) deleteOperation(ctx context.Context, resourceGroupName string, privateEndpointName string, privateDNSZoneGroupName string, options *PrivateDNSZoneGroupsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PrivateDNSZoneGroupsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, privateEndpointName, privateDNSZoneGroupName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *PrivateDNSZoneGroupsClient) deleteCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *PrivateDNSZoneGroupsClient) deleteCreateRequest(ctx context.Contex
 // Get - Gets the private dns zone group resource by specified private dns zone group name.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - privateEndpointName - The name of the private endpoint.
 //   - privateDNSZoneGroupName - The name of the private dns zone group.
 //   - options - PrivateDNSZoneGroupsClientGetOptions contains the optional parameters for the PrivateDNSZoneGroupsClient.Get
 //     method.
 func (client *PrivateDNSZoneGroupsClient) Get(ctx context.Context, resourceGroupName string, privateEndpointName string, privateDNSZoneGroupName string, options *PrivateDNSZoneGroupsClientGetOptions) (PrivateDNSZoneGroupsClientGetResponse, error) {
+	var err error
+	const operationName = "PrivateDNSZoneGroupsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, privateEndpointName, privateDNSZoneGroupName, options)
 	if err != nil {
 		return PrivateDNSZoneGroupsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PrivateDNSZoneGroupsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PrivateDNSZoneGroupsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PrivateDNSZoneGroupsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *PrivateDNSZoneGroupsClient) getCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *PrivateDNSZoneGroupsClient) getHandleResponse(resp *http.Response)
 
 // NewListPager - Gets all private dns zone groups in a private endpoint.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - privateEndpointName - The name of the private endpoint.
 //   - resourceGroupName - The name of the resource group.
 //   - options - PrivateDNSZoneGroupsClientListOptions contains the optional parameters for the PrivateDNSZoneGroupsClient.NewListPager
@@ -266,25 +295,20 @@ func (client *PrivateDNSZoneGroupsClient) NewListPager(privateEndpointName strin
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PrivateDNSZoneGroupsClientListResponse) (PrivateDNSZoneGroupsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, privateEndpointName, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return PrivateDNSZoneGroupsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PrivateDNSZoneGroupsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, privateEndpointName, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return PrivateDNSZoneGroupsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PrivateDNSZoneGroupsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *PrivateDNSZoneGroupsClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/privateendpoints_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/privateendpoints_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/privateendpoints_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/privateendpoints_client.go
index ff5231393ce..496153f08db 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/privateendpoints_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/privateendpoints_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type PrivateEndpointsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewPrivateEndpointsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*PrivateEndpointsClient, error) {
-	cl, err := arm.NewClient(moduleName+".PrivateEndpointsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewPrivateEndpointsClient(subscriptionID string, credential azcore.TokenCre
 // BeginCreateOrUpdate - Creates or updates an private endpoint in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - privateEndpointName - The name of the private endpoint.
 //   - parameters - Parameters supplied to the create or update private endpoint operation.
@@ -60,31 +59,41 @@ func (client *PrivateEndpointsClient) BeginCreateOrUpdate(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateEndpointsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateEndpointsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PrivateEndpointsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PrivateEndpointsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates an private endpoint in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PrivateEndpointsClient) createOrUpdate(ctx context.Context, resourceGroupName string, privateEndpointName string, parameters PrivateEndpoint, options *PrivateEndpointsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PrivateEndpointsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, privateEndpointName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *PrivateEndpointsClient) createOrUpdateCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified private endpoint.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - privateEndpointName - The name of the private endpoint.
 //   - options - PrivateEndpointsClientBeginDeleteOptions contains the optional parameters for the PrivateEndpointsClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *PrivateEndpointsClient) BeginDelete(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateEndpointsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateEndpointsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PrivateEndpointsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PrivateEndpointsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified private endpoint.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PrivateEndpointsClient) deleteOperation(ctx context.Context, resourceGroupName string, privateEndpointName string, options *PrivateEndpointsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PrivateEndpointsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, privateEndpointName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *PrivateEndpointsClient) deleteCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *PrivateEndpointsClient) deleteCreateRequest(ctx context.Context, r
 // Get - Gets the specified private endpoint by resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - privateEndpointName - The name of the private endpoint.
 //   - options - PrivateEndpointsClientGetOptions contains the optional parameters for the PrivateEndpointsClient.Get method.
 func (client *PrivateEndpointsClient) Get(ctx context.Context, resourceGroupName string, privateEndpointName string, options *PrivateEndpointsClientGetOptions) (PrivateEndpointsClientGetResponse, error) {
+	var err error
+	const operationName = "PrivateEndpointsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, privateEndpointName, options)
 	if err != nil {
 		return PrivateEndpointsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PrivateEndpointsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PrivateEndpointsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PrivateEndpointsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *PrivateEndpointsClient) getCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -242,7 +271,7 @@ func (client *PrivateEndpointsClient) getHandleResponse(resp *http.Response) (Pr
 
 // NewListPager - Gets all private endpoints in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - PrivateEndpointsClientListOptions contains the optional parameters for the PrivateEndpointsClient.NewListPager
 //     method.
@@ -252,25 +281,20 @@ func (client *PrivateEndpointsClient) NewListPager(resourceGroupName string, opt
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PrivateEndpointsClientListResponse) (PrivateEndpointsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PrivateEndpointsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return PrivateEndpointsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return PrivateEndpointsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PrivateEndpointsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -290,7 +314,7 @@ func (client *PrivateEndpointsClient) listCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -307,7 +331,7 @@ func (client *PrivateEndpointsClient) listHandleResponse(resp *http.Response) (P
 
 // NewListBySubscriptionPager - Gets all private endpoints in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - PrivateEndpointsClientListBySubscriptionOptions contains the optional parameters for the PrivateEndpointsClient.NewListBySubscriptionPager
 //     method.
 func (client *PrivateEndpointsClient) NewListBySubscriptionPager(options *PrivateEndpointsClientListBySubscriptionOptions) *runtime.Pager[PrivateEndpointsClientListBySubscriptionResponse] {
@@ -316,25 +340,20 @@ func (client *PrivateEndpointsClient) NewListBySubscriptionPager(options *Privat
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PrivateEndpointsClientListBySubscriptionResponse) (PrivateEndpointsClientListBySubscriptionResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listBySubscriptionCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PrivateEndpointsClient.NewListBySubscriptionPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listBySubscriptionCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return PrivateEndpointsClientListBySubscriptionResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return PrivateEndpointsClientListBySubscriptionResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PrivateEndpointsClientListBySubscriptionResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listBySubscriptionHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -350,7 +369,7 @@ func (client *PrivateEndpointsClient) listBySubscriptionCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/privatelinkservices_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/privatelinkservices_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/privatelinkservices_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/privatelinkservices_client.go
index 57580681728..703fda2d2c8 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/privatelinkservices_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/privatelinkservices_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type PrivateLinkServicesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewPrivateLinkServicesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*PrivateLinkServicesClient, error) {
-	cl, err := arm.NewClient(moduleName+".PrivateLinkServicesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewPrivateLinkServicesClient(subscriptionID string, credential azcore.Token
 // BeginCheckPrivateLinkServiceVisibility - Checks whether the subscription is visible to private link service.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location of the domain name.
 //   - parameters - The request body of CheckPrivateLinkService API call.
 //   - options - PrivateLinkServicesClientBeginCheckPrivateLinkServiceVisibilityOptions contains the optional parameters for the
@@ -59,31 +58,41 @@ func (client *PrivateLinkServicesClient) BeginCheckPrivateLinkServiceVisibility(
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CheckPrivateLinkServiceVisibility - Checks whether the subscription is visible to private link service.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PrivateLinkServicesClient) checkPrivateLinkServiceVisibility(ctx context.Context, location string, parameters CheckPrivateLinkServiceVisibilityRequest, options *PrivateLinkServicesClientBeginCheckPrivateLinkServiceVisibilityOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PrivateLinkServicesClient.BeginCheckPrivateLinkServiceVisibility"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.checkPrivateLinkServiceVisibilityCreateRequest(ctx, location, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // checkPrivateLinkServiceVisibilityCreateRequest creates the CheckPrivateLinkServiceVisibility request.
@@ -102,17 +111,20 @@ func (client *PrivateLinkServicesClient) checkPrivateLinkServiceVisibilityCreate
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginCheckPrivateLinkServiceVisibilityByResourceGroup - Checks whether the subscription is visible to private link service
 // in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location of the domain name.
 //   - resourceGroupName - The name of the resource group.
 //   - parameters - The request body of CheckPrivateLinkService API call.
@@ -124,11 +136,15 @@ func (client *PrivateLinkServicesClient) BeginCheckPrivateLinkServiceVisibilityB
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityByResourceGroupResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityByResourceGroupResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityByResourceGroupResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityByResourceGroupResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -136,20 +152,26 @@ func (client *PrivateLinkServicesClient) BeginCheckPrivateLinkServiceVisibilityB
 // the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PrivateLinkServicesClient) checkPrivateLinkServiceVisibilityByResourceGroup(ctx context.Context, location string, resourceGroupName string, parameters CheckPrivateLinkServiceVisibilityRequest, options *PrivateLinkServicesClientBeginCheckPrivateLinkServiceVisibilityByResourceGroupOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PrivateLinkServicesClient.BeginCheckPrivateLinkServiceVisibilityByResourceGroup"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.checkPrivateLinkServiceVisibilityByResourceGroupCreateRequest(ctx, location, resourceGroupName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // checkPrivateLinkServiceVisibilityByResourceGroupCreateRequest creates the CheckPrivateLinkServiceVisibilityByResourceGroup request.
@@ -172,16 +194,19 @@ func (client *PrivateLinkServicesClient) checkPrivateLinkServiceVisibilityByReso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginCreateOrUpdate - Creates or updates an private link service in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceName - The name of the private link service.
 //   - parameters - Parameters supplied to the create or update private link service operation.
@@ -193,31 +218,41 @@ func (client *PrivateLinkServicesClient) BeginCreateOrUpdate(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateLinkServicesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateLinkServicesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PrivateLinkServicesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PrivateLinkServicesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates an private link service in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PrivateLinkServicesClient) createOrUpdate(ctx context.Context, resourceGroupName string, serviceName string, parameters PrivateLinkService, options *PrivateLinkServicesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PrivateLinkServicesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, serviceName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -240,16 +275,19 @@ func (client *PrivateLinkServicesClient) createOrUpdateCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified private link service.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceName - The name of the private link service.
 //   - options - PrivateLinkServicesClientBeginDeleteOptions contains the optional parameters for the PrivateLinkServicesClient.BeginDelete
@@ -260,31 +298,41 @@ func (client *PrivateLinkServicesClient) BeginDelete(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateLinkServicesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateLinkServicesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PrivateLinkServicesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PrivateLinkServicesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified private link service.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PrivateLinkServicesClient) deleteOperation(ctx context.Context, resourceGroupName string, serviceName string, options *PrivateLinkServicesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PrivateLinkServicesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, serviceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -307,7 +355,7 @@ func (client *PrivateLinkServicesClient) deleteCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -316,7 +364,7 @@ func (client *PrivateLinkServicesClient) deleteCreateRequest(ctx context.Context
 // BeginDeletePrivateEndpointConnection - Delete private end point connection for a private link service in a subscription.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceName - The name of the private link service.
 //   - peConnectionName - The name of the private end point connection.
@@ -328,31 +376,41 @@ func (client *PrivateLinkServicesClient) BeginDeletePrivateEndpointConnection(ct
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateLinkServicesClientDeletePrivateEndpointConnectionResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PrivateLinkServicesClientDeletePrivateEndpointConnectionResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PrivateLinkServicesClientDeletePrivateEndpointConnectionResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PrivateLinkServicesClientDeletePrivateEndpointConnectionResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // DeletePrivateEndpointConnection - Delete private end point connection for a private link service in a subscription.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PrivateLinkServicesClient) deletePrivateEndpointConnection(ctx context.Context, resourceGroupName string, serviceName string, peConnectionName string, options *PrivateLinkServicesClientBeginDeletePrivateEndpointConnectionOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PrivateLinkServicesClient.BeginDeletePrivateEndpointConnection"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deletePrivateEndpointConnectionCreateRequest(ctx, resourceGroupName, serviceName, peConnectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deletePrivateEndpointConnectionCreateRequest creates the DeletePrivateEndpointConnection request.
@@ -379,7 +437,7 @@ func (client *PrivateLinkServicesClient) deletePrivateEndpointConnectionCreateRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -388,23 +446,30 @@ func (client *PrivateLinkServicesClient) deletePrivateEndpointConnectionCreateRe
 // Get - Gets the specified private link service by resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceName - The name of the private link service.
 //   - options - PrivateLinkServicesClientGetOptions contains the optional parameters for the PrivateLinkServicesClient.Get method.
 func (client *PrivateLinkServicesClient) Get(ctx context.Context, resourceGroupName string, serviceName string, options *PrivateLinkServicesClientGetOptions) (PrivateLinkServicesClientGetResponse, error) {
+	var err error
+	const operationName = "PrivateLinkServicesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, serviceName, options)
 	if err != nil {
 		return PrivateLinkServicesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PrivateLinkServicesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PrivateLinkServicesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PrivateLinkServicesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -427,7 +492,7 @@ func (client *PrivateLinkServicesClient) getCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -449,25 +514,32 @@ func (client *PrivateLinkServicesClient) getHandleResponse(resp *http.Response)
 // group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceName - The name of the private link service.
 //   - peConnectionName - The name of the private end point connection.
 //   - options - PrivateLinkServicesClientGetPrivateEndpointConnectionOptions contains the optional parameters for the PrivateLinkServicesClient.GetPrivateEndpointConnection
 //     method.
 func (client *PrivateLinkServicesClient) GetPrivateEndpointConnection(ctx context.Context, resourceGroupName string, serviceName string, peConnectionName string, options *PrivateLinkServicesClientGetPrivateEndpointConnectionOptions) (PrivateLinkServicesClientGetPrivateEndpointConnectionResponse, error) {
+	var err error
+	const operationName = "PrivateLinkServicesClient.GetPrivateEndpointConnection"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getPrivateEndpointConnectionCreateRequest(ctx, resourceGroupName, serviceName, peConnectionName, options)
 	if err != nil {
 		return PrivateLinkServicesClientGetPrivateEndpointConnectionResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PrivateLinkServicesClientGetPrivateEndpointConnectionResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PrivateLinkServicesClientGetPrivateEndpointConnectionResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PrivateLinkServicesClientGetPrivateEndpointConnectionResponse{}, err
 	}
-	return client.getPrivateEndpointConnectionHandleResponse(resp)
+	resp, err := client.getPrivateEndpointConnectionHandleResponse(httpResp)
+	return resp, err
 }
 
 // getPrivateEndpointConnectionCreateRequest creates the GetPrivateEndpointConnection request.
@@ -494,7 +566,7 @@ func (client *PrivateLinkServicesClient) getPrivateEndpointConnectionCreateReque
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -514,7 +586,7 @@ func (client *PrivateLinkServicesClient) getPrivateEndpointConnectionHandleRespo
 
 // NewListPager - Gets all private link services in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - PrivateLinkServicesClientListOptions contains the optional parameters for the PrivateLinkServicesClient.NewListPager
 //     method.
@@ -524,25 +596,20 @@ func (client *PrivateLinkServicesClient) NewListPager(resourceGroupName string,
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PrivateLinkServicesClientListResponse) (PrivateLinkServicesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PrivateLinkServicesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return PrivateLinkServicesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return PrivateLinkServicesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PrivateLinkServicesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -562,7 +629,7 @@ func (client *PrivateLinkServicesClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -580,7 +647,7 @@ func (client *PrivateLinkServicesClient) listHandleResponse(resp *http.Response)
 // NewListAutoApprovedPrivateLinkServicesPager - Returns all of the private link service ids that can be linked to a Private
 // Endpoint with auto approved in this subscription in this region.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location of the domain name.
 //   - options - PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesOptions contains the optional parameters for the
 //     PrivateLinkServicesClient.NewListAutoApprovedPrivateLinkServicesPager method.
@@ -590,25 +657,20 @@ func (client *PrivateLinkServicesClient) NewListAutoApprovedPrivateLinkServicesP
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesResponse) (PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAutoApprovedPrivateLinkServicesCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PrivateLinkServicesClient.NewListAutoApprovedPrivateLinkServicesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAutoApprovedPrivateLinkServicesCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAutoApprovedPrivateLinkServicesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -628,7 +690,7 @@ func (client *PrivateLinkServicesClient) listAutoApprovedPrivateLinkServicesCrea
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -646,7 +708,7 @@ func (client *PrivateLinkServicesClient) listAutoApprovedPrivateLinkServicesHand
 // NewListAutoApprovedPrivateLinkServicesByResourceGroupPager - Returns all of the private link service ids that can be linked
 // to a Private Endpoint with auto approved in this subscription in this region.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location of the domain name.
 //   - resourceGroupName - The name of the resource group.
 //   - options - PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupOptions contains the optional parameters
@@ -657,25 +719,20 @@ func (client *PrivateLinkServicesClient) NewListAutoApprovedPrivateLinkServicesB
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupResponse) (PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAutoApprovedPrivateLinkServicesByResourceGroupCreateRequest(ctx, location, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PrivateLinkServicesClient.NewListAutoApprovedPrivateLinkServicesByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAutoApprovedPrivateLinkServicesByResourceGroupCreateRequest(ctx, location, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAutoApprovedPrivateLinkServicesByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -699,7 +756,7 @@ func (client *PrivateLinkServicesClient) listAutoApprovedPrivateLinkServicesByRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -716,7 +773,7 @@ func (client *PrivateLinkServicesClient) listAutoApprovedPrivateLinkServicesByRe
 
 // NewListBySubscriptionPager - Gets all private link service in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - PrivateLinkServicesClientListBySubscriptionOptions contains the optional parameters for the PrivateLinkServicesClient.NewListBySubscriptionPager
 //     method.
 func (client *PrivateLinkServicesClient) NewListBySubscriptionPager(options *PrivateLinkServicesClientListBySubscriptionOptions) *runtime.Pager[PrivateLinkServicesClientListBySubscriptionResponse] {
@@ -725,25 +782,20 @@ func (client *PrivateLinkServicesClient) NewListBySubscriptionPager(options *Pri
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PrivateLinkServicesClientListBySubscriptionResponse) (PrivateLinkServicesClientListBySubscriptionResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listBySubscriptionCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return PrivateLinkServicesClientListBySubscriptionResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PrivateLinkServicesClient.NewListBySubscriptionPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listBySubscriptionCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return PrivateLinkServicesClientListBySubscriptionResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PrivateLinkServicesClientListBySubscriptionResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listBySubscriptionHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -759,7 +811,7 @@ func (client *PrivateLinkServicesClient) listBySubscriptionCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -776,7 +828,7 @@ func (client *PrivateLinkServicesClient) listBySubscriptionHandleResponse(resp *
 
 // NewListPrivateEndpointConnectionsPager - Gets all private end point connections for a specific private link service.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceName - The name of the private link service.
 //   - options - PrivateLinkServicesClientListPrivateEndpointConnectionsOptions contains the optional parameters for the PrivateLinkServicesClient.NewListPrivateEndpointConnectionsPager
@@ -787,25 +839,20 @@ func (client *PrivateLinkServicesClient) NewListPrivateEndpointConnectionsPager(
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PrivateLinkServicesClientListPrivateEndpointConnectionsResponse) (PrivateLinkServicesClientListPrivateEndpointConnectionsResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listPrivateEndpointConnectionsCreateRequest(ctx, resourceGroupName, serviceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return PrivateLinkServicesClientListPrivateEndpointConnectionsResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PrivateLinkServicesClient.NewListPrivateEndpointConnectionsPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listPrivateEndpointConnectionsCreateRequest(ctx, resourceGroupName, serviceName, options)
+			}, nil)
 			if err != nil {
 				return PrivateLinkServicesClientListPrivateEndpointConnectionsResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PrivateLinkServicesClientListPrivateEndpointConnectionsResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listPrivateEndpointConnectionsHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -829,7 +876,7 @@ func (client *PrivateLinkServicesClient) listPrivateEndpointConnectionsCreateReq
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -847,7 +894,7 @@ func (client *PrivateLinkServicesClient) listPrivateEndpointConnectionsHandleRes
 // UpdatePrivateEndpointConnection - Approve or reject private end point connection for a private link service in a subscription.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceName - The name of the private link service.
 //   - peConnectionName - The name of the private end point connection.
@@ -855,18 +902,25 @@ func (client *PrivateLinkServicesClient) listPrivateEndpointConnectionsHandleRes
 //   - options - PrivateLinkServicesClientUpdatePrivateEndpointConnectionOptions contains the optional parameters for the PrivateLinkServicesClient.UpdatePrivateEndpointConnection
 //     method.
 func (client *PrivateLinkServicesClient) UpdatePrivateEndpointConnection(ctx context.Context, resourceGroupName string, serviceName string, peConnectionName string, parameters PrivateEndpointConnection, options *PrivateLinkServicesClientUpdatePrivateEndpointConnectionOptions) (PrivateLinkServicesClientUpdatePrivateEndpointConnectionResponse, error) {
+	var err error
+	const operationName = "PrivateLinkServicesClient.UpdatePrivateEndpointConnection"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updatePrivateEndpointConnectionCreateRequest(ctx, resourceGroupName, serviceName, peConnectionName, parameters, options)
 	if err != nil {
 		return PrivateLinkServicesClientUpdatePrivateEndpointConnectionResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PrivateLinkServicesClientUpdatePrivateEndpointConnectionResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PrivateLinkServicesClientUpdatePrivateEndpointConnectionResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PrivateLinkServicesClientUpdatePrivateEndpointConnectionResponse{}, err
 	}
-	return client.updatePrivateEndpointConnectionHandleResponse(resp)
+	resp, err := client.updatePrivateEndpointConnectionHandleResponse(httpResp)
+	return resp, err
 }
 
 // updatePrivateEndpointConnectionCreateRequest creates the UpdatePrivateEndpointConnection request.
@@ -893,10 +947,13 @@ func (client *PrivateLinkServicesClient) updatePrivateEndpointConnectionCreateRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updatePrivateEndpointConnectionHandleResponse handles the UpdatePrivateEndpointConnection response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/profiles_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/profiles_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/profiles_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/profiles_client.go
index 9b38c8e71cb..729f1c036e4 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/profiles_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/profiles_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ProfilesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewProfilesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ProfilesClient, error) {
-	cl, err := arm.NewClient(moduleName+".ProfilesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,24 +47,31 @@ func NewProfilesClient(subscriptionID string, credential azcore.TokenCredential,
 // CreateOrUpdate - Creates or updates a network profile.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkProfileName - The name of the network profile.
 //   - parameters - Parameters supplied to the create or update network profile operation.
 //   - options - ProfilesClientCreateOrUpdateOptions contains the optional parameters for the ProfilesClient.CreateOrUpdate method.
 func (client *ProfilesClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, networkProfileName string, parameters Profile, options *ProfilesClientCreateOrUpdateOptions) (ProfilesClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "ProfilesClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkProfileName, parameters, options)
 	if err != nil {
 		return ProfilesClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ProfilesClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return ProfilesClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return ProfilesClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -88,10 +94,13 @@ func (client *ProfilesClient) createOrUpdateCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -106,7 +115,7 @@ func (client *ProfilesClient) createOrUpdateHandleResponse(resp *http.Response)
 // BeginDelete - Deletes the specified network profile.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkProfileName - The name of the NetworkProfile.
 //   - options - ProfilesClientBeginDeleteOptions contains the optional parameters for the ProfilesClient.BeginDelete method.
@@ -116,31 +125,41 @@ func (client *ProfilesClient) BeginDelete(ctx context.Context, resourceGroupName
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ProfilesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ProfilesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ProfilesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ProfilesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified network profile.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ProfilesClient) deleteOperation(ctx context.Context, resourceGroupName string, networkProfileName string, options *ProfilesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ProfilesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkProfileName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -163,7 +182,7 @@ func (client *ProfilesClient) deleteCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -172,23 +191,30 @@ func (client *ProfilesClient) deleteCreateRequest(ctx context.Context, resourceG
 // Get - Gets the specified network profile in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkProfileName - The name of the public IP prefix.
 //   - options - ProfilesClientGetOptions contains the optional parameters for the ProfilesClient.Get method.
 func (client *ProfilesClient) Get(ctx context.Context, resourceGroupName string, networkProfileName string, options *ProfilesClientGetOptions) (ProfilesClientGetResponse, error) {
+	var err error
+	const operationName = "ProfilesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkProfileName, options)
 	if err != nil {
 		return ProfilesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ProfilesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ProfilesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ProfilesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -211,7 +237,7 @@ func (client *ProfilesClient) getCreateRequest(ctx context.Context, resourceGrou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -231,7 +257,7 @@ func (client *ProfilesClient) getHandleResponse(resp *http.Response) (ProfilesCl
 
 // NewListPager - Gets all network profiles in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - ProfilesClientListOptions contains the optional parameters for the ProfilesClient.NewListPager method.
 func (client *ProfilesClient) NewListPager(resourceGroupName string, options *ProfilesClientListOptions) *runtime.Pager[ProfilesClientListResponse] {
@@ -240,25 +266,20 @@ func (client *ProfilesClient) NewListPager(resourceGroupName string, options *Pr
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ProfilesClientListResponse) (ProfilesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ProfilesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ProfilesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return ProfilesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ProfilesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -278,7 +299,7 @@ func (client *ProfilesClient) listCreateRequest(ctx context.Context, resourceGro
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -295,7 +316,7 @@ func (client *ProfilesClient) listHandleResponse(resp *http.Response) (ProfilesC
 
 // NewListAllPager - Gets all the network profiles in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ProfilesClientListAllOptions contains the optional parameters for the ProfilesClient.NewListAllPager method.
 func (client *ProfilesClient) NewListAllPager(options *ProfilesClientListAllOptions) *runtime.Pager[ProfilesClientListAllResponse] {
 	return runtime.NewPager(runtime.PagingHandler[ProfilesClientListAllResponse]{
@@ -303,25 +324,20 @@ func (client *ProfilesClient) NewListAllPager(options *ProfilesClientListAllOpti
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ProfilesClientListAllResponse) (ProfilesClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ProfilesClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ProfilesClientListAllResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ProfilesClientListAllResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ProfilesClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -337,7 +353,7 @@ func (client *ProfilesClient) listAllCreateRequest(ctx context.Context, options
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -355,24 +371,31 @@ func (client *ProfilesClient) listAllHandleResponse(resp *http.Response) (Profil
 // UpdateTags - Updates network profile tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkProfileName - The name of the network profile.
 //   - parameters - Parameters supplied to update network profile tags.
 //   - options - ProfilesClientUpdateTagsOptions contains the optional parameters for the ProfilesClient.UpdateTags method.
 func (client *ProfilesClient) UpdateTags(ctx context.Context, resourceGroupName string, networkProfileName string, parameters TagsObject, options *ProfilesClientUpdateTagsOptions) (ProfilesClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "ProfilesClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, networkProfileName, parameters, options)
 	if err != nil {
 		return ProfilesClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ProfilesClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ProfilesClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ProfilesClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -395,10 +418,13 @@ func (client *ProfilesClient) updateTagsCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/publicipaddresses_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/publicipaddresses_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/publicipaddresses_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/publicipaddresses_client.go
index 653cbef8ca0..62d60e062cf 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/publicipaddresses_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/publicipaddresses_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type PublicIPAddressesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewPublicIPAddressesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*PublicIPAddressesClient, error) {
-	cl, err := arm.NewClient(moduleName+".PublicIPAddressesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewPublicIPAddressesClient(subscriptionID string, credential azcore.TokenCr
 // BeginCreateOrUpdate - Creates or updates a static or dynamic public IP address.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - publicIPAddressName - The name of the public IP address.
 //   - parameters - Parameters supplied to the create or update public IP address operation.
@@ -60,31 +59,41 @@ func (client *PublicIPAddressesClient) BeginCreateOrUpdate(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PublicIPAddressesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PublicIPAddressesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PublicIPAddressesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PublicIPAddressesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a static or dynamic public IP address.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PublicIPAddressesClient) createOrUpdate(ctx context.Context, resourceGroupName string, publicIPAddressName string, parameters PublicIPAddress, options *PublicIPAddressesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PublicIPAddressesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, publicIPAddressName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *PublicIPAddressesClient) createOrUpdateCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDdosProtectionStatus - Gets the Ddos Protection Status of a Public IP Address
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - publicIPAddressName - The name of the public IP address.
 //   - options - PublicIPAddressesClientBeginDdosProtectionStatusOptions contains the optional parameters for the PublicIPAddressesClient.BeginDdosProtectionStatus
@@ -127,31 +139,41 @@ func (client *PublicIPAddressesClient) BeginDdosProtectionStatus(ctx context.Con
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PublicIPAddressesClientDdosProtectionStatusResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PublicIPAddressesClientDdosProtectionStatusResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PublicIPAddressesClientDdosProtectionStatusResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PublicIPAddressesClientDdosProtectionStatusResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // DdosProtectionStatus - Gets the Ddos Protection Status of a Public IP Address
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PublicIPAddressesClient) ddosProtectionStatus(ctx context.Context, resourceGroupName string, publicIPAddressName string, options *PublicIPAddressesClientBeginDdosProtectionStatusOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PublicIPAddressesClient.BeginDdosProtectionStatus"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.ddosProtectionStatusCreateRequest(ctx, resourceGroupName, publicIPAddressName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // ddosProtectionStatusCreateRequest creates the DdosProtectionStatus request.
@@ -174,7 +196,7 @@ func (client *PublicIPAddressesClient) ddosProtectionStatusCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,7 +205,7 @@ func (client *PublicIPAddressesClient) ddosProtectionStatusCreateRequest(ctx con
 // BeginDelete - Deletes the specified public IP address.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - publicIPAddressName - The name of the public IP address.
 //   - options - PublicIPAddressesClientBeginDeleteOptions contains the optional parameters for the PublicIPAddressesClient.BeginDelete
@@ -194,31 +216,41 @@ func (client *PublicIPAddressesClient) BeginDelete(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PublicIPAddressesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PublicIPAddressesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PublicIPAddressesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PublicIPAddressesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified public IP address.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PublicIPAddressesClient) deleteOperation(ctx context.Context, resourceGroupName string, publicIPAddressName string, options *PublicIPAddressesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PublicIPAddressesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, publicIPAddressName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -241,7 +273,7 @@ func (client *PublicIPAddressesClient) deleteCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -250,23 +282,30 @@ func (client *PublicIPAddressesClient) deleteCreateRequest(ctx context.Context,
 // Get - Gets the specified public IP address in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - publicIPAddressName - The name of the public IP address.
 //   - options - PublicIPAddressesClientGetOptions contains the optional parameters for the PublicIPAddressesClient.Get method.
 func (client *PublicIPAddressesClient) Get(ctx context.Context, resourceGroupName string, publicIPAddressName string, options *PublicIPAddressesClientGetOptions) (PublicIPAddressesClientGetResponse, error) {
+	var err error
+	const operationName = "PublicIPAddressesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, publicIPAddressName, options)
 	if err != nil {
 		return PublicIPAddressesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PublicIPAddressesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PublicIPAddressesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PublicIPAddressesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -289,7 +328,7 @@ func (client *PublicIPAddressesClient) getCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -310,7 +349,7 @@ func (client *PublicIPAddressesClient) getHandleResponse(resp *http.Response) (P
 // GetCloudServicePublicIPAddress - Get the specified public IP address in a cloud service.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - cloudServiceName - The name of the cloud service.
 //   - roleInstanceName - The role instance name.
@@ -320,18 +359,25 @@ func (client *PublicIPAddressesClient) getHandleResponse(resp *http.Response) (P
 //   - options - PublicIPAddressesClientGetCloudServicePublicIPAddressOptions contains the optional parameters for the PublicIPAddressesClient.GetCloudServicePublicIPAddress
 //     method.
 func (client *PublicIPAddressesClient) GetCloudServicePublicIPAddress(ctx context.Context, resourceGroupName string, cloudServiceName string, roleInstanceName string, networkInterfaceName string, ipConfigurationName string, publicIPAddressName string, options *PublicIPAddressesClientGetCloudServicePublicIPAddressOptions) (PublicIPAddressesClientGetCloudServicePublicIPAddressResponse, error) {
+	var err error
+	const operationName = "PublicIPAddressesClient.GetCloudServicePublicIPAddress"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCloudServicePublicIPAddressCreateRequest(ctx, resourceGroupName, cloudServiceName, roleInstanceName, networkInterfaceName, ipConfigurationName, publicIPAddressName, options)
 	if err != nil {
 		return PublicIPAddressesClientGetCloudServicePublicIPAddressResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PublicIPAddressesClientGetCloudServicePublicIPAddressResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PublicIPAddressesClientGetCloudServicePublicIPAddressResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PublicIPAddressesClientGetCloudServicePublicIPAddressResponse{}, err
 	}
-	return client.getCloudServicePublicIPAddressHandleResponse(resp)
+	resp, err := client.getCloudServicePublicIPAddressHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCloudServicePublicIPAddressCreateRequest creates the GetCloudServicePublicIPAddress request.
@@ -370,7 +416,7 @@ func (client *PublicIPAddressesClient) getCloudServicePublicIPAddressCreateReque
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -401,18 +447,25 @@ func (client *PublicIPAddressesClient) getCloudServicePublicIPAddressHandleRespo
 //   - options - PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressOptions contains the optional parameters for the
 //     PublicIPAddressesClient.GetVirtualMachineScaleSetPublicIPAddress method.
 func (client *PublicIPAddressesClient) GetVirtualMachineScaleSetPublicIPAddress(ctx context.Context, resourceGroupName string, virtualMachineScaleSetName string, virtualmachineIndex string, networkInterfaceName string, ipConfigurationName string, publicIPAddressName string, options *PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressOptions) (PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressResponse, error) {
+	var err error
+	const operationName = "PublicIPAddressesClient.GetVirtualMachineScaleSetPublicIPAddress"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getVirtualMachineScaleSetPublicIPAddressCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, virtualmachineIndex, networkInterfaceName, ipConfigurationName, publicIPAddressName, options)
 	if err != nil {
 		return PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressResponse{}, err
 	}
-	return client.getVirtualMachineScaleSetPublicIPAddressHandleResponse(resp)
+	resp, err := client.getVirtualMachineScaleSetPublicIPAddressHandleResponse(httpResp)
+	return resp, err
 }
 
 // getVirtualMachineScaleSetPublicIPAddressCreateRequest creates the GetVirtualMachineScaleSetPublicIPAddress request.
@@ -471,7 +524,7 @@ func (client *PublicIPAddressesClient) getVirtualMachineScaleSetPublicIPAddressH
 
 // NewListPager - Gets all public IP addresses in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - PublicIPAddressesClientListOptions contains the optional parameters for the PublicIPAddressesClient.NewListPager
 //     method.
@@ -481,25 +534,20 @@ func (client *PublicIPAddressesClient) NewListPager(resourceGroupName string, op
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PublicIPAddressesClientListResponse) (PublicIPAddressesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return PublicIPAddressesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PublicIPAddressesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return PublicIPAddressesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PublicIPAddressesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -519,7 +567,7 @@ func (client *PublicIPAddressesClient) listCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -536,7 +584,7 @@ func (client *PublicIPAddressesClient) listHandleResponse(resp *http.Response) (
 
 // NewListAllPager - Gets all the public IP addresses in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - PublicIPAddressesClientListAllOptions contains the optional parameters for the PublicIPAddressesClient.NewListAllPager
 //     method.
 func (client *PublicIPAddressesClient) NewListAllPager(options *PublicIPAddressesClientListAllOptions) *runtime.Pager[PublicIPAddressesClientListAllResponse] {
@@ -545,25 +593,20 @@ func (client *PublicIPAddressesClient) NewListAllPager(options *PublicIPAddresse
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PublicIPAddressesClientListAllResponse) (PublicIPAddressesClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PublicIPAddressesClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return PublicIPAddressesClientListAllResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return PublicIPAddressesClientListAllResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PublicIPAddressesClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -579,7 +622,7 @@ func (client *PublicIPAddressesClient) listAllCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -596,7 +639,7 @@ func (client *PublicIPAddressesClient) listAllHandleResponse(resp *http.Response
 
 // NewListCloudServicePublicIPAddressesPager - Gets information about all public IP addresses on a cloud service level.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - cloudServiceName - The name of the cloud service.
 //   - options - PublicIPAddressesClientListCloudServicePublicIPAddressesOptions contains the optional parameters for the PublicIPAddressesClient.NewListCloudServicePublicIPAddressesPager
@@ -607,25 +650,20 @@ func (client *PublicIPAddressesClient) NewListCloudServicePublicIPAddressesPager
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PublicIPAddressesClientListCloudServicePublicIPAddressesResponse) (PublicIPAddressesClientListCloudServicePublicIPAddressesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCloudServicePublicIPAddressesCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PublicIPAddressesClient.NewListCloudServicePublicIPAddressesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCloudServicePublicIPAddressesCreateRequest(ctx, resourceGroupName, cloudServiceName, options)
+			}, nil)
 			if err != nil {
 				return PublicIPAddressesClientListCloudServicePublicIPAddressesResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return PublicIPAddressesClientListCloudServicePublicIPAddressesResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PublicIPAddressesClientListCloudServicePublicIPAddressesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listCloudServicePublicIPAddressesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -649,7 +687,7 @@ func (client *PublicIPAddressesClient) listCloudServicePublicIPAddressesCreateRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -667,7 +705,7 @@ func (client *PublicIPAddressesClient) listCloudServicePublicIPAddressesHandleRe
 // NewListCloudServiceRoleInstancePublicIPAddressesPager - Gets information about all public IP addresses in a role instance
 // IP configuration in a cloud service.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - cloudServiceName - The name of the cloud service.
 //   - roleInstanceName - The name of role instance.
@@ -681,25 +719,20 @@ func (client *PublicIPAddressesClient) NewListCloudServiceRoleInstancePublicIPAd
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PublicIPAddressesClientListCloudServiceRoleInstancePublicIPAddressesResponse) (PublicIPAddressesClientListCloudServiceRoleInstancePublicIPAddressesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCloudServiceRoleInstancePublicIPAddressesCreateRequest(ctx, resourceGroupName, cloudServiceName, roleInstanceName, networkInterfaceName, ipConfigurationName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return PublicIPAddressesClientListCloudServiceRoleInstancePublicIPAddressesResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PublicIPAddressesClient.NewListCloudServiceRoleInstancePublicIPAddressesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCloudServiceRoleInstancePublicIPAddressesCreateRequest(ctx, resourceGroupName, cloudServiceName, roleInstanceName, networkInterfaceName, ipConfigurationName, options)
+			}, nil)
 			if err != nil {
 				return PublicIPAddressesClientListCloudServiceRoleInstancePublicIPAddressesResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PublicIPAddressesClientListCloudServiceRoleInstancePublicIPAddressesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listCloudServiceRoleInstancePublicIPAddressesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -735,7 +768,7 @@ func (client *PublicIPAddressesClient) listCloudServiceRoleInstancePublicIPAddre
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -764,25 +797,20 @@ func (client *PublicIPAddressesClient) NewListVirtualMachineScaleSetPublicIPAddr
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PublicIPAddressesClientListVirtualMachineScaleSetPublicIPAddressesResponse) (PublicIPAddressesClientListVirtualMachineScaleSetPublicIPAddressesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listVirtualMachineScaleSetPublicIPAddressesCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return PublicIPAddressesClientListVirtualMachineScaleSetPublicIPAddressesResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PublicIPAddressesClient.NewListVirtualMachineScaleSetPublicIPAddressesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listVirtualMachineScaleSetPublicIPAddressesCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, options)
+			}, nil)
 			if err != nil {
 				return PublicIPAddressesClientListVirtualMachineScaleSetPublicIPAddressesResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PublicIPAddressesClientListVirtualMachineScaleSetPublicIPAddressesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listVirtualMachineScaleSetPublicIPAddressesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -838,25 +866,20 @@ func (client *PublicIPAddressesClient) NewListVirtualMachineScaleSetVMPublicIPAd
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PublicIPAddressesClientListVirtualMachineScaleSetVMPublicIPAddressesResponse) (PublicIPAddressesClientListVirtualMachineScaleSetVMPublicIPAddressesResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listVirtualMachineScaleSetVMPublicIPAddressesCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, virtualmachineIndex, networkInterfaceName, ipConfigurationName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return PublicIPAddressesClientListVirtualMachineScaleSetVMPublicIPAddressesResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PublicIPAddressesClient.NewListVirtualMachineScaleSetVMPublicIPAddressesPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listVirtualMachineScaleSetVMPublicIPAddressesCreateRequest(ctx, resourceGroupName, virtualMachineScaleSetName, virtualmachineIndex, networkInterfaceName, ipConfigurationName, options)
+			}, nil)
 			if err != nil {
 				return PublicIPAddressesClientListVirtualMachineScaleSetVMPublicIPAddressesResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PublicIPAddressesClientListVirtualMachineScaleSetVMPublicIPAddressesResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listVirtualMachineScaleSetVMPublicIPAddressesHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -910,25 +933,32 @@ func (client *PublicIPAddressesClient) listVirtualMachineScaleSetVMPublicIPAddre
 // UpdateTags - Updates public IP address tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - publicIPAddressName - The name of the public IP address.
 //   - parameters - Parameters supplied to update public IP address tags.
 //   - options - PublicIPAddressesClientUpdateTagsOptions contains the optional parameters for the PublicIPAddressesClient.UpdateTags
 //     method.
 func (client *PublicIPAddressesClient) UpdateTags(ctx context.Context, resourceGroupName string, publicIPAddressName string, parameters TagsObject, options *PublicIPAddressesClientUpdateTagsOptions) (PublicIPAddressesClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "PublicIPAddressesClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, publicIPAddressName, parameters, options)
 	if err != nil {
 		return PublicIPAddressesClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PublicIPAddressesClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PublicIPAddressesClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PublicIPAddressesClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -951,10 +981,13 @@ func (client *PublicIPAddressesClient) updateTagsCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/publicipprefixes_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/publicipprefixes_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/publicipprefixes_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/publicipprefixes_client.go
index 8c78d39a597..992e2020054 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/publicipprefixes_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/publicipprefixes_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type PublicIPPrefixesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewPublicIPPrefixesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*PublicIPPrefixesClient, error) {
-	cl, err := arm.NewClient(moduleName+".PublicIPPrefixesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewPublicIPPrefixesClient(subscriptionID string, credential azcore.TokenCre
 // BeginCreateOrUpdate - Creates or updates a static or dynamic public IP prefix.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - publicIPPrefixName - The name of the public IP prefix.
 //   - parameters - Parameters supplied to the create or update public IP prefix operation.
@@ -60,31 +59,41 @@ func (client *PublicIPPrefixesClient) BeginCreateOrUpdate(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PublicIPPrefixesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PublicIPPrefixesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PublicIPPrefixesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PublicIPPrefixesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a static or dynamic public IP prefix.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PublicIPPrefixesClient) createOrUpdate(ctx context.Context, resourceGroupName string, publicIPPrefixName string, parameters PublicIPPrefix, options *PublicIPPrefixesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PublicIPPrefixesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, publicIPPrefixName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *PublicIPPrefixesClient) createOrUpdateCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified public IP prefix.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - publicIPPrefixName - The name of the PublicIpPrefix.
 //   - options - PublicIPPrefixesClientBeginDeleteOptions contains the optional parameters for the PublicIPPrefixesClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *PublicIPPrefixesClient) BeginDelete(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PublicIPPrefixesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[PublicIPPrefixesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[PublicIPPrefixesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[PublicIPPrefixesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified public IP prefix.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *PublicIPPrefixesClient) deleteOperation(ctx context.Context, resourceGroupName string, publicIPPrefixName string, options *PublicIPPrefixesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "PublicIPPrefixesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, publicIPPrefixName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *PublicIPPrefixesClient) deleteCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *PublicIPPrefixesClient) deleteCreateRequest(ctx context.Context, r
 // Get - Gets the specified public IP prefix in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - publicIPPrefixName - The name of the public IP prefix.
 //   - options - PublicIPPrefixesClientGetOptions contains the optional parameters for the PublicIPPrefixesClient.Get method.
 func (client *PublicIPPrefixesClient) Get(ctx context.Context, resourceGroupName string, publicIPPrefixName string, options *PublicIPPrefixesClientGetOptions) (PublicIPPrefixesClientGetResponse, error) {
+	var err error
+	const operationName = "PublicIPPrefixesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, publicIPPrefixName, options)
 	if err != nil {
 		return PublicIPPrefixesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PublicIPPrefixesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PublicIPPrefixesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PublicIPPrefixesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *PublicIPPrefixesClient) getCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -242,7 +271,7 @@ func (client *PublicIPPrefixesClient) getHandleResponse(resp *http.Response) (Pu
 
 // NewListPager - Gets all public IP prefixes in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - PublicIPPrefixesClientListOptions contains the optional parameters for the PublicIPPrefixesClient.NewListPager
 //     method.
@@ -252,25 +281,20 @@ func (client *PublicIPPrefixesClient) NewListPager(resourceGroupName string, opt
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PublicIPPrefixesClientListResponse) (PublicIPPrefixesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return PublicIPPrefixesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PublicIPPrefixesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return PublicIPPrefixesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PublicIPPrefixesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -290,7 +314,7 @@ func (client *PublicIPPrefixesClient) listCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -307,7 +331,7 @@ func (client *PublicIPPrefixesClient) listHandleResponse(resp *http.Response) (P
 
 // NewListAllPager - Gets all the public IP prefixes in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - PublicIPPrefixesClientListAllOptions contains the optional parameters for the PublicIPPrefixesClient.NewListAllPager
 //     method.
 func (client *PublicIPPrefixesClient) NewListAllPager(options *PublicIPPrefixesClientListAllOptions) *runtime.Pager[PublicIPPrefixesClientListAllResponse] {
@@ -316,25 +340,20 @@ func (client *PublicIPPrefixesClient) NewListAllPager(options *PublicIPPrefixesC
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *PublicIPPrefixesClientListAllResponse) (PublicIPPrefixesClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return PublicIPPrefixesClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "PublicIPPrefixesClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return PublicIPPrefixesClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return PublicIPPrefixesClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -350,7 +369,7 @@ func (client *PublicIPPrefixesClient) listAllCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -368,25 +387,32 @@ func (client *PublicIPPrefixesClient) listAllHandleResponse(resp *http.Response)
 // UpdateTags - Updates public IP prefix tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - publicIPPrefixName - The name of the public IP prefix.
 //   - parameters - Parameters supplied to update public IP prefix tags.
 //   - options - PublicIPPrefixesClientUpdateTagsOptions contains the optional parameters for the PublicIPPrefixesClient.UpdateTags
 //     method.
 func (client *PublicIPPrefixesClient) UpdateTags(ctx context.Context, resourceGroupName string, publicIPPrefixName string, parameters TagsObject, options *PublicIPPrefixesClientUpdateTagsOptions) (PublicIPPrefixesClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "PublicIPPrefixesClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, publicIPPrefixName, parameters, options)
 	if err != nil {
 		return PublicIPPrefixesClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return PublicIPPrefixesClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return PublicIPPrefixesClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return PublicIPPrefixesClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -409,10 +435,13 @@ func (client *PublicIPPrefixesClient) updateTagsCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/resourcenavigationlinks_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/resourcenavigationlinks_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/resourcenavigationlinks_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/resourcenavigationlinks_client.go
index 02f6b4aaf0f..9968fd01f88 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/resourcenavigationlinks_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/resourcenavigationlinks_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ResourceNavigationLinksClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewResourceNavigationLinksClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ResourceNavigationLinksClient, error) {
-	cl, err := arm.NewClient(moduleName+".ResourceNavigationLinksClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewResourceNavigationLinksClient(subscriptionID string, credential azcore.T
 // List - Gets a list of resource navigation links for a subnet.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - subnetName - The name of the subnet.
 //   - options - ResourceNavigationLinksClientListOptions contains the optional parameters for the ResourceNavigationLinksClient.List
 //     method.
 func (client *ResourceNavigationLinksClient) List(ctx context.Context, resourceGroupName string, virtualNetworkName string, subnetName string, options *ResourceNavigationLinksClientListOptions) (ResourceNavigationLinksClientListResponse, error) {
+	var err error
+	const operationName = "ResourceNavigationLinksClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, resourceGroupName, virtualNetworkName, subnetName, options)
 	if err != nil {
 		return ResourceNavigationLinksClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ResourceNavigationLinksClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ResourceNavigationLinksClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ResourceNavigationLinksClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -93,7 +99,7 @@ func (client *ResourceNavigationLinksClient) listCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/response_types.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/response_types.go
similarity index 81%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/response_types.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/response_types.go
index abd176de333..d59e968e4fb 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/response_types.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/response_types.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -13,6 +12,7 @@ import "encoding/json"
 
 // AdminRuleCollectionsClientCreateOrUpdateResponse contains the response from method AdminRuleCollectionsClient.CreateOrUpdate.
 type AdminRuleCollectionsClientCreateOrUpdateResponse struct {
+	// Defines the admin rule collection.
 	AdminRuleCollection
 }
 
@@ -23,16 +23,19 @@ type AdminRuleCollectionsClientDeleteResponse struct {
 
 // AdminRuleCollectionsClientGetResponse contains the response from method AdminRuleCollectionsClient.Get.
 type AdminRuleCollectionsClientGetResponse struct {
+	// Defines the admin rule collection.
 	AdminRuleCollection
 }
 
 // AdminRuleCollectionsClientListResponse contains the response from method AdminRuleCollectionsClient.NewListPager.
 type AdminRuleCollectionsClientListResponse struct {
+	// Security admin configuration rule collection list result.
 	AdminRuleCollectionListResult
 }
 
 // AdminRulesClientCreateOrUpdateResponse contains the response from method AdminRulesClient.CreateOrUpdate.
 type AdminRulesClientCreateOrUpdateResponse struct {
+	// Network base admin rule.
 	BaseAdminRuleClassification
 }
 
@@ -53,6 +56,7 @@ type AdminRulesClientDeleteResponse struct {
 
 // AdminRulesClientGetResponse contains the response from method AdminRulesClient.Get.
 type AdminRulesClientGetResponse struct {
+	// Network base admin rule.
 	BaseAdminRuleClassification
 }
 
@@ -68,6 +72,7 @@ func (a *AdminRulesClientGetResponse) UnmarshalJSON(data []byte) error {
 
 // AdminRulesClientListResponse contains the response from method AdminRulesClient.NewListPager.
 type AdminRulesClientListResponse struct {
+	// security configuration admin rule list result.
 	AdminRuleListResult
 }
 
@@ -78,46 +83,57 @@ type ApplicationGatewayPrivateEndpointConnectionsClientDeleteResponse struct {
 
 // ApplicationGatewayPrivateEndpointConnectionsClientGetResponse contains the response from method ApplicationGatewayPrivateEndpointConnectionsClient.Get.
 type ApplicationGatewayPrivateEndpointConnectionsClientGetResponse struct {
+	// Private Endpoint connection on an application gateway.
 	ApplicationGatewayPrivateEndpointConnection
 }
 
 // ApplicationGatewayPrivateEndpointConnectionsClientListResponse contains the response from method ApplicationGatewayPrivateEndpointConnectionsClient.NewListPager.
 type ApplicationGatewayPrivateEndpointConnectionsClientListResponse struct {
+	// Response for ListApplicationGatewayPrivateEndpointConnection API service call. Gets all private endpoint connections for
+	// an application gateway.
 	ApplicationGatewayPrivateEndpointConnectionListResult
 }
 
 // ApplicationGatewayPrivateEndpointConnectionsClientUpdateResponse contains the response from method ApplicationGatewayPrivateEndpointConnectionsClient.BeginUpdate.
 type ApplicationGatewayPrivateEndpointConnectionsClientUpdateResponse struct {
+	// Private Endpoint connection on an application gateway.
 	ApplicationGatewayPrivateEndpointConnection
 }
 
 // ApplicationGatewayPrivateLinkResourcesClientListResponse contains the response from method ApplicationGatewayPrivateLinkResourcesClient.NewListPager.
 type ApplicationGatewayPrivateLinkResourcesClientListResponse struct {
+	// Response for ListApplicationGatewayPrivateLinkResources API service call. Gets all private link resources for an application
+	// gateway.
 	ApplicationGatewayPrivateLinkResourceListResult
 }
 
 // ApplicationGatewayWafDynamicManifestsClientGetResponse contains the response from method ApplicationGatewayWafDynamicManifestsClient.NewGetPager.
 type ApplicationGatewayWafDynamicManifestsClientGetResponse struct {
+	// Response for ApplicationGatewayWafDynamicManifests API service call.
 	ApplicationGatewayWafDynamicManifestResultList
 }
 
 // ApplicationGatewayWafDynamicManifestsDefaultClientGetResponse contains the response from method ApplicationGatewayWafDynamicManifestsDefaultClient.Get.
 type ApplicationGatewayWafDynamicManifestsDefaultClientGetResponse struct {
+	// Response for ApplicationGatewayWafDynamicManifest API service call.
 	ApplicationGatewayWafDynamicManifestResult
 }
 
 // ApplicationGatewaysClientBackendHealthOnDemandResponse contains the response from method ApplicationGatewaysClient.BeginBackendHealthOnDemand.
 type ApplicationGatewaysClientBackendHealthOnDemandResponse struct {
+	// Result of on demand test probe.
 	ApplicationGatewayBackendHealthOnDemand
 }
 
 // ApplicationGatewaysClientBackendHealthResponse contains the response from method ApplicationGatewaysClient.BeginBackendHealth.
 type ApplicationGatewaysClientBackendHealthResponse struct {
+	// Response for ApplicationGatewayBackendHealth API service call.
 	ApplicationGatewayBackendHealth
 }
 
 // ApplicationGatewaysClientCreateOrUpdateResponse contains the response from method ApplicationGatewaysClient.BeginCreateOrUpdate.
 type ApplicationGatewaysClientCreateOrUpdateResponse struct {
+	// Application gateway resource.
 	ApplicationGateway
 }
 
@@ -128,16 +144,19 @@ type ApplicationGatewaysClientDeleteResponse struct {
 
 // ApplicationGatewaysClientGetResponse contains the response from method ApplicationGatewaysClient.Get.
 type ApplicationGatewaysClientGetResponse struct {
+	// Application gateway resource.
 	ApplicationGateway
 }
 
 // ApplicationGatewaysClientGetSSLPredefinedPolicyResponse contains the response from method ApplicationGatewaysClient.GetSSLPredefinedPolicy.
 type ApplicationGatewaysClientGetSSLPredefinedPolicyResponse struct {
+	// An Ssl predefined policy.
 	ApplicationGatewaySSLPredefinedPolicy
 }
 
 // ApplicationGatewaysClientListAllResponse contains the response from method ApplicationGatewaysClient.NewListAllPager.
 type ApplicationGatewaysClientListAllResponse struct {
+	// Response for ListApplicationGateways API service call.
 	ApplicationGatewayListResult
 }
 
@@ -155,11 +174,13 @@ type ApplicationGatewaysClientListAvailableResponseHeadersResponse struct {
 
 // ApplicationGatewaysClientListAvailableSSLOptionsResponse contains the response from method ApplicationGatewaysClient.ListAvailableSSLOptions.
 type ApplicationGatewaysClientListAvailableSSLOptionsResponse struct {
+	// Response for ApplicationGatewayAvailableSslOptions API service call.
 	ApplicationGatewayAvailableSSLOptions
 }
 
 // ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesResponse contains the response from method ApplicationGatewaysClient.NewListAvailableSSLPredefinedPoliciesPager.
 type ApplicationGatewaysClientListAvailableSSLPredefinedPoliciesResponse struct {
+	// Response for ApplicationGatewayAvailableSslOptions API service call.
 	ApplicationGatewayAvailableSSLPredefinedPolicies
 }
 
@@ -171,11 +192,13 @@ type ApplicationGatewaysClientListAvailableServerVariablesResponse struct {
 
 // ApplicationGatewaysClientListAvailableWafRuleSetsResponse contains the response from method ApplicationGatewaysClient.ListAvailableWafRuleSets.
 type ApplicationGatewaysClientListAvailableWafRuleSetsResponse struct {
+	// Response for ApplicationGatewayAvailableWafRuleSets API service call.
 	ApplicationGatewayAvailableWafRuleSetsResult
 }
 
 // ApplicationGatewaysClientListResponse contains the response from method ApplicationGatewaysClient.NewListPager.
 type ApplicationGatewaysClientListResponse struct {
+	// Response for ListApplicationGateways API service call.
 	ApplicationGatewayListResult
 }
 
@@ -191,11 +214,13 @@ type ApplicationGatewaysClientStopResponse struct {
 
 // ApplicationGatewaysClientUpdateTagsResponse contains the response from method ApplicationGatewaysClient.UpdateTags.
 type ApplicationGatewaysClientUpdateTagsResponse struct {
+	// Application gateway resource.
 	ApplicationGateway
 }
 
 // ApplicationSecurityGroupsClientCreateOrUpdateResponse contains the response from method ApplicationSecurityGroupsClient.BeginCreateOrUpdate.
 type ApplicationSecurityGroupsClientCreateOrUpdateResponse struct {
+	// An application security group in a resource group.
 	ApplicationSecurityGroup
 }
 
@@ -206,66 +231,79 @@ type ApplicationSecurityGroupsClientDeleteResponse struct {
 
 // ApplicationSecurityGroupsClientGetResponse contains the response from method ApplicationSecurityGroupsClient.Get.
 type ApplicationSecurityGroupsClientGetResponse struct {
+	// An application security group in a resource group.
 	ApplicationSecurityGroup
 }
 
 // ApplicationSecurityGroupsClientListAllResponse contains the response from method ApplicationSecurityGroupsClient.NewListAllPager.
 type ApplicationSecurityGroupsClientListAllResponse struct {
+	// A list of application security groups.
 	ApplicationSecurityGroupListResult
 }
 
 // ApplicationSecurityGroupsClientListResponse contains the response from method ApplicationSecurityGroupsClient.NewListPager.
 type ApplicationSecurityGroupsClientListResponse struct {
+	// A list of application security groups.
 	ApplicationSecurityGroupListResult
 }
 
 // ApplicationSecurityGroupsClientUpdateTagsResponse contains the response from method ApplicationSecurityGroupsClient.UpdateTags.
 type ApplicationSecurityGroupsClientUpdateTagsResponse struct {
+	// An application security group in a resource group.
 	ApplicationSecurityGroup
 }
 
 // AvailableDelegationsClientListResponse contains the response from method AvailableDelegationsClient.NewListPager.
 type AvailableDelegationsClientListResponse struct {
+	// An array of available delegations.
 	AvailableDelegationsResult
 }
 
 // AvailableEndpointServicesClientListResponse contains the response from method AvailableEndpointServicesClient.NewListPager.
 type AvailableEndpointServicesClientListResponse struct {
+	// Response for the ListAvailableEndpointServices API service call.
 	EndpointServicesListResult
 }
 
 // AvailablePrivateEndpointTypesClientListByResourceGroupResponse contains the response from method AvailablePrivateEndpointTypesClient.NewListByResourceGroupPager.
 type AvailablePrivateEndpointTypesClientListByResourceGroupResponse struct {
+	// An array of available PrivateEndpoint types.
 	AvailablePrivateEndpointTypesResult
 }
 
 // AvailablePrivateEndpointTypesClientListResponse contains the response from method AvailablePrivateEndpointTypesClient.NewListPager.
 type AvailablePrivateEndpointTypesClientListResponse struct {
+	// An array of available PrivateEndpoint types.
 	AvailablePrivateEndpointTypesResult
 }
 
 // AvailableResourceGroupDelegationsClientListResponse contains the response from method AvailableResourceGroupDelegationsClient.NewListPager.
 type AvailableResourceGroupDelegationsClientListResponse struct {
+	// An array of available delegations.
 	AvailableDelegationsResult
 }
 
 // AvailableServiceAliasesClientListByResourceGroupResponse contains the response from method AvailableServiceAliasesClient.NewListByResourceGroupPager.
 type AvailableServiceAliasesClientListByResourceGroupResponse struct {
+	// An array of available service aliases.
 	AvailableServiceAliasesResult
 }
 
 // AvailableServiceAliasesClientListResponse contains the response from method AvailableServiceAliasesClient.NewListPager.
 type AvailableServiceAliasesClientListResponse struct {
+	// An array of available service aliases.
 	AvailableServiceAliasesResult
 }
 
 // AzureFirewallFqdnTagsClientListAllResponse contains the response from method AzureFirewallFqdnTagsClient.NewListAllPager.
 type AzureFirewallFqdnTagsClientListAllResponse struct {
+	// Response for ListAzureFirewallFqdnTags API service call.
 	AzureFirewallFqdnTagListResult
 }
 
 // AzureFirewallsClientCreateOrUpdateResponse contains the response from method AzureFirewallsClient.BeginCreateOrUpdate.
 type AzureFirewallsClientCreateOrUpdateResponse struct {
+	// Azure Firewall resource.
 	AzureFirewall
 }
 
@@ -276,31 +314,42 @@ type AzureFirewallsClientDeleteResponse struct {
 
 // AzureFirewallsClientGetResponse contains the response from method AzureFirewallsClient.Get.
 type AzureFirewallsClientGetResponse struct {
+	// Azure Firewall resource.
 	AzureFirewall
 }
 
 // AzureFirewallsClientListAllResponse contains the response from method AzureFirewallsClient.NewListAllPager.
 type AzureFirewallsClientListAllResponse struct {
+	// Response for ListAzureFirewalls API service call.
 	AzureFirewallListResult
 }
 
 // AzureFirewallsClientListLearnedPrefixesResponse contains the response from method AzureFirewallsClient.BeginListLearnedPrefixes.
 type AzureFirewallsClientListLearnedPrefixesResponse struct {
+	// List of SNAT IP Prefixes learnt by firewall to not SNAT
 	IPPrefixesList
 }
 
 // AzureFirewallsClientListResponse contains the response from method AzureFirewallsClient.NewListPager.
 type AzureFirewallsClientListResponse struct {
+	// Response for ListAzureFirewalls API service call.
 	AzureFirewallListResult
 }
 
+// AzureFirewallsClientPacketCaptureResponse contains the response from method AzureFirewallsClient.BeginPacketCapture.
+type AzureFirewallsClientPacketCaptureResponse struct {
+	// placeholder for future response values
+}
+
 // AzureFirewallsClientUpdateTagsResponse contains the response from method AzureFirewallsClient.BeginUpdateTags.
 type AzureFirewallsClientUpdateTagsResponse struct {
+	// Azure Firewall resource.
 	AzureFirewall
 }
 
 // BastionHostsClientCreateOrUpdateResponse contains the response from method BastionHostsClient.BeginCreateOrUpdate.
 type BastionHostsClientCreateOrUpdateResponse struct {
+	// Bastion Host resource.
 	BastionHost
 }
 
@@ -311,31 +360,37 @@ type BastionHostsClientDeleteResponse struct {
 
 // BastionHostsClientGetResponse contains the response from method BastionHostsClient.Get.
 type BastionHostsClientGetResponse struct {
+	// Bastion Host resource.
 	BastionHost
 }
 
 // BastionHostsClientListByResourceGroupResponse contains the response from method BastionHostsClient.NewListByResourceGroupPager.
 type BastionHostsClientListByResourceGroupResponse struct {
+	// Response for ListBastionHosts API service call.
 	BastionHostListResult
 }
 
 // BastionHostsClientListResponse contains the response from method BastionHostsClient.NewListPager.
 type BastionHostsClientListResponse struct {
+	// Response for ListBastionHosts API service call.
 	BastionHostListResult
 }
 
 // BastionHostsClientUpdateTagsResponse contains the response from method BastionHostsClient.BeginUpdateTags.
 type BastionHostsClientUpdateTagsResponse struct {
+	// Bastion Host resource.
 	BastionHost
 }
 
 // BgpServiceCommunitiesClientListResponse contains the response from method BgpServiceCommunitiesClient.NewListPager.
 type BgpServiceCommunitiesClientListResponse struct {
+	// Response for the ListServiceCommunity API service call.
 	BgpServiceCommunityListResult
 }
 
 // ConfigurationPolicyGroupsClientCreateOrUpdateResponse contains the response from method ConfigurationPolicyGroupsClient.BeginCreateOrUpdate.
 type ConfigurationPolicyGroupsClientCreateOrUpdateResponse struct {
+	// VpnServerConfigurationPolicyGroup Resource.
 	VPNServerConfigurationPolicyGroup
 }
 
@@ -346,16 +401,20 @@ type ConfigurationPolicyGroupsClientDeleteResponse struct {
 
 // ConfigurationPolicyGroupsClientGetResponse contains the response from method ConfigurationPolicyGroupsClient.Get.
 type ConfigurationPolicyGroupsClientGetResponse struct {
+	// VpnServerConfigurationPolicyGroup Resource.
 	VPNServerConfigurationPolicyGroup
 }
 
 // ConfigurationPolicyGroupsClientListByVPNServerConfigurationResponse contains the response from method ConfigurationPolicyGroupsClient.NewListByVPNServerConfigurationPager.
 type ConfigurationPolicyGroupsClientListByVPNServerConfigurationResponse struct {
+	// Result of the request to list VpnServerConfigurationPolicyGroups. It contains a list of VpnServerConfigurationPolicyGroups
+	// and a URL nextLink to get the next set of results.
 	ListVPNServerConfigurationPolicyGroupsResult
 }
 
 // ConnectionMonitorsClientCreateOrUpdateResponse contains the response from method ConnectionMonitorsClient.BeginCreateOrUpdate.
 type ConnectionMonitorsClientCreateOrUpdateResponse struct {
+	// Information about the connection monitor.
 	ConnectionMonitorResult
 }
 
@@ -366,16 +425,19 @@ type ConnectionMonitorsClientDeleteResponse struct {
 
 // ConnectionMonitorsClientGetResponse contains the response from method ConnectionMonitorsClient.Get.
 type ConnectionMonitorsClientGetResponse struct {
+	// Information about the connection monitor.
 	ConnectionMonitorResult
 }
 
 // ConnectionMonitorsClientListResponse contains the response from method ConnectionMonitorsClient.NewListPager.
 type ConnectionMonitorsClientListResponse struct {
+	// List of connection monitors.
 	ConnectionMonitorListResult
 }
 
 // ConnectionMonitorsClientQueryResponse contains the response from method ConnectionMonitorsClient.BeginQuery.
 type ConnectionMonitorsClientQueryResponse struct {
+	// List of connection states snapshots.
 	ConnectionMonitorQueryResult
 }
 
@@ -391,11 +453,13 @@ type ConnectionMonitorsClientStopResponse struct {
 
 // ConnectionMonitorsClientUpdateTagsResponse contains the response from method ConnectionMonitorsClient.UpdateTags.
 type ConnectionMonitorsClientUpdateTagsResponse struct {
+	// Information about the connection monitor.
 	ConnectionMonitorResult
 }
 
 // ConnectivityConfigurationsClientCreateOrUpdateResponse contains the response from method ConnectivityConfigurationsClient.CreateOrUpdate.
 type ConnectivityConfigurationsClientCreateOrUpdateResponse struct {
+	// The network manager connectivity configuration resource
 	ConnectivityConfiguration
 }
 
@@ -406,16 +470,20 @@ type ConnectivityConfigurationsClientDeleteResponse struct {
 
 // ConnectivityConfigurationsClientGetResponse contains the response from method ConnectivityConfigurationsClient.Get.
 type ConnectivityConfigurationsClientGetResponse struct {
+	// The network manager connectivity configuration resource
 	ConnectivityConfiguration
 }
 
 // ConnectivityConfigurationsClientListResponse contains the response from method ConnectivityConfigurationsClient.NewListPager.
 type ConnectivityConfigurationsClientListResponse struct {
+	// Result of the request to list network manager connectivity configurations. It contains a list of configurations and a link
+	// to get the next set of results.
 	ConnectivityConfigurationListResult
 }
 
 // CustomIPPrefixesClientCreateOrUpdateResponse contains the response from method CustomIPPrefixesClient.BeginCreateOrUpdate.
 type CustomIPPrefixesClientCreateOrUpdateResponse struct {
+	// Custom IP prefix resource.
 	CustomIPPrefix
 }
 
@@ -426,26 +494,31 @@ type CustomIPPrefixesClientDeleteResponse struct {
 
 // CustomIPPrefixesClientGetResponse contains the response from method CustomIPPrefixesClient.Get.
 type CustomIPPrefixesClientGetResponse struct {
+	// Custom IP prefix resource.
 	CustomIPPrefix
 }
 
 // CustomIPPrefixesClientListAllResponse contains the response from method CustomIPPrefixesClient.NewListAllPager.
 type CustomIPPrefixesClientListAllResponse struct {
+	// Response for ListCustomIpPrefixes API service call.
 	CustomIPPrefixListResult
 }
 
 // CustomIPPrefixesClientListResponse contains the response from method CustomIPPrefixesClient.NewListPager.
 type CustomIPPrefixesClientListResponse struct {
+	// Response for ListCustomIpPrefixes API service call.
 	CustomIPPrefixListResult
 }
 
 // CustomIPPrefixesClientUpdateTagsResponse contains the response from method CustomIPPrefixesClient.UpdateTags.
 type CustomIPPrefixesClientUpdateTagsResponse struct {
+	// Custom IP prefix resource.
 	CustomIPPrefix
 }
 
 // DdosCustomPoliciesClientCreateOrUpdateResponse contains the response from method DdosCustomPoliciesClient.BeginCreateOrUpdate.
 type DdosCustomPoliciesClientCreateOrUpdateResponse struct {
+	// A DDoS custom policy in a resource group.
 	DdosCustomPolicy
 }
 
@@ -456,16 +529,19 @@ type DdosCustomPoliciesClientDeleteResponse struct {
 
 // DdosCustomPoliciesClientGetResponse contains the response from method DdosCustomPoliciesClient.Get.
 type DdosCustomPoliciesClientGetResponse struct {
+	// A DDoS custom policy in a resource group.
 	DdosCustomPolicy
 }
 
 // DdosCustomPoliciesClientUpdateTagsResponse contains the response from method DdosCustomPoliciesClient.UpdateTags.
 type DdosCustomPoliciesClientUpdateTagsResponse struct {
+	// A DDoS custom policy in a resource group.
 	DdosCustomPolicy
 }
 
 // DdosProtectionPlansClientCreateOrUpdateResponse contains the response from method DdosProtectionPlansClient.BeginCreateOrUpdate.
 type DdosProtectionPlansClientCreateOrUpdateResponse struct {
+	// A DDoS protection plan in a resource group.
 	DdosProtectionPlan
 }
 
@@ -476,36 +552,43 @@ type DdosProtectionPlansClientDeleteResponse struct {
 
 // DdosProtectionPlansClientGetResponse contains the response from method DdosProtectionPlansClient.Get.
 type DdosProtectionPlansClientGetResponse struct {
+	// A DDoS protection plan in a resource group.
 	DdosProtectionPlan
 }
 
 // DdosProtectionPlansClientListByResourceGroupResponse contains the response from method DdosProtectionPlansClient.NewListByResourceGroupPager.
 type DdosProtectionPlansClientListByResourceGroupResponse struct {
+	// A list of DDoS protection plans.
 	DdosProtectionPlanListResult
 }
 
 // DdosProtectionPlansClientListResponse contains the response from method DdosProtectionPlansClient.NewListPager.
 type DdosProtectionPlansClientListResponse struct {
+	// A list of DDoS protection plans.
 	DdosProtectionPlanListResult
 }
 
 // DdosProtectionPlansClientUpdateTagsResponse contains the response from method DdosProtectionPlansClient.UpdateTags.
 type DdosProtectionPlansClientUpdateTagsResponse struct {
+	// A DDoS protection plan in a resource group.
 	DdosProtectionPlan
 }
 
 // DefaultSecurityRulesClientGetResponse contains the response from method DefaultSecurityRulesClient.Get.
 type DefaultSecurityRulesClientGetResponse struct {
+	// Network security rule.
 	SecurityRule
 }
 
 // DefaultSecurityRulesClientListResponse contains the response from method DefaultSecurityRulesClient.NewListPager.
 type DefaultSecurityRulesClientListResponse struct {
+	// Response for ListSecurityRule API service call. Retrieves all security rules that belongs to a network security group.
 	SecurityRuleListResult
 }
 
 // DscpConfigurationClientCreateOrUpdateResponse contains the response from method DscpConfigurationClient.BeginCreateOrUpdate.
 type DscpConfigurationClientCreateOrUpdateResponse struct {
+	// Differentiated Services Code Point configuration for any given network interface
 	DscpConfiguration
 }
 
@@ -516,21 +599,25 @@ type DscpConfigurationClientDeleteResponse struct {
 
 // DscpConfigurationClientGetResponse contains the response from method DscpConfigurationClient.Get.
 type DscpConfigurationClientGetResponse struct {
+	// Differentiated Services Code Point configuration for any given network interface
 	DscpConfiguration
 }
 
 // DscpConfigurationClientListAllResponse contains the response from method DscpConfigurationClient.NewListAllPager.
 type DscpConfigurationClientListAllResponse struct {
+	// Response for the DscpConfigurationList API service call.
 	DscpConfigurationListResult
 }
 
 // DscpConfigurationClientListResponse contains the response from method DscpConfigurationClient.NewListPager.
 type DscpConfigurationClientListResponse struct {
+	// Response for the DscpConfigurationList API service call.
 	DscpConfigurationListResult
 }
 
 // ExpressRouteCircuitAuthorizationsClientCreateOrUpdateResponse contains the response from method ExpressRouteCircuitAuthorizationsClient.BeginCreateOrUpdate.
 type ExpressRouteCircuitAuthorizationsClientCreateOrUpdateResponse struct {
+	// Authorization in an ExpressRouteCircuit resource.
 	ExpressRouteCircuitAuthorization
 }
 
@@ -541,16 +628,19 @@ type ExpressRouteCircuitAuthorizationsClientDeleteResponse struct {
 
 // ExpressRouteCircuitAuthorizationsClientGetResponse contains the response from method ExpressRouteCircuitAuthorizationsClient.Get.
 type ExpressRouteCircuitAuthorizationsClientGetResponse struct {
+	// Authorization in an ExpressRouteCircuit resource.
 	ExpressRouteCircuitAuthorization
 }
 
 // ExpressRouteCircuitAuthorizationsClientListResponse contains the response from method ExpressRouteCircuitAuthorizationsClient.NewListPager.
 type ExpressRouteCircuitAuthorizationsClientListResponse struct {
+	// Response for ListAuthorizations API service call retrieves all authorizations that belongs to an ExpressRouteCircuit.
 	AuthorizationListResult
 }
 
 // ExpressRouteCircuitConnectionsClientCreateOrUpdateResponse contains the response from method ExpressRouteCircuitConnectionsClient.BeginCreateOrUpdate.
 type ExpressRouteCircuitConnectionsClientCreateOrUpdateResponse struct {
+	// Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.
 	ExpressRouteCircuitConnection
 }
 
@@ -561,16 +651,20 @@ type ExpressRouteCircuitConnectionsClientDeleteResponse struct {
 
 // ExpressRouteCircuitConnectionsClientGetResponse contains the response from method ExpressRouteCircuitConnectionsClient.Get.
 type ExpressRouteCircuitConnectionsClientGetResponse struct {
+	// Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.
 	ExpressRouteCircuitConnection
 }
 
 // ExpressRouteCircuitConnectionsClientListResponse contains the response from method ExpressRouteCircuitConnectionsClient.NewListPager.
 type ExpressRouteCircuitConnectionsClientListResponse struct {
+	// Response for ListConnections API service call retrieves all global reach connections that belongs to a Private Peering
+	// for an ExpressRouteCircuit.
 	ExpressRouteCircuitConnectionListResult
 }
 
 // ExpressRouteCircuitPeeringsClientCreateOrUpdateResponse contains the response from method ExpressRouteCircuitPeeringsClient.BeginCreateOrUpdate.
 type ExpressRouteCircuitPeeringsClientCreateOrUpdateResponse struct {
+	// Peering in an ExpressRouteCircuit resource.
 	ExpressRouteCircuitPeering
 }
 
@@ -581,16 +675,19 @@ type ExpressRouteCircuitPeeringsClientDeleteResponse struct {
 
 // ExpressRouteCircuitPeeringsClientGetResponse contains the response from method ExpressRouteCircuitPeeringsClient.Get.
 type ExpressRouteCircuitPeeringsClientGetResponse struct {
+	// Peering in an ExpressRouteCircuit resource.
 	ExpressRouteCircuitPeering
 }
 
 // ExpressRouteCircuitPeeringsClientListResponse contains the response from method ExpressRouteCircuitPeeringsClient.NewListPager.
 type ExpressRouteCircuitPeeringsClientListResponse struct {
+	// Response for ListPeering API service call retrieves all peerings that belong to an ExpressRouteCircuit.
 	ExpressRouteCircuitPeeringListResult
 }
 
 // ExpressRouteCircuitsClientCreateOrUpdateResponse contains the response from method ExpressRouteCircuitsClient.BeginCreateOrUpdate.
 type ExpressRouteCircuitsClientCreateOrUpdateResponse struct {
+	// ExpressRouteCircuit resource.
 	ExpressRouteCircuit
 }
 
@@ -601,51 +698,61 @@ type ExpressRouteCircuitsClientDeleteResponse struct {
 
 // ExpressRouteCircuitsClientGetPeeringStatsResponse contains the response from method ExpressRouteCircuitsClient.GetPeeringStats.
 type ExpressRouteCircuitsClientGetPeeringStatsResponse struct {
+	// Contains stats associated with the peering.
 	ExpressRouteCircuitStats
 }
 
 // ExpressRouteCircuitsClientGetResponse contains the response from method ExpressRouteCircuitsClient.Get.
 type ExpressRouteCircuitsClientGetResponse struct {
+	// ExpressRouteCircuit resource.
 	ExpressRouteCircuit
 }
 
 // ExpressRouteCircuitsClientGetStatsResponse contains the response from method ExpressRouteCircuitsClient.GetStats.
 type ExpressRouteCircuitsClientGetStatsResponse struct {
+	// Contains stats associated with the peering.
 	ExpressRouteCircuitStats
 }
 
 // ExpressRouteCircuitsClientListAllResponse contains the response from method ExpressRouteCircuitsClient.NewListAllPager.
 type ExpressRouteCircuitsClientListAllResponse struct {
+	// Response for ListExpressRouteCircuit API service call.
 	ExpressRouteCircuitListResult
 }
 
 // ExpressRouteCircuitsClientListArpTableResponse contains the response from method ExpressRouteCircuitsClient.BeginListArpTable.
 type ExpressRouteCircuitsClientListArpTableResponse struct {
+	// Response for ListArpTable associated with the Express Route Circuits API.
 	ExpressRouteCircuitsArpTableListResult
 }
 
 // ExpressRouteCircuitsClientListResponse contains the response from method ExpressRouteCircuitsClient.NewListPager.
 type ExpressRouteCircuitsClientListResponse struct {
+	// Response for ListExpressRouteCircuit API service call.
 	ExpressRouteCircuitListResult
 }
 
 // ExpressRouteCircuitsClientListRoutesTableResponse contains the response from method ExpressRouteCircuitsClient.BeginListRoutesTable.
 type ExpressRouteCircuitsClientListRoutesTableResponse struct {
+	// Response for ListRoutesTable associated with the Express Route Circuits API.
 	ExpressRouteCircuitsRoutesTableListResult
 }
 
 // ExpressRouteCircuitsClientListRoutesTableSummaryResponse contains the response from method ExpressRouteCircuitsClient.BeginListRoutesTableSummary.
 type ExpressRouteCircuitsClientListRoutesTableSummaryResponse struct {
+	// Response for ListRoutesTable associated with the Express Route Circuits API.
 	ExpressRouteCircuitsRoutesTableSummaryListResult
 }
 
 // ExpressRouteCircuitsClientUpdateTagsResponse contains the response from method ExpressRouteCircuitsClient.UpdateTags.
 type ExpressRouteCircuitsClientUpdateTagsResponse struct {
+	// ExpressRouteCircuit resource.
 	ExpressRouteCircuit
 }
 
 // ExpressRouteConnectionsClientCreateOrUpdateResponse contains the response from method ExpressRouteConnectionsClient.BeginCreateOrUpdate.
 type ExpressRouteConnectionsClientCreateOrUpdateResponse struct {
+	// ExpressRouteConnection resource.
 	ExpressRouteConnection
 }
 
@@ -656,16 +763,19 @@ type ExpressRouteConnectionsClientDeleteResponse struct {
 
 // ExpressRouteConnectionsClientGetResponse contains the response from method ExpressRouteConnectionsClient.Get.
 type ExpressRouteConnectionsClientGetResponse struct {
+	// ExpressRouteConnection resource.
 	ExpressRouteConnection
 }
 
 // ExpressRouteConnectionsClientListResponse contains the response from method ExpressRouteConnectionsClient.List.
 type ExpressRouteConnectionsClientListResponse struct {
+	// ExpressRouteConnection list.
 	ExpressRouteConnectionList
 }
 
 // ExpressRouteCrossConnectionPeeringsClientCreateOrUpdateResponse contains the response from method ExpressRouteCrossConnectionPeeringsClient.BeginCreateOrUpdate.
 type ExpressRouteCrossConnectionPeeringsClientCreateOrUpdateResponse struct {
+	// Peering in an ExpressRoute Cross Connection resource.
 	ExpressRouteCrossConnectionPeering
 }
 
@@ -676,56 +786,67 @@ type ExpressRouteCrossConnectionPeeringsClientDeleteResponse struct {
 
 // ExpressRouteCrossConnectionPeeringsClientGetResponse contains the response from method ExpressRouteCrossConnectionPeeringsClient.Get.
 type ExpressRouteCrossConnectionPeeringsClientGetResponse struct {
+	// Peering in an ExpressRoute Cross Connection resource.
 	ExpressRouteCrossConnectionPeering
 }
 
 // ExpressRouteCrossConnectionPeeringsClientListResponse contains the response from method ExpressRouteCrossConnectionPeeringsClient.NewListPager.
 type ExpressRouteCrossConnectionPeeringsClientListResponse struct {
+	// Response for ListPeering API service call retrieves all peerings that belong to an ExpressRouteCrossConnection.
 	ExpressRouteCrossConnectionPeeringList
 }
 
 // ExpressRouteCrossConnectionsClientCreateOrUpdateResponse contains the response from method ExpressRouteCrossConnectionsClient.BeginCreateOrUpdate.
 type ExpressRouteCrossConnectionsClientCreateOrUpdateResponse struct {
+	// ExpressRouteCrossConnection resource.
 	ExpressRouteCrossConnection
 }
 
 // ExpressRouteCrossConnectionsClientGetResponse contains the response from method ExpressRouteCrossConnectionsClient.Get.
 type ExpressRouteCrossConnectionsClientGetResponse struct {
+	// ExpressRouteCrossConnection resource.
 	ExpressRouteCrossConnection
 }
 
 // ExpressRouteCrossConnectionsClientListArpTableResponse contains the response from method ExpressRouteCrossConnectionsClient.BeginListArpTable.
 type ExpressRouteCrossConnectionsClientListArpTableResponse struct {
+	// Response for ListArpTable associated with the Express Route Circuits API.
 	ExpressRouteCircuitsArpTableListResult
 }
 
 // ExpressRouteCrossConnectionsClientListByResourceGroupResponse contains the response from method ExpressRouteCrossConnectionsClient.NewListByResourceGroupPager.
 type ExpressRouteCrossConnectionsClientListByResourceGroupResponse struct {
+	// Response for ListExpressRouteCrossConnection API service call.
 	ExpressRouteCrossConnectionListResult
 }
 
 // ExpressRouteCrossConnectionsClientListResponse contains the response from method ExpressRouteCrossConnectionsClient.NewListPager.
 type ExpressRouteCrossConnectionsClientListResponse struct {
+	// Response for ListExpressRouteCrossConnection API service call.
 	ExpressRouteCrossConnectionListResult
 }
 
 // ExpressRouteCrossConnectionsClientListRoutesTableResponse contains the response from method ExpressRouteCrossConnectionsClient.BeginListRoutesTable.
 type ExpressRouteCrossConnectionsClientListRoutesTableResponse struct {
+	// Response for ListRoutesTable associated with the Express Route Circuits API.
 	ExpressRouteCircuitsRoutesTableListResult
 }
 
 // ExpressRouteCrossConnectionsClientListRoutesTableSummaryResponse contains the response from method ExpressRouteCrossConnectionsClient.BeginListRoutesTableSummary.
 type ExpressRouteCrossConnectionsClientListRoutesTableSummaryResponse struct {
+	// Response for ListRoutesTable associated with the Express Route Cross Connections.
 	ExpressRouteCrossConnectionsRoutesTableSummaryListResult
 }
 
 // ExpressRouteCrossConnectionsClientUpdateTagsResponse contains the response from method ExpressRouteCrossConnectionsClient.UpdateTags.
 type ExpressRouteCrossConnectionsClientUpdateTagsResponse struct {
+	// ExpressRouteCrossConnection resource.
 	ExpressRouteCrossConnection
 }
 
 // ExpressRouteGatewaysClientCreateOrUpdateResponse contains the response from method ExpressRouteGatewaysClient.BeginCreateOrUpdate.
 type ExpressRouteGatewaysClientCreateOrUpdateResponse struct {
+	// ExpressRoute gateway resource.
 	ExpressRouteGateway
 }
 
@@ -736,36 +857,43 @@ type ExpressRouteGatewaysClientDeleteResponse struct {
 
 // ExpressRouteGatewaysClientGetResponse contains the response from method ExpressRouteGatewaysClient.Get.
 type ExpressRouteGatewaysClientGetResponse struct {
+	// ExpressRoute gateway resource.
 	ExpressRouteGateway
 }
 
 // ExpressRouteGatewaysClientListByResourceGroupResponse contains the response from method ExpressRouteGatewaysClient.ListByResourceGroup.
 type ExpressRouteGatewaysClientListByResourceGroupResponse struct {
+	// List of ExpressRoute gateways.
 	ExpressRouteGatewayList
 }
 
 // ExpressRouteGatewaysClientListBySubscriptionResponse contains the response from method ExpressRouteGatewaysClient.ListBySubscription.
 type ExpressRouteGatewaysClientListBySubscriptionResponse struct {
+	// List of ExpressRoute gateways.
 	ExpressRouteGatewayList
 }
 
 // ExpressRouteGatewaysClientUpdateTagsResponse contains the response from method ExpressRouteGatewaysClient.BeginUpdateTags.
 type ExpressRouteGatewaysClientUpdateTagsResponse struct {
+	// ExpressRoute gateway resource.
 	ExpressRouteGateway
 }
 
 // ExpressRouteLinksClientGetResponse contains the response from method ExpressRouteLinksClient.Get.
 type ExpressRouteLinksClientGetResponse struct {
+	// ExpressRouteLink child resource definition.
 	ExpressRouteLink
 }
 
 // ExpressRouteLinksClientListResponse contains the response from method ExpressRouteLinksClient.NewListPager.
 type ExpressRouteLinksClientListResponse struct {
+	// Response for ListExpressRouteLinks API service call.
 	ExpressRouteLinkListResult
 }
 
 // ExpressRoutePortAuthorizationsClientCreateOrUpdateResponse contains the response from method ExpressRoutePortAuthorizationsClient.BeginCreateOrUpdate.
 type ExpressRoutePortAuthorizationsClientCreateOrUpdateResponse struct {
+	// ExpressRoutePort Authorization resource definition.
 	ExpressRoutePortAuthorization
 }
 
@@ -776,16 +904,19 @@ type ExpressRoutePortAuthorizationsClientDeleteResponse struct {
 
 // ExpressRoutePortAuthorizationsClientGetResponse contains the response from method ExpressRoutePortAuthorizationsClient.Get.
 type ExpressRoutePortAuthorizationsClientGetResponse struct {
+	// ExpressRoutePort Authorization resource definition.
 	ExpressRoutePortAuthorization
 }
 
 // ExpressRoutePortAuthorizationsClientListResponse contains the response from method ExpressRoutePortAuthorizationsClient.NewListPager.
 type ExpressRoutePortAuthorizationsClientListResponse struct {
+	// Response for ListExpressRoutePortAuthorizations API service call.
 	ExpressRoutePortAuthorizationListResult
 }
 
 // ExpressRoutePortsClientCreateOrUpdateResponse contains the response from method ExpressRoutePortsClient.BeginCreateOrUpdate.
 type ExpressRoutePortsClientCreateOrUpdateResponse struct {
+	// ExpressRoutePort resource definition.
 	ExpressRoutePort
 }
 
@@ -796,51 +927,61 @@ type ExpressRoutePortsClientDeleteResponse struct {
 
 // ExpressRoutePortsClientGenerateLOAResponse contains the response from method ExpressRoutePortsClient.GenerateLOA.
 type ExpressRoutePortsClientGenerateLOAResponse struct {
+	// Response for GenerateExpressRoutePortsLOA API service call.
 	GenerateExpressRoutePortsLOAResult
 }
 
 // ExpressRoutePortsClientGetResponse contains the response from method ExpressRoutePortsClient.Get.
 type ExpressRoutePortsClientGetResponse struct {
+	// ExpressRoutePort resource definition.
 	ExpressRoutePort
 }
 
 // ExpressRoutePortsClientListByResourceGroupResponse contains the response from method ExpressRoutePortsClient.NewListByResourceGroupPager.
 type ExpressRoutePortsClientListByResourceGroupResponse struct {
+	// Response for ListExpressRoutePorts API service call.
 	ExpressRoutePortListResult
 }
 
 // ExpressRoutePortsClientListResponse contains the response from method ExpressRoutePortsClient.NewListPager.
 type ExpressRoutePortsClientListResponse struct {
+	// Response for ListExpressRoutePorts API service call.
 	ExpressRoutePortListResult
 }
 
 // ExpressRoutePortsClientUpdateTagsResponse contains the response from method ExpressRoutePortsClient.UpdateTags.
 type ExpressRoutePortsClientUpdateTagsResponse struct {
+	// ExpressRoutePort resource definition.
 	ExpressRoutePort
 }
 
 // ExpressRoutePortsLocationsClientGetResponse contains the response from method ExpressRoutePortsLocationsClient.Get.
 type ExpressRoutePortsLocationsClientGetResponse struct {
+	// Definition of the ExpressRoutePorts peering location resource.
 	ExpressRoutePortsLocation
 }
 
 // ExpressRoutePortsLocationsClientListResponse contains the response from method ExpressRoutePortsLocationsClient.NewListPager.
 type ExpressRoutePortsLocationsClientListResponse struct {
+	// Response for ListExpressRoutePortsLocations API service call.
 	ExpressRoutePortsLocationListResult
 }
 
 // ExpressRouteProviderPortsLocationClientListResponse contains the response from method ExpressRouteProviderPortsLocationClient.List.
 type ExpressRouteProviderPortsLocationClientListResponse struct {
+	// Response for ListExpressRouteProviderPort API service call.
 	ExpressRouteProviderPortListResult
 }
 
 // ExpressRouteServiceProvidersClientListResponse contains the response from method ExpressRouteServiceProvidersClient.NewListPager.
 type ExpressRouteServiceProvidersClientListResponse struct {
+	// Response for the ListExpressRouteServiceProvider API service call.
 	ExpressRouteServiceProviderListResult
 }
 
 // FirewallPoliciesClientCreateOrUpdateResponse contains the response from method FirewallPoliciesClient.BeginCreateOrUpdate.
 type FirewallPoliciesClientCreateOrUpdateResponse struct {
+	// FirewallPolicy Resource.
 	FirewallPolicy
 }
 
@@ -851,56 +992,67 @@ type FirewallPoliciesClientDeleteResponse struct {
 
 // FirewallPoliciesClientGetResponse contains the response from method FirewallPoliciesClient.Get.
 type FirewallPoliciesClientGetResponse struct {
+	// FirewallPolicy Resource.
 	FirewallPolicy
 }
 
 // FirewallPoliciesClientListAllResponse contains the response from method FirewallPoliciesClient.NewListAllPager.
 type FirewallPoliciesClientListAllResponse struct {
+	// Response for ListFirewallPolicies API service call.
 	FirewallPolicyListResult
 }
 
 // FirewallPoliciesClientListResponse contains the response from method FirewallPoliciesClient.NewListPager.
 type FirewallPoliciesClientListResponse struct {
+	// Response for ListFirewallPolicies API service call.
 	FirewallPolicyListResult
 }
 
 // FirewallPoliciesClientUpdateTagsResponse contains the response from method FirewallPoliciesClient.UpdateTags.
 type FirewallPoliciesClientUpdateTagsResponse struct {
+	// FirewallPolicy Resource.
 	FirewallPolicy
 }
 
 // FirewallPolicyIdpsSignaturesClientListResponse contains the response from method FirewallPolicyIdpsSignaturesClient.List.
 type FirewallPolicyIdpsSignaturesClientListResponse struct {
+	// Query result
 	QueryResults
 }
 
 // FirewallPolicyIdpsSignaturesFilterValuesClientListResponse contains the response from method FirewallPolicyIdpsSignaturesFilterValuesClient.List.
 type FirewallPolicyIdpsSignaturesFilterValuesClientListResponse struct {
+	// Describes the list of all possible values for a specific filter value
 	SignatureOverridesFilterValuesResponse
 }
 
 // FirewallPolicyIdpsSignaturesOverridesClientGetResponse contains the response from method FirewallPolicyIdpsSignaturesOverridesClient.Get.
 type FirewallPolicyIdpsSignaturesOverridesClientGetResponse struct {
+	// Contains all specific policy signatures overrides for the IDPS
 	SignaturesOverrides
 }
 
 // FirewallPolicyIdpsSignaturesOverridesClientListResponse contains the response from method FirewallPolicyIdpsSignaturesOverridesClient.List.
 type FirewallPolicyIdpsSignaturesOverridesClientListResponse struct {
+	// Describes an object containing an array with a single item
 	SignaturesOverridesList
 }
 
 // FirewallPolicyIdpsSignaturesOverridesClientPatchResponse contains the response from method FirewallPolicyIdpsSignaturesOverridesClient.Patch.
 type FirewallPolicyIdpsSignaturesOverridesClientPatchResponse struct {
+	// Contains all specific policy signatures overrides for the IDPS
 	SignaturesOverrides
 }
 
 // FirewallPolicyIdpsSignaturesOverridesClientPutResponse contains the response from method FirewallPolicyIdpsSignaturesOverridesClient.Put.
 type FirewallPolicyIdpsSignaturesOverridesClientPutResponse struct {
+	// Contains all specific policy signatures overrides for the IDPS
 	SignaturesOverrides
 }
 
 // FirewallPolicyRuleCollectionGroupsClientCreateOrUpdateResponse contains the response from method FirewallPolicyRuleCollectionGroupsClient.BeginCreateOrUpdate.
 type FirewallPolicyRuleCollectionGroupsClientCreateOrUpdateResponse struct {
+	// Rule Collection Group resource.
 	FirewallPolicyRuleCollectionGroup
 }
 
@@ -911,16 +1063,19 @@ type FirewallPolicyRuleCollectionGroupsClientDeleteResponse struct {
 
 // FirewallPolicyRuleCollectionGroupsClientGetResponse contains the response from method FirewallPolicyRuleCollectionGroupsClient.Get.
 type FirewallPolicyRuleCollectionGroupsClientGetResponse struct {
+	// Rule Collection Group resource.
 	FirewallPolicyRuleCollectionGroup
 }
 
 // FirewallPolicyRuleCollectionGroupsClientListResponse contains the response from method FirewallPolicyRuleCollectionGroupsClient.NewListPager.
 type FirewallPolicyRuleCollectionGroupsClientListResponse struct {
+	// Response for ListFirewallPolicyRuleCollectionGroups API service call.
 	FirewallPolicyRuleCollectionGroupListResult
 }
 
 // FlowLogsClientCreateOrUpdateResponse contains the response from method FlowLogsClient.BeginCreateOrUpdate.
 type FlowLogsClientCreateOrUpdateResponse struct {
+	// A flow log resource.
 	FlowLog
 }
 
@@ -931,22 +1086,27 @@ type FlowLogsClientDeleteResponse struct {
 
 // FlowLogsClientGetResponse contains the response from method FlowLogsClient.Get.
 type FlowLogsClientGetResponse struct {
+	// A flow log resource.
 	FlowLog
 }
 
 // FlowLogsClientListResponse contains the response from method FlowLogsClient.NewListPager.
 type FlowLogsClientListResponse struct {
+	// List of flow logs.
 	FlowLogListResult
 }
 
 // FlowLogsClientUpdateTagsResponse contains the response from method FlowLogsClient.UpdateTags.
 type FlowLogsClientUpdateTagsResponse struct {
+	// A flow log resource.
 	FlowLog
 }
 
 // GroupsClientCreateOrUpdateResponse contains the response from method GroupsClient.CreateOrUpdate.
 type GroupsClientCreateOrUpdateResponse struct {
+	// The network group resource
 	Group
+
 	// ETag contains the information returned from the ETag header response.
 	ETag *string
 }
@@ -958,16 +1118,19 @@ type GroupsClientDeleteResponse struct {
 
 // GroupsClientGetResponse contains the response from method GroupsClient.Get.
 type GroupsClientGetResponse struct {
+	// The network group resource
 	Group
 }
 
 // GroupsClientListResponse contains the response from method GroupsClient.NewListPager.
 type GroupsClientListResponse struct {
+	// Result of the request to list NetworkGroup. It contains a list of groups and a URL link to get the next set of results.
 	GroupListResult
 }
 
 // HubRouteTablesClientCreateOrUpdateResponse contains the response from method HubRouteTablesClient.BeginCreateOrUpdate.
 type HubRouteTablesClientCreateOrUpdateResponse struct {
+	// RouteTable resource in a virtual hub.
 	HubRouteTable
 }
 
@@ -978,16 +1141,19 @@ type HubRouteTablesClientDeleteResponse struct {
 
 // HubRouteTablesClientGetResponse contains the response from method HubRouteTablesClient.Get.
 type HubRouteTablesClientGetResponse struct {
+	// RouteTable resource in a virtual hub.
 	HubRouteTable
 }
 
 // HubRouteTablesClientListResponse contains the response from method HubRouteTablesClient.NewListPager.
 type HubRouteTablesClientListResponse struct {
+	// List of RouteTables and a URL nextLink to get the next set of results.
 	ListHubRouteTablesResult
 }
 
 // HubVirtualNetworkConnectionsClientCreateOrUpdateResponse contains the response from method HubVirtualNetworkConnectionsClient.BeginCreateOrUpdate.
 type HubVirtualNetworkConnectionsClientCreateOrUpdateResponse struct {
+	// HubVirtualNetworkConnection Resource.
 	HubVirtualNetworkConnection
 }
 
@@ -998,16 +1164,19 @@ type HubVirtualNetworkConnectionsClientDeleteResponse struct {
 
 // HubVirtualNetworkConnectionsClientGetResponse contains the response from method HubVirtualNetworkConnectionsClient.Get.
 type HubVirtualNetworkConnectionsClientGetResponse struct {
+	// HubVirtualNetworkConnection Resource.
 	HubVirtualNetworkConnection
 }
 
 // HubVirtualNetworkConnectionsClientListResponse contains the response from method HubVirtualNetworkConnectionsClient.NewListPager.
 type HubVirtualNetworkConnectionsClientListResponse struct {
+	// List of HubVirtualNetworkConnections and a URL nextLink to get the next set of results.
 	ListHubVirtualNetworkConnectionsResult
 }
 
 // IPAllocationsClientCreateOrUpdateResponse contains the response from method IPAllocationsClient.BeginCreateOrUpdate.
 type IPAllocationsClientCreateOrUpdateResponse struct {
+	// IpAllocation resource.
 	IPAllocation
 }
 
@@ -1018,26 +1187,31 @@ type IPAllocationsClientDeleteResponse struct {
 
 // IPAllocationsClientGetResponse contains the response from method IPAllocationsClient.Get.
 type IPAllocationsClientGetResponse struct {
+	// IpAllocation resource.
 	IPAllocation
 }
 
 // IPAllocationsClientListByResourceGroupResponse contains the response from method IPAllocationsClient.NewListByResourceGroupPager.
 type IPAllocationsClientListByResourceGroupResponse struct {
+	// Response for the ListIpAllocations API service call.
 	IPAllocationListResult
 }
 
 // IPAllocationsClientListResponse contains the response from method IPAllocationsClient.NewListPager.
 type IPAllocationsClientListResponse struct {
+	// Response for the ListIpAllocations API service call.
 	IPAllocationListResult
 }
 
 // IPAllocationsClientUpdateTagsResponse contains the response from method IPAllocationsClient.UpdateTags.
 type IPAllocationsClientUpdateTagsResponse struct {
+	// IpAllocation resource.
 	IPAllocation
 }
 
 // IPGroupsClientCreateOrUpdateResponse contains the response from method IPGroupsClient.BeginCreateOrUpdate.
 type IPGroupsClientCreateOrUpdateResponse struct {
+	// The IpGroups resource information.
 	IPGroup
 }
 
@@ -1048,26 +1222,31 @@ type IPGroupsClientDeleteResponse struct {
 
 // IPGroupsClientGetResponse contains the response from method IPGroupsClient.Get.
 type IPGroupsClientGetResponse struct {
+	// The IpGroups resource information.
 	IPGroup
 }
 
 // IPGroupsClientListByResourceGroupResponse contains the response from method IPGroupsClient.NewListByResourceGroupPager.
 type IPGroupsClientListByResourceGroupResponse struct {
+	// Response for the ListIpGroups API service call.
 	IPGroupListResult
 }
 
 // IPGroupsClientListResponse contains the response from method IPGroupsClient.NewListPager.
 type IPGroupsClientListResponse struct {
+	// Response for the ListIpGroups API service call.
 	IPGroupListResult
 }
 
 // IPGroupsClientUpdateGroupsResponse contains the response from method IPGroupsClient.UpdateGroups.
 type IPGroupsClientUpdateGroupsResponse struct {
+	// The IpGroups resource information.
 	IPGroup
 }
 
 // InboundNatRulesClientCreateOrUpdateResponse contains the response from method InboundNatRulesClient.BeginCreateOrUpdate.
 type InboundNatRulesClientCreateOrUpdateResponse struct {
+	// Inbound NAT rule of the load balancer.
 	InboundNatRule
 }
 
@@ -1078,36 +1257,43 @@ type InboundNatRulesClientDeleteResponse struct {
 
 // InboundNatRulesClientGetResponse contains the response from method InboundNatRulesClient.Get.
 type InboundNatRulesClientGetResponse struct {
+	// Inbound NAT rule of the load balancer.
 	InboundNatRule
 }
 
 // InboundNatRulesClientListResponse contains the response from method InboundNatRulesClient.NewListPager.
 type InboundNatRulesClientListResponse struct {
+	// Response for ListInboundNatRule API service call.
 	InboundNatRuleListResult
 }
 
 // InboundSecurityRuleClientCreateOrUpdateResponse contains the response from method InboundSecurityRuleClient.BeginCreateOrUpdate.
 type InboundSecurityRuleClientCreateOrUpdateResponse struct {
+	// NVA Inbound Security Rule resource.
 	InboundSecurityRule
 }
 
 // InterfaceIPConfigurationsClientGetResponse contains the response from method InterfaceIPConfigurationsClient.Get.
 type InterfaceIPConfigurationsClientGetResponse struct {
+	// IPConfiguration in a network interface.
 	InterfaceIPConfiguration
 }
 
 // InterfaceIPConfigurationsClientListResponse contains the response from method InterfaceIPConfigurationsClient.NewListPager.
 type InterfaceIPConfigurationsClientListResponse struct {
+	// Response for list ip configurations API service call.
 	InterfaceIPConfigurationListResult
 }
 
 // InterfaceLoadBalancersClientListResponse contains the response from method InterfaceLoadBalancersClient.NewListPager.
 type InterfaceLoadBalancersClientListResponse struct {
+	// Response for list ip configurations API service call.
 	InterfaceLoadBalancerListResult
 }
 
 // InterfaceTapConfigurationsClientCreateOrUpdateResponse contains the response from method InterfaceTapConfigurationsClient.BeginCreateOrUpdate.
 type InterfaceTapConfigurationsClientCreateOrUpdateResponse struct {
+	// Tap configuration in a Network Interface.
 	InterfaceTapConfiguration
 }
 
@@ -1118,16 +1304,19 @@ type InterfaceTapConfigurationsClientDeleteResponse struct {
 
 // InterfaceTapConfigurationsClientGetResponse contains the response from method InterfaceTapConfigurationsClient.Get.
 type InterfaceTapConfigurationsClientGetResponse struct {
+	// Tap configuration in a Network Interface.
 	InterfaceTapConfiguration
 }
 
 // InterfaceTapConfigurationsClientListResponse contains the response from method InterfaceTapConfigurationsClient.NewListPager.
 type InterfaceTapConfigurationsClientListResponse struct {
+	// Response for list tap configurations API service call.
 	InterfaceTapConfigurationListResult
 }
 
 // InterfacesClientCreateOrUpdateResponse contains the response from method InterfacesClient.BeginCreateOrUpdate.
 type InterfacesClientCreateOrUpdateResponse struct {
+	// A network interface in a resource group.
 	Interface
 }
 
@@ -1138,76 +1327,91 @@ type InterfacesClientDeleteResponse struct {
 
 // InterfacesClientGetCloudServiceNetworkInterfaceResponse contains the response from method InterfacesClient.GetCloudServiceNetworkInterface.
 type InterfacesClientGetCloudServiceNetworkInterfaceResponse struct {
+	// A network interface in a resource group.
 	Interface
 }
 
 // InterfacesClientGetEffectiveRouteTableResponse contains the response from method InterfacesClient.BeginGetEffectiveRouteTable.
 type InterfacesClientGetEffectiveRouteTableResponse struct {
+	// Response for list effective route API service call.
 	EffectiveRouteListResult
 }
 
 // InterfacesClientGetResponse contains the response from method InterfacesClient.Get.
 type InterfacesClientGetResponse struct {
+	// A network interface in a resource group.
 	Interface
 }
 
 // InterfacesClientGetVirtualMachineScaleSetIPConfigurationResponse contains the response from method InterfacesClient.GetVirtualMachineScaleSetIPConfiguration.
 type InterfacesClientGetVirtualMachineScaleSetIPConfigurationResponse struct {
+	// IPConfiguration in a network interface.
 	InterfaceIPConfiguration
 }
 
 // InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceResponse contains the response from method InterfacesClient.GetVirtualMachineScaleSetNetworkInterface.
 type InterfacesClientGetVirtualMachineScaleSetNetworkInterfaceResponse struct {
+	// A network interface in a resource group.
 	Interface
 }
 
 // InterfacesClientListAllResponse contains the response from method InterfacesClient.NewListAllPager.
 type InterfacesClientListAllResponse struct {
+	// Response for the ListNetworkInterface API service call.
 	InterfaceListResult
 }
 
 // InterfacesClientListCloudServiceNetworkInterfacesResponse contains the response from method InterfacesClient.NewListCloudServiceNetworkInterfacesPager.
 type InterfacesClientListCloudServiceNetworkInterfacesResponse struct {
+	// Response for the ListNetworkInterface API service call.
 	InterfaceListResult
 }
 
 // InterfacesClientListCloudServiceRoleInstanceNetworkInterfacesResponse contains the response from method InterfacesClient.NewListCloudServiceRoleInstanceNetworkInterfacesPager.
 type InterfacesClientListCloudServiceRoleInstanceNetworkInterfacesResponse struct {
+	// Response for the ListNetworkInterface API service call.
 	InterfaceListResult
 }
 
 // InterfacesClientListEffectiveNetworkSecurityGroupsResponse contains the response from method InterfacesClient.BeginListEffectiveNetworkSecurityGroups.
 type InterfacesClientListEffectiveNetworkSecurityGroupsResponse struct {
+	// Response for list effective network security groups API service call.
 	EffectiveNetworkSecurityGroupListResult
 }
 
 // InterfacesClientListResponse contains the response from method InterfacesClient.NewListPager.
 type InterfacesClientListResponse struct {
+	// Response for the ListNetworkInterface API service call.
 	InterfaceListResult
 }
 
 // InterfacesClientListVirtualMachineScaleSetIPConfigurationsResponse contains the response from method InterfacesClient.NewListVirtualMachineScaleSetIPConfigurationsPager.
 type InterfacesClientListVirtualMachineScaleSetIPConfigurationsResponse struct {
+	// Response for list ip configurations API service call.
 	InterfaceIPConfigurationListResult
 }
 
 // InterfacesClientListVirtualMachineScaleSetNetworkInterfacesResponse contains the response from method InterfacesClient.NewListVirtualMachineScaleSetNetworkInterfacesPager.
 type InterfacesClientListVirtualMachineScaleSetNetworkInterfacesResponse struct {
+	// Response for the ListNetworkInterface API service call.
 	InterfaceListResult
 }
 
 // InterfacesClientListVirtualMachineScaleSetVMNetworkInterfacesResponse contains the response from method InterfacesClient.NewListVirtualMachineScaleSetVMNetworkInterfacesPager.
 type InterfacesClientListVirtualMachineScaleSetVMNetworkInterfacesResponse struct {
+	// Response for the ListNetworkInterface API service call.
 	InterfaceListResult
 }
 
 // InterfacesClientUpdateTagsResponse contains the response from method InterfacesClient.UpdateTags.
 type InterfacesClientUpdateTagsResponse struct {
+	// A network interface in a resource group.
 	Interface
 }
 
 // LoadBalancerBackendAddressPoolsClientCreateOrUpdateResponse contains the response from method LoadBalancerBackendAddressPoolsClient.BeginCreateOrUpdate.
 type LoadBalancerBackendAddressPoolsClientCreateOrUpdateResponse struct {
+	// Pool of backend IP addresses.
 	BackendAddressPool
 }
 
@@ -1218,61 +1422,73 @@ type LoadBalancerBackendAddressPoolsClientDeleteResponse struct {
 
 // LoadBalancerBackendAddressPoolsClientGetResponse contains the response from method LoadBalancerBackendAddressPoolsClient.Get.
 type LoadBalancerBackendAddressPoolsClientGetResponse struct {
+	// Pool of backend IP addresses.
 	BackendAddressPool
 }
 
 // LoadBalancerBackendAddressPoolsClientListResponse contains the response from method LoadBalancerBackendAddressPoolsClient.NewListPager.
 type LoadBalancerBackendAddressPoolsClientListResponse struct {
+	// Response for ListBackendAddressPool API service call.
 	LoadBalancerBackendAddressPoolListResult
 }
 
 // LoadBalancerFrontendIPConfigurationsClientGetResponse contains the response from method LoadBalancerFrontendIPConfigurationsClient.Get.
 type LoadBalancerFrontendIPConfigurationsClientGetResponse struct {
+	// Frontend IP address of the load balancer.
 	FrontendIPConfiguration
 }
 
 // LoadBalancerFrontendIPConfigurationsClientListResponse contains the response from method LoadBalancerFrontendIPConfigurationsClient.NewListPager.
 type LoadBalancerFrontendIPConfigurationsClientListResponse struct {
+	// Response for ListFrontendIPConfiguration API service call.
 	LoadBalancerFrontendIPConfigurationListResult
 }
 
 // LoadBalancerLoadBalancingRulesClientGetResponse contains the response from method LoadBalancerLoadBalancingRulesClient.Get.
 type LoadBalancerLoadBalancingRulesClientGetResponse struct {
+	// A load balancing rule for a load balancer.
 	LoadBalancingRule
 }
 
 // LoadBalancerLoadBalancingRulesClientListResponse contains the response from method LoadBalancerLoadBalancingRulesClient.NewListPager.
 type LoadBalancerLoadBalancingRulesClientListResponse struct {
+	// Response for ListLoadBalancingRule API service call.
 	LoadBalancerLoadBalancingRuleListResult
 }
 
 // LoadBalancerNetworkInterfacesClientListResponse contains the response from method LoadBalancerNetworkInterfacesClient.NewListPager.
 type LoadBalancerNetworkInterfacesClientListResponse struct {
+	// Response for the ListNetworkInterface API service call.
 	InterfaceListResult
 }
 
 // LoadBalancerOutboundRulesClientGetResponse contains the response from method LoadBalancerOutboundRulesClient.Get.
 type LoadBalancerOutboundRulesClientGetResponse struct {
+	// Outbound rule of the load balancer.
 	OutboundRule
 }
 
 // LoadBalancerOutboundRulesClientListResponse contains the response from method LoadBalancerOutboundRulesClient.NewListPager.
 type LoadBalancerOutboundRulesClientListResponse struct {
+	// Response for ListOutboundRule API service call.
 	LoadBalancerOutboundRuleListResult
 }
 
 // LoadBalancerProbesClientGetResponse contains the response from method LoadBalancerProbesClient.Get.
 type LoadBalancerProbesClientGetResponse struct {
+	// A load balancer probe.
 	Probe
 }
 
 // LoadBalancerProbesClientListResponse contains the response from method LoadBalancerProbesClient.NewListPager.
 type LoadBalancerProbesClientListResponse struct {
+	// Response for ListProbe API service call.
 	LoadBalancerProbeListResult
 }
 
 // LoadBalancersClientCreateOrUpdateResponse contains the response from method LoadBalancersClient.BeginCreateOrUpdate.
 type LoadBalancersClientCreateOrUpdateResponse struct {
+	// LoadBalancer resource.
 	LoadBalancer
 }
 
@@ -1283,24 +1499,34 @@ type LoadBalancersClientDeleteResponse struct {
 
 // LoadBalancersClientGetResponse contains the response from method LoadBalancersClient.Get.
 type LoadBalancersClientGetResponse struct {
+	// LoadBalancer resource.
 	LoadBalancer
 }
 
 // LoadBalancersClientListAllResponse contains the response from method LoadBalancersClient.NewListAllPager.
 type LoadBalancersClientListAllResponse struct {
+	// Response for ListLoadBalancers API service call.
 	LoadBalancerListResult
 }
 
 // LoadBalancersClientListInboundNatRulePortMappingsResponse contains the response from method LoadBalancersClient.BeginListInboundNatRulePortMappings.
 type LoadBalancersClientListInboundNatRulePortMappingsResponse struct {
+	// The response for a QueryInboundNatRulePortMapping API.
 	BackendAddressInboundNatRulePortMappings
 }
 
 // LoadBalancersClientListResponse contains the response from method LoadBalancersClient.NewListPager.
 type LoadBalancersClientListResponse struct {
+	// Response for ListLoadBalancers API service call.
 	LoadBalancerListResult
 }
 
+// LoadBalancersClientMigrateToIPBasedResponse contains the response from method LoadBalancersClient.MigrateToIPBased.
+type LoadBalancersClientMigrateToIPBasedResponse struct {
+	// The response for a migrateToIpBased API.
+	MigratedPools
+}
+
 // LoadBalancersClientSwapPublicIPAddressesResponse contains the response from method LoadBalancersClient.BeginSwapPublicIPAddresses.
 type LoadBalancersClientSwapPublicIPAddressesResponse struct {
 	// placeholder for future response values
@@ -1308,11 +1534,13 @@ type LoadBalancersClientSwapPublicIPAddressesResponse struct {
 
 // LoadBalancersClientUpdateTagsResponse contains the response from method LoadBalancersClient.UpdateTags.
 type LoadBalancersClientUpdateTagsResponse struct {
+	// LoadBalancer resource.
 	LoadBalancer
 }
 
 // LocalNetworkGatewaysClientCreateOrUpdateResponse contains the response from method LocalNetworkGatewaysClient.BeginCreateOrUpdate.
 type LocalNetworkGatewaysClientCreateOrUpdateResponse struct {
+	// A common class for general resource information.
 	LocalNetworkGateway
 }
 
@@ -1323,21 +1551,25 @@ type LocalNetworkGatewaysClientDeleteResponse struct {
 
 // LocalNetworkGatewaysClientGetResponse contains the response from method LocalNetworkGatewaysClient.Get.
 type LocalNetworkGatewaysClientGetResponse struct {
+	// A common class for general resource information.
 	LocalNetworkGateway
 }
 
 // LocalNetworkGatewaysClientListResponse contains the response from method LocalNetworkGatewaysClient.NewListPager.
 type LocalNetworkGatewaysClientListResponse struct {
+	// Response for ListLocalNetworkGateways API service call.
 	LocalNetworkGatewayListResult
 }
 
 // LocalNetworkGatewaysClientUpdateTagsResponse contains the response from method LocalNetworkGatewaysClient.UpdateTags.
 type LocalNetworkGatewaysClientUpdateTagsResponse struct {
+	// A common class for general resource information.
 	LocalNetworkGateway
 }
 
 // ManagementClientCheckDNSNameAvailabilityResponse contains the response from method ManagementClient.CheckDNSNameAvailability.
 type ManagementClientCheckDNSNameAvailabilityResponse struct {
+	// Response for the CheckDnsNameAvailability API service call.
 	DNSNameAvailabilityResult
 }
 
@@ -1348,61 +1580,77 @@ type ManagementClientDeleteBastionShareableLinkResponse struct {
 
 // ManagementClientDisconnectActiveSessionsResponse contains the response from method ManagementClient.NewDisconnectActiveSessionsPager.
 type ManagementClientDisconnectActiveSessionsResponse struct {
+	// Response for DisconnectActiveSessions.
 	BastionSessionDeleteResult
 }
 
 // ManagementClientExpressRouteProviderPortResponse contains the response from method ManagementClient.ExpressRouteProviderPort.
 type ManagementClientExpressRouteProviderPortResponse struct {
+	// ExpressRouteProviderPort resource.
 	ExpressRouteProviderPort
 }
 
 // ManagementClientGeneratevirtualwanvpnserverconfigurationvpnprofileResponse contains the response from method ManagementClient.BeginGeneratevirtualwanvpnserverconfigurationvpnprofile.
 type ManagementClientGeneratevirtualwanvpnserverconfigurationvpnprofileResponse struct {
+	// Vpn Profile Response for package generation.
 	VPNProfileResponse
 }
 
 // ManagementClientGetActiveSessionsResponse contains the response from method ManagementClient.BeginGetActiveSessions.
 type ManagementClientGetActiveSessionsResponse struct {
+	// Response for GetActiveSessions.
 	BastionActiveSessionListResult
 }
 
 // ManagementClientGetBastionShareableLinkResponse contains the response from method ManagementClient.NewGetBastionShareableLinkPager.
 type ManagementClientGetBastionShareableLinkResponse struct {
+	// Response for all the Bastion Shareable Link endpoints.
 	BastionShareableLinkListResult
 }
 
 // ManagementClientListActiveConnectivityConfigurationsResponse contains the response from method ManagementClient.ListActiveConnectivityConfigurations.
 type ManagementClientListActiveConnectivityConfigurationsResponse struct {
+	// Result of the request to list active connectivity configurations. It contains a list of active connectivity configurations
+	// and a skiptoken to get the next set of results.
 	ActiveConnectivityConfigurationsListResult
 }
 
 // ManagementClientListActiveSecurityAdminRulesResponse contains the response from method ManagementClient.ListActiveSecurityAdminRules.
 type ManagementClientListActiveSecurityAdminRulesResponse struct {
+	// Result of the request to list active security admin rules. It contains a list of active security admin rules and a skiptoken
+	// to get the next set of results.
 	ActiveSecurityAdminRulesListResult
 }
 
 // ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsResponse contains the response from method ManagementClient.ListNetworkManagerEffectiveConnectivityConfigurations.
 type ManagementClientListNetworkManagerEffectiveConnectivityConfigurationsResponse struct {
+	// Result of the request to list networkManagerEffectiveConnectivityConfiguration. It contains a list of groups and a skiptoken
+	// to get the next set of results.
 	ManagerEffectiveConnectivityConfigurationListResult
 }
 
 // ManagementClientListNetworkManagerEffectiveSecurityAdminRulesResponse contains the response from method ManagementClient.ListNetworkManagerEffectiveSecurityAdminRules.
 type ManagementClientListNetworkManagerEffectiveSecurityAdminRulesResponse struct {
+	// Result of the request to list networkManagerEffectiveSecurityAdminRules. It contains a list of groups and a skiptoken to
+	// get the next set of results.
 	ManagerEffectiveSecurityAdminRulesListResult
 }
 
 // ManagementClientPutBastionShareableLinkResponse contains the response from method ManagementClient.BeginPutBastionShareableLink.
 type ManagementClientPutBastionShareableLinkResponse struct {
+	// Response for all the Bastion Shareable Link endpoints.
 	BastionShareableLinkListResult
 }
 
 // ManagementClientSupportedSecurityProvidersResponse contains the response from method ManagementClient.SupportedSecurityProviders.
 type ManagementClientSupportedSecurityProvidersResponse struct {
+	// Collection of SecurityProviders.
 	VirtualWanSecurityProviders
 }
 
 // ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateResponse contains the response from method ManagementGroupNetworkManagerConnectionsClient.CreateOrUpdate.
 type ManagementGroupNetworkManagerConnectionsClientCreateOrUpdateResponse struct {
+	// The Network Manager Connection resource
 	ManagerConnection
 }
 
@@ -1413,26 +1661,31 @@ type ManagementGroupNetworkManagerConnectionsClientDeleteResponse struct {
 
 // ManagementGroupNetworkManagerConnectionsClientGetResponse contains the response from method ManagementGroupNetworkManagerConnectionsClient.Get.
 type ManagementGroupNetworkManagerConnectionsClientGetResponse struct {
+	// The Network Manager Connection resource
 	ManagerConnection
 }
 
 // ManagementGroupNetworkManagerConnectionsClientListResponse contains the response from method ManagementGroupNetworkManagerConnectionsClient.NewListPager.
 type ManagementGroupNetworkManagerConnectionsClientListResponse struct {
+	// List of network manager connections.
 	ManagerConnectionListResult
 }
 
 // ManagerCommitsClientPostResponse contains the response from method ManagerCommitsClient.BeginPost.
 type ManagerCommitsClientPostResponse struct {
+	// Network Manager Commit.
 	ManagerCommit
 }
 
 // ManagerDeploymentStatusClientListResponse contains the response from method ManagerDeploymentStatusClient.List.
 type ManagerDeploymentStatusClientListResponse struct {
+	// A list of Network Manager Deployment Status
 	ManagerDeploymentStatusListResult
 }
 
 // ManagersClientCreateOrUpdateResponse contains the response from method ManagersClient.CreateOrUpdate.
 type ManagersClientCreateOrUpdateResponse struct {
+	// The Managed Network resource
 	Manager
 }
 
@@ -1443,26 +1696,33 @@ type ManagersClientDeleteResponse struct {
 
 // ManagersClientGetResponse contains the response from method ManagersClient.Get.
 type ManagersClientGetResponse struct {
+	// The Managed Network resource
 	Manager
 }
 
 // ManagersClientListBySubscriptionResponse contains the response from method ManagersClient.NewListBySubscriptionPager.
 type ManagersClientListBySubscriptionResponse struct {
+	// Result of the request to list NetworkManager. It contains a list of network managers and a URL link to get the next set
+	// of results.
 	ManagerListResult
 }
 
 // ManagersClientListResponse contains the response from method ManagersClient.NewListPager.
 type ManagersClientListResponse struct {
+	// Result of the request to list NetworkManager. It contains a list of network managers and a URL link to get the next set
+	// of results.
 	ManagerListResult
 }
 
 // ManagersClientPatchResponse contains the response from method ManagersClient.Patch.
 type ManagersClientPatchResponse struct {
+	// The Managed Network resource
 	Manager
 }
 
 // NatGatewaysClientCreateOrUpdateResponse contains the response from method NatGatewaysClient.BeginCreateOrUpdate.
 type NatGatewaysClientCreateOrUpdateResponse struct {
+	// Nat Gateway resource.
 	NatGateway
 }
 
@@ -1473,26 +1733,31 @@ type NatGatewaysClientDeleteResponse struct {
 
 // NatGatewaysClientGetResponse contains the response from method NatGatewaysClient.Get.
 type NatGatewaysClientGetResponse struct {
+	// Nat Gateway resource.
 	NatGateway
 }
 
 // NatGatewaysClientListAllResponse contains the response from method NatGatewaysClient.NewListAllPager.
 type NatGatewaysClientListAllResponse struct {
+	// Response for ListNatGateways API service call.
 	NatGatewayListResult
 }
 
 // NatGatewaysClientListResponse contains the response from method NatGatewaysClient.NewListPager.
 type NatGatewaysClientListResponse struct {
+	// Response for ListNatGateways API service call.
 	NatGatewayListResult
 }
 
 // NatGatewaysClientUpdateTagsResponse contains the response from method NatGatewaysClient.UpdateTags.
 type NatGatewaysClientUpdateTagsResponse struct {
+	// Nat Gateway resource.
 	NatGateway
 }
 
 // NatRulesClientCreateOrUpdateResponse contains the response from method NatRulesClient.BeginCreateOrUpdate.
 type NatRulesClientCreateOrUpdateResponse struct {
+	// VpnGatewayNatRule Resource.
 	VPNGatewayNatRule
 }
 
@@ -1503,21 +1768,27 @@ type NatRulesClientDeleteResponse struct {
 
 // NatRulesClientGetResponse contains the response from method NatRulesClient.Get.
 type NatRulesClientGetResponse struct {
+	// VpnGatewayNatRule Resource.
 	VPNGatewayNatRule
 }
 
 // NatRulesClientListByVPNGatewayResponse contains the response from method NatRulesClient.NewListByVPNGatewayPager.
 type NatRulesClientListByVPNGatewayResponse struct {
+	// Result of the request to list all nat rules to a virtual wan vpn gateway. It contains a list of Nat rules and a URL nextLink
+	// to get the next set of results.
 	ListVPNGatewayNatRulesResult
 }
 
 // OperationsClientListResponse contains the response from method OperationsClient.NewListPager.
 type OperationsClientListResponse struct {
+	// Result of the request to list Network operations. It contains a list of operations and a URL link to get the next set of
+	// results.
 	OperationListResult
 }
 
 // P2SVPNGatewaysClientCreateOrUpdateResponse contains the response from method P2SVPNGatewaysClient.BeginCreateOrUpdate.
 type P2SVPNGatewaysClientCreateOrUpdateResponse struct {
+	// P2SVpnGateway Resource.
 	P2SVPNGateway
 }
 
@@ -1533,46 +1804,57 @@ type P2SVPNGatewaysClientDisconnectP2SVPNConnectionsResponse struct {
 
 // P2SVPNGatewaysClientGenerateVPNProfileResponse contains the response from method P2SVPNGatewaysClient.BeginGenerateVPNProfile.
 type P2SVPNGatewaysClientGenerateVPNProfileResponse struct {
+	// Vpn Profile Response for package generation.
 	VPNProfileResponse
 }
 
 // P2SVPNGatewaysClientGetP2SVPNConnectionHealthDetailedResponse contains the response from method P2SVPNGatewaysClient.BeginGetP2SVPNConnectionHealthDetailed.
 type P2SVPNGatewaysClientGetP2SVPNConnectionHealthDetailedResponse struct {
+	// P2S Vpn connection detailed health written to sas url.
 	P2SVPNConnectionHealth
 }
 
 // P2SVPNGatewaysClientGetP2SVPNConnectionHealthResponse contains the response from method P2SVPNGatewaysClient.BeginGetP2SVPNConnectionHealth.
 type P2SVPNGatewaysClientGetP2SVPNConnectionHealthResponse struct {
+	// P2SVpnGateway Resource.
 	P2SVPNGateway
 }
 
 // P2SVPNGatewaysClientGetResponse contains the response from method P2SVPNGatewaysClient.Get.
 type P2SVPNGatewaysClientGetResponse struct {
+	// P2SVpnGateway Resource.
 	P2SVPNGateway
 }
 
 // P2SVPNGatewaysClientListByResourceGroupResponse contains the response from method P2SVPNGatewaysClient.NewListByResourceGroupPager.
 type P2SVPNGatewaysClientListByResourceGroupResponse struct {
+	// Result of the request to list P2SVpnGateways. It contains a list of P2SVpnGateways and a URL nextLink to get the next set
+	// of results.
 	ListP2SVPNGatewaysResult
 }
 
 // P2SVPNGatewaysClientListResponse contains the response from method P2SVPNGatewaysClient.NewListPager.
 type P2SVPNGatewaysClientListResponse struct {
+	// Result of the request to list P2SVpnGateways. It contains a list of P2SVpnGateways and a URL nextLink to get the next set
+	// of results.
 	ListP2SVPNGatewaysResult
 }
 
 // P2SVPNGatewaysClientResetResponse contains the response from method P2SVPNGatewaysClient.BeginReset.
 type P2SVPNGatewaysClientResetResponse struct {
+	// P2SVpnGateway Resource.
 	P2SVPNGateway
 }
 
 // P2SVPNGatewaysClientUpdateTagsResponse contains the response from method P2SVPNGatewaysClient.BeginUpdateTags.
 type P2SVPNGatewaysClientUpdateTagsResponse struct {
+	// P2SVpnGateway Resource.
 	P2SVPNGateway
 }
 
 // PacketCapturesClientCreateResponse contains the response from method PacketCapturesClient.BeginCreate.
 type PacketCapturesClientCreateResponse struct {
+	// Information about packet capture session.
 	PacketCaptureResult
 }
 
@@ -1583,16 +1865,19 @@ type PacketCapturesClientDeleteResponse struct {
 
 // PacketCapturesClientGetResponse contains the response from method PacketCapturesClient.Get.
 type PacketCapturesClientGetResponse struct {
+	// Information about packet capture session.
 	PacketCaptureResult
 }
 
 // PacketCapturesClientGetStatusResponse contains the response from method PacketCapturesClient.BeginGetStatus.
 type PacketCapturesClientGetStatusResponse struct {
+	// Status of packet capture session.
 	PacketCaptureQueryStatusResult
 }
 
 // PacketCapturesClientListResponse contains the response from method PacketCapturesClient.NewListPager.
 type PacketCapturesClientListResponse struct {
+	// List of packet capture sessions.
 	PacketCaptureListResult
 }
 
@@ -1603,16 +1888,20 @@ type PacketCapturesClientStopResponse struct {
 
 // PeerExpressRouteCircuitConnectionsClientGetResponse contains the response from method PeerExpressRouteCircuitConnectionsClient.Get.
 type PeerExpressRouteCircuitConnectionsClientGetResponse struct {
+	// Peer Express Route Circuit Connection in an ExpressRouteCircuitPeering resource.
 	PeerExpressRouteCircuitConnection
 }
 
 // PeerExpressRouteCircuitConnectionsClientListResponse contains the response from method PeerExpressRouteCircuitConnectionsClient.NewListPager.
 type PeerExpressRouteCircuitConnectionsClientListResponse struct {
+	// Response for ListPeeredConnections API service call retrieves all global reach peer circuit connections that belongs to
+	// a Private Peering for an ExpressRouteCircuit.
 	PeerExpressRouteCircuitConnectionListResult
 }
 
 // PrivateDNSZoneGroupsClientCreateOrUpdateResponse contains the response from method PrivateDNSZoneGroupsClient.BeginCreateOrUpdate.
 type PrivateDNSZoneGroupsClientCreateOrUpdateResponse struct {
+	// Private dns zone group resource.
 	PrivateDNSZoneGroup
 }
 
@@ -1623,16 +1912,19 @@ type PrivateDNSZoneGroupsClientDeleteResponse struct {
 
 // PrivateDNSZoneGroupsClientGetResponse contains the response from method PrivateDNSZoneGroupsClient.Get.
 type PrivateDNSZoneGroupsClientGetResponse struct {
+	// Private dns zone group resource.
 	PrivateDNSZoneGroup
 }
 
 // PrivateDNSZoneGroupsClientListResponse contains the response from method PrivateDNSZoneGroupsClient.NewListPager.
 type PrivateDNSZoneGroupsClientListResponse struct {
+	// Response for the ListPrivateDnsZoneGroups API service call.
 	PrivateDNSZoneGroupListResult
 }
 
 // PrivateEndpointsClientCreateOrUpdateResponse contains the response from method PrivateEndpointsClient.BeginCreateOrUpdate.
 type PrivateEndpointsClientCreateOrUpdateResponse struct {
+	// Private endpoint resource.
 	PrivateEndpoint
 }
 
@@ -1643,31 +1935,37 @@ type PrivateEndpointsClientDeleteResponse struct {
 
 // PrivateEndpointsClientGetResponse contains the response from method PrivateEndpointsClient.Get.
 type PrivateEndpointsClientGetResponse struct {
+	// Private endpoint resource.
 	PrivateEndpoint
 }
 
 // PrivateEndpointsClientListBySubscriptionResponse contains the response from method PrivateEndpointsClient.NewListBySubscriptionPager.
 type PrivateEndpointsClientListBySubscriptionResponse struct {
+	// Response for the ListPrivateEndpoints API service call.
 	PrivateEndpointListResult
 }
 
 // PrivateEndpointsClientListResponse contains the response from method PrivateEndpointsClient.NewListPager.
 type PrivateEndpointsClientListResponse struct {
+	// Response for the ListPrivateEndpoints API service call.
 	PrivateEndpointListResult
 }
 
 // PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityByResourceGroupResponse contains the response from method PrivateLinkServicesClient.BeginCheckPrivateLinkServiceVisibilityByResourceGroup.
 type PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityByResourceGroupResponse struct {
+	// Response for the CheckPrivateLinkServiceVisibility API service call.
 	PrivateLinkServiceVisibility
 }
 
 // PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityResponse contains the response from method PrivateLinkServicesClient.BeginCheckPrivateLinkServiceVisibility.
 type PrivateLinkServicesClientCheckPrivateLinkServiceVisibilityResponse struct {
+	// Response for the CheckPrivateLinkServiceVisibility API service call.
 	PrivateLinkServiceVisibility
 }
 
 // PrivateLinkServicesClientCreateOrUpdateResponse contains the response from method PrivateLinkServicesClient.BeginCreateOrUpdate.
 type PrivateLinkServicesClientCreateOrUpdateResponse struct {
+	// Private link service resource.
 	PrivateLinkService
 }
 
@@ -1683,46 +1981,55 @@ type PrivateLinkServicesClientDeleteResponse struct {
 
 // PrivateLinkServicesClientGetPrivateEndpointConnectionResponse contains the response from method PrivateLinkServicesClient.GetPrivateEndpointConnection.
 type PrivateLinkServicesClientGetPrivateEndpointConnectionResponse struct {
+	// PrivateEndpointConnection resource.
 	PrivateEndpointConnection
 }
 
 // PrivateLinkServicesClientGetResponse contains the response from method PrivateLinkServicesClient.Get.
 type PrivateLinkServicesClientGetResponse struct {
+	// Private link service resource.
 	PrivateLinkService
 }
 
 // PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupResponse contains the response from method PrivateLinkServicesClient.NewListAutoApprovedPrivateLinkServicesByResourceGroupPager.
 type PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesByResourceGroupResponse struct {
+	// An array of private link service id that can be linked to a private end point with auto approved.
 	AutoApprovedPrivateLinkServicesResult
 }
 
 // PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesResponse contains the response from method PrivateLinkServicesClient.NewListAutoApprovedPrivateLinkServicesPager.
 type PrivateLinkServicesClientListAutoApprovedPrivateLinkServicesResponse struct {
+	// An array of private link service id that can be linked to a private end point with auto approved.
 	AutoApprovedPrivateLinkServicesResult
 }
 
 // PrivateLinkServicesClientListBySubscriptionResponse contains the response from method PrivateLinkServicesClient.NewListBySubscriptionPager.
 type PrivateLinkServicesClientListBySubscriptionResponse struct {
+	// Response for the ListPrivateLinkService API service call.
 	PrivateLinkServiceListResult
 }
 
 // PrivateLinkServicesClientListPrivateEndpointConnectionsResponse contains the response from method PrivateLinkServicesClient.NewListPrivateEndpointConnectionsPager.
 type PrivateLinkServicesClientListPrivateEndpointConnectionsResponse struct {
+	// Response for the ListPrivateEndpointConnection API service call.
 	PrivateEndpointConnectionListResult
 }
 
 // PrivateLinkServicesClientListResponse contains the response from method PrivateLinkServicesClient.NewListPager.
 type PrivateLinkServicesClientListResponse struct {
+	// Response for the ListPrivateLinkService API service call.
 	PrivateLinkServiceListResult
 }
 
 // PrivateLinkServicesClientUpdatePrivateEndpointConnectionResponse contains the response from method PrivateLinkServicesClient.UpdatePrivateEndpointConnection.
 type PrivateLinkServicesClientUpdatePrivateEndpointConnectionResponse struct {
+	// PrivateEndpointConnection resource.
 	PrivateEndpointConnection
 }
 
 // ProfilesClientCreateOrUpdateResponse contains the response from method ProfilesClient.CreateOrUpdate.
 type ProfilesClientCreateOrUpdateResponse struct {
+	// Network profile resource.
 	Profile
 }
 
@@ -1733,31 +2040,37 @@ type ProfilesClientDeleteResponse struct {
 
 // ProfilesClientGetResponse contains the response from method ProfilesClient.Get.
 type ProfilesClientGetResponse struct {
+	// Network profile resource.
 	Profile
 }
 
 // ProfilesClientListAllResponse contains the response from method ProfilesClient.NewListAllPager.
 type ProfilesClientListAllResponse struct {
+	// Response for ListNetworkProfiles API service call.
 	ProfileListResult
 }
 
 // ProfilesClientListResponse contains the response from method ProfilesClient.NewListPager.
 type ProfilesClientListResponse struct {
+	// Response for ListNetworkProfiles API service call.
 	ProfileListResult
 }
 
 // ProfilesClientUpdateTagsResponse contains the response from method ProfilesClient.UpdateTags.
 type ProfilesClientUpdateTagsResponse struct {
+	// Network profile resource.
 	Profile
 }
 
 // PublicIPAddressesClientCreateOrUpdateResponse contains the response from method PublicIPAddressesClient.BeginCreateOrUpdate.
 type PublicIPAddressesClientCreateOrUpdateResponse struct {
+	// Public IP address resource.
 	PublicIPAddress
 }
 
 // PublicIPAddressesClientDdosProtectionStatusResponse contains the response from method PublicIPAddressesClient.BeginDdosProtectionStatus.
 type PublicIPAddressesClientDdosProtectionStatusResponse struct {
+	// Response for GetPublicIpAddressDdosProtectionStatusOperation API service call.
 	PublicIPDdosProtectionStatusResult
 }
 
@@ -1768,56 +2081,67 @@ type PublicIPAddressesClientDeleteResponse struct {
 
 // PublicIPAddressesClientGetCloudServicePublicIPAddressResponse contains the response from method PublicIPAddressesClient.GetCloudServicePublicIPAddress.
 type PublicIPAddressesClientGetCloudServicePublicIPAddressResponse struct {
+	// Public IP address resource.
 	PublicIPAddress
 }
 
 // PublicIPAddressesClientGetResponse contains the response from method PublicIPAddressesClient.Get.
 type PublicIPAddressesClientGetResponse struct {
+	// Public IP address resource.
 	PublicIPAddress
 }
 
 // PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressResponse contains the response from method PublicIPAddressesClient.GetVirtualMachineScaleSetPublicIPAddress.
 type PublicIPAddressesClientGetVirtualMachineScaleSetPublicIPAddressResponse struct {
+	// Public IP address resource.
 	PublicIPAddress
 }
 
 // PublicIPAddressesClientListAllResponse contains the response from method PublicIPAddressesClient.NewListAllPager.
 type PublicIPAddressesClientListAllResponse struct {
+	// Response for ListPublicIpAddresses API service call.
 	PublicIPAddressListResult
 }
 
 // PublicIPAddressesClientListCloudServicePublicIPAddressesResponse contains the response from method PublicIPAddressesClient.NewListCloudServicePublicIPAddressesPager.
 type PublicIPAddressesClientListCloudServicePublicIPAddressesResponse struct {
+	// Response for ListPublicIpAddresses API service call.
 	PublicIPAddressListResult
 }
 
 // PublicIPAddressesClientListCloudServiceRoleInstancePublicIPAddressesResponse contains the response from method PublicIPAddressesClient.NewListCloudServiceRoleInstancePublicIPAddressesPager.
 type PublicIPAddressesClientListCloudServiceRoleInstancePublicIPAddressesResponse struct {
+	// Response for ListPublicIpAddresses API service call.
 	PublicIPAddressListResult
 }
 
 // PublicIPAddressesClientListResponse contains the response from method PublicIPAddressesClient.NewListPager.
 type PublicIPAddressesClientListResponse struct {
+	// Response for ListPublicIpAddresses API service call.
 	PublicIPAddressListResult
 }
 
 // PublicIPAddressesClientListVirtualMachineScaleSetPublicIPAddressesResponse contains the response from method PublicIPAddressesClient.NewListVirtualMachineScaleSetPublicIPAddressesPager.
 type PublicIPAddressesClientListVirtualMachineScaleSetPublicIPAddressesResponse struct {
+	// Response for ListPublicIpAddresses API service call.
 	PublicIPAddressListResult
 }
 
 // PublicIPAddressesClientListVirtualMachineScaleSetVMPublicIPAddressesResponse contains the response from method PublicIPAddressesClient.NewListVirtualMachineScaleSetVMPublicIPAddressesPager.
 type PublicIPAddressesClientListVirtualMachineScaleSetVMPublicIPAddressesResponse struct {
+	// Response for ListPublicIpAddresses API service call.
 	PublicIPAddressListResult
 }
 
 // PublicIPAddressesClientUpdateTagsResponse contains the response from method PublicIPAddressesClient.UpdateTags.
 type PublicIPAddressesClientUpdateTagsResponse struct {
+	// Public IP address resource.
 	PublicIPAddress
 }
 
 // PublicIPPrefixesClientCreateOrUpdateResponse contains the response from method PublicIPPrefixesClient.BeginCreateOrUpdate.
 type PublicIPPrefixesClientCreateOrUpdateResponse struct {
+	// Public IP prefix resource.
 	PublicIPPrefix
 }
 
@@ -1828,31 +2152,37 @@ type PublicIPPrefixesClientDeleteResponse struct {
 
 // PublicIPPrefixesClientGetResponse contains the response from method PublicIPPrefixesClient.Get.
 type PublicIPPrefixesClientGetResponse struct {
+	// Public IP prefix resource.
 	PublicIPPrefix
 }
 
 // PublicIPPrefixesClientListAllResponse contains the response from method PublicIPPrefixesClient.NewListAllPager.
 type PublicIPPrefixesClientListAllResponse struct {
+	// Response for ListPublicIpPrefixes API service call.
 	PublicIPPrefixListResult
 }
 
 // PublicIPPrefixesClientListResponse contains the response from method PublicIPPrefixesClient.NewListPager.
 type PublicIPPrefixesClientListResponse struct {
+	// Response for ListPublicIpPrefixes API service call.
 	PublicIPPrefixListResult
 }
 
 // PublicIPPrefixesClientUpdateTagsResponse contains the response from method PublicIPPrefixesClient.UpdateTags.
 type PublicIPPrefixesClientUpdateTagsResponse struct {
+	// Public IP prefix resource.
 	PublicIPPrefix
 }
 
 // ResourceNavigationLinksClientListResponse contains the response from method ResourceNavigationLinksClient.List.
 type ResourceNavigationLinksClientListResponse struct {
+	// Response for ResourceNavigationLinks_List operation.
 	ResourceNavigationLinksListResult
 }
 
 // RouteFilterRulesClientCreateOrUpdateResponse contains the response from method RouteFilterRulesClient.BeginCreateOrUpdate.
 type RouteFilterRulesClientCreateOrUpdateResponse struct {
+	// Route Filter Rule Resource.
 	RouteFilterRule
 }
 
@@ -1863,16 +2193,19 @@ type RouteFilterRulesClientDeleteResponse struct {
 
 // RouteFilterRulesClientGetResponse contains the response from method RouteFilterRulesClient.Get.
 type RouteFilterRulesClientGetResponse struct {
+	// Route Filter Rule Resource.
 	RouteFilterRule
 }
 
 // RouteFilterRulesClientListByRouteFilterResponse contains the response from method RouteFilterRulesClient.NewListByRouteFilterPager.
 type RouteFilterRulesClientListByRouteFilterResponse struct {
+	// Response for the ListRouteFilterRules API service call.
 	RouteFilterRuleListResult
 }
 
 // RouteFiltersClientCreateOrUpdateResponse contains the response from method RouteFiltersClient.BeginCreateOrUpdate.
 type RouteFiltersClientCreateOrUpdateResponse struct {
+	// Route Filter Resource.
 	RouteFilter
 }
 
@@ -1883,26 +2216,31 @@ type RouteFiltersClientDeleteResponse struct {
 
 // RouteFiltersClientGetResponse contains the response from method RouteFiltersClient.Get.
 type RouteFiltersClientGetResponse struct {
+	// Route Filter Resource.
 	RouteFilter
 }
 
 // RouteFiltersClientListByResourceGroupResponse contains the response from method RouteFiltersClient.NewListByResourceGroupPager.
 type RouteFiltersClientListByResourceGroupResponse struct {
+	// Response for the ListRouteFilters API service call.
 	RouteFilterListResult
 }
 
 // RouteFiltersClientListResponse contains the response from method RouteFiltersClient.NewListPager.
 type RouteFiltersClientListResponse struct {
+	// Response for the ListRouteFilters API service call.
 	RouteFilterListResult
 }
 
 // RouteFiltersClientUpdateTagsResponse contains the response from method RouteFiltersClient.UpdateTags.
 type RouteFiltersClientUpdateTagsResponse struct {
+	// Route Filter Resource.
 	RouteFilter
 }
 
 // RouteMapsClientCreateOrUpdateResponse contains the response from method RouteMapsClient.BeginCreateOrUpdate.
 type RouteMapsClientCreateOrUpdateResponse struct {
+	// The RouteMap child resource of a Virtual hub.
 	RouteMap
 }
 
@@ -1913,16 +2251,19 @@ type RouteMapsClientDeleteResponse struct {
 
 // RouteMapsClientGetResponse contains the response from method RouteMapsClient.Get.
 type RouteMapsClientGetResponse struct {
+	// The RouteMap child resource of a Virtual hub.
 	RouteMap
 }
 
 // RouteMapsClientListResponse contains the response from method RouteMapsClient.NewListPager.
 type RouteMapsClientListResponse struct {
+	// List of RouteMaps and a URL nextLink to get the next set of results.
 	ListRouteMapsResult
 }
 
 // RouteTablesClientCreateOrUpdateResponse contains the response from method RouteTablesClient.BeginCreateOrUpdate.
 type RouteTablesClientCreateOrUpdateResponse struct {
+	// Route table resource.
 	RouteTable
 }
 
@@ -1933,26 +2274,31 @@ type RouteTablesClientDeleteResponse struct {
 
 // RouteTablesClientGetResponse contains the response from method RouteTablesClient.Get.
 type RouteTablesClientGetResponse struct {
+	// Route table resource.
 	RouteTable
 }
 
 // RouteTablesClientListAllResponse contains the response from method RouteTablesClient.NewListAllPager.
 type RouteTablesClientListAllResponse struct {
+	// Response for the ListRouteTable API service call.
 	RouteTableListResult
 }
 
 // RouteTablesClientListResponse contains the response from method RouteTablesClient.NewListPager.
 type RouteTablesClientListResponse struct {
+	// Response for the ListRouteTable API service call.
 	RouteTableListResult
 }
 
 // RouteTablesClientUpdateTagsResponse contains the response from method RouteTablesClient.UpdateTags.
 type RouteTablesClientUpdateTagsResponse struct {
+	// Route table resource.
 	RouteTable
 }
 
 // RoutesClientCreateOrUpdateResponse contains the response from method RoutesClient.BeginCreateOrUpdate.
 type RoutesClientCreateOrUpdateResponse struct {
+	// Route resource.
 	Route
 }
 
@@ -1963,16 +2309,19 @@ type RoutesClientDeleteResponse struct {
 
 // RoutesClientGetResponse contains the response from method RoutesClient.Get.
 type RoutesClientGetResponse struct {
+	// Route resource.
 	Route
 }
 
 // RoutesClientListResponse contains the response from method RoutesClient.NewListPager.
 type RoutesClientListResponse struct {
+	// Response for the ListRoute API service call.
 	RouteListResult
 }
 
 // RoutingIntentClientCreateOrUpdateResponse contains the response from method RoutingIntentClient.BeginCreateOrUpdate.
 type RoutingIntentClientCreateOrUpdateResponse struct {
+	// The routing intent child resource of a Virtual hub.
 	RoutingIntent
 }
 
@@ -1983,16 +2332,19 @@ type RoutingIntentClientDeleteResponse struct {
 
 // RoutingIntentClientGetResponse contains the response from method RoutingIntentClient.Get.
 type RoutingIntentClientGetResponse struct {
+	// The routing intent child resource of a Virtual hub.
 	RoutingIntent
 }
 
 // RoutingIntentClientListResponse contains the response from method RoutingIntentClient.NewListPager.
 type RoutingIntentClientListResponse struct {
+	// List of the routing intent result and a URL nextLink to get the next set of results.
 	ListRoutingIntentResult
 }
 
 // ScopeConnectionsClientCreateOrUpdateResponse contains the response from method ScopeConnectionsClient.CreateOrUpdate.
 type ScopeConnectionsClientCreateOrUpdateResponse struct {
+	// The Scope Connections resource
 	ScopeConnection
 }
 
@@ -2003,16 +2355,19 @@ type ScopeConnectionsClientDeleteResponse struct {
 
 // ScopeConnectionsClientGetResponse contains the response from method ScopeConnectionsClient.Get.
 type ScopeConnectionsClientGetResponse struct {
+	// The Scope Connections resource
 	ScopeConnection
 }
 
 // ScopeConnectionsClientListResponse contains the response from method ScopeConnectionsClient.NewListPager.
 type ScopeConnectionsClientListResponse struct {
+	// List of scope connections.
 	ScopeConnectionListResult
 }
 
 // SecurityAdminConfigurationsClientCreateOrUpdateResponse contains the response from method SecurityAdminConfigurationsClient.CreateOrUpdate.
 type SecurityAdminConfigurationsClientCreateOrUpdateResponse struct {
+	// Defines the security admin configuration
 	SecurityAdminConfiguration
 }
 
@@ -2023,16 +2378,19 @@ type SecurityAdminConfigurationsClientDeleteResponse struct {
 
 // SecurityAdminConfigurationsClientGetResponse contains the response from method SecurityAdminConfigurationsClient.Get.
 type SecurityAdminConfigurationsClientGetResponse struct {
+	// Defines the security admin configuration
 	SecurityAdminConfiguration
 }
 
 // SecurityAdminConfigurationsClientListResponse contains the response from method SecurityAdminConfigurationsClient.NewListPager.
 type SecurityAdminConfigurationsClientListResponse struct {
+	// A list of network manager security admin configurations
 	SecurityAdminConfigurationListResult
 }
 
 // SecurityGroupsClientCreateOrUpdateResponse contains the response from method SecurityGroupsClient.BeginCreateOrUpdate.
 type SecurityGroupsClientCreateOrUpdateResponse struct {
+	// NetworkSecurityGroup resource.
 	SecurityGroup
 }
 
@@ -2043,26 +2401,31 @@ type SecurityGroupsClientDeleteResponse struct {
 
 // SecurityGroupsClientGetResponse contains the response from method SecurityGroupsClient.Get.
 type SecurityGroupsClientGetResponse struct {
+	// NetworkSecurityGroup resource.
 	SecurityGroup
 }
 
 // SecurityGroupsClientListAllResponse contains the response from method SecurityGroupsClient.NewListAllPager.
 type SecurityGroupsClientListAllResponse struct {
+	// Response for ListNetworkSecurityGroups API service call.
 	SecurityGroupListResult
 }
 
 // SecurityGroupsClientListResponse contains the response from method SecurityGroupsClient.NewListPager.
 type SecurityGroupsClientListResponse struct {
+	// Response for ListNetworkSecurityGroups API service call.
 	SecurityGroupListResult
 }
 
 // SecurityGroupsClientUpdateTagsResponse contains the response from method SecurityGroupsClient.UpdateTags.
 type SecurityGroupsClientUpdateTagsResponse struct {
+	// NetworkSecurityGroup resource.
 	SecurityGroup
 }
 
 // SecurityPartnerProvidersClientCreateOrUpdateResponse contains the response from method SecurityPartnerProvidersClient.BeginCreateOrUpdate.
 type SecurityPartnerProvidersClientCreateOrUpdateResponse struct {
+	// Security Partner Provider resource.
 	SecurityPartnerProvider
 }
 
@@ -2073,26 +2436,31 @@ type SecurityPartnerProvidersClientDeleteResponse struct {
 
 // SecurityPartnerProvidersClientGetResponse contains the response from method SecurityPartnerProvidersClient.Get.
 type SecurityPartnerProvidersClientGetResponse struct {
+	// Security Partner Provider resource.
 	SecurityPartnerProvider
 }
 
 // SecurityPartnerProvidersClientListByResourceGroupResponse contains the response from method SecurityPartnerProvidersClient.NewListByResourceGroupPager.
 type SecurityPartnerProvidersClientListByResourceGroupResponse struct {
+	// Response for ListSecurityPartnerProviders API service call.
 	SecurityPartnerProviderListResult
 }
 
 // SecurityPartnerProvidersClientListResponse contains the response from method SecurityPartnerProvidersClient.NewListPager.
 type SecurityPartnerProvidersClientListResponse struct {
+	// Response for ListSecurityPartnerProviders API service call.
 	SecurityPartnerProviderListResult
 }
 
 // SecurityPartnerProvidersClientUpdateTagsResponse contains the response from method SecurityPartnerProvidersClient.UpdateTags.
 type SecurityPartnerProvidersClientUpdateTagsResponse struct {
+	// Security Partner Provider resource.
 	SecurityPartnerProvider
 }
 
 // SecurityRulesClientCreateOrUpdateResponse contains the response from method SecurityRulesClient.BeginCreateOrUpdate.
 type SecurityRulesClientCreateOrUpdateResponse struct {
+	// Network security rule.
 	SecurityRule
 }
 
@@ -2103,21 +2471,25 @@ type SecurityRulesClientDeleteResponse struct {
 
 // SecurityRulesClientGetResponse contains the response from method SecurityRulesClient.Get.
 type SecurityRulesClientGetResponse struct {
+	// Network security rule.
 	SecurityRule
 }
 
 // SecurityRulesClientListResponse contains the response from method SecurityRulesClient.NewListPager.
 type SecurityRulesClientListResponse struct {
+	// Response for ListSecurityRule API service call. Retrieves all security rules that belongs to a network security group.
 	SecurityRuleListResult
 }
 
 // ServiceAssociationLinksClientListResponse contains the response from method ServiceAssociationLinksClient.List.
 type ServiceAssociationLinksClientListResponse struct {
+	// Response for ServiceAssociationLinks_List operation.
 	ServiceAssociationLinksListResult
 }
 
 // ServiceEndpointPoliciesClientCreateOrUpdateResponse contains the response from method ServiceEndpointPoliciesClient.BeginCreateOrUpdate.
 type ServiceEndpointPoliciesClientCreateOrUpdateResponse struct {
+	// Service End point policy resource.
 	ServiceEndpointPolicy
 }
 
@@ -2128,26 +2500,31 @@ type ServiceEndpointPoliciesClientDeleteResponse struct {
 
 // ServiceEndpointPoliciesClientGetResponse contains the response from method ServiceEndpointPoliciesClient.Get.
 type ServiceEndpointPoliciesClientGetResponse struct {
+	// Service End point policy resource.
 	ServiceEndpointPolicy
 }
 
 // ServiceEndpointPoliciesClientListByResourceGroupResponse contains the response from method ServiceEndpointPoliciesClient.NewListByResourceGroupPager.
 type ServiceEndpointPoliciesClientListByResourceGroupResponse struct {
+	// Response for ListServiceEndpointPolicies API service call.
 	ServiceEndpointPolicyListResult
 }
 
 // ServiceEndpointPoliciesClientListResponse contains the response from method ServiceEndpointPoliciesClient.NewListPager.
 type ServiceEndpointPoliciesClientListResponse struct {
+	// Response for ListServiceEndpointPolicies API service call.
 	ServiceEndpointPolicyListResult
 }
 
 // ServiceEndpointPoliciesClientUpdateTagsResponse contains the response from method ServiceEndpointPoliciesClient.UpdateTags.
 type ServiceEndpointPoliciesClientUpdateTagsResponse struct {
+	// Service End point policy resource.
 	ServiceEndpointPolicy
 }
 
 // ServiceEndpointPolicyDefinitionsClientCreateOrUpdateResponse contains the response from method ServiceEndpointPolicyDefinitionsClient.BeginCreateOrUpdate.
 type ServiceEndpointPolicyDefinitionsClientCreateOrUpdateResponse struct {
+	// Service Endpoint policy definitions.
 	ServiceEndpointPolicyDefinition
 }
 
@@ -2158,26 +2535,32 @@ type ServiceEndpointPolicyDefinitionsClientDeleteResponse struct {
 
 // ServiceEndpointPolicyDefinitionsClientGetResponse contains the response from method ServiceEndpointPolicyDefinitionsClient.Get.
 type ServiceEndpointPolicyDefinitionsClientGetResponse struct {
+	// Service Endpoint policy definitions.
 	ServiceEndpointPolicyDefinition
 }
 
 // ServiceEndpointPolicyDefinitionsClientListByResourceGroupResponse contains the response from method ServiceEndpointPolicyDefinitionsClient.NewListByResourceGroupPager.
 type ServiceEndpointPolicyDefinitionsClientListByResourceGroupResponse struct {
+	// Response for ListServiceEndpointPolicyDefinition API service call. Retrieves all service endpoint policy definition that
+	// belongs to a service endpoint policy.
 	ServiceEndpointPolicyDefinitionListResult
 }
 
 // ServiceTagInformationClientListResponse contains the response from method ServiceTagInformationClient.NewListPager.
 type ServiceTagInformationClientListResponse struct {
+	// Response for Get ServiceTagInformation API service call. Retrieves the list of service tag information resources.
 	ServiceTagInformationListResult
 }
 
 // ServiceTagsClientListResponse contains the response from method ServiceTagsClient.List.
 type ServiceTagsClientListResponse struct {
+	// Response for the ListServiceTags API service call.
 	ServiceTagsListResult
 }
 
 // StaticMembersClientCreateOrUpdateResponse contains the response from method StaticMembersClient.CreateOrUpdate.
 type StaticMembersClientCreateOrUpdateResponse struct {
+	// StaticMember Item.
 	StaticMember
 }
 
@@ -2188,16 +2571,19 @@ type StaticMembersClientDeleteResponse struct {
 
 // StaticMembersClientGetResponse contains the response from method StaticMembersClient.Get.
 type StaticMembersClientGetResponse struct {
+	// StaticMember Item.
 	StaticMember
 }
 
 // StaticMembersClientListResponse contains the response from method StaticMembersClient.NewListPager.
 type StaticMembersClientListResponse struct {
+	// Result of the request to list StaticMember. It contains a list of groups and a URL link to get the next set of results.
 	StaticMemberListResult
 }
 
 // SubnetsClientCreateOrUpdateResponse contains the response from method SubnetsClient.BeginCreateOrUpdate.
 type SubnetsClientCreateOrUpdateResponse struct {
+	// Subnet in a virtual network resource.
 	Subnet
 }
 
@@ -2208,11 +2594,13 @@ type SubnetsClientDeleteResponse struct {
 
 // SubnetsClientGetResponse contains the response from method SubnetsClient.Get.
 type SubnetsClientGetResponse struct {
+	// Subnet in a virtual network resource.
 	Subnet
 }
 
 // SubnetsClientListResponse contains the response from method SubnetsClient.NewListPager.
 type SubnetsClientListResponse struct {
+	// Response for ListSubnets API service callRetrieves all subnet that belongs to a virtual network.
 	SubnetListResult
 }
 
@@ -2228,6 +2616,7 @@ type SubnetsClientUnprepareNetworkPoliciesResponse struct {
 
 // SubscriptionNetworkManagerConnectionsClientCreateOrUpdateResponse contains the response from method SubscriptionNetworkManagerConnectionsClient.CreateOrUpdate.
 type SubscriptionNetworkManagerConnectionsClientCreateOrUpdateResponse struct {
+	// The Network Manager Connection resource
 	ManagerConnection
 }
 
@@ -2238,21 +2627,25 @@ type SubscriptionNetworkManagerConnectionsClientDeleteResponse struct {
 
 // SubscriptionNetworkManagerConnectionsClientGetResponse contains the response from method SubscriptionNetworkManagerConnectionsClient.Get.
 type SubscriptionNetworkManagerConnectionsClientGetResponse struct {
+	// The Network Manager Connection resource
 	ManagerConnection
 }
 
 // SubscriptionNetworkManagerConnectionsClientListResponse contains the response from method SubscriptionNetworkManagerConnectionsClient.NewListPager.
 type SubscriptionNetworkManagerConnectionsClientListResponse struct {
+	// List of network manager connections.
 	ManagerConnectionListResult
 }
 
 // UsagesClientListResponse contains the response from method UsagesClient.NewListPager.
 type UsagesClientListResponse struct {
+	// The list usages operation response.
 	UsagesListResult
 }
 
 // VPNConnectionsClientCreateOrUpdateResponse contains the response from method VPNConnectionsClient.BeginCreateOrUpdate.
 type VPNConnectionsClientCreateOrUpdateResponse struct {
+	// VpnConnection Resource.
 	VPNConnection
 }
 
@@ -2263,11 +2656,14 @@ type VPNConnectionsClientDeleteResponse struct {
 
 // VPNConnectionsClientGetResponse contains the response from method VPNConnectionsClient.Get.
 type VPNConnectionsClientGetResponse struct {
+	// VpnConnection Resource.
 	VPNConnection
 }
 
 // VPNConnectionsClientListByVPNGatewayResponse contains the response from method VPNConnectionsClient.NewListByVPNGatewayPager.
 type VPNConnectionsClientListByVPNGatewayResponse struct {
+	// Result of the request to list all vpn connections to a virtual wan vpn gateway. It contains a list of Vpn Connections and
+	// a URL nextLink to get the next set of results.
 	ListVPNConnectionsResult
 }
 
@@ -2293,6 +2689,7 @@ func (v *VPNConnectionsClientStopPacketCaptureResponse) UnmarshalJSON(data []byt
 
 // VPNGatewaysClientCreateOrUpdateResponse contains the response from method VPNGatewaysClient.BeginCreateOrUpdate.
 type VPNGatewaysClientCreateOrUpdateResponse struct {
+	// VpnGateway Resource.
 	VPNGateway
 }
 
@@ -2303,21 +2700,27 @@ type VPNGatewaysClientDeleteResponse struct {
 
 // VPNGatewaysClientGetResponse contains the response from method VPNGatewaysClient.Get.
 type VPNGatewaysClientGetResponse struct {
+	// VpnGateway Resource.
 	VPNGateway
 }
 
 // VPNGatewaysClientListByResourceGroupResponse contains the response from method VPNGatewaysClient.NewListByResourceGroupPager.
 type VPNGatewaysClientListByResourceGroupResponse struct {
+	// Result of the request to list VpnGateways. It contains a list of VpnGateways and a URL nextLink to get the next set of
+	// results.
 	ListVPNGatewaysResult
 }
 
 // VPNGatewaysClientListResponse contains the response from method VPNGatewaysClient.NewListPager.
 type VPNGatewaysClientListResponse struct {
+	// Result of the request to list VpnGateways. It contains a list of VpnGateways and a URL nextLink to get the next set of
+	// results.
 	ListVPNGatewaysResult
 }
 
 // VPNGatewaysClientResetResponse contains the response from method VPNGatewaysClient.BeginReset.
 type VPNGatewaysClientResetResponse struct {
+	// VpnGateway Resource.
 	VPNGateway
 }
 
@@ -2343,6 +2746,7 @@ func (v *VPNGatewaysClientStopPacketCaptureResponse) UnmarshalJSON(data []byte)
 
 // VPNGatewaysClientUpdateTagsResponse contains the response from method VPNGatewaysClient.BeginUpdateTags.
 type VPNGatewaysClientUpdateTagsResponse struct {
+	// VpnGateway Resource.
 	VPNGateway
 }
 
@@ -2358,6 +2762,8 @@ func (v *VPNLinkConnectionsClientGetIkeSasResponse) UnmarshalJSON(data []byte) e
 
 // VPNLinkConnectionsClientListByVPNConnectionResponse contains the response from method VPNLinkConnectionsClient.NewListByVPNConnectionPager.
 type VPNLinkConnectionsClientListByVPNConnectionResponse struct {
+	// Result of the request to list all vpn connections to a virtual wan vpn gateway. It contains a list of Vpn Connections and
+	// a URL nextLink to get the next set of results.
 	ListVPNSiteLinkConnectionsResult
 }
 
@@ -2368,11 +2774,13 @@ type VPNLinkConnectionsClientResetConnectionResponse struct {
 
 // VPNServerConfigurationsAssociatedWithVirtualWanClientListResponse contains the response from method VPNServerConfigurationsAssociatedWithVirtualWanClient.BeginList.
 type VPNServerConfigurationsAssociatedWithVirtualWanClientListResponse struct {
+	// VpnServerConfigurations list associated with VirtualWan Response.
 	VPNServerConfigurationsResponse
 }
 
 // VPNServerConfigurationsClientCreateOrUpdateResponse contains the response from method VPNServerConfigurationsClient.BeginCreateOrUpdate.
 type VPNServerConfigurationsClientCreateOrUpdateResponse struct {
+	// VpnServerConfiguration Resource.
 	VPNServerConfiguration
 }
 
@@ -2383,41 +2791,52 @@ type VPNServerConfigurationsClientDeleteResponse struct {
 
 // VPNServerConfigurationsClientGetResponse contains the response from method VPNServerConfigurationsClient.Get.
 type VPNServerConfigurationsClientGetResponse struct {
+	// VpnServerConfiguration Resource.
 	VPNServerConfiguration
 }
 
 // VPNServerConfigurationsClientListByResourceGroupResponse contains the response from method VPNServerConfigurationsClient.NewListByResourceGroupPager.
 type VPNServerConfigurationsClientListByResourceGroupResponse struct {
+	// Result of the request to list all VpnServerConfigurations. It contains a list of VpnServerConfigurations and a URL nextLink
+	// to get the next set of results.
 	ListVPNServerConfigurationsResult
 }
 
 // VPNServerConfigurationsClientListResponse contains the response from method VPNServerConfigurationsClient.NewListPager.
 type VPNServerConfigurationsClientListResponse struct {
+	// Result of the request to list all VpnServerConfigurations. It contains a list of VpnServerConfigurations and a URL nextLink
+	// to get the next set of results.
 	ListVPNServerConfigurationsResult
 }
 
 // VPNServerConfigurationsClientUpdateTagsResponse contains the response from method VPNServerConfigurationsClient.UpdateTags.
 type VPNServerConfigurationsClientUpdateTagsResponse struct {
+	// VpnServerConfiguration Resource.
 	VPNServerConfiguration
 }
 
 // VPNSiteLinkConnectionsClientGetResponse contains the response from method VPNSiteLinkConnectionsClient.Get.
 type VPNSiteLinkConnectionsClientGetResponse struct {
+	// VpnSiteLinkConnection Resource.
 	VPNSiteLinkConnection
 }
 
 // VPNSiteLinksClientGetResponse contains the response from method VPNSiteLinksClient.Get.
 type VPNSiteLinksClientGetResponse struct {
+	// VpnSiteLink Resource.
 	VPNSiteLink
 }
 
 // VPNSiteLinksClientListByVPNSiteResponse contains the response from method VPNSiteLinksClient.NewListByVPNSitePager.
 type VPNSiteLinksClientListByVPNSiteResponse struct {
+	// Result of the request to list VpnSiteLinks. It contains a list of VpnSiteLinks and a URL nextLink to get the next set of
+	// results.
 	ListVPNSiteLinksResult
 }
 
 // VPNSitesClientCreateOrUpdateResponse contains the response from method VPNSitesClient.BeginCreateOrUpdate.
 type VPNSitesClientCreateOrUpdateResponse struct {
+	// VpnSite Resource.
 	VPNSite
 }
 
@@ -2428,21 +2847,25 @@ type VPNSitesClientDeleteResponse struct {
 
 // VPNSitesClientGetResponse contains the response from method VPNSitesClient.Get.
 type VPNSitesClientGetResponse struct {
+	// VpnSite Resource.
 	VPNSite
 }
 
 // VPNSitesClientListByResourceGroupResponse contains the response from method VPNSitesClient.NewListByResourceGroupPager.
 type VPNSitesClientListByResourceGroupResponse struct {
+	// Result of the request to list VpnSites. It contains a list of VpnSites and a URL nextLink to get the next set of results.
 	ListVPNSitesResult
 }
 
 // VPNSitesClientListResponse contains the response from method VPNSitesClient.NewListPager.
 type VPNSitesClientListResponse struct {
+	// Result of the request to list VpnSites. It contains a list of VpnSites and a URL nextLink to get the next set of results.
 	ListVPNSitesResult
 }
 
 // VPNSitesClientUpdateTagsResponse contains the response from method VPNSitesClient.UpdateTags.
 type VPNSitesClientUpdateTagsResponse struct {
+	// VpnSite Resource.
 	VPNSite
 }
 
@@ -2458,26 +2881,54 @@ type VipSwapClientCreateResponse struct {
 
 // VipSwapClientGetResponse contains the response from method VipSwapClient.Get.
 type VipSwapClientGetResponse struct {
+	// SwapResource to represent slot type on the specified cloud service.
 	SwapResource
 }
 
 // VipSwapClientListResponse contains the response from method VipSwapClient.List.
 type VipSwapClientListResponse struct {
+	// SwapResource List with single entry to represent slot type on the specified cloud service.
 	SwapResourceListResult
 }
 
+// VirtualApplianceConnectionsClientCreateOrUpdateResponse contains the response from method VirtualApplianceConnectionsClient.BeginCreateOrUpdate.
+type VirtualApplianceConnectionsClientCreateOrUpdateResponse struct {
+	// NetworkVirtualApplianceConnection resource.
+	VirtualApplianceConnection
+}
+
+// VirtualApplianceConnectionsClientDeleteResponse contains the response from method VirtualApplianceConnectionsClient.BeginDelete.
+type VirtualApplianceConnectionsClientDeleteResponse struct {
+	// placeholder for future response values
+}
+
+// VirtualApplianceConnectionsClientGetResponse contains the response from method VirtualApplianceConnectionsClient.Get.
+type VirtualApplianceConnectionsClientGetResponse struct {
+	// NetworkVirtualApplianceConnection resource.
+	VirtualApplianceConnection
+}
+
+// VirtualApplianceConnectionsClientListResponse contains the response from method VirtualApplianceConnectionsClient.NewListPager.
+type VirtualApplianceConnectionsClientListResponse struct {
+	// NetworkVirtualApplianceConnection list.
+	VirtualApplianceConnectionList
+}
+
 // VirtualApplianceSKUsClientGetResponse contains the response from method VirtualApplianceSKUsClient.Get.
 type VirtualApplianceSKUsClientGetResponse struct {
+	// Definition of the NetworkVirtualApplianceSkus resource.
 	VirtualApplianceSKU
 }
 
 // VirtualApplianceSKUsClientListResponse contains the response from method VirtualApplianceSKUsClient.NewListPager.
 type VirtualApplianceSKUsClientListResponse struct {
+	// Response for ListNetworkVirtualApplianceSkus API service call.
 	VirtualApplianceSKUListResult
 }
 
 // VirtualApplianceSitesClientCreateOrUpdateResponse contains the response from method VirtualApplianceSitesClient.BeginCreateOrUpdate.
 type VirtualApplianceSitesClientCreateOrUpdateResponse struct {
+	// Virtual Appliance Site resource.
 	VirtualApplianceSite
 }
 
@@ -2488,16 +2939,19 @@ type VirtualApplianceSitesClientDeleteResponse struct {
 
 // VirtualApplianceSitesClientGetResponse contains the response from method VirtualApplianceSitesClient.Get.
 type VirtualApplianceSitesClientGetResponse struct {
+	// Virtual Appliance Site resource.
 	VirtualApplianceSite
 }
 
 // VirtualApplianceSitesClientListResponse contains the response from method VirtualApplianceSitesClient.NewListPager.
 type VirtualApplianceSitesClientListResponse struct {
+	// Response for ListNetworkVirtualApplianceSites API service call.
 	VirtualApplianceSiteListResult
 }
 
 // VirtualAppliancesClientCreateOrUpdateResponse contains the response from method VirtualAppliancesClient.BeginCreateOrUpdate.
 type VirtualAppliancesClientCreateOrUpdateResponse struct {
+	// NetworkVirtualAppliance Resource.
 	VirtualAppliance
 }
 
@@ -2508,26 +2962,31 @@ type VirtualAppliancesClientDeleteResponse struct {
 
 // VirtualAppliancesClientGetResponse contains the response from method VirtualAppliancesClient.Get.
 type VirtualAppliancesClientGetResponse struct {
+	// NetworkVirtualAppliance Resource.
 	VirtualAppliance
 }
 
 // VirtualAppliancesClientListByResourceGroupResponse contains the response from method VirtualAppliancesClient.NewListByResourceGroupPager.
 type VirtualAppliancesClientListByResourceGroupResponse struct {
+	// Response for ListNetworkVirtualAppliances API service call.
 	VirtualApplianceListResult
 }
 
 // VirtualAppliancesClientListResponse contains the response from method VirtualAppliancesClient.NewListPager.
 type VirtualAppliancesClientListResponse struct {
+	// Response for ListNetworkVirtualAppliances API service call.
 	VirtualApplianceListResult
 }
 
 // VirtualAppliancesClientUpdateTagsResponse contains the response from method VirtualAppliancesClient.UpdateTags.
 type VirtualAppliancesClientUpdateTagsResponse struct {
+	// NetworkVirtualAppliance Resource.
 	VirtualAppliance
 }
 
 // VirtualHubBgpConnectionClientCreateOrUpdateResponse contains the response from method VirtualHubBgpConnectionClient.BeginCreateOrUpdate.
 type VirtualHubBgpConnectionClientCreateOrUpdateResponse struct {
+	// Virtual Appliance Site resource.
 	BgpConnection
 }
 
@@ -2538,26 +2997,41 @@ type VirtualHubBgpConnectionClientDeleteResponse struct {
 
 // VirtualHubBgpConnectionClientGetResponse contains the response from method VirtualHubBgpConnectionClient.Get.
 type VirtualHubBgpConnectionClientGetResponse struct {
+	// Virtual Appliance Site resource.
 	BgpConnection
 }
 
 // VirtualHubBgpConnectionsClientListAdvertisedRoutesResponse contains the response from method VirtualHubBgpConnectionsClient.BeginListAdvertisedRoutes.
 type VirtualHubBgpConnectionsClientListAdvertisedRoutesResponse struct {
-	PeerRouteList
+	// Map from virtual router instance to list of peer routes.
+	Value map[string][]*PeerRoute
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type VirtualHubBgpConnectionsClientListAdvertisedRoutesResponse.
+func (v *VirtualHubBgpConnectionsClientListAdvertisedRoutesResponse) UnmarshalJSON(data []byte) error {
+	return json.Unmarshal(data, &v.Value)
 }
 
 // VirtualHubBgpConnectionsClientListLearnedRoutesResponse contains the response from method VirtualHubBgpConnectionsClient.BeginListLearnedRoutes.
 type VirtualHubBgpConnectionsClientListLearnedRoutesResponse struct {
-	PeerRouteList
+	// Map from virtual router instance to list of peer routes.
+	Value map[string][]*PeerRoute
+}
+
+// UnmarshalJSON implements the json.Unmarshaller interface for type VirtualHubBgpConnectionsClientListLearnedRoutesResponse.
+func (v *VirtualHubBgpConnectionsClientListLearnedRoutesResponse) UnmarshalJSON(data []byte) error {
+	return json.Unmarshal(data, &v.Value)
 }
 
 // VirtualHubBgpConnectionsClientListResponse contains the response from method VirtualHubBgpConnectionsClient.NewListPager.
 type VirtualHubBgpConnectionsClientListResponse struct {
+	// VirtualHubBgpConnections list.
 	ListVirtualHubBgpConnectionResults
 }
 
 // VirtualHubIPConfigurationClientCreateOrUpdateResponse contains the response from method VirtualHubIPConfigurationClient.BeginCreateOrUpdate.
 type VirtualHubIPConfigurationClientCreateOrUpdateResponse struct {
+	// IpConfigurations.
 	HubIPConfiguration
 }
 
@@ -2568,16 +3042,19 @@ type VirtualHubIPConfigurationClientDeleteResponse struct {
 
 // VirtualHubIPConfigurationClientGetResponse contains the response from method VirtualHubIPConfigurationClient.Get.
 type VirtualHubIPConfigurationClientGetResponse struct {
+	// IpConfigurations.
 	HubIPConfiguration
 }
 
 // VirtualHubIPConfigurationClientListResponse contains the response from method VirtualHubIPConfigurationClient.NewListPager.
 type VirtualHubIPConfigurationClientListResponse struct {
+	// VirtualHubIpConfigurations list.
 	ListVirtualHubIPConfigurationResults
 }
 
 // VirtualHubRouteTableV2SClientCreateOrUpdateResponse contains the response from method VirtualHubRouteTableV2SClient.BeginCreateOrUpdate.
 type VirtualHubRouteTableV2SClientCreateOrUpdateResponse struct {
+	// VirtualHubRouteTableV2 Resource.
 	VirtualHubRouteTableV2
 }
 
@@ -2588,16 +3065,19 @@ type VirtualHubRouteTableV2SClientDeleteResponse struct {
 
 // VirtualHubRouteTableV2SClientGetResponse contains the response from method VirtualHubRouteTableV2SClient.Get.
 type VirtualHubRouteTableV2SClientGetResponse struct {
+	// VirtualHubRouteTableV2 Resource.
 	VirtualHubRouteTableV2
 }
 
 // VirtualHubRouteTableV2SClientListResponse contains the response from method VirtualHubRouteTableV2SClient.NewListPager.
 type VirtualHubRouteTableV2SClientListResponse struct {
+	// List of VirtualHubRouteTableV2s and a URL nextLink to get the next set of results.
 	ListVirtualHubRouteTableV2SResult
 }
 
 // VirtualHubsClientCreateOrUpdateResponse contains the response from method VirtualHubsClient.BeginCreateOrUpdate.
 type VirtualHubsClientCreateOrUpdateResponse struct {
+	// VirtualHub Resource.
 	VirtualHub
 }
 
@@ -2608,41 +3088,51 @@ type VirtualHubsClientDeleteResponse struct {
 
 // VirtualHubsClientGetEffectiveVirtualHubRoutesResponse contains the response from method VirtualHubsClient.BeginGetEffectiveVirtualHubRoutes.
 type VirtualHubsClientGetEffectiveVirtualHubRoutesResponse struct {
-	// placeholder for future response values
+	// EffectiveRoutes List.
+	VirtualHubEffectiveRouteList
 }
 
 // VirtualHubsClientGetInboundRoutesResponse contains the response from method VirtualHubsClient.BeginGetInboundRoutes.
 type VirtualHubsClientGetInboundRoutesResponse struct {
-	// placeholder for future response values
+	// EffectiveRouteMapRoute List.
+	EffectiveRouteMapRouteList
 }
 
 // VirtualHubsClientGetOutboundRoutesResponse contains the response from method VirtualHubsClient.BeginGetOutboundRoutes.
 type VirtualHubsClientGetOutboundRoutesResponse struct {
-	// placeholder for future response values
+	// EffectiveRouteMapRoute List.
+	EffectiveRouteMapRouteList
 }
 
 // VirtualHubsClientGetResponse contains the response from method VirtualHubsClient.Get.
 type VirtualHubsClientGetResponse struct {
+	// VirtualHub Resource.
 	VirtualHub
 }
 
 // VirtualHubsClientListByResourceGroupResponse contains the response from method VirtualHubsClient.NewListByResourceGroupPager.
 type VirtualHubsClientListByResourceGroupResponse struct {
+	// Result of the request to list VirtualHubs. It contains a list of VirtualHubs and a URL nextLink to get the next set of
+	// results.
 	ListVirtualHubsResult
 }
 
 // VirtualHubsClientListResponse contains the response from method VirtualHubsClient.NewListPager.
 type VirtualHubsClientListResponse struct {
+	// Result of the request to list VirtualHubs. It contains a list of VirtualHubs and a URL nextLink to get the next set of
+	// results.
 	ListVirtualHubsResult
 }
 
 // VirtualHubsClientUpdateTagsResponse contains the response from method VirtualHubsClient.UpdateTags.
 type VirtualHubsClientUpdateTagsResponse struct {
+	// VirtualHub Resource.
 	VirtualHub
 }
 
 // VirtualNetworkGatewayConnectionsClientCreateOrUpdateResponse contains the response from method VirtualNetworkGatewayConnectionsClient.BeginCreateOrUpdate.
 type VirtualNetworkGatewayConnectionsClientCreateOrUpdateResponse struct {
+	// A common class for general resource information.
 	VirtualNetworkGatewayConnection
 }
 
@@ -2663,16 +3153,19 @@ func (v *VirtualNetworkGatewayConnectionsClientGetIkeSasResponse) UnmarshalJSON(
 
 // VirtualNetworkGatewayConnectionsClientGetResponse contains the response from method VirtualNetworkGatewayConnectionsClient.Get.
 type VirtualNetworkGatewayConnectionsClientGetResponse struct {
+	// A common class for general resource information.
 	VirtualNetworkGatewayConnection
 }
 
 // VirtualNetworkGatewayConnectionsClientGetSharedKeyResponse contains the response from method VirtualNetworkGatewayConnectionsClient.GetSharedKey.
 type VirtualNetworkGatewayConnectionsClientGetSharedKeyResponse struct {
+	// Response for GetConnectionSharedKey API service call.
 	ConnectionSharedKey
 }
 
 // VirtualNetworkGatewayConnectionsClientListResponse contains the response from method VirtualNetworkGatewayConnectionsClient.NewListPager.
 type VirtualNetworkGatewayConnectionsClientListResponse struct {
+	// Response for the ListVirtualNetworkGatewayConnections API service call.
 	VirtualNetworkGatewayConnectionListResult
 }
 
@@ -2683,11 +3176,13 @@ type VirtualNetworkGatewayConnectionsClientResetConnectionResponse struct {
 
 // VirtualNetworkGatewayConnectionsClientResetSharedKeyResponse contains the response from method VirtualNetworkGatewayConnectionsClient.BeginResetSharedKey.
 type VirtualNetworkGatewayConnectionsClientResetSharedKeyResponse struct {
+	// The virtual network connection reset shared key.
 	ConnectionResetSharedKey
 }
 
 // VirtualNetworkGatewayConnectionsClientSetSharedKeyResponse contains the response from method VirtualNetworkGatewayConnectionsClient.BeginSetSharedKey.
 type VirtualNetworkGatewayConnectionsClientSetSharedKeyResponse struct {
+	// Response for GetConnectionSharedKey API service call.
 	ConnectionSharedKey
 }
 
@@ -2713,11 +3208,13 @@ func (v *VirtualNetworkGatewayConnectionsClientStopPacketCaptureResponse) Unmars
 
 // VirtualNetworkGatewayConnectionsClientUpdateTagsResponse contains the response from method VirtualNetworkGatewayConnectionsClient.BeginUpdateTags.
 type VirtualNetworkGatewayConnectionsClientUpdateTagsResponse struct {
+	// A common class for general resource information.
 	VirtualNetworkGatewayConnection
 }
 
 // VirtualNetworkGatewayNatRulesClientCreateOrUpdateResponse contains the response from method VirtualNetworkGatewayNatRulesClient.BeginCreateOrUpdate.
 type VirtualNetworkGatewayNatRulesClientCreateOrUpdateResponse struct {
+	// VirtualNetworkGatewayNatRule Resource.
 	VirtualNetworkGatewayNatRule
 }
 
@@ -2728,16 +3225,20 @@ type VirtualNetworkGatewayNatRulesClientDeleteResponse struct {
 
 // VirtualNetworkGatewayNatRulesClientGetResponse contains the response from method VirtualNetworkGatewayNatRulesClient.Get.
 type VirtualNetworkGatewayNatRulesClientGetResponse struct {
+	// VirtualNetworkGatewayNatRule Resource.
 	VirtualNetworkGatewayNatRule
 }
 
 // VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayResponse contains the response from method VirtualNetworkGatewayNatRulesClient.NewListByVirtualNetworkGatewayPager.
 type VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayResponse struct {
+	// Result of the request to list all nat rules to a virtual network gateway. It contains a list of Nat rules and a URL nextLink
+	// to get the next set of results.
 	ListVirtualNetworkGatewayNatRulesResult
 }
 
 // VirtualNetworkGatewaysClientCreateOrUpdateResponse contains the response from method VirtualNetworkGatewaysClient.BeginCreateOrUpdate.
 type VirtualNetworkGatewaysClientCreateOrUpdateResponse struct {
+	// A common class for general resource information.
 	VirtualNetworkGateway
 }
 
@@ -2773,21 +3274,25 @@ func (v *VirtualNetworkGatewaysClientGeneratevpnclientpackageResponse) Unmarshal
 
 // VirtualNetworkGatewaysClientGetAdvertisedRoutesResponse contains the response from method VirtualNetworkGatewaysClient.BeginGetAdvertisedRoutes.
 type VirtualNetworkGatewaysClientGetAdvertisedRoutesResponse struct {
+	// List of virtual network gateway routes.
 	GatewayRouteListResult
 }
 
 // VirtualNetworkGatewaysClientGetBgpPeerStatusResponse contains the response from method VirtualNetworkGatewaysClient.BeginGetBgpPeerStatus.
 type VirtualNetworkGatewaysClientGetBgpPeerStatusResponse struct {
+	// Response for list BGP peer status API service call.
 	BgpPeerStatusListResult
 }
 
 // VirtualNetworkGatewaysClientGetLearnedRoutesResponse contains the response from method VirtualNetworkGatewaysClient.BeginGetLearnedRoutes.
 type VirtualNetworkGatewaysClientGetLearnedRoutesResponse struct {
+	// List of virtual network gateway routes.
 	GatewayRouteListResult
 }
 
 // VirtualNetworkGatewaysClientGetResponse contains the response from method VirtualNetworkGatewaysClient.Get.
 type VirtualNetworkGatewaysClientGetResponse struct {
+	// A common class for general resource information.
 	VirtualNetworkGateway
 }
 
@@ -2803,26 +3308,31 @@ func (v *VirtualNetworkGatewaysClientGetVPNProfilePackageURLResponse) UnmarshalJ
 
 // VirtualNetworkGatewaysClientGetVpnclientConnectionHealthResponse contains the response from method VirtualNetworkGatewaysClient.BeginGetVpnclientConnectionHealth.
 type VirtualNetworkGatewaysClientGetVpnclientConnectionHealthResponse struct {
+	// List of virtual network gateway vpn client connection health.
 	VPNClientConnectionHealthDetailListResult
 }
 
 // VirtualNetworkGatewaysClientGetVpnclientIPSecParametersResponse contains the response from method VirtualNetworkGatewaysClient.BeginGetVpnclientIPSecParameters.
 type VirtualNetworkGatewaysClientGetVpnclientIPSecParametersResponse struct {
+	// An IPSec parameters for a virtual network gateway P2S connection.
 	VPNClientIPsecParameters
 }
 
 // VirtualNetworkGatewaysClientListConnectionsResponse contains the response from method VirtualNetworkGatewaysClient.NewListConnectionsPager.
 type VirtualNetworkGatewaysClientListConnectionsResponse struct {
+	// Response for the VirtualNetworkGatewayListConnections API service call.
 	VirtualNetworkGatewayListConnectionsResult
 }
 
 // VirtualNetworkGatewaysClientListResponse contains the response from method VirtualNetworkGatewaysClient.NewListPager.
 type VirtualNetworkGatewaysClientListResponse struct {
+	// Response for the ListVirtualNetworkGateways API service call.
 	VirtualNetworkGatewayListResult
 }
 
 // VirtualNetworkGatewaysClientResetResponse contains the response from method VirtualNetworkGatewaysClient.BeginReset.
 type VirtualNetworkGatewaysClientResetResponse struct {
+	// A common class for general resource information.
 	VirtualNetworkGateway
 }
 
@@ -2833,6 +3343,7 @@ type VirtualNetworkGatewaysClientResetVPNClientSharedKeyResponse struct {
 
 // VirtualNetworkGatewaysClientSetVpnclientIPSecParametersResponse contains the response from method VirtualNetworkGatewaysClient.BeginSetVpnclientIPSecParameters.
 type VirtualNetworkGatewaysClientSetVpnclientIPSecParametersResponse struct {
+	// An IPSec parameters for a virtual network gateway P2S connection.
 	VPNClientIPsecParameters
 }
 
@@ -2863,6 +3374,7 @@ type VirtualNetworkGatewaysClientSupportedVPNDevicesResponse struct {
 
 // VirtualNetworkGatewaysClientUpdateTagsResponse contains the response from method VirtualNetworkGatewaysClient.BeginUpdateTags.
 type VirtualNetworkGatewaysClientUpdateTagsResponse struct {
+	// A common class for general resource information.
 	VirtualNetworkGateway
 }
 
@@ -2873,6 +3385,7 @@ type VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptResponse struct {
 
 // VirtualNetworkPeeringsClientCreateOrUpdateResponse contains the response from method VirtualNetworkPeeringsClient.BeginCreateOrUpdate.
 type VirtualNetworkPeeringsClientCreateOrUpdateResponse struct {
+	// Peerings in a virtual network resource.
 	VirtualNetworkPeering
 }
 
@@ -2883,16 +3396,19 @@ type VirtualNetworkPeeringsClientDeleteResponse struct {
 
 // VirtualNetworkPeeringsClientGetResponse contains the response from method VirtualNetworkPeeringsClient.Get.
 type VirtualNetworkPeeringsClientGetResponse struct {
+	// Peerings in a virtual network resource.
 	VirtualNetworkPeering
 }
 
 // VirtualNetworkPeeringsClientListResponse contains the response from method VirtualNetworkPeeringsClient.NewListPager.
 type VirtualNetworkPeeringsClientListResponse struct {
+	// Response for ListSubnets API service call. Retrieves all subnets that belong to a virtual network.
 	VirtualNetworkPeeringListResult
 }
 
 // VirtualNetworkTapsClientCreateOrUpdateResponse contains the response from method VirtualNetworkTapsClient.BeginCreateOrUpdate.
 type VirtualNetworkTapsClientCreateOrUpdateResponse struct {
+	// Virtual Network Tap resource.
 	VirtualNetworkTap
 }
 
@@ -2903,31 +3419,37 @@ type VirtualNetworkTapsClientDeleteResponse struct {
 
 // VirtualNetworkTapsClientGetResponse contains the response from method VirtualNetworkTapsClient.Get.
 type VirtualNetworkTapsClientGetResponse struct {
+	// Virtual Network Tap resource.
 	VirtualNetworkTap
 }
 
 // VirtualNetworkTapsClientListAllResponse contains the response from method VirtualNetworkTapsClient.NewListAllPager.
 type VirtualNetworkTapsClientListAllResponse struct {
+	// Response for ListVirtualNetworkTap API service call.
 	VirtualNetworkTapListResult
 }
 
 // VirtualNetworkTapsClientListByResourceGroupResponse contains the response from method VirtualNetworkTapsClient.NewListByResourceGroupPager.
 type VirtualNetworkTapsClientListByResourceGroupResponse struct {
+	// Response for ListVirtualNetworkTap API service call.
 	VirtualNetworkTapListResult
 }
 
 // VirtualNetworkTapsClientUpdateTagsResponse contains the response from method VirtualNetworkTapsClient.UpdateTags.
 type VirtualNetworkTapsClientUpdateTagsResponse struct {
+	// Virtual Network Tap resource.
 	VirtualNetworkTap
 }
 
 // VirtualNetworksClientCheckIPAddressAvailabilityResponse contains the response from method VirtualNetworksClient.CheckIPAddressAvailability.
 type VirtualNetworksClientCheckIPAddressAvailabilityResponse struct {
+	// Response for CheckIPAddressAvailability API service call.
 	IPAddressAvailabilityResult
 }
 
 // VirtualNetworksClientCreateOrUpdateResponse contains the response from method VirtualNetworksClient.BeginCreateOrUpdate.
 type VirtualNetworksClientCreateOrUpdateResponse struct {
+	// Virtual Network resource.
 	VirtualNetwork
 }
 
@@ -2938,36 +3460,43 @@ type VirtualNetworksClientDeleteResponse struct {
 
 // VirtualNetworksClientGetResponse contains the response from method VirtualNetworksClient.Get.
 type VirtualNetworksClientGetResponse struct {
+	// Virtual Network resource.
 	VirtualNetwork
 }
 
 // VirtualNetworksClientListAllResponse contains the response from method VirtualNetworksClient.NewListAllPager.
 type VirtualNetworksClientListAllResponse struct {
+	// Response for the ListVirtualNetworks API service call.
 	VirtualNetworkListResult
 }
 
 // VirtualNetworksClientListDdosProtectionStatusResponse contains the response from method VirtualNetworksClient.BeginListDdosProtectionStatus.
 type VirtualNetworksClientListDdosProtectionStatusResponse struct {
+	// Response for GetVirtualNetworkDdosProtectionStatusOperation.
 	VirtualNetworkDdosProtectionStatusResult
 }
 
 // VirtualNetworksClientListResponse contains the response from method VirtualNetworksClient.NewListPager.
 type VirtualNetworksClientListResponse struct {
+	// Response for the ListVirtualNetworks API service call.
 	VirtualNetworkListResult
 }
 
 // VirtualNetworksClientListUsageResponse contains the response from method VirtualNetworksClient.NewListUsagePager.
 type VirtualNetworksClientListUsageResponse struct {
+	// Response for the virtual networks GetUsage API service call.
 	VirtualNetworkListUsageResult
 }
 
 // VirtualNetworksClientUpdateTagsResponse contains the response from method VirtualNetworksClient.UpdateTags.
 type VirtualNetworksClientUpdateTagsResponse struct {
+	// Virtual Network resource.
 	VirtualNetwork
 }
 
 // VirtualRouterPeeringsClientCreateOrUpdateResponse contains the response from method VirtualRouterPeeringsClient.BeginCreateOrUpdate.
 type VirtualRouterPeeringsClientCreateOrUpdateResponse struct {
+	// Virtual Router Peering resource.
 	VirtualRouterPeering
 }
 
@@ -2978,16 +3507,19 @@ type VirtualRouterPeeringsClientDeleteResponse struct {
 
 // VirtualRouterPeeringsClientGetResponse contains the response from method VirtualRouterPeeringsClient.Get.
 type VirtualRouterPeeringsClientGetResponse struct {
+	// Virtual Router Peering resource.
 	VirtualRouterPeering
 }
 
 // VirtualRouterPeeringsClientListResponse contains the response from method VirtualRouterPeeringsClient.NewListPager.
 type VirtualRouterPeeringsClientListResponse struct {
+	// Response for ListVirtualRouterPeerings API service call.
 	VirtualRouterPeeringListResult
 }
 
 // VirtualRoutersClientCreateOrUpdateResponse contains the response from method VirtualRoutersClient.BeginCreateOrUpdate.
 type VirtualRoutersClientCreateOrUpdateResponse struct {
+	// VirtualRouter Resource.
 	VirtualRouter
 }
 
@@ -2998,21 +3530,25 @@ type VirtualRoutersClientDeleteResponse struct {
 
 // VirtualRoutersClientGetResponse contains the response from method VirtualRoutersClient.Get.
 type VirtualRoutersClientGetResponse struct {
+	// VirtualRouter Resource.
 	VirtualRouter
 }
 
 // VirtualRoutersClientListByResourceGroupResponse contains the response from method VirtualRoutersClient.NewListByResourceGroupPager.
 type VirtualRoutersClientListByResourceGroupResponse struct {
+	// Response for ListVirtualRouters API service call.
 	VirtualRouterListResult
 }
 
 // VirtualRoutersClientListResponse contains the response from method VirtualRoutersClient.NewListPager.
 type VirtualRoutersClientListResponse struct {
+	// Response for ListVirtualRouters API service call.
 	VirtualRouterListResult
 }
 
 // VirtualWansClientCreateOrUpdateResponse contains the response from method VirtualWansClient.BeginCreateOrUpdate.
 type VirtualWansClientCreateOrUpdateResponse struct {
+	// VirtualWAN Resource.
 	VirtualWAN
 }
 
@@ -3023,31 +3559,39 @@ type VirtualWansClientDeleteResponse struct {
 
 // VirtualWansClientGetResponse contains the response from method VirtualWansClient.Get.
 type VirtualWansClientGetResponse struct {
+	// VirtualWAN Resource.
 	VirtualWAN
 }
 
 // VirtualWansClientListByResourceGroupResponse contains the response from method VirtualWansClient.NewListByResourceGroupPager.
 type VirtualWansClientListByResourceGroupResponse struct {
+	// Result of the request to list VirtualWANs. It contains a list of VirtualWANs and a URL nextLink to get the next set of
+	// results.
 	ListVirtualWANsResult
 }
 
 // VirtualWansClientListResponse contains the response from method VirtualWansClient.NewListPager.
 type VirtualWansClientListResponse struct {
+	// Result of the request to list VirtualWANs. It contains a list of VirtualWANs and a URL nextLink to get the next set of
+	// results.
 	ListVirtualWANsResult
 }
 
 // VirtualWansClientUpdateTagsResponse contains the response from method VirtualWansClient.UpdateTags.
 type VirtualWansClientUpdateTagsResponse struct {
+	// VirtualWAN Resource.
 	VirtualWAN
 }
 
 // WatchersClientCheckConnectivityResponse contains the response from method WatchersClient.BeginCheckConnectivity.
 type WatchersClientCheckConnectivityResponse struct {
+	// Information on the connectivity status.
 	ConnectivityInformation
 }
 
 // WatchersClientCreateOrUpdateResponse contains the response from method WatchersClient.CreateOrUpdate.
 type WatchersClientCreateOrUpdateResponse struct {
+	// Network watcher in a resource group.
 	Watcher
 }
 
@@ -3058,81 +3602,97 @@ type WatchersClientDeleteResponse struct {
 
 // WatchersClientGetAzureReachabilityReportResponse contains the response from method WatchersClient.BeginGetAzureReachabilityReport.
 type WatchersClientGetAzureReachabilityReportResponse struct {
+	// Azure reachability report details.
 	AzureReachabilityReport
 }
 
 // WatchersClientGetFlowLogStatusResponse contains the response from method WatchersClient.BeginGetFlowLogStatus.
 type WatchersClientGetFlowLogStatusResponse struct {
+	// Information on the configuration of flow log and traffic analytics (optional) .
 	FlowLogInformation
 }
 
 // WatchersClientGetNetworkConfigurationDiagnosticResponse contains the response from method WatchersClient.BeginGetNetworkConfigurationDiagnostic.
 type WatchersClientGetNetworkConfigurationDiagnosticResponse struct {
+	// Results of network configuration diagnostic on the target resource.
 	ConfigurationDiagnosticResponse
 }
 
 // WatchersClientGetNextHopResponse contains the response from method WatchersClient.BeginGetNextHop.
 type WatchersClientGetNextHopResponse struct {
+	// The information about next hop from the specified VM.
 	NextHopResult
 }
 
 // WatchersClientGetResponse contains the response from method WatchersClient.Get.
 type WatchersClientGetResponse struct {
+	// Network watcher in a resource group.
 	Watcher
 }
 
 // WatchersClientGetTopologyResponse contains the response from method WatchersClient.GetTopology.
 type WatchersClientGetTopologyResponse struct {
+	// Topology of the specified resource group.
 	Topology
 }
 
 // WatchersClientGetTroubleshootingResponse contains the response from method WatchersClient.BeginGetTroubleshooting.
 type WatchersClientGetTroubleshootingResponse struct {
+	// Troubleshooting information gained from specified resource.
 	TroubleshootingResult
 }
 
 // WatchersClientGetTroubleshootingResultResponse contains the response from method WatchersClient.BeginGetTroubleshootingResult.
 type WatchersClientGetTroubleshootingResultResponse struct {
+	// Troubleshooting information gained from specified resource.
 	TroubleshootingResult
 }
 
 // WatchersClientGetVMSecurityRulesResponse contains the response from method WatchersClient.BeginGetVMSecurityRules.
 type WatchersClientGetVMSecurityRulesResponse struct {
+	// The information about security rules applied to the specified VM.
 	SecurityGroupViewResult
 }
 
 // WatchersClientListAllResponse contains the response from method WatchersClient.NewListAllPager.
 type WatchersClientListAllResponse struct {
+	// Response for ListNetworkWatchers API service call.
 	WatcherListResult
 }
 
 // WatchersClientListAvailableProvidersResponse contains the response from method WatchersClient.BeginListAvailableProviders.
 type WatchersClientListAvailableProvidersResponse struct {
+	// List of available countries with details.
 	AvailableProvidersList
 }
 
 // WatchersClientListResponse contains the response from method WatchersClient.NewListPager.
 type WatchersClientListResponse struct {
+	// Response for ListNetworkWatchers API service call.
 	WatcherListResult
 }
 
 // WatchersClientSetFlowLogConfigurationResponse contains the response from method WatchersClient.BeginSetFlowLogConfiguration.
 type WatchersClientSetFlowLogConfigurationResponse struct {
+	// Information on the configuration of flow log and traffic analytics (optional) .
 	FlowLogInformation
 }
 
 // WatchersClientUpdateTagsResponse contains the response from method WatchersClient.UpdateTags.
 type WatchersClientUpdateTagsResponse struct {
+	// Network watcher in a resource group.
 	Watcher
 }
 
 // WatchersClientVerifyIPFlowResponse contains the response from method WatchersClient.BeginVerifyIPFlow.
 type WatchersClientVerifyIPFlowResponse struct {
+	// Results of IP flow verification on the target resource.
 	VerificationIPFlowResult
 }
 
 // WebApplicationFirewallPoliciesClientCreateOrUpdateResponse contains the response from method WebApplicationFirewallPoliciesClient.CreateOrUpdate.
 type WebApplicationFirewallPoliciesClientCreateOrUpdateResponse struct {
+	// Defines web application firewall policy.
 	WebApplicationFirewallPolicy
 }
 
@@ -3143,25 +3703,32 @@ type WebApplicationFirewallPoliciesClientDeleteResponse struct {
 
 // WebApplicationFirewallPoliciesClientGetResponse contains the response from method WebApplicationFirewallPoliciesClient.Get.
 type WebApplicationFirewallPoliciesClientGetResponse struct {
+	// Defines web application firewall policy.
 	WebApplicationFirewallPolicy
 }
 
 // WebApplicationFirewallPoliciesClientListAllResponse contains the response from method WebApplicationFirewallPoliciesClient.NewListAllPager.
 type WebApplicationFirewallPoliciesClientListAllResponse struct {
+	// Result of the request to list WebApplicationFirewallPolicies. It contains a list of WebApplicationFirewallPolicy objects
+	// and a URL link to get the next set of results.
 	WebApplicationFirewallPolicyListResult
 }
 
 // WebApplicationFirewallPoliciesClientListResponse contains the response from method WebApplicationFirewallPoliciesClient.NewListPager.
 type WebApplicationFirewallPoliciesClientListResponse struct {
+	// Result of the request to list WebApplicationFirewallPolicies. It contains a list of WebApplicationFirewallPolicy objects
+	// and a URL link to get the next set of results.
 	WebApplicationFirewallPolicyListResult
 }
 
 // WebCategoriesClientGetResponse contains the response from method WebCategoriesClient.Get.
 type WebCategoriesClientGetResponse struct {
+	// Azure Web Category Resource.
 	AzureWebCategory
 }
 
 // WebCategoriesClientListBySubscriptionResponse contains the response from method WebCategoriesClient.NewListBySubscriptionPager.
 type WebCategoriesClientListBySubscriptionResponse struct {
+	// Response for ListAzureWebCategories API service call.
 	AzureWebCategoryListResult
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routefilterrules_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routefilterrules_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routefilterrules_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routefilterrules_client.go
index ce4766c471b..641b9f56606 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routefilterrules_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routefilterrules_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type RouteFilterRulesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewRouteFilterRulesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*RouteFilterRulesClient, error) {
-	cl, err := arm.NewClient(moduleName+".RouteFilterRulesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewRouteFilterRulesClient(subscriptionID string, credential azcore.TokenCre
 // BeginCreateOrUpdate - Creates or updates a route in the specified route filter.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeFilterName - The name of the route filter.
 //   - ruleName - The name of the route filter rule.
@@ -61,31 +60,41 @@ func (client *RouteFilterRulesClient) BeginCreateOrUpdate(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteFilterRulesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteFilterRulesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RouteFilterRulesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RouteFilterRulesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a route in the specified route filter.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RouteFilterRulesClient) createOrUpdate(ctx context.Context, resourceGroupName string, routeFilterName string, ruleName string, routeFilterRuleParameters RouteFilterRule, options *RouteFilterRulesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RouteFilterRulesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, routeFilterName, ruleName, routeFilterRuleParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *RouteFilterRulesClient) createOrUpdateCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, routeFilterRuleParameters)
+	if err := runtime.MarshalAsJSON(req, routeFilterRuleParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified rule from a route filter.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeFilterName - The name of the route filter.
 //   - ruleName - The name of the rule.
@@ -133,31 +145,41 @@ func (client *RouteFilterRulesClient) BeginDelete(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteFilterRulesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteFilterRulesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RouteFilterRulesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RouteFilterRulesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified rule from a route filter.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RouteFilterRulesClient) deleteOperation(ctx context.Context, resourceGroupName string, routeFilterName string, ruleName string, options *RouteFilterRulesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RouteFilterRulesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, routeFilterName, ruleName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *RouteFilterRulesClient) deleteCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,24 +215,31 @@ func (client *RouteFilterRulesClient) deleteCreateRequest(ctx context.Context, r
 // Get - Gets the specified rule from a route filter.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeFilterName - The name of the route filter.
 //   - ruleName - The name of the rule.
 //   - options - RouteFilterRulesClientGetOptions contains the optional parameters for the RouteFilterRulesClient.Get method.
 func (client *RouteFilterRulesClient) Get(ctx context.Context, resourceGroupName string, routeFilterName string, ruleName string, options *RouteFilterRulesClientGetOptions) (RouteFilterRulesClientGetResponse, error) {
+	var err error
+	const operationName = "RouteFilterRulesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, routeFilterName, ruleName, options)
 	if err != nil {
 		return RouteFilterRulesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RouteFilterRulesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return RouteFilterRulesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return RouteFilterRulesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -237,7 +266,7 @@ func (client *RouteFilterRulesClient) getCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -254,7 +283,7 @@ func (client *RouteFilterRulesClient) getHandleResponse(resp *http.Response) (Ro
 
 // NewListByRouteFilterPager - Gets all RouteFilterRules in a route filter.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeFilterName - The name of the route filter.
 //   - options - RouteFilterRulesClientListByRouteFilterOptions contains the optional parameters for the RouteFilterRulesClient.NewListByRouteFilterPager
@@ -265,25 +294,20 @@ func (client *RouteFilterRulesClient) NewListByRouteFilterPager(resourceGroupNam
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *RouteFilterRulesClientListByRouteFilterResponse) (RouteFilterRulesClientListByRouteFilterResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByRouteFilterCreateRequest(ctx, resourceGroupName, routeFilterName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return RouteFilterRulesClientListByRouteFilterResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "RouteFilterRulesClient.NewListByRouteFilterPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByRouteFilterCreateRequest(ctx, resourceGroupName, routeFilterName, options)
+			}, nil)
 			if err != nil {
 				return RouteFilterRulesClientListByRouteFilterResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return RouteFilterRulesClientListByRouteFilterResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByRouteFilterHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -307,7 +331,7 @@ func (client *RouteFilterRulesClient) listByRouteFilterCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routefilters_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routefilters_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routefilters_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routefilters_client.go
index ec5a849ad41..58b6b7c2938 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routefilters_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routefilters_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type RouteFiltersClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewRouteFiltersClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*RouteFiltersClient, error) {
-	cl, err := arm.NewClient(moduleName+".RouteFiltersClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewRouteFiltersClient(subscriptionID string, credential azcore.TokenCredent
 // BeginCreateOrUpdate - Creates or updates a route filter in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeFilterName - The name of the route filter.
 //   - routeFilterParameters - Parameters supplied to the create or update route filter operation.
@@ -60,31 +59,41 @@ func (client *RouteFiltersClient) BeginCreateOrUpdate(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteFiltersClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteFiltersClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RouteFiltersClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RouteFiltersClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a route filter in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RouteFiltersClient) createOrUpdate(ctx context.Context, resourceGroupName string, routeFilterName string, routeFilterParameters RouteFilter, options *RouteFiltersClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RouteFiltersClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, routeFilterName, routeFilterParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *RouteFiltersClient) createOrUpdateCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, routeFilterParameters)
+	if err := runtime.MarshalAsJSON(req, routeFilterParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified route filter.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeFilterName - The name of the route filter.
 //   - options - RouteFiltersClientBeginDeleteOptions contains the optional parameters for the RouteFiltersClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *RouteFiltersClient) BeginDelete(ctx context.Context, resourceGroup
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteFiltersClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteFiltersClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RouteFiltersClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RouteFiltersClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified route filter.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RouteFiltersClient) deleteOperation(ctx context.Context, resourceGroupName string, routeFilterName string, options *RouteFiltersClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RouteFiltersClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, routeFilterName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *RouteFiltersClient) deleteCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *RouteFiltersClient) deleteCreateRequest(ctx context.Context, resou
 // Get - Gets the specified route filter.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeFilterName - The name of the route filter.
 //   - options - RouteFiltersClientGetOptions contains the optional parameters for the RouteFiltersClient.Get method.
 func (client *RouteFiltersClient) Get(ctx context.Context, resourceGroupName string, routeFilterName string, options *RouteFiltersClientGetOptions) (RouteFiltersClientGetResponse, error) {
+	var err error
+	const operationName = "RouteFiltersClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, routeFilterName, options)
 	if err != nil {
 		return RouteFiltersClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RouteFiltersClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return RouteFiltersClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return RouteFiltersClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *RouteFiltersClient) getCreateRequest(ctx context.Context, resource
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -242,7 +271,7 @@ func (client *RouteFiltersClient) getHandleResponse(resp *http.Response) (RouteF
 
 // NewListPager - Gets all route filters in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - RouteFiltersClientListOptions contains the optional parameters for the RouteFiltersClient.NewListPager method.
 func (client *RouteFiltersClient) NewListPager(options *RouteFiltersClientListOptions) *runtime.Pager[RouteFiltersClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[RouteFiltersClientListResponse]{
@@ -250,25 +279,20 @@ func (client *RouteFiltersClient) NewListPager(options *RouteFiltersClientListOp
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *RouteFiltersClientListResponse) (RouteFiltersClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return RouteFiltersClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "RouteFiltersClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return RouteFiltersClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return RouteFiltersClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -284,7 +308,7 @@ func (client *RouteFiltersClient) listCreateRequest(ctx context.Context, options
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -301,7 +325,7 @@ func (client *RouteFiltersClient) listHandleResponse(resp *http.Response) (Route
 
 // NewListByResourceGroupPager - Gets all route filters in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - RouteFiltersClientListByResourceGroupOptions contains the optional parameters for the RouteFiltersClient.NewListByResourceGroupPager
 //     method.
@@ -311,25 +335,20 @@ func (client *RouteFiltersClient) NewListByResourceGroupPager(resourceGroupName
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *RouteFiltersClientListByResourceGroupResponse) (RouteFiltersClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return RouteFiltersClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "RouteFiltersClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return RouteFiltersClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return RouteFiltersClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -349,7 +368,7 @@ func (client *RouteFiltersClient) listByResourceGroupCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -367,24 +386,31 @@ func (client *RouteFiltersClient) listByResourceGroupHandleResponse(resp *http.R
 // UpdateTags - Updates tags of a route filter.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeFilterName - The name of the route filter.
 //   - parameters - Parameters supplied to update route filter tags.
 //   - options - RouteFiltersClientUpdateTagsOptions contains the optional parameters for the RouteFiltersClient.UpdateTags method.
 func (client *RouteFiltersClient) UpdateTags(ctx context.Context, resourceGroupName string, routeFilterName string, parameters TagsObject, options *RouteFiltersClientUpdateTagsOptions) (RouteFiltersClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "RouteFiltersClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, routeFilterName, parameters, options)
 	if err != nil {
 		return RouteFiltersClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RouteFiltersClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return RouteFiltersClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return RouteFiltersClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -407,10 +433,13 @@ func (client *RouteFiltersClient) updateTagsCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routemaps_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routemaps_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routemaps_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routemaps_client.go
index f1e5070c575..9ccc8abcd10 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routemaps_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routemaps_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type RouteMapsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewRouteMapsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*RouteMapsClient, error) {
-	cl, err := arm.NewClient(moduleName+".RouteMapsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewRouteMapsClient(subscriptionID string, credential azcore.TokenCredential
 // BeginCreateOrUpdate - Creates a RouteMap if it doesn't exist else updates the existing one.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the RouteMap's resource group.
 //   - virtualHubName - The name of the VirtualHub containing the RouteMap.
 //   - routeMapName - The name of the RouteMap.
@@ -61,31 +60,41 @@ func (client *RouteMapsClient) BeginCreateOrUpdate(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteMapsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteMapsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RouteMapsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RouteMapsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a RouteMap if it doesn't exist else updates the existing one.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RouteMapsClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualHubName string, routeMapName string, routeMapParameters RouteMap, options *RouteMapsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RouteMapsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualHubName, routeMapName, routeMapParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *RouteMapsClient) createOrUpdateCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, routeMapParameters)
+	if err := runtime.MarshalAsJSON(req, routeMapParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a RouteMap.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the RouteMap's resource group.
 //   - virtualHubName - The name of the VirtualHub containing the RouteMap.
 //   - routeMapName - The name of the RouteMap.
@@ -132,31 +144,41 @@ func (client *RouteMapsClient) BeginDelete(ctx context.Context, resourceGroupNam
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteMapsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteMapsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RouteMapsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RouteMapsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a RouteMap.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RouteMapsClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualHubName string, routeMapName string, options *RouteMapsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RouteMapsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualHubName, routeMapName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -183,7 +205,7 @@ func (client *RouteMapsClient) deleteCreateRequest(ctx context.Context, resource
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -192,24 +214,31 @@ func (client *RouteMapsClient) deleteCreateRequest(ctx context.Context, resource
 // Get - Retrieves the details of a RouteMap.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the RouteMap's resource group.
 //   - virtualHubName - The name of the VirtualHub containing the RouteMap.
 //   - routeMapName - The name of the RouteMap.
 //   - options - RouteMapsClientGetOptions contains the optional parameters for the RouteMapsClient.Get method.
 func (client *RouteMapsClient) Get(ctx context.Context, resourceGroupName string, virtualHubName string, routeMapName string, options *RouteMapsClientGetOptions) (RouteMapsClientGetResponse, error) {
+	var err error
+	const operationName = "RouteMapsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualHubName, routeMapName, options)
 	if err != nil {
 		return RouteMapsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RouteMapsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return RouteMapsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return RouteMapsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -236,7 +265,7 @@ func (client *RouteMapsClient) getCreateRequest(ctx context.Context, resourceGro
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -253,7 +282,7 @@ func (client *RouteMapsClient) getHandleResponse(resp *http.Response) (RouteMaps
 
 // NewListPager - Retrieves the details of all RouteMaps.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the RouteMap's resource group'.
 //   - virtualHubName - The name of the VirtualHub containing the RouteMap.
 //   - options - RouteMapsClientListOptions contains the optional parameters for the RouteMapsClient.NewListPager method.
@@ -263,25 +292,20 @@ func (client *RouteMapsClient) NewListPager(resourceGroupName string, virtualHub
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *RouteMapsClientListResponse) (RouteMapsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return RouteMapsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "RouteMapsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
+			}, nil)
 			if err != nil {
 				return RouteMapsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return RouteMapsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -305,7 +329,7 @@ func (client *RouteMapsClient) listCreateRequest(ctx context.Context, resourceGr
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routes_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routes_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routes_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routes_client.go
index ccf2da24531..1574341d501 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routes_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routes_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type RoutesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewRoutesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*RoutesClient, error) {
-	cl, err := arm.NewClient(moduleName+".RoutesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewRoutesClient(subscriptionID string, credential azcore.TokenCredential, o
 // BeginCreateOrUpdate - Creates or updates a route in the specified route table.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeTableName - The name of the route table.
 //   - routeName - The name of the route.
@@ -61,31 +60,41 @@ func (client *RoutesClient) BeginCreateOrUpdate(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RoutesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RoutesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RoutesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RoutesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a route in the specified route table.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RoutesClient) createOrUpdate(ctx context.Context, resourceGroupName string, routeTableName string, routeName string, routeParameters Route, options *RoutesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RoutesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, routeTableName, routeName, routeParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *RoutesClient) createOrUpdateCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, routeParameters)
+	if err := runtime.MarshalAsJSON(req, routeParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified route from a route table.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeTableName - The name of the route table.
 //   - routeName - The name of the route.
@@ -132,31 +144,41 @@ func (client *RoutesClient) BeginDelete(ctx context.Context, resourceGroupName s
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RoutesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RoutesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RoutesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RoutesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified route from a route table.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RoutesClient) deleteOperation(ctx context.Context, resourceGroupName string, routeTableName string, routeName string, options *RoutesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RoutesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, routeTableName, routeName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -183,7 +205,7 @@ func (client *RoutesClient) deleteCreateRequest(ctx context.Context, resourceGro
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -192,24 +214,31 @@ func (client *RoutesClient) deleteCreateRequest(ctx context.Context, resourceGro
 // Get - Gets the specified route from a route table.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeTableName - The name of the route table.
 //   - routeName - The name of the route.
 //   - options - RoutesClientGetOptions contains the optional parameters for the RoutesClient.Get method.
 func (client *RoutesClient) Get(ctx context.Context, resourceGroupName string, routeTableName string, routeName string, options *RoutesClientGetOptions) (RoutesClientGetResponse, error) {
+	var err error
+	const operationName = "RoutesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, routeTableName, routeName, options)
 	if err != nil {
 		return RoutesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RoutesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return RoutesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return RoutesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -236,7 +265,7 @@ func (client *RoutesClient) getCreateRequest(ctx context.Context, resourceGroupN
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -253,7 +282,7 @@ func (client *RoutesClient) getHandleResponse(resp *http.Response) (RoutesClient
 
 // NewListPager - Gets all routes in a route table.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeTableName - The name of the route table.
 //   - options - RoutesClientListOptions contains the optional parameters for the RoutesClient.NewListPager method.
@@ -263,25 +292,20 @@ func (client *RoutesClient) NewListPager(resourceGroupName string, routeTableNam
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *RoutesClientListResponse) (RoutesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, routeTableName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return RoutesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "RoutesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, routeTableName, options)
+			}, nil)
 			if err != nil {
 				return RoutesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return RoutesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -305,7 +329,7 @@ func (client *RoutesClient) listCreateRequest(ctx context.Context, resourceGroup
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routetables_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routetables_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routetables_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routetables_client.go
index 868842bce93..c3da8845076 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routetables_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routetables_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type RouteTablesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewRouteTablesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*RouteTablesClient, error) {
-	cl, err := arm.NewClient(moduleName+".RouteTablesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewRouteTablesClient(subscriptionID string, credential azcore.TokenCredenti
 // BeginCreateOrUpdate - Create or updates a route table in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeTableName - The name of the route table.
 //   - parameters - Parameters supplied to the create or update route table operation.
@@ -60,31 +59,41 @@ func (client *RouteTablesClient) BeginCreateOrUpdate(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteTablesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteTablesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RouteTablesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RouteTablesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Create or updates a route table in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RouteTablesClient) createOrUpdate(ctx context.Context, resourceGroupName string, routeTableName string, parameters RouteTable, options *RouteTablesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RouteTablesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, routeTableName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *RouteTablesClient) createOrUpdateCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified route table.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeTableName - The name of the route table.
 //   - options - RouteTablesClientBeginDeleteOptions contains the optional parameters for the RouteTablesClient.BeginDelete method.
@@ -126,31 +138,41 @@ func (client *RouteTablesClient) BeginDelete(ctx context.Context, resourceGroupN
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteTablesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RouteTablesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RouteTablesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RouteTablesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified route table.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RouteTablesClient) deleteOperation(ctx context.Context, resourceGroupName string, routeTableName string, options *RouteTablesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RouteTablesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, routeTableName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -173,7 +195,7 @@ func (client *RouteTablesClient) deleteCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -182,23 +204,30 @@ func (client *RouteTablesClient) deleteCreateRequest(ctx context.Context, resour
 // Get - Gets the specified route table.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeTableName - The name of the route table.
 //   - options - RouteTablesClientGetOptions contains the optional parameters for the RouteTablesClient.Get method.
 func (client *RouteTablesClient) Get(ctx context.Context, resourceGroupName string, routeTableName string, options *RouteTablesClientGetOptions) (RouteTablesClientGetResponse, error) {
+	var err error
+	const operationName = "RouteTablesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, routeTableName, options)
 	if err != nil {
 		return RouteTablesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RouteTablesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return RouteTablesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return RouteTablesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -221,7 +250,7 @@ func (client *RouteTablesClient) getCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -241,7 +270,7 @@ func (client *RouteTablesClient) getHandleResponse(resp *http.Response) (RouteTa
 
 // NewListPager - Gets all route tables in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - RouteTablesClientListOptions contains the optional parameters for the RouteTablesClient.NewListPager method.
 func (client *RouteTablesClient) NewListPager(resourceGroupName string, options *RouteTablesClientListOptions) *runtime.Pager[RouteTablesClientListResponse] {
@@ -250,25 +279,20 @@ func (client *RouteTablesClient) NewListPager(resourceGroupName string, options
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *RouteTablesClientListResponse) (RouteTablesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return RouteTablesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "RouteTablesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return RouteTablesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return RouteTablesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -288,7 +312,7 @@ func (client *RouteTablesClient) listCreateRequest(ctx context.Context, resource
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -305,7 +329,7 @@ func (client *RouteTablesClient) listHandleResponse(resp *http.Response) (RouteT
 
 // NewListAllPager - Gets all route tables in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - RouteTablesClientListAllOptions contains the optional parameters for the RouteTablesClient.NewListAllPager method.
 func (client *RouteTablesClient) NewListAllPager(options *RouteTablesClientListAllOptions) *runtime.Pager[RouteTablesClientListAllResponse] {
 	return runtime.NewPager(runtime.PagingHandler[RouteTablesClientListAllResponse]{
@@ -313,25 +337,20 @@ func (client *RouteTablesClient) NewListAllPager(options *RouteTablesClientListA
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *RouteTablesClientListAllResponse) (RouteTablesClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return RouteTablesClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "RouteTablesClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return RouteTablesClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return RouteTablesClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -347,7 +366,7 @@ func (client *RouteTablesClient) listAllCreateRequest(ctx context.Context, optio
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -365,24 +384,31 @@ func (client *RouteTablesClient) listAllHandleResponse(resp *http.Response) (Rou
 // UpdateTags - Updates a route table tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - routeTableName - The name of the route table.
 //   - parameters - Parameters supplied to update route table tags.
 //   - options - RouteTablesClientUpdateTagsOptions contains the optional parameters for the RouteTablesClient.UpdateTags method.
 func (client *RouteTablesClient) UpdateTags(ctx context.Context, resourceGroupName string, routeTableName string, parameters TagsObject, options *RouteTablesClientUpdateTagsOptions) (RouteTablesClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "RouteTablesClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, routeTableName, parameters, options)
 	if err != nil {
 		return RouteTablesClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RouteTablesClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return RouteTablesClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return RouteTablesClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -405,10 +431,13 @@ func (client *RouteTablesClient) updateTagsCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routingintent_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routingintent_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routingintent_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routingintent_client.go
index a0df5b25eeb..14c690fe728 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/routingintent_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/routingintent_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type RoutingIntentClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewRoutingIntentClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*RoutingIntentClient, error) {
-	cl, err := arm.NewClient(moduleName+".RoutingIntentClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewRoutingIntentClient(subscriptionID string, credential azcore.TokenCreden
 // BeginCreateOrUpdate - Creates a RoutingIntent resource if it doesn't exist else updates the existing RoutingIntent.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the RoutingIntent.
 //   - virtualHubName - The name of the VirtualHub.
 //   - routingIntentName - The name of the per VirtualHub singleton Routing Intent resource.
@@ -61,31 +60,41 @@ func (client *RoutingIntentClient) BeginCreateOrUpdate(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RoutingIntentClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RoutingIntentClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RoutingIntentClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RoutingIntentClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a RoutingIntent resource if it doesn't exist else updates the existing RoutingIntent.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RoutingIntentClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualHubName string, routingIntentName string, routingIntentParameters RoutingIntent, options *RoutingIntentClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RoutingIntentClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualHubName, routingIntentName, routingIntentParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *RoutingIntentClient) createOrUpdateCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, routingIntentParameters)
+	if err := runtime.MarshalAsJSON(req, routingIntentParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a RoutingIntent.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the RoutingIntent.
 //   - virtualHubName - The name of the VirtualHub.
 //   - routingIntentName - The name of the RoutingIntent.
@@ -133,31 +145,41 @@ func (client *RoutingIntentClient) BeginDelete(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RoutingIntentClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[RoutingIntentClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[RoutingIntentClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[RoutingIntentClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a RoutingIntent.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *RoutingIntentClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualHubName string, routingIntentName string, options *RoutingIntentClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "RoutingIntentClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualHubName, routingIntentName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *RoutingIntentClient) deleteCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,24 +215,31 @@ func (client *RoutingIntentClient) deleteCreateRequest(ctx context.Context, reso
 // Get - Retrieves the details of a RoutingIntent.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the RoutingIntent.
 //   - virtualHubName - The name of the VirtualHub.
 //   - routingIntentName - The name of the RoutingIntent.
 //   - options - RoutingIntentClientGetOptions contains the optional parameters for the RoutingIntentClient.Get method.
 func (client *RoutingIntentClient) Get(ctx context.Context, resourceGroupName string, virtualHubName string, routingIntentName string, options *RoutingIntentClientGetOptions) (RoutingIntentClientGetResponse, error) {
+	var err error
+	const operationName = "RoutingIntentClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualHubName, routingIntentName, options)
 	if err != nil {
 		return RoutingIntentClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return RoutingIntentClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return RoutingIntentClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return RoutingIntentClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -237,7 +266,7 @@ func (client *RoutingIntentClient) getCreateRequest(ctx context.Context, resourc
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -254,7 +283,7 @@ func (client *RoutingIntentClient) getHandleResponse(resp *http.Response) (Routi
 
 // NewListPager - Retrieves the details of all RoutingIntent child resources of the VirtualHub.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - options - RoutingIntentClientListOptions contains the optional parameters for the RoutingIntentClient.NewListPager method.
@@ -264,25 +293,20 @@ func (client *RoutingIntentClient) NewListPager(resourceGroupName string, virtua
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *RoutingIntentClientListResponse) (RoutingIntentClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return RoutingIntentClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "RoutingIntentClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
+			}, nil)
 			if err != nil {
 				return RoutingIntentClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return RoutingIntentClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -306,7 +330,7 @@ func (client *RoutingIntentClient) listCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/scopeconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/scopeconnections_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/scopeconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/scopeconnections_client.go
index 0ca8ac71140..eed7c65ccb1 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/scopeconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/scopeconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type ScopeConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewScopeConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ScopeConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ScopeConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewScopeConnectionsClient(subscriptionID string, credential azcore.TokenCre
 // CreateOrUpdate - Creates or updates scope connection from Network Manager
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - scopeConnectionName - Name for the cross-tenant connection.
@@ -57,18 +56,25 @@ func NewScopeConnectionsClient(subscriptionID string, credential azcore.TokenCre
 //   - options - ScopeConnectionsClientCreateOrUpdateOptions contains the optional parameters for the ScopeConnectionsClient.CreateOrUpdate
 //     method.
 func (client *ScopeConnectionsClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, networkManagerName string, scopeConnectionName string, parameters ScopeConnection, options *ScopeConnectionsClientCreateOrUpdateOptions) (ScopeConnectionsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "ScopeConnectionsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkManagerName, scopeConnectionName, parameters, options)
 	if err != nil {
 		return ScopeConnectionsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ScopeConnectionsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return ScopeConnectionsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return ScopeConnectionsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -95,10 +101,13 @@ func (client *ScopeConnectionsClient) createOrUpdateCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -113,22 +122,28 @@ func (client *ScopeConnectionsClient) createOrUpdateHandleResponse(resp *http.Re
 // Delete - Delete the pending scope connection created by this network manager.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - scopeConnectionName - Name for the cross-tenant connection.
 //   - options - ScopeConnectionsClientDeleteOptions contains the optional parameters for the ScopeConnectionsClient.Delete method.
 func (client *ScopeConnectionsClient) Delete(ctx context.Context, resourceGroupName string, networkManagerName string, scopeConnectionName string, options *ScopeConnectionsClientDeleteOptions) (ScopeConnectionsClientDeleteResponse, error) {
+	var err error
+	const operationName = "ScopeConnectionsClient.Delete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkManagerName, scopeConnectionName, options)
 	if err != nil {
 		return ScopeConnectionsClientDeleteResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ScopeConnectionsClientDeleteResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusNoContent) {
-		return ScopeConnectionsClientDeleteResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return ScopeConnectionsClientDeleteResponse{}, err
 	}
 	return ScopeConnectionsClientDeleteResponse{}, nil
 }
@@ -157,7 +172,7 @@ func (client *ScopeConnectionsClient) deleteCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -166,24 +181,31 @@ func (client *ScopeConnectionsClient) deleteCreateRequest(ctx context.Context, r
 // Get - Get specified scope connection created by this Network Manager.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - scopeConnectionName - Name for the cross-tenant connection.
 //   - options - ScopeConnectionsClientGetOptions contains the optional parameters for the ScopeConnectionsClient.Get method.
 func (client *ScopeConnectionsClient) Get(ctx context.Context, resourceGroupName string, networkManagerName string, scopeConnectionName string, options *ScopeConnectionsClientGetOptions) (ScopeConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "ScopeConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkManagerName, scopeConnectionName, options)
 	if err != nil {
 		return ScopeConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ScopeConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ScopeConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ScopeConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -210,7 +232,7 @@ func (client *ScopeConnectionsClient) getCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -227,7 +249,7 @@ func (client *ScopeConnectionsClient) getHandleResponse(resp *http.Response) (Sc
 
 // NewListPager - List all scope connections created by this network manager.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - options - ScopeConnectionsClientListOptions contains the optional parameters for the ScopeConnectionsClient.NewListPager
@@ -238,25 +260,20 @@ func (client *ScopeConnectionsClient) NewListPager(resourceGroupName string, net
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ScopeConnectionsClientListResponse) (ScopeConnectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkManagerName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ScopeConnectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkManagerName, options)
+			}, nil)
 			if err != nil {
 				return ScopeConnectionsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ScopeConnectionsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ScopeConnectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -280,7 +297,7 @@ func (client *ScopeConnectionsClient) listCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securityadminconfigurations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securityadminconfigurations_client.go
similarity index 82%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securityadminconfigurations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securityadminconfigurations_client.go
index 25ecc06d689..65a68523672 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securityadminconfigurations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securityadminconfigurations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type SecurityAdminConfigurationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewSecurityAdminConfigurationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*SecurityAdminConfigurationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".SecurityAdminConfigurationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewSecurityAdminConfigurationsClient(subscriptionID string, credential azco
 // CreateOrUpdate - Creates or updates a network manager security admin configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager Security Configuration.
@@ -57,18 +56,25 @@ func NewSecurityAdminConfigurationsClient(subscriptionID string, credential azco
 //   - options - SecurityAdminConfigurationsClientCreateOrUpdateOptions contains the optional parameters for the SecurityAdminConfigurationsClient.CreateOrUpdate
 //     method.
 func (client *SecurityAdminConfigurationsClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, securityAdminConfiguration SecurityAdminConfiguration, options *SecurityAdminConfigurationsClientCreateOrUpdateOptions) (SecurityAdminConfigurationsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "SecurityAdminConfigurationsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, securityAdminConfiguration, options)
 	if err != nil {
 		return SecurityAdminConfigurationsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SecurityAdminConfigurationsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return SecurityAdminConfigurationsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return SecurityAdminConfigurationsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -95,10 +101,13 @@ func (client *SecurityAdminConfigurationsClient) createOrUpdateCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, securityAdminConfiguration)
+	if err := runtime.MarshalAsJSON(req, securityAdminConfiguration); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -113,7 +122,7 @@ func (client *SecurityAdminConfigurationsClient) createOrUpdateHandleResponse(re
 // BeginDelete - Deletes a network manager security admin configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager Security Configuration.
@@ -125,31 +134,41 @@ func (client *SecurityAdminConfigurationsClient) BeginDelete(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityAdminConfigurationsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityAdminConfigurationsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SecurityAdminConfigurationsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SecurityAdminConfigurationsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a network manager security admin configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *SecurityAdminConfigurationsClient) deleteOperation(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, options *SecurityAdminConfigurationsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SecurityAdminConfigurationsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -176,7 +195,7 @@ func (client *SecurityAdminConfigurationsClient) deleteCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Force != nil {
 		reqQP.Set("force", strconv.FormatBool(*options.Force))
 	}
@@ -188,25 +207,32 @@ func (client *SecurityAdminConfigurationsClient) deleteCreateRequest(ctx context
 // Get - Retrieves a network manager security admin configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - configurationName - The name of the network manager Security Configuration.
 //   - options - SecurityAdminConfigurationsClientGetOptions contains the optional parameters for the SecurityAdminConfigurationsClient.Get
 //     method.
 func (client *SecurityAdminConfigurationsClient) Get(ctx context.Context, resourceGroupName string, networkManagerName string, configurationName string, options *SecurityAdminConfigurationsClientGetOptions) (SecurityAdminConfigurationsClientGetResponse, error) {
+	var err error
+	const operationName = "SecurityAdminConfigurationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkManagerName, configurationName, options)
 	if err != nil {
 		return SecurityAdminConfigurationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SecurityAdminConfigurationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SecurityAdminConfigurationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SecurityAdminConfigurationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -233,7 +259,7 @@ func (client *SecurityAdminConfigurationsClient) getCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -250,7 +276,7 @@ func (client *SecurityAdminConfigurationsClient) getHandleResponse(resp *http.Re
 
 // NewListPager - Lists all the network manager security admin configurations in a network manager, in a paginated format.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - options - SecurityAdminConfigurationsClientListOptions contains the optional parameters for the SecurityAdminConfigurationsClient.NewListPager
@@ -261,25 +287,20 @@ func (client *SecurityAdminConfigurationsClient) NewListPager(resourceGroupName
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SecurityAdminConfigurationsClientListResponse) (SecurityAdminConfigurationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkManagerName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SecurityAdminConfigurationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkManagerName, options)
+			}, nil)
 			if err != nil {
 				return SecurityAdminConfigurationsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return SecurityAdminConfigurationsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SecurityAdminConfigurationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -303,7 +324,7 @@ func (client *SecurityAdminConfigurationsClient) listCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securitygroups_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securitygroups_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securitygroups_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securitygroups_client.go
index ad9a9305e25..4465ab50774 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securitygroups_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securitygroups_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type SecurityGroupsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewSecurityGroupsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*SecurityGroupsClient, error) {
-	cl, err := arm.NewClient(moduleName+".SecurityGroupsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewSecurityGroupsClient(subscriptionID string, credential azcore.TokenCrede
 // BeginCreateOrUpdate - Creates or updates a network security group in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkSecurityGroupName - The name of the network security group.
 //   - parameters - Parameters supplied to the create or update network security group operation.
@@ -60,31 +59,41 @@ func (client *SecurityGroupsClient) BeginCreateOrUpdate(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityGroupsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityGroupsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SecurityGroupsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SecurityGroupsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a network security group in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *SecurityGroupsClient) createOrUpdate(ctx context.Context, resourceGroupName string, networkSecurityGroupName string, parameters SecurityGroup, options *SecurityGroupsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SecurityGroupsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *SecurityGroupsClient) createOrUpdateCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified network security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkSecurityGroupName - The name of the network security group.
 //   - options - SecurityGroupsClientBeginDeleteOptions contains the optional parameters for the SecurityGroupsClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *SecurityGroupsClient) BeginDelete(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityGroupsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityGroupsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SecurityGroupsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SecurityGroupsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified network security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *SecurityGroupsClient) deleteOperation(ctx context.Context, resourceGroupName string, networkSecurityGroupName string, options *SecurityGroupsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SecurityGroupsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *SecurityGroupsClient) deleteCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *SecurityGroupsClient) deleteCreateRequest(ctx context.Context, res
 // Get - Gets the specified network security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkSecurityGroupName - The name of the network security group.
 //   - options - SecurityGroupsClientGetOptions contains the optional parameters for the SecurityGroupsClient.Get method.
 func (client *SecurityGroupsClient) Get(ctx context.Context, resourceGroupName string, networkSecurityGroupName string, options *SecurityGroupsClientGetOptions) (SecurityGroupsClientGetResponse, error) {
+	var err error
+	const operationName = "SecurityGroupsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, options)
 	if err != nil {
 		return SecurityGroupsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SecurityGroupsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SecurityGroupsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SecurityGroupsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *SecurityGroupsClient) getCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -242,7 +271,7 @@ func (client *SecurityGroupsClient) getHandleResponse(resp *http.Response) (Secu
 
 // NewListPager - Gets all network security groups in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - SecurityGroupsClientListOptions contains the optional parameters for the SecurityGroupsClient.NewListPager method.
 func (client *SecurityGroupsClient) NewListPager(resourceGroupName string, options *SecurityGroupsClientListOptions) *runtime.Pager[SecurityGroupsClientListResponse] {
@@ -251,25 +280,20 @@ func (client *SecurityGroupsClient) NewListPager(resourceGroupName string, optio
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SecurityGroupsClientListResponse) (SecurityGroupsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return SecurityGroupsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SecurityGroupsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return SecurityGroupsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SecurityGroupsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -289,7 +313,7 @@ func (client *SecurityGroupsClient) listCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -306,7 +330,7 @@ func (client *SecurityGroupsClient) listHandleResponse(resp *http.Response) (Sec
 
 // NewListAllPager - Gets all network security groups in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - SecurityGroupsClientListAllOptions contains the optional parameters for the SecurityGroupsClient.NewListAllPager
 //     method.
 func (client *SecurityGroupsClient) NewListAllPager(options *SecurityGroupsClientListAllOptions) *runtime.Pager[SecurityGroupsClientListAllResponse] {
@@ -315,25 +339,20 @@ func (client *SecurityGroupsClient) NewListAllPager(options *SecurityGroupsClien
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SecurityGroupsClientListAllResponse) (SecurityGroupsClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return SecurityGroupsClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SecurityGroupsClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return SecurityGroupsClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SecurityGroupsClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -349,7 +368,7 @@ func (client *SecurityGroupsClient) listAllCreateRequest(ctx context.Context, op
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -367,25 +386,32 @@ func (client *SecurityGroupsClient) listAllHandleResponse(resp *http.Response) (
 // UpdateTags - Updates a network security group tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkSecurityGroupName - The name of the network security group.
 //   - parameters - Parameters supplied to update network security group tags.
 //   - options - SecurityGroupsClientUpdateTagsOptions contains the optional parameters for the SecurityGroupsClient.UpdateTags
 //     method.
 func (client *SecurityGroupsClient) UpdateTags(ctx context.Context, resourceGroupName string, networkSecurityGroupName string, parameters TagsObject, options *SecurityGroupsClientUpdateTagsOptions) (SecurityGroupsClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "SecurityGroupsClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, parameters, options)
 	if err != nil {
 		return SecurityGroupsClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SecurityGroupsClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SecurityGroupsClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SecurityGroupsClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -408,10 +434,13 @@ func (client *SecurityGroupsClient) updateTagsCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securitypartnerproviders_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securitypartnerproviders_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securitypartnerproviders_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securitypartnerproviders_client.go
index 01b4c0b6e52..08f18ad2011 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securitypartnerproviders_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securitypartnerproviders_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type SecurityPartnerProvidersClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewSecurityPartnerProvidersClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*SecurityPartnerProvidersClient, error) {
-	cl, err := arm.NewClient(moduleName+".SecurityPartnerProvidersClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewSecurityPartnerProvidersClient(subscriptionID string, credential azcore.
 // BeginCreateOrUpdate - Creates or updates the specified Security Partner Provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - securityPartnerProviderName - The name of the Security Partner Provider.
 //   - parameters - Parameters supplied to the create or update Security Partner Provider operation.
@@ -60,31 +59,41 @@ func (client *SecurityPartnerProvidersClient) BeginCreateOrUpdate(ctx context.Co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityPartnerProvidersClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityPartnerProvidersClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SecurityPartnerProvidersClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SecurityPartnerProvidersClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified Security Partner Provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *SecurityPartnerProvidersClient) createOrUpdate(ctx context.Context, resourceGroupName string, securityPartnerProviderName string, parameters SecurityPartnerProvider, options *SecurityPartnerProvidersClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SecurityPartnerProvidersClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, securityPartnerProviderName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *SecurityPartnerProvidersClient) createOrUpdateCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified Security Partner Provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - securityPartnerProviderName - The name of the Security Partner Provider.
 //   - options - SecurityPartnerProvidersClientBeginDeleteOptions contains the optional parameters for the SecurityPartnerProvidersClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *SecurityPartnerProvidersClient) BeginDelete(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityPartnerProvidersClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityPartnerProvidersClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SecurityPartnerProvidersClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SecurityPartnerProvidersClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified Security Partner Provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *SecurityPartnerProvidersClient) deleteOperation(ctx context.Context, resourceGroupName string, securityPartnerProviderName string, options *SecurityPartnerProvidersClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SecurityPartnerProvidersClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, securityPartnerProviderName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *SecurityPartnerProvidersClient) deleteCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,24 +205,31 @@ func (client *SecurityPartnerProvidersClient) deleteCreateRequest(ctx context.Co
 // Get - Gets the specified Security Partner Provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - securityPartnerProviderName - The name of the Security Partner Provider.
 //   - options - SecurityPartnerProvidersClientGetOptions contains the optional parameters for the SecurityPartnerProvidersClient.Get
 //     method.
 func (client *SecurityPartnerProvidersClient) Get(ctx context.Context, resourceGroupName string, securityPartnerProviderName string, options *SecurityPartnerProvidersClientGetOptions) (SecurityPartnerProvidersClientGetResponse, error) {
+	var err error
+	const operationName = "SecurityPartnerProvidersClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, securityPartnerProviderName, options)
 	if err != nil {
 		return SecurityPartnerProvidersClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SecurityPartnerProvidersClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SecurityPartnerProvidersClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SecurityPartnerProvidersClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -223,7 +252,7 @@ func (client *SecurityPartnerProvidersClient) getCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -240,7 +269,7 @@ func (client *SecurityPartnerProvidersClient) getHandleResponse(resp *http.Respo
 
 // NewListPager - Gets all the Security Partner Providers in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - SecurityPartnerProvidersClientListOptions contains the optional parameters for the SecurityPartnerProvidersClient.NewListPager
 //     method.
 func (client *SecurityPartnerProvidersClient) NewListPager(options *SecurityPartnerProvidersClientListOptions) *runtime.Pager[SecurityPartnerProvidersClientListResponse] {
@@ -249,25 +278,20 @@ func (client *SecurityPartnerProvidersClient) NewListPager(options *SecurityPart
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SecurityPartnerProvidersClientListResponse) (SecurityPartnerProvidersClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return SecurityPartnerProvidersClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SecurityPartnerProvidersClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return SecurityPartnerProvidersClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SecurityPartnerProvidersClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -283,7 +307,7 @@ func (client *SecurityPartnerProvidersClient) listCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -300,7 +324,7 @@ func (client *SecurityPartnerProvidersClient) listHandleResponse(resp *http.Resp
 
 // NewListByResourceGroupPager - Lists all Security Partner Providers in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - SecurityPartnerProvidersClientListByResourceGroupOptions contains the optional parameters for the SecurityPartnerProvidersClient.NewListByResourceGroupPager
 //     method.
@@ -310,25 +334,20 @@ func (client *SecurityPartnerProvidersClient) NewListByResourceGroupPager(resour
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SecurityPartnerProvidersClientListByResourceGroupResponse) (SecurityPartnerProvidersClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return SecurityPartnerProvidersClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SecurityPartnerProvidersClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return SecurityPartnerProvidersClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SecurityPartnerProvidersClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -348,7 +367,7 @@ func (client *SecurityPartnerProvidersClient) listByResourceGroupCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -366,25 +385,32 @@ func (client *SecurityPartnerProvidersClient) listByResourceGroupHandleResponse(
 // UpdateTags - Updates tags of a Security Partner Provider resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - securityPartnerProviderName - The name of the Security Partner Provider.
 //   - parameters - Parameters supplied to update Security Partner Provider tags.
 //   - options - SecurityPartnerProvidersClientUpdateTagsOptions contains the optional parameters for the SecurityPartnerProvidersClient.UpdateTags
 //     method.
 func (client *SecurityPartnerProvidersClient) UpdateTags(ctx context.Context, resourceGroupName string, securityPartnerProviderName string, parameters TagsObject, options *SecurityPartnerProvidersClientUpdateTagsOptions) (SecurityPartnerProvidersClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "SecurityPartnerProvidersClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, securityPartnerProviderName, parameters, options)
 	if err != nil {
 		return SecurityPartnerProvidersClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SecurityPartnerProvidersClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SecurityPartnerProvidersClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SecurityPartnerProvidersClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -407,10 +433,13 @@ func (client *SecurityPartnerProvidersClient) updateTagsCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securityrules_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securityrules_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securityrules_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securityrules_client.go
index 0b868d2cbe6..bf51f10ba25 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/securityrules_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/securityrules_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type SecurityRulesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewSecurityRulesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*SecurityRulesClient, error) {
-	cl, err := arm.NewClient(moduleName+".SecurityRulesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewSecurityRulesClient(subscriptionID string, credential azcore.TokenCreden
 // BeginCreateOrUpdate - Creates or updates a security rule in the specified network security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkSecurityGroupName - The name of the network security group.
 //   - securityRuleName - The name of the security rule.
@@ -61,31 +60,41 @@ func (client *SecurityRulesClient) BeginCreateOrUpdate(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityRulesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityRulesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SecurityRulesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SecurityRulesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a security rule in the specified network security group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *SecurityRulesClient) createOrUpdate(ctx context.Context, resourceGroupName string, networkSecurityGroupName string, securityRuleName string, securityRuleParameters SecurityRule, options *SecurityRulesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SecurityRulesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, securityRuleName, securityRuleParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *SecurityRulesClient) createOrUpdateCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, securityRuleParameters)
+	if err := runtime.MarshalAsJSON(req, securityRuleParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified network security rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkSecurityGroupName - The name of the network security group.
 //   - securityRuleName - The name of the security rule.
@@ -133,31 +145,41 @@ func (client *SecurityRulesClient) BeginDelete(ctx context.Context, resourceGrou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityRulesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SecurityRulesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SecurityRulesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SecurityRulesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified network security rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *SecurityRulesClient) deleteOperation(ctx context.Context, resourceGroupName string, networkSecurityGroupName string, securityRuleName string, options *SecurityRulesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SecurityRulesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, securityRuleName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *SecurityRulesClient) deleteCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,24 +215,31 @@ func (client *SecurityRulesClient) deleteCreateRequest(ctx context.Context, reso
 // Get - Get the specified network security rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkSecurityGroupName - The name of the network security group.
 //   - securityRuleName - The name of the security rule.
 //   - options - SecurityRulesClientGetOptions contains the optional parameters for the SecurityRulesClient.Get method.
 func (client *SecurityRulesClient) Get(ctx context.Context, resourceGroupName string, networkSecurityGroupName string, securityRuleName string, options *SecurityRulesClientGetOptions) (SecurityRulesClientGetResponse, error) {
+	var err error
+	const operationName = "SecurityRulesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, securityRuleName, options)
 	if err != nil {
 		return SecurityRulesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SecurityRulesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SecurityRulesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SecurityRulesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -237,7 +266,7 @@ func (client *SecurityRulesClient) getCreateRequest(ctx context.Context, resourc
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -254,7 +283,7 @@ func (client *SecurityRulesClient) getHandleResponse(resp *http.Response) (Secur
 
 // NewListPager - Gets all security rules in a network security group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkSecurityGroupName - The name of the network security group.
 //   - options - SecurityRulesClientListOptions contains the optional parameters for the SecurityRulesClient.NewListPager method.
@@ -264,25 +293,20 @@ func (client *SecurityRulesClient) NewListPager(resourceGroupName string, networ
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SecurityRulesClientListResponse) (SecurityRulesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return SecurityRulesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SecurityRulesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkSecurityGroupName, options)
+			}, nil)
 			if err != nil {
 				return SecurityRulesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SecurityRulesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -306,7 +330,7 @@ func (client *SecurityRulesClient) listCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/serviceassociationlinks_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/serviceassociationlinks_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/serviceassociationlinks_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/serviceassociationlinks_client.go
index 212fe807c2d..da40a3502aa 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/serviceassociationlinks_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/serviceassociationlinks_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ServiceAssociationLinksClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewServiceAssociationLinksClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ServiceAssociationLinksClient, error) {
-	cl, err := arm.NewClient(moduleName+".ServiceAssociationLinksClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewServiceAssociationLinksClient(subscriptionID string, credential azcore.T
 // List - Gets a list of service association links for a subnet.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - subnetName - The name of the subnet.
 //   - options - ServiceAssociationLinksClientListOptions contains the optional parameters for the ServiceAssociationLinksClient.List
 //     method.
 func (client *ServiceAssociationLinksClient) List(ctx context.Context, resourceGroupName string, virtualNetworkName string, subnetName string, options *ServiceAssociationLinksClientListOptions) (ServiceAssociationLinksClientListResponse, error) {
+	var err error
+	const operationName = "ServiceAssociationLinksClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, resourceGroupName, virtualNetworkName, subnetName, options)
 	if err != nil {
 		return ServiceAssociationLinksClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ServiceAssociationLinksClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ServiceAssociationLinksClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ServiceAssociationLinksClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -93,7 +99,7 @@ func (client *ServiceAssociationLinksClient) listCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/serviceendpointpolicies_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/serviceendpointpolicies_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/serviceendpointpolicies_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/serviceendpointpolicies_client.go
index fa3fdf6398c..8609cd22ad9 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/serviceendpointpolicies_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/serviceendpointpolicies_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ServiceEndpointPoliciesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewServiceEndpointPoliciesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ServiceEndpointPoliciesClient, error) {
-	cl, err := arm.NewClient(moduleName+".ServiceEndpointPoliciesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewServiceEndpointPoliciesClient(subscriptionID string, credential azcore.T
 // BeginCreateOrUpdate - Creates or updates a service Endpoint Policies.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceEndpointPolicyName - The name of the service endpoint policy.
 //   - parameters - Parameters supplied to the create or update service endpoint policy operation.
@@ -60,31 +59,41 @@ func (client *ServiceEndpointPoliciesClient) BeginCreateOrUpdate(ctx context.Con
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ServiceEndpointPoliciesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ServiceEndpointPoliciesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ServiceEndpointPoliciesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ServiceEndpointPoliciesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a service Endpoint Policies.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ServiceEndpointPoliciesClient) createOrUpdate(ctx context.Context, resourceGroupName string, serviceEndpointPolicyName string, parameters ServiceEndpointPolicy, options *ServiceEndpointPoliciesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ServiceEndpointPoliciesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, serviceEndpointPolicyName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *ServiceEndpointPoliciesClient) createOrUpdateCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified service endpoint policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceEndpointPolicyName - The name of the service endpoint policy.
 //   - options - ServiceEndpointPoliciesClientBeginDeleteOptions contains the optional parameters for the ServiceEndpointPoliciesClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *ServiceEndpointPoliciesClient) BeginDelete(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ServiceEndpointPoliciesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ServiceEndpointPoliciesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ServiceEndpointPoliciesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ServiceEndpointPoliciesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified service endpoint policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ServiceEndpointPoliciesClient) deleteOperation(ctx context.Context, resourceGroupName string, serviceEndpointPolicyName string, options *ServiceEndpointPoliciesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ServiceEndpointPoliciesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, serviceEndpointPolicyName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *ServiceEndpointPoliciesClient) deleteCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,24 +205,31 @@ func (client *ServiceEndpointPoliciesClient) deleteCreateRequest(ctx context.Con
 // Get - Gets the specified service Endpoint Policies in a specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceEndpointPolicyName - The name of the service endpoint policy.
 //   - options - ServiceEndpointPoliciesClientGetOptions contains the optional parameters for the ServiceEndpointPoliciesClient.Get
 //     method.
 func (client *ServiceEndpointPoliciesClient) Get(ctx context.Context, resourceGroupName string, serviceEndpointPolicyName string, options *ServiceEndpointPoliciesClientGetOptions) (ServiceEndpointPoliciesClientGetResponse, error) {
+	var err error
+	const operationName = "ServiceEndpointPoliciesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, serviceEndpointPolicyName, options)
 	if err != nil {
 		return ServiceEndpointPoliciesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ServiceEndpointPoliciesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ServiceEndpointPoliciesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ServiceEndpointPoliciesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -223,7 +252,7 @@ func (client *ServiceEndpointPoliciesClient) getCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -243,7 +272,7 @@ func (client *ServiceEndpointPoliciesClient) getHandleResponse(resp *http.Respon
 
 // NewListPager - Gets all the service endpoint policies in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - ServiceEndpointPoliciesClientListOptions contains the optional parameters for the ServiceEndpointPoliciesClient.NewListPager
 //     method.
 func (client *ServiceEndpointPoliciesClient) NewListPager(options *ServiceEndpointPoliciesClientListOptions) *runtime.Pager[ServiceEndpointPoliciesClientListResponse] {
@@ -252,25 +281,20 @@ func (client *ServiceEndpointPoliciesClient) NewListPager(options *ServiceEndpoi
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ServiceEndpointPoliciesClientListResponse) (ServiceEndpointPoliciesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ServiceEndpointPoliciesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ServiceEndpointPoliciesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return ServiceEndpointPoliciesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ServiceEndpointPoliciesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -286,7 +310,7 @@ func (client *ServiceEndpointPoliciesClient) listCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -303,7 +327,7 @@ func (client *ServiceEndpointPoliciesClient) listHandleResponse(resp *http.Respo
 
 // NewListByResourceGroupPager - Gets all service endpoint Policies in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - ServiceEndpointPoliciesClientListByResourceGroupOptions contains the optional parameters for the ServiceEndpointPoliciesClient.NewListByResourceGroupPager
 //     method.
@@ -313,25 +337,20 @@ func (client *ServiceEndpointPoliciesClient) NewListByResourceGroupPager(resourc
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ServiceEndpointPoliciesClientListByResourceGroupResponse) (ServiceEndpointPoliciesClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ServiceEndpointPoliciesClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ServiceEndpointPoliciesClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return ServiceEndpointPoliciesClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ServiceEndpointPoliciesClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -351,7 +370,7 @@ func (client *ServiceEndpointPoliciesClient) listByResourceGroupCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -369,25 +388,32 @@ func (client *ServiceEndpointPoliciesClient) listByResourceGroupHandleResponse(r
 // UpdateTags - Updates tags of a service endpoint policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceEndpointPolicyName - The name of the service endpoint policy.
 //   - parameters - Parameters supplied to update service endpoint policy tags.
 //   - options - ServiceEndpointPoliciesClientUpdateTagsOptions contains the optional parameters for the ServiceEndpointPoliciesClient.UpdateTags
 //     method.
 func (client *ServiceEndpointPoliciesClient) UpdateTags(ctx context.Context, resourceGroupName string, serviceEndpointPolicyName string, parameters TagsObject, options *ServiceEndpointPoliciesClientUpdateTagsOptions) (ServiceEndpointPoliciesClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "ServiceEndpointPoliciesClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, serviceEndpointPolicyName, parameters, options)
 	if err != nil {
 		return ServiceEndpointPoliciesClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ServiceEndpointPoliciesClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ServiceEndpointPoliciesClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ServiceEndpointPoliciesClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -410,10 +436,13 @@ func (client *ServiceEndpointPoliciesClient) updateTagsCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/serviceendpointpolicydefinitions_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/serviceendpointpolicydefinitions_client.go
similarity index 81%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/serviceendpointpolicydefinitions_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/serviceendpointpolicydefinitions_client.go
index 1d2e4262b91..ac6597319f2 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/serviceendpointpolicydefinitions_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/serviceendpointpolicydefinitions_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ServiceEndpointPolicyDefinitionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewServiceEndpointPolicyDefinitionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ServiceEndpointPolicyDefinitionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ServiceEndpointPolicyDefinitionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewServiceEndpointPolicyDefinitionsClient(subscriptionID string, credential
 // BeginCreateOrUpdate - Creates or updates a service endpoint policy definition in the specified service endpoint policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceEndpointPolicyName - The name of the service endpoint policy.
 //   - serviceEndpointPolicyDefinitionName - The name of the service endpoint policy definition name.
@@ -61,31 +60,41 @@ func (client *ServiceEndpointPolicyDefinitionsClient) BeginCreateOrUpdate(ctx co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ServiceEndpointPolicyDefinitionsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ServiceEndpointPolicyDefinitionsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ServiceEndpointPolicyDefinitionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ServiceEndpointPolicyDefinitionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a service endpoint policy definition in the specified service endpoint policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ServiceEndpointPolicyDefinitionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, serviceEndpointPolicyName string, serviceEndpointPolicyDefinitionName string, serviceEndpointPolicyDefinitions ServiceEndpointPolicyDefinition, options *ServiceEndpointPolicyDefinitionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ServiceEndpointPolicyDefinitionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, serviceEndpointPolicyName, serviceEndpointPolicyDefinitionName, serviceEndpointPolicyDefinitions, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *ServiceEndpointPolicyDefinitionsClient) createOrUpdateCreateReques
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, serviceEndpointPolicyDefinitions)
+	if err := runtime.MarshalAsJSON(req, serviceEndpointPolicyDefinitions); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified ServiceEndpoint policy definitions.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceEndpointPolicyName - The name of the Service Endpoint Policy.
 //   - serviceEndpointPolicyDefinitionName - The name of the service endpoint policy definition.
@@ -133,31 +145,41 @@ func (client *ServiceEndpointPolicyDefinitionsClient) BeginDelete(ctx context.Co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ServiceEndpointPolicyDefinitionsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[ServiceEndpointPolicyDefinitionsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[ServiceEndpointPolicyDefinitionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[ServiceEndpointPolicyDefinitionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified ServiceEndpoint policy definitions.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *ServiceEndpointPolicyDefinitionsClient) deleteOperation(ctx context.Context, resourceGroupName string, serviceEndpointPolicyName string, serviceEndpointPolicyDefinitionName string, options *ServiceEndpointPolicyDefinitionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "ServiceEndpointPolicyDefinitionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, serviceEndpointPolicyName, serviceEndpointPolicyDefinitionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *ServiceEndpointPolicyDefinitionsClient) deleteCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *ServiceEndpointPolicyDefinitionsClient) deleteCreateRequest(ctx co
 // Get - Get the specified service endpoint policy definitions from service endpoint policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceEndpointPolicyName - The name of the service endpoint policy name.
 //   - serviceEndpointPolicyDefinitionName - The name of the service endpoint policy definition name.
 //   - options - ServiceEndpointPolicyDefinitionsClientGetOptions contains the optional parameters for the ServiceEndpointPolicyDefinitionsClient.Get
 //     method.
 func (client *ServiceEndpointPolicyDefinitionsClient) Get(ctx context.Context, resourceGroupName string, serviceEndpointPolicyName string, serviceEndpointPolicyDefinitionName string, options *ServiceEndpointPolicyDefinitionsClientGetOptions) (ServiceEndpointPolicyDefinitionsClientGetResponse, error) {
+	var err error
+	const operationName = "ServiceEndpointPolicyDefinitionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, serviceEndpointPolicyName, serviceEndpointPolicyDefinitionName, options)
 	if err != nil {
 		return ServiceEndpointPolicyDefinitionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ServiceEndpointPolicyDefinitionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ServiceEndpointPolicyDefinitionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ServiceEndpointPolicyDefinitionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *ServiceEndpointPolicyDefinitionsClient) getCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *ServiceEndpointPolicyDefinitionsClient) getHandleResponse(resp *ht
 
 // NewListByResourceGroupPager - Gets all service endpoint policy definitions in a service end point policy.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - serviceEndpointPolicyName - The name of the service endpoint policy name.
 //   - options - ServiceEndpointPolicyDefinitionsClientListByResourceGroupOptions contains the optional parameters for the ServiceEndpointPolicyDefinitionsClient.NewListByResourceGroupPager
@@ -266,25 +295,20 @@ func (client *ServiceEndpointPolicyDefinitionsClient) NewListByResourceGroupPage
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ServiceEndpointPolicyDefinitionsClientListByResourceGroupResponse) (ServiceEndpointPolicyDefinitionsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, serviceEndpointPolicyName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return ServiceEndpointPolicyDefinitionsClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ServiceEndpointPolicyDefinitionsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, serviceEndpointPolicyName, options)
+			}, nil)
 			if err != nil {
 				return ServiceEndpointPolicyDefinitionsClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ServiceEndpointPolicyDefinitionsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *ServiceEndpointPolicyDefinitionsClient) listByResourceGroupCreateR
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/servicetaginformation_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/servicetaginformation_client.go
similarity index 85%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/servicetaginformation_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/servicetaginformation_client.go
index ebf42933e96..49d03beab32 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/servicetaginformation_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/servicetaginformation_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type ServiceTagInformationClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewServiceTagInformationClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ServiceTagInformationClient, error) {
-	cl, err := arm.NewClient(moduleName+".ServiceTagInformationClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewServiceTagInformationClient(subscriptionID string, credential azcore.Tok
 
 // NewListPager - Gets a list of service tag information resources with pagination.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location that will be used as a reference for cloud (not as a filter based on location, you will get the
 //     list of service tags with prefix details across all regions but limited to the cloud that
 //     your subscription belongs to).
@@ -60,25 +59,20 @@ func (client *ServiceTagInformationClient) NewListPager(location string, options
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *ServiceTagInformationClientListResponse) (ServiceTagInformationClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "ServiceTagInformationClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return ServiceTagInformationClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return ServiceTagInformationClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return ServiceTagInformationClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -98,7 +92,7 @@ func (client *ServiceTagInformationClient) listCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.NoAddressPrefixes != nil {
 		reqQP.Set("noAddressPrefixes", strconv.FormatBool(*options.NoAddressPrefixes))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/servicetags_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/servicetags_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/servicetags_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/servicetags_client.go
index e392ce7b373..f0ecb696d66 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/servicetags_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/servicetags_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type ServiceTagsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewServiceTagsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*ServiceTagsClient, error) {
-	cl, err := arm.NewClient(moduleName+".ServiceTagsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,24 +47,31 @@ func NewServiceTagsClient(subscriptionID string, credential azcore.TokenCredenti
 // List - Gets a list of service tag information resources.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location that will be used as a reference for version (not as a filter based on location, you will get the
 //     list of service tags with prefix details across all regions but limited to the cloud that
 //     your subscription belongs to).
 //   - options - ServiceTagsClientListOptions contains the optional parameters for the ServiceTagsClient.List method.
 func (client *ServiceTagsClient) List(ctx context.Context, location string, options *ServiceTagsClientListOptions) (ServiceTagsClientListResponse, error) {
+	var err error
+	const operationName = "ServiceTagsClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, location, options)
 	if err != nil {
 		return ServiceTagsClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return ServiceTagsClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return ServiceTagsClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return ServiceTagsClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -84,7 +90,7 @@ func (client *ServiceTagsClient) listCreateRequest(ctx context.Context, location
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/staticmembers_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/staticmembers_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/staticmembers_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/staticmembers_client.go
index a365bbbeb56..6e5e7ed0225 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/staticmembers_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/staticmembers_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type StaticMembersClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewStaticMembersClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*StaticMembersClient, error) {
-	cl, err := arm.NewClient(moduleName+".StaticMembersClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewStaticMembersClient(subscriptionID string, credential azcore.TokenCreden
 // CreateOrUpdate - Creates or updates a static member.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - networkGroupName - The name of the network group.
@@ -58,18 +57,25 @@ func NewStaticMembersClient(subscriptionID string, credential azcore.TokenCreden
 //   - options - StaticMembersClientCreateOrUpdateOptions contains the optional parameters for the StaticMembersClient.CreateOrUpdate
 //     method.
 func (client *StaticMembersClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, networkManagerName string, networkGroupName string, staticMemberName string, parameters StaticMember, options *StaticMembersClientCreateOrUpdateOptions) (StaticMembersClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "StaticMembersClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkManagerName, networkGroupName, staticMemberName, parameters, options)
 	if err != nil {
 		return StaticMembersClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return StaticMembersClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return StaticMembersClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return StaticMembersClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -100,10 +106,13 @@ func (client *StaticMembersClient) createOrUpdateCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -118,23 +127,29 @@ func (client *StaticMembersClient) createOrUpdateHandleResponse(resp *http.Respo
 // Delete - Deletes a static member.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - networkGroupName - The name of the network group.
 //   - staticMemberName - The name of the static member.
 //   - options - StaticMembersClientDeleteOptions contains the optional parameters for the StaticMembersClient.Delete method.
 func (client *StaticMembersClient) Delete(ctx context.Context, resourceGroupName string, networkManagerName string, networkGroupName string, staticMemberName string, options *StaticMembersClientDeleteOptions) (StaticMembersClientDeleteResponse, error) {
+	var err error
+	const operationName = "StaticMembersClient.Delete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkManagerName, networkGroupName, staticMemberName, options)
 	if err != nil {
 		return StaticMembersClientDeleteResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return StaticMembersClientDeleteResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusNoContent) {
-		return StaticMembersClientDeleteResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return StaticMembersClientDeleteResponse{}, err
 	}
 	return StaticMembersClientDeleteResponse{}, nil
 }
@@ -167,7 +182,7 @@ func (client *StaticMembersClient) deleteCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -176,25 +191,32 @@ func (client *StaticMembersClient) deleteCreateRequest(ctx context.Context, reso
 // Get - Gets the specified static member.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - networkGroupName - The name of the network group.
 //   - staticMemberName - The name of the static member.
 //   - options - StaticMembersClientGetOptions contains the optional parameters for the StaticMembersClient.Get method.
 func (client *StaticMembersClient) Get(ctx context.Context, resourceGroupName string, networkManagerName string, networkGroupName string, staticMemberName string, options *StaticMembersClientGetOptions) (StaticMembersClientGetResponse, error) {
+	var err error
+	const operationName = "StaticMembersClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkManagerName, networkGroupName, staticMemberName, options)
 	if err != nil {
 		return StaticMembersClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return StaticMembersClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return StaticMembersClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return StaticMembersClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -225,7 +247,7 @@ func (client *StaticMembersClient) getCreateRequest(ctx context.Context, resourc
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -242,7 +264,7 @@ func (client *StaticMembersClient) getHandleResponse(resp *http.Response) (Stati
 
 // NewListPager - Lists the specified static member.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkManagerName - The name of the network manager.
 //   - networkGroupName - The name of the network group.
@@ -253,25 +275,20 @@ func (client *StaticMembersClient) NewListPager(resourceGroupName string, networ
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *StaticMembersClientListResponse) (StaticMembersClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkManagerName, networkGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "StaticMembersClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkManagerName, networkGroupName, options)
+			}, nil)
 			if err != nil {
 				return StaticMembersClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return StaticMembersClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return StaticMembersClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -299,7 +316,7 @@ func (client *StaticMembersClient) listCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/subnets_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/subnets_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/subnets_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/subnets_client.go
index 9824a5cf12b..6a73e8b6f17 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/subnets_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/subnets_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type SubnetsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewSubnetsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*SubnetsClient, error) {
-	cl, err := arm.NewClient(moduleName+".SubnetsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewSubnetsClient(subscriptionID string, credential azcore.TokenCredential,
 // BeginCreateOrUpdate - Creates or updates a subnet in the specified virtual network.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - subnetName - The name of the subnet.
@@ -61,31 +60,41 @@ func (client *SubnetsClient) BeginCreateOrUpdate(ctx context.Context, resourceGr
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SubnetsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SubnetsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SubnetsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SubnetsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a subnet in the specified virtual network.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *SubnetsClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualNetworkName string, subnetName string, subnetParameters Subnet, options *SubnetsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SubnetsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualNetworkName, subnetName, subnetParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *SubnetsClient) createOrUpdateCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, subnetParameters)
+	if err := runtime.MarshalAsJSON(req, subnetParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified subnet.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - subnetName - The name of the subnet.
@@ -132,31 +144,41 @@ func (client *SubnetsClient) BeginDelete(ctx context.Context, resourceGroupName
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SubnetsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SubnetsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SubnetsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SubnetsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified subnet.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *SubnetsClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualNetworkName string, subnetName string, options *SubnetsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SubnetsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualNetworkName, subnetName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -183,7 +205,7 @@ func (client *SubnetsClient) deleteCreateRequest(ctx context.Context, resourceGr
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -192,24 +214,31 @@ func (client *SubnetsClient) deleteCreateRequest(ctx context.Context, resourceGr
 // Get - Gets the specified subnet by virtual network and resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - subnetName - The name of the subnet.
 //   - options - SubnetsClientGetOptions contains the optional parameters for the SubnetsClient.Get method.
 func (client *SubnetsClient) Get(ctx context.Context, resourceGroupName string, virtualNetworkName string, subnetName string, options *SubnetsClientGetOptions) (SubnetsClientGetResponse, error) {
+	var err error
+	const operationName = "SubnetsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualNetworkName, subnetName, options)
 	if err != nil {
 		return SubnetsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SubnetsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SubnetsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SubnetsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -236,7 +265,7 @@ func (client *SubnetsClient) getCreateRequest(ctx context.Context, resourceGroup
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -256,7 +285,7 @@ func (client *SubnetsClient) getHandleResponse(resp *http.Response) (SubnetsClie
 
 // NewListPager - Gets all subnets in a virtual network.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - options - SubnetsClientListOptions contains the optional parameters for the SubnetsClient.NewListPager method.
@@ -266,25 +295,20 @@ func (client *SubnetsClient) NewListPager(resourceGroupName string, virtualNetwo
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SubnetsClientListResponse) (SubnetsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, virtualNetworkName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return SubnetsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SubnetsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, virtualNetworkName, options)
+			}, nil)
 			if err != nil {
 				return SubnetsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SubnetsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *SubnetsClient) listCreateRequest(ctx context.Context, resourceGrou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -326,7 +350,7 @@ func (client *SubnetsClient) listHandleResponse(resp *http.Response) (SubnetsCli
 // BeginPrepareNetworkPolicies - Prepares a subnet by applying network intent policies.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - subnetName - The name of the subnet.
@@ -339,31 +363,41 @@ func (client *SubnetsClient) BeginPrepareNetworkPolicies(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SubnetsClientPrepareNetworkPoliciesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SubnetsClientPrepareNetworkPoliciesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SubnetsClientPrepareNetworkPoliciesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SubnetsClientPrepareNetworkPoliciesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // PrepareNetworkPolicies - Prepares a subnet by applying network intent policies.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *SubnetsClient) prepareNetworkPolicies(ctx context.Context, resourceGroupName string, virtualNetworkName string, subnetName string, prepareNetworkPoliciesRequestParameters PrepareNetworkPoliciesRequest, options *SubnetsClientBeginPrepareNetworkPoliciesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SubnetsClient.BeginPrepareNetworkPolicies"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.prepareNetworkPoliciesCreateRequest(ctx, resourceGroupName, virtualNetworkName, subnetName, prepareNetworkPoliciesRequestParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // prepareNetworkPoliciesCreateRequest creates the PrepareNetworkPolicies request.
@@ -390,16 +424,19 @@ func (client *SubnetsClient) prepareNetworkPoliciesCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, prepareNetworkPoliciesRequestParameters)
+	if err := runtime.MarshalAsJSON(req, prepareNetworkPoliciesRequestParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginUnprepareNetworkPolicies - Unprepares a subnet by removing network intent policies.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - subnetName - The name of the subnet.
@@ -412,31 +449,41 @@ func (client *SubnetsClient) BeginUnprepareNetworkPolicies(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SubnetsClientUnprepareNetworkPoliciesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[SubnetsClientUnprepareNetworkPoliciesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[SubnetsClientUnprepareNetworkPoliciesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[SubnetsClientUnprepareNetworkPoliciesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // UnprepareNetworkPolicies - Unprepares a subnet by removing network intent policies.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *SubnetsClient) unprepareNetworkPolicies(ctx context.Context, resourceGroupName string, virtualNetworkName string, subnetName string, unprepareNetworkPoliciesRequestParameters UnprepareNetworkPoliciesRequest, options *SubnetsClientBeginUnprepareNetworkPoliciesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "SubnetsClient.BeginUnprepareNetworkPolicies"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.unprepareNetworkPoliciesCreateRequest(ctx, resourceGroupName, virtualNetworkName, subnetName, unprepareNetworkPoliciesRequestParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // unprepareNetworkPoliciesCreateRequest creates the UnprepareNetworkPolicies request.
@@ -463,8 +510,11 @@ func (client *SubnetsClient) unprepareNetworkPoliciesCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, unprepareNetworkPoliciesRequestParameters)
+	if err := runtime.MarshalAsJSON(req, unprepareNetworkPoliciesRequestParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/subscriptionnetworkmanagerconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/subscriptionnetworkmanagerconnections_client.go
similarity index 82%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/subscriptionnetworkmanagerconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/subscriptionnetworkmanagerconnections_client.go
index ad1409b867b..0c5b7d5a688 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/subscriptionnetworkmanagerconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/subscriptionnetworkmanagerconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type SubscriptionNetworkManagerConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewSubscriptionNetworkManagerConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*SubscriptionNetworkManagerConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".SubscriptionNetworkManagerConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,24 +48,31 @@ func NewSubscriptionNetworkManagerConnectionsClient(subscriptionID string, crede
 // CreateOrUpdate - Create a network manager connection on this subscription.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - networkManagerConnectionName - Name for the network manager connection.
 //   - parameters - Network manager connection to be created/updated.
 //   - options - SubscriptionNetworkManagerConnectionsClientCreateOrUpdateOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.CreateOrUpdate
 //     method.
 func (client *SubscriptionNetworkManagerConnectionsClient) CreateOrUpdate(ctx context.Context, networkManagerConnectionName string, parameters ManagerConnection, options *SubscriptionNetworkManagerConnectionsClientCreateOrUpdateOptions) (SubscriptionNetworkManagerConnectionsClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "SubscriptionNetworkManagerConnectionsClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, networkManagerConnectionName, parameters, options)
 	if err != nil {
 		return SubscriptionNetworkManagerConnectionsClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SubscriptionNetworkManagerConnectionsClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return SubscriptionNetworkManagerConnectionsClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return SubscriptionNetworkManagerConnectionsClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -85,10 +91,13 @@ func (client *SubscriptionNetworkManagerConnectionsClient) createOrUpdateCreateR
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -103,21 +112,27 @@ func (client *SubscriptionNetworkManagerConnectionsClient) createOrUpdateHandleR
 // Delete - Delete specified connection created by this subscription.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - networkManagerConnectionName - Name for the network manager connection.
 //   - options - SubscriptionNetworkManagerConnectionsClientDeleteOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.Delete
 //     method.
 func (client *SubscriptionNetworkManagerConnectionsClient) Delete(ctx context.Context, networkManagerConnectionName string, options *SubscriptionNetworkManagerConnectionsClientDeleteOptions) (SubscriptionNetworkManagerConnectionsClientDeleteResponse, error) {
+	var err error
+	const operationName = "SubscriptionNetworkManagerConnectionsClient.Delete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, networkManagerConnectionName, options)
 	if err != nil {
 		return SubscriptionNetworkManagerConnectionsClientDeleteResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SubscriptionNetworkManagerConnectionsClientDeleteResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusNoContent) {
-		return SubscriptionNetworkManagerConnectionsClientDeleteResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return SubscriptionNetworkManagerConnectionsClientDeleteResponse{}, err
 	}
 	return SubscriptionNetworkManagerConnectionsClientDeleteResponse{}, nil
 }
@@ -138,7 +153,7 @@ func (client *SubscriptionNetworkManagerConnectionsClient) deleteCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -147,23 +162,30 @@ func (client *SubscriptionNetworkManagerConnectionsClient) deleteCreateRequest(c
 // Get - Get a specified connection created by this subscription.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - networkManagerConnectionName - Name for the network manager connection.
 //   - options - SubscriptionNetworkManagerConnectionsClientGetOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.Get
 //     method.
 func (client *SubscriptionNetworkManagerConnectionsClient) Get(ctx context.Context, networkManagerConnectionName string, options *SubscriptionNetworkManagerConnectionsClientGetOptions) (SubscriptionNetworkManagerConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "SubscriptionNetworkManagerConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, networkManagerConnectionName, options)
 	if err != nil {
 		return SubscriptionNetworkManagerConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return SubscriptionNetworkManagerConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return SubscriptionNetworkManagerConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return SubscriptionNetworkManagerConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -182,7 +204,7 @@ func (client *SubscriptionNetworkManagerConnectionsClient) getCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -199,7 +221,7 @@ func (client *SubscriptionNetworkManagerConnectionsClient) getHandleResponse(res
 
 // NewListPager - List all network manager connections created by this subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - SubscriptionNetworkManagerConnectionsClientListOptions contains the optional parameters for the SubscriptionNetworkManagerConnectionsClient.NewListPager
 //     method.
 func (client *SubscriptionNetworkManagerConnectionsClient) NewListPager(options *SubscriptionNetworkManagerConnectionsClientListOptions) *runtime.Pager[SubscriptionNetworkManagerConnectionsClientListResponse] {
@@ -208,25 +230,20 @@ func (client *SubscriptionNetworkManagerConnectionsClient) NewListPager(options
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *SubscriptionNetworkManagerConnectionsClientListResponse) (SubscriptionNetworkManagerConnectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "SubscriptionNetworkManagerConnectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return SubscriptionNetworkManagerConnectionsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return SubscriptionNetworkManagerConnectionsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return SubscriptionNetworkManagerConnectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -242,7 +259,7 @@ func (client *SubscriptionNetworkManagerConnectionsClient) listCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Top != nil {
 		reqQP.Set("$top", strconv.FormatInt(int64(*options.Top), 10))
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/time_rfc3339.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/time_rfc3339.go
similarity index 59%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/time_rfc3339.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/time_rfc3339.go
index 6da2de17a36..ffdedf87eaa 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/time_rfc3339.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/time_rfc3339.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -19,50 +18,50 @@ import (
 	"time"
 )
 
-const (
-	utcLayoutJSON = `"2006-01-02T15:04:05.999999999"`
-	utcLayout     = "2006-01-02T15:04:05.999999999"
-	rfc3339JSON   = `"` + time.RFC3339Nano + `"`
-)
-
 // Azure reports time in UTC but it doesn't include the 'Z' time zone suffix in some cases.
 var tzOffsetRegex = regexp.MustCompile(`(Z|z|\+|-)(\d+:\d+)*"*$`)
 
-type timeRFC3339 time.Time
+const (
+	utcDateTimeJSON = `"2006-01-02T15:04:05.999999999"`
+	utcDateTime     = "2006-01-02T15:04:05.999999999"
+	dateTimeJSON    = `"` + time.RFC3339Nano + `"`
+)
+
+type dateTimeRFC3339 time.Time
 
-func (t timeRFC3339) MarshalJSON() (json []byte, err error) {
+func (t dateTimeRFC3339) MarshalJSON() ([]byte, error) {
 	tt := time.Time(t)
 	return tt.MarshalJSON()
 }
 
-func (t timeRFC3339) MarshalText() (text []byte, err error) {
+func (t dateTimeRFC3339) MarshalText() ([]byte, error) {
 	tt := time.Time(t)
 	return tt.MarshalText()
 }
 
-func (t *timeRFC3339) UnmarshalJSON(data []byte) error {
-	layout := utcLayoutJSON
+func (t *dateTimeRFC3339) UnmarshalJSON(data []byte) error {
+	layout := utcDateTimeJSON
 	if tzOffsetRegex.Match(data) {
-		layout = rfc3339JSON
+		layout = dateTimeJSON
 	}
 	return t.Parse(layout, string(data))
 }
 
-func (t *timeRFC3339) UnmarshalText(data []byte) (err error) {
-	layout := utcLayout
+func (t *dateTimeRFC3339) UnmarshalText(data []byte) error {
+	layout := utcDateTime
 	if tzOffsetRegex.Match(data) {
 		layout = time.RFC3339Nano
 	}
 	return t.Parse(layout, string(data))
 }
 
-func (t *timeRFC3339) Parse(layout, value string) error {
+func (t *dateTimeRFC3339) Parse(layout, value string) error {
 	p, err := time.Parse(layout, strings.ToUpper(value))
-	*t = timeRFC3339(p)
+	*t = dateTimeRFC3339(p)
 	return err
 }
 
-func populateTimeRFC3339(m map[string]any, k string, t *time.Time) {
+func populateDateTimeRFC3339(m map[string]any, k string, t *time.Time) {
 	if t == nil {
 		return
 	} else if azcore.IsNullValue(t) {
@@ -71,14 +70,14 @@ func populateTimeRFC3339(m map[string]any, k string, t *time.Time) {
 	} else if reflect.ValueOf(t).IsNil() {
 		return
 	}
-	m[k] = (*timeRFC3339)(t)
+	m[k] = (*dateTimeRFC3339)(t)
 }
 
-func unpopulateTimeRFC3339(data json.RawMessage, fn string, t **time.Time) error {
+func unpopulateDateTimeRFC3339(data json.RawMessage, fn string, t **time.Time) error {
 	if data == nil || strings.EqualFold(string(data), "null") {
 		return nil
 	}
-	var aux timeRFC3339
+	var aux dateTimeRFC3339
 	if err := json.Unmarshal(data, &aux); err != nil {
 		return fmt.Errorf("struct field %s: %v", fn, err)
 	}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/usages_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/usages_client.go
similarity index 83%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/usages_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/usages_client.go
index 5b9e56549b8..ebacd3e6ab1 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/usages_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/usages_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type UsagesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewUsagesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*UsagesClient, error) {
-	cl, err := arm.NewClient(moduleName+".UsagesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewUsagesClient(subscriptionID string, credential azcore.TokenCredential, o
 
 // NewListPager - List network usages for a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - location - The location where resource usage is queried.
 //   - options - UsagesClientListOptions contains the optional parameters for the UsagesClient.NewListPager method.
 func (client *UsagesClient) NewListPager(location string, options *UsagesClientListOptions) *runtime.Pager[UsagesClientListResponse] {
@@ -56,25 +55,20 @@ func (client *UsagesClient) NewListPager(location string, options *UsagesClientL
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *UsagesClientListResponse) (UsagesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, location, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "UsagesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, location, options)
+			}, nil)
 			if err != nil {
 				return UsagesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return UsagesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return UsagesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -94,7 +88,7 @@ func (client *UsagesClient) listCreateRequest(ctx context.Context, location stri
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vipswap_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vipswap_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vipswap_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vipswap_client.go
index 564968e0d1a..ac92776c040 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vipswap_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vipswap_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VipSwapClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVipSwapClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VipSwapClient, error) {
-	cl, err := arm.NewClient(moduleName+".VipSwapClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVipSwapClient(subscriptionID string, credential azcore.TokenCredential,
 // BeginCreate - Performs vip swap operation on swappable cloud services.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - groupName - The name of the resource group.
 //   - resourceName - The name of the cloud service.
 //   - parameters - SwapResource object where slot type should be the target slot after vip swap for the specified cloud service.
@@ -59,29 +58,40 @@ func (client *VipSwapClient) BeginCreate(ctx context.Context, groupName string,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller[VipSwapClientCreateResponse](resp, client.internal.Pipeline(), nil)
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VipSwapClientCreateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VipSwapClientCreateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VipSwapClientCreateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Create - Performs vip swap operation on swappable cloud services.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VipSwapClient) create(ctx context.Context, groupName string, resourceName string, parameters SwapResource, options *VipSwapClientBeginCreateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VipSwapClient.BeginCreate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createCreateRequest(ctx, groupName, resourceName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createCreateRequest creates the Create request.
@@ -105,33 +115,43 @@ func (client *VipSwapClient) createCreateRequest(ctx context.Context, groupName
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // Get - Gets the SwapResource which identifies the slot type for the specified cloud service. The slot type on a cloud service
 // can either be Staging or Production
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - groupName - The name of the resource group.
 //   - resourceName - The name of the cloud service.
 //   - options - VipSwapClientGetOptions contains the optional parameters for the VipSwapClient.Get method.
 func (client *VipSwapClient) Get(ctx context.Context, groupName string, resourceName string, options *VipSwapClientGetOptions) (VipSwapClientGetResponse, error) {
+	var err error
+	const operationName = "VipSwapClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, groupName, resourceName, options)
 	if err != nil {
 		return VipSwapClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VipSwapClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VipSwapClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VipSwapClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -155,7 +175,7 @@ func (client *VipSwapClient) getCreateRequest(ctx context.Context, groupName str
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -174,23 +194,30 @@ func (client *VipSwapClient) getHandleResponse(resp *http.Response) (VipSwapClie
 // cloud service can either be Staging or Production
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - groupName - The name of the resource group.
 //   - resourceName - The name of the cloud service.
 //   - options - VipSwapClientListOptions contains the optional parameters for the VipSwapClient.List method.
 func (client *VipSwapClient) List(ctx context.Context, groupName string, resourceName string, options *VipSwapClientListOptions) (VipSwapClientListResponse, error) {
+	var err error
+	const operationName = "VipSwapClient.List"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, groupName, resourceName, options)
 	if err != nil {
 		return VipSwapClientListResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VipSwapClientListResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VipSwapClientListResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VipSwapClientListResponse{}, err
 	}
-	return client.listHandleResponse(resp)
+	resp, err := client.listHandleResponse(httpResp)
+	return resp, err
 }
 
 // listCreateRequest creates the List request.
@@ -213,7 +240,7 @@ func (client *VipSwapClient) listCreateRequest(ctx context.Context, groupName st
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualapplianceconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualapplianceconnections_client.go
new file mode 100644
index 00000000000..9ecd1b48ce2
--- /dev/null
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualapplianceconnections_client.go
@@ -0,0 +1,349 @@
+//go:build go1.18
+// +build go1.18
+
+// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License. See License.txt in the project root for license information.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
+// Changes may cause incorrect behavior and will be lost if the code is regenerated.
+
+package armnetwork
+
+import (
+	"context"
+	"errors"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/arm"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/policy"
+	"github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime"
+	"net/http"
+	"net/url"
+	"strings"
+)
+
+// VirtualApplianceConnectionsClient contains the methods for the NetworkVirtualApplianceConnections group.
+// Don't use this type directly, use NewVirtualApplianceConnectionsClient() instead.
+type VirtualApplianceConnectionsClient struct {
+	internal       *arm.Client
+	subscriptionID string
+}
+
+// NewVirtualApplianceConnectionsClient creates a new instance of VirtualApplianceConnectionsClient with the specified values.
+//   - subscriptionID - The subscription credentials which uniquely identify the Microsoft Azure subscription. The subscription
+//     ID forms part of the URI for every service call.
+//   - credential - used to authorize requests. Usually a credential from azidentity.
+//   - options - pass nil to accept the default values.
+func NewVirtualApplianceConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualApplianceConnectionsClient, error) {
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
+	if err != nil {
+		return nil, err
+	}
+	client := &VirtualApplianceConnectionsClient{
+		subscriptionID: subscriptionID,
+		internal:       cl,
+	}
+	return client, nil
+}
+
+// BeginCreateOrUpdate - Creates a connection to Network Virtual Appliance, if it doesn't exist else updates the existing
+// NVA connection'
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-05-01
+//   - resourceGroupName - The name of the resource group.
+//   - networkVirtualApplianceName - The name of the Network Virtual Appliance.
+//   - connectionName - The name of the NVA connection.
+//   - networkVirtualApplianceConnectionParameters - Parameters supplied in an NetworkVirtualApplianceConnection PUT operation.
+//   - options - VirtualApplianceConnectionsClientBeginCreateOrUpdateOptions contains the optional parameters for the VirtualApplianceConnectionsClient.BeginCreateOrUpdate
+//     method.
+func (client *VirtualApplianceConnectionsClient) BeginCreateOrUpdate(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, connectionName string, networkVirtualApplianceConnectionParameters VirtualApplianceConnection, options *VirtualApplianceConnectionsClientBeginCreateOrUpdateOptions) (*runtime.Poller[VirtualApplianceConnectionsClientCreateOrUpdateResponse], error) {
+	if options == nil || options.ResumeToken == "" {
+		resp, err := client.createOrUpdate(ctx, resourceGroupName, networkVirtualApplianceName, connectionName, networkVirtualApplianceConnectionParameters, options)
+		if err != nil {
+			return nil, err
+		}
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualApplianceConnectionsClientCreateOrUpdateResponse]{
+			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
+		})
+		return poller, err
+	} else {
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualApplianceConnectionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+	}
+}
+
+// CreateOrUpdate - Creates a connection to Network Virtual Appliance, if it doesn't exist else updates the existing NVA connection'
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-05-01
+func (client *VirtualApplianceConnectionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, connectionName string, networkVirtualApplianceConnectionParameters VirtualApplianceConnection, options *VirtualApplianceConnectionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualApplianceConnectionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, connectionName, networkVirtualApplianceConnectionParameters, options)
+	if err != nil {
+		return nil, err
+	}
+	httpResp, err := client.internal.Pipeline().Do(req)
+	if err != nil {
+		return nil, err
+	}
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
+	}
+	return httpResp, nil
+}
+
+// createOrUpdateCreateRequest creates the CreateOrUpdate request.
+func (client *VirtualApplianceConnectionsClient) createOrUpdateCreateRequest(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, connectionName string, networkVirtualApplianceConnectionParameters VirtualApplianceConnection, options *VirtualApplianceConnectionsClientBeginCreateOrUpdateOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/networkVirtualAppliances/{networkVirtualApplianceName}/networkVirtualApplianceConnections/{connectionName}"
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if networkVirtualApplianceName == "" {
+		return nil, errors.New("parameter networkVirtualApplianceName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{networkVirtualApplianceName}", url.PathEscape(networkVirtualApplianceName))
+	if connectionName == "" {
+		return nil, errors.New("parameter connectionName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{connectionName}", url.PathEscape(connectionName))
+	req, err := runtime.NewRequest(ctx, http.MethodPut, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-05-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	if err := runtime.MarshalAsJSON(req, networkVirtualApplianceConnectionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
+}
+
+// BeginDelete - Deletes a NVA connection.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-05-01
+//   - resourceGroupName - The name of the resource group.
+//   - networkVirtualApplianceName - The name of the Network Virtual Appliance.
+//   - connectionName - The name of the NVA connection.
+//   - options - VirtualApplianceConnectionsClientBeginDeleteOptions contains the optional parameters for the VirtualApplianceConnectionsClient.BeginDelete
+//     method.
+func (client *VirtualApplianceConnectionsClient) BeginDelete(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, connectionName string, options *VirtualApplianceConnectionsClientBeginDeleteOptions) (*runtime.Poller[VirtualApplianceConnectionsClientDeleteResponse], error) {
+	if options == nil || options.ResumeToken == "" {
+		resp, err := client.deleteOperation(ctx, resourceGroupName, networkVirtualApplianceName, connectionName, options)
+		if err != nil {
+			return nil, err
+		}
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualApplianceConnectionsClientDeleteResponse]{
+			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
+		})
+		return poller, err
+	} else {
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualApplianceConnectionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
+	}
+}
+
+// Delete - Deletes a NVA connection.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-05-01
+func (client *VirtualApplianceConnectionsClient) deleteOperation(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, connectionName string, options *VirtualApplianceConnectionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualApplianceConnectionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, connectionName, options)
+	if err != nil {
+		return nil, err
+	}
+	httpResp, err := client.internal.Pipeline().Do(req)
+	if err != nil {
+		return nil, err
+	}
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
+	}
+	return httpResp, nil
+}
+
+// deleteCreateRequest creates the Delete request.
+func (client *VirtualApplianceConnectionsClient) deleteCreateRequest(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, connectionName string, options *VirtualApplianceConnectionsClientBeginDeleteOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/networkVirtualAppliances/{networkVirtualApplianceName}/networkVirtualApplianceConnections/{connectionName}"
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if networkVirtualApplianceName == "" {
+		return nil, errors.New("parameter networkVirtualApplianceName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{networkVirtualApplianceName}", url.PathEscape(networkVirtualApplianceName))
+	if connectionName == "" {
+		return nil, errors.New("parameter connectionName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{connectionName}", url.PathEscape(connectionName))
+	req, err := runtime.NewRequest(ctx, http.MethodDelete, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-05-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	return req, nil
+}
+
+// Get - Retrieves the details of specified NVA connection.
+// If the operation fails it returns an *azcore.ResponseError type.
+//
+// Generated from API version 2023-05-01
+//   - resourceGroupName - The name of the resource group.
+//   - networkVirtualApplianceName - The name of the Network Virtual Appliance.
+//   - connectionName - The name of the NVA connection.
+//   - options - VirtualApplianceConnectionsClientGetOptions contains the optional parameters for the VirtualApplianceConnectionsClient.Get
+//     method.
+func (client *VirtualApplianceConnectionsClient) Get(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, connectionName string, options *VirtualApplianceConnectionsClientGetOptions) (VirtualApplianceConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualApplianceConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
+	req, err := client.getCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, connectionName, options)
+	if err != nil {
+		return VirtualApplianceConnectionsClientGetResponse{}, err
+	}
+	httpResp, err := client.internal.Pipeline().Do(req)
+	if err != nil {
+		return VirtualApplianceConnectionsClientGetResponse{}, err
+	}
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualApplianceConnectionsClientGetResponse{}, err
+	}
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
+}
+
+// getCreateRequest creates the Get request.
+func (client *VirtualApplianceConnectionsClient) getCreateRequest(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, connectionName string, options *VirtualApplianceConnectionsClientGetOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/networkVirtualAppliances/{networkVirtualApplianceName}/networkVirtualApplianceConnections/{connectionName}"
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if networkVirtualApplianceName == "" {
+		return nil, errors.New("parameter networkVirtualApplianceName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{networkVirtualApplianceName}", url.PathEscape(networkVirtualApplianceName))
+	if connectionName == "" {
+		return nil, errors.New("parameter connectionName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{connectionName}", url.PathEscape(connectionName))
+	req, err := runtime.NewRequest(ctx, http.MethodGet, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-05-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	return req, nil
+}
+
+// getHandleResponse handles the Get response.
+func (client *VirtualApplianceConnectionsClient) getHandleResponse(resp *http.Response) (VirtualApplianceConnectionsClientGetResponse, error) {
+	result := VirtualApplianceConnectionsClientGetResponse{}
+	if err := runtime.UnmarshalAsJSON(resp, &result.VirtualApplianceConnection); err != nil {
+		return VirtualApplianceConnectionsClientGetResponse{}, err
+	}
+	return result, nil
+}
+
+// NewListPager - Lists NetworkVirtualApplianceConnections under the NVA.
+//
+// Generated from API version 2023-05-01
+//   - resourceGroupName - The name of the resource group.
+//   - networkVirtualApplianceName - The name of the Network Virtual Appliance.
+//   - options - VirtualApplianceConnectionsClientListOptions contains the optional parameters for the VirtualApplianceConnectionsClient.NewListPager
+//     method.
+func (client *VirtualApplianceConnectionsClient) NewListPager(resourceGroupName string, networkVirtualApplianceName string, options *VirtualApplianceConnectionsClientListOptions) *runtime.Pager[VirtualApplianceConnectionsClientListResponse] {
+	return runtime.NewPager(runtime.PagingHandler[VirtualApplianceConnectionsClientListResponse]{
+		More: func(page VirtualApplianceConnectionsClientListResponse) bool {
+			return page.NextLink != nil && len(*page.NextLink) > 0
+		},
+		Fetcher: func(ctx context.Context, page *VirtualApplianceConnectionsClientListResponse) (VirtualApplianceConnectionsClientListResponse, error) {
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualApplianceConnectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
+			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, options)
+			}, nil)
+			if err != nil {
+				return VirtualApplianceConnectionsClientListResponse{}, err
+			}
+			return client.listHandleResponse(resp)
+		},
+		Tracer: client.internal.Tracer(),
+	})
+}
+
+// listCreateRequest creates the List request.
+func (client *VirtualApplianceConnectionsClient) listCreateRequest(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, options *VirtualApplianceConnectionsClientListOptions) (*policy.Request, error) {
+	urlPath := "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/networkVirtualAppliances/{networkVirtualApplianceName}/networkVirtualApplianceConnections"
+	if client.subscriptionID == "" {
+		return nil, errors.New("parameter client.subscriptionID cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{subscriptionId}", url.PathEscape(client.subscriptionID))
+	if resourceGroupName == "" {
+		return nil, errors.New("parameter resourceGroupName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{resourceGroupName}", url.PathEscape(resourceGroupName))
+	if networkVirtualApplianceName == "" {
+		return nil, errors.New("parameter networkVirtualApplianceName cannot be empty")
+	}
+	urlPath = strings.ReplaceAll(urlPath, "{networkVirtualApplianceName}", url.PathEscape(networkVirtualApplianceName))
+	req, err := runtime.NewRequest(ctx, http.MethodGet, runtime.JoinPaths(client.internal.Endpoint(), urlPath))
+	if err != nil {
+		return nil, err
+	}
+	reqQP := req.Raw().URL.Query()
+	reqQP.Set("api-version", "2023-05-01")
+	req.Raw().URL.RawQuery = reqQP.Encode()
+	req.Raw().Header["Accept"] = []string{"application/json"}
+	return req, nil
+}
+
+// listHandleResponse handles the List response.
+func (client *VirtualApplianceConnectionsClient) listHandleResponse(resp *http.Response) (VirtualApplianceConnectionsClientListResponse, error) {
+	result := VirtualApplianceConnectionsClientListResponse{}
+	if err := runtime.UnmarshalAsJSON(resp, &result.VirtualApplianceConnectionList); err != nil {
+		return VirtualApplianceConnectionsClientListResponse{}, err
+	}
+	return result, nil
+}
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualappliances_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualappliances_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualappliances_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualappliances_client.go
index a4446e1e575..01fa3cfefc1 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualappliances_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualappliances_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualAppliancesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualAppliancesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualAppliancesClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualAppliancesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualAppliancesClient(subscriptionID string, credential azcore.TokenCr
 // BeginCreateOrUpdate - Creates or updates the specified Network Virtual Appliance.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkVirtualApplianceName - The name of Network Virtual Appliance.
 //   - parameters - Parameters supplied to the create or update Network Virtual Appliance.
@@ -60,31 +59,41 @@ func (client *VirtualAppliancesClient) BeginCreateOrUpdate(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualAppliancesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualAppliancesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualAppliancesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualAppliancesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified Network Virtual Appliance.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualAppliancesClient) createOrUpdate(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, parameters VirtualAppliance, options *VirtualAppliancesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualAppliancesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *VirtualAppliancesClient) createOrUpdateCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified Network Virtual Appliance.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkVirtualApplianceName - The name of Network Virtual Appliance.
 //   - options - VirtualAppliancesClientBeginDeleteOptions contains the optional parameters for the VirtualAppliancesClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *VirtualAppliancesClient) BeginDelete(ctx context.Context, resource
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualAppliancesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualAppliancesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualAppliancesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualAppliancesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified Network Virtual Appliance.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualAppliancesClient) deleteOperation(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, options *VirtualAppliancesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualAppliancesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *VirtualAppliancesClient) deleteCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *VirtualAppliancesClient) deleteCreateRequest(ctx context.Context,
 // Get - Gets the specified Network Virtual Appliance.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkVirtualApplianceName - The name of Network Virtual Appliance.
 //   - options - VirtualAppliancesClientGetOptions contains the optional parameters for the VirtualAppliancesClient.Get method.
 func (client *VirtualAppliancesClient) Get(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, options *VirtualAppliancesClientGetOptions) (VirtualAppliancesClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualAppliancesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, options)
 	if err != nil {
 		return VirtualAppliancesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualAppliancesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualAppliancesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualAppliancesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *VirtualAppliancesClient) getCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -242,7 +271,7 @@ func (client *VirtualAppliancesClient) getHandleResponse(resp *http.Response) (V
 
 // NewListPager - Gets all Network Virtual Appliances in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - VirtualAppliancesClientListOptions contains the optional parameters for the VirtualAppliancesClient.NewListPager
 //     method.
 func (client *VirtualAppliancesClient) NewListPager(options *VirtualAppliancesClientListOptions) *runtime.Pager[VirtualAppliancesClientListResponse] {
@@ -251,25 +280,20 @@ func (client *VirtualAppliancesClient) NewListPager(options *VirtualAppliancesCl
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualAppliancesClientListResponse) (VirtualAppliancesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualAppliancesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualAppliancesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VirtualAppliancesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualAppliancesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -285,7 +309,7 @@ func (client *VirtualAppliancesClient) listCreateRequest(ctx context.Context, op
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -302,7 +326,7 @@ func (client *VirtualAppliancesClient) listHandleResponse(resp *http.Response) (
 
 // NewListByResourceGroupPager - Lists all Network Virtual Appliances in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - VirtualAppliancesClientListByResourceGroupOptions contains the optional parameters for the VirtualAppliancesClient.NewListByResourceGroupPager
 //     method.
@@ -312,25 +336,20 @@ func (client *VirtualAppliancesClient) NewListByResourceGroupPager(resourceGroup
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualAppliancesClientListByResourceGroupResponse) (VirtualAppliancesClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualAppliancesClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualAppliancesClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VirtualAppliancesClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualAppliancesClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -350,7 +369,7 @@ func (client *VirtualAppliancesClient) listByResourceGroupCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -368,25 +387,32 @@ func (client *VirtualAppliancesClient) listByResourceGroupHandleResponse(resp *h
 // UpdateTags - Updates a Network Virtual Appliance.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of Network Virtual Appliance.
 //   - networkVirtualApplianceName - The name of Network Virtual Appliance being updated.
 //   - parameters - Parameters supplied to Update Network Virtual Appliance Tags.
 //   - options - VirtualAppliancesClientUpdateTagsOptions contains the optional parameters for the VirtualAppliancesClient.UpdateTags
 //     method.
 func (client *VirtualAppliancesClient) UpdateTags(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, parameters TagsObject, options *VirtualAppliancesClientUpdateTagsOptions) (VirtualAppliancesClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "VirtualAppliancesClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, parameters, options)
 	if err != nil {
 		return VirtualAppliancesClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualAppliancesClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualAppliancesClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualAppliancesClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -409,10 +435,13 @@ func (client *VirtualAppliancesClient) updateTagsCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualappliancesites_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualappliancesites_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualappliancesites_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualappliancesites_client.go
index 64032cd48ca..af8f589f8c9 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualappliancesites_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualappliancesites_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualApplianceSitesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualApplianceSitesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualApplianceSitesClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualApplianceSitesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualApplianceSitesClient(subscriptionID string, credential azcore.Tok
 // BeginCreateOrUpdate - Creates or updates the specified Network Virtual Appliance Site.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkVirtualApplianceName - The name of the Network Virtual Appliance.
 //   - siteName - The name of the site.
@@ -61,31 +60,41 @@ func (client *VirtualApplianceSitesClient) BeginCreateOrUpdate(ctx context.Conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualApplianceSitesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualApplianceSitesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualApplianceSitesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualApplianceSitesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified Network Virtual Appliance Site.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualApplianceSitesClient) createOrUpdate(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, siteName string, parameters VirtualApplianceSite, options *VirtualApplianceSitesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualApplianceSitesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, siteName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *VirtualApplianceSitesClient) createOrUpdateCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified site from a Virtual Appliance.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkVirtualApplianceName - The name of the Network Virtual Appliance.
 //   - siteName - The name of the site.
@@ -133,31 +145,41 @@ func (client *VirtualApplianceSitesClient) BeginDelete(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualApplianceSitesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualApplianceSitesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualApplianceSitesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualApplianceSitesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified site from a Virtual Appliance.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualApplianceSitesClient) deleteOperation(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, siteName string, options *VirtualApplianceSitesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualApplianceSitesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, siteName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *VirtualApplianceSitesClient) deleteCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *VirtualApplianceSitesClient) deleteCreateRequest(ctx context.Conte
 // Get - Gets the specified Virtual Appliance Site.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkVirtualApplianceName - The name of the Network Virtual Appliance.
 //   - siteName - The name of the site.
 //   - options - VirtualApplianceSitesClientGetOptions contains the optional parameters for the VirtualApplianceSitesClient.Get
 //     method.
 func (client *VirtualApplianceSitesClient) Get(ctx context.Context, resourceGroupName string, networkVirtualApplianceName string, siteName string, options *VirtualApplianceSitesClientGetOptions) (VirtualApplianceSitesClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualApplianceSitesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, siteName, options)
 	if err != nil {
 		return VirtualApplianceSitesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualApplianceSitesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualApplianceSitesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualApplianceSitesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *VirtualApplianceSitesClient) getCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *VirtualApplianceSitesClient) getHandleResponse(resp *http.Response
 
 // NewListPager - Lists all Network Virtual Appliance Sites in a Network Virtual Appliance resource.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkVirtualApplianceName - The name of the Network Virtual Appliance.
 //   - options - VirtualApplianceSitesClientListOptions contains the optional parameters for the VirtualApplianceSitesClient.NewListPager
@@ -266,25 +295,20 @@ func (client *VirtualApplianceSitesClient) NewListPager(resourceGroupName string
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualApplianceSitesClientListResponse) (VirtualApplianceSitesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualApplianceSitesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualApplianceSitesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, networkVirtualApplianceName, options)
+			}, nil)
 			if err != nil {
 				return VirtualApplianceSitesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualApplianceSitesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *VirtualApplianceSitesClient) listCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualapplianceskus_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualapplianceskus_client.go
similarity index 82%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualapplianceskus_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualapplianceskus_client.go
index 4326d7f0892..2247d3c9c36 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualapplianceskus_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualapplianceskus_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualApplianceSKUsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualApplianceSKUsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualApplianceSKUsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualApplianceSKUsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,23 +47,30 @@ func NewVirtualApplianceSKUsClient(subscriptionID string, credential azcore.Toke
 // Get - Retrieves a single available sku for network virtual appliance.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - skuName - Name of the Sku.
 //   - options - VirtualApplianceSKUsClientGetOptions contains the optional parameters for the VirtualApplianceSKUsClient.Get
 //     method.
 func (client *VirtualApplianceSKUsClient) Get(ctx context.Context, skuName string, options *VirtualApplianceSKUsClientGetOptions) (VirtualApplianceSKUsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualApplianceSKUsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, skuName, options)
 	if err != nil {
 		return VirtualApplianceSKUsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualApplianceSKUsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualApplianceSKUsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualApplianceSKUsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -83,7 +89,7 @@ func (client *VirtualApplianceSKUsClient) getCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -100,7 +106,7 @@ func (client *VirtualApplianceSKUsClient) getHandleResponse(resp *http.Response)
 
 // NewListPager - List all SKUs available for a virtual appliance.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - VirtualApplianceSKUsClientListOptions contains the optional parameters for the VirtualApplianceSKUsClient.NewListPager
 //     method.
 func (client *VirtualApplianceSKUsClient) NewListPager(options *VirtualApplianceSKUsClientListOptions) *runtime.Pager[VirtualApplianceSKUsClientListResponse] {
@@ -109,25 +115,20 @@ func (client *VirtualApplianceSKUsClient) NewListPager(options *VirtualAppliance
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualApplianceSKUsClientListResponse) (VirtualApplianceSKUsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualApplianceSKUsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VirtualApplianceSKUsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualApplianceSKUsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualApplianceSKUsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -143,7 +144,7 @@ func (client *VirtualApplianceSKUsClient) listCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubbgpconnection_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubbgpconnection_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubbgpconnection_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubbgpconnection_client.go
index baaf53b500f..1334b44f411 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubbgpconnection_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubbgpconnection_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualHubBgpConnectionClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualHubBgpConnectionClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualHubBgpConnectionClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualHubBgpConnectionClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualHubBgpConnectionClient(subscriptionID string, credential azcore.T
 // BeginCreateOrUpdate - Creates a VirtualHubBgpConnection resource if it doesn't exist else updates the existing VirtualHubBgpConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - connectionName - The name of the connection.
@@ -61,31 +60,41 @@ func (client *VirtualHubBgpConnectionClient) BeginCreateOrUpdate(ctx context.Con
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubBgpConnectionClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubBgpConnectionClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubBgpConnectionClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubBgpConnectionClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a VirtualHubBgpConnection resource if it doesn't exist else updates the existing VirtualHubBgpConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubBgpConnectionClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualHubName string, connectionName string, parameters BgpConnection, options *VirtualHubBgpConnectionClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubBgpConnectionClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualHubName, connectionName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *VirtualHubBgpConnectionClient) createOrUpdateCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a VirtualHubBgpConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHubBgpConnection.
 //   - virtualHubName - The name of the VirtualHub.
 //   - connectionName - The name of the connection.
@@ -133,31 +145,41 @@ func (client *VirtualHubBgpConnectionClient) BeginDelete(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubBgpConnectionClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubBgpConnectionClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubBgpConnectionClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubBgpConnectionClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a VirtualHubBgpConnection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubBgpConnectionClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualHubName string, connectionName string, options *VirtualHubBgpConnectionClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubBgpConnectionClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualHubName, connectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *VirtualHubBgpConnectionClient) deleteCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *VirtualHubBgpConnectionClient) deleteCreateRequest(ctx context.Con
 // Get - Retrieves the details of a Virtual Hub Bgp Connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - connectionName - The name of the connection.
 //   - options - VirtualHubBgpConnectionClientGetOptions contains the optional parameters for the VirtualHubBgpConnectionClient.Get
 //     method.
 func (client *VirtualHubBgpConnectionClient) Get(ctx context.Context, resourceGroupName string, virtualHubName string, connectionName string, options *VirtualHubBgpConnectionClientGetOptions) (VirtualHubBgpConnectionClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualHubBgpConnectionClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualHubName, connectionName, options)
 	if err != nil {
 		return VirtualHubBgpConnectionClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualHubBgpConnectionClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualHubBgpConnectionClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualHubBgpConnectionClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *VirtualHubBgpConnectionClient) getCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubbgpconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubbgpconnections_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubbgpconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubbgpconnections_client.go
index d9d42dae901..80b64897afa 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubbgpconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubbgpconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualHubBgpConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualHubBgpConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualHubBgpConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualHubBgpConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +46,7 @@ func NewVirtualHubBgpConnectionsClient(subscriptionID string, credential azcore.
 
 // NewListPager - Retrieves the details of all VirtualHubBgpConnections.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - options - VirtualHubBgpConnectionsClientListOptions contains the optional parameters for the VirtualHubBgpConnectionsClient.NewListPager
@@ -58,25 +57,20 @@ func (client *VirtualHubBgpConnectionsClient) NewListPager(resourceGroupName str
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualHubBgpConnectionsClientListResponse) (VirtualHubBgpConnectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualHubBgpConnectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
+			}, nil)
 			if err != nil {
 				return VirtualHubBgpConnectionsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualHubBgpConnectionsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualHubBgpConnectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -100,7 +94,7 @@ func (client *VirtualHubBgpConnectionsClient) listCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -118,7 +112,7 @@ func (client *VirtualHubBgpConnectionsClient) listHandleResponse(resp *http.Resp
 // BeginListAdvertisedRoutes - Retrieves a list of routes the virtual hub bgp connection is advertising to the specified peer.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - hubName - The name of the virtual hub.
 //   - connectionName - The name of the virtual hub bgp connection.
@@ -130,31 +124,41 @@ func (client *VirtualHubBgpConnectionsClient) BeginListAdvertisedRoutes(ctx cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubBgpConnectionsClientListAdvertisedRoutesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubBgpConnectionsClientListAdvertisedRoutesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubBgpConnectionsClientListAdvertisedRoutesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubBgpConnectionsClientListAdvertisedRoutesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // ListAdvertisedRoutes - Retrieves a list of routes the virtual hub bgp connection is advertising to the specified peer.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubBgpConnectionsClient) listAdvertisedRoutes(ctx context.Context, resourceGroupName string, hubName string, connectionName string, options *VirtualHubBgpConnectionsClientBeginListAdvertisedRoutesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubBgpConnectionsClient.BeginListAdvertisedRoutes"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listAdvertisedRoutesCreateRequest(ctx, resourceGroupName, hubName, connectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listAdvertisedRoutesCreateRequest creates the ListAdvertisedRoutes request.
@@ -181,7 +185,7 @@ func (client *VirtualHubBgpConnectionsClient) listAdvertisedRoutesCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -190,7 +194,7 @@ func (client *VirtualHubBgpConnectionsClient) listAdvertisedRoutesCreateRequest(
 // BeginListLearnedRoutes - Retrieves a list of routes the virtual hub bgp connection has learned.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - hubName - The name of the virtual hub.
 //   - connectionName - The name of the virtual hub bgp connection.
@@ -202,31 +206,41 @@ func (client *VirtualHubBgpConnectionsClient) BeginListLearnedRoutes(ctx context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubBgpConnectionsClientListLearnedRoutesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubBgpConnectionsClientListLearnedRoutesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubBgpConnectionsClientListLearnedRoutesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubBgpConnectionsClientListLearnedRoutesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // ListLearnedRoutes - Retrieves a list of routes the virtual hub bgp connection has learned.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubBgpConnectionsClient) listLearnedRoutes(ctx context.Context, resourceGroupName string, hubName string, connectionName string, options *VirtualHubBgpConnectionsClientBeginListLearnedRoutesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubBgpConnectionsClient.BeginListLearnedRoutes"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listLearnedRoutesCreateRequest(ctx, resourceGroupName, hubName, connectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listLearnedRoutesCreateRequest creates the ListLearnedRoutes request.
@@ -253,7 +267,7 @@ func (client *VirtualHubBgpConnectionsClient) listLearnedRoutesCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubipconfiguration_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubipconfiguration_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubipconfiguration_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubipconfiguration_client.go
index e1637e783ad..2bd36082f98 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubipconfiguration_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubipconfiguration_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualHubIPConfigurationClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualHubIPConfigurationClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualHubIPConfigurationClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualHubIPConfigurationClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualHubIPConfigurationClient(subscriptionID string, credential azcore
 // BeginCreateOrUpdate - Creates a VirtualHubIpConfiguration resource if it doesn't exist else updates the existing VirtualHubIpConfiguration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - ipConfigName - The name of the ipconfig.
@@ -61,31 +60,41 @@ func (client *VirtualHubIPConfigurationClient) BeginCreateOrUpdate(ctx context.C
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubIPConfigurationClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubIPConfigurationClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubIPConfigurationClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubIPConfigurationClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a VirtualHubIpConfiguration resource if it doesn't exist else updates the existing VirtualHubIpConfiguration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubIPConfigurationClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualHubName string, ipConfigName string, parameters HubIPConfiguration, options *VirtualHubIPConfigurationClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubIPConfigurationClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualHubName, ipConfigName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *VirtualHubIPConfigurationClient) createOrUpdateCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a VirtualHubIpConfiguration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHubBgpConnection.
 //   - virtualHubName - The name of the VirtualHub.
 //   - ipConfigName - The name of the ipconfig.
@@ -133,31 +145,41 @@ func (client *VirtualHubIPConfigurationClient) BeginDelete(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubIPConfigurationClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubIPConfigurationClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubIPConfigurationClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubIPConfigurationClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a VirtualHubIpConfiguration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubIPConfigurationClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualHubName string, ipConfigName string, options *VirtualHubIPConfigurationClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubIPConfigurationClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualHubName, ipConfigName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *VirtualHubIPConfigurationClient) deleteCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *VirtualHubIPConfigurationClient) deleteCreateRequest(ctx context.C
 // Get - Retrieves the details of a Virtual Hub Ip configuration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - ipConfigName - The name of the ipconfig.
 //   - options - VirtualHubIPConfigurationClientGetOptions contains the optional parameters for the VirtualHubIPConfigurationClient.Get
 //     method.
 func (client *VirtualHubIPConfigurationClient) Get(ctx context.Context, resourceGroupName string, virtualHubName string, ipConfigName string, options *VirtualHubIPConfigurationClientGetOptions) (VirtualHubIPConfigurationClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualHubIPConfigurationClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualHubName, ipConfigName, options)
 	if err != nil {
 		return VirtualHubIPConfigurationClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualHubIPConfigurationClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualHubIPConfigurationClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualHubIPConfigurationClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *VirtualHubIPConfigurationClient) getCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *VirtualHubIPConfigurationClient) getHandleResponse(resp *http.Resp
 
 // NewListPager - Retrieves the details of all VirtualHubIpConfigurations.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - options - VirtualHubIPConfigurationClientListOptions contains the optional parameters for the VirtualHubIPConfigurationClient.NewListPager
@@ -266,25 +295,20 @@ func (client *VirtualHubIPConfigurationClient) NewListPager(resourceGroupName st
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualHubIPConfigurationClientListResponse) (VirtualHubIPConfigurationClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualHubIPConfigurationClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualHubIPConfigurationClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
+			}, nil)
 			if err != nil {
 				return VirtualHubIPConfigurationClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualHubIPConfigurationClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *VirtualHubIPConfigurationClient) listCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubroutetablev2s_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubroutetablev2s_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubroutetablev2s_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubroutetablev2s_client.go
index a21b863bfe7..421996273d8 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubroutetablev2s_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubroutetablev2s_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualHubRouteTableV2SClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualHubRouteTableV2SClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualHubRouteTableV2SClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualHubRouteTableV2SClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualHubRouteTableV2SClient(subscriptionID string, credential azcore.T
 // BeginCreateOrUpdate - Creates a VirtualHubRouteTableV2 resource if it doesn't exist else updates the existing VirtualHubRouteTableV2.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - routeTableName - The name of the VirtualHubRouteTableV2.
@@ -61,31 +60,41 @@ func (client *VirtualHubRouteTableV2SClient) BeginCreateOrUpdate(ctx context.Con
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubRouteTableV2SClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubRouteTableV2SClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubRouteTableV2SClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubRouteTableV2SClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a VirtualHubRouteTableV2 resource if it doesn't exist else updates the existing VirtualHubRouteTableV2.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubRouteTableV2SClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualHubName string, routeTableName string, virtualHubRouteTableV2Parameters VirtualHubRouteTableV2, options *VirtualHubRouteTableV2SClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubRouteTableV2SClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualHubName, routeTableName, virtualHubRouteTableV2Parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *VirtualHubRouteTableV2SClient) createOrUpdateCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, virtualHubRouteTableV2Parameters)
+	if err := runtime.MarshalAsJSON(req, virtualHubRouteTableV2Parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a VirtualHubRouteTableV2.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHubRouteTableV2.
 //   - virtualHubName - The name of the VirtualHub.
 //   - routeTableName - The name of the VirtualHubRouteTableV2.
@@ -133,31 +145,41 @@ func (client *VirtualHubRouteTableV2SClient) BeginDelete(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubRouteTableV2SClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubRouteTableV2SClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubRouteTableV2SClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubRouteTableV2SClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a VirtualHubRouteTableV2.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubRouteTableV2SClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualHubName string, routeTableName string, options *VirtualHubRouteTableV2SClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubRouteTableV2SClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualHubName, routeTableName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *VirtualHubRouteTableV2SClient) deleteCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *VirtualHubRouteTableV2SClient) deleteCreateRequest(ctx context.Con
 // Get - Retrieves the details of a VirtualHubRouteTableV2.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHubRouteTableV2.
 //   - virtualHubName - The name of the VirtualHub.
 //   - routeTableName - The name of the VirtualHubRouteTableV2.
 //   - options - VirtualHubRouteTableV2SClientGetOptions contains the optional parameters for the VirtualHubRouteTableV2SClient.Get
 //     method.
 func (client *VirtualHubRouteTableV2SClient) Get(ctx context.Context, resourceGroupName string, virtualHubName string, routeTableName string, options *VirtualHubRouteTableV2SClientGetOptions) (VirtualHubRouteTableV2SClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualHubRouteTableV2SClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualHubName, routeTableName, options)
 	if err != nil {
 		return VirtualHubRouteTableV2SClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualHubRouteTableV2SClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualHubRouteTableV2SClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualHubRouteTableV2SClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *VirtualHubRouteTableV2SClient) getCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *VirtualHubRouteTableV2SClient) getHandleResponse(resp *http.Respon
 
 // NewListPager - Retrieves the details of all VirtualHubRouteTableV2s.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - options - VirtualHubRouteTableV2SClientListOptions contains the optional parameters for the VirtualHubRouteTableV2SClient.NewListPager
@@ -266,25 +295,20 @@ func (client *VirtualHubRouteTableV2SClient) NewListPager(resourceGroupName stri
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualHubRouteTableV2SClientListResponse) (VirtualHubRouteTableV2SClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualHubRouteTableV2SClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualHubRouteTableV2SClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, virtualHubName, options)
+			}, nil)
 			if err != nil {
 				return VirtualHubRouteTableV2SClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualHubRouteTableV2SClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *VirtualHubRouteTableV2SClient) listCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubs_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubs_client.go
similarity index 76%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubs_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubs_client.go
index b3b84857f3b..3cb2a8d3046 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualhubs_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualhubs_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualHubsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualHubsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualHubsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualHubsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualHubsClient(subscriptionID string, credential azcore.TokenCredenti
 // BeginCreateOrUpdate - Creates a VirtualHub resource if it doesn't exist else updates the existing VirtualHub.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - virtualHubParameters - Parameters supplied to create or update VirtualHub.
@@ -60,31 +59,41 @@ func (client *VirtualHubsClient) BeginCreateOrUpdate(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a VirtualHub resource if it doesn't exist else updates the existing VirtualHub.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubsClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualHubName string, virtualHubParameters VirtualHub, options *VirtualHubsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualHubName, virtualHubParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *VirtualHubsClient) createOrUpdateCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, virtualHubParameters)
+	if err := runtime.MarshalAsJSON(req, virtualHubParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a VirtualHub.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - options - VirtualHubsClientBeginDeleteOptions contains the optional parameters for the VirtualHubsClient.BeginDelete method.
@@ -126,31 +138,41 @@ func (client *VirtualHubsClient) BeginDelete(ctx context.Context, resourceGroupN
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a VirtualHub.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubsClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualHubName string, options *VirtualHubsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualHubName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -173,7 +195,7 @@ func (client *VirtualHubsClient) deleteCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -182,23 +204,30 @@ func (client *VirtualHubsClient) deleteCreateRequest(ctx context.Context, resour
 // Get - Retrieves the details of a VirtualHub.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - options - VirtualHubsClientGetOptions contains the optional parameters for the VirtualHubsClient.Get method.
 func (client *VirtualHubsClient) Get(ctx context.Context, resourceGroupName string, virtualHubName string, options *VirtualHubsClientGetOptions) (VirtualHubsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualHubsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualHubName, options)
 	if err != nil {
 		return VirtualHubsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualHubsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualHubsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualHubsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -221,7 +250,7 @@ func (client *VirtualHubsClient) getCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -240,7 +269,7 @@ func (client *VirtualHubsClient) getHandleResponse(resp *http.Response) (Virtual
 // resource .
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - options - VirtualHubsClientBeginGetEffectiveVirtualHubRoutesOptions contains the optional parameters for the VirtualHubsClient.BeginGetEffectiveVirtualHubRoutes
@@ -251,11 +280,15 @@ func (client *VirtualHubsClient) BeginGetEffectiveVirtualHubRoutes(ctx context.C
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubsClientGetEffectiveVirtualHubRoutesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubsClientGetEffectiveVirtualHubRoutesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubsClientGetEffectiveVirtualHubRoutesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubsClientGetEffectiveVirtualHubRoutesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -263,20 +296,26 @@ func (client *VirtualHubsClient) BeginGetEffectiveVirtualHubRoutes(ctx context.C
 // .
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubsClient) getEffectiveVirtualHubRoutes(ctx context.Context, resourceGroupName string, virtualHubName string, options *VirtualHubsClientBeginGetEffectiveVirtualHubRoutesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubsClient.BeginGetEffectiveVirtualHubRoutes"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getEffectiveVirtualHubRoutesCreateRequest(ctx, resourceGroupName, virtualHubName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getEffectiveVirtualHubRoutesCreateRequest creates the GetEffectiveVirtualHubRoutes request.
@@ -299,11 +338,14 @@ func (client *VirtualHubsClient) getEffectiveVirtualHubRoutesCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.EffectiveRoutesParameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.EffectiveRoutesParameters)
+		if err := runtime.MarshalAsJSON(req, *options.EffectiveRoutesParameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -311,7 +353,7 @@ func (client *VirtualHubsClient) getEffectiveVirtualHubRoutesCreateRequest(ctx c
 // BeginGetInboundRoutes - Gets the inbound routes configured for the Virtual Hub on a particular connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - getInboundRoutesParameters - Parameters supplied to get the inbound routes for a connection resource.
@@ -323,31 +365,41 @@ func (client *VirtualHubsClient) BeginGetInboundRoutes(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubsClientGetInboundRoutesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubsClientGetInboundRoutesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubsClientGetInboundRoutesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubsClientGetInboundRoutesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetInboundRoutes - Gets the inbound routes configured for the Virtual Hub on a particular connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubsClient) getInboundRoutes(ctx context.Context, resourceGroupName string, virtualHubName string, getInboundRoutesParameters GetInboundRoutesParameters, options *VirtualHubsClientBeginGetInboundRoutesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubsClient.BeginGetInboundRoutes"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getInboundRoutesCreateRequest(ctx, resourceGroupName, virtualHubName, getInboundRoutesParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getInboundRoutesCreateRequest creates the GetInboundRoutes request.
@@ -370,16 +422,19 @@ func (client *VirtualHubsClient) getInboundRoutesCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, getInboundRoutesParameters)
+	if err := runtime.MarshalAsJSON(req, getInboundRoutesParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginGetOutboundRoutes - Gets the outbound routes configured for the Virtual Hub on a particular connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - getOutboundRoutesParameters - Parameters supplied to get the outbound routes for a connection resource.
@@ -391,31 +446,41 @@ func (client *VirtualHubsClient) BeginGetOutboundRoutes(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubsClientGetOutboundRoutesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualHubsClientGetOutboundRoutesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualHubsClientGetOutboundRoutesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualHubsClientGetOutboundRoutesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetOutboundRoutes - Gets the outbound routes configured for the Virtual Hub on a particular connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualHubsClient) getOutboundRoutes(ctx context.Context, resourceGroupName string, virtualHubName string, getOutboundRoutesParameters GetOutboundRoutesParameters, options *VirtualHubsClientBeginGetOutboundRoutesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualHubsClient.BeginGetOutboundRoutes"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getOutboundRoutesCreateRequest(ctx, resourceGroupName, virtualHubName, getOutboundRoutesParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getOutboundRoutesCreateRequest creates the GetOutboundRoutes request.
@@ -438,15 +503,18 @@ func (client *VirtualHubsClient) getOutboundRoutesCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, getOutboundRoutesParameters)
+	if err := runtime.MarshalAsJSON(req, getOutboundRoutesParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // NewListPager - Lists all the VirtualHubs in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - VirtualHubsClientListOptions contains the optional parameters for the VirtualHubsClient.NewListPager method.
 func (client *VirtualHubsClient) NewListPager(options *VirtualHubsClientListOptions) *runtime.Pager[VirtualHubsClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[VirtualHubsClientListResponse]{
@@ -454,25 +522,20 @@ func (client *VirtualHubsClient) NewListPager(options *VirtualHubsClientListOpti
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualHubsClientListResponse) (VirtualHubsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualHubsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VirtualHubsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualHubsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualHubsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -488,7 +551,7 @@ func (client *VirtualHubsClient) listCreateRequest(ctx context.Context, options
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -505,7 +568,7 @@ func (client *VirtualHubsClient) listHandleResponse(resp *http.Response) (Virtua
 
 // NewListByResourceGroupPager - Lists all the VirtualHubs in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - options - VirtualHubsClientListByResourceGroupOptions contains the optional parameters for the VirtualHubsClient.NewListByResourceGroupPager
 //     method.
@@ -515,25 +578,20 @@ func (client *VirtualHubsClient) NewListByResourceGroupPager(resourceGroupName s
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualHubsClientListByResourceGroupResponse) (VirtualHubsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualHubsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VirtualHubsClientListByResourceGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualHubsClientListByResourceGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualHubsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -553,7 +611,7 @@ func (client *VirtualHubsClient) listByResourceGroupCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -571,24 +629,31 @@ func (client *VirtualHubsClient) listByResourceGroupHandleResponse(resp *http.Re
 // UpdateTags - Updates VirtualHub tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualHub.
 //   - virtualHubName - The name of the VirtualHub.
 //   - virtualHubParameters - Parameters supplied to update VirtualHub tags.
 //   - options - VirtualHubsClientUpdateTagsOptions contains the optional parameters for the VirtualHubsClient.UpdateTags method.
 func (client *VirtualHubsClient) UpdateTags(ctx context.Context, resourceGroupName string, virtualHubName string, virtualHubParameters TagsObject, options *VirtualHubsClientUpdateTagsOptions) (VirtualHubsClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "VirtualHubsClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, virtualHubName, virtualHubParameters, options)
 	if err != nil {
 		return VirtualHubsClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualHubsClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualHubsClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualHubsClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -611,10 +676,13 @@ func (client *VirtualHubsClient) updateTagsCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, virtualHubParameters)
+	if err := runtime.MarshalAsJSON(req, virtualHubParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkgatewayconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkgatewayconnections_client.go
similarity index 77%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkgatewayconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkgatewayconnections_client.go
index c80bc83b74d..f1bdd90b316 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkgatewayconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkgatewayconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualNetworkGatewayConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualNetworkGatewayConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualNetworkGatewayConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualNetworkGatewayConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualNetworkGatewayConnectionsClient(subscriptionID string, credential
 // BeginCreateOrUpdate - Creates or updates a virtual network gateway connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The name of the virtual network gateway connection.
 //   - parameters - Parameters supplied to the create or update virtual network gateway connection operation.
@@ -60,31 +59,41 @@ func (client *VirtualNetworkGatewayConnectionsClient) BeginCreateOrUpdate(ctx co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewayConnectionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewayConnectionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a virtual network gateway connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewayConnectionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, parameters VirtualNetworkGatewayConnection, options *VirtualNetworkGatewayConnectionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayConnectionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *VirtualNetworkGatewayConnectionsClient) createOrUpdateCreateReques
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified virtual network Gateway connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The name of the virtual network gateway connection.
 //   - options - VirtualNetworkGatewayConnectionsClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *VirtualNetworkGatewayConnectionsClient) BeginDelete(ctx context.Co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewayConnectionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewayConnectionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified virtual network Gateway connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewayConnectionsClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, options *VirtualNetworkGatewayConnectionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayConnectionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) deleteCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,24 +205,31 @@ func (client *VirtualNetworkGatewayConnectionsClient) deleteCreateRequest(ctx co
 // Get - Gets the specified virtual network gateway connection by resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The name of the virtual network gateway connection.
 //   - options - VirtualNetworkGatewayConnectionsClientGetOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.Get
 //     method.
 func (client *VirtualNetworkGatewayConnectionsClient) Get(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, options *VirtualNetworkGatewayConnectionsClientGetOptions) (VirtualNetworkGatewayConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, options)
 	if err != nil {
 		return VirtualNetworkGatewayConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworkGatewayConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworkGatewayConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworkGatewayConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -223,7 +252,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) getCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -241,7 +270,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) getHandleResponse(resp *ht
 // BeginGetIkeSas - Lists IKE Security Associations for the virtual network gateway connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The name of the virtual network gateway Connection.
 //   - options - VirtualNetworkGatewayConnectionsClientBeginGetIkeSasOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginGetIkeSas
@@ -252,31 +281,41 @@ func (client *VirtualNetworkGatewayConnectionsClient) BeginGetIkeSas(ctx context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientGetIkeSasResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientGetIkeSasResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewayConnectionsClientGetIkeSasResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewayConnectionsClientGetIkeSasResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetIkeSas - Lists IKE Security Associations for the virtual network gateway connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewayConnectionsClient) getIkeSas(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, options *VirtualNetworkGatewayConnectionsClientBeginGetIkeSasOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayConnectionsClient.BeginGetIkeSas"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getIkeSasCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getIkeSasCreateRequest creates the GetIkeSas request.
@@ -299,7 +338,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) getIkeSasCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -309,24 +348,31 @@ func (client *VirtualNetworkGatewayConnectionsClient) getIkeSasCreateRequest(ctx
 // network gateway connection shared key through Network resource provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The virtual network gateway connection shared key name.
 //   - options - VirtualNetworkGatewayConnectionsClientGetSharedKeyOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.GetSharedKey
 //     method.
 func (client *VirtualNetworkGatewayConnectionsClient) GetSharedKey(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, options *VirtualNetworkGatewayConnectionsClientGetSharedKeyOptions) (VirtualNetworkGatewayConnectionsClientGetSharedKeyResponse, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayConnectionsClient.GetSharedKey"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getSharedKeyCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, options)
 	if err != nil {
 		return VirtualNetworkGatewayConnectionsClientGetSharedKeyResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworkGatewayConnectionsClientGetSharedKeyResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworkGatewayConnectionsClientGetSharedKeyResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworkGatewayConnectionsClientGetSharedKeyResponse{}, err
 	}
-	return client.getSharedKeyHandleResponse(resp)
+	resp, err := client.getSharedKeyHandleResponse(httpResp)
+	return resp, err
 }
 
 // getSharedKeyCreateRequest creates the GetSharedKey request.
@@ -349,7 +395,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) getSharedKeyCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -367,7 +413,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) getSharedKeyHandleResponse
 // NewListPager - The List VirtualNetworkGatewayConnections operation retrieves all the virtual network gateways connections
 // created.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - VirtualNetworkGatewayConnectionsClientListOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.NewListPager
 //     method.
@@ -377,25 +423,20 @@ func (client *VirtualNetworkGatewayConnectionsClient) NewListPager(resourceGroup
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualNetworkGatewayConnectionsClientListResponse) (VirtualNetworkGatewayConnectionsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualNetworkGatewayConnectionsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VirtualNetworkGatewayConnectionsClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualNetworkGatewayConnectionsClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualNetworkGatewayConnectionsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -415,7 +456,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) listCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -433,7 +474,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) listHandleResponse(resp *h
 // BeginResetConnection - Resets the virtual network gateway connection specified.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The name of the virtual network gateway Connection.
 //   - options - VirtualNetworkGatewayConnectionsClientBeginResetConnectionOptions contains the optional parameters for the VirtualNetworkGatewayConnectionsClient.BeginResetConnection
@@ -444,31 +485,41 @@ func (client *VirtualNetworkGatewayConnectionsClient) BeginResetConnection(ctx c
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientResetConnectionResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientResetConnectionResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewayConnectionsClientResetConnectionResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewayConnectionsClientResetConnectionResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // ResetConnection - Resets the virtual network gateway connection specified.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewayConnectionsClient) resetConnection(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, options *VirtualNetworkGatewayConnectionsClientBeginResetConnectionOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayConnectionsClient.BeginResetConnection"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.resetConnectionCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // resetConnectionCreateRequest creates the ResetConnection request.
@@ -491,7 +542,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) resetConnectionCreateReque
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -502,7 +553,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) resetConnectionCreateReque
 // through Network resource provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The virtual network gateway connection reset shared key Name.
 //   - parameters - Parameters supplied to the begin reset virtual network gateway connection shared key operation through network
@@ -515,11 +566,15 @@ func (client *VirtualNetworkGatewayConnectionsClient) BeginResetSharedKey(ctx co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientResetSharedKeyResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientResetSharedKeyResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewayConnectionsClientResetSharedKeyResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewayConnectionsClientResetSharedKeyResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -528,20 +583,26 @@ func (client *VirtualNetworkGatewayConnectionsClient) BeginResetSharedKey(ctx co
 // through Network resource provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewayConnectionsClient) resetSharedKey(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, parameters ConnectionResetSharedKey, options *VirtualNetworkGatewayConnectionsClientBeginResetSharedKeyOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayConnectionsClient.BeginResetSharedKey"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.resetSharedKeyCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // resetSharedKeyCreateRequest creates the ResetSharedKey request.
@@ -564,10 +625,13 @@ func (client *VirtualNetworkGatewayConnectionsClient) resetSharedKeyCreateReques
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginSetSharedKey - The Put VirtualNetworkGatewayConnectionSharedKey operation sets the virtual network gateway connection
@@ -575,7 +639,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) resetSharedKeyCreateReques
 // Network resource provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The virtual network gateway connection name.
 //   - parameters - Parameters supplied to the Begin Set Virtual Network Gateway connection Shared key operation throughNetwork
@@ -588,11 +652,15 @@ func (client *VirtualNetworkGatewayConnectionsClient) BeginSetSharedKey(ctx cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientSetSharedKeyResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientSetSharedKeyResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewayConnectionsClientSetSharedKeyResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewayConnectionsClientSetSharedKeyResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -601,20 +669,26 @@ func (client *VirtualNetworkGatewayConnectionsClient) BeginSetSharedKey(ctx cont
 // Network resource provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewayConnectionsClient) setSharedKey(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, parameters ConnectionSharedKey, options *VirtualNetworkGatewayConnectionsClientBeginSetSharedKeyOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayConnectionsClient.BeginSetSharedKey"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.setSharedKeyCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // setSharedKeyCreateRequest creates the SetSharedKey request.
@@ -637,16 +711,19 @@ func (client *VirtualNetworkGatewayConnectionsClient) setSharedKeyCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginStartPacketCapture - Starts packet capture on virtual network gateway connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The name of the virtual network gateway connection.
 //   - options - VirtualNetworkGatewayConnectionsClientBeginStartPacketCaptureOptions contains the optional parameters for the
@@ -657,31 +734,41 @@ func (client *VirtualNetworkGatewayConnectionsClient) BeginStartPacketCapture(ct
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientStartPacketCaptureResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientStartPacketCaptureResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewayConnectionsClientStartPacketCaptureResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewayConnectionsClientStartPacketCaptureResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // StartPacketCapture - Starts packet capture on virtual network gateway connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewayConnectionsClient) startPacketCapture(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, options *VirtualNetworkGatewayConnectionsClientBeginStartPacketCaptureOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayConnectionsClient.BeginStartPacketCapture"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startPacketCaptureCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startPacketCaptureCreateRequest creates the StartPacketCapture request.
@@ -704,11 +791,14 @@ func (client *VirtualNetworkGatewayConnectionsClient) startPacketCaptureCreateRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.Parameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.Parameters)
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -716,7 +806,7 @@ func (client *VirtualNetworkGatewayConnectionsClient) startPacketCaptureCreateRe
 // BeginStopPacketCapture - Stops packet capture on virtual network gateway connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The name of the virtual network gateway Connection.
 //   - parameters - Virtual network gateway packet capture parameters supplied to stop packet capture on gateway connection.
@@ -728,31 +818,41 @@ func (client *VirtualNetworkGatewayConnectionsClient) BeginStopPacketCapture(ctx
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientStopPacketCaptureResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientStopPacketCaptureResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewayConnectionsClientStopPacketCaptureResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewayConnectionsClientStopPacketCaptureResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // StopPacketCapture - Stops packet capture on virtual network gateway connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewayConnectionsClient) stopPacketCapture(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, parameters VPNPacketCaptureStopParameters, options *VirtualNetworkGatewayConnectionsClientBeginStopPacketCaptureOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayConnectionsClient.BeginStopPacketCapture"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.stopPacketCaptureCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // stopPacketCaptureCreateRequest creates the StopPacketCapture request.
@@ -775,16 +875,19 @@ func (client *VirtualNetworkGatewayConnectionsClient) stopPacketCaptureCreateReq
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginUpdateTags - Updates a virtual network gateway connection tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The name of the virtual network gateway connection.
 //   - parameters - Parameters supplied to update virtual network gateway connection tags.
@@ -796,31 +899,41 @@ func (client *VirtualNetworkGatewayConnectionsClient) BeginUpdateTags(ctx contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientUpdateTagsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayConnectionsClientUpdateTagsResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewayConnectionsClientUpdateTagsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewayConnectionsClientUpdateTagsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // UpdateTags - Updates a virtual network gateway connection tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewayConnectionsClient) updateTags(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, parameters TagsObject, options *VirtualNetworkGatewayConnectionsClientBeginUpdateTagsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayConnectionsClient.BeginUpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -843,8 +956,11 @@ func (client *VirtualNetworkGatewayConnectionsClient) updateTagsCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkgatewaynatrules_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkgatewaynatrules_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkgatewaynatrules_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkgatewaynatrules_client.go
index 67293b92046..28dd7a3b72a 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkgatewaynatrules_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkgatewaynatrules_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualNetworkGatewayNatRulesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualNetworkGatewayNatRulesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualNetworkGatewayNatRulesClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualNetworkGatewayNatRulesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewVirtualNetworkGatewayNatRulesClient(subscriptionID string, credential az
 // nat rules.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the Virtual Network Gateway.
 //   - virtualNetworkGatewayName - The name of the gateway.
 //   - natRuleName - The name of the nat rule.
@@ -62,11 +61,15 @@ func (client *VirtualNetworkGatewayNatRulesClient) BeginCreateOrUpdate(ctx conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayNatRulesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayNatRulesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewayNatRulesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewayNatRulesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -74,20 +77,26 @@ func (client *VirtualNetworkGatewayNatRulesClient) BeginCreateOrUpdate(ctx conte
 // nat rules.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewayNatRulesClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, natRuleName string, natRuleParameters VirtualNetworkGatewayNatRule, options *VirtualNetworkGatewayNatRulesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayNatRulesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, natRuleName, natRuleParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -114,16 +123,19 @@ func (client *VirtualNetworkGatewayNatRulesClient) createOrUpdateCreateRequest(c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, natRuleParameters)
+	if err := runtime.MarshalAsJSON(req, natRuleParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a nat rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the Virtual Network Gateway.
 //   - virtualNetworkGatewayName - The name of the gateway.
 //   - natRuleName - The name of the nat rule.
@@ -135,31 +147,41 @@ func (client *VirtualNetworkGatewayNatRulesClient) BeginDelete(ctx context.Conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayNatRulesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewayNatRulesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewayNatRulesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewayNatRulesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a nat rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewayNatRulesClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, natRuleName string, options *VirtualNetworkGatewayNatRulesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayNatRulesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, natRuleName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -186,7 +208,7 @@ func (client *VirtualNetworkGatewayNatRulesClient) deleteCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -195,25 +217,32 @@ func (client *VirtualNetworkGatewayNatRulesClient) deleteCreateRequest(ctx conte
 // Get - Retrieves the details of a nat rule.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the Virtual Network Gateway.
 //   - virtualNetworkGatewayName - The name of the gateway.
 //   - natRuleName - The name of the nat rule.
 //   - options - VirtualNetworkGatewayNatRulesClientGetOptions contains the optional parameters for the VirtualNetworkGatewayNatRulesClient.Get
 //     method.
 func (client *VirtualNetworkGatewayNatRulesClient) Get(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, natRuleName string, options *VirtualNetworkGatewayNatRulesClientGetOptions) (VirtualNetworkGatewayNatRulesClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewayNatRulesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, natRuleName, options)
 	if err != nil {
 		return VirtualNetworkGatewayNatRulesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworkGatewayNatRulesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworkGatewayNatRulesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworkGatewayNatRulesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -240,7 +269,7 @@ func (client *VirtualNetworkGatewayNatRulesClient) getCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -257,7 +286,7 @@ func (client *VirtualNetworkGatewayNatRulesClient) getHandleResponse(resp *http.
 
 // NewListByVirtualNetworkGatewayPager - Retrieves all nat rules for a particular virtual network gateway.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the virtual network gateway.
 //   - virtualNetworkGatewayName - The name of the gateway.
 //   - options - VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayOptions contains the optional parameters for the
@@ -268,25 +297,20 @@ func (client *VirtualNetworkGatewayNatRulesClient) NewListByVirtualNetworkGatewa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayResponse) (VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByVirtualNetworkGatewayCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualNetworkGatewayNatRulesClient.NewListByVirtualNetworkGatewayPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByVirtualNetworkGatewayCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
+			}, nil)
 			if err != nil {
 				return VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualNetworkGatewayNatRulesClientListByVirtualNetworkGatewayResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByVirtualNetworkGatewayHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -310,7 +334,7 @@ func (client *VirtualNetworkGatewayNatRulesClient) listByVirtualNetworkGatewayCr
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkgateways_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkgateways_client.go
similarity index 76%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkgateways_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkgateways_client.go
index 9705a5842b1..e1bf690f8e5 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkgateways_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkgateways_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualNetworkGatewaysClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualNetworkGatewaysClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualNetworkGatewaysClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualNetworkGatewaysClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualNetworkGatewaysClient(subscriptionID string, credential azcore.To
 // BeginCreateOrUpdate - Creates or updates a virtual network gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - parameters - Parameters supplied to create or update virtual network gateway operation.
@@ -60,31 +59,41 @@ func (client *VirtualNetworkGatewaysClient) BeginCreateOrUpdate(ctx context.Cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a virtual network gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, parameters VirtualNetworkGateway, options *VirtualNetworkGatewaysClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *VirtualNetworkGatewaysClient) createOrUpdateCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified virtual network gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - options - VirtualNetworkGatewaysClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *VirtualNetworkGatewaysClient) BeginDelete(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified virtual network gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, options *VirtualNetworkGatewaysClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *VirtualNetworkGatewaysClient) deleteCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -184,7 +206,7 @@ func (client *VirtualNetworkGatewaysClient) deleteCreateRequest(ctx context.Cont
 // resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - request - The parameters are supplied to disconnect vpn connections.
@@ -196,11 +218,15 @@ func (client *VirtualNetworkGatewaysClient) BeginDisconnectVirtualNetworkGateway
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientDisconnectVirtualNetworkGatewayVPNConnectionsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientDisconnectVirtualNetworkGatewayVPNConnectionsResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientDisconnectVirtualNetworkGatewayVPNConnectionsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientDisconnectVirtualNetworkGatewayVPNConnectionsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -208,20 +234,26 @@ func (client *VirtualNetworkGatewaysClient) BeginDisconnectVirtualNetworkGateway
 // resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) disconnectVirtualNetworkGatewayVPNConnections(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, request P2SVPNConnectionRequest, options *VirtualNetworkGatewaysClientBeginDisconnectVirtualNetworkGatewayVPNConnectionsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginDisconnectVirtualNetworkGatewayVPNConnections"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.disconnectVirtualNetworkGatewayVPNConnectionsCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, request, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // disconnectVirtualNetworkGatewayVPNConnectionsCreateRequest creates the DisconnectVirtualNetworkGatewayVPNConnections request.
@@ -244,17 +276,20 @@ func (client *VirtualNetworkGatewaysClient) disconnectVirtualNetworkGatewayVPNCo
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, request)
+	if err := runtime.MarshalAsJSON(req, request); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginGenerateVPNProfile - Generates VPN profile for P2S client of the virtual network gateway in the specified resource
 // group. Used for IKEV2 and radius based authentication.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - parameters - Parameters supplied to the generate virtual network gateway VPN client package operation.
@@ -266,11 +301,15 @@ func (client *VirtualNetworkGatewaysClient) BeginGenerateVPNProfile(ctx context.
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGenerateVPNProfileResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGenerateVPNProfileResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientGenerateVPNProfileResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientGenerateVPNProfileResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -278,20 +317,26 @@ func (client *VirtualNetworkGatewaysClient) BeginGenerateVPNProfile(ctx context.
 // Used for IKEV2 and radius based authentication.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) generateVPNProfile(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, parameters VPNClientParameters, options *VirtualNetworkGatewaysClientBeginGenerateVPNProfileOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginGenerateVPNProfile"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.generateVPNProfileCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // generateVPNProfileCreateRequest creates the GenerateVPNProfile request.
@@ -314,17 +359,20 @@ func (client *VirtualNetworkGatewaysClient) generateVPNProfileCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginGeneratevpnclientpackage - Generates VPN client package for P2S client of the virtual network gateway in the specified
 // resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - parameters - Parameters supplied to the generate virtual network gateway VPN client package operation.
@@ -336,11 +384,15 @@ func (client *VirtualNetworkGatewaysClient) BeginGeneratevpnclientpackage(ctx co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGeneratevpnclientpackageResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGeneratevpnclientpackageResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientGeneratevpnclientpackageResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientGeneratevpnclientpackageResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -348,20 +400,26 @@ func (client *VirtualNetworkGatewaysClient) BeginGeneratevpnclientpackage(ctx co
 // resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) generatevpnclientpackage(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, parameters VPNClientParameters, options *VirtualNetworkGatewaysClientBeginGeneratevpnclientpackageOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginGeneratevpnclientpackage"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.generatevpnclientpackageCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // generatevpnclientpackageCreateRequest creates the Generatevpnclientpackage request.
@@ -384,33 +442,43 @@ func (client *VirtualNetworkGatewaysClient) generatevpnclientpackageCreateReques
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // Get - Gets the specified virtual network gateway by resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - options - VirtualNetworkGatewaysClientGetOptions contains the optional parameters for the VirtualNetworkGatewaysClient.Get
 //     method.
 func (client *VirtualNetworkGatewaysClient) Get(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, options *VirtualNetworkGatewaysClientGetOptions) (VirtualNetworkGatewaysClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
 	if err != nil {
 		return VirtualNetworkGatewaysClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworkGatewaysClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworkGatewaysClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworkGatewaysClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -433,7 +501,7 @@ func (client *VirtualNetworkGatewaysClient) getCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -452,7 +520,7 @@ func (client *VirtualNetworkGatewaysClient) getHandleResponse(resp *http.Respons
 // specified peer.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - peer - The IP address of the peer.
@@ -464,11 +532,15 @@ func (client *VirtualNetworkGatewaysClient) BeginGetAdvertisedRoutes(ctx context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetAdvertisedRoutesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetAdvertisedRoutesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientGetAdvertisedRoutesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientGetAdvertisedRoutesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -476,20 +548,26 @@ func (client *VirtualNetworkGatewaysClient) BeginGetAdvertisedRoutes(ctx context
 // peer.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) getAdvertisedRoutes(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, peer string, options *VirtualNetworkGatewaysClientBeginGetAdvertisedRoutesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginGetAdvertisedRoutes"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getAdvertisedRoutesCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, peer, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getAdvertisedRoutesCreateRequest creates the GetAdvertisedRoutes request.
@@ -513,7 +591,7 @@ func (client *VirtualNetworkGatewaysClient) getAdvertisedRoutesCreateRequest(ctx
 	}
 	reqQP := req.Raw().URL.Query()
 	reqQP.Set("peer", peer)
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -522,7 +600,7 @@ func (client *VirtualNetworkGatewaysClient) getAdvertisedRoutesCreateRequest(ctx
 // BeginGetBgpPeerStatus - The GetBgpPeerStatus operation retrieves the status of all BGP peers.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - options - VirtualNetworkGatewaysClientBeginGetBgpPeerStatusOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetBgpPeerStatus
@@ -533,31 +611,41 @@ func (client *VirtualNetworkGatewaysClient) BeginGetBgpPeerStatus(ctx context.Co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetBgpPeerStatusResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetBgpPeerStatusResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientGetBgpPeerStatusResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientGetBgpPeerStatusResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetBgpPeerStatus - The GetBgpPeerStatus operation retrieves the status of all BGP peers.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) getBgpPeerStatus(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, options *VirtualNetworkGatewaysClientBeginGetBgpPeerStatusOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginGetBgpPeerStatus"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getBgpPeerStatusCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getBgpPeerStatusCreateRequest creates the GetBgpPeerStatus request.
@@ -583,7 +671,7 @@ func (client *VirtualNetworkGatewaysClient) getBgpPeerStatusCreateRequest(ctx co
 	if options != nil && options.Peer != nil {
 		reqQP.Set("peer", *options.Peer)
 	}
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -593,7 +681,7 @@ func (client *VirtualNetworkGatewaysClient) getBgpPeerStatusCreateRequest(ctx co
 // learned from BGP peers.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - options - VirtualNetworkGatewaysClientBeginGetLearnedRoutesOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetLearnedRoutes
@@ -604,11 +692,15 @@ func (client *VirtualNetworkGatewaysClient) BeginGetLearnedRoutes(ctx context.Co
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetLearnedRoutesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetLearnedRoutesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientGetLearnedRoutesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientGetLearnedRoutesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -616,20 +708,26 @@ func (client *VirtualNetworkGatewaysClient) BeginGetLearnedRoutes(ctx context.Co
 // learned from BGP peers.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) getLearnedRoutes(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, options *VirtualNetworkGatewaysClientBeginGetLearnedRoutesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginGetLearnedRoutes"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getLearnedRoutesCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getLearnedRoutesCreateRequest creates the GetLearnedRoutes request.
@@ -652,7 +750,7 @@ func (client *VirtualNetworkGatewaysClient) getLearnedRoutesCreateRequest(ctx co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -662,7 +760,7 @@ func (client *VirtualNetworkGatewaysClient) getLearnedRoutesCreateRequest(ctx co
 // resource group. The profile needs to be generated first using generateVpnProfile.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - options - VirtualNetworkGatewaysClientBeginGetVPNProfilePackageURLOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginGetVPNProfilePackageURL
@@ -673,11 +771,15 @@ func (client *VirtualNetworkGatewaysClient) BeginGetVPNProfilePackageURL(ctx con
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetVPNProfilePackageURLResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetVPNProfilePackageURLResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientGetVPNProfilePackageURLResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientGetVPNProfilePackageURLResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -685,20 +787,26 @@ func (client *VirtualNetworkGatewaysClient) BeginGetVPNProfilePackageURL(ctx con
 // resource group. The profile needs to be generated first using generateVpnProfile.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) getVPNProfilePackageURL(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, options *VirtualNetworkGatewaysClientBeginGetVPNProfilePackageURLOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginGetVPNProfilePackageURL"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getVPNProfilePackageURLCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getVPNProfilePackageURLCreateRequest creates the GetVPNProfilePackageURL request.
@@ -721,7 +829,7 @@ func (client *VirtualNetworkGatewaysClient) getVPNProfilePackageURLCreateRequest
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -731,7 +839,7 @@ func (client *VirtualNetworkGatewaysClient) getVPNProfilePackageURLCreateRequest
 // gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - options - VirtualNetworkGatewaysClientBeginGetVpnclientConnectionHealthOptions contains the optional parameters for the
@@ -742,11 +850,15 @@ func (client *VirtualNetworkGatewaysClient) BeginGetVpnclientConnectionHealth(ct
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetVpnclientConnectionHealthResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetVpnclientConnectionHealthResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientGetVpnclientConnectionHealthResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientGetVpnclientConnectionHealthResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -754,20 +866,26 @@ func (client *VirtualNetworkGatewaysClient) BeginGetVpnclientConnectionHealth(ct
 // gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) getVpnclientConnectionHealth(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, options *VirtualNetworkGatewaysClientBeginGetVpnclientConnectionHealthOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginGetVpnclientConnectionHealth"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getVpnclientConnectionHealthCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getVpnclientConnectionHealthCreateRequest creates the GetVpnclientConnectionHealth request.
@@ -790,7 +908,7 @@ func (client *VirtualNetworkGatewaysClient) getVpnclientConnectionHealthCreateRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -801,7 +919,7 @@ func (client *VirtualNetworkGatewaysClient) getVpnclientConnectionHealthCreateRe
 // provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The virtual network gateway name.
 //   - options - VirtualNetworkGatewaysClientBeginGetVpnclientIPSecParametersOptions contains the optional parameters for the
@@ -812,11 +930,15 @@ func (client *VirtualNetworkGatewaysClient) BeginGetVpnclientIPSecParameters(ctx
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetVpnclientIPSecParametersResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientGetVpnclientIPSecParametersResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientGetVpnclientIPSecParametersResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientGetVpnclientIPSecParametersResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -825,20 +947,26 @@ func (client *VirtualNetworkGatewaysClient) BeginGetVpnclientIPSecParameters(ctx
 // provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) getVpnclientIPSecParameters(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, options *VirtualNetworkGatewaysClientBeginGetVpnclientIPSecParametersOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginGetVpnclientIPSecParameters"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getVpnclientIPSecParametersCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getVpnclientIPSecParametersCreateRequest creates the GetVpnclientIPSecParameters request.
@@ -861,7 +989,7 @@ func (client *VirtualNetworkGatewaysClient) getVpnclientIPSecParametersCreateReq
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -869,7 +997,7 @@ func (client *VirtualNetworkGatewaysClient) getVpnclientIPSecParametersCreateReq
 
 // NewListPager - Gets all virtual network gateways by resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - VirtualNetworkGatewaysClientListOptions contains the optional parameters for the VirtualNetworkGatewaysClient.NewListPager
 //     method.
@@ -879,25 +1007,20 @@ func (client *VirtualNetworkGatewaysClient) NewListPager(resourceGroupName strin
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualNetworkGatewaysClientListResponse) (VirtualNetworkGatewaysClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualNetworkGatewaysClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VirtualNetworkGatewaysClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualNetworkGatewaysClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualNetworkGatewaysClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -917,7 +1040,7 @@ func (client *VirtualNetworkGatewaysClient) listCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -934,7 +1057,7 @@ func (client *VirtualNetworkGatewaysClient) listHandleResponse(resp *http.Respon
 
 // NewListConnectionsPager - Gets all the connections in a virtual network gateway.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - options - VirtualNetworkGatewaysClientListConnectionsOptions contains the optional parameters for the VirtualNetworkGatewaysClient.NewListConnectionsPager
@@ -945,25 +1068,20 @@ func (client *VirtualNetworkGatewaysClient) NewListConnectionsPager(resourceGrou
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualNetworkGatewaysClientListConnectionsResponse) (VirtualNetworkGatewaysClientListConnectionsResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listConnectionsCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualNetworkGatewaysClient.NewListConnectionsPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listConnectionsCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
+			}, nil)
 			if err != nil {
 				return VirtualNetworkGatewaysClientListConnectionsResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualNetworkGatewaysClientListConnectionsResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualNetworkGatewaysClientListConnectionsResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listConnectionsHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -987,7 +1105,7 @@ func (client *VirtualNetworkGatewaysClient) listConnectionsCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1005,7 +1123,7 @@ func (client *VirtualNetworkGatewaysClient) listConnectionsHandleResponse(resp *
 // BeginReset - Resets the primary of the virtual network gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - options - VirtualNetworkGatewaysClientBeginResetOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginReset
@@ -1016,31 +1134,41 @@ func (client *VirtualNetworkGatewaysClient) BeginReset(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientResetResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientResetResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientResetResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientResetResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Reset - Resets the primary of the virtual network gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) reset(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, options *VirtualNetworkGatewaysClientBeginResetOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginReset"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.resetCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // resetCreateRequest creates the Reset request.
@@ -1066,7 +1194,7 @@ func (client *VirtualNetworkGatewaysClient) resetCreateRequest(ctx context.Conte
 	if options != nil && options.GatewayVip != nil {
 		reqQP.Set("gatewayVip", *options.GatewayVip)
 	}
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1076,7 +1204,7 @@ func (client *VirtualNetworkGatewaysClient) resetCreateRequest(ctx context.Conte
 // group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - options - VirtualNetworkGatewaysClientBeginResetVPNClientSharedKeyOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginResetVPNClientSharedKey
@@ -1087,31 +1215,41 @@ func (client *VirtualNetworkGatewaysClient) BeginResetVPNClientSharedKey(ctx con
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientResetVPNClientSharedKeyResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientResetVPNClientSharedKeyResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientResetVPNClientSharedKeyResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientResetVPNClientSharedKeyResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // ResetVPNClientSharedKey - Resets the VPN client shared key of the virtual network gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) resetVPNClientSharedKey(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, options *VirtualNetworkGatewaysClientBeginResetVPNClientSharedKeyOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginResetVPNClientSharedKey"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.resetVPNClientSharedKeyCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // resetVPNClientSharedKeyCreateRequest creates the ResetVPNClientSharedKey request.
@@ -1134,7 +1272,7 @@ func (client *VirtualNetworkGatewaysClient) resetVPNClientSharedKeyCreateRequest
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1144,7 +1282,7 @@ func (client *VirtualNetworkGatewaysClient) resetVPNClientSharedKeyCreateRequest
 // of virtual network gateway in the specified resource group through Network resource provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - vpnclientIPSecParams - Parameters supplied to the Begin Set vpnclient ipsec parameters of Virtual Network Gateway P2S client
@@ -1157,11 +1295,15 @@ func (client *VirtualNetworkGatewaysClient) BeginSetVpnclientIPSecParameters(ctx
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientSetVpnclientIPSecParametersResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientSetVpnclientIPSecParametersResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientSetVpnclientIPSecParametersResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientSetVpnclientIPSecParametersResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -1169,20 +1311,26 @@ func (client *VirtualNetworkGatewaysClient) BeginSetVpnclientIPSecParameters(ctx
 // of virtual network gateway in the specified resource group through Network resource provider.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) setVpnclientIPSecParameters(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, vpnclientIPSecParams VPNClientIPsecParameters, options *VirtualNetworkGatewaysClientBeginSetVpnclientIPSecParametersOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginSetVpnclientIPSecParameters"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.setVpnclientIPSecParametersCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, vpnclientIPSecParams, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // setVpnclientIPSecParametersCreateRequest creates the SetVpnclientIPSecParameters request.
@@ -1205,16 +1353,19 @@ func (client *VirtualNetworkGatewaysClient) setVpnclientIPSecParametersCreateReq
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vpnclientIPSecParams)
+	if err := runtime.MarshalAsJSON(req, vpnclientIPSecParams); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginStartPacketCapture - Starts packet capture on virtual network gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - options - VirtualNetworkGatewaysClientBeginStartPacketCaptureOptions contains the optional parameters for the VirtualNetworkGatewaysClient.BeginStartPacketCapture
@@ -1225,31 +1376,41 @@ func (client *VirtualNetworkGatewaysClient) BeginStartPacketCapture(ctx context.
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientStartPacketCaptureResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientStartPacketCaptureResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientStartPacketCaptureResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientStartPacketCaptureResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // StartPacketCapture - Starts packet capture on virtual network gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) startPacketCapture(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, options *VirtualNetworkGatewaysClientBeginStartPacketCaptureOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginStartPacketCapture"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startPacketCaptureCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startPacketCaptureCreateRequest creates the StartPacketCapture request.
@@ -1272,11 +1433,14 @@ func (client *VirtualNetworkGatewaysClient) startPacketCaptureCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.Parameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.Parameters)
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -1284,7 +1448,7 @@ func (client *VirtualNetworkGatewaysClient) startPacketCaptureCreateRequest(ctx
 // BeginStopPacketCapture - Stops packet capture on virtual network gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - parameters - Virtual network gateway packet capture parameters supplied to stop packet capture on gateway.
@@ -1296,31 +1460,41 @@ func (client *VirtualNetworkGatewaysClient) BeginStopPacketCapture(ctx context.C
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientStopPacketCaptureResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientStopPacketCaptureResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientStopPacketCaptureResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientStopPacketCaptureResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // StopPacketCapture - Stops packet capture on virtual network gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) stopPacketCapture(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, parameters VPNPacketCaptureStopParameters, options *VirtualNetworkGatewaysClientBeginStopPacketCaptureOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginStopPacketCapture"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.stopPacketCaptureCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // stopPacketCaptureCreateRequest creates the StopPacketCapture request.
@@ -1343,33 +1517,43 @@ func (client *VirtualNetworkGatewaysClient) stopPacketCaptureCreateRequest(ctx c
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // SupportedVPNDevices - Gets a xml format representation for supported vpn devices.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - options - VirtualNetworkGatewaysClientSupportedVPNDevicesOptions contains the optional parameters for the VirtualNetworkGatewaysClient.SupportedVPNDevices
 //     method.
 func (client *VirtualNetworkGatewaysClient) SupportedVPNDevices(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, options *VirtualNetworkGatewaysClientSupportedVPNDevicesOptions) (VirtualNetworkGatewaysClientSupportedVPNDevicesResponse, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.SupportedVPNDevices"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.supportedVPNDevicesCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, options)
 	if err != nil {
 		return VirtualNetworkGatewaysClientSupportedVPNDevicesResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworkGatewaysClientSupportedVPNDevicesResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworkGatewaysClientSupportedVPNDevicesResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworkGatewaysClientSupportedVPNDevicesResponse{}, err
 	}
-	return client.supportedVPNDevicesHandleResponse(resp)
+	resp, err := client.supportedVPNDevicesHandleResponse(httpResp)
+	return resp, err
 }
 
 // supportedVPNDevicesCreateRequest creates the SupportedVPNDevices request.
@@ -1392,7 +1576,7 @@ func (client *VirtualNetworkGatewaysClient) supportedVPNDevicesCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -1410,7 +1594,7 @@ func (client *VirtualNetworkGatewaysClient) supportedVPNDevicesHandleResponse(re
 // BeginUpdateTags - Updates a virtual network gateway tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayName - The name of the virtual network gateway.
 //   - parameters - Parameters supplied to update virtual network gateway tags.
@@ -1422,31 +1606,41 @@ func (client *VirtualNetworkGatewaysClient) BeginUpdateTags(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientUpdateTagsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkGatewaysClientUpdateTagsResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkGatewaysClientUpdateTagsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkGatewaysClientUpdateTagsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // UpdateTags - Updates a virtual network gateway tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkGatewaysClient) updateTags(ctx context.Context, resourceGroupName string, virtualNetworkGatewayName string, parameters TagsObject, options *VirtualNetworkGatewaysClientBeginUpdateTagsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.BeginUpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -1469,16 +1663,19 @@ func (client *VirtualNetworkGatewaysClient) updateTagsCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // VPNDeviceConfigurationScript - Gets a xml format representation for vpn device configuration script.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkGatewayConnectionName - The name of the virtual network gateway connection for which the configuration script
 //     is generated.
@@ -1486,18 +1683,25 @@ func (client *VirtualNetworkGatewaysClient) updateTagsCreateRequest(ctx context.
 //   - options - VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptOptions contains the optional parameters for the VirtualNetworkGatewaysClient.VPNDeviceConfigurationScript
 //     method.
 func (client *VirtualNetworkGatewaysClient) VPNDeviceConfigurationScript(ctx context.Context, resourceGroupName string, virtualNetworkGatewayConnectionName string, parameters VPNDeviceScriptParameters, options *VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptOptions) (VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptResponse, error) {
+	var err error
+	const operationName = "VirtualNetworkGatewaysClient.VPNDeviceConfigurationScript"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.vpnDeviceConfigurationScriptCreateRequest(ctx, resourceGroupName, virtualNetworkGatewayConnectionName, parameters, options)
 	if err != nil {
 		return VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworkGatewaysClientVPNDeviceConfigurationScriptResponse{}, err
 	}
-	return client.vpnDeviceConfigurationScriptHandleResponse(resp)
+	resp, err := client.vpnDeviceConfigurationScriptHandleResponse(httpResp)
+	return resp, err
 }
 
 // vpnDeviceConfigurationScriptCreateRequest creates the VPNDeviceConfigurationScript request.
@@ -1520,10 +1724,13 @@ func (client *VirtualNetworkGatewaysClient) vpnDeviceConfigurationScriptCreateRe
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // vpnDeviceConfigurationScriptHandleResponse handles the VPNDeviceConfigurationScript response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkpeerings_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkpeerings_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkpeerings_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkpeerings_client.go
index d362464b8d1..eaa5d831439 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworkpeerings_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworkpeerings_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualNetworkPeeringsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualNetworkPeeringsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualNetworkPeeringsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualNetworkPeeringsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualNetworkPeeringsClient(subscriptionID string, credential azcore.To
 // BeginCreateOrUpdate - Creates or updates a peering in the specified virtual network.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - virtualNetworkPeeringName - The name of the peering.
@@ -61,31 +60,41 @@ func (client *VirtualNetworkPeeringsClient) BeginCreateOrUpdate(ctx context.Cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkPeeringsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkPeeringsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkPeeringsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkPeeringsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a peering in the specified virtual network.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkPeeringsClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualNetworkName string, virtualNetworkPeeringName string, virtualNetworkPeeringParameters VirtualNetworkPeering, options *VirtualNetworkPeeringsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkPeeringsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualNetworkName, virtualNetworkPeeringName, virtualNetworkPeeringParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -115,16 +124,19 @@ func (client *VirtualNetworkPeeringsClient) createOrUpdateCreateRequest(ctx cont
 	if options != nil && options.SyncRemoteAddressSpace != nil {
 		reqQP.Set("syncRemoteAddressSpace", string(*options.SyncRemoteAddressSpace))
 	}
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, virtualNetworkPeeringParameters)
+	if err := runtime.MarshalAsJSON(req, virtualNetworkPeeringParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified virtual network peering.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - virtualNetworkPeeringName - The name of the virtual network peering.
@@ -136,31 +148,41 @@ func (client *VirtualNetworkPeeringsClient) BeginDelete(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkPeeringsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkPeeringsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkPeeringsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkPeeringsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified virtual network peering.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkPeeringsClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualNetworkName string, virtualNetworkPeeringName string, options *VirtualNetworkPeeringsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkPeeringsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualNetworkName, virtualNetworkPeeringName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -187,7 +209,7 @@ func (client *VirtualNetworkPeeringsClient) deleteCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -196,25 +218,32 @@ func (client *VirtualNetworkPeeringsClient) deleteCreateRequest(ctx context.Cont
 // Get - Gets the specified virtual network peering.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - virtualNetworkPeeringName - The name of the virtual network peering.
 //   - options - VirtualNetworkPeeringsClientGetOptions contains the optional parameters for the VirtualNetworkPeeringsClient.Get
 //     method.
 func (client *VirtualNetworkPeeringsClient) Get(ctx context.Context, resourceGroupName string, virtualNetworkName string, virtualNetworkPeeringName string, options *VirtualNetworkPeeringsClientGetOptions) (VirtualNetworkPeeringsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualNetworkPeeringsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualNetworkName, virtualNetworkPeeringName, options)
 	if err != nil {
 		return VirtualNetworkPeeringsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworkPeeringsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworkPeeringsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworkPeeringsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -241,7 +270,7 @@ func (client *VirtualNetworkPeeringsClient) getCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -258,7 +287,7 @@ func (client *VirtualNetworkPeeringsClient) getHandleResponse(resp *http.Respons
 
 // NewListPager - Gets all virtual network peerings in a virtual network.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - options - VirtualNetworkPeeringsClientListOptions contains the optional parameters for the VirtualNetworkPeeringsClient.NewListPager
@@ -269,25 +298,20 @@ func (client *VirtualNetworkPeeringsClient) NewListPager(resourceGroupName strin
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualNetworkPeeringsClientListResponse) (VirtualNetworkPeeringsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, virtualNetworkName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualNetworkPeeringsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualNetworkPeeringsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, virtualNetworkName, options)
+			}, nil)
 			if err != nil {
 				return VirtualNetworkPeeringsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualNetworkPeeringsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -311,7 +335,7 @@ func (client *VirtualNetworkPeeringsClient) listCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworks_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworks_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworks_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworks_client.go
index 2f92b75a6cf..6feedb75172 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworks_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworks_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -35,7 +34,7 @@ type VirtualNetworksClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualNetworksClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualNetworksClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualNetworksClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,25 +48,32 @@ func NewVirtualNetworksClient(subscriptionID string, credential azcore.TokenCred
 // CheckIPAddressAvailability - Checks whether a private IP address is available for use.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - ipAddress - The private IP address to be verified.
 //   - options - VirtualNetworksClientCheckIPAddressAvailabilityOptions contains the optional parameters for the VirtualNetworksClient.CheckIPAddressAvailability
 //     method.
 func (client *VirtualNetworksClient) CheckIPAddressAvailability(ctx context.Context, resourceGroupName string, virtualNetworkName string, ipAddress string, options *VirtualNetworksClientCheckIPAddressAvailabilityOptions) (VirtualNetworksClientCheckIPAddressAvailabilityResponse, error) {
+	var err error
+	const operationName = "VirtualNetworksClient.CheckIPAddressAvailability"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.checkIPAddressAvailabilityCreateRequest(ctx, resourceGroupName, virtualNetworkName, ipAddress, options)
 	if err != nil {
 		return VirtualNetworksClientCheckIPAddressAvailabilityResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworksClientCheckIPAddressAvailabilityResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworksClientCheckIPAddressAvailabilityResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworksClientCheckIPAddressAvailabilityResponse{}, err
 	}
-	return client.checkIPAddressAvailabilityHandleResponse(resp)
+	resp, err := client.checkIPAddressAvailabilityHandleResponse(httpResp)
+	return resp, err
 }
 
 // checkIPAddressAvailabilityCreateRequest creates the CheckIPAddressAvailability request.
@@ -91,7 +97,7 @@ func (client *VirtualNetworksClient) checkIPAddressAvailabilityCreateRequest(ctx
 	}
 	reqQP := req.Raw().URL.Query()
 	reqQP.Set("ipAddress", ipAddress)
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -109,7 +115,7 @@ func (client *VirtualNetworksClient) checkIPAddressAvailabilityHandleResponse(re
 // BeginCreateOrUpdate - Creates or updates a virtual network in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - parameters - Parameters supplied to the create or update virtual network operation.
@@ -121,31 +127,41 @@ func (client *VirtualNetworksClient) BeginCreateOrUpdate(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworksClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworksClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworksClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworksClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a virtual network in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworksClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualNetworkName string, parameters VirtualNetwork, options *VirtualNetworksClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworksClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualNetworkName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -168,16 +184,19 @@ func (client *VirtualNetworksClient) createOrUpdateCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified virtual network.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - options - VirtualNetworksClientBeginDeleteOptions contains the optional parameters for the VirtualNetworksClient.BeginDelete
@@ -188,31 +207,41 @@ func (client *VirtualNetworksClient) BeginDelete(ctx context.Context, resourceGr
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworksClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworksClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworksClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworksClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified virtual network.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworksClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualNetworkName string, options *VirtualNetworksClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworksClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualNetworkName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -235,7 +264,7 @@ func (client *VirtualNetworksClient) deleteCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -244,23 +273,30 @@ func (client *VirtualNetworksClient) deleteCreateRequest(ctx context.Context, re
 // Get - Gets the specified virtual network by resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - options - VirtualNetworksClientGetOptions contains the optional parameters for the VirtualNetworksClient.Get method.
 func (client *VirtualNetworksClient) Get(ctx context.Context, resourceGroupName string, virtualNetworkName string, options *VirtualNetworksClientGetOptions) (VirtualNetworksClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualNetworksClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualNetworkName, options)
 	if err != nil {
 		return VirtualNetworksClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworksClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworksClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworksClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -283,7 +319,7 @@ func (client *VirtualNetworksClient) getCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -303,7 +339,7 @@ func (client *VirtualNetworksClient) getHandleResponse(resp *http.Response) (Vir
 
 // NewListPager - Gets all virtual networks in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - VirtualNetworksClientListOptions contains the optional parameters for the VirtualNetworksClient.NewListPager
 //     method.
@@ -313,25 +349,20 @@ func (client *VirtualNetworksClient) NewListPager(resourceGroupName string, opti
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualNetworksClientListResponse) (VirtualNetworksClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualNetworksClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualNetworksClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VirtualNetworksClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualNetworksClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -351,7 +382,7 @@ func (client *VirtualNetworksClient) listCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -368,7 +399,7 @@ func (client *VirtualNetworksClient) listHandleResponse(resp *http.Response) (Vi
 
 // NewListAllPager - Gets all virtual networks in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - VirtualNetworksClientListAllOptions contains the optional parameters for the VirtualNetworksClient.NewListAllPager
 //     method.
 func (client *VirtualNetworksClient) NewListAllPager(options *VirtualNetworksClientListAllOptions) *runtime.Pager[VirtualNetworksClientListAllResponse] {
@@ -377,25 +408,20 @@ func (client *VirtualNetworksClient) NewListAllPager(options *VirtualNetworksCli
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualNetworksClientListAllResponse) (VirtualNetworksClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualNetworksClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualNetworksClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VirtualNetworksClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualNetworksClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -411,7 +437,7 @@ func (client *VirtualNetworksClient) listAllCreateRequest(ctx context.Context, o
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -428,7 +454,7 @@ func (client *VirtualNetworksClient) listAllHandleResponse(resp *http.Response)
 
 // BeginListDdosProtectionStatus - Gets the Ddos Protection Status of all IP Addresses under the Virtual Network
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - options - VirtualNetworksClientBeginListDdosProtectionStatusOptions contains the optional parameters for the VirtualNetworksClient.BeginListDdosProtectionStatus
@@ -439,52 +465,58 @@ func (client *VirtualNetworksClient) BeginListDdosProtectionStatus(ctx context.C
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualNetworksClientListDdosProtectionStatusResponse) (VirtualNetworksClientListDdosProtectionStatusResponse, error) {
-			req, err := runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			if err != nil {
-				return VirtualNetworksClientListDdosProtectionStatusResponse{}, err
-			}
-			resp, err := client.internal.Pipeline().Do(req)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualNetworksClient.BeginListDdosProtectionStatus")
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), *page.NextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listDdosProtectionStatusCreateRequest(ctx, resourceGroupName, virtualNetworkName, options)
+			}, nil)
 			if err != nil {
 				return VirtualNetworksClientListDdosProtectionStatusResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualNetworksClientListDdosProtectionStatusResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listDdosProtectionStatusHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 	if options == nil || options.ResumeToken == "" {
 		resp, err := client.listDdosProtectionStatus(ctx, resourceGroupName, virtualNetworkName, options)
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[*runtime.Pager[VirtualNetworksClientListDdosProtectionStatusResponse]]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[*runtime.Pager[VirtualNetworksClientListDdosProtectionStatusResponse]]{
 			FinalStateVia: runtime.FinalStateViaLocation,
 			Response:      &pager,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
 		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[*runtime.Pager[VirtualNetworksClientListDdosProtectionStatusResponse]]{
 			Response: &pager,
+			Tracer:   client.internal.Tracer(),
 		})
 	}
 }
 
 // ListDdosProtectionStatus - Gets the Ddos Protection Status of all IP Addresses under the Virtual Network
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworksClient) listDdosProtectionStatus(ctx context.Context, resourceGroupName string, virtualNetworkName string, options *VirtualNetworksClientBeginListDdosProtectionStatusOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworksClient.BeginListDdosProtectionStatus"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listDdosProtectionStatusCreateRequest(ctx, resourceGroupName, virtualNetworkName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listDdosProtectionStatusCreateRequest creates the ListDdosProtectionStatus request.
@@ -513,7 +545,7 @@ func (client *VirtualNetworksClient) listDdosProtectionStatusCreateRequest(ctx c
 	if options != nil && options.SkipToken != nil {
 		reqQP.Set("skipToken", *options.SkipToken)
 	}
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -530,7 +562,7 @@ func (client *VirtualNetworksClient) listDdosProtectionStatusHandleResponse(resp
 
 // NewListUsagePager - Lists usage stats.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - options - VirtualNetworksClientListUsageOptions contains the optional parameters for the VirtualNetworksClient.NewListUsagePager
@@ -541,25 +573,20 @@ func (client *VirtualNetworksClient) NewListUsagePager(resourceGroupName string,
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualNetworksClientListUsageResponse) (VirtualNetworksClientListUsageResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listUsageCreateRequest(ctx, resourceGroupName, virtualNetworkName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualNetworksClient.NewListUsagePager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listUsageCreateRequest(ctx, resourceGroupName, virtualNetworkName, options)
+			}, nil)
 			if err != nil {
 				return VirtualNetworksClientListUsageResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualNetworksClientListUsageResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualNetworksClientListUsageResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listUsageHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -583,7 +610,7 @@ func (client *VirtualNetworksClient) listUsageCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -601,25 +628,32 @@ func (client *VirtualNetworksClient) listUsageHandleResponse(resp *http.Response
 // UpdateTags - Updates a virtual network tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualNetworkName - The name of the virtual network.
 //   - parameters - Parameters supplied to update virtual network tags.
 //   - options - VirtualNetworksClientUpdateTagsOptions contains the optional parameters for the VirtualNetworksClient.UpdateTags
 //     method.
 func (client *VirtualNetworksClient) UpdateTags(ctx context.Context, resourceGroupName string, virtualNetworkName string, parameters TagsObject, options *VirtualNetworksClientUpdateTagsOptions) (VirtualNetworksClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "VirtualNetworksClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, virtualNetworkName, parameters, options)
 	if err != nil {
 		return VirtualNetworksClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworksClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworksClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworksClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -642,10 +676,13 @@ func (client *VirtualNetworksClient) updateTagsCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworktaps_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworktaps_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworktaps_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworktaps_client.go
index 8015f36ddb8..3ab3dd13058 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualnetworktaps_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualnetworktaps_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualNetworkTapsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualNetworkTapsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualNetworkTapsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualNetworkTapsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualNetworkTapsClient(subscriptionID string, credential azcore.TokenC
 // BeginCreateOrUpdate - Creates or updates a Virtual Network Tap.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - tapName - The name of the virtual network tap.
 //   - parameters - Parameters supplied to the create or update virtual network tap operation.
@@ -60,31 +59,41 @@ func (client *VirtualNetworkTapsClient) BeginCreateOrUpdate(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkTapsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkTapsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkTapsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkTapsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates a Virtual Network Tap.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkTapsClient) createOrUpdate(ctx context.Context, resourceGroupName string, tapName string, parameters VirtualNetworkTap, options *VirtualNetworkTapsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkTapsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, tapName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *VirtualNetworkTapsClient) createOrUpdateCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified virtual network tap.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - tapName - The name of the virtual network tap.
 //   - options - VirtualNetworkTapsClientBeginDeleteOptions contains the optional parameters for the VirtualNetworkTapsClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *VirtualNetworkTapsClient) BeginDelete(ctx context.Context, resourc
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkTapsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualNetworkTapsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualNetworkTapsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualNetworkTapsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified virtual network tap.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualNetworkTapsClient) deleteOperation(ctx context.Context, resourceGroupName string, tapName string, options *VirtualNetworkTapsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualNetworkTapsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, tapName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *VirtualNetworkTapsClient) deleteCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *VirtualNetworkTapsClient) deleteCreateRequest(ctx context.Context,
 // Get - Gets information about the specified virtual network tap.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - tapName - The name of virtual network tap.
 //   - options - VirtualNetworkTapsClientGetOptions contains the optional parameters for the VirtualNetworkTapsClient.Get method.
 func (client *VirtualNetworkTapsClient) Get(ctx context.Context, resourceGroupName string, tapName string, options *VirtualNetworkTapsClientGetOptions) (VirtualNetworkTapsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualNetworkTapsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, tapName, options)
 	if err != nil {
 		return VirtualNetworkTapsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworkTapsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworkTapsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworkTapsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *VirtualNetworkTapsClient) getCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -239,7 +268,7 @@ func (client *VirtualNetworkTapsClient) getHandleResponse(resp *http.Response) (
 
 // NewListAllPager - Gets all the VirtualNetworkTaps in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - VirtualNetworkTapsClientListAllOptions contains the optional parameters for the VirtualNetworkTapsClient.NewListAllPager
 //     method.
 func (client *VirtualNetworkTapsClient) NewListAllPager(options *VirtualNetworkTapsClientListAllOptions) *runtime.Pager[VirtualNetworkTapsClientListAllResponse] {
@@ -248,25 +277,20 @@ func (client *VirtualNetworkTapsClient) NewListAllPager(options *VirtualNetworkT
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualNetworkTapsClientListAllResponse) (VirtualNetworkTapsClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualNetworkTapsClientListAllResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualNetworkTapsClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VirtualNetworkTapsClientListAllResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualNetworkTapsClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -282,7 +306,7 @@ func (client *VirtualNetworkTapsClient) listAllCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -299,7 +323,7 @@ func (client *VirtualNetworkTapsClient) listAllHandleResponse(resp *http.Respons
 
 // NewListByResourceGroupPager - Gets all the VirtualNetworkTaps in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - VirtualNetworkTapsClientListByResourceGroupOptions contains the optional parameters for the VirtualNetworkTapsClient.NewListByResourceGroupPager
 //     method.
@@ -309,25 +333,20 @@ func (client *VirtualNetworkTapsClient) NewListByResourceGroupPager(resourceGrou
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualNetworkTapsClientListByResourceGroupResponse) (VirtualNetworkTapsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualNetworkTapsClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualNetworkTapsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VirtualNetworkTapsClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualNetworkTapsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -347,7 +366,7 @@ func (client *VirtualNetworkTapsClient) listByResourceGroupCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -365,25 +384,32 @@ func (client *VirtualNetworkTapsClient) listByResourceGroupHandleResponse(resp *
 // UpdateTags - Updates an VirtualNetworkTap tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - tapName - The name of the tap.
 //   - tapParameters - Parameters supplied to update VirtualNetworkTap tags.
 //   - options - VirtualNetworkTapsClientUpdateTagsOptions contains the optional parameters for the VirtualNetworkTapsClient.UpdateTags
 //     method.
 func (client *VirtualNetworkTapsClient) UpdateTags(ctx context.Context, resourceGroupName string, tapName string, tapParameters TagsObject, options *VirtualNetworkTapsClientUpdateTagsOptions) (VirtualNetworkTapsClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "VirtualNetworkTapsClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, tapName, tapParameters, options)
 	if err != nil {
 		return VirtualNetworkTapsClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualNetworkTapsClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualNetworkTapsClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualNetworkTapsClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -406,10 +432,13 @@ func (client *VirtualNetworkTapsClient) updateTagsCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, tapParameters)
+	if err := runtime.MarshalAsJSON(req, tapParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualrouterpeerings_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualrouterpeerings_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualrouterpeerings_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualrouterpeerings_client.go
index 4447508f86c..984e683b7b6 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualrouterpeerings_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualrouterpeerings_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualRouterPeeringsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualRouterPeeringsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualRouterPeeringsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualRouterPeeringsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualRouterPeeringsClient(subscriptionID string, credential azcore.Tok
 // BeginCreateOrUpdate - Creates or updates the specified Virtual Router Peering.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualRouterName - The name of the Virtual Router.
 //   - peeringName - The name of the Virtual Router Peering.
@@ -61,31 +60,41 @@ func (client *VirtualRouterPeeringsClient) BeginCreateOrUpdate(ctx context.Conte
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualRouterPeeringsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualRouterPeeringsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualRouterPeeringsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualRouterPeeringsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified Virtual Router Peering.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualRouterPeeringsClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualRouterName string, peeringName string, parameters VirtualRouterPeering, options *VirtualRouterPeeringsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualRouterPeeringsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualRouterName, peeringName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -112,16 +121,19 @@ func (client *VirtualRouterPeeringsClient) createOrUpdateCreateRequest(ctx conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified peering from a Virtual Router.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualRouterName - The name of the Virtual Router.
 //   - peeringName - The name of the peering.
@@ -133,31 +145,41 @@ func (client *VirtualRouterPeeringsClient) BeginDelete(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualRouterPeeringsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualRouterPeeringsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualRouterPeeringsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualRouterPeeringsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified peering from a Virtual Router.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualRouterPeeringsClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualRouterName string, peeringName string, options *VirtualRouterPeeringsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualRouterPeeringsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualRouterName, peeringName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -184,7 +206,7 @@ func (client *VirtualRouterPeeringsClient) deleteCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -193,25 +215,32 @@ func (client *VirtualRouterPeeringsClient) deleteCreateRequest(ctx context.Conte
 // Get - Gets the specified Virtual Router Peering.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualRouterName - The name of the Virtual Router.
 //   - peeringName - The name of the Virtual Router Peering.
 //   - options - VirtualRouterPeeringsClientGetOptions contains the optional parameters for the VirtualRouterPeeringsClient.Get
 //     method.
 func (client *VirtualRouterPeeringsClient) Get(ctx context.Context, resourceGroupName string, virtualRouterName string, peeringName string, options *VirtualRouterPeeringsClientGetOptions) (VirtualRouterPeeringsClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualRouterPeeringsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualRouterName, peeringName, options)
 	if err != nil {
 		return VirtualRouterPeeringsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualRouterPeeringsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualRouterPeeringsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualRouterPeeringsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *VirtualRouterPeeringsClient) getCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *VirtualRouterPeeringsClient) getHandleResponse(resp *http.Response
 
 // NewListPager - Lists all Virtual Router Peerings in a Virtual Router resource.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualRouterName - The name of the Virtual Router.
 //   - options - VirtualRouterPeeringsClientListOptions contains the optional parameters for the VirtualRouterPeeringsClient.NewListPager
@@ -266,25 +295,20 @@ func (client *VirtualRouterPeeringsClient) NewListPager(resourceGroupName string
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualRouterPeeringsClientListResponse) (VirtualRouterPeeringsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, virtualRouterName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualRouterPeeringsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualRouterPeeringsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, virtualRouterName, options)
+			}, nil)
 			if err != nil {
 				return VirtualRouterPeeringsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualRouterPeeringsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *VirtualRouterPeeringsClient) listCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualrouters_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualrouters_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualrouters_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualrouters_client.go
index 64c57c22585..8b803a5bf6f 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualrouters_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualrouters_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualRoutersClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualRoutersClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualRoutersClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualRoutersClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualRoutersClient(subscriptionID string, credential azcore.TokenCrede
 // BeginCreateOrUpdate - Creates or updates the specified Virtual Router.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualRouterName - The name of the Virtual Router.
 //   - parameters - Parameters supplied to the create or update Virtual Router.
@@ -60,31 +59,41 @@ func (client *VirtualRoutersClient) BeginCreateOrUpdate(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualRoutersClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualRoutersClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualRoutersClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualRoutersClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates or updates the specified Virtual Router.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualRoutersClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualRouterName string, parameters VirtualRouter, options *VirtualRoutersClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualRoutersClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualRouterName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *VirtualRoutersClient) createOrUpdateCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes the specified Virtual Router.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualRouterName - The name of the Virtual Router.
 //   - options - VirtualRoutersClientBeginDeleteOptions contains the optional parameters for the VirtualRoutersClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *VirtualRoutersClient) BeginDelete(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualRoutersClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualRoutersClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualRoutersClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualRoutersClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified Virtual Router.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualRoutersClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualRouterName string, options *VirtualRoutersClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualRoutersClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualRouterName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *VirtualRoutersClient) deleteCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,23 +205,30 @@ func (client *VirtualRoutersClient) deleteCreateRequest(ctx context.Context, res
 // Get - Gets the specified Virtual Router.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - virtualRouterName - The name of the Virtual Router.
 //   - options - VirtualRoutersClientGetOptions contains the optional parameters for the VirtualRoutersClient.Get method.
 func (client *VirtualRoutersClient) Get(ctx context.Context, resourceGroupName string, virtualRouterName string, options *VirtualRoutersClientGetOptions) (VirtualRoutersClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualRoutersClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualRouterName, options)
 	if err != nil {
 		return VirtualRoutersClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualRoutersClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualRoutersClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualRoutersClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -222,7 +251,7 @@ func (client *VirtualRoutersClient) getCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -242,7 +271,7 @@ func (client *VirtualRoutersClient) getHandleResponse(resp *http.Response) (Virt
 
 // NewListPager - Gets all the Virtual Routers in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - VirtualRoutersClientListOptions contains the optional parameters for the VirtualRoutersClient.NewListPager method.
 func (client *VirtualRoutersClient) NewListPager(options *VirtualRoutersClientListOptions) *runtime.Pager[VirtualRoutersClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[VirtualRoutersClientListResponse]{
@@ -250,25 +279,20 @@ func (client *VirtualRoutersClient) NewListPager(options *VirtualRoutersClientLi
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualRoutersClientListResponse) (VirtualRoutersClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualRoutersClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VirtualRoutersClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualRoutersClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualRoutersClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -284,7 +308,7 @@ func (client *VirtualRoutersClient) listCreateRequest(ctx context.Context, optio
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -301,7 +325,7 @@ func (client *VirtualRoutersClient) listHandleResponse(resp *http.Response) (Vir
 
 // NewListByResourceGroupPager - Lists all Virtual Routers in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - VirtualRoutersClientListByResourceGroupOptions contains the optional parameters for the VirtualRoutersClient.NewListByResourceGroupPager
 //     method.
@@ -311,25 +335,20 @@ func (client *VirtualRoutersClient) NewListByResourceGroupPager(resourceGroupNam
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualRoutersClientListByResourceGroupResponse) (VirtualRoutersClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualRoutersClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VirtualRoutersClientListByResourceGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VirtualRoutersClientListByResourceGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualRoutersClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -349,7 +368,7 @@ func (client *VirtualRoutersClient) listByResourceGroupCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualwans_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualwans_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualwans_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualwans_client.go
index 2d77bcfde68..3b5210fc9f5 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/virtualwans_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/virtualwans_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VirtualWansClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVirtualWansClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VirtualWansClient, error) {
-	cl, err := arm.NewClient(moduleName+".VirtualWansClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVirtualWansClient(subscriptionID string, credential azcore.TokenCredenti
 // BeginCreateOrUpdate - Creates a VirtualWAN resource if it doesn't exist else updates the existing VirtualWAN.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualWan.
 //   - virtualWANName - The name of the VirtualWAN being created or updated.
 //   - wanParameters - Parameters supplied to create or update VirtualWAN.
@@ -60,31 +59,41 @@ func (client *VirtualWansClient) BeginCreateOrUpdate(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualWansClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualWansClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualWansClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualWansClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a VirtualWAN resource if it doesn't exist else updates the existing VirtualWAN.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualWansClient) createOrUpdate(ctx context.Context, resourceGroupName string, virtualWANName string, wanParameters VirtualWAN, options *VirtualWansClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualWansClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, virtualWANName, wanParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *VirtualWansClient) createOrUpdateCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, wanParameters)
+	if err := runtime.MarshalAsJSON(req, wanParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a VirtualWAN.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualWan.
 //   - virtualWANName - The name of the VirtualWAN being deleted.
 //   - options - VirtualWansClientBeginDeleteOptions contains the optional parameters for the VirtualWansClient.BeginDelete method.
@@ -126,31 +138,41 @@ func (client *VirtualWansClient) BeginDelete(ctx context.Context, resourceGroupN
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualWansClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VirtualWansClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VirtualWansClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VirtualWansClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a VirtualWAN.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VirtualWansClient) deleteOperation(ctx context.Context, resourceGroupName string, virtualWANName string, options *VirtualWansClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VirtualWansClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, virtualWANName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -173,7 +195,7 @@ func (client *VirtualWansClient) deleteCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -182,23 +204,30 @@ func (client *VirtualWansClient) deleteCreateRequest(ctx context.Context, resour
 // Get - Retrieves the details of a VirtualWAN.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualWan.
 //   - virtualWANName - The name of the VirtualWAN being retrieved.
 //   - options - VirtualWansClientGetOptions contains the optional parameters for the VirtualWansClient.Get method.
 func (client *VirtualWansClient) Get(ctx context.Context, resourceGroupName string, virtualWANName string, options *VirtualWansClientGetOptions) (VirtualWansClientGetResponse, error) {
+	var err error
+	const operationName = "VirtualWansClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, virtualWANName, options)
 	if err != nil {
 		return VirtualWansClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualWansClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualWansClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualWansClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -221,7 +250,7 @@ func (client *VirtualWansClient) getCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -238,7 +267,7 @@ func (client *VirtualWansClient) getHandleResponse(resp *http.Response) (Virtual
 
 // NewListPager - Lists all the VirtualWANs in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - VirtualWansClientListOptions contains the optional parameters for the VirtualWansClient.NewListPager method.
 func (client *VirtualWansClient) NewListPager(options *VirtualWansClientListOptions) *runtime.Pager[VirtualWansClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[VirtualWansClientListResponse]{
@@ -246,25 +275,20 @@ func (client *VirtualWansClient) NewListPager(options *VirtualWansClientListOpti
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualWansClientListResponse) (VirtualWansClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualWansClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualWansClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VirtualWansClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualWansClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -280,7 +304,7 @@ func (client *VirtualWansClient) listCreateRequest(ctx context.Context, options
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -297,7 +321,7 @@ func (client *VirtualWansClient) listHandleResponse(resp *http.Response) (Virtua
 
 // NewListByResourceGroupPager - Lists all the VirtualWANs in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualWan.
 //   - options - VirtualWansClientListByResourceGroupOptions contains the optional parameters for the VirtualWansClient.NewListByResourceGroupPager
 //     method.
@@ -307,25 +331,20 @@ func (client *VirtualWansClient) NewListByResourceGroupPager(resourceGroupName s
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VirtualWansClientListByResourceGroupResponse) (VirtualWansClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VirtualWansClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VirtualWansClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VirtualWansClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VirtualWansClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -345,7 +364,7 @@ func (client *VirtualWansClient) listByResourceGroupCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -363,24 +382,31 @@ func (client *VirtualWansClient) listByResourceGroupHandleResponse(resp *http.Re
 // UpdateTags - Updates a VirtualWAN tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VirtualWan.
 //   - virtualWANName - The name of the VirtualWAN being updated.
 //   - wanParameters - Parameters supplied to Update VirtualWAN tags.
 //   - options - VirtualWansClientUpdateTagsOptions contains the optional parameters for the VirtualWansClient.UpdateTags method.
 func (client *VirtualWansClient) UpdateTags(ctx context.Context, resourceGroupName string, virtualWANName string, wanParameters TagsObject, options *VirtualWansClientUpdateTagsOptions) (VirtualWansClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "VirtualWansClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, virtualWANName, wanParameters, options)
 	if err != nil {
 		return VirtualWansClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VirtualWansClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VirtualWansClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VirtualWansClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -403,10 +429,13 @@ func (client *VirtualWansClient) updateTagsCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, wanParameters)
+	if err := runtime.MarshalAsJSON(req, wanParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnconnections_client.go
similarity index 77%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnconnections_client.go
index 5a3205bfd3d..a18a748834c 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VPNConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVPNConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VPNConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VPNConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewVPNConnectionsClient(subscriptionID string, credential azcore.TokenCrede
 // connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - connectionName - The name of the connection.
@@ -62,31 +61,41 @@ func (client *VPNConnectionsClient) BeginCreateOrUpdate(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNConnectionsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNConnectionsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNConnectionsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNConnectionsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a vpn connection to a scalable vpn gateway if it doesn't exist else updates the existing connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNConnectionsClient) createOrUpdate(ctx context.Context, resourceGroupName string, gatewayName string, connectionName string, vpnConnectionParameters VPNConnection, options *VPNConnectionsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNConnectionsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, gatewayName, connectionName, vpnConnectionParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -113,16 +122,19 @@ func (client *VPNConnectionsClient) createOrUpdateCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vpnConnectionParameters)
+	if err := runtime.MarshalAsJSON(req, vpnConnectionParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a vpn connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - connectionName - The name of the connection.
@@ -134,31 +146,41 @@ func (client *VPNConnectionsClient) BeginDelete(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNConnectionsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNConnectionsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNConnectionsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNConnectionsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a vpn connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNConnectionsClient) deleteOperation(ctx context.Context, resourceGroupName string, gatewayName string, connectionName string, options *VPNConnectionsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNConnectionsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, gatewayName, connectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -185,7 +207,7 @@ func (client *VPNConnectionsClient) deleteCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -194,24 +216,31 @@ func (client *VPNConnectionsClient) deleteCreateRequest(ctx context.Context, res
 // Get - Retrieves the details of a vpn connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - connectionName - The name of the vpn connection.
 //   - options - VPNConnectionsClientGetOptions contains the optional parameters for the VPNConnectionsClient.Get method.
 func (client *VPNConnectionsClient) Get(ctx context.Context, resourceGroupName string, gatewayName string, connectionName string, options *VPNConnectionsClientGetOptions) (VPNConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "VPNConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, gatewayName, connectionName, options)
 	if err != nil {
 		return VPNConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VPNConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VPNConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VPNConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -238,7 +267,7 @@ func (client *VPNConnectionsClient) getCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -255,7 +284,7 @@ func (client *VPNConnectionsClient) getHandleResponse(resp *http.Response) (VPNC
 
 // NewListByVPNGatewayPager - Retrieves all vpn connections for a particular virtual wan vpn gateway.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - options - VPNConnectionsClientListByVPNGatewayOptions contains the optional parameters for the VPNConnectionsClient.NewListByVPNGatewayPager
@@ -266,25 +295,20 @@ func (client *VPNConnectionsClient) NewListByVPNGatewayPager(resourceGroupName s
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VPNConnectionsClientListByVPNGatewayResponse) (VPNConnectionsClientListByVPNGatewayResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByVPNGatewayCreateRequest(ctx, resourceGroupName, gatewayName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VPNConnectionsClientListByVPNGatewayResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VPNConnectionsClient.NewListByVPNGatewayPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByVPNGatewayCreateRequest(ctx, resourceGroupName, gatewayName, options)
+			}, nil)
 			if err != nil {
 				return VPNConnectionsClientListByVPNGatewayResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VPNConnectionsClientListByVPNGatewayResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByVPNGatewayHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -308,7 +332,7 @@ func (client *VPNConnectionsClient) listByVPNGatewayCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -326,7 +350,7 @@ func (client *VPNConnectionsClient) listByVPNGatewayHandleResponse(resp *http.Re
 // BeginStartPacketCapture - Starts packet capture on Vpn connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - gatewayName - The name of the gateway.
 //   - vpnConnectionName - The name of the vpn connection.
@@ -338,31 +362,41 @@ func (client *VPNConnectionsClient) BeginStartPacketCapture(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNConnectionsClientStartPacketCaptureResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNConnectionsClientStartPacketCaptureResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNConnectionsClientStartPacketCaptureResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNConnectionsClientStartPacketCaptureResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // StartPacketCapture - Starts packet capture on Vpn connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNConnectionsClient) startPacketCapture(ctx context.Context, resourceGroupName string, gatewayName string, vpnConnectionName string, options *VPNConnectionsClientBeginStartPacketCaptureOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNConnectionsClient.BeginStartPacketCapture"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startPacketCaptureCreateRequest(ctx, resourceGroupName, gatewayName, vpnConnectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startPacketCaptureCreateRequest creates the StartPacketCapture request.
@@ -389,11 +423,14 @@ func (client *VPNConnectionsClient) startPacketCaptureCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.Parameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.Parameters)
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -401,7 +438,7 @@ func (client *VPNConnectionsClient) startPacketCaptureCreateRequest(ctx context.
 // BeginStopPacketCapture - Stops packet capture on Vpn connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - gatewayName - The name of the gateway.
 //   - vpnConnectionName - The name of the vpn connection.
@@ -413,31 +450,41 @@ func (client *VPNConnectionsClient) BeginStopPacketCapture(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNConnectionsClientStopPacketCaptureResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNConnectionsClientStopPacketCaptureResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNConnectionsClientStopPacketCaptureResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNConnectionsClientStopPacketCaptureResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // StopPacketCapture - Stops packet capture on Vpn connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNConnectionsClient) stopPacketCapture(ctx context.Context, resourceGroupName string, gatewayName string, vpnConnectionName string, options *VPNConnectionsClientBeginStopPacketCaptureOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNConnectionsClient.BeginStopPacketCapture"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.stopPacketCaptureCreateRequest(ctx, resourceGroupName, gatewayName, vpnConnectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // stopPacketCaptureCreateRequest creates the StopPacketCapture request.
@@ -464,11 +511,14 @@ func (client *VPNConnectionsClient) stopPacketCaptureCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.Parameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.Parameters)
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpngateways_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpngateways_client.go
similarity index 75%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpngateways_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpngateways_client.go
index 9eb359ab150..5d28c798823 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpngateways_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpngateways_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VPNGatewaysClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVPNGatewaysClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VPNGatewaysClient, error) {
-	cl, err := arm.NewClient(moduleName+".VPNGatewaysClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVPNGatewaysClient(subscriptionID string, credential azcore.TokenCredenti
 // BeginCreateOrUpdate - Creates a virtual wan vpn gateway if it doesn't exist else updates the existing gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - vpnGatewayParameters - Parameters supplied to create or Update a virtual wan vpn gateway.
@@ -60,31 +59,41 @@ func (client *VPNGatewaysClient) BeginCreateOrUpdate(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNGatewaysClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNGatewaysClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a virtual wan vpn gateway if it doesn't exist else updates the existing gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNGatewaysClient) createOrUpdate(ctx context.Context, resourceGroupName string, gatewayName string, vpnGatewayParameters VPNGateway, options *VPNGatewaysClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNGatewaysClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, gatewayName, vpnGatewayParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *VPNGatewaysClient) createOrUpdateCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vpnGatewayParameters)
+	if err := runtime.MarshalAsJSON(req, vpnGatewayParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a virtual wan vpn gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - options - VPNGatewaysClientBeginDeleteOptions contains the optional parameters for the VPNGatewaysClient.BeginDelete method.
@@ -126,31 +138,41 @@ func (client *VPNGatewaysClient) BeginDelete(ctx context.Context, resourceGroupN
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNGatewaysClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNGatewaysClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a virtual wan vpn gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNGatewaysClient) deleteOperation(ctx context.Context, resourceGroupName string, gatewayName string, options *VPNGatewaysClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNGatewaysClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, gatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -173,7 +195,7 @@ func (client *VPNGatewaysClient) deleteCreateRequest(ctx context.Context, resour
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -182,23 +204,30 @@ func (client *VPNGatewaysClient) deleteCreateRequest(ctx context.Context, resour
 // Get - Retrieves the details of a virtual wan vpn gateway.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - options - VPNGatewaysClientGetOptions contains the optional parameters for the VPNGatewaysClient.Get method.
 func (client *VPNGatewaysClient) Get(ctx context.Context, resourceGroupName string, gatewayName string, options *VPNGatewaysClientGetOptions) (VPNGatewaysClientGetResponse, error) {
+	var err error
+	const operationName = "VPNGatewaysClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, gatewayName, options)
 	if err != nil {
 		return VPNGatewaysClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VPNGatewaysClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VPNGatewaysClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VPNGatewaysClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -221,7 +250,7 @@ func (client *VPNGatewaysClient) getCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -238,7 +267,7 @@ func (client *VPNGatewaysClient) getHandleResponse(resp *http.Response) (VPNGate
 
 // NewListPager - Lists all the VpnGateways in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - VPNGatewaysClientListOptions contains the optional parameters for the VPNGatewaysClient.NewListPager method.
 func (client *VPNGatewaysClient) NewListPager(options *VPNGatewaysClientListOptions) *runtime.Pager[VPNGatewaysClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[VPNGatewaysClientListResponse]{
@@ -246,25 +275,20 @@ func (client *VPNGatewaysClient) NewListPager(options *VPNGatewaysClientListOpti
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VPNGatewaysClientListResponse) (VPNGatewaysClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VPNGatewaysClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VPNGatewaysClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VPNGatewaysClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VPNGatewaysClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -280,7 +304,7 @@ func (client *VPNGatewaysClient) listCreateRequest(ctx context.Context, options
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -297,7 +321,7 @@ func (client *VPNGatewaysClient) listHandleResponse(resp *http.Response) (VPNGat
 
 // NewListByResourceGroupPager - Lists all the VpnGateways in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - options - VPNGatewaysClientListByResourceGroupOptions contains the optional parameters for the VPNGatewaysClient.NewListByResourceGroupPager
 //     method.
@@ -307,25 +331,20 @@ func (client *VPNGatewaysClient) NewListByResourceGroupPager(resourceGroupName s
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VPNGatewaysClientListByResourceGroupResponse) (VPNGatewaysClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VPNGatewaysClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VPNGatewaysClientListByResourceGroupResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VPNGatewaysClientListByResourceGroupResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VPNGatewaysClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -345,7 +364,7 @@ func (client *VPNGatewaysClient) listByResourceGroupCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -363,7 +382,7 @@ func (client *VPNGatewaysClient) listByResourceGroupHandleResponse(resp *http.Re
 // BeginReset - Resets the primary of the vpn gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - options - VPNGatewaysClientBeginResetOptions contains the optional parameters for the VPNGatewaysClient.BeginReset method.
@@ -373,31 +392,41 @@ func (client *VPNGatewaysClient) BeginReset(ctx context.Context, resourceGroupNa
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientResetResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientResetResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNGatewaysClientResetResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNGatewaysClientResetResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Reset - Resets the primary of the vpn gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNGatewaysClient) reset(ctx context.Context, resourceGroupName string, gatewayName string, options *VPNGatewaysClientBeginResetOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNGatewaysClient.BeginReset"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.resetCreateRequest(ctx, resourceGroupName, gatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // resetCreateRequest creates the Reset request.
@@ -423,7 +452,7 @@ func (client *VPNGatewaysClient) resetCreateRequest(ctx context.Context, resourc
 	if options != nil && options.IPConfigurationID != nil {
 		reqQP.Set("ipConfigurationId", *options.IPConfigurationID)
 	}
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -432,7 +461,7 @@ func (client *VPNGatewaysClient) resetCreateRequest(ctx context.Context, resourc
 // BeginStartPacketCapture - Starts packet capture on vpn gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - options - VPNGatewaysClientBeginStartPacketCaptureOptions contains the optional parameters for the VPNGatewaysClient.BeginStartPacketCapture
@@ -443,31 +472,41 @@ func (client *VPNGatewaysClient) BeginStartPacketCapture(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientStartPacketCaptureResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientStartPacketCaptureResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNGatewaysClientStartPacketCaptureResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNGatewaysClientStartPacketCaptureResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // StartPacketCapture - Starts packet capture on vpn gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNGatewaysClient) startPacketCapture(ctx context.Context, resourceGroupName string, gatewayName string, options *VPNGatewaysClientBeginStartPacketCaptureOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNGatewaysClient.BeginStartPacketCapture"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.startPacketCaptureCreateRequest(ctx, resourceGroupName, gatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // startPacketCaptureCreateRequest creates the StartPacketCapture request.
@@ -490,11 +529,14 @@ func (client *VPNGatewaysClient) startPacketCaptureCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.Parameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.Parameters)
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -502,7 +544,7 @@ func (client *VPNGatewaysClient) startPacketCaptureCreateRequest(ctx context.Con
 // BeginStopPacketCapture - Stops packet capture on vpn gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - options - VPNGatewaysClientBeginStopPacketCaptureOptions contains the optional parameters for the VPNGatewaysClient.BeginStopPacketCapture
@@ -513,31 +555,41 @@ func (client *VPNGatewaysClient) BeginStopPacketCapture(ctx context.Context, res
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientStopPacketCaptureResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientStopPacketCaptureResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNGatewaysClientStopPacketCaptureResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNGatewaysClientStopPacketCaptureResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // StopPacketCapture - Stops packet capture on vpn gateway in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNGatewaysClient) stopPacketCapture(ctx context.Context, resourceGroupName string, gatewayName string, options *VPNGatewaysClientBeginStopPacketCaptureOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNGatewaysClient.BeginStopPacketCapture"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.stopPacketCaptureCreateRequest(ctx, resourceGroupName, gatewayName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // stopPacketCaptureCreateRequest creates the StopPacketCapture request.
@@ -560,11 +612,14 @@ func (client *VPNGatewaysClient) stopPacketCaptureCreateRequest(ctx context.Cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	if options != nil && options.Parameters != nil {
-		return req, runtime.MarshalAsJSON(req, *options.Parameters)
+		if err := runtime.MarshalAsJSON(req, *options.Parameters); err != nil {
+			return nil, err
+		}
+		return req, nil
 	}
 	return req, nil
 }
@@ -572,7 +627,7 @@ func (client *VPNGatewaysClient) stopPacketCaptureCreateRequest(ctx context.Cont
 // BeginUpdateTags - Updates virtual wan vpn gateway tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - vpnGatewayParameters - Parameters supplied to update a virtual wan vpn gateway tags.
@@ -584,31 +639,41 @@ func (client *VPNGatewaysClient) BeginUpdateTags(ctx context.Context, resourceGr
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientUpdateTagsResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNGatewaysClientUpdateTagsResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNGatewaysClientUpdateTagsResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNGatewaysClientUpdateTagsResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // UpdateTags - Updates virtual wan vpn gateway tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNGatewaysClient) updateTags(ctx context.Context, resourceGroupName string, gatewayName string, vpnGatewayParameters TagsObject, options *VPNGatewaysClientBeginUpdateTagsOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNGatewaysClient.BeginUpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, gatewayName, vpnGatewayParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -631,8 +696,11 @@ func (client *VPNGatewaysClient) updateTagsCreateRequest(ctx context.Context, re
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vpnGatewayParameters)
+	if err := runtime.MarshalAsJSON(req, vpnGatewayParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnlinkconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnlinkconnections_client.go
similarity index 81%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnlinkconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnlinkconnections_client.go
index 5ed63a00991..c9e13cc5fe0 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnlinkconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnlinkconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VPNLinkConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVPNLinkConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VPNLinkConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VPNLinkConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVPNLinkConnectionsClient(subscriptionID string, credential azcore.TokenC
 // BeginGetIkeSas - Lists IKE Security Associations for Vpn Site Link Connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - gatewayName - The name of the gateway.
 //   - connectionName - The name of the vpn connection.
@@ -61,31 +60,41 @@ func (client *VPNLinkConnectionsClient) BeginGetIkeSas(ctx context.Context, reso
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNLinkConnectionsClientGetIkeSasResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNLinkConnectionsClientGetIkeSasResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNLinkConnectionsClientGetIkeSasResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNLinkConnectionsClientGetIkeSasResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetIkeSas - Lists IKE Security Associations for Vpn Site Link Connection in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNLinkConnectionsClient) getIkeSas(ctx context.Context, resourceGroupName string, gatewayName string, connectionName string, linkConnectionName string, options *VPNLinkConnectionsClientBeginGetIkeSasOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNLinkConnectionsClient.BeginGetIkeSas"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getIkeSasCreateRequest(ctx, resourceGroupName, gatewayName, connectionName, linkConnectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getIkeSasCreateRequest creates the GetIkeSas request.
@@ -116,7 +125,7 @@ func (client *VPNLinkConnectionsClient) getIkeSasCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -124,7 +133,7 @@ func (client *VPNLinkConnectionsClient) getIkeSasCreateRequest(ctx context.Conte
 
 // NewListByVPNConnectionPager - Retrieves all vpn site link connections for a particular virtual wan vpn gateway vpn connection.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the vpn gateway.
 //   - gatewayName - The name of the gateway.
 //   - connectionName - The name of the vpn connection.
@@ -136,25 +145,20 @@ func (client *VPNLinkConnectionsClient) NewListByVPNConnectionPager(resourceGrou
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VPNLinkConnectionsClientListByVPNConnectionResponse) (VPNLinkConnectionsClientListByVPNConnectionResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByVPNConnectionCreateRequest(ctx, resourceGroupName, gatewayName, connectionName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VPNLinkConnectionsClientListByVPNConnectionResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VPNLinkConnectionsClient.NewListByVPNConnectionPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByVPNConnectionCreateRequest(ctx, resourceGroupName, gatewayName, connectionName, options)
+			}, nil)
 			if err != nil {
 				return VPNLinkConnectionsClientListByVPNConnectionResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VPNLinkConnectionsClientListByVPNConnectionResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByVPNConnectionHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -182,7 +186,7 @@ func (client *VPNLinkConnectionsClient) listByVPNConnectionCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -200,7 +204,7 @@ func (client *VPNLinkConnectionsClient) listByVPNConnectionHandleResponse(resp *
 // BeginResetConnection - Resets the VpnLink connection specified.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - gatewayName - The name of the gateway.
 //   - connectionName - The name of the vpn connection.
@@ -213,31 +217,41 @@ func (client *VPNLinkConnectionsClient) BeginResetConnection(ctx context.Context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNLinkConnectionsClientResetConnectionResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNLinkConnectionsClientResetConnectionResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNLinkConnectionsClientResetConnectionResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNLinkConnectionsClientResetConnectionResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // ResetConnection - Resets the VpnLink connection specified.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNLinkConnectionsClient) resetConnection(ctx context.Context, resourceGroupName string, gatewayName string, connectionName string, linkConnectionName string, options *VPNLinkConnectionsClientBeginResetConnectionOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNLinkConnectionsClient.BeginResetConnection"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.resetConnectionCreateRequest(ctx, resourceGroupName, gatewayName, connectionName, linkConnectionName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // resetConnectionCreateRequest creates the ResetConnection request.
@@ -268,7 +282,7 @@ func (client *VPNLinkConnectionsClient) resetConnectionCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnserverconfigurations_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnserverconfigurations_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnserverconfigurations_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnserverconfigurations_client.go
index 63aa364cb0a..1cb95469061 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnserverconfigurations_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnserverconfigurations_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VPNServerConfigurationsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVPNServerConfigurationsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VPNServerConfigurationsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VPNServerConfigurationsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVPNServerConfigurationsClient(subscriptionID string, credential azcore.T
 // BeginCreateOrUpdate - Creates a VpnServerConfiguration resource if it doesn't exist else updates the existing VpnServerConfiguration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnServerConfiguration.
 //   - vpnServerConfigurationName - The name of the VpnServerConfiguration being created or updated.
 //   - vpnServerConfigurationParameters - Parameters supplied to create or update VpnServerConfiguration.
@@ -60,31 +59,41 @@ func (client *VPNServerConfigurationsClient) BeginCreateOrUpdate(ctx context.Con
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNServerConfigurationsClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNServerConfigurationsClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNServerConfigurationsClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNServerConfigurationsClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a VpnServerConfiguration resource if it doesn't exist else updates the existing VpnServerConfiguration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNServerConfigurationsClient) createOrUpdate(ctx context.Context, resourceGroupName string, vpnServerConfigurationName string, vpnServerConfigurationParameters VPNServerConfiguration, options *VPNServerConfigurationsClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNServerConfigurationsClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, vpnServerConfigurationName, vpnServerConfigurationParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *VPNServerConfigurationsClient) createOrUpdateCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vpnServerConfigurationParameters)
+	if err := runtime.MarshalAsJSON(req, vpnServerConfigurationParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a VpnServerConfiguration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnServerConfiguration.
 //   - vpnServerConfigurationName - The name of the VpnServerConfiguration being deleted.
 //   - options - VPNServerConfigurationsClientBeginDeleteOptions contains the optional parameters for the VPNServerConfigurationsClient.BeginDelete
@@ -127,31 +139,41 @@ func (client *VPNServerConfigurationsClient) BeginDelete(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNServerConfigurationsClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNServerConfigurationsClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNServerConfigurationsClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNServerConfigurationsClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a VpnServerConfiguration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNServerConfigurationsClient) deleteOperation(ctx context.Context, resourceGroupName string, vpnServerConfigurationName string, options *VPNServerConfigurationsClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNServerConfigurationsClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, vpnServerConfigurationName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -174,7 +196,7 @@ func (client *VPNServerConfigurationsClient) deleteCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -183,24 +205,31 @@ func (client *VPNServerConfigurationsClient) deleteCreateRequest(ctx context.Con
 // Get - Retrieves the details of a VpnServerConfiguration.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnServerConfiguration.
 //   - vpnServerConfigurationName - The name of the VpnServerConfiguration being retrieved.
 //   - options - VPNServerConfigurationsClientGetOptions contains the optional parameters for the VPNServerConfigurationsClient.Get
 //     method.
 func (client *VPNServerConfigurationsClient) Get(ctx context.Context, resourceGroupName string, vpnServerConfigurationName string, options *VPNServerConfigurationsClientGetOptions) (VPNServerConfigurationsClientGetResponse, error) {
+	var err error
+	const operationName = "VPNServerConfigurationsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, vpnServerConfigurationName, options)
 	if err != nil {
 		return VPNServerConfigurationsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VPNServerConfigurationsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VPNServerConfigurationsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VPNServerConfigurationsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -223,7 +252,7 @@ func (client *VPNServerConfigurationsClient) getCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -240,7 +269,7 @@ func (client *VPNServerConfigurationsClient) getHandleResponse(resp *http.Respon
 
 // NewListPager - Lists all the VpnServerConfigurations in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - VPNServerConfigurationsClientListOptions contains the optional parameters for the VPNServerConfigurationsClient.NewListPager
 //     method.
 func (client *VPNServerConfigurationsClient) NewListPager(options *VPNServerConfigurationsClientListOptions) *runtime.Pager[VPNServerConfigurationsClientListResponse] {
@@ -249,25 +278,20 @@ func (client *VPNServerConfigurationsClient) NewListPager(options *VPNServerConf
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VPNServerConfigurationsClientListResponse) (VPNServerConfigurationsClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VPNServerConfigurationsClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VPNServerConfigurationsClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VPNServerConfigurationsClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VPNServerConfigurationsClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -283,7 +307,7 @@ func (client *VPNServerConfigurationsClient) listCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -300,7 +324,7 @@ func (client *VPNServerConfigurationsClient) listHandleResponse(resp *http.Respo
 
 // NewListByResourceGroupPager - Lists all the vpnServerConfigurations in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnServerConfiguration.
 //   - options - VPNServerConfigurationsClientListByResourceGroupOptions contains the optional parameters for the VPNServerConfigurationsClient.NewListByResourceGroupPager
 //     method.
@@ -310,25 +334,20 @@ func (client *VPNServerConfigurationsClient) NewListByResourceGroupPager(resourc
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VPNServerConfigurationsClientListByResourceGroupResponse) (VPNServerConfigurationsClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VPNServerConfigurationsClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VPNServerConfigurationsClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VPNServerConfigurationsClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VPNServerConfigurationsClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -348,7 +367,7 @@ func (client *VPNServerConfigurationsClient) listByResourceGroupCreateRequest(ct
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -366,25 +385,32 @@ func (client *VPNServerConfigurationsClient) listByResourceGroupHandleResponse(r
 // UpdateTags - Updates VpnServerConfiguration tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnServerConfiguration.
 //   - vpnServerConfigurationName - The name of the VpnServerConfiguration being updated.
 //   - vpnServerConfigurationParameters - Parameters supplied to update VpnServerConfiguration tags.
 //   - options - VPNServerConfigurationsClientUpdateTagsOptions contains the optional parameters for the VPNServerConfigurationsClient.UpdateTags
 //     method.
 func (client *VPNServerConfigurationsClient) UpdateTags(ctx context.Context, resourceGroupName string, vpnServerConfigurationName string, vpnServerConfigurationParameters TagsObject, options *VPNServerConfigurationsClientUpdateTagsOptions) (VPNServerConfigurationsClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "VPNServerConfigurationsClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, vpnServerConfigurationName, vpnServerConfigurationParameters, options)
 	if err != nil {
 		return VPNServerConfigurationsClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VPNServerConfigurationsClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VPNServerConfigurationsClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VPNServerConfigurationsClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -407,10 +433,13 @@ func (client *VPNServerConfigurationsClient) updateTagsCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vpnServerConfigurationParameters)
+	if err := runtime.MarshalAsJSON(req, vpnServerConfigurationParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnserverconfigurationsassociatedwithvirtualwan_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnserverconfigurationsassociatedwithvirtualwan_client.go
similarity index 79%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnserverconfigurationsassociatedwithvirtualwan_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnserverconfigurationsassociatedwithvirtualwan_client.go
index b12c238ef2f..f7e5490f7fc 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnserverconfigurationsassociatedwithvirtualwan_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnserverconfigurationsassociatedwithvirtualwan_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VPNServerConfigurationsAssociatedWithVirtualWanClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVPNServerConfigurationsAssociatedWithVirtualWanClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VPNServerConfigurationsAssociatedWithVirtualWanClient, error) {
-	cl, err := arm.NewClient(moduleName+".VPNServerConfigurationsAssociatedWithVirtualWanClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVPNServerConfigurationsAssociatedWithVirtualWanClient(subscriptionID str
 // BeginList - Gives the list of VpnServerConfigurations associated with Virtual Wan in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name.
 //   - virtualWANName - The name of the VirtualWAN whose associated VpnServerConfigurations is needed.
 //   - options - VPNServerConfigurationsAssociatedWithVirtualWanClientBeginListOptions contains the optional parameters for the
@@ -59,31 +58,41 @@ func (client *VPNServerConfigurationsAssociatedWithVirtualWanClient) BeginList(c
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNServerConfigurationsAssociatedWithVirtualWanClientListResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNServerConfigurationsAssociatedWithVirtualWanClientListResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNServerConfigurationsAssociatedWithVirtualWanClientListResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNServerConfigurationsAssociatedWithVirtualWanClientListResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // List - Gives the list of VpnServerConfigurations associated with Virtual Wan in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNServerConfigurationsAssociatedWithVirtualWanClient) listOperation(ctx context.Context, resourceGroupName string, virtualWANName string, options *VPNServerConfigurationsAssociatedWithVirtualWanClientBeginListOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNServerConfigurationsAssociatedWithVirtualWanClient.BeginList"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listCreateRequest(ctx, resourceGroupName, virtualWANName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listCreateRequest creates the List request.
@@ -106,7 +115,7 @@ func (client *VPNServerConfigurationsAssociatedWithVirtualWanClient) listCreateR
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsitelinkconnections_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsitelinkconnections_client.go
similarity index 86%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsitelinkconnections_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsitelinkconnections_client.go
index 118c43ce910..ce9c6434028 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsitelinkconnections_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsitelinkconnections_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VPNSiteLinkConnectionsClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVPNSiteLinkConnectionsClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VPNSiteLinkConnectionsClient, error) {
-	cl, err := arm.NewClient(moduleName+".VPNSiteLinkConnectionsClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVPNSiteLinkConnectionsClient(subscriptionID string, credential azcore.To
 // Get - Retrieves the details of a vpn site link connection.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnGateway.
 //   - gatewayName - The name of the gateway.
 //   - connectionName - The name of the vpn connection.
@@ -56,18 +55,25 @@ func NewVPNSiteLinkConnectionsClient(subscriptionID string, credential azcore.To
 //   - options - VPNSiteLinkConnectionsClientGetOptions contains the optional parameters for the VPNSiteLinkConnectionsClient.Get
 //     method.
 func (client *VPNSiteLinkConnectionsClient) Get(ctx context.Context, resourceGroupName string, gatewayName string, connectionName string, linkConnectionName string, options *VPNSiteLinkConnectionsClientGetOptions) (VPNSiteLinkConnectionsClientGetResponse, error) {
+	var err error
+	const operationName = "VPNSiteLinkConnectionsClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, gatewayName, connectionName, linkConnectionName, options)
 	if err != nil {
 		return VPNSiteLinkConnectionsClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VPNSiteLinkConnectionsClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VPNSiteLinkConnectionsClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VPNSiteLinkConnectionsClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -98,7 +104,7 @@ func (client *VPNSiteLinkConnectionsClient) getCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsitelinks_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsitelinks_client.go
similarity index 84%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsitelinks_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsitelinks_client.go
index ba64fb6bd4f..ae77b690b8e 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsitelinks_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsitelinks_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VPNSiteLinksClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVPNSiteLinksClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VPNSiteLinksClient, error) {
-	cl, err := arm.NewClient(moduleName+".VPNSiteLinksClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,24 +47,31 @@ func NewVPNSiteLinksClient(subscriptionID string, credential azcore.TokenCredent
 // Get - Retrieves the details of a VPN site link.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnSite.
 //   - vpnSiteName - The name of the VpnSite.
 //   - vpnSiteLinkName - The name of the VpnSiteLink being retrieved.
 //   - options - VPNSiteLinksClientGetOptions contains the optional parameters for the VPNSiteLinksClient.Get method.
 func (client *VPNSiteLinksClient) Get(ctx context.Context, resourceGroupName string, vpnSiteName string, vpnSiteLinkName string, options *VPNSiteLinksClientGetOptions) (VPNSiteLinksClientGetResponse, error) {
+	var err error
+	const operationName = "VPNSiteLinksClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, vpnSiteName, vpnSiteLinkName, options)
 	if err != nil {
 		return VPNSiteLinksClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VPNSiteLinksClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VPNSiteLinksClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VPNSiteLinksClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -92,7 +98,7 @@ func (client *VPNSiteLinksClient) getCreateRequest(ctx context.Context, resource
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -109,7 +115,7 @@ func (client *VPNSiteLinksClient) getHandleResponse(resp *http.Response) (VPNSit
 
 // NewListByVPNSitePager - Lists all the vpnSiteLinks in a resource group for a vpn site.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnSite.
 //   - vpnSiteName - The name of the VpnSite.
 //   - options - VPNSiteLinksClientListByVPNSiteOptions contains the optional parameters for the VPNSiteLinksClient.NewListByVPNSitePager
@@ -120,25 +126,20 @@ func (client *VPNSiteLinksClient) NewListByVPNSitePager(resourceGroupName string
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VPNSiteLinksClientListByVPNSiteResponse) (VPNSiteLinksClientListByVPNSiteResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByVPNSiteCreateRequest(ctx, resourceGroupName, vpnSiteName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VPNSiteLinksClient.NewListByVPNSitePager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByVPNSiteCreateRequest(ctx, resourceGroupName, vpnSiteName, options)
+			}, nil)
 			if err != nil {
 				return VPNSiteLinksClientListByVPNSiteResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return VPNSiteLinksClientListByVPNSiteResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VPNSiteLinksClientListByVPNSiteResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByVPNSiteHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -162,7 +163,7 @@ func (client *VPNSiteLinksClient) listByVPNSiteCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsites_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsites_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsites_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsites_client.go
index 86befd69664..ea91d8bec3b 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsites_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsites_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VPNSitesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVPNSitesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VPNSitesClient, error) {
-	cl, err := arm.NewClient(moduleName+".VPNSitesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVPNSitesClient(subscriptionID string, credential azcore.TokenCredential,
 // BeginCreateOrUpdate - Creates a VpnSite resource if it doesn't exist else updates the existing VpnSite.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnSite.
 //   - vpnSiteName - The name of the VpnSite being created or updated.
 //   - vpnSiteParameters - Parameters supplied to create or update VpnSite.
@@ -60,31 +59,41 @@ func (client *VPNSitesClient) BeginCreateOrUpdate(ctx context.Context, resourceG
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNSitesClientCreateOrUpdateResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNSitesClientCreateOrUpdateResponse]{
 			FinalStateVia: runtime.FinalStateViaAzureAsyncOp,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNSitesClientCreateOrUpdateResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNSitesClientCreateOrUpdateResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // CreateOrUpdate - Creates a VpnSite resource if it doesn't exist else updates the existing VpnSite.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNSitesClient) createOrUpdate(ctx context.Context, resourceGroupName string, vpnSiteName string, vpnSiteParameters VPNSite, options *VPNSitesClientBeginCreateOrUpdateOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNSitesClient.BeginCreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, vpnSiteName, vpnSiteParameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -107,16 +116,19 @@ func (client *VPNSitesClient) createOrUpdateCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vpnSiteParameters)
+	if err := runtime.MarshalAsJSON(req, vpnSiteParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginDelete - Deletes a VpnSite.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnSite.
 //   - vpnSiteName - The name of the VpnSite being deleted.
 //   - options - VPNSitesClientBeginDeleteOptions contains the optional parameters for the VPNSitesClient.BeginDelete method.
@@ -126,31 +138,41 @@ func (client *VPNSitesClient) BeginDelete(ctx context.Context, resourceGroupName
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNSitesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNSitesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNSitesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNSitesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes a VpnSite.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNSitesClient) deleteOperation(ctx context.Context, resourceGroupName string, vpnSiteName string, options *VPNSitesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNSitesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, vpnSiteName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -173,7 +195,7 @@ func (client *VPNSitesClient) deleteCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -182,23 +204,30 @@ func (client *VPNSitesClient) deleteCreateRequest(ctx context.Context, resourceG
 // Get - Retrieves the details of a VPN site.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnSite.
 //   - vpnSiteName - The name of the VpnSite being retrieved.
 //   - options - VPNSitesClientGetOptions contains the optional parameters for the VPNSitesClient.Get method.
 func (client *VPNSitesClient) Get(ctx context.Context, resourceGroupName string, vpnSiteName string, options *VPNSitesClientGetOptions) (VPNSitesClientGetResponse, error) {
+	var err error
+	const operationName = "VPNSitesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, vpnSiteName, options)
 	if err != nil {
 		return VPNSitesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VPNSitesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VPNSitesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VPNSitesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -221,7 +250,7 @@ func (client *VPNSitesClient) getCreateRequest(ctx context.Context, resourceGrou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -238,7 +267,7 @@ func (client *VPNSitesClient) getHandleResponse(resp *http.Response) (VPNSitesCl
 
 // NewListPager - Lists all the VpnSites in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - VPNSitesClientListOptions contains the optional parameters for the VPNSitesClient.NewListPager method.
 func (client *VPNSitesClient) NewListPager(options *VPNSitesClientListOptions) *runtime.Pager[VPNSitesClientListResponse] {
 	return runtime.NewPager(runtime.PagingHandler[VPNSitesClientListResponse]{
@@ -246,25 +275,20 @@ func (client *VPNSitesClient) NewListPager(options *VPNSitesClientListOptions) *
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VPNSitesClientListResponse) (VPNSitesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VPNSitesClientListResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VPNSitesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return VPNSitesClientListResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VPNSitesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -280,7 +304,7 @@ func (client *VPNSitesClient) listCreateRequest(ctx context.Context, options *VP
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -297,7 +321,7 @@ func (client *VPNSitesClient) listHandleResponse(resp *http.Response) (VPNSitesC
 
 // NewListByResourceGroupPager - Lists all the vpnSites in a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnSite.
 //   - options - VPNSitesClientListByResourceGroupOptions contains the optional parameters for the VPNSitesClient.NewListByResourceGroupPager
 //     method.
@@ -307,25 +331,20 @@ func (client *VPNSitesClient) NewListByResourceGroupPager(resourceGroupName stri
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *VPNSitesClientListByResourceGroupResponse) (VPNSitesClientListByResourceGroupResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
-			}
-			if err != nil {
-				return VPNSitesClientListByResourceGroupResponse{}, err
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "VPNSitesClient.NewListByResourceGroupPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
-			resp, err := client.internal.Pipeline().Do(req)
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listByResourceGroupCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return VPNSitesClientListByResourceGroupResponse{}, err
 			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return VPNSitesClientListByResourceGroupResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listByResourceGroupHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -345,7 +364,7 @@ func (client *VPNSitesClient) listByResourceGroupCreateRequest(ctx context.Conte
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -363,24 +382,31 @@ func (client *VPNSitesClient) listByResourceGroupHandleResponse(resp *http.Respo
 // UpdateTags - Updates VpnSite tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name of the VpnSite.
 //   - vpnSiteName - The name of the VpnSite being updated.
 //   - vpnSiteParameters - Parameters supplied to update VpnSite tags.
 //   - options - VPNSitesClientUpdateTagsOptions contains the optional parameters for the VPNSitesClient.UpdateTags method.
 func (client *VPNSitesClient) UpdateTags(ctx context.Context, resourceGroupName string, vpnSiteName string, vpnSiteParameters TagsObject, options *VPNSitesClientUpdateTagsOptions) (VPNSitesClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "VPNSitesClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, vpnSiteName, vpnSiteParameters, options)
 	if err != nil {
 		return VPNSitesClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return VPNSitesClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return VPNSitesClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return VPNSitesClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -403,10 +429,13 @@ func (client *VPNSitesClient) updateTagsCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, vpnSiteParameters)
+	if err := runtime.MarshalAsJSON(req, vpnSiteParameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsitesconfiguration_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsitesconfiguration_client.go
similarity index 78%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsitesconfiguration_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsitesconfiguration_client.go
index 6155ebebb74..ae821016aa9 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/vpnsitesconfiguration_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/vpnsitesconfiguration_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type VPNSitesConfigurationClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewVPNSitesConfigurationClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*VPNSitesConfigurationClient, error) {
-	cl, err := arm.NewClient(moduleName+".VPNSitesConfigurationClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,7 +47,7 @@ func NewVPNSitesConfigurationClient(subscriptionID string, credential azcore.Tok
 // BeginDownload - Gives the sas-url to download the configurations for vpn-sites in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The resource group name.
 //   - virtualWANName - The name of the VirtualWAN for which configuration of all vpn-sites is needed.
 //   - request - Parameters supplied to download vpn-sites configuration.
@@ -60,31 +59,41 @@ func (client *VPNSitesConfigurationClient) BeginDownload(ctx context.Context, re
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNSitesConfigurationClientDownloadResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[VPNSitesConfigurationClientDownloadResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[VPNSitesConfigurationClientDownloadResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[VPNSitesConfigurationClientDownloadResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Download - Gives the sas-url to download the configurations for vpn-sites in a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *VPNSitesConfigurationClient) download(ctx context.Context, resourceGroupName string, virtualWANName string, request GetVPNSitesConfigurationRequest, options *VPNSitesConfigurationClientBeginDownloadOptions) (*http.Response, error) {
+	var err error
+	const operationName = "VPNSitesConfigurationClient.BeginDownload"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.downloadCreateRequest(ctx, resourceGroupName, virtualWANName, request, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // downloadCreateRequest creates the Download request.
@@ -107,8 +116,11 @@ func (client *VPNSitesConfigurationClient) downloadCreateRequest(ctx context.Con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, request)
+	if err := runtime.MarshalAsJSON(req, request); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/watchers_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/watchers_client.go
similarity index 76%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/watchers_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/watchers_client.go
index 45eec787da4..b29eebfb12c 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/watchers_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/watchers_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type WatchersClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewWatchersClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*WatchersClient, error) {
-	cl, err := arm.NewClient(moduleName+".WatchersClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -49,7 +48,7 @@ func NewWatchersClient(subscriptionID string, credential azcore.TokenCredential,
 // endpoint including another VM or an arbitrary remote server.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the network watcher resource group.
 //   - networkWatcherName - The name of the network watcher resource.
 //   - parameters - Parameters that determine how the connectivity check will be performed.
@@ -61,11 +60,15 @@ func (client *WatchersClient) BeginCheckConnectivity(ctx context.Context, resour
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientCheckConnectivityResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientCheckConnectivityResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientCheckConnectivityResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientCheckConnectivityResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -73,20 +76,26 @@ func (client *WatchersClient) BeginCheckConnectivity(ctx context.Context, resour
 // endpoint including another VM or an arbitrary remote server.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) checkConnectivity(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters ConnectivityParameters, options *WatchersClientBeginCheckConnectivityOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginCheckConnectivity"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.checkConnectivityCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // checkConnectivityCreateRequest creates the CheckConnectivity request.
@@ -109,33 +118,43 @@ func (client *WatchersClient) checkConnectivityCreateRequest(ctx context.Context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // CreateOrUpdate - Creates or updates a network watcher in the specified resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - parameters - Parameters that define the network watcher resource.
 //   - options - WatchersClientCreateOrUpdateOptions contains the optional parameters for the WatchersClient.CreateOrUpdate method.
 func (client *WatchersClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters Watcher, options *WatchersClientCreateOrUpdateOptions) (WatchersClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "WatchersClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return WatchersClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return WatchersClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return WatchersClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return WatchersClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -158,10 +177,13 @@ func (client *WatchersClient) createOrUpdateCreateRequest(ctx context.Context, r
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -176,7 +198,7 @@ func (client *WatchersClient) createOrUpdateHandleResponse(resp *http.Response)
 // BeginDelete - Deletes the specified network watcher resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - options - WatchersClientBeginDeleteOptions contains the optional parameters for the WatchersClient.BeginDelete method.
@@ -186,31 +208,41 @@ func (client *WatchersClient) BeginDelete(ctx context.Context, resourceGroupName
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes the specified network watcher resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) deleteOperation(ctx context.Context, resourceGroupName string, networkWatcherName string, options *WatchersClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, networkWatcherName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -233,7 +265,7 @@ func (client *WatchersClient) deleteCreateRequest(ctx context.Context, resourceG
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -242,23 +274,30 @@ func (client *WatchersClient) deleteCreateRequest(ctx context.Context, resourceG
 // Get - Gets the specified network watcher by resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - options - WatchersClientGetOptions contains the optional parameters for the WatchersClient.Get method.
 func (client *WatchersClient) Get(ctx context.Context, resourceGroupName string, networkWatcherName string, options *WatchersClientGetOptions) (WatchersClientGetResponse, error) {
+	var err error
+	const operationName = "WatchersClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, networkWatcherName, options)
 	if err != nil {
 		return WatchersClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return WatchersClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return WatchersClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return WatchersClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -281,7 +320,7 @@ func (client *WatchersClient) getCreateRequest(ctx context.Context, resourceGrou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -300,7 +339,7 @@ func (client *WatchersClient) getHandleResponse(resp *http.Response) (WatchersCl
 // the relative latency score for internet service providers from a specified location to Azure regions.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the network watcher resource group.
 //   - networkWatcherName - The name of the network watcher resource.
 //   - parameters - Parameters that determine Azure reachability report configuration.
@@ -312,11 +351,15 @@ func (client *WatchersClient) BeginGetAzureReachabilityReport(ctx context.Contex
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetAzureReachabilityReportResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetAzureReachabilityReportResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientGetAzureReachabilityReportResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientGetAzureReachabilityReportResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -324,20 +367,26 @@ func (client *WatchersClient) BeginGetAzureReachabilityReport(ctx context.Contex
 // relative latency score for internet service providers from a specified location to Azure regions.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) getAzureReachabilityReport(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters AzureReachabilityReportParameters, options *WatchersClientBeginGetAzureReachabilityReportOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginGetAzureReachabilityReport"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getAzureReachabilityReportCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getAzureReachabilityReportCreateRequest creates the GetAzureReachabilityReport request.
@@ -360,16 +409,19 @@ func (client *WatchersClient) getAzureReachabilityReportCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginGetFlowLogStatus - Queries status of flow log and traffic analytics (optional) on a specified resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the network watcher resource group.
 //   - networkWatcherName - The name of the network watcher resource.
 //   - parameters - Parameters that define a resource to query flow log and traffic analytics (optional) status.
@@ -381,31 +433,41 @@ func (client *WatchersClient) BeginGetFlowLogStatus(ctx context.Context, resourc
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetFlowLogStatusResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetFlowLogStatusResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientGetFlowLogStatusResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientGetFlowLogStatusResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetFlowLogStatus - Queries status of flow log and traffic analytics (optional) on a specified resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) getFlowLogStatus(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters FlowLogStatusParameters, options *WatchersClientBeginGetFlowLogStatusOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginGetFlowLogStatus"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getFlowLogStatusCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getFlowLogStatusCreateRequest creates the GetFlowLogStatus request.
@@ -428,10 +490,13 @@ func (client *WatchersClient) getFlowLogStatusCreateRequest(ctx context.Context,
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginGetNetworkConfigurationDiagnostic - Gets Network Configuration Diagnostic data to help customers understand and debug
@@ -441,7 +506,7 @@ func (client *WatchersClient) getFlowLogStatusCreateRequest(ctx context.Context,
 // the specified flow and the evaluation results.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - parameters - Parameters to get network configuration diagnostic.
@@ -453,11 +518,15 @@ func (client *WatchersClient) BeginGetNetworkConfigurationDiagnostic(ctx context
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetNetworkConfigurationDiagnosticResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetNetworkConfigurationDiagnosticResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientGetNetworkConfigurationDiagnosticResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientGetNetworkConfigurationDiagnosticResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -468,20 +537,26 @@ func (client *WatchersClient) BeginGetNetworkConfigurationDiagnostic(ctx context
 // the specified flow and the evaluation results.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) getNetworkConfigurationDiagnostic(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters ConfigurationDiagnosticParameters, options *WatchersClientBeginGetNetworkConfigurationDiagnosticOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginGetNetworkConfigurationDiagnostic"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getNetworkConfigurationDiagnosticCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getNetworkConfigurationDiagnosticCreateRequest creates the GetNetworkConfigurationDiagnostic request.
@@ -504,16 +579,19 @@ func (client *WatchersClient) getNetworkConfigurationDiagnosticCreateRequest(ctx
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginGetNextHop - Gets the next hop from the specified VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - parameters - Parameters that define the source and destination endpoint.
@@ -525,31 +603,41 @@ func (client *WatchersClient) BeginGetNextHop(ctx context.Context, resourceGroup
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetNextHopResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetNextHopResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientGetNextHopResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientGetNextHopResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetNextHop - Gets the next hop from the specified VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) getNextHop(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters NextHopParameters, options *WatchersClientBeginGetNextHopOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginGetNextHop"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getNextHopCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getNextHopCreateRequest creates the GetNextHop request.
@@ -572,33 +660,43 @@ func (client *WatchersClient) getNextHopCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // GetTopology - Gets the current network topology by resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - parameters - Parameters that define the representation of topology.
 //   - options - WatchersClientGetTopologyOptions contains the optional parameters for the WatchersClient.GetTopology method.
 func (client *WatchersClient) GetTopology(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters TopologyParameters, options *WatchersClientGetTopologyOptions) (WatchersClientGetTopologyResponse, error) {
+	var err error
+	const operationName = "WatchersClient.GetTopology"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getTopologyCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return WatchersClientGetTopologyResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return WatchersClientGetTopologyResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return WatchersClientGetTopologyResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return WatchersClientGetTopologyResponse{}, err
 	}
-	return client.getTopologyHandleResponse(resp)
+	resp, err := client.getTopologyHandleResponse(httpResp)
+	return resp, err
 }
 
 // getTopologyCreateRequest creates the GetTopology request.
@@ -621,10 +719,13 @@ func (client *WatchersClient) getTopologyCreateRequest(ctx context.Context, reso
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // getTopologyHandleResponse handles the GetTopology response.
@@ -639,7 +740,7 @@ func (client *WatchersClient) getTopologyHandleResponse(resp *http.Response) (Wa
 // BeginGetTroubleshooting - Initiate troubleshooting on a specified resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher resource.
 //   - parameters - Parameters that define the resource to troubleshoot.
@@ -651,31 +752,41 @@ func (client *WatchersClient) BeginGetTroubleshooting(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetTroubleshootingResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetTroubleshootingResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientGetTroubleshootingResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientGetTroubleshootingResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetTroubleshooting - Initiate troubleshooting on a specified resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) getTroubleshooting(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters TroubleshootingParameters, options *WatchersClientBeginGetTroubleshootingOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginGetTroubleshooting"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getTroubleshootingCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getTroubleshootingCreateRequest creates the GetTroubleshooting request.
@@ -698,16 +809,19 @@ func (client *WatchersClient) getTroubleshootingCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginGetTroubleshootingResult - Get the last completed troubleshooting result on a specified resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher resource.
 //   - parameters - Parameters that define the resource to query the troubleshooting result.
@@ -719,31 +833,41 @@ func (client *WatchersClient) BeginGetTroubleshootingResult(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetTroubleshootingResultResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetTroubleshootingResultResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientGetTroubleshootingResultResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientGetTroubleshootingResultResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetTroubleshootingResult - Get the last completed troubleshooting result on a specified resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) getTroubleshootingResult(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters QueryTroubleshootingParameters, options *WatchersClientBeginGetTroubleshootingResultOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginGetTroubleshootingResult"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getTroubleshootingResultCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getTroubleshootingResultCreateRequest creates the GetTroubleshootingResult request.
@@ -766,16 +890,19 @@ func (client *WatchersClient) getTroubleshootingResultCreateRequest(ctx context.
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginGetVMSecurityRules - Gets the configured and effective security group rules on the specified VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - parameters - Parameters that define the VM to check security groups for.
@@ -787,31 +914,41 @@ func (client *WatchersClient) BeginGetVMSecurityRules(ctx context.Context, resou
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetVMSecurityRulesResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientGetVMSecurityRulesResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientGetVMSecurityRulesResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientGetVMSecurityRulesResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // GetVMSecurityRules - Gets the configured and effective security group rules on the specified VM.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) getVMSecurityRules(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters SecurityGroupViewParameters, options *WatchersClientBeginGetVMSecurityRulesOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginGetVMSecurityRules"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getVMSecurityRulesCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // getVMSecurityRulesCreateRequest creates the GetVMSecurityRules request.
@@ -834,15 +971,18 @@ func (client *WatchersClient) getVMSecurityRulesCreateRequest(ctx context.Contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // NewListPager - Gets all network watchers by resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - WatchersClientListOptions contains the optional parameters for the WatchersClient.NewListPager method.
 func (client *WatchersClient) NewListPager(resourceGroupName string, options *WatchersClientListOptions) *runtime.Pager[WatchersClientListResponse] {
@@ -851,6 +991,7 @@ func (client *WatchersClient) NewListPager(resourceGroupName string, options *Wa
 			return false
 		},
 		Fetcher: func(ctx context.Context, page *WatchersClientListResponse) (WatchersClientListResponse, error) {
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "WatchersClient.NewListPager")
 			req, err := client.listCreateRequest(ctx, resourceGroupName, options)
 			if err != nil {
 				return WatchersClientListResponse{}, err
@@ -864,6 +1005,7 @@ func (client *WatchersClient) NewListPager(resourceGroupName string, options *Wa
 			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -883,7 +1025,7 @@ func (client *WatchersClient) listCreateRequest(ctx context.Context, resourceGro
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -900,7 +1042,7 @@ func (client *WatchersClient) listHandleResponse(resp *http.Response) (WatchersC
 
 // NewListAllPager - Gets all network watchers by subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - WatchersClientListAllOptions contains the optional parameters for the WatchersClient.NewListAllPager method.
 func (client *WatchersClient) NewListAllPager(options *WatchersClientListAllOptions) *runtime.Pager[WatchersClientListAllResponse] {
 	return runtime.NewPager(runtime.PagingHandler[WatchersClientListAllResponse]{
@@ -908,6 +1050,7 @@ func (client *WatchersClient) NewListAllPager(options *WatchersClientListAllOpti
 			return false
 		},
 		Fetcher: func(ctx context.Context, page *WatchersClientListAllResponse) (WatchersClientListAllResponse, error) {
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "WatchersClient.NewListAllPager")
 			req, err := client.listAllCreateRequest(ctx, options)
 			if err != nil {
 				return WatchersClientListAllResponse{}, err
@@ -921,6 +1064,7 @@ func (client *WatchersClient) NewListAllPager(options *WatchersClientListAllOpti
 			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -936,7 +1080,7 @@ func (client *WatchersClient) listAllCreateRequest(ctx context.Context, options
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -955,7 +1099,7 @@ func (client *WatchersClient) listAllHandleResponse(resp *http.Response) (Watche
 // available internet service providers for a specified Azure region.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the network watcher resource group.
 //   - networkWatcherName - The name of the network watcher resource.
 //   - parameters - Parameters that scope the list of available providers.
@@ -967,11 +1111,15 @@ func (client *WatchersClient) BeginListAvailableProviders(ctx context.Context, r
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientListAvailableProvidersResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientListAvailableProvidersResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientListAvailableProvidersResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientListAvailableProvidersResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
@@ -979,20 +1127,26 @@ func (client *WatchersClient) BeginListAvailableProviders(ctx context.Context, r
 // internet service providers for a specified Azure region.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) listAvailableProviders(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters AvailableProvidersListParameters, options *WatchersClientBeginListAvailableProvidersOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginListAvailableProviders"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.listAvailableProvidersCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // listAvailableProvidersCreateRequest creates the ListAvailableProviders request.
@@ -1015,16 +1169,19 @@ func (client *WatchersClient) listAvailableProvidersCreateRequest(ctx context.Co
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // BeginSetFlowLogConfiguration - Configures flow log and traffic analytics (optional) on a specified resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the network watcher resource group.
 //   - networkWatcherName - The name of the network watcher resource.
 //   - parameters - Parameters that define the configuration of flow log.
@@ -1036,31 +1193,41 @@ func (client *WatchersClient) BeginSetFlowLogConfiguration(ctx context.Context,
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientSetFlowLogConfigurationResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientSetFlowLogConfigurationResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientSetFlowLogConfigurationResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientSetFlowLogConfigurationResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // SetFlowLogConfiguration - Configures flow log and traffic analytics (optional) on a specified resource.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) setFlowLogConfiguration(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters FlowLogInformation, options *WatchersClientBeginSetFlowLogConfigurationOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginSetFlowLogConfiguration"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.setFlowLogConfigurationCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // setFlowLogConfigurationCreateRequest creates the SetFlowLogConfiguration request.
@@ -1083,33 +1250,43 @@ func (client *WatchersClient) setFlowLogConfigurationCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // UpdateTags - Updates a network watcher tags.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - parameters - Parameters supplied to update network watcher tags.
 //   - options - WatchersClientUpdateTagsOptions contains the optional parameters for the WatchersClient.UpdateTags method.
 func (client *WatchersClient) UpdateTags(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters TagsObject, options *WatchersClientUpdateTagsOptions) (WatchersClientUpdateTagsResponse, error) {
+	var err error
+	const operationName = "WatchersClient.UpdateTags"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.updateTagsCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return WatchersClientUpdateTagsResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return WatchersClientUpdateTagsResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return WatchersClientUpdateTagsResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return WatchersClientUpdateTagsResponse{}, err
 	}
-	return client.updateTagsHandleResponse(resp)
+	resp, err := client.updateTagsHandleResponse(httpResp)
+	return resp, err
 }
 
 // updateTagsCreateRequest creates the UpdateTags request.
@@ -1132,10 +1309,13 @@ func (client *WatchersClient) updateTagsCreateRequest(ctx context.Context, resou
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // updateTagsHandleResponse handles the UpdateTags response.
@@ -1150,7 +1330,7 @@ func (client *WatchersClient) updateTagsHandleResponse(resp *http.Response) (Wat
 // BeginVerifyIPFlow - Verify IP flow from the specified VM to a location given the currently configured NSG rules.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - networkWatcherName - The name of the network watcher.
 //   - parameters - Parameters that define the IP flow to be verified.
@@ -1162,31 +1342,41 @@ func (client *WatchersClient) BeginVerifyIPFlow(ctx context.Context, resourceGro
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientVerifyIPFlowResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WatchersClientVerifyIPFlowResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WatchersClientVerifyIPFlowResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WatchersClientVerifyIPFlowResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // VerifyIPFlow - Verify IP flow from the specified VM to a location given the currently configured NSG rules.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WatchersClient) verifyIPFlow(ctx context.Context, resourceGroupName string, networkWatcherName string, parameters VerificationIPFlowParameters, options *WatchersClientBeginVerifyIPFlowOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WatchersClient.BeginVerifyIPFlow"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.verifyIPFlowCreateRequest(ctx, resourceGroupName, networkWatcherName, parameters, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // verifyIPFlowCreateRequest creates the VerifyIPFlow request.
@@ -1209,8 +1399,11 @@ func (client *WatchersClient) verifyIPFlowCreateRequest(ctx context.Context, res
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/webapplicationfirewallpolicies_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/webapplicationfirewallpolicies_client.go
similarity index 80%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/webapplicationfirewallpolicies_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/webapplicationfirewallpolicies_client.go
index 1d357afaefd..eb2154b45ca 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/webapplicationfirewallpolicies_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/webapplicationfirewallpolicies_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type WebApplicationFirewallPoliciesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewWebApplicationFirewallPoliciesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*WebApplicationFirewallPoliciesClient, error) {
-	cl, err := arm.NewClient(moduleName+".WebApplicationFirewallPoliciesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,25 +47,32 @@ func NewWebApplicationFirewallPoliciesClient(subscriptionID string, credential a
 // CreateOrUpdate - Creates or update policy with specified rule set name within a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - policyName - The name of the policy.
 //   - parameters - Policy to be created.
 //   - options - WebApplicationFirewallPoliciesClientCreateOrUpdateOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.CreateOrUpdate
 //     method.
 func (client *WebApplicationFirewallPoliciesClient) CreateOrUpdate(ctx context.Context, resourceGroupName string, policyName string, parameters WebApplicationFirewallPolicy, options *WebApplicationFirewallPoliciesClientCreateOrUpdateOptions) (WebApplicationFirewallPoliciesClientCreateOrUpdateResponse, error) {
+	var err error
+	const operationName = "WebApplicationFirewallPoliciesClient.CreateOrUpdate"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.createOrUpdateCreateRequest(ctx, resourceGroupName, policyName, parameters, options)
 	if err != nil {
 		return WebApplicationFirewallPoliciesClientCreateOrUpdateResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return WebApplicationFirewallPoliciesClientCreateOrUpdateResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusCreated) {
-		return WebApplicationFirewallPoliciesClientCreateOrUpdateResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusCreated) {
+		err = runtime.NewResponseError(httpResp)
+		return WebApplicationFirewallPoliciesClientCreateOrUpdateResponse{}, err
 	}
-	return client.createOrUpdateHandleResponse(resp)
+	resp, err := client.createOrUpdateHandleResponse(httpResp)
+	return resp, err
 }
 
 // createOrUpdateCreateRequest creates the CreateOrUpdate request.
@@ -89,10 +95,13 @@ func (client *WebApplicationFirewallPoliciesClient) createOrUpdateCreateRequest(
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
-	return req, runtime.MarshalAsJSON(req, parameters)
+	if err := runtime.MarshalAsJSON(req, parameters); err != nil {
+		return nil, err
+	}
+	return req, nil
 }
 
 // createOrUpdateHandleResponse handles the CreateOrUpdate response.
@@ -107,7 +116,7 @@ func (client *WebApplicationFirewallPoliciesClient) createOrUpdateHandleResponse
 // BeginDelete - Deletes Policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - policyName - The name of the policy.
 //   - options - WebApplicationFirewallPoliciesClientBeginDeleteOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.BeginDelete
@@ -118,31 +127,41 @@ func (client *WebApplicationFirewallPoliciesClient) BeginDelete(ctx context.Cont
 		if err != nil {
 			return nil, err
 		}
-		return runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WebApplicationFirewallPoliciesClientDeleteResponse]{
+		poller, err := runtime.NewPoller(resp, client.internal.Pipeline(), &runtime.NewPollerOptions[WebApplicationFirewallPoliciesClientDeleteResponse]{
 			FinalStateVia: runtime.FinalStateViaLocation,
+			Tracer:        client.internal.Tracer(),
 		})
+		return poller, err
 	} else {
-		return runtime.NewPollerFromResumeToken[WebApplicationFirewallPoliciesClientDeleteResponse](options.ResumeToken, client.internal.Pipeline(), nil)
+		return runtime.NewPollerFromResumeToken(options.ResumeToken, client.internal.Pipeline(), &runtime.NewPollerFromResumeTokenOptions[WebApplicationFirewallPoliciesClientDeleteResponse]{
+			Tracer: client.internal.Tracer(),
+		})
 	}
 }
 
 // Delete - Deletes Policy.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 func (client *WebApplicationFirewallPoliciesClient) deleteOperation(ctx context.Context, resourceGroupName string, policyName string, options *WebApplicationFirewallPoliciesClientBeginDeleteOptions) (*http.Response, error) {
+	var err error
+	const operationName = "WebApplicationFirewallPoliciesClient.BeginDelete"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.deleteCreateRequest(ctx, resourceGroupName, policyName, options)
 	if err != nil {
 		return nil, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return nil, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
-		return nil, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK, http.StatusAccepted, http.StatusNoContent) {
+		err = runtime.NewResponseError(httpResp)
+		return nil, err
 	}
-	return resp, nil
+	return httpResp, nil
 }
 
 // deleteCreateRequest creates the Delete request.
@@ -165,7 +184,7 @@ func (client *WebApplicationFirewallPoliciesClient) deleteCreateRequest(ctx cont
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -174,24 +193,31 @@ func (client *WebApplicationFirewallPoliciesClient) deleteCreateRequest(ctx cont
 // Get - Retrieve protection policy with specified name within a resource group.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - policyName - The name of the policy.
 //   - options - WebApplicationFirewallPoliciesClientGetOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.Get
 //     method.
 func (client *WebApplicationFirewallPoliciesClient) Get(ctx context.Context, resourceGroupName string, policyName string, options *WebApplicationFirewallPoliciesClientGetOptions) (WebApplicationFirewallPoliciesClientGetResponse, error) {
+	var err error
+	const operationName = "WebApplicationFirewallPoliciesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, resourceGroupName, policyName, options)
 	if err != nil {
 		return WebApplicationFirewallPoliciesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return WebApplicationFirewallPoliciesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return WebApplicationFirewallPoliciesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return WebApplicationFirewallPoliciesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -214,7 +240,7 @@ func (client *WebApplicationFirewallPoliciesClient) getCreateRequest(ctx context
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -231,7 +257,7 @@ func (client *WebApplicationFirewallPoliciesClient) getHandleResponse(resp *http
 
 // NewListPager - Lists all of the protection policies within a resource group.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - resourceGroupName - The name of the resource group.
 //   - options - WebApplicationFirewallPoliciesClientListOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.NewListPager
 //     method.
@@ -241,25 +267,20 @@ func (client *WebApplicationFirewallPoliciesClient) NewListPager(resourceGroupNa
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *WebApplicationFirewallPoliciesClientListResponse) (WebApplicationFirewallPoliciesClientListResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listCreateRequest(ctx, resourceGroupName, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "WebApplicationFirewallPoliciesClient.NewListPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listCreateRequest(ctx, resourceGroupName, options)
+			}, nil)
 			if err != nil {
 				return WebApplicationFirewallPoliciesClientListResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return WebApplicationFirewallPoliciesClientListResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return WebApplicationFirewallPoliciesClientListResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -279,7 +300,7 @@ func (client *WebApplicationFirewallPoliciesClient) listCreateRequest(ctx contex
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
@@ -296,7 +317,7 @@ func (client *WebApplicationFirewallPoliciesClient) listHandleResponse(resp *htt
 
 // NewListAllPager - Gets all the WAF policies in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - WebApplicationFirewallPoliciesClientListAllOptions contains the optional parameters for the WebApplicationFirewallPoliciesClient.NewListAllPager
 //     method.
 func (client *WebApplicationFirewallPoliciesClient) NewListAllPager(options *WebApplicationFirewallPoliciesClientListAllOptions) *runtime.Pager[WebApplicationFirewallPoliciesClientListAllResponse] {
@@ -305,25 +326,20 @@ func (client *WebApplicationFirewallPoliciesClient) NewListAllPager(options *Web
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *WebApplicationFirewallPoliciesClientListAllResponse) (WebApplicationFirewallPoliciesClientListAllResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listAllCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "WebApplicationFirewallPoliciesClient.NewListAllPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listAllCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return WebApplicationFirewallPoliciesClientListAllResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return WebApplicationFirewallPoliciesClientListAllResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return WebApplicationFirewallPoliciesClientListAllResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listAllHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -339,7 +355,7 @@ func (client *WebApplicationFirewallPoliciesClient) listAllCreateRequest(ctx con
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/webcategories_client.go b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/webcategories_client.go
similarity index 82%
rename from vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/webcategories_client.go
rename to vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/webcategories_client.go
index 73e02a4e1e2..26f7c27a74d 100644
--- a/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2/webcategories_client.go
+++ b/vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4/webcategories_client.go
@@ -3,9 +3,8 @@
 
 // Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License. See License.txt in the project root for license information.
-// Code generated by Microsoft (R) AutoRest Code Generator.
+// Code generated by Microsoft (R) AutoRest Code Generator. DO NOT EDIT.
 // Changes may cause incorrect behavior and will be lost if the code is regenerated.
-// DO NOT EDIT.
 
 package armnetwork
 
@@ -34,7 +33,7 @@ type WebCategoriesClient struct {
 //   - credential - used to authorize requests. Usually a credential from azidentity.
 //   - options - pass nil to accept the default values.
 func NewWebCategoriesClient(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*WebCategoriesClient, error) {
-	cl, err := arm.NewClient(moduleName+".WebCategoriesClient", moduleVersion, credential, options)
+	cl, err := arm.NewClient(moduleName, moduleVersion, credential, options)
 	if err != nil {
 		return nil, err
 	}
@@ -48,22 +47,29 @@ func NewWebCategoriesClient(subscriptionID string, credential azcore.TokenCreden
 // Get - Gets the specified Azure Web Category.
 // If the operation fails it returns an *azcore.ResponseError type.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - name - The name of the azureWebCategory.
 //   - options - WebCategoriesClientGetOptions contains the optional parameters for the WebCategoriesClient.Get method.
 func (client *WebCategoriesClient) Get(ctx context.Context, name string, options *WebCategoriesClientGetOptions) (WebCategoriesClientGetResponse, error) {
+	var err error
+	const operationName = "WebCategoriesClient.Get"
+	ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, operationName)
+	ctx, endSpan := runtime.StartSpan(ctx, operationName, client.internal.Tracer(), nil)
+	defer func() { endSpan(err) }()
 	req, err := client.getCreateRequest(ctx, name, options)
 	if err != nil {
 		return WebCategoriesClientGetResponse{}, err
 	}
-	resp, err := client.internal.Pipeline().Do(req)
+	httpResp, err := client.internal.Pipeline().Do(req)
 	if err != nil {
 		return WebCategoriesClientGetResponse{}, err
 	}
-	if !runtime.HasStatusCode(resp, http.StatusOK) {
-		return WebCategoriesClientGetResponse{}, runtime.NewResponseError(resp)
+	if !runtime.HasStatusCode(httpResp, http.StatusOK) {
+		err = runtime.NewResponseError(httpResp)
+		return WebCategoriesClientGetResponse{}, err
 	}
-	return client.getHandleResponse(resp)
+	resp, err := client.getHandleResponse(httpResp)
+	return resp, err
 }
 
 // getCreateRequest creates the Get request.
@@ -82,7 +88,7 @@ func (client *WebCategoriesClient) getCreateRequest(ctx context.Context, name st
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	if options != nil && options.Expand != nil {
 		reqQP.Set("$expand", *options.Expand)
 	}
@@ -102,7 +108,7 @@ func (client *WebCategoriesClient) getHandleResponse(resp *http.Response) (WebCa
 
 // NewListBySubscriptionPager - Gets all the Azure Web Categories in a subscription.
 //
-// Generated from API version 2022-09-01
+// Generated from API version 2023-05-01
 //   - options - WebCategoriesClientListBySubscriptionOptions contains the optional parameters for the WebCategoriesClient.NewListBySubscriptionPager
 //     method.
 func (client *WebCategoriesClient) NewListBySubscriptionPager(options *WebCategoriesClientListBySubscriptionOptions) *runtime.Pager[WebCategoriesClientListBySubscriptionResponse] {
@@ -111,25 +117,20 @@ func (client *WebCategoriesClient) NewListBySubscriptionPager(options *WebCatego
 			return page.NextLink != nil && len(*page.NextLink) > 0
 		},
 		Fetcher: func(ctx context.Context, page *WebCategoriesClientListBySubscriptionResponse) (WebCategoriesClientListBySubscriptionResponse, error) {
-			var req *policy.Request
-			var err error
-			if page == nil {
-				req, err = client.listBySubscriptionCreateRequest(ctx, options)
-			} else {
-				req, err = runtime.NewRequest(ctx, http.MethodGet, *page.NextLink)
+			ctx = context.WithValue(ctx, runtime.CtxAPINameKey{}, "WebCategoriesClient.NewListBySubscriptionPager")
+			nextLink := ""
+			if page != nil {
+				nextLink = *page.NextLink
 			}
+			resp, err := runtime.FetcherForNextLink(ctx, client.internal.Pipeline(), nextLink, func(ctx context.Context) (*policy.Request, error) {
+				return client.listBySubscriptionCreateRequest(ctx, options)
+			}, nil)
 			if err != nil {
 				return WebCategoriesClientListBySubscriptionResponse{}, err
 			}
-			resp, err := client.internal.Pipeline().Do(req)
-			if err != nil {
-				return WebCategoriesClientListBySubscriptionResponse{}, err
-			}
-			if !runtime.HasStatusCode(resp, http.StatusOK) {
-				return WebCategoriesClientListBySubscriptionResponse{}, runtime.NewResponseError(resp)
-			}
 			return client.listBySubscriptionHandleResponse(resp)
 		},
+		Tracer: client.internal.Tracer(),
 	})
 }
 
@@ -145,7 +146,7 @@ func (client *WebCategoriesClient) listBySubscriptionCreateRequest(ctx context.C
 		return nil, err
 	}
 	reqQP := req.Raw().URL.Query()
-	reqQP.Set("api-version", "2022-09-01")
+	reqQP.Set("api-version", "2023-05-01")
 	req.Raw().URL.RawQuery = reqQP.Encode()
 	req.Raw().Header["Accept"] = []string{"application/json"}
 	return req, nil
diff --git a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential/confidential.go b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential/confidential.go
index 6612feb4bf8..1841d146f5f 100644
--- a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential/confidential.go
+++ b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential/confidential.go
@@ -59,6 +59,8 @@ added, it doesn't exist in real life. As such I've put a PEM decoder into here.
 // For details see https://aka.ms/msal-net-authenticationresult
 type AuthResult = base.AuthResult
 
+type AuthenticationScheme = authority.AuthenticationScheme
+
 type Account = shared.Account
 
 // CertFromPEM converts a PEM file (.pem or .key) for use with [NewCredFromCert]. The file
@@ -454,6 +456,33 @@ func WithClaims(claims string) interface {
 	}
 }
 
+// WithAuthenticationScheme is an extensibility mechanism designed to be used only by Azure Arc for proof of possession access tokens.
+func WithAuthenticationScheme(authnScheme AuthenticationScheme) interface {
+	AcquireSilentOption
+	AcquireByCredentialOption
+	options.CallOption
+} {
+	return struct {
+		AcquireSilentOption
+		AcquireByCredentialOption
+		options.CallOption
+	}{
+		CallOption: options.NewCallOption(
+			func(a any) error {
+				switch t := a.(type) {
+				case *acquireTokenSilentOptions:
+					t.authnScheme = authnScheme
+				case *acquireTokenByCredentialOptions:
+					t.authnScheme = authnScheme
+				default:
+					return fmt.Errorf("unexpected options type %T", a)
+				}
+				return nil
+			},
+		),
+	}
+}
+
 // WithTenantID specifies a tenant for a single authentication. It may be different than the tenant set in [New].
 // This option is valid for any token acquisition method.
 func WithTenantID(tenantID string) interface {
@@ -499,6 +528,7 @@ func WithTenantID(tenantID string) interface {
 type acquireTokenSilentOptions struct {
 	account          Account
 	claims, tenantID string
+	authnScheme      AuthenticationScheme
 }
 
 // AcquireSilentOption is implemented by options for AcquireTokenSilent
@@ -549,6 +579,7 @@ func (cca Client) AcquireTokenSilent(ctx context.Context, scopes []string, opts
 		Credential:  cca.cred,
 		IsAppCache:  o.account.IsZero(),
 		TenantID:    o.tenantID,
+		AuthnScheme: o.authnScheme,
 	}
 
 	return cca.base.AcquireTokenSilent(ctx, silentParameters)
@@ -614,6 +645,7 @@ func (cca Client) AcquireTokenByAuthCode(ctx context.Context, code string, redir
 // acquireTokenByCredentialOptions contains optional configuration for AcquireTokenByCredential
 type acquireTokenByCredentialOptions struct {
 	claims, tenantID string
+	authnScheme      AuthenticationScheme
 }
 
 // AcquireByCredentialOption is implemented by options for AcquireTokenByCredential
@@ -637,7 +669,9 @@ func (cca Client) AcquireTokenByCredential(ctx context.Context, scopes []string,
 	authParams.Scopes = scopes
 	authParams.AuthorizationType = authority.ATClientCredentials
 	authParams.Claims = o.claims
-
+	if o.authnScheme != nil {
+		authParams.AuthnScheme = o.authnScheme
+	}
 	token, err := cca.base.Token.Credential(ctx, authParams, cca.cred)
 	if err != nil {
 		return AuthResult{}, err
diff --git a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/base.go b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/base.go
index 5f68384f68b..09a0d92f520 100644
--- a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/base.go
+++ b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/base.go
@@ -54,6 +54,7 @@ type AcquireTokenSilentParameters struct {
 	UserAssertion     string
 	AuthorizationType authority.AuthorizeType
 	Claims            string
+	AuthnScheme       authority.AuthenticationScheme
 }
 
 // AcquireTokenAuthCodeParameters contains the parameters required to acquire an access token using the auth code flow.
@@ -289,6 +290,9 @@ func (b Client) AcquireTokenSilent(ctx context.Context, silent AcquireTokenSilen
 	authParams.AuthorizationType = silent.AuthorizationType
 	authParams.Claims = silent.Claims
 	authParams.UserAssertion = silent.UserAssertion
+	if silent.AuthnScheme != nil {
+		authParams.AuthnScheme = silent.AuthnScheme
+	}
 
 	m := b.pmanager
 	if authParams.AuthorizationType != authority.ATOnBehalfOf {
@@ -313,6 +317,7 @@ func (b Client) AcquireTokenSilent(ctx context.Context, silent AcquireTokenSilen
 	if silent.Claims == "" {
 		ar, err = AuthResultFromStorage(storageTokenResponse)
 		if err == nil {
+			ar.AccessToken, err = authParams.AuthnScheme.FormatAccessToken(ar.AccessToken)
 			return ar, err
 		}
 	}
@@ -417,6 +422,11 @@ func (b Client) AuthResultFromToken(ctx context.Context, authParams authority.Au
 	if err == nil && b.cacheAccessor != nil {
 		err = b.cacheAccessor.Export(ctx, b.manager, cache.ExportHints{PartitionKey: key})
 	}
+	if err != nil {
+		return AuthResult{}, err
+	}
+
+	ar.AccessToken, err = authParams.AuthnScheme.FormatAccessToken(ar.AccessToken)
 	return ar, err
 }
 
diff --git a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/items.go b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/items.go
index 5d4c9f1d1f3..f9be90276da 100644
--- a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/items.go
+++ b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/items.go
@@ -12,6 +12,7 @@ import (
 
 	internalTime "github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/json/types/time"
 	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/accesstokens"
+	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/authority"
 	"github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/shared"
 )
 
@@ -75,12 +76,14 @@ type AccessToken struct {
 	ExtendedExpiresOn internalTime.Unix `json:"extended_expires_on,omitempty"`
 	CachedAt          internalTime.Unix `json:"cached_at,omitempty"`
 	UserAssertionHash string            `json:"user_assertion_hash,omitempty"`
+	TokenType         string            `json:"token_type,omitempty"`
+	AuthnSchemeKeyID  string            `json:"keyid,omitempty"`
 
 	AdditionalFields map[string]interface{}
 }
 
 // NewAccessToken is the constructor for AccessToken.
-func NewAccessToken(homeID, env, realm, clientID string, cachedAt, expiresOn, extendedExpiresOn time.Time, scopes, token string) AccessToken {
+func NewAccessToken(homeID, env, realm, clientID string, cachedAt, expiresOn, extendedExpiresOn time.Time, scopes, token, tokenType, authnSchemeKeyID string) AccessToken {
 	return AccessToken{
 		HomeAccountID:     homeID,
 		Environment:       env,
@@ -92,6 +95,8 @@ func NewAccessToken(homeID, env, realm, clientID string, cachedAt, expiresOn, ex
 		CachedAt:          internalTime.Unix{T: cachedAt.UTC()},
 		ExpiresOn:         internalTime.Unix{T: expiresOn.UTC()},
 		ExtendedExpiresOn: internalTime.Unix{T: extendedExpiresOn.UTC()},
+		TokenType:         tokenType,
+		AuthnSchemeKeyID:  authnSchemeKeyID,
 	}
 }
 
@@ -101,6 +106,11 @@ func (a AccessToken) Key() string {
 		[]string{a.HomeAccountID, a.Environment, a.CredentialType, a.ClientID, a.Realm, a.Scopes},
 		shared.CacheKeySeparator,
 	)
+	// add token type to key for new access tokens types. skip for bearer token type to
+	// preserve fwd and back compat between a common cache and msal clients
+	if !strings.EqualFold(a.TokenType, authority.AccessTokenTypeBearer) {
+		key = strings.Join([]string{key, a.TokenType}, shared.CacheKeySeparator)
+	}
 	return strings.ToLower(key)
 }
 
diff --git a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/partitioned_storage.go b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/partitioned_storage.go
index 5e1cae0b8a3..c0931833064 100644
--- a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/partitioned_storage.go
+++ b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/partitioned_storage.go
@@ -41,6 +41,8 @@ func (m *PartitionedManager) Read(ctx context.Context, authParameters authority.
 	realm := authParameters.AuthorityInfo.Tenant
 	clientID := authParameters.ClientID
 	scopes := authParameters.Scopes
+	authnSchemeKeyID := authParameters.AuthnScheme.KeyID()
+	tokenType := authParameters.AuthnScheme.AccessTokenType()
 
 	// fetch metadata if instanceDiscovery is enabled
 	aliases := []string{authParameters.AuthorityInfo.Host}
@@ -57,7 +59,7 @@ func (m *PartitionedManager) Read(ctx context.Context, authParameters authority.
 
 	// errors returned by read* methods indicate a cache miss and are therefore non-fatal. We continue populating
 	// TokenResponse fields so that e.g. lack of an ID token doesn't prevent the caller from receiving a refresh token.
-	accessToken, err := m.readAccessToken(aliases, realm, clientID, userAssertionHash, scopes, partitionKeyFromRequest)
+	accessToken, err := m.readAccessToken(aliases, realm, clientID, userAssertionHash, scopes, partitionKeyFromRequest, tokenType, authnSchemeKeyID)
 	if err == nil {
 		tr.AccessToken = accessToken
 	}
@@ -92,7 +94,7 @@ func (m *PartitionedManager) Write(authParameters authority.AuthParams, tokenRes
 	target := strings.Join(tokenResponse.GrantedScopes.Slice, scopeSeparator)
 	userAssertionHash := authParameters.AssertionHash()
 	cachedAt := time.Now()
-
+	authnSchemeKeyID := authParameters.AuthnScheme.KeyID()
 	var account shared.Account
 
 	if len(tokenResponse.RefreshToken) > 0 {
@@ -116,6 +118,8 @@ func (m *PartitionedManager) Write(authParameters authority.AuthParams, tokenRes
 			tokenResponse.ExtExpiresOn.T,
 			target,
 			tokenResponse.AccessToken,
+			tokenResponse.TokenType,
+			authnSchemeKeyID,
 		)
 		if authParameters.AuthorizationType == authority.ATOnBehalfOf {
 			accessToken.UserAssertionHash = userAssertionHash // get Hash method on this
@@ -215,7 +219,7 @@ func (m *PartitionedManager) aadMetadata(ctx context.Context, authorityInfo auth
 	return m.aadCache[authorityInfo.Host], nil
 }
 
-func (m *PartitionedManager) readAccessToken(envAliases []string, realm, clientID, userAssertionHash string, scopes []string, partitionKey string) (AccessToken, error) {
+func (m *PartitionedManager) readAccessToken(envAliases []string, realm, clientID, userAssertionHash string, scopes []string, partitionKey, tokenType, authnSchemeKeyID string) (AccessToken, error) {
 	m.contractMu.RLock()
 	defer m.contractMu.RUnlock()
 	if accessTokens, ok := m.contract.AccessTokensPartition[partitionKey]; ok {
@@ -224,9 +228,11 @@ func (m *PartitionedManager) readAccessToken(envAliases []string, realm, clientI
 		// an issue, however if it does become a problem then we know where to look.
 		for _, at := range accessTokens {
 			if at.Realm == realm && at.ClientID == clientID && at.UserAssertionHash == userAssertionHash {
-				if checkAlias(at.Environment, envAliases) {
-					if isMatchingScopes(scopes, at.Scopes) {
-						return at, nil
+				if at.TokenType == tokenType && at.AuthnSchemeKeyID == authnSchemeKeyID {
+					if checkAlias(at.Environment, envAliases) {
+						if isMatchingScopes(scopes, at.Scopes) {
+							return at, nil
+						}
 					}
 				}
 			}
diff --git a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/storage.go b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/storage.go
index d3a39e005ca..2221e60c437 100644
--- a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/storage.go
+++ b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/internal/storage/storage.go
@@ -82,6 +82,39 @@ func isMatchingScopes(scopesOne []string, scopesTwo string) bool {
 	return scopeCounter == len(scopesOne)
 }
 
+// needsUpgrade returns true if the given key follows the v1.0 schema i.e.,
+// it contains an uppercase character (v1.1+ keys are all lowercase)
+func needsUpgrade(key string) bool {
+	for _, r := range key {
+		if 'A' <= r && r <= 'Z' {
+			return true
+		}
+	}
+	return false
+}
+
+// upgrade a v1.0 cache item by adding a v1.1+ item having the same value and deleting
+// the v1.0 item. Callers must hold an exclusive lock on m.
+func upgrade[T any](m map[string]T, k string) T {
+	v1_1Key := strings.ToLower(k)
+	v, ok := m[k]
+	if !ok {
+		// another goroutine did the upgrade while this one was waiting for the write lock
+		return m[v1_1Key]
+	}
+	if v2, ok := m[v1_1Key]; ok {
+		// cache has an equivalent v1.1+ item, which we prefer because we know it was added
+		// by a newer version of the module and is therefore more likely to remain valid.
+		// The v1.0 item may have expired because only v1.0 or earlier would update it.
+		v = v2
+	} else {
+		// add an equivalent item according to the v1.1 schema
+		m[v1_1Key] = v
+	}
+	delete(m, k)
+	return v
+}
+
 // Read reads a storage token from the cache if it exists.
 func (m *Manager) Read(ctx context.Context, authParameters authority.AuthParams) (TokenResponse, error) {
 	tr := TokenResponse{}
@@ -89,6 +122,8 @@ func (m *Manager) Read(ctx context.Context, authParameters authority.AuthParams)
 	realm := authParameters.AuthorityInfo.Tenant
 	clientID := authParameters.ClientID
 	scopes := authParameters.Scopes
+	authnSchemeKeyID := authParameters.AuthnScheme.KeyID()
+	tokenType := authParameters.AuthnScheme.AccessTokenType()
 
 	// fetch metadata if instanceDiscovery is enabled
 	aliases := []string{authParameters.AuthorityInfo.Host}
@@ -100,7 +135,7 @@ func (m *Manager) Read(ctx context.Context, authParameters authority.AuthParams)
 		aliases = metadata.Aliases
 	}
 
-	accessToken := m.readAccessToken(homeAccountID, aliases, realm, clientID, scopes)
+	accessToken := m.readAccessToken(homeAccountID, aliases, realm, clientID, scopes, tokenType, authnSchemeKeyID)
 	tr.AccessToken = accessToken
 
 	if homeAccountID == "" {
@@ -140,6 +175,7 @@ func (m *Manager) Write(authParameters authority.AuthParams, tokenResponse acces
 	clientID := authParameters.ClientID
 	target := strings.Join(tokenResponse.GrantedScopes.Slice, scopeSeparator)
 	cachedAt := time.Now()
+	authnSchemeKeyID := authParameters.AuthnScheme.KeyID()
 
 	var account shared.Account
 
@@ -161,6 +197,8 @@ func (m *Manager) Write(authParameters authority.AuthParams, tokenResponse acces
 			tokenResponse.ExtExpiresOn.T,
 			target,
 			tokenResponse.AccessToken,
+			tokenResponse.TokenType,
+			authnSchemeKeyID,
 		)
 
 		// Since we have a valid access token, cache it before moving on.
@@ -248,21 +286,27 @@ func (m *Manager) aadMetadata(ctx context.Context, authorityInfo authority.Info)
 	return m.aadCache[authorityInfo.Host], nil
 }
 
-func (m *Manager) readAccessToken(homeID string, envAliases []string, realm, clientID string, scopes []string) AccessToken {
+func (m *Manager) readAccessToken(homeID string, envAliases []string, realm, clientID string, scopes []string, tokenType, authnSchemeKeyID string) AccessToken {
 	m.contractMu.RLock()
-	defer m.contractMu.RUnlock()
 	// TODO: linear search (over a map no less) is slow for a large number (thousands) of tokens.
 	// this shows up as the dominating node in a profile. for real-world scenarios this likely isn't
 	// an issue, however if it does become a problem then we know where to look.
-	for _, at := range m.contract.AccessTokens {
+	for k, at := range m.contract.AccessTokens {
 		if at.HomeAccountID == homeID && at.Realm == realm && at.ClientID == clientID {
-			if checkAlias(at.Environment, envAliases) {
-				if isMatchingScopes(scopes, at.Scopes) {
+			if (strings.EqualFold(at.TokenType, tokenType) && at.AuthnSchemeKeyID == authnSchemeKeyID) || (at.TokenType == "" && (tokenType == "" || tokenType == "Bearer")) {
+				if checkAlias(at.Environment, envAliases) && isMatchingScopes(scopes, at.Scopes) {
+					m.contractMu.RUnlock()
+					if needsUpgrade(k) {
+						m.contractMu.Lock()
+						defer m.contractMu.Unlock()
+						at = upgrade(m.contract.AccessTokens, k)
+					}
 					return at
 				}
 			}
 		}
 	}
+	m.contractMu.RUnlock()
 	return AccessToken{}
 }
 
@@ -303,15 +347,21 @@ func (m *Manager) readRefreshToken(homeID string, envAliases []string, familyID,
 	// If app is part of the family or if we DO NOT KNOW if it's part of the family, search by family ID, then by client_id (we will know if an app is part of the family after the first token response).
 	// https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/blob/311fe8b16e7c293462806f397e189a6aa1159769/src/client/Microsoft.Identity.Client/Internal/Requests/Silent/CacheSilentStrategy.cs#L95
 	m.contractMu.RLock()
-	defer m.contractMu.RUnlock()
 	for _, matcher := range matchers {
-		for _, rt := range m.contract.RefreshTokens {
+		for k, rt := range m.contract.RefreshTokens {
 			if matcher(rt) {
+				m.contractMu.RUnlock()
+				if needsUpgrade(k) {
+					m.contractMu.Lock()
+					defer m.contractMu.Unlock()
+					rt = upgrade(m.contract.RefreshTokens, k)
+				}
 				return rt, nil
 			}
 		}
 	}
 
+	m.contractMu.RUnlock()
 	return accesstokens.RefreshToken{}, fmt.Errorf("refresh token not found")
 }
 
@@ -333,14 +383,20 @@ func (m *Manager) writeRefreshToken(refreshToken accesstokens.RefreshToken) erro
 
 func (m *Manager) readIDToken(homeID string, envAliases []string, realm, clientID string) (IDToken, error) {
 	m.contractMu.RLock()
-	defer m.contractMu.RUnlock()
-	for _, idt := range m.contract.IDTokens {
+	for k, idt := range m.contract.IDTokens {
 		if idt.HomeAccountID == homeID && idt.Realm == realm && idt.ClientID == clientID {
 			if checkAlias(idt.Environment, envAliases) {
+				m.contractMu.RUnlock()
+				if needsUpgrade(k) {
+					m.contractMu.Lock()
+					defer m.contractMu.Unlock()
+					idt = upgrade(m.contract.IDTokens, k)
+				}
 				return idt, nil
 			}
 		}
 	}
+	m.contractMu.RUnlock()
 	return IDToken{}, fmt.Errorf("token not found")
 }
 
@@ -379,7 +435,6 @@ func (m *Manager) Account(homeAccountID string) shared.Account {
 
 func (m *Manager) readAccount(homeAccountID string, envAliases []string, realm string) (shared.Account, error) {
 	m.contractMu.RLock()
-	defer m.contractMu.RUnlock()
 
 	// You might ask why, if cache.Accounts is a map, we would loop through all of these instead of using a key.
 	// We only use a map because the storage contract shared between all language implementations says use a map.
@@ -387,11 +442,18 @@ func (m *Manager) readAccount(homeAccountID string, envAliases []string, realm s
 	// a match in multiple envs (envAlias). That means we either need to hash each possible keyand do the lookup
 	// or just statically check.  Since the design is to have a storage.Manager per user, the amount of keys stored
 	// is really low (say 2).  Each hash is more expensive than the entire iteration.
-	for _, acc := range m.contract.Accounts {
+	for k, acc := range m.contract.Accounts {
 		if acc.HomeAccountID == homeAccountID && checkAlias(acc.Environment, envAliases) && acc.Realm == realm {
+			m.contractMu.RUnlock()
+			if needsUpgrade(k) {
+				m.contractMu.Lock()
+				defer m.contractMu.Unlock()
+				acc = upgrade(m.contract.Accounts, k)
+			}
 			return acc, nil
 		}
 	}
+	m.contractMu.RUnlock()
 	return shared.Account{}, fmt.Errorf("account not found")
 }
 
@@ -405,13 +467,18 @@ func (m *Manager) writeAccount(account shared.Account) error {
 
 func (m *Manager) readAppMetaData(envAliases []string, clientID string) (AppMetaData, error) {
 	m.contractMu.RLock()
-	defer m.contractMu.RUnlock()
-
-	for _, app := range m.contract.AppMetaData {
+	for k, app := range m.contract.AppMetaData {
 		if checkAlias(app.Environment, envAliases) && app.ClientID == clientID {
+			m.contractMu.RUnlock()
+			if needsUpgrade(k) {
+				m.contractMu.Lock()
+				defer m.contractMu.Unlock()
+				app = upgrade(m.contract.AppMetaData, k)
+			}
 			return app, nil
 		}
 	}
+	m.contractMu.RUnlock()
 	return AppMetaData{}, fmt.Errorf("not found")
 }
 
diff --git a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/oauth.go b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/oauth.go
index ebd86e2baf9..ef8d908a444 100644
--- a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/oauth.go
+++ b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/oauth.go
@@ -119,6 +119,7 @@ func (t *Client) Credential(ctx context.Context, authParams authority.AuthParams
 			return accesstokens.TokenResponse{}, err
 		}
 		return accesstokens.TokenResponse{
+			TokenType:   authParams.AuthnScheme.AccessTokenType(),
 			AccessToken: tr.AccessToken,
 			ExpiresOn: internalTime.DurationTime{
 				T: now.Add(time.Duration(tr.ExpiresInSeconds) * time.Second),
diff --git a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/accesstokens/accesstokens.go b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/accesstokens/accesstokens.go
index 003d38648a6..a7b7b0742d8 100644
--- a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/accesstokens/accesstokens.go
+++ b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/accesstokens/accesstokens.go
@@ -380,6 +380,12 @@ func (c Client) FromSamlGrant(ctx context.Context, authParameters authority.Auth
 
 func (c Client) doTokenResp(ctx context.Context, authParams authority.AuthParams, qv url.Values) (TokenResponse, error) {
 	resp := TokenResponse{}
+	if authParams.AuthnScheme != nil {
+		trParams := authParams.AuthnScheme.TokenRequestParams()
+		for k, v := range trParams {
+			qv.Set(k, v)
+		}
+	}
 	err := c.Comm.URLFormCall(ctx, authParams.Endpoints.TokenEndpoint, qv, &resp)
 	if err != nil {
 		return resp, err
diff --git a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/accesstokens/tokens.go b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/accesstokens/tokens.go
index 3dd61d5b5f0..3107b45c113 100644
--- a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/accesstokens/tokens.go
+++ b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/accesstokens/tokens.go
@@ -168,6 +168,7 @@ type TokenResponse struct {
 
 	AccessToken  string `json:"access_token"`
 	RefreshToken string `json:"refresh_token"`
+	TokenType    string `json:"token_type"`
 
 	FamilyID       string                    `json:"foci"`
 	IDToken        IDToken                   `json:"id_token"`
diff --git a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/authority/authority.go b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/authority/authority.go
index 7b2ccb4f5d2..9d60734f88e 100644
--- a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/authority/authority.go
+++ b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/authority/authority.go
@@ -29,6 +29,7 @@ const (
 	defaultAPIVersion                 = "2021-10-01"
 	imdsEndpoint                      = "http://169.254.169.254/metadata/instance/compute/location?format=text&api-version=" + defaultAPIVersion
 	autoDetectRegion                  = "TryAutoDetect"
+	AccessTokenTypeBearer             = "Bearer"
 )
 
 // These are various hosts that host AAD Instance discovery endpoints.
@@ -138,6 +139,39 @@ const (
 	ADFS = "ADFS"
 )
 
+// AuthenticationScheme is an extensibility mechanism designed to be used only by Azure Arc for proof of possession access tokens.
+type AuthenticationScheme interface {
+	// Extra parameters that are added to the request to the /token endpoint.
+	TokenRequestParams() map[string]string
+	// Key ID of the public / private key pair used by the encryption algorithm, if any.
+	// Tokens obtained by authentication schemes that use this are bound to the KeyId, i.e.
+	// if a different kid is presented, the access token cannot be used.
+	KeyID() string
+	// Creates the access token that goes into an Authorization HTTP header.
+	FormatAccessToken(accessToken string) (string, error)
+	//Expected to match the token_type parameter returned by ESTS. Used to disambiguate
+	// between ATs of different types (e.g. Bearer and PoP) when loading from cache etc.
+	AccessTokenType() string
+}
+
+// default authn scheme realizing AuthenticationScheme for "Bearer" tokens
+type BearerAuthenticationScheme struct{}
+
+var bearerAuthnScheme BearerAuthenticationScheme
+
+func (ba *BearerAuthenticationScheme) TokenRequestParams() map[string]string {
+	return nil
+}
+func (ba *BearerAuthenticationScheme) KeyID() string {
+	return ""
+}
+func (ba *BearerAuthenticationScheme) FormatAccessToken(accessToken string) (string, error) {
+	return accessToken, nil
+}
+func (ba *BearerAuthenticationScheme) AccessTokenType() string {
+	return AccessTokenTypeBearer
+}
+
 // AuthParams represents the parameters used for authorization for token acquisition.
 type AuthParams struct {
 	AuthorityInfo Info
@@ -180,6 +214,8 @@ type AuthParams struct {
 	LoginHint string
 	// DomainHint is a directive that can be used to accelerate the user to their federated IdP sign-in page
 	DomainHint string
+	// AuthnScheme is an optional scheme for formatting access tokens
+	AuthnScheme AuthenticationScheme
 }
 
 // NewAuthParams creates an authorization parameters object.
@@ -188,6 +224,7 @@ func NewAuthParams(clientID string, authorityInfo Info) AuthParams {
 		ClientID:      clientID,
 		AuthorityInfo: authorityInfo,
 		CorrelationID: uuid.New().String(),
+		AuthnScheme:   &bearerAuthnScheme,
 	}
 }
 
diff --git a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/version/version.go b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/version/version.go
index 2ac2d09e4fa..eb16b405c4b 100644
--- a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/version/version.go
+++ b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/version/version.go
@@ -5,4 +5,4 @@
 package version
 
 // Version is the version of this client package that is communicated to the server.
-const Version = "1.1.1"
+const Version = "1.2.0"
diff --git a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/public/public.go b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/public/public.go
index 88b217dedda..e346ff3dffd 100644
--- a/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/public/public.go
+++ b/vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/public/public.go
@@ -47,9 +47,11 @@ import (
 // For details see https://aka.ms/msal-net-authenticationresult
 type AuthResult = base.AuthResult
 
+type AuthenticationScheme = authority.AuthenticationScheme
+
 type Account = shared.Account
 
-var errNoAccount = errors.New("no account was specified with public.WithAccount(), or the specified account is invalid")
+var errNoAccount = errors.New("no account was specified with public.WithSilentAccount(), or the specified account is invalid")
 
 // clientOptions configures the Client's behavior.
 type clientOptions struct {
@@ -211,6 +213,33 @@ func WithClaims(claims string) interface {
 	}
 }
 
+// WithAuthenticationScheme is an extensibility mechanism designed to be used only by Azure Arc for proof of possession access tokens.
+func WithAuthenticationScheme(authnScheme AuthenticationScheme) interface {
+	AcquireSilentOption
+	AcquireInteractiveOption
+	options.CallOption
+} {
+	return struct {
+		AcquireSilentOption
+		AcquireInteractiveOption
+		options.CallOption
+	}{
+		CallOption: options.NewCallOption(
+			func(a any) error {
+				switch t := a.(type) {
+				case *acquireTokenSilentOptions:
+					t.authnScheme = authnScheme
+				case *interactiveAuthOptions:
+					t.authnScheme = authnScheme
+				default:
+					return fmt.Errorf("unexpected options type %T", a)
+				}
+				return nil
+			},
+		),
+	}
+}
+
 // WithTenantID specifies a tenant for a single authentication. It may be different than the tenant set in [New] by [WithAuthority].
 // This option is valid for any token acquisition method.
 func WithTenantID(tenantID string) interface {
@@ -260,6 +289,7 @@ func WithTenantID(tenantID string) interface {
 type acquireTokenSilentOptions struct {
 	account          Account
 	claims, tenantID string
+	authnScheme      AuthenticationScheme
 }
 
 // AcquireSilentOption is implemented by options for AcquireTokenSilent
@@ -310,6 +340,7 @@ func (pca Client) AcquireTokenSilent(ctx context.Context, scopes []string, opts
 		RequestType: accesstokens.ATPublic,
 		IsAppCache:  false,
 		TenantID:    o.tenantID,
+		AuthnScheme: o.authnScheme,
 	}
 
 	return pca.base.AcquireTokenSilent(ctx, silentParameters)
@@ -482,6 +513,7 @@ func (pca Client) RemoveAccount(ctx context.Context, account Account) error {
 type interactiveAuthOptions struct {
 	claims, domainHint, loginHint, redirectURI, tenantID string
 	openURL                                              func(url string) error
+	authnScheme                                          AuthenticationScheme
 }
 
 // AcquireInteractiveOption is implemented by options for AcquireTokenInteractive
@@ -628,6 +660,9 @@ func (pca Client) AcquireTokenInteractive(ctx context.Context, scopes []string,
 	authParams.DomainHint = o.domainHint
 	authParams.State = uuid.New().String()
 	authParams.Prompt = "select_account"
+	if o.authnScheme != nil {
+		authParams.AuthnScheme = o.authnScheme
+	}
 	res, err := pca.browserLogin(ctx, redirectURL, authParams, o.openURL)
 	if err != nil {
 		return AuthResult{}, err
diff --git a/vendor/github.com/KimMachineGun/automemlimit/LICENSE b/vendor/github.com/KimMachineGun/automemlimit/LICENSE
new file mode 100644
index 00000000000..1f5b8f6b30d
--- /dev/null
+++ b/vendor/github.com/KimMachineGun/automemlimit/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 Geon Kim
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups.go b/vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups.go
new file mode 100644
index 00000000000..979bd39377b
--- /dev/null
+++ b/vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups.go
@@ -0,0 +1,12 @@
+package memlimit
+
+import (
+	"errors"
+)
+
+var (
+	// ErrNoCgroup is returned when the process is not in cgroup.
+	ErrNoCgroup = errors.New("process is not in cgroup")
+	// ErrCgroupsNotSupported is returned when the system does not support cgroups.
+	ErrCgroupsNotSupported = errors.New("cgroups is not supported on this system")
+)
diff --git a/vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups_linux.go b/vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups_linux.go
new file mode 100644
index 00000000000..98a95487380
--- /dev/null
+++ b/vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups_linux.go
@@ -0,0 +1,98 @@
+//go:build linux
+// +build linux
+
+package memlimit
+
+import (
+	"math"
+	"os"
+	"path/filepath"
+
+	"github.com/containerd/cgroups/v3"
+	"github.com/containerd/cgroups/v3/cgroup1"
+	"github.com/containerd/cgroups/v3/cgroup2"
+)
+
+const (
+	cgroupMountPoint = "/sys/fs/cgroup"
+)
+
+// FromCgroup returns the memory limit based on the cgroups version on this system.
+func FromCgroup() (uint64, error) {
+	switch cgroups.Mode() {
+	case cgroups.Legacy:
+		return FromCgroupV1()
+	case cgroups.Hybrid:
+		return FromCgroupHybrid()
+	case cgroups.Unified:
+		return FromCgroupV2()
+	}
+	return 0, ErrNoCgroup
+}
+
+// FromCgroupV1 returns the memory limit from the cgroup v1.
+func FromCgroupV1() (uint64, error) {
+	cg, err := cgroup1.Load(cgroup1.RootPath, cgroup1.WithHiearchy(
+		cgroup1.SingleSubsystem(cgroup1.Default, cgroup1.Memory),
+	))
+	if err != nil {
+		return 0, err
+	}
+
+	metrics, err := cg.Stat(cgroup1.IgnoreNotExist)
+	if err != nil {
+		return 0, err
+	}
+
+	if limit := metrics.GetMemory().GetHierarchicalMemoryLimit(); limit != 0 && limit != getCgroupV1NoLimit() {
+		return limit, nil
+	}
+
+	return 0, ErrNoLimit
+}
+
+func getCgroupV1NoLimit() uint64 {
+	ps := uint64(os.Getpagesize())
+	return math.MaxInt64 / ps * ps
+}
+
+// FromCgroupHybrid returns the memory limit from the cgroup v1 or v2.
+// It checks the cgroup v2 first, and if it fails, it falls back to cgroup v1.
+func FromCgroupHybrid() (uint64, error) {
+	limit, err := fromCgroupV2(filepath.Join(cgroupMountPoint, "unified"))
+	if err == nil {
+		return limit, nil
+	} else if err != ErrNoLimit {
+		return 0, err
+	}
+
+	return FromCgroupV1()
+}
+
+// FromCgroupV2 returns the memory limit from the cgroup v2.
+func FromCgroupV2() (uint64, error) {
+	return fromCgroupV2(cgroupMountPoint)
+}
+
+func fromCgroupV2(mountPoint string) (uint64, error) {
+	path, err := cgroup2.NestedGroupPath("")
+	if err != nil {
+		return 0, err
+	}
+
+	m, err := cgroup2.Load(path, cgroup2.WithMountpoint(mountPoint))
+	if err != nil {
+		return 0, err
+	}
+
+	stats, err := m.Stat()
+	if err != nil {
+		return 0, err
+	}
+
+	if limit := stats.GetMemory().GetUsageLimit(); limit != 0 && limit != math.MaxUint64 {
+		return limit, nil
+	}
+
+	return 0, ErrNoLimit
+}
diff --git a/vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups_unsupported.go b/vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups_unsupported.go
new file mode 100644
index 00000000000..9feca81a537
--- /dev/null
+++ b/vendor/github.com/KimMachineGun/automemlimit/memlimit/cgroups_unsupported.go
@@ -0,0 +1,20 @@
+//go:build !linux
+// +build !linux
+
+package memlimit
+
+func FromCgroup() (uint64, error) {
+	return 0, ErrCgroupsNotSupported
+}
+
+func FromCgroupV1() (uint64, error) {
+	return 0, ErrCgroupsNotSupported
+}
+
+func FromCgroupHybrid() (uint64, error) {
+	return 0, ErrCgroupsNotSupported
+}
+
+func FromCgroupV2() (uint64, error) {
+	return 0, ErrCgroupsNotSupported
+}
diff --git a/vendor/github.com/KimMachineGun/automemlimit/memlimit/exp_system.go b/vendor/github.com/KimMachineGun/automemlimit/memlimit/exp_system.go
new file mode 100644
index 00000000000..dee95f52078
--- /dev/null
+++ b/vendor/github.com/KimMachineGun/automemlimit/memlimit/exp_system.go
@@ -0,0 +1,14 @@
+package memlimit
+
+import (
+	"github.com/pbnjay/memory"
+)
+
+// FromSystem returns the total memory of the system.
+func FromSystem() (uint64, error) {
+	limit := memory.TotalMemory()
+	if limit == 0 {
+		return 0, ErrNoLimit
+	}
+	return limit, nil
+}
diff --git a/vendor/github.com/KimMachineGun/automemlimit/memlimit/experiment.go b/vendor/github.com/KimMachineGun/automemlimit/memlimit/experiment.go
new file mode 100644
index 00000000000..2a7c320edc9
--- /dev/null
+++ b/vendor/github.com/KimMachineGun/automemlimit/memlimit/experiment.go
@@ -0,0 +1,59 @@
+package memlimit
+
+import (
+	"fmt"
+	"os"
+	"reflect"
+	"strings"
+)
+
+const (
+	envAUTOMEMLIMIT_EXPERIMENT = "AUTOMEMLIMIT_EXPERIMENT"
+)
+
+// Experiments is a set of experiment flags.
+// It is used to enable experimental features.
+//
+// You can set the flags by setting the environment variable AUTOMEMLIMIT_EXPERIMENT.
+// The value of the environment variable is a comma-separated list of experiment names.
+//
+// The following experiment names are known:
+//
+//   - none: disable all experiments
+//   - system: enable fallback to system memory limit
+type Experiments struct {
+	// System enables fallback to system memory limit.
+	System bool
+}
+
+func parseExperiments() (Experiments, error) {
+	var exp Experiments
+
+	// Create a map of known experiment names.
+	names := make(map[string]func(bool))
+	rv := reflect.ValueOf(&exp).Elem()
+	rt := rv.Type()
+	for i := 0; i < rt.NumField(); i++ {
+		field := rv.Field(i)
+		names[strings.ToLower(rt.Field(i).Name)] = field.SetBool
+	}
+
+	// Parse names.
+	for _, f := range strings.Split(os.Getenv(envAUTOMEMLIMIT_EXPERIMENT), ",") {
+		if f == "" {
+			continue
+		}
+		if f == "none" {
+			exp = Experiments{}
+			continue
+		}
+		val := true
+		set, ok := names[f]
+		if !ok {
+			return Experiments{}, fmt.Errorf("unknown AUTOMEMLIMIT_EXPERIMENT %s", f)
+		}
+		set(val)
+	}
+
+	return exp, nil
+}
diff --git a/vendor/github.com/KimMachineGun/automemlimit/memlimit/memlimit.go b/vendor/github.com/KimMachineGun/automemlimit/memlimit/memlimit.go
new file mode 100644
index 00000000000..0d7a9853c5f
--- /dev/null
+++ b/vendor/github.com/KimMachineGun/automemlimit/memlimit/memlimit.go
@@ -0,0 +1,177 @@
+package memlimit
+
+import (
+	"errors"
+	"fmt"
+	"io"
+	"log"
+	"math"
+	"os"
+	"runtime/debug"
+	"strconv"
+)
+
+const (
+	envGOMEMLIMIT         = "GOMEMLIMIT"
+	envAUTOMEMLIMIT       = "AUTOMEMLIMIT"
+	envAUTOMEMLIMIT_DEBUG = "AUTOMEMLIMIT_DEBUG"
+
+	defaultAUTOMEMLIMIT = 0.9
+)
+
+var (
+	// ErrNoLimit is returned when the memory limit is not set.
+	ErrNoLimit = errors.New("memory is not limited")
+)
+
+type config struct {
+	logger   *log.Logger
+	ratio    float64
+	provider Provider
+}
+
+// Option is a function that configures the behavior of SetGoMemLimitWithOptions.
+type Option func(cfg *config)
+
+// WithRatio configures the ratio of the memory limit to set as GOMEMLIMIT.
+//
+// Default: 0.9
+func WithRatio(ratio float64) Option {
+	return func(cfg *config) {
+		cfg.ratio = ratio
+	}
+}
+
+// WithEnv configures whether to use environment variables.
+//
+// Default: false
+//
+// Deprecated: currently this does nothing.
+func WithEnv() Option {
+	return func(cfg *config) {}
+}
+
+// WithProvider configures the provider.
+//
+// Default: FromCgroup
+func WithProvider(provider Provider) Option {
+	return func(cfg *config) {
+		cfg.provider = provider
+	}
+}
+
+// SetGoMemLimitWithOpts sets GOMEMLIMIT with options and environment variables.
+//
+// You can configure how much memory of the cgroup's memory limit to set as GOMEMLIMIT
+// through AUTOMEMLIMIT envrironment variable in the half-open range (0.0,1.0].
+//
+// If AUTOMEMLIMIT is not set, it defaults to 0.9. (10% is the headroom for memory sources the Go runtime is unaware of.)
+// If GOMEMLIMIT is already set or AUTOMEMLIMIT=off, this function does nothing.
+//
+// If AUTOMEMLIMIT_EXPERIMENT is set, it enables experimental features.
+// Please see the documentation of Experiments for more details.
+//
+// Options:
+//   - WithRatio
+//   - WithProvider
+func SetGoMemLimitWithOpts(opts ...Option) (_ int64, _err error) {
+	cfg := &config{
+		logger:   log.New(io.Discard, "", log.LstdFlags),
+		ratio:    defaultAUTOMEMLIMIT,
+		provider: FromCgroup,
+	}
+	if os.Getenv(envAUTOMEMLIMIT_DEBUG) == "true" {
+		cfg.logger = log.Default()
+	}
+	for _, opt := range opts {
+		opt(cfg)
+	}
+	defer func() {
+		if _err != nil {
+			cfg.logger.Println(_err)
+		}
+	}()
+
+	exps, err := parseExperiments()
+	if err != nil {
+		return 0, fmt.Errorf("failed to parse experiments: %w", err)
+	}
+	if exps.System {
+		cfg.logger.Println("system experiment is enabled: using system memory limit as a fallback")
+		cfg.provider = ApplyFallback(cfg.provider, FromSystem)
+	}
+
+	snapshot := debug.SetMemoryLimit(-1)
+	defer func() {
+		err := recover()
+		if err != nil {
+			if _err != nil {
+				cfg.logger.Println(_err)
+			}
+			_err = fmt.Errorf("panic during setting the Go's memory limit, rolling back to previous value %d: %v", snapshot, err)
+			debug.SetMemoryLimit(snapshot)
+		}
+	}()
+
+	if val, ok := os.LookupEnv(envGOMEMLIMIT); ok {
+		cfg.logger.Printf("GOMEMLIMIT is set already, skipping: %s\n", val)
+		return 0, nil
+	}
+
+	ratio := cfg.ratio
+	if val, ok := os.LookupEnv(envAUTOMEMLIMIT); ok {
+		if val == "off" {
+			cfg.logger.Printf("AUTOMEMLIMIT is set to off, skipping\n")
+			return 0, nil
+		}
+		_ratio, err := strconv.ParseFloat(val, 64)
+		if err != nil {
+			return 0, fmt.Errorf("cannot parse AUTOMEMLIMIT: %s", val)
+		}
+		ratio = _ratio
+	}
+
+	limit, err := setGoMemLimit(ApplyRatio(cfg.provider, ratio))
+	if err != nil {
+		if errors.Is(err, ErrNoLimit) {
+			cfg.logger.Printf("memory is not limited, skipping: %v\n", err)
+			return 0, nil
+		}
+		return 0, fmt.Errorf("failed to set GOMEMLIMIT: %w", err)
+	}
+
+	cfg.logger.Printf("GOMEMLIMIT=%d\n", limit)
+
+	return limit, nil
+}
+
+func SetGoMemLimitWithEnv() {
+	_, _ = SetGoMemLimitWithOpts()
+}
+
+// SetGoMemLimit sets GOMEMLIMIT with the value from the cgroup's memory limit and given ratio.
+func SetGoMemLimit(ratio float64) (int64, error) {
+	return SetGoMemLimitWithOpts(WithRatio(ratio))
+}
+
+// SetGoMemLimitWithProvider sets GOMEMLIMIT with the value from the given provider and ratio.
+func SetGoMemLimitWithProvider(provider Provider, ratio float64) (int64, error) {
+	return SetGoMemLimitWithOpts(WithProvider(provider), WithRatio(ratio))
+}
+
+func setGoMemLimit(provider Provider) (int64, error) {
+	limit, err := provider()
+	if err != nil {
+		return 0, err
+	}
+	capped := cappedU64ToI64(limit)
+	debug.SetMemoryLimit(capped)
+	return capped, nil
+}
+
+func cappedU64ToI64(limit uint64) int64 {
+	if limit > math.MaxInt64 {
+		return math.MaxInt64
+	}
+	return int64(limit)
+}
diff --git a/vendor/github.com/KimMachineGun/automemlimit/memlimit/provider.go b/vendor/github.com/KimMachineGun/automemlimit/memlimit/provider.go
new file mode 100644
index 00000000000..32cc1eea63f
--- /dev/null
+++ b/vendor/github.com/KimMachineGun/automemlimit/memlimit/provider.go
@@ -0,0 +1,40 @@
+package memlimit
+
+import (
+	"fmt"
+)
+
+// Provider is a function that returns the memory limit.
+type Provider func() (uint64, error)
+
+// Limit is a helper Provider function that returns the given limit.
+func Limit(limit uint64) func() (uint64, error) {
+	return func() (uint64, error) {
+		return limit, nil
+	}
+}
+
+// ApplyRationA is a helper Provider function that applies the given ratio to the given provider.
+func ApplyRatio(provider Provider, ratio float64) Provider {
+	return func() (uint64, error) {
+		if ratio <= 0 || ratio > 1 {
+			return 0, fmt.Errorf("invalid ratio: %f, ratio should be in the range (0.0,1.0]", ratio)
+		}
+		limit, err := provider()
+		if err != nil {
+			return 0, err
+		}
+		return uint64(float64(limit) * ratio), nil
+	}
+}
+
+// ApplyFallback is a helper Provider function that sets the fallback provider.
+func ApplyFallback(provider Provider, fallback Provider) Provider {
+	return func() (uint64, error) {
+		limit, err := provider()
+		if err != nil {
+			return fallback()
+		}
+		return limit, nil
+	}
+}
diff --git a/vendor/github.com/aws/aws-sdk-go/aws/config.go b/vendor/github.com/aws/aws-sdk-go/aws/config.go
index 776e31b21d6..c483e0cb8e6 100644
--- a/vendor/github.com/aws/aws-sdk-go/aws/config.go
+++ b/vendor/github.com/aws/aws-sdk-go/aws/config.go
@@ -442,6 +442,17 @@ func (c *Config) WithUseDualStack(enable bool) *Config {
 	return c
 }
 
+// WithUseFIPSEndpoint sets a config UseFIPSEndpoint value returning a Config
+// pointer for chaining.
+func (c *Config) WithUseFIPSEndpoint(enable bool) *Config {
+	if enable {
+		c.UseFIPSEndpoint = endpoints.FIPSEndpointStateEnabled
+	} else {
+		c.UseFIPSEndpoint = endpoints.FIPSEndpointStateDisabled
+	}
+	return c
+}
+
 // WithEC2MetadataDisableTimeoutOverride sets a config EC2MetadataDisableTimeoutOverride value
 // returning a Config pointer for chaining.
 func (c *Config) WithEC2MetadataDisableTimeoutOverride(enable bool) *Config {
diff --git a/vendor/github.com/aws/aws-sdk-go/aws/ec2metadata/token_provider.go b/vendor/github.com/aws/aws-sdk-go/aws/ec2metadata/token_provider.go
index 604aeffdeb4..f1f9ba4ec58 100644
--- a/vendor/github.com/aws/aws-sdk-go/aws/ec2metadata/token_provider.go
+++ b/vendor/github.com/aws/aws-sdk-go/aws/ec2metadata/token_provider.go
@@ -2,6 +2,7 @@ package ec2metadata
 
 import (
 	"fmt"
+	"github.com/aws/aws-sdk-go/aws"
 	"net/http"
 	"sync/atomic"
 	"time"
@@ -65,7 +66,9 @@ func (t *tokenProvider) fetchTokenHandler(r *request.Request) {
 			switch requestFailureError.StatusCode() {
 			case http.StatusForbidden, http.StatusNotFound, http.StatusMethodNotAllowed:
 				atomic.StoreUint32(&t.disabled, 1)
-				t.client.Config.Logger.Log(fmt.Sprintf("WARN: failed to get session token, falling back to IMDSv1: %v", requestFailureError))
+				if t.client.Config.LogLevel.Matches(aws.LogDebugWithDeprecated) {
+					t.client.Config.Logger.Log(fmt.Sprintf("WARN: failed to get session token, falling back to IMDSv1: %v", requestFailureError))
+				}
 			case http.StatusBadRequest:
 				r.Error = requestFailureError
 			}
diff --git a/vendor/github.com/aws/aws-sdk-go/aws/endpoints/defaults.go b/vendor/github.com/aws/aws-sdk-go/aws/endpoints/defaults.go
index ee1ea9b6a6c..6bd6449440f 100644
--- a/vendor/github.com/aws/aws-sdk-go/aws/endpoints/defaults.go
+++ b/vendor/github.com/aws/aws-sdk-go/aws/endpoints/defaults.go
@@ -31,6 +31,7 @@ const (
 	ApSoutheast3RegionID = "ap-southeast-3" // Asia Pacific (Jakarta).
 	ApSoutheast4RegionID = "ap-southeast-4" // Asia Pacific (Melbourne).
 	CaCentral1RegionID   = "ca-central-1"   // Canada (Central).
+	CaWest1RegionID      = "ca-west-1"      // Canada West (Calgary).
 	EuCentral1RegionID   = "eu-central-1"   // Europe (Frankfurt).
 	EuCentral2RegionID   = "eu-central-2"   // Europe (Zurich).
 	EuNorth1RegionID     = "eu-north-1"     // Europe (Stockholm).
@@ -190,6 +191,9 @@ var awsPartition = partition{
 		"ca-central-1": region{
 			Description: "Canada (Central)",
 		},
+		"ca-west-1": region{
+			Description: "Canada West (Calgary)",
+		},
 		"eu-central-1": region{
 			Description: "Europe (Frankfurt)",
 		},
@@ -291,6 +295,9 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "access-analyzer-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -477,6 +484,24 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "acm-fips.ca-west-1.amazonaws.com",
+				},
+				endpointKey{
+					Region: "ca-west-1-fips",
+				}: endpoint{
+					Hostname: "acm-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -1269,6 +1294,14 @@ var awsPartition = partition{
 						Region: "ca-central-1",
 					},
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{
+					Hostname: "api.ecr.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+				},
 				endpointKey{
 					Region: "dkr-us-east-1",
 				}: endpoint{
@@ -1953,6 +1986,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -2251,6 +2287,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "apigateway-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "apigateway-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -2284,6 +2329,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "apigateway-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -2442,6 +2496,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -2530,6 +2587,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -2735,6 +2795,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -3387,6 +3450,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ap-southeast-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-4",
+				}: endpoint{},
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
@@ -3414,6 +3480,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "eu-west-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "il-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "me-central-1",
 				}: endpoint{},
@@ -3526,6 +3595,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -4005,6 +4077,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "autoscaling-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "autoscaling-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -4038,6 +4119,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "autoscaling-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -4485,6 +4575,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -5028,6 +5121,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "eu-west-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "il-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{},
@@ -5092,6 +5188,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "cloudcontrolapi-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "cloudcontrolapi-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -5125,6 +5230,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "cloudcontrolapi-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -5280,6 +5394,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -5439,6 +5556,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ap-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-south-2",
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-southeast-1",
 				}: endpoint{},
@@ -5570,6 +5690,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -6154,196 +6277,199 @@ var awsPartition = partition{
 					Region: "ca-central-1",
 				}: endpoint{},
 				endpointKey{
-					Region: "eu-central-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "eu-central-2",
-				}: endpoint{},
-				endpointKey{
-					Region: "eu-north-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "eu-south-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "eu-south-2",
-				}: endpoint{},
-				endpointKey{
-					Region: "eu-west-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "eu-west-2",
-				}: endpoint{},
-				endpointKey{
-					Region: "eu-west-3",
-				}: endpoint{},
-				endpointKey{
-					Region: "il-central-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "me-central-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "me-south-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "sa-east-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "us-east-1",
-				}: endpoint{},
-				endpointKey{
-					Region:  "us-east-1",
-					Variant: fipsVariant,
-				}: endpoint{
-					Hostname: "codedeploy-fips.us-east-1.amazonaws.com",
-				},
-				endpointKey{
-					Region: "us-east-1-fips",
-				}: endpoint{
-					Hostname: "codedeploy-fips.us-east-1.amazonaws.com",
-					CredentialScope: credentialScope{
-						Region: "us-east-1",
-					},
-					Deprecated: boxedTrue,
-				},
-				endpointKey{
-					Region: "us-east-2",
-				}: endpoint{},
-				endpointKey{
-					Region:  "us-east-2",
-					Variant: fipsVariant,
-				}: endpoint{
-					Hostname: "codedeploy-fips.us-east-2.amazonaws.com",
-				},
-				endpointKey{
-					Region: "us-east-2-fips",
-				}: endpoint{
-					Hostname: "codedeploy-fips.us-east-2.amazonaws.com",
-					CredentialScope: credentialScope{
-						Region: "us-east-2",
-					},
-					Deprecated: boxedTrue,
-				},
-				endpointKey{
-					Region: "us-west-1",
-				}: endpoint{},
-				endpointKey{
-					Region:  "us-west-1",
-					Variant: fipsVariant,
-				}: endpoint{
-					Hostname: "codedeploy-fips.us-west-1.amazonaws.com",
-				},
-				endpointKey{
-					Region: "us-west-1-fips",
-				}: endpoint{
-					Hostname: "codedeploy-fips.us-west-1.amazonaws.com",
-					CredentialScope: credentialScope{
-						Region: "us-west-1",
-					},
-					Deprecated: boxedTrue,
-				},
-				endpointKey{
-					Region: "us-west-2",
-				}: endpoint{},
-				endpointKey{
-					Region:  "us-west-2",
-					Variant: fipsVariant,
-				}: endpoint{
-					Hostname: "codedeploy-fips.us-west-2.amazonaws.com",
-				},
-				endpointKey{
-					Region: "us-west-2-fips",
-				}: endpoint{
-					Hostname: "codedeploy-fips.us-west-2.amazonaws.com",
-					CredentialScope: credentialScope{
-						Region: "us-west-2",
-					},
-					Deprecated: boxedTrue,
-				},
-			},
-		},
-		"codeguru-reviewer": service{
-			Endpoints: serviceEndpoints{
-				endpointKey{
-					Region: "ap-northeast-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-southeast-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-southeast-2",
+					Region: "ca-west-1",
 				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
-				endpointKey{
-					Region: "eu-north-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "eu-west-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "eu-west-2",
-				}: endpoint{},
-				endpointKey{
-					Region: "us-east-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "us-east-2",
-				}: endpoint{},
-				endpointKey{
-					Region: "us-west-2",
-				}: endpoint{},
-			},
-		},
-		"codepipeline": service{
-			Endpoints: serviceEndpoints{
-				endpointKey{
-					Region: "af-south-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-east-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-northeast-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-northeast-2",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-northeast-3",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-south-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-south-2",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-southeast-1",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-southeast-2",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-southeast-3",
-				}: endpoint{},
-				endpointKey{
-					Region: "ap-southeast-4",
-				}: endpoint{},
-				endpointKey{
-					Region: "ca-central-1",
-				}: endpoint{},
-				endpointKey{
-					Region:  "ca-central-1",
-					Variant: fipsVariant,
-				}: endpoint{
-					Hostname: "codepipeline-fips.ca-central-1.amazonaws.com",
-				},
-				endpointKey{
-					Region: "eu-central-1",
-				}: endpoint{},
+				endpointKey{
+					Region: "eu-central-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-north-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-south-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-south-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-west-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-west-3",
+				}: endpoint{},
+				endpointKey{
+					Region: "il-central-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "me-south-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "sa-east-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "us-east-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "codedeploy-fips.us-east-1.amazonaws.com",
+				},
+				endpointKey{
+					Region: "us-east-1-fips",
+				}: endpoint{
+					Hostname: "codedeploy-fips.us-east-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "us-east-2",
+				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-2",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "codedeploy-fips.us-east-2.amazonaws.com",
+				},
+				endpointKey{
+					Region: "us-east-2-fips",
+				}: endpoint{
+					Hostname: "codedeploy-fips.us-east-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-2",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "us-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "codedeploy-fips.us-west-1.amazonaws.com",
+				},
+				endpointKey{
+					Region: "us-west-1-fips",
+				}: endpoint{
+					Hostname: "codedeploy-fips.us-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "us-west-2",
+				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-2",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "codedeploy-fips.us-west-2.amazonaws.com",
+				},
+				endpointKey{
+					Region: "us-west-2-fips",
+				}: endpoint{
+					Hostname: "codedeploy-fips.us-west-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-west-2",
+					},
+					Deprecated: boxedTrue,
+				},
+			},
+		},
+		"codeguru-reviewer": service{
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "ap-northeast-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-central-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-north-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-west-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "us-east-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "us-east-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "us-west-2",
+				}: endpoint{},
+			},
+		},
+		"codepipeline": service{
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "af-south-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-east-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-northeast-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-northeast-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-northeast-3",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-south-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-south-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-2",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-3",
+				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-4",
+				}: endpoint{},
+				endpointKey{
+					Region: "ca-central-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-central-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "codepipeline-fips.ca-central-1.amazonaws.com",
+				},
+				endpointKey{
+					Region: "eu-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-2",
 				}: endpoint{},
@@ -6618,6 +6744,9 @@ var awsPartition = partition{
 		},
 		"cognito-identity": service{
 			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "af-south-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-northeast-1",
 				}: endpoint{},
@@ -6636,6 +6765,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ap-southeast-2",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-3",
+				}: endpoint{},
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
@@ -6742,6 +6874,9 @@ var awsPartition = partition{
 		},
 		"cognito-idp": service{
 			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "af-south-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-northeast-1",
 				}: endpoint{},
@@ -6760,6 +6895,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ap-southeast-2",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-3",
+				}: endpoint{},
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
@@ -7327,6 +7465,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -8298,6 +8439,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "datasync-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "datasync-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -8331,6 +8481,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "datasync-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -8496,6 +8655,11 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "datazone-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{
+					Hostname: "datazone.ca-west-1.api.aws",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{
@@ -8816,6 +8980,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -8989,6 +9156,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -9013,6 +9183,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "eu-west-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "il-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "me-central-1",
 				}: endpoint{},
@@ -9074,6 +9247,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "dms",
 				}: endpoint{
@@ -9389,6 +9565,42 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "eu-west-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "fips-us-east-1",
+				}: endpoint{
+					Hostname: "drs-fips.us-east-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-east-2",
+				}: endpoint{
+					Hostname: "drs-fips.us-east-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-2",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-west-1",
+				}: endpoint{
+					Hostname: "drs-fips.us-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-west-2",
+				}: endpoint{
+					Hostname: "drs-fips.us-west-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-west-2",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "il-central-1",
 				}: endpoint{},
@@ -9404,15 +9616,39 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "us-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "drs-fips.us-east-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "us-east-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-2",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "drs-fips.us-east-2.amazonaws.com",
+				},
 				endpointKey{
 					Region: "us-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "drs-fips.us-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "us-west-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-2",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "drs-fips.us-west-2.amazonaws.com",
+				},
 			},
 		},
 		"ds": service{
@@ -9459,6 +9695,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "ds-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "ds-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -9492,6 +9737,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "ds-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -9636,6 +9890,24 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "dynamodb-fips.ca-west-1.amazonaws.com",
+				},
+				endpointKey{
+					Region: "ca-west-1-fips",
+				}: endpoint{
+					Hostname: "dynamodb-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -9799,6 +10071,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "ebs-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "ebs-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -9832,6 +10113,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "ebs-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -10160,6 +10450,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -10341,6 +10634,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -10451,6 +10747,166 @@ var awsPartition = partition{
 				},
 			},
 		},
+		"eks-auth": service{
+			Defaults: endpointDefaults{
+				defaultKey{}: endpoint{
+					DNSSuffix: "api.aws",
+				},
+				defaultKey{
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname:  "{service}-fips.{region}.{dnsSuffix}",
+					DNSSuffix: "api.aws",
+				},
+			},
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "af-south-1",
+				}: endpoint{
+					Hostname: "eks-auth.af-south-1.api.aws",
+				},
+				endpointKey{
+					Region: "ap-east-1",
+				}: endpoint{
+					Hostname: "eks-auth.ap-east-1.api.aws",
+				},
+				endpointKey{
+					Region: "ap-northeast-1",
+				}: endpoint{
+					Hostname: "eks-auth.ap-northeast-1.api.aws",
+				},
+				endpointKey{
+					Region: "ap-northeast-2",
+				}: endpoint{
+					Hostname: "eks-auth.ap-northeast-2.api.aws",
+				},
+				endpointKey{
+					Region: "ap-northeast-3",
+				}: endpoint{
+					Hostname: "eks-auth.ap-northeast-3.api.aws",
+				},
+				endpointKey{
+					Region: "ap-south-1",
+				}: endpoint{
+					Hostname: "eks-auth.ap-south-1.api.aws",
+				},
+				endpointKey{
+					Region: "ap-south-2",
+				}: endpoint{
+					Hostname: "eks-auth.ap-south-2.api.aws",
+				},
+				endpointKey{
+					Region: "ap-southeast-1",
+				}: endpoint{
+					Hostname: "eks-auth.ap-southeast-1.api.aws",
+				},
+				endpointKey{
+					Region: "ap-southeast-2",
+				}: endpoint{
+					Hostname: "eks-auth.ap-southeast-2.api.aws",
+				},
+				endpointKey{
+					Region: "ap-southeast-3",
+				}: endpoint{
+					Hostname: "eks-auth.ap-southeast-3.api.aws",
+				},
+				endpointKey{
+					Region: "ap-southeast-4",
+				}: endpoint{
+					Hostname: "eks-auth.ap-southeast-4.api.aws",
+				},
+				endpointKey{
+					Region: "ca-central-1",
+				}: endpoint{
+					Hostname: "eks-auth.ca-central-1.api.aws",
+				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{
+					Hostname: "eks-auth.ca-west-1.api.aws",
+				},
+				endpointKey{
+					Region: "eu-central-1",
+				}: endpoint{
+					Hostname: "eks-auth.eu-central-1.api.aws",
+				},
+				endpointKey{
+					Region: "eu-central-2",
+				}: endpoint{
+					Hostname: "eks-auth.eu-central-2.api.aws",
+				},
+				endpointKey{
+					Region: "eu-north-1",
+				}: endpoint{
+					Hostname: "eks-auth.eu-north-1.api.aws",
+				},
+				endpointKey{
+					Region: "eu-south-1",
+				}: endpoint{
+					Hostname: "eks-auth.eu-south-1.api.aws",
+				},
+				endpointKey{
+					Region: "eu-south-2",
+				}: endpoint{
+					Hostname: "eks-auth.eu-south-2.api.aws",
+				},
+				endpointKey{
+					Region: "eu-west-1",
+				}: endpoint{
+					Hostname: "eks-auth.eu-west-1.api.aws",
+				},
+				endpointKey{
+					Region: "eu-west-2",
+				}: endpoint{
+					Hostname: "eks-auth.eu-west-2.api.aws",
+				},
+				endpointKey{
+					Region: "eu-west-3",
+				}: endpoint{
+					Hostname: "eks-auth.eu-west-3.api.aws",
+				},
+				endpointKey{
+					Region: "il-central-1",
+				}: endpoint{
+					Hostname: "eks-auth.il-central-1.api.aws",
+				},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{
+					Hostname: "eks-auth.me-central-1.api.aws",
+				},
+				endpointKey{
+					Region: "me-south-1",
+				}: endpoint{
+					Hostname: "eks-auth.me-south-1.api.aws",
+				},
+				endpointKey{
+					Region: "sa-east-1",
+				}: endpoint{
+					Hostname: "eks-auth.sa-east-1.api.aws",
+				},
+				endpointKey{
+					Region: "us-east-1",
+				}: endpoint{
+					Hostname: "eks-auth.us-east-1.api.aws",
+				},
+				endpointKey{
+					Region: "us-east-2",
+				}: endpoint{
+					Hostname: "eks-auth.us-east-2.api.aws",
+				},
+				endpointKey{
+					Region: "us-west-1",
+				}: endpoint{
+					Hostname: "eks-auth.us-west-1.api.aws",
+				},
+				endpointKey{
+					Region: "us-west-2",
+				}: endpoint{
+					Hostname: "eks-auth.us-west-2.api.aws",
+				},
+			},
+		},
 		"elasticache": service{
 			Endpoints: serviceEndpoints{
 				endpointKey{
@@ -10489,6 +10945,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -11292,6 +11751,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -11452,6 +11914,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "elasticmapreduce-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "elasticmapreduce-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{
@@ -11487,6 +11958,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "elasticmapreduce-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -12004,6 +12484,9 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{},
@@ -12172,6 +12655,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "aos.ca-central-1.api.aws",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: dualStackVariant,
+				}: endpoint{
+					Hostname: "aos.ca-west-1.api.aws",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -12425,6 +12917,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -12675,6 +13170,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -14666,6 +15164,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ap-southeast-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-4",
+				}: endpoint{},
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
@@ -14693,6 +15194,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "il-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{},
@@ -15147,6 +15651,11 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "internetmonitor-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{
+					Hostname: "internetmonitor.ca-west-1.api.aws",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{
@@ -16695,6 +17204,11 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "kendra-ranking-fips.ca-central-1.api.aws",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{
+					Hostname: "kendra-ranking.ca-west-1.api.aws",
+				},
 				endpointKey{
 					Region: "eu-central-2",
 				}: endpoint{
@@ -16823,6 +17337,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -17300,6 +17817,24 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "kms-fips.ca-west-1.amazonaws.com",
+				},
+				endpointKey{
+					Region: "ca-west-1-fips",
+				}: endpoint{
+					Hostname: "kms-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -17848,6 +18383,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "lambda.ca-central-1.api.aws",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: dualStackVariant,
+				}: endpoint{
+					Hostname: "lambda.ca-west-1.api.aws",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -18240,6 +18784,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -18582,6 +19129,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -18763,12 +19313,18 @@ var awsPartition = partition{
 		},
 		"m2": service{
 			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "af-south-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-northeast-1",
 				}: endpoint{},
 				endpointKey{
 					Region: "ap-northeast-2",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-northeast-3",
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-south-1",
 				}: endpoint{},
@@ -18788,6 +19344,12 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "eu-north-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "eu-south-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-west-1",
 				}: endpoint{},
@@ -19102,12 +19664,18 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ap-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-south-2",
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-southeast-1",
 				}: endpoint{},
 				endpointKey{
 					Region: "ap-southeast-2",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-4",
+				}: endpoint{},
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
@@ -19126,6 +19694,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "eu-west-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "sa-east-1",
 				}: endpoint{},
@@ -19390,6 +19961,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ap-southeast-2",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-4",
+				}: endpoint{},
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
@@ -19445,6 +20019,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ap-southeast-2",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-4",
+				}: endpoint{},
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
@@ -19500,6 +20077,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ap-southeast-2",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-4",
+				}: endpoint{},
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
@@ -19857,6 +20437,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -20290,6 +20873,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -20498,6 +21084,9 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "il-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "me-central-1",
 				}: endpoint{},
@@ -20976,6 +21565,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -21172,6 +21764,14 @@ var awsPartition = partition{
 						Region: "il-central-1",
 					},
 				},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{
+					Hostname: "oidc.me-central-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "me-central-1",
+					},
+				},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{
@@ -21763,6 +22363,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -22304,6 +22907,14 @@ var awsPartition = partition{
 						Region: "il-central-1",
 					},
 				},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{
+					Hostname: "portal.sso.me-central-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "me-central-1",
+					},
+				},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{
@@ -22568,6 +23179,11 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "qbusiness.ca-central-1.api.aws",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{
+					Hostname: "qbusiness.ca-west-1.api.aws",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{
@@ -22840,6 +23456,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "ram-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "ram-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -22873,6 +23498,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "ram-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -23003,6 +23637,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "rbin-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "rbin-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -23036,6 +23679,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "rbin-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -23175,6 +23827,24 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "rds-fips.ca-west-1.amazonaws.com",
+				},
+				endpointKey{
+					Region: "ca-west-1-fips",
+				}: endpoint{
+					Hostname: "rds-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -23217,6 +23887,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "rds-fips.ca-west-1",
+				}: endpoint{
+					Hostname: "rds-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "rds-fips.us-east-1",
 				}: endpoint{
@@ -23271,6 +23950,24 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "rds.ca-west-1",
+				}: endpoint{
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region:  "rds.ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "rds-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "rds.us-east-1",
 				}: endpoint{
@@ -23573,6 +24270,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "redshift-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "redshift-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -23606,6 +24312,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "redshift-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -24249,6 +24964,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -24404,6 +25122,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ap-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-south-2",
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-southeast-1",
 				}: endpoint{},
@@ -24413,18 +25134,27 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ap-southeast-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "ap-southeast-4",
+				}: endpoint{},
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "eu-central-2",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-north-1",
 				}: endpoint{},
 				endpointKey{
 					Region: "eu-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "eu-south-2",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-west-1",
 				}: endpoint{},
@@ -24434,6 +25164,48 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "eu-west-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "fips-us-east-1",
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-east-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-east-2",
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-east-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-2",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-west-1",
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-west-2",
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-west-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-west-2",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "il-central-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{},
@@ -24443,15 +25215,39 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "us-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-east-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "us-east-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-2",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-east-2.amazonaws.com",
+				},
 				endpointKey{
 					Region: "us-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "us-west-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-2",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-west-2.amazonaws.com",
+				},
 			},
 		},
 		"route53": service{
@@ -24548,6 +25344,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -24788,6 +25587,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -25065,6 +25867,27 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "s3-fips.dualstack.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: dualStackVariant,
+				}: endpoint{
+					Hostname: "s3.dualstack.ca-west-1.amazonaws.com",
+				},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "s3-fips.ca-west-1.amazonaws.com",
+				},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{
+					Hostname: "s3-fips.dualstack.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -25150,6 +25973,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "s3-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -25843,55 +26675,123 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "af-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "af-south-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-east-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-northeast-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-northeast-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-northeast-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-northeast-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-northeast-3",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-northeast-3",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-south-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-southeast-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-southeast-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-southeast-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-southeast-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-southeast-3",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-southeast-3",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ca-central-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "ca-central-1",
 					Variant: fipsVariant,
 				}: endpoint{},
+				endpointKey{
+					Region:  "ca-central-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-central-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-north-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-north-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-south-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-west-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-west-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-west-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-west-3",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-west-3",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "fips-ca-central-1",
 				}: endpoint{
@@ -25925,40 +26825,84 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "il-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "il-central-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "me-south-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "sa-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "sa-east-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-east-1",
 					Variant: fipsVariant,
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-east-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-east-2",
 					Variant: fipsVariant,
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-2",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-west-1",
 					Variant: fipsVariant,
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-west-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-west-2",
 					Variant: fipsVariant,
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-2",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 			},
 		},
 		"sagemaker-geospatial": service{
@@ -26187,160 +27131,288 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "af-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "af-south-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-east-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-northeast-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-northeast-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-northeast-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-northeast-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-northeast-3",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-northeast-3",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-south-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-south-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-south-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-southeast-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-southeast-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-southeast-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-southeast-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-southeast-3",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-southeast-3",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ap-southeast-4",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ap-southeast-4",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "ca-central-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "ca-central-1",
 					Variant: fipsVariant,
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-central-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
+				endpointKey{
+					Region: "ca-central-1-fips",
 				}: endpoint{
-					Hostname: "secretsmanager-fips.ca-central-1.amazonaws.com",
+
+					Deprecated: boxedTrue,
 				},
 				endpointKey{
-					Region: "ca-central-1-fips",
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1-fips",
 				}: endpoint{
-					Hostname: "secretsmanager-fips.ca-central-1.amazonaws.com",
-					CredentialScope: credentialScope{
-						Region: "ca-central-1",
-					},
+
 					Deprecated: boxedTrue,
 				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-central-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-central-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-north-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-north-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-south-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-south-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-south-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-west-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-west-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-west-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-west-3",
 				}: endpoint{},
+				endpointKey{
+					Region:  "eu-west-3",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "il-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "il-central-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "me-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "me-central-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "me-south-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "sa-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "sa-east-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-east-1",
 					Variant: fipsVariant,
-				}: endpoint{
-					Hostname: "secretsmanager-fips.us-east-1.amazonaws.com",
-				},
+				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-east-1-fips",
 				}: endpoint{
-					Hostname: "secretsmanager-fips.us-east-1.amazonaws.com",
-					CredentialScope: credentialScope{
-						Region: "us-east-1",
-					},
+
 					Deprecated: boxedTrue,
 				},
 				endpointKey{
 					Region: "us-east-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-east-2",
 					Variant: fipsVariant,
-				}: endpoint{
-					Hostname: "secretsmanager-fips.us-east-2.amazonaws.com",
-				},
+				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-2",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-east-2-fips",
 				}: endpoint{
-					Hostname: "secretsmanager-fips.us-east-2.amazonaws.com",
-					CredentialScope: credentialScope{
-						Region: "us-east-2",
-					},
+
 					Deprecated: boxedTrue,
 				},
 				endpointKey{
 					Region: "us-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-west-1",
 					Variant: fipsVariant,
-				}: endpoint{
-					Hostname: "secretsmanager-fips.us-west-1.amazonaws.com",
-				},
+				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-west-1-fips",
 				}: endpoint{
-					Hostname: "secretsmanager-fips.us-west-1.amazonaws.com",
-					CredentialScope: credentialScope{
-						Region: "us-west-1",
-					},
+
 					Deprecated: boxedTrue,
 				},
 				endpointKey{
 					Region: "us-west-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-2",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-west-2",
 					Variant: fipsVariant,
-				}: endpoint{
-					Hostname: "secretsmanager-fips.us-west-2.amazonaws.com",
-				},
+				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-2",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-west-2-fips",
 				}: endpoint{
-					Hostname: "secretsmanager-fips.us-west-2.amazonaws.com",
-					CredentialScope: credentialScope{
-						Region: "us-west-2",
-					},
+
 					Deprecated: boxedTrue,
 				},
 			},
@@ -26383,6 +27455,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -26531,21 +27606,81 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "eu-west-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "fips-us-east-1",
+				}: endpoint{
+					Hostname: "securitylake-fips.us-east-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-east-2",
+				}: endpoint{
+					Hostname: "securitylake-fips.us-east-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-2",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-west-1",
+				}: endpoint{
+					Hostname: "securitylake-fips.us-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-west-2",
+				}: endpoint{
+					Hostname: "securitylake-fips.us-west-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-west-2",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "sa-east-1",
 				}: endpoint{},
 				endpointKey{
 					Region: "us-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "securitylake-fips.us-east-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "us-east-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-east-2",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "securitylake-fips.us-east-2.amazonaws.com",
+				},
 				endpointKey{
 					Region: "us-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "securitylake-fips.us-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "us-west-2",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-west-2",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "securitylake-fips.us-west-2.amazonaws.com",
+				},
 			},
 		},
 		"serverlessrepo": service{
@@ -26839,6 +27974,9 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "servicecatalog-appregistry-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -27362,6 +28500,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -28330,6 +29471,15 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "sns-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -28354,6 +29504,15 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "eu-west-3",
 				}: endpoint{},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "sns-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -28484,6 +29643,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -28641,6 +29803,15 @@ var awsPartition = partition{
 				}: endpoint{
 					Hostname: "ssm-fips.ca-central-1.amazonaws.com",
 				},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
+				endpointKey{
+					Region:  "ca-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "ssm-fips.ca-west-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -28674,6 +29845,15 @@ var awsPartition = partition{
 					},
 					Deprecated: boxedTrue,
 				},
+				endpointKey{
+					Region: "fips-ca-west-1",
+				}: endpoint{
+					Hostname: "ssm-fips.ca-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "fips-us-east-1",
 				}: endpoint{
@@ -29200,6 +30380,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "il-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "me-central-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "me-south-1",
 				}: endpoint{},
@@ -29258,6 +30441,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -29577,6 +30763,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -29683,6 +30872,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -29857,6 +31049,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -30005,6 +31200,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -30153,6 +31351,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -33079,6 +34280,9 @@ var awsPartition = partition{
 				endpointKey{
 					Region: "ca-central-1",
 				}: endpoint{},
+				endpointKey{
+					Region: "ca-west-1",
+				}: endpoint{},
 				endpointKey{
 					Region: "eu-central-1",
 				}: endpoint{},
@@ -33894,6 +35098,31 @@ var awscnPartition = partition{
 				}: endpoint{},
 			},
 		},
+		"eks-auth": service{
+			Defaults: endpointDefaults{
+				defaultKey{}: endpoint{
+					DNSSuffix: "api.amazonwebservices.com.cn",
+				},
+				defaultKey{
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname:  "{service}-fips.{region}.{dnsSuffix}",
+					DNSSuffix: "api.amazonwebservices.com.cn",
+				},
+			},
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "cn-north-1",
+				}: endpoint{
+					Hostname: "eks-auth.cn-north-1.api.amazonwebservices.com.cn",
+				},
+				endpointKey{
+					Region: "cn-northwest-1",
+				}: endpoint{
+					Hostname: "eks-auth.cn-northwest-1.api.amazonwebservices.com.cn",
+				},
+			},
+		},
 		"elasticache": service{
 			Endpoints: serviceEndpoints{
 				endpointKey{
@@ -34281,6 +35510,29 @@ var awscnPartition = partition{
 				}: endpoint{},
 			},
 		},
+		"iottwinmaker": service{
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "api-cn-north-1",
+				}: endpoint{
+					Hostname: "api.iottwinmaker.cn-north-1.amazonaws.com.cn",
+					CredentialScope: credentialScope{
+						Region: "cn-north-1",
+					},
+				},
+				endpointKey{
+					Region: "cn-north-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "data-cn-north-1",
+				}: endpoint{
+					Hostname: "data.iottwinmaker.cn-north-1.amazonaws.com.cn",
+					CredentialScope: credentialScope{
+						Region: "cn-north-1",
+					},
+				},
+			},
+		},
 		"kafka": service{
 			Endpoints: serviceEndpoints{
 				endpointKey{
@@ -34553,6 +35805,16 @@ var awscnPartition = partition{
 				}: endpoint{},
 			},
 		},
+		"pipes": service{
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "cn-north-1",
+				}: endpoint{},
+				endpointKey{
+					Region: "cn-northwest-1",
+				}: endpoint{},
+			},
+		},
 		"polly": service{
 			Endpoints: serviceEndpoints{
 				endpointKey{
@@ -34864,9 +36126,17 @@ var awscnPartition = partition{
 				endpointKey{
 					Region: "cn-north-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "cn-north-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "cn-northwest-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "cn-northwest-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 			},
 		},
 		"securityhub": service{
@@ -36225,6 +37495,13 @@ var awsusgovPartition = partition{
 				},
 			},
 		},
+		"bedrock": service{
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "us-gov-west-1",
+				}: endpoint{},
+			},
+		},
 		"cassandra": service{
 			Endpoints: serviceEndpoints{
 				endpointKey{
@@ -37437,6 +38714,31 @@ var awsusgovPartition = partition{
 				},
 			},
 		},
+		"eks-auth": service{
+			Defaults: endpointDefaults{
+				defaultKey{}: endpoint{
+					DNSSuffix: "api.aws",
+				},
+				defaultKey{
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname:  "{service}-fips.{region}.{dnsSuffix}",
+					DNSSuffix: "api.aws",
+				},
+			},
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "us-gov-east-1",
+				}: endpoint{
+					Hostname: "eks-auth.us-gov-east-1.api.aws",
+				},
+				endpointKey{
+					Region: "us-gov-west-1",
+				}: endpoint{
+					Hostname: "eks-auth.us-gov-west-1.api.aws",
+				},
+			},
+		},
 		"elasticache": service{
 			Defaults: endpointDefaults{
 				defaultKey{}: endpoint{},
@@ -38246,7 +39548,21 @@ var awsusgovPartition = partition{
 			},
 		},
 		"health": service{
+			Defaults: endpointDefaults{
+				defaultKey{}: endpoint{
+					SSLCommonName: "health.us-gov-west-1.amazonaws.com",
+					Protocols:     []string{"https"},
+				},
+			},
 			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "aws-us-gov-global",
+				}: endpoint{
+					Hostname: "global.health.us-gov.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-gov-west-1",
+					},
+				},
 				endpointKey{
 					Region: "fips-us-gov-west-1",
 				}: endpoint{
@@ -40120,12 +41436,42 @@ var awsusgovPartition = partition{
 		},
 		"rolesanywhere": service{
 			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "fips-us-gov-east-1",
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-gov-east-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-gov-east-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-gov-west-1",
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-gov-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-gov-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "us-gov-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-gov-east-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-gov-east-1.amazonaws.com",
+				},
 				endpointKey{
 					Region: "us-gov-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-gov-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "rolesanywhere-fips.us-gov-west-1.amazonaws.com",
+				},
 			},
 		},
 		"route53": service{
@@ -40488,17 +41834,33 @@ var awsusgovPartition = partition{
 				endpointKey{
 					Region: "us-gov-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-gov-east-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-gov-east-1",
 					Variant: fipsVariant,
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-gov-east-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-gov-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-gov-west-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-gov-west-1",
 					Variant: fipsVariant,
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-gov-west-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 			},
 		},
 		"secretsmanager": service{
@@ -40506,37 +41868,43 @@ var awsusgovPartition = partition{
 				endpointKey{
 					Region: "us-gov-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-gov-east-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-gov-east-1",
 					Variant: fipsVariant,
-				}: endpoint{
-					Hostname: "secretsmanager-fips.us-gov-east-1.amazonaws.com",
-				},
+				}: endpoint{},
+				endpointKey{
+					Region:  "us-gov-east-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-gov-east-1-fips",
 				}: endpoint{
-					Hostname: "secretsmanager-fips.us-gov-east-1.amazonaws.com",
-					CredentialScope: credentialScope{
-						Region: "us-gov-east-1",
-					},
+
 					Deprecated: boxedTrue,
 				},
 				endpointKey{
 					Region: "us-gov-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-gov-west-1",
+					Variant: dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region:  "us-gov-west-1",
 					Variant: fipsVariant,
-				}: endpoint{
-					Hostname: "secretsmanager-fips.us-gov-west-1.amazonaws.com",
-				},
+				}: endpoint{},
+				endpointKey{
+					Region:  "us-gov-west-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{},
 				endpointKey{
 					Region: "us-gov-west-1-fips",
 				}: endpoint{
-					Hostname: "secretsmanager-fips.us-gov-west-1.amazonaws.com",
-					CredentialScope: credentialScope{
-						Region: "us-gov-west-1",
-					},
+
 					Deprecated: boxedTrue,
 				},
 			},
@@ -42378,6 +43746,19 @@ var awsisoPartition = partition{
 				}: endpoint{},
 			},
 		},
+		"guardduty": service{
+			IsRegionalized: boxedTrue,
+			Defaults: endpointDefaults{
+				defaultKey{}: endpoint{
+					Protocols: []string{"https"},
+				},
+			},
+			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "us-iso-east-1",
+				}: endpoint{},
+			},
+		},
 		"health": service{
 			Endpoints: serviceEndpoints{
 				endpointKey{
@@ -42528,12 +43909,42 @@ var awsisoPartition = partition{
 		},
 		"ram": service{
 			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "fips-us-iso-east-1",
+				}: endpoint{
+					Hostname: "ram-fips.us-iso-east-1.c2s.ic.gov",
+					CredentialScope: credentialScope{
+						Region: "us-iso-east-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-iso-west-1",
+				}: endpoint{
+					Hostname: "ram-fips.us-iso-west-1.c2s.ic.gov",
+					CredentialScope: credentialScope{
+						Region: "us-iso-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "us-iso-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-iso-east-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "ram-fips.us-iso-east-1.c2s.ic.gov",
+				},
 				endpointKey{
 					Region: "us-iso-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-iso-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "ram-fips.us-iso-west-1.c2s.ic.gov",
+				},
 			},
 		},
 		"rbin": service{
@@ -42758,15 +44169,61 @@ var awsisoPartition = partition{
 				},
 			},
 			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "fips-us-iso-east-1",
+				}: endpoint{
+					Hostname: "s3-fips.us-iso-east-1.c2s.ic.gov",
+					CredentialScope: credentialScope{
+						Region: "us-iso-east-1",
+					},
+					Deprecated: boxedTrue,
+				},
+				endpointKey{
+					Region: "fips-us-iso-west-1",
+				}: endpoint{
+					Hostname: "s3-fips.us-iso-west-1.c2s.ic.gov",
+					CredentialScope: credentialScope{
+						Region: "us-iso-west-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "us-iso-east-1",
 				}: endpoint{
 					Protocols:         []string{"http", "https"},
 					SignatureVersions: []string{"s3v4"},
 				},
+				endpointKey{
+					Region:  "us-iso-east-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname:          "s3-fips.us-iso-east-1.c2s.ic.gov",
+					Protocols:         []string{"http", "https"},
+					SignatureVersions: []string{"s3v4"},
+				},
+				endpointKey{
+					Region:  "us-iso-east-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{
+					Hostname:          "s3-fips.dualstack.us-iso-east-1.c2s.ic.gov",
+					Protocols:         []string{"http", "https"},
+					SignatureVersions: []string{"s3v4"},
+				},
 				endpointKey{
 					Region: "us-iso-west-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-iso-west-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "s3-fips.us-iso-west-1.c2s.ic.gov",
+				},
+				endpointKey{
+					Region:  "us-iso-west-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{
+					Hostname: "s3-fips.dualstack.us-iso-west-1.c2s.ic.gov",
+				},
 			},
 		},
 		"secretsmanager": service{
@@ -43398,9 +44855,24 @@ var awsisobPartition = partition{
 		},
 		"ram": service{
 			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "fips-us-isob-east-1",
+				}: endpoint{
+					Hostname: "ram-fips.us-isob-east-1.sc2s.sgov.gov",
+					CredentialScope: credentialScope{
+						Region: "us-isob-east-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "us-isob-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-isob-east-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "ram-fips.us-isob-east-1.sc2s.sgov.gov",
+				},
 			},
 		},
 		"rbin": service{
@@ -43539,9 +45011,30 @@ var awsisobPartition = partition{
 				},
 			},
 			Endpoints: serviceEndpoints{
+				endpointKey{
+					Region: "fips-us-isob-east-1",
+				}: endpoint{
+					Hostname: "s3-fips.us-isob-east-1.sc2s.sgov.gov",
+					CredentialScope: credentialScope{
+						Region: "us-isob-east-1",
+					},
+					Deprecated: boxedTrue,
+				},
 				endpointKey{
 					Region: "us-isob-east-1",
 				}: endpoint{},
+				endpointKey{
+					Region:  "us-isob-east-1",
+					Variant: fipsVariant,
+				}: endpoint{
+					Hostname: "s3-fips.us-isob-east-1.sc2s.sgov.gov",
+				},
+				endpointKey{
+					Region:  "us-isob-east-1",
+					Variant: fipsVariant | dualStackVariant,
+				}: endpoint{
+					Hostname: "s3-fips.dualstack.us-isob-east-1.sc2s.sgov.gov",
+				},
 			},
 		},
 		"secretsmanager": service{
diff --git a/vendor/github.com/aws/aws-sdk-go/aws/version.go b/vendor/github.com/aws/aws-sdk-go/aws/version.go
index f63b61e4c6e..945a8b45e2c 100644
--- a/vendor/github.com/aws/aws-sdk-go/aws/version.go
+++ b/vendor/github.com/aws/aws-sdk-go/aws/version.go
@@ -5,4 +5,4 @@ package aws
 const SDKName = "aws-sdk-go"
 
 // SDKVersion is the version of this SDK
-const SDKVersion = "1.48.14"
+const SDKVersion = "1.50.0"
diff --git a/vendor/github.com/aws/aws-sdk-go/service/ec2/api.go b/vendor/github.com/aws/aws-sdk-go/service/ec2/api.go
index b2008fba6cf..3ec976ab4e9 100644
--- a/vendor/github.com/aws/aws-sdk-go/service/ec2/api.go
+++ b/vendor/github.com/aws/aws-sdk-go/service/ec2/api.go
@@ -35610,6 +35610,10 @@ func (c *EC2) DetachVolumeRequest(input *DetachVolumeInput) (req *request.Reques
 // When a volume with an Amazon Web Services Marketplace product code is detached
 // from an instance, the product code is no longer associated with the instance.
 //
+// You can't detach or force detach volumes that are attached to Amazon ECS
+// or Fargate tasks. Attempting to do this results in the UnsupportedOperationException
+// exception with the Unable to detach volume attached to ECS tasks error message.
+//
 // For more information, see Detach an Amazon EBS volume (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-detaching-volume.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
@@ -58035,6 +58039,25 @@ type AdvertiseByoipCidrInput struct {
 	// the required permissions, the error response is DryRunOperation. Otherwise,
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
+
+	// If you have Local Zones (https://docs.aws.amazon.com/local-zones/latest/ug/how-local-zones-work.html)
+	// enabled, you can choose a network border group for Local Zones when you provision
+	// and advertise a BYOIPv4 CIDR. Choose the network border group carefully as
+	// the EIP and the Amazon Web Services resource it is associated with must reside
+	// in the same network border group.
+	//
+	// You can provision BYOIP address ranges to and advertise them in the following
+	// Local Zone network border groups:
+	//
+	//    * us-east-1-dfw-2
+	//
+	//    * us-west-2-lax-1
+	//
+	//    * us-west-2-phx-2
+	//
+	// You cannot provision or advertise BYOIPv6 address ranges in Local Zones at
+	// this time.
+	NetworkBorderGroup *string `type:"string"`
 }
 
 // String returns the string representation.
@@ -58086,6 +58109,12 @@ func (s *AdvertiseByoipCidrInput) SetDryRun(v bool) *AdvertiseByoipCidrInput {
 	return s
 }
 
+// SetNetworkBorderGroup sets the NetworkBorderGroup field's value.
+func (s *AdvertiseByoipCidrInput) SetNetworkBorderGroup(v string) *AdvertiseByoipCidrInput {
+	s.NetworkBorderGroup = &v
+	return s
+}
+
 type AdvertiseByoipCidrOutput struct {
 	_ struct{} `type:"structure"`
 
@@ -64318,6 +64347,25 @@ type ByoipCidr struct {
 	// The description of the address range.
 	Description *string `locationName:"description" type:"string"`
 
+	// If you have Local Zones (https://docs.aws.amazon.com/local-zones/latest/ug/how-local-zones-work.html)
+	// enabled, you can choose a network border group for Local Zones when you provision
+	// and advertise a BYOIPv4 CIDR. Choose the network border group carefully as
+	// the EIP and the Amazon Web Services resource it is associated with must reside
+	// in the same network border group.
+	//
+	// You can provision BYOIP address ranges to and advertise them in the following
+	// Local Zone network border groups:
+	//
+	//    * us-east-1-dfw-2
+	//
+	//    * us-west-2-lax-1
+	//
+	//    * us-west-2-phx-2
+	//
+	// You cannot provision or advertise BYOIPv6 address ranges in Local Zones at
+	// this time.
+	NetworkBorderGroup *string `locationName:"networkBorderGroup" type:"string"`
+
 	// The state of the address pool.
 	State *string `locationName:"state" type:"string" enum:"ByoipCidrState"`
 
@@ -64362,6 +64410,12 @@ func (s *ByoipCidr) SetDescription(v string) *ByoipCidr {
 	return s
 }
 
+// SetNetworkBorderGroup sets the NetworkBorderGroup field's value.
+func (s *ByoipCidr) SetNetworkBorderGroup(v string) *ByoipCidr {
+	s.NetworkBorderGroup = &v
+	return s
+}
+
 // SetState sets the State field's value.
 func (s *ByoipCidr) SetState(v string) *ByoipCidr {
 	s.State = &v
@@ -91752,10 +91806,9 @@ type DescribeCapacityBlockOfferingsInput struct {
 	// InstanceType is a required field
 	InstanceType *string `type:"string" required:"true"`
 
-	// The maximum number of results to return for the request in a single page.
-	// The remaining results can be seen by sending another request with the returned
-	// nextToken value. This value can be between 5 and 500. If maxResults is given
-	// a larger value than 500, you receive an error.
+	// The maximum number of items to return for this request. To get the next page
+	// of items, make another request with the token returned in the output. For
+	// more information, see Pagination (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination).
 	MaxResults *int64 `min:"1" type:"integer"`
 
 	// The token to use to retrieve the next page of results.
@@ -91920,10 +91973,9 @@ type DescribeCapacityReservationFleetsInput struct {
 	//    prioritized is supported.
 	Filters []*Filter `locationName:"Filter" locationNameList:"Filter" type:"list"`
 
-	// The maximum number of results to return for the request in a single page.
-	// The remaining results can be seen by sending another request with the returned
-	// nextToken value. This value can be between 5 and 500. If maxResults is given
-	// a larger value than 500, you receive an error.
+	// The maximum number of items to return for this request. To get the next page
+	// of items, make another request with the token returned in the output. For
+	// more information, see Pagination (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination).
 	MaxResults *int64 `min:"1" type:"integer"`
 
 	// The token to use to retrieve the next page of results.
@@ -92107,10 +92159,9 @@ type DescribeCapacityReservationsInput struct {
 	//    the Capacity Reservation was created.
 	Filters []*Filter `locationName:"Filter" locationNameList:"Filter" type:"list"`
 
-	// The maximum number of results to return for the request in a single page.
-	// The remaining results can be seen by sending another request with the returned
-	// nextToken value. This value can be between 5 and 500. If maxResults is given
-	// a larger value than 500, you receive an error.
+	// The maximum number of items to return for this request. To get the next page
+	// of items, make another request with the token returned in the output. For
+	// more information, see Pagination (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination).
 	MaxResults *int64 `min:"1" type:"integer"`
 
 	// The token to use to retrieve the next page of results.
@@ -116985,6 +117036,9 @@ func (s *EbsInfo) SetNvmeSupport(v string) *EbsInfo {
 type EbsInstanceBlockDevice struct {
 	_ struct{} `type:"structure"`
 
+	// The ARN of the Amazon ECS or Fargate task to which the volume is attached.
+	AssociatedResource *string `locationName:"associatedResource" type:"string"`
+
 	// The time stamp when the attachment initiated.
 	AttachTime *time.Time `locationName:"attachTime" type:"timestamp"`
 
@@ -116996,6 +117050,12 @@ type EbsInstanceBlockDevice struct {
 
 	// The ID of the EBS volume.
 	VolumeId *string `locationName:"volumeId" type:"string"`
+
+	// The ID of the Amazon Web Services account that owns the volume.
+	//
+	// This parameter is returned only for volumes that are attached to Fargate
+	// tasks.
+	VolumeOwnerId *string `locationName:"volumeOwnerId" type:"string"`
 }
 
 // String returns the string representation.
@@ -117016,6 +117076,12 @@ func (s EbsInstanceBlockDevice) GoString() string {
 	return s.String()
 }
 
+// SetAssociatedResource sets the AssociatedResource field's value.
+func (s *EbsInstanceBlockDevice) SetAssociatedResource(v string) *EbsInstanceBlockDevice {
+	s.AssociatedResource = &v
+	return s
+}
+
 // SetAttachTime sets the AttachTime field's value.
 func (s *EbsInstanceBlockDevice) SetAttachTime(v time.Time) *EbsInstanceBlockDevice {
 	s.AttachTime = &v
@@ -117040,6 +117106,12 @@ func (s *EbsInstanceBlockDevice) SetVolumeId(v string) *EbsInstanceBlockDevice {
 	return s
 }
 
+// SetVolumeOwnerId sets the VolumeOwnerId field's value.
+func (s *EbsInstanceBlockDevice) SetVolumeOwnerId(v string) *EbsInstanceBlockDevice {
+	s.VolumeOwnerId = &v
+	return s
+}
+
 // Describes information used to set up an EBS volume specified in a block device
 // mapping.
 type EbsInstanceBlockDeviceSpecification struct {
@@ -119360,6 +119432,8 @@ type EnableSnapshotBlockPublicAccessInput struct {
 	//    public sharing. However, snapshots that are already publicly shared, remain
 	//    publicly available.
 	//
+	// unblocked is not a valid value for EnableSnapshotBlockPublicAccess.
+	//
 	// State is a required field
 	State *string `type:"string" required:"true" enum:"SnapshotBlockPublicAccessState"`
 }
@@ -124262,12 +124336,9 @@ type GetCapacityReservationUsageInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// The maximum number of results to return for the request in a single page.
-	// The remaining results can be seen by sending another request with the returned
-	// nextToken value. This value can be between 5 and 500. If maxResults is given
-	// a larger value than 500, you receive an error.
-	//
-	// Valid range: Minimum value of 1. Maximum value of 1000.
+	// The maximum number of items to return for this request. To get the next page
+	// of items, make another request with the token returned in the output. For
+	// more information, see Pagination (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination).
 	MaxResults *int64 `min:"1" type:"integer"`
 
 	// The token to use to retrieve the next page of results.
@@ -125189,10 +125260,9 @@ type GetGroupsForCapacityReservationInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// The maximum number of results to return for the request in a single page.
-	// The remaining results can be seen by sending another request with the returned
-	// nextToken value. This value can be between 5 and 500. If maxResults is given
-	// a larger value than 500, you receive an error.
+	// The maximum number of items to return for this request. To get the next page
+	// of items, make another request with the token returned in the output. For
+	// more information, see Pagination (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination).
 	MaxResults *int64 `min:"1" type:"integer"`
 
 	// The token to use to retrieve the next page of results.
@@ -127997,8 +128067,6 @@ type GetSpotPlacementScoresInput struct {
 	TargetCapacity *int64 `min:"1" type:"integer" required:"true"`
 
 	// The unit for the target capacity.
-	//
-	// Default: units (translates to number of instances)
 	TargetCapacityUnitType *string `type:"string" enum:"TargetCapacityUnitType"`
 }
 
@@ -135156,22 +135224,21 @@ type InstanceMetadataOptionsRequest struct {
 	// Possible values: Integers from 1 to 64
 	HttpPutResponseHopLimit *int64 `type:"integer"`
 
-	// IMDSv2 uses token-backed sessions. Set the use of HTTP tokens to optional
-	// (in other words, set the use of IMDSv2 to optional) or required (in other
-	// words, set the use of IMDSv2 to required).
+	// Indicates whether IMDSv2 is required.
 	//
-	//    * optional - When IMDSv2 is optional, you can choose to retrieve instance
-	//    metadata with or without a session token in your request. If you retrieve
-	//    the IAM role credentials without a token, the IMDSv1 role credentials
-	//    are returned. If you retrieve the IAM role credentials using a valid session
-	//    token, the IMDSv2 role credentials are returned.
+	//    * optional - IMDSv2 is optional. You can choose whether to send a session
+	//    token in your instance metadata retrieval requests. If you retrieve IAM
+	//    role credentials without a session token, you receive the IMDSv1 role
+	//    credentials. If you retrieve IAM role credentials using a valid session
+	//    token, you receive the IMDSv2 role credentials.
 	//
-	//    * required - When IMDSv2 is required, you must send a session token with
-	//    any instance metadata retrieval requests. In this state, retrieving the
+	//    * required - IMDSv2 is required. You must send a session token in your
+	//    instance metadata retrieval requests. With this option, retrieving the
 	//    IAM role credentials always returns IMDSv2 credentials; IMDSv1 credentials
 	//    are not available.
 	//
-	// Default: optional
+	// Default: If the value of ImdsSupport for the Amazon Machine Image (AMI) for
+	// your instance is v2.0, the default is required.
 	HttpTokens *string `type:"string" enum:"HttpTokensState"`
 
 	// Set to enabled to allow access to instance tags from the instance metadata.
@@ -135253,22 +135320,18 @@ type InstanceMetadataOptionsResponse struct {
 	// Possible values: Integers from 1 to 64
 	HttpPutResponseHopLimit *int64 `locationName:"httpPutResponseHopLimit" type:"integer"`
 
-	// IMDSv2 uses token-backed sessions. Indicates whether the use of HTTP tokens
-	// is optional (in other words, indicates whether the use of IMDSv2 is optional)
-	// or required (in other words, indicates whether the use of IMDSv2 is required).
+	// Indicates whether IMDSv2 is required.
 	//
-	//    * optional - When IMDSv2 is optional, you can choose to retrieve instance
-	//    metadata with or without a session token in your request. If you retrieve
-	//    the IAM role credentials without a token, the IMDSv1 role credentials
-	//    are returned. If you retrieve the IAM role credentials using a valid session
-	//    token, the IMDSv2 role credentials are returned.
+	//    * optional - IMDSv2 is optional. You can choose whether to send a session
+	//    token in your instance metadata retrieval requests. If you retrieve IAM
+	//    role credentials without a session token, you receive the IMDSv1 role
+	//    credentials. If you retrieve IAM role credentials using a valid session
+	//    token, you receive the IMDSv2 role credentials.
 	//
-	//    * required - When IMDSv2 is required, you must send a session token with
-	//    any instance metadata retrieval requests. In this state, retrieving the
+	//    * required - IMDSv2 is required. You must send a session token in your
+	//    instance metadata retrieval requests. With this option, retrieving the
 	//    IAM role credentials always returns IMDSv2 credentials; IMDSv1 credentials
 	//    are not available.
-	//
-	// Default: optional
 	HttpTokens *string `locationName:"httpTokens" type:"string" enum:"HttpTokensState"`
 
 	// Indicates whether access to instance tags from the instance metadata is enabled
@@ -135752,6 +135815,11 @@ type InstanceNetworkInterfaceSpecification struct {
 	// for eth0, and can only be assigned to a new network interface, not an existing
 	// one. You cannot specify more than one network interface in the request. If
 	// launching into a default subnet, the default value is true.
+	//
+	// Starting on February 1, 2024, Amazon Web Services will charge for all public
+	// IPv4 addresses, including public IPv4 addresses associated with running instances
+	// and Elastic IP addresses. For more information, see the Public IPv4 Address
+	// tab on the Amazon VPC pricing page (http://aws.amazon.com/vpc/pricing/).
 	AssociatePublicIpAddress *bool `locationName:"associatePublicIpAddress" type:"boolean"`
 
 	// A security group connection tracking specification that enables you to set
@@ -142771,20 +142839,18 @@ type LaunchTemplateInstanceMetadataOptions struct {
 	// Possible values: Integers from 1 to 64
 	HttpPutResponseHopLimit *int64 `locationName:"httpPutResponseHopLimit" type:"integer"`
 
-	// Indicates whether IMDSv2 is optional or required.
+	// Indicates whether IMDSv2 is required.
 	//
-	// optional - When IMDSv2 is optional, you can choose to retrieve instance metadata
-	// with or without a session token in your request. If you retrieve the IAM
-	// role credentials without a token, the IMDSv1 role credentials are returned.
-	// If you retrieve the IAM role credentials using a valid session token, the
-	// IMDSv2 role credentials are returned.
+	//    * optional - IMDSv2 is optional. You can choose whether to send a session
+	//    token in your instance metadata retrieval requests. If you retrieve IAM
+	//    role credentials without a session token, you receive the IMDSv1 role
+	//    credentials. If you retrieve IAM role credentials using a valid session
+	//    token, you receive the IMDSv2 role credentials.
 	//
-	// required - When IMDSv2 is required, you must send a session token with any
-	// instance metadata retrieval requests. In this state, retrieving the IAM role
-	// credentials always returns IMDSv2 credentials; IMDSv1 credentials are not
-	// available.
-	//
-	// Default: optional
+	//    * required - IMDSv2 is required. You must send a session token in your
+	//    instance metadata retrieval requests. With this option, retrieving the
+	//    IAM role credentials always returns IMDSv2 credentials; IMDSv1 credentials
+	//    are not available.
 	HttpTokens *string `locationName:"httpTokens" type:"string" enum:"LaunchTemplateHttpTokensState"`
 
 	// Set to enabled to allow access to instance tags from the instance metadata.
@@ -142884,22 +142950,21 @@ type LaunchTemplateInstanceMetadataOptionsRequest struct {
 	// Possible values: Integers from 1 to 64
 	HttpPutResponseHopLimit *int64 `type:"integer"`
 
-	// IMDSv2 uses token-backed sessions. Set the use of HTTP tokens to optional
-	// (in other words, set the use of IMDSv2 to optional) or required (in other
-	// words, set the use of IMDSv2 to required).
+	// Indicates whether IMDSv2 is required.
 	//
-	//    * optional - When IMDSv2 is optional, you can choose to retrieve instance
-	//    metadata with or without a session token in your request. If you retrieve
-	//    the IAM role credentials without a token, the IMDSv1 role credentials
-	//    are returned. If you retrieve the IAM role credentials using a valid session
-	//    token, the IMDSv2 role credentials are returned.
+	//    * optional - IMDSv2 is optional. You can choose whether to send a session
+	//    token in your instance metadata retrieval requests. If you retrieve IAM
+	//    role credentials without a session token, you receive the IMDSv1 role
+	//    credentials. If you retrieve IAM role credentials using a valid session
+	//    token, you receive the IMDSv2 role credentials.
 	//
-	//    * required - When IMDSv2 is required, you must send a session token with
-	//    any instance metadata retrieval requests. In this state, retrieving the
+	//    * required - IMDSv2 is required. You must send a session token in your
+	//    instance metadata retrieval requests. With this option, retrieving the
 	//    IAM role credentials always returns IMDSv2 credentials; IMDSv1 credentials
 	//    are not available.
 	//
-	// Default: optional
+	// Default: If the value of ImdsSupport for the Amazon Machine Image (AMI) for
+	// your instance is v2.0, the default is required.
 	HttpTokens *string `type:"string" enum:"LaunchTemplateHttpTokensState"`
 
 	// Set to enabled to allow access to instance tags from the instance metadata.
@@ -142974,6 +143039,11 @@ type LaunchTemplateInstanceNetworkInterfaceSpecification struct {
 
 	// Indicates whether to associate a public IPv4 address with eth0 for a new
 	// network interface.
+	//
+	// Starting on February 1, 2024, Amazon Web Services will charge for all public
+	// IPv4 addresses, including public IPv4 addresses associated with running instances
+	// and Elastic IP addresses. For more information, see the Public IPv4 Address
+	// tab on the Amazon VPC pricing page (http://aws.amazon.com/vpc/pricing/).
 	AssociatePublicIpAddress *bool `locationName:"associatePublicIpAddress" type:"boolean"`
 
 	// A security group connection tracking specification that enables you to set
@@ -143210,6 +143280,11 @@ type LaunchTemplateInstanceNetworkInterfaceSpecificationRequest struct {
 	AssociateCarrierIpAddress *bool `type:"boolean"`
 
 	// Associates a public IPv4 address with eth0 for a new network interface.
+	//
+	// Starting on February 1, 2024, Amazon Web Services will charge for all public
+	// IPv4 addresses, including public IPv4 addresses associated with running instances
+	// and Elastic IP addresses. For more information, see the Public IPv4 Address
+	// tab on the Amazon VPC pricing page (http://aws.amazon.com/vpc/pricing/).
 	AssociatePublicIpAddress *bool `type:"boolean"`
 
 	// A security group connection tracking specification that enables you to set
@@ -148195,7 +148270,8 @@ type ModifyInstanceAttributeInput struct {
 	// Modifies the DeleteOnTermination attribute for volumes that are currently
 	// attached. The volume must be owned by the caller. If no value is specified
 	// for DeleteOnTermination, the default is true and the volume is deleted when
-	// the instance is terminated.
+	// the instance is terminated. You can't modify the DeleteOnTermination attribute
+	// for volumes that are attached to Fargate tasks.
 	//
 	// To add instance store volumes to an Amazon EBS-backed instance, you must
 	// add them when you launch the instance. For more information, see Update the
@@ -149055,22 +149131,21 @@ type ModifyInstanceMetadataOptionsInput struct {
 	// Possible values: Integers from 1 to 64
 	HttpPutResponseHopLimit *int64 `type:"integer"`
 
-	// IMDSv2 uses token-backed sessions. Set the use of HTTP tokens to optional
-	// (in other words, set the use of IMDSv2 to optional) or required (in other
-	// words, set the use of IMDSv2 to required).
+	// Indicates whether IMDSv2 is required.
 	//
-	//    * optional - When IMDSv2 is optional, you can choose to retrieve instance
-	//    metadata with or without a session token in your request. If you retrieve
-	//    the IAM role credentials without a token, the IMDSv1 role credentials
-	//    are returned. If you retrieve the IAM role credentials using a valid session
-	//    token, the IMDSv2 role credentials are returned.
+	//    * optional - IMDSv2 is optional. You can choose whether to send a session
+	//    token in your instance metadata retrieval requests. If you retrieve IAM
+	//    role credentials without a session token, you receive the IMDSv1 role
+	//    credentials. If you retrieve IAM role credentials using a valid session
+	//    token, you receive the IMDSv2 role credentials.
 	//
-	//    * required - When IMDSv2 is required, you must send a session token with
-	//    any instance metadata retrieval requests. In this state, retrieving the
+	//    * required - IMDSv2 is required. You must send a session token in your
+	//    instance metadata retrieval requests. With this option, retrieving the
 	//    IAM role credentials always returns IMDSv2 credentials; IMDSv1 credentials
 	//    are not available.
 	//
-	// Default: optional
+	// Default: If the value of ImdsSupport for the Amazon Machine Image (AMI) for
+	// your instance is v2.0, the default is required.
 	HttpTokens *string `type:"string" enum:"HttpTokensState"`
 
 	// The ID of the instance.
@@ -161174,6 +161249,25 @@ type ProvisionByoipCidrInput struct {
 	// Reserved.
 	MultiRegion *bool `type:"boolean"`
 
+	// If you have Local Zones (https://docs.aws.amazon.com/local-zones/latest/ug/how-local-zones-work.html)
+	// enabled, you can choose a network border group for Local Zones when you provision
+	// and advertise a BYOIPv4 CIDR. Choose the network border group carefully as
+	// the EIP and the Amazon Web Services resource it is associated with must reside
+	// in the same network border group.
+	//
+	// You can provision BYOIP address ranges to and advertise them in the following
+	// Local Zone network border groups:
+	//
+	//    * us-east-1-dfw-2
+	//
+	//    * us-west-2-lax-1
+	//
+	//    * us-west-2-phx-2
+	//
+	// You cannot provision or advertise BYOIPv6 address ranges in Local Zones at
+	// this time.
+	NetworkBorderGroup *string `type:"string"`
+
 	// The tags to apply to the address pool.
 	PoolTagSpecifications []*TagSpecification `locationName:"PoolTagSpecification" locationNameList:"item" type:"list"`
 
@@ -161250,6 +161344,12 @@ func (s *ProvisionByoipCidrInput) SetMultiRegion(v bool) *ProvisionByoipCidrInpu
 	return s
 }
 
+// SetNetworkBorderGroup sets the NetworkBorderGroup field's value.
+func (s *ProvisionByoipCidrInput) SetNetworkBorderGroup(v string) *ProvisionByoipCidrInput {
+	s.NetworkBorderGroup = &v
+	return s
+}
+
 // SetPoolTagSpecifications sets the PoolTagSpecifications field's value.
 func (s *ProvisionByoipCidrInput) SetPoolTagSpecifications(v []*TagSpecification) *ProvisionByoipCidrInput {
 	s.PoolTagSpecifications = v
@@ -165874,23 +165974,7 @@ type RequestLaunchTemplateData struct {
 	SecurityGroups []*string `locationName:"SecurityGroup" locationNameList:"SecurityGroup" type:"list"`
 
 	// The tags to apply to the resources that are created during instance launch.
-	//
-	// You can specify tags for the following resources only:
-	//
-	//    * Instances
-	//
-	//    * Volumes
-	//
-	//    * Elastic graphics
-	//
-	//    * Spot Instance requests
-	//
-	//    * Network interfaces
-	//
-	// To tag a resource after it has been created, see CreateTags (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateTags.html).
-	//
-	// To tag the launch template itself, you must use the TagSpecification (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateLaunchTemplate.html)
-	// parameter.
+	// These tags are not applied to the launch template.
 	TagSpecifications []*LaunchTemplateTagSpecificationRequest `locationName:"TagSpecification" locationNameList:"LaunchTemplateTagSpecificationRequest" type:"list"`
 
 	// The user data to make available to the instance. You must provide base64-encoded
@@ -172277,6 +172361,11 @@ type ScheduledInstancesNetworkInterface struct {
 	// for eth0, and can only be assigned to a new network interface, not an existing
 	// one. You cannot specify more than one network interface in the request. If
 	// launching into a default subnet, the default value is true.
+	//
+	// Starting on February 1, 2024, Amazon Web Services will charge for all public
+	// IPv4 addresses, including public IPv4 addresses associated with running instances
+	// and Elastic IP addresses. For more information, see the Public IPv4 Address
+	// tab on the Amazon VPC pricing page (http://aws.amazon.com/vpc/pricing/).
 	AssociatePublicIpAddress *bool `type:"boolean"`
 
 	// Indicates whether to delete the interface when the instance is terminated.
@@ -175669,10 +175758,10 @@ type SpotFleetRequestConfigData struct {
 	// TargetCapacity is a required field
 	TargetCapacity *int64 `locationName:"targetCapacity" type:"integer" required:"true"`
 
-	// The unit for the target capacity. TargetCapacityUnitType can only be specified
-	// when InstanceRequirements is specified.
+	// The unit for the target capacity. You can specify this parameter only when
+	// using attribute-based instance type selection.
 	//
-	// Default: units (translates to number of instances)
+	// Default: units (the number of instances)
 	TargetCapacityUnitType *string `locationName:"targetCapacityUnitType" type:"string" enum:"TargetCapacityUnitType"`
 
 	// Indicates whether running Spot Instances are terminated when the Spot Fleet
@@ -177547,8 +177636,8 @@ type StateReason struct {
 	//    the Spot price exceeded available capacity or because of an increase in
 	//    the Spot price.
 	//
-	//    * Client.InstanceInitiatedShutdown: The instance was shut down using the
-	//    shutdown -h command from the instance.
+	//    * Client.InstanceInitiatedShutdown: The instance was shut down from the
+	//    operating system of the instance.
 	//
 	//    * Client.InstanceTerminated: The instance was terminated or rebooted during
 	//    AMI creation.
@@ -178684,7 +178773,7 @@ func (s *TagSpecification) SetTags(v []*Tag) *TagSpecification {
 type TargetCapacitySpecification struct {
 	_ struct{} `type:"structure"`
 
-	// The default TotalTargetCapacity, which is either Spot or On-Demand.
+	// The default target capacity type.
 	DefaultTargetCapacityType *string `locationName:"defaultTargetCapacityType" type:"string" enum:"DefaultTargetCapacityType"`
 
 	// The number of On-Demand units to request. If you specify a target capacity
@@ -178695,13 +178784,10 @@ type TargetCapacitySpecification struct {
 	// for On-Demand units, you cannot specify a target capacity for Spot units.
 	SpotTargetCapacity *int64 `locationName:"spotTargetCapacity" type:"integer"`
 
-	// The unit for the target capacity. TargetCapacityUnitType can only be specified
-	// when InstanceRequirements is specified.
-	//
-	// Default: units (translates to number of instances)
+	// The unit for the target capacity.
 	TargetCapacityUnitType *string `locationName:"targetCapacityUnitType" type:"string" enum:"TargetCapacityUnitType"`
 
-	// The number of units to request, filled using DefaultTargetCapacityType.
+	// The number of units to request, filled the default target capacity type.
 	TotalTargetCapacity *int64 `locationName:"totalTargetCapacity" type:"integer"`
 }
 
@@ -178765,13 +178851,13 @@ func (s *TargetCapacitySpecification) SetTotalTargetCapacity(v int64) *TargetCap
 // On-Demand Instances and Spot Instances in your request, EC2 Fleet will launch
 // instances until it reaches the maximum amount that you're willing to pay.
 // When the maximum amount you're willing to pay is reached, the fleet stops
-// launching instances even if it hasn’t met the target capacity. The MaxTotalPrice
+// launching instances even if it hasn't met the target capacity. The MaxTotalPrice
 // parameters are located in OnDemandOptionsRequest (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_OnDemandOptionsRequest)
 // and SpotOptionsRequest (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_SpotOptionsRequest).
 type TargetCapacitySpecificationRequest struct {
 	_ struct{} `type:"structure"`
 
-	// The default TotalTargetCapacity, which is either Spot or On-Demand.
+	// The default target capacity type.
 	DefaultTargetCapacityType *string `type:"string" enum:"DefaultTargetCapacityType"`
 
 	// The number of On-Demand units to request.
@@ -178780,13 +178866,14 @@ type TargetCapacitySpecificationRequest struct {
 	// The number of Spot units to request.
 	SpotTargetCapacity *int64 `type:"integer"`
 
-	// The unit for the target capacity. TargetCapacityUnitType can only be specified
-	// when InstanceRequirements is specified.
+	// The unit for the target capacity. You can specify this parameter only when
+	// using attributed-based instance type selection.
 	//
-	// Default: units (translates to number of instances)
+	// Default: units (the number of instances)
 	TargetCapacityUnitType *string `type:"string" enum:"TargetCapacityUnitType"`
 
-	// The number of units to request, filled using DefaultTargetCapacityType.
+	// The number of units to request, filled using the default target capacity
+	// type.
 	//
 	// TotalTargetCapacity is a required field
 	TotalTargetCapacity *int64 `type:"integer" required:"true"`
@@ -186399,6 +186486,9 @@ func (s *Volume) SetVolumeType(v string) *Volume {
 type VolumeAttachment struct {
 	_ struct{} `type:"structure"`
 
+	// The ARN of the Amazon ECS or Fargate task to which the volume is attached.
+	AssociatedResource *string `locationName:"associatedResource" type:"string"`
+
 	// The time stamp when the attachment initiated.
 	AttachTime *time.Time `locationName:"attachTime" type:"timestamp"`
 
@@ -186406,11 +186496,22 @@ type VolumeAttachment struct {
 	DeleteOnTermination *bool `locationName:"deleteOnTermination" type:"boolean"`
 
 	// The device name.
+	//
+	// If the volume is attached to a Fargate task, this parameter returns null.
 	Device *string `locationName:"device" type:"string"`
 
 	// The ID of the instance.
+	//
+	// If the volume is attached to a Fargate task, this parameter returns null.
 	InstanceId *string `locationName:"instanceId" type:"string"`
 
+	// The service principal of Amazon Web Services service that owns the underlying
+	// instance to which the volume is attached.
+	//
+	// This parameter is returned only for volumes that are attached to Fargate
+	// tasks.
+	InstanceOwningService *string `locationName:"instanceOwningService" type:"string"`
+
 	// The attachment state of the volume.
 	State *string `locationName:"status" type:"string" enum:"VolumeAttachmentState"`
 
@@ -186436,6 +186537,12 @@ func (s VolumeAttachment) GoString() string {
 	return s.String()
 }
 
+// SetAssociatedResource sets the AssociatedResource field's value.
+func (s *VolumeAttachment) SetAssociatedResource(v string) *VolumeAttachment {
+	s.AssociatedResource = &v
+	return s
+}
+
 // SetAttachTime sets the AttachTime field's value.
 func (s *VolumeAttachment) SetAttachTime(v time.Time) *VolumeAttachment {
 	s.AttachTime = &v
@@ -186460,6 +186567,12 @@ func (s *VolumeAttachment) SetInstanceId(v string) *VolumeAttachment {
 	return s
 }
 
+// SetInstanceOwningService sets the InstanceOwningService field's value.
+func (s *VolumeAttachment) SetInstanceOwningService(v string) *VolumeAttachment {
+	s.InstanceOwningService = &v
+	return s
+}
+
 // SetState sets the State field's value.
 func (s *VolumeAttachment) SetState(v string) *VolumeAttachment {
 	s.State = &v
@@ -194347,6 +194460,39 @@ const (
 
 	// InstanceTypeDl2q24xlarge is a InstanceType enum value
 	InstanceTypeDl2q24xlarge = "dl2q.24xlarge"
+
+	// InstanceTypeMac2M2Metal is a InstanceType enum value
+	InstanceTypeMac2M2Metal = "mac2-m2.metal"
+
+	// InstanceTypeI4i12xlarge is a InstanceType enum value
+	InstanceTypeI4i12xlarge = "i4i.12xlarge"
+
+	// InstanceTypeI4i24xlarge is a InstanceType enum value
+	InstanceTypeI4i24xlarge = "i4i.24xlarge"
+
+	// InstanceTypeC7iMetal24xl is a InstanceType enum value
+	InstanceTypeC7iMetal24xl = "c7i.metal-24xl"
+
+	// InstanceTypeC7iMetal48xl is a InstanceType enum value
+	InstanceTypeC7iMetal48xl = "c7i.metal-48xl"
+
+	// InstanceTypeM7iMetal24xl is a InstanceType enum value
+	InstanceTypeM7iMetal24xl = "m7i.metal-24xl"
+
+	// InstanceTypeM7iMetal48xl is a InstanceType enum value
+	InstanceTypeM7iMetal48xl = "m7i.metal-48xl"
+
+	// InstanceTypeR7iMetal24xl is a InstanceType enum value
+	InstanceTypeR7iMetal24xl = "r7i.metal-24xl"
+
+	// InstanceTypeR7iMetal48xl is a InstanceType enum value
+	InstanceTypeR7iMetal48xl = "r7i.metal-48xl"
+
+	// InstanceTypeR7izMetal16xl is a InstanceType enum value
+	InstanceTypeR7izMetal16xl = "r7iz.metal-16xl"
+
+	// InstanceTypeR7izMetal32xl is a InstanceType enum value
+	InstanceTypeR7izMetal32xl = "r7iz.metal-32xl"
 )
 
 // InstanceType_Values returns all elements of the InstanceType enum
@@ -195124,6 +195270,17 @@ func InstanceType_Values() []string {
 		InstanceTypeR7i24xlarge,
 		InstanceTypeR7i48xlarge,
 		InstanceTypeDl2q24xlarge,
+		InstanceTypeMac2M2Metal,
+		InstanceTypeI4i12xlarge,
+		InstanceTypeI4i24xlarge,
+		InstanceTypeC7iMetal24xl,
+		InstanceTypeC7iMetal48xl,
+		InstanceTypeM7iMetal24xl,
+		InstanceTypeM7iMetal48xl,
+		InstanceTypeR7iMetal24xl,
+		InstanceTypeR7iMetal48xl,
+		InstanceTypeR7izMetal16xl,
+		InstanceTypeR7izMetal32xl,
 	}
 }
 
diff --git a/vendor/github.com/aws/aws-sdk-go/service/lightsail/api.go b/vendor/github.com/aws/aws-sdk-go/service/lightsail/api.go
index a596fcd8d32..f2127cd2a73 100644
--- a/vendor/github.com/aws/aws-sdk-go/service/lightsail/api.go
+++ b/vendor/github.com/aws/aws-sdk-go/service/lightsail/api.go
@@ -1802,7 +1802,7 @@ func (c *Lightsail) CreateDiskRequest(input *CreateDiskInput) (req *request.Requ
 // CreateDisk API operation for Amazon Lightsail.
 //
 // Creates a block storage disk that can be attached to an Amazon Lightsail
-// instance in the same Availability Zone (e.g., us-east-2a).
+// instance in the same Availability Zone (us-east-2a).
 //
 // The create disk operation supports tag-based access control via request tags.
 // For more information, see the Amazon Lightsail Developer Guide (https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-controlling-access-using-tags).
@@ -1911,7 +1911,7 @@ func (c *Lightsail) CreateDiskFromSnapshotRequest(input *CreateDiskFromSnapshotI
 //
 // Creates a block storage disk from a manual or automatic snapshot of a disk.
 // The resulting disk can be attached to an Amazon Lightsail instance in the
-// same Availability Zone (e.g., us-east-2a).
+// same Availability Zone (us-east-2a).
 //
 // The create disk from snapshot operation supports tag-based access control
 // via request tags and resource tags applied to the resource identified by
@@ -2256,7 +2256,7 @@ func (c *Lightsail) CreateDomainRequest(input *CreateDomainInput) (req *request.
 
 // CreateDomain API operation for Amazon Lightsail.
 //
-// Creates a domain resource for the specified domain (e.g., example.com).
+// Creates a domain resource for the specified domain (example.com).
 //
 // The create domain operation supports tag-based access control via request
 // tags. For more information, see the Amazon Lightsail Developer Guide (https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-controlling-access-using-tags).
@@ -11664,7 +11664,7 @@ func (c *Lightsail) GetOperationsForResourceRequest(input *GetOperationsForResou
 
 // GetOperationsForResource API operation for Amazon Lightsail.
 //
-// Gets operations for a specific resource (e.g., an instance or a static IP).
+// Gets operations for a specific resource (an instance or a static IP).
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -13102,6 +13102,104 @@ func (c *Lightsail) GetRelationalDatabasesWithContext(ctx aws.Context, input *Ge
 	return out, req.Send()
 }
 
+const opGetSetupHistory = "GetSetupHistory"
+
+// GetSetupHistoryRequest generates a "aws/request.Request" representing the
+// client's request for the GetSetupHistory operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See GetSetupHistory for more information on using the GetSetupHistory
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//	// Example sending a request using the GetSetupHistoryRequest method.
+//	req, resp := client.GetSetupHistoryRequest(params)
+//
+//	err := req.Send()
+//	if err == nil { // resp is now filled
+//	    fmt.Println(resp)
+//	}
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/GetSetupHistory
+func (c *Lightsail) GetSetupHistoryRequest(input *GetSetupHistoryInput) (req *request.Request, output *GetSetupHistoryOutput) {
+	op := &request.Operation{
+		Name:       opGetSetupHistory,
+		HTTPMethod: "POST",
+		HTTPPath:   "/",
+	}
+
+	if input == nil {
+		input = &GetSetupHistoryInput{}
+	}
+
+	output = &GetSetupHistoryOutput{}
+	req = c.newRequest(op, input, output)
+	return
+}
+
+// GetSetupHistory API operation for Amazon Lightsail.
+//
+// Returns detailed information for five of the most recent SetupInstanceHttps
+// requests that were ran on the target instance.
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for Amazon Lightsail's
+// API operation GetSetupHistory for usage and error information.
+//
+// Returned Error Types:
+//
+//   - AccessDeniedException
+//     Lightsail throws this exception when the user cannot be authenticated or
+//     uses invalid credentials to access a resource.
+//
+//   - InvalidInputException
+//     Lightsail throws this exception when user input does not conform to the validation
+//     rules of an input field.
+//
+//     Domain and distribution APIs are only available in the N. Virginia (us-east-1)
+//     Amazon Web Services Region. Please set your Amazon Web Services Region configuration
+//     to us-east-1 to create, view, or edit these resources.
+//
+//   - NotFoundException
+//     Lightsail throws this exception when it cannot find a resource.
+//
+//   - ServiceException
+//     A general service exception.
+//
+//   - UnauthenticatedException
+//     Lightsail throws this exception when the user has not been authenticated.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/GetSetupHistory
+func (c *Lightsail) GetSetupHistory(input *GetSetupHistoryInput) (*GetSetupHistoryOutput, error) {
+	req, out := c.GetSetupHistoryRequest(input)
+	return out, req.Send()
+}
+
+// GetSetupHistoryWithContext is the same as GetSetupHistory with the addition of
+// the ability to pass a context and additional request options.
+//
+// See GetSetupHistory for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *Lightsail) GetSetupHistoryWithContext(ctx aws.Context, input *GetSetupHistoryInput, opts ...request.Option) (*GetSetupHistoryOutput, error) {
+	req, out := c.GetSetupHistoryRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
 const opGetStaticIp = "GetStaticIp"
 
 // GetStaticIpRequest generates a "aws/request.Request" representing the
@@ -14808,6 +14906,107 @@ func (c *Lightsail) SetResourceAccessForBucketWithContext(ctx aws.Context, input
 	return out, req.Send()
 }
 
+const opSetupInstanceHttps = "SetupInstanceHttps"
+
+// SetupInstanceHttpsRequest generates a "aws/request.Request" representing the
+// client's request for the SetupInstanceHttps operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See SetupInstanceHttps for more information on using the SetupInstanceHttps
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//	// Example sending a request using the SetupInstanceHttpsRequest method.
+//	req, resp := client.SetupInstanceHttpsRequest(params)
+//
+//	err := req.Send()
+//	if err == nil { // resp is now filled
+//	    fmt.Println(resp)
+//	}
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/SetupInstanceHttps
+func (c *Lightsail) SetupInstanceHttpsRequest(input *SetupInstanceHttpsInput) (req *request.Request, output *SetupInstanceHttpsOutput) {
+	op := &request.Operation{
+		Name:       opSetupInstanceHttps,
+		HTTPMethod: "POST",
+		HTTPPath:   "/",
+	}
+
+	if input == nil {
+		input = &SetupInstanceHttpsInput{}
+	}
+
+	output = &SetupInstanceHttpsOutput{}
+	req = c.newRequest(op, input, output)
+	return
+}
+
+// SetupInstanceHttps API operation for Amazon Lightsail.
+//
+// Creates an SSL/TLS certificate that secures traffic for your website. After
+// the certificate is created, it is installed on the specified Lightsail instance.
+//
+// If you provide more than one domain name in the request, at least one name
+// must be less than or equal to 63 characters in length.
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for Amazon Lightsail's
+// API operation SetupInstanceHttps for usage and error information.
+//
+// Returned Error Types:
+//
+//   - AccessDeniedException
+//     Lightsail throws this exception when the user cannot be authenticated or
+//     uses invalid credentials to access a resource.
+//
+//   - InvalidInputException
+//     Lightsail throws this exception when user input does not conform to the validation
+//     rules of an input field.
+//
+//     Domain and distribution APIs are only available in the N. Virginia (us-east-1)
+//     Amazon Web Services Region. Please set your Amazon Web Services Region configuration
+//     to us-east-1 to create, view, or edit these resources.
+//
+//   - NotFoundException
+//     Lightsail throws this exception when it cannot find a resource.
+//
+//   - ServiceException
+//     A general service exception.
+//
+//   - UnauthenticatedException
+//     Lightsail throws this exception when the user has not been authenticated.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/lightsail-2016-11-28/SetupInstanceHttps
+func (c *Lightsail) SetupInstanceHttps(input *SetupInstanceHttpsInput) (*SetupInstanceHttpsOutput, error) {
+	req, out := c.SetupInstanceHttpsRequest(input)
+	return out, req.Send()
+}
+
+// SetupInstanceHttpsWithContext is the same as SetupInstanceHttps with the addition of
+// the ability to pass a context and additional request options.
+//
+// See SetupInstanceHttps for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *Lightsail) SetupInstanceHttpsWithContext(ctx aws.Context, input *SetupInstanceHttpsInput, opts ...request.Option) (*SetupInstanceHttpsOutput, error) {
+	req, out := c.SetupInstanceHttpsRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
 const opStartGUISession = "StartGUISession"
 
 // StartGUISessionRequest generates a "aws/request.Request" representing the
@@ -17666,7 +17865,7 @@ type Alarm struct {
 	// The period, in seconds, over which the statistic is applied.
 	Period *int64 `locationName:"period" min:"60" type:"integer"`
 
-	// The Lightsail resource type (e.g., Alarm).
+	// The Lightsail resource type of the alarm.
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 
 	// The current state of the alarm.
@@ -18065,12 +18264,12 @@ type AttachDiskInput struct {
 	// This value only applies to Lightsail for Research resources.
 	AutoMounting *bool `locationName:"autoMounting" type:"boolean"`
 
-	// The unique Lightsail disk name (e.g., my-disk).
+	// The unique Lightsail disk name (my-disk).
 	//
 	// DiskName is a required field
 	DiskName *string `locationName:"diskName" type:"string" required:"true"`
 
-	// The disk path to expose to the instance (e.g., /dev/xvdf).
+	// The disk path to expose to the instance (/dev/xvdf).
 	//
 	// DiskPath is a required field
 	DiskPath *string `locationName:"diskPath" type:"string" required:"true"`
@@ -18471,7 +18670,7 @@ func (s *AttachStaticIpOutput) SetOperations(v []*Operation) *AttachStaticIpOutp
 type AttachedDisk struct {
 	_ struct{} `type:"structure"`
 
-	// The path of the disk (e.g., /dev/xvdf).
+	// The path of the disk (/dev/xvdf).
 	Path *string `locationName:"path" type:"string"`
 
 	// The size of the disk in GB.
@@ -18690,13 +18889,13 @@ type Blueprint struct {
 	// This parameter only applies to Lightsail for Research resources.
 	AppCategory *string `locationName:"appCategory" type:"string" enum:"AppCategory"`
 
-	// The ID for the virtual private server image (e.g., app_wordpress_4_4 or app_lamp_7_0).
+	// The ID for the virtual private server image (app_wordpress_4_4 or app_lamp_7_0).
 	BlueprintId *string `locationName:"blueprintId" type:"string"`
 
 	// The description of the blueprint.
 	Description *string `locationName:"description" type:"string"`
 
-	// The group name of the blueprint (e.g., amazon-linux).
+	// The group name of the blueprint (amazon-linux).
 	Group *string `locationName:"group" type:"string"`
 
 	// A Boolean value indicating whether the blueprint is active. Inactive blueprints
@@ -18714,7 +18913,7 @@ type Blueprint struct {
 	// blueprint runs on all instance sizes.
 	MinPower *int64 `locationName:"minPower" type:"integer"`
 
-	// The friendly name of the blueprint (e.g., Amazon Linux).
+	// The friendly name of the blueprint (Amazon Linux).
 	Name *string `locationName:"name" type:"string"`
 
 	// The operating system platform (either Linux/Unix-based or Windows Server-based)
@@ -18724,11 +18923,10 @@ type Blueprint struct {
 	// The product URL to learn more about the image or blueprint.
 	ProductUrl *string `locationName:"productUrl" type:"string"`
 
-	// The type of the blueprint (e.g., os or app).
+	// The type of the blueprint (os or app).
 	Type *string `locationName:"type" type:"string" enum:"BlueprintType"`
 
-	// The version number of the operating system, application, or stack (e.g.,
-	// 2016.03.0).
+	// The version number of the operating system, application, or stack ( 2016.03.0).
 	Version *string `locationName:"version" type:"string"`
 
 	// The version code.
@@ -18889,7 +19087,7 @@ type Bucket struct {
 	// have read-only access to the bucket.
 	ReadonlyAccessAccounts []*string `locationName:"readonlyAccessAccounts" type:"list"`
 
-	// The Lightsail resource type of the bucket (for example, Bucket).
+	// The Lightsail resource type of the bucket.
 	ResourceType *string `locationName:"resourceType" type:"string"`
 
 	// An array of objects that describe Lightsail instances that have access to
@@ -19254,35 +19452,35 @@ func (s *BucketState) SetMessage(v string) *BucketState {
 type Bundle struct {
 	_ struct{} `type:"structure"`
 
-	// The bundle ID (e.g., micro_1_0).
+	// The bundle ID (micro_1_0).
 	BundleId *string `locationName:"bundleId" type:"string"`
 
-	// The number of vCPUs included in the bundle (e.g., 2).
+	// The number of vCPUs included in the bundle (2).
 	CpuCount *int64 `locationName:"cpuCount" type:"integer"`
 
-	// The size of the SSD (e.g., 30).
+	// The size of the SSD (30).
 	DiskSizeInGb *int64 `locationName:"diskSizeInGb" type:"integer"`
 
-	// The Amazon EC2 instance type (e.g., t2.micro).
+	// The Amazon EC2 instance type (t2.micro).
 	InstanceType *string `locationName:"instanceType" type:"string"`
 
 	// A Boolean value indicating whether the bundle is active.
 	IsActive *bool `locationName:"isActive" type:"boolean"`
 
-	// A friendly name for the bundle (e.g., Micro).
+	// A friendly name for the bundle (Micro).
 	Name *string `locationName:"name" type:"string"`
 
-	// A numeric value that represents the power of the bundle (e.g., 500). You
-	// can use the bundle's power value in conjunction with a blueprint's minimum
-	// power value to determine whether the blueprint will run on the bundle. For
-	// example, you need a bundle with a power value of 500 or more to create an
-	// instance that uses a blueprint with a minimum power value of 500.
+	// A numeric value that represents the power of the bundle (500). You can use
+	// the bundle's power value in conjunction with a blueprint's minimum power
+	// value to determine whether the blueprint will run on the bundle. For example,
+	// you need a bundle with a power value of 500 or more to create an instance
+	// that uses a blueprint with a minimum power value of 500.
 	Power *int64 `locationName:"power" type:"integer"`
 
-	// The price in US dollars (e.g., 5.0) of the bundle.
+	// The price in US dollars (5.0) of the bundle.
 	Price *float64 `locationName:"price" type:"float"`
 
-	// The amount of RAM in GB (e.g., 2.0).
+	// The amount of RAM in GB (2.0).
 	RamSizeInGb *float64 `locationName:"ramSizeInGb" type:"float"`
 
 	// Virtual computer blueprints that are supported by a Lightsail for Research
@@ -19297,7 +19495,7 @@ type Bundle struct {
 	// bundle.
 	SupportedPlatforms []*string `locationName:"supportedPlatforms" type:"list" enum:"InstancePlatform"`
 
-	// The data transfer rate per month in GB (e.g., 2000).
+	// The data transfer rate per month in GB (2000).
 	TransferPerMonthInGb *int64 `locationName:"transferPerMonthInGb" type:"integer"`
 }
 
@@ -19690,7 +19888,7 @@ type Certificate struct {
 	// of the certificate.
 	KeyAlgorithm *string `locationName:"keyAlgorithm" type:"string"`
 
-	// The name of the certificate (e.g., my-certificate).
+	// The name of the certificate (my-certificate).
 	Name *string `locationName:"name" type:"string"`
 
 	// The timestamp when the certificate expires.
@@ -19761,8 +19959,8 @@ type Certificate struct {
 	// The validation status of the certificate.
 	Status *string `locationName:"status" type:"string" enum:"CertificateStatus"`
 
-	// An array of strings that specify the alternate domains (e.g., example2.com)
-	// and subdomains (e.g., blog.example.com) of the certificate.
+	// An array of strings that specify the alternate domains (example2.com) and
+	// subdomains (blog.example.com) of the certificate.
 	SubjectAlternativeNames []*string `locationName:"subjectAlternativeNames" type:"list"`
 
 	// The support code. Include this code in your email to support when you have
@@ -20113,7 +20311,7 @@ type CloudFormationStackRecord struct {
 	// followed by a GUID.
 	Name *string `locationName:"name" type:"string"`
 
-	// The Lightsail resource type (e.g., CloudFormationStackRecord).
+	// The Lightsail resource type (CloudFormationStackRecord).
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 
 	// A list of objects describing the source of the CloudFormation stack record.
@@ -20200,7 +20398,7 @@ type CloudFormationStackRecordSourceInfo struct {
 	// The name of the record.
 	Name *string `locationName:"name" type:"string"`
 
-	// The Lightsail resource type (e.g., ExportSnapshotRecord).
+	// The Lightsail resource type (ExportSnapshotRecord).
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"CloudFormationStackRecordSourceType"`
 }
 
@@ -20267,7 +20465,7 @@ type ContactMethod struct {
 	// The protocol of the contact method, such as email or SMS (text messaging).
 	Protocol *string `locationName:"protocol" type:"string" enum:"ContactProtocol"`
 
-	// The Lightsail resource type (e.g., ContactMethod).
+	// The Lightsail resource type of the contact method.
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 
 	// The current status of the contact method.
@@ -20565,7 +20763,7 @@ type ContainerService struct {
 	// how to specify public domain names for your Lightsail container service.
 	PublicDomainNames map[string][]*string `locationName:"publicDomainNames" type:"map"`
 
-	// The Lightsail resource type of the container service (i.e., ContainerService).
+	// The Lightsail resource type of the container service.
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 
 	// The scale specification of the container service.
@@ -20766,16 +20964,16 @@ type ContainerServiceDeployment struct {
 	//
 	// A deployment can be in one of the following states:
 	//
-	//    * Activating - The deployment is being created.
+	//    * ACTIVATING - The deployment is being created.
 	//
-	//    * Active - The deployment was successfully created, and it's currently
+	//    * ACTIVE - The deployment was successfully created, and it's currently
 	//    running on the container service. The container service can have only
 	//    one deployment in an active state at a time.
 	//
-	//    * Inactive - The deployment was previously successfully created, but it
+	//    * INACTIVE - The deployment was previously successfully created, but it
 	//    is not currently running on the container service.
 	//
-	//    * Failed - The deployment failed. Use the GetContainerLog action to view
+	//    * FAILED - The deployment failed. Use the GetContainerLog action to view
 	//    the log events for the containers in the deployment to try to determine
 	//    the reason for the failure.
 	State *string `locationName:"state" type:"string" enum:"ContainerServiceDeploymentState"`
@@ -21182,10 +21380,10 @@ type ContainerServicePower struct {
 	// for container services.
 	IsActive *bool `locationName:"isActive" type:"boolean"`
 
-	// The friendly name of the power (e.g., nano).
+	// The friendly name of the power (nano).
 	Name *string `locationName:"name" type:"string"`
 
-	// The ID of the power (e.g., nano-1).
+	// The ID of the power (nano-1).
 	PowerId *string `locationName:"powerId" type:"string"`
 
 	// The monthly price of the power in USD.
@@ -21879,18 +22077,18 @@ type CreateCertificateInput struct {
 	// CertificateName is a required field
 	CertificateName *string `locationName:"certificateName" type:"string" required:"true"`
 
-	// The domain name (e.g., example.com) for the certificate.
+	// The domain name (example.com) for the certificate.
 	//
 	// DomainName is a required field
 	DomainName *string `locationName:"domainName" type:"string" required:"true"`
 
-	// An array of strings that specify the alternate domains (e.g., example2.com)
-	// and subdomains (e.g., blog.example.com) for the certificate.
+	// An array of strings that specify the alternate domains (example2.com) and
+	// subdomains (blog.example.com) for the certificate.
 	//
 	// You can specify a maximum of nine alternate domains (in addition to the primary
 	// domain name).
 	//
-	// Wildcard domain entries (e.g., *.example.com) are not supported.
+	// Wildcard domain entries (*.example.com) are not supported.
 	SubjectAlternativeNames []*string `locationName:"subjectAlternativeNames" type:"list"`
 
 	// The tag keys and optional values to add to the certificate during create.
@@ -22600,9 +22798,9 @@ type CreateDiskFromSnapshotInput struct {
 	// An array of objects that represent the add-ons to enable for the new disk.
 	AddOns []*AddOnRequest `locationName:"addOns" type:"list"`
 
-	// The Availability Zone where you want to create the disk (e.g., us-east-2a).
-	// Choose the same Availability Zone as the Lightsail instance where you want
-	// to create the disk.
+	// The Availability Zone where you want to create the disk (us-east-2a). Choose
+	// the same Availability Zone as the Lightsail instance where you want to create
+	// the disk.
 	//
 	// Use the GetRegions operation to list the Availability Zones where Lightsail
 	// is currently available.
@@ -22610,13 +22808,13 @@ type CreateDiskFromSnapshotInput struct {
 	// AvailabilityZone is a required field
 	AvailabilityZone *string `locationName:"availabilityZone" type:"string" required:"true"`
 
-	// The unique Lightsail disk name (e.g., my-disk).
+	// The unique Lightsail disk name (my-disk).
 	//
 	// DiskName is a required field
 	DiskName *string `locationName:"diskName" type:"string" required:"true"`
 
-	// The name of the disk snapshot (e.g., my-snapshot) from which to create the
-	// new storage disk.
+	// The name of the disk snapshot (my-snapshot) from which to create the new
+	// storage disk.
 	//
 	// Constraint:
 	//
@@ -22641,7 +22839,7 @@ type CreateDiskFromSnapshotInput struct {
 	//    (https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-configuring-automatic-snapshots).
 	RestoreDate *string `locationName:"restoreDate" type:"string"`
 
-	// The size of the disk in GB (e.g., 32).
+	// The size of the disk in GB (32).
 	//
 	// SizeInGb is a required field
 	SizeInGb *int64 `locationName:"sizeInGb" type:"integer" required:"true"`
@@ -22820,9 +23018,9 @@ type CreateDiskInput struct {
 	// An array of objects that represent the add-ons to enable for the new disk.
 	AddOns []*AddOnRequest `locationName:"addOns" type:"list"`
 
-	// The Availability Zone where you want to create the disk (e.g., us-east-2a).
-	// Use the same Availability Zone as the Lightsail instance to which you want
-	// to attach the disk.
+	// The Availability Zone where you want to create the disk (us-east-2a). Use
+	// the same Availability Zone as the Lightsail instance to which you want to
+	// attach the disk.
 	//
 	// Use the get regions operation to list the Availability Zones where Lightsail
 	// is currently available.
@@ -22830,12 +23028,12 @@ type CreateDiskInput struct {
 	// AvailabilityZone is a required field
 	AvailabilityZone *string `locationName:"availabilityZone" type:"string" required:"true"`
 
-	// The unique Lightsail disk name (e.g., my-disk).
+	// The unique Lightsail disk name (my-disk).
 	//
 	// DiskName is a required field
 	DiskName *string `locationName:"diskName" type:"string" required:"true"`
 
-	// The size of the disk in GB (e.g., 32).
+	// The size of the disk in GB (32).
 	//
 	// SizeInGb is a required field
 	SizeInGb *int64 `locationName:"sizeInGb" type:"integer" required:"true"`
@@ -22959,20 +23157,20 @@ func (s *CreateDiskOutput) SetOperations(v []*Operation) *CreateDiskOutput {
 type CreateDiskSnapshotInput struct {
 	_ struct{} `type:"structure"`
 
-	// The unique name of the source disk (e.g., Disk-Virginia-1).
+	// The unique name of the source disk (Disk-Virginia-1).
 	//
 	// This parameter cannot be defined together with the instance name parameter.
 	// The disk name and instance name parameters are mutually exclusive.
 	DiskName *string `locationName:"diskName" type:"string"`
 
-	// The name of the destination disk snapshot (e.g., my-disk-snapshot) based
-	// on the source disk.
+	// The name of the destination disk snapshot (my-disk-snapshot) based on the
+	// source disk.
 	//
 	// DiskSnapshotName is a required field
 	DiskSnapshotName *string `locationName:"diskSnapshotName" type:"string" required:"true"`
 
-	// The unique name of the source instance (e.g., Amazon_Linux-512MB-Virginia-1).
-	// When this is defined, a snapshot of the instance's system volume is created.
+	// The unique name of the source instance (Amazon_Linux-512MB-Virginia-1). When
+	// this is defined, a snapshot of the instance's system volume is created.
 	//
 	// This parameter cannot be defined together with the disk name parameter. The
 	// instance name and disk name parameters are mutually exclusive.
@@ -23262,8 +23460,7 @@ type CreateDomainEntryInput struct {
 	// DomainEntry is a required field
 	DomainEntry *DomainEntry `locationName:"domainEntry" type:"structure" required:"true"`
 
-	// The domain name (e.g., example.com) for which you want to create the domain
-	// entry.
+	// The domain name (example.com) for which you want to create the domain entry.
 	//
 	// DomainName is a required field
 	DomainName *string `locationName:"domainName" type:"string" required:"true"`
@@ -23351,7 +23548,7 @@ func (s *CreateDomainEntryOutput) SetOperation(v *Operation) *CreateDomainEntryO
 type CreateDomainInput struct {
 	_ struct{} `type:"structure"`
 
-	// The domain name to manage (e.g., example.com).
+	// The domain name to manage (example.com).
 	//
 	// DomainName is a required field
 	DomainName *string `locationName:"domainName" type:"string" required:"true"`
@@ -23674,7 +23871,7 @@ type CreateInstancesFromSnapshotInput struct {
 	AvailabilityZone *string `locationName:"availabilityZone" type:"string" required:"true"`
 
 	// The bundle of specification information for your virtual private server (or
-	// instance), including the pricing plan (e.g., micro_1_0).
+	// instance), including the pricing plan (micro_1_0).
 	//
 	// BundleId is a required field
 	BundleId *string `locationName:"bundleId" type:"string" required:"true"`
@@ -23938,7 +24135,7 @@ type CreateInstancesInput struct {
 	// AvailabilityZone is a required field
 	AvailabilityZone *string `locationName:"availabilityZone" type:"string" required:"true"`
 
-	// The ID for a virtual private server image (e.g., app_wordpress_4_4 or app_lamp_7_0).
+	// The ID for a virtual private server image (app_wordpress_4_4 or app_lamp_7_0).
 	// Use the get blueprints operation to return a list of available images (or
 	// blueprints).
 	//
@@ -23951,15 +24148,15 @@ type CreateInstancesInput struct {
 	BlueprintId *string `locationName:"blueprintId" type:"string" required:"true"`
 
 	// The bundle of specification information for your virtual private server (or
-	// instance), including the pricing plan (e.g., micro_1_0).
+	// instance), including the pricing plan (micro_1_0).
 	//
 	// BundleId is a required field
 	BundleId *string `locationName:"bundleId" type:"string" required:"true"`
 
-	// (Deprecated) The name for your custom image.
+	// (Discontinued) The name for your custom image.
 	//
 	// In releases prior to June 12, 2017, this parameter was ignored by the API.
-	// It is now deprecated.
+	// It is now discontinued.
 	//
 	// Deprecated: CustomImageName has been deprecated
 	CustomImageName *string `locationName:"customImageName" deprecated:"true" type:"string"`
@@ -24260,10 +24457,10 @@ type CreateLoadBalancerInput struct {
 	_ struct{} `type:"structure"`
 
 	// The optional alternative domains and subdomains to use with your SSL/TLS
-	// certificate (e.g., www.example.com, example.com, m.example.com, blog.example.com).
+	// certificate (www.example.com, example.com, m.example.com, blog.example.com).
 	CertificateAlternativeNames []*string `locationName:"certificateAlternativeNames" type:"list"`
 
-	// The domain name with which your certificate is associated (e.g., example.com).
+	// The domain name with which your certificate is associated (example.com).
 	//
 	// If you specify certificateDomainName, then certificateName is required (and
 	// vice-versa).
@@ -24277,7 +24474,7 @@ type CreateLoadBalancerInput struct {
 
 	// The path you provided to perform the load balancer health check. If you didn't
 	// specify a health check path, Lightsail uses the root path of your website
-	// (e.g., "/").
+	// ("/").
 	//
 	// You may want to specify a custom health check path other than the root of
 	// your application if your home page loads slowly or has a lot of media or
@@ -24447,10 +24644,10 @@ type CreateLoadBalancerTlsCertificateInput struct {
 	// An array of strings listing alternative domains and subdomains for your SSL/TLS
 	// certificate. Lightsail will de-dupe the names for you. You can have a maximum
 	// of 9 alternative names (in addition to the 1 primary domain). We do not support
-	// wildcards (e.g., *.example.com).
+	// wildcards (*.example.com).
 	CertificateAlternativeNames []*string `locationName:"certificateAlternativeNames" type:"list"`
 
-	// The domain name (e.g., example.com) for your SSL/TLS certificate.
+	// The domain name (example.com) for your SSL/TLS certificate.
 	//
 	// CertificateDomainName is a required field
 	CertificateDomainName *string `locationName:"certificateDomainName" type:"string" required:"true"`
@@ -25925,7 +26122,7 @@ func (s DeleteContainerServiceOutput) GoString() string {
 type DeleteDiskInput struct {
 	_ struct{} `type:"structure"`
 
-	// The unique name of the disk you want to delete (e.g., my-disk).
+	// The unique name of the disk you want to delete (my-disk).
 	//
 	// DiskName is a required field
 	DiskName *string `locationName:"diskName" type:"string" required:"true"`
@@ -26013,7 +26210,7 @@ func (s *DeleteDiskOutput) SetOperations(v []*Operation) *DeleteDiskOutput {
 type DeleteDiskSnapshotInput struct {
 	_ struct{} `type:"structure"`
 
-	// The name of the disk snapshot you want to delete (e.g., my-disk-snapshot).
+	// The name of the disk snapshot you want to delete (my-disk-snapshot).
 	//
 	// DiskSnapshotName is a required field
 	DiskSnapshotName *string `locationName:"diskSnapshotName" type:"string" required:"true"`
@@ -27169,8 +27366,7 @@ func (s *DetachCertificateFromDistributionOutput) SetOperation(v *Operation) *De
 type DetachDiskInput struct {
 	_ struct{} `type:"structure"`
 
-	// The unique name of the disk you want to detach from your instance (e.g.,
-	// my-disk).
+	// The unique name of the disk you want to detach from your instance (my-disk).
 	//
 	// DiskName is a required field
 	DiskName *string `locationName:"diskName" type:"string" required:"true"`
@@ -27525,10 +27721,10 @@ type Disk struct {
 	// The resources to which the disk is attached.
 	AttachedTo *string `locationName:"attachedTo" type:"string"`
 
-	// (Deprecated) The attachment state of the disk.
+	// (Discontinued) The attachment state of the disk.
 	//
 	// In releases prior to November 14, 2017, this parameter returned attached
-	// for system disks in the API response. It is now deprecated, but still included
+	// for system disks in the API response. It is now discontinued, but still included
 	// in the response. Use isAttached instead.
 	//
 	// Deprecated: AttachmentState has been deprecated
@@ -27542,10 +27738,10 @@ type Disk struct {
 	// The date when the disk was created.
 	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp"`
 
-	// (Deprecated) The number of GB in use by the disk.
+	// (Discontinued) The number of GB in use by the disk.
 	//
 	// In releases prior to November 14, 2017, this parameter was not included in
-	// the API response. It is now deprecated.
+	// the API response. It is now discontinued.
 	//
 	// Deprecated: GbInUse has been deprecated
 	GbInUse *int64 `locationName:"gbInUse" deprecated:"true" type:"integer"`
@@ -27569,7 +27765,7 @@ type Disk struct {
 	// The disk path.
 	Path *string `locationName:"path" type:"string"`
 
-	// The Lightsail resource type (e.g., Disk).
+	// The Lightsail resource type (Disk).
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 
 	// The size of the disk in GB.
@@ -27728,7 +27924,7 @@ type DiskInfo struct {
 	// The disk path.
 	Path *string `locationName:"path" type:"string"`
 
-	// The size of the disk in GB (e.g., 32).
+	// The size of the disk in GB (32).
 	SizeInGb *int64 `locationName:"sizeInGb" type:"integer"`
 }
 
@@ -27778,7 +27974,7 @@ func (s *DiskInfo) SetSizeInGb(v int64) *DiskInfo {
 type DiskMap struct {
 	_ struct{} `type:"structure"`
 
-	// The new disk name (e.g., my-new-disk).
+	// The new disk name (my-new-disk).
 	NewDiskName *string `locationName:"newDiskName" type:"string"`
 
 	// The original disk path exposed to the instance (for example, /dev/sdh).
@@ -27847,13 +28043,13 @@ type DiskSnapshot struct {
 	// The AWS Region and Availability Zone where the disk snapshot was created.
 	Location *ResourceLocation `locationName:"location" type:"structure"`
 
-	// The name of the disk snapshot (e.g., my-disk-snapshot).
+	// The name of the disk snapshot (my-disk-snapshot).
 	Name *string `locationName:"name" type:"string"`
 
 	// The progress of the snapshot.
 	Progress *string `locationName:"progress" type:"string"`
 
-	// The Lightsail resource type (e.g., DiskSnapshot).
+	// The Lightsail resource type (DiskSnapshot).
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 
 	// The size of the disk in GB.
@@ -27984,7 +28180,7 @@ func (s *DiskSnapshot) SetTags(v []*Tag) *DiskSnapshot {
 type DiskSnapshotInfo struct {
 	_ struct{} `type:"structure"`
 
-	// The size of the disk in GB (e.g., 32).
+	// The size of the disk in GB (32).
 	SizeInGb *int64 `locationName:"sizeInGb" type:"integer"`
 }
 
@@ -28146,7 +28342,7 @@ func (s *DnsRecordCreationState) SetMessage(v string) *DnsRecordCreationState {
 type Domain struct {
 	_ struct{} `type:"structure"`
 
-	// The Amazon Resource Name (ARN) of the domain recordset (e.g., arn:aws:lightsail:global:123456789101:Domain/824cede0-abc7-4f84-8dbc-12345EXAMPLE).
+	// The Amazon Resource Name (ARN) of the domain recordset (arn:aws:lightsail:global:123456789101:Domain/824cede0-abc7-4f84-8dbc-12345EXAMPLE).
 	Arn *string `locationName:"arn" type:"string"`
 
 	// The date when the domain recordset was created.
@@ -28268,15 +28464,15 @@ type DomainEntry struct {
 	// The name of the domain.
 	Name *string `locationName:"name" type:"string"`
 
-	// (Deprecated) The options for the domain entry.
+	// (Discontinued) The options for the domain entry.
 	//
 	// In releases prior to November 29, 2017, this parameter was not included in
-	// the API response. It is now deprecated.
+	// the API response. It is now discontinued.
 	//
 	// Deprecated: Options has been deprecated
 	Options map[string]*string `locationName:"options" deprecated:"true" type:"map"`
 
-	// The target IP address (e.g., 192.0.2.0), or AWS name server (e.g., ns-111.awsdns-22.com.).
+	// The target IP address (192.0.2.0), or AWS name server (ns-111.awsdns-22.com.).
 	//
 	// For Lightsail load balancers, the value looks like ab1234c56789c6b86aba6fb203d443bc-123456789.us-east-2.elb.amazonaws.com.
 	// For Lightsail distributions, the value looks like exampled1182ne.cloudfront.net.
@@ -28837,7 +29033,7 @@ type ExportSnapshotRecord struct {
 	// The export snapshot record name.
 	Name *string `locationName:"name" type:"string"`
 
-	// The Lightsail resource type (e.g., ExportSnapshotRecord).
+	// The Lightsail resource type (ExportSnapshotRecord).
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 
 	// A list of objects describing the source of the export snapshot record.
@@ -28938,7 +29134,7 @@ type ExportSnapshotRecordSourceInfo struct {
 	// The name of the source instance or disk snapshot.
 	Name *string `locationName:"name" type:"string"`
 
-	// The Lightsail resource type (e.g., InstanceSnapshot or DiskSnapshot).
+	// The Lightsail resource type (InstanceSnapshot or DiskSnapshot).
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ExportSnapshotRecordSourceType"`
 }
 
@@ -29248,7 +29444,8 @@ type GetAutoSnapshotsOutput struct {
 	// The name of the source instance or disk for the automatic snapshots.
 	ResourceName *string `locationName:"resourceName" type:"string"`
 
-	// The resource type (e.g., Instance or Disk).
+	// The resource type of the automatic snapshot. The possible values are Instance,
+	// and Disk.
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 }
 
@@ -31111,7 +31308,7 @@ func (s *GetCostEstimateOutput) SetResourcesBudgetEstimate(v []*ResourceBudgetEs
 type GetDiskInput struct {
 	_ struct{} `type:"structure"`
 
-	// The name of the disk (e.g., my-disk).
+	// The name of the disk (my-disk).
 	//
 	// DiskName is a required field
 	DiskName *string `locationName:"diskName" type:"string" required:"true"`
@@ -31188,7 +31385,7 @@ func (s *GetDiskOutput) SetDisk(v *Disk) *GetDiskOutput {
 type GetDiskSnapshotInput struct {
 	_ struct{} `type:"structure"`
 
-	// The name of the disk snapshot (e.g., my-disk-snapshot).
+	// The name of the disk snapshot (my-disk-snapshot).
 	//
 	// DiskSnapshotName is a required field
 	DiskSnapshotName *string `locationName:"diskSnapshotName" type:"string" required:"true"`
@@ -31516,8 +31713,7 @@ func (s *GetDistributionLatestCacheResetInput) SetDistributionName(v string) *Ge
 type GetDistributionLatestCacheResetOutput struct {
 	_ struct{} `type:"structure"`
 
-	// The timestamp of the last cache reset (e.g., 1479734909.17) in Unix time
-	// format.
+	// The timestamp of the last cache reset (1479734909.17) in Unix time format.
 	CreateTime *time.Time `locationName:"createTime" type:"timestamp"`
 
 	// The status of the last cache reset.
@@ -33856,10 +34052,11 @@ func (s *GetOperationsForResourceInput) SetResourceName(v string) *GetOperations
 type GetOperationsForResourceOutput struct {
 	_ struct{} `type:"structure"`
 
-	// (Deprecated) Returns the number of pages of results that remain.
+	// (Discontinued) Returns the number of pages of results that remain.
 	//
 	// In releases prior to June 12, 2017, this parameter returned null by the API.
-	// It is now deprecated, and the API returns the next page token parameter instead.
+	// It is now discontinued, and the API returns the next page token parameter
+	// instead.
 	//
 	// Deprecated: NextPageCount has been deprecated
 	NextPageCount *string `locationName:"nextPageCount" deprecated:"true" type:"string"`
@@ -34001,12 +34198,12 @@ type GetRegionsInput struct {
 
 	// A Boolean value indicating whether to also include Availability Zones in
 	// your get regions request. Availability Zones are indicated with a letter:
-	// e.g., us-east-2a.
+	// us-east-2a.
 	IncludeAvailabilityZones *bool `locationName:"includeAvailabilityZones" type:"boolean"`
 
 	// A Boolean value indicating whether to also include Availability Zones for
 	// databases in your get regions request. Availability Zones are indicated with
-	// a letter (e.g., us-east-2a).
+	// a letter (us-east-2a).
 	IncludeRelationalDatabaseAvailabilityZones *bool `locationName:"includeRelationalDatabaseAvailabilityZones" type:"boolean"`
 }
 
@@ -35386,6 +35583,113 @@ func (s *GetRelationalDatabasesOutput) SetRelationalDatabases(v []*RelationalDat
 	return s
 }
 
+type GetSetupHistoryInput struct {
+	_ struct{} `type:"structure"`
+
+	// The token to advance to the next page of results from your request.
+	//
+	// To get a page token, perform an initial GetSetupHistory request. If your
+	// results are paginated, the response will return a next page token that you
+	// can specify as the page token in a subsequent request.
+	PageToken *string `locationName:"pageToken" min:"24" type:"string"`
+
+	// The name of the resource for which you are requesting information.
+	//
+	// ResourceName is a required field
+	ResourceName *string `locationName:"resourceName" type:"string" required:"true"`
+}
+
+// String returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s GetSetupHistoryInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s GetSetupHistoryInput) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *GetSetupHistoryInput) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "GetSetupHistoryInput"}
+	if s.PageToken != nil && len(*s.PageToken) < 24 {
+		invalidParams.Add(request.NewErrParamMinLen("PageToken", 24))
+	}
+	if s.ResourceName == nil {
+		invalidParams.Add(request.NewErrParamRequired("ResourceName"))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetPageToken sets the PageToken field's value.
+func (s *GetSetupHistoryInput) SetPageToken(v string) *GetSetupHistoryInput {
+	s.PageToken = &v
+	return s
+}
+
+// SetResourceName sets the ResourceName field's value.
+func (s *GetSetupHistoryInput) SetResourceName(v string) *GetSetupHistoryInput {
+	s.ResourceName = &v
+	return s
+}
+
+type GetSetupHistoryOutput struct {
+	_ struct{} `type:"structure"`
+
+	// The token to advance to the next page of results from your request.
+	//
+	// A next page token is not returned if there are no more results to display.
+	//
+	// To get the next page of results, perform another GetSetupHistory request
+	// and specify the next page token using the pageToken parameter.
+	NextPageToken *string `locationName:"nextPageToken" min:"24" type:"string"`
+
+	// The historical information that's returned.
+	SetupHistory []*SetupHistory `locationName:"setupHistory" type:"list"`
+}
+
+// String returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s GetSetupHistoryOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s GetSetupHistoryOutput) GoString() string {
+	return s.String()
+}
+
+// SetNextPageToken sets the NextPageToken field's value.
+func (s *GetSetupHistoryOutput) SetNextPageToken(v string) *GetSetupHistoryOutput {
+	s.NextPageToken = &v
+	return s
+}
+
+// SetSetupHistory sets the SetupHistory field's value.
+func (s *GetSetupHistoryOutput) SetSetupHistory(v []*SetupHistory) *GetSetupHistoryOutput {
+	s.SetupHistory = v
+	return s
+}
+
 type GetStaticIpInput struct {
 	_ struct{} `type:"structure"`
 
@@ -35802,9 +36106,9 @@ func (s *ImportKeyPairOutput) SetOperation(v *Operation) *ImportKeyPairOutput {
 // Describes the origin resource of an Amazon Lightsail content delivery network
 // (CDN) distribution.
 //
-// An origin can be a Lightsail instance, bucket, or load balancer. A distribution
-// pulls content from an origin, caches it, and serves it to viewers via a worldwide
-// network of edge servers.
+// An origin can be a Lightsail instance, bucket, container service, or load
+// balancer. A distribution pulls content from an origin, caches it, and serves
+// it to viewers via a worldwide network of edge servers.
 type InputOrigin struct {
 	_ struct{} `type:"structure"`
 
@@ -35862,20 +36166,20 @@ type Instance struct {
 	// An array of objects representing the add-ons enabled on the instance.
 	AddOns []*AddOn `locationName:"addOns" type:"list"`
 
-	// The Amazon Resource Name (ARN) of the instance (e.g., arn:aws:lightsail:us-east-2:123456789101:Instance/244ad76f-8aad-4741-809f-12345EXAMPLE).
+	// The Amazon Resource Name (ARN) of the instance (arn:aws:lightsail:us-east-2:123456789101:Instance/244ad76f-8aad-4741-809f-12345EXAMPLE).
 	Arn *string `locationName:"arn" type:"string"`
 
-	// The blueprint ID (e.g., os_amlinux_2016_03).
+	// The blueprint ID (os_amlinux_2016_03).
 	BlueprintId *string `locationName:"blueprintId" type:"string"`
 
-	// The friendly name of the blueprint (e.g., Amazon Linux).
+	// The friendly name of the blueprint (Amazon Linux).
 	BlueprintName *string `locationName:"blueprintName" type:"string"`
 
-	// The bundle for the instance (e.g., micro_1_0).
+	// The bundle for the instance (micro_1_0).
 	BundleId *string `locationName:"bundleId" type:"string"`
 
-	// The timestamp when the instance was created (e.g., 1479734909.17) in Unix
-	// time format.
+	// The timestamp when the instance was created (1479734909.17) in Unix time
+	// format.
 	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp"`
 
 	// The size of the vCPU and the amount of RAM for the instance.
@@ -35899,7 +36203,7 @@ type Instance struct {
 	// The metadata options for the Amazon Lightsail instance.
 	MetadataOptions *InstanceMetadataOptions `locationName:"metadataOptions" type:"structure"`
 
-	// The name the user gave the instance (e.g., Amazon_Linux-1GB-Ohio-1).
+	// The name the user gave the instance (Amazon_Linux-1GB-Ohio-1).
 	Name *string `locationName:"name" type:"string"`
 
 	// Information about the public ports and monthly data transfer rates for the
@@ -35915,10 +36219,10 @@ type Instance struct {
 	// The type of resource (usually Instance).
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 
-	// The name of the SSH key being used to connect to the instance (e.g., LightsailDefaultKeyPair).
+	// The name of the SSH key being used to connect to the instance (LightsailDefaultKeyPair).
 	SshKeyName *string `locationName:"sshKeyName" type:"string"`
 
-	// The status code and the state (e.g., running) for the instance.
+	// The status code and the state (running) for the instance.
 	State *InstanceState `locationName:"state" type:"structure"`
 
 	// The support code. Include this code in your email to support when you have
@@ -35930,7 +36234,7 @@ type Instance struct {
 	// tags in Lightsail, see the Amazon Lightsail Developer Guide (https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-tags).
 	Tags []*Tag `locationName:"tags" type:"list"`
 
-	// The user name for connecting to the instance (e.g., ec2-user).
+	// The user name for connecting to the instance (ec2-user).
 	Username *string `locationName:"username" type:"string"`
 }
 
@@ -36090,7 +36394,7 @@ type InstanceAccessDetails struct {
 	_ struct{} `type:"structure"`
 
 	// For SSH access, the public key to use when accessing your instance For OpenSSH
-	// clients (e.g., command line SSH), you should save this value to tempkey-cert.pub.
+	// clients (command line SSH), you should save this value to tempkey-cert.pub.
 	CertKey *string `locationName:"certKey" type:"string"`
 
 	// For SSH access, the date on which the temporary keys expire.
@@ -36125,8 +36429,8 @@ type InstanceAccessDetails struct {
 	// create an instance, it can take up to 15 minutes for the instance to be ready.
 	PasswordData *PasswordData `locationName:"passwordData" type:"structure"`
 
-	// For SSH access, the temporary private key. For OpenSSH clients (e.g., command
-	// line SSH), you should save this value to tempkey).
+	// For SSH access, the temporary private key. For OpenSSH clients (command line
+	// SSH), you should save this value to tempkey).
 	PrivateKey *string `locationName:"privateKey" type:"string"`
 
 	// The protocol for these Amazon Lightsail instance access details.
@@ -36224,7 +36528,7 @@ type InstanceEntry struct {
 	// AvailabilityZone is a required field
 	AvailabilityZone *string `locationName:"availabilityZone" type:"string" required:"true"`
 
-	// The instance type (e.g., t2.micro) to use for the new Amazon EC2 instance.
+	// The instance type (t2.micro) to use for the new Amazon EC2 instance.
 	//
 	// InstanceType is a required field
 	InstanceType *string `locationName:"instanceType" type:"string" required:"true"`
@@ -36359,7 +36663,7 @@ type InstanceHardware struct {
 	// The disks attached to the instance.
 	Disks []*Disk `locationName:"disks" type:"list"`
 
-	// The amount of RAM in GB on the instance (e.g., 1.0).
+	// The amount of RAM in GB on the instance (1.0).
 	RamSizeInGb *float64 `locationName:"ramSizeInGb" type:"float"`
 }
 
@@ -36993,25 +37297,25 @@ func (s *InstancePortState) SetToPort(v int64) *InstancePortState {
 type InstanceSnapshot struct {
 	_ struct{} `type:"structure"`
 
-	// The Amazon Resource Name (ARN) of the snapshot (e.g., arn:aws:lightsail:us-east-2:123456789101:InstanceSnapshot/d23b5706-3322-4d83-81e5-12345EXAMPLE).
+	// The Amazon Resource Name (ARN) of the snapshot (arn:aws:lightsail:us-east-2:123456789101:InstanceSnapshot/d23b5706-3322-4d83-81e5-12345EXAMPLE).
 	Arn *string `locationName:"arn" type:"string"`
 
-	// The timestamp when the snapshot was created (e.g., 1479907467.024).
+	// The timestamp when the snapshot was created (1479907467.024).
 	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp"`
 
 	// An array of disk objects containing information about all block storage disks.
 	FromAttachedDisks []*Disk `locationName:"fromAttachedDisks" type:"list"`
 
-	// The blueprint ID from which you created the snapshot (e.g., os_debian_8_3).
-	// A blueprint is a virtual private server (or instance) image used to create
-	// instances quickly.
+	// The blueprint ID from which you created the snapshot (os_debian_8_3). A blueprint
+	// is a virtual private server (or instance) image used to create instances
+	// quickly.
 	FromBlueprintId *string `locationName:"fromBlueprintId" type:"string"`
 
-	// The bundle ID from which you created the snapshot (e.g., micro_1_0).
+	// The bundle ID from which you created the snapshot (micro_1_0).
 	FromBundleId *string `locationName:"fromBundleId" type:"string"`
 
 	// The Amazon Resource Name (ARN) of the instance from which the snapshot was
-	// created (e.g., arn:aws:lightsail:us-east-2:123456789101:Instance/64b8404c-ccb1-430b-8daf-12345EXAMPLE).
+	// created (arn:aws:lightsail:us-east-2:123456789101:Instance/64b8404c-ccb1-430b-8daf-12345EXAMPLE).
 	FromInstanceArn *string `locationName:"fromInstanceArn" type:"string"`
 
 	// The instance from which the snapshot was created.
@@ -37169,10 +37473,10 @@ func (s *InstanceSnapshot) SetTags(v []*Tag) *InstanceSnapshot {
 type InstanceSnapshotInfo struct {
 	_ struct{} `type:"structure"`
 
-	// The blueprint ID from which the source instance (e.g., os_debian_8_3).
+	// The blueprint ID from which the source instance (os_debian_8_3).
 	FromBlueprintId *string `locationName:"fromBlueprintId" type:"string"`
 
-	// The bundle ID from which the source instance was created (e.g., micro_1_0).
+	// The bundle ID from which the source instance was created (micro_1_0).
 	FromBundleId *string `locationName:"fromBundleId" type:"string"`
 
 	// A list of objects describing the disks that were attached to the source instance.
@@ -37222,7 +37526,7 @@ type InstanceState struct {
 	// The status code for the instance.
 	Code *int64 `locationName:"code" type:"integer"`
 
-	// The state of the instance (e.g., running or pending).
+	// The state of the instance (running or pending).
 	Name *string `locationName:"name" type:"string"`
 }
 
@@ -37388,10 +37692,10 @@ func (s *IsVpcPeeredOutput) SetIsPeered(v bool) *IsVpcPeeredOutput {
 type KeyPair struct {
 	_ struct{} `type:"structure"`
 
-	// The Amazon Resource Name (ARN) of the key pair (e.g., arn:aws:lightsail:us-east-2:123456789101:KeyPair/05859e3d-331d-48ba-9034-12345EXAMPLE).
+	// The Amazon Resource Name (ARN) of the key pair (arn:aws:lightsail:us-east-2:123456789101:KeyPair/05859e3d-331d-48ba-9034-12345EXAMPLE).
 	Arn *string `locationName:"arn" type:"string"`
 
-	// The timestamp when the key pair was created (e.g., 1479816991.349).
+	// The timestamp when the key pair was created (1479816991.349).
 	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp"`
 
 	// The RSA fingerprint of the key pair.
@@ -37548,7 +37852,7 @@ type LightsailDistribution struct {
 	// The public DNS of the origin.
 	OriginPublicDNS *string `locationName:"originPublicDNS" type:"string"`
 
-	// The Lightsail resource type (e.g., Distribution).
+	// The Lightsail resource type (Distribution).
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 
 	// The status of the distribution.
@@ -37740,11 +38044,11 @@ type LoadBalancer struct {
 	// The possible values are ipv4 for IPv4 only, and dualstack for IPv4 and IPv6.
 	IpAddressType *string `locationName:"ipAddressType" type:"string" enum:"IpAddressType"`
 
-	// The AWS Region where your load balancer was created (e.g., us-east-2a). Lightsail
+	// The AWS Region where your load balancer was created (us-east-2a). Lightsail
 	// automatically creates your load balancer across Availability Zones.
 	Location *ResourceLocation `locationName:"location" type:"structure"`
 
-	// The name of the load balancer (e.g., my-load-balancer).
+	// The name of the load balancer (my-load-balancer).
 	Name *string `locationName:"name" type:"string"`
 
 	// The protocol you have enabled for your load balancer. Valid values are below.
@@ -37756,7 +38060,7 @@ type LoadBalancer struct {
 	// 80. For HTTPS, use port 443.
 	PublicPorts []*int64 `locationName:"publicPorts" type:"list"`
 
-	// The resource type (e.g., LoadBalancer.
+	// The resource type (LoadBalancer.
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 
 	// The status of your load balancer. Valid values are below.
@@ -37993,7 +38297,7 @@ type LoadBalancerTlsCertificate struct {
 	// certificate.
 	Location *ResourceLocation `locationName:"location" type:"structure"`
 
-	// The name of the SSL/TLS certificate (e.g., my-certificate).
+	// The name of the SSL/TLS certificate (my-certificate).
 	Name *string `locationName:"name" type:"string"`
 
 	// The timestamp when the SSL/TLS certificate expires.
@@ -38006,7 +38310,7 @@ type LoadBalancerTlsCertificate struct {
 	// Lightsail.
 	RenewalSummary *LoadBalancerTlsCertificateRenewalSummary `locationName:"renewalSummary" type:"structure"`
 
-	// The resource type (e.g., LoadBalancerTlsCertificate).
+	// The resource type (LoadBalancerTlsCertificate).
 	//
 	//    * Instance - A Lightsail instance (a virtual private server)
 	//
@@ -38051,8 +38355,8 @@ type LoadBalancerTlsCertificate struct {
 	// the certificate.
 	Subject *string `locationName:"subject" type:"string"`
 
-	// An array of strings that specify the alternate domains (e.g., example2.com)
-	// and subdomains (e.g., blog.example.com) for the certificate.
+	// An array of strings that specify the alternate domains (example2.com) and
+	// subdomains (blog.example.com) for the certificate.
 	SubjectAlternativeNames []*string `locationName:"subjectAlternativeNames" type:"list"`
 
 	// The support code. Include this code in your email to support when you have
@@ -38664,7 +38968,7 @@ type MetricDatapoint struct {
 	// The sum.
 	Sum *float64 `locationName:"sum" type:"double"`
 
-	// The timestamp (e.g., 1479816991.349).
+	// The timestamp (1479816991.349).
 	Timestamp *time.Time `locationName:"timestamp" type:"timestamp"`
 
 	// The unit.
@@ -39047,7 +39351,7 @@ func (s *OpenInstancePublicPortsOutput) SetOperation(v *Operation) *OpenInstance
 type Operation struct {
 	_ struct{} `type:"structure"`
 
-	// The timestamp when the operation was initialized (e.g., 1479816991.349).
+	// The timestamp when the operation was initialized (1479816991.349).
 	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp"`
 
 	// The error code.
@@ -39065,7 +39369,7 @@ type Operation struct {
 	// The Amazon Web Services Region and Availability Zone.
 	Location *ResourceLocation `locationName:"location" type:"structure"`
 
-	// Details about the operation (e.g., Debian-1GB-Ohio-1).
+	// Details about the operation (Debian-1GB-Ohio-1).
 	OperationDetails *string `locationName:"operationDetails" type:"string"`
 
 	// The type of operation.
@@ -39080,7 +39384,7 @@ type Operation struct {
 	// The status of the operation.
 	Status *string `locationName:"status" type:"string" enum:"OperationStatus"`
 
-	// The timestamp when the status was changed (e.g., 1479816991.349).
+	// The timestamp when the status was changed (1479816991.349).
 	StatusChangedAt *time.Time `locationName:"statusChangedAt" type:"timestamp"`
 }
 
@@ -39263,7 +39567,7 @@ type Origin struct {
 	// The AWS Region name of the origin resource.
 	RegionName *string `locationName:"regionName" type:"string" enum:"RegionName"`
 
-	// The resource type of the origin resource (e.g., Instance).
+	// The resource type of the origin resource (Instance).
 	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
 }
 
@@ -40436,17 +40740,17 @@ type Region struct {
 	// The Availability Zones. Follows the format us-east-2a (case-sensitive).
 	AvailabilityZones []*AvailabilityZone `locationName:"availabilityZones" type:"list"`
 
-	// The continent code (e.g., NA, meaning North America).
+	// The continent code (NA, meaning North America).
 	ContinentCode *string `locationName:"continentCode" type:"string"`
 
-	// The description of the Amazon Web Services Region (e.g., This region is recommended
+	// The description of the Amazon Web Services Region (This region is recommended
 	// to serve users in the eastern United States and eastern Canada).
 	Description *string `locationName:"description" type:"string"`
 
-	// The display name (e.g., Ohio).
+	// The display name (Ohio).
 	DisplayName *string `locationName:"displayName" type:"string"`
 
-	// The region name (e.g., us-east-2).
+	// The region name (us-east-2).
 	Name *string `locationName:"name" type:"string" enum:"RegionName"`
 
 	// The Availability Zones for databases. Follows the format us-east-2a (case-sensitive).
@@ -41768,8 +42072,7 @@ func (s *ResetDistributionCacheInput) SetDistributionName(v string) *ResetDistri
 type ResetDistributionCacheOutput struct {
 	_ struct{} `type:"structure"`
 
-	// The timestamp of the reset cache request (e.g., 1479734909.17) in Unix time
-	// format.
+	// The timestamp of the reset cache request (1479734909.17) in Unix time format.
 	CreateTime *time.Time `locationName:"createTime" type:"timestamp"`
 
 	// An array of objects that describe the result of the action, such as the status
@@ -42241,7 +42544,7 @@ type SetIpAddressTypeInput struct {
 
 	// The resource type.
 	//
-	// The possible values are Distribution, Instance, and LoadBalancer.
+	// The resource values are Distribution, Instance, and LoadBalancer.
 	//
 	// Distribution-related APIs are available only in the N. Virginia (us-east-1)
 	// Amazon Web Services Region. Set your Amazon Web Services Region configuration
@@ -42457,6 +42760,412 @@ func (s *SetResourceAccessForBucketOutput) SetOperations(v []*Operation) *SetRes
 	return s
 }
 
+// Returns details about the commands that were run.
+type SetupExecutionDetails struct {
+	_ struct{} `type:"structure"`
+
+	// The command that was executed.
+	Command *string `locationName:"command" type:"string"`
+
+	// The timestamp for when the request was run.
+	DateTime *time.Time `locationName:"dateTime" type:"timestamp"`
+
+	// The name of the target resource.
+	Name *string `locationName:"name" type:"string"`
+
+	// The text written by the command to stderr.
+	StandardError *string `locationName:"standardError" type:"string"`
+
+	// The text written by the command to stdout.
+	StandardOutput *string `locationName:"standardOutput" type:"string"`
+
+	// The status of the SetupInstanceHttps request.
+	Status *string `locationName:"status" type:"string" enum:"SetupStatus"`
+
+	// The current version of the script..
+	Version *string `locationName:"version" type:"string"`
+}
+
+// String returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupExecutionDetails) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupExecutionDetails) GoString() string {
+	return s.String()
+}
+
+// SetCommand sets the Command field's value.
+func (s *SetupExecutionDetails) SetCommand(v string) *SetupExecutionDetails {
+	s.Command = &v
+	return s
+}
+
+// SetDateTime sets the DateTime field's value.
+func (s *SetupExecutionDetails) SetDateTime(v time.Time) *SetupExecutionDetails {
+	s.DateTime = &v
+	return s
+}
+
+// SetName sets the Name field's value.
+func (s *SetupExecutionDetails) SetName(v string) *SetupExecutionDetails {
+	s.Name = &v
+	return s
+}
+
+// SetStandardError sets the StandardError field's value.
+func (s *SetupExecutionDetails) SetStandardError(v string) *SetupExecutionDetails {
+	s.StandardError = &v
+	return s
+}
+
+// SetStandardOutput sets the StandardOutput field's value.
+func (s *SetupExecutionDetails) SetStandardOutput(v string) *SetupExecutionDetails {
+	s.StandardOutput = &v
+	return s
+}
+
+// SetStatus sets the Status field's value.
+func (s *SetupExecutionDetails) SetStatus(v string) *SetupExecutionDetails {
+	s.Status = &v
+	return s
+}
+
+// SetVersion sets the Version field's value.
+func (s *SetupExecutionDetails) SetVersion(v string) *SetupExecutionDetails {
+	s.Version = &v
+	return s
+}
+
+// Returns a list of the commands that were ran on the target resource.
+//
+// The status of each command is also returned.
+type SetupHistory struct {
+	_ struct{} `type:"structure"`
+
+	// Describes the full details of the request.
+	ExecutionDetails []*SetupExecutionDetails `locationName:"executionDetails" type:"list"`
+
+	// A GUID that's used to identify the operation.
+	OperationId *string `locationName:"operationId" type:"string"`
+
+	// Information about the specified request.
+	Request *SetupRequest `locationName:"request" type:"structure"`
+
+	// The target resource name for the request.
+	Resource *SetupHistoryResource `locationName:"resource" type:"structure"`
+
+	// The status of the request.
+	Status *string `locationName:"status" type:"string" enum:"SetupStatus"`
+}
+
+// String returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupHistory) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupHistory) GoString() string {
+	return s.String()
+}
+
+// SetExecutionDetails sets the ExecutionDetails field's value.
+func (s *SetupHistory) SetExecutionDetails(v []*SetupExecutionDetails) *SetupHistory {
+	s.ExecutionDetails = v
+	return s
+}
+
+// SetOperationId sets the OperationId field's value.
+func (s *SetupHistory) SetOperationId(v string) *SetupHistory {
+	s.OperationId = &v
+	return s
+}
+
+// SetRequest sets the Request field's value.
+func (s *SetupHistory) SetRequest(v *SetupRequest) *SetupHistory {
+	s.Request = v
+	return s
+}
+
+// SetResource sets the Resource field's value.
+func (s *SetupHistory) SetResource(v *SetupHistoryResource) *SetupHistory {
+	s.Resource = v
+	return s
+}
+
+// SetStatus sets the Status field's value.
+func (s *SetupHistory) SetStatus(v string) *SetupHistory {
+	s.Status = &v
+	return s
+}
+
+// The Lightsail resource that SetupHistory was ran on.
+type SetupHistoryResource struct {
+	_ struct{} `type:"structure"`
+
+	// The Amazon Resource Name (ARN) of the Lightsail resource.
+	Arn *string `locationName:"arn" type:"string"`
+
+	// The timestamp for when the resource was created.
+	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp"`
+
+	// Describes the resource location.
+	Location *ResourceLocation `locationName:"location" type:"structure"`
+
+	// The name of the Lightsail resource.
+	Name *string `locationName:"name" type:"string"`
+
+	// The Lightsail resource type. For example, Instance.
+	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
+}
+
+// String returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupHistoryResource) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupHistoryResource) GoString() string {
+	return s.String()
+}
+
+// SetArn sets the Arn field's value.
+func (s *SetupHistoryResource) SetArn(v string) *SetupHistoryResource {
+	s.Arn = &v
+	return s
+}
+
+// SetCreatedAt sets the CreatedAt field's value.
+func (s *SetupHistoryResource) SetCreatedAt(v time.Time) *SetupHistoryResource {
+	s.CreatedAt = &v
+	return s
+}
+
+// SetLocation sets the Location field's value.
+func (s *SetupHistoryResource) SetLocation(v *ResourceLocation) *SetupHistoryResource {
+	s.Location = v
+	return s
+}
+
+// SetName sets the Name field's value.
+func (s *SetupHistoryResource) SetName(v string) *SetupHistoryResource {
+	s.Name = &v
+	return s
+}
+
+// SetResourceType sets the ResourceType field's value.
+func (s *SetupHistoryResource) SetResourceType(v string) *SetupHistoryResource {
+	s.ResourceType = &v
+	return s
+}
+
+type SetupInstanceHttpsInput struct {
+	_ struct{} `type:"structure"`
+
+	// The certificate authority that issues the SSL/TLS certificate.
+	//
+	// CertificateProvider is a required field
+	CertificateProvider *string `locationName:"certificateProvider" type:"string" required:"true" enum:"CertificateProvider"`
+
+	// The name of the domain and subdomains that were specified for the SSL/TLS
+	// certificate.
+	//
+	// DomainNames is a required field
+	DomainNames []*string `locationName:"domainNames" min:"1" type:"list" required:"true"`
+
+	// The contact method for SSL/TLS certificate renewal alerts. You can enter
+	// one email address.
+	//
+	// EmailAddress is a sensitive parameter and its value will be
+	// replaced with "sensitive" in string returned by SetupInstanceHttpsInput's
+	// String and GoString methods.
+	//
+	// EmailAddress is a required field
+	EmailAddress *string `locationName:"emailAddress" min:"6" type:"string" required:"true" sensitive:"true"`
+
+	// The name of the Lightsail instance.
+	//
+	// InstanceName is a required field
+	InstanceName *string `locationName:"instanceName" type:"string" required:"true"`
+}
+
+// String returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupInstanceHttpsInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupInstanceHttpsInput) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *SetupInstanceHttpsInput) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "SetupInstanceHttpsInput"}
+	if s.CertificateProvider == nil {
+		invalidParams.Add(request.NewErrParamRequired("CertificateProvider"))
+	}
+	if s.DomainNames == nil {
+		invalidParams.Add(request.NewErrParamRequired("DomainNames"))
+	}
+	if s.DomainNames != nil && len(s.DomainNames) < 1 {
+		invalidParams.Add(request.NewErrParamMinLen("DomainNames", 1))
+	}
+	if s.EmailAddress == nil {
+		invalidParams.Add(request.NewErrParamRequired("EmailAddress"))
+	}
+	if s.EmailAddress != nil && len(*s.EmailAddress) < 6 {
+		invalidParams.Add(request.NewErrParamMinLen("EmailAddress", 6))
+	}
+	if s.InstanceName == nil {
+		invalidParams.Add(request.NewErrParamRequired("InstanceName"))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetCertificateProvider sets the CertificateProvider field's value.
+func (s *SetupInstanceHttpsInput) SetCertificateProvider(v string) *SetupInstanceHttpsInput {
+	s.CertificateProvider = &v
+	return s
+}
+
+// SetDomainNames sets the DomainNames field's value.
+func (s *SetupInstanceHttpsInput) SetDomainNames(v []*string) *SetupInstanceHttpsInput {
+	s.DomainNames = v
+	return s
+}
+
+// SetEmailAddress sets the EmailAddress field's value.
+func (s *SetupInstanceHttpsInput) SetEmailAddress(v string) *SetupInstanceHttpsInput {
+	s.EmailAddress = &v
+	return s
+}
+
+// SetInstanceName sets the InstanceName field's value.
+func (s *SetupInstanceHttpsInput) SetInstanceName(v string) *SetupInstanceHttpsInput {
+	s.InstanceName = &v
+	return s
+}
+
+type SetupInstanceHttpsOutput struct {
+	_ struct{} `type:"structure"`
+
+	// The available API operations for SetupInstanceHttps.
+	Operations []*Operation `locationName:"operations" type:"list"`
+}
+
+// String returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupInstanceHttpsOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupInstanceHttpsOutput) GoString() string {
+	return s.String()
+}
+
+// SetOperations sets the Operations field's value.
+func (s *SetupInstanceHttpsOutput) SetOperations(v []*Operation) *SetupInstanceHttpsOutput {
+	s.Operations = v
+	return s
+}
+
+// Returns information that was submitted during the SetupInstanceHttps request.
+// Email information is redacted for privacy.
+type SetupRequest struct {
+	_ struct{} `type:"structure"`
+
+	// The Certificate Authority (CA) that issues the SSL/TLS certificate.
+	CertificateProvider *string `locationName:"certificateProvider" type:"string" enum:"CertificateProvider"`
+
+	// The name of the domain and subdomains that the SSL/TLS certificate secures.
+	DomainNames []*string `locationName:"domainNames" min:"1" type:"list"`
+
+	// The name of the Lightsail instance.
+	InstanceName *string `locationName:"instanceName" type:"string"`
+}
+
+// String returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupRequest) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation.
+//
+// API parameter values that are decorated as "sensitive" in the API will not
+// be included in the string output. The member name will be present, but the
+// value will be replaced with "sensitive".
+func (s SetupRequest) GoString() string {
+	return s.String()
+}
+
+// SetCertificateProvider sets the CertificateProvider field's value.
+func (s *SetupRequest) SetCertificateProvider(v string) *SetupRequest {
+	s.CertificateProvider = &v
+	return s
+}
+
+// SetDomainNames sets the DomainNames field's value.
+func (s *SetupRequest) SetDomainNames(v []*string) *SetupRequest {
+	s.DomainNames = v
+	return s
+}
+
+// SetInstanceName sets the InstanceName field's value.
+func (s *SetupRequest) SetInstanceName(v string) *SetupRequest {
+	s.InstanceName = &v
+	return s
+}
+
 type StartGUISessionInput struct {
 	_ struct{} `type:"structure"`
 
@@ -42696,13 +43405,13 @@ func (s *StartRelationalDatabaseOutput) SetOperations(v []*Operation) *StartRela
 type StaticIp struct {
 	_ struct{} `type:"structure"`
 
-	// The Amazon Resource Name (ARN) of the static IP (e.g., arn:aws:lightsail:us-east-2:123456789101:StaticIp/9cbb4a9e-f8e3-4dfe-b57e-12345EXAMPLE).
+	// The Amazon Resource Name (ARN) of the static IP (arn:aws:lightsail:us-east-2:123456789101:StaticIp/9cbb4a9e-f8e3-4dfe-b57e-12345EXAMPLE).
 	Arn *string `locationName:"arn" type:"string"`
 
-	// The instance where the static IP is attached (e.g., Amazon_Linux-1GB-Ohio-1).
+	// The instance where the static IP is attached (Amazon_Linux-1GB-Ohio-1).
 	AttachedTo *string `locationName:"attachedTo" type:"string"`
 
-	// The timestamp when the static IP was created (e.g., 1479735304.222).
+	// The timestamp when the static IP was created (1479735304.222).
 	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp"`
 
 	// The static IP address.
@@ -42714,7 +43423,7 @@ type StaticIp struct {
 	// The region and Availability Zone where the static IP was created.
 	Location *ResourceLocation `locationName:"location" type:"structure"`
 
-	// The name of the static IP (e.g., StaticIP-Ohio-EXAMPLE).
+	// The name of the static IP (StaticIP-Ohio-EXAMPLE).
 	Name *string `locationName:"name" type:"string"`
 
 	// The resource type (usually StaticIp).
@@ -44518,7 +45227,7 @@ type UpdateLoadBalancerAttributeInput struct {
 	// AttributeValue is a required field
 	AttributeValue *string `locationName:"attributeValue" min:"1" type:"string" required:"true"`
 
-	// The name of the load balancer that you want to modify (e.g., my-load-balancer.
+	// The name of the load balancer that you want to modify (my-load-balancer.
 	//
 	// LoadBalancerName is a required field
 	LoadBalancerName *string `locationName:"loadBalancerName" type:"string" required:"true"`
@@ -45172,6 +45881,18 @@ func CertificateDomainValidationStatus_Values() []string {
 	}
 }
 
+const (
+	// CertificateProviderLetsEncrypt is a CertificateProvider enum value
+	CertificateProviderLetsEncrypt = "LetsEncrypt"
+)
+
+// CertificateProvider_Values returns all elements of the CertificateProvider enum
+func CertificateProvider_Values() []string {
+	return []string{
+		CertificateProviderLetsEncrypt,
+	}
+}
+
 const (
 	// CertificateStatusPendingValidation is a CertificateStatus enum value
 	CertificateStatusPendingValidation = "PENDING_VALIDATION"
@@ -46830,6 +47551,9 @@ const (
 
 	// OperationTypeStopGuisession is a OperationType enum value
 	OperationTypeStopGuisession = "StopGUISession"
+
+	// OperationTypeSetupInstanceHttps is a OperationType enum value
+	OperationTypeSetupInstanceHttps = "SetupInstanceHttps"
 )
 
 // OperationType_Values returns all elements of the OperationType enum
@@ -46917,6 +47641,7 @@ func OperationType_Values() []string {
 		OperationTypeUpdateInstanceMetadataOptions,
 		OperationTypeStartGuisession,
 		OperationTypeStopGuisession,
+		OperationTypeSetupInstanceHttps,
 	}
 }
 
@@ -47324,6 +48049,26 @@ func ResourceType_Values() []string {
 	}
 }
 
+const (
+	// SetupStatusSucceeded is a SetupStatus enum value
+	SetupStatusSucceeded = "succeeded"
+
+	// SetupStatusFailed is a SetupStatus enum value
+	SetupStatusFailed = "failed"
+
+	// SetupStatusInProgress is a SetupStatus enum value
+	SetupStatusInProgress = "inProgress"
+)
+
+// SetupStatus_Values returns all elements of the SetupStatus enum
+func SetupStatus_Values() []string {
+	return []string{
+		SetupStatusSucceeded,
+		SetupStatusFailed,
+		SetupStatusInProgress,
+	}
+}
+
 const (
 	// StatusStartExpired is a Status enum value
 	StatusStartExpired = "startExpired"
diff --git a/vendor/github.com/bboreham/go-loser/.gitignore b/vendor/github.com/bboreham/go-loser/.gitignore
new file mode 100644
index 00000000000..3b735ec4a8c
--- /dev/null
+++ b/vendor/github.com/bboreham/go-loser/.gitignore
@@ -0,0 +1,21 @@
+# If you prefer the allow list template instead of the deny list, see community template:
+# https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore
+#
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# Dependency directories (remove the comment below to include it)
+# vendor/
+
+# Go workspace file
+go.work
diff --git a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/LICENSE b/vendor/github.com/bboreham/go-loser/LICENSE
similarity index 99%
rename from vendor/github.com/matttproud/golang_protobuf_extensions/v2/LICENSE
rename to vendor/github.com/bboreham/go-loser/LICENSE
index 8dada3edaf5..261eeb9e9f8 100644
--- a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/LICENSE
+++ b/vendor/github.com/bboreham/go-loser/LICENSE
@@ -178,7 +178,7 @@
    APPENDIX: How to apply the Apache License to your work.
 
       To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "{}"
+      boilerplate notice, with the fields enclosed by brackets "[]"
       replaced with your own identifying information. (Don't include
       the brackets!)  The text should be enclosed in the appropriate
       comment syntax for the file format. We also recommend that a
@@ -186,7 +186,7 @@
       same "printed page" as the copyright notice for easier
       identification within third-party archives.
 
-   Copyright {yyyy} {name of copyright owner}
+   Copyright [yyyy] [name of copyright owner]
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
diff --git a/vendor/github.com/bboreham/go-loser/README.md b/vendor/github.com/bboreham/go-loser/README.md
new file mode 100644
index 00000000000..9e6cbc3cc59
--- /dev/null
+++ b/vendor/github.com/bboreham/go-loser/README.md
@@ -0,0 +1,8 @@
+# go-loser
+Loser Tree data structure, for fast k-way merge
+
+I will be speaking about this at [GopherCon](https://www.gophercon.com/agenda/session/1160355) on 27th Sept 2023.
+
+There are currently two versions of the code on two Git branches: [main](https://github.com/bboreham/go-loser/tree/main), which works for built-in types like `int` and `string`, and [any](https://github.com/bboreham/go-loser/tree/any) which works on any type but requires you to pass in a function pointer to do `less` comparisons.
+
+See https://en.wikipedia.org/wiki/K-way_merge_algorithm#Tournament_Tree for more details on the algorithm.
diff --git a/vendor/github.com/bboreham/go-loser/tree.go b/vendor/github.com/bboreham/go-loser/tree.go
new file mode 100644
index 00000000000..ba097abed24
--- /dev/null
+++ b/vendor/github.com/bboreham/go-loser/tree.go
@@ -0,0 +1,153 @@
+// Loser tree, from https://en.wikipedia.org/wiki/K-way_merge_algorithm#Tournament_Tree
+
+package loser
+
+import "golang.org/x/exp/constraints"
+
+type Value constraints.Ordered
+
+type Sequence[E Value] interface {
+	At() E      // Returns the current value.
+	Next() bool // Advances and returns true if there is a value at this new position.
+}
+
+func New[E Value, S Sequence[E]](sequences []S, maxVal E) *Tree[E, S] {
+	nSequences := len(sequences)
+	t := Tree[E, S]{
+		maxVal: maxVal,
+		nodes:  make([]node[E, S], nSequences*2),
+	}
+	for i, s := range sequences {
+		t.nodes[i+nSequences].items = s
+		t.moveNext(i + nSequences) // Must call Next on each item so that At() has a value.
+	}
+	if nSequences > 0 {
+		t.nodes[0].index = -1 // flag to be initialized on first call to Next().
+	}
+	return &t
+}
+
+// Call the close function on all sequences that are still open.
+func (t *Tree[E, S]) Close() {
+	for _, e := range t.nodes[len(t.nodes)/2 : len(t.nodes)] {
+		if e.index == -1 {
+			continue
+		}
+	}
+}
+
+// A loser tree is a binary tree laid out such that nodes N and N+1 have parent N/2.
+// We store M leaf nodes in positions M...2M-1, and M-1 internal nodes in positions 1..M-1.
+// Node 0 is a special node, containing the winner of the contest.
+type Tree[E Value, S Sequence[E]] struct {
+	maxVal E
+	nodes  []node[E, S]
+}
+
+type node[E Value, S Sequence[E]] struct {
+	index int // This is the loser for all nodes except the 0th, where it is the winner.
+	value E   // Value copied from the loser node, or winner for node 0.
+	items S   // Only populated for leaf nodes.
+}
+
+func (t *Tree[E, S]) moveNext(index int) bool {
+	n := &t.nodes[index]
+	if n.items.Next() {
+		n.value = n.items.At()
+		return true
+	}
+	n.value = t.maxVal
+	n.index = -1
+	return false
+}
+
+func (t *Tree[E, S]) Winner() S {
+	return t.nodes[t.nodes[0].index].items
+}
+
+func (t *Tree[E, S]) At() E {
+	return t.nodes[0].value
+}
+
+func (t *Tree[E, S]) Next() bool {
+	nodes := t.nodes
+	if len(nodes) == 0 {
+		return false
+	}
+	if nodes[0].index == -1 { // If tree has not been initialized yet, do that.
+		t.initialize()
+		return nodes[nodes[0].index].index != -1
+	}
+	if nodes[nodes[0].index].index == -1 { // already exhausted
+		return false
+	}
+	t.moveNext(nodes[0].index)
+	t.replayGames(nodes[0].index)
+	return nodes[nodes[0].index].index != -1
+}
+
+// Current winner has been advanced independently; fix up the loser tree.
+func (t *Tree[E, S]) Fix(closed bool) {
+	nodes := t.nodes
+	cur := &nodes[nodes[0].index]
+	if closed {
+		cur.value = t.maxVal
+		cur.index = -1
+	} else {
+		cur.value = cur.items.At()
+	}
+	t.replayGames(nodes[0].index)
+}
+
+func (t *Tree[E, S]) IsEmpty() bool {
+	nodes := t.nodes
+	if nodes[0].index == -1 { // If tree has not been initialized yet, do that.
+		t.initialize()
+	}
+	return nodes[nodes[0].index].index == -1
+}
+
+func (t *Tree[E, S]) initialize() {
+	winner := t.playGame(1)
+	t.nodes[0].index = winner
+	t.nodes[0].value = t.nodes[winner].value
+}
+
+// Find the winner at position pos; if it is a non-leaf node, store the loser.
+// pos must be >= 1 and < len(t.nodes)
+func (t *Tree[E, S]) playGame(pos int) int {
+	nodes := t.nodes
+	if pos >= len(nodes)/2 {
+		return pos
+	}
+	left := t.playGame(pos * 2)
+	right := t.playGame(pos*2 + 1)
+	var loser, winner int
+	if nodes[left].value < nodes[right].value {
+		loser, winner = right, left
+	} else {
+		loser, winner = left, right
+	}
+	nodes[pos].index = loser
+	nodes[pos].value = nodes[loser].value
+	return winner
+}
+
+// Starting at pos, which is a winner, re-consider all values up to the root.
+func (t *Tree[E, S]) replayGames(pos int) {
+	nodes := t.nodes
+	winningValue := nodes[pos].value
+	for n := parent(pos); n != 0; n = parent(n) {
+		node := &nodes[n]
+		if node.value < winningValue {
+			// Record pos as the loser here, and the old loser is the new winner.
+			node.index, pos = pos, node.index
+			node.value, winningValue = winningValue, node.value
+		}
+	}
+	// pos is now the winner; store it in node 0.
+	nodes[0].index = pos
+	nodes[0].value = winningValue
+}
+
+func parent(i int) int { return i >> 1 }
diff --git a/vendor/github.com/cilium/ebpf/.clang-format b/vendor/github.com/cilium/ebpf/.clang-format
new file mode 100644
index 00000000000..3f74dc02366
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/.clang-format
@@ -0,0 +1,19 @@
+---
+Language:        Cpp
+BasedOnStyle:    LLVM
+AlignAfterOpenBracket: DontAlign
+AlignConsecutiveAssignments: true
+AlignEscapedNewlines: DontAlign
+AlwaysBreakBeforeMultilineStrings: true
+AlwaysBreakTemplateDeclarations: false
+AllowAllParametersOfDeclarationOnNextLine: false
+AllowShortFunctionsOnASingleLine: false
+BreakBeforeBraces: Attach
+IndentWidth:     4
+KeepEmptyLinesAtTheStartOfBlocks: false
+TabWidth:        4
+UseTab:          ForContinuationAndIndentation
+ColumnLimit:     1000
+# Go compiler comments need to stay unindented.
+CommentPragmas: '^go:.*'
+...
diff --git a/vendor/github.com/cilium/ebpf/.gitignore b/vendor/github.com/cilium/ebpf/.gitignore
new file mode 100644
index 00000000000..b46162b8ec3
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/.gitignore
@@ -0,0 +1,14 @@
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+*.o
+!*_bpf*.o
+
+# Test binary, build with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
diff --git a/vendor/github.com/cilium/ebpf/.golangci.yaml b/vendor/github.com/cilium/ebpf/.golangci.yaml
new file mode 100644
index 00000000000..06743dfc91b
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/.golangci.yaml
@@ -0,0 +1,26 @@
+---
+issues:
+  exclude-rules:
+    # syscall param structs will have unused fields in Go code.
+    - path: syscall.*.go
+      linters:
+        - structcheck
+
+linters:
+  disable-all: true
+  enable:
+    - errcheck
+    - goimports
+    - gosimple
+    - govet
+    - ineffassign
+    - misspell
+    - staticcheck
+    - typecheck
+    - unused
+    - gofmt
+
+    # Could be enabled later:
+    # - gocyclo
+    # - maligned
+    # - gosec
diff --git a/vendor/github.com/cilium/ebpf/ARCHITECTURE.md b/vendor/github.com/cilium/ebpf/ARCHITECTURE.md
new file mode 100644
index 00000000000..26f555eb7a7
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/ARCHITECTURE.md
@@ -0,0 +1,92 @@
+Architecture of the library
+===
+
+```mermaid
+graph RL
+    Program --> ProgramSpec --> ELF
+    btf.Spec --> ELF
+    Map --> MapSpec --> ELF
+    Links --> Map & Program
+    ProgramSpec -.-> btf.Spec
+    MapSpec -.-> btf.Spec
+    subgraph Collection
+        Program & Map
+    end
+    subgraph CollectionSpec
+        ProgramSpec & MapSpec & btf.Spec
+    end
+```
+
+ELF
+---
+
+BPF is usually produced by using Clang to compile a subset of C. Clang outputs
+an ELF file which contains program byte code (aka BPF), but also metadata for
+maps used by the program. The metadata follows the conventions set by libbpf
+shipped with the kernel. Certain ELF sections have special meaning
+and contain structures defined by libbpf. Newer versions of clang emit
+additional metadata in [BPF Type Format](#BTF).
+
+The library aims to be compatible with libbpf so that moving from a C toolchain
+to a Go one creates little friction. To that end, the [ELF reader](elf_reader.go)
+is tested against the Linux selftests and avoids introducing custom behaviour
+if possible.
+
+The output of the ELF reader is a `CollectionSpec` which encodes
+all of the information contained in the ELF in a form that is easy to work with
+in Go. The returned `CollectionSpec` should be deterministic: reading the same ELF
+file on different systems must produce the same output.
+As a corollary, any changes that depend on the runtime environment like the
+current kernel version must happen when creating [Objects](#Objects).
+
+Specifications
+---
+
+`CollectionSpec` is a very simple container for `ProgramSpec`, `MapSpec` and
+`btf.Spec`. Avoid adding functionality to it if possible.
+
+`ProgramSpec` and `MapSpec` are blueprints for in-kernel
+objects and contain everything necessary to execute the relevant `bpf(2)`
+syscalls. They refer to `btf.Spec` for type information such as `Map` key and
+value types.
+
+The [asm](asm/) package provides an assembler that can be used to generate
+`ProgramSpec` on the fly.
+
+Objects
+---
+
+`Program` and `Map` are the result of loading specifications into the kernel.
+Features that depend on knowledge of the current system (e.g kernel version)
+are implemented at this point.
+
+Sometimes loading a spec will fail because the kernel is too old, or a feature is not
+enabled. There are multiple ways the library deals with that:
+
+* Fallback: older kernels don't allow naming programs and maps. The library
+  automatically detects support for names, and omits them during load if
+  necessary. This works since name is primarily a debug aid.
+
+* Sentinel error: sometimes it's possible to detect that a feature isn't available.
+  In that case the library will return an error wrapping `ErrNotSupported`.
+  This is also useful to skip tests that can't run on the current kernel.
+
+Once program and map objects are loaded they expose the kernel's low-level API,
+e.g. `NextKey`. Often this API is awkward to use in Go, so there are safer
+wrappers on top of the low-level API, like `MapIterator`. The low-level API is
+useful when our higher-level API doesn't support a particular use case.
+
+Links
+---
+
+Programs can be attached to many different points in the kernel and newer BPF hooks
+tend to use bpf_link to do so. Older hooks unfortunately use a combination of
+syscalls, netlink messages, etc. Adding support for a new link type should not
+pull in large dependencies like netlink, so XDP programs or tracepoints are
+out of scope.
+
+Each bpf_link_type has one corresponding Go type, e.g. `link.tracing` corresponds
+to BPF_LINK_TRACING. In general, these types should be unexported as long as they
+don't export methods outside of the Link interface. Each Go type may have multiple
+exported constructors. For example `AttachTracing` and `AttachLSM` create a
+tracing link, but are distinct functions since they may require different arguments.
diff --git a/vendor/github.com/cilium/ebpf/CODE_OF_CONDUCT.md b/vendor/github.com/cilium/ebpf/CODE_OF_CONDUCT.md
new file mode 100644
index 00000000000..8e42838c5ac
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/CODE_OF_CONDUCT.md
@@ -0,0 +1,46 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
+
+## Our Standards
+
+Examples of behavior that contributes to creating a positive environment include:
+
+* Using welcoming and inclusive language
+* Being respectful of differing viewpoints and experiences
+* Gracefully accepting constructive criticism
+* Focusing on what is best for the community
+* Showing empathy towards other community members
+
+Examples of unacceptable behavior by participants include:
+
+* The use of sexualized language or imagery and unwelcome sexual attention or advances
+* Trolling, insulting/derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or electronic address, without explicit permission
+* Other conduct which could reasonably be considered inappropriate in a professional setting
+
+## Our Responsibilities
+
+Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
+
+Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.
+
+## Scope
+
+This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at nathanjsweet at gmail dot com or i at lmb dot io. The project team will review and investigate all complaints, and will respond in a way that it deems appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.
+
+Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, available at [http://contributor-covenant.org/version/1/4][version]
+
+[homepage]: http://contributor-covenant.org
+[version]: http://contributor-covenant.org/version/1/4/
diff --git a/vendor/github.com/cilium/ebpf/CONTRIBUTING.md b/vendor/github.com/cilium/ebpf/CONTRIBUTING.md
new file mode 100644
index 00000000000..bf57da93953
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/CONTRIBUTING.md
@@ -0,0 +1,48 @@
+# How to contribute
+
+Development is on [GitHub](https://github.com/cilium/ebpf) and contributions in
+the form of pull requests and issues reporting bugs or suggesting new features
+are welcome. Please take a look at [the architecture](ARCHITECTURE.md) to get
+a better understanding for the high-level goals.
+
+## Adding a new feature
+
+1. [Join](https://ebpf.io/slack) the
+[#ebpf-go](https://cilium.slack.com/messages/ebpf-go) channel to discuss your requirements and how the feature can be implemented. The most important part is figuring out how much new exported API is necessary. **The less new API is required the easier it will be to land the feature.**
+2. (*optional*) Create a draft PR if you want to discuss the implementation or have hit a problem. It's fine if this doesn't compile or contains debug statements.
+3. Create a PR that is ready to merge. This must pass CI and have tests.
+
+### API stability
+
+The library doesn't guarantee the stability of its API at the moment.
+
+1. If possible avoid breakage by introducing new API and deprecating the old one
+   at the same time. If an API was deprecated in v0.x it can be removed in v0.x+1.
+2. Breaking API in a way that causes compilation failures is acceptable but must
+   have good reasons.
+3. Changing the semantics of the API without causing compilation failures is
+   heavily discouraged.
+
+## Running the tests
+
+Many of the tests require privileges to set resource limits and load eBPF code.
+The easiest way to obtain these is to run the tests with `sudo`.
+
+To test the current package with your local kernel you can simply run:
+```
+go test -exec sudo  ./...
+```
+
+To test the current package with a different kernel version you can use the [run-tests.sh](run-tests.sh) script.
+It requires [virtme](https://github.com/amluto/virtme) and qemu to be installed.
+
+Examples:
+
+```bash
+# Run all tests on a 5.4 kernel
+./run-tests.sh 5.4
+
+# Run a subset of tests:
+./run-tests.sh 5.4 ./link
+```
+
diff --git a/vendor/github.com/cilium/ebpf/LICENSE b/vendor/github.com/cilium/ebpf/LICENSE
new file mode 100644
index 00000000000..c637ae99c26
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/LICENSE
@@ -0,0 +1,23 @@
+MIT License
+
+Copyright (c) 2017 Nathan Sweet
+Copyright (c) 2018, 2019 Cloudflare
+Copyright (c) 2019 Authors of Cilium
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/vendor/github.com/cilium/ebpf/MAINTAINERS.md b/vendor/github.com/cilium/ebpf/MAINTAINERS.md
new file mode 100644
index 00000000000..a56a03e3947
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/MAINTAINERS.md
@@ -0,0 +1,3 @@
+# Maintainers
+
+Maintainers can be found in the [Cilium Maintainers file](https://github.com/cilium/community/blob/main/roles/Maintainers.md)
diff --git a/vendor/github.com/cilium/ebpf/Makefile b/vendor/github.com/cilium/ebpf/Makefile
new file mode 100644
index 00000000000..abcd6c1a47c
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/Makefile
@@ -0,0 +1,115 @@
+# The development version of clang is distributed as the 'clang' binary,
+# while stable/released versions have a version number attached.
+# Pin the default clang to a stable version.
+CLANG ?= clang-14
+STRIP ?= llvm-strip-14
+OBJCOPY ?= llvm-objcopy-14
+CFLAGS := -O2 -g -Wall -Werror $(CFLAGS)
+
+CI_KERNEL_URL ?= https://github.com/cilium/ci-kernels/raw/master/
+
+# Obtain an absolute path to the directory of the Makefile.
+# Assume the Makefile is in the root of the repository.
+REPODIR := $(shell dirname $(realpath $(firstword $(MAKEFILE_LIST))))
+UIDGID := $(shell stat -c '%u:%g' ${REPODIR})
+
+# Prefer podman if installed, otherwise use docker.
+# Note: Setting the var at runtime will always override.
+CONTAINER_ENGINE ?= $(if $(shell command -v podman), podman, docker)
+CONTAINER_RUN_ARGS ?= $(if $(filter ${CONTAINER_ENGINE}, podman), --log-driver=none, --user "${UIDGID}")
+
+IMAGE := $(shell cat ${REPODIR}/testdata/docker/IMAGE)
+VERSION := $(shell cat ${REPODIR}/testdata/docker/VERSION)
+
+
+# clang <8 doesn't tag relocs properly (STT_NOTYPE)
+# clang 9 is the first version emitting BTF
+TARGETS := \
+	testdata/loader-clang-7 \
+	testdata/loader-clang-9 \
+	testdata/loader-$(CLANG) \
+	testdata/manyprogs \
+	testdata/btf_map_init \
+	testdata/invalid_map \
+	testdata/raw_tracepoint \
+	testdata/invalid_map_static \
+	testdata/invalid_btf_map_init \
+	testdata/strings \
+	testdata/freplace \
+	testdata/iproute2_map_compat \
+	testdata/map_spin_lock \
+	testdata/subprog_reloc \
+	testdata/fwd_decl \
+	testdata/kconfig \
+	testdata/kconfig_config \
+	testdata/kfunc \
+	testdata/invalid-kfunc \
+	testdata/kfunc-kmod \
+	btf/testdata/relocs \
+	btf/testdata/relocs_read \
+	btf/testdata/relocs_read_tgt \
+	cmd/bpf2go/testdata/minimal
+
+.PHONY: all clean container-all container-shell generate
+
+.DEFAULT_TARGET = container-all
+
+# Build all ELF binaries using a containerized LLVM toolchain.
+container-all:
+	+${CONTAINER_ENGINE} run --rm -ti ${CONTAINER_RUN_ARGS} \
+		-v "${REPODIR}":/ebpf -w /ebpf --env MAKEFLAGS \
+		--env CFLAGS="-fdebug-prefix-map=/ebpf=." \
+		--env HOME="/tmp" \
+		"${IMAGE}:${VERSION}" \
+		make all
+
+# (debug) Drop the user into a shell inside the container as root.
+container-shell:
+	${CONTAINER_ENGINE} run --rm -ti \
+		-v "${REPODIR}":/ebpf -w /ebpf \
+		"${IMAGE}:${VERSION}"
+
+clean:
+	-$(RM) testdata/*.elf
+	-$(RM) btf/testdata/*.elf
+
+format:
+	find . -type f -name "*.c" | xargs clang-format -i
+
+all: format $(addsuffix -el.elf,$(TARGETS)) $(addsuffix -eb.elf,$(TARGETS)) generate
+	ln -srf testdata/loader-$(CLANG)-el.elf testdata/loader-el.elf
+	ln -srf testdata/loader-$(CLANG)-eb.elf testdata/loader-eb.elf
+
+# $BPF_CLANG is used in go:generate invocations.
+generate: export BPF_CLANG := $(CLANG)
+generate: export BPF_CFLAGS := $(CFLAGS)
+generate:
+	go generate ./...
+
+testdata/loader-%-el.elf: testdata/loader.c
+	$* $(CFLAGS) -target bpfel -c $< -o $@
+	$(STRIP) -g $@
+
+testdata/loader-%-eb.elf: testdata/loader.c
+	$* $(CFLAGS) -target bpfeb -c $< -o $@
+	$(STRIP) -g $@
+
+%-el.elf: %.c
+	$(CLANG) $(CFLAGS) -target bpfel -c $< -o $@
+	$(STRIP) -g $@
+
+%-eb.elf : %.c
+	$(CLANG) $(CFLAGS) -target bpfeb -c $< -o $@
+	$(STRIP) -g $@
+
+.PHONY: generate-btf
+generate-btf: KERNEL_VERSION?=5.19
+generate-btf:
+	$(eval TMP := $(shell mktemp -d))
+	curl -fL "$(CI_KERNEL_URL)/linux-$(KERNEL_VERSION).bz" -o "$(TMP)/bzImage"
+	/lib/modules/$(uname -r)/build/scripts/extract-vmlinux "$(TMP)/bzImage" > "$(TMP)/vmlinux"
+	$(OBJCOPY) --dump-section .BTF=/dev/stdout "$(TMP)/vmlinux" /dev/null | gzip > "btf/testdata/vmlinux.btf.gz"
+	curl -fL "$(CI_KERNEL_URL)/linux-$(KERNEL_VERSION)-selftests-bpf.tgz" -o "$(TMP)/selftests.tgz"
+	tar -xf "$(TMP)/selftests.tgz" --to-stdout tools/testing/selftests/bpf/bpf_testmod/bpf_testmod.ko | \
+		$(OBJCOPY) --dump-section .BTF="btf/testdata/btf_testmod.btf" - /dev/null
+	$(RM) -r "$(TMP)"
diff --git a/vendor/github.com/cilium/ebpf/README.md b/vendor/github.com/cilium/ebpf/README.md
new file mode 100644
index 00000000000..eff08d8df69
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/README.md
@@ -0,0 +1,82 @@
+# eBPF
+
+[![PkgGoDev](https://pkg.go.dev/badge/github.com/cilium/ebpf)](https://pkg.go.dev/github.com/cilium/ebpf)
+
+![HoneyGopher](.github/images/cilium-ebpf.png)
+
+ebpf-go is a pure Go library that provides utilities for loading, compiling, and
+debugging eBPF programs. It has minimal external dependencies and is intended to
+be used in long running processes.
+
+See [ebpf.io](https://ebpf.io) for complementary projects from the wider eBPF
+ecosystem.
+
+## Getting Started
+
+A small collection of Go and eBPF programs that serve as examples for building
+your own tools can be found under [examples/](examples/).
+
+[Contributions](CONTRIBUTING.md) are highly encouraged, as they highlight certain use cases of
+eBPF and the library, and help shape the future of the project.
+
+## Getting Help
+
+The community actively monitors our [GitHub Discussions](https://github.com/cilium/ebpf/discussions) page.
+Please search for existing threads before starting a new one. Refrain from
+opening issues on the bug tracker if you're just starting out or if you're not
+sure if something is a bug in the library code.
+
+Alternatively, [join](https://ebpf.io/slack) the
+[#ebpf-go](https://cilium.slack.com/messages/ebpf-go) channel on Slack if you
+have other questions regarding the project. Note that this channel is ephemeral
+and has its history erased past a certain point, which is less helpful for
+others running into the same problem later.
+
+## Packages
+
+This library includes the following packages:
+
+* [asm](https://pkg.go.dev/github.com/cilium/ebpf/asm) contains a basic
+  assembler, allowing you to write eBPF assembly instructions directly
+  within your Go code. (You don't need to use this if you prefer to write your eBPF program in C.)
+* [cmd/bpf2go](https://pkg.go.dev/github.com/cilium/ebpf/cmd/bpf2go) allows
+  compiling and embedding eBPF programs written in C within Go code. As well as
+  compiling the C code, it auto-generates Go code for loading and manipulating
+  the eBPF program and map objects.
+* [link](https://pkg.go.dev/github.com/cilium/ebpf/link) allows attaching eBPF
+  to various hooks
+* [perf](https://pkg.go.dev/github.com/cilium/ebpf/perf) allows reading from a
+  `PERF_EVENT_ARRAY`
+* [ringbuf](https://pkg.go.dev/github.com/cilium/ebpf/ringbuf) allows reading from a
+  `BPF_MAP_TYPE_RINGBUF` map
+* [features](https://pkg.go.dev/github.com/cilium/ebpf/features) implements the equivalent
+  of `bpftool feature probe` for discovering BPF-related kernel features using native Go.
+* [rlimit](https://pkg.go.dev/github.com/cilium/ebpf/rlimit) provides a convenient API to lift
+  the `RLIMIT_MEMLOCK` constraint on kernels before 5.11.
+* [btf](https://pkg.go.dev/github.com/cilium/ebpf/btf) allows reading the BPF Type Format.
+
+## Requirements
+
+* A version of Go that is [supported by
+  upstream](https://golang.org/doc/devel/release.html#policy)
+* Linux >= 4.9. CI is run against kernel.org LTS releases. 4.4 should work but is
+  not tested against.
+
+## Regenerating Testdata
+
+Run `make` in the root of this repository to rebuild testdata in all
+subpackages. This requires Docker, as it relies on a standardized build
+environment to keep the build output stable.
+
+It is possible to regenerate data using Podman by overriding the `CONTAINER_*`
+variables: `CONTAINER_ENGINE=podman CONTAINER_RUN_ARGS= make`.
+
+The toolchain image build files are kept in [testdata/docker/](testdata/docker/).
+
+## License
+
+MIT
+
+### eBPF Gopher
+
+The eBPF honeygopher is based on the Go gopher designed by Renee French.
diff --git a/vendor/github.com/cilium/ebpf/asm/alu.go b/vendor/github.com/cilium/ebpf/asm/alu.go
new file mode 100644
index 00000000000..3f60245f2b6
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/alu.go
@@ -0,0 +1,149 @@
+package asm
+
+//go:generate stringer -output alu_string.go -type=Source,Endianness,ALUOp
+
+// Source of ALU / ALU64 / Branch operations
+//
+//	msb      lsb
+//	+----+-+---+
+//	|op  |S|cls|
+//	+----+-+---+
+type Source uint8
+
+const sourceMask OpCode = 0x08
+
+// Source bitmask
+const (
+	// InvalidSource is returned by getters when invoked
+	// on non ALU / branch OpCodes.
+	InvalidSource Source = 0xff
+	// ImmSource src is from constant
+	ImmSource Source = 0x00
+	// RegSource src is from register
+	RegSource Source = 0x08
+)
+
+// The Endianness of a byte swap instruction.
+type Endianness uint8
+
+const endianMask = sourceMask
+
+// Endian flags
+const (
+	InvalidEndian Endianness = 0xff
+	// Convert to little endian
+	LE Endianness = 0x00
+	// Convert to big endian
+	BE Endianness = 0x08
+)
+
+// ALUOp are ALU / ALU64 operations
+//
+//	msb      lsb
+//	+----+-+---+
+//	|OP  |s|cls|
+//	+----+-+---+
+type ALUOp uint8
+
+const aluMask OpCode = 0xf0
+
+const (
+	// InvalidALUOp is returned by getters when invoked
+	// on non ALU OpCodes
+	InvalidALUOp ALUOp = 0xff
+	// Add - addition
+	Add ALUOp = 0x00
+	// Sub - subtraction
+	Sub ALUOp = 0x10
+	// Mul - multiplication
+	Mul ALUOp = 0x20
+	// Div - division
+	Div ALUOp = 0x30
+	// Or - bitwise or
+	Or ALUOp = 0x40
+	// And - bitwise and
+	And ALUOp = 0x50
+	// LSh - bitwise shift left
+	LSh ALUOp = 0x60
+	// RSh - bitwise shift right
+	RSh ALUOp = 0x70
+	// Neg - sign/unsign signing bit
+	Neg ALUOp = 0x80
+	// Mod - modulo
+	Mod ALUOp = 0x90
+	// Xor - bitwise xor
+	Xor ALUOp = 0xa0
+	// Mov - move value from one place to another
+	Mov ALUOp = 0xb0
+	// ArSh - arithmatic shift
+	ArSh ALUOp = 0xc0
+	// Swap - endian conversions
+	Swap ALUOp = 0xd0
+)
+
+// HostTo converts from host to another endianness.
+func HostTo(endian Endianness, dst Register, size Size) Instruction {
+	var imm int64
+	switch size {
+	case Half:
+		imm = 16
+	case Word:
+		imm = 32
+	case DWord:
+		imm = 64
+	default:
+		return Instruction{OpCode: InvalidOpCode}
+	}
+
+	return Instruction{
+		OpCode:   OpCode(ALUClass).SetALUOp(Swap).SetSource(Source(endian)),
+		Dst:      dst,
+		Constant: imm,
+	}
+}
+
+// Op returns the OpCode for an ALU operation with a given source.
+func (op ALUOp) Op(source Source) OpCode {
+	return OpCode(ALU64Class).SetALUOp(op).SetSource(source)
+}
+
+// Reg emits `dst (op) src`.
+func (op ALUOp) Reg(dst, src Register) Instruction {
+	return Instruction{
+		OpCode: op.Op(RegSource),
+		Dst:    dst,
+		Src:    src,
+	}
+}
+
+// Imm emits `dst (op) value`.
+func (op ALUOp) Imm(dst Register, value int32) Instruction {
+	return Instruction{
+		OpCode:   op.Op(ImmSource),
+		Dst:      dst,
+		Constant: int64(value),
+	}
+}
+
+// Op32 returns the OpCode for a 32-bit ALU operation with a given source.
+func (op ALUOp) Op32(source Source) OpCode {
+	return OpCode(ALUClass).SetALUOp(op).SetSource(source)
+}
+
+// Reg32 emits `dst (op) src`, zeroing the upper 32 bit of dst.
+func (op ALUOp) Reg32(dst, src Register) Instruction {
+	return Instruction{
+		OpCode: op.Op32(RegSource),
+		Dst:    dst,
+		Src:    src,
+	}
+}
+
+// Imm32 emits `dst (op) value`, zeroing the upper 32 bit of dst.
+func (op ALUOp) Imm32(dst Register, value int32) Instruction {
+	return Instruction{
+		OpCode:   op.Op32(ImmSource),
+		Dst:      dst,
+		Constant: int64(value),
+	}
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/alu_string.go b/vendor/github.com/cilium/ebpf/asm/alu_string.go
new file mode 100644
index 00000000000..72d3fe6292e
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/alu_string.go
@@ -0,0 +1,107 @@
+// Code generated by "stringer -output alu_string.go -type=Source,Endianness,ALUOp"; DO NOT EDIT.
+
+package asm
+
+import "strconv"
+
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[InvalidSource-255]
+	_ = x[ImmSource-0]
+	_ = x[RegSource-8]
+}
+
+const (
+	_Source_name_0 = "ImmSource"
+	_Source_name_1 = "RegSource"
+	_Source_name_2 = "InvalidSource"
+)
+
+func (i Source) String() string {
+	switch {
+	case i == 0:
+		return _Source_name_0
+	case i == 8:
+		return _Source_name_1
+	case i == 255:
+		return _Source_name_2
+	default:
+		return "Source(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+}
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[InvalidEndian-255]
+	_ = x[LE-0]
+	_ = x[BE-8]
+}
+
+const (
+	_Endianness_name_0 = "LE"
+	_Endianness_name_1 = "BE"
+	_Endianness_name_2 = "InvalidEndian"
+)
+
+func (i Endianness) String() string {
+	switch {
+	case i == 0:
+		return _Endianness_name_0
+	case i == 8:
+		return _Endianness_name_1
+	case i == 255:
+		return _Endianness_name_2
+	default:
+		return "Endianness(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+}
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[InvalidALUOp-255]
+	_ = x[Add-0]
+	_ = x[Sub-16]
+	_ = x[Mul-32]
+	_ = x[Div-48]
+	_ = x[Or-64]
+	_ = x[And-80]
+	_ = x[LSh-96]
+	_ = x[RSh-112]
+	_ = x[Neg-128]
+	_ = x[Mod-144]
+	_ = x[Xor-160]
+	_ = x[Mov-176]
+	_ = x[ArSh-192]
+	_ = x[Swap-208]
+}
+
+const _ALUOp_name = "AddSubMulDivOrAndLShRShNegModXorMovArShSwapInvalidALUOp"
+
+var _ALUOp_map = map[ALUOp]string{
+	0:   _ALUOp_name[0:3],
+	16:  _ALUOp_name[3:6],
+	32:  _ALUOp_name[6:9],
+	48:  _ALUOp_name[9:12],
+	64:  _ALUOp_name[12:14],
+	80:  _ALUOp_name[14:17],
+	96:  _ALUOp_name[17:20],
+	112: _ALUOp_name[20:23],
+	128: _ALUOp_name[23:26],
+	144: _ALUOp_name[26:29],
+	160: _ALUOp_name[29:32],
+	176: _ALUOp_name[32:35],
+	192: _ALUOp_name[35:39],
+	208: _ALUOp_name[39:43],
+	255: _ALUOp_name[43:55],
+}
+
+func (i ALUOp) String() string {
+	if str, ok := _ALUOp_map[i]; ok {
+		return str
+	}
+	return "ALUOp(" + strconv.FormatInt(int64(i), 10) + ")"
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/doc.go b/vendor/github.com/cilium/ebpf/asm/doc.go
new file mode 100644
index 00000000000..7031bdc2768
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/doc.go
@@ -0,0 +1,2 @@
+// Package asm is an assembler for eBPF bytecode.
+package asm
diff --git a/vendor/github.com/cilium/ebpf/asm/func.go b/vendor/github.com/cilium/ebpf/asm/func.go
new file mode 100644
index 00000000000..18f6a75db58
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/func.go
@@ -0,0 +1,250 @@
+package asm
+
+//go:generate stringer -output func_string.go -type=BuiltinFunc
+
+// BuiltinFunc is a built-in eBPF function.
+type BuiltinFunc int32
+
+func (_ BuiltinFunc) Max() BuiltinFunc {
+	return maxBuiltinFunc - 1
+}
+
+// eBPF built-in functions
+//
+// You can regenerate this list using the following gawk script:
+//
+//	/FN\(.+\),/ {
+//	  match($1, /\(([a-z_0-9]+),/, r)
+//	  split(r[1], p, "_")
+//	  printf "Fn"
+//	  for (i in p) {
+//	    printf "%s%s", toupper(substr(p[i], 1, 1)), substr(p[i], 2)
+//	  }
+//	  print ""
+//	}
+//
+// The script expects include/uapi/linux/bpf.h as it's input.
+const (
+	FnUnspec BuiltinFunc = iota
+	FnMapLookupElem
+	FnMapUpdateElem
+	FnMapDeleteElem
+	FnProbeRead
+	FnKtimeGetNs
+	FnTracePrintk
+	FnGetPrandomU32
+	FnGetSmpProcessorId
+	FnSkbStoreBytes
+	FnL3CsumReplace
+	FnL4CsumReplace
+	FnTailCall
+	FnCloneRedirect
+	FnGetCurrentPidTgid
+	FnGetCurrentUidGid
+	FnGetCurrentComm
+	FnGetCgroupClassid
+	FnSkbVlanPush
+	FnSkbVlanPop
+	FnSkbGetTunnelKey
+	FnSkbSetTunnelKey
+	FnPerfEventRead
+	FnRedirect
+	FnGetRouteRealm
+	FnPerfEventOutput
+	FnSkbLoadBytes
+	FnGetStackid
+	FnCsumDiff
+	FnSkbGetTunnelOpt
+	FnSkbSetTunnelOpt
+	FnSkbChangeProto
+	FnSkbChangeType
+	FnSkbUnderCgroup
+	FnGetHashRecalc
+	FnGetCurrentTask
+	FnProbeWriteUser
+	FnCurrentTaskUnderCgroup
+	FnSkbChangeTail
+	FnSkbPullData
+	FnCsumUpdate
+	FnSetHashInvalid
+	FnGetNumaNodeId
+	FnSkbChangeHead
+	FnXdpAdjustHead
+	FnProbeReadStr
+	FnGetSocketCookie
+	FnGetSocketUid
+	FnSetHash
+	FnSetsockopt
+	FnSkbAdjustRoom
+	FnRedirectMap
+	FnSkRedirectMap
+	FnSockMapUpdate
+	FnXdpAdjustMeta
+	FnPerfEventReadValue
+	FnPerfProgReadValue
+	FnGetsockopt
+	FnOverrideReturn
+	FnSockOpsCbFlagsSet
+	FnMsgRedirectMap
+	FnMsgApplyBytes
+	FnMsgCorkBytes
+	FnMsgPullData
+	FnBind
+	FnXdpAdjustTail
+	FnSkbGetXfrmState
+	FnGetStack
+	FnSkbLoadBytesRelative
+	FnFibLookup
+	FnSockHashUpdate
+	FnMsgRedirectHash
+	FnSkRedirectHash
+	FnLwtPushEncap
+	FnLwtSeg6StoreBytes
+	FnLwtSeg6AdjustSrh
+	FnLwtSeg6Action
+	FnRcRepeat
+	FnRcKeydown
+	FnSkbCgroupId
+	FnGetCurrentCgroupId
+	FnGetLocalStorage
+	FnSkSelectReuseport
+	FnSkbAncestorCgroupId
+	FnSkLookupTcp
+	FnSkLookupUdp
+	FnSkRelease
+	FnMapPushElem
+	FnMapPopElem
+	FnMapPeekElem
+	FnMsgPushData
+	FnMsgPopData
+	FnRcPointerRel
+	FnSpinLock
+	FnSpinUnlock
+	FnSkFullsock
+	FnTcpSock
+	FnSkbEcnSetCe
+	FnGetListenerSock
+	FnSkcLookupTcp
+	FnTcpCheckSyncookie
+	FnSysctlGetName
+	FnSysctlGetCurrentValue
+	FnSysctlGetNewValue
+	FnSysctlSetNewValue
+	FnStrtol
+	FnStrtoul
+	FnSkStorageGet
+	FnSkStorageDelete
+	FnSendSignal
+	FnTcpGenSyncookie
+	FnSkbOutput
+	FnProbeReadUser
+	FnProbeReadKernel
+	FnProbeReadUserStr
+	FnProbeReadKernelStr
+	FnTcpSendAck
+	FnSendSignalThread
+	FnJiffies64
+	FnReadBranchRecords
+	FnGetNsCurrentPidTgid
+	FnXdpOutput
+	FnGetNetnsCookie
+	FnGetCurrentAncestorCgroupId
+	FnSkAssign
+	FnKtimeGetBootNs
+	FnSeqPrintf
+	FnSeqWrite
+	FnSkCgroupId
+	FnSkAncestorCgroupId
+	FnRingbufOutput
+	FnRingbufReserve
+	FnRingbufSubmit
+	FnRingbufDiscard
+	FnRingbufQuery
+	FnCsumLevel
+	FnSkcToTcp6Sock
+	FnSkcToTcpSock
+	FnSkcToTcpTimewaitSock
+	FnSkcToTcpRequestSock
+	FnSkcToUdp6Sock
+	FnGetTaskStack
+	FnLoadHdrOpt
+	FnStoreHdrOpt
+	FnReserveHdrOpt
+	FnInodeStorageGet
+	FnInodeStorageDelete
+	FnDPath
+	FnCopyFromUser
+	FnSnprintfBtf
+	FnSeqPrintfBtf
+	FnSkbCgroupClassid
+	FnRedirectNeigh
+	FnPerCpuPtr
+	FnThisCpuPtr
+	FnRedirectPeer
+	FnTaskStorageGet
+	FnTaskStorageDelete
+	FnGetCurrentTaskBtf
+	FnBprmOptsSet
+	FnKtimeGetCoarseNs
+	FnImaInodeHash
+	FnSockFromFile
+	FnCheckMtu
+	FnForEachMapElem
+	FnSnprintf
+	FnSysBpf
+	FnBtfFindByNameKind
+	FnSysClose
+	FnTimerInit
+	FnTimerSetCallback
+	FnTimerStart
+	FnTimerCancel
+	FnGetFuncIp
+	FnGetAttachCookie
+	FnTaskPtRegs
+	FnGetBranchSnapshot
+	FnTraceVprintk
+	FnSkcToUnixSock
+	FnKallsymsLookupName
+	FnFindVma
+	FnLoop
+	FnStrncmp
+	FnGetFuncArg
+	FnGetFuncRet
+	FnGetFuncArgCnt
+	FnGetRetval
+	FnSetRetval
+	FnXdpGetBuffLen
+	FnXdpLoadBytes
+	FnXdpStoreBytes
+	FnCopyFromUserTask
+	FnSkbSetTstamp
+	FnImaFileHash
+	FnKptrXchg
+	FnMapLookupPercpuElem
+	FnSkcToMptcpSock
+	FnDynptrFromMem
+	FnRingbufReserveDynptr
+	FnRingbufSubmitDynptr
+	FnRingbufDiscardDynptr
+	FnDynptrRead
+	FnDynptrWrite
+	FnDynptrData
+	FnTcpRawGenSyncookieIpv4
+	FnTcpRawGenSyncookieIpv6
+	FnTcpRawCheckSyncookieIpv4
+	FnTcpRawCheckSyncookieIpv6
+	FnKtimeGetTaiNs
+	FnUserRingbufDrain
+	FnCgrpStorageGet
+	FnCgrpStorageDelete
+
+	maxBuiltinFunc
+)
+
+// Call emits a function call.
+func (fn BuiltinFunc) Call() Instruction {
+	return Instruction{
+		OpCode:   OpCode(JumpClass).SetJumpOp(Call),
+		Constant: int64(fn),
+	}
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/func_string.go b/vendor/github.com/cilium/ebpf/asm/func_string.go
new file mode 100644
index 00000000000..47150bc4f2d
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/func_string.go
@@ -0,0 +1,235 @@
+// Code generated by "stringer -output func_string.go -type=BuiltinFunc"; DO NOT EDIT.
+
+package asm
+
+import "strconv"
+
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[FnUnspec-0]
+	_ = x[FnMapLookupElem-1]
+	_ = x[FnMapUpdateElem-2]
+	_ = x[FnMapDeleteElem-3]
+	_ = x[FnProbeRead-4]
+	_ = x[FnKtimeGetNs-5]
+	_ = x[FnTracePrintk-6]
+	_ = x[FnGetPrandomU32-7]
+	_ = x[FnGetSmpProcessorId-8]
+	_ = x[FnSkbStoreBytes-9]
+	_ = x[FnL3CsumReplace-10]
+	_ = x[FnL4CsumReplace-11]
+	_ = x[FnTailCall-12]
+	_ = x[FnCloneRedirect-13]
+	_ = x[FnGetCurrentPidTgid-14]
+	_ = x[FnGetCurrentUidGid-15]
+	_ = x[FnGetCurrentComm-16]
+	_ = x[FnGetCgroupClassid-17]
+	_ = x[FnSkbVlanPush-18]
+	_ = x[FnSkbVlanPop-19]
+	_ = x[FnSkbGetTunnelKey-20]
+	_ = x[FnSkbSetTunnelKey-21]
+	_ = x[FnPerfEventRead-22]
+	_ = x[FnRedirect-23]
+	_ = x[FnGetRouteRealm-24]
+	_ = x[FnPerfEventOutput-25]
+	_ = x[FnSkbLoadBytes-26]
+	_ = x[FnGetStackid-27]
+	_ = x[FnCsumDiff-28]
+	_ = x[FnSkbGetTunnelOpt-29]
+	_ = x[FnSkbSetTunnelOpt-30]
+	_ = x[FnSkbChangeProto-31]
+	_ = x[FnSkbChangeType-32]
+	_ = x[FnSkbUnderCgroup-33]
+	_ = x[FnGetHashRecalc-34]
+	_ = x[FnGetCurrentTask-35]
+	_ = x[FnProbeWriteUser-36]
+	_ = x[FnCurrentTaskUnderCgroup-37]
+	_ = x[FnSkbChangeTail-38]
+	_ = x[FnSkbPullData-39]
+	_ = x[FnCsumUpdate-40]
+	_ = x[FnSetHashInvalid-41]
+	_ = x[FnGetNumaNodeId-42]
+	_ = x[FnSkbChangeHead-43]
+	_ = x[FnXdpAdjustHead-44]
+	_ = x[FnProbeReadStr-45]
+	_ = x[FnGetSocketCookie-46]
+	_ = x[FnGetSocketUid-47]
+	_ = x[FnSetHash-48]
+	_ = x[FnSetsockopt-49]
+	_ = x[FnSkbAdjustRoom-50]
+	_ = x[FnRedirectMap-51]
+	_ = x[FnSkRedirectMap-52]
+	_ = x[FnSockMapUpdate-53]
+	_ = x[FnXdpAdjustMeta-54]
+	_ = x[FnPerfEventReadValue-55]
+	_ = x[FnPerfProgReadValue-56]
+	_ = x[FnGetsockopt-57]
+	_ = x[FnOverrideReturn-58]
+	_ = x[FnSockOpsCbFlagsSet-59]
+	_ = x[FnMsgRedirectMap-60]
+	_ = x[FnMsgApplyBytes-61]
+	_ = x[FnMsgCorkBytes-62]
+	_ = x[FnMsgPullData-63]
+	_ = x[FnBind-64]
+	_ = x[FnXdpAdjustTail-65]
+	_ = x[FnSkbGetXfrmState-66]
+	_ = x[FnGetStack-67]
+	_ = x[FnSkbLoadBytesRelative-68]
+	_ = x[FnFibLookup-69]
+	_ = x[FnSockHashUpdate-70]
+	_ = x[FnMsgRedirectHash-71]
+	_ = x[FnSkRedirectHash-72]
+	_ = x[FnLwtPushEncap-73]
+	_ = x[FnLwtSeg6StoreBytes-74]
+	_ = x[FnLwtSeg6AdjustSrh-75]
+	_ = x[FnLwtSeg6Action-76]
+	_ = x[FnRcRepeat-77]
+	_ = x[FnRcKeydown-78]
+	_ = x[FnSkbCgroupId-79]
+	_ = x[FnGetCurrentCgroupId-80]
+	_ = x[FnGetLocalStorage-81]
+	_ = x[FnSkSelectReuseport-82]
+	_ = x[FnSkbAncestorCgroupId-83]
+	_ = x[FnSkLookupTcp-84]
+	_ = x[FnSkLookupUdp-85]
+	_ = x[FnSkRelease-86]
+	_ = x[FnMapPushElem-87]
+	_ = x[FnMapPopElem-88]
+	_ = x[FnMapPeekElem-89]
+	_ = x[FnMsgPushData-90]
+	_ = x[FnMsgPopData-91]
+	_ = x[FnRcPointerRel-92]
+	_ = x[FnSpinLock-93]
+	_ = x[FnSpinUnlock-94]
+	_ = x[FnSkFullsock-95]
+	_ = x[FnTcpSock-96]
+	_ = x[FnSkbEcnSetCe-97]
+	_ = x[FnGetListenerSock-98]
+	_ = x[FnSkcLookupTcp-99]
+	_ = x[FnTcpCheckSyncookie-100]
+	_ = x[FnSysctlGetName-101]
+	_ = x[FnSysctlGetCurrentValue-102]
+	_ = x[FnSysctlGetNewValue-103]
+	_ = x[FnSysctlSetNewValue-104]
+	_ = x[FnStrtol-105]
+	_ = x[FnStrtoul-106]
+	_ = x[FnSkStorageGet-107]
+	_ = x[FnSkStorageDelete-108]
+	_ = x[FnSendSignal-109]
+	_ = x[FnTcpGenSyncookie-110]
+	_ = x[FnSkbOutput-111]
+	_ = x[FnProbeReadUser-112]
+	_ = x[FnProbeReadKernel-113]
+	_ = x[FnProbeReadUserStr-114]
+	_ = x[FnProbeReadKernelStr-115]
+	_ = x[FnTcpSendAck-116]
+	_ = x[FnSendSignalThread-117]
+	_ = x[FnJiffies64-118]
+	_ = x[FnReadBranchRecords-119]
+	_ = x[FnGetNsCurrentPidTgid-120]
+	_ = x[FnXdpOutput-121]
+	_ = x[FnGetNetnsCookie-122]
+	_ = x[FnGetCurrentAncestorCgroupId-123]
+	_ = x[FnSkAssign-124]
+	_ = x[FnKtimeGetBootNs-125]
+	_ = x[FnSeqPrintf-126]
+	_ = x[FnSeqWrite-127]
+	_ = x[FnSkCgroupId-128]
+	_ = x[FnSkAncestorCgroupId-129]
+	_ = x[FnRingbufOutput-130]
+	_ = x[FnRingbufReserve-131]
+	_ = x[FnRingbufSubmit-132]
+	_ = x[FnRingbufDiscard-133]
+	_ = x[FnRingbufQuery-134]
+	_ = x[FnCsumLevel-135]
+	_ = x[FnSkcToTcp6Sock-136]
+	_ = x[FnSkcToTcpSock-137]
+	_ = x[FnSkcToTcpTimewaitSock-138]
+	_ = x[FnSkcToTcpRequestSock-139]
+	_ = x[FnSkcToUdp6Sock-140]
+	_ = x[FnGetTaskStack-141]
+	_ = x[FnLoadHdrOpt-142]
+	_ = x[FnStoreHdrOpt-143]
+	_ = x[FnReserveHdrOpt-144]
+	_ = x[FnInodeStorageGet-145]
+	_ = x[FnInodeStorageDelete-146]
+	_ = x[FnDPath-147]
+	_ = x[FnCopyFromUser-148]
+	_ = x[FnSnprintfBtf-149]
+	_ = x[FnSeqPrintfBtf-150]
+	_ = x[FnSkbCgroupClassid-151]
+	_ = x[FnRedirectNeigh-152]
+	_ = x[FnPerCpuPtr-153]
+	_ = x[FnThisCpuPtr-154]
+	_ = x[FnRedirectPeer-155]
+	_ = x[FnTaskStorageGet-156]
+	_ = x[FnTaskStorageDelete-157]
+	_ = x[FnGetCurrentTaskBtf-158]
+	_ = x[FnBprmOptsSet-159]
+	_ = x[FnKtimeGetCoarseNs-160]
+	_ = x[FnImaInodeHash-161]
+	_ = x[FnSockFromFile-162]
+	_ = x[FnCheckMtu-163]
+	_ = x[FnForEachMapElem-164]
+	_ = x[FnSnprintf-165]
+	_ = x[FnSysBpf-166]
+	_ = x[FnBtfFindByNameKind-167]
+	_ = x[FnSysClose-168]
+	_ = x[FnTimerInit-169]
+	_ = x[FnTimerSetCallback-170]
+	_ = x[FnTimerStart-171]
+	_ = x[FnTimerCancel-172]
+	_ = x[FnGetFuncIp-173]
+	_ = x[FnGetAttachCookie-174]
+	_ = x[FnTaskPtRegs-175]
+	_ = x[FnGetBranchSnapshot-176]
+	_ = x[FnTraceVprintk-177]
+	_ = x[FnSkcToUnixSock-178]
+	_ = x[FnKallsymsLookupName-179]
+	_ = x[FnFindVma-180]
+	_ = x[FnLoop-181]
+	_ = x[FnStrncmp-182]
+	_ = x[FnGetFuncArg-183]
+	_ = x[FnGetFuncRet-184]
+	_ = x[FnGetFuncArgCnt-185]
+	_ = x[FnGetRetval-186]
+	_ = x[FnSetRetval-187]
+	_ = x[FnXdpGetBuffLen-188]
+	_ = x[FnXdpLoadBytes-189]
+	_ = x[FnXdpStoreBytes-190]
+	_ = x[FnCopyFromUserTask-191]
+	_ = x[FnSkbSetTstamp-192]
+	_ = x[FnImaFileHash-193]
+	_ = x[FnKptrXchg-194]
+	_ = x[FnMapLookupPercpuElem-195]
+	_ = x[FnSkcToMptcpSock-196]
+	_ = x[FnDynptrFromMem-197]
+	_ = x[FnRingbufReserveDynptr-198]
+	_ = x[FnRingbufSubmitDynptr-199]
+	_ = x[FnRingbufDiscardDynptr-200]
+	_ = x[FnDynptrRead-201]
+	_ = x[FnDynptrWrite-202]
+	_ = x[FnDynptrData-203]
+	_ = x[FnTcpRawGenSyncookieIpv4-204]
+	_ = x[FnTcpRawGenSyncookieIpv6-205]
+	_ = x[FnTcpRawCheckSyncookieIpv4-206]
+	_ = x[FnTcpRawCheckSyncookieIpv6-207]
+	_ = x[FnKtimeGetTaiNs-208]
+	_ = x[FnUserRingbufDrain-209]
+	_ = x[FnCgrpStorageGet-210]
+	_ = x[FnCgrpStorageDelete-211]
+	_ = x[maxBuiltinFunc-212]
+}
+
+const _BuiltinFunc_name = "FnUnspecFnMapLookupElemFnMapUpdateElemFnMapDeleteElemFnProbeReadFnKtimeGetNsFnTracePrintkFnGetPrandomU32FnGetSmpProcessorIdFnSkbStoreBytesFnL3CsumReplaceFnL4CsumReplaceFnTailCallFnCloneRedirectFnGetCurrentPidTgidFnGetCurrentUidGidFnGetCurrentCommFnGetCgroupClassidFnSkbVlanPushFnSkbVlanPopFnSkbGetTunnelKeyFnSkbSetTunnelKeyFnPerfEventReadFnRedirectFnGetRouteRealmFnPerfEventOutputFnSkbLoadBytesFnGetStackidFnCsumDiffFnSkbGetTunnelOptFnSkbSetTunnelOptFnSkbChangeProtoFnSkbChangeTypeFnSkbUnderCgroupFnGetHashRecalcFnGetCurrentTaskFnProbeWriteUserFnCurrentTaskUnderCgroupFnSkbChangeTailFnSkbPullDataFnCsumUpdateFnSetHashInvalidFnGetNumaNodeIdFnSkbChangeHeadFnXdpAdjustHeadFnProbeReadStrFnGetSocketCookieFnGetSocketUidFnSetHashFnSetsockoptFnSkbAdjustRoomFnRedirectMapFnSkRedirectMapFnSockMapUpdateFnXdpAdjustMetaFnPerfEventReadValueFnPerfProgReadValueFnGetsockoptFnOverrideReturnFnSockOpsCbFlagsSetFnMsgRedirectMapFnMsgApplyBytesFnMsgCorkBytesFnMsgPullDataFnBindFnXdpAdjustTailFnSkbGetXfrmStateFnGetStackFnSkbLoadBytesRelativeFnFibLookupFnSockHashUpdateFnMsgRedirectHashFnSkRedirectHashFnLwtPushEncapFnLwtSeg6StoreBytesFnLwtSeg6AdjustSrhFnLwtSeg6ActionFnRcRepeatFnRcKeydownFnSkbCgroupIdFnGetCurrentCgroupIdFnGetLocalStorageFnSkSelectReuseportFnSkbAncestorCgroupIdFnSkLookupTcpFnSkLookupUdpFnSkReleaseFnMapPushElemFnMapPopElemFnMapPeekElemFnMsgPushDataFnMsgPopDataFnRcPointerRelFnSpinLockFnSpinUnlockFnSkFullsockFnTcpSockFnSkbEcnSetCeFnGetListenerSockFnSkcLookupTcpFnTcpCheckSyncookieFnSysctlGetNameFnSysctlGetCurrentValueFnSysctlGetNewValueFnSysctlSetNewValueFnStrtolFnStrtoulFnSkStorageGetFnSkStorageDeleteFnSendSignalFnTcpGenSyncookieFnSkbOutputFnProbeReadUserFnProbeReadKernelFnProbeReadUserStrFnProbeReadKernelStrFnTcpSendAckFnSendSignalThreadFnJiffies64FnReadBranchRecordsFnGetNsCurrentPidTgidFnXdpOutputFnGetNetnsCookieFnGetCurrentAncestorCgroupIdFnSkAssignFnKtimeGetBootNsFnSeqPrintfFnSeqWriteFnSkCgroupIdFnSkAncestorCgroupIdFnRingbufOutputFnRingbufReserveFnRingbufSubmitFnRingbufDiscardFnRingbufQueryFnCsumLevelFnSkcToTcp6SockFnSkcToTcpSockFnSkcToTcpTimewaitSockFnSkcToTcpRequestSockFnSkcToUdp6SockFnGetTaskStackFnLoadHdrOptFnStoreHdrOptFnReserveHdrOptFnInodeStorageGetFnInodeStorageDeleteFnDPathFnCopyFromUserFnSnprintfBtfFnSeqPrintfBtfFnSkbCgroupClassidFnRedirectNeighFnPerCpuPtrFnThisCpuPtrFnRedirectPeerFnTaskStorageGetFnTaskStorageDeleteFnGetCurrentTaskBtfFnBprmOptsSetFnKtimeGetCoarseNsFnImaInodeHashFnSockFromFileFnCheckMtuFnForEachMapElemFnSnprintfFnSysBpfFnBtfFindByNameKindFnSysCloseFnTimerInitFnTimerSetCallbackFnTimerStartFnTimerCancelFnGetFuncIpFnGetAttachCookieFnTaskPtRegsFnGetBranchSnapshotFnTraceVprintkFnSkcToUnixSockFnKallsymsLookupNameFnFindVmaFnLoopFnStrncmpFnGetFuncArgFnGetFuncRetFnGetFuncArgCntFnGetRetvalFnSetRetvalFnXdpGetBuffLenFnXdpLoadBytesFnXdpStoreBytesFnCopyFromUserTaskFnSkbSetTstampFnImaFileHashFnKptrXchgFnMapLookupPercpuElemFnSkcToMptcpSockFnDynptrFromMemFnRingbufReserveDynptrFnRingbufSubmitDynptrFnRingbufDiscardDynptrFnDynptrReadFnDynptrWriteFnDynptrDataFnTcpRawGenSyncookieIpv4FnTcpRawGenSyncookieIpv6FnTcpRawCheckSyncookieIpv4FnTcpRawCheckSyncookieIpv6FnKtimeGetTaiNsFnUserRingbufDrainFnCgrpStorageGetFnCgrpStorageDeletemaxBuiltinFunc"
+
+var _BuiltinFunc_index = [...]uint16{0, 8, 23, 38, 53, 64, 76, 89, 104, 123, 138, 153, 168, 178, 193, 212, 230, 246, 264, 277, 289, 306, 323, 338, 348, 363, 380, 394, 406, 416, 433, 450, 466, 481, 497, 512, 528, 544, 568, 583, 596, 608, 624, 639, 654, 669, 683, 700, 714, 723, 735, 750, 763, 778, 793, 808, 828, 847, 859, 875, 894, 910, 925, 939, 952, 958, 973, 990, 1000, 1022, 1033, 1049, 1066, 1082, 1096, 1115, 1133, 1148, 1158, 1169, 1182, 1202, 1219, 1238, 1259, 1272, 1285, 1296, 1309, 1321, 1334, 1347, 1359, 1373, 1383, 1395, 1407, 1416, 1429, 1446, 1460, 1479, 1494, 1517, 1536, 1555, 1563, 1572, 1586, 1603, 1615, 1632, 1643, 1658, 1675, 1693, 1713, 1725, 1743, 1754, 1773, 1794, 1805, 1821, 1849, 1859, 1875, 1886, 1896, 1908, 1928, 1943, 1959, 1974, 1990, 2004, 2015, 2030, 2044, 2066, 2087, 2102, 2116, 2128, 2141, 2156, 2173, 2193, 2200, 2214, 2227, 2241, 2259, 2274, 2285, 2297, 2311, 2327, 2346, 2365, 2378, 2396, 2410, 2424, 2434, 2450, 2460, 2468, 2487, 2497, 2508, 2526, 2538, 2551, 2562, 2579, 2591, 2610, 2624, 2639, 2659, 2668, 2674, 2683, 2695, 2707, 2722, 2733, 2744, 2759, 2773, 2788, 2806, 2820, 2833, 2843, 2864, 2880, 2895, 2917, 2938, 2960, 2972, 2985, 2997, 3021, 3045, 3071, 3097, 3112, 3130, 3146, 3165, 3179}
+
+func (i BuiltinFunc) String() string {
+	if i < 0 || i >= BuiltinFunc(len(_BuiltinFunc_index)-1) {
+		return "BuiltinFunc(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+	return _BuiltinFunc_name[_BuiltinFunc_index[i]:_BuiltinFunc_index[i+1]]
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/instruction.go b/vendor/github.com/cilium/ebpf/asm/instruction.go
new file mode 100644
index 00000000000..ef01eaa35ae
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/instruction.go
@@ -0,0 +1,877 @@
+package asm
+
+import (
+	"crypto/sha1"
+	"encoding/binary"
+	"encoding/hex"
+	"errors"
+	"fmt"
+	"io"
+	"math"
+	"sort"
+	"strings"
+
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// InstructionSize is the size of a BPF instruction in bytes
+const InstructionSize = 8
+
+// RawInstructionOffset is an offset in units of raw BPF instructions.
+type RawInstructionOffset uint64
+
+var ErrUnreferencedSymbol = errors.New("unreferenced symbol")
+var ErrUnsatisfiedMapReference = errors.New("unsatisfied map reference")
+var ErrUnsatisfiedProgramReference = errors.New("unsatisfied program reference")
+
+// Bytes returns the offset of an instruction in bytes.
+func (rio RawInstructionOffset) Bytes() uint64 {
+	return uint64(rio) * InstructionSize
+}
+
+// Instruction is a single eBPF instruction.
+type Instruction struct {
+	OpCode   OpCode
+	Dst      Register
+	Src      Register
+	Offset   int16
+	Constant int64
+
+	// Metadata contains optional metadata about this instruction.
+	Metadata Metadata
+}
+
+// Unmarshal decodes a BPF instruction.
+func (ins *Instruction) Unmarshal(r io.Reader, bo binary.ByteOrder) (uint64, error) {
+	data := make([]byte, InstructionSize)
+	if _, err := io.ReadFull(r, data); err != nil {
+		return 0, err
+	}
+
+	ins.OpCode = OpCode(data[0])
+
+	regs := data[1]
+	switch bo {
+	case binary.LittleEndian:
+		ins.Dst, ins.Src = Register(regs&0xF), Register(regs>>4)
+	case binary.BigEndian:
+		ins.Dst, ins.Src = Register(regs>>4), Register(regs&0xf)
+	}
+
+	ins.Offset = int16(bo.Uint16(data[2:4]))
+	// Convert to int32 before widening to int64
+	// to ensure the signed bit is carried over.
+	ins.Constant = int64(int32(bo.Uint32(data[4:8])))
+
+	if !ins.OpCode.IsDWordLoad() {
+		return InstructionSize, nil
+	}
+
+	// Pull another instruction from the stream to retrieve the second
+	// half of the 64-bit immediate value.
+	if _, err := io.ReadFull(r, data); err != nil {
+		// No Wrap, to avoid io.EOF clash
+		return 0, errors.New("64bit immediate is missing second half")
+	}
+
+	// Require that all fields other than the value are zero.
+	if bo.Uint32(data[0:4]) != 0 {
+		return 0, errors.New("64bit immediate has non-zero fields")
+	}
+
+	cons1 := uint32(ins.Constant)
+	cons2 := int32(bo.Uint32(data[4:8]))
+	ins.Constant = int64(cons2)<<32 | int64(cons1)
+
+	return 2 * InstructionSize, nil
+}
+
+// Marshal encodes a BPF instruction.
+func (ins Instruction) Marshal(w io.Writer, bo binary.ByteOrder) (uint64, error) {
+	if ins.OpCode == InvalidOpCode {
+		return 0, errors.New("invalid opcode")
+	}
+
+	isDWordLoad := ins.OpCode.IsDWordLoad()
+
+	cons := int32(ins.Constant)
+	if isDWordLoad {
+		// Encode least significant 32bit first for 64bit operations.
+		cons = int32(uint32(ins.Constant))
+	}
+
+	regs, err := newBPFRegisters(ins.Dst, ins.Src, bo)
+	if err != nil {
+		return 0, fmt.Errorf("can't marshal registers: %s", err)
+	}
+
+	data := make([]byte, InstructionSize)
+	data[0] = byte(ins.OpCode)
+	data[1] = byte(regs)
+	bo.PutUint16(data[2:4], uint16(ins.Offset))
+	bo.PutUint32(data[4:8], uint32(cons))
+	if _, err := w.Write(data); err != nil {
+		return 0, err
+	}
+
+	if !isDWordLoad {
+		return InstructionSize, nil
+	}
+
+	// The first half of the second part of a double-wide instruction
+	// must be zero. The second half carries the value.
+	bo.PutUint32(data[0:4], 0)
+	bo.PutUint32(data[4:8], uint32(ins.Constant>>32))
+	if _, err := w.Write(data); err != nil {
+		return 0, err
+	}
+
+	return 2 * InstructionSize, nil
+}
+
+// AssociateMap associates a Map with this Instruction.
+//
+// Implicitly clears the Instruction's Reference field.
+//
+// Returns an error if the Instruction is not a map load.
+func (ins *Instruction) AssociateMap(m FDer) error {
+	if !ins.IsLoadFromMap() {
+		return errors.New("not a load from a map")
+	}
+
+	ins.Metadata.Set(referenceMeta{}, nil)
+	ins.Metadata.Set(mapMeta{}, m)
+
+	return nil
+}
+
+// RewriteMapPtr changes an instruction to use a new map fd.
+//
+// Returns an error if the instruction doesn't load a map.
+//
+// Deprecated: use AssociateMap instead. If you cannot provide a Map,
+// wrap an fd in a type implementing FDer.
+func (ins *Instruction) RewriteMapPtr(fd int) error {
+	if !ins.IsLoadFromMap() {
+		return errors.New("not a load from a map")
+	}
+
+	ins.encodeMapFD(fd)
+
+	return nil
+}
+
+func (ins *Instruction) encodeMapFD(fd int) {
+	// Preserve the offset value for direct map loads.
+	offset := uint64(ins.Constant) & (math.MaxUint32 << 32)
+	rawFd := uint64(uint32(fd))
+	ins.Constant = int64(offset | rawFd)
+}
+
+// MapPtr returns the map fd for this instruction.
+//
+// The result is undefined if the instruction is not a load from a map,
+// see IsLoadFromMap.
+//
+// Deprecated: use Map() instead.
+func (ins *Instruction) MapPtr() int {
+	// If there is a map associated with the instruction, return its FD.
+	if fd := ins.Metadata.Get(mapMeta{}); fd != nil {
+		return fd.(FDer).FD()
+	}
+
+	// Fall back to the fd stored in the Constant field
+	return ins.mapFd()
+}
+
+// mapFd returns the map file descriptor stored in the 32 least significant
+// bits of ins' Constant field.
+func (ins *Instruction) mapFd() int {
+	return int(int32(ins.Constant))
+}
+
+// RewriteMapOffset changes the offset of a direct load from a map.
+//
+// Returns an error if the instruction is not a direct load.
+func (ins *Instruction) RewriteMapOffset(offset uint32) error {
+	if !ins.OpCode.IsDWordLoad() {
+		return fmt.Errorf("%s is not a 64 bit load", ins.OpCode)
+	}
+
+	if ins.Src != PseudoMapValue {
+		return errors.New("not a direct load from a map")
+	}
+
+	fd := uint64(ins.Constant) & math.MaxUint32
+	ins.Constant = int64(uint64(offset)<<32 | fd)
+	return nil
+}
+
+func (ins *Instruction) mapOffset() uint32 {
+	return uint32(uint64(ins.Constant) >> 32)
+}
+
+// IsLoadFromMap returns true if the instruction loads from a map.
+//
+// This covers both loading the map pointer and direct map value loads.
+func (ins *Instruction) IsLoadFromMap() bool {
+	return ins.OpCode == LoadImmOp(DWord) && (ins.Src == PseudoMapFD || ins.Src == PseudoMapValue)
+}
+
+// IsFunctionCall returns true if the instruction calls another BPF function.
+//
+// This is not the same thing as a BPF helper call.
+func (ins *Instruction) IsFunctionCall() bool {
+	return ins.OpCode.JumpOp() == Call && ins.Src == PseudoCall
+}
+
+// IsKfuncCall returns true if the instruction calls a kfunc.
+//
+// This is not the same thing as a BPF helper call.
+func (ins *Instruction) IsKfuncCall() bool {
+	return ins.OpCode.JumpOp() == Call && ins.Src == PseudoKfuncCall
+}
+
+// IsLoadOfFunctionPointer returns true if the instruction loads a function pointer.
+func (ins *Instruction) IsLoadOfFunctionPointer() bool {
+	return ins.OpCode.IsDWordLoad() && ins.Src == PseudoFunc
+}
+
+// IsFunctionReference returns true if the instruction references another BPF
+// function, either by invoking a Call jump operation or by loading a function
+// pointer.
+func (ins *Instruction) IsFunctionReference() bool {
+	return ins.IsFunctionCall() || ins.IsLoadOfFunctionPointer()
+}
+
+// IsBuiltinCall returns true if the instruction is a built-in call, i.e. BPF helper call.
+func (ins *Instruction) IsBuiltinCall() bool {
+	return ins.OpCode.JumpOp() == Call && ins.Src == R0 && ins.Dst == R0
+}
+
+// IsConstantLoad returns true if the instruction loads a constant of the
+// given size.
+func (ins *Instruction) IsConstantLoad(size Size) bool {
+	return ins.OpCode == LoadImmOp(size) && ins.Src == R0 && ins.Offset == 0
+}
+
+// Format implements fmt.Formatter.
+func (ins Instruction) Format(f fmt.State, c rune) {
+	if c != 'v' {
+		fmt.Fprintf(f, "{UNRECOGNIZED: %c}", c)
+		return
+	}
+
+	op := ins.OpCode
+
+	if op == InvalidOpCode {
+		fmt.Fprint(f, "INVALID")
+		return
+	}
+
+	// Omit trailing space for Exit
+	if op.JumpOp() == Exit {
+		fmt.Fprint(f, op)
+		return
+	}
+
+	if ins.IsLoadFromMap() {
+		fd := ins.mapFd()
+		m := ins.Map()
+		switch ins.Src {
+		case PseudoMapFD:
+			if m != nil {
+				fmt.Fprintf(f, "LoadMapPtr dst: %s map: %s", ins.Dst, m)
+			} else {
+				fmt.Fprintf(f, "LoadMapPtr dst: %s fd: %d", ins.Dst, fd)
+			}
+
+		case PseudoMapValue:
+			if m != nil {
+				fmt.Fprintf(f, "LoadMapValue dst: %s, map: %s off: %d", ins.Dst, m, ins.mapOffset())
+			} else {
+				fmt.Fprintf(f, "LoadMapValue dst: %s, fd: %d off: %d", ins.Dst, fd, ins.mapOffset())
+			}
+		}
+
+		goto ref
+	}
+
+	fmt.Fprintf(f, "%v ", op)
+	switch cls := op.Class(); {
+	case cls.isLoadOrStore():
+		switch op.Mode() {
+		case ImmMode:
+			fmt.Fprintf(f, "dst: %s imm: %d", ins.Dst, ins.Constant)
+		case AbsMode:
+			fmt.Fprintf(f, "imm: %d", ins.Constant)
+		case IndMode:
+			fmt.Fprintf(f, "dst: %s src: %s imm: %d", ins.Dst, ins.Src, ins.Constant)
+		case MemMode:
+			fmt.Fprintf(f, "dst: %s src: %s off: %d imm: %d", ins.Dst, ins.Src, ins.Offset, ins.Constant)
+		case XAddMode:
+			fmt.Fprintf(f, "dst: %s src: %s", ins.Dst, ins.Src)
+		}
+
+	case cls.IsALU():
+		fmt.Fprintf(f, "dst: %s ", ins.Dst)
+		if op.ALUOp() == Swap || op.Source() == ImmSource {
+			fmt.Fprintf(f, "imm: %d", ins.Constant)
+		} else {
+			fmt.Fprintf(f, "src: %s", ins.Src)
+		}
+
+	case cls.IsJump():
+		switch jop := op.JumpOp(); jop {
+		case Call:
+			switch ins.Src {
+			case PseudoCall:
+				// bpf-to-bpf call
+				fmt.Fprint(f, ins.Constant)
+			case PseudoKfuncCall:
+				// kfunc call
+				fmt.Fprintf(f, "Kfunc(%d)", ins.Constant)
+			default:
+				fmt.Fprint(f, BuiltinFunc(ins.Constant))
+			}
+
+		default:
+			fmt.Fprintf(f, "dst: %s off: %d ", ins.Dst, ins.Offset)
+			if op.Source() == ImmSource {
+				fmt.Fprintf(f, "imm: %d", ins.Constant)
+			} else {
+				fmt.Fprintf(f, "src: %s", ins.Src)
+			}
+		}
+	}
+
+ref:
+	if ins.Reference() != "" {
+		fmt.Fprintf(f, " <%s>", ins.Reference())
+	}
+}
+
+func (ins Instruction) equal(other Instruction) bool {
+	return ins.OpCode == other.OpCode &&
+		ins.Dst == other.Dst &&
+		ins.Src == other.Src &&
+		ins.Offset == other.Offset &&
+		ins.Constant == other.Constant
+}
+
+// Size returns the amount of bytes ins would occupy in binary form.
+func (ins Instruction) Size() uint64 {
+	return uint64(InstructionSize * ins.OpCode.rawInstructions())
+}
+
+// WithMetadata sets the given Metadata on the Instruction. e.g. to copy
+// Metadata from another Instruction when replacing it.
+func (ins Instruction) WithMetadata(meta Metadata) Instruction {
+	ins.Metadata = meta
+	return ins
+}
+
+type symbolMeta struct{}
+
+// WithSymbol marks the Instruction as a Symbol, which other Instructions
+// can point to using corresponding calls to WithReference.
+func (ins Instruction) WithSymbol(name string) Instruction {
+	ins.Metadata.Set(symbolMeta{}, name)
+	return ins
+}
+
+// Sym creates a symbol.
+//
+// Deprecated: use WithSymbol instead.
+func (ins Instruction) Sym(name string) Instruction {
+	return ins.WithSymbol(name)
+}
+
+// Symbol returns the value ins has been marked with using WithSymbol,
+// otherwise returns an empty string. A symbol is often an Instruction
+// at the start of a function body.
+func (ins Instruction) Symbol() string {
+	sym, _ := ins.Metadata.Get(symbolMeta{}).(string)
+	return sym
+}
+
+type referenceMeta struct{}
+
+// WithReference makes ins reference another Symbol or map by name.
+func (ins Instruction) WithReference(ref string) Instruction {
+	ins.Metadata.Set(referenceMeta{}, ref)
+	return ins
+}
+
+// Reference returns the Symbol or map name referenced by ins, if any.
+func (ins Instruction) Reference() string {
+	ref, _ := ins.Metadata.Get(referenceMeta{}).(string)
+	return ref
+}
+
+type mapMeta struct{}
+
+// Map returns the Map referenced by ins, if any.
+// An Instruction will contain a Map if e.g. it references an existing,
+// pinned map that was opened during ELF loading.
+func (ins Instruction) Map() FDer {
+	fd, _ := ins.Metadata.Get(mapMeta{}).(FDer)
+	return fd
+}
+
+type sourceMeta struct{}
+
+// WithSource adds source information about the Instruction.
+func (ins Instruction) WithSource(src fmt.Stringer) Instruction {
+	ins.Metadata.Set(sourceMeta{}, src)
+	return ins
+}
+
+// Source returns source information about the Instruction. The field is
+// present when the compiler emits BTF line info about the Instruction and
+// usually contains the line of source code responsible for it.
+func (ins Instruction) Source() fmt.Stringer {
+	str, _ := ins.Metadata.Get(sourceMeta{}).(fmt.Stringer)
+	return str
+}
+
+// A Comment can be passed to Instruction.WithSource to add a comment
+// to an instruction.
+type Comment string
+
+func (s Comment) String() string {
+	return string(s)
+}
+
+// FDer represents a resource tied to an underlying file descriptor.
+// Used as a stand-in for e.g. ebpf.Map since that type cannot be
+// imported here and FD() is the only method we rely on.
+type FDer interface {
+	FD() int
+}
+
+// Instructions is an eBPF program.
+type Instructions []Instruction
+
+// Unmarshal unmarshals an Instructions from a binary instruction stream.
+// All instructions in insns are replaced by instructions decoded from r.
+func (insns *Instructions) Unmarshal(r io.Reader, bo binary.ByteOrder) error {
+	if len(*insns) > 0 {
+		*insns = nil
+	}
+
+	var offset uint64
+	for {
+		var ins Instruction
+		n, err := ins.Unmarshal(r, bo)
+		if errors.Is(err, io.EOF) {
+			break
+		}
+		if err != nil {
+			return fmt.Errorf("offset %d: %w", offset, err)
+		}
+
+		*insns = append(*insns, ins)
+		offset += n
+	}
+
+	return nil
+}
+
+// Name returns the name of the function insns belongs to, if any.
+func (insns Instructions) Name() string {
+	if len(insns) == 0 {
+		return ""
+	}
+	return insns[0].Symbol()
+}
+
+func (insns Instructions) String() string {
+	return fmt.Sprint(insns)
+}
+
+// Size returns the amount of bytes insns would occupy in binary form.
+func (insns Instructions) Size() uint64 {
+	var sum uint64
+	for _, ins := range insns {
+		sum += ins.Size()
+	}
+	return sum
+}
+
+// AssociateMap updates all Instructions that Reference the given symbol
+// to point to an existing Map m instead.
+//
+// Returns ErrUnreferencedSymbol error if no references to symbol are found
+// in insns. If symbol is anything else than the symbol name of map (e.g.
+// a bpf2bpf subprogram), an error is returned.
+func (insns Instructions) AssociateMap(symbol string, m FDer) error {
+	if symbol == "" {
+		return errors.New("empty symbol")
+	}
+
+	var found bool
+	for i := range insns {
+		ins := &insns[i]
+		if ins.Reference() != symbol {
+			continue
+		}
+
+		if err := ins.AssociateMap(m); err != nil {
+			return err
+		}
+
+		found = true
+	}
+
+	if !found {
+		return fmt.Errorf("symbol %s: %w", symbol, ErrUnreferencedSymbol)
+	}
+
+	return nil
+}
+
+// RewriteMapPtr rewrites all loads of a specific map pointer to a new fd.
+//
+// Returns ErrUnreferencedSymbol if the symbol isn't used.
+//
+// Deprecated: use AssociateMap instead.
+func (insns Instructions) RewriteMapPtr(symbol string, fd int) error {
+	if symbol == "" {
+		return errors.New("empty symbol")
+	}
+
+	var found bool
+	for i := range insns {
+		ins := &insns[i]
+		if ins.Reference() != symbol {
+			continue
+		}
+
+		if !ins.IsLoadFromMap() {
+			return errors.New("not a load from a map")
+		}
+
+		ins.encodeMapFD(fd)
+
+		found = true
+	}
+
+	if !found {
+		return fmt.Errorf("symbol %s: %w", symbol, ErrUnreferencedSymbol)
+	}
+
+	return nil
+}
+
+// SymbolOffsets returns the set of symbols and their offset in
+// the instructions.
+func (insns Instructions) SymbolOffsets() (map[string]int, error) {
+	offsets := make(map[string]int)
+
+	for i, ins := range insns {
+		if ins.Symbol() == "" {
+			continue
+		}
+
+		if _, ok := offsets[ins.Symbol()]; ok {
+			return nil, fmt.Errorf("duplicate symbol %s", ins.Symbol())
+		}
+
+		offsets[ins.Symbol()] = i
+	}
+
+	return offsets, nil
+}
+
+// FunctionReferences returns a set of symbol names these Instructions make
+// bpf-to-bpf calls to.
+func (insns Instructions) FunctionReferences() []string {
+	calls := make(map[string]struct{})
+	for _, ins := range insns {
+		if ins.Constant != -1 {
+			// BPF-to-BPF calls have -1 constants.
+			continue
+		}
+
+		if ins.Reference() == "" {
+			continue
+		}
+
+		if !ins.IsFunctionReference() {
+			continue
+		}
+
+		calls[ins.Reference()] = struct{}{}
+	}
+
+	result := make([]string, 0, len(calls))
+	for call := range calls {
+		result = append(result, call)
+	}
+
+	sort.Strings(result)
+	return result
+}
+
+// ReferenceOffsets returns the set of references and their offset in
+// the instructions.
+func (insns Instructions) ReferenceOffsets() map[string][]int {
+	offsets := make(map[string][]int)
+
+	for i, ins := range insns {
+		if ins.Reference() == "" {
+			continue
+		}
+
+		offsets[ins.Reference()] = append(offsets[ins.Reference()], i)
+	}
+
+	return offsets
+}
+
+// Format implements fmt.Formatter.
+//
+// You can control indentation of symbols by
+// specifying a width. Setting a precision controls the indentation of
+// instructions.
+// The default character is a tab, which can be overridden by specifying
+// the ' ' space flag.
+func (insns Instructions) Format(f fmt.State, c rune) {
+	if c != 's' && c != 'v' {
+		fmt.Fprintf(f, "{UNKNOWN FORMAT '%c'}", c)
+		return
+	}
+
+	// Precision is better in this case, because it allows
+	// specifying 0 padding easily.
+	padding, ok := f.Precision()
+	if !ok {
+		padding = 1
+	}
+
+	indent := strings.Repeat("\t", padding)
+	if f.Flag(' ') {
+		indent = strings.Repeat(" ", padding)
+	}
+
+	symPadding, ok := f.Width()
+	if !ok {
+		symPadding = padding - 1
+	}
+	if symPadding < 0 {
+		symPadding = 0
+	}
+
+	symIndent := strings.Repeat("\t", symPadding)
+	if f.Flag(' ') {
+		symIndent = strings.Repeat(" ", symPadding)
+	}
+
+	// Guess how many digits we need at most, by assuming that all instructions
+	// are double wide.
+	highestOffset := len(insns) * 2
+	offsetWidth := int(math.Ceil(math.Log10(float64(highestOffset))))
+
+	iter := insns.Iterate()
+	for iter.Next() {
+		if iter.Ins.Symbol() != "" {
+			fmt.Fprintf(f, "%s%s:\n", symIndent, iter.Ins.Symbol())
+		}
+		if src := iter.Ins.Source(); src != nil {
+			line := strings.TrimSpace(src.String())
+			if line != "" {
+				fmt.Fprintf(f, "%s%*s; %s\n", indent, offsetWidth, " ", line)
+			}
+		}
+		fmt.Fprintf(f, "%s%*d: %v\n", indent, offsetWidth, iter.Offset, iter.Ins)
+	}
+}
+
+// Marshal encodes a BPF program into the kernel format.
+//
+// insns may be modified if there are unresolved jumps or bpf2bpf calls.
+//
+// Returns ErrUnsatisfiedProgramReference if there is a Reference Instruction
+// without a matching Symbol Instruction within insns.
+func (insns Instructions) Marshal(w io.Writer, bo binary.ByteOrder) error {
+	if err := insns.encodeFunctionReferences(); err != nil {
+		return err
+	}
+
+	if err := insns.encodeMapPointers(); err != nil {
+		return err
+	}
+
+	for i, ins := range insns {
+		if _, err := ins.Marshal(w, bo); err != nil {
+			return fmt.Errorf("instruction %d: %w", i, err)
+		}
+	}
+	return nil
+}
+
+// Tag calculates the kernel tag for a series of instructions.
+//
+// It mirrors bpf_prog_calc_tag in the kernel and so can be compared
+// to ProgramInfo.Tag to figure out whether a loaded program matches
+// certain instructions.
+func (insns Instructions) Tag(bo binary.ByteOrder) (string, error) {
+	h := sha1.New()
+	for i, ins := range insns {
+		if ins.IsLoadFromMap() {
+			ins.Constant = 0
+		}
+		_, err := ins.Marshal(h, bo)
+		if err != nil {
+			return "", fmt.Errorf("instruction %d: %w", i, err)
+		}
+	}
+	return hex.EncodeToString(h.Sum(nil)[:unix.BPF_TAG_SIZE]), nil
+}
+
+// encodeFunctionReferences populates the Offset (or Constant, depending on
+// the instruction type) field of instructions with a Reference field to point
+// to the offset of the corresponding instruction with a matching Symbol field.
+//
+// Only Reference Instructions that are either jumps or BPF function references
+// (calls or function pointer loads) are populated.
+//
+// Returns ErrUnsatisfiedProgramReference if there is a Reference Instruction
+// without at least one corresponding Symbol Instruction within insns.
+func (insns Instructions) encodeFunctionReferences() error {
+	// Index the offsets of instructions tagged as a symbol.
+	symbolOffsets := make(map[string]RawInstructionOffset)
+	iter := insns.Iterate()
+	for iter.Next() {
+		ins := iter.Ins
+
+		if ins.Symbol() == "" {
+			continue
+		}
+
+		if _, ok := symbolOffsets[ins.Symbol()]; ok {
+			return fmt.Errorf("duplicate symbol %s", ins.Symbol())
+		}
+
+		symbolOffsets[ins.Symbol()] = iter.Offset
+	}
+
+	// Find all instructions tagged as references to other symbols.
+	// Depending on the instruction type, populate their constant or offset
+	// fields to point to the symbol they refer to within the insn stream.
+	iter = insns.Iterate()
+	for iter.Next() {
+		i := iter.Index
+		offset := iter.Offset
+		ins := iter.Ins
+
+		if ins.Reference() == "" {
+			continue
+		}
+
+		switch {
+		case ins.IsFunctionReference() && ins.Constant == -1:
+			symOffset, ok := symbolOffsets[ins.Reference()]
+			if !ok {
+				return fmt.Errorf("%s at insn %d: symbol %q: %w", ins.OpCode, i, ins.Reference(), ErrUnsatisfiedProgramReference)
+			}
+
+			ins.Constant = int64(symOffset - offset - 1)
+
+		case ins.OpCode.Class().IsJump() && ins.Offset == -1:
+			symOffset, ok := symbolOffsets[ins.Reference()]
+			if !ok {
+				return fmt.Errorf("%s at insn %d: symbol %q: %w", ins.OpCode, i, ins.Reference(), ErrUnsatisfiedProgramReference)
+			}
+
+			ins.Offset = int16(symOffset - offset - 1)
+		}
+	}
+
+	return nil
+}
+
+// encodeMapPointers finds all Map Instructions and encodes their FDs
+// into their Constant fields.
+func (insns Instructions) encodeMapPointers() error {
+	iter := insns.Iterate()
+	for iter.Next() {
+		ins := iter.Ins
+
+		if !ins.IsLoadFromMap() {
+			continue
+		}
+
+		m := ins.Map()
+		if m == nil {
+			continue
+		}
+
+		fd := m.FD()
+		if fd < 0 {
+			return fmt.Errorf("map %s: %w", m, sys.ErrClosedFd)
+		}
+
+		ins.encodeMapFD(m.FD())
+	}
+
+	return nil
+}
+
+// Iterate allows iterating a BPF program while keeping track of
+// various offsets.
+//
+// Modifying the instruction slice will lead to undefined behaviour.
+func (insns Instructions) Iterate() *InstructionIterator {
+	return &InstructionIterator{insns: insns}
+}
+
+// InstructionIterator iterates over a BPF program.
+type InstructionIterator struct {
+	insns Instructions
+	// The instruction in question.
+	Ins *Instruction
+	// The index of the instruction in the original instruction slice.
+	Index int
+	// The offset of the instruction in raw BPF instructions. This accounts
+	// for double-wide instructions.
+	Offset RawInstructionOffset
+}
+
+// Next returns true as long as there are any instructions remaining.
+func (iter *InstructionIterator) Next() bool {
+	if len(iter.insns) == 0 {
+		return false
+	}
+
+	if iter.Ins != nil {
+		iter.Index++
+		iter.Offset += RawInstructionOffset(iter.Ins.OpCode.rawInstructions())
+	}
+	iter.Ins = &iter.insns[0]
+	iter.insns = iter.insns[1:]
+	return true
+}
+
+type bpfRegisters uint8
+
+func newBPFRegisters(dst, src Register, bo binary.ByteOrder) (bpfRegisters, error) {
+	switch bo {
+	case binary.LittleEndian:
+		return bpfRegisters((src << 4) | (dst & 0xF)), nil
+	case binary.BigEndian:
+		return bpfRegisters((dst << 4) | (src & 0xF)), nil
+	default:
+		return 0, fmt.Errorf("unrecognized ByteOrder %T", bo)
+	}
+}
+
+// IsUnreferencedSymbol returns true if err was caused by
+// an unreferenced symbol.
+//
+// Deprecated: use errors.Is(err, asm.ErrUnreferencedSymbol).
+func IsUnreferencedSymbol(err error) bool {
+	return errors.Is(err, ErrUnreferencedSymbol)
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/jump.go b/vendor/github.com/cilium/ebpf/asm/jump.go
new file mode 100644
index 00000000000..2c8a3dbb7a3
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/jump.go
@@ -0,0 +1,127 @@
+package asm
+
+//go:generate stringer -output jump_string.go -type=JumpOp
+
+// JumpOp affect control flow.
+//
+//	msb      lsb
+//	+----+-+---+
+//	|OP  |s|cls|
+//	+----+-+---+
+type JumpOp uint8
+
+const jumpMask OpCode = aluMask
+
+const (
+	// InvalidJumpOp is returned by getters when invoked
+	// on non branch OpCodes
+	InvalidJumpOp JumpOp = 0xff
+	// Ja jumps by offset unconditionally
+	Ja JumpOp = 0x00
+	// JEq jumps by offset if r == imm
+	JEq JumpOp = 0x10
+	// JGT jumps by offset if r > imm
+	JGT JumpOp = 0x20
+	// JGE jumps by offset if r >= imm
+	JGE JumpOp = 0x30
+	// JSet jumps by offset if r & imm
+	JSet JumpOp = 0x40
+	// JNE jumps by offset if r != imm
+	JNE JumpOp = 0x50
+	// JSGT jumps by offset if signed r > signed imm
+	JSGT JumpOp = 0x60
+	// JSGE jumps by offset if signed r >= signed imm
+	JSGE JumpOp = 0x70
+	// Call builtin or user defined function from imm
+	Call JumpOp = 0x80
+	// Exit ends execution, with value in r0
+	Exit JumpOp = 0x90
+	// JLT jumps by offset if r < imm
+	JLT JumpOp = 0xa0
+	// JLE jumps by offset if r <= imm
+	JLE JumpOp = 0xb0
+	// JSLT jumps by offset if signed r < signed imm
+	JSLT JumpOp = 0xc0
+	// JSLE jumps by offset if signed r <= signed imm
+	JSLE JumpOp = 0xd0
+)
+
+// Return emits an exit instruction.
+//
+// Requires a return value in R0.
+func Return() Instruction {
+	return Instruction{
+		OpCode: OpCode(JumpClass).SetJumpOp(Exit),
+	}
+}
+
+// Op returns the OpCode for a given jump source.
+func (op JumpOp) Op(source Source) OpCode {
+	return OpCode(JumpClass).SetJumpOp(op).SetSource(source)
+}
+
+// Imm compares 64 bit dst to 64 bit value (sign extended), and adjusts PC by offset if the condition is fulfilled.
+func (op JumpOp) Imm(dst Register, value int32, label string) Instruction {
+	return Instruction{
+		OpCode:   op.opCode(JumpClass, ImmSource),
+		Dst:      dst,
+		Offset:   -1,
+		Constant: int64(value),
+	}.WithReference(label)
+}
+
+// Imm32 compares 32 bit dst to 32 bit value, and adjusts PC by offset if the condition is fulfilled.
+// Requires kernel 5.1.
+func (op JumpOp) Imm32(dst Register, value int32, label string) Instruction {
+	return Instruction{
+		OpCode:   op.opCode(Jump32Class, ImmSource),
+		Dst:      dst,
+		Offset:   -1,
+		Constant: int64(value),
+	}.WithReference(label)
+}
+
+// Reg compares 64 bit dst to 64 bit src, and adjusts PC by offset if the condition is fulfilled.
+func (op JumpOp) Reg(dst, src Register, label string) Instruction {
+	return Instruction{
+		OpCode: op.opCode(JumpClass, RegSource),
+		Dst:    dst,
+		Src:    src,
+		Offset: -1,
+	}.WithReference(label)
+}
+
+// Reg32 compares 32 bit dst to 32 bit src, and adjusts PC by offset if the condition is fulfilled.
+// Requires kernel 5.1.
+func (op JumpOp) Reg32(dst, src Register, label string) Instruction {
+	return Instruction{
+		OpCode: op.opCode(Jump32Class, RegSource),
+		Dst:    dst,
+		Src:    src,
+		Offset: -1,
+	}.WithReference(label)
+}
+
+func (op JumpOp) opCode(class Class, source Source) OpCode {
+	if op == Exit || op == Call || op == Ja {
+		return InvalidOpCode
+	}
+
+	return OpCode(class).SetJumpOp(op).SetSource(source)
+}
+
+// Label adjusts PC to the address of the label.
+func (op JumpOp) Label(label string) Instruction {
+	if op == Call {
+		return Instruction{
+			OpCode:   OpCode(JumpClass).SetJumpOp(Call),
+			Src:      PseudoCall,
+			Constant: -1,
+		}.WithReference(label)
+	}
+
+	return Instruction{
+		OpCode: OpCode(JumpClass).SetJumpOp(op),
+		Offset: -1,
+	}.WithReference(label)
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/jump_string.go b/vendor/github.com/cilium/ebpf/asm/jump_string.go
new file mode 100644
index 00000000000..85a4aaffa57
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/jump_string.go
@@ -0,0 +1,53 @@
+// Code generated by "stringer -output jump_string.go -type=JumpOp"; DO NOT EDIT.
+
+package asm
+
+import "strconv"
+
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[InvalidJumpOp-255]
+	_ = x[Ja-0]
+	_ = x[JEq-16]
+	_ = x[JGT-32]
+	_ = x[JGE-48]
+	_ = x[JSet-64]
+	_ = x[JNE-80]
+	_ = x[JSGT-96]
+	_ = x[JSGE-112]
+	_ = x[Call-128]
+	_ = x[Exit-144]
+	_ = x[JLT-160]
+	_ = x[JLE-176]
+	_ = x[JSLT-192]
+	_ = x[JSLE-208]
+}
+
+const _JumpOp_name = "JaJEqJGTJGEJSetJNEJSGTJSGECallExitJLTJLEJSLTJSLEInvalidJumpOp"
+
+var _JumpOp_map = map[JumpOp]string{
+	0:   _JumpOp_name[0:2],
+	16:  _JumpOp_name[2:5],
+	32:  _JumpOp_name[5:8],
+	48:  _JumpOp_name[8:11],
+	64:  _JumpOp_name[11:15],
+	80:  _JumpOp_name[15:18],
+	96:  _JumpOp_name[18:22],
+	112: _JumpOp_name[22:26],
+	128: _JumpOp_name[26:30],
+	144: _JumpOp_name[30:34],
+	160: _JumpOp_name[34:37],
+	176: _JumpOp_name[37:40],
+	192: _JumpOp_name[40:44],
+	208: _JumpOp_name[44:48],
+	255: _JumpOp_name[48:61],
+}
+
+func (i JumpOp) String() string {
+	if str, ok := _JumpOp_map[i]; ok {
+		return str
+	}
+	return "JumpOp(" + strconv.FormatInt(int64(i), 10) + ")"
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/load_store.go b/vendor/github.com/cilium/ebpf/asm/load_store.go
new file mode 100644
index 00000000000..f109497aebc
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/load_store.go
@@ -0,0 +1,204 @@
+package asm
+
+//go:generate stringer -output load_store_string.go -type=Mode,Size
+
+// Mode for load and store operations
+//
+//	msb      lsb
+//	+---+--+---+
+//	|MDE|sz|cls|
+//	+---+--+---+
+type Mode uint8
+
+const modeMask OpCode = 0xe0
+
+const (
+	// InvalidMode is returned by getters when invoked
+	// on non load / store OpCodes
+	InvalidMode Mode = 0xff
+	// ImmMode - immediate value
+	ImmMode Mode = 0x00
+	// AbsMode - immediate value + offset
+	AbsMode Mode = 0x20
+	// IndMode - indirect (imm+src)
+	IndMode Mode = 0x40
+	// MemMode - load from memory
+	MemMode Mode = 0x60
+	// XAddMode - add atomically across processors.
+	XAddMode Mode = 0xc0
+)
+
+// Size of load and store operations
+//
+//	msb      lsb
+//	+---+--+---+
+//	|mde|SZ|cls|
+//	+---+--+---+
+type Size uint8
+
+const sizeMask OpCode = 0x18
+
+const (
+	// InvalidSize is returned by getters when invoked
+	// on non load / store OpCodes
+	InvalidSize Size = 0xff
+	// DWord - double word; 64 bits
+	DWord Size = 0x18
+	// Word - word; 32 bits
+	Word Size = 0x00
+	// Half - half-word; 16 bits
+	Half Size = 0x08
+	// Byte - byte; 8 bits
+	Byte Size = 0x10
+)
+
+// Sizeof returns the size in bytes.
+func (s Size) Sizeof() int {
+	switch s {
+	case DWord:
+		return 8
+	case Word:
+		return 4
+	case Half:
+		return 2
+	case Byte:
+		return 1
+	default:
+		return -1
+	}
+}
+
+// LoadMemOp returns the OpCode to load a value of given size from memory.
+func LoadMemOp(size Size) OpCode {
+	return OpCode(LdXClass).SetMode(MemMode).SetSize(size)
+}
+
+// LoadMem emits `dst = *(size *)(src + offset)`.
+func LoadMem(dst, src Register, offset int16, size Size) Instruction {
+	return Instruction{
+		OpCode: LoadMemOp(size),
+		Dst:    dst,
+		Src:    src,
+		Offset: offset,
+	}
+}
+
+// LoadImmOp returns the OpCode to load an immediate of given size.
+//
+// As of kernel 4.20, only DWord size is accepted.
+func LoadImmOp(size Size) OpCode {
+	return OpCode(LdClass).SetMode(ImmMode).SetSize(size)
+}
+
+// LoadImm emits `dst = (size)value`.
+//
+// As of kernel 4.20, only DWord size is accepted.
+func LoadImm(dst Register, value int64, size Size) Instruction {
+	return Instruction{
+		OpCode:   LoadImmOp(size),
+		Dst:      dst,
+		Constant: value,
+	}
+}
+
+// LoadMapPtr stores a pointer to a map in dst.
+func LoadMapPtr(dst Register, fd int) Instruction {
+	if fd < 0 {
+		return Instruction{OpCode: InvalidOpCode}
+	}
+
+	return Instruction{
+		OpCode:   LoadImmOp(DWord),
+		Dst:      dst,
+		Src:      PseudoMapFD,
+		Constant: int64(uint32(fd)),
+	}
+}
+
+// LoadMapValue stores a pointer to the value at a certain offset of a map.
+func LoadMapValue(dst Register, fd int, offset uint32) Instruction {
+	if fd < 0 {
+		return Instruction{OpCode: InvalidOpCode}
+	}
+
+	fdAndOffset := (uint64(offset) << 32) | uint64(uint32(fd))
+	return Instruction{
+		OpCode:   LoadImmOp(DWord),
+		Dst:      dst,
+		Src:      PseudoMapValue,
+		Constant: int64(fdAndOffset),
+	}
+}
+
+// LoadIndOp returns the OpCode for loading a value of given size from an sk_buff.
+func LoadIndOp(size Size) OpCode {
+	return OpCode(LdClass).SetMode(IndMode).SetSize(size)
+}
+
+// LoadInd emits `dst = ntoh(*(size *)(((sk_buff *)R6)->data + src + offset))`.
+func LoadInd(dst, src Register, offset int32, size Size) Instruction {
+	return Instruction{
+		OpCode:   LoadIndOp(size),
+		Dst:      dst,
+		Src:      src,
+		Constant: int64(offset),
+	}
+}
+
+// LoadAbsOp returns the OpCode for loading a value of given size from an sk_buff.
+func LoadAbsOp(size Size) OpCode {
+	return OpCode(LdClass).SetMode(AbsMode).SetSize(size)
+}
+
+// LoadAbs emits `r0 = ntoh(*(size *)(((sk_buff *)R6)->data + offset))`.
+func LoadAbs(offset int32, size Size) Instruction {
+	return Instruction{
+		OpCode:   LoadAbsOp(size),
+		Dst:      R0,
+		Constant: int64(offset),
+	}
+}
+
+// StoreMemOp returns the OpCode for storing a register of given size in memory.
+func StoreMemOp(size Size) OpCode {
+	return OpCode(StXClass).SetMode(MemMode).SetSize(size)
+}
+
+// StoreMem emits `*(size *)(dst + offset) = src`
+func StoreMem(dst Register, offset int16, src Register, size Size) Instruction {
+	return Instruction{
+		OpCode: StoreMemOp(size),
+		Dst:    dst,
+		Src:    src,
+		Offset: offset,
+	}
+}
+
+// StoreImmOp returns the OpCode for storing an immediate of given size in memory.
+func StoreImmOp(size Size) OpCode {
+	return OpCode(StClass).SetMode(MemMode).SetSize(size)
+}
+
+// StoreImm emits `*(size *)(dst + offset) = value`.
+func StoreImm(dst Register, offset int16, value int64, size Size) Instruction {
+	return Instruction{
+		OpCode:   StoreImmOp(size),
+		Dst:      dst,
+		Offset:   offset,
+		Constant: value,
+	}
+}
+
+// StoreXAddOp returns the OpCode to atomically add a register to a value in memory.
+func StoreXAddOp(size Size) OpCode {
+	return OpCode(StXClass).SetMode(XAddMode).SetSize(size)
+}
+
+// StoreXAdd atomically adds src to *dst.
+func StoreXAdd(dst, src Register, size Size) Instruction {
+	return Instruction{
+		OpCode: StoreXAddOp(size),
+		Dst:    dst,
+		Src:    src,
+	}
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/load_store_string.go b/vendor/github.com/cilium/ebpf/asm/load_store_string.go
new file mode 100644
index 00000000000..76d29a0756c
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/load_store_string.go
@@ -0,0 +1,80 @@
+// Code generated by "stringer -output load_store_string.go -type=Mode,Size"; DO NOT EDIT.
+
+package asm
+
+import "strconv"
+
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[InvalidMode-255]
+	_ = x[ImmMode-0]
+	_ = x[AbsMode-32]
+	_ = x[IndMode-64]
+	_ = x[MemMode-96]
+	_ = x[XAddMode-192]
+}
+
+const (
+	_Mode_name_0 = "ImmMode"
+	_Mode_name_1 = "AbsMode"
+	_Mode_name_2 = "IndMode"
+	_Mode_name_3 = "MemMode"
+	_Mode_name_4 = "XAddMode"
+	_Mode_name_5 = "InvalidMode"
+)
+
+func (i Mode) String() string {
+	switch {
+	case i == 0:
+		return _Mode_name_0
+	case i == 32:
+		return _Mode_name_1
+	case i == 64:
+		return _Mode_name_2
+	case i == 96:
+		return _Mode_name_3
+	case i == 192:
+		return _Mode_name_4
+	case i == 255:
+		return _Mode_name_5
+	default:
+		return "Mode(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+}
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[InvalidSize-255]
+	_ = x[DWord-24]
+	_ = x[Word-0]
+	_ = x[Half-8]
+	_ = x[Byte-16]
+}
+
+const (
+	_Size_name_0 = "Word"
+	_Size_name_1 = "Half"
+	_Size_name_2 = "Byte"
+	_Size_name_3 = "DWord"
+	_Size_name_4 = "InvalidSize"
+)
+
+func (i Size) String() string {
+	switch {
+	case i == 0:
+		return _Size_name_0
+	case i == 8:
+		return _Size_name_1
+	case i == 16:
+		return _Size_name_2
+	case i == 24:
+		return _Size_name_3
+	case i == 255:
+		return _Size_name_4
+	default:
+		return "Size(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/metadata.go b/vendor/github.com/cilium/ebpf/asm/metadata.go
new file mode 100644
index 00000000000..dd368a93603
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/metadata.go
@@ -0,0 +1,80 @@
+package asm
+
+// Metadata contains metadata about an instruction.
+type Metadata struct {
+	head *metaElement
+}
+
+type metaElement struct {
+	next       *metaElement
+	key, value interface{}
+}
+
+// Find the element containing key.
+//
+// Returns nil if there is no such element.
+func (m *Metadata) find(key interface{}) *metaElement {
+	for e := m.head; e != nil; e = e.next {
+		if e.key == key {
+			return e
+		}
+	}
+	return nil
+}
+
+// Remove an element from the linked list.
+//
+// Copies as many elements of the list as necessary to remove r, but doesn't
+// perform a full copy.
+func (m *Metadata) remove(r *metaElement) {
+	current := &m.head
+	for e := m.head; e != nil; e = e.next {
+		if e == r {
+			// We've found the element we want to remove.
+			*current = e.next
+
+			// No need to copy the tail.
+			return
+		}
+
+		// There is another element in front of the one we want to remove.
+		// We have to copy it to be able to change metaElement.next.
+		cpy := &metaElement{key: e.key, value: e.value}
+		*current = cpy
+		current = &cpy.next
+	}
+}
+
+// Set a key to a value.
+//
+// If value is nil, the key is removed. Avoids modifying old metadata by
+// copying if necessary.
+func (m *Metadata) Set(key, value interface{}) {
+	if e := m.find(key); e != nil {
+		if e.value == value {
+			// Key is present and the value is the same. Nothing to do.
+			return
+		}
+
+		// Key is present with a different value. Create a copy of the list
+		// which doesn't have the element in it.
+		m.remove(e)
+	}
+
+	// m.head is now a linked list that doesn't contain key.
+	if value == nil {
+		return
+	}
+
+	m.head = &metaElement{key: key, value: value, next: m.head}
+}
+
+// Get the value of a key.
+//
+// Returns nil if no value with the given key is present.
+func (m *Metadata) Get(key interface{}) interface{} {
+	if e := m.find(key); e != nil {
+		return e.value
+	}
+	return nil
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/opcode.go b/vendor/github.com/cilium/ebpf/asm/opcode.go
new file mode 100644
index 00000000000..9e3c30b0b3a
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/opcode.go
@@ -0,0 +1,271 @@
+package asm
+
+import (
+	"fmt"
+	"strings"
+)
+
+//go:generate stringer -output opcode_string.go -type=Class
+
+// Class of operations
+//
+//	msb      lsb
+//	+---+--+---+
+//	|  ??  |CLS|
+//	+---+--+---+
+type Class uint8
+
+const classMask OpCode = 0x07
+
+const (
+	// LdClass loads immediate values into registers.
+	// Also used for non-standard load operations from cBPF.
+	LdClass Class = 0x00
+	// LdXClass loads memory into registers.
+	LdXClass Class = 0x01
+	// StClass stores immediate values to memory.
+	StClass Class = 0x02
+	// StXClass stores registers to memory.
+	StXClass Class = 0x03
+	// ALUClass describes arithmetic operators.
+	ALUClass Class = 0x04
+	// JumpClass describes jump operators.
+	JumpClass Class = 0x05
+	// Jump32Class describes jump operators with 32-bit comparisons.
+	// Requires kernel 5.1.
+	Jump32Class Class = 0x06
+	// ALU64Class describes arithmetic operators in 64-bit mode.
+	ALU64Class Class = 0x07
+)
+
+// IsLoad checks if this is either LdClass or LdXClass.
+func (cls Class) IsLoad() bool {
+	return cls == LdClass || cls == LdXClass
+}
+
+// IsStore checks if this is either StClass or StXClass.
+func (cls Class) IsStore() bool {
+	return cls == StClass || cls == StXClass
+}
+
+func (cls Class) isLoadOrStore() bool {
+	return cls.IsLoad() || cls.IsStore()
+}
+
+// IsALU checks if this is either ALUClass or ALU64Class.
+func (cls Class) IsALU() bool {
+	return cls == ALUClass || cls == ALU64Class
+}
+
+// IsJump checks if this is either JumpClass or Jump32Class.
+func (cls Class) IsJump() bool {
+	return cls == JumpClass || cls == Jump32Class
+}
+
+func (cls Class) isJumpOrALU() bool {
+	return cls.IsJump() || cls.IsALU()
+}
+
+// OpCode is a packed eBPF opcode.
+//
+// Its encoding is defined by a Class value:
+//
+//	msb      lsb
+//	+----+-+---+
+//	| ???? |CLS|
+//	+----+-+---+
+type OpCode uint8
+
+// InvalidOpCode is returned by setters on OpCode
+const InvalidOpCode OpCode = 0xff
+
+// rawInstructions returns the number of BPF instructions required
+// to encode this opcode.
+func (op OpCode) rawInstructions() int {
+	if op.IsDWordLoad() {
+		return 2
+	}
+	return 1
+}
+
+func (op OpCode) IsDWordLoad() bool {
+	return op == LoadImmOp(DWord)
+}
+
+// Class returns the class of operation.
+func (op OpCode) Class() Class {
+	return Class(op & classMask)
+}
+
+// Mode returns the mode for load and store operations.
+func (op OpCode) Mode() Mode {
+	if !op.Class().isLoadOrStore() {
+		return InvalidMode
+	}
+	return Mode(op & modeMask)
+}
+
+// Size returns the size for load and store operations.
+func (op OpCode) Size() Size {
+	if !op.Class().isLoadOrStore() {
+		return InvalidSize
+	}
+	return Size(op & sizeMask)
+}
+
+// Source returns the source for branch and ALU operations.
+func (op OpCode) Source() Source {
+	if !op.Class().isJumpOrALU() || op.ALUOp() == Swap {
+		return InvalidSource
+	}
+	return Source(op & sourceMask)
+}
+
+// ALUOp returns the ALUOp.
+func (op OpCode) ALUOp() ALUOp {
+	if !op.Class().IsALU() {
+		return InvalidALUOp
+	}
+	return ALUOp(op & aluMask)
+}
+
+// Endianness returns the Endianness for a byte swap instruction.
+func (op OpCode) Endianness() Endianness {
+	if op.ALUOp() != Swap {
+		return InvalidEndian
+	}
+	return Endianness(op & endianMask)
+}
+
+// JumpOp returns the JumpOp.
+// Returns InvalidJumpOp if it doesn't encode a jump.
+func (op OpCode) JumpOp() JumpOp {
+	if !op.Class().IsJump() {
+		return InvalidJumpOp
+	}
+
+	jumpOp := JumpOp(op & jumpMask)
+
+	// Some JumpOps are only supported by JumpClass, not Jump32Class.
+	if op.Class() == Jump32Class && (jumpOp == Exit || jumpOp == Call || jumpOp == Ja) {
+		return InvalidJumpOp
+	}
+
+	return jumpOp
+}
+
+// SetMode sets the mode on load and store operations.
+//
+// Returns InvalidOpCode if op is of the wrong class.
+func (op OpCode) SetMode(mode Mode) OpCode {
+	if !op.Class().isLoadOrStore() || !valid(OpCode(mode), modeMask) {
+		return InvalidOpCode
+	}
+	return (op & ^modeMask) | OpCode(mode)
+}
+
+// SetSize sets the size on load and store operations.
+//
+// Returns InvalidOpCode if op is of the wrong class.
+func (op OpCode) SetSize(size Size) OpCode {
+	if !op.Class().isLoadOrStore() || !valid(OpCode(size), sizeMask) {
+		return InvalidOpCode
+	}
+	return (op & ^sizeMask) | OpCode(size)
+}
+
+// SetSource sets the source on jump and ALU operations.
+//
+// Returns InvalidOpCode if op is of the wrong class.
+func (op OpCode) SetSource(source Source) OpCode {
+	if !op.Class().isJumpOrALU() || !valid(OpCode(source), sourceMask) {
+		return InvalidOpCode
+	}
+	return (op & ^sourceMask) | OpCode(source)
+}
+
+// SetALUOp sets the ALUOp on ALU operations.
+//
+// Returns InvalidOpCode if op is of the wrong class.
+func (op OpCode) SetALUOp(alu ALUOp) OpCode {
+	if !op.Class().IsALU() || !valid(OpCode(alu), aluMask) {
+		return InvalidOpCode
+	}
+	return (op & ^aluMask) | OpCode(alu)
+}
+
+// SetJumpOp sets the JumpOp on jump operations.
+//
+// Returns InvalidOpCode if op is of the wrong class.
+func (op OpCode) SetJumpOp(jump JumpOp) OpCode {
+	if !op.Class().IsJump() || !valid(OpCode(jump), jumpMask) {
+		return InvalidOpCode
+	}
+
+	newOp := (op & ^jumpMask) | OpCode(jump)
+
+	// Check newOp is legal.
+	if newOp.JumpOp() == InvalidJumpOp {
+		return InvalidOpCode
+	}
+
+	return newOp
+}
+
+func (op OpCode) String() string {
+	var f strings.Builder
+
+	switch class := op.Class(); {
+	case class.isLoadOrStore():
+		f.WriteString(strings.TrimSuffix(class.String(), "Class"))
+
+		mode := op.Mode()
+		f.WriteString(strings.TrimSuffix(mode.String(), "Mode"))
+
+		switch op.Size() {
+		case DWord:
+			f.WriteString("DW")
+		case Word:
+			f.WriteString("W")
+		case Half:
+			f.WriteString("H")
+		case Byte:
+			f.WriteString("B")
+		}
+
+	case class.IsALU():
+		f.WriteString(op.ALUOp().String())
+
+		if op.ALUOp() == Swap {
+			// Width for Endian is controlled by Constant
+			f.WriteString(op.Endianness().String())
+		} else {
+			if class == ALUClass {
+				f.WriteString("32")
+			}
+
+			f.WriteString(strings.TrimSuffix(op.Source().String(), "Source"))
+		}
+
+	case class.IsJump():
+		f.WriteString(op.JumpOp().String())
+
+		if class == Jump32Class {
+			f.WriteString("32")
+		}
+
+		if jop := op.JumpOp(); jop != Exit && jop != Call {
+			f.WriteString(strings.TrimSuffix(op.Source().String(), "Source"))
+		}
+
+	default:
+		fmt.Fprintf(&f, "OpCode(%#x)", uint8(op))
+	}
+
+	return f.String()
+}
+
+// valid returns true if all bits in value are covered by mask.
+func valid(value, mask OpCode) bool {
+	return value & ^mask == 0
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/opcode_string.go b/vendor/github.com/cilium/ebpf/asm/opcode_string.go
new file mode 100644
index 00000000000..58bc3e7e7f0
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/opcode_string.go
@@ -0,0 +1,30 @@
+// Code generated by "stringer -output opcode_string.go -type=Class"; DO NOT EDIT.
+
+package asm
+
+import "strconv"
+
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[LdClass-0]
+	_ = x[LdXClass-1]
+	_ = x[StClass-2]
+	_ = x[StXClass-3]
+	_ = x[ALUClass-4]
+	_ = x[JumpClass-5]
+	_ = x[Jump32Class-6]
+	_ = x[ALU64Class-7]
+}
+
+const _Class_name = "LdClassLdXClassStClassStXClassALUClassJumpClassJump32ClassALU64Class"
+
+var _Class_index = [...]uint8{0, 7, 15, 22, 30, 38, 47, 58, 68}
+
+func (i Class) String() string {
+	if i >= Class(len(_Class_index)-1) {
+		return "Class(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+	return _Class_name[_Class_index[i]:_Class_index[i+1]]
+}
diff --git a/vendor/github.com/cilium/ebpf/asm/register.go b/vendor/github.com/cilium/ebpf/asm/register.go
new file mode 100644
index 00000000000..457a3b8a883
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/asm/register.go
@@ -0,0 +1,51 @@
+package asm
+
+import (
+	"fmt"
+)
+
+// Register is the source or destination of most operations.
+type Register uint8
+
+// R0 contains return values.
+const R0 Register = 0
+
+// Registers for function arguments.
+const (
+	R1 Register = R0 + 1 + iota
+	R2
+	R3
+	R4
+	R5
+)
+
+// Callee saved registers preserved by function calls.
+const (
+	R6 Register = R5 + 1 + iota
+	R7
+	R8
+	R9
+)
+
+// Read-only frame pointer to access stack.
+const (
+	R10 Register = R9 + 1
+	RFP          = R10
+)
+
+// Pseudo registers used by 64bit loads and jumps
+const (
+	PseudoMapFD     = R1 // BPF_PSEUDO_MAP_FD
+	PseudoMapValue  = R2 // BPF_PSEUDO_MAP_VALUE
+	PseudoCall      = R1 // BPF_PSEUDO_CALL
+	PseudoFunc      = R4 // BPF_PSEUDO_FUNC
+	PseudoKfuncCall = R2 // BPF_PSEUDO_KFUNC_CALL
+)
+
+func (r Register) String() string {
+	v := uint8(r)
+	if v == 10 {
+		return "rfp"
+	}
+	return fmt.Sprintf("r%d", v)
+}
diff --git a/vendor/github.com/cilium/ebpf/attachtype_string.go b/vendor/github.com/cilium/ebpf/attachtype_string.go
new file mode 100644
index 00000000000..add2a3b5cc9
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/attachtype_string.go
@@ -0,0 +1,66 @@
+// Code generated by "stringer -type AttachType -trimprefix Attach"; DO NOT EDIT.
+
+package ebpf
+
+import "strconv"
+
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[AttachNone-0]
+	_ = x[AttachCGroupInetIngress-0]
+	_ = x[AttachCGroupInetEgress-1]
+	_ = x[AttachCGroupInetSockCreate-2]
+	_ = x[AttachCGroupSockOps-3]
+	_ = x[AttachSkSKBStreamParser-4]
+	_ = x[AttachSkSKBStreamVerdict-5]
+	_ = x[AttachCGroupDevice-6]
+	_ = x[AttachSkMsgVerdict-7]
+	_ = x[AttachCGroupInet4Bind-8]
+	_ = x[AttachCGroupInet6Bind-9]
+	_ = x[AttachCGroupInet4Connect-10]
+	_ = x[AttachCGroupInet6Connect-11]
+	_ = x[AttachCGroupInet4PostBind-12]
+	_ = x[AttachCGroupInet6PostBind-13]
+	_ = x[AttachCGroupUDP4Sendmsg-14]
+	_ = x[AttachCGroupUDP6Sendmsg-15]
+	_ = x[AttachLircMode2-16]
+	_ = x[AttachFlowDissector-17]
+	_ = x[AttachCGroupSysctl-18]
+	_ = x[AttachCGroupUDP4Recvmsg-19]
+	_ = x[AttachCGroupUDP6Recvmsg-20]
+	_ = x[AttachCGroupGetsockopt-21]
+	_ = x[AttachCGroupSetsockopt-22]
+	_ = x[AttachTraceRawTp-23]
+	_ = x[AttachTraceFEntry-24]
+	_ = x[AttachTraceFExit-25]
+	_ = x[AttachModifyReturn-26]
+	_ = x[AttachLSMMac-27]
+	_ = x[AttachTraceIter-28]
+	_ = x[AttachCgroupInet4GetPeername-29]
+	_ = x[AttachCgroupInet6GetPeername-30]
+	_ = x[AttachCgroupInet4GetSockname-31]
+	_ = x[AttachCgroupInet6GetSockname-32]
+	_ = x[AttachXDPDevMap-33]
+	_ = x[AttachCgroupInetSockRelease-34]
+	_ = x[AttachXDPCPUMap-35]
+	_ = x[AttachSkLookup-36]
+	_ = x[AttachXDP-37]
+	_ = x[AttachSkSKBVerdict-38]
+	_ = x[AttachSkReuseportSelect-39]
+	_ = x[AttachSkReuseportSelectOrMigrate-40]
+	_ = x[AttachPerfEvent-41]
+	_ = x[AttachTraceKprobeMulti-42]
+}
+
+const _AttachType_name = "NoneCGroupInetEgressCGroupInetSockCreateCGroupSockOpsSkSKBStreamParserSkSKBStreamVerdictCGroupDeviceSkMsgVerdictCGroupInet4BindCGroupInet6BindCGroupInet4ConnectCGroupInet6ConnectCGroupInet4PostBindCGroupInet6PostBindCGroupUDP4SendmsgCGroupUDP6SendmsgLircMode2FlowDissectorCGroupSysctlCGroupUDP4RecvmsgCGroupUDP6RecvmsgCGroupGetsockoptCGroupSetsockoptTraceRawTpTraceFEntryTraceFExitModifyReturnLSMMacTraceIterCgroupInet4GetPeernameCgroupInet6GetPeernameCgroupInet4GetSocknameCgroupInet6GetSocknameXDPDevMapCgroupInetSockReleaseXDPCPUMapSkLookupXDPSkSKBVerdictSkReuseportSelectSkReuseportSelectOrMigratePerfEventTraceKprobeMulti"
+
+var _AttachType_index = [...]uint16{0, 4, 20, 40, 53, 70, 88, 100, 112, 127, 142, 160, 178, 197, 216, 233, 250, 259, 272, 284, 301, 318, 334, 350, 360, 371, 381, 393, 399, 408, 430, 452, 474, 496, 505, 526, 535, 543, 546, 558, 575, 601, 610, 626}
+
+func (i AttachType) String() string {
+	if i >= AttachType(len(_AttachType_index)-1) {
+		return "AttachType(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+	return _AttachType_name[_AttachType_index[i]:_AttachType_index[i+1]]
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/btf.go b/vendor/github.com/cilium/ebpf/btf/btf.go
new file mode 100644
index 00000000000..86eb7d6819d
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/btf.go
@@ -0,0 +1,869 @@
+package btf
+
+import (
+	"bufio"
+	"debug/elf"
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"io"
+	"math"
+	"os"
+	"reflect"
+	"sync"
+
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+const btfMagic = 0xeB9F
+
+// Errors returned by BTF functions.
+var (
+	ErrNotSupported    = internal.ErrNotSupported
+	ErrNotFound        = errors.New("not found")
+	ErrNoExtendedInfo  = errors.New("no extended info")
+	ErrMultipleMatches = errors.New("multiple matching types")
+)
+
+// ID represents the unique ID of a BTF object.
+type ID = sys.BTFID
+
+// Spec allows querying a set of Types and loading the set into the
+// kernel.
+type Spec struct {
+	// All types contained by the spec, not including types from the base in
+	// case the spec was parsed from split BTF.
+	types []Type
+
+	// Type IDs indexed by type.
+	typeIDs map[Type]TypeID
+
+	// The ID of the first type in types.
+	firstTypeID TypeID
+
+	// Types indexed by essential name.
+	// Includes all struct flavors and types with the same name.
+	namedTypes map[essentialName][]Type
+
+	// String table from ELF, may be nil.
+	strings *stringTable
+
+	// Byte order of the ELF we decoded the spec from, may be nil.
+	byteOrder binary.ByteOrder
+}
+
+var btfHeaderLen = binary.Size(&btfHeader{})
+
+type btfHeader struct {
+	Magic   uint16
+	Version uint8
+	Flags   uint8
+	HdrLen  uint32
+
+	TypeOff   uint32
+	TypeLen   uint32
+	StringOff uint32
+	StringLen uint32
+}
+
+// typeStart returns the offset from the beginning of the .BTF section
+// to the start of its type entries.
+func (h *btfHeader) typeStart() int64 {
+	return int64(h.HdrLen + h.TypeOff)
+}
+
+// stringStart returns the offset from the beginning of the .BTF section
+// to the start of its string table.
+func (h *btfHeader) stringStart() int64 {
+	return int64(h.HdrLen + h.StringOff)
+}
+
+// newSpec creates a Spec containing only Void.
+func newSpec() *Spec {
+	return &Spec{
+		[]Type{(*Void)(nil)},
+		map[Type]TypeID{(*Void)(nil): 0},
+		0,
+		make(map[essentialName][]Type),
+		nil,
+		nil,
+	}
+}
+
+// LoadSpec opens file and calls LoadSpecFromReader on it.
+func LoadSpec(file string) (*Spec, error) {
+	fh, err := os.Open(file)
+	if err != nil {
+		return nil, err
+	}
+	defer fh.Close()
+
+	return LoadSpecFromReader(fh)
+}
+
+// LoadSpecFromReader reads from an ELF or a raw BTF blob.
+//
+// Returns ErrNotFound if reading from an ELF which contains no BTF. ExtInfos
+// may be nil.
+func LoadSpecFromReader(rd io.ReaderAt) (*Spec, error) {
+	file, err := internal.NewSafeELFFile(rd)
+	if err != nil {
+		if bo := guessRawBTFByteOrder(rd); bo != nil {
+			return loadRawSpec(io.NewSectionReader(rd, 0, math.MaxInt64), bo, nil)
+		}
+
+		return nil, err
+	}
+
+	return loadSpecFromELF(file)
+}
+
+// LoadSpecAndExtInfosFromReader reads from an ELF.
+//
+// ExtInfos may be nil if the ELF doesn't contain section metadata.
+// Returns ErrNotFound if the ELF contains no BTF.
+func LoadSpecAndExtInfosFromReader(rd io.ReaderAt) (*Spec, *ExtInfos, error) {
+	file, err := internal.NewSafeELFFile(rd)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	spec, err := loadSpecFromELF(file)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	extInfos, err := loadExtInfosFromELF(file, spec)
+	if err != nil && !errors.Is(err, ErrNotFound) {
+		return nil, nil, err
+	}
+
+	return spec, extInfos, nil
+}
+
+// symbolOffsets extracts all symbols offsets from an ELF and indexes them by
+// section and variable name.
+//
+// References to variables in BTF data sections carry unsigned 32-bit offsets.
+// Some ELF symbols (e.g. in vmlinux) may point to virtual memory that is well
+// beyond this range. Since these symbols cannot be described by BTF info,
+// ignore them here.
+func symbolOffsets(file *internal.SafeELFFile) (map[symbol]uint32, error) {
+	symbols, err := file.Symbols()
+	if err != nil {
+		return nil, fmt.Errorf("can't read symbols: %v", err)
+	}
+
+	offsets := make(map[symbol]uint32)
+	for _, sym := range symbols {
+		if idx := sym.Section; idx >= elf.SHN_LORESERVE && idx <= elf.SHN_HIRESERVE {
+			// Ignore things like SHN_ABS
+			continue
+		}
+
+		if sym.Value > math.MaxUint32 {
+			// VarSecinfo offset is u32, cannot reference symbols in higher regions.
+			continue
+		}
+
+		if int(sym.Section) >= len(file.Sections) {
+			return nil, fmt.Errorf("symbol %s: invalid section %d", sym.Name, sym.Section)
+		}
+
+		secName := file.Sections[sym.Section].Name
+		offsets[symbol{secName, sym.Name}] = uint32(sym.Value)
+	}
+
+	return offsets, nil
+}
+
+func loadSpecFromELF(file *internal.SafeELFFile) (*Spec, error) {
+	var (
+		btfSection   *elf.Section
+		sectionSizes = make(map[string]uint32)
+	)
+
+	for _, sec := range file.Sections {
+		switch sec.Name {
+		case ".BTF":
+			btfSection = sec
+		default:
+			if sec.Type != elf.SHT_PROGBITS && sec.Type != elf.SHT_NOBITS {
+				break
+			}
+
+			if sec.Size > math.MaxUint32 {
+				return nil, fmt.Errorf("section %s exceeds maximum size", sec.Name)
+			}
+
+			sectionSizes[sec.Name] = uint32(sec.Size)
+		}
+	}
+
+	if btfSection == nil {
+		return nil, fmt.Errorf("btf: %w", ErrNotFound)
+	}
+
+	offsets, err := symbolOffsets(file)
+	if err != nil {
+		return nil, err
+	}
+
+	if btfSection.ReaderAt == nil {
+		return nil, fmt.Errorf("compressed BTF is not supported")
+	}
+
+	spec, err := loadRawSpec(btfSection.ReaderAt, file.ByteOrder, nil)
+	if err != nil {
+		return nil, err
+	}
+
+	err = fixupDatasec(spec.types, sectionSizes, offsets)
+	if err != nil {
+		return nil, err
+	}
+
+	return spec, nil
+}
+
+func loadRawSpec(btf io.ReaderAt, bo binary.ByteOrder, base *Spec) (*Spec, error) {
+	var (
+		baseStrings *stringTable
+		firstTypeID TypeID
+		err         error
+	)
+
+	if base != nil {
+		if base.firstTypeID != 0 {
+			return nil, fmt.Errorf("can't use split BTF as base")
+		}
+
+		if base.strings == nil {
+			return nil, fmt.Errorf("parse split BTF: base must be loaded from an ELF")
+		}
+
+		baseStrings = base.strings
+
+		firstTypeID, err = base.nextTypeID()
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	rawTypes, rawStrings, err := parseBTF(btf, bo, baseStrings)
+	if err != nil {
+		return nil, err
+	}
+
+	types, err := inflateRawTypes(rawTypes, rawStrings, base)
+	if err != nil {
+		return nil, err
+	}
+
+	typeIDs, typesByName := indexTypes(types, firstTypeID)
+
+	return &Spec{
+		namedTypes:  typesByName,
+		typeIDs:     typeIDs,
+		types:       types,
+		firstTypeID: firstTypeID,
+		strings:     rawStrings,
+		byteOrder:   bo,
+	}, nil
+}
+
+func indexTypes(types []Type, firstTypeID TypeID) (map[Type]TypeID, map[essentialName][]Type) {
+	namedTypes := 0
+	for _, typ := range types {
+		if typ.TypeName() != "" {
+			// Do a pre-pass to figure out how big types by name has to be.
+			// Most types have unique names, so it's OK to ignore essentialName
+			// here.
+			namedTypes++
+		}
+	}
+
+	typeIDs := make(map[Type]TypeID, len(types))
+	typesByName := make(map[essentialName][]Type, namedTypes)
+
+	for i, typ := range types {
+		if name := newEssentialName(typ.TypeName()); name != "" {
+			typesByName[name] = append(typesByName[name], typ)
+		}
+		typeIDs[typ] = firstTypeID + TypeID(i)
+	}
+
+	return typeIDs, typesByName
+}
+
+// LoadKernelSpec returns the current kernel's BTF information.
+//
+// Defaults to /sys/kernel/btf/vmlinux and falls back to scanning the file system
+// for vmlinux ELFs. Returns an error wrapping ErrNotSupported if BTF is not enabled.
+func LoadKernelSpec() (*Spec, error) {
+	spec, _, err := kernelSpec()
+	if err != nil {
+		return nil, err
+	}
+	return spec.Copy(), nil
+}
+
+var kernelBTF struct {
+	sync.RWMutex
+	spec *Spec
+	// True if the spec was read from an ELF instead of raw BTF in /sys.
+	fallback bool
+}
+
+// FlushKernelSpec removes any cached kernel type information.
+func FlushKernelSpec() {
+	kernelBTF.Lock()
+	defer kernelBTF.Unlock()
+
+	kernelBTF.spec, kernelBTF.fallback = nil, false
+}
+
+func kernelSpec() (*Spec, bool, error) {
+	kernelBTF.RLock()
+	spec, fallback := kernelBTF.spec, kernelBTF.fallback
+	kernelBTF.RUnlock()
+
+	if spec == nil {
+		kernelBTF.Lock()
+		defer kernelBTF.Unlock()
+
+		spec, fallback = kernelBTF.spec, kernelBTF.fallback
+	}
+
+	if spec != nil {
+		return spec, fallback, nil
+	}
+
+	spec, fallback, err := loadKernelSpec()
+	if err != nil {
+		return nil, false, err
+	}
+
+	kernelBTF.spec, kernelBTF.fallback = spec, fallback
+	return spec, fallback, nil
+}
+
+func loadKernelSpec() (_ *Spec, fallback bool, _ error) {
+	fh, err := os.Open("/sys/kernel/btf/vmlinux")
+	if err == nil {
+		defer fh.Close()
+
+		spec, err := loadRawSpec(fh, internal.NativeEndian, nil)
+		return spec, false, err
+	}
+
+	file, err := findVMLinux()
+	if err != nil {
+		return nil, false, err
+	}
+	defer file.Close()
+
+	spec, err := loadSpecFromELF(file)
+	return spec, true, err
+}
+
+// findVMLinux scans multiple well-known paths for vmlinux kernel images.
+func findVMLinux() (*internal.SafeELFFile, error) {
+	release, err := internal.KernelRelease()
+	if err != nil {
+		return nil, err
+	}
+
+	// use same list of locations as libbpf
+	// https://github.com/libbpf/libbpf/blob/9a3a42608dbe3731256a5682a125ac1e23bced8f/src/btf.c#L3114-L3122
+	locations := []string{
+		"/boot/vmlinux-%s",
+		"/lib/modules/%s/vmlinux-%[1]s",
+		"/lib/modules/%s/build/vmlinux",
+		"/usr/lib/modules/%s/kernel/vmlinux",
+		"/usr/lib/debug/boot/vmlinux-%s",
+		"/usr/lib/debug/boot/vmlinux-%s.debug",
+		"/usr/lib/debug/lib/modules/%s/vmlinux",
+	}
+
+	for _, loc := range locations {
+		file, err := internal.OpenSafeELFFile(fmt.Sprintf(loc, release))
+		if errors.Is(err, os.ErrNotExist) {
+			continue
+		}
+		return file, err
+	}
+
+	return nil, fmt.Errorf("no BTF found for kernel version %s: %w", release, internal.ErrNotSupported)
+}
+
+// parseBTFHeader parses the header of the .BTF section.
+func parseBTFHeader(r io.Reader, bo binary.ByteOrder) (*btfHeader, error) {
+	var header btfHeader
+	if err := binary.Read(r, bo, &header); err != nil {
+		return nil, fmt.Errorf("can't read header: %v", err)
+	}
+
+	if header.Magic != btfMagic {
+		return nil, fmt.Errorf("incorrect magic value %v", header.Magic)
+	}
+
+	if header.Version != 1 {
+		return nil, fmt.Errorf("unexpected version %v", header.Version)
+	}
+
+	if header.Flags != 0 {
+		return nil, fmt.Errorf("unsupported flags %v", header.Flags)
+	}
+
+	remainder := int64(header.HdrLen) - int64(binary.Size(&header))
+	if remainder < 0 {
+		return nil, errors.New("header length shorter than btfHeader size")
+	}
+
+	if _, err := io.CopyN(internal.DiscardZeroes{}, r, remainder); err != nil {
+		return nil, fmt.Errorf("header padding: %v", err)
+	}
+
+	return &header, nil
+}
+
+func guessRawBTFByteOrder(r io.ReaderAt) binary.ByteOrder {
+	buf := new(bufio.Reader)
+	for _, bo := range []binary.ByteOrder{
+		binary.LittleEndian,
+		binary.BigEndian,
+	} {
+		buf.Reset(io.NewSectionReader(r, 0, math.MaxInt64))
+		if _, err := parseBTFHeader(buf, bo); err == nil {
+			return bo
+		}
+	}
+
+	return nil
+}
+
+// parseBTF reads a .BTF section into memory and parses it into a list of
+// raw types and a string table.
+func parseBTF(btf io.ReaderAt, bo binary.ByteOrder, baseStrings *stringTable) ([]rawType, *stringTable, error) {
+	buf := internal.NewBufferedSectionReader(btf, 0, math.MaxInt64)
+	header, err := parseBTFHeader(buf, bo)
+	if err != nil {
+		return nil, nil, fmt.Errorf("parsing .BTF header: %v", err)
+	}
+
+	rawStrings, err := readStringTable(io.NewSectionReader(btf, header.stringStart(), int64(header.StringLen)),
+		baseStrings)
+	if err != nil {
+		return nil, nil, fmt.Errorf("can't read type names: %w", err)
+	}
+
+	buf.Reset(io.NewSectionReader(btf, header.typeStart(), int64(header.TypeLen)))
+	rawTypes, err := readTypes(buf, bo, header.TypeLen)
+	if err != nil {
+		return nil, nil, fmt.Errorf("can't read types: %w", err)
+	}
+
+	return rawTypes, rawStrings, nil
+}
+
+type symbol struct {
+	section string
+	name    string
+}
+
+// fixupDatasec attempts to patch up missing info in Datasecs and its members by
+// supplementing them with information from the ELF headers and symbol table.
+func fixupDatasec(types []Type, sectionSizes map[string]uint32, offsets map[symbol]uint32) error {
+	for _, typ := range types {
+		ds, ok := typ.(*Datasec)
+		if !ok {
+			continue
+		}
+
+		name := ds.Name
+
+		// Some Datasecs are virtual and don't have corresponding ELF sections.
+		switch name {
+		case ".ksyms":
+			// .ksyms describes forward declarations of kfunc signatures.
+			// Nothing to fix up, all sizes and offsets are 0.
+			for _, vsi := range ds.Vars {
+				_, ok := vsi.Type.(*Func)
+				if !ok {
+					// Only Funcs are supported in the .ksyms Datasec.
+					return fmt.Errorf("data section %s: expected *btf.Func, not %T: %w", name, vsi.Type, ErrNotSupported)
+				}
+			}
+
+			continue
+		case ".kconfig":
+			// .kconfig has a size of 0 and has all members' offsets set to 0.
+			// Fix up all offsets and set the Datasec's size.
+			if err := fixupDatasecLayout(ds); err != nil {
+				return err
+			}
+
+			// Fix up extern to global linkage to avoid a BTF verifier error.
+			for _, vsi := range ds.Vars {
+				vsi.Type.(*Var).Linkage = GlobalVar
+			}
+
+			continue
+		}
+
+		if ds.Size != 0 {
+			continue
+		}
+
+		ds.Size, ok = sectionSizes[name]
+		if !ok {
+			return fmt.Errorf("data section %s: missing size", name)
+		}
+
+		for i := range ds.Vars {
+			symName := ds.Vars[i].Type.TypeName()
+			ds.Vars[i].Offset, ok = offsets[symbol{name, symName}]
+			if !ok {
+				return fmt.Errorf("data section %s: missing offset for symbol %s", name, symName)
+			}
+		}
+	}
+
+	return nil
+}
+
+// fixupDatasecLayout populates ds.Vars[].Offset according to var sizes and
+// alignment. Calculate and set ds.Size.
+func fixupDatasecLayout(ds *Datasec) error {
+	var off uint32
+
+	for i, vsi := range ds.Vars {
+		v, ok := vsi.Type.(*Var)
+		if !ok {
+			return fmt.Errorf("member %d: unsupported type %T", i, vsi.Type)
+		}
+
+		size, err := Sizeof(v.Type)
+		if err != nil {
+			return fmt.Errorf("variable %s: getting size: %w", v.Name, err)
+		}
+		align, err := alignof(v.Type)
+		if err != nil {
+			return fmt.Errorf("variable %s: getting alignment: %w", v.Name, err)
+		}
+
+		// Align the current member based on the offset of the end of the previous
+		// member and the alignment of the current member.
+		off = internal.Align(off, uint32(align))
+
+		ds.Vars[i].Offset = off
+
+		off += uint32(size)
+	}
+
+	ds.Size = off
+
+	return nil
+}
+
+// Copy creates a copy of Spec.
+func (s *Spec) Copy() *Spec {
+	types := copyTypes(s.types, nil)
+	typeIDs, typesByName := indexTypes(types, s.firstTypeID)
+
+	// NB: Other parts of spec are not copied since they are immutable.
+	return &Spec{
+		types,
+		typeIDs,
+		s.firstTypeID,
+		typesByName,
+		s.strings,
+		s.byteOrder,
+	}
+}
+
+type sliceWriter []byte
+
+func (sw sliceWriter) Write(p []byte) (int, error) {
+	if len(p) != len(sw) {
+		return 0, errors.New("size doesn't match")
+	}
+
+	return copy(sw, p), nil
+}
+
+// nextTypeID returns the next unallocated type ID or an error if there are no
+// more type IDs.
+func (s *Spec) nextTypeID() (TypeID, error) {
+	id := s.firstTypeID + TypeID(len(s.types))
+	if id < s.firstTypeID {
+		return 0, fmt.Errorf("no more type IDs")
+	}
+	return id, nil
+}
+
+// TypeByID returns the BTF Type with the given type ID.
+//
+// Returns an error wrapping ErrNotFound if a Type with the given ID
+// does not exist in the Spec.
+func (s *Spec) TypeByID(id TypeID) (Type, error) {
+	if id < s.firstTypeID {
+		return nil, fmt.Errorf("look up type with ID %d (first ID is %d): %w", id, s.firstTypeID, ErrNotFound)
+	}
+
+	index := int(id - s.firstTypeID)
+	if index >= len(s.types) {
+		return nil, fmt.Errorf("look up type with ID %d: %w", id, ErrNotFound)
+	}
+
+	return s.types[index], nil
+}
+
+// TypeID returns the ID for a given Type.
+//
+// Returns an error wrapping ErrNoFound if the type isn't part of the Spec.
+func (s *Spec) TypeID(typ Type) (TypeID, error) {
+	if _, ok := typ.(*Void); ok {
+		// Equality is weird for void, since it is a zero sized type.
+		return 0, nil
+	}
+
+	id, ok := s.typeIDs[typ]
+	if !ok {
+		return 0, fmt.Errorf("no ID for type %s: %w", typ, ErrNotFound)
+	}
+
+	return id, nil
+}
+
+// AnyTypesByName returns a list of BTF Types with the given name.
+//
+// If the BTF blob describes multiple compilation units like vmlinux, multiple
+// Types with the same name and kind can exist, but might not describe the same
+// data structure.
+//
+// Returns an error wrapping ErrNotFound if no matching Type exists in the Spec.
+func (s *Spec) AnyTypesByName(name string) ([]Type, error) {
+	types := s.namedTypes[newEssentialName(name)]
+	if len(types) == 0 {
+		return nil, fmt.Errorf("type name %s: %w", name, ErrNotFound)
+	}
+
+	// Return a copy to prevent changes to namedTypes.
+	result := make([]Type, 0, len(types))
+	for _, t := range types {
+		// Match against the full name, not just the essential one
+		// in case the type being looked up is a struct flavor.
+		if t.TypeName() == name {
+			result = append(result, t)
+		}
+	}
+	return result, nil
+}
+
+// AnyTypeByName returns a Type with the given name.
+//
+// Returns an error if multiple types of that name exist.
+func (s *Spec) AnyTypeByName(name string) (Type, error) {
+	types, err := s.AnyTypesByName(name)
+	if err != nil {
+		return nil, err
+	}
+
+	if len(types) > 1 {
+		return nil, fmt.Errorf("found multiple types: %v", types)
+	}
+
+	return types[0], nil
+}
+
+// TypeByName searches for a Type with a specific name. Since multiple Types
+// with the same name can exist, the parameter typ is taken to narrow down the
+// search in case of a clash.
+//
+// typ must be a non-nil pointer to an implementation of a Type. On success, the
+// address of the found Type will be copied to typ.
+//
+// Returns an error wrapping ErrNotFound if no matching Type exists in the Spec.
+// Returns an error wrapping ErrMultipleTypes if multiple candidates are found.
+func (s *Spec) TypeByName(name string, typ interface{}) error {
+	typeInterface := reflect.TypeOf((*Type)(nil)).Elem()
+
+	// typ may be **T or *Type
+	typValue := reflect.ValueOf(typ)
+	if typValue.Kind() != reflect.Ptr {
+		return fmt.Errorf("%T is not a pointer", typ)
+	}
+
+	typPtr := typValue.Elem()
+	if !typPtr.CanSet() {
+		return fmt.Errorf("%T cannot be set", typ)
+	}
+
+	wanted := typPtr.Type()
+	if wanted == typeInterface {
+		// This is *Type. Unwrap the value's type.
+		wanted = typPtr.Elem().Type()
+	}
+
+	if !wanted.AssignableTo(typeInterface) {
+		return fmt.Errorf("%T does not satisfy Type interface", typ)
+	}
+
+	types, err := s.AnyTypesByName(name)
+	if err != nil {
+		return err
+	}
+
+	var candidate Type
+	for _, typ := range types {
+		if reflect.TypeOf(typ) != wanted {
+			continue
+		}
+
+		if candidate != nil {
+			return fmt.Errorf("type %s(%T): %w", name, typ, ErrMultipleMatches)
+		}
+
+		candidate = typ
+	}
+
+	if candidate == nil {
+		return fmt.Errorf("%s %s: %w", wanted, name, ErrNotFound)
+	}
+
+	typPtr.Set(reflect.ValueOf(candidate))
+
+	return nil
+}
+
+// LoadSplitSpecFromReader loads split BTF from a reader.
+//
+// Types from base are used to resolve references in the split BTF.
+// The returned Spec only contains types from the split BTF, not from the base.
+func LoadSplitSpecFromReader(r io.ReaderAt, base *Spec) (*Spec, error) {
+	return loadRawSpec(r, internal.NativeEndian, base)
+}
+
+// TypesIterator iterates over types of a given spec.
+type TypesIterator struct {
+	types []Type
+	index int
+	// The last visited type in the spec.
+	Type Type
+}
+
+// Iterate returns the types iterator.
+func (s *Spec) Iterate() *TypesIterator {
+	// We share the backing array of types with the Spec. This is safe since
+	// we don't allow deletion or shuffling of types.
+	return &TypesIterator{types: s.types, index: 0}
+}
+
+// Next returns true as long as there are any remaining types.
+func (iter *TypesIterator) Next() bool {
+	if len(iter.types) <= iter.index {
+		return false
+	}
+
+	iter.Type = iter.types[iter.index]
+	iter.index++
+	return true
+}
+
+// haveBTF attempts to load a BTF blob containing an Int. It should pass on any
+// kernel that supports BPF_BTF_LOAD.
+var haveBTF = internal.NewFeatureTest("BTF", "4.18", func() error {
+	// 0-length anonymous integer
+	err := probeBTF(&Int{})
+	if errors.Is(err, unix.EINVAL) || errors.Is(err, unix.EPERM) {
+		return internal.ErrNotSupported
+	}
+	return err
+})
+
+// haveMapBTF attempts to load a minimal BTF blob containing a Var. It is
+// used as a proxy for .bss, .data and .rodata map support, which generally
+// come with a Var and Datasec. These were introduced in Linux 5.2.
+var haveMapBTF = internal.NewFeatureTest("Map BTF (Var/Datasec)", "5.2", func() error {
+	if err := haveBTF(); err != nil {
+		return err
+	}
+
+	v := &Var{
+		Name: "a",
+		Type: &Pointer{(*Void)(nil)},
+	}
+
+	err := probeBTF(v)
+	if errors.Is(err, unix.EINVAL) || errors.Is(err, unix.EPERM) {
+		// Treat both EINVAL and EPERM as not supported: creating the map may still
+		// succeed without Btf* attrs.
+		return internal.ErrNotSupported
+	}
+	return err
+})
+
+// haveProgBTF attempts to load a BTF blob containing a Func and FuncProto. It
+// is used as a proxy for ext_info (func_info) support, which depends on
+// Func(Proto) by definition.
+var haveProgBTF = internal.NewFeatureTest("Program BTF (func/line_info)", "5.0", func() error {
+	if err := haveBTF(); err != nil {
+		return err
+	}
+
+	fn := &Func{
+		Name: "a",
+		Type: &FuncProto{Return: (*Void)(nil)},
+	}
+
+	err := probeBTF(fn)
+	if errors.Is(err, unix.EINVAL) || errors.Is(err, unix.EPERM) {
+		return internal.ErrNotSupported
+	}
+	return err
+})
+
+var haveFuncLinkage = internal.NewFeatureTest("BTF func linkage", "5.6", func() error {
+	if err := haveProgBTF(); err != nil {
+		return err
+	}
+
+	fn := &Func{
+		Name:    "a",
+		Type:    &FuncProto{Return: (*Void)(nil)},
+		Linkage: GlobalFunc,
+	}
+
+	err := probeBTF(fn)
+	if errors.Is(err, unix.EINVAL) {
+		return internal.ErrNotSupported
+	}
+	return err
+})
+
+func probeBTF(typ Type) error {
+	b, err := NewBuilder([]Type{typ})
+	if err != nil {
+		return err
+	}
+
+	buf, err := b.Marshal(nil, nil)
+	if err != nil {
+		return err
+	}
+
+	fd, err := sys.BtfLoad(&sys.BtfLoadAttr{
+		Btf:     sys.NewSlicePointer(buf),
+		BtfSize: uint32(len(buf)),
+	})
+
+	if err == nil {
+		fd.Close()
+	}
+
+	return err
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/btf_types.go b/vendor/github.com/cilium/ebpf/btf/btf_types.go
new file mode 100644
index 00000000000..a253b7c9b9e
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/btf_types.go
@@ -0,0 +1,371 @@
+package btf
+
+import (
+	"encoding/binary"
+	"fmt"
+	"io"
+	"unsafe"
+)
+
+//go:generate stringer -linecomment -output=btf_types_string.go -type=FuncLinkage,VarLinkage,btfKind
+
+// btfKind describes a Type.
+type btfKind uint8
+
+// Equivalents of the BTF_KIND_* constants.
+const (
+	kindUnknown  btfKind = iota // Unknown
+	kindInt                     // Int
+	kindPointer                 // Pointer
+	kindArray                   // Array
+	kindStruct                  // Struct
+	kindUnion                   // Union
+	kindEnum                    // Enum
+	kindForward                 // Forward
+	kindTypedef                 // Typedef
+	kindVolatile                // Volatile
+	kindConst                   // Const
+	kindRestrict                // Restrict
+	// Added ~4.20
+	kindFunc      // Func
+	kindFuncProto // FuncProto
+	// Added ~5.1
+	kindVar     // Var
+	kindDatasec // Datasec
+	// Added ~5.13
+	kindFloat // Float
+	// Added 5.16
+	kindDeclTag // DeclTag
+	kindTypeTag // TypeTag
+	// Added 6.0
+	kindEnum64 // Enum64
+)
+
+// FuncLinkage describes BTF function linkage metadata.
+type FuncLinkage int
+
+// Equivalent of enum btf_func_linkage.
+const (
+	StaticFunc FuncLinkage = iota // static
+	GlobalFunc                    // global
+	ExternFunc                    // extern
+)
+
+// VarLinkage describes BTF variable linkage metadata.
+type VarLinkage int
+
+const (
+	StaticVar VarLinkage = iota // static
+	GlobalVar                   // global
+	ExternVar                   // extern
+)
+
+const (
+	btfTypeKindShift     = 24
+	btfTypeKindLen       = 5
+	btfTypeVlenShift     = 0
+	btfTypeVlenMask      = 16
+	btfTypeKindFlagShift = 31
+	btfTypeKindFlagMask  = 1
+)
+
+var btfTypeLen = binary.Size(btfType{})
+
+// btfType is equivalent to struct btf_type in Documentation/bpf/btf.rst.
+type btfType struct {
+	NameOff uint32
+	/* "info" bits arrangement
+	 * bits  0-15: vlen (e.g. # of struct's members), linkage
+	 * bits 16-23: unused
+	 * bits 24-28: kind (e.g. int, ptr, array...etc)
+	 * bits 29-30: unused
+	 * bit     31: kind_flag, currently used by
+	 *             struct, union and fwd
+	 */
+	Info uint32
+	/* "size" is used by INT, ENUM, STRUCT and UNION.
+	 * "size" tells the size of the type it is describing.
+	 *
+	 * "type" is used by PTR, TYPEDEF, VOLATILE, CONST, RESTRICT,
+	 * FUNC and FUNC_PROTO.
+	 * "type" is a type_id referring to another type.
+	 */
+	SizeType uint32
+}
+
+func mask(len uint32) uint32 {
+	return (1 << len) - 1
+}
+
+func readBits(value, len, shift uint32) uint32 {
+	return (value >> shift) & mask(len)
+}
+
+func writeBits(value, len, shift, new uint32) uint32 {
+	value &^= mask(len) << shift
+	value |= (new & mask(len)) << shift
+	return value
+}
+
+func (bt *btfType) info(len, shift uint32) uint32 {
+	return readBits(bt.Info, len, shift)
+}
+
+func (bt *btfType) setInfo(value, len, shift uint32) {
+	bt.Info = writeBits(bt.Info, len, shift, value)
+}
+
+func (bt *btfType) Kind() btfKind {
+	return btfKind(bt.info(btfTypeKindLen, btfTypeKindShift))
+}
+
+func (bt *btfType) SetKind(kind btfKind) {
+	bt.setInfo(uint32(kind), btfTypeKindLen, btfTypeKindShift)
+}
+
+func (bt *btfType) Vlen() int {
+	return int(bt.info(btfTypeVlenMask, btfTypeVlenShift))
+}
+
+func (bt *btfType) SetVlen(vlen int) {
+	bt.setInfo(uint32(vlen), btfTypeVlenMask, btfTypeVlenShift)
+}
+
+func (bt *btfType) kindFlagBool() bool {
+	return bt.info(btfTypeKindFlagMask, btfTypeKindFlagShift) == 1
+}
+
+func (bt *btfType) setKindFlagBool(set bool) {
+	var value uint32
+	if set {
+		value = 1
+	}
+	bt.setInfo(value, btfTypeKindFlagMask, btfTypeKindFlagShift)
+}
+
+// Bitfield returns true if the struct or union contain a bitfield.
+func (bt *btfType) Bitfield() bool {
+	return bt.kindFlagBool()
+}
+
+func (bt *btfType) SetBitfield(isBitfield bool) {
+	bt.setKindFlagBool(isBitfield)
+}
+
+func (bt *btfType) FwdKind() FwdKind {
+	return FwdKind(bt.info(btfTypeKindFlagMask, btfTypeKindFlagShift))
+}
+
+func (bt *btfType) SetFwdKind(kind FwdKind) {
+	bt.setInfo(uint32(kind), btfTypeKindFlagMask, btfTypeKindFlagShift)
+}
+
+func (bt *btfType) Signed() bool {
+	return bt.kindFlagBool()
+}
+
+func (bt *btfType) SetSigned(signed bool) {
+	bt.setKindFlagBool(signed)
+}
+
+func (bt *btfType) Linkage() FuncLinkage {
+	return FuncLinkage(bt.info(btfTypeVlenMask, btfTypeVlenShift))
+}
+
+func (bt *btfType) SetLinkage(linkage FuncLinkage) {
+	bt.setInfo(uint32(linkage), btfTypeVlenMask, btfTypeVlenShift)
+}
+
+func (bt *btfType) Type() TypeID {
+	// TODO: Panic here if wrong kind?
+	return TypeID(bt.SizeType)
+}
+
+func (bt *btfType) SetType(id TypeID) {
+	bt.SizeType = uint32(id)
+}
+
+func (bt *btfType) Size() uint32 {
+	// TODO: Panic here if wrong kind?
+	return bt.SizeType
+}
+
+func (bt *btfType) SetSize(size uint32) {
+	bt.SizeType = size
+}
+
+func (bt *btfType) Marshal(w io.Writer, bo binary.ByteOrder) error {
+	buf := make([]byte, unsafe.Sizeof(*bt))
+	bo.PutUint32(buf[0:], bt.NameOff)
+	bo.PutUint32(buf[4:], bt.Info)
+	bo.PutUint32(buf[8:], bt.SizeType)
+	_, err := w.Write(buf)
+	return err
+}
+
+type rawType struct {
+	btfType
+	data interface{}
+}
+
+func (rt *rawType) Marshal(w io.Writer, bo binary.ByteOrder) error {
+	if err := rt.btfType.Marshal(w, bo); err != nil {
+		return err
+	}
+
+	if rt.data == nil {
+		return nil
+	}
+
+	return binary.Write(w, bo, rt.data)
+}
+
+// btfInt encodes additional data for integers.
+//
+//	? ? ? ? e e e e o o o o o o o o ? ? ? ? ? ? ? ? b b b b b b b b
+//	? = undefined
+//	e = encoding
+//	o = offset (bitfields?)
+//	b = bits (bitfields)
+type btfInt struct {
+	Raw uint32
+}
+
+const (
+	btfIntEncodingLen   = 4
+	btfIntEncodingShift = 24
+	btfIntOffsetLen     = 8
+	btfIntOffsetShift   = 16
+	btfIntBitsLen       = 8
+	btfIntBitsShift     = 0
+)
+
+func (bi btfInt) Encoding() IntEncoding {
+	return IntEncoding(readBits(bi.Raw, btfIntEncodingLen, btfIntEncodingShift))
+}
+
+func (bi *btfInt) SetEncoding(e IntEncoding) {
+	bi.Raw = writeBits(uint32(bi.Raw), btfIntEncodingLen, btfIntEncodingShift, uint32(e))
+}
+
+func (bi btfInt) Offset() Bits {
+	return Bits(readBits(bi.Raw, btfIntOffsetLen, btfIntOffsetShift))
+}
+
+func (bi *btfInt) SetOffset(offset uint32) {
+	bi.Raw = writeBits(bi.Raw, btfIntOffsetLen, btfIntOffsetShift, offset)
+}
+
+func (bi btfInt) Bits() Bits {
+	return Bits(readBits(bi.Raw, btfIntBitsLen, btfIntBitsShift))
+}
+
+func (bi *btfInt) SetBits(bits byte) {
+	bi.Raw = writeBits(bi.Raw, btfIntBitsLen, btfIntBitsShift, uint32(bits))
+}
+
+type btfArray struct {
+	Type      TypeID
+	IndexType TypeID
+	Nelems    uint32
+}
+
+type btfMember struct {
+	NameOff uint32
+	Type    TypeID
+	Offset  uint32
+}
+
+type btfVarSecinfo struct {
+	Type   TypeID
+	Offset uint32
+	Size   uint32
+}
+
+type btfVariable struct {
+	Linkage uint32
+}
+
+type btfEnum struct {
+	NameOff uint32
+	Val     uint32
+}
+
+type btfEnum64 struct {
+	NameOff uint32
+	ValLo32 uint32
+	ValHi32 uint32
+}
+
+type btfParam struct {
+	NameOff uint32
+	Type    TypeID
+}
+
+type btfDeclTag struct {
+	ComponentIdx uint32
+}
+
+func readTypes(r io.Reader, bo binary.ByteOrder, typeLen uint32) ([]rawType, error) {
+	var header btfType
+	// because of the interleaving between types and struct members it is difficult to
+	// precompute the numbers of raw types this will parse
+	// this "guess" is a good first estimation
+	sizeOfbtfType := uintptr(btfTypeLen)
+	tyMaxCount := uintptr(typeLen) / sizeOfbtfType / 2
+	types := make([]rawType, 0, tyMaxCount)
+
+	for id := TypeID(1); ; id++ {
+		if err := binary.Read(r, bo, &header); err == io.EOF {
+			return types, nil
+		} else if err != nil {
+			return nil, fmt.Errorf("can't read type info for id %v: %v", id, err)
+		}
+
+		var data interface{}
+		switch header.Kind() {
+		case kindInt:
+			data = new(btfInt)
+		case kindPointer:
+		case kindArray:
+			data = new(btfArray)
+		case kindStruct:
+			fallthrough
+		case kindUnion:
+			data = make([]btfMember, header.Vlen())
+		case kindEnum:
+			data = make([]btfEnum, header.Vlen())
+		case kindForward:
+		case kindTypedef:
+		case kindVolatile:
+		case kindConst:
+		case kindRestrict:
+		case kindFunc:
+		case kindFuncProto:
+			data = make([]btfParam, header.Vlen())
+		case kindVar:
+			data = new(btfVariable)
+		case kindDatasec:
+			data = make([]btfVarSecinfo, header.Vlen())
+		case kindFloat:
+		case kindDeclTag:
+			data = new(btfDeclTag)
+		case kindTypeTag:
+		case kindEnum64:
+			data = make([]btfEnum64, header.Vlen())
+		default:
+			return nil, fmt.Errorf("type id %v: unknown kind: %v", id, header.Kind())
+		}
+
+		if data == nil {
+			types = append(types, rawType{header, nil})
+			continue
+		}
+
+		if err := binary.Read(r, bo, data); err != nil {
+			return nil, fmt.Errorf("type id %d: kind %v: can't read %T: %v", id, header.Kind(), data, err)
+		}
+
+		types = append(types, rawType{header, data})
+	}
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/btf_types_string.go b/vendor/github.com/cilium/ebpf/btf/btf_types_string.go
new file mode 100644
index 00000000000..b7a1b80d151
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/btf_types_string.go
@@ -0,0 +1,80 @@
+// Code generated by "stringer -linecomment -output=btf_types_string.go -type=FuncLinkage,VarLinkage,btfKind"; DO NOT EDIT.
+
+package btf
+
+import "strconv"
+
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[StaticFunc-0]
+	_ = x[GlobalFunc-1]
+	_ = x[ExternFunc-2]
+}
+
+const _FuncLinkage_name = "staticglobalextern"
+
+var _FuncLinkage_index = [...]uint8{0, 6, 12, 18}
+
+func (i FuncLinkage) String() string {
+	if i < 0 || i >= FuncLinkage(len(_FuncLinkage_index)-1) {
+		return "FuncLinkage(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+	return _FuncLinkage_name[_FuncLinkage_index[i]:_FuncLinkage_index[i+1]]
+}
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[StaticVar-0]
+	_ = x[GlobalVar-1]
+	_ = x[ExternVar-2]
+}
+
+const _VarLinkage_name = "staticglobalextern"
+
+var _VarLinkage_index = [...]uint8{0, 6, 12, 18}
+
+func (i VarLinkage) String() string {
+	if i < 0 || i >= VarLinkage(len(_VarLinkage_index)-1) {
+		return "VarLinkage(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+	return _VarLinkage_name[_VarLinkage_index[i]:_VarLinkage_index[i+1]]
+}
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[kindUnknown-0]
+	_ = x[kindInt-1]
+	_ = x[kindPointer-2]
+	_ = x[kindArray-3]
+	_ = x[kindStruct-4]
+	_ = x[kindUnion-5]
+	_ = x[kindEnum-6]
+	_ = x[kindForward-7]
+	_ = x[kindTypedef-8]
+	_ = x[kindVolatile-9]
+	_ = x[kindConst-10]
+	_ = x[kindRestrict-11]
+	_ = x[kindFunc-12]
+	_ = x[kindFuncProto-13]
+	_ = x[kindVar-14]
+	_ = x[kindDatasec-15]
+	_ = x[kindFloat-16]
+	_ = x[kindDeclTag-17]
+	_ = x[kindTypeTag-18]
+	_ = x[kindEnum64-19]
+}
+
+const _btfKind_name = "UnknownIntPointerArrayStructUnionEnumForwardTypedefVolatileConstRestrictFuncFuncProtoVarDatasecFloatDeclTagTypeTagEnum64"
+
+var _btfKind_index = [...]uint8{0, 7, 10, 17, 22, 28, 33, 37, 44, 51, 59, 64, 72, 76, 85, 88, 95, 100, 107, 114, 120}
+
+func (i btfKind) String() string {
+	if i >= btfKind(len(_btfKind_index)-1) {
+		return "btfKind(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+	return _btfKind_name[_btfKind_index[i]:_btfKind_index[i+1]]
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/core.go b/vendor/github.com/cilium/ebpf/btf/core.go
new file mode 100644
index 00000000000..a5c40d36af4
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/core.go
@@ -0,0 +1,1011 @@
+package btf
+
+import (
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"math"
+	"reflect"
+	"strconv"
+	"strings"
+
+	"github.com/cilium/ebpf/asm"
+)
+
+// Code in this file is derived from libbpf, which is available under a BSD
+// 2-Clause license.
+
+// COREFixup is the result of computing a CO-RE relocation for a target.
+type COREFixup struct {
+	kind   coreKind
+	local  uint32
+	target uint32
+	// True if there is no valid fixup. The instruction is replaced with an
+	// invalid dummy.
+	poison bool
+	// True if the validation of the local value should be skipped. Used by
+	// some kinds of bitfield relocations.
+	skipLocalValidation bool
+}
+
+func (f *COREFixup) equal(other COREFixup) bool {
+	return f.local == other.local && f.target == other.target
+}
+
+func (f *COREFixup) String() string {
+	if f.poison {
+		return fmt.Sprintf("%s=poison", f.kind)
+	}
+	return fmt.Sprintf("%s=%d->%d", f.kind, f.local, f.target)
+}
+
+func (f *COREFixup) Apply(ins *asm.Instruction) error {
+	if f.poison {
+		const badRelo = 0xbad2310
+
+		*ins = asm.BuiltinFunc(badRelo).Call()
+		return nil
+	}
+
+	switch class := ins.OpCode.Class(); class {
+	case asm.LdXClass, asm.StClass, asm.StXClass:
+		if want := int16(f.local); !f.skipLocalValidation && want != ins.Offset {
+			return fmt.Errorf("invalid offset %d, expected %d", ins.Offset, f.local)
+		}
+
+		if f.target > math.MaxInt16 {
+			return fmt.Errorf("offset %d exceeds MaxInt16", f.target)
+		}
+
+		ins.Offset = int16(f.target)
+
+	case asm.LdClass:
+		if !ins.IsConstantLoad(asm.DWord) {
+			return fmt.Errorf("not a dword-sized immediate load")
+		}
+
+		if want := int64(f.local); !f.skipLocalValidation && want != ins.Constant {
+			return fmt.Errorf("invalid immediate %d, expected %d (fixup: %v)", ins.Constant, want, f)
+		}
+
+		ins.Constant = int64(f.target)
+
+	case asm.ALUClass:
+		if ins.OpCode.ALUOp() == asm.Swap {
+			return fmt.Errorf("relocation against swap")
+		}
+
+		fallthrough
+
+	case asm.ALU64Class:
+		if src := ins.OpCode.Source(); src != asm.ImmSource {
+			return fmt.Errorf("invalid source %s", src)
+		}
+
+		if want := int64(f.local); !f.skipLocalValidation && want != ins.Constant {
+			return fmt.Errorf("invalid immediate %d, expected %d (fixup: %v, kind: %v, ins: %v)", ins.Constant, want, f, f.kind, ins)
+		}
+
+		if f.target > math.MaxInt32 {
+			return fmt.Errorf("immediate %d exceeds MaxInt32", f.target)
+		}
+
+		ins.Constant = int64(f.target)
+
+	default:
+		return fmt.Errorf("invalid class %s", class)
+	}
+
+	return nil
+}
+
+func (f COREFixup) isNonExistant() bool {
+	return f.kind.checksForExistence() && f.target == 0
+}
+
+// coreKind is the type of CO-RE relocation as specified in BPF source code.
+type coreKind uint32
+
+const (
+	reloFieldByteOffset coreKind = iota /* field byte offset */
+	reloFieldByteSize                   /* field size in bytes */
+	reloFieldExists                     /* field existence in target kernel */
+	reloFieldSigned                     /* field signedness (0 - unsigned, 1 - signed) */
+	reloFieldLShiftU64                  /* bitfield-specific left bitshift */
+	reloFieldRShiftU64                  /* bitfield-specific right bitshift */
+	reloTypeIDLocal                     /* type ID in local BPF object */
+	reloTypeIDTarget                    /* type ID in target kernel */
+	reloTypeExists                      /* type existence in target kernel */
+	reloTypeSize                        /* type size in bytes */
+	reloEnumvalExists                   /* enum value existence in target kernel */
+	reloEnumvalValue                    /* enum value integer value */
+)
+
+func (k coreKind) checksForExistence() bool {
+	return k == reloEnumvalExists || k == reloTypeExists || k == reloFieldExists
+}
+
+func (k coreKind) String() string {
+	switch k {
+	case reloFieldByteOffset:
+		return "byte_off"
+	case reloFieldByteSize:
+		return "byte_sz"
+	case reloFieldExists:
+		return "field_exists"
+	case reloFieldSigned:
+		return "signed"
+	case reloFieldLShiftU64:
+		return "lshift_u64"
+	case reloFieldRShiftU64:
+		return "rshift_u64"
+	case reloTypeIDLocal:
+		return "local_type_id"
+	case reloTypeIDTarget:
+		return "target_type_id"
+	case reloTypeExists:
+		return "type_exists"
+	case reloTypeSize:
+		return "type_size"
+	case reloEnumvalExists:
+		return "enumval_exists"
+	case reloEnumvalValue:
+		return "enumval_value"
+	default:
+		return "unknown"
+	}
+}
+
+// CORERelocate calculates changes needed to adjust eBPF instructions for differences
+// in types.
+//
+// Returns a list of fixups which can be applied to instructions to make them
+// match the target type(s).
+//
+// Fixups are returned in the order of relos, e.g. fixup[i] is the solution
+// for relos[i].
+func CORERelocate(relos []*CORERelocation, target *Spec, bo binary.ByteOrder) ([]COREFixup, error) {
+	if target == nil {
+		var err error
+		target, _, err = kernelSpec()
+		if err != nil {
+			return nil, fmt.Errorf("load kernel spec: %w", err)
+		}
+	}
+
+	if bo != target.byteOrder {
+		return nil, fmt.Errorf("can't relocate %s against %s", bo, target.byteOrder)
+	}
+
+	type reloGroup struct {
+		relos []*CORERelocation
+		// Position of each relocation in relos.
+		indices []int
+	}
+
+	// Split relocations into per Type lists.
+	relosByType := make(map[Type]*reloGroup)
+	result := make([]COREFixup, len(relos))
+	for i, relo := range relos {
+		if relo.kind == reloTypeIDLocal {
+			// Filtering out reloTypeIDLocal here makes our lives a lot easier
+			// down the line, since it doesn't have a target at all.
+			if len(relo.accessor) > 1 || relo.accessor[0] != 0 {
+				return nil, fmt.Errorf("%s: unexpected accessor %v", relo.kind, relo.accessor)
+			}
+
+			result[i] = COREFixup{
+				kind:  relo.kind,
+				local: uint32(relo.id),
+				// NB: Using relo.id as the target here is incorrect, since
+				// it doesn't match the BTF we generate on the fly. This isn't
+				// too bad for now since there are no uses of the local type ID
+				// in the kernel, yet.
+				target: uint32(relo.id),
+			}
+			continue
+		}
+
+		group, ok := relosByType[relo.typ]
+		if !ok {
+			group = &reloGroup{}
+			relosByType[relo.typ] = group
+		}
+		group.relos = append(group.relos, relo)
+		group.indices = append(group.indices, i)
+	}
+
+	for localType, group := range relosByType {
+		localTypeName := localType.TypeName()
+		if localTypeName == "" {
+			return nil, fmt.Errorf("relocate unnamed or anonymous type %s: %w", localType, ErrNotSupported)
+		}
+
+		targets := target.namedTypes[newEssentialName(localTypeName)]
+		fixups, err := coreCalculateFixups(group.relos, target, targets, bo)
+		if err != nil {
+			return nil, fmt.Errorf("relocate %s: %w", localType, err)
+		}
+
+		for j, index := range group.indices {
+			result[index] = fixups[j]
+		}
+	}
+
+	return result, nil
+}
+
+var errAmbiguousRelocation = errors.New("ambiguous relocation")
+var errImpossibleRelocation = errors.New("impossible relocation")
+var errIncompatibleTypes = errors.New("incompatible types")
+
+// coreCalculateFixups finds the target type that best matches all relocations.
+//
+// All relos must target the same type.
+//
+// The best target is determined by scoring: the less poisoning we have to do
+// the better the target is.
+func coreCalculateFixups(relos []*CORERelocation, targetSpec *Spec, targets []Type, bo binary.ByteOrder) ([]COREFixup, error) {
+	bestScore := len(relos)
+	var bestFixups []COREFixup
+	for _, target := range targets {
+		targetID, err := targetSpec.TypeID(target)
+		if err != nil {
+			return nil, fmt.Errorf("target type ID: %w", err)
+		}
+
+		score := 0 // lower is better
+		fixups := make([]COREFixup, 0, len(relos))
+		for _, relo := range relos {
+			fixup, err := coreCalculateFixup(relo, target, targetID, bo)
+			if err != nil {
+				return nil, fmt.Errorf("target %s: %s: %w", target, relo.kind, err)
+			}
+			if fixup.poison || fixup.isNonExistant() {
+				score++
+			}
+			fixups = append(fixups, fixup)
+		}
+
+		if score > bestScore {
+			// We have a better target already, ignore this one.
+			continue
+		}
+
+		if score < bestScore {
+			// This is the best target yet, use it.
+			bestScore = score
+			bestFixups = fixups
+			continue
+		}
+
+		// Some other target has the same score as the current one. Make sure
+		// the fixups agree with each other.
+		for i, fixup := range bestFixups {
+			if !fixup.equal(fixups[i]) {
+				return nil, fmt.Errorf("%s: multiple types match: %w", fixup.kind, errAmbiguousRelocation)
+			}
+		}
+	}
+
+	if bestFixups == nil {
+		// Nothing at all matched, probably because there are no suitable
+		// targets at all.
+		//
+		// Poison everything except checksForExistence.
+		bestFixups = make([]COREFixup, len(relos))
+		for i, relo := range relos {
+			if relo.kind.checksForExistence() {
+				bestFixups[i] = COREFixup{kind: relo.kind, local: 1, target: 0}
+			} else {
+				bestFixups[i] = COREFixup{kind: relo.kind, poison: true}
+			}
+		}
+	}
+
+	return bestFixups, nil
+}
+
+var errNoSignedness = errors.New("no signedness")
+
+// coreCalculateFixup calculates the fixup for a single local type, target type
+// and relocation.
+func coreCalculateFixup(relo *CORERelocation, target Type, targetID TypeID, bo binary.ByteOrder) (COREFixup, error) {
+	fixup := func(local, target uint32) (COREFixup, error) {
+		return COREFixup{kind: relo.kind, local: local, target: target}, nil
+	}
+	fixupWithoutValidation := func(local, target uint32) (COREFixup, error) {
+		return COREFixup{kind: relo.kind, local: local, target: target, skipLocalValidation: true}, nil
+	}
+	poison := func() (COREFixup, error) {
+		if relo.kind.checksForExistence() {
+			return fixup(1, 0)
+		}
+		return COREFixup{kind: relo.kind, poison: true}, nil
+	}
+	zero := COREFixup{}
+
+	local := relo.typ
+
+	switch relo.kind {
+	case reloTypeIDTarget, reloTypeSize, reloTypeExists:
+		if len(relo.accessor) > 1 || relo.accessor[0] != 0 {
+			return zero, fmt.Errorf("unexpected accessor %v", relo.accessor)
+		}
+
+		err := coreAreTypesCompatible(local, target)
+		if errors.Is(err, errIncompatibleTypes) {
+			return poison()
+		}
+		if err != nil {
+			return zero, err
+		}
+
+		switch relo.kind {
+		case reloTypeExists:
+			return fixup(1, 1)
+
+		case reloTypeIDTarget:
+			return fixup(uint32(relo.id), uint32(targetID))
+
+		case reloTypeSize:
+			localSize, err := Sizeof(local)
+			if err != nil {
+				return zero, err
+			}
+
+			targetSize, err := Sizeof(target)
+			if err != nil {
+				return zero, err
+			}
+
+			return fixup(uint32(localSize), uint32(targetSize))
+		}
+
+	case reloEnumvalValue, reloEnumvalExists:
+		localValue, targetValue, err := coreFindEnumValue(local, relo.accessor, target)
+		if errors.Is(err, errImpossibleRelocation) {
+			return poison()
+		}
+		if err != nil {
+			return zero, err
+		}
+
+		switch relo.kind {
+		case reloEnumvalExists:
+			return fixup(1, 1)
+
+		case reloEnumvalValue:
+			return fixup(uint32(localValue.Value), uint32(targetValue.Value))
+		}
+
+	case reloFieldByteOffset, reloFieldByteSize, reloFieldExists, reloFieldLShiftU64, reloFieldRShiftU64, reloFieldSigned:
+		if _, ok := as[*Fwd](target); ok {
+			// We can't relocate fields using a forward declaration, so
+			// skip it. If a non-forward declaration is present in the BTF
+			// we'll find it in one of the other iterations.
+			return poison()
+		}
+
+		localField, targetField, err := coreFindField(local, relo.accessor, target)
+		if errors.Is(err, errImpossibleRelocation) {
+			return poison()
+		}
+		if err != nil {
+			return zero, err
+		}
+
+		maybeSkipValidation := func(f COREFixup, err error) (COREFixup, error) {
+			f.skipLocalValidation = localField.bitfieldSize > 0
+			return f, err
+		}
+
+		switch relo.kind {
+		case reloFieldExists:
+			return fixup(1, 1)
+
+		case reloFieldByteOffset:
+			return maybeSkipValidation(fixup(localField.offset, targetField.offset))
+
+		case reloFieldByteSize:
+			localSize, err := Sizeof(localField.Type)
+			if err != nil {
+				return zero, err
+			}
+
+			targetSize, err := Sizeof(targetField.Type)
+			if err != nil {
+				return zero, err
+			}
+			return maybeSkipValidation(fixup(uint32(localSize), uint32(targetSize)))
+
+		case reloFieldLShiftU64:
+			var target uint32
+			if bo == binary.LittleEndian {
+				targetSize, err := targetField.sizeBits()
+				if err != nil {
+					return zero, err
+				}
+
+				target = uint32(64 - targetField.bitfieldOffset - targetSize)
+			} else {
+				loadWidth, err := Sizeof(targetField.Type)
+				if err != nil {
+					return zero, err
+				}
+
+				target = uint32(64 - Bits(loadWidth*8) + targetField.bitfieldOffset)
+			}
+			return fixupWithoutValidation(0, target)
+
+		case reloFieldRShiftU64:
+			targetSize, err := targetField.sizeBits()
+			if err != nil {
+				return zero, err
+			}
+
+			return fixupWithoutValidation(0, uint32(64-targetSize))
+
+		case reloFieldSigned:
+			switch local := UnderlyingType(localField.Type).(type) {
+			case *Enum:
+				target, ok := as[*Enum](targetField.Type)
+				if !ok {
+					return zero, fmt.Errorf("target isn't *Enum but %T", targetField.Type)
+				}
+
+				return fixup(boolToUint32(local.Signed), boolToUint32(target.Signed))
+			case *Int:
+				target, ok := as[*Int](targetField.Type)
+				if !ok {
+					return zero, fmt.Errorf("target isn't *Int but %T", targetField.Type)
+				}
+
+				return fixup(
+					uint32(local.Encoding&Signed),
+					uint32(target.Encoding&Signed),
+				)
+			default:
+				return zero, fmt.Errorf("type %T: %w", local, errNoSignedness)
+			}
+		}
+	}
+
+	return zero, ErrNotSupported
+}
+
+func boolToUint32(val bool) uint32 {
+	if val {
+		return 1
+	}
+	return 0
+}
+
+/* coreAccessor contains a path through a struct. It contains at least one index.
+ *
+ * The interpretation depends on the kind of the relocation. The following is
+ * taken from struct bpf_core_relo in libbpf_internal.h:
+ *
+ * - for field-based relocations, string encodes an accessed field using
+ *   a sequence of field and array indices, separated by colon (:). It's
+ *   conceptually very close to LLVM's getelementptr ([0]) instruction's
+ *   arguments for identifying offset to a field.
+ * - for type-based relocations, strings is expected to be just "0";
+ * - for enum value-based relocations, string contains an index of enum
+ *   value within its enum type;
+ *
+ * Example to provide a better feel.
+ *
+ *   struct sample {
+ *       int a;
+ *       struct {
+ *           int b[10];
+ *       };
+ *   };
+ *
+ *   struct sample s = ...;
+ *   int x = &s->a;     // encoded as "0:0" (a is field #0)
+ *   int y = &s->b[5];  // encoded as "0:1:0:5" (anon struct is field #1,
+ *                      // b is field #0 inside anon struct, accessing elem #5)
+ *   int z = &s[10]->b; // encoded as "10:1" (ptr is used as an array)
+ */
+type coreAccessor []int
+
+func parseCOREAccessor(accessor string) (coreAccessor, error) {
+	if accessor == "" {
+		return nil, fmt.Errorf("empty accessor")
+	}
+
+	parts := strings.Split(accessor, ":")
+	result := make(coreAccessor, 0, len(parts))
+	for _, part := range parts {
+		// 31 bits to avoid overflowing int on 32 bit platforms.
+		index, err := strconv.ParseUint(part, 10, 31)
+		if err != nil {
+			return nil, fmt.Errorf("accessor index %q: %s", part, err)
+		}
+
+		result = append(result, int(index))
+	}
+
+	return result, nil
+}
+
+func (ca coreAccessor) String() string {
+	strs := make([]string, 0, len(ca))
+	for _, i := range ca {
+		strs = append(strs, strconv.Itoa(i))
+	}
+	return strings.Join(strs, ":")
+}
+
+func (ca coreAccessor) enumValue(t Type) (*EnumValue, error) {
+	e, ok := as[*Enum](t)
+	if !ok {
+		return nil, fmt.Errorf("not an enum: %s", t)
+	}
+
+	if len(ca) > 1 {
+		return nil, fmt.Errorf("invalid accessor %s for enum", ca)
+	}
+
+	i := ca[0]
+	if i >= len(e.Values) {
+		return nil, fmt.Errorf("invalid index %d for %s", i, e)
+	}
+
+	return &e.Values[i], nil
+}
+
+// coreField represents the position of a "child" of a composite type from the
+// start of that type.
+//
+//	/- start of composite
+//	| offset * 8 | bitfieldOffset | bitfieldSize | ... |
+//	             \- start of field       end of field -/
+type coreField struct {
+	Type Type
+
+	// The position of the field from the start of the composite type in bytes.
+	offset uint32
+
+	// The offset of the bitfield in bits from the start of the field.
+	bitfieldOffset Bits
+
+	// The size of the bitfield in bits.
+	//
+	// Zero if the field is not a bitfield.
+	bitfieldSize Bits
+}
+
+func (cf *coreField) adjustOffsetToNthElement(n int) error {
+	if n == 0 {
+		return nil
+	}
+
+	size, err := Sizeof(cf.Type)
+	if err != nil {
+		return err
+	}
+
+	cf.offset += uint32(n) * uint32(size)
+	return nil
+}
+
+func (cf *coreField) adjustOffsetBits(offset Bits) error {
+	align, err := alignof(cf.Type)
+	if err != nil {
+		return err
+	}
+
+	// We can compute the load offset by:
+	// 1) converting the bit offset to bytes with a flooring division.
+	// 2) dividing and multiplying that offset by the alignment, yielding the
+	//    load size aligned offset.
+	offsetBytes := uint32(offset/8) / uint32(align) * uint32(align)
+
+	// The number of bits remaining is the bit offset less the number of bits
+	// we can "skip" with the aligned offset.
+	cf.bitfieldOffset = offset - Bits(offsetBytes*8)
+
+	// We know that cf.offset is aligned at to at least align since we get it
+	// from the compiler via BTF. Adding an aligned offsetBytes preserves the
+	// alignment.
+	cf.offset += offsetBytes
+	return nil
+}
+
+func (cf *coreField) sizeBits() (Bits, error) {
+	if cf.bitfieldSize > 0 {
+		return cf.bitfieldSize, nil
+	}
+
+	// Someone is trying to access a non-bitfield via a bit shift relocation.
+	// This happens when a field changes from a bitfield to a regular field
+	// between kernel versions. Synthesise the size to make the shifts work.
+	size, err := Sizeof(cf.Type)
+	if err != nil {
+		return 0, err
+	}
+	return Bits(size * 8), nil
+}
+
+// coreFindField descends into the local type using the accessor and tries to
+// find an equivalent field in target at each step.
+//
+// Returns the field and the offset of the field from the start of
+// target in bits.
+func coreFindField(localT Type, localAcc coreAccessor, targetT Type) (coreField, coreField, error) {
+	local := coreField{Type: localT}
+	target := coreField{Type: targetT}
+
+	if err := coreAreMembersCompatible(local.Type, target.Type); err != nil {
+		return coreField{}, coreField{}, fmt.Errorf("fields: %w", err)
+	}
+
+	// The first index is used to offset a pointer of the base type like
+	// when accessing an array.
+	if err := local.adjustOffsetToNthElement(localAcc[0]); err != nil {
+		return coreField{}, coreField{}, err
+	}
+
+	if err := target.adjustOffsetToNthElement(localAcc[0]); err != nil {
+		return coreField{}, coreField{}, err
+	}
+
+	var localMaybeFlex, targetMaybeFlex bool
+	for i, acc := range localAcc[1:] {
+		switch localType := UnderlyingType(local.Type).(type) {
+		case composite:
+			// For composite types acc is used to find the field in the local type,
+			// and then we try to find a field in target with the same name.
+			localMembers := localType.members()
+			if acc >= len(localMembers) {
+				return coreField{}, coreField{}, fmt.Errorf("invalid accessor %d for %s", acc, localType)
+			}
+
+			localMember := localMembers[acc]
+			if localMember.Name == "" {
+				localMemberType, ok := as[composite](localMember.Type)
+				if !ok {
+					return coreField{}, coreField{}, fmt.Errorf("unnamed field with type %s: %s", localMember.Type, ErrNotSupported)
+				}
+
+				// This is an anonymous struct or union, ignore it.
+				local = coreField{
+					Type:   localMemberType,
+					offset: local.offset + localMember.Offset.Bytes(),
+				}
+				localMaybeFlex = false
+				continue
+			}
+
+			targetType, ok := as[composite](target.Type)
+			if !ok {
+				return coreField{}, coreField{}, fmt.Errorf("target not composite: %w", errImpossibleRelocation)
+			}
+
+			targetMember, last, err := coreFindMember(targetType, localMember.Name)
+			if err != nil {
+				return coreField{}, coreField{}, err
+			}
+
+			local = coreField{
+				Type:         localMember.Type,
+				offset:       local.offset,
+				bitfieldSize: localMember.BitfieldSize,
+			}
+			localMaybeFlex = acc == len(localMembers)-1
+
+			target = coreField{
+				Type:         targetMember.Type,
+				offset:       target.offset,
+				bitfieldSize: targetMember.BitfieldSize,
+			}
+			targetMaybeFlex = last
+
+			if local.bitfieldSize == 0 && target.bitfieldSize == 0 {
+				local.offset += localMember.Offset.Bytes()
+				target.offset += targetMember.Offset.Bytes()
+				break
+			}
+
+			// Either of the members is a bitfield. Make sure we're at the
+			// end of the accessor.
+			if next := i + 1; next < len(localAcc[1:]) {
+				return coreField{}, coreField{}, fmt.Errorf("can't descend into bitfield")
+			}
+
+			if err := local.adjustOffsetBits(localMember.Offset); err != nil {
+				return coreField{}, coreField{}, err
+			}
+
+			if err := target.adjustOffsetBits(targetMember.Offset); err != nil {
+				return coreField{}, coreField{}, err
+			}
+
+		case *Array:
+			// For arrays, acc is the index in the target.
+			targetType, ok := as[*Array](target.Type)
+			if !ok {
+				return coreField{}, coreField{}, fmt.Errorf("target not array: %w", errImpossibleRelocation)
+			}
+
+			if localType.Nelems == 0 && !localMaybeFlex {
+				return coreField{}, coreField{}, fmt.Errorf("local type has invalid flexible array")
+			}
+			if targetType.Nelems == 0 && !targetMaybeFlex {
+				return coreField{}, coreField{}, fmt.Errorf("target type has invalid flexible array")
+			}
+
+			if localType.Nelems > 0 && acc >= int(localType.Nelems) {
+				return coreField{}, coreField{}, fmt.Errorf("invalid access of %s at index %d", localType, acc)
+			}
+			if targetType.Nelems > 0 && acc >= int(targetType.Nelems) {
+				return coreField{}, coreField{}, fmt.Errorf("out of bounds access of target: %w", errImpossibleRelocation)
+			}
+
+			local = coreField{
+				Type:   localType.Type,
+				offset: local.offset,
+			}
+			localMaybeFlex = false
+
+			if err := local.adjustOffsetToNthElement(acc); err != nil {
+				return coreField{}, coreField{}, err
+			}
+
+			target = coreField{
+				Type:   targetType.Type,
+				offset: target.offset,
+			}
+			targetMaybeFlex = false
+
+			if err := target.adjustOffsetToNthElement(acc); err != nil {
+				return coreField{}, coreField{}, err
+			}
+
+		default:
+			return coreField{}, coreField{}, fmt.Errorf("relocate field of %T: %w", localType, ErrNotSupported)
+		}
+
+		if err := coreAreMembersCompatible(local.Type, target.Type); err != nil {
+			return coreField{}, coreField{}, err
+		}
+	}
+
+	return local, target, nil
+}
+
+// coreFindMember finds a member in a composite type while handling anonymous
+// structs and unions.
+func coreFindMember(typ composite, name string) (Member, bool, error) {
+	if name == "" {
+		return Member{}, false, errors.New("can't search for anonymous member")
+	}
+
+	type offsetTarget struct {
+		composite
+		offset Bits
+	}
+
+	targets := []offsetTarget{{typ, 0}}
+	visited := make(map[composite]bool)
+
+	for i := 0; i < len(targets); i++ {
+		target := targets[i]
+
+		// Only visit targets once to prevent infinite recursion.
+		if visited[target] {
+			continue
+		}
+		if len(visited) >= maxTypeDepth {
+			// This check is different than libbpf, which restricts the entire
+			// path to BPF_CORE_SPEC_MAX_LEN items.
+			return Member{}, false, fmt.Errorf("type is nested too deep")
+		}
+		visited[target] = true
+
+		members := target.members()
+		for j, member := range members {
+			if member.Name == name {
+				// NB: This is safe because member is a copy.
+				member.Offset += target.offset
+				return member, j == len(members)-1, nil
+			}
+
+			// The names don't match, but this member could be an anonymous struct
+			// or union.
+			if member.Name != "" {
+				continue
+			}
+
+			comp, ok := as[composite](member.Type)
+			if !ok {
+				return Member{}, false, fmt.Errorf("anonymous non-composite type %T not allowed", member.Type)
+			}
+
+			targets = append(targets, offsetTarget{comp, target.offset + member.Offset})
+		}
+	}
+
+	return Member{}, false, fmt.Errorf("no matching member: %w", errImpossibleRelocation)
+}
+
+// coreFindEnumValue follows localAcc to find the equivalent enum value in target.
+func coreFindEnumValue(local Type, localAcc coreAccessor, target Type) (localValue, targetValue *EnumValue, _ error) {
+	localValue, err := localAcc.enumValue(local)
+	if err != nil {
+		return nil, nil, err
+	}
+
+	targetEnum, ok := as[*Enum](target)
+	if !ok {
+		return nil, nil, errImpossibleRelocation
+	}
+
+	localName := newEssentialName(localValue.Name)
+	for i, targetValue := range targetEnum.Values {
+		if newEssentialName(targetValue.Name) != localName {
+			continue
+		}
+
+		return localValue, &targetEnum.Values[i], nil
+	}
+
+	return nil, nil, errImpossibleRelocation
+}
+
+// CheckTypeCompatibility checks local and target types for Compatibility according to CO-RE rules.
+//
+// Only layout compatibility is checked, ignoring names of the root type.
+func CheckTypeCompatibility(localType Type, targetType Type) error {
+	return coreAreTypesCompatible(localType, targetType)
+}
+
+/* The comment below is from bpf_core_types_are_compat in libbpf.c:
+ *
+ * Check local and target types for compatibility. This check is used for
+ * type-based CO-RE relocations and follow slightly different rules than
+ * field-based relocations. This function assumes that root types were already
+ * checked for name match. Beyond that initial root-level name check, names
+ * are completely ignored. Compatibility rules are as follows:
+ *   - any two STRUCTs/UNIONs/FWDs/ENUMs/INTs are considered compatible, but
+ *     kind should match for local and target types (i.e., STRUCT is not
+ *     compatible with UNION);
+ *   - for ENUMs, the size is ignored;
+ *   - for INT, size and signedness are ignored;
+ *   - for ARRAY, dimensionality is ignored, element types are checked for
+ *     compatibility recursively;
+ *   - CONST/VOLATILE/RESTRICT modifiers are ignored;
+ *   - TYPEDEFs/PTRs are compatible if types they pointing to are compatible;
+ *   - FUNC_PROTOs are compatible if they have compatible signature: same
+ *     number of input args and compatible return and argument types.
+ * These rules are not set in stone and probably will be adjusted as we get
+ * more experience with using BPF CO-RE relocations.
+ *
+ * Returns errIncompatibleTypes if types are not compatible.
+ */
+func coreAreTypesCompatible(localType Type, targetType Type) error {
+
+	var (
+		localTs, targetTs typeDeque
+		l, t              = &localType, &targetType
+		depth             = 0
+	)
+
+	for ; l != nil && t != nil; l, t = localTs.Shift(), targetTs.Shift() {
+		if depth >= maxTypeDepth {
+			return errors.New("types are nested too deep")
+		}
+
+		localType = UnderlyingType(*l)
+		targetType = UnderlyingType(*t)
+
+		if reflect.TypeOf(localType) != reflect.TypeOf(targetType) {
+			return fmt.Errorf("type mismatch: %w", errIncompatibleTypes)
+		}
+
+		switch lv := (localType).(type) {
+		case *Void, *Struct, *Union, *Enum, *Fwd, *Int:
+			// Nothing to do here
+
+		case *Pointer, *Array:
+			depth++
+			walkType(localType, localTs.Push)
+			walkType(targetType, targetTs.Push)
+
+		case *FuncProto:
+			tv := targetType.(*FuncProto)
+			if len(lv.Params) != len(tv.Params) {
+				return fmt.Errorf("function param mismatch: %w", errIncompatibleTypes)
+			}
+
+			depth++
+			walkType(localType, localTs.Push)
+			walkType(targetType, targetTs.Push)
+
+		default:
+			return fmt.Errorf("unsupported type %T", localType)
+		}
+	}
+
+	if l != nil {
+		return fmt.Errorf("dangling local type %T", *l)
+	}
+
+	if t != nil {
+		return fmt.Errorf("dangling target type %T", *t)
+	}
+
+	return nil
+}
+
+/* coreAreMembersCompatible checks two types for field-based relocation compatibility.
+ *
+ * The comment below is from bpf_core_fields_are_compat in libbpf.c:
+ *
+ * Check two types for compatibility for the purpose of field access
+ * relocation. const/volatile/restrict and typedefs are skipped to ensure we
+ * are relocating semantically compatible entities:
+ *   - any two STRUCTs/UNIONs are compatible and can be mixed;
+ *   - any two FWDs are compatible, if their names match (modulo flavor suffix);
+ *   - any two PTRs are always compatible;
+ *   - for ENUMs, names should be the same (ignoring flavor suffix) or at
+ *     least one of enums should be anonymous;
+ *   - for ENUMs, check sizes, names are ignored;
+ *   - for INT, size and signedness are ignored;
+ *   - any two FLOATs are always compatible;
+ *   - for ARRAY, dimensionality is ignored, element types are checked for
+ *     compatibility recursively;
+ *     [ NB: coreAreMembersCompatible doesn't recurse, this check is done
+ *       by coreFindField. ]
+ *   - everything else shouldn't be ever a target of relocation.
+ * These rules are not set in stone and probably will be adjusted as we get
+ * more experience with using BPF CO-RE relocations.
+ *
+ * Returns errImpossibleRelocation if the members are not compatible.
+ */
+func coreAreMembersCompatible(localType Type, targetType Type) error {
+	localType = UnderlyingType(localType)
+	targetType = UnderlyingType(targetType)
+
+	doNamesMatch := func(a, b string) error {
+		if a == "" || b == "" {
+			// allow anonymous and named type to match
+			return nil
+		}
+
+		if newEssentialName(a) == newEssentialName(b) {
+			return nil
+		}
+
+		return fmt.Errorf("names don't match: %w", errImpossibleRelocation)
+	}
+
+	_, lok := localType.(composite)
+	_, tok := targetType.(composite)
+	if lok && tok {
+		return nil
+	}
+
+	if reflect.TypeOf(localType) != reflect.TypeOf(targetType) {
+		return fmt.Errorf("type mismatch: %w", errImpossibleRelocation)
+	}
+
+	switch lv := localType.(type) {
+	case *Array, *Pointer, *Float, *Int:
+		return nil
+
+	case *Enum:
+		tv := targetType.(*Enum)
+		return doNamesMatch(lv.Name, tv.Name)
+
+	case *Fwd:
+		tv := targetType.(*Fwd)
+		return doNamesMatch(lv.Name, tv.Name)
+
+	default:
+		return fmt.Errorf("type %s: %w", localType, ErrNotSupported)
+	}
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/doc.go b/vendor/github.com/cilium/ebpf/btf/doc.go
new file mode 100644
index 00000000000..b1f4b1fc3eb
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/doc.go
@@ -0,0 +1,5 @@
+// Package btf handles data encoded according to the BPF Type Format.
+//
+// The canonical documentation lives in the Linux kernel repository and is
+// available at https://www.kernel.org/doc/html/latest/bpf/btf.html
+package btf
diff --git a/vendor/github.com/cilium/ebpf/btf/ext_info.go b/vendor/github.com/cilium/ebpf/btf/ext_info.go
new file mode 100644
index 00000000000..b764fb7bcc1
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/ext_info.go
@@ -0,0 +1,768 @@
+package btf
+
+import (
+	"bytes"
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"io"
+	"math"
+	"sort"
+
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/internal"
+)
+
+// ExtInfos contains ELF section metadata.
+type ExtInfos struct {
+	// The slices are sorted by offset in ascending order.
+	funcInfos       map[string][]funcInfo
+	lineInfos       map[string][]lineInfo
+	relocationInfos map[string][]coreRelocationInfo
+}
+
+// loadExtInfosFromELF parses ext infos from the .BTF.ext section in an ELF.
+//
+// Returns an error wrapping ErrNotFound if no ext infos are present.
+func loadExtInfosFromELF(file *internal.SafeELFFile, spec *Spec) (*ExtInfos, error) {
+	section := file.Section(".BTF.ext")
+	if section == nil {
+		return nil, fmt.Errorf("btf ext infos: %w", ErrNotFound)
+	}
+
+	if section.ReaderAt == nil {
+		return nil, fmt.Errorf("compressed ext_info is not supported")
+	}
+
+	return loadExtInfos(section.ReaderAt, file.ByteOrder, spec, spec.strings)
+}
+
+// loadExtInfos parses bare ext infos.
+func loadExtInfos(r io.ReaderAt, bo binary.ByteOrder, spec *Spec, strings *stringTable) (*ExtInfos, error) {
+	// Open unbuffered section reader. binary.Read() calls io.ReadFull on
+	// the header structs, resulting in one syscall per header.
+	headerRd := io.NewSectionReader(r, 0, math.MaxInt64)
+	extHeader, err := parseBTFExtHeader(headerRd, bo)
+	if err != nil {
+		return nil, fmt.Errorf("parsing BTF extension header: %w", err)
+	}
+
+	coreHeader, err := parseBTFExtCOREHeader(headerRd, bo, extHeader)
+	if err != nil {
+		return nil, fmt.Errorf("parsing BTF CO-RE header: %w", err)
+	}
+
+	buf := internal.NewBufferedSectionReader(r, extHeader.funcInfoStart(), int64(extHeader.FuncInfoLen))
+	btfFuncInfos, err := parseFuncInfos(buf, bo, strings)
+	if err != nil {
+		return nil, fmt.Errorf("parsing BTF function info: %w", err)
+	}
+
+	funcInfos := make(map[string][]funcInfo, len(btfFuncInfos))
+	for section, bfis := range btfFuncInfos {
+		funcInfos[section], err = newFuncInfos(bfis, spec)
+		if err != nil {
+			return nil, fmt.Errorf("section %s: func infos: %w", section, err)
+		}
+	}
+
+	buf = internal.NewBufferedSectionReader(r, extHeader.lineInfoStart(), int64(extHeader.LineInfoLen))
+	btfLineInfos, err := parseLineInfos(buf, bo, strings)
+	if err != nil {
+		return nil, fmt.Errorf("parsing BTF line info: %w", err)
+	}
+
+	lineInfos := make(map[string][]lineInfo, len(btfLineInfos))
+	for section, blis := range btfLineInfos {
+		lineInfos[section], err = newLineInfos(blis, strings)
+		if err != nil {
+			return nil, fmt.Errorf("section %s: line infos: %w", section, err)
+		}
+	}
+
+	if coreHeader == nil || coreHeader.COREReloLen == 0 {
+		return &ExtInfos{funcInfos, lineInfos, nil}, nil
+	}
+
+	var btfCORERelos map[string][]bpfCORERelo
+	buf = internal.NewBufferedSectionReader(r, extHeader.coreReloStart(coreHeader), int64(coreHeader.COREReloLen))
+	btfCORERelos, err = parseCORERelos(buf, bo, strings)
+	if err != nil {
+		return nil, fmt.Errorf("parsing CO-RE relocation info: %w", err)
+	}
+
+	coreRelos := make(map[string][]coreRelocationInfo, len(btfCORERelos))
+	for section, brs := range btfCORERelos {
+		coreRelos[section], err = newRelocationInfos(brs, spec, strings)
+		if err != nil {
+			return nil, fmt.Errorf("section %s: CO-RE relocations: %w", section, err)
+		}
+	}
+
+	return &ExtInfos{funcInfos, lineInfos, coreRelos}, nil
+}
+
+type funcInfoMeta struct{}
+type coreRelocationMeta struct{}
+
+// Assign per-section metadata from BTF to a section's instructions.
+func (ei *ExtInfos) Assign(insns asm.Instructions, section string) {
+	funcInfos := ei.funcInfos[section]
+	lineInfos := ei.lineInfos[section]
+	reloInfos := ei.relocationInfos[section]
+
+	iter := insns.Iterate()
+	for iter.Next() {
+		if len(funcInfos) > 0 && funcInfos[0].offset == iter.Offset {
+			*iter.Ins = WithFuncMetadata(*iter.Ins, funcInfos[0].fn)
+			funcInfos = funcInfos[1:]
+		}
+
+		if len(lineInfos) > 0 && lineInfos[0].offset == iter.Offset {
+			*iter.Ins = iter.Ins.WithSource(lineInfos[0].line)
+			lineInfos = lineInfos[1:]
+		}
+
+		if len(reloInfos) > 0 && reloInfos[0].offset == iter.Offset {
+			iter.Ins.Metadata.Set(coreRelocationMeta{}, reloInfos[0].relo)
+			reloInfos = reloInfos[1:]
+		}
+	}
+}
+
+// MarshalExtInfos encodes function and line info embedded in insns into kernel
+// wire format.
+//
+// Returns ErrNotSupported if the kernel doesn't support BTF-associated programs.
+func MarshalExtInfos(insns asm.Instructions) (_ *Handle, funcInfos, lineInfos []byte, _ error) {
+	// Bail out early if the kernel doesn't support Func(Proto). If this is the
+	// case, func_info will also be unsupported.
+	if err := haveProgBTF(); err != nil {
+		return nil, nil, nil, err
+	}
+
+	iter := insns.Iterate()
+	for iter.Next() {
+		_, ok := iter.Ins.Source().(*Line)
+		fn := FuncMetadata(iter.Ins)
+		if ok || fn != nil {
+			goto marshal
+		}
+	}
+
+	return nil, nil, nil, nil
+
+marshal:
+	var b Builder
+	var fiBuf, liBuf bytes.Buffer
+	for {
+		if fn := FuncMetadata(iter.Ins); fn != nil {
+			fi := &funcInfo{
+				fn:     fn,
+				offset: iter.Offset,
+			}
+			if err := fi.marshal(&fiBuf, &b); err != nil {
+				return nil, nil, nil, fmt.Errorf("write func info: %w", err)
+			}
+		}
+
+		if line, ok := iter.Ins.Source().(*Line); ok {
+			li := &lineInfo{
+				line:   line,
+				offset: iter.Offset,
+			}
+			if err := li.marshal(&liBuf, &b); err != nil {
+				return nil, nil, nil, fmt.Errorf("write line info: %w", err)
+			}
+		}
+
+		if !iter.Next() {
+			break
+		}
+	}
+
+	handle, err := NewHandle(&b)
+	return handle, fiBuf.Bytes(), liBuf.Bytes(), err
+}
+
+// btfExtHeader is found at the start of the .BTF.ext section.
+type btfExtHeader struct {
+	Magic   uint16
+	Version uint8
+	Flags   uint8
+
+	// HdrLen is larger than the size of struct btfExtHeader when it is
+	// immediately followed by a btfExtCOREHeader.
+	HdrLen uint32
+
+	FuncInfoOff uint32
+	FuncInfoLen uint32
+	LineInfoOff uint32
+	LineInfoLen uint32
+}
+
+// parseBTFExtHeader parses the header of the .BTF.ext section.
+func parseBTFExtHeader(r io.Reader, bo binary.ByteOrder) (*btfExtHeader, error) {
+	var header btfExtHeader
+	if err := binary.Read(r, bo, &header); err != nil {
+		return nil, fmt.Errorf("can't read header: %v", err)
+	}
+
+	if header.Magic != btfMagic {
+		return nil, fmt.Errorf("incorrect magic value %v", header.Magic)
+	}
+
+	if header.Version != 1 {
+		return nil, fmt.Errorf("unexpected version %v", header.Version)
+	}
+
+	if header.Flags != 0 {
+		return nil, fmt.Errorf("unsupported flags %v", header.Flags)
+	}
+
+	if int64(header.HdrLen) < int64(binary.Size(&header)) {
+		return nil, fmt.Errorf("header length shorter than btfExtHeader size")
+	}
+
+	return &header, nil
+}
+
+// funcInfoStart returns the offset from the beginning of the .BTF.ext section
+// to the start of its func_info entries.
+func (h *btfExtHeader) funcInfoStart() int64 {
+	return int64(h.HdrLen + h.FuncInfoOff)
+}
+
+// lineInfoStart returns the offset from the beginning of the .BTF.ext section
+// to the start of its line_info entries.
+func (h *btfExtHeader) lineInfoStart() int64 {
+	return int64(h.HdrLen + h.LineInfoOff)
+}
+
+// coreReloStart returns the offset from the beginning of the .BTF.ext section
+// to the start of its CO-RE relocation entries.
+func (h *btfExtHeader) coreReloStart(ch *btfExtCOREHeader) int64 {
+	return int64(h.HdrLen + ch.COREReloOff)
+}
+
+// btfExtCOREHeader is found right after the btfExtHeader when its HdrLen
+// field is larger than its size.
+type btfExtCOREHeader struct {
+	COREReloOff uint32
+	COREReloLen uint32
+}
+
+// parseBTFExtCOREHeader parses the tail of the .BTF.ext header. If additional
+// header bytes are present, extHeader.HdrLen will be larger than the struct,
+// indicating the presence of a CO-RE extension header.
+func parseBTFExtCOREHeader(r io.Reader, bo binary.ByteOrder, extHeader *btfExtHeader) (*btfExtCOREHeader, error) {
+	extHdrSize := int64(binary.Size(&extHeader))
+	remainder := int64(extHeader.HdrLen) - extHdrSize
+
+	if remainder == 0 {
+		return nil, nil
+	}
+
+	var coreHeader btfExtCOREHeader
+	if err := binary.Read(r, bo, &coreHeader); err != nil {
+		return nil, fmt.Errorf("can't read header: %v", err)
+	}
+
+	return &coreHeader, nil
+}
+
+type btfExtInfoSec struct {
+	SecNameOff uint32
+	NumInfo    uint32
+}
+
+// parseExtInfoSec parses a btf_ext_info_sec header within .BTF.ext,
+// appearing within func_info and line_info sub-sections.
+// These headers appear once for each program section in the ELF and are
+// followed by one or more func/line_info records for the section.
+func parseExtInfoSec(r io.Reader, bo binary.ByteOrder, strings *stringTable) (string, *btfExtInfoSec, error) {
+	var infoHeader btfExtInfoSec
+	if err := binary.Read(r, bo, &infoHeader); err != nil {
+		return "", nil, fmt.Errorf("read ext info header: %w", err)
+	}
+
+	secName, err := strings.Lookup(infoHeader.SecNameOff)
+	if err != nil {
+		return "", nil, fmt.Errorf("get section name: %w", err)
+	}
+	if secName == "" {
+		return "", nil, fmt.Errorf("extinfo header refers to empty section name")
+	}
+
+	if infoHeader.NumInfo == 0 {
+		return "", nil, fmt.Errorf("section %s has zero records", secName)
+	}
+
+	return secName, &infoHeader, nil
+}
+
+// parseExtInfoRecordSize parses the uint32 at the beginning of a func_infos
+// or line_infos segment that describes the length of all extInfoRecords in
+// that segment.
+func parseExtInfoRecordSize(r io.Reader, bo binary.ByteOrder) (uint32, error) {
+	const maxRecordSize = 256
+
+	var recordSize uint32
+	if err := binary.Read(r, bo, &recordSize); err != nil {
+		return 0, fmt.Errorf("can't read record size: %v", err)
+	}
+
+	if recordSize < 4 {
+		// Need at least InsnOff worth of bytes per record.
+		return 0, errors.New("record size too short")
+	}
+	if recordSize > maxRecordSize {
+		return 0, fmt.Errorf("record size %v exceeds %v", recordSize, maxRecordSize)
+	}
+
+	return recordSize, nil
+}
+
+// The size of a FuncInfo in BTF wire format.
+var FuncInfoSize = uint32(binary.Size(bpfFuncInfo{}))
+
+type funcInfo struct {
+	fn     *Func
+	offset asm.RawInstructionOffset
+}
+
+type bpfFuncInfo struct {
+	// Instruction offset of the function within an ELF section.
+	InsnOff uint32
+	TypeID  TypeID
+}
+
+func newFuncInfo(fi bpfFuncInfo, spec *Spec) (*funcInfo, error) {
+	typ, err := spec.TypeByID(fi.TypeID)
+	if err != nil {
+		return nil, err
+	}
+
+	fn, ok := typ.(*Func)
+	if !ok {
+		return nil, fmt.Errorf("type ID %d is a %T, but expected a Func", fi.TypeID, typ)
+	}
+
+	// C doesn't have anonymous functions, but check just in case.
+	if fn.Name == "" {
+		return nil, fmt.Errorf("func with type ID %d doesn't have a name", fi.TypeID)
+	}
+
+	return &funcInfo{
+		fn,
+		asm.RawInstructionOffset(fi.InsnOff),
+	}, nil
+}
+
+func newFuncInfos(bfis []bpfFuncInfo, spec *Spec) ([]funcInfo, error) {
+	fis := make([]funcInfo, 0, len(bfis))
+	for _, bfi := range bfis {
+		fi, err := newFuncInfo(bfi, spec)
+		if err != nil {
+			return nil, fmt.Errorf("offset %d: %w", bfi.InsnOff, err)
+		}
+		fis = append(fis, *fi)
+	}
+	sort.Slice(fis, func(i, j int) bool {
+		return fis[i].offset <= fis[j].offset
+	})
+	return fis, nil
+}
+
+// marshal into the BTF wire format.
+func (fi *funcInfo) marshal(w *bytes.Buffer, b *Builder) error {
+	id, err := b.Add(fi.fn)
+	if err != nil {
+		return err
+	}
+	bfi := bpfFuncInfo{
+		InsnOff: uint32(fi.offset),
+		TypeID:  id,
+	}
+	buf := make([]byte, FuncInfoSize)
+	internal.NativeEndian.PutUint32(buf, bfi.InsnOff)
+	internal.NativeEndian.PutUint32(buf[4:], uint32(bfi.TypeID))
+	_, err = w.Write(buf)
+	return err
+}
+
+// parseFuncInfos parses a func_info sub-section within .BTF.ext ito a map of
+// func infos indexed by section name.
+func parseFuncInfos(r io.Reader, bo binary.ByteOrder, strings *stringTable) (map[string][]bpfFuncInfo, error) {
+	recordSize, err := parseExtInfoRecordSize(r, bo)
+	if err != nil {
+		return nil, err
+	}
+
+	result := make(map[string][]bpfFuncInfo)
+	for {
+		secName, infoHeader, err := parseExtInfoSec(r, bo, strings)
+		if errors.Is(err, io.EOF) {
+			return result, nil
+		}
+		if err != nil {
+			return nil, err
+		}
+
+		records, err := parseFuncInfoRecords(r, bo, recordSize, infoHeader.NumInfo)
+		if err != nil {
+			return nil, fmt.Errorf("section %v: %w", secName, err)
+		}
+
+		result[secName] = records
+	}
+}
+
+// parseFuncInfoRecords parses a stream of func_infos into a funcInfos.
+// These records appear after a btf_ext_info_sec header in the func_info
+// sub-section of .BTF.ext.
+func parseFuncInfoRecords(r io.Reader, bo binary.ByteOrder, recordSize uint32, recordNum uint32) ([]bpfFuncInfo, error) {
+	var out []bpfFuncInfo
+	var fi bpfFuncInfo
+
+	if exp, got := FuncInfoSize, recordSize; exp != got {
+		// BTF blob's record size is longer than we know how to parse.
+		return nil, fmt.Errorf("expected FuncInfo record size %d, but BTF blob contains %d", exp, got)
+	}
+
+	for i := uint32(0); i < recordNum; i++ {
+		if err := binary.Read(r, bo, &fi); err != nil {
+			return nil, fmt.Errorf("can't read function info: %v", err)
+		}
+
+		if fi.InsnOff%asm.InstructionSize != 0 {
+			return nil, fmt.Errorf("offset %v is not aligned with instruction size", fi.InsnOff)
+		}
+
+		// ELF tracks offset in bytes, the kernel expects raw BPF instructions.
+		// Convert as early as possible.
+		fi.InsnOff /= asm.InstructionSize
+
+		out = append(out, fi)
+	}
+
+	return out, nil
+}
+
+var LineInfoSize = uint32(binary.Size(bpfLineInfo{}))
+
+// Line represents the location and contents of a single line of source
+// code a BPF ELF was compiled from.
+type Line struct {
+	fileName   string
+	line       string
+	lineNumber uint32
+	lineColumn uint32
+}
+
+func (li *Line) FileName() string {
+	return li.fileName
+}
+
+func (li *Line) Line() string {
+	return li.line
+}
+
+func (li *Line) LineNumber() uint32 {
+	return li.lineNumber
+}
+
+func (li *Line) LineColumn() uint32 {
+	return li.lineColumn
+}
+
+func (li *Line) String() string {
+	return li.line
+}
+
+type lineInfo struct {
+	line   *Line
+	offset asm.RawInstructionOffset
+}
+
+// Constants for the format of bpfLineInfo.LineCol.
+const (
+	bpfLineShift = 10
+	bpfLineMax   = (1 << (32 - bpfLineShift)) - 1
+	bpfColumnMax = (1 << bpfLineShift) - 1
+)
+
+type bpfLineInfo struct {
+	// Instruction offset of the line within the whole instruction stream, in instructions.
+	InsnOff     uint32
+	FileNameOff uint32
+	LineOff     uint32
+	LineCol     uint32
+}
+
+func newLineInfo(li bpfLineInfo, strings *stringTable) (*lineInfo, error) {
+	line, err := strings.Lookup(li.LineOff)
+	if err != nil {
+		return nil, fmt.Errorf("lookup of line: %w", err)
+	}
+
+	fileName, err := strings.Lookup(li.FileNameOff)
+	if err != nil {
+		return nil, fmt.Errorf("lookup of filename: %w", err)
+	}
+
+	lineNumber := li.LineCol >> bpfLineShift
+	lineColumn := li.LineCol & bpfColumnMax
+
+	return &lineInfo{
+		&Line{
+			fileName,
+			line,
+			lineNumber,
+			lineColumn,
+		},
+		asm.RawInstructionOffset(li.InsnOff),
+	}, nil
+}
+
+func newLineInfos(blis []bpfLineInfo, strings *stringTable) ([]lineInfo, error) {
+	lis := make([]lineInfo, 0, len(blis))
+	for _, bli := range blis {
+		li, err := newLineInfo(bli, strings)
+		if err != nil {
+			return nil, fmt.Errorf("offset %d: %w", bli.InsnOff, err)
+		}
+		lis = append(lis, *li)
+	}
+	sort.Slice(lis, func(i, j int) bool {
+		return lis[i].offset <= lis[j].offset
+	})
+	return lis, nil
+}
+
+// marshal writes the binary representation of the LineInfo to w.
+func (li *lineInfo) marshal(w *bytes.Buffer, b *Builder) error {
+	line := li.line
+	if line.lineNumber > bpfLineMax {
+		return fmt.Errorf("line %d exceeds %d", line.lineNumber, bpfLineMax)
+	}
+
+	if line.lineColumn > bpfColumnMax {
+		return fmt.Errorf("column %d exceeds %d", line.lineColumn, bpfColumnMax)
+	}
+
+	fileNameOff, err := b.addString(line.fileName)
+	if err != nil {
+		return fmt.Errorf("file name %q: %w", line.fileName, err)
+	}
+
+	lineOff, err := b.addString(line.line)
+	if err != nil {
+		return fmt.Errorf("line %q: %w", line.line, err)
+	}
+
+	bli := bpfLineInfo{
+		uint32(li.offset),
+		fileNameOff,
+		lineOff,
+		(line.lineNumber << bpfLineShift) | line.lineColumn,
+	}
+
+	buf := make([]byte, LineInfoSize)
+	internal.NativeEndian.PutUint32(buf, bli.InsnOff)
+	internal.NativeEndian.PutUint32(buf[4:], bli.FileNameOff)
+	internal.NativeEndian.PutUint32(buf[8:], bli.LineOff)
+	internal.NativeEndian.PutUint32(buf[12:], bli.LineCol)
+	_, err = w.Write(buf)
+	return err
+}
+
+// parseLineInfos parses a line_info sub-section within .BTF.ext ito a map of
+// line infos indexed by section name.
+func parseLineInfos(r io.Reader, bo binary.ByteOrder, strings *stringTable) (map[string][]bpfLineInfo, error) {
+	recordSize, err := parseExtInfoRecordSize(r, bo)
+	if err != nil {
+		return nil, err
+	}
+
+	result := make(map[string][]bpfLineInfo)
+	for {
+		secName, infoHeader, err := parseExtInfoSec(r, bo, strings)
+		if errors.Is(err, io.EOF) {
+			return result, nil
+		}
+		if err != nil {
+			return nil, err
+		}
+
+		records, err := parseLineInfoRecords(r, bo, recordSize, infoHeader.NumInfo)
+		if err != nil {
+			return nil, fmt.Errorf("section %v: %w", secName, err)
+		}
+
+		result[secName] = records
+	}
+}
+
+// parseLineInfoRecords parses a stream of line_infos into a lineInfos.
+// These records appear after a btf_ext_info_sec header in the line_info
+// sub-section of .BTF.ext.
+func parseLineInfoRecords(r io.Reader, bo binary.ByteOrder, recordSize uint32, recordNum uint32) ([]bpfLineInfo, error) {
+	var out []bpfLineInfo
+	var li bpfLineInfo
+
+	if exp, got := uint32(binary.Size(li)), recordSize; exp != got {
+		// BTF blob's record size is longer than we know how to parse.
+		return nil, fmt.Errorf("expected LineInfo record size %d, but BTF blob contains %d", exp, got)
+	}
+
+	for i := uint32(0); i < recordNum; i++ {
+		if err := binary.Read(r, bo, &li); err != nil {
+			return nil, fmt.Errorf("can't read line info: %v", err)
+		}
+
+		if li.InsnOff%asm.InstructionSize != 0 {
+			return nil, fmt.Errorf("offset %v is not aligned with instruction size", li.InsnOff)
+		}
+
+		// ELF tracks offset in bytes, the kernel expects raw BPF instructions.
+		// Convert as early as possible.
+		li.InsnOff /= asm.InstructionSize
+
+		out = append(out, li)
+	}
+
+	return out, nil
+}
+
+// bpfCORERelo matches the kernel's struct bpf_core_relo.
+type bpfCORERelo struct {
+	InsnOff      uint32
+	TypeID       TypeID
+	AccessStrOff uint32
+	Kind         coreKind
+}
+
+type CORERelocation struct {
+	// The local type of the relocation, stripped of typedefs and qualifiers.
+	typ      Type
+	accessor coreAccessor
+	kind     coreKind
+	// The ID of the local type in the source BTF.
+	id TypeID
+}
+
+func (cr *CORERelocation) String() string {
+	return fmt.Sprintf("CORERelocation(%s, %s[%s], local_id=%d)", cr.kind, cr.typ, cr.accessor, cr.id)
+}
+
+func CORERelocationMetadata(ins *asm.Instruction) *CORERelocation {
+	relo, _ := ins.Metadata.Get(coreRelocationMeta{}).(*CORERelocation)
+	return relo
+}
+
+type coreRelocationInfo struct {
+	relo   *CORERelocation
+	offset asm.RawInstructionOffset
+}
+
+func newRelocationInfo(relo bpfCORERelo, spec *Spec, strings *stringTable) (*coreRelocationInfo, error) {
+	typ, err := spec.TypeByID(relo.TypeID)
+	if err != nil {
+		return nil, err
+	}
+
+	accessorStr, err := strings.Lookup(relo.AccessStrOff)
+	if err != nil {
+		return nil, err
+	}
+
+	accessor, err := parseCOREAccessor(accessorStr)
+	if err != nil {
+		return nil, fmt.Errorf("accessor %q: %s", accessorStr, err)
+	}
+
+	return &coreRelocationInfo{
+		&CORERelocation{
+			typ,
+			accessor,
+			relo.Kind,
+			relo.TypeID,
+		},
+		asm.RawInstructionOffset(relo.InsnOff),
+	}, nil
+}
+
+func newRelocationInfos(brs []bpfCORERelo, spec *Spec, strings *stringTable) ([]coreRelocationInfo, error) {
+	rs := make([]coreRelocationInfo, 0, len(brs))
+	for _, br := range brs {
+		relo, err := newRelocationInfo(br, spec, strings)
+		if err != nil {
+			return nil, fmt.Errorf("offset %d: %w", br.InsnOff, err)
+		}
+		rs = append(rs, *relo)
+	}
+	sort.Slice(rs, func(i, j int) bool {
+		return rs[i].offset < rs[j].offset
+	})
+	return rs, nil
+}
+
+var extInfoReloSize = binary.Size(bpfCORERelo{})
+
+// parseCORERelos parses a core_relos sub-section within .BTF.ext ito a map of
+// CO-RE relocations indexed by section name.
+func parseCORERelos(r io.Reader, bo binary.ByteOrder, strings *stringTable) (map[string][]bpfCORERelo, error) {
+	recordSize, err := parseExtInfoRecordSize(r, bo)
+	if err != nil {
+		return nil, err
+	}
+
+	if recordSize != uint32(extInfoReloSize) {
+		return nil, fmt.Errorf("expected record size %d, got %d", extInfoReloSize, recordSize)
+	}
+
+	result := make(map[string][]bpfCORERelo)
+	for {
+		secName, infoHeader, err := parseExtInfoSec(r, bo, strings)
+		if errors.Is(err, io.EOF) {
+			return result, nil
+		}
+		if err != nil {
+			return nil, err
+		}
+
+		records, err := parseCOREReloRecords(r, bo, recordSize, infoHeader.NumInfo)
+		if err != nil {
+			return nil, fmt.Errorf("section %v: %w", secName, err)
+		}
+
+		result[secName] = records
+	}
+}
+
+// parseCOREReloRecords parses a stream of CO-RE relocation entries into a
+// coreRelos. These records appear after a btf_ext_info_sec header in the
+// core_relos sub-section of .BTF.ext.
+func parseCOREReloRecords(r io.Reader, bo binary.ByteOrder, recordSize uint32, recordNum uint32) ([]bpfCORERelo, error) {
+	var out []bpfCORERelo
+
+	var relo bpfCORERelo
+	for i := uint32(0); i < recordNum; i++ {
+		if err := binary.Read(r, bo, &relo); err != nil {
+			return nil, fmt.Errorf("can't read CO-RE relocation: %v", err)
+		}
+
+		if relo.InsnOff%asm.InstructionSize != 0 {
+			return nil, fmt.Errorf("offset %v is not aligned with instruction size", relo.InsnOff)
+		}
+
+		// ELF tracks offset in bytes, the kernel expects raw BPF instructions.
+		// Convert as early as possible.
+		relo.InsnOff /= asm.InstructionSize
+
+		out = append(out, relo)
+	}
+
+	return out, nil
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/format.go b/vendor/github.com/cilium/ebpf/btf/format.go
new file mode 100644
index 00000000000..e85220259e7
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/format.go
@@ -0,0 +1,344 @@
+package btf
+
+import (
+	"errors"
+	"fmt"
+	"strings"
+)
+
+var errNestedTooDeep = errors.New("nested too deep")
+
+// GoFormatter converts a Type to Go syntax.
+//
+// A zero GoFormatter is valid to use.
+type GoFormatter struct {
+	w strings.Builder
+
+	// Types present in this map are referred to using the given name if they
+	// are encountered when outputting another type.
+	Names map[Type]string
+
+	// Identifier is called for each field of struct-like types. By default the
+	// field name is used as is.
+	Identifier func(string) string
+
+	// EnumIdentifier is called for each element of an enum. By default the
+	// name of the enum type is concatenated with Identifier(element).
+	EnumIdentifier func(name, element string) string
+}
+
+// TypeDeclaration generates a Go type declaration for a BTF type.
+func (gf *GoFormatter) TypeDeclaration(name string, typ Type) (string, error) {
+	gf.w.Reset()
+	if err := gf.writeTypeDecl(name, typ); err != nil {
+		return "", err
+	}
+	return gf.w.String(), nil
+}
+
+func (gf *GoFormatter) identifier(s string) string {
+	if gf.Identifier != nil {
+		return gf.Identifier(s)
+	}
+
+	return s
+}
+
+func (gf *GoFormatter) enumIdentifier(name, element string) string {
+	if gf.EnumIdentifier != nil {
+		return gf.EnumIdentifier(name, element)
+	}
+
+	return name + gf.identifier(element)
+}
+
+// writeTypeDecl outputs a declaration of the given type.
+//
+// It encodes https://golang.org/ref/spec#Type_declarations:
+//
+//	type foo struct { bar uint32; }
+//	type bar int32
+func (gf *GoFormatter) writeTypeDecl(name string, typ Type) error {
+	if name == "" {
+		return fmt.Errorf("need a name for type %s", typ)
+	}
+
+	typ = skipQualifiers(typ)
+	fmt.Fprintf(&gf.w, "type %s ", name)
+	if err := gf.writeTypeLit(typ, 0); err != nil {
+		return err
+	}
+
+	e, ok := typ.(*Enum)
+	if !ok || len(e.Values) == 0 {
+		return nil
+	}
+
+	gf.w.WriteString("; const ( ")
+	for _, ev := range e.Values {
+		id := gf.enumIdentifier(name, ev.Name)
+		fmt.Fprintf(&gf.w, "%s %s = %d; ", id, name, ev.Value)
+	}
+	gf.w.WriteString(")")
+
+	return nil
+}
+
+// writeType outputs the name of a named type or a literal describing the type.
+//
+// It encodes https://golang.org/ref/spec#Types.
+//
+//	foo                  (if foo is a named type)
+//	uint32
+func (gf *GoFormatter) writeType(typ Type, depth int) error {
+	typ = skipQualifiers(typ)
+
+	name := gf.Names[typ]
+	if name != "" {
+		gf.w.WriteString(name)
+		return nil
+	}
+
+	return gf.writeTypeLit(typ, depth)
+}
+
+// writeTypeLit outputs a literal describing the type.
+//
+// The function ignores named types.
+//
+// It encodes https://golang.org/ref/spec#TypeLit.
+//
+//	struct { bar uint32; }
+//	uint32
+func (gf *GoFormatter) writeTypeLit(typ Type, depth int) error {
+	depth++
+	if depth > maxTypeDepth {
+		return errNestedTooDeep
+	}
+
+	var err error
+	switch v := skipQualifiers(typ).(type) {
+	case *Int:
+		err = gf.writeIntLit(v)
+
+	case *Enum:
+		if !v.Signed {
+			gf.w.WriteRune('u')
+		}
+		switch v.Size {
+		case 1:
+			gf.w.WriteString("int8")
+		case 2:
+			gf.w.WriteString("int16")
+		case 4:
+			gf.w.WriteString("int32")
+		case 8:
+			gf.w.WriteString("int64")
+		default:
+			err = fmt.Errorf("invalid enum size %d", v.Size)
+		}
+
+	case *Typedef:
+		err = gf.writeType(v.Type, depth)
+
+	case *Array:
+		fmt.Fprintf(&gf.w, "[%d]", v.Nelems)
+		err = gf.writeType(v.Type, depth)
+
+	case *Struct:
+		err = gf.writeStructLit(v.Size, v.Members, depth)
+
+	case *Union:
+		// Always choose the first member to represent the union in Go.
+		err = gf.writeStructLit(v.Size, v.Members[:1], depth)
+
+	case *Datasec:
+		err = gf.writeDatasecLit(v, depth)
+
+	default:
+		return fmt.Errorf("type %T: %w", v, ErrNotSupported)
+	}
+
+	if err != nil {
+		return fmt.Errorf("%s: %w", typ, err)
+	}
+
+	return nil
+}
+
+func (gf *GoFormatter) writeIntLit(i *Int) error {
+	bits := i.Size * 8
+	switch i.Encoding {
+	case Bool:
+		if i.Size != 1 {
+			return fmt.Errorf("bool with size %d", i.Size)
+		}
+		gf.w.WriteString("bool")
+	case Char:
+		if i.Size != 1 {
+			return fmt.Errorf("char with size %d", i.Size)
+		}
+		// BTF doesn't have a way to specify the signedness of a char. Assume
+		// we are dealing with unsigned, since this works nicely with []byte
+		// in Go code.
+		fallthrough
+	case Unsigned, Signed:
+		stem := "uint"
+		if i.Encoding == Signed {
+			stem = "int"
+		}
+		if i.Size > 8 {
+			fmt.Fprintf(&gf.w, "[%d]byte /* %s%d */", i.Size, stem, i.Size*8)
+		} else {
+			fmt.Fprintf(&gf.w, "%s%d", stem, bits)
+		}
+	default:
+		return fmt.Errorf("can't encode %s", i.Encoding)
+	}
+	return nil
+}
+
+func (gf *GoFormatter) writeStructLit(size uint32, members []Member, depth int) error {
+	gf.w.WriteString("struct { ")
+
+	prevOffset := uint32(0)
+	skippedBitfield := false
+	for i, m := range members {
+		if m.BitfieldSize > 0 {
+			skippedBitfield = true
+			continue
+		}
+
+		offset := m.Offset.Bytes()
+		if n := offset - prevOffset; skippedBitfield && n > 0 {
+			fmt.Fprintf(&gf.w, "_ [%d]byte /* unsupported bitfield */; ", n)
+		} else {
+			gf.writePadding(n)
+		}
+
+		fieldSize, err := Sizeof(m.Type)
+		if err != nil {
+			return fmt.Errorf("field %d: %w", i, err)
+		}
+
+		prevOffset = offset + uint32(fieldSize)
+		if prevOffset > size {
+			return fmt.Errorf("field %d of size %d exceeds type size %d", i, fieldSize, size)
+		}
+
+		if err := gf.writeStructField(m, depth); err != nil {
+			return fmt.Errorf("field %d: %w", i, err)
+		}
+	}
+
+	gf.writePadding(size - prevOffset)
+	gf.w.WriteString("}")
+	return nil
+}
+
+func (gf *GoFormatter) writeStructField(m Member, depth int) error {
+	if m.BitfieldSize > 0 {
+		return fmt.Errorf("bitfields are not supported")
+	}
+	if m.Offset%8 != 0 {
+		return fmt.Errorf("unsupported offset %d", m.Offset)
+	}
+
+	if m.Name == "" {
+		// Special case a nested anonymous union like
+		//     struct foo { union { int bar; int baz }; }
+		// by replacing the whole union with its first member.
+		union, ok := m.Type.(*Union)
+		if !ok {
+			return fmt.Errorf("anonymous fields are not supported")
+
+		}
+
+		if len(union.Members) == 0 {
+			return errors.New("empty anonymous union")
+		}
+
+		depth++
+		if depth > maxTypeDepth {
+			return errNestedTooDeep
+		}
+
+		m := union.Members[0]
+		size, err := Sizeof(m.Type)
+		if err != nil {
+			return err
+		}
+
+		if err := gf.writeStructField(m, depth); err != nil {
+			return err
+		}
+
+		gf.writePadding(union.Size - uint32(size))
+		return nil
+
+	}
+
+	fmt.Fprintf(&gf.w, "%s ", gf.identifier(m.Name))
+
+	if err := gf.writeType(m.Type, depth); err != nil {
+		return err
+	}
+
+	gf.w.WriteString("; ")
+	return nil
+}
+
+func (gf *GoFormatter) writeDatasecLit(ds *Datasec, depth int) error {
+	gf.w.WriteString("struct { ")
+
+	prevOffset := uint32(0)
+	for i, vsi := range ds.Vars {
+		v, ok := vsi.Type.(*Var)
+		if !ok {
+			return fmt.Errorf("can't format %s as part of data section", vsi.Type)
+		}
+
+		if v.Linkage != GlobalVar {
+			// Ignore static, extern, etc. for now.
+			continue
+		}
+
+		if v.Name == "" {
+			return fmt.Errorf("variable %d: empty name", i)
+		}
+
+		gf.writePadding(vsi.Offset - prevOffset)
+		prevOffset = vsi.Offset + vsi.Size
+
+		fmt.Fprintf(&gf.w, "%s ", gf.identifier(v.Name))
+
+		if err := gf.writeType(v.Type, depth); err != nil {
+			return fmt.Errorf("variable %d: %w", i, err)
+		}
+
+		gf.w.WriteString("; ")
+	}
+
+	gf.writePadding(ds.Size - prevOffset)
+	gf.w.WriteString("}")
+	return nil
+}
+
+func (gf *GoFormatter) writePadding(bytes uint32) {
+	if bytes > 0 {
+		fmt.Fprintf(&gf.w, "_ [%d]byte; ", bytes)
+	}
+}
+
+func skipQualifiers(typ Type) Type {
+	result := typ
+	for depth := 0; depth <= maxTypeDepth; depth++ {
+		switch v := (result).(type) {
+		case qualifier:
+			result = v.qualify()
+		default:
+			return result
+		}
+	}
+	return &cycle{typ}
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/handle.go b/vendor/github.com/cilium/ebpf/btf/handle.go
new file mode 100644
index 00000000000..b6b3e87f504
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/handle.go
@@ -0,0 +1,287 @@
+package btf
+
+import (
+	"bytes"
+	"errors"
+	"fmt"
+	"math"
+	"os"
+
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// Handle is a reference to BTF loaded into the kernel.
+type Handle struct {
+	fd *sys.FD
+
+	// Size of the raw BTF in bytes.
+	size uint32
+
+	needsKernelBase bool
+}
+
+// NewHandle loads the contents of a [Builder] into the kernel.
+//
+// Returns an error wrapping ErrNotSupported if the kernel doesn't support BTF.
+func NewHandle(b *Builder) (*Handle, error) {
+	small := getByteSlice()
+	defer putByteSlice(small)
+
+	buf, err := b.Marshal(*small, KernelMarshalOptions())
+	if err != nil {
+		return nil, fmt.Errorf("marshal BTF: %w", err)
+	}
+
+	return NewHandleFromRawBTF(buf)
+}
+
+// NewHandleFromRawBTF loads raw BTF into the kernel.
+//
+// Returns an error wrapping ErrNotSupported if the kernel doesn't support BTF.
+func NewHandleFromRawBTF(btf []byte) (*Handle, error) {
+	if uint64(len(btf)) > math.MaxUint32 {
+		return nil, errors.New("BTF exceeds the maximum size")
+	}
+
+	attr := &sys.BtfLoadAttr{
+		Btf:     sys.NewSlicePointer(btf),
+		BtfSize: uint32(len(btf)),
+	}
+
+	fd, err := sys.BtfLoad(attr)
+	if err == nil {
+		return &Handle{fd, attr.BtfSize, false}, nil
+	}
+
+	if err := haveBTF(); err != nil {
+		return nil, err
+	}
+
+	logBuf := make([]byte, 64*1024)
+	attr.BtfLogBuf = sys.NewSlicePointer(logBuf)
+	attr.BtfLogSize = uint32(len(logBuf))
+	attr.BtfLogLevel = 1
+
+	// Up until at least kernel 6.0, the BTF verifier does not return ENOSPC
+	// if there are other verification errors. ENOSPC is only returned when
+	// the BTF blob is correct, a log was requested, and the provided buffer
+	// is too small.
+	_, ve := sys.BtfLoad(attr)
+	return nil, internal.ErrorWithLog("load btf", err, logBuf, errors.Is(ve, unix.ENOSPC))
+}
+
+// NewHandleFromID returns the BTF handle for a given id.
+//
+// Prefer calling [ebpf.Program.Handle] or [ebpf.Map.Handle] if possible.
+//
+// Returns ErrNotExist, if there is no BTF with the given id.
+//
+// Requires CAP_SYS_ADMIN.
+func NewHandleFromID(id ID) (*Handle, error) {
+	fd, err := sys.BtfGetFdById(&sys.BtfGetFdByIdAttr{
+		Id: uint32(id),
+	})
+	if err != nil {
+		return nil, fmt.Errorf("get FD for ID %d: %w", id, err)
+	}
+
+	info, err := newHandleInfoFromFD(fd)
+	if err != nil {
+		_ = fd.Close()
+		return nil, err
+	}
+
+	return &Handle{fd, info.size, info.IsModule()}, nil
+}
+
+// Spec parses the kernel BTF into Go types.
+//
+// base must contain type information for vmlinux if the handle is for
+// a kernel module. It may be nil otherwise.
+func (h *Handle) Spec(base *Spec) (*Spec, error) {
+	var btfInfo sys.BtfInfo
+	btfBuffer := make([]byte, h.size)
+	btfInfo.Btf, btfInfo.BtfSize = sys.NewSlicePointerLen(btfBuffer)
+
+	if err := sys.ObjInfo(h.fd, &btfInfo); err != nil {
+		return nil, err
+	}
+
+	if h.needsKernelBase && base == nil {
+		return nil, fmt.Errorf("missing base types")
+	}
+
+	return loadRawSpec(bytes.NewReader(btfBuffer), internal.NativeEndian, base)
+}
+
+// Close destroys the handle.
+//
+// Subsequent calls to FD will return an invalid value.
+func (h *Handle) Close() error {
+	if h == nil {
+		return nil
+	}
+
+	return h.fd.Close()
+}
+
+// FD returns the file descriptor for the handle.
+func (h *Handle) FD() int {
+	return h.fd.Int()
+}
+
+// Info returns metadata about the handle.
+func (h *Handle) Info() (*HandleInfo, error) {
+	return newHandleInfoFromFD(h.fd)
+}
+
+// HandleInfo describes a Handle.
+type HandleInfo struct {
+	// ID of this handle in the kernel. The ID is only valid as long as the
+	// associated handle is kept alive.
+	ID ID
+
+	// Name is an identifying name for the BTF, currently only used by the
+	// kernel.
+	Name string
+
+	// IsKernel is true if the BTF originated with the kernel and not
+	// userspace.
+	IsKernel bool
+
+	// Size of the raw BTF in bytes.
+	size uint32
+}
+
+func newHandleInfoFromFD(fd *sys.FD) (*HandleInfo, error) {
+	// We invoke the syscall once with a empty BTF and name buffers to get size
+	// information to allocate buffers. Then we invoke it a second time with
+	// buffers to receive the data.
+	var btfInfo sys.BtfInfo
+	if err := sys.ObjInfo(fd, &btfInfo); err != nil {
+		return nil, fmt.Errorf("get BTF info for fd %s: %w", fd, err)
+	}
+
+	if btfInfo.NameLen > 0 {
+		// NameLen doesn't account for the terminating NUL.
+		btfInfo.NameLen++
+	}
+
+	// Don't pull raw BTF by default, since it may be quite large.
+	btfSize := btfInfo.BtfSize
+	btfInfo.BtfSize = 0
+
+	nameBuffer := make([]byte, btfInfo.NameLen)
+	btfInfo.Name, btfInfo.NameLen = sys.NewSlicePointerLen(nameBuffer)
+	if err := sys.ObjInfo(fd, &btfInfo); err != nil {
+		return nil, err
+	}
+
+	return &HandleInfo{
+		ID:       ID(btfInfo.Id),
+		Name:     unix.ByteSliceToString(nameBuffer),
+		IsKernel: btfInfo.KernelBtf != 0,
+		size:     btfSize,
+	}, nil
+}
+
+// IsVmlinux returns true if the BTF is for the kernel itself.
+func (i *HandleInfo) IsVmlinux() bool {
+	return i.IsKernel && i.Name == "vmlinux"
+}
+
+// IsModule returns true if the BTF is for a kernel module.
+func (i *HandleInfo) IsModule() bool {
+	return i.IsKernel && i.Name != "vmlinux"
+}
+
+// HandleIterator allows enumerating BTF blobs loaded into the kernel.
+type HandleIterator struct {
+	// The ID of the current handle. Only valid after a call to Next.
+	ID ID
+	// The current Handle. Only valid until a call to Next.
+	// See Take if you want to retain the handle.
+	Handle *Handle
+	err    error
+}
+
+// Next retrieves a handle for the next BTF object.
+//
+// Returns true if another BTF object was found. Call [HandleIterator.Err] after
+// the function returns false.
+func (it *HandleIterator) Next() bool {
+	id := it.ID
+	for {
+		attr := &sys.BtfGetNextIdAttr{Id: id}
+		err := sys.BtfGetNextId(attr)
+		if errors.Is(err, os.ErrNotExist) {
+			// There are no more BTF objects.
+			break
+		} else if err != nil {
+			it.err = fmt.Errorf("get next BTF ID: %w", err)
+			break
+		}
+
+		id = attr.NextId
+		handle, err := NewHandleFromID(id)
+		if errors.Is(err, os.ErrNotExist) {
+			// Try again with the next ID.
+			continue
+		} else if err != nil {
+			it.err = fmt.Errorf("retrieve handle for ID %d: %w", id, err)
+			break
+		}
+
+		it.Handle.Close()
+		it.ID, it.Handle = id, handle
+		return true
+	}
+
+	// No more handles or we encountered an error.
+	it.Handle.Close()
+	it.Handle = nil
+	return false
+}
+
+// Take the ownership of the current handle.
+//
+// It's the callers responsibility to close the handle.
+func (it *HandleIterator) Take() *Handle {
+	handle := it.Handle
+	it.Handle = nil
+	return handle
+}
+
+// Err returns an error if iteration failed for some reason.
+func (it *HandleIterator) Err() error {
+	return it.err
+}
+
+// FindHandle returns the first handle for which predicate returns true.
+//
+// Requires CAP_SYS_ADMIN.
+//
+// Returns an error wrapping ErrNotFound if predicate never returns true or if
+// there is no BTF loaded into the kernel.
+func FindHandle(predicate func(info *HandleInfo) bool) (*Handle, error) {
+	it := new(HandleIterator)
+	defer it.Handle.Close()
+
+	for it.Next() {
+		info, err := it.Handle.Info()
+		if err != nil {
+			return nil, fmt.Errorf("info for ID %d: %w", it.ID, err)
+		}
+
+		if predicate(info) {
+			return it.Take(), nil
+		}
+	}
+	if err := it.Err(); err != nil {
+		return nil, fmt.Errorf("iterate handles: %w", err)
+	}
+
+	return nil, fmt.Errorf("find handle: %w", ErrNotFound)
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/marshal.go b/vendor/github.com/cilium/ebpf/btf/marshal.go
new file mode 100644
index 00000000000..bfe53b41072
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/marshal.go
@@ -0,0 +1,543 @@
+package btf
+
+import (
+	"bytes"
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"math"
+	"sync"
+
+	"github.com/cilium/ebpf/internal"
+
+	"golang.org/x/exp/slices"
+)
+
+type MarshalOptions struct {
+	// Target byte order. Defaults to the system's native endianness.
+	Order binary.ByteOrder
+	// Remove function linkage information for compatibility with <5.6 kernels.
+	StripFuncLinkage bool
+}
+
+// KernelMarshalOptions will generate BTF suitable for the current kernel.
+func KernelMarshalOptions() *MarshalOptions {
+	return &MarshalOptions{
+		Order:            internal.NativeEndian,
+		StripFuncLinkage: haveFuncLinkage() != nil,
+	}
+}
+
+// encoder turns Types into raw BTF.
+type encoder struct {
+	MarshalOptions
+
+	pending internal.Deque[Type]
+	buf     *bytes.Buffer
+	strings *stringTableBuilder
+	ids     map[Type]TypeID
+	lastID  TypeID
+}
+
+var bufferPool = sync.Pool{
+	New: func() any {
+		buf := make([]byte, btfHeaderLen+128)
+		return &buf
+	},
+}
+
+func getByteSlice() *[]byte {
+	return bufferPool.Get().(*[]byte)
+}
+
+func putByteSlice(buf *[]byte) {
+	*buf = (*buf)[:0]
+	bufferPool.Put(buf)
+}
+
+// Builder turns Types into raw BTF.
+//
+// The default value may be used and represents an empty BTF blob. Void is
+// added implicitly if necessary.
+type Builder struct {
+	// Explicitly added types.
+	types []Type
+	// IDs for all added types which the user knows about.
+	stableIDs map[Type]TypeID
+	// Explicitly added strings.
+	strings *stringTableBuilder
+}
+
+// NewBuilder creates a Builder from a list of types.
+//
+// It is more efficient than calling [Add] individually.
+//
+// Returns an error if adding any of the types fails.
+func NewBuilder(types []Type) (*Builder, error) {
+	b := &Builder{
+		make([]Type, 0, len(types)),
+		make(map[Type]TypeID, len(types)),
+		nil,
+	}
+
+	for _, typ := range types {
+		_, err := b.Add(typ)
+		if err != nil {
+			return nil, fmt.Errorf("add %s: %w", typ, err)
+		}
+	}
+
+	return b, nil
+}
+
+// Add a Type and allocate a stable ID for it.
+//
+// Adding the identical Type multiple times is valid and will return the same ID.
+//
+// See [Type] for details on identity.
+func (b *Builder) Add(typ Type) (TypeID, error) {
+	if b.stableIDs == nil {
+		b.stableIDs = make(map[Type]TypeID)
+	}
+
+	if _, ok := typ.(*Void); ok {
+		// Equality is weird for void, since it is a zero sized type.
+		return 0, nil
+	}
+
+	if ds, ok := typ.(*Datasec); ok {
+		if err := datasecResolveWorkaround(b, ds); err != nil {
+			return 0, err
+		}
+	}
+
+	id, ok := b.stableIDs[typ]
+	if ok {
+		return id, nil
+	}
+
+	b.types = append(b.types, typ)
+
+	id = TypeID(len(b.types))
+	if int(id) != len(b.types) {
+		return 0, fmt.Errorf("no more type IDs")
+	}
+
+	b.stableIDs[typ] = id
+	return id, nil
+}
+
+// Marshal encodes all types in the Marshaler into BTF wire format.
+//
+// opts may be nil.
+func (b *Builder) Marshal(buf []byte, opts *MarshalOptions) ([]byte, error) {
+	stb := b.strings
+	if stb == nil {
+		// Assume that most types are named. This makes encoding large BTF like
+		// vmlinux a lot cheaper.
+		stb = newStringTableBuilder(len(b.types))
+	} else {
+		// Avoid modifying the Builder's string table.
+		stb = b.strings.Copy()
+	}
+
+	if opts == nil {
+		opts = &MarshalOptions{Order: internal.NativeEndian}
+	}
+
+	// Reserve space for the BTF header.
+	buf = slices.Grow(buf, btfHeaderLen)[:btfHeaderLen]
+
+	w := internal.NewBuffer(buf)
+	defer internal.PutBuffer(w)
+
+	e := encoder{
+		MarshalOptions: *opts,
+		buf:            w,
+		strings:        stb,
+		lastID:         TypeID(len(b.types)),
+		ids:            make(map[Type]TypeID, len(b.types)),
+	}
+
+	// Ensure that types are marshaled in the exact order they were Add()ed.
+	// Otherwise the ID returned from Add() won't match.
+	e.pending.Grow(len(b.types))
+	for _, typ := range b.types {
+		e.pending.Push(typ)
+		e.ids[typ] = b.stableIDs[typ]
+	}
+
+	if err := e.deflatePending(); err != nil {
+		return nil, err
+	}
+
+	length := e.buf.Len()
+	typeLen := uint32(length - btfHeaderLen)
+
+	stringLen := e.strings.Length()
+	buf = e.strings.AppendEncoded(e.buf.Bytes())
+
+	// Fill out the header, and write it out.
+	header := &btfHeader{
+		Magic:     btfMagic,
+		Version:   1,
+		Flags:     0,
+		HdrLen:    uint32(btfHeaderLen),
+		TypeOff:   0,
+		TypeLen:   typeLen,
+		StringOff: typeLen,
+		StringLen: uint32(stringLen),
+	}
+
+	err := binary.Write(sliceWriter(buf[:btfHeaderLen]), e.Order, header)
+	if err != nil {
+		return nil, fmt.Errorf("write header: %v", err)
+	}
+
+	return buf, nil
+}
+
+// addString adds a string to the resulting BTF.
+//
+// Adding the same string multiple times will return the same result.
+//
+// Returns an identifier into the string table or an error if the string
+// contains invalid characters.
+func (b *Builder) addString(str string) (uint32, error) {
+	if b.strings == nil {
+		b.strings = newStringTableBuilder(0)
+	}
+
+	return b.strings.Add(str)
+}
+
+func (e *encoder) allocateID(typ Type) error {
+	id := e.lastID + 1
+	if id < e.lastID {
+		return errors.New("type ID overflow")
+	}
+
+	e.pending.Push(typ)
+	e.ids[typ] = id
+	e.lastID = id
+	return nil
+}
+
+// id returns the ID for the given type or panics with an error.
+func (e *encoder) id(typ Type) TypeID {
+	if _, ok := typ.(*Void); ok {
+		return 0
+	}
+
+	id, ok := e.ids[typ]
+	if !ok {
+		panic(fmt.Errorf("no ID for type %v", typ))
+	}
+
+	return id
+}
+
+func (e *encoder) deflatePending() error {
+	// Declare root outside of the loop to avoid repeated heap allocations.
+	var root Type
+	skip := func(t Type) (skip bool) {
+		if t == root {
+			// Force descending into the current root type even if it already
+			// has an ID. Otherwise we miss children of types that have their
+			// ID pre-allocated via Add.
+			return false
+		}
+
+		_, isVoid := t.(*Void)
+		_, alreadyEncoded := e.ids[t]
+		return isVoid || alreadyEncoded
+	}
+
+	for !e.pending.Empty() {
+		root = e.pending.Shift()
+
+		// Allocate IDs for all children of typ, including transitive dependencies.
+		iter := postorderTraversal(root, skip)
+		for iter.Next() {
+			if iter.Type == root {
+				// The iterator yields root at the end, do not allocate another ID.
+				break
+			}
+
+			if err := e.allocateID(iter.Type); err != nil {
+				return err
+			}
+		}
+
+		if err := e.deflateType(root); err != nil {
+			id := e.ids[root]
+			return fmt.Errorf("deflate %v with ID %d: %w", root, id, err)
+		}
+	}
+
+	return nil
+}
+
+func (e *encoder) deflateType(typ Type) (err error) {
+	defer func() {
+		if r := recover(); r != nil {
+			var ok bool
+			err, ok = r.(error)
+			if !ok {
+				panic(r)
+			}
+		}
+	}()
+
+	var raw rawType
+	raw.NameOff, err = e.strings.Add(typ.TypeName())
+	if err != nil {
+		return err
+	}
+
+	switch v := typ.(type) {
+	case *Void:
+		return errors.New("Void is implicit in BTF wire format")
+
+	case *Int:
+		raw.SetKind(kindInt)
+		raw.SetSize(v.Size)
+
+		var bi btfInt
+		bi.SetEncoding(v.Encoding)
+		// We need to set bits in addition to size, since btf_type_int_is_regular
+		// otherwise flags this as a bitfield.
+		bi.SetBits(byte(v.Size) * 8)
+		raw.data = bi
+
+	case *Pointer:
+		raw.SetKind(kindPointer)
+		raw.SetType(e.id(v.Target))
+
+	case *Array:
+		raw.SetKind(kindArray)
+		raw.data = &btfArray{
+			e.id(v.Type),
+			e.id(v.Index),
+			v.Nelems,
+		}
+
+	case *Struct:
+		raw.SetKind(kindStruct)
+		raw.SetSize(v.Size)
+		raw.data, err = e.convertMembers(&raw.btfType, v.Members)
+
+	case *Union:
+		raw.SetKind(kindUnion)
+		raw.SetSize(v.Size)
+		raw.data, err = e.convertMembers(&raw.btfType, v.Members)
+
+	case *Enum:
+		raw.SetSize(v.size())
+		raw.SetVlen(len(v.Values))
+		raw.SetSigned(v.Signed)
+
+		if v.has64BitValues() {
+			raw.SetKind(kindEnum64)
+			raw.data, err = e.deflateEnum64Values(v.Values)
+		} else {
+			raw.SetKind(kindEnum)
+			raw.data, err = e.deflateEnumValues(v.Values)
+		}
+
+	case *Fwd:
+		raw.SetKind(kindForward)
+		raw.SetFwdKind(v.Kind)
+
+	case *Typedef:
+		raw.SetKind(kindTypedef)
+		raw.SetType(e.id(v.Type))
+
+	case *Volatile:
+		raw.SetKind(kindVolatile)
+		raw.SetType(e.id(v.Type))
+
+	case *Const:
+		raw.SetKind(kindConst)
+		raw.SetType(e.id(v.Type))
+
+	case *Restrict:
+		raw.SetKind(kindRestrict)
+		raw.SetType(e.id(v.Type))
+
+	case *Func:
+		raw.SetKind(kindFunc)
+		raw.SetType(e.id(v.Type))
+		if !e.StripFuncLinkage {
+			raw.SetLinkage(v.Linkage)
+		}
+
+	case *FuncProto:
+		raw.SetKind(kindFuncProto)
+		raw.SetType(e.id(v.Return))
+		raw.SetVlen(len(v.Params))
+		raw.data, err = e.deflateFuncParams(v.Params)
+
+	case *Var:
+		raw.SetKind(kindVar)
+		raw.SetType(e.id(v.Type))
+		raw.data = btfVariable{uint32(v.Linkage)}
+
+	case *Datasec:
+		raw.SetKind(kindDatasec)
+		raw.SetSize(v.Size)
+		raw.SetVlen(len(v.Vars))
+		raw.data = e.deflateVarSecinfos(v.Vars)
+
+	case *Float:
+		raw.SetKind(kindFloat)
+		raw.SetSize(v.Size)
+
+	case *declTag:
+		raw.SetKind(kindDeclTag)
+		raw.SetType(e.id(v.Type))
+		raw.data = &btfDeclTag{uint32(v.Index)}
+		raw.NameOff, err = e.strings.Add(v.Value)
+
+	case *typeTag:
+		raw.SetKind(kindTypeTag)
+		raw.SetType(e.id(v.Type))
+		raw.NameOff, err = e.strings.Add(v.Value)
+
+	default:
+		return fmt.Errorf("don't know how to deflate %T", v)
+	}
+
+	if err != nil {
+		return err
+	}
+
+	return raw.Marshal(e.buf, e.Order)
+}
+
+func (e *encoder) convertMembers(header *btfType, members []Member) ([]btfMember, error) {
+	bms := make([]btfMember, 0, len(members))
+	isBitfield := false
+	for _, member := range members {
+		isBitfield = isBitfield || member.BitfieldSize > 0
+
+		offset := member.Offset
+		if isBitfield {
+			offset = member.BitfieldSize<<24 | (member.Offset & 0xffffff)
+		}
+
+		nameOff, err := e.strings.Add(member.Name)
+		if err != nil {
+			return nil, err
+		}
+
+		bms = append(bms, btfMember{
+			nameOff,
+			e.id(member.Type),
+			uint32(offset),
+		})
+	}
+
+	header.SetVlen(len(members))
+	header.SetBitfield(isBitfield)
+	return bms, nil
+}
+
+func (e *encoder) deflateEnumValues(values []EnumValue) ([]btfEnum, error) {
+	bes := make([]btfEnum, 0, len(values))
+	for _, value := range values {
+		nameOff, err := e.strings.Add(value.Name)
+		if err != nil {
+			return nil, err
+		}
+
+		if value.Value > math.MaxUint32 {
+			return nil, fmt.Errorf("value of enum %q exceeds 32 bits", value.Name)
+		}
+
+		bes = append(bes, btfEnum{
+			nameOff,
+			uint32(value.Value),
+		})
+	}
+
+	return bes, nil
+}
+
+func (e *encoder) deflateEnum64Values(values []EnumValue) ([]btfEnum64, error) {
+	bes := make([]btfEnum64, 0, len(values))
+	for _, value := range values {
+		nameOff, err := e.strings.Add(value.Name)
+		if err != nil {
+			return nil, err
+		}
+
+		bes = append(bes, btfEnum64{
+			nameOff,
+			uint32(value.Value),
+			uint32(value.Value >> 32),
+		})
+	}
+
+	return bes, nil
+}
+
+func (e *encoder) deflateFuncParams(params []FuncParam) ([]btfParam, error) {
+	bps := make([]btfParam, 0, len(params))
+	for _, param := range params {
+		nameOff, err := e.strings.Add(param.Name)
+		if err != nil {
+			return nil, err
+		}
+
+		bps = append(bps, btfParam{
+			nameOff,
+			e.id(param.Type),
+		})
+	}
+	return bps, nil
+}
+
+func (e *encoder) deflateVarSecinfos(vars []VarSecinfo) []btfVarSecinfo {
+	vsis := make([]btfVarSecinfo, 0, len(vars))
+	for _, v := range vars {
+		vsis = append(vsis, btfVarSecinfo{
+			e.id(v.Type),
+			v.Offset,
+			v.Size,
+		})
+	}
+	return vsis
+}
+
+// MarshalMapKV creates a BTF object containing a map key and value.
+//
+// The function is intended for the use of the ebpf package and may be removed
+// at any point in time.
+func MarshalMapKV(key, value Type) (_ *Handle, keyID, valueID TypeID, err error) {
+	var b Builder
+
+	if key != nil {
+		keyID, err = b.Add(key)
+		if err != nil {
+			return nil, 0, 0, fmt.Errorf("add key type: %w", err)
+		}
+	}
+
+	if value != nil {
+		valueID, err = b.Add(value)
+		if err != nil {
+			return nil, 0, 0, fmt.Errorf("add value type: %w", err)
+		}
+	}
+
+	handle, err := NewHandle(&b)
+	if err != nil {
+		// Check for 'full' map BTF support, since kernels between 4.18 and 5.2
+		// already support BTF blobs for maps without Var or Datasec just fine.
+		if err := haveMapBTF(); err != nil {
+			return nil, 0, 0, err
+		}
+	}
+	return handle, keyID, valueID, err
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/strings.go b/vendor/github.com/cilium/ebpf/btf/strings.go
new file mode 100644
index 00000000000..bc6aff28142
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/strings.go
@@ -0,0 +1,214 @@
+package btf
+
+import (
+	"bufio"
+	"bytes"
+	"errors"
+	"fmt"
+	"io"
+	"strings"
+
+	"golang.org/x/exp/maps"
+)
+
+type stringTable struct {
+	base    *stringTable
+	offsets []uint32
+	strings []string
+}
+
+// sizedReader is implemented by bytes.Reader, io.SectionReader, strings.Reader, etc.
+type sizedReader interface {
+	io.Reader
+	Size() int64
+}
+
+func readStringTable(r sizedReader, base *stringTable) (*stringTable, error) {
+	// When parsing split BTF's string table, the first entry offset is derived
+	// from the last entry offset of the base BTF.
+	firstStringOffset := uint32(0)
+	if base != nil {
+		idx := len(base.offsets) - 1
+		firstStringOffset = base.offsets[idx] + uint32(len(base.strings[idx])) + 1
+	}
+
+	// Derived from vmlinux BTF.
+	const averageStringLength = 16
+
+	n := int(r.Size() / averageStringLength)
+	offsets := make([]uint32, 0, n)
+	strings := make([]string, 0, n)
+
+	offset := firstStringOffset
+	scanner := bufio.NewScanner(r)
+	scanner.Split(splitNull)
+	for scanner.Scan() {
+		str := scanner.Text()
+		offsets = append(offsets, offset)
+		strings = append(strings, str)
+		offset += uint32(len(str)) + 1
+	}
+	if err := scanner.Err(); err != nil {
+		return nil, err
+	}
+
+	if len(strings) == 0 {
+		return nil, errors.New("string table is empty")
+	}
+
+	if firstStringOffset == 0 && strings[0] != "" {
+		return nil, errors.New("first item in string table is non-empty")
+	}
+
+	return &stringTable{base, offsets, strings}, nil
+}
+
+func splitNull(data []byte, atEOF bool) (advance int, token []byte, err error) {
+	i := bytes.IndexByte(data, 0)
+	if i == -1 {
+		if atEOF && len(data) > 0 {
+			return 0, nil, errors.New("string table isn't null terminated")
+		}
+		return 0, nil, nil
+	}
+
+	return i + 1, data[:i], nil
+}
+
+func (st *stringTable) Lookup(offset uint32) (string, error) {
+	if st.base != nil && offset <= st.base.offsets[len(st.base.offsets)-1] {
+		return st.base.lookup(offset)
+	}
+	return st.lookup(offset)
+}
+
+func (st *stringTable) lookup(offset uint32) (string, error) {
+	i := search(st.offsets, offset)
+	if i == len(st.offsets) || st.offsets[i] != offset {
+		return "", fmt.Errorf("offset %d isn't start of a string", offset)
+	}
+
+	return st.strings[i], nil
+}
+
+func (st *stringTable) Marshal(w io.Writer) error {
+	for _, str := range st.strings {
+		_, err := io.WriteString(w, str)
+		if err != nil {
+			return err
+		}
+		_, err = w.Write([]byte{0})
+		if err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+// Num returns the number of strings in the table.
+func (st *stringTable) Num() int {
+	return len(st.strings)
+}
+
+// search is a copy of sort.Search specialised for uint32.
+//
+// Licensed under https://go.dev/LICENSE
+func search(ints []uint32, needle uint32) int {
+	// Define f(-1) == false and f(n) == true.
+	// Invariant: f(i-1) == false, f(j) == true.
+	i, j := 0, len(ints)
+	for i < j {
+		h := int(uint(i+j) >> 1) // avoid overflow when computing h
+		// i ≤ h < j
+		if !(ints[h] >= needle) {
+			i = h + 1 // preserves f(i-1) == false
+		} else {
+			j = h // preserves f(j) == true
+		}
+	}
+	// i == j, f(i-1) == false, and f(j) (= f(i)) == true  =>  answer is i.
+	return i
+}
+
+// stringTableBuilder builds BTF string tables.
+type stringTableBuilder struct {
+	length  uint32
+	strings map[string]uint32
+}
+
+// newStringTableBuilder creates a builder with the given capacity.
+//
+// capacity may be zero.
+func newStringTableBuilder(capacity int) *stringTableBuilder {
+	var stb stringTableBuilder
+
+	if capacity == 0 {
+		// Use the runtime's small default size.
+		stb.strings = make(map[string]uint32)
+	} else {
+		stb.strings = make(map[string]uint32, capacity)
+	}
+
+	// Ensure that the empty string is at index 0.
+	stb.append("")
+	return &stb
+}
+
+// Add a string to the table.
+//
+// Adding the same string multiple times will only store it once.
+func (stb *stringTableBuilder) Add(str string) (uint32, error) {
+	if strings.IndexByte(str, 0) != -1 {
+		return 0, fmt.Errorf("string contains null: %q", str)
+	}
+
+	offset, ok := stb.strings[str]
+	if ok {
+		return offset, nil
+	}
+
+	return stb.append(str), nil
+}
+
+func (stb *stringTableBuilder) append(str string) uint32 {
+	offset := stb.length
+	stb.length += uint32(len(str)) + 1
+	stb.strings[str] = offset
+	return offset
+}
+
+// Lookup finds the offset of a string in the table.
+//
+// Returns an error if str hasn't been added yet.
+func (stb *stringTableBuilder) Lookup(str string) (uint32, error) {
+	offset, ok := stb.strings[str]
+	if !ok {
+		return 0, fmt.Errorf("string %q is not in table", str)
+	}
+
+	return offset, nil
+}
+
+// Length returns the length in bytes.
+func (stb *stringTableBuilder) Length() int {
+	return int(stb.length)
+}
+
+// AppendEncoded appends the string table to the end of the provided buffer.
+func (stb *stringTableBuilder) AppendEncoded(buf []byte) []byte {
+	n := len(buf)
+	buf = append(buf, make([]byte, stb.Length())...)
+	strings := buf[n:]
+	for str, offset := range stb.strings {
+		copy(strings[offset:], str)
+	}
+	return buf
+}
+
+// Copy the string table builder.
+func (stb *stringTableBuilder) Copy() *stringTableBuilder {
+	return &stringTableBuilder{
+		stb.length,
+		maps.Clone(stb.strings),
+	}
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/traversal.go b/vendor/github.com/cilium/ebpf/btf/traversal.go
new file mode 100644
index 00000000000..a3a9dec940a
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/traversal.go
@@ -0,0 +1,141 @@
+package btf
+
+import (
+	"fmt"
+
+	"github.com/cilium/ebpf/internal"
+)
+
+// Functions to traverse a cyclic graph of types. The below was very useful:
+// https://eli.thegreenplace.net/2015/directed-graph-traversal-orderings-and-applications-to-data-flow-analysis/#post-order-and-reverse-post-order
+
+type postorderIterator struct {
+	// Iteration skips types for which this function returns true.
+	skip func(Type) bool
+	// The root type. May be nil if skip(root) is true.
+	root Type
+
+	// Contains types which need to be either walked or yielded.
+	types typeDeque
+	// Contains a boolean whether the type has been walked or not.
+	walked internal.Deque[bool]
+	// The set of types which has been pushed onto types.
+	pushed map[Type]struct{}
+
+	// The current type. Only valid after a call to Next().
+	Type Type
+}
+
+// postorderTraversal iterates all types reachable from root by visiting the
+// leaves of the graph first.
+//
+// Types for which skip returns true are ignored. skip may be nil.
+func postorderTraversal(root Type, skip func(Type) (skip bool)) postorderIterator {
+	// Avoid allocations for the common case of a skipped root.
+	if skip != nil && skip(root) {
+		return postorderIterator{}
+	}
+
+	po := postorderIterator{root: root, skip: skip}
+	walkType(root, po.push)
+
+	return po
+}
+
+func (po *postorderIterator) push(t *Type) {
+	if _, ok := po.pushed[*t]; ok || *t == po.root {
+		return
+	}
+
+	if po.skip != nil && po.skip(*t) {
+		return
+	}
+
+	if po.pushed == nil {
+		// Lazily allocate pushed to avoid an allocation for Types without children.
+		po.pushed = make(map[Type]struct{})
+	}
+
+	po.pushed[*t] = struct{}{}
+	po.types.Push(t)
+	po.walked.Push(false)
+}
+
+// Next returns true if there is another Type to traverse.
+func (po *postorderIterator) Next() bool {
+	for !po.types.Empty() {
+		t := po.types.Pop()
+
+		if !po.walked.Pop() {
+			// Push the type again, so that we re-evaluate it in done state
+			// after all children have been handled.
+			po.types.Push(t)
+			po.walked.Push(true)
+
+			// Add all direct children to todo.
+			walkType(*t, po.push)
+		} else {
+			// We've walked this type previously, so we now know that all
+			// children have been handled.
+			po.Type = *t
+			return true
+		}
+	}
+
+	// Only return root once.
+	po.Type, po.root = po.root, nil
+	return po.Type != nil
+}
+
+// walkType calls fn on each child of typ.
+func walkType(typ Type, fn func(*Type)) {
+	// Explicitly type switch on the most common types to allow the inliner to
+	// do its work. This avoids allocating intermediate slices from walk() on
+	// the heap.
+	switch v := typ.(type) {
+	case *Void, *Int, *Enum, *Fwd, *Float:
+		// No children to traverse.
+	case *Pointer:
+		fn(&v.Target)
+	case *Array:
+		fn(&v.Index)
+		fn(&v.Type)
+	case *Struct:
+		for i := range v.Members {
+			fn(&v.Members[i].Type)
+		}
+	case *Union:
+		for i := range v.Members {
+			fn(&v.Members[i].Type)
+		}
+	case *Typedef:
+		fn(&v.Type)
+	case *Volatile:
+		fn(&v.Type)
+	case *Const:
+		fn(&v.Type)
+	case *Restrict:
+		fn(&v.Type)
+	case *Func:
+		fn(&v.Type)
+	case *FuncProto:
+		fn(&v.Return)
+		for i := range v.Params {
+			fn(&v.Params[i].Type)
+		}
+	case *Var:
+		fn(&v.Type)
+	case *Datasec:
+		for i := range v.Vars {
+			fn(&v.Vars[i].Type)
+		}
+	case *declTag:
+		fn(&v.Type)
+	case *typeTag:
+		fn(&v.Type)
+	case *cycle:
+		// cycle has children, but we ignore them deliberately.
+	default:
+		panic(fmt.Sprintf("don't know how to walk Type %T", v))
+	}
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/types.go b/vendor/github.com/cilium/ebpf/btf/types.go
new file mode 100644
index 00000000000..68d4a175716
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/types.go
@@ -0,0 +1,1258 @@
+package btf
+
+import (
+	"errors"
+	"fmt"
+	"io"
+	"math"
+	"reflect"
+	"strings"
+
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+)
+
+const maxTypeDepth = 32
+
+// TypeID identifies a type in a BTF section.
+type TypeID = sys.TypeID
+
+// Type represents a type described by BTF.
+//
+// Identity of Type follows the [Go specification]: two Types are considered
+// equal if they have the same concrete type and the same dynamic value, aka
+// they point at the same location in memory. This means that the following
+// Types are considered distinct even though they have the same "shape".
+//
+//	a := &Int{Size: 1}
+//	b := &Int{Size: 1}
+//	a != b
+//
+// [Go specification]: https://go.dev/ref/spec#Comparison_operators
+type Type interface {
+	// Type can be formatted using the %s and %v verbs. %s outputs only the
+	// identity of the type, without any detail. %v outputs additional detail.
+	//
+	// Use the '+' flag to include the address of the type.
+	//
+	// Use the width to specify how many levels of detail to output, for example
+	// %1v will output detail for the root type and a short description of its
+	// children. %2v would output details of the root type and its children
+	// as well as a short description of the grandchildren.
+	fmt.Formatter
+
+	// Name of the type, empty for anonymous types and types that cannot
+	// carry a name, like Void and Pointer.
+	TypeName() string
+
+	// Make a copy of the type, without copying Type members.
+	copy() Type
+
+	// New implementations must update walkType.
+}
+
+var (
+	_ Type = (*Int)(nil)
+	_ Type = (*Struct)(nil)
+	_ Type = (*Union)(nil)
+	_ Type = (*Enum)(nil)
+	_ Type = (*Fwd)(nil)
+	_ Type = (*Func)(nil)
+	_ Type = (*Typedef)(nil)
+	_ Type = (*Var)(nil)
+	_ Type = (*Datasec)(nil)
+	_ Type = (*Float)(nil)
+	_ Type = (*declTag)(nil)
+	_ Type = (*typeTag)(nil)
+	_ Type = (*cycle)(nil)
+)
+
+// Void is the unit type of BTF.
+type Void struct{}
+
+func (v *Void) Format(fs fmt.State, verb rune) { formatType(fs, verb, v) }
+func (v *Void) TypeName() string               { return "" }
+func (v *Void) size() uint32                   { return 0 }
+func (v *Void) copy() Type                     { return (*Void)(nil) }
+
+type IntEncoding byte
+
+// Valid IntEncodings.
+//
+// These may look like they are flags, but they aren't.
+const (
+	Unsigned IntEncoding = 0
+	Signed   IntEncoding = 1
+	Char     IntEncoding = 2
+	Bool     IntEncoding = 4
+)
+
+func (ie IntEncoding) String() string {
+	switch ie {
+	case Char:
+		// NB: There is no way to determine signedness for char.
+		return "char"
+	case Bool:
+		return "bool"
+	case Signed:
+		return "signed"
+	case Unsigned:
+		return "unsigned"
+	default:
+		return fmt.Sprintf("IntEncoding(%d)", byte(ie))
+	}
+}
+
+// Int is an integer of a given length.
+//
+// See https://www.kernel.org/doc/html/latest/bpf/btf.html#btf-kind-int
+type Int struct {
+	Name string
+
+	// The size of the integer in bytes.
+	Size     uint32
+	Encoding IntEncoding
+}
+
+func (i *Int) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, i, i.Encoding, "size=", i.Size*8)
+}
+
+func (i *Int) TypeName() string { return i.Name }
+func (i *Int) size() uint32     { return i.Size }
+func (i *Int) copy() Type {
+	cpy := *i
+	return &cpy
+}
+
+// Pointer is a pointer to another type.
+type Pointer struct {
+	Target Type
+}
+
+func (p *Pointer) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, p, "target=", p.Target)
+}
+
+func (p *Pointer) TypeName() string { return "" }
+func (p *Pointer) size() uint32     { return 8 }
+func (p *Pointer) copy() Type {
+	cpy := *p
+	return &cpy
+}
+
+// Array is an array with a fixed number of elements.
+type Array struct {
+	Index  Type
+	Type   Type
+	Nelems uint32
+}
+
+func (arr *Array) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, arr, "index=", arr.Index, "type=", arr.Type, "n=", arr.Nelems)
+}
+
+func (arr *Array) TypeName() string { return "" }
+
+func (arr *Array) copy() Type {
+	cpy := *arr
+	return &cpy
+}
+
+// Struct is a compound type of consecutive members.
+type Struct struct {
+	Name string
+	// The size of the struct including padding, in bytes
+	Size    uint32
+	Members []Member
+}
+
+func (s *Struct) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, s, "fields=", len(s.Members))
+}
+
+func (s *Struct) TypeName() string { return s.Name }
+
+func (s *Struct) size() uint32 { return s.Size }
+
+func (s *Struct) copy() Type {
+	cpy := *s
+	cpy.Members = copyMembers(s.Members)
+	return &cpy
+}
+
+func (s *Struct) members() []Member {
+	return s.Members
+}
+
+// Union is a compound type where members occupy the same memory.
+type Union struct {
+	Name string
+	// The size of the union including padding, in bytes.
+	Size    uint32
+	Members []Member
+}
+
+func (u *Union) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, u, "fields=", len(u.Members))
+}
+
+func (u *Union) TypeName() string { return u.Name }
+
+func (u *Union) size() uint32 { return u.Size }
+
+func (u *Union) copy() Type {
+	cpy := *u
+	cpy.Members = copyMembers(u.Members)
+	return &cpy
+}
+
+func (u *Union) members() []Member {
+	return u.Members
+}
+
+func copyMembers(orig []Member) []Member {
+	cpy := make([]Member, len(orig))
+	copy(cpy, orig)
+	return cpy
+}
+
+type composite interface {
+	Type
+	members() []Member
+}
+
+var (
+	_ composite = (*Struct)(nil)
+	_ composite = (*Union)(nil)
+)
+
+// A value in bits.
+type Bits uint32
+
+// Bytes converts a bit value into bytes.
+func (b Bits) Bytes() uint32 {
+	return uint32(b / 8)
+}
+
+// Member is part of a Struct or Union.
+//
+// It is not a valid Type.
+type Member struct {
+	Name         string
+	Type         Type
+	Offset       Bits
+	BitfieldSize Bits
+}
+
+// Enum lists possible values.
+type Enum struct {
+	Name string
+	// Size of the enum value in bytes.
+	Size uint32
+	// True if the values should be interpreted as signed integers.
+	Signed bool
+	Values []EnumValue
+}
+
+func (e *Enum) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, e, "size=", e.Size, "values=", len(e.Values))
+}
+
+func (e *Enum) TypeName() string { return e.Name }
+
+// EnumValue is part of an Enum
+//
+// Is is not a valid Type
+type EnumValue struct {
+	Name  string
+	Value uint64
+}
+
+func (e *Enum) size() uint32 { return e.Size }
+func (e *Enum) copy() Type {
+	cpy := *e
+	cpy.Values = make([]EnumValue, len(e.Values))
+	copy(cpy.Values, e.Values)
+	return &cpy
+}
+
+// has64BitValues returns true if the Enum contains a value larger than 32 bits.
+// Kernels before 6.0 have enum values that overrun u32 replaced with zeroes.
+//
+// 64-bit enums have their Enum.Size attributes correctly set to 8, but if we
+// use the size attribute as a heuristic during BTF marshaling, we'll emit
+// ENUM64s to kernels that don't support them.
+func (e *Enum) has64BitValues() bool {
+	for _, v := range e.Values {
+		if v.Value > math.MaxUint32 {
+			return true
+		}
+	}
+	return false
+}
+
+// FwdKind is the type of forward declaration.
+type FwdKind int
+
+// Valid types of forward declaration.
+const (
+	FwdStruct FwdKind = iota
+	FwdUnion
+)
+
+func (fk FwdKind) String() string {
+	switch fk {
+	case FwdStruct:
+		return "struct"
+	case FwdUnion:
+		return "union"
+	default:
+		return fmt.Sprintf("%T(%d)", fk, int(fk))
+	}
+}
+
+// Fwd is a forward declaration of a Type.
+type Fwd struct {
+	Name string
+	Kind FwdKind
+}
+
+func (f *Fwd) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, f, f.Kind)
+}
+
+func (f *Fwd) TypeName() string { return f.Name }
+
+func (f *Fwd) copy() Type {
+	cpy := *f
+	return &cpy
+}
+
+// Typedef is an alias of a Type.
+type Typedef struct {
+	Name string
+	Type Type
+}
+
+func (td *Typedef) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, td, td.Type)
+}
+
+func (td *Typedef) TypeName() string { return td.Name }
+
+func (td *Typedef) copy() Type {
+	cpy := *td
+	return &cpy
+}
+
+// Volatile is a qualifier.
+type Volatile struct {
+	Type Type
+}
+
+func (v *Volatile) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, v, v.Type)
+}
+
+func (v *Volatile) TypeName() string { return "" }
+
+func (v *Volatile) qualify() Type { return v.Type }
+func (v *Volatile) copy() Type {
+	cpy := *v
+	return &cpy
+}
+
+// Const is a qualifier.
+type Const struct {
+	Type Type
+}
+
+func (c *Const) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, c, c.Type)
+}
+
+func (c *Const) TypeName() string { return "" }
+
+func (c *Const) qualify() Type { return c.Type }
+func (c *Const) copy() Type {
+	cpy := *c
+	return &cpy
+}
+
+// Restrict is a qualifier.
+type Restrict struct {
+	Type Type
+}
+
+func (r *Restrict) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, r, r.Type)
+}
+
+func (r *Restrict) TypeName() string { return "" }
+
+func (r *Restrict) qualify() Type { return r.Type }
+func (r *Restrict) copy() Type {
+	cpy := *r
+	return &cpy
+}
+
+// Func is a function definition.
+type Func struct {
+	Name    string
+	Type    Type
+	Linkage FuncLinkage
+}
+
+func FuncMetadata(ins *asm.Instruction) *Func {
+	fn, _ := ins.Metadata.Get(funcInfoMeta{}).(*Func)
+	return fn
+}
+
+// WithFuncMetadata adds a btf.Func to the Metadata of asm.Instruction.
+func WithFuncMetadata(ins asm.Instruction, fn *Func) asm.Instruction {
+	ins.Metadata.Set(funcInfoMeta{}, fn)
+	return ins
+}
+
+func (f *Func) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, f, f.Linkage, "proto=", f.Type)
+}
+
+func (f *Func) TypeName() string { return f.Name }
+
+func (f *Func) copy() Type {
+	cpy := *f
+	return &cpy
+}
+
+// FuncProto is a function declaration.
+type FuncProto struct {
+	Return Type
+	Params []FuncParam
+}
+
+func (fp *FuncProto) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, fp, "args=", len(fp.Params), "return=", fp.Return)
+}
+
+func (fp *FuncProto) TypeName() string { return "" }
+
+func (fp *FuncProto) copy() Type {
+	cpy := *fp
+	cpy.Params = make([]FuncParam, len(fp.Params))
+	copy(cpy.Params, fp.Params)
+	return &cpy
+}
+
+type FuncParam struct {
+	Name string
+	Type Type
+}
+
+// Var is a global variable.
+type Var struct {
+	Name    string
+	Type    Type
+	Linkage VarLinkage
+}
+
+func (v *Var) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, v, v.Linkage)
+}
+
+func (v *Var) TypeName() string { return v.Name }
+
+func (v *Var) copy() Type {
+	cpy := *v
+	return &cpy
+}
+
+// Datasec is a global program section containing data.
+type Datasec struct {
+	Name string
+	Size uint32
+	Vars []VarSecinfo
+}
+
+func (ds *Datasec) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, ds)
+}
+
+func (ds *Datasec) TypeName() string { return ds.Name }
+
+func (ds *Datasec) size() uint32 { return ds.Size }
+
+func (ds *Datasec) copy() Type {
+	cpy := *ds
+	cpy.Vars = make([]VarSecinfo, len(ds.Vars))
+	copy(cpy.Vars, ds.Vars)
+	return &cpy
+}
+
+// VarSecinfo describes variable in a Datasec.
+//
+// It is not a valid Type.
+type VarSecinfo struct {
+	// Var or Func.
+	Type   Type
+	Offset uint32
+	Size   uint32
+}
+
+// Float is a float of a given length.
+type Float struct {
+	Name string
+
+	// The size of the float in bytes.
+	Size uint32
+}
+
+func (f *Float) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, f, "size=", f.Size*8)
+}
+
+func (f *Float) TypeName() string { return f.Name }
+func (f *Float) size() uint32     { return f.Size }
+func (f *Float) copy() Type {
+	cpy := *f
+	return &cpy
+}
+
+// declTag associates metadata with a declaration.
+type declTag struct {
+	Type  Type
+	Value string
+	// The index this tag refers to in the target type. For composite types,
+	// a value of -1 indicates that the tag refers to the whole type. Otherwise
+	// it indicates which member or argument the tag applies to.
+	Index int
+}
+
+func (dt *declTag) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, dt, "type=", dt.Type, "value=", dt.Value, "index=", dt.Index)
+}
+
+func (dt *declTag) TypeName() string { return "" }
+func (dt *declTag) copy() Type {
+	cpy := *dt
+	return &cpy
+}
+
+// typeTag associates metadata with a type.
+type typeTag struct {
+	Type  Type
+	Value string
+}
+
+func (tt *typeTag) Format(fs fmt.State, verb rune) {
+	formatType(fs, verb, tt, "type=", tt.Type, "value=", tt.Value)
+}
+
+func (tt *typeTag) TypeName() string { return "" }
+func (tt *typeTag) qualify() Type    { return tt.Type }
+func (tt *typeTag) copy() Type {
+	cpy := *tt
+	return &cpy
+}
+
+// cycle is a type which had to be elided since it exceeded maxTypeDepth.
+type cycle struct {
+	root Type
+}
+
+func (c *cycle) ID() TypeID                     { return math.MaxUint32 }
+func (c *cycle) Format(fs fmt.State, verb rune) { formatType(fs, verb, c, "root=", c.root) }
+func (c *cycle) TypeName() string               { return "" }
+func (c *cycle) copy() Type {
+	cpy := *c
+	return &cpy
+}
+
+type sizer interface {
+	size() uint32
+}
+
+var (
+	_ sizer = (*Int)(nil)
+	_ sizer = (*Pointer)(nil)
+	_ sizer = (*Struct)(nil)
+	_ sizer = (*Union)(nil)
+	_ sizer = (*Enum)(nil)
+	_ sizer = (*Datasec)(nil)
+)
+
+type qualifier interface {
+	qualify() Type
+}
+
+var (
+	_ qualifier = (*Const)(nil)
+	_ qualifier = (*Restrict)(nil)
+	_ qualifier = (*Volatile)(nil)
+	_ qualifier = (*typeTag)(nil)
+)
+
+var errUnsizedType = errors.New("type is unsized")
+
+// Sizeof returns the size of a type in bytes.
+//
+// Returns an error if the size can't be computed.
+func Sizeof(typ Type) (int, error) {
+	var (
+		n    = int64(1)
+		elem int64
+	)
+
+	for i := 0; i < maxTypeDepth; i++ {
+		switch v := typ.(type) {
+		case *Array:
+			if n > 0 && int64(v.Nelems) > math.MaxInt64/n {
+				return 0, fmt.Errorf("type %s: overflow", typ)
+			}
+
+			// Arrays may be of zero length, which allows
+			// n to be zero as well.
+			n *= int64(v.Nelems)
+			typ = v.Type
+			continue
+
+		case sizer:
+			elem = int64(v.size())
+
+		case *Typedef:
+			typ = v.Type
+			continue
+
+		case qualifier:
+			typ = v.qualify()
+			continue
+
+		default:
+			return 0, fmt.Errorf("type %T: %w", typ, errUnsizedType)
+		}
+
+		if n > 0 && elem > math.MaxInt64/n {
+			return 0, fmt.Errorf("type %s: overflow", typ)
+		}
+
+		size := n * elem
+		if int64(int(size)) != size {
+			return 0, fmt.Errorf("type %s: overflow", typ)
+		}
+
+		return int(size), nil
+	}
+
+	return 0, fmt.Errorf("type %s: exceeded type depth", typ)
+}
+
+// alignof returns the alignment of a type.
+//
+// Returns an error if the Type can't be aligned, like an integer with an uneven
+// size. Currently only supports the subset of types necessary for bitfield
+// relocations.
+func alignof(typ Type) (int, error) {
+	var n int
+
+	switch t := UnderlyingType(typ).(type) {
+	case *Enum:
+		n = int(t.size())
+	case *Int:
+		n = int(t.Size)
+	case *Array:
+		return alignof(t.Type)
+	default:
+		return 0, fmt.Errorf("can't calculate alignment of %T", t)
+	}
+
+	if !pow(n) {
+		return 0, fmt.Errorf("alignment value %d is not a power of two", n)
+	}
+
+	return n, nil
+}
+
+// pow returns true if n is a power of two.
+func pow(n int) bool {
+	return n != 0 && (n&(n-1)) == 0
+}
+
+// Transformer modifies a given Type and returns the result.
+//
+// For example, UnderlyingType removes any qualifiers or typedefs from a type.
+// See the example on Copy for how to use a transform.
+type Transformer func(Type) Type
+
+// Copy a Type recursively.
+//
+// typ may form a cycle. If transform is not nil, it is called with the
+// to be copied type, and the returned value is copied instead.
+func Copy(typ Type, transform Transformer) Type {
+	copies := copier{copies: make(map[Type]Type)}
+	copies.copy(&typ, transform)
+	return typ
+}
+
+// copy a slice of Types recursively.
+//
+// See Copy for the semantics.
+func copyTypes(types []Type, transform Transformer) []Type {
+	result := make([]Type, len(types))
+	copy(result, types)
+
+	copies := copier{copies: make(map[Type]Type, len(types))}
+	for i := range result {
+		copies.copy(&result[i], transform)
+	}
+
+	return result
+}
+
+type copier struct {
+	copies map[Type]Type
+	work   typeDeque
+}
+
+func (c *copier) copy(typ *Type, transform Transformer) {
+	for t := typ; t != nil; t = c.work.Pop() {
+		// *t is the identity of the type.
+		if cpy := c.copies[*t]; cpy != nil {
+			*t = cpy
+			continue
+		}
+
+		var cpy Type
+		if transform != nil {
+			cpy = transform(*t).copy()
+		} else {
+			cpy = (*t).copy()
+		}
+
+		c.copies[*t] = cpy
+		*t = cpy
+
+		// Mark any nested types for copying.
+		walkType(cpy, c.work.Push)
+	}
+}
+
+type typeDeque = internal.Deque[*Type]
+
+// inflateRawTypes takes a list of raw btf types linked via type IDs, and turns
+// it into a graph of Types connected via pointers.
+//
+// If base is provided, then the raw types are considered to be of a split BTF
+// (e.g., a kernel module).
+//
+// Returns a slice of types indexed by TypeID. Since BTF ignores compilation
+// units, multiple types may share the same name. A Type may form a cyclic graph
+// by pointing at itself.
+func inflateRawTypes(rawTypes []rawType, rawStrings *stringTable, base *Spec) ([]Type, error) {
+	types := make([]Type, 0, len(rawTypes)+1) // +1 for Void added to base types
+
+	// Void is defined to always be type ID 0, and is thus omitted from BTF.
+	types = append(types, (*Void)(nil))
+
+	firstTypeID := TypeID(0)
+	if base != nil {
+		var err error
+		firstTypeID, err = base.nextTypeID()
+		if err != nil {
+			return nil, err
+		}
+
+		// Split BTF doesn't contain Void.
+		types = types[:0]
+	}
+
+	type fixupDef struct {
+		id  TypeID
+		typ *Type
+	}
+
+	var fixups []fixupDef
+	fixup := func(id TypeID, typ *Type) bool {
+		if id < firstTypeID {
+			if baseType, err := base.TypeByID(id); err == nil {
+				*typ = baseType
+				return true
+			}
+		}
+
+		idx := int(id - firstTypeID)
+		if idx < len(types) {
+			// We've already inflated this type, fix it up immediately.
+			*typ = types[idx]
+			return true
+		}
+
+		fixups = append(fixups, fixupDef{id, typ})
+		return false
+	}
+
+	type assertion struct {
+		id   TypeID
+		typ  *Type
+		want reflect.Type
+	}
+
+	var assertions []assertion
+	fixupAndAssert := func(id TypeID, typ *Type, want reflect.Type) error {
+		if !fixup(id, typ) {
+			assertions = append(assertions, assertion{id, typ, want})
+			return nil
+		}
+
+		// The type has already been fixed up, check the type immediately.
+		if reflect.TypeOf(*typ) != want {
+			return fmt.Errorf("type ID %d: expected %s, got %T", id, want, *typ)
+		}
+		return nil
+	}
+
+	type bitfieldFixupDef struct {
+		id TypeID
+		m  *Member
+	}
+
+	var (
+		legacyBitfields = make(map[TypeID][2]Bits) // offset, size
+		bitfieldFixups  []bitfieldFixupDef
+	)
+	convertMembers := func(raw []btfMember, kindFlag bool) ([]Member, error) {
+		// NB: The fixup below relies on pre-allocating this array to
+		// work, since otherwise append might re-allocate members.
+		members := make([]Member, 0, len(raw))
+		for i, btfMember := range raw {
+			name, err := rawStrings.Lookup(btfMember.NameOff)
+			if err != nil {
+				return nil, fmt.Errorf("can't get name for member %d: %w", i, err)
+			}
+
+			members = append(members, Member{
+				Name:   name,
+				Offset: Bits(btfMember.Offset),
+			})
+
+			m := &members[i]
+			fixup(raw[i].Type, &m.Type)
+
+			if kindFlag {
+				m.BitfieldSize = Bits(btfMember.Offset >> 24)
+				m.Offset &= 0xffffff
+				// We ignore legacy bitfield definitions if the current composite
+				// is a new-style bitfield. This is kind of safe since offset and
+				// size on the type of the member must be zero if kindFlat is set
+				// according to spec.
+				continue
+			}
+
+			// This may be a legacy bitfield, try to fix it up.
+			data, ok := legacyBitfields[raw[i].Type]
+			if ok {
+				// Bingo!
+				m.Offset += data[0]
+				m.BitfieldSize = data[1]
+				continue
+			}
+
+			if m.Type != nil {
+				// We couldn't find a legacy bitfield, but we know that the member's
+				// type has already been inflated. Hence we know that it can't be
+				// a legacy bitfield and there is nothing left to do.
+				continue
+			}
+
+			// We don't have fixup data, and the type we're pointing
+			// at hasn't been inflated yet. No choice but to defer
+			// the fixup.
+			bitfieldFixups = append(bitfieldFixups, bitfieldFixupDef{
+				raw[i].Type,
+				m,
+			})
+		}
+		return members, nil
+	}
+
+	var declTags []*declTag
+	for _, raw := range rawTypes {
+		var (
+			id  = firstTypeID + TypeID(len(types))
+			typ Type
+		)
+
+		if id < firstTypeID {
+			return nil, fmt.Errorf("no more type IDs")
+		}
+
+		name, err := rawStrings.Lookup(raw.NameOff)
+		if err != nil {
+			return nil, fmt.Errorf("get name for type id %d: %w", id, err)
+		}
+
+		switch raw.Kind() {
+		case kindInt:
+			size := raw.Size()
+			bi := raw.data.(*btfInt)
+			if bi.Offset() > 0 || bi.Bits().Bytes() != size {
+				legacyBitfields[id] = [2]Bits{bi.Offset(), bi.Bits()}
+			}
+			typ = &Int{name, raw.Size(), bi.Encoding()}
+
+		case kindPointer:
+			ptr := &Pointer{nil}
+			fixup(raw.Type(), &ptr.Target)
+			typ = ptr
+
+		case kindArray:
+			btfArr := raw.data.(*btfArray)
+			arr := &Array{nil, nil, btfArr.Nelems}
+			fixup(btfArr.IndexType, &arr.Index)
+			fixup(btfArr.Type, &arr.Type)
+			typ = arr
+
+		case kindStruct:
+			members, err := convertMembers(raw.data.([]btfMember), raw.Bitfield())
+			if err != nil {
+				return nil, fmt.Errorf("struct %s (id %d): %w", name, id, err)
+			}
+			typ = &Struct{name, raw.Size(), members}
+
+		case kindUnion:
+			members, err := convertMembers(raw.data.([]btfMember), raw.Bitfield())
+			if err != nil {
+				return nil, fmt.Errorf("union %s (id %d): %w", name, id, err)
+			}
+			typ = &Union{name, raw.Size(), members}
+
+		case kindEnum:
+			rawvals := raw.data.([]btfEnum)
+			vals := make([]EnumValue, 0, len(rawvals))
+			signed := raw.Signed()
+			for i, btfVal := range rawvals {
+				name, err := rawStrings.Lookup(btfVal.NameOff)
+				if err != nil {
+					return nil, fmt.Errorf("get name for enum value %d: %s", i, err)
+				}
+				value := uint64(btfVal.Val)
+				if signed {
+					// Sign extend values to 64 bit.
+					value = uint64(int32(btfVal.Val))
+				}
+				vals = append(vals, EnumValue{name, value})
+			}
+			typ = &Enum{name, raw.Size(), signed, vals}
+
+		case kindForward:
+			typ = &Fwd{name, raw.FwdKind()}
+
+		case kindTypedef:
+			typedef := &Typedef{name, nil}
+			fixup(raw.Type(), &typedef.Type)
+			typ = typedef
+
+		case kindVolatile:
+			volatile := &Volatile{nil}
+			fixup(raw.Type(), &volatile.Type)
+			typ = volatile
+
+		case kindConst:
+			cnst := &Const{nil}
+			fixup(raw.Type(), &cnst.Type)
+			typ = cnst
+
+		case kindRestrict:
+			restrict := &Restrict{nil}
+			fixup(raw.Type(), &restrict.Type)
+			typ = restrict
+
+		case kindFunc:
+			fn := &Func{name, nil, raw.Linkage()}
+			if err := fixupAndAssert(raw.Type(), &fn.Type, reflect.TypeOf((*FuncProto)(nil))); err != nil {
+				return nil, err
+			}
+			typ = fn
+
+		case kindFuncProto:
+			rawparams := raw.data.([]btfParam)
+			params := make([]FuncParam, 0, len(rawparams))
+			for i, param := range rawparams {
+				name, err := rawStrings.Lookup(param.NameOff)
+				if err != nil {
+					return nil, fmt.Errorf("get name for func proto parameter %d: %s", i, err)
+				}
+				params = append(params, FuncParam{
+					Name: name,
+				})
+			}
+			for i := range params {
+				fixup(rawparams[i].Type, &params[i].Type)
+			}
+
+			fp := &FuncProto{nil, params}
+			fixup(raw.Type(), &fp.Return)
+			typ = fp
+
+		case kindVar:
+			variable := raw.data.(*btfVariable)
+			v := &Var{name, nil, VarLinkage(variable.Linkage)}
+			fixup(raw.Type(), &v.Type)
+			typ = v
+
+		case kindDatasec:
+			btfVars := raw.data.([]btfVarSecinfo)
+			vars := make([]VarSecinfo, 0, len(btfVars))
+			for _, btfVar := range btfVars {
+				vars = append(vars, VarSecinfo{
+					Offset: btfVar.Offset,
+					Size:   btfVar.Size,
+				})
+			}
+			for i := range vars {
+				fixup(btfVars[i].Type, &vars[i].Type)
+			}
+			typ = &Datasec{name, raw.Size(), vars}
+
+		case kindFloat:
+			typ = &Float{name, raw.Size()}
+
+		case kindDeclTag:
+			btfIndex := raw.data.(*btfDeclTag).ComponentIdx
+			if uint64(btfIndex) > math.MaxInt {
+				return nil, fmt.Errorf("type id %d: index exceeds int", id)
+			}
+
+			dt := &declTag{nil, name, int(int32(btfIndex))}
+			fixup(raw.Type(), &dt.Type)
+			typ = dt
+
+			declTags = append(declTags, dt)
+
+		case kindTypeTag:
+			tt := &typeTag{nil, name}
+			fixup(raw.Type(), &tt.Type)
+			typ = tt
+
+		case kindEnum64:
+			rawvals := raw.data.([]btfEnum64)
+			vals := make([]EnumValue, 0, len(rawvals))
+			for i, btfVal := range rawvals {
+				name, err := rawStrings.Lookup(btfVal.NameOff)
+				if err != nil {
+					return nil, fmt.Errorf("get name for enum64 value %d: %s", i, err)
+				}
+				value := (uint64(btfVal.ValHi32) << 32) | uint64(btfVal.ValLo32)
+				vals = append(vals, EnumValue{name, value})
+			}
+			typ = &Enum{name, raw.Size(), raw.Signed(), vals}
+
+		default:
+			return nil, fmt.Errorf("type id %d: unknown kind: %v", id, raw.Kind())
+		}
+
+		types = append(types, typ)
+	}
+
+	for _, fixup := range fixups {
+		if fixup.id < firstTypeID {
+			return nil, fmt.Errorf("fixup for base type id %d is not expected", fixup.id)
+		}
+
+		idx := int(fixup.id - firstTypeID)
+		if idx >= len(types) {
+			return nil, fmt.Errorf("reference to invalid type id: %d", fixup.id)
+		}
+
+		*fixup.typ = types[idx]
+	}
+
+	for _, bitfieldFixup := range bitfieldFixups {
+		if bitfieldFixup.id < firstTypeID {
+			return nil, fmt.Errorf("bitfield fixup from split to base types is not expected")
+		}
+
+		data, ok := legacyBitfields[bitfieldFixup.id]
+		if ok {
+			// This is indeed a legacy bitfield, fix it up.
+			bitfieldFixup.m.Offset += data[0]
+			bitfieldFixup.m.BitfieldSize = data[1]
+		}
+	}
+
+	for _, assertion := range assertions {
+		if reflect.TypeOf(*assertion.typ) != assertion.want {
+			return nil, fmt.Errorf("type ID %d: expected %s, got %T", assertion.id, assertion.want, *assertion.typ)
+		}
+	}
+
+	for _, dt := range declTags {
+		switch t := dt.Type.(type) {
+		case *Var, *Typedef:
+			if dt.Index != -1 {
+				return nil, fmt.Errorf("type %s: index %d is not -1", dt, dt.Index)
+			}
+
+		case composite:
+			if dt.Index >= len(t.members()) {
+				return nil, fmt.Errorf("type %s: index %d exceeds members of %s", dt, dt.Index, t)
+			}
+
+		case *Func:
+			if dt.Index >= len(t.Type.(*FuncProto).Params) {
+				return nil, fmt.Errorf("type %s: index %d exceeds params of %s", dt, dt.Index, t)
+			}
+
+		default:
+			return nil, fmt.Errorf("type %s: decl tag for type %s is not supported", dt, t)
+		}
+	}
+
+	return types, nil
+}
+
+// essentialName represents the name of a BTF type stripped of any flavor
+// suffixes after a ___ delimiter.
+type essentialName string
+
+// newEssentialName returns name without a ___ suffix.
+//
+// CO-RE has the concept of 'struct flavors', which are used to deal with
+// changes in kernel data structures. Anything after three underscores
+// in a type name is ignored for the purpose of finding a candidate type
+// in the kernel's BTF.
+func newEssentialName(name string) essentialName {
+	if name == "" {
+		return ""
+	}
+	lastIdx := strings.LastIndex(name, "___")
+	if lastIdx > 0 {
+		return essentialName(name[:lastIdx])
+	}
+	return essentialName(name)
+}
+
+// UnderlyingType skips qualifiers and Typedefs.
+func UnderlyingType(typ Type) Type {
+	result := typ
+	for depth := 0; depth <= maxTypeDepth; depth++ {
+		switch v := (result).(type) {
+		case qualifier:
+			result = v.qualify()
+		case *Typedef:
+			result = v.Type
+		default:
+			return result
+		}
+	}
+	return &cycle{typ}
+}
+
+// as returns typ if is of type T. Otherwise it peels qualifiers and Typedefs
+// until it finds a T.
+//
+// Returns the zero value and false if there is no T or if the type is nested
+// too deeply.
+func as[T Type](typ Type) (T, bool) {
+	for depth := 0; depth <= maxTypeDepth; depth++ {
+		switch v := (typ).(type) {
+		case T:
+			return v, true
+		case qualifier:
+			typ = v.qualify()
+		case *Typedef:
+			typ = v.Type
+		default:
+			goto notFound
+		}
+	}
+notFound:
+	var zero T
+	return zero, false
+}
+
+type formatState struct {
+	fmt.State
+	depth int
+}
+
+// formattableType is a subset of Type, to ease unit testing of formatType.
+type formattableType interface {
+	fmt.Formatter
+	TypeName() string
+}
+
+// formatType formats a type in a canonical form.
+//
+// Handles cyclical types by only printing cycles up to a certain depth. Elements
+// in extra are separated by spaces unless the preceding element is a string
+// ending in '='.
+func formatType(f fmt.State, verb rune, t formattableType, extra ...interface{}) {
+	if verb != 'v' && verb != 's' {
+		fmt.Fprintf(f, "{UNRECOGNIZED: %c}", verb)
+		return
+	}
+
+	_, _ = io.WriteString(f, internal.GoTypeName(t))
+
+	if name := t.TypeName(); name != "" {
+		// Output BTF type name if present.
+		fmt.Fprintf(f, ":%q", name)
+	}
+
+	if f.Flag('+') {
+		// Output address if requested.
+		fmt.Fprintf(f, ":%#p", t)
+	}
+
+	if verb == 's' {
+		// %s omits details.
+		return
+	}
+
+	var depth int
+	if ps, ok := f.(*formatState); ok {
+		depth = ps.depth
+		f = ps.State
+	}
+
+	maxDepth, ok := f.Width()
+	if !ok {
+		maxDepth = 0
+	}
+
+	if depth > maxDepth {
+		// We've reached the maximum depth. This avoids infinite recursion even
+		// for cyclical types.
+		return
+	}
+
+	if len(extra) == 0 {
+		return
+	}
+
+	wantSpace := false
+	_, _ = io.WriteString(f, "[")
+	for _, arg := range extra {
+		if wantSpace {
+			_, _ = io.WriteString(f, " ")
+		}
+
+		switch v := arg.(type) {
+		case string:
+			_, _ = io.WriteString(f, v)
+			wantSpace = len(v) > 0 && v[len(v)-1] != '='
+			continue
+
+		case formattableType:
+			v.Format(&formatState{f, depth + 1}, verb)
+
+		default:
+			fmt.Fprint(f, arg)
+		}
+
+		wantSpace = true
+	}
+	_, _ = io.WriteString(f, "]")
+}
diff --git a/vendor/github.com/cilium/ebpf/btf/workarounds.go b/vendor/github.com/cilium/ebpf/btf/workarounds.go
new file mode 100644
index 00000000000..12a89b87eed
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/btf/workarounds.go
@@ -0,0 +1,26 @@
+package btf
+
+// datasecResolveWorkaround ensures that certain vars in a Datasec are added
+// to a Spec before the Datasec. This avoids a bug in kernel BTF validation.
+//
+// See https://lore.kernel.org/bpf/20230302123440.1193507-1-lmb@isovalent.com/
+func datasecResolveWorkaround(b *Builder, ds *Datasec) error {
+	for _, vsi := range ds.Vars {
+		v, ok := vsi.Type.(*Var)
+		if !ok {
+			continue
+		}
+
+		switch v.Type.(type) {
+		case *Typedef, *Volatile, *Const, *Restrict, *typeTag:
+			// NB: We must never call Add on a Datasec, otherwise we risk
+			// infinite recursion.
+			_, err := b.Add(v.Type)
+			if err != nil {
+				return err
+			}
+		}
+	}
+
+	return nil
+}
diff --git a/vendor/github.com/cilium/ebpf/collection.go b/vendor/github.com/cilium/ebpf/collection.go
new file mode 100644
index 00000000000..fb720bebdb7
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/collection.go
@@ -0,0 +1,841 @@
+package ebpf
+
+import (
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"reflect"
+	"strings"
+
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/btf"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/kconfig"
+)
+
+// CollectionOptions control loading a collection into the kernel.
+//
+// Maps and Programs are passed to NewMapWithOptions and NewProgramsWithOptions.
+type CollectionOptions struct {
+	Maps     MapOptions
+	Programs ProgramOptions
+
+	// MapReplacements takes a set of Maps that will be used instead of
+	// creating new ones when loading the CollectionSpec.
+	//
+	// For each given Map, there must be a corresponding MapSpec in
+	// CollectionSpec.Maps, and its type, key/value size, max entries and flags
+	// must match the values of the MapSpec.
+	//
+	// The given Maps are Clone()d before being used in the Collection, so the
+	// caller can Close() them freely when they are no longer needed.
+	MapReplacements map[string]*Map
+}
+
+// CollectionSpec describes a collection.
+type CollectionSpec struct {
+	Maps     map[string]*MapSpec
+	Programs map[string]*ProgramSpec
+
+	// Types holds type information about Maps and Programs.
+	// Modifications to Types are currently undefined behaviour.
+	Types *btf.Spec
+
+	// ByteOrder specifies whether the ELF was compiled for
+	// big-endian or little-endian architectures.
+	ByteOrder binary.ByteOrder
+}
+
+// Copy returns a recursive copy of the spec.
+func (cs *CollectionSpec) Copy() *CollectionSpec {
+	if cs == nil {
+		return nil
+	}
+
+	cpy := CollectionSpec{
+		Maps:      make(map[string]*MapSpec, len(cs.Maps)),
+		Programs:  make(map[string]*ProgramSpec, len(cs.Programs)),
+		ByteOrder: cs.ByteOrder,
+		Types:     cs.Types,
+	}
+
+	for name, spec := range cs.Maps {
+		cpy.Maps[name] = spec.Copy()
+	}
+
+	for name, spec := range cs.Programs {
+		cpy.Programs[name] = spec.Copy()
+	}
+
+	return &cpy
+}
+
+// RewriteMaps replaces all references to specific maps.
+//
+// Use this function to use pre-existing maps instead of creating new ones
+// when calling NewCollection. Any named maps are removed from CollectionSpec.Maps.
+//
+// Returns an error if a named map isn't used in at least one program.
+//
+// Deprecated: Pass CollectionOptions.MapReplacements when loading the Collection
+// instead.
+func (cs *CollectionSpec) RewriteMaps(maps map[string]*Map) error {
+	for symbol, m := range maps {
+		// have we seen a program that uses this symbol / map
+		seen := false
+		for progName, progSpec := range cs.Programs {
+			err := progSpec.Instructions.AssociateMap(symbol, m)
+
+			switch {
+			case err == nil:
+				seen = true
+
+			case errors.Is(err, asm.ErrUnreferencedSymbol):
+				// Not all programs need to use the map
+
+			default:
+				return fmt.Errorf("program %s: %w", progName, err)
+			}
+		}
+
+		if !seen {
+			return fmt.Errorf("map %s not referenced by any programs", symbol)
+		}
+
+		// Prevent NewCollection from creating rewritten maps
+		delete(cs.Maps, symbol)
+	}
+
+	return nil
+}
+
+// MissingConstantsError is returned by [CollectionSpec.RewriteConstants].
+type MissingConstantsError struct {
+	// The constants missing from .rodata.
+	Constants []string
+}
+
+func (m *MissingConstantsError) Error() string {
+	return fmt.Sprintf("some constants are missing from .rodata: %s", strings.Join(m.Constants, ", "))
+}
+
+// RewriteConstants replaces the value of multiple constants.
+//
+// The constant must be defined like so in the C program:
+//
+//	volatile const type foobar;
+//	volatile const type foobar = default;
+//
+// Replacement values must be of the same length as the C sizeof(type).
+// If necessary, they are marshalled according to the same rules as
+// map values.
+//
+// From Linux 5.5 the verifier will use constants to eliminate dead code.
+//
+// Returns an error wrapping [MissingConstantsError] if a constant doesn't exist.
+func (cs *CollectionSpec) RewriteConstants(consts map[string]interface{}) error {
+	replaced := make(map[string]bool)
+
+	for name, spec := range cs.Maps {
+		if !strings.HasPrefix(name, ".rodata") {
+			continue
+		}
+
+		b, ds, err := spec.dataSection()
+		if errors.Is(err, errMapNoBTFValue) {
+			// Data sections without a BTF Datasec are valid, but don't support
+			// constant replacements.
+			continue
+		}
+		if err != nil {
+			return fmt.Errorf("map %s: %w", name, err)
+		}
+
+		// MapSpec.Copy() performs a shallow copy. Fully copy the byte slice
+		// to avoid any changes affecting other copies of the MapSpec.
+		cpy := make([]byte, len(b))
+		copy(cpy, b)
+
+		for _, v := range ds.Vars {
+			vname := v.Type.TypeName()
+			replacement, ok := consts[vname]
+			if !ok {
+				continue
+			}
+
+			if _, ok := v.Type.(*btf.Var); !ok {
+				return fmt.Errorf("section %s: unexpected type %T for variable %s", name, v.Type, vname)
+			}
+
+			if replaced[vname] {
+				return fmt.Errorf("section %s: duplicate variable %s", name, vname)
+			}
+
+			if int(v.Offset+v.Size) > len(cpy) {
+				return fmt.Errorf("section %s: offset %d(+%d) for variable %s is out of bounds", name, v.Offset, v.Size, vname)
+			}
+
+			b, err := marshalBytes(replacement, int(v.Size))
+			if err != nil {
+				return fmt.Errorf("marshaling constant replacement %s: %w", vname, err)
+			}
+
+			copy(cpy[v.Offset:v.Offset+v.Size], b)
+
+			replaced[vname] = true
+		}
+
+		spec.Contents[0] = MapKV{Key: uint32(0), Value: cpy}
+	}
+
+	var missing []string
+	for c := range consts {
+		if !replaced[c] {
+			missing = append(missing, c)
+		}
+	}
+
+	if len(missing) != 0 {
+		return fmt.Errorf("rewrite constants: %w", &MissingConstantsError{Constants: missing})
+	}
+
+	return nil
+}
+
+// Assign the contents of a CollectionSpec to a struct.
+//
+// This function is a shortcut to manually checking the presence
+// of maps and programs in a CollectionSpec. Consider using bpf2go
+// if this sounds useful.
+//
+// 'to' must be a pointer to a struct. A field of the
+// struct is updated with values from Programs or Maps if it
+// has an `ebpf` tag and its type is *ProgramSpec or *MapSpec.
+// The tag's value specifies the name of the program or map as
+// found in the CollectionSpec.
+//
+//	struct {
+//	    Foo     *ebpf.ProgramSpec `ebpf:"xdp_foo"`
+//	    Bar     *ebpf.MapSpec     `ebpf:"bar_map"`
+//	    Ignored int
+//	}
+//
+// Returns an error if any of the eBPF objects can't be found, or
+// if the same MapSpec or ProgramSpec is assigned multiple times.
+func (cs *CollectionSpec) Assign(to interface{}) error {
+	// Assign() only supports assigning ProgramSpecs and MapSpecs,
+	// so doesn't load any resources into the kernel.
+	getValue := func(typ reflect.Type, name string) (interface{}, error) {
+		switch typ {
+
+		case reflect.TypeOf((*ProgramSpec)(nil)):
+			if p := cs.Programs[name]; p != nil {
+				return p, nil
+			}
+			return nil, fmt.Errorf("missing program %q", name)
+
+		case reflect.TypeOf((*MapSpec)(nil)):
+			if m := cs.Maps[name]; m != nil {
+				return m, nil
+			}
+			return nil, fmt.Errorf("missing map %q", name)
+
+		default:
+			return nil, fmt.Errorf("unsupported type %s", typ)
+		}
+	}
+
+	return assignValues(to, getValue)
+}
+
+// LoadAndAssign loads Maps and Programs into the kernel and assigns them
+// to a struct.
+//
+// Omitting Map/Program.Close() during application shutdown is an error.
+// See the package documentation for details around Map and Program lifecycle.
+//
+// This function is a shortcut to manually checking the presence
+// of maps and programs in a CollectionSpec. Consider using bpf2go
+// if this sounds useful.
+//
+// 'to' must be a pointer to a struct. A field of the struct is updated with
+// a Program or Map if it has an `ebpf` tag and its type is *Program or *Map.
+// The tag's value specifies the name of the program or map as found in the
+// CollectionSpec. Before updating the struct, the requested objects and their
+// dependent resources are loaded into the kernel and populated with values if
+// specified.
+//
+//	struct {
+//	    Foo     *ebpf.Program `ebpf:"xdp_foo"`
+//	    Bar     *ebpf.Map     `ebpf:"bar_map"`
+//	    Ignored int
+//	}
+//
+// opts may be nil.
+//
+// Returns an error if any of the fields can't be found, or
+// if the same Map or Program is assigned multiple times.
+func (cs *CollectionSpec) LoadAndAssign(to interface{}, opts *CollectionOptions) error {
+	loader, err := newCollectionLoader(cs, opts)
+	if err != nil {
+		return err
+	}
+	defer loader.close()
+
+	// Support assigning Programs and Maps, lazy-loading the required objects.
+	assignedMaps := make(map[string]bool)
+	assignedProgs := make(map[string]bool)
+
+	getValue := func(typ reflect.Type, name string) (interface{}, error) {
+		switch typ {
+
+		case reflect.TypeOf((*Program)(nil)):
+			assignedProgs[name] = true
+			return loader.loadProgram(name)
+
+		case reflect.TypeOf((*Map)(nil)):
+			assignedMaps[name] = true
+			return loader.loadMap(name)
+
+		default:
+			return nil, fmt.Errorf("unsupported type %s", typ)
+		}
+	}
+
+	// Load the Maps and Programs requested by the annotated struct.
+	if err := assignValues(to, getValue); err != nil {
+		return err
+	}
+
+	// Populate the requested maps. Has a chance of lazy-loading other dependent maps.
+	if err := loader.populateMaps(); err != nil {
+		return err
+	}
+
+	// Evaluate the loader's objects after all (lazy)loading has taken place.
+	for n, m := range loader.maps {
+		switch m.typ {
+		case ProgramArray:
+			// Require all lazy-loaded ProgramArrays to be assigned to the given object.
+			// The kernel empties a ProgramArray once the last user space reference
+			// to it closes, which leads to failed tail calls. Combined with the library
+			// closing map fds via GC finalizers this can lead to surprising behaviour.
+			// Only allow unassigned ProgramArrays when the library hasn't pre-populated
+			// any entries from static value declarations. At this point, we know the map
+			// is empty and there's no way for the caller to interact with the map going
+			// forward.
+			if !assignedMaps[n] && len(cs.Maps[n].Contents) > 0 {
+				return fmt.Errorf("ProgramArray %s must be assigned to prevent missed tail calls", n)
+			}
+		}
+	}
+
+	// Prevent loader.cleanup() from closing assigned Maps and Programs.
+	for m := range assignedMaps {
+		delete(loader.maps, m)
+	}
+	for p := range assignedProgs {
+		delete(loader.programs, p)
+	}
+
+	return nil
+}
+
+// Collection is a collection of Programs and Maps associated
+// with their symbols
+type Collection struct {
+	Programs map[string]*Program
+	Maps     map[string]*Map
+}
+
+// NewCollection creates a Collection from the given spec, creating and
+// loading its declared resources into the kernel.
+//
+// Omitting Collection.Close() during application shutdown is an error.
+// See the package documentation for details around Map and Program lifecycle.
+func NewCollection(spec *CollectionSpec) (*Collection, error) {
+	return NewCollectionWithOptions(spec, CollectionOptions{})
+}
+
+// NewCollectionWithOptions creates a Collection from the given spec using
+// options, creating and loading its declared resources into the kernel.
+//
+// Omitting Collection.Close() during application shutdown is an error.
+// See the package documentation for details around Map and Program lifecycle.
+func NewCollectionWithOptions(spec *CollectionSpec, opts CollectionOptions) (*Collection, error) {
+	loader, err := newCollectionLoader(spec, &opts)
+	if err != nil {
+		return nil, err
+	}
+	defer loader.close()
+
+	// Create maps first, as their fds need to be linked into programs.
+	for mapName := range spec.Maps {
+		if _, err := loader.loadMap(mapName); err != nil {
+			return nil, err
+		}
+	}
+
+	for progName, prog := range spec.Programs {
+		if prog.Type == UnspecifiedProgram {
+			continue
+		}
+
+		if _, err := loader.loadProgram(progName); err != nil {
+			return nil, err
+		}
+	}
+
+	// Maps can contain Program and Map stubs, so populate them after
+	// all Maps and Programs have been successfully loaded.
+	if err := loader.populateMaps(); err != nil {
+		return nil, err
+	}
+
+	// Prevent loader.cleanup from closing maps and programs.
+	maps, progs := loader.maps, loader.programs
+	loader.maps, loader.programs = nil, nil
+
+	return &Collection{
+		progs,
+		maps,
+	}, nil
+}
+
+type collectionLoader struct {
+	coll     *CollectionSpec
+	opts     *CollectionOptions
+	maps     map[string]*Map
+	programs map[string]*Program
+}
+
+func newCollectionLoader(coll *CollectionSpec, opts *CollectionOptions) (*collectionLoader, error) {
+	if opts == nil {
+		opts = &CollectionOptions{}
+	}
+
+	// Check for existing MapSpecs in the CollectionSpec for all provided replacement maps.
+	for name, m := range opts.MapReplacements {
+		spec, ok := coll.Maps[name]
+		if !ok {
+			return nil, fmt.Errorf("replacement map %s not found in CollectionSpec", name)
+		}
+
+		if err := spec.Compatible(m); err != nil {
+			return nil, fmt.Errorf("using replacement map %s: %w", spec.Name, err)
+		}
+	}
+
+	return &collectionLoader{
+		coll,
+		opts,
+		make(map[string]*Map),
+		make(map[string]*Program),
+	}, nil
+}
+
+// close all resources left over in the collectionLoader.
+func (cl *collectionLoader) close() {
+	for _, m := range cl.maps {
+		m.Close()
+	}
+	for _, p := range cl.programs {
+		p.Close()
+	}
+}
+
+func (cl *collectionLoader) loadMap(mapName string) (*Map, error) {
+	if m := cl.maps[mapName]; m != nil {
+		return m, nil
+	}
+
+	mapSpec := cl.coll.Maps[mapName]
+	if mapSpec == nil {
+		return nil, fmt.Errorf("missing map %s", mapName)
+	}
+
+	if replaceMap, ok := cl.opts.MapReplacements[mapName]; ok {
+		// Clone the map to avoid closing user's map later on.
+		m, err := replaceMap.Clone()
+		if err != nil {
+			return nil, err
+		}
+
+		cl.maps[mapName] = m
+		return m, nil
+	}
+
+	m, err := newMapWithOptions(mapSpec, cl.opts.Maps)
+	if err != nil {
+		return nil, fmt.Errorf("map %s: %w", mapName, err)
+	}
+
+	cl.maps[mapName] = m
+	return m, nil
+}
+
+func (cl *collectionLoader) loadProgram(progName string) (*Program, error) {
+	if prog := cl.programs[progName]; prog != nil {
+		return prog, nil
+	}
+
+	progSpec := cl.coll.Programs[progName]
+	if progSpec == nil {
+		return nil, fmt.Errorf("unknown program %s", progName)
+	}
+
+	// Bail out early if we know the kernel is going to reject the program.
+	// This skips loading map dependencies, saving some cleanup work later.
+	if progSpec.Type == UnspecifiedProgram {
+		return nil, fmt.Errorf("cannot load program %s: program type is unspecified", progName)
+	}
+
+	progSpec = progSpec.Copy()
+
+	// Rewrite any reference to a valid map in the program's instructions,
+	// which includes all of its dependencies.
+	for i := range progSpec.Instructions {
+		ins := &progSpec.Instructions[i]
+
+		if !ins.IsLoadFromMap() || ins.Reference() == "" {
+			continue
+		}
+
+		// Don't overwrite map loads containing non-zero map fd's,
+		// they can be manually included by the caller.
+		// Map FDs/IDs are placed in the lower 32 bits of Constant.
+		if int32(ins.Constant) > 0 {
+			continue
+		}
+
+		m, err := cl.loadMap(ins.Reference())
+		if err != nil {
+			return nil, fmt.Errorf("program %s: %w", progName, err)
+		}
+
+		if err := ins.AssociateMap(m); err != nil {
+			return nil, fmt.Errorf("program %s: map %s: %w", progName, ins.Reference(), err)
+		}
+	}
+
+	prog, err := newProgramWithOptions(progSpec, cl.opts.Programs)
+	if err != nil {
+		return nil, fmt.Errorf("program %s: %w", progName, err)
+	}
+
+	cl.programs[progName] = prog
+	return prog, nil
+}
+
+func (cl *collectionLoader) populateMaps() error {
+	for mapName, m := range cl.maps {
+		mapSpec, ok := cl.coll.Maps[mapName]
+		if !ok {
+			return fmt.Errorf("missing map spec %s", mapName)
+		}
+
+		// MapSpecs that refer to inner maps or programs within the same
+		// CollectionSpec do so using strings. These strings are used as the key
+		// to look up the respective object in the Maps or Programs fields.
+		// Resolve those references to actual Map or Program resources that
+		// have been loaded into the kernel.
+		if mapSpec.Type.canStoreMap() || mapSpec.Type.canStoreProgram() {
+			mapSpec = mapSpec.Copy()
+
+			for i, kv := range mapSpec.Contents {
+				objName, ok := kv.Value.(string)
+				if !ok {
+					continue
+				}
+
+				switch t := mapSpec.Type; {
+				case t.canStoreProgram():
+					// loadProgram is idempotent and could return an existing Program.
+					prog, err := cl.loadProgram(objName)
+					if err != nil {
+						return fmt.Errorf("loading program %s, for map %s: %w", objName, mapName, err)
+					}
+					mapSpec.Contents[i] = MapKV{kv.Key, prog}
+
+				case t.canStoreMap():
+					// loadMap is idempotent and could return an existing Map.
+					innerMap, err := cl.loadMap(objName)
+					if err != nil {
+						return fmt.Errorf("loading inner map %s, for map %s: %w", objName, mapName, err)
+					}
+					mapSpec.Contents[i] = MapKV{kv.Key, innerMap}
+				}
+			}
+		}
+
+		// Populate and freeze the map if specified.
+		if err := m.finalize(mapSpec); err != nil {
+			return fmt.Errorf("populating map %s: %w", mapName, err)
+		}
+	}
+
+	return nil
+}
+
+// resolveKconfig resolves all variables declared in .kconfig and populates
+// m.Contents. Does nothing if the given m.Contents is non-empty.
+func resolveKconfig(m *MapSpec) error {
+	ds, ok := m.Value.(*btf.Datasec)
+	if !ok {
+		return errors.New("map value is not a Datasec")
+	}
+
+	type configInfo struct {
+		offset uint32
+		typ    btf.Type
+	}
+
+	configs := make(map[string]configInfo)
+
+	data := make([]byte, ds.Size)
+	for _, vsi := range ds.Vars {
+		v := vsi.Type.(*btf.Var)
+		n := v.TypeName()
+
+		switch n {
+		case "LINUX_KERNEL_VERSION":
+			if integer, ok := v.Type.(*btf.Int); !ok || integer.Size != 4 {
+				return fmt.Errorf("variable %s must be a 32 bits integer, got %s", n, v.Type)
+			}
+
+			kv, err := internal.KernelVersion()
+			if err != nil {
+				return fmt.Errorf("getting kernel version: %w", err)
+			}
+			internal.NativeEndian.PutUint32(data[vsi.Offset:], kv.Kernel())
+
+		case "LINUX_HAS_SYSCALL_WRAPPER":
+			if integer, ok := v.Type.(*btf.Int); !ok || integer.Size != 4 {
+				return fmt.Errorf("variable %s must be a 32 bits integer, got %s", n, v.Type)
+			}
+			var value uint32 = 1
+			if err := haveSyscallWrapper(); errors.Is(err, ErrNotSupported) {
+				value = 0
+			} else if err != nil {
+				return fmt.Errorf("unable to derive a value for LINUX_HAS_SYSCALL_WRAPPER: %w", err)
+			}
+
+			internal.NativeEndian.PutUint32(data[vsi.Offset:], value)
+
+		default: // Catch CONFIG_*.
+			configs[n] = configInfo{
+				offset: vsi.Offset,
+				typ:    v.Type,
+			}
+		}
+	}
+
+	// We only parse kconfig file if a CONFIG_* variable was found.
+	if len(configs) > 0 {
+		f, err := kconfig.Find()
+		if err != nil {
+			return fmt.Errorf("cannot find a kconfig file: %w", err)
+		}
+		defer f.Close()
+
+		filter := make(map[string]struct{}, len(configs))
+		for config := range configs {
+			filter[config] = struct{}{}
+		}
+
+		kernelConfig, err := kconfig.Parse(f, filter)
+		if err != nil {
+			return fmt.Errorf("cannot parse kconfig file: %w", err)
+		}
+
+		for n, info := range configs {
+			value, ok := kernelConfig[n]
+			if !ok {
+				return fmt.Errorf("config option %q does not exists for this kernel", n)
+			}
+
+			err := kconfig.PutValue(data[info.offset:], info.typ, value)
+			if err != nil {
+				return fmt.Errorf("problem adding value for %s: %w", n, err)
+			}
+		}
+	}
+
+	m.Contents = []MapKV{{uint32(0), data}}
+
+	return nil
+}
+
+// LoadCollection reads an object file and creates and loads its declared
+// resources into the kernel.
+//
+// Omitting Collection.Close() during application shutdown is an error.
+// See the package documentation for details around Map and Program lifecycle.
+func LoadCollection(file string) (*Collection, error) {
+	spec, err := LoadCollectionSpec(file)
+	if err != nil {
+		return nil, err
+	}
+	return NewCollection(spec)
+}
+
+// Close frees all maps and programs associated with the collection.
+//
+// The collection mustn't be used afterwards.
+func (coll *Collection) Close() {
+	for _, prog := range coll.Programs {
+		prog.Close()
+	}
+	for _, m := range coll.Maps {
+		m.Close()
+	}
+}
+
+// DetachMap removes the named map from the Collection.
+//
+// This means that a later call to Close() will not affect this map.
+//
+// Returns nil if no map of that name exists.
+func (coll *Collection) DetachMap(name string) *Map {
+	m := coll.Maps[name]
+	delete(coll.Maps, name)
+	return m
+}
+
+// DetachProgram removes the named program from the Collection.
+//
+// This means that a later call to Close() will not affect this program.
+//
+// Returns nil if no program of that name exists.
+func (coll *Collection) DetachProgram(name string) *Program {
+	p := coll.Programs[name]
+	delete(coll.Programs, name)
+	return p
+}
+
+// structField represents a struct field containing the ebpf struct tag.
+type structField struct {
+	reflect.StructField
+	value reflect.Value
+}
+
+// ebpfFields extracts field names tagged with 'ebpf' from a struct type.
+// Keep track of visited types to avoid infinite recursion.
+func ebpfFields(structVal reflect.Value, visited map[reflect.Type]bool) ([]structField, error) {
+	if visited == nil {
+		visited = make(map[reflect.Type]bool)
+	}
+
+	structType := structVal.Type()
+	if structType.Kind() != reflect.Struct {
+		return nil, fmt.Errorf("%s is not a struct", structType)
+	}
+
+	if visited[structType] {
+		return nil, fmt.Errorf("recursion on type %s", structType)
+	}
+
+	fields := make([]structField, 0, structType.NumField())
+	for i := 0; i < structType.NumField(); i++ {
+		field := structField{structType.Field(i), structVal.Field(i)}
+
+		// If the field is tagged, gather it and move on.
+		name := field.Tag.Get("ebpf")
+		if name != "" {
+			fields = append(fields, field)
+			continue
+		}
+
+		// If the field does not have an ebpf tag, but is a struct or a pointer
+		// to a struct, attempt to gather its fields as well.
+		var v reflect.Value
+		switch field.Type.Kind() {
+		case reflect.Ptr:
+			if field.Type.Elem().Kind() != reflect.Struct {
+				continue
+			}
+
+			if field.value.IsNil() {
+				return nil, fmt.Errorf("nil pointer to %s", structType)
+			}
+
+			// Obtain the destination type of the pointer.
+			v = field.value.Elem()
+
+		case reflect.Struct:
+			// Reference the value's type directly.
+			v = field.value
+
+		default:
+			continue
+		}
+
+		inner, err := ebpfFields(v, visited)
+		if err != nil {
+			return nil, fmt.Errorf("field %s: %w", field.Name, err)
+		}
+
+		fields = append(fields, inner...)
+	}
+
+	return fields, nil
+}
+
+// assignValues attempts to populate all fields of 'to' tagged with 'ebpf'.
+//
+// getValue is called for every tagged field of 'to' and must return the value
+// to be assigned to the field with the given typ and name.
+func assignValues(to interface{},
+	getValue func(typ reflect.Type, name string) (interface{}, error)) error {
+
+	toValue := reflect.ValueOf(to)
+	if toValue.Type().Kind() != reflect.Ptr {
+		return fmt.Errorf("%T is not a pointer to struct", to)
+	}
+
+	if toValue.IsNil() {
+		return fmt.Errorf("nil pointer to %T", to)
+	}
+
+	fields, err := ebpfFields(toValue.Elem(), nil)
+	if err != nil {
+		return err
+	}
+
+	type elem struct {
+		// Either *Map or *Program
+		typ  reflect.Type
+		name string
+	}
+
+	assigned := make(map[elem]string)
+	for _, field := range fields {
+		// Get string value the field is tagged with.
+		tag := field.Tag.Get("ebpf")
+		if strings.Contains(tag, ",") {
+			return fmt.Errorf("field %s: ebpf tag contains a comma", field.Name)
+		}
+
+		// Check if the eBPF object with the requested
+		// type and tag was already assigned elsewhere.
+		e := elem{field.Type, tag}
+		if af := assigned[e]; af != "" {
+			return fmt.Errorf("field %s: object %q was already assigned to %s", field.Name, tag, af)
+		}
+
+		// Get the eBPF object referred to by the tag.
+		value, err := getValue(field.Type, tag)
+		if err != nil {
+			return fmt.Errorf("field %s: %w", field.Name, err)
+		}
+
+		if !field.value.CanSet() {
+			return fmt.Errorf("field %s: can't set value", field.Name)
+		}
+		field.value.Set(reflect.ValueOf(value))
+
+		assigned[e] = field.Name
+	}
+
+	return nil
+}
diff --git a/vendor/github.com/cilium/ebpf/doc.go b/vendor/github.com/cilium/ebpf/doc.go
new file mode 100644
index 00000000000..396b3394d33
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/doc.go
@@ -0,0 +1,25 @@
+// Package ebpf is a toolkit for working with eBPF programs.
+//
+// eBPF programs are small snippets of code which are executed directly
+// in a VM in the Linux kernel, which makes them very fast and flexible.
+// Many Linux subsystems now accept eBPF programs. This makes it possible
+// to implement highly application specific logic inside the kernel,
+// without having to modify the actual kernel itself.
+//
+// This package is designed for long-running processes which
+// want to use eBPF to implement part of their application logic. It has no
+// run-time dependencies outside of the library and the Linux kernel itself.
+// eBPF code should be compiled ahead of time using clang, and shipped with
+// your application as any other resource.
+//
+// Use the link subpackage to attach a loaded program to a hook in the kernel.
+//
+// Note that losing all references to Map and Program resources will cause
+// their underlying file descriptors to be closed, potentially removing those
+// objects from the kernel. Always retain a reference by e.g. deferring a
+// Close() of a Collection or LoadAndAssign object until application exit.
+//
+// Special care needs to be taken when handling maps of type ProgramArray,
+// as the kernel erases its contents when the last userspace or bpffs
+// reference disappears, regardless of the map being in active use.
+package ebpf
diff --git a/vendor/github.com/cilium/ebpf/elf_reader.go b/vendor/github.com/cilium/ebpf/elf_reader.go
new file mode 100644
index 00000000000..8d92672eb14
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/elf_reader.go
@@ -0,0 +1,1314 @@
+package ebpf
+
+import (
+	"bufio"
+	"bytes"
+	"debug/elf"
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"io"
+	"math"
+	"os"
+	"strings"
+
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/btf"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+type kconfigMetaKey struct{}
+
+type kconfigMeta struct {
+	Map    *MapSpec
+	Offset uint32
+}
+
+type kfuncMeta struct{}
+
+// elfCode is a convenience to reduce the amount of arguments that have to
+// be passed around explicitly. You should treat its contents as immutable.
+type elfCode struct {
+	*internal.SafeELFFile
+	sections map[elf.SectionIndex]*elfSection
+	license  string
+	version  uint32
+	btf      *btf.Spec
+	extInfo  *btf.ExtInfos
+	maps     map[string]*MapSpec
+	kfuncs   map[string]*btf.Func
+	kconfig  *MapSpec
+}
+
+// LoadCollectionSpec parses an ELF file into a CollectionSpec.
+func LoadCollectionSpec(file string) (*CollectionSpec, error) {
+	f, err := os.Open(file)
+	if err != nil {
+		return nil, err
+	}
+	defer f.Close()
+
+	spec, err := LoadCollectionSpecFromReader(f)
+	if err != nil {
+		return nil, fmt.Errorf("file %s: %w", file, err)
+	}
+	return spec, nil
+}
+
+// LoadCollectionSpecFromReader parses an ELF file into a CollectionSpec.
+func LoadCollectionSpecFromReader(rd io.ReaderAt) (*CollectionSpec, error) {
+	f, err := internal.NewSafeELFFile(rd)
+	if err != nil {
+		return nil, err
+	}
+
+	// Checks if the ELF file is for BPF data.
+	// Old LLVM versions set e_machine to EM_NONE.
+	if f.File.Machine != unix.EM_NONE && f.File.Machine != elf.EM_BPF {
+		return nil, fmt.Errorf("unexpected machine type for BPF ELF: %s", f.File.Machine)
+	}
+
+	var (
+		licenseSection *elf.Section
+		versionSection *elf.Section
+		sections       = make(map[elf.SectionIndex]*elfSection)
+		relSections    = make(map[elf.SectionIndex]*elf.Section)
+	)
+
+	// This is the target of relocations generated by inline assembly.
+	sections[elf.SHN_UNDEF] = newElfSection(new(elf.Section), undefSection)
+
+	// Collect all the sections we're interested in. This includes relocations
+	// which we parse later.
+	for i, sec := range f.Sections {
+		idx := elf.SectionIndex(i)
+
+		switch {
+		case strings.HasPrefix(sec.Name, "license"):
+			licenseSection = sec
+		case strings.HasPrefix(sec.Name, "version"):
+			versionSection = sec
+		case strings.HasPrefix(sec.Name, "maps"):
+			sections[idx] = newElfSection(sec, mapSection)
+		case sec.Name == ".maps":
+			sections[idx] = newElfSection(sec, btfMapSection)
+		case sec.Name == ".bss" || sec.Name == ".data" || strings.HasPrefix(sec.Name, ".rodata"):
+			sections[idx] = newElfSection(sec, dataSection)
+		case sec.Type == elf.SHT_REL:
+			// Store relocations under the section index of the target
+			relSections[elf.SectionIndex(sec.Info)] = sec
+		case sec.Type == elf.SHT_PROGBITS && (sec.Flags&elf.SHF_EXECINSTR) != 0 && sec.Size > 0:
+			sections[idx] = newElfSection(sec, programSection)
+		}
+	}
+
+	license, err := loadLicense(licenseSection)
+	if err != nil {
+		return nil, fmt.Errorf("load license: %w", err)
+	}
+
+	version, err := loadVersion(versionSection, f.ByteOrder)
+	if err != nil {
+		return nil, fmt.Errorf("load version: %w", err)
+	}
+
+	btfSpec, btfExtInfo, err := btf.LoadSpecAndExtInfosFromReader(rd)
+	if err != nil && !errors.Is(err, btf.ErrNotFound) {
+		return nil, fmt.Errorf("load BTF: %w", err)
+	}
+
+	ec := &elfCode{
+		SafeELFFile: f,
+		sections:    sections,
+		license:     license,
+		version:     version,
+		btf:         btfSpec,
+		extInfo:     btfExtInfo,
+		maps:        make(map[string]*MapSpec),
+		kfuncs:      make(map[string]*btf.Func),
+	}
+
+	symbols, err := f.Symbols()
+	if err != nil {
+		return nil, fmt.Errorf("load symbols: %v", err)
+	}
+
+	ec.assignSymbols(symbols)
+
+	if err := ec.loadRelocations(relSections, symbols); err != nil {
+		return nil, fmt.Errorf("load relocations: %w", err)
+	}
+
+	if err := ec.loadMaps(); err != nil {
+		return nil, fmt.Errorf("load maps: %w", err)
+	}
+
+	if err := ec.loadBTFMaps(); err != nil {
+		return nil, fmt.Errorf("load BTF maps: %w", err)
+	}
+
+	if err := ec.loadDataSections(); err != nil {
+		return nil, fmt.Errorf("load data sections: %w", err)
+	}
+
+	if err := ec.loadKconfigSection(); err != nil {
+		return nil, fmt.Errorf("load virtual .kconfig section: %w", err)
+	}
+
+	if err := ec.loadKsymsSection(); err != nil {
+		return nil, fmt.Errorf("load virtual .ksyms section: %w", err)
+	}
+
+	// Finally, collect programs and link them.
+	progs, err := ec.loadProgramSections()
+	if err != nil {
+		return nil, fmt.Errorf("load programs: %w", err)
+	}
+
+	return &CollectionSpec{ec.maps, progs, btfSpec, ec.ByteOrder}, nil
+}
+
+func loadLicense(sec *elf.Section) (string, error) {
+	if sec == nil {
+		return "", nil
+	}
+
+	data, err := sec.Data()
+	if err != nil {
+		return "", fmt.Errorf("section %s: %v", sec.Name, err)
+	}
+	return string(bytes.TrimRight(data, "\000")), nil
+}
+
+func loadVersion(sec *elf.Section, bo binary.ByteOrder) (uint32, error) {
+	if sec == nil {
+		return 0, nil
+	}
+
+	var version uint32
+	if err := binary.Read(sec.Open(), bo, &version); err != nil {
+		return 0, fmt.Errorf("section %s: %v", sec.Name, err)
+	}
+	return version, nil
+}
+
+type elfSectionKind int
+
+const (
+	undefSection elfSectionKind = iota
+	mapSection
+	btfMapSection
+	programSection
+	dataSection
+)
+
+type elfSection struct {
+	*elf.Section
+	kind elfSectionKind
+	// Offset from the start of the section to a symbol
+	symbols map[uint64]elf.Symbol
+	// Offset from the start of the section to a relocation, which points at
+	// a symbol in another section.
+	relocations map[uint64]elf.Symbol
+	// The number of relocations pointing at this section.
+	references int
+}
+
+func newElfSection(section *elf.Section, kind elfSectionKind) *elfSection {
+	return &elfSection{
+		section,
+		kind,
+		make(map[uint64]elf.Symbol),
+		make(map[uint64]elf.Symbol),
+		0,
+	}
+}
+
+// assignSymbols takes a list of symbols and assigns them to their
+// respective sections, indexed by name.
+func (ec *elfCode) assignSymbols(symbols []elf.Symbol) {
+	for _, symbol := range symbols {
+		symType := elf.ST_TYPE(symbol.Info)
+		symSection := ec.sections[symbol.Section]
+		if symSection == nil {
+			continue
+		}
+
+		// Anonymous symbols only occur in debug sections which we don't process
+		// relocations for. Anonymous symbols are not referenced from other sections.
+		if symbol.Name == "" {
+			continue
+		}
+
+		// Older versions of LLVM don't tag symbols correctly, so keep
+		// all NOTYPE ones.
+		switch symSection.kind {
+		case mapSection, btfMapSection, dataSection:
+			if symType != elf.STT_NOTYPE && symType != elf.STT_OBJECT {
+				continue
+			}
+		case programSection:
+			if symType != elf.STT_NOTYPE && symType != elf.STT_FUNC {
+				continue
+			}
+			// LLVM emits LBB_ (Local Basic Block) symbols that seem to be jump
+			// targets within sections, but BPF has no use for them.
+			if symType == elf.STT_NOTYPE && elf.ST_BIND(symbol.Info) == elf.STB_LOCAL &&
+				strings.HasPrefix(symbol.Name, "LBB") {
+				continue
+			}
+		// Only collect symbols that occur in program/maps/data sections.
+		default:
+			continue
+		}
+
+		symSection.symbols[symbol.Value] = symbol
+	}
+}
+
+// loadRelocations iterates .rel* sections and extracts relocation entries for
+// sections of interest. Makes sure relocations point at valid sections.
+func (ec *elfCode) loadRelocations(relSections map[elf.SectionIndex]*elf.Section, symbols []elf.Symbol) error {
+	for idx, relSection := range relSections {
+		section := ec.sections[idx]
+		if section == nil {
+			continue
+		}
+
+		rels, err := ec.loadSectionRelocations(relSection, symbols)
+		if err != nil {
+			return fmt.Errorf("relocation for section %q: %w", section.Name, err)
+		}
+
+		for _, rel := range rels {
+			target := ec.sections[rel.Section]
+			if target == nil {
+				return fmt.Errorf("section %q: reference to %q in section %s: %w", section.Name, rel.Name, rel.Section, ErrNotSupported)
+			}
+
+			target.references++
+		}
+
+		section.relocations = rels
+	}
+
+	return nil
+}
+
+// loadProgramSections iterates ec's sections and emits a ProgramSpec
+// for each function it finds.
+//
+// The resulting map is indexed by function name.
+func (ec *elfCode) loadProgramSections() (map[string]*ProgramSpec, error) {
+
+	progs := make(map[string]*ProgramSpec)
+
+	// Generate a ProgramSpec for each function found in each program section.
+	var export []string
+	for _, sec := range ec.sections {
+		if sec.kind != programSection {
+			continue
+		}
+
+		if len(sec.symbols) == 0 {
+			return nil, fmt.Errorf("section %v: missing symbols", sec.Name)
+		}
+
+		funcs, err := ec.loadFunctions(sec)
+		if err != nil {
+			return nil, fmt.Errorf("section %v: %w", sec.Name, err)
+		}
+
+		progType, attachType, progFlags, attachTo := getProgType(sec.Name)
+
+		for name, insns := range funcs {
+			spec := &ProgramSpec{
+				Name:          name,
+				Type:          progType,
+				Flags:         progFlags,
+				AttachType:    attachType,
+				AttachTo:      attachTo,
+				SectionName:   sec.Name,
+				License:       ec.license,
+				KernelVersion: ec.version,
+				Instructions:  insns,
+				ByteOrder:     ec.ByteOrder,
+			}
+
+			// Function names must be unique within a single ELF blob.
+			if progs[name] != nil {
+				return nil, fmt.Errorf("duplicate program name %s", name)
+			}
+			progs[name] = spec
+
+			if spec.SectionName != ".text" {
+				export = append(export, name)
+			}
+		}
+	}
+
+	flattenPrograms(progs, export)
+
+	// Hide programs (e.g. library functions) that were not explicitly emitted
+	// to an ELF section. These could be exposed in a separate CollectionSpec
+	// field later to allow them to be modified.
+	for n, p := range progs {
+		if p.SectionName == ".text" {
+			delete(progs, n)
+		}
+	}
+
+	return progs, nil
+}
+
+// loadFunctions extracts instruction streams from the given program section
+// starting at each symbol in the section. The section's symbols must already
+// be narrowed down to STT_NOTYPE (emitted by clang <8) or STT_FUNC.
+//
+// The resulting map is indexed by function name.
+func (ec *elfCode) loadFunctions(section *elfSection) (map[string]asm.Instructions, error) {
+	r := bufio.NewReader(section.Open())
+
+	// Decode the section's instruction stream.
+	var insns asm.Instructions
+	if err := insns.Unmarshal(r, ec.ByteOrder); err != nil {
+		return nil, fmt.Errorf("decoding instructions for section %s: %w", section.Name, err)
+	}
+	if len(insns) == 0 {
+		return nil, fmt.Errorf("no instructions found in section %s", section.Name)
+	}
+
+	iter := insns.Iterate()
+	for iter.Next() {
+		ins := iter.Ins
+		offset := iter.Offset.Bytes()
+
+		// Tag Symbol Instructions.
+		if sym, ok := section.symbols[offset]; ok {
+			*ins = ins.WithSymbol(sym.Name)
+		}
+
+		// Apply any relocations for the current instruction.
+		// If no relocation is present, resolve any section-relative function calls.
+		if rel, ok := section.relocations[offset]; ok {
+			if err := ec.relocateInstruction(ins, rel); err != nil {
+				return nil, fmt.Errorf("offset %d: relocating instruction: %w", offset, err)
+			}
+		} else {
+			if err := referenceRelativeJump(ins, offset, section.symbols); err != nil {
+				return nil, fmt.Errorf("offset %d: resolving relative jump: %w", offset, err)
+			}
+		}
+	}
+
+	if ec.extInfo != nil {
+		ec.extInfo.Assign(insns, section.Name)
+	}
+
+	return splitSymbols(insns)
+}
+
+// referenceRelativeJump turns a relative jump to another bpf subprogram within
+// the same ELF section into a Reference Instruction.
+//
+// Up to LLVM 9, calls to subprograms within the same ELF section are sometimes
+// encoded using relative jumps instead of relocation entries. These jumps go
+// out of bounds of the current program, so their targets must be memoized
+// before the section's instruction stream is split.
+//
+// The relative jump Constant is blinded to -1 and the target Symbol is set as
+// the Instruction's Reference so it can be resolved by the linker.
+func referenceRelativeJump(ins *asm.Instruction, offset uint64, symbols map[uint64]elf.Symbol) error {
+	if !ins.IsFunctionReference() || ins.Constant == -1 {
+		return nil
+	}
+
+	tgt := jumpTarget(offset, *ins)
+	sym := symbols[tgt].Name
+	if sym == "" {
+		return fmt.Errorf("no jump target found at offset %d", tgt)
+	}
+
+	*ins = ins.WithReference(sym)
+	ins.Constant = -1
+
+	return nil
+}
+
+// jumpTarget takes ins' offset within an instruction stream (in bytes)
+// and returns its absolute jump destination (in bytes) within the
+// instruction stream.
+func jumpTarget(offset uint64, ins asm.Instruction) uint64 {
+	// A relative jump instruction describes the amount of raw BPF instructions
+	// to jump, convert the offset into bytes.
+	dest := ins.Constant * asm.InstructionSize
+
+	// The starting point of the jump is the end of the current instruction.
+	dest += int64(offset + asm.InstructionSize)
+
+	if dest < 0 {
+		return 0
+	}
+
+	return uint64(dest)
+}
+
+func (ec *elfCode) relocateInstruction(ins *asm.Instruction, rel elf.Symbol) error {
+	var (
+		typ  = elf.ST_TYPE(rel.Info)
+		bind = elf.ST_BIND(rel.Info)
+		name = rel.Name
+	)
+
+	target := ec.sections[rel.Section]
+
+	switch target.kind {
+	case mapSection, btfMapSection:
+		if bind != elf.STB_GLOBAL {
+			return fmt.Errorf("possible erroneous static qualifier on map definition: found reference to %q", name)
+		}
+
+		if typ != elf.STT_OBJECT && typ != elf.STT_NOTYPE {
+			// STT_NOTYPE is generated on clang < 8 which doesn't tag
+			// relocations appropriately.
+			return fmt.Errorf("map load: incorrect relocation type %v", typ)
+		}
+
+		ins.Src = asm.PseudoMapFD
+
+	case dataSection:
+		var offset uint32
+		switch typ {
+		case elf.STT_SECTION:
+			if bind != elf.STB_LOCAL {
+				return fmt.Errorf("direct load: %s: unsupported section relocation %s", name, bind)
+			}
+
+			// This is really a reference to a static symbol, which clang doesn't
+			// emit a symbol table entry for. Instead it encodes the offset in
+			// the instruction itself.
+			offset = uint32(uint64(ins.Constant))
+
+		case elf.STT_OBJECT:
+			// LLVM 9 emits OBJECT-LOCAL symbols for anonymous constants.
+			if bind != elf.STB_GLOBAL && bind != elf.STB_LOCAL {
+				return fmt.Errorf("direct load: %s: unsupported object relocation %s", name, bind)
+			}
+
+			offset = uint32(rel.Value)
+
+		case elf.STT_NOTYPE:
+			// LLVM 7 emits NOTYPE-LOCAL symbols for anonymous constants.
+			if bind != elf.STB_LOCAL {
+				return fmt.Errorf("direct load: %s: unsupported untyped relocation %s", name, bind)
+			}
+
+			offset = uint32(rel.Value)
+
+		default:
+			return fmt.Errorf("incorrect relocation type %v for direct map load", typ)
+		}
+
+		// We rely on using the name of the data section as the reference. It
+		// would be nicer to keep the real name in case of an STT_OBJECT, but
+		// it's not clear how to encode that into Instruction.
+		name = target.Name
+
+		// The kernel expects the offset in the second basic BPF instruction.
+		ins.Constant = int64(uint64(offset) << 32)
+		ins.Src = asm.PseudoMapValue
+
+	case programSection:
+		switch opCode := ins.OpCode; {
+		case opCode.JumpOp() == asm.Call:
+			if ins.Src != asm.PseudoCall {
+				return fmt.Errorf("call: %s: incorrect source register", name)
+			}
+
+			switch typ {
+			case elf.STT_NOTYPE, elf.STT_FUNC:
+				if bind != elf.STB_GLOBAL {
+					return fmt.Errorf("call: %s: unsupported binding: %s", name, bind)
+				}
+
+			case elf.STT_SECTION:
+				if bind != elf.STB_LOCAL {
+					return fmt.Errorf("call: %s: unsupported binding: %s", name, bind)
+				}
+
+				// The function we want to call is in the indicated section,
+				// at the offset encoded in the instruction itself. Reverse
+				// the calculation to find the real function we're looking for.
+				// A value of -1 references the first instruction in the section.
+				offset := int64(int32(ins.Constant)+1) * asm.InstructionSize
+				sym, ok := target.symbols[uint64(offset)]
+				if !ok {
+					return fmt.Errorf("call: no symbol at offset %d", offset)
+				}
+
+				name = sym.Name
+				ins.Constant = -1
+
+			default:
+				return fmt.Errorf("call: %s: invalid symbol type %s", name, typ)
+			}
+		case opCode.IsDWordLoad():
+			switch typ {
+			case elf.STT_FUNC:
+				if bind != elf.STB_GLOBAL {
+					return fmt.Errorf("load: %s: unsupported binding: %s", name, bind)
+				}
+
+			case elf.STT_SECTION:
+				if bind != elf.STB_LOCAL {
+					return fmt.Errorf("load: %s: unsupported binding: %s", name, bind)
+				}
+
+				// ins.Constant already contains the offset in bytes from the
+				// start of the section. This is different than a call to a
+				// static function.
+
+			default:
+				return fmt.Errorf("load: %s: invalid symbol type %s", name, typ)
+			}
+
+			sym, ok := target.symbols[uint64(ins.Constant)]
+			if !ok {
+				return fmt.Errorf("load: no symbol at offset %d", ins.Constant)
+			}
+
+			name = sym.Name
+			ins.Constant = -1
+			ins.Src = asm.PseudoFunc
+
+		default:
+			return fmt.Errorf("neither a call nor a load instruction: %v", ins)
+		}
+
+	// The Undefined section is used for 'virtual' symbols that aren't backed by
+	// an ELF section. This includes symbol references from inline asm, forward
+	// function declarations, as well as extern kfunc declarations using __ksym
+	// and extern kconfig variables declared using __kconfig.
+	case undefSection:
+		if bind != elf.STB_GLOBAL {
+			return fmt.Errorf("asm relocation: %s: unsupported binding: %s", name, bind)
+		}
+
+		if typ != elf.STT_NOTYPE {
+			return fmt.Errorf("asm relocation: %s: unsupported type %s", name, typ)
+		}
+
+		kf := ec.kfuncs[name]
+		switch {
+		// If a Call instruction is found and the datasec has a btf.Func with a Name
+		// that matches the symbol name we mark the instruction as a call to a kfunc.
+		case kf != nil && ins.OpCode.JumpOp() == asm.Call:
+			ins.Metadata.Set(kfuncMeta{}, kf)
+			ins.Src = asm.PseudoKfuncCall
+			ins.Constant = -1
+
+		// If no kconfig map is found, this must be a symbol reference from inline
+		// asm (see testdata/loader.c:asm_relocation()) or a call to a forward
+		// function declaration (see testdata/fwd_decl.c). Don't interfere, These
+		// remain standard symbol references.
+		// extern __kconfig reads are represented as dword loads that need to be
+		// rewritten to pseudo map loads from .kconfig. If the map is present,
+		// require it to contain the symbol to disambiguate between inline asm
+		// relos and kconfigs.
+		case ec.kconfig != nil && ins.OpCode.IsDWordLoad():
+			for _, vsi := range ec.kconfig.Value.(*btf.Datasec).Vars {
+				if vsi.Type.(*btf.Var).Name != rel.Name {
+					continue
+				}
+
+				ins.Src = asm.PseudoMapValue
+				ins.Metadata.Set(kconfigMetaKey{}, &kconfigMeta{ec.kconfig, vsi.Offset})
+				return nil
+			}
+
+			return fmt.Errorf("kconfig %s not found in .kconfig", rel.Name)
+		}
+
+	default:
+		return fmt.Errorf("relocation to %q: %w", target.Name, ErrNotSupported)
+	}
+
+	*ins = ins.WithReference(name)
+	return nil
+}
+
+func (ec *elfCode) loadMaps() error {
+	for _, sec := range ec.sections {
+		if sec.kind != mapSection {
+			continue
+		}
+
+		nSym := len(sec.symbols)
+		if nSym == 0 {
+			return fmt.Errorf("section %v: no symbols", sec.Name)
+		}
+
+		if sec.Size%uint64(nSym) != 0 {
+			return fmt.Errorf("section %v: map descriptors are not of equal size", sec.Name)
+		}
+
+		var (
+			r    = bufio.NewReader(sec.Open())
+			size = sec.Size / uint64(nSym)
+		)
+		for i, offset := 0, uint64(0); i < nSym; i, offset = i+1, offset+size {
+			mapSym, ok := sec.symbols[offset]
+			if !ok {
+				return fmt.Errorf("section %s: missing symbol for map at offset %d", sec.Name, offset)
+			}
+
+			mapName := mapSym.Name
+			if ec.maps[mapName] != nil {
+				return fmt.Errorf("section %v: map %v already exists", sec.Name, mapSym)
+			}
+
+			lr := io.LimitReader(r, int64(size))
+
+			spec := MapSpec{
+				Name: SanitizeName(mapName, -1),
+			}
+			switch {
+			case binary.Read(lr, ec.ByteOrder, &spec.Type) != nil:
+				return fmt.Errorf("map %s: missing type", mapName)
+			case binary.Read(lr, ec.ByteOrder, &spec.KeySize) != nil:
+				return fmt.Errorf("map %s: missing key size", mapName)
+			case binary.Read(lr, ec.ByteOrder, &spec.ValueSize) != nil:
+				return fmt.Errorf("map %s: missing value size", mapName)
+			case binary.Read(lr, ec.ByteOrder, &spec.MaxEntries) != nil:
+				return fmt.Errorf("map %s: missing max entries", mapName)
+			case binary.Read(lr, ec.ByteOrder, &spec.Flags) != nil:
+				return fmt.Errorf("map %s: missing flags", mapName)
+			}
+
+			extra, err := io.ReadAll(lr)
+			if err != nil {
+				return fmt.Errorf("map %s: reading map tail: %w", mapName, err)
+			}
+			if len(extra) > 0 {
+				spec.Extra = bytes.NewReader(extra)
+			}
+
+			if err := spec.clampPerfEventArraySize(); err != nil {
+				return fmt.Errorf("map %s: %w", mapName, err)
+			}
+
+			ec.maps[mapName] = &spec
+		}
+	}
+
+	return nil
+}
+
+// loadBTFMaps iterates over all ELF sections marked as BTF map sections
+// (like .maps) and parses them into MapSpecs. Dump the .maps section and
+// any relocations with `readelf -x .maps -r <elf_file>`.
+func (ec *elfCode) loadBTFMaps() error {
+	for _, sec := range ec.sections {
+		if sec.kind != btfMapSection {
+			continue
+		}
+
+		if ec.btf == nil {
+			return fmt.Errorf("missing BTF")
+		}
+
+		// Each section must appear as a DataSec in the ELF's BTF blob.
+		var ds *btf.Datasec
+		if err := ec.btf.TypeByName(sec.Name, &ds); err != nil {
+			return fmt.Errorf("cannot find section '%s' in BTF: %w", sec.Name, err)
+		}
+
+		// Open a Reader to the ELF's raw section bytes so we can assert that all
+		// of them are zero on a per-map (per-Var) basis. For now, the section's
+		// sole purpose is to receive relocations, so all must be zero.
+		rs := sec.Open()
+
+		for _, vs := range ds.Vars {
+			// BPF maps are declared as and assigned to global variables,
+			// so iterate over each Var in the DataSec and validate their types.
+			v, ok := vs.Type.(*btf.Var)
+			if !ok {
+				return fmt.Errorf("section %v: unexpected type %s", sec.Name, vs.Type)
+			}
+			name := string(v.Name)
+
+			// The BTF metadata for each Var contains the full length of the map
+			// declaration, so read the corresponding amount of bytes from the ELF.
+			// This way, we can pinpoint which map declaration contains unexpected
+			// (and therefore unsupported) data.
+			_, err := io.Copy(internal.DiscardZeroes{}, io.LimitReader(rs, int64(vs.Size)))
+			if err != nil {
+				return fmt.Errorf("section %v: map %s: initializing BTF map definitions: %w", sec.Name, name, internal.ErrNotSupported)
+			}
+
+			if ec.maps[name] != nil {
+				return fmt.Errorf("section %v: map %s already exists", sec.Name, name)
+			}
+
+			// Each Var representing a BTF map definition contains a Struct.
+			mapStruct, ok := v.Type.(*btf.Struct)
+			if !ok {
+				return fmt.Errorf("expected struct, got %s", v.Type)
+			}
+
+			mapSpec, err := mapSpecFromBTF(sec, &vs, mapStruct, ec.btf, name, false)
+			if err != nil {
+				return fmt.Errorf("map %v: %w", name, err)
+			}
+
+			if err := mapSpec.clampPerfEventArraySize(); err != nil {
+				return fmt.Errorf("map %v: %w", name, err)
+			}
+
+			ec.maps[name] = mapSpec
+		}
+
+		// Drain the ELF section reader to make sure all bytes are accounted for
+		// with BTF metadata.
+		i, err := io.Copy(io.Discard, rs)
+		if err != nil {
+			return fmt.Errorf("section %v: unexpected error reading remainder of ELF section: %w", sec.Name, err)
+		}
+		if i > 0 {
+			return fmt.Errorf("section %v: %d unexpected remaining bytes in ELF section, invalid BTF?", sec.Name, i)
+		}
+	}
+
+	return nil
+}
+
+// mapSpecFromBTF produces a MapSpec based on a btf.Struct def representing
+// a BTF map definition. The name and spec arguments will be copied to the
+// resulting MapSpec, and inner must be true on any resursive invocations.
+func mapSpecFromBTF(es *elfSection, vs *btf.VarSecinfo, def *btf.Struct, spec *btf.Spec, name string, inner bool) (*MapSpec, error) {
+	var (
+		key, value         btf.Type
+		keySize, valueSize uint32
+		mapType            MapType
+		flags, maxEntries  uint32
+		pinType            PinType
+		innerMapSpec       *MapSpec
+		contents           []MapKV
+		err                error
+	)
+
+	for i, member := range def.Members {
+		switch member.Name {
+		case "type":
+			mt, err := uintFromBTF(member.Type)
+			if err != nil {
+				return nil, fmt.Errorf("can't get type: %w", err)
+			}
+			mapType = MapType(mt)
+
+		case "map_flags":
+			flags, err = uintFromBTF(member.Type)
+			if err != nil {
+				return nil, fmt.Errorf("can't get BTF map flags: %w", err)
+			}
+
+		case "max_entries":
+			maxEntries, err = uintFromBTF(member.Type)
+			if err != nil {
+				return nil, fmt.Errorf("can't get BTF map max entries: %w", err)
+			}
+
+		case "key":
+			if keySize != 0 {
+				return nil, errors.New("both key and key_size given")
+			}
+
+			pk, ok := member.Type.(*btf.Pointer)
+			if !ok {
+				return nil, fmt.Errorf("key type is not a pointer: %T", member.Type)
+			}
+
+			key = pk.Target
+
+			size, err := btf.Sizeof(pk.Target)
+			if err != nil {
+				return nil, fmt.Errorf("can't get size of BTF key: %w", err)
+			}
+
+			keySize = uint32(size)
+
+		case "value":
+			if valueSize != 0 {
+				return nil, errors.New("both value and value_size given")
+			}
+
+			vk, ok := member.Type.(*btf.Pointer)
+			if !ok {
+				return nil, fmt.Errorf("value type is not a pointer: %T", member.Type)
+			}
+
+			value = vk.Target
+
+			size, err := btf.Sizeof(vk.Target)
+			if err != nil {
+				return nil, fmt.Errorf("can't get size of BTF value: %w", err)
+			}
+
+			valueSize = uint32(size)
+
+		case "key_size":
+			// Key needs to be nil and keySize needs to be 0 for key_size to be
+			// considered a valid member.
+			if key != nil || keySize != 0 {
+				return nil, errors.New("both key and key_size given")
+			}
+
+			keySize, err = uintFromBTF(member.Type)
+			if err != nil {
+				return nil, fmt.Errorf("can't get BTF key size: %w", err)
+			}
+
+		case "value_size":
+			// Value needs to be nil and valueSize needs to be 0 for value_size to be
+			// considered a valid member.
+			if value != nil || valueSize != 0 {
+				return nil, errors.New("both value and value_size given")
+			}
+
+			valueSize, err = uintFromBTF(member.Type)
+			if err != nil {
+				return nil, fmt.Errorf("can't get BTF value size: %w", err)
+			}
+
+		case "pinning":
+			if inner {
+				return nil, errors.New("inner maps can't be pinned")
+			}
+
+			pinning, err := uintFromBTF(member.Type)
+			if err != nil {
+				return nil, fmt.Errorf("can't get pinning: %w", err)
+			}
+
+			pinType = PinType(pinning)
+
+		case "values":
+			// The 'values' field in BTF map definitions is used for declaring map
+			// value types that are references to other BPF objects, like other maps
+			// or programs. It is always expected to be an array of pointers.
+			if i != len(def.Members)-1 {
+				return nil, errors.New("'values' must be the last member in a BTF map definition")
+			}
+
+			if valueSize != 0 && valueSize != 4 {
+				return nil, errors.New("value_size must be 0 or 4")
+			}
+			valueSize = 4
+
+			valueType, err := resolveBTFArrayMacro(member.Type)
+			if err != nil {
+				return nil, fmt.Errorf("can't resolve type of member 'values': %w", err)
+			}
+
+			switch t := valueType.(type) {
+			case *btf.Struct:
+				// The values member pointing to an array of structs means we're expecting
+				// a map-in-map declaration.
+				if mapType != ArrayOfMaps && mapType != HashOfMaps {
+					return nil, errors.New("outer map needs to be an array or a hash of maps")
+				}
+				if inner {
+					return nil, fmt.Errorf("nested inner maps are not supported")
+				}
+
+				// This inner map spec is used as a map template, but it needs to be
+				// created as a traditional map before it can be used to do so.
+				// libbpf names the inner map template '<outer_name>.inner', but we
+				// opted for _inner to simplify validation logic. (dots only supported
+				// on kernels 5.2 and up)
+				// Pass the BTF spec from the parent object, since both parent and
+				// child must be created from the same BTF blob (on kernels that support BTF).
+				innerMapSpec, err = mapSpecFromBTF(es, vs, t, spec, name+"_inner", true)
+				if err != nil {
+					return nil, fmt.Errorf("can't parse BTF map definition of inner map: %w", err)
+				}
+
+			case *btf.FuncProto:
+				// The values member contains an array of function pointers, meaning an
+				// autopopulated PROG_ARRAY.
+				if mapType != ProgramArray {
+					return nil, errors.New("map needs to be a program array")
+				}
+
+			default:
+				return nil, fmt.Errorf("unsupported value type %q in 'values' field", t)
+			}
+
+			contents, err = resolveBTFValuesContents(es, vs, member)
+			if err != nil {
+				return nil, fmt.Errorf("resolving values contents: %w", err)
+			}
+
+		default:
+			return nil, fmt.Errorf("unrecognized field %s in BTF map definition", member.Name)
+		}
+	}
+
+	return &MapSpec{
+		Name:       SanitizeName(name, -1),
+		Type:       MapType(mapType),
+		KeySize:    keySize,
+		ValueSize:  valueSize,
+		MaxEntries: maxEntries,
+		Flags:      flags,
+		Key:        key,
+		Value:      value,
+		Pinning:    pinType,
+		InnerMap:   innerMapSpec,
+		Contents:   contents,
+	}, nil
+}
+
+// uintFromBTF resolves the __uint macro, which is a pointer to a sized
+// array, e.g. for int (*foo)[10], this function will return 10.
+func uintFromBTF(typ btf.Type) (uint32, error) {
+	ptr, ok := typ.(*btf.Pointer)
+	if !ok {
+		return 0, fmt.Errorf("not a pointer: %v", typ)
+	}
+
+	arr, ok := ptr.Target.(*btf.Array)
+	if !ok {
+		return 0, fmt.Errorf("not a pointer to array: %v", typ)
+	}
+
+	return arr.Nelems, nil
+}
+
+// resolveBTFArrayMacro resolves the __array macro, which declares an array
+// of pointers to a given type. This function returns the target Type of
+// the pointers in the array.
+func resolveBTFArrayMacro(typ btf.Type) (btf.Type, error) {
+	arr, ok := typ.(*btf.Array)
+	if !ok {
+		return nil, fmt.Errorf("not an array: %v", typ)
+	}
+
+	ptr, ok := arr.Type.(*btf.Pointer)
+	if !ok {
+		return nil, fmt.Errorf("not an array of pointers: %v", typ)
+	}
+
+	return ptr.Target, nil
+}
+
+// resolveBTFValuesContents resolves relocations into ELF sections belonging
+// to btf.VarSecinfo's. This can be used on the 'values' member in BTF map
+// definitions to extract static declarations of map contents.
+func resolveBTFValuesContents(es *elfSection, vs *btf.VarSecinfo, member btf.Member) ([]MapKV, error) {
+	// The elements of a .values pointer array are not encoded in BTF.
+	// Instead, relocations are generated into each array index.
+	// However, it's possible to leave certain array indices empty, so all
+	// indices' offsets need to be checked for emitted relocations.
+
+	// The offset of the 'values' member within the _struct_ (in bits)
+	// is the starting point of the array. Convert to bytes. Add VarSecinfo
+	// offset to get the absolute position in the ELF blob.
+	start := member.Offset.Bytes() + vs.Offset
+	// 'values' is encoded in BTF as a zero (variable) length struct
+	// member, and its contents run until the end of the VarSecinfo.
+	// Add VarSecinfo offset to get the absolute position in the ELF blob.
+	end := vs.Size + vs.Offset
+	// The size of an address in this section. This determines the width of
+	// an index in the array.
+	align := uint32(es.SectionHeader.Addralign)
+
+	// Check if variable-length section is aligned.
+	if (end-start)%align != 0 {
+		return nil, errors.New("unaligned static values section")
+	}
+	elems := (end - start) / align
+
+	if elems == 0 {
+		return nil, nil
+	}
+
+	contents := make([]MapKV, 0, elems)
+
+	// k is the array index, off is its corresponding ELF section offset.
+	for k, off := uint32(0), start; k < elems; k, off = k+1, off+align {
+		r, ok := es.relocations[uint64(off)]
+		if !ok {
+			continue
+		}
+
+		// Relocation exists for the current offset in the ELF section.
+		// Emit a value stub based on the type of relocation to be replaced by
+		// a real fd later in the pipeline before populating the map.
+		// Map keys are encoded in MapKV entries, so empty array indices are
+		// skipped here.
+		switch t := elf.ST_TYPE(r.Info); t {
+		case elf.STT_FUNC:
+			contents = append(contents, MapKV{uint32(k), r.Name})
+		case elf.STT_OBJECT:
+			contents = append(contents, MapKV{uint32(k), r.Name})
+		default:
+			return nil, fmt.Errorf("unknown relocation type %v for symbol %s", t, r.Name)
+		}
+	}
+
+	return contents, nil
+}
+
+func (ec *elfCode) loadDataSections() error {
+	for _, sec := range ec.sections {
+		if sec.kind != dataSection {
+			continue
+		}
+
+		if sec.references == 0 {
+			// Prune data sections which are not referenced by any
+			// instructions.
+			continue
+		}
+
+		mapSpec := &MapSpec{
+			Name:       SanitizeName(sec.Name, -1),
+			Type:       Array,
+			KeySize:    4,
+			ValueSize:  uint32(sec.Size),
+			MaxEntries: 1,
+		}
+
+		switch sec.Type {
+		// Only open the section if we know there's actual data to be read.
+		case elf.SHT_PROGBITS:
+			data, err := sec.Data()
+			if err != nil {
+				return fmt.Errorf("data section %s: can't get contents: %w", sec.Name, err)
+			}
+
+			if uint64(len(data)) > math.MaxUint32 {
+				return fmt.Errorf("data section %s: contents exceed maximum size", sec.Name)
+			}
+			mapSpec.Contents = []MapKV{{uint32(0), data}}
+
+		case elf.SHT_NOBITS:
+			// NOBITS sections like .bss contain only zeroes, and since data sections
+			// are Arrays, the kernel already preallocates them. Skip reading zeroes
+			// from the ELF.
+		default:
+			return fmt.Errorf("data section %s: unknown section type %s", sec.Name, sec.Type)
+		}
+
+		// It is possible for a data section to exist without a corresponding BTF Datasec
+		// if it only contains anonymous values like macro-defined arrays.
+		if ec.btf != nil {
+			var ds *btf.Datasec
+			if ec.btf.TypeByName(sec.Name, &ds) == nil {
+				// Assign the spec's key and BTF only if the Datasec lookup was successful.
+				mapSpec.Key = &btf.Void{}
+				mapSpec.Value = ds
+			}
+		}
+
+		if strings.HasPrefix(sec.Name, ".rodata") {
+			mapSpec.Flags = unix.BPF_F_RDONLY_PROG
+			mapSpec.Freeze = true
+		}
+
+		ec.maps[sec.Name] = mapSpec
+	}
+
+	return nil
+}
+
+// loadKconfigSection handles the 'virtual' Datasec .kconfig that doesn't
+// have a corresponding ELF section and exist purely in BTF.
+func (ec *elfCode) loadKconfigSection() error {
+	if ec.btf == nil {
+		return nil
+	}
+
+	var ds *btf.Datasec
+	err := ec.btf.TypeByName(".kconfig", &ds)
+	if errors.Is(err, btf.ErrNotFound) {
+		return nil
+	}
+	if err != nil {
+		return err
+	}
+
+	if ds.Size == 0 {
+		return errors.New("zero-length .kconfig")
+	}
+
+	ec.kconfig = &MapSpec{
+		Name:       ".kconfig",
+		Type:       Array,
+		KeySize:    uint32(4),
+		ValueSize:  ds.Size,
+		MaxEntries: 1,
+		Flags:      unix.BPF_F_RDONLY_PROG | unix.BPF_F_MMAPABLE,
+		Freeze:     true,
+		Key:        &btf.Int{Size: 4},
+		Value:      ds,
+	}
+
+	return nil
+}
+
+// loadKsymsSection handles the 'virtual' Datasec .ksyms that doesn't
+// have a corresponding ELF section and exist purely in BTF.
+func (ec *elfCode) loadKsymsSection() error {
+	if ec.btf == nil {
+		return nil
+	}
+
+	var ds *btf.Datasec
+	err := ec.btf.TypeByName(".ksyms", &ds)
+	if errors.Is(err, btf.ErrNotFound) {
+		return nil
+	}
+	if err != nil {
+		return err
+	}
+
+	for _, v := range ds.Vars {
+		// we have already checked the .ksyms Datasec to only contain Func Vars.
+		ec.kfuncs[v.Type.TypeName()] = v.Type.(*btf.Func)
+	}
+
+	return nil
+}
+
+func getProgType(sectionName string) (ProgramType, AttachType, uint32, string) {
+	types := []struct {
+		prefix     string
+		progType   ProgramType
+		attachType AttachType
+		progFlags  uint32
+	}{
+		// Please update the types from libbpf.c and follow the order of it.
+		// https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/tools/lib/bpf/libbpf.c
+		{"socket", SocketFilter, AttachNone, 0},
+		{"sk_reuseport/migrate", SkReuseport, AttachSkReuseportSelectOrMigrate, 0},
+		{"sk_reuseport", SkReuseport, AttachSkReuseportSelect, 0},
+		{"kprobe/", Kprobe, AttachNone, 0},
+		{"uprobe/", Kprobe, AttachNone, 0},
+		{"kretprobe/", Kprobe, AttachNone, 0},
+		{"uretprobe/", Kprobe, AttachNone, 0},
+		{"tc", SchedCLS, AttachNone, 0},
+		{"classifier", SchedCLS, AttachNone, 0},
+		{"action", SchedACT, AttachNone, 0},
+		{"tracepoint/", TracePoint, AttachNone, 0},
+		{"tp/", TracePoint, AttachNone, 0},
+		{"raw_tracepoint/", RawTracepoint, AttachNone, 0},
+		{"raw_tp/", RawTracepoint, AttachNone, 0},
+		{"raw_tracepoint.w/", RawTracepointWritable, AttachNone, 0},
+		{"raw_tp.w/", RawTracepointWritable, AttachNone, 0},
+		{"tp_btf/", Tracing, AttachTraceRawTp, 0},
+		{"fentry/", Tracing, AttachTraceFEntry, 0},
+		{"fmod_ret/", Tracing, AttachModifyReturn, 0},
+		{"fexit/", Tracing, AttachTraceFExit, 0},
+		{"fentry.s/", Tracing, AttachTraceFEntry, unix.BPF_F_SLEEPABLE},
+		{"fmod_ret.s/", Tracing, AttachModifyReturn, unix.BPF_F_SLEEPABLE},
+		{"fexit.s/", Tracing, AttachTraceFExit, unix.BPF_F_SLEEPABLE},
+		{"freplace/", Extension, AttachNone, 0},
+		{"lsm/", LSM, AttachLSMMac, 0},
+		{"lsm.s/", LSM, AttachLSMMac, unix.BPF_F_SLEEPABLE},
+		{"iter/", Tracing, AttachTraceIter, 0},
+		{"iter.s/", Tracing, AttachTraceIter, unix.BPF_F_SLEEPABLE},
+		{"syscall", Syscall, AttachNone, 0},
+		{"xdp.frags_devmap/", XDP, AttachXDPDevMap, unix.BPF_F_XDP_HAS_FRAGS},
+		{"xdp_devmap/", XDP, AttachXDPDevMap, 0},
+		{"xdp.frags_cpumap/", XDP, AttachXDPCPUMap, unix.BPF_F_XDP_HAS_FRAGS},
+		{"xdp_cpumap/", XDP, AttachXDPCPUMap, 0},
+		{"xdp.frags", XDP, AttachNone, unix.BPF_F_XDP_HAS_FRAGS},
+		{"xdp", XDP, AttachNone, 0},
+		{"perf_event", PerfEvent, AttachNone, 0},
+		{"lwt_in", LWTIn, AttachNone, 0},
+		{"lwt_out", LWTOut, AttachNone, 0},
+		{"lwt_xmit", LWTXmit, AttachNone, 0},
+		{"lwt_seg6local", LWTSeg6Local, AttachNone, 0},
+		{"cgroup_skb/ingress", CGroupSKB, AttachCGroupInetIngress, 0},
+		{"cgroup_skb/egress", CGroupSKB, AttachCGroupInetEgress, 0},
+		{"cgroup/skb", CGroupSKB, AttachNone, 0},
+		{"cgroup/sock_create", CGroupSock, AttachCGroupInetSockCreate, 0},
+		{"cgroup/sock_release", CGroupSock, AttachCgroupInetSockRelease, 0},
+		{"cgroup/sock", CGroupSock, AttachCGroupInetSockCreate, 0},
+		{"cgroup/post_bind4", CGroupSock, AttachCGroupInet4PostBind, 0},
+		{"cgroup/post_bind6", CGroupSock, AttachCGroupInet6PostBind, 0},
+		{"cgroup/dev", CGroupDevice, AttachCGroupDevice, 0},
+		{"sockops", SockOps, AttachCGroupSockOps, 0},
+		{"sk_skb/stream_parser", SkSKB, AttachSkSKBStreamParser, 0},
+		{"sk_skb/stream_verdict", SkSKB, AttachSkSKBStreamVerdict, 0},
+		{"sk_skb", SkSKB, AttachNone, 0},
+		{"sk_msg", SkMsg, AttachSkMsgVerdict, 0},
+		{"lirc_mode2", LircMode2, AttachLircMode2, 0},
+		{"flow_dissector", FlowDissector, AttachFlowDissector, 0},
+		{"cgroup/bind4", CGroupSockAddr, AttachCGroupInet4Bind, 0},
+		{"cgroup/bind6", CGroupSockAddr, AttachCGroupInet6Bind, 0},
+		{"cgroup/connect4", CGroupSockAddr, AttachCGroupInet4Connect, 0},
+		{"cgroup/connect6", CGroupSockAddr, AttachCGroupInet6Connect, 0},
+		{"cgroup/sendmsg4", CGroupSockAddr, AttachCGroupUDP4Sendmsg, 0},
+		{"cgroup/sendmsg6", CGroupSockAddr, AttachCGroupUDP6Sendmsg, 0},
+		{"cgroup/recvmsg4", CGroupSockAddr, AttachCGroupUDP4Recvmsg, 0},
+		{"cgroup/recvmsg6", CGroupSockAddr, AttachCGroupUDP6Recvmsg, 0},
+		{"cgroup/getpeername4", CGroupSockAddr, AttachCgroupInet4GetPeername, 0},
+		{"cgroup/getpeername6", CGroupSockAddr, AttachCgroupInet6GetPeername, 0},
+		{"cgroup/getsockname4", CGroupSockAddr, AttachCgroupInet4GetSockname, 0},
+		{"cgroup/getsockname6", CGroupSockAddr, AttachCgroupInet6GetSockname, 0},
+		{"cgroup/sysctl", CGroupSysctl, AttachCGroupSysctl, 0},
+		{"cgroup/getsockopt", CGroupSockopt, AttachCGroupGetsockopt, 0},
+		{"cgroup/setsockopt", CGroupSockopt, AttachCGroupSetsockopt, 0},
+		{"struct_ops+", StructOps, AttachNone, 0},
+		{"sk_lookup/", SkLookup, AttachSkLookup, 0},
+		{"seccomp", SocketFilter, AttachNone, 0},
+		{"kprobe.multi", Kprobe, AttachTraceKprobeMulti, 0},
+		{"kretprobe.multi", Kprobe, AttachTraceKprobeMulti, 0},
+	}
+
+	for _, t := range types {
+		if !strings.HasPrefix(sectionName, t.prefix) {
+			continue
+		}
+
+		if !strings.HasSuffix(t.prefix, "/") {
+			return t.progType, t.attachType, t.progFlags, ""
+		}
+
+		return t.progType, t.attachType, t.progFlags, sectionName[len(t.prefix):]
+	}
+
+	return UnspecifiedProgram, AttachNone, 0, ""
+}
+
+func (ec *elfCode) loadSectionRelocations(sec *elf.Section, symbols []elf.Symbol) (map[uint64]elf.Symbol, error) {
+	rels := make(map[uint64]elf.Symbol)
+
+	if sec.Entsize < 16 {
+		return nil, fmt.Errorf("section %s: relocations are less than 16 bytes", sec.Name)
+	}
+
+	r := bufio.NewReader(sec.Open())
+	for off := uint64(0); off < sec.Size; off += sec.Entsize {
+		ent := io.LimitReader(r, int64(sec.Entsize))
+
+		var rel elf.Rel64
+		if binary.Read(ent, ec.ByteOrder, &rel) != nil {
+			return nil, fmt.Errorf("can't parse relocation at offset %v", off)
+		}
+
+		symNo := int(elf.R_SYM64(rel.Info) - 1)
+		if symNo >= len(symbols) {
+			return nil, fmt.Errorf("offset %d: symbol %d doesn't exist", off, symNo)
+		}
+
+		symbol := symbols[symNo]
+		rels[rel.Off] = symbol
+	}
+
+	return rels, nil
+}
diff --git a/vendor/github.com/cilium/ebpf/info.go b/vendor/github.com/cilium/ebpf/info.go
new file mode 100644
index 00000000000..a02e8a41618
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/info.go
@@ -0,0 +1,373 @@
+package ebpf
+
+import (
+	"bufio"
+	"bytes"
+	"encoding/hex"
+	"errors"
+	"fmt"
+	"io"
+	"os"
+	"strings"
+	"syscall"
+	"time"
+	"unsafe"
+
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/btf"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// MapInfo describes a map.
+type MapInfo struct {
+	Type       MapType
+	id         MapID
+	KeySize    uint32
+	ValueSize  uint32
+	MaxEntries uint32
+	Flags      uint32
+	// Name as supplied by user space at load time. Available from 4.15.
+	Name string
+}
+
+func newMapInfoFromFd(fd *sys.FD) (*MapInfo, error) {
+	var info sys.MapInfo
+	err := sys.ObjInfo(fd, &info)
+	if errors.Is(err, syscall.EINVAL) {
+		return newMapInfoFromProc(fd)
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	return &MapInfo{
+		MapType(info.Type),
+		MapID(info.Id),
+		info.KeySize,
+		info.ValueSize,
+		info.MaxEntries,
+		uint32(info.MapFlags),
+		unix.ByteSliceToString(info.Name[:]),
+	}, nil
+}
+
+func newMapInfoFromProc(fd *sys.FD) (*MapInfo, error) {
+	var mi MapInfo
+	err := scanFdInfo(fd, map[string]interface{}{
+		"map_type":    &mi.Type,
+		"key_size":    &mi.KeySize,
+		"value_size":  &mi.ValueSize,
+		"max_entries": &mi.MaxEntries,
+		"map_flags":   &mi.Flags,
+	})
+	if err != nil {
+		return nil, err
+	}
+	return &mi, nil
+}
+
+// ID returns the map ID.
+//
+// Available from 4.13.
+//
+// The bool return value indicates whether this optional field is available.
+func (mi *MapInfo) ID() (MapID, bool) {
+	return mi.id, mi.id > 0
+}
+
+// programStats holds statistics of a program.
+type programStats struct {
+	// Total accumulated runtime of the program ins ns.
+	runtime time.Duration
+	// Total number of times the program was called.
+	runCount uint64
+}
+
+// ProgramInfo describes a program.
+type ProgramInfo struct {
+	Type ProgramType
+	id   ProgramID
+	// Truncated hash of the BPF bytecode. Available from 4.13.
+	Tag string
+	// Name as supplied by user space at load time. Available from 4.15.
+	Name string
+
+	createdByUID     uint32
+	haveCreatedByUID bool
+	btf              btf.ID
+	stats            *programStats
+
+	maps  []MapID
+	insns []byte
+}
+
+func newProgramInfoFromFd(fd *sys.FD) (*ProgramInfo, error) {
+	var info sys.ProgInfo
+	err := sys.ObjInfo(fd, &info)
+	if errors.Is(err, syscall.EINVAL) {
+		return newProgramInfoFromProc(fd)
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	pi := ProgramInfo{
+		Type: ProgramType(info.Type),
+		id:   ProgramID(info.Id),
+		Tag:  hex.EncodeToString(info.Tag[:]),
+		Name: unix.ByteSliceToString(info.Name[:]),
+		btf:  btf.ID(info.BtfId),
+		stats: &programStats{
+			runtime:  time.Duration(info.RunTimeNs),
+			runCount: info.RunCnt,
+		},
+	}
+
+	// Start with a clean struct for the second call, otherwise we may get EFAULT.
+	var info2 sys.ProgInfo
+
+	if info.NrMapIds > 0 {
+		pi.maps = make([]MapID, info.NrMapIds)
+		info2.NrMapIds = info.NrMapIds
+		info2.MapIds = sys.NewPointer(unsafe.Pointer(&pi.maps[0]))
+	} else if haveProgramInfoMapIDs() == nil {
+		// This program really has no associated maps.
+		pi.maps = make([]MapID, 0)
+	} else {
+		// The kernel doesn't report associated maps.
+		pi.maps = nil
+	}
+
+	// createdByUID and NrMapIds were introduced in the same kernel version.
+	if pi.maps != nil {
+		pi.createdByUID = info.CreatedByUid
+		pi.haveCreatedByUID = true
+	}
+
+	if info.XlatedProgLen > 0 {
+		pi.insns = make([]byte, info.XlatedProgLen)
+		info2.XlatedProgLen = info.XlatedProgLen
+		info2.XlatedProgInsns = sys.NewSlicePointer(pi.insns)
+	}
+
+	if info.NrMapIds > 0 || info.XlatedProgLen > 0 {
+		if err := sys.ObjInfo(fd, &info2); err != nil {
+			return nil, err
+		}
+	}
+
+	return &pi, nil
+}
+
+func newProgramInfoFromProc(fd *sys.FD) (*ProgramInfo, error) {
+	var info ProgramInfo
+	err := scanFdInfo(fd, map[string]interface{}{
+		"prog_type": &info.Type,
+		"prog_tag":  &info.Tag,
+	})
+	if errors.Is(err, errMissingFields) {
+		return nil, &internal.UnsupportedFeatureError{
+			Name:           "reading program info from /proc/self/fdinfo",
+			MinimumVersion: internal.Version{4, 10, 0},
+		}
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	return &info, nil
+}
+
+// ID returns the program ID.
+//
+// Available from 4.13.
+//
+// The bool return value indicates whether this optional field is available.
+func (pi *ProgramInfo) ID() (ProgramID, bool) {
+	return pi.id, pi.id > 0
+}
+
+// CreatedByUID returns the Uid that created the program.
+//
+// Available from 4.15.
+//
+// The bool return value indicates whether this optional field is available.
+func (pi *ProgramInfo) CreatedByUID() (uint32, bool) {
+	return pi.createdByUID, pi.haveCreatedByUID
+}
+
+// BTFID returns the BTF ID associated with the program.
+//
+// The ID is only valid as long as the associated program is kept alive.
+// Available from 5.0.
+//
+// The bool return value indicates whether this optional field is available and
+// populated. (The field may be available but not populated if the kernel
+// supports the field but the program was loaded without BTF information.)
+func (pi *ProgramInfo) BTFID() (btf.ID, bool) {
+	return pi.btf, pi.btf > 0
+}
+
+// RunCount returns the total number of times the program was called.
+//
+// Can return 0 if the collection of statistics is not enabled. See EnableStats().
+// The bool return value indicates whether this optional field is available.
+func (pi *ProgramInfo) RunCount() (uint64, bool) {
+	if pi.stats != nil {
+		return pi.stats.runCount, true
+	}
+	return 0, false
+}
+
+// Runtime returns the total accumulated runtime of the program.
+//
+// Can return 0 if the collection of statistics is not enabled. See EnableStats().
+// The bool return value indicates whether this optional field is available.
+func (pi *ProgramInfo) Runtime() (time.Duration, bool) {
+	if pi.stats != nil {
+		return pi.stats.runtime, true
+	}
+	return time.Duration(0), false
+}
+
+// Instructions returns the 'xlated' instruction stream of the program
+// after it has been verified and rewritten by the kernel. These instructions
+// cannot be loaded back into the kernel as-is, this is mainly used for
+// inspecting loaded programs for troubleshooting, dumping, etc.
+//
+// For example, map accesses are made to reference their kernel map IDs,
+// not the FDs they had when the program was inserted. Note that before
+// the introduction of bpf_insn_prepare_dump in kernel 4.16, xlated
+// instructions were not sanitized, making the output even less reusable
+// and less likely to round-trip or evaluate to the same program Tag.
+//
+// The first instruction is marked as a symbol using the Program's name.
+//
+// Available from 4.13. Requires CAP_BPF or equivalent.
+func (pi *ProgramInfo) Instructions() (asm.Instructions, error) {
+	// If the calling process is not BPF-capable or if the kernel doesn't
+	// support getting xlated instructions, the field will be zero.
+	if len(pi.insns) == 0 {
+		return nil, fmt.Errorf("insufficient permissions or unsupported kernel: %w", ErrNotSupported)
+	}
+
+	r := bytes.NewReader(pi.insns)
+	var insns asm.Instructions
+	if err := insns.Unmarshal(r, internal.NativeEndian); err != nil {
+		return nil, fmt.Errorf("unmarshaling instructions: %w", err)
+	}
+
+	// Tag the first instruction with the name of the program, if available.
+	insns[0] = insns[0].WithSymbol(pi.Name)
+
+	return insns, nil
+}
+
+// MapIDs returns the maps related to the program.
+//
+// Available from 4.15.
+//
+// The bool return value indicates whether this optional field is available.
+func (pi *ProgramInfo) MapIDs() ([]MapID, bool) {
+	return pi.maps, pi.maps != nil
+}
+
+func scanFdInfo(fd *sys.FD, fields map[string]interface{}) error {
+	fh, err := os.Open(fmt.Sprintf("/proc/self/fdinfo/%d", fd.Int()))
+	if err != nil {
+		return err
+	}
+	defer fh.Close()
+
+	if err := scanFdInfoReader(fh, fields); err != nil {
+		return fmt.Errorf("%s: %w", fh.Name(), err)
+	}
+	return nil
+}
+
+var errMissingFields = errors.New("missing fields")
+
+func scanFdInfoReader(r io.Reader, fields map[string]interface{}) error {
+	var (
+		scanner = bufio.NewScanner(r)
+		scanned int
+	)
+
+	for scanner.Scan() {
+		parts := strings.SplitN(scanner.Text(), "\t", 2)
+		if len(parts) != 2 {
+			continue
+		}
+
+		name := strings.TrimSuffix(parts[0], ":")
+		field, ok := fields[string(name)]
+		if !ok {
+			continue
+		}
+
+		if n, err := fmt.Sscanln(parts[1], field); err != nil || n != 1 {
+			return fmt.Errorf("can't parse field %s: %v", name, err)
+		}
+
+		scanned++
+	}
+
+	if err := scanner.Err(); err != nil {
+		return err
+	}
+
+	if len(fields) > 0 && scanned == 0 {
+		return ErrNotSupported
+	}
+
+	if scanned != len(fields) {
+		return errMissingFields
+	}
+
+	return nil
+}
+
+// EnableStats starts the measuring of the runtime
+// and run counts of eBPF programs.
+//
+// Collecting statistics can have an impact on the performance.
+//
+// Requires at least 5.8.
+func EnableStats(which uint32) (io.Closer, error) {
+	fd, err := sys.EnableStats(&sys.EnableStatsAttr{
+		Type: which,
+	})
+	if err != nil {
+		return nil, err
+	}
+	return fd, nil
+}
+
+var haveProgramInfoMapIDs = internal.NewFeatureTest("map IDs in program info", "4.15", func() error {
+	prog, err := progLoad(asm.Instructions{
+		asm.LoadImm(asm.R0, 0, asm.DWord),
+		asm.Return(),
+	}, SocketFilter, "MIT")
+	if err != nil {
+		return err
+	}
+	defer prog.Close()
+
+	err = sys.ObjInfo(prog, &sys.ProgInfo{
+		// NB: Don't need to allocate MapIds since the program isn't using
+		// any maps.
+		NrMapIds: 1,
+	})
+	if errors.Is(err, unix.EINVAL) {
+		// Most likely the syscall doesn't exist.
+		return internal.ErrNotSupported
+	}
+	if errors.Is(err, unix.E2BIG) {
+		// We've hit check_uarg_tail_zero on older kernels.
+		return internal.ErrNotSupported
+	}
+
+	return err
+})
diff --git a/vendor/github.com/cilium/ebpf/internal/align.go b/vendor/github.com/cilium/ebpf/internal/align.go
new file mode 100644
index 00000000000..edc898fa968
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/align.go
@@ -0,0 +1,8 @@
+package internal
+
+import "golang.org/x/exp/constraints"
+
+// Align returns 'n' updated to 'alignment' boundary.
+func Align[I constraints.Integer](n, alignment I) I {
+	return (n + alignment - 1) / alignment * alignment
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/buffer.go b/vendor/github.com/cilium/ebpf/internal/buffer.go
new file mode 100644
index 00000000000..81c6544330f
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/buffer.go
@@ -0,0 +1,31 @@
+package internal
+
+import (
+	"bytes"
+	"sync"
+)
+
+var bytesBufferPool = sync.Pool{
+	New: func() interface{} {
+		return new(bytes.Buffer)
+	},
+}
+
+// NewBuffer retrieves a [bytes.Buffer] from a pool an re-initialises it.
+//
+// The returned buffer should be passed to [PutBuffer].
+func NewBuffer(buf []byte) *bytes.Buffer {
+	wr := bytesBufferPool.Get().(*bytes.Buffer)
+	// Reinitialize the Buffer with a new backing slice since it is returned to
+	// the caller by wr.Bytes() below. Pooling is faster despite calling
+	// NewBuffer. The pooled alloc is still reused, it only needs to be zeroed.
+	*wr = *bytes.NewBuffer(buf)
+	return wr
+}
+
+// PutBuffer releases a buffer to the pool.
+func PutBuffer(buf *bytes.Buffer) {
+	// Release reference to the backing buffer.
+	*buf = *bytes.NewBuffer(nil)
+	bytesBufferPool.Put(buf)
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/cpu.go b/vendor/github.com/cilium/ebpf/internal/cpu.go
new file mode 100644
index 00000000000..9e908b610b5
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/cpu.go
@@ -0,0 +1,51 @@
+package internal
+
+import (
+	"fmt"
+	"os"
+	"strings"
+)
+
+// PossibleCPUs returns the max number of CPUs a system may possibly have
+// Logical CPU numbers must be of the form 0-n
+var PossibleCPUs = Memoize(func() (int, error) {
+	return parseCPUsFromFile("/sys/devices/system/cpu/possible")
+})
+
+func parseCPUsFromFile(path string) (int, error) {
+	spec, err := os.ReadFile(path)
+	if err != nil {
+		return 0, err
+	}
+
+	n, err := parseCPUs(string(spec))
+	if err != nil {
+		return 0, fmt.Errorf("can't parse %s: %v", path, err)
+	}
+
+	return n, nil
+}
+
+// parseCPUs parses the number of cpus from a string produced
+// by bitmap_list_string() in the Linux kernel.
+// Multiple ranges are rejected, since they can't be unified
+// into a single number.
+// This is the format of /sys/devices/system/cpu/possible, it
+// is not suitable for /sys/devices/system/cpu/online, etc.
+func parseCPUs(spec string) (int, error) {
+	if strings.Trim(spec, "\n") == "0" {
+		return 1, nil
+	}
+
+	var low, high int
+	n, err := fmt.Sscanf(spec, "%d-%d\n", &low, &high)
+	if n != 2 || err != nil {
+		return 0, fmt.Errorf("invalid format: %s", spec)
+	}
+	if low != 0 {
+		return 0, fmt.Errorf("CPU spec doesn't start at zero: %s", spec)
+	}
+
+	// cpus is 0 indexed
+	return high + 1, nil
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/deque.go b/vendor/github.com/cilium/ebpf/internal/deque.go
new file mode 100644
index 00000000000..e3a30502159
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/deque.go
@@ -0,0 +1,91 @@
+package internal
+
+import "math/bits"
+
+// Deque implements a double ended queue.
+type Deque[T any] struct {
+	elems       []T
+	read, write uint64
+	mask        uint64
+}
+
+// Reset clears the contents of the deque while retaining the backing buffer.
+func (dq *Deque[T]) Reset() {
+	var zero T
+
+	for i := dq.read; i < dq.write; i++ {
+		dq.elems[i&dq.mask] = zero
+	}
+
+	dq.read, dq.write = 0, 0
+}
+
+func (dq *Deque[T]) Empty() bool {
+	return dq.read == dq.write
+}
+
+// Push adds an element to the end.
+func (dq *Deque[T]) Push(e T) {
+	dq.Grow(1)
+	dq.elems[dq.write&dq.mask] = e
+	dq.write++
+}
+
+// Shift returns the first element or the zero value.
+func (dq *Deque[T]) Shift() T {
+	var zero T
+
+	if dq.Empty() {
+		return zero
+	}
+
+	index := dq.read & dq.mask
+	t := dq.elems[index]
+	dq.elems[index] = zero
+	dq.read++
+	return t
+}
+
+// Pop returns the last element or the zero value.
+func (dq *Deque[T]) Pop() T {
+	var zero T
+
+	if dq.Empty() {
+		return zero
+	}
+
+	dq.write--
+	index := dq.write & dq.mask
+	t := dq.elems[index]
+	dq.elems[index] = zero
+	return t
+}
+
+// Grow the deque's capacity, if necessary, to guarantee space for another n
+// elements.
+func (dq *Deque[T]) Grow(n int) {
+	have := dq.write - dq.read
+	need := have + uint64(n)
+	if need < have {
+		panic("overflow")
+	}
+	if uint64(len(dq.elems)) >= need {
+		return
+	}
+
+	// Round up to the new power of two which is at least 8.
+	// See https://jameshfisher.com/2018/03/30/round-up-power-2/
+	capacity := 1 << (64 - bits.LeadingZeros64(need-1))
+	if capacity < 8 {
+		capacity = 8
+	}
+
+	elems := make([]T, have, capacity)
+	pivot := dq.read & dq.mask
+	copied := copy(elems, dq.elems[pivot:])
+	copy(elems[copied:], dq.elems[:pivot])
+
+	dq.elems = elems[:capacity]
+	dq.mask = uint64(capacity) - 1
+	dq.read, dq.write = 0, have
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/elf.go b/vendor/github.com/cilium/ebpf/internal/elf.go
new file mode 100644
index 00000000000..011581938d9
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/elf.go
@@ -0,0 +1,102 @@
+package internal
+
+import (
+	"debug/elf"
+	"fmt"
+	"io"
+)
+
+type SafeELFFile struct {
+	*elf.File
+}
+
+// NewSafeELFFile reads an ELF safely.
+//
+// Any panic during parsing is turned into an error. This is necessary since
+// there are a bunch of unfixed bugs in debug/elf.
+//
+// https://github.com/golang/go/issues?q=is%3Aissue+is%3Aopen+debug%2Felf+in%3Atitle
+func NewSafeELFFile(r io.ReaderAt) (safe *SafeELFFile, err error) {
+	defer func() {
+		r := recover()
+		if r == nil {
+			return
+		}
+
+		safe = nil
+		err = fmt.Errorf("reading ELF file panicked: %s", r)
+	}()
+
+	file, err := elf.NewFile(r)
+	if err != nil {
+		return nil, err
+	}
+
+	return &SafeELFFile{file}, nil
+}
+
+// OpenSafeELFFile reads an ELF from a file.
+//
+// It works like NewSafeELFFile, with the exception that safe.Close will
+// close the underlying file.
+func OpenSafeELFFile(path string) (safe *SafeELFFile, err error) {
+	defer func() {
+		r := recover()
+		if r == nil {
+			return
+		}
+
+		safe = nil
+		err = fmt.Errorf("reading ELF file panicked: %s", r)
+	}()
+
+	file, err := elf.Open(path)
+	if err != nil {
+		return nil, err
+	}
+
+	return &SafeELFFile{file}, nil
+}
+
+// Symbols is the safe version of elf.File.Symbols.
+func (se *SafeELFFile) Symbols() (syms []elf.Symbol, err error) {
+	defer func() {
+		r := recover()
+		if r == nil {
+			return
+		}
+
+		syms = nil
+		err = fmt.Errorf("reading ELF symbols panicked: %s", r)
+	}()
+
+	syms, err = se.File.Symbols()
+	return
+}
+
+// DynamicSymbols is the safe version of elf.File.DynamicSymbols.
+func (se *SafeELFFile) DynamicSymbols() (syms []elf.Symbol, err error) {
+	defer func() {
+		r := recover()
+		if r == nil {
+			return
+		}
+
+		syms = nil
+		err = fmt.Errorf("reading ELF dynamic symbols panicked: %s", r)
+	}()
+
+	syms, err = se.File.DynamicSymbols()
+	return
+}
+
+// SectionsByType returns all sections in the file with the specified section type.
+func (se *SafeELFFile) SectionsByType(typ elf.SectionType) []*elf.Section {
+	sections := make([]*elf.Section, 0, 1)
+	for _, section := range se.Sections {
+		if section.Type == typ {
+			sections = append(sections, section)
+		}
+	}
+	return sections
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/endian_be.go b/vendor/github.com/cilium/ebpf/internal/endian_be.go
new file mode 100644
index 00000000000..96a2ac0de22
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/endian_be.go
@@ -0,0 +1,12 @@
+//go:build armbe || arm64be || mips || mips64 || mips64p32 || ppc64 || s390 || s390x || sparc || sparc64
+
+package internal
+
+import "encoding/binary"
+
+// NativeEndian is set to either binary.BigEndian or binary.LittleEndian,
+// depending on the host's endianness.
+var NativeEndian binary.ByteOrder = binary.BigEndian
+
+// ClangEndian is set to either "el" or "eb" depending on the host's endianness.
+const ClangEndian = "eb"
diff --git a/vendor/github.com/cilium/ebpf/internal/endian_le.go b/vendor/github.com/cilium/ebpf/internal/endian_le.go
new file mode 100644
index 00000000000..fde4c55a6f5
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/endian_le.go
@@ -0,0 +1,12 @@
+//go:build 386 || amd64 || amd64p32 || arm || arm64 || loong64 || mipsle || mips64le || mips64p32le || ppc64le || riscv64
+
+package internal
+
+import "encoding/binary"
+
+// NativeEndian is set to either binary.BigEndian or binary.LittleEndian,
+// depending on the host's endianness.
+var NativeEndian binary.ByteOrder = binary.LittleEndian
+
+// ClangEndian is set to either "el" or "eb" depending on the host's endianness.
+const ClangEndian = "el"
diff --git a/vendor/github.com/cilium/ebpf/internal/errors.go b/vendor/github.com/cilium/ebpf/internal/errors.go
new file mode 100644
index 00000000000..bda01e2fde5
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/errors.go
@@ -0,0 +1,198 @@
+package internal
+
+import (
+	"bytes"
+	"fmt"
+	"io"
+	"strings"
+)
+
+// ErrorWithLog wraps err in a VerifierError that includes the parsed verifier
+// log buffer.
+//
+// The default error output is a summary of the full log. The latter can be
+// accessed via VerifierError.Log or by formatting the error, see Format.
+func ErrorWithLog(source string, err error, log []byte, truncated bool) *VerifierError {
+	const whitespace = "\t\r\v\n "
+
+	// Convert verifier log C string by truncating it on the first 0 byte
+	// and trimming trailing whitespace before interpreting as a Go string.
+	if i := bytes.IndexByte(log, 0); i != -1 {
+		log = log[:i]
+	}
+
+	log = bytes.Trim(log, whitespace)
+	if len(log) == 0 {
+		return &VerifierError{source, err, nil, truncated}
+	}
+
+	logLines := bytes.Split(log, []byte{'\n'})
+	lines := make([]string, 0, len(logLines))
+	for _, line := range logLines {
+		// Don't remove leading white space on individual lines. We rely on it
+		// when outputting logs.
+		lines = append(lines, string(bytes.TrimRight(line, whitespace)))
+	}
+
+	return &VerifierError{source, err, lines, truncated}
+}
+
+// VerifierError includes information from the eBPF verifier.
+//
+// It summarises the log output, see Format if you want to output the full contents.
+type VerifierError struct {
+	source string
+	// The error which caused this error.
+	Cause error
+	// The verifier output split into lines.
+	Log []string
+	// Whether the log output is truncated, based on several heuristics.
+	Truncated bool
+}
+
+func (le *VerifierError) Unwrap() error {
+	return le.Cause
+}
+
+func (le *VerifierError) Error() string {
+	log := le.Log
+	if n := len(log); n > 0 && strings.HasPrefix(log[n-1], "processed ") {
+		// Get rid of "processed 39 insns (limit 1000000) ..." from summary.
+		log = log[:n-1]
+	}
+
+	var b strings.Builder
+	fmt.Fprintf(&b, "%s: %s", le.source, le.Cause.Error())
+
+	n := len(log)
+	if n == 0 {
+		return b.String()
+	}
+
+	lines := log[n-1:]
+	if n >= 2 && (includePreviousLine(log[n-1]) || le.Truncated) {
+		// Add one more line of context if it aids understanding the error.
+		lines = log[n-2:]
+	}
+
+	for _, line := range lines {
+		b.WriteString(": ")
+		b.WriteString(strings.TrimSpace(line))
+	}
+
+	omitted := len(le.Log) - len(lines)
+	if omitted == 0 && !le.Truncated {
+		return b.String()
+	}
+
+	b.WriteString(" (")
+	if le.Truncated {
+		b.WriteString("truncated")
+	}
+
+	if omitted > 0 {
+		if le.Truncated {
+			b.WriteString(", ")
+		}
+		fmt.Fprintf(&b, "%d line(s) omitted", omitted)
+	}
+	b.WriteString(")")
+
+	return b.String()
+}
+
+// includePreviousLine returns true if the given line likely is better
+// understood with additional context from the preceding line.
+func includePreviousLine(line string) bool {
+	// We need to find a good trade off between understandable error messages
+	// and too much complexity here. Checking the string prefix is ok, requiring
+	// regular expressions to do it is probably overkill.
+
+	if strings.HasPrefix(line, "\t") {
+		// [13] STRUCT drm_rect size=16 vlen=4
+		// \tx1 type_id=2
+		return true
+	}
+
+	if len(line) >= 2 && line[0] == 'R' && line[1] >= '0' && line[1] <= '9' {
+		// 0: (95) exit
+		// R0 !read_ok
+		return true
+	}
+
+	if strings.HasPrefix(line, "invalid bpf_context access") {
+		// 0: (79) r6 = *(u64 *)(r1 +0)
+		// func '__x64_sys_recvfrom' arg0 type FWD is not a struct
+		// invalid bpf_context access off=0 size=8
+		return true
+	}
+
+	return false
+}
+
+// Format the error.
+//
+// Understood verbs are %s and %v, which are equivalent to calling Error(). %v
+// allows outputting additional information using the following flags:
+//
+//	%+<width>v: Output the first <width> lines, or all lines if no width is given.
+//	%-<width>v: Output the last <width> lines, or all lines if no width is given.
+//
+// Use width to specify how many lines to output. Use the '-' flag to output
+// lines from the end of the log instead of the beginning.
+func (le *VerifierError) Format(f fmt.State, verb rune) {
+	switch verb {
+	case 's':
+		_, _ = io.WriteString(f, le.Error())
+
+	case 'v':
+		n, haveWidth := f.Width()
+		if !haveWidth || n > len(le.Log) {
+			n = len(le.Log)
+		}
+
+		if !f.Flag('+') && !f.Flag('-') {
+			if haveWidth {
+				_, _ = io.WriteString(f, "%!v(BADWIDTH)")
+				return
+			}
+
+			_, _ = io.WriteString(f, le.Error())
+			return
+		}
+
+		if f.Flag('+') && f.Flag('-') {
+			_, _ = io.WriteString(f, "%!v(BADFLAG)")
+			return
+		}
+
+		fmt.Fprintf(f, "%s: %s:", le.source, le.Cause.Error())
+
+		omitted := len(le.Log) - n
+		lines := le.Log[:n]
+		if f.Flag('-') {
+			// Print last instead of first lines.
+			lines = le.Log[len(le.Log)-n:]
+			if omitted > 0 {
+				fmt.Fprintf(f, "\n\t(%d line(s) omitted)", omitted)
+			}
+		}
+
+		for _, line := range lines {
+			fmt.Fprintf(f, "\n\t%s", line)
+		}
+
+		if !f.Flag('-') {
+			if omitted > 0 {
+				fmt.Fprintf(f, "\n\t(%d line(s) omitted)", omitted)
+			}
+		}
+
+		if le.Truncated {
+			fmt.Fprintf(f, "\n\t(truncated)")
+		}
+
+	default:
+		fmt.Fprintf(f, "%%!%c(BADVERB)", verb)
+	}
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/feature.go b/vendor/github.com/cilium/ebpf/internal/feature.go
new file mode 100644
index 00000000000..b1f650751de
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/feature.go
@@ -0,0 +1,184 @@
+package internal
+
+import (
+	"errors"
+	"fmt"
+	"sync"
+)
+
+// ErrNotSupported indicates that a feature is not supported by the current kernel.
+var ErrNotSupported = errors.New("not supported")
+
+// UnsupportedFeatureError is returned by FeatureTest() functions.
+type UnsupportedFeatureError struct {
+	// The minimum Linux mainline version required for this feature.
+	// Used for the error string, and for sanity checking during testing.
+	MinimumVersion Version
+
+	// The name of the feature that isn't supported.
+	Name string
+}
+
+func (ufe *UnsupportedFeatureError) Error() string {
+	if ufe.MinimumVersion.Unspecified() {
+		return fmt.Sprintf("%s not supported", ufe.Name)
+	}
+	return fmt.Sprintf("%s not supported (requires >= %s)", ufe.Name, ufe.MinimumVersion)
+}
+
+// Is indicates that UnsupportedFeatureError is ErrNotSupported.
+func (ufe *UnsupportedFeatureError) Is(target error) bool {
+	return target == ErrNotSupported
+}
+
+// FeatureTest caches the result of a [FeatureTestFn].
+//
+// Fields should not be modified after creation.
+type FeatureTest struct {
+	// The name of the feature being detected.
+	Name string
+	// Version in in the form Major.Minor[.Patch].
+	Version string
+	// The feature test itself.
+	Fn FeatureTestFn
+
+	mu     sync.RWMutex
+	done   bool
+	result error
+}
+
+// FeatureTestFn is used to determine whether the kernel supports
+// a certain feature.
+//
+// The return values have the following semantics:
+//
+//	err == ErrNotSupported: the feature is not available
+//	err == nil: the feature is available
+//	err != nil: the test couldn't be executed
+type FeatureTestFn func() error
+
+// NewFeatureTest is a convenient way to create a single [FeatureTest].
+func NewFeatureTest(name, version string, fn FeatureTestFn) func() error {
+	ft := &FeatureTest{
+		Name:    name,
+		Version: version,
+		Fn:      fn,
+	}
+
+	return ft.execute
+}
+
+// execute the feature test.
+//
+// The result is cached if the test is conclusive.
+//
+// See [FeatureTestFn] for the meaning of the returned error.
+func (ft *FeatureTest) execute() error {
+	ft.mu.RLock()
+	result, done := ft.result, ft.done
+	ft.mu.RUnlock()
+
+	if done {
+		return result
+	}
+
+	ft.mu.Lock()
+	defer ft.mu.Unlock()
+
+	// The test may have been executed by another caller while we were
+	// waiting to acquire ft.mu.
+	if ft.done {
+		return ft.result
+	}
+
+	err := ft.Fn()
+	if err == nil {
+		ft.done = true
+		return nil
+	}
+
+	if errors.Is(err, ErrNotSupported) {
+		var v Version
+		if ft.Version != "" {
+			v, err = NewVersion(ft.Version)
+			if err != nil {
+				return fmt.Errorf("feature %s: %w", ft.Name, err)
+			}
+		}
+
+		ft.done = true
+		ft.result = &UnsupportedFeatureError{
+			MinimumVersion: v,
+			Name:           ft.Name,
+		}
+
+		return ft.result
+	}
+
+	// We couldn't execute the feature test to a point
+	// where it could make a determination.
+	// Don't cache the result, just return it.
+	return fmt.Errorf("detect support for %s: %w", ft.Name, err)
+}
+
+// FeatureMatrix groups multiple related feature tests into a map.
+//
+// Useful when there is a small number of discrete features which are known
+// at compile time.
+//
+// It must not be modified concurrently with calling [FeatureMatrix.Result].
+type FeatureMatrix[K comparable] map[K]*FeatureTest
+
+// Result returns the outcome of the feature test for the given key.
+//
+// It's safe to call this function concurrently.
+func (fm FeatureMatrix[K]) Result(key K) error {
+	ft, ok := fm[key]
+	if !ok {
+		return fmt.Errorf("no feature probe for %v", key)
+	}
+
+	return ft.execute()
+}
+
+// FeatureCache caches a potentially unlimited number of feature probes.
+//
+// Useful when there is a high cardinality for a feature test.
+type FeatureCache[K comparable] struct {
+	mu       sync.RWMutex
+	newTest  func(K) *FeatureTest
+	features map[K]*FeatureTest
+}
+
+func NewFeatureCache[K comparable](newTest func(K) *FeatureTest) *FeatureCache[K] {
+	return &FeatureCache[K]{
+		newTest:  newTest,
+		features: make(map[K]*FeatureTest),
+	}
+}
+
+func (fc *FeatureCache[K]) Result(key K) error {
+	// NB: Executing the feature test happens without fc.mu taken.
+	return fc.retrieve(key).execute()
+}
+
+func (fc *FeatureCache[K]) retrieve(key K) *FeatureTest {
+	fc.mu.RLock()
+	ft := fc.features[key]
+	fc.mu.RUnlock()
+
+	if ft != nil {
+		return ft
+	}
+
+	fc.mu.Lock()
+	defer fc.mu.Unlock()
+
+	if ft := fc.features[key]; ft != nil {
+		return ft
+	}
+
+	ft = fc.newTest(key)
+	fc.features[key] = ft
+	return ft
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/io.go b/vendor/github.com/cilium/ebpf/internal/io.go
new file mode 100644
index 00000000000..1eaf4775ad7
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/io.go
@@ -0,0 +1,128 @@
+package internal
+
+import (
+	"bufio"
+	"bytes"
+	"compress/gzip"
+	"errors"
+	"fmt"
+	"io"
+	"os"
+	"path/filepath"
+	"sync"
+)
+
+// NewBufferedSectionReader wraps an io.ReaderAt in an appropriately-sized
+// buffered reader. It is a convenience function for reading subsections of
+// ELF sections while minimizing the amount of read() syscalls made.
+//
+// Syscall overhead is non-negligible in continuous integration context
+// where ELFs might be accessed over virtual filesystems with poor random
+// access performance. Buffering reads makes sense because (sub)sections
+// end up being read completely anyway.
+//
+// Use instead of the r.Seek() + io.LimitReader() pattern.
+func NewBufferedSectionReader(ra io.ReaderAt, off, n int64) *bufio.Reader {
+	// Clamp the size of the buffer to one page to avoid slurping large parts
+	// of a file into memory. bufio.NewReader uses a hardcoded default buffer
+	// of 4096. Allow arches with larger pages to allocate more, but don't
+	// allocate a fixed 4k buffer if we only need to read a small segment.
+	buf := n
+	if ps := int64(os.Getpagesize()); n > ps {
+		buf = ps
+	}
+
+	return bufio.NewReaderSize(io.NewSectionReader(ra, off, n), int(buf))
+}
+
+// DiscardZeroes makes sure that all written bytes are zero
+// before discarding them.
+type DiscardZeroes struct{}
+
+func (DiscardZeroes) Write(p []byte) (int, error) {
+	for _, b := range p {
+		if b != 0 {
+			return 0, errors.New("encountered non-zero byte")
+		}
+	}
+	return len(p), nil
+}
+
+// ReadAllCompressed decompresses a gzipped file into memory.
+func ReadAllCompressed(file string) ([]byte, error) {
+	fh, err := os.Open(file)
+	if err != nil {
+		return nil, err
+	}
+	defer fh.Close()
+
+	gz, err := gzip.NewReader(fh)
+	if err != nil {
+		return nil, err
+	}
+	defer gz.Close()
+
+	return io.ReadAll(gz)
+}
+
+// ReadUint64FromFile reads a uint64 from a file.
+//
+// format specifies the contents of the file in fmt.Scanf syntax.
+func ReadUint64FromFile(format string, path ...string) (uint64, error) {
+	filename := filepath.Join(path...)
+	data, err := os.ReadFile(filename)
+	if err != nil {
+		return 0, fmt.Errorf("reading file %q: %w", filename, err)
+	}
+
+	var value uint64
+	n, err := fmt.Fscanf(bytes.NewReader(data), format, &value)
+	if err != nil {
+		return 0, fmt.Errorf("parsing file %q: %w", filename, err)
+	}
+	if n != 1 {
+		return 0, fmt.Errorf("parsing file %q: expected 1 item, got %d", filename, n)
+	}
+
+	return value, nil
+}
+
+type uint64FromFileKey struct {
+	format, path string
+}
+
+var uint64FromFileCache = struct {
+	sync.RWMutex
+	values map[uint64FromFileKey]uint64
+}{
+	values: map[uint64FromFileKey]uint64{},
+}
+
+// ReadUint64FromFileOnce is like readUint64FromFile but memoizes the result.
+func ReadUint64FromFileOnce(format string, path ...string) (uint64, error) {
+	filename := filepath.Join(path...)
+	key := uint64FromFileKey{format, filename}
+
+	uint64FromFileCache.RLock()
+	if value, ok := uint64FromFileCache.values[key]; ok {
+		uint64FromFileCache.RUnlock()
+		return value, nil
+	}
+	uint64FromFileCache.RUnlock()
+
+	value, err := ReadUint64FromFile(format, filename)
+	if err != nil {
+		return 0, err
+	}
+
+	uint64FromFileCache.Lock()
+	defer uint64FromFileCache.Unlock()
+
+	if value, ok := uint64FromFileCache.values[key]; ok {
+		// Someone else got here before us, use what is cached.
+		return value, nil
+	}
+
+	uint64FromFileCache.values[key] = value
+	return value, nil
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/kconfig/kconfig.go b/vendor/github.com/cilium/ebpf/internal/kconfig/kconfig.go
new file mode 100644
index 00000000000..d95e7eb0e5d
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/kconfig/kconfig.go
@@ -0,0 +1,267 @@
+package kconfig
+
+import (
+	"bufio"
+	"bytes"
+	"compress/gzip"
+	"fmt"
+	"io"
+	"math"
+	"os"
+	"strconv"
+	"strings"
+
+	"github.com/cilium/ebpf/btf"
+	"github.com/cilium/ebpf/internal"
+)
+
+// Find find a kconfig file on the host.
+// It first reads from /boot/config- of the current running kernel and tries
+// /proc/config.gz if nothing was found in /boot.
+// If none of the file provide a kconfig, it returns an error.
+func Find() (*os.File, error) {
+	kernelRelease, err := internal.KernelRelease()
+	if err != nil {
+		return nil, fmt.Errorf("cannot get kernel release: %w", err)
+	}
+
+	path := "/boot/config-" + kernelRelease
+	f, err := os.Open(path)
+	if err == nil {
+		return f, nil
+	}
+
+	f, err = os.Open("/proc/config.gz")
+	if err == nil {
+		return f, nil
+	}
+
+	return nil, fmt.Errorf("neither %s nor /proc/config.gz provide a kconfig", path)
+}
+
+// Parse parses the kconfig file for which a reader is given.
+// All the CONFIG_* which are in filter and which are set set will be
+// put in the returned map as key with their corresponding value as map value.
+// If filter is nil, no filtering will occur.
+// If the kconfig file is not valid, error will be returned.
+func Parse(source io.ReaderAt, filter map[string]struct{}) (map[string]string, error) {
+	var r io.Reader
+	zr, err := gzip.NewReader(io.NewSectionReader(source, 0, math.MaxInt64))
+	if err != nil {
+		r = io.NewSectionReader(source, 0, math.MaxInt64)
+	} else {
+		// Source is gzip compressed, transparently decompress.
+		r = zr
+	}
+
+	ret := make(map[string]string, len(filter))
+
+	s := bufio.NewScanner(r)
+
+	for s.Scan() {
+		line := s.Bytes()
+		err = processKconfigLine(line, ret, filter)
+		if err != nil {
+			return nil, fmt.Errorf("cannot parse line: %w", err)
+		}
+
+		if filter != nil && len(ret) == len(filter) {
+			break
+		}
+	}
+
+	if err := s.Err(); err != nil {
+		return nil, fmt.Errorf("cannot parse: %w", err)
+	}
+
+	if zr != nil {
+		return ret, zr.Close()
+	}
+
+	return ret, nil
+}
+
+// Golang translation of libbpf bpf_object__process_kconfig_line():
+// https://github.com/libbpf/libbpf/blob/fbd60dbff51c870f5e80a17c4f2fd639eb80af90/src/libbpf.c#L1874
+// It does the same checks but does not put the data inside the BPF map.
+func processKconfigLine(line []byte, m map[string]string, filter map[string]struct{}) error {
+	// Ignore empty lines and "# CONFIG_* is not set".
+	if !bytes.HasPrefix(line, []byte("CONFIG_")) {
+		return nil
+	}
+
+	key, value, found := bytes.Cut(line, []byte{'='})
+	if !found {
+		return fmt.Errorf("line %q does not contain separator '='", line)
+	}
+
+	if len(value) == 0 {
+		return fmt.Errorf("line %q has no value", line)
+	}
+
+	if filter != nil {
+		// NB: map[string(key)] gets special optimisation help from the compiler
+		// and doesn't allocate. Don't turn this into a variable.
+		_, ok := filter[string(key)]
+		if !ok {
+			return nil
+		}
+	}
+
+	// This can seem odd, but libbpf only sets the value the first time the key is
+	// met:
+	// https://github.com/torvalds/linux/blob/0d85b27b0cc6/tools/lib/bpf/libbpf.c#L1906-L1908
+	_, ok := m[string(key)]
+	if !ok {
+		m[string(key)] = string(value)
+	}
+
+	return nil
+}
+
+// PutValue translates the value given as parameter depending on the BTF
+// type, the translated value is then written to the byte array.
+func PutValue(data []byte, typ btf.Type, value string) error {
+	typ = btf.UnderlyingType(typ)
+
+	switch value {
+	case "y", "n", "m":
+		return putValueTri(data, typ, value)
+	default:
+		if strings.HasPrefix(value, `"`) {
+			return putValueString(data, typ, value)
+		}
+		return putValueNumber(data, typ, value)
+	}
+}
+
+// Golang translation of libbpf_tristate enum:
+// https://github.com/libbpf/libbpf/blob/fbd60dbff51c870f5e80a17c4f2fd639eb80af90/src/bpf_helpers.h#L169
+type triState int
+
+const (
+	TriNo     triState = 0
+	TriYes    triState = 1
+	TriModule triState = 2
+)
+
+func putValueTri(data []byte, typ btf.Type, value string) error {
+	switch v := typ.(type) {
+	case *btf.Int:
+		if v.Encoding != btf.Bool {
+			return fmt.Errorf("cannot add tri value, expected btf.Bool, got: %v", v.Encoding)
+		}
+
+		if v.Size != 1 {
+			return fmt.Errorf("cannot add tri value, expected size of 1 byte, got: %d", v.Size)
+		}
+
+		switch value {
+		case "y":
+			data[0] = 1
+		case "n":
+			data[0] = 0
+		default:
+			return fmt.Errorf("cannot use %q for btf.Bool", value)
+		}
+	case *btf.Enum:
+		if v.Name != "libbpf_tristate" {
+			return fmt.Errorf("cannot use enum %q, only libbpf_tristate is supported", v.Name)
+		}
+
+		var tri triState
+		switch value {
+		case "y":
+			tri = TriYes
+		case "m":
+			tri = TriModule
+		case "n":
+			tri = TriNo
+		default:
+			return fmt.Errorf("value %q is not support for libbpf_tristate", value)
+		}
+
+		internal.NativeEndian.PutUint64(data, uint64(tri))
+	default:
+		return fmt.Errorf("cannot add number value, expected btf.Int or btf.Enum, got: %T", v)
+	}
+
+	return nil
+}
+
+func putValueString(data []byte, typ btf.Type, value string) error {
+	array, ok := typ.(*btf.Array)
+	if !ok {
+		return fmt.Errorf("cannot add string value, expected btf.Array, got %T", array)
+	}
+
+	contentType, ok := btf.UnderlyingType(array.Type).(*btf.Int)
+	if !ok {
+		return fmt.Errorf("cannot add string value, expected array of btf.Int, got %T", contentType)
+	}
+
+	// Any Int, which is not bool, of one byte could be used to store char:
+	// https://github.com/torvalds/linux/blob/1a5304fecee5/tools/lib/bpf/libbpf.c#L3637-L3638
+	if contentType.Size != 1 && contentType.Encoding != btf.Bool {
+		return fmt.Errorf("cannot add string value, expected array of btf.Int of size 1, got array of btf.Int of size: %v", contentType.Size)
+	}
+
+	if !strings.HasPrefix(value, `"`) || !strings.HasSuffix(value, `"`) {
+		return fmt.Errorf(`value %q must start and finish with '"'`, value)
+	}
+
+	str := strings.Trim(value, `"`)
+
+	// We need to trim string if the bpf array is smaller.
+	if uint32(len(str)) >= array.Nelems {
+		str = str[:array.Nelems]
+	}
+
+	// Write the string content to .kconfig.
+	copy(data, str)
+
+	return nil
+}
+
+func putValueNumber(data []byte, typ btf.Type, value string) error {
+	integer, ok := typ.(*btf.Int)
+	if !ok {
+		return fmt.Errorf("cannot add number value, expected *btf.Int, got: %T", integer)
+	}
+
+	size := integer.Size
+	sizeInBits := size * 8
+
+	var n uint64
+	var err error
+	if integer.Encoding == btf.Signed {
+		parsed, e := strconv.ParseInt(value, 0, int(sizeInBits))
+
+		n = uint64(parsed)
+		err = e
+	} else {
+		parsed, e := strconv.ParseUint(value, 0, int(sizeInBits))
+
+		n = uint64(parsed)
+		err = e
+	}
+
+	if err != nil {
+		return fmt.Errorf("cannot parse value: %w", err)
+	}
+
+	switch size {
+	case 1:
+		data[0] = byte(n)
+	case 2:
+		internal.NativeEndian.PutUint16(data, uint16(n))
+	case 4:
+		internal.NativeEndian.PutUint32(data, uint32(n))
+	case 8:
+		internal.NativeEndian.PutUint64(data, uint64(n))
+	default:
+		return fmt.Errorf("size (%d) is not valid, expected: 1, 2, 4 or 8", size)
+	}
+
+	return nil
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/memoize.go b/vendor/github.com/cilium/ebpf/internal/memoize.go
new file mode 100644
index 00000000000..3de0a3fb95a
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/memoize.go
@@ -0,0 +1,26 @@
+package internal
+
+import (
+	"sync"
+)
+
+type memoizedFunc[T any] struct {
+	once   sync.Once
+	fn     func() (T, error)
+	result T
+	err    error
+}
+
+func (mf *memoizedFunc[T]) do() (T, error) {
+	mf.once.Do(func() {
+		mf.result, mf.err = mf.fn()
+	})
+	return mf.result, mf.err
+}
+
+// Memoize the result of a function call.
+//
+// fn is only ever called once, even if it returns an error.
+func Memoize[T any](fn func() (T, error)) func() (T, error) {
+	return (&memoizedFunc[T]{fn: fn}).do
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/output.go b/vendor/github.com/cilium/ebpf/internal/output.go
new file mode 100644
index 00000000000..dd6e6cbafe0
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/output.go
@@ -0,0 +1,97 @@
+package internal
+
+import (
+	"bytes"
+	"errors"
+	"go/format"
+	"go/scanner"
+	"io"
+	"reflect"
+	"strings"
+	"unicode"
+)
+
+// Identifier turns a C style type or field name into an exportable Go equivalent.
+func Identifier(str string) string {
+	prev := rune(-1)
+	return strings.Map(func(r rune) rune {
+		// See https://golang.org/ref/spec#Identifiers
+		switch {
+		case unicode.IsLetter(r):
+			if prev == -1 {
+				r = unicode.ToUpper(r)
+			}
+
+		case r == '_':
+			switch {
+			// The previous rune was deleted, or we are at the
+			// beginning of the string.
+			case prev == -1:
+				fallthrough
+
+			// The previous rune is a lower case letter or a digit.
+			case unicode.IsDigit(prev) || (unicode.IsLetter(prev) && unicode.IsLower(prev)):
+				// delete the current rune, and force the
+				// next character to be uppercased.
+				r = -1
+			}
+
+		case unicode.IsDigit(r):
+
+		default:
+			// Delete the current rune. prev is unchanged.
+			return -1
+		}
+
+		prev = r
+		return r
+	}, str)
+}
+
+// WriteFormatted outputs a formatted src into out.
+//
+// If formatting fails it returns an informative error message.
+func WriteFormatted(src []byte, out io.Writer) error {
+	formatted, err := format.Source(src)
+	if err == nil {
+		_, err = out.Write(formatted)
+		return err
+	}
+
+	var el scanner.ErrorList
+	if !errors.As(err, &el) {
+		return err
+	}
+
+	var nel scanner.ErrorList
+	for _, err := range el {
+		if !err.Pos.IsValid() {
+			nel = append(nel, err)
+			continue
+		}
+
+		buf := src[err.Pos.Offset:]
+		nl := bytes.IndexRune(buf, '\n')
+		if nl == -1 {
+			nel = append(nel, err)
+			continue
+		}
+
+		err.Msg += ": " + string(buf[:nl])
+		nel = append(nel, err)
+	}
+
+	return nel
+}
+
+// GoTypeName is like %T, but elides the package name.
+//
+// Pointers to a type are peeled off.
+func GoTypeName(t any) string {
+	rT := reflect.TypeOf(t)
+	for rT.Kind() == reflect.Pointer {
+		rT = rT.Elem()
+	}
+	// Doesn't return the correct Name for generic types due to https://github.com/golang/go/issues/55924
+	return rT.Name()
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/pinning.go b/vendor/github.com/cilium/ebpf/internal/pinning.go
new file mode 100644
index 00000000000..01d892f9344
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/pinning.go
@@ -0,0 +1,65 @@
+package internal
+
+import (
+	"errors"
+	"fmt"
+	"os"
+	"path/filepath"
+	"runtime"
+
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+func Pin(currentPath, newPath string, fd *sys.FD) error {
+	if newPath == "" {
+		return errors.New("given pinning path cannot be empty")
+	}
+	if currentPath == newPath {
+		return nil
+	}
+
+	fsType, err := FSType(filepath.Dir(newPath))
+	if err != nil {
+		return err
+	}
+	if fsType != unix.BPF_FS_MAGIC {
+		return fmt.Errorf("%s is not on a bpf filesystem", newPath)
+	}
+
+	defer runtime.KeepAlive(fd)
+
+	if currentPath == "" {
+		return sys.ObjPin(&sys.ObjPinAttr{
+			Pathname: sys.NewStringPointer(newPath),
+			BpfFd:    fd.Uint(),
+		})
+	}
+
+	// Renameat2 is used instead of os.Rename to disallow the new path replacing
+	// an existing path.
+	err = unix.Renameat2(unix.AT_FDCWD, currentPath, unix.AT_FDCWD, newPath, unix.RENAME_NOREPLACE)
+	if err == nil {
+		// Object is now moved to the new pinning path.
+		return nil
+	}
+	if !os.IsNotExist(err) {
+		return fmt.Errorf("unable to move pinned object to new path %v: %w", newPath, err)
+	}
+	// Internal state not in sync with the file system so let's fix it.
+	return sys.ObjPin(&sys.ObjPinAttr{
+		Pathname: sys.NewStringPointer(newPath),
+		BpfFd:    fd.Uint(),
+	})
+}
+
+func Unpin(pinnedPath string) error {
+	if pinnedPath == "" {
+		return nil
+	}
+	err := os.Remove(pinnedPath)
+	if err == nil || os.IsNotExist(err) {
+		return nil
+	}
+	return err
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/platform.go b/vendor/github.com/cilium/ebpf/internal/platform.go
new file mode 100644
index 00000000000..6e90f2ef714
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/platform.go
@@ -0,0 +1,43 @@
+package internal
+
+import (
+	"runtime"
+)
+
+// PlatformPrefix returns the platform-dependent syscall wrapper prefix used by
+// the linux kernel.
+//
+// Based on https://github.com/golang/go/blob/master/src/go/build/syslist.go
+// and https://github.com/libbpf/libbpf/blob/master/src/libbpf.c#L10047
+func PlatformPrefix() string {
+	switch runtime.GOARCH {
+	case "386":
+		return "__ia32_"
+	case "amd64", "amd64p32":
+		return "__x64_"
+
+	case "arm", "armbe":
+		return "__arm_"
+	case "arm64", "arm64be":
+		return "__arm64_"
+
+	case "mips", "mipsle", "mips64", "mips64le", "mips64p32", "mips64p32le":
+		return "__mips_"
+
+	case "s390":
+		return "__s390_"
+	case "s390x":
+		return "__s390x_"
+
+	case "riscv", "riscv64":
+		return "__riscv_"
+
+	case "ppc":
+		return "__powerpc_"
+	case "ppc64", "ppc64le":
+		return "__powerpc64_"
+
+	default:
+		return ""
+	}
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/prog.go b/vendor/github.com/cilium/ebpf/internal/prog.go
new file mode 100644
index 00000000000..d629145b629
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/prog.go
@@ -0,0 +1,11 @@
+package internal
+
+// EmptyBPFContext is the smallest-possible BPF input context to be used for
+// invoking `Program.{Run,Benchmark,Test}`.
+//
+// Programs require a context input buffer of at least 15 bytes. Looking in
+// net/bpf/test_run.c, bpf_test_init() requires that the input is at least
+// ETH_HLEN (14) bytes. As of Linux commit fd18942 ("bpf: Don't redirect packets
+// with invalid pkt_len"), it also requires the skb to be non-empty after
+// removing the Layer 2 header.
+var EmptyBPFContext = make([]byte, 15)
diff --git a/vendor/github.com/cilium/ebpf/internal/statfs.go b/vendor/github.com/cilium/ebpf/internal/statfs.go
new file mode 100644
index 00000000000..44c02d676e6
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/statfs.go
@@ -0,0 +1,23 @@
+package internal
+
+import (
+	"unsafe"
+
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+func FSType(path string) (int64, error) {
+	var statfs unix.Statfs_t
+	if err := unix.Statfs(path, &statfs); err != nil {
+		return 0, err
+	}
+
+	fsType := int64(statfs.Type)
+	if unsafe.Sizeof(statfs.Type) == 4 {
+		// We're on a 32 bit arch, where statfs.Type is int32. bpfFSType is a
+		// negative number when interpreted as int32 so we need to cast via
+		// uint32 to avoid sign extension.
+		fsType = int64(uint32(statfs.Type))
+	}
+	return fsType, nil
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/sys/doc.go b/vendor/github.com/cilium/ebpf/internal/sys/doc.go
new file mode 100644
index 00000000000..dfe174448e1
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/sys/doc.go
@@ -0,0 +1,6 @@
+// Package sys contains bindings for the BPF syscall.
+package sys
+
+// Regenerate types.go by invoking go generate in the current directory.
+
+//go:generate go run github.com/cilium/ebpf/internal/cmd/gentypes ../../btf/testdata/vmlinux.btf.gz
diff --git a/vendor/github.com/cilium/ebpf/internal/sys/fd.go b/vendor/github.com/cilium/ebpf/internal/sys/fd.go
new file mode 100644
index 00000000000..941a56fb91b
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/sys/fd.go
@@ -0,0 +1,133 @@
+package sys
+
+import (
+	"fmt"
+	"math"
+	"os"
+	"runtime"
+	"strconv"
+
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+var ErrClosedFd = unix.EBADF
+
+type FD struct {
+	raw int
+}
+
+func newFD(value int) *FD {
+	if onLeakFD != nil {
+		// Attempt to store the caller's stack for the given fd value.
+		// Panic if fds contains an existing stack for the fd.
+		old, exist := fds.LoadOrStore(value, callersFrames())
+		if exist {
+			f := old.(*runtime.Frames)
+			panic(fmt.Sprintf("found existing stack for fd %d:\n%s", value, FormatFrames(f)))
+		}
+	}
+
+	fd := &FD{value}
+	runtime.SetFinalizer(fd, (*FD).finalize)
+	return fd
+}
+
+// finalize is set as the FD's runtime finalizer and
+// sends a leak trace before calling FD.Close().
+func (fd *FD) finalize() {
+	if fd.raw < 0 {
+		return
+	}
+
+	// Invoke the fd leak callback. Calls LoadAndDelete to guarantee the callback
+	// is invoked at most once for one sys.FD allocation, runtime.Frames can only
+	// be unwound once.
+	f, ok := fds.LoadAndDelete(fd.Int())
+	if ok && onLeakFD != nil {
+		onLeakFD(f.(*runtime.Frames))
+	}
+
+	_ = fd.Close()
+}
+
+// NewFD wraps a raw fd with a finalizer.
+//
+// You must not use the raw fd after calling this function, since the underlying
+// file descriptor number may change. This is because the BPF UAPI assumes that
+// zero is not a valid fd value.
+func NewFD(value int) (*FD, error) {
+	if value < 0 {
+		return nil, fmt.Errorf("invalid fd %d", value)
+	}
+
+	fd := newFD(value)
+	if value != 0 {
+		return fd, nil
+	}
+
+	dup, err := fd.Dup()
+	_ = fd.Close()
+	return dup, err
+}
+
+func (fd *FD) String() string {
+	return strconv.FormatInt(int64(fd.raw), 10)
+}
+
+func (fd *FD) Int() int {
+	return fd.raw
+}
+
+func (fd *FD) Uint() uint32 {
+	if fd.raw < 0 || int64(fd.raw) > math.MaxUint32 {
+		// Best effort: this is the number most likely to be an invalid file
+		// descriptor. It is equal to -1 (on two's complement arches).
+		return math.MaxUint32
+	}
+	return uint32(fd.raw)
+}
+
+func (fd *FD) Close() error {
+	if fd.raw < 0 {
+		return nil
+	}
+
+	return unix.Close(fd.disown())
+}
+
+func (fd *FD) disown() int {
+	value := int(fd.raw)
+	fds.Delete(int(value))
+	fd.raw = -1
+
+	runtime.SetFinalizer(fd, nil)
+	return value
+}
+
+func (fd *FD) Dup() (*FD, error) {
+	if fd.raw < 0 {
+		return nil, ErrClosedFd
+	}
+
+	// Always require the fd to be larger than zero: the BPF API treats the value
+	// as "no argument provided".
+	dup, err := unix.FcntlInt(uintptr(fd.raw), unix.F_DUPFD_CLOEXEC, 1)
+	if err != nil {
+		return nil, fmt.Errorf("can't dup fd: %v", err)
+	}
+
+	return newFD(dup), nil
+}
+
+// File takes ownership of FD and turns it into an [*os.File].
+//
+// You must not use the FD after the call returns.
+//
+// Returns nil if the FD is not valid.
+func (fd *FD) File(name string) *os.File {
+	if fd.raw < 0 {
+		return nil
+	}
+
+	return os.NewFile(uintptr(fd.disown()), name)
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/sys/fd_trace.go b/vendor/github.com/cilium/ebpf/internal/sys/fd_trace.go
new file mode 100644
index 00000000000..cd50dd1f642
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/sys/fd_trace.go
@@ -0,0 +1,93 @@
+package sys
+
+import (
+	"bytes"
+	"fmt"
+	"runtime"
+	"sync"
+)
+
+// OnLeakFD controls tracing [FD] lifetime to detect resources that are not
+// closed by Close().
+//
+// If fn is not nil, tracing is enabled for all FDs created going forward. fn is
+// invoked for all FDs that are closed by the garbage collector instead of an
+// explicit Close() by a caller. Calling OnLeakFD twice with a non-nil fn
+// (without disabling tracing in the meantime) will cause a panic.
+//
+// If fn is nil, tracing will be disabled. Any FDs that have not been closed are
+// considered to be leaked, fn will be invoked for them, and the process will be
+// terminated.
+//
+// fn will be invoked at most once for every unique sys.FD allocation since a
+// runtime.Frames can only be unwound once.
+func OnLeakFD(fn func(*runtime.Frames)) {
+	// Enable leak tracing if new fn is provided.
+	if fn != nil {
+		if onLeakFD != nil {
+			panic("OnLeakFD called twice with non-nil fn")
+		}
+
+		onLeakFD = fn
+		return
+	}
+
+	// fn is nil past this point.
+
+	if onLeakFD == nil {
+		return
+	}
+
+	// Call onLeakFD for all open fds.
+	if fs := flushFrames(); len(fs) != 0 {
+		for _, f := range fs {
+			onLeakFD(f)
+		}
+	}
+
+	onLeakFD = nil
+}
+
+var onLeakFD func(*runtime.Frames)
+
+// fds is a registry of all file descriptors wrapped into sys.fds that were
+// created while an fd tracer was active.
+var fds sync.Map // map[int]*runtime.Frames
+
+// flushFrames removes all elements from fds and returns them as a slice. This
+// deals with the fact that a runtime.Frames can only be unwound once using
+// Next().
+func flushFrames() []*runtime.Frames {
+	var frames []*runtime.Frames
+	fds.Range(func(key, value any) bool {
+		frames = append(frames, value.(*runtime.Frames))
+		fds.Delete(key)
+		return true
+	})
+	return frames
+}
+
+func callersFrames() *runtime.Frames {
+	c := make([]uintptr, 32)
+
+	// Skip runtime.Callers and this function.
+	i := runtime.Callers(2, c)
+	if i == 0 {
+		return nil
+	}
+
+	return runtime.CallersFrames(c)
+}
+
+// FormatFrames formats a runtime.Frames as a human-readable string.
+func FormatFrames(fs *runtime.Frames) string {
+	var b bytes.Buffer
+	for {
+		f, more := fs.Next()
+		b.WriteString(fmt.Sprintf("\t%s+%#x\n\t\t%s:%d\n", f.Function, f.PC-f.Entry, f.File, f.Line))
+		if !more {
+			break
+		}
+	}
+	return b.String()
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/sys/mapflags_string.go b/vendor/github.com/cilium/ebpf/internal/sys/mapflags_string.go
new file mode 100644
index 00000000000..c80744ae0e0
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/sys/mapflags_string.go
@@ -0,0 +1,49 @@
+// Code generated by "stringer -type MapFlags"; DO NOT EDIT.
+
+package sys
+
+import "strconv"
+
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[BPF_F_NO_PREALLOC-1]
+	_ = x[BPF_F_NO_COMMON_LRU-2]
+	_ = x[BPF_F_NUMA_NODE-4]
+	_ = x[BPF_F_RDONLY-8]
+	_ = x[BPF_F_WRONLY-16]
+	_ = x[BPF_F_STACK_BUILD_ID-32]
+	_ = x[BPF_F_ZERO_SEED-64]
+	_ = x[BPF_F_RDONLY_PROG-128]
+	_ = x[BPF_F_WRONLY_PROG-256]
+	_ = x[BPF_F_CLONE-512]
+	_ = x[BPF_F_MMAPABLE-1024]
+	_ = x[BPF_F_PRESERVE_ELEMS-2048]
+	_ = x[BPF_F_INNER_MAP-4096]
+}
+
+const _MapFlags_name = "BPF_F_NO_PREALLOCBPF_F_NO_COMMON_LRUBPF_F_NUMA_NODEBPF_F_RDONLYBPF_F_WRONLYBPF_F_STACK_BUILD_IDBPF_F_ZERO_SEEDBPF_F_RDONLY_PROGBPF_F_WRONLY_PROGBPF_F_CLONEBPF_F_MMAPABLEBPF_F_PRESERVE_ELEMSBPF_F_INNER_MAP"
+
+var _MapFlags_map = map[MapFlags]string{
+	1:    _MapFlags_name[0:17],
+	2:    _MapFlags_name[17:36],
+	4:    _MapFlags_name[36:51],
+	8:    _MapFlags_name[51:63],
+	16:   _MapFlags_name[63:75],
+	32:   _MapFlags_name[75:95],
+	64:   _MapFlags_name[95:110],
+	128:  _MapFlags_name[110:127],
+	256:  _MapFlags_name[127:144],
+	512:  _MapFlags_name[144:155],
+	1024: _MapFlags_name[155:169],
+	2048: _MapFlags_name[169:189],
+	4096: _MapFlags_name[189:204],
+}
+
+func (i MapFlags) String() string {
+	if str, ok := _MapFlags_map[i]; ok {
+		return str
+	}
+	return "MapFlags(" + strconv.FormatInt(int64(i), 10) + ")"
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/sys/ptr.go b/vendor/github.com/cilium/ebpf/internal/sys/ptr.go
new file mode 100644
index 00000000000..e9bb5905973
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/sys/ptr.go
@@ -0,0 +1,52 @@
+package sys
+
+import (
+	"unsafe"
+
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// NewPointer creates a 64-bit pointer from an unsafe Pointer.
+func NewPointer(ptr unsafe.Pointer) Pointer {
+	return Pointer{ptr: ptr}
+}
+
+// NewSlicePointer creates a 64-bit pointer from a byte slice.
+func NewSlicePointer(buf []byte) Pointer {
+	if len(buf) == 0 {
+		return Pointer{}
+	}
+
+	return Pointer{ptr: unsafe.Pointer(&buf[0])}
+}
+
+// NewSlicePointerLen creates a 64-bit pointer from a byte slice.
+//
+// Useful to assign both the pointer and the length in one go.
+func NewSlicePointerLen(buf []byte) (Pointer, uint32) {
+	return NewSlicePointer(buf), uint32(len(buf))
+}
+
+// NewStringPointer creates a 64-bit pointer from a string.
+func NewStringPointer(str string) Pointer {
+	p, err := unix.BytePtrFromString(str)
+	if err != nil {
+		return Pointer{}
+	}
+
+	return Pointer{ptr: unsafe.Pointer(p)}
+}
+
+// NewStringSlicePointer allocates an array of Pointers to each string in the
+// given slice of strings and returns a 64-bit pointer to the start of the
+// resulting array.
+//
+// Use this function to pass arrays of strings as syscall arguments.
+func NewStringSlicePointer(strings []string) Pointer {
+	sp := make([]Pointer, 0, len(strings))
+	for _, s := range strings {
+		sp = append(sp, NewStringPointer(s))
+	}
+
+	return Pointer{ptr: unsafe.Pointer(&sp[0])}
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/sys/ptr_32_be.go b/vendor/github.com/cilium/ebpf/internal/sys/ptr_32_be.go
new file mode 100644
index 00000000000..6278c79c9ef
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/sys/ptr_32_be.go
@@ -0,0 +1,14 @@
+//go:build armbe || mips || mips64p32
+
+package sys
+
+import (
+	"unsafe"
+)
+
+// Pointer wraps an unsafe.Pointer to be 64bit to
+// conform to the syscall specification.
+type Pointer struct {
+	pad uint32
+	ptr unsafe.Pointer
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/sys/ptr_32_le.go b/vendor/github.com/cilium/ebpf/internal/sys/ptr_32_le.go
new file mode 100644
index 00000000000..c27b537e8e0
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/sys/ptr_32_le.go
@@ -0,0 +1,14 @@
+//go:build 386 || amd64p32 || arm || mipsle || mips64p32le
+
+package sys
+
+import (
+	"unsafe"
+)
+
+// Pointer wraps an unsafe.Pointer to be 64bit to
+// conform to the syscall specification.
+type Pointer struct {
+	ptr unsafe.Pointer
+	pad uint32
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/sys/ptr_64.go b/vendor/github.com/cilium/ebpf/internal/sys/ptr_64.go
new file mode 100644
index 00000000000..2d7828230ae
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/sys/ptr_64.go
@@ -0,0 +1,13 @@
+//go:build !386 && !amd64p32 && !arm && !mipsle && !mips64p32le && !armbe && !mips && !mips64p32
+
+package sys
+
+import (
+	"unsafe"
+)
+
+// Pointer wraps an unsafe.Pointer to be 64bit to
+// conform to the syscall specification.
+type Pointer struct {
+	ptr unsafe.Pointer
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/sys/signals.go b/vendor/github.com/cilium/ebpf/internal/sys/signals.go
new file mode 100644
index 00000000000..7494c030c01
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/sys/signals.go
@@ -0,0 +1,83 @@
+package sys
+
+import (
+	"fmt"
+	"runtime"
+	"unsafe"
+
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// A sigset containing only SIGPROF.
+var profSet unix.Sigset_t
+
+func init() {
+	// See sigsetAdd for details on the implementation. Open coded here so
+	// that the compiler will check the constant calculations for us.
+	profSet.Val[sigprofBit/wordBits] |= 1 << (sigprofBit % wordBits)
+}
+
+// maskProfilerSignal locks the calling goroutine to its underlying OS thread
+// and adds SIGPROF to the thread's signal mask. This prevents pprof from
+// interrupting expensive syscalls like e.g. BPF_PROG_LOAD.
+//
+// The caller must defer unmaskProfilerSignal() to reverse the operation.
+func maskProfilerSignal() {
+	runtime.LockOSThread()
+
+	if err := unix.PthreadSigmask(unix.SIG_BLOCK, &profSet, nil); err != nil {
+		runtime.UnlockOSThread()
+		panic(fmt.Errorf("masking profiler signal: %w", err))
+	}
+}
+
+// unmaskProfilerSignal removes SIGPROF from the underlying thread's signal
+// mask, allowing it to be interrupted for profiling once again.
+//
+// It also unlocks the current goroutine from its underlying OS thread.
+func unmaskProfilerSignal() {
+	defer runtime.UnlockOSThread()
+
+	if err := unix.PthreadSigmask(unix.SIG_UNBLOCK, &profSet, nil); err != nil {
+		panic(fmt.Errorf("unmasking profiler signal: %w", err))
+	}
+}
+
+const (
+	// Signal is the nth bit in the bitfield.
+	sigprofBit = int(unix.SIGPROF - 1)
+	// The number of bits in one Sigset_t word.
+	wordBits = int(unsafe.Sizeof(unix.Sigset_t{}.Val[0])) * 8
+)
+
+// sigsetAdd adds signal to set.
+//
+// Note: Sigset_t.Val's value type is uint32 or uint64 depending on the arch.
+// This function must be able to deal with both and so must avoid any direct
+// references to u32 or u64 types.
+func sigsetAdd(set *unix.Sigset_t, signal unix.Signal) error {
+	if signal < 1 {
+		return fmt.Errorf("signal %d must be larger than 0", signal)
+	}
+
+	// For amd64, runtime.sigaddset() performs the following operation:
+	// set[(signal-1)/32] |= 1 << ((uint32(signal) - 1) & 31)
+	//
+	// This trick depends on sigset being two u32's, causing a signal in the the
+	// bottom 31 bits to be written to the low word if bit 32 is low, or the high
+	// word if bit 32 is high.
+
+	// Signal is the nth bit in the bitfield.
+	bit := int(signal - 1)
+	// Word within the sigset the bit needs to be written to.
+	word := bit / wordBits
+
+	if word >= len(set.Val) {
+		return fmt.Errorf("signal %d does not fit within unix.Sigset_t", signal)
+	}
+
+	// Write the signal bit into its corresponding word at the corrected offset.
+	set.Val[word] |= 1 << (bit % wordBits)
+
+	return nil
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/sys/syscall.go b/vendor/github.com/cilium/ebpf/internal/sys/syscall.go
new file mode 100644
index 00000000000..4fae04db5d8
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/sys/syscall.go
@@ -0,0 +1,178 @@
+package sys
+
+import (
+	"runtime"
+	"syscall"
+	"unsafe"
+
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// ENOTSUPP is a Linux internal error code that has leaked into UAPI.
+//
+// It is not the same as ENOTSUP or EOPNOTSUPP.
+var ENOTSUPP = syscall.Errno(524)
+
+// BPF wraps SYS_BPF.
+//
+// Any pointers contained in attr must use the Pointer type from this package.
+func BPF(cmd Cmd, attr unsafe.Pointer, size uintptr) (uintptr, error) {
+	// Prevent the Go profiler from repeatedly interrupting the verifier,
+	// which could otherwise lead to a livelock due to receiving EAGAIN.
+	if cmd == BPF_PROG_LOAD || cmd == BPF_PROG_RUN {
+		maskProfilerSignal()
+		defer unmaskProfilerSignal()
+	}
+
+	for {
+		r1, _, errNo := unix.Syscall(unix.SYS_BPF, uintptr(cmd), uintptr(attr), size)
+		runtime.KeepAlive(attr)
+
+		// As of ~4.20 the verifier can be interrupted by a signal,
+		// and returns EAGAIN in that case.
+		if errNo == unix.EAGAIN && cmd == BPF_PROG_LOAD {
+			continue
+		}
+
+		var err error
+		if errNo != 0 {
+			err = wrappedErrno{errNo}
+		}
+
+		return r1, err
+	}
+}
+
+// Info is implemented by all structs that can be passed to the ObjInfo syscall.
+//
+//	MapInfo
+//	ProgInfo
+//	LinkInfo
+//	BtfInfo
+type Info interface {
+	info() (unsafe.Pointer, uint32)
+}
+
+var _ Info = (*MapInfo)(nil)
+
+func (i *MapInfo) info() (unsafe.Pointer, uint32) {
+	return unsafe.Pointer(i), uint32(unsafe.Sizeof(*i))
+}
+
+var _ Info = (*ProgInfo)(nil)
+
+func (i *ProgInfo) info() (unsafe.Pointer, uint32) {
+	return unsafe.Pointer(i), uint32(unsafe.Sizeof(*i))
+}
+
+var _ Info = (*LinkInfo)(nil)
+
+func (i *LinkInfo) info() (unsafe.Pointer, uint32) {
+	return unsafe.Pointer(i), uint32(unsafe.Sizeof(*i))
+}
+
+var _ Info = (*BtfInfo)(nil)
+
+func (i *BtfInfo) info() (unsafe.Pointer, uint32) {
+	return unsafe.Pointer(i), uint32(unsafe.Sizeof(*i))
+}
+
+// ObjInfo retrieves information about a BPF Fd.
+//
+// info may be one of MapInfo, ProgInfo, LinkInfo and BtfInfo.
+func ObjInfo(fd *FD, info Info) error {
+	ptr, len := info.info()
+	err := ObjGetInfoByFd(&ObjGetInfoByFdAttr{
+		BpfFd:   fd.Uint(),
+		InfoLen: len,
+		Info:    NewPointer(ptr),
+	})
+	runtime.KeepAlive(fd)
+	return err
+}
+
+// BPFObjName is a null-terminated string made up of
+// 'A-Za-z0-9_' characters.
+type ObjName [unix.BPF_OBJ_NAME_LEN]byte
+
+// NewObjName truncates the result if it is too long.
+func NewObjName(name string) ObjName {
+	var result ObjName
+	copy(result[:unix.BPF_OBJ_NAME_LEN-1], name)
+	return result
+}
+
+// LogLevel controls the verbosity of the kernel's eBPF program verifier.
+type LogLevel uint32
+
+const (
+	BPF_LOG_LEVEL1 LogLevel = 1 << iota
+	BPF_LOG_LEVEL2
+	BPF_LOG_STATS
+)
+
+// LinkID uniquely identifies a bpf_link.
+type LinkID uint32
+
+// BTFID uniquely identifies a BTF blob loaded into the kernel.
+type BTFID uint32
+
+// TypeID identifies a type in a BTF blob.
+type TypeID uint32
+
+// MapFlags control map behaviour.
+type MapFlags uint32
+
+//go:generate stringer -type MapFlags
+
+const (
+	BPF_F_NO_PREALLOC MapFlags = 1 << iota
+	BPF_F_NO_COMMON_LRU
+	BPF_F_NUMA_NODE
+	BPF_F_RDONLY
+	BPF_F_WRONLY
+	BPF_F_STACK_BUILD_ID
+	BPF_F_ZERO_SEED
+	BPF_F_RDONLY_PROG
+	BPF_F_WRONLY_PROG
+	BPF_F_CLONE
+	BPF_F_MMAPABLE
+	BPF_F_PRESERVE_ELEMS
+	BPF_F_INNER_MAP
+)
+
+// wrappedErrno wraps syscall.Errno to prevent direct comparisons with
+// syscall.E* or unix.E* constants.
+//
+// You should never export an error of this type.
+type wrappedErrno struct {
+	syscall.Errno
+}
+
+func (we wrappedErrno) Unwrap() error {
+	return we.Errno
+}
+
+func (we wrappedErrno) Error() string {
+	if we.Errno == ENOTSUPP {
+		return "operation not supported"
+	}
+	return we.Errno.Error()
+}
+
+type syscallError struct {
+	error
+	errno syscall.Errno
+}
+
+func Error(err error, errno syscall.Errno) error {
+	return &syscallError{err, errno}
+}
+
+func (se *syscallError) Is(target error) bool {
+	return target == se.error
+}
+
+func (se *syscallError) Unwrap() error {
+	return se.errno
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/sys/types.go b/vendor/github.com/cilium/ebpf/internal/sys/types.go
new file mode 100644
index 00000000000..2af7759e5a3
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/sys/types.go
@@ -0,0 +1,1117 @@
+// Code generated by internal/cmd/gentypes; DO NOT EDIT.
+
+package sys
+
+import (
+	"unsafe"
+)
+
+type AdjRoomMode uint32
+
+const (
+	BPF_ADJ_ROOM_NET AdjRoomMode = 0
+	BPF_ADJ_ROOM_MAC AdjRoomMode = 1
+)
+
+type AttachType uint32
+
+const (
+	BPF_CGROUP_INET_INGRESS            AttachType = 0
+	BPF_CGROUP_INET_EGRESS             AttachType = 1
+	BPF_CGROUP_INET_SOCK_CREATE        AttachType = 2
+	BPF_CGROUP_SOCK_OPS                AttachType = 3
+	BPF_SK_SKB_STREAM_PARSER           AttachType = 4
+	BPF_SK_SKB_STREAM_VERDICT          AttachType = 5
+	BPF_CGROUP_DEVICE                  AttachType = 6
+	BPF_SK_MSG_VERDICT                 AttachType = 7
+	BPF_CGROUP_INET4_BIND              AttachType = 8
+	BPF_CGROUP_INET6_BIND              AttachType = 9
+	BPF_CGROUP_INET4_CONNECT           AttachType = 10
+	BPF_CGROUP_INET6_CONNECT           AttachType = 11
+	BPF_CGROUP_INET4_POST_BIND         AttachType = 12
+	BPF_CGROUP_INET6_POST_BIND         AttachType = 13
+	BPF_CGROUP_UDP4_SENDMSG            AttachType = 14
+	BPF_CGROUP_UDP6_SENDMSG            AttachType = 15
+	BPF_LIRC_MODE2                     AttachType = 16
+	BPF_FLOW_DISSECTOR                 AttachType = 17
+	BPF_CGROUP_SYSCTL                  AttachType = 18
+	BPF_CGROUP_UDP4_RECVMSG            AttachType = 19
+	BPF_CGROUP_UDP6_RECVMSG            AttachType = 20
+	BPF_CGROUP_GETSOCKOPT              AttachType = 21
+	BPF_CGROUP_SETSOCKOPT              AttachType = 22
+	BPF_TRACE_RAW_TP                   AttachType = 23
+	BPF_TRACE_FENTRY                   AttachType = 24
+	BPF_TRACE_FEXIT                    AttachType = 25
+	BPF_MODIFY_RETURN                  AttachType = 26
+	BPF_LSM_MAC                        AttachType = 27
+	BPF_TRACE_ITER                     AttachType = 28
+	BPF_CGROUP_INET4_GETPEERNAME       AttachType = 29
+	BPF_CGROUP_INET6_GETPEERNAME       AttachType = 30
+	BPF_CGROUP_INET4_GETSOCKNAME       AttachType = 31
+	BPF_CGROUP_INET6_GETSOCKNAME       AttachType = 32
+	BPF_XDP_DEVMAP                     AttachType = 33
+	BPF_CGROUP_INET_SOCK_RELEASE       AttachType = 34
+	BPF_XDP_CPUMAP                     AttachType = 35
+	BPF_SK_LOOKUP                      AttachType = 36
+	BPF_XDP                            AttachType = 37
+	BPF_SK_SKB_VERDICT                 AttachType = 38
+	BPF_SK_REUSEPORT_SELECT            AttachType = 39
+	BPF_SK_REUSEPORT_SELECT_OR_MIGRATE AttachType = 40
+	BPF_PERF_EVENT                     AttachType = 41
+	BPF_TRACE_KPROBE_MULTI             AttachType = 42
+	__MAX_BPF_ATTACH_TYPE              AttachType = 43
+)
+
+type Cmd uint32
+
+const (
+	BPF_MAP_CREATE                  Cmd = 0
+	BPF_MAP_LOOKUP_ELEM             Cmd = 1
+	BPF_MAP_UPDATE_ELEM             Cmd = 2
+	BPF_MAP_DELETE_ELEM             Cmd = 3
+	BPF_MAP_GET_NEXT_KEY            Cmd = 4
+	BPF_PROG_LOAD                   Cmd = 5
+	BPF_OBJ_PIN                     Cmd = 6
+	BPF_OBJ_GET                     Cmd = 7
+	BPF_PROG_ATTACH                 Cmd = 8
+	BPF_PROG_DETACH                 Cmd = 9
+	BPF_PROG_TEST_RUN               Cmd = 10
+	BPF_PROG_RUN                    Cmd = 10
+	BPF_PROG_GET_NEXT_ID            Cmd = 11
+	BPF_MAP_GET_NEXT_ID             Cmd = 12
+	BPF_PROG_GET_FD_BY_ID           Cmd = 13
+	BPF_MAP_GET_FD_BY_ID            Cmd = 14
+	BPF_OBJ_GET_INFO_BY_FD          Cmd = 15
+	BPF_PROG_QUERY                  Cmd = 16
+	BPF_RAW_TRACEPOINT_OPEN         Cmd = 17
+	BPF_BTF_LOAD                    Cmd = 18
+	BPF_BTF_GET_FD_BY_ID            Cmd = 19
+	BPF_TASK_FD_QUERY               Cmd = 20
+	BPF_MAP_LOOKUP_AND_DELETE_ELEM  Cmd = 21
+	BPF_MAP_FREEZE                  Cmd = 22
+	BPF_BTF_GET_NEXT_ID             Cmd = 23
+	BPF_MAP_LOOKUP_BATCH            Cmd = 24
+	BPF_MAP_LOOKUP_AND_DELETE_BATCH Cmd = 25
+	BPF_MAP_UPDATE_BATCH            Cmd = 26
+	BPF_MAP_DELETE_BATCH            Cmd = 27
+	BPF_LINK_CREATE                 Cmd = 28
+	BPF_LINK_UPDATE                 Cmd = 29
+	BPF_LINK_GET_FD_BY_ID           Cmd = 30
+	BPF_LINK_GET_NEXT_ID            Cmd = 31
+	BPF_ENABLE_STATS                Cmd = 32
+	BPF_ITER_CREATE                 Cmd = 33
+	BPF_LINK_DETACH                 Cmd = 34
+	BPF_PROG_BIND_MAP               Cmd = 35
+)
+
+type FunctionId uint32
+
+const (
+	BPF_FUNC_unspec                         FunctionId = 0
+	BPF_FUNC_map_lookup_elem                FunctionId = 1
+	BPF_FUNC_map_update_elem                FunctionId = 2
+	BPF_FUNC_map_delete_elem                FunctionId = 3
+	BPF_FUNC_probe_read                     FunctionId = 4
+	BPF_FUNC_ktime_get_ns                   FunctionId = 5
+	BPF_FUNC_trace_printk                   FunctionId = 6
+	BPF_FUNC_get_prandom_u32                FunctionId = 7
+	BPF_FUNC_get_smp_processor_id           FunctionId = 8
+	BPF_FUNC_skb_store_bytes                FunctionId = 9
+	BPF_FUNC_l3_csum_replace                FunctionId = 10
+	BPF_FUNC_l4_csum_replace                FunctionId = 11
+	BPF_FUNC_tail_call                      FunctionId = 12
+	BPF_FUNC_clone_redirect                 FunctionId = 13
+	BPF_FUNC_get_current_pid_tgid           FunctionId = 14
+	BPF_FUNC_get_current_uid_gid            FunctionId = 15
+	BPF_FUNC_get_current_comm               FunctionId = 16
+	BPF_FUNC_get_cgroup_classid             FunctionId = 17
+	BPF_FUNC_skb_vlan_push                  FunctionId = 18
+	BPF_FUNC_skb_vlan_pop                   FunctionId = 19
+	BPF_FUNC_skb_get_tunnel_key             FunctionId = 20
+	BPF_FUNC_skb_set_tunnel_key             FunctionId = 21
+	BPF_FUNC_perf_event_read                FunctionId = 22
+	BPF_FUNC_redirect                       FunctionId = 23
+	BPF_FUNC_get_route_realm                FunctionId = 24
+	BPF_FUNC_perf_event_output              FunctionId = 25
+	BPF_FUNC_skb_load_bytes                 FunctionId = 26
+	BPF_FUNC_get_stackid                    FunctionId = 27
+	BPF_FUNC_csum_diff                      FunctionId = 28
+	BPF_FUNC_skb_get_tunnel_opt             FunctionId = 29
+	BPF_FUNC_skb_set_tunnel_opt             FunctionId = 30
+	BPF_FUNC_skb_change_proto               FunctionId = 31
+	BPF_FUNC_skb_change_type                FunctionId = 32
+	BPF_FUNC_skb_under_cgroup               FunctionId = 33
+	BPF_FUNC_get_hash_recalc                FunctionId = 34
+	BPF_FUNC_get_current_task               FunctionId = 35
+	BPF_FUNC_probe_write_user               FunctionId = 36
+	BPF_FUNC_current_task_under_cgroup      FunctionId = 37
+	BPF_FUNC_skb_change_tail                FunctionId = 38
+	BPF_FUNC_skb_pull_data                  FunctionId = 39
+	BPF_FUNC_csum_update                    FunctionId = 40
+	BPF_FUNC_set_hash_invalid               FunctionId = 41
+	BPF_FUNC_get_numa_node_id               FunctionId = 42
+	BPF_FUNC_skb_change_head                FunctionId = 43
+	BPF_FUNC_xdp_adjust_head                FunctionId = 44
+	BPF_FUNC_probe_read_str                 FunctionId = 45
+	BPF_FUNC_get_socket_cookie              FunctionId = 46
+	BPF_FUNC_get_socket_uid                 FunctionId = 47
+	BPF_FUNC_set_hash                       FunctionId = 48
+	BPF_FUNC_setsockopt                     FunctionId = 49
+	BPF_FUNC_skb_adjust_room                FunctionId = 50
+	BPF_FUNC_redirect_map                   FunctionId = 51
+	BPF_FUNC_sk_redirect_map                FunctionId = 52
+	BPF_FUNC_sock_map_update                FunctionId = 53
+	BPF_FUNC_xdp_adjust_meta                FunctionId = 54
+	BPF_FUNC_perf_event_read_value          FunctionId = 55
+	BPF_FUNC_perf_prog_read_value           FunctionId = 56
+	BPF_FUNC_getsockopt                     FunctionId = 57
+	BPF_FUNC_override_return                FunctionId = 58
+	BPF_FUNC_sock_ops_cb_flags_set          FunctionId = 59
+	BPF_FUNC_msg_redirect_map               FunctionId = 60
+	BPF_FUNC_msg_apply_bytes                FunctionId = 61
+	BPF_FUNC_msg_cork_bytes                 FunctionId = 62
+	BPF_FUNC_msg_pull_data                  FunctionId = 63
+	BPF_FUNC_bind                           FunctionId = 64
+	BPF_FUNC_xdp_adjust_tail                FunctionId = 65
+	BPF_FUNC_skb_get_xfrm_state             FunctionId = 66
+	BPF_FUNC_get_stack                      FunctionId = 67
+	BPF_FUNC_skb_load_bytes_relative        FunctionId = 68
+	BPF_FUNC_fib_lookup                     FunctionId = 69
+	BPF_FUNC_sock_hash_update               FunctionId = 70
+	BPF_FUNC_msg_redirect_hash              FunctionId = 71
+	BPF_FUNC_sk_redirect_hash               FunctionId = 72
+	BPF_FUNC_lwt_push_encap                 FunctionId = 73
+	BPF_FUNC_lwt_seg6_store_bytes           FunctionId = 74
+	BPF_FUNC_lwt_seg6_adjust_srh            FunctionId = 75
+	BPF_FUNC_lwt_seg6_action                FunctionId = 76
+	BPF_FUNC_rc_repeat                      FunctionId = 77
+	BPF_FUNC_rc_keydown                     FunctionId = 78
+	BPF_FUNC_skb_cgroup_id                  FunctionId = 79
+	BPF_FUNC_get_current_cgroup_id          FunctionId = 80
+	BPF_FUNC_get_local_storage              FunctionId = 81
+	BPF_FUNC_sk_select_reuseport            FunctionId = 82
+	BPF_FUNC_skb_ancestor_cgroup_id         FunctionId = 83
+	BPF_FUNC_sk_lookup_tcp                  FunctionId = 84
+	BPF_FUNC_sk_lookup_udp                  FunctionId = 85
+	BPF_FUNC_sk_release                     FunctionId = 86
+	BPF_FUNC_map_push_elem                  FunctionId = 87
+	BPF_FUNC_map_pop_elem                   FunctionId = 88
+	BPF_FUNC_map_peek_elem                  FunctionId = 89
+	BPF_FUNC_msg_push_data                  FunctionId = 90
+	BPF_FUNC_msg_pop_data                   FunctionId = 91
+	BPF_FUNC_rc_pointer_rel                 FunctionId = 92
+	BPF_FUNC_spin_lock                      FunctionId = 93
+	BPF_FUNC_spin_unlock                    FunctionId = 94
+	BPF_FUNC_sk_fullsock                    FunctionId = 95
+	BPF_FUNC_tcp_sock                       FunctionId = 96
+	BPF_FUNC_skb_ecn_set_ce                 FunctionId = 97
+	BPF_FUNC_get_listener_sock              FunctionId = 98
+	BPF_FUNC_skc_lookup_tcp                 FunctionId = 99
+	BPF_FUNC_tcp_check_syncookie            FunctionId = 100
+	BPF_FUNC_sysctl_get_name                FunctionId = 101
+	BPF_FUNC_sysctl_get_current_value       FunctionId = 102
+	BPF_FUNC_sysctl_get_new_value           FunctionId = 103
+	BPF_FUNC_sysctl_set_new_value           FunctionId = 104
+	BPF_FUNC_strtol                         FunctionId = 105
+	BPF_FUNC_strtoul                        FunctionId = 106
+	BPF_FUNC_sk_storage_get                 FunctionId = 107
+	BPF_FUNC_sk_storage_delete              FunctionId = 108
+	BPF_FUNC_send_signal                    FunctionId = 109
+	BPF_FUNC_tcp_gen_syncookie              FunctionId = 110
+	BPF_FUNC_skb_output                     FunctionId = 111
+	BPF_FUNC_probe_read_user                FunctionId = 112
+	BPF_FUNC_probe_read_kernel              FunctionId = 113
+	BPF_FUNC_probe_read_user_str            FunctionId = 114
+	BPF_FUNC_probe_read_kernel_str          FunctionId = 115
+	BPF_FUNC_tcp_send_ack                   FunctionId = 116
+	BPF_FUNC_send_signal_thread             FunctionId = 117
+	BPF_FUNC_jiffies64                      FunctionId = 118
+	BPF_FUNC_read_branch_records            FunctionId = 119
+	BPF_FUNC_get_ns_current_pid_tgid        FunctionId = 120
+	BPF_FUNC_xdp_output                     FunctionId = 121
+	BPF_FUNC_get_netns_cookie               FunctionId = 122
+	BPF_FUNC_get_current_ancestor_cgroup_id FunctionId = 123
+	BPF_FUNC_sk_assign                      FunctionId = 124
+	BPF_FUNC_ktime_get_boot_ns              FunctionId = 125
+	BPF_FUNC_seq_printf                     FunctionId = 126
+	BPF_FUNC_seq_write                      FunctionId = 127
+	BPF_FUNC_sk_cgroup_id                   FunctionId = 128
+	BPF_FUNC_sk_ancestor_cgroup_id          FunctionId = 129
+	BPF_FUNC_ringbuf_output                 FunctionId = 130
+	BPF_FUNC_ringbuf_reserve                FunctionId = 131
+	BPF_FUNC_ringbuf_submit                 FunctionId = 132
+	BPF_FUNC_ringbuf_discard                FunctionId = 133
+	BPF_FUNC_ringbuf_query                  FunctionId = 134
+	BPF_FUNC_csum_level                     FunctionId = 135
+	BPF_FUNC_skc_to_tcp6_sock               FunctionId = 136
+	BPF_FUNC_skc_to_tcp_sock                FunctionId = 137
+	BPF_FUNC_skc_to_tcp_timewait_sock       FunctionId = 138
+	BPF_FUNC_skc_to_tcp_request_sock        FunctionId = 139
+	BPF_FUNC_skc_to_udp6_sock               FunctionId = 140
+	BPF_FUNC_get_task_stack                 FunctionId = 141
+	BPF_FUNC_load_hdr_opt                   FunctionId = 142
+	BPF_FUNC_store_hdr_opt                  FunctionId = 143
+	BPF_FUNC_reserve_hdr_opt                FunctionId = 144
+	BPF_FUNC_inode_storage_get              FunctionId = 145
+	BPF_FUNC_inode_storage_delete           FunctionId = 146
+	BPF_FUNC_d_path                         FunctionId = 147
+	BPF_FUNC_copy_from_user                 FunctionId = 148
+	BPF_FUNC_snprintf_btf                   FunctionId = 149
+	BPF_FUNC_seq_printf_btf                 FunctionId = 150
+	BPF_FUNC_skb_cgroup_classid             FunctionId = 151
+	BPF_FUNC_redirect_neigh                 FunctionId = 152
+	BPF_FUNC_per_cpu_ptr                    FunctionId = 153
+	BPF_FUNC_this_cpu_ptr                   FunctionId = 154
+	BPF_FUNC_redirect_peer                  FunctionId = 155
+	BPF_FUNC_task_storage_get               FunctionId = 156
+	BPF_FUNC_task_storage_delete            FunctionId = 157
+	BPF_FUNC_get_current_task_btf           FunctionId = 158
+	BPF_FUNC_bprm_opts_set                  FunctionId = 159
+	BPF_FUNC_ktime_get_coarse_ns            FunctionId = 160
+	BPF_FUNC_ima_inode_hash                 FunctionId = 161
+	BPF_FUNC_sock_from_file                 FunctionId = 162
+	BPF_FUNC_check_mtu                      FunctionId = 163
+	BPF_FUNC_for_each_map_elem              FunctionId = 164
+	BPF_FUNC_snprintf                       FunctionId = 165
+	BPF_FUNC_sys_bpf                        FunctionId = 166
+	BPF_FUNC_btf_find_by_name_kind          FunctionId = 167
+	BPF_FUNC_sys_close                      FunctionId = 168
+	BPF_FUNC_timer_init                     FunctionId = 169
+	BPF_FUNC_timer_set_callback             FunctionId = 170
+	BPF_FUNC_timer_start                    FunctionId = 171
+	BPF_FUNC_timer_cancel                   FunctionId = 172
+	BPF_FUNC_get_func_ip                    FunctionId = 173
+	BPF_FUNC_get_attach_cookie              FunctionId = 174
+	BPF_FUNC_task_pt_regs                   FunctionId = 175
+	BPF_FUNC_get_branch_snapshot            FunctionId = 176
+	BPF_FUNC_trace_vprintk                  FunctionId = 177
+	BPF_FUNC_skc_to_unix_sock               FunctionId = 178
+	BPF_FUNC_kallsyms_lookup_name           FunctionId = 179
+	BPF_FUNC_find_vma                       FunctionId = 180
+	BPF_FUNC_loop                           FunctionId = 181
+	BPF_FUNC_strncmp                        FunctionId = 182
+	BPF_FUNC_get_func_arg                   FunctionId = 183
+	BPF_FUNC_get_func_ret                   FunctionId = 184
+	BPF_FUNC_get_func_arg_cnt               FunctionId = 185
+	BPF_FUNC_get_retval                     FunctionId = 186
+	BPF_FUNC_set_retval                     FunctionId = 187
+	BPF_FUNC_xdp_get_buff_len               FunctionId = 188
+	BPF_FUNC_xdp_load_bytes                 FunctionId = 189
+	BPF_FUNC_xdp_store_bytes                FunctionId = 190
+	BPF_FUNC_copy_from_user_task            FunctionId = 191
+	BPF_FUNC_skb_set_tstamp                 FunctionId = 192
+	BPF_FUNC_ima_file_hash                  FunctionId = 193
+	BPF_FUNC_kptr_xchg                      FunctionId = 194
+	BPF_FUNC_map_lookup_percpu_elem         FunctionId = 195
+	BPF_FUNC_skc_to_mptcp_sock              FunctionId = 196
+	BPF_FUNC_dynptr_from_mem                FunctionId = 197
+	BPF_FUNC_ringbuf_reserve_dynptr         FunctionId = 198
+	BPF_FUNC_ringbuf_submit_dynptr          FunctionId = 199
+	BPF_FUNC_ringbuf_discard_dynptr         FunctionId = 200
+	BPF_FUNC_dynptr_read                    FunctionId = 201
+	BPF_FUNC_dynptr_write                   FunctionId = 202
+	BPF_FUNC_dynptr_data                    FunctionId = 203
+	__BPF_FUNC_MAX_ID                       FunctionId = 204
+)
+
+type HdrStartOff uint32
+
+const (
+	BPF_HDR_START_MAC HdrStartOff = 0
+	BPF_HDR_START_NET HdrStartOff = 1
+)
+
+type LinkType uint32
+
+const (
+	BPF_LINK_TYPE_UNSPEC         LinkType = 0
+	BPF_LINK_TYPE_RAW_TRACEPOINT LinkType = 1
+	BPF_LINK_TYPE_TRACING        LinkType = 2
+	BPF_LINK_TYPE_CGROUP         LinkType = 3
+	BPF_LINK_TYPE_ITER           LinkType = 4
+	BPF_LINK_TYPE_NETNS          LinkType = 5
+	BPF_LINK_TYPE_XDP            LinkType = 6
+	BPF_LINK_TYPE_PERF_EVENT     LinkType = 7
+	BPF_LINK_TYPE_KPROBE_MULTI   LinkType = 8
+	BPF_LINK_TYPE_STRUCT_OPS     LinkType = 9
+	MAX_BPF_LINK_TYPE            LinkType = 10
+)
+
+type MapType uint32
+
+const (
+	BPF_MAP_TYPE_UNSPEC                MapType = 0
+	BPF_MAP_TYPE_HASH                  MapType = 1
+	BPF_MAP_TYPE_ARRAY                 MapType = 2
+	BPF_MAP_TYPE_PROG_ARRAY            MapType = 3
+	BPF_MAP_TYPE_PERF_EVENT_ARRAY      MapType = 4
+	BPF_MAP_TYPE_PERCPU_HASH           MapType = 5
+	BPF_MAP_TYPE_PERCPU_ARRAY          MapType = 6
+	BPF_MAP_TYPE_STACK_TRACE           MapType = 7
+	BPF_MAP_TYPE_CGROUP_ARRAY          MapType = 8
+	BPF_MAP_TYPE_LRU_HASH              MapType = 9
+	BPF_MAP_TYPE_LRU_PERCPU_HASH       MapType = 10
+	BPF_MAP_TYPE_LPM_TRIE              MapType = 11
+	BPF_MAP_TYPE_ARRAY_OF_MAPS         MapType = 12
+	BPF_MAP_TYPE_HASH_OF_MAPS          MapType = 13
+	BPF_MAP_TYPE_DEVMAP                MapType = 14
+	BPF_MAP_TYPE_SOCKMAP               MapType = 15
+	BPF_MAP_TYPE_CPUMAP                MapType = 16
+	BPF_MAP_TYPE_XSKMAP                MapType = 17
+	BPF_MAP_TYPE_SOCKHASH              MapType = 18
+	BPF_MAP_TYPE_CGROUP_STORAGE        MapType = 19
+	BPF_MAP_TYPE_REUSEPORT_SOCKARRAY   MapType = 20
+	BPF_MAP_TYPE_PERCPU_CGROUP_STORAGE MapType = 21
+	BPF_MAP_TYPE_QUEUE                 MapType = 22
+	BPF_MAP_TYPE_STACK                 MapType = 23
+	BPF_MAP_TYPE_SK_STORAGE            MapType = 24
+	BPF_MAP_TYPE_DEVMAP_HASH           MapType = 25
+	BPF_MAP_TYPE_STRUCT_OPS            MapType = 26
+	BPF_MAP_TYPE_RINGBUF               MapType = 27
+	BPF_MAP_TYPE_INODE_STORAGE         MapType = 28
+	BPF_MAP_TYPE_TASK_STORAGE          MapType = 29
+	BPF_MAP_TYPE_BLOOM_FILTER          MapType = 30
+)
+
+type ProgType uint32
+
+const (
+	BPF_PROG_TYPE_UNSPEC                  ProgType = 0
+	BPF_PROG_TYPE_SOCKET_FILTER           ProgType = 1
+	BPF_PROG_TYPE_KPROBE                  ProgType = 2
+	BPF_PROG_TYPE_SCHED_CLS               ProgType = 3
+	BPF_PROG_TYPE_SCHED_ACT               ProgType = 4
+	BPF_PROG_TYPE_TRACEPOINT              ProgType = 5
+	BPF_PROG_TYPE_XDP                     ProgType = 6
+	BPF_PROG_TYPE_PERF_EVENT              ProgType = 7
+	BPF_PROG_TYPE_CGROUP_SKB              ProgType = 8
+	BPF_PROG_TYPE_CGROUP_SOCK             ProgType = 9
+	BPF_PROG_TYPE_LWT_IN                  ProgType = 10
+	BPF_PROG_TYPE_LWT_OUT                 ProgType = 11
+	BPF_PROG_TYPE_LWT_XMIT                ProgType = 12
+	BPF_PROG_TYPE_SOCK_OPS                ProgType = 13
+	BPF_PROG_TYPE_SK_SKB                  ProgType = 14
+	BPF_PROG_TYPE_CGROUP_DEVICE           ProgType = 15
+	BPF_PROG_TYPE_SK_MSG                  ProgType = 16
+	BPF_PROG_TYPE_RAW_TRACEPOINT          ProgType = 17
+	BPF_PROG_TYPE_CGROUP_SOCK_ADDR        ProgType = 18
+	BPF_PROG_TYPE_LWT_SEG6LOCAL           ProgType = 19
+	BPF_PROG_TYPE_LIRC_MODE2              ProgType = 20
+	BPF_PROG_TYPE_SK_REUSEPORT            ProgType = 21
+	BPF_PROG_TYPE_FLOW_DISSECTOR          ProgType = 22
+	BPF_PROG_TYPE_CGROUP_SYSCTL           ProgType = 23
+	BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE ProgType = 24
+	BPF_PROG_TYPE_CGROUP_SOCKOPT          ProgType = 25
+	BPF_PROG_TYPE_TRACING                 ProgType = 26
+	BPF_PROG_TYPE_STRUCT_OPS              ProgType = 27
+	BPF_PROG_TYPE_EXT                     ProgType = 28
+	BPF_PROG_TYPE_LSM                     ProgType = 29
+	BPF_PROG_TYPE_SK_LOOKUP               ProgType = 30
+	BPF_PROG_TYPE_SYSCALL                 ProgType = 31
+)
+
+type RetCode uint32
+
+const (
+	BPF_OK          RetCode = 0
+	BPF_DROP        RetCode = 2
+	BPF_REDIRECT    RetCode = 7
+	BPF_LWT_REROUTE RetCode = 128
+)
+
+type SkAction uint32
+
+const (
+	SK_DROP SkAction = 0
+	SK_PASS SkAction = 1
+)
+
+type StackBuildIdStatus uint32
+
+const (
+	BPF_STACK_BUILD_ID_EMPTY StackBuildIdStatus = 0
+	BPF_STACK_BUILD_ID_VALID StackBuildIdStatus = 1
+	BPF_STACK_BUILD_ID_IP    StackBuildIdStatus = 2
+)
+
+type StatsType uint32
+
+const (
+	BPF_STATS_RUN_TIME StatsType = 0
+)
+
+type XdpAction uint32
+
+const (
+	XDP_ABORTED  XdpAction = 0
+	XDP_DROP     XdpAction = 1
+	XDP_PASS     XdpAction = 2
+	XDP_TX       XdpAction = 3
+	XDP_REDIRECT XdpAction = 4
+)
+
+type BtfInfo struct {
+	Btf       Pointer
+	BtfSize   uint32
+	Id        BTFID
+	Name      Pointer
+	NameLen   uint32
+	KernelBtf uint32
+}
+
+type FuncInfo struct {
+	InsnOff uint32
+	TypeId  uint32
+}
+
+type LineInfo struct {
+	InsnOff     uint32
+	FileNameOff uint32
+	LineOff     uint32
+	LineCol     uint32
+}
+
+type LinkInfo struct {
+	Type   LinkType
+	Id     LinkID
+	ProgId uint32
+	_      [4]byte
+	Extra  [16]uint8
+}
+
+type MapInfo struct {
+	Type                  uint32
+	Id                    uint32
+	KeySize               uint32
+	ValueSize             uint32
+	MaxEntries            uint32
+	MapFlags              MapFlags
+	Name                  ObjName
+	Ifindex               uint32
+	BtfVmlinuxValueTypeId TypeID
+	NetnsDev              uint64
+	NetnsIno              uint64
+	BtfId                 uint32
+	BtfKeyTypeId          TypeID
+	BtfValueTypeId        TypeID
+	_                     [4]byte
+	MapExtra              uint64
+}
+
+type ProgInfo struct {
+	Type                 uint32
+	Id                   uint32
+	Tag                  [8]uint8
+	JitedProgLen         uint32
+	XlatedProgLen        uint32
+	JitedProgInsns       uint64
+	XlatedProgInsns      Pointer
+	LoadTime             uint64
+	CreatedByUid         uint32
+	NrMapIds             uint32
+	MapIds               Pointer
+	Name                 ObjName
+	Ifindex              uint32
+	_                    [4]byte /* unsupported bitfield */
+	NetnsDev             uint64
+	NetnsIno             uint64
+	NrJitedKsyms         uint32
+	NrJitedFuncLens      uint32
+	JitedKsyms           uint64
+	JitedFuncLens        uint64
+	BtfId                BTFID
+	FuncInfoRecSize      uint32
+	FuncInfo             uint64
+	NrFuncInfo           uint32
+	NrLineInfo           uint32
+	LineInfo             uint64
+	JitedLineInfo        uint64
+	NrJitedLineInfo      uint32
+	LineInfoRecSize      uint32
+	JitedLineInfoRecSize uint32
+	NrProgTags           uint32
+	ProgTags             uint64
+	RunTimeNs            uint64
+	RunCnt               uint64
+	RecursionMisses      uint64
+	VerifiedInsns        uint32
+	_                    [4]byte
+}
+
+type SkLookup struct {
+	Cookie         uint64
+	Family         uint32
+	Protocol       uint32
+	RemoteIp4      [4]uint8
+	RemoteIp6      [16]uint8
+	RemotePort     uint16
+	_              [2]byte
+	LocalIp4       [4]uint8
+	LocalIp6       [16]uint8
+	LocalPort      uint32
+	IngressIfindex uint32
+	_              [4]byte
+}
+
+type XdpMd struct {
+	Data           uint32
+	DataEnd        uint32
+	DataMeta       uint32
+	IngressIfindex uint32
+	RxQueueIndex   uint32
+	EgressIfindex  uint32
+}
+
+type BtfGetFdByIdAttr struct{ Id uint32 }
+
+func BtfGetFdById(attr *BtfGetFdByIdAttr) (*FD, error) {
+	fd, err := BPF(BPF_BTF_GET_FD_BY_ID, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type BtfGetNextIdAttr struct {
+	Id     BTFID
+	NextId BTFID
+}
+
+func BtfGetNextId(attr *BtfGetNextIdAttr) error {
+	_, err := BPF(BPF_BTF_GET_NEXT_ID, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type BtfLoadAttr struct {
+	Btf         Pointer
+	BtfLogBuf   Pointer
+	BtfSize     uint32
+	BtfLogSize  uint32
+	BtfLogLevel uint32
+	_           [4]byte
+}
+
+func BtfLoad(attr *BtfLoadAttr) (*FD, error) {
+	fd, err := BPF(BPF_BTF_LOAD, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type EnableStatsAttr struct{ Type uint32 }
+
+func EnableStats(attr *EnableStatsAttr) (*FD, error) {
+	fd, err := BPF(BPF_ENABLE_STATS, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type IterCreateAttr struct {
+	LinkFd uint32
+	Flags  uint32
+}
+
+func IterCreate(attr *IterCreateAttr) (*FD, error) {
+	fd, err := BPF(BPF_ITER_CREATE, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type LinkCreateAttr struct {
+	ProgFd      uint32
+	TargetFd    uint32
+	AttachType  AttachType
+	Flags       uint32
+	TargetBtfId TypeID
+	_           [28]byte
+}
+
+func LinkCreate(attr *LinkCreateAttr) (*FD, error) {
+	fd, err := BPF(BPF_LINK_CREATE, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type LinkCreateIterAttr struct {
+	ProgFd      uint32
+	TargetFd    uint32
+	AttachType  AttachType
+	Flags       uint32
+	IterInfo    Pointer
+	IterInfoLen uint32
+	_           [20]byte
+}
+
+func LinkCreateIter(attr *LinkCreateIterAttr) (*FD, error) {
+	fd, err := BPF(BPF_LINK_CREATE, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type LinkCreateKprobeMultiAttr struct {
+	ProgFd           uint32
+	TargetFd         uint32
+	AttachType       AttachType
+	Flags            uint32
+	KprobeMultiFlags uint32
+	Count            uint32
+	Syms             Pointer
+	Addrs            Pointer
+	Cookies          Pointer
+}
+
+func LinkCreateKprobeMulti(attr *LinkCreateKprobeMultiAttr) (*FD, error) {
+	fd, err := BPF(BPF_LINK_CREATE, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type LinkCreatePerfEventAttr struct {
+	ProgFd     uint32
+	TargetFd   uint32
+	AttachType AttachType
+	Flags      uint32
+	BpfCookie  uint64
+	_          [24]byte
+}
+
+func LinkCreatePerfEvent(attr *LinkCreatePerfEventAttr) (*FD, error) {
+	fd, err := BPF(BPF_LINK_CREATE, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type LinkCreateTracingAttr struct {
+	ProgFd      uint32
+	TargetFd    uint32
+	AttachType  AttachType
+	Flags       uint32
+	TargetBtfId BTFID
+	_           [4]byte
+	Cookie      uint64
+	_           [16]byte
+}
+
+func LinkCreateTracing(attr *LinkCreateTracingAttr) (*FD, error) {
+	fd, err := BPF(BPF_LINK_CREATE, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type LinkUpdateAttr struct {
+	LinkFd    uint32
+	NewProgFd uint32
+	Flags     uint32
+	OldProgFd uint32
+}
+
+func LinkUpdate(attr *LinkUpdateAttr) error {
+	_, err := BPF(BPF_LINK_UPDATE, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type MapCreateAttr struct {
+	MapType               MapType
+	KeySize               uint32
+	ValueSize             uint32
+	MaxEntries            uint32
+	MapFlags              MapFlags
+	InnerMapFd            uint32
+	NumaNode              uint32
+	MapName               ObjName
+	MapIfindex            uint32
+	BtfFd                 uint32
+	BtfKeyTypeId          TypeID
+	BtfValueTypeId        TypeID
+	BtfVmlinuxValueTypeId TypeID
+	MapExtra              uint64
+}
+
+func MapCreate(attr *MapCreateAttr) (*FD, error) {
+	fd, err := BPF(BPF_MAP_CREATE, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type MapDeleteBatchAttr struct {
+	InBatch   Pointer
+	OutBatch  Pointer
+	Keys      Pointer
+	Values    Pointer
+	Count     uint32
+	MapFd     uint32
+	ElemFlags uint64
+	Flags     uint64
+}
+
+func MapDeleteBatch(attr *MapDeleteBatchAttr) error {
+	_, err := BPF(BPF_MAP_DELETE_BATCH, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type MapDeleteElemAttr struct {
+	MapFd uint32
+	_     [4]byte
+	Key   Pointer
+	Value Pointer
+	Flags uint64
+}
+
+func MapDeleteElem(attr *MapDeleteElemAttr) error {
+	_, err := BPF(BPF_MAP_DELETE_ELEM, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type MapFreezeAttr struct{ MapFd uint32 }
+
+func MapFreeze(attr *MapFreezeAttr) error {
+	_, err := BPF(BPF_MAP_FREEZE, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type MapGetFdByIdAttr struct{ Id uint32 }
+
+func MapGetFdById(attr *MapGetFdByIdAttr) (*FD, error) {
+	fd, err := BPF(BPF_MAP_GET_FD_BY_ID, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type MapGetNextIdAttr struct {
+	Id     uint32
+	NextId uint32
+}
+
+func MapGetNextId(attr *MapGetNextIdAttr) error {
+	_, err := BPF(BPF_MAP_GET_NEXT_ID, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type MapGetNextKeyAttr struct {
+	MapFd   uint32
+	_       [4]byte
+	Key     Pointer
+	NextKey Pointer
+}
+
+func MapGetNextKey(attr *MapGetNextKeyAttr) error {
+	_, err := BPF(BPF_MAP_GET_NEXT_KEY, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type MapLookupAndDeleteBatchAttr struct {
+	InBatch   Pointer
+	OutBatch  Pointer
+	Keys      Pointer
+	Values    Pointer
+	Count     uint32
+	MapFd     uint32
+	ElemFlags uint64
+	Flags     uint64
+}
+
+func MapLookupAndDeleteBatch(attr *MapLookupAndDeleteBatchAttr) error {
+	_, err := BPF(BPF_MAP_LOOKUP_AND_DELETE_BATCH, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type MapLookupAndDeleteElemAttr struct {
+	MapFd uint32
+	_     [4]byte
+	Key   Pointer
+	Value Pointer
+	Flags uint64
+}
+
+func MapLookupAndDeleteElem(attr *MapLookupAndDeleteElemAttr) error {
+	_, err := BPF(BPF_MAP_LOOKUP_AND_DELETE_ELEM, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type MapLookupBatchAttr struct {
+	InBatch   Pointer
+	OutBatch  Pointer
+	Keys      Pointer
+	Values    Pointer
+	Count     uint32
+	MapFd     uint32
+	ElemFlags uint64
+	Flags     uint64
+}
+
+func MapLookupBatch(attr *MapLookupBatchAttr) error {
+	_, err := BPF(BPF_MAP_LOOKUP_BATCH, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type MapLookupElemAttr struct {
+	MapFd uint32
+	_     [4]byte
+	Key   Pointer
+	Value Pointer
+	Flags uint64
+}
+
+func MapLookupElem(attr *MapLookupElemAttr) error {
+	_, err := BPF(BPF_MAP_LOOKUP_ELEM, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type MapUpdateBatchAttr struct {
+	InBatch   Pointer
+	OutBatch  Pointer
+	Keys      Pointer
+	Values    Pointer
+	Count     uint32
+	MapFd     uint32
+	ElemFlags uint64
+	Flags     uint64
+}
+
+func MapUpdateBatch(attr *MapUpdateBatchAttr) error {
+	_, err := BPF(BPF_MAP_UPDATE_BATCH, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type MapUpdateElemAttr struct {
+	MapFd uint32
+	_     [4]byte
+	Key   Pointer
+	Value Pointer
+	Flags uint64
+}
+
+func MapUpdateElem(attr *MapUpdateElemAttr) error {
+	_, err := BPF(BPF_MAP_UPDATE_ELEM, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type ObjGetAttr struct {
+	Pathname  Pointer
+	BpfFd     uint32
+	FileFlags uint32
+}
+
+func ObjGet(attr *ObjGetAttr) (*FD, error) {
+	fd, err := BPF(BPF_OBJ_GET, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type ObjGetInfoByFdAttr struct {
+	BpfFd   uint32
+	InfoLen uint32
+	Info    Pointer
+}
+
+func ObjGetInfoByFd(attr *ObjGetInfoByFdAttr) error {
+	_, err := BPF(BPF_OBJ_GET_INFO_BY_FD, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type ObjPinAttr struct {
+	Pathname  Pointer
+	BpfFd     uint32
+	FileFlags uint32
+}
+
+func ObjPin(attr *ObjPinAttr) error {
+	_, err := BPF(BPF_OBJ_PIN, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type ProgAttachAttr struct {
+	TargetFd     uint32
+	AttachBpfFd  uint32
+	AttachType   uint32
+	AttachFlags  uint32
+	ReplaceBpfFd uint32
+}
+
+func ProgAttach(attr *ProgAttachAttr) error {
+	_, err := BPF(BPF_PROG_ATTACH, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type ProgBindMapAttr struct {
+	ProgFd uint32
+	MapFd  uint32
+	Flags  uint32
+}
+
+func ProgBindMap(attr *ProgBindMapAttr) error {
+	_, err := BPF(BPF_PROG_BIND_MAP, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type ProgDetachAttr struct {
+	TargetFd    uint32
+	AttachBpfFd uint32
+	AttachType  uint32
+}
+
+func ProgDetach(attr *ProgDetachAttr) error {
+	_, err := BPF(BPF_PROG_DETACH, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type ProgGetFdByIdAttr struct{ Id uint32 }
+
+func ProgGetFdById(attr *ProgGetFdByIdAttr) (*FD, error) {
+	fd, err := BPF(BPF_PROG_GET_FD_BY_ID, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type ProgGetNextIdAttr struct {
+	Id     uint32
+	NextId uint32
+}
+
+func ProgGetNextId(attr *ProgGetNextIdAttr) error {
+	_, err := BPF(BPF_PROG_GET_NEXT_ID, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type ProgLoadAttr struct {
+	ProgType           ProgType
+	InsnCnt            uint32
+	Insns              Pointer
+	License            Pointer
+	LogLevel           LogLevel
+	LogSize            uint32
+	LogBuf             Pointer
+	KernVersion        uint32
+	ProgFlags          uint32
+	ProgName           ObjName
+	ProgIfindex        uint32
+	ExpectedAttachType AttachType
+	ProgBtfFd          uint32
+	FuncInfoRecSize    uint32
+	FuncInfo           Pointer
+	FuncInfoCnt        uint32
+	LineInfoRecSize    uint32
+	LineInfo           Pointer
+	LineInfoCnt        uint32
+	AttachBtfId        TypeID
+	AttachBtfObjFd     uint32
+	CoreReloCnt        uint32
+	FdArray            Pointer
+	CoreRelos          Pointer
+	CoreReloRecSize    uint32
+	_                  [4]byte
+}
+
+func ProgLoad(attr *ProgLoadAttr) (*FD, error) {
+	fd, err := BPF(BPF_PROG_LOAD, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type ProgQueryAttr struct {
+	TargetFd    uint32
+	AttachType  AttachType
+	QueryFlags  uint32
+	AttachFlags uint32
+	ProgIds     Pointer
+	ProgCount   uint32
+	_           [4]byte
+}
+
+func ProgQuery(attr *ProgQueryAttr) error {
+	_, err := BPF(BPF_PROG_QUERY, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type ProgRunAttr struct {
+	ProgFd      uint32
+	Retval      uint32
+	DataSizeIn  uint32
+	DataSizeOut uint32
+	DataIn      Pointer
+	DataOut     Pointer
+	Repeat      uint32
+	Duration    uint32
+	CtxSizeIn   uint32
+	CtxSizeOut  uint32
+	CtxIn       Pointer
+	CtxOut      Pointer
+	Flags       uint32
+	Cpu         uint32
+	BatchSize   uint32
+	_           [4]byte
+}
+
+func ProgRun(attr *ProgRunAttr) error {
+	_, err := BPF(BPF_PROG_TEST_RUN, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	return err
+}
+
+type RawTracepointOpenAttr struct {
+	Name   Pointer
+	ProgFd uint32
+	_      [4]byte
+}
+
+func RawTracepointOpen(attr *RawTracepointOpenAttr) (*FD, error) {
+	fd, err := BPF(BPF_RAW_TRACEPOINT_OPEN, unsafe.Pointer(attr), unsafe.Sizeof(*attr))
+	if err != nil {
+		return nil, err
+	}
+	return NewFD(int(fd))
+}
+
+type CgroupLinkInfo struct {
+	CgroupId   uint64
+	AttachType AttachType
+	_          [4]byte
+}
+
+type IterLinkInfo struct {
+	TargetName    Pointer
+	TargetNameLen uint32
+}
+
+type NetNsLinkInfo struct {
+	NetnsIno   uint32
+	AttachType AttachType
+}
+
+type RawTracepointLinkInfo struct {
+	TpName    Pointer
+	TpNameLen uint32
+	_         [4]byte
+}
+
+type TracingLinkInfo struct {
+	AttachType  AttachType
+	TargetObjId uint32
+	TargetBtfId TypeID
+}
+
+type XDPLinkInfo struct{ Ifindex uint32 }
diff --git a/vendor/github.com/cilium/ebpf/internal/tracefs/kprobe.go b/vendor/github.com/cilium/ebpf/internal/tracefs/kprobe.go
new file mode 100644
index 00000000000..4059a099b08
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/tracefs/kprobe.go
@@ -0,0 +1,359 @@
+package tracefs
+
+import (
+	"crypto/rand"
+	"errors"
+	"fmt"
+	"os"
+	"path/filepath"
+	"runtime"
+	"strings"
+	"syscall"
+
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+var (
+	ErrInvalidInput = errors.New("invalid input")
+
+	ErrInvalidMaxActive = errors.New("can only set maxactive on kretprobes")
+)
+
+//go:generate stringer -type=ProbeType -linecomment
+
+type ProbeType uint8
+
+const (
+	Kprobe ProbeType = iota // kprobe
+	Uprobe                  // uprobe
+)
+
+func (pt ProbeType) eventsFile() (*os.File, error) {
+	path, err := sanitizeTracefsPath(fmt.Sprintf("%s_events", pt.String()))
+	if err != nil {
+		return nil, err
+	}
+
+	return os.OpenFile(path, os.O_APPEND|os.O_WRONLY, 0666)
+}
+
+type ProbeArgs struct {
+	Type                         ProbeType
+	Symbol, Group, Path          string
+	Offset, RefCtrOffset, Cookie uint64
+	Pid, RetprobeMaxActive       int
+	Ret                          bool
+}
+
+// RandomGroup generates a pseudorandom string for use as a tracefs group name.
+// Returns an error when the output string would exceed 63 characters (kernel
+// limitation), when rand.Read() fails or when prefix contains characters not
+// allowed by IsValidTraceID.
+func RandomGroup(prefix string) (string, error) {
+	if !validIdentifier(prefix) {
+		return "", fmt.Errorf("prefix '%s' must be alphanumeric or underscore: %w", prefix, ErrInvalidInput)
+	}
+
+	b := make([]byte, 8)
+	if _, err := rand.Read(b); err != nil {
+		return "", fmt.Errorf("reading random bytes: %w", err)
+	}
+
+	group := fmt.Sprintf("%s_%x", prefix, b)
+	if len(group) > 63 {
+		return "", fmt.Errorf("group name '%s' cannot be longer than 63 characters: %w", group, ErrInvalidInput)
+	}
+
+	return group, nil
+}
+
+// validIdentifier implements the equivalent of a regex match
+// against "^[a-zA-Z_][0-9a-zA-Z_]*$".
+//
+// Trace event groups, names and kernel symbols must adhere to this set
+// of characters. Non-empty, first character must not be a number, all
+// characters must be alphanumeric or underscore.
+func validIdentifier(s string) bool {
+	if len(s) < 1 {
+		return false
+	}
+	for i, c := range []byte(s) {
+		switch {
+		case c >= 'a' && c <= 'z':
+		case c >= 'A' && c <= 'Z':
+		case c == '_':
+		case i > 0 && c >= '0' && c <= '9':
+
+		default:
+			return false
+		}
+	}
+
+	return true
+}
+
+func sanitizeTracefsPath(path ...string) (string, error) {
+	base, err := getTracefsPath()
+	if err != nil {
+		return "", err
+	}
+	l := filepath.Join(path...)
+	p := filepath.Join(base, l)
+	if !strings.HasPrefix(p, base) {
+		return "", fmt.Errorf("path '%s' attempts to escape base path '%s': %w", l, base, ErrInvalidInput)
+	}
+	return p, nil
+}
+
+// getTracefsPath will return a correct path to the tracefs mount point.
+// Since kernel 4.1 tracefs should be mounted by default at /sys/kernel/tracing,
+// but may be also be available at /sys/kernel/debug/tracing if debugfs is mounted.
+// The available tracefs paths will depends on distribution choices.
+var getTracefsPath = internal.Memoize(func() (string, error) {
+	for _, p := range []struct {
+		path   string
+		fsType int64
+	}{
+		{"/sys/kernel/tracing", unix.TRACEFS_MAGIC},
+		{"/sys/kernel/debug/tracing", unix.TRACEFS_MAGIC},
+		// RHEL/CentOS
+		{"/sys/kernel/debug/tracing", unix.DEBUGFS_MAGIC},
+	} {
+		if fsType, err := internal.FSType(p.path); err == nil && fsType == p.fsType {
+			return p.path, nil
+		}
+	}
+
+	return "", errors.New("neither debugfs nor tracefs are mounted")
+})
+
+// sanitizeIdentifier replaces every invalid character for the tracefs api with an underscore.
+//
+// It is equivalent to calling regexp.MustCompile("[^a-zA-Z0-9]+").ReplaceAllString("_").
+func sanitizeIdentifier(s string) string {
+	var skip bool
+	return strings.Map(func(c rune) rune {
+		switch {
+		case c >= 'a' && c <= 'z',
+			c >= 'A' && c <= 'Z',
+			c >= '0' && c <= '9':
+			skip = false
+			return c
+
+		case skip:
+			return -1
+
+		default:
+			skip = true
+			return '_'
+		}
+	}, s)
+}
+
+// EventID reads a trace event's ID from tracefs given its group and name.
+// The kernel requires group and name to be alphanumeric or underscore.
+func EventID(group, name string) (uint64, error) {
+	if !validIdentifier(group) {
+		return 0, fmt.Errorf("invalid tracefs group: %q", group)
+	}
+
+	if !validIdentifier(name) {
+		return 0, fmt.Errorf("invalid tracefs name: %q", name)
+	}
+
+	path, err := sanitizeTracefsPath("events", group, name, "id")
+	if err != nil {
+		return 0, err
+	}
+	tid, err := internal.ReadUint64FromFile("%d\n", path)
+	if errors.Is(err, os.ErrNotExist) {
+		return 0, err
+	}
+	if err != nil {
+		return 0, fmt.Errorf("reading trace event ID of %s/%s: %w", group, name, err)
+	}
+
+	return tid, nil
+}
+
+func probePrefix(ret bool, maxActive int) string {
+	if ret {
+		if maxActive > 0 {
+			return fmt.Sprintf("r%d", maxActive)
+		}
+		return "r"
+	}
+	return "p"
+}
+
+// Event represents an entry in a tracefs probe events file.
+type Event struct {
+	typ         ProbeType
+	group, name string
+	// event id allocated by the kernel. 0 if the event has already been removed.
+	id uint64
+}
+
+// NewEvent creates a new ephemeral trace event.
+//
+// Returns os.ErrNotExist if symbol is not a valid
+// kernel symbol, or if it is not traceable with kprobes. Returns os.ErrExist
+// if a probe with the same group and symbol already exists. Returns an error if
+// args.RetprobeMaxActive is used on non kprobe types. Returns ErrNotSupported if
+// the kernel is too old to support kretprobe maxactive.
+func NewEvent(args ProbeArgs) (*Event, error) {
+	// Before attempting to create a trace event through tracefs,
+	// check if an event with the same group and name already exists.
+	// Kernels 4.x and earlier don't return os.ErrExist on writing a duplicate
+	// entry, so we need to rely on reads for detecting uniqueness.
+	eventName := sanitizeIdentifier(args.Symbol)
+	_, err := EventID(args.Group, eventName)
+	if err == nil {
+		return nil, fmt.Errorf("trace event %s/%s: %w", args.Group, eventName, os.ErrExist)
+	}
+	if err != nil && !errors.Is(err, os.ErrNotExist) {
+		return nil, fmt.Errorf("checking trace event %s/%s: %w", args.Group, eventName, err)
+	}
+
+	// Open the kprobe_events file in tracefs.
+	f, err := args.Type.eventsFile()
+	if err != nil {
+		return nil, err
+	}
+	defer f.Close()
+
+	var pe, token string
+	switch args.Type {
+	case Kprobe:
+		// The kprobe_events syntax is as follows (see Documentation/trace/kprobetrace.txt):
+		// p[:[GRP/]EVENT] [MOD:]SYM[+offs]|MEMADDR [FETCHARGS] : Set a probe
+		// r[MAXACTIVE][:[GRP/]EVENT] [MOD:]SYM[+0] [FETCHARGS] : Set a return probe
+		// -:[GRP/]EVENT                                        : Clear a probe
+		//
+		// Some examples:
+		// r:ebpf_1234/r_my_kretprobe nf_conntrack_destroy
+		// p:ebpf_5678/p_my_kprobe __x64_sys_execve
+		//
+		// Leaving the kretprobe's MAXACTIVE set to 0 (or absent) will make the
+		// kernel default to NR_CPUS. This is desired in most eBPF cases since
+		// subsampling or rate limiting logic can be more accurately implemented in
+		// the eBPF program itself.
+		// See Documentation/kprobes.txt for more details.
+		if args.RetprobeMaxActive != 0 && !args.Ret {
+			return nil, ErrInvalidMaxActive
+		}
+		token = KprobeToken(args)
+		pe = fmt.Sprintf("%s:%s/%s %s", probePrefix(args.Ret, args.RetprobeMaxActive), args.Group, eventName, token)
+	case Uprobe:
+		// The uprobe_events syntax is as follows:
+		// p[:[GRP/]EVENT] PATH:OFFSET [FETCHARGS] : Set a probe
+		// r[:[GRP/]EVENT] PATH:OFFSET [FETCHARGS] : Set a return probe
+		// -:[GRP/]EVENT                           : Clear a probe
+		//
+		// Some examples:
+		// r:ebpf_1234/readline /bin/bash:0x12345
+		// p:ebpf_5678/main_mySymbol /bin/mybin:0x12345(0x123)
+		//
+		// See Documentation/trace/uprobetracer.txt for more details.
+		if args.RetprobeMaxActive != 0 {
+			return nil, ErrInvalidMaxActive
+		}
+		token = UprobeToken(args)
+		pe = fmt.Sprintf("%s:%s/%s %s", probePrefix(args.Ret, 0), args.Group, eventName, token)
+	}
+	_, err = f.WriteString(pe)
+
+	// Since commit 97c753e62e6c, ENOENT is correctly returned instead of EINVAL
+	// when trying to create a retprobe for a missing symbol.
+	if errors.Is(err, os.ErrNotExist) {
+		return nil, fmt.Errorf("token %s: not found: %w", token, err)
+	}
+	// Since commit ab105a4fb894, EILSEQ is returned when a kprobe sym+offset is resolved
+	// to an invalid insn boundary. The exact conditions that trigger this error are
+	// arch specific however.
+	if errors.Is(err, syscall.EILSEQ) {
+		return nil, fmt.Errorf("token %s: bad insn boundary: %w", token, os.ErrNotExist)
+	}
+	// ERANGE is returned when the `SYM[+offs]` token is too big and cannot
+	// be resolved.
+	if errors.Is(err, syscall.ERANGE) {
+		return nil, fmt.Errorf("token %s: offset too big: %w", token, os.ErrNotExist)
+	}
+
+	if err != nil {
+		return nil, fmt.Errorf("token %s: writing '%s': %w", token, pe, err)
+	}
+
+	// Get the newly-created trace event's id.
+	tid, err := EventID(args.Group, eventName)
+	if args.RetprobeMaxActive != 0 && errors.Is(err, os.ErrNotExist) {
+		// Kernels < 4.12 don't support maxactive and therefore auto generate
+		// group and event names from the symbol and offset. The symbol is used
+		// without any sanitization.
+		// See https://elixir.bootlin.com/linux/v4.10/source/kernel/trace/trace_kprobe.c#L712
+		event := fmt.Sprintf("kprobes/r_%s_%d", args.Symbol, args.Offset)
+		if err := removeEvent(args.Type, event); err != nil {
+			return nil, fmt.Errorf("failed to remove spurious maxactive event: %s", err)
+		}
+		return nil, fmt.Errorf("create trace event with non-default maxactive: %w", internal.ErrNotSupported)
+	}
+	if err != nil {
+		return nil, fmt.Errorf("get trace event id: %w", err)
+	}
+
+	evt := &Event{args.Type, args.Group, eventName, tid}
+	runtime.SetFinalizer(evt, (*Event).Close)
+	return evt, nil
+}
+
+// Close removes the event from tracefs.
+//
+// Returns os.ErrClosed if the event has already been closed before.
+func (evt *Event) Close() error {
+	if evt.id == 0 {
+		return os.ErrClosed
+	}
+
+	evt.id = 0
+	runtime.SetFinalizer(evt, nil)
+	pe := fmt.Sprintf("%s/%s", evt.group, evt.name)
+	return removeEvent(evt.typ, pe)
+}
+
+func removeEvent(typ ProbeType, pe string) error {
+	f, err := typ.eventsFile()
+	if err != nil {
+		return err
+	}
+	defer f.Close()
+
+	// See [k,u]probe_events syntax above. The probe type does not need to be specified
+	// for removals.
+	if _, err = f.WriteString("-:" + pe); err != nil {
+		return fmt.Errorf("remove event %q from %s: %w", pe, f.Name(), err)
+	}
+
+	return nil
+}
+
+// ID returns the tracefs ID associated with the event.
+func (evt *Event) ID() uint64 {
+	return evt.id
+}
+
+// Group returns the tracefs group used by the event.
+func (evt *Event) Group() string {
+	return evt.group
+}
+
+// KprobeToken creates the SYM[+offs] token for the tracefs api.
+func KprobeToken(args ProbeArgs) string {
+	po := args.Symbol
+
+	if args.Offset != 0 {
+		po += fmt.Sprintf("+%#x", args.Offset)
+	}
+
+	return po
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/tracefs/probetype_string.go b/vendor/github.com/cilium/ebpf/internal/tracefs/probetype_string.go
new file mode 100644
index 00000000000..87cb0a059b4
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/tracefs/probetype_string.go
@@ -0,0 +1,24 @@
+// Code generated by "stringer -type=ProbeType -linecomment"; DO NOT EDIT.
+
+package tracefs
+
+import "strconv"
+
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[Kprobe-0]
+	_ = x[Uprobe-1]
+}
+
+const _ProbeType_name = "kprobeuprobe"
+
+var _ProbeType_index = [...]uint8{0, 6, 12}
+
+func (i ProbeType) String() string {
+	if i >= ProbeType(len(_ProbeType_index)-1) {
+		return "ProbeType(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+	return _ProbeType_name[_ProbeType_index[i]:_ProbeType_index[i+1]]
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/tracefs/uprobe.go b/vendor/github.com/cilium/ebpf/internal/tracefs/uprobe.go
new file mode 100644
index 00000000000..994f31260de
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/tracefs/uprobe.go
@@ -0,0 +1,16 @@
+package tracefs
+
+import "fmt"
+
+// UprobeToken creates the PATH:OFFSET(REF_CTR_OFFSET) token for the tracefs api.
+func UprobeToken(args ProbeArgs) string {
+	po := fmt.Sprintf("%s:%#x", args.Path, args.Offset)
+
+	if args.RefCtrOffset != 0 {
+		// This is not documented in Documentation/trace/uprobetracer.txt.
+		// elixir.bootlin.com/linux/v5.15-rc7/source/kernel/trace/trace.c#L5564
+		po += fmt.Sprintf("(%#x)", args.RefCtrOffset)
+	}
+
+	return po
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/unix/doc.go b/vendor/github.com/cilium/ebpf/internal/unix/doc.go
new file mode 100644
index 00000000000..d168d36f180
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/unix/doc.go
@@ -0,0 +1,11 @@
+// Package unix re-exports Linux specific parts of golang.org/x/sys/unix.
+//
+// It avoids breaking compilation on other OS by providing stubs as follows:
+//   - Invoking a function always returns an error.
+//   - Errnos have distinct, non-zero values.
+//   - Constants have distinct but meaningless values.
+//   - Types use the same names for members, but may or may not follow the
+//     Linux layout.
+package unix
+
+// Note: please don't add any custom API to this package. Use internal/sys instead.
diff --git a/vendor/github.com/cilium/ebpf/internal/unix/types_linux.go b/vendor/github.com/cilium/ebpf/internal/unix/types_linux.go
new file mode 100644
index 00000000000..7c9705919a3
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/unix/types_linux.go
@@ -0,0 +1,202 @@
+//go:build linux
+
+package unix
+
+import (
+	"syscall"
+
+	linux "golang.org/x/sys/unix"
+)
+
+const (
+	ENOENT     = linux.ENOENT
+	EEXIST     = linux.EEXIST
+	EAGAIN     = linux.EAGAIN
+	ENOSPC     = linux.ENOSPC
+	EINVAL     = linux.EINVAL
+	EPOLLIN    = linux.EPOLLIN
+	EINTR      = linux.EINTR
+	EPERM      = linux.EPERM
+	ESRCH      = linux.ESRCH
+	ENODEV     = linux.ENODEV
+	EBADF      = linux.EBADF
+	E2BIG      = linux.E2BIG
+	EFAULT     = linux.EFAULT
+	EACCES     = linux.EACCES
+	EILSEQ     = linux.EILSEQ
+	EOPNOTSUPP = linux.EOPNOTSUPP
+)
+
+const (
+	BPF_F_NO_PREALLOC         = linux.BPF_F_NO_PREALLOC
+	BPF_F_NUMA_NODE           = linux.BPF_F_NUMA_NODE
+	BPF_F_RDONLY              = linux.BPF_F_RDONLY
+	BPF_F_WRONLY              = linux.BPF_F_WRONLY
+	BPF_F_RDONLY_PROG         = linux.BPF_F_RDONLY_PROG
+	BPF_F_WRONLY_PROG         = linux.BPF_F_WRONLY_PROG
+	BPF_F_SLEEPABLE           = linux.BPF_F_SLEEPABLE
+	BPF_F_XDP_HAS_FRAGS       = linux.BPF_F_XDP_HAS_FRAGS
+	BPF_F_MMAPABLE            = linux.BPF_F_MMAPABLE
+	BPF_F_INNER_MAP           = linux.BPF_F_INNER_MAP
+	BPF_F_KPROBE_MULTI_RETURN = linux.BPF_F_KPROBE_MULTI_RETURN
+	BPF_OBJ_NAME_LEN          = linux.BPF_OBJ_NAME_LEN
+	BPF_TAG_SIZE              = linux.BPF_TAG_SIZE
+	BPF_RINGBUF_BUSY_BIT      = linux.BPF_RINGBUF_BUSY_BIT
+	BPF_RINGBUF_DISCARD_BIT   = linux.BPF_RINGBUF_DISCARD_BIT
+	BPF_RINGBUF_HDR_SZ        = linux.BPF_RINGBUF_HDR_SZ
+	SYS_BPF                   = linux.SYS_BPF
+	F_DUPFD_CLOEXEC           = linux.F_DUPFD_CLOEXEC
+	EPOLL_CTL_ADD             = linux.EPOLL_CTL_ADD
+	EPOLL_CLOEXEC             = linux.EPOLL_CLOEXEC
+	O_CLOEXEC                 = linux.O_CLOEXEC
+	O_NONBLOCK                = linux.O_NONBLOCK
+	PROT_NONE                 = linux.PROT_NONE
+	PROT_READ                 = linux.PROT_READ
+	PROT_WRITE                = linux.PROT_WRITE
+	MAP_ANON                  = linux.MAP_ANON
+	MAP_SHARED                = linux.MAP_SHARED
+	MAP_PRIVATE               = linux.MAP_PRIVATE
+	PERF_ATTR_SIZE_VER1       = linux.PERF_ATTR_SIZE_VER1
+	PERF_TYPE_SOFTWARE        = linux.PERF_TYPE_SOFTWARE
+	PERF_TYPE_TRACEPOINT      = linux.PERF_TYPE_TRACEPOINT
+	PERF_COUNT_SW_BPF_OUTPUT  = linux.PERF_COUNT_SW_BPF_OUTPUT
+	PERF_EVENT_IOC_DISABLE    = linux.PERF_EVENT_IOC_DISABLE
+	PERF_EVENT_IOC_ENABLE     = linux.PERF_EVENT_IOC_ENABLE
+	PERF_EVENT_IOC_SET_BPF    = linux.PERF_EVENT_IOC_SET_BPF
+	PerfBitWatermark          = linux.PerfBitWatermark
+	PerfBitWriteBackward      = linux.PerfBitWriteBackward
+	PERF_SAMPLE_RAW           = linux.PERF_SAMPLE_RAW
+	PERF_FLAG_FD_CLOEXEC      = linux.PERF_FLAG_FD_CLOEXEC
+	RLIM_INFINITY             = linux.RLIM_INFINITY
+	RLIMIT_MEMLOCK            = linux.RLIMIT_MEMLOCK
+	BPF_STATS_RUN_TIME        = linux.BPF_STATS_RUN_TIME
+	PERF_RECORD_LOST          = linux.PERF_RECORD_LOST
+	PERF_RECORD_SAMPLE        = linux.PERF_RECORD_SAMPLE
+	AT_FDCWD                  = linux.AT_FDCWD
+	RENAME_NOREPLACE          = linux.RENAME_NOREPLACE
+	SO_ATTACH_BPF             = linux.SO_ATTACH_BPF
+	SO_DETACH_BPF             = linux.SO_DETACH_BPF
+	SOL_SOCKET                = linux.SOL_SOCKET
+	SIGPROF                   = linux.SIGPROF
+	SIG_BLOCK                 = linux.SIG_BLOCK
+	SIG_UNBLOCK               = linux.SIG_UNBLOCK
+	EM_NONE                   = linux.EM_NONE
+	EM_BPF                    = linux.EM_BPF
+	BPF_FS_MAGIC              = linux.BPF_FS_MAGIC
+	TRACEFS_MAGIC             = linux.TRACEFS_MAGIC
+	DEBUGFS_MAGIC             = linux.DEBUGFS_MAGIC
+)
+
+type Statfs_t = linux.Statfs_t
+type Stat_t = linux.Stat_t
+type Rlimit = linux.Rlimit
+type Signal = linux.Signal
+type Sigset_t = linux.Sigset_t
+type PerfEventMmapPage = linux.PerfEventMmapPage
+type EpollEvent = linux.EpollEvent
+type PerfEventAttr = linux.PerfEventAttr
+type Utsname = linux.Utsname
+
+func Syscall(trap, a1, a2, a3 uintptr) (r1, r2 uintptr, err syscall.Errno) {
+	return linux.Syscall(trap, a1, a2, a3)
+}
+
+func PthreadSigmask(how int, set, oldset *Sigset_t) error {
+	return linux.PthreadSigmask(how, set, oldset)
+}
+
+func FcntlInt(fd uintptr, cmd, arg int) (int, error) {
+	return linux.FcntlInt(fd, cmd, arg)
+}
+
+func IoctlSetInt(fd int, req uint, value int) error {
+	return linux.IoctlSetInt(fd, req, value)
+}
+
+func Statfs(path string, buf *Statfs_t) (err error) {
+	return linux.Statfs(path, buf)
+}
+
+func Close(fd int) (err error) {
+	return linux.Close(fd)
+}
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	return linux.EpollWait(epfd, events, msec)
+}
+
+func EpollCtl(epfd int, op int, fd int, event *EpollEvent) (err error) {
+	return linux.EpollCtl(epfd, op, fd, event)
+}
+
+func Eventfd(initval uint, flags int) (fd int, err error) {
+	return linux.Eventfd(initval, flags)
+}
+
+func Write(fd int, p []byte) (n int, err error) {
+	return linux.Write(fd, p)
+}
+
+func EpollCreate1(flag int) (fd int, err error) {
+	return linux.EpollCreate1(flag)
+}
+
+func SetNonblock(fd int, nonblocking bool) (err error) {
+	return linux.SetNonblock(fd, nonblocking)
+}
+
+func Mmap(fd int, offset int64, length int, prot int, flags int) (data []byte, err error) {
+	return linux.Mmap(fd, offset, length, prot, flags)
+}
+
+func Munmap(b []byte) (err error) {
+	return linux.Munmap(b)
+}
+
+func PerfEventOpen(attr *PerfEventAttr, pid int, cpu int, groupFd int, flags int) (fd int, err error) {
+	return linux.PerfEventOpen(attr, pid, cpu, groupFd, flags)
+}
+
+func Uname(buf *Utsname) (err error) {
+	return linux.Uname(buf)
+}
+
+func Getpid() int {
+	return linux.Getpid()
+}
+
+func Gettid() int {
+	return linux.Gettid()
+}
+
+func Tgkill(tgid int, tid int, sig syscall.Signal) (err error) {
+	return linux.Tgkill(tgid, tid, sig)
+}
+
+func BytePtrFromString(s string) (*byte, error) {
+	return linux.BytePtrFromString(s)
+}
+
+func ByteSliceToString(s []byte) string {
+	return linux.ByteSliceToString(s)
+}
+
+func Renameat2(olddirfd int, oldpath string, newdirfd int, newpath string, flags uint) error {
+	return linux.Renameat2(olddirfd, oldpath, newdirfd, newpath, flags)
+}
+
+func Prlimit(pid, resource int, new, old *Rlimit) error {
+	return linux.Prlimit(pid, resource, new, old)
+}
+
+func Open(path string, mode int, perm uint32) (int, error) {
+	return linux.Open(path, mode, perm)
+}
+
+func Fstat(fd int, stat *Stat_t) error {
+	return linux.Fstat(fd, stat)
+}
+
+func SetsockoptInt(fd, level, opt, value int) error {
+	return linux.SetsockoptInt(fd, level, opt, value)
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/unix/types_other.go b/vendor/github.com/cilium/ebpf/internal/unix/types_other.go
new file mode 100644
index 00000000000..5e86b5052a1
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/unix/types_other.go
@@ -0,0 +1,294 @@
+//go:build !linux
+
+package unix
+
+import (
+	"fmt"
+	"runtime"
+	"syscall"
+)
+
+var errNonLinux = fmt.Errorf("unsupported platform %s/%s", runtime.GOOS, runtime.GOARCH)
+
+// Errnos are distinct and non-zero.
+const (
+	ENOENT syscall.Errno = iota + 1
+	EEXIST
+	EAGAIN
+	ENOSPC
+	EINVAL
+	EINTR
+	EPERM
+	ESRCH
+	ENODEV
+	EBADF
+	E2BIG
+	EFAULT
+	EACCES
+	EILSEQ
+	EOPNOTSUPP
+)
+
+// Constants are distinct to avoid breaking switch statements.
+const (
+	BPF_F_NO_PREALLOC = iota
+	BPF_F_NUMA_NODE
+	BPF_F_RDONLY
+	BPF_F_WRONLY
+	BPF_F_RDONLY_PROG
+	BPF_F_WRONLY_PROG
+	BPF_F_SLEEPABLE
+	BPF_F_MMAPABLE
+	BPF_F_INNER_MAP
+	BPF_F_KPROBE_MULTI_RETURN
+	BPF_F_XDP_HAS_FRAGS
+	BPF_OBJ_NAME_LEN
+	BPF_TAG_SIZE
+	BPF_RINGBUF_BUSY_BIT
+	BPF_RINGBUF_DISCARD_BIT
+	BPF_RINGBUF_HDR_SZ
+	SYS_BPF
+	F_DUPFD_CLOEXEC
+	EPOLLIN
+	EPOLL_CTL_ADD
+	EPOLL_CLOEXEC
+	O_CLOEXEC
+	O_NONBLOCK
+	PROT_NONE
+	PROT_READ
+	PROT_WRITE
+	MAP_ANON
+	MAP_SHARED
+	MAP_PRIVATE
+	PERF_ATTR_SIZE_VER1
+	PERF_TYPE_SOFTWARE
+	PERF_TYPE_TRACEPOINT
+	PERF_COUNT_SW_BPF_OUTPUT
+	PERF_EVENT_IOC_DISABLE
+	PERF_EVENT_IOC_ENABLE
+	PERF_EVENT_IOC_SET_BPF
+	PerfBitWatermark
+	PerfBitWriteBackward
+	PERF_SAMPLE_RAW
+	PERF_FLAG_FD_CLOEXEC
+	RLIM_INFINITY
+	RLIMIT_MEMLOCK
+	BPF_STATS_RUN_TIME
+	PERF_RECORD_LOST
+	PERF_RECORD_SAMPLE
+	AT_FDCWD
+	RENAME_NOREPLACE
+	SO_ATTACH_BPF
+	SO_DETACH_BPF
+	SOL_SOCKET
+	SIGPROF
+	SIG_BLOCK
+	SIG_UNBLOCK
+	EM_NONE
+	EM_BPF
+	BPF_FS_MAGIC
+	TRACEFS_MAGIC
+	DEBUGFS_MAGIC
+)
+
+type Statfs_t struct {
+	Type    int64
+	Bsize   int64
+	Blocks  uint64
+	Bfree   uint64
+	Bavail  uint64
+	Files   uint64
+	Ffree   uint64
+	Fsid    [2]int32
+	Namelen int64
+	Frsize  int64
+	Flags   int64
+	Spare   [4]int64
+}
+
+type Stat_t struct {
+	Dev     uint64
+	Ino     uint64
+	Nlink   uint64
+	Mode    uint32
+	Uid     uint32
+	Gid     uint32
+	_       int32
+	Rdev    uint64
+	Size    int64
+	Blksize int64
+	Blocks  int64
+}
+
+type Rlimit struct {
+	Cur uint64
+	Max uint64
+}
+
+type Signal int
+
+type Sigset_t struct {
+	Val [4]uint64
+}
+
+func Syscall(trap, a1, a2, a3 uintptr) (r1, r2 uintptr, err syscall.Errno) {
+	return 0, 0, syscall.ENOTSUP
+}
+
+func PthreadSigmask(how int, set, oldset *Sigset_t) error {
+	return errNonLinux
+}
+
+func FcntlInt(fd uintptr, cmd, arg int) (int, error) {
+	return -1, errNonLinux
+}
+
+func IoctlSetInt(fd int, req uint, value int) error {
+	return errNonLinux
+}
+
+func Statfs(path string, buf *Statfs_t) error {
+	return errNonLinux
+}
+
+func Close(fd int) (err error) {
+	return errNonLinux
+}
+
+type EpollEvent struct {
+	Events uint32
+	Fd     int32
+	Pad    int32
+}
+
+func EpollWait(epfd int, events []EpollEvent, msec int) (n int, err error) {
+	return 0, errNonLinux
+}
+
+func EpollCtl(epfd int, op int, fd int, event *EpollEvent) (err error) {
+	return errNonLinux
+}
+
+func Eventfd(initval uint, flags int) (fd int, err error) {
+	return 0, errNonLinux
+}
+
+func Write(fd int, p []byte) (n int, err error) {
+	return 0, errNonLinux
+}
+
+func EpollCreate1(flag int) (fd int, err error) {
+	return 0, errNonLinux
+}
+
+type PerfEventMmapPage struct {
+	Version        uint32
+	Compat_version uint32
+	Lock           uint32
+	Index          uint32
+	Offset         int64
+	Time_enabled   uint64
+	Time_running   uint64
+	Capabilities   uint64
+	Pmc_width      uint16
+	Time_shift     uint16
+	Time_mult      uint32
+	Time_offset    uint64
+	Time_zero      uint64
+	Size           uint32
+
+	Data_head   uint64
+	Data_tail   uint64
+	Data_offset uint64
+	Data_size   uint64
+	Aux_head    uint64
+	Aux_tail    uint64
+	Aux_offset  uint64
+	Aux_size    uint64
+}
+
+func SetNonblock(fd int, nonblocking bool) (err error) {
+	return errNonLinux
+}
+
+func Mmap(fd int, offset int64, length int, prot int, flags int) (data []byte, err error) {
+	return []byte{}, errNonLinux
+}
+
+func Munmap(b []byte) (err error) {
+	return errNonLinux
+}
+
+type PerfEventAttr struct {
+	Type               uint32
+	Size               uint32
+	Config             uint64
+	Sample             uint64
+	Sample_type        uint64
+	Read_format        uint64
+	Bits               uint64
+	Wakeup             uint32
+	Bp_type            uint32
+	Ext1               uint64
+	Ext2               uint64
+	Branch_sample_type uint64
+	Sample_regs_user   uint64
+	Sample_stack_user  uint32
+	Clockid            int32
+	Sample_regs_intr   uint64
+	Aux_watermark      uint32
+	Sample_max_stack   uint16
+}
+
+func PerfEventOpen(attr *PerfEventAttr, pid int, cpu int, groupFd int, flags int) (fd int, err error) {
+	return 0, errNonLinux
+}
+
+type Utsname struct {
+	Release [65]byte
+	Version [65]byte
+}
+
+func Uname(buf *Utsname) (err error) {
+	return errNonLinux
+}
+
+func Getpid() int {
+	return -1
+}
+
+func Gettid() int {
+	return -1
+}
+
+func Tgkill(tgid int, tid int, sig syscall.Signal) (err error) {
+	return errNonLinux
+}
+
+func BytePtrFromString(s string) (*byte, error) {
+	return nil, errNonLinux
+}
+
+func ByteSliceToString(s []byte) string {
+	return ""
+}
+
+func Renameat2(olddirfd int, oldpath string, newdirfd int, newpath string, flags uint) error {
+	return errNonLinux
+}
+
+func Prlimit(pid, resource int, new, old *Rlimit) error {
+	return errNonLinux
+}
+
+func Open(path string, mode int, perm uint32) (int, error) {
+	return -1, errNonLinux
+}
+
+func Fstat(fd int, stat *Stat_t) error {
+	return errNonLinux
+}
+
+func SetsockoptInt(fd, level, opt, value int) error {
+	return errNonLinux
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/vdso.go b/vendor/github.com/cilium/ebpf/internal/vdso.go
new file mode 100644
index 00000000000..10e639bf06e
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/vdso.go
@@ -0,0 +1,153 @@
+package internal
+
+import (
+	"debug/elf"
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"io"
+	"math"
+	"os"
+
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+var (
+	errAuxvNoVDSO = errors.New("no vdso address found in auxv")
+)
+
+// vdsoVersion returns the LINUX_VERSION_CODE embedded in the vDSO library
+// linked into the current process image.
+func vdsoVersion() (uint32, error) {
+	// Read data from the auxiliary vector, which is normally passed directly
+	// to the process. Go does not expose that data, so we must read it from procfs.
+	// https://man7.org/linux/man-pages/man3/getauxval.3.html
+	av, err := os.Open("/proc/self/auxv")
+	if errors.Is(err, unix.EACCES) {
+		return 0, fmt.Errorf("opening auxv: %w (process may not be dumpable due to file capabilities)", err)
+	}
+	if err != nil {
+		return 0, fmt.Errorf("opening auxv: %w", err)
+	}
+	defer av.Close()
+
+	vdsoAddr, err := vdsoMemoryAddress(av)
+	if err != nil {
+		return 0, fmt.Errorf("finding vDSO memory address: %w", err)
+	}
+
+	// Use /proc/self/mem rather than unsafe.Pointer tricks.
+	mem, err := os.Open("/proc/self/mem")
+	if err != nil {
+		return 0, fmt.Errorf("opening mem: %w", err)
+	}
+	defer mem.Close()
+
+	// Open ELF at provided memory address, as offset into /proc/self/mem.
+	c, err := vdsoLinuxVersionCode(io.NewSectionReader(mem, int64(vdsoAddr), math.MaxInt64))
+	if err != nil {
+		return 0, fmt.Errorf("reading linux version code: %w", err)
+	}
+
+	return c, nil
+}
+
+// vdsoMemoryAddress returns the memory address of the vDSO library
+// linked into the current process image. r is an io.Reader into an auxv blob.
+func vdsoMemoryAddress(r io.Reader) (uint64, error) {
+	const (
+		_AT_NULL         = 0  // End of vector
+		_AT_SYSINFO_EHDR = 33 // Offset to vDSO blob in process image
+	)
+
+	// Loop through all tag/value pairs in auxv until we find `AT_SYSINFO_EHDR`,
+	// the address of a page containing the virtual Dynamic Shared Object (vDSO).
+	aux := struct{ Tag, Val uint64 }{}
+	for {
+		if err := binary.Read(r, NativeEndian, &aux); err != nil {
+			return 0, fmt.Errorf("reading auxv entry: %w", err)
+		}
+
+		switch aux.Tag {
+		case _AT_SYSINFO_EHDR:
+			if aux.Val != 0 {
+				return aux.Val, nil
+			}
+			return 0, fmt.Errorf("invalid vDSO address in auxv")
+		// _AT_NULL is always the last tag/val pair in the aux vector
+		// and can be treated like EOF.
+		case _AT_NULL:
+			return 0, errAuxvNoVDSO
+		}
+	}
+}
+
+// format described at https://www.man7.org/linux/man-pages/man5/elf.5.html in section 'Notes (Nhdr)'
+type elfNoteHeader struct {
+	NameSize int32
+	DescSize int32
+	Type     int32
+}
+
+// vdsoLinuxVersionCode returns the LINUX_VERSION_CODE embedded in
+// the ELF notes section of the binary provided by the reader.
+func vdsoLinuxVersionCode(r io.ReaderAt) (uint32, error) {
+	hdr, err := NewSafeELFFile(r)
+	if err != nil {
+		return 0, fmt.Errorf("reading vDSO ELF: %w", err)
+	}
+
+	sections := hdr.SectionsByType(elf.SHT_NOTE)
+	if len(sections) == 0 {
+		return 0, fmt.Errorf("no note section found in vDSO ELF")
+	}
+
+	for _, sec := range sections {
+		sr := sec.Open()
+		var n elfNoteHeader
+
+		// Read notes until we find one named 'Linux'.
+		for {
+			if err := binary.Read(sr, hdr.ByteOrder, &n); err != nil {
+				if errors.Is(err, io.EOF) {
+					// We looked at all the notes in this section
+					break
+				}
+				return 0, fmt.Errorf("reading note header: %w", err)
+			}
+
+			// If a note name is defined, it follows the note header.
+			var name string
+			if n.NameSize > 0 {
+				// Read the note name, aligned to 4 bytes.
+				buf := make([]byte, Align(n.NameSize, 4))
+				if err := binary.Read(sr, hdr.ByteOrder, &buf); err != nil {
+					return 0, fmt.Errorf("reading note name: %w", err)
+				}
+
+				// Read nul-terminated string.
+				name = unix.ByteSliceToString(buf[:n.NameSize])
+			}
+
+			// If a note descriptor is defined, it follows the name.
+			// It is possible for a note to have a descriptor but not a name.
+			if n.DescSize > 0 {
+				// LINUX_VERSION_CODE is a uint32 value.
+				if name == "Linux" && n.DescSize == 4 && n.Type == 0 {
+					var version uint32
+					if err := binary.Read(sr, hdr.ByteOrder, &version); err != nil {
+						return 0, fmt.Errorf("reading note descriptor: %w", err)
+					}
+					return version, nil
+				}
+
+				// Discard the note descriptor if it exists but we're not interested in it.
+				if _, err := io.CopyN(io.Discard, sr, int64(Align(n.DescSize, 4))); err != nil {
+					return 0, err
+				}
+			}
+		}
+	}
+
+	return 0, fmt.Errorf("no Linux note in ELF")
+}
diff --git a/vendor/github.com/cilium/ebpf/internal/version.go b/vendor/github.com/cilium/ebpf/internal/version.go
new file mode 100644
index 00000000000..9b17ffb44de
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/internal/version.go
@@ -0,0 +1,106 @@
+package internal
+
+import (
+	"fmt"
+
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+const (
+	// Version constant used in ELF binaries indicating that the loader needs to
+	// substitute the eBPF program's version with the value of the kernel's
+	// KERNEL_VERSION compile-time macro. Used for compatibility with BCC, gobpf
+	// and RedSift.
+	MagicKernelVersion = 0xFFFFFFFE
+)
+
+// A Version in the form Major.Minor.Patch.
+type Version [3]uint16
+
+// NewVersion creates a version from a string like "Major.Minor.Patch".
+//
+// Patch is optional.
+func NewVersion(ver string) (Version, error) {
+	var major, minor, patch uint16
+	n, _ := fmt.Sscanf(ver, "%d.%d.%d", &major, &minor, &patch)
+	if n < 2 {
+		return Version{}, fmt.Errorf("invalid version: %s", ver)
+	}
+	return Version{major, minor, patch}, nil
+}
+
+// NewVersionFromCode creates a version from a LINUX_VERSION_CODE.
+func NewVersionFromCode(code uint32) Version {
+	return Version{
+		uint16(uint8(code >> 16)),
+		uint16(uint8(code >> 8)),
+		uint16(uint8(code)),
+	}
+}
+
+func (v Version) String() string {
+	if v[2] == 0 {
+		return fmt.Sprintf("v%d.%d", v[0], v[1])
+	}
+	return fmt.Sprintf("v%d.%d.%d", v[0], v[1], v[2])
+}
+
+// Less returns true if the version is less than another version.
+func (v Version) Less(other Version) bool {
+	for i, a := range v {
+		if a == other[i] {
+			continue
+		}
+		return a < other[i]
+	}
+	return false
+}
+
+// Unspecified returns true if the version is all zero.
+func (v Version) Unspecified() bool {
+	return v[0] == 0 && v[1] == 0 && v[2] == 0
+}
+
+// Kernel implements the kernel's KERNEL_VERSION macro from linux/version.h.
+// It represents the kernel version and patch level as a single value.
+func (v Version) Kernel() uint32 {
+
+	// Kernels 4.4 and 4.9 have their SUBLEVEL clamped to 255 to avoid
+	// overflowing into PATCHLEVEL.
+	// See kernel commit 9b82f13e7ef3 ("kbuild: clamp SUBLEVEL to 255").
+	s := v[2]
+	if s > 255 {
+		s = 255
+	}
+
+	// Truncate members to uint8 to prevent them from spilling over into
+	// each other when overflowing 8 bits.
+	return uint32(uint8(v[0]))<<16 | uint32(uint8(v[1]))<<8 | uint32(uint8(s))
+}
+
+// KernelVersion returns the version of the currently running kernel.
+var KernelVersion = Memoize(func() (Version, error) {
+	return detectKernelVersion()
+})
+
+// detectKernelVersion returns the version of the running kernel.
+func detectKernelVersion() (Version, error) {
+	vc, err := vdsoVersion()
+	if err != nil {
+		return Version{}, err
+	}
+	return NewVersionFromCode(vc), nil
+}
+
+// KernelRelease returns the release string of the running kernel.
+// Its format depends on the Linux distribution and corresponds to directory
+// names in /lib/modules by convention. Some examples are 5.15.17-1-lts and
+// 4.19.0-16-amd64.
+func KernelRelease() (string, error) {
+	var uname unix.Utsname
+	if err := unix.Uname(&uname); err != nil {
+		return "", fmt.Errorf("uname failed: %w", err)
+	}
+
+	return unix.ByteSliceToString(uname.Release[:]), nil
+}
diff --git a/vendor/github.com/cilium/ebpf/link/cgroup.go b/vendor/github.com/cilium/ebpf/link/cgroup.go
new file mode 100644
index 00000000000..58e85fe9d47
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/cgroup.go
@@ -0,0 +1,190 @@
+package link
+
+import (
+	"errors"
+	"fmt"
+	"os"
+
+	"github.com/cilium/ebpf"
+)
+
+type cgroupAttachFlags uint32
+
+const (
+	// Allow programs attached to sub-cgroups to override the verdict of this
+	// program.
+	flagAllowOverride cgroupAttachFlags = 1 << iota
+	// Allow attaching multiple programs to the cgroup. Only works if the cgroup
+	// has zero or more programs attached using the Multi flag. Implies override.
+	flagAllowMulti
+	// Set automatically by progAttachCgroup.Update(). Used for updating a
+	// specific given program attached in multi-mode.
+	flagReplace
+)
+
+type CgroupOptions struct {
+	// Path to a cgroupv2 folder.
+	Path string
+	// One of the AttachCgroup* constants
+	Attach ebpf.AttachType
+	// Program must be of type CGroup*, and the attach type must match Attach.
+	Program *ebpf.Program
+}
+
+// AttachCgroup links a BPF program to a cgroup.
+//
+// If the running kernel doesn't support bpf_link, attempts to emulate its
+// semantics using the legacy PROG_ATTACH mechanism. If bpf_link is not
+// available, the returned [Link] will not support pinning to bpffs.
+//
+// If you need more control over attachment flags or the attachment mechanism
+// used, look at [RawAttachProgram] and [AttachRawLink] instead.
+func AttachCgroup(opts CgroupOptions) (cg Link, err error) {
+	cgroup, err := os.Open(opts.Path)
+	if err != nil {
+		return nil, fmt.Errorf("can't open cgroup: %s", err)
+	}
+	defer func() {
+		if _, ok := cg.(*progAttachCgroup); ok {
+			// Skip closing the cgroup handle if we return a valid progAttachCgroup,
+			// where the handle is retained to implement Update().
+			return
+		}
+		cgroup.Close()
+	}()
+
+	cg, err = newLinkCgroup(cgroup, opts.Attach, opts.Program)
+	if err == nil {
+		return cg, nil
+	}
+
+	if errors.Is(err, ErrNotSupported) {
+		cg, err = newProgAttachCgroup(cgroup, opts.Attach, opts.Program, flagAllowMulti)
+	}
+	if errors.Is(err, ErrNotSupported) {
+		cg, err = newProgAttachCgroup(cgroup, opts.Attach, opts.Program, flagAllowOverride)
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	return cg, nil
+}
+
+type progAttachCgroup struct {
+	cgroup     *os.File
+	current    *ebpf.Program
+	attachType ebpf.AttachType
+	flags      cgroupAttachFlags
+}
+
+var _ Link = (*progAttachCgroup)(nil)
+
+func (cg *progAttachCgroup) isLink() {}
+
+// newProgAttachCgroup attaches prog to cgroup using BPF_PROG_ATTACH.
+// cgroup and prog are retained by [progAttachCgroup].
+func newProgAttachCgroup(cgroup *os.File, attach ebpf.AttachType, prog *ebpf.Program, flags cgroupAttachFlags) (*progAttachCgroup, error) {
+	if flags&flagAllowMulti > 0 {
+		if err := haveProgAttachReplace(); err != nil {
+			return nil, fmt.Errorf("can't support multiple programs: %w", err)
+		}
+	}
+
+	// Use a program handle that cannot be closed by the caller.
+	clone, err := prog.Clone()
+	if err != nil {
+		return nil, err
+	}
+
+	err = RawAttachProgram(RawAttachProgramOptions{
+		Target:  int(cgroup.Fd()),
+		Program: clone,
+		Flags:   uint32(flags),
+		Attach:  attach,
+	})
+	if err != nil {
+		clone.Close()
+		return nil, fmt.Errorf("cgroup: %w", err)
+	}
+
+	return &progAttachCgroup{cgroup, clone, attach, flags}, nil
+}
+
+func (cg *progAttachCgroup) Close() error {
+	defer cg.cgroup.Close()
+	defer cg.current.Close()
+
+	err := RawDetachProgram(RawDetachProgramOptions{
+		Target:  int(cg.cgroup.Fd()),
+		Program: cg.current,
+		Attach:  cg.attachType,
+	})
+	if err != nil {
+		return fmt.Errorf("close cgroup: %s", err)
+	}
+	return nil
+}
+
+func (cg *progAttachCgroup) Update(prog *ebpf.Program) error {
+	new, err := prog.Clone()
+	if err != nil {
+		return err
+	}
+
+	args := RawAttachProgramOptions{
+		Target:  int(cg.cgroup.Fd()),
+		Program: prog,
+		Attach:  cg.attachType,
+		Flags:   uint32(cg.flags),
+	}
+
+	if cg.flags&flagAllowMulti > 0 {
+		// Atomically replacing multiple programs requires at least
+		// 5.5 (commit 7dd68b3279f17921 "bpf: Support replacing cgroup-bpf
+		// program in MULTI mode")
+		args.Flags |= uint32(flagReplace)
+		args.Replace = cg.current
+	}
+
+	if err := RawAttachProgram(args); err != nil {
+		new.Close()
+		return fmt.Errorf("can't update cgroup: %s", err)
+	}
+
+	cg.current.Close()
+	cg.current = new
+	return nil
+}
+
+func (cg *progAttachCgroup) Pin(string) error {
+	return fmt.Errorf("can't pin cgroup: %w", ErrNotSupported)
+}
+
+func (cg *progAttachCgroup) Unpin() error {
+	return fmt.Errorf("can't unpin cgroup: %w", ErrNotSupported)
+}
+
+func (cg *progAttachCgroup) Info() (*Info, error) {
+	return nil, fmt.Errorf("can't get cgroup info: %w", ErrNotSupported)
+}
+
+type linkCgroup struct {
+	RawLink
+}
+
+var _ Link = (*linkCgroup)(nil)
+
+// newLinkCgroup attaches prog to cgroup using BPF_LINK_CREATE.
+func newLinkCgroup(cgroup *os.File, attach ebpf.AttachType, prog *ebpf.Program) (*linkCgroup, error) {
+	link, err := AttachRawLink(RawLinkOptions{
+		Target:  int(cgroup.Fd()),
+		Program: prog,
+		Attach:  attach,
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	return &linkCgroup{*link}, err
+}
diff --git a/vendor/github.com/cilium/ebpf/link/doc.go b/vendor/github.com/cilium/ebpf/link/doc.go
new file mode 100644
index 00000000000..2bde35ed7a2
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/doc.go
@@ -0,0 +1,2 @@
+// Package link allows attaching eBPF programs to various kernel hooks.
+package link
diff --git a/vendor/github.com/cilium/ebpf/link/iter.go b/vendor/github.com/cilium/ebpf/link/iter.go
new file mode 100644
index 00000000000..d2b32ef331c
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/iter.go
@@ -0,0 +1,85 @@
+package link
+
+import (
+	"fmt"
+	"io"
+	"unsafe"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/internal/sys"
+)
+
+type IterOptions struct {
+	// Program must be of type Tracing with attach type
+	// AttachTraceIter. The kind of iterator to attach to is
+	// determined at load time via the AttachTo field.
+	//
+	// AttachTo requires the kernel to include BTF of itself,
+	// and it to be compiled with a recent pahole (>= 1.16).
+	Program *ebpf.Program
+
+	// Map specifies the target map for bpf_map_elem and sockmap iterators.
+	// It may be nil.
+	Map *ebpf.Map
+}
+
+// AttachIter attaches a BPF seq_file iterator.
+func AttachIter(opts IterOptions) (*Iter, error) {
+	if err := haveBPFLink(); err != nil {
+		return nil, err
+	}
+
+	progFd := opts.Program.FD()
+	if progFd < 0 {
+		return nil, fmt.Errorf("invalid program: %s", sys.ErrClosedFd)
+	}
+
+	var info bpfIterLinkInfoMap
+	if opts.Map != nil {
+		mapFd := opts.Map.FD()
+		if mapFd < 0 {
+			return nil, fmt.Errorf("invalid map: %w", sys.ErrClosedFd)
+		}
+		info.map_fd = uint32(mapFd)
+	}
+
+	attr := sys.LinkCreateIterAttr{
+		ProgFd:      uint32(progFd),
+		AttachType:  sys.AttachType(ebpf.AttachTraceIter),
+		IterInfo:    sys.NewPointer(unsafe.Pointer(&info)),
+		IterInfoLen: uint32(unsafe.Sizeof(info)),
+	}
+
+	fd, err := sys.LinkCreateIter(&attr)
+	if err != nil {
+		return nil, fmt.Errorf("can't link iterator: %w", err)
+	}
+
+	return &Iter{RawLink{fd, ""}}, err
+}
+
+// Iter represents an attached bpf_iter.
+type Iter struct {
+	RawLink
+}
+
+// Open creates a new instance of the iterator.
+//
+// Reading from the returned reader triggers the BPF program.
+func (it *Iter) Open() (io.ReadCloser, error) {
+	attr := &sys.IterCreateAttr{
+		LinkFd: it.fd.Uint(),
+	}
+
+	fd, err := sys.IterCreate(attr)
+	if err != nil {
+		return nil, fmt.Errorf("can't create iterator: %w", err)
+	}
+
+	return fd.File("bpf_iter"), nil
+}
+
+// union bpf_iter_link_info.map
+type bpfIterLinkInfoMap struct {
+	map_fd uint32
+}
diff --git a/vendor/github.com/cilium/ebpf/link/kprobe.go b/vendor/github.com/cilium/ebpf/link/kprobe.go
new file mode 100644
index 00000000000..b54ca908533
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/kprobe.go
@@ -0,0 +1,357 @@
+package link
+
+import (
+	"errors"
+	"fmt"
+	"os"
+	"runtime"
+	"strings"
+	"unsafe"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/tracefs"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// KprobeOptions defines additional parameters that will be used
+// when loading Kprobes.
+type KprobeOptions struct {
+	// Arbitrary value that can be fetched from an eBPF program
+	// via `bpf_get_attach_cookie()`.
+	//
+	// Needs kernel 5.15+.
+	Cookie uint64
+	// Offset of the kprobe relative to the traced symbol.
+	// Can be used to insert kprobes at arbitrary offsets in kernel functions,
+	// e.g. in places where functions have been inlined.
+	Offset uint64
+	// Increase the maximum number of concurrent invocations of a kretprobe.
+	// Required when tracing some long running functions in the kernel.
+	//
+	// Deprecated: this setting forces the use of an outdated kernel API and is not portable
+	// across kernel versions.
+	RetprobeMaxActive int
+	// Prefix used for the event name if the kprobe must be attached using tracefs.
+	// The group name will be formatted as `<prefix>_<randomstr>`.
+	// The default empty string is equivalent to "ebpf" as the prefix.
+	TraceFSPrefix string
+}
+
+func (ko *KprobeOptions) cookie() uint64 {
+	if ko == nil {
+		return 0
+	}
+	return ko.Cookie
+}
+
+// Kprobe attaches the given eBPF program to a perf event that fires when the
+// given kernel symbol starts executing. See /proc/kallsyms for available
+// symbols. For example, printk():
+//
+//	kp, err := Kprobe("printk", prog, nil)
+//
+// Losing the reference to the resulting Link (kp) will close the Kprobe
+// and prevent further execution of prog. The Link must be Closed during
+// program shutdown to avoid leaking system resources.
+//
+// If attaching to symbol fails, automatically retries with the running
+// platform's syscall prefix (e.g. __x64_) to support attaching to syscalls
+// in a portable fashion.
+func Kprobe(symbol string, prog *ebpf.Program, opts *KprobeOptions) (Link, error) {
+	k, err := kprobe(symbol, prog, opts, false)
+	if err != nil {
+		return nil, err
+	}
+
+	lnk, err := attachPerfEvent(k, prog, opts.cookie())
+	if err != nil {
+		k.Close()
+		return nil, err
+	}
+
+	return lnk, nil
+}
+
+// Kretprobe attaches the given eBPF program to a perf event that fires right
+// before the given kernel symbol exits, with the function stack left intact.
+// See /proc/kallsyms for available symbols. For example, printk():
+//
+//	kp, err := Kretprobe("printk", prog, nil)
+//
+// Losing the reference to the resulting Link (kp) will close the Kretprobe
+// and prevent further execution of prog. The Link must be Closed during
+// program shutdown to avoid leaking system resources.
+//
+// If attaching to symbol fails, automatically retries with the running
+// platform's syscall prefix (e.g. __x64_) to support attaching to syscalls
+// in a portable fashion.
+//
+// On kernels 5.10 and earlier, setting a kretprobe on a nonexistent symbol
+// incorrectly returns unix.EINVAL instead of os.ErrNotExist.
+func Kretprobe(symbol string, prog *ebpf.Program, opts *KprobeOptions) (Link, error) {
+	k, err := kprobe(symbol, prog, opts, true)
+	if err != nil {
+		return nil, err
+	}
+
+	lnk, err := attachPerfEvent(k, prog, opts.cookie())
+	if err != nil {
+		k.Close()
+		return nil, err
+	}
+
+	return lnk, nil
+}
+
+// isValidKprobeSymbol implements the equivalent of a regex match
+// against "^[a-zA-Z_][0-9a-zA-Z_.]*$".
+func isValidKprobeSymbol(s string) bool {
+	if len(s) < 1 {
+		return false
+	}
+
+	for i, c := range []byte(s) {
+		switch {
+		case c >= 'a' && c <= 'z':
+		case c >= 'A' && c <= 'Z':
+		case c == '_':
+		case i > 0 && c >= '0' && c <= '9':
+
+		// Allow `.` in symbol name. GCC-compiled kernel may change symbol name
+		// to have a `.isra.$n` suffix, like `udp_send_skb.isra.52`.
+		// See: https://gcc.gnu.org/gcc-10/changes.html
+		case i > 0 && c == '.':
+
+		default:
+			return false
+		}
+	}
+
+	return true
+}
+
+// kprobe opens a perf event on the given symbol and attaches prog to it.
+// If ret is true, create a kretprobe.
+func kprobe(symbol string, prog *ebpf.Program, opts *KprobeOptions, ret bool) (*perfEvent, error) {
+	if symbol == "" {
+		return nil, fmt.Errorf("symbol name cannot be empty: %w", errInvalidInput)
+	}
+	if prog == nil {
+		return nil, fmt.Errorf("prog cannot be nil: %w", errInvalidInput)
+	}
+	if !isValidKprobeSymbol(symbol) {
+		return nil, fmt.Errorf("symbol '%s' must be a valid symbol in /proc/kallsyms: %w", symbol, errInvalidInput)
+	}
+	if prog.Type() != ebpf.Kprobe {
+		return nil, fmt.Errorf("eBPF program type %s is not a Kprobe: %w", prog.Type(), errInvalidInput)
+	}
+
+	args := tracefs.ProbeArgs{
+		Type:   tracefs.Kprobe,
+		Pid:    perfAllThreads,
+		Symbol: symbol,
+		Ret:    ret,
+	}
+
+	if opts != nil {
+		args.RetprobeMaxActive = opts.RetprobeMaxActive
+		args.Cookie = opts.Cookie
+		args.Offset = opts.Offset
+		args.Group = opts.TraceFSPrefix
+	}
+
+	// Use kprobe PMU if the kernel has it available.
+	tp, err := pmuProbe(args)
+	if errors.Is(err, os.ErrNotExist) || errors.Is(err, unix.EINVAL) {
+		if prefix := internal.PlatformPrefix(); prefix != "" {
+			args.Symbol = prefix + symbol
+			tp, err = pmuProbe(args)
+		}
+	}
+	if err == nil {
+		return tp, nil
+	}
+	if err != nil && !errors.Is(err, ErrNotSupported) {
+		return nil, fmt.Errorf("creating perf_kprobe PMU (arch-specific fallback for %q): %w", symbol, err)
+	}
+
+	// Use tracefs if kprobe PMU is missing.
+	args.Symbol = symbol
+	tp, err = tracefsProbe(args)
+	if errors.Is(err, os.ErrNotExist) || errors.Is(err, unix.EINVAL) {
+		if prefix := internal.PlatformPrefix(); prefix != "" {
+			args.Symbol = prefix + symbol
+			tp, err = tracefsProbe(args)
+		}
+	}
+	if err != nil {
+		return nil, fmt.Errorf("creating tracefs event (arch-specific fallback for %q): %w", symbol, err)
+	}
+
+	return tp, nil
+}
+
+// pmuProbe opens a perf event based on a Performance Monitoring Unit.
+//
+// Requires at least a 4.17 kernel.
+// e12f03d7031a "perf/core: Implement the 'perf_kprobe' PMU"
+// 33ea4b24277b "perf/core: Implement the 'perf_uprobe' PMU"
+//
+// Returns ErrNotSupported if the kernel doesn't support perf_[k,u]probe PMU
+func pmuProbe(args tracefs.ProbeArgs) (*perfEvent, error) {
+	// Getting the PMU type will fail if the kernel doesn't support
+	// the perf_[k,u]probe PMU.
+	eventType, err := internal.ReadUint64FromFileOnce("%d\n", "/sys/bus/event_source/devices", args.Type.String(), "type")
+	if errors.Is(err, os.ErrNotExist) {
+		return nil, fmt.Errorf("%s: %w", args.Type, ErrNotSupported)
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	// Use tracefs if we want to set kretprobe's retprobeMaxActive.
+	if args.RetprobeMaxActive != 0 {
+		return nil, fmt.Errorf("pmu probe: non-zero retprobeMaxActive: %w", ErrNotSupported)
+	}
+
+	var config uint64
+	if args.Ret {
+		bit, err := internal.ReadUint64FromFileOnce("config:%d\n", "/sys/bus/event_source/devices", args.Type.String(), "/format/retprobe")
+		if err != nil {
+			return nil, err
+		}
+		config |= 1 << bit
+	}
+
+	var (
+		attr  unix.PerfEventAttr
+		sp    unsafe.Pointer
+		token string
+	)
+	switch args.Type {
+	case tracefs.Kprobe:
+		// Create a pointer to a NUL-terminated string for the kernel.
+		sp, err = unsafeStringPtr(args.Symbol)
+		if err != nil {
+			return nil, err
+		}
+
+		token = tracefs.KprobeToken(args)
+
+		attr = unix.PerfEventAttr{
+			// The minimum size required for PMU kprobes is PERF_ATTR_SIZE_VER1,
+			// since it added the config2 (Ext2) field. Use Ext2 as probe_offset.
+			Size:   unix.PERF_ATTR_SIZE_VER1,
+			Type:   uint32(eventType),   // PMU event type read from sysfs
+			Ext1:   uint64(uintptr(sp)), // Kernel symbol to trace
+			Ext2:   args.Offset,         // Kernel symbol offset
+			Config: config,              // Retprobe flag
+		}
+	case tracefs.Uprobe:
+		sp, err = unsafeStringPtr(args.Path)
+		if err != nil {
+			return nil, err
+		}
+
+		if args.RefCtrOffset != 0 {
+			config |= args.RefCtrOffset << uprobeRefCtrOffsetShift
+		}
+
+		token = tracefs.UprobeToken(args)
+
+		attr = unix.PerfEventAttr{
+			// The minimum size required for PMU uprobes is PERF_ATTR_SIZE_VER1,
+			// since it added the config2 (Ext2) field. The Size field controls the
+			// size of the internal buffer the kernel allocates for reading the
+			// perf_event_attr argument from userspace.
+			Size:   unix.PERF_ATTR_SIZE_VER1,
+			Type:   uint32(eventType),   // PMU event type read from sysfs
+			Ext1:   uint64(uintptr(sp)), // Uprobe path
+			Ext2:   args.Offset,         // Uprobe offset
+			Config: config,              // RefCtrOffset, Retprobe flag
+		}
+	}
+
+	rawFd, err := unix.PerfEventOpen(&attr, args.Pid, 0, -1, unix.PERF_FLAG_FD_CLOEXEC)
+
+	// On some old kernels, kprobe PMU doesn't allow `.` in symbol names and
+	// return -EINVAL. Return ErrNotSupported to allow falling back to tracefs.
+	// https://github.com/torvalds/linux/blob/94710cac0ef4/kernel/trace/trace_kprobe.c#L340-L343
+	if errors.Is(err, unix.EINVAL) && strings.Contains(args.Symbol, ".") {
+		return nil, fmt.Errorf("token %s: older kernels don't accept dots: %w", token, ErrNotSupported)
+	}
+	// Since commit 97c753e62e6c, ENOENT is correctly returned instead of EINVAL
+	// when trying to create a retprobe for a missing symbol.
+	if errors.Is(err, os.ErrNotExist) {
+		return nil, fmt.Errorf("token %s: not found: %w", token, err)
+	}
+	// Since commit ab105a4fb894, EILSEQ is returned when a kprobe sym+offset is resolved
+	// to an invalid insn boundary. The exact conditions that trigger this error are
+	// arch specific however.
+	if errors.Is(err, unix.EILSEQ) {
+		return nil, fmt.Errorf("token %s: bad insn boundary: %w", token, os.ErrNotExist)
+	}
+	// Since at least commit cb9a19fe4aa51, ENOTSUPP is returned
+	// when attempting to set a uprobe on a trap instruction.
+	if errors.Is(err, sys.ENOTSUPP) {
+		return nil, fmt.Errorf("token %s: failed setting uprobe on offset %#x (possible trap insn): %w", token, args.Offset, err)
+	}
+
+	if err != nil {
+		return nil, fmt.Errorf("token %s: opening perf event: %w", token, err)
+	}
+
+	// Ensure the string pointer is not collected before PerfEventOpen returns.
+	runtime.KeepAlive(sp)
+
+	fd, err := sys.NewFD(rawFd)
+	if err != nil {
+		return nil, err
+	}
+
+	// Kernel has perf_[k,u]probe PMU available, initialize perf event.
+	return newPerfEvent(fd, nil), nil
+}
+
+// tracefsProbe creates a trace event by writing an entry to <tracefs>/[k,u]probe_events.
+// A new trace event group name is generated on every call to support creating
+// multiple trace events for the same kernel or userspace symbol.
+// Path and offset are only set in the case of uprobe(s) and are used to set
+// the executable/library path on the filesystem and the offset where the probe is inserted.
+// A perf event is then opened on the newly-created trace event and returned to the caller.
+func tracefsProbe(args tracefs.ProbeArgs) (*perfEvent, error) {
+	groupPrefix := "ebpf"
+	if args.Group != "" {
+		groupPrefix = args.Group
+	}
+
+	// Generate a random string for each trace event we attempt to create.
+	// This value is used as the 'group' token in tracefs to allow creating
+	// multiple kprobe trace events with the same name.
+	group, err := tracefs.RandomGroup(groupPrefix)
+	if err != nil {
+		return nil, fmt.Errorf("randomizing group name: %w", err)
+	}
+	args.Group = group
+
+	// Create the [k,u]probe trace event using tracefs.
+	evt, err := tracefs.NewEvent(args)
+	if err != nil {
+		return nil, fmt.Errorf("creating probe entry on tracefs: %w", err)
+	}
+
+	// Kprobes are ephemeral tracepoints and share the same perf event type.
+	fd, err := openTracepointPerfEvent(evt.ID(), args.Pid)
+	if err != nil {
+		// Make sure we clean up the created tracefs event when we return error.
+		// If a livepatch handler is already active on the symbol, the write to
+		// tracefs will succeed, a trace event will show up, but creating the
+		// perf event will fail with EBUSY.
+		_ = evt.Close()
+		return nil, err
+	}
+
+	return newPerfEvent(fd, evt), nil
+}
diff --git a/vendor/github.com/cilium/ebpf/link/kprobe_multi.go b/vendor/github.com/cilium/ebpf/link/kprobe_multi.go
new file mode 100644
index 00000000000..697c6d7362a
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/kprobe_multi.go
@@ -0,0 +1,180 @@
+package link
+
+import (
+	"errors"
+	"fmt"
+	"os"
+	"unsafe"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// KprobeMultiOptions defines additional parameters that will be used
+// when opening a KprobeMulti Link.
+type KprobeMultiOptions struct {
+	// Symbols takes a list of kernel symbol names to attach an ebpf program to.
+	//
+	// Mutually exclusive with Addresses.
+	Symbols []string
+
+	// Addresses takes a list of kernel symbol addresses in case they can not
+	// be referred to by name.
+	//
+	// Note that only start addresses can be specified, since the fprobe API
+	// limits the attach point to the function entry or return.
+	//
+	// Mutually exclusive with Symbols.
+	Addresses []uintptr
+
+	// Cookies specifies arbitrary values that can be fetched from an eBPF
+	// program via `bpf_get_attach_cookie()`.
+	//
+	// If set, its length should be equal to the length of Symbols or Addresses.
+	// Each Cookie is assigned to the Symbol or Address specified at the
+	// corresponding slice index.
+	Cookies []uint64
+}
+
+// KprobeMulti attaches the given eBPF program to the entry point of a given set
+// of kernel symbols.
+//
+// The difference with Kprobe() is that multi-kprobe accomplishes this in a
+// single system call, making it significantly faster than attaching many
+// probes one at a time.
+//
+// Requires at least Linux 5.18.
+func KprobeMulti(prog *ebpf.Program, opts KprobeMultiOptions) (Link, error) {
+	return kprobeMulti(prog, opts, 0)
+}
+
+// KretprobeMulti attaches the given eBPF program to the return point of a given
+// set of kernel symbols.
+//
+// The difference with Kretprobe() is that multi-kprobe accomplishes this in a
+// single system call, making it significantly faster than attaching many
+// probes one at a time.
+//
+// Requires at least Linux 5.18.
+func KretprobeMulti(prog *ebpf.Program, opts KprobeMultiOptions) (Link, error) {
+	return kprobeMulti(prog, opts, unix.BPF_F_KPROBE_MULTI_RETURN)
+}
+
+func kprobeMulti(prog *ebpf.Program, opts KprobeMultiOptions, flags uint32) (Link, error) {
+	if prog == nil {
+		return nil, errors.New("cannot attach a nil program")
+	}
+
+	syms := uint32(len(opts.Symbols))
+	addrs := uint32(len(opts.Addresses))
+	cookies := uint32(len(opts.Cookies))
+
+	if syms == 0 && addrs == 0 {
+		return nil, fmt.Errorf("one of Symbols or Addresses is required: %w", errInvalidInput)
+	}
+	if syms != 0 && addrs != 0 {
+		return nil, fmt.Errorf("Symbols and Addresses are mutually exclusive: %w", errInvalidInput)
+	}
+	if cookies > 0 && cookies != syms && cookies != addrs {
+		return nil, fmt.Errorf("Cookies must be exactly Symbols or Addresses in length: %w", errInvalidInput)
+	}
+
+	if err := haveBPFLinkKprobeMulti(); err != nil {
+		return nil, err
+	}
+
+	attr := &sys.LinkCreateKprobeMultiAttr{
+		ProgFd:           uint32(prog.FD()),
+		AttachType:       sys.BPF_TRACE_KPROBE_MULTI,
+		KprobeMultiFlags: flags,
+	}
+
+	switch {
+	case syms != 0:
+		attr.Count = syms
+		attr.Syms = sys.NewStringSlicePointer(opts.Symbols)
+
+	case addrs != 0:
+		attr.Count = addrs
+		attr.Addrs = sys.NewPointer(unsafe.Pointer(&opts.Addresses[0]))
+	}
+
+	if cookies != 0 {
+		attr.Cookies = sys.NewPointer(unsafe.Pointer(&opts.Cookies[0]))
+	}
+
+	fd, err := sys.LinkCreateKprobeMulti(attr)
+	if errors.Is(err, unix.ESRCH) {
+		return nil, fmt.Errorf("couldn't find one or more symbols: %w", os.ErrNotExist)
+	}
+	if errors.Is(err, unix.EINVAL) {
+		return nil, fmt.Errorf("%w (missing kernel symbol or prog's AttachType not AttachTraceKprobeMulti?)", err)
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	return &kprobeMultiLink{RawLink{fd, ""}}, nil
+}
+
+type kprobeMultiLink struct {
+	RawLink
+}
+
+var _ Link = (*kprobeMultiLink)(nil)
+
+func (kml *kprobeMultiLink) Update(prog *ebpf.Program) error {
+	return fmt.Errorf("update kprobe_multi: %w", ErrNotSupported)
+}
+
+func (kml *kprobeMultiLink) Pin(string) error {
+	return fmt.Errorf("pin kprobe_multi: %w", ErrNotSupported)
+}
+
+func (kml *kprobeMultiLink) Unpin() error {
+	return fmt.Errorf("unpin kprobe_multi: %w", ErrNotSupported)
+}
+
+var haveBPFLinkKprobeMulti = internal.NewFeatureTest("bpf_link_kprobe_multi", "5.18", func() error {
+	prog, err := ebpf.NewProgram(&ebpf.ProgramSpec{
+		Name: "probe_kpm_link",
+		Type: ebpf.Kprobe,
+		Instructions: asm.Instructions{
+			asm.Mov.Imm(asm.R0, 0),
+			asm.Return(),
+		},
+		AttachType: ebpf.AttachTraceKprobeMulti,
+		License:    "MIT",
+	})
+	if errors.Is(err, unix.E2BIG) {
+		// Kernel doesn't support AttachType field.
+		return internal.ErrNotSupported
+	}
+	if err != nil {
+		return err
+	}
+	defer prog.Close()
+
+	fd, err := sys.LinkCreateKprobeMulti(&sys.LinkCreateKprobeMultiAttr{
+		ProgFd:     uint32(prog.FD()),
+		AttachType: sys.BPF_TRACE_KPROBE_MULTI,
+		Count:      1,
+		Syms:       sys.NewStringSlicePointer([]string{"vprintk"}),
+	})
+	switch {
+	case errors.Is(err, unix.EINVAL):
+		return internal.ErrNotSupported
+	// If CONFIG_FPROBE isn't set.
+	case errors.Is(err, unix.EOPNOTSUPP):
+		return internal.ErrNotSupported
+	case err != nil:
+		return err
+	}
+
+	fd.Close()
+
+	return nil
+})
diff --git a/vendor/github.com/cilium/ebpf/link/link.go b/vendor/github.com/cilium/ebpf/link/link.go
new file mode 100644
index 00000000000..36acd6ee4b9
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/link.go
@@ -0,0 +1,336 @@
+package link
+
+import (
+	"bytes"
+	"encoding/binary"
+	"fmt"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/btf"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+)
+
+var ErrNotSupported = internal.ErrNotSupported
+
+// Link represents a Program attached to a BPF hook.
+type Link interface {
+	// Replace the current program with a new program.
+	//
+	// Passing a nil program is an error. May return an error wrapping ErrNotSupported.
+	Update(*ebpf.Program) error
+
+	// Persist a link by pinning it into a bpffs.
+	//
+	// May return an error wrapping ErrNotSupported.
+	Pin(string) error
+
+	// Undo a previous call to Pin.
+	//
+	// May return an error wrapping ErrNotSupported.
+	Unpin() error
+
+	// Close frees resources.
+	//
+	// The link will be broken unless it has been successfully pinned.
+	// A link may continue past the lifetime of the process if Close is
+	// not called.
+	Close() error
+
+	// Info returns metadata on a link.
+	//
+	// May return an error wrapping ErrNotSupported.
+	Info() (*Info, error)
+
+	// Prevent external users from implementing this interface.
+	isLink()
+}
+
+// NewLinkFromFD creates a link from a raw fd.
+//
+// You should not use fd after calling this function.
+func NewLinkFromFD(fd int) (Link, error) {
+	sysFD, err := sys.NewFD(fd)
+	if err != nil {
+		return nil, err
+	}
+
+	return wrapRawLink(&RawLink{fd: sysFD})
+}
+
+// LoadPinnedLink loads a link that was persisted into a bpffs.
+func LoadPinnedLink(fileName string, opts *ebpf.LoadPinOptions) (Link, error) {
+	raw, err := loadPinnedRawLink(fileName, opts)
+	if err != nil {
+		return nil, err
+	}
+
+	return wrapRawLink(raw)
+}
+
+// wrap a RawLink in a more specific type if possible.
+//
+// The function takes ownership of raw and closes it on error.
+func wrapRawLink(raw *RawLink) (_ Link, err error) {
+	defer func() {
+		if err != nil {
+			raw.Close()
+		}
+	}()
+
+	info, err := raw.Info()
+	if err != nil {
+		return nil, err
+	}
+
+	switch info.Type {
+	case RawTracepointType:
+		return &rawTracepoint{*raw}, nil
+	case TracingType:
+		return &tracing{*raw}, nil
+	case CgroupType:
+		return &linkCgroup{*raw}, nil
+	case IterType:
+		return &Iter{*raw}, nil
+	case NetNsType:
+		return &NetNsLink{*raw}, nil
+	case KprobeMultiType:
+		return &kprobeMultiLink{*raw}, nil
+	case PerfEventType:
+		return nil, fmt.Errorf("recovering perf event fd: %w", ErrNotSupported)
+	default:
+		return raw, nil
+	}
+}
+
+// ID uniquely identifies a BPF link.
+type ID = sys.LinkID
+
+// RawLinkOptions control the creation of a raw link.
+type RawLinkOptions struct {
+	// File descriptor to attach to. This differs for each attach type.
+	Target int
+	// Program to attach.
+	Program *ebpf.Program
+	// Attach must match the attach type of Program.
+	Attach ebpf.AttachType
+	// BTF is the BTF of the attachment target.
+	BTF btf.TypeID
+	// Flags control the attach behaviour.
+	Flags uint32
+}
+
+// Info contains metadata on a link.
+type Info struct {
+	Type    Type
+	ID      ID
+	Program ebpf.ProgramID
+	extra   interface{}
+}
+
+type TracingInfo sys.TracingLinkInfo
+type CgroupInfo sys.CgroupLinkInfo
+type NetNsInfo sys.NetNsLinkInfo
+type XDPInfo sys.XDPLinkInfo
+
+// Tracing returns tracing type-specific link info.
+//
+// Returns nil if the type-specific link info isn't available.
+func (r Info) Tracing() *TracingInfo {
+	e, _ := r.extra.(*TracingInfo)
+	return e
+}
+
+// Cgroup returns cgroup type-specific link info.
+//
+// Returns nil if the type-specific link info isn't available.
+func (r Info) Cgroup() *CgroupInfo {
+	e, _ := r.extra.(*CgroupInfo)
+	return e
+}
+
+// NetNs returns netns type-specific link info.
+//
+// Returns nil if the type-specific link info isn't available.
+func (r Info) NetNs() *NetNsInfo {
+	e, _ := r.extra.(*NetNsInfo)
+	return e
+}
+
+// ExtraNetNs returns XDP type-specific link info.
+//
+// Returns nil if the type-specific link info isn't available.
+func (r Info) XDP() *XDPInfo {
+	e, _ := r.extra.(*XDPInfo)
+	return e
+}
+
+// RawLink is the low-level API to bpf_link.
+//
+// You should consider using the higher level interfaces in this
+// package instead.
+type RawLink struct {
+	fd         *sys.FD
+	pinnedPath string
+}
+
+// AttachRawLink creates a raw link.
+func AttachRawLink(opts RawLinkOptions) (*RawLink, error) {
+	if err := haveBPFLink(); err != nil {
+		return nil, err
+	}
+
+	if opts.Target < 0 {
+		return nil, fmt.Errorf("invalid target: %s", sys.ErrClosedFd)
+	}
+
+	progFd := opts.Program.FD()
+	if progFd < 0 {
+		return nil, fmt.Errorf("invalid program: %s", sys.ErrClosedFd)
+	}
+
+	attr := sys.LinkCreateAttr{
+		TargetFd:    uint32(opts.Target),
+		ProgFd:      uint32(progFd),
+		AttachType:  sys.AttachType(opts.Attach),
+		TargetBtfId: opts.BTF,
+		Flags:       opts.Flags,
+	}
+	fd, err := sys.LinkCreate(&attr)
+	if err != nil {
+		return nil, fmt.Errorf("create link: %w", err)
+	}
+
+	return &RawLink{fd, ""}, nil
+}
+
+func loadPinnedRawLink(fileName string, opts *ebpf.LoadPinOptions) (*RawLink, error) {
+	fd, err := sys.ObjGet(&sys.ObjGetAttr{
+		Pathname:  sys.NewStringPointer(fileName),
+		FileFlags: opts.Marshal(),
+	})
+	if err != nil {
+		return nil, fmt.Errorf("load pinned link: %w", err)
+	}
+
+	return &RawLink{fd, fileName}, nil
+}
+
+func (l *RawLink) isLink() {}
+
+// FD returns the raw file descriptor.
+func (l *RawLink) FD() int {
+	return l.fd.Int()
+}
+
+// Close breaks the link.
+//
+// Use Pin if you want to make the link persistent.
+func (l *RawLink) Close() error {
+	return l.fd.Close()
+}
+
+// Pin persists a link past the lifetime of the process.
+//
+// Calling Close on a pinned Link will not break the link
+// until the pin is removed.
+func (l *RawLink) Pin(fileName string) error {
+	if err := internal.Pin(l.pinnedPath, fileName, l.fd); err != nil {
+		return err
+	}
+	l.pinnedPath = fileName
+	return nil
+}
+
+// Unpin implements the Link interface.
+func (l *RawLink) Unpin() error {
+	if err := internal.Unpin(l.pinnedPath); err != nil {
+		return err
+	}
+	l.pinnedPath = ""
+	return nil
+}
+
+// IsPinned returns true if the Link has a non-empty pinned path.
+func (l *RawLink) IsPinned() bool {
+	return l.pinnedPath != ""
+}
+
+// Update implements the Link interface.
+func (l *RawLink) Update(new *ebpf.Program) error {
+	return l.UpdateArgs(RawLinkUpdateOptions{
+		New: new,
+	})
+}
+
+// RawLinkUpdateOptions control the behaviour of RawLink.UpdateArgs.
+type RawLinkUpdateOptions struct {
+	New   *ebpf.Program
+	Old   *ebpf.Program
+	Flags uint32
+}
+
+// UpdateArgs updates a link based on args.
+func (l *RawLink) UpdateArgs(opts RawLinkUpdateOptions) error {
+	newFd := opts.New.FD()
+	if newFd < 0 {
+		return fmt.Errorf("invalid program: %s", sys.ErrClosedFd)
+	}
+
+	var oldFd int
+	if opts.Old != nil {
+		oldFd = opts.Old.FD()
+		if oldFd < 0 {
+			return fmt.Errorf("invalid replacement program: %s", sys.ErrClosedFd)
+		}
+	}
+
+	attr := sys.LinkUpdateAttr{
+		LinkFd:    l.fd.Uint(),
+		NewProgFd: uint32(newFd),
+		OldProgFd: uint32(oldFd),
+		Flags:     opts.Flags,
+	}
+	return sys.LinkUpdate(&attr)
+}
+
+// Info returns metadata about the link.
+func (l *RawLink) Info() (*Info, error) {
+	var info sys.LinkInfo
+
+	if err := sys.ObjInfo(l.fd, &info); err != nil {
+		return nil, fmt.Errorf("link info: %s", err)
+	}
+
+	var extra interface{}
+	switch info.Type {
+	case CgroupType:
+		extra = &CgroupInfo{}
+	case NetNsType:
+		extra = &NetNsInfo{}
+	case TracingType:
+		extra = &TracingInfo{}
+	case XDPType:
+		extra = &XDPInfo{}
+	case RawTracepointType, IterType,
+		PerfEventType, KprobeMultiType:
+		// Extra metadata not supported.
+	default:
+		return nil, fmt.Errorf("unknown link info type: %d", info.Type)
+	}
+
+	if extra != nil {
+		buf := bytes.NewReader(info.Extra[:])
+		err := binary.Read(buf, internal.NativeEndian, extra)
+		if err != nil {
+			return nil, fmt.Errorf("cannot read extra link info: %w", err)
+		}
+	}
+
+	return &Info{
+		info.Type,
+		info.Id,
+		ebpf.ProgramID(info.ProgId),
+		extra,
+	}, nil
+}
diff --git a/vendor/github.com/cilium/ebpf/link/netns.go b/vendor/github.com/cilium/ebpf/link/netns.go
new file mode 100644
index 00000000000..344ecced6be
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/netns.go
@@ -0,0 +1,36 @@
+package link
+
+import (
+	"fmt"
+
+	"github.com/cilium/ebpf"
+)
+
+// NetNsLink is a program attached to a network namespace.
+type NetNsLink struct {
+	RawLink
+}
+
+// AttachNetNs attaches a program to a network namespace.
+func AttachNetNs(ns int, prog *ebpf.Program) (*NetNsLink, error) {
+	var attach ebpf.AttachType
+	switch t := prog.Type(); t {
+	case ebpf.FlowDissector:
+		attach = ebpf.AttachFlowDissector
+	case ebpf.SkLookup:
+		attach = ebpf.AttachSkLookup
+	default:
+		return nil, fmt.Errorf("can't attach %v to network namespace", t)
+	}
+
+	link, err := AttachRawLink(RawLinkOptions{
+		Target:  ns,
+		Program: prog,
+		Attach:  attach,
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	return &NetNsLink{*link}, nil
+}
diff --git a/vendor/github.com/cilium/ebpf/link/perf_event.go b/vendor/github.com/cilium/ebpf/link/perf_event.go
new file mode 100644
index 00000000000..5f7a628b3d7
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/perf_event.go
@@ -0,0 +1,270 @@
+package link
+
+import (
+	"errors"
+	"fmt"
+	"runtime"
+	"unsafe"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/tracefs"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// Getting the terminology right is usually the hardest part. For posterity and
+// for staying sane during implementation:
+//
+// - trace event: Representation of a kernel runtime hook. Filesystem entries
+//   under <tracefs>/events. Can be tracepoints (static), kprobes or uprobes.
+//   Can be instantiated into perf events (see below).
+// - tracepoint: A predetermined hook point in the kernel. Exposed as trace
+//   events in (sub)directories under <tracefs>/events. Cannot be closed or
+//   removed, they are static.
+// - k(ret)probe: Ephemeral trace events based on entry or exit points of
+//   exported kernel symbols. kprobe-based (tracefs) trace events can be
+//   created system-wide by writing to the <tracefs>/kprobe_events file, or
+//   they can be scoped to the current process by creating PMU perf events.
+// - u(ret)probe: Ephemeral trace events based on user provides ELF binaries
+//   and offsets. uprobe-based (tracefs) trace events can be
+//   created system-wide by writing to the <tracefs>/uprobe_events file, or
+//   they can be scoped to the current process by creating PMU perf events.
+// - perf event: An object instantiated based on an existing trace event or
+//   kernel symbol. Referred to by fd in userspace.
+//   Exactly one eBPF program can be attached to a perf event. Multiple perf
+//   events can be created from a single trace event. Closing a perf event
+//   stops any further invocations of the attached eBPF program.
+
+var (
+	errInvalidInput = tracefs.ErrInvalidInput
+)
+
+const (
+	perfAllThreads = -1
+)
+
+// A perfEvent represents a perf event kernel object. Exactly one eBPF program
+// can be attached to it. It is created based on a tracefs trace event or a
+// Performance Monitoring Unit (PMU).
+type perfEvent struct {
+	// Trace event backing this perfEvent. May be nil.
+	tracefsEvent *tracefs.Event
+
+	// This is the perf event FD.
+	fd *sys.FD
+}
+
+func newPerfEvent(fd *sys.FD, event *tracefs.Event) *perfEvent {
+	pe := &perfEvent{event, fd}
+	// Both event and fd have their own finalizer, but we want to
+	// guarantee that they are closed in a certain order.
+	runtime.SetFinalizer(pe, (*perfEvent).Close)
+	return pe
+}
+
+func (pe *perfEvent) Close() error {
+	runtime.SetFinalizer(pe, nil)
+
+	if err := pe.fd.Close(); err != nil {
+		return fmt.Errorf("closing perf event fd: %w", err)
+	}
+
+	if pe.tracefsEvent != nil {
+		return pe.tracefsEvent.Close()
+	}
+
+	return nil
+}
+
+// perfEventLink represents a bpf perf link.
+type perfEventLink struct {
+	RawLink
+	pe *perfEvent
+}
+
+func (pl *perfEventLink) isLink() {}
+
+// Pinning requires the underlying perf event FD to stay open.
+//
+// | PerfEvent FD | BpfLink FD | Works |
+// |--------------|------------|-------|
+// | Open         | Open       | Yes   |
+// | Closed       | Open       | No    |
+// | Open         | Closed     | No (Pin() -> EINVAL) |
+// | Closed       | Closed     | No (Pin() -> EINVAL) |
+//
+// There is currently no pretty way to recover the perf event FD
+// when loading a pinned link, so leave as not supported for now.
+func (pl *perfEventLink) Pin(string) error {
+	return fmt.Errorf("perf event link pin: %w", ErrNotSupported)
+}
+
+func (pl *perfEventLink) Unpin() error {
+	return fmt.Errorf("perf event link unpin: %w", ErrNotSupported)
+}
+
+func (pl *perfEventLink) Close() error {
+	if err := pl.fd.Close(); err != nil {
+		return fmt.Errorf("perf link close: %w", err)
+	}
+
+	if err := pl.pe.Close(); err != nil {
+		return fmt.Errorf("perf event close: %w", err)
+	}
+	return nil
+}
+
+func (pl *perfEventLink) Update(prog *ebpf.Program) error {
+	return fmt.Errorf("perf event link update: %w", ErrNotSupported)
+}
+
+// perfEventIoctl implements Link and handles the perf event lifecycle
+// via ioctl().
+type perfEventIoctl struct {
+	*perfEvent
+}
+
+func (pi *perfEventIoctl) isLink() {}
+
+// Since 4.15 (e87c6bc3852b "bpf: permit multiple bpf attachments for a single perf event"),
+// calling PERF_EVENT_IOC_SET_BPF appends the given program to a prog_array
+// owned by the perf event, which means multiple programs can be attached
+// simultaneously.
+//
+// Before 4.15, calling PERF_EVENT_IOC_SET_BPF more than once on a perf event
+// returns EEXIST.
+//
+// Detaching a program from a perf event is currently not possible, so a
+// program replacement mechanism cannot be implemented for perf events.
+func (pi *perfEventIoctl) Update(prog *ebpf.Program) error {
+	return fmt.Errorf("perf event ioctl update: %w", ErrNotSupported)
+}
+
+func (pi *perfEventIoctl) Pin(string) error {
+	return fmt.Errorf("perf event ioctl pin: %w", ErrNotSupported)
+}
+
+func (pi *perfEventIoctl) Unpin() error {
+	return fmt.Errorf("perf event ioctl unpin: %w", ErrNotSupported)
+}
+
+func (pi *perfEventIoctl) Info() (*Info, error) {
+	return nil, fmt.Errorf("perf event ioctl info: %w", ErrNotSupported)
+}
+
+// attach the given eBPF prog to the perf event stored in pe.
+// pe must contain a valid perf event fd.
+// prog's type must match the program type stored in pe.
+func attachPerfEvent(pe *perfEvent, prog *ebpf.Program, cookie uint64) (Link, error) {
+	if prog == nil {
+		return nil, errors.New("cannot attach a nil program")
+	}
+	if prog.FD() < 0 {
+		return nil, fmt.Errorf("invalid program: %w", sys.ErrClosedFd)
+	}
+
+	if err := haveBPFLinkPerfEvent(); err == nil {
+		return attachPerfEventLink(pe, prog, cookie)
+	}
+
+	if cookie != 0 {
+		return nil, fmt.Errorf("cookies are not supported: %w", ErrNotSupported)
+	}
+
+	return attachPerfEventIoctl(pe, prog)
+}
+
+func attachPerfEventIoctl(pe *perfEvent, prog *ebpf.Program) (*perfEventIoctl, error) {
+	// Assign the eBPF program to the perf event.
+	err := unix.IoctlSetInt(pe.fd.Int(), unix.PERF_EVENT_IOC_SET_BPF, prog.FD())
+	if err != nil {
+		return nil, fmt.Errorf("setting perf event bpf program: %w", err)
+	}
+
+	// PERF_EVENT_IOC_ENABLE and _DISABLE ignore their given values.
+	if err := unix.IoctlSetInt(pe.fd.Int(), unix.PERF_EVENT_IOC_ENABLE, 0); err != nil {
+		return nil, fmt.Errorf("enable perf event: %s", err)
+	}
+
+	return &perfEventIoctl{pe}, nil
+}
+
+// Use the bpf api to attach the perf event (BPF_LINK_TYPE_PERF_EVENT, 5.15+).
+//
+// https://github.com/torvalds/linux/commit/b89fbfbb854c9afc3047e8273cc3a694650b802e
+func attachPerfEventLink(pe *perfEvent, prog *ebpf.Program, cookie uint64) (*perfEventLink, error) {
+	fd, err := sys.LinkCreatePerfEvent(&sys.LinkCreatePerfEventAttr{
+		ProgFd:     uint32(prog.FD()),
+		TargetFd:   pe.fd.Uint(),
+		AttachType: sys.BPF_PERF_EVENT,
+		BpfCookie:  cookie,
+	})
+	if err != nil {
+		return nil, fmt.Errorf("cannot create bpf perf link: %v", err)
+	}
+
+	return &perfEventLink{RawLink{fd: fd}, pe}, nil
+}
+
+// unsafeStringPtr returns an unsafe.Pointer to a NUL-terminated copy of str.
+func unsafeStringPtr(str string) (unsafe.Pointer, error) {
+	p, err := unix.BytePtrFromString(str)
+	if err != nil {
+		return nil, err
+	}
+	return unsafe.Pointer(p), nil
+}
+
+// openTracepointPerfEvent opens a tracepoint-type perf event. System-wide
+// [k,u]probes created by writing to <tracefs>/[k,u]probe_events are tracepoints
+// behind the scenes, and can be attached to using these perf events.
+func openTracepointPerfEvent(tid uint64, pid int) (*sys.FD, error) {
+	attr := unix.PerfEventAttr{
+		Type:        unix.PERF_TYPE_TRACEPOINT,
+		Config:      tid,
+		Sample_type: unix.PERF_SAMPLE_RAW,
+		Sample:      1,
+		Wakeup:      1,
+	}
+
+	fd, err := unix.PerfEventOpen(&attr, pid, 0, -1, unix.PERF_FLAG_FD_CLOEXEC)
+	if err != nil {
+		return nil, fmt.Errorf("opening tracepoint perf event: %w", err)
+	}
+
+	return sys.NewFD(fd)
+}
+
+// Probe BPF perf link.
+//
+// https://elixir.bootlin.com/linux/v5.16.8/source/kernel/bpf/syscall.c#L4307
+// https://github.com/torvalds/linux/commit/b89fbfbb854c9afc3047e8273cc3a694650b802e
+var haveBPFLinkPerfEvent = internal.NewFeatureTest("bpf_link_perf_event", "5.15", func() error {
+	prog, err := ebpf.NewProgram(&ebpf.ProgramSpec{
+		Name: "probe_bpf_perf_link",
+		Type: ebpf.Kprobe,
+		Instructions: asm.Instructions{
+			asm.Mov.Imm(asm.R0, 0),
+			asm.Return(),
+		},
+		License: "MIT",
+	})
+	if err != nil {
+		return err
+	}
+	defer prog.Close()
+
+	_, err = sys.LinkCreatePerfEvent(&sys.LinkCreatePerfEventAttr{
+		ProgFd:     uint32(prog.FD()),
+		AttachType: sys.BPF_PERF_EVENT,
+	})
+	if errors.Is(err, unix.EINVAL) {
+		return internal.ErrNotSupported
+	}
+	if errors.Is(err, unix.EBADF) {
+		return nil
+	}
+	return err
+})
diff --git a/vendor/github.com/cilium/ebpf/link/program.go b/vendor/github.com/cilium/ebpf/link/program.go
new file mode 100644
index 00000000000..ea31817377f
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/program.go
@@ -0,0 +1,76 @@
+package link
+
+import (
+	"fmt"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/internal/sys"
+)
+
+type RawAttachProgramOptions struct {
+	// File descriptor to attach to. This differs for each attach type.
+	Target int
+	// Program to attach.
+	Program *ebpf.Program
+	// Program to replace (cgroups).
+	Replace *ebpf.Program
+	// Attach must match the attach type of Program (and Replace).
+	Attach ebpf.AttachType
+	// Flags control the attach behaviour. This differs for each attach type.
+	Flags uint32
+}
+
+// RawAttachProgram is a low level wrapper around BPF_PROG_ATTACH.
+//
+// You should use one of the higher level abstractions available in this
+// package if possible.
+func RawAttachProgram(opts RawAttachProgramOptions) error {
+	if err := haveProgAttach(); err != nil {
+		return err
+	}
+
+	var replaceFd uint32
+	if opts.Replace != nil {
+		replaceFd = uint32(opts.Replace.FD())
+	}
+
+	attr := sys.ProgAttachAttr{
+		TargetFd:     uint32(opts.Target),
+		AttachBpfFd:  uint32(opts.Program.FD()),
+		ReplaceBpfFd: replaceFd,
+		AttachType:   uint32(opts.Attach),
+		AttachFlags:  uint32(opts.Flags),
+	}
+
+	if err := sys.ProgAttach(&attr); err != nil {
+		return fmt.Errorf("can't attach program: %w", err)
+	}
+	return nil
+}
+
+type RawDetachProgramOptions struct {
+	Target  int
+	Program *ebpf.Program
+	Attach  ebpf.AttachType
+}
+
+// RawDetachProgram is a low level wrapper around BPF_PROG_DETACH.
+//
+// You should use one of the higher level abstractions available in this
+// package if possible.
+func RawDetachProgram(opts RawDetachProgramOptions) error {
+	if err := haveProgAttach(); err != nil {
+		return err
+	}
+
+	attr := sys.ProgDetachAttr{
+		TargetFd:    uint32(opts.Target),
+		AttachBpfFd: uint32(opts.Program.FD()),
+		AttachType:  uint32(opts.Attach),
+	}
+	if err := sys.ProgDetach(&attr); err != nil {
+		return fmt.Errorf("can't detach program: %w", err)
+	}
+
+	return nil
+}
diff --git a/vendor/github.com/cilium/ebpf/link/query.go b/vendor/github.com/cilium/ebpf/link/query.go
new file mode 100644
index 00000000000..c05656512d5
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/query.go
@@ -0,0 +1,63 @@
+package link
+
+import (
+	"fmt"
+	"os"
+	"unsafe"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/internal/sys"
+)
+
+// QueryOptions defines additional parameters when querying for programs.
+type QueryOptions struct {
+	// Path can be a path to a cgroup, netns or LIRC2 device
+	Path string
+	// Attach specifies the AttachType of the programs queried for
+	Attach ebpf.AttachType
+	// QueryFlags are flags for BPF_PROG_QUERY, e.g. BPF_F_QUERY_EFFECTIVE
+	QueryFlags uint32
+}
+
+// QueryPrograms retrieves ProgramIDs associated with the AttachType.
+//
+// Returns (nil, nil) if there are no programs attached to the queried kernel
+// resource. Calling QueryPrograms on a kernel missing PROG_QUERY will result in
+// ErrNotSupported.
+func QueryPrograms(opts QueryOptions) ([]ebpf.ProgramID, error) {
+	if haveProgQuery() != nil {
+		return nil, fmt.Errorf("can't query program IDs: %w", ErrNotSupported)
+	}
+
+	f, err := os.Open(opts.Path)
+	if err != nil {
+		return nil, fmt.Errorf("can't open file: %s", err)
+	}
+	defer f.Close()
+
+	// query the number of programs to allocate correct slice size
+	attr := sys.ProgQueryAttr{
+		TargetFd:   uint32(f.Fd()),
+		AttachType: sys.AttachType(opts.Attach),
+		QueryFlags: opts.QueryFlags,
+	}
+	if err := sys.ProgQuery(&attr); err != nil {
+		return nil, fmt.Errorf("can't query program count: %w", err)
+	}
+
+	// return nil if no progs are attached
+	if attr.ProgCount == 0 {
+		return nil, nil
+	}
+
+	// we have at least one prog, so we query again
+	progIds := make([]ebpf.ProgramID, attr.ProgCount)
+	attr.ProgIds = sys.NewPointer(unsafe.Pointer(&progIds[0]))
+	attr.ProgCount = uint32(len(progIds))
+	if err := sys.ProgQuery(&attr); err != nil {
+		return nil, fmt.Errorf("can't query program IDs: %w", err)
+	}
+
+	return progIds, nil
+
+}
diff --git a/vendor/github.com/cilium/ebpf/link/raw_tracepoint.go b/vendor/github.com/cilium/ebpf/link/raw_tracepoint.go
new file mode 100644
index 00000000000..925e621cbbc
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/raw_tracepoint.go
@@ -0,0 +1,87 @@
+package link
+
+import (
+	"errors"
+	"fmt"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/internal/sys"
+)
+
+type RawTracepointOptions struct {
+	// Tracepoint name.
+	Name string
+	// Program must be of type RawTracepoint*
+	Program *ebpf.Program
+}
+
+// AttachRawTracepoint links a BPF program to a raw_tracepoint.
+//
+// Requires at least Linux 4.17.
+func AttachRawTracepoint(opts RawTracepointOptions) (Link, error) {
+	if t := opts.Program.Type(); t != ebpf.RawTracepoint && t != ebpf.RawTracepointWritable {
+		return nil, fmt.Errorf("invalid program type %s, expected RawTracepoint(Writable)", t)
+	}
+	if opts.Program.FD() < 0 {
+		return nil, fmt.Errorf("invalid program: %w", sys.ErrClosedFd)
+	}
+
+	fd, err := sys.RawTracepointOpen(&sys.RawTracepointOpenAttr{
+		Name:   sys.NewStringPointer(opts.Name),
+		ProgFd: uint32(opts.Program.FD()),
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	err = haveBPFLink()
+	if errors.Is(err, ErrNotSupported) {
+		// Prior to commit 70ed506c3bbc ("bpf: Introduce pinnable bpf_link abstraction")
+		// raw_tracepoints are just a plain fd.
+		return &simpleRawTracepoint{fd}, nil
+	}
+
+	if err != nil {
+		return nil, err
+	}
+
+	return &rawTracepoint{RawLink{fd: fd}}, nil
+}
+
+type simpleRawTracepoint struct {
+	fd *sys.FD
+}
+
+var _ Link = (*simpleRawTracepoint)(nil)
+
+func (frt *simpleRawTracepoint) isLink() {}
+
+func (frt *simpleRawTracepoint) Close() error {
+	return frt.fd.Close()
+}
+
+func (frt *simpleRawTracepoint) Update(_ *ebpf.Program) error {
+	return fmt.Errorf("update raw_tracepoint: %w", ErrNotSupported)
+}
+
+func (frt *simpleRawTracepoint) Pin(string) error {
+	return fmt.Errorf("pin raw_tracepoint: %w", ErrNotSupported)
+}
+
+func (frt *simpleRawTracepoint) Unpin() error {
+	return fmt.Errorf("unpin raw_tracepoint: %w", ErrNotSupported)
+}
+
+func (frt *simpleRawTracepoint) Info() (*Info, error) {
+	return nil, fmt.Errorf("can't get raw_tracepoint info: %w", ErrNotSupported)
+}
+
+type rawTracepoint struct {
+	RawLink
+}
+
+var _ Link = (*rawTracepoint)(nil)
+
+func (rt *rawTracepoint) Update(_ *ebpf.Program) error {
+	return fmt.Errorf("update raw_tracepoint: %w", ErrNotSupported)
+}
diff --git a/vendor/github.com/cilium/ebpf/link/socket_filter.go b/vendor/github.com/cilium/ebpf/link/socket_filter.go
new file mode 100644
index 00000000000..84f0b656f80
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/socket_filter.go
@@ -0,0 +1,40 @@
+package link
+
+import (
+	"syscall"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// AttachSocketFilter attaches a SocketFilter BPF program to a socket.
+func AttachSocketFilter(conn syscall.Conn, program *ebpf.Program) error {
+	rawConn, err := conn.SyscallConn()
+	if err != nil {
+		return err
+	}
+	var ssoErr error
+	err = rawConn.Control(func(fd uintptr) {
+		ssoErr = unix.SetsockoptInt(int(fd), unix.SOL_SOCKET, unix.SO_ATTACH_BPF, program.FD())
+	})
+	if ssoErr != nil {
+		return ssoErr
+	}
+	return err
+}
+
+// DetachSocketFilter detaches a SocketFilter BPF program from a socket.
+func DetachSocketFilter(conn syscall.Conn) error {
+	rawConn, err := conn.SyscallConn()
+	if err != nil {
+		return err
+	}
+	var ssoErr error
+	err = rawConn.Control(func(fd uintptr) {
+		ssoErr = unix.SetsockoptInt(int(fd), unix.SOL_SOCKET, unix.SO_DETACH_BPF, 0)
+	})
+	if ssoErr != nil {
+		return ssoErr
+	}
+	return err
+}
diff --git a/vendor/github.com/cilium/ebpf/link/syscalls.go b/vendor/github.com/cilium/ebpf/link/syscalls.go
new file mode 100644
index 00000000000..c9c998c2014
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/syscalls.go
@@ -0,0 +1,123 @@
+package link
+
+import (
+	"errors"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// Type is the kind of link.
+type Type = sys.LinkType
+
+// Valid link types.
+const (
+	UnspecifiedType   = sys.BPF_LINK_TYPE_UNSPEC
+	RawTracepointType = sys.BPF_LINK_TYPE_RAW_TRACEPOINT
+	TracingType       = sys.BPF_LINK_TYPE_TRACING
+	CgroupType        = sys.BPF_LINK_TYPE_CGROUP
+	IterType          = sys.BPF_LINK_TYPE_ITER
+	NetNsType         = sys.BPF_LINK_TYPE_NETNS
+	XDPType           = sys.BPF_LINK_TYPE_XDP
+	PerfEventType     = sys.BPF_LINK_TYPE_PERF_EVENT
+	KprobeMultiType   = sys.BPF_LINK_TYPE_KPROBE_MULTI
+)
+
+var haveProgAttach = internal.NewFeatureTest("BPF_PROG_ATTACH", "4.10", func() error {
+	prog, err := ebpf.NewProgram(&ebpf.ProgramSpec{
+		Type:    ebpf.CGroupSKB,
+		License: "MIT",
+		Instructions: asm.Instructions{
+			asm.Mov.Imm(asm.R0, 0),
+			asm.Return(),
+		},
+	})
+	if err != nil {
+		return internal.ErrNotSupported
+	}
+
+	// BPF_PROG_ATTACH was introduced at the same time as CGgroupSKB,
+	// so being able to load the program is enough to infer that we
+	// have the syscall.
+	prog.Close()
+	return nil
+})
+
+var haveProgAttachReplace = internal.NewFeatureTest("BPF_PROG_ATTACH atomic replacement of MULTI progs", "5.5", func() error {
+	if err := haveProgAttach(); err != nil {
+		return err
+	}
+
+	prog, err := ebpf.NewProgram(&ebpf.ProgramSpec{
+		Type:       ebpf.CGroupSKB,
+		AttachType: ebpf.AttachCGroupInetIngress,
+		License:    "MIT",
+		Instructions: asm.Instructions{
+			asm.Mov.Imm(asm.R0, 0),
+			asm.Return(),
+		},
+	})
+	if err != nil {
+		return internal.ErrNotSupported
+	}
+	defer prog.Close()
+
+	// We know that we have BPF_PROG_ATTACH since we can load CGroupSKB programs.
+	// If passing BPF_F_REPLACE gives us EINVAL we know that the feature isn't
+	// present.
+	attr := sys.ProgAttachAttr{
+		// We rely on this being checked after attachFlags.
+		TargetFd:    ^uint32(0),
+		AttachBpfFd: uint32(prog.FD()),
+		AttachType:  uint32(ebpf.AttachCGroupInetIngress),
+		AttachFlags: uint32(flagReplace),
+	}
+
+	err = sys.ProgAttach(&attr)
+	if errors.Is(err, unix.EINVAL) {
+		return internal.ErrNotSupported
+	}
+	if errors.Is(err, unix.EBADF) {
+		return nil
+	}
+	return err
+})
+
+var haveBPFLink = internal.NewFeatureTest("bpf_link", "5.7", func() error {
+	attr := sys.LinkCreateAttr{
+		// This is a hopefully invalid file descriptor, which triggers EBADF.
+		TargetFd:   ^uint32(0),
+		ProgFd:     ^uint32(0),
+		AttachType: sys.AttachType(ebpf.AttachCGroupInetIngress),
+	}
+	_, err := sys.LinkCreate(&attr)
+	if errors.Is(err, unix.EINVAL) {
+		return internal.ErrNotSupported
+	}
+	if errors.Is(err, unix.EBADF) {
+		return nil
+	}
+	return err
+})
+
+var haveProgQuery = internal.NewFeatureTest("BPF_PROG_QUERY", "4.15", func() error {
+	attr := sys.ProgQueryAttr{
+		// We rely on this being checked during the syscall.
+		// With an otherwise correct payload we expect EBADF here
+		// as an indication that the feature is present.
+		TargetFd:   ^uint32(0),
+		AttachType: sys.AttachType(ebpf.AttachCGroupInetIngress),
+	}
+
+	err := sys.ProgQuery(&attr)
+	if errors.Is(err, unix.EINVAL) {
+		return internal.ErrNotSupported
+	}
+	if errors.Is(err, unix.EBADF) {
+		return nil
+	}
+	return err
+})
diff --git a/vendor/github.com/cilium/ebpf/link/tracepoint.go b/vendor/github.com/cilium/ebpf/link/tracepoint.go
new file mode 100644
index 00000000000..95f5fae3b09
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/tracepoint.go
@@ -0,0 +1,68 @@
+package link
+
+import (
+	"fmt"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/internal/tracefs"
+)
+
+// TracepointOptions defines additional parameters that will be used
+// when loading Tracepoints.
+type TracepointOptions struct {
+	// Arbitrary value that can be fetched from an eBPF program
+	// via `bpf_get_attach_cookie()`.
+	//
+	// Needs kernel 5.15+.
+	Cookie uint64
+}
+
+// Tracepoint attaches the given eBPF program to the tracepoint with the given
+// group and name. See /sys/kernel/tracing/events to find available
+// tracepoints. The top-level directory is the group, the event's subdirectory
+// is the name. Example:
+//
+//	tp, err := Tracepoint("syscalls", "sys_enter_fork", prog, nil)
+//
+// Losing the reference to the resulting Link (tp) will close the Tracepoint
+// and prevent further execution of prog. The Link must be Closed during
+// program shutdown to avoid leaking system resources.
+//
+// Note that attaching eBPF programs to syscalls (sys_enter_*/sys_exit_*) is
+// only possible as of kernel 4.14 (commit cf5f5ce).
+func Tracepoint(group, name string, prog *ebpf.Program, opts *TracepointOptions) (Link, error) {
+	if group == "" || name == "" {
+		return nil, fmt.Errorf("group and name cannot be empty: %w", errInvalidInput)
+	}
+	if prog == nil {
+		return nil, fmt.Errorf("prog cannot be nil: %w", errInvalidInput)
+	}
+	if prog.Type() != ebpf.TracePoint {
+		return nil, fmt.Errorf("eBPF program type %s is not a Tracepoint: %w", prog.Type(), errInvalidInput)
+	}
+
+	tid, err := tracefs.EventID(group, name)
+	if err != nil {
+		return nil, err
+	}
+
+	fd, err := openTracepointPerfEvent(tid, perfAllThreads)
+	if err != nil {
+		return nil, err
+	}
+
+	var cookie uint64
+	if opts != nil {
+		cookie = opts.Cookie
+	}
+
+	pe := newPerfEvent(fd, nil)
+
+	lnk, err := attachPerfEvent(pe, prog, cookie)
+	if err != nil {
+		pe.Close()
+		return nil, err
+	}
+
+	return lnk, nil
+}
diff --git a/vendor/github.com/cilium/ebpf/link/tracing.go b/vendor/github.com/cilium/ebpf/link/tracing.go
new file mode 100644
index 00000000000..1e1a7834d8e
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/tracing.go
@@ -0,0 +1,199 @@
+package link
+
+import (
+	"errors"
+	"fmt"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/btf"
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+type tracing struct {
+	RawLink
+}
+
+func (f *tracing) Update(new *ebpf.Program) error {
+	return fmt.Errorf("tracing update: %w", ErrNotSupported)
+}
+
+// AttachFreplace attaches the given eBPF program to the function it replaces.
+//
+// The program and name can either be provided at link time, or can be provided
+// at program load time. If they were provided at load time, they should be nil
+// and empty respectively here, as they will be ignored by the kernel.
+// Examples:
+//
+//	AttachFreplace(dispatcher, "function", replacement)
+//	AttachFreplace(nil, "", replacement)
+func AttachFreplace(targetProg *ebpf.Program, name string, prog *ebpf.Program) (Link, error) {
+	if (name == "") != (targetProg == nil) {
+		return nil, fmt.Errorf("must provide both or neither of name and targetProg: %w", errInvalidInput)
+	}
+	if prog == nil {
+		return nil, fmt.Errorf("prog cannot be nil: %w", errInvalidInput)
+	}
+	if prog.Type() != ebpf.Extension {
+		return nil, fmt.Errorf("eBPF program type %s is not an Extension: %w", prog.Type(), errInvalidInput)
+	}
+
+	var (
+		target int
+		typeID btf.TypeID
+	)
+	if targetProg != nil {
+		btfHandle, err := targetProg.Handle()
+		if err != nil {
+			return nil, err
+		}
+		defer btfHandle.Close()
+
+		spec, err := btfHandle.Spec(nil)
+		if err != nil {
+			return nil, err
+		}
+
+		var function *btf.Func
+		if err := spec.TypeByName(name, &function); err != nil {
+			return nil, err
+		}
+
+		target = targetProg.FD()
+		typeID, err = spec.TypeID(function)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	link, err := AttachRawLink(RawLinkOptions{
+		Target:  target,
+		Program: prog,
+		Attach:  ebpf.AttachNone,
+		BTF:     typeID,
+	})
+	if errors.Is(err, sys.ENOTSUPP) {
+		// This may be returned by bpf_tracing_prog_attach via bpf_arch_text_poke.
+		return nil, fmt.Errorf("create raw tracepoint: %w", ErrNotSupported)
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	return &tracing{*link}, nil
+}
+
+type TracingOptions struct {
+	// Program must be of type Tracing with attach type
+	// AttachTraceFEntry/AttachTraceFExit/AttachModifyReturn or
+	// AttachTraceRawTp.
+	Program *ebpf.Program
+	// Program attach type. Can be one of:
+	// 	- AttachTraceFEntry
+	// 	- AttachTraceFExit
+	// 	- AttachModifyReturn
+	// 	- AttachTraceRawTp
+	// This field is optional.
+	AttachType ebpf.AttachType
+	// Arbitrary value that can be fetched from an eBPF program
+	// via `bpf_get_attach_cookie()`.
+	Cookie uint64
+}
+
+type LSMOptions struct {
+	// Program must be of type LSM with attach type
+	// AttachLSMMac.
+	Program *ebpf.Program
+	// Arbitrary value that can be fetched from an eBPF program
+	// via `bpf_get_attach_cookie()`.
+	Cookie uint64
+}
+
+// attachBTFID links all BPF program types (Tracing/LSM) that they attach to a btf_id.
+func attachBTFID(program *ebpf.Program, at ebpf.AttachType, cookie uint64) (Link, error) {
+	if program.FD() < 0 {
+		return nil, fmt.Errorf("invalid program %w", sys.ErrClosedFd)
+	}
+
+	var (
+		fd  *sys.FD
+		err error
+	)
+	switch at {
+	case ebpf.AttachTraceFEntry, ebpf.AttachTraceFExit, ebpf.AttachTraceRawTp,
+		ebpf.AttachModifyReturn, ebpf.AttachLSMMac:
+		// Attach via BPF link
+		fd, err = sys.LinkCreateTracing(&sys.LinkCreateTracingAttr{
+			ProgFd:     uint32(program.FD()),
+			AttachType: sys.AttachType(at),
+			Cookie:     cookie,
+		})
+		if err == nil {
+			break
+		}
+		if !errors.Is(err, unix.EINVAL) && !errors.Is(err, sys.ENOTSUPP) {
+			return nil, fmt.Errorf("create tracing link: %w", err)
+		}
+		fallthrough
+	case ebpf.AttachNone:
+		// Attach via RawTracepointOpen
+		if cookie > 0 {
+			return nil, fmt.Errorf("create raw tracepoint with cookie: %w", ErrNotSupported)
+		}
+
+		fd, err = sys.RawTracepointOpen(&sys.RawTracepointOpenAttr{
+			ProgFd: uint32(program.FD()),
+		})
+		if errors.Is(err, sys.ENOTSUPP) {
+			// This may be returned by bpf_tracing_prog_attach via bpf_arch_text_poke.
+			return nil, fmt.Errorf("create raw tracepoint: %w", ErrNotSupported)
+		}
+		if err != nil {
+			return nil, fmt.Errorf("create raw tracepoint: %w", err)
+		}
+	default:
+		return nil, fmt.Errorf("invalid attach type: %s", at.String())
+	}
+
+	raw := RawLink{fd: fd}
+	info, err := raw.Info()
+	if err != nil {
+		raw.Close()
+		return nil, err
+	}
+
+	if info.Type == RawTracepointType {
+		// Sadness upon sadness: a Tracing program with AttachRawTp returns
+		// a raw_tracepoint link. Other types return a tracing link.
+		return &rawTracepoint{raw}, nil
+	}
+	return &tracing{raw}, nil
+}
+
+// AttachTracing links a tracing (fentry/fexit/fmod_ret) BPF program or
+// a BTF-powered raw tracepoint (tp_btf) BPF Program to a BPF hook defined
+// in kernel modules.
+func AttachTracing(opts TracingOptions) (Link, error) {
+	if t := opts.Program.Type(); t != ebpf.Tracing {
+		return nil, fmt.Errorf("invalid program type %s, expected Tracing", t)
+	}
+
+	switch opts.AttachType {
+	case ebpf.AttachTraceFEntry, ebpf.AttachTraceFExit, ebpf.AttachModifyReturn,
+		ebpf.AttachTraceRawTp, ebpf.AttachNone:
+	default:
+		return nil, fmt.Errorf("invalid attach type: %s", opts.AttachType.String())
+	}
+
+	return attachBTFID(opts.Program, opts.AttachType, opts.Cookie)
+}
+
+// AttachLSM links a Linux security module (LSM) BPF Program to a BPF
+// hook defined in kernel modules.
+func AttachLSM(opts LSMOptions) (Link, error) {
+	if t := opts.Program.Type(); t != ebpf.LSM {
+		return nil, fmt.Errorf("invalid program type %s, expected LSM", t)
+	}
+
+	return attachBTFID(opts.Program, ebpf.AttachLSMMac, opts.Cookie)
+}
diff --git a/vendor/github.com/cilium/ebpf/link/uprobe.go b/vendor/github.com/cilium/ebpf/link/uprobe.go
new file mode 100644
index 00000000000..272bac4151d
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/uprobe.go
@@ -0,0 +1,328 @@
+package link
+
+import (
+	"debug/elf"
+	"errors"
+	"fmt"
+	"os"
+	"sync"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/tracefs"
+)
+
+var (
+	uprobeRefCtrOffsetPMUPath = "/sys/bus/event_source/devices/uprobe/format/ref_ctr_offset"
+	// elixir.bootlin.com/linux/v5.15-rc7/source/kernel/events/core.c#L9799
+	uprobeRefCtrOffsetShift = 32
+	haveRefCtrOffsetPMU     = internal.NewFeatureTest("RefCtrOffsetPMU", "4.20", func() error {
+		_, err := os.Stat(uprobeRefCtrOffsetPMUPath)
+		if err != nil {
+			return internal.ErrNotSupported
+		}
+		return nil
+	})
+
+	// ErrNoSymbol indicates that the given symbol was not found
+	// in the ELF symbols table.
+	ErrNoSymbol = errors.New("not found")
+)
+
+// Executable defines an executable program on the filesystem.
+type Executable struct {
+	// Path of the executable on the filesystem.
+	path string
+	// Parsed ELF and dynamic symbols' addresses.
+	addresses map[string]uint64
+	// Keep track of symbol table lazy load.
+	addressesOnce sync.Once
+}
+
+// UprobeOptions defines additional parameters that will be used
+// when loading Uprobes.
+type UprobeOptions struct {
+	// Symbol address. Must be provided in case of external symbols (shared libs).
+	// If set, overrides the address eventually parsed from the executable.
+	Address uint64
+	// The offset relative to given symbol. Useful when tracing an arbitrary point
+	// inside the frame of given symbol.
+	//
+	// Note: this field changed from being an absolute offset to being relative
+	// to Address.
+	Offset uint64
+	// Only set the uprobe on the given process ID. Useful when tracing
+	// shared library calls or programs that have many running instances.
+	PID int
+	// Automatically manage SDT reference counts (semaphores).
+	//
+	// If this field is set, the Kernel will increment/decrement the
+	// semaphore located in the process memory at the provided address on
+	// probe attach/detach.
+	//
+	// See also:
+	// sourceware.org/systemtap/wiki/UserSpaceProbeImplementation (Semaphore Handling)
+	// github.com/torvalds/linux/commit/1cc33161a83d
+	// github.com/torvalds/linux/commit/a6ca88b241d5
+	RefCtrOffset uint64
+	// Arbitrary value that can be fetched from an eBPF program
+	// via `bpf_get_attach_cookie()`.
+	//
+	// Needs kernel 5.15+.
+	Cookie uint64
+	// Prefix used for the event name if the uprobe must be attached using tracefs.
+	// The group name will be formatted as `<prefix>_<randomstr>`.
+	// The default empty string is equivalent to "ebpf" as the prefix.
+	TraceFSPrefix string
+}
+
+func (uo *UprobeOptions) cookie() uint64 {
+	if uo == nil {
+		return 0
+	}
+	return uo.Cookie
+}
+
+// To open a new Executable, use:
+//
+//	OpenExecutable("/bin/bash")
+//
+// The returned value can then be used to open Uprobe(s).
+func OpenExecutable(path string) (*Executable, error) {
+	if path == "" {
+		return nil, fmt.Errorf("path cannot be empty")
+	}
+
+	f, err := internal.OpenSafeELFFile(path)
+	if err != nil {
+		return nil, fmt.Errorf("parse ELF file: %w", err)
+	}
+	defer f.Close()
+
+	if f.Type != elf.ET_EXEC && f.Type != elf.ET_DYN {
+		// ELF is not an executable or a shared object.
+		return nil, errors.New("the given file is not an executable or a shared object")
+	}
+
+	return &Executable{
+		path:      path,
+		addresses: make(map[string]uint64),
+	}, nil
+}
+
+func (ex *Executable) load(f *internal.SafeELFFile) error {
+	syms, err := f.Symbols()
+	if err != nil && !errors.Is(err, elf.ErrNoSymbols) {
+		return err
+	}
+
+	dynsyms, err := f.DynamicSymbols()
+	if err != nil && !errors.Is(err, elf.ErrNoSymbols) {
+		return err
+	}
+
+	syms = append(syms, dynsyms...)
+
+	for _, s := range syms {
+		if elf.ST_TYPE(s.Info) != elf.STT_FUNC {
+			// Symbol not associated with a function or other executable code.
+			continue
+		}
+
+		address := s.Value
+
+		// Loop over ELF segments.
+		for _, prog := range f.Progs {
+			// Skip uninteresting segments.
+			if prog.Type != elf.PT_LOAD || (prog.Flags&elf.PF_X) == 0 {
+				continue
+			}
+
+			if prog.Vaddr <= s.Value && s.Value < (prog.Vaddr+prog.Memsz) {
+				// If the symbol value is contained in the segment, calculate
+				// the symbol offset.
+				//
+				// fn symbol offset = fn symbol VA - .text VA + .text offset
+				//
+				// stackoverflow.com/a/40249502
+				address = s.Value - prog.Vaddr + prog.Off
+				break
+			}
+		}
+
+		ex.addresses[s.Name] = address
+	}
+
+	return nil
+}
+
+// address calculates the address of a symbol in the executable.
+//
+// opts must not be nil.
+func (ex *Executable) address(symbol string, opts *UprobeOptions) (uint64, error) {
+	if opts.Address > 0 {
+		return opts.Address + opts.Offset, nil
+	}
+
+	var err error
+	ex.addressesOnce.Do(func() {
+		var f *internal.SafeELFFile
+		f, err = internal.OpenSafeELFFile(ex.path)
+		if err != nil {
+			err = fmt.Errorf("parse ELF file: %w", err)
+			return
+		}
+		defer f.Close()
+
+		err = ex.load(f)
+	})
+	if err != nil {
+		return 0, fmt.Errorf("lazy load symbols: %w", err)
+	}
+
+	address, ok := ex.addresses[symbol]
+	if !ok {
+		return 0, fmt.Errorf("symbol %s: %w", symbol, ErrNoSymbol)
+	}
+
+	// Symbols with location 0 from section undef are shared library calls and
+	// are relocated before the binary is executed. Dynamic linking is not
+	// implemented by the library, so mark this as unsupported for now.
+	//
+	// Since only offset values are stored and not elf.Symbol, if the value is 0,
+	// assume it's an external symbol.
+	if address == 0 {
+		return 0, fmt.Errorf("cannot resolve %s library call '%s': %w "+
+			"(consider providing UprobeOptions.Address)", ex.path, symbol, ErrNotSupported)
+	}
+
+	return address + opts.Offset, nil
+}
+
+// Uprobe attaches the given eBPF program to a perf event that fires when the
+// given symbol starts executing in the given Executable.
+// For example, /bin/bash::main():
+//
+//	ex, _ = OpenExecutable("/bin/bash")
+//	ex.Uprobe("main", prog, nil)
+//
+// When using symbols which belongs to shared libraries,
+// an offset must be provided via options:
+//
+//	up, err := ex.Uprobe("main", prog, &UprobeOptions{Offset: 0x123})
+//
+// Note: Setting the Offset field in the options supersedes the symbol's offset.
+//
+// Losing the reference to the resulting Link (up) will close the Uprobe
+// and prevent further execution of prog. The Link must be Closed during
+// program shutdown to avoid leaking system resources.
+//
+// Functions provided by shared libraries can currently not be traced and
+// will result in an ErrNotSupported.
+func (ex *Executable) Uprobe(symbol string, prog *ebpf.Program, opts *UprobeOptions) (Link, error) {
+	u, err := ex.uprobe(symbol, prog, opts, false)
+	if err != nil {
+		return nil, err
+	}
+
+	lnk, err := attachPerfEvent(u, prog, opts.cookie())
+	if err != nil {
+		u.Close()
+		return nil, err
+	}
+
+	return lnk, nil
+}
+
+// Uretprobe attaches the given eBPF program to a perf event that fires right
+// before the given symbol exits. For example, /bin/bash::main():
+//
+//	ex, _ = OpenExecutable("/bin/bash")
+//	ex.Uretprobe("main", prog, nil)
+//
+// When using symbols which belongs to shared libraries,
+// an offset must be provided via options:
+//
+//	up, err := ex.Uretprobe("main", prog, &UprobeOptions{Offset: 0x123})
+//
+// Note: Setting the Offset field in the options supersedes the symbol's offset.
+//
+// Losing the reference to the resulting Link (up) will close the Uprobe
+// and prevent further execution of prog. The Link must be Closed during
+// program shutdown to avoid leaking system resources.
+//
+// Functions provided by shared libraries can currently not be traced and
+// will result in an ErrNotSupported.
+func (ex *Executable) Uretprobe(symbol string, prog *ebpf.Program, opts *UprobeOptions) (Link, error) {
+	u, err := ex.uprobe(symbol, prog, opts, true)
+	if err != nil {
+		return nil, err
+	}
+
+	lnk, err := attachPerfEvent(u, prog, opts.cookie())
+	if err != nil {
+		u.Close()
+		return nil, err
+	}
+
+	return lnk, nil
+}
+
+// uprobe opens a perf event for the given binary/symbol and attaches prog to it.
+// If ret is true, create a uretprobe.
+func (ex *Executable) uprobe(symbol string, prog *ebpf.Program, opts *UprobeOptions, ret bool) (*perfEvent, error) {
+	if prog == nil {
+		return nil, fmt.Errorf("prog cannot be nil: %w", errInvalidInput)
+	}
+	if prog.Type() != ebpf.Kprobe {
+		return nil, fmt.Errorf("eBPF program type %s is not Kprobe: %w", prog.Type(), errInvalidInput)
+	}
+	if opts == nil {
+		opts = &UprobeOptions{}
+	}
+
+	offset, err := ex.address(symbol, opts)
+	if err != nil {
+		return nil, err
+	}
+
+	pid := opts.PID
+	if pid == 0 {
+		pid = perfAllThreads
+	}
+
+	if opts.RefCtrOffset != 0 {
+		if err := haveRefCtrOffsetPMU(); err != nil {
+			return nil, fmt.Errorf("uprobe ref_ctr_offset: %w", err)
+		}
+	}
+
+	args := tracefs.ProbeArgs{
+		Type:         tracefs.Uprobe,
+		Symbol:       symbol,
+		Path:         ex.path,
+		Offset:       offset,
+		Pid:          pid,
+		RefCtrOffset: opts.RefCtrOffset,
+		Ret:          ret,
+		Cookie:       opts.Cookie,
+		Group:        opts.TraceFSPrefix,
+	}
+
+	// Use uprobe PMU if the kernel has it available.
+	tp, err := pmuProbe(args)
+	if err == nil {
+		return tp, nil
+	}
+	if err != nil && !errors.Is(err, ErrNotSupported) {
+		return nil, fmt.Errorf("creating perf_uprobe PMU: %w", err)
+	}
+
+	// Use tracefs if uprobe PMU is missing.
+	tp, err = tracefsProbe(args)
+	if err != nil {
+		return nil, fmt.Errorf("creating trace event '%s:%s' in tracefs: %w", ex.path, symbol, err)
+	}
+
+	return tp, nil
+}
diff --git a/vendor/github.com/cilium/ebpf/link/xdp.go b/vendor/github.com/cilium/ebpf/link/xdp.go
new file mode 100644
index 00000000000..aa8dd3a4cb3
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/link/xdp.go
@@ -0,0 +1,54 @@
+package link
+
+import (
+	"fmt"
+
+	"github.com/cilium/ebpf"
+)
+
+// XDPAttachFlags represents how XDP program will be attached to interface.
+type XDPAttachFlags uint32
+
+const (
+	// XDPGenericMode (SKB) links XDP BPF program for drivers which do
+	// not yet support native XDP.
+	XDPGenericMode XDPAttachFlags = 1 << (iota + 1)
+	// XDPDriverMode links XDP BPF program into the driver’s receive path.
+	XDPDriverMode
+	// XDPOffloadMode offloads the entire XDP BPF program into hardware.
+	XDPOffloadMode
+)
+
+type XDPOptions struct {
+	// Program must be an XDP BPF program.
+	Program *ebpf.Program
+
+	// Interface is the interface index to attach program to.
+	Interface int
+
+	// Flags is one of XDPAttachFlags (optional).
+	//
+	// Only one XDP mode should be set, without flag defaults
+	// to driver/generic mode (best effort).
+	Flags XDPAttachFlags
+}
+
+// AttachXDP links an XDP BPF program to an XDP hook.
+func AttachXDP(opts XDPOptions) (Link, error) {
+	if t := opts.Program.Type(); t != ebpf.XDP {
+		return nil, fmt.Errorf("invalid program type %s, expected XDP", t)
+	}
+
+	if opts.Interface < 1 {
+		return nil, fmt.Errorf("invalid interface index: %d", opts.Interface)
+	}
+
+	rawLink, err := AttachRawLink(RawLinkOptions{
+		Program: opts.Program,
+		Attach:  ebpf.AttachXDP,
+		Target:  opts.Interface,
+		Flags:   uint32(opts.Flags),
+	})
+
+	return rawLink, err
+}
diff --git a/vendor/github.com/cilium/ebpf/linker.go b/vendor/github.com/cilium/ebpf/linker.go
new file mode 100644
index 00000000000..e0dbfcffd37
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/linker.go
@@ -0,0 +1,391 @@
+package ebpf
+
+import (
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"io"
+	"math"
+
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/btf"
+	"github.com/cilium/ebpf/internal"
+)
+
+// handles stores handle objects to avoid gc cleanup
+type handles []*btf.Handle
+
+func (hs *handles) add(h *btf.Handle) (int, error) {
+	if h == nil {
+		return 0, nil
+	}
+
+	if len(*hs) == math.MaxInt16 {
+		return 0, fmt.Errorf("can't add more than %d module FDs to fdArray", math.MaxInt16)
+	}
+
+	*hs = append(*hs, h)
+
+	// return length of slice so that indexes start at 1
+	return len(*hs), nil
+}
+
+func (hs handles) fdArray() []int32 {
+	// first element of fda is reserved as no module can be indexed with 0
+	fda := []int32{0}
+	for _, h := range hs {
+		fda = append(fda, int32(h.FD()))
+	}
+
+	return fda
+}
+
+func (hs handles) close() {
+	for _, h := range hs {
+		h.Close()
+	}
+}
+
+// splitSymbols splits insns into subsections delimited by Symbol Instructions.
+// insns cannot be empty and must start with a Symbol Instruction.
+//
+// The resulting map is indexed by Symbol name.
+func splitSymbols(insns asm.Instructions) (map[string]asm.Instructions, error) {
+	if len(insns) == 0 {
+		return nil, errors.New("insns is empty")
+	}
+
+	if insns[0].Symbol() == "" {
+		return nil, errors.New("insns must start with a Symbol")
+	}
+
+	var name string
+	progs := make(map[string]asm.Instructions)
+	for _, ins := range insns {
+		if sym := ins.Symbol(); sym != "" {
+			if progs[sym] != nil {
+				return nil, fmt.Errorf("insns contains duplicate Symbol %s", sym)
+			}
+			name = sym
+		}
+
+		progs[name] = append(progs[name], ins)
+	}
+
+	return progs, nil
+}
+
+// The linker is responsible for resolving bpf-to-bpf calls between programs
+// within an ELF. Each BPF program must be a self-contained binary blob,
+// so when an instruction in one ELF program section wants to jump to
+// a function in another, the linker needs to pull in the bytecode
+// (and BTF info) of the target function and concatenate the instruction
+// streams.
+//
+// Later on in the pipeline, all call sites are fixed up with relative jumps
+// within this newly-created instruction stream to then finally hand off to
+// the kernel with BPF_PROG_LOAD.
+//
+// Each function is denoted by an ELF symbol and the compiler takes care of
+// register setup before each jump instruction.
+
+// hasFunctionReferences returns true if insns contains one or more bpf2bpf
+// function references.
+func hasFunctionReferences(insns asm.Instructions) bool {
+	for _, i := range insns {
+		if i.IsFunctionReference() {
+			return true
+		}
+	}
+	return false
+}
+
+// applyRelocations collects and applies any CO-RE relocations in insns.
+//
+// Passing a nil target will relocate against the running kernel. insns are
+// modified in place.
+func applyRelocations(insns asm.Instructions, target *btf.Spec, bo binary.ByteOrder) error {
+	var relos []*btf.CORERelocation
+	var reloInsns []*asm.Instruction
+	iter := insns.Iterate()
+	for iter.Next() {
+		if relo := btf.CORERelocationMetadata(iter.Ins); relo != nil {
+			relos = append(relos, relo)
+			reloInsns = append(reloInsns, iter.Ins)
+		}
+	}
+
+	if len(relos) == 0 {
+		return nil
+	}
+
+	if bo == nil {
+		bo = internal.NativeEndian
+	}
+
+	fixups, err := btf.CORERelocate(relos, target, bo)
+	if err != nil {
+		return err
+	}
+
+	for i, fixup := range fixups {
+		if err := fixup.Apply(reloInsns[i]); err != nil {
+			return fmt.Errorf("fixup for %s: %w", relos[i], err)
+		}
+	}
+
+	return nil
+}
+
+// flattenPrograms resolves bpf-to-bpf calls for a set of programs.
+//
+// Links all programs in names by modifying their ProgramSpec in progs.
+func flattenPrograms(progs map[string]*ProgramSpec, names []string) {
+	// Pre-calculate all function references.
+	refs := make(map[*ProgramSpec][]string)
+	for _, prog := range progs {
+		refs[prog] = prog.Instructions.FunctionReferences()
+	}
+
+	// Create a flattened instruction stream, but don't modify progs yet to
+	// avoid linking multiple times.
+	flattened := make([]asm.Instructions, 0, len(names))
+	for _, name := range names {
+		flattened = append(flattened, flattenInstructions(name, progs, refs))
+	}
+
+	// Finally, assign the flattened instructions.
+	for i, name := range names {
+		progs[name].Instructions = flattened[i]
+	}
+}
+
+// flattenInstructions resolves bpf-to-bpf calls for a single program.
+//
+// Flattens the instructions of prog by concatenating the instructions of all
+// direct and indirect dependencies.
+//
+// progs contains all referenceable programs, while refs contain the direct
+// dependencies of each program.
+func flattenInstructions(name string, progs map[string]*ProgramSpec, refs map[*ProgramSpec][]string) asm.Instructions {
+	prog := progs[name]
+
+	insns := make(asm.Instructions, len(prog.Instructions))
+	copy(insns, prog.Instructions)
+
+	// Add all direct references of prog to the list of to be linked programs.
+	pending := make([]string, len(refs[prog]))
+	copy(pending, refs[prog])
+
+	// All references for which we've appended instructions.
+	linked := make(map[string]bool)
+
+	// Iterate all pending references. We can't use a range since pending is
+	// modified in the body below.
+	for len(pending) > 0 {
+		var ref string
+		ref, pending = pending[0], pending[1:]
+
+		if linked[ref] {
+			// We've already linked this ref, don't append instructions again.
+			continue
+		}
+
+		progRef := progs[ref]
+		if progRef == nil {
+			// We don't have instructions that go with this reference. This
+			// happens when calling extern functions.
+			continue
+		}
+
+		insns = append(insns, progRef.Instructions...)
+		linked[ref] = true
+
+		// Make sure we link indirect references.
+		pending = append(pending, refs[progRef]...)
+	}
+
+	return insns
+}
+
+// fixupAndValidate is called by the ELF reader right before marshaling the
+// instruction stream. It performs last-minute adjustments to the program and
+// runs some sanity checks before sending it off to the kernel.
+func fixupAndValidate(insns asm.Instructions) error {
+	iter := insns.Iterate()
+	for iter.Next() {
+		ins := iter.Ins
+
+		// Map load was tagged with a Reference, but does not contain a Map pointer.
+		needsMap := ins.Reference() != "" || ins.Metadata.Get(kconfigMetaKey{}) != nil
+		if ins.IsLoadFromMap() && needsMap && ins.Map() == nil {
+			return fmt.Errorf("instruction %d: %w", iter.Index, asm.ErrUnsatisfiedMapReference)
+		}
+
+		fixupProbeReadKernel(ins)
+	}
+
+	return nil
+}
+
+// fixupKfuncs loops over all instructions in search for kfunc calls.
+// If at least one is found, the current kernels BTF and module BTFis are searched to set Instruction.Constant
+// and Instruction.Offset to the correct values.
+func fixupKfuncs(insns asm.Instructions) (handles, error) {
+	iter := insns.Iterate()
+	for iter.Next() {
+		ins := iter.Ins
+		if ins.IsKfuncCall() {
+			goto fixups
+		}
+	}
+
+	return nil, nil
+
+fixups:
+	// only load the kernel spec if we found at least one kfunc call
+	kernelSpec, err := btf.LoadKernelSpec()
+	if err != nil {
+		return nil, err
+	}
+
+	fdArray := make(handles, 0)
+	for {
+		ins := iter.Ins
+
+		if !ins.IsKfuncCall() {
+			if !iter.Next() {
+				// break loop if this was the last instruction in the stream.
+				break
+			}
+			continue
+		}
+
+		// check meta, if no meta return err
+		kfm, _ := ins.Metadata.Get(kfuncMeta{}).(*btf.Func)
+		if kfm == nil {
+			return nil, fmt.Errorf("kfunc call has no kfuncMeta")
+		}
+
+		target := btf.Type((*btf.Func)(nil))
+		spec, module, err := findTargetInKernel(kernelSpec, kfm.Name, &target)
+		if errors.Is(err, btf.ErrNotFound) {
+			return nil, fmt.Errorf("kfunc %q: %w", kfm.Name, ErrNotSupported)
+		}
+		if err != nil {
+			return nil, err
+		}
+
+		if err := btf.CheckTypeCompatibility(kfm.Type, target.(*btf.Func).Type); err != nil {
+			return nil, &incompatibleKfuncError{kfm.Name, err}
+		}
+
+		id, err := spec.TypeID(target)
+		if err != nil {
+			return nil, err
+		}
+
+		idx, err := fdArray.add(module)
+		if err != nil {
+			return nil, err
+		}
+
+		ins.Constant = int64(id)
+		ins.Offset = int16(idx)
+
+		if !iter.Next() {
+			break
+		}
+	}
+
+	return fdArray, nil
+}
+
+type incompatibleKfuncError struct {
+	name string
+	err  error
+}
+
+func (ike *incompatibleKfuncError) Error() string {
+	return fmt.Sprintf("kfunc %q: %s", ike.name, ike.err)
+}
+
+// fixupProbeReadKernel replaces calls to bpf_probe_read_{kernel,user}(_str)
+// with bpf_probe_read(_str) on kernels that don't support it yet.
+func fixupProbeReadKernel(ins *asm.Instruction) {
+	if !ins.IsBuiltinCall() {
+		return
+	}
+
+	// Kernel supports bpf_probe_read_kernel, nothing to do.
+	if haveProbeReadKernel() == nil {
+		return
+	}
+
+	switch asm.BuiltinFunc(ins.Constant) {
+	case asm.FnProbeReadKernel, asm.FnProbeReadUser:
+		ins.Constant = int64(asm.FnProbeRead)
+	case asm.FnProbeReadKernelStr, asm.FnProbeReadUserStr:
+		ins.Constant = int64(asm.FnProbeReadStr)
+	}
+}
+
+// resolveKconfigReferences creates and populates a .kconfig map if necessary.
+//
+// Returns a nil Map and no error if no references exist.
+func resolveKconfigReferences(insns asm.Instructions) (_ *Map, err error) {
+	closeOnError := func(c io.Closer) {
+		if err != nil {
+			c.Close()
+		}
+	}
+
+	var spec *MapSpec
+	iter := insns.Iterate()
+	for iter.Next() {
+		meta, _ := iter.Ins.Metadata.Get(kconfigMetaKey{}).(*kconfigMeta)
+		if meta != nil {
+			spec = meta.Map
+			break
+		}
+	}
+
+	if spec == nil {
+		return nil, nil
+	}
+
+	cpy := spec.Copy()
+	if err := resolveKconfig(cpy); err != nil {
+		return nil, err
+	}
+
+	kconfig, err := NewMap(cpy)
+	if err != nil {
+		return nil, err
+	}
+	defer closeOnError(kconfig)
+
+	// Resolve all instructions which load from .kconfig map with actual map
+	// and offset inside it.
+	iter = insns.Iterate()
+	for iter.Next() {
+		meta, _ := iter.Ins.Metadata.Get(kconfigMetaKey{}).(*kconfigMeta)
+		if meta == nil {
+			continue
+		}
+
+		if meta.Map != spec {
+			return nil, fmt.Errorf("instruction %d: reference to multiple .kconfig maps is not allowed", iter.Index)
+		}
+
+		if err := iter.Ins.AssociateMap(kconfig); err != nil {
+			return nil, fmt.Errorf("instruction %d: %w", iter.Index, err)
+		}
+
+		// Encode a map read at the offset of the var in the datasec.
+		iter.Ins.Constant = int64(uint64(meta.Offset) << 32)
+		iter.Ins.Metadata.Set(kconfigMetaKey{}, nil)
+	}
+
+	return kconfig, nil
+}
diff --git a/vendor/github.com/cilium/ebpf/map.go b/vendor/github.com/cilium/ebpf/map.go
new file mode 100644
index 00000000000..a11664cc72d
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/map.go
@@ -0,0 +1,1478 @@
+package ebpf
+
+import (
+	"bytes"
+	"errors"
+	"fmt"
+	"io"
+	"math/rand"
+	"os"
+	"path/filepath"
+	"reflect"
+	"time"
+	"unsafe"
+
+	"github.com/cilium/ebpf/btf"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// Errors returned by Map and MapIterator methods.
+var (
+	ErrKeyNotExist      = errors.New("key does not exist")
+	ErrKeyExist         = errors.New("key already exists")
+	ErrIterationAborted = errors.New("iteration aborted")
+	ErrMapIncompatible  = errors.New("map spec is incompatible with existing map")
+	errMapNoBTFValue    = errors.New("map spec does not contain a BTF Value")
+)
+
+// MapOptions control loading a map into the kernel.
+type MapOptions struct {
+	// The base path to pin maps in if requested via PinByName.
+	// Existing maps will be re-used if they are compatible, otherwise an
+	// error is returned.
+	PinPath        string
+	LoadPinOptions LoadPinOptions
+}
+
+// MapID represents the unique ID of an eBPF map
+type MapID uint32
+
+// MapSpec defines a Map.
+type MapSpec struct {
+	// Name is passed to the kernel as a debug aid. Must only contain
+	// alpha numeric and '_' characters.
+	Name       string
+	Type       MapType
+	KeySize    uint32
+	ValueSize  uint32
+	MaxEntries uint32
+
+	// Flags is passed to the kernel and specifies additional map
+	// creation attributes.
+	Flags uint32
+
+	// Automatically pin and load a map from MapOptions.PinPath.
+	// Generates an error if an existing pinned map is incompatible with the MapSpec.
+	Pinning PinType
+
+	// Specify numa node during map creation
+	// (effective only if unix.BPF_F_NUMA_NODE flag is set,
+	// which can be imported from golang.org/x/sys/unix)
+	NumaNode uint32
+
+	// The initial contents of the map. May be nil.
+	Contents []MapKV
+
+	// Whether to freeze a map after setting its initial contents.
+	Freeze bool
+
+	// InnerMap is used as a template for ArrayOfMaps and HashOfMaps
+	InnerMap *MapSpec
+
+	// Extra trailing bytes found in the ELF map definition when using structs
+	// larger than libbpf's bpf_map_def. nil if no trailing bytes were present.
+	// Must be nil or empty before instantiating the MapSpec into a Map.
+	Extra *bytes.Reader
+
+	// The key and value type of this map. May be nil.
+	Key, Value btf.Type
+}
+
+func (ms *MapSpec) String() string {
+	return fmt.Sprintf("%s(keySize=%d, valueSize=%d, maxEntries=%d, flags=%d)", ms.Type, ms.KeySize, ms.ValueSize, ms.MaxEntries, ms.Flags)
+}
+
+// Copy returns a copy of the spec.
+//
+// MapSpec.Contents is a shallow copy.
+func (ms *MapSpec) Copy() *MapSpec {
+	if ms == nil {
+		return nil
+	}
+
+	cpy := *ms
+
+	cpy.Contents = make([]MapKV, len(ms.Contents))
+	copy(cpy.Contents, ms.Contents)
+
+	cpy.InnerMap = ms.InnerMap.Copy()
+
+	return &cpy
+}
+
+func (ms *MapSpec) clampPerfEventArraySize() error {
+	if ms.Type != PerfEventArray {
+		return nil
+	}
+
+	n, err := internal.PossibleCPUs()
+	if err != nil {
+		return fmt.Errorf("perf event array: %w", err)
+	}
+
+	if n := uint32(n); ms.MaxEntries > n {
+		ms.MaxEntries = n
+	}
+
+	return nil
+}
+
+// dataSection returns the contents and BTF Datasec descriptor of the spec.
+func (ms *MapSpec) dataSection() ([]byte, *btf.Datasec, error) {
+
+	if ms.Value == nil {
+		return nil, nil, errMapNoBTFValue
+	}
+
+	ds, ok := ms.Value.(*btf.Datasec)
+	if !ok {
+		return nil, nil, fmt.Errorf("map value BTF is a %T, not a *btf.Datasec", ms.Value)
+	}
+
+	if n := len(ms.Contents); n != 1 {
+		return nil, nil, fmt.Errorf("expected one key, found %d", n)
+	}
+
+	kv := ms.Contents[0]
+	value, ok := kv.Value.([]byte)
+	if !ok {
+		return nil, nil, fmt.Errorf("value at first map key is %T, not []byte", kv.Value)
+	}
+
+	return value, ds, nil
+}
+
+// MapKV is used to initialize the contents of a Map.
+type MapKV struct {
+	Key   interface{}
+	Value interface{}
+}
+
+// Compatible returns nil if an existing map may be used instead of creating
+// one from the spec.
+//
+// Returns an error wrapping [ErrMapIncompatible] otherwise.
+func (ms *MapSpec) Compatible(m *Map) error {
+	switch {
+	case m.typ != ms.Type:
+		return fmt.Errorf("expected type %v, got %v: %w", ms.Type, m.typ, ErrMapIncompatible)
+
+	case m.keySize != ms.KeySize:
+		return fmt.Errorf("expected key size %v, got %v: %w", ms.KeySize, m.keySize, ErrMapIncompatible)
+
+	case m.valueSize != ms.ValueSize:
+		return fmt.Errorf("expected value size %v, got %v: %w", ms.ValueSize, m.valueSize, ErrMapIncompatible)
+
+	case !(ms.Type == PerfEventArray && ms.MaxEntries == 0) &&
+		m.maxEntries != ms.MaxEntries:
+		return fmt.Errorf("expected max entries %v, got %v: %w", ms.MaxEntries, m.maxEntries, ErrMapIncompatible)
+
+	// BPF_F_RDONLY_PROG is set unconditionally for devmaps. Explicitly allow
+	// this mismatch.
+	case !((ms.Type == DevMap || ms.Type == DevMapHash) && m.flags^ms.Flags == unix.BPF_F_RDONLY_PROG) &&
+		m.flags != ms.Flags:
+		return fmt.Errorf("expected flags %v, got %v: %w", ms.Flags, m.flags, ErrMapIncompatible)
+	}
+	return nil
+}
+
+// Map represents a Map file descriptor.
+//
+// It is not safe to close a map which is used by other goroutines.
+//
+// Methods which take interface{} arguments by default encode
+// them using binary.Read/Write in the machine's native endianness.
+//
+// Implement encoding.BinaryMarshaler or encoding.BinaryUnmarshaler
+// if you require custom encoding.
+type Map struct {
+	name       string
+	fd         *sys.FD
+	typ        MapType
+	keySize    uint32
+	valueSize  uint32
+	maxEntries uint32
+	flags      uint32
+	pinnedPath string
+	// Per CPU maps return values larger than the size in the spec
+	fullValueSize int
+}
+
+// NewMapFromFD creates a map from a raw fd.
+//
+// You should not use fd after calling this function.
+func NewMapFromFD(fd int) (*Map, error) {
+	f, err := sys.NewFD(fd)
+	if err != nil {
+		return nil, err
+	}
+
+	return newMapFromFD(f)
+}
+
+func newMapFromFD(fd *sys.FD) (*Map, error) {
+	info, err := newMapInfoFromFd(fd)
+	if err != nil {
+		fd.Close()
+		return nil, fmt.Errorf("get map info: %w", err)
+	}
+
+	return newMap(fd, info.Name, info.Type, info.KeySize, info.ValueSize, info.MaxEntries, info.Flags)
+}
+
+// NewMap creates a new Map.
+//
+// It's equivalent to calling NewMapWithOptions with default options.
+func NewMap(spec *MapSpec) (*Map, error) {
+	return NewMapWithOptions(spec, MapOptions{})
+}
+
+// NewMapWithOptions creates a new Map.
+//
+// Creating a map for the first time will perform feature detection
+// by creating small, temporary maps.
+//
+// The caller is responsible for ensuring the process' rlimit is set
+// sufficiently high for locking memory during map creation. This can be done
+// by calling rlimit.RemoveMemlock() prior to calling NewMapWithOptions.
+//
+// May return an error wrapping ErrMapIncompatible.
+func NewMapWithOptions(spec *MapSpec, opts MapOptions) (*Map, error) {
+	m, err := newMapWithOptions(spec, opts)
+	if err != nil {
+		return nil, fmt.Errorf("creating map: %w", err)
+	}
+
+	if err := m.finalize(spec); err != nil {
+		m.Close()
+		return nil, fmt.Errorf("populating map: %w", err)
+	}
+
+	return m, nil
+}
+
+func newMapWithOptions(spec *MapSpec, opts MapOptions) (_ *Map, err error) {
+	closeOnError := func(c io.Closer) {
+		if err != nil {
+			c.Close()
+		}
+	}
+
+	switch spec.Pinning {
+	case PinByName:
+		if spec.Name == "" {
+			return nil, fmt.Errorf("pin by name: missing Name")
+		}
+
+		if opts.PinPath == "" {
+			return nil, fmt.Errorf("pin by name: missing MapOptions.PinPath")
+		}
+
+		path := filepath.Join(opts.PinPath, spec.Name)
+		m, err := LoadPinnedMap(path, &opts.LoadPinOptions)
+		if errors.Is(err, unix.ENOENT) {
+			break
+		}
+		if err != nil {
+			return nil, fmt.Errorf("load pinned map: %w", err)
+		}
+		defer closeOnError(m)
+
+		if err := spec.Compatible(m); err != nil {
+			return nil, fmt.Errorf("use pinned map %s: %w", spec.Name, err)
+		}
+
+		return m, nil
+
+	case PinNone:
+		// Nothing to do here
+
+	default:
+		return nil, fmt.Errorf("pin type %d: %w", int(spec.Pinning), ErrNotSupported)
+	}
+
+	var innerFd *sys.FD
+	if spec.Type == ArrayOfMaps || spec.Type == HashOfMaps {
+		if spec.InnerMap == nil {
+			return nil, fmt.Errorf("%s requires InnerMap", spec.Type)
+		}
+
+		if spec.InnerMap.Pinning != PinNone {
+			return nil, errors.New("inner maps cannot be pinned")
+		}
+
+		template, err := spec.InnerMap.createMap(nil, opts)
+		if err != nil {
+			return nil, fmt.Errorf("inner map: %w", err)
+		}
+		defer template.Close()
+
+		// Intentionally skip populating and freezing (finalizing)
+		// the inner map template since it will be removed shortly.
+
+		innerFd = template.fd
+	}
+
+	m, err := spec.createMap(innerFd, opts)
+	if err != nil {
+		return nil, err
+	}
+	defer closeOnError(m)
+
+	if spec.Pinning == PinByName {
+		path := filepath.Join(opts.PinPath, spec.Name)
+		if err := m.Pin(path); err != nil {
+			return nil, fmt.Errorf("pin map to %s: %w", path, err)
+		}
+	}
+
+	return m, nil
+}
+
+// createMap validates the spec's properties and creates the map in the kernel
+// using the given opts. It does not populate or freeze the map.
+func (spec *MapSpec) createMap(inner *sys.FD, opts MapOptions) (_ *Map, err error) {
+	closeOnError := func(closer io.Closer) {
+		if err != nil {
+			closer.Close()
+		}
+	}
+
+	// Kernels 4.13 through 5.4 used a struct bpf_map_def that contained
+	// additional 'inner_map_idx' and later 'numa_node' fields.
+	// In order to support loading these definitions, tolerate the presence of
+	// extra bytes, but require them to be zeroes.
+	if spec.Extra != nil {
+		if _, err := io.Copy(internal.DiscardZeroes{}, spec.Extra); err != nil {
+			return nil, errors.New("extra contains unhandled non-zero bytes, drain before creating map")
+		}
+	}
+
+	switch spec.Type {
+	case ArrayOfMaps, HashOfMaps:
+		if err := haveNestedMaps(); err != nil {
+			return nil, err
+		}
+
+		if spec.ValueSize != 0 && spec.ValueSize != 4 {
+			return nil, errors.New("ValueSize must be zero or four for map of map")
+		}
+
+		spec = spec.Copy()
+		spec.ValueSize = 4
+
+	case PerfEventArray:
+		if spec.KeySize != 0 && spec.KeySize != 4 {
+			return nil, errors.New("KeySize must be zero or four for perf event array")
+		}
+
+		if spec.ValueSize != 0 && spec.ValueSize != 4 {
+			return nil, errors.New("ValueSize must be zero or four for perf event array")
+		}
+
+		spec = spec.Copy()
+		spec.KeySize = 4
+		spec.ValueSize = 4
+
+		if spec.MaxEntries == 0 {
+			n, err := internal.PossibleCPUs()
+			if err != nil {
+				return nil, fmt.Errorf("perf event array: %w", err)
+			}
+			spec.MaxEntries = uint32(n)
+		}
+	}
+
+	if spec.Flags&(unix.BPF_F_RDONLY_PROG|unix.BPF_F_WRONLY_PROG) > 0 || spec.Freeze {
+		if err := haveMapMutabilityModifiers(); err != nil {
+			return nil, fmt.Errorf("map create: %w", err)
+		}
+	}
+	if spec.Flags&unix.BPF_F_MMAPABLE > 0 {
+		if err := haveMmapableMaps(); err != nil {
+			return nil, fmt.Errorf("map create: %w", err)
+		}
+	}
+	if spec.Flags&unix.BPF_F_INNER_MAP > 0 {
+		if err := haveInnerMaps(); err != nil {
+			return nil, fmt.Errorf("map create: %w", err)
+		}
+	}
+	if spec.Flags&unix.BPF_F_NO_PREALLOC > 0 {
+		if err := haveNoPreallocMaps(); err != nil {
+			return nil, fmt.Errorf("map create: %w", err)
+		}
+	}
+
+	attr := sys.MapCreateAttr{
+		MapType:    sys.MapType(spec.Type),
+		KeySize:    spec.KeySize,
+		ValueSize:  spec.ValueSize,
+		MaxEntries: spec.MaxEntries,
+		MapFlags:   sys.MapFlags(spec.Flags),
+		NumaNode:   spec.NumaNode,
+	}
+
+	if inner != nil {
+		attr.InnerMapFd = inner.Uint()
+	}
+
+	if haveObjName() == nil {
+		attr.MapName = sys.NewObjName(spec.Name)
+	}
+
+	if spec.Key != nil || spec.Value != nil {
+		handle, keyTypeID, valueTypeID, err := btf.MarshalMapKV(spec.Key, spec.Value)
+		if err != nil && !errors.Is(err, btf.ErrNotSupported) {
+			return nil, fmt.Errorf("load BTF: %w", err)
+		}
+
+		if handle != nil {
+			defer handle.Close()
+
+			// Use BTF k/v during map creation.
+			attr.BtfFd = uint32(handle.FD())
+			attr.BtfKeyTypeId = keyTypeID
+			attr.BtfValueTypeId = valueTypeID
+		}
+	}
+
+	fd, err := sys.MapCreate(&attr)
+	// Some map types don't support BTF k/v in earlier kernel versions.
+	// Remove BTF metadata and retry map creation.
+	if (errors.Is(err, sys.ENOTSUPP) || errors.Is(err, unix.EINVAL)) && attr.BtfFd != 0 {
+		attr.BtfFd, attr.BtfKeyTypeId, attr.BtfValueTypeId = 0, 0, 0
+		fd, err = sys.MapCreate(&attr)
+	}
+
+	if err != nil {
+		if errors.Is(err, unix.EPERM) {
+			return nil, fmt.Errorf("map create: %w (MEMLOCK may be too low, consider rlimit.RemoveMemlock)", err)
+		}
+		if errors.Is(err, unix.EINVAL) && attr.MaxEntries == 0 {
+			return nil, fmt.Errorf("map create: %w (MaxEntries may be incorrectly set to zero)", err)
+		}
+		if errors.Is(err, unix.EINVAL) && spec.Type == UnspecifiedMap {
+			return nil, fmt.Errorf("map create: cannot use type %s", UnspecifiedMap)
+		}
+		if attr.BtfFd == 0 {
+			return nil, fmt.Errorf("map create: %w (without BTF k/v)", err)
+		}
+		return nil, fmt.Errorf("map create: %w", err)
+	}
+	defer closeOnError(fd)
+
+	m, err := newMap(fd, spec.Name, spec.Type, spec.KeySize, spec.ValueSize, spec.MaxEntries, spec.Flags)
+	if err != nil {
+		return nil, fmt.Errorf("map create: %w", err)
+	}
+
+	return m, nil
+}
+
+// newMap allocates and returns a new Map structure.
+// Sets the fullValueSize on per-CPU maps.
+func newMap(fd *sys.FD, name string, typ MapType, keySize, valueSize, maxEntries, flags uint32) (*Map, error) {
+	m := &Map{
+		name,
+		fd,
+		typ,
+		keySize,
+		valueSize,
+		maxEntries,
+		flags,
+		"",
+		int(valueSize),
+	}
+
+	if !typ.hasPerCPUValue() {
+		return m, nil
+	}
+
+	possibleCPUs, err := internal.PossibleCPUs()
+	if err != nil {
+		return nil, err
+	}
+
+	m.fullValueSize = int(internal.Align(valueSize, 8)) * possibleCPUs
+	return m, nil
+}
+
+func (m *Map) String() string {
+	if m.name != "" {
+		return fmt.Sprintf("%s(%s)#%v", m.typ, m.name, m.fd)
+	}
+	return fmt.Sprintf("%s#%v", m.typ, m.fd)
+}
+
+// Type returns the underlying type of the map.
+func (m *Map) Type() MapType {
+	return m.typ
+}
+
+// KeySize returns the size of the map key in bytes.
+func (m *Map) KeySize() uint32 {
+	return m.keySize
+}
+
+// ValueSize returns the size of the map value in bytes.
+func (m *Map) ValueSize() uint32 {
+	return m.valueSize
+}
+
+// MaxEntries returns the maximum number of elements the map can hold.
+func (m *Map) MaxEntries() uint32 {
+	return m.maxEntries
+}
+
+// Flags returns the flags of the map.
+func (m *Map) Flags() uint32 {
+	return m.flags
+}
+
+// Info returns metadata about the map.
+func (m *Map) Info() (*MapInfo, error) {
+	return newMapInfoFromFd(m.fd)
+}
+
+// MapLookupFlags controls the behaviour of the map lookup calls.
+type MapLookupFlags uint64
+
+// LookupLock look up the value of a spin-locked map.
+const LookupLock MapLookupFlags = 4
+
+// Lookup retrieves a value from a Map.
+//
+// Calls Close() on valueOut if it is of type **Map or **Program,
+// and *valueOut is not nil.
+//
+// Returns an error if the key doesn't exist, see ErrKeyNotExist.
+func (m *Map) Lookup(key, valueOut interface{}) error {
+	return m.LookupWithFlags(key, valueOut, 0)
+}
+
+// LookupWithFlags retrieves a value from a Map with flags.
+//
+// Passing LookupLock flag will look up the value of a spin-locked
+// map without returning the lock. This must be specified if the
+// elements contain a spinlock.
+//
+// Calls Close() on valueOut if it is of type **Map or **Program,
+// and *valueOut is not nil.
+//
+// Returns an error if the key doesn't exist, see ErrKeyNotExist.
+func (m *Map) LookupWithFlags(key, valueOut interface{}, flags MapLookupFlags) error {
+	if m.typ.hasPerCPUValue() {
+		return m.lookupPerCPU(key, valueOut, flags)
+	}
+
+	valuePtr, valueBytes := makeBuffer(valueOut, m.fullValueSize)
+	if err := m.lookup(key, valuePtr, flags); err != nil {
+		return err
+	}
+
+	return m.unmarshalValue(valueOut, valueBytes)
+}
+
+// LookupAndDelete retrieves and deletes a value from a Map.
+//
+// Returns ErrKeyNotExist if the key doesn't exist.
+func (m *Map) LookupAndDelete(key, valueOut interface{}) error {
+	return m.LookupAndDeleteWithFlags(key, valueOut, 0)
+}
+
+// LookupAndDeleteWithFlags retrieves and deletes a value from a Map.
+//
+// Passing LookupLock flag will look up and delete the value of a spin-locked
+// map without returning the lock. This must be specified if the elements
+// contain a spinlock.
+//
+// Returns ErrKeyNotExist if the key doesn't exist.
+func (m *Map) LookupAndDeleteWithFlags(key, valueOut interface{}, flags MapLookupFlags) error {
+	if m.typ.hasPerCPUValue() {
+		return m.lookupAndDeletePerCPU(key, valueOut, flags)
+	}
+
+	valuePtr, valueBytes := makeBuffer(valueOut, m.fullValueSize)
+	if err := m.lookupAndDelete(key, valuePtr, flags); err != nil {
+		return err
+	}
+	return m.unmarshalValue(valueOut, valueBytes)
+}
+
+// LookupBytes gets a value from Map.
+//
+// Returns a nil value if a key doesn't exist.
+func (m *Map) LookupBytes(key interface{}) ([]byte, error) {
+	valueBytes := make([]byte, m.fullValueSize)
+	valuePtr := sys.NewSlicePointer(valueBytes)
+
+	err := m.lookup(key, valuePtr, 0)
+	if errors.Is(err, ErrKeyNotExist) {
+		return nil, nil
+	}
+
+	return valueBytes, err
+}
+
+func (m *Map) lookupPerCPU(key, valueOut any, flags MapLookupFlags) error {
+	valueBytes := make([]byte, m.fullValueSize)
+	if err := m.lookup(key, sys.NewSlicePointer(valueBytes), flags); err != nil {
+		return err
+	}
+	return unmarshalPerCPUValue(valueOut, int(m.valueSize), valueBytes)
+}
+
+func (m *Map) lookup(key interface{}, valueOut sys.Pointer, flags MapLookupFlags) error {
+	keyPtr, err := m.marshalKey(key)
+	if err != nil {
+		return fmt.Errorf("can't marshal key: %w", err)
+	}
+
+	attr := sys.MapLookupElemAttr{
+		MapFd: m.fd.Uint(),
+		Key:   keyPtr,
+		Value: valueOut,
+		Flags: uint64(flags),
+	}
+
+	if err = sys.MapLookupElem(&attr); err != nil {
+		return fmt.Errorf("lookup: %w", wrapMapError(err))
+	}
+	return nil
+}
+
+func (m *Map) lookupAndDeletePerCPU(key, valueOut any, flags MapLookupFlags) error {
+	valueBytes := make([]byte, m.fullValueSize)
+	if err := m.lookupAndDelete(key, sys.NewSlicePointer(valueBytes), flags); err != nil {
+		return err
+	}
+	return unmarshalPerCPUValue(valueOut, int(m.valueSize), valueBytes)
+}
+
+func (m *Map) lookupAndDelete(key any, valuePtr sys.Pointer, flags MapLookupFlags) error {
+	keyPtr, err := m.marshalKey(key)
+	if err != nil {
+		return fmt.Errorf("can't marshal key: %w", err)
+	}
+
+	attr := sys.MapLookupAndDeleteElemAttr{
+		MapFd: m.fd.Uint(),
+		Key:   keyPtr,
+		Value: valuePtr,
+		Flags: uint64(flags),
+	}
+
+	if err := sys.MapLookupAndDeleteElem(&attr); err != nil {
+		return fmt.Errorf("lookup and delete: %w", wrapMapError(err))
+	}
+
+	return nil
+}
+
+// MapUpdateFlags controls the behaviour of the Map.Update call.
+//
+// The exact semantics depend on the specific MapType.
+type MapUpdateFlags uint64
+
+const (
+	// UpdateAny creates a new element or update an existing one.
+	UpdateAny MapUpdateFlags = iota
+	// UpdateNoExist creates a new element.
+	UpdateNoExist MapUpdateFlags = 1 << (iota - 1)
+	// UpdateExist updates an existing element.
+	UpdateExist
+	// UpdateLock updates elements under bpf_spin_lock.
+	UpdateLock
+)
+
+// Put replaces or creates a value in map.
+//
+// It is equivalent to calling Update with UpdateAny.
+func (m *Map) Put(key, value interface{}) error {
+	return m.Update(key, value, UpdateAny)
+}
+
+// Update changes the value of a key.
+func (m *Map) Update(key, value any, flags MapUpdateFlags) error {
+	if m.typ.hasPerCPUValue() {
+		return m.updatePerCPU(key, value, flags)
+	}
+
+	valuePtr, err := m.marshalValue(value)
+	if err != nil {
+		return fmt.Errorf("marshal value: %w", err)
+	}
+
+	return m.update(key, valuePtr, flags)
+}
+
+func (m *Map) updatePerCPU(key, value any, flags MapUpdateFlags) error {
+	valuePtr, err := marshalPerCPUValue(value, int(m.valueSize))
+	if err != nil {
+		return fmt.Errorf("marshal value: %w", err)
+	}
+
+	return m.update(key, valuePtr, flags)
+}
+
+func (m *Map) update(key any, valuePtr sys.Pointer, flags MapUpdateFlags) error {
+	keyPtr, err := m.marshalKey(key)
+	if err != nil {
+		return fmt.Errorf("marshal key: %w", err)
+	}
+
+	attr := sys.MapUpdateElemAttr{
+		MapFd: m.fd.Uint(),
+		Key:   keyPtr,
+		Value: valuePtr,
+		Flags: uint64(flags),
+	}
+
+	if err = sys.MapUpdateElem(&attr); err != nil {
+		return fmt.Errorf("update: %w", wrapMapError(err))
+	}
+
+	return nil
+}
+
+// Delete removes a value.
+//
+// Returns ErrKeyNotExist if the key does not exist.
+func (m *Map) Delete(key interface{}) error {
+	keyPtr, err := m.marshalKey(key)
+	if err != nil {
+		return fmt.Errorf("can't marshal key: %w", err)
+	}
+
+	attr := sys.MapDeleteElemAttr{
+		MapFd: m.fd.Uint(),
+		Key:   keyPtr,
+	}
+
+	if err = sys.MapDeleteElem(&attr); err != nil {
+		return fmt.Errorf("delete: %w", wrapMapError(err))
+	}
+	return nil
+}
+
+// NextKey finds the key following an initial key.
+//
+// See NextKeyBytes for details.
+//
+// Returns ErrKeyNotExist if there is no next key.
+func (m *Map) NextKey(key, nextKeyOut interface{}) error {
+	nextKeyPtr, nextKeyBytes := makeBuffer(nextKeyOut, int(m.keySize))
+
+	if err := m.nextKey(key, nextKeyPtr); err != nil {
+		return err
+	}
+
+	if err := m.unmarshalKey(nextKeyOut, nextKeyBytes); err != nil {
+		return fmt.Errorf("can't unmarshal next key: %w", err)
+	}
+	return nil
+}
+
+// NextKeyBytes returns the key following an initial key as a byte slice.
+//
+// Passing nil will return the first key.
+//
+// Use Iterate if you want to traverse all entries in the map.
+//
+// Returns nil if there are no more keys.
+func (m *Map) NextKeyBytes(key interface{}) ([]byte, error) {
+	nextKey := make([]byte, m.keySize)
+	nextKeyPtr := sys.NewSlicePointer(nextKey)
+
+	err := m.nextKey(key, nextKeyPtr)
+	if errors.Is(err, ErrKeyNotExist) {
+		return nil, nil
+	}
+
+	return nextKey, err
+}
+
+func (m *Map) nextKey(key interface{}, nextKeyOut sys.Pointer) error {
+	var (
+		keyPtr sys.Pointer
+		err    error
+	)
+
+	if key != nil {
+		keyPtr, err = m.marshalKey(key)
+		if err != nil {
+			return fmt.Errorf("can't marshal key: %w", err)
+		}
+	}
+
+	attr := sys.MapGetNextKeyAttr{
+		MapFd:   m.fd.Uint(),
+		Key:     keyPtr,
+		NextKey: nextKeyOut,
+	}
+
+	if err = sys.MapGetNextKey(&attr); err != nil {
+		// Kernels 4.4.131 and earlier return EFAULT instead of a pointer to the
+		// first map element when a nil key pointer is specified.
+		if key == nil && errors.Is(err, unix.EFAULT) {
+			var guessKey []byte
+			guessKey, err = m.guessNonExistentKey()
+			if err != nil {
+				return err
+			}
+
+			// Retry the syscall with a valid non-existing key.
+			attr.Key = sys.NewSlicePointer(guessKey)
+			if err = sys.MapGetNextKey(&attr); err == nil {
+				return nil
+			}
+		}
+
+		return fmt.Errorf("next key: %w", wrapMapError(err))
+	}
+
+	return nil
+}
+
+var mmapProtectedPage = internal.Memoize(func() ([]byte, error) {
+	return unix.Mmap(-1, 0, os.Getpagesize(), unix.PROT_NONE, unix.MAP_ANON|unix.MAP_SHARED)
+})
+
+// guessNonExistentKey attempts to perform a map lookup that returns ENOENT.
+// This is necessary on kernels before 4.4.132, since those don't support
+// iterating maps from the start by providing an invalid key pointer.
+func (m *Map) guessNonExistentKey() ([]byte, error) {
+	// Map a protected page and use that as the value pointer. This saves some
+	// work copying out the value, which we're not interested in.
+	page, err := mmapProtectedPage()
+	if err != nil {
+		return nil, err
+	}
+	valuePtr := sys.NewSlicePointer(page)
+
+	randKey := make([]byte, int(m.keySize))
+
+	for i := 0; i < 4; i++ {
+		switch i {
+		// For hash maps, the 0 key is less likely to be occupied. They're often
+		// used for storing data related to pointers, and their access pattern is
+		// generally scattered across the keyspace.
+		case 0:
+		// An all-0xff key is guaranteed to be out of bounds of any array, since
+		// those have a fixed key size of 4 bytes. The only corner case being
+		// arrays with 2^32 max entries, but those are prohibitively expensive
+		// in many environments.
+		case 1:
+			for r := range randKey {
+				randKey[r] = 0xff
+			}
+		// Inspired by BCC, 0x55 is an alternating binary pattern (0101), so
+		// is unlikely to be taken.
+		case 2:
+			for r := range randKey {
+				randKey[r] = 0x55
+			}
+		// Last ditch effort, generate a random key.
+		case 3:
+			rand.New(rand.NewSource(time.Now().UnixNano())).Read(randKey)
+		}
+
+		err := m.lookup(randKey, valuePtr, 0)
+		if errors.Is(err, ErrKeyNotExist) {
+			return randKey, nil
+		}
+	}
+
+	return nil, errors.New("couldn't find non-existing key")
+}
+
+// BatchLookup looks up many elements in a map at once.
+//
+// "keysOut" and "valuesOut" must be of type slice, a pointer
+// to a slice or buffer will not work.
+// "prevKey" is the key to start the batch lookup from, it will
+// *not* be included in the results. Use nil to start at the first key.
+//
+// ErrKeyNotExist is returned when the batch lookup has reached
+// the end of all possible results, even when partial results
+// are returned. It should be used to evaluate when lookup is "done".
+func (m *Map) BatchLookup(prevKey, nextKeyOut, keysOut, valuesOut interface{}, opts *BatchOptions) (int, error) {
+	return m.batchLookup(sys.BPF_MAP_LOOKUP_BATCH, prevKey, nextKeyOut, keysOut, valuesOut, opts)
+}
+
+// BatchLookupAndDelete looks up many elements in a map at once,
+//
+// It then deletes all those elements.
+// "keysOut" and "valuesOut" must be of type slice, a pointer
+// to a slice or buffer will not work.
+// "prevKey" is the key to start the batch lookup from, it will
+// *not* be included in the results. Use nil to start at the first key.
+//
+// ErrKeyNotExist is returned when the batch lookup has reached
+// the end of all possible results, even when partial results
+// are returned. It should be used to evaluate when lookup is "done".
+func (m *Map) BatchLookupAndDelete(prevKey, nextKeyOut, keysOut, valuesOut interface{}, opts *BatchOptions) (int, error) {
+	return m.batchLookup(sys.BPF_MAP_LOOKUP_AND_DELETE_BATCH, prevKey, nextKeyOut, keysOut, valuesOut, opts)
+}
+
+func (m *Map) batchLookup(cmd sys.Cmd, startKey, nextKeyOut, keysOut, valuesOut interface{}, opts *BatchOptions) (int, error) {
+	if err := haveBatchAPI(); err != nil {
+		return 0, err
+	}
+	if m.typ.hasPerCPUValue() {
+		return 0, ErrNotSupported
+	}
+	keysValue := reflect.ValueOf(keysOut)
+	if keysValue.Kind() != reflect.Slice {
+		return 0, fmt.Errorf("keys must be a slice")
+	}
+	valuesValue := reflect.ValueOf(valuesOut)
+	if valuesValue.Kind() != reflect.Slice {
+		return 0, fmt.Errorf("valuesOut must be a slice")
+	}
+	count := keysValue.Len()
+	if count != valuesValue.Len() {
+		return 0, fmt.Errorf("keysOut and valuesOut must be the same length")
+	}
+	keyBuf := make([]byte, count*int(m.keySize))
+	keyPtr := sys.NewSlicePointer(keyBuf)
+	valueBuf := make([]byte, count*int(m.fullValueSize))
+	valuePtr := sys.NewSlicePointer(valueBuf)
+	nextPtr, nextBuf := makeBuffer(nextKeyOut, int(m.keySize))
+
+	attr := sys.MapLookupBatchAttr{
+		MapFd:    m.fd.Uint(),
+		Keys:     keyPtr,
+		Values:   valuePtr,
+		Count:    uint32(count),
+		OutBatch: nextPtr,
+	}
+
+	if opts != nil {
+		attr.ElemFlags = opts.ElemFlags
+		attr.Flags = opts.Flags
+	}
+
+	var err error
+	if startKey != nil {
+		attr.InBatch, err = marshalPtr(startKey, int(m.keySize))
+		if err != nil {
+			return 0, err
+		}
+	}
+
+	_, sysErr := sys.BPF(cmd, unsafe.Pointer(&attr), unsafe.Sizeof(attr))
+	sysErr = wrapMapError(sysErr)
+	if sysErr != nil && !errors.Is(sysErr, unix.ENOENT) {
+		return 0, sysErr
+	}
+
+	err = m.unmarshalKey(nextKeyOut, nextBuf)
+	if err != nil {
+		return 0, err
+	}
+	err = unmarshalBytes(keysOut, keyBuf)
+	if err != nil {
+		return 0, err
+	}
+	err = unmarshalBytes(valuesOut, valueBuf)
+	if err != nil {
+		return 0, err
+	}
+
+	return int(attr.Count), sysErr
+}
+
+// BatchUpdate updates the map with multiple keys and values
+// simultaneously.
+// "keys" and "values" must be of type slice, a pointer
+// to a slice or buffer will not work.
+func (m *Map) BatchUpdate(keys, values interface{}, opts *BatchOptions) (int, error) {
+	if err := haveBatchAPI(); err != nil {
+		return 0, err
+	}
+	if m.typ.hasPerCPUValue() {
+		return 0, ErrNotSupported
+	}
+	keysValue := reflect.ValueOf(keys)
+	if keysValue.Kind() != reflect.Slice {
+		return 0, fmt.Errorf("keys must be a slice")
+	}
+	valuesValue := reflect.ValueOf(values)
+	if valuesValue.Kind() != reflect.Slice {
+		return 0, fmt.Errorf("values must be a slice")
+	}
+	var (
+		count    = keysValue.Len()
+		valuePtr sys.Pointer
+		err      error
+	)
+	if count != valuesValue.Len() {
+		return 0, fmt.Errorf("keys and values must be the same length")
+	}
+	keyPtr, err := marshalPtr(keys, count*int(m.keySize))
+	if err != nil {
+		return 0, err
+	}
+	valuePtr, err = marshalPtr(values, count*int(m.valueSize))
+	if err != nil {
+		return 0, err
+	}
+
+	attr := sys.MapUpdateBatchAttr{
+		MapFd:  m.fd.Uint(),
+		Keys:   keyPtr,
+		Values: valuePtr,
+		Count:  uint32(count),
+	}
+	if opts != nil {
+		attr.ElemFlags = opts.ElemFlags
+		attr.Flags = opts.Flags
+	}
+
+	err = sys.MapUpdateBatch(&attr)
+	if err != nil {
+		return int(attr.Count), fmt.Errorf("batch update: %w", wrapMapError(err))
+	}
+
+	return int(attr.Count), nil
+}
+
+// BatchDelete batch deletes entries in the map by keys.
+// "keys" must be of type slice, a pointer to a slice or buffer will not work.
+func (m *Map) BatchDelete(keys interface{}, opts *BatchOptions) (int, error) {
+	if err := haveBatchAPI(); err != nil {
+		return 0, err
+	}
+	if m.typ.hasPerCPUValue() {
+		return 0, ErrNotSupported
+	}
+	keysValue := reflect.ValueOf(keys)
+	if keysValue.Kind() != reflect.Slice {
+		return 0, fmt.Errorf("keys must be a slice")
+	}
+	count := keysValue.Len()
+	keyPtr, err := marshalPtr(keys, count*int(m.keySize))
+	if err != nil {
+		return 0, fmt.Errorf("cannot marshal keys: %v", err)
+	}
+
+	attr := sys.MapDeleteBatchAttr{
+		MapFd: m.fd.Uint(),
+		Keys:  keyPtr,
+		Count: uint32(count),
+	}
+
+	if opts != nil {
+		attr.ElemFlags = opts.ElemFlags
+		attr.Flags = opts.Flags
+	}
+
+	if err = sys.MapDeleteBatch(&attr); err != nil {
+		return int(attr.Count), fmt.Errorf("batch delete: %w", wrapMapError(err))
+	}
+
+	return int(attr.Count), nil
+}
+
+// Iterate traverses a map.
+//
+// It's safe to create multiple iterators at the same time.
+//
+// It's not possible to guarantee that all keys in a map will be
+// returned if there are concurrent modifications to the map.
+func (m *Map) Iterate() *MapIterator {
+	return newMapIterator(m)
+}
+
+// Close the Map's underlying file descriptor, which could unload the
+// Map from the kernel if it is not pinned or in use by a loaded Program.
+func (m *Map) Close() error {
+	if m == nil {
+		// This makes it easier to clean up when iterating maps
+		// of maps / programs.
+		return nil
+	}
+
+	return m.fd.Close()
+}
+
+// FD gets the file descriptor of the Map.
+//
+// Calling this function is invalid after Close has been called.
+func (m *Map) FD() int {
+	return m.fd.Int()
+}
+
+// Clone creates a duplicate of the Map.
+//
+// Closing the duplicate does not affect the original, and vice versa.
+// Changes made to the map are reflected by both instances however.
+// If the original map was pinned, the cloned map will not be pinned by default.
+//
+// Cloning a nil Map returns nil.
+func (m *Map) Clone() (*Map, error) {
+	if m == nil {
+		return nil, nil
+	}
+
+	dup, err := m.fd.Dup()
+	if err != nil {
+		return nil, fmt.Errorf("can't clone map: %w", err)
+	}
+
+	return &Map{
+		m.name,
+		dup,
+		m.typ,
+		m.keySize,
+		m.valueSize,
+		m.maxEntries,
+		m.flags,
+		"",
+		m.fullValueSize,
+	}, nil
+}
+
+// Pin persists the map on the BPF virtual file system past the lifetime of
+// the process that created it .
+//
+// Calling Pin on a previously pinned map will overwrite the path, except when
+// the new path already exists. Re-pinning across filesystems is not supported.
+// You can Clone a map to pin it to a different path.
+//
+// This requires bpffs to be mounted above fileName.
+// See https://docs.cilium.io/en/stable/network/kubernetes/configuration/#mounting-bpffs-with-systemd
+func (m *Map) Pin(fileName string) error {
+	if err := internal.Pin(m.pinnedPath, fileName, m.fd); err != nil {
+		return err
+	}
+	m.pinnedPath = fileName
+	return nil
+}
+
+// Unpin removes the persisted state for the map from the BPF virtual filesystem.
+//
+// Failed calls to Unpin will not alter the state returned by IsPinned.
+//
+// Unpinning an unpinned Map returns nil.
+func (m *Map) Unpin() error {
+	if err := internal.Unpin(m.pinnedPath); err != nil {
+		return err
+	}
+	m.pinnedPath = ""
+	return nil
+}
+
+// IsPinned returns true if the map has a non-empty pinned path.
+func (m *Map) IsPinned() bool {
+	return m.pinnedPath != ""
+}
+
+// Freeze prevents a map to be modified from user space.
+//
+// It makes no changes to kernel-side restrictions.
+func (m *Map) Freeze() error {
+	if err := haveMapMutabilityModifiers(); err != nil {
+		return fmt.Errorf("can't freeze map: %w", err)
+	}
+
+	attr := sys.MapFreezeAttr{
+		MapFd: m.fd.Uint(),
+	}
+
+	if err := sys.MapFreeze(&attr); err != nil {
+		return fmt.Errorf("can't freeze map: %w", err)
+	}
+	return nil
+}
+
+// finalize populates the Map according to the Contents specified
+// in spec and freezes the Map if requested by spec.
+func (m *Map) finalize(spec *MapSpec) error {
+	for _, kv := range spec.Contents {
+		if err := m.Put(kv.Key, kv.Value); err != nil {
+			return fmt.Errorf("putting value: key %v: %w", kv.Key, err)
+		}
+	}
+
+	if spec.Freeze {
+		if err := m.Freeze(); err != nil {
+			return fmt.Errorf("freezing map: %w", err)
+		}
+	}
+
+	return nil
+}
+
+func (m *Map) marshalKey(data interface{}) (sys.Pointer, error) {
+	if data == nil {
+		if m.keySize == 0 {
+			// Queues have a key length of zero, so passing nil here is valid.
+			return sys.NewPointer(nil), nil
+		}
+		return sys.Pointer{}, errors.New("can't use nil as key of map")
+	}
+
+	return marshalPtr(data, int(m.keySize))
+}
+
+func (m *Map) unmarshalKey(data interface{}, buf []byte) error {
+	if buf == nil {
+		// This is from a makeBuffer call, nothing do do here.
+		return nil
+	}
+
+	return unmarshalBytes(data, buf)
+}
+
+func (m *Map) marshalValue(data interface{}) (sys.Pointer, error) {
+	var (
+		buf []byte
+		err error
+	)
+
+	switch value := data.(type) {
+	case *Map:
+		if !m.typ.canStoreMap() {
+			return sys.Pointer{}, fmt.Errorf("can't store map in %s", m.typ)
+		}
+		buf, err = marshalMap(value, int(m.valueSize))
+
+	case *Program:
+		if !m.typ.canStoreProgram() {
+			return sys.Pointer{}, fmt.Errorf("can't store program in %s", m.typ)
+		}
+		buf, err = marshalProgram(value, int(m.valueSize))
+
+	default:
+		return marshalPtr(data, int(m.valueSize))
+	}
+
+	if err != nil {
+		return sys.Pointer{}, err
+	}
+
+	return sys.NewSlicePointer(buf), nil
+}
+
+func (m *Map) unmarshalValue(value interface{}, buf []byte) error {
+	if buf == nil {
+		// This is from a makeBuffer call, nothing do do here.
+		return nil
+	}
+
+	if m.typ.hasPerCPUValue() {
+		return unmarshalPerCPUValue(value, int(m.valueSize), buf)
+	}
+
+	switch value := value.(type) {
+	case **Map:
+		if !m.typ.canStoreMap() {
+			return fmt.Errorf("can't read a map from %s", m.typ)
+		}
+
+		other, err := unmarshalMap(buf)
+		if err != nil {
+			return err
+		}
+
+		// The caller might close the map externally, so ignore errors.
+		_ = (*value).Close()
+
+		*value = other
+		return nil
+
+	case *Map:
+		if !m.typ.canStoreMap() {
+			return fmt.Errorf("can't read a map from %s", m.typ)
+		}
+		return errors.New("require pointer to *Map")
+
+	case **Program:
+		if !m.typ.canStoreProgram() {
+			return fmt.Errorf("can't read a program from %s", m.typ)
+		}
+
+		other, err := unmarshalProgram(buf)
+		if err != nil {
+			return err
+		}
+
+		// The caller might close the program externally, so ignore errors.
+		_ = (*value).Close()
+
+		*value = other
+		return nil
+
+	case *Program:
+		if !m.typ.canStoreProgram() {
+			return fmt.Errorf("can't read a program from %s", m.typ)
+		}
+		return errors.New("require pointer to *Program")
+	}
+
+	return unmarshalBytes(value, buf)
+}
+
+// LoadPinnedMap loads a Map from a BPF file.
+func LoadPinnedMap(fileName string, opts *LoadPinOptions) (*Map, error) {
+	fd, err := sys.ObjGet(&sys.ObjGetAttr{
+		Pathname:  sys.NewStringPointer(fileName),
+		FileFlags: opts.Marshal(),
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	m, err := newMapFromFD(fd)
+	if err == nil {
+		m.pinnedPath = fileName
+	}
+
+	return m, err
+}
+
+// unmarshalMap creates a map from a map ID encoded in host endianness.
+func unmarshalMap(buf []byte) (*Map, error) {
+	if len(buf) != 4 {
+		return nil, errors.New("map id requires 4 byte value")
+	}
+
+	id := internal.NativeEndian.Uint32(buf)
+	return NewMapFromID(MapID(id))
+}
+
+// marshalMap marshals the fd of a map into a buffer in host endianness.
+func marshalMap(m *Map, length int) ([]byte, error) {
+	if length != 4 {
+		return nil, fmt.Errorf("can't marshal map to %d bytes", length)
+	}
+
+	buf := make([]byte, 4)
+	internal.NativeEndian.PutUint32(buf, m.fd.Uint())
+	return buf, nil
+}
+
+// MapIterator iterates a Map.
+//
+// See Map.Iterate.
+type MapIterator struct {
+	target            *Map
+	curKey            []byte
+	count, maxEntries uint32
+	done              bool
+	err               error
+}
+
+func newMapIterator(target *Map) *MapIterator {
+	return &MapIterator{
+		target:     target,
+		maxEntries: target.maxEntries,
+	}
+}
+
+// Next decodes the next key and value.
+//
+// Iterating a hash map from which keys are being deleted is not
+// safe. You may see the same key multiple times. Iteration may
+// also abort with an error, see IsIterationAborted.
+//
+// Returns false if there are no more entries. You must check
+// the result of Err afterwards.
+//
+// See Map.Get for further caveats around valueOut.
+func (mi *MapIterator) Next(keyOut, valueOut interface{}) bool {
+	if mi.err != nil || mi.done {
+		return false
+	}
+
+	// For array-like maps NextKeyBytes returns nil only on after maxEntries
+	// iterations.
+	for mi.count <= mi.maxEntries {
+		var nextKey []byte
+		if mi.curKey == nil {
+			// Pass nil interface to NextKeyBytes to make sure the Map's first key
+			// is returned. If we pass an uninitialized []byte instead, it'll see a
+			// non-nil interface and try to marshal it.
+			nextKey, mi.err = mi.target.NextKeyBytes(nil)
+
+			mi.curKey = make([]byte, mi.target.keySize)
+		} else {
+			nextKey, mi.err = mi.target.NextKeyBytes(mi.curKey)
+		}
+		if mi.err != nil {
+			mi.err = fmt.Errorf("get next key: %w", mi.err)
+			return false
+		}
+
+		if nextKey == nil {
+			mi.done = true
+			return false
+		}
+
+		// The user can get access to nextKey since unmarshalBytes
+		// does not copy when unmarshaling into a []byte.
+		// Make a copy to prevent accidental corruption of
+		// iterator state.
+		copy(mi.curKey, nextKey)
+
+		mi.count++
+		mi.err = mi.target.Lookup(nextKey, valueOut)
+		if errors.Is(mi.err, ErrKeyNotExist) {
+			// Even though the key should be valid, we couldn't look up
+			// its value. If we're iterating a hash map this is probably
+			// because a concurrent delete removed the value before we
+			// could get it. This means that the next call to NextKeyBytes
+			// is very likely to restart iteration.
+			// If we're iterating one of the fd maps like
+			// ProgramArray it means that a given slot doesn't have
+			// a valid fd associated. It's OK to continue to the next slot.
+			continue
+		}
+		if mi.err != nil {
+			mi.err = fmt.Errorf("look up next key: %w", mi.err)
+			return false
+		}
+
+		mi.err = mi.target.unmarshalKey(keyOut, nextKey)
+		return mi.err == nil
+	}
+
+	mi.err = fmt.Errorf("%w", ErrIterationAborted)
+	return false
+}
+
+// Err returns any encountered error.
+//
+// The method must be called after Next returns nil.
+//
+// Returns ErrIterationAborted if it wasn't possible to do a full iteration.
+func (mi *MapIterator) Err() error {
+	return mi.err
+}
+
+// MapGetNextID returns the ID of the next eBPF map.
+//
+// Returns ErrNotExist, if there is no next eBPF map.
+func MapGetNextID(startID MapID) (MapID, error) {
+	attr := &sys.MapGetNextIdAttr{Id: uint32(startID)}
+	return MapID(attr.NextId), sys.MapGetNextId(attr)
+}
+
+// NewMapFromID returns the map for a given id.
+//
+// Returns ErrNotExist, if there is no eBPF map with the given id.
+func NewMapFromID(id MapID) (*Map, error) {
+	fd, err := sys.MapGetFdById(&sys.MapGetFdByIdAttr{
+		Id: uint32(id),
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	return newMapFromFD(fd)
+}
diff --git a/vendor/github.com/cilium/ebpf/marshalers.go b/vendor/github.com/cilium/ebpf/marshalers.go
new file mode 100644
index 00000000000..a568bff9207
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/marshalers.go
@@ -0,0 +1,249 @@
+package ebpf
+
+import (
+	"bytes"
+	"encoding"
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"reflect"
+	"runtime"
+	"sync"
+	"unsafe"
+
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+)
+
+// marshalPtr converts an arbitrary value into a pointer suitable
+// to be passed to the kernel.
+//
+// As an optimization, it returns the original value if it is an
+// unsafe.Pointer.
+func marshalPtr(data interface{}, length int) (sys.Pointer, error) {
+	if ptr, ok := data.(unsafe.Pointer); ok {
+		return sys.NewPointer(ptr), nil
+	}
+
+	buf, err := marshalBytes(data, length)
+	if err != nil {
+		return sys.Pointer{}, err
+	}
+
+	return sys.NewSlicePointer(buf), nil
+}
+
+// marshalBytes converts an arbitrary value into a byte buffer.
+//
+// Prefer using Map.marshalKey and Map.marshalValue if possible, since
+// those have special cases that allow more types to be encoded.
+//
+// Returns an error if the given value isn't representable in exactly
+// length bytes.
+func marshalBytes(data interface{}, length int) (buf []byte, err error) {
+	if data == nil {
+		return nil, errors.New("can't marshal a nil value")
+	}
+
+	switch value := data.(type) {
+	case encoding.BinaryMarshaler:
+		buf, err = value.MarshalBinary()
+	case string:
+		buf = []byte(value)
+	case []byte:
+		buf = value
+	case unsafe.Pointer:
+		err = errors.New("can't marshal from unsafe.Pointer")
+	case Map, *Map, Program, *Program:
+		err = fmt.Errorf("can't marshal %T", value)
+	default:
+		wr := internal.NewBuffer(make([]byte, 0, length))
+		defer internal.PutBuffer(wr)
+
+		err = binary.Write(wr, internal.NativeEndian, value)
+		if err != nil {
+			err = fmt.Errorf("encoding %T: %v", value, err)
+		}
+		buf = wr.Bytes()
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	if len(buf) != length {
+		return nil, fmt.Errorf("%T doesn't marshal to %d bytes", data, length)
+	}
+	return buf, nil
+}
+
+func makeBuffer(dst interface{}, length int) (sys.Pointer, []byte) {
+	if ptr, ok := dst.(unsafe.Pointer); ok {
+		return sys.NewPointer(ptr), nil
+	}
+
+	buf := make([]byte, length)
+	return sys.NewSlicePointer(buf), buf
+}
+
+var bytesReaderPool = sync.Pool{
+	New: func() interface{} {
+		return new(bytes.Reader)
+	},
+}
+
+// unmarshalBytes converts a byte buffer into an arbitrary value.
+//
+// Prefer using Map.unmarshalKey and Map.unmarshalValue if possible, since
+// those have special cases that allow more types to be encoded.
+//
+// The common int32 and int64 types are directly handled to avoid
+// unnecessary heap allocations as happening in the default case.
+func unmarshalBytes(data interface{}, buf []byte) error {
+	switch value := data.(type) {
+	case unsafe.Pointer:
+		dst := unsafe.Slice((*byte)(value), len(buf))
+		copy(dst, buf)
+		runtime.KeepAlive(value)
+		return nil
+	case Map, *Map, Program, *Program:
+		return fmt.Errorf("can't unmarshal into %T", value)
+	case encoding.BinaryUnmarshaler:
+		return value.UnmarshalBinary(buf)
+	case *string:
+		*value = string(buf)
+		return nil
+	case *[]byte:
+		*value = buf
+		return nil
+	case *int32:
+		if len(buf) < 4 {
+			return errors.New("int32 requires 4 bytes")
+		}
+		*value = int32(internal.NativeEndian.Uint32(buf))
+		return nil
+	case *uint32:
+		if len(buf) < 4 {
+			return errors.New("uint32 requires 4 bytes")
+		}
+		*value = internal.NativeEndian.Uint32(buf)
+		return nil
+	case *int64:
+		if len(buf) < 8 {
+			return errors.New("int64 requires 8 bytes")
+		}
+		*value = int64(internal.NativeEndian.Uint64(buf))
+		return nil
+	case *uint64:
+		if len(buf) < 8 {
+			return errors.New("uint64 requires 8 bytes")
+		}
+		*value = internal.NativeEndian.Uint64(buf)
+		return nil
+	case string:
+		return errors.New("require pointer to string")
+	case []byte:
+		return errors.New("require pointer to []byte")
+	default:
+		rd := bytesReaderPool.Get().(*bytes.Reader)
+		rd.Reset(buf)
+		defer bytesReaderPool.Put(rd)
+		if err := binary.Read(rd, internal.NativeEndian, value); err != nil {
+			return fmt.Errorf("decoding %T: %v", value, err)
+		}
+		return nil
+	}
+}
+
+// marshalPerCPUValue encodes a slice containing one value per
+// possible CPU into a buffer of bytes.
+//
+// Values are initialized to zero if the slice has less elements than CPUs.
+//
+// slice must have a type like []elementType.
+func marshalPerCPUValue(slice interface{}, elemLength int) (sys.Pointer, error) {
+	sliceType := reflect.TypeOf(slice)
+	if sliceType.Kind() != reflect.Slice {
+		return sys.Pointer{}, errors.New("per-CPU value requires slice")
+	}
+
+	possibleCPUs, err := internal.PossibleCPUs()
+	if err != nil {
+		return sys.Pointer{}, err
+	}
+
+	sliceValue := reflect.ValueOf(slice)
+	sliceLen := sliceValue.Len()
+	if sliceLen > possibleCPUs {
+		return sys.Pointer{}, fmt.Errorf("per-CPU value exceeds number of CPUs")
+	}
+
+	alignedElemLength := internal.Align(elemLength, 8)
+	buf := make([]byte, alignedElemLength*possibleCPUs)
+
+	for i := 0; i < sliceLen; i++ {
+		elem := sliceValue.Index(i).Interface()
+		elemBytes, err := marshalBytes(elem, elemLength)
+		if err != nil {
+			return sys.Pointer{}, err
+		}
+
+		offset := i * alignedElemLength
+		copy(buf[offset:offset+elemLength], elemBytes)
+	}
+
+	return sys.NewSlicePointer(buf), nil
+}
+
+// unmarshalPerCPUValue decodes a buffer into a slice containing one value per
+// possible CPU.
+//
+// valueOut must have a type like *[]elementType
+func unmarshalPerCPUValue(slicePtr interface{}, elemLength int, buf []byte) error {
+	slicePtrType := reflect.TypeOf(slicePtr)
+	if slicePtrType.Kind() != reflect.Ptr || slicePtrType.Elem().Kind() != reflect.Slice {
+		return fmt.Errorf("per-cpu value requires pointer to slice")
+	}
+
+	possibleCPUs, err := internal.PossibleCPUs()
+	if err != nil {
+		return err
+	}
+
+	sliceType := slicePtrType.Elem()
+	slice := reflect.MakeSlice(sliceType, possibleCPUs, possibleCPUs)
+
+	sliceElemType := sliceType.Elem()
+	sliceElemIsPointer := sliceElemType.Kind() == reflect.Ptr
+	if sliceElemIsPointer {
+		sliceElemType = sliceElemType.Elem()
+	}
+
+	step := len(buf) / possibleCPUs
+	if step < elemLength {
+		return fmt.Errorf("per-cpu element length is larger than available data")
+	}
+	for i := 0; i < possibleCPUs; i++ {
+		var elem interface{}
+		if sliceElemIsPointer {
+			newElem := reflect.New(sliceElemType)
+			slice.Index(i).Set(newElem)
+			elem = newElem.Interface()
+		} else {
+			elem = slice.Index(i).Addr().Interface()
+		}
+
+		// Make a copy, since unmarshal can hold on to itemBytes
+		elemBytes := make([]byte, elemLength)
+		copy(elemBytes, buf[:elemLength])
+
+		err := unmarshalBytes(elem, elemBytes)
+		if err != nil {
+			return fmt.Errorf("cpu %d: %w", i, err)
+		}
+
+		buf = buf[step:]
+	}
+
+	reflect.ValueOf(slicePtr).Elem().Set(slice)
+	return nil
+}
diff --git a/vendor/github.com/cilium/ebpf/prog.go b/vendor/github.com/cilium/ebpf/prog.go
new file mode 100644
index 00000000000..70aaef55327
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/prog.go
@@ -0,0 +1,1026 @@
+package ebpf
+
+import (
+	"bytes"
+	"encoding/binary"
+	"errors"
+	"fmt"
+	"math"
+	"path/filepath"
+	"runtime"
+	"strings"
+	"time"
+	"unsafe"
+
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/btf"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+// ErrNotSupported is returned whenever the kernel doesn't support a feature.
+var ErrNotSupported = internal.ErrNotSupported
+
+// ProgramID represents the unique ID of an eBPF program.
+type ProgramID uint32
+
+const (
+	// Number of bytes to pad the output buffer for BPF_PROG_TEST_RUN.
+	// This is currently the maximum of spare space allocated for SKB
+	// and XDP programs, and equal to XDP_PACKET_HEADROOM + NET_IP_ALIGN.
+	outputPad = 256 + 2
+)
+
+// DefaultVerifierLogSize is the default number of bytes allocated for the
+// verifier log.
+const DefaultVerifierLogSize = 64 * 1024
+
+// maxVerifierLogSize is the maximum size of verifier log buffer the kernel
+// will accept before returning EINVAL.
+const maxVerifierLogSize = math.MaxUint32 >> 2
+
+// ProgramOptions control loading a program into the kernel.
+type ProgramOptions struct {
+	// Bitmap controlling the detail emitted by the kernel's eBPF verifier log.
+	// LogLevel-type values can be ORed together to request specific kinds of
+	// verifier output. See the documentation on [ebpf.LogLevel] for details.
+	//
+	//  opts.LogLevel = (ebpf.LogLevelBranch | ebpf.LogLevelStats)
+	//
+	// If left to its default value, the program will first be loaded without
+	// verifier output enabled. Upon error, the program load will be repeated
+	// with LogLevelBranch and the given (or default) LogSize value.
+	//
+	// Setting this to a non-zero value will unconditionally enable the verifier
+	// log, populating the [ebpf.Program.VerifierLog] field on successful loads
+	// and including detailed verifier errors if the program is rejected. This
+	// will always allocate an output buffer, but will result in only a single
+	// attempt at loading the program.
+	LogLevel LogLevel
+
+	// Controls the output buffer size for the verifier log, in bytes. See the
+	// documentation on ProgramOptions.LogLevel for details about how this value
+	// is used.
+	//
+	// If this value is set too low to fit the verifier log, the resulting
+	// [ebpf.VerifierError]'s Truncated flag will be true, and the error string
+	// will also contain a hint to that effect.
+	//
+	// Defaults to DefaultVerifierLogSize.
+	LogSize int
+
+	// Disables the verifier log completely, regardless of other options.
+	LogDisabled bool
+
+	// Type information used for CO-RE relocations.
+	//
+	// This is useful in environments where the kernel BTF is not available
+	// (containers) or where it is in a non-standard location. Defaults to
+	// use the kernel BTF from a well-known location if nil.
+	KernelTypes *btf.Spec
+}
+
+// ProgramSpec defines a Program.
+type ProgramSpec struct {
+	// Name is passed to the kernel as a debug aid. Must only contain
+	// alpha numeric and '_' characters.
+	Name string
+
+	// Type determines at which hook in the kernel a program will run.
+	Type ProgramType
+
+	// AttachType of the program, needed to differentiate allowed context
+	// accesses in some newer program types like CGroupSockAddr.
+	//
+	// Available on kernels 4.17 and later.
+	AttachType AttachType
+
+	// Name of a kernel data structure or function to attach to. Its
+	// interpretation depends on Type and AttachType.
+	AttachTo string
+
+	// The program to attach to. Must be provided manually.
+	AttachTarget *Program
+
+	// The name of the ELF section this program originated from.
+	SectionName string
+
+	Instructions asm.Instructions
+
+	// Flags is passed to the kernel and specifies additional program
+	// load attributes.
+	Flags uint32
+
+	// License of the program. Some helpers are only available if
+	// the license is deemed compatible with the GPL.
+	//
+	// See https://www.kernel.org/doc/html/latest/process/license-rules.html#id1
+	License string
+
+	// Version used by Kprobe programs.
+	//
+	// Deprecated on kernels 5.0 and later. Leave empty to let the library
+	// detect this value automatically.
+	KernelVersion uint32
+
+	// The byte order this program was compiled for, may be nil.
+	ByteOrder binary.ByteOrder
+}
+
+// Copy returns a copy of the spec.
+func (ps *ProgramSpec) Copy() *ProgramSpec {
+	if ps == nil {
+		return nil
+	}
+
+	cpy := *ps
+	cpy.Instructions = make(asm.Instructions, len(ps.Instructions))
+	copy(cpy.Instructions, ps.Instructions)
+	return &cpy
+}
+
+// Tag calculates the kernel tag for a series of instructions.
+//
+// Use asm.Instructions.Tag if you need to calculate for non-native endianness.
+func (ps *ProgramSpec) Tag() (string, error) {
+	return ps.Instructions.Tag(internal.NativeEndian)
+}
+
+// VerifierError is returned by [NewProgram] and [NewProgramWithOptions] if a
+// program is rejected by the verifier.
+//
+// Use [errors.As] to access the error.
+type VerifierError = internal.VerifierError
+
+// Program represents BPF program loaded into the kernel.
+//
+// It is not safe to close a Program which is used by other goroutines.
+type Program struct {
+	// Contains the output of the kernel verifier if enabled,
+	// otherwise it is empty.
+	VerifierLog string
+
+	fd         *sys.FD
+	name       string
+	pinnedPath string
+	typ        ProgramType
+}
+
+// NewProgram creates a new Program.
+//
+// See [NewProgramWithOptions] for details.
+//
+// Returns a [VerifierError] containing the full verifier log if the program is
+// rejected by the kernel.
+func NewProgram(spec *ProgramSpec) (*Program, error) {
+	return NewProgramWithOptions(spec, ProgramOptions{})
+}
+
+// NewProgramWithOptions creates a new Program.
+//
+// Loading a program for the first time will perform
+// feature detection by loading small, temporary programs.
+//
+// Returns a [VerifierError] containing the full verifier log if the program is
+// rejected by the kernel.
+func NewProgramWithOptions(spec *ProgramSpec, opts ProgramOptions) (*Program, error) {
+	if spec == nil {
+		return nil, errors.New("can't load a program from a nil spec")
+	}
+
+	prog, err := newProgramWithOptions(spec, opts)
+	if errors.Is(err, asm.ErrUnsatisfiedMapReference) {
+		return nil, fmt.Errorf("cannot load program without loading its whole collection: %w", err)
+	}
+	return prog, err
+}
+
+func newProgramWithOptions(spec *ProgramSpec, opts ProgramOptions) (*Program, error) {
+	if len(spec.Instructions) == 0 {
+		return nil, errors.New("instructions cannot be empty")
+	}
+
+	if spec.Type == UnspecifiedProgram {
+		return nil, errors.New("can't load program of unspecified type")
+	}
+
+	if spec.ByteOrder != nil && spec.ByteOrder != internal.NativeEndian {
+		return nil, fmt.Errorf("can't load %s program on %s", spec.ByteOrder, internal.NativeEndian)
+	}
+
+	if opts.LogSize < 0 {
+		return nil, errors.New("ProgramOptions.LogSize must be a positive value; disable verifier logs using ProgramOptions.LogDisabled")
+	}
+
+	// Kernels before 5.0 (6c4fc209fcf9 "bpf: remove useless version check for prog load")
+	// require the version field to be set to the value of the KERNEL_VERSION
+	// macro for kprobe-type programs.
+	// Overwrite Kprobe program version if set to zero or the magic version constant.
+	kv := spec.KernelVersion
+	if spec.Type == Kprobe && (kv == 0 || kv == internal.MagicKernelVersion) {
+		v, err := internal.KernelVersion()
+		if err != nil {
+			return nil, fmt.Errorf("detecting kernel version: %w", err)
+		}
+		kv = v.Kernel()
+	}
+
+	attr := &sys.ProgLoadAttr{
+		ProgType:           sys.ProgType(spec.Type),
+		ProgFlags:          spec.Flags,
+		ExpectedAttachType: sys.AttachType(spec.AttachType),
+		License:            sys.NewStringPointer(spec.License),
+		KernVersion:        kv,
+	}
+
+	if haveObjName() == nil {
+		attr.ProgName = sys.NewObjName(spec.Name)
+	}
+
+	insns := make(asm.Instructions, len(spec.Instructions))
+	copy(insns, spec.Instructions)
+
+	handle, fib, lib, err := btf.MarshalExtInfos(insns)
+	if err != nil && !errors.Is(err, btf.ErrNotSupported) {
+		return nil, fmt.Errorf("load ext_infos: %w", err)
+	}
+	if handle != nil {
+		defer handle.Close()
+
+		attr.ProgBtfFd = uint32(handle.FD())
+
+		attr.FuncInfoRecSize = btf.FuncInfoSize
+		attr.FuncInfoCnt = uint32(len(fib)) / btf.FuncInfoSize
+		attr.FuncInfo = sys.NewSlicePointer(fib)
+
+		attr.LineInfoRecSize = btf.LineInfoSize
+		attr.LineInfoCnt = uint32(len(lib)) / btf.LineInfoSize
+		attr.LineInfo = sys.NewSlicePointer(lib)
+	}
+
+	if err := applyRelocations(insns, opts.KernelTypes, spec.ByteOrder); err != nil {
+		return nil, fmt.Errorf("apply CO-RE relocations: %w", err)
+	}
+
+	kconfig, err := resolveKconfigReferences(insns)
+	if err != nil {
+		return nil, fmt.Errorf("resolve .kconfig: %w", err)
+	}
+	defer kconfig.Close()
+
+	if err := fixupAndValidate(insns); err != nil {
+		return nil, err
+	}
+
+	handles, err := fixupKfuncs(insns)
+	if err != nil {
+		return nil, fmt.Errorf("fixing up kfuncs: %w", err)
+	}
+	defer handles.close()
+
+	if len(handles) > 0 {
+		fdArray := handles.fdArray()
+		attr.FdArray = sys.NewPointer(unsafe.Pointer(&fdArray[0]))
+	}
+
+	buf := bytes.NewBuffer(make([]byte, 0, insns.Size()))
+	err = insns.Marshal(buf, internal.NativeEndian)
+	if err != nil {
+		return nil, err
+	}
+
+	bytecode := buf.Bytes()
+	attr.Insns = sys.NewSlicePointer(bytecode)
+	attr.InsnCnt = uint32(len(bytecode) / asm.InstructionSize)
+
+	if spec.AttachTarget != nil {
+		targetID, err := findTargetInProgram(spec.AttachTarget, spec.AttachTo, spec.Type, spec.AttachType)
+		if err != nil {
+			return nil, fmt.Errorf("attach %s/%s: %w", spec.Type, spec.AttachType, err)
+		}
+
+		attr.AttachBtfId = targetID
+		attr.AttachBtfObjFd = uint32(spec.AttachTarget.FD())
+		defer runtime.KeepAlive(spec.AttachTarget)
+	} else if spec.AttachTo != "" {
+		module, targetID, err := findProgramTargetInKernel(spec.AttachTo, spec.Type, spec.AttachType)
+		if err != nil && !errors.Is(err, errUnrecognizedAttachType) {
+			// We ignore errUnrecognizedAttachType since AttachTo may be non-empty
+			// for programs that don't attach anywhere.
+			return nil, fmt.Errorf("attach %s/%s: %w", spec.Type, spec.AttachType, err)
+		}
+
+		attr.AttachBtfId = targetID
+		if module != nil {
+			attr.AttachBtfObjFd = uint32(module.FD())
+			defer module.Close()
+		}
+	}
+
+	if opts.LogSize == 0 {
+		opts.LogSize = DefaultVerifierLogSize
+	}
+
+	// The caller requested a specific verifier log level. Set up the log buffer.
+	var logBuf []byte
+	if !opts.LogDisabled && opts.LogLevel != 0 {
+		logBuf = make([]byte, opts.LogSize)
+		attr.LogLevel = opts.LogLevel
+		attr.LogSize = uint32(len(logBuf))
+		attr.LogBuf = sys.NewSlicePointer(logBuf)
+	}
+
+	fd, err := sys.ProgLoad(attr)
+	if err == nil {
+		return &Program{unix.ByteSliceToString(logBuf), fd, spec.Name, "", spec.Type}, nil
+	}
+
+	// An error occurred loading the program, but the caller did not explicitly
+	// enable the verifier log. Re-run with branch-level verifier logs enabled to
+	// obtain more info. Preserve the original error to return it to the caller.
+	// An undersized log buffer will result in ENOSPC regardless of the underlying
+	// cause.
+	var err2 error
+	if !opts.LogDisabled && opts.LogLevel == 0 {
+		logBuf = make([]byte, opts.LogSize)
+		attr.LogLevel = LogLevelBranch
+		attr.LogSize = uint32(len(logBuf))
+		attr.LogBuf = sys.NewSlicePointer(logBuf)
+
+		_, err2 = sys.ProgLoad(attr)
+	}
+
+	switch {
+	case errors.Is(err, unix.EPERM):
+		if len(logBuf) > 0 && logBuf[0] == 0 {
+			// EPERM due to RLIMIT_MEMLOCK happens before the verifier, so we can
+			// check that the log is empty to reduce false positives.
+			return nil, fmt.Errorf("load program: %w (MEMLOCK may be too low, consider rlimit.RemoveMemlock)", err)
+		}
+
+		fallthrough
+
+	case errors.Is(err, unix.EINVAL):
+		if hasFunctionReferences(spec.Instructions) {
+			if err := haveBPFToBPFCalls(); err != nil {
+				return nil, fmt.Errorf("load program: %w", err)
+			}
+		}
+
+		if opts.LogSize > maxVerifierLogSize {
+			return nil, fmt.Errorf("load program: %w (ProgramOptions.LogSize exceeds maximum value of %d)", err, maxVerifierLogSize)
+		}
+	}
+
+	truncated := errors.Is(err, unix.ENOSPC) || errors.Is(err2, unix.ENOSPC)
+	return nil, internal.ErrorWithLog("load program", err, logBuf, truncated)
+}
+
+// NewProgramFromFD creates a program from a raw fd.
+//
+// You should not use fd after calling this function.
+//
+// Requires at least Linux 4.10.
+func NewProgramFromFD(fd int) (*Program, error) {
+	f, err := sys.NewFD(fd)
+	if err != nil {
+		return nil, err
+	}
+
+	return newProgramFromFD(f)
+}
+
+// NewProgramFromID returns the program for a given id.
+//
+// Returns ErrNotExist, if there is no eBPF program with the given id.
+func NewProgramFromID(id ProgramID) (*Program, error) {
+	fd, err := sys.ProgGetFdById(&sys.ProgGetFdByIdAttr{
+		Id: uint32(id),
+	})
+	if err != nil {
+		return nil, fmt.Errorf("get program by id: %w", err)
+	}
+
+	return newProgramFromFD(fd)
+}
+
+func newProgramFromFD(fd *sys.FD) (*Program, error) {
+	info, err := newProgramInfoFromFd(fd)
+	if err != nil {
+		fd.Close()
+		return nil, fmt.Errorf("discover program type: %w", err)
+	}
+
+	return &Program{"", fd, info.Name, "", info.Type}, nil
+}
+
+func (p *Program) String() string {
+	if p.name != "" {
+		return fmt.Sprintf("%s(%s)#%v", p.typ, p.name, p.fd)
+	}
+	return fmt.Sprintf("%s(%v)", p.typ, p.fd)
+}
+
+// Type returns the underlying type of the program.
+func (p *Program) Type() ProgramType {
+	return p.typ
+}
+
+// Info returns metadata about the program.
+//
+// Requires at least 4.10.
+func (p *Program) Info() (*ProgramInfo, error) {
+	return newProgramInfoFromFd(p.fd)
+}
+
+// Handle returns a reference to the program's type information in the kernel.
+//
+// Returns ErrNotSupported if the kernel has no BTF support, or if there is no
+// BTF associated with the program.
+func (p *Program) Handle() (*btf.Handle, error) {
+	info, err := p.Info()
+	if err != nil {
+		return nil, err
+	}
+
+	id, ok := info.BTFID()
+	if !ok {
+		return nil, fmt.Errorf("program %s: retrieve BTF ID: %w", p, ErrNotSupported)
+	}
+
+	return btf.NewHandleFromID(id)
+}
+
+// FD gets the file descriptor of the Program.
+//
+// It is invalid to call this function after Close has been called.
+func (p *Program) FD() int {
+	return p.fd.Int()
+}
+
+// Clone creates a duplicate of the Program.
+//
+// Closing the duplicate does not affect the original, and vice versa.
+//
+// Cloning a nil Program returns nil.
+func (p *Program) Clone() (*Program, error) {
+	if p == nil {
+		return nil, nil
+	}
+
+	dup, err := p.fd.Dup()
+	if err != nil {
+		return nil, fmt.Errorf("can't clone program: %w", err)
+	}
+
+	return &Program{p.VerifierLog, dup, p.name, "", p.typ}, nil
+}
+
+// Pin persists the Program on the BPF virtual file system past the lifetime of
+// the process that created it
+//
+// Calling Pin on a previously pinned program will overwrite the path, except when
+// the new path already exists. Re-pinning across filesystems is not supported.
+//
+// This requires bpffs to be mounted above fileName.
+// See https://docs.cilium.io/en/stable/network/kubernetes/configuration/#mounting-bpffs-with-systemd
+func (p *Program) Pin(fileName string) error {
+	if err := internal.Pin(p.pinnedPath, fileName, p.fd); err != nil {
+		return err
+	}
+	p.pinnedPath = fileName
+	return nil
+}
+
+// Unpin removes the persisted state for the Program from the BPF virtual filesystem.
+//
+// Failed calls to Unpin will not alter the state returned by IsPinned.
+//
+// Unpinning an unpinned Program returns nil.
+func (p *Program) Unpin() error {
+	if err := internal.Unpin(p.pinnedPath); err != nil {
+		return err
+	}
+	p.pinnedPath = ""
+	return nil
+}
+
+// IsPinned returns true if the Program has a non-empty pinned path.
+func (p *Program) IsPinned() bool {
+	return p.pinnedPath != ""
+}
+
+// Close the Program's underlying file descriptor, which could unload
+// the program from the kernel if it is not pinned or attached to a
+// kernel hook.
+func (p *Program) Close() error {
+	if p == nil {
+		return nil
+	}
+
+	return p.fd.Close()
+}
+
+// Various options for Run'ing a Program
+type RunOptions struct {
+	// Program's data input. Required field.
+	//
+	// The kernel expects at least 14 bytes input for an ethernet header for
+	// XDP and SKB programs.
+	Data []byte
+	// Program's data after Program has run. Caller must allocate. Optional field.
+	DataOut []byte
+	// Program's context input. Optional field.
+	Context interface{}
+	// Program's context after Program has run. Must be a pointer or slice. Optional field.
+	ContextOut interface{}
+	// Minimum number of times to run Program. Optional field. Defaults to 1.
+	//
+	// The program may be executed more often than this due to interruptions, e.g.
+	// when runtime.AllThreadsSyscall is invoked.
+	Repeat uint32
+	// Optional flags.
+	Flags uint32
+	// CPU to run Program on. Optional field.
+	// Note not all program types support this field.
+	CPU uint32
+	// Called whenever the syscall is interrupted, and should be set to testing.B.ResetTimer
+	// or similar. Typically used during benchmarking. Optional field.
+	//
+	// Deprecated: use [testing.B.ReportMetric] with unit "ns/op" instead.
+	Reset func()
+}
+
+// Test runs the Program in the kernel with the given input and returns the
+// value returned by the eBPF program. outLen may be zero.
+//
+// Note: the kernel expects at least 14 bytes input for an ethernet header for
+// XDP and SKB programs.
+//
+// This function requires at least Linux 4.12.
+func (p *Program) Test(in []byte) (uint32, []byte, error) {
+	// Older kernels ignore the dataSizeOut argument when copying to user space.
+	// Combined with things like bpf_xdp_adjust_head() we don't really know what the final
+	// size will be. Hence we allocate an output buffer which we hope will always be large
+	// enough, and panic if the kernel wrote past the end of the allocation.
+	// See https://patchwork.ozlabs.org/cover/1006822/
+	var out []byte
+	if len(in) > 0 {
+		out = make([]byte, len(in)+outputPad)
+	}
+
+	opts := RunOptions{
+		Data:    in,
+		DataOut: out,
+		Repeat:  1,
+	}
+
+	ret, _, err := p.run(&opts)
+	if err != nil {
+		return ret, nil, fmt.Errorf("test program: %w", err)
+	}
+	return ret, opts.DataOut, nil
+}
+
+// Run runs the Program in kernel with given RunOptions.
+//
+// Note: the same restrictions from Test apply.
+func (p *Program) Run(opts *RunOptions) (uint32, error) {
+	ret, _, err := p.run(opts)
+	if err != nil {
+		return ret, fmt.Errorf("run program: %w", err)
+	}
+	return ret, nil
+}
+
+// Benchmark runs the Program with the given input for a number of times
+// and returns the time taken per iteration.
+//
+// Returns the result of the last execution of the program and the time per
+// run or an error. reset is called whenever the benchmark syscall is
+// interrupted, and should be set to testing.B.ResetTimer or similar.
+//
+// This function requires at least Linux 4.12.
+func (p *Program) Benchmark(in []byte, repeat int, reset func()) (uint32, time.Duration, error) {
+	if uint(repeat) > math.MaxUint32 {
+		return 0, 0, fmt.Errorf("repeat is too high")
+	}
+
+	opts := RunOptions{
+		Data:   in,
+		Repeat: uint32(repeat),
+		Reset:  reset,
+	}
+
+	ret, total, err := p.run(&opts)
+	if err != nil {
+		return ret, total, fmt.Errorf("benchmark program: %w", err)
+	}
+	return ret, total, nil
+}
+
+var haveProgRun = internal.NewFeatureTest("BPF_PROG_RUN", "4.12", func() error {
+	prog, err := NewProgram(&ProgramSpec{
+		// SocketFilter does not require privileges on newer kernels.
+		Type: SocketFilter,
+		Instructions: asm.Instructions{
+			asm.LoadImm(asm.R0, 0, asm.DWord),
+			asm.Return(),
+		},
+		License: "MIT",
+	})
+	if err != nil {
+		// This may be because we lack sufficient permissions, etc.
+		return err
+	}
+	defer prog.Close()
+
+	in := internal.EmptyBPFContext
+	attr := sys.ProgRunAttr{
+		ProgFd:     uint32(prog.FD()),
+		DataSizeIn: uint32(len(in)),
+		DataIn:     sys.NewSlicePointer(in),
+	}
+
+	err = sys.ProgRun(&attr)
+	switch {
+	case errors.Is(err, unix.EINVAL):
+		// Check for EINVAL specifically, rather than err != nil since we
+		// otherwise misdetect due to insufficient permissions.
+		return internal.ErrNotSupported
+
+	case errors.Is(err, unix.EINTR):
+		// We know that PROG_TEST_RUN is supported if we get EINTR.
+		return nil
+
+	case errors.Is(err, sys.ENOTSUPP):
+		// The first PROG_TEST_RUN patches shipped in 4.12 didn't include
+		// a test runner for SocketFilter. ENOTSUPP means PROG_TEST_RUN is
+		// supported, but not for the program type used in the probe.
+		return nil
+	}
+
+	return err
+})
+
+func (p *Program) run(opts *RunOptions) (uint32, time.Duration, error) {
+	if uint(len(opts.Data)) > math.MaxUint32 {
+		return 0, 0, fmt.Errorf("input is too long")
+	}
+
+	if err := haveProgRun(); err != nil {
+		return 0, 0, err
+	}
+
+	var ctxBytes []byte
+	if opts.Context != nil {
+		ctx := new(bytes.Buffer)
+		if err := binary.Write(ctx, internal.NativeEndian, opts.Context); err != nil {
+			return 0, 0, fmt.Errorf("cannot serialize context: %v", err)
+		}
+		ctxBytes = ctx.Bytes()
+	}
+
+	var ctxOut []byte
+	if opts.ContextOut != nil {
+		ctxOut = make([]byte, binary.Size(opts.ContextOut))
+	}
+
+	attr := sys.ProgRunAttr{
+		ProgFd:      p.fd.Uint(),
+		DataSizeIn:  uint32(len(opts.Data)),
+		DataSizeOut: uint32(len(opts.DataOut)),
+		DataIn:      sys.NewSlicePointer(opts.Data),
+		DataOut:     sys.NewSlicePointer(opts.DataOut),
+		Repeat:      uint32(opts.Repeat),
+		CtxSizeIn:   uint32(len(ctxBytes)),
+		CtxSizeOut:  uint32(len(ctxOut)),
+		CtxIn:       sys.NewSlicePointer(ctxBytes),
+		CtxOut:      sys.NewSlicePointer(ctxOut),
+		Flags:       opts.Flags,
+		Cpu:         opts.CPU,
+	}
+
+	if attr.Repeat == 0 {
+		attr.Repeat = 1
+	}
+
+retry:
+	for {
+		err := sys.ProgRun(&attr)
+		if err == nil {
+			break retry
+		}
+
+		if errors.Is(err, unix.EINTR) {
+			if attr.Repeat == 1 {
+				// Older kernels check whether enough repetitions have been
+				// executed only after checking for pending signals.
+				//
+				//     run signal? done? run ...
+				//
+				// As a result we can get EINTR for repeat==1 even though
+				// the program was run exactly once. Treat this as a
+				// successful run instead.
+				//
+				// Since commit 607b9cc92bd7 ("bpf: Consolidate shared test timing code")
+				// the conditions are reversed:
+				//     run done? signal? ...
+				break retry
+			}
+
+			if opts.Reset != nil {
+				opts.Reset()
+			}
+			continue retry
+		}
+
+		if errors.Is(err, sys.ENOTSUPP) {
+			return 0, 0, fmt.Errorf("kernel doesn't support running %s: %w", p.Type(), ErrNotSupported)
+		}
+
+		return 0, 0, err
+	}
+
+	if opts.DataOut != nil {
+		if int(attr.DataSizeOut) > cap(opts.DataOut) {
+			// Houston, we have a problem. The program created more data than we allocated,
+			// and the kernel wrote past the end of our buffer.
+			panic("kernel wrote past end of output buffer")
+		}
+		opts.DataOut = opts.DataOut[:int(attr.DataSizeOut)]
+	}
+
+	if len(ctxOut) != 0 {
+		b := bytes.NewReader(ctxOut)
+		if err := binary.Read(b, internal.NativeEndian, opts.ContextOut); err != nil {
+			return 0, 0, fmt.Errorf("failed to decode ContextOut: %v", err)
+		}
+	}
+
+	total := time.Duration(attr.Duration) * time.Nanosecond
+	return attr.Retval, total, nil
+}
+
+func unmarshalProgram(buf []byte) (*Program, error) {
+	if len(buf) != 4 {
+		return nil, errors.New("program id requires 4 byte value")
+	}
+
+	// Looking up an entry in a nested map or prog array returns an id,
+	// not an fd.
+	id := internal.NativeEndian.Uint32(buf)
+	return NewProgramFromID(ProgramID(id))
+}
+
+func marshalProgram(p *Program, length int) ([]byte, error) {
+	if length != 4 {
+		return nil, fmt.Errorf("can't marshal program to %d bytes", length)
+	}
+
+	buf := make([]byte, 4)
+	internal.NativeEndian.PutUint32(buf, p.fd.Uint())
+	return buf, nil
+}
+
+// LoadPinnedProgram loads a Program from a BPF file.
+//
+// Requires at least Linux 4.11.
+func LoadPinnedProgram(fileName string, opts *LoadPinOptions) (*Program, error) {
+	fd, err := sys.ObjGet(&sys.ObjGetAttr{
+		Pathname:  sys.NewStringPointer(fileName),
+		FileFlags: opts.Marshal(),
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	info, err := newProgramInfoFromFd(fd)
+	if err != nil {
+		_ = fd.Close()
+		return nil, fmt.Errorf("info for %s: %w", fileName, err)
+	}
+
+	var progName string
+	if haveObjName() == nil {
+		progName = info.Name
+	} else {
+		progName = filepath.Base(fileName)
+	}
+
+	return &Program{"", fd, progName, fileName, info.Type}, nil
+}
+
+// SanitizeName replaces all invalid characters in name with replacement.
+// Passing a negative value for replacement will delete characters instead
+// of replacing them. Use this to automatically generate valid names for maps
+// and programs at runtime.
+//
+// The set of allowed characters depends on the running kernel version.
+// Dots are only allowed as of kernel 5.2.
+func SanitizeName(name string, replacement rune) string {
+	return strings.Map(func(char rune) rune {
+		if invalidBPFObjNameChar(char) {
+			return replacement
+		}
+		return char
+	}, name)
+}
+
+// ProgramGetNextID returns the ID of the next eBPF program.
+//
+// Returns ErrNotExist, if there is no next eBPF program.
+func ProgramGetNextID(startID ProgramID) (ProgramID, error) {
+	attr := &sys.ProgGetNextIdAttr{Id: uint32(startID)}
+	return ProgramID(attr.NextId), sys.ProgGetNextId(attr)
+}
+
+// BindMap binds map to the program and is only released once program is released.
+//
+// This may be used in cases where metadata should be associated with the program
+// which otherwise does not contain any references to the map.
+func (p *Program) BindMap(m *Map) error {
+	attr := &sys.ProgBindMapAttr{
+		ProgFd: uint32(p.FD()),
+		MapFd:  uint32(m.FD()),
+	}
+
+	return sys.ProgBindMap(attr)
+}
+
+var errUnrecognizedAttachType = errors.New("unrecognized attach type")
+
+// find an attach target type in the kernel.
+//
+// name, progType and attachType determine which type we need to attach to.
+//
+// The attach target may be in a loaded kernel module.
+// In that case the returned handle will be non-nil.
+// The caller is responsible for closing the handle.
+//
+// Returns errUnrecognizedAttachType if the combination of progType and attachType
+// is not recognised.
+func findProgramTargetInKernel(name string, progType ProgramType, attachType AttachType) (*btf.Handle, btf.TypeID, error) {
+	type match struct {
+		p ProgramType
+		a AttachType
+	}
+
+	var (
+		typeName, featureName string
+		target                btf.Type
+	)
+
+	switch (match{progType, attachType}) {
+	case match{LSM, AttachLSMMac}:
+		typeName = "bpf_lsm_" + name
+		featureName = name + " LSM hook"
+		target = (*btf.Func)(nil)
+	case match{Tracing, AttachTraceIter}:
+		typeName = "bpf_iter_" + name
+		featureName = name + " iterator"
+		target = (*btf.Func)(nil)
+	case match{Tracing, AttachTraceFEntry}:
+		typeName = name
+		featureName = fmt.Sprintf("fentry %s", name)
+		target = (*btf.Func)(nil)
+	case match{Tracing, AttachTraceFExit}:
+		typeName = name
+		featureName = fmt.Sprintf("fexit %s", name)
+		target = (*btf.Func)(nil)
+	case match{Tracing, AttachModifyReturn}:
+		typeName = name
+		featureName = fmt.Sprintf("fmod_ret %s", name)
+		target = (*btf.Func)(nil)
+	case match{Tracing, AttachTraceRawTp}:
+		typeName = fmt.Sprintf("btf_trace_%s", name)
+		featureName = fmt.Sprintf("raw_tp %s", name)
+		target = (*btf.Typedef)(nil)
+	default:
+		return nil, 0, errUnrecognizedAttachType
+	}
+
+	spec, err := btf.LoadKernelSpec()
+	if err != nil {
+		return nil, 0, fmt.Errorf("load kernel spec: %w", err)
+	}
+
+	spec, module, err := findTargetInKernel(spec, typeName, &target)
+	if errors.Is(err, btf.ErrNotFound) {
+		return nil, 0, &internal.UnsupportedFeatureError{Name: featureName}
+	}
+	// See cilium/ebpf#894. Until we can disambiguate between equally-named kernel
+	// symbols, we should explicitly refuse program loads. They will not reliably
+	// do what the caller intended.
+	if errors.Is(err, btf.ErrMultipleMatches) {
+		return nil, 0, fmt.Errorf("attaching to ambiguous kernel symbol is not supported: %w", err)
+	}
+	if err != nil {
+		return nil, 0, fmt.Errorf("find target for %s: %w", featureName, err)
+	}
+
+	id, err := spec.TypeID(target)
+	return module, id, err
+}
+
+// findTargetInKernel attempts to find a named type in the current kernel.
+//
+// target will point at the found type after a successful call. Searches both
+// vmlinux and any loaded modules.
+//
+// Returns a non-nil handle if the type was found in a module, or btf.ErrNotFound
+// if the type wasn't found at all.
+func findTargetInKernel(kernelSpec *btf.Spec, typeName string, target *btf.Type) (*btf.Spec, *btf.Handle, error) {
+	err := kernelSpec.TypeByName(typeName, target)
+	if errors.Is(err, btf.ErrNotFound) {
+		spec, module, err := findTargetInModule(kernelSpec, typeName, target)
+		if err != nil {
+			return nil, nil, fmt.Errorf("find target in modules: %w", err)
+		}
+		return spec, module, nil
+	}
+	if err != nil {
+		return nil, nil, fmt.Errorf("find target in vmlinux: %w", err)
+	}
+	return kernelSpec, nil, err
+}
+
+// findTargetInModule attempts to find a named type in any loaded module.
+//
+// base must contain the kernel's types and is used to parse kmod BTF. Modules
+// are searched in the order they were loaded.
+//
+// Returns btf.ErrNotFound if the target can't be found in any module.
+func findTargetInModule(base *btf.Spec, typeName string, target *btf.Type) (*btf.Spec, *btf.Handle, error) {
+	it := new(btf.HandleIterator)
+	defer it.Handle.Close()
+
+	for it.Next() {
+		info, err := it.Handle.Info()
+		if err != nil {
+			return nil, nil, fmt.Errorf("get info for BTF ID %d: %w", it.ID, err)
+		}
+
+		if !info.IsModule() {
+			continue
+		}
+
+		spec, err := it.Handle.Spec(base)
+		if err != nil {
+			return nil, nil, fmt.Errorf("parse types for module %s: %w", info.Name, err)
+		}
+
+		err = spec.TypeByName(typeName, target)
+		if errors.Is(err, btf.ErrNotFound) {
+			continue
+		}
+		if err != nil {
+			return nil, nil, fmt.Errorf("lookup type in module %s: %w", info.Name, err)
+		}
+
+		return spec, it.Take(), nil
+	}
+	if err := it.Err(); err != nil {
+		return nil, nil, fmt.Errorf("iterate modules: %w", err)
+	}
+
+	return nil, nil, btf.ErrNotFound
+}
+
+// find an attach target type in a program.
+//
+// Returns errUnrecognizedAttachType.
+func findTargetInProgram(prog *Program, name string, progType ProgramType, attachType AttachType) (btf.TypeID, error) {
+	type match struct {
+		p ProgramType
+		a AttachType
+	}
+
+	var typeName string
+	switch (match{progType, attachType}) {
+	case match{Extension, AttachNone}:
+		typeName = name
+	default:
+		return 0, errUnrecognizedAttachType
+	}
+
+	btfHandle, err := prog.Handle()
+	if err != nil {
+		return 0, fmt.Errorf("load target BTF: %w", err)
+	}
+	defer btfHandle.Close()
+
+	spec, err := btfHandle.Spec(nil)
+	if err != nil {
+		return 0, err
+	}
+
+	var targetFunc *btf.Func
+	err = spec.TypeByName(typeName, &targetFunc)
+	if err != nil {
+		return 0, fmt.Errorf("find target %s: %w", typeName, err)
+	}
+
+	return spec.TypeID(targetFunc)
+}
diff --git a/vendor/github.com/cilium/ebpf/run-tests.sh b/vendor/github.com/cilium/ebpf/run-tests.sh
new file mode 100644
index 00000000000..1d1490ad1d9
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/run-tests.sh
@@ -0,0 +1,152 @@
+#!/usr/bin/env bash
+# Test the current package under a different kernel.
+# Requires virtme and qemu to be installed.
+# Examples:
+#     Run all tests on a 5.4 kernel
+#     $ ./run-tests.sh 5.4
+#     Run a subset of tests:
+#     $ ./run-tests.sh 5.4 ./link
+#     Run using a local kernel image
+#     $ ./run-tests.sh /path/to/bzImage
+
+set -euo pipefail
+
+script="$(realpath "$0")"
+readonly script
+
+# This script is a bit like a Matryoshka doll since it keeps re-executing itself
+# in various different contexts:
+#
+#   1. invoked by the user like run-tests.sh 5.4
+#   2. invoked by go test like run-tests.sh --exec-vm
+#   3. invoked by init in the vm like run-tests.sh --exec-test
+#
+# This allows us to use all available CPU on the host machine to compile our
+# code, and then only use the VM to execute the test. This is because the VM
+# is usually slower at compiling than the host.
+if [[ "${1:-}" = "--exec-vm" ]]; then
+  shift
+
+  input="$1"
+  shift
+
+  # Use sudo if /dev/kvm isn't accessible by the current user.
+  sudo=""
+  if [[ ! -r /dev/kvm || ! -w /dev/kvm ]]; then
+    sudo="sudo"
+  fi
+  readonly sudo
+
+  testdir="$(dirname "$1")"
+  output="$(mktemp -d)"
+  printf -v cmd "%q " "$@"
+
+  if [[ "$(stat -c '%t:%T' -L /proc/$$/fd/0)" == "1:3" ]]; then
+    # stdin is /dev/null, which doesn't play well with qemu. Use a fifo as a
+    # blocking substitute.
+    mkfifo "${output}/fake-stdin"
+    # Open for reading and writing to avoid blocking.
+    exec 0<> "${output}/fake-stdin"
+    rm "${output}/fake-stdin"
+  fi
+
+  for ((i = 0; i < 3; i++)); do
+    if ! $sudo virtme-run --kimg "${input}/bzImage" --memory 768M --pwd \
+      --rwdir="${testdir}=${testdir}" \
+      --rodir=/run/input="${input}" \
+      --rwdir=/run/output="${output}" \
+      --script-sh "PATH=\"$PATH\" CI_MAX_KERNEL_VERSION="${CI_MAX_KERNEL_VERSION:-}" \"$script\" --exec-test $cmd" \
+      --kopt possible_cpus=2; then # need at least two CPUs for some tests
+      exit 23
+    fi
+
+    if [[ -e "${output}/status" ]]; then
+      break
+    fi
+
+    if [[ -v CI ]]; then
+      echo "Retrying test run due to qemu crash"
+      continue
+    fi
+
+    exit 42
+  done
+
+  rc=$(<"${output}/status")
+  $sudo rm -r "$output"
+  exit $rc
+elif [[ "${1:-}" = "--exec-test" ]]; then
+  shift
+
+  mount -t bpf bpf /sys/fs/bpf
+  mount -t tracefs tracefs /sys/kernel/debug/tracing
+
+  if [[ -d "/run/input/bpf" ]]; then
+    export KERNEL_SELFTESTS="/run/input/bpf"
+  fi
+
+  if [[ -f "/run/input/bpf/bpf_testmod/bpf_testmod.ko" ]]; then
+    insmod "/run/input/bpf/bpf_testmod/bpf_testmod.ko"
+  fi
+
+  dmesg --clear
+  rc=0
+  "$@" || rc=$?
+  dmesg
+  echo $rc > "/run/output/status"
+  exit $rc # this return code is "swallowed" by qemu
+fi
+
+if [[ -z "${1:-}" ]]; then
+  echo "Expecting kernel version or path as first argument"
+  exit 1
+fi
+
+readonly input="$(mktemp -d)"
+readonly tmp_dir="${TMPDIR:-/tmp}"
+
+fetch() {
+    echo Fetching "${1}"
+    pushd "${tmp_dir}" > /dev/null
+    curl --no-progress-meter -L -O --fail --etag-compare "${1}.etag" --etag-save "${1}.etag" "https://github.com/cilium/ci-kernels/raw/${BRANCH:-master}/${1}"
+    local ret=$?
+    popd > /dev/null
+    return $ret
+}
+
+if [[ -f "${1}" ]]; then
+  readonly kernel="${1}"
+  cp "${1}" "${input}/bzImage"
+else
+# LINUX_VERSION_CODE test compares this to discovered value.
+  export KERNEL_VERSION="${1}"
+
+  readonly kernel="linux-${1}.bz"
+  readonly selftests="linux-${1}-selftests-bpf.tgz"
+
+  fetch "${kernel}"
+  cp "${tmp_dir}/${kernel}" "${input}/bzImage"
+
+  if fetch "${selftests}"; then
+    echo "Decompressing selftests"
+    mkdir "${input}/bpf"
+    tar --strip-components=4 -xf "${tmp_dir}/${selftests}" -C "${input}/bpf"
+  else
+    echo "No selftests found, disabling"
+  fi
+fi
+shift
+
+args=(-short -coverpkg=./... -coverprofile=coverage.out -count 1 ./...)
+if (( $# > 0 )); then
+  args=("$@")
+fi
+
+export GOFLAGS=-mod=readonly
+export CGO_ENABLED=0
+
+echo Testing on "${kernel}"
+go test -exec "$script --exec-vm $input" "${args[@]}"
+echo "Test successful on ${kernel}"
+
+rm -r "${input}"
diff --git a/vendor/github.com/cilium/ebpf/syscalls.go b/vendor/github.com/cilium/ebpf/syscalls.go
new file mode 100644
index 00000000000..fd21dea24ff
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/syscalls.go
@@ -0,0 +1,305 @@
+package ebpf
+
+import (
+	"bytes"
+	"errors"
+	"fmt"
+	"os"
+	"runtime"
+
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/internal"
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/tracefs"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+var (
+	// pre-allocating these here since they may
+	// get called in hot code paths and cause
+	// unnecessary memory allocations
+	sysErrKeyNotExist  = sys.Error(ErrKeyNotExist, unix.ENOENT)
+	sysErrKeyExist     = sys.Error(ErrKeyExist, unix.EEXIST)
+	sysErrNotSupported = sys.Error(ErrNotSupported, sys.ENOTSUPP)
+)
+
+// invalidBPFObjNameChar returns true if char may not appear in
+// a BPF object name.
+func invalidBPFObjNameChar(char rune) bool {
+	dotAllowed := objNameAllowsDot() == nil
+
+	switch {
+	case char >= 'A' && char <= 'Z':
+		return false
+	case char >= 'a' && char <= 'z':
+		return false
+	case char >= '0' && char <= '9':
+		return false
+	case dotAllowed && char == '.':
+		return false
+	case char == '_':
+		return false
+	default:
+		return true
+	}
+}
+
+func progLoad(insns asm.Instructions, typ ProgramType, license string) (*sys.FD, error) {
+	buf := bytes.NewBuffer(make([]byte, 0, insns.Size()))
+	if err := insns.Marshal(buf, internal.NativeEndian); err != nil {
+		return nil, err
+	}
+	bytecode := buf.Bytes()
+
+	return sys.ProgLoad(&sys.ProgLoadAttr{
+		ProgType: sys.ProgType(typ),
+		License:  sys.NewStringPointer(license),
+		Insns:    sys.NewSlicePointer(bytecode),
+		InsnCnt:  uint32(len(bytecode) / asm.InstructionSize),
+	})
+}
+
+var haveNestedMaps = internal.NewFeatureTest("nested maps", "4.12", func() error {
+	_, err := sys.MapCreate(&sys.MapCreateAttr{
+		MapType:    sys.MapType(ArrayOfMaps),
+		KeySize:    4,
+		ValueSize:  4,
+		MaxEntries: 1,
+		// Invalid file descriptor.
+		InnerMapFd: ^uint32(0),
+	})
+	if errors.Is(err, unix.EINVAL) {
+		return internal.ErrNotSupported
+	}
+	if errors.Is(err, unix.EBADF) {
+		return nil
+	}
+	return err
+})
+
+var haveMapMutabilityModifiers = internal.NewFeatureTest("read- and write-only maps", "5.2", func() error {
+	// This checks BPF_F_RDONLY_PROG and BPF_F_WRONLY_PROG. Since
+	// BPF_MAP_FREEZE appeared in 5.2 as well we don't do a separate check.
+	m, err := sys.MapCreate(&sys.MapCreateAttr{
+		MapType:    sys.MapType(Array),
+		KeySize:    4,
+		ValueSize:  4,
+		MaxEntries: 1,
+		MapFlags:   unix.BPF_F_RDONLY_PROG,
+	})
+	if err != nil {
+		return internal.ErrNotSupported
+	}
+	_ = m.Close()
+	return nil
+})
+
+var haveMmapableMaps = internal.NewFeatureTest("mmapable maps", "5.5", func() error {
+	// This checks BPF_F_MMAPABLE, which appeared in 5.5 for array maps.
+	m, err := sys.MapCreate(&sys.MapCreateAttr{
+		MapType:    sys.MapType(Array),
+		KeySize:    4,
+		ValueSize:  4,
+		MaxEntries: 1,
+		MapFlags:   unix.BPF_F_MMAPABLE,
+	})
+	if err != nil {
+		return internal.ErrNotSupported
+	}
+	_ = m.Close()
+	return nil
+})
+
+var haveInnerMaps = internal.NewFeatureTest("inner maps", "5.10", func() error {
+	// This checks BPF_F_INNER_MAP, which appeared in 5.10.
+	m, err := sys.MapCreate(&sys.MapCreateAttr{
+		MapType:    sys.MapType(Array),
+		KeySize:    4,
+		ValueSize:  4,
+		MaxEntries: 1,
+		MapFlags:   unix.BPF_F_INNER_MAP,
+	})
+	if err != nil {
+		return internal.ErrNotSupported
+	}
+	_ = m.Close()
+	return nil
+})
+
+var haveNoPreallocMaps = internal.NewFeatureTest("prealloc maps", "4.6", func() error {
+	// This checks BPF_F_NO_PREALLOC, which appeared in 4.6.
+	m, err := sys.MapCreate(&sys.MapCreateAttr{
+		MapType:    sys.MapType(Hash),
+		KeySize:    4,
+		ValueSize:  4,
+		MaxEntries: 1,
+		MapFlags:   unix.BPF_F_NO_PREALLOC,
+	})
+	if err != nil {
+		return internal.ErrNotSupported
+	}
+	_ = m.Close()
+	return nil
+})
+
+func wrapMapError(err error) error {
+	if err == nil {
+		return nil
+	}
+
+	if errors.Is(err, unix.ENOENT) {
+		return sysErrKeyNotExist
+	}
+
+	if errors.Is(err, unix.EEXIST) {
+		return sysErrKeyExist
+	}
+
+	if errors.Is(err, sys.ENOTSUPP) {
+		return sysErrNotSupported
+	}
+
+	if errors.Is(err, unix.E2BIG) {
+		return fmt.Errorf("key too big for map: %w", err)
+	}
+
+	return err
+}
+
+var haveObjName = internal.NewFeatureTest("object names", "4.15", func() error {
+	attr := sys.MapCreateAttr{
+		MapType:    sys.MapType(Array),
+		KeySize:    4,
+		ValueSize:  4,
+		MaxEntries: 1,
+		MapName:    sys.NewObjName("feature_test"),
+	}
+
+	fd, err := sys.MapCreate(&attr)
+	if err != nil {
+		return internal.ErrNotSupported
+	}
+
+	_ = fd.Close()
+	return nil
+})
+
+var objNameAllowsDot = internal.NewFeatureTest("dot in object names", "5.2", func() error {
+	if err := haveObjName(); err != nil {
+		return err
+	}
+
+	attr := sys.MapCreateAttr{
+		MapType:    sys.MapType(Array),
+		KeySize:    4,
+		ValueSize:  4,
+		MaxEntries: 1,
+		MapName:    sys.NewObjName(".test"),
+	}
+
+	fd, err := sys.MapCreate(&attr)
+	if err != nil {
+		return internal.ErrNotSupported
+	}
+
+	_ = fd.Close()
+	return nil
+})
+
+var haveBatchAPI = internal.NewFeatureTest("map batch api", "5.6", func() error {
+	var maxEntries uint32 = 2
+	attr := sys.MapCreateAttr{
+		MapType:    sys.MapType(Hash),
+		KeySize:    4,
+		ValueSize:  4,
+		MaxEntries: maxEntries,
+	}
+
+	fd, err := sys.MapCreate(&attr)
+	if err != nil {
+		return internal.ErrNotSupported
+	}
+	defer fd.Close()
+
+	keys := []uint32{1, 2}
+	values := []uint32{3, 4}
+	kp, _ := marshalPtr(keys, 8)
+	vp, _ := marshalPtr(values, 8)
+
+	err = sys.MapUpdateBatch(&sys.MapUpdateBatchAttr{
+		MapFd:  fd.Uint(),
+		Keys:   kp,
+		Values: vp,
+		Count:  maxEntries,
+	})
+	if err != nil {
+		return internal.ErrNotSupported
+	}
+	return nil
+})
+
+var haveProbeReadKernel = internal.NewFeatureTest("bpf_probe_read_kernel", "5.5", func() error {
+	insns := asm.Instructions{
+		asm.Mov.Reg(asm.R1, asm.R10),
+		asm.Add.Imm(asm.R1, -8),
+		asm.Mov.Imm(asm.R2, 8),
+		asm.Mov.Imm(asm.R3, 0),
+		asm.FnProbeReadKernel.Call(),
+		asm.Return(),
+	}
+
+	fd, err := progLoad(insns, Kprobe, "GPL")
+	if err != nil {
+		return internal.ErrNotSupported
+	}
+	_ = fd.Close()
+	return nil
+})
+
+var haveBPFToBPFCalls = internal.NewFeatureTest("bpf2bpf calls", "4.16", func() error {
+	insns := asm.Instructions{
+		asm.Call.Label("prog2").WithSymbol("prog1"),
+		asm.Return(),
+		asm.Mov.Imm(asm.R0, 0).WithSymbol("prog2"),
+		asm.Return(),
+	}
+
+	fd, err := progLoad(insns, SocketFilter, "MIT")
+	if errors.Is(err, unix.EINVAL) {
+		return internal.ErrNotSupported
+	}
+	if err != nil {
+		return err
+	}
+	_ = fd.Close()
+	return nil
+})
+
+var haveSyscallWrapper = internal.NewFeatureTest("syscall wrapper", "4.17", func() error {
+	prefix := internal.PlatformPrefix()
+	if prefix == "" {
+		return fmt.Errorf("unable to find the platform prefix for (%s)", runtime.GOARCH)
+	}
+
+	args := tracefs.ProbeArgs{
+		Type:   tracefs.Kprobe,
+		Symbol: prefix + "sys_bpf",
+		Pid:    -1,
+	}
+
+	var err error
+	args.Group, err = tracefs.RandomGroup("ebpf_probe")
+	if err != nil {
+		return err
+	}
+
+	evt, err := tracefs.NewEvent(args)
+	if errors.Is(err, os.ErrNotExist) {
+		return internal.ErrNotSupported
+	}
+	if err != nil {
+		return err
+	}
+
+	return evt.Close()
+})
diff --git a/vendor/github.com/cilium/ebpf/types.go b/vendor/github.com/cilium/ebpf/types.go
new file mode 100644
index 00000000000..35927e2ab80
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/types.go
@@ -0,0 +1,279 @@
+package ebpf
+
+import (
+	"github.com/cilium/ebpf/internal/sys"
+	"github.com/cilium/ebpf/internal/unix"
+)
+
+//go:generate stringer -output types_string.go -type=MapType,ProgramType,PinType
+
+// MapType indicates the type map structure
+// that will be initialized in the kernel.
+type MapType uint32
+
+// All the various map types that can be created
+const (
+	UnspecifiedMap MapType = iota
+	// Hash is a hash map
+	Hash
+	// Array is an array map
+	Array
+	// ProgramArray - A program array map is a special kind of array map whose map
+	// values contain only file descriptors referring to other eBPF
+	// programs.  Thus, both the key_size and value_size must be
+	// exactly four bytes.  This map is used in conjunction with the
+	// TailCall helper.
+	ProgramArray
+	// PerfEventArray - A perf event array is used in conjunction with PerfEventRead
+	// and PerfEventOutput calls, to read the raw bpf_perf_data from the registers.
+	PerfEventArray
+	// PerCPUHash - This data structure is useful for people who have high performance
+	// network needs and can reconcile adds at the end of some cycle, so that
+	// hashes can be lock free without the use of XAdd, which can be costly.
+	PerCPUHash
+	// PerCPUArray - This data structure is useful for people who have high performance
+	// network needs and can reconcile adds at the end of some cycle, so that
+	// hashes can be lock free without the use of XAdd, which can be costly.
+	// Each CPU gets a copy of this hash, the contents of all of which can be reconciled
+	// later.
+	PerCPUArray
+	// StackTrace - This holds whole user and kernel stack traces, it can be retrieved with
+	// GetStackID
+	StackTrace
+	// CGroupArray - This is a very niche structure used to help SKBInCGroup determine
+	// if an skb is from a socket belonging to a specific cgroup
+	CGroupArray
+	// LRUHash - This allows you to create a small hash structure that will purge the
+	// least recently used items rather than thow an error when you run out of memory
+	LRUHash
+	// LRUCPUHash - This is NOT like PerCPUHash, this structure is shared among the CPUs,
+	// it has more to do with including the CPU id with the LRU calculation so that if a
+	// particular CPU is using a value over-and-over again, then it will be saved, but if
+	// a value is being retrieved a lot but sparsely across CPUs it is not as important, basically
+	// giving weight to CPU locality over overall usage.
+	LRUCPUHash
+	// LPMTrie - This is an implementation of Longest-Prefix-Match Trie structure. It is useful,
+	// for storing things like IP addresses which can be bit masked allowing for keys of differing
+	// values to refer to the same reference based on their masks. See wikipedia for more details.
+	LPMTrie
+	// ArrayOfMaps - Each item in the array is another map. The inner map mustn't be a map of maps
+	// itself.
+	ArrayOfMaps
+	// HashOfMaps - Each item in the hash map is another map. The inner map mustn't be a map of maps
+	// itself.
+	HashOfMaps
+	// DevMap - Specialized map to store references to network devices.
+	DevMap
+	// SockMap - Specialized map to store references to sockets.
+	SockMap
+	// CPUMap - Specialized map to store references to CPUs.
+	CPUMap
+	// XSKMap - Specialized map for XDP programs to store references to open sockets.
+	XSKMap
+	// SockHash - Specialized hash to store references to sockets.
+	SockHash
+	// CGroupStorage - Special map for CGroups.
+	CGroupStorage
+	// ReusePortSockArray - Specialized map to store references to sockets that can be reused.
+	ReusePortSockArray
+	// PerCPUCGroupStorage - Special per CPU map for CGroups.
+	PerCPUCGroupStorage
+	// Queue - FIFO storage for BPF programs.
+	Queue
+	// Stack - LIFO storage for BPF programs.
+	Stack
+	// SkStorage - Specialized map for local storage at SK for BPF programs.
+	SkStorage
+	// DevMapHash - Hash-based indexing scheme for references to network devices.
+	DevMapHash
+	// StructOpsMap - This map holds a kernel struct with its function pointer implemented in a BPF
+	// program.
+	StructOpsMap
+	// RingBuf - Similar to PerfEventArray, but shared across all CPUs.
+	RingBuf
+	// InodeStorage - Specialized local storage map for inodes.
+	InodeStorage
+	// TaskStorage - Specialized local storage map for task_struct.
+	TaskStorage
+)
+
+// hasPerCPUValue returns true if the Map stores a value per CPU.
+func (mt MapType) hasPerCPUValue() bool {
+	return mt == PerCPUHash || mt == PerCPUArray || mt == LRUCPUHash || mt == PerCPUCGroupStorage
+}
+
+// canStoreMap returns true if the map type accepts a map fd
+// for update and returns a map id for lookup.
+func (mt MapType) canStoreMap() bool {
+	return mt == ArrayOfMaps || mt == HashOfMaps
+}
+
+// canStoreProgram returns true if the map type accepts a program fd
+// for update and returns a program id for lookup.
+func (mt MapType) canStoreProgram() bool {
+	return mt == ProgramArray
+}
+
+// ProgramType of the eBPF program
+type ProgramType uint32
+
+// eBPF program types
+const (
+	UnspecifiedProgram ProgramType = iota
+	SocketFilter
+	Kprobe
+	SchedCLS
+	SchedACT
+	TracePoint
+	XDP
+	PerfEvent
+	CGroupSKB
+	CGroupSock
+	LWTIn
+	LWTOut
+	LWTXmit
+	SockOps
+	SkSKB
+	CGroupDevice
+	SkMsg
+	RawTracepoint
+	CGroupSockAddr
+	LWTSeg6Local
+	LircMode2
+	SkReuseport
+	FlowDissector
+	CGroupSysctl
+	RawTracepointWritable
+	CGroupSockopt
+	Tracing
+	StructOps
+	Extension
+	LSM
+	SkLookup
+	Syscall
+)
+
+// AttachType of the eBPF program, needed to differentiate allowed context accesses in
+// some newer program types like CGroupSockAddr. Should be set to AttachNone if not required.
+// Will cause invalid argument (EINVAL) at program load time if set incorrectly.
+type AttachType uint32
+
+//go:generate stringer -type AttachType -trimprefix Attach
+
+// AttachNone is an alias for AttachCGroupInetIngress for readability reasons.
+const AttachNone AttachType = 0
+
+const (
+	AttachCGroupInetIngress AttachType = iota
+	AttachCGroupInetEgress
+	AttachCGroupInetSockCreate
+	AttachCGroupSockOps
+	AttachSkSKBStreamParser
+	AttachSkSKBStreamVerdict
+	AttachCGroupDevice
+	AttachSkMsgVerdict
+	AttachCGroupInet4Bind
+	AttachCGroupInet6Bind
+	AttachCGroupInet4Connect
+	AttachCGroupInet6Connect
+	AttachCGroupInet4PostBind
+	AttachCGroupInet6PostBind
+	AttachCGroupUDP4Sendmsg
+	AttachCGroupUDP6Sendmsg
+	AttachLircMode2
+	AttachFlowDissector
+	AttachCGroupSysctl
+	AttachCGroupUDP4Recvmsg
+	AttachCGroupUDP6Recvmsg
+	AttachCGroupGetsockopt
+	AttachCGroupSetsockopt
+	AttachTraceRawTp
+	AttachTraceFEntry
+	AttachTraceFExit
+	AttachModifyReturn
+	AttachLSMMac
+	AttachTraceIter
+	AttachCgroupInet4GetPeername
+	AttachCgroupInet6GetPeername
+	AttachCgroupInet4GetSockname
+	AttachCgroupInet6GetSockname
+	AttachXDPDevMap
+	AttachCgroupInetSockRelease
+	AttachXDPCPUMap
+	AttachSkLookup
+	AttachXDP
+	AttachSkSKBVerdict
+	AttachSkReuseportSelect
+	AttachSkReuseportSelectOrMigrate
+	AttachPerfEvent
+	AttachTraceKprobeMulti
+)
+
+// AttachFlags of the eBPF program used in BPF_PROG_ATTACH command
+type AttachFlags uint32
+
+// PinType determines whether a map is pinned into a BPFFS.
+type PinType int
+
+// Valid pin types.
+//
+// Mirrors enum libbpf_pin_type.
+const (
+	PinNone PinType = iota
+	// Pin an object by using its name as the filename.
+	PinByName
+)
+
+// LoadPinOptions control how a pinned object is loaded.
+type LoadPinOptions struct {
+	// Request a read-only or write-only object. The default is a read-write
+	// object. Only one of the flags may be set.
+	ReadOnly  bool
+	WriteOnly bool
+
+	// Raw flags for the syscall. Other fields of this struct take precedence.
+	Flags uint32
+}
+
+// Marshal returns a value suitable for BPF_OBJ_GET syscall file_flags parameter.
+func (lpo *LoadPinOptions) Marshal() uint32 {
+	if lpo == nil {
+		return 0
+	}
+
+	flags := lpo.Flags
+	if lpo.ReadOnly {
+		flags |= unix.BPF_F_RDONLY
+	}
+	if lpo.WriteOnly {
+		flags |= unix.BPF_F_WRONLY
+	}
+	return flags
+}
+
+// BatchOptions batch map operations options
+//
+// Mirrors libbpf struct bpf_map_batch_opts
+// Currently BPF_F_FLAG is the only supported
+// flag (for ElemFlags).
+type BatchOptions struct {
+	ElemFlags uint64
+	Flags     uint64
+}
+
+// LogLevel controls the verbosity of the kernel's eBPF program verifier.
+// These constants can be used for the ProgramOptions.LogLevel field.
+type LogLevel = sys.LogLevel
+
+const (
+	// Print verifier state at branch points.
+	LogLevelBranch = sys.BPF_LOG_LEVEL1
+
+	// Print verifier state for every instruction.
+	// Available since Linux v5.2.
+	LogLevelInstruction = sys.BPF_LOG_LEVEL2
+
+	// Print verifier errors and stats at the end of the verification process.
+	// Available since Linux v5.2.
+	LogLevelStats = sys.BPF_LOG_STATS
+)
diff --git a/vendor/github.com/cilium/ebpf/types_string.go b/vendor/github.com/cilium/ebpf/types_string.go
new file mode 100644
index 00000000000..5679f225430
--- /dev/null
+++ b/vendor/github.com/cilium/ebpf/types_string.go
@@ -0,0 +1,118 @@
+// Code generated by "stringer -output types_string.go -type=MapType,ProgramType,PinType"; DO NOT EDIT.
+
+package ebpf
+
+import "strconv"
+
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[UnspecifiedMap-0]
+	_ = x[Hash-1]
+	_ = x[Array-2]
+	_ = x[ProgramArray-3]
+	_ = x[PerfEventArray-4]
+	_ = x[PerCPUHash-5]
+	_ = x[PerCPUArray-6]
+	_ = x[StackTrace-7]
+	_ = x[CGroupArray-8]
+	_ = x[LRUHash-9]
+	_ = x[LRUCPUHash-10]
+	_ = x[LPMTrie-11]
+	_ = x[ArrayOfMaps-12]
+	_ = x[HashOfMaps-13]
+	_ = x[DevMap-14]
+	_ = x[SockMap-15]
+	_ = x[CPUMap-16]
+	_ = x[XSKMap-17]
+	_ = x[SockHash-18]
+	_ = x[CGroupStorage-19]
+	_ = x[ReusePortSockArray-20]
+	_ = x[PerCPUCGroupStorage-21]
+	_ = x[Queue-22]
+	_ = x[Stack-23]
+	_ = x[SkStorage-24]
+	_ = x[DevMapHash-25]
+	_ = x[StructOpsMap-26]
+	_ = x[RingBuf-27]
+	_ = x[InodeStorage-28]
+	_ = x[TaskStorage-29]
+}
+
+const _MapType_name = "UnspecifiedMapHashArrayProgramArrayPerfEventArrayPerCPUHashPerCPUArrayStackTraceCGroupArrayLRUHashLRUCPUHashLPMTrieArrayOfMapsHashOfMapsDevMapSockMapCPUMapXSKMapSockHashCGroupStorageReusePortSockArrayPerCPUCGroupStorageQueueStackSkStorageDevMapHashStructOpsMapRingBufInodeStorageTaskStorage"
+
+var _MapType_index = [...]uint16{0, 14, 18, 23, 35, 49, 59, 70, 80, 91, 98, 108, 115, 126, 136, 142, 149, 155, 161, 169, 182, 200, 219, 224, 229, 238, 248, 260, 267, 279, 290}
+
+func (i MapType) String() string {
+	if i >= MapType(len(_MapType_index)-1) {
+		return "MapType(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+	return _MapType_name[_MapType_index[i]:_MapType_index[i+1]]
+}
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[UnspecifiedProgram-0]
+	_ = x[SocketFilter-1]
+	_ = x[Kprobe-2]
+	_ = x[SchedCLS-3]
+	_ = x[SchedACT-4]
+	_ = x[TracePoint-5]
+	_ = x[XDP-6]
+	_ = x[PerfEvent-7]
+	_ = x[CGroupSKB-8]
+	_ = x[CGroupSock-9]
+	_ = x[LWTIn-10]
+	_ = x[LWTOut-11]
+	_ = x[LWTXmit-12]
+	_ = x[SockOps-13]
+	_ = x[SkSKB-14]
+	_ = x[CGroupDevice-15]
+	_ = x[SkMsg-16]
+	_ = x[RawTracepoint-17]
+	_ = x[CGroupSockAddr-18]
+	_ = x[LWTSeg6Local-19]
+	_ = x[LircMode2-20]
+	_ = x[SkReuseport-21]
+	_ = x[FlowDissector-22]
+	_ = x[CGroupSysctl-23]
+	_ = x[RawTracepointWritable-24]
+	_ = x[CGroupSockopt-25]
+	_ = x[Tracing-26]
+	_ = x[StructOps-27]
+	_ = x[Extension-28]
+	_ = x[LSM-29]
+	_ = x[SkLookup-30]
+	_ = x[Syscall-31]
+}
+
+const _ProgramType_name = "UnspecifiedProgramSocketFilterKprobeSchedCLSSchedACTTracePointXDPPerfEventCGroupSKBCGroupSockLWTInLWTOutLWTXmitSockOpsSkSKBCGroupDeviceSkMsgRawTracepointCGroupSockAddrLWTSeg6LocalLircMode2SkReuseportFlowDissectorCGroupSysctlRawTracepointWritableCGroupSockoptTracingStructOpsExtensionLSMSkLookupSyscall"
+
+var _ProgramType_index = [...]uint16{0, 18, 30, 36, 44, 52, 62, 65, 74, 83, 93, 98, 104, 111, 118, 123, 135, 140, 153, 167, 179, 188, 199, 212, 224, 245, 258, 265, 274, 283, 286, 294, 301}
+
+func (i ProgramType) String() string {
+	if i >= ProgramType(len(_ProgramType_index)-1) {
+		return "ProgramType(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+	return _ProgramType_name[_ProgramType_index[i]:_ProgramType_index[i+1]]
+}
+func _() {
+	// An "invalid array index" compiler error signifies that the constant values have changed.
+	// Re-run the stringer command to generate them again.
+	var x [1]struct{}
+	_ = x[PinNone-0]
+	_ = x[PinByName-1]
+}
+
+const _PinType_name = "PinNonePinByName"
+
+var _PinType_index = [...]uint8{0, 7, 16}
+
+func (i PinType) String() string {
+	if i < 0 || i >= PinType(len(_PinType_index)-1) {
+		return "PinType(" + strconv.FormatInt(int64(i), 10) + ")"
+	}
+	return _PinType_name[_PinType_index[i]:_PinType_index[i+1]]
+}
diff --git a/vendor/github.com/cncf/xds/go/udpa/annotations/migrate.pb.go b/vendor/github.com/cncf/xds/go/udpa/annotations/migrate.pb.go
index 46fb820cfbd..be9f4678ced 100644
--- a/vendor/github.com/cncf/xds/go/udpa/annotations/migrate.pb.go
+++ b/vendor/github.com/cncf/xds/go/udpa/annotations/migrate.pb.go
@@ -1,13 +1,12 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: udpa/annotations/migrate.proto
 
 package annotations
 
 import (
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	descriptorpb "google.golang.org/protobuf/types/descriptorpb"
@@ -22,10 +21,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type MigrateAnnotation struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
diff --git a/vendor/github.com/cncf/xds/go/udpa/annotations/security.pb.go b/vendor/github.com/cncf/xds/go/udpa/annotations/security.pb.go
index e061f58433a..aaac45ea3ef 100644
--- a/vendor/github.com/cncf/xds/go/udpa/annotations/security.pb.go
+++ b/vendor/github.com/cncf/xds/go/udpa/annotations/security.pb.go
@@ -1,13 +1,12 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: udpa/annotations/security.proto
 
 package annotations
 
 import (
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	descriptorpb "google.golang.org/protobuf/types/descriptorpb"
@@ -22,10 +21,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type FieldSecurityAnnotation struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
diff --git a/vendor/github.com/cncf/xds/go/udpa/annotations/sensitive.pb.go b/vendor/github.com/cncf/xds/go/udpa/annotations/sensitive.pb.go
index 0334e8f45fe..0a46801db96 100644
--- a/vendor/github.com/cncf/xds/go/udpa/annotations/sensitive.pb.go
+++ b/vendor/github.com/cncf/xds/go/udpa/annotations/sensitive.pb.go
@@ -1,13 +1,12 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: udpa/annotations/sensitive.proto
 
 package annotations
 
 import (
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	descriptorpb "google.golang.org/protobuf/types/descriptorpb"
@@ -21,10 +20,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 var file_udpa_annotations_sensitive_proto_extTypes = []protoimpl.ExtensionInfo{
 	{
 		ExtendedType:  (*descriptorpb.FieldOptions)(nil),
diff --git a/vendor/github.com/cncf/xds/go/udpa/annotations/status.pb.go b/vendor/github.com/cncf/xds/go/udpa/annotations/status.pb.go
index 3f239dd06f9..25b93a7fea8 100644
--- a/vendor/github.com/cncf/xds/go/udpa/annotations/status.pb.go
+++ b/vendor/github.com/cncf/xds/go/udpa/annotations/status.pb.go
@@ -1,13 +1,12 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: udpa/annotations/status.proto
 
 package annotations
 
 import (
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	descriptorpb "google.golang.org/protobuf/types/descriptorpb"
@@ -22,10 +21,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type PackageVersionStatus int32
 
 const (
diff --git a/vendor/github.com/cncf/xds/go/udpa/annotations/versioning.pb.go b/vendor/github.com/cncf/xds/go/udpa/annotations/versioning.pb.go
index 49ced5fb7dd..7af3ed3f52c 100644
--- a/vendor/github.com/cncf/xds/go/udpa/annotations/versioning.pb.go
+++ b/vendor/github.com/cncf/xds/go/udpa/annotations/versioning.pb.go
@@ -1,13 +1,12 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: udpa/annotations/versioning.proto
 
 package annotations
 
 import (
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	descriptorpb "google.golang.org/protobuf/types/descriptorpb"
@@ -22,10 +21,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type VersioningAnnotation struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
diff --git a/vendor/github.com/cncf/xds/go/xds/annotations/v3/migrate.pb.go b/vendor/github.com/cncf/xds/go/xds/annotations/v3/migrate.pb.go
index e29c098b5e8..cf1ee18ed3a 100644
--- a/vendor/github.com/cncf/xds/go/xds/annotations/v3/migrate.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/annotations/v3/migrate.pb.go
@@ -1,13 +1,12 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/annotations/v3/migrate.proto
 
 package v3
 
 import (
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	descriptorpb "google.golang.org/protobuf/types/descriptorpb"
@@ -22,10 +21,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type MigrateAnnotation struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
diff --git a/vendor/github.com/cncf/xds/go/xds/annotations/v3/security.pb.go b/vendor/github.com/cncf/xds/go/xds/annotations/v3/security.pb.go
index c716366bb10..084664ffb9a 100644
--- a/vendor/github.com/cncf/xds/go/xds/annotations/v3/security.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/annotations/v3/security.pb.go
@@ -1,13 +1,12 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/annotations/v3/security.proto
 
 package v3
 
 import (
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	descriptorpb "google.golang.org/protobuf/types/descriptorpb"
@@ -22,10 +21,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type FieldSecurityAnnotation struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
diff --git a/vendor/github.com/cncf/xds/go/xds/annotations/v3/sensitive.pb.go b/vendor/github.com/cncf/xds/go/xds/annotations/v3/sensitive.pb.go
index 2aa60b96244..b603aa4c8ce 100644
--- a/vendor/github.com/cncf/xds/go/xds/annotations/v3/sensitive.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/annotations/v3/sensitive.pb.go
@@ -1,13 +1,12 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/annotations/v3/sensitive.proto
 
 package v3
 
 import (
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	descriptorpb "google.golang.org/protobuf/types/descriptorpb"
@@ -21,10 +20,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 var file_xds_annotations_v3_sensitive_proto_extTypes = []protoimpl.ExtensionInfo{
 	{
 		ExtendedType:  (*descriptorpb.FieldOptions)(nil),
diff --git a/vendor/github.com/cncf/xds/go/xds/annotations/v3/status.pb.go b/vendor/github.com/cncf/xds/go/xds/annotations/v3/status.pb.go
index 3a2015e6261..cc624ac919d 100644
--- a/vendor/github.com/cncf/xds/go/xds/annotations/v3/status.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/annotations/v3/status.pb.go
@@ -1,13 +1,12 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/annotations/v3/status.proto
 
 package v3
 
 import (
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	descriptorpb "google.golang.org/protobuf/types/descriptorpb"
@@ -22,10 +21,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type PackageVersionStatus int32
 
 const (
diff --git a/vendor/github.com/cncf/xds/go/xds/annotations/v3/versioning.pb.go b/vendor/github.com/cncf/xds/go/xds/annotations/v3/versioning.pb.go
index c789b4c0413..2252689374d 100644
--- a/vendor/github.com/cncf/xds/go/xds/annotations/v3/versioning.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/annotations/v3/versioning.pb.go
@@ -1,13 +1,12 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/annotations/v3/versioning.proto
 
 package v3
 
 import (
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	descriptorpb "google.golang.org/protobuf/types/descriptorpb"
@@ -22,10 +21,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type VersioningAnnotation struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
diff --git a/vendor/github.com/cncf/xds/go/xds/core/v3/authority.pb.go b/vendor/github.com/cncf/xds/go/xds/core/v3/authority.pb.go
index b4c8ce1cc1c..d6655c7c8b5 100644
--- a/vendor/github.com/cncf/xds/go/xds/core/v3/authority.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/core/v3/authority.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/core/v3/authority.proto
 
@@ -9,7 +9,6 @@ package v3
 import (
 	_ "github.com/cncf/xds/go/xds/annotations/v3"
 	_ "github.com/envoyproxy/protoc-gen-validate/validate"
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
@@ -23,10 +22,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type Authority struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
diff --git a/vendor/github.com/cncf/xds/go/xds/core/v3/cidr.pb.go b/vendor/github.com/cncf/xds/go/xds/core/v3/cidr.pb.go
index 482db87f6f9..0e9a4deba6f 100644
--- a/vendor/github.com/cncf/xds/go/xds/core/v3/cidr.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/core/v3/cidr.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/core/v3/cidr.proto
 
@@ -9,7 +9,6 @@ package v3
 import (
 	_ "github.com/cncf/xds/go/xds/annotations/v3"
 	_ "github.com/envoyproxy/protoc-gen-validate/validate"
-	proto "github.com/golang/protobuf/proto"
 	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
@@ -24,10 +23,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type CidrRange struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
diff --git a/vendor/github.com/cncf/xds/go/xds/core/v3/collection_entry.pb.go b/vendor/github.com/cncf/xds/go/xds/core/v3/collection_entry.pb.go
index f325e11f60d..8f598cb64bf 100644
--- a/vendor/github.com/cncf/xds/go/xds/core/v3/collection_entry.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/core/v3/collection_entry.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/core/v3/collection_entry.proto
 
@@ -9,8 +9,7 @@ package v3
 import (
 	_ "github.com/cncf/xds/go/xds/annotations/v3"
 	_ "github.com/envoyproxy/protoc-gen-validate/validate"
-	proto "github.com/golang/protobuf/proto"
-	any "github.com/golang/protobuf/ptypes/any"
+	any1 "github.com/golang/protobuf/ptypes/any"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
@@ -24,16 +23,13 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type CollectionEntry struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to ResourceSpecifier:
+	//
 	//	*CollectionEntry_Locator
 	//	*CollectionEntry_InlineEntry_
 	ResourceSpecifier isCollectionEntry_ResourceSpecifier `protobuf_oneof:"resource_specifier"`
@@ -113,9 +109,9 @@ type CollectionEntry_InlineEntry struct {
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	Name     string   `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
-	Version  string   `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
-	Resource *any.Any `protobuf:"bytes,3,opt,name=resource,proto3" json:"resource,omitempty"`
+	Name     string    `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
+	Version  string    `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
+	Resource *any1.Any `protobuf:"bytes,3,opt,name=resource,proto3" json:"resource,omitempty"`
 }
 
 func (x *CollectionEntry_InlineEntry) Reset() {
@@ -164,7 +160,7 @@ func (x *CollectionEntry_InlineEntry) GetVersion() string {
 	return ""
 }
 
-func (x *CollectionEntry_InlineEntry) GetResource() *any.Any {
+func (x *CollectionEntry_InlineEntry) GetResource() *any1.Any {
 	if x != nil {
 		return x.Resource
 	}
@@ -231,7 +227,7 @@ var file_xds_core_v3_collection_entry_proto_goTypes = []interface{}{
 	(*CollectionEntry)(nil),             // 0: xds.core.v3.CollectionEntry
 	(*CollectionEntry_InlineEntry)(nil), // 1: xds.core.v3.CollectionEntry.InlineEntry
 	(*ResourceLocator)(nil),             // 2: xds.core.v3.ResourceLocator
-	(*any.Any)(nil),                     // 3: google.protobuf.Any
+	(*any1.Any)(nil),                    // 3: google.protobuf.Any
 }
 var file_xds_core_v3_collection_entry_proto_depIdxs = []int32{
 	2, // 0: xds.core.v3.CollectionEntry.locator:type_name -> xds.core.v3.ResourceLocator
diff --git a/vendor/github.com/cncf/xds/go/xds/core/v3/context_params.pb.go b/vendor/github.com/cncf/xds/go/xds/core/v3/context_params.pb.go
index 7473f9099d9..2d0e2b6ee22 100644
--- a/vendor/github.com/cncf/xds/go/xds/core/v3/context_params.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/core/v3/context_params.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/core/v3/context_params.proto
 
@@ -8,7 +8,6 @@ package v3
 
 import (
 	_ "github.com/cncf/xds/go/xds/annotations/v3"
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
@@ -22,10 +21,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type ContextParams struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
diff --git a/vendor/github.com/cncf/xds/go/xds/core/v3/extension.pb.go b/vendor/github.com/cncf/xds/go/xds/core/v3/extension.pb.go
index 4b801ee08be..ba0c2464604 100644
--- a/vendor/github.com/cncf/xds/go/xds/core/v3/extension.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/core/v3/extension.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/core/v3/extension.proto
 
@@ -8,8 +8,7 @@ package v3
 
 import (
 	_ "github.com/envoyproxy/protoc-gen-validate/validate"
-	proto "github.com/golang/protobuf/proto"
-	any "github.com/golang/protobuf/ptypes/any"
+	any1 "github.com/golang/protobuf/ptypes/any"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
@@ -23,17 +22,13 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type TypedExtensionConfig struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	Name        string   `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
-	TypedConfig *any.Any `protobuf:"bytes,2,opt,name=typed_config,json=typedConfig,proto3" json:"typed_config,omitempty"`
+	Name        string    `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
+	TypedConfig *any1.Any `protobuf:"bytes,2,opt,name=typed_config,json=typedConfig,proto3" json:"typed_config,omitempty"`
 }
 
 func (x *TypedExtensionConfig) Reset() {
@@ -75,7 +70,7 @@ func (x *TypedExtensionConfig) GetName() string {
 	return ""
 }
 
-func (x *TypedExtensionConfig) GetTypedConfig() *any.Any {
+func (x *TypedExtensionConfig) GetTypedConfig() *any1.Any {
 	if x != nil {
 		return x.TypedConfig
 	}
@@ -121,7 +116,7 @@ func file_xds_core_v3_extension_proto_rawDescGZIP() []byte {
 var file_xds_core_v3_extension_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_xds_core_v3_extension_proto_goTypes = []interface{}{
 	(*TypedExtensionConfig)(nil), // 0: xds.core.v3.TypedExtensionConfig
-	(*any.Any)(nil),              // 1: google.protobuf.Any
+	(*any1.Any)(nil),             // 1: google.protobuf.Any
 }
 var file_xds_core_v3_extension_proto_depIdxs = []int32{
 	1, // 0: xds.core.v3.TypedExtensionConfig.typed_config:type_name -> google.protobuf.Any
diff --git a/vendor/github.com/cncf/xds/go/xds/core/v3/resource.pb.go b/vendor/github.com/cncf/xds/go/xds/core/v3/resource.pb.go
index 42882efa78a..915e3c730f5 100644
--- a/vendor/github.com/cncf/xds/go/xds/core/v3/resource.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/core/v3/resource.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/core/v3/resource.proto
 
@@ -8,8 +8,7 @@ package v3
 
 import (
 	_ "github.com/cncf/xds/go/xds/annotations/v3"
-	proto "github.com/golang/protobuf/proto"
-	any "github.com/golang/protobuf/ptypes/any"
+	any1 "github.com/golang/protobuf/ptypes/any"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
@@ -23,10 +22,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type Resource struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -34,7 +29,7 @@ type Resource struct {
 
 	Name     *ResourceName `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
 	Version  string        `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
-	Resource *any.Any      `protobuf:"bytes,3,opt,name=resource,proto3" json:"resource,omitempty"`
+	Resource *any1.Any     `protobuf:"bytes,3,opt,name=resource,proto3" json:"resource,omitempty"`
 }
 
 func (x *Resource) Reset() {
@@ -83,7 +78,7 @@ func (x *Resource) GetVersion() string {
 	return ""
 }
 
-func (x *Resource) GetResource() *any.Any {
+func (x *Resource) GetResource() *any1.Any {
 	if x != nil {
 		return x.Resource
 	}
@@ -134,7 +129,7 @@ var file_xds_core_v3_resource_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_xds_core_v3_resource_proto_goTypes = []interface{}{
 	(*Resource)(nil),     // 0: xds.core.v3.Resource
 	(*ResourceName)(nil), // 1: xds.core.v3.ResourceName
-	(*any.Any)(nil),      // 2: google.protobuf.Any
+	(*any1.Any)(nil),     // 2: google.protobuf.Any
 }
 var file_xds_core_v3_resource_proto_depIdxs = []int32{
 	1, // 0: xds.core.v3.Resource.name:type_name -> xds.core.v3.ResourceName
diff --git a/vendor/github.com/cncf/xds/go/xds/core/v3/resource_locator.pb.go b/vendor/github.com/cncf/xds/go/xds/core/v3/resource_locator.pb.go
index d0cdd8a3d35..bc28d50bbec 100644
--- a/vendor/github.com/cncf/xds/go/xds/core/v3/resource_locator.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/core/v3/resource_locator.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/core/v3/resource_locator.proto
 
@@ -9,7 +9,6 @@ package v3
 import (
 	_ "github.com/cncf/xds/go/xds/annotations/v3"
 	_ "github.com/envoyproxy/protoc-gen-validate/validate"
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
@@ -23,10 +22,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type ResourceLocator_Scheme int32
 
 const (
@@ -86,6 +81,7 @@ type ResourceLocator struct {
 	Authority    string                 `protobuf:"bytes,3,opt,name=authority,proto3" json:"authority,omitempty"`
 	ResourceType string                 `protobuf:"bytes,4,opt,name=resource_type,json=resourceType,proto3" json:"resource_type,omitempty"`
 	// Types that are assignable to ContextParamSpecifier:
+	//
 	//	*ResourceLocator_ExactContext
 	ContextParamSpecifier isResourceLocator_ContextParamSpecifier `protobuf_oneof:"context_param_specifier"`
 	Directives            []*ResourceLocator_Directive            `protobuf:"bytes,6,rep,name=directives,proto3" json:"directives,omitempty"`
@@ -188,6 +184,7 @@ type ResourceLocator_Directive struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Directive:
+	//
 	//	*ResourceLocator_Directive_Alt
 	//	*ResourceLocator_Directive_Entry
 	Directive isResourceLocator_Directive_Directive `protobuf_oneof:"directive"`
diff --git a/vendor/github.com/cncf/xds/go/xds/core/v3/resource_name.pb.go b/vendor/github.com/cncf/xds/go/xds/core/v3/resource_name.pb.go
index 0ef98bb7c69..92a54df4f06 100644
--- a/vendor/github.com/cncf/xds/go/xds/core/v3/resource_name.pb.go
+++ b/vendor/github.com/cncf/xds/go/xds/core/v3/resource_name.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.25.0
+// 	protoc-gen-go v1.28.1
 // 	protoc        v3.18.0
 // source: xds/core/v3/resource_name.proto
 
@@ -9,7 +9,6 @@ package v3
 import (
 	_ "github.com/cncf/xds/go/xds/annotations/v3"
 	_ "github.com/envoyproxy/protoc-gen-validate/validate"
-	proto "github.com/golang/protobuf/proto"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
@@ -23,10 +22,6 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// This is a compile-time assertion that a sufficiently up-to-date version
-// of the legacy proto package is being used.
-const _ = proto.ProtoPackageIsVersion4
-
 type ResourceName struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
diff --git a/vendor/github.com/containerd/cgroups/v3/.gitignore b/vendor/github.com/containerd/cgroups/v3/.gitignore
new file mode 100644
index 00000000000..3465c14cf77
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/.gitignore
@@ -0,0 +1,2 @@
+example/example
+cmd/cgctl/cgctl
diff --git a/vendor/github.com/containerd/cgroups/v3/LICENSE b/vendor/github.com/containerd/cgroups/v3/LICENSE
new file mode 100644
index 00000000000..261eeb9e9f8
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/LICENSE
@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/vendor/github.com/containerd/cgroups/v3/Makefile b/vendor/github.com/containerd/cgroups/v3/Makefile
new file mode 100644
index 00000000000..8f8b6bc5ace
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/Makefile
@@ -0,0 +1,29 @@
+#   Copyright The containerd Authors.
+
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+
+#       http://www.apache.org/licenses/LICENSE-2.0
+
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+
+PACKAGES=$(shell go list ./... | grep -v /vendor/)
+GO_TAGS=$(if $(GO_BUILDTAGS),-tags "$(strip $(GO_BUILDTAGS))",)
+GO ?= go
+GO_BUILD_FLAGS ?=
+
+all: cgutil
+	$(GO) build -v $(GO_TAGS)
+
+cgutil:
+	cd cmd/cgctl && $(GO) build $(GO_BUILD_FLAGS) -v $(GO_TAGS)
+
+proto:
+	protobuild --quiet ${PACKAGES}
+	# Keep them Go-idiomatic and backward-compatible with the gogo/protobuf era.
+	go-fix-acronym -w -a '(Cpu|Tcp|Rss|Psi)' $(shell find cgroup1/stats/ cgroup2/stats/ -name '*.pb.go')
diff --git a/vendor/github.com/containerd/cgroups/v3/Protobuild.toml b/vendor/github.com/containerd/cgroups/v3/Protobuild.toml
new file mode 100644
index 00000000000..cf94b1c1ab2
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/Protobuild.toml
@@ -0,0 +1,31 @@
+version = "2"
+generators = ["go"]
+
+# Control protoc include paths. Below are usually some good defaults, but feel
+# free to try it without them if it works for your project.
+[includes]
+  # Include paths that will be added before all others. Typically, you want to
+  # treat the root of the project as an include, but this may not be necessary.
+  # before = ["."]
+
+  # Paths that will be added untouched to the end of the includes. We use
+  # `/usr/local/include` to pickup the common install location of protobuf.
+  # This is the default.
+  after = ["/usr/local/include", "/usr/include"]
+
+# Aggregrate the API descriptors to lock down API changes.
+[[descriptors]]
+prefix = "github.com/containerd/cgroups/cgroup1/stats"
+target = "cgroup1/stats/metrics.pb.txt"
+ignore_files = [
+	"google/protobuf/descriptor.proto",
+]
+[[descriptors]]
+prefix = "github.com/containerd/cgroups/cgroup2/stats"
+target = "cgroup2/stats/metrics.pb.txt"
+ignore_files = [
+	"google/protobuf/descriptor.proto",
+]
+
+[parameters.go]
+paths = "source_relative"
diff --git a/vendor/github.com/containerd/cgroups/v3/README.md b/vendor/github.com/containerd/cgroups/v3/README.md
new file mode 100644
index 00000000000..c7f37c612f3
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/README.md
@@ -0,0 +1,238 @@
+# cgroups
+
+[![Build Status](https://github.com/containerd/cgroups/workflows/CI/badge.svg)](https://github.com/containerd/cgroups/actions?query=workflow%3ACI)
+[![codecov](https://codecov.io/gh/containerd/cgroups/branch/main/graph/badge.svg)](https://codecov.io/gh/containerd/cgroups)
+[![GoDoc](https://godoc.org/github.com/containerd/cgroups?status.svg)](https://godoc.org/github.com/containerd/cgroups)
+[![Go Report Card](https://goreportcard.com/badge/github.com/containerd/cgroups)](https://goreportcard.com/report/github.com/containerd/cgroups)
+
+Go package for creating, managing, inspecting, and destroying cgroups.
+The resources format for settings on the cgroup uses the OCI runtime-spec found
+[here](https://github.com/opencontainers/runtime-spec).
+
+## Examples (v1)
+
+### Create a new cgroup
+
+This creates a new cgroup using a static path for all subsystems under `/test`.
+
+* /sys/fs/cgroup/cpu/test
+* /sys/fs/cgroup/memory/test
+* etc....
+
+It uses a single hierarchy and specifies cpu shares as a resource constraint and
+uses the v1 implementation of cgroups.
+
+
+```go
+shares := uint64(100)
+control, err := cgroup1.New(cgroup1.StaticPath("/test"), &specs.LinuxResources{
+    CPU: &specs.LinuxCPU{
+        Shares: &shares,
+    },
+})
+defer control.Delete()
+```
+
+### Create with systemd slice support
+
+
+```go
+control, err := cgroup1.New(cgroup1.Systemd, cgroup1.Slice("system.slice", "runc-test"), &specs.LinuxResources{
+    CPU: &specs.CPU{
+        Shares: &shares,
+    },
+})
+
+```
+
+### Load an existing cgroup
+
+```go
+control, err = cgroup1.Load(cgroup1.Default, cgroups.StaticPath("/test"))
+```
+
+### Add a process to the cgroup
+
+```go
+if err := control.Add(cgroup1.Process{Pid:1234}); err != nil {
+}
+```
+
+###  Update the cgroup
+
+To update the resources applied in the cgroup
+
+```go
+shares = uint64(200)
+if err := control.Update(&specs.LinuxResources{
+    CPU: &specs.LinuxCPU{
+        Shares: &shares,
+    },
+}); err != nil {
+}
+```
+
+### Freeze and Thaw the cgroup
+
+```go
+if err := control.Freeze(); err != nil {
+}
+if err := control.Thaw(); err != nil {
+}
+```
+
+### List all processes in the cgroup or recursively
+
+```go
+processes, err := control.Processes(cgroup1.Devices, recursive)
+```
+
+### Get Stats on the cgroup
+
+```go
+stats, err := control.Stat()
+```
+
+By adding `cgroups.IgnoreNotExist` all non-existent files will be ignored, e.g. swap memory stats without swap enabled
+```go
+stats, err := control.Stat(cgroup1.IgnoreNotExist)
+```
+
+### Move process across cgroups
+
+This allows you to take processes from one cgroup and move them to another.
+
+```go
+err := control.MoveTo(destination)
+```
+
+### Create subcgroup
+
+```go
+subCgroup, err := control.New("child", resources)
+```
+
+### Registering for memory events
+
+This allows you to get notified by an eventfd for v1 memory cgroups events.
+
+```go
+event := cgroup1.MemoryThresholdEvent(50 * 1024 * 1024, false)
+efd, err := control.RegisterMemoryEvent(event)
+```
+
+```go
+event := cgroup1.MemoryPressureEvent(cgroup1.MediumPressure, cgroup1.DefaultMode)
+efd, err := control.RegisterMemoryEvent(event)
+```
+
+```go
+efd, err := control.OOMEventFD()
+// or by using RegisterMemoryEvent
+event := cgroup1.OOMEvent()
+efd, err := control.RegisterMemoryEvent(event)
+```
+
+## Examples (v2/unified)
+
+### Check that the current system is running cgroups v2
+
+```go
+var cgroupV2 bool
+if cgroups.Mode() == cgroups.Unified {
+	cgroupV2 = true
+}
+```
+
+### Create a new cgroup
+
+This creates a new systemd v2 cgroup slice. Systemd slices consider ["-" a special character](https://www.freedesktop.org/software/systemd/man/systemd.slice.html),
+so the resulting slice would be located here on disk:
+
+* /sys/fs/cgroup/my.slice/my-cgroup.slice/my-cgroup-abc.slice
+
+```go
+import (
+    "github.com/containerd/cgroups/v3/cgroup2"
+    specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+res := cgroup2.Resources{}
+// dummy PID of -1 is used for creating a "general slice" to be used as a parent cgroup.
+// see https://github.com/containerd/cgroups/blob/1df78138f1e1e6ee593db155c6b369466f577651/v2/manager.go#L732-L735
+m, err := cgroup2.NewSystemd("/", "my-cgroup-abc.slice", -1, &res)
+if err != nil {
+	return err
+}
+```
+
+### Load an existing cgroup
+
+```go
+m, err := cgroup2.LoadSystemd("/", "my-cgroup-abc.slice")
+if err != nil {
+	return err
+}
+```
+
+### Delete a cgroup
+
+```go
+m, err := cgroup2.LoadSystemd("/", "my-cgroup-abc.slice")
+if err != nil {
+	return err
+}
+err = m.DeleteSystemd()
+if err != nil {
+	return err
+}
+```
+
+### Kill all processes in a cgroup
+
+```go
+m, err := cgroup2.LoadSystemd("/", "my-cgroup-abc.slice")
+if err != nil {
+	return err
+}
+err = m.Kill()
+if err != nil {
+	return err
+}
+```
+
+
+### Get and set cgroup type
+```go
+m, err := cgroup2.LoadSystemd("/", "my-cgroup-abc.slice")
+if err != nil {
+    return err
+}
+
+// https://www.kernel.org/doc/html/v5.0/admin-guide/cgroup-v2.html#threads
+cgType, err := m.GetType()
+if err != nil {
+    return err
+}
+fmt.Println(cgType)
+
+err = m.SetType(cgroup2.Threaded)
+if err != nil {
+    return err
+}
+```
+
+### Attention
+
+All static path should not include `/sys/fs/cgroup/` prefix, it should start with your own cgroups name
+
+## Project details
+
+Cgroups is a containerd sub-project, licensed under the [Apache 2.0 license](./LICENSE).
+As a containerd sub-project, you will find the:
+
+ * [Project governance](https://github.com/containerd/project/blob/main/GOVERNANCE.md),
+ * [Maintainers](https://github.com/containerd/project/blob/main/MAINTAINERS),
+ * and [Contributing guidelines](https://github.com/containerd/project/blob/main/CONTRIBUTING.md)
+
+information in our [`containerd/project`](https://github.com/containerd/project) repository.
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/blkio.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/blkio.go
new file mode 100644
index 00000000000..3be884c7e6c
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/blkio.go
@@ -0,0 +1,361 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"bufio"
+	"fmt"
+	"io"
+	"os"
+	"path/filepath"
+	"strconv"
+	"strings"
+
+	v1 "github.com/containerd/cgroups/v3/cgroup1/stats"
+
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+// NewBlkio returns a Blkio controller given the root folder of cgroups.
+// It may optionally accept other configuration options, such as ProcRoot(path)
+func NewBlkio(root string, options ...func(controller *blkioController)) *blkioController {
+	ctrl := &blkioController{
+		root:     filepath.Join(root, string(Blkio)),
+		procRoot: "/proc",
+	}
+	for _, opt := range options {
+		opt(ctrl)
+	}
+	return ctrl
+}
+
+// ProcRoot overrides the default location of the "/proc" filesystem
+func ProcRoot(path string) func(controller *blkioController) {
+	return func(c *blkioController) {
+		c.procRoot = path
+	}
+}
+
+type blkioController struct {
+	root     string
+	procRoot string
+}
+
+func (b *blkioController) Name() Name {
+	return Blkio
+}
+
+func (b *blkioController) Path(path string) string {
+	return filepath.Join(b.root, path)
+}
+
+func (b *blkioController) Create(path string, resources *specs.LinuxResources) error {
+	if err := os.MkdirAll(b.Path(path), defaultDirPerm); err != nil {
+		return err
+	}
+	if resources.BlockIO == nil {
+		return nil
+	}
+	for _, t := range createBlkioSettings(resources.BlockIO) {
+		if t.value != nil {
+			if err := os.WriteFile(
+				filepath.Join(b.Path(path), "blkio."+t.name),
+				t.format(t.value),
+				defaultFilePerm,
+			); err != nil {
+				return err
+			}
+		}
+	}
+	return nil
+}
+
+func (b *blkioController) Update(path string, resources *specs.LinuxResources) error {
+	return b.Create(path, resources)
+}
+
+func (b *blkioController) Stat(path string, stats *v1.Metrics) error {
+	stats.Blkio = &v1.BlkIOStat{}
+
+	var settings []blkioStatSettings
+
+	// Try to read CFQ stats available on all CFQ enabled kernels first
+	if _, err := os.Lstat(filepath.Join(b.Path(path), "blkio.io_serviced_recursive")); err == nil {
+		settings = []blkioStatSettings{
+			{
+				name:  "sectors_recursive",
+				entry: &stats.Blkio.SectorsRecursive,
+			},
+			{
+				name:  "io_service_bytes_recursive",
+				entry: &stats.Blkio.IoServiceBytesRecursive,
+			},
+			{
+				name:  "io_serviced_recursive",
+				entry: &stats.Blkio.IoServicedRecursive,
+			},
+			{
+				name:  "io_queued_recursive",
+				entry: &stats.Blkio.IoQueuedRecursive,
+			},
+			{
+				name:  "io_service_time_recursive",
+				entry: &stats.Blkio.IoServiceTimeRecursive,
+			},
+			{
+				name:  "io_wait_time_recursive",
+				entry: &stats.Blkio.IoWaitTimeRecursive,
+			},
+			{
+				name:  "io_merged_recursive",
+				entry: &stats.Blkio.IoMergedRecursive,
+			},
+			{
+				name:  "time_recursive",
+				entry: &stats.Blkio.IoTimeRecursive,
+			},
+		}
+	}
+
+	f, err := os.Open(filepath.Join(b.procRoot, "partitions"))
+	if err != nil {
+		return err
+	}
+	defer f.Close()
+
+	devices, err := getDevices(f)
+	if err != nil {
+		return err
+	}
+
+	var size int
+	for _, t := range settings {
+		if err := b.readEntry(devices, path, t.name, t.entry); err != nil {
+			return err
+		}
+		size += len(*t.entry)
+	}
+	if size > 0 {
+		return nil
+	}
+
+	// Even the kernel is compiled with the CFQ scheduler, the cgroup may not use
+	// block devices with the CFQ scheduler. If so, we should fallback to throttle.* files.
+	settings = []blkioStatSettings{
+		{
+			name:  "throttle.io_serviced",
+			entry: &stats.Blkio.IoServicedRecursive,
+		},
+		{
+			name:  "throttle.io_service_bytes",
+			entry: &stats.Blkio.IoServiceBytesRecursive,
+		},
+	}
+	for _, t := range settings {
+		if err := b.readEntry(devices, path, t.name, t.entry); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func (b *blkioController) readEntry(devices map[deviceKey]string, path, name string, entry *[]*v1.BlkIOEntry) error {
+	f, err := os.Open(filepath.Join(b.Path(path), "blkio."+name))
+	if err != nil {
+		return err
+	}
+	defer f.Close()
+	sc := bufio.NewScanner(f)
+	for sc.Scan() {
+		// format: dev type amount
+		fields := strings.FieldsFunc(sc.Text(), splitBlkIOStatLine)
+		if len(fields) < 3 {
+			if len(fields) == 2 && fields[0] == "Total" {
+				// skip total line
+				continue
+			} else {
+				return fmt.Errorf("invalid line found while parsing %s: %s", path, sc.Text())
+			}
+		}
+		major, err := strconv.ParseUint(fields[0], 10, 64)
+		if err != nil {
+			return err
+		}
+		minor, err := strconv.ParseUint(fields[1], 10, 64)
+		if err != nil {
+			return err
+		}
+		op := ""
+		valueField := 2
+		if len(fields) == 4 {
+			op = fields[2]
+			valueField = 3
+		}
+		v, err := strconv.ParseUint(fields[valueField], 10, 64)
+		if err != nil {
+			return err
+		}
+		*entry = append(*entry, &v1.BlkIOEntry{
+			Device: devices[deviceKey{major, minor}],
+			Major:  major,
+			Minor:  minor,
+			Op:     op,
+			Value:  v,
+		})
+	}
+	return sc.Err()
+}
+
+func createBlkioSettings(blkio *specs.LinuxBlockIO) []blkioSettings {
+	settings := []blkioSettings{}
+
+	if blkio.Weight != nil {
+		settings = append(settings,
+			blkioSettings{
+				name:   "weight",
+				value:  blkio.Weight,
+				format: uintf,
+			})
+	}
+	if blkio.LeafWeight != nil {
+		settings = append(settings,
+			blkioSettings{
+				name:   "leaf_weight",
+				value:  blkio.LeafWeight,
+				format: uintf,
+			})
+	}
+	for _, wd := range blkio.WeightDevice {
+		if wd.Weight != nil {
+			settings = append(settings,
+				blkioSettings{
+					name:   "weight_device",
+					value:  wd,
+					format: weightdev,
+				})
+		}
+		if wd.LeafWeight != nil {
+			settings = append(settings,
+				blkioSettings{
+					name:   "leaf_weight_device",
+					value:  wd,
+					format: weightleafdev,
+				})
+		}
+	}
+	for _, t := range []struct {
+		name string
+		list []specs.LinuxThrottleDevice
+	}{
+		{
+			name: "throttle.read_bps_device",
+			list: blkio.ThrottleReadBpsDevice,
+		},
+		{
+			name: "throttle.read_iops_device",
+			list: blkio.ThrottleReadIOPSDevice,
+		},
+		{
+			name: "throttle.write_bps_device",
+			list: blkio.ThrottleWriteBpsDevice,
+		},
+		{
+			name: "throttle.write_iops_device",
+			list: blkio.ThrottleWriteIOPSDevice,
+		},
+	} {
+		for _, td := range t.list {
+			settings = append(settings, blkioSettings{
+				name:   t.name,
+				value:  td,
+				format: throttleddev,
+			})
+		}
+	}
+	return settings
+}
+
+type blkioSettings struct {
+	name   string
+	value  interface{}
+	format func(v interface{}) []byte
+}
+
+type blkioStatSettings struct {
+	name  string
+	entry *[]*v1.BlkIOEntry
+}
+
+func uintf(v interface{}) []byte {
+	return []byte(strconv.FormatUint(uint64(*v.(*uint16)), 10))
+}
+
+func weightdev(v interface{}) []byte {
+	wd := v.(specs.LinuxWeightDevice)
+	return []byte(fmt.Sprintf("%d:%d %d", wd.Major, wd.Minor, *wd.Weight))
+}
+
+func weightleafdev(v interface{}) []byte {
+	wd := v.(specs.LinuxWeightDevice)
+	return []byte(fmt.Sprintf("%d:%d %d", wd.Major, wd.Minor, *wd.LeafWeight))
+}
+
+func throttleddev(v interface{}) []byte {
+	td := v.(specs.LinuxThrottleDevice)
+	return []byte(fmt.Sprintf("%d:%d %d", td.Major, td.Minor, td.Rate))
+}
+
+func splitBlkIOStatLine(r rune) bool {
+	return r == ' ' || r == ':'
+}
+
+type deviceKey struct {
+	major, minor uint64
+}
+
+// getDevices makes a best effort attempt to read all the devices into a map
+// keyed by major and minor number. Since devices may be mapped multiple times,
+// we err on taking the first occurrence.
+func getDevices(r io.Reader) (map[deviceKey]string, error) {
+	var (
+		s       = bufio.NewScanner(r)
+		devices = make(map[deviceKey]string)
+	)
+	for i := 0; s.Scan(); i++ {
+		if i < 2 {
+			continue
+		}
+		fields := strings.Fields(s.Text())
+		major, err := strconv.Atoi(fields[0])
+		if err != nil {
+			return nil, err
+		}
+		minor, err := strconv.Atoi(fields[1])
+		if err != nil {
+			return nil, err
+		}
+		key := deviceKey{
+			major: uint64(major),
+			minor: uint64(minor),
+		}
+		if _, ok := devices[key]; ok {
+			continue
+		}
+		devices[key] = filepath.Join("/dev", fields[3])
+	}
+	return devices, s.Err()
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/cgroup.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/cgroup.go
new file mode 100644
index 00000000000..eae04f05bcb
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/cgroup.go
@@ -0,0 +1,575 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"errors"
+	"fmt"
+	"io/fs"
+	"os"
+	"path/filepath"
+	"strconv"
+	"strings"
+	"sync"
+	"syscall"
+	"time"
+
+	v1 "github.com/containerd/cgroups/v3/cgroup1/stats"
+
+	"github.com/opencontainers/runtime-spec/specs-go"
+)
+
+// New returns a new control via the cgroup cgroups interface
+func New(path Path, resources *specs.LinuxResources, opts ...InitOpts) (Cgroup, error) {
+	config := newInitConfig()
+	for _, o := range opts {
+		if err := o(config); err != nil {
+			return nil, err
+		}
+	}
+	subsystems, err := config.hierarchy()
+	if err != nil {
+		return nil, err
+	}
+	var active []Subsystem
+	for _, s := range subsystems {
+		// check if subsystem exists
+		if err := initializeSubsystem(s, path, resources); err != nil {
+			if err == ErrControllerNotActive {
+				if config.InitCheck != nil {
+					if skerr := config.InitCheck(s, path, err); skerr != nil {
+						if skerr != ErrIgnoreSubsystem {
+							return nil, skerr
+						}
+					}
+				}
+				continue
+			}
+			return nil, err
+		}
+		active = append(active, s)
+	}
+	return &cgroup{
+		path:       path,
+		subsystems: active,
+	}, nil
+}
+
+// Load will load an existing cgroup and allow it to be controlled
+// All static path should not include `/sys/fs/cgroup/` prefix, it should start with your own cgroups name
+func Load(path Path, opts ...InitOpts) (Cgroup, error) {
+	config := newInitConfig()
+	for _, o := range opts {
+		if err := o(config); err != nil {
+			return nil, err
+		}
+	}
+	var activeSubsystems []Subsystem
+	subsystems, err := config.hierarchy()
+	if err != nil {
+		return nil, err
+	}
+	// check that the subsystems still exist, and keep only those that actually exist
+	for _, s := range pathers(subsystems) {
+		p, err := path(s.Name())
+		if err != nil {
+			if errors.Is(err, os.ErrNotExist) {
+				return nil, ErrCgroupDeleted
+			}
+			if err == ErrControllerNotActive {
+				if config.InitCheck != nil {
+					if skerr := config.InitCheck(s, path, err); skerr != nil {
+						if skerr != ErrIgnoreSubsystem {
+							return nil, skerr
+						}
+					}
+				}
+				continue
+			}
+			return nil, err
+		}
+		if _, err := os.Lstat(s.Path(p)); err != nil {
+			if os.IsNotExist(err) {
+				continue
+			}
+			return nil, err
+		}
+		activeSubsystems = append(activeSubsystems, s)
+	}
+	// if we do not have any active systems then the cgroup is deleted
+	if len(activeSubsystems) == 0 {
+		return nil, ErrCgroupDeleted
+	}
+	return &cgroup{
+		path:       path,
+		subsystems: activeSubsystems,
+	}, nil
+}
+
+type cgroup struct {
+	path Path
+
+	subsystems []Subsystem
+	mu         sync.Mutex
+	err        error
+}
+
+// New returns a new sub cgroup
+func (c *cgroup) New(name string, resources *specs.LinuxResources) (Cgroup, error) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return nil, c.err
+	}
+	path := subPath(c.path, name)
+	for _, s := range c.subsystems {
+		if err := initializeSubsystem(s, path, resources); err != nil {
+			return nil, err
+		}
+	}
+	return &cgroup{
+		path:       path,
+		subsystems: c.subsystems,
+	}, nil
+}
+
+// Subsystems returns all the subsystems that are currently being
+// consumed by the group
+func (c *cgroup) Subsystems() []Subsystem {
+	return c.subsystems
+}
+
+func (c *cgroup) subsystemsFilter(subsystems ...Name) []Subsystem {
+	if len(subsystems) == 0 {
+		return c.subsystems
+	}
+
+	filteredSubsystems := []Subsystem{}
+	for _, s := range c.subsystems {
+		for _, f := range subsystems {
+			if s.Name() == f {
+				filteredSubsystems = append(filteredSubsystems, s)
+				break
+			}
+		}
+	}
+
+	return filteredSubsystems
+}
+
+// Add moves the provided process into the new cgroup.
+// Without additional arguments, the process is added to all the cgroup subsystems.
+// When giving Add a list of subsystem names, the process is only added to those
+// subsystems, provided that they are active in the targeted cgroup.
+func (c *cgroup) Add(process Process, subsystems ...Name) error {
+	return c.add(process, cgroupProcs, subsystems...)
+}
+
+// AddProc moves the provided process id into the new cgroup.
+// Without additional arguments, the process with the given id is added to all
+// the cgroup subsystems. When giving AddProc a list of subsystem names, the process
+// id is only added to those subsystems, provided that they are active in the targeted
+// cgroup.
+func (c *cgroup) AddProc(pid uint64, subsystems ...Name) error {
+	return c.add(Process{Pid: int(pid)}, cgroupProcs, subsystems...)
+}
+
+// AddTask moves the provided tasks (threads) into the new cgroup.
+// Without additional arguments, the task is added to all the cgroup subsystems.
+// When giving AddTask a list of subsystem names, the task is only added to those
+// subsystems, provided that they are active in the targeted cgroup.
+func (c *cgroup) AddTask(process Process, subsystems ...Name) error {
+	return c.add(process, cgroupTasks, subsystems...)
+}
+
+// writeCgroupsProcs writes to the file, but retries on EINVAL.
+func writeCgroupProcs(path string, content []byte, perm fs.FileMode) error {
+	f, err := os.OpenFile(path, os.O_CREATE|os.O_WRONLY, perm)
+	if err != nil {
+		return err
+	}
+	defer f.Close()
+
+	for i := 0; i < 5; i++ {
+		_, err = f.Write(content)
+		if err == nil {
+			return nil
+		}
+		// If the process's associated task's state is TASK_NEW, the kernel
+		// returns EINVAL. The function will retry on the error like runc.
+		// https://github.com/torvalds/linux/blob/v6.0/kernel/sched/core.c#L10308-L10337
+		// https://github.com/opencontainers/runc/pull/1950
+		if !errors.Is(err, syscall.EINVAL) {
+			return err
+		}
+		time.Sleep(30 * time.Millisecond)
+	}
+	return err
+}
+
+func (c *cgroup) add(process Process, pType procType, subsystems ...Name) error {
+	if process.Pid <= 0 {
+		return ErrInvalidPid
+	}
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return c.err
+	}
+	for _, s := range pathers(c.subsystemsFilter(subsystems...)) {
+		p, err := c.path(s.Name())
+		if err != nil {
+			return err
+		}
+		err = writeCgroupProcs(
+			filepath.Join(s.Path(p), pType),
+			[]byte(strconv.Itoa(process.Pid)),
+			defaultFilePerm,
+		)
+		if err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+// Delete will remove the control group from each of the subsystems registered
+func (c *cgroup) Delete() error {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return c.err
+	}
+	var errs []string
+	for _, s := range c.subsystems {
+		// kernel prevents cgroups with running process from being removed, check the tree is empty
+		procs, err := c.processes(s.Name(), true, cgroupProcs)
+		if err != nil {
+			// if the control group does not exist within a subsystem, then proceed to the next subsystem
+			if errors.Is(err, os.ErrNotExist) {
+				continue
+			}
+			return err
+		}
+		if len(procs) > 0 {
+			errs = append(errs, fmt.Sprintf("%s (contains running processes)", string(s.Name())))
+			continue
+		}
+		if d, ok := s.(deleter); ok {
+			sp, err := c.path(s.Name())
+			if err != nil {
+				return err
+			}
+			if err := d.Delete(sp); err != nil {
+				errs = append(errs, string(s.Name()))
+			}
+			continue
+		}
+		if p, ok := s.(pather); ok {
+			sp, err := c.path(s.Name())
+			if err != nil {
+				return err
+			}
+			path := p.Path(sp)
+			if err := remove(path); err != nil {
+				errs = append(errs, path)
+			}
+			continue
+		}
+	}
+	if len(errs) > 0 {
+		return fmt.Errorf("cgroups: unable to remove paths %s", strings.Join(errs, ", "))
+	}
+	c.err = ErrCgroupDeleted
+	return nil
+}
+
+// Stat returns the current metrics for the cgroup
+func (c *cgroup) Stat(handlers ...ErrorHandler) (*v1.Metrics, error) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return nil, c.err
+	}
+	if len(handlers) == 0 {
+		handlers = append(handlers, errPassthrough)
+	}
+	var (
+		stats = &v1.Metrics{
+			CPU: &v1.CPUStat{
+				Throttling: &v1.Throttle{},
+				Usage:      &v1.CPUUsage{},
+			},
+		}
+		wg   = &sync.WaitGroup{}
+		errs = make(chan error, len(c.subsystems))
+	)
+	for _, s := range c.subsystems {
+		if ss, ok := s.(stater); ok {
+			sp, err := c.path(s.Name())
+			if err != nil {
+				return nil, err
+			}
+			wg.Add(1)
+			go func() {
+				defer wg.Done()
+				if err := ss.Stat(sp, stats); err != nil {
+					for _, eh := range handlers {
+						if herr := eh(err); herr != nil {
+							errs <- herr
+						}
+					}
+				}
+			}()
+		}
+	}
+	wg.Wait()
+	close(errs)
+	for err := range errs {
+		return nil, err
+	}
+	return stats, nil
+}
+
+// Update updates the cgroup with the new resource values provided
+//
+// Be prepared to handle EBUSY when trying to update a cgroup with
+// live processes and other operations like Stats being performed at the
+// same time
+func (c *cgroup) Update(resources *specs.LinuxResources) error {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return c.err
+	}
+	for _, s := range c.subsystems {
+		if u, ok := s.(updater); ok {
+			sp, err := c.path(s.Name())
+			if err != nil {
+				return err
+			}
+			if err := u.Update(sp, resources); err != nil {
+				return err
+			}
+		}
+	}
+	return nil
+}
+
+// Processes returns the processes running inside the cgroup along
+// with the subsystem used, pid, and path
+func (c *cgroup) Processes(subsystem Name, recursive bool) ([]Process, error) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return nil, c.err
+	}
+	return c.processes(subsystem, recursive, cgroupProcs)
+}
+
+// Tasks returns the tasks running inside the cgroup along
+// with the subsystem used, pid, and path
+func (c *cgroup) Tasks(subsystem Name, recursive bool) ([]Task, error) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return nil, c.err
+	}
+	return c.processes(subsystem, recursive, cgroupTasks)
+}
+
+func (c *cgroup) processes(subsystem Name, recursive bool, pType procType) ([]Process, error) {
+	s := c.getSubsystem(subsystem)
+	sp, err := c.path(subsystem)
+	if err != nil {
+		return nil, err
+	}
+	if s == nil {
+		return nil, fmt.Errorf("cgroups: %s doesn't exist in %s subsystem", sp, subsystem)
+	}
+	path := s.(pather).Path(sp)
+	var processes []Process
+	err = filepath.Walk(path, func(p string, info os.FileInfo, err error) error {
+		if err != nil {
+			return err
+		}
+		if !recursive && info.IsDir() {
+			if p == path {
+				return nil
+			}
+			return filepath.SkipDir
+		}
+		dir, name := filepath.Split(p)
+		if name != pType {
+			return nil
+		}
+		procs, err := readPids(dir, subsystem, pType)
+		if err != nil {
+			return err
+		}
+		processes = append(processes, procs...)
+		return nil
+	})
+	return processes, err
+}
+
+// Freeze freezes the entire cgroup and all the processes inside it
+func (c *cgroup) Freeze() error {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return c.err
+	}
+	s := c.getSubsystem(Freezer)
+	if s == nil {
+		return ErrFreezerNotSupported
+	}
+	sp, err := c.path(Freezer)
+	if err != nil {
+		return err
+	}
+	return s.(*freezerController).Freeze(sp)
+}
+
+// Thaw thaws out the cgroup and all the processes inside it
+func (c *cgroup) Thaw() error {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return c.err
+	}
+	s := c.getSubsystem(Freezer)
+	if s == nil {
+		return ErrFreezerNotSupported
+	}
+	sp, err := c.path(Freezer)
+	if err != nil {
+		return err
+	}
+	return s.(*freezerController).Thaw(sp)
+}
+
+// OOMEventFD returns the memory cgroup's out of memory event fd that triggers
+// when processes inside the cgroup receive an oom event. Returns
+// ErrMemoryNotSupported if memory cgroups is not supported.
+func (c *cgroup) OOMEventFD() (uintptr, error) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return 0, c.err
+	}
+	s := c.getSubsystem(Memory)
+	if s == nil {
+		return 0, ErrMemoryNotSupported
+	}
+	sp, err := c.path(Memory)
+	if err != nil {
+		return 0, err
+	}
+	return s.(*memoryController).memoryEvent(sp, OOMEvent())
+}
+
+// RegisterMemoryEvent allows the ability to register for all v1 memory cgroups
+// notifications.
+func (c *cgroup) RegisterMemoryEvent(event MemoryEvent) (uintptr, error) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return 0, c.err
+	}
+	s := c.getSubsystem(Memory)
+	if s == nil {
+		return 0, ErrMemoryNotSupported
+	}
+	sp, err := c.path(Memory)
+	if err != nil {
+		return 0, err
+	}
+	return s.(*memoryController).memoryEvent(sp, event)
+}
+
+// State returns the state of the cgroup and its processes
+func (c *cgroup) State() State {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	c.checkExists()
+	if c.err != nil && c.err == ErrCgroupDeleted {
+		return Deleted
+	}
+	s := c.getSubsystem(Freezer)
+	if s == nil {
+		return Thawed
+	}
+	sp, err := c.path(Freezer)
+	if err != nil {
+		return Unknown
+	}
+	state, err := s.(*freezerController).state(sp)
+	if err != nil {
+		return Unknown
+	}
+	return state
+}
+
+// MoveTo does a recursive move subsystem by subsystem of all the processes
+// inside the group
+func (c *cgroup) MoveTo(destination Cgroup) error {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.err != nil {
+		return c.err
+	}
+	for _, s := range c.subsystems {
+		processes, err := c.processes(s.Name(), true, cgroupProcs)
+		if err != nil {
+			return err
+		}
+		for _, p := range processes {
+			if err := destination.Add(p); err != nil {
+				if strings.Contains(err.Error(), "no such process") {
+					continue
+				}
+				return err
+			}
+		}
+	}
+	return nil
+}
+
+func (c *cgroup) getSubsystem(n Name) Subsystem {
+	for _, s := range c.subsystems {
+		if s.Name() == n {
+			return s
+		}
+	}
+	return nil
+}
+
+func (c *cgroup) checkExists() {
+	for _, s := range pathers(c.subsystems) {
+		p, err := c.path(s.Name())
+		if err != nil {
+			return
+		}
+		if _, err := os.Lstat(s.Path(p)); err != nil {
+			if os.IsNotExist(err) {
+				c.err = ErrCgroupDeleted
+				return
+			}
+		}
+	}
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/control.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/control.go
new file mode 100644
index 00000000000..8fee13d037a
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/control.go
@@ -0,0 +1,99 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"os"
+
+	v1 "github.com/containerd/cgroups/v3/cgroup1/stats"
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+type procType = string
+
+const (
+	cgroupProcs    procType = "cgroup.procs"
+	cgroupTasks    procType = "tasks"
+	defaultDirPerm          = 0o755
+)
+
+// defaultFilePerm is a var so that the test framework can change the filemode
+// of all files created when the tests are running.  The difference between the
+// tests and real world use is that files like "cgroup.procs" will exist when writing
+// to a read cgroup filesystem and do not exist prior when running in the tests.
+// this is set to a non 0 value in the test code
+var defaultFilePerm = os.FileMode(0)
+
+type Process struct {
+	// Subsystem is the name of the subsystem that the process / task is in.
+	Subsystem Name
+	// Pid is the process id of the process / task.
+	Pid int
+	// Path is the full path of the subsystem and location that the process / task is in.
+	Path string
+}
+
+type Task = Process
+
+// Cgroup handles interactions with the individual groups to perform
+// actions on them as them main interface to this cgroup package
+type Cgroup interface {
+	// New creates a new cgroup under the calling cgroup
+	New(string, *specs.LinuxResources) (Cgroup, error)
+	// Add adds a process to the cgroup (cgroup.procs). Without additional arguments,
+	// the process is added to all the cgroup subsystems. When giving Add a list of
+	// subsystem names, the process is only added to those subsystems, provided that
+	// they are active in the targeted cgroup.
+	Add(Process, ...Name) error
+	// AddProc adds the process with the given id to the cgroup (cgroup.procs).
+	// Without additional arguments, the process with the given id is added to all
+	// the cgroup subsystems. When giving AddProc a list of subsystem names, the process
+	// id is only added to those subsystems, provided that they are active in the targeted
+	// cgroup.
+	AddProc(uint64, ...Name) error
+	// AddTask adds a process to the cgroup (tasks). Without additional arguments, the
+	// task is added to all the cgroup subsystems. When giving AddTask a list of subsystem
+	// names, the task is only added to those subsystems, provided that they are active in
+	// the targeted cgroup.
+	AddTask(Process, ...Name) error
+	// Delete removes the cgroup as a whole
+	Delete() error
+	// MoveTo moves all the processes under the calling cgroup to the provided one
+	// subsystems are moved one at a time
+	MoveTo(Cgroup) error
+	// Stat returns the stats for all subsystems in the cgroup
+	Stat(...ErrorHandler) (*v1.Metrics, error)
+	// Update updates all the subsystems with the provided resource changes
+	Update(resources *specs.LinuxResources) error
+	// Processes returns all the processes in a select subsystem for the cgroup
+	Processes(Name, bool) ([]Process, error)
+	// Tasks returns all the tasks in a select subsystem for the cgroup
+	Tasks(Name, bool) ([]Task, error)
+	// Freeze freezes or pauses all processes inside the cgroup
+	Freeze() error
+	// Thaw thaw or resumes all processes inside the cgroup
+	Thaw() error
+	// OOMEventFD returns the memory subsystem's event fd for OOM events
+	OOMEventFD() (uintptr, error)
+	// RegisterMemoryEvent returns the memory subsystems event fd for whatever memory event was
+	// registered for. Can alternatively register for the oom event with this method.
+	RegisterMemoryEvent(MemoryEvent) (uintptr, error)
+	// State returns the cgroups current state
+	State() State
+	// Subsystems returns all the subsystems in the cgroup
+	Subsystems() []Subsystem
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/cpu.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/cpu.go
new file mode 100644
index 00000000000..e02ca0d8e81
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/cpu.go
@@ -0,0 +1,125 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"bufio"
+	"os"
+	"path/filepath"
+	"strconv"
+
+	v1 "github.com/containerd/cgroups/v3/cgroup1/stats"
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+func NewCpu(root string) *cpuController {
+	return &cpuController{
+		root: filepath.Join(root, string(Cpu)),
+	}
+}
+
+type cpuController struct {
+	root string
+}
+
+func (c *cpuController) Name() Name {
+	return Cpu
+}
+
+func (c *cpuController) Path(path string) string {
+	return filepath.Join(c.root, path)
+}
+
+func (c *cpuController) Create(path string, resources *specs.LinuxResources) error {
+	if err := os.MkdirAll(c.Path(path), defaultDirPerm); err != nil {
+		return err
+	}
+	if cpu := resources.CPU; cpu != nil {
+		for _, t := range []struct {
+			name   string
+			ivalue *int64
+			uvalue *uint64
+		}{
+			{
+				name:   "rt_period_us",
+				uvalue: cpu.RealtimePeriod,
+			},
+			{
+				name:   "rt_runtime_us",
+				ivalue: cpu.RealtimeRuntime,
+			},
+			{
+				name:   "shares",
+				uvalue: cpu.Shares,
+			},
+			{
+				name:   "cfs_period_us",
+				uvalue: cpu.Period,
+			},
+			{
+				name:   "cfs_quota_us",
+				ivalue: cpu.Quota,
+			},
+		} {
+			var value []byte
+			if t.uvalue != nil {
+				value = []byte(strconv.FormatUint(*t.uvalue, 10))
+			} else if t.ivalue != nil {
+				value = []byte(strconv.FormatInt(*t.ivalue, 10))
+			}
+			if value != nil {
+				if err := os.WriteFile(
+					filepath.Join(c.Path(path), "cpu."+t.name),
+					value,
+					defaultFilePerm,
+				); err != nil {
+					return err
+				}
+			}
+		}
+	}
+	return nil
+}
+
+func (c *cpuController) Update(path string, resources *specs.LinuxResources) error {
+	return c.Create(path, resources)
+}
+
+func (c *cpuController) Stat(path string, stats *v1.Metrics) error {
+	f, err := os.Open(filepath.Join(c.Path(path), "cpu.stat"))
+	if err != nil {
+		return err
+	}
+	defer f.Close()
+	// get or create the cpu field because cpuacct can also set values on this struct
+	sc := bufio.NewScanner(f)
+	for sc.Scan() {
+		key, v, err := parseKV(sc.Text())
+		if err != nil {
+			return err
+		}
+		switch key {
+		case "nr_periods":
+			stats.CPU.Throttling.Periods = v
+		case "nr_throttled":
+			stats.CPU.Throttling.ThrottledPeriods = v
+		case "throttled_time":
+			stats.CPU.Throttling.ThrottledTime = v
+		}
+	}
+	return sc.Err()
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/cpuacct.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/cpuacct.go
new file mode 100644
index 00000000000..b7a3e8f6a2b
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/cpuacct.go
@@ -0,0 +1,129 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"bufio"
+	"fmt"
+	"os"
+	"path/filepath"
+	"strconv"
+	"strings"
+
+	v1 "github.com/containerd/cgroups/v3/cgroup1/stats"
+)
+
+const nanosecondsInSecond = 1000000000
+
+var clockTicks = getClockTicks()
+
+func NewCpuacct(root string) *cpuacctController {
+	return &cpuacctController{
+		root: filepath.Join(root, string(Cpuacct)),
+	}
+}
+
+type cpuacctController struct {
+	root string
+}
+
+func (c *cpuacctController) Name() Name {
+	return Cpuacct
+}
+
+func (c *cpuacctController) Path(path string) string {
+	return filepath.Join(c.root, path)
+}
+
+func (c *cpuacctController) Stat(path string, stats *v1.Metrics) error {
+	user, kernel, err := c.getUsage(path)
+	if err != nil {
+		return err
+	}
+	total, err := readUint(filepath.Join(c.Path(path), "cpuacct.usage"))
+	if err != nil {
+		return err
+	}
+	percpu, err := c.percpuUsage(path)
+	if err != nil {
+		return err
+	}
+	stats.CPU.Usage.Total = total
+	stats.CPU.Usage.User = user
+	stats.CPU.Usage.Kernel = kernel
+	stats.CPU.Usage.PerCPU = percpu
+	return nil
+}
+
+func (c *cpuacctController) percpuUsage(path string) ([]uint64, error) {
+	var usage []uint64
+	data, err := os.ReadFile(filepath.Join(c.Path(path), "cpuacct.usage_percpu"))
+	if err != nil {
+		return nil, err
+	}
+	for _, v := range strings.Fields(string(data)) {
+		u, err := strconv.ParseUint(v, 10, 64)
+		if err != nil {
+			return nil, err
+		}
+		usage = append(usage, u)
+	}
+	return usage, nil
+}
+
+func (c *cpuacctController) getUsage(path string) (user uint64, kernel uint64, err error) {
+	statPath := filepath.Join(c.Path(path), "cpuacct.stat")
+	f, err := os.Open(statPath)
+	if err != nil {
+		return 0, 0, err
+	}
+	defer f.Close()
+	var (
+		raw = make(map[string]uint64)
+		sc  = bufio.NewScanner(f)
+	)
+	for sc.Scan() {
+		key, v, err := parseKV(sc.Text())
+		if err != nil {
+			return 0, 0, err
+		}
+		raw[key] = v
+	}
+	if err := sc.Err(); err != nil {
+		return 0, 0, err
+	}
+	for _, t := range []struct {
+		name  string
+		value *uint64
+	}{
+		{
+			name:  "user",
+			value: &user,
+		},
+		{
+			name:  "system",
+			value: &kernel,
+		},
+	} {
+		v, ok := raw[t.name]
+		if !ok {
+			return 0, 0, fmt.Errorf("expected field %q but not found in %q", t.name, statPath)
+		}
+		*t.value = v
+	}
+	return (user * nanosecondsInSecond) / clockTicks, (kernel * nanosecondsInSecond) / clockTicks, nil
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/cpuset.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/cpuset.go
new file mode 100644
index 00000000000..242f77ed559
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/cpuset.go
@@ -0,0 +1,158 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"bytes"
+	"fmt"
+	"os"
+	"path/filepath"
+
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+func NewCpuset(root string) *cpusetController {
+	return &cpusetController{
+		root: filepath.Join(root, string(Cpuset)),
+	}
+}
+
+type cpusetController struct {
+	root string
+}
+
+func (c *cpusetController) Name() Name {
+	return Cpuset
+}
+
+func (c *cpusetController) Path(path string) string {
+	return filepath.Join(c.root, path)
+}
+
+func (c *cpusetController) Create(path string, resources *specs.LinuxResources) error {
+	if err := c.ensureParent(c.Path(path), c.root); err != nil {
+		return err
+	}
+	if err := os.MkdirAll(c.Path(path), defaultDirPerm); err != nil {
+		return err
+	}
+	if err := c.copyIfNeeded(c.Path(path), filepath.Dir(c.Path(path))); err != nil {
+		return err
+	}
+	if resources.CPU != nil {
+		for _, t := range []struct {
+			name  string
+			value string
+		}{
+			{
+				name:  "cpus",
+				value: resources.CPU.Cpus,
+			},
+			{
+				name:  "mems",
+				value: resources.CPU.Mems,
+			},
+		} {
+			if t.value != "" {
+				if err := os.WriteFile(
+					filepath.Join(c.Path(path), "cpuset."+t.name),
+					[]byte(t.value),
+					defaultFilePerm,
+				); err != nil {
+					return err
+				}
+			}
+		}
+	}
+	return nil
+}
+
+func (c *cpusetController) Update(path string, resources *specs.LinuxResources) error {
+	return c.Create(path, resources)
+}
+
+func (c *cpusetController) getValues(path string) (cpus []byte, mems []byte, err error) {
+	if cpus, err = os.ReadFile(filepath.Join(path, "cpuset.cpus")); err != nil && !os.IsNotExist(err) {
+		return
+	}
+	if mems, err = os.ReadFile(filepath.Join(path, "cpuset.mems")); err != nil && !os.IsNotExist(err) {
+		return
+	}
+	return cpus, mems, nil
+}
+
+// ensureParent makes sure that the parent directory of current is created
+// and populated with the proper cpus and mems files copied from
+// it's parent.
+func (c *cpusetController) ensureParent(current, root string) error {
+	parent := filepath.Dir(current)
+	if _, err := filepath.Rel(root, parent); err != nil {
+		return nil
+	}
+	// Avoid infinite recursion.
+	if parent == current {
+		return fmt.Errorf("cpuset: cgroup parent path outside cgroup root")
+	}
+	if cleanPath(parent) != root {
+		if err := c.ensureParent(parent, root); err != nil {
+			return err
+		}
+	}
+	if err := os.MkdirAll(current, defaultDirPerm); err != nil {
+		return err
+	}
+	return c.copyIfNeeded(current, parent)
+}
+
+// copyIfNeeded copies the cpuset.cpus and cpuset.mems from the parent
+// directory to the current directory if the file's contents are 0
+func (c *cpusetController) copyIfNeeded(current, parent string) error {
+	var (
+		err                      error
+		currentCpus, currentMems []byte
+		parentCpus, parentMems   []byte
+	)
+	if currentCpus, currentMems, err = c.getValues(current); err != nil {
+		return err
+	}
+	if parentCpus, parentMems, err = c.getValues(parent); err != nil {
+		return err
+	}
+	if isEmpty(currentCpus) {
+		if err := os.WriteFile(
+			filepath.Join(current, "cpuset.cpus"),
+			parentCpus,
+			defaultFilePerm,
+		); err != nil {
+			return err
+		}
+	}
+	if isEmpty(currentMems) {
+		if err := os.WriteFile(
+			filepath.Join(current, "cpuset.mems"),
+			parentMems,
+			defaultFilePerm,
+		); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func isEmpty(b []byte) bool {
+	return len(bytes.Trim(b, "\n")) == 0
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/devices.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/devices.go
new file mode 100644
index 00000000000..80d76fa309e
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/devices.go
@@ -0,0 +1,92 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"fmt"
+	"os"
+	"path/filepath"
+
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+const (
+	allowDeviceFile = "devices.allow"
+	denyDeviceFile  = "devices.deny"
+	wildcard        = -1
+)
+
+func NewDevices(root string) *devicesController {
+	return &devicesController{
+		root: filepath.Join(root, string(Devices)),
+	}
+}
+
+type devicesController struct {
+	root string
+}
+
+func (d *devicesController) Name() Name {
+	return Devices
+}
+
+func (d *devicesController) Path(path string) string {
+	return filepath.Join(d.root, path)
+}
+
+func (d *devicesController) Create(path string, resources *specs.LinuxResources) error {
+	if err := os.MkdirAll(d.Path(path), defaultDirPerm); err != nil {
+		return err
+	}
+	for _, device := range resources.Devices {
+		file := denyDeviceFile
+		if device.Allow {
+			file = allowDeviceFile
+		}
+		if device.Type == "" {
+			device.Type = "a"
+		}
+		if err := os.WriteFile(
+			filepath.Join(d.Path(path), file),
+			[]byte(deviceString(device)),
+			defaultFilePerm,
+		); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func (d *devicesController) Update(path string, resources *specs.LinuxResources) error {
+	return d.Create(path, resources)
+}
+
+func deviceString(device specs.LinuxDeviceCgroup) string {
+	return fmt.Sprintf("%s %s:%s %s",
+		device.Type,
+		deviceNumber(device.Major),
+		deviceNumber(device.Minor),
+		device.Access,
+	)
+}
+
+func deviceNumber(number *int64) string {
+	if number == nil || *number == wildcard {
+		return "*"
+	}
+	return fmt.Sprint(*number)
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/errors.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/errors.go
new file mode 100644
index 00000000000..d3ff6fbd15e
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/errors.go
@@ -0,0 +1,47 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"errors"
+	"os"
+)
+
+var (
+	ErrInvalidPid               = errors.New("cgroups: pid must be greater than 0")
+	ErrMountPointNotExist       = errors.New("cgroups: cgroup mountpoint does not exist")
+	ErrInvalidFormat            = errors.New("cgroups: parsing file with invalid format failed")
+	ErrFreezerNotSupported      = errors.New("cgroups: freezer cgroup not supported on this system")
+	ErrMemoryNotSupported       = errors.New("cgroups: memory cgroup not supported on this system")
+	ErrCgroupDeleted            = errors.New("cgroups: cgroup deleted")
+	ErrNoCgroupMountDestination = errors.New("cgroups: cannot find cgroup mount destination")
+)
+
+// ErrorHandler is a function that handles and acts on errors
+type ErrorHandler func(err error) error
+
+// IgnoreNotExist ignores any errors that are for not existing files
+func IgnoreNotExist(err error) error {
+	if os.IsNotExist(err) {
+		return nil
+	}
+	return err
+}
+
+func errPassthrough(err error) error {
+	return err
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/freezer.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/freezer.go
new file mode 100644
index 00000000000..05d9f6c2753
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/freezer.go
@@ -0,0 +1,82 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"os"
+	"path/filepath"
+	"strings"
+	"time"
+)
+
+func NewFreezer(root string) *freezerController {
+	return &freezerController{
+		root: filepath.Join(root, string(Freezer)),
+	}
+}
+
+type freezerController struct {
+	root string
+}
+
+func (f *freezerController) Name() Name {
+	return Freezer
+}
+
+func (f *freezerController) Path(path string) string {
+	return filepath.Join(f.root, path)
+}
+
+func (f *freezerController) Freeze(path string) error {
+	return f.waitState(path, Frozen)
+}
+
+func (f *freezerController) Thaw(path string) error {
+	return f.waitState(path, Thawed)
+}
+
+func (f *freezerController) changeState(path string, state State) error {
+	return os.WriteFile(
+		filepath.Join(f.root, path, "freezer.state"),
+		[]byte(strings.ToUpper(string(state))),
+		defaultFilePerm,
+	)
+}
+
+func (f *freezerController) state(path string) (State, error) {
+	current, err := os.ReadFile(filepath.Join(f.root, path, "freezer.state"))
+	if err != nil {
+		return "", err
+	}
+	return State(strings.ToLower(strings.TrimSpace(string(current)))), nil
+}
+
+func (f *freezerController) waitState(path string, state State) error {
+	for {
+		if err := f.changeState(path, state); err != nil {
+			return err
+		}
+		current, err := f.state(path)
+		if err != nil {
+			return err
+		}
+		if current == state {
+			return nil
+		}
+		time.Sleep(1 * time.Millisecond)
+	}
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/hierarchy.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/hierarchy.go
new file mode 100644
index 00000000000..1af9aa6bec1
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/hierarchy.go
@@ -0,0 +1,20 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+// Hierarchy enables both unified and split hierarchy for cgroups
+type Hierarchy func() ([]Subsystem, error)
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/hugetlb.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/hugetlb.go
new file mode 100644
index 00000000000..75519d9da31
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/hugetlb.go
@@ -0,0 +1,109 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"os"
+	"path/filepath"
+	"strconv"
+	"strings"
+
+	v1 "github.com/containerd/cgroups/v3/cgroup1/stats"
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+func NewHugetlb(root string) (*hugetlbController, error) {
+	sizes, err := hugePageSizes()
+	if err != nil {
+		return nil, err
+	}
+
+	return &hugetlbController{
+		root:  filepath.Join(root, string(Hugetlb)),
+		sizes: sizes,
+	}, nil
+}
+
+type hugetlbController struct {
+	root  string
+	sizes []string
+}
+
+func (h *hugetlbController) Name() Name {
+	return Hugetlb
+}
+
+func (h *hugetlbController) Path(path string) string {
+	return filepath.Join(h.root, path)
+}
+
+func (h *hugetlbController) Create(path string, resources *specs.LinuxResources) error {
+	if err := os.MkdirAll(h.Path(path), defaultDirPerm); err != nil {
+		return err
+	}
+	for _, limit := range resources.HugepageLimits {
+		if err := os.WriteFile(
+			filepath.Join(h.Path(path), strings.Join([]string{"hugetlb", limit.Pagesize, "limit_in_bytes"}, ".")),
+			[]byte(strconv.FormatUint(limit.Limit, 10)),
+			defaultFilePerm,
+		); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func (h *hugetlbController) Stat(path string, stats *v1.Metrics) error {
+	for _, size := range h.sizes {
+		s, err := h.readSizeStat(path, size)
+		if err != nil {
+			return err
+		}
+		stats.Hugetlb = append(stats.Hugetlb, s)
+	}
+	return nil
+}
+
+func (h *hugetlbController) readSizeStat(path, size string) (*v1.HugetlbStat, error) {
+	s := v1.HugetlbStat{
+		Pagesize: size,
+	}
+	for _, t := range []struct {
+		name  string
+		value *uint64
+	}{
+		{
+			name:  "usage_in_bytes",
+			value: &s.Usage,
+		},
+		{
+			name:  "max_usage_in_bytes",
+			value: &s.Max,
+		},
+		{
+			name:  "failcnt",
+			value: &s.Failcnt,
+		},
+	} {
+		v, err := readUint(filepath.Join(h.Path(path), strings.Join([]string{"hugetlb", size, t.name}, ".")))
+		if err != nil {
+			return nil, err
+		}
+		*t.value = v
+	}
+	return &s, nil
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/memory.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/memory.go
new file mode 100644
index 00000000000..52fe690755d
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/memory.go
@@ -0,0 +1,483 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"bufio"
+	"fmt"
+	"io"
+	"os"
+	"path/filepath"
+	"strconv"
+	"strings"
+
+	v1 "github.com/containerd/cgroups/v3/cgroup1/stats"
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+	"golang.org/x/sys/unix"
+)
+
+// MemoryEvent is an interface that V1 memory Cgroup notifications implement. Arg returns the
+// file name whose fd should be written to "cgroups.event_control". EventFile returns the name of
+// the file that supports the notification api e.g. "memory.usage_in_bytes".
+type MemoryEvent interface {
+	Arg() string
+	EventFile() string
+}
+
+type memoryThresholdEvent struct {
+	threshold uint64
+	swap      bool
+}
+
+// MemoryThresholdEvent returns a new [MemoryEvent] representing the memory threshold set.
+// If swap is true, the event will be registered using memory.memsw.usage_in_bytes
+func MemoryThresholdEvent(threshold uint64, swap bool) MemoryEvent {
+	return &memoryThresholdEvent{
+		threshold,
+		swap,
+	}
+}
+
+func (m *memoryThresholdEvent) Arg() string {
+	return strconv.FormatUint(m.threshold, 10)
+}
+
+func (m *memoryThresholdEvent) EventFile() string {
+	if m.swap {
+		return "memory.memsw.usage_in_bytes"
+	}
+	return "memory.usage_in_bytes"
+}
+
+type oomEvent struct{}
+
+// OOMEvent returns a new oom event to be used with RegisterMemoryEvent.
+func OOMEvent() MemoryEvent {
+	return &oomEvent{}
+}
+
+func (oom *oomEvent) Arg() string {
+	return ""
+}
+
+func (oom *oomEvent) EventFile() string {
+	return "memory.oom_control"
+}
+
+type memoryPressureEvent struct {
+	pressureLevel MemoryPressureLevel
+	hierarchy     EventNotificationMode
+}
+
+// MemoryPressureEvent returns a new [MemoryEvent] representing the memory pressure set.
+func MemoryPressureEvent(pressureLevel MemoryPressureLevel, hierarchy EventNotificationMode) MemoryEvent {
+	return &memoryPressureEvent{
+		pressureLevel,
+		hierarchy,
+	}
+}
+
+func (m *memoryPressureEvent) Arg() string {
+	return string(m.pressureLevel) + "," + string(m.hierarchy)
+}
+
+func (m *memoryPressureEvent) EventFile() string {
+	return "memory.pressure_level"
+}
+
+// MemoryPressureLevel corresponds to the memory pressure levels defined
+// for memory cgroups.
+type MemoryPressureLevel string
+
+// The three memory pressure levels are as follows.
+//   - The "low" level means that the system is reclaiming memory for new
+//     allocations. Monitoring this reclaiming activity might be useful for
+//     maintaining cache level. Upon notification, the program (typically
+//     "Activity Manager") might analyze vmstat and act in advance (i.e.
+//     prematurely shutdown unimportant services).
+//   - The "medium" level means that the system is experiencing medium memory
+//     pressure, the system might be making swap, paging out active file caches,
+//     etc. Upon this event applications may decide to further analyze
+//     vmstat/zoneinfo/memcg or internal memory usage statistics and free any
+//     resources that can be easily reconstructed or re-read from a disk.
+//   - The "critical" level means that the system is actively thrashing, it is
+//     about to out of memory (OOM) or even the in-kernel OOM killer is on its
+//     way to trigger. Applications should do whatever they can to help the
+//     system. It might be too late to consult with vmstat or any other
+//     statistics, so it is advisable to take an immediate action.
+//     "https://www.kernel.org/doc/Documentation/cgroup-v1/memory.txt" Section 11
+const (
+	LowPressure      MemoryPressureLevel = "low"
+	MediumPressure   MemoryPressureLevel = "medium"
+	CriticalPressure MemoryPressureLevel = "critical"
+)
+
+// EventNotificationMode corresponds to the notification modes
+// for the memory cgroups pressure level notifications.
+type EventNotificationMode string
+
+// There are three optional modes that specify different propagation behavior:
+//   - "default": this is the default behavior specified above. This mode is the
+//     same as omitting the optional mode parameter, preserved by backwards
+//     compatibility.
+//   - "hierarchy": events always propagate up to the root, similar to the default
+//     behavior, except that propagation continues regardless of whether there are
+//     event listeners at each level, with the "hierarchy" mode. In the above
+//     example, groups A, B, and C will receive notification of memory pressure.
+//   - "local": events are pass-through, i.e. they only receive notifications when
+//     memory pressure is experienced in the memcg for which the notification is
+//     registered. In the above example, group C will receive notification if
+//     registered for "local" notification and the group experiences memory
+//     pressure. However, group B will never receive notification, regardless if
+//     there is an event listener for group C or not, if group B is registered for
+//     local notification.
+//     "https://www.kernel.org/doc/Documentation/cgroup-v1/memory.txt" Section 11
+const (
+	DefaultMode   EventNotificationMode = "default"
+	LocalMode     EventNotificationMode = "local"
+	HierarchyMode EventNotificationMode = "hierarchy"
+)
+
+// NewMemory returns a Memory controller given the root folder of cgroups.
+// It may optionally accept other configuration options, such as IgnoreModules(...)
+func NewMemory(root string, options ...func(*memoryController)) *memoryController {
+	mc := &memoryController{
+		root:    filepath.Join(root, string(Memory)),
+		ignored: map[string]struct{}{},
+	}
+	for _, opt := range options {
+		opt(mc)
+	}
+	return mc
+}
+
+// IgnoreModules configure the memory controller to not read memory metrics for some
+// module names (e.g. passing "memsw" would avoid all the memory.memsw.* entries)
+func IgnoreModules(names ...string) func(*memoryController) {
+	return func(mc *memoryController) {
+		for _, name := range names {
+			mc.ignored[name] = struct{}{}
+		}
+	}
+}
+
+// OptionalSwap allows the memory controller to not fail if cgroups is not accounting
+// Swap memory (there are no memory.memsw.* entries)
+func OptionalSwap() func(*memoryController) {
+	return func(mc *memoryController) {
+		_, err := os.Stat(filepath.Join(mc.root, "memory.memsw.usage_in_bytes"))
+		if os.IsNotExist(err) {
+			mc.ignored["memsw"] = struct{}{}
+		}
+	}
+}
+
+type memoryController struct {
+	root    string
+	ignored map[string]struct{}
+}
+
+func (m *memoryController) Name() Name {
+	return Memory
+}
+
+func (m *memoryController) Path(path string) string {
+	return filepath.Join(m.root, path)
+}
+
+func (m *memoryController) Create(path string, resources *specs.LinuxResources) error {
+	if err := os.MkdirAll(m.Path(path), defaultDirPerm); err != nil {
+		return err
+	}
+	if resources.Memory == nil {
+		return nil
+	}
+	return m.set(path, getMemorySettings(resources))
+}
+
+func (m *memoryController) Update(path string, resources *specs.LinuxResources) error {
+	if resources.Memory == nil {
+		return nil
+	}
+	g := func(v *int64) bool {
+		return v != nil && *v > 0
+	}
+	settings := getMemorySettings(resources)
+	if g(resources.Memory.Limit) && g(resources.Memory.Swap) {
+		// if the updated swap value is larger than the current memory limit set the swap changes first
+		// then set the memory limit as swap must always be larger than the current limit
+		current, err := readUint(filepath.Join(m.Path(path), "memory.limit_in_bytes"))
+		if err != nil {
+			return err
+		}
+		if current < uint64(*resources.Memory.Swap) {
+			settings[0], settings[1] = settings[1], settings[0]
+		}
+	}
+	return m.set(path, settings)
+}
+
+func (m *memoryController) Stat(path string, stats *v1.Metrics) error {
+	fMemStat, err := os.Open(filepath.Join(m.Path(path), "memory.stat"))
+	if err != nil {
+		return err
+	}
+	defer fMemStat.Close()
+	stats.Memory = &v1.MemoryStat{
+		Usage:     &v1.MemoryEntry{},
+		Swap:      &v1.MemoryEntry{},
+		Kernel:    &v1.MemoryEntry{},
+		KernelTCP: &v1.MemoryEntry{},
+	}
+	if err := m.parseStats(fMemStat, stats.Memory); err != nil {
+		return err
+	}
+
+	fMemOomControl, err := os.Open(filepath.Join(m.Path(path), "memory.oom_control"))
+	if err != nil {
+		return err
+	}
+	defer fMemOomControl.Close()
+	stats.MemoryOomControl = &v1.MemoryOomControl{}
+	if err := m.parseOomControlStats(fMemOomControl, stats.MemoryOomControl); err != nil {
+		return err
+	}
+	for _, t := range []struct {
+		module string
+		entry  *v1.MemoryEntry
+	}{
+		{
+			module: "",
+			entry:  stats.Memory.Usage,
+		},
+		{
+			module: "memsw",
+			entry:  stats.Memory.Swap,
+		},
+		{
+			module: "kmem",
+			entry:  stats.Memory.Kernel,
+		},
+		{
+			module: "kmem.tcp",
+			entry:  stats.Memory.KernelTCP,
+		},
+	} {
+		if _, ok := m.ignored[t.module]; ok {
+			continue
+		}
+		for _, tt := range []struct {
+			name  string
+			value *uint64
+		}{
+			{
+				name:  "usage_in_bytes",
+				value: &t.entry.Usage,
+			},
+			{
+				name:  "max_usage_in_bytes",
+				value: &t.entry.Max,
+			},
+			{
+				name:  "failcnt",
+				value: &t.entry.Failcnt,
+			},
+			{
+				name:  "limit_in_bytes",
+				value: &t.entry.Limit,
+			},
+		} {
+			parts := []string{"memory"}
+			if t.module != "" {
+				parts = append(parts, t.module)
+			}
+			parts = append(parts, tt.name)
+			v, err := readUint(filepath.Join(m.Path(path), strings.Join(parts, ".")))
+			if err != nil {
+				return err
+			}
+			*tt.value = v
+		}
+	}
+	return nil
+}
+
+func (m *memoryController) parseStats(r io.Reader, stat *v1.MemoryStat) error {
+	var (
+		raw  = make(map[string]uint64)
+		sc   = bufio.NewScanner(r)
+		line int
+	)
+	for sc.Scan() {
+		key, v, err := parseKV(sc.Text())
+		if err != nil {
+			return fmt.Errorf("%d: %v", line, err)
+		}
+		raw[key] = v
+		line++
+	}
+	if err := sc.Err(); err != nil {
+		return err
+	}
+	stat.Cache = raw["cache"]
+	stat.RSS = raw["rss"]
+	stat.RSSHuge = raw["rss_huge"]
+	stat.MappedFile = raw["mapped_file"]
+	stat.Dirty = raw["dirty"]
+	stat.Writeback = raw["writeback"]
+	stat.PgPgIn = raw["pgpgin"]
+	stat.PgPgOut = raw["pgpgout"]
+	stat.PgFault = raw["pgfault"]
+	stat.PgMajFault = raw["pgmajfault"]
+	stat.InactiveAnon = raw["inactive_anon"]
+	stat.ActiveAnon = raw["active_anon"]
+	stat.InactiveFile = raw["inactive_file"]
+	stat.ActiveFile = raw["active_file"]
+	stat.Unevictable = raw["unevictable"]
+	stat.HierarchicalMemoryLimit = raw["hierarchical_memory_limit"]
+	stat.HierarchicalSwapLimit = raw["hierarchical_memsw_limit"]
+	stat.TotalCache = raw["total_cache"]
+	stat.TotalRSS = raw["total_rss"]
+	stat.TotalRSSHuge = raw["total_rss_huge"]
+	stat.TotalMappedFile = raw["total_mapped_file"]
+	stat.TotalDirty = raw["total_dirty"]
+	stat.TotalWriteback = raw["total_writeback"]
+	stat.TotalPgPgIn = raw["total_pgpgin"]
+	stat.TotalPgPgOut = raw["total_pgpgout"]
+	stat.TotalPgFault = raw["total_pgfault"]
+	stat.TotalPgMajFault = raw["total_pgmajfault"]
+	stat.TotalInactiveAnon = raw["total_inactive_anon"]
+	stat.TotalActiveAnon = raw["total_active_anon"]
+	stat.TotalInactiveFile = raw["total_inactive_file"]
+	stat.TotalActiveFile = raw["total_active_file"]
+	stat.TotalUnevictable = raw["total_unevictable"]
+	return nil
+}
+
+func (m *memoryController) parseOomControlStats(r io.Reader, stat *v1.MemoryOomControl) error {
+	var (
+		raw  = make(map[string]uint64)
+		sc   = bufio.NewScanner(r)
+		line int
+	)
+	for sc.Scan() {
+		key, v, err := parseKV(sc.Text())
+		if err != nil {
+			return fmt.Errorf("%d: %v", line, err)
+		}
+		raw[key] = v
+		line++
+	}
+	if err := sc.Err(); err != nil {
+		return err
+	}
+	stat.OomKillDisable = raw["oom_kill_disable"]
+	stat.UnderOom = raw["under_oom"]
+	stat.OomKill = raw["oom_kill"]
+	return nil
+}
+
+func (m *memoryController) set(path string, settings []memorySettings) error {
+	for _, t := range settings {
+		if t.value != nil {
+			if err := os.WriteFile(
+				filepath.Join(m.Path(path), "memory."+t.name),
+				[]byte(strconv.FormatInt(*t.value, 10)),
+				defaultFilePerm,
+			); err != nil {
+				return err
+			}
+		}
+	}
+	return nil
+}
+
+type memorySettings struct {
+	name  string
+	value *int64
+}
+
+func getMemorySettings(resources *specs.LinuxResources) []memorySettings {
+	mem := resources.Memory
+	var swappiness *int64
+	if mem.Swappiness != nil {
+		v := int64(*mem.Swappiness)
+		swappiness = &v
+	}
+	return []memorySettings{
+		{
+			name:  "limit_in_bytes",
+			value: mem.Limit,
+		},
+		{
+			name:  "soft_limit_in_bytes",
+			value: mem.Reservation,
+		},
+		{
+			name:  "memsw.limit_in_bytes",
+			value: mem.Swap,
+		},
+		{
+			name:  "kmem.limit_in_bytes",
+			value: mem.Kernel,
+		},
+		{
+			name:  "kmem.tcp.limit_in_bytes",
+			value: mem.KernelTCP,
+		},
+		{
+			name:  "oom_control",
+			value: getOomControlValue(mem),
+		},
+		{
+			name:  "swappiness",
+			value: swappiness,
+		},
+	}
+}
+
+func getOomControlValue(mem *specs.LinuxMemory) *int64 {
+	if mem.DisableOOMKiller != nil && *mem.DisableOOMKiller {
+		i := int64(1)
+		return &i
+	} else if mem.DisableOOMKiller != nil && !*mem.DisableOOMKiller {
+		i := int64(0)
+		return &i
+	}
+	return nil
+}
+
+func (m *memoryController) memoryEvent(path string, event MemoryEvent) (uintptr, error) {
+	root := m.Path(path)
+	efd, err := unix.Eventfd(0, unix.EFD_CLOEXEC)
+	if err != nil {
+		return 0, err
+	}
+	evtFile, err := os.Open(filepath.Join(root, event.EventFile()))
+	if err != nil {
+		unix.Close(efd)
+		return 0, err
+	}
+	defer evtFile.Close()
+	data := fmt.Sprintf("%d %d %s", efd, evtFile.Fd(), event.Arg())
+	evctlPath := filepath.Join(root, "cgroup.event_control")
+	if err := os.WriteFile(evctlPath, []byte(data), 0o700); err != nil {
+		unix.Close(efd)
+		return 0, err
+	}
+	return uintptr(efd), nil
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/named.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/named.go
new file mode 100644
index 00000000000..95bda388ea8
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/named.go
@@ -0,0 +1,39 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import "path/filepath"
+
+func NewNamed(root string, name Name) *namedController {
+	return &namedController{
+		root: root,
+		name: name,
+	}
+}
+
+type namedController struct {
+	root string
+	name Name
+}
+
+func (n *namedController) Name() Name {
+	return n.name
+}
+
+func (n *namedController) Path(path string) string {
+	return filepath.Join(n.root, string(n.name), path)
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/net_cls.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/net_cls.go
new file mode 100644
index 00000000000..22b3c95bbec
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/net_cls.go
@@ -0,0 +1,61 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"os"
+	"path/filepath"
+	"strconv"
+
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+func NewNetCls(root string) *netclsController {
+	return &netclsController{
+		root: filepath.Join(root, string(NetCLS)),
+	}
+}
+
+type netclsController struct {
+	root string
+}
+
+func (n *netclsController) Name() Name {
+	return NetCLS
+}
+
+func (n *netclsController) Path(path string) string {
+	return filepath.Join(n.root, path)
+}
+
+func (n *netclsController) Create(path string, resources *specs.LinuxResources) error {
+	if err := os.MkdirAll(n.Path(path), defaultDirPerm); err != nil {
+		return err
+	}
+	if resources.Network != nil && resources.Network.ClassID != nil && *resources.Network.ClassID > 0 {
+		return os.WriteFile(
+			filepath.Join(n.Path(path), "net_cls.classid"),
+			[]byte(strconv.FormatUint(uint64(*resources.Network.ClassID), 10)),
+			defaultFilePerm,
+		)
+	}
+	return nil
+}
+
+func (n *netclsController) Update(path string, resources *specs.LinuxResources) error {
+	return n.Create(path, resources)
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/net_prio.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/net_prio.go
new file mode 100644
index 00000000000..0936442b989
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/net_prio.go
@@ -0,0 +1,65 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"fmt"
+	"os"
+	"path/filepath"
+
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+func NewNetPrio(root string) *netprioController {
+	return &netprioController{
+		root: filepath.Join(root, string(NetPrio)),
+	}
+}
+
+type netprioController struct {
+	root string
+}
+
+func (n *netprioController) Name() Name {
+	return NetPrio
+}
+
+func (n *netprioController) Path(path string) string {
+	return filepath.Join(n.root, path)
+}
+
+func (n *netprioController) Create(path string, resources *specs.LinuxResources) error {
+	if err := os.MkdirAll(n.Path(path), defaultDirPerm); err != nil {
+		return err
+	}
+	if resources.Network != nil {
+		for _, prio := range resources.Network.Priorities {
+			if err := os.WriteFile(
+				filepath.Join(n.Path(path), "net_prio.ifpriomap"),
+				formatPrio(prio.Name, prio.Priority),
+				defaultFilePerm,
+			); err != nil {
+				return err
+			}
+		}
+	}
+	return nil
+}
+
+func formatPrio(name string, prio uint32) []byte {
+	return []byte(fmt.Sprintf("%s %d", name, prio))
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/opts.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/opts.go
new file mode 100644
index 00000000000..3aa7f4fbbbe
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/opts.go
@@ -0,0 +1,72 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"errors"
+)
+
+var (
+	// ErrIgnoreSubsystem allows the specific subsystem to be skipped
+	ErrIgnoreSubsystem = errors.New("skip subsystem")
+	// ErrDevicesRequired is returned when the devices subsystem is required but
+	// does not exist or is not active
+	ErrDevicesRequired = errors.New("devices subsystem is required")
+)
+
+// InitOpts allows configuration for the creation or loading of a cgroup
+type InitOpts func(*InitConfig) error
+
+// InitConfig provides configuration options for the creation
+// or loading of a cgroup and its subsystems
+type InitConfig struct {
+	// InitCheck can be used to check initialization errors from the subsystem
+	InitCheck InitCheck
+	hierarchy Hierarchy
+}
+
+func newInitConfig() *InitConfig {
+	return &InitConfig{
+		InitCheck: RequireDevices,
+		hierarchy: Default,
+	}
+}
+
+// InitCheck allows subsystems errors to be checked when initialized or loaded
+type InitCheck func(Subsystem, Path, error) error
+
+// AllowAny allows any subsystem errors to be skipped
+func AllowAny(_ Subsystem, _ Path, _ error) error {
+	return ErrIgnoreSubsystem
+}
+
+// RequireDevices requires the device subsystem but no others
+func RequireDevices(s Subsystem, _ Path, _ error) error {
+	if s.Name() == Devices {
+		return ErrDevicesRequired
+	}
+	return ErrIgnoreSubsystem
+}
+
+// WithHiearchy sets a list of cgroup subsystems.
+// The default list is coming from /proc/self/mountinfo.
+func WithHiearchy(h Hierarchy) InitOpts {
+	return func(c *InitConfig) error {
+		c.hierarchy = h
+		return nil
+	}
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/paths.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/paths.go
new file mode 100644
index 00000000000..54de9a18e3d
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/paths.go
@@ -0,0 +1,106 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"errors"
+	"fmt"
+	"path/filepath"
+)
+
+type Path func(subsystem Name) (string, error)
+
+func RootPath(subsystem Name) (string, error) {
+	return "/", nil
+}
+
+// StaticPath returns a static path to use for all cgroups
+func StaticPath(path string) Path {
+	return func(_ Name) (string, error) {
+		return path, nil
+	}
+}
+
+// NestedPath will nest the cgroups based on the calling processes cgroup
+// placing its child processes inside its own path
+func NestedPath(suffix string) Path {
+	paths, err := ParseCgroupFile("/proc/self/cgroup")
+	if err != nil {
+		return errorPath(err)
+	}
+	return existingPath(paths, suffix)
+}
+
+// PidPath will return the correct cgroup paths for an existing process running inside a cgroup
+// This is commonly used for the Load function to restore an existing container
+func PidPath(pid int) Path {
+	p := fmt.Sprintf("/proc/%d/cgroup", pid)
+	paths, err := ParseCgroupFile(p)
+	if err != nil {
+		return errorPath(fmt.Errorf("parse cgroup file %s: %w", p, err))
+	}
+	return existingPath(paths, "")
+}
+
+// ErrControllerNotActive is returned when a controller is not supported or enabled
+var ErrControllerNotActive = errors.New("controller is not supported")
+
+func existingPath(paths map[string]string, suffix string) Path {
+	// localize the paths based on the root mount dest for nested cgroups
+	for n, p := range paths {
+		dest, err := getCgroupDestination(n)
+		if err != nil {
+			return errorPath(err)
+		}
+		rel, err := filepath.Rel(dest, p)
+		if err != nil {
+			return errorPath(err)
+		}
+		if rel == "." {
+			rel = dest
+		}
+		paths[n] = filepath.Join("/", rel)
+	}
+	return func(name Name) (string, error) {
+		root, ok := paths[string(name)]
+		if !ok {
+			if root, ok = paths["name="+string(name)]; !ok {
+				return "", ErrControllerNotActive
+			}
+		}
+		if suffix != "" {
+			return filepath.Join(root, suffix), nil
+		}
+		return root, nil
+	}
+}
+
+func subPath(path Path, subName string) Path {
+	return func(name Name) (string, error) {
+		p, err := path(name)
+		if err != nil {
+			return "", err
+		}
+		return filepath.Join(p, subName), nil
+	}
+}
+
+func errorPath(err error) Path {
+	return func(_ Name) (string, error) {
+		return "", err
+	}
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/perf_event.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/perf_event.go
new file mode 100644
index 00000000000..4bd6d7e23d2
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/perf_event.go
@@ -0,0 +1,37 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import "path/filepath"
+
+func NewPerfEvent(root string) *PerfEventController {
+	return &PerfEventController{
+		root: filepath.Join(root, string(PerfEvent)),
+	}
+}
+
+type PerfEventController struct {
+	root string
+}
+
+func (p *PerfEventController) Name() Name {
+	return PerfEvent
+}
+
+func (p *PerfEventController) Path(path string) string {
+	return filepath.Join(p.root, path)
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/pids.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/pids.go
new file mode 100644
index 00000000000..31e2dda164d
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/pids.go
@@ -0,0 +1,78 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"os"
+	"path/filepath"
+	"strconv"
+
+	v1 "github.com/containerd/cgroups/v3/cgroup1/stats"
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+func NewPids(root string) *pidsController {
+	return &pidsController{
+		root: filepath.Join(root, string(Pids)),
+	}
+}
+
+type pidsController struct {
+	root string
+}
+
+func (p *pidsController) Name() Name {
+	return Pids
+}
+
+func (p *pidsController) Path(path string) string {
+	return filepath.Join(p.root, path)
+}
+
+func (p *pidsController) Create(path string, resources *specs.LinuxResources) error {
+	if err := os.MkdirAll(p.Path(path), defaultDirPerm); err != nil {
+		return err
+	}
+	if resources.Pids != nil && resources.Pids.Limit > 0 {
+		return os.WriteFile(
+			filepath.Join(p.Path(path), "pids.max"),
+			[]byte(strconv.FormatInt(resources.Pids.Limit, 10)),
+			defaultFilePerm,
+		)
+	}
+	return nil
+}
+
+func (p *pidsController) Update(path string, resources *specs.LinuxResources) error {
+	return p.Create(path, resources)
+}
+
+func (p *pidsController) Stat(path string, stats *v1.Metrics) error {
+	current, err := readUint(filepath.Join(p.Path(path), "pids.current"))
+	if err != nil {
+		return err
+	}
+	max, err := readUint(filepath.Join(p.Path(path), "pids.max"))
+	if err != nil {
+		return err
+	}
+	stats.Pids = &v1.PidsStat{
+		Current: current,
+		Limit:   max,
+	}
+	return nil
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/rdma.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/rdma.go
new file mode 100644
index 00000000000..0a45ae08fbe
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/rdma.go
@@ -0,0 +1,153 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"math"
+	"os"
+	"path/filepath"
+	"strconv"
+	"strings"
+
+	v1 "github.com/containerd/cgroups/v3/cgroup1/stats"
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+type rdmaController struct {
+	root string
+}
+
+func (p *rdmaController) Name() Name {
+	return Rdma
+}
+
+func (p *rdmaController) Path(path string) string {
+	return filepath.Join(p.root, path)
+}
+
+func NewRdma(root string) *rdmaController {
+	return &rdmaController{
+		root: filepath.Join(root, string(Rdma)),
+	}
+}
+
+func createCmdString(device string, limits *specs.LinuxRdma) string {
+	var cmdString string
+
+	cmdString = device
+	if limits.HcaHandles != nil {
+		cmdString = cmdString + " " + "hca_handle=" + strconv.FormatUint(uint64(*limits.HcaHandles), 10)
+	}
+
+	if limits.HcaObjects != nil {
+		cmdString = cmdString + " " + "hca_object=" + strconv.FormatUint(uint64(*limits.HcaObjects), 10)
+	}
+	return cmdString
+}
+
+func (p *rdmaController) Create(path string, resources *specs.LinuxResources) error {
+	if err := os.MkdirAll(p.Path(path), defaultDirPerm); err != nil {
+		return err
+	}
+
+	for device, limit := range resources.Rdma {
+		if device != "" && (limit.HcaHandles != nil || limit.HcaObjects != nil) {
+			limit := limit
+			return os.WriteFile(
+				filepath.Join(p.Path(path), "rdma.max"),
+				[]byte(createCmdString(device, &limit)),
+				defaultFilePerm,
+			)
+		}
+	}
+	return nil
+}
+
+func (p *rdmaController) Update(path string, resources *specs.LinuxResources) error {
+	return p.Create(path, resources)
+}
+
+func parseRdmaKV(raw string, entry *v1.RdmaEntry) {
+	var value uint64
+	var err error
+
+	parts := strings.Split(raw, "=")
+	switch len(parts) {
+	case 2:
+		if parts[1] == "max" {
+			value = math.MaxUint32
+		} else {
+			value, err = parseUint(parts[1], 10, 32)
+			if err != nil {
+				return
+			}
+		}
+		if parts[0] == "hca_handle" {
+			entry.HcaHandles = uint32(value)
+		} else if parts[0] == "hca_object" {
+			entry.HcaObjects = uint32(value)
+		}
+	}
+}
+
+func toRdmaEntry(strEntries []string) []*v1.RdmaEntry {
+	var rdmaEntries []*v1.RdmaEntry
+	for i := range strEntries {
+		parts := strings.Fields(strEntries[i])
+		switch len(parts) {
+		case 3:
+			entry := new(v1.RdmaEntry)
+			entry.Device = parts[0]
+			parseRdmaKV(parts[1], entry)
+			parseRdmaKV(parts[2], entry)
+
+			rdmaEntries = append(rdmaEntries, entry)
+		default:
+			continue
+		}
+	}
+	return rdmaEntries
+}
+
+func (p *rdmaController) Stat(path string, stats *v1.Metrics) error {
+	currentData, err := os.ReadFile(filepath.Join(p.Path(path), "rdma.current"))
+	if err != nil {
+		return err
+	}
+	currentPerDevices := strings.Split(string(currentData), "\n")
+
+	maxData, err := os.ReadFile(filepath.Join(p.Path(path), "rdma.max"))
+	if err != nil {
+		return err
+	}
+	maxPerDevices := strings.Split(string(maxData), "\n")
+
+	// If device got removed between reading two files, ignore returning
+	// stats.
+	if len(currentPerDevices) != len(maxPerDevices) {
+		return nil
+	}
+
+	currentEntries := toRdmaEntry(currentPerDevices)
+	maxEntries := toRdmaEntry(maxPerDevices)
+
+	stats.Rdma = &v1.RdmaStat{
+		Current: currentEntries,
+		Limit:   maxEntries,
+	}
+	return nil
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/state.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/state.go
new file mode 100644
index 00000000000..6ea81cccc95
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/state.go
@@ -0,0 +1,28 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+// State is a type that represents the state of the current cgroup
+type State string
+
+const (
+	Unknown  State = ""
+	Thawed   State = "thawed"
+	Frozen   State = "frozen"
+	Freezing State = "freezing"
+	Deleted  State = "deleted"
+)
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/doc.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/doc.go
new file mode 100644
index 00000000000..e51e12f8004
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/doc.go
@@ -0,0 +1,17 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package stats
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.pb.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.pb.go
new file mode 100644
index 00000000000..75206889ba2
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.pb.go
@@ -0,0 +1,1959 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.28.1
+// 	protoc        v3.21.5
+// source: github.com/containerd/cgroups/cgroup1/stats/metrics.proto
+
+package stats
+
+import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	reflect "reflect"
+	sync "sync"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type Metrics struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Hugetlb          []*HugetlbStat    `protobuf:"bytes,1,rep,name=hugetlb,proto3" json:"hugetlb,omitempty"`
+	Pids             *PidsStat         `protobuf:"bytes,2,opt,name=pids,proto3" json:"pids,omitempty"`
+	CPU              *CPUStat          `protobuf:"bytes,3,opt,name=cpu,proto3" json:"cpu,omitempty"`
+	Memory           *MemoryStat       `protobuf:"bytes,4,opt,name=memory,proto3" json:"memory,omitempty"`
+	Blkio            *BlkIOStat        `protobuf:"bytes,5,opt,name=blkio,proto3" json:"blkio,omitempty"`
+	Rdma             *RdmaStat         `protobuf:"bytes,6,opt,name=rdma,proto3" json:"rdma,omitempty"`
+	Network          []*NetworkStat    `protobuf:"bytes,7,rep,name=network,proto3" json:"network,omitempty"`
+	CgroupStats      *CgroupStats      `protobuf:"bytes,8,opt,name=cgroup_stats,json=cgroupStats,proto3" json:"cgroup_stats,omitempty"`
+	MemoryOomControl *MemoryOomControl `protobuf:"bytes,9,opt,name=memory_oom_control,json=memoryOomControl,proto3" json:"memory_oom_control,omitempty"`
+}
+
+func (x *Metrics) Reset() {
+	*x = Metrics{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[0]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *Metrics) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Metrics) ProtoMessage() {}
+
+func (x *Metrics) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[0]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Metrics.ProtoReflect.Descriptor instead.
+func (*Metrics) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *Metrics) GetHugetlb() []*HugetlbStat {
+	if x != nil {
+		return x.Hugetlb
+	}
+	return nil
+}
+
+func (x *Metrics) GetPids() *PidsStat {
+	if x != nil {
+		return x.Pids
+	}
+	return nil
+}
+
+func (x *Metrics) GetCPU() *CPUStat {
+	if x != nil {
+		return x.CPU
+	}
+	return nil
+}
+
+func (x *Metrics) GetMemory() *MemoryStat {
+	if x != nil {
+		return x.Memory
+	}
+	return nil
+}
+
+func (x *Metrics) GetBlkio() *BlkIOStat {
+	if x != nil {
+		return x.Blkio
+	}
+	return nil
+}
+
+func (x *Metrics) GetRdma() *RdmaStat {
+	if x != nil {
+		return x.Rdma
+	}
+	return nil
+}
+
+func (x *Metrics) GetNetwork() []*NetworkStat {
+	if x != nil {
+		return x.Network
+	}
+	return nil
+}
+
+func (x *Metrics) GetCgroupStats() *CgroupStats {
+	if x != nil {
+		return x.CgroupStats
+	}
+	return nil
+}
+
+func (x *Metrics) GetMemoryOomControl() *MemoryOomControl {
+	if x != nil {
+		return x.MemoryOomControl
+	}
+	return nil
+}
+
+type HugetlbStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Usage    uint64 `protobuf:"varint,1,opt,name=usage,proto3" json:"usage,omitempty"`
+	Max      uint64 `protobuf:"varint,2,opt,name=max,proto3" json:"max,omitempty"`
+	Failcnt  uint64 `protobuf:"varint,3,opt,name=failcnt,proto3" json:"failcnt,omitempty"`
+	Pagesize string `protobuf:"bytes,4,opt,name=pagesize,proto3" json:"pagesize,omitempty"`
+}
+
+func (x *HugetlbStat) Reset() {
+	*x = HugetlbStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[1]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *HugetlbStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*HugetlbStat) ProtoMessage() {}
+
+func (x *HugetlbStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[1]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use HugetlbStat.ProtoReflect.Descriptor instead.
+func (*HugetlbStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *HugetlbStat) GetUsage() uint64 {
+	if x != nil {
+		return x.Usage
+	}
+	return 0
+}
+
+func (x *HugetlbStat) GetMax() uint64 {
+	if x != nil {
+		return x.Max
+	}
+	return 0
+}
+
+func (x *HugetlbStat) GetFailcnt() uint64 {
+	if x != nil {
+		return x.Failcnt
+	}
+	return 0
+}
+
+func (x *HugetlbStat) GetPagesize() string {
+	if x != nil {
+		return x.Pagesize
+	}
+	return ""
+}
+
+type PidsStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Current uint64 `protobuf:"varint,1,opt,name=current,proto3" json:"current,omitempty"`
+	Limit   uint64 `protobuf:"varint,2,opt,name=limit,proto3" json:"limit,omitempty"`
+}
+
+func (x *PidsStat) Reset() {
+	*x = PidsStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[2]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *PidsStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*PidsStat) ProtoMessage() {}
+
+func (x *PidsStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[2]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use PidsStat.ProtoReflect.Descriptor instead.
+func (*PidsStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *PidsStat) GetCurrent() uint64 {
+	if x != nil {
+		return x.Current
+	}
+	return 0
+}
+
+func (x *PidsStat) GetLimit() uint64 {
+	if x != nil {
+		return x.Limit
+	}
+	return 0
+}
+
+type CPUStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Usage      *CPUUsage `protobuf:"bytes,1,opt,name=usage,proto3" json:"usage,omitempty"`
+	Throttling *Throttle `protobuf:"bytes,2,opt,name=throttling,proto3" json:"throttling,omitempty"`
+}
+
+func (x *CPUStat) Reset() {
+	*x = CPUStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[3]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CPUStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CPUStat) ProtoMessage() {}
+
+func (x *CPUStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[3]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CPUStat.ProtoReflect.Descriptor instead.
+func (*CPUStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *CPUStat) GetUsage() *CPUUsage {
+	if x != nil {
+		return x.Usage
+	}
+	return nil
+}
+
+func (x *CPUStat) GetThrottling() *Throttle {
+	if x != nil {
+		return x.Throttling
+	}
+	return nil
+}
+
+type CPUUsage struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// values in nanoseconds
+	Total  uint64   `protobuf:"varint,1,opt,name=total,proto3" json:"total,omitempty"`
+	Kernel uint64   `protobuf:"varint,2,opt,name=kernel,proto3" json:"kernel,omitempty"`
+	User   uint64   `protobuf:"varint,3,opt,name=user,proto3" json:"user,omitempty"`
+	PerCPU []uint64 `protobuf:"varint,4,rep,packed,name=per_cpu,json=perCpu,proto3" json:"per_cpu,omitempty"`
+}
+
+func (x *CPUUsage) Reset() {
+	*x = CPUUsage{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[4]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CPUUsage) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CPUUsage) ProtoMessage() {}
+
+func (x *CPUUsage) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[4]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CPUUsage.ProtoReflect.Descriptor instead.
+func (*CPUUsage) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{4}
+}
+
+func (x *CPUUsage) GetTotal() uint64 {
+	if x != nil {
+		return x.Total
+	}
+	return 0
+}
+
+func (x *CPUUsage) GetKernel() uint64 {
+	if x != nil {
+		return x.Kernel
+	}
+	return 0
+}
+
+func (x *CPUUsage) GetUser() uint64 {
+	if x != nil {
+		return x.User
+	}
+	return 0
+}
+
+func (x *CPUUsage) GetPerCPU() []uint64 {
+	if x != nil {
+		return x.PerCPU
+	}
+	return nil
+}
+
+type Throttle struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Periods          uint64 `protobuf:"varint,1,opt,name=periods,proto3" json:"periods,omitempty"`
+	ThrottledPeriods uint64 `protobuf:"varint,2,opt,name=throttled_periods,json=throttledPeriods,proto3" json:"throttled_periods,omitempty"`
+	ThrottledTime    uint64 `protobuf:"varint,3,opt,name=throttled_time,json=throttledTime,proto3" json:"throttled_time,omitempty"`
+}
+
+func (x *Throttle) Reset() {
+	*x = Throttle{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[5]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *Throttle) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Throttle) ProtoMessage() {}
+
+func (x *Throttle) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[5]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Throttle.ProtoReflect.Descriptor instead.
+func (*Throttle) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{5}
+}
+
+func (x *Throttle) GetPeriods() uint64 {
+	if x != nil {
+		return x.Periods
+	}
+	return 0
+}
+
+func (x *Throttle) GetThrottledPeriods() uint64 {
+	if x != nil {
+		return x.ThrottledPeriods
+	}
+	return 0
+}
+
+func (x *Throttle) GetThrottledTime() uint64 {
+	if x != nil {
+		return x.ThrottledTime
+	}
+	return 0
+}
+
+type MemoryStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Cache                   uint64       `protobuf:"varint,1,opt,name=cache,proto3" json:"cache,omitempty"`
+	RSS                     uint64       `protobuf:"varint,2,opt,name=rss,proto3" json:"rss,omitempty"`
+	RSSHuge                 uint64       `protobuf:"varint,3,opt,name=rss_huge,json=rssHuge,proto3" json:"rss_huge,omitempty"`
+	MappedFile              uint64       `protobuf:"varint,4,opt,name=mapped_file,json=mappedFile,proto3" json:"mapped_file,omitempty"`
+	Dirty                   uint64       `protobuf:"varint,5,opt,name=dirty,proto3" json:"dirty,omitempty"`
+	Writeback               uint64       `protobuf:"varint,6,opt,name=writeback,proto3" json:"writeback,omitempty"`
+	PgPgIn                  uint64       `protobuf:"varint,7,opt,name=pg_pg_in,json=pgPgIn,proto3" json:"pg_pg_in,omitempty"`
+	PgPgOut                 uint64       `protobuf:"varint,8,opt,name=pg_pg_out,json=pgPgOut,proto3" json:"pg_pg_out,omitempty"`
+	PgFault                 uint64       `protobuf:"varint,9,opt,name=pg_fault,json=pgFault,proto3" json:"pg_fault,omitempty"`
+	PgMajFault              uint64       `protobuf:"varint,10,opt,name=pg_maj_fault,json=pgMajFault,proto3" json:"pg_maj_fault,omitempty"`
+	InactiveAnon            uint64       `protobuf:"varint,11,opt,name=inactive_anon,json=inactiveAnon,proto3" json:"inactive_anon,omitempty"`
+	ActiveAnon              uint64       `protobuf:"varint,12,opt,name=active_anon,json=activeAnon,proto3" json:"active_anon,omitempty"`
+	InactiveFile            uint64       `protobuf:"varint,13,opt,name=inactive_file,json=inactiveFile,proto3" json:"inactive_file,omitempty"`
+	ActiveFile              uint64       `protobuf:"varint,14,opt,name=active_file,json=activeFile,proto3" json:"active_file,omitempty"`
+	Unevictable             uint64       `protobuf:"varint,15,opt,name=unevictable,proto3" json:"unevictable,omitempty"`
+	HierarchicalMemoryLimit uint64       `protobuf:"varint,16,opt,name=hierarchical_memory_limit,json=hierarchicalMemoryLimit,proto3" json:"hierarchical_memory_limit,omitempty"`
+	HierarchicalSwapLimit   uint64       `protobuf:"varint,17,opt,name=hierarchical_swap_limit,json=hierarchicalSwapLimit,proto3" json:"hierarchical_swap_limit,omitempty"`
+	TotalCache              uint64       `protobuf:"varint,18,opt,name=total_cache,json=totalCache,proto3" json:"total_cache,omitempty"`
+	TotalRSS                uint64       `protobuf:"varint,19,opt,name=total_rss,json=totalRss,proto3" json:"total_rss,omitempty"`
+	TotalRSSHuge            uint64       `protobuf:"varint,20,opt,name=total_rss_huge,json=totalRssHuge,proto3" json:"total_rss_huge,omitempty"`
+	TotalMappedFile         uint64       `protobuf:"varint,21,opt,name=total_mapped_file,json=totalMappedFile,proto3" json:"total_mapped_file,omitempty"`
+	TotalDirty              uint64       `protobuf:"varint,22,opt,name=total_dirty,json=totalDirty,proto3" json:"total_dirty,omitempty"`
+	TotalWriteback          uint64       `protobuf:"varint,23,opt,name=total_writeback,json=totalWriteback,proto3" json:"total_writeback,omitempty"`
+	TotalPgPgIn             uint64       `protobuf:"varint,24,opt,name=total_pg_pg_in,json=totalPgPgIn,proto3" json:"total_pg_pg_in,omitempty"`
+	TotalPgPgOut            uint64       `protobuf:"varint,25,opt,name=total_pg_pg_out,json=totalPgPgOut,proto3" json:"total_pg_pg_out,omitempty"`
+	TotalPgFault            uint64       `protobuf:"varint,26,opt,name=total_pg_fault,json=totalPgFault,proto3" json:"total_pg_fault,omitempty"`
+	TotalPgMajFault         uint64       `protobuf:"varint,27,opt,name=total_pg_maj_fault,json=totalPgMajFault,proto3" json:"total_pg_maj_fault,omitempty"`
+	TotalInactiveAnon       uint64       `protobuf:"varint,28,opt,name=total_inactive_anon,json=totalInactiveAnon,proto3" json:"total_inactive_anon,omitempty"`
+	TotalActiveAnon         uint64       `protobuf:"varint,29,opt,name=total_active_anon,json=totalActiveAnon,proto3" json:"total_active_anon,omitempty"`
+	TotalInactiveFile       uint64       `protobuf:"varint,30,opt,name=total_inactive_file,json=totalInactiveFile,proto3" json:"total_inactive_file,omitempty"`
+	TotalActiveFile         uint64       `protobuf:"varint,31,opt,name=total_active_file,json=totalActiveFile,proto3" json:"total_active_file,omitempty"`
+	TotalUnevictable        uint64       `protobuf:"varint,32,opt,name=total_unevictable,json=totalUnevictable,proto3" json:"total_unevictable,omitempty"`
+	Usage                   *MemoryEntry `protobuf:"bytes,33,opt,name=usage,proto3" json:"usage,omitempty"`
+	Swap                    *MemoryEntry `protobuf:"bytes,34,opt,name=swap,proto3" json:"swap,omitempty"`
+	Kernel                  *MemoryEntry `protobuf:"bytes,35,opt,name=kernel,proto3" json:"kernel,omitempty"`
+	KernelTCP               *MemoryEntry `protobuf:"bytes,36,opt,name=kernel_tcp,json=kernelTcp,proto3" json:"kernel_tcp,omitempty"`
+}
+
+func (x *MemoryStat) Reset() {
+	*x = MemoryStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[6]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *MemoryStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*MemoryStat) ProtoMessage() {}
+
+func (x *MemoryStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[6]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use MemoryStat.ProtoReflect.Descriptor instead.
+func (*MemoryStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{6}
+}
+
+func (x *MemoryStat) GetCache() uint64 {
+	if x != nil {
+		return x.Cache
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetRSS() uint64 {
+	if x != nil {
+		return x.RSS
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetRSSHuge() uint64 {
+	if x != nil {
+		return x.RSSHuge
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetMappedFile() uint64 {
+	if x != nil {
+		return x.MappedFile
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetDirty() uint64 {
+	if x != nil {
+		return x.Dirty
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetWriteback() uint64 {
+	if x != nil {
+		return x.Writeback
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPgPgIn() uint64 {
+	if x != nil {
+		return x.PgPgIn
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPgPgOut() uint64 {
+	if x != nil {
+		return x.PgPgOut
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPgFault() uint64 {
+	if x != nil {
+		return x.PgFault
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPgMajFault() uint64 {
+	if x != nil {
+		return x.PgMajFault
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetInactiveAnon() uint64 {
+	if x != nil {
+		return x.InactiveAnon
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetActiveAnon() uint64 {
+	if x != nil {
+		return x.ActiveAnon
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetInactiveFile() uint64 {
+	if x != nil {
+		return x.InactiveFile
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetActiveFile() uint64 {
+	if x != nil {
+		return x.ActiveFile
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetUnevictable() uint64 {
+	if x != nil {
+		return x.Unevictable
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetHierarchicalMemoryLimit() uint64 {
+	if x != nil {
+		return x.HierarchicalMemoryLimit
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetHierarchicalSwapLimit() uint64 {
+	if x != nil {
+		return x.HierarchicalSwapLimit
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalCache() uint64 {
+	if x != nil {
+		return x.TotalCache
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalRSS() uint64 {
+	if x != nil {
+		return x.TotalRSS
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalRSSHuge() uint64 {
+	if x != nil {
+		return x.TotalRSSHuge
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalMappedFile() uint64 {
+	if x != nil {
+		return x.TotalMappedFile
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalDirty() uint64 {
+	if x != nil {
+		return x.TotalDirty
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalWriteback() uint64 {
+	if x != nil {
+		return x.TotalWriteback
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalPgPgIn() uint64 {
+	if x != nil {
+		return x.TotalPgPgIn
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalPgPgOut() uint64 {
+	if x != nil {
+		return x.TotalPgPgOut
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalPgFault() uint64 {
+	if x != nil {
+		return x.TotalPgFault
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalPgMajFault() uint64 {
+	if x != nil {
+		return x.TotalPgMajFault
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalInactiveAnon() uint64 {
+	if x != nil {
+		return x.TotalInactiveAnon
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalActiveAnon() uint64 {
+	if x != nil {
+		return x.TotalActiveAnon
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalInactiveFile() uint64 {
+	if x != nil {
+		return x.TotalInactiveFile
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalActiveFile() uint64 {
+	if x != nil {
+		return x.TotalActiveFile
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetTotalUnevictable() uint64 {
+	if x != nil {
+		return x.TotalUnevictable
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetUsage() *MemoryEntry {
+	if x != nil {
+		return x.Usage
+	}
+	return nil
+}
+
+func (x *MemoryStat) GetSwap() *MemoryEntry {
+	if x != nil {
+		return x.Swap
+	}
+	return nil
+}
+
+func (x *MemoryStat) GetKernel() *MemoryEntry {
+	if x != nil {
+		return x.Kernel
+	}
+	return nil
+}
+
+func (x *MemoryStat) GetKernelTCP() *MemoryEntry {
+	if x != nil {
+		return x.KernelTCP
+	}
+	return nil
+}
+
+type MemoryEntry struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Limit   uint64 `protobuf:"varint,1,opt,name=limit,proto3" json:"limit,omitempty"`
+	Usage   uint64 `protobuf:"varint,2,opt,name=usage,proto3" json:"usage,omitempty"`
+	Max     uint64 `protobuf:"varint,3,opt,name=max,proto3" json:"max,omitempty"`
+	Failcnt uint64 `protobuf:"varint,4,opt,name=failcnt,proto3" json:"failcnt,omitempty"`
+}
+
+func (x *MemoryEntry) Reset() {
+	*x = MemoryEntry{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[7]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *MemoryEntry) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*MemoryEntry) ProtoMessage() {}
+
+func (x *MemoryEntry) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[7]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use MemoryEntry.ProtoReflect.Descriptor instead.
+func (*MemoryEntry) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{7}
+}
+
+func (x *MemoryEntry) GetLimit() uint64 {
+	if x != nil {
+		return x.Limit
+	}
+	return 0
+}
+
+func (x *MemoryEntry) GetUsage() uint64 {
+	if x != nil {
+		return x.Usage
+	}
+	return 0
+}
+
+func (x *MemoryEntry) GetMax() uint64 {
+	if x != nil {
+		return x.Max
+	}
+	return 0
+}
+
+func (x *MemoryEntry) GetFailcnt() uint64 {
+	if x != nil {
+		return x.Failcnt
+	}
+	return 0
+}
+
+type MemoryOomControl struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	OomKillDisable uint64 `protobuf:"varint,1,opt,name=oom_kill_disable,json=oomKillDisable,proto3" json:"oom_kill_disable,omitempty"`
+	UnderOom       uint64 `protobuf:"varint,2,opt,name=under_oom,json=underOom,proto3" json:"under_oom,omitempty"`
+	OomKill        uint64 `protobuf:"varint,3,opt,name=oom_kill,json=oomKill,proto3" json:"oom_kill,omitempty"`
+}
+
+func (x *MemoryOomControl) Reset() {
+	*x = MemoryOomControl{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[8]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *MemoryOomControl) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*MemoryOomControl) ProtoMessage() {}
+
+func (x *MemoryOomControl) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[8]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use MemoryOomControl.ProtoReflect.Descriptor instead.
+func (*MemoryOomControl) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{8}
+}
+
+func (x *MemoryOomControl) GetOomKillDisable() uint64 {
+	if x != nil {
+		return x.OomKillDisable
+	}
+	return 0
+}
+
+func (x *MemoryOomControl) GetUnderOom() uint64 {
+	if x != nil {
+		return x.UnderOom
+	}
+	return 0
+}
+
+func (x *MemoryOomControl) GetOomKill() uint64 {
+	if x != nil {
+		return x.OomKill
+	}
+	return 0
+}
+
+type BlkIOStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	IoServiceBytesRecursive []*BlkIOEntry `protobuf:"bytes,1,rep,name=io_service_bytes_recursive,json=ioServiceBytesRecursive,proto3" json:"io_service_bytes_recursive,omitempty"`
+	IoServicedRecursive     []*BlkIOEntry `protobuf:"bytes,2,rep,name=io_serviced_recursive,json=ioServicedRecursive,proto3" json:"io_serviced_recursive,omitempty"`
+	IoQueuedRecursive       []*BlkIOEntry `protobuf:"bytes,3,rep,name=io_queued_recursive,json=ioQueuedRecursive,proto3" json:"io_queued_recursive,omitempty"`
+	IoServiceTimeRecursive  []*BlkIOEntry `protobuf:"bytes,4,rep,name=io_service_time_recursive,json=ioServiceTimeRecursive,proto3" json:"io_service_time_recursive,omitempty"`
+	IoWaitTimeRecursive     []*BlkIOEntry `protobuf:"bytes,5,rep,name=io_wait_time_recursive,json=ioWaitTimeRecursive,proto3" json:"io_wait_time_recursive,omitempty"`
+	IoMergedRecursive       []*BlkIOEntry `protobuf:"bytes,6,rep,name=io_merged_recursive,json=ioMergedRecursive,proto3" json:"io_merged_recursive,omitempty"`
+	IoTimeRecursive         []*BlkIOEntry `protobuf:"bytes,7,rep,name=io_time_recursive,json=ioTimeRecursive,proto3" json:"io_time_recursive,omitempty"`
+	SectorsRecursive        []*BlkIOEntry `protobuf:"bytes,8,rep,name=sectors_recursive,json=sectorsRecursive,proto3" json:"sectors_recursive,omitempty"`
+}
+
+func (x *BlkIOStat) Reset() {
+	*x = BlkIOStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[9]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *BlkIOStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*BlkIOStat) ProtoMessage() {}
+
+func (x *BlkIOStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[9]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use BlkIOStat.ProtoReflect.Descriptor instead.
+func (*BlkIOStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{9}
+}
+
+func (x *BlkIOStat) GetIoServiceBytesRecursive() []*BlkIOEntry {
+	if x != nil {
+		return x.IoServiceBytesRecursive
+	}
+	return nil
+}
+
+func (x *BlkIOStat) GetIoServicedRecursive() []*BlkIOEntry {
+	if x != nil {
+		return x.IoServicedRecursive
+	}
+	return nil
+}
+
+func (x *BlkIOStat) GetIoQueuedRecursive() []*BlkIOEntry {
+	if x != nil {
+		return x.IoQueuedRecursive
+	}
+	return nil
+}
+
+func (x *BlkIOStat) GetIoServiceTimeRecursive() []*BlkIOEntry {
+	if x != nil {
+		return x.IoServiceTimeRecursive
+	}
+	return nil
+}
+
+func (x *BlkIOStat) GetIoWaitTimeRecursive() []*BlkIOEntry {
+	if x != nil {
+		return x.IoWaitTimeRecursive
+	}
+	return nil
+}
+
+func (x *BlkIOStat) GetIoMergedRecursive() []*BlkIOEntry {
+	if x != nil {
+		return x.IoMergedRecursive
+	}
+	return nil
+}
+
+func (x *BlkIOStat) GetIoTimeRecursive() []*BlkIOEntry {
+	if x != nil {
+		return x.IoTimeRecursive
+	}
+	return nil
+}
+
+func (x *BlkIOStat) GetSectorsRecursive() []*BlkIOEntry {
+	if x != nil {
+		return x.SectorsRecursive
+	}
+	return nil
+}
+
+type BlkIOEntry struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Op     string `protobuf:"bytes,1,opt,name=op,proto3" json:"op,omitempty"`
+	Device string `protobuf:"bytes,2,opt,name=device,proto3" json:"device,omitempty"`
+	Major  uint64 `protobuf:"varint,3,opt,name=major,proto3" json:"major,omitempty"`
+	Minor  uint64 `protobuf:"varint,4,opt,name=minor,proto3" json:"minor,omitempty"`
+	Value  uint64 `protobuf:"varint,5,opt,name=value,proto3" json:"value,omitempty"`
+}
+
+func (x *BlkIOEntry) Reset() {
+	*x = BlkIOEntry{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[10]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *BlkIOEntry) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*BlkIOEntry) ProtoMessage() {}
+
+func (x *BlkIOEntry) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[10]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use BlkIOEntry.ProtoReflect.Descriptor instead.
+func (*BlkIOEntry) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{10}
+}
+
+func (x *BlkIOEntry) GetOp() string {
+	if x != nil {
+		return x.Op
+	}
+	return ""
+}
+
+func (x *BlkIOEntry) GetDevice() string {
+	if x != nil {
+		return x.Device
+	}
+	return ""
+}
+
+func (x *BlkIOEntry) GetMajor() uint64 {
+	if x != nil {
+		return x.Major
+	}
+	return 0
+}
+
+func (x *BlkIOEntry) GetMinor() uint64 {
+	if x != nil {
+		return x.Minor
+	}
+	return 0
+}
+
+func (x *BlkIOEntry) GetValue() uint64 {
+	if x != nil {
+		return x.Value
+	}
+	return 0
+}
+
+type RdmaStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Current []*RdmaEntry `protobuf:"bytes,1,rep,name=current,proto3" json:"current,omitempty"`
+	Limit   []*RdmaEntry `protobuf:"bytes,2,rep,name=limit,proto3" json:"limit,omitempty"`
+}
+
+func (x *RdmaStat) Reset() {
+	*x = RdmaStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[11]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *RdmaStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RdmaStat) ProtoMessage() {}
+
+func (x *RdmaStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[11]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RdmaStat.ProtoReflect.Descriptor instead.
+func (*RdmaStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{11}
+}
+
+func (x *RdmaStat) GetCurrent() []*RdmaEntry {
+	if x != nil {
+		return x.Current
+	}
+	return nil
+}
+
+func (x *RdmaStat) GetLimit() []*RdmaEntry {
+	if x != nil {
+		return x.Limit
+	}
+	return nil
+}
+
+type RdmaEntry struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Device     string `protobuf:"bytes,1,opt,name=device,proto3" json:"device,omitempty"`
+	HcaHandles uint32 `protobuf:"varint,2,opt,name=hca_handles,json=hcaHandles,proto3" json:"hca_handles,omitempty"`
+	HcaObjects uint32 `protobuf:"varint,3,opt,name=hca_objects,json=hcaObjects,proto3" json:"hca_objects,omitempty"`
+}
+
+func (x *RdmaEntry) Reset() {
+	*x = RdmaEntry{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[12]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *RdmaEntry) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RdmaEntry) ProtoMessage() {}
+
+func (x *RdmaEntry) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[12]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RdmaEntry.ProtoReflect.Descriptor instead.
+func (*RdmaEntry) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{12}
+}
+
+func (x *RdmaEntry) GetDevice() string {
+	if x != nil {
+		return x.Device
+	}
+	return ""
+}
+
+func (x *RdmaEntry) GetHcaHandles() uint32 {
+	if x != nil {
+		return x.HcaHandles
+	}
+	return 0
+}
+
+func (x *RdmaEntry) GetHcaObjects() uint32 {
+	if x != nil {
+		return x.HcaObjects
+	}
+	return 0
+}
+
+type NetworkStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Name      string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
+	RxBytes   uint64 `protobuf:"varint,2,opt,name=rx_bytes,json=rxBytes,proto3" json:"rx_bytes,omitempty"`
+	RxPackets uint64 `protobuf:"varint,3,opt,name=rx_packets,json=rxPackets,proto3" json:"rx_packets,omitempty"`
+	RxErrors  uint64 `protobuf:"varint,4,opt,name=rx_errors,json=rxErrors,proto3" json:"rx_errors,omitempty"`
+	RxDropped uint64 `protobuf:"varint,5,opt,name=rx_dropped,json=rxDropped,proto3" json:"rx_dropped,omitempty"`
+	TxBytes   uint64 `protobuf:"varint,6,opt,name=tx_bytes,json=txBytes,proto3" json:"tx_bytes,omitempty"`
+	TxPackets uint64 `protobuf:"varint,7,opt,name=tx_packets,json=txPackets,proto3" json:"tx_packets,omitempty"`
+	TxErrors  uint64 `protobuf:"varint,8,opt,name=tx_errors,json=txErrors,proto3" json:"tx_errors,omitempty"`
+	TxDropped uint64 `protobuf:"varint,9,opt,name=tx_dropped,json=txDropped,proto3" json:"tx_dropped,omitempty"`
+}
+
+func (x *NetworkStat) Reset() {
+	*x = NetworkStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[13]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *NetworkStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*NetworkStat) ProtoMessage() {}
+
+func (x *NetworkStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[13]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use NetworkStat.ProtoReflect.Descriptor instead.
+func (*NetworkStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{13}
+}
+
+func (x *NetworkStat) GetName() string {
+	if x != nil {
+		return x.Name
+	}
+	return ""
+}
+
+func (x *NetworkStat) GetRxBytes() uint64 {
+	if x != nil {
+		return x.RxBytes
+	}
+	return 0
+}
+
+func (x *NetworkStat) GetRxPackets() uint64 {
+	if x != nil {
+		return x.RxPackets
+	}
+	return 0
+}
+
+func (x *NetworkStat) GetRxErrors() uint64 {
+	if x != nil {
+		return x.RxErrors
+	}
+	return 0
+}
+
+func (x *NetworkStat) GetRxDropped() uint64 {
+	if x != nil {
+		return x.RxDropped
+	}
+	return 0
+}
+
+func (x *NetworkStat) GetTxBytes() uint64 {
+	if x != nil {
+		return x.TxBytes
+	}
+	return 0
+}
+
+func (x *NetworkStat) GetTxPackets() uint64 {
+	if x != nil {
+		return x.TxPackets
+	}
+	return 0
+}
+
+func (x *NetworkStat) GetTxErrors() uint64 {
+	if x != nil {
+		return x.TxErrors
+	}
+	return 0
+}
+
+func (x *NetworkStat) GetTxDropped() uint64 {
+	if x != nil {
+		return x.TxDropped
+	}
+	return 0
+}
+
+// CgroupStats exports per-cgroup statistics.
+type CgroupStats struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// number of tasks sleeping
+	NrSleeping uint64 `protobuf:"varint,1,opt,name=nr_sleeping,json=nrSleeping,proto3" json:"nr_sleeping,omitempty"`
+	// number of tasks running
+	NrRunning uint64 `protobuf:"varint,2,opt,name=nr_running,json=nrRunning,proto3" json:"nr_running,omitempty"`
+	// number of tasks in stopped state
+	NrStopped uint64 `protobuf:"varint,3,opt,name=nr_stopped,json=nrStopped,proto3" json:"nr_stopped,omitempty"`
+	// number of tasks in uninterruptible state
+	NrUninterruptible uint64 `protobuf:"varint,4,opt,name=nr_uninterruptible,json=nrUninterruptible,proto3" json:"nr_uninterruptible,omitempty"`
+	// number of tasks waiting on IO
+	NrIoWait uint64 `protobuf:"varint,5,opt,name=nr_io_wait,json=nrIoWait,proto3" json:"nr_io_wait,omitempty"`
+}
+
+func (x *CgroupStats) Reset() {
+	*x = CgroupStats{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[14]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CgroupStats) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CgroupStats) ProtoMessage() {}
+
+func (x *CgroupStats) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[14]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CgroupStats.ProtoReflect.Descriptor instead.
+func (*CgroupStats) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP(), []int{14}
+}
+
+func (x *CgroupStats) GetNrSleeping() uint64 {
+	if x != nil {
+		return x.NrSleeping
+	}
+	return 0
+}
+
+func (x *CgroupStats) GetNrRunning() uint64 {
+	if x != nil {
+		return x.NrRunning
+	}
+	return 0
+}
+
+func (x *CgroupStats) GetNrStopped() uint64 {
+	if x != nil {
+		return x.NrStopped
+	}
+	return 0
+}
+
+func (x *CgroupStats) GetNrUninterruptible() uint64 {
+	if x != nil {
+		return x.NrUninterruptible
+	}
+	return 0
+}
+
+func (x *CgroupStats) GetNrIoWait() uint64 {
+	if x != nil {
+		return x.NrIoWait
+	}
+	return 0
+}
+
+var File_github_com_containerd_cgroups_cgroup1_stats_metrics_proto protoreflect.FileDescriptor
+
+var file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDesc = []byte{
+	0x0a, 0x39, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x63, 0x6f, 0x6e,
+	0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2f, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2f,
+	0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x31, 0x2f, 0x73, 0x74, 0x61, 0x74, 0x73, 0x2f, 0x6d, 0x65,
+	0x74, 0x72, 0x69, 0x63, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x18, 0x69, 0x6f, 0x2e,
+	0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75,
+	0x70, 0x73, 0x2e, 0x76, 0x31, 0x22, 0xcd, 0x04, 0x0a, 0x07, 0x4d, 0x65, 0x74, 0x72, 0x69, 0x63,
+	0x73, 0x12, 0x3f, 0x0a, 0x07, 0x68, 0x75, 0x67, 0x65, 0x74, 0x6c, 0x62, 0x18, 0x01, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x25, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65,
+	0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x48, 0x75,
+	0x67, 0x65, 0x74, 0x6c, 0x62, 0x53, 0x74, 0x61, 0x74, 0x52, 0x07, 0x68, 0x75, 0x67, 0x65, 0x74,
+	0x6c, 0x62, 0x12, 0x36, 0x0a, 0x04, 0x70, 0x69, 0x64, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x22, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64,
+	0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x50, 0x69, 0x64, 0x73,
+	0x53, 0x74, 0x61, 0x74, 0x52, 0x04, 0x70, 0x69, 0x64, 0x73, 0x12, 0x33, 0x0a, 0x03, 0x63, 0x70,
+	0x75, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e,
+	0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e,
+	0x76, 0x31, 0x2e, 0x43, 0x50, 0x55, 0x53, 0x74, 0x61, 0x74, 0x52, 0x03, 0x63, 0x70, 0x75, 0x12,
+	0x3c, 0x0a, 0x06, 0x6d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x24, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e,
+	0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x4d, 0x65, 0x6d, 0x6f, 0x72,
+	0x79, 0x53, 0x74, 0x61, 0x74, 0x52, 0x06, 0x6d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x12, 0x39, 0x0a,
+	0x05, 0x62, 0x6c, 0x6b, 0x69, 0x6f, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x69,
+	0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72,
+	0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x42, 0x6c, 0x6b, 0x49, 0x4f, 0x53, 0x74, 0x61,
+	0x74, 0x52, 0x05, 0x62, 0x6c, 0x6b, 0x69, 0x6f, 0x12, 0x36, 0x0a, 0x04, 0x72, 0x64, 0x6d, 0x61,
+	0x18, 0x06, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74,
+	0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76,
+	0x31, 0x2e, 0x52, 0x64, 0x6d, 0x61, 0x53, 0x74, 0x61, 0x74, 0x52, 0x04, 0x72, 0x64, 0x6d, 0x61,
+	0x12, 0x3f, 0x0a, 0x07, 0x6e, 0x65, 0x74, 0x77, 0x6f, 0x72, 0x6b, 0x18, 0x07, 0x20, 0x03, 0x28,
+	0x0b, 0x32, 0x25, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72,
+	0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x4e, 0x65, 0x74,
+	0x77, 0x6f, 0x72, 0x6b, 0x53, 0x74, 0x61, 0x74, 0x52, 0x07, 0x6e, 0x65, 0x74, 0x77, 0x6f, 0x72,
+	0x6b, 0x12, 0x48, 0x0a, 0x0c, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x5f, 0x73, 0x74, 0x61, 0x74,
+	0x73, 0x18, 0x08, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e,
+	0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e,
+	0x76, 0x31, 0x2e, 0x43, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x53, 0x74, 0x61, 0x74, 0x73, 0x52, 0x0b,
+	0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x53, 0x74, 0x61, 0x74, 0x73, 0x12, 0x58, 0x0a, 0x12, 0x6d,
+	0x65, 0x6d, 0x6f, 0x72, 0x79, 0x5f, 0x6f, 0x6f, 0x6d, 0x5f, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f,
+	0x6c, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e,
+	0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e,
+	0x76, 0x31, 0x2e, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x4f, 0x6f, 0x6d, 0x43, 0x6f, 0x6e, 0x74,
+	0x72, 0x6f, 0x6c, 0x52, 0x10, 0x6d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x4f, 0x6f, 0x6d, 0x43, 0x6f,
+	0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x22, 0x6b, 0x0a, 0x0b, 0x48, 0x75, 0x67, 0x65, 0x74, 0x6c, 0x62,
+	0x53, 0x74, 0x61, 0x74, 0x12, 0x14, 0x0a, 0x05, 0x75, 0x73, 0x61, 0x67, 0x65, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x04, 0x52, 0x05, 0x75, 0x73, 0x61, 0x67, 0x65, 0x12, 0x10, 0x0a, 0x03, 0x6d, 0x61,
+	0x78, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x03, 0x6d, 0x61, 0x78, 0x12, 0x18, 0x0a, 0x07,
+	0x66, 0x61, 0x69, 0x6c, 0x63, 0x6e, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x04, 0x52, 0x07, 0x66,
+	0x61, 0x69, 0x6c, 0x63, 0x6e, 0x74, 0x12, 0x1a, 0x0a, 0x08, 0x70, 0x61, 0x67, 0x65, 0x73, 0x69,
+	0x7a, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x70, 0x61, 0x67, 0x65, 0x73, 0x69,
+	0x7a, 0x65, 0x22, 0x3a, 0x0a, 0x08, 0x50, 0x69, 0x64, 0x73, 0x53, 0x74, 0x61, 0x74, 0x12, 0x18,
+	0x0a, 0x07, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x07, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x12, 0x14, 0x0a, 0x05, 0x6c, 0x69, 0x6d, 0x69,
+	0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x05, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x22, 0x87,
+	0x01, 0x0a, 0x07, 0x43, 0x50, 0x55, 0x53, 0x74, 0x61, 0x74, 0x12, 0x38, 0x0a, 0x05, 0x75, 0x73,
+	0x61, 0x67, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x69, 0x6f, 0x2e, 0x63,
+	0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70,
+	0x73, 0x2e, 0x76, 0x31, 0x2e, 0x43, 0x50, 0x55, 0x55, 0x73, 0x61, 0x67, 0x65, 0x52, 0x05, 0x75,
+	0x73, 0x61, 0x67, 0x65, 0x12, 0x42, 0x0a, 0x0a, 0x74, 0x68, 0x72, 0x6f, 0x74, 0x74, 0x6c, 0x69,
+	0x6e, 0x67, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f,
+	0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73,
+	0x2e, 0x76, 0x31, 0x2e, 0x54, 0x68, 0x72, 0x6f, 0x74, 0x74, 0x6c, 0x65, 0x52, 0x0a, 0x74, 0x68,
+	0x72, 0x6f, 0x74, 0x74, 0x6c, 0x69, 0x6e, 0x67, 0x22, 0x65, 0x0a, 0x08, 0x43, 0x50, 0x55, 0x55,
+	0x73, 0x61, 0x67, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x04, 0x52, 0x05, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x12, 0x16, 0x0a, 0x06, 0x6b, 0x65,
+	0x72, 0x6e, 0x65, 0x6c, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x06, 0x6b, 0x65, 0x72, 0x6e,
+	0x65, 0x6c, 0x12, 0x12, 0x0a, 0x04, 0x75, 0x73, 0x65, 0x72, 0x18, 0x03, 0x20, 0x01, 0x28, 0x04,
+	0x52, 0x04, 0x75, 0x73, 0x65, 0x72, 0x12, 0x17, 0x0a, 0x07, 0x70, 0x65, 0x72, 0x5f, 0x63, 0x70,
+	0x75, 0x18, 0x04, 0x20, 0x03, 0x28, 0x04, 0x52, 0x06, 0x70, 0x65, 0x72, 0x43, 0x70, 0x75, 0x22,
+	0x78, 0x0a, 0x08, 0x54, 0x68, 0x72, 0x6f, 0x74, 0x74, 0x6c, 0x65, 0x12, 0x18, 0x0a, 0x07, 0x70,
+	0x65, 0x72, 0x69, 0x6f, 0x64, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04, 0x52, 0x07, 0x70, 0x65,
+	0x72, 0x69, 0x6f, 0x64, 0x73, 0x12, 0x2b, 0x0a, 0x11, 0x74, 0x68, 0x72, 0x6f, 0x74, 0x74, 0x6c,
+	0x65, 0x64, 0x5f, 0x70, 0x65, 0x72, 0x69, 0x6f, 0x64, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04,
+	0x52, 0x10, 0x74, 0x68, 0x72, 0x6f, 0x74, 0x74, 0x6c, 0x65, 0x64, 0x50, 0x65, 0x72, 0x69, 0x6f,
+	0x64, 0x73, 0x12, 0x25, 0x0a, 0x0e, 0x74, 0x68, 0x72, 0x6f, 0x74, 0x74, 0x6c, 0x65, 0x64, 0x5f,
+	0x74, 0x69, 0x6d, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0d, 0x74, 0x68, 0x72, 0x6f,
+	0x74, 0x74, 0x6c, 0x65, 0x64, 0x54, 0x69, 0x6d, 0x65, 0x22, 0x94, 0x0b, 0x0a, 0x0a, 0x4d, 0x65,
+	0x6d, 0x6f, 0x72, 0x79, 0x53, 0x74, 0x61, 0x74, 0x12, 0x14, 0x0a, 0x05, 0x63, 0x61, 0x63, 0x68,
+	0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04, 0x52, 0x05, 0x63, 0x61, 0x63, 0x68, 0x65, 0x12, 0x10,
+	0x0a, 0x03, 0x72, 0x73, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x03, 0x72, 0x73, 0x73,
+	0x12, 0x19, 0x0a, 0x08, 0x72, 0x73, 0x73, 0x5f, 0x68, 0x75, 0x67, 0x65, 0x18, 0x03, 0x20, 0x01,
+	0x28, 0x04, 0x52, 0x07, 0x72, 0x73, 0x73, 0x48, 0x75, 0x67, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x6d,
+	0x61, 0x70, 0x70, 0x65, 0x64, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x04,
+	0x52, 0x0a, 0x6d, 0x61, 0x70, 0x70, 0x65, 0x64, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x14, 0x0a, 0x05,
+	0x64, 0x69, 0x72, 0x74, 0x79, 0x18, 0x05, 0x20, 0x01, 0x28, 0x04, 0x52, 0x05, 0x64, 0x69, 0x72,
+	0x74, 0x79, 0x12, 0x1c, 0x0a, 0x09, 0x77, 0x72, 0x69, 0x74, 0x65, 0x62, 0x61, 0x63, 0x6b, 0x18,
+	0x06, 0x20, 0x01, 0x28, 0x04, 0x52, 0x09, 0x77, 0x72, 0x69, 0x74, 0x65, 0x62, 0x61, 0x63, 0x6b,
+	0x12, 0x18, 0x0a, 0x08, 0x70, 0x67, 0x5f, 0x70, 0x67, 0x5f, 0x69, 0x6e, 0x18, 0x07, 0x20, 0x01,
+	0x28, 0x04, 0x52, 0x06, 0x70, 0x67, 0x50, 0x67, 0x49, 0x6e, 0x12, 0x1a, 0x0a, 0x09, 0x70, 0x67,
+	0x5f, 0x70, 0x67, 0x5f, 0x6f, 0x75, 0x74, 0x18, 0x08, 0x20, 0x01, 0x28, 0x04, 0x52, 0x07, 0x70,
+	0x67, 0x50, 0x67, 0x4f, 0x75, 0x74, 0x12, 0x19, 0x0a, 0x08, 0x70, 0x67, 0x5f, 0x66, 0x61, 0x75,
+	0x6c, 0x74, 0x18, 0x09, 0x20, 0x01, 0x28, 0x04, 0x52, 0x07, 0x70, 0x67, 0x46, 0x61, 0x75, 0x6c,
+	0x74, 0x12, 0x20, 0x0a, 0x0c, 0x70, 0x67, 0x5f, 0x6d, 0x61, 0x6a, 0x5f, 0x66, 0x61, 0x75, 0x6c,
+	0x74, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0a, 0x70, 0x67, 0x4d, 0x61, 0x6a, 0x46, 0x61,
+	0x75, 0x6c, 0x74, 0x12, 0x23, 0x0a, 0x0d, 0x69, 0x6e, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x5f,
+	0x61, 0x6e, 0x6f, 0x6e, 0x18, 0x0b, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0c, 0x69, 0x6e, 0x61, 0x63,
+	0x74, 0x69, 0x76, 0x65, 0x41, 0x6e, 0x6f, 0x6e, 0x12, 0x1f, 0x0a, 0x0b, 0x61, 0x63, 0x74, 0x69,
+	0x76, 0x65, 0x5f, 0x61, 0x6e, 0x6f, 0x6e, 0x18, 0x0c, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0a, 0x61,
+	0x63, 0x74, 0x69, 0x76, 0x65, 0x41, 0x6e, 0x6f, 0x6e, 0x12, 0x23, 0x0a, 0x0d, 0x69, 0x6e, 0x61,
+	0x63, 0x74, 0x69, 0x76, 0x65, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x18, 0x0d, 0x20, 0x01, 0x28, 0x04,
+	0x52, 0x0c, 0x69, 0x6e, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x1f,
+	0x0a, 0x0b, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x18, 0x0e, 0x20,
+	0x01, 0x28, 0x04, 0x52, 0x0a, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x46, 0x69, 0x6c, 0x65, 0x12,
+	0x20, 0x0a, 0x0b, 0x75, 0x6e, 0x65, 0x76, 0x69, 0x63, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x18, 0x0f,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x0b, 0x75, 0x6e, 0x65, 0x76, 0x69, 0x63, 0x74, 0x61, 0x62, 0x6c,
+	0x65, 0x12, 0x3a, 0x0a, 0x19, 0x68, 0x69, 0x65, 0x72, 0x61, 0x72, 0x63, 0x68, 0x69, 0x63, 0x61,
+	0x6c, 0x5f, 0x6d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x5f, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x18, 0x10,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x17, 0x68, 0x69, 0x65, 0x72, 0x61, 0x72, 0x63, 0x68, 0x69, 0x63,
+	0x61, 0x6c, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x4c, 0x69, 0x6d, 0x69, 0x74, 0x12, 0x36, 0x0a,
+	0x17, 0x68, 0x69, 0x65, 0x72, 0x61, 0x72, 0x63, 0x68, 0x69, 0x63, 0x61, 0x6c, 0x5f, 0x73, 0x77,
+	0x61, 0x70, 0x5f, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x18, 0x11, 0x20, 0x01, 0x28, 0x04, 0x52, 0x15,
+	0x68, 0x69, 0x65, 0x72, 0x61, 0x72, 0x63, 0x68, 0x69, 0x63, 0x61, 0x6c, 0x53, 0x77, 0x61, 0x70,
+	0x4c, 0x69, 0x6d, 0x69, 0x74, 0x12, 0x1f, 0x0a, 0x0b, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x5f, 0x63,
+	0x61, 0x63, 0x68, 0x65, 0x18, 0x12, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0a, 0x74, 0x6f, 0x74, 0x61,
+	0x6c, 0x43, 0x61, 0x63, 0x68, 0x65, 0x12, 0x1b, 0x0a, 0x09, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x5f,
+	0x72, 0x73, 0x73, 0x18, 0x13, 0x20, 0x01, 0x28, 0x04, 0x52, 0x08, 0x74, 0x6f, 0x74, 0x61, 0x6c,
+	0x52, 0x73, 0x73, 0x12, 0x24, 0x0a, 0x0e, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x5f, 0x72, 0x73, 0x73,
+	0x5f, 0x68, 0x75, 0x67, 0x65, 0x18, 0x14, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0c, 0x74, 0x6f, 0x74,
+	0x61, 0x6c, 0x52, 0x73, 0x73, 0x48, 0x75, 0x67, 0x65, 0x12, 0x2a, 0x0a, 0x11, 0x74, 0x6f, 0x74,
+	0x61, 0x6c, 0x5f, 0x6d, 0x61, 0x70, 0x70, 0x65, 0x64, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x18, 0x15,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x0f, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x4d, 0x61, 0x70, 0x70, 0x65,
+	0x64, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x5f, 0x64,
+	0x69, 0x72, 0x74, 0x79, 0x18, 0x16, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0a, 0x74, 0x6f, 0x74, 0x61,
+	0x6c, 0x44, 0x69, 0x72, 0x74, 0x79, 0x12, 0x27, 0x0a, 0x0f, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x5f,
+	0x77, 0x72, 0x69, 0x74, 0x65, 0x62, 0x61, 0x63, 0x6b, 0x18, 0x17, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x0e, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x57, 0x72, 0x69, 0x74, 0x65, 0x62, 0x61, 0x63, 0x6b, 0x12,
+	0x23, 0x0a, 0x0e, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x5f, 0x70, 0x67, 0x5f, 0x70, 0x67, 0x5f, 0x69,
+	0x6e, 0x18, 0x18, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0b, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x50, 0x67,
+	0x50, 0x67, 0x49, 0x6e, 0x12, 0x25, 0x0a, 0x0f, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x5f, 0x70, 0x67,
+	0x5f, 0x70, 0x67, 0x5f, 0x6f, 0x75, 0x74, 0x18, 0x19, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0c, 0x74,
+	0x6f, 0x74, 0x61, 0x6c, 0x50, 0x67, 0x50, 0x67, 0x4f, 0x75, 0x74, 0x12, 0x24, 0x0a, 0x0e, 0x74,
+	0x6f, 0x74, 0x61, 0x6c, 0x5f, 0x70, 0x67, 0x5f, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x18, 0x1a, 0x20,
+	0x01, 0x28, 0x04, 0x52, 0x0c, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x50, 0x67, 0x46, 0x61, 0x75, 0x6c,
+	0x74, 0x12, 0x2b, 0x0a, 0x12, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x5f, 0x70, 0x67, 0x5f, 0x6d, 0x61,
+	0x6a, 0x5f, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x18, 0x1b, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0f, 0x74,
+	0x6f, 0x74, 0x61, 0x6c, 0x50, 0x67, 0x4d, 0x61, 0x6a, 0x46, 0x61, 0x75, 0x6c, 0x74, 0x12, 0x2e,
+	0x0a, 0x13, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x5f, 0x69, 0x6e, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65,
+	0x5f, 0x61, 0x6e, 0x6f, 0x6e, 0x18, 0x1c, 0x20, 0x01, 0x28, 0x04, 0x52, 0x11, 0x74, 0x6f, 0x74,
+	0x61, 0x6c, 0x49, 0x6e, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x41, 0x6e, 0x6f, 0x6e, 0x12, 0x2a,
+	0x0a, 0x11, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x5f, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x5f, 0x61,
+	0x6e, 0x6f, 0x6e, 0x18, 0x1d, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0f, 0x74, 0x6f, 0x74, 0x61, 0x6c,
+	0x41, 0x63, 0x74, 0x69, 0x76, 0x65, 0x41, 0x6e, 0x6f, 0x6e, 0x12, 0x2e, 0x0a, 0x13, 0x74, 0x6f,
+	0x74, 0x61, 0x6c, 0x5f, 0x69, 0x6e, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x5f, 0x66, 0x69, 0x6c,
+	0x65, 0x18, 0x1e, 0x20, 0x01, 0x28, 0x04, 0x52, 0x11, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x49, 0x6e,
+	0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x2a, 0x0a, 0x11, 0x74, 0x6f,
+	0x74, 0x61, 0x6c, 0x5f, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x18,
+	0x1f, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0f, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x41, 0x63, 0x74, 0x69,
+	0x76, 0x65, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x2b, 0x0a, 0x11, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x5f,
+	0x75, 0x6e, 0x65, 0x76, 0x69, 0x63, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x18, 0x20, 0x20, 0x01, 0x28,
+	0x04, 0x52, 0x10, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x55, 0x6e, 0x65, 0x76, 0x69, 0x63, 0x74, 0x61,
+	0x62, 0x6c, 0x65, 0x12, 0x3b, 0x0a, 0x05, 0x75, 0x73, 0x61, 0x67, 0x65, 0x18, 0x21, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x25, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65,
+	0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x4d, 0x65,
+	0x6d, 0x6f, 0x72, 0x79, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x05, 0x75, 0x73, 0x61, 0x67, 0x65,
+	0x12, 0x39, 0x0a, 0x04, 0x73, 0x77, 0x61, 0x70, 0x18, 0x22, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x25,
+	0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63,
+	0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79,
+	0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x04, 0x73, 0x77, 0x61, 0x70, 0x12, 0x3d, 0x0a, 0x06, 0x6b,
+	0x65, 0x72, 0x6e, 0x65, 0x6c, 0x18, 0x23, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x69, 0x6f,
+	0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f,
+	0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x45, 0x6e, 0x74,
+	0x72, 0x79, 0x52, 0x06, 0x6b, 0x65, 0x72, 0x6e, 0x65, 0x6c, 0x12, 0x44, 0x0a, 0x0a, 0x6b, 0x65,
+	0x72, 0x6e, 0x65, 0x6c, 0x5f, 0x74, 0x63, 0x70, 0x18, 0x24, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x25,
+	0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63,
+	0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79,
+	0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x09, 0x6b, 0x65, 0x72, 0x6e, 0x65, 0x6c, 0x54, 0x63, 0x70,
+	0x22, 0x65, 0x0a, 0x0b, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12,
+	0x14, 0x0a, 0x05, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04, 0x52, 0x05,
+	0x6c, 0x69, 0x6d, 0x69, 0x74, 0x12, 0x14, 0x0a, 0x05, 0x75, 0x73, 0x61, 0x67, 0x65, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x05, 0x75, 0x73, 0x61, 0x67, 0x65, 0x12, 0x10, 0x0a, 0x03, 0x6d,
+	0x61, 0x78, 0x18, 0x03, 0x20, 0x01, 0x28, 0x04, 0x52, 0x03, 0x6d, 0x61, 0x78, 0x12, 0x18, 0x0a,
+	0x07, 0x66, 0x61, 0x69, 0x6c, 0x63, 0x6e, 0x74, 0x18, 0x04, 0x20, 0x01, 0x28, 0x04, 0x52, 0x07,
+	0x66, 0x61, 0x69, 0x6c, 0x63, 0x6e, 0x74, 0x22, 0x74, 0x0a, 0x10, 0x4d, 0x65, 0x6d, 0x6f, 0x72,
+	0x79, 0x4f, 0x6f, 0x6d, 0x43, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x12, 0x28, 0x0a, 0x10, 0x6f,
+	0x6f, 0x6d, 0x5f, 0x6b, 0x69, 0x6c, 0x6c, 0x5f, 0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0e, 0x6f, 0x6f, 0x6d, 0x4b, 0x69, 0x6c, 0x6c, 0x44, 0x69,
+	0x73, 0x61, 0x62, 0x6c, 0x65, 0x12, 0x1b, 0x0a, 0x09, 0x75, 0x6e, 0x64, 0x65, 0x72, 0x5f, 0x6f,
+	0x6f, 0x6d, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x08, 0x75, 0x6e, 0x64, 0x65, 0x72, 0x4f,
+	0x6f, 0x6d, 0x12, 0x19, 0x0a, 0x08, 0x6f, 0x6f, 0x6d, 0x5f, 0x6b, 0x69, 0x6c, 0x6c, 0x18, 0x03,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x07, 0x6f, 0x6f, 0x6d, 0x4b, 0x69, 0x6c, 0x6c, 0x22, 0xd5, 0x05,
+	0x0a, 0x09, 0x42, 0x6c, 0x6b, 0x49, 0x4f, 0x53, 0x74, 0x61, 0x74, 0x12, 0x61, 0x0a, 0x1a, 0x69,
+	0x6f, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x5f, 0x62, 0x79, 0x74, 0x65, 0x73, 0x5f,
+	0x72, 0x65, 0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32,
+	0x24, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e,
+	0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x42, 0x6c, 0x6b, 0x49, 0x4f,
+	0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x17, 0x69, 0x6f, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65,
+	0x42, 0x79, 0x74, 0x65, 0x73, 0x52, 0x65, 0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65, 0x12, 0x58,
+	0x0a, 0x15, 0x69, 0x6f, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x64, 0x5f, 0x72, 0x65,
+	0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e,
+	0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67,
+	0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x42, 0x6c, 0x6b, 0x49, 0x4f, 0x45, 0x6e,
+	0x74, 0x72, 0x79, 0x52, 0x13, 0x69, 0x6f, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x64, 0x52,
+	0x65, 0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65, 0x12, 0x54, 0x0a, 0x13, 0x69, 0x6f, 0x5f, 0x71,
+	0x75, 0x65, 0x75, 0x65, 0x64, 0x5f, 0x72, 0x65, 0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65, 0x18,
+	0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61,
+	0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31,
+	0x2e, 0x42, 0x6c, 0x6b, 0x49, 0x4f, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x11, 0x69, 0x6f, 0x51,
+	0x75, 0x65, 0x75, 0x65, 0x64, 0x52, 0x65, 0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65, 0x12, 0x5f,
+	0x0a, 0x19, 0x69, 0x6f, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x5f, 0x74, 0x69, 0x6d,
+	0x65, 0x5f, 0x72, 0x65, 0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65, 0x18, 0x04, 0x20, 0x03, 0x28,
+	0x0b, 0x32, 0x24, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72,
+	0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x42, 0x6c, 0x6b,
+	0x49, 0x4f, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x16, 0x69, 0x6f, 0x53, 0x65, 0x72, 0x76, 0x69,
+	0x63, 0x65, 0x54, 0x69, 0x6d, 0x65, 0x52, 0x65, 0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65, 0x12,
+	0x59, 0x0a, 0x16, 0x69, 0x6f, 0x5f, 0x77, 0x61, 0x69, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x5f,
+	0x72, 0x65, 0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65, 0x18, 0x05, 0x20, 0x03, 0x28, 0x0b, 0x32,
+	0x24, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e,
+	0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x42, 0x6c, 0x6b, 0x49, 0x4f,
+	0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x13, 0x69, 0x6f, 0x57, 0x61, 0x69, 0x74, 0x54, 0x69, 0x6d,
+	0x65, 0x52, 0x65, 0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65, 0x12, 0x54, 0x0a, 0x13, 0x69, 0x6f,
+	0x5f, 0x6d, 0x65, 0x72, 0x67, 0x65, 0x64, 0x5f, 0x72, 0x65, 0x63, 0x75, 0x72, 0x73, 0x69, 0x76,
+	0x65, 0x18, 0x06, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e,
+	0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e,
+	0x76, 0x31, 0x2e, 0x42, 0x6c, 0x6b, 0x49, 0x4f, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x11, 0x69,
+	0x6f, 0x4d, 0x65, 0x72, 0x67, 0x65, 0x64, 0x52, 0x65, 0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65,
+	0x12, 0x50, 0x0a, 0x11, 0x69, 0x6f, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x5f, 0x72, 0x65, 0x63, 0x75,
+	0x72, 0x73, 0x69, 0x76, 0x65, 0x18, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x69, 0x6f,
+	0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f,
+	0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x42, 0x6c, 0x6b, 0x49, 0x4f, 0x45, 0x6e, 0x74, 0x72,
+	0x79, 0x52, 0x0f, 0x69, 0x6f, 0x54, 0x69, 0x6d, 0x65, 0x52, 0x65, 0x63, 0x75, 0x72, 0x73, 0x69,
+	0x76, 0x65, 0x12, 0x51, 0x0a, 0x11, 0x73, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x73, 0x5f, 0x72, 0x65,
+	0x63, 0x75, 0x72, 0x73, 0x69, 0x76, 0x65, 0x18, 0x08, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e,
+	0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67,
+	0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x42, 0x6c, 0x6b, 0x49, 0x4f, 0x45, 0x6e,
+	0x74, 0x72, 0x79, 0x52, 0x10, 0x73, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x73, 0x52, 0x65, 0x63, 0x75,
+	0x72, 0x73, 0x69, 0x76, 0x65, 0x22, 0x76, 0x0a, 0x0a, 0x42, 0x6c, 0x6b, 0x49, 0x4f, 0x45, 0x6e,
+	0x74, 0x72, 0x79, 0x12, 0x0e, 0x0a, 0x02, 0x6f, 0x70, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x02, 0x6f, 0x70, 0x12, 0x16, 0x0a, 0x06, 0x64, 0x65, 0x76, 0x69, 0x63, 0x65, 0x18, 0x02, 0x20,
+	0x01, 0x28, 0x09, 0x52, 0x06, 0x64, 0x65, 0x76, 0x69, 0x63, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x6d,
+	0x61, 0x6a, 0x6f, 0x72, 0x18, 0x03, 0x20, 0x01, 0x28, 0x04, 0x52, 0x05, 0x6d, 0x61, 0x6a, 0x6f,
+	0x72, 0x12, 0x14, 0x0a, 0x05, 0x6d, 0x69, 0x6e, 0x6f, 0x72, 0x18, 0x04, 0x20, 0x01, 0x28, 0x04,
+	0x52, 0x05, 0x6d, 0x69, 0x6e, 0x6f, 0x72, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65,
+	0x18, 0x05, 0x20, 0x01, 0x28, 0x04, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x84, 0x01,
+	0x0a, 0x08, 0x52, 0x64, 0x6d, 0x61, 0x53, 0x74, 0x61, 0x74, 0x12, 0x3d, 0x0a, 0x07, 0x63, 0x75,
+	0x72, 0x72, 0x65, 0x6e, 0x74, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x69, 0x6f,
+	0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f,
+	0x75, 0x70, 0x73, 0x2e, 0x76, 0x31, 0x2e, 0x52, 0x64, 0x6d, 0x61, 0x45, 0x6e, 0x74, 0x72, 0x79,
+	0x52, 0x07, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x12, 0x39, 0x0a, 0x05, 0x6c, 0x69, 0x6d,
+	0x69, 0x74, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f,
+	0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73,
+	0x2e, 0x76, 0x31, 0x2e, 0x52, 0x64, 0x6d, 0x61, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x05, 0x6c,
+	0x69, 0x6d, 0x69, 0x74, 0x22, 0x65, 0x0a, 0x09, 0x52, 0x64, 0x6d, 0x61, 0x45, 0x6e, 0x74, 0x72,
+	0x79, 0x12, 0x16, 0x0a, 0x06, 0x64, 0x65, 0x76, 0x69, 0x63, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x06, 0x64, 0x65, 0x76, 0x69, 0x63, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x68, 0x63, 0x61,
+	0x5f, 0x68, 0x61, 0x6e, 0x64, 0x6c, 0x65, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x0a,
+	0x68, 0x63, 0x61, 0x48, 0x61, 0x6e, 0x64, 0x6c, 0x65, 0x73, 0x12, 0x1f, 0x0a, 0x0b, 0x68, 0x63,
+	0x61, 0x5f, 0x6f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0d, 0x52,
+	0x0a, 0x68, 0x63, 0x61, 0x4f, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x73, 0x22, 0x8d, 0x02, 0x0a, 0x0b,
+	0x4e, 0x65, 0x74, 0x77, 0x6f, 0x72, 0x6b, 0x53, 0x74, 0x61, 0x74, 0x12, 0x12, 0x0a, 0x04, 0x6e,
+	0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12,
+	0x19, 0x0a, 0x08, 0x72, 0x78, 0x5f, 0x62, 0x79, 0x74, 0x65, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28,
+	0x04, 0x52, 0x07, 0x72, 0x78, 0x42, 0x79, 0x74, 0x65, 0x73, 0x12, 0x1d, 0x0a, 0x0a, 0x72, 0x78,
+	0x5f, 0x70, 0x61, 0x63, 0x6b, 0x65, 0x74, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x04, 0x52, 0x09,
+	0x72, 0x78, 0x50, 0x61, 0x63, 0x6b, 0x65, 0x74, 0x73, 0x12, 0x1b, 0x0a, 0x09, 0x72, 0x78, 0x5f,
+	0x65, 0x72, 0x72, 0x6f, 0x72, 0x73, 0x18, 0x04, 0x20, 0x01, 0x28, 0x04, 0x52, 0x08, 0x72, 0x78,
+	0x45, 0x72, 0x72, 0x6f, 0x72, 0x73, 0x12, 0x1d, 0x0a, 0x0a, 0x72, 0x78, 0x5f, 0x64, 0x72, 0x6f,
+	0x70, 0x70, 0x65, 0x64, 0x18, 0x05, 0x20, 0x01, 0x28, 0x04, 0x52, 0x09, 0x72, 0x78, 0x44, 0x72,
+	0x6f, 0x70, 0x70, 0x65, 0x64, 0x12, 0x19, 0x0a, 0x08, 0x74, 0x78, 0x5f, 0x62, 0x79, 0x74, 0x65,
+	0x73, 0x18, 0x06, 0x20, 0x01, 0x28, 0x04, 0x52, 0x07, 0x74, 0x78, 0x42, 0x79, 0x74, 0x65, 0x73,
+	0x12, 0x1d, 0x0a, 0x0a, 0x74, 0x78, 0x5f, 0x70, 0x61, 0x63, 0x6b, 0x65, 0x74, 0x73, 0x18, 0x07,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x09, 0x74, 0x78, 0x50, 0x61, 0x63, 0x6b, 0x65, 0x74, 0x73, 0x12,
+	0x1b, 0x0a, 0x09, 0x74, 0x78, 0x5f, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x73, 0x18, 0x08, 0x20, 0x01,
+	0x28, 0x04, 0x52, 0x08, 0x74, 0x78, 0x45, 0x72, 0x72, 0x6f, 0x72, 0x73, 0x12, 0x1d, 0x0a, 0x0a,
+	0x74, 0x78, 0x5f, 0x64, 0x72, 0x6f, 0x70, 0x70, 0x65, 0x64, 0x18, 0x09, 0x20, 0x01, 0x28, 0x04,
+	0x52, 0x09, 0x74, 0x78, 0x44, 0x72, 0x6f, 0x70, 0x70, 0x65, 0x64, 0x22, 0xb9, 0x01, 0x0a, 0x0b,
+	0x43, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x53, 0x74, 0x61, 0x74, 0x73, 0x12, 0x1f, 0x0a, 0x0b, 0x6e,
+	0x72, 0x5f, 0x73, 0x6c, 0x65, 0x65, 0x70, 0x69, 0x6e, 0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04,
+	0x52, 0x0a, 0x6e, 0x72, 0x53, 0x6c, 0x65, 0x65, 0x70, 0x69, 0x6e, 0x67, 0x12, 0x1d, 0x0a, 0x0a,
+	0x6e, 0x72, 0x5f, 0x72, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04,
+	0x52, 0x09, 0x6e, 0x72, 0x52, 0x75, 0x6e, 0x6e, 0x69, 0x6e, 0x67, 0x12, 0x1d, 0x0a, 0x0a, 0x6e,
+	0x72, 0x5f, 0x73, 0x74, 0x6f, 0x70, 0x70, 0x65, 0x64, 0x18, 0x03, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x09, 0x6e, 0x72, 0x53, 0x74, 0x6f, 0x70, 0x70, 0x65, 0x64, 0x12, 0x2d, 0x0a, 0x12, 0x6e, 0x72,
+	0x5f, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x72, 0x75, 0x70, 0x74, 0x69, 0x62, 0x6c, 0x65,
+	0x18, 0x04, 0x20, 0x01, 0x28, 0x04, 0x52, 0x11, 0x6e, 0x72, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65,
+	0x72, 0x72, 0x75, 0x70, 0x74, 0x69, 0x62, 0x6c, 0x65, 0x12, 0x1c, 0x0a, 0x0a, 0x6e, 0x72, 0x5f,
+	0x69, 0x6f, 0x5f, 0x77, 0x61, 0x69, 0x74, 0x18, 0x05, 0x20, 0x01, 0x28, 0x04, 0x52, 0x08, 0x6e,
+	0x72, 0x49, 0x6f, 0x57, 0x61, 0x69, 0x74, 0x42, 0x2d, 0x5a, 0x2b, 0x67, 0x69, 0x74, 0x68, 0x75,
+	0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64,
+	0x2f, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2f, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x31,
+	0x2f, 0x73, 0x74, 0x61, 0x74, 0x73, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+}
+
+var (
+	file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescOnce sync.Once
+	file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescData = file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDesc
+)
+
+func file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescGZIP() []byte {
+	file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescOnce.Do(func() {
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescData = protoimpl.X.CompressGZIP(file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescData)
+	})
+	return file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDescData
+}
+
+var file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes = make([]protoimpl.MessageInfo, 15)
+var file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_goTypes = []interface{}{
+	(*Metrics)(nil),          // 0: io.containerd.cgroups.v1.Metrics
+	(*HugetlbStat)(nil),      // 1: io.containerd.cgroups.v1.HugetlbStat
+	(*PidsStat)(nil),         // 2: io.containerd.cgroups.v1.PidsStat
+	(*CPUStat)(nil),          // 3: io.containerd.cgroups.v1.CPUStat
+	(*CPUUsage)(nil),         // 4: io.containerd.cgroups.v1.CPUUsage
+	(*Throttle)(nil),         // 5: io.containerd.cgroups.v1.Throttle
+	(*MemoryStat)(nil),       // 6: io.containerd.cgroups.v1.MemoryStat
+	(*MemoryEntry)(nil),      // 7: io.containerd.cgroups.v1.MemoryEntry
+	(*MemoryOomControl)(nil), // 8: io.containerd.cgroups.v1.MemoryOomControl
+	(*BlkIOStat)(nil),        // 9: io.containerd.cgroups.v1.BlkIOStat
+	(*BlkIOEntry)(nil),       // 10: io.containerd.cgroups.v1.BlkIOEntry
+	(*RdmaStat)(nil),         // 11: io.containerd.cgroups.v1.RdmaStat
+	(*RdmaEntry)(nil),        // 12: io.containerd.cgroups.v1.RdmaEntry
+	(*NetworkStat)(nil),      // 13: io.containerd.cgroups.v1.NetworkStat
+	(*CgroupStats)(nil),      // 14: io.containerd.cgroups.v1.CgroupStats
+}
+var file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_depIdxs = []int32{
+	1,  // 0: io.containerd.cgroups.v1.Metrics.hugetlb:type_name -> io.containerd.cgroups.v1.HugetlbStat
+	2,  // 1: io.containerd.cgroups.v1.Metrics.pids:type_name -> io.containerd.cgroups.v1.PidsStat
+	3,  // 2: io.containerd.cgroups.v1.Metrics.cpu:type_name -> io.containerd.cgroups.v1.CPUStat
+	6,  // 3: io.containerd.cgroups.v1.Metrics.memory:type_name -> io.containerd.cgroups.v1.MemoryStat
+	9,  // 4: io.containerd.cgroups.v1.Metrics.blkio:type_name -> io.containerd.cgroups.v1.BlkIOStat
+	11, // 5: io.containerd.cgroups.v1.Metrics.rdma:type_name -> io.containerd.cgroups.v1.RdmaStat
+	13, // 6: io.containerd.cgroups.v1.Metrics.network:type_name -> io.containerd.cgroups.v1.NetworkStat
+	14, // 7: io.containerd.cgroups.v1.Metrics.cgroup_stats:type_name -> io.containerd.cgroups.v1.CgroupStats
+	8,  // 8: io.containerd.cgroups.v1.Metrics.memory_oom_control:type_name -> io.containerd.cgroups.v1.MemoryOomControl
+	4,  // 9: io.containerd.cgroups.v1.CPUStat.usage:type_name -> io.containerd.cgroups.v1.CPUUsage
+	5,  // 10: io.containerd.cgroups.v1.CPUStat.throttling:type_name -> io.containerd.cgroups.v1.Throttle
+	7,  // 11: io.containerd.cgroups.v1.MemoryStat.usage:type_name -> io.containerd.cgroups.v1.MemoryEntry
+	7,  // 12: io.containerd.cgroups.v1.MemoryStat.swap:type_name -> io.containerd.cgroups.v1.MemoryEntry
+	7,  // 13: io.containerd.cgroups.v1.MemoryStat.kernel:type_name -> io.containerd.cgroups.v1.MemoryEntry
+	7,  // 14: io.containerd.cgroups.v1.MemoryStat.kernel_tcp:type_name -> io.containerd.cgroups.v1.MemoryEntry
+	10, // 15: io.containerd.cgroups.v1.BlkIOStat.io_service_bytes_recursive:type_name -> io.containerd.cgroups.v1.BlkIOEntry
+	10, // 16: io.containerd.cgroups.v1.BlkIOStat.io_serviced_recursive:type_name -> io.containerd.cgroups.v1.BlkIOEntry
+	10, // 17: io.containerd.cgroups.v1.BlkIOStat.io_queued_recursive:type_name -> io.containerd.cgroups.v1.BlkIOEntry
+	10, // 18: io.containerd.cgroups.v1.BlkIOStat.io_service_time_recursive:type_name -> io.containerd.cgroups.v1.BlkIOEntry
+	10, // 19: io.containerd.cgroups.v1.BlkIOStat.io_wait_time_recursive:type_name -> io.containerd.cgroups.v1.BlkIOEntry
+	10, // 20: io.containerd.cgroups.v1.BlkIOStat.io_merged_recursive:type_name -> io.containerd.cgroups.v1.BlkIOEntry
+	10, // 21: io.containerd.cgroups.v1.BlkIOStat.io_time_recursive:type_name -> io.containerd.cgroups.v1.BlkIOEntry
+	10, // 22: io.containerd.cgroups.v1.BlkIOStat.sectors_recursive:type_name -> io.containerd.cgroups.v1.BlkIOEntry
+	12, // 23: io.containerd.cgroups.v1.RdmaStat.current:type_name -> io.containerd.cgroups.v1.RdmaEntry
+	12, // 24: io.containerd.cgroups.v1.RdmaStat.limit:type_name -> io.containerd.cgroups.v1.RdmaEntry
+	25, // [25:25] is the sub-list for method output_type
+	25, // [25:25] is the sub-list for method input_type
+	25, // [25:25] is the sub-list for extension type_name
+	25, // [25:25] is the sub-list for extension extendee
+	0,  // [0:25] is the sub-list for field type_name
+}
+
+func init() { file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_init() }
+func file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_init() {
+	if File_github_com_containerd_cgroups_cgroup1_stats_metrics_proto != nil {
+		return
+	}
+	if !protoimpl.UnsafeEnabled {
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[0].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*Metrics); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[1].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*HugetlbStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[2].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*PidsStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[3].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CPUStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[4].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CPUUsage); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[5].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*Throttle); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[6].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*MemoryStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[7].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*MemoryEntry); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[8].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*MemoryOomControl); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[9].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*BlkIOStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[10].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*BlkIOEntry); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[11].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*RdmaStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[12].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*RdmaEntry); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[13].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*NetworkStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes[14].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CgroupStats); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+	}
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDesc,
+			NumEnums:      0,
+			NumMessages:   15,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_goTypes,
+		DependencyIndexes: file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_depIdxs,
+		MessageInfos:      file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_msgTypes,
+	}.Build()
+	File_github_com_containerd_cgroups_cgroup1_stats_metrics_proto = out.File
+	file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_rawDesc = nil
+	file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_goTypes = nil
+	file_github_com_containerd_cgroups_cgroup1_stats_metrics_proto_depIdxs = nil
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.pb.txt b/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.pb.txt
new file mode 100644
index 00000000000..7e4313ea581
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.pb.txt
@@ -0,0 +1,771 @@
+file {
+  name: "github.com/containerd/cgroups/cgroup1/stats/metrics.proto"
+  package: "io.containerd.cgroups.v1"
+  message_type {
+    name: "Metrics"
+    field {
+      name: "hugetlb"
+      number: 1
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.HugetlbStat"
+      json_name: "hugetlb"
+    }
+    field {
+      name: "pids"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.PidsStat"
+      json_name: "pids"
+    }
+    field {
+      name: "cpu"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.CPUStat"
+      json_name: "cpu"
+    }
+    field {
+      name: "memory"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.MemoryStat"
+      json_name: "memory"
+    }
+    field {
+      name: "blkio"
+      number: 5
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.BlkIOStat"
+      json_name: "blkio"
+    }
+    field {
+      name: "rdma"
+      number: 6
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.RdmaStat"
+      json_name: "rdma"
+    }
+    field {
+      name: "network"
+      number: 7
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.NetworkStat"
+      json_name: "network"
+    }
+    field {
+      name: "cgroup_stats"
+      number: 8
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.CgroupStats"
+      json_name: "cgroupStats"
+    }
+    field {
+      name: "memory_oom_control"
+      number: 9
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.MemoryOomControl"
+      json_name: "memoryOomControl"
+    }
+  }
+  message_type {
+    name: "HugetlbStat"
+    field {
+      name: "usage"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "usage"
+    }
+    field {
+      name: "max"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "max"
+    }
+    field {
+      name: "failcnt"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "failcnt"
+    }
+    field {
+      name: "pagesize"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_STRING
+      json_name: "pagesize"
+    }
+  }
+  message_type {
+    name: "PidsStat"
+    field {
+      name: "current"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "current"
+    }
+    field {
+      name: "limit"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "limit"
+    }
+  }
+  message_type {
+    name: "CPUStat"
+    field {
+      name: "usage"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.CPUUsage"
+      json_name: "usage"
+    }
+    field {
+      name: "throttling"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.Throttle"
+      json_name: "throttling"
+    }
+  }
+  message_type {
+    name: "CPUUsage"
+    field {
+      name: "total"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "total"
+    }
+    field {
+      name: "kernel"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "kernel"
+    }
+    field {
+      name: "user"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "user"
+    }
+    field {
+      name: "per_cpu"
+      number: 4
+      label: LABEL_REPEATED
+      type: TYPE_UINT64
+      json_name: "perCpu"
+    }
+  }
+  message_type {
+    name: "Throttle"
+    field {
+      name: "periods"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "periods"
+    }
+    field {
+      name: "throttled_periods"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "throttledPeriods"
+    }
+    field {
+      name: "throttled_time"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "throttledTime"
+    }
+  }
+  message_type {
+    name: "MemoryStat"
+    field {
+      name: "cache"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "cache"
+    }
+    field {
+      name: "rss"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "rss"
+    }
+    field {
+      name: "rss_huge"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "rssHuge"
+    }
+    field {
+      name: "mapped_file"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "mappedFile"
+    }
+    field {
+      name: "dirty"
+      number: 5
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "dirty"
+    }
+    field {
+      name: "writeback"
+      number: 6
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "writeback"
+    }
+    field {
+      name: "pg_pg_in"
+      number: 7
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pgPgIn"
+    }
+    field {
+      name: "pg_pg_out"
+      number: 8
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pgPgOut"
+    }
+    field {
+      name: "pg_fault"
+      number: 9
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pgFault"
+    }
+    field {
+      name: "pg_maj_fault"
+      number: 10
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pgMajFault"
+    }
+    field {
+      name: "inactive_anon"
+      number: 11
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "inactiveAnon"
+    }
+    field {
+      name: "active_anon"
+      number: 12
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "activeAnon"
+    }
+    field {
+      name: "inactive_file"
+      number: 13
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "inactiveFile"
+    }
+    field {
+      name: "active_file"
+      number: 14
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "activeFile"
+    }
+    field {
+      name: "unevictable"
+      number: 15
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "unevictable"
+    }
+    field {
+      name: "hierarchical_memory_limit"
+      number: 16
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "hierarchicalMemoryLimit"
+    }
+    field {
+      name: "hierarchical_swap_limit"
+      number: 17
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "hierarchicalSwapLimit"
+    }
+    field {
+      name: "total_cache"
+      number: 18
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalCache"
+    }
+    field {
+      name: "total_rss"
+      number: 19
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalRss"
+    }
+    field {
+      name: "total_rss_huge"
+      number: 20
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalRssHuge"
+    }
+    field {
+      name: "total_mapped_file"
+      number: 21
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalMappedFile"
+    }
+    field {
+      name: "total_dirty"
+      number: 22
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalDirty"
+    }
+    field {
+      name: "total_writeback"
+      number: 23
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalWriteback"
+    }
+    field {
+      name: "total_pg_pg_in"
+      number: 24
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalPgPgIn"
+    }
+    field {
+      name: "total_pg_pg_out"
+      number: 25
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalPgPgOut"
+    }
+    field {
+      name: "total_pg_fault"
+      number: 26
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalPgFault"
+    }
+    field {
+      name: "total_pg_maj_fault"
+      number: 27
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalPgMajFault"
+    }
+    field {
+      name: "total_inactive_anon"
+      number: 28
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalInactiveAnon"
+    }
+    field {
+      name: "total_active_anon"
+      number: 29
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalActiveAnon"
+    }
+    field {
+      name: "total_inactive_file"
+      number: 30
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalInactiveFile"
+    }
+    field {
+      name: "total_active_file"
+      number: 31
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalActiveFile"
+    }
+    field {
+      name: "total_unevictable"
+      number: 32
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "totalUnevictable"
+    }
+    field {
+      name: "usage"
+      number: 33
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.MemoryEntry"
+      json_name: "usage"
+    }
+    field {
+      name: "swap"
+      number: 34
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.MemoryEntry"
+      json_name: "swap"
+    }
+    field {
+      name: "kernel"
+      number: 35
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.MemoryEntry"
+      json_name: "kernel"
+    }
+    field {
+      name: "kernel_tcp"
+      number: 36
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.MemoryEntry"
+      json_name: "kernelTcp"
+    }
+  }
+  message_type {
+    name: "MemoryEntry"
+    field {
+      name: "limit"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "limit"
+    }
+    field {
+      name: "usage"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "usage"
+    }
+    field {
+      name: "max"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "max"
+    }
+    field {
+      name: "failcnt"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "failcnt"
+    }
+  }
+  message_type {
+    name: "MemoryOomControl"
+    field {
+      name: "oom_kill_disable"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "oomKillDisable"
+    }
+    field {
+      name: "under_oom"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "underOom"
+    }
+    field {
+      name: "oom_kill"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "oomKill"
+    }
+  }
+  message_type {
+    name: "BlkIOStat"
+    field {
+      name: "io_service_bytes_recursive"
+      number: 1
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.BlkIOEntry"
+      json_name: "ioServiceBytesRecursive"
+    }
+    field {
+      name: "io_serviced_recursive"
+      number: 2
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.BlkIOEntry"
+      json_name: "ioServicedRecursive"
+    }
+    field {
+      name: "io_queued_recursive"
+      number: 3
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.BlkIOEntry"
+      json_name: "ioQueuedRecursive"
+    }
+    field {
+      name: "io_service_time_recursive"
+      number: 4
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.BlkIOEntry"
+      json_name: "ioServiceTimeRecursive"
+    }
+    field {
+      name: "io_wait_time_recursive"
+      number: 5
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.BlkIOEntry"
+      json_name: "ioWaitTimeRecursive"
+    }
+    field {
+      name: "io_merged_recursive"
+      number: 6
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.BlkIOEntry"
+      json_name: "ioMergedRecursive"
+    }
+    field {
+      name: "io_time_recursive"
+      number: 7
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.BlkIOEntry"
+      json_name: "ioTimeRecursive"
+    }
+    field {
+      name: "sectors_recursive"
+      number: 8
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.BlkIOEntry"
+      json_name: "sectorsRecursive"
+    }
+  }
+  message_type {
+    name: "BlkIOEntry"
+    field {
+      name: "op"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_STRING
+      json_name: "op"
+    }
+    field {
+      name: "device"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_STRING
+      json_name: "device"
+    }
+    field {
+      name: "major"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "major"
+    }
+    field {
+      name: "minor"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "minor"
+    }
+    field {
+      name: "value"
+      number: 5
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "value"
+    }
+  }
+  message_type {
+    name: "RdmaStat"
+    field {
+      name: "current"
+      number: 1
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.RdmaEntry"
+      json_name: "current"
+    }
+    field {
+      name: "limit"
+      number: 2
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v1.RdmaEntry"
+      json_name: "limit"
+    }
+  }
+  message_type {
+    name: "RdmaEntry"
+    field {
+      name: "device"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_STRING
+      json_name: "device"
+    }
+    field {
+      name: "hca_handles"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT32
+      json_name: "hcaHandles"
+    }
+    field {
+      name: "hca_objects"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT32
+      json_name: "hcaObjects"
+    }
+  }
+  message_type {
+    name: "NetworkStat"
+    field {
+      name: "name"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_STRING
+      json_name: "name"
+    }
+    field {
+      name: "rx_bytes"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "rxBytes"
+    }
+    field {
+      name: "rx_packets"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "rxPackets"
+    }
+    field {
+      name: "rx_errors"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "rxErrors"
+    }
+    field {
+      name: "rx_dropped"
+      number: 5
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "rxDropped"
+    }
+    field {
+      name: "tx_bytes"
+      number: 6
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "txBytes"
+    }
+    field {
+      name: "tx_packets"
+      number: 7
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "txPackets"
+    }
+    field {
+      name: "tx_errors"
+      number: 8
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "txErrors"
+    }
+    field {
+      name: "tx_dropped"
+      number: 9
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "txDropped"
+    }
+  }
+  message_type {
+    name: "CgroupStats"
+    field {
+      name: "nr_sleeping"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "nrSleeping"
+    }
+    field {
+      name: "nr_running"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "nrRunning"
+    }
+    field {
+      name: "nr_stopped"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "nrStopped"
+    }
+    field {
+      name: "nr_uninterruptible"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "nrUninterruptible"
+    }
+    field {
+      name: "nr_io_wait"
+      number: 5
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "nrIoWait"
+    }
+  }
+  options {
+    go_package: "github.com/containerd/cgroups/cgroup1/stats"
+  }
+  syntax: "proto3"
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.proto b/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.proto
new file mode 100644
index 00000000000..e6e4444b1b4
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/stats/metrics.proto
@@ -0,0 +1,158 @@
+syntax = "proto3";
+
+package io.containerd.cgroups.v1;
+
+option go_package = "github.com/containerd/cgroups/cgroup1/stats";
+
+message Metrics {
+	repeated HugetlbStat hugetlb = 1;
+	PidsStat pids = 2;
+	CPUStat cpu = 3;
+	MemoryStat memory = 4;
+	BlkIOStat blkio = 5;
+	RdmaStat rdma = 6;
+	repeated NetworkStat network = 7;
+	CgroupStats cgroup_stats = 8;
+	MemoryOomControl memory_oom_control = 9;
+}
+
+message HugetlbStat {
+	uint64 usage = 1;
+	uint64 max = 2;
+	uint64 failcnt = 3;
+	string pagesize = 4;
+}
+
+message PidsStat {
+	uint64 current = 1;
+	uint64 limit = 2;
+}
+
+message CPUStat {
+	CPUUsage usage = 1;
+	Throttle throttling = 2;
+}
+
+message CPUUsage {
+	// values in nanoseconds
+	uint64 total = 1;
+	uint64 kernel = 2;
+	uint64 user = 3;
+	repeated uint64 per_cpu = 4;
+
+}
+
+message Throttle {
+	uint64 periods = 1;
+	uint64 throttled_periods = 2;
+	uint64 throttled_time = 3;
+}
+
+message MemoryStat {
+	uint64 cache = 1;
+	uint64 rss = 2;
+	uint64 rss_huge = 3;
+	uint64 mapped_file = 4;
+	uint64 dirty = 5;
+	uint64 writeback = 6;
+	uint64 pg_pg_in = 7;
+	uint64 pg_pg_out = 8;
+	uint64 pg_fault = 9;
+	uint64 pg_maj_fault = 10;
+	uint64 inactive_anon = 11;
+	uint64 active_anon = 12;
+	uint64 inactive_file = 13;
+	uint64 active_file = 14;
+	uint64 unevictable = 15;
+	uint64 hierarchical_memory_limit = 16;
+	uint64 hierarchical_swap_limit = 17;
+	uint64 total_cache = 18;
+	uint64 total_rss = 19;
+	uint64 total_rss_huge = 20;
+	uint64 total_mapped_file = 21;
+	uint64 total_dirty = 22;
+	uint64 total_writeback = 23;
+	uint64 total_pg_pg_in = 24;
+	uint64 total_pg_pg_out = 25;
+	uint64 total_pg_fault = 26;
+	uint64 total_pg_maj_fault = 27;
+	uint64 total_inactive_anon = 28;
+	uint64 total_active_anon = 29;
+	uint64 total_inactive_file = 30;
+	uint64 total_active_file = 31;
+	uint64 total_unevictable = 32;
+	MemoryEntry usage = 33;
+	MemoryEntry swap = 34;
+	MemoryEntry kernel = 35;
+	MemoryEntry kernel_tcp = 36;
+
+}
+
+message MemoryEntry {
+	uint64 limit = 1;
+	uint64 usage = 2;
+	uint64 max = 3;
+	uint64 failcnt = 4;
+}
+
+message MemoryOomControl {
+	uint64 oom_kill_disable = 1;
+	uint64 under_oom = 2;
+	uint64 oom_kill = 3;
+}
+
+message BlkIOStat {
+	repeated BlkIOEntry io_service_bytes_recursive = 1;
+	repeated BlkIOEntry io_serviced_recursive = 2;
+	repeated BlkIOEntry io_queued_recursive = 3;
+	repeated BlkIOEntry io_service_time_recursive = 4;
+	repeated BlkIOEntry io_wait_time_recursive = 5;
+	repeated BlkIOEntry io_merged_recursive = 6;
+	repeated BlkIOEntry io_time_recursive = 7;
+	repeated BlkIOEntry sectors_recursive = 8;
+}
+
+message BlkIOEntry {
+	string op = 1;
+	string device = 2;
+	uint64 major = 3;
+	uint64 minor = 4;
+	uint64 value = 5;
+}
+
+message RdmaStat {
+	repeated RdmaEntry current = 1;
+	repeated RdmaEntry limit = 2;
+}
+
+message RdmaEntry {
+	string device = 1;
+	uint32 hca_handles = 2;
+	uint32 hca_objects = 3;
+}
+
+message NetworkStat {
+	string name = 1;
+	uint64 rx_bytes = 2;
+	uint64 rx_packets = 3;
+	uint64 rx_errors  = 4;
+	uint64 rx_dropped = 5;
+	uint64 tx_bytes = 6;
+	uint64 tx_packets = 7;
+	uint64 tx_errors = 8;
+	uint64 tx_dropped = 9;
+}
+
+// CgroupStats exports per-cgroup statistics.
+message CgroupStats {
+	// number of tasks sleeping
+	uint64 nr_sleeping = 1;
+	// number of tasks running
+	uint64 nr_running = 2;
+	// number of tasks in stopped state
+	uint64 nr_stopped = 3;
+	// number of tasks in uninterruptible state
+	uint64 nr_uninterruptible = 4;
+	// number of tasks waiting on IO
+	uint64 nr_io_wait = 5;
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/subsystem.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/subsystem.go
new file mode 100644
index 00000000000..d32ea2cae4e
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/subsystem.go
@@ -0,0 +1,117 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"fmt"
+	"os"
+
+	"github.com/containerd/cgroups/v3"
+	v1 "github.com/containerd/cgroups/v3/cgroup1/stats"
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+// Name is a typed name for a cgroup subsystem
+type Name string
+
+const (
+	Devices   Name = "devices"
+	Hugetlb   Name = "hugetlb"
+	Freezer   Name = "freezer"
+	Pids      Name = "pids"
+	NetCLS    Name = "net_cls"
+	NetPrio   Name = "net_prio"
+	PerfEvent Name = "perf_event"
+	Cpuset    Name = "cpuset"
+	Cpu       Name = "cpu"
+	Cpuacct   Name = "cpuacct"
+	Memory    Name = "memory"
+	Blkio     Name = "blkio"
+	Rdma      Name = "rdma"
+)
+
+// Subsystems returns a complete list of the default cgroups
+// available on most linux systems
+func Subsystems() []Name {
+	n := []Name{
+		Freezer,
+		Pids,
+		NetCLS,
+		NetPrio,
+		PerfEvent,
+		Cpuset,
+		Cpu,
+		Cpuacct,
+		Memory,
+		Blkio,
+		Rdma,
+	}
+	if !cgroups.RunningInUserNS() {
+		n = append(n, Devices)
+	}
+	if _, err := os.Stat("/sys/kernel/mm/hugepages"); err == nil {
+		n = append(n, Hugetlb)
+	}
+	return n
+}
+
+type Subsystem interface {
+	Name() Name
+}
+
+type pather interface {
+	Subsystem
+	Path(path string) string
+}
+
+type creator interface {
+	Subsystem
+	Create(path string, resources *specs.LinuxResources) error
+}
+
+type deleter interface {
+	Subsystem
+	Delete(path string) error
+}
+
+type stater interface {
+	Subsystem
+	Stat(path string, stats *v1.Metrics) error
+}
+
+type updater interface {
+	Subsystem
+	Update(path string, resources *specs.LinuxResources) error
+}
+
+// SingleSubsystem returns a single cgroup subsystem within the base Hierarchy
+func SingleSubsystem(baseHierarchy Hierarchy, subsystem Name) Hierarchy {
+	return func() ([]Subsystem, error) {
+		subsystems, err := baseHierarchy()
+		if err != nil {
+			return nil, err
+		}
+		for _, s := range subsystems {
+			if s.Name() == subsystem {
+				return []Subsystem{
+					s,
+				}, nil
+			}
+		}
+		return nil, fmt.Errorf("unable to find subsystem %s", subsystem)
+	}
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/systemd.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/systemd.go
new file mode 100644
index 00000000000..335a255b833
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/systemd.go
@@ -0,0 +1,157 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"context"
+	"path/filepath"
+	"strings"
+	"sync"
+
+	systemdDbus "github.com/coreos/go-systemd/v22/dbus"
+	"github.com/godbus/dbus/v5"
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+const (
+	SystemdDbus  Name = "systemd"
+	defaultSlice Name = "system.slice"
+)
+
+var (
+	canDelegate bool
+	once        sync.Once
+)
+
+func Systemd() ([]Subsystem, error) {
+	root, err := v1MountPoint()
+	if err != nil {
+		return nil, err
+	}
+	defaultSubsystems, err := defaults(root)
+	if err != nil {
+		return nil, err
+	}
+	s, err := NewSystemd(root)
+	if err != nil {
+		return nil, err
+	}
+	// make sure the systemd controller is added first
+	return append([]Subsystem{s}, defaultSubsystems...), nil
+}
+
+func Slice(slice, name string) Path {
+	if slice == "" {
+		slice = string(defaultSlice)
+	}
+	return func(subsystem Name) (string, error) {
+		return filepath.Join(slice, name), nil
+	}
+}
+
+func NewSystemd(root string) (*SystemdController, error) {
+	return &SystemdController{
+		root: root,
+	}, nil
+}
+
+type SystemdController struct {
+	root string
+}
+
+func (s *SystemdController) Name() Name {
+	return SystemdDbus
+}
+
+func (s *SystemdController) Create(path string, _ *specs.LinuxResources) error {
+	ctx := context.TODO()
+	conn, err := systemdDbus.NewWithContext(ctx)
+	if err != nil {
+		return err
+	}
+	defer conn.Close()
+	slice, name := splitName(path)
+	// We need to see if systemd can handle the delegate property
+	// Systemd will return an error if it cannot handle delegate regardless
+	// of its bool setting.
+	checkDelegate := func() {
+		canDelegate = true
+		dlSlice := newProperty("Delegate", true)
+		if _, err := conn.StartTransientUnitContext(ctx, slice, "testdelegate", []systemdDbus.Property{dlSlice}, nil); err != nil {
+			if dbusError, ok := err.(dbus.Error); ok {
+				// Starting with systemd v237, Delegate is not even a property of slices anymore,
+				// so the D-Bus call fails with "InvalidArgs" error.
+				if strings.Contains(dbusError.Name, "org.freedesktop.DBus.Error.PropertyReadOnly") || strings.Contains(dbusError.Name, "org.freedesktop.DBus.Error.InvalidArgs") {
+					canDelegate = false
+				}
+			}
+		}
+
+		_, _ = conn.StopUnitContext(ctx, slice, "testDelegate", nil)
+	}
+	once.Do(checkDelegate)
+	properties := []systemdDbus.Property{
+		systemdDbus.PropDescription("cgroup " + name),
+		systemdDbus.PropWants(slice),
+		newProperty("DefaultDependencies", false),
+		newProperty("MemoryAccounting", true),
+		newProperty("CPUAccounting", true),
+		newProperty("BlockIOAccounting", true),
+	}
+
+	// If we can delegate, we add the property back in
+	if canDelegate {
+		properties = append(properties, newProperty("Delegate", true))
+	}
+
+	ch := make(chan string)
+	_, err = conn.StartTransientUnitContext(ctx, name, "replace", properties, ch)
+	if err != nil {
+		return err
+	}
+	<-ch
+	return nil
+}
+
+func (s *SystemdController) Delete(path string) error {
+	ctx := context.TODO()
+	conn, err := systemdDbus.NewWithContext(ctx)
+	if err != nil {
+		return err
+	}
+	defer conn.Close()
+	_, name := splitName(path)
+	ch := make(chan string)
+	_, err = conn.StopUnitContext(ctx, name, "replace", ch)
+	if err != nil {
+		return err
+	}
+	<-ch
+	return nil
+}
+
+func newProperty(name string, units interface{}) systemdDbus.Property {
+	return systemdDbus.Property{
+		Name:  name,
+		Value: dbus.MakeVariant(units),
+	}
+}
+
+func splitName(path string) (slice string, unit string) {
+	slice, unit = filepath.Split(path)
+	return strings.TrimSuffix(slice, "/"), unit
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/ticks.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/ticks.go
new file mode 100644
index 00000000000..2c6fbdc0d71
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/ticks.go
@@ -0,0 +1,26 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+func getClockTicks() uint64 {
+	// The value comes from `C.sysconf(C._SC_CLK_TCK)`, and
+	// on Linux it's a constant which is safe to be hard coded,
+	// so we can avoid using cgo here.
+	// See https://github.com/containerd/cgroups/pull/12 for
+	// more details.
+	return 100
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/utils.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/utils.go
new file mode 100644
index 00000000000..2b7d5520016
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/utils.go
@@ -0,0 +1,280 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"bufio"
+	"bytes"
+	"fmt"
+	"os"
+	"path/filepath"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/containerd/cgroups/v3"
+	units "github.com/docker/go-units"
+	specs "github.com/opencontainers/runtime-spec/specs-go"
+)
+
+// defaults returns all known groups
+func defaults(root string) ([]Subsystem, error) {
+	h, err := NewHugetlb(root)
+	if err != nil && !os.IsNotExist(err) {
+		return nil, err
+	}
+	s := []Subsystem{
+		NewNamed(root, "systemd"),
+		NewFreezer(root),
+		NewPids(root),
+		NewNetCls(root),
+		NewNetPrio(root),
+		NewPerfEvent(root),
+		NewCpuset(root),
+		NewCpu(root),
+		NewCpuacct(root),
+		NewMemory(root),
+		NewBlkio(root),
+		NewRdma(root),
+	}
+	// only add the devices cgroup if we are not in a user namespace
+	// because modifications are not allowed
+	if !cgroups.RunningInUserNS() {
+		s = append(s, NewDevices(root))
+	}
+	// add the hugetlb cgroup if error wasn't due to missing hugetlb
+	// cgroup support on the host
+	if err == nil {
+		s = append(s, h)
+	}
+	return s, nil
+}
+
+// remove will remove a cgroup path handling EAGAIN and EBUSY errors and
+// retrying the remove after a exp timeout
+func remove(path string) error {
+	delay := 10 * time.Millisecond
+	for i := 0; i < 5; i++ {
+		if i != 0 {
+			time.Sleep(delay)
+			delay *= 2
+		}
+		if err := os.RemoveAll(path); err == nil {
+			return nil
+		}
+	}
+	return fmt.Errorf("cgroups: unable to remove path %q", path)
+}
+
+// readPids will read all the pids of processes or tasks in a cgroup by the provided path
+func readPids(path string, subsystem Name, pType procType) ([]Process, error) {
+	f, err := os.Open(filepath.Join(path, pType))
+	if err != nil {
+		return nil, err
+	}
+	defer f.Close()
+	var (
+		out []Process
+		s   = bufio.NewScanner(f)
+	)
+	for s.Scan() {
+		if t := s.Text(); t != "" {
+			pid, err := strconv.Atoi(t)
+			if err != nil {
+				return nil, err
+			}
+			out = append(out, Process{
+				Pid:       pid,
+				Subsystem: subsystem,
+				Path:      path,
+			})
+		}
+	}
+	if err := s.Err(); err != nil {
+		// failed to read all pids?
+		return nil, err
+	}
+	return out, nil
+}
+
+func hugePageSizes() ([]string, error) {
+	var (
+		pageSizes []string
+		sizeList  = []string{"B", "KB", "MB", "GB", "TB", "PB"}
+	)
+	files, err := os.ReadDir("/sys/kernel/mm/hugepages")
+	if err != nil {
+		return nil, err
+	}
+	for _, st := range files {
+		nameArray := strings.Split(st.Name(), "-")
+		pageSize, err := units.RAMInBytes(nameArray[1])
+		if err != nil {
+			return nil, err
+		}
+		pageSizes = append(pageSizes, units.CustomSize("%g%s", float64(pageSize), 1024.0, sizeList))
+	}
+	return pageSizes, nil
+}
+
+func readUint(path string) (uint64, error) {
+	f, err := os.Open(path)
+	if err != nil {
+		return 0, err
+	}
+	defer f.Close()
+
+	// We should only need 20 bytes for the max uint64, but for a nice power of 2
+	// lets use 32.
+	b := make([]byte, 32)
+	n, err := f.Read(b)
+	if err != nil {
+		return 0, err
+	}
+	s := string(bytes.TrimSpace(b[:n]))
+	if s == "max" {
+		// Return 0 for the max value to maintain backward compatibility.
+		return 0, nil
+	}
+	return parseUint(s, 10, 64)
+}
+
+func parseUint(s string, base, bitSize int) (uint64, error) {
+	v, err := strconv.ParseUint(s, base, bitSize)
+	if err != nil {
+		intValue, intErr := strconv.ParseInt(s, base, bitSize)
+		// 1. Handle negative values greater than MinInt64 (and)
+		// 2. Handle negative values lesser than MinInt64
+		if intErr == nil && intValue < 0 {
+			return 0, nil
+		} else if intErr != nil &&
+			intErr.(*strconv.NumError).Err == strconv.ErrRange &&
+			intValue < 0 {
+			return 0, nil
+		}
+		return 0, err
+	}
+	return v, nil
+}
+
+func parseKV(raw string) (string, uint64, error) {
+	parts := strings.Fields(raw)
+	switch len(parts) {
+	case 2:
+		v, err := parseUint(parts[1], 10, 64)
+		if err != nil {
+			return "", 0, err
+		}
+		return parts[0], v, nil
+	default:
+		return "", 0, ErrInvalidFormat
+	}
+}
+
+// ParseCgroupFile parses the given cgroup file, typically /proc/self/cgroup
+// or /proc/<pid>/cgroup, into a map of subsystems to cgroup paths, e.g.
+//
+//	"cpu": "/user.slice/user-1000.slice"
+//	"pids": "/user.slice/user-1000.slice"
+//
+// etc.
+//
+// The resulting map does not have an element for cgroup v2 unified hierarchy.
+// Use [cgroups.ParseCgroupFileUnified] to get the unified path.
+func ParseCgroupFile(path string) (map[string]string, error) {
+	x, _, err := ParseCgroupFileUnified(path)
+	return x, err
+}
+
+// ParseCgroupFileUnified returns legacy subsystem paths as the first value,
+// and returns the unified path as the second value.
+//
+// Deprecated: use [cgroups.ParseCgroupFileUnified] instead .
+func ParseCgroupFileUnified(path string) (map[string]string, string, error) {
+	return cgroups.ParseCgroupFileUnified(path)
+}
+
+func getCgroupDestination(subsystem string) (string, error) {
+	f, err := os.Open("/proc/self/mountinfo")
+	if err != nil {
+		return "", err
+	}
+	defer f.Close()
+	s := bufio.NewScanner(f)
+	for s.Scan() {
+		fields := strings.Split(s.Text(), " ")
+		if len(fields) < 10 {
+			// broken mountinfo?
+			continue
+		}
+		if fields[len(fields)-3] != "cgroup" {
+			continue
+		}
+		for _, opt := range strings.Split(fields[len(fields)-1], ",") {
+			if opt == subsystem {
+				return fields[3], nil
+			}
+		}
+	}
+	if err := s.Err(); err != nil {
+		return "", err
+	}
+	return "", ErrNoCgroupMountDestination
+}
+
+func pathers(subystems []Subsystem) []pather {
+	var out []pather
+	for _, s := range subystems {
+		if p, ok := s.(pather); ok {
+			out = append(out, p)
+		}
+	}
+	return out
+}
+
+func initializeSubsystem(s Subsystem, path Path, resources *specs.LinuxResources) error {
+	if c, ok := s.(creator); ok {
+		p, err := path(s.Name())
+		if err != nil {
+			return err
+		}
+		if err := c.Create(p, resources); err != nil {
+			return err
+		}
+	} else if c, ok := s.(pather); ok {
+		p, err := path(s.Name())
+		if err != nil {
+			return err
+		}
+		// do the default create if the group does not have a custom one
+		if err := os.MkdirAll(c.Path(p), defaultDirPerm); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func cleanPath(path string) string {
+	if path == "" {
+		return ""
+	}
+	path = filepath.Clean(path)
+	if !filepath.IsAbs(path) {
+		path, _ = filepath.Rel(string(os.PathSeparator), filepath.Clean(string(os.PathSeparator)+path))
+	}
+	return path
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup1/v1.go b/vendor/github.com/containerd/cgroups/v3/cgroup1/v1.go
new file mode 100644
index 00000000000..ce025bbd98b
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup1/v1.go
@@ -0,0 +1,73 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup1
+
+import (
+	"bufio"
+	"fmt"
+	"os"
+	"path/filepath"
+	"strings"
+)
+
+// Default returns all the groups in the default cgroups mountpoint in a single hierarchy
+func Default() ([]Subsystem, error) {
+	root, err := v1MountPoint()
+	if err != nil {
+		return nil, err
+	}
+	subsystems, err := defaults(root)
+	if err != nil {
+		return nil, err
+	}
+	var enabled []Subsystem
+	for _, s := range pathers(subsystems) {
+		// check and remove the default groups that do not exist
+		if _, err := os.Lstat(s.Path("/")); err == nil {
+			enabled = append(enabled, s)
+		}
+	}
+	return enabled, nil
+}
+
+// v1MountPoint returns the mount point where the cgroup
+// mountpoints are mounted in a single hierarchy
+func v1MountPoint() (string, error) {
+	f, err := os.Open("/proc/self/mountinfo")
+	if err != nil {
+		return "", err
+	}
+	defer f.Close()
+	scanner := bufio.NewScanner(f)
+	for scanner.Scan() {
+		var (
+			text      = scanner.Text()
+			fields    = strings.Split(text, " ")
+			numFields = len(fields)
+		)
+		if numFields < 10 {
+			return "", fmt.Errorf("mountinfo: bad entry %q", text)
+		}
+		if fields[numFields-3] == "cgroup" {
+			return filepath.Dir(fields[4]), nil
+		}
+	}
+	if err := scanner.Err(); err != nil {
+		return "", err
+	}
+	return "", ErrMountPointNotExist
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/cpu.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/cpu.go
new file mode 100644
index 00000000000..dcb253db562
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/cpu.go
@@ -0,0 +1,83 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+import (
+	"math"
+	"strconv"
+	"strings"
+)
+
+type CPUMax string
+
+func NewCPUMax(quota *int64, period *uint64) CPUMax {
+	max := "max"
+	if quota != nil {
+		max = strconv.FormatInt(*quota, 10)
+	}
+	return CPUMax(strings.Join([]string{max, strconv.FormatUint(*period, 10)}, " "))
+}
+
+type CPU struct {
+	Weight *uint64
+	Max    CPUMax
+	Cpus   string
+	Mems   string
+}
+
+func (c CPUMax) extractQuotaAndPeriod() (int64, uint64) {
+	var (
+		quota  int64
+		period uint64
+	)
+	values := strings.Split(string(c), " ")
+	if values[0] == "max" {
+		quota = math.MaxInt64
+	} else {
+		quota, _ = strconv.ParseInt(values[0], 10, 64)
+	}
+	period, _ = strconv.ParseUint(values[1], 10, 64)
+	return quota, period
+}
+
+func (r *CPU) Values() (o []Value) {
+	if r.Weight != nil {
+		o = append(o, Value{
+			filename: "cpu.weight",
+			value:    *r.Weight,
+		})
+	}
+	if r.Max != "" {
+		o = append(o, Value{
+			filename: "cpu.max",
+			value:    r.Max,
+		})
+	}
+	if r.Cpus != "" {
+		o = append(o, Value{
+			filename: "cpuset.cpus",
+			value:    r.Cpus,
+		})
+	}
+	if r.Mems != "" {
+		o = append(o, Value{
+			filename: "cpuset.mems",
+			value:    r.Mems,
+		})
+	}
+	return o
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/devicefilter.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/devicefilter.go
new file mode 100644
index 00000000000..0cd5f7f3ddf
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/devicefilter.go
@@ -0,0 +1,200 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+// Devicefilter containes eBPF device filter program
+//
+// The implementation is based on https://github.com/containers/crun/blob/0.10.2/src/libcrun/ebpf.c
+//
+// Although ebpf.c is originally licensed under LGPL-3.0-or-later, the author (Giuseppe Scrivano)
+// agreed to relicense the file in Apache License 2.0: https://github.com/opencontainers/runc/issues/2144#issuecomment-543116397
+//
+// This particular Go implementation based on runc version
+// https://github.com/opencontainers/runc/blob/master/libcontainer/cgroups/ebpf/devicefilter/devicefilter.go
+
+package cgroup2
+
+import (
+	"errors"
+	"fmt"
+	"math"
+
+	"github.com/cilium/ebpf/asm"
+	"github.com/opencontainers/runtime-spec/specs-go"
+	"golang.org/x/sys/unix"
+)
+
+const (
+	// license string format is same as kernel MODULE_LICENSE macro
+	license = "Apache"
+)
+
+// DeviceFilter returns eBPF device filter program and its license string
+func DeviceFilter(devices []specs.LinuxDeviceCgroup) (asm.Instructions, string, error) {
+	p := &program{}
+	p.init()
+	for i := len(devices) - 1; i >= 0; i-- {
+		if err := p.appendDevice(devices[i]); err != nil {
+			return nil, "", err
+		}
+	}
+	insts, err := p.finalize()
+	return insts, license, err
+}
+
+type program struct {
+	insts       asm.Instructions
+	hasWildCard bool
+	blockID     int
+}
+
+func (p *program) init() {
+	// struct bpf_cgroup_dev_ctx: https://elixir.bootlin.com/linux/v5.3.6/source/include/uapi/linux/bpf.h#L3423
+	/*
+		u32 access_type
+		u32 major
+		u32 minor
+	*/
+	// R2 <- type (lower 16 bit of u32 access_type at R1[0])
+	p.insts = append(p.insts,
+		asm.LoadMem(asm.R2, asm.R1, 0, asm.Half))
+
+	// R3 <- access (upper 16 bit of u32 access_type at R1[0])
+	p.insts = append(p.insts,
+		asm.LoadMem(asm.R3, asm.R1, 0, asm.Word),
+		// RSh: bitwise shift right
+		asm.RSh.Imm32(asm.R3, 16))
+
+	// R4 <- major (u32 major at R1[4])
+	p.insts = append(p.insts,
+		asm.LoadMem(asm.R4, asm.R1, 4, asm.Word))
+
+	// R5 <- minor (u32 minor at R1[8])
+	p.insts = append(p.insts,
+		asm.LoadMem(asm.R5, asm.R1, 8, asm.Word))
+}
+
+// appendDevice needs to be called from the last element of OCI linux.resources.devices to the head element.
+func (p *program) appendDevice(dev specs.LinuxDeviceCgroup) error {
+	if p.blockID < 0 {
+		return errors.New("the program is finalized")
+	}
+	if p.hasWildCard {
+		// All entries after wildcard entry are ignored
+		return nil
+	}
+
+	bpfType := int32(-1)
+	hasType := true
+	switch dev.Type {
+	case string('c'):
+		bpfType = int32(unix.BPF_DEVCG_DEV_CHAR)
+	case string('b'):
+		bpfType = int32(unix.BPF_DEVCG_DEV_BLOCK)
+	case string('a'):
+		hasType = false
+	default:
+		// if not specified in OCI json, typ is set to DeviceTypeAll
+		return fmt.Errorf("invalid DeviceType %q", dev.Type)
+	}
+	if *dev.Major > math.MaxUint32 {
+		return fmt.Errorf("invalid major %d", *dev.Major)
+	}
+	if *dev.Minor > math.MaxUint32 {
+		return fmt.Errorf("invalid minor %d", *dev.Major)
+	}
+	hasMajor := *dev.Major >= 0 // if not specified in OCI json, major is set to -1
+	hasMinor := *dev.Minor >= 0
+	bpfAccess := int32(0)
+	for _, r := range dev.Access {
+		switch r {
+		case 'r':
+			bpfAccess |= unix.BPF_DEVCG_ACC_READ
+		case 'w':
+			bpfAccess |= unix.BPF_DEVCG_ACC_WRITE
+		case 'm':
+			bpfAccess |= unix.BPF_DEVCG_ACC_MKNOD
+		default:
+			return fmt.Errorf("unknown device access %v", r)
+		}
+	}
+	// If the access is rwm, skip the check.
+	hasAccess := bpfAccess != (unix.BPF_DEVCG_ACC_READ | unix.BPF_DEVCG_ACC_WRITE | unix.BPF_DEVCG_ACC_MKNOD)
+
+	blockSym := fmt.Sprintf("block-%d", p.blockID)
+	nextBlockSym := fmt.Sprintf("block-%d", p.blockID+1)
+	prevBlockLastIdx := len(p.insts) - 1
+	if hasType {
+		p.insts = append(p.insts,
+			// if (R2 != bpfType) goto next
+			asm.JNE.Imm(asm.R2, bpfType, nextBlockSym),
+		)
+	}
+	if hasAccess {
+		p.insts = append(p.insts,
+			// if (R3 & bpfAccess == 0 /* use R1 as a temp var */) goto next
+			asm.Mov.Reg32(asm.R1, asm.R3),
+			asm.And.Imm32(asm.R1, bpfAccess),
+			asm.JEq.Imm(asm.R1, 0, nextBlockSym),
+		)
+	}
+	if hasMajor {
+		p.insts = append(p.insts,
+			// if (R4 != major) goto next
+			asm.JNE.Imm(asm.R4, int32(*dev.Major), nextBlockSym),
+		)
+	}
+	if hasMinor {
+		p.insts = append(p.insts,
+			// if (R5 != minor) goto next
+			asm.JNE.Imm(asm.R5, int32(*dev.Minor), nextBlockSym),
+		)
+	}
+	if !hasType && !hasAccess && !hasMajor && !hasMinor {
+		p.hasWildCard = true
+	}
+	p.insts = append(p.insts, acceptBlock(dev.Allow)...)
+	// set blockSym to the first instruction we added in this iteration
+	p.insts[prevBlockLastIdx+1] = p.insts[prevBlockLastIdx+1].WithSymbol(blockSym)
+	p.blockID++
+	return nil
+}
+
+func (p *program) finalize() (asm.Instructions, error) {
+	if p.hasWildCard {
+		// acceptBlock with asm.Return() is already inserted
+		return p.insts, nil
+	}
+	blockSym := fmt.Sprintf("block-%d", p.blockID)
+	p.insts = append(p.insts,
+		// R0 <- 0
+		asm.Mov.Imm32(asm.R0, 0).WithSymbol(blockSym),
+		asm.Return(),
+	)
+	p.blockID = -1
+	return p.insts, nil
+}
+
+func acceptBlock(accept bool) asm.Instructions {
+	v := int32(0)
+	if accept {
+		v = 1
+	}
+	return []asm.Instruction{
+		// R0 <- v
+		asm.Mov.Imm32(asm.R0, v),
+		asm.Return(),
+	}
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/ebpf.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/ebpf.go
new file mode 100644
index 00000000000..503a147bbdc
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/ebpf.go
@@ -0,0 +1,96 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+import (
+	"fmt"
+
+	"github.com/cilium/ebpf"
+	"github.com/cilium/ebpf/asm"
+	"github.com/cilium/ebpf/link"
+	"github.com/opencontainers/runtime-spec/specs-go"
+	"golang.org/x/sys/unix"
+)
+
+// LoadAttachCgroupDeviceFilter installs eBPF device filter program to /sys/fs/cgroup/<foo> directory.
+//
+// Requires the system to be running in cgroup2 unified-mode with kernel >= 4.15 .
+//
+// https://github.com/torvalds/linux/commit/ebc614f687369f9df99828572b1d85a7c2de3d92
+func LoadAttachCgroupDeviceFilter(insts asm.Instructions, license string, dirFD int) (func() error, error) {
+	nilCloser := func() error {
+		return nil
+	}
+	spec := &ebpf.ProgramSpec{
+		Type:         ebpf.CGroupDevice,
+		Instructions: insts,
+		License:      license,
+	}
+	prog, err := ebpf.NewProgram(spec)
+	if err != nil {
+		return nilCloser, err
+	}
+	err = link.RawAttachProgram(link.RawAttachProgramOptions{
+		Target:  dirFD,
+		Program: prog,
+		Attach:  ebpf.AttachCGroupDevice,
+		Flags:   unix.BPF_F_ALLOW_MULTI,
+	})
+	if err != nil {
+		return nilCloser, fmt.Errorf("failed to call BPF_PROG_ATTACH (BPF_CGROUP_DEVICE, BPF_F_ALLOW_MULTI): %w", err)
+	}
+	closer := func() error {
+		err = link.RawDetachProgram(link.RawDetachProgramOptions{
+			Target:  dirFD,
+			Program: prog,
+			Attach:  ebpf.AttachCGroupDevice,
+		})
+		if err != nil {
+			return fmt.Errorf("failed to call BPF_PROG_DETACH (BPF_CGROUP_DEVICE): %w", err)
+		}
+		return nil
+	}
+	return closer, nil
+}
+
+func isRWM(cgroupPermissions string) bool {
+	r := false
+	w := false
+	m := false
+	for _, rn := range cgroupPermissions {
+		switch rn {
+		case 'r':
+			r = true
+		case 'w':
+			w = true
+		case 'm':
+			m = true
+		}
+	}
+	return r && w && m
+}
+
+// the logic is from runc
+// https://github.com/opencontainers/runc/blob/master/libcontainer/cgroups/fs/devices_v2.go#L44
+func canSkipEBPFError(devices []specs.LinuxDeviceCgroup) bool {
+	for _, dev := range devices {
+		if dev.Allow || !isRWM(dev.Access) {
+			return false
+		}
+	}
+	return true
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/errors.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/errors.go
new file mode 100644
index 00000000000..f57e15e54df
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/errors.go
@@ -0,0 +1,26 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+import (
+	"errors"
+)
+
+var (
+	ErrInvalidFormat    = errors.New("cgroups: parsing file with invalid format failed")
+	ErrInvalidGroupPath = errors.New("cgroups: invalid group path")
+)
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/hugetlb.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/hugetlb.go
new file mode 100644
index 00000000000..b476b49ff2f
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/hugetlb.go
@@ -0,0 +1,37 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+import "strings"
+
+type HugeTlb []HugeTlbEntry
+
+type HugeTlbEntry struct {
+	HugePageSize string
+	Limit        uint64
+}
+
+func (r *HugeTlb) Values() (o []Value) {
+	for _, e := range *r {
+		o = append(o, Value{
+			filename: strings.Join([]string{"hugetlb", e.HugePageSize, "max"}, "."),
+			value:    e.Limit,
+		})
+	}
+
+	return o
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/io.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/io.go
new file mode 100644
index 00000000000..b70dd8ef5d0
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/io.go
@@ -0,0 +1,64 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+import "fmt"
+
+type IOType string
+
+const (
+	ReadBPS   IOType = "rbps"
+	WriteBPS  IOType = "wbps"
+	ReadIOPS  IOType = "riops"
+	WriteIOPS IOType = "wiops"
+)
+
+type BFQ struct {
+	Weight uint16
+}
+
+type Entry struct {
+	Type  IOType
+	Major int64
+	Minor int64
+	Rate  uint64
+}
+
+func (e Entry) String() string {
+	return fmt.Sprintf("%d:%d %s=%d", e.Major, e.Minor, e.Type, e.Rate)
+}
+
+type IO struct {
+	BFQ BFQ
+	Max []Entry
+}
+
+func (i *IO) Values() (o []Value) {
+	if i.BFQ.Weight != 0 {
+		o = append(o, Value{
+			filename: "io.bfq.weight",
+			value:    i.BFQ.Weight,
+		})
+	}
+	for _, e := range i.Max {
+		o = append(o, Value{
+			filename: "io.max",
+			value:    e.String(),
+		})
+	}
+	return o
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/manager.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/manager.go
new file mode 100644
index 00000000000..e540322b7fd
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/manager.go
@@ -0,0 +1,984 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+import (
+	"bufio"
+	"context"
+	"errors"
+	"fmt"
+	"io/fs"
+	"math"
+	"os"
+	"path/filepath"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/containerd/cgroups/v3/cgroup2/stats"
+
+	systemdDbus "github.com/coreos/go-systemd/v22/dbus"
+	"github.com/godbus/dbus/v5"
+	"github.com/opencontainers/runtime-spec/specs-go"
+	"github.com/sirupsen/logrus"
+	"golang.org/x/sys/unix"
+)
+
+const (
+	subtreeControl     = "cgroup.subtree_control"
+	controllersFile    = "cgroup.controllers"
+	killFile           = "cgroup.kill"
+	typeFile           = "cgroup.type"
+	defaultCgroup2Path = "/sys/fs/cgroup"
+	defaultSlice       = "system.slice"
+)
+
+var canDelegate bool
+
+type Event struct {
+	Low     uint64
+	High    uint64
+	Max     uint64
+	OOM     uint64
+	OOMKill uint64
+}
+
+// Resources for a cgroups v2 unified hierarchy
+type Resources struct {
+	CPU     *CPU
+	Memory  *Memory
+	Pids    *Pids
+	IO      *IO
+	RDMA    *RDMA
+	HugeTlb *HugeTlb
+	// When len(Devices) is zero, devices are not controlled
+	Devices []specs.LinuxDeviceCgroup
+}
+
+// Values returns the raw filenames and values that
+// can be written to the unified hierarchy
+func (r *Resources) Values() (o []Value) {
+	if r.CPU != nil {
+		o = append(o, r.CPU.Values()...)
+	}
+	if r.Memory != nil {
+		o = append(o, r.Memory.Values()...)
+	}
+	if r.Pids != nil {
+		o = append(o, r.Pids.Values()...)
+	}
+	if r.IO != nil {
+		o = append(o, r.IO.Values()...)
+	}
+	if r.RDMA != nil {
+		o = append(o, r.RDMA.Values()...)
+	}
+	if r.HugeTlb != nil {
+		o = append(o, r.HugeTlb.Values()...)
+	}
+	return o
+}
+
+// EnabledControllers returns the list of all not nil resource controllers
+func (r *Resources) EnabledControllers() (c []string) {
+	if r.CPU != nil {
+		c = append(c, "cpu")
+		if r.CPU.Cpus != "" || r.CPU.Mems != "" {
+			c = append(c, "cpuset")
+		}
+	}
+	if r.Memory != nil {
+		c = append(c, "memory")
+	}
+	if r.Pids != nil {
+		c = append(c, "pids")
+	}
+	if r.IO != nil {
+		c = append(c, "io")
+	}
+	if r.RDMA != nil {
+		c = append(c, "rdma")
+	}
+	if r.HugeTlb != nil {
+		c = append(c, "hugetlb")
+	}
+	return
+}
+
+// Value of a cgroup setting
+type Value struct {
+	filename string
+	value    interface{}
+}
+
+// write the value to the full, absolute path, of a unified hierarchy
+func (c *Value) write(path string, perm os.FileMode) error {
+	var data []byte
+	switch t := c.value.(type) {
+	case uint64:
+		data = []byte(strconv.FormatUint(t, 10))
+	case uint16:
+		data = []byte(strconv.FormatUint(uint64(t), 10))
+	case int64:
+		data = []byte(strconv.FormatInt(t, 10))
+	case []byte:
+		data = t
+	case string:
+		data = []byte(t)
+	case CPUMax:
+		data = []byte(t)
+	default:
+		return ErrInvalidFormat
+	}
+
+	return os.WriteFile(
+		filepath.Join(path, c.filename),
+		data,
+		perm,
+	)
+}
+
+func writeValues(path string, values []Value) error {
+	for _, o := range values {
+		if err := o.write(path, defaultFilePerm); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func NewManager(mountpoint string, group string, resources *Resources) (*Manager, error) {
+	if resources == nil {
+		return nil, errors.New("resources reference is nil")
+	}
+	if err := VerifyGroupPath(group); err != nil {
+		return nil, err
+	}
+	path := filepath.Join(mountpoint, group)
+	if err := os.MkdirAll(path, defaultDirPerm); err != nil {
+		return nil, err
+	}
+	m := Manager{
+		unifiedMountpoint: mountpoint,
+		path:              path,
+	}
+	if err := m.ToggleControllers(resources.EnabledControllers(), Enable); err != nil {
+		// clean up cgroup dir on failure
+		os.Remove(path)
+		return nil, err
+	}
+	if err := setResources(path, resources); err != nil {
+		os.Remove(path)
+		return nil, err
+	}
+	return &m, nil
+}
+
+type InitConfig struct {
+	mountpoint string
+}
+
+type InitOpts func(c *InitConfig) error
+
+// WithMountpoint sets the unified mountpoint. The default path is /sys/fs/cgroup.
+func WithMountpoint(path string) InitOpts {
+	return func(c *InitConfig) error {
+		c.mountpoint = path
+		return nil
+	}
+}
+
+// Load a cgroup.
+func Load(group string, opts ...InitOpts) (*Manager, error) {
+	c := InitConfig{mountpoint: defaultCgroup2Path}
+	for _, opt := range opts {
+		if err := opt(&c); err != nil {
+			return nil, err
+		}
+	}
+
+	if err := VerifyGroupPath(group); err != nil {
+		return nil, err
+	}
+	path := filepath.Join(c.mountpoint, group)
+	return &Manager{
+		unifiedMountpoint: c.mountpoint,
+		path:              path,
+	}, nil
+}
+
+type Manager struct {
+	unifiedMountpoint string
+	path              string
+}
+
+func setResources(path string, resources *Resources) error {
+	if resources != nil {
+		if err := writeValues(path, resources.Values()); err != nil {
+			return err
+		}
+		if err := setDevices(path, resources.Devices); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+// CgroupType represents the types a cgroup can be.
+type CgroupType string
+
+const (
+	Domain   CgroupType = "domain"
+	Threaded CgroupType = "threaded"
+)
+
+func (c *Manager) GetType() (CgroupType, error) {
+	val, err := os.ReadFile(filepath.Join(c.path, typeFile))
+	if err != nil {
+		return "", err
+	}
+	trimmed := strings.TrimSpace(string(val))
+	return CgroupType(trimmed), nil
+}
+
+func (c *Manager) SetType(cgType CgroupType) error {
+	// NOTE: We could abort if cgType != Threaded here as currently
+	// it's not possible to revert back to domain, but not sure
+	// it's worth being that opinionated, especially if that may
+	// ever change.
+	v := Value{
+		filename: typeFile,
+		value:    string(cgType),
+	}
+	return writeValues(c.path, []Value{v})
+}
+
+func (c *Manager) RootControllers() ([]string, error) {
+	b, err := os.ReadFile(filepath.Join(c.unifiedMountpoint, controllersFile))
+	if err != nil {
+		return nil, err
+	}
+	return strings.Fields(string(b)), nil
+}
+
+func (c *Manager) Controllers() ([]string, error) {
+	b, err := os.ReadFile(filepath.Join(c.path, controllersFile))
+	if err != nil {
+		return nil, err
+	}
+	return strings.Fields(string(b)), nil
+}
+
+func (c *Manager) Update(resources *Resources) error {
+	return setResources(c.path, resources)
+}
+
+type ControllerToggle int
+
+const (
+	Enable ControllerToggle = iota + 1
+	Disable
+)
+
+func toggleFunc(controllers []string, prefix string) []string {
+	out := make([]string, len(controllers))
+	for i, c := range controllers {
+		out[i] = prefix + c
+	}
+	return out
+}
+
+func (c *Manager) ToggleControllers(controllers []string, t ControllerToggle) error {
+	// when c.path is like /foo/bar/baz, the following files need to be written:
+	// * /sys/fs/cgroup/cgroup.subtree_control
+	// * /sys/fs/cgroup/foo/cgroup.subtree_control
+	// * /sys/fs/cgroup/foo/bar/cgroup.subtree_control
+	// Note that /sys/fs/cgroup/foo/bar/baz/cgroup.subtree_control does not need to be written.
+	split := strings.Split(c.path, "/")
+	var lastErr error
+	for i := range split {
+		f := strings.Join(split[:i], "/")
+		if !strings.HasPrefix(f, c.unifiedMountpoint) || f == c.path {
+			continue
+		}
+		filePath := filepath.Join(f, subtreeControl)
+		if err := c.writeSubtreeControl(filePath, controllers, t); err != nil {
+			// When running as rootless, the user may face EPERM on parent groups, but it is neglible when the
+			// controller is already written.
+			// So we only return the last error.
+			lastErr = fmt.Errorf("failed to write subtree controllers %+v to %q: %w", controllers, filePath, err)
+		} else {
+			lastErr = nil
+		}
+	}
+	return lastErr
+}
+
+func (c *Manager) writeSubtreeControl(filePath string, controllers []string, t ControllerToggle) error {
+	f, err := os.OpenFile(filePath, os.O_WRONLY, 0)
+	if err != nil {
+		return err
+	}
+	defer f.Close()
+	switch t {
+	case Enable:
+		controllers = toggleFunc(controllers, "+")
+	case Disable:
+		controllers = toggleFunc(controllers, "-")
+	}
+	_, err = f.WriteString(strings.Join(controllers, " "))
+	return err
+}
+
+func (c *Manager) NewChild(name string, resources *Resources) (*Manager, error) {
+	if strings.HasPrefix(name, "/") {
+		return nil, errors.New("name must be relative")
+	}
+	path := filepath.Join(c.path, name)
+	if err := os.MkdirAll(path, defaultDirPerm); err != nil {
+		return nil, err
+	}
+	m := Manager{
+		unifiedMountpoint: c.unifiedMountpoint,
+		path:              path,
+	}
+	if resources != nil {
+		if err := m.ToggleControllers(resources.EnabledControllers(), Enable); err != nil {
+			// clean up cgroup dir on failure
+			os.Remove(path)
+			return nil, err
+		}
+	}
+	if err := setResources(path, resources); err != nil {
+		// clean up cgroup dir on failure
+		os.Remove(path)
+		return nil, err
+	}
+	return &m, nil
+}
+
+func (c *Manager) AddProc(pid uint64) error {
+	v := Value{
+		filename: cgroupProcs,
+		value:    pid,
+	}
+	return writeValues(c.path, []Value{v})
+}
+
+func (c *Manager) AddThread(tid uint64) error {
+	v := Value{
+		filename: cgroupThreads,
+		value:    tid,
+	}
+	return writeValues(c.path, []Value{v})
+}
+
+// Kill will try to forcibly exit all of the processes in the cgroup. This is
+// equivalent to sending a SIGKILL to every process. On kernels 5.14 and greater
+// this will use the cgroup.kill file, on anything that doesn't have the cgroup.kill
+// file, a manual process of freezing -> sending a SIGKILL to every process -> thawing
+// will be used.
+func (c *Manager) Kill() error {
+	v := Value{
+		filename: killFile,
+		value:    "1",
+	}
+	err := writeValues(c.path, []Value{v})
+	if err == nil {
+		return nil
+	}
+	logrus.Warnf("falling back to slower kill implementation: %s", err)
+	// Fallback to slow method.
+	return c.fallbackKill()
+}
+
+// fallbackKill is a slower fallback to the more modern (kernels 5.14+)
+// approach of writing to the cgroup.kill file. This is heavily pulled
+// from runc's same approach (in signalAllProcesses), with the only differences
+// being this is just tailored to the API exposed in this library, and we don't
+// need to care about signals other than SIGKILL.
+//
+// https://github.com/opencontainers/runc/blob/8da0a0b5675764feaaaaad466f6567a9983fcd08/libcontainer/init_linux.go#L523-L529
+func (c *Manager) fallbackKill() error {
+	if err := c.Freeze(); err != nil {
+		logrus.Warn(err)
+	}
+	pids, err := c.Procs(true)
+	if err != nil {
+		if err := c.Thaw(); err != nil {
+			logrus.Warn(err)
+		}
+		return err
+	}
+	var procs []*os.Process
+	for _, pid := range pids {
+		p, err := os.FindProcess(int(pid))
+		if err != nil {
+			logrus.Warn(err)
+			continue
+		}
+		procs = append(procs, p)
+		if err := p.Signal(unix.SIGKILL); err != nil {
+			logrus.Warn(err)
+		}
+	}
+	if err := c.Thaw(); err != nil {
+		logrus.Warn(err)
+	}
+
+	subreaper, err := getSubreaper()
+	if err != nil {
+		// The error here means that PR_GET_CHILD_SUBREAPER is not
+		// supported because this code might run on a kernel older
+		// than 3.4. We don't want to throw an error in that case,
+		// and we simplify things, considering there is no subreaper
+		// set.
+		subreaper = 0
+	}
+
+	for _, p := range procs {
+		// In case a subreaper has been setup, this code must not
+		// wait for the process. Otherwise, we cannot be sure the
+		// current process will be reaped by the subreaper, while
+		// the subreaper might be waiting for this process in order
+		// to retrieve its exit code.
+		if subreaper == 0 {
+			if _, err := p.Wait(); err != nil {
+				if !errors.Is(err, unix.ECHILD) {
+					logrus.Warnf("wait on pid %d failed: %s", p.Pid, err)
+				}
+			}
+		}
+	}
+	return nil
+}
+
+func (c *Manager) Delete() error {
+	// kernel prevents cgroups with running process from being removed, check the tree is empty
+	processes, err := c.Procs(true)
+	if err != nil {
+		return err
+	}
+	if len(processes) > 0 {
+		return fmt.Errorf("cgroups: unable to remove path %q: still contains running processes", c.path)
+	}
+	return remove(c.path)
+}
+
+func (c *Manager) getTasks(recursive bool, tType string) ([]uint64, error) {
+	var tasks []uint64
+	err := filepath.Walk(c.path, func(p string, info fs.FileInfo, err error) error {
+		if err != nil {
+			return err
+		}
+		if !recursive && info.IsDir() {
+			if p == c.path {
+				return nil
+			}
+			return filepath.SkipDir
+		}
+		_, name := filepath.Split(p)
+		if name != tType {
+			return nil
+		}
+		curTasks, err := parseCgroupTasksFile(p)
+		if err != nil {
+			return err
+		}
+		tasks = append(tasks, curTasks...)
+		return nil
+	})
+	return tasks, err
+}
+
+func (c *Manager) Procs(recursive bool) ([]uint64, error) {
+	return c.getTasks(recursive, cgroupProcs)
+}
+
+func (c *Manager) Threads(recursive bool) ([]uint64, error) {
+	return c.getTasks(recursive, cgroupThreads)
+}
+
+func (c *Manager) MoveTo(destination *Manager) error {
+	processes, err := c.Procs(true)
+	if err != nil {
+		return err
+	}
+	for _, p := range processes {
+		if err := destination.AddProc(p); err != nil {
+			if strings.Contains(err.Error(), "no such process") {
+				continue
+			}
+			return err
+		}
+	}
+	return nil
+}
+
+func (c *Manager) Stat() (*stats.Metrics, error) {
+	controllers, err := c.Controllers()
+	if err != nil {
+		return nil, err
+	}
+	// Sizing this avoids an allocation to increase the map at runtime;
+	// currently the default bucket size is 8 and we put 40+ elements
+	// in it so we'd always end up allocating.
+	out := make(map[string]uint64, 50)
+	for _, controller := range controllers {
+		switch controller {
+		case "cpu", "memory":
+			if err := readKVStatsFile(c.path, controller+".stat", out); err != nil {
+				if os.IsNotExist(err) {
+					continue
+				}
+				return nil, err
+			}
+		}
+	}
+	memoryEvents := make(map[string]uint64)
+	if err := readKVStatsFile(c.path, "memory.events", memoryEvents); err != nil {
+		if !os.IsNotExist(err) {
+			return nil, err
+		}
+	}
+
+	var metrics stats.Metrics
+	metrics.Pids = &stats.PidsStat{
+		Current: getStatFileContentUint64(filepath.Join(c.path, "pids.current")),
+		Limit:   getStatFileContentUint64(filepath.Join(c.path, "pids.max")),
+	}
+	metrics.CPU = &stats.CPUStat{
+		UsageUsec:     out["usage_usec"],
+		UserUsec:      out["user_usec"],
+		SystemUsec:    out["system_usec"],
+		NrPeriods:     out["nr_periods"],
+		NrThrottled:   out["nr_throttled"],
+		ThrottledUsec: out["throttled_usec"],
+		PSI:           getStatPSIFromFile(filepath.Join(c.path, "cpu.pressure")),
+	}
+	metrics.Memory = &stats.MemoryStat{
+		Anon:                  out["anon"],
+		File:                  out["file"],
+		KernelStack:           out["kernel_stack"],
+		Slab:                  out["slab"],
+		Sock:                  out["sock"],
+		Shmem:                 out["shmem"],
+		FileMapped:            out["file_mapped"],
+		FileDirty:             out["file_dirty"],
+		FileWriteback:         out["file_writeback"],
+		AnonThp:               out["anon_thp"],
+		InactiveAnon:          out["inactive_anon"],
+		ActiveAnon:            out["active_anon"],
+		InactiveFile:          out["inactive_file"],
+		ActiveFile:            out["active_file"],
+		Unevictable:           out["unevictable"],
+		SlabReclaimable:       out["slab_reclaimable"],
+		SlabUnreclaimable:     out["slab_unreclaimable"],
+		Pgfault:               out["pgfault"],
+		Pgmajfault:            out["pgmajfault"],
+		WorkingsetRefault:     out["workingset_refault"],
+		WorkingsetActivate:    out["workingset_activate"],
+		WorkingsetNodereclaim: out["workingset_nodereclaim"],
+		Pgrefill:              out["pgrefill"],
+		Pgscan:                out["pgscan"],
+		Pgsteal:               out["pgsteal"],
+		Pgactivate:            out["pgactivate"],
+		Pgdeactivate:          out["pgdeactivate"],
+		Pglazyfree:            out["pglazyfree"],
+		Pglazyfreed:           out["pglazyfreed"],
+		ThpFaultAlloc:         out["thp_fault_alloc"],
+		ThpCollapseAlloc:      out["thp_collapse_alloc"],
+		Usage:                 getStatFileContentUint64(filepath.Join(c.path, "memory.current")),
+		UsageLimit:            getStatFileContentUint64(filepath.Join(c.path, "memory.max")),
+		MaxUsage:              getStatFileContentUint64(filepath.Join(c.path, "memory.peak")),
+		SwapUsage:             getStatFileContentUint64(filepath.Join(c.path, "memory.swap.current")),
+		SwapLimit:             getStatFileContentUint64(filepath.Join(c.path, "memory.swap.max")),
+		SwapMaxUsage:          getStatFileContentUint64(filepath.Join(c.path, "memory.swap.peak")),
+		PSI:                   getStatPSIFromFile(filepath.Join(c.path, "memory.pressure")),
+	}
+	if len(memoryEvents) > 0 {
+		metrics.MemoryEvents = &stats.MemoryEvents{
+			Low:     memoryEvents["low"],
+			High:    memoryEvents["high"],
+			Max:     memoryEvents["max"],
+			Oom:     memoryEvents["oom"],
+			OomKill: memoryEvents["oom_kill"],
+		}
+	}
+	metrics.Io = &stats.IOStat{
+		Usage: readIoStats(c.path),
+		PSI:   getStatPSIFromFile(filepath.Join(c.path, "io.pressure")),
+	}
+	metrics.Rdma = &stats.RdmaStat{
+		Current: rdmaStats(filepath.Join(c.path, "rdma.current")),
+		Limit:   rdmaStats(filepath.Join(c.path, "rdma.max")),
+	}
+	metrics.Hugetlb = readHugeTlbStats(c.path)
+
+	return &metrics, nil
+}
+
+func readKVStatsFile(path string, file string, out map[string]uint64) error {
+	f, err := os.Open(filepath.Join(path, file))
+	if err != nil {
+		return err
+	}
+	defer f.Close()
+
+	s := bufio.NewScanner(f)
+	for s.Scan() {
+		name, value, err := parseKV(s.Text())
+		if err != nil {
+			return fmt.Errorf("error while parsing %s (line=%q): %w", filepath.Join(path, file), s.Text(), err)
+		}
+		out[name] = value
+	}
+	return s.Err()
+}
+
+func (c *Manager) Freeze() error {
+	return c.freeze(c.path, Frozen)
+}
+
+func (c *Manager) Thaw() error {
+	return c.freeze(c.path, Thawed)
+}
+
+func (c *Manager) freeze(path string, state State) error {
+	values := state.Values()
+	for {
+		if err := writeValues(path, values); err != nil {
+			return err
+		}
+		current, err := fetchState(path)
+		if err != nil {
+			return err
+		}
+		if current == state {
+			return nil
+		}
+		time.Sleep(1 * time.Millisecond)
+	}
+}
+
+func (c *Manager) isCgroupEmpty() bool {
+	// In case of any error we return true so that we exit and don't leak resources
+	out := make(map[string]uint64)
+	if err := readKVStatsFile(c.path, "cgroup.events", out); err != nil {
+		return true
+	}
+	if v, ok := out["populated"]; ok {
+		return v == 0
+	}
+	return true
+}
+
+// MemoryEventFD returns inotify file descriptor and 'memory.events' inotify watch descriptor
+func (c *Manager) MemoryEventFD() (int, uint32, error) {
+	fpath := filepath.Join(c.path, "memory.events")
+	fd, err := unix.InotifyInit()
+	if err != nil {
+		return 0, 0, errors.New("failed to create inotify fd")
+	}
+	wd, err := unix.InotifyAddWatch(fd, fpath, unix.IN_MODIFY)
+	if err != nil {
+		unix.Close(fd)
+		return 0, 0, fmt.Errorf("failed to add inotify watch for %q: %w", fpath, err)
+	}
+	// monitor to detect process exit/cgroup deletion
+	evpath := filepath.Join(c.path, "cgroup.events")
+	if _, err = unix.InotifyAddWatch(fd, evpath, unix.IN_MODIFY); err != nil {
+		unix.Close(fd)
+		return 0, 0, fmt.Errorf("failed to add inotify watch for %q: %w", evpath, err)
+	}
+
+	return fd, uint32(wd), nil
+}
+
+func (c *Manager) EventChan() (<-chan Event, <-chan error) {
+	ec := make(chan Event)
+	errCh := make(chan error, 1)
+	go c.waitForEvents(ec, errCh)
+
+	return ec, errCh
+}
+
+func (c *Manager) waitForEvents(ec chan<- Event, errCh chan<- error) {
+	defer close(errCh)
+
+	fd, _, err := c.MemoryEventFD()
+	if err != nil {
+		errCh <- err
+		return
+	}
+	defer unix.Close(fd)
+
+	for {
+		buffer := make([]byte, unix.SizeofInotifyEvent*10)
+		bytesRead, err := unix.Read(fd, buffer)
+		if err != nil {
+			errCh <- err
+			return
+		}
+		if bytesRead >= unix.SizeofInotifyEvent {
+			out := make(map[string]uint64)
+			if err := readKVStatsFile(c.path, "memory.events", out); err != nil {
+				// When cgroup is deleted read may return -ENODEV instead of -ENOENT from open.
+				if _, statErr := os.Lstat(filepath.Join(c.path, "memory.events")); !os.IsNotExist(statErr) {
+					errCh <- err
+				}
+				return
+			}
+			ec <- Event{
+				Low:     out["low"],
+				High:    out["high"],
+				Max:     out["max"],
+				OOM:     out["oom"],
+				OOMKill: out["oom_kill"],
+			}
+			if c.isCgroupEmpty() {
+				return
+			}
+		}
+	}
+}
+
+func setDevices(path string, devices []specs.LinuxDeviceCgroup) error {
+	if len(devices) == 0 {
+		return nil
+	}
+	insts, license, err := DeviceFilter(devices)
+	if err != nil {
+		return err
+	}
+	dirFD, err := unix.Open(path, unix.O_DIRECTORY|unix.O_RDONLY|unix.O_CLOEXEC, 0o600)
+	if err != nil {
+		return fmt.Errorf("cannot get dir FD for %s", path)
+	}
+	defer unix.Close(dirFD)
+	if _, err := LoadAttachCgroupDeviceFilter(insts, license, dirFD); err != nil {
+		if !canSkipEBPFError(devices) {
+			return err
+		}
+	}
+	return nil
+}
+
+// getSystemdFullPath returns the full systemd path when creating a systemd slice group.
+// the reason this is necessary is because the "-" character has a special meaning in
+// systemd slice. For example, when creating a slice called "my-group-112233.slice",
+// systemd will create a hierarchy like this:
+//
+//	/sys/fs/cgroup/my.slice/my-group.slice/my-group-112233.slice
+func getSystemdFullPath(slice, group string) string {
+	return filepath.Join(defaultCgroup2Path, dashesToPath(slice), dashesToPath(group))
+}
+
+// dashesToPath converts a slice name with dashes to it's corresponding systemd filesystem path.
+func dashesToPath(in string) string {
+	path := ""
+	if strings.HasSuffix(in, ".slice") && strings.Contains(in, "-") {
+		parts := strings.Split(in, "-")
+		for i := range parts {
+			s := strings.Join(parts[0:i+1], "-")
+			if !strings.HasSuffix(s, ".slice") {
+				s += ".slice"
+			}
+			path = filepath.Join(path, s)
+		}
+	} else {
+		path = filepath.Join(path, in)
+	}
+	return path
+}
+
+func NewSystemd(slice, group string, pid int, resources *Resources) (*Manager, error) {
+	if slice == "" {
+		slice = defaultSlice
+	}
+	ctx := context.TODO()
+	path := getSystemdFullPath(slice, group)
+	conn, err := systemdDbus.NewWithContext(ctx)
+	if err != nil {
+		return &Manager{}, err
+	}
+	defer conn.Close()
+
+	properties := []systemdDbus.Property{
+		systemdDbus.PropDescription("cgroup " + group),
+		newSystemdProperty("DefaultDependencies", false),
+		newSystemdProperty("MemoryAccounting", true),
+		newSystemdProperty("CPUAccounting", true),
+		newSystemdProperty("IOAccounting", true),
+	}
+
+	// if we create a slice, the parent is defined via a Wants=
+	if strings.HasSuffix(group, ".slice") {
+		properties = append(properties, systemdDbus.PropWants(defaultSlice))
+	} else {
+		// otherwise, we use Slice=
+		properties = append(properties, systemdDbus.PropSlice(defaultSlice))
+	}
+
+	// only add pid if its valid, -1 is used w/ general slice creation.
+	if pid != -1 {
+		properties = append(properties, newSystemdProperty("PIDs", []uint32{uint32(pid)}))
+	}
+
+	if resources.Memory != nil && resources.Memory.Min != nil && *resources.Memory.Min != 0 {
+		properties = append(properties,
+			newSystemdProperty("MemoryMin", uint64(*resources.Memory.Min)))
+	}
+
+	if resources.Memory != nil && resources.Memory.Max != nil && *resources.Memory.Max != 0 {
+		properties = append(properties,
+			newSystemdProperty("MemoryMax", uint64(*resources.Memory.Max)))
+	}
+
+	if resources.CPU != nil && resources.CPU.Weight != nil && *resources.CPU.Weight != 0 {
+		properties = append(properties,
+			newSystemdProperty("CPUWeight", *resources.CPU.Weight))
+	}
+
+	if resources.CPU != nil && resources.CPU.Max != "" {
+		quota, period := resources.CPU.Max.extractQuotaAndPeriod()
+		// cpu.cfs_quota_us and cpu.cfs_period_us are controlled by systemd.
+		// corresponds to USEC_INFINITY in systemd
+		// if USEC_INFINITY is provided, CPUQuota is left unbound by systemd
+		// always setting a property value ensures we can apply a quota and remove it later
+		cpuQuotaPerSecUSec := uint64(math.MaxUint64)
+		if quota > 0 {
+			// systemd converts CPUQuotaPerSecUSec (microseconds per CPU second) to CPUQuota
+			// (integer percentage of CPU) internally.  This means that if a fractional percent of
+			// CPU is indicated by Resources.CpuQuota, we need to round up to the nearest
+			// 10ms (1% of a second) such that child cgroups can set the cpu.cfs_quota_us they expect.
+			cpuQuotaPerSecUSec = uint64(quota*1000000) / period
+			if cpuQuotaPerSecUSec%10000 != 0 {
+				cpuQuotaPerSecUSec = ((cpuQuotaPerSecUSec / 10000) + 1) * 10000
+			}
+		}
+		properties = append(properties,
+			newSystemdProperty("CPUQuotaPerSecUSec", cpuQuotaPerSecUSec))
+	}
+
+	// If we can delegate, we add the property back in
+	if canDelegate {
+		properties = append(properties, newSystemdProperty("Delegate", true))
+	}
+
+	if resources.Pids != nil && resources.Pids.Max > 0 {
+		properties = append(properties,
+			newSystemdProperty("TasksAccounting", true),
+			newSystemdProperty("TasksMax", uint64(resources.Pids.Max)))
+	}
+
+	if err := startUnit(conn, group, properties, pid == -1); err != nil {
+		return &Manager{}, err
+	}
+
+	return &Manager{
+		path: path,
+	}, nil
+}
+
+func startUnit(conn *systemdDbus.Conn, group string, properties []systemdDbus.Property, ignoreExists bool) error {
+	ctx := context.TODO()
+
+	statusChan := make(chan string, 1)
+	defer close(statusChan)
+
+	retry := true
+	started := false
+
+	for !started {
+		if _, err := conn.StartTransientUnitContext(ctx, group, "replace", properties, statusChan); err != nil {
+			if !isUnitExists(err) {
+				return err
+			}
+
+			if ignoreExists {
+				return nil
+			}
+
+			if retry {
+				retry = false
+				// When a unit of the same name already exists, it may be a leftover failed unit.
+				// If we reset it once, systemd can try to remove it.
+				attemptFailedUnitReset(conn, group)
+				continue
+			}
+
+			return err
+		} else {
+			started = true
+		}
+	}
+
+	select {
+	case s := <-statusChan:
+		if s != "done" {
+			attemptFailedUnitReset(conn, group)
+			return fmt.Errorf("error creating systemd unit `%s`: got `%s`", group, s)
+		}
+	case <-time.After(30 * time.Second):
+		logrus.Warnf("Timed out while waiting for StartTransientUnit(%s) completion signal from dbus. Continuing...", group)
+	}
+
+	return nil
+}
+
+func attemptFailedUnitReset(conn *systemdDbus.Conn, group string) {
+	err := conn.ResetFailedUnitContext(context.TODO(), group)
+
+	if err != nil {
+		logrus.Warnf("Unable to reset failed unit: %v", err)
+	}
+}
+
+func LoadSystemd(slice, group string) (*Manager, error) {
+	if slice == "" {
+		slice = defaultSlice
+	}
+	path := getSystemdFullPath(slice, group)
+	return &Manager{
+		path: path,
+	}, nil
+}
+
+func (c *Manager) DeleteSystemd() error {
+	ctx := context.TODO()
+	conn, err := systemdDbus.NewWithContext(ctx)
+	if err != nil {
+		return err
+	}
+	defer conn.Close()
+	group := systemdUnitFromPath(c.path)
+	ch := make(chan string)
+	_, err = conn.StopUnitContext(ctx, group, "replace", ch)
+	if err != nil {
+		return err
+	}
+	<-ch
+	return nil
+}
+
+func newSystemdProperty(name string, units interface{}) systemdDbus.Property {
+	return systemdDbus.Property{
+		Name:  name,
+		Value: dbus.MakeVariant(units),
+	}
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/memory.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/memory.go
new file mode 100644
index 00000000000..8cc8962bd8e
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/memory.go
@@ -0,0 +1,59 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+type Memory struct {
+	Swap *int64
+	Min  *int64
+	Max  *int64
+	Low  *int64
+	High *int64
+}
+
+func (r *Memory) Values() (o []Value) {
+	if r.Swap != nil {
+		o = append(o, Value{
+			filename: "memory.swap.max",
+			value:    *r.Swap,
+		})
+	}
+	if r.Min != nil {
+		o = append(o, Value{
+			filename: "memory.min",
+			value:    *r.Min,
+		})
+	}
+	if r.Max != nil {
+		o = append(o, Value{
+			filename: "memory.max",
+			value:    *r.Max,
+		})
+	}
+	if r.Low != nil {
+		o = append(o, Value{
+			filename: "memory.low",
+			value:    *r.Low,
+		})
+	}
+	if r.High != nil {
+		o = append(o, Value{
+			filename: "memory.high",
+			value:    *r.High,
+		})
+	}
+	return o
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/paths.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/paths.go
new file mode 100644
index 00000000000..074bb83bc46
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/paths.go
@@ -0,0 +1,60 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+import (
+	"fmt"
+	"path/filepath"
+	"strings"
+)
+
+// NestedGroupPath will nest the cgroups based on the calling processes cgroup
+// placing its child processes inside its own path
+func NestedGroupPath(suffix string) (string, error) {
+	path, err := parseCgroupFile("/proc/self/cgroup")
+	if err != nil {
+		return "", err
+	}
+	return filepath.Join(path, suffix), nil
+}
+
+// PidGroupPath will return the correct cgroup paths for an existing process running inside a cgroup
+// This is commonly used for the Load function to restore an existing container
+func PidGroupPath(pid int) (string, error) {
+	p := fmt.Sprintf("/proc/%d/cgroup", pid)
+	return parseCgroupFile(p)
+}
+
+// VerifyGroupPath verifies the format of group path string g.
+// The format is same as the third field in /proc/PID/cgroup.
+// e.g. "/user.slice/user-1001.slice/session-1.scope"
+//
+// g must be a "clean" absolute path starts with "/", and must not contain "/sys/fs/cgroup" prefix.
+//
+// VerifyGroupPath doesn't verify whether g actually exists on the system.
+func VerifyGroupPath(g string) error {
+	if !strings.HasPrefix(g, "/") {
+		return ErrInvalidGroupPath
+	}
+	if filepath.Clean(g) != g {
+		return ErrInvalidGroupPath
+	}
+	if strings.HasPrefix(g, "/sys/fs/cgroup") {
+		return ErrInvalidGroupPath
+	}
+	return nil
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/pids.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/pids.go
new file mode 100644
index 00000000000..7de2632606b
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/pids.go
@@ -0,0 +1,37 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+import "strconv"
+
+type Pids struct {
+	Max int64
+}
+
+func (r *Pids) Values() (o []Value) {
+	if r.Max != 0 {
+		limit := "max"
+		if r.Max > 0 {
+			limit = strconv.FormatInt(r.Max, 10)
+		}
+		o = append(o, Value{
+			filename: "pids.max",
+			value:    limit,
+		})
+	}
+	return o
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/rdma.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/rdma.go
new file mode 100644
index 00000000000..2a65117f101
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/rdma.go
@@ -0,0 +1,46 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+import (
+	"fmt"
+)
+
+type RDMA struct {
+	Limit []RDMAEntry
+}
+
+type RDMAEntry struct {
+	Device     string
+	HcaHandles uint32
+	HcaObjects uint32
+}
+
+func (r RDMAEntry) String() string {
+	return fmt.Sprintf("%s hca_handle=%d hca_object=%d", r.Device, r.HcaHandles, r.HcaObjects)
+}
+
+func (r *RDMA) Values() (o []Value) {
+	for _, e := range r.Limit {
+		o = append(o, Value{
+			filename: "rdma.max",
+			value:    e.String(),
+		})
+	}
+
+	return o
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/state.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/state.go
new file mode 100644
index 00000000000..886e94b2913
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/state.go
@@ -0,0 +1,65 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+import (
+	"os"
+	"path/filepath"
+	"strings"
+)
+
+// State is a type that represents the state of the current cgroup
+type State string
+
+const (
+	Unknown State = ""
+	Thawed  State = "thawed"
+	Frozen  State = "frozen"
+	Deleted State = "deleted"
+
+	cgroupFreeze = "cgroup.freeze"
+)
+
+func (s State) Values() []Value {
+	v := Value{
+		filename: cgroupFreeze,
+	}
+	switch s {
+	case Frozen:
+		v.value = "1"
+	case Thawed:
+		v.value = "0"
+	}
+	return []Value{
+		v,
+	}
+}
+
+func fetchState(path string) (State, error) {
+	current, err := os.ReadFile(filepath.Join(path, cgroupFreeze))
+	if err != nil {
+		return Unknown, err
+	}
+	switch strings.TrimSpace(string(current)) {
+	case "1":
+		return Frozen, nil
+	case "0":
+		return Thawed, nil
+	default:
+		return Unknown, nil
+	}
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/doc.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/doc.go
new file mode 100644
index 00000000000..e51e12f8004
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/doc.go
@@ -0,0 +1,17 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package stats
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.pb.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.pb.go
new file mode 100644
index 00000000000..3d53c224ceb
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.pb.go
@@ -0,0 +1,1558 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.28.1
+// 	protoc        v3.21.5
+// source: github.com/containerd/cgroups/cgroup2/stats/metrics.proto
+
+package stats
+
+import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	reflect "reflect"
+	sync "sync"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type Metrics struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Pids         *PidsStat      `protobuf:"bytes,1,opt,name=pids,proto3" json:"pids,omitempty"`
+	CPU          *CPUStat       `protobuf:"bytes,2,opt,name=cpu,proto3" json:"cpu,omitempty"`
+	Memory       *MemoryStat    `protobuf:"bytes,4,opt,name=memory,proto3" json:"memory,omitempty"`
+	Rdma         *RdmaStat      `protobuf:"bytes,5,opt,name=rdma,proto3" json:"rdma,omitempty"`
+	Io           *IOStat        `protobuf:"bytes,6,opt,name=io,proto3" json:"io,omitempty"`
+	Hugetlb      []*HugeTlbStat `protobuf:"bytes,7,rep,name=hugetlb,proto3" json:"hugetlb,omitempty"`
+	MemoryEvents *MemoryEvents  `protobuf:"bytes,8,opt,name=memory_events,json=memoryEvents,proto3" json:"memory_events,omitempty"`
+}
+
+func (x *Metrics) Reset() {
+	*x = Metrics{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[0]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *Metrics) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Metrics) ProtoMessage() {}
+
+func (x *Metrics) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[0]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Metrics.ProtoReflect.Descriptor instead.
+func (*Metrics) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *Metrics) GetPids() *PidsStat {
+	if x != nil {
+		return x.Pids
+	}
+	return nil
+}
+
+func (x *Metrics) GetCPU() *CPUStat {
+	if x != nil {
+		return x.CPU
+	}
+	return nil
+}
+
+func (x *Metrics) GetMemory() *MemoryStat {
+	if x != nil {
+		return x.Memory
+	}
+	return nil
+}
+
+func (x *Metrics) GetRdma() *RdmaStat {
+	if x != nil {
+		return x.Rdma
+	}
+	return nil
+}
+
+func (x *Metrics) GetIo() *IOStat {
+	if x != nil {
+		return x.Io
+	}
+	return nil
+}
+
+func (x *Metrics) GetHugetlb() []*HugeTlbStat {
+	if x != nil {
+		return x.Hugetlb
+	}
+	return nil
+}
+
+func (x *Metrics) GetMemoryEvents() *MemoryEvents {
+	if x != nil {
+		return x.MemoryEvents
+	}
+	return nil
+}
+
+type PSIData struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Avg10  float64 `protobuf:"fixed64,1,opt,name=avg10,proto3" json:"avg10,omitempty"`
+	Avg60  float64 `protobuf:"fixed64,2,opt,name=avg60,proto3" json:"avg60,omitempty"`
+	Avg300 float64 `protobuf:"fixed64,3,opt,name=avg300,proto3" json:"avg300,omitempty"`
+	Total  uint64  `protobuf:"varint,4,opt,name=total,proto3" json:"total,omitempty"`
+}
+
+func (x *PSIData) Reset() {
+	*x = PSIData{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[1]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *PSIData) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*PSIData) ProtoMessage() {}
+
+func (x *PSIData) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[1]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use PSIData.ProtoReflect.Descriptor instead.
+func (*PSIData) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *PSIData) GetAvg10() float64 {
+	if x != nil {
+		return x.Avg10
+	}
+	return 0
+}
+
+func (x *PSIData) GetAvg60() float64 {
+	if x != nil {
+		return x.Avg60
+	}
+	return 0
+}
+
+func (x *PSIData) GetAvg300() float64 {
+	if x != nil {
+		return x.Avg300
+	}
+	return 0
+}
+
+func (x *PSIData) GetTotal() uint64 {
+	if x != nil {
+		return x.Total
+	}
+	return 0
+}
+
+type PSIStats struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Some *PSIData `protobuf:"bytes,1,opt,name=some,proto3" json:"some,omitempty"`
+	Full *PSIData `protobuf:"bytes,2,opt,name=full,proto3" json:"full,omitempty"`
+}
+
+func (x *PSIStats) Reset() {
+	*x = PSIStats{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[2]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *PSIStats) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*PSIStats) ProtoMessage() {}
+
+func (x *PSIStats) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[2]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use PSIStats.ProtoReflect.Descriptor instead.
+func (*PSIStats) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *PSIStats) GetSome() *PSIData {
+	if x != nil {
+		return x.Some
+	}
+	return nil
+}
+
+func (x *PSIStats) GetFull() *PSIData {
+	if x != nil {
+		return x.Full
+	}
+	return nil
+}
+
+type PidsStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Current uint64 `protobuf:"varint,1,opt,name=current,proto3" json:"current,omitempty"`
+	Limit   uint64 `protobuf:"varint,2,opt,name=limit,proto3" json:"limit,omitempty"`
+}
+
+func (x *PidsStat) Reset() {
+	*x = PidsStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[3]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *PidsStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*PidsStat) ProtoMessage() {}
+
+func (x *PidsStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[3]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use PidsStat.ProtoReflect.Descriptor instead.
+func (*PidsStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *PidsStat) GetCurrent() uint64 {
+	if x != nil {
+		return x.Current
+	}
+	return 0
+}
+
+func (x *PidsStat) GetLimit() uint64 {
+	if x != nil {
+		return x.Limit
+	}
+	return 0
+}
+
+type CPUStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	UsageUsec     uint64    `protobuf:"varint,1,opt,name=usage_usec,json=usageUsec,proto3" json:"usage_usec,omitempty"`
+	UserUsec      uint64    `protobuf:"varint,2,opt,name=user_usec,json=userUsec,proto3" json:"user_usec,omitempty"`
+	SystemUsec    uint64    `protobuf:"varint,3,opt,name=system_usec,json=systemUsec,proto3" json:"system_usec,omitempty"`
+	NrPeriods     uint64    `protobuf:"varint,4,opt,name=nr_periods,json=nrPeriods,proto3" json:"nr_periods,omitempty"`
+	NrThrottled   uint64    `protobuf:"varint,5,opt,name=nr_throttled,json=nrThrottled,proto3" json:"nr_throttled,omitempty"`
+	ThrottledUsec uint64    `protobuf:"varint,6,opt,name=throttled_usec,json=throttledUsec,proto3" json:"throttled_usec,omitempty"`
+	PSI           *PSIStats `protobuf:"bytes,7,opt,name=psi,proto3" json:"psi,omitempty"`
+}
+
+func (x *CPUStat) Reset() {
+	*x = CPUStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[4]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CPUStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CPUStat) ProtoMessage() {}
+
+func (x *CPUStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[4]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CPUStat.ProtoReflect.Descriptor instead.
+func (*CPUStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{4}
+}
+
+func (x *CPUStat) GetUsageUsec() uint64 {
+	if x != nil {
+		return x.UsageUsec
+	}
+	return 0
+}
+
+func (x *CPUStat) GetUserUsec() uint64 {
+	if x != nil {
+		return x.UserUsec
+	}
+	return 0
+}
+
+func (x *CPUStat) GetSystemUsec() uint64 {
+	if x != nil {
+		return x.SystemUsec
+	}
+	return 0
+}
+
+func (x *CPUStat) GetNrPeriods() uint64 {
+	if x != nil {
+		return x.NrPeriods
+	}
+	return 0
+}
+
+func (x *CPUStat) GetNrThrottled() uint64 {
+	if x != nil {
+		return x.NrThrottled
+	}
+	return 0
+}
+
+func (x *CPUStat) GetThrottledUsec() uint64 {
+	if x != nil {
+		return x.ThrottledUsec
+	}
+	return 0
+}
+
+func (x *CPUStat) GetPSI() *PSIStats {
+	if x != nil {
+		return x.PSI
+	}
+	return nil
+}
+
+type MemoryStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Anon                  uint64    `protobuf:"varint,1,opt,name=anon,proto3" json:"anon,omitempty"`
+	File                  uint64    `protobuf:"varint,2,opt,name=file,proto3" json:"file,omitempty"`
+	KernelStack           uint64    `protobuf:"varint,3,opt,name=kernel_stack,json=kernelStack,proto3" json:"kernel_stack,omitempty"`
+	Slab                  uint64    `protobuf:"varint,4,opt,name=slab,proto3" json:"slab,omitempty"`
+	Sock                  uint64    `protobuf:"varint,5,opt,name=sock,proto3" json:"sock,omitempty"`
+	Shmem                 uint64    `protobuf:"varint,6,opt,name=shmem,proto3" json:"shmem,omitempty"`
+	FileMapped            uint64    `protobuf:"varint,7,opt,name=file_mapped,json=fileMapped,proto3" json:"file_mapped,omitempty"`
+	FileDirty             uint64    `protobuf:"varint,8,opt,name=file_dirty,json=fileDirty,proto3" json:"file_dirty,omitempty"`
+	FileWriteback         uint64    `protobuf:"varint,9,opt,name=file_writeback,json=fileWriteback,proto3" json:"file_writeback,omitempty"`
+	AnonThp               uint64    `protobuf:"varint,10,opt,name=anon_thp,json=anonThp,proto3" json:"anon_thp,omitempty"`
+	InactiveAnon          uint64    `protobuf:"varint,11,opt,name=inactive_anon,json=inactiveAnon,proto3" json:"inactive_anon,omitempty"`
+	ActiveAnon            uint64    `protobuf:"varint,12,opt,name=active_anon,json=activeAnon,proto3" json:"active_anon,omitempty"`
+	InactiveFile          uint64    `protobuf:"varint,13,opt,name=inactive_file,json=inactiveFile,proto3" json:"inactive_file,omitempty"`
+	ActiveFile            uint64    `protobuf:"varint,14,opt,name=active_file,json=activeFile,proto3" json:"active_file,omitempty"`
+	Unevictable           uint64    `protobuf:"varint,15,opt,name=unevictable,proto3" json:"unevictable,omitempty"`
+	SlabReclaimable       uint64    `protobuf:"varint,16,opt,name=slab_reclaimable,json=slabReclaimable,proto3" json:"slab_reclaimable,omitempty"`
+	SlabUnreclaimable     uint64    `protobuf:"varint,17,opt,name=slab_unreclaimable,json=slabUnreclaimable,proto3" json:"slab_unreclaimable,omitempty"`
+	Pgfault               uint64    `protobuf:"varint,18,opt,name=pgfault,proto3" json:"pgfault,omitempty"`
+	Pgmajfault            uint64    `protobuf:"varint,19,opt,name=pgmajfault,proto3" json:"pgmajfault,omitempty"`
+	WorkingsetRefault     uint64    `protobuf:"varint,20,opt,name=workingset_refault,json=workingsetRefault,proto3" json:"workingset_refault,omitempty"`
+	WorkingsetActivate    uint64    `protobuf:"varint,21,opt,name=workingset_activate,json=workingsetActivate,proto3" json:"workingset_activate,omitempty"`
+	WorkingsetNodereclaim uint64    `protobuf:"varint,22,opt,name=workingset_nodereclaim,json=workingsetNodereclaim,proto3" json:"workingset_nodereclaim,omitempty"`
+	Pgrefill              uint64    `protobuf:"varint,23,opt,name=pgrefill,proto3" json:"pgrefill,omitempty"`
+	Pgscan                uint64    `protobuf:"varint,24,opt,name=pgscan,proto3" json:"pgscan,omitempty"`
+	Pgsteal               uint64    `protobuf:"varint,25,opt,name=pgsteal,proto3" json:"pgsteal,omitempty"`
+	Pgactivate            uint64    `protobuf:"varint,26,opt,name=pgactivate,proto3" json:"pgactivate,omitempty"`
+	Pgdeactivate          uint64    `protobuf:"varint,27,opt,name=pgdeactivate,proto3" json:"pgdeactivate,omitempty"`
+	Pglazyfree            uint64    `protobuf:"varint,28,opt,name=pglazyfree,proto3" json:"pglazyfree,omitempty"`
+	Pglazyfreed           uint64    `protobuf:"varint,29,opt,name=pglazyfreed,proto3" json:"pglazyfreed,omitempty"`
+	ThpFaultAlloc         uint64    `protobuf:"varint,30,opt,name=thp_fault_alloc,json=thpFaultAlloc,proto3" json:"thp_fault_alloc,omitempty"`
+	ThpCollapseAlloc      uint64    `protobuf:"varint,31,opt,name=thp_collapse_alloc,json=thpCollapseAlloc,proto3" json:"thp_collapse_alloc,omitempty"`
+	Usage                 uint64    `protobuf:"varint,32,opt,name=usage,proto3" json:"usage,omitempty"`
+	UsageLimit            uint64    `protobuf:"varint,33,opt,name=usage_limit,json=usageLimit,proto3" json:"usage_limit,omitempty"`
+	SwapUsage             uint64    `protobuf:"varint,34,opt,name=swap_usage,json=swapUsage,proto3" json:"swap_usage,omitempty"`
+	SwapLimit             uint64    `protobuf:"varint,35,opt,name=swap_limit,json=swapLimit,proto3" json:"swap_limit,omitempty"`
+	MaxUsage              uint64    `protobuf:"varint,36,opt,name=max_usage,json=maxUsage,proto3" json:"max_usage,omitempty"`
+	SwapMaxUsage          uint64    `protobuf:"varint,37,opt,name=swap_max_usage,json=swapMaxUsage,proto3" json:"swap_max_usage,omitempty"`
+	PSI                   *PSIStats `protobuf:"bytes,38,opt,name=psi,proto3" json:"psi,omitempty"`
+}
+
+func (x *MemoryStat) Reset() {
+	*x = MemoryStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[5]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *MemoryStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*MemoryStat) ProtoMessage() {}
+
+func (x *MemoryStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[5]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use MemoryStat.ProtoReflect.Descriptor instead.
+func (*MemoryStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{5}
+}
+
+func (x *MemoryStat) GetAnon() uint64 {
+	if x != nil {
+		return x.Anon
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetFile() uint64 {
+	if x != nil {
+		return x.File
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetKernelStack() uint64 {
+	if x != nil {
+		return x.KernelStack
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetSlab() uint64 {
+	if x != nil {
+		return x.Slab
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetSock() uint64 {
+	if x != nil {
+		return x.Sock
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetShmem() uint64 {
+	if x != nil {
+		return x.Shmem
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetFileMapped() uint64 {
+	if x != nil {
+		return x.FileMapped
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetFileDirty() uint64 {
+	if x != nil {
+		return x.FileDirty
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetFileWriteback() uint64 {
+	if x != nil {
+		return x.FileWriteback
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetAnonThp() uint64 {
+	if x != nil {
+		return x.AnonThp
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetInactiveAnon() uint64 {
+	if x != nil {
+		return x.InactiveAnon
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetActiveAnon() uint64 {
+	if x != nil {
+		return x.ActiveAnon
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetInactiveFile() uint64 {
+	if x != nil {
+		return x.InactiveFile
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetActiveFile() uint64 {
+	if x != nil {
+		return x.ActiveFile
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetUnevictable() uint64 {
+	if x != nil {
+		return x.Unevictable
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetSlabReclaimable() uint64 {
+	if x != nil {
+		return x.SlabReclaimable
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetSlabUnreclaimable() uint64 {
+	if x != nil {
+		return x.SlabUnreclaimable
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPgfault() uint64 {
+	if x != nil {
+		return x.Pgfault
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPgmajfault() uint64 {
+	if x != nil {
+		return x.Pgmajfault
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetWorkingsetRefault() uint64 {
+	if x != nil {
+		return x.WorkingsetRefault
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetWorkingsetActivate() uint64 {
+	if x != nil {
+		return x.WorkingsetActivate
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetWorkingsetNodereclaim() uint64 {
+	if x != nil {
+		return x.WorkingsetNodereclaim
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPgrefill() uint64 {
+	if x != nil {
+		return x.Pgrefill
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPgscan() uint64 {
+	if x != nil {
+		return x.Pgscan
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPgsteal() uint64 {
+	if x != nil {
+		return x.Pgsteal
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPgactivate() uint64 {
+	if x != nil {
+		return x.Pgactivate
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPgdeactivate() uint64 {
+	if x != nil {
+		return x.Pgdeactivate
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPglazyfree() uint64 {
+	if x != nil {
+		return x.Pglazyfree
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPglazyfreed() uint64 {
+	if x != nil {
+		return x.Pglazyfreed
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetThpFaultAlloc() uint64 {
+	if x != nil {
+		return x.ThpFaultAlloc
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetThpCollapseAlloc() uint64 {
+	if x != nil {
+		return x.ThpCollapseAlloc
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetUsage() uint64 {
+	if x != nil {
+		return x.Usage
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetUsageLimit() uint64 {
+	if x != nil {
+		return x.UsageLimit
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetSwapUsage() uint64 {
+	if x != nil {
+		return x.SwapUsage
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetSwapLimit() uint64 {
+	if x != nil {
+		return x.SwapLimit
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetMaxUsage() uint64 {
+	if x != nil {
+		return x.MaxUsage
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetSwapMaxUsage() uint64 {
+	if x != nil {
+		return x.SwapMaxUsage
+	}
+	return 0
+}
+
+func (x *MemoryStat) GetPSI() *PSIStats {
+	if x != nil {
+		return x.PSI
+	}
+	return nil
+}
+
+type MemoryEvents struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Low     uint64 `protobuf:"varint,1,opt,name=low,proto3" json:"low,omitempty"`
+	High    uint64 `protobuf:"varint,2,opt,name=high,proto3" json:"high,omitempty"`
+	Max     uint64 `protobuf:"varint,3,opt,name=max,proto3" json:"max,omitempty"`
+	Oom     uint64 `protobuf:"varint,4,opt,name=oom,proto3" json:"oom,omitempty"`
+	OomKill uint64 `protobuf:"varint,5,opt,name=oom_kill,json=oomKill,proto3" json:"oom_kill,omitempty"`
+}
+
+func (x *MemoryEvents) Reset() {
+	*x = MemoryEvents{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[6]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *MemoryEvents) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*MemoryEvents) ProtoMessage() {}
+
+func (x *MemoryEvents) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[6]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use MemoryEvents.ProtoReflect.Descriptor instead.
+func (*MemoryEvents) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{6}
+}
+
+func (x *MemoryEvents) GetLow() uint64 {
+	if x != nil {
+		return x.Low
+	}
+	return 0
+}
+
+func (x *MemoryEvents) GetHigh() uint64 {
+	if x != nil {
+		return x.High
+	}
+	return 0
+}
+
+func (x *MemoryEvents) GetMax() uint64 {
+	if x != nil {
+		return x.Max
+	}
+	return 0
+}
+
+func (x *MemoryEvents) GetOom() uint64 {
+	if x != nil {
+		return x.Oom
+	}
+	return 0
+}
+
+func (x *MemoryEvents) GetOomKill() uint64 {
+	if x != nil {
+		return x.OomKill
+	}
+	return 0
+}
+
+type RdmaStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Current []*RdmaEntry `protobuf:"bytes,1,rep,name=current,proto3" json:"current,omitempty"`
+	Limit   []*RdmaEntry `protobuf:"bytes,2,rep,name=limit,proto3" json:"limit,omitempty"`
+}
+
+func (x *RdmaStat) Reset() {
+	*x = RdmaStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[7]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *RdmaStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RdmaStat) ProtoMessage() {}
+
+func (x *RdmaStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[7]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RdmaStat.ProtoReflect.Descriptor instead.
+func (*RdmaStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{7}
+}
+
+func (x *RdmaStat) GetCurrent() []*RdmaEntry {
+	if x != nil {
+		return x.Current
+	}
+	return nil
+}
+
+func (x *RdmaStat) GetLimit() []*RdmaEntry {
+	if x != nil {
+		return x.Limit
+	}
+	return nil
+}
+
+type RdmaEntry struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Device     string `protobuf:"bytes,1,opt,name=device,proto3" json:"device,omitempty"`
+	HcaHandles uint32 `protobuf:"varint,2,opt,name=hca_handles,json=hcaHandles,proto3" json:"hca_handles,omitempty"`
+	HcaObjects uint32 `protobuf:"varint,3,opt,name=hca_objects,json=hcaObjects,proto3" json:"hca_objects,omitempty"`
+}
+
+func (x *RdmaEntry) Reset() {
+	*x = RdmaEntry{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[8]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *RdmaEntry) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RdmaEntry) ProtoMessage() {}
+
+func (x *RdmaEntry) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[8]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RdmaEntry.ProtoReflect.Descriptor instead.
+func (*RdmaEntry) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{8}
+}
+
+func (x *RdmaEntry) GetDevice() string {
+	if x != nil {
+		return x.Device
+	}
+	return ""
+}
+
+func (x *RdmaEntry) GetHcaHandles() uint32 {
+	if x != nil {
+		return x.HcaHandles
+	}
+	return 0
+}
+
+func (x *RdmaEntry) GetHcaObjects() uint32 {
+	if x != nil {
+		return x.HcaObjects
+	}
+	return 0
+}
+
+type IOStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Usage []*IOEntry `protobuf:"bytes,1,rep,name=usage,proto3" json:"usage,omitempty"`
+	PSI   *PSIStats  `protobuf:"bytes,2,opt,name=psi,proto3" json:"psi,omitempty"`
+}
+
+func (x *IOStat) Reset() {
+	*x = IOStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[9]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *IOStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*IOStat) ProtoMessage() {}
+
+func (x *IOStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[9]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use IOStat.ProtoReflect.Descriptor instead.
+func (*IOStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{9}
+}
+
+func (x *IOStat) GetUsage() []*IOEntry {
+	if x != nil {
+		return x.Usage
+	}
+	return nil
+}
+
+func (x *IOStat) GetPSI() *PSIStats {
+	if x != nil {
+		return x.PSI
+	}
+	return nil
+}
+
+type IOEntry struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Major  uint64 `protobuf:"varint,1,opt,name=major,proto3" json:"major,omitempty"`
+	Minor  uint64 `protobuf:"varint,2,opt,name=minor,proto3" json:"minor,omitempty"`
+	Rbytes uint64 `protobuf:"varint,3,opt,name=rbytes,proto3" json:"rbytes,omitempty"`
+	Wbytes uint64 `protobuf:"varint,4,opt,name=wbytes,proto3" json:"wbytes,omitempty"`
+	Rios   uint64 `protobuf:"varint,5,opt,name=rios,proto3" json:"rios,omitempty"`
+	Wios   uint64 `protobuf:"varint,6,opt,name=wios,proto3" json:"wios,omitempty"`
+}
+
+func (x *IOEntry) Reset() {
+	*x = IOEntry{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[10]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *IOEntry) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*IOEntry) ProtoMessage() {}
+
+func (x *IOEntry) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[10]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use IOEntry.ProtoReflect.Descriptor instead.
+func (*IOEntry) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{10}
+}
+
+func (x *IOEntry) GetMajor() uint64 {
+	if x != nil {
+		return x.Major
+	}
+	return 0
+}
+
+func (x *IOEntry) GetMinor() uint64 {
+	if x != nil {
+		return x.Minor
+	}
+	return 0
+}
+
+func (x *IOEntry) GetRbytes() uint64 {
+	if x != nil {
+		return x.Rbytes
+	}
+	return 0
+}
+
+func (x *IOEntry) GetWbytes() uint64 {
+	if x != nil {
+		return x.Wbytes
+	}
+	return 0
+}
+
+func (x *IOEntry) GetRios() uint64 {
+	if x != nil {
+		return x.Rios
+	}
+	return 0
+}
+
+func (x *IOEntry) GetWios() uint64 {
+	if x != nil {
+		return x.Wios
+	}
+	return 0
+}
+
+type HugeTlbStat struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Current  uint64 `protobuf:"varint,1,opt,name=current,proto3" json:"current,omitempty"`
+	Max      uint64 `protobuf:"varint,2,opt,name=max,proto3" json:"max,omitempty"`
+	Pagesize string `protobuf:"bytes,3,opt,name=pagesize,proto3" json:"pagesize,omitempty"`
+}
+
+func (x *HugeTlbStat) Reset() {
+	*x = HugeTlbStat{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[11]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *HugeTlbStat) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*HugeTlbStat) ProtoMessage() {}
+
+func (x *HugeTlbStat) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[11]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use HugeTlbStat.ProtoReflect.Descriptor instead.
+func (*HugeTlbStat) Descriptor() ([]byte, []int) {
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP(), []int{11}
+}
+
+func (x *HugeTlbStat) GetCurrent() uint64 {
+	if x != nil {
+		return x.Current
+	}
+	return 0
+}
+
+func (x *HugeTlbStat) GetMax() uint64 {
+	if x != nil {
+		return x.Max
+	}
+	return 0
+}
+
+func (x *HugeTlbStat) GetPagesize() string {
+	if x != nil {
+		return x.Pagesize
+	}
+	return ""
+}
+
+var File_github_com_containerd_cgroups_cgroup2_stats_metrics_proto protoreflect.FileDescriptor
+
+var file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDesc = []byte{
+	0x0a, 0x39, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x63, 0x6f, 0x6e,
+	0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2f, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2f,
+	0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x32, 0x2f, 0x73, 0x74, 0x61, 0x74, 0x73, 0x2f, 0x6d, 0x65,
+	0x74, 0x72, 0x69, 0x63, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x18, 0x69, 0x6f, 0x2e,
+	0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75,
+	0x70, 0x73, 0x2e, 0x76, 0x32, 0x22, 0xac, 0x03, 0x0a, 0x07, 0x4d, 0x65, 0x74, 0x72, 0x69, 0x63,
+	0x73, 0x12, 0x36, 0x0a, 0x04, 0x70, 0x69, 0x64, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x22, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e,
+	0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x32, 0x2e, 0x50, 0x69, 0x64, 0x73, 0x53,
+	0x74, 0x61, 0x74, 0x52, 0x04, 0x70, 0x69, 0x64, 0x73, 0x12, 0x33, 0x0a, 0x03, 0x63, 0x70, 0x75,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74,
+	0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76,
+	0x32, 0x2e, 0x43, 0x50, 0x55, 0x53, 0x74, 0x61, 0x74, 0x52, 0x03, 0x63, 0x70, 0x75, 0x12, 0x3c,
+	0x0a, 0x06, 0x6d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x24,
+	0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63,
+	0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x32, 0x2e, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79,
+	0x53, 0x74, 0x61, 0x74, 0x52, 0x06, 0x6d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x12, 0x36, 0x0a, 0x04,
+	0x72, 0x64, 0x6d, 0x61, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x69, 0x6f, 0x2e,
+	0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75,
+	0x70, 0x73, 0x2e, 0x76, 0x32, 0x2e, 0x52, 0x64, 0x6d, 0x61, 0x53, 0x74, 0x61, 0x74, 0x52, 0x04,
+	0x72, 0x64, 0x6d, 0x61, 0x12, 0x30, 0x0a, 0x02, 0x69, 0x6f, 0x18, 0x06, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x20, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64,
+	0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x32, 0x2e, 0x49, 0x4f, 0x53, 0x74,
+	0x61, 0x74, 0x52, 0x02, 0x69, 0x6f, 0x12, 0x3f, 0x0a, 0x07, 0x68, 0x75, 0x67, 0x65, 0x74, 0x6c,
+	0x62, 0x18, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e,
+	0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e,
+	0x76, 0x32, 0x2e, 0x48, 0x75, 0x67, 0x65, 0x54, 0x6c, 0x62, 0x53, 0x74, 0x61, 0x74, 0x52, 0x07,
+	0x68, 0x75, 0x67, 0x65, 0x74, 0x6c, 0x62, 0x12, 0x4b, 0x0a, 0x0d, 0x6d, 0x65, 0x6d, 0x6f, 0x72,
+	0x79, 0x5f, 0x65, 0x76, 0x65, 0x6e, 0x74, 0x73, 0x18, 0x08, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x26,
+	0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63,
+	0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x32, 0x2e, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79,
+	0x45, 0x76, 0x65, 0x6e, 0x74, 0x73, 0x52, 0x0c, 0x6d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x45, 0x76,
+	0x65, 0x6e, 0x74, 0x73, 0x22, 0x63, 0x0a, 0x07, 0x50, 0x53, 0x49, 0x44, 0x61, 0x74, 0x61, 0x12,
+	0x14, 0x0a, 0x05, 0x61, 0x76, 0x67, 0x31, 0x30, 0x18, 0x01, 0x20, 0x01, 0x28, 0x01, 0x52, 0x05,
+	0x61, 0x76, 0x67, 0x31, 0x30, 0x12, 0x14, 0x0a, 0x05, 0x61, 0x76, 0x67, 0x36, 0x30, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x01, 0x52, 0x05, 0x61, 0x76, 0x67, 0x36, 0x30, 0x12, 0x16, 0x0a, 0x06, 0x61,
+	0x76, 0x67, 0x33, 0x30, 0x30, 0x18, 0x03, 0x20, 0x01, 0x28, 0x01, 0x52, 0x06, 0x61, 0x76, 0x67,
+	0x33, 0x30, 0x30, 0x12, 0x14, 0x0a, 0x05, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x18, 0x04, 0x20, 0x01,
+	0x28, 0x04, 0x52, 0x05, 0x74, 0x6f, 0x74, 0x61, 0x6c, 0x22, 0x78, 0x0a, 0x08, 0x50, 0x53, 0x49,
+	0x53, 0x74, 0x61, 0x74, 0x73, 0x12, 0x35, 0x0a, 0x04, 0x73, 0x6f, 0x6d, 0x65, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e,
+	0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x32, 0x2e, 0x50,
+	0x53, 0x49, 0x44, 0x61, 0x74, 0x61, 0x52, 0x04, 0x73, 0x6f, 0x6d, 0x65, 0x12, 0x35, 0x0a, 0x04,
+	0x66, 0x75, 0x6c, 0x6c, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x69, 0x6f, 0x2e,
+	0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75,
+	0x70, 0x73, 0x2e, 0x76, 0x32, 0x2e, 0x50, 0x53, 0x49, 0x44, 0x61, 0x74, 0x61, 0x52, 0x04, 0x66,
+	0x75, 0x6c, 0x6c, 0x22, 0x3a, 0x0a, 0x08, 0x50, 0x69, 0x64, 0x73, 0x53, 0x74, 0x61, 0x74, 0x12,
+	0x18, 0x0a, 0x07, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04,
+	0x52, 0x07, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x12, 0x14, 0x0a, 0x05, 0x6c, 0x69, 0x6d,
+	0x69, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x05, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x22,
+	0x85, 0x02, 0x0a, 0x07, 0x43, 0x50, 0x55, 0x53, 0x74, 0x61, 0x74, 0x12, 0x1d, 0x0a, 0x0a, 0x75,
+	0x73, 0x61, 0x67, 0x65, 0x5f, 0x75, 0x73, 0x65, 0x63, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x09, 0x75, 0x73, 0x61, 0x67, 0x65, 0x55, 0x73, 0x65, 0x63, 0x12, 0x1b, 0x0a, 0x09, 0x75, 0x73,
+	0x65, 0x72, 0x5f, 0x75, 0x73, 0x65, 0x63, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x08, 0x75,
+	0x73, 0x65, 0x72, 0x55, 0x73, 0x65, 0x63, 0x12, 0x1f, 0x0a, 0x0b, 0x73, 0x79, 0x73, 0x74, 0x65,
+	0x6d, 0x5f, 0x75, 0x73, 0x65, 0x63, 0x18, 0x03, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0a, 0x73, 0x79,
+	0x73, 0x74, 0x65, 0x6d, 0x55, 0x73, 0x65, 0x63, 0x12, 0x1d, 0x0a, 0x0a, 0x6e, 0x72, 0x5f, 0x70,
+	0x65, 0x72, 0x69, 0x6f, 0x64, 0x73, 0x18, 0x04, 0x20, 0x01, 0x28, 0x04, 0x52, 0x09, 0x6e, 0x72,
+	0x50, 0x65, 0x72, 0x69, 0x6f, 0x64, 0x73, 0x12, 0x21, 0x0a, 0x0c, 0x6e, 0x72, 0x5f, 0x74, 0x68,
+	0x72, 0x6f, 0x74, 0x74, 0x6c, 0x65, 0x64, 0x18, 0x05, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0b, 0x6e,
+	0x72, 0x54, 0x68, 0x72, 0x6f, 0x74, 0x74, 0x6c, 0x65, 0x64, 0x12, 0x25, 0x0a, 0x0e, 0x74, 0x68,
+	0x72, 0x6f, 0x74, 0x74, 0x6c, 0x65, 0x64, 0x5f, 0x75, 0x73, 0x65, 0x63, 0x18, 0x06, 0x20, 0x01,
+	0x28, 0x04, 0x52, 0x0d, 0x74, 0x68, 0x72, 0x6f, 0x74, 0x74, 0x6c, 0x65, 0x64, 0x55, 0x73, 0x65,
+	0x63, 0x12, 0x34, 0x0a, 0x03, 0x70, 0x73, 0x69, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x22,
+	0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63,
+	0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x32, 0x2e, 0x50, 0x53, 0x49, 0x53, 0x74, 0x61,
+	0x74, 0x73, 0x52, 0x03, 0x70, 0x73, 0x69, 0x22, 0x88, 0x0a, 0x0a, 0x0a, 0x4d, 0x65, 0x6d, 0x6f,
+	0x72, 0x79, 0x53, 0x74, 0x61, 0x74, 0x12, 0x12, 0x0a, 0x04, 0x61, 0x6e, 0x6f, 0x6e, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x04, 0x61, 0x6e, 0x6f, 0x6e, 0x12, 0x12, 0x0a, 0x04, 0x66, 0x69,
+	0x6c, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x04, 0x66, 0x69, 0x6c, 0x65, 0x12, 0x21,
+	0x0a, 0x0c, 0x6b, 0x65, 0x72, 0x6e, 0x65, 0x6c, 0x5f, 0x73, 0x74, 0x61, 0x63, 0x6b, 0x18, 0x03,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x0b, 0x6b, 0x65, 0x72, 0x6e, 0x65, 0x6c, 0x53, 0x74, 0x61, 0x63,
+	0x6b, 0x12, 0x12, 0x0a, 0x04, 0x73, 0x6c, 0x61, 0x62, 0x18, 0x04, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x04, 0x73, 0x6c, 0x61, 0x62, 0x12, 0x12, 0x0a, 0x04, 0x73, 0x6f, 0x63, 0x6b, 0x18, 0x05, 0x20,
+	0x01, 0x28, 0x04, 0x52, 0x04, 0x73, 0x6f, 0x63, 0x6b, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x68, 0x6d,
+	0x65, 0x6d, 0x18, 0x06, 0x20, 0x01, 0x28, 0x04, 0x52, 0x05, 0x73, 0x68, 0x6d, 0x65, 0x6d, 0x12,
+	0x1f, 0x0a, 0x0b, 0x66, 0x69, 0x6c, 0x65, 0x5f, 0x6d, 0x61, 0x70, 0x70, 0x65, 0x64, 0x18, 0x07,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x0a, 0x66, 0x69, 0x6c, 0x65, 0x4d, 0x61, 0x70, 0x70, 0x65, 0x64,
+	0x12, 0x1d, 0x0a, 0x0a, 0x66, 0x69, 0x6c, 0x65, 0x5f, 0x64, 0x69, 0x72, 0x74, 0x79, 0x18, 0x08,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x09, 0x66, 0x69, 0x6c, 0x65, 0x44, 0x69, 0x72, 0x74, 0x79, 0x12,
+	0x25, 0x0a, 0x0e, 0x66, 0x69, 0x6c, 0x65, 0x5f, 0x77, 0x72, 0x69, 0x74, 0x65, 0x62, 0x61, 0x63,
+	0x6b, 0x18, 0x09, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0d, 0x66, 0x69, 0x6c, 0x65, 0x57, 0x72, 0x69,
+	0x74, 0x65, 0x62, 0x61, 0x63, 0x6b, 0x12, 0x19, 0x0a, 0x08, 0x61, 0x6e, 0x6f, 0x6e, 0x5f, 0x74,
+	0x68, 0x70, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x04, 0x52, 0x07, 0x61, 0x6e, 0x6f, 0x6e, 0x54, 0x68,
+	0x70, 0x12, 0x23, 0x0a, 0x0d, 0x69, 0x6e, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x5f, 0x61, 0x6e,
+	0x6f, 0x6e, 0x18, 0x0b, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0c, 0x69, 0x6e, 0x61, 0x63, 0x74, 0x69,
+	0x76, 0x65, 0x41, 0x6e, 0x6f, 0x6e, 0x12, 0x1f, 0x0a, 0x0b, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65,
+	0x5f, 0x61, 0x6e, 0x6f, 0x6e, 0x18, 0x0c, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0a, 0x61, 0x63, 0x74,
+	0x69, 0x76, 0x65, 0x41, 0x6e, 0x6f, 0x6e, 0x12, 0x23, 0x0a, 0x0d, 0x69, 0x6e, 0x61, 0x63, 0x74,
+	0x69, 0x76, 0x65, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x18, 0x0d, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0c,
+	0x69, 0x6e, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x1f, 0x0a, 0x0b,
+	0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x18, 0x0e, 0x20, 0x01, 0x28,
+	0x04, 0x52, 0x0a, 0x61, 0x63, 0x74, 0x69, 0x76, 0x65, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x20, 0x0a,
+	0x0b, 0x75, 0x6e, 0x65, 0x76, 0x69, 0x63, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x18, 0x0f, 0x20, 0x01,
+	0x28, 0x04, 0x52, 0x0b, 0x75, 0x6e, 0x65, 0x76, 0x69, 0x63, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x12,
+	0x29, 0x0a, 0x10, 0x73, 0x6c, 0x61, 0x62, 0x5f, 0x72, 0x65, 0x63, 0x6c, 0x61, 0x69, 0x6d, 0x61,
+	0x62, 0x6c, 0x65, 0x18, 0x10, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0f, 0x73, 0x6c, 0x61, 0x62, 0x52,
+	0x65, 0x63, 0x6c, 0x61, 0x69, 0x6d, 0x61, 0x62, 0x6c, 0x65, 0x12, 0x2d, 0x0a, 0x12, 0x73, 0x6c,
+	0x61, 0x62, 0x5f, 0x75, 0x6e, 0x72, 0x65, 0x63, 0x6c, 0x61, 0x69, 0x6d, 0x61, 0x62, 0x6c, 0x65,
+	0x18, 0x11, 0x20, 0x01, 0x28, 0x04, 0x52, 0x11, 0x73, 0x6c, 0x61, 0x62, 0x55, 0x6e, 0x72, 0x65,
+	0x63, 0x6c, 0x61, 0x69, 0x6d, 0x61, 0x62, 0x6c, 0x65, 0x12, 0x18, 0x0a, 0x07, 0x70, 0x67, 0x66,
+	0x61, 0x75, 0x6c, 0x74, 0x18, 0x12, 0x20, 0x01, 0x28, 0x04, 0x52, 0x07, 0x70, 0x67, 0x66, 0x61,
+	0x75, 0x6c, 0x74, 0x12, 0x1e, 0x0a, 0x0a, 0x70, 0x67, 0x6d, 0x61, 0x6a, 0x66, 0x61, 0x75, 0x6c,
+	0x74, 0x18, 0x13, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0a, 0x70, 0x67, 0x6d, 0x61, 0x6a, 0x66, 0x61,
+	0x75, 0x6c, 0x74, 0x12, 0x2d, 0x0a, 0x12, 0x77, 0x6f, 0x72, 0x6b, 0x69, 0x6e, 0x67, 0x73, 0x65,
+	0x74, 0x5f, 0x72, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x18, 0x14, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x11, 0x77, 0x6f, 0x72, 0x6b, 0x69, 0x6e, 0x67, 0x73, 0x65, 0x74, 0x52, 0x65, 0x66, 0x61, 0x75,
+	0x6c, 0x74, 0x12, 0x2f, 0x0a, 0x13, 0x77, 0x6f, 0x72, 0x6b, 0x69, 0x6e, 0x67, 0x73, 0x65, 0x74,
+	0x5f, 0x61, 0x63, 0x74, 0x69, 0x76, 0x61, 0x74, 0x65, 0x18, 0x15, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x12, 0x77, 0x6f, 0x72, 0x6b, 0x69, 0x6e, 0x67, 0x73, 0x65, 0x74, 0x41, 0x63, 0x74, 0x69, 0x76,
+	0x61, 0x74, 0x65, 0x12, 0x35, 0x0a, 0x16, 0x77, 0x6f, 0x72, 0x6b, 0x69, 0x6e, 0x67, 0x73, 0x65,
+	0x74, 0x5f, 0x6e, 0x6f, 0x64, 0x65, 0x72, 0x65, 0x63, 0x6c, 0x61, 0x69, 0x6d, 0x18, 0x16, 0x20,
+	0x01, 0x28, 0x04, 0x52, 0x15, 0x77, 0x6f, 0x72, 0x6b, 0x69, 0x6e, 0x67, 0x73, 0x65, 0x74, 0x4e,
+	0x6f, 0x64, 0x65, 0x72, 0x65, 0x63, 0x6c, 0x61, 0x69, 0x6d, 0x12, 0x1a, 0x0a, 0x08, 0x70, 0x67,
+	0x72, 0x65, 0x66, 0x69, 0x6c, 0x6c, 0x18, 0x17, 0x20, 0x01, 0x28, 0x04, 0x52, 0x08, 0x70, 0x67,
+	0x72, 0x65, 0x66, 0x69, 0x6c, 0x6c, 0x12, 0x16, 0x0a, 0x06, 0x70, 0x67, 0x73, 0x63, 0x61, 0x6e,
+	0x18, 0x18, 0x20, 0x01, 0x28, 0x04, 0x52, 0x06, 0x70, 0x67, 0x73, 0x63, 0x61, 0x6e, 0x12, 0x18,
+	0x0a, 0x07, 0x70, 0x67, 0x73, 0x74, 0x65, 0x61, 0x6c, 0x18, 0x19, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x07, 0x70, 0x67, 0x73, 0x74, 0x65, 0x61, 0x6c, 0x12, 0x1e, 0x0a, 0x0a, 0x70, 0x67, 0x61, 0x63,
+	0x74, 0x69, 0x76, 0x61, 0x74, 0x65, 0x18, 0x1a, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0a, 0x70, 0x67,
+	0x61, 0x63, 0x74, 0x69, 0x76, 0x61, 0x74, 0x65, 0x12, 0x22, 0x0a, 0x0c, 0x70, 0x67, 0x64, 0x65,
+	0x61, 0x63, 0x74, 0x69, 0x76, 0x61, 0x74, 0x65, 0x18, 0x1b, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0c,
+	0x70, 0x67, 0x64, 0x65, 0x61, 0x63, 0x74, 0x69, 0x76, 0x61, 0x74, 0x65, 0x12, 0x1e, 0x0a, 0x0a,
+	0x70, 0x67, 0x6c, 0x61, 0x7a, 0x79, 0x66, 0x72, 0x65, 0x65, 0x18, 0x1c, 0x20, 0x01, 0x28, 0x04,
+	0x52, 0x0a, 0x70, 0x67, 0x6c, 0x61, 0x7a, 0x79, 0x66, 0x72, 0x65, 0x65, 0x12, 0x20, 0x0a, 0x0b,
+	0x70, 0x67, 0x6c, 0x61, 0x7a, 0x79, 0x66, 0x72, 0x65, 0x65, 0x64, 0x18, 0x1d, 0x20, 0x01, 0x28,
+	0x04, 0x52, 0x0b, 0x70, 0x67, 0x6c, 0x61, 0x7a, 0x79, 0x66, 0x72, 0x65, 0x65, 0x64, 0x12, 0x26,
+	0x0a, 0x0f, 0x74, 0x68, 0x70, 0x5f, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x5f, 0x61, 0x6c, 0x6c, 0x6f,
+	0x63, 0x18, 0x1e, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0d, 0x74, 0x68, 0x70, 0x46, 0x61, 0x75, 0x6c,
+	0x74, 0x41, 0x6c, 0x6c, 0x6f, 0x63, 0x12, 0x2c, 0x0a, 0x12, 0x74, 0x68, 0x70, 0x5f, 0x63, 0x6f,
+	0x6c, 0x6c, 0x61, 0x70, 0x73, 0x65, 0x5f, 0x61, 0x6c, 0x6c, 0x6f, 0x63, 0x18, 0x1f, 0x20, 0x01,
+	0x28, 0x04, 0x52, 0x10, 0x74, 0x68, 0x70, 0x43, 0x6f, 0x6c, 0x6c, 0x61, 0x70, 0x73, 0x65, 0x41,
+	0x6c, 0x6c, 0x6f, 0x63, 0x12, 0x14, 0x0a, 0x05, 0x75, 0x73, 0x61, 0x67, 0x65, 0x18, 0x20, 0x20,
+	0x01, 0x28, 0x04, 0x52, 0x05, 0x75, 0x73, 0x61, 0x67, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x75, 0x73,
+	0x61, 0x67, 0x65, 0x5f, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x18, 0x21, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x0a, 0x75, 0x73, 0x61, 0x67, 0x65, 0x4c, 0x69, 0x6d, 0x69, 0x74, 0x12, 0x1d, 0x0a, 0x0a, 0x73,
+	0x77, 0x61, 0x70, 0x5f, 0x75, 0x73, 0x61, 0x67, 0x65, 0x18, 0x22, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x09, 0x73, 0x77, 0x61, 0x70, 0x55, 0x73, 0x61, 0x67, 0x65, 0x12, 0x1d, 0x0a, 0x0a, 0x73, 0x77,
+	0x61, 0x70, 0x5f, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x18, 0x23, 0x20, 0x01, 0x28, 0x04, 0x52, 0x09,
+	0x73, 0x77, 0x61, 0x70, 0x4c, 0x69, 0x6d, 0x69, 0x74, 0x12, 0x1b, 0x0a, 0x09, 0x6d, 0x61, 0x78,
+	0x5f, 0x75, 0x73, 0x61, 0x67, 0x65, 0x18, 0x24, 0x20, 0x01, 0x28, 0x04, 0x52, 0x08, 0x6d, 0x61,
+	0x78, 0x55, 0x73, 0x61, 0x67, 0x65, 0x12, 0x24, 0x0a, 0x0e, 0x73, 0x77, 0x61, 0x70, 0x5f, 0x6d,
+	0x61, 0x78, 0x5f, 0x75, 0x73, 0x61, 0x67, 0x65, 0x18, 0x25, 0x20, 0x01, 0x28, 0x04, 0x52, 0x0c,
+	0x73, 0x77, 0x61, 0x70, 0x4d, 0x61, 0x78, 0x55, 0x73, 0x61, 0x67, 0x65, 0x12, 0x34, 0x0a, 0x03,
+	0x70, 0x73, 0x69, 0x18, 0x26, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x69, 0x6f, 0x2e, 0x63,
+	0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70,
+	0x73, 0x2e, 0x76, 0x32, 0x2e, 0x50, 0x53, 0x49, 0x53, 0x74, 0x61, 0x74, 0x73, 0x52, 0x03, 0x70,
+	0x73, 0x69, 0x22, 0x73, 0x0a, 0x0c, 0x4d, 0x65, 0x6d, 0x6f, 0x72, 0x79, 0x45, 0x76, 0x65, 0x6e,
+	0x74, 0x73, 0x12, 0x10, 0x0a, 0x03, 0x6c, 0x6f, 0x77, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x03, 0x6c, 0x6f, 0x77, 0x12, 0x12, 0x0a, 0x04, 0x68, 0x69, 0x67, 0x68, 0x18, 0x02, 0x20, 0x01,
+	0x28, 0x04, 0x52, 0x04, 0x68, 0x69, 0x67, 0x68, 0x12, 0x10, 0x0a, 0x03, 0x6d, 0x61, 0x78, 0x18,
+	0x03, 0x20, 0x01, 0x28, 0x04, 0x52, 0x03, 0x6d, 0x61, 0x78, 0x12, 0x10, 0x0a, 0x03, 0x6f, 0x6f,
+	0x6d, 0x18, 0x04, 0x20, 0x01, 0x28, 0x04, 0x52, 0x03, 0x6f, 0x6f, 0x6d, 0x12, 0x19, 0x0a, 0x08,
+	0x6f, 0x6f, 0x6d, 0x5f, 0x6b, 0x69, 0x6c, 0x6c, 0x18, 0x05, 0x20, 0x01, 0x28, 0x04, 0x52, 0x07,
+	0x6f, 0x6f, 0x6d, 0x4b, 0x69, 0x6c, 0x6c, 0x22, 0x84, 0x01, 0x0a, 0x08, 0x52, 0x64, 0x6d, 0x61,
+	0x53, 0x74, 0x61, 0x74, 0x12, 0x3d, 0x0a, 0x07, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x18,
+	0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61,
+	0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x32,
+	0x2e, 0x52, 0x64, 0x6d, 0x61, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x07, 0x63, 0x75, 0x72, 0x72,
+	0x65, 0x6e, 0x74, 0x12, 0x39, 0x0a, 0x05, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x18, 0x02, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x23, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65,
+	0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x32, 0x2e, 0x52, 0x64,
+	0x6d, 0x61, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x05, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x22, 0x65,
+	0x0a, 0x09, 0x52, 0x64, 0x6d, 0x61, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x16, 0x0a, 0x06, 0x64,
+	0x65, 0x76, 0x69, 0x63, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x64, 0x65, 0x76,
+	0x69, 0x63, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x68, 0x63, 0x61, 0x5f, 0x68, 0x61, 0x6e, 0x64, 0x6c,
+	0x65, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x0a, 0x68, 0x63, 0x61, 0x48, 0x61, 0x6e,
+	0x64, 0x6c, 0x65, 0x73, 0x12, 0x1f, 0x0a, 0x0b, 0x68, 0x63, 0x61, 0x5f, 0x6f, 0x62, 0x6a, 0x65,
+	0x63, 0x74, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x0a, 0x68, 0x63, 0x61, 0x4f, 0x62,
+	0x6a, 0x65, 0x63, 0x74, 0x73, 0x22, 0x77, 0x0a, 0x06, 0x49, 0x4f, 0x53, 0x74, 0x61, 0x74, 0x12,
+	0x37, 0x0a, 0x05, 0x75, 0x73, 0x61, 0x67, 0x65, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x21,
+	0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63,
+	0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x32, 0x2e, 0x49, 0x4f, 0x45, 0x6e, 0x74, 0x72,
+	0x79, 0x52, 0x05, 0x75, 0x73, 0x61, 0x67, 0x65, 0x12, 0x34, 0x0a, 0x03, 0x70, 0x73, 0x69, 0x18,
+	0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x69, 0x6f, 0x2e, 0x63, 0x6f, 0x6e, 0x74, 0x61,
+	0x69, 0x6e, 0x65, 0x72, 0x64, 0x2e, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2e, 0x76, 0x32,
+	0x2e, 0x50, 0x53, 0x49, 0x53, 0x74, 0x61, 0x74, 0x73, 0x52, 0x03, 0x70, 0x73, 0x69, 0x22, 0x8d,
+	0x01, 0x0a, 0x07, 0x49, 0x4f, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x6d, 0x61,
+	0x6a, 0x6f, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04, 0x52, 0x05, 0x6d, 0x61, 0x6a, 0x6f, 0x72,
+	0x12, 0x14, 0x0a, 0x05, 0x6d, 0x69, 0x6e, 0x6f, 0x72, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x05, 0x6d, 0x69, 0x6e, 0x6f, 0x72, 0x12, 0x16, 0x0a, 0x06, 0x72, 0x62, 0x79, 0x74, 0x65, 0x73,
+	0x18, 0x03, 0x20, 0x01, 0x28, 0x04, 0x52, 0x06, 0x72, 0x62, 0x79, 0x74, 0x65, 0x73, 0x12, 0x16,
+	0x0a, 0x06, 0x77, 0x62, 0x79, 0x74, 0x65, 0x73, 0x18, 0x04, 0x20, 0x01, 0x28, 0x04, 0x52, 0x06,
+	0x77, 0x62, 0x79, 0x74, 0x65, 0x73, 0x12, 0x12, 0x0a, 0x04, 0x72, 0x69, 0x6f, 0x73, 0x18, 0x05,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x04, 0x72, 0x69, 0x6f, 0x73, 0x12, 0x12, 0x0a, 0x04, 0x77, 0x69,
+	0x6f, 0x73, 0x18, 0x06, 0x20, 0x01, 0x28, 0x04, 0x52, 0x04, 0x77, 0x69, 0x6f, 0x73, 0x22, 0x55,
+	0x0a, 0x0b, 0x48, 0x75, 0x67, 0x65, 0x54, 0x6c, 0x62, 0x53, 0x74, 0x61, 0x74, 0x12, 0x18, 0x0a,
+	0x07, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04, 0x52, 0x07,
+	0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x12, 0x10, 0x0a, 0x03, 0x6d, 0x61, 0x78, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x04, 0x52, 0x03, 0x6d, 0x61, 0x78, 0x12, 0x1a, 0x0a, 0x08, 0x70, 0x61, 0x67,
+	0x65, 0x73, 0x69, 0x7a, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x70, 0x61, 0x67,
+	0x65, 0x73, 0x69, 0x7a, 0x65, 0x42, 0x2d, 0x5a, 0x2b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e,
+	0x63, 0x6f, 0x6d, 0x2f, 0x63, 0x6f, 0x6e, 0x74, 0x61, 0x69, 0x6e, 0x65, 0x72, 0x64, 0x2f, 0x63,
+	0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x2f, 0x63, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x32, 0x2f, 0x73,
+	0x74, 0x61, 0x74, 0x73, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+}
+
+var (
+	file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescOnce sync.Once
+	file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescData = file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDesc
+)
+
+func file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescGZIP() []byte {
+	file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescOnce.Do(func() {
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescData = protoimpl.X.CompressGZIP(file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescData)
+	})
+	return file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDescData
+}
+
+var file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes = make([]protoimpl.MessageInfo, 12)
+var file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_goTypes = []interface{}{
+	(*Metrics)(nil),      // 0: io.containerd.cgroups.v2.Metrics
+	(*PSIData)(nil),      // 1: io.containerd.cgroups.v2.PSIData
+	(*PSIStats)(nil),     // 2: io.containerd.cgroups.v2.PSIStats
+	(*PidsStat)(nil),     // 3: io.containerd.cgroups.v2.PidsStat
+	(*CPUStat)(nil),      // 4: io.containerd.cgroups.v2.CPUStat
+	(*MemoryStat)(nil),   // 5: io.containerd.cgroups.v2.MemoryStat
+	(*MemoryEvents)(nil), // 6: io.containerd.cgroups.v2.MemoryEvents
+	(*RdmaStat)(nil),     // 7: io.containerd.cgroups.v2.RdmaStat
+	(*RdmaEntry)(nil),    // 8: io.containerd.cgroups.v2.RdmaEntry
+	(*IOStat)(nil),       // 9: io.containerd.cgroups.v2.IOStat
+	(*IOEntry)(nil),      // 10: io.containerd.cgroups.v2.IOEntry
+	(*HugeTlbStat)(nil),  // 11: io.containerd.cgroups.v2.HugeTlbStat
+}
+var file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_depIdxs = []int32{
+	3,  // 0: io.containerd.cgroups.v2.Metrics.pids:type_name -> io.containerd.cgroups.v2.PidsStat
+	4,  // 1: io.containerd.cgroups.v2.Metrics.cpu:type_name -> io.containerd.cgroups.v2.CPUStat
+	5,  // 2: io.containerd.cgroups.v2.Metrics.memory:type_name -> io.containerd.cgroups.v2.MemoryStat
+	7,  // 3: io.containerd.cgroups.v2.Metrics.rdma:type_name -> io.containerd.cgroups.v2.RdmaStat
+	9,  // 4: io.containerd.cgroups.v2.Metrics.io:type_name -> io.containerd.cgroups.v2.IOStat
+	11, // 5: io.containerd.cgroups.v2.Metrics.hugetlb:type_name -> io.containerd.cgroups.v2.HugeTlbStat
+	6,  // 6: io.containerd.cgroups.v2.Metrics.memory_events:type_name -> io.containerd.cgroups.v2.MemoryEvents
+	1,  // 7: io.containerd.cgroups.v2.PSIStats.some:type_name -> io.containerd.cgroups.v2.PSIData
+	1,  // 8: io.containerd.cgroups.v2.PSIStats.full:type_name -> io.containerd.cgroups.v2.PSIData
+	2,  // 9: io.containerd.cgroups.v2.CPUStat.psi:type_name -> io.containerd.cgroups.v2.PSIStats
+	2,  // 10: io.containerd.cgroups.v2.MemoryStat.psi:type_name -> io.containerd.cgroups.v2.PSIStats
+	8,  // 11: io.containerd.cgroups.v2.RdmaStat.current:type_name -> io.containerd.cgroups.v2.RdmaEntry
+	8,  // 12: io.containerd.cgroups.v2.RdmaStat.limit:type_name -> io.containerd.cgroups.v2.RdmaEntry
+	10, // 13: io.containerd.cgroups.v2.IOStat.usage:type_name -> io.containerd.cgroups.v2.IOEntry
+	2,  // 14: io.containerd.cgroups.v2.IOStat.psi:type_name -> io.containerd.cgroups.v2.PSIStats
+	15, // [15:15] is the sub-list for method output_type
+	15, // [15:15] is the sub-list for method input_type
+	15, // [15:15] is the sub-list for extension type_name
+	15, // [15:15] is the sub-list for extension extendee
+	0,  // [0:15] is the sub-list for field type_name
+}
+
+func init() { file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_init() }
+func file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_init() {
+	if File_github_com_containerd_cgroups_cgroup2_stats_metrics_proto != nil {
+		return
+	}
+	if !protoimpl.UnsafeEnabled {
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[0].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*Metrics); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[1].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*PSIData); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[2].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*PSIStats); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[3].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*PidsStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[4].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CPUStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[5].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*MemoryStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[6].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*MemoryEvents); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[7].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*RdmaStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[8].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*RdmaEntry); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[9].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*IOStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[10].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*IOEntry); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes[11].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*HugeTlbStat); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+	}
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDesc,
+			NumEnums:      0,
+			NumMessages:   12,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_goTypes,
+		DependencyIndexes: file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_depIdxs,
+		MessageInfos:      file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_msgTypes,
+	}.Build()
+	File_github_com_containerd_cgroups_cgroup2_stats_metrics_proto = out.File
+	file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_rawDesc = nil
+	file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_goTypes = nil
+	file_github_com_containerd_cgroups_cgroup2_stats_metrics_proto_depIdxs = nil
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.pb.txt b/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.pb.txt
new file mode 100644
index 00000000000..26f5ba5de7e
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.pb.txt
@@ -0,0 +1,626 @@
+file {
+  name: "github.com/containerd/cgroups/cgroup2/stats/metrics.proto"
+  package: "io.containerd.cgroups.v2"
+  message_type {
+    name: "Metrics"
+    field {
+      name: "pids"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.PidsStat"
+      json_name: "pids"
+    }
+    field {
+      name: "cpu"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.CPUStat"
+      json_name: "cpu"
+    }
+    field {
+      name: "memory"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.MemoryStat"
+      json_name: "memory"
+    }
+    field {
+      name: "rdma"
+      number: 5
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.RdmaStat"
+      json_name: "rdma"
+    }
+    field {
+      name: "io"
+      number: 6
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.IOStat"
+      json_name: "io"
+    }
+    field {
+      name: "hugetlb"
+      number: 7
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.HugeTlbStat"
+      json_name: "hugetlb"
+    }
+    field {
+      name: "memory_events"
+      number: 8
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.MemoryEvents"
+      json_name: "memoryEvents"
+    }
+  }
+  message_type {
+    name: "PSIData"
+    field {
+      name: "avg10"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_DOUBLE
+      json_name: "avg10"
+    }
+    field {
+      name: "avg60"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_DOUBLE
+      json_name: "avg60"
+    }
+    field {
+      name: "avg300"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_DOUBLE
+      json_name: "avg300"
+    }
+    field {
+      name: "total"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "total"
+    }
+  }
+  message_type {
+    name: "PSIStats"
+    field {
+      name: "some"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.PSIData"
+      json_name: "some"
+    }
+    field {
+      name: "full"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.PSIData"
+      json_name: "full"
+    }
+  }
+  message_type {
+    name: "PidsStat"
+    field {
+      name: "current"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "current"
+    }
+    field {
+      name: "limit"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "limit"
+    }
+  }
+  message_type {
+    name: "CPUStat"
+    field {
+      name: "usage_usec"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "usageUsec"
+    }
+    field {
+      name: "user_usec"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "userUsec"
+    }
+    field {
+      name: "system_usec"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "systemUsec"
+    }
+    field {
+      name: "nr_periods"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "nrPeriods"
+    }
+    field {
+      name: "nr_throttled"
+      number: 5
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "nrThrottled"
+    }
+    field {
+      name: "throttled_usec"
+      number: 6
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "throttledUsec"
+    }
+    field {
+      name: "psi"
+      number: 7
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.PSIStats"
+      json_name: "psi"
+    }
+  }
+  message_type {
+    name: "MemoryStat"
+    field {
+      name: "anon"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "anon"
+    }
+    field {
+      name: "file"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "file"
+    }
+    field {
+      name: "kernel_stack"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "kernelStack"
+    }
+    field {
+      name: "slab"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "slab"
+    }
+    field {
+      name: "sock"
+      number: 5
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "sock"
+    }
+    field {
+      name: "shmem"
+      number: 6
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "shmem"
+    }
+    field {
+      name: "file_mapped"
+      number: 7
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "fileMapped"
+    }
+    field {
+      name: "file_dirty"
+      number: 8
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "fileDirty"
+    }
+    field {
+      name: "file_writeback"
+      number: 9
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "fileWriteback"
+    }
+    field {
+      name: "anon_thp"
+      number: 10
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "anonThp"
+    }
+    field {
+      name: "inactive_anon"
+      number: 11
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "inactiveAnon"
+    }
+    field {
+      name: "active_anon"
+      number: 12
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "activeAnon"
+    }
+    field {
+      name: "inactive_file"
+      number: 13
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "inactiveFile"
+    }
+    field {
+      name: "active_file"
+      number: 14
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "activeFile"
+    }
+    field {
+      name: "unevictable"
+      number: 15
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "unevictable"
+    }
+    field {
+      name: "slab_reclaimable"
+      number: 16
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "slabReclaimable"
+    }
+    field {
+      name: "slab_unreclaimable"
+      number: 17
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "slabUnreclaimable"
+    }
+    field {
+      name: "pgfault"
+      number: 18
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pgfault"
+    }
+    field {
+      name: "pgmajfault"
+      number: 19
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pgmajfault"
+    }
+    field {
+      name: "workingset_refault"
+      number: 20
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "workingsetRefault"
+    }
+    field {
+      name: "workingset_activate"
+      number: 21
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "workingsetActivate"
+    }
+    field {
+      name: "workingset_nodereclaim"
+      number: 22
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "workingsetNodereclaim"
+    }
+    field {
+      name: "pgrefill"
+      number: 23
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pgrefill"
+    }
+    field {
+      name: "pgscan"
+      number: 24
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pgscan"
+    }
+    field {
+      name: "pgsteal"
+      number: 25
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pgsteal"
+    }
+    field {
+      name: "pgactivate"
+      number: 26
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pgactivate"
+    }
+    field {
+      name: "pgdeactivate"
+      number: 27
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pgdeactivate"
+    }
+    field {
+      name: "pglazyfree"
+      number: 28
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pglazyfree"
+    }
+    field {
+      name: "pglazyfreed"
+      number: 29
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "pglazyfreed"
+    }
+    field {
+      name: "thp_fault_alloc"
+      number: 30
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "thpFaultAlloc"
+    }
+    field {
+      name: "thp_collapse_alloc"
+      number: 31
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "thpCollapseAlloc"
+    }
+    field {
+      name: "usage"
+      number: 32
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "usage"
+    }
+    field {
+      name: "usage_limit"
+      number: 33
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "usageLimit"
+    }
+    field {
+      name: "swap_usage"
+      number: 34
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "swapUsage"
+    }
+    field {
+      name: "swap_limit"
+      number: 35
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "swapLimit"
+    }
+    field {
+      name: "max_usage"
+      number: 36
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "maxUsage"
+    }
+    field {
+      name: "swap_max_usage"
+      number: 37
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "swapMaxUsage"
+    }
+    field {
+      name: "psi"
+      number: 38
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.PSIStats"
+      json_name: "psi"
+    }
+  }
+  message_type {
+    name: "MemoryEvents"
+    field {
+      name: "low"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "low"
+    }
+    field {
+      name: "high"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "high"
+    }
+    field {
+      name: "max"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "max"
+    }
+    field {
+      name: "oom"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "oom"
+    }
+    field {
+      name: "oom_kill"
+      number: 5
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "oomKill"
+    }
+  }
+  message_type {
+    name: "RdmaStat"
+    field {
+      name: "current"
+      number: 1
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.RdmaEntry"
+      json_name: "current"
+    }
+    field {
+      name: "limit"
+      number: 2
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.RdmaEntry"
+      json_name: "limit"
+    }
+  }
+  message_type {
+    name: "RdmaEntry"
+    field {
+      name: "device"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_STRING
+      json_name: "device"
+    }
+    field {
+      name: "hca_handles"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT32
+      json_name: "hcaHandles"
+    }
+    field {
+      name: "hca_objects"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT32
+      json_name: "hcaObjects"
+    }
+  }
+  message_type {
+    name: "IOStat"
+    field {
+      name: "usage"
+      number: 1
+      label: LABEL_REPEATED
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.IOEntry"
+      json_name: "usage"
+    }
+    field {
+      name: "psi"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".io.containerd.cgroups.v2.PSIStats"
+      json_name: "psi"
+    }
+  }
+  message_type {
+    name: "IOEntry"
+    field {
+      name: "major"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "major"
+    }
+    field {
+      name: "minor"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "minor"
+    }
+    field {
+      name: "rbytes"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "rbytes"
+    }
+    field {
+      name: "wbytes"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "wbytes"
+    }
+    field {
+      name: "rios"
+      number: 5
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "rios"
+    }
+    field {
+      name: "wios"
+      number: 6
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "wios"
+    }
+  }
+  message_type {
+    name: "HugeTlbStat"
+    field {
+      name: "current"
+      number: 1
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "current"
+    }
+    field {
+      name: "max"
+      number: 2
+      label: LABEL_OPTIONAL
+      type: TYPE_UINT64
+      json_name: "max"
+    }
+    field {
+      name: "pagesize"
+      number: 3
+      label: LABEL_OPTIONAL
+      type: TYPE_STRING
+      json_name: "pagesize"
+    }
+  }
+  options {
+    go_package: "github.com/containerd/cgroups/cgroup2/stats"
+  }
+  syntax: "proto3"
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.proto b/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.proto
new file mode 100644
index 00000000000..a4eae7a4e19
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/stats/metrics.proto
@@ -0,0 +1,122 @@
+syntax = "proto3";
+
+package io.containerd.cgroups.v2;
+
+option go_package = "github.com/containerd/cgroups/cgroup2/stats";
+
+message Metrics {
+	PidsStat pids = 1;
+	CPUStat cpu = 2;
+	MemoryStat memory = 4;
+	RdmaStat rdma = 5;
+	IOStat io = 6;
+	repeated HugeTlbStat hugetlb = 7;
+	MemoryEvents memory_events = 8;
+}
+
+message PSIData {
+	double avg10 = 1;
+	double avg60 = 2;
+	double avg300 = 3;
+	uint64 total = 4;
+}
+
+message PSIStats {
+	PSIData some = 1;
+	PSIData full = 2;
+}
+
+message PidsStat {
+	uint64 current = 1;
+	uint64 limit = 2;
+}
+
+message CPUStat {
+	uint64 usage_usec  = 1;
+	uint64 user_usec = 2;
+	uint64 system_usec = 3;
+	uint64 nr_periods = 4;
+	uint64 nr_throttled = 5;
+	uint64 throttled_usec = 6;
+	PSIStats psi = 7;
+}
+
+message MemoryStat {
+	uint64 anon = 1;
+	uint64 file = 2;
+	uint64 kernel_stack = 3;
+	uint64 slab = 4;
+	uint64 sock = 5;
+	uint64 shmem = 6;
+	uint64 file_mapped = 7;
+	uint64 file_dirty = 8;
+	uint64 file_writeback = 9;
+	uint64 anon_thp = 10;
+	uint64 inactive_anon = 11;
+	uint64 active_anon = 12;
+	uint64 inactive_file = 13;
+	uint64 active_file = 14;
+	uint64 unevictable = 15;
+	uint64 slab_reclaimable = 16;
+	uint64 slab_unreclaimable = 17;
+	uint64 pgfault = 18;
+	uint64 pgmajfault = 19;
+	uint64 workingset_refault = 20;
+	uint64 workingset_activate = 21;
+	uint64 workingset_nodereclaim = 22;
+	uint64 pgrefill = 23;
+	uint64 pgscan = 24;
+	uint64 pgsteal = 25;
+	uint64 pgactivate = 26;
+	uint64 pgdeactivate = 27;
+	uint64 pglazyfree = 28;
+	uint64 pglazyfreed = 29;
+	uint64 thp_fault_alloc = 30;
+	uint64 thp_collapse_alloc = 31;
+	uint64 usage = 32;
+	uint64 usage_limit = 33;
+	uint64 swap_usage = 34;
+	uint64 swap_limit = 35;
+	uint64 max_usage = 36;
+	uint64 swap_max_usage = 37;
+	PSIStats psi = 38;
+}
+
+message MemoryEvents {
+	uint64 low = 1;
+	uint64 high = 2;
+	uint64 max = 3;
+	uint64 oom = 4;
+	uint64 oom_kill = 5;
+}
+
+message RdmaStat {
+	repeated RdmaEntry current = 1;
+	repeated RdmaEntry limit = 2;
+}
+
+message RdmaEntry {
+	string device = 1;
+	uint32 hca_handles = 2;
+	uint32 hca_objects = 3;
+}
+
+message IOStat {
+	repeated IOEntry usage = 1;
+	PSIStats psi = 2;
+}
+
+message IOEntry {
+	uint64 major = 1;
+	uint64 minor = 2;
+	uint64 rbytes = 3;
+	uint64 wbytes = 4;
+	uint64 rios = 5;
+	uint64 wios = 6;
+}
+
+message HugeTlbStat {
+	uint64 current = 1;
+	uint64 max = 2;
+	string pagesize = 3;
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/cgroup2/utils.go b/vendor/github.com/containerd/cgroups/v3/cgroup2/utils.go
new file mode 100644
index 00000000000..20be57ca47e
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/cgroup2/utils.go
@@ -0,0 +1,561 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroup2
+
+import (
+	"bufio"
+	"errors"
+	"fmt"
+	"io"
+	"math"
+	"os"
+	"path/filepath"
+	"strconv"
+	"strings"
+	"sync"
+	"time"
+	"unsafe"
+
+	"github.com/containerd/cgroups/v3/cgroup2/stats"
+
+	"github.com/godbus/dbus/v5"
+	"github.com/opencontainers/runtime-spec/specs-go"
+	"github.com/sirupsen/logrus"
+	"golang.org/x/sys/unix"
+)
+
+const (
+	cgroupProcs    = "cgroup.procs"
+	cgroupThreads  = "cgroup.threads"
+	defaultDirPerm = 0o755
+)
+
+// defaultFilePerm is a var so that the test framework can change the filemode
+// of all files created when the tests are running.  The difference between the
+// tests and real world use is that files like "cgroup.procs" will exist when writing
+// to a read cgroup filesystem and do not exist prior when running in the tests.
+// this is set to a non 0 value in the test code
+var defaultFilePerm = os.FileMode(0)
+
+// remove will remove a cgroup path handling EAGAIN and EBUSY errors and
+// retrying the remove after a exp timeout
+func remove(path string) error {
+	var err error
+	delay := 10 * time.Millisecond
+	for i := 0; i < 5; i++ {
+		if i != 0 {
+			time.Sleep(delay)
+			delay *= 2
+		}
+		if err = os.RemoveAll(path); err == nil {
+			return nil
+		}
+	}
+	return fmt.Errorf("cgroups: unable to remove path %q: %w", path, err)
+}
+
+// parseCgroupTasksFile parses /sys/fs/cgroup/$GROUPPATH/cgroup.procs or
+// /sys/fs/cgroup/$GROUPPATH/cgroup.threads
+func parseCgroupTasksFile(path string) ([]uint64, error) {
+	f, err := os.Open(path)
+	if err != nil {
+		return nil, err
+	}
+	defer f.Close()
+	var (
+		out []uint64
+		s   = bufio.NewScanner(f)
+	)
+	for s.Scan() {
+		if t := s.Text(); t != "" {
+			pid, err := strconv.ParseUint(t, 10, 0)
+			if err != nil {
+				return nil, err
+			}
+			out = append(out, pid)
+		}
+	}
+	if err := s.Err(); err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func parseKV(raw string) (string, uint64, error) {
+	parts := strings.Fields(raw)
+	if len(parts) != 2 {
+		return "", 0, ErrInvalidFormat
+	}
+	v, err := parseUint(parts[1], 10, 64)
+	return parts[0], v, err
+}
+
+func parseUint(s string, base, bitSize int) (uint64, error) {
+	v, err := strconv.ParseUint(s, base, bitSize)
+	if err != nil {
+		intValue, intErr := strconv.ParseInt(s, base, bitSize)
+		// 1. Handle negative values greater than MinInt64 (and)
+		// 2. Handle negative values lesser than MinInt64
+		if intErr == nil && intValue < 0 {
+			return 0, nil
+		} else if intErr != nil &&
+			intErr.(*strconv.NumError).Err == strconv.ErrRange &&
+			intValue < 0 {
+			return 0, nil
+		}
+		return 0, err
+	}
+	return v, nil
+}
+
+// parseCgroupFile parses /proc/PID/cgroup file and return string
+func parseCgroupFile(path string) (string, error) {
+	f, err := os.Open(path)
+	if err != nil {
+		return "", err
+	}
+	defer f.Close()
+	return parseCgroupFromReader(f)
+}
+
+func parseCgroupFromReader(r io.Reader) (string, error) {
+	s := bufio.NewScanner(r)
+	for s.Scan() {
+		var (
+			text  = s.Text()
+			parts = strings.SplitN(text, ":", 3)
+		)
+		if len(parts) < 3 {
+			return "", fmt.Errorf("invalid cgroup entry: %q", text)
+		}
+		// text is like "0::/user.slice/user-1001.slice/session-1.scope"
+		if parts[0] == "0" && parts[1] == "" {
+			return parts[2], nil
+		}
+	}
+	if err := s.Err(); err != nil {
+		return "", err
+	}
+	return "", fmt.Errorf("cgroup path not found")
+}
+
+// ToResources converts the oci LinuxResources struct into a
+// v2 Resources type for use with this package.
+//
+// converting cgroups configuration from v1 to v2
+// ref: https://github.com/containers/crun/blob/master/crun.1.md#cgroup-v2
+func ToResources(spec *specs.LinuxResources) *Resources {
+	var resources Resources
+	if cpu := spec.CPU; cpu != nil {
+		resources.CPU = &CPU{
+			Cpus: cpu.Cpus,
+			Mems: cpu.Mems,
+		}
+		if shares := cpu.Shares; shares != nil {
+			convertedWeight := 1 + ((*shares-2)*9999)/262142
+			resources.CPU.Weight = &convertedWeight
+		}
+		if period := cpu.Period; period != nil {
+			resources.CPU.Max = NewCPUMax(cpu.Quota, period)
+		}
+	}
+	if mem := spec.Memory; mem != nil {
+		resources.Memory = &Memory{}
+		if swap := mem.Swap; swap != nil {
+			resources.Memory.Swap = swap
+			if l := mem.Limit; l != nil {
+				reduce := *swap - *l
+				resources.Memory.Swap = &reduce
+			}
+		}
+		if l := mem.Limit; l != nil {
+			resources.Memory.Max = l
+		}
+		if l := mem.Reservation; l != nil {
+			resources.Memory.Low = l
+		}
+	}
+	if hugetlbs := spec.HugepageLimits; hugetlbs != nil {
+		hugeTlbUsage := HugeTlb{}
+		for _, hugetlb := range hugetlbs {
+			hugeTlbUsage = append(hugeTlbUsage, HugeTlbEntry{
+				HugePageSize: hugetlb.Pagesize,
+				Limit:        hugetlb.Limit,
+			})
+		}
+		resources.HugeTlb = &hugeTlbUsage
+	}
+	if pids := spec.Pids; pids != nil {
+		resources.Pids = &Pids{
+			Max: pids.Limit,
+		}
+	}
+	if i := spec.BlockIO; i != nil {
+		resources.IO = &IO{}
+		if i.Weight != nil {
+			resources.IO.BFQ.Weight = 1 + (*i.Weight-10)*9999/990
+		}
+		for t, devices := range map[IOType][]specs.LinuxThrottleDevice{
+			ReadBPS:   i.ThrottleReadBpsDevice,
+			WriteBPS:  i.ThrottleWriteBpsDevice,
+			ReadIOPS:  i.ThrottleReadIOPSDevice,
+			WriteIOPS: i.ThrottleWriteIOPSDevice,
+		} {
+			for _, d := range devices {
+				resources.IO.Max = append(resources.IO.Max, Entry{
+					Type:  t,
+					Major: d.Major,
+					Minor: d.Minor,
+					Rate:  d.Rate,
+				})
+			}
+		}
+	}
+	if i := spec.Rdma; i != nil {
+		resources.RDMA = &RDMA{}
+		for device, value := range spec.Rdma {
+			if device != "" && (value.HcaHandles != nil && value.HcaObjects != nil) {
+				resources.RDMA.Limit = append(resources.RDMA.Limit, RDMAEntry{
+					Device:     device,
+					HcaHandles: *value.HcaHandles,
+					HcaObjects: *value.HcaObjects,
+				})
+			}
+		}
+	}
+
+	return &resources
+}
+
+// Gets uint64 parsed content of single value cgroup stat file
+func getStatFileContentUint64(filePath string) uint64 {
+	f, err := os.Open(filePath)
+	if err != nil {
+		return 0
+	}
+	defer f.Close()
+
+	// We expect an unsigned 64 bit integer, or a "max" string
+	// in some cases.
+	buf := make([]byte, 32)
+	n, err := f.Read(buf)
+	if err != nil {
+		return 0
+	}
+
+	trimmed := strings.TrimSpace(string(buf[:n]))
+	if trimmed == "max" {
+		return math.MaxUint64
+	}
+
+	res, err := parseUint(trimmed, 10, 64)
+	if err != nil {
+		logrus.Errorf("unable to parse %q as a uint from Cgroup file %q", trimmed, filePath)
+		return res
+	}
+
+	return res
+}
+
+func readIoStats(path string) []*stats.IOEntry {
+	// more details on the io.stat file format: https://www.kernel.org/doc/Documentation/cgroup-v2.txt
+	var usage []*stats.IOEntry
+	fpath := filepath.Join(path, "io.stat")
+	currentData, err := os.ReadFile(fpath)
+	if err != nil {
+		return usage
+	}
+	entries := strings.Split(string(currentData), "\n")
+
+	for _, entry := range entries {
+		parts := strings.Split(entry, " ")
+		if len(parts) < 2 {
+			continue
+		}
+		majmin := strings.Split(parts[0], ":")
+		if len(majmin) != 2 {
+			continue
+		}
+		major, err := strconv.ParseUint(majmin[0], 10, 0)
+		if err != nil {
+			return usage
+		}
+		minor, err := strconv.ParseUint(majmin[1], 10, 0)
+		if err != nil {
+			return usage
+		}
+		parts = parts[1:]
+		ioEntry := stats.IOEntry{
+			Major: major,
+			Minor: minor,
+		}
+		for _, s := range parts {
+			keyPairValue := strings.Split(s, "=")
+			if len(keyPairValue) != 2 {
+				continue
+			}
+			v, err := strconv.ParseUint(keyPairValue[1], 10, 0)
+			if err != nil {
+				continue
+			}
+			switch keyPairValue[0] {
+			case "rbytes":
+				ioEntry.Rbytes = v
+			case "wbytes":
+				ioEntry.Wbytes = v
+			case "rios":
+				ioEntry.Rios = v
+			case "wios":
+				ioEntry.Wios = v
+			}
+		}
+		usage = append(usage, &ioEntry)
+	}
+	return usage
+}
+
+func rdmaStats(filepath string) []*stats.RdmaEntry {
+	currentData, err := os.ReadFile(filepath)
+	if err != nil {
+		return []*stats.RdmaEntry{}
+	}
+	return toRdmaEntry(strings.Split(string(currentData), "\n"))
+}
+
+func parseRdmaKV(raw string, entry *stats.RdmaEntry) {
+	var value uint64
+	var err error
+
+	parts := strings.Split(raw, "=")
+	switch len(parts) {
+	case 2:
+		if parts[1] == "max" {
+			value = math.MaxUint32
+		} else {
+			value, err = parseUint(parts[1], 10, 32)
+			if err != nil {
+				return
+			}
+		}
+		if parts[0] == "hca_handle" {
+			entry.HcaHandles = uint32(value)
+		} else if parts[0] == "hca_object" {
+			entry.HcaObjects = uint32(value)
+		}
+	}
+}
+
+func toRdmaEntry(strEntries []string) []*stats.RdmaEntry {
+	var rdmaEntries []*stats.RdmaEntry
+	for i := range strEntries {
+		parts := strings.Fields(strEntries[i])
+		switch len(parts) {
+		case 3:
+			entry := new(stats.RdmaEntry)
+			entry.Device = parts[0]
+			parseRdmaKV(parts[1], entry)
+			parseRdmaKV(parts[2], entry)
+
+			rdmaEntries = append(rdmaEntries, entry)
+		default:
+			continue
+		}
+	}
+	return rdmaEntries
+}
+
+// isUnitExists returns true if the error is that a systemd unit already exists.
+func isUnitExists(err error) bool {
+	if err != nil {
+		if dbusError, ok := err.(dbus.Error); ok {
+			return strings.Contains(dbusError.Name, "org.freedesktop.systemd1.UnitExists")
+		}
+	}
+	return false
+}
+
+func systemdUnitFromPath(path string) string {
+	_, unit := filepath.Split(path)
+	return unit
+}
+
+func readHugeTlbStats(path string) []*stats.HugeTlbStat {
+	hpSizes := hugePageSizes()
+	usage := make([]*stats.HugeTlbStat, len(hpSizes))
+	for idx, pagesize := range hpSizes {
+		usage[idx] = &stats.HugeTlbStat{
+			Max:      getStatFileContentUint64(filepath.Join(path, "hugetlb."+pagesize+".max")),
+			Current:  getStatFileContentUint64(filepath.Join(path, "hugetlb."+pagesize+".current")),
+			Pagesize: pagesize,
+		}
+	}
+	return usage
+}
+
+var (
+	hPageSizes  []string
+	initHPSOnce sync.Once
+)
+
+// The following idea and implementation is taken pretty much line for line from
+// runc. Because the hugetlb files are well known, and the only variable thrown in
+// the mix is what huge page sizes you have on your host, this lends itself well
+// to doing the work to find the files present once, and then re-using this. This
+// saves a os.Readdirnames(0) call to search for hugeltb files on every `manager.Stat`
+// call.
+// https://github.com/opencontainers/runc/blob/3a2c0c2565644d8a7e0f1dd594a060b21fa96cf1/libcontainer/cgroups/utils.go#L301
+func hugePageSizes() []string {
+	initHPSOnce.Do(func() {
+		dir, err := os.OpenFile("/sys/kernel/mm/hugepages", unix.O_DIRECTORY|unix.O_RDONLY, 0)
+		if err != nil {
+			return
+		}
+		files, err := dir.Readdirnames(0)
+		dir.Close()
+		if err != nil {
+			return
+		}
+
+		hPageSizes, err = getHugePageSizeFromFilenames(files)
+		if err != nil {
+			logrus.Warnf("hugePageSizes: %s", err)
+		}
+	})
+
+	return hPageSizes
+}
+
+func getHugePageSizeFromFilenames(fileNames []string) ([]string, error) {
+	pageSizes := make([]string, 0, len(fileNames))
+	var warn error
+
+	for _, file := range fileNames {
+		// example: hugepages-1048576kB
+		val := strings.TrimPrefix(file, "hugepages-")
+		if len(val) == len(file) {
+			// Unexpected file name: no prefix found, ignore it.
+			continue
+		}
+		// In all known versions of Linux up to 6.3 the suffix is always
+		// "kB". If we find something else, produce an error but keep going.
+		eLen := len(val) - 2
+		val = strings.TrimSuffix(val, "kB")
+		if len(val) != eLen {
+			// Highly unlikely.
+			if warn == nil {
+				warn = errors.New(file + `: invalid suffix (expected "kB")`)
+			}
+			continue
+		}
+		size, err := strconv.Atoi(val)
+		if err != nil {
+			// Highly unlikely.
+			if warn == nil {
+				warn = fmt.Errorf("%s: %w", file, err)
+			}
+			continue
+		}
+		// Model after https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/mm/hugetlb_cgroup.c?id=eff48ddeab782e35e58ccc8853f7386bbae9dec4#n574
+		// but in our case the size is in KB already.
+		if size >= (1 << 20) {
+			val = strconv.Itoa(size>>20) + "GB"
+		} else if size >= (1 << 10) {
+			val = strconv.Itoa(size>>10) + "MB"
+		} else {
+			val += "KB"
+		}
+		pageSizes = append(pageSizes, val)
+	}
+
+	return pageSizes, warn
+}
+
+func getStatPSIFromFile(path string) *stats.PSIStats {
+	f, err := os.Open(path)
+	if err != nil {
+		return nil
+	}
+	defer f.Close()
+
+	psistats := &stats.PSIStats{}
+	sc := bufio.NewScanner(f)
+	for sc.Scan() {
+		parts := strings.Fields(sc.Text())
+		var pv *stats.PSIData
+		switch parts[0] {
+		case "some":
+			psistats.Some = &stats.PSIData{}
+			pv = psistats.Some
+		case "full":
+			psistats.Full = &stats.PSIData{}
+			pv = psistats.Full
+		}
+		if pv != nil {
+			err = parsePSIData(parts[1:], pv)
+			if err != nil {
+				logrus.Errorf("failed to read file %s: %v", path, err)
+				return nil
+			}
+		}
+	}
+
+	if err := sc.Err(); err != nil {
+		logrus.Errorf("unable to parse PSI data: %v", err)
+		return nil
+	}
+	return psistats
+}
+
+func parsePSIData(psi []string, data *stats.PSIData) error {
+	for _, f := range psi {
+		kv := strings.SplitN(f, "=", 2)
+		if len(kv) != 2 {
+			return fmt.Errorf("invalid PSI data: %q", f)
+		}
+		var pv *float64
+		switch kv[0] {
+		case "avg10":
+			pv = &data.Avg10
+		case "avg60":
+			pv = &data.Avg60
+		case "avg300":
+			pv = &data.Avg300
+		case "total":
+			v, err := strconv.ParseUint(kv[1], 10, 64)
+			if err != nil {
+				return fmt.Errorf("invalid %s PSI value: %w", kv[0], err)
+			}
+			data.Total = v
+		}
+		if pv != nil {
+			v, err := strconv.ParseFloat(kv[1], 64)
+			if err != nil {
+				return fmt.Errorf("invalid %s PSI value: %w", kv[0], err)
+			}
+			*pv = v
+		}
+	}
+	return nil
+}
+
+func getSubreaper() (int, error) {
+	var i uintptr
+	if err := unix.Prctl(unix.PR_GET_CHILD_SUBREAPER, uintptr(unsafe.Pointer(&i)), 0, 0, 0); err != nil {
+		return -1, err
+	}
+	return int(i), nil
+}
diff --git a/vendor/github.com/containerd/cgroups/v3/utils.go b/vendor/github.com/containerd/cgroups/v3/utils.go
new file mode 100644
index 00000000000..ebff755a761
--- /dev/null
+++ b/vendor/github.com/containerd/cgroups/v3/utils.go
@@ -0,0 +1,150 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package cgroups
+
+import (
+	"bufio"
+	"fmt"
+	"io"
+	"os"
+	"path/filepath"
+	"strings"
+	"sync"
+
+	"golang.org/x/sys/unix"
+)
+
+var (
+	nsOnce    sync.Once
+	inUserNS  bool
+	checkMode sync.Once
+	cgMode    CGMode
+)
+
+const unifiedMountpoint = "/sys/fs/cgroup"
+
+// CGMode is the cgroups mode of the host system
+type CGMode int
+
+const (
+	// Unavailable cgroup mountpoint
+	Unavailable CGMode = iota
+	// Legacy cgroups v1
+	Legacy
+	// Hybrid with cgroups v1 and v2 controllers mounted
+	Hybrid
+	// Unified with only cgroups v2 mounted
+	Unified
+)
+
+// Mode returns the cgroups mode running on the host
+func Mode() CGMode {
+	checkMode.Do(func() {
+		var st unix.Statfs_t
+		if err := unix.Statfs(unifiedMountpoint, &st); err != nil {
+			cgMode = Unavailable
+			return
+		}
+		switch st.Type {
+		case unix.CGROUP2_SUPER_MAGIC:
+			cgMode = Unified
+		default:
+			cgMode = Legacy
+			if err := unix.Statfs(filepath.Join(unifiedMountpoint, "unified"), &st); err != nil {
+				return
+			}
+			if st.Type == unix.CGROUP2_SUPER_MAGIC {
+				cgMode = Hybrid
+			}
+		}
+	})
+	return cgMode
+}
+
+// RunningInUserNS detects whether we are currently running in a user namespace.
+// Copied from github.com/lxc/lxd/shared/util.go
+func RunningInUserNS() bool {
+	nsOnce.Do(func() {
+		file, err := os.Open("/proc/self/uid_map")
+		if err != nil {
+			// This kernel-provided file only exists if user namespaces are supported
+			return
+		}
+		defer file.Close()
+
+		buf := bufio.NewReader(file)
+		l, _, err := buf.ReadLine()
+		if err != nil {
+			return
+		}
+
+		line := string(l)
+		var a, b, c int64
+		fmt.Sscanf(line, "%d %d %d", &a, &b, &c)
+
+		/*
+		 * We assume we are in the initial user namespace if we have a full
+		 * range - 4294967295 uids starting at uid 0.
+		 */
+		if a == 0 && b == 0 && c == 4294967295 {
+			return
+		}
+		inUserNS = true
+	})
+	return inUserNS
+}
+
+// ParseCgroupFileUnified returns legacy subsystem paths as the first value,
+// and returns the unified path as the second value.
+func ParseCgroupFileUnified(path string) (map[string]string, string, error) {
+	f, err := os.Open(path)
+	if err != nil {
+		return nil, "", err
+	}
+	defer f.Close()
+	return ParseCgroupFromReaderUnified(f)
+}
+
+// ParseCgroupFromReaderUnified returns legacy subsystem paths as the first value,
+// and returns the unified path as the second value.
+func ParseCgroupFromReaderUnified(r io.Reader) (map[string]string, string, error) {
+	var (
+		cgroups = make(map[string]string)
+		unified = ""
+		s       = bufio.NewScanner(r)
+	)
+	for s.Scan() {
+		var (
+			text  = s.Text()
+			parts = strings.SplitN(text, ":", 3)
+		)
+		if len(parts) < 3 {
+			return nil, unified, fmt.Errorf("invalid cgroup entry: %q", text)
+		}
+		for _, subs := range strings.Split(parts[1], ",") {
+			if subs == "" {
+				unified = parts[2]
+			} else {
+				cgroups[subs] = parts[2]
+			}
+		}
+	}
+	if err := s.Err(); err != nil {
+		return nil, unified, err
+	}
+	return cgroups, unified, nil
+}
diff --git a/vendor/github.com/coreos/go-systemd/v22/dbus/dbus.go b/vendor/github.com/coreos/go-systemd/v22/dbus/dbus.go
new file mode 100644
index 00000000000..147f756fe24
--- /dev/null
+++ b/vendor/github.com/coreos/go-systemd/v22/dbus/dbus.go
@@ -0,0 +1,266 @@
+// Copyright 2015 CoreOS, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// Integration with the systemd D-Bus API.  See http://www.freedesktop.org/wiki/Software/systemd/dbus/
+package dbus
+
+import (
+	"context"
+	"encoding/hex"
+	"fmt"
+	"os"
+	"strconv"
+	"strings"
+	"sync"
+
+	"github.com/godbus/dbus/v5"
+)
+
+const (
+	alpha        = `abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ`
+	num          = `0123456789`
+	alphanum     = alpha + num
+	signalBuffer = 100
+)
+
+// needsEscape checks whether a byte in a potential dbus ObjectPath needs to be escaped
+func needsEscape(i int, b byte) bool {
+	// Escape everything that is not a-z-A-Z-0-9
+	// Also escape 0-9 if it's the first character
+	return strings.IndexByte(alphanum, b) == -1 ||
+		(i == 0 && strings.IndexByte(num, b) != -1)
+}
+
+// PathBusEscape sanitizes a constituent string of a dbus ObjectPath using the
+// rules that systemd uses for serializing special characters.
+func PathBusEscape(path string) string {
+	// Special case the empty string
+	if len(path) == 0 {
+		return "_"
+	}
+	n := []byte{}
+	for i := 0; i < len(path); i++ {
+		c := path[i]
+		if needsEscape(i, c) {
+			e := fmt.Sprintf("_%x", c)
+			n = append(n, []byte(e)...)
+		} else {
+			n = append(n, c)
+		}
+	}
+	return string(n)
+}
+
+// pathBusUnescape is the inverse of PathBusEscape.
+func pathBusUnescape(path string) string {
+	if path == "_" {
+		return ""
+	}
+	n := []byte{}
+	for i := 0; i < len(path); i++ {
+		c := path[i]
+		if c == '_' && i+2 < len(path) {
+			res, err := hex.DecodeString(path[i+1 : i+3])
+			if err == nil {
+				n = append(n, res...)
+			}
+			i += 2
+		} else {
+			n = append(n, c)
+		}
+	}
+	return string(n)
+}
+
+// Conn is a connection to systemd's dbus endpoint.
+type Conn struct {
+	// sysconn/sysobj are only used to call dbus methods
+	sysconn *dbus.Conn
+	sysobj  dbus.BusObject
+
+	// sigconn/sigobj are only used to receive dbus signals
+	sigconn *dbus.Conn
+	sigobj  dbus.BusObject
+
+	jobListener struct {
+		jobs map[dbus.ObjectPath]chan<- string
+		sync.Mutex
+	}
+	subStateSubscriber struct {
+		updateCh chan<- *SubStateUpdate
+		errCh    chan<- error
+		sync.Mutex
+		ignore      map[dbus.ObjectPath]int64
+		cleanIgnore int64
+	}
+	propertiesSubscriber struct {
+		updateCh chan<- *PropertiesUpdate
+		errCh    chan<- error
+		sync.Mutex
+	}
+}
+
+// Deprecated: use NewWithContext instead.
+func New() (*Conn, error) {
+	return NewWithContext(context.Background())
+}
+
+// NewWithContext establishes a connection to any available bus and authenticates.
+// Callers should call Close() when done with the connection.
+func NewWithContext(ctx context.Context) (*Conn, error) {
+	conn, err := NewSystemConnectionContext(ctx)
+	if err != nil && os.Geteuid() == 0 {
+		return NewSystemdConnectionContext(ctx)
+	}
+	return conn, err
+}
+
+// Deprecated: use NewSystemConnectionContext instead.
+func NewSystemConnection() (*Conn, error) {
+	return NewSystemConnectionContext(context.Background())
+}
+
+// NewSystemConnectionContext establishes a connection to the system bus and authenticates.
+// Callers should call Close() when done with the connection.
+func NewSystemConnectionContext(ctx context.Context) (*Conn, error) {
+	return NewConnection(func() (*dbus.Conn, error) {
+		return dbusAuthHelloConnection(ctx, dbus.SystemBusPrivate)
+	})
+}
+
+// Deprecated: use NewUserConnectionContext instead.
+func NewUserConnection() (*Conn, error) {
+	return NewUserConnectionContext(context.Background())
+}
+
+// NewUserConnectionContext establishes a connection to the session bus and
+// authenticates. This can be used to connect to systemd user instances.
+// Callers should call Close() when done with the connection.
+func NewUserConnectionContext(ctx context.Context) (*Conn, error) {
+	return NewConnection(func() (*dbus.Conn, error) {
+		return dbusAuthHelloConnection(ctx, dbus.SessionBusPrivate)
+	})
+}
+
+// Deprecated: use NewSystemdConnectionContext instead.
+func NewSystemdConnection() (*Conn, error) {
+	return NewSystemdConnectionContext(context.Background())
+}
+
+// NewSystemdConnectionContext establishes a private, direct connection to systemd.
+// This can be used for communicating with systemd without a dbus daemon.
+// Callers should call Close() when done with the connection.
+func NewSystemdConnectionContext(ctx context.Context) (*Conn, error) {
+	return NewConnection(func() (*dbus.Conn, error) {
+		// We skip Hello when talking directly to systemd.
+		return dbusAuthConnection(ctx, func(opts ...dbus.ConnOption) (*dbus.Conn, error) {
+			return dbus.Dial("unix:path=/run/systemd/private", opts...)
+		})
+	})
+}
+
+// Close closes an established connection.
+func (c *Conn) Close() {
+	c.sysconn.Close()
+	c.sigconn.Close()
+}
+
+// Connected returns whether conn is connected
+func (c *Conn) Connected() bool {
+	return c.sysconn.Connected() && c.sigconn.Connected()
+}
+
+// NewConnection establishes a connection to a bus using a caller-supplied function.
+// This allows connecting to remote buses through a user-supplied mechanism.
+// The supplied function may be called multiple times, and should return independent connections.
+// The returned connection must be fully initialised: the org.freedesktop.DBus.Hello call must have succeeded,
+// and any authentication should be handled by the function.
+func NewConnection(dialBus func() (*dbus.Conn, error)) (*Conn, error) {
+	sysconn, err := dialBus()
+	if err != nil {
+		return nil, err
+	}
+
+	sigconn, err := dialBus()
+	if err != nil {
+		sysconn.Close()
+		return nil, err
+	}
+
+	c := &Conn{
+		sysconn: sysconn,
+		sysobj:  systemdObject(sysconn),
+		sigconn: sigconn,
+		sigobj:  systemdObject(sigconn),
+	}
+
+	c.subStateSubscriber.ignore = make(map[dbus.ObjectPath]int64)
+	c.jobListener.jobs = make(map[dbus.ObjectPath]chan<- string)
+
+	// Setup the listeners on jobs so that we can get completions
+	c.sigconn.BusObject().Call("org.freedesktop.DBus.AddMatch", 0,
+		"type='signal', interface='org.freedesktop.systemd1.Manager', member='JobRemoved'")
+
+	c.dispatch()
+	return c, nil
+}
+
+// GetManagerProperty returns the value of a property on the org.freedesktop.systemd1.Manager
+// interface. The value is returned in its string representation, as defined at
+// https://developer.gnome.org/glib/unstable/gvariant-text.html.
+func (c *Conn) GetManagerProperty(prop string) (string, error) {
+	variant, err := c.sysobj.GetProperty("org.freedesktop.systemd1.Manager." + prop)
+	if err != nil {
+		return "", err
+	}
+	return variant.String(), nil
+}
+
+func dbusAuthConnection(ctx context.Context, createBus func(opts ...dbus.ConnOption) (*dbus.Conn, error)) (*dbus.Conn, error) {
+	conn, err := createBus(dbus.WithContext(ctx))
+	if err != nil {
+		return nil, err
+	}
+
+	// Only use EXTERNAL method, and hardcode the uid (not username)
+	// to avoid a username lookup (which requires a dynamically linked
+	// libc)
+	methods := []dbus.Auth{dbus.AuthExternal(strconv.Itoa(os.Getuid()))}
+
+	err = conn.Auth(methods)
+	if err != nil {
+		conn.Close()
+		return nil, err
+	}
+
+	return conn, nil
+}
+
+func dbusAuthHelloConnection(ctx context.Context, createBus func(opts ...dbus.ConnOption) (*dbus.Conn, error)) (*dbus.Conn, error) {
+	conn, err := dbusAuthConnection(ctx, createBus)
+	if err != nil {
+		return nil, err
+	}
+
+	if err = conn.Hello(); err != nil {
+		conn.Close()
+		return nil, err
+	}
+
+	return conn, nil
+}
+
+func systemdObject(conn *dbus.Conn) dbus.BusObject {
+	return conn.Object("org.freedesktop.systemd1", dbus.ObjectPath("/org/freedesktop/systemd1"))
+}
diff --git a/vendor/github.com/coreos/go-systemd/v22/dbus/methods.go b/vendor/github.com/coreos/go-systemd/v22/dbus/methods.go
new file mode 100644
index 00000000000..074148cb4d6
--- /dev/null
+++ b/vendor/github.com/coreos/go-systemd/v22/dbus/methods.go
@@ -0,0 +1,864 @@
+// Copyright 2015, 2018 CoreOS, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package dbus
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"path"
+	"strconv"
+
+	"github.com/godbus/dbus/v5"
+)
+
+// Who can be used to specify which process to kill in the unit via the KillUnitWithTarget API
+type Who string
+
+const (
+	// All sends the signal to all processes in the unit
+	All Who = "all"
+	// Main sends the signal to the main process of the unit
+	Main Who = "main"
+	// Control sends the signal to the control process of the unit
+	Control Who = "control"
+)
+
+func (c *Conn) jobComplete(signal *dbus.Signal) {
+	var id uint32
+	var job dbus.ObjectPath
+	var unit string
+	var result string
+	dbus.Store(signal.Body, &id, &job, &unit, &result)
+	c.jobListener.Lock()
+	out, ok := c.jobListener.jobs[job]
+	if ok {
+		out <- result
+		delete(c.jobListener.jobs, job)
+	}
+	c.jobListener.Unlock()
+}
+
+func (c *Conn) startJob(ctx context.Context, ch chan<- string, job string, args ...interface{}) (int, error) {
+	if ch != nil {
+		c.jobListener.Lock()
+		defer c.jobListener.Unlock()
+	}
+
+	var p dbus.ObjectPath
+	err := c.sysobj.CallWithContext(ctx, job, 0, args...).Store(&p)
+	if err != nil {
+		return 0, err
+	}
+
+	if ch != nil {
+		c.jobListener.jobs[p] = ch
+	}
+
+	// ignore error since 0 is fine if conversion fails
+	jobID, _ := strconv.Atoi(path.Base(string(p)))
+
+	return jobID, nil
+}
+
+// Deprecated: use StartUnitContext instead.
+func (c *Conn) StartUnit(name string, mode string, ch chan<- string) (int, error) {
+	return c.StartUnitContext(context.Background(), name, mode, ch)
+}
+
+// StartUnitContext enqueues a start job and depending jobs, if any (unless otherwise
+// specified by the mode string).
+//
+// Takes the unit to activate, plus a mode string. The mode needs to be one of
+// replace, fail, isolate, ignore-dependencies, ignore-requirements. If
+// "replace" the call will start the unit and its dependencies, possibly
+// replacing already queued jobs that conflict with this. If "fail" the call
+// will start the unit and its dependencies, but will fail if this would change
+// an already queued job. If "isolate" the call will start the unit in question
+// and terminate all units that aren't dependencies of it. If
+// "ignore-dependencies" it will start a unit but ignore all its dependencies.
+// If "ignore-requirements" it will start a unit but only ignore the
+// requirement dependencies. It is not recommended to make use of the latter
+// two options.
+//
+// If the provided channel is non-nil, a result string will be sent to it upon
+// job completion: one of done, canceled, timeout, failed, dependency, skipped.
+// done indicates successful execution of a job. canceled indicates that a job
+// has been canceled  before it finished execution. timeout indicates that the
+// job timeout was reached. failed indicates that the job failed. dependency
+// indicates that a job this job has been depending on failed and the job hence
+// has been removed too. skipped indicates that a job was skipped because it
+// didn't apply to the units current state.
+//
+// If no error occurs, the ID of the underlying systemd job will be returned. There
+// does exist the possibility for no error to be returned, but for the returned job
+// ID to be 0. In this case, the actual underlying ID is not 0 and this datapoint
+// should not be considered authoritative.
+//
+// If an error does occur, it will be returned to the user alongside a job ID of 0.
+func (c *Conn) StartUnitContext(ctx context.Context, name string, mode string, ch chan<- string) (int, error) {
+	return c.startJob(ctx, ch, "org.freedesktop.systemd1.Manager.StartUnit", name, mode)
+}
+
+// Deprecated: use StopUnitContext instead.
+func (c *Conn) StopUnit(name string, mode string, ch chan<- string) (int, error) {
+	return c.StopUnitContext(context.Background(), name, mode, ch)
+}
+
+// StopUnitContext is similar to StartUnitContext, but stops the specified unit
+// rather than starting it.
+func (c *Conn) StopUnitContext(ctx context.Context, name string, mode string, ch chan<- string) (int, error) {
+	return c.startJob(ctx, ch, "org.freedesktop.systemd1.Manager.StopUnit", name, mode)
+}
+
+// Deprecated: use ReloadUnitContext instead.
+func (c *Conn) ReloadUnit(name string, mode string, ch chan<- string) (int, error) {
+	return c.ReloadUnitContext(context.Background(), name, mode, ch)
+}
+
+// ReloadUnitContext reloads a unit. Reloading is done only if the unit
+// is already running, and fails otherwise.
+func (c *Conn) ReloadUnitContext(ctx context.Context, name string, mode string, ch chan<- string) (int, error) {
+	return c.startJob(ctx, ch, "org.freedesktop.systemd1.Manager.ReloadUnit", name, mode)
+}
+
+// Deprecated: use RestartUnitContext instead.
+func (c *Conn) RestartUnit(name string, mode string, ch chan<- string) (int, error) {
+	return c.RestartUnitContext(context.Background(), name, mode, ch)
+}
+
+// RestartUnitContext restarts a service. If a service is restarted that isn't
+// running it will be started.
+func (c *Conn) RestartUnitContext(ctx context.Context, name string, mode string, ch chan<- string) (int, error) {
+	return c.startJob(ctx, ch, "org.freedesktop.systemd1.Manager.RestartUnit", name, mode)
+}
+
+// Deprecated: use TryRestartUnitContext instead.
+func (c *Conn) TryRestartUnit(name string, mode string, ch chan<- string) (int, error) {
+	return c.TryRestartUnitContext(context.Background(), name, mode, ch)
+}
+
+// TryRestartUnitContext is like RestartUnitContext, except that a service that
+// isn't running is not affected by the restart.
+func (c *Conn) TryRestartUnitContext(ctx context.Context, name string, mode string, ch chan<- string) (int, error) {
+	return c.startJob(ctx, ch, "org.freedesktop.systemd1.Manager.TryRestartUnit", name, mode)
+}
+
+// Deprecated: use ReloadOrRestartUnitContext instead.
+func (c *Conn) ReloadOrRestartUnit(name string, mode string, ch chan<- string) (int, error) {
+	return c.ReloadOrRestartUnitContext(context.Background(), name, mode, ch)
+}
+
+// ReloadOrRestartUnitContext attempts a reload if the unit supports it and use
+// a restart otherwise.
+func (c *Conn) ReloadOrRestartUnitContext(ctx context.Context, name string, mode string, ch chan<- string) (int, error) {
+	return c.startJob(ctx, ch, "org.freedesktop.systemd1.Manager.ReloadOrRestartUnit", name, mode)
+}
+
+// Deprecated: use ReloadOrTryRestartUnitContext instead.
+func (c *Conn) ReloadOrTryRestartUnit(name string, mode string, ch chan<- string) (int, error) {
+	return c.ReloadOrTryRestartUnitContext(context.Background(), name, mode, ch)
+}
+
+// ReloadOrTryRestartUnitContext attempts a reload if the unit supports it,
+// and use a "Try" flavored restart otherwise.
+func (c *Conn) ReloadOrTryRestartUnitContext(ctx context.Context, name string, mode string, ch chan<- string) (int, error) {
+	return c.startJob(ctx, ch, "org.freedesktop.systemd1.Manager.ReloadOrTryRestartUnit", name, mode)
+}
+
+// Deprecated: use StartTransientUnitContext instead.
+func (c *Conn) StartTransientUnit(name string, mode string, properties []Property, ch chan<- string) (int, error) {
+	return c.StartTransientUnitContext(context.Background(), name, mode, properties, ch)
+}
+
+// StartTransientUnitContext may be used to create and start a transient unit, which
+// will be released as soon as it is not running or referenced anymore or the
+// system is rebooted. name is the unit name including suffix, and must be
+// unique. mode is the same as in StartUnitContext, properties contains properties
+// of the unit.
+func (c *Conn) StartTransientUnitContext(ctx context.Context, name string, mode string, properties []Property, ch chan<- string) (int, error) {
+	return c.startJob(ctx, ch, "org.freedesktop.systemd1.Manager.StartTransientUnit", name, mode, properties, make([]PropertyCollection, 0))
+}
+
+// Deprecated: use KillUnitContext instead.
+func (c *Conn) KillUnit(name string, signal int32) {
+	c.KillUnitContext(context.Background(), name, signal)
+}
+
+// KillUnitContext takes the unit name and a UNIX signal number to send.
+// All of the unit's processes are killed.
+func (c *Conn) KillUnitContext(ctx context.Context, name string, signal int32) {
+	c.KillUnitWithTarget(ctx, name, All, signal)
+}
+
+// KillUnitWithTarget is like KillUnitContext, but allows you to specify which
+// process in the unit to send the signal to.
+func (c *Conn) KillUnitWithTarget(ctx context.Context, name string, target Who, signal int32) error {
+	return c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.KillUnit", 0, name, string(target), signal).Store()
+}
+
+// Deprecated: use ResetFailedUnitContext instead.
+func (c *Conn) ResetFailedUnit(name string) error {
+	return c.ResetFailedUnitContext(context.Background(), name)
+}
+
+// ResetFailedUnitContext resets the "failed" state of a specific unit.
+func (c *Conn) ResetFailedUnitContext(ctx context.Context, name string) error {
+	return c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.ResetFailedUnit", 0, name).Store()
+}
+
+// Deprecated: use SystemStateContext instead.
+func (c *Conn) SystemState() (*Property, error) {
+	return c.SystemStateContext(context.Background())
+}
+
+// SystemStateContext returns the systemd state. Equivalent to
+// systemctl is-system-running.
+func (c *Conn) SystemStateContext(ctx context.Context) (*Property, error) {
+	var err error
+	var prop dbus.Variant
+
+	obj := c.sysconn.Object("org.freedesktop.systemd1", "/org/freedesktop/systemd1")
+	err = obj.CallWithContext(ctx, "org.freedesktop.DBus.Properties.Get", 0, "org.freedesktop.systemd1.Manager", "SystemState").Store(&prop)
+	if err != nil {
+		return nil, err
+	}
+
+	return &Property{Name: "SystemState", Value: prop}, nil
+}
+
+// getProperties takes the unit path and returns all of its dbus object properties, for the given dbus interface.
+func (c *Conn) getProperties(ctx context.Context, path dbus.ObjectPath, dbusInterface string) (map[string]interface{}, error) {
+	var err error
+	var props map[string]dbus.Variant
+
+	if !path.IsValid() {
+		return nil, fmt.Errorf("invalid unit name: %v", path)
+	}
+
+	obj := c.sysconn.Object("org.freedesktop.systemd1", path)
+	err = obj.CallWithContext(ctx, "org.freedesktop.DBus.Properties.GetAll", 0, dbusInterface).Store(&props)
+	if err != nil {
+		return nil, err
+	}
+
+	out := make(map[string]interface{}, len(props))
+	for k, v := range props {
+		out[k] = v.Value()
+	}
+
+	return out, nil
+}
+
+// Deprecated: use GetUnitPropertiesContext instead.
+func (c *Conn) GetUnitProperties(unit string) (map[string]interface{}, error) {
+	return c.GetUnitPropertiesContext(context.Background(), unit)
+}
+
+// GetUnitPropertiesContext takes the (unescaped) unit name and returns all of
+// its dbus object properties.
+func (c *Conn) GetUnitPropertiesContext(ctx context.Context, unit string) (map[string]interface{}, error) {
+	path := unitPath(unit)
+	return c.getProperties(ctx, path, "org.freedesktop.systemd1.Unit")
+}
+
+// Deprecated: use GetUnitPathPropertiesContext instead.
+func (c *Conn) GetUnitPathProperties(path dbus.ObjectPath) (map[string]interface{}, error) {
+	return c.GetUnitPathPropertiesContext(context.Background(), path)
+}
+
+// GetUnitPathPropertiesContext takes the (escaped) unit path and returns all
+// of its dbus object properties.
+func (c *Conn) GetUnitPathPropertiesContext(ctx context.Context, path dbus.ObjectPath) (map[string]interface{}, error) {
+	return c.getProperties(ctx, path, "org.freedesktop.systemd1.Unit")
+}
+
+// Deprecated: use GetAllPropertiesContext instead.
+func (c *Conn) GetAllProperties(unit string) (map[string]interface{}, error) {
+	return c.GetAllPropertiesContext(context.Background(), unit)
+}
+
+// GetAllPropertiesContext takes the (unescaped) unit name and returns all of
+// its dbus object properties.
+func (c *Conn) GetAllPropertiesContext(ctx context.Context, unit string) (map[string]interface{}, error) {
+	path := unitPath(unit)
+	return c.getProperties(ctx, path, "")
+}
+
+func (c *Conn) getProperty(ctx context.Context, unit string, dbusInterface string, propertyName string) (*Property, error) {
+	var err error
+	var prop dbus.Variant
+
+	path := unitPath(unit)
+	if !path.IsValid() {
+		return nil, errors.New("invalid unit name: " + unit)
+	}
+
+	obj := c.sysconn.Object("org.freedesktop.systemd1", path)
+	err = obj.CallWithContext(ctx, "org.freedesktop.DBus.Properties.Get", 0, dbusInterface, propertyName).Store(&prop)
+	if err != nil {
+		return nil, err
+	}
+
+	return &Property{Name: propertyName, Value: prop}, nil
+}
+
+// Deprecated: use GetUnitPropertyContext instead.
+func (c *Conn) GetUnitProperty(unit string, propertyName string) (*Property, error) {
+	return c.GetUnitPropertyContext(context.Background(), unit, propertyName)
+}
+
+// GetUnitPropertyContext takes an (unescaped) unit name, and a property name,
+// and returns the property value.
+func (c *Conn) GetUnitPropertyContext(ctx context.Context, unit string, propertyName string) (*Property, error) {
+	return c.getProperty(ctx, unit, "org.freedesktop.systemd1.Unit", propertyName)
+}
+
+// Deprecated: use GetServicePropertyContext instead.
+func (c *Conn) GetServiceProperty(service string, propertyName string) (*Property, error) {
+	return c.GetServicePropertyContext(context.Background(), service, propertyName)
+}
+
+// GetServiceProperty returns property for given service name and property name.
+func (c *Conn) GetServicePropertyContext(ctx context.Context, service string, propertyName string) (*Property, error) {
+	return c.getProperty(ctx, service, "org.freedesktop.systemd1.Service", propertyName)
+}
+
+// Deprecated: use GetUnitTypePropertiesContext instead.
+func (c *Conn) GetUnitTypeProperties(unit string, unitType string) (map[string]interface{}, error) {
+	return c.GetUnitTypePropertiesContext(context.Background(), unit, unitType)
+}
+
+// GetUnitTypePropertiesContext returns the extra properties for a unit, specific to the unit type.
+// Valid values for unitType: Service, Socket, Target, Device, Mount, Automount, Snapshot, Timer, Swap, Path, Slice, Scope.
+// Returns "dbus.Error: Unknown interface" error if the unitType is not the correct type of the unit.
+func (c *Conn) GetUnitTypePropertiesContext(ctx context.Context, unit string, unitType string) (map[string]interface{}, error) {
+	path := unitPath(unit)
+	return c.getProperties(ctx, path, "org.freedesktop.systemd1."+unitType)
+}
+
+// Deprecated: use SetUnitPropertiesContext instead.
+func (c *Conn) SetUnitProperties(name string, runtime bool, properties ...Property) error {
+	return c.SetUnitPropertiesContext(context.Background(), name, runtime, properties...)
+}
+
+// SetUnitPropertiesContext may be used to modify certain unit properties at runtime.
+// Not all properties may be changed at runtime, but many resource management
+// settings (primarily those in systemd.cgroup(5)) may. The changes are applied
+// instantly, and stored on disk for future boots, unless runtime is true, in which
+// case the settings only apply until the next reboot. name is the name of the unit
+// to modify. properties are the settings to set, encoded as an array of property
+// name and value pairs.
+func (c *Conn) SetUnitPropertiesContext(ctx context.Context, name string, runtime bool, properties ...Property) error {
+	return c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.SetUnitProperties", 0, name, runtime, properties).Store()
+}
+
+// Deprecated: use GetUnitTypePropertyContext instead.
+func (c *Conn) GetUnitTypeProperty(unit string, unitType string, propertyName string) (*Property, error) {
+	return c.GetUnitTypePropertyContext(context.Background(), unit, unitType, propertyName)
+}
+
+// GetUnitTypePropertyContext takes a property name, a unit name, and a unit type,
+// and returns a property value. For valid values of unitType, see GetUnitTypePropertiesContext.
+func (c *Conn) GetUnitTypePropertyContext(ctx context.Context, unit string, unitType string, propertyName string) (*Property, error) {
+	return c.getProperty(ctx, unit, "org.freedesktop.systemd1."+unitType, propertyName)
+}
+
+type UnitStatus struct {
+	Name        string          // The primary unit name as string
+	Description string          // The human readable description string
+	LoadState   string          // The load state (i.e. whether the unit file has been loaded successfully)
+	ActiveState string          // The active state (i.e. whether the unit is currently started or not)
+	SubState    string          // The sub state (a more fine-grained version of the active state that is specific to the unit type, which the active state is not)
+	Followed    string          // A unit that is being followed in its state by this unit, if there is any, otherwise the empty string.
+	Path        dbus.ObjectPath // The unit object path
+	JobId       uint32          // If there is a job queued for the job unit the numeric job id, 0 otherwise
+	JobType     string          // The job type as string
+	JobPath     dbus.ObjectPath // The job object path
+}
+
+type storeFunc func(retvalues ...interface{}) error
+
+func (c *Conn) listUnitsInternal(f storeFunc) ([]UnitStatus, error) {
+	result := make([][]interface{}, 0)
+	err := f(&result)
+	if err != nil {
+		return nil, err
+	}
+
+	resultInterface := make([]interface{}, len(result))
+	for i := range result {
+		resultInterface[i] = result[i]
+	}
+
+	status := make([]UnitStatus, len(result))
+	statusInterface := make([]interface{}, len(status))
+	for i := range status {
+		statusInterface[i] = &status[i]
+	}
+
+	err = dbus.Store(resultInterface, statusInterface...)
+	if err != nil {
+		return nil, err
+	}
+
+	return status, nil
+}
+
+// GetUnitByPID returns the unit object path of the unit a process ID
+// belongs to. It takes a UNIX PID and returns the object path. The PID must
+// refer to an existing system process
+func (c *Conn) GetUnitByPID(ctx context.Context, pid uint32) (dbus.ObjectPath, error) {
+	var result dbus.ObjectPath
+
+	err := c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.GetUnitByPID", 0, pid).Store(&result)
+
+	return result, err
+}
+
+// GetUnitNameByPID returns the name of the unit a process ID belongs to. It
+// takes a UNIX PID and returns the object path. The PID must refer to an
+// existing system process
+func (c *Conn) GetUnitNameByPID(ctx context.Context, pid uint32) (string, error) {
+	path, err := c.GetUnitByPID(ctx, pid)
+	if err != nil {
+		return "", err
+	}
+
+	return unitName(path), nil
+}
+
+// Deprecated: use ListUnitsContext instead.
+func (c *Conn) ListUnits() ([]UnitStatus, error) {
+	return c.ListUnitsContext(context.Background())
+}
+
+// ListUnitsContext returns an array with all currently loaded units. Note that
+// units may be known by multiple names at the same time, and hence there might
+// be more unit names loaded than actual units behind them.
+// Also note that a unit is only loaded if it is active and/or enabled.
+// Units that are both disabled and inactive will thus not be returned.
+func (c *Conn) ListUnitsContext(ctx context.Context) ([]UnitStatus, error) {
+	return c.listUnitsInternal(c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.ListUnits", 0).Store)
+}
+
+// Deprecated: use ListUnitsFilteredContext instead.
+func (c *Conn) ListUnitsFiltered(states []string) ([]UnitStatus, error) {
+	return c.ListUnitsFilteredContext(context.Background(), states)
+}
+
+// ListUnitsFilteredContext returns an array with units filtered by state.
+// It takes a list of units' statuses to filter.
+func (c *Conn) ListUnitsFilteredContext(ctx context.Context, states []string) ([]UnitStatus, error) {
+	return c.listUnitsInternal(c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.ListUnitsFiltered", 0, states).Store)
+}
+
+// Deprecated: use ListUnitsByPatternsContext instead.
+func (c *Conn) ListUnitsByPatterns(states []string, patterns []string) ([]UnitStatus, error) {
+	return c.ListUnitsByPatternsContext(context.Background(), states, patterns)
+}
+
+// ListUnitsByPatternsContext returns an array with units.
+// It takes a list of units' statuses and names to filter.
+// Note that units may be known by multiple names at the same time,
+// and hence there might be more unit names loaded than actual units behind them.
+func (c *Conn) ListUnitsByPatternsContext(ctx context.Context, states []string, patterns []string) ([]UnitStatus, error) {
+	return c.listUnitsInternal(c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.ListUnitsByPatterns", 0, states, patterns).Store)
+}
+
+// Deprecated: use ListUnitsByNamesContext instead.
+func (c *Conn) ListUnitsByNames(units []string) ([]UnitStatus, error) {
+	return c.ListUnitsByNamesContext(context.Background(), units)
+}
+
+// ListUnitsByNamesContext returns an array with units. It takes a list of units'
+// names and returns an UnitStatus array. Comparing to ListUnitsByPatternsContext
+// method, this method returns statuses even for inactive or non-existing
+// units. Input array should contain exact unit names, but not patterns.
+//
+// Requires systemd v230 or higher.
+func (c *Conn) ListUnitsByNamesContext(ctx context.Context, units []string) ([]UnitStatus, error) {
+	return c.listUnitsInternal(c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.ListUnitsByNames", 0, units).Store)
+}
+
+type UnitFile struct {
+	Path string
+	Type string
+}
+
+func (c *Conn) listUnitFilesInternal(f storeFunc) ([]UnitFile, error) {
+	result := make([][]interface{}, 0)
+	err := f(&result)
+	if err != nil {
+		return nil, err
+	}
+
+	resultInterface := make([]interface{}, len(result))
+	for i := range result {
+		resultInterface[i] = result[i]
+	}
+
+	files := make([]UnitFile, len(result))
+	fileInterface := make([]interface{}, len(files))
+	for i := range files {
+		fileInterface[i] = &files[i]
+	}
+
+	err = dbus.Store(resultInterface, fileInterface...)
+	if err != nil {
+		return nil, err
+	}
+
+	return files, nil
+}
+
+// Deprecated: use ListUnitFilesContext instead.
+func (c *Conn) ListUnitFiles() ([]UnitFile, error) {
+	return c.ListUnitFilesContext(context.Background())
+}
+
+// ListUnitFiles returns an array of all available units on disk.
+func (c *Conn) ListUnitFilesContext(ctx context.Context) ([]UnitFile, error) {
+	return c.listUnitFilesInternal(c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.ListUnitFiles", 0).Store)
+}
+
+// Deprecated: use ListUnitFilesByPatternsContext instead.
+func (c *Conn) ListUnitFilesByPatterns(states []string, patterns []string) ([]UnitFile, error) {
+	return c.ListUnitFilesByPatternsContext(context.Background(), states, patterns)
+}
+
+// ListUnitFilesByPatternsContext returns an array of all available units on disk matched the patterns.
+func (c *Conn) ListUnitFilesByPatternsContext(ctx context.Context, states []string, patterns []string) ([]UnitFile, error) {
+	return c.listUnitFilesInternal(c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.ListUnitFilesByPatterns", 0, states, patterns).Store)
+}
+
+type LinkUnitFileChange EnableUnitFileChange
+
+// Deprecated: use LinkUnitFilesContext instead.
+func (c *Conn) LinkUnitFiles(files []string, runtime bool, force bool) ([]LinkUnitFileChange, error) {
+	return c.LinkUnitFilesContext(context.Background(), files, runtime, force)
+}
+
+// LinkUnitFilesContext links unit files (that are located outside of the
+// usual unit search paths) into the unit search path.
+//
+// It takes a list of absolute paths to unit files to link and two
+// booleans.
+//
+// The first boolean controls whether the unit shall be
+// enabled for runtime only (true, /run), or persistently (false,
+// /etc).
+//
+// The second controls whether symlinks pointing to other units shall
+// be replaced if necessary.
+//
+// This call returns a list of the changes made. The list consists of
+// structures with three strings: the type of the change (one of symlink
+// or unlink), the file name of the symlink and the destination of the
+// symlink.
+func (c *Conn) LinkUnitFilesContext(ctx context.Context, files []string, runtime bool, force bool) ([]LinkUnitFileChange, error) {
+	result := make([][]interface{}, 0)
+	err := c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.LinkUnitFiles", 0, files, runtime, force).Store(&result)
+	if err != nil {
+		return nil, err
+	}
+
+	resultInterface := make([]interface{}, len(result))
+	for i := range result {
+		resultInterface[i] = result[i]
+	}
+
+	changes := make([]LinkUnitFileChange, len(result))
+	changesInterface := make([]interface{}, len(changes))
+	for i := range changes {
+		changesInterface[i] = &changes[i]
+	}
+
+	err = dbus.Store(resultInterface, changesInterface...)
+	if err != nil {
+		return nil, err
+	}
+
+	return changes, nil
+}
+
+// Deprecated: use EnableUnitFilesContext instead.
+func (c *Conn) EnableUnitFiles(files []string, runtime bool, force bool) (bool, []EnableUnitFileChange, error) {
+	return c.EnableUnitFilesContext(context.Background(), files, runtime, force)
+}
+
+// EnableUnitFilesContext may be used to enable one or more units in the system
+// (by creating symlinks to them in /etc or /run).
+//
+// It takes a list of unit files to enable (either just file names or full
+// absolute paths if the unit files are residing outside the usual unit
+// search paths), and two booleans: the first controls whether the unit shall
+// be enabled for runtime only (true, /run), or persistently (false, /etc).
+// The second one controls whether symlinks pointing to other units shall
+// be replaced if necessary.
+//
+// This call returns one boolean and an array with the changes made. The
+// boolean signals whether the unit files contained any enablement
+// information (i.e. an [Install]) section. The changes list consists of
+// structures with three strings: the type of the change (one of symlink
+// or unlink), the file name of the symlink and the destination of the
+// symlink.
+func (c *Conn) EnableUnitFilesContext(ctx context.Context, files []string, runtime bool, force bool) (bool, []EnableUnitFileChange, error) {
+	var carries_install_info bool
+
+	result := make([][]interface{}, 0)
+	err := c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.EnableUnitFiles", 0, files, runtime, force).Store(&carries_install_info, &result)
+	if err != nil {
+		return false, nil, err
+	}
+
+	resultInterface := make([]interface{}, len(result))
+	for i := range result {
+		resultInterface[i] = result[i]
+	}
+
+	changes := make([]EnableUnitFileChange, len(result))
+	changesInterface := make([]interface{}, len(changes))
+	for i := range changes {
+		changesInterface[i] = &changes[i]
+	}
+
+	err = dbus.Store(resultInterface, changesInterface...)
+	if err != nil {
+		return false, nil, err
+	}
+
+	return carries_install_info, changes, nil
+}
+
+type EnableUnitFileChange struct {
+	Type        string // Type of the change (one of symlink or unlink)
+	Filename    string // File name of the symlink
+	Destination string // Destination of the symlink
+}
+
+// Deprecated: use DisableUnitFilesContext instead.
+func (c *Conn) DisableUnitFiles(files []string, runtime bool) ([]DisableUnitFileChange, error) {
+	return c.DisableUnitFilesContext(context.Background(), files, runtime)
+}
+
+// DisableUnitFilesContext may be used to disable one or more units in the
+// system (by removing symlinks to them from /etc or /run).
+//
+// It takes a list of unit files to disable (either just file names or full
+// absolute paths if the unit files are residing outside the usual unit
+// search paths), and one boolean: whether the unit was enabled for runtime
+// only (true, /run), or persistently (false, /etc).
+//
+// This call returns an array with the changes made. The changes list
+// consists of structures with three strings: the type of the change (one of
+// symlink or unlink), the file name of the symlink and the destination of the
+// symlink.
+func (c *Conn) DisableUnitFilesContext(ctx context.Context, files []string, runtime bool) ([]DisableUnitFileChange, error) {
+	result := make([][]interface{}, 0)
+	err := c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.DisableUnitFiles", 0, files, runtime).Store(&result)
+	if err != nil {
+		return nil, err
+	}
+
+	resultInterface := make([]interface{}, len(result))
+	for i := range result {
+		resultInterface[i] = result[i]
+	}
+
+	changes := make([]DisableUnitFileChange, len(result))
+	changesInterface := make([]interface{}, len(changes))
+	for i := range changes {
+		changesInterface[i] = &changes[i]
+	}
+
+	err = dbus.Store(resultInterface, changesInterface...)
+	if err != nil {
+		return nil, err
+	}
+
+	return changes, nil
+}
+
+type DisableUnitFileChange struct {
+	Type        string // Type of the change (one of symlink or unlink)
+	Filename    string // File name of the symlink
+	Destination string // Destination of the symlink
+}
+
+// Deprecated: use MaskUnitFilesContext instead.
+func (c *Conn) MaskUnitFiles(files []string, runtime bool, force bool) ([]MaskUnitFileChange, error) {
+	return c.MaskUnitFilesContext(context.Background(), files, runtime, force)
+}
+
+// MaskUnitFilesContext masks one or more units in the system.
+//
+// The files argument contains a  list of units to mask (either just file names
+// or full absolute paths if the unit files are residing outside the usual unit
+// search paths).
+//
+// The runtime argument is used to specify whether the unit was enabled for
+// runtime only (true, /run/systemd/..), or persistently (false,
+// /etc/systemd/..).
+func (c *Conn) MaskUnitFilesContext(ctx context.Context, files []string, runtime bool, force bool) ([]MaskUnitFileChange, error) {
+	result := make([][]interface{}, 0)
+	err := c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.MaskUnitFiles", 0, files, runtime, force).Store(&result)
+	if err != nil {
+		return nil, err
+	}
+
+	resultInterface := make([]interface{}, len(result))
+	for i := range result {
+		resultInterface[i] = result[i]
+	}
+
+	changes := make([]MaskUnitFileChange, len(result))
+	changesInterface := make([]interface{}, len(changes))
+	for i := range changes {
+		changesInterface[i] = &changes[i]
+	}
+
+	err = dbus.Store(resultInterface, changesInterface...)
+	if err != nil {
+		return nil, err
+	}
+
+	return changes, nil
+}
+
+type MaskUnitFileChange struct {
+	Type        string // Type of the change (one of symlink or unlink)
+	Filename    string // File name of the symlink
+	Destination string // Destination of the symlink
+}
+
+// Deprecated: use UnmaskUnitFilesContext instead.
+func (c *Conn) UnmaskUnitFiles(files []string, runtime bool) ([]UnmaskUnitFileChange, error) {
+	return c.UnmaskUnitFilesContext(context.Background(), files, runtime)
+}
+
+// UnmaskUnitFilesContext unmasks one or more units in the system.
+//
+// It takes the list of unit files to mask (either just file names or full
+// absolute paths if the unit files are residing outside the usual unit search
+// paths), and a boolean runtime flag to specify whether the unit was enabled
+// for runtime only (true, /run/systemd/..), or persistently (false,
+// /etc/systemd/..).
+func (c *Conn) UnmaskUnitFilesContext(ctx context.Context, files []string, runtime bool) ([]UnmaskUnitFileChange, error) {
+	result := make([][]interface{}, 0)
+	err := c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.UnmaskUnitFiles", 0, files, runtime).Store(&result)
+	if err != nil {
+		return nil, err
+	}
+
+	resultInterface := make([]interface{}, len(result))
+	for i := range result {
+		resultInterface[i] = result[i]
+	}
+
+	changes := make([]UnmaskUnitFileChange, len(result))
+	changesInterface := make([]interface{}, len(changes))
+	for i := range changes {
+		changesInterface[i] = &changes[i]
+	}
+
+	err = dbus.Store(resultInterface, changesInterface...)
+	if err != nil {
+		return nil, err
+	}
+
+	return changes, nil
+}
+
+type UnmaskUnitFileChange struct {
+	Type        string // Type of the change (one of symlink or unlink)
+	Filename    string // File name of the symlink
+	Destination string // Destination of the symlink
+}
+
+// Deprecated: use ReloadContext instead.
+func (c *Conn) Reload() error {
+	return c.ReloadContext(context.Background())
+}
+
+// ReloadContext instructs systemd to scan for and reload unit files. This is
+// an equivalent to systemctl daemon-reload.
+func (c *Conn) ReloadContext(ctx context.Context) error {
+	return c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.Reload", 0).Store()
+}
+
+func unitPath(name string) dbus.ObjectPath {
+	return dbus.ObjectPath("/org/freedesktop/systemd1/unit/" + PathBusEscape(name))
+}
+
+// unitName returns the unescaped base element of the supplied escaped path.
+func unitName(dpath dbus.ObjectPath) string {
+	return pathBusUnescape(path.Base(string(dpath)))
+}
+
+// JobStatus holds a currently queued job definition.
+type JobStatus struct {
+	Id       uint32          // The numeric job id
+	Unit     string          // The primary unit name for this job
+	JobType  string          // The job type as string
+	Status   string          // The job state as string
+	JobPath  dbus.ObjectPath // The job object path
+	UnitPath dbus.ObjectPath // The unit object path
+}
+
+// Deprecated: use ListJobsContext instead.
+func (c *Conn) ListJobs() ([]JobStatus, error) {
+	return c.ListJobsContext(context.Background())
+}
+
+// ListJobsContext returns an array with all currently queued jobs.
+func (c *Conn) ListJobsContext(ctx context.Context) ([]JobStatus, error) {
+	return c.listJobsInternal(ctx)
+}
+
+func (c *Conn) listJobsInternal(ctx context.Context) ([]JobStatus, error) {
+	result := make([][]interface{}, 0)
+	if err := c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.ListJobs", 0).Store(&result); err != nil {
+		return nil, err
+	}
+
+	resultInterface := make([]interface{}, len(result))
+	for i := range result {
+		resultInterface[i] = result[i]
+	}
+
+	status := make([]JobStatus, len(result))
+	statusInterface := make([]interface{}, len(status))
+	for i := range status {
+		statusInterface[i] = &status[i]
+	}
+
+	if err := dbus.Store(resultInterface, statusInterface...); err != nil {
+		return nil, err
+	}
+
+	return status, nil
+}
+
+// Freeze the cgroup associated with the unit.
+// Note that FreezeUnit and ThawUnit are only supported on systems running with cgroup v2.
+func (c *Conn) FreezeUnit(ctx context.Context, unit string) error {
+	return c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.FreezeUnit", 0, unit).Store()
+}
+
+// Unfreeze the cgroup associated with the unit.
+func (c *Conn) ThawUnit(ctx context.Context, unit string) error {
+	return c.sysobj.CallWithContext(ctx, "org.freedesktop.systemd1.Manager.ThawUnit", 0, unit).Store()
+}
diff --git a/vendor/github.com/coreos/go-systemd/v22/dbus/properties.go b/vendor/github.com/coreos/go-systemd/v22/dbus/properties.go
new file mode 100644
index 00000000000..fb42b627338
--- /dev/null
+++ b/vendor/github.com/coreos/go-systemd/v22/dbus/properties.go
@@ -0,0 +1,237 @@
+// Copyright 2015 CoreOS, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package dbus
+
+import (
+	"github.com/godbus/dbus/v5"
+)
+
+// From the systemd docs:
+//
+// The properties array of StartTransientUnit() may take many of the settings
+// that may also be configured in unit files. Not all parameters are currently
+// accepted though, but we plan to cover more properties with future release.
+// Currently you may set the Description, Slice and all dependency types of
+// units, as well as RemainAfterExit, ExecStart for service units,
+// TimeoutStopUSec and PIDs for scope units, and CPUAccounting, CPUShares,
+// BlockIOAccounting, BlockIOWeight, BlockIOReadBandwidth,
+// BlockIOWriteBandwidth, BlockIODeviceWeight, MemoryAccounting, MemoryLimit,
+// DevicePolicy, DeviceAllow for services/scopes/slices. These fields map
+// directly to their counterparts in unit files and as normal D-Bus object
+// properties. The exception here is the PIDs field of scope units which is
+// used for construction of the scope only and specifies the initial PIDs to
+// add to the scope object.
+
+type Property struct {
+	Name  string
+	Value dbus.Variant
+}
+
+type PropertyCollection struct {
+	Name       string
+	Properties []Property
+}
+
+type execStart struct {
+	Path             string   // the binary path to execute
+	Args             []string // an array with all arguments to pass to the executed command, starting with argument 0
+	UncleanIsFailure bool     // a boolean whether it should be considered a failure if the process exits uncleanly
+}
+
+// PropExecStart sets the ExecStart service property.  The first argument is a
+// slice with the binary path to execute followed by the arguments to pass to
+// the executed command. See
+// http://www.freedesktop.org/software/systemd/man/systemd.service.html#ExecStart=
+func PropExecStart(command []string, uncleanIsFailure bool) Property {
+	execStarts := []execStart{
+		{
+			Path:             command[0],
+			Args:             command,
+			UncleanIsFailure: uncleanIsFailure,
+		},
+	}
+
+	return Property{
+		Name:  "ExecStart",
+		Value: dbus.MakeVariant(execStarts),
+	}
+}
+
+// PropRemainAfterExit sets the RemainAfterExit service property. See
+// http://www.freedesktop.org/software/systemd/man/systemd.service.html#RemainAfterExit=
+func PropRemainAfterExit(b bool) Property {
+	return Property{
+		Name:  "RemainAfterExit",
+		Value: dbus.MakeVariant(b),
+	}
+}
+
+// PropType sets the Type service property. See
+// http://www.freedesktop.org/software/systemd/man/systemd.service.html#Type=
+func PropType(t string) Property {
+	return Property{
+		Name:  "Type",
+		Value: dbus.MakeVariant(t),
+	}
+}
+
+// PropDescription sets the Description unit property. See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit#Description=
+func PropDescription(desc string) Property {
+	return Property{
+		Name:  "Description",
+		Value: dbus.MakeVariant(desc),
+	}
+}
+
+func propDependency(name string, units []string) Property {
+	return Property{
+		Name:  name,
+		Value: dbus.MakeVariant(units),
+	}
+}
+
+// PropRequires sets the Requires unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#Requires=
+func PropRequires(units ...string) Property {
+	return propDependency("Requires", units)
+}
+
+// PropRequiresOverridable sets the RequiresOverridable unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#RequiresOverridable=
+func PropRequiresOverridable(units ...string) Property {
+	return propDependency("RequiresOverridable", units)
+}
+
+// PropRequisite sets the Requisite unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#Requisite=
+func PropRequisite(units ...string) Property {
+	return propDependency("Requisite", units)
+}
+
+// PropRequisiteOverridable sets the RequisiteOverridable unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#RequisiteOverridable=
+func PropRequisiteOverridable(units ...string) Property {
+	return propDependency("RequisiteOverridable", units)
+}
+
+// PropWants sets the Wants unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#Wants=
+func PropWants(units ...string) Property {
+	return propDependency("Wants", units)
+}
+
+// PropBindsTo sets the BindsTo unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#BindsTo=
+func PropBindsTo(units ...string) Property {
+	return propDependency("BindsTo", units)
+}
+
+// PropRequiredBy sets the RequiredBy unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#RequiredBy=
+func PropRequiredBy(units ...string) Property {
+	return propDependency("RequiredBy", units)
+}
+
+// PropRequiredByOverridable sets the RequiredByOverridable unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#RequiredByOverridable=
+func PropRequiredByOverridable(units ...string) Property {
+	return propDependency("RequiredByOverridable", units)
+}
+
+// PropWantedBy sets the WantedBy unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#WantedBy=
+func PropWantedBy(units ...string) Property {
+	return propDependency("WantedBy", units)
+}
+
+// PropBoundBy sets the BoundBy unit property.  See
+// http://www.freedesktop.org/software/systemd/main/systemd.unit.html#BoundBy=
+func PropBoundBy(units ...string) Property {
+	return propDependency("BoundBy", units)
+}
+
+// PropConflicts sets the Conflicts unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#Conflicts=
+func PropConflicts(units ...string) Property {
+	return propDependency("Conflicts", units)
+}
+
+// PropConflictedBy sets the ConflictedBy unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#ConflictedBy=
+func PropConflictedBy(units ...string) Property {
+	return propDependency("ConflictedBy", units)
+}
+
+// PropBefore sets the Before unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#Before=
+func PropBefore(units ...string) Property {
+	return propDependency("Before", units)
+}
+
+// PropAfter sets the After unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#After=
+func PropAfter(units ...string) Property {
+	return propDependency("After", units)
+}
+
+// PropOnFailure sets the OnFailure unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#OnFailure=
+func PropOnFailure(units ...string) Property {
+	return propDependency("OnFailure", units)
+}
+
+// PropTriggers sets the Triggers unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#Triggers=
+func PropTriggers(units ...string) Property {
+	return propDependency("Triggers", units)
+}
+
+// PropTriggeredBy sets the TriggeredBy unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#TriggeredBy=
+func PropTriggeredBy(units ...string) Property {
+	return propDependency("TriggeredBy", units)
+}
+
+// PropPropagatesReloadTo sets the PropagatesReloadTo unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#PropagatesReloadTo=
+func PropPropagatesReloadTo(units ...string) Property {
+	return propDependency("PropagatesReloadTo", units)
+}
+
+// PropRequiresMountsFor sets the RequiresMountsFor unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.unit.html#RequiresMountsFor=
+func PropRequiresMountsFor(units ...string) Property {
+	return propDependency("RequiresMountsFor", units)
+}
+
+// PropSlice sets the Slice unit property.  See
+// http://www.freedesktop.org/software/systemd/man/systemd.resource-control.html#Slice=
+func PropSlice(slice string) Property {
+	return Property{
+		Name:  "Slice",
+		Value: dbus.MakeVariant(slice),
+	}
+}
+
+// PropPids sets the PIDs field of scope units used in the initial construction
+// of the scope only and specifies the initial PIDs to add to the scope object.
+// See https://www.freedesktop.org/wiki/Software/systemd/ControlGroupInterface/#properties
+func PropPids(pids ...uint32) Property {
+	return Property{
+		Name:  "PIDs",
+		Value: dbus.MakeVariant(pids),
+	}
+}
diff --git a/vendor/github.com/coreos/go-systemd/v22/dbus/set.go b/vendor/github.com/coreos/go-systemd/v22/dbus/set.go
new file mode 100644
index 00000000000..17c5d485657
--- /dev/null
+++ b/vendor/github.com/coreos/go-systemd/v22/dbus/set.go
@@ -0,0 +1,47 @@
+// Copyright 2015 CoreOS, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package dbus
+
+type set struct {
+	data map[string]bool
+}
+
+func (s *set) Add(value string) {
+	s.data[value] = true
+}
+
+func (s *set) Remove(value string) {
+	delete(s.data, value)
+}
+
+func (s *set) Contains(value string) (exists bool) {
+	_, exists = s.data[value]
+	return
+}
+
+func (s *set) Length() int {
+	return len(s.data)
+}
+
+func (s *set) Values() (values []string) {
+	for val := range s.data {
+		values = append(values, val)
+	}
+	return
+}
+
+func newSet() *set {
+	return &set{make(map[string]bool)}
+}
diff --git a/vendor/github.com/coreos/go-systemd/v22/dbus/subscription.go b/vendor/github.com/coreos/go-systemd/v22/dbus/subscription.go
new file mode 100644
index 00000000000..7e370fea212
--- /dev/null
+++ b/vendor/github.com/coreos/go-systemd/v22/dbus/subscription.go
@@ -0,0 +1,333 @@
+// Copyright 2015 CoreOS, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package dbus
+
+import (
+	"errors"
+	"log"
+	"time"
+
+	"github.com/godbus/dbus/v5"
+)
+
+const (
+	cleanIgnoreInterval = int64(10 * time.Second)
+	ignoreInterval      = int64(30 * time.Millisecond)
+)
+
+// Subscribe sets up this connection to subscribe to all systemd dbus events.
+// This is required before calling SubscribeUnits. When the connection closes
+// systemd will automatically stop sending signals so there is no need to
+// explicitly call Unsubscribe().
+func (c *Conn) Subscribe() error {
+	c.sigconn.BusObject().Call("org.freedesktop.DBus.AddMatch", 0,
+		"type='signal',interface='org.freedesktop.systemd1.Manager',member='UnitNew'")
+	c.sigconn.BusObject().Call("org.freedesktop.DBus.AddMatch", 0,
+		"type='signal',interface='org.freedesktop.DBus.Properties',member='PropertiesChanged'")
+
+	return c.sigobj.Call("org.freedesktop.systemd1.Manager.Subscribe", 0).Store()
+}
+
+// Unsubscribe this connection from systemd dbus events.
+func (c *Conn) Unsubscribe() error {
+	return c.sigobj.Call("org.freedesktop.systemd1.Manager.Unsubscribe", 0).Store()
+}
+
+func (c *Conn) dispatch() {
+	ch := make(chan *dbus.Signal, signalBuffer)
+
+	c.sigconn.Signal(ch)
+
+	go func() {
+		for {
+			signal, ok := <-ch
+			if !ok {
+				return
+			}
+
+			if signal.Name == "org.freedesktop.systemd1.Manager.JobRemoved" {
+				c.jobComplete(signal)
+			}
+
+			if c.subStateSubscriber.updateCh == nil &&
+				c.propertiesSubscriber.updateCh == nil {
+				continue
+			}
+
+			var unitPath dbus.ObjectPath
+			switch signal.Name {
+			case "org.freedesktop.systemd1.Manager.JobRemoved":
+				unitName := signal.Body[2].(string)
+				c.sysobj.Call("org.freedesktop.systemd1.Manager.GetUnit", 0, unitName).Store(&unitPath)
+			case "org.freedesktop.systemd1.Manager.UnitNew":
+				unitPath = signal.Body[1].(dbus.ObjectPath)
+			case "org.freedesktop.DBus.Properties.PropertiesChanged":
+				if signal.Body[0].(string) == "org.freedesktop.systemd1.Unit" {
+					unitPath = signal.Path
+
+					if len(signal.Body) >= 2 {
+						if changed, ok := signal.Body[1].(map[string]dbus.Variant); ok {
+							c.sendPropertiesUpdate(unitPath, changed)
+						}
+					}
+				}
+			}
+
+			if unitPath == dbus.ObjectPath("") {
+				continue
+			}
+
+			c.sendSubStateUpdate(unitPath)
+		}
+	}()
+}
+
+// SubscribeUnits returns two unbuffered channels which will receive all changed units every
+// interval.  Deleted units are sent as nil.
+func (c *Conn) SubscribeUnits(interval time.Duration) (<-chan map[string]*UnitStatus, <-chan error) {
+	return c.SubscribeUnitsCustom(interval, 0, func(u1, u2 *UnitStatus) bool { return *u1 != *u2 }, nil)
+}
+
+// SubscribeUnitsCustom is like SubscribeUnits but lets you specify the buffer
+// size of the channels, the comparison function for detecting changes and a filter
+// function for cutting down on the noise that your channel receives.
+func (c *Conn) SubscribeUnitsCustom(interval time.Duration, buffer int, isChanged func(*UnitStatus, *UnitStatus) bool, filterUnit func(string) bool) (<-chan map[string]*UnitStatus, <-chan error) {
+	old := make(map[string]*UnitStatus)
+	statusChan := make(chan map[string]*UnitStatus, buffer)
+	errChan := make(chan error, buffer)
+
+	go func() {
+		for {
+			timerChan := time.After(interval)
+
+			units, err := c.ListUnits()
+			if err == nil {
+				cur := make(map[string]*UnitStatus)
+				for i := range units {
+					if filterUnit != nil && filterUnit(units[i].Name) {
+						continue
+					}
+					cur[units[i].Name] = &units[i]
+				}
+
+				// add all new or changed units
+				changed := make(map[string]*UnitStatus)
+				for n, u := range cur {
+					if oldU, ok := old[n]; !ok || isChanged(oldU, u) {
+						changed[n] = u
+					}
+					delete(old, n)
+				}
+
+				// add all deleted units
+				for oldN := range old {
+					changed[oldN] = nil
+				}
+
+				old = cur
+
+				if len(changed) != 0 {
+					statusChan <- changed
+				}
+			} else {
+				errChan <- err
+			}
+
+			<-timerChan
+		}
+	}()
+
+	return statusChan, errChan
+}
+
+type SubStateUpdate struct {
+	UnitName string
+	SubState string
+}
+
+// SetSubStateSubscriber writes to updateCh when any unit's substate changes.
+// Although this writes to updateCh on every state change, the reported state
+// may be more recent than the change that generated it (due to an unavoidable
+// race in the systemd dbus interface).  That is, this method provides a good
+// way to keep a current view of all units' states, but is not guaranteed to
+// show every state transition they go through.  Furthermore, state changes
+// will only be written to the channel with non-blocking writes.  If updateCh
+// is full, it attempts to write an error to errCh; if errCh is full, the error
+// passes silently.
+func (c *Conn) SetSubStateSubscriber(updateCh chan<- *SubStateUpdate, errCh chan<- error) {
+	if c == nil {
+		msg := "nil receiver"
+		select {
+		case errCh <- errors.New(msg):
+		default:
+			log.Printf("full error channel while reporting: %s\n", msg)
+		}
+		return
+	}
+
+	c.subStateSubscriber.Lock()
+	defer c.subStateSubscriber.Unlock()
+	c.subStateSubscriber.updateCh = updateCh
+	c.subStateSubscriber.errCh = errCh
+}
+
+func (c *Conn) sendSubStateUpdate(unitPath dbus.ObjectPath) {
+	c.subStateSubscriber.Lock()
+	defer c.subStateSubscriber.Unlock()
+
+	if c.subStateSubscriber.updateCh == nil {
+		return
+	}
+
+	isIgnored := c.shouldIgnore(unitPath)
+	defer c.cleanIgnore()
+	if isIgnored {
+		return
+	}
+
+	info, err := c.GetUnitPathProperties(unitPath)
+	if err != nil {
+		select {
+		case c.subStateSubscriber.errCh <- err:
+		default:
+			log.Printf("full error channel while reporting: %s\n", err)
+		}
+		return
+	}
+	defer c.updateIgnore(unitPath, info)
+
+	name, ok := info["Id"].(string)
+	if !ok {
+		msg := "failed to cast info.Id"
+		select {
+		case c.subStateSubscriber.errCh <- errors.New(msg):
+		default:
+			log.Printf("full error channel while reporting: %s\n", err)
+		}
+		return
+	}
+	substate, ok := info["SubState"].(string)
+	if !ok {
+		msg := "failed to cast info.SubState"
+		select {
+		case c.subStateSubscriber.errCh <- errors.New(msg):
+		default:
+			log.Printf("full error channel while reporting: %s\n", msg)
+		}
+		return
+	}
+
+	update := &SubStateUpdate{name, substate}
+	select {
+	case c.subStateSubscriber.updateCh <- update:
+	default:
+		msg := "update channel is full"
+		select {
+		case c.subStateSubscriber.errCh <- errors.New(msg):
+		default:
+			log.Printf("full error channel while reporting: %s\n", msg)
+		}
+		return
+	}
+}
+
+// The ignore functions work around a wart in the systemd dbus interface.
+// Requesting the properties of an unloaded unit will cause systemd to send a
+// pair of UnitNew/UnitRemoved signals.  Because we need to get a unit's
+// properties on UnitNew (as that's the only indication of a new unit coming up
+// for the first time), we would enter an infinite loop if we did not attempt
+// to detect and ignore these spurious signals.  The signal themselves are
+// indistinguishable from relevant ones, so we (somewhat hackishly) ignore an
+// unloaded unit's signals for a short time after requesting its properties.
+// This means that we will miss e.g. a transient unit being restarted
+// *immediately* upon failure and also a transient unit being started
+// immediately after requesting its status (with systemctl status, for example,
+// because this causes a UnitNew signal to be sent which then causes us to fetch
+// the properties).
+
+func (c *Conn) shouldIgnore(path dbus.ObjectPath) bool {
+	t, ok := c.subStateSubscriber.ignore[path]
+	return ok && t >= time.Now().UnixNano()
+}
+
+func (c *Conn) updateIgnore(path dbus.ObjectPath, info map[string]interface{}) {
+	loadState, ok := info["LoadState"].(string)
+	if !ok {
+		return
+	}
+
+	// unit is unloaded - it will trigger bad systemd dbus behavior
+	if loadState == "not-found" {
+		c.subStateSubscriber.ignore[path] = time.Now().UnixNano() + ignoreInterval
+	}
+}
+
+// without this, ignore would grow unboundedly over time
+func (c *Conn) cleanIgnore() {
+	now := time.Now().UnixNano()
+	if c.subStateSubscriber.cleanIgnore < now {
+		c.subStateSubscriber.cleanIgnore = now + cleanIgnoreInterval
+
+		for p, t := range c.subStateSubscriber.ignore {
+			if t < now {
+				delete(c.subStateSubscriber.ignore, p)
+			}
+		}
+	}
+}
+
+// PropertiesUpdate holds a map of a unit's changed properties
+type PropertiesUpdate struct {
+	UnitName string
+	Changed  map[string]dbus.Variant
+}
+
+// SetPropertiesSubscriber writes to updateCh when any unit's properties
+// change. Every property change reported by systemd will be sent; that is, no
+// transitions will be "missed" (as they might be with SetSubStateSubscriber).
+// However, state changes will only be written to the channel with non-blocking
+// writes.  If updateCh is full, it attempts to write an error to errCh; if
+// errCh is full, the error passes silently.
+func (c *Conn) SetPropertiesSubscriber(updateCh chan<- *PropertiesUpdate, errCh chan<- error) {
+	c.propertiesSubscriber.Lock()
+	defer c.propertiesSubscriber.Unlock()
+	c.propertiesSubscriber.updateCh = updateCh
+	c.propertiesSubscriber.errCh = errCh
+}
+
+// we don't need to worry about shouldIgnore() here because
+// sendPropertiesUpdate doesn't call GetProperties()
+func (c *Conn) sendPropertiesUpdate(unitPath dbus.ObjectPath, changedProps map[string]dbus.Variant) {
+	c.propertiesSubscriber.Lock()
+	defer c.propertiesSubscriber.Unlock()
+
+	if c.propertiesSubscriber.updateCh == nil {
+		return
+	}
+
+	update := &PropertiesUpdate{unitName(unitPath), changedProps}
+
+	select {
+	case c.propertiesSubscriber.updateCh <- update:
+	default:
+		msg := "update channel is full"
+		select {
+		case c.propertiesSubscriber.errCh <- errors.New(msg):
+		default:
+			log.Printf("full error channel while reporting: %s\n", msg)
+		}
+		return
+	}
+}
diff --git a/vendor/github.com/coreos/go-systemd/v22/dbus/subscription_set.go b/vendor/github.com/coreos/go-systemd/v22/dbus/subscription_set.go
new file mode 100644
index 00000000000..5b408d5847a
--- /dev/null
+++ b/vendor/github.com/coreos/go-systemd/v22/dbus/subscription_set.go
@@ -0,0 +1,57 @@
+// Copyright 2015 CoreOS, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package dbus
+
+import (
+	"time"
+)
+
+// SubscriptionSet returns a subscription set which is like conn.Subscribe but
+// can filter to only return events for a set of units.
+type SubscriptionSet struct {
+	*set
+	conn *Conn
+}
+
+func (s *SubscriptionSet) filter(unit string) bool {
+	return !s.Contains(unit)
+}
+
+// Subscribe starts listening for dbus events for all of the units in the set.
+// Returns channels identical to conn.SubscribeUnits.
+func (s *SubscriptionSet) Subscribe() (<-chan map[string]*UnitStatus, <-chan error) {
+	// TODO: Make fully evented by using systemd 209 with properties changed values
+	return s.conn.SubscribeUnitsCustom(time.Second, 0,
+		mismatchUnitStatus,
+		func(unit string) bool { return s.filter(unit) },
+	)
+}
+
+// NewSubscriptionSet returns a new subscription set.
+func (conn *Conn) NewSubscriptionSet() *SubscriptionSet {
+	return &SubscriptionSet{newSet(), conn}
+}
+
+// mismatchUnitStatus returns true if the provided UnitStatus objects
+// are not equivalent. false is returned if the objects are equivalent.
+// Only the Name, Description and state-related fields are used in
+// the comparison.
+func mismatchUnitStatus(u1, u2 *UnitStatus) bool {
+	return u1.Name != u2.Name ||
+		u1.Description != u2.Description ||
+		u1.LoadState != u2.LoadState ||
+		u1.ActiveState != u2.ActiveState ||
+		u1.SubState != u2.SubState
+}
diff --git a/vendor/github.com/digitalocean/godo/CHANGELOG.md b/vendor/github.com/digitalocean/godo/CHANGELOG.md
index 8d8d4c981f7..eb84bc9a8bb 100644
--- a/vendor/github.com/digitalocean/godo/CHANGELOG.md
+++ b/vendor/github.com/digitalocean/godo/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Change Log
 
+## [v1.108.0] - 2024-01-17
+
+- #660 - @dweinshenker - Enable CRUD operations for replicas with storage_size_mib
+
+## [v1.107.0] - 2023-12-07
+
+- #658 - @markusthoemmes - APPS-8033 Add the RUN_RESTARTED log type
+- #656 - @dweinshenker - Enhancement: add database user update
+- #657 - @markusthoemmes - apps: Add registry_credentials field, GHCR registry type and the egress spec
+
 ## [v1.106.0] - 2023-11-14
 
 - #654 - @dweinshenker - Remove unclean_leader_election_enable for topic configuration
diff --git a/vendor/github.com/digitalocean/godo/apps.gen.go b/vendor/github.com/digitalocean/godo/apps.gen.go
index 8b01dbb7b84..7ec24c33453 100644
--- a/vendor/github.com/digitalocean/godo/apps.gen.go
+++ b/vendor/github.com/digitalocean/godo/apps.gen.go
@@ -244,6 +244,20 @@ const (
 	AppDomainSpecType_Alias       AppDomainSpecType = "ALIAS"
 )
 
+// AppEgressSpec Specification for app egress configurations.
+type AppEgressSpec struct {
+	Type AppEgressSpecType `json:"type,omitempty"`
+}
+
+// AppEgressSpecType the model 'AppEgressSpecType'
+type AppEgressSpecType string
+
+// List of AppEgressSpecType
+const (
+	APPEGRESSSPECTYPE_Autoassign  AppEgressSpecType = "AUTOASSIGN"
+	APPEGRESSSPECTYPE_DedicatedIp AppEgressSpecType = "DEDICATED_IP"
+)
+
 // AppFunctionsSpec struct for AppFunctionsSpec
 type AppFunctionsSpec struct {
 	// The name. Must be unique across all components within the same app.
@@ -495,6 +509,7 @@ type AppSpec struct {
 	// A list of alerts which apply to the app.
 	Alerts   []*AppAlertSpec `json:"alerts,omitempty"`
 	Ingress  *AppIngressSpec `json:"ingress,omitempty"`
+	Egress   *AppEgressSpec  `json:"egress,omitempty"`
 	Features []string        `json:"features,omitempty"`
 }
 
@@ -1012,8 +1027,10 @@ type ImageSourceSpec struct {
 	// The repository tag. Defaults to `latest` if not provided and no digest is provided. Cannot be specified if digest is provided.
 	Tag string `json:"tag,omitempty"`
 	// The image digest. Cannot be specified if tag is provided.
-	Digest       string                       `json:"digest,omitempty"`
-	DeployOnPush *ImageSourceSpecDeployOnPush `json:"deploy_on_push,omitempty"`
+	Digest string `json:"digest,omitempty"`
+	// The credentials to be able to pull the image. The value will be encrypted on first submission. On following submissions, the encrypted value should be used. - \"$username:$access_token\" for registries of type `DOCKER_HUB`. - \"$username:$access_token\" for registries of type `GHCR`.
+	RegistryCredentials string                       `json:"registry_credentials,omitempty"`
+	DeployOnPush        *ImageSourceSpecDeployOnPush `json:"deploy_on_push,omitempty"`
 }
 
 // ImageSourceSpecDeployOnPush struct for ImageSourceSpecDeployOnPush
@@ -1022,7 +1039,7 @@ type ImageSourceSpecDeployOnPush struct {
 	Enabled bool `json:"enabled,omitempty"`
 }
 
-// ImageSourceSpecRegistryType  - DOCR: The DigitalOcean container registry type.  - DOCKER_HUB: The DockerHub container registry type.
+// ImageSourceSpecRegistryType  - DOCR: The DigitalOcean container registry type.  - DOCKER_HUB: The DockerHub container registry type.  - GHCR: The GitHub container registry type.
 type ImageSourceSpecRegistryType string
 
 // List of ImageSourceSpecRegistryType
@@ -1030,6 +1047,7 @@ const (
 	ImageSourceSpecRegistryType_Unspecified ImageSourceSpecRegistryType = "UNSPECIFIED"
 	ImageSourceSpecRegistryType_DOCR        ImageSourceSpecRegistryType = "DOCR"
 	ImageSourceSpecRegistryType_DockerHub   ImageSourceSpecRegistryType = "DOCKER_HUB"
+	ImageSourceSpecRegistryType_Ghcr        ImageSourceSpecRegistryType = "GHCR"
 )
 
 // AppInstanceSize struct for AppInstanceSize
diff --git a/vendor/github.com/digitalocean/godo/apps.go b/vendor/github.com/digitalocean/godo/apps.go
index 422b48acc88..880ce0921bf 100644
--- a/vendor/github.com/digitalocean/godo/apps.go
+++ b/vendor/github.com/digitalocean/godo/apps.go
@@ -21,6 +21,8 @@ const (
 	AppLogTypeDeploy AppLogType = "DEPLOY"
 	// AppLogTypeRun represents run logs.
 	AppLogTypeRun AppLogType = "RUN"
+	// AppLogTypeRunRestarted represents logs of crashed/restarted instances during runtime.
+	AppLogTypeRunRestarted AppLogType = "RUN_RESTARTED"
 )
 
 // AppsService is an interface for interfacing with the App Platform endpoints
diff --git a/vendor/github.com/digitalocean/godo/apps_accessors.go b/vendor/github.com/digitalocean/godo/apps_accessors.go
index 486c759733d..059d64731f9 100644
--- a/vendor/github.com/digitalocean/godo/apps_accessors.go
+++ b/vendor/github.com/digitalocean/godo/apps_accessors.go
@@ -757,6 +757,14 @@ func (a *AppDomainValidation) GetTXTValue() string {
 	return a.TXTValue
 }
 
+// GetType returns the Type field.
+func (a *AppEgressSpec) GetType() AppEgressSpecType {
+	if a == nil {
+		return ""
+	}
+	return a.Type
+}
+
 // GetAlerts returns the Alerts field.
 func (a *AppFunctionsSpec) GetAlerts() []*AppAlertSpec {
 	if a == nil {
@@ -1733,6 +1741,14 @@ func (a *AppSpec) GetDomains() []*AppDomainSpec {
 	return a.Domains
 }
 
+// GetEgress returns the Egress field.
+func (a *AppSpec) GetEgress() *AppEgressSpec {
+	if a == nil {
+		return nil
+	}
+	return a.Egress
+}
+
 // GetEnvs returns the Envs field.
 func (a *AppSpec) GetEnvs() []*AppVariableDefinition {
 	if a == nil {
@@ -3189,6 +3205,14 @@ func (i *ImageSourceSpec) GetRegistry() string {
 	return i.Registry
 }
 
+// GetRegistryCredentials returns the RegistryCredentials field.
+func (i *ImageSourceSpec) GetRegistryCredentials() string {
+	if i == nil {
+		return ""
+	}
+	return i.RegistryCredentials
+}
+
 // GetRegistryType returns the RegistryType field.
 func (i *ImageSourceSpec) GetRegistryType() ImageSourceSpecRegistryType {
 	if i == nil {
diff --git a/vendor/github.com/digitalocean/godo/databases.go b/vendor/github.com/digitalocean/godo/databases.go
index 71289cf272b..c0a4510a7b3 100644
--- a/vendor/github.com/digitalocean/godo/databases.go
+++ b/vendor/github.com/digitalocean/godo/databases.go
@@ -118,6 +118,7 @@ type DatabasesService interface {
 	GetUser(context.Context, string, string) (*DatabaseUser, *Response, error)
 	ListUsers(context.Context, string, *ListOptions) ([]DatabaseUser, *Response, error)
 	CreateUser(context.Context, string, *DatabaseCreateUserRequest) (*DatabaseUser, *Response, error)
+	UpdateUser(context.Context, string, string, *DatabaseUpdateUserRequest) (*DatabaseUser, *Response, error)
 	DeleteUser(context.Context, string, string) (*Response, error)
 	ResetUserAuth(context.Context, string, string, *DatabaseResetUserAuthRequest) (*DatabaseUser, *Response, error)
 	ListDBs(context.Context, string, *ListOptions) ([]DatabaseDB, *Response, error)
@@ -375,6 +376,7 @@ type DatabaseReplica struct {
 	CreatedAt          time.Time           `json:"created_at"`
 	PrivateNetworkUUID string              `json:"private_network_uuid,omitempty"`
 	Tags               []string            `json:"tags,omitempty"`
+	StorageSizeMib     uint64              `json:"storage_size_mib,omitempty"`
 }
 
 // DatabasePool represents a database connection pool
@@ -412,6 +414,11 @@ type DatabaseCreateUserRequest struct {
 	Settings      *DatabaseUserSettings      `json:"settings,omitempty"`
 }
 
+// DatabaseUpdateUserRequest is used to update an existing database user
+type DatabaseUpdateUserRequest struct {
+	Settings *DatabaseUserSettings `json:"settings,omitempty"`
+}
+
 // DatabaseResetUserAuthRequest is used to reset a users DB auth
 type DatabaseResetUserAuthRequest struct {
 	MySQLSettings *DatabaseMySQLUserSettings `json:"mysql_settings,omitempty"`
@@ -430,6 +437,7 @@ type DatabaseCreateReplicaRequest struct {
 	Size               string   `json:"size"`
 	PrivateNetworkUUID string   `json:"private_network_uuid"`
 	Tags               []string `json:"tags,omitempty"`
+	StorageSizeMib     uint64   `json:"storage_size_mib,omitempty"`
 }
 
 // DatabaseUpdateFirewallRulesRequest is used to set the firewall rules for a database
@@ -870,6 +878,21 @@ func (svc *DatabasesServiceOp) CreateUser(ctx context.Context, databaseID string
 	return root.User, resp, nil
 }
 
+// UpdateUser will update an existing database user
+func (svc *DatabasesServiceOp) UpdateUser(ctx context.Context, databaseID, userID string, updateUser *DatabaseUpdateUserRequest) (*DatabaseUser, *Response, error) {
+	path := fmt.Sprintf(databaseUserPath, databaseID, userID)
+	req, err := svc.client.NewRequest(ctx, http.MethodPut, path, updateUser)
+	if err != nil {
+		return nil, nil, err
+	}
+	root := new(databaseUserRoot)
+	resp, err := svc.client.Do(ctx, req, root)
+	if err != nil {
+		return nil, resp, err
+	}
+	return root.User, resp, nil
+}
+
 // ResetUserAuth will reset user authentication
 func (svc *DatabasesServiceOp) ResetUserAuth(ctx context.Context, databaseID, userID string, resetAuth *DatabaseResetUserAuthRequest) (*DatabaseUser, *Response, error) {
 	path := fmt.Sprintf(databaseResetUserAuthPath, databaseID, userID)
diff --git a/vendor/github.com/digitalocean/godo/godo.go b/vendor/github.com/digitalocean/godo/godo.go
index 944b5f242a8..95d20323246 100644
--- a/vendor/github.com/digitalocean/godo/godo.go
+++ b/vendor/github.com/digitalocean/godo/godo.go
@@ -21,7 +21,7 @@ import (
 )
 
 const (
-	libraryVersion = "1.106.0"
+	libraryVersion = "1.108.0"
 	defaultBaseURL = "https://api.digitalocean.com/"
 	userAgent      = "godo/" + libraryVersion
 	mediaType      = "application/json"
diff --git a/vendor/github.com/distribution/reference/.gitattributes b/vendor/github.com/distribution/reference/.gitattributes
new file mode 100644
index 00000000000..d207b1802b2
--- /dev/null
+++ b/vendor/github.com/distribution/reference/.gitattributes
@@ -0,0 +1 @@
+*.go text eol=lf
diff --git a/vendor/github.com/distribution/reference/.gitignore b/vendor/github.com/distribution/reference/.gitignore
new file mode 100644
index 00000000000..dc07e6b04a0
--- /dev/null
+++ b/vendor/github.com/distribution/reference/.gitignore
@@ -0,0 +1,2 @@
+# Cover profiles
+*.out
diff --git a/vendor/github.com/distribution/reference/.golangci.yml b/vendor/github.com/distribution/reference/.golangci.yml
new file mode 100644
index 00000000000..793f0bb7ec3
--- /dev/null
+++ b/vendor/github.com/distribution/reference/.golangci.yml
@@ -0,0 +1,18 @@
+linters:
+  enable:
+    - bodyclose
+    - dupword # Checks for duplicate words in the source code
+    - gofmt
+    - goimports
+    - ineffassign
+    - misspell
+    - revive
+    - staticcheck
+    - unconvert
+    - unused
+    - vet
+  disable:
+    - errcheck
+
+run:
+  deadline: 2m
diff --git a/vendor/github.com/distribution/reference/CODE-OF-CONDUCT.md b/vendor/github.com/distribution/reference/CODE-OF-CONDUCT.md
new file mode 100644
index 00000000000..48f6704c6d3
--- /dev/null
+++ b/vendor/github.com/distribution/reference/CODE-OF-CONDUCT.md
@@ -0,0 +1,5 @@
+# Code of Conduct
+
+We follow the [CNCF Code of Conduct](https://github.com/cncf/foundation/blob/main/code-of-conduct.md).
+
+Please contact the [CNCF Code of Conduct Committee](mailto:conduct@cncf.io) in order to report violations of the Code of Conduct.
diff --git a/vendor/github.com/distribution/reference/CONTRIBUTING.md b/vendor/github.com/distribution/reference/CONTRIBUTING.md
new file mode 100644
index 00000000000..ab219466565
--- /dev/null
+++ b/vendor/github.com/distribution/reference/CONTRIBUTING.md
@@ -0,0 +1,114 @@
+# Contributing to the reference library
+
+## Community help
+
+If you need help, please ask in the [#distribution](https://cloud-native.slack.com/archives/C01GVR8SY4R) channel on CNCF community slack.
+[Click here for an invite to the CNCF community slack](https://slack.cncf.io/)
+
+## Reporting security issues
+
+The maintainers take security seriously. If you discover a security
+issue, please bring it to their attention right away!
+
+Please **DO NOT** file a public issue, instead send your report privately to
+[cncf-distribution-security@lists.cncf.io](mailto:cncf-distribution-security@lists.cncf.io).
+
+## Reporting an issue properly
+
+By following these simple rules you will get better and faster feedback on your issue.
+
+ - search the bugtracker for an already reported issue
+
+### If you found an issue that describes your problem:
+
+ - please read other user comments first, and confirm this is the same issue: a given error condition might be indicative of different problems - you may also find a workaround in the comments
+ - please refrain from adding "same thing here" or "+1" comments
+ - you don't need to comment on an issue to get notified of updates: just hit the "subscribe" button
+ - comment if you have some new, technical and relevant information to add to the case
+ - __DO NOT__ comment on closed issues or merged PRs. If you think you have a related problem, open up a new issue and reference the PR or issue.
+
+### If you have not found an existing issue that describes your problem:
+
+ 1. create a new issue, with a succinct title that describes your issue:
+   - bad title: "It doesn't work with my docker"
+   - good title: "Private registry push fail: 400 error with E_INVALID_DIGEST"
+ 2. copy the output of (or similar for other container tools):
+   - `docker version`
+   - `docker info`
+   - `docker exec <registry-container> registry --version`
+ 3. copy the command line you used to launch your Registry
+ 4. restart your docker daemon in debug mode (add `-D` to the daemon launch arguments)
+ 5. reproduce your problem and get your docker daemon logs showing the error
+ 6. if relevant, copy your registry logs that show the error
+ 7. provide any relevant detail about your specific Registry configuration (e.g., storage backend used)
+ 8. indicate if you are using an enterprise proxy, Nginx, or anything else between you and your Registry
+
+## Contributing Code
+
+Contributions should be made via pull requests. Pull requests will be reviewed
+by one or more maintainers or reviewers and merged when acceptable.
+
+You should follow the basic GitHub workflow:
+
+ 1. Use your own [fork](https://help.github.com/en/articles/about-forks)
+ 2. Create your [change](https://github.com/containerd/project/blob/master/CONTRIBUTING.md#successful-changes)
+ 3. Test your code
+ 4. [Commit](https://github.com/containerd/project/blob/master/CONTRIBUTING.md#commit-messages) your work, always [sign your commits](https://github.com/containerd/project/blob/master/CONTRIBUTING.md#commit-messages)
+ 5. Push your change to your fork and create a [Pull Request](https://help.github.com/en/github/collaborating-with-issues-and-pull-requests/creating-a-pull-request-from-a-fork)
+
+Refer to [containerd's contribution guide](https://github.com/containerd/project/blob/master/CONTRIBUTING.md#successful-changes)
+for tips on creating a successful contribution.
+
+## Sign your work
+
+The sign-off is a simple line at the end of the explanation for the patch. Your
+signature certifies that you wrote the patch or otherwise have the right to pass
+it on as an open-source patch. The rules are pretty simple: if you can certify
+the below (from [developercertificate.org](http://developercertificate.org/)):
+
+```
+Developer Certificate of Origin
+Version 1.1
+
+Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
+660 York Street, Suite 102,
+San Francisco, CA 94110 USA
+
+Everyone is permitted to copy and distribute verbatim copies of this
+license document, but changing it is not allowed.
+
+Developer's Certificate of Origin 1.1
+
+By making a contribution to this project, I certify that:
+
+(a) The contribution was created in whole or in part by me and I
+    have the right to submit it under the open source license
+    indicated in the file; or
+
+(b) The contribution is based upon previous work that, to the best
+    of my knowledge, is covered under an appropriate open source
+    license and I have the right under that license to submit that
+    work with modifications, whether created in whole or in part
+    by me, under the same open source license (unless I am
+    permitted to submit under a different license), as indicated
+    in the file; or
+
+(c) The contribution was provided directly to me by some other
+    person who certified (a), (b) or (c) and I have not modified
+    it.
+
+(d) I understand and agree that this project and the contribution
+    are public and that a record of the contribution (including all
+    personal information I submit with it, including my sign-off) is
+    maintained indefinitely and may be redistributed consistent with
+    this project or the open source license(s) involved.
+```
+
+Then you just add a line to every git commit message:
+
+    Signed-off-by: Joe Smith <joe.smith@email.com>
+
+Use your real name (sorry, no pseudonyms or anonymous contributions.)
+
+If you set your `user.name` and `user.email` git configs, you can sign your
+commit automatically with `git commit -s`.
diff --git a/vendor/github.com/distribution/reference/GOVERNANCE.md b/vendor/github.com/distribution/reference/GOVERNANCE.md
new file mode 100644
index 00000000000..200045b0509
--- /dev/null
+++ b/vendor/github.com/distribution/reference/GOVERNANCE.md
@@ -0,0 +1,144 @@
+# distribution/reference Project Governance
+
+Distribution [Code of Conduct](./CODE-OF-CONDUCT.md) can be found here.
+
+For specific guidance on practical contribution steps please
+see our [CONTRIBUTING.md](./CONTRIBUTING.md) guide.
+
+## Maintainership
+
+There are different types of maintainers, with different responsibilities, but
+all maintainers have 3 things in common:
+
+1) They share responsibility in the project's success.
+2) They have made a long-term, recurring time investment to improve the project.
+3) They spend that time doing whatever needs to be done, not necessarily what
+is the most interesting or fun.
+
+Maintainers are often under-appreciated, because their work is harder to appreciate.
+It's easy to appreciate a really cool and technically advanced feature. It's harder
+to appreciate the absence of bugs, the slow but steady improvement in stability,
+or the reliability of a release process. But those things distinguish a good
+project from a great one.
+
+## Reviewers
+
+A reviewer is a core role within the project.
+They share in reviewing issues and pull requests and their LGTM counts towards the
+required LGTM count to merge a code change into the project.
+
+Reviewers are part of the organization but do not have write access.
+Becoming a reviewer is a core aspect in the journey to becoming a maintainer.
+
+## Adding maintainers
+
+Maintainers are first and foremost contributors that have shown they are
+committed to the long term success of a project. Contributors wanting to become
+maintainers are expected to be deeply involved in contributing code, pull
+request review, and triage of issues in the project for more than three months.
+
+Just contributing does not make you a maintainer, it is about building trust
+with the current maintainers of the project and being a person that they can
+depend on and trust to make decisions in the best interest of the project.
+
+Periodically, the existing maintainers curate a list of contributors that have
+shown regular activity on the project over the prior months. From this list,
+maintainer candidates are selected and proposed in a pull request or a
+maintainers communication channel.
+
+After a candidate has been announced to the maintainers, the existing
+maintainers are given five business days to discuss the candidate, raise
+objections and cast their vote. Votes may take place on the communication
+channel or via pull request comment. Candidates must be approved by at least 66%
+of the current maintainers by adding their vote on the mailing list. The
+reviewer role has the same process but only requires 33% of current maintainers.
+Only maintainers of the repository that the candidate is proposed for are
+allowed to vote.
+
+If a candidate is approved, a maintainer will contact the candidate to invite
+the candidate to open a pull request that adds the contributor to the
+MAINTAINERS file. The voting process may take place inside a pull request if a
+maintainer has already discussed the candidacy with the candidate and a
+maintainer is willing to be a sponsor by opening the pull request. The candidate
+becomes a maintainer once the pull request is merged.
+
+## Stepping down policy
+
+Life priorities, interests, and passions can change. If you're a maintainer but
+feel you must remove yourself from the list, inform other maintainers that you
+intend to step down, and if possible, help find someone to pick up your work.
+At the very least, ensure your work can be continued where you left off.
+
+After you've informed other maintainers, create a pull request to remove
+yourself from the MAINTAINERS file.
+
+## Removal of inactive maintainers
+
+Similar to the procedure for adding new maintainers, existing maintainers can
+be removed from the list if they do not show significant activity on the
+project. Periodically, the maintainers review the list of maintainers and their
+activity over the last three months.
+
+If a maintainer has shown insufficient activity over this period, a neutral
+person will contact the maintainer to ask if they want to continue being
+a maintainer. If the maintainer decides to step down as a maintainer, they
+open a pull request to be removed from the MAINTAINERS file.
+
+If the maintainer wants to remain a maintainer, but is unable to perform the
+required duties they can be removed with a vote of at least 66% of the current
+maintainers. In this case, maintainers should first propose the change to
+maintainers via the maintainers communication channel, then open a pull request
+for voting. The voting period is five business days. The voting pull request
+should not come as a surpise to any maintainer and any discussion related to
+performance must not be discussed on the pull request.
+
+## How are decisions made?
+
+Docker distribution is an open-source project with an open design philosophy.
+This means that the repository is the source of truth for EVERY aspect of the
+project, including its philosophy, design, road map, and APIs. *If it's part of
+the project, it's in the repo. If it's in the repo, it's part of the project.*
+
+As a result, all decisions can be expressed as changes to the repository. An
+implementation change is a change to the source code. An API change is a change
+to the API specification. A philosophy change is a change to the philosophy
+manifesto, and so on.
+
+All decisions affecting distribution, big and small, follow the same 3 steps:
+
+* Step 1: Open a pull request. Anyone can do this.
+
+* Step 2: Discuss the pull request. Anyone can do this.
+
+* Step 3: Merge or refuse the pull request. Who does this depends on the nature
+of the pull request and which areas of the project it affects.
+
+## Helping contributors with the DCO
+
+The [DCO or `Sign your work`](./CONTRIBUTING.md#sign-your-work)
+requirement is not intended as a roadblock or speed bump.
+
+Some contributors are not as familiar with `git`, or have used a web
+based editor, and thus asking them to `git commit --amend -s` is not the best
+way forward.
+
+In this case, maintainers can update the commits based on clause (c) of the DCO.
+The most trivial way for a contributor to allow the maintainer to do this, is to
+add a DCO signature in a pull requests's comment, or a maintainer can simply
+note that the change is sufficiently trivial that it does not substantially
+change the existing contribution - i.e., a spelling change.
+
+When you add someone's DCO, please also add your own to keep a log.
+
+## I'm a maintainer. Should I make pull requests too?
+
+Yes. Nobody should ever push to master directly. All changes should be
+made through a pull request.
+
+## Conflict Resolution
+
+If you have a technical dispute that you feel has reached an impasse with a
+subset of the community, any contributor may open an issue, specifically
+calling for a resolution vote of the current core maintainers to resolve the
+dispute. The same voting quorums required (2/3) for adding and removing
+maintainers will apply to conflict resolution.
diff --git a/vendor/github.com/docker/distribution/LICENSE b/vendor/github.com/distribution/reference/LICENSE
similarity index 100%
rename from vendor/github.com/docker/distribution/LICENSE
rename to vendor/github.com/distribution/reference/LICENSE
diff --git a/vendor/github.com/distribution/reference/MAINTAINERS b/vendor/github.com/distribution/reference/MAINTAINERS
new file mode 100644
index 00000000000..9e0a60c8bdc
--- /dev/null
+++ b/vendor/github.com/distribution/reference/MAINTAINERS
@@ -0,0 +1,26 @@
+# Distribution project maintainers & reviewers
+#
+# See GOVERNANCE.md for maintainer versus reviewer roles
+#
+# MAINTAINERS (cncf-distribution-maintainers@lists.cncf.io)
+# GitHub ID, Name, Email address
+"chrispat","Chris Patterson","chrispat@github.com"
+"clarkbw","Bryan Clark","clarkbw@github.com"
+"corhere","Cory Snider","csnider@mirantis.com"
+"deleteriousEffect","Hayley Swimelar","hswimelar@gitlab.com"
+"heww","He Weiwei","hweiwei@vmware.com"
+"joaodrp","João Pereira","jpereira@gitlab.com"
+"justincormack","Justin Cormack","justin.cormack@docker.com"
+"squizzi","Kyle Squizzato","ksquizzato@mirantis.com"
+"milosgajdos","Milos Gajdos","milosthegajdos@gmail.com"
+"sargun","Sargun Dhillon","sargun@sargun.me"
+"wy65701436","Wang Yan","wangyan@vmware.com"
+"stevelasker","Steve Lasker","steve.lasker@microsoft.com"
+#
+# REVIEWERS
+# GitHub ID, Name, Email address
+"dmcgowan","Derek McGowan","derek@mcgstyle.net"
+"stevvooe","Stephen Day","stevvooe@gmail.com"
+"thajeztah","Sebastiaan van Stijn","github@gone.nl"
+"DavidSpek", "David van der Spek", "vanderspek.david@gmail.com"
+"Jamstah", "James Hewitt", "james.hewitt@gmail.com"
diff --git a/vendor/github.com/distribution/reference/Makefile b/vendor/github.com/distribution/reference/Makefile
new file mode 100644
index 00000000000..c78576b75d0
--- /dev/null
+++ b/vendor/github.com/distribution/reference/Makefile
@@ -0,0 +1,25 @@
+# Project packages.
+PACKAGES=$(shell go list ./...)
+
+# Flags passed to `go test`
+BUILDFLAGS ?= 
+TESTFLAGS ?= 
+
+.PHONY: all build test coverage
+.DEFAULT: all
+
+all: build
+
+build: ## no binaries to build, so just check compilation suceeds
+	go build ${BUILDFLAGS} ./...
+
+test: ## run tests
+	go test ${TESTFLAGS} ./...
+
+coverage: ## generate coverprofiles from the unit tests
+	rm -f coverage.txt
+	go test ${TESTFLAGS} -cover -coverprofile=cover.out ./...
+
+.PHONY: help
+help:
+	@awk 'BEGIN {FS = ":.*##"; printf "\nUsage:\n  make \033[36m\033[0m\n"} /^[a-zA-Z_\/%-]+:.*?##/ { printf "  \033[36m%-27s\033[0m %s\n", $$1, $$2 } /^##@/ { printf "\n\033[1m%s\033[0m\n", substr($$0, 5) } ' $(MAKEFILE_LIST)
diff --git a/vendor/github.com/distribution/reference/README.md b/vendor/github.com/distribution/reference/README.md
new file mode 100644
index 00000000000..e2531e49c4f
--- /dev/null
+++ b/vendor/github.com/distribution/reference/README.md
@@ -0,0 +1,30 @@
+# Distribution reference
+
+Go library to handle references to container images.
+
+<img src="/distribution-logo.svg" width="200px" />
+
+[![Build Status](https://github.com/distribution/reference/actions/workflows/test.yml/badge.svg?branch=main&event=push)](https://github.com/distribution/reference/actions?query=workflow%3ACI)
+[![GoDoc](https://img.shields.io/badge/go.dev-reference-007d9c?logo=go&logoColor=white&style=flat-square)](https://pkg.go.dev/github.com/distribution/reference)
+[![License: Apache-2.0](https://img.shields.io/badge/License-Apache--2.0-blue.svg)](LICENSE)
+[![codecov](https://codecov.io/gh/distribution/reference/branch/main/graph/badge.svg)](https://codecov.io/gh/distribution/reference)
+[![FOSSA Status](https://app.fossa.com/api/projects/custom%2B162%2Fgithub.com%2Fdistribution%2Freference.svg?type=shield)](https://app.fossa.com/projects/custom%2B162%2Fgithub.com%2Fdistribution%2Freference?ref=badge_shield)
+
+This repository contains a library for handling refrences to container images held in container registries. Please see [godoc](https://pkg.go.dev/github.com/distribution/reference) for details.
+
+## Contribution
+
+Please see [CONTRIBUTING.md](CONTRIBUTING.md) for details on how to contribute
+issues, fixes, and patches to this project.
+
+## Communication
+
+For async communication and long running discussions please use issues and pull requests on the github repo.
+This will be the best place to discuss design and implementation.
+
+For sync communication we have a #distribution channel in the [CNCF Slack](https://slack.cncf.io/)
+that everyone is welcome to join and chat about development.
+
+## Licenses
+
+The distribution codebase is released under the [Apache 2.0 license](LICENSE).
diff --git a/vendor/github.com/distribution/reference/SECURITY.md b/vendor/github.com/distribution/reference/SECURITY.md
new file mode 100644
index 00000000000..aaf983c0f05
--- /dev/null
+++ b/vendor/github.com/distribution/reference/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+The maintainers take security seriously. If you discover a security issue, please bring it to their attention right away!
+
+Please DO NOT file a public issue, instead send your report privately to cncf-distribution-security@lists.cncf.io.
diff --git a/vendor/github.com/distribution/reference/distribution-logo.svg b/vendor/github.com/distribution/reference/distribution-logo.svg
new file mode 100644
index 00000000000..cc9f4073b9b
--- /dev/null
+++ b/vendor/github.com/distribution/reference/distribution-logo.svg
@@ -0,0 +1 @@
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 564.27793 654.82002"><defs><style>.cls-1{fill:#416ba9;}.cls-2{fill:#74c3d5;}</style></defs><path class="cls-1" d="M17.48582,567.55941c0-3.66375,2.2168-4.91716,4.91609-4.91716H36.66877c18.70153,0,28.24476,9.06127,28.24476,33.64387,0,22.26771-7.51889,35.57065-27.95526,35.57065H22.40191c-2.69929,0-4.91609-1.25341-4.91609-4.91609Zm20.33987,49.741c7.61539,0,10.60365-6.94043,10.60365-20.72586,0-15.13429-3.85568-19.376-10.70015-19.376H33.97v40.10182Z"/><path class="cls-1" d="M72.43613,567.55941c0-3.66375,2.21681-4.91716,4.9161-4.91716h6.36251c2.69876,0,4.91609,1.25341,4.91609,4.91716v59.38127c0,3.66268-2.21733,4.91609-4.91609,4.91609H77.35223c-2.69929,0-4.9161-1.25341-4.9161-4.91609Z"/><path class="cls-1" d="M99.718,613.05875l5.78405-1.06042c4.33764-.77092,4.53063,1.15692,5.78352,3.85674a6.70953,6.70953,0,0,0,6.5555,3.95218c3.56672,0,6.26548-1.83134,6.26548-5.59158,0-12.82046-27.6663-11.08561-27.6663-34.31724,0-10.79718,7.80839-18.1236,20.43637-18.1236,11.08614,0,16.96615,4.8196,20.05091,12.918.96445,2.31277,1.44641,4.7231-2.98826,5.59052l-5.20559,1.06042c-3.95218.77092-4.33764-1.06042-6.073-3.66269a6.39679,6.39679,0,0,0-5.49456-3.08475c-3.18125,0-5.20559,1.83134-5.20559,4.7231,0,12.24252,27.56981,10.60418,27.56981,33.73931,0,12.532-8.77231,19.66545-22.36422,19.66545-11.47159,0-17.93007-4.43467-20.82236-14.07387C95.57286,616.24,95.1874,613.92617,99.718,613.05875Z"/><path class="cls-1" d="M154.86187,576.62068h-8.09735c-3.66321,0-4.91662-2.21734-4.91662-4.91716v-4.14411c0-2.69983,1.25341-4.91716,4.91662-4.91716H179.058c3.66321,0,4.91609,2.21733,4.91609,4.91716v4.14411c0,2.69982-1.25288,4.91716-4.91609,4.91716h-8.09788v50.32c0,3.66268-2.21681,4.91609-4.9161,4.91609h-6.266c-2.69876,0-4.9161-1.25341-4.9161-4.91609Z"/><path class="cls-1" d="M189.76022,567.55941c0-3.66375,2.21681-4.91716,4.9161-4.91716h16.2912c15.13481,0,23.03969,5.68808,23.03969,20.05144,0,8.38684-3.27775,13.68787-8.29034,16.77369l9.35076,27.76173c1.34938,4.04974-.96445,4.62766-3.37425,4.62766h-8.67581c-2.89176,0-4.53063-1.92783-5.30208-4.7231L211.546,605.92532h-5.68755v21.01536c0,3.66268-2.2168,4.91609-4.91609,4.91609h-6.266c-2.69929,0-4.9161-1.25341-4.9161-4.91609Zm20.14688,25.35246c4.14517,0,7.61592-1.6394,7.61592-8.57984,0-7.61486-3.37425-8.19384-7.22993-8.19384h-4.43467v16.77368Z"/><path class="cls-1" d="M241.91422,567.55941c0-3.66375,2.2168-4.91716,4.91609-4.91716h6.36251c2.69876,0,4.9161,1.25341,4.9161,4.91716v59.38127c0,3.66268-2.21734,4.91609-4.9161,4.91609h-6.36251c-2.69929,0-4.91609-1.25341-4.91609-4.91609Z"/><path class="cls-1" d="M267.75024,567.55941c0-3.66375,2.2168-4.91716,4.91609-4.91716h14.94182c16.77316,0,24.09958,5.49508,24.09958,18.31659,0,6.94044-3.08475,11.953-8.96477,14.5553v.193c6.74744,2.31384,10.41065,7.13343,10.41065,15.80977,0,16.58069-11.3751,20.33987-25.449,20.33987H272.66633c-2.69929,0-4.91609-1.25341-4.91609-4.91609Zm20.72533,22.5572c4.33817,0,6.84447-2.12083,6.84447-7.32642,0-4.91716-2.79579-6.36251-6.84447-6.36251h-4.9161v13.68893Zm.386,27.95473c5.88,0,7.90436-2.40926,7.90436-7.80785,0-5.88-3.18126-7.80786-7.80839-7.80786h-5.39806v15.61571Z"/><path class="cls-1" d="M320.09776,567.55941c0-3.66375,2.21733-4.91716,4.91662-4.91716h6.362c2.69929,0,4.91663,1.25341,4.91663,4.91716v43.282c0,5.78457,2.3133,8.38684,6.748,8.38684,4.43413,0,7.13343-2.60227,7.13343-8.38684v-43.282c0-3.66375,2.21733-4.91716,4.91609-4.91716H361.26c2.6993,0,4.91663,1.25341,4.91663,4.91716v41.06573c0,15.80871-7.13343,24.00256-23.42516,24.00256-16.0982,0-22.6537-8.19385-22.6537-24.00256Z"/><path class="cls-1" d="M384.59236,576.62068H376.495c-3.66322,0-4.91663-2.21734-4.91663-4.91716v-4.14411c0-2.69983,1.25341-4.91716,4.91663-4.91716h32.29343c3.66321,0,4.91609,2.21733,4.91609,4.91716v4.14411c0,2.69982-1.25288,4.91716-4.91609,4.91716H400.6911v50.32c0,3.66268-2.21734,4.91609-4.91663,4.91609h-6.266c-2.69929,0-4.9161-1.25341-4.9161-4.91609Z"/><path class="cls-1" d="M419.49071,567.55941c0-3.66375,2.21681-4.91716,4.9161-4.91716h6.36251c2.69876,0,4.91609,1.25341,4.91609,4.91716v59.38127c0,3.66268-2.21733,4.91609-4.91609,4.91609h-6.36251c-2.69929,0-4.9161-1.25341-4.9161-4.91609Z"/><path class="cls-1" d="M443.20536,597.34654c0-21.30485,5.59106-35.57171,24.48505-35.57171s24.48505,14.26686,24.48505,35.57171c0,22.07472-6.84394,35.37766-24.485,35.37766S443.20536,619.42126,443.20536,597.34654Zm32.48643,0c0-16.29226-2.12083-22.26877-8.00138-22.26877-5.88,0-8.00085,5.97651-8.00085,22.26877,0,17.06212,2.4098,22.17121,8.00085,22.17121C473.378,619.51775,475.69179,614.40866,475.69179,597.34654Z"/><path class="cls-1" d="M499.69859,567.55941c0-3.66375,2.2168-4.91716,4.9161-4.91716h6.941a7.56728,7.56728,0,0,1,6.84394,4.43467l13.207,29.88363h.19247V567.55941c0-3.66375,2.21733-4.91716,4.91662-4.91716h4.62714c2.69876,0,4.91609,1.25341,4.91609,4.91716v59.38127c0,3.66268-2.21733,4.91609-4.91609,4.91609h-5.68756c-2.98878,0-4.72363-1.83134-5.977-4.43466L514.15792,593.5863h-.19247v33.35438c0,3.66268-2.21733,4.91609-4.91663,4.91609h-4.43413c-2.6993,0-4.9161-1.25341-4.9161-4.91609Z"/><g id="F1L4Xu"><path class="cls-2" d="M461.28162,365.26377c14.626-14.99573,31.51073-27.88581,43.901-45.3001,23.6055-33.17709,21.5881-53.98611-9.08528-79.89549-5.54727-4.68571-8.18237-7.96252-5.187-15.251,2.57641-6.26934,3.76528-13.21711,4.83156-19.981,5.90314-37.44659-11.00082-60.70078-48.64828-63.33267-13.137-.91842-16.45015-5.43062-19.21754-16.935-9.30387-38.67663-34.59038-53.67167-74.13662-44.585-10.18443,2.3401-17.05741,2.2529-24.8593-6.77926-30.175-34.93317-59.58084-35.22646-91.95222-.348-9.64337,10.39025-15.6225,11.83918-28.62783,5.4055-32.90341-16.27713-59.8387-3.10046-69.78437,35.47712-4.6848,18.17164-11.36854,26.3489-30.24471,30.1582-31.33028,6.32259-44.78933,33.5759-35.57532,69.531,3.76252,14.68215,4.6826,23.43655-10.28992,33.26423-22.74913,14.93216-25.22052,35.33713-11.0953,59.39875a163.06863,163.06863,0,0,0,18.46085,24.68707c6.40258,7.28037,13.94521,13.55817,19.80434,21.482C65.25053,338.04809,43.116,321.28746,27.8598,297.29993c-17.05057-26.80876-13.40609-48.15088,13.33187-65.26212,13.64688-8.73344,14.87507-15.92347,10.65871-30.93464-12.7269-45.31048,5.12054-71.29348,52.09339-78.34017,9.12234-1.36851,13.24368-4.37134,14.93358-13.09156a120.37358,120.37358,0,0,1,6.91928-23.66458C140.26672,51.59355,166.89048,40.64934,200.93587,56.76c12.995,6.14933,20.16447,5.77862,30.68022-5.2998C268.21035,12.90788,301.23887,13.957,336.089,53.95609c7.03437,8.07364,13.32723,7.58749,21.51782,5.54845,49.26567-12.26462,82.34232,9.66738,86.80352,52.02378.85563,8.12375,4.89151,12.49189,13.59822,11.06745a9.08058,9.08058,0,0,1,2.06083.01162c48.42775,3.32745,67.90447,29.37216,55.65225,76.28488-3.68675,14.11627-5.266,23.35647,9.83168,33.3918,24.025,15.96919,26.43605,40.908,10.89058,67.22194C523.519,321.384,492.3391,349.49056,461.28162,365.26377Z"/><path class="cls-2" d="M222.21166,412.15994c-43.3335,8.71069-88.628,7.98395-130.77907,28.38523,94.59324,34.57588,265.86321,39.32494,381.28659.87883-20.80256-13.03877-43.25235-15.46757-64.96771-19.52875-21.46582-4.01455-43.21049-6.53754-65.22855-9.773,2.32155-9.0906,5.71941-13.26155,14.6818-11.53506,34.9755,6.73747,70.6065,10.43856,104.30053,22.96341,8.18218,3.04152,18.89124,4.40911,19.86455,15.15614,1.09622,12.10448-6.10692,24.09739-16.79915,25.67409-30.25013,4.46064-56.38559,26.36212-84.9133,26.506-28.47048.14371-52.82989-.52977-79.492,14.17476-20.18156,11.13047-46.332,2.83194-64.16335-15.45408-6.83775-7.01216-11.13794-6.37864-19.02114-2.85829-23.91278,10.67842-47.24546,8.5124-67.31614-8.79886-7.10279-6.12627-13.27536-7.629-22.06165-6.68907a44.08867,44.08867,0,0,1-27.74743-5.86122C89.8179,459.38315,82.0507,451.437,82.898,439.18832c.77048-11.13889,11.49627-12.35089,19.55689-15.40536,33.62848-12.74306,69.18754-16.82889,104.26785-23.14551C215.75685,399.01074,219.15407,403.38339,222.21166,412.15994Z"/></g><rect class="cls-1" x="157.9184" y="278.28554" width="63.75238" height="63.75238"/><rect class="cls-1" x="241.008" y="278.28554" width="63.75238" height="63.75238"/><rect class="cls-1" x="157.9184" y="361.37514" width="63.75238" height="63.75238"/><rect class="cls-1" x="367.09657" y="153.06724" width="63.75176" height="63.75177" transform="translate(-13.91822 336.28471) rotate(-45)"/><polygon class="cls-1" points="239.799 221.785 239.799 222.389 296.3 250.79 325.004 193.987 268.201 165.284 239.799 221.785"/><rect class="cls-1" x="341.49858" y="264.8759" width="63.75384" height="63.75383" transform="translate(-59.8512 496.2174) rotate(-63.19922)"/><rect class="cls-1" x="157.9184" y="195.19594" width="63.75238" height="63.75238"/><rect class="cls-1" x="241.008" y="361.37514" width="63.75238" height="63.75238"/><rect class="cls-1" x="324.39973" y="361.37514" width="63.75238" height="63.75238"/></svg>
\ No newline at end of file
diff --git a/vendor/github.com/docker/distribution/reference/helpers.go b/vendor/github.com/distribution/reference/helpers.go
similarity index 94%
rename from vendor/github.com/docker/distribution/reference/helpers.go
rename to vendor/github.com/distribution/reference/helpers.go
index 978df7eabbf..d10c7ef8387 100644
--- a/vendor/github.com/docker/distribution/reference/helpers.go
+++ b/vendor/github.com/distribution/reference/helpers.go
@@ -32,7 +32,7 @@ func FamiliarString(ref Reference) string {
 }
 
 // FamiliarMatch reports whether ref matches the specified pattern.
-// See https://godoc.org/path#Match for supported patterns.
+// See [path.Match] for supported patterns.
 func FamiliarMatch(pattern string, ref Reference) (bool, error) {
 	matched, err := path.Match(pattern, FamiliarString(ref))
 	if namedRef, isNamed := ref.(Named); isNamed && !matched {
diff --git a/vendor/github.com/docker/distribution/reference/normalize.go b/vendor/github.com/distribution/reference/normalize.go
similarity index 52%
rename from vendor/github.com/docker/distribution/reference/normalize.go
rename to vendor/github.com/distribution/reference/normalize.go
index b3dfb7a6d7e..a30229d01bb 100644
--- a/vendor/github.com/docker/distribution/reference/normalize.go
+++ b/vendor/github.com/distribution/reference/normalize.go
@@ -1,19 +1,42 @@
 package reference
 
 import (
-	"errors"
 	"fmt"
 	"strings"
 
-	"github.com/docker/distribution/digestset"
 	"github.com/opencontainers/go-digest"
 )
 
-var (
+const (
+	// legacyDefaultDomain is the legacy domain for Docker Hub (which was
+	// originally named "the Docker Index"). This domain is still used for
+	// authentication and image search, which were part of the "v1" Docker
+	// registry specification.
+	//
+	// This domain will continue to be supported, but there are plans to consolidate
+	// legacy domains to new "canonical" domains. Once those domains are decided
+	// on, we must update the normalization functions, but preserve compatibility
+	// with existing installs, clients, and user configuration.
 	legacyDefaultDomain = "index.docker.io"
-	defaultDomain       = "docker.io"
-	officialRepoName    = "library"
-	defaultTag          = "latest"
+
+	// defaultDomain is the default domain used for images on Docker Hub.
+	// It is used to normalize "familiar" names to canonical names, for example,
+	// to convert "ubuntu" to "docker.io/library/ubuntu:latest".
+	//
+	// Note that actual domain of Docker Hub's registry is registry-1.docker.io.
+	// This domain will continue to be supported, but there are plans to consolidate
+	// legacy domains to new "canonical" domains. Once those domains are decided
+	// on, we must update the normalization functions, but preserve compatibility
+	// with existing installs, clients, and user configuration.
+	defaultDomain = "docker.io"
+
+	// officialRepoPrefix is the namespace used for official images on Docker Hub.
+	// It is used to normalize "familiar" names to canonical names, for example,
+	// to convert "ubuntu" to "docker.io/library/ubuntu:latest".
+	officialRepoPrefix = "library/"
+
+	// defaultTag is the default tag if no tag is provided.
+	defaultTag = "latest"
 )
 
 // normalizedNamed represents a name which has been
@@ -35,14 +58,14 @@ func ParseNormalizedNamed(s string) (Named, error) {
 		return nil, fmt.Errorf("invalid repository name (%s), cannot specify 64-byte hexadecimal strings", s)
 	}
 	domain, remainder := splitDockerDomain(s)
-	var remoteName string
+	var remote string
 	if tagSep := strings.IndexRune(remainder, ':'); tagSep > -1 {
-		remoteName = remainder[:tagSep]
+		remote = remainder[:tagSep]
 	} else {
-		remoteName = remainder
+		remote = remainder
 	}
-	if strings.ToLower(remoteName) != remoteName {
-		return nil, errors.New("invalid reference format: repository name must be lowercase")
+	if strings.ToLower(remote) != remote {
+		return nil, fmt.Errorf("invalid reference format: repository name (%s) must be lowercase", remote)
 	}
 
 	ref, err := Parse(domain + "/" + remainder)
@@ -56,41 +79,53 @@ func ParseNormalizedNamed(s string) (Named, error) {
 	return named, nil
 }
 
-// ParseDockerRef normalizes the image reference following the docker convention. This is added
-// mainly for backward compatibility.
-// The reference returned can only be either tagged or digested. For reference contains both tag
-// and digest, the function returns digested reference, e.g. docker.io/library/busybox:latest@
-// sha256:7cc4b5aefd1d0cadf8d97d4350462ba51c694ebca145b08d7d41b41acc8db5aa will be returned as
-// docker.io/library/busybox@sha256:7cc4b5aefd1d0cadf8d97d4350462ba51c694ebca145b08d7d41b41acc8db5aa.
+// namedTaggedDigested is a reference that has both a tag and a digest.
+type namedTaggedDigested interface {
+	NamedTagged
+	Digested
+}
+
+// ParseDockerRef normalizes the image reference following the docker convention,
+// which allows for references to contain both a tag and a digest. It returns a
+// reference that is either tagged or digested. For references containing both
+// a tag and a digest, it returns a digested reference. For example, the following
+// reference:
+//
+//	docker.io/library/busybox:latest@sha256:7cc4b5aefd1d0cadf8d97d4350462ba51c694ebca145b08d7d41b41acc8db5aa
+//
+// Is returned as a digested reference (with the ":latest" tag removed):
+//
+//	docker.io/library/busybox@sha256:7cc4b5aefd1d0cadf8d97d4350462ba51c694ebca145b08d7d41b41acc8db5aa
+//
+// References that are already "tagged" or "digested" are returned unmodified:
+//
+//	// Already a digested reference
+//	docker.io/library/busybox@sha256:7cc4b5aefd1d0cadf8d97d4350462ba51c694ebca145b08d7d41b41acc8db5aa
+//
+//	// Already a named reference
+//	docker.io/library/busybox:latest
 func ParseDockerRef(ref string) (Named, error) {
 	named, err := ParseNormalizedNamed(ref)
 	if err != nil {
 		return nil, err
 	}
-	if _, ok := named.(NamedTagged); ok {
-		if canonical, ok := named.(Canonical); ok {
-			// The reference is both tagged and digested, only
-			// return digested.
-			newNamed, err := WithName(canonical.Name())
-			if err != nil {
-				return nil, err
-			}
-			newCanonical, err := WithDigest(newNamed, canonical.Digest())
-			if err != nil {
-				return nil, err
-			}
-			return newCanonical, nil
+	if canonical, ok := named.(namedTaggedDigested); ok {
+		// The reference is both tagged and digested; only return digested.
+		newNamed, err := WithName(canonical.Name())
+		if err != nil {
+			return nil, err
 		}
+		return WithDigest(newNamed, canonical.Digest())
 	}
 	return TagNameOnly(named), nil
 }
 
-// splitDockerDomain splits a repository name to domain and remotename string.
+// splitDockerDomain splits a repository name to domain and remote-name.
 // If no valid domain is found, the default domain is used. Repository name
 // needs to be already validated before.
 func splitDockerDomain(name string) (domain, remainder string) {
 	i := strings.IndexRune(name, '/')
-	if i == -1 || (!strings.ContainsAny(name[:i], ".:") && name[:i] != "localhost") {
+	if i == -1 || (!strings.ContainsAny(name[:i], ".:") && name[:i] != localhost && strings.ToLower(name[:i]) == name[:i]) {
 		domain, remainder = defaultDomain, name
 	} else {
 		domain, remainder = name[:i], name[i+1:]
@@ -99,13 +134,13 @@ func splitDockerDomain(name string) (domain, remainder string) {
 		domain = defaultDomain
 	}
 	if domain == defaultDomain && !strings.ContainsRune(remainder, '/') {
-		remainder = officialRepoName + "/" + remainder
+		remainder = officialRepoPrefix + remainder
 	}
 	return
 }
 
 // familiarizeName returns a shortened version of the name familiar
-// to to the Docker UI. Familiar names have the default domain
+// to the Docker UI. Familiar names have the default domain
 // "docker.io" and "library/" repository prefix removed.
 // For example, "docker.io/library/redis" will have the familiar
 // name "redis" and "docker.io/dmcgowan/myapp" will be "dmcgowan/myapp".
@@ -119,8 +154,15 @@ func familiarizeName(named namedRepository) repository {
 	if repo.domain == defaultDomain {
 		repo.domain = ""
 		// Handle official repositories which have the pattern "library/<official repo name>"
-		if split := strings.Split(repo.path, "/"); len(split) == 2 && split[0] == officialRepoName {
-			repo.path = split[1]
+		if strings.HasPrefix(repo.path, officialRepoPrefix) {
+			// TODO(thaJeztah): this check may be too strict, as it assumes the
+			//  "library/" namespace does not have nested namespaces. While this
+			//  is true (currently), technically it would be possible for Docker
+			//  Hub to use those (e.g. "library/distros/ubuntu:latest").
+			//  See https://github.com/distribution/distribution/pull/3769#issuecomment-1302031785.
+			if remainder := strings.TrimPrefix(repo.path, officialRepoPrefix); !strings.ContainsRune(remainder, '/') {
+				repo.path = remainder
+			}
 		}
 	}
 	return repo
@@ -180,20 +222,3 @@ func ParseAnyReference(ref string) (Reference, error) {
 
 	return ParseNormalizedNamed(ref)
 }
-
-// ParseAnyReferenceWithSet parses a reference string as a possible short
-// identifier to be matched in a digest set, a full digest, or familiar name.
-func ParseAnyReferenceWithSet(ref string, ds *digestset.Set) (Reference, error) {
-	if ok := anchoredShortIdentifierRegexp.MatchString(ref); ok {
-		dgst, err := ds.Lookup(ref)
-		if err == nil {
-			return digestReference(dgst), nil
-		}
-	} else {
-		if dgst, err := digest.Parse(ref); err == nil {
-			return digestReference(dgst), nil
-		}
-	}
-
-	return ParseNormalizedNamed(ref)
-}
diff --git a/vendor/github.com/docker/distribution/reference/reference.go b/vendor/github.com/distribution/reference/reference.go
similarity index 93%
rename from vendor/github.com/docker/distribution/reference/reference.go
rename to vendor/github.com/distribution/reference/reference.go
index b7cd00b0d68..e98c44daa2a 100644
--- a/vendor/github.com/docker/distribution/reference/reference.go
+++ b/vendor/github.com/distribution/reference/reference.go
@@ -4,11 +4,14 @@
 // Grammar
 //
 //	reference                       := name [ ":" tag ] [ "@" digest ]
-//	name                            := [domain '/'] path-component ['/' path-component]*
-//	domain                          := domain-component ['.' domain-component]* [':' port-number]
+//	name                            := [domain '/'] remote-name
+//	domain                          := host [':' port-number]
+//	host                            := domain-name | IPv4address | \[ IPv6address \]	; rfc3986 appendix-A
+//	domain-name                     := domain-component ['.' domain-component]*
 //	domain-component                := /([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])/
 //	port-number                     := /[0-9]+/
 //	path-component                  := alpha-numeric [separator alpha-numeric]*
+//	path (or "remote-name")         := path-component ['/' path-component]*
 //	alpha-numeric                   := /[a-z0-9]+/
 //	separator                       := /[_.]|__|[-]*/
 //
@@ -21,7 +24,6 @@
 //	digest-hex                      := /[0-9a-fA-F]{32,}/ ; At least 128 bit digest value
 //
 //	identifier                      := /[a-f0-9]{64}/
-//	short-identifier                := /[a-f0-9]{6,64}/
 package reference
 
 import (
@@ -145,7 +147,7 @@ type namedRepository interface {
 	Path() string
 }
 
-// Domain returns the domain part of the Named reference
+// Domain returns the domain part of the [Named] reference.
 func Domain(named Named) string {
 	if r, ok := named.(namedRepository); ok {
 		return r.Domain()
@@ -154,7 +156,7 @@ func Domain(named Named) string {
 	return domain
 }
 
-// Path returns the name without the domain part of the Named reference
+// Path returns the name without the domain part of the [Named] reference.
 func Path(named Named) (name string) {
 	if r, ok := named.(namedRepository); ok {
 		return r.Path()
@@ -175,7 +177,8 @@ func splitDomain(name string) (string, string) {
 // hostname and name string. If no valid hostname is
 // found, the hostname is empty and the full value
 // is returned as name
-// DEPRECATED: Use Domain or Path
+//
+// Deprecated: Use [Domain] or [Path].
 func SplitHostname(named Named) (string, string) {
 	if r, ok := named.(namedRepository); ok {
 		return r.Domain(), r.Path()
@@ -185,7 +188,6 @@ func SplitHostname(named Named) (string, string) {
 
 // Parse parses s and returns a syntactically valid Reference.
 // If an error was encountered it is returned, along with a nil Reference.
-// NOTE: Parse will not handle short digests.
 func Parse(s string) (Reference, error) {
 	matches := ReferenceRegexp.FindStringSubmatch(s)
 	if matches == nil {
@@ -237,7 +239,6 @@ func Parse(s string) (Reference, error) {
 // the Named interface. The reference must have a name and be in the canonical
 // form, otherwise an error is returned.
 // If an error was encountered it is returned, along with a nil Reference.
-// NOTE: ParseNamed will not handle short digests.
 func ParseNamed(s string) (Named, error) {
 	named, err := ParseNormalizedNamed(s)
 	if err != nil {
@@ -320,11 +321,13 @@ func WithDigest(name Named, digest digest.Digest) (Canonical, error) {
 
 // TrimNamed removes any tag or digest from the named reference.
 func TrimNamed(ref Named) Named {
-	domain, path := SplitHostname(ref)
-	return repository{
-		domain: domain,
-		path:   path,
+	repo := repository{}
+	if r, ok := ref.(namedRepository); ok {
+		repo.domain, repo.path = r.Domain(), r.Path()
+	} else {
+		repo.domain, repo.path = splitDomain(ref.Name())
 	}
+	return repo
 }
 
 func getBestReferenceType(ref reference) Reference {
diff --git a/vendor/github.com/distribution/reference/regexp.go b/vendor/github.com/distribution/reference/regexp.go
new file mode 100644
index 00000000000..65bc49d79be
--- /dev/null
+++ b/vendor/github.com/distribution/reference/regexp.go
@@ -0,0 +1,163 @@
+package reference
+
+import (
+	"regexp"
+	"strings"
+)
+
+// DigestRegexp matches well-formed digests, including algorithm (e.g. "sha256:<encoded>").
+var DigestRegexp = regexp.MustCompile(digestPat)
+
+// DomainRegexp matches hostname or IP-addresses, optionally including a port
+// number. It defines the structure of potential domain components that may be
+// part of image names. This is purposely a subset of what is allowed by DNS to
+// ensure backwards compatibility with Docker image names. It may be a subset of
+// DNS domain name, an IPv4 address in decimal format, or an IPv6 address between
+// square brackets (excluding zone identifiers as defined by [RFC 6874] or special
+// addresses such as IPv4-Mapped).
+//
+// [RFC 6874]: https://www.rfc-editor.org/rfc/rfc6874.
+var DomainRegexp = regexp.MustCompile(domainAndPort)
+
+// IdentifierRegexp is the format for string identifier used as a
+// content addressable identifier using sha256. These identifiers
+// are like digests without the algorithm, since sha256 is used.
+var IdentifierRegexp = regexp.MustCompile(identifier)
+
+// NameRegexp is the format for the name component of references, including
+// an optional domain and port, but without tag or digest suffix.
+var NameRegexp = regexp.MustCompile(namePat)
+
+// ReferenceRegexp is the full supported format of a reference. The regexp
+// is anchored and has capturing groups for name, tag, and digest
+// components.
+var ReferenceRegexp = regexp.MustCompile(referencePat)
+
+// TagRegexp matches valid tag names. From [docker/docker:graph/tags.go].
+//
+// [docker/docker:graph/tags.go]: https://github.com/moby/moby/blob/v1.6.0/graph/tags.go#L26-L28
+var TagRegexp = regexp.MustCompile(tag)
+
+const (
+	// alphanumeric defines the alphanumeric atom, typically a
+	// component of names. This only allows lower case characters and digits.
+	alphanumeric = `[a-z0-9]+`
+
+	// separator defines the separators allowed to be embedded in name
+	// components. This allows one period, one or two underscore and multiple
+	// dashes. Repeated dashes and underscores are intentionally treated
+	// differently. In order to support valid hostnames as name components,
+	// supporting repeated dash was added. Additionally double underscore is
+	// now allowed as a separator to loosen the restriction for previously
+	// supported names.
+	separator = `(?:[._]|__|[-]+)`
+
+	// localhost is treated as a special value for domain-name. Any other
+	// domain-name without a "." or a ":port" are considered a path component.
+	localhost = `localhost`
+
+	// domainNameComponent restricts the registry domain component of a
+	// repository name to start with a component as defined by DomainRegexp.
+	domainNameComponent = `(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])`
+
+	// optionalPort matches an optional port-number including the port separator
+	// (e.g. ":80").
+	optionalPort = `(?::[0-9]+)?`
+
+	// tag matches valid tag names. From docker/docker:graph/tags.go.
+	tag = `[\w][\w.-]{0,127}`
+
+	// digestPat matches well-formed digests, including algorithm (e.g. "sha256:<encoded>").
+	//
+	// TODO(thaJeztah): this should follow the same rules as https://pkg.go.dev/github.com/opencontainers/go-digest@v1.0.0#DigestRegexp
+	// so that go-digest defines the canonical format. Note that the go-digest is
+	// more relaxed:
+	//   - it allows multiple algorithms (e.g. "sha256+b64:<encoded>") to allow
+	//     future expansion of supported algorithms.
+	//   - it allows the "<encoded>" value to use urlsafe base64 encoding as defined
+	//     in [rfc4648, section 5].
+	//
+	// [rfc4648, section 5]: https://www.rfc-editor.org/rfc/rfc4648#section-5.
+	digestPat = `[A-Za-z][A-Za-z0-9]*(?:[-_+.][A-Za-z][A-Za-z0-9]*)*[:][[:xdigit:]]{32,}`
+
+	// identifier is the format for a content addressable identifier using sha256.
+	// These identifiers are like digests without the algorithm, since sha256 is used.
+	identifier = `([a-f0-9]{64})`
+
+	// ipv6address are enclosed between square brackets and may be represented
+	// in many ways, see rfc5952. Only IPv6 in compressed or uncompressed format
+	// are allowed, IPv6 zone identifiers (rfc6874) or Special addresses such as
+	// IPv4-Mapped are deliberately excluded.
+	ipv6address = `\[(?:[a-fA-F0-9:]+)\]`
+)
+
+var (
+	// domainName defines the structure of potential domain components
+	// that may be part of image names. This is purposely a subset of what is
+	// allowed by DNS to ensure backwards compatibility with Docker image
+	// names. This includes IPv4 addresses on decimal format.
+	domainName = domainNameComponent + anyTimes(`\.`+domainNameComponent)
+
+	// host defines the structure of potential domains based on the URI
+	// Host subcomponent on rfc3986. It may be a subset of DNS domain name,
+	// or an IPv4 address in decimal format, or an IPv6 address between square
+	// brackets (excluding zone identifiers as defined by rfc6874 or special
+	// addresses such as IPv4-Mapped).
+	host = `(?:` + domainName + `|` + ipv6address + `)`
+
+	// allowed by the URI Host subcomponent on rfc3986 to ensure backwards
+	// compatibility with Docker image names.
+	domainAndPort = host + optionalPort
+
+	// anchoredTagRegexp matches valid tag names, anchored at the start and
+	// end of the matched string.
+	anchoredTagRegexp = regexp.MustCompile(anchored(tag))
+
+	// anchoredDigestRegexp matches valid digests, anchored at the start and
+	// end of the matched string.
+	anchoredDigestRegexp = regexp.MustCompile(anchored(digestPat))
+
+	// pathComponent restricts path-components to start with an alphanumeric
+	// character, with following parts able to be separated by a separator
+	// (one period, one or two underscore and multiple dashes).
+	pathComponent = alphanumeric + anyTimes(separator+alphanumeric)
+
+	// remoteName matches the remote-name of a repository. It consists of one
+	// or more forward slash (/) delimited path-components:
+	//
+	//	pathComponent[[/pathComponent] ...] // e.g., "library/ubuntu"
+	remoteName = pathComponent + anyTimes(`/`+pathComponent)
+	namePat    = optional(domainAndPort+`/`) + remoteName
+
+	// anchoredNameRegexp is used to parse a name value, capturing the
+	// domain and trailing components.
+	anchoredNameRegexp = regexp.MustCompile(anchored(optional(capture(domainAndPort), `/`), capture(remoteName)))
+
+	referencePat = anchored(capture(namePat), optional(`:`, capture(tag)), optional(`@`, capture(digestPat)))
+
+	// anchoredIdentifierRegexp is used to check or match an
+	// identifier value, anchored at start and end of string.
+	anchoredIdentifierRegexp = regexp.MustCompile(anchored(identifier))
+)
+
+// optional wraps the expression in a non-capturing group and makes the
+// production optional.
+func optional(res ...string) string {
+	return `(?:` + strings.Join(res, "") + `)?`
+}
+
+// anyTimes wraps the expression in a non-capturing group that can occur
+// any number of times.
+func anyTimes(res ...string) string {
+	return `(?:` + strings.Join(res, "") + `)*`
+}
+
+// capture wraps the expression in a capturing group.
+func capture(res ...string) string {
+	return `(` + strings.Join(res, "") + `)`
+}
+
+// anchored anchors the regular expression by adding start and end delimiters.
+func anchored(res ...string) string {
+	return `^` + strings.Join(res, "") + `$`
+}
diff --git a/vendor/github.com/distribution/reference/sort.go b/vendor/github.com/distribution/reference/sort.go
new file mode 100644
index 00000000000..416c37b076f
--- /dev/null
+++ b/vendor/github.com/distribution/reference/sort.go
@@ -0,0 +1,75 @@
+/*
+   Copyright The containerd Authors.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
+package reference
+
+import (
+	"sort"
+)
+
+// Sort sorts string references preferring higher information references.
+//
+// The precedence is as follows:
+//
+//  1. [Named] + [Tagged] + [Digested] (e.g., "docker.io/library/busybox:latest@sha256:<digest>")
+//  2. [Named] + [Tagged]              (e.g., "docker.io/library/busybox:latest")
+//  3. [Named] + [Digested]            (e.g., "docker.io/library/busybo@sha256:<digest>")
+//  4. [Named]                         (e.g., "docker.io/library/busybox")
+//  5. [Digested]                      (e.g., "docker.io@sha256:<digest>")
+//  6. Parse error
+func Sort(references []string) []string {
+	var prefs []Reference
+	var bad []string
+
+	for _, ref := range references {
+		pref, err := ParseAnyReference(ref)
+		if err != nil {
+			bad = append(bad, ref)
+		} else {
+			prefs = append(prefs, pref)
+		}
+	}
+	sort.Slice(prefs, func(a, b int) bool {
+		ar := refRank(prefs[a])
+		br := refRank(prefs[b])
+		if ar == br {
+			return prefs[a].String() < prefs[b].String()
+		}
+		return ar < br
+	})
+	sort.Strings(bad)
+	var refs []string
+	for _, pref := range prefs {
+		refs = append(refs, pref.String())
+	}
+	return append(refs, bad...)
+}
+
+func refRank(ref Reference) uint8 {
+	if _, ok := ref.(Named); ok {
+		if _, ok = ref.(Tagged); ok {
+			if _, ok = ref.(Digested); ok {
+				return 1
+			}
+			return 2
+		}
+		if _, ok = ref.(Digested); ok {
+			return 3
+		}
+		return 4
+	}
+	return 5
+}
diff --git a/vendor/github.com/docker/distribution/digestset/set.go b/vendor/github.com/docker/distribution/digestset/set.go
deleted file mode 100644
index 71327dca720..00000000000
--- a/vendor/github.com/docker/distribution/digestset/set.go
+++ /dev/null
@@ -1,247 +0,0 @@
-package digestset
-
-import (
-	"errors"
-	"sort"
-	"strings"
-	"sync"
-
-	digest "github.com/opencontainers/go-digest"
-)
-
-var (
-	// ErrDigestNotFound is used when a matching digest
-	// could not be found in a set.
-	ErrDigestNotFound = errors.New("digest not found")
-
-	// ErrDigestAmbiguous is used when multiple digests
-	// are found in a set. None of the matching digests
-	// should be considered valid matches.
-	ErrDigestAmbiguous = errors.New("ambiguous digest string")
-)
-
-// Set is used to hold a unique set of digests which
-// may be easily referenced by easily  referenced by a string
-// representation of the digest as well as short representation.
-// The uniqueness of the short representation is based on other
-// digests in the set. If digests are omitted from this set,
-// collisions in a larger set may not be detected, therefore it
-// is important to always do short representation lookups on
-// the complete set of digests. To mitigate collisions, an
-// appropriately long short code should be used.
-type Set struct {
-	mutex   sync.RWMutex
-	entries digestEntries
-}
-
-// NewSet creates an empty set of digests
-// which may have digests added.
-func NewSet() *Set {
-	return &Set{
-		entries: digestEntries{},
-	}
-}
-
-// checkShortMatch checks whether two digests match as either whole
-// values or short values. This function does not test equality,
-// rather whether the second value could match against the first
-// value.
-func checkShortMatch(alg digest.Algorithm, hex, shortAlg, shortHex string) bool {
-	if len(hex) == len(shortHex) {
-		if hex != shortHex {
-			return false
-		}
-		if len(shortAlg) > 0 && string(alg) != shortAlg {
-			return false
-		}
-	} else if !strings.HasPrefix(hex, shortHex) {
-		return false
-	} else if len(shortAlg) > 0 && string(alg) != shortAlg {
-		return false
-	}
-	return true
-}
-
-// Lookup looks for a digest matching the given string representation.
-// If no digests could be found ErrDigestNotFound will be returned
-// with an empty digest value. If multiple matches are found
-// ErrDigestAmbiguous will be returned with an empty digest value.
-func (dst *Set) Lookup(d string) (digest.Digest, error) {
-	dst.mutex.RLock()
-	defer dst.mutex.RUnlock()
-	if len(dst.entries) == 0 {
-		return "", ErrDigestNotFound
-	}
-	var (
-		searchFunc func(int) bool
-		alg        digest.Algorithm
-		hex        string
-	)
-	dgst, err := digest.Parse(d)
-	if err == digest.ErrDigestInvalidFormat {
-		hex = d
-		searchFunc = func(i int) bool {
-			return dst.entries[i].val >= d
-		}
-	} else {
-		hex = dgst.Hex()
-		alg = dgst.Algorithm()
-		searchFunc = func(i int) bool {
-			if dst.entries[i].val == hex {
-				return dst.entries[i].alg >= alg
-			}
-			return dst.entries[i].val >= hex
-		}
-	}
-	idx := sort.Search(len(dst.entries), searchFunc)
-	if idx == len(dst.entries) || !checkShortMatch(dst.entries[idx].alg, dst.entries[idx].val, string(alg), hex) {
-		return "", ErrDigestNotFound
-	}
-	if dst.entries[idx].alg == alg && dst.entries[idx].val == hex {
-		return dst.entries[idx].digest, nil
-	}
-	if idx+1 < len(dst.entries) && checkShortMatch(dst.entries[idx+1].alg, dst.entries[idx+1].val, string(alg), hex) {
-		return "", ErrDigestAmbiguous
-	}
-
-	return dst.entries[idx].digest, nil
-}
-
-// Add adds the given digest to the set. An error will be returned
-// if the given digest is invalid. If the digest already exists in the
-// set, this operation will be a no-op.
-func (dst *Set) Add(d digest.Digest) error {
-	if err := d.Validate(); err != nil {
-		return err
-	}
-	dst.mutex.Lock()
-	defer dst.mutex.Unlock()
-	entry := &digestEntry{alg: d.Algorithm(), val: d.Hex(), digest: d}
-	searchFunc := func(i int) bool {
-		if dst.entries[i].val == entry.val {
-			return dst.entries[i].alg >= entry.alg
-		}
-		return dst.entries[i].val >= entry.val
-	}
-	idx := sort.Search(len(dst.entries), searchFunc)
-	if idx == len(dst.entries) {
-		dst.entries = append(dst.entries, entry)
-		return nil
-	} else if dst.entries[idx].digest == d {
-		return nil
-	}
-
-	entries := append(dst.entries, nil)
-	copy(entries[idx+1:], entries[idx:len(entries)-1])
-	entries[idx] = entry
-	dst.entries = entries
-	return nil
-}
-
-// Remove removes the given digest from the set. An err will be
-// returned if the given digest is invalid. If the digest does
-// not exist in the set, this operation will be a no-op.
-func (dst *Set) Remove(d digest.Digest) error {
-	if err := d.Validate(); err != nil {
-		return err
-	}
-	dst.mutex.Lock()
-	defer dst.mutex.Unlock()
-	entry := &digestEntry{alg: d.Algorithm(), val: d.Hex(), digest: d}
-	searchFunc := func(i int) bool {
-		if dst.entries[i].val == entry.val {
-			return dst.entries[i].alg >= entry.alg
-		}
-		return dst.entries[i].val >= entry.val
-	}
-	idx := sort.Search(len(dst.entries), searchFunc)
-	// Not found if idx is after or value at idx is not digest
-	if idx == len(dst.entries) || dst.entries[idx].digest != d {
-		return nil
-	}
-
-	entries := dst.entries
-	copy(entries[idx:], entries[idx+1:])
-	entries = entries[:len(entries)-1]
-	dst.entries = entries
-
-	return nil
-}
-
-// All returns all the digests in the set
-func (dst *Set) All() []digest.Digest {
-	dst.mutex.RLock()
-	defer dst.mutex.RUnlock()
-	retValues := make([]digest.Digest, len(dst.entries))
-	for i := range dst.entries {
-		retValues[i] = dst.entries[i].digest
-	}
-
-	return retValues
-}
-
-// ShortCodeTable returns a map of Digest to unique short codes. The
-// length represents the minimum value, the maximum length may be the
-// entire value of digest if uniqueness cannot be achieved without the
-// full value. This function will attempt to make short codes as short
-// as possible to be unique.
-func ShortCodeTable(dst *Set, length int) map[digest.Digest]string {
-	dst.mutex.RLock()
-	defer dst.mutex.RUnlock()
-	m := make(map[digest.Digest]string, len(dst.entries))
-	l := length
-	resetIdx := 0
-	for i := 0; i < len(dst.entries); i++ {
-		var short string
-		extended := true
-		for extended {
-			extended = false
-			if len(dst.entries[i].val) <= l {
-				short = dst.entries[i].digest.String()
-			} else {
-				short = dst.entries[i].val[:l]
-				for j := i + 1; j < len(dst.entries); j++ {
-					if checkShortMatch(dst.entries[j].alg, dst.entries[j].val, "", short) {
-						if j > resetIdx {
-							resetIdx = j
-						}
-						extended = true
-					} else {
-						break
-					}
-				}
-				if extended {
-					l++
-				}
-			}
-		}
-		m[dst.entries[i].digest] = short
-		if i >= resetIdx {
-			l = length
-		}
-	}
-	return m
-}
-
-type digestEntry struct {
-	alg    digest.Algorithm
-	val    string
-	digest digest.Digest
-}
-
-type digestEntries []*digestEntry
-
-func (d digestEntries) Len() int {
-	return len(d)
-}
-
-func (d digestEntries) Less(i, j int) bool {
-	if d[i].val != d[j].val {
-		return d[i].val < d[j].val
-	}
-	return d[i].alg < d[j].alg
-}
-
-func (d digestEntries) Swap(i, j int) {
-	d[i], d[j] = d[j], d[i]
-}
diff --git a/vendor/github.com/docker/distribution/reference/regexp.go b/vendor/github.com/docker/distribution/reference/regexp.go
deleted file mode 100644
index 78603493203..00000000000
--- a/vendor/github.com/docker/distribution/reference/regexp.go
+++ /dev/null
@@ -1,143 +0,0 @@
-package reference
-
-import "regexp"
-
-var (
-	// alphaNumericRegexp defines the alpha numeric atom, typically a
-	// component of names. This only allows lower case characters and digits.
-	alphaNumericRegexp = match(`[a-z0-9]+`)
-
-	// separatorRegexp defines the separators allowed to be embedded in name
-	// components. This allow one period, one or two underscore and multiple
-	// dashes.
-	separatorRegexp = match(`(?:[._]|__|[-]*)`)
-
-	// nameComponentRegexp restricts registry path component names to start
-	// with at least one letter or number, with following parts able to be
-	// separated by one period, one or two underscore and multiple dashes.
-	nameComponentRegexp = expression(
-		alphaNumericRegexp,
-		optional(repeated(separatorRegexp, alphaNumericRegexp)))
-
-	// domainComponentRegexp restricts the registry domain component of a
-	// repository name to start with a component as defined by DomainRegexp
-	// and followed by an optional port.
-	domainComponentRegexp = match(`(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])`)
-
-	// DomainRegexp defines the structure of potential domain components
-	// that may be part of image names. This is purposely a subset of what is
-	// allowed by DNS to ensure backwards compatibility with Docker image
-	// names.
-	DomainRegexp = expression(
-		domainComponentRegexp,
-		optional(repeated(literal(`.`), domainComponentRegexp)),
-		optional(literal(`:`), match(`[0-9]+`)))
-
-	// TagRegexp matches valid tag names. From docker/docker:graph/tags.go.
-	TagRegexp = match(`[\w][\w.-]{0,127}`)
-
-	// anchoredTagRegexp matches valid tag names, anchored at the start and
-	// end of the matched string.
-	anchoredTagRegexp = anchored(TagRegexp)
-
-	// DigestRegexp matches valid digests.
-	DigestRegexp = match(`[A-Za-z][A-Za-z0-9]*(?:[-_+.][A-Za-z][A-Za-z0-9]*)*[:][[:xdigit:]]{32,}`)
-
-	// anchoredDigestRegexp matches valid digests, anchored at the start and
-	// end of the matched string.
-	anchoredDigestRegexp = anchored(DigestRegexp)
-
-	// NameRegexp is the format for the name component of references. The
-	// regexp has capturing groups for the domain and name part omitting
-	// the separating forward slash from either.
-	NameRegexp = expression(
-		optional(DomainRegexp, literal(`/`)),
-		nameComponentRegexp,
-		optional(repeated(literal(`/`), nameComponentRegexp)))
-
-	// anchoredNameRegexp is used to parse a name value, capturing the
-	// domain and trailing components.
-	anchoredNameRegexp = anchored(
-		optional(capture(DomainRegexp), literal(`/`)),
-		capture(nameComponentRegexp,
-			optional(repeated(literal(`/`), nameComponentRegexp))))
-
-	// ReferenceRegexp is the full supported format of a reference. The regexp
-	// is anchored and has capturing groups for name, tag, and digest
-	// components.
-	ReferenceRegexp = anchored(capture(NameRegexp),
-		optional(literal(":"), capture(TagRegexp)),
-		optional(literal("@"), capture(DigestRegexp)))
-
-	// IdentifierRegexp is the format for string identifier used as a
-	// content addressable identifier using sha256. These identifiers
-	// are like digests without the algorithm, since sha256 is used.
-	IdentifierRegexp = match(`([a-f0-9]{64})`)
-
-	// ShortIdentifierRegexp is the format used to represent a prefix
-	// of an identifier. A prefix may be used to match a sha256 identifier
-	// within a list of trusted identifiers.
-	ShortIdentifierRegexp = match(`([a-f0-9]{6,64})`)
-
-	// anchoredIdentifierRegexp is used to check or match an
-	// identifier value, anchored at start and end of string.
-	anchoredIdentifierRegexp = anchored(IdentifierRegexp)
-
-	// anchoredShortIdentifierRegexp is used to check if a value
-	// is a possible identifier prefix, anchored at start and end
-	// of string.
-	anchoredShortIdentifierRegexp = anchored(ShortIdentifierRegexp)
-)
-
-// match compiles the string to a regular expression.
-var match = regexp.MustCompile
-
-// literal compiles s into a literal regular expression, escaping any regexp
-// reserved characters.
-func literal(s string) *regexp.Regexp {
-	re := match(regexp.QuoteMeta(s))
-
-	if _, complete := re.LiteralPrefix(); !complete {
-		panic("must be a literal")
-	}
-
-	return re
-}
-
-// expression defines a full expression, where each regular expression must
-// follow the previous.
-func expression(res ...*regexp.Regexp) *regexp.Regexp {
-	var s string
-	for _, re := range res {
-		s += re.String()
-	}
-
-	return match(s)
-}
-
-// optional wraps the expression in a non-capturing group and makes the
-// production optional.
-func optional(res ...*regexp.Regexp) *regexp.Regexp {
-	return match(group(expression(res...)).String() + `?`)
-}
-
-// repeated wraps the regexp in a non-capturing group to get one or more
-// matches.
-func repeated(res ...*regexp.Regexp) *regexp.Regexp {
-	return match(group(expression(res...)).String() + `+`)
-}
-
-// group wraps the regexp in a non-capturing group.
-func group(res ...*regexp.Regexp) *regexp.Regexp {
-	return match(`(?:` + expression(res...).String() + `)`)
-}
-
-// capture wraps the expression in a capturing group.
-func capture(res ...*regexp.Regexp) *regexp.Regexp {
-	return match(`(` + expression(res...).String() + `)`)
-}
-
-// anchored anchors the regular expression by adding start and end delimiters.
-func anchored(res ...*regexp.Regexp) *regexp.Regexp {
-	return match(`^` + expression(res...).String() + `$`)
-}
diff --git a/vendor/github.com/docker/docker/AUTHORS b/vendor/github.com/docker/docker/AUTHORS
index b3141819258..48d04f9a983 100644
--- a/vendor/github.com/docker/docker/AUTHORS
+++ b/vendor/github.com/docker/docker/AUTHORS
@@ -27,6 +27,7 @@ Adam Miller <admiller@redhat.com>
 Adam Mills <adam@armills.info>
 Adam Pointer <adam.pointer@skybettingandgaming.com>
 Adam Singer <financeCoding@gmail.com>
+Adam Thornton <adam.thornton@maryville.com>
 Adam Walz <adam@adamwalz.net>
 Adam Williams <awilliams@mirantis.com>
 AdamKorcz <adam@adalogics.com>
@@ -173,6 +174,7 @@ Andy Rothfusz <github@developersupport.net>
 Andy Smith <github@anarkystic.com>
 Andy Wilson <wilson.andrew.j+github@gmail.com>
 Andy Zhang <andy.zhangtao@hotmail.com>
+Aneesh Kulkarni <askthefactorcamera@gmail.com>
 Anes Hasicic <anes.hasicic@gmail.com>
 Angel Velazquez <angelcar@amazon.com>
 Anil Belur <askb23@gmail.com>
@@ -236,6 +238,7 @@ Ben Golub <ben.golub@dotcloud.com>
 Ben Gould <ben@bengould.co.uk>
 Ben Hall <ben@benhall.me.uk>
 Ben Langfeld <ben@langfeld.me>
+Ben Lovy <ben@deciduously.com>
 Ben Sargent <ben@brokendigits.com>
 Ben Severson <BenSeverson@users.noreply.github.com>
 Ben Toews <mastahyeti@gmail.com>
@@ -262,7 +265,7 @@ Billy Ridgway <wrridgwa@us.ibm.com>
 Bily Zhang <xcoder@tenxcloud.com>
 Bin Liu <liubin0329@gmail.com>
 Bingshen Wang <bingshen.wbs@alibaba-inc.com>
-Bjorn Neergaard <bneergaard@mirantis.com>
+Bjorn Neergaard <bjorn@neersighted.com>
 Blake Geno <blakegeno@gmail.com>
 Boaz Shuster <ripcurld.github@gmail.com>
 bobby abbott <ttobbaybbob@gmail.com>
@@ -279,6 +282,7 @@ Brandon Liu <bdon@bdon.org>
 Brandon Philips <brandon.philips@coreos.com>
 Brandon Rhodes <brandon@rhodesmill.org>
 Brendan Dixon <brendand@microsoft.com>
+Brennan Kinney <5098581+polarathene@users.noreply.github.com>
 Brent Salisbury <brent.salisbury@docker.com>
 Brett Higgins <brhiggins@arbor.net>
 Brett Kochendorfer <brett.kochendorfer@gmail.com>
@@ -363,6 +367,7 @@ chenyuzhu <chenyuzhi@oschina.cn>
 Chetan Birajdar <birajdar.chetan@gmail.com>
 Chewey <prosto-chewey@users.noreply.github.com>
 Chia-liang Kao <clkao@clkao.org>
+Chiranjeevi Tirunagari <vchiranjeeviak.tirunagari@gmail.com>
 chli <chli@freewheel.tv>
 Cholerae Hu <choleraehyq@gmail.com>
 Chris Alfonso <calfonso@redhat.com>
@@ -433,8 +438,8 @@ Cristian Staretu <cristian.staretu@gmail.com>
 cristiano balducci <cristiano.balducci@gmail.com>
 Cristina Yenyxe Gonzalez Garcia <cristina.yenyxe@gmail.com>
 Cruceru Calin-Cristian <crucerucalincristian@gmail.com>
+cui fliter <imcusg@gmail.com>
 CUI Wei <ghostplant@qq.com>
-cuishuang <imcusg@gmail.com>
 Cuong Manh Le <cuong.manhle.vn@gmail.com>
 Cyprian Gracz <cyprian.gracz@micro-jumbo.eu>
 Cyril F <cyrilf7x@gmail.com>
@@ -513,6 +518,7 @@ David Dooling <dooling@gmail.com>
 David Gageot <david@gageot.net>
 David Gebler <davidgebler@gmail.com>
 David Glasser <glasser@davidglasser.net>
+David Karlsson <35727626+dvdksn@users.noreply.github.com>
 David Lawrence <david.lawrence@docker.com>
 David Lechner <david@lechnology.com>
 David M. Karr <davidmichaelkarr@gmail.com>
@@ -602,6 +608,7 @@ Donald Huang <don.hcd@gmail.com>
 Dong Chen <dongluo.chen@docker.com>
 Donghwa Kim <shanytt@gmail.com>
 Donovan Jones <git@gamma.net.nz>
+Dorin Geman <dorin.geman@docker.com>
 Doron Podoleanu <doronp@il.ibm.com>
 Doug Davis <dug@us.ibm.com>
 Doug MacEachern <dougm@vmware.com>
@@ -636,6 +643,7 @@ Emily Rose <emily@contactvibe.com>
 Emir Ozer <emirozer@yandex.com>
 Eng Zer Jun <engzerjun@gmail.com>
 Enguerran <engcolson@gmail.com>
+Enrico Weigelt, metux IT consult <info@metux.net>
 Eohyung Lee <liquidnuker@gmail.com>
 epeterso <epeterson@breakpoint-labs.com>
 er0k <er0k@er0k.net>
@@ -676,6 +684,7 @@ Evan Allrich <evan@unguku.com>
 Evan Carmi <carmi@users.noreply.github.com>
 Evan Hazlett <ejhazlett@gmail.com>
 Evan Krall <krall@yelp.com>
+Evan Lezar <elezar@nvidia.com>
 Evan Phoenix <evan@fallingsnow.net>
 Evan Wies <evan@neomantra.net>
 Evelyn Xu <evelynhsu21@gmail.com>
@@ -744,6 +753,7 @@ Frank Groeneveld <frank@ivaldi.nl>
 Frank Herrmann <fgh@4gh.tv>
 Frank Macreery <frank@macreery.com>
 Frank Rosquin <frank.rosquin+github@gmail.com>
+Frank Villaro-Dixon <frank.villarodixon@merkle.com>
 Frank Yang <yyb196@gmail.com>
 Fred Lifton <fred.lifton@docker.com>
 Frederick F. Kautz IV <fkautz@redhat.com>
@@ -983,6 +993,7 @@ Jean Rouge <rougej+github@gmail.com>
 Jean-Baptiste Barth <jeanbaptiste.barth@gmail.com>
 Jean-Baptiste Dalido <jeanbaptiste@appgratis.com>
 Jean-Christophe Berthon <huygens@berthon.eu>
+Jean-Michel Rouet <jm.rouet@gmail.com>
 Jean-Paul Calderone <exarkun@twistedmatrix.com>
 Jean-Pierre Huynh <jean-pierre.huynh@ounet.fr>
 Jean-Tiare Le Bigot <jt@yadutaf.fr>
@@ -1013,6 +1024,7 @@ Jeroen Jacobs <github@jeroenj.be>
 Jesse Dearing <jesse.dearing@gmail.com>
 Jesse Dubay <jesse@thefortytwo.net>
 Jessica Frazelle <jess@oxide.computer>
+Jeyanthinath Muthuram <jeyanthinath10@gmail.com>
 Jezeniel Zapanta <jpzapanta22@gmail.com>
 Jhon Honce <jhonce@redhat.com>
 Ji.Zhilong <zhilongji@gmail.com>
@@ -1141,6 +1153,7 @@ junxu <xujun@cmss.chinamobile.com>
 Jussi Nummelin <jussi.nummelin@gmail.com>
 Justas Brazauskas <brazauskasjustas@gmail.com>
 Justen Martin <jmart@the-coder.com>
+Justin Chadwell <me@jedevc.com>
 Justin Cormack <justin.cormack@docker.com>
 Justin Force <justin.force@gmail.com>
 Justin Keller <85903732+jk-vb@users.noreply.github.com>
@@ -1183,6 +1196,7 @@ Ke Xu <leonhartx.k@gmail.com>
 Kei Ohmura <ohmura.kei@gmail.com>
 Keith Hudgins <greenman@greenman.org>
 Keli Hu <dev@keli.hu>
+Ken Bannister <kb2ma@runbox.com>
 Ken Cochrane <kencochrane@gmail.com>
 Ken Herner <kherner@progress.com>
 Ken ICHIKAWA <ichikawa.ken@jp.fujitsu.com>
@@ -1192,7 +1206,7 @@ Kenjiro Nakayama <nakayamakenjiro@gmail.com>
 Kent Johnson <kentoj@gmail.com>
 Kenta Tada <Kenta.Tada@sony.com>
 Kevin "qwazerty" Houdebert <kevin.houdebert@gmail.com>
-Kevin Alvarez <crazy-max@users.noreply.github.com>
+Kevin Alvarez <github@crazymax.dev>
 Kevin Burke <kev@inburke.com>
 Kevin Clark <kevin.clark@gmail.com>
 Kevin Feyrer <kevin.feyrer@btinternet.com>
@@ -1225,6 +1239,7 @@ Konstantin Gribov <grossws@gmail.com>
 Konstantin L <sw.double@gmail.com>
 Konstantin Pelykh <kpelykh@zettaset.com>
 Kostadin Plachkov <k.n.plachkov@gmail.com>
+kpcyrd <git@rxv.cc>
 Krasi Georgiev <krasi@vip-consult.solutions>
 Krasimir Georgiev <support@vip-consult.co.uk>
 Kris-Mikael Krister <krismikael@protonmail.com>
@@ -1306,6 +1321,7 @@ Lorenzo Fontana <fontanalorenz@gmail.com>
 Lotus Fenn <fenn.lotus@gmail.com>
 Louis Delossantos <ldelossa.ld@gmail.com>
 Louis Opter <kalessin@kalessin.fr>
+Luboslav Pivarc <lpivarc@redhat.com>
 Luca Favatella <luca.favatella@erlang-solutions.com>
 Luca Marturana <lucamarturana@gmail.com>
 Luca Orlandi <luca.orlandi@gmail.com>
@@ -1344,6 +1360,7 @@ Manuel Meurer <manuel@krautcomputing.com>
 Manuel Rüger <manuel@rueg.eu>
 Manuel Woelker <github@manuel.woelker.org>
 mapk0y <mapk0y@gmail.com>
+Marat Radchenko <marat@slonopotamus.org>
 Marc Abramowitz <marc@marc-abramowitz.com>
 Marc Kuo <kuomarc2@gmail.com>
 Marc Tamsky <mtamsky@gmail.com>
@@ -1383,6 +1400,7 @@ Martijn van Oosterhout <kleptog@svana.org>
 Martin Braun <braun@neuroforge.de>
 Martin Dojcak <martin.dojcak@lablabs.io>
 Martin Honermeyer <maze@strahlungsfrei.de>
+Martin Jirku <martin@jirku.sk>
 Martin Kelly <martin@surround.io>
 Martin Mosegaard Amdisen <martin.amdisen@praqma.com>
 Martin Muzatko <martin@happy-css.com>
@@ -1461,6 +1479,7 @@ Michael Holzheu <holzheu@linux.vnet.ibm.com>
 Michael Hudson-Doyle <michael.hudson@canonical.com>
 Michael Huettermann <michael@huettermann.net>
 Michael Irwin <mikesir87@gmail.com>
+Michael Kebe <michael.kebe@hkm.de>
 Michael Kuehn <micha@kuehn.io>
 Michael Käufl <docker@c.michael-kaeufl.de>
 Michael Neale <michael.neale@gmail.com>
@@ -1509,10 +1528,11 @@ Mike Lundy <mike@fluffypenguin.org>
 Mike MacCana <mike.maccana@gmail.com>
 Mike Naberezny <mike@naberezny.com>
 Mike Snitzer <snitzer@redhat.com>
+Mike Sul <mike.sul@foundries.io>
 mikelinjie <294893458@qq.com>
 Mikhail Sobolev <mss@mawhrin.net>
 Miklos Szegedi <miklos.szegedi@cloudera.com>
-Milas Bowman <milasb@gmail.com>
+Milas Bowman <devnull@milas.dev>
 Milind Chawre <milindchawre@gmail.com>
 Miloslav Trmač <mitr@redhat.com>
 mingqing <limingqing@cyou-inc.com>
@@ -1524,6 +1544,7 @@ mlarcher <github@ringabell.org>
 Mohammad Banikazemi <MBanikazemi@gmail.com>
 Mohammad Nasirifar <farnasirim@gmail.com>
 Mohammed Aaqib Ansari <maaquib@gmail.com>
+Mohd Sadiq <mohdsadiq058@gmail.com>
 Mohit Soni <mosoni@ebay.com>
 Moorthy RS <rsmoorthy@gmail.com>
 Morgan Bauer <mbauer@us.ibm.com>
@@ -1606,6 +1627,7 @@ Noah Treuhaft <noah.treuhaft@docker.com>
 NobodyOnSE <ich@sektor.selfip.com>
 noducks <onemannoducks@gmail.com>
 Nolan Darilek <nolan@thewordnerd.info>
+Nolan Miles <nolanpmiles@gmail.com>
 Noriki Nakamura <noriki.nakamura@miraclelinux.com>
 nponeccop <andy.melnikov@gmail.com>
 Nurahmadie <nurahmadie@gmail.com>
@@ -1661,6 +1683,7 @@ Paul Lietar <paul@lietar.net>
 Paul Liljenberg <liljenberg.paul@gmail.com>
 Paul Morie <pmorie@gmail.com>
 Paul Nasrat <pnasrat@gmail.com>
+Paul Seiffert <paul.seiffert@jimdo.com>
 Paul Weaver <pauweave@cisco.com>
 Paulo Gomes <pjbgf@linux.com>
 Paulo Ribeiro <paigr.io@gmail.com>
@@ -1674,6 +1697,7 @@ Pavlos Ratis <dastergon@gentoo.org>
 Pavol Vargovcik <pallly.vargovcik@gmail.com>
 Pawel Konczalski <mail@konczalski.de>
 Paweł Gronowski <pawel.gronowski@docker.com>
+payall4u <payall4u@qq.com>
 Peeyush Gupta <gpeeyush@linux.vnet.ibm.com>
 Peggy Li <peggyli.224@gmail.com>
 Pei Su <sillyousu@gmail.com>
@@ -1703,7 +1727,9 @@ Phil Estes <estesp@gmail.com>
 Phil Sphicas <phil.sphicas@att.com>
 Phil Spitler <pspitler@gmail.com>
 Philip Alexander Etling <paetling@gmail.com>
+Philip K. Warren <pkwarren@gmail.com>
 Philip Monroe <phil@philmonroe.com>
+Philipp Fruck <dev@p-fruck.de>
 Philipp Gillé <philipp.gille@gmail.com>
 Philipp Wahala <philipp.wahala@gmail.com>
 Philipp Weissensteiner <mail@philippweissensteiner.com>
@@ -1741,6 +1767,7 @@ Quentin Brossard <qbrossard@gmail.com>
 Quentin Perez <qperez@ocs.online.net>
 Quentin Tayssier <qtayssier@gmail.com>
 r0n22 <cameron.regan@gmail.com>
+Rachit Sharma <rachitsharma613@gmail.com>
 Radostin Stoyanov <rstoyanov1@gmail.com>
 Rafal Jeczalik <rjeczalik@gmail.com>
 Rafe Colton <rafael.colton@gmail.com>
@@ -1773,6 +1800,7 @@ Rich Horwood <rjhorwood@apple.com>
 Rich Moyse <rich@moyse.us>
 Rich Seymour <rseymour@gmail.com>
 Richard Burnison <rburnison@ebay.com>
+Richard Hansen <rhansen@rhansen.org>
 Richard Harvey <richard@squarecows.com>
 Richard Mathie <richard.mathie@amey.co.uk>
 Richard Metzler <richard@paadee.com>
@@ -1788,6 +1816,7 @@ Ritesh H Shukla <sritesh@vmware.com>
 Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 Rob Cowsill <42620235+rcowsill@users.noreply.github.com>
 Rob Gulewich <rgulewich@netflix.com>
+Rob Murray <rob.murray@docker.com>
 Rob Vesse <rvesse@dotnetrdf.org>
 Robert Bachmann <rb@robertbachmann.at>
 Robert Bittle <guywithnose@gmail.com>
@@ -1869,6 +1898,7 @@ ryancooper7 <ryan.cooper7@gmail.com>
 RyanDeng <sheldon.d1018@gmail.com>
 Ryo Nakao <nakabonne@gmail.com>
 Ryoga Saito <contact@proelbtn.com>
+Régis Behmo <regis@behmo.com>
 Rémy Greinhofer <remy.greinhofer@livelovely.com>
 s. rannou <mxs@sbrk.org>
 Sabin Basyal <sabin.basyal@gmail.com>
@@ -1885,6 +1915,7 @@ Sam J Sharpe <sam.sharpe@digital.cabinet-office.gov.uk>
 Sam Neirinck <sam@samneirinck.com>
 Sam Reis <sreis@atlassian.com>
 Sam Rijs <srijs@airpost.net>
+Sam Thibault <sam.thibault@docker.com>
 Sam Whited <sam@samwhited.com>
 Sambuddha Basu <sambuddhabasu1@gmail.com>
 Sami Wagiaalla <swagiaal@redhat.com>
@@ -1908,6 +1939,7 @@ Satoshi Tagomori <tagomoris@gmail.com>
 Scott Bessler <scottbessler@gmail.com>
 Scott Collier <emailscottcollier@gmail.com>
 Scott Johnston <scott@docker.com>
+Scott Moser <smoser@brickies.net>
 Scott Percival <scottp@lastyard.com>
 Scott Stamp <scottstamp851@gmail.com>
 Scott Walls <sawalls@umich.edu>
@@ -1923,6 +1955,7 @@ Sebastiaan van Steenis <mail@superseb.nl>
 Sebastiaan van Stijn <github@gone.nl>
 Sebastian Höffner <sebastian.hoeffner@mevis.fraunhofer.de>
 Sebastian Radloff <sradloff23@gmail.com>
+Sebastian Thomschke <sebthom@users.noreply.github.com>
 Sebastien Goasguen <runseb@gmail.com>
 Senthil Kumar Selvaraj <senthil.thecoder@gmail.com>
 Senthil Kumaran <senthil@uthcode.com>
@@ -1996,6 +2029,7 @@ Stanislav Bondarenko <stanislav.bondarenko@gmail.com>
 Stanislav Levin <slev@altlinux.org>
 Steeve Morin <steeve.morin@gmail.com>
 Stefan Berger <stefanb@linux.vnet.ibm.com>
+Stefan Gehrig <stefan.gehrig.hn@googlemail.com>
 Stefan J. Wernli <swernli@microsoft.com>
 Stefan Praszalowicz <stefan@greplin.com>
 Stefan S. <tronicum@user.github.com>
@@ -2003,6 +2037,7 @@ Stefan Scherer <stefan.scherer@docker.com>
 Stefan Staudenmeyer <doerte@instana.com>
 Stefan Weil <sw@weilnetz.de>
 Steffen Butzer <steffen.butzer@outlook.com>
+Stephan Henningsen <stephan-henningsen@users.noreply.github.com>
 Stephan Spindler <shutefan@gmail.com>
 Stephen Benjamin <stephen@redhat.com>
 Stephen Crosby <stevecrozz@gmail.com>
@@ -2204,6 +2239,7 @@ Vinod Kulkarni <vinod.kulkarni@gmail.com>
 Vishal Doshi <vishal.doshi@gmail.com>
 Vishnu Kannan <vishnuk@google.com>
 Vitaly Ostrosablin <vostrosablin@virtuozzo.com>
+Vitor Anjos <bartier@users.noreply.github.com>
 Vitor Monteiro <vmrmonteiro@gmail.com>
 Vivek Agarwal <me@vivek.im>
 Vivek Dasgupta <vdasgupt@redhat.com>
@@ -2250,6 +2286,7 @@ Wenxuan Zhao <viz@linux.com>
 Wenyu You <21551128@zju.edu.cn>
 Wenzhi Liang <wenzhi.liang@gmail.com>
 Wes Morgan <cap10morgan@gmail.com>
+Wesley Pettit <wppttt@amazon.com>
 Wewang Xiaorenfine <wang.xiaoren@zte.com.cn>
 Wiktor Kwapisiewicz <wiktor@metacode.biz>
 Will Dietz <w@wdtz.org>
@@ -2289,7 +2326,7 @@ xiekeyang <xiekeyang@huawei.com>
 Ximo Guanter Gonzálbez <joaquin.guantergonzalbez@telefonica.com>
 xin.li <xin.li@daocloud.io>
 Xinbo Weng <xihuanbo_0521@zju.edu.cn>
-Xinfeng Liu <xinfeng.liu@gmail.com>
+Xinfeng Liu <XinfengLiu@icloud.com>
 Xinzi Zhou <imdreamrunner@gmail.com>
 Xiuming Chen <cc@cxm.cc>
 Xuecong Liao <satorulogic@gmail.com>
@@ -2355,6 +2392,7 @@ Zen Lin(Zhinan Lin) <linzhinan@huawei.com>
 Zhang Kun <zkazure@gmail.com>
 Zhang Wei <zhangwei555@huawei.com>
 Zhang Wentao <zhangwentao234@huawei.com>
+zhangguanzhang <zhangguanzhang@qq.com>
 ZhangHang <stevezhang2014@gmail.com>
 zhangxianwei <xianwei.zw@alibaba-inc.com>
 Zhenan Ye <21551168@zju.edu.cn>
@@ -2381,6 +2419,7 @@ Zuhayr Elahi <zuhayr.elahi@docker.com>
 Zunayed Ali <zunayed@gmail.com>
 Álvaro Lázaro <alvaro.lazaro.g@gmail.com>
 Átila Camurça Alves <camurca.home@gmail.com>
+吴小白 <296015668@qq.com>
 尹吉峰 <jifeng.yin@gmail.com>
 屈骏 <qujun@tiduyun.com>
 徐俊杰 <paco.xu@daocloud.io>
diff --git a/vendor/github.com/docker/docker/api/README.md b/vendor/github.com/docker/docker/api/README.md
index f136c3433af..381f19881fa 100644
--- a/vendor/github.com/docker/docker/api/README.md
+++ b/vendor/github.com/docker/docker/api/README.md
@@ -37,6 +37,6 @@ There is hopefully enough example material in the file for you to copy a similar
 
 When you make edits to `swagger.yaml`, you may want to check the generated API documentation to ensure it renders correctly.
 
-Run `make swagger-docs` and a preview will be running at `http://localhost`. Some of the styling may be incorrect, but you'll be able to ensure that it is generating the correct documentation.
+Run `make swagger-docs` and a preview will be running at `http://localhost:9000`. Some of the styling may be incorrect, but you'll be able to ensure that it is generating the correct documentation.
 
 The production documentation is generated by vendoring `swagger.yaml` into [docker/docker.github.io](https://github.com/docker/docker.github.io).
diff --git a/vendor/github.com/docker/docker/api/common.go b/vendor/github.com/docker/docker/api/common.go
index cba66bc462b..37e553d4183 100644
--- a/vendor/github.com/docker/docker/api/common.go
+++ b/vendor/github.com/docker/docker/api/common.go
@@ -3,7 +3,7 @@ package api // import "github.com/docker/docker/api"
 // Common constants for daemon and client.
 const (
 	// DefaultVersion of Current REST API
-	DefaultVersion = "1.43"
+	DefaultVersion = "1.44"
 
 	// NoBaseImageSpecifier is the symbol used by the FROM
 	// command to specify that no base image is to be used.
diff --git a/vendor/github.com/docker/docker/api/common_unix.go b/vendor/github.com/docker/docker/api/common_unix.go
deleted file mode 100644
index 19fc63d6589..00000000000
--- a/vendor/github.com/docker/docker/api/common_unix.go
+++ /dev/null
@@ -1,7 +0,0 @@
-//go:build !windows
-// +build !windows
-
-package api // import "github.com/docker/docker/api"
-
-// MinVersion represents Minimum REST API version supported
-const MinVersion = "1.12"
diff --git a/vendor/github.com/docker/docker/api/common_windows.go b/vendor/github.com/docker/docker/api/common_windows.go
deleted file mode 100644
index 590ba5479be..00000000000
--- a/vendor/github.com/docker/docker/api/common_windows.go
+++ /dev/null
@@ -1,8 +0,0 @@
-package api // import "github.com/docker/docker/api"
-
-// MinVersion represents Minimum REST API version supported
-// Technically the first daemon API version released on Windows is v1.25 in
-// engine version 1.13. However, some clients are explicitly using downlevel
-// APIs (e.g. docker-compose v2.1 file format) and that is just too restrictive.
-// Hence also allowing 1.24 on Windows.
-const MinVersion string = "1.24"
diff --git a/vendor/github.com/docker/docker/api/swagger.yaml b/vendor/github.com/docker/docker/api/swagger.yaml
index 7635b9f665a..567939580b4 100644
--- a/vendor/github.com/docker/docker/api/swagger.yaml
+++ b/vendor/github.com/docker/docker/api/swagger.yaml
@@ -19,10 +19,10 @@ produces:
 consumes:
   - "application/json"
   - "text/plain"
-basePath: "/v1.43"
+basePath: "/v1.44"
 info:
   title: "Docker Engine API"
-  version: "1.43"
+  version: "1.44"
   x-logo:
     url: "https://docs.docker.com/assets/images/logo-docker-main.png"
   description: |
@@ -55,8 +55,8 @@ info:
     the URL is not supported by the daemon, a HTTP `400 Bad Request` error message
     is returned.
 
-    If you omit the version-prefix, the current version of the API (v1.43) is used.
-    For example, calling `/info` is the same as calling `/v1.43/info`. Using the
+    If you omit the version-prefix, the current version of the API (v1.44) is used.
+    For example, calling `/info` is the same as calling `/v1.44/info`. Using the
     API without a version-prefix is deprecated and will be removed in a future release.
 
     Engine releases in the near future should support this version of the API,
@@ -388,6 +388,16 @@ definitions:
             description: "Create mount point on host if missing"
             type: "boolean"
             default: false
+          ReadOnlyNonRecursive:
+            description: |
+               Make the mount non-recursively read-only, but still leave the mount recursive
+               (unless NonRecursive is set to true in conjunction).
+            type: "boolean"
+            default: false
+          ReadOnlyForceRecursive:
+            description: "Raise an error if the mount cannot be made recursively read-only."
+            type: "boolean"
+            default: false
       VolumeOptions:
         description: "Optional configuration for the `volume` type."
         type: "object"
@@ -794,6 +804,12 @@ definitions:
           1000000 (1 ms). 0 means inherit.
         type: "integer"
         format: "int64"
+      StartInterval:
+        description: |
+          The time to wait between checks in nanoseconds during the start period.
+          It should be 0 or at least 1000000 (1 ms). 0 means inherit.
+        type: "integer"
+        format: "int64"
 
   Health:
     description: |
@@ -1297,7 +1313,10 @@ definitions:
         type: "boolean"
         x-nullable: true
       MacAddress:
-        description: "MAC address of the container."
+        description: |
+          MAC address of the container.
+
+          Deprecated: this field is deprecated in API v1.44 and up. Use EndpointSettings.MacAddress instead.
         type: "string"
         x-nullable: true
       OnBuild:
@@ -1347,16 +1366,16 @@ definitions:
       EndpointsConfig:
         description: |
           A mapping of network name to endpoint configuration for that network.
+          The endpoint configuration can be left empty to connect to that
+          network with no particular endpoint configuration.
         type: "object"
         additionalProperties:
           $ref: "#/definitions/EndpointSettings"
     example:
       # putting an example here, instead of using the example values from
-      # /definitions/EndpointSettings, because containers/create currently
-      # does not support attaching to multiple networks, so the example request
-      # would be confusing if it showed that multiple networks can be contained
-      # in the EndpointsConfig.
-      # TODO remove once we support multiple networks on container create (see https://github.com/moby/moby/blob/07e6b843594e061f82baa5fa23c2ff7d536c2a05/daemon/create.go#L323)
+      # /definitions/EndpointSettings, because EndpointSettings contains
+      # operational data returned when inspecting a container that we don't
+      # accept here.
       EndpointsConfig:
         isolated_nw:
           IPAMConfig:
@@ -1365,19 +1384,22 @@ definitions:
             LinkLocalIPs:
               - "169.254.34.68"
               - "fe80::3468"
+          MacAddress: "02:42:ac:12:05:02"
           Links:
             - "container_1"
             - "container_2"
           Aliases:
             - "server_x"
             - "server_y"
+        database_nw: {}
 
   NetworkSettings:
     description: "NetworkSettings exposes the network settings in the API"
     type: "object"
     properties:
       Bridge:
-        description: Name of the network's bridge (for example, `docker0`).
+        description: |
+          Name of the default bridge interface when dockerd's --bridge flag is set.
         type: "string"
         example: "docker0"
       SandboxID:
@@ -1387,34 +1409,40 @@ definitions:
       HairpinMode:
         description: |
           Indicates if hairpin NAT should be enabled on the virtual interface.
+
+          Deprecated: This field is never set and will be removed in a future release.
         type: "boolean"
         example: false
       LinkLocalIPv6Address:
-        description: IPv6 unicast address using the link-local prefix.
+        description: |
+          IPv6 unicast address using the link-local prefix.
+
+          Deprecated: This field is never set and will be removed in a future release.
         type: "string"
-        example: "fe80::42:acff:fe11:1"
+        example: ""
       LinkLocalIPv6PrefixLen:
-        description: Prefix length of the IPv6 unicast address.
+        description: |
+          Prefix length of the IPv6 unicast address.
+
+          Deprecated: This field is never set and will be removed in a future release.
         type: "integer"
-        example: "64"
+        example: ""
       Ports:
         $ref: "#/definitions/PortMap"
       SandboxKey:
-        description: SandboxKey identifies the sandbox
+        description: SandboxKey is the full path of the netns handle
         type: "string"
         example: "/var/run/docker/netns/8ab54b426c38"
 
-      # TODO is SecondaryIPAddresses actually used?
       SecondaryIPAddresses:
-        description: ""
+        description: "Deprecated: This field is never set and will be removed in a future release."
         type: "array"
         items:
           $ref: "#/definitions/Address"
         x-nullable: true
 
-      # TODO is SecondaryIPv6Addresses actually used?
       SecondaryIPv6Addresses:
-        description: ""
+        description: "Deprecated: This field is never set and will be removed in a future release."
         type: "array"
         items:
           $ref: "#/definitions/Address"
@@ -1723,10 +1751,15 @@ definitions:
           The ID of the container that was used to create the image.
 
           Depending on how the image was created, this field may be empty.
+
+          **Deprecated**: this field is kept for backward compatibility, but
+          will be removed in API v1.45.
         type: "string"
-        x-nullable: false
         example: "65974bc86f1770ae4bff79f651ebdbce166ae9aada632ee3fa9af3a264911735"
       ContainerConfig:
+        description: |
+          **Deprecated**: this field is kept for backward compatibility, but
+          will be removed in API v1.45.
         $ref: "#/definitions/ContainerConfig"
       DockerVersion:
         description: |
@@ -1781,13 +1814,7 @@ definitions:
         description: |
           Total size of the image including all layers it is composed of.
 
-          In versions of Docker before v1.10, this field was calculated from
-          the image itself and all of its parent images. Images are now stored
-          self-contained, and no longer use a parent-chain, making this field
-          an equivalent of the Size field.
-
-          > **Deprecated**: this field is kept for backward compatibility, but
-          > will be removed in API v1.44.
+          Deprecated: this field is omitted in API v1.44, but kept for backward compatibility. Use Size instead.
         type: "integer"
         format: "int64"
         example: 1239828
@@ -1829,6 +1856,7 @@ definitions:
             x-nullable: true
   ImageSummary:
     type: "object"
+    x-go-name: "Summary"
     required:
       - Id
       - ParentId
@@ -1925,12 +1953,7 @@ definitions:
         description: |-
           Total size of the image including all layers it is composed of.
 
-          In versions of Docker before v1.10, this field was calculated from
-          the image itself and all of its parent images. Images are now stored
-          self-contained, and no longer use a parent-chain, making this field
-          an equivalent of the Size field.
-
-          Deprecated: this field is kept for backward compatibility, and will be removed in API v1.44.
+          Deprecated: this field is omitted in API v1.44, but kept for backward compatibility. Use Size instead.
         type: "integer"
         format: "int64"
         example: 172064416
@@ -2448,6 +2471,11 @@ definitions:
         example:
           - "container_1"
           - "container_2"
+      MacAddress:
+        description: |
+          MAC address for the endpoint on this network. The network driver might ignore this parameter.
+        type: "string"
+        example: "02:42:ac:11:00:04"
       Aliases:
         type: "array"
         items:
@@ -2498,11 +2526,6 @@ definitions:
         type: "integer"
         format: "int64"
         example: 64
-      MacAddress:
-        description: |
-          MAC address for the endpoint on this network.
-        type: "string"
-        example: "02:42:ac:11:00:04"
       DriverOpts:
         description: |
           DriverOpts is a mapping of driver options and values. These options
@@ -2514,6 +2537,21 @@ definitions:
         example:
           com.example.some-label: "some-value"
           com.example.some-other-label: "some-other-value"
+      DNSNames:
+        description: |
+          List of all DNS names an endpoint has on a specific network. This
+          list is based on the container name, network aliases, container short
+          ID, and hostname.
+
+          These DNS names are non-fully qualified but can contain several dots.
+          You can get fully qualified DNS names by appending `.<network-name>`.
+          For instance, if container name is `my.ctr` and the network is named
+          `testnet`, `DNSNames` will contain `my.ctr` and the FQDN will be
+          `my.ctr.testnet`.
+        type: array
+        items:
+          type: string
+        example: ["foobar", "server_x", "server_y", "my.ctr"]
 
   EndpointIPAMConfig:
     description: |
@@ -3011,8 +3049,6 @@ definitions:
             Name: "journald"
           - Type: "Log"
             Name: "json-file"
-          - Type: "Log"
-            Name: "logentries"
           - Type: "Log"
             Name: "splunk"
           - Type: "Log"
@@ -3547,6 +3583,32 @@ definitions:
                   Level:
                     type: "string"
                     description: "SELinux level label"
+              Seccomp:
+                type: "object"
+                description: "Options for configuring seccomp on the container"
+                properties:
+                  Mode:
+                    type: "string"
+                    enum:
+                      - "default"
+                      - "unconfined"
+                      - "custom"
+                  Profile:
+                    description: "The custom seccomp profile as a json object"
+                    type: "string"
+              AppArmor:
+                type: "object"
+                description: "Options for configuring AppArmor on the container"
+                properties:
+                  Mode:
+                    type: "string"
+                    enum:
+                      - "default"
+                      - "disabled"
+              NoNewPrivileges:
+                type: "boolean"
+                description: "Configuration of the no_new_privs bit in the container"
+
           TTY:
             description: "Whether a pseudo-TTY should be allocated."
             type: "boolean"
@@ -3941,6 +4003,44 @@ definitions:
       - "remove"
       - "orphaned"
 
+  ContainerStatus:
+    type: "object"
+    description: "represents the status of a container."
+    properties:
+      ContainerID:
+        type: "string"
+      PID:
+        type: "integer"
+      ExitCode:
+        type: "integer"
+
+  PortStatus:
+    type: "object"
+    description: "represents the port status of a task's host ports whose service has published host ports"
+    properties:
+      Ports:
+        type: "array"
+        items:
+          $ref: "#/definitions/EndpointPortConfig"
+
+  TaskStatus:
+    type: "object"
+    description: "represents the status of a task."
+    properties:
+      Timestamp:
+        type: "string"
+        format: "dateTime"
+      State:
+        $ref: "#/definitions/TaskState"
+      Message:
+        type: "string"
+      Err:
+        type: "string"
+      ContainerStatus:
+        $ref: "#/definitions/ContainerStatus"
+      PortStatus:
+        $ref: "#/definitions/PortStatus"
+
   Task:
     type: "object"
     properties:
@@ -3976,26 +4076,7 @@ definitions:
       AssignedGenericResources:
         $ref: "#/definitions/GenericResources"
       Status:
-        type: "object"
-        properties:
-          Timestamp:
-            type: "string"
-            format: "dateTime"
-          State:
-            $ref: "#/definitions/TaskState"
-          Message:
-            type: "string"
-          Err:
-            type: "string"
-          ContainerStatus:
-            type: "object"
-            properties:
-              ContainerID:
-                type: "string"
-              PID:
-                type: "integer"
-              ExitCode:
-                type: "integer"
+        $ref: "#/definitions/TaskStatus"
       DesiredState:
         $ref: "#/definitions/TaskState"
       JobIteration:
@@ -4211,7 +4292,10 @@ definitions:
               - "stop-first"
               - "start-first"
       Networks:
-        description: "Specifies which networks the service should attach to."
+        description: |
+          Specifies which networks the service should attach to.
+
+          Deprecated: This field is deprecated since v1.44. The Networks field in TaskSpec should be used instead.
         type: "array"
         items:
           $ref: "#/definitions/NetworkAttachmentConfig"
@@ -4445,6 +4529,7 @@ definitions:
 
   ImageDeleteResponseItem:
     type: "object"
+    x-go-name: "DeleteResponse"
     properties:
       Untagged:
         description: "The image ID of an image that was untagged"
@@ -4453,6 +4538,29 @@ definitions:
         description: "The image ID of an image that was deleted"
         type: "string"
 
+  ServiceCreateResponse:
+    type: "object"
+    description: |
+      contains the information returned to a client on the
+      creation of a new service.
+    properties:
+      ID:
+        description: "The ID of the created service."
+        type: "string"
+        x-nullable: false
+        example: "ak7w3gjqoa3kuz8xcpnyy0pvl"
+      Warnings:
+        description: |
+          Optional warning message.
+
+          FIXME(thaJeztah): this should have "omitempty" in the generated type.
+        type: "array"
+        x-nullable: true
+        items:
+          type: "string"
+        example:
+          - "unable to pin image doesnotexist:latest to digest: image library/doesnotexist:latest not found"
+
   ServiceUpdateResponse:
     type: "object"
     properties:
@@ -4462,7 +4570,8 @@ definitions:
         items:
           type: "string"
     example:
-      Warning: "unable to pin image doesnotexist:latest to digest: image library/doesnotexist:latest not found"
+      Warnings:
+        - "unable to pin image doesnotexist:latest to digest: image library/doesnotexist:latest not found"
 
   ContainerSummary:
     type: "object"
@@ -5296,7 +5405,25 @@ definitions:
           - "WARNING: No memory limit support"
           - "WARNING: bridge-nf-call-iptables is disabled"
           - "WARNING: bridge-nf-call-ip6tables is disabled"
+      CDISpecDirs:
+        description: |
+          List of directories where (Container Device Interface) CDI
+          specifications are located.
+
+          These specifications define vendor-specific modifications to an OCI
+          runtime specification for a container being created.
 
+          An empty list indicates that CDI device injection is disabled.
+
+          Note that since using CDI device injection requires the daemon to have
+          experimental enabled. For non-experimental daemons an empty list will
+          always be returned.
+        type: "array"
+        items:
+          type: "string"
+        example:
+          - "/etc/cdi"
+          - "/var/run/cdi"
 
   # PluginsInfo is a temp struct holding Plugins name
   # registered with docker daemon. It is used by Info struct
@@ -5334,7 +5461,7 @@ definitions:
         type: "array"
         items:
           type: "string"
-        example: ["awslogs", "fluentd", "gcplogs", "gelf", "journald", "json-file", "logentries", "splunk", "syslog"]
+        example: ["awslogs", "fluentd", "gcplogs", "gelf", "journald", "json-file", "splunk", "syslog"]
 
 
   RegistryServiceConfig:
@@ -5532,6 +5659,28 @@ definitions:
         items:
           type: "string"
         example: ["--debug", "--systemd-cgroup=false"]
+      status:
+        description: |
+          Information specific to the runtime.
+
+          While this API specification does not define data provided by runtimes,
+          the following well-known properties may be provided by runtimes:
+
+          `org.opencontainers.runtime-spec.features`: features structure as defined
+          in the [OCI Runtime Specification](https://github.com/opencontainers/runtime-spec/blob/main/features.md),
+          in a JSON string representation.
+
+          <p><br /></p>
+
+          > **Note**: The information returned in this field, including the
+          > formatting of values and labels, should not be considered stable,
+          > and may change without notice.
+        type: "object"
+        x-nullable: true
+        additionalProperties:
+          type: "string"
+        example:
+          "org.opencontainers.runtime-spec.features": "{\"ociVersionMin\":\"1.0.0\",\"ociVersionMax\":\"1.1.0\",\"...\":\"...\"}"
 
   Commit:
     description: |
@@ -6416,6 +6565,7 @@ paths:
                     Aliases:
                       - "server_x"
                       - "server_y"
+                  database_nw: {}
 
           required: true
       responses:
@@ -6563,7 +6713,7 @@ paths:
                 StopSignal: "SIGTERM"
                 StopTimeout: 10
               Created: "2015-01-06T15:47:31.485331387Z"
-              Driver: "devicemapper"
+              Driver: "overlay2"
               ExecIDs:
                 - "b35395de42bc8abd327f9dd65d913b9ba28c74d2f0734eeeae84fa1c616a0fca"
                 - "3fc1232e5cd20c8de182ed81178503dc6437f4e7ef12b52cc5e8de020652f1c4"
@@ -7994,6 +8144,7 @@ paths:
             - `label=key` or `label="key=value"` of an image label
             - `reference`=(`<image-name>[:<tag>]`)
             - `since`=(`<image-name>[:<tag>]`,  `<image id>` or `<image@digest>`)
+            - `until=<timestamp>`
           type: "string"
         - name: "shared-size"
           in: "query"
@@ -8245,7 +8396,7 @@ paths:
   /images/create:
     post:
       summary: "Create an image"
-      description: "Create an image by either pulling it from a registry or importing it."
+      description: "Pull or import an image."
       operationId: "ImageCreate"
       consumes:
         - "text/plain"
@@ -8596,28 +8747,36 @@ paths:
                 is_official:
                   type: "boolean"
                 is_automated:
+                  description: |
+                    Whether this repository has automated builds enabled.
+
+                    <p><br /></p>
+
+                    > **Deprecated**: This field is deprecated and will always
+                    > be "false" in future.
                   type: "boolean"
+                  example: false
                 name:
                   type: "string"
                 star_count:
                   type: "integer"
           examples:
             application/json:
-              - description: ""
-                is_official: false
+              - description: "A minimal Docker image based on Alpine Linux with a complete package index and only 5 MB in size!"
+                is_official: true
                 is_automated: false
-                name: "wma55/u1210sshd"
-                star_count: 0
-              - description: ""
-                is_official: false
+                name: "alpine"
+                star_count: 10093
+              - description: "Busybox base image."
+                is_official: true
                 is_automated: false
-                name: "jdswinbank/sshd"
-                star_count: 0
-              - description: ""
-                is_official: false
+                name: "Busybox base image."
+                star_count: 3037
+              - description: "The PostgreSQL object-relational database system provides reliability and data integrity."
+                is_official: true
                 is_automated: false
-                name: "vgauthier/sshd"
-                star_count: 0
+                name: "postgres"
+                star_count: 12408
         500:
           description: "Server error"
           schema:
@@ -8637,9 +8796,13 @@ paths:
           description: |
             A JSON encoded value of the filters (a `map[string][]string`) to process on the images list. Available filters:
 
-            - `is-automated=(true|false)`
+            - `is-automated=(true|false)` (deprecated, see below)
             - `is-official=(true|false)`
             - `stars=<number>` Matches images that has at least 'number' stars.
+
+            The `is-automated` filter is deprecated. The `is_automated` field has
+            been deprecated by Docker Hub's search API. Consequently, searching
+            for `is-automated=true` will yield no results.
           type: "string"
       tags: ["Image"]
   /images/prune:
@@ -9032,7 +9195,6 @@ paths:
                   Created: 1466724217
                   Size: 1092588
                   SharedSize: 0
-                  VirtualSize: 1092588
                   Labels: {}
                   Containers: 1
               Containers:
@@ -9895,6 +10057,10 @@ paths:
             example:
               Id: "22be93d5babb089c5aab8dbc369042fad48ff791584ca2da2100db837a1c7c30"
               Warning: ""
+        400:
+          description: "bad parameter"
+          schema:
+            $ref: "#/definitions/ErrorResponse"
         403:
           description: |
             Forbidden operation. This happens when trying to create a network named after a pre-defined network,
@@ -9924,13 +10090,7 @@ paths:
                 type: "string"
               CheckDuplicate:
                 description: |
-                  Check for networks with duplicate names. Since Network is
-                  primarily keyed based on a random ID and not on the name, and
-                  network name is strictly a user-friendly alias to the network
-                  which is uniquely identified using ID, there is no guaranteed
-                  way to check for duplicates. CheckDuplicate is there to provide
-                  a best effort checking of any networks which has the same name
-                  but it is not guaranteed to catch all name collisions.
+                  Deprecated: CheckDuplicate is now always enabled.
                 type: "boolean"
               Driver:
                 description: "Name of the network driver plugin to use."
@@ -9998,14 +10158,19 @@ paths:
   /networks/{id}/connect:
     post:
       summary: "Connect a container to a network"
+      description: "The network must be either a local-scoped network or a swarm-scoped network with the `attachable` option set. A network cannot be re-attached to a running container"
       operationId: "NetworkConnect"
       consumes:
         - "application/json"
       responses:
         200:
           description: "No error"
+        400:
+          description: "bad parameter"
+          schema:
+            $ref: "#/definitions/ErrorResponse"
         403:
-          description: "Operation not supported for swarm scoped networks"
+          description: "Operation forbidden"
           schema:
             $ref: "#/definitions/ErrorResponse"
         404:
@@ -10040,6 +10205,7 @@ paths:
                 IPAMConfig:
                   IPv4Address: "172.24.56.89"
                   IPv6Address: "2001:db8::5689"
+                MacAddress: "02:42:ac:12:05:02"
       tags: ["Network"]
 
   /networks/{id}/disconnect:
@@ -11033,18 +11199,7 @@ paths:
         201:
           description: "no error"
           schema:
-            type: "object"
-            title: "ServiceCreateResponse"
-            properties:
-              ID:
-                description: "The ID of the created service."
-                type: "string"
-              Warning:
-                description: "Optional warning message"
-                type: "string"
-            example:
-              ID: "ak7w3gjqoa3kuz8xcpnyy0pvl"
-              Warning: "unable to pin image doesnotexist:latest to digest: image library/doesnotexist:latest not found"
+            $ref: "#/definitions/ServiceCreateResponse"
         400:
           description: "bad parameter"
           schema:
diff --git a/vendor/github.com/docker/docker/api/types/auth.go b/vendor/github.com/docker/docker/api/types/auth.go
deleted file mode 100644
index 9ee329a2fba..00000000000
--- a/vendor/github.com/docker/docker/api/types/auth.go
+++ /dev/null
@@ -1,7 +0,0 @@
-package types // import "github.com/docker/docker/api/types"
-import "github.com/docker/docker/api/types/registry"
-
-// AuthConfig contains authorization information for connecting to a Registry.
-//
-// Deprecated: use github.com/docker/docker/api/types/registry.AuthConfig
-type AuthConfig = registry.AuthConfig
diff --git a/vendor/github.com/docker/docker/api/types/checkpoint/list.go b/vendor/github.com/docker/docker/api/types/checkpoint/list.go
new file mode 100644
index 00000000000..94a9c0a47d3
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/checkpoint/list.go
@@ -0,0 +1,7 @@
+package checkpoint
+
+// Summary represents the details of a checkpoint when listing endpoints.
+type Summary struct {
+	// Name is the name of the checkpoint.
+	Name string
+}
diff --git a/vendor/github.com/docker/docker/api/types/checkpoint/options.go b/vendor/github.com/docker/docker/api/types/checkpoint/options.go
new file mode 100644
index 00000000000..9477458c241
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/checkpoint/options.go
@@ -0,0 +1,19 @@
+package checkpoint
+
+// CreateOptions holds parameters to create a checkpoint from a container.
+type CreateOptions struct {
+	CheckpointID  string
+	CheckpointDir string
+	Exit          bool
+}
+
+// ListOptions holds parameters to list checkpoints for a container.
+type ListOptions struct {
+	CheckpointDir string
+}
+
+// DeleteOptions holds parameters to delete a checkpoint from a container.
+type DeleteOptions struct {
+	CheckpointID  string
+	CheckpointDir string
+}
diff --git a/vendor/github.com/docker/docker/api/types/client.go b/vendor/github.com/docker/docker/api/types/client.go
index d8cd3061354..24b00a2759d 100644
--- a/vendor/github.com/docker/docker/api/types/client.go
+++ b/vendor/github.com/docker/docker/api/types/client.go
@@ -11,44 +11,6 @@ import (
 	units "github.com/docker/go-units"
 )
 
-// CheckpointCreateOptions holds parameters to create a checkpoint from a container
-type CheckpointCreateOptions struct {
-	CheckpointID  string
-	CheckpointDir string
-	Exit          bool
-}
-
-// CheckpointListOptions holds parameters to list checkpoints for a container
-type CheckpointListOptions struct {
-	CheckpointDir string
-}
-
-// CheckpointDeleteOptions holds parameters to delete a checkpoint from a container
-type CheckpointDeleteOptions struct {
-	CheckpointID  string
-	CheckpointDir string
-}
-
-// ContainerAttachOptions holds parameters to attach to a container.
-type ContainerAttachOptions struct {
-	Stream     bool
-	Stdin      bool
-	Stdout     bool
-	Stderr     bool
-	DetachKeys string
-	Logs       bool
-}
-
-// ContainerCommitOptions holds parameters to commit changes into a container.
-type ContainerCommitOptions struct {
-	Reference string
-	Comment   string
-	Author    string
-	Changes   []string
-	Pause     bool
-	Config    *container.Config
-}
-
 // ContainerExecInspect holds information returned by exec inspect.
 type ContainerExecInspect struct {
 	ExecID      string `json:"ID"`
@@ -58,42 +20,6 @@ type ContainerExecInspect struct {
 	Pid         int
 }
 
-// ContainerListOptions holds parameters to list containers with.
-type ContainerListOptions struct {
-	Size    bool
-	All     bool
-	Latest  bool
-	Since   string
-	Before  string
-	Limit   int
-	Filters filters.Args
-}
-
-// ContainerLogsOptions holds parameters to filter logs with.
-type ContainerLogsOptions struct {
-	ShowStdout bool
-	ShowStderr bool
-	Since      string
-	Until      string
-	Timestamps bool
-	Follow     bool
-	Tail       string
-	Details    bool
-}
-
-// ContainerRemoveOptions holds parameters to remove containers.
-type ContainerRemoveOptions struct {
-	RemoveVolumes bool
-	RemoveLinks   bool
-	Force         bool
-}
-
-// ContainerStartOptions holds parameters to start containers.
-type ContainerStartOptions struct {
-	CheckpointID  string
-	CheckpointDir string
-}
-
 // CopyToContainerOptions holds information
 // about files to copy into a container
 type CopyToContainerOptions struct {
@@ -307,14 +233,6 @@ type ImageSearchOptions struct {
 	Limit         int
 }
 
-// ResizeOptions holds parameters to resize a tty.
-// It can be used to resize container ttys and
-// exec process ttys too.
-type ResizeOptions struct {
-	Height uint
-	Width  uint
-}
-
 // NodeListOptions holds parameters to list nodes with.
 type NodeListOptions struct {
 	Filters filters.Args
@@ -340,15 +258,6 @@ type ServiceCreateOptions struct {
 	QueryRegistry bool
 }
 
-// ServiceCreateResponse contains the information returned to a client
-// on the creation of a new service.
-type ServiceCreateResponse struct {
-	// ID is the ID of the created service.
-	ID string
-	// Warnings is a set of non-fatal warning messages to pass on to the user.
-	Warnings []string `json:",omitempty"`
-}
-
 // Values for RegistryAuthFrom in ServiceUpdateOptions
 const (
 	RegistryAuthFromSpec         = "spec"
diff --git a/vendor/github.com/docker/docker/api/types/configs.go b/vendor/github.com/docker/docker/api/types/configs.go
index 7d5930bbeb6..945b6efadd6 100644
--- a/vendor/github.com/docker/docker/api/types/configs.go
+++ b/vendor/github.com/docker/docker/api/types/configs.go
@@ -1,32 +1,5 @@
 package types // import "github.com/docker/docker/api/types"
 
-import (
-	"github.com/docker/docker/api/types/container"
-	"github.com/docker/docker/api/types/network"
-	ocispec "github.com/opencontainers/image-spec/specs-go/v1"
-)
-
-// configs holds structs used for internal communication between the
-// frontend (such as an http server) and the backend (such as the
-// docker daemon).
-
-// ContainerCreateConfig is the parameter set to ContainerCreate()
-type ContainerCreateConfig struct {
-	Name             string
-	Config           *container.Config
-	HostConfig       *container.HostConfig
-	NetworkingConfig *network.NetworkingConfig
-	Platform         *ocispec.Platform
-	AdjustCPUShares  bool
-}
-
-// ContainerRmConfig holds arguments for the container remove
-// operation. This struct is used to tell the backend what operations
-// to perform.
-type ContainerRmConfig struct {
-	ForceRemove, RemoveVolume, RemoveLink bool
-}
-
 // ExecConfig is a small subset of the Config struct that holds the configuration
 // for the exec feature of docker.
 type ExecConfig struct {
@@ -43,25 +16,3 @@ type ExecConfig struct {
 	WorkingDir   string   // Working directory
 	Cmd          []string // Execution commands and args
 }
-
-// PluginRmConfig holds arguments for plugin remove.
-type PluginRmConfig struct {
-	ForceRemove bool
-}
-
-// PluginEnableConfig holds arguments for plugin enable
-type PluginEnableConfig struct {
-	Timeout int
-}
-
-// PluginDisableConfig holds arguments for plugin disable.
-type PluginDisableConfig struct {
-	ForceDisable bool
-}
-
-// NetworkListConfig stores the options available for listing networks
-type NetworkListConfig struct {
-	// TODO(@cpuguy83): naming is hard, this is pulled from what was being used in the router before moving here
-	Detailed bool
-	Verbose  bool
-}
diff --git a/vendor/github.com/docker/docker/api/types/container/change_response_deprecated.go b/vendor/github.com/docker/docker/api/types/container/change_response_deprecated.go
deleted file mode 100644
index 6b4b47390d4..00000000000
--- a/vendor/github.com/docker/docker/api/types/container/change_response_deprecated.go
+++ /dev/null
@@ -1,6 +0,0 @@
-package container
-
-// ContainerChangeResponseItem change item in response to ContainerChanges operation
-//
-// Deprecated: use [FilesystemChange].
-type ContainerChangeResponseItem = FilesystemChange
diff --git a/vendor/github.com/docker/docker/api/types/container/config.go b/vendor/github.com/docker/docker/api/types/container/config.go
index 077583e66c1..be41d6315e5 100644
--- a/vendor/github.com/docker/docker/api/types/container/config.go
+++ b/vendor/github.com/docker/docker/api/types/container/config.go
@@ -5,6 +5,7 @@ import (
 	"time"
 
 	"github.com/docker/docker/api/types/strslice"
+	dockerspec "github.com/docker/docker/image/spec/specs-go/v1"
 	"github.com/docker/go-connections/nat"
 )
 
@@ -33,25 +34,7 @@ type StopOptions struct {
 }
 
 // HealthConfig holds configuration settings for the HEALTHCHECK feature.
-type HealthConfig struct {
-	// Test is the test to perform to check that the container is healthy.
-	// An empty slice means to inherit the default.
-	// The options are:
-	// {} : inherit healthcheck
-	// {"NONE"} : disable healthcheck
-	// {"CMD", args...} : exec arguments directly
-	// {"CMD-SHELL", command} : run command with system's default shell
-	Test []string `json:",omitempty"`
-
-	// Zero means to inherit. Durations are expressed as integer nanoseconds.
-	Interval    time.Duration `json:",omitempty"` // Interval is the time to wait between checks.
-	Timeout     time.Duration `json:",omitempty"` // Timeout is the time to wait before considering the check to have hung.
-	StartPeriod time.Duration `json:",omitempty"` // The start period for the container to initialize before the retries starts to count down.
-
-	// Retries is the number of consecutive failures needed to consider a container as unhealthy.
-	// Zero means inherit.
-	Retries int `json:",omitempty"`
-}
+type HealthConfig = dockerspec.HealthcheckConfig
 
 // ExecStartOptions holds the options to start container's exec.
 type ExecStartOptions struct {
@@ -87,10 +70,13 @@ type Config struct {
 	WorkingDir      string              // Current directory (PWD) in the command will be launched
 	Entrypoint      strslice.StrSlice   // Entrypoint to run when starting the container
 	NetworkDisabled bool                `json:",omitempty"` // Is network disabled
-	MacAddress      string              `json:",omitempty"` // Mac Address of the container
-	OnBuild         []string            // ONBUILD metadata that were defined on the image Dockerfile
-	Labels          map[string]string   // List of labels set to this container
-	StopSignal      string              `json:",omitempty"` // Signal to stop a container
-	StopTimeout     *int                `json:",omitempty"` // Timeout (in seconds) to stop a container
-	Shell           strslice.StrSlice   `json:",omitempty"` // Shell for shell-form of RUN, CMD, ENTRYPOINT
+	// Mac Address of the container.
+	//
+	// Deprecated: this field is deprecated since API v1.44. Use EndpointSettings.MacAddress instead.
+	MacAddress  string            `json:",omitempty"`
+	OnBuild     []string          // ONBUILD metadata that were defined on the image Dockerfile
+	Labels      map[string]string // List of labels set to this container
+	StopSignal  string            `json:",omitempty"` // Signal to stop a container
+	StopTimeout *int              `json:",omitempty"` // Timeout (in seconds) to stop a container
+	Shell       strslice.StrSlice `json:",omitempty"` // Shell for shell-form of RUN, CMD, ENTRYPOINT
 }
diff --git a/vendor/github.com/docker/docker/api/types/container/errors.go b/vendor/github.com/docker/docker/api/types/container/errors.go
new file mode 100644
index 00000000000..32c978037ea
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/container/errors.go
@@ -0,0 +1,9 @@
+package container
+
+type errInvalidParameter struct{ error }
+
+func (e *errInvalidParameter) InvalidParameter() {}
+
+func (e *errInvalidParameter) Unwrap() error {
+	return e.error
+}
diff --git a/vendor/github.com/docker/docker/api/types/container/hostconfig.go b/vendor/github.com/docker/docker/api/types/container/hostconfig.go
index d4e6f55375a..efb96266e8c 100644
--- a/vendor/github.com/docker/docker/api/types/container/hostconfig.go
+++ b/vendor/github.com/docker/docker/api/types/container/hostconfig.go
@@ -1,10 +1,12 @@
 package container // import "github.com/docker/docker/api/types/container"
 
 import (
+	"fmt"
 	"strings"
 
 	"github.com/docker/docker/api/types/blkiodev"
 	"github.com/docker/docker/api/types/mount"
+	"github.com/docker/docker/api/types/network"
 	"github.com/docker/docker/api/types/strslice"
 	"github.com/docker/go-connections/nat"
 	units "github.com/docker/go-units"
@@ -132,12 +134,12 @@ type NetworkMode string
 
 // IsNone indicates whether container isn't using a network stack.
 func (n NetworkMode) IsNone() bool {
-	return n == "none"
+	return n == network.NetworkNone
 }
 
 // IsDefault indicates whether container uses the default network stack.
 func (n NetworkMode) IsDefault() bool {
-	return n == "default"
+	return n == network.NetworkDefault
 }
 
 // IsPrivate indicates whether container uses its private network stack.
@@ -271,33 +273,42 @@ type DeviceMapping struct {
 
 // RestartPolicy represents the restart policies of the container.
 type RestartPolicy struct {
-	Name              string
+	Name              RestartPolicyMode
 	MaximumRetryCount int
 }
 
+type RestartPolicyMode string
+
+const (
+	RestartPolicyDisabled      RestartPolicyMode = "no"
+	RestartPolicyAlways        RestartPolicyMode = "always"
+	RestartPolicyOnFailure     RestartPolicyMode = "on-failure"
+	RestartPolicyUnlessStopped RestartPolicyMode = "unless-stopped"
+)
+
 // IsNone indicates whether the container has the "no" restart policy.
 // This means the container will not automatically restart when exiting.
 func (rp *RestartPolicy) IsNone() bool {
-	return rp.Name == "no" || rp.Name == ""
+	return rp.Name == RestartPolicyDisabled || rp.Name == ""
 }
 
 // IsAlways indicates whether the container has the "always" restart policy.
 // This means the container will automatically restart regardless of the exit status.
 func (rp *RestartPolicy) IsAlways() bool {
-	return rp.Name == "always"
+	return rp.Name == RestartPolicyAlways
 }
 
 // IsOnFailure indicates whether the container has the "on-failure" restart policy.
 // This means the container will automatically restart of exiting with a non-zero exit status.
 func (rp *RestartPolicy) IsOnFailure() bool {
-	return rp.Name == "on-failure"
+	return rp.Name == RestartPolicyOnFailure
 }
 
 // IsUnlessStopped indicates whether the container has the
 // "unless-stopped" restart policy. This means the container will
 // automatically restart unless user has put it to stopped state.
 func (rp *RestartPolicy) IsUnlessStopped() bool {
-	return rp.Name == "unless-stopped"
+	return rp.Name == RestartPolicyUnlessStopped
 }
 
 // IsSame compares two RestartPolicy to see if they are the same
@@ -305,6 +316,33 @@ func (rp *RestartPolicy) IsSame(tp *RestartPolicy) bool {
 	return rp.Name == tp.Name && rp.MaximumRetryCount == tp.MaximumRetryCount
 }
 
+// ValidateRestartPolicy validates the given RestartPolicy.
+func ValidateRestartPolicy(policy RestartPolicy) error {
+	switch policy.Name {
+	case RestartPolicyAlways, RestartPolicyUnlessStopped, RestartPolicyDisabled:
+		if policy.MaximumRetryCount != 0 {
+			msg := "invalid restart policy: maximum retry count can only be used with 'on-failure'"
+			if policy.MaximumRetryCount < 0 {
+				msg += " and cannot be negative"
+			}
+			return &errInvalidParameter{fmt.Errorf(msg)}
+		}
+		return nil
+	case RestartPolicyOnFailure:
+		if policy.MaximumRetryCount < 0 {
+			return &errInvalidParameter{fmt.Errorf("invalid restart policy: maximum retry count cannot be negative")}
+		}
+		return nil
+	case "":
+		// Versions before v25.0.0 created an empty restart-policy "name" as
+		// default. Allow an empty name with "any" MaximumRetryCount for
+		// backward-compatibility.
+		return nil
+	default:
+		return &errInvalidParameter{fmt.Errorf("invalid restart policy: unknown policy '%s'; use one of '%s', '%s', '%s', or '%s'", policy.Name, RestartPolicyDisabled, RestartPolicyAlways, RestartPolicyOnFailure, RestartPolicyUnlessStopped)}
+	}
+}
+
 // LogMode is a type to define the available modes for logging
 // These modes affect how logs are handled when log messages start piling up.
 type LogMode string
diff --git a/vendor/github.com/docker/docker/api/types/container/hostconfig_unix.go b/vendor/github.com/docker/docker/api/types/container/hostconfig_unix.go
index 24c4fa8d900..42132923783 100644
--- a/vendor/github.com/docker/docker/api/types/container/hostconfig_unix.go
+++ b/vendor/github.com/docker/docker/api/types/container/hostconfig_unix.go
@@ -1,8 +1,9 @@
 //go:build !windows
-// +build !windows
 
 package container // import "github.com/docker/docker/api/types/container"
 
+import "github.com/docker/docker/api/types/network"
+
 // IsValid indicates if an isolation technology is valid
 func (i Isolation) IsValid() bool {
 	return i.IsDefault()
@@ -11,15 +12,15 @@ func (i Isolation) IsValid() bool {
 // NetworkName returns the name of the network stack.
 func (n NetworkMode) NetworkName() string {
 	if n.IsBridge() {
-		return "bridge"
+		return network.NetworkBridge
 	} else if n.IsHost() {
-		return "host"
+		return network.NetworkHost
 	} else if n.IsContainer() {
 		return "container"
 	} else if n.IsNone() {
-		return "none"
+		return network.NetworkNone
 	} else if n.IsDefault() {
-		return "default"
+		return network.NetworkDefault
 	} else if n.IsUserDefined() {
 		return n.UserDefined()
 	}
@@ -28,12 +29,12 @@ func (n NetworkMode) NetworkName() string {
 
 // IsBridge indicates whether container uses the bridge network stack
 func (n NetworkMode) IsBridge() bool {
-	return n == "bridge"
+	return n == network.NetworkBridge
 }
 
 // IsHost indicates whether container uses the host network stack.
 func (n NetworkMode) IsHost() bool {
-	return n == "host"
+	return n == network.NetworkHost
 }
 
 // IsUserDefined indicates user-created network
diff --git a/vendor/github.com/docker/docker/api/types/container/hostconfig_windows.go b/vendor/github.com/docker/docker/api/types/container/hostconfig_windows.go
index 99f803a5bb1..154667f4f0f 100644
--- a/vendor/github.com/docker/docker/api/types/container/hostconfig_windows.go
+++ b/vendor/github.com/docker/docker/api/types/container/hostconfig_windows.go
@@ -1,9 +1,11 @@
 package container // import "github.com/docker/docker/api/types/container"
 
+import "github.com/docker/docker/api/types/network"
+
 // IsBridge indicates whether container uses the bridge network stack
 // in windows it is given the name NAT
 func (n NetworkMode) IsBridge() bool {
-	return n == "nat"
+	return n == network.NetworkNat
 }
 
 // IsHost indicates whether container uses the host network stack.
@@ -25,11 +27,11 @@ func (i Isolation) IsValid() bool {
 // NetworkName returns the name of the network stack.
 func (n NetworkMode) NetworkName() string {
 	if n.IsDefault() {
-		return "default"
+		return network.NetworkDefault
 	} else if n.IsBridge() {
-		return "nat"
+		return network.NetworkNat
 	} else if n.IsNone() {
-		return "none"
+		return network.NetworkNone
 	} else if n.IsContainer() {
 		return "container"
 	} else if n.IsUserDefined() {
diff --git a/vendor/github.com/docker/docker/api/types/container/options.go b/vendor/github.com/docker/docker/api/types/container/options.go
new file mode 100644
index 00000000000..7a230057692
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/container/options.go
@@ -0,0 +1,67 @@
+package container
+
+import "github.com/docker/docker/api/types/filters"
+
+// ResizeOptions holds parameters to resize a TTY.
+// It can be used to resize container TTYs and
+// exec process TTYs too.
+type ResizeOptions struct {
+	Height uint
+	Width  uint
+}
+
+// AttachOptions holds parameters to attach to a container.
+type AttachOptions struct {
+	Stream     bool
+	Stdin      bool
+	Stdout     bool
+	Stderr     bool
+	DetachKeys string
+	Logs       bool
+}
+
+// CommitOptions holds parameters to commit changes into a container.
+type CommitOptions struct {
+	Reference string
+	Comment   string
+	Author    string
+	Changes   []string
+	Pause     bool
+	Config    *Config
+}
+
+// RemoveOptions holds parameters to remove containers.
+type RemoveOptions struct {
+	RemoveVolumes bool
+	RemoveLinks   bool
+	Force         bool
+}
+
+// StartOptions holds parameters to start containers.
+type StartOptions struct {
+	CheckpointID  string
+	CheckpointDir string
+}
+
+// ListOptions holds parameters to list containers with.
+type ListOptions struct {
+	Size    bool
+	All     bool
+	Latest  bool
+	Since   string
+	Before  string
+	Limit   int
+	Filters filters.Args
+}
+
+// LogsOptions holds parameters to filter logs with.
+type LogsOptions struct {
+	ShowStdout bool
+	ShowStderr bool
+	Since      string
+	Until      string
+	Timestamps bool
+	Follow     bool
+	Tail       string
+	Details    bool
+}
diff --git a/vendor/github.com/docker/docker/api/types/events/events.go b/vendor/github.com/docker/docker/api/types/events/events.go
index 9fe07e26fd2..6dbcd92235c 100644
--- a/vendor/github.com/docker/docker/api/types/events/events.go
+++ b/vendor/github.com/docker/docker/api/types/events/events.go
@@ -1,7 +1,7 @@
 package events // import "github.com/docker/docker/api/types/events"
 
 // Type is used for event-types.
-type Type = string
+type Type string
 
 // List of known event types.
 const (
@@ -18,6 +18,86 @@ const (
 	VolumeEventType    Type = "volume"    // VolumeEventType is the event type that volumes generate.
 )
 
+// Action is used for event-actions.
+type Action string
+
+const (
+	ActionCreate       Action = "create"
+	ActionStart        Action = "start"
+	ActionRestart      Action = "restart"
+	ActionStop         Action = "stop"
+	ActionCheckpoint   Action = "checkpoint"
+	ActionPause        Action = "pause"
+	ActionUnPause      Action = "unpause"
+	ActionAttach       Action = "attach"
+	ActionDetach       Action = "detach"
+	ActionResize       Action = "resize"
+	ActionUpdate       Action = "update"
+	ActionRename       Action = "rename"
+	ActionKill         Action = "kill"
+	ActionDie          Action = "die"
+	ActionOOM          Action = "oom"
+	ActionDestroy      Action = "destroy"
+	ActionRemove       Action = "remove"
+	ActionCommit       Action = "commit"
+	ActionTop          Action = "top"
+	ActionCopy         Action = "copy"
+	ActionArchivePath  Action = "archive-path"
+	ActionExtractToDir Action = "extract-to-dir"
+	ActionExport       Action = "export"
+	ActionImport       Action = "import"
+	ActionSave         Action = "save"
+	ActionLoad         Action = "load"
+	ActionTag          Action = "tag"
+	ActionUnTag        Action = "untag"
+	ActionPush         Action = "push"
+	ActionPull         Action = "pull"
+	ActionPrune        Action = "prune"
+	ActionDelete       Action = "delete"
+	ActionEnable       Action = "enable"
+	ActionDisable      Action = "disable"
+	ActionConnect      Action = "connect"
+	ActionDisconnect   Action = "disconnect"
+	ActionReload       Action = "reload"
+	ActionMount        Action = "mount"
+	ActionUnmount      Action = "unmount"
+
+	// ActionExecCreate is the prefix used for exec_create events. These
+	// event-actions are commonly followed by a colon and space (": "),
+	// and the command that's defined for the exec, for example:
+	//
+	//	exec_create: /bin/sh -c 'echo hello'
+	//
+	// This is far from ideal; it's a compromise to allow filtering and
+	// to preserve backward-compatibility.
+	ActionExecCreate Action = "exec_create"
+	// ActionExecStart is the prefix used for exec_create events. These
+	// event-actions are commonly followed by a colon and space (": "),
+	// and the command that's defined for the exec, for example:
+	//
+	//	exec_start: /bin/sh -c 'echo hello'
+	//
+	// This is far from ideal; it's a compromise to allow filtering and
+	// to preserve backward-compatibility.
+	ActionExecStart  Action = "exec_start"
+	ActionExecDie    Action = "exec_die"
+	ActionExecDetach Action = "exec_detach"
+
+	// ActionHealthStatus is the prefix to use for health_status events.
+	//
+	// Health-status events can either have a pre-defined status, in which
+	// case the "health_status" action is followed by a colon, or can be
+	// "free-form", in which case they're followed by the output of the
+	// health-check output.
+	//
+	// This is far form ideal, and a compromise to allow filtering, and
+	// to preserve backward-compatibility.
+	ActionHealthStatus          Action = "health_status"
+	ActionHealthStatusRunning   Action = "health_status: running"
+	ActionHealthStatusHealthy   Action = "health_status: healthy"
+	ActionHealthStatusUnhealthy Action = "health_status: unhealthy"
+)
+
 // Actor describes something that generates events,
 // like a container, or a network, or a volume.
 // It has a defined name and a set of attributes.
@@ -37,7 +117,7 @@ type Message struct {
 	From   string `json:"from,omitempty"`   // Deprecated: use Actor.Attributes["image"] instead.
 
 	Type   Type
-	Action string
+	Action Action
 	Actor  Actor
 	// Engine events are local scope. Cluster events are swarm scope.
 	Scope string `json:"scope,omitempty"`
diff --git a/vendor/github.com/docker/docker/api/types/image_delete_response_item.go b/vendor/github.com/docker/docker/api/types/image/delete_response.go
similarity index 68%
rename from vendor/github.com/docker/docker/api/types/image_delete_response_item.go
rename to vendor/github.com/docker/docker/api/types/image/delete_response.go
index b9a65a0d8e8..998620dc6a2 100644
--- a/vendor/github.com/docker/docker/api/types/image_delete_response_item.go
+++ b/vendor/github.com/docker/docker/api/types/image/delete_response.go
@@ -1,11 +1,11 @@
-package types
+package image
 
 // This file was generated by the swagger tool.
 // Editing this file might prove futile when you re-run the swagger generate command
 
-// ImageDeleteResponseItem image delete response item
-// swagger:model ImageDeleteResponseItem
-type ImageDeleteResponseItem struct {
+// DeleteResponse delete response
+// swagger:model DeleteResponse
+type DeleteResponse struct {
 
 	// The image ID of an image that was deleted
 	Deleted string `json:"Deleted,omitempty"`
diff --git a/vendor/github.com/docker/docker/api/types/image/image.go b/vendor/github.com/docker/docker/api/types/image/image.go
new file mode 100644
index 00000000000..167df28c7b9
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/image/image.go
@@ -0,0 +1,9 @@
+package image
+
+import "time"
+
+// Metadata contains engine-local data about the image.
+type Metadata struct {
+	// LastTagTime is the date and time at which the image was last tagged.
+	LastTagTime time.Time `json:",omitempty"`
+}
diff --git a/vendor/github.com/docker/docker/api/types/image_summary.go b/vendor/github.com/docker/docker/api/types/image/summary.go
similarity index 85%
rename from vendor/github.com/docker/docker/api/types/image_summary.go
rename to vendor/github.com/docker/docker/api/types/image/summary.go
index 0f6f144840e..f1e3e2ef018 100644
--- a/vendor/github.com/docker/docker/api/types/image_summary.go
+++ b/vendor/github.com/docker/docker/api/types/image/summary.go
@@ -1,11 +1,11 @@
-package types
+package image
 
 // This file was generated by the swagger tool.
 // Editing this file might prove futile when you re-run the swagger generate command
 
-// ImageSummary image summary
-// swagger:model ImageSummary
-type ImageSummary struct {
+// Summary summary
+// swagger:model Summary
+type Summary struct {
 
 	// Number of containers using this image. Includes both stopped and running
 	// containers.
@@ -84,11 +84,6 @@ type ImageSummary struct {
 
 	// Total size of the image including all layers it is composed of.
 	//
-	// In versions of Docker before v1.10, this field was calculated from
-	// the image itself and all of its parent images. Images are now stored
-	// self-contained, and no longer use a parent-chain, making this field
-	// an equivalent of the Size field.
-	//
-	// Deprecated: this field is kept for backward compatibility, and will be removed in API v1.44.
+	// Deprecated: this field is omitted in API v1.44, but kept for backward compatibility. Use Size instead.
 	VirtualSize int64 `json:"VirtualSize,omitempty"`
 }
diff --git a/vendor/github.com/docker/docker/api/types/mount/mount.go b/vendor/github.com/docker/docker/api/types/mount/mount.go
index ac4ce622310..57edf2ef183 100644
--- a/vendor/github.com/docker/docker/api/types/mount/mount.go
+++ b/vendor/github.com/docker/docker/api/types/mount/mount.go
@@ -29,7 +29,7 @@ type Mount struct {
 	// Source is not supported for tmpfs (must be an empty value)
 	Source      string      `json:",omitempty"`
 	Target      string      `json:",omitempty"`
-	ReadOnly    bool        `json:",omitempty"`
+	ReadOnly    bool        `json:",omitempty"` // attempts recursive read-only if possible
 	Consistency Consistency `json:",omitempty"`
 
 	BindOptions    *BindOptions    `json:",omitempty"`
@@ -85,6 +85,11 @@ type BindOptions struct {
 	Propagation      Propagation `json:",omitempty"`
 	NonRecursive     bool        `json:",omitempty"`
 	CreateMountpoint bool        `json:",omitempty"`
+	// ReadOnlyNonRecursive makes the mount non-recursively read-only, but still leaves the mount recursive
+	// (unless NonRecursive is set to true in conjunction).
+	ReadOnlyNonRecursive bool `json:",omitempty"`
+	// ReadOnlyForceRecursive raises an error if the mount cannot be made recursively read-only.
+	ReadOnlyForceRecursive bool `json:",omitempty"`
 }
 
 // VolumeOptions represents the options for a mount of type volume.
diff --git a/vendor/github.com/docker/docker/api/types/network/endpoint.go b/vendor/github.com/docker/docker/api/types/network/endpoint.go
new file mode 100644
index 00000000000..4b3c06a52b5
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/network/endpoint.go
@@ -0,0 +1,144 @@
+package network
+
+import (
+	"errors"
+	"fmt"
+	"net"
+
+	"github.com/docker/docker/internal/multierror"
+)
+
+// EndpointSettings stores the network endpoint details
+type EndpointSettings struct {
+	// Configurations
+	IPAMConfig *EndpointIPAMConfig
+	Links      []string
+	Aliases    []string // Aliases holds the list of extra, user-specified DNS names for this endpoint.
+	MacAddress string
+	// Operational data
+	NetworkID           string
+	EndpointID          string
+	Gateway             string
+	IPAddress           string
+	IPPrefixLen         int
+	IPv6Gateway         string
+	GlobalIPv6Address   string
+	GlobalIPv6PrefixLen int
+	DriverOpts          map[string]string
+	// DNSNames holds all the (non fully qualified) DNS names associated to this endpoint. First entry is used to
+	// generate PTR records.
+	DNSNames []string
+}
+
+// Copy makes a deep copy of `EndpointSettings`
+func (es *EndpointSettings) Copy() *EndpointSettings {
+	epCopy := *es
+	if es.IPAMConfig != nil {
+		epCopy.IPAMConfig = es.IPAMConfig.Copy()
+	}
+
+	if es.Links != nil {
+		links := make([]string, 0, len(es.Links))
+		epCopy.Links = append(links, es.Links...)
+	}
+
+	if es.Aliases != nil {
+		aliases := make([]string, 0, len(es.Aliases))
+		epCopy.Aliases = append(aliases, es.Aliases...)
+	}
+
+	if len(es.DNSNames) > 0 {
+		epCopy.DNSNames = make([]string, len(es.DNSNames))
+		copy(epCopy.DNSNames, es.DNSNames)
+	}
+
+	return &epCopy
+}
+
+// EndpointIPAMConfig represents IPAM configurations for the endpoint
+type EndpointIPAMConfig struct {
+	IPv4Address  string   `json:",omitempty"`
+	IPv6Address  string   `json:",omitempty"`
+	LinkLocalIPs []string `json:",omitempty"`
+}
+
+// Copy makes a copy of the endpoint ipam config
+func (cfg *EndpointIPAMConfig) Copy() *EndpointIPAMConfig {
+	cfgCopy := *cfg
+	cfgCopy.LinkLocalIPs = make([]string, 0, len(cfg.LinkLocalIPs))
+	cfgCopy.LinkLocalIPs = append(cfgCopy.LinkLocalIPs, cfg.LinkLocalIPs...)
+	return &cfgCopy
+}
+
+// NetworkSubnet describes a user-defined subnet for a specific network. It's only used to validate if an
+// EndpointIPAMConfig is valid for a specific network.
+type NetworkSubnet interface {
+	// Contains checks whether the NetworkSubnet contains [addr].
+	Contains(addr net.IP) bool
+	// IsStatic checks whether the subnet was statically allocated (ie. user-defined).
+	IsStatic() bool
+}
+
+// IsInRange checks whether static IP addresses are valid in a specific network.
+func (cfg *EndpointIPAMConfig) IsInRange(v4Subnets []NetworkSubnet, v6Subnets []NetworkSubnet) error {
+	var errs []error
+
+	if err := validateEndpointIPAddress(cfg.IPv4Address, v4Subnets); err != nil {
+		errs = append(errs, err)
+	}
+	if err := validateEndpointIPAddress(cfg.IPv6Address, v6Subnets); err != nil {
+		errs = append(errs, err)
+	}
+
+	return multierror.Join(errs...)
+}
+
+func validateEndpointIPAddress(epAddr string, ipamSubnets []NetworkSubnet) error {
+	if epAddr == "" {
+		return nil
+	}
+
+	var staticSubnet bool
+	parsedAddr := net.ParseIP(epAddr)
+	for _, subnet := range ipamSubnets {
+		if subnet.IsStatic() {
+			staticSubnet = true
+			if subnet.Contains(parsedAddr) {
+				return nil
+			}
+		}
+	}
+
+	if staticSubnet {
+		return fmt.Errorf("no configured subnet or ip-range contain the IP address %s", epAddr)
+	}
+
+	return errors.New("user specified IP address is supported only when connecting to networks with user configured subnets")
+}
+
+// Validate checks whether cfg is valid.
+func (cfg *EndpointIPAMConfig) Validate() error {
+	if cfg == nil {
+		return nil
+	}
+
+	var errs []error
+
+	if cfg.IPv4Address != "" {
+		if addr := net.ParseIP(cfg.IPv4Address); addr == nil || addr.To4() == nil || addr.IsUnspecified() {
+			errs = append(errs, fmt.Errorf("invalid IPv4 address: %s", cfg.IPv4Address))
+		}
+	}
+	if cfg.IPv6Address != "" {
+		if addr := net.ParseIP(cfg.IPv6Address); addr == nil || addr.To4() != nil || addr.IsUnspecified() {
+			errs = append(errs, fmt.Errorf("invalid IPv6 address: %s", cfg.IPv6Address))
+		}
+	}
+	for _, addr := range cfg.LinkLocalIPs {
+		if parsed := net.ParseIP(addr); parsed == nil || parsed.IsUnspecified() {
+			errs = append(errs, fmt.Errorf("invalid link-local IP address: %s", addr))
+		}
+	}
+
+	return multierror.Join(errs...)
+}
diff --git a/vendor/github.com/docker/docker/api/types/network/ipam.go b/vendor/github.com/docker/docker/api/types/network/ipam.go
new file mode 100644
index 00000000000..17f370ef7ef
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/network/ipam.go
@@ -0,0 +1,151 @@
+package network
+
+import (
+	"errors"
+	"fmt"
+	"net/netip"
+
+	"github.com/docker/docker/internal/multierror"
+)
+
+// IPAM represents IP Address Management
+type IPAM struct {
+	Driver  string
+	Options map[string]string // Per network IPAM driver options
+	Config  []IPAMConfig
+}
+
+// IPAMConfig represents IPAM configurations
+type IPAMConfig struct {
+	Subnet     string            `json:",omitempty"`
+	IPRange    string            `json:",omitempty"`
+	Gateway    string            `json:",omitempty"`
+	AuxAddress map[string]string `json:"AuxiliaryAddresses,omitempty"`
+}
+
+type ipFamily string
+
+const (
+	ip4 ipFamily = "IPv4"
+	ip6 ipFamily = "IPv6"
+)
+
+// HasIPv6Subnets checks whether there's any IPv6 subnets in the ipam parameter. It ignores any invalid Subnet and nil
+// ipam.
+func HasIPv6Subnets(ipam *IPAM) bool {
+	if ipam == nil {
+		return false
+	}
+
+	for _, cfg := range ipam.Config {
+		subnet, err := netip.ParsePrefix(cfg.Subnet)
+		if err != nil {
+			continue
+		}
+
+		if subnet.Addr().Is6() {
+			return true
+		}
+	}
+
+	return false
+}
+
+// ValidateIPAM checks whether the network's IPAM passed as argument is valid. It returns a joinError of the list of
+// errors found.
+func ValidateIPAM(ipam *IPAM) error {
+	if ipam == nil {
+		return nil
+	}
+
+	var errs []error
+	for _, cfg := range ipam.Config {
+		subnet, err := netip.ParsePrefix(cfg.Subnet)
+		if err != nil {
+			errs = append(errs, fmt.Errorf("invalid subnet %s: invalid CIDR block notation", cfg.Subnet))
+			continue
+		}
+		subnetFamily := ip4
+		if subnet.Addr().Is6() {
+			subnetFamily = ip6
+		}
+
+		if subnet != subnet.Masked() {
+			errs = append(errs, fmt.Errorf("invalid subnet %s: it should be %s", subnet, subnet.Masked()))
+		}
+
+		if ipRangeErrs := validateIPRange(cfg.IPRange, subnet, subnetFamily); len(ipRangeErrs) > 0 {
+			errs = append(errs, ipRangeErrs...)
+		}
+
+		if err := validateAddress(cfg.Gateway, subnet, subnetFamily); err != nil {
+			errs = append(errs, fmt.Errorf("invalid gateway %s: %w", cfg.Gateway, err))
+		}
+
+		for auxName, aux := range cfg.AuxAddress {
+			if err := validateAddress(aux, subnet, subnetFamily); err != nil {
+				errs = append(errs, fmt.Errorf("invalid auxiliary address %s: %w", auxName, err))
+			}
+		}
+	}
+
+	if err := multierror.Join(errs...); err != nil {
+		return fmt.Errorf("invalid network config:\n%w", err)
+	}
+
+	return nil
+}
+
+func validateIPRange(ipRange string, subnet netip.Prefix, subnetFamily ipFamily) []error {
+	if ipRange == "" {
+		return nil
+	}
+	prefix, err := netip.ParsePrefix(ipRange)
+	if err != nil {
+		return []error{fmt.Errorf("invalid ip-range %s: invalid CIDR block notation", ipRange)}
+	}
+	family := ip4
+	if prefix.Addr().Is6() {
+		family = ip6
+	}
+
+	if family != subnetFamily {
+		return []error{fmt.Errorf("invalid ip-range %s: parent subnet is an %s block", ipRange, subnetFamily)}
+	}
+
+	var errs []error
+	if prefix.Bits() < subnet.Bits() {
+		errs = append(errs, fmt.Errorf("invalid ip-range %s: CIDR block is bigger than its parent subnet %s", ipRange, subnet))
+	}
+	if prefix != prefix.Masked() {
+		errs = append(errs, fmt.Errorf("invalid ip-range %s: it should be %s", prefix, prefix.Masked()))
+	}
+	if !subnet.Overlaps(prefix) {
+		errs = append(errs, fmt.Errorf("invalid ip-range %s: parent subnet %s doesn't contain ip-range", ipRange, subnet))
+	}
+
+	return errs
+}
+
+func validateAddress(address string, subnet netip.Prefix, subnetFamily ipFamily) error {
+	if address == "" {
+		return nil
+	}
+	addr, err := netip.ParseAddr(address)
+	if err != nil {
+		return errors.New("invalid address")
+	}
+	family := ip4
+	if addr.Is6() {
+		family = ip6
+	}
+
+	if family != subnetFamily {
+		return fmt.Errorf("parent subnet is an %s block", subnetFamily)
+	}
+	if !subnet.Contains(addr) {
+		return fmt.Errorf("parent subnet %s doesn't contain this address", subnet)
+	}
+
+	return nil
+}
diff --git a/vendor/github.com/docker/docker/api/types/network/network.go b/vendor/github.com/docker/docker/api/types/network/network.go
index 437b184c67b..f1f300f3d75 100644
--- a/vendor/github.com/docker/docker/api/types/network/network.go
+++ b/vendor/github.com/docker/docker/api/types/network/network.go
@@ -1,69 +1,34 @@
 package network // import "github.com/docker/docker/api/types/network"
+
 import (
 	"github.com/docker/docker/api/types/filters"
 )
 
+const (
+	// NetworkDefault is a platform-independent alias to choose the platform-specific default network stack.
+	NetworkDefault = "default"
+	// NetworkHost is the name of the predefined network used when the NetworkMode host is selected (only available on Linux)
+	NetworkHost = "host"
+	// NetworkNone is the name of the predefined network used when the NetworkMode none is selected (available on both Linux and Windows)
+	NetworkNone = "none"
+	// NetworkBridge is the name of the default network on Linux
+	NetworkBridge = "bridge"
+	// NetworkNat is the name of the default network on Windows
+	NetworkNat = "nat"
+)
+
 // Address represents an IP address
 type Address struct {
 	Addr      string
 	PrefixLen int
 }
 
-// IPAM represents IP Address Management
-type IPAM struct {
-	Driver  string
-	Options map[string]string // Per network IPAM driver options
-	Config  []IPAMConfig
-}
-
-// IPAMConfig represents IPAM configurations
-type IPAMConfig struct {
-	Subnet     string            `json:",omitempty"`
-	IPRange    string            `json:",omitempty"`
-	Gateway    string            `json:",omitempty"`
-	AuxAddress map[string]string `json:"AuxiliaryAddresses,omitempty"`
-}
-
-// EndpointIPAMConfig represents IPAM configurations for the endpoint
-type EndpointIPAMConfig struct {
-	IPv4Address  string   `json:",omitempty"`
-	IPv6Address  string   `json:",omitempty"`
-	LinkLocalIPs []string `json:",omitempty"`
-}
-
-// Copy makes a copy of the endpoint ipam config
-func (cfg *EndpointIPAMConfig) Copy() *EndpointIPAMConfig {
-	cfgCopy := *cfg
-	cfgCopy.LinkLocalIPs = make([]string, 0, len(cfg.LinkLocalIPs))
-	cfgCopy.LinkLocalIPs = append(cfgCopy.LinkLocalIPs, cfg.LinkLocalIPs...)
-	return &cfgCopy
-}
-
 // PeerInfo represents one peer of an overlay network
 type PeerInfo struct {
 	Name string
 	IP   string
 }
 
-// EndpointSettings stores the network endpoint details
-type EndpointSettings struct {
-	// Configurations
-	IPAMConfig *EndpointIPAMConfig
-	Links      []string
-	Aliases    []string
-	// Operational data
-	NetworkID           string
-	EndpointID          string
-	Gateway             string
-	IPAddress           string
-	IPPrefixLen         int
-	IPv6Gateway         string
-	GlobalIPv6Address   string
-	GlobalIPv6PrefixLen int
-	MacAddress          string
-	DriverOpts          map[string]string
-}
-
 // Task carries the information about one backend task
 type Task struct {
 	Name       string
@@ -80,25 +45,6 @@ type ServiceInfo struct {
 	Tasks        []Task
 }
 
-// Copy makes a deep copy of `EndpointSettings`
-func (es *EndpointSettings) Copy() *EndpointSettings {
-	epCopy := *es
-	if es.IPAMConfig != nil {
-		epCopy.IPAMConfig = es.IPAMConfig.Copy()
-	}
-
-	if es.Links != nil {
-		links := make([]string, 0, len(es.Links))
-		epCopy.Links = append(links, es.Links...)
-	}
-
-	if es.Aliases != nil {
-		aliases := make([]string, 0, len(es.Aliases))
-		epCopy.Aliases = append(aliases, es.Aliases...)
-	}
-	return &epCopy
-}
-
 // NetworkingConfig represents the container's networking configuration for each of its interfaces
 // Carries the networking configs specified in the `docker run` and `docker network connect` commands
 type NetworkingConfig struct {
diff --git a/vendor/github.com/docker/docker/api/types/registry/registry.go b/vendor/github.com/docker/docker/api/types/registry/registry.go
index b83f5d7b2e2..05cb31075f1 100644
--- a/vendor/github.com/docker/docker/api/types/registry/registry.go
+++ b/vendor/github.com/docker/docker/api/types/registry/registry.go
@@ -92,7 +92,9 @@ type SearchResult struct {
 	IsOfficial bool `json:"is_official"`
 	// Name is the name of the repository
 	Name string `json:"name"`
-	// IsAutomated indicates whether the result is automated
+	// IsAutomated indicates whether the result is automated.
+	//
+	// Deprecated: the "is_automated" field is deprecated and will always be "false" in the future.
 	IsAutomated bool `json:"is_automated"`
 	// Description is a textual description of the repository
 	Description string `json:"description"`
diff --git a/vendor/github.com/docker/docker/api/types/swarm/container.go b/vendor/github.com/docker/docker/api/types/swarm/container.go
index af5e1c0bc27..65f61d2d209 100644
--- a/vendor/github.com/docker/docker/api/types/swarm/container.go
+++ b/vendor/github.com/docker/docker/api/types/swarm/container.go
@@ -32,6 +32,42 @@ type SELinuxContext struct {
 	Level string
 }
 
+// SeccompMode is the type used for the enumeration of possible seccomp modes
+// in SeccompOpts
+type SeccompMode string
+
+const (
+	SeccompModeDefault    SeccompMode = "default"
+	SeccompModeUnconfined SeccompMode = "unconfined"
+	SeccompModeCustom     SeccompMode = "custom"
+)
+
+// SeccompOpts defines the options for configuring seccomp on a swarm-managed
+// container.
+type SeccompOpts struct {
+	// Mode is the SeccompMode used for the container.
+	Mode SeccompMode `json:",omitempty"`
+	// Profile is the custom seccomp profile as a json object to be used with
+	// the container. Mode should be set to SeccompModeCustom when using a
+	// custom profile in this manner.
+	Profile []byte `json:",omitempty"`
+}
+
+// AppArmorMode is type used for the enumeration of possible AppArmor modes in
+// AppArmorOpts
+type AppArmorMode string
+
+const (
+	AppArmorModeDefault  AppArmorMode = "default"
+	AppArmorModeDisabled AppArmorMode = "disabled"
+)
+
+// AppArmorOpts defines the options for configuring AppArmor on a swarm-managed
+// container.  Currently, custom AppArmor profiles are not supported.
+type AppArmorOpts struct {
+	Mode AppArmorMode `json:",omitempty"`
+}
+
 // CredentialSpec for managed service account (Windows only)
 type CredentialSpec struct {
 	Config   string
@@ -41,8 +77,11 @@ type CredentialSpec struct {
 
 // Privileges defines the security options for the container.
 type Privileges struct {
-	CredentialSpec *CredentialSpec
-	SELinuxContext *SELinuxContext
+	CredentialSpec  *CredentialSpec
+	SELinuxContext  *SELinuxContext
+	Seccomp         *SeccompOpts  `json:",omitempty"`
+	AppArmor        *AppArmorOpts `json:",omitempty"`
+	NoNewPrivileges bool
 }
 
 // ContainerSpec represents the spec of a container.
diff --git a/vendor/github.com/docker/docker/api/types/swarm/runtime/gen.go b/vendor/github.com/docker/docker/api/types/swarm/runtime/gen.go
index 98c2806c31d..292bd7afc8d 100644
--- a/vendor/github.com/docker/docker/api/types/swarm/runtime/gen.go
+++ b/vendor/github.com/docker/docker/api/types/swarm/runtime/gen.go
@@ -1,3 +1,3 @@
-//go:generate protoc -I . --gogofast_out=import_path=github.com/docker/docker/api/types/swarm/runtime:. plugin.proto
+//go:generate protoc --gogofaster_out=import_path=github.com/docker/docker/api/types/swarm/runtime:. plugin.proto
 
 package runtime // import "github.com/docker/docker/api/types/swarm/runtime"
diff --git a/vendor/github.com/docker/docker/api/types/swarm/runtime/plugin.pb.go b/vendor/github.com/docker/docker/api/types/swarm/runtime/plugin.pb.go
index e45045866a6..32aaf0d5199 100644
--- a/vendor/github.com/docker/docker/api/types/swarm/runtime/plugin.pb.go
+++ b/vendor/github.com/docker/docker/api/types/swarm/runtime/plugin.pb.go
@@ -1,23 +1,15 @@
 // Code generated by protoc-gen-gogo. DO NOT EDIT.
 // source: plugin.proto
 
-/*
-	Package runtime is a generated protocol buffer package.
-
-	It is generated from these files:
-		plugin.proto
-
-	It has these top-level messages:
-		PluginSpec
-		PluginPrivilege
-*/
 package runtime
 
-import proto "github.com/gogo/protobuf/proto"
-import fmt "fmt"
-import math "math"
-
-import io "io"
+import (
+	fmt "fmt"
+	proto "github.com/gogo/protobuf/proto"
+	io "io"
+	math "math"
+	math_bits "math/bits"
+)
 
 // Reference imports to suppress errors if they are not otherwise used.
 var _ = proto.Marshal
@@ -28,22 +20,50 @@ var _ = math.Inf
 // is compatible with the proto package it is being compiled against.
 // A compilation error at this line likely means your copy of the
 // proto package needs to be updated.
-const _ = proto.GoGoProtoPackageIsVersion2 // please upgrade the proto package
+const _ = proto.GoGoProtoPackageIsVersion3 // please upgrade the proto package
 
 // PluginSpec defines the base payload which clients can specify for creating
 // a service with the plugin runtime.
 type PluginSpec struct {
 	Name       string             `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
 	Remote     string             `protobuf:"bytes,2,opt,name=remote,proto3" json:"remote,omitempty"`
-	Privileges []*PluginPrivilege `protobuf:"bytes,3,rep,name=privileges" json:"privileges,omitempty"`
+	Privileges []*PluginPrivilege `protobuf:"bytes,3,rep,name=privileges,proto3" json:"privileges,omitempty"`
 	Disabled   bool               `protobuf:"varint,4,opt,name=disabled,proto3" json:"disabled,omitempty"`
-	Env        []string           `protobuf:"bytes,5,rep,name=env" json:"env,omitempty"`
+	Env        []string           `protobuf:"bytes,5,rep,name=env,proto3" json:"env,omitempty"`
+}
+
+func (m *PluginSpec) Reset()         { *m = PluginSpec{} }
+func (m *PluginSpec) String() string { return proto.CompactTextString(m) }
+func (*PluginSpec) ProtoMessage()    {}
+func (*PluginSpec) Descriptor() ([]byte, []int) {
+	return fileDescriptor_22a625af4bc1cc87, []int{0}
+}
+func (m *PluginSpec) XXX_Unmarshal(b []byte) error {
+	return m.Unmarshal(b)
+}
+func (m *PluginSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	if deterministic {
+		return xxx_messageInfo_PluginSpec.Marshal(b, m, deterministic)
+	} else {
+		b = b[:cap(b)]
+		n, err := m.MarshalToSizedBuffer(b)
+		if err != nil {
+			return nil, err
+		}
+		return b[:n], nil
+	}
+}
+func (m *PluginSpec) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_PluginSpec.Merge(m, src)
+}
+func (m *PluginSpec) XXX_Size() int {
+	return m.Size()
+}
+func (m *PluginSpec) XXX_DiscardUnknown() {
+	xxx_messageInfo_PluginSpec.DiscardUnknown(m)
 }
 
-func (m *PluginSpec) Reset()                    { *m = PluginSpec{} }
-func (m *PluginSpec) String() string            { return proto.CompactTextString(m) }
-func (*PluginSpec) ProtoMessage()               {}
-func (*PluginSpec) Descriptor() ([]byte, []int) { return fileDescriptorPlugin, []int{0} }
+var xxx_messageInfo_PluginSpec proto.InternalMessageInfo
 
 func (m *PluginSpec) GetName() string {
 	if m != nil {
@@ -85,13 +105,41 @@ func (m *PluginSpec) GetEnv() []string {
 type PluginPrivilege struct {
 	Name        string   `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
 	Description string   `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
-	Value       []string `protobuf:"bytes,3,rep,name=value" json:"value,omitempty"`
+	Value       []string `protobuf:"bytes,3,rep,name=value,proto3" json:"value,omitempty"`
 }
 
-func (m *PluginPrivilege) Reset()                    { *m = PluginPrivilege{} }
-func (m *PluginPrivilege) String() string            { return proto.CompactTextString(m) }
-func (*PluginPrivilege) ProtoMessage()               {}
-func (*PluginPrivilege) Descriptor() ([]byte, []int) { return fileDescriptorPlugin, []int{1} }
+func (m *PluginPrivilege) Reset()         { *m = PluginPrivilege{} }
+func (m *PluginPrivilege) String() string { return proto.CompactTextString(m) }
+func (*PluginPrivilege) ProtoMessage()    {}
+func (*PluginPrivilege) Descriptor() ([]byte, []int) {
+	return fileDescriptor_22a625af4bc1cc87, []int{1}
+}
+func (m *PluginPrivilege) XXX_Unmarshal(b []byte) error {
+	return m.Unmarshal(b)
+}
+func (m *PluginPrivilege) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	if deterministic {
+		return xxx_messageInfo_PluginPrivilege.Marshal(b, m, deterministic)
+	} else {
+		b = b[:cap(b)]
+		n, err := m.MarshalToSizedBuffer(b)
+		if err != nil {
+			return nil, err
+		}
+		return b[:n], nil
+	}
+}
+func (m *PluginPrivilege) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_PluginPrivilege.Merge(m, src)
+}
+func (m *PluginPrivilege) XXX_Size() int {
+	return m.Size()
+}
+func (m *PluginPrivilege) XXX_DiscardUnknown() {
+	xxx_messageInfo_PluginPrivilege.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_PluginPrivilege proto.InternalMessageInfo
 
 func (m *PluginPrivilege) GetName() string {
 	if m != nil {
@@ -118,10 +166,32 @@ func init() {
 	proto.RegisterType((*PluginSpec)(nil), "PluginSpec")
 	proto.RegisterType((*PluginPrivilege)(nil), "PluginPrivilege")
 }
+
+func init() { proto.RegisterFile("plugin.proto", fileDescriptor_22a625af4bc1cc87) }
+
+var fileDescriptor_22a625af4bc1cc87 = []byte{
+	// 225 bytes of a gzipped FileDescriptorProto
+	0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0xff, 0xe2, 0xe2, 0x29, 0xc8, 0x29, 0x4d,
+	0xcf, 0xcc, 0xd3, 0x2b, 0x28, 0xca, 0x2f, 0xc9, 0x57, 0x9a, 0xc1, 0xc8, 0xc5, 0x15, 0x00, 0x16,
+	0x08, 0x2e, 0x48, 0x4d, 0x16, 0x12, 0xe2, 0x62, 0xc9, 0x4b, 0xcc, 0x4d, 0x95, 0x60, 0x54, 0x60,
+	0xd4, 0xe0, 0x0c, 0x02, 0xb3, 0x85, 0xc4, 0xb8, 0xd8, 0x8a, 0x52, 0x73, 0xf3, 0x4b, 0x52, 0x25,
+	0x98, 0xc0, 0xa2, 0x50, 0x9e, 0x90, 0x01, 0x17, 0x57, 0x41, 0x51, 0x66, 0x59, 0x66, 0x4e, 0x6a,
+	0x7a, 0x6a, 0xb1, 0x04, 0xb3, 0x02, 0xb3, 0x06, 0xb7, 0x91, 0x80, 0x1e, 0xc4, 0xb0, 0x00, 0x98,
+	0x44, 0x10, 0x92, 0x1a, 0x21, 0x29, 0x2e, 0x8e, 0x94, 0xcc, 0xe2, 0xc4, 0xa4, 0x9c, 0xd4, 0x14,
+	0x09, 0x16, 0x05, 0x46, 0x0d, 0x8e, 0x20, 0x38, 0x5f, 0x48, 0x80, 0x8b, 0x39, 0x35, 0xaf, 0x4c,
+	0x82, 0x55, 0x81, 0x59, 0x83, 0x33, 0x08, 0xc4, 0x54, 0x8a, 0xe5, 0xe2, 0x47, 0x33, 0x0c, 0xab,
+	0xf3, 0x14, 0xb8, 0xb8, 0x53, 0x52, 0x8b, 0x93, 0x8b, 0x32, 0x0b, 0x4a, 0x32, 0xf3, 0xf3, 0xa0,
+	0x6e, 0x44, 0x16, 0x12, 0x12, 0xe1, 0x62, 0x2d, 0x4b, 0xcc, 0x29, 0x4d, 0x05, 0xbb, 0x91, 0x33,
+	0x08, 0xc2, 0x71, 0x92, 0x38, 0xf1, 0x48, 0x8e, 0xf1, 0xc2, 0x23, 0x39, 0xc6, 0x07, 0x8f, 0xe4,
+	0x18, 0x27, 0x3c, 0x96, 0x63, 0xb8, 0xf0, 0x58, 0x8e, 0xe1, 0xc6, 0x63, 0x39, 0x86, 0x24, 0x36,
+	0x70, 0xd0, 0x18, 0x03, 0x02, 0x00, 0x00, 0xff, 0xff, 0x37, 0xea, 0xe2, 0xca, 0x2a, 0x01, 0x00,
+	0x00,
+}
+
 func (m *PluginSpec) Marshal() (dAtA []byte, err error) {
 	size := m.Size()
 	dAtA = make([]byte, size)
-	n, err := m.MarshalTo(dAtA)
+	n, err := m.MarshalToSizedBuffer(dAtA[:size])
 	if err != nil {
 		return nil, err
 	}
@@ -129,66 +199,69 @@ func (m *PluginSpec) Marshal() (dAtA []byte, err error) {
 }
 
 func (m *PluginSpec) MarshalTo(dAtA []byte) (int, error) {
-	var i int
+	size := m.Size()
+	return m.MarshalToSizedBuffer(dAtA[:size])
+}
+
+func (m *PluginSpec) MarshalToSizedBuffer(dAtA []byte) (int, error) {
+	i := len(dAtA)
 	_ = i
 	var l int
 	_ = l
-	if len(m.Name) > 0 {
-		dAtA[i] = 0xa
-		i++
-		i = encodeVarintPlugin(dAtA, i, uint64(len(m.Name)))
-		i += copy(dAtA[i:], m.Name)
-	}
-	if len(m.Remote) > 0 {
-		dAtA[i] = 0x12
-		i++
-		i = encodeVarintPlugin(dAtA, i, uint64(len(m.Remote)))
-		i += copy(dAtA[i:], m.Remote)
-	}
-	if len(m.Privileges) > 0 {
-		for _, msg := range m.Privileges {
-			dAtA[i] = 0x1a
-			i++
-			i = encodeVarintPlugin(dAtA, i, uint64(msg.Size()))
-			n, err := msg.MarshalTo(dAtA[i:])
-			if err != nil {
-				return 0, err
-			}
-			i += n
+	if len(m.Env) > 0 {
+		for iNdEx := len(m.Env) - 1; iNdEx >= 0; iNdEx-- {
+			i -= len(m.Env[iNdEx])
+			copy(dAtA[i:], m.Env[iNdEx])
+			i = encodeVarintPlugin(dAtA, i, uint64(len(m.Env[iNdEx])))
+			i--
+			dAtA[i] = 0x2a
 		}
 	}
 	if m.Disabled {
-		dAtA[i] = 0x20
-		i++
+		i--
 		if m.Disabled {
 			dAtA[i] = 1
 		} else {
 			dAtA[i] = 0
 		}
-		i++
+		i--
+		dAtA[i] = 0x20
 	}
-	if len(m.Env) > 0 {
-		for _, s := range m.Env {
-			dAtA[i] = 0x2a
-			i++
-			l = len(s)
-			for l >= 1<<7 {
-				dAtA[i] = uint8(uint64(l)&0x7f | 0x80)
-				l >>= 7
-				i++
-			}
-			dAtA[i] = uint8(l)
-			i++
-			i += copy(dAtA[i:], s)
+	if len(m.Privileges) > 0 {
+		for iNdEx := len(m.Privileges) - 1; iNdEx >= 0; iNdEx-- {
+			{
+				size, err := m.Privileges[iNdEx].MarshalToSizedBuffer(dAtA[:i])
+				if err != nil {
+					return 0, err
+				}
+				i -= size
+				i = encodeVarintPlugin(dAtA, i, uint64(size))
+			}
+			i--
+			dAtA[i] = 0x1a
 		}
 	}
-	return i, nil
+	if len(m.Remote) > 0 {
+		i -= len(m.Remote)
+		copy(dAtA[i:], m.Remote)
+		i = encodeVarintPlugin(dAtA, i, uint64(len(m.Remote)))
+		i--
+		dAtA[i] = 0x12
+	}
+	if len(m.Name) > 0 {
+		i -= len(m.Name)
+		copy(dAtA[i:], m.Name)
+		i = encodeVarintPlugin(dAtA, i, uint64(len(m.Name)))
+		i--
+		dAtA[i] = 0xa
+	}
+	return len(dAtA) - i, nil
 }
 
 func (m *PluginPrivilege) Marshal() (dAtA []byte, err error) {
 	size := m.Size()
 	dAtA = make([]byte, size)
-	n, err := m.MarshalTo(dAtA)
+	n, err := m.MarshalToSizedBuffer(dAtA[:size])
 	if err != nil {
 		return nil, err
 	}
@@ -196,50 +269,56 @@ func (m *PluginPrivilege) Marshal() (dAtA []byte, err error) {
 }
 
 func (m *PluginPrivilege) MarshalTo(dAtA []byte) (int, error) {
-	var i int
+	size := m.Size()
+	return m.MarshalToSizedBuffer(dAtA[:size])
+}
+
+func (m *PluginPrivilege) MarshalToSizedBuffer(dAtA []byte) (int, error) {
+	i := len(dAtA)
 	_ = i
 	var l int
 	_ = l
-	if len(m.Name) > 0 {
-		dAtA[i] = 0xa
-		i++
-		i = encodeVarintPlugin(dAtA, i, uint64(len(m.Name)))
-		i += copy(dAtA[i:], m.Name)
+	if len(m.Value) > 0 {
+		for iNdEx := len(m.Value) - 1; iNdEx >= 0; iNdEx-- {
+			i -= len(m.Value[iNdEx])
+			copy(dAtA[i:], m.Value[iNdEx])
+			i = encodeVarintPlugin(dAtA, i, uint64(len(m.Value[iNdEx])))
+			i--
+			dAtA[i] = 0x1a
+		}
 	}
 	if len(m.Description) > 0 {
-		dAtA[i] = 0x12
-		i++
+		i -= len(m.Description)
+		copy(dAtA[i:], m.Description)
 		i = encodeVarintPlugin(dAtA, i, uint64(len(m.Description)))
-		i += copy(dAtA[i:], m.Description)
+		i--
+		dAtA[i] = 0x12
 	}
-	if len(m.Value) > 0 {
-		for _, s := range m.Value {
-			dAtA[i] = 0x1a
-			i++
-			l = len(s)
-			for l >= 1<<7 {
-				dAtA[i] = uint8(uint64(l)&0x7f | 0x80)
-				l >>= 7
-				i++
-			}
-			dAtA[i] = uint8(l)
-			i++
-			i += copy(dAtA[i:], s)
-		}
+	if len(m.Name) > 0 {
+		i -= len(m.Name)
+		copy(dAtA[i:], m.Name)
+		i = encodeVarintPlugin(dAtA, i, uint64(len(m.Name)))
+		i--
+		dAtA[i] = 0xa
 	}
-	return i, nil
+	return len(dAtA) - i, nil
 }
 
 func encodeVarintPlugin(dAtA []byte, offset int, v uint64) int {
+	offset -= sovPlugin(v)
+	base := offset
 	for v >= 1<<7 {
 		dAtA[offset] = uint8(v&0x7f | 0x80)
 		v >>= 7
 		offset++
 	}
 	dAtA[offset] = uint8(v)
-	return offset + 1
+	return base
 }
 func (m *PluginSpec) Size() (n int) {
+	if m == nil {
+		return 0
+	}
 	var l int
 	_ = l
 	l = len(m.Name)
@@ -269,6 +348,9 @@ func (m *PluginSpec) Size() (n int) {
 }
 
 func (m *PluginPrivilege) Size() (n int) {
+	if m == nil {
+		return 0
+	}
 	var l int
 	_ = l
 	l = len(m.Name)
@@ -289,14 +371,7 @@ func (m *PluginPrivilege) Size() (n int) {
 }
 
 func sovPlugin(x uint64) (n int) {
-	for {
-		n++
-		x >>= 7
-		if x == 0 {
-			break
-		}
-	}
-	return n
+	return (math_bits.Len64(x|1) + 6) / 7
 }
 func sozPlugin(x uint64) (n int) {
 	return sovPlugin(uint64((x << 1) ^ uint64((int64(x) >> 63))))
@@ -316,7 +391,7 @@ func (m *PluginSpec) Unmarshal(dAtA []byte) error {
 			}
 			b := dAtA[iNdEx]
 			iNdEx++
-			wire |= (uint64(b) & 0x7F) << shift
+			wire |= uint64(b&0x7F) << shift
 			if b < 0x80 {
 				break
 			}
@@ -344,7 +419,7 @@ func (m *PluginSpec) Unmarshal(dAtA []byte) error {
 				}
 				b := dAtA[iNdEx]
 				iNdEx++
-				stringLen |= (uint64(b) & 0x7F) << shift
+				stringLen |= uint64(b&0x7F) << shift
 				if b < 0x80 {
 					break
 				}
@@ -354,6 +429,9 @@ func (m *PluginSpec) Unmarshal(dAtA []byte) error {
 				return ErrInvalidLengthPlugin
 			}
 			postIndex := iNdEx + intStringLen
+			if postIndex < 0 {
+				return ErrInvalidLengthPlugin
+			}
 			if postIndex > l {
 				return io.ErrUnexpectedEOF
 			}
@@ -373,7 +451,7 @@ func (m *PluginSpec) Unmarshal(dAtA []byte) error {
 				}
 				b := dAtA[iNdEx]
 				iNdEx++
-				stringLen |= (uint64(b) & 0x7F) << shift
+				stringLen |= uint64(b&0x7F) << shift
 				if b < 0x80 {
 					break
 				}
@@ -383,6 +461,9 @@ func (m *PluginSpec) Unmarshal(dAtA []byte) error {
 				return ErrInvalidLengthPlugin
 			}
 			postIndex := iNdEx + intStringLen
+			if postIndex < 0 {
+				return ErrInvalidLengthPlugin
+			}
 			if postIndex > l {
 				return io.ErrUnexpectedEOF
 			}
@@ -402,7 +483,7 @@ func (m *PluginSpec) Unmarshal(dAtA []byte) error {
 				}
 				b := dAtA[iNdEx]
 				iNdEx++
-				msglen |= (int(b) & 0x7F) << shift
+				msglen |= int(b&0x7F) << shift
 				if b < 0x80 {
 					break
 				}
@@ -411,6 +492,9 @@ func (m *PluginSpec) Unmarshal(dAtA []byte) error {
 				return ErrInvalidLengthPlugin
 			}
 			postIndex := iNdEx + msglen
+			if postIndex < 0 {
+				return ErrInvalidLengthPlugin
+			}
 			if postIndex > l {
 				return io.ErrUnexpectedEOF
 			}
@@ -433,7 +517,7 @@ func (m *PluginSpec) Unmarshal(dAtA []byte) error {
 				}
 				b := dAtA[iNdEx]
 				iNdEx++
-				v |= (int(b) & 0x7F) << shift
+				v |= int(b&0x7F) << shift
 				if b < 0x80 {
 					break
 				}
@@ -453,7 +537,7 @@ func (m *PluginSpec) Unmarshal(dAtA []byte) error {
 				}
 				b := dAtA[iNdEx]
 				iNdEx++
-				stringLen |= (uint64(b) & 0x7F) << shift
+				stringLen |= uint64(b&0x7F) << shift
 				if b < 0x80 {
 					break
 				}
@@ -463,6 +547,9 @@ func (m *PluginSpec) Unmarshal(dAtA []byte) error {
 				return ErrInvalidLengthPlugin
 			}
 			postIndex := iNdEx + intStringLen
+			if postIndex < 0 {
+				return ErrInvalidLengthPlugin
+			}
 			if postIndex > l {
 				return io.ErrUnexpectedEOF
 			}
@@ -474,7 +561,7 @@ func (m *PluginSpec) Unmarshal(dAtA []byte) error {
 			if err != nil {
 				return err
 			}
-			if skippy < 0 {
+			if (skippy < 0) || (iNdEx+skippy) < 0 {
 				return ErrInvalidLengthPlugin
 			}
 			if (iNdEx + skippy) > l {
@@ -504,7 +591,7 @@ func (m *PluginPrivilege) Unmarshal(dAtA []byte) error {
 			}
 			b := dAtA[iNdEx]
 			iNdEx++
-			wire |= (uint64(b) & 0x7F) << shift
+			wire |= uint64(b&0x7F) << shift
 			if b < 0x80 {
 				break
 			}
@@ -532,7 +619,7 @@ func (m *PluginPrivilege) Unmarshal(dAtA []byte) error {
 				}
 				b := dAtA[iNdEx]
 				iNdEx++
-				stringLen |= (uint64(b) & 0x7F) << shift
+				stringLen |= uint64(b&0x7F) << shift
 				if b < 0x80 {
 					break
 				}
@@ -542,6 +629,9 @@ func (m *PluginPrivilege) Unmarshal(dAtA []byte) error {
 				return ErrInvalidLengthPlugin
 			}
 			postIndex := iNdEx + intStringLen
+			if postIndex < 0 {
+				return ErrInvalidLengthPlugin
+			}
 			if postIndex > l {
 				return io.ErrUnexpectedEOF
 			}
@@ -561,7 +651,7 @@ func (m *PluginPrivilege) Unmarshal(dAtA []byte) error {
 				}
 				b := dAtA[iNdEx]
 				iNdEx++
-				stringLen |= (uint64(b) & 0x7F) << shift
+				stringLen |= uint64(b&0x7F) << shift
 				if b < 0x80 {
 					break
 				}
@@ -571,6 +661,9 @@ func (m *PluginPrivilege) Unmarshal(dAtA []byte) error {
 				return ErrInvalidLengthPlugin
 			}
 			postIndex := iNdEx + intStringLen
+			if postIndex < 0 {
+				return ErrInvalidLengthPlugin
+			}
 			if postIndex > l {
 				return io.ErrUnexpectedEOF
 			}
@@ -590,7 +683,7 @@ func (m *PluginPrivilege) Unmarshal(dAtA []byte) error {
 				}
 				b := dAtA[iNdEx]
 				iNdEx++
-				stringLen |= (uint64(b) & 0x7F) << shift
+				stringLen |= uint64(b&0x7F) << shift
 				if b < 0x80 {
 					break
 				}
@@ -600,6 +693,9 @@ func (m *PluginPrivilege) Unmarshal(dAtA []byte) error {
 				return ErrInvalidLengthPlugin
 			}
 			postIndex := iNdEx + intStringLen
+			if postIndex < 0 {
+				return ErrInvalidLengthPlugin
+			}
 			if postIndex > l {
 				return io.ErrUnexpectedEOF
 			}
@@ -611,7 +707,7 @@ func (m *PluginPrivilege) Unmarshal(dAtA []byte) error {
 			if err != nil {
 				return err
 			}
-			if skippy < 0 {
+			if (skippy < 0) || (iNdEx+skippy) < 0 {
 				return ErrInvalidLengthPlugin
 			}
 			if (iNdEx + skippy) > l {
@@ -629,6 +725,7 @@ func (m *PluginPrivilege) Unmarshal(dAtA []byte) error {
 func skipPlugin(dAtA []byte) (n int, err error) {
 	l := len(dAtA)
 	iNdEx := 0
+	depth := 0
 	for iNdEx < l {
 		var wire uint64
 		for shift := uint(0); ; shift += 7 {
@@ -660,10 +757,8 @@ func skipPlugin(dAtA []byte) (n int, err error) {
 					break
 				}
 			}
-			return iNdEx, nil
 		case 1:
 			iNdEx += 8
-			return iNdEx, nil
 		case 2:
 			var length int
 			for shift := uint(0); ; shift += 7 {
@@ -680,75 +775,34 @@ func skipPlugin(dAtA []byte) (n int, err error) {
 					break
 				}
 			}
-			iNdEx += length
 			if length < 0 {
 				return 0, ErrInvalidLengthPlugin
 			}
-			return iNdEx, nil
+			iNdEx += length
 		case 3:
-			for {
-				var innerWire uint64
-				var start int = iNdEx
-				for shift := uint(0); ; shift += 7 {
-					if shift >= 64 {
-						return 0, ErrIntOverflowPlugin
-					}
-					if iNdEx >= l {
-						return 0, io.ErrUnexpectedEOF
-					}
-					b := dAtA[iNdEx]
-					iNdEx++
-					innerWire |= (uint64(b) & 0x7F) << shift
-					if b < 0x80 {
-						break
-					}
-				}
-				innerWireType := int(innerWire & 0x7)
-				if innerWireType == 4 {
-					break
-				}
-				next, err := skipPlugin(dAtA[start:])
-				if err != nil {
-					return 0, err
-				}
-				iNdEx = start + next
-			}
-			return iNdEx, nil
+			depth++
 		case 4:
-			return iNdEx, nil
+			if depth == 0 {
+				return 0, ErrUnexpectedEndOfGroupPlugin
+			}
+			depth--
 		case 5:
 			iNdEx += 4
-			return iNdEx, nil
 		default:
 			return 0, fmt.Errorf("proto: illegal wireType %d", wireType)
 		}
+		if iNdEx < 0 {
+			return 0, ErrInvalidLengthPlugin
+		}
+		if depth == 0 {
+			return iNdEx, nil
+		}
 	}
-	panic("unreachable")
+	return 0, io.ErrUnexpectedEOF
 }
 
 var (
-	ErrInvalidLengthPlugin = fmt.Errorf("proto: negative length found during unmarshaling")
-	ErrIntOverflowPlugin   = fmt.Errorf("proto: integer overflow")
+	ErrInvalidLengthPlugin        = fmt.Errorf("proto: negative length found during unmarshaling")
+	ErrIntOverflowPlugin          = fmt.Errorf("proto: integer overflow")
+	ErrUnexpectedEndOfGroupPlugin = fmt.Errorf("proto: unexpected end of group")
 )
-
-func init() { proto.RegisterFile("plugin.proto", fileDescriptorPlugin) }
-
-var fileDescriptorPlugin = []byte{
-	// 256 bytes of a gzipped FileDescriptorProto
-	0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0xff, 0x6c, 0x90, 0x4d, 0x4b, 0xc3, 0x30,
-	0x18, 0xc7, 0x89, 0xdd, 0xc6, 0xfa, 0x4c, 0x70, 0x04, 0x91, 0xe2, 0xa1, 0x94, 0x9d, 0x7a, 0x6a,
-	0x45, 0x2f, 0x82, 0x37, 0x0f, 0x9e, 0x47, 0xbc, 0x09, 0x1e, 0xd2, 0xf6, 0xa1, 0x06, 0x9b, 0x17,
-	0x92, 0xb4, 0xe2, 0x37, 0xf1, 0x23, 0x79, 0xf4, 0x23, 0x48, 0x3f, 0x89, 0x98, 0x75, 0x32, 0x64,
-	0xa7, 0xff, 0x4b, 0xc2, 0x9f, 0x1f, 0x0f, 0x9c, 0x9a, 0xae, 0x6f, 0x85, 0x2a, 0x8c, 0xd5, 0x5e,
-	0x6f, 0x3e, 0x08, 0xc0, 0x36, 0x14, 0x8f, 0x06, 0x6b, 0x4a, 0x61, 0xa6, 0xb8, 0xc4, 0x84, 0x64,
-	0x24, 0x8f, 0x59, 0xf0, 0xf4, 0x02, 0x16, 0x16, 0xa5, 0xf6, 0x98, 0x9c, 0x84, 0x76, 0x4a, 0xf4,
-	0x0a, 0xc0, 0x58, 0x31, 0x88, 0x0e, 0x5b, 0x74, 0x49, 0x94, 0x45, 0xf9, 0xea, 0x7a, 0x5d, 0xec,
-	0xc6, 0xb6, 0xfb, 0x07, 0x76, 0xf0, 0x87, 0x5e, 0xc2, 0xb2, 0x11, 0x8e, 0x57, 0x1d, 0x36, 0xc9,
-	0x2c, 0x23, 0xf9, 0x92, 0xfd, 0x65, 0xba, 0x86, 0x08, 0xd5, 0x90, 0xcc, 0xb3, 0x28, 0x8f, 0xd9,
-	0xaf, 0xdd, 0x3c, 0xc3, 0xd9, 0xbf, 0xb1, 0xa3, 0x78, 0x19, 0xac, 0x1a, 0x74, 0xb5, 0x15, 0xc6,
-	0x0b, 0xad, 0x26, 0xc6, 0xc3, 0x8a, 0x9e, 0xc3, 0x7c, 0xe0, 0x5d, 0x8f, 0x81, 0x31, 0x66, 0xbb,
-	0x70, 0xff, 0xf0, 0x39, 0xa6, 0xe4, 0x6b, 0x4c, 0xc9, 0xf7, 0x98, 0x92, 0xa7, 0xdb, 0x56, 0xf8,
-	0x97, 0xbe, 0x2a, 0x6a, 0x2d, 0xcb, 0x46, 0xd7, 0xaf, 0x68, 0xf7, 0xc2, 0x8d, 0x28, 0xfd, 0xbb,
-	0x41, 0x57, 0xba, 0x37, 0x6e, 0x65, 0x69, 0x7b, 0xe5, 0x85, 0xc4, 0xbb, 0x49, 0xab, 0x45, 0x38,
-	0xe4, 0xcd, 0x4f, 0x00, 0x00, 0x00, 0xff, 0xff, 0x99, 0xa8, 0xd9, 0x9b, 0x58, 0x01, 0x00, 0x00,
-}
diff --git a/vendor/github.com/docker/docker/api/types/swarm/runtime/plugin.proto b/vendor/github.com/docker/docker/api/types/swarm/runtime/plugin.proto
index 9ef169046b4..e311b36ba2c 100644
--- a/vendor/github.com/docker/docker/api/types/swarm/runtime/plugin.proto
+++ b/vendor/github.com/docker/docker/api/types/swarm/runtime/plugin.proto
@@ -1,7 +1,5 @@
 syntax = "proto3";
 
-option go_package = "github.com/docker/docker/api/types/swarm/runtime;runtime";
-
 // PluginSpec defines the base payload which clients can specify for creating
 // a service with the plugin runtime.
 message PluginSpec {
diff --git a/vendor/github.com/docker/docker/api/types/swarm/service.go b/vendor/github.com/docker/docker/api/types/swarm/service.go
index 6eb452d24d1..5b6d5ec1207 100644
--- a/vendor/github.com/docker/docker/api/types/swarm/service.go
+++ b/vendor/github.com/docker/docker/api/types/swarm/service.go
@@ -34,9 +34,9 @@ type ServiceSpec struct {
 	UpdateConfig   *UpdateConfig `json:",omitempty"`
 	RollbackConfig *UpdateConfig `json:",omitempty"`
 
-	// Networks field in ServiceSpec is deprecated. The
-	// same field in TaskSpec should be used instead.
-	// This field will be removed in a future release.
+	// Networks specifies which networks the service should attach to.
+	//
+	// Deprecated: This field is deprecated since v1.44. The Networks field in TaskSpec should be used instead.
 	Networks     []NetworkAttachmentConfig `json:",omitempty"`
 	EndpointSpec *EndpointSpec             `json:",omitempty"`
 }
diff --git a/vendor/github.com/docker/docker/api/types/swarm/service_create_response.go b/vendor/github.com/docker/docker/api/types/swarm/service_create_response.go
new file mode 100644
index 00000000000..9a268ff1b93
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/swarm/service_create_response.go
@@ -0,0 +1,20 @@
+package swarm
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+// ServiceCreateResponse contains the information returned to a client on the
+// creation of a new service.
+//
+// swagger:model ServiceCreateResponse
+type ServiceCreateResponse struct {
+
+	// The ID of the created service.
+	ID string `json:"ID,omitempty"`
+
+	// Optional warning message.
+	//
+	// FIXME(thaJeztah): this should have "omitempty" in the generated type.
+	//
+	Warnings []string `json:"Warnings"`
+}
diff --git a/vendor/github.com/docker/docker/api/types/service_update_response.go b/vendor/github.com/docker/docker/api/types/swarm/service_update_response.go
similarity index 95%
rename from vendor/github.com/docker/docker/api/types/service_update_response.go
rename to vendor/github.com/docker/docker/api/types/swarm/service_update_response.go
index 74ea64b1bb6..0417467dae3 100644
--- a/vendor/github.com/docker/docker/api/types/service_update_response.go
+++ b/vendor/github.com/docker/docker/api/types/swarm/service_update_response.go
@@ -1,4 +1,4 @@
-package types
+package swarm
 
 // This file was generated by the swagger tool.
 // Editing this file might prove futile when you re-run the swagger generate command
diff --git a/vendor/github.com/docker/docker/api/types/system/info.go b/vendor/github.com/docker/docker/api/types/system/info.go
new file mode 100644
index 00000000000..89d4a0098e3
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/system/info.go
@@ -0,0 +1,116 @@
+package system
+
+import (
+	"github.com/docker/docker/api/types/container"
+	"github.com/docker/docker/api/types/registry"
+	"github.com/docker/docker/api/types/swarm"
+)
+
+// Info contains response of Engine API:
+// GET "/info"
+type Info struct {
+	ID                 string
+	Containers         int
+	ContainersRunning  int
+	ContainersPaused   int
+	ContainersStopped  int
+	Images             int
+	Driver             string
+	DriverStatus       [][2]string
+	SystemStatus       [][2]string `json:",omitempty"` // SystemStatus is only propagated by the Swarm standalone API
+	Plugins            PluginsInfo
+	MemoryLimit        bool
+	SwapLimit          bool
+	KernelMemory       bool `json:",omitempty"` // Deprecated: kernel 5.4 deprecated kmem.limit_in_bytes
+	KernelMemoryTCP    bool `json:",omitempty"` // KernelMemoryTCP is not supported on cgroups v2.
+	CPUCfsPeriod       bool `json:"CpuCfsPeriod"`
+	CPUCfsQuota        bool `json:"CpuCfsQuota"`
+	CPUShares          bool
+	CPUSet             bool
+	PidsLimit          bool
+	IPv4Forwarding     bool
+	BridgeNfIptables   bool
+	BridgeNfIP6tables  bool `json:"BridgeNfIp6tables"`
+	Debug              bool
+	NFd                int
+	OomKillDisable     bool
+	NGoroutines        int
+	SystemTime         string
+	LoggingDriver      string
+	CgroupDriver       string
+	CgroupVersion      string `json:",omitempty"`
+	NEventsListener    int
+	KernelVersion      string
+	OperatingSystem    string
+	OSVersion          string
+	OSType             string
+	Architecture       string
+	IndexServerAddress string
+	RegistryConfig     *registry.ServiceConfig
+	NCPU               int
+	MemTotal           int64
+	GenericResources   []swarm.GenericResource
+	DockerRootDir      string
+	HTTPProxy          string `json:"HttpProxy"`
+	HTTPSProxy         string `json:"HttpsProxy"`
+	NoProxy            string
+	Name               string
+	Labels             []string
+	ExperimentalBuild  bool
+	ServerVersion      string
+	Runtimes           map[string]RuntimeWithStatus
+	DefaultRuntime     string
+	Swarm              swarm.Info
+	// LiveRestoreEnabled determines whether containers should be kept
+	// running when the daemon is shutdown or upon daemon start if
+	// running containers are detected
+	LiveRestoreEnabled  bool
+	Isolation           container.Isolation
+	InitBinary          string
+	ContainerdCommit    Commit
+	RuncCommit          Commit
+	InitCommit          Commit
+	SecurityOptions     []string
+	ProductLicense      string               `json:",omitempty"`
+	DefaultAddressPools []NetworkAddressPool `json:",omitempty"`
+	CDISpecDirs         []string
+
+	// Legacy API fields for older API versions.
+	legacyFields
+
+	// Warnings contains a slice of warnings that occurred  while collecting
+	// system information. These warnings are intended to be informational
+	// messages for the user, and are not intended to be parsed / used for
+	// other purposes, as they do not have a fixed format.
+	Warnings []string
+}
+
+type legacyFields struct {
+	ExecutionDriver string `json:",omitempty"` // Deprecated: deprecated since API v1.25, but returned for older versions.
+}
+
+// PluginsInfo is a temp struct holding Plugins name
+// registered with docker daemon. It is used by [Info] struct
+type PluginsInfo struct {
+	// List of Volume plugins registered
+	Volume []string
+	// List of Network plugins registered
+	Network []string
+	// List of Authorization plugins registered
+	Authorization []string
+	// List of Log plugins registered
+	Log []string
+}
+
+// Commit holds the Git-commit (SHA1) that a binary was built from, as reported
+// in the version-string of external tools, such as containerd, or runC.
+type Commit struct {
+	ID       string // ID is the actual commit ID of external tool.
+	Expected string // Expected is the commit ID of external tool expected by dockerd as set at build time.
+}
+
+// NetworkAddressPool is a temp struct used by [Info] struct.
+type NetworkAddressPool struct {
+	Base string
+	Size int
+}
diff --git a/vendor/github.com/docker/docker/api/types/system/runtime.go b/vendor/github.com/docker/docker/api/types/system/runtime.go
new file mode 100644
index 00000000000..d077295a0d3
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/system/runtime.go
@@ -0,0 +1,20 @@
+package system
+
+// Runtime describes an OCI runtime
+type Runtime struct {
+	// "Legacy" runtime configuration for runc-compatible runtimes.
+
+	Path string   `json:"path,omitempty"`
+	Args []string `json:"runtimeArgs,omitempty"`
+
+	// Shimv2 runtime configuration. Mutually exclusive with the legacy config above.
+
+	Type    string                 `json:"runtimeType,omitempty"`
+	Options map[string]interface{} `json:"options,omitempty"`
+}
+
+// RuntimeWithStatus extends [Runtime] to hold [RuntimeStatus].
+type RuntimeWithStatus struct {
+	Runtime
+	Status map[string]string `json:"status,omitempty"`
+}
diff --git a/vendor/github.com/docker/docker/api/types/system/security_opts.go b/vendor/github.com/docker/docker/api/types/system/security_opts.go
new file mode 100644
index 00000000000..edff3eb1acc
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/system/security_opts.go
@@ -0,0 +1,48 @@
+package system
+
+import (
+	"errors"
+	"fmt"
+	"strings"
+)
+
+// SecurityOpt contains the name and options of a security option
+type SecurityOpt struct {
+	Name    string
+	Options []KeyValue
+}
+
+// DecodeSecurityOptions decodes a security options string slice to a
+// type-safe [SecurityOpt].
+func DecodeSecurityOptions(opts []string) ([]SecurityOpt, error) {
+	so := []SecurityOpt{}
+	for _, opt := range opts {
+		// support output from a < 1.13 docker daemon
+		if !strings.Contains(opt, "=") {
+			so = append(so, SecurityOpt{Name: opt})
+			continue
+		}
+		secopt := SecurityOpt{}
+		for _, s := range strings.Split(opt, ",") {
+			k, v, ok := strings.Cut(s, "=")
+			if !ok {
+				return nil, fmt.Errorf("invalid security option %q", s)
+			}
+			if k == "" || v == "" {
+				return nil, errors.New("invalid empty security option")
+			}
+			if k == "name" {
+				secopt.Name = v
+				continue
+			}
+			secopt.Options = append(secopt.Options, KeyValue{Key: k, Value: v})
+		}
+		so = append(so, secopt)
+	}
+	return so, nil
+}
+
+// KeyValue holds a key/value pair.
+type KeyValue struct {
+	Key, Value string
+}
diff --git a/vendor/github.com/docker/docker/api/types/types.go b/vendor/github.com/docker/docker/api/types/types.go
index b413e020006..5c56a0cafef 100644
--- a/vendor/github.com/docker/docker/api/types/types.go
+++ b/vendor/github.com/docker/docker/api/types/types.go
@@ -1,18 +1,15 @@
 package types // import "github.com/docker/docker/api/types"
 
 import (
-	"errors"
-	"fmt"
 	"io"
 	"os"
-	"strings"
 	"time"
 
 	"github.com/docker/docker/api/types/container"
 	"github.com/docker/docker/api/types/filters"
+	"github.com/docker/docker/api/types/image"
 	"github.com/docker/docker/api/types/mount"
 	"github.com/docker/docker/api/types/network"
-	"github.com/docker/docker/api/types/registry"
 	"github.com/docker/docker/api/types/swarm"
 	"github.com/docker/docker/api/types/volume"
 	"github.com/docker/go-connections/nat"
@@ -80,6 +77,8 @@ type ImageInspect struct {
 	// Container is the ID of the container that was used to create the image.
 	//
 	// Depending on how the image was created, this field may be empty.
+	//
+	// Deprecated: this field is omitted in API v1.45, but kept for backward compatibility.
 	Container string
 
 	// ContainerConfig is an optional field containing the configuration of the
@@ -87,6 +86,8 @@ type ImageInspect struct {
 	//
 	// Previous versions of Docker builder used this field to store build cache,
 	// and it is not in active use anymore.
+	//
+	// Deprecated: this field is omitted in API v1.45, but kept for backward compatibility.
 	ContainerConfig *container.Config
 
 	// DockerVersion is the version of Docker that was used to build the image.
@@ -118,12 +119,7 @@ type ImageInspect struct {
 	// VirtualSize is the total size of the image including all layers it is
 	// composed of.
 	//
-	// In versions of Docker before v1.10, this field was calculated from
-	// the image itself and all of its parent images. Docker v1.10 and up
-	// store images self-contained, and no longer use a parent-chain, making
-	// this field an equivalent of the Size field.
-	//
-	// Deprecated: Unused in API 1.43 and up, but kept for backward compatibility with older API versions.
+	// Deprecated: this field is omitted in API v1.44, but kept for backward compatibility. Use Size instead.
 	VirtualSize int64 `json:"VirtualSize,omitempty"`
 
 	// GraphDriver holds information about the storage driver used to store the
@@ -137,13 +133,7 @@ type ImageInspect struct {
 	// Metadata of the image in the local cache.
 	//
 	// This information is local to the daemon, and not part of the image itself.
-	Metadata ImageMetadata
-}
-
-// ImageMetadata contains engine-local data about the image
-type ImageMetadata struct {
-	// LastTagTime is the date and time at which the image was last tagged.
-	LastTagTime time.Time `json:",omitempty"`
+	Metadata image.Metadata
 }
 
 // Container contains response of Engine API:
@@ -237,148 +227,6 @@ type Version struct {
 	BuildTime     string `json:",omitempty"`
 }
 
-// Commit holds the Git-commit (SHA1) that a binary was built from, as reported
-// in the version-string of external tools, such as containerd, or runC.
-type Commit struct {
-	ID       string // ID is the actual commit ID of external tool.
-	Expected string // Expected is the commit ID of external tool expected by dockerd as set at build time.
-}
-
-// Info contains response of Engine API:
-// GET "/info"
-type Info struct {
-	ID                 string
-	Containers         int
-	ContainersRunning  int
-	ContainersPaused   int
-	ContainersStopped  int
-	Images             int
-	Driver             string
-	DriverStatus       [][2]string
-	SystemStatus       [][2]string `json:",omitempty"` // SystemStatus is only propagated by the Swarm standalone API
-	Plugins            PluginsInfo
-	MemoryLimit        bool
-	SwapLimit          bool
-	KernelMemory       bool `json:",omitempty"` // Deprecated: kernel 5.4 deprecated kmem.limit_in_bytes
-	KernelMemoryTCP    bool `json:",omitempty"` // KernelMemoryTCP is not supported on cgroups v2.
-	CPUCfsPeriod       bool `json:"CpuCfsPeriod"`
-	CPUCfsQuota        bool `json:"CpuCfsQuota"`
-	CPUShares          bool
-	CPUSet             bool
-	PidsLimit          bool
-	IPv4Forwarding     bool
-	BridgeNfIptables   bool
-	BridgeNfIP6tables  bool `json:"BridgeNfIp6tables"`
-	Debug              bool
-	NFd                int
-	OomKillDisable     bool
-	NGoroutines        int
-	SystemTime         string
-	LoggingDriver      string
-	CgroupDriver       string
-	CgroupVersion      string `json:",omitempty"`
-	NEventsListener    int
-	KernelVersion      string
-	OperatingSystem    string
-	OSVersion          string
-	OSType             string
-	Architecture       string
-	IndexServerAddress string
-	RegistryConfig     *registry.ServiceConfig
-	NCPU               int
-	MemTotal           int64
-	GenericResources   []swarm.GenericResource
-	DockerRootDir      string
-	HTTPProxy          string `json:"HttpProxy"`
-	HTTPSProxy         string `json:"HttpsProxy"`
-	NoProxy            string
-	Name               string
-	Labels             []string
-	ExperimentalBuild  bool
-	ServerVersion      string
-	Runtimes           map[string]Runtime
-	DefaultRuntime     string
-	Swarm              swarm.Info
-	// LiveRestoreEnabled determines whether containers should be kept
-	// running when the daemon is shutdown or upon daemon start if
-	// running containers are detected
-	LiveRestoreEnabled  bool
-	Isolation           container.Isolation
-	InitBinary          string
-	ContainerdCommit    Commit
-	RuncCommit          Commit
-	InitCommit          Commit
-	SecurityOptions     []string
-	ProductLicense      string               `json:",omitempty"`
-	DefaultAddressPools []NetworkAddressPool `json:",omitempty"`
-
-	// Warnings contains a slice of warnings that occurred  while collecting
-	// system information. These warnings are intended to be informational
-	// messages for the user, and are not intended to be parsed / used for
-	// other purposes, as they do not have a fixed format.
-	Warnings []string
-}
-
-// KeyValue holds a key/value pair
-type KeyValue struct {
-	Key, Value string
-}
-
-// NetworkAddressPool is a temp struct used by Info struct
-type NetworkAddressPool struct {
-	Base string
-	Size int
-}
-
-// SecurityOpt contains the name and options of a security option
-type SecurityOpt struct {
-	Name    string
-	Options []KeyValue
-}
-
-// DecodeSecurityOptions decodes a security options string slice to a type safe
-// SecurityOpt
-func DecodeSecurityOptions(opts []string) ([]SecurityOpt, error) {
-	so := []SecurityOpt{}
-	for _, opt := range opts {
-		// support output from a < 1.13 docker daemon
-		if !strings.Contains(opt, "=") {
-			so = append(so, SecurityOpt{Name: opt})
-			continue
-		}
-		secopt := SecurityOpt{}
-		for _, s := range strings.Split(opt, ",") {
-			k, v, ok := strings.Cut(s, "=")
-			if !ok {
-				return nil, fmt.Errorf("invalid security option %q", s)
-			}
-			if k == "" || v == "" {
-				return nil, errors.New("invalid empty security option")
-			}
-			if k == "name" {
-				secopt.Name = v
-				continue
-			}
-			secopt.Options = append(secopt.Options, KeyValue{Key: k, Value: v})
-		}
-		so = append(so, secopt)
-	}
-	return so, nil
-}
-
-// PluginsInfo is a temp struct holding Plugins name
-// registered with docker daemon. It is used by Info struct
-type PluginsInfo struct {
-	// List of Volume plugins registered
-	Volume []string
-	// List of Network plugins registered
-	Network []string
-	// List of Authorization plugins registered
-	Authorization []string
-	// List of Log plugins registered
-	Log []string
-}
-
 // ExecStartCheck is a temp struct used by execStart
 // Config fields is part of ExecConfig in runconfig package
 type ExecStartCheck struct {
@@ -491,17 +339,27 @@ type SummaryNetworkSettings struct {
 	Networks map[string]*network.EndpointSettings
 }
 
-// NetworkSettingsBase holds basic information about networks
+// NetworkSettingsBase holds networking state for a container when inspecting it.
 type NetworkSettingsBase struct {
-	Bridge                 string      // Bridge is the Bridge name the network uses(e.g. `docker0`)
-	SandboxID              string      // SandboxID uniquely represents a container's network stack
-	HairpinMode            bool        // HairpinMode specifies if hairpin NAT should be enabled on the virtual interface
-	LinkLocalIPv6Address   string      // LinkLocalIPv6Address is an IPv6 unicast address using the link-local prefix
-	LinkLocalIPv6PrefixLen int         // LinkLocalIPv6PrefixLen is the prefix length of an IPv6 unicast address
-	Ports                  nat.PortMap // Ports is a collection of PortBinding indexed by Port
-	SandboxKey             string      // SandboxKey identifies the sandbox
-	SecondaryIPAddresses   []network.Address
-	SecondaryIPv6Addresses []network.Address
+	Bridge     string      // Bridge contains the name of the default bridge interface iff it was set through the daemon --bridge flag.
+	SandboxID  string      // SandboxID uniquely represents a container's network stack
+	SandboxKey string      // SandboxKey identifies the sandbox
+	Ports      nat.PortMap // Ports is a collection of PortBinding indexed by Port
+
+	// HairpinMode specifies if hairpin NAT should be enabled on the virtual interface
+	//
+	// Deprecated: This field is never set and will be removed in a future release.
+	HairpinMode bool
+	// LinkLocalIPv6Address is an IPv6 unicast address using the link-local prefix
+	//
+	// Deprecated: This field is never set and will be removed in a future release.
+	LinkLocalIPv6Address string
+	// LinkLocalIPv6PrefixLen is the prefix length of an IPv6 unicast address
+	//
+	// Deprecated: This field is never set and will be removed in a future release.
+	LinkLocalIPv6PrefixLen int
+	SecondaryIPAddresses   []network.Address // Deprecated: This field is never set and will be removed in a future release.
+	SecondaryIPv6Addresses []network.Address // Deprecated: This field is never set and will be removed in a future release.
 }
 
 // DefaultNetworkSettings holds network information
@@ -594,14 +452,9 @@ type EndpointResource struct {
 
 // NetworkCreate is the expected body of the "create network" http request message
 type NetworkCreate struct {
-	// Check for networks with duplicate names.
-	// Network is primarily keyed based on a random ID and not on the name.
-	// Network name is strictly a user-friendly alias to the network
-	// which is uniquely identified using ID.
-	// And there is no guaranteed way to check for duplicates.
-	// Option CheckDuplicate is there to provide a best effort checking of any networks
-	// which has the same name but it is not guaranteed to catch all name collisions.
-	CheckDuplicate bool
+	// Deprecated: CheckDuplicate is deprecated since API v1.44, but it defaults to true when sent by the client
+	// package to older daemons.
+	CheckDuplicate bool `json:",omitempty"`
 	Driver         string
 	Scope          string
 	EnableIPv6     bool
@@ -645,33 +498,6 @@ type NetworkInspectOptions struct {
 	Verbose bool
 }
 
-// Checkpoint represents the details of a checkpoint
-type Checkpoint struct {
-	Name string // Name is the name of the checkpoint
-}
-
-// Runtime describes an OCI runtime
-type Runtime struct {
-	// "Legacy" runtime configuration for runc-compatible runtimes.
-
-	Path string   `json:"path,omitempty"`
-	Args []string `json:"runtimeArgs,omitempty"`
-
-	// Shimv2 runtime configuration. Mutually exclusive with the legacy config above.
-
-	Type    string                 `json:"runtimeType,omitempty"`
-	Options map[string]interface{} `json:"options,omitempty"`
-
-	// This is exposed here only for internal use
-	ShimConfig *ShimConfig `json:"-"`
-}
-
-// ShimConfig is used by runtime to configure containerd shims
-type ShimConfig struct {
-	Binary string
-	Opts   interface{}
-}
-
 // DiskUsageObject represents an object type used for disk usage query filtering.
 type DiskUsageObject string
 
@@ -697,7 +523,7 @@ type DiskUsageOptions struct {
 // GET "/system/df"
 type DiskUsage struct {
 	LayersSize  int64
-	Images      []*ImageSummary
+	Images      []*image.Summary
 	Containers  []*Container
 	Volumes     []*volume.Volume
 	BuildCache  []*BuildCache
@@ -721,7 +547,7 @@ type VolumesPruneReport struct {
 // ImagesPruneReport contains the response for Engine API:
 // POST "/images/prune"
 type ImagesPruneReport struct {
-	ImagesDeleted  []ImageDeleteResponseItem
+	ImagesDeleted  []image.DeleteResponse
 	SpaceReclaimed uint64
 }
 
diff --git a/vendor/github.com/docker/docker/api/types/types_deprecated.go b/vendor/github.com/docker/docker/api/types/types_deprecated.go
new file mode 100644
index 00000000000..e332a7bb6d9
--- /dev/null
+++ b/vendor/github.com/docker/docker/api/types/types_deprecated.go
@@ -0,0 +1,138 @@
+package types
+
+import (
+	"github.com/docker/docker/api/types/checkpoint"
+	"github.com/docker/docker/api/types/container"
+	"github.com/docker/docker/api/types/image"
+	"github.com/docker/docker/api/types/swarm"
+	"github.com/docker/docker/api/types/system"
+)
+
+// CheckpointCreateOptions holds parameters to create a checkpoint from a container.
+//
+// Deprecated: use [checkpoint.CreateOptions].
+type CheckpointCreateOptions = checkpoint.CreateOptions
+
+// CheckpointListOptions holds parameters to list checkpoints for a container
+//
+// Deprecated: use [checkpoint.ListOptions].
+type CheckpointListOptions = checkpoint.ListOptions
+
+// CheckpointDeleteOptions holds parameters to delete a checkpoint from a container
+//
+// Deprecated: use [checkpoint.DeleteOptions].
+type CheckpointDeleteOptions = checkpoint.DeleteOptions
+
+// Checkpoint represents the details of a checkpoint when listing endpoints.
+//
+// Deprecated: use [checkpoint.Summary].
+type Checkpoint = checkpoint.Summary
+
+// Info contains response of Engine API:
+// GET "/info"
+//
+// Deprecated: use [system.Info].
+type Info = system.Info
+
+// Commit holds the Git-commit (SHA1) that a binary was built from, as reported
+// in the version-string of external tools, such as containerd, or runC.
+//
+// Deprecated: use [system.Commit].
+type Commit = system.Commit
+
+// PluginsInfo is a temp struct holding Plugins name
+// registered with docker daemon. It is used by [system.Info] struct
+//
+// Deprecated: use [system.PluginsInfo].
+type PluginsInfo = system.PluginsInfo
+
+// NetworkAddressPool is a temp struct used by [system.Info] struct.
+//
+// Deprecated: use [system.NetworkAddressPool].
+type NetworkAddressPool = system.NetworkAddressPool
+
+// Runtime describes an OCI runtime.
+//
+// Deprecated: use [system.Runtime].
+type Runtime = system.Runtime
+
+// SecurityOpt contains the name and options of a security option.
+//
+// Deprecated: use [system.SecurityOpt].
+type SecurityOpt = system.SecurityOpt
+
+// KeyValue holds a key/value pair.
+//
+// Deprecated: use [system.KeyValue].
+type KeyValue = system.KeyValue
+
+// ImageDeleteResponseItem image delete response item.
+//
+// Deprecated: use [image.DeleteResponse].
+type ImageDeleteResponseItem = image.DeleteResponse
+
+// ImageSummary image summary.
+//
+// Deprecated: use [image.Summary].
+type ImageSummary = image.Summary
+
+// ImageMetadata contains engine-local data about the image.
+//
+// Deprecated: use [image.Metadata].
+type ImageMetadata = image.Metadata
+
+// ServiceCreateResponse contains the information returned to a client
+// on the creation of a new service.
+//
+// Deprecated: use [swarm.ServiceCreateResponse].
+type ServiceCreateResponse = swarm.ServiceCreateResponse
+
+// ServiceUpdateResponse service update response.
+//
+// Deprecated: use [swarm.ServiceUpdateResponse].
+type ServiceUpdateResponse = swarm.ServiceUpdateResponse
+
+// ContainerStartOptions holds parameters to start containers.
+//
+// Deprecated: use [container.StartOptions].
+type ContainerStartOptions = container.StartOptions
+
+// ResizeOptions holds parameters to resize a TTY.
+// It can be used to resize container TTYs and
+// exec process TTYs too.
+//
+// Deprecated: use [container.ResizeOptions].
+type ResizeOptions = container.ResizeOptions
+
+// ContainerAttachOptions holds parameters to attach to a container.
+//
+// Deprecated: use [container.AttachOptions].
+type ContainerAttachOptions = container.AttachOptions
+
+// ContainerCommitOptions holds parameters to commit changes into a container.
+//
+// Deprecated: use [container.CommitOptions].
+type ContainerCommitOptions = container.CommitOptions
+
+// ContainerListOptions holds parameters to list containers with.
+//
+// Deprecated: use [container.ListOptions].
+type ContainerListOptions = container.ListOptions
+
+// ContainerLogsOptions holds parameters to filter logs with.
+//
+// Deprecated: use [container.LogsOptions].
+type ContainerLogsOptions = container.LogsOptions
+
+// ContainerRemoveOptions holds parameters to remove containers.
+//
+// Deprecated: use [container.RemoveOptions].
+type ContainerRemoveOptions = container.RemoveOptions
+
+// DecodeSecurityOptions decodes a security options string slice to a type safe
+// [system.SecurityOpt].
+//
+// Deprecated: use [system.DecodeSecurityOptions].
+func DecodeSecurityOptions(opts []string) ([]system.SecurityOpt, error) {
+	return system.DecodeSecurityOptions(opts)
+}
diff --git a/vendor/github.com/docker/docker/client/README.md b/vendor/github.com/docker/docker/client/README.md
index 992f18117df..f8af3ab903d 100644
--- a/vendor/github.com/docker/docker/client/README.md
+++ b/vendor/github.com/docker/docker/client/README.md
@@ -1,8 +1,10 @@
 # Go client for the Docker Engine API
 
-The `docker` command uses this package to communicate with the daemon. It can also be used by your own Go applications to do anything the command-line interface does – running containers, pulling images, managing swarms, etc.
+The `docker` command uses this package to communicate with the daemon. It can
+also be used by your own Go applications to do anything the command-line
+interface does – running containers, pulling images, managing swarms, etc.
 
-For example, to list running containers (the equivalent of `docker ps`):
+For example, to list all containers (the equivalent of `docker ps --all`):
 
 ```go
 package main
@@ -11,25 +13,26 @@ import (
 	"context"
 	"fmt"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 	"github.com/docker/docker/client"
 )
 
 func main() {
-	cli, err := client.NewClientWithOpts(client.FromEnv)
+	apiClient, err := client.NewClientWithOpts(client.FromEnv)
 	if err != nil {
 		panic(err)
 	}
+	defer apiClient.Close()
 
-	containers, err := cli.ContainerList(context.Background(), types.ContainerListOptions{})
+	containers, err := apiClient.ContainerList(context.Background(), container.ListOptions{All: true})
 	if err != nil {
 		panic(err)
 	}
 
-	for _, container := range containers {
-		fmt.Printf("%s %s\n", container.ID[:10], container.Image)
+	for _, ctr := range containers {
+		fmt.Printf("%s %s (status: %s)\n", ctr.ID, ctr.Image, ctr.Status)
 	}
 }
 ```
 
-[Full documentation is available on GoDoc.](https://godoc.org/github.com/docker/docker/client)
+[Full documentation is available on pkg.go.dev.](https://pkg.go.dev/github.com/docker/docker/client)
diff --git a/vendor/github.com/docker/docker/client/build_prune.go b/vendor/github.com/docker/docker/client/build_prune.go
index 2b6606236eb..1a830f4135f 100644
--- a/vendor/github.com/docker/docker/client/build_prune.go
+++ b/vendor/github.com/docker/docker/client/build_prune.go
@@ -13,7 +13,7 @@ import (
 
 // BuildCachePrune requests the daemon to delete unused cache data
 func (cli *Client) BuildCachePrune(ctx context.Context, opts types.BuildCachePruneOptions) (*types.BuildCachePruneReport, error) {
-	if err := cli.NewVersionError("1.31", "build prune"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.31", "build prune"); err != nil {
 		return nil, err
 	}
 
diff --git a/vendor/github.com/docker/docker/client/checkpoint_create.go b/vendor/github.com/docker/docker/client/checkpoint_create.go
index 921024fe4fb..9746d288df7 100644
--- a/vendor/github.com/docker/docker/client/checkpoint_create.go
+++ b/vendor/github.com/docker/docker/client/checkpoint_create.go
@@ -3,11 +3,11 @@ package client // import "github.com/docker/docker/client"
 import (
 	"context"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/checkpoint"
 )
 
 // CheckpointCreate creates a checkpoint from the given container with the given name
-func (cli *Client) CheckpointCreate(ctx context.Context, container string, options types.CheckpointCreateOptions) error {
+func (cli *Client) CheckpointCreate(ctx context.Context, container string, options checkpoint.CreateOptions) error {
 	resp, err := cli.post(ctx, "/containers/"+container+"/checkpoints", nil, options, nil)
 	ensureReaderClosed(resp)
 	return err
diff --git a/vendor/github.com/docker/docker/client/checkpoint_delete.go b/vendor/github.com/docker/docker/client/checkpoint_delete.go
index 54f55fa76e6..b968c2b2370 100644
--- a/vendor/github.com/docker/docker/client/checkpoint_delete.go
+++ b/vendor/github.com/docker/docker/client/checkpoint_delete.go
@@ -4,11 +4,11 @@ import (
 	"context"
 	"net/url"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/checkpoint"
 )
 
 // CheckpointDelete deletes the checkpoint with the given name from the given container
-func (cli *Client) CheckpointDelete(ctx context.Context, containerID string, options types.CheckpointDeleteOptions) error {
+func (cli *Client) CheckpointDelete(ctx context.Context, containerID string, options checkpoint.DeleteOptions) error {
 	query := url.Values{}
 	if options.CheckpointDir != "" {
 		query.Set("dir", options.CheckpointDir)
diff --git a/vendor/github.com/docker/docker/client/checkpoint_list.go b/vendor/github.com/docker/docker/client/checkpoint_list.go
index 39cfb959ff5..8feb1f3f7d7 100644
--- a/vendor/github.com/docker/docker/client/checkpoint_list.go
+++ b/vendor/github.com/docker/docker/client/checkpoint_list.go
@@ -5,12 +5,12 @@ import (
 	"encoding/json"
 	"net/url"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/checkpoint"
 )
 
 // CheckpointList returns the checkpoints of the given container in the docker host
-func (cli *Client) CheckpointList(ctx context.Context, container string, options types.CheckpointListOptions) ([]types.Checkpoint, error) {
-	var checkpoints []types.Checkpoint
+func (cli *Client) CheckpointList(ctx context.Context, container string, options checkpoint.ListOptions) ([]checkpoint.Summary, error) {
+	var checkpoints []checkpoint.Summary
 
 	query := url.Values{}
 	if options.CheckpointDir != "" {
diff --git a/vendor/github.com/docker/docker/client/client.go b/vendor/github.com/docker/docker/client/client.go
index 54fa36cca88..0b496b0fa66 100644
--- a/vendor/github.com/docker/docker/client/client.go
+++ b/vendor/github.com/docker/docker/client/client.go
@@ -19,7 +19,7 @@ For example, to list running containers (the equivalent of "docker ps"):
 		"context"
 		"fmt"
 
-		"github.com/docker/docker/api/types"
+		"github.com/docker/docker/api/types/container"
 		"github.com/docker/docker/client"
 	)
 
@@ -29,13 +29,13 @@ For example, to list running containers (the equivalent of "docker ps"):
 			panic(err)
 		}
 
-		containers, err := cli.ContainerList(context.Background(), types.ContainerListOptions{})
+		containers, err := cli.ContainerList(context.Background(), container.ListOptions{})
 		if err != nil {
 			panic(err)
 		}
 
-		for _, container := range containers {
-			fmt.Printf("%s %s\n", container.ID[:10], container.Image)
+		for _, ctr := range containers {
+			fmt.Printf("%s %s\n", ctr.ID, ctr.Image)
 		}
 	}
 */
@@ -43,17 +43,21 @@ package client // import "github.com/docker/docker/client"
 
 import (
 	"context"
+	"crypto/tls"
 	"net"
 	"net/http"
 	"net/url"
 	"path"
 	"strings"
+	"time"
 
 	"github.com/docker/docker/api"
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/versions"
 	"github.com/docker/go-connections/sockets"
 	"github.com/pkg/errors"
+	"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp"
+	"go.opentelemetry.io/otel/trace"
 )
 
 // DummyHost is a hostname used for local communication.
@@ -86,8 +90,12 @@ import (
 // [Go stdlib]: https://github.com/golang/go/blob/6244b1946bc2101b01955468f1be502dbadd6807/src/net/http/transport.go#L558-L569
 const DummyHost = "api.moby.localhost"
 
-// ErrRedirect is the error returned by checkRedirect when the request is non-GET.
-var ErrRedirect = errors.New("unexpected redirect in response")
+// fallbackAPIVersion is the version to fallback to if API-version negotiation
+// fails. This version is the highest version of the API before API-version
+// negotiation was introduced. If negotiation fails (or no API version was
+// included in the API response), we assume the API server uses the most
+// recent version before negotiation was introduced.
+const fallbackAPIVersion = "1.24"
 
 // Client is the API client that performs all operations
 // against a docker server.
@@ -106,7 +114,12 @@ type Client struct {
 	client *http.Client
 	// version of the server to talk to.
 	version string
-	// custom http headers configured by users.
+	// userAgent is the User-Agent header to use for HTTP requests. It takes
+	// precedence over User-Agent headers set in customHTTPHeaders, and other
+	// header variables. When set to an empty string, the User-Agent header
+	// is removed, and no header is sent.
+	userAgent *string
+	// custom HTTP headers configured by users.
 	customHTTPHeaders map[string]string
 	// manualOverride is set to true when the version was set by users.
 	manualOverride bool
@@ -119,22 +132,33 @@ type Client struct {
 
 	// negotiated indicates that API version negotiation took place
 	negotiated bool
+
+	tp trace.TracerProvider
+
+	// When the client transport is an *http.Transport (default) we need to do some extra things (like closing idle connections).
+	// Store the original transport as the http.Client transport will be wrapped with tracing libs.
+	baseTransport *http.Transport
 }
 
-// CheckRedirect specifies the policy for dealing with redirect responses:
-// If the request is non-GET return ErrRedirect, otherwise use the last response.
+// ErrRedirect is the error returned by checkRedirect when the request is non-GET.
+var ErrRedirect = errors.New("unexpected redirect in response")
+
+// CheckRedirect specifies the policy for dealing with redirect responses. It
+// can be set on [http.Client.CheckRedirect] to prevent HTTP redirects for
+// non-GET requests. It returns an [ErrRedirect] for non-GET request, otherwise
+// returns a [http.ErrUseLastResponse], which is special-cased by http.Client
+// to use the last response.
 //
-// Go 1.8 changes behavior for HTTP redirects (specifically 301, 307, and 308)
-// in the client. The Docker client (and by extension docker API client) can be
-// made to send a request like POST /containers//start where what would normally
-// be in the name section of the URL is empty. This triggers an HTTP 301 from
-// the daemon.
+// Go 1.8 changed behavior for HTTP redirects (specifically 301, 307, and 308)
+// in the client. The client (and by extension API client) can be made to send
+// a request like "POST /containers//start" where what would normally be in the
+// name section of the URL is empty. This triggers an HTTP 301 from the daemon.
 //
-// In go 1.8 this 301 will be converted to a GET request, and ends up getting
+// In go 1.8 this 301 is converted to a GET request, and ends up getting
 // a 404 from the daemon. This behavior change manifests in the client in that
 // before, the 301 was not followed and the client did not generate an error,
-// but now results in a message like Error response from daemon: page not found.
-func CheckRedirect(req *http.Request, via []*http.Request) error {
+// but now results in a message like "Error response from daemon: page not found".
+func CheckRedirect(_ *http.Request, via []*http.Request) error {
 	if via[0].Method == http.MethodGet {
 		return http.ErrUseLastResponse
 	}
@@ -145,11 +169,11 @@ func CheckRedirect(req *http.Request, via []*http.Request) error {
 // default API host and version. It also initializes the custom HTTP headers to
 // add to each request.
 //
-// It takes an optional list of Opt functional arguments, which are applied in
+// It takes an optional list of [Opt] functional arguments, which are applied in
 // the order they're provided, which allows modifying the defaults when creating
 // the client. For example, the following initializes a client that configures
-// itself with values from environment variables (client.FromEnv), and has
-// automatic API version negotiation enabled (client.WithAPIVersionNegotiation()).
+// itself with values from environment variables ([FromEnv]), and has automatic
+// API version negotiation enabled ([WithAPIVersionNegotiation]).
 //
 //	cli, err := client.NewClientWithOpts(
 //		client.FromEnv,
@@ -179,23 +203,43 @@ func NewClientWithOpts(ops ...Opt) (*Client, error) {
 		}
 	}
 
+	if tr, ok := c.client.Transport.(*http.Transport); ok {
+		// Store the base transport before we wrap it in tracing libs below
+		// This is used, as an example, to close idle connections when the client is closed
+		c.baseTransport = tr
+	}
+
 	if c.scheme == "" {
-		c.scheme = "http"
-
-		tlsConfig := resolveTLSConfig(c.client.Transport)
-		if tlsConfig != nil {
-			// TODO(stevvooe): This isn't really the right way to write clients in Go.
-			// `NewClient` should probably only take an `*http.Client` and work from there.
-			// Unfortunately, the model of having a host-ish/url-thingy as the connection
-			// string has us confusing protocol and transport layers. We continue doing
-			// this to avoid breaking existing clients but this should be addressed.
+		// TODO(stevvooe): This isn't really the right way to write clients in Go.
+		// `NewClient` should probably only take an `*http.Client` and work from there.
+		// Unfortunately, the model of having a host-ish/url-thingy as the connection
+		// string has us confusing protocol and transport layers. We continue doing
+		// this to avoid breaking existing clients but this should be addressed.
+		if c.tlsConfig() != nil {
 			c.scheme = "https"
+		} else {
+			c.scheme = "http"
 		}
 	}
 
+	c.client.Transport = otelhttp.NewTransport(
+		c.client.Transport,
+		otelhttp.WithTracerProvider(c.tp),
+		otelhttp.WithSpanNameFormatter(func(_ string, req *http.Request) string {
+			return req.Method + " " + req.URL.Path
+		}),
+	)
+
 	return c, nil
 }
 
+func (cli *Client) tlsConfig() *tls.Config {
+	if cli.baseTransport == nil {
+		return nil
+	}
+	return cli.baseTransport.TLSClientConfig
+}
+
 func defaultHTTPClient(hostURL *url.URL) (*http.Client, error) {
 	transport := &http.Transport{}
 	err := sockets.ConfigureTransport(transport, hostURL.Scheme, hostURL.Host)
@@ -210,19 +254,28 @@ func defaultHTTPClient(hostURL *url.URL) (*http.Client, error) {
 
 // Close the transport used by the client
 func (cli *Client) Close() error {
-	if t, ok := cli.client.Transport.(*http.Transport); ok {
-		t.CloseIdleConnections()
+	if cli.baseTransport != nil {
+		cli.baseTransport.CloseIdleConnections()
+		return nil
 	}
 	return nil
 }
 
-// getAPIPath returns the versioned request path to call the api.
-// It appends the query parameters to the path if they are not empty.
-func (cli *Client) getAPIPath(ctx context.Context, p string, query url.Values) string {
-	var apiPath string
+// checkVersion manually triggers API version negotiation (if configured).
+// This allows for version-dependent code to use the same version as will
+// be negotiated when making the actual requests, and for which cases
+// we cannot do the negotiation lazily.
+func (cli *Client) checkVersion(ctx context.Context) {
 	if cli.negotiateVersion && !cli.negotiated {
 		cli.NegotiateAPIVersion(ctx)
 	}
+}
+
+// getAPIPath returns the versioned request path to call the API.
+// It appends the query parameters to the path if they are not empty.
+func (cli *Client) getAPIPath(ctx context.Context, p string, query url.Values) string {
+	var apiPath string
+	cli.checkVersion(ctx)
 	if cli.version != "" {
 		v := strings.TrimPrefix(cli.version, "v")
 		apiPath = path.Join(cli.basePath, "/v"+v, p)
@@ -244,8 +297,8 @@ func (cli *Client) ClientVersion() string {
 // by the client, it uses the client's maximum version.
 //
 // If a manual override is in place, either through the "DOCKER_API_VERSION"
-// (EnvOverrideAPIVersion) environment variable, or if the client is initialized
-// with a fixed version (WithVersion(xx)), no negotiation is performed.
+// ([EnvOverrideAPIVersion]) environment variable, or if the client is initialized
+// with a fixed version ([WithVersion]), no negotiation is performed.
 //
 // If the API server's ping response does not contain an API version, or if the
 // client did not get a successful ping response, it assumes it is connected with
@@ -265,8 +318,8 @@ func (cli *Client) NegotiateAPIVersion(ctx context.Context) {
 // version.
 //
 // If a manual override is in place, either through the "DOCKER_API_VERSION"
-// (EnvOverrideAPIVersion) environment variable, or if the client is initialized
-// with a fixed version (WithVersion(xx)), no negotiation is performed.
+// ([EnvOverrideAPIVersion]) environment variable, or if the client is initialized
+// with a fixed version ([WithVersion]), no negotiation is performed.
 //
 // If the API server's ping response does not contain an API version, we assume
 // we are connected with an old daemon without API version negotiation support,
@@ -283,7 +336,7 @@ func (cli *Client) NegotiateAPIVersionPing(pingResponse types.Ping) {
 func (cli *Client) negotiateAPIVersionPing(pingResponse types.Ping) {
 	// default to the latest version before versioning headers existed
 	if pingResponse.APIVersion == "" {
-		pingResponse.APIVersion = "1.24"
+		pingResponse.APIVersion = fallbackAPIVersion
 	}
 
 	// if the client is not initialized with a version, start with the latest supported version
@@ -338,17 +391,40 @@ func ParseHostURL(host string) (*url.URL, error) {
 	}, nil
 }
 
+func (cli *Client) dialerFromTransport() func(context.Context, string, string) (net.Conn, error) {
+	if cli.baseTransport == nil || cli.baseTransport.DialContext == nil {
+		return nil
+	}
+
+	if cli.baseTransport.TLSClientConfig != nil {
+		// When using a tls config we don't use the configured dialer but instead a fallback dialer...
+		// Note: It seems like this should use the normal dialer and wrap the returned net.Conn in a tls.Conn
+		// I honestly don't know why it doesn't do that, but it doesn't and such a change is entirely unrelated to the change in this commit.
+		return nil
+	}
+	return cli.baseTransport.DialContext
+}
+
 // Dialer returns a dialer for a raw stream connection, with an HTTP/1.1 header,
-// that can be used for proxying the daemon connection.
+// that can be used for proxying the daemon connection. It is used by
+// ["docker dial-stdio"].
 //
-// Used by `docker dial-stdio` (docker/cli#889).
+// ["docker dial-stdio"]: https://github.com/docker/cli/pull/1014
 func (cli *Client) Dialer() func(context.Context) (net.Conn, error) {
 	return func(ctx context.Context) (net.Conn, error) {
-		if transport, ok := cli.client.Transport.(*http.Transport); ok {
-			if transport.DialContext != nil && transport.TLSClientConfig == nil {
-				return transport.DialContext(ctx, cli.proto, cli.addr)
+		if dialFn := cli.dialerFromTransport(); dialFn != nil {
+			return dialFn(ctx, cli.proto, cli.addr)
+		}
+		switch cli.proto {
+		case "unix":
+			return net.Dial(cli.proto, cli.addr)
+		case "npipe":
+			return sockets.DialPipe(cli.addr, 32*time.Second)
+		default:
+			if tlsConfig := cli.tlsConfig(); tlsConfig != nil {
+				return tls.Dial(cli.proto, cli.addr, tlsConfig)
 			}
+			return net.Dial(cli.proto, cli.addr)
 		}
-		return fallbackDial(cli.proto, cli.addr, resolveTLSConfig(cli.client.Transport))
 	}
 }
diff --git a/vendor/github.com/docker/docker/client/client_unix.go b/vendor/github.com/docker/docker/client/client_unix.go
index 319b738d3e2..9fe78ea43a6 100644
--- a/vendor/github.com/docker/docker/client/client_unix.go
+++ b/vendor/github.com/docker/docker/client/client_unix.go
@@ -1,5 +1,4 @@
 //go:build !windows
-// +build !windows
 
 package client // import "github.com/docker/docker/client"
 
diff --git a/vendor/github.com/docker/docker/client/config_create.go b/vendor/github.com/docker/docker/client/config_create.go
index f6b1881fc36..3deb4a8e2af 100644
--- a/vendor/github.com/docker/docker/client/config_create.go
+++ b/vendor/github.com/docker/docker/client/config_create.go
@@ -11,7 +11,7 @@ import (
 // ConfigCreate creates a new config.
 func (cli *Client) ConfigCreate(ctx context.Context, config swarm.ConfigSpec) (types.ConfigCreateResponse, error) {
 	var response types.ConfigCreateResponse
-	if err := cli.NewVersionError("1.30", "config create"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.30", "config create"); err != nil {
 		return response, err
 	}
 	resp, err := cli.post(ctx, "/configs/create", nil, config, nil)
diff --git a/vendor/github.com/docker/docker/client/config_inspect.go b/vendor/github.com/docker/docker/client/config_inspect.go
index 9be7882c3d7..2c6c7cb36f1 100644
--- a/vendor/github.com/docker/docker/client/config_inspect.go
+++ b/vendor/github.com/docker/docker/client/config_inspect.go
@@ -14,7 +14,7 @@ func (cli *Client) ConfigInspectWithRaw(ctx context.Context, id string) (swarm.C
 	if id == "" {
 		return swarm.Config{}, nil, objectNotFoundError{object: "config", id: id}
 	}
-	if err := cli.NewVersionError("1.30", "config inspect"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.30", "config inspect"); err != nil {
 		return swarm.Config{}, nil, err
 	}
 	resp, err := cli.get(ctx, "/configs/"+id, nil, nil)
diff --git a/vendor/github.com/docker/docker/client/config_list.go b/vendor/github.com/docker/docker/client/config_list.go
index 565acc6e273..14dd3813e35 100644
--- a/vendor/github.com/docker/docker/client/config_list.go
+++ b/vendor/github.com/docker/docker/client/config_list.go
@@ -12,7 +12,7 @@ import (
 
 // ConfigList returns the list of configs.
 func (cli *Client) ConfigList(ctx context.Context, options types.ConfigListOptions) ([]swarm.Config, error) {
-	if err := cli.NewVersionError("1.30", "config list"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.30", "config list"); err != nil {
 		return nil, err
 	}
 	query := url.Values{}
diff --git a/vendor/github.com/docker/docker/client/config_remove.go b/vendor/github.com/docker/docker/client/config_remove.go
index 24b94e9c18b..d05b0113aaf 100644
--- a/vendor/github.com/docker/docker/client/config_remove.go
+++ b/vendor/github.com/docker/docker/client/config_remove.go
@@ -4,7 +4,7 @@ import "context"
 
 // ConfigRemove removes a config.
 func (cli *Client) ConfigRemove(ctx context.Context, id string) error {
-	if err := cli.NewVersionError("1.30", "config remove"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.30", "config remove"); err != nil {
 		return err
 	}
 	resp, err := cli.delete(ctx, "/configs/"+id, nil, nil)
diff --git a/vendor/github.com/docker/docker/client/config_update.go b/vendor/github.com/docker/docker/client/config_update.go
index 1ac29854351..6995861df05 100644
--- a/vendor/github.com/docker/docker/client/config_update.go
+++ b/vendor/github.com/docker/docker/client/config_update.go
@@ -9,7 +9,7 @@ import (
 
 // ConfigUpdate attempts to update a config
 func (cli *Client) ConfigUpdate(ctx context.Context, id string, version swarm.Version, config swarm.ConfigSpec) error {
-	if err := cli.NewVersionError("1.30", "config update"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.30", "config update"); err != nil {
 		return err
 	}
 	query := url.Values{}
diff --git a/vendor/github.com/docker/docker/client/container_attach.go b/vendor/github.com/docker/docker/client/container_attach.go
index ba92117d3ed..6a32e5f664b 100644
--- a/vendor/github.com/docker/docker/client/container_attach.go
+++ b/vendor/github.com/docker/docker/client/container_attach.go
@@ -2,9 +2,11 @@ package client // import "github.com/docker/docker/client"
 
 import (
 	"context"
+	"net/http"
 	"net/url"
 
 	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 )
 
 // ContainerAttach attaches a connection to a container in the server.
@@ -31,7 +33,7 @@ import (
 //
 // You can use github.com/docker/docker/pkg/stdcopy.StdCopy to demultiplex this
 // stream.
-func (cli *Client) ContainerAttach(ctx context.Context, container string, options types.ContainerAttachOptions) (types.HijackedResponse, error) {
+func (cli *Client) ContainerAttach(ctx context.Context, container string, options container.AttachOptions) (types.HijackedResponse, error) {
 	query := url.Values{}
 	if options.Stream {
 		query.Set("stream", "1")
@@ -52,8 +54,7 @@ func (cli *Client) ContainerAttach(ctx context.Context, container string, option
 		query.Set("logs", "1")
 	}
 
-	headers := map[string][]string{
+	return cli.postHijacked(ctx, "/containers/"+container+"/attach", query, nil, http.Header{
 		"Content-Type": {"text/plain"},
-	}
-	return cli.postHijacked(ctx, "/containers/"+container+"/attach", query, nil, headers)
+	})
 }
diff --git a/vendor/github.com/docker/docker/client/container_commit.go b/vendor/github.com/docker/docker/client/container_commit.go
index cd7f7634646..26b3f09158f 100644
--- a/vendor/github.com/docker/docker/client/container_commit.go
+++ b/vendor/github.com/docker/docker/client/container_commit.go
@@ -6,12 +6,13 @@ import (
 	"errors"
 	"net/url"
 
-	"github.com/docker/distribution/reference"
+	"github.com/distribution/reference"
 	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 )
 
 // ContainerCommit applies changes to a container and creates a new tagged image.
-func (cli *Client) ContainerCommit(ctx context.Context, container string, options types.ContainerCommitOptions) (types.IDResponse, error) {
+func (cli *Client) ContainerCommit(ctx context.Context, container string, options container.CommitOptions) (types.IDResponse, error) {
 	var repository, tag string
 	if options.Reference != "" {
 		ref, err := reference.ParseNormalizedNamed(options.Reference)
diff --git a/vendor/github.com/docker/docker/client/container_create.go b/vendor/github.com/docker/docker/client/container_create.go
index 193a2bb5626..409f5b492a6 100644
--- a/vendor/github.com/docker/docker/client/container_create.go
+++ b/vendor/github.com/docker/docker/client/container_create.go
@@ -23,10 +23,23 @@ type configWrapper struct {
 func (cli *Client) ContainerCreate(ctx context.Context, config *container.Config, hostConfig *container.HostConfig, networkingConfig *network.NetworkingConfig, platform *ocispec.Platform, containerName string) (container.CreateResponse, error) {
 	var response container.CreateResponse
 
-	if err := cli.NewVersionError("1.25", "stop timeout"); config != nil && config.StopTimeout != nil && err != nil {
+	// Make sure we negotiated (if the client is configured to do so),
+	// as code below contains API-version specific handling of options.
+	//
+	// Normally, version-negotiation (if enabled) would not happen until
+	// the API request is made.
+	cli.checkVersion(ctx)
+
+	if err := cli.NewVersionError(ctx, "1.25", "stop timeout"); config != nil && config.StopTimeout != nil && err != nil {
+		return response, err
+	}
+	if err := cli.NewVersionError(ctx, "1.41", "specify container image platform"); platform != nil && err != nil {
 		return response, err
 	}
-	if err := cli.NewVersionError("1.41", "specify container image platform"); platform != nil && err != nil {
+	if err := cli.NewVersionError(ctx, "1.44", "specify health-check start interval"); config != nil && config.Healthcheck != nil && config.Healthcheck.StartInterval != 0 && err != nil {
+		return response, err
+	}
+	if err := cli.NewVersionError(ctx, "1.44", "specify mac-address per network"); hasEndpointSpecificMacAddress(networkingConfig) && err != nil {
 		return response, err
 	}
 
@@ -45,6 +58,11 @@ func (cli *Client) ContainerCreate(ctx context.Context, config *container.Config
 		}
 	}
 
+	// Since API 1.44, the container-wide MacAddress is deprecated and will trigger a WARNING if it's specified.
+	if versions.GreaterThanOrEqualTo(cli.ClientVersion(), "1.44") {
+		config.MacAddress = "" //nolint:staticcheck // ignore SA1019: field is deprecated, but still used on API < v1.44.
+	}
+
 	query := url.Values{}
 	if p := formatPlatform(platform); p != "" {
 		query.Set("platform", p)
@@ -81,3 +99,16 @@ func formatPlatform(platform *ocispec.Platform) string {
 	}
 	return path.Join(platform.OS, platform.Architecture, platform.Variant)
 }
+
+// hasEndpointSpecificMacAddress checks whether one of the endpoint in networkingConfig has a MacAddress defined.
+func hasEndpointSpecificMacAddress(networkingConfig *network.NetworkingConfig) bool {
+	if networkingConfig == nil {
+		return false
+	}
+	for _, endpoint := range networkingConfig.EndpointsConfig {
+		if endpoint.MacAddress != "" {
+			return true
+		}
+	}
+	return false
+}
diff --git a/vendor/github.com/docker/docker/client/container_exec.go b/vendor/github.com/docker/docker/client/container_exec.go
index 6a2cb006f88..3fff0c82889 100644
--- a/vendor/github.com/docker/docker/client/container_exec.go
+++ b/vendor/github.com/docker/docker/client/container_exec.go
@@ -3,6 +3,7 @@ package client // import "github.com/docker/docker/client"
 import (
 	"context"
 	"encoding/json"
+	"net/http"
 
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/versions"
@@ -12,7 +13,14 @@ import (
 func (cli *Client) ContainerExecCreate(ctx context.Context, container string, config types.ExecConfig) (types.IDResponse, error) {
 	var response types.IDResponse
 
-	if err := cli.NewVersionError("1.25", "env"); len(config.Env) != 0 && err != nil {
+	// Make sure we negotiated (if the client is configured to do so),
+	// as code below contains API-version specific handling of options.
+	//
+	// Normally, version-negotiation (if enabled) would not happen until
+	// the API request is made.
+	cli.checkVersion(ctx)
+
+	if err := cli.NewVersionError(ctx, "1.25", "env"); len(config.Env) != 0 && err != nil {
 		return response, err
 	}
 	if versions.LessThan(cli.ClientVersion(), "1.42") {
@@ -46,10 +54,9 @@ func (cli *Client) ContainerExecAttach(ctx context.Context, execID string, confi
 	if versions.LessThan(cli.ClientVersion(), "1.42") {
 		config.ConsoleSize = nil
 	}
-	headers := map[string][]string{
+	return cli.postHijacked(ctx, "/exec/"+execID+"/start", nil, config, http.Header{
 		"Content-Type": {"application/json"},
-	}
-	return cli.postHijacked(ctx, "/exec/"+execID+"/start", nil, config, headers)
+	})
 }
 
 // ContainerExecInspect returns information about a specific exec process on the docker host.
diff --git a/vendor/github.com/docker/docker/client/container_list.go b/vendor/github.com/docker/docker/client/container_list.go
index bd491b3db92..782e1b3c62e 100644
--- a/vendor/github.com/docker/docker/client/container_list.go
+++ b/vendor/github.com/docker/docker/client/container_list.go
@@ -7,11 +7,12 @@ import (
 	"strconv"
 
 	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 	"github.com/docker/docker/api/types/filters"
 )
 
 // ContainerList returns the list of containers in the docker host.
-func (cli *Client) ContainerList(ctx context.Context, options types.ContainerListOptions) ([]types.Container, error) {
+func (cli *Client) ContainerList(ctx context.Context, options container.ListOptions) ([]types.Container, error) {
 	query := url.Values{}
 
 	if options.All {
@@ -37,7 +38,6 @@ func (cli *Client) ContainerList(ctx context.Context, options types.ContainerLis
 	if options.Filters.Len() > 0 {
 		//nolint:staticcheck // ignore SA1019 for old code
 		filterJSON, err := filters.ToParamWithVersion(cli.version, options.Filters)
-
 		if err != nil {
 			return nil, err
 		}
diff --git a/vendor/github.com/docker/docker/client/container_logs.go b/vendor/github.com/docker/docker/client/container_logs.go
index 9bdf2b0fa60..61197d84075 100644
--- a/vendor/github.com/docker/docker/client/container_logs.go
+++ b/vendor/github.com/docker/docker/client/container_logs.go
@@ -6,7 +6,7 @@ import (
 	"net/url"
 	"time"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 	timetypes "github.com/docker/docker/api/types/time"
 	"github.com/pkg/errors"
 )
@@ -33,7 +33,7 @@ import (
 //
 // You can use github.com/docker/docker/pkg/stdcopy.StdCopy to demultiplex this
 // stream.
-func (cli *Client) ContainerLogs(ctx context.Context, container string, options types.ContainerLogsOptions) (io.ReadCloser, error) {
+func (cli *Client) ContainerLogs(ctx context.Context, container string, options container.LogsOptions) (io.ReadCloser, error) {
 	query := url.Values{}
 	if options.ShowStdout {
 		query.Set("stdout", "1")
diff --git a/vendor/github.com/docker/docker/client/container_prune.go b/vendor/github.com/docker/docker/client/container_prune.go
index 04383deaaff..ca509238447 100644
--- a/vendor/github.com/docker/docker/client/container_prune.go
+++ b/vendor/github.com/docker/docker/client/container_prune.go
@@ -13,7 +13,7 @@ import (
 func (cli *Client) ContainersPrune(ctx context.Context, pruneFilters filters.Args) (types.ContainersPruneReport, error) {
 	var report types.ContainersPruneReport
 
-	if err := cli.NewVersionError("1.25", "container prune"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.25", "container prune"); err != nil {
 		return report, err
 	}
 
diff --git a/vendor/github.com/docker/docker/client/container_remove.go b/vendor/github.com/docker/docker/client/container_remove.go
index c21de609b0b..39f7b106a10 100644
--- a/vendor/github.com/docker/docker/client/container_remove.go
+++ b/vendor/github.com/docker/docker/client/container_remove.go
@@ -4,11 +4,11 @@ import (
 	"context"
 	"net/url"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 )
 
 // ContainerRemove kills and removes a container from the docker host.
-func (cli *Client) ContainerRemove(ctx context.Context, containerID string, options types.ContainerRemoveOptions) error {
+func (cli *Client) ContainerRemove(ctx context.Context, containerID string, options container.RemoveOptions) error {
 	query := url.Values{}
 	if options.RemoveVolumes {
 		query.Set("v", "1")
diff --git a/vendor/github.com/docker/docker/client/container_resize.go b/vendor/github.com/docker/docker/client/container_resize.go
index a9d4c0c79a0..5cfd01d4798 100644
--- a/vendor/github.com/docker/docker/client/container_resize.go
+++ b/vendor/github.com/docker/docker/client/container_resize.go
@@ -5,16 +5,16 @@ import (
 	"net/url"
 	"strconv"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 )
 
 // ContainerResize changes the size of the tty for a container.
-func (cli *Client) ContainerResize(ctx context.Context, containerID string, options types.ResizeOptions) error {
+func (cli *Client) ContainerResize(ctx context.Context, containerID string, options container.ResizeOptions) error {
 	return cli.resize(ctx, "/containers/"+containerID, options.Height, options.Width)
 }
 
 // ContainerExecResize changes the size of the tty for an exec process running inside a container.
-func (cli *Client) ContainerExecResize(ctx context.Context, execID string, options types.ResizeOptions) error {
+func (cli *Client) ContainerExecResize(ctx context.Context, execID string, options container.ResizeOptions) error {
 	return cli.resize(ctx, "/exec/"+execID, options.Height, options.Width)
 }
 
diff --git a/vendor/github.com/docker/docker/client/container_restart.go b/vendor/github.com/docker/docker/client/container_restart.go
index 1e0ad999815..825d3e4e9d9 100644
--- a/vendor/github.com/docker/docker/client/container_restart.go
+++ b/vendor/github.com/docker/docker/client/container_restart.go
@@ -17,8 +17,16 @@ func (cli *Client) ContainerRestart(ctx context.Context, containerID string, opt
 	if options.Timeout != nil {
 		query.Set("t", strconv.Itoa(*options.Timeout))
 	}
-	if options.Signal != "" && versions.GreaterThanOrEqualTo(cli.version, "1.42") {
-		query.Set("signal", options.Signal)
+	if options.Signal != "" {
+		// Make sure we negotiated (if the client is configured to do so),
+		// as code below contains API-version specific handling of options.
+		//
+		// Normally, version-negotiation (if enabled) would not happen until
+		// the API request is made.
+		cli.checkVersion(ctx)
+		if versions.GreaterThanOrEqualTo(cli.version, "1.42") {
+			query.Set("signal", options.Signal)
+		}
 	}
 	resp, err := cli.post(ctx, "/containers/"+containerID+"/restart", query, nil, nil)
 	ensureReaderClosed(resp)
diff --git a/vendor/github.com/docker/docker/client/container_start.go b/vendor/github.com/docker/docker/client/container_start.go
index c2e0b15dca8..33ba85f2482 100644
--- a/vendor/github.com/docker/docker/client/container_start.go
+++ b/vendor/github.com/docker/docker/client/container_start.go
@@ -4,11 +4,11 @@ import (
 	"context"
 	"net/url"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 )
 
 // ContainerStart sends a request to the docker daemon to start a container.
-func (cli *Client) ContainerStart(ctx context.Context, containerID string, options types.ContainerStartOptions) error {
+func (cli *Client) ContainerStart(ctx context.Context, containerID string, options container.StartOptions) error {
 	query := url.Values{}
 	if len(options.CheckpointID) != 0 {
 		query.Set("checkpoint", options.CheckpointID)
diff --git a/vendor/github.com/docker/docker/client/container_stats.go b/vendor/github.com/docker/docker/client/container_stats.go
index 0a6488dde82..3fabb75f321 100644
--- a/vendor/github.com/docker/docker/client/container_stats.go
+++ b/vendor/github.com/docker/docker/client/container_stats.go
@@ -21,8 +21,10 @@ func (cli *Client) ContainerStats(ctx context.Context, containerID string, strea
 		return types.ContainerStats{}, err
 	}
 
-	osType := getDockerOS(resp.header.Get("Server"))
-	return types.ContainerStats{Body: resp.body, OSType: osType}, err
+	return types.ContainerStats{
+		Body:   resp.body,
+		OSType: getDockerOS(resp.header.Get("Server")),
+	}, nil
 }
 
 // ContainerStatsOneShot gets a single stat entry from a container.
@@ -37,6 +39,8 @@ func (cli *Client) ContainerStatsOneShot(ctx context.Context, containerID string
 		return types.ContainerStats{}, err
 	}
 
-	osType := getDockerOS(resp.header.Get("Server"))
-	return types.ContainerStats{Body: resp.body, OSType: osType}, err
+	return types.ContainerStats{
+		Body:   resp.body,
+		OSType: getDockerOS(resp.header.Get("Server")),
+	}, nil
 }
diff --git a/vendor/github.com/docker/docker/client/container_stop.go b/vendor/github.com/docker/docker/client/container_stop.go
index 2a43ce22749..ac0cab69de9 100644
--- a/vendor/github.com/docker/docker/client/container_stop.go
+++ b/vendor/github.com/docker/docker/client/container_stop.go
@@ -21,8 +21,16 @@ func (cli *Client) ContainerStop(ctx context.Context, containerID string, option
 	if options.Timeout != nil {
 		query.Set("t", strconv.Itoa(*options.Timeout))
 	}
-	if options.Signal != "" && versions.GreaterThanOrEqualTo(cli.version, "1.42") {
-		query.Set("signal", options.Signal)
+	if options.Signal != "" {
+		// Make sure we negotiated (if the client is configured to do so),
+		// as code below contains API-version specific handling of options.
+		//
+		// Normally, version-negotiation (if enabled) would not happen until
+		// the API request is made.
+		cli.checkVersion(ctx)
+		if versions.GreaterThanOrEqualTo(cli.version, "1.42") {
+			query.Set("signal", options.Signal)
+		}
 	}
 	resp, err := cli.post(ctx, "/containers/"+containerID+"/stop", query, nil, nil)
 	ensureReaderClosed(resp)
diff --git a/vendor/github.com/docker/docker/client/container_wait.go b/vendor/github.com/docker/docker/client/container_wait.go
index 2375eb1e80f..b8d3bdef0db 100644
--- a/vendor/github.com/docker/docker/client/container_wait.go
+++ b/vendor/github.com/docker/docker/client/container_wait.go
@@ -30,6 +30,12 @@ const containerWaitErrorMsgLimit = 2 * 1024 /* Max: 2KiB */
 // synchronize ContainerWait with other calls, such as specifying a
 // "next-exit" condition before issuing a ContainerStart request.
 func (cli *Client) ContainerWait(ctx context.Context, containerID string, condition container.WaitCondition) (<-chan container.WaitResponse, <-chan error) {
+	// Make sure we negotiated (if the client is configured to do so),
+	// as code below contains API-version specific handling of options.
+	//
+	// Normally, version-negotiation (if enabled) would not happen until
+	// the API request is made.
+	cli.checkVersion(ctx)
 	if versions.LessThan(cli.ClientVersion(), "1.30") {
 		return cli.legacyContainerWait(ctx, containerID)
 	}
@@ -66,8 +72,12 @@ func (cli *Client) ContainerWait(ctx context.Context, containerID string, condit
 			//
 			// If there's a JSON parsing error, read the real error message
 			// off the body and send it to the client.
-			_, _ = io.ReadAll(io.LimitReader(stream, containerWaitErrorMsgLimit))
-			errC <- errors.New(responseText.String())
+			if errors.As(err, new(*json.SyntaxError)) {
+				_, _ = io.ReadAll(io.LimitReader(stream, containerWaitErrorMsgLimit))
+				errC <- errors.New(responseText.String())
+			} else {
+				errC <- err
+			}
 			return
 		}
 
diff --git a/vendor/github.com/docker/docker/client/distribution_inspect.go b/vendor/github.com/docker/docker/client/distribution_inspect.go
index efab066d3bd..68ef31b78b0 100644
--- a/vendor/github.com/docker/docker/client/distribution_inspect.go
+++ b/vendor/github.com/docker/docker/client/distribution_inspect.go
@@ -3,6 +3,7 @@ package client // import "github.com/docker/docker/client"
 import (
 	"context"
 	"encoding/json"
+	"net/http"
 	"net/url"
 
 	"github.com/docker/docker/api/types/registry"
@@ -16,13 +17,13 @@ func (cli *Client) DistributionInspect(ctx context.Context, image, encodedRegist
 		return distributionInspect, objectNotFoundError{object: "distribution", id: image}
 	}
 
-	if err := cli.NewVersionError("1.30", "distribution inspect"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.30", "distribution inspect"); err != nil {
 		return distributionInspect, err
 	}
-	var headers map[string][]string
 
+	var headers http.Header
 	if encodedRegistryAuth != "" {
-		headers = map[string][]string{
+		headers = http.Header{
 			registry.AuthHeader: {encodedRegistryAuth},
 		}
 	}
diff --git a/vendor/github.com/docker/docker/client/errors.go b/vendor/github.com/docker/docker/client/errors.go
index 6878144c41e..4b96b020858 100644
--- a/vendor/github.com/docker/docker/client/errors.go
+++ b/vendor/github.com/docker/docker/client/errors.go
@@ -1,6 +1,7 @@
 package client // import "github.com/docker/docker/client"
 
 import (
+	"context"
 	"fmt"
 
 	"github.com/docker/docker/api/types/versions"
@@ -31,20 +32,10 @@ func ErrorConnectionFailed(host string) error {
 	return errConnectionFailed{host: host}
 }
 
-// Deprecated: use the errdefs.NotFound() interface instead. Kept for backward compatibility
-type notFound interface {
-	error
-	NotFound() bool
-}
-
 // IsErrNotFound returns true if the error is a NotFound error, which is returned
-// by the API when some object is not found.
+// by the API when some object is not found. It is an alias for [errdefs.IsNotFound].
 func IsErrNotFound(err error) bool {
-	if errdefs.IsNotFound(err) {
-		return true
-	}
-	var e notFound
-	return errors.As(err, &e)
+	return errdefs.IsNotFound(err)
 }
 
 type objectNotFoundError struct {
@@ -58,9 +49,18 @@ func (e objectNotFoundError) Error() string {
 	return fmt.Sprintf("Error: No such %s: %s", e.object, e.id)
 }
 
-// NewVersionError returns an error if the APIVersion required
-// if less than the current supported version
-func (cli *Client) NewVersionError(APIrequired, feature string) error {
+// NewVersionError returns an error if the APIVersion required is less than the
+// current supported version.
+//
+// It performs API-version negotiation if the Client is configured with this
+// option, otherwise it assumes the latest API version is used.
+func (cli *Client) NewVersionError(ctx context.Context, APIrequired, feature string) error {
+	// Make sure we negotiated (if the client is configured to do so),
+	// as code below contains API-version specific handling of options.
+	//
+	// Normally, version-negotiation (if enabled) would not happen until
+	// the API request is made.
+	cli.checkVersion(ctx)
 	if cli.version != "" && versions.LessThan(cli.version, APIrequired) {
 		return fmt.Errorf("%q requires API version %s, but the Docker daemon API version is %s", feature, APIrequired, cli.version)
 	}
diff --git a/vendor/github.com/docker/docker/client/hijack.go b/vendor/github.com/docker/docker/client/hijack.go
index 7e84865f695..839d4c5cd6b 100644
--- a/vendor/github.com/docker/docker/client/hijack.go
+++ b/vendor/github.com/docker/docker/client/hijack.go
@@ -3,18 +3,16 @@ package client // import "github.com/docker/docker/client"
 import (
 	"bufio"
 	"context"
-	"crypto/tls"
 	"fmt"
 	"net"
 	"net/http"
-	"net/http/httputil"
 	"net/url"
 	"time"
 
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/versions"
-	"github.com/docker/go-connections/sockets"
 	"github.com/pkg/errors"
+	"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp"
 )
 
 // postHijacked sends a POST request and hijacks the connection.
@@ -23,11 +21,11 @@ func (cli *Client) postHijacked(ctx context.Context, path string, query url.Valu
 	if err != nil {
 		return types.HijackedResponse{}, err
 	}
-	req, err := cli.buildRequest(http.MethodPost, cli.getAPIPath(ctx, path, query), bodyEncoded, headers)
+	req, err := cli.buildRequest(ctx, http.MethodPost, cli.getAPIPath(ctx, path, query), bodyEncoded, headers)
 	if err != nil {
 		return types.HijackedResponse{}, err
 	}
-	conn, mediaType, err := cli.setupHijackConn(ctx, req, "tcp")
+	conn, mediaType, err := cli.setupHijackConn(req, "tcp")
 	if err != nil {
 		return types.HijackedResponse{}, err
 	}
@@ -37,29 +35,18 @@ func (cli *Client) postHijacked(ctx context.Context, path string, query url.Valu
 
 // DialHijack returns a hijacked connection with negotiated protocol proto.
 func (cli *Client) DialHijack(ctx context.Context, url, proto string, meta map[string][]string) (net.Conn, error) {
-	req, err := http.NewRequest(http.MethodPost, url, nil)
+	req, err := http.NewRequestWithContext(ctx, http.MethodPost, url, nil)
 	if err != nil {
 		return nil, err
 	}
 	req = cli.addHeaders(req, meta)
 
-	conn, _, err := cli.setupHijackConn(ctx, req, proto)
+	conn, _, err := cli.setupHijackConn(req, proto)
 	return conn, err
 }
 
-// fallbackDial is used when WithDialer() was not called.
-// See cli.Dialer().
-func fallbackDial(proto, addr string, tlsConfig *tls.Config) (net.Conn, error) {
-	if tlsConfig != nil && proto != "unix" && proto != "npipe" {
-		return tls.Dial(proto, addr, tlsConfig)
-	}
-	if proto == "npipe" {
-		return sockets.DialPipe(addr, 32*time.Second)
-	}
-	return net.Dial(proto, addr)
-}
-
-func (cli *Client) setupHijackConn(ctx context.Context, req *http.Request, proto string) (net.Conn, string, error) {
+func (cli *Client) setupHijackConn(req *http.Request, proto string) (_ net.Conn, _ string, retErr error) {
+	ctx := req.Context()
 	req.Header.Set("Connection", "Upgrade")
 	req.Header.Set("Upgrade", proto)
 
@@ -68,6 +55,11 @@ func (cli *Client) setupHijackConn(ctx context.Context, req *http.Request, proto
 	if err != nil {
 		return nil, "", errors.Wrap(err, "cannot connect to the Docker daemon. Is 'docker daemon' running on this host?")
 	}
+	defer func() {
+		if retErr != nil {
+			conn.Close()
+		}
+	}()
 
 	// When we set up a TCP connection for hijack, there could be long periods
 	// of inactivity (a long running command with no output) that in certain
@@ -79,35 +71,29 @@ func (cli *Client) setupHijackConn(ctx context.Context, req *http.Request, proto
 		_ = tcpConn.SetKeepAlivePeriod(30 * time.Second)
 	}
 
-	clientconn := httputil.NewClientConn(conn, nil)
-	defer clientconn.Close()
+	hc := &hijackedConn{conn, bufio.NewReader(conn)}
 
 	// Server hijacks the connection, error 'connection closed' expected
-	resp, err := clientconn.Do(req)
-
-	//nolint:staticcheck // ignore SA1019 for connecting to old (pre go1.8) daemons
-	if err != httputil.ErrPersistEOF {
-		if err != nil {
-			return nil, "", err
-		}
-		if resp.StatusCode != http.StatusSwitchingProtocols {
-			_ = resp.Body.Close()
-			return nil, "", fmt.Errorf("unable to upgrade to %s, received %d", proto, resp.StatusCode)
-		}
+	resp, err := otelhttp.NewTransport(hc).RoundTrip(req)
+	if err != nil {
+		return nil, "", err
+	}
+	if resp.StatusCode != http.StatusSwitchingProtocols {
+		_ = resp.Body.Close()
+		return nil, "", fmt.Errorf("unable to upgrade to %s, received %d", proto, resp.StatusCode)
 	}
 
-	c, br := clientconn.Hijack()
-	if br.Buffered() > 0 {
+	if hc.r.Buffered() > 0 {
 		// If there is buffered content, wrap the connection.  We return an
 		// object that implements CloseWrite if the underlying connection
 		// implements it.
-		if _, ok := c.(types.CloseWriter); ok {
-			c = &hijackedConnCloseWriter{&hijackedConn{c, br}}
+		if _, ok := hc.Conn.(types.CloseWriter); ok {
+			conn = &hijackedConnCloseWriter{hc}
 		} else {
-			c = &hijackedConn{c, br}
+			conn = hc
 		}
 	} else {
-		br.Reset(nil)
+		hc.r.Reset(nil)
 	}
 
 	var mediaType string
@@ -116,7 +102,7 @@ func (cli *Client) setupHijackConn(ctx context.Context, req *http.Request, proto
 		mediaType = resp.Header.Get("Content-Type")
 	}
 
-	return c, mediaType, nil
+	return conn, mediaType, nil
 }
 
 // hijackedConn wraps a net.Conn and is returned by setupHijackConn in the case
@@ -128,6 +114,13 @@ type hijackedConn struct {
 	r *bufio.Reader
 }
 
+func (c *hijackedConn) RoundTrip(req *http.Request) (*http.Response, error) {
+	if err := req.Write(c.Conn); err != nil {
+		return nil, err
+	}
+	return http.ReadResponse(c.r, req)
+}
+
 func (c *hijackedConn) Read(b []byte) (int, error) {
 	return c.r.Read(b)
 }
diff --git a/vendor/github.com/docker/docker/client/image_build.go b/vendor/github.com/docker/docker/client/image_build.go
index d16e1d8ea98..d294ddc8b2c 100644
--- a/vendor/github.com/docker/docker/client/image_build.go
+++ b/vendor/github.com/docker/docker/client/image_build.go
@@ -18,18 +18,18 @@ import (
 // The Body in the response implements an io.ReadCloser and it's up to the caller to
 // close it.
 func (cli *Client) ImageBuild(ctx context.Context, buildContext io.Reader, options types.ImageBuildOptions) (types.ImageBuildResponse, error) {
-	query, err := cli.imageBuildOptionsToQuery(options)
+	query, err := cli.imageBuildOptionsToQuery(ctx, options)
 	if err != nil {
 		return types.ImageBuildResponse{}, err
 	}
 
-	headers := http.Header(make(map[string][]string))
 	buf, err := json.Marshal(options.AuthConfigs)
 	if err != nil {
 		return types.ImageBuildResponse{}, err
 	}
-	headers.Add("X-Registry-Config", base64.URLEncoding.EncodeToString(buf))
 
+	headers := http.Header{}
+	headers.Add("X-Registry-Config", base64.URLEncoding.EncodeToString(buf))
 	headers.Set("Content-Type", "application/x-tar")
 
 	serverResp, err := cli.postRaw(ctx, "/build", query, buildContext, headers)
@@ -37,15 +37,13 @@ func (cli *Client) ImageBuild(ctx context.Context, buildContext io.Reader, optio
 		return types.ImageBuildResponse{}, err
 	}
 
-	osType := getDockerOS(serverResp.header.Get("Server"))
-
 	return types.ImageBuildResponse{
 		Body:   serverResp.body,
-		OSType: osType,
+		OSType: getDockerOS(serverResp.header.Get("Server")),
 	}, nil
 }
 
-func (cli *Client) imageBuildOptionsToQuery(options types.ImageBuildOptions) (url.Values, error) {
+func (cli *Client) imageBuildOptionsToQuery(ctx context.Context, options types.ImageBuildOptions) (url.Values, error) {
 	query := url.Values{
 		"t":           options.Tags,
 		"securityopt": options.SecurityOpt,
@@ -75,7 +73,7 @@ func (cli *Client) imageBuildOptionsToQuery(options types.ImageBuildOptions) (ur
 	}
 
 	if options.Squash {
-		if err := cli.NewVersionError("1.25", "squash"); err != nil {
+		if err := cli.NewVersionError(ctx, "1.25", "squash"); err != nil {
 			return query, err
 		}
 		query.Set("squash", "1")
@@ -125,7 +123,7 @@ func (cli *Client) imageBuildOptionsToQuery(options types.ImageBuildOptions) (ur
 		query.Set("session", options.SessionID)
 	}
 	if options.Platform != "" {
-		if err := cli.NewVersionError("1.32", "platform"); err != nil {
+		if err := cli.NewVersionError(ctx, "1.32", "platform"); err != nil {
 			return query, err
 		}
 		query.Set("platform", strings.ToLower(options.Platform))
diff --git a/vendor/github.com/docker/docker/client/image_create.go b/vendor/github.com/docker/docker/client/image_create.go
index 6a9b708f7d4..29cd0b43739 100644
--- a/vendor/github.com/docker/docker/client/image_create.go
+++ b/vendor/github.com/docker/docker/client/image_create.go
@@ -3,10 +3,11 @@ package client // import "github.com/docker/docker/client"
 import (
 	"context"
 	"io"
+	"net/http"
 	"net/url"
 	"strings"
 
-	"github.com/docker/distribution/reference"
+	"github.com/distribution/reference"
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/registry"
 )
@@ -33,6 +34,7 @@ func (cli *Client) ImageCreate(ctx context.Context, parentReference string, opti
 }
 
 func (cli *Client) tryImageCreate(ctx context.Context, query url.Values, registryAuth string) (serverResponse, error) {
-	headers := map[string][]string{registry.AuthHeader: {registryAuth}}
-	return cli.post(ctx, "/images/create", query, nil, headers)
+	return cli.post(ctx, "/images/create", query, nil, http.Header{
+		registry.AuthHeader: {registryAuth},
+	})
 }
diff --git a/vendor/github.com/docker/docker/client/image_import.go b/vendor/github.com/docker/docker/client/image_import.go
index c5de42cb799..cd376a14e58 100644
--- a/vendor/github.com/docker/docker/client/image_import.go
+++ b/vendor/github.com/docker/docker/client/image_import.go
@@ -6,7 +6,7 @@ import (
 	"net/url"
 	"strings"
 
-	"github.com/docker/distribution/reference"
+	"github.com/distribution/reference"
 	"github.com/docker/docker/api/types"
 )
 
diff --git a/vendor/github.com/docker/docker/client/image_list.go b/vendor/github.com/docker/docker/client/image_list.go
index 950d5133347..f3f2280e324 100644
--- a/vendor/github.com/docker/docker/client/image_list.go
+++ b/vendor/github.com/docker/docker/client/image_list.go
@@ -7,12 +7,20 @@ import (
 
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/filters"
+	"github.com/docker/docker/api/types/image"
 	"github.com/docker/docker/api/types/versions"
 )
 
 // ImageList returns a list of images in the docker host.
-func (cli *Client) ImageList(ctx context.Context, options types.ImageListOptions) ([]types.ImageSummary, error) {
-	var images []types.ImageSummary
+func (cli *Client) ImageList(ctx context.Context, options types.ImageListOptions) ([]image.Summary, error) {
+	// Make sure we negotiated (if the client is configured to do so),
+	// as code below contains API-version specific handling of options.
+	//
+	// Normally, version-negotiation (if enabled) would not happen until
+	// the API request is made.
+	cli.checkVersion(ctx)
+
+	var images []image.Summary
 	query := url.Values{}
 
 	optionFilters := options.Filters
diff --git a/vendor/github.com/docker/docker/client/image_load.go b/vendor/github.com/docker/docker/client/image_load.go
index 91016e493c4..c825206ea5e 100644
--- a/vendor/github.com/docker/docker/client/image_load.go
+++ b/vendor/github.com/docker/docker/client/image_load.go
@@ -3,6 +3,7 @@ package client // import "github.com/docker/docker/client"
 import (
 	"context"
 	"io"
+	"net/http"
 	"net/url"
 
 	"github.com/docker/docker/api/types"
@@ -17,8 +18,9 @@ func (cli *Client) ImageLoad(ctx context.Context, input io.Reader, quiet bool) (
 	if quiet {
 		v.Set("quiet", "1")
 	}
-	headers := map[string][]string{"Content-Type": {"application/x-tar"}}
-	resp, err := cli.postRaw(ctx, "/images/load", v, input, headers)
+	resp, err := cli.postRaw(ctx, "/images/load", v, input, http.Header{
+		"Content-Type": {"application/x-tar"},
+	})
 	if err != nil {
 		return types.ImageLoadResponse{}, err
 	}
diff --git a/vendor/github.com/docker/docker/client/image_prune.go b/vendor/github.com/docker/docker/client/image_prune.go
index 56af6d7f98f..6b82d6ab6ca 100644
--- a/vendor/github.com/docker/docker/client/image_prune.go
+++ b/vendor/github.com/docker/docker/client/image_prune.go
@@ -13,7 +13,7 @@ import (
 func (cli *Client) ImagesPrune(ctx context.Context, pruneFilters filters.Args) (types.ImagesPruneReport, error) {
 	var report types.ImagesPruneReport
 
-	if err := cli.NewVersionError("1.25", "image prune"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.25", "image prune"); err != nil {
 		return report, err
 	}
 
diff --git a/vendor/github.com/docker/docker/client/image_pull.go b/vendor/github.com/docker/docker/client/image_pull.go
index a23975591be..d92049d5884 100644
--- a/vendor/github.com/docker/docker/client/image_pull.go
+++ b/vendor/github.com/docker/docker/client/image_pull.go
@@ -6,7 +6,7 @@ import (
 	"net/url"
 	"strings"
 
-	"github.com/docker/distribution/reference"
+	"github.com/distribution/reference"
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/errdefs"
 )
diff --git a/vendor/github.com/docker/docker/client/image_push.go b/vendor/github.com/docker/docker/client/image_push.go
index dd1b8f34716..6839a89e078 100644
--- a/vendor/github.com/docker/docker/client/image_push.go
+++ b/vendor/github.com/docker/docker/client/image_push.go
@@ -4,9 +4,10 @@ import (
 	"context"
 	"errors"
 	"io"
+	"net/http"
 	"net/url"
 
-	"github.com/docker/distribution/reference"
+	"github.com/distribution/reference"
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/registry"
 	"github.com/docker/docker/errdefs"
@@ -50,6 +51,7 @@ func (cli *Client) ImagePush(ctx context.Context, image string, options types.Im
 }
 
 func (cli *Client) tryImagePush(ctx context.Context, imageID string, query url.Values, registryAuth string) (serverResponse, error) {
-	headers := map[string][]string{registry.AuthHeader: {registryAuth}}
-	return cli.post(ctx, "/images/"+imageID+"/push", query, nil, headers)
+	return cli.post(ctx, "/images/"+imageID+"/push", query, nil, http.Header{
+		registry.AuthHeader: {registryAuth},
+	})
 }
diff --git a/vendor/github.com/docker/docker/client/image_remove.go b/vendor/github.com/docker/docker/client/image_remove.go
index 6a9fb3f41f5..b936d20830d 100644
--- a/vendor/github.com/docker/docker/client/image_remove.go
+++ b/vendor/github.com/docker/docker/client/image_remove.go
@@ -6,10 +6,11 @@ import (
 	"net/url"
 
 	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/image"
 )
 
 // ImageRemove removes an image from the docker host.
-func (cli *Client) ImageRemove(ctx context.Context, imageID string, options types.ImageRemoveOptions) ([]types.ImageDeleteResponseItem, error) {
+func (cli *Client) ImageRemove(ctx context.Context, imageID string, options types.ImageRemoveOptions) ([]image.DeleteResponse, error) {
 	query := url.Values{}
 
 	if options.Force {
@@ -19,7 +20,7 @@ func (cli *Client) ImageRemove(ctx context.Context, imageID string, options type
 		query.Set("noprune", "1")
 	}
 
-	var dels []types.ImageDeleteResponseItem
+	var dels []image.DeleteResponse
 	resp, err := cli.delete(ctx, "/images/"+imageID, query, nil)
 	defer ensureReaderClosed(resp)
 	if err != nil {
diff --git a/vendor/github.com/docker/docker/client/image_search.go b/vendor/github.com/docker/docker/client/image_search.go
index 5f0c49ed30c..8971b139aed 100644
--- a/vendor/github.com/docker/docker/client/image_search.go
+++ b/vendor/github.com/docker/docker/client/image_search.go
@@ -3,6 +3,7 @@ package client // import "github.com/docker/docker/client"
 import (
 	"context"
 	"encoding/json"
+	"net/http"
 	"net/url"
 	"strconv"
 
@@ -48,6 +49,7 @@ func (cli *Client) ImageSearch(ctx context.Context, term string, options types.I
 }
 
 func (cli *Client) tryImageSearch(ctx context.Context, query url.Values, registryAuth string) (serverResponse, error) {
-	headers := map[string][]string{registry.AuthHeader: {registryAuth}}
-	return cli.get(ctx, "/images/search", query, headers)
+	return cli.get(ctx, "/images/search", query, http.Header{
+		registry.AuthHeader: {registryAuth},
+	})
 }
diff --git a/vendor/github.com/docker/docker/client/image_tag.go b/vendor/github.com/docker/docker/client/image_tag.go
index 5652bfc252b..ea6b4a1e651 100644
--- a/vendor/github.com/docker/docker/client/image_tag.go
+++ b/vendor/github.com/docker/docker/client/image_tag.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"net/url"
 
-	"github.com/docker/distribution/reference"
+	"github.com/distribution/reference"
 	"github.com/pkg/errors"
 )
 
diff --git a/vendor/github.com/docker/docker/client/info.go b/vendor/github.com/docker/docker/client/info.go
index c856704e23f..cc3fcc46701 100644
--- a/vendor/github.com/docker/docker/client/info.go
+++ b/vendor/github.com/docker/docker/client/info.go
@@ -6,12 +6,12 @@ import (
 	"fmt"
 	"net/url"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/system"
 )
 
 // Info returns information about the docker server.
-func (cli *Client) Info(ctx context.Context) (types.Info, error) {
-	var info types.Info
+func (cli *Client) Info(ctx context.Context) (system.Info, error) {
+	var info system.Info
 	serverResp, err := cli.get(ctx, "/info", url.Values{}, nil)
 	defer ensureReaderClosed(serverResp)
 	if err != nil {
diff --git a/vendor/github.com/docker/docker/client/interface.go b/vendor/github.com/docker/docker/client/interface.go
index 7993c5a48fa..302f5fb13e0 100644
--- a/vendor/github.com/docker/docker/client/interface.go
+++ b/vendor/github.com/docker/docker/client/interface.go
@@ -14,6 +14,7 @@ import (
 	"github.com/docker/docker/api/types/network"
 	"github.com/docker/docker/api/types/registry"
 	"github.com/docker/docker/api/types/swarm"
+	"github.com/docker/docker/api/types/system"
 	"github.com/docker/docker/api/types/volume"
 	ocispec "github.com/opencontainers/image-spec/specs-go/v1"
 )
@@ -45,30 +46,30 @@ type CommonAPIClient interface {
 
 // ContainerAPIClient defines API client methods for the containers
 type ContainerAPIClient interface {
-	ContainerAttach(ctx context.Context, container string, options types.ContainerAttachOptions) (types.HijackedResponse, error)
-	ContainerCommit(ctx context.Context, container string, options types.ContainerCommitOptions) (types.IDResponse, error)
+	ContainerAttach(ctx context.Context, container string, options container.AttachOptions) (types.HijackedResponse, error)
+	ContainerCommit(ctx context.Context, container string, options container.CommitOptions) (types.IDResponse, error)
 	ContainerCreate(ctx context.Context, config *container.Config, hostConfig *container.HostConfig, networkingConfig *network.NetworkingConfig, platform *ocispec.Platform, containerName string) (container.CreateResponse, error)
 	ContainerDiff(ctx context.Context, container string) ([]container.FilesystemChange, error)
 	ContainerExecAttach(ctx context.Context, execID string, config types.ExecStartCheck) (types.HijackedResponse, error)
 	ContainerExecCreate(ctx context.Context, container string, config types.ExecConfig) (types.IDResponse, error)
 	ContainerExecInspect(ctx context.Context, execID string) (types.ContainerExecInspect, error)
-	ContainerExecResize(ctx context.Context, execID string, options types.ResizeOptions) error
+	ContainerExecResize(ctx context.Context, execID string, options container.ResizeOptions) error
 	ContainerExecStart(ctx context.Context, execID string, config types.ExecStartCheck) error
 	ContainerExport(ctx context.Context, container string) (io.ReadCloser, error)
 	ContainerInspect(ctx context.Context, container string) (types.ContainerJSON, error)
 	ContainerInspectWithRaw(ctx context.Context, container string, getSize bool) (types.ContainerJSON, []byte, error)
 	ContainerKill(ctx context.Context, container, signal string) error
-	ContainerList(ctx context.Context, options types.ContainerListOptions) ([]types.Container, error)
-	ContainerLogs(ctx context.Context, container string, options types.ContainerLogsOptions) (io.ReadCloser, error)
+	ContainerList(ctx context.Context, options container.ListOptions) ([]types.Container, error)
+	ContainerLogs(ctx context.Context, container string, options container.LogsOptions) (io.ReadCloser, error)
 	ContainerPause(ctx context.Context, container string) error
-	ContainerRemove(ctx context.Context, container string, options types.ContainerRemoveOptions) error
+	ContainerRemove(ctx context.Context, container string, options container.RemoveOptions) error
 	ContainerRename(ctx context.Context, container, newContainerName string) error
-	ContainerResize(ctx context.Context, container string, options types.ResizeOptions) error
+	ContainerResize(ctx context.Context, container string, options container.ResizeOptions) error
 	ContainerRestart(ctx context.Context, container string, options container.StopOptions) error
 	ContainerStatPath(ctx context.Context, container, path string) (types.ContainerPathStat, error)
 	ContainerStats(ctx context.Context, container string, stream bool) (types.ContainerStats, error)
 	ContainerStatsOneShot(ctx context.Context, container string) (types.ContainerStats, error)
-	ContainerStart(ctx context.Context, container string, options types.ContainerStartOptions) error
+	ContainerStart(ctx context.Context, container string, options container.StartOptions) error
 	ContainerStop(ctx context.Context, container string, options container.StopOptions) error
 	ContainerTop(ctx context.Context, container string, arguments []string) (container.ContainerTopOKBody, error)
 	ContainerUnpause(ctx context.Context, container string) error
@@ -93,11 +94,11 @@ type ImageAPIClient interface {
 	ImageHistory(ctx context.Context, image string) ([]image.HistoryResponseItem, error)
 	ImageImport(ctx context.Context, source types.ImageImportSource, ref string, options types.ImageImportOptions) (io.ReadCloser, error)
 	ImageInspectWithRaw(ctx context.Context, image string) (types.ImageInspect, []byte, error)
-	ImageList(ctx context.Context, options types.ImageListOptions) ([]types.ImageSummary, error)
+	ImageList(ctx context.Context, options types.ImageListOptions) ([]image.Summary, error)
 	ImageLoad(ctx context.Context, input io.Reader, quiet bool) (types.ImageLoadResponse, error)
 	ImagePull(ctx context.Context, ref string, options types.ImagePullOptions) (io.ReadCloser, error)
 	ImagePush(ctx context.Context, ref string, options types.ImagePushOptions) (io.ReadCloser, error)
-	ImageRemove(ctx context.Context, image string, options types.ImageRemoveOptions) ([]types.ImageDeleteResponseItem, error)
+	ImageRemove(ctx context.Context, image string, options types.ImageRemoveOptions) ([]image.DeleteResponse, error)
 	ImageSearch(ctx context.Context, term string, options types.ImageSearchOptions) ([]registry.SearchResult, error)
 	ImageSave(ctx context.Context, images []string) (io.ReadCloser, error)
 	ImageTag(ctx context.Context, image, ref string) error
@@ -140,13 +141,13 @@ type PluginAPIClient interface {
 
 // ServiceAPIClient defines API client methods for the services
 type ServiceAPIClient interface {
-	ServiceCreate(ctx context.Context, service swarm.ServiceSpec, options types.ServiceCreateOptions) (types.ServiceCreateResponse, error)
+	ServiceCreate(ctx context.Context, service swarm.ServiceSpec, options types.ServiceCreateOptions) (swarm.ServiceCreateResponse, error)
 	ServiceInspectWithRaw(ctx context.Context, serviceID string, options types.ServiceInspectOptions) (swarm.Service, []byte, error)
 	ServiceList(ctx context.Context, options types.ServiceListOptions) ([]swarm.Service, error)
 	ServiceRemove(ctx context.Context, serviceID string) error
-	ServiceUpdate(ctx context.Context, serviceID string, version swarm.Version, service swarm.ServiceSpec, options types.ServiceUpdateOptions) (types.ServiceUpdateResponse, error)
-	ServiceLogs(ctx context.Context, serviceID string, options types.ContainerLogsOptions) (io.ReadCloser, error)
-	TaskLogs(ctx context.Context, taskID string, options types.ContainerLogsOptions) (io.ReadCloser, error)
+	ServiceUpdate(ctx context.Context, serviceID string, version swarm.Version, service swarm.ServiceSpec, options types.ServiceUpdateOptions) (swarm.ServiceUpdateResponse, error)
+	ServiceLogs(ctx context.Context, serviceID string, options container.LogsOptions) (io.ReadCloser, error)
+	TaskLogs(ctx context.Context, taskID string, options container.LogsOptions) (io.ReadCloser, error)
 	TaskInspectWithRaw(ctx context.Context, taskID string) (swarm.Task, []byte, error)
 	TaskList(ctx context.Context, options types.TaskListOptions) ([]swarm.Task, error)
 }
@@ -165,7 +166,7 @@ type SwarmAPIClient interface {
 // SystemAPIClient defines API client methods for the system
 type SystemAPIClient interface {
 	Events(ctx context.Context, options types.EventsOptions) (<-chan events.Message, <-chan error)
-	Info(ctx context.Context) (types.Info, error)
+	Info(ctx context.Context) (system.Info, error)
 	RegistryLogin(ctx context.Context, auth registry.AuthConfig) (registry.AuthenticateOKBody, error)
 	DiskUsage(ctx context.Context, options types.DiskUsageOptions) (types.DiskUsage, error)
 	Ping(ctx context.Context) (types.Ping, error)
diff --git a/vendor/github.com/docker/docker/client/interface_experimental.go b/vendor/github.com/docker/docker/client/interface_experimental.go
index 402ffb512cd..c585c104590 100644
--- a/vendor/github.com/docker/docker/client/interface_experimental.go
+++ b/vendor/github.com/docker/docker/client/interface_experimental.go
@@ -3,7 +3,7 @@ package client // import "github.com/docker/docker/client"
 import (
 	"context"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/checkpoint"
 )
 
 type apiClientExperimental interface {
@@ -12,7 +12,7 @@ type apiClientExperimental interface {
 
 // CheckpointAPIClient defines API client methods for the checkpoints
 type CheckpointAPIClient interface {
-	CheckpointCreate(ctx context.Context, container string, options types.CheckpointCreateOptions) error
-	CheckpointDelete(ctx context.Context, container string, options types.CheckpointDeleteOptions) error
-	CheckpointList(ctx context.Context, container string, options types.CheckpointListOptions) ([]types.Checkpoint, error)
+	CheckpointCreate(ctx context.Context, container string, options checkpoint.CreateOptions) error
+	CheckpointDelete(ctx context.Context, container string, options checkpoint.DeleteOptions) error
+	CheckpointList(ctx context.Context, container string, options checkpoint.ListOptions) ([]checkpoint.Summary, error)
 }
diff --git a/vendor/github.com/docker/docker/client/network_create.go b/vendor/github.com/docker/docker/client/network_create.go
index 278d9383a86..668e87d653b 100644
--- a/vendor/github.com/docker/docker/client/network_create.go
+++ b/vendor/github.com/docker/docker/client/network_create.go
@@ -5,14 +5,26 @@ import (
 	"encoding/json"
 
 	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/versions"
 )
 
 // NetworkCreate creates a new network in the docker host.
 func (cli *Client) NetworkCreate(ctx context.Context, name string, options types.NetworkCreate) (types.NetworkCreateResponse, error) {
+	// Make sure we negotiated (if the client is configured to do so),
+	// as code below contains API-version specific handling of options.
+	//
+	// Normally, version-negotiation (if enabled) would not happen until
+	// the API request is made.
+	cli.checkVersion(ctx)
+
 	networkCreateRequest := types.NetworkCreateRequest{
 		NetworkCreate: options,
 		Name:          name,
 	}
+	if versions.LessThan(cli.version, "1.44") {
+		networkCreateRequest.CheckDuplicate = true //nolint:staticcheck // ignore SA1019: CheckDuplicate is deprecated since API v1.44.
+	}
+
 	var response types.NetworkCreateResponse
 	serverResp, err := cli.post(ctx, "/networks/create", nil, networkCreateRequest, nil)
 	defer ensureReaderClosed(serverResp)
diff --git a/vendor/github.com/docker/docker/client/network_prune.go b/vendor/github.com/docker/docker/client/network_prune.go
index cebb1882192..7b5f831ef75 100644
--- a/vendor/github.com/docker/docker/client/network_prune.go
+++ b/vendor/github.com/docker/docker/client/network_prune.go
@@ -13,7 +13,7 @@ import (
 func (cli *Client) NetworksPrune(ctx context.Context, pruneFilters filters.Args) (types.NetworksPruneReport, error) {
 	var report types.NetworksPruneReport
 
-	if err := cli.NewVersionError("1.25", "network prune"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.25", "network prune"); err != nil {
 		return report, err
 	}
 
diff --git a/vendor/github.com/docker/docker/client/node_list.go b/vendor/github.com/docker/docker/client/node_list.go
index c212906bc71..1a9e6bfb1b0 100644
--- a/vendor/github.com/docker/docker/client/node_list.go
+++ b/vendor/github.com/docker/docker/client/node_list.go
@@ -16,7 +16,6 @@ func (cli *Client) NodeList(ctx context.Context, options types.NodeListOptions)
 
 	if options.Filters.Len() > 0 {
 		filterJSON, err := filters.ToJSON(options.Filters)
-
 		if err != nil {
 			return nil, err
 		}
diff --git a/vendor/github.com/docker/docker/client/options.go b/vendor/github.com/docker/docker/client/options.go
index 099ad41846a..ddb0ca3991e 100644
--- a/vendor/github.com/docker/docker/client/options.go
+++ b/vendor/github.com/docker/docker/client/options.go
@@ -11,25 +11,25 @@ import (
 	"github.com/docker/go-connections/sockets"
 	"github.com/docker/go-connections/tlsconfig"
 	"github.com/pkg/errors"
+	"go.opentelemetry.io/otel/trace"
 )
 
-// Opt is a configuration option to initialize a client
+// Opt is a configuration option to initialize a [Client].
 type Opt func(*Client) error
 
-// FromEnv configures the client with values from environment variables.
+// FromEnv configures the client with values from environment variables. It
+// is the equivalent of using the [WithTLSClientConfigFromEnv], [WithHostFromEnv],
+// and [WithVersionFromEnv] options.
 //
 // FromEnv uses the following environment variables:
 //
-// DOCKER_HOST (EnvOverrideHost) to set the URL to the docker server.
-//
-// DOCKER_API_VERSION (EnvOverrideAPIVersion) to set the version of the API to
-// use, leave empty for latest.
-//
-// DOCKER_CERT_PATH (EnvOverrideCertPath) to specify the directory from which to
-// load the TLS certificates (ca.pem, cert.pem, key.pem).
-//
-// DOCKER_TLS_VERIFY (EnvTLSVerify) to enable or disable TLS verification (off by
-// default).
+//   - DOCKER_HOST ([EnvOverrideHost]) to set the URL to the docker server.
+//   - DOCKER_API_VERSION ([EnvOverrideAPIVersion]) to set the version of the
+//     API to use, leave empty for latest.
+//   - DOCKER_CERT_PATH ([EnvOverrideCertPath]) to specify the directory from
+//     which to load the TLS certificates ("ca.pem", "cert.pem", "key.pem').
+//   - DOCKER_TLS_VERIFY ([EnvTLSVerify]) to enable or disable TLS verification
+//     (off by default).
 func FromEnv(c *Client) error {
 	ops := []Opt{
 		WithTLSClientConfigFromEnv(),
@@ -45,7 +45,8 @@ func FromEnv(c *Client) error {
 }
 
 // WithDialContext applies the dialer to the client transport. This can be
-// used to set the Timeout and KeepAlive settings of the client.
+// used to set the Timeout and KeepAlive settings of the client. It returns
+// an error if the client does not have a [http.Transport] configured.
 func WithDialContext(dialContext func(ctx context.Context, network, addr string) (net.Conn, error)) Opt {
 	return func(c *Client) error {
 		if transport, ok := c.client.Transport.(*http.Transport); ok {
@@ -75,7 +76,7 @@ func WithHost(host string) Opt {
 }
 
 // WithHostFromEnv overrides the client host with the host specified in the
-// DOCKER_HOST (EnvOverrideHost) environment variable. If DOCKER_HOST is not set,
+// DOCKER_HOST ([EnvOverrideHost]) environment variable. If DOCKER_HOST is not set,
 // or set to an empty value, the host is not modified.
 func WithHostFromEnv() Opt {
 	return func(c *Client) error {
@@ -86,7 +87,7 @@ func WithHostFromEnv() Opt {
 	}
 }
 
-// WithHTTPClient overrides the client http client with the specified one
+// WithHTTPClient overrides the client's HTTP client with the specified one.
 func WithHTTPClient(client *http.Client) Opt {
 	return func(c *Client) error {
 		if client != nil {
@@ -96,7 +97,7 @@ func WithHTTPClient(client *http.Client) Opt {
 	}
 }
 
-// WithTimeout configures the time limit for requests made by the HTTP client
+// WithTimeout configures the time limit for requests made by the HTTP client.
 func WithTimeout(timeout time.Duration) Opt {
 	return func(c *Client) error {
 		c.client.Timeout = timeout
@@ -104,7 +105,19 @@ func WithTimeout(timeout time.Duration) Opt {
 	}
 }
 
-// WithHTTPHeaders overrides the client default http headers
+// WithUserAgent configures the User-Agent header to use for HTTP requests.
+// It overrides any User-Agent set in headers. When set to an empty string,
+// the User-Agent header is removed, and no header is sent.
+func WithUserAgent(ua string) Opt {
+	return func(c *Client) error {
+		c.userAgent = &ua
+		return nil
+	}
+}
+
+// WithHTTPHeaders appends custom HTTP headers to the client's default headers.
+// It does not allow for built-in headers (such as "User-Agent", if set) to
+// be overridden. Also see [WithUserAgent].
 func WithHTTPHeaders(headers map[string]string) Opt {
 	return func(c *Client) error {
 		c.customHTTPHeaders = headers
@@ -112,7 +125,7 @@ func WithHTTPHeaders(headers map[string]string) Opt {
 	}
 }
 
-// WithScheme overrides the client scheme with the specified one
+// WithScheme overrides the client scheme with the specified one.
 func WithScheme(scheme string) Opt {
 	return func(c *Client) error {
 		c.scheme = scheme
@@ -120,51 +133,50 @@ func WithScheme(scheme string) Opt {
 	}
 }
 
-// WithTLSClientConfig applies a tls config to the client transport.
+// WithTLSClientConfig applies a TLS config to the client transport.
 func WithTLSClientConfig(cacertPath, certPath, keyPath string) Opt {
 	return func(c *Client) error {
-		opts := tlsconfig.Options{
+		transport, ok := c.client.Transport.(*http.Transport)
+		if !ok {
+			return errors.Errorf("cannot apply tls config to transport: %T", c.client.Transport)
+		}
+		config, err := tlsconfig.Client(tlsconfig.Options{
 			CAFile:             cacertPath,
 			CertFile:           certPath,
 			KeyFile:            keyPath,
 			ExclusiveRootPools: true,
-		}
-		config, err := tlsconfig.Client(opts)
+		})
 		if err != nil {
 			return errors.Wrap(err, "failed to create tls config")
 		}
-		if transport, ok := c.client.Transport.(*http.Transport); ok {
-			transport.TLSClientConfig = config
-			return nil
-		}
-		return errors.Errorf("cannot apply tls config to transport: %T", c.client.Transport)
+		transport.TLSClientConfig = config
+		return nil
 	}
 }
 
 // WithTLSClientConfigFromEnv configures the client's TLS settings with the
-// settings in the DOCKER_CERT_PATH and DOCKER_TLS_VERIFY environment variables.
-// If DOCKER_CERT_PATH is not set or empty, TLS configuration is not modified.
+// settings in the DOCKER_CERT_PATH ([EnvOverrideCertPath]) and DOCKER_TLS_VERIFY
+// ([EnvTLSVerify]) environment variables. If DOCKER_CERT_PATH is not set or empty,
+// TLS configuration is not modified.
 //
 // WithTLSClientConfigFromEnv uses the following environment variables:
 //
-// DOCKER_CERT_PATH (EnvOverrideCertPath) to specify the directory from which to
-// load the TLS certificates (ca.pem, cert.pem, key.pem).
-//
-// DOCKER_TLS_VERIFY (EnvTLSVerify) to enable or disable TLS verification (off by
-// default).
+//   - DOCKER_CERT_PATH ([EnvOverrideCertPath]) to specify the directory from
+//     which to load the TLS certificates ("ca.pem", "cert.pem", "key.pem").
+//   - DOCKER_TLS_VERIFY ([EnvTLSVerify]) to enable or disable TLS verification
+//     (off by default).
 func WithTLSClientConfigFromEnv() Opt {
 	return func(c *Client) error {
 		dockerCertPath := os.Getenv(EnvOverrideCertPath)
 		if dockerCertPath == "" {
 			return nil
 		}
-		options := tlsconfig.Options{
+		tlsc, err := tlsconfig.Client(tlsconfig.Options{
 			CAFile:             filepath.Join(dockerCertPath, "ca.pem"),
 			CertFile:           filepath.Join(dockerCertPath, "cert.pem"),
 			KeyFile:            filepath.Join(dockerCertPath, "key.pem"),
 			InsecureSkipVerify: os.Getenv(EnvTLSVerify) == "",
-		}
-		tlsc, err := tlsconfig.Client(options)
+		})
 		if err != nil {
 			return err
 		}
@@ -178,7 +190,8 @@ func WithTLSClientConfigFromEnv() Opt {
 }
 
 // WithVersion overrides the client version with the specified one. If an empty
-// version is specified, the value will be ignored to allow version negotiation.
+// version is provided, the value is ignored to allow version negotiation
+// (see [WithAPIVersionNegotiation]).
 func WithVersion(version string) Opt {
 	return func(c *Client) error {
 		if version != "" {
@@ -190,8 +203,9 @@ func WithVersion(version string) Opt {
 }
 
 // WithVersionFromEnv overrides the client version with the version specified in
-// the DOCKER_API_VERSION environment variable. If DOCKER_API_VERSION is not set,
-// the version is not modified.
+// the DOCKER_API_VERSION ([EnvOverrideAPIVersion]) environment variable.
+// If DOCKER_API_VERSION is not set, or set to an empty value, the version
+// is not modified.
 func WithVersionFromEnv() Opt {
 	return func(c *Client) error {
 		return WithVersion(os.Getenv(EnvOverrideAPIVersion))(c)
@@ -201,10 +215,19 @@ func WithVersionFromEnv() Opt {
 // WithAPIVersionNegotiation enables automatic API version negotiation for the client.
 // With this option enabled, the client automatically negotiates the API version
 // to use when making requests. API version negotiation is performed on the first
-// request; subsequent requests will not re-negotiate.
+// request; subsequent requests do not re-negotiate.
 func WithAPIVersionNegotiation() Opt {
 	return func(c *Client) error {
 		c.negotiateVersion = true
 		return nil
 	}
 }
+
+// WithTraceProvider sets the trace provider for the client.
+// If this is not set then the global trace provider will be used.
+func WithTraceProvider(provider trace.TracerProvider) Opt {
+	return func(c *Client) error {
+		c.tp = provider
+		return nil
+	}
+}
diff --git a/vendor/github.com/docker/docker/client/ping.go b/vendor/github.com/docker/docker/client/ping.go
index 347ae71e027..dfd1042fab2 100644
--- a/vendor/github.com/docker/docker/client/ping.go
+++ b/vendor/github.com/docker/docker/client/ping.go
@@ -21,11 +21,11 @@ func (cli *Client) Ping(ctx context.Context) (types.Ping, error) {
 	// Using cli.buildRequest() + cli.doRequest() instead of cli.sendRequest()
 	// because ping requests are used during API version negotiation, so we want
 	// to hit the non-versioned /_ping endpoint, not /v1.xx/_ping
-	req, err := cli.buildRequest(http.MethodHead, path.Join(cli.basePath, "/_ping"), nil, nil)
+	req, err := cli.buildRequest(ctx, http.MethodHead, path.Join(cli.basePath, "/_ping"), nil, nil)
 	if err != nil {
 		return ping, err
 	}
-	serverResp, err := cli.doRequest(ctx, req)
+	serverResp, err := cli.doRequest(req)
 	if err == nil {
 		defer ensureReaderClosed(serverResp)
 		switch serverResp.statusCode {
@@ -37,11 +37,9 @@ func (cli *Client) Ping(ctx context.Context) (types.Ping, error) {
 		return ping, err
 	}
 
-	req, err = cli.buildRequest(http.MethodGet, path.Join(cli.basePath, "/_ping"), nil, nil)
-	if err != nil {
-		return ping, err
-	}
-	serverResp, err = cli.doRequest(ctx, req)
+	// HEAD failed; fallback to GET.
+	req.Method = http.MethodGet
+	serverResp, err = cli.doRequest(req)
 	defer ensureReaderClosed(serverResp)
 	if err != nil {
 		return ping, err
diff --git a/vendor/github.com/docker/docker/client/plugin_install.go b/vendor/github.com/docker/docker/client/plugin_install.go
index 3a740ec4f60..69184619a2e 100644
--- a/vendor/github.com/docker/docker/client/plugin_install.go
+++ b/vendor/github.com/docker/docker/client/plugin_install.go
@@ -4,9 +4,10 @@ import (
 	"context"
 	"encoding/json"
 	"io"
+	"net/http"
 	"net/url"
 
-	"github.com/docker/distribution/reference"
+	"github.com/distribution/reference"
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/registry"
 	"github.com/docker/docker/errdefs"
@@ -68,13 +69,15 @@ func (cli *Client) PluginInstall(ctx context.Context, name string, options types
 }
 
 func (cli *Client) tryPluginPrivileges(ctx context.Context, query url.Values, registryAuth string) (serverResponse, error) {
-	headers := map[string][]string{registry.AuthHeader: {registryAuth}}
-	return cli.get(ctx, "/plugins/privileges", query, headers)
+	return cli.get(ctx, "/plugins/privileges", query, http.Header{
+		registry.AuthHeader: {registryAuth},
+	})
 }
 
 func (cli *Client) tryPluginPull(ctx context.Context, query url.Values, privileges types.PluginPrivileges, registryAuth string) (serverResponse, error) {
-	headers := map[string][]string{registry.AuthHeader: {registryAuth}}
-	return cli.post(ctx, "/plugins/pull", query, privileges, headers)
+	return cli.post(ctx, "/plugins/pull", query, privileges, http.Header{
+		registry.AuthHeader: {registryAuth},
+	})
 }
 
 func (cli *Client) checkPluginPermissions(ctx context.Context, query url.Values, options types.PluginInstallOptions) (types.PluginPrivileges, error) {
diff --git a/vendor/github.com/docker/docker/client/plugin_push.go b/vendor/github.com/docker/docker/client/plugin_push.go
index 18f9754c4c2..8f68a86eee4 100644
--- a/vendor/github.com/docker/docker/client/plugin_push.go
+++ b/vendor/github.com/docker/docker/client/plugin_push.go
@@ -3,14 +3,16 @@ package client // import "github.com/docker/docker/client"
 import (
 	"context"
 	"io"
+	"net/http"
 
 	"github.com/docker/docker/api/types/registry"
 )
 
 // PluginPush pushes a plugin to a registry
 func (cli *Client) PluginPush(ctx context.Context, name string, registryAuth string) (io.ReadCloser, error) {
-	headers := map[string][]string{registry.AuthHeader: {registryAuth}}
-	resp, err := cli.post(ctx, "/plugins/"+name+"/push", nil, nil, headers)
+	resp, err := cli.post(ctx, "/plugins/"+name+"/push", nil, nil, http.Header{
+		registry.AuthHeader: {registryAuth},
+	})
 	if err != nil {
 		return nil, err
 	}
diff --git a/vendor/github.com/docker/docker/client/plugin_upgrade.go b/vendor/github.com/docker/docker/client/plugin_upgrade.go
index 995d1fd2ca1..5cade450f44 100644
--- a/vendor/github.com/docker/docker/client/plugin_upgrade.go
+++ b/vendor/github.com/docker/docker/client/plugin_upgrade.go
@@ -3,9 +3,10 @@ package client // import "github.com/docker/docker/client"
 import (
 	"context"
 	"io"
+	"net/http"
 	"net/url"
 
-	"github.com/docker/distribution/reference"
+	"github.com/distribution/reference"
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/registry"
 	"github.com/pkg/errors"
@@ -13,7 +14,7 @@ import (
 
 // PluginUpgrade upgrades a plugin
 func (cli *Client) PluginUpgrade(ctx context.Context, name string, options types.PluginInstallOptions) (rc io.ReadCloser, err error) {
-	if err := cli.NewVersionError("1.26", "plugin upgrade"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.26", "plugin upgrade"); err != nil {
 		return nil, err
 	}
 	query := url.Values{}
@@ -35,6 +36,7 @@ func (cli *Client) PluginUpgrade(ctx context.Context, name string, options types
 }
 
 func (cli *Client) tryPluginUpgrade(ctx context.Context, query url.Values, privileges types.PluginPrivileges, name, registryAuth string) (serverResponse, error) {
-	headers := map[string][]string{registry.AuthHeader: {registryAuth}}
-	return cli.post(ctx, "/plugins/"+name+"/upgrade", query, privileges, headers)
+	return cli.post(ctx, "/plugins/"+name+"/upgrade", query, privileges, http.Header{
+		registry.AuthHeader: {registryAuth},
+	})
 }
diff --git a/vendor/github.com/docker/docker/client/request.go b/vendor/github.com/docker/docker/client/request.go
index bcedcf3bd9d..efe07bb9ea5 100644
--- a/vendor/github.com/docker/docker/client/request.go
+++ b/vendor/github.com/docker/docker/client/request.go
@@ -10,6 +10,7 @@ import (
 	"net/http"
 	"net/url"
 	"os"
+	"reflect"
 	"strings"
 
 	"github.com/docker/docker/api/types"
@@ -27,17 +28,17 @@ type serverResponse struct {
 }
 
 // head sends an http request to the docker API using the method HEAD.
-func (cli *Client) head(ctx context.Context, path string, query url.Values, headers map[string][]string) (serverResponse, error) {
+func (cli *Client) head(ctx context.Context, path string, query url.Values, headers http.Header) (serverResponse, error) {
 	return cli.sendRequest(ctx, http.MethodHead, path, query, nil, headers)
 }
 
 // get sends an http request to the docker API using the method GET with a specific Go context.
-func (cli *Client) get(ctx context.Context, path string, query url.Values, headers map[string][]string) (serverResponse, error) {
+func (cli *Client) get(ctx context.Context, path string, query url.Values, headers http.Header) (serverResponse, error) {
 	return cli.sendRequest(ctx, http.MethodGet, path, query, nil, headers)
 }
 
 // post sends an http request to the docker API using the method POST with a specific Go context.
-func (cli *Client) post(ctx context.Context, path string, query url.Values, obj interface{}, headers map[string][]string) (serverResponse, error) {
+func (cli *Client) post(ctx context.Context, path string, query url.Values, obj interface{}, headers http.Header) (serverResponse, error) {
 	body, headers, err := encodeBody(obj, headers)
 	if err != nil {
 		return serverResponse{}, err
@@ -45,34 +46,44 @@ func (cli *Client) post(ctx context.Context, path string, query url.Values, obj
 	return cli.sendRequest(ctx, http.MethodPost, path, query, body, headers)
 }
 
-func (cli *Client) postRaw(ctx context.Context, path string, query url.Values, body io.Reader, headers map[string][]string) (serverResponse, error) {
+func (cli *Client) postRaw(ctx context.Context, path string, query url.Values, body io.Reader, headers http.Header) (serverResponse, error) {
 	return cli.sendRequest(ctx, http.MethodPost, path, query, body, headers)
 }
 
-func (cli *Client) put(ctx context.Context, path string, query url.Values, obj interface{}, headers map[string][]string) (serverResponse, error) {
+func (cli *Client) put(ctx context.Context, path string, query url.Values, obj interface{}, headers http.Header) (serverResponse, error) {
 	body, headers, err := encodeBody(obj, headers)
 	if err != nil {
 		return serverResponse{}, err
 	}
-	return cli.sendRequest(ctx, http.MethodPut, path, query, body, headers)
+	return cli.putRaw(ctx, path, query, body, headers)
 }
 
 // putRaw sends an http request to the docker API using the method PUT.
-func (cli *Client) putRaw(ctx context.Context, path string, query url.Values, body io.Reader, headers map[string][]string) (serverResponse, error) {
+func (cli *Client) putRaw(ctx context.Context, path string, query url.Values, body io.Reader, headers http.Header) (serverResponse, error) {
+	// PUT requests are expected to always have a body (apparently)
+	// so explicitly pass an empty body to sendRequest to signal that
+	// it should set the Content-Type header if not already present.
+	if body == nil {
+		body = http.NoBody
+	}
 	return cli.sendRequest(ctx, http.MethodPut, path, query, body, headers)
 }
 
 // delete sends an http request to the docker API using the method DELETE.
-func (cli *Client) delete(ctx context.Context, path string, query url.Values, headers map[string][]string) (serverResponse, error) {
+func (cli *Client) delete(ctx context.Context, path string, query url.Values, headers http.Header) (serverResponse, error) {
 	return cli.sendRequest(ctx, http.MethodDelete, path, query, nil, headers)
 }
 
-type headers map[string][]string
-
-func encodeBody(obj interface{}, headers headers) (io.Reader, headers, error) {
+func encodeBody(obj interface{}, headers http.Header) (io.Reader, http.Header, error) {
 	if obj == nil {
 		return nil, headers, nil
 	}
+	// encoding/json encodes a nil pointer as the JSON document `null`,
+	// irrespective of whether the type implements json.Marshaler or encoding.TextMarshaler.
+	// That is almost certainly not what the caller intended as the request body.
+	if reflect.TypeOf(obj).Kind() == reflect.Ptr && reflect.ValueOf(obj).IsNil() {
+		return nil, headers, nil
+	}
 
 	body, err := encodeData(obj)
 	if err != nil {
@@ -85,13 +96,8 @@ func encodeBody(obj interface{}, headers headers) (io.Reader, headers, error) {
 	return body, headers, nil
 }
 
-func (cli *Client) buildRequest(method, path string, body io.Reader, headers headers) (*http.Request, error) {
-	expectedPayload := (method == http.MethodPost || method == http.MethodPut)
-	if expectedPayload && body == nil {
-		body = bytes.NewReader([]byte{})
-	}
-
-	req, err := http.NewRequest(method, path, body)
+func (cli *Client) buildRequest(ctx context.Context, method, path string, body io.Reader, headers http.Header) (*http.Request, error) {
+	req, err := http.NewRequestWithContext(ctx, method, path, body)
 	if err != nil {
 		return nil, err
 	}
@@ -104,19 +110,19 @@ func (cli *Client) buildRequest(method, path string, body io.Reader, headers hea
 		req.Host = DummyHost
 	}
 
-	if expectedPayload && req.Header.Get("Content-Type") == "" {
+	if body != nil && req.Header.Get("Content-Type") == "" {
 		req.Header.Set("Content-Type", "text/plain")
 	}
 	return req, nil
 }
 
-func (cli *Client) sendRequest(ctx context.Context, method, path string, query url.Values, body io.Reader, headers headers) (serverResponse, error) {
-	req, err := cli.buildRequest(method, cli.getAPIPath(ctx, path, query), body, headers)
+func (cli *Client) sendRequest(ctx context.Context, method, path string, query url.Values, body io.Reader, headers http.Header) (serverResponse, error) {
+	req, err := cli.buildRequest(ctx, method, cli.getAPIPath(ctx, path, query), body, headers)
 	if err != nil {
 		return serverResponse{}, err
 	}
 
-	resp, err := cli.doRequest(ctx, req)
+	resp, err := cli.doRequest(req)
 	switch {
 	case errors.Is(err, context.Canceled):
 		return serverResponse{}, errdefs.Cancelled(err)
@@ -128,10 +134,9 @@ func (cli *Client) sendRequest(ctx context.Context, method, path string, query u
 	return resp, errdefs.FromStatusCode(err, resp.statusCode)
 }
 
-func (cli *Client) doRequest(ctx context.Context, req *http.Request) (serverResponse, error) {
+func (cli *Client) doRequest(req *http.Request) (serverResponse, error) {
 	serverResp := serverResponse{statusCode: -1, reqURL: req.URL}
 
-	req = req.WithContext(ctx)
 	resp, err := cli.client.Do(req)
 	if err != nil {
 		if cli.scheme != "https" && strings.Contains(err.Error(), "malformed HTTP response") {
@@ -148,19 +153,19 @@ func (cli *Client) doRequest(ctx context.Context, req *http.Request) (serverResp
 			return serverResp, err
 		}
 
-		if nErr, ok := err.(*url.Error); ok {
-			if nErr, ok := nErr.Err.(*net.OpError); ok {
+		if uErr, ok := err.(*url.Error); ok {
+			if nErr, ok := uErr.Err.(*net.OpError); ok {
 				if os.IsPermission(nErr.Err) {
 					return serverResp, errors.Wrapf(err, "permission denied while trying to connect to the Docker daemon socket at %v", cli.host)
 				}
 			}
 		}
 
-		if err, ok := err.(net.Error); ok {
-			if err.Timeout() {
+		if nErr, ok := err.(net.Error); ok {
+			if nErr.Timeout() {
 				return serverResp, ErrorConnectionFailed(cli.host)
 			}
-			if strings.Contains(err.Error(), "connection refused") || strings.Contains(err.Error(), "dial unix") {
+			if strings.Contains(nErr.Error(), "connection refused") || strings.Contains(nErr.Error(), "dial unix") {
 				return serverResp, ErrorConnectionFailed(cli.host)
 			}
 		}
@@ -221,26 +226,20 @@ func (cli *Client) checkResponseErr(serverResp serverResponse) error {
 		return fmt.Errorf("request returned %s for API route and version %s, check if the server supports the requested API version", http.StatusText(serverResp.statusCode), serverResp.reqURL)
 	}
 
-	var ct string
-	if serverResp.header != nil {
-		ct = serverResp.header.Get("Content-Type")
-	}
-
-	var errorMessage string
-	if (cli.version == "" || versions.GreaterThan(cli.version, "1.23")) && ct == "application/json" {
+	var daemonErr error
+	if serverResp.header.Get("Content-Type") == "application/json" && (cli.version == "" || versions.GreaterThan(cli.version, "1.23")) {
 		var errorResponse types.ErrorResponse
 		if err := json.Unmarshal(body, &errorResponse); err != nil {
 			return errors.Wrap(err, "Error reading JSON")
 		}
-		errorMessage = strings.TrimSpace(errorResponse.Message)
+		daemonErr = errors.New(strings.TrimSpace(errorResponse.Message))
 	} else {
-		errorMessage = strings.TrimSpace(string(body))
+		daemonErr = errors.New(strings.TrimSpace(string(body)))
 	}
-
-	return errors.Wrap(errors.New(errorMessage), "Error response from daemon")
+	return errors.Wrap(daemonErr, "Error response from daemon")
 }
 
-func (cli *Client) addHeaders(req *http.Request, headers headers) *http.Request {
+func (cli *Client) addHeaders(req *http.Request, headers http.Header) *http.Request {
 	// Add CLI Config's HTTP Headers BEFORE we set the Docker headers
 	// then the user can't change OUR headers
 	for k, v := range cli.customHTTPHeaders {
@@ -253,6 +252,14 @@ func (cli *Client) addHeaders(req *http.Request, headers headers) *http.Request
 	for k, v := range headers {
 		req.Header[http.CanonicalHeaderKey(k)] = v
 	}
+
+	if cli.userAgent != nil {
+		if *cli.userAgent == "" {
+			req.Header.Del("User-Agent")
+		} else {
+			req.Header.Set("User-Agent", *cli.userAgent)
+		}
+	}
 	return req
 }
 
diff --git a/vendor/github.com/docker/docker/client/secret_create.go b/vendor/github.com/docker/docker/client/secret_create.go
index c65d38a191f..7b7f1ba7407 100644
--- a/vendor/github.com/docker/docker/client/secret_create.go
+++ b/vendor/github.com/docker/docker/client/secret_create.go
@@ -11,7 +11,7 @@ import (
 // SecretCreate creates a new secret.
 func (cli *Client) SecretCreate(ctx context.Context, secret swarm.SecretSpec) (types.SecretCreateResponse, error) {
 	var response types.SecretCreateResponse
-	if err := cli.NewVersionError("1.25", "secret create"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.25", "secret create"); err != nil {
 		return response, err
 	}
 	resp, err := cli.post(ctx, "/secrets/create", nil, secret, nil)
diff --git a/vendor/github.com/docker/docker/client/secret_inspect.go b/vendor/github.com/docker/docker/client/secret_inspect.go
index 5906874b15d..a9cb59889b0 100644
--- a/vendor/github.com/docker/docker/client/secret_inspect.go
+++ b/vendor/github.com/docker/docker/client/secret_inspect.go
@@ -11,7 +11,7 @@ import (
 
 // SecretInspectWithRaw returns the secret information with raw data
 func (cli *Client) SecretInspectWithRaw(ctx context.Context, id string) (swarm.Secret, []byte, error) {
-	if err := cli.NewVersionError("1.25", "secret inspect"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.25", "secret inspect"); err != nil {
 		return swarm.Secret{}, nil, err
 	}
 	if id == "" {
diff --git a/vendor/github.com/docker/docker/client/secret_list.go b/vendor/github.com/docker/docker/client/secret_list.go
index a0289c9f440..4d21639ef64 100644
--- a/vendor/github.com/docker/docker/client/secret_list.go
+++ b/vendor/github.com/docker/docker/client/secret_list.go
@@ -12,7 +12,7 @@ import (
 
 // SecretList returns the list of secrets.
 func (cli *Client) SecretList(ctx context.Context, options types.SecretListOptions) ([]swarm.Secret, error) {
-	if err := cli.NewVersionError("1.25", "secret list"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.25", "secret list"); err != nil {
 		return nil, err
 	}
 	query := url.Values{}
diff --git a/vendor/github.com/docker/docker/client/secret_remove.go b/vendor/github.com/docker/docker/client/secret_remove.go
index f47f68b6e0c..079ed673941 100644
--- a/vendor/github.com/docker/docker/client/secret_remove.go
+++ b/vendor/github.com/docker/docker/client/secret_remove.go
@@ -4,7 +4,7 @@ import "context"
 
 // SecretRemove removes a secret.
 func (cli *Client) SecretRemove(ctx context.Context, id string) error {
-	if err := cli.NewVersionError("1.25", "secret remove"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.25", "secret remove"); err != nil {
 		return err
 	}
 	resp, err := cli.delete(ctx, "/secrets/"+id, nil, nil)
diff --git a/vendor/github.com/docker/docker/client/secret_update.go b/vendor/github.com/docker/docker/client/secret_update.go
index 2e939e8ced7..9dfe67198bb 100644
--- a/vendor/github.com/docker/docker/client/secret_update.go
+++ b/vendor/github.com/docker/docker/client/secret_update.go
@@ -9,7 +9,7 @@ import (
 
 // SecretUpdate attempts to update a secret.
 func (cli *Client) SecretUpdate(ctx context.Context, id string, version swarm.Version, secret swarm.SecretSpec) error {
-	if err := cli.NewVersionError("1.25", "secret update"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.25", "secret update"); err != nil {
 		return err
 	}
 	query := url.Values{}
diff --git a/vendor/github.com/docker/docker/client/service_create.go b/vendor/github.com/docker/docker/client/service_create.go
index b6065b8eefd..2ebb5ee3a58 100644
--- a/vendor/github.com/docker/docker/client/service_create.go
+++ b/vendor/github.com/docker/docker/client/service_create.go
@@ -4,26 +4,28 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
+	"net/http"
 	"strings"
 
-	"github.com/docker/distribution/reference"
+	"github.com/distribution/reference"
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/registry"
 	"github.com/docker/docker/api/types/swarm"
+	"github.com/docker/docker/api/types/versions"
 	"github.com/opencontainers/go-digest"
 	"github.com/pkg/errors"
 )
 
 // ServiceCreate creates a new service.
-func (cli *Client) ServiceCreate(ctx context.Context, service swarm.ServiceSpec, options types.ServiceCreateOptions) (types.ServiceCreateResponse, error) {
-	var response types.ServiceCreateResponse
-	headers := map[string][]string{
-		"version": {cli.version},
-	}
+func (cli *Client) ServiceCreate(ctx context.Context, service swarm.ServiceSpec, options types.ServiceCreateOptions) (swarm.ServiceCreateResponse, error) {
+	var response swarm.ServiceCreateResponse
 
-	if options.EncodedRegistryAuth != "" {
-		headers[registry.AuthHeader] = []string{options.EncodedRegistryAuth}
-	}
+	// Make sure we negotiated (if the client is configured to do so),
+	// as code below contains API-version specific handling of options.
+	//
+	// Normally, version-negotiation (if enabled) would not happen until
+	// the API request is made.
+	cli.checkVersion(ctx)
 
 	// Make sure containerSpec is not nil when no runtime is set or the runtime is set to container
 	if service.TaskTemplate.ContainerSpec == nil && (service.TaskTemplate.Runtime == "" || service.TaskTemplate.Runtime == swarm.RuntimeContainer) {
@@ -53,6 +55,16 @@ func (cli *Client) ServiceCreate(ctx context.Context, service swarm.ServiceSpec,
 		}
 	}
 
+	headers := http.Header{}
+	if versions.LessThan(cli.version, "1.30") {
+		// the custom "version" header was used by engine API before 20.10
+		// (API 1.30) to switch between client- and server-side lookup of
+		// image digests.
+		headers["version"] = []string{cli.version}
+	}
+	if options.EncodedRegistryAuth != "" {
+		headers[registry.AuthHeader] = []string{options.EncodedRegistryAuth}
+	}
 	resp, err := cli.post(ctx, "/services/create", nil, service, headers)
 	defer ensureReaderClosed(resp)
 	if err != nil {
diff --git a/vendor/github.com/docker/docker/client/service_logs.go b/vendor/github.com/docker/docker/client/service_logs.go
index 906fd4059e6..e9e30a2ab49 100644
--- a/vendor/github.com/docker/docker/client/service_logs.go
+++ b/vendor/github.com/docker/docker/client/service_logs.go
@@ -6,14 +6,14 @@ import (
 	"net/url"
 	"time"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 	timetypes "github.com/docker/docker/api/types/time"
 	"github.com/pkg/errors"
 )
 
 // ServiceLogs returns the logs generated by a service in an io.ReadCloser.
 // It's up to the caller to close the stream.
-func (cli *Client) ServiceLogs(ctx context.Context, serviceID string, options types.ContainerLogsOptions) (io.ReadCloser, error) {
+func (cli *Client) ServiceLogs(ctx context.Context, serviceID string, options container.LogsOptions) (io.ReadCloser, error) {
 	query := url.Values{}
 	if options.ShowStdout {
 		query.Set("stdout", "1")
diff --git a/vendor/github.com/docker/docker/client/service_update.go b/vendor/github.com/docker/docker/client/service_update.go
index ff8cded8be3..e05eebf5665 100644
--- a/vendor/github.com/docker/docker/client/service_update.go
+++ b/vendor/github.com/docker/docker/client/service_update.go
@@ -3,30 +3,31 @@ package client // import "github.com/docker/docker/client"
 import (
 	"context"
 	"encoding/json"
+	"net/http"
 	"net/url"
 
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/registry"
 	"github.com/docker/docker/api/types/swarm"
+	"github.com/docker/docker/api/types/versions"
 )
 
 // ServiceUpdate updates a Service. The version number is required to avoid conflicting writes.
 // It should be the value as set *before* the update. You can find this value in the Meta field
 // of swarm.Service, which can be found using ServiceInspectWithRaw.
-func (cli *Client) ServiceUpdate(ctx context.Context, serviceID string, version swarm.Version, service swarm.ServiceSpec, options types.ServiceUpdateOptions) (types.ServiceUpdateResponse, error) {
+func (cli *Client) ServiceUpdate(ctx context.Context, serviceID string, version swarm.Version, service swarm.ServiceSpec, options types.ServiceUpdateOptions) (swarm.ServiceUpdateResponse, error) {
+	// Make sure we negotiated (if the client is configured to do so),
+	// as code below contains API-version specific handling of options.
+	//
+	// Normally, version-negotiation (if enabled) would not happen until
+	// the API request is made.
+	cli.checkVersion(ctx)
+
 	var (
 		query    = url.Values{}
-		response = types.ServiceUpdateResponse{}
+		response = swarm.ServiceUpdateResponse{}
 	)
 
-	headers := map[string][]string{
-		"version": {cli.version},
-	}
-
-	if options.EncodedRegistryAuth != "" {
-		headers[registry.AuthHeader] = []string{options.EncodedRegistryAuth}
-	}
-
 	if options.RegistryAuthFrom != "" {
 		query.Set("registryAuthFrom", options.RegistryAuthFrom)
 	}
@@ -60,6 +61,16 @@ func (cli *Client) ServiceUpdate(ctx context.Context, serviceID string, version
 		}
 	}
 
+	headers := http.Header{}
+	if versions.LessThan(cli.version, "1.30") {
+		// the custom "version" header was used by engine API before 20.10
+		// (API 1.30) to switch between client- and server-side lookup of
+		// image digests.
+		headers["version"] = []string{cli.version}
+	}
+	if options.EncodedRegistryAuth != "" {
+		headers[registry.AuthHeader] = []string{options.EncodedRegistryAuth}
+	}
 	resp, err := cli.post(ctx, "/services/"+serviceID+"/update", query, service, headers)
 	defer ensureReaderClosed(resp)
 	if err != nil {
diff --git a/vendor/github.com/docker/docker/client/task_logs.go b/vendor/github.com/docker/docker/client/task_logs.go
index 6222fab577d..b8c20e71dab 100644
--- a/vendor/github.com/docker/docker/client/task_logs.go
+++ b/vendor/github.com/docker/docker/client/task_logs.go
@@ -6,13 +6,13 @@ import (
 	"net/url"
 	"time"
 
-	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
 	timetypes "github.com/docker/docker/api/types/time"
 )
 
 // TaskLogs returns the logs generated by a task in an io.ReadCloser.
 // It's up to the caller to close the stream.
-func (cli *Client) TaskLogs(ctx context.Context, taskID string, options types.ContainerLogsOptions) (io.ReadCloser, error) {
+func (cli *Client) TaskLogs(ctx context.Context, taskID string, options container.LogsOptions) (io.ReadCloser, error) {
 	query := url.Values{}
 	if options.ShowStdout {
 		query.Set("stdout", "1")
diff --git a/vendor/github.com/docker/docker/client/transport.go b/vendor/github.com/docker/docker/client/transport.go
deleted file mode 100644
index 5541344366b..00000000000
--- a/vendor/github.com/docker/docker/client/transport.go
+++ /dev/null
@@ -1,17 +0,0 @@
-package client // import "github.com/docker/docker/client"
-
-import (
-	"crypto/tls"
-	"net/http"
-)
-
-// resolveTLSConfig attempts to resolve the TLS configuration from the
-// RoundTripper.
-func resolveTLSConfig(transport http.RoundTripper) *tls.Config {
-	switch tr := transport.(type) {
-	case *http.Transport:
-		return tr.TLSClientConfig
-	default:
-		return nil
-	}
-}
diff --git a/vendor/github.com/docker/docker/client/volume_prune.go b/vendor/github.com/docker/docker/client/volume_prune.go
index 6e324708f2b..9333f6ee78e 100644
--- a/vendor/github.com/docker/docker/client/volume_prune.go
+++ b/vendor/github.com/docker/docker/client/volume_prune.go
@@ -13,7 +13,7 @@ import (
 func (cli *Client) VolumesPrune(ctx context.Context, pruneFilters filters.Args) (types.VolumesPruneReport, error) {
 	var report types.VolumesPruneReport
 
-	if err := cli.NewVersionError("1.25", "volume prune"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.25", "volume prune"); err != nil {
 		return report, err
 	}
 
diff --git a/vendor/github.com/docker/docker/client/volume_remove.go b/vendor/github.com/docker/docker/client/volume_remove.go
index 1f264383606..31e08cb9759 100644
--- a/vendor/github.com/docker/docker/client/volume_remove.go
+++ b/vendor/github.com/docker/docker/client/volume_remove.go
@@ -10,8 +10,14 @@ import (
 // VolumeRemove removes a volume from the docker host.
 func (cli *Client) VolumeRemove(ctx context.Context, volumeID string, force bool) error {
 	query := url.Values{}
-	if versions.GreaterThanOrEqualTo(cli.version, "1.25") {
-		if force {
+	if force {
+		// Make sure we negotiated (if the client is configured to do so),
+		// as code below contains API-version specific handling of options.
+		//
+		// Normally, version-negotiation (if enabled) would not happen until
+		// the API request is made.
+		cli.checkVersion(ctx)
+		if versions.GreaterThanOrEqualTo(cli.version, "1.25") {
 			query.Set("force", "1")
 		}
 	}
diff --git a/vendor/github.com/docker/docker/client/volume_update.go b/vendor/github.com/docker/docker/client/volume_update.go
index 33bd31e5315..151863f07aa 100644
--- a/vendor/github.com/docker/docker/client/volume_update.go
+++ b/vendor/github.com/docker/docker/client/volume_update.go
@@ -11,7 +11,7 @@ import (
 // VolumeUpdate updates a volume. This only works for Cluster Volumes, and
 // only some fields can be updated.
 func (cli *Client) VolumeUpdate(ctx context.Context, volumeID string, version swarm.Version, options volume.UpdateOptions) error {
-	if err := cli.NewVersionError("1.42", "volume update"); err != nil {
+	if err := cli.NewVersionError(ctx, "1.42", "volume update"); err != nil {
 		return err
 	}
 
diff --git a/vendor/github.com/docker/docker/errdefs/defs.go b/vendor/github.com/docker/docker/errdefs/defs.go
index 61e7456b4eb..a5523c3e95f 100644
--- a/vendor/github.com/docker/docker/errdefs/defs.go
+++ b/vendor/github.com/docker/docker/errdefs/defs.go
@@ -1,4 +1,4 @@
-package errdefs // import "github.com/docker/docker/errdefs"
+package errdefs
 
 // ErrNotFound signals that the requested object doesn't exist
 type ErrNotFound interface {
diff --git a/vendor/github.com/docker/docker/errdefs/helpers.go b/vendor/github.com/docker/docker/errdefs/helpers.go
index fe06fb6f703..042de4b7b8a 100644
--- a/vendor/github.com/docker/docker/errdefs/helpers.go
+++ b/vendor/github.com/docker/docker/errdefs/helpers.go
@@ -1,4 +1,4 @@
-package errdefs // import "github.com/docker/docker/errdefs"
+package errdefs
 
 import "context"
 
diff --git a/vendor/github.com/docker/docker/errdefs/http_helpers.go b/vendor/github.com/docker/docker/errdefs/http_helpers.go
index 77bda389d1d..ebcd7893027 100644
--- a/vendor/github.com/docker/docker/errdefs/http_helpers.go
+++ b/vendor/github.com/docker/docker/errdefs/http_helpers.go
@@ -1,4 +1,4 @@
-package errdefs // import "github.com/docker/docker/errdefs"
+package errdefs
 
 import (
 	"net/http"
diff --git a/vendor/github.com/docker/docker/errdefs/is.go b/vendor/github.com/docker/docker/errdefs/is.go
index 3abf07d0c35..f94034cbd7d 100644
--- a/vendor/github.com/docker/docker/errdefs/is.go
+++ b/vendor/github.com/docker/docker/errdefs/is.go
@@ -1,9 +1,18 @@
-package errdefs // import "github.com/docker/docker/errdefs"
+package errdefs
+
+import (
+	"context"
+	"errors"
+)
 
 type causer interface {
 	Cause() error
 }
 
+type wrapErr interface {
+	Unwrap() error
+}
+
 func getImplementer(err error) error {
 	switch e := err.(type) {
 	case
@@ -23,6 +32,8 @@ func getImplementer(err error) error {
 		return err
 	case causer:
 		return getImplementer(e.Cause())
+	case wrapErr:
+		return getImplementer(e.Unwrap())
 	default:
 		return err
 	}
@@ -105,3 +116,8 @@ func IsDataLoss(err error) bool {
 	_, ok := getImplementer(err).(ErrDataLoss)
 	return ok
 }
+
+// IsContext returns if the passed in error is due to context cancellation or deadline exceeded.
+func IsContext(err error) bool {
+	return errors.Is(err, context.Canceled) || errors.Is(err, context.DeadlineExceeded)
+}
diff --git a/vendor/github.com/docker/docker/image/spec/specs-go/v1/image.go b/vendor/github.com/docker/docker/image/spec/specs-go/v1/image.go
new file mode 100644
index 00000000000..16726176350
--- /dev/null
+++ b/vendor/github.com/docker/docker/image/spec/specs-go/v1/image.go
@@ -0,0 +1,54 @@
+package v1
+
+import (
+	"time"
+
+	ocispec "github.com/opencontainers/image-spec/specs-go/v1"
+)
+
+const DockerOCIImageMediaType = "application/vnd.docker.container.image.v1+json"
+
+// DockerOCIImage is a ocispec.Image extended with Docker specific Config.
+type DockerOCIImage struct {
+	ocispec.Image
+
+	// Shadow ocispec.Image.Config
+	Config DockerOCIImageConfig `json:"config,omitempty"`
+}
+
+// DockerOCIImageConfig is a ocispec.ImageConfig extended with Docker specific fields.
+type DockerOCIImageConfig struct {
+	ocispec.ImageConfig
+
+	DockerOCIImageConfigExt
+}
+
+// DockerOCIImageConfigExt contains Docker-specific fields in DockerImageConfig.
+type DockerOCIImageConfigExt struct {
+	Healthcheck *HealthcheckConfig `json:",omitempty"` // Healthcheck describes how to check the container is healthy
+
+	OnBuild []string `json:",omitempty"` // ONBUILD metadata that were defined on the image Dockerfile
+	Shell   []string `json:",omitempty"` // Shell for shell-form of RUN, CMD, ENTRYPOINT
+}
+
+// HealthcheckConfig holds configuration settings for the HEALTHCHECK feature.
+type HealthcheckConfig struct {
+	// Test is the test to perform to check that the container is healthy.
+	// An empty slice means to inherit the default.
+	// The options are:
+	// {} : inherit healthcheck
+	// {"NONE"} : disable healthcheck
+	// {"CMD", args...} : exec arguments directly
+	// {"CMD-SHELL", command} : run command with system's default shell
+	Test []string `json:",omitempty"`
+
+	// Zero means to inherit. Durations are expressed as integer nanoseconds.
+	Interval      time.Duration `json:",omitempty"` // Interval is the time to wait between checks.
+	Timeout       time.Duration `json:",omitempty"` // Timeout is the time to wait before considering the check to have hung.
+	StartPeriod   time.Duration `json:",omitempty"` // The start period for the container to initialize before the retries starts to count down.
+	StartInterval time.Duration `json:",omitempty"` // The interval to attempt healthchecks at during the start period
+
+	// Retries is the number of consecutive failures needed to consider a container as unhealthy.
+	// Zero means inherit.
+	Retries int `json:",omitempty"`
+}
diff --git a/vendor/github.com/docker/docker/internal/multierror/multierror.go b/vendor/github.com/docker/docker/internal/multierror/multierror.go
new file mode 100644
index 00000000000..cf4d6a59574
--- /dev/null
+++ b/vendor/github.com/docker/docker/internal/multierror/multierror.go
@@ -0,0 +1,46 @@
+package multierror
+
+import (
+	"strings"
+)
+
+// Join is a drop-in replacement for errors.Join with better formatting.
+func Join(errs ...error) error {
+	n := 0
+	for _, err := range errs {
+		if err != nil {
+			n++
+		}
+	}
+	if n == 0 {
+		return nil
+	}
+	e := &joinError{
+		errs: make([]error, 0, n),
+	}
+	for _, err := range errs {
+		if err != nil {
+			e.errs = append(e.errs, err)
+		}
+	}
+	return e
+}
+
+type joinError struct {
+	errs []error
+}
+
+func (e *joinError) Error() string {
+	if len(e.errs) == 1 {
+		return strings.TrimSpace(e.errs[0].Error())
+	}
+	stringErrs := make([]string, 0, len(e.errs))
+	for _, subErr := range e.errs {
+		stringErrs = append(stringErrs, strings.Replace(subErr.Error(), "\n", "\n\t", -1))
+	}
+	return "* " + strings.Join(stringErrs, "\n* ")
+}
+
+func (e *joinError) Unwrap() []error {
+	return e.errs
+}
diff --git a/vendor/github.com/emicklei/go-restful/v3/CHANGES.md b/vendor/github.com/emicklei/go-restful/v3/CHANGES.md
index 352018e7037..5edd5a7ca9a 100644
--- a/vendor/github.com/emicklei/go-restful/v3/CHANGES.md
+++ b/vendor/github.com/emicklei/go-restful/v3/CHANGES.md
@@ -1,11 +1,15 @@
 # Change history of go-restful
 
-## [v3.10.2] - 2023-03-09
+## [v3.11.0] - 2023-08-19
+
+- restored behavior as <= v3.9.0 with option to change path strategy using TrimRightSlashEnabled. 
+
+## [v3.10.2] - 2023-03-09 - DO NOT USE
 
 - introduced MergePathStrategy to be able to revert behaviour of path concatenation to 3.9.0
   see comment in Readme how to customize this behaviour.
 
-## [v3.10.1] - 2022-11-19
+## [v3.10.1] - 2022-11-19 - DO NOT USE
 
 - fix broken 3.10.0 by using path package for joining paths
 
diff --git a/vendor/github.com/emicklei/go-restful/v3/README.md b/vendor/github.com/emicklei/go-restful/v3/README.md
index 85da90128e4..e3e30080ec1 100644
--- a/vendor/github.com/emicklei/go-restful/v3/README.md
+++ b/vendor/github.com/emicklei/go-restful/v3/README.md
@@ -79,7 +79,7 @@ func (u UserResource) findUser(request *restful.Request, response *restful.Respo
 - Content encoding (gzip,deflate) of request and response payloads
 - Automatic responses on OPTIONS (using a filter)
 - Automatic CORS request handling (using a filter)
-- API declaration for Swagger UI ([go-restful-openapi](https://github.com/emicklei/go-restful-openapi), see [go-restful-swagger12](https://github.com/emicklei/go-restful-swagger12))
+- API declaration for Swagger UI ([go-restful-openapi](https://github.com/emicklei/go-restful-openapi))
 - Panic recovery to produce HTTP 500, customizable using RecoverHandler(...)
 - Route errors produce HTTP 404/405/406/415 errors, customizable using ServiceErrorHandler(...)
 - Configurable (trace) logging
@@ -96,10 +96,7 @@ There are several hooks to customize the behavior of the go-restful package.
 - Compression
 - Encoders for other serializers
 - Use [jsoniter](https://github.com/json-iterator/go) by building this package using a build tag, e.g. `go build -tags=jsoniter .` 
-- Use the variable `MergePathStrategy` to change the behaviour of composing the Route path given a root path and a local route path	
-	- versions >= 3.10.1 has set the value to `PathJoinStrategy` that fixes a reported [security issue](https://github.com/advisories/GHSA-r48q-9g5r-8q2h) but may cause your services not to work correctly anymore.
-	- versions <= 3.9 had the behaviour that can be restored in newer versions by setting the value to `TrimSlashStrategy`.
-	- you can set value to a custom implementation (must implement MergePathStrategyFunc)
+- Use the package variable `TrimRightSlashEnabled` (default true) to control the behavior of matching routes that end with a slash `/` 
 
 ## Resources
 
@@ -112,4 +109,4 @@ There are several hooks to customize the behavior of the go-restful package.
 
 Type ```git shortlog -s``` for a full list of contributors.
 
-© 2012 - 2022, http://ernestmicklei.com. MIT License. Contributions are welcome.
+© 2012 - 2023, http://ernestmicklei.com. MIT License. Contributions are welcome.
diff --git a/vendor/github.com/emicklei/go-restful/v3/route.go b/vendor/github.com/emicklei/go-restful/v3/route.go
index ea05b3da887..306c44be779 100644
--- a/vendor/github.com/emicklei/go-restful/v3/route.go
+++ b/vendor/github.com/emicklei/go-restful/v3/route.go
@@ -40,7 +40,8 @@ type Route struct {
 	ParameterDocs           []*Parameter
 	ResponseErrors          map[int]ResponseError
 	DefaultResponse         *ResponseError
-	ReadSample, WriteSample interface{} // structs that model an example request or response payload
+	ReadSample, WriteSample interface{}   // structs that model an example request or response payload
+	WriteSamples            []interface{} // if more than one return types is possible (oneof) then this will contain multiple values
 
 	// Extra information used to store custom information about the route.
 	Metadata map[string]interface{}
@@ -164,7 +165,13 @@ func tokenizePath(path string) []string {
 	if "/" == path {
 		return nil
 	}
-	return strings.Split(strings.TrimLeft(path, "/"), "/")
+	if TrimRightSlashEnabled {
+		// 3.9.0
+		return strings.Split(strings.Trim(path, "/"), "/")
+	} else {
+		// 3.10.2
+		return strings.Split(strings.TrimLeft(path, "/"), "/")
+	}
 }
 
 // for debugging
@@ -177,4 +184,8 @@ func (r *Route) EnableContentEncoding(enabled bool) {
 	r.contentEncodingEnabled = &enabled
 }
 
-var TrimRightSlashEnabled = false
+// TrimRightSlashEnabled controls whether
+// - path on route building is using path.Join
+// - the path of the incoming request is trimmed of its slash suffux.
+// Value of true matches the behavior of <= 3.9.0
+var TrimRightSlashEnabled = true
diff --git a/vendor/github.com/emicklei/go-restful/v3/route_builder.go b/vendor/github.com/emicklei/go-restful/v3/route_builder.go
index 827f471de00..75168c12e1a 100644
--- a/vendor/github.com/emicklei/go-restful/v3/route_builder.go
+++ b/vendor/github.com/emicklei/go-restful/v3/route_builder.go
@@ -31,17 +31,18 @@ type RouteBuilder struct {
 	typeNameHandleFunc TypeNameHandleFunction // required
 
 	// documentation
-	doc                     string
-	notes                   string
-	operation               string
-	readSample, writeSample interface{}
-	parameters              []*Parameter
-	errorMap                map[int]ResponseError
-	defaultResponse         *ResponseError
-	metadata                map[string]interface{}
-	extensions              map[string]interface{}
-	deprecated              bool
-	contentEncodingEnabled  *bool
+	doc                    string
+	notes                  string
+	operation              string
+	readSample             interface{}
+	writeSamples           []interface{}
+	parameters             []*Parameter
+	errorMap               map[int]ResponseError
+	defaultResponse        *ResponseError
+	metadata               map[string]interface{}
+	extensions             map[string]interface{}
+	deprecated             bool
+	contentEncodingEnabled *bool
 }
 
 // Do evaluates each argument with the RouteBuilder itself.
@@ -135,9 +136,9 @@ func (b RouteBuilder) ParameterNamed(name string) (p *Parameter) {
 	return p
 }
 
-// Writes tells what resource type will be written as the response payload. Optional.
-func (b *RouteBuilder) Writes(sample interface{}) *RouteBuilder {
-	b.writeSample = sample
+// Writes tells which one of the resource types will be written as the response payload. Optional.
+func (b *RouteBuilder) Writes(samples ...interface{}) *RouteBuilder {
+	b.writeSamples = samples // oneof
 	return b
 }
 
@@ -342,39 +343,29 @@ func (b *RouteBuilder) Build() Route {
 		ResponseErrors:                   b.errorMap,
 		DefaultResponse:                  b.defaultResponse,
 		ReadSample:                       b.readSample,
-		WriteSample:                      b.writeSample,
+		WriteSamples:                     b.writeSamples,
 		Metadata:                         b.metadata,
 		Deprecated:                       b.deprecated,
 		contentEncodingEnabled:           b.contentEncodingEnabled,
 		allowedMethodsWithoutContentType: b.allowedMethodsWithoutContentType,
 	}
+	// set WriteSample if one specified
+	if len(b.writeSamples) == 1 {
+		route.WriteSample = b.writeSamples[0]
+	}
 	route.Extensions = b.extensions
 	route.postBuild()
 	return route
 }
 
-type MergePathStrategyFunc func(rootPath, routePath string) string
-
-var (
-	// behavior >= 3.10
-	PathJoinStrategy = func(rootPath, routePath string) string {
-		return path.Join(rootPath, routePath)
-	}
+// merge two paths using the current (package global) merge path strategy.
+func concatPath(rootPath, routePath string) string {
 
-	// behavior <= 3.9
-	TrimSlashStrategy = func(rootPath, routePath string) string {
+	if TrimRightSlashEnabled {
 		return strings.TrimRight(rootPath, "/") + "/" + strings.TrimLeft(routePath, "/")
+	} else {
+		return path.Join(rootPath, routePath)
 	}
-
-	// MergePathStrategy is the active strategy for merging a Route path when building the routing of all WebServices.
-	// The value is set to PathJoinStrategy
-	// PathJoinStrategy is a strategy that is more strict [Security - PRISMA-2022-0227]
-	MergePathStrategy = PathJoinStrategy
-)
-
-// merge two paths using the current (package global) merge path strategy.
-func concatPath(rootPath, routePath string) string {
-	return MergePathStrategy(rootPath, routePath)
 }
 
 var anonymousFuncCount int32
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/annotations/deprecation.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/annotations/deprecation.pb.go
index 2a73462bfb1..75ba29582d4 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/annotations/deprecation.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/annotations/deprecation.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/annotations/deprecation.proto
 
 package annotations
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/annotations/resource.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/annotations/resource.pb.go
index 597d6da5c9a..5da50ae67a3 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/annotations/resource.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/annotations/resource.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/annotations/resource.proto
 
 package annotations
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/address.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/address.pb.go
index 7f61c14b8a2..6ad40af6423 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/address.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/address.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/address.proto
 
 package corev3
@@ -138,6 +138,7 @@ type EnvoyInternalAddress struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to AddressNameSpecifier:
+	//
 	//	*EnvoyInternalAddress_ServerListenerName
 	AddressNameSpecifier isEnvoyInternalAddress_AddressNameSpecifier `protobuf_oneof:"address_name_specifier"`
 	// Specifies an endpoint identifier to distinguish between multiple endpoints for the same internal listener in a
@@ -219,18 +220,19 @@ type SocketAddress struct {
 
 	Protocol SocketAddress_Protocol `protobuf:"varint,1,opt,name=protocol,proto3,enum=envoy.config.core.v3.SocketAddress_Protocol" json:"protocol,omitempty"`
 	// The address for this socket. :ref:`Listeners <config_listeners>` will bind
-	// to the address. An empty address is not allowed. Specify ``0.0.0.0`` or ``::``
+	// to the address. An empty address is not allowed. Specify “0.0.0.0“ or “::“
 	// to bind to any address. [#comment:TODO(zuercher) reinstate when implemented:
 	// It is possible to distinguish a Listener address via the prefix/suffix matching
 	// in :ref:`FilterChainMatch <envoy_v3_api_msg_config.listener.v3.FilterChainMatch>`.] When used
 	// within an upstream :ref:`BindConfig <envoy_v3_api_msg_config.core.v3.BindConfig>`, the address
 	// controls the source address of outbound connections. For :ref:`clusters
 	// <envoy_v3_api_msg_config.cluster.v3.Cluster>`, the cluster type determines whether the
-	// address must be an IP (``STATIC`` or ``EDS`` clusters) or a hostname resolved by DNS
-	// (``STRICT_DNS`` or ``LOGICAL_DNS`` clusters). Address resolution can be customized
+	// address must be an IP (“STATIC“ or “EDS“ clusters) or a hostname resolved by DNS
+	// (“STRICT_DNS“ or “LOGICAL_DNS“ clusters). Address resolution can be customized
 	// via :ref:`resolver_name <envoy_v3_api_field_config.core.v3.SocketAddress.resolver_name>`.
 	Address string `protobuf:"bytes,2,opt,name=address,proto3" json:"address,omitempty"`
 	// Types that are assignable to PortSpecifier:
+	//
 	//	*SocketAddress_PortValue
 	//	*SocketAddress_NamedPort
 	PortSpecifier isSocketAddress_PortSpecifier `protobuf_oneof:"port_specifier"`
@@ -238,12 +240,12 @@ type SocketAddress struct {
 	// this is empty, a context dependent default applies. If the address is a concrete
 	// IP address, no resolution will occur. If address is a hostname this
 	// should be set for resolution other than DNS. Specifying a custom resolver with
-	// ``STRICT_DNS`` or ``LOGICAL_DNS`` will generate an error at runtime.
+	// “STRICT_DNS“ or “LOGICAL_DNS“ will generate an error at runtime.
 	ResolverName string `protobuf:"bytes,5,opt,name=resolver_name,json=resolverName,proto3" json:"resolver_name,omitempty"`
 	// When binding to an IPv6 address above, this enables `IPv4 compatibility
-	// <https://tools.ietf.org/html/rfc3493#page-11>`_. Binding to ``::`` will
+	// <https://tools.ietf.org/html/rfc3493#page-11>`_. Binding to “::“ will
 	// allow both IPv4 and IPv6 connections, with peer IPv4 addresses mapped into
-	// IPv6 space as ``::FFFF:<IPv4-address>``.
+	// IPv6 space as “::FFFF:<IPv4-address>“.
 	Ipv4Compat bool `protobuf:"varint,6,opt,name=ipv4_compat,json=ipv4Compat,proto3" json:"ipv4_compat,omitempty"`
 }
 
@@ -481,7 +483,7 @@ func (x *ExtraSourceAddress) GetSocketOptions() *SocketOptionsOverride {
 	return nil
 }
 
-// [#next-free-field: 6]
+// [#next-free-field: 7]
 type BindConfig struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -489,31 +491,32 @@ type BindConfig struct {
 
 	// The address to bind to when creating a socket.
 	SourceAddress *SocketAddress `protobuf:"bytes,1,opt,name=source_address,json=sourceAddress,proto3" json:"source_address,omitempty"`
-	// Whether to set the ``IP_FREEBIND`` option when creating the socket. When this
+	// Whether to set the “IP_FREEBIND“ option when creating the socket. When this
 	// flag is set to true, allows the :ref:`source_address
 	// <envoy_v3_api_field_config.core.v3.BindConfig.source_address>` to be an IP address
 	// that is not configured on the system running Envoy. When this flag is set
-	// to false, the option ``IP_FREEBIND`` is disabled on the socket. When this
+	// to false, the option “IP_FREEBIND“ is disabled on the socket. When this
 	// flag is not set (default), the socket is not modified, i.e. the option is
 	// neither enabled nor disabled.
 	Freebind *wrappers.BoolValue `protobuf:"bytes,2,opt,name=freebind,proto3" json:"freebind,omitempty"`
 	// Additional socket options that may not be present in Envoy source code or
 	// precompiled binaries.
 	SocketOptions []*SocketOption `protobuf:"bytes,3,rep,name=socket_options,json=socketOptions,proto3" json:"socket_options,omitempty"`
-	// Extra source addresses appended to the address specified in the `source_address`
-	// field. This enables to specify multiple source addresses. Currently, only one extra
-	// address can be supported, and the extra address should have a different IP version
-	// with the address in the `source_address` field. The address which has the same IP
-	// version with the target host's address IP version will be used as bind address. If more
-	// than one extra address specified, only the first address matched IP version will be
-	// returned. If there is no same IP version address found, the address in the `source_address`
-	// will be returned.
+	// Extra source addresses appended to the address specified in the “source_address“
+	// field. This enables to specify multiple source addresses.
+	// The source address selection is determined by :ref:`local_address_selector
+	// <envoy_v3_api_field_config.core.v3.BindConfig.local_address_selector>`.
 	ExtraSourceAddresses []*ExtraSourceAddress `protobuf:"bytes,5,rep,name=extra_source_addresses,json=extraSourceAddresses,proto3" json:"extra_source_addresses,omitempty"`
 	// Deprecated by
 	// :ref:`extra_source_addresses <envoy_v3_api_field_config.core.v3.BindConfig.extra_source_addresses>`
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/config/core/v3/address.proto.
 	AdditionalSourceAddresses []*SocketAddress `protobuf:"bytes,4,rep,name=additional_source_addresses,json=additionalSourceAddresses,proto3" json:"additional_source_addresses,omitempty"`
+	// Custom local address selector to override the default (i.e.
+	// :ref:`DefaultLocalAddressSelector
+	// <envoy_v3_api_msg_config.upstream.local_address_selector.v3.DefaultLocalAddressSelector>`).
+	// [#extension-category: envoy.upstream.local_address_selector]
+	LocalAddressSelector *TypedExtensionConfig `protobuf:"bytes,6,opt,name=local_address_selector,json=localAddressSelector,proto3" json:"local_address_selector,omitempty"`
 }
 
 func (x *BindConfig) Reset() {
@@ -576,7 +579,7 @@ func (x *BindConfig) GetExtraSourceAddresses() []*ExtraSourceAddress {
 	return nil
 }
 
-// Deprecated: Do not use.
+// Deprecated: Marked as deprecated in envoy/config/core/v3/address.proto.
 func (x *BindConfig) GetAdditionalSourceAddresses() []*SocketAddress {
 	if x != nil {
 		return x.AdditionalSourceAddresses
@@ -584,6 +587,13 @@ func (x *BindConfig) GetAdditionalSourceAddresses() []*SocketAddress {
 	return nil
 }
 
+func (x *BindConfig) GetLocalAddressSelector() *TypedExtensionConfig {
+	if x != nil {
+		return x.LocalAddressSelector
+	}
+	return nil
+}
+
 // Addresses specify either a logical or physical address and port, which are
 // used to tell Envoy where to bind/listen, connect to upstream and find
 // management servers.
@@ -593,6 +603,7 @@ type Address struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Address:
+	//
 	//	*Address_SocketAddress
 	//	*Address_Pipe
 	//	*Address_EnvoyInternalAddress
@@ -690,7 +701,7 @@ type CidrRange struct {
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	// IPv4 or IPv6 address, e.g. ``192.0.0.0`` or ``2001:db8::``.
+	// IPv4 or IPv6 address, e.g. “192.0.0.0“ or “2001:db8::“.
 	AddressPrefix string `protobuf:"bytes,1,opt,name=address_prefix,json=addressPrefix,proto3" json:"address_prefix,omitempty"`
 	// Length of prefix, e.g. 0, 32. Defaults to 0 when unset.
 	PrefixLen *wrappers.UInt32Value `protobuf:"bytes,2,opt,name=prefix_len,json=prefixLen,proto3" json:"prefix_len,omitempty"`
@@ -748,153 +759,162 @@ var file_envoy_config_core_v3_address_proto_rawDesc = []byte{
 	0x0a, 0x22, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63,
 	0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x2f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x2e, 0x70,
 	0x72, 0x6f, 0x74, 0x6f, 0x12, 0x14, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66,
-	0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x1a, 0x28, 0x65, 0x6e, 0x76, 0x6f,
+	0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x1a, 0x24, 0x65, 0x6e, 0x76, 0x6f,
 	0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33,
-	0x2f, 0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x70,
-	0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x1e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2f, 0x70, 0x72, 0x6f,
-	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2f, 0x77, 0x72, 0x61, 0x70, 0x70, 0x65, 0x72, 0x73, 0x2e, 0x70,
-	0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x23, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x61, 0x6e, 0x6e, 0x6f,
-	0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2f, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74,
-	0x69, 0x6f, 0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x1d, 0x75, 0x64, 0x70, 0x61, 0x2f,
-	0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2f, 0x73, 0x74, 0x61, 0x74,
-	0x75, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x21, 0x75, 0x64, 0x70, 0x61, 0x2f, 0x61,
-	0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2f, 0x76, 0x65, 0x72, 0x73, 0x69,
-	0x6f, 0x6e, 0x69, 0x6e, 0x67, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x17, 0x76, 0x61, 0x6c,
-	0x69, 0x64, 0x61, 0x74, 0x65, 0x2f, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2e, 0x70,
-	0x72, 0x6f, 0x74, 0x6f, 0x22, 0x60, 0x0a, 0x04, 0x50, 0x69, 0x70, 0x65, 0x12, 0x1b, 0x0a, 0x04,
-	0x70, 0x61, 0x74, 0x68, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72,
-	0x02, 0x10, 0x01, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x12, 0x1c, 0x0a, 0x04, 0x6d, 0x6f, 0x64,
-	0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0d, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x2a, 0x03, 0x18, 0xff,
-	0x03, 0x52, 0x04, 0x6d, 0x6f, 0x64, 0x65, 0x3a, 0x1d, 0x9a, 0xc5, 0x88, 0x1e, 0x18, 0x0a, 0x16,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72,
-	0x65, 0x2e, 0x50, 0x69, 0x70, 0x65, 0x22, 0x8a, 0x01, 0x0a, 0x14, 0x45, 0x6e, 0x76, 0x6f, 0x79,
-	0x49, 0x6e, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x12,
-	0x32, 0x0a, 0x14, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x5f, 0x6c, 0x69, 0x73, 0x74, 0x65, 0x6e,
-	0x65, 0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x48, 0x00, 0x52,
-	0x12, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x4c, 0x69, 0x73, 0x74, 0x65, 0x6e, 0x65, 0x72, 0x4e,
-	0x61, 0x6d, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x65, 0x6e, 0x64, 0x70, 0x6f, 0x69, 0x6e, 0x74, 0x5f,
-	0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x65, 0x6e, 0x64, 0x70, 0x6f, 0x69,
-	0x6e, 0x74, 0x49, 0x64, 0x42, 0x1d, 0x0a, 0x16, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x5f,
-	0x6e, 0x61, 0x6d, 0x65, 0x5f, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x03,
-	0xf8, 0x42, 0x01, 0x22, 0xf6, 0x02, 0x0a, 0x0d, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x41, 0x64,
-	0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x52, 0x0a, 0x08, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f,
-	0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2c, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
-	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53,
-	0x6f, 0x63, 0x6b, 0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x2e, 0x50, 0x72, 0x6f,
-	0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x82, 0x01, 0x02, 0x10, 0x01, 0x52,
-	0x08, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x12, 0x21, 0x0a, 0x07, 0x61, 0x64, 0x64,
-	0x72, 0x65, 0x73, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72,
-	0x02, 0x10, 0x01, 0x52, 0x07, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x2a, 0x0a, 0x0a,
-	0x70, 0x6f, 0x72, 0x74, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0d,
-	0x42, 0x09, 0xfa, 0x42, 0x06, 0x2a, 0x04, 0x18, 0xff, 0xff, 0x03, 0x48, 0x00, 0x52, 0x09, 0x70,
-	0x6f, 0x72, 0x74, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x1f, 0x0a, 0x0a, 0x6e, 0x61, 0x6d, 0x65,
-	0x64, 0x5f, 0x70, 0x6f, 0x72, 0x74, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x48, 0x00, 0x52, 0x09,
-	0x6e, 0x61, 0x6d, 0x65, 0x64, 0x50, 0x6f, 0x72, 0x74, 0x12, 0x23, 0x0a, 0x0d, 0x72, 0x65, 0x73,
-	0x6f, 0x6c, 0x76, 0x65, 0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x0c, 0x72, 0x65, 0x73, 0x6f, 0x6c, 0x76, 0x65, 0x72, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x1f,
-	0x0a, 0x0b, 0x69, 0x70, 0x76, 0x34, 0x5f, 0x63, 0x6f, 0x6d, 0x70, 0x61, 0x74, 0x18, 0x06, 0x20,
-	0x01, 0x28, 0x08, 0x52, 0x0a, 0x69, 0x70, 0x76, 0x34, 0x43, 0x6f, 0x6d, 0x70, 0x61, 0x74, 0x22,
-	0x1c, 0x0a, 0x08, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x12, 0x07, 0x0a, 0x03, 0x54,
-	0x43, 0x50, 0x10, 0x00, 0x12, 0x07, 0x0a, 0x03, 0x55, 0x44, 0x50, 0x10, 0x01, 0x3a, 0x26, 0x9a,
-	0xc5, 0x88, 0x1e, 0x21, 0x0a, 0x1f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e,
-	0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x41, 0x64,
-	0x64, 0x72, 0x65, 0x73, 0x73, 0x42, 0x15, 0x0a, 0x0e, 0x70, 0x6f, 0x72, 0x74, 0x5f, 0x73, 0x70,
-	0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x22, 0x90, 0x02, 0x0a,
-	0x0c, 0x54, 0x63, 0x70, 0x4b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x12, 0x47, 0x0a,
-	0x10, 0x6b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x5f, 0x70, 0x72, 0x6f, 0x62, 0x65,
-	0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
-	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32,
-	0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0f, 0x6b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65,
-	0x50, 0x72, 0x6f, 0x62, 0x65, 0x73, 0x12, 0x43, 0x0a, 0x0e, 0x6b, 0x65, 0x65, 0x70, 0x61, 0x6c,
-	0x69, 0x76, 0x65, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c,
-	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
-	0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0d, 0x6b, 0x65,
-	0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x54, 0x69, 0x6d, 0x65, 0x12, 0x4b, 0x0a, 0x12, 0x6b,
-	0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x5f, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61,
-	0x6c, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
-	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32,
-	0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x11, 0x6b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65,
-	0x49, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x3a, 0x25, 0x9a, 0xc5, 0x88, 0x1e, 0x20, 0x0a,
-	0x1e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f,
-	0x72, 0x65, 0x2e, 0x54, 0x63, 0x70, 0x4b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x22,
-	0xb1, 0x01, 0x0a, 0x12, 0x45, 0x78, 0x74, 0x72, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x41,
-	0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x47, 0x0a, 0x07, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73,
-	0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
-	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53,
-	0x6f, 0x63, 0x6b, 0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x42, 0x08, 0xfa, 0x42,
-	0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x07, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x12,
-	0x52, 0x0a, 0x0e, 0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
-	0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2b, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
-	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53,
-	0x6f, 0x63, 0x6b, 0x65, 0x74, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x4f, 0x76, 0x65, 0x72,
-	0x72, 0x69, 0x64, 0x65, 0x52, 0x0d, 0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x4f, 0x70, 0x74, 0x69,
-	0x6f, 0x6e, 0x73, 0x22, 0xd2, 0x03, 0x0a, 0x0a, 0x42, 0x69, 0x6e, 0x64, 0x43, 0x6f, 0x6e, 0x66,
-	0x69, 0x67, 0x12, 0x4a, 0x0a, 0x0e, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x61, 0x64, 0x64,
-	0x72, 0x65, 0x73, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x65, 0x6e, 0x76,
-	0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76,
-	0x33, 0x2e, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x52,
-	0x0d, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x36,
-	0x0a, 0x08, 0x66, 0x72, 0x65, 0x65, 0x62, 0x69, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
-	0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x08, 0x66, 0x72,
-	0x65, 0x65, 0x62, 0x69, 0x6e, 0x64, 0x12, 0x49, 0x0a, 0x0e, 0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74,
-	0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x22,
-	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f,
-	0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x4f, 0x70, 0x74, 0x69,
-	0x6f, 0x6e, 0x52, 0x0d, 0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
-	0x73, 0x12, 0x5e, 0x0a, 0x16, 0x65, 0x78, 0x74, 0x72, 0x61, 0x5f, 0x73, 0x6f, 0x75, 0x72, 0x63,
-	0x65, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x65, 0x73, 0x18, 0x05, 0x20, 0x03, 0x28,
-	0x0b, 0x32, 0x28, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67,
-	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x45, 0x78, 0x74, 0x72, 0x61, 0x53, 0x6f,
-	0x75, 0x72, 0x63, 0x65, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x52, 0x14, 0x65, 0x78, 0x74,
-	0x72, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x65,
-	0x73, 0x12, 0x70, 0x0a, 0x1b, 0x61, 0x64, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x5f,
-	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x65, 0x73,
-	0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63,
-	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53, 0x6f,
-	0x63, 0x6b, 0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x42, 0x0b, 0x18, 0x01, 0x92,
-	0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x52, 0x19, 0x61, 0x64, 0x64, 0x69, 0x74, 0x69,
-	0x6f, 0x6e, 0x61, 0x6c, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73,
-	0x73, 0x65, 0x73, 0x3a, 0x23, 0x9a, 0xc5, 0x88, 0x1e, 0x1e, 0x0a, 0x1c, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x42, 0x69,
-	0x6e, 0x64, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x22, 0x9f, 0x02, 0x0a, 0x07, 0x41, 0x64, 0x64,
-	0x72, 0x65, 0x73, 0x73, 0x12, 0x4c, 0x0a, 0x0e, 0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x5f, 0x61,
-	0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x65,
+	0x2f, 0x65, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x1a, 0x28, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63,
+	0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x2f, 0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x5f, 0x6f, 0x70,
+	0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x1e, 0x67, 0x6f, 0x6f, 0x67,
+	0x6c, 0x65, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2f, 0x77, 0x72, 0x61, 0x70,
+	0x70, 0x65, 0x72, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x23, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x2f, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2f, 0x64, 0x65,
+	0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a,
+	0x1d, 0x75, 0x64, 0x70, 0x61, 0x2f, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e,
+	0x73, 0x2f, 0x73, 0x74, 0x61, 0x74, 0x75, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x21,
+	0x75, 0x64, 0x70, 0x61, 0x2f, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73,
+	0x2f, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x69, 0x6e, 0x67, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x1a, 0x17, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2f, 0x76, 0x61, 0x6c, 0x69,
+	0x64, 0x61, 0x74, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0x60, 0x0a, 0x04, 0x50, 0x69,
+	0x70, 0x65, 0x12, 0x1b, 0x0a, 0x04, 0x70, 0x61, 0x74, 0x68, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
+	0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x12,
+	0x1c, 0x0a, 0x04, 0x6d, 0x6f, 0x64, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0d, 0x42, 0x08, 0xfa,
+	0x42, 0x05, 0x2a, 0x03, 0x18, 0xff, 0x03, 0x52, 0x04, 0x6d, 0x6f, 0x64, 0x65, 0x3a, 0x1d, 0x9a,
+	0xc5, 0x88, 0x1e, 0x18, 0x0a, 0x16, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e,
+	0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x50, 0x69, 0x70, 0x65, 0x22, 0x8a, 0x01, 0x0a,
+	0x14, 0x45, 0x6e, 0x76, 0x6f, 0x79, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x64,
+	0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x32, 0x0a, 0x14, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x5f,
+	0x6c, 0x69, 0x73, 0x74, 0x65, 0x6e, 0x65, 0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x09, 0x48, 0x00, 0x52, 0x12, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x4c, 0x69, 0x73,
+	0x74, 0x65, 0x6e, 0x65, 0x72, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x65, 0x6e, 0x64,
+	0x70, 0x6f, 0x69, 0x6e, 0x74, 0x5f, 0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a,
+	0x65, 0x6e, 0x64, 0x70, 0x6f, 0x69, 0x6e, 0x74, 0x49, 0x64, 0x42, 0x1d, 0x0a, 0x16, 0x61, 0x64,
+	0x64, 0x72, 0x65, 0x73, 0x73, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x5f, 0x73, 0x70, 0x65, 0x63, 0x69,
+	0x66, 0x69, 0x65, 0x72, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x22, 0xf6, 0x02, 0x0a, 0x0d, 0x53, 0x6f,
+	0x63, 0x6b, 0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x52, 0x0a, 0x08, 0x70,
+	0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2c, 0x2e,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72,
+	0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65,
+	0x73, 0x73, 0x2e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x42, 0x08, 0xfa, 0x42, 0x05,
+	0x82, 0x01, 0x02, 0x10, 0x01, 0x52, 0x08, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x12,
+	0x21, 0x0a, 0x07, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09,
+	0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01, 0x52, 0x07, 0x61, 0x64, 0x64, 0x72, 0x65,
+	0x73, 0x73, 0x12, 0x2a, 0x0a, 0x0a, 0x70, 0x6f, 0x72, 0x74, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65,
+	0x18, 0x03, 0x20, 0x01, 0x28, 0x0d, 0x42, 0x09, 0xfa, 0x42, 0x06, 0x2a, 0x04, 0x18, 0xff, 0xff,
+	0x03, 0x48, 0x00, 0x52, 0x09, 0x70, 0x6f, 0x72, 0x74, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x1f,
+	0x0a, 0x0a, 0x6e, 0x61, 0x6d, 0x65, 0x64, 0x5f, 0x70, 0x6f, 0x72, 0x74, 0x18, 0x04, 0x20, 0x01,
+	0x28, 0x09, 0x48, 0x00, 0x52, 0x09, 0x6e, 0x61, 0x6d, 0x65, 0x64, 0x50, 0x6f, 0x72, 0x74, 0x12,
+	0x23, 0x0a, 0x0d, 0x72, 0x65, 0x73, 0x6f, 0x6c, 0x76, 0x65, 0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65,
+	0x18, 0x05, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0c, 0x72, 0x65, 0x73, 0x6f, 0x6c, 0x76, 0x65, 0x72,
+	0x4e, 0x61, 0x6d, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x69, 0x70, 0x76, 0x34, 0x5f, 0x63, 0x6f, 0x6d,
+	0x70, 0x61, 0x74, 0x18, 0x06, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0a, 0x69, 0x70, 0x76, 0x34, 0x43,
+	0x6f, 0x6d, 0x70, 0x61, 0x74, 0x22, 0x1c, 0x0a, 0x08, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f,
+	0x6c, 0x12, 0x07, 0x0a, 0x03, 0x54, 0x43, 0x50, 0x10, 0x00, 0x12, 0x07, 0x0a, 0x03, 0x55, 0x44,
+	0x50, 0x10, 0x01, 0x3a, 0x26, 0x9a, 0xc5, 0x88, 0x1e, 0x21, 0x0a, 0x1f, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x53, 0x6f,
+	0x63, 0x6b, 0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x42, 0x15, 0x0a, 0x0e, 0x70,
+	0x6f, 0x72, 0x74, 0x5f, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x03, 0xf8,
+	0x42, 0x01, 0x22, 0x90, 0x02, 0x0a, 0x0c, 0x54, 0x63, 0x70, 0x4b, 0x65, 0x65, 0x70, 0x61, 0x6c,
+	0x69, 0x76, 0x65, 0x12, 0x47, 0x0a, 0x10, 0x6b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65,
+	0x5f, 0x70, 0x72, 0x6f, 0x62, 0x65, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e,
+	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e,
+	0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0f, 0x6b, 0x65, 0x65,
+	0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x50, 0x72, 0x6f, 0x62, 0x65, 0x73, 0x12, 0x43, 0x0a, 0x0e,
+	0x6b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c,
+	0x75, 0x65, 0x52, 0x0d, 0x6b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x54, 0x69, 0x6d,
+	0x65, 0x12, 0x4b, 0x0a, 0x12, 0x6b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x5f, 0x69,
+	0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e,
+	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e,
+	0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x11, 0x6b, 0x65, 0x65,
+	0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x3a, 0x25,
+	0x9a, 0xc5, 0x88, 0x1e, 0x20, 0x0a, 0x1e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69,
+	0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x54, 0x63, 0x70, 0x4b, 0x65, 0x65, 0x70,
+	0x61, 0x6c, 0x69, 0x76, 0x65, 0x22, 0xb1, 0x01, 0x0a, 0x12, 0x45, 0x78, 0x74, 0x72, 0x61, 0x53,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x47, 0x0a, 0x07,
+	0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x23, 0x2e,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72,
+	0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65,
+	0x73, 0x73, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x07, 0x61, 0x64,
+	0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x52, 0x0a, 0x0e, 0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x5f,
+	0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2b, 0x2e,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72,
+	0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x4f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x73, 0x4f, 0x76, 0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x52, 0x0d, 0x73, 0x6f, 0x63, 0x6b,
+	0x65, 0x74, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0xb4, 0x04, 0x0a, 0x0a, 0x42, 0x69,
+	0x6e, 0x64, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x4a, 0x0a, 0x0e, 0x73, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x23, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e,
+	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x41, 0x64,
+	0x64, 0x72, 0x65, 0x73, 0x73, 0x52, 0x0d, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x41, 0x64, 0x64,
+	0x72, 0x65, 0x73, 0x73, 0x12, 0x36, 0x0a, 0x08, 0x66, 0x72, 0x65, 0x65, 0x62, 0x69, 0x6e, 0x64,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c,
+	0x75, 0x65, 0x52, 0x08, 0x66, 0x72, 0x65, 0x65, 0x62, 0x69, 0x6e, 0x64, 0x12, 0x49, 0x0a, 0x0e,
+	0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x03,
+	0x20, 0x03, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e,
+	0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53, 0x6f, 0x63, 0x6b,
+	0x65, 0x74, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0d, 0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74,
+	0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x5e, 0x0a, 0x16, 0x65, 0x78, 0x74, 0x72, 0x61,
+	0x5f, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x65,
+	0x73, 0x18, 0x05, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x28, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
+	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x45,
+	0x78, 0x74, 0x72, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73,
+	0x73, 0x52, 0x14, 0x65, 0x78, 0x74, 0x72, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x41, 0x64,
+	0x64, 0x72, 0x65, 0x73, 0x73, 0x65, 0x73, 0x12, 0x70, 0x0a, 0x1b, 0x61, 0x64, 0x64, 0x69, 0x74,
+	0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x5f, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x61, 0x64, 0x64,
+	0x72, 0x65, 0x73, 0x73, 0x65, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x65,
 	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65,
 	0x2e, 0x76, 0x33, 0x2e, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73,
-	0x73, 0x48, 0x00, 0x52, 0x0d, 0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65,
-	0x73, 0x73, 0x12, 0x30, 0x0a, 0x04, 0x70, 0x69, 0x70, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x1a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e,
-	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x50, 0x69, 0x70, 0x65, 0x48, 0x00, 0x52, 0x04,
-	0x70, 0x69, 0x70, 0x65, 0x12, 0x62, 0x0a, 0x16, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x5f, 0x69, 0x6e,
-	0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x18, 0x03,
-	0x20, 0x01, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e,
-	0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x45, 0x6e, 0x76, 0x6f,
+	0x73, 0x42, 0x0b, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x18, 0x01, 0x52, 0x19,
+	0x61, 0x64, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65,
+	0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x65, 0x73, 0x12, 0x60, 0x0a, 0x16, 0x6c, 0x6f, 0x63,
+	0x61, 0x6c, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x5f, 0x73, 0x65, 0x6c, 0x65, 0x63,
+	0x74, 0x6f, 0x72, 0x18, 0x06, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33,
+	0x2e, 0x54, 0x79, 0x70, 0x65, 0x64, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x43,
+	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x52, 0x14, 0x6c, 0x6f, 0x63, 0x61, 0x6c, 0x41, 0x64, 0x64, 0x72,
+	0x65, 0x73, 0x73, 0x53, 0x65, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x3a, 0x23, 0x9a, 0xc5, 0x88,
+	0x1e, 0x1e, 0x0a, 0x1c, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32,
+	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x42, 0x69, 0x6e, 0x64, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67,
+	0x22, 0x9f, 0x02, 0x0a, 0x07, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x4c, 0x0a, 0x0e,
+	0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e,
+	0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53, 0x6f, 0x63, 0x6b,
+	0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x48, 0x00, 0x52, 0x0d, 0x73, 0x6f, 0x63,
+	0x6b, 0x65, 0x74, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x30, 0x0a, 0x04, 0x70, 0x69,
+	0x70, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e,
+	0x50, 0x69, 0x70, 0x65, 0x48, 0x00, 0x52, 0x04, 0x70, 0x69, 0x70, 0x65, 0x12, 0x62, 0x0a, 0x16,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x5f, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x5f, 0x61,
+	0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x65,
+	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65,
+	0x2e, 0x76, 0x33, 0x2e, 0x45, 0x6e, 0x76, 0x6f, 0x79, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x6e, 0x61,
+	0x6c, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x48, 0x00, 0x52, 0x14, 0x65, 0x6e, 0x76, 0x6f,
 	0x79, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x6c, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73,
-	0x48, 0x00, 0x52, 0x14, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x6e, 0x61,
-	0x6c, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x3a, 0x20, 0x9a, 0xc5, 0x88, 0x1e, 0x1b, 0x0a,
-	0x19, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f,
-	0x72, 0x65, 0x2e, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x42, 0x0e, 0x0a, 0x07, 0x61, 0x64,
-	0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x22, 0xa6, 0x01, 0x0a, 0x09, 0x43,
-	0x69, 0x64, 0x72, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x12, 0x2e, 0x0a, 0x0e, 0x61, 0x64, 0x64, 0x72,
-	0x65, 0x73, 0x73, 0x5f, 0x70, 0x72, 0x65, 0x66, 0x69, 0x78, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
-	0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01, 0x52, 0x0d, 0x61, 0x64, 0x64, 0x72, 0x65,
-	0x73, 0x73, 0x50, 0x72, 0x65, 0x66, 0x69, 0x78, 0x12, 0x45, 0x0a, 0x0a, 0x70, 0x72, 0x65, 0x66,
-	0x69, 0x78, 0x5f, 0x6c, 0x65, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67,
-	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55,
-	0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x2a,
-	0x03, 0x18, 0x80, 0x01, 0x52, 0x09, 0x70, 0x72, 0x65, 0x66, 0x69, 0x78, 0x4c, 0x65, 0x6e, 0x3a,
-	0x22, 0x9a, 0xc5, 0x88, 0x1e, 0x1d, 0x0a, 0x1b, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70,
-	0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x43, 0x69, 0x64, 0x72, 0x52, 0x61,
-	0x6e, 0x67, 0x65, 0x42, 0x80, 0x01, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x3a, 0x20, 0x9a, 0xc5, 0x88, 0x1e, 0x1b, 0x0a, 0x19, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61,
+	0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x41, 0x64, 0x64, 0x72, 0x65,
+	0x73, 0x73, 0x42, 0x0e, 0x0a, 0x07, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x03, 0xf8,
+	0x42, 0x01, 0x22, 0xa6, 0x01, 0x0a, 0x09, 0x43, 0x69, 0x64, 0x72, 0x52, 0x61, 0x6e, 0x67, 0x65,
+	0x12, 0x2e, 0x0a, 0x0e, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x5f, 0x70, 0x72, 0x65, 0x66,
+	0x69, 0x78, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10,
+	0x01, 0x52, 0x0d, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x50, 0x72, 0x65, 0x66, 0x69, 0x78,
+	0x12, 0x45, 0x0a, 0x0a, 0x70, 0x72, 0x65, 0x66, 0x69, 0x78, 0x5f, 0x6c, 0x65, 0x6e, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c,
+	0x75, 0x65, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x2a, 0x03, 0x18, 0x80, 0x01, 0x52, 0x09, 0x70, 0x72,
+	0x65, 0x66, 0x69, 0x78, 0x4c, 0x65, 0x6e, 0x3a, 0x22, 0x9a, 0xc5, 0x88, 0x1e, 0x1d, 0x0a, 0x1b,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72,
+	0x65, 0x2e, 0x43, 0x69, 0x64, 0x72, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x42, 0x80, 0x01, 0xba, 0x80,
+	0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
 	0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66,
 	0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x0c, 0x41, 0x64, 0x64, 0x72,
 	0x65, 0x73, 0x73, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68,
 	0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78,
 	0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61,
 	0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f,
-	0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80,
-	0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
@@ -925,6 +945,7 @@ var file_envoy_config_core_v3_address_proto_goTypes = []interface{}{
 	(*SocketOptionsOverride)(nil), // 10: envoy.config.core.v3.SocketOptionsOverride
 	(*wrappers.BoolValue)(nil),    // 11: google.protobuf.BoolValue
 	(*SocketOption)(nil),          // 12: envoy.config.core.v3.SocketOption
+	(*TypedExtensionConfig)(nil),  // 13: envoy.config.core.v3.TypedExtensionConfig
 }
 var file_envoy_config_core_v3_address_proto_depIdxs = []int32{
 	0,  // 0: envoy.config.core.v3.SocketAddress.protocol:type_name -> envoy.config.core.v3.SocketAddress.Protocol
@@ -938,15 +959,16 @@ var file_envoy_config_core_v3_address_proto_depIdxs = []int32{
 	12, // 8: envoy.config.core.v3.BindConfig.socket_options:type_name -> envoy.config.core.v3.SocketOption
 	5,  // 9: envoy.config.core.v3.BindConfig.extra_source_addresses:type_name -> envoy.config.core.v3.ExtraSourceAddress
 	3,  // 10: envoy.config.core.v3.BindConfig.additional_source_addresses:type_name -> envoy.config.core.v3.SocketAddress
-	3,  // 11: envoy.config.core.v3.Address.socket_address:type_name -> envoy.config.core.v3.SocketAddress
-	1,  // 12: envoy.config.core.v3.Address.pipe:type_name -> envoy.config.core.v3.Pipe
-	2,  // 13: envoy.config.core.v3.Address.envoy_internal_address:type_name -> envoy.config.core.v3.EnvoyInternalAddress
-	9,  // 14: envoy.config.core.v3.CidrRange.prefix_len:type_name -> google.protobuf.UInt32Value
-	15, // [15:15] is the sub-list for method output_type
-	15, // [15:15] is the sub-list for method input_type
-	15, // [15:15] is the sub-list for extension type_name
-	15, // [15:15] is the sub-list for extension extendee
-	0,  // [0:15] is the sub-list for field type_name
+	13, // 11: envoy.config.core.v3.BindConfig.local_address_selector:type_name -> envoy.config.core.v3.TypedExtensionConfig
+	3,  // 12: envoy.config.core.v3.Address.socket_address:type_name -> envoy.config.core.v3.SocketAddress
+	1,  // 13: envoy.config.core.v3.Address.pipe:type_name -> envoy.config.core.v3.Pipe
+	2,  // 14: envoy.config.core.v3.Address.envoy_internal_address:type_name -> envoy.config.core.v3.EnvoyInternalAddress
+	9,  // 15: envoy.config.core.v3.CidrRange.prefix_len:type_name -> google.protobuf.UInt32Value
+	16, // [16:16] is the sub-list for method output_type
+	16, // [16:16] is the sub-list for method input_type
+	16, // [16:16] is the sub-list for extension type_name
+	16, // [16:16] is the sub-list for extension extendee
+	0,  // [0:16] is the sub-list for field type_name
 }
 
 func init() { file_envoy_config_core_v3_address_proto_init() }
@@ -954,6 +976,7 @@ func file_envoy_config_core_v3_address_proto_init() {
 	if File_envoy_config_core_v3_address_proto != nil {
 		return
 	}
+	file_envoy_config_core_v3_extension_proto_init()
 	file_envoy_config_core_v3_socket_option_proto_init()
 	if !protoimpl.UnsafeEnabled {
 		file_envoy_config_core_v3_address_proto_msgTypes[0].Exporter = func(v interface{}, i int) interface{} {
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/address.pb.validate.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/address.pb.validate.go
index 25610ab041a..1bf3f99586b 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/address.pb.validate.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/address.pb.validate.go
@@ -1006,6 +1006,35 @@ func (m *BindConfig) validate(all bool) error {
 
 	}
 
+	if all {
+		switch v := interface{}(m.GetLocalAddressSelector()).(type) {
+		case interface{ ValidateAll() error }:
+			if err := v.ValidateAll(); err != nil {
+				errors = append(errors, BindConfigValidationError{
+					field:  "LocalAddressSelector",
+					reason: "embedded message failed validation",
+					cause:  err,
+				})
+			}
+		case interface{ Validate() error }:
+			if err := v.Validate(); err != nil {
+				errors = append(errors, BindConfigValidationError{
+					field:  "LocalAddressSelector",
+					reason: "embedded message failed validation",
+					cause:  err,
+				})
+			}
+		}
+	} else if v, ok := interface{}(m.GetLocalAddressSelector()).(interface{ Validate() error }); ok {
+		if err := v.Validate(); err != nil {
+			return BindConfigValidationError{
+				field:  "LocalAddressSelector",
+				reason: "embedded message failed validation",
+				cause:  err,
+			}
+		}
+	}
+
 	if len(errors) > 0 {
 		return BindConfigMultiError(errors)
 	}
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/backoff.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/backoff.pb.go
index 63066573a3c..06b61820c44 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/backoff.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/backoff.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/backoff.proto
 
 package corev3
@@ -114,15 +114,15 @@ var file_envoy_config_core_v3_backoff_proto_rawDesc = []byte{
 	0x01, 0x02, 0x2a, 0x00, 0x52, 0x0b, 0x6d, 0x61, 0x78, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61,
 	0x6c, 0x3a, 0x28, 0x9a, 0xc5, 0x88, 0x1e, 0x23, 0x0a, 0x21, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
 	0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x42, 0x61, 0x63, 0x6b,
-	0x6f, 0x66, 0x66, 0x53, 0x74, 0x72, 0x61, 0x74, 0x65, 0x67, 0x79, 0x42, 0x80, 0x01, 0x0a, 0x22,
-	0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e,
-	0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e,
-	0x76, 0x33, 0x42, 0x0c, 0x42, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x50, 0x72, 0x6f, 0x74, 0x6f,
-	0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e,
-	0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79,
-	0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b,
-	0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06,
+	0x6f, 0x66, 0x66, 0x53, 0x74, 0x72, 0x61, 0x74, 0x65, 0x67, 0x79, 0x42, 0x80, 0x01, 0xba, 0x80,
+	0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66,
+	0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x0c, 0x42, 0x61, 0x63, 0x6b,
+	0x6f, 0x66, 0x66, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68,
+	0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78,
+	0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61,
+	0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f,
+	0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06,
 	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/base.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/base.pb.go
index d9ec4f4f84a..8935f058a45 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/base.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/base.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/base.proto
 
 package corev3
@@ -220,6 +220,9 @@ const (
 	// the header already exists. If the header doesn't exist then this will add the header
 	// with specified key and value.
 	HeaderValueOption_OVERWRITE_IF_EXISTS_OR_ADD HeaderValueOption_HeaderAppendAction = 2
+	// This action will overwrite the specified value by discarding any existing values if
+	// the header already exists. If the header doesn't exist then this will be no-op.
+	HeaderValueOption_OVERWRITE_IF_EXISTS HeaderValueOption_HeaderAppendAction = 3
 )
 
 // Enum value maps for HeaderValueOption_HeaderAppendAction.
@@ -228,11 +231,13 @@ var (
 		0: "APPEND_IF_EXISTS_OR_ADD",
 		1: "ADD_IF_ABSENT",
 		2: "OVERWRITE_IF_EXISTS_OR_ADD",
+		3: "OVERWRITE_IF_EXISTS",
 	}
 	HeaderValueOption_HeaderAppendAction_value = map[string]int32{
 		"APPEND_IF_EXISTS_OR_ADD":    0,
 		"ADD_IF_ABSENT":              1,
 		"OVERWRITE_IF_EXISTS_OR_ADD": 2,
+		"OVERWRITE_IF_EXISTS":        3,
 	}
 )
 
@@ -419,7 +424,7 @@ type Extension struct {
 	// [#comment:TODO(yanavlasov): Link to the doc with existing configuration protos.]
 	// [#comment:TODO(yanavlasov): Add tests when PR #9391 lands.]
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/config/core/v3/base.proto.
 	TypeDescriptor string `protobuf:"bytes,3,opt,name=type_descriptor,json=typeDescriptor,proto3" json:"type_descriptor,omitempty"`
 	// The version is a property of the extension and maintained independently
 	// of other extensions and the Envoy API.
@@ -477,7 +482,7 @@ func (x *Extension) GetCategory() string {
 	return ""
 }
 
-// Deprecated: Do not use.
+// Deprecated: Marked as deprecated in envoy/config/core/v3/base.proto.
 func (x *Extension) GetTypeDescriptor() string {
 	if x != nil {
 		return x.TypeDescriptor
@@ -550,6 +555,7 @@ type Node struct {
 	// E.g. "envoy" or "grpc"
 	UserAgentName string `protobuf:"bytes,6,opt,name=user_agent_name,json=userAgentName,proto3" json:"user_agent_name,omitempty"`
 	// Types that are assignable to UserAgentVersionType:
+	//
 	//	*Node_UserAgentVersion
 	//	*Node_UserAgentBuildVersion
 	UserAgentVersionType isNode_UserAgentVersionType `protobuf_oneof:"user_agent_version_type"`
@@ -557,16 +563,16 @@ type Node struct {
 	Extensions []*Extension `protobuf:"bytes,9,rep,name=extensions,proto3" json:"extensions,omitempty"`
 	// Client feature support list. These are well known features described
 	// in the Envoy API repository for a given major version of an API. Client features
-	// use reverse DNS naming scheme, for example ``com.acme.feature``.
+	// use reverse DNS naming scheme, for example “com.acme.feature“.
 	// See :ref:`the list of features <client_features>` that xDS client may
 	// support.
 	ClientFeatures []string `protobuf:"bytes,10,rep,name=client_features,json=clientFeatures,proto3" json:"client_features,omitempty"`
 	// Known listening ports on the node as a generic hint to the management server
 	// for filtering :ref:`listeners <config_listeners>` to be returned. For example,
 	// if there is a listener bound to port 80, the list can optionally contain the
-	// SocketAddress ``(0.0.0.0,80)``. The field is optional and just a hint.
+	// SocketAddress “(0.0.0.0,80)“. The field is optional and just a hint.
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/config/core/v3/base.proto.
 	ListeningAddresses []*Address `protobuf:"bytes,11,rep,name=listening_addresses,json=listeningAddresses,proto3" json:"listening_addresses,omitempty"`
 }
 
@@ -679,7 +685,7 @@ func (x *Node) GetClientFeatures() []string {
 	return nil
 }
 
-// Deprecated: Do not use.
+// Deprecated: Marked as deprecated in envoy/config/core/v3/base.proto.
 func (x *Node) GetListeningAddresses() []*Address {
 	if x != nil {
 		return x.ListeningAddresses
@@ -724,28 +730,29 @@ func (*Node_UserAgentBuildVersion) isNode_UserAgentVersionType() {}
 // object to match against. There are some well defined metadata used today for
 // this purpose:
 //
-// * ``{"envoy.lb": {"canary": <bool> }}`` This indicates the canary status of an
-//   endpoint and is also used during header processing
-//   (x-envoy-upstream-canary) and for stats purposes.
+//   - “{"envoy.lb": {"canary": <bool> }}“ This indicates the canary status of an
+//     endpoint and is also used during header processing
+//     (x-envoy-upstream-canary) and for stats purposes.
+//
 // [#next-major-version: move to type/metadata/v2]
 type Metadata struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	// Key is the reverse DNS filter name, e.g. com.acme.widget. The ``envoy.*``
+	// Key is the reverse DNS filter name, e.g. com.acme.widget. The “envoy.*“
 	// namespace is reserved for Envoy's built-in filters.
-	// If both ``filter_metadata`` and
+	// If both “filter_metadata“ and
 	// :ref:`typed_filter_metadata <envoy_v3_api_field_config.core.v3.Metadata.typed_filter_metadata>`
 	// fields are present in the metadata with same keys,
-	// only ``typed_filter_metadata`` field will be parsed.
+	// only “typed_filter_metadata“ field will be parsed.
 	FilterMetadata map[string]*_struct.Struct `protobuf:"bytes,1,rep,name=filter_metadata,json=filterMetadata,proto3" json:"filter_metadata,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
-	// Key is the reverse DNS filter name, e.g. com.acme.widget. The ``envoy.*``
+	// Key is the reverse DNS filter name, e.g. com.acme.widget. The “envoy.*“
 	// namespace is reserved for Envoy's built-in filters.
 	// The value is encoded as google.protobuf.Any.
 	// If both :ref:`filter_metadata <envoy_v3_api_field_config.core.v3.Metadata.filter_metadata>`
-	// and ``typed_filter_metadata`` fields are present in the metadata with same keys,
-	// only ``typed_filter_metadata`` field will be parsed.
+	// and “typed_filter_metadata“ fields are present in the metadata with same keys,
+	// only “typed_filter_metadata“ field will be parsed.
 	TypedFilterMetadata map[string]*any1.Any `protobuf:"bytes,2,rep,name=typed_filter_metadata,json=typedFilterMetadata,proto3" json:"typed_filter_metadata,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
 }
 
@@ -1099,8 +1106,13 @@ type HeaderValue struct {
 	//
 	// The same :ref:`format specifier <config_access_log_format>` as used for
 	// :ref:`HTTP access logging <config_access_log>` applies here, however
-	// unknown header values are replaced with the empty string instead of ``-``.
+	// unknown header values are replaced with the empty string instead of “-“.
+	// Header value is encoded as string. This does not work for non-utf8 characters.
+	// Only one of “value“ or “raw_value“ can be set.
 	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
+	// Header value is encoded as bytes which can support non-utf8 characters.
+	// Only one of “value“ or “raw_value“ can be set.
+	RawValue []byte `protobuf:"bytes,3,opt,name=raw_value,json=rawValue,proto3" json:"raw_value,omitempty"`
 }
 
 func (x *HeaderValue) Reset() {
@@ -1149,6 +1161,13 @@ func (x *HeaderValue) GetValue() string {
 	return ""
 }
 
+func (x *HeaderValue) GetRawValue() []byte {
+	if x != nil {
+		return x.RawValue
+	}
+	return nil
+}
+
 // Header name/value pair plus option to control append behavior.
 type HeaderValueOption struct {
 	state         protoimpl.MessageState
@@ -1163,11 +1182,12 @@ type HeaderValueOption struct {
 	// :ref:`append_action <envoy_v3_api_field_config.core.v3.HeaderValueOption.append_action>` as replacement.
 	//
 	// .. note::
-	//   The :ref:`external authorization service <envoy_v3_api_msg_service.auth.v3.CheckResponse>` and
-	//   :ref:`external processor service <envoy_v3_api_msg_service.ext_proc.v3.ProcessingResponse>` have
-	//   default value (``false``) for this field.
 	//
-	// Deprecated: Do not use.
+	//	The :ref:`external authorization service <envoy_v3_api_msg_service.auth.v3.CheckResponse>` and
+	//	:ref:`external processor service <envoy_v3_api_msg_service.ext_proc.v3.ProcessingResponse>` have
+	//	default value (``false``) for this field.
+	//
+	// Deprecated: Marked as deprecated in envoy/config/core/v3/base.proto.
 	Append *wrappers.BoolValue `protobuf:"bytes,2,opt,name=append,proto3" json:"append,omitempty"`
 	// Describes the action taken to append/overwrite the given value for an existing header
 	// or to only add this header if it's absent.
@@ -1218,7 +1238,7 @@ func (x *HeaderValueOption) GetHeader() *HeaderValue {
 	return nil
 }
 
-// Deprecated: Do not use.
+// Deprecated: Marked as deprecated in envoy/config/core/v3/base.proto.
 func (x *HeaderValueOption) GetAppend() *wrappers.BoolValue {
 	if x != nil {
 		return x.Append
@@ -1345,6 +1365,7 @@ type DataSource struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Specifier:
+	//
 	//	*DataSource_Filename
 	//	*DataSource_InlineBytes
 	//	*DataSource_InlineString
@@ -1586,6 +1607,7 @@ type AsyncDataSource struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Specifier:
+	//
 	//	*AsyncDataSource_Local
 	//	*AsyncDataSource_Remote
 	Specifier isAsyncDataSource_Specifier `protobuf_oneof:"specifier"`
@@ -1678,6 +1700,7 @@ type TransportSocket struct {
 	// See the supported transport socket implementations for further documentation.
 	//
 	// Types that are assignable to ConfigType:
+	//
 	//	*TransportSocket_TypedConfig
 	ConfigType isTransportSocket_ConfigType `protobuf_oneof:"config_type"`
 }
@@ -1750,11 +1773,11 @@ func (*TransportSocket_TypedConfig) isTransportSocket_ConfigType() {}
 //
 // .. note::
 //
-//   Parsing of the runtime key's data is implemented such that it may be represented as a
-//   :ref:`FractionalPercent <envoy_v3_api_msg_type.v3.FractionalPercent>` proto represented as JSON/YAML
-//   and may also be represented as an integer with the assumption that the value is an integral
-//   percentage out of 100. For instance, a runtime key lookup returning the value "42" would parse
-//   as a ``FractionalPercent`` whose numerator is 42 and denominator is HUNDRED.
+//	Parsing of the runtime key's data is implemented such that it may be represented as a
+//	:ref:`FractionalPercent <envoy_v3_api_msg_type.v3.FractionalPercent>` proto represented as JSON/YAML
+//	and may also be represented as an integer with the assumption that the value is an integral
+//	percentage out of 100. For instance, a runtime key lookup returning the value "42" would parse
+//	as a ``FractionalPercent`` whose numerator is 42 and denominator is HUNDRED.
 type RuntimeFractionalPercent struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -1921,8 +1944,8 @@ var file_envoy_config_core_v3_base_proto_rawDesc = []byte{
 	0x65, 0x12, 0x1a, 0x0a, 0x08, 0x63, 0x61, 0x74, 0x65, 0x67, 0x6f, 0x72, 0x79, 0x18, 0x02, 0x20,
 	0x01, 0x28, 0x09, 0x52, 0x08, 0x63, 0x61, 0x74, 0x65, 0x67, 0x6f, 0x72, 0x79, 0x12, 0x34, 0x0a,
 	0x0f, 0x74, 0x79, 0x70, 0x65, 0x5f, 0x64, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72,
-	0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0x18, 0x01, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03,
-	0x33, 0x2e, 0x30, 0x52, 0x0e, 0x74, 0x79, 0x70, 0x65, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70,
+	0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e,
+	0x30, 0x18, 0x01, 0x52, 0x0e, 0x74, 0x79, 0x70, 0x65, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70,
 	0x74, 0x6f, 0x72, 0x12, 0x3c, 0x0a, 0x07, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x18, 0x04,
 	0x20, 0x01, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e,
 	0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x42, 0x75, 0x69, 0x6c,
@@ -1971,7 +1994,7 @@ var file_envoy_config_core_v3_base_proto_rawDesc = []byte{
 	0x6e, 0x67, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x65, 0x73, 0x18, 0x0b, 0x20, 0x03,
 	0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69,
 	0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73,
-	0x73, 0x42, 0x0b, 0x18, 0x01, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x52, 0x12,
+	0x73, 0x42, 0x0b, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x18, 0x01, 0x52, 0x12,
 	0x6c, 0x69, 0x73, 0x74, 0x65, 0x6e, 0x69, 0x6e, 0x67, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73,
 	0x65, 0x73, 0x1a, 0x60, 0x0a, 0x16, 0x44, 0x79, 0x6e, 0x61, 0x6d, 0x69, 0x63, 0x50, 0x61, 0x72,
 	0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03,
@@ -2051,162 +2074,169 @@ var file_envoy_config_core_v3_base_proto_rawDesc = []byte{
 	0x75, 0x65, 0x72, 0x79, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x12, 0x19, 0x0a,
 	0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72,
 	0x02, 0x10, 0x01, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75,
-	0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x7f,
-	0x0a, 0x0b, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x23, 0x0a,
-	0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x11, 0xfa, 0x42, 0x0e, 0x72,
-	0x0c, 0x10, 0x01, 0x28, 0x80, 0x80, 0x01, 0xc0, 0x01, 0x01, 0xc8, 0x01, 0x00, 0x52, 0x03, 0x6b,
-	0x65, 0x79, 0x12, 0x25, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28,
-	0x09, 0x42, 0x0f, 0xfa, 0x42, 0x0c, 0x72, 0x0a, 0x28, 0x80, 0x80, 0x01, 0xc0, 0x01, 0x02, 0xc8,
-	0x01, 0x00, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x24, 0x9a, 0xc5, 0x88, 0x1e, 0x1f,
-	0x0a, 0x1d, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63,
-	0x6f, 0x72, 0x65, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x22,
-	0xc0, 0x03, 0x0a, 0x11, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x4f,
-	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x43, 0x0a, 0x06, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x18,
-	0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f,
-	0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x65, 0x61,
-	0x64, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02,
-	0x10, 0x01, 0x52, 0x06, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x12, 0x3f, 0x0a, 0x06, 0x61, 0x70,
-	0x70, 0x65, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f,
-	0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f,
-	0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x0b, 0x18, 0x01, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03,
-	0x33, 0x2e, 0x30, 0x52, 0x06, 0x61, 0x70, 0x70, 0x65, 0x6e, 0x64, 0x12, 0x69, 0x0a, 0x0d, 0x61,
-	0x70, 0x70, 0x65, 0x6e, 0x64, 0x5f, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x03, 0x20, 0x01,
-	0x28, 0x0e, 0x32, 0x3a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69,
-	0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72,
-	0x56, 0x61, 0x6c, 0x75, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x48, 0x65, 0x61, 0x64,
-	0x65, 0x72, 0x41, 0x70, 0x70, 0x65, 0x6e, 0x64, 0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x08,
-	0xfa, 0x42, 0x05, 0x82, 0x01, 0x02, 0x10, 0x01, 0x52, 0x0c, 0x61, 0x70, 0x70, 0x65, 0x6e, 0x64,
-	0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x28, 0x0a, 0x10, 0x6b, 0x65, 0x65, 0x70, 0x5f, 0x65,
-	0x6d, 0x70, 0x74, 0x79, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x08,
-	0x52, 0x0e, 0x6b, 0x65, 0x65, 0x70, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x56, 0x61, 0x6c, 0x75, 0x65,
-	0x22, 0x64, 0x0a, 0x12, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x41, 0x70, 0x70, 0x65, 0x6e, 0x64,
-	0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x1b, 0x0a, 0x17, 0x41, 0x50, 0x50, 0x45, 0x4e, 0x44,
-	0x5f, 0x49, 0x46, 0x5f, 0x45, 0x58, 0x49, 0x53, 0x54, 0x53, 0x5f, 0x4f, 0x52, 0x5f, 0x41, 0x44,
-	0x44, 0x10, 0x00, 0x12, 0x11, 0x0a, 0x0d, 0x41, 0x44, 0x44, 0x5f, 0x49, 0x46, 0x5f, 0x41, 0x42,
-	0x53, 0x45, 0x4e, 0x54, 0x10, 0x01, 0x12, 0x1e, 0x0a, 0x1a, 0x4f, 0x56, 0x45, 0x52, 0x57, 0x52,
-	0x49, 0x54, 0x45, 0x5f, 0x49, 0x46, 0x5f, 0x45, 0x58, 0x49, 0x53, 0x54, 0x53, 0x5f, 0x4f, 0x52,
-	0x5f, 0x41, 0x44, 0x44, 0x10, 0x02, 0x3a, 0x2a, 0x9a, 0xc5, 0x88, 0x1e, 0x25, 0x0a, 0x23, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65,
-	0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x4f, 0x70, 0x74, 0x69,
-	0x6f, 0x6e, 0x22, 0x6c, 0x0a, 0x09, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4d, 0x61, 0x70, 0x12,
-	0x3b, 0x0a, 0x07, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b,
-	0x32, 0x21, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e,
-	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x56, 0x61,
-	0x6c, 0x75, 0x65, 0x52, 0x07, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x3a, 0x22, 0x9a, 0xc5,
-	0x88, 0x1e, 0x1d, 0x0a, 0x1b, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76,
-	0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4d, 0x61, 0x70,
-	0x22, 0x2f, 0x0a, 0x10, 0x57, 0x61, 0x74, 0x63, 0x68, 0x65, 0x64, 0x44, 0x69, 0x72, 0x65, 0x63,
-	0x74, 0x6f, 0x72, 0x79, 0x12, 0x1b, 0x0a, 0x04, 0x70, 0x61, 0x74, 0x68, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01, 0x52, 0x04, 0x70, 0x61, 0x74,
-	0x68, 0x22, 0xf4, 0x01, 0x0a, 0x0a, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65,
-	0x12, 0x25, 0x0a, 0x08, 0x66, 0x69, 0x6c, 0x65, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01, 0x48, 0x00, 0x52, 0x08, 0x66,
-	0x69, 0x6c, 0x65, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x23, 0x0a, 0x0c, 0x69, 0x6e, 0x6c, 0x69, 0x6e,
-	0x65, 0x5f, 0x62, 0x79, 0x74, 0x65, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0c, 0x48, 0x00, 0x52,
-	0x0b, 0x69, 0x6e, 0x6c, 0x69, 0x6e, 0x65, 0x42, 0x79, 0x74, 0x65, 0x73, 0x12, 0x25, 0x0a, 0x0d,
-	0x69, 0x6e, 0x6c, 0x69, 0x6e, 0x65, 0x5f, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x18, 0x03, 0x20,
-	0x01, 0x28, 0x09, 0x48, 0x00, 0x52, 0x0c, 0x69, 0x6e, 0x6c, 0x69, 0x6e, 0x65, 0x53, 0x74, 0x72,
-	0x69, 0x6e, 0x67, 0x12, 0x3c, 0x0a, 0x14, 0x65, 0x6e, 0x76, 0x69, 0x72, 0x6f, 0x6e, 0x6d, 0x65,
-	0x6e, 0x74, 0x5f, 0x76, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28,
-	0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01, 0x48, 0x00, 0x52, 0x13, 0x65, 0x6e,
-	0x76, 0x69, 0x72, 0x6f, 0x6e, 0x6d, 0x65, 0x6e, 0x74, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c,
-	0x65, 0x3a, 0x23, 0x9a, 0xc5, 0x88, 0x1e, 0x1e, 0x0a, 0x1c, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
-	0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x44, 0x61, 0x74, 0x61,
-	0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x42, 0x10, 0x0a, 0x09, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66,
-	0x69, 0x65, 0x72, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x22, 0xd4, 0x01, 0x0a, 0x0b, 0x52, 0x65, 0x74,
-	0x72, 0x79, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x12, 0x4b, 0x0a, 0x0e, 0x72, 0x65, 0x74, 0x72,
-	0x79, 0x5f, 0x62, 0x61, 0x63, 0x6b, 0x5f, 0x6f, 0x66, 0x66, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x25, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e,
-	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x42, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x53,
-	0x74, 0x72, 0x61, 0x74, 0x65, 0x67, 0x79, 0x52, 0x0c, 0x72, 0x65, 0x74, 0x72, 0x79, 0x42, 0x61,
-	0x63, 0x6b, 0x4f, 0x66, 0x66, 0x12, 0x52, 0x0a, 0x0b, 0x6e, 0x75, 0x6d, 0x5f, 0x72, 0x65, 0x74,
-	0x72, 0x69, 0x65, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f,
-	0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e,
-	0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x13, 0xf2, 0x98, 0xfe, 0x8f, 0x05, 0x0d,
-	0x0a, 0x0b, 0x6d, 0x61, 0x78, 0x5f, 0x72, 0x65, 0x74, 0x72, 0x69, 0x65, 0x73, 0x52, 0x0a, 0x6e,
-	0x75, 0x6d, 0x52, 0x65, 0x74, 0x72, 0x69, 0x65, 0x73, 0x3a, 0x24, 0x9a, 0xc5, 0x88, 0x1e, 0x1f,
-	0x0a, 0x1d, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63,
-	0x6f, 0x72, 0x65, 0x2e, 0x52, 0x65, 0x74, 0x72, 0x79, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x22,
-	0xe8, 0x01, 0x0a, 0x10, 0x52, 0x65, 0x6d, 0x6f, 0x74, 0x65, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f,
-	0x75, 0x72, 0x63, 0x65, 0x12, 0x42, 0x0a, 0x08, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x75, 0x72, 0x69,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63,
-	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x74,
-	0x74, 0x70, 0x55, 0x72, 0x69, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52,
-	0x07, 0x68, 0x74, 0x74, 0x70, 0x55, 0x72, 0x69, 0x12, 0x1f, 0x0a, 0x06, 0x73, 0x68, 0x61, 0x32,
-	0x35, 0x36, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10,
-	0x01, 0x52, 0x06, 0x73, 0x68, 0x61, 0x32, 0x35, 0x36, 0x12, 0x44, 0x0a, 0x0c, 0x72, 0x65, 0x74,
-	0x72, 0x79, 0x5f, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32,
-	0x21, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63,
-	0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x52, 0x65, 0x74, 0x72, 0x79, 0x50, 0x6f, 0x6c, 0x69,
-	0x63, 0x79, 0x52, 0x0b, 0x72, 0x65, 0x74, 0x72, 0x79, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x3a,
-	0x29, 0x9a, 0xc5, 0x88, 0x1e, 0x24, 0x0a, 0x22, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70,
-	0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x52, 0x65, 0x6d, 0x6f, 0x74, 0x65,
-	0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x22, 0xc9, 0x01, 0x0a, 0x0f, 0x41,
-	0x73, 0x79, 0x6e, 0x63, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x38,
-	0x0a, 0x05, 0x6c, 0x6f, 0x63, 0x61, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x20, 0x2e,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72,
-	0x65, 0x2e, 0x76, 0x33, 0x2e, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x48,
-	0x00, 0x52, 0x05, 0x6c, 0x6f, 0x63, 0x61, 0x6c, 0x12, 0x40, 0x0a, 0x06, 0x72, 0x65, 0x6d, 0x6f,
-	0x74, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x26, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0xcd,
+	0x01, 0x0a, 0x0b, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x23,
+	0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x11, 0xfa, 0x42, 0x0e,
+	0x72, 0x0c, 0x10, 0x01, 0x28, 0x80, 0x80, 0x01, 0xc8, 0x01, 0x00, 0xc0, 0x01, 0x01, 0x52, 0x03,
+	0x6b, 0x65, 0x79, 0x12, 0x37, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01,
+	0x28, 0x09, 0x42, 0x21, 0xfa, 0x42, 0x0c, 0x72, 0x0a, 0x28, 0x80, 0x80, 0x01, 0xc8, 0x01, 0x00,
+	0xc0, 0x01, 0x02, 0xf2, 0x98, 0xfe, 0x8f, 0x05, 0x0c, 0x12, 0x0a, 0x76, 0x61, 0x6c, 0x75, 0x65,
+	0x5f, 0x74, 0x79, 0x70, 0x65, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x3a, 0x0a, 0x09,
+	0x72, 0x61, 0x77, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0c, 0x42,
+	0x1d, 0xfa, 0x42, 0x08, 0x7a, 0x06, 0x10, 0x00, 0x18, 0x80, 0x80, 0x01, 0xf2, 0x98, 0xfe, 0x8f,
+	0x05, 0x0c, 0x12, 0x0a, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x52, 0x08,
+	0x72, 0x61, 0x77, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x24, 0x9a, 0xc5, 0x88, 0x1e, 0x1f, 0x0a,
+	0x1d, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f,
+	0x72, 0x65, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x22, 0xd9,
+	0x03, 0x0a, 0x11, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x4f, 0x70,
+	0x74, 0x69, 0x6f, 0x6e, 0x12, 0x43, 0x0a, 0x06, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e,
+	0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x65, 0x61, 0x64,
+	0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10,
+	0x01, 0x52, 0x06, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x12, 0x3f, 0x0a, 0x06, 0x61, 0x70, 0x70,
+	0x65, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67,
+	0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c,
+	0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x0b, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30,
+	0x18, 0x01, 0x52, 0x06, 0x61, 0x70, 0x70, 0x65, 0x6e, 0x64, 0x12, 0x69, 0x0a, 0x0d, 0x61, 0x70,
+	0x70, 0x65, 0x6e, 0x64, 0x5f, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28,
+	0x0e, 0x32, 0x3a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67,
+	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x56,
+	0x61, 0x6c, 0x75, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65,
+	0x72, 0x41, 0x70, 0x70, 0x65, 0x6e, 0x64, 0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x08, 0xfa,
+	0x42, 0x05, 0x82, 0x01, 0x02, 0x10, 0x01, 0x52, 0x0c, 0x61, 0x70, 0x70, 0x65, 0x6e, 0x64, 0x41,
+	0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x28, 0x0a, 0x10, 0x6b, 0x65, 0x65, 0x70, 0x5f, 0x65, 0x6d,
+	0x70, 0x74, 0x79, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x08, 0x52,
+	0x0e, 0x6b, 0x65, 0x65, 0x70, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x22,
+	0x7d, 0x0a, 0x12, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x41, 0x70, 0x70, 0x65, 0x6e, 0x64, 0x41,
+	0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x1b, 0x0a, 0x17, 0x41, 0x50, 0x50, 0x45, 0x4e, 0x44, 0x5f,
+	0x49, 0x46, 0x5f, 0x45, 0x58, 0x49, 0x53, 0x54, 0x53, 0x5f, 0x4f, 0x52, 0x5f, 0x41, 0x44, 0x44,
+	0x10, 0x00, 0x12, 0x11, 0x0a, 0x0d, 0x41, 0x44, 0x44, 0x5f, 0x49, 0x46, 0x5f, 0x41, 0x42, 0x53,
+	0x45, 0x4e, 0x54, 0x10, 0x01, 0x12, 0x1e, 0x0a, 0x1a, 0x4f, 0x56, 0x45, 0x52, 0x57, 0x52, 0x49,
+	0x54, 0x45, 0x5f, 0x49, 0x46, 0x5f, 0x45, 0x58, 0x49, 0x53, 0x54, 0x53, 0x5f, 0x4f, 0x52, 0x5f,
+	0x41, 0x44, 0x44, 0x10, 0x02, 0x12, 0x17, 0x0a, 0x13, 0x4f, 0x56, 0x45, 0x52, 0x57, 0x52, 0x49,
+	0x54, 0x45, 0x5f, 0x49, 0x46, 0x5f, 0x45, 0x58, 0x49, 0x53, 0x54, 0x53, 0x10, 0x03, 0x3a, 0x2a,
+	0x9a, 0xc5, 0x88, 0x1e, 0x25, 0x0a, 0x23, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69,
+	0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x56,
+	0x61, 0x6c, 0x75, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x6c, 0x0a, 0x09, 0x48, 0x65,
+	0x61, 0x64, 0x65, 0x72, 0x4d, 0x61, 0x70, 0x12, 0x3b, 0x0a, 0x07, 0x68, 0x65, 0x61, 0x64, 0x65,
+	0x72, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e,
+	0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x07, 0x68, 0x65, 0x61,
+	0x64, 0x65, 0x72, 0x73, 0x3a, 0x22, 0x9a, 0xc5, 0x88, 0x1e, 0x1d, 0x0a, 0x1b, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48,
+	0x65, 0x61, 0x64, 0x65, 0x72, 0x4d, 0x61, 0x70, 0x22, 0x2f, 0x0a, 0x10, 0x57, 0x61, 0x74, 0x63,
+	0x68, 0x65, 0x64, 0x44, 0x69, 0x72, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x79, 0x12, 0x1b, 0x0a, 0x04,
+	0x70, 0x61, 0x74, 0x68, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72,
+	0x02, 0x10, 0x01, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x22, 0xf4, 0x01, 0x0a, 0x0a, 0x44, 0x61,
+	0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x25, 0x0a, 0x08, 0x66, 0x69, 0x6c, 0x65,
+	0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72,
+	0x02, 0x10, 0x01, 0x48, 0x00, 0x52, 0x08, 0x66, 0x69, 0x6c, 0x65, 0x6e, 0x61, 0x6d, 0x65, 0x12,
+	0x23, 0x0a, 0x0c, 0x69, 0x6e, 0x6c, 0x69, 0x6e, 0x65, 0x5f, 0x62, 0x79, 0x74, 0x65, 0x73, 0x18,
+	0x02, 0x20, 0x01, 0x28, 0x0c, 0x48, 0x00, 0x52, 0x0b, 0x69, 0x6e, 0x6c, 0x69, 0x6e, 0x65, 0x42,
+	0x79, 0x74, 0x65, 0x73, 0x12, 0x25, 0x0a, 0x0d, 0x69, 0x6e, 0x6c, 0x69, 0x6e, 0x65, 0x5f, 0x73,
+	0x74, 0x72, 0x69, 0x6e, 0x67, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x48, 0x00, 0x52, 0x0c, 0x69,
+	0x6e, 0x6c, 0x69, 0x6e, 0x65, 0x53, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x12, 0x3c, 0x0a, 0x14, 0x65,
+	0x6e, 0x76, 0x69, 0x72, 0x6f, 0x6e, 0x6d, 0x65, 0x6e, 0x74, 0x5f, 0x76, 0x61, 0x72, 0x69, 0x61,
+	0x62, 0x6c, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02,
+	0x10, 0x01, 0x48, 0x00, 0x52, 0x13, 0x65, 0x6e, 0x76, 0x69, 0x72, 0x6f, 0x6e, 0x6d, 0x65, 0x6e,
+	0x74, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x3a, 0x23, 0x9a, 0xc5, 0x88, 0x1e, 0x1e,
+	0x0a, 0x1c, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63,
+	0x6f, 0x72, 0x65, 0x2e, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x42, 0x10,
+	0x0a, 0x09, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x03, 0xf8, 0x42, 0x01,
+	0x22, 0xd4, 0x01, 0x0a, 0x0b, 0x52, 0x65, 0x74, 0x72, 0x79, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79,
+	0x12, 0x4b, 0x0a, 0x0e, 0x72, 0x65, 0x74, 0x72, 0x79, 0x5f, 0x62, 0x61, 0x63, 0x6b, 0x5f, 0x6f,
+	0x66, 0x66, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
 	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e,
-	0x52, 0x65, 0x6d, 0x6f, 0x74, 0x65, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65,
-	0x48, 0x00, 0x52, 0x06, 0x72, 0x65, 0x6d, 0x6f, 0x74, 0x65, 0x3a, 0x28, 0x9a, 0xc5, 0x88, 0x1e,
+	0x42, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x53, 0x74, 0x72, 0x61, 0x74, 0x65, 0x67, 0x79, 0x52,
+	0x0c, 0x72, 0x65, 0x74, 0x72, 0x79, 0x42, 0x61, 0x63, 0x6b, 0x4f, 0x66, 0x66, 0x12, 0x52, 0x0a,
+	0x0b, 0x6e, 0x75, 0x6d, 0x5f, 0x72, 0x65, 0x74, 0x72, 0x69, 0x65, 0x73, 0x18, 0x02, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65,
+	0x42, 0x13, 0xf2, 0x98, 0xfe, 0x8f, 0x05, 0x0d, 0x0a, 0x0b, 0x6d, 0x61, 0x78, 0x5f, 0x72, 0x65,
+	0x74, 0x72, 0x69, 0x65, 0x73, 0x52, 0x0a, 0x6e, 0x75, 0x6d, 0x52, 0x65, 0x74, 0x72, 0x69, 0x65,
+	0x73, 0x3a, 0x24, 0x9a, 0xc5, 0x88, 0x1e, 0x1f, 0x0a, 0x1d, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
+	0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x52, 0x65, 0x74, 0x72,
+	0x79, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x22, 0xe8, 0x01, 0x0a, 0x10, 0x52, 0x65, 0x6d, 0x6f,
+	0x74, 0x65, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x42, 0x0a, 0x08,
+	0x68, 0x74, 0x74, 0x70, 0x5f, 0x75, 0x72, 0x69, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1d,
+	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f,
+	0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x55, 0x72, 0x69, 0x42, 0x08, 0xfa,
+	0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x07, 0x68, 0x74, 0x74, 0x70, 0x55, 0x72, 0x69,
+	0x12, 0x1f, 0x0a, 0x06, 0x73, 0x68, 0x61, 0x32, 0x35, 0x36, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09,
+	0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01, 0x52, 0x06, 0x73, 0x68, 0x61, 0x32, 0x35,
+	0x36, 0x12, 0x44, 0x0a, 0x0c, 0x72, 0x65, 0x74, 0x72, 0x79, 0x5f, 0x70, 0x6f, 0x6c, 0x69, 0x63,
+	0x79, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
+	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x52,
+	0x65, 0x74, 0x72, 0x79, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x52, 0x0b, 0x72, 0x65, 0x74, 0x72,
+	0x79, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x3a, 0x29, 0x9a, 0xc5, 0x88, 0x1e, 0x24, 0x0a, 0x22,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72,
+	0x65, 0x2e, 0x52, 0x65, 0x6d, 0x6f, 0x74, 0x65, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x22, 0xc9, 0x01, 0x0a, 0x0f, 0x41, 0x73, 0x79, 0x6e, 0x63, 0x44, 0x61, 0x74, 0x61,
+	0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x12, 0x38, 0x0a, 0x05, 0x6c, 0x6f, 0x63, 0x61, 0x6c, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x20, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f,
+	0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x44, 0x61, 0x74,
+	0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x48, 0x00, 0x52, 0x05, 0x6c, 0x6f, 0x63, 0x61, 0x6c,
+	0x12, 0x40, 0x0a, 0x06, 0x72, 0x65, 0x6d, 0x6f, 0x74, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x26, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e,
+	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x52, 0x65, 0x6d, 0x6f, 0x74, 0x65, 0x44, 0x61,
+	0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x48, 0x00, 0x52, 0x06, 0x72, 0x65, 0x6d, 0x6f,
+	0x74, 0x65, 0x3a, 0x28, 0x9a, 0xc5, 0x88, 0x1e, 0x23, 0x0a, 0x21, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x41, 0x73, 0x79,
+	0x6e, 0x63, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x42, 0x10, 0x0a, 0x09,
+	0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x22, 0xb0,
+	0x01, 0x0a, 0x0f, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x70, 0x6f, 0x72, 0x74, 0x53, 0x6f, 0x63, 0x6b,
+	0x65, 0x74, 0x12, 0x1b, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
+	0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12,
+	0x39, 0x0a, 0x0c, 0x74, 0x79, 0x70, 0x65, 0x64, 0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x18,
+	0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
+	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x41, 0x6e, 0x79, 0x48, 0x00, 0x52, 0x0b, 0x74,
+	0x79, 0x70, 0x65, 0x64, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x3a, 0x28, 0x9a, 0xc5, 0x88, 0x1e,
 	0x23, 0x0a, 0x21, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e,
-	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x41, 0x73, 0x79, 0x6e, 0x63, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f,
-	0x75, 0x72, 0x63, 0x65, 0x42, 0x10, 0x0a, 0x09, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65,
-	0x72, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x22, 0xb0, 0x01, 0x0a, 0x0f, 0x54, 0x72, 0x61, 0x6e, 0x73,
-	0x70, 0x6f, 0x72, 0x74, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x12, 0x1b, 0x0a, 0x04, 0x6e, 0x61,
-	0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10,
-	0x01, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x39, 0x0a, 0x0c, 0x74, 0x79, 0x70, 0x65, 0x64,
-	0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e,
-	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e,
-	0x41, 0x6e, 0x79, 0x48, 0x00, 0x52, 0x0b, 0x74, 0x79, 0x70, 0x65, 0x64, 0x43, 0x6f, 0x6e, 0x66,
-	0x69, 0x67, 0x3a, 0x28, 0x9a, 0xc5, 0x88, 0x1e, 0x23, 0x0a, 0x21, 0x65, 0x6e, 0x76, 0x6f, 0x79,
-	0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x54, 0x72, 0x61,
-	0x6e, 0x73, 0x70, 0x6f, 0x72, 0x74, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x42, 0x0d, 0x0a, 0x0b,
-	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x4a, 0x04, 0x08, 0x02, 0x10,
-	0x03, 0x52, 0x06, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x22, 0xbf, 0x01, 0x0a, 0x18, 0x52, 0x75,
-	0x6e, 0x74, 0x69, 0x6d, 0x65, 0x46, 0x72, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x50,
-	0x65, 0x72, 0x63, 0x65, 0x6e, 0x74, 0x12, 0x4f, 0x0a, 0x0d, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c,
-	0x74, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x20, 0x2e,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x46, 0x72,
-	0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x50, 0x65, 0x72, 0x63, 0x65, 0x6e, 0x74, 0x42,
-	0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x0c, 0x64, 0x65, 0x66, 0x61, 0x75,
-	0x6c, 0x74, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x72, 0x75, 0x6e, 0x74, 0x69,
-	0x6d, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x72, 0x75,
-	0x6e, 0x74, 0x69, 0x6d, 0x65, 0x4b, 0x65, 0x79, 0x3a, 0x31, 0x9a, 0xc5, 0x88, 0x1e, 0x2c, 0x0a,
-	0x2a, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f,
-	0x72, 0x65, 0x2e, 0x52, 0x75, 0x6e, 0x74, 0x69, 0x6d, 0x65, 0x46, 0x72, 0x61, 0x63, 0x74, 0x69,
-	0x6f, 0x6e, 0x61, 0x6c, 0x50, 0x65, 0x72, 0x63, 0x65, 0x6e, 0x74, 0x22, 0x55, 0x0a, 0x0c, 0x43,
-	0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x50, 0x6c, 0x61, 0x6e, 0x65, 0x12, 0x1e, 0x0a, 0x0a, 0x69,
-	0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x0a, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x3a, 0x25, 0x9a, 0xc5, 0x88,
-	0x1e, 0x20, 0x0a, 0x1e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32,
-	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x43, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x50, 0x6c, 0x61,
-	0x6e, 0x65, 0x2a, 0x28, 0x0a, 0x0f, 0x52, 0x6f, 0x75, 0x74, 0x69, 0x6e, 0x67, 0x50, 0x72, 0x69,
-	0x6f, 0x72, 0x69, 0x74, 0x79, 0x12, 0x0b, 0x0a, 0x07, 0x44, 0x45, 0x46, 0x41, 0x55, 0x4c, 0x54,
-	0x10, 0x00, 0x12, 0x08, 0x0a, 0x04, 0x48, 0x49, 0x47, 0x48, 0x10, 0x01, 0x2a, 0x89, 0x01, 0x0a,
-	0x0d, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x12, 0x16,
-	0x0a, 0x12, 0x4d, 0x45, 0x54, 0x48, 0x4f, 0x44, 0x5f, 0x55, 0x4e, 0x53, 0x50, 0x45, 0x43, 0x49,
-	0x46, 0x49, 0x45, 0x44, 0x10, 0x00, 0x12, 0x07, 0x0a, 0x03, 0x47, 0x45, 0x54, 0x10, 0x01, 0x12,
-	0x08, 0x0a, 0x04, 0x48, 0x45, 0x41, 0x44, 0x10, 0x02, 0x12, 0x08, 0x0a, 0x04, 0x50, 0x4f, 0x53,
-	0x54, 0x10, 0x03, 0x12, 0x07, 0x0a, 0x03, 0x50, 0x55, 0x54, 0x10, 0x04, 0x12, 0x0a, 0x0a, 0x06,
-	0x44, 0x45, 0x4c, 0x45, 0x54, 0x45, 0x10, 0x05, 0x12, 0x0b, 0x0a, 0x07, 0x43, 0x4f, 0x4e, 0x4e,
-	0x45, 0x43, 0x54, 0x10, 0x06, 0x12, 0x0b, 0x0a, 0x07, 0x4f, 0x50, 0x54, 0x49, 0x4f, 0x4e, 0x53,
-	0x10, 0x07, 0x12, 0x09, 0x0a, 0x05, 0x54, 0x52, 0x41, 0x43, 0x45, 0x10, 0x08, 0x12, 0x09, 0x0a,
-	0x05, 0x50, 0x41, 0x54, 0x43, 0x48, 0x10, 0x09, 0x2a, 0x3e, 0x0a, 0x10, 0x54, 0x72, 0x61, 0x66,
-	0x66, 0x69, 0x63, 0x44, 0x69, 0x72, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x0f, 0x0a, 0x0b,
-	0x55, 0x4e, 0x53, 0x50, 0x45, 0x43, 0x49, 0x46, 0x49, 0x45, 0x44, 0x10, 0x00, 0x12, 0x0b, 0x0a,
-	0x07, 0x49, 0x4e, 0x42, 0x4f, 0x55, 0x4e, 0x44, 0x10, 0x01, 0x12, 0x0c, 0x0a, 0x08, 0x4f, 0x55,
-	0x54, 0x42, 0x4f, 0x55, 0x4e, 0x44, 0x10, 0x02, 0x42, 0x7d, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65,
+	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x70, 0x6f, 0x72, 0x74, 0x53, 0x6f,
+	0x63, 0x6b, 0x65, 0x74, 0x42, 0x0d, 0x0a, 0x0b, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x5f, 0x74,
+	0x79, 0x70, 0x65, 0x4a, 0x04, 0x08, 0x02, 0x10, 0x03, 0x52, 0x06, 0x63, 0x6f, 0x6e, 0x66, 0x69,
+	0x67, 0x22, 0xbf, 0x01, 0x0a, 0x18, 0x52, 0x75, 0x6e, 0x74, 0x69, 0x6d, 0x65, 0x46, 0x72, 0x61,
+	0x63, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x50, 0x65, 0x72, 0x63, 0x65, 0x6e, 0x74, 0x12, 0x4f,
+	0x0a, 0x0d, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x20, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79,
+	0x70, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x46, 0x72, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c,
+	0x50, 0x65, 0x72, 0x63, 0x65, 0x6e, 0x74, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10,
+	0x01, 0x52, 0x0c, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12,
+	0x1f, 0x0a, 0x0b, 0x72, 0x75, 0x6e, 0x74, 0x69, 0x6d, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x72, 0x75, 0x6e, 0x74, 0x69, 0x6d, 0x65, 0x4b, 0x65, 0x79,
+	0x3a, 0x31, 0x9a, 0xc5, 0x88, 0x1e, 0x2c, 0x0a, 0x2a, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61,
+	0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x52, 0x75, 0x6e, 0x74, 0x69,
+	0x6d, 0x65, 0x46, 0x72, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x50, 0x65, 0x72, 0x63,
+	0x65, 0x6e, 0x74, 0x22, 0x55, 0x0a, 0x0c, 0x43, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x50, 0x6c,
+	0x61, 0x6e, 0x65, 0x12, 0x1e, 0x0a, 0x0a, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65,
+	0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66,
+	0x69, 0x65, 0x72, 0x3a, 0x25, 0x9a, 0xc5, 0x88, 0x1e, 0x20, 0x0a, 0x1e, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x43, 0x6f,
+	0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x50, 0x6c, 0x61, 0x6e, 0x65, 0x2a, 0x28, 0x0a, 0x0f, 0x52, 0x6f,
+	0x75, 0x74, 0x69, 0x6e, 0x67, 0x50, 0x72, 0x69, 0x6f, 0x72, 0x69, 0x74, 0x79, 0x12, 0x0b, 0x0a,
+	0x07, 0x44, 0x45, 0x46, 0x41, 0x55, 0x4c, 0x54, 0x10, 0x00, 0x12, 0x08, 0x0a, 0x04, 0x48, 0x49,
+	0x47, 0x48, 0x10, 0x01, 0x2a, 0x89, 0x01, 0x0a, 0x0d, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
+	0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x12, 0x16, 0x0a, 0x12, 0x4d, 0x45, 0x54, 0x48, 0x4f, 0x44,
+	0x5f, 0x55, 0x4e, 0x53, 0x50, 0x45, 0x43, 0x49, 0x46, 0x49, 0x45, 0x44, 0x10, 0x00, 0x12, 0x07,
+	0x0a, 0x03, 0x47, 0x45, 0x54, 0x10, 0x01, 0x12, 0x08, 0x0a, 0x04, 0x48, 0x45, 0x41, 0x44, 0x10,
+	0x02, 0x12, 0x08, 0x0a, 0x04, 0x50, 0x4f, 0x53, 0x54, 0x10, 0x03, 0x12, 0x07, 0x0a, 0x03, 0x50,
+	0x55, 0x54, 0x10, 0x04, 0x12, 0x0a, 0x0a, 0x06, 0x44, 0x45, 0x4c, 0x45, 0x54, 0x45, 0x10, 0x05,
+	0x12, 0x0b, 0x0a, 0x07, 0x43, 0x4f, 0x4e, 0x4e, 0x45, 0x43, 0x54, 0x10, 0x06, 0x12, 0x0b, 0x0a,
+	0x07, 0x4f, 0x50, 0x54, 0x49, 0x4f, 0x4e, 0x53, 0x10, 0x07, 0x12, 0x09, 0x0a, 0x05, 0x54, 0x52,
+	0x41, 0x43, 0x45, 0x10, 0x08, 0x12, 0x09, 0x0a, 0x05, 0x50, 0x41, 0x54, 0x43, 0x48, 0x10, 0x09,
+	0x2a, 0x3e, 0x0a, 0x10, 0x54, 0x72, 0x61, 0x66, 0x66, 0x69, 0x63, 0x44, 0x69, 0x72, 0x65, 0x63,
+	0x74, 0x69, 0x6f, 0x6e, 0x12, 0x0f, 0x0a, 0x0b, 0x55, 0x4e, 0x53, 0x50, 0x45, 0x43, 0x49, 0x46,
+	0x49, 0x45, 0x44, 0x10, 0x00, 0x12, 0x0b, 0x0a, 0x07, 0x49, 0x4e, 0x42, 0x4f, 0x55, 0x4e, 0x44,
+	0x10, 0x01, 0x12, 0x0c, 0x0a, 0x08, 0x4f, 0x55, 0x54, 0x42, 0x4f, 0x55, 0x4e, 0x44, 0x10, 0x02,
+	0x42, 0x7d, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65,
 	0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
 	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x09,
 	0x42, 0x61, 0x73, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74,
 	0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f,
 	0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c,
 	0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67,
-	0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba,
-	0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0x62,
+	0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/base.pb.validate.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/base.pb.validate.go
index 696a3946303..7e2dd5390e4 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/base.pb.validate.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/base.pb.validate.go
@@ -1667,6 +1667,17 @@ func (m *HeaderValue) validate(all bool) error {
 		errors = append(errors, err)
 	}
 
+	if l := len(m.GetRawValue()); l < 0 || l > 16384 {
+		err := HeaderValueValidationError{
+			field:  "RawValue",
+			reason: "value length must be between 0 and 16384 bytes, inclusive",
+		}
+		if !all {
+			return err
+		}
+		errors = append(errors, err)
+	}
+
 	if len(errors) > 0 {
 		return HeaderValueMultiError(errors)
 	}
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/config_source.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/config_source.pb.go
index f0584ffed2a..32fc76d39ae 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/config_source.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/config_source.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/config_source.proto
 
 package corev3
@@ -36,11 +36,11 @@ const (
 	// versioning. If a client does not support v2 (e.g. due to deprecation), this
 	// is an invalid value.
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/config/core/v3/config_source.proto.
 	ApiVersion_AUTO ApiVersion = 0
 	// Use xDS v2 API.
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/config/core/v3/config_source.proto.
 	ApiVersion_V2 ApiVersion = 1
 	// Use xDS v3 API.
 	ApiVersion_V3 ApiVersion = 2
@@ -94,7 +94,7 @@ const (
 	// Ideally this would be 'reserved 0' but one can't reserve the default
 	// value. Instead we throw an exception if this is ever used.
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/config/core/v3/config_source.proto.
 	ApiConfigSource_DEPRECATED_AND_UNAVAILABLE_DO_NOT_USE ApiConfigSource_ApiType = 0
 	// REST-JSON v2 API. The `canonical JSON encoding
 	// <https://developers.google.com/protocol-buffers/docs/proto3#json>`_ for
@@ -182,8 +182,8 @@ type ApiConfigSource struct {
 	//
 	// .. note::
 	//
-	//  The cluster with name ``cluster_name`` must be statically defined and its
-	//  type must not be ``EDS``.
+	//	The cluster with name ``cluster_name`` must be statically defined and its
+	//	type must not be ``EDS``.
 	ClusterNames []string `protobuf:"bytes,2,rep,name=cluster_names,json=clusterNames,proto3" json:"cluster_names,omitempty"`
 	// Multiple gRPC services be provided for GRPC. If > 1 cluster is defined,
 	// services will be cycled through if any kind of failure occurs.
@@ -200,7 +200,7 @@ type ApiConfigSource struct {
 	// A list of config validators that will be executed when a new update is
 	// received from the ApiConfigSource. Note that each validator handles a
 	// specific xDS service type, and only the validators corresponding to the
-	// type url (in ``:ref: DiscoveryResponse`` or ``:ref: DeltaDiscoveryResponse``)
+	// type url (in “:ref: DiscoveryResponse“ or “:ref: DeltaDiscoveryResponse“)
 	// will be invoked.
 	// If the validator returns false or throws an exception, the config will be rejected by
 	// the client, and a NACK will be sent.
@@ -407,7 +407,8 @@ type RateLimitSettings struct {
 	// default value of 100 will be used.
 	MaxTokens *wrappers.UInt32Value `protobuf:"bytes,1,opt,name=max_tokens,json=maxTokens,proto3" json:"max_tokens,omitempty"`
 	// Rate at which tokens will be filled per second. If not set, a default fill rate of 10 tokens
-	// per second will be used.
+	// per second will be used. The minimal fill rate is once per year. Lower
+	// fill rates will be set to once per year.
 	FillRate *wrappers.DoubleValue `protobuf:"bytes,2,opt,name=fill_rate,json=fillRate,proto3" json:"fill_rate,omitempty"`
 }
 
@@ -469,27 +470,27 @@ type PathConfigSource struct {
 	//
 	// .. note::
 	//
-	//  The path to the source must exist at config load time.
+	//	The path to the source must exist at config load time.
 	//
 	// .. note::
 	//
-	//   If ``watched_directory`` is *not* configured, Envoy will watch the file path for *moves*.
-	//   This is because in general only moves are atomic. The same method of swapping files as is
-	//   demonstrated in the :ref:`runtime documentation <config_runtime_symbolic_link_swap>` can be
-	//   used here also. If ``watched_directory`` is configured, no watch will be placed directly on
-	//   this path. Instead, the configured ``watched_directory`` will be used to trigger reloads of
-	//   this path. This is required in certain deployment scenarios. See below for more information.
+	//	If ``watched_directory`` is *not* configured, Envoy will watch the file path for *moves*.
+	//	This is because in general only moves are atomic. The same method of swapping files as is
+	//	demonstrated in the :ref:`runtime documentation <config_runtime_symbolic_link_swap>` can be
+	//	used here also. If ``watched_directory`` is configured, no watch will be placed directly on
+	//	this path. Instead, the configured ``watched_directory`` will be used to trigger reloads of
+	//	this path. This is required in certain deployment scenarios. See below for more information.
 	Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
 	// If configured, this directory will be watched for *moves*. When an entry in this directory is
-	// moved to, the ``path`` will be reloaded. This is required in certain deployment scenarios.
+	// moved to, the “path“ will be reloaded. This is required in certain deployment scenarios.
 	//
 	// Specifically, if trying to load an xDS resource using a
 	// `Kubernetes ConfigMap <https://kubernetes.io/docs/concepts/configuration/configmap/>`_, the
 	// following configuration might be used:
 	// 1. Store xds.yaml inside a ConfigMap.
-	// 2. Mount the ConfigMap to ``/config_map/xds``
-	// 3. Configure path ``/config_map/xds/xds.yaml``
-	// 4. Configure watched directory ``/config_map/xds``
+	// 2. Mount the ConfigMap to “/config_map/xds“
+	// 3. Configure path “/config_map/xds/xds.yaml“
+	// 4. Configure watched directory “/config_map/xds“
 	//
 	// The above configuration will ensure that Envoy watches the owning directory for moves which is
 	// required due to how Kubernetes manages ConfigMap symbolic links during atomic updates.
@@ -555,11 +556,12 @@ type ConfigSource struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Authorities that this config source may be used for. An authority specified in a xdstp:// URL
-	// is resolved to a ``ConfigSource`` prior to configuration fetch. This field provides the
+	// is resolved to a “ConfigSource“ prior to configuration fetch. This field provides the
 	// association between authority name and configuration source.
 	// [#not-implemented-hide:]
 	Authorities []*v3.Authority `protobuf:"bytes,7,rep,name=authorities,proto3" json:"authorities,omitempty"`
 	// Types that are assignable to ConfigSourceSpecifier:
+	//
 	//	*ConfigSource_Path
 	//	*ConfigSource_PathConfigSource
 	//	*ConfigSource_ApiConfigSource
@@ -626,7 +628,7 @@ func (m *ConfigSource) GetConfigSourceSpecifier() isConfigSource_ConfigSourceSpe
 	return nil
 }
 
-// Deprecated: Do not use.
+// Deprecated: Marked as deprecated in envoy/config/core/v3/config_source.proto.
 func (x *ConfigSource) GetPath() string {
 	if x, ok := x.GetConfigSourceSpecifier().(*ConfigSource_Path); ok {
 		return x.Path
@@ -681,9 +683,9 @@ type isConfigSource_ConfigSourceSpecifier interface {
 }
 
 type ConfigSource_Path struct {
-	// Deprecated in favor of ``path_config_source``. Use that field instead.
+	// Deprecated in favor of “path_config_source“. Use that field instead.
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/config/core/v3/config_source.proto.
 	Path string `protobuf:"bytes,1,opt,name=path,proto3,oneof"`
 }
 
@@ -747,7 +749,7 @@ type ExtensionConfigSource struct {
 	ConfigSource *ConfigSource `protobuf:"bytes,1,opt,name=config_source,json=configSource,proto3" json:"config_source,omitempty"`
 	// Optional default configuration to use as the initial configuration if
 	// there is a failure to receive the initial extension configuration or if
-	// ``apply_default_config_without_warming`` flag is set.
+	// “apply_default_config_without_warming“ flag is set.
 	DefaultConfig *any1.Any `protobuf:"bytes,2,opt,name=default_config,json=defaultConfig,proto3" json:"default_config,omitempty"`
 	// Use the default config as the initial configuration without warming and
 	// waiting for the first discovery response. Requires the default configuration
@@ -894,7 +896,7 @@ var file_envoy_config_core_v3_config_source_proto_rawDesc = []byte{
 	0x22, 0x92, 0x01, 0x0a, 0x07, 0x41, 0x70, 0x69, 0x54, 0x79, 0x70, 0x65, 0x12, 0x33, 0x0a, 0x25,
 	0x44, 0x45, 0x50, 0x52, 0x45, 0x43, 0x41, 0x54, 0x45, 0x44, 0x5f, 0x41, 0x4e, 0x44, 0x5f, 0x55,
 	0x4e, 0x41, 0x56, 0x41, 0x49, 0x4c, 0x41, 0x42, 0x4c, 0x45, 0x5f, 0x44, 0x4f, 0x5f, 0x4e, 0x4f,
-	0x54, 0x5f, 0x55, 0x53, 0x45, 0x10, 0x00, 0x1a, 0x08, 0x08, 0x01, 0xa8, 0xf7, 0xb4, 0x8b, 0x02,
+	0x54, 0x5f, 0x55, 0x53, 0x45, 0x10, 0x00, 0x1a, 0x08, 0xa8, 0xf7, 0xb4, 0x8b, 0x02, 0x01, 0x08,
 	0x01, 0x12, 0x08, 0x0a, 0x04, 0x52, 0x45, 0x53, 0x54, 0x10, 0x01, 0x12, 0x08, 0x0a, 0x04, 0x47,
 	0x52, 0x50, 0x43, 0x10, 0x02, 0x12, 0x0e, 0x0a, 0x0a, 0x44, 0x45, 0x4c, 0x54, 0x41, 0x5f, 0x47,
 	0x52, 0x50, 0x43, 0x10, 0x03, 0x12, 0x13, 0x0a, 0x0f, 0x41, 0x47, 0x47, 0x52, 0x45, 0x47, 0x41,
@@ -944,8 +946,8 @@ var file_envoy_config_core_v3_config_source_proto_rawDesc = []byte{
 	0x0b, 0x32, 0x16, 0x2e, 0x78, 0x64, 0x73, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e,
 	0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x74, 0x79, 0x52, 0x0b, 0x61, 0x75, 0x74, 0x68, 0x6f,
 	0x72, 0x69, 0x74, 0x69, 0x65, 0x73, 0x12, 0x21, 0x0a, 0x04, 0x70, 0x61, 0x74, 0x68, 0x18, 0x01,
-	0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0x18, 0x01, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e,
-	0x30, 0x48, 0x00, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x12, 0x56, 0x0a, 0x12, 0x70, 0x61, 0x74,
+	0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x18,
+	0x01, 0x48, 0x00, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x12, 0x56, 0x0a, 0x12, 0x70, 0x61, 0x74,
 	0x68, 0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x5f, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18,
 	0x08, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x26, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f,
 	0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x50, 0x61, 0x74,
@@ -999,18 +1001,18 @@ var file_envoy_config_core_v3_config_source_proto_rawDesc = []byte{
 	0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x09, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x92, 0x01, 0x02, 0x08,
 	0x01, 0x52, 0x08, 0x74, 0x79, 0x70, 0x65, 0x55, 0x72, 0x6c, 0x73, 0x2a, 0x40, 0x0a, 0x0a, 0x41,
 	0x70, 0x69, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x12, 0x15, 0x0a, 0x04, 0x41, 0x55, 0x54,
-	0x4f, 0x10, 0x00, 0x1a, 0x0b, 0x08, 0x01, 0x8a, 0xf4, 0x9b, 0xb3, 0x05, 0x03, 0x33, 0x2e, 0x30,
-	0x12, 0x13, 0x0a, 0x02, 0x56, 0x32, 0x10, 0x01, 0x1a, 0x0b, 0x08, 0x01, 0x8a, 0xf4, 0x9b, 0xb3,
-	0x05, 0x03, 0x33, 0x2e, 0x30, 0x12, 0x06, 0x0a, 0x02, 0x56, 0x33, 0x10, 0x02, 0x42, 0x85, 0x01,
-	0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72,
-	0x65, 0x2e, 0x76, 0x33, 0x42, 0x11, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x53, 0x6f, 0x75, 0x72,
-	0x63, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75,
-	0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79,
-	0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e,
-	0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63,
-	0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8,
-	0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x4f, 0x10, 0x00, 0x1a, 0x0b, 0x8a, 0xf4, 0x9b, 0xb3, 0x05, 0x03, 0x33, 0x2e, 0x30, 0x08, 0x01,
+	0x12, 0x13, 0x0a, 0x02, 0x56, 0x32, 0x10, 0x01, 0x1a, 0x0b, 0x8a, 0xf4, 0x9b, 0xb3, 0x05, 0x03,
+	0x33, 0x2e, 0x30, 0x08, 0x01, 0x12, 0x06, 0x0a, 0x02, 0x56, 0x33, 0x10, 0x02, 0x42, 0x85, 0x01,
+	0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f,
+	0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x11, 0x43, 0x6f,
+	0x6e, 0x66, 0x69, 0x67, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50,
+	0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e,
+	0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74,
+	0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f,
+	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63,
+	0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/event_service_config.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/event_service_config.pb.go
index 56dab5b9873..f9deb0c9017 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/event_service_config.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/event_service_config.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/event_service_config.proto
 
 package corev3
@@ -30,6 +30,7 @@ type EventServiceConfig struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to ConfigSourceSpecifier:
+	//
 	//	*EventServiceConfig_GrpcService
 	ConfigSourceSpecifier isEventServiceConfig_ConfigSourceSpecifier `protobuf_oneof:"config_source_specifier"`
 }
@@ -117,16 +118,16 @@ var file_envoy_config_core_v3_event_service_config_proto_rawDesc = []byte{
 	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x45, 0x76, 0x65, 0x6e, 0x74, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63,
 	0x65, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x42, 0x1e, 0x0a, 0x17, 0x63, 0x6f, 0x6e, 0x66, 0x69,
 	0x67, 0x5f, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69,
-	0x65, 0x72, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x8b, 0x01, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
-	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x17,
-	0x45, 0x76, 0x65, 0x6e, 0x74, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x43, 0x6f, 0x6e, 0x66,
-	0x69, 0x67, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75,
-	0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79,
-	0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e,
-	0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63,
-	0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8,
-	0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x65, 0x72, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x8b, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02,
+	0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78,
+	0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63,
+	0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x17, 0x45, 0x76, 0x65, 0x6e, 0x74, 0x53, 0x65, 0x72,
+	0x76, 0x69, 0x63, 0x65, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50,
+	0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e,
+	0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74,
+	0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f,
+	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63,
+	0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/extension.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/extension.pb.go
index ecf3e6b5cff..3fa0aab8981 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/extension.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/extension.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/extension.proto
 
 package corev3
@@ -34,9 +34,9 @@ type TypedExtensionConfig struct {
 	// it serves the role of an opaque identifier.
 	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
 	// The typed config for the extension. The type URL will be used to identify
-	// the extension. In the case that the type URL is ``xds.type.v3.TypedStruct``
-	// (or, for historical reasons, ``udpa.type.v1.TypedStruct``), the inner type
-	// URL of ``TypedStruct`` will be utilized. See the
+	// the extension. In the case that the type URL is “xds.type.v3.TypedStruct“
+	// (or, for historical reasons, “udpa.type.v1.TypedStruct“), the inner type
+	// URL of “TypedStruct“ will be utilized. See the
 	// :ref:`extension configuration overview
 	// <config_overview_extension_configuration>` for further details.
 	TypedConfig *any1.Any `protobuf:"bytes,2,opt,name=typed_config,json=typedConfig,proto3" json:"typed_config,omitempty"`
@@ -107,15 +107,15 @@ var file_envoy_config_core_v3_extension_proto_rawDesc = []byte{
 	0x6e, 0x66, 0x69, 0x67, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x14, 0x2e, 0x67, 0x6f, 0x6f,
 	0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x41, 0x6e, 0x79,
 	0x42, 0x08, 0xfa, 0x42, 0x05, 0xa2, 0x01, 0x02, 0x08, 0x01, 0x52, 0x0b, 0x74, 0x79, 0x70, 0x65,
-	0x64, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x42, 0x82, 0x01, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
-	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x0e,
-	0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01,
-	0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76,
-	0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72,
-	0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63,
-	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f,
-	0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72,
+	0x64, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x42, 0x82, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02,
+	0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78,
+	0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63,
+	0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x0e, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f,
+	0x6e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62,
+	0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f,
+	0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65,
+	0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f,
+	0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72,
 	0x6f, 0x74, 0x6f, 0x33,
 }
 
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/grpc_method_list.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/grpc_method_list.pb.go
index 5e0e91178a6..30dbf0ecb7b 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/grpc_method_list.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/grpc_method_list.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/grpc_method_list.proto
 
 package corev3
@@ -156,16 +156,16 @@ var file_envoy_config_core_v3_grpc_method_list_proto_rawDesc = []byte{
 	0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4c, 0x69, 0x73, 0x74, 0x2e, 0x53, 0x65, 0x72, 0x76, 0x69,
 	0x63, 0x65, 0x3a, 0x27, 0x9a, 0xc5, 0x88, 0x1e, 0x22, 0x0a, 0x20, 0x65, 0x6e, 0x76, 0x6f, 0x79,
 	0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x47, 0x72, 0x70,
-	0x63, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4c, 0x69, 0x73, 0x74, 0x42, 0x87, 0x01, 0x0a, 0x22,
-	0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e,
-	0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e,
-	0x76, 0x33, 0x42, 0x13, 0x47, 0x72, 0x70, 0x63, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4c, 0x69,
-	0x73, 0x74, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75,
-	0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79,
-	0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e,
-	0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63,
-	0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8,
-	0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x63, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4c, 0x69, 0x73, 0x74, 0x42, 0x87, 0x01, 0xba, 0x80,
+	0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66,
+	0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x13, 0x47, 0x72, 0x70, 0x63,
+	0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4c, 0x69, 0x73, 0x74, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50,
+	0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e,
+	0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74,
+	0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f,
+	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63,
+	0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/grpc_service.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/grpc_service.pb.go
index 1bab4b9e833..a8b3b061ae9 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/grpc_service.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/grpc_service.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/grpc_service.proto
 
 package corev3
@@ -36,6 +36,7 @@ type GrpcService struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to TargetSpecifier:
+	//
 	//	*GrpcService_EnvoyGrpc_
 	//	*GrpcService_GoogleGrpc_
 	TargetSpecifier isGrpcService_TargetSpecifier `protobuf_oneof:"target_specifier"`
@@ -43,7 +44,7 @@ type GrpcService struct {
 	// request.
 	Timeout *duration.Duration `protobuf:"bytes,3,opt,name=timeout,proto3" json:"timeout,omitempty"`
 	// Additional metadata to include in streams initiated to the GrpcService. This can be used for
-	// scenarios in which additional ad hoc authorization headers (e.g. ``x-foo-bar: baz-key``) are to
+	// scenarios in which additional ad hoc authorization headers (e.g. “x-foo-bar: baz-key“) are to
 	// be injected. For more information, including details on header value syntax, see the
 	// documentation on :ref:`custom request headers
 	// <config_http_conn_man_headers_custom_request_headers>`.
@@ -148,7 +149,7 @@ type GrpcService_EnvoyGrpc struct {
 	// in the :ref:`Cluster <envoy_v3_api_msg_config.cluster.v3.Cluster>` :ref:`transport_socket
 	// <envoy_v3_api_field_config.cluster.v3.Cluster.transport_socket>`.
 	ClusterName string `protobuf:"bytes,1,opt,name=cluster_name,json=clusterName,proto3" json:"cluster_name,omitempty"`
-	// The ``:authority`` header in the grpc request. If this field is not set, the authority header value will be ``cluster_name``.
+	// The “:authority“ header in the grpc request. If this field is not set, the authority header value will be “cluster_name“.
 	// Note that this authority does not override the SNI. The SNI is provided by the transport socket of the cluster.
 	Authority string `protobuf:"bytes,2,opt,name=authority,proto3" json:"authority,omitempty"`
 	// Indicates the retry policy for re-establishing the gRPC stream
@@ -229,11 +230,12 @@ type GrpcService_GoogleGrpc struct {
 	// service.
 	//
 	// .. csv-table::
-	//    :header: Name, Type, Description
-	//    :widths: 1, 1, 2
 	//
-	//    streams_total, Counter, Total number of streams opened
-	//    streams_closed_<gRPC status code>, Counter, Total streams closed with <gRPC status code>
+	//	:header: Name, Type, Description
+	//	:widths: 1, 1, 2
+	//
+	//	streams_total, Counter, Total number of streams opened
+	//	streams_closed_<gRPC status code>, Counter, Total streams closed with <gRPC status code>
 	StatPrefix string `protobuf:"bytes,4,opt,name=stat_prefix,json=statPrefix,proto3" json:"stat_prefix,omitempty"`
 	// The name of the Google gRPC credentials factory to use. This must have been registered with
 	// Envoy. If this is empty, a default credentials factory will be used that sets up channel
@@ -452,6 +454,7 @@ type GrpcService_GoogleGrpc_ChannelCredentials struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to CredentialSpecifier:
+	//
 	//	*GrpcService_GoogleGrpc_ChannelCredentials_SslCredentials
 	//	*GrpcService_GoogleGrpc_ChannelCredentials_GoogleDefault
 	//	*GrpcService_GoogleGrpc_ChannelCredentials_LocalCredentials
@@ -551,6 +554,7 @@ type GrpcService_GoogleGrpc_CallCredentials struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to CredentialSpecifier:
+	//
 	//	*GrpcService_GoogleGrpc_CallCredentials_AccessToken
 	//	*GrpcService_GoogleGrpc_CallCredentials_GoogleComputeEngine
 	//	*GrpcService_GoogleGrpc_CallCredentials_GoogleRefreshToken
@@ -886,6 +890,7 @@ type GrpcService_GoogleGrpc_CallCredentials_MetadataCredentialsFromPlugin struct
 	// [#extension-category: envoy.grpc_credentials]
 	//
 	// Types that are assignable to ConfigType:
+	//
 	//	*GrpcService_GoogleGrpc_CallCredentials_MetadataCredentialsFromPlugin_TypedConfig
 	ConfigType isGrpcService_GoogleGrpc_CallCredentials_MetadataCredentialsFromPlugin_ConfigType `protobuf_oneof:"config_type"`
 }
@@ -1096,6 +1101,7 @@ type GrpcService_GoogleGrpc_ChannelArgs_Value struct {
 	// delivered via the API.
 	//
 	// Types that are assignable to ValueSpecifier:
+	//
 	//	*GrpcService_GoogleGrpc_ChannelArgs_Value_StringValue
 	//	*GrpcService_GoogleGrpc_ChannelArgs_Value_IntValue
 	ValueSpecifier isGrpcService_GoogleGrpc_ChannelArgs_Value_ValueSpecifier `protobuf_oneof:"value_specifier"`
@@ -1222,8 +1228,8 @@ var file_envoy_config_core_v3_grpc_service_proto_rawDesc = []byte{
 	0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02,
 	0x10, 0x01, 0x52, 0x0b, 0x63, 0x6c, 0x75, 0x73, 0x74, 0x65, 0x72, 0x4e, 0x61, 0x6d, 0x65, 0x12,
 	0x2f, 0x0a, 0x09, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x74, 0x79, 0x18, 0x02, 0x20, 0x01,
-	0x28, 0x09, 0x42, 0x11, 0xfa, 0x42, 0x0e, 0x72, 0x0c, 0x10, 0x00, 0x28, 0x80, 0x80, 0x01, 0xc0,
-	0x01, 0x02, 0xc8, 0x01, 0x00, 0x52, 0x09, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x74, 0x79,
+	0x28, 0x09, 0x42, 0x11, 0xfa, 0x42, 0x0e, 0x72, 0x0c, 0x10, 0x00, 0x28, 0x80, 0x80, 0x01, 0xc8,
+	0x01, 0x00, 0xc0, 0x01, 0x02, 0x52, 0x09, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x74, 0x79,
 	0x12, 0x44, 0x0a, 0x0c, 0x72, 0x65, 0x74, 0x72, 0x79, 0x5f, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79,
 	0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63,
 	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x52, 0x65,
@@ -1467,15 +1473,15 @@ var file_envoy_config_core_v3_grpc_service_proto_rawDesc = []byte{
 	0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x47, 0x72,
 	0x70, 0x63, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x42, 0x17, 0x0a, 0x10, 0x74, 0x61, 0x72,
 	0x67, 0x65, 0x74, 0x5f, 0x73, 0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x03, 0xf8,
-	0x42, 0x01, 0x4a, 0x04, 0x08, 0x04, 0x10, 0x05, 0x42, 0x84, 0x01, 0x0a, 0x22, 0x69, 0x6f, 0x2e,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
-	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42,
-	0x10, 0x47, 0x72, 0x70, 0x63, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x50, 0x72, 0x6f, 0x74,
-	0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f,
-	0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33,
-	0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62,
+	0x42, 0x01, 0x4a, 0x04, 0x08, 0x04, 0x10, 0x05, 0x42, 0x84, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06,
+	0x02, 0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f,
+	0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e,
+	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x10, 0x47, 0x72, 0x70, 0x63, 0x53, 0x65, 0x72,
+	0x76, 0x69, 0x63, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74,
+	0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f,
+	0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c,
+	0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67,
+	0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0x62,
 	0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/health_check.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/health_check.pb.go
index 076038fc0e5..34b68b42ddd 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/health_check.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/health_check.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/health_check.proto
 
 package corev3
@@ -33,7 +33,7 @@ const (
 type HealthStatus int32
 
 const (
-	// The health status is not known. This is interpreted by Envoy as ``HEALTHY``.
+	// The health status is not known. This is interpreted by Envoy as “HEALTHY“.
 	HealthStatus_UNKNOWN HealthStatus = 0
 	// Healthy.
 	HealthStatus_HEALTHY HealthStatus = 1
@@ -43,10 +43,10 @@ const (
 	// `<https://aws.amazon.com/blogs/aws/elb-connection-draining-remove-instances-from-service-with-care/>`_
 	// or
 	// `<https://cloud.google.com/compute/docs/load-balancing/enabling-connection-draining>`_.
-	// This is interpreted by Envoy as ``UNHEALTHY``.
+	// This is interpreted by Envoy as “UNHEALTHY“.
 	HealthStatus_DRAINING HealthStatus = 3
 	// Health check timed out. This is part of HDS and is interpreted by Envoy as
-	// ``UNHEALTHY``.
+	// “UNHEALTHY“.
 	HealthStatus_TIMEOUT HealthStatus = 4
 	// Degraded.
 	HealthStatus_DEGRADED HealthStatus = 5
@@ -166,14 +166,14 @@ type HealthCheck struct {
 	// interval Envoy will add interval_jitter to the wait time.
 	IntervalJitter *duration.Duration `protobuf:"bytes,3,opt,name=interval_jitter,json=intervalJitter,proto3" json:"interval_jitter,omitempty"`
 	// An optional jitter amount as a percentage of interval_ms. If specified,
-	// during every interval Envoy will add ``interval_ms`` *
-	// ``interval_jitter_percent`` / 100 to the wait time.
+	// during every interval Envoy will add “interval_ms“ *
+	// “interval_jitter_percent“ / 100 to the wait time.
 	//
 	// If interval_jitter_ms and interval_jitter_percent are both set, both of
 	// them will be used to increase the wait time.
 	IntervalJitterPercent uint32 `protobuf:"varint,18,opt,name=interval_jitter_percent,json=intervalJitterPercent,proto3" json:"interval_jitter_percent,omitempty"`
 	// The number of unhealthy health checks required before a host is marked
-	// unhealthy. Note that for ``http`` health checking if a host responds with a code not in
+	// unhealthy. Note that for “http“ health checking if a host responds with a code not in
 	// :ref:`expected_statuses <envoy_v3_api_field_config.core.v3.HealthCheck.HttpHealthCheck.expected_statuses>`
 	// or :ref:`retriable_statuses <envoy_v3_api_field_config.core.v3.HealthCheck.HttpHealthCheck.retriable_statuses>`,
 	// this threshold is ignored and the host is considered immediately unhealthy.
@@ -187,6 +187,7 @@ type HealthCheck struct {
 	// Reuse health check connection between health checks. Default is true.
 	ReuseConnection *wrappers.BoolValue `protobuf:"bytes,7,opt,name=reuse_connection,json=reuseConnection,proto3" json:"reuse_connection,omitempty"`
 	// Types that are assignable to HealthChecker:
+	//
 	//	*HealthCheck_HttpHealthCheck_
 	//	*HealthCheck_TcpHealthCheck_
 	//	*HealthCheck_GrpcHealthCheck_
@@ -206,7 +207,7 @@ type HealthCheck struct {
 	// (including new hosts) when the cluster has received no traffic.
 	//
 	// This is useful for when we want to send frequent health checks with
-	// ``no_traffic_interval`` but then revert to lower frequency ``no_traffic_healthy_interval`` once
+	// “no_traffic_interval“ but then revert to lower frequency “no_traffic_healthy_interval“ once
 	// a host in the cluster is marked as healthy.
 	//
 	// Once a cluster has been used for traffic routing, Envoy will shift back to using the
@@ -242,7 +243,7 @@ type HealthCheck struct {
 	//
 	// Specifies the path to the :ref:`health check event log <arch_overview_health_check_logging>`.
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/config/core/v3/health_check.proto.
 	EventLogPath string `protobuf:"bytes,17,opt,name=event_log_path,json=eventLogPath,proto3" json:"event_log_path,omitempty"`
 	// A list of event log sinks to process the health check event.
 	// [#extension-category: envoy.health_check.event_sinks]
@@ -263,22 +264,22 @@ type HealthCheck struct {
 	//
 	// .. code-block:: yaml
 	//
-	//  transport_socket_match_criteria:
-	//    useMTLS: true
+	//	transport_socket_match_criteria:
+	//	  useMTLS: true
 	//
 	// Will match the following :ref:`cluster socket match <envoy_v3_api_msg_config.cluster.v3.Cluster.TransportSocketMatch>`
 	//
 	// .. code-block:: yaml
 	//
-	//  transport_socket_matches:
-	//  - name: "useMTLS"
-	//    match:
-	//      useMTLS: true
-	//    transport_socket:
-	//      name: envoy.transport_sockets.tls
-	//      config: { ... } # tls socket configuration
+	//	transport_socket_matches:
+	//	- name: "useMTLS"
+	//	  match:
+	//	    useMTLS: true
+	//	  transport_socket:
+	//	    name: envoy.transport_sockets.tls
+	//	    config: { ... } # tls socket configuration
 	//
-	// If this field is set, then for health checks it will supersede an entry of ``envoy.transport_socket`` in the
+	// If this field is set, then for health checks it will supersede an entry of “envoy.transport_socket“ in the
 	// :ref:`LbEndpoint.Metadata <envoy_v3_api_field_config.endpoint.v3.LbEndpoint.metadata>`.
 	// This allows using different transport socket capabilities for health checking versus proxying to the
 	// endpoint.
@@ -455,7 +456,7 @@ func (x *HealthCheck) GetHealthyEdgeInterval() *duration.Duration {
 	return nil
 }
 
-// Deprecated: Do not use.
+// Deprecated: Marked as deprecated in envoy/config/core/v3/health_check.proto.
 func (x *HealthCheck) GetEventLogPath() string {
 	if x != nil {
 		return x.EventLogPath
@@ -537,6 +538,7 @@ type HealthCheck_Payload struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Payload:
+	//
 	//	*HealthCheck_Payload_Text
 	//	*HealthCheck_Payload_Binary
 	Payload isHealthCheck_Payload_Payload `protobuf_oneof:"payload"`
@@ -625,19 +627,19 @@ type HealthCheck_HttpHealthCheck struct {
 	// :ref:`hostname <envoy_v3_api_field_config.endpoint.v3.Endpoint.HealthCheckConfig.hostname>` field.
 	Host string `protobuf:"bytes,1,opt,name=host,proto3" json:"host,omitempty"`
 	// Specifies the HTTP path that will be requested during health checking. For example
-	// ``/healthcheck``.
+	// “/healthcheck“.
 	Path string `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
 	// [#not-implemented-hide:] HTTP specific payload.
 	Send *HealthCheck_Payload `protobuf:"bytes,3,opt,name=send,proto3" json:"send,omitempty"`
-	// Specifies a list of HTTP expected responses to match in the first ``response_buffer_size`` bytes of the response body.
+	// Specifies a list of HTTP expected responses to match in the first “response_buffer_size“ bytes of the response body.
 	// If it is set, both the expected response check and status code determine the health check.
 	// When checking the response, “fuzzy” matching is performed such that each payload block must be found,
 	// and in the order specified, but not necessarily contiguous.
 	//
 	// .. note::
 	//
-	//   It is recommended to set ``response_buffer_size`` based on the total Payload size for efficiency.
-	//   The default buffer size is 1024 bytes when it is not set.
+	//	It is recommended to set ``response_buffer_size`` based on the total Payload size for efficiency.
+	//	The default buffer size is 1024 bytes when it is not set.
 	Receive []*HealthCheck_Payload `protobuf:"bytes,4,rep,name=receive,proto3" json:"receive,omitempty"`
 	// Specifies the size of response buffer in bytes that is used to Payload match.
 	// The default value is 1024. Setting to 0 implies that the Payload will be matched against the entire response.
@@ -860,7 +862,7 @@ type HealthCheck_RedisHealthCheck struct {
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	// If set, optionally perform ``EXISTS <key>`` instead of ``PING``. A return value
+	// If set, optionally perform “EXISTS <key>“ instead of “PING“. A return value
 	// from Redis of 0 (does not exist) is considered a passing healthcheck. A return value other
 	// than 0 is considered a failure. This allows the user to mark a Redis instance for maintenance
 	// by setting the specified key to any value and waiting for traffic to drain.
@@ -999,6 +1001,7 @@ type HealthCheck_CustomHealthCheck struct {
 	// [#extension-category: envoy.health_checkers]
 	//
 	// Types that are assignable to ConfigType:
+	//
 	//	*HealthCheck_CustomHealthCheck_TypedConfig
 	ConfigType isHealthCheck_CustomHealthCheck_ConfigType `protobuf_oneof:"config_type"`
 }
@@ -1256,8 +1259,8 @@ var file_envoy_config_core_v3_health_check_proto_rawDesc = []byte{
 	0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x08, 0xfa, 0x42, 0x05, 0xaa, 0x01, 0x02, 0x2a, 0x00,
 	0x52, 0x13, 0x68, 0x65, 0x61, 0x6c, 0x74, 0x68, 0x79, 0x45, 0x64, 0x67, 0x65, 0x49, 0x6e, 0x74,
 	0x65, 0x72, 0x76, 0x61, 0x6c, 0x12, 0x31, 0x0a, 0x0e, 0x65, 0x76, 0x65, 0x6e, 0x74, 0x5f, 0x6c,
-	0x6f, 0x67, 0x5f, 0x70, 0x61, 0x74, 0x68, 0x18, 0x11, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0x18,
-	0x01, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x52, 0x0c, 0x65, 0x76, 0x65, 0x6e,
+	0x6f, 0x67, 0x5f, 0x70, 0x61, 0x74, 0x68, 0x18, 0x11, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0x92,
+	0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x18, 0x01, 0x52, 0x0c, 0x65, 0x76, 0x65, 0x6e,
 	0x74, 0x4c, 0x6f, 0x67, 0x50, 0x61, 0x74, 0x68, 0x12, 0x4d, 0x0a, 0x0c, 0x65, 0x76, 0x65, 0x6e,
 	0x74, 0x5f, 0x6c, 0x6f, 0x67, 0x67, 0x65, 0x72, 0x18, 0x19, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2a,
 	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f,
@@ -1294,10 +1297,10 @@ var file_envoy_config_core_v3_health_check_proto_rawDesc = []byte{
 	0x42, 0x0e, 0x0a, 0x07, 0x70, 0x61, 0x79, 0x6c, 0x6f, 0x61, 0x64, 0x12, 0x03, 0xf8, 0x42, 0x01,
 	0x1a, 0xcc, 0x07, 0x0a, 0x0f, 0x48, 0x74, 0x74, 0x70, 0x48, 0x65, 0x61, 0x6c, 0x74, 0x68, 0x43,
 	0x68, 0x65, 0x63, 0x6b, 0x12, 0x1f, 0x0a, 0x04, 0x68, 0x6f, 0x73, 0x74, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc0, 0x01, 0x02, 0xc8, 0x01, 0x00, 0x52,
+	0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc8, 0x01, 0x00, 0xc0, 0x01, 0x02, 0x52,
 	0x04, 0x68, 0x6f, 0x73, 0x74, 0x12, 0x21, 0x0a, 0x04, 0x70, 0x61, 0x74, 0x68, 0x18, 0x02, 0x20,
-	0x01, 0x28, 0x09, 0x42, 0x0d, 0xfa, 0x42, 0x0a, 0x72, 0x08, 0x10, 0x01, 0xc0, 0x01, 0x02, 0xc8,
-	0x01, 0x00, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x12, 0x3d, 0x0a, 0x04, 0x73, 0x65, 0x6e, 0x64,
+	0x01, 0x28, 0x09, 0x42, 0x0d, 0xfa, 0x42, 0x0a, 0x72, 0x08, 0x10, 0x01, 0xc8, 0x01, 0x00, 0xc0,
+	0x01, 0x02, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x12, 0x3d, 0x0a, 0x04, 0x73, 0x65, 0x6e, 0x64,
 	0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63,
 	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x65,
 	0x61, 0x6c, 0x74, 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x2e, 0x50, 0x61, 0x79, 0x6c, 0x6f, 0x61,
@@ -1320,8 +1323,8 @@ var file_envoy_config_core_v3_health_check_proto_rawDesc = []byte{
 	0x73, 0x74, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x54, 0x6f, 0x41, 0x64, 0x64, 0x12, 0x4b,
 	0x0a, 0x19, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x5f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72,
 	0x73, 0x5f, 0x74, 0x6f, 0x5f, 0x72, 0x65, 0x6d, 0x6f, 0x76, 0x65, 0x18, 0x08, 0x20, 0x03, 0x28,
-	0x09, 0x42, 0x10, 0xfa, 0x42, 0x0d, 0x92, 0x01, 0x0a, 0x22, 0x08, 0x72, 0x06, 0xc0, 0x01, 0x01,
-	0xc8, 0x01, 0x00, 0x52, 0x16, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x65, 0x61, 0x64,
+	0x09, 0x42, 0x10, 0xfa, 0x42, 0x0d, 0x92, 0x01, 0x0a, 0x22, 0x08, 0x72, 0x06, 0xc8, 0x01, 0x00,
+	0xc0, 0x01, 0x01, 0x52, 0x16, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x65, 0x61, 0x64,
 	0x65, 0x72, 0x73, 0x54, 0x6f, 0x52, 0x65, 0x6d, 0x6f, 0x76, 0x65, 0x12, 0x46, 0x0a, 0x11, 0x65,
 	0x78, 0x70, 0x65, 0x63, 0x74, 0x65, 0x64, 0x5f, 0x73, 0x74, 0x61, 0x74, 0x75, 0x73, 0x65, 0x73,
 	0x18, 0x09, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74,
@@ -1376,7 +1379,7 @@ var file_envoy_config_core_v3_health_check_proto_rawDesc = []byte{
 	0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01,
 	0x28, 0x09, 0x52, 0x0b, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12,
 	0x29, 0x0a, 0x09, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x74, 0x79, 0x18, 0x02, 0x20, 0x01,
-	0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc0, 0x01, 0x02, 0xc8, 0x01, 0x00, 0x52,
+	0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc8, 0x01, 0x00, 0xc0, 0x01, 0x02, 0x52,
 	0x09, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x74, 0x79, 0x12, 0x5d, 0x0a, 0x10, 0x69, 0x6e,
 	0x69, 0x74, 0x69, 0x61, 0x6c, 0x5f, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x03,
 	0x20, 0x03, 0x28, 0x0b, 0x32, 0x27, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e,
@@ -1416,15 +1419,15 @@ var file_envoy_config_core_v3_health_check_proto_rawDesc = []byte{
 	0x48, 0x59, 0x10, 0x02, 0x12, 0x0c, 0x0a, 0x08, 0x44, 0x52, 0x41, 0x49, 0x4e, 0x49, 0x4e, 0x47,
 	0x10, 0x03, 0x12, 0x0b, 0x0a, 0x07, 0x54, 0x49, 0x4d, 0x45, 0x4f, 0x55, 0x54, 0x10, 0x04, 0x12,
 	0x0c, 0x0a, 0x08, 0x44, 0x45, 0x47, 0x52, 0x41, 0x44, 0x45, 0x44, 0x10, 0x05, 0x42, 0x84, 0x01,
-	0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72,
-	0x65, 0x2e, 0x76, 0x33, 0x42, 0x10, 0x48, 0x65, 0x61, 0x6c, 0x74, 0x68, 0x43, 0x68, 0x65, 0x63,
-	0x6b, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62,
-	0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f,
-	0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65,
-	0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f,
-	0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1,
-	0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f,
+	0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x10, 0x48, 0x65,
+	0x61, 0x6c, 0x74, 0x68, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01,
+	0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72,
+	0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63,
+	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f,
+	0x72, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_service.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_service.pb.go
new file mode 100644
index 00000000000..0ae3e527b00
--- /dev/null
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_service.pb.go
@@ -0,0 +1,194 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
+// source: envoy/config/core/v3/http_service.proto
+
+package corev3
+
+import (
+	_ "github.com/cncf/xds/go/udpa/annotations"
+	_ "github.com/envoyproxy/protoc-gen-validate/validate"
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	reflect "reflect"
+	sync "sync"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+// HTTP service configuration.
+type HttpService struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// The service's HTTP URI. For example:
+	//
+	// .. code-block:: yaml
+	//
+	//	http_uri:
+	//	  uri: https://www.myserviceapi.com/v1/data
+	//	  cluster: www.myserviceapi.com|443
+	HttpUri *HttpUri `protobuf:"bytes,1,opt,name=http_uri,json=httpUri,proto3" json:"http_uri,omitempty"`
+	// Specifies a list of HTTP headers that should be added to each request
+	// handled by this virtual host.
+	RequestHeadersToAdd []*HeaderValueOption `protobuf:"bytes,2,rep,name=request_headers_to_add,json=requestHeadersToAdd,proto3" json:"request_headers_to_add,omitempty"`
+}
+
+func (x *HttpService) Reset() {
+	*x = HttpService{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_envoy_config_core_v3_http_service_proto_msgTypes[0]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *HttpService) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*HttpService) ProtoMessage() {}
+
+func (x *HttpService) ProtoReflect() protoreflect.Message {
+	mi := &file_envoy_config_core_v3_http_service_proto_msgTypes[0]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use HttpService.ProtoReflect.Descriptor instead.
+func (*HttpService) Descriptor() ([]byte, []int) {
+	return file_envoy_config_core_v3_http_service_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *HttpService) GetHttpUri() *HttpUri {
+	if x != nil {
+		return x.HttpUri
+	}
+	return nil
+}
+
+func (x *HttpService) GetRequestHeadersToAdd() []*HeaderValueOption {
+	if x != nil {
+		return x.RequestHeadersToAdd
+	}
+	return nil
+}
+
+var File_envoy_config_core_v3_http_service_proto protoreflect.FileDescriptor
+
+var file_envoy_config_core_v3_http_service_proto_rawDesc = []byte{
+	0x0a, 0x27, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63,
+	0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x2f, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x73, 0x65, 0x72, 0x76,
+	0x69, 0x63, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x14, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x1a,
+	0x1f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f,
+	0x72, 0x65, 0x2f, 0x76, 0x33, 0x2f, 0x62, 0x61, 0x73, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x1a, 0x23, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63,
+	0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x2f, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x75, 0x72, 0x69, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x1d, 0x75, 0x64, 0x70, 0x61, 0x2f, 0x61, 0x6e, 0x6e, 0x6f,
+	0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2f, 0x73, 0x74, 0x61, 0x74, 0x75, 0x73, 0x2e, 0x70,
+	0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x17, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2f, 0x76,
+	0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0xb0, 0x01,
+	0x0a, 0x0b, 0x48, 0x74, 0x74, 0x70, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x12, 0x38, 0x0a,
+	0x08, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x75, 0x72, 0x69, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x1d, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63,
+	0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x55, 0x72, 0x69, 0x52, 0x07,
+	0x68, 0x74, 0x74, 0x70, 0x55, 0x72, 0x69, 0x12, 0x67, 0x0a, 0x16, 0x72, 0x65, 0x71, 0x75, 0x65,
+	0x73, 0x74, 0x5f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x5f, 0x74, 0x6f, 0x5f, 0x61, 0x64,
+	0x64, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x27, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
+	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48,
+	0x65, 0x61, 0x64, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
+	0x42, 0x09, 0xfa, 0x42, 0x06, 0x92, 0x01, 0x03, 0x10, 0xe8, 0x07, 0x52, 0x13, 0x72, 0x65, 0x71,
+	0x75, 0x65, 0x73, 0x74, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x54, 0x6f, 0x41, 0x64, 0x64,
+	0x42, 0x84, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42,
+	0x10, 0x48, 0x74, 0x74, 0x70, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x50, 0x72, 0x6f, 0x74,
+	0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f,
+	0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33,
+	0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+}
+
+var (
+	file_envoy_config_core_v3_http_service_proto_rawDescOnce sync.Once
+	file_envoy_config_core_v3_http_service_proto_rawDescData = file_envoy_config_core_v3_http_service_proto_rawDesc
+)
+
+func file_envoy_config_core_v3_http_service_proto_rawDescGZIP() []byte {
+	file_envoy_config_core_v3_http_service_proto_rawDescOnce.Do(func() {
+		file_envoy_config_core_v3_http_service_proto_rawDescData = protoimpl.X.CompressGZIP(file_envoy_config_core_v3_http_service_proto_rawDescData)
+	})
+	return file_envoy_config_core_v3_http_service_proto_rawDescData
+}
+
+var file_envoy_config_core_v3_http_service_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
+var file_envoy_config_core_v3_http_service_proto_goTypes = []interface{}{
+	(*HttpService)(nil),       // 0: envoy.config.core.v3.HttpService
+	(*HttpUri)(nil),           // 1: envoy.config.core.v3.HttpUri
+	(*HeaderValueOption)(nil), // 2: envoy.config.core.v3.HeaderValueOption
+}
+var file_envoy_config_core_v3_http_service_proto_depIdxs = []int32{
+	1, // 0: envoy.config.core.v3.HttpService.http_uri:type_name -> envoy.config.core.v3.HttpUri
+	2, // 1: envoy.config.core.v3.HttpService.request_headers_to_add:type_name -> envoy.config.core.v3.HeaderValueOption
+	2, // [2:2] is the sub-list for method output_type
+	2, // [2:2] is the sub-list for method input_type
+	2, // [2:2] is the sub-list for extension type_name
+	2, // [2:2] is the sub-list for extension extendee
+	0, // [0:2] is the sub-list for field type_name
+}
+
+func init() { file_envoy_config_core_v3_http_service_proto_init() }
+func file_envoy_config_core_v3_http_service_proto_init() {
+	if File_envoy_config_core_v3_http_service_proto != nil {
+		return
+	}
+	file_envoy_config_core_v3_base_proto_init()
+	file_envoy_config_core_v3_http_uri_proto_init()
+	if !protoimpl.UnsafeEnabled {
+		file_envoy_config_core_v3_http_service_proto_msgTypes[0].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*HttpService); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+	}
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: file_envoy_config_core_v3_http_service_proto_rawDesc,
+			NumEnums:      0,
+			NumMessages:   1,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_envoy_config_core_v3_http_service_proto_goTypes,
+		DependencyIndexes: file_envoy_config_core_v3_http_service_proto_depIdxs,
+		MessageInfos:      file_envoy_config_core_v3_http_service_proto_msgTypes,
+	}.Build()
+	File_envoy_config_core_v3_http_service_proto = out.File
+	file_envoy_config_core_v3_http_service_proto_rawDesc = nil
+	file_envoy_config_core_v3_http_service_proto_goTypes = nil
+	file_envoy_config_core_v3_http_service_proto_depIdxs = nil
+}
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_service.pb.validate.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_service.pb.validate.go
new file mode 100644
index 00000000000..2d9590507dd
--- /dev/null
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_service.pb.validate.go
@@ -0,0 +1,209 @@
+// Code generated by protoc-gen-validate. DO NOT EDIT.
+// source: envoy/config/core/v3/http_service.proto
+
+package corev3
+
+import (
+	"bytes"
+	"errors"
+	"fmt"
+	"net"
+	"net/mail"
+	"net/url"
+	"regexp"
+	"sort"
+	"strings"
+	"time"
+	"unicode/utf8"
+
+	"google.golang.org/protobuf/types/known/anypb"
+)
+
+// ensure the imports are used
+var (
+	_ = bytes.MinRead
+	_ = errors.New("")
+	_ = fmt.Print
+	_ = utf8.UTFMax
+	_ = (*regexp.Regexp)(nil)
+	_ = (*strings.Reader)(nil)
+	_ = net.IPv4len
+	_ = time.Duration(0)
+	_ = (*url.URL)(nil)
+	_ = (*mail.Address)(nil)
+	_ = anypb.Any{}
+	_ = sort.Sort
+)
+
+// Validate checks the field values on HttpService with the rules defined in
+// the proto definition for this message. If any rules are violated, the first
+// error encountered is returned, or nil if there are no violations.
+func (m *HttpService) Validate() error {
+	return m.validate(false)
+}
+
+// ValidateAll checks the field values on HttpService with the rules defined in
+// the proto definition for this message. If any rules are violated, the
+// result is a list of violation errors wrapped in HttpServiceMultiError, or
+// nil if none found.
+func (m *HttpService) ValidateAll() error {
+	return m.validate(true)
+}
+
+func (m *HttpService) validate(all bool) error {
+	if m == nil {
+		return nil
+	}
+
+	var errors []error
+
+	if all {
+		switch v := interface{}(m.GetHttpUri()).(type) {
+		case interface{ ValidateAll() error }:
+			if err := v.ValidateAll(); err != nil {
+				errors = append(errors, HttpServiceValidationError{
+					field:  "HttpUri",
+					reason: "embedded message failed validation",
+					cause:  err,
+				})
+			}
+		case interface{ Validate() error }:
+			if err := v.Validate(); err != nil {
+				errors = append(errors, HttpServiceValidationError{
+					field:  "HttpUri",
+					reason: "embedded message failed validation",
+					cause:  err,
+				})
+			}
+		}
+	} else if v, ok := interface{}(m.GetHttpUri()).(interface{ Validate() error }); ok {
+		if err := v.Validate(); err != nil {
+			return HttpServiceValidationError{
+				field:  "HttpUri",
+				reason: "embedded message failed validation",
+				cause:  err,
+			}
+		}
+	}
+
+	if len(m.GetRequestHeadersToAdd()) > 1000 {
+		err := HttpServiceValidationError{
+			field:  "RequestHeadersToAdd",
+			reason: "value must contain no more than 1000 item(s)",
+		}
+		if !all {
+			return err
+		}
+		errors = append(errors, err)
+	}
+
+	for idx, item := range m.GetRequestHeadersToAdd() {
+		_, _ = idx, item
+
+		if all {
+			switch v := interface{}(item).(type) {
+			case interface{ ValidateAll() error }:
+				if err := v.ValidateAll(); err != nil {
+					errors = append(errors, HttpServiceValidationError{
+						field:  fmt.Sprintf("RequestHeadersToAdd[%v]", idx),
+						reason: "embedded message failed validation",
+						cause:  err,
+					})
+				}
+			case interface{ Validate() error }:
+				if err := v.Validate(); err != nil {
+					errors = append(errors, HttpServiceValidationError{
+						field:  fmt.Sprintf("RequestHeadersToAdd[%v]", idx),
+						reason: "embedded message failed validation",
+						cause:  err,
+					})
+				}
+			}
+		} else if v, ok := interface{}(item).(interface{ Validate() error }); ok {
+			if err := v.Validate(); err != nil {
+				return HttpServiceValidationError{
+					field:  fmt.Sprintf("RequestHeadersToAdd[%v]", idx),
+					reason: "embedded message failed validation",
+					cause:  err,
+				}
+			}
+		}
+
+	}
+
+	if len(errors) > 0 {
+		return HttpServiceMultiError(errors)
+	}
+
+	return nil
+}
+
+// HttpServiceMultiError is an error wrapping multiple validation errors
+// returned by HttpService.ValidateAll() if the designated constraints aren't met.
+type HttpServiceMultiError []error
+
+// Error returns a concatenation of all the error messages it wraps.
+func (m HttpServiceMultiError) Error() string {
+	var msgs []string
+	for _, err := range m {
+		msgs = append(msgs, err.Error())
+	}
+	return strings.Join(msgs, "; ")
+}
+
+// AllErrors returns a list of validation violation errors.
+func (m HttpServiceMultiError) AllErrors() []error { return m }
+
+// HttpServiceValidationError is the validation error returned by
+// HttpService.Validate if the designated constraints aren't met.
+type HttpServiceValidationError struct {
+	field  string
+	reason string
+	cause  error
+	key    bool
+}
+
+// Field function returns field value.
+func (e HttpServiceValidationError) Field() string { return e.field }
+
+// Reason function returns reason value.
+func (e HttpServiceValidationError) Reason() string { return e.reason }
+
+// Cause function returns cause value.
+func (e HttpServiceValidationError) Cause() error { return e.cause }
+
+// Key function returns key value.
+func (e HttpServiceValidationError) Key() bool { return e.key }
+
+// ErrorName returns error name.
+func (e HttpServiceValidationError) ErrorName() string { return "HttpServiceValidationError" }
+
+// Error satisfies the builtin error interface
+func (e HttpServiceValidationError) Error() string {
+	cause := ""
+	if e.cause != nil {
+		cause = fmt.Sprintf(" | caused by: %v", e.cause)
+	}
+
+	key := ""
+	if e.key {
+		key = "key for "
+	}
+
+	return fmt.Sprintf(
+		"invalid %sHttpService.%s: %s%s",
+		key,
+		e.field,
+		e.reason,
+		cause)
+}
+
+var _ error = HttpServiceValidationError{}
+
+var _ interface {
+	Field() string
+	Reason() string
+	Key() bool
+	Cause() error
+	ErrorName() string
+} = HttpServiceValidationError{}
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_uri.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_uri.pb.go
index 47dc67144bc..39bb22f7ebe 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_uri.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_uri.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/http_uri.proto
 
 package corev3
@@ -35,15 +35,15 @@ type HttpUri struct {
 	//
 	// .. code-block:: yaml
 	//
-	//    uri: https://www.googleapis.com/oauth2/v1/certs
-	//
+	//	uri: https://www.googleapis.com/oauth2/v1/certs
 	Uri string `protobuf:"bytes,1,opt,name=uri,proto3" json:"uri,omitempty"`
-	// Specify how ``uri`` is to be fetched. Today, this requires an explicit
+	// Specify how “uri“ is to be fetched. Today, this requires an explicit
 	// cluster, but in the future we may support dynamic cluster creation or
 	// inline DNS resolution. See `issue
 	// <https://github.com/envoyproxy/envoy/issues/1606>`_.
 	//
 	// Types that are assignable to HttpUpstreamType:
+	//
 	//	*HttpUri_Cluster
 	HttpUpstreamType isHttpUri_HttpUpstreamType `protobuf_oneof:"http_upstream_type"`
 	// Sets the maximum duration in milliseconds that a response can take to arrive upon request.
@@ -122,8 +122,7 @@ type HttpUri_Cluster struct {
 	//
 	// .. code-block:: yaml
 	//
-	//    cluster: jwks_cluster
-	//
+	//	cluster: jwks_cluster
 	Cluster string `protobuf:"bytes,2,opt,name=cluster,proto3,oneof"`
 }
 
@@ -143,28 +142,29 @@ var file_envoy_config_core_v3_http_uri_proto_rawDesc = []byte{
 	0x2f, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2f, 0x76, 0x65, 0x72,
 	0x73, 0x69, 0x6f, 0x6e, 0x69, 0x6e, 0x67, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x17, 0x76,
 	0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2f, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65,
-	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0xc7, 0x01, 0x0a, 0x07, 0x48, 0x74, 0x74, 0x70, 0x55,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0xcf, 0x01, 0x0a, 0x07, 0x48, 0x74, 0x74, 0x70, 0x55,
 	0x72, 0x69, 0x12, 0x19, 0x0a, 0x03, 0x75, 0x72, 0x69, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42,
 	0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01, 0x52, 0x03, 0x75, 0x72, 0x69, 0x12, 0x23, 0x0a,
 	0x07, 0x63, 0x6c, 0x75, 0x73, 0x74, 0x65, 0x72, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07,
 	0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01, 0x48, 0x00, 0x52, 0x07, 0x63, 0x6c, 0x75, 0x73, 0x74,
-	0x65, 0x72, 0x12, 0x3f, 0x0a, 0x07, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x18, 0x03, 0x20,
+	0x65, 0x72, 0x12, 0x47, 0x0a, 0x07, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x18, 0x03, 0x20,
 	0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
-	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x0a,
-	0xfa, 0x42, 0x07, 0xaa, 0x01, 0x04, 0x08, 0x01, 0x32, 0x00, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x65,
-	0x6f, 0x75, 0x74, 0x3a, 0x20, 0x9a, 0xc5, 0x88, 0x1e, 0x1b, 0x0a, 0x19, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48, 0x74,
-	0x74, 0x70, 0x55, 0x72, 0x69, 0x42, 0x19, 0x0a, 0x12, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x75, 0x70,
-	0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x12, 0x03, 0xf8, 0x42, 0x01,
-	0x42, 0x80, 0x01, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x12,
+	0xfa, 0x42, 0x0f, 0xaa, 0x01, 0x0c, 0x08, 0x01, 0x1a, 0x06, 0x08, 0x80, 0x80, 0x80, 0x80, 0x10,
+	0x32, 0x00, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x3a, 0x20, 0x9a, 0xc5, 0x88,
+	0x1e, 0x1b, 0x0a, 0x19, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32,
+	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x55, 0x72, 0x69, 0x42, 0x19, 0x0a,
+	0x12, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x75, 0x70, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f, 0x74,
+	0x79, 0x70, 0x65, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x80, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06,
+	0x02, 0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f,
 	0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e,
 	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x0c, 0x48, 0x74, 0x74, 0x70, 0x55, 0x72, 0x69,
 	0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e,
 	0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67,
 	0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f,
 	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72,
-	0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06,
-	0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_uri.pb.validate.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_uri.pb.validate.go
index 0e3ab815eef..2c0a69c4183 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_uri.pb.validate.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/http_uri.pb.validate.go
@@ -92,12 +92,13 @@ func (m *HttpUri) validate(all bool) error {
 			errors = append(errors, err)
 		} else {
 
+			lt := time.Duration(4294967296*time.Second + 0*time.Nanosecond)
 			gte := time.Duration(0*time.Second + 0*time.Nanosecond)
 
-			if dur < gte {
+			if dur < gte || dur >= lt {
 				err := HttpUriValidationError{
 					field:  "Timeout",
-					reason: "value must be greater than or equal to 0s",
+					reason: "value must be inside range [0s, 1193046h28m16s)",
 				}
 				if !all {
 					return err
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/protocol.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/protocol.pb.go
index 16a1411437c..6ab658340cd 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/protocol.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/protocol.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/protocol.proto
 
 package corev3
@@ -197,7 +197,7 @@ func (x *QuicKeepAliveSettings) GetInitialInterval() *duration.Duration {
 }
 
 // QUIC protocol options which apply to both downstream and upstream connections.
-// [#next-free-field: 6]
+// [#next-free-field: 8]
 type QuicProtocolOptions struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -217,21 +217,27 @@ type QuicProtocolOptions struct {
 	// QUIC stream send and receive buffers. Once the buffer reaches this pointer, watermark callbacks will fire to
 	// stop the flow of data to the stream buffers.
 	InitialStreamWindowSize *wrappers.UInt32Value `protobuf:"bytes,2,opt,name=initial_stream_window_size,json=initialStreamWindowSize,proto3" json:"initial_stream_window_size,omitempty"`
-	// Similar to ``initial_stream_window_size``, but for connection-level
+	// Similar to “initial_stream_window_size“, but for connection-level
 	// flow-control. Valid values rage from 1 to 25165824 (24MB, maximum supported by QUICHE) and defaults to 65536 (2^16).
-	// window. Currently, this has the same minimum/default as ``initial_stream_window_size``.
+	// window. Currently, this has the same minimum/default as “initial_stream_window_size“.
 	//
 	// NOTE: 16384 (2^14) is the minimum window size supported in Google QUIC. We only support increasing the default
 	// window size now, so it's also the minimum.
 	InitialConnectionWindowSize *wrappers.UInt32Value `protobuf:"bytes,3,opt,name=initial_connection_window_size,json=initialConnectionWindowSize,proto3" json:"initial_connection_window_size,omitempty"`
 	// The number of timeouts that can occur before port migration is triggered for QUIC clients.
-	// This defaults to 1. If set to 0, port migration will not occur on path degrading.
+	// This defaults to 4. If set to 0, port migration will not occur on path degrading.
 	// Timeout here refers to QUIC internal path degrading timeout mechanism, such as PTO.
 	// This has no effect on server sessions.
 	NumTimeoutsToTriggerPortMigration *wrappers.UInt32Value `protobuf:"bytes,4,opt,name=num_timeouts_to_trigger_port_migration,json=numTimeoutsToTriggerPortMigration,proto3" json:"num_timeouts_to_trigger_port_migration,omitempty"`
 	// Probes the peer at the configured interval to solicit traffic, i.e. ACK or PATH_RESPONSE, from the peer to push back connection idle timeout.
 	// If absent, use the default keepalive behavior of which a client connection sends PINGs every 15s, and a server connection doesn't do anything.
 	ConnectionKeepalive *QuicKeepAliveSettings `protobuf:"bytes,5,opt,name=connection_keepalive,json=connectionKeepalive,proto3" json:"connection_keepalive,omitempty"`
+	// A comma-separated list of strings representing QUIC connection options defined in
+	// `QUICHE <https://github.com/google/quiche/blob/main/quiche/quic/core/crypto/crypto_protocol.h>`_ and to be sent by upstream connections.
+	ConnectionOptions string `protobuf:"bytes,6,opt,name=connection_options,json=connectionOptions,proto3" json:"connection_options,omitempty"`
+	// A comma-separated list of strings representing QUIC client connection options defined in
+	// `QUICHE <https://github.com/google/quiche/blob/main/quiche/quic/core/crypto/crypto_protocol.h>`_ and to be sent by upstream connections.
+	ClientConnectionOptions string `protobuf:"bytes,7,opt,name=client_connection_options,json=clientConnectionOptions,proto3" json:"client_connection_options,omitempty"`
 }
 
 func (x *QuicProtocolOptions) Reset() {
@@ -301,6 +307,20 @@ func (x *QuicProtocolOptions) GetConnectionKeepalive() *QuicKeepAliveSettings {
 	return nil
 }
 
+func (x *QuicProtocolOptions) GetConnectionOptions() string {
+	if x != nil {
+		return x.ConnectionOptions
+	}
+	return ""
+}
+
+func (x *QuicProtocolOptions) GetClientConnectionOptions() string {
+	if x != nil {
+		return x.ClientConnectionOptions
+	}
+	return ""
+}
+
 type UpstreamHttpProtocolOptions struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -315,7 +335,7 @@ type UpstreamHttpProtocolOptions struct {
 	// Automatic validate upstream presented certificate for new upstream connections based on the
 	// downstream HTTP host/authority header or any other arbitrary header when :ref:`override_auto_sni_header <envoy_v3_api_field_config.core.v3.UpstreamHttpProtocolOptions.override_auto_sni_header>`
 	// is set, as seen by the :ref:`router filter <config_http_filters_router>`.
-	// This field is intended to be set with ``auto_sni`` field.
+	// This field is intended to be set with “auto_sni“ field.
 	// Does nothing if a filter before the http router filter sets the corresponding metadata.
 	AutoSanValidation bool `protobuf:"varint,2,opt,name=auto_san_validation,json=autoSanValidation,proto3" json:"auto_san_validation,omitempty"`
 	// An optional alternative to the host/authority header to be used for setting the SNI value.
@@ -323,7 +343,7 @@ type UpstreamHttpProtocolOptions struct {
 	// :ref:`router filter <config_http_filters_router>`.
 	// If unset, host/authority header will be used for populating the SNI. If the specified header
 	// is not found or the value is empty, host/authority header will be used instead.
-	// This field is intended to be set with ``auto_sni`` and/or ``auto_san_validation`` fields.
+	// This field is intended to be set with “auto_sni“ and/or “auto_san_validation“ fields.
 	// If none of these fields are set then setting this would be a no-op.
 	// Does nothing if a filter before the http router filter sets the corresponding metadata.
 	OverrideAutoSniHeader string `protobuf:"bytes,3,opt,name=override_auto_sni_header,json=overrideAutoSniHeader,proto3" json:"override_auto_sni_header,omitempty"`
@@ -402,9 +422,9 @@ type AlternateProtocolsCacheOptions struct {
 	//
 	// .. note:
 	//
-	//   The implementation is approximate and enforced independently on each worker thread, thus
-	//   it is possible for the maximum entries in the cache to go slightly above the configured
-	//   value depending on timing. This is similar to how other circuit breakers work.
+	//	The implementation is approximate and enforced independently on each worker thread, thus
+	//	it is possible for the maximum entries in the cache to go slightly above the configured
+	//	value depending on timing. This is similar to how other circuit breakers work.
 	MaxEntries *wrappers.UInt32Value `protobuf:"bytes,2,opt,name=max_entries,json=maxEntries,proto3" json:"max_entries,omitempty"`
 	// Allows configuring a persistent
 	// :ref:`key value store <envoy_v3_api_msg_config.common.key_value.v3.KeyValueStoreConfig>` to flush
@@ -415,10 +435,10 @@ type AlternateProtocolsCacheOptions struct {
 	// Allows pre-populating the cache with entries, as described above.
 	PrepopulatedEntries []*AlternateProtocolsCacheOptions_AlternateProtocolsCacheEntry `protobuf:"bytes,4,rep,name=prepopulated_entries,json=prepopulatedEntries,proto3" json:"prepopulated_entries,omitempty"`
 	// Optional list of hostnames suffixes for which Alt-Svc entries can be shared. For example, if
-	// this list contained the value ``.c.example.com``, then an Alt-Svc entry for ``foo.c.example.com``
-	// could be shared with ``bar.c.example.com`` but would not be shared with ``baz.example.com``. On
-	// the other hand, if the list contained the value ``.example.com`` then all three hosts could share
-	// Alt-Svc entries. Each entry must start with ``.``. If a hostname matches multiple suffixes, the
+	// this list contained the value “.c.example.com“, then an Alt-Svc entry for “foo.c.example.com“
+	// could be shared with “bar.c.example.com“ but would not be shared with “baz.example.com“. On
+	// the other hand, if the list contained the value “.example.com“ then all three hosts could share
+	// Alt-Svc entries. Each entry must start with “.“. If a hostname matches multiple suffixes, the
 	// first listed suffix will be used.
 	//
 	// Since lookup in this list is O(n), it is recommended that the number of suffixes be limited.
@@ -509,8 +529,9 @@ type HttpProtocolOptions struct {
 	// If not specified, this defaults to 1 hour. To disable idle timeouts explicitly set this to 0.
 	//
 	// .. warning::
-	//   Disabling this timeout has a highly likelihood of yielding connection leaks due to lost TCP
-	//   FIN packets, etc.
+	//
+	//	Disabling this timeout has a highly likelihood of yielding connection leaks due to lost TCP
+	//	FIN packets, etc.
 	//
 	// If the :ref:`overload action <config_overload_manager_overload_actions>` "envoy.overload_actions.reduce_timeouts"
 	// is configured, this timeout is scaled for downstream connections according to the value for
@@ -626,16 +647,16 @@ type Http1ProtocolOptions struct {
 	// Handle HTTP requests with absolute URLs in the requests. These requests
 	// are generally sent by clients to forward/explicit proxies. This allows clients to configure
 	// envoy as their HTTP proxy. In Unix, for example, this is typically done by setting the
-	// ``http_proxy`` environment variable.
+	// “http_proxy“ environment variable.
 	AllowAbsoluteUrl *wrappers.BoolValue `protobuf:"bytes,1,opt,name=allow_absolute_url,json=allowAbsoluteUrl,proto3" json:"allow_absolute_url,omitempty"`
 	// Handle incoming HTTP/1.0 and HTTP 0.9 requests.
 	// This is off by default, and not fully standards compliant. There is support for pre-HTTP/1.1
 	// style connect logic, dechunking, and handling lack of client host iff
-	// ``default_host_for_http_10`` is configured.
+	// “default_host_for_http_10“ is configured.
 	AcceptHttp_10 bool `protobuf:"varint,2,opt,name=accept_http_10,json=acceptHttp10,proto3" json:"accept_http_10,omitempty"`
-	// A default host for HTTP/1.0 requests. This is highly suggested if ``accept_http_10`` is true as
+	// A default host for HTTP/1.0 requests. This is highly suggested if “accept_http_10“ is true as
 	// Envoy does not otherwise support HTTP/1.0 without a Host header.
-	// This is a no-op if ``accept_http_10`` is not true.
+	// This is a no-op if “accept_http_10“ is not true.
 	DefaultHostForHttp_10 string `protobuf:"bytes,3,opt,name=default_host_for_http_10,json=defaultHostForHttp10,proto3" json:"default_host_for_http_10,omitempty"`
 	// Describes how the keys for response headers should be formatted. By default, all header keys
 	// are lower cased.
@@ -644,20 +665,22 @@ type Http1ProtocolOptions struct {
 	//
 	// .. attention::
 	//
-	//   Note that this only happens when Envoy is chunk encoding which occurs when:
-	//   - The request is HTTP/1.1.
-	//   - Is neither a HEAD only request nor a HTTP Upgrade.
-	//   - Not a response to a HEAD request.
-	//   - The content length header is not present.
+	//	Note that this only happens when Envoy is chunk encoding which occurs when:
+	//	- The request is HTTP/1.1.
+	//	- Is neither a HEAD only request nor a HTTP Upgrade.
+	//	- Not a response to a HEAD request.
+	//	- The content length header is not present.
 	EnableTrailers bool `protobuf:"varint,5,opt,name=enable_trailers,json=enableTrailers,proto3" json:"enable_trailers,omitempty"`
-	// Allows Envoy to process requests/responses with both ``Content-Length`` and ``Transfer-Encoding``
+	// Allows Envoy to process requests/responses with both “Content-Length“ and “Transfer-Encoding“
 	// headers set. By default such messages are rejected, but if option is enabled - Envoy will
 	// remove Content-Length header and process message.
 	// See `RFC7230, sec. 3.3.3 <https://tools.ietf.org/html/rfc7230#section-3.3.3>`_ for details.
 	//
 	// .. attention::
-	//   Enabling this option might lead to request smuggling vulnerability, especially if traffic
-	//   is proxied via multiple layers of proxies.
+	//
+	//	Enabling this option might lead to request smuggling vulnerability, especially if traffic
+	//	is proxied via multiple layers of proxies.
+	//
 	// [#comment:TODO: This field is ignored when the
 	// :ref:`header validation configuration <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.typed_header_validation_config>`
 	// is present.]
@@ -919,8 +942,8 @@ type Http2ProtocolOptions struct {
 	// HTTP/2 codec buffers. Once the buffer reaches this pointer, watermark callbacks will fire to
 	// stop the flow of data to the codec buffers.
 	InitialStreamWindowSize *wrappers.UInt32Value `protobuf:"bytes,3,opt,name=initial_stream_window_size,json=initialStreamWindowSize,proto3" json:"initial_stream_window_size,omitempty"`
-	// Similar to ``initial_stream_window_size``, but for connection-level flow-control
-	// window. Currently, this has the same minimum/maximum/default as ``initial_stream_window_size``.
+	// Similar to “initial_stream_window_size“, but for connection-level flow-control
+	// window. Currently, this has the same minimum/maximum/default as “initial_stream_window_size“.
 	InitialConnectionWindowSize *wrappers.UInt32Value `protobuf:"bytes,4,opt,name=initial_connection_window_size,json=initialConnectionWindowSize,proto3" json:"initial_connection_window_size,omitempty"`
 	// Allows proxying Websocket and other upgrades over H2 connect.
 	AllowConnect bool `protobuf:"varint,5,opt,name=allow_connect,json=allowConnect,proto3" json:"allow_connect,omitempty"`
@@ -933,18 +956,18 @@ type Http2ProtocolOptions struct {
 	AllowMetadata bool `protobuf:"varint,6,opt,name=allow_metadata,json=allowMetadata,proto3" json:"allow_metadata,omitempty"`
 	// Limit the number of pending outbound downstream frames of all types (frames that are waiting to
 	// be written into the socket). Exceeding this limit triggers flood mitigation and connection is
-	// terminated. The ``http2.outbound_flood`` stat tracks the number of terminated connections due
+	// terminated. The “http2.outbound_flood“ stat tracks the number of terminated connections due
 	// to flood mitigation. The default limit is 10000.
 	MaxOutboundFrames *wrappers.UInt32Value `protobuf:"bytes,7,opt,name=max_outbound_frames,json=maxOutboundFrames,proto3" json:"max_outbound_frames,omitempty"`
 	// Limit the number of pending outbound downstream frames of types PING, SETTINGS and RST_STREAM,
 	// preventing high memory utilization when receiving continuous stream of these frames. Exceeding
 	// this limit triggers flood mitigation and connection is terminated. The
-	// ``http2.outbound_control_flood`` stat tracks the number of terminated connections due to flood
+	// “http2.outbound_control_flood“ stat tracks the number of terminated connections due to flood
 	// mitigation. The default limit is 1000.
 	MaxOutboundControlFrames *wrappers.UInt32Value `protobuf:"bytes,8,opt,name=max_outbound_control_frames,json=maxOutboundControlFrames,proto3" json:"max_outbound_control_frames,omitempty"`
 	// Limit the number of consecutive inbound frames of types HEADERS, CONTINUATION and DATA with an
 	// empty payload and no end stream flag. Those frames have no legitimate use and are abusive, but
-	// might be a result of a broken HTTP/2 implementation. The `http2.inbound_empty_frames_flood``
+	// might be a result of a broken HTTP/2 implementation. The `http2.inbound_empty_frames_flood“
 	// stat tracks the number of connections terminated due to flood mitigation.
 	// Setting this to 0 will terminate connection upon receiving first frame with an empty payload
 	// and no end stream flag. The default limit is 1.
@@ -953,25 +976,25 @@ type Http2ProtocolOptions struct {
 	// of PRIORITY frames received over the lifetime of connection exceeds the value calculated
 	// using this formula::
 	//
-	//   ``max_inbound_priority_frames_per_stream`` * (1 + ``opened_streams``)
+	//	``max_inbound_priority_frames_per_stream`` * (1 + ``opened_streams``)
 	//
-	// the connection is terminated. For downstream connections the ``opened_streams`` is incremented when
+	// the connection is terminated. For downstream connections the “opened_streams“ is incremented when
 	// Envoy receives complete response headers from the upstream server. For upstream connection the
-	// ``opened_streams`` is incremented when Envoy send the HEADERS frame for a new stream. The
-	// ``http2.inbound_priority_frames_flood`` stat tracks
+	// “opened_streams“ is incremented when Envoy send the HEADERS frame for a new stream. The
+	// “http2.inbound_priority_frames_flood“ stat tracks
 	// the number of connections terminated due to flood mitigation. The default limit is 100.
 	MaxInboundPriorityFramesPerStream *wrappers.UInt32Value `protobuf:"bytes,10,opt,name=max_inbound_priority_frames_per_stream,json=maxInboundPriorityFramesPerStream,proto3" json:"max_inbound_priority_frames_per_stream,omitempty"`
 	// Limit the number of inbound WINDOW_UPDATE frames allowed per DATA frame sent. If the number
 	// of WINDOW_UPDATE frames received over the lifetime of connection exceeds the value calculated
 	// using this formula::
 	//
-	//   5 + 2 * (``opened_streams`` +
-	//            ``max_inbound_window_update_frames_per_data_frame_sent`` * ``outbound_data_frames``)
+	//	5 + 2 * (``opened_streams`` +
+	//	         ``max_inbound_window_update_frames_per_data_frame_sent`` * ``outbound_data_frames``)
 	//
-	// the connection is terminated. For downstream connections the ``opened_streams`` is incremented when
+	// the connection is terminated. For downstream connections the “opened_streams“ is incremented when
 	// Envoy receives complete response headers from the upstream server. For upstream connections the
-	// ``opened_streams`` is incremented when Envoy sends the HEADERS frame for a new stream. The
-	// ``http2.inbound_priority_frames_flood`` stat tracks the number of connections terminated due to
+	// “opened_streams“ is incremented when Envoy sends the HEADERS frame for a new stream. The
+	// “http2.inbound_priority_frames_flood“ stat tracks the number of connections terminated due to
 	// flood mitigation. The default max_inbound_window_update_frames_per_data_frame_sent value is 10.
 	// Setting this to 1 should be enough to support HTTP/2 implementations with basic flow control,
 	// but more complex implementations that try to estimate available bandwidth require at least 2.
@@ -989,7 +1012,7 @@ type Http2ProtocolOptions struct {
 	//
 	// See `RFC7540, sec. 8.1 <https://tools.ietf.org/html/rfc7540#section-8.1>`_ for details.
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/config/core/v3/protocol.proto.
 	StreamErrorOnInvalidHttpMessaging bool `protobuf:"varint,12,opt,name=stream_error_on_invalid_http_messaging,json=streamErrorOnInvalidHttpMessaging,proto3" json:"stream_error_on_invalid_http_messaging,omitempty"`
 	// Allows invalid HTTP messaging and headers. When this option is disabled (default), then
 	// the whole HTTP/2 connection is terminated upon receiving invalid HEADERS frame. However,
@@ -1014,11 +1037,11 @@ type Http2ProtocolOptions struct {
 	//
 	// .. code-block:: text
 	//
-	//   ID    Field Name
-	//   ----------------
-	//   0x1   hpack_table_size
-	//   0x3   max_concurrent_streams
-	//   0x4   initial_stream_window_size
+	//	ID    Field Name
+	//	----------------
+	//	0x1   hpack_table_size
+	//	0x3   max_concurrent_streams
+	//	0x4   initial_stream_window_size
 	//
 	// Collisions will trigger config validation failure on load/update. Likewise, inconsistencies
 	// between custom parameters with the same identifier will trigger a failure.
@@ -1145,7 +1168,7 @@ func (x *Http2ProtocolOptions) GetMaxInboundWindowUpdateFramesPerDataFrameSent()
 	return nil
 }
 
-// Deprecated: Do not use.
+// Deprecated: Marked as deprecated in envoy/config/core/v3/protocol.proto.
 func (x *Http2ProtocolOptions) GetStreamErrorOnInvalidHttpMessaging() bool {
 	if x != nil {
 		return x.StreamErrorOnInvalidHttpMessaging
@@ -1313,6 +1336,7 @@ type SchemeHeaderTransformation struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Transformation:
+	//
 	//	*SchemeHeaderTransformation_SchemeToOverwrite
 	Transformation isSchemeHeaderTransformation_Transformation `protobuf_oneof:"transformation"`
 }
@@ -1447,6 +1471,7 @@ type Http1ProtocolOptions_HeaderKeyFormat struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to HeaderFormat:
+	//
 	//	*Http1ProtocolOptions_HeaderKeyFormat_ProperCaseWords_
 	//	*Http1ProtocolOptions_HeaderKeyFormat_StatefulFormatter
 	HeaderFormat isHttp1ProtocolOptions_HeaderKeyFormat_HeaderFormat `protobuf_oneof:"header_format"`
@@ -1668,7 +1693,7 @@ var file_envoy_config_core_v3_protocol_proto_rawDesc = []byte{
 	0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
 	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x0c, 0xfa,
 	0x42, 0x09, 0xaa, 0x01, 0x06, 0x22, 0x00, 0x32, 0x02, 0x08, 0x01, 0x52, 0x0f, 0x69, 0x6e, 0x69,
-	0x74, 0x69, 0x61, 0x6c, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x22, 0xa8, 0x04, 0x0a,
+	0x74, 0x69, 0x61, 0x6c, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x22, 0x93, 0x05, 0x0a,
 	0x13, 0x51, 0x75, 0x69, 0x63, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74,
 	0x69, 0x6f, 0x6e, 0x73, 0x12, 0x5b, 0x0a, 0x16, 0x6d, 0x61, 0x78, 0x5f, 0x63, 0x6f, 0x6e, 0x63,
 	0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x73, 0x18, 0x01,
@@ -1703,345 +1728,352 @@ var file_envoy_config_core_v3_protocol_proto_rawDesc = []byte{
 	0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x51, 0x75, 0x69,
 	0x63, 0x4b, 0x65, 0x65, 0x70, 0x41, 0x6c, 0x69, 0x76, 0x65, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e,
 	0x67, 0x73, 0x52, 0x13, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x4b, 0x65,
-	0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x22, 0xe4, 0x01, 0x0a, 0x1b, 0x55, 0x70, 0x73, 0x74,
-	0x72, 0x65, 0x61, 0x6d, 0x48, 0x74, 0x74, 0x70, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c,
-	0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x19, 0x0a, 0x08, 0x61, 0x75, 0x74, 0x6f, 0x5f,
-	0x73, 0x6e, 0x69, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x52, 0x07, 0x61, 0x75, 0x74, 0x6f, 0x53,
-	0x6e, 0x69, 0x12, 0x2e, 0x0a, 0x13, 0x61, 0x75, 0x74, 0x6f, 0x5f, 0x73, 0x61, 0x6e, 0x5f, 0x76,
-	0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x52,
-	0x11, 0x61, 0x75, 0x74, 0x6f, 0x53, 0x61, 0x6e, 0x56, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69,
-	0x6f, 0x6e, 0x12, 0x44, 0x0a, 0x18, 0x6f, 0x76, 0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x5f, 0x61,
-	0x75, 0x74, 0x6f, 0x5f, 0x73, 0x6e, 0x69, 0x5f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x18, 0x03,
-	0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc0, 0x01, 0x01, 0xd0, 0x01,
-	0x01, 0x52, 0x15, 0x6f, 0x76, 0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x41, 0x75, 0x74, 0x6f, 0x53,
-	0x6e, 0x69, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x3a, 0x34, 0x9a, 0xc5, 0x88, 0x1e, 0x2f, 0x0a,
-	0x2d, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f,
-	0x72, 0x65, 0x2e, 0x55, 0x70, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x48, 0x74, 0x74, 0x70, 0x50,
-	0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x86,
-	0x04, 0x0a, 0x1e, 0x41, 0x6c, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x74, 0x65, 0x50, 0x72, 0x6f, 0x74,
-	0x6f, 0x63, 0x6f, 0x6c, 0x73, 0x43, 0x61, 0x63, 0x68, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
-	0x73, 0x12, 0x1b, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42,
-	0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x46,
-	0x0a, 0x0b, 0x6d, 0x61, 0x78, 0x5f, 0x65, 0x6e, 0x74, 0x72, 0x69, 0x65, 0x73, 0x18, 0x02, 0x20,
-	0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
-	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75,
-	0x65, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x2a, 0x02, 0x20, 0x00, 0x52, 0x0a, 0x6d, 0x61, 0x78, 0x45,
-	0x6e, 0x74, 0x72, 0x69, 0x65, 0x73, 0x12, 0x5f, 0x0a, 0x16, 0x6b, 0x65, 0x79, 0x5f, 0x76, 0x61,
-	0x6c, 0x75, 0x65, 0x5f, 0x73, 0x74, 0x6f, 0x72, 0x65, 0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67,
-	0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63,
-	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x54, 0x79,
-	0x70, 0x65, 0x64, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x43, 0x6f, 0x6e, 0x66,
-	0x69, 0x67, 0x52, 0x13, 0x6b, 0x65, 0x79, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x53, 0x74, 0x6f, 0x72,
-	0x65, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x84, 0x01, 0x0a, 0x14, 0x70, 0x72, 0x65, 0x70,
-	0x6f, 0x70, 0x75, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x65, 0x6e, 0x74, 0x72, 0x69, 0x65, 0x73,
-	0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x51, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63,
-	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x41, 0x6c,
+	0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x12, 0x2d, 0x0a, 0x12, 0x63, 0x6f, 0x6e, 0x6e, 0x65,
+	0x63, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x06, 0x20,
+	0x01, 0x28, 0x09, 0x52, 0x11, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x4f,
+	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x3a, 0x0a, 0x19, 0x63, 0x6c, 0x69, 0x65, 0x6e, 0x74,
+	0x5f, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6f, 0x70, 0x74, 0x69,
+	0x6f, 0x6e, 0x73, 0x18, 0x07, 0x20, 0x01, 0x28, 0x09, 0x52, 0x17, 0x63, 0x6c, 0x69, 0x65, 0x6e,
+	0x74, 0x43, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x4f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x73, 0x22, 0xe4, 0x01, 0x0a, 0x1b, 0x55, 0x70, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x48,
+	0x74, 0x74, 0x70, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x73, 0x12, 0x19, 0x0a, 0x08, 0x61, 0x75, 0x74, 0x6f, 0x5f, 0x73, 0x6e, 0x69, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x08, 0x52, 0x07, 0x61, 0x75, 0x74, 0x6f, 0x53, 0x6e, 0x69, 0x12, 0x2e, 0x0a,
+	0x13, 0x61, 0x75, 0x74, 0x6f, 0x5f, 0x73, 0x61, 0x6e, 0x5f, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61,
+	0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x52, 0x11, 0x61, 0x75, 0x74, 0x6f,
+	0x53, 0x61, 0x6e, 0x56, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x44, 0x0a,
+	0x18, 0x6f, 0x76, 0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x5f, 0x61, 0x75, 0x74, 0x6f, 0x5f, 0x73,
+	0x6e, 0x69, 0x5f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x42,
+	0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xd0, 0x01, 0x01, 0xc0, 0x01, 0x01, 0x52, 0x15, 0x6f, 0x76,
+	0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x41, 0x75, 0x74, 0x6f, 0x53, 0x6e, 0x69, 0x48, 0x65, 0x61,
+	0x64, 0x65, 0x72, 0x3a, 0x34, 0x9a, 0xc5, 0x88, 0x1e, 0x2f, 0x0a, 0x2d, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x55, 0x70,
+	0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x48, 0x74, 0x74, 0x70, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63,
+	0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x86, 0x04, 0x0a, 0x1e, 0x41, 0x6c,
 	0x74, 0x65, 0x72, 0x6e, 0x61, 0x74, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x73,
-	0x43, 0x61, 0x63, 0x68, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x41, 0x6c, 0x74,
-	0x65, 0x72, 0x6e, 0x61, 0x74, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x73, 0x43,
-	0x61, 0x63, 0x68, 0x65, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x13, 0x70, 0x72, 0x65, 0x70, 0x6f,
-	0x70, 0x75, 0x6c, 0x61, 0x74, 0x65, 0x64, 0x45, 0x6e, 0x74, 0x72, 0x69, 0x65, 0x73, 0x12, 0x2d,
-	0x0a, 0x12, 0x63, 0x61, 0x6e, 0x6f, 0x6e, 0x69, 0x63, 0x61, 0x6c, 0x5f, 0x73, 0x75, 0x66, 0x66,
-	0x69, 0x78, 0x65, 0x73, 0x18, 0x05, 0x20, 0x03, 0x28, 0x09, 0x52, 0x11, 0x63, 0x61, 0x6e, 0x6f,
-	0x6e, 0x69, 0x63, 0x61, 0x6c, 0x53, 0x75, 0x66, 0x66, 0x69, 0x78, 0x65, 0x73, 0x1a, 0x68, 0x0a,
-	0x1c, 0x41, 0x6c, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x74, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63,
-	0x6f, 0x6c, 0x73, 0x43, 0x61, 0x63, 0x68, 0x65, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x27, 0x0a,
-	0x08, 0x68, 0x6f, 0x73, 0x74, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42,
-	0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc0, 0x01, 0x01, 0xd0, 0x01, 0x01, 0x52, 0x08, 0x68, 0x6f,
-	0x73, 0x74, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x1f, 0x0a, 0x04, 0x70, 0x6f, 0x72, 0x74, 0x18, 0x02,
-	0x20, 0x01, 0x28, 0x0d, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x2a, 0x06, 0x10, 0xff, 0xff, 0x03, 0x20,
-	0x00, 0x52, 0x04, 0x70, 0x6f, 0x72, 0x74, 0x22, 0xaf, 0x05, 0x0a, 0x13, 0x48, 0x74, 0x74, 0x70,
-	0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12,
-	0x3c, 0x0a, 0x0c, 0x69, 0x64, 0x6c, 0x65, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x18,
-	0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
-	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e,
-	0x52, 0x0b, 0x69, 0x64, 0x6c, 0x65, 0x54, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x12, 0x51, 0x0a,
-	0x17, 0x6d, 0x61, 0x78, 0x5f, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x5f,
-	0x64, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19,
+	0x43, 0x61, 0x63, 0x68, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x1b, 0x0a, 0x04,
+	0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72,
+	0x02, 0x10, 0x01, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x46, 0x0a, 0x0b, 0x6d, 0x61, 0x78,
+	0x5f, 0x65, 0x6e, 0x74, 0x72, 0x69, 0x65, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c,
 	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
-	0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x15, 0x6d, 0x61, 0x78, 0x43, 0x6f,
-	0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e,
-	0x12, 0x51, 0x0a, 0x11, 0x6d, 0x61, 0x78, 0x5f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x5f,
-	0x63, 0x6f, 0x75, 0x6e, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f,
-	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49,
-	0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x2a, 0x02,
-	0x28, 0x01, 0x52, 0x0f, 0x6d, 0x61, 0x78, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x43, 0x6f,
-	0x75, 0x6e, 0x74, 0x12, 0x49, 0x0a, 0x13, 0x6d, 0x61, 0x78, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61,
-	0x6d, 0x5f, 0x64, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b,
+	0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x07, 0xfa, 0x42,
+	0x04, 0x2a, 0x02, 0x20, 0x00, 0x52, 0x0a, 0x6d, 0x61, 0x78, 0x45, 0x6e, 0x74, 0x72, 0x69, 0x65,
+	0x73, 0x12, 0x5f, 0x0a, 0x16, 0x6b, 0x65, 0x79, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x5f, 0x73,
+	0x74, 0x6f, 0x72, 0x65, 0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x18, 0x03, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x2a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67,
+	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x54, 0x79, 0x70, 0x65, 0x64, 0x45, 0x78,
+	0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x52, 0x13, 0x6b,
+	0x65, 0x79, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x53, 0x74, 0x6f, 0x72, 0x65, 0x43, 0x6f, 0x6e, 0x66,
+	0x69, 0x67, 0x12, 0x84, 0x01, 0x0a, 0x14, 0x70, 0x72, 0x65, 0x70, 0x6f, 0x70, 0x75, 0x6c, 0x61,
+	0x74, 0x65, 0x64, 0x5f, 0x65, 0x6e, 0x74, 0x72, 0x69, 0x65, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28,
+	0x0b, 0x32, 0x51, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67,
+	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x41, 0x6c, 0x74, 0x65, 0x72, 0x6e, 0x61,
+	0x74, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x73, 0x43, 0x61, 0x63, 0x68, 0x65,
+	0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x41, 0x6c, 0x74, 0x65, 0x72, 0x6e, 0x61, 0x74,
+	0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x73, 0x43, 0x61, 0x63, 0x68, 0x65, 0x45,
+	0x6e, 0x74, 0x72, 0x79, 0x52, 0x13, 0x70, 0x72, 0x65, 0x70, 0x6f, 0x70, 0x75, 0x6c, 0x61, 0x74,
+	0x65, 0x64, 0x45, 0x6e, 0x74, 0x72, 0x69, 0x65, 0x73, 0x12, 0x2d, 0x0a, 0x12, 0x63, 0x61, 0x6e,
+	0x6f, 0x6e, 0x69, 0x63, 0x61, 0x6c, 0x5f, 0x73, 0x75, 0x66, 0x66, 0x69, 0x78, 0x65, 0x73, 0x18,
+	0x05, 0x20, 0x03, 0x28, 0x09, 0x52, 0x11, 0x63, 0x61, 0x6e, 0x6f, 0x6e, 0x69, 0x63, 0x61, 0x6c,
+	0x53, 0x75, 0x66, 0x66, 0x69, 0x78, 0x65, 0x73, 0x1a, 0x68, 0x0a, 0x1c, 0x41, 0x6c, 0x74, 0x65,
+	0x72, 0x6e, 0x61, 0x74, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x73, 0x43, 0x61,
+	0x63, 0x68, 0x65, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x27, 0x0a, 0x08, 0x68, 0x6f, 0x73, 0x74,
+	0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72,
+	0x06, 0xd0, 0x01, 0x01, 0xc0, 0x01, 0x01, 0x52, 0x08, 0x68, 0x6f, 0x73, 0x74, 0x6e, 0x61, 0x6d,
+	0x65, 0x12, 0x1f, 0x0a, 0x04, 0x70, 0x6f, 0x72, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0d, 0x42,
+	0x0b, 0xfa, 0x42, 0x08, 0x2a, 0x06, 0x10, 0xff, 0xff, 0x03, 0x20, 0x00, 0x52, 0x04, 0x70, 0x6f,
+	0x72, 0x74, 0x22, 0xaf, 0x05, 0x0a, 0x13, 0x48, 0x74, 0x74, 0x70, 0x50, 0x72, 0x6f, 0x74, 0x6f,
+	0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x3c, 0x0a, 0x0c, 0x69, 0x64,
+	0x6c, 0x65, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b,
 	0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
-	0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x11, 0x6d, 0x61, 0x78,
-	0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x8d,
-	0x01, 0x0a, 0x1f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x5f, 0x77, 0x69, 0x74, 0x68, 0x5f,
-	0x75, 0x6e, 0x64, 0x65, 0x72, 0x73, 0x63, 0x6f, 0x72, 0x65, 0x73, 0x5f, 0x61, 0x63, 0x74, 0x69,
-	0x6f, 0x6e, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x46, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
-	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e,
-	0x48, 0x74, 0x74, 0x70, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69,
-	0x6f, 0x6e, 0x73, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x57, 0x69, 0x74, 0x68, 0x55,
-	0x6e, 0x64, 0x65, 0x72, 0x73, 0x63, 0x6f, 0x72, 0x65, 0x73, 0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e,
-	0x52, 0x1c, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x57, 0x69, 0x74, 0x68, 0x55, 0x6e, 0x64,
-	0x65, 0x72, 0x73, 0x63, 0x6f, 0x72, 0x65, 0x73, 0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x5b,
-	0x0a, 0x1b, 0x6d, 0x61, 0x78, 0x5f, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x73, 0x5f, 0x70,
-	0x65, 0x72, 0x5f, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x06, 0x20,
-	0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
-	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75,
-	0x65, 0x52, 0x18, 0x6d, 0x61, 0x78, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x73, 0x50, 0x65,
-	0x72, 0x43, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x4e, 0x0a, 0x1c, 0x48,
+	0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0b, 0x69, 0x64, 0x6c,
+	0x65, 0x54, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x12, 0x51, 0x0a, 0x17, 0x6d, 0x61, 0x78, 0x5f,
+	0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x64, 0x75, 0x72, 0x61, 0x74,
+	0x69, 0x6f, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67,
+	0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61,
+	0x74, 0x69, 0x6f, 0x6e, 0x52, 0x15, 0x6d, 0x61, 0x78, 0x43, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74,
+	0x69, 0x6f, 0x6e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x51, 0x0a, 0x11, 0x6d,
+	0x61, 0x78, 0x5f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x5f, 0x63, 0x6f, 0x75, 0x6e, 0x74,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56,
+	0x61, 0x6c, 0x75, 0x65, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x2a, 0x02, 0x28, 0x01, 0x52, 0x0f, 0x6d,
+	0x61, 0x78, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x43, 0x6f, 0x75, 0x6e, 0x74, 0x12, 0x49,
+	0x0a, 0x13, 0x6d, 0x61, 0x78, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f, 0x64, 0x75, 0x72,
+	0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f,
+	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75,
+	0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x11, 0x6d, 0x61, 0x78, 0x53, 0x74, 0x72, 0x65, 0x61,
+	0x6d, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x8d, 0x01, 0x0a, 0x1f, 0x68, 0x65,
+	0x61, 0x64, 0x65, 0x72, 0x73, 0x5f, 0x77, 0x69, 0x74, 0x68, 0x5f, 0x75, 0x6e, 0x64, 0x65, 0x72,
+	0x73, 0x63, 0x6f, 0x72, 0x65, 0x73, 0x5f, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x05, 0x20,
+	0x01, 0x28, 0x0e, 0x32, 0x46, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66,
+	0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x50,
+	0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x48,
 	0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x57, 0x69, 0x74, 0x68, 0x55, 0x6e, 0x64, 0x65, 0x72, 0x73,
-	0x63, 0x6f, 0x72, 0x65, 0x73, 0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x09, 0x0a, 0x05, 0x41,
-	0x4c, 0x4c, 0x4f, 0x57, 0x10, 0x00, 0x12, 0x12, 0x0a, 0x0e, 0x52, 0x45, 0x4a, 0x45, 0x43, 0x54,
-	0x5f, 0x52, 0x45, 0x51, 0x55, 0x45, 0x53, 0x54, 0x10, 0x01, 0x12, 0x0f, 0x0a, 0x0b, 0x44, 0x52,
-	0x4f, 0x50, 0x5f, 0x48, 0x45, 0x41, 0x44, 0x45, 0x52, 0x10, 0x02, 0x3a, 0x2c, 0x9a, 0xc5, 0x88,
-	0x1e, 0x27, 0x0a, 0x25, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32,
-	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63,
-	0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x93, 0x09, 0x0a, 0x14, 0x48, 0x74,
-	0x74, 0x70, 0x31, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f,
-	0x6e, 0x73, 0x12, 0x48, 0x0a, 0x12, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x5f, 0x61, 0x62, 0x73, 0x6f,
-	0x6c, 0x75, 0x74, 0x65, 0x5f, 0x75, 0x72, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a,
+	0x63, 0x6f, 0x72, 0x65, 0x73, 0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x1c, 0x68, 0x65, 0x61,
+	0x64, 0x65, 0x72, 0x73, 0x57, 0x69, 0x74, 0x68, 0x55, 0x6e, 0x64, 0x65, 0x72, 0x73, 0x63, 0x6f,
+	0x72, 0x65, 0x73, 0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x5b, 0x0a, 0x1b, 0x6d, 0x61, 0x78,
+	0x5f, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x73, 0x5f, 0x70, 0x65, 0x72, 0x5f, 0x63, 0x6f,
+	0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x06, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c,
 	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
-	0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x10, 0x61, 0x6c, 0x6c, 0x6f,
-	0x77, 0x41, 0x62, 0x73, 0x6f, 0x6c, 0x75, 0x74, 0x65, 0x55, 0x72, 0x6c, 0x12, 0x24, 0x0a, 0x0e,
-	0x61, 0x63, 0x63, 0x65, 0x70, 0x74, 0x5f, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x31, 0x30, 0x18, 0x02,
-	0x20, 0x01, 0x28, 0x08, 0x52, 0x0c, 0x61, 0x63, 0x63, 0x65, 0x70, 0x74, 0x48, 0x74, 0x74, 0x70,
-	0x31, 0x30, 0x12, 0x36, 0x0a, 0x18, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x5f, 0x68, 0x6f,
-	0x73, 0x74, 0x5f, 0x66, 0x6f, 0x72, 0x5f, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x31, 0x30, 0x18, 0x03,
-	0x20, 0x01, 0x28, 0x09, 0x52, 0x14, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x48, 0x6f, 0x73,
-	0x74, 0x46, 0x6f, 0x72, 0x48, 0x74, 0x74, 0x70, 0x31, 0x30, 0x12, 0x66, 0x0a, 0x11, 0x68, 0x65,
-	0x61, 0x64, 0x65, 0x72, 0x5f, 0x6b, 0x65, 0x79, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x18,
-	0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x3a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f,
-	0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x74, 0x74,
-	0x70, 0x31, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
-	0x73, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4b, 0x65, 0x79, 0x46, 0x6f, 0x72, 0x6d, 0x61,
-	0x74, 0x52, 0x0f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4b, 0x65, 0x79, 0x46, 0x6f, 0x72, 0x6d,
-	0x61, 0x74, 0x12, 0x27, 0x0a, 0x0f, 0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x74, 0x72, 0x61,
-	0x69, 0x6c, 0x65, 0x72, 0x73, 0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0e, 0x65, 0x6e, 0x61,
-	0x62, 0x6c, 0x65, 0x54, 0x72, 0x61, 0x69, 0x6c, 0x65, 0x72, 0x73, 0x12, 0x30, 0x0a, 0x14, 0x61,
-	0x6c, 0x6c, 0x6f, 0x77, 0x5f, 0x63, 0x68, 0x75, 0x6e, 0x6b, 0x65, 0x64, 0x5f, 0x6c, 0x65, 0x6e,
-	0x67, 0x74, 0x68, 0x18, 0x06, 0x20, 0x01, 0x28, 0x08, 0x52, 0x12, 0x61, 0x6c, 0x6c, 0x6f, 0x77,
-	0x43, 0x68, 0x75, 0x6e, 0x6b, 0x65, 0x64, 0x4c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x12, 0x7a, 0x0a,
-	0x2d, 0x6f, 0x76, 0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d,
-	0x5f, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x5f, 0x6f, 0x6e, 0x5f, 0x69, 0x6e, 0x76, 0x61, 0x6c, 0x69,
-	0x64, 0x5f, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x18, 0x07,
-	0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
-	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65,
-	0x52, 0x27, 0x6f, 0x76, 0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d,
-	0x45, 0x72, 0x72, 0x6f, 0x72, 0x4f, 0x6e, 0x49, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x48, 0x74,
-	0x74, 0x70, 0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x12, 0x37, 0x0a, 0x18, 0x73, 0x65, 0x6e,
-	0x64, 0x5f, 0x66, 0x75, 0x6c, 0x6c, 0x79, 0x5f, 0x71, 0x75, 0x61, 0x6c, 0x69, 0x66, 0x69, 0x65,
-	0x64, 0x5f, 0x75, 0x72, 0x6c, 0x18, 0x08, 0x20, 0x01, 0x28, 0x08, 0x52, 0x15, 0x73, 0x65, 0x6e,
-	0x64, 0x46, 0x75, 0x6c, 0x6c, 0x79, 0x51, 0x75, 0x61, 0x6c, 0x69, 0x66, 0x69, 0x65, 0x64, 0x55,
-	0x72, 0x6c, 0x12, 0x4e, 0x0a, 0x10, 0x75, 0x73, 0x65, 0x5f, 0x62, 0x61, 0x6c, 0x73, 0x61, 0x5f,
-	0x70, 0x61, 0x72, 0x73, 0x65, 0x72, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67,
-	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42,
-	0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x08, 0xd2, 0xc6, 0xa4, 0xe1, 0x06, 0x02,
-	0x08, 0x01, 0x52, 0x0e, 0x75, 0x73, 0x65, 0x42, 0x61, 0x6c, 0x73, 0x61, 0x50, 0x61, 0x72, 0x73,
-	0x65, 0x72, 0x12, 0x3a, 0x0a, 0x14, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x5f, 0x63, 0x75, 0x73, 0x74,
-	0x6f, 0x6d, 0x5f, 0x6d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x73, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x08,
-	0x42, 0x08, 0xd2, 0xc6, 0xa4, 0xe1, 0x06, 0x02, 0x08, 0x01, 0x52, 0x12, 0x61, 0x6c, 0x6c, 0x6f,
-	0x77, 0x43, 0x75, 0x73, 0x74, 0x6f, 0x6d, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x73, 0x1a, 0x9f,
-	0x03, 0x0a, 0x0f, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4b, 0x65, 0x79, 0x46, 0x6f, 0x72, 0x6d,
-	0x61, 0x74, 0x12, 0x78, 0x0a, 0x11, 0x70, 0x72, 0x6f, 0x70, 0x65, 0x72, 0x5f, 0x63, 0x61, 0x73,
-	0x65, 0x5f, 0x77, 0x6f, 0x72, 0x64, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x4a, 0x2e,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72,
-	0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x31, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63,
-	0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72,
-	0x4b, 0x65, 0x79, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x2e, 0x50, 0x72, 0x6f, 0x70, 0x65, 0x72,
-	0x43, 0x61, 0x73, 0x65, 0x57, 0x6f, 0x72, 0x64, 0x73, 0x48, 0x00, 0x52, 0x0f, 0x70, 0x72, 0x6f,
-	0x70, 0x65, 0x72, 0x43, 0x61, 0x73, 0x65, 0x57, 0x6f, 0x72, 0x64, 0x73, 0x12, 0x5b, 0x0a, 0x12,
-	0x73, 0x74, 0x61, 0x74, 0x65, 0x66, 0x75, 0x6c, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x74,
-	0x65, 0x72, 0x18, 0x08, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x18, 0x6d, 0x61,
+	0x78, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x73, 0x50, 0x65, 0x72, 0x43, 0x6f, 0x6e, 0x6e,
+	0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x4e, 0x0a, 0x1c, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72,
+	0x73, 0x57, 0x69, 0x74, 0x68, 0x55, 0x6e, 0x64, 0x65, 0x72, 0x73, 0x63, 0x6f, 0x72, 0x65, 0x73,
+	0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x09, 0x0a, 0x05, 0x41, 0x4c, 0x4c, 0x4f, 0x57, 0x10,
+	0x00, 0x12, 0x12, 0x0a, 0x0e, 0x52, 0x45, 0x4a, 0x45, 0x43, 0x54, 0x5f, 0x52, 0x45, 0x51, 0x55,
+	0x45, 0x53, 0x54, 0x10, 0x01, 0x12, 0x0f, 0x0a, 0x0b, 0x44, 0x52, 0x4f, 0x50, 0x5f, 0x48, 0x45,
+	0x41, 0x44, 0x45, 0x52, 0x10, 0x02, 0x3a, 0x2c, 0x9a, 0xc5, 0x88, 0x1e, 0x27, 0x0a, 0x25, 0x65,
+	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65,
+	0x2e, 0x48, 0x74, 0x74, 0x70, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74,
+	0x69, 0x6f, 0x6e, 0x73, 0x22, 0x93, 0x09, 0x0a, 0x14, 0x48, 0x74, 0x74, 0x70, 0x31, 0x50, 0x72,
+	0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x48, 0x0a,
+	0x12, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x5f, 0x61, 0x62, 0x73, 0x6f, 0x6c, 0x75, 0x74, 0x65, 0x5f,
+	0x75, 0x72, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67,
+	0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c,
+	0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x10, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x41, 0x62, 0x73, 0x6f,
+	0x6c, 0x75, 0x74, 0x65, 0x55, 0x72, 0x6c, 0x12, 0x24, 0x0a, 0x0e, 0x61, 0x63, 0x63, 0x65, 0x70,
+	0x74, 0x5f, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x31, 0x30, 0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x52,
+	0x0c, 0x61, 0x63, 0x63, 0x65, 0x70, 0x74, 0x48, 0x74, 0x74, 0x70, 0x31, 0x30, 0x12, 0x36, 0x0a,
+	0x18, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x5f, 0x68, 0x6f, 0x73, 0x74, 0x5f, 0x66, 0x6f,
+	0x72, 0x5f, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x31, 0x30, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x14, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x48, 0x6f, 0x73, 0x74, 0x46, 0x6f, 0x72, 0x48,
+	0x74, 0x74, 0x70, 0x31, 0x30, 0x12, 0x66, 0x0a, 0x11, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x5f,
+	0x6b, 0x65, 0x79, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x3a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e,
+	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x31, 0x50, 0x72, 0x6f,
+	0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x48, 0x65, 0x61,
+	0x64, 0x65, 0x72, 0x4b, 0x65, 0x79, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x52, 0x0f, 0x68, 0x65,
+	0x61, 0x64, 0x65, 0x72, 0x4b, 0x65, 0x79, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0x27, 0x0a,
+	0x0f, 0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x74, 0x72, 0x61, 0x69, 0x6c, 0x65, 0x72, 0x73,
+	0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0e, 0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x54, 0x72,
+	0x61, 0x69, 0x6c, 0x65, 0x72, 0x73, 0x12, 0x30, 0x0a, 0x14, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x5f,
+	0x63, 0x68, 0x75, 0x6e, 0x6b, 0x65, 0x64, 0x5f, 0x6c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x18, 0x06,
+	0x20, 0x01, 0x28, 0x08, 0x52, 0x12, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x43, 0x68, 0x75, 0x6e, 0x6b,
+	0x65, 0x64, 0x4c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x12, 0x7a, 0x0a, 0x2d, 0x6f, 0x76, 0x65, 0x72,
+	0x72, 0x69, 0x64, 0x65, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f, 0x65, 0x72, 0x72, 0x6f,
+	0x72, 0x5f, 0x6f, 0x6e, 0x5f, 0x69, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x5f, 0x68, 0x74, 0x74,
+	0x70, 0x5f, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
+	0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x27, 0x6f, 0x76, 0x65,
+	0x72, 0x72, 0x69, 0x64, 0x65, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x45, 0x72, 0x72, 0x6f, 0x72,
+	0x4f, 0x6e, 0x49, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x48, 0x74, 0x74, 0x70, 0x4d, 0x65, 0x73,
+	0x73, 0x61, 0x67, 0x65, 0x12, 0x37, 0x0a, 0x18, 0x73, 0x65, 0x6e, 0x64, 0x5f, 0x66, 0x75, 0x6c,
+	0x6c, 0x79, 0x5f, 0x71, 0x75, 0x61, 0x6c, 0x69, 0x66, 0x69, 0x65, 0x64, 0x5f, 0x75, 0x72, 0x6c,
+	0x18, 0x08, 0x20, 0x01, 0x28, 0x08, 0x52, 0x15, 0x73, 0x65, 0x6e, 0x64, 0x46, 0x75, 0x6c, 0x6c,
+	0x79, 0x51, 0x75, 0x61, 0x6c, 0x69, 0x66, 0x69, 0x65, 0x64, 0x55, 0x72, 0x6c, 0x12, 0x4e, 0x0a,
+	0x10, 0x75, 0x73, 0x65, 0x5f, 0x62, 0x61, 0x6c, 0x73, 0x61, 0x5f, 0x70, 0x61, 0x72, 0x73, 0x65,
+	0x72, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61,
+	0x6c, 0x75, 0x65, 0x42, 0x08, 0xd2, 0xc6, 0xa4, 0xe1, 0x06, 0x02, 0x08, 0x01, 0x52, 0x0e, 0x75,
+	0x73, 0x65, 0x42, 0x61, 0x6c, 0x73, 0x61, 0x50, 0x61, 0x72, 0x73, 0x65, 0x72, 0x12, 0x3a, 0x0a,
+	0x14, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x5f, 0x63, 0x75, 0x73, 0x74, 0x6f, 0x6d, 0x5f, 0x6d, 0x65,
+	0x74, 0x68, 0x6f, 0x64, 0x73, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x08, 0x42, 0x08, 0xd2, 0xc6, 0xa4,
+	0xe1, 0x06, 0x02, 0x08, 0x01, 0x52, 0x12, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x43, 0x75, 0x73, 0x74,
+	0x6f, 0x6d, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x73, 0x1a, 0x9f, 0x03, 0x0a, 0x0f, 0x48, 0x65,
+	0x61, 0x64, 0x65, 0x72, 0x4b, 0x65, 0x79, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0x78, 0x0a,
+	0x11, 0x70, 0x72, 0x6f, 0x70, 0x65, 0x72, 0x5f, 0x63, 0x61, 0x73, 0x65, 0x5f, 0x77, 0x6f, 0x72,
+	0x64, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x4a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
 	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e,
-	0x54, 0x79, 0x70, 0x65, 0x64, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x43, 0x6f,
-	0x6e, 0x66, 0x69, 0x67, 0x48, 0x00, 0x52, 0x11, 0x73, 0x74, 0x61, 0x74, 0x65, 0x66, 0x75, 0x6c,
-	0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x1a, 0x60, 0x0a, 0x0f, 0x50, 0x72, 0x6f,
-	0x70, 0x65, 0x72, 0x43, 0x61, 0x73, 0x65, 0x57, 0x6f, 0x72, 0x64, 0x73, 0x3a, 0x4d, 0x9a, 0xc5,
-	0x88, 0x1e, 0x48, 0x0a, 0x46, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76,
-	0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x31, 0x50, 0x72, 0x6f, 0x74,
-	0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x48, 0x65, 0x61, 0x64,
-	0x65, 0x72, 0x4b, 0x65, 0x79, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x2e, 0x50, 0x72, 0x6f, 0x70,
-	0x65, 0x72, 0x43, 0x61, 0x73, 0x65, 0x57, 0x6f, 0x72, 0x64, 0x73, 0x3a, 0x3d, 0x9a, 0xc5, 0x88,
-	0x1e, 0x38, 0x0a, 0x36, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32,
+	0x48, 0x74, 0x74, 0x70, 0x31, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74,
+	0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4b, 0x65, 0x79, 0x46, 0x6f,
+	0x72, 0x6d, 0x61, 0x74, 0x2e, 0x50, 0x72, 0x6f, 0x70, 0x65, 0x72, 0x43, 0x61, 0x73, 0x65, 0x57,
+	0x6f, 0x72, 0x64, 0x73, 0x48, 0x00, 0x52, 0x0f, 0x70, 0x72, 0x6f, 0x70, 0x65, 0x72, 0x43, 0x61,
+	0x73, 0x65, 0x57, 0x6f, 0x72, 0x64, 0x73, 0x12, 0x5b, 0x0a, 0x12, 0x73, 0x74, 0x61, 0x74, 0x65,
+	0x66, 0x75, 0x6c, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x18, 0x08, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66,
+	0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x54, 0x79, 0x70, 0x65, 0x64,
+	0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x48,
+	0x00, 0x52, 0x11, 0x73, 0x74, 0x61, 0x74, 0x65, 0x66, 0x75, 0x6c, 0x46, 0x6f, 0x72, 0x6d, 0x61,
+	0x74, 0x74, 0x65, 0x72, 0x1a, 0x60, 0x0a, 0x0f, 0x50, 0x72, 0x6f, 0x70, 0x65, 0x72, 0x43, 0x61,
+	0x73, 0x65, 0x57, 0x6f, 0x72, 0x64, 0x73, 0x3a, 0x4d, 0x9a, 0xc5, 0x88, 0x1e, 0x48, 0x0a, 0x46,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72,
+	0x65, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x31, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f,
+	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4b, 0x65, 0x79,
+	0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x2e, 0x50, 0x72, 0x6f, 0x70, 0x65, 0x72, 0x43, 0x61, 0x73,
+	0x65, 0x57, 0x6f, 0x72, 0x64, 0x73, 0x3a, 0x3d, 0x9a, 0xc5, 0x88, 0x1e, 0x38, 0x0a, 0x36, 0x65,
+	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65,
+	0x2e, 0x48, 0x74, 0x74, 0x70, 0x31, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70,
+	0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4b, 0x65, 0x79, 0x46,
+	0x6f, 0x72, 0x6d, 0x61, 0x74, 0x42, 0x14, 0x0a, 0x0d, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x5f,
+	0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x3a, 0x2d, 0x9a, 0xc5, 0x88,
+	0x1e, 0x28, 0x0a, 0x26, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32,
 	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x31, 0x50, 0x72, 0x6f, 0x74, 0x6f,
-	0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x48, 0x65, 0x61, 0x64, 0x65,
-	0x72, 0x4b, 0x65, 0x79, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x42, 0x14, 0x0a, 0x0d, 0x68, 0x65,
-	0x61, 0x64, 0x65, 0x72, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0x03, 0xf8, 0x42, 0x01,
-	0x3a, 0x2d, 0x9a, 0xc5, 0x88, 0x1e, 0x28, 0x0a, 0x26, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61,
-	0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x31,
-	0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22,
-	0xc1, 0x02, 0x0a, 0x11, 0x4b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x53, 0x65, 0x74,
-	0x74, 0x69, 0x6e, 0x67, 0x73, 0x12, 0x43, 0x0a, 0x08, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61,
-	0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
-	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69,
-	0x6f, 0x6e, 0x42, 0x0c, 0xfa, 0x42, 0x09, 0xaa, 0x01, 0x06, 0x32, 0x04, 0x10, 0xc0, 0x84, 0x3d,
-	0x52, 0x08, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x12, 0x43, 0x0a, 0x07, 0x74, 0x69,
-	0x6d, 0x65, 0x6f, 0x75, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f,
-	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75,
-	0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x0e, 0xfa, 0x42, 0x0b, 0xaa, 0x01, 0x08, 0x08, 0x01,
-	0x32, 0x04, 0x10, 0xc0, 0x84, 0x3d, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x12,
-	0x3f, 0x0a, 0x0f, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x5f, 0x6a, 0x69, 0x74, 0x74,
-	0x65, 0x72, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x16, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
-	0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x50, 0x65, 0x72, 0x63, 0x65, 0x6e, 0x74,
-	0x52, 0x0e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x4a, 0x69, 0x74, 0x74, 0x65, 0x72,
-	0x12, 0x61, 0x0a, 0x18, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69,
-	0x64, 0x6c, 0x65, 0x5f, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x18, 0x04, 0x20, 0x01,
+	0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0xc1, 0x02, 0x0a, 0x11, 0x4b,
+	0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73,
+	0x12, 0x43, 0x0a, 0x08, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x18, 0x01, 0x20, 0x01,
 	0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
 	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x0c, 0xfa,
-	0x42, 0x09, 0xaa, 0x01, 0x06, 0x32, 0x04, 0x10, 0xc0, 0x84, 0x3d, 0x52, 0x16, 0x63, 0x6f, 0x6e,
-	0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x49, 0x64, 0x6c, 0x65, 0x49, 0x6e, 0x74, 0x65, 0x72,
-	0x76, 0x61, 0x6c, 0x22, 0xd3, 0x0e, 0x0a, 0x14, 0x48, 0x74, 0x74, 0x70, 0x32, 0x50, 0x72, 0x6f,
-	0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x46, 0x0a, 0x10,
-	0x68, 0x70, 0x61, 0x63, 0x6b, 0x5f, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x42, 0x09, 0xaa, 0x01, 0x06, 0x32, 0x04, 0x10, 0xc0, 0x84, 0x3d, 0x52, 0x08, 0x69, 0x6e, 0x74,
+	0x65, 0x72, 0x76, 0x61, 0x6c, 0x12, 0x43, 0x0a, 0x07, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f,
+	0x6e, 0x42, 0x0e, 0xfa, 0x42, 0x0b, 0xaa, 0x01, 0x08, 0x08, 0x01, 0x32, 0x04, 0x10, 0xc0, 0x84,
+	0x3d, 0x52, 0x07, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x12, 0x3f, 0x0a, 0x0f, 0x69, 0x6e,
+	0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x5f, 0x6a, 0x69, 0x74, 0x74, 0x65, 0x72, 0x18, 0x03, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x16, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65,
+	0x2e, 0x76, 0x33, 0x2e, 0x50, 0x65, 0x72, 0x63, 0x65, 0x6e, 0x74, 0x52, 0x0e, 0x69, 0x6e, 0x74,
+	0x65, 0x72, 0x76, 0x61, 0x6c, 0x4a, 0x69, 0x74, 0x74, 0x65, 0x72, 0x12, 0x61, 0x0a, 0x18, 0x63,
+	0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x69, 0x64, 0x6c, 0x65, 0x5f, 0x69,
+	0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e,
+	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e,
+	0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x0c, 0xfa, 0x42, 0x09, 0xaa, 0x01, 0x06,
+	0x32, 0x04, 0x10, 0xc0, 0x84, 0x3d, 0x52, 0x16, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69,
+	0x6f, 0x6e, 0x49, 0x64, 0x6c, 0x65, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x22, 0xd0,
+	0x0e, 0x0a, 0x14, 0x48, 0x74, 0x74, 0x70, 0x32, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c,
+	0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x46, 0x0a, 0x10, 0x68, 0x70, 0x61, 0x63, 0x6b,
+	0x5f, 0x74, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52,
+	0x0e, 0x68, 0x70, 0x61, 0x63, 0x6b, 0x54, 0x61, 0x62, 0x6c, 0x65, 0x53, 0x69, 0x7a, 0x65, 0x12,
+	0x61, 0x0a, 0x16, 0x6d, 0x61, 0x78, 0x5f, 0x63, 0x6f, 0x6e, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e,
+	0x74, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
+	0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x0d, 0xfa,
+	0x42, 0x0a, 0x2a, 0x08, 0x18, 0xff, 0xff, 0xff, 0xff, 0x07, 0x28, 0x01, 0x52, 0x14, 0x6d, 0x61,
+	0x78, 0x43, 0x6f, 0x6e, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x53, 0x74, 0x72, 0x65, 0x61,
+	0x6d, 0x73, 0x12, 0x6a, 0x0a, 0x1a, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x61, 0x6c, 0x5f, 0x73, 0x74,
+	0x72, 0x65, 0x61, 0x6d, 0x5f, 0x77, 0x69, 0x6e, 0x64, 0x6f, 0x77, 0x5f, 0x73, 0x69, 0x7a, 0x65,
+	0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
 	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56,
-	0x61, 0x6c, 0x75, 0x65, 0x52, 0x0e, 0x68, 0x70, 0x61, 0x63, 0x6b, 0x54, 0x61, 0x62, 0x6c, 0x65,
-	0x53, 0x69, 0x7a, 0x65, 0x12, 0x61, 0x0a, 0x16, 0x6d, 0x61, 0x78, 0x5f, 0x63, 0x6f, 0x6e, 0x63,
-	0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x73, 0x18, 0x02,
-	0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
-	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c,
-	0x75, 0x65, 0x42, 0x0d, 0xfa, 0x42, 0x0a, 0x2a, 0x08, 0x18, 0xff, 0xff, 0xff, 0xff, 0x07, 0x28,
-	0x01, 0x52, 0x14, 0x6d, 0x61, 0x78, 0x43, 0x6f, 0x6e, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74,
-	0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x73, 0x12, 0x6a, 0x0a, 0x1a, 0x69, 0x6e, 0x69, 0x74, 0x69,
-	0x61, 0x6c, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f, 0x77, 0x69, 0x6e, 0x64, 0x6f, 0x77,
-	0x5f, 0x73, 0x69, 0x7a, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f,
-	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49,
-	0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x0f, 0xfa, 0x42, 0x0c, 0x2a, 0x0a,
-	0x18, 0xff, 0xff, 0xff, 0xff, 0x07, 0x28, 0xff, 0xff, 0x03, 0x52, 0x17, 0x69, 0x6e, 0x69, 0x74,
-	0x69, 0x61, 0x6c, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x57, 0x69, 0x6e, 0x64, 0x6f, 0x77, 0x53,
-	0x69, 0x7a, 0x65, 0x12, 0x72, 0x0a, 0x1e, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x61, 0x6c, 0x5f, 0x63,
-	0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x77, 0x69, 0x6e, 0x64, 0x6f, 0x77,
-	0x5f, 0x73, 0x69, 0x7a, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f,
+	0x61, 0x6c, 0x75, 0x65, 0x42, 0x0f, 0xfa, 0x42, 0x0c, 0x2a, 0x0a, 0x18, 0xff, 0xff, 0xff, 0xff,
+	0x07, 0x28, 0xff, 0xff, 0x03, 0x52, 0x17, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x61, 0x6c, 0x53, 0x74,
+	0x72, 0x65, 0x61, 0x6d, 0x57, 0x69, 0x6e, 0x64, 0x6f, 0x77, 0x53, 0x69, 0x7a, 0x65, 0x12, 0x72,
+	0x0a, 0x1e, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x61, 0x6c, 0x5f, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63,
+	0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x77, 0x69, 0x6e, 0x64, 0x6f, 0x77, 0x5f, 0x73, 0x69, 0x7a, 0x65,
+	0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56,
+	0x61, 0x6c, 0x75, 0x65, 0x42, 0x0f, 0xfa, 0x42, 0x0c, 0x2a, 0x0a, 0x18, 0xff, 0xff, 0xff, 0xff,
+	0x07, 0x28, 0xff, 0xff, 0x03, 0x52, 0x1b, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x61, 0x6c, 0x43, 0x6f,
+	0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x57, 0x69, 0x6e, 0x64, 0x6f, 0x77, 0x53, 0x69,
+	0x7a, 0x65, 0x12, 0x23, 0x0a, 0x0d, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x5f, 0x63, 0x6f, 0x6e, 0x6e,
+	0x65, 0x63, 0x74, 0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0c, 0x61, 0x6c, 0x6c, 0x6f, 0x77,
+	0x43, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x12, 0x25, 0x0a, 0x0e, 0x61, 0x6c, 0x6c, 0x6f, 0x77,
+	0x5f, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x06, 0x20, 0x01, 0x28, 0x08, 0x52,
+	0x0d, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x55,
+	0x0a, 0x13, 0x6d, 0x61, 0x78, 0x5f, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x5f, 0x66,
+	0x72, 0x61, 0x6d, 0x65, 0x73, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f,
 	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49,
-	0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x0f, 0xfa, 0x42, 0x0c, 0x2a, 0x0a,
-	0x18, 0xff, 0xff, 0xff, 0xff, 0x07, 0x28, 0xff, 0xff, 0x03, 0x52, 0x1b, 0x69, 0x6e, 0x69, 0x74,
-	0x69, 0x61, 0x6c, 0x43, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x57, 0x69, 0x6e,
-	0x64, 0x6f, 0x77, 0x53, 0x69, 0x7a, 0x65, 0x12, 0x23, 0x0a, 0x0d, 0x61, 0x6c, 0x6c, 0x6f, 0x77,
-	0x5f, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0c,
-	0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x43, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x12, 0x25, 0x0a, 0x0e,
-	0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x5f, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x06,
-	0x20, 0x01, 0x28, 0x08, 0x52, 0x0d, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x4d, 0x65, 0x74, 0x61, 0x64,
-	0x61, 0x74, 0x61, 0x12, 0x55, 0x0a, 0x13, 0x6d, 0x61, 0x78, 0x5f, 0x6f, 0x75, 0x74, 0x62, 0x6f,
-	0x75, 0x6e, 0x64, 0x5f, 0x66, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
-	0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x07,
-	0xfa, 0x42, 0x04, 0x2a, 0x02, 0x28, 0x01, 0x52, 0x11, 0x6d, 0x61, 0x78, 0x4f, 0x75, 0x74, 0x62,
-	0x6f, 0x75, 0x6e, 0x64, 0x46, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x12, 0x64, 0x0a, 0x1b, 0x6d, 0x61,
-	0x78, 0x5f, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x5f, 0x63, 0x6f, 0x6e, 0x74, 0x72,
-	0x6f, 0x6c, 0x5f, 0x66, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x18, 0x08, 0x20, 0x01, 0x28, 0x0b, 0x32,
-	0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
-	0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x07, 0xfa,
-	0x42, 0x04, 0x2a, 0x02, 0x28, 0x01, 0x52, 0x18, 0x6d, 0x61, 0x78, 0x4f, 0x75, 0x74, 0x62, 0x6f,
-	0x75, 0x6e, 0x64, 0x43, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x46, 0x72, 0x61, 0x6d, 0x65, 0x73,
-	0x12, 0x84, 0x01, 0x0a, 0x31, 0x6d, 0x61, 0x78, 0x5f, 0x63, 0x6f, 0x6e, 0x73, 0x65, 0x63, 0x75,
-	0x74, 0x69, 0x76, 0x65, 0x5f, 0x69, 0x6e, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x5f, 0x66, 0x72, 0x61,
-	0x6d, 0x65, 0x73, 0x5f, 0x77, 0x69, 0x74, 0x68, 0x5f, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x5f, 0x70,
-	0x61, 0x79, 0x6c, 0x6f, 0x61, 0x64, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67,
-	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55,
-	0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x2b, 0x6d, 0x61, 0x78, 0x43,
-	0x6f, 0x6e, 0x73, 0x65, 0x63, 0x75, 0x74, 0x69, 0x76, 0x65, 0x49, 0x6e, 0x62, 0x6f, 0x75, 0x6e,
-	0x64, 0x46, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x57, 0x69, 0x74, 0x68, 0x45, 0x6d, 0x70, 0x74, 0x79,
-	0x50, 0x61, 0x79, 0x6c, 0x6f, 0x61, 0x64, 0x12, 0x6f, 0x0a, 0x26, 0x6d, 0x61, 0x78, 0x5f, 0x69,
-	0x6e, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x5f, 0x70, 0x72, 0x69, 0x6f, 0x72, 0x69, 0x74, 0x79, 0x5f,
-	0x66, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x5f, 0x70, 0x65, 0x72, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61,
-	0x6d, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
-	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32,
-	0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x21, 0x6d, 0x61, 0x78, 0x49, 0x6e, 0x62, 0x6f, 0x75, 0x6e,
-	0x64, 0x50, 0x72, 0x69, 0x6f, 0x72, 0x69, 0x74, 0x79, 0x46, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x50,
-	0x65, 0x72, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x12, 0x91, 0x01, 0x0a, 0x34, 0x6d, 0x61, 0x78,
-	0x5f, 0x69, 0x6e, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x5f, 0x77, 0x69, 0x6e, 0x64, 0x6f, 0x77, 0x5f,
-	0x75, 0x70, 0x64, 0x61, 0x74, 0x65, 0x5f, 0x66, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x5f, 0x70, 0x65,
-	0x72, 0x5f, 0x64, 0x61, 0x74, 0x61, 0x5f, 0x66, 0x72, 0x61, 0x6d, 0x65, 0x5f, 0x73, 0x65, 0x6e,
-	0x74, 0x18, 0x0b, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
-	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32,
-	0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x2a, 0x02, 0x28, 0x01, 0x52, 0x2c,
-	0x6d, 0x61, 0x78, 0x49, 0x6e, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x57, 0x69, 0x6e, 0x64, 0x6f, 0x77,
-	0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x46, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x50, 0x65, 0x72, 0x44,
-	0x61, 0x74, 0x61, 0x46, 0x72, 0x61, 0x6d, 0x65, 0x53, 0x65, 0x6e, 0x74, 0x12, 0x5e, 0x0a, 0x26,
-	0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x5f, 0x6f, 0x6e, 0x5f,
-	0x69, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x5f, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x6d, 0x65, 0x73,
-	0x73, 0x61, 0x67, 0x69, 0x6e, 0x67, 0x18, 0x0c, 0x20, 0x01, 0x28, 0x08, 0x42, 0x0b, 0x18, 0x01,
-	0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x52, 0x21, 0x73, 0x74, 0x72, 0x65, 0x61,
-	0x6d, 0x45, 0x72, 0x72, 0x6f, 0x72, 0x4f, 0x6e, 0x49, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x48,
-	0x74, 0x74, 0x70, 0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x69, 0x6e, 0x67, 0x12, 0x7a, 0x0a, 0x2d,
-	0x6f, 0x76, 0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f,
-	0x65, 0x72, 0x72, 0x6f, 0x72, 0x5f, 0x6f, 0x6e, 0x5f, 0x69, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64,
-	0x5f, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x18, 0x0e, 0x20,
-	0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
-	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52,
-	0x27, 0x6f, 0x76, 0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x45,
-	0x72, 0x72, 0x6f, 0x72, 0x4f, 0x6e, 0x49, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x48, 0x74, 0x74,
-	0x70, 0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x12, 0x7a, 0x0a, 0x1a, 0x63, 0x75, 0x73, 0x74,
-	0x6f, 0x6d, 0x5f, 0x73, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x5f, 0x70, 0x61, 0x72, 0x61,
-	0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x18, 0x0d, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x3c, 0x2e, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65,
-	0x2e, 0x76, 0x33, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x32, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f,
-	0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67,
-	0x73, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x52, 0x18, 0x63, 0x75, 0x73, 0x74,
-	0x6f, 0x6d, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65,
-	0x74, 0x65, 0x72, 0x73, 0x12, 0x5a, 0x0a, 0x14, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69,
-	0x6f, 0x6e, 0x5f, 0x6b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x18, 0x0f, 0x20, 0x01,
-	0x28, 0x0b, 0x32, 0x27, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69,
-	0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x4b, 0x65, 0x65, 0x70, 0x61, 0x6c,
-	0x69, 0x76, 0x65, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x52, 0x13, 0x63, 0x6f, 0x6e,
-	0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x4b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65,
-	0x12, 0x50, 0x0a, 0x11, 0x75, 0x73, 0x65, 0x5f, 0x6f, 0x67, 0x68, 0x74, 0x74, 0x70, 0x32, 0x5f,
-	0x63, 0x6f, 0x64, 0x65, 0x63, 0x18, 0x10, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f,
-	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f,
-	0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x08, 0xd2, 0xc6, 0xa4, 0xe1, 0x06, 0x02, 0x08,
-	0x01, 0x52, 0x0f, 0x75, 0x73, 0x65, 0x4f, 0x67, 0x68, 0x74, 0x74, 0x70, 0x32, 0x43, 0x6f, 0x64,
-	0x65, 0x63, 0x1a, 0xe5, 0x01, 0x0a, 0x11, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x50,
-	0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x12, 0x51, 0x0a, 0x0a, 0x69, 0x64, 0x65, 0x6e,
-	0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67,
-	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55,
-	0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x13, 0xfa, 0x42, 0x08, 0x2a,
-	0x06, 0x18, 0xff, 0xff, 0x03, 0x28, 0x00, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52,
-	0x0a, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x3c, 0x0a, 0x05, 0x76,
-	0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f,
+	0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x2a, 0x02,
+	0x28, 0x01, 0x52, 0x11, 0x6d, 0x61, 0x78, 0x4f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x46,
+	0x72, 0x61, 0x6d, 0x65, 0x73, 0x12, 0x64, 0x0a, 0x1b, 0x6d, 0x61, 0x78, 0x5f, 0x6f, 0x75, 0x74,
+	0x62, 0x6f, 0x75, 0x6e, 0x64, 0x5f, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x5f, 0x66, 0x72,
+	0x61, 0x6d, 0x65, 0x73, 0x18, 0x08, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f,
 	0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e,
-	0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02,
-	0x10, 0x01, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x3f, 0x9a, 0xc5, 0x88, 0x1e, 0x3a,
-	0x0a, 0x38, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63,
-	0x6f, 0x72, 0x65, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x32, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f,
-	0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67,
-	0x73, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x3a, 0x2d, 0x9a, 0xc5, 0x88, 0x1e,
-	0x28, 0x0a, 0x26, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e,
-	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x32, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63,
-	0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0xa5, 0x01, 0x0a, 0x13, 0x47, 0x72,
-	0x70, 0x63, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
-	0x73, 0x12, 0x60, 0x0a, 0x16, 0x68, 0x74, 0x74, 0x70, 0x32, 0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f,
-	0x63, 0x6f, 0x6c, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28,
-	0x0b, 0x32, 0x2a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67,
-	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48, 0x74, 0x74, 0x70, 0x32, 0x50, 0x72,
-	0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x14, 0x68,
+	0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x2a, 0x02, 0x28,
+	0x01, 0x52, 0x18, 0x6d, 0x61, 0x78, 0x4f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x43, 0x6f,
+	0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x46, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x12, 0x84, 0x01, 0x0a, 0x31,
+	0x6d, 0x61, 0x78, 0x5f, 0x63, 0x6f, 0x6e, 0x73, 0x65, 0x63, 0x75, 0x74, 0x69, 0x76, 0x65, 0x5f,
+	0x69, 0x6e, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x5f, 0x66, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x5f, 0x77,
+	0x69, 0x74, 0x68, 0x5f, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x5f, 0x70, 0x61, 0x79, 0x6c, 0x6f, 0x61,
+	0x64, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32,
+	0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x2b, 0x6d, 0x61, 0x78, 0x43, 0x6f, 0x6e, 0x73, 0x65, 0x63,
+	0x75, 0x74, 0x69, 0x76, 0x65, 0x49, 0x6e, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x46, 0x72, 0x61, 0x6d,
+	0x65, 0x73, 0x57, 0x69, 0x74, 0x68, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x50, 0x61, 0x79, 0x6c, 0x6f,
+	0x61, 0x64, 0x12, 0x6f, 0x0a, 0x26, 0x6d, 0x61, 0x78, 0x5f, 0x69, 0x6e, 0x62, 0x6f, 0x75, 0x6e,
+	0x64, 0x5f, 0x70, 0x72, 0x69, 0x6f, 0x72, 0x69, 0x74, 0x79, 0x5f, 0x66, 0x72, 0x61, 0x6d, 0x65,
+	0x73, 0x5f, 0x70, 0x65, 0x72, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x18, 0x0a, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65,
+	0x52, 0x21, 0x6d, 0x61, 0x78, 0x49, 0x6e, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x50, 0x72, 0x69, 0x6f,
+	0x72, 0x69, 0x74, 0x79, 0x46, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x50, 0x65, 0x72, 0x53, 0x74, 0x72,
+	0x65, 0x61, 0x6d, 0x12, 0x91, 0x01, 0x0a, 0x34, 0x6d, 0x61, 0x78, 0x5f, 0x69, 0x6e, 0x62, 0x6f,
+	0x75, 0x6e, 0x64, 0x5f, 0x77, 0x69, 0x6e, 0x64, 0x6f, 0x77, 0x5f, 0x75, 0x70, 0x64, 0x61, 0x74,
+	0x65, 0x5f, 0x66, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x5f, 0x70, 0x65, 0x72, 0x5f, 0x64, 0x61, 0x74,
+	0x61, 0x5f, 0x66, 0x72, 0x61, 0x6d, 0x65, 0x5f, 0x73, 0x65, 0x6e, 0x74, 0x18, 0x0b, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65,
+	0x42, 0x07, 0xfa, 0x42, 0x04, 0x2a, 0x02, 0x28, 0x01, 0x52, 0x2c, 0x6d, 0x61, 0x78, 0x49, 0x6e,
+	0x62, 0x6f, 0x75, 0x6e, 0x64, 0x57, 0x69, 0x6e, 0x64, 0x6f, 0x77, 0x55, 0x70, 0x64, 0x61, 0x74,
+	0x65, 0x46, 0x72, 0x61, 0x6d, 0x65, 0x73, 0x50, 0x65, 0x72, 0x44, 0x61, 0x74, 0x61, 0x46, 0x72,
+	0x61, 0x6d, 0x65, 0x53, 0x65, 0x6e, 0x74, 0x12, 0x5e, 0x0a, 0x26, 0x73, 0x74, 0x72, 0x65, 0x61,
+	0x6d, 0x5f, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x5f, 0x6f, 0x6e, 0x5f, 0x69, 0x6e, 0x76, 0x61, 0x6c,
+	0x69, 0x64, 0x5f, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x69, 0x6e,
+	0x67, 0x18, 0x0c, 0x20, 0x01, 0x28, 0x08, 0x42, 0x0b, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33,
+	0x2e, 0x30, 0x18, 0x01, 0x52, 0x21, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x45, 0x72, 0x72, 0x6f,
+	0x72, 0x4f, 0x6e, 0x49, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x48, 0x74, 0x74, 0x70, 0x4d, 0x65,
+	0x73, 0x73, 0x61, 0x67, 0x69, 0x6e, 0x67, 0x12, 0x7a, 0x0a, 0x2d, 0x6f, 0x76, 0x65, 0x72, 0x72,
+	0x69, 0x64, 0x65, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f, 0x65, 0x72, 0x72, 0x6f, 0x72,
+	0x5f, 0x6f, 0x6e, 0x5f, 0x69, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x5f, 0x68, 0x74, 0x74, 0x70,
+	0x5f, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x18, 0x0e, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a,
+	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
+	0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x27, 0x6f, 0x76, 0x65, 0x72,
+	0x72, 0x69, 0x64, 0x65, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x45, 0x72, 0x72, 0x6f, 0x72, 0x4f,
+	0x6e, 0x49, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x48, 0x74, 0x74, 0x70, 0x4d, 0x65, 0x73, 0x73,
+	0x61, 0x67, 0x65, 0x12, 0x7a, 0x0a, 0x1a, 0x63, 0x75, 0x73, 0x74, 0x6f, 0x6d, 0x5f, 0x73, 0x65,
+	0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x5f, 0x70, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72,
+	0x73, 0x18, 0x0d, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x3c, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
+	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x48,
 	0x74, 0x74, 0x70, 0x32, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69,
-	0x6f, 0x6e, 0x73, 0x3a, 0x2c, 0x9a, 0xc5, 0x88, 0x1e, 0x27, 0x0a, 0x25, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x47, 0x72,
-	0x70, 0x63, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
-	0x73, 0x22, 0xb1, 0x02, 0x0a, 0x14, 0x48, 0x74, 0x74, 0x70, 0x33, 0x50, 0x72, 0x6f, 0x74, 0x6f,
-	0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x5d, 0x0a, 0x15, 0x71, 0x75,
-	0x69, 0x63, 0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x5f, 0x6f, 0x70, 0x74, 0x69,
-	0x6f, 0x6e, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
+	0x6f, 0x6e, 0x73, 0x2e, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x50, 0x61, 0x72, 0x61,
+	0x6d, 0x65, 0x74, 0x65, 0x72, 0x52, 0x18, 0x63, 0x75, 0x73, 0x74, 0x6f, 0x6d, 0x53, 0x65, 0x74,
+	0x74, 0x69, 0x6e, 0x67, 0x73, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x12,
+	0x5a, 0x0a, 0x14, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6b, 0x65,
+	0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x18, 0x0f, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x27, 0x2e,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72,
+	0x65, 0x2e, 0x76, 0x33, 0x2e, 0x4b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x53, 0x65,
+	0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x52, 0x13, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69,
+	0x6f, 0x6e, 0x4b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x12, 0x50, 0x0a, 0x11, 0x75,
+	0x73, 0x65, 0x5f, 0x6f, 0x67, 0x68, 0x74, 0x74, 0x70, 0x32, 0x5f, 0x63, 0x6f, 0x64, 0x65, 0x63,
+	0x18, 0x10, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c,
+	0x75, 0x65, 0x42, 0x08, 0xd2, 0xc6, 0xa4, 0xe1, 0x06, 0x02, 0x08, 0x01, 0x52, 0x0f, 0x75, 0x73,
+	0x65, 0x4f, 0x67, 0x68, 0x74, 0x74, 0x70, 0x32, 0x43, 0x6f, 0x64, 0x65, 0x63, 0x1a, 0xe2, 0x01,
+	0x0a, 0x11, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65,
+	0x74, 0x65, 0x72, 0x12, 0x4e, 0x0a, 0x0a, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65,
+	0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32,
+	0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x10, 0xfa, 0x42, 0x0d, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x2a,
+	0x06, 0x18, 0xff, 0xff, 0x03, 0x28, 0x00, 0x52, 0x0a, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66,
+	0x69, 0x65, 0x72, 0x12, 0x3c, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65,
+	0x42, 0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75,
+	0x65, 0x3a, 0x3f, 0x9a, 0xc5, 0x88, 0x1e, 0x3a, 0x0a, 0x38, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
+	0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48, 0x74, 0x74, 0x70,
+	0x32, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73,
+	0x2e, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74,
+	0x65, 0x72, 0x3a, 0x2d, 0x9a, 0xc5, 0x88, 0x1e, 0x28, 0x0a, 0x26, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x48, 0x74, 0x74,
+	0x70, 0x32, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
+	0x73, 0x22, 0xa5, 0x01, 0x0a, 0x13, 0x47, 0x72, 0x70, 0x63, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63,
+	0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x60, 0x0a, 0x16, 0x68, 0x74, 0x74,
+	0x70, 0x32, 0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x5f, 0x6f, 0x70, 0x74, 0x69,
+	0x6f, 0x6e, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
 	0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33,
-	0x2e, 0x51, 0x75, 0x69, 0x63, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74,
-	0x69, 0x6f, 0x6e, 0x73, 0x52, 0x13, 0x71, 0x75, 0x69, 0x63, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63,
-	0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x7a, 0x0a, 0x2d, 0x6f, 0x76, 0x65,
-	0x72, 0x72, 0x69, 0x64, 0x65, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f, 0x65, 0x72, 0x72,
-	0x6f, 0x72, 0x5f, 0x6f, 0x6e, 0x5f, 0x69, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x5f, 0x68, 0x74,
-	0x74, 0x70, 0x5f, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
-	0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x27, 0x6f, 0x76,
-	0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x45, 0x72, 0x72, 0x6f,
-	0x72, 0x4f, 0x6e, 0x49, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x48, 0x74, 0x74, 0x70, 0x4d, 0x65,
-	0x73, 0x73, 0x61, 0x67, 0x65, 0x12, 0x3e, 0x0a, 0x16, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x5f, 0x65,
-	0x78, 0x74, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x5f, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x18,
-	0x05, 0x20, 0x01, 0x28, 0x08, 0x42, 0x08, 0xd2, 0xc6, 0xa4, 0xe1, 0x06, 0x02, 0x08, 0x01, 0x52,
-	0x14, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x43, 0x6f,
-	0x6e, 0x6e, 0x65, 0x63, 0x74, 0x22, 0x74, 0x0a, 0x1a, 0x53, 0x63, 0x68, 0x65, 0x6d, 0x65, 0x48,
-	0x65, 0x61, 0x64, 0x65, 0x72, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74,
-	0x69, 0x6f, 0x6e, 0x12, 0x44, 0x0a, 0x13, 0x73, 0x63, 0x68, 0x65, 0x6d, 0x65, 0x5f, 0x74, 0x6f,
-	0x5f, 0x6f, 0x76, 0x65, 0x72, 0x77, 0x72, 0x69, 0x74, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
-	0x42, 0x12, 0xfa, 0x42, 0x0f, 0x72, 0x0d, 0x52, 0x04, 0x68, 0x74, 0x74, 0x70, 0x52, 0x05, 0x68,
-	0x74, 0x74, 0x70, 0x73, 0x48, 0x00, 0x52, 0x11, 0x73, 0x63, 0x68, 0x65, 0x6d, 0x65, 0x54, 0x6f,
-	0x4f, 0x76, 0x65, 0x72, 0x77, 0x72, 0x69, 0x74, 0x65, 0x42, 0x10, 0x0a, 0x0e, 0x74, 0x72, 0x61,
-	0x6e, 0x73, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x81, 0x01, 0x0a, 0x22,
+	0x2e, 0x48, 0x74, 0x74, 0x70, 0x32, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70,
+	0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x14, 0x68, 0x74, 0x74, 0x70, 0x32, 0x50, 0x72, 0x6f, 0x74,
+	0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x3a, 0x2c, 0x9a, 0xc5, 0x88,
+	0x1e, 0x27, 0x0a, 0x25, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32,
+	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x47, 0x72, 0x70, 0x63, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63,
+	0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0xb1, 0x02, 0x0a, 0x14, 0x48, 0x74,
+	0x74, 0x70, 0x33, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x73, 0x12, 0x5d, 0x0a, 0x15, 0x71, 0x75, 0x69, 0x63, 0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x63, 0x6f, 0x6c, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x29, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67,
+	0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x51, 0x75, 0x69, 0x63, 0x50, 0x72, 0x6f,
+	0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x13, 0x71, 0x75,
+	0x69, 0x63, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
+	0x73, 0x12, 0x7a, 0x0a, 0x2d, 0x6f, 0x76, 0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x5f, 0x73, 0x74,
+	0x72, 0x65, 0x61, 0x6d, 0x5f, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x5f, 0x6f, 0x6e, 0x5f, 0x69, 0x6e,
+	0x76, 0x61, 0x6c, 0x69, 0x64, 0x5f, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x6d, 0x65, 0x73, 0x73, 0x61,
+	0x67, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
+	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56,
+	0x61, 0x6c, 0x75, 0x65, 0x52, 0x27, 0x6f, 0x76, 0x65, 0x72, 0x72, 0x69, 0x64, 0x65, 0x53, 0x74,
+	0x72, 0x65, 0x61, 0x6d, 0x45, 0x72, 0x72, 0x6f, 0x72, 0x4f, 0x6e, 0x49, 0x6e, 0x76, 0x61, 0x6c,
+	0x69, 0x64, 0x48, 0x74, 0x74, 0x70, 0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x12, 0x3e, 0x0a,
+	0x16, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x5f, 0x65, 0x78, 0x74, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x5f,
+	0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x42, 0x08, 0xd2,
+	0xc6, 0xa4, 0xe1, 0x06, 0x02, 0x08, 0x01, 0x52, 0x14, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x45, 0x78,
+	0x74, 0x65, 0x6e, 0x64, 0x65, 0x64, 0x43, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x22, 0x74, 0x0a,
+	0x1a, 0x53, 0x63, 0x68, 0x65, 0x6d, 0x65, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x54, 0x72, 0x61,
+	0x6e, 0x73, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x44, 0x0a, 0x13, 0x73,
+	0x63, 0x68, 0x65, 0x6d, 0x65, 0x5f, 0x74, 0x6f, 0x5f, 0x6f, 0x76, 0x65, 0x72, 0x77, 0x72, 0x69,
+	0x74, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x12, 0xfa, 0x42, 0x0f, 0x72, 0x0d, 0x52,
+	0x04, 0x68, 0x74, 0x74, 0x70, 0x52, 0x05, 0x68, 0x74, 0x74, 0x70, 0x73, 0x48, 0x00, 0x52, 0x11,
+	0x73, 0x63, 0x68, 0x65, 0x6d, 0x65, 0x54, 0x6f, 0x4f, 0x76, 0x65, 0x72, 0x77, 0x72, 0x69, 0x74,
+	0x65, 0x42, 0x10, 0x0a, 0x0e, 0x74, 0x72, 0x61, 0x6e, 0x73, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74,
+	0x69, 0x6f, 0x6e, 0x42, 0x81, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x22,
 	0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e,
 	0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e,
 	0x76, 0x33, 0x42, 0x0d, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x50, 0x72, 0x6f, 0x74,
@@ -2049,8 +2081,7 @@ var file_envoy_config_core_v3_protocol_proto_rawDesc = []byte{
 	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f,
 	0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
 	0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33,
-	0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62,
-	0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/protocol.pb.validate.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/protocol.pb.validate.go
index 9e9a9155e98..feb1489c21d 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/protocol.pb.validate.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/protocol.pb.validate.go
@@ -412,6 +412,10 @@ func (m *QuicProtocolOptions) validate(all bool) error {
 		}
 	}
 
+	// no validation rules for ConnectionOptions
+
+	// no validation rules for ClientConnectionOptions
+
 	if len(errors) > 0 {
 		return QuicProtocolOptionsMultiError(errors)
 	}
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/proxy_protocol.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/proxy_protocol.pb.go
index 90b7aaebe64..56e3119f4b8 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/proxy_protocol.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/proxy_protocol.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/proxy_protocol.proto
 
 package corev3
@@ -274,16 +274,16 @@ var file_envoy_config_core_v3_proxy_protocol_proto_rawDesc = []byte{
 	0x6c, 0x50, 0x61, 0x73, 0x73, 0x54, 0x68, 0x72, 0x6f, 0x75, 0x67, 0x68, 0x54, 0x4c, 0x56, 0x73,
 	0x52, 0x0f, 0x70, 0x61, 0x73, 0x73, 0x54, 0x68, 0x72, 0x6f, 0x75, 0x67, 0x68, 0x54, 0x6c, 0x76,
 	0x73, 0x22, 0x19, 0x0a, 0x07, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x12, 0x06, 0x0a, 0x02,
-	0x56, 0x31, 0x10, 0x00, 0x12, 0x06, 0x0a, 0x02, 0x56, 0x32, 0x10, 0x01, 0x42, 0x86, 0x01, 0x0a,
-	0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65,
-	0x2e, 0x76, 0x33, 0x42, 0x12, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63,
-	0x6f, 0x6c, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75,
-	0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79,
-	0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e,
-	0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63,
-	0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8,
-	0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x56, 0x31, 0x10, 0x00, 0x12, 0x06, 0x0a, 0x02, 0x56, 0x32, 0x10, 0x01, 0x42, 0x86, 0x01, 0xba,
+	0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e,
+	0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x12, 0x50, 0x72, 0x6f,
+	0x78, 0x79, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50,
+	0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e,
+	0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74,
+	0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f,
+	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63,
+	0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/resolver.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/resolver.pb.go
index 9094e47f743..3c0a2fe07c5 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/resolver.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/resolver.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/resolver.proto
 
 package corev3
@@ -172,15 +172,15 @@ var file_envoy_config_core_v3_resolver_proto_rawDesc = []byte{
 	0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76,
 	0x33, 0x2e, 0x44, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x6f, 0x6c, 0x76, 0x65, 0x72, 0x4f, 0x70, 0x74,
 	0x69, 0x6f, 0x6e, 0x73, 0x52, 0x12, 0x64, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x6f, 0x6c, 0x76, 0x65,
-	0x72, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x42, 0x81, 0x01, 0x0a, 0x22, 0x69, 0x6f, 0x2e,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
-	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42,
-	0x0d, 0x52, 0x65, 0x73, 0x6f, 0x6c, 0x76, 0x65, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01,
-	0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76,
-	0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72,
-	0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63,
-	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f,
-	0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72,
+	0x72, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x42, 0x81, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06,
+	0x02, 0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f,
+	0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e,
+	0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x0d, 0x52, 0x65, 0x73, 0x6f, 0x6c, 0x76, 0x65,
+	0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62,
+	0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f,
+	0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65,
+	0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f,
+	0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72,
 	0x6f, 0x74, 0x6f, 0x33,
 }
 
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/socket_option.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/socket_option.pb.go
index 5ade94fcadd..646973476e0 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/socket_option.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/socket_option.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/socket_option.proto
 
 package corev3
@@ -81,13 +81,13 @@ func (SocketOption_SocketState) EnumDescriptor() ([]byte, []int) {
 //
 // .. code-block:: json
 //
-//  {
-//    "description": "support tcp keep alive",
-//    "state": 0,
-//    "level": 1,
-//    "name": 9,
-//    "int_value": 1,
-//  }
+//	{
+//	  "description": "support tcp keep alive",
+//	  "state": 0,
+//	  "level": 1,
+//	  "name": 9,
+//	  "int_value": 1,
+//	}
 //
 // 1 means SOL_SOCKET and 9 means SO_KEEPALIVE on Linux.
 // With the above configuration, `TCP Keep-Alives <https://www.freesoft.org/CIE/RFC/1122/114.htm>`_
@@ -110,6 +110,7 @@ type SocketOption struct {
 	// The numeric name as passed to setsockopt
 	Name int64 `protobuf:"varint,3,opt,name=name,proto3" json:"name,omitempty"`
 	// Types that are assignable to Value:
+	//
 	//	*SocketOption_IntValue
 	//	*SocketOption_BufValue
 	Value isSocketOption_Value `protobuf_oneof:"value"`
@@ -305,15 +306,15 @@ var file_envoy_config_core_v3_socket_option_proto_rawDesc = []byte{
 	0x20, 0x03, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e,
 	0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x53, 0x6f, 0x63, 0x6b,
 	0x65, 0x74, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0d, 0x73, 0x6f, 0x63, 0x6b, 0x65, 0x74,
-	0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x42, 0x85, 0x01, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
-	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x11,
-	0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x72, 0x6f, 0x74,
-	0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f,
-	0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33,
-	0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62,
+	0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x42, 0x85, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02,
+	0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78,
+	0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63,
+	0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x11, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x4f, 0x70,
+	0x74, 0x69, 0x6f, 0x6e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74,
+	0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f,
+	0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c,
+	0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67,
+	0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0x62,
 	0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/substitution_format_string.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/substitution_format_string.pb.go
index 745b4c18604..6692c1d5d09 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/substitution_format_string.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/substitution_format_string.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/substitution_format_string.proto
 
 package corev3
@@ -24,45 +24,97 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
+// Optional configuration options to be used with json_format.
+type JsonFormatOptions struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	// The output JSON string properties will be sorted.
+	SortProperties bool `protobuf:"varint,1,opt,name=sort_properties,json=sortProperties,proto3" json:"sort_properties,omitempty"`
+}
+
+func (x *JsonFormatOptions) Reset() {
+	*x = JsonFormatOptions{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_envoy_config_core_v3_substitution_format_string_proto_msgTypes[0]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *JsonFormatOptions) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*JsonFormatOptions) ProtoMessage() {}
+
+func (x *JsonFormatOptions) ProtoReflect() protoreflect.Message {
+	mi := &file_envoy_config_core_v3_substitution_format_string_proto_msgTypes[0]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use JsonFormatOptions.ProtoReflect.Descriptor instead.
+func (*JsonFormatOptions) Descriptor() ([]byte, []int) {
+	return file_envoy_config_core_v3_substitution_format_string_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *JsonFormatOptions) GetSortProperties() bool {
+	if x != nil {
+		return x.SortProperties
+	}
+	return false
+}
+
 // Configuration to use multiple :ref:`command operators <config_access_log_command_operators>`
 // to generate a new string in either plain text or JSON format.
-// [#next-free-field: 7]
+// [#next-free-field: 8]
 type SubstitutionFormatString struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Format:
+	//
 	//	*SubstitutionFormatString_TextFormat
 	//	*SubstitutionFormatString_JsonFormat
 	//	*SubstitutionFormatString_TextFormatSource
 	Format isSubstitutionFormatString_Format `protobuf_oneof:"format"`
 	// If set to true, when command operators are evaluated to null,
 	//
-	// * for ``text_format``, the output of the empty operator is changed from ``-`` to an
-	//   empty string, so that empty values are omitted entirely.
-	// * for ``json_format`` the keys with null values are omitted in the output structure.
+	//   - for “text_format“, the output of the empty operator is changed from “-“ to an
+	//     empty string, so that empty values are omitted entirely.
+	//   - for “json_format“ the keys with null values are omitted in the output structure.
 	OmitEmptyValues bool `protobuf:"varint,3,opt,name=omit_empty_values,json=omitEmptyValues,proto3" json:"omit_empty_values,omitempty"`
-	// Specify a ``content_type`` field.
-	// If this field is not set then ``text/plain`` is used for ``text_format`` and
-	// ``application/json`` is used for ``json_format``.
+	// Specify a “content_type“ field.
+	// If this field is not set then “text/plain“ is used for “text_format“ and
+	// “application/json“ is used for “json_format“.
 	//
 	// .. validated-code-block:: yaml
-	//   :type-name: envoy.config.core.v3.SubstitutionFormatString
 	//
-	//   content_type: "text/html; charset=UTF-8"
+	//	:type-name: envoy.config.core.v3.SubstitutionFormatString
 	//
+	//	content_type: "text/html; charset=UTF-8"
 	ContentType string `protobuf:"bytes,4,opt,name=content_type,json=contentType,proto3" json:"content_type,omitempty"`
 	// Specifies a collection of Formatter plugins that can be called from the access log configuration.
 	// See the formatters extensions documentation for details.
 	// [#extension-category: envoy.formatter]
 	Formatters []*TypedExtensionConfig `protobuf:"bytes,6,rep,name=formatters,proto3" json:"formatters,omitempty"`
+	// If json_format is used, the options will be applied to the output JSON string.
+	JsonFormatOptions *JsonFormatOptions `protobuf:"bytes,7,opt,name=json_format_options,json=jsonFormatOptions,proto3" json:"json_format_options,omitempty"`
 }
 
 func (x *SubstitutionFormatString) Reset() {
 	*x = SubstitutionFormatString{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_envoy_config_core_v3_substitution_format_string_proto_msgTypes[0]
+		mi := &file_envoy_config_core_v3_substitution_format_string_proto_msgTypes[1]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -75,7 +127,7 @@ func (x *SubstitutionFormatString) String() string {
 func (*SubstitutionFormatString) ProtoMessage() {}
 
 func (x *SubstitutionFormatString) ProtoReflect() protoreflect.Message {
-	mi := &file_envoy_config_core_v3_substitution_format_string_proto_msgTypes[0]
+	mi := &file_envoy_config_core_v3_substitution_format_string_proto_msgTypes[1]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -88,7 +140,7 @@ func (x *SubstitutionFormatString) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use SubstitutionFormatString.ProtoReflect.Descriptor instead.
 func (*SubstitutionFormatString) Descriptor() ([]byte, []int) {
-	return file_envoy_config_core_v3_substitution_format_string_proto_rawDescGZIP(), []int{0}
+	return file_envoy_config_core_v3_substitution_format_string_proto_rawDescGZIP(), []int{1}
 }
 
 func (m *SubstitutionFormatString) GetFormat() isSubstitutionFormatString_Format {
@@ -98,7 +150,7 @@ func (m *SubstitutionFormatString) GetFormat() isSubstitutionFormatString_Format
 	return nil
 }
 
-// Deprecated: Do not use.
+// Deprecated: Marked as deprecated in envoy/config/core/v3/substitution_format_string.proto.
 func (x *SubstitutionFormatString) GetTextFormat() string {
 	if x, ok := x.GetFormat().(*SubstitutionFormatString_TextFormat); ok {
 		return x.TextFormat
@@ -141,6 +193,13 @@ func (x *SubstitutionFormatString) GetFormatters() []*TypedExtensionConfig {
 	return nil
 }
 
+func (x *SubstitutionFormatString) GetJsonFormatOptions() *JsonFormatOptions {
+	if x != nil {
+		return x.JsonFormatOptions
+	}
+	return nil
+}
+
 type isSubstitutionFormatString_Format interface {
 	isSubstitutionFormatString_Format()
 }
@@ -149,22 +208,23 @@ type SubstitutionFormatString_TextFormat struct {
 	// Specify a format with command operators to form a text string.
 	// Its details is described in :ref:`format string<config_access_log_format_strings>`.
 	//
-	// For example, setting ``text_format`` like below,
+	// For example, setting “text_format“ like below,
 	//
 	// .. validated-code-block:: yaml
-	//   :type-name: envoy.config.core.v3.SubstitutionFormatString
 	//
-	//   text_format: "%LOCAL_REPLY_BODY%:%RESPONSE_CODE%:path=%REQ(:path)%\n"
+	//	:type-name: envoy.config.core.v3.SubstitutionFormatString
+	//
+	//	text_format: "%LOCAL_REPLY_BODY%:%RESPONSE_CODE%:path=%REQ(:path)%\n"
 	//
 	// generates plain text similar to:
 	//
 	// .. code-block:: text
 	//
-	//   upstream connect error:503:path=/foo
+	//	upstream connect error:503:path=/foo
 	//
 	// Deprecated in favor of :ref:`text_format_source <envoy_v3_api_field_config.core.v3.SubstitutionFormatString.text_format_source>`. To migrate text format strings, use the :ref:`inline_string <envoy_v3_api_field_config.core.v3.DataSource.inline_string>` field.
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/config/core/v3/substitution_format_string.proto.
 	TextFormat string `protobuf:"bytes,1,opt,name=text_format,json=textFormat,proto3,oneof"`
 }
 
@@ -176,21 +236,21 @@ type SubstitutionFormatString_JsonFormat struct {
 	// See the documentation for a specific command operator for details.
 	//
 	// .. validated-code-block:: yaml
-	//   :type-name: envoy.config.core.v3.SubstitutionFormatString
 	//
-	//   json_format:
-	//     status: "%RESPONSE_CODE%"
-	//     message: "%LOCAL_REPLY_BODY%"
+	//	:type-name: envoy.config.core.v3.SubstitutionFormatString
+	//
+	//	json_format:
+	//	  status: "%RESPONSE_CODE%"
+	//	  message: "%LOCAL_REPLY_BODY%"
 	//
 	// The following JSON object would be created:
 	//
 	// .. code-block:: json
 	//
-	//  {
-	//    "status": 500,
-	//    "message": "My error message"
-	//  }
-	//
+	//	{
+	//	  "status": 500,
+	//	  "message": "My error message"
+	//	}
 	JsonFormat *_struct.Struct `protobuf:"bytes,2,opt,name=json_format,json=jsonFormat,proto3,oneof"`
 }
 
@@ -198,20 +258,20 @@ type SubstitutionFormatString_TextFormatSource struct {
 	// Specify a format with command operators to form a text string.
 	// Its details is described in :ref:`format string<config_access_log_format_strings>`.
 	//
-	// For example, setting ``text_format`` like below,
+	// For example, setting “text_format“ like below,
 	//
 	// .. validated-code-block:: yaml
-	//   :type-name: envoy.config.core.v3.SubstitutionFormatString
 	//
-	//   text_format_source:
-	//     inline_string: "%LOCAL_REPLY_BODY%:%RESPONSE_CODE%:path=%REQ(:path)%\n"
+	//	:type-name: envoy.config.core.v3.SubstitutionFormatString
+	//
+	//	text_format_source:
+	//	  inline_string: "%LOCAL_REPLY_BODY%:%RESPONSE_CODE%:path=%REQ(:path)%\n"
 	//
 	// generates plain text similar to:
 	//
 	// .. code-block:: text
 	//
-	//   upstream connect error:503:path=/foo
-	//
+	//	upstream connect error:503:path=/foo
 	TextFormatSource *DataSource `protobuf:"bytes,5,opt,name=text_format_source,json=textFormatSource,proto3,oneof"`
 }
 
@@ -241,42 +301,51 @@ var file_envoy_config_core_v3_substitution_format_string_proto_rawDesc = []byte{
 	0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2f, 0x73, 0x74, 0x61, 0x74, 0x75, 0x73,
 	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x17, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65,
 	0x2f, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22,
-	0x99, 0x03, 0x0a, 0x18, 0x53, 0x75, 0x62, 0x73, 0x74, 0x69, 0x74, 0x75, 0x74, 0x69, 0x6f, 0x6e,
-	0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x53, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x12, 0x2e, 0x0a, 0x0b,
-	0x74, 0x65, 0x78, 0x74, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28,
-	0x09, 0x42, 0x0b, 0x18, 0x01, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x48, 0x00,
-	0x52, 0x0a, 0x74, 0x65, 0x78, 0x74, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0x44, 0x0a, 0x0b,
-	0x6a, 0x73, 0x6f, 0x6e, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28,
-	0x0b, 0x32, 0x17, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
-	0x62, 0x75, 0x66, 0x2e, 0x53, 0x74, 0x72, 0x75, 0x63, 0x74, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x8a,
-	0x01, 0x02, 0x10, 0x01, 0x48, 0x00, 0x52, 0x0a, 0x6a, 0x73, 0x6f, 0x6e, 0x46, 0x6f, 0x72, 0x6d,
-	0x61, 0x74, 0x12, 0x50, 0x0a, 0x12, 0x74, 0x65, 0x78, 0x74, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61,
-	0x74, 0x5f, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x20,
-	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f,
-	0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65,
-	0x48, 0x00, 0x52, 0x10, 0x74, 0x65, 0x78, 0x74, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x53, 0x6f,
-	0x75, 0x72, 0x63, 0x65, 0x12, 0x2a, 0x0a, 0x11, 0x6f, 0x6d, 0x69, 0x74, 0x5f, 0x65, 0x6d, 0x70,
-	0x74, 0x79, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x08, 0x52,
-	0x0f, 0x6f, 0x6d, 0x69, 0x74, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73,
-	0x12, 0x2e, 0x0a, 0x0c, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x5f, 0x74, 0x79, 0x70, 0x65,
-	0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc0, 0x01, 0x02,
-	0xc8, 0x01, 0x00, 0x52, 0x0b, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x54, 0x79, 0x70, 0x65,
-	0x12, 0x4a, 0x0a, 0x0a, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x73, 0x18, 0x06,
-	0x20, 0x03, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e,
-	0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x54, 0x79, 0x70, 0x65,
-	0x64, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67,
-	0x52, 0x0a, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x73, 0x42, 0x0d, 0x0a, 0x06,
-	0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x91, 0x01, 0x0a, 0x22,
-	0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e,
-	0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e,
-	0x76, 0x33, 0x42, 0x1d, 0x53, 0x75, 0x62, 0x73, 0x74, 0x69, 0x74, 0x75, 0x74, 0x69, 0x6f, 0x6e,
-	0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x53, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x50, 0x72, 0x6f, 0x74,
-	0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f,
-	0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33,
-	0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62,
-	0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x3c, 0x0a, 0x11, 0x4a, 0x73, 0x6f, 0x6e, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x4f, 0x70, 0x74,
+	0x69, 0x6f, 0x6e, 0x73, 0x12, 0x27, 0x0a, 0x0f, 0x73, 0x6f, 0x72, 0x74, 0x5f, 0x70, 0x72, 0x6f,
+	0x70, 0x65, 0x72, 0x74, 0x69, 0x65, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0e, 0x73,
+	0x6f, 0x72, 0x74, 0x50, 0x72, 0x6f, 0x70, 0x65, 0x72, 0x74, 0x69, 0x65, 0x73, 0x22, 0xf2, 0x03,
+	0x0a, 0x18, 0x53, 0x75, 0x62, 0x73, 0x74, 0x69, 0x74, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x46, 0x6f,
+	0x72, 0x6d, 0x61, 0x74, 0x53, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x12, 0x2e, 0x0a, 0x0b, 0x74, 0x65,
+	0x78, 0x74, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42,
+	0x0b, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x18, 0x01, 0x48, 0x00, 0x52, 0x0a,
+	0x74, 0x65, 0x78, 0x74, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0x44, 0x0a, 0x0b, 0x6a, 0x73,
+	0x6f, 0x6e, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x17, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
+	0x66, 0x2e, 0x53, 0x74, 0x72, 0x75, 0x63, 0x74, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02,
+	0x10, 0x01, 0x48, 0x00, 0x52, 0x0a, 0x6a, 0x73, 0x6f, 0x6e, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74,
+	0x12, 0x50, 0x0a, 0x12, 0x74, 0x65, 0x78, 0x74, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x5f,
+	0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x20, 0x2e, 0x65,
+	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65,
+	0x2e, 0x76, 0x33, 0x2e, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x48, 0x00,
+	0x52, 0x10, 0x74, 0x65, 0x78, 0x74, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x53, 0x6f, 0x75, 0x72,
+	0x63, 0x65, 0x12, 0x2a, 0x0a, 0x11, 0x6f, 0x6d, 0x69, 0x74, 0x5f, 0x65, 0x6d, 0x70, 0x74, 0x79,
+	0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0f, 0x6f,
+	0x6d, 0x69, 0x74, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x12, 0x2e,
+	0x0a, 0x0c, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x04,
+	0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc8, 0x01, 0x00, 0xc0, 0x01,
+	0x02, 0x52, 0x0b, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x54, 0x79, 0x70, 0x65, 0x12, 0x4a,
+	0x0a, 0x0a, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x73, 0x18, 0x06, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69,
+	0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x54, 0x79, 0x70, 0x65, 0x64, 0x45,
+	0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x52, 0x0a,
+	0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x74, 0x65, 0x72, 0x73, 0x12, 0x57, 0x0a, 0x13, 0x6a, 0x73,
+	0x6f, 0x6e, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
+	0x73, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x27, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
+	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x2e, 0x4a,
+	0x73, 0x6f, 0x6e, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73,
+	0x52, 0x11, 0x6a, 0x73, 0x6f, 0x6e, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x4f, 0x70, 0x74, 0x69,
+	0x6f, 0x6e, 0x73, 0x42, 0x0d, 0x0a, 0x06, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0x03, 0xf8,
+	0x42, 0x01, 0x42, 0x91, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x22, 0x69,
+	0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76,
+	0x33, 0x42, 0x1d, 0x53, 0x75, 0x62, 0x73, 0x74, 0x69, 0x74, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x46,
+	0x6f, 0x72, 0x6d, 0x61, 0x74, 0x53, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x50, 0x72, 0x6f, 0x74, 0x6f,
+	0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65,
+	0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e,
+	0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b,
+	0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
@@ -291,22 +360,24 @@ func file_envoy_config_core_v3_substitution_format_string_proto_rawDescGZIP() []
 	return file_envoy_config_core_v3_substitution_format_string_proto_rawDescData
 }
 
-var file_envoy_config_core_v3_substitution_format_string_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
+var file_envoy_config_core_v3_substitution_format_string_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_envoy_config_core_v3_substitution_format_string_proto_goTypes = []interface{}{
-	(*SubstitutionFormatString)(nil), // 0: envoy.config.core.v3.SubstitutionFormatString
-	(*_struct.Struct)(nil),           // 1: google.protobuf.Struct
-	(*DataSource)(nil),               // 2: envoy.config.core.v3.DataSource
-	(*TypedExtensionConfig)(nil),     // 3: envoy.config.core.v3.TypedExtensionConfig
+	(*JsonFormatOptions)(nil),        // 0: envoy.config.core.v3.JsonFormatOptions
+	(*SubstitutionFormatString)(nil), // 1: envoy.config.core.v3.SubstitutionFormatString
+	(*_struct.Struct)(nil),           // 2: google.protobuf.Struct
+	(*DataSource)(nil),               // 3: envoy.config.core.v3.DataSource
+	(*TypedExtensionConfig)(nil),     // 4: envoy.config.core.v3.TypedExtensionConfig
 }
 var file_envoy_config_core_v3_substitution_format_string_proto_depIdxs = []int32{
-	1, // 0: envoy.config.core.v3.SubstitutionFormatString.json_format:type_name -> google.protobuf.Struct
-	2, // 1: envoy.config.core.v3.SubstitutionFormatString.text_format_source:type_name -> envoy.config.core.v3.DataSource
-	3, // 2: envoy.config.core.v3.SubstitutionFormatString.formatters:type_name -> envoy.config.core.v3.TypedExtensionConfig
-	3, // [3:3] is the sub-list for method output_type
-	3, // [3:3] is the sub-list for method input_type
-	3, // [3:3] is the sub-list for extension type_name
-	3, // [3:3] is the sub-list for extension extendee
-	0, // [0:3] is the sub-list for field type_name
+	2, // 0: envoy.config.core.v3.SubstitutionFormatString.json_format:type_name -> google.protobuf.Struct
+	3, // 1: envoy.config.core.v3.SubstitutionFormatString.text_format_source:type_name -> envoy.config.core.v3.DataSource
+	4, // 2: envoy.config.core.v3.SubstitutionFormatString.formatters:type_name -> envoy.config.core.v3.TypedExtensionConfig
+	0, // 3: envoy.config.core.v3.SubstitutionFormatString.json_format_options:type_name -> envoy.config.core.v3.JsonFormatOptions
+	4, // [4:4] is the sub-list for method output_type
+	4, // [4:4] is the sub-list for method input_type
+	4, // [4:4] is the sub-list for extension type_name
+	4, // [4:4] is the sub-list for extension extendee
+	0, // [0:4] is the sub-list for field type_name
 }
 
 func init() { file_envoy_config_core_v3_substitution_format_string_proto_init() }
@@ -318,6 +389,18 @@ func file_envoy_config_core_v3_substitution_format_string_proto_init() {
 	file_envoy_config_core_v3_extension_proto_init()
 	if !protoimpl.UnsafeEnabled {
 		file_envoy_config_core_v3_substitution_format_string_proto_msgTypes[0].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*JsonFormatOptions); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_envoy_config_core_v3_substitution_format_string_proto_msgTypes[1].Exporter = func(v interface{}, i int) interface{} {
 			switch v := v.(*SubstitutionFormatString); i {
 			case 0:
 				return &v.state
@@ -330,7 +413,7 @@ func file_envoy_config_core_v3_substitution_format_string_proto_init() {
 			}
 		}
 	}
-	file_envoy_config_core_v3_substitution_format_string_proto_msgTypes[0].OneofWrappers = []interface{}{
+	file_envoy_config_core_v3_substitution_format_string_proto_msgTypes[1].OneofWrappers = []interface{}{
 		(*SubstitutionFormatString_TextFormat)(nil),
 		(*SubstitutionFormatString_JsonFormat)(nil),
 		(*SubstitutionFormatString_TextFormatSource)(nil),
@@ -341,7 +424,7 @@ func file_envoy_config_core_v3_substitution_format_string_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: file_envoy_config_core_v3_substitution_format_string_proto_rawDesc,
 			NumEnums:      0,
-			NumMessages:   1,
+			NumMessages:   2,
 			NumExtensions: 0,
 			NumServices:   0,
 		},
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/substitution_format_string.pb.validate.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/substitution_format_string.pb.validate.go
index 2f3615c0b98..c805d82866a 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/substitution_format_string.pb.validate.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/substitution_format_string.pb.validate.go
@@ -35,6 +35,110 @@ var (
 	_ = sort.Sort
 )
 
+// Validate checks the field values on JsonFormatOptions with the rules defined
+// in the proto definition for this message. If any rules are violated, the
+// first error encountered is returned, or nil if there are no violations.
+func (m *JsonFormatOptions) Validate() error {
+	return m.validate(false)
+}
+
+// ValidateAll checks the field values on JsonFormatOptions with the rules
+// defined in the proto definition for this message. If any rules are
+// violated, the result is a list of violation errors wrapped in
+// JsonFormatOptionsMultiError, or nil if none found.
+func (m *JsonFormatOptions) ValidateAll() error {
+	return m.validate(true)
+}
+
+func (m *JsonFormatOptions) validate(all bool) error {
+	if m == nil {
+		return nil
+	}
+
+	var errors []error
+
+	// no validation rules for SortProperties
+
+	if len(errors) > 0 {
+		return JsonFormatOptionsMultiError(errors)
+	}
+
+	return nil
+}
+
+// JsonFormatOptionsMultiError is an error wrapping multiple validation errors
+// returned by JsonFormatOptions.ValidateAll() if the designated constraints
+// aren't met.
+type JsonFormatOptionsMultiError []error
+
+// Error returns a concatenation of all the error messages it wraps.
+func (m JsonFormatOptionsMultiError) Error() string {
+	var msgs []string
+	for _, err := range m {
+		msgs = append(msgs, err.Error())
+	}
+	return strings.Join(msgs, "; ")
+}
+
+// AllErrors returns a list of validation violation errors.
+func (m JsonFormatOptionsMultiError) AllErrors() []error { return m }
+
+// JsonFormatOptionsValidationError is the validation error returned by
+// JsonFormatOptions.Validate if the designated constraints aren't met.
+type JsonFormatOptionsValidationError struct {
+	field  string
+	reason string
+	cause  error
+	key    bool
+}
+
+// Field function returns field value.
+func (e JsonFormatOptionsValidationError) Field() string { return e.field }
+
+// Reason function returns reason value.
+func (e JsonFormatOptionsValidationError) Reason() string { return e.reason }
+
+// Cause function returns cause value.
+func (e JsonFormatOptionsValidationError) Cause() error { return e.cause }
+
+// Key function returns key value.
+func (e JsonFormatOptionsValidationError) Key() bool { return e.key }
+
+// ErrorName returns error name.
+func (e JsonFormatOptionsValidationError) ErrorName() string {
+	return "JsonFormatOptionsValidationError"
+}
+
+// Error satisfies the builtin error interface
+func (e JsonFormatOptionsValidationError) Error() string {
+	cause := ""
+	if e.cause != nil {
+		cause = fmt.Sprintf(" | caused by: %v", e.cause)
+	}
+
+	key := ""
+	if e.key {
+		key = "key for "
+	}
+
+	return fmt.Sprintf(
+		"invalid %sJsonFormatOptions.%s: %s%s",
+		key,
+		e.field,
+		e.reason,
+		cause)
+}
+
+var _ error = JsonFormatOptionsValidationError{}
+
+var _ interface {
+	Field() string
+	Reason() string
+	Key() bool
+	Cause() error
+	ErrorName() string
+} = JsonFormatOptionsValidationError{}
+
 // Validate checks the field values on SubstitutionFormatString with the rules
 // defined in the proto definition for this message. If any rules are
 // violated, the first error encountered is returned, or nil if there are no violations.
@@ -104,6 +208,35 @@ func (m *SubstitutionFormatString) validate(all bool) error {
 
 	}
 
+	if all {
+		switch v := interface{}(m.GetJsonFormatOptions()).(type) {
+		case interface{ ValidateAll() error }:
+			if err := v.ValidateAll(); err != nil {
+				errors = append(errors, SubstitutionFormatStringValidationError{
+					field:  "JsonFormatOptions",
+					reason: "embedded message failed validation",
+					cause:  err,
+				})
+			}
+		case interface{ Validate() error }:
+			if err := v.Validate(); err != nil {
+				errors = append(errors, SubstitutionFormatStringValidationError{
+					field:  "JsonFormatOptions",
+					reason: "embedded message failed validation",
+					cause:  err,
+				})
+			}
+		}
+	} else if v, ok := interface{}(m.GetJsonFormatOptions()).(interface{ Validate() error }); ok {
+		if err := v.Validate(); err != nil {
+			return SubstitutionFormatStringValidationError{
+				field:  "JsonFormatOptions",
+				reason: "embedded message failed validation",
+				cause:  err,
+			}
+		}
+	}
+
 	oneofFormatPresent := false
 	switch v := m.Format.(type) {
 	case *SubstitutionFormatString_TextFormat:
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/udp_socket_config.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/udp_socket_config.pb.go
index d5ff6d382fb..b7f9f8229b9 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/udp_socket_config.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/config/core/v3/udp_socket_config.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/config/core/v3/udp_socket_config.proto
 
 package corev3
@@ -110,16 +110,16 @@ var file_envoy_config_core_v3_udp_socket_config_proto_rawDesc = []byte{
 	0x70, 0x72, 0x65, 0x66, 0x65, 0x72, 0x5f, 0x67, 0x72, 0x6f, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b,
 	0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
 	0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x09, 0x70, 0x72,
-	0x65, 0x66, 0x65, 0x72, 0x47, 0x72, 0x6f, 0x42, 0x88, 0x01, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
-	0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63, 0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x14,
-	0x55, 0x64, 0x70, 0x53, 0x6f, 0x63, 0x6b, 0x65, 0x74, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x50,
-	0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63,
-	0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f,
-	0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65,
-	0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02,
-	0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x65, 0x66, 0x65, 0x72, 0x47, 0x72, 0x6f, 0x42, 0x88, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02,
+	0x10, 0x02, 0x0a, 0x22, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78,
+	0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x63,
+	0x6f, 0x72, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x14, 0x55, 0x64, 0x70, 0x53, 0x6f, 0x63, 0x6b, 0x65,
+	0x74, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x42,
+	0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c,
+	0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x63, 0x6f, 0x6e,
+	0x66, 0x69, 0x67, 0x2f, 0x63, 0x6f, 0x72, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x63, 0x6f, 0x72, 0x65,
+	0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3/ads.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3/ads.pb.go
index 72cbf33d4ed..65abb236d33 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3/ads.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3/ads.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/service/discovery/v3/ads.proto
 
 package discoveryv3
@@ -101,16 +101,16 @@ var file_envoy_service_discovery_v3_ads_proto_rawDesc = []byte{
 	0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x2e, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72,
 	0x79, 0x2e, 0x76, 0x33, 0x2e, 0x44, 0x65, 0x6c, 0x74, 0x61, 0x44, 0x69, 0x73, 0x63, 0x6f, 0x76,
 	0x65, 0x72, 0x79, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x00, 0x28, 0x01, 0x30,
-	0x01, 0x42, 0x8d, 0x01, 0x0a, 0x28, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72,
-	0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63,
-	0x65, 0x2e, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x2e, 0x76, 0x33, 0x42, 0x08,
-	0x41, 0x64, 0x73, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x4d, 0x67, 0x69, 0x74, 0x68,
-	0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78,
-	0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61,
-	0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65,
-	0x2f, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x2f, 0x76, 0x33, 0x3b, 0x64, 0x69,
-	0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10,
-	0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x01, 0x42, 0x8d, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x28, 0x69, 0x6f,
+	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x2e, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x2e, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76,
+	0x65, 0x72, 0x79, 0x2e, 0x76, 0x33, 0x42, 0x08, 0x41, 0x64, 0x73, 0x50, 0x72, 0x6f, 0x74, 0x6f,
+	0x50, 0x01, 0x5a, 0x4d, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65,
+	0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e,
+	0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x2f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x2f, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65,
+	0x72, 0x79, 0x2f, 0x76, 0x33, 0x3b, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x76,
+	0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3/discovery.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3/discovery.pb.go
index 9586ffd58dc..a39aac288ad 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3/discovery.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3/discovery.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/service/discovery/v3/discovery.proto
 
 package discoveryv3
@@ -171,12 +171,12 @@ type DiscoveryRequest struct {
 	// which will be explicitly enumerated in resource_names.
 	ResourceNames []string `protobuf:"bytes,3,rep,name=resource_names,json=resourceNames,proto3" json:"resource_names,omitempty"`
 	// [#not-implemented-hide:]
-	// Alternative to ``resource_names`` field that allows specifying dynamic
+	// Alternative to “resource_names“ field that allows specifying dynamic
 	// parameters along with each resource name. Clients that populate this
 	// field must be able to handle responses from the server where resources
 	// are wrapped in a Resource message.
 	// Note that it is legal for a request to have some resources listed
-	// in ``resource_names`` and others in ``resource_locators``.
+	// in “resource_names“ and others in “resource_locators“.
 	ResourceLocators []*ResourceLocator `protobuf:"bytes,7,rep,name=resource_locators,json=resourceLocators,proto3" json:"resource_locators,omitempty"`
 	// Type of the resource that is being requested, e.g.
 	// "type.googleapis.com/envoy.api.v2.ClusterLoadAssignment". This is implicit
@@ -190,7 +190,7 @@ type DiscoveryRequest struct {
 	// delta, where it is populated only for new explicit ACKs).
 	ResponseNonce string `protobuf:"bytes,5,opt,name=response_nonce,json=responseNonce,proto3" json:"response_nonce,omitempty"`
 	// This is populated when the previous :ref:`DiscoveryResponse <envoy_v3_api_msg_service.discovery.v3.DiscoveryResponse>`
-	// failed to update configuration. The ``message`` field in ``error_details`` provides the Envoy
+	// failed to update configuration. The “message“ field in “error_details“ provides the Envoy
 	// internal exception related to the failure. It is only intended for consumption during manual
 	// debugging, the string provided is not guaranteed to be stable across Envoy versions.
 	ErrorDetail *status.Status `protobuf:"bytes,6,opt,name=error_detail,json=errorDetail,proto3" json:"error_detail,omitempty"`
@@ -290,17 +290,17 @@ type DiscoveryResponse struct {
 	// [#not-implemented-hide:]
 	// Canary is used to support two Envoy command line flags:
 	//
-	// * --terminate-on-canary-transition-failure. When set, Envoy is able to
-	//   terminate if it detects that configuration is stuck at canary. Consider
-	//   this example sequence of updates:
+	//   - --terminate-on-canary-transition-failure. When set, Envoy is able to
+	//     terminate if it detects that configuration is stuck at canary. Consider
+	//     this example sequence of updates:
 	//   - Management server applies a canary config successfully.
 	//   - Management server rolls back to a production config.
 	//   - Envoy rejects the new production config.
-	//   Since there is no sensible way to continue receiving configuration
-	//   updates, Envoy will then terminate and apply production config from a
-	//   clean slate.
-	// * --dry-run-canary. When set, a canary response will never be applied, only
-	//   validated via a dry run.
+	//     Since there is no sensible way to continue receiving configuration
+	//     updates, Envoy will then terminate and apply production config from a
+	//     clean slate.
+	//   - --dry-run-canary. When set, a canary response will never be applied, only
+	//     validated via a dry run.
 	Canary bool `protobuf:"varint,3,opt,name=canary,proto3" json:"canary,omitempty"`
 	// Type URL for resources. Identifies the xDS API when muxing over ADS.
 	// Must be consistent with the type_url in the 'resources' repeated Any (if non-empty).
@@ -433,9 +433,9 @@ type DeltaDiscoveryRequest struct {
 	// The node making the request.
 	Node *v3.Node `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
 	// Type of the resource that is being requested, e.g.
-	// ``type.googleapis.com/envoy.api.v2.ClusterLoadAssignment``. This does not need to be set if
-	// resources are only referenced via ``xds_resource_subscribe`` and
-	// ``xds_resources_unsubscribe``.
+	// “type.googleapis.com/envoy.api.v2.ClusterLoadAssignment“. This does not need to be set if
+	// resources are only referenced via “xds_resource_subscribe“ and
+	// “xds_resources_unsubscribe“.
 	TypeUrl string `protobuf:"bytes,2,opt,name=type_url,json=typeUrl,proto3" json:"type_url,omitempty"`
 	// DeltaDiscoveryRequests allow the client to add or remove individual
 	// resources to the set of tracked resources in the context of a stream.
@@ -462,16 +462,16 @@ type DeltaDiscoveryRequest struct {
 	// A list of Resource names to remove from the list of tracked resources.
 	ResourceNamesUnsubscribe []string `protobuf:"bytes,4,rep,name=resource_names_unsubscribe,json=resourceNamesUnsubscribe,proto3" json:"resource_names_unsubscribe,omitempty"`
 	// [#not-implemented-hide:]
-	// Alternative to ``resource_names_subscribe`` field that allows specifying dynamic parameters
+	// Alternative to “resource_names_subscribe“ field that allows specifying dynamic parameters
 	// along with each resource name.
 	// Note that it is legal for a request to have some resources listed
-	// in ``resource_names_subscribe`` and others in ``resource_locators_subscribe``.
+	// in “resource_names_subscribe“ and others in “resource_locators_subscribe“.
 	ResourceLocatorsSubscribe []*ResourceLocator `protobuf:"bytes,8,rep,name=resource_locators_subscribe,json=resourceLocatorsSubscribe,proto3" json:"resource_locators_subscribe,omitempty"`
 	// [#not-implemented-hide:]
-	// Alternative to ``resource_names_unsubscribe`` field that allows specifying dynamic parameters
+	// Alternative to “resource_names_unsubscribe“ field that allows specifying dynamic parameters
 	// along with each resource name.
 	// Note that it is legal for a request to have some resources listed
-	// in ``resource_names_unsubscribe`` and others in ``resource_locators_unsubscribe``.
+	// in “resource_names_unsubscribe“ and others in “resource_locators_unsubscribe“.
 	ResourceLocatorsUnsubscribe []*ResourceLocator `protobuf:"bytes,9,rep,name=resource_locators_unsubscribe,json=resourceLocatorsUnsubscribe,proto3" json:"resource_locators_unsubscribe,omitempty"`
 	// Informs the server of the versions of the resources the xDS client knows of, to enable the
 	// client to continue the same logical xDS session even in the face of gRPC stream reconnection.
@@ -488,7 +488,7 @@ type DeltaDiscoveryRequest struct {
 	// Otherwise (unlike in DiscoveryRequest) response_nonce must be omitted.
 	ResponseNonce string `protobuf:"bytes,6,opt,name=response_nonce,json=responseNonce,proto3" json:"response_nonce,omitempty"`
 	// This is populated when the previous :ref:`DiscoveryResponse <envoy_v3_api_msg_service.discovery.v3.DiscoveryResponse>`
-	// failed to update configuration. The ``message`` field in ``error_details``
+	// failed to update configuration. The “message“ field in “error_details“
 	// provides the Envoy internal exception related to the failure.
 	ErrorDetail *status.Status `protobuf:"bytes,7,opt,name=error_detail,json=errorDetail,proto3" json:"error_detail,omitempty"`
 }
@@ -710,6 +710,7 @@ type DynamicParameterConstraints struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Type:
+	//
 	//	*DynamicParameterConstraints_Constraint
 	//	*DynamicParameterConstraints_OrConstraints
 	//	*DynamicParameterConstraints_AndConstraints
@@ -824,12 +825,12 @@ type Resource struct {
 	unknownFields protoimpl.UnknownFields
 
 	// The resource's name, to distinguish it from others of the same type of resource.
-	// Only one of ``name`` or ``resource_name`` may be set.
+	// Only one of “name“ or “resource_name“ may be set.
 	Name string `protobuf:"bytes,3,opt,name=name,proto3" json:"name,omitempty"`
-	// Alternative to the ``name`` field, to be used when the server supports
+	// Alternative to the “name“ field, to be used when the server supports
 	// multiple variants of the named resource that are differentiated by
 	// dynamic parameter constraints.
-	// Only one of ``name`` or ``resource_name`` may be set.
+	// Only one of “name“ or “resource_name“ may be set.
 	ResourceName *ResourceName `protobuf:"bytes,8,opt,name=resource_name,json=resourceName,proto3" json:"resource_name,omitempty"`
 	// The aliases are a list of other names that this resource can go by.
 	Aliases []string `protobuf:"bytes,4,rep,name=aliases,proto3" json:"aliases,omitempty"`
@@ -957,6 +958,7 @@ type DynamicParameterConstraints_SingleConstraint struct {
 	// The key to match against.
 	Key string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
 	// Types that are assignable to ConstraintType:
+	//
 	//	*DynamicParameterConstraints_SingleConstraint_Value
 	//	*DynamicParameterConstraints_SingleConstraint_Exists_
 	ConstraintType isDynamicParameterConstraints_SingleConstraint_ConstraintType `protobuf_oneof:"constraint_type"`
@@ -1427,16 +1429,16 @@ var file_envoy_service_discovery_v3_discovery_proto_rawDesc = []byte{
 	0x61, 0x63, 0x68, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0a, 0x64, 0x6f, 0x4e, 0x6f,
 	0x74, 0x43, 0x61, 0x63, 0x68, 0x65, 0x3a, 0x1c, 0x9a, 0xc5, 0x88, 0x1e, 0x17, 0x0a, 0x15, 0x65,
 	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x52, 0x65, 0x73, 0x6f,
-	0x75, 0x72, 0x63, 0x65, 0x42, 0x93, 0x01, 0x0a, 0x28, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x73, 0x65, 0x72,
-	0x76, 0x69, 0x63, 0x65, 0x2e, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x2e, 0x76,
-	0x33, 0x42, 0x0e, 0x44, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x50, 0x72, 0x6f, 0x74,
-	0x6f, 0x50, 0x01, 0x5a, 0x4d, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f,
-	0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x2f, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76,
-	0x65, 0x72, 0x79, 0x2f, 0x76, 0x33, 0x3b, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79,
-	0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74,
+	0x75, 0x72, 0x63, 0x65, 0x42, 0x93, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a,
+	0x28, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65,
+	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x2e, 0x64, 0x69, 0x73,
+	0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x2e, 0x76, 0x33, 0x42, 0x0e, 0x44, 0x69, 0x73, 0x63, 0x6f,
+	0x76, 0x65, 0x72, 0x79, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x4d, 0x67, 0x69, 0x74,
+	0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f,
+	0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c,
+	0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63,
+	0x65, 0x2f, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x2f, 0x76, 0x33, 0x3b, 0x64,
+	0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74,
 	0x6f, 0x33,
 }
 
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/filter_state.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/filter_state.pb.go
index 4ad1d1ce3f0..65948905376 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/filter_state.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/filter_state.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/matcher/v3/filter_state.proto
 
 package matcherv3
@@ -31,6 +31,7 @@ type FilterStateMatcher struct {
 	// The filter state key to retrieve the object.
 	Key string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
 	// Types that are assignable to Matcher:
+	//
 	//	*FilterStateMatcher_StringMatch
 	Matcher isFilterStateMatcher_Matcher `protobuf_oneof:"matcher"`
 }
@@ -120,16 +121,16 @@ var file_envoy_type_matcher_v3_filter_state_proto_rawDesc = []byte{
 	0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x2e, 0x53, 0x74,
 	0x72, 0x69, 0x6e, 0x67, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x48, 0x00, 0x52, 0x0b, 0x73,
 	0x74, 0x72, 0x69, 0x6e, 0x67, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x42, 0x0e, 0x0a, 0x07, 0x6d, 0x61,
-	0x74, 0x63, 0x68, 0x65, 0x72, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x89, 0x01, 0x0a, 0x23, 0x69,
-	0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76,
-	0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e,
-	0x76, 0x33, 0x42, 0x10, 0x46, 0x69, 0x6c, 0x74, 0x65, 0x72, 0x53, 0x74, 0x61, 0x74, 0x65, 0x50,
-	0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63,
-	0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f,
-	0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65,
-	0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0xba, 0x80,
-	0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x74, 0x63, 0x68, 0x65, 0x72, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x89, 0x01, 0xba, 0x80, 0xc8,
+	0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70,
+	0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e,
+	0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x10, 0x46, 0x69, 0x6c, 0x74,
+	0x65, 0x72, 0x53, 0x74, 0x61, 0x74, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46,
+	0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c,
+	0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70,
+	0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74,
+	0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/http_inputs.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/http_inputs.pb.go
index be7272b47ef..01bf97506a3 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/http_inputs.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/http_inputs.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/matcher/v3/http_inputs.proto
 
 package matcherv3
@@ -304,36 +304,36 @@ var file_envoy_type_matcher_v3_http_inputs_proto_rawDesc = []byte{
 	0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4d, 0x61, 0x74,
 	0x63, 0x68, 0x49, 0x6e, 0x70, 0x75, 0x74, 0x12, 0x2c, 0x0a, 0x0b, 0x68, 0x65, 0x61, 0x64, 0x65,
 	0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42,
-	0x08, 0x72, 0x06, 0xc0, 0x01, 0x01, 0xc8, 0x01, 0x00, 0x52, 0x0a, 0x68, 0x65, 0x61, 0x64, 0x65,
+	0x08, 0x72, 0x06, 0xc8, 0x01, 0x00, 0xc0, 0x01, 0x01, 0x52, 0x0a, 0x68, 0x65, 0x61, 0x64, 0x65,
 	0x72, 0x4e, 0x61, 0x6d, 0x65, 0x22, 0x4c, 0x0a, 0x1c, 0x48, 0x74, 0x74, 0x70, 0x52, 0x65, 0x71,
 	0x75, 0x65, 0x73, 0x74, 0x54, 0x72, 0x61, 0x69, 0x6c, 0x65, 0x72, 0x4d, 0x61, 0x74, 0x63, 0x68,
 	0x49, 0x6e, 0x70, 0x75, 0x74, 0x12, 0x2c, 0x0a, 0x0b, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x5f,
 	0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72,
-	0x06, 0xc0, 0x01, 0x01, 0xc8, 0x01, 0x00, 0x52, 0x0a, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4e,
+	0x06, 0xc8, 0x01, 0x00, 0xc0, 0x01, 0x01, 0x52, 0x0a, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4e,
 	0x61, 0x6d, 0x65, 0x22, 0x4c, 0x0a, 0x1c, 0x48, 0x74, 0x74, 0x70, 0x52, 0x65, 0x73, 0x70, 0x6f,
 	0x6e, 0x73, 0x65, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x49, 0x6e,
 	0x70, 0x75, 0x74, 0x12, 0x2c, 0x0a, 0x0b, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x5f, 0x6e, 0x61,
-	0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc0,
-	0x01, 0x01, 0xc8, 0x01, 0x00, 0x52, 0x0a, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4e, 0x61, 0x6d,
+	0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc8,
+	0x01, 0x00, 0xc0, 0x01, 0x01, 0x52, 0x0a, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4e, 0x61, 0x6d,
 	0x65, 0x22, 0x4d, 0x0a, 0x1d, 0x48, 0x74, 0x74, 0x70, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73,
 	0x65, 0x54, 0x72, 0x61, 0x69, 0x6c, 0x65, 0x72, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x49, 0x6e, 0x70,
 	0x75, 0x74, 0x12, 0x2c, 0x0a, 0x0b, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x5f, 0x6e, 0x61, 0x6d,
-	0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc0, 0x01,
-	0x01, 0xc8, 0x01, 0x00, 0x52, 0x0a, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4e, 0x61, 0x6d, 0x65,
+	0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b, 0xfa, 0x42, 0x08, 0x72, 0x06, 0xc8, 0x01,
+	0x00, 0xc0, 0x01, 0x01, 0x52, 0x0a, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x4e, 0x61, 0x6d, 0x65,
 	0x22, 0x4b, 0x0a, 0x1f, 0x48, 0x74, 0x74, 0x70, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x51,
 	0x75, 0x65, 0x72, 0x79, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x49, 0x6e,
 	0x70, 0x75, 0x74, 0x12, 0x28, 0x0a, 0x0b, 0x71, 0x75, 0x65, 0x72, 0x79, 0x5f, 0x70, 0x61, 0x72,
 	0x61, 0x6d, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10,
 	0x01, 0x52, 0x0a, 0x71, 0x75, 0x65, 0x72, 0x79, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x42, 0x88, 0x01,
-	0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68,
-	0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x0f, 0x48, 0x74, 0x74, 0x70, 0x49, 0x6e, 0x70, 0x75, 0x74,
-	0x73, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62,
-	0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f,
-	0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65,
-	0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63,
-	0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33,
-	0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79,
+	0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x0f, 0x48,
+	0x74, 0x74, 0x70, 0x49, 0x6e, 0x70, 0x75, 0x74, 0x73, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01,
+	0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72,
+	0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74,
+	0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d,
+	0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/metadata.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/metadata.pb.go
index ef57a33bdcd..91534f4b126 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/metadata.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/metadata.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/matcher/v3/metadata.proto
 
 package matcherv3
@@ -107,6 +107,7 @@ type MetadataMatcher_PathSegment struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Segment:
+	//
 	//	*MetadataMatcher_PathSegment_Key
 	Segment isMetadataMatcher_PathSegment_Segment `protobuf_oneof:"segment"`
 }
@@ -207,15 +208,15 @@ var file_envoy_type_matcher_v3_metadata_proto_rawDesc = []byte{
 	0x42, 0x01, 0x3a, 0x29, 0x9a, 0xc5, 0x88, 0x1e, 0x24, 0x0a, 0x22, 0x65, 0x6e, 0x76, 0x6f, 0x79,
 	0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x4d, 0x65,
 	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x86, 0x01,
-	0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68,
-	0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x0d, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x50,
-	0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63,
-	0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f,
-	0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65,
-	0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0xba, 0x80,
-	0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79,
+	0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x0d, 0x4d,
+	0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46,
+	0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c,
+	0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70,
+	0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74,
+	0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/node.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/node.pb.go
index b2e12c84a88..1274f799c8e 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/node.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/node.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/matcher/v3/node.proto
 
 package matcherv3
@@ -107,15 +107,15 @@ var file_envoy_type_matcher_v3_node_proto_rawDesc = []byte{
 	0x52, 0x0d, 0x6e, 0x6f, 0x64, 0x65, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x73, 0x3a,
 	0x25, 0x9a, 0xc5, 0x88, 0x1e, 0x20, 0x0a, 0x1e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79,
 	0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x4e, 0x6f, 0x64, 0x65, 0x4d,
-	0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x82, 0x01, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e,
-	0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74,
-	0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x09,
-	0x4e, 0x6f, 0x64, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74,
-	0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f,
-	0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c,
-	0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d,
-	0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65,
-	0x72, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f,
+	0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x82, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10,
+	0x02, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79,
+	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63,
+	0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x09, 0x4e, 0x6f, 0x64, 0x65, 0x50, 0x72, 0x6f, 0x74,
+	0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f,
+	0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76,
+	0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f,
 	0x74, 0x6f, 0x33,
 }
 
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/number.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/number.pb.go
index 251d139a120..99733ecf4b7 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/number.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/number.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/matcher/v3/number.proto
 
 package matcherv3
@@ -30,6 +30,7 @@ type DoubleMatcher struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to MatchPattern:
+	//
 	//	*DoubleMatcher_Range
 	//	*DoubleMatcher_Exact
 	MatchPattern isDoubleMatcher_MatchPattern `protobuf_oneof:"match_pattern"`
@@ -131,15 +132,15 @@ var file_envoy_type_matcher_v3_number_proto_rawDesc = []byte{
 	0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x44, 0x6f, 0x75, 0x62, 0x6c,
 	0x65, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x14, 0x0a, 0x0d, 0x6d, 0x61, 0x74, 0x63,
 	0x68, 0x5f, 0x70, 0x61, 0x74, 0x74, 0x65, 0x72, 0x6e, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x84,
-	0x01, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79,
-	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63,
-	0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x0b, 0x4e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x50, 0x72,
-	0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f,
-	0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d,
-	0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e,
-	0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72,
-	0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0xba, 0x80, 0xc8,
-	0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e,
+	0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74,
+	0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x0b,
+	0x4e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67,
+	0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70,
+	0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d,
+	0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65,
+	0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63,
+	0x68, 0x65, 0x72, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/path.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/path.pb.go
index ddadfb0cadb..8854b2c485b 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/path.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/path.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/matcher/v3/path.proto
 
 package matcherv3
@@ -29,6 +29,7 @@ type PathMatcher struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Rule:
+	//
 	//	*PathMatcher_Path
 	Rule isPathMatcher_Rule `protobuf_oneof:"rule"`
 }
@@ -84,9 +85,9 @@ type isPathMatcher_Rule interface {
 }
 
 type PathMatcher_Path struct {
-	// The ``path`` must match the URL path portion of the :path header. The query and fragment
+	// The “path“ must match the URL path portion of the :path header. The query and fragment
 	// string (if present) are removed in the URL path portion.
-	// For example, the path ``/data`` will match the ``:path`` header ``/data#fragment?param=value``.
+	// For example, the path “/data“ will match the “:path“ header “/data#fragment?param=value“.
 	Path *StringMatcher `protobuf:"bytes,1,opt,name=path,proto3,oneof"`
 }
 
@@ -115,15 +116,15 @@ var file_envoy_type_matcher_v3_path_proto_rawDesc = []byte{
 	0x9a, 0xc5, 0x88, 0x1e, 0x20, 0x0a, 0x1e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70,
 	0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x50, 0x61, 0x74, 0x68, 0x4d, 0x61,
 	0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x0b, 0x0a, 0x04, 0x72, 0x75, 0x6c, 0x65, 0x12, 0x03, 0xf8,
-	0x42, 0x01, 0x42, 0x82, 0x01, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70,
-	0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e,
-	0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x09, 0x50, 0x61, 0x74, 0x68,
-	0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e,
-	0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67,
-	0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68,
-	0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0xba,
-	0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x42, 0x01, 0x42, 0x82, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x23, 0x69,
+	0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e,
+	0x76, 0x33, 0x42, 0x09, 0x50, 0x61, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a,
+	0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f,
+	0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79,
+	0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61,
+	0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/regex.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/regex.pb.go
index 38a3bce81c9..c95338e39e8 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/regex.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/regex.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/matcher/v3/regex.proto
 
 package matcherv3
@@ -31,6 +31,7 @@ type RegexMatcher struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to EngineType:
+	//
 	//	*RegexMatcher_GoogleRe2
 	EngineType isRegexMatcher_EngineType `protobuf_oneof:"engine_type"`
 	// The regex match string. The string must be supported by the configured engine. The regex is matched
@@ -77,7 +78,7 @@ func (m *RegexMatcher) GetEngineType() isRegexMatcher_EngineType {
 	return nil
 }
 
-// Deprecated: Do not use.
+// Deprecated: Marked as deprecated in envoy/type/matcher/v3/regex.proto.
 func (x *RegexMatcher) GetGoogleRe2() *RegexMatcher_GoogleRE2 {
 	if x, ok := x.GetEngineType().(*RegexMatcher_GoogleRe2); ok {
 		return x.GoogleRe2
@@ -99,7 +100,7 @@ type isRegexMatcher_EngineType interface {
 type RegexMatcher_GoogleRe2 struct {
 	// Google's RE2 regex engine.
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/type/matcher/v3/regex.proto.
 	GoogleRe2 *RegexMatcher_GoogleRE2 `protobuf:"bytes,1,opt,name=google_re2,json=googleRe2,proto3,oneof"`
 }
 
@@ -129,7 +130,7 @@ type RegexMatchAndSubstitute struct {
 	// defined by the chosen regular expression engine. Google's `RE2
 	// <https://github.com/google/re2>`_ regular expression engine uses a
 	// backslash followed by the capture group number to denote a numbered
-	// capture group. E.g., ``\1`` refers to capture group 1, and ``\2`` refers
+	// capture group. E.g., “\1“ refers to capture group 1, and “\2“ refers
 	// to capture group 2.
 	Substitution string `protobuf:"bytes,2,opt,name=substitution,proto3" json:"substitution,omitempty"`
 }
@@ -184,14 +185,14 @@ func (x *RegexMatchAndSubstitute) GetSubstitution() string {
 // the documented `syntax <https://github.com/google/re2/wiki/Syntax>`_. The engine is designed
 // to complete execution in linear time as well as limit the amount of memory used.
 //
-// Envoy supports program size checking via runtime. The runtime keys ``re2.max_program_size.error_level``
-// and ``re2.max_program_size.warn_level`` can be set to integers as the maximum program size or
+// Envoy supports program size checking via runtime. The runtime keys “re2.max_program_size.error_level“
+// and “re2.max_program_size.warn_level“ can be set to integers as the maximum program size or
 // complexity that a compiled regex can have before an exception is thrown or a warning is
-// logged, respectively. ``re2.max_program_size.error_level`` defaults to 100, and
-// ``re2.max_program_size.warn_level`` has no default if unset (will not check/log a warning).
+// logged, respectively. “re2.max_program_size.error_level“ defaults to 100, and
+// “re2.max_program_size.warn_level“ has no default if unset (will not check/log a warning).
 //
-// Envoy emits two stats for tracking the program size of regexes: the histogram ``re2.program_size``,
-// which records the program size, and the counter ``re2.exceeded_warn_level``, which is incremented
+// Envoy emits two stats for tracking the program size of regexes: the histogram “re2.program_size“,
+// which records the program size, and the counter “re2.exceeded_warn_level“, which is incremented
 // each time the program size exceeds the warn level threshold.
 type RegexMatcher_GoogleRE2 struct {
 	state         protoimpl.MessageState
@@ -208,11 +209,10 @@ type RegexMatcher_GoogleRE2 struct {
 	//
 	// .. note::
 	//
-	//  Although this field is deprecated, the program size will still be checked against the
-	//  global ``re2.max_program_size.error_level`` runtime value.
-	//
+	//	Although this field is deprecated, the program size will still be checked against the
+	//	global ``re2.max_program_size.error_level`` runtime value.
 	//
-	// Deprecated: Do not use.
+	// Deprecated: Marked as deprecated in envoy/type/matcher/v3/regex.proto.
 	MaxProgramSize *wrappers.UInt32Value `protobuf:"bytes,1,opt,name=max_program_size,json=maxProgramSize,proto3" json:"max_program_size,omitempty"`
 }
 
@@ -248,7 +248,7 @@ func (*RegexMatcher_GoogleRE2) Descriptor() ([]byte, []int) {
 	return file_envoy_type_matcher_v3_regex_proto_rawDescGZIP(), []int{0, 0}
 }
 
-// Deprecated: Do not use.
+// Deprecated: Marked as deprecated in envoy/type/matcher/v3/regex.proto.
 func (x *RegexMatcher_GoogleRE2) GetMaxProgramSize() *wrappers.UInt32Value {
 	if x != nil {
 		return x.MaxProgramSize
@@ -278,15 +278,15 @@ var file_envoy_type_matcher_v3_regex_proto_rawDesc = []byte{
 	0x2d, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74,
 	0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x2e, 0x52, 0x65, 0x67, 0x65, 0x78, 0x4d, 0x61, 0x74,
 	0x63, 0x68, 0x65, 0x72, 0x2e, 0x47, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x52, 0x45, 0x32, 0x42, 0x0b,
-	0x18, 0x01, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x48, 0x00, 0x52, 0x09, 0x67,
+	0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x18, 0x01, 0x48, 0x00, 0x52, 0x09, 0x67,
 	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x52, 0x65, 0x32, 0x12, 0x1d, 0x0a, 0x05, 0x72, 0x65, 0x67, 0x65,
 	0x78, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x07, 0xfa, 0x42, 0x04, 0x72, 0x02, 0x10, 0x01,
 	0x52, 0x05, 0x72, 0x65, 0x67, 0x65, 0x78, 0x1a, 0x92, 0x01, 0x0a, 0x09, 0x47, 0x6f, 0x6f, 0x67,
 	0x6c, 0x65, 0x52, 0x45, 0x32, 0x12, 0x53, 0x0a, 0x10, 0x6d, 0x61, 0x78, 0x5f, 0x70, 0x72, 0x6f,
 	0x67, 0x72, 0x61, 0x6d, 0x5f, 0x73, 0x69, 0x7a, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32,
 	0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
-	0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x0b, 0x18,
-	0x01, 0x92, 0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x52, 0x0e, 0x6d, 0x61, 0x78, 0x50,
+	0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74, 0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x42, 0x0b, 0x92,
+	0xc7, 0x86, 0xd8, 0x04, 0x03, 0x33, 0x2e, 0x30, 0x18, 0x01, 0x52, 0x0e, 0x6d, 0x61, 0x78, 0x50,
 	0x72, 0x6f, 0x67, 0x72, 0x61, 0x6d, 0x53, 0x69, 0x7a, 0x65, 0x3a, 0x30, 0x9a, 0xc5, 0x88, 0x1e,
 	0x2b, 0x0a, 0x29, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61,
 	0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x67, 0x65, 0x78, 0x4d, 0x61, 0x74, 0x63, 0x68,
@@ -302,20 +302,20 @@ var file_envoy_type_matcher_v3_regex_proto_rawDesc = []byte{
 	0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52,
 	0x07, 0x70, 0x61, 0x74, 0x74, 0x65, 0x72, 0x6e, 0x12, 0x2f, 0x0a, 0x0c, 0x73, 0x75, 0x62, 0x73,
 	0x74, 0x69, 0x74, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42, 0x0b,
-	0xfa, 0x42, 0x08, 0x72, 0x06, 0xc0, 0x01, 0x02, 0xc8, 0x01, 0x00, 0x52, 0x0c, 0x73, 0x75, 0x62,
+	0xfa, 0x42, 0x08, 0x72, 0x06, 0xc8, 0x01, 0x00, 0xc0, 0x01, 0x02, 0x52, 0x0c, 0x73, 0x75, 0x62,
 	0x73, 0x74, 0x69, 0x74, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x3a, 0x31, 0x9a, 0xc5, 0x88, 0x1e, 0x2c,
 	0x0a, 0x2a, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74,
 	0x63, 0x68, 0x65, 0x72, 0x2e, 0x52, 0x65, 0x67, 0x65, 0x78, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x41,
-	0x6e, 0x64, 0x53, 0x75, 0x62, 0x73, 0x74, 0x69, 0x74, 0x75, 0x74, 0x65, 0x42, 0x83, 0x01, 0x0a,
-	0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65,
-	0x72, 0x2e, 0x76, 0x33, 0x42, 0x0a, 0x52, 0x65, 0x67, 0x65, 0x78, 0x50, 0x72, 0x6f, 0x74, 0x6f,
-	0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e,
-	0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79,
-	0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33,
-	0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02,
-	0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x6e, 0x64, 0x53, 0x75, 0x62, 0x73, 0x74, 0x69, 0x74, 0x75, 0x74, 0x65, 0x42, 0x83, 0x01, 0xba,
+	0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70,
+	0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x0a, 0x52, 0x65,
+	0x67, 0x65, 0x78, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68,
+	0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78,
+	0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61,
+	0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61,
+	0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72,
+	0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/status_code_input.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/status_code_input.pb.go
index 2209a7d5c62..618f84d5961 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/status_code_input.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/status_code_input.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/matcher/v3/status_code_input.proto
 
 package matcherv3
@@ -115,16 +115,16 @@ var file_envoy_type_matcher_v3_status_code_input_proto_rawDesc = []byte{
 	0x61, 0x74, 0x63, 0x68, 0x49, 0x6e, 0x70, 0x75, 0x74, 0x22, 0x27, 0x0a, 0x25, 0x48, 0x74, 0x74,
 	0x70, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x53, 0x74, 0x61, 0x74, 0x75, 0x73, 0x43,
 	0x6f, 0x64, 0x65, 0x43, 0x6c, 0x61, 0x73, 0x73, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x49, 0x6e, 0x70,
-	0x75, 0x74, 0x42, 0x8d, 0x01, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70,
-	0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e,
-	0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x14, 0x53, 0x74, 0x61, 0x74,
-	0x75, 0x73, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x70, 0x75, 0x74, 0x50, 0x72, 0x6f, 0x74, 0x6f,
-	0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e,
-	0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79,
-	0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33,
-	0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02,
-	0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x75, 0x74, 0x42, 0x8d, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x23, 0x69,
+	0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e,
+	0x76, 0x33, 0x42, 0x14, 0x53, 0x74, 0x61, 0x74, 0x75, 0x73, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e,
+	0x70, 0x75, 0x74, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68,
+	0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78,
+	0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61,
+	0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61,
+	0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72,
+	0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/string.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/string.pb.go
index 65d589aa6a5..3fec38decc7 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/string.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/string.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/matcher/v3/string.proto
 
 package matcherv3
@@ -30,6 +30,7 @@ type StringMatcher struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to MatchPattern:
+	//
 	//	*StringMatcher_Exact
 	//	*StringMatcher_Prefix
 	//	*StringMatcher_Suffix
@@ -38,7 +39,7 @@ type StringMatcher struct {
 	MatchPattern isStringMatcher_MatchPattern `protobuf_oneof:"match_pattern"`
 	// If true, indicates the exact/prefix/suffix/contains matching should be case insensitive. This
 	// has no effect for the safe_regex match.
-	// For example, the matcher ``data`` will match both input string ``Data`` and ``data`` if set to true.
+	// For example, the matcher “data“ will match both input string “Data“ and “data“ if set to true.
 	IgnoreCase bool `protobuf:"varint,6,opt,name=ignore_case,json=ignoreCase,proto3" json:"ignore_case,omitempty"`
 }
 
@@ -132,7 +133,7 @@ type StringMatcher_Exact struct {
 	//
 	// Examples:
 	//
-	// * ``abc`` only matches the value ``abc``.
+	// * “abc“ only matches the value “abc“.
 	Exact string `protobuf:"bytes,1,opt,name=exact,proto3,oneof"`
 }
 
@@ -142,7 +143,7 @@ type StringMatcher_Prefix struct {
 	//
 	// Examples:
 	//
-	// * ``abc`` matches the value ``abc.xyz``
+	// * “abc“ matches the value “abc.xyz“
 	Prefix string `protobuf:"bytes,2,opt,name=prefix,proto3,oneof"`
 }
 
@@ -152,7 +153,7 @@ type StringMatcher_Suffix struct {
 	//
 	// Examples:
 	//
-	// * ``abc`` matches the value ``xyz.abc``
+	// * “abc“ matches the value “xyz.abc“
 	Suffix string `protobuf:"bytes,3,opt,name=suffix,proto3,oneof"`
 }
 
@@ -167,7 +168,7 @@ type StringMatcher_Contains struct {
 	//
 	// Examples:
 	//
-	// * ``abc`` matches the value ``xyz.abc.def``
+	// * “abc“ matches the value “xyz.abc.def“
 	Contains string `protobuf:"bytes,7,opt,name=contains,proto3,oneof"`
 }
 
@@ -273,16 +274,16 @@ var file_envoy_type_matcher_v3_string_proto_rawDesc = []byte{
 	0x92, 0x01, 0x02, 0x08, 0x01, 0x52, 0x08, 0x70, 0x61, 0x74, 0x74, 0x65, 0x72, 0x6e, 0x73, 0x3a,
 	0x2b, 0x9a, 0xc5, 0x88, 0x1e, 0x26, 0x0a, 0x24, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79,
 	0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x53,
-	0x74, 0x72, 0x69, 0x6e, 0x67, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x84, 0x01, 0x0a,
-	0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65,
-	0x72, 0x2e, 0x76, 0x33, 0x42, 0x0b, 0x53, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x50, 0x72, 0x6f, 0x74,
-	0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f,
-	0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76,
-	0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06,
-	0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x74, 0x72, 0x69, 0x6e, 0x67, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x84, 0x01, 0xba,
+	0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70,
+	0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x0b, 0x53, 0x74,
+	0x72, 0x69, 0x6e, 0x67, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74,
+	0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f,
+	0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c,
+	0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d,
+	0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65,
+	0x72, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/struct.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/struct.pb.go
index 294fa99d84e..1ecb4ce095d 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/struct.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/struct.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/matcher/v3/struct.proto
 
 package matcherv3
@@ -23,54 +23,54 @@ const (
 )
 
 // StructMatcher provides a general interface to check if a given value is matched in
-// google.protobuf.Struct. It uses ``path`` to retrieve the value
+// google.protobuf.Struct. It uses “path“ to retrieve the value
 // from the struct and then check if it's matched to the specified value.
 //
 // For example, for the following Struct:
 //
 // .. code-block:: yaml
 //
-//        fields:
-//          a:
-//            struct_value:
-//              fields:
-//                b:
-//                  struct_value:
-//                    fields:
-//                      c:
-//                        string_value: pro
-//                t:
-//                  list_value:
-//                    values:
-//                      - string_value: m
-//                      - string_value: n
+//	fields:
+//	  a:
+//	    struct_value:
+//	      fields:
+//	        b:
+//	          struct_value:
+//	            fields:
+//	              c:
+//	                string_value: pro
+//	        t:
+//	          list_value:
+//	            values:
+//	              - string_value: m
+//	              - string_value: n
 //
 // The following MetadataMatcher is matched as the path [a, b, c] will retrieve a string value "pro"
 // from the Metadata which is matched to the specified prefix match.
 //
 // .. code-block:: yaml
 //
-//    path:
-//    - key: a
-//    - key: b
-//    - key: c
-//    value:
-//      string_match:
-//        prefix: pr
+//	path:
+//	- key: a
+//	- key: b
+//	- key: c
+//	value:
+//	  string_match:
+//	    prefix: pr
 //
 // The following StructMatcher is matched as the code will match one of the string values in the
 // list at the path [a, t].
 //
 // .. code-block:: yaml
 //
-//    path:
-//    - key: a
-//    - key: t
-//    value:
-//      list_match:
-//        one_of:
-//          string_match:
-//            exact: m
+//	path:
+//	- key: a
+//	- key: t
+//	value:
+//	  list_match:
+//	    one_of:
+//	      string_match:
+//	        exact: m
 //
 // An example use of StructMatcher is to match metadata in envoy.v*.core.Node.
 type StructMatcher struct {
@@ -137,6 +137,7 @@ type StructMatcher_PathSegment struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Segment:
+	//
 	//	*StructMatcher_PathSegment_Key
 	Segment isStructMatcher_PathSegment_Segment `protobuf_oneof:"segment"`
 }
@@ -232,16 +233,16 @@ var file_envoy_type_matcher_v3_struct_proto_rawDesc = []byte{
 	0x74, 0x42, 0x0e, 0x0a, 0x07, 0x73, 0x65, 0x67, 0x6d, 0x65, 0x6e, 0x74, 0x12, 0x03, 0xf8, 0x42,
 	0x01, 0x3a, 0x27, 0x9a, 0xc5, 0x88, 0x1e, 0x22, 0x0a, 0x20, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
 	0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x53, 0x74, 0x72,
-	0x75, 0x63, 0x74, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x84, 0x01, 0x0a, 0x23, 0x69,
-	0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76,
-	0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e,
-	0x76, 0x33, 0x42, 0x0b, 0x53, 0x74, 0x72, 0x75, 0x63, 0x74, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50,
-	0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e,
-	0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74,
-	0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f,
-	0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b,
-	0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10,
-	0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x75, 0x63, 0x74, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x84, 0x01, 0xba, 0x80, 0xc8,
+	0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70,
+	0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e,
+	0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x0b, 0x53, 0x74, 0x72, 0x75,
+	0x63, 0x74, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75,
+	0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79,
+	0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e,
+	0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74,
+	0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76,
+	0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/value.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/value.pb.go
index 0a694d08539..851261eb6c7 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/value.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/value.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/matcher/v3/value.proto
 
 package matcherv3
@@ -24,7 +24,7 @@ const (
 
 // Specifies the way to match a ProtobufWkt::Value. Primitive values and ListValue are supported.
 // StructValue is not supported and is always not matched.
-// [#next-free-field: 7]
+// [#next-free-field: 8]
 type ValueMatcher struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -33,12 +33,14 @@ type ValueMatcher struct {
 	// Specifies how to match a value.
 	//
 	// Types that are assignable to MatchPattern:
+	//
 	//	*ValueMatcher_NullMatch_
 	//	*ValueMatcher_DoubleMatch
 	//	*ValueMatcher_StringMatch
 	//	*ValueMatcher_BoolMatch
 	//	*ValueMatcher_PresentMatch
 	//	*ValueMatcher_ListMatch
+	//	*ValueMatcher_OrMatch
 	MatchPattern isValueMatcher_MatchPattern `protobuf_oneof:"match_pattern"`
 }
 
@@ -123,6 +125,13 @@ func (x *ValueMatcher) GetListMatch() *ListMatcher {
 	return nil
 }
 
+func (x *ValueMatcher) GetOrMatch() *OrMatcher {
+	if x, ok := x.GetMatchPattern().(*ValueMatcher_OrMatch); ok {
+		return x.OrMatch
+	}
+	return nil
+}
+
 type isValueMatcher_MatchPattern interface {
 	isValueMatcher_MatchPattern()
 }
@@ -163,6 +172,11 @@ type ValueMatcher_ListMatch struct {
 	ListMatch *ListMatcher `protobuf:"bytes,6,opt,name=list_match,json=listMatch,proto3,oneof"`
 }
 
+type ValueMatcher_OrMatch struct {
+	// If specified, a match occurs if and only if any of the alternatives in the match accept the value.
+	OrMatch *OrMatcher `protobuf:"bytes,7,opt,name=or_match,json=orMatch,proto3,oneof"`
+}
+
 func (*ValueMatcher_NullMatch_) isValueMatcher_MatchPattern() {}
 
 func (*ValueMatcher_DoubleMatch) isValueMatcher_MatchPattern() {}
@@ -175,6 +189,8 @@ func (*ValueMatcher_PresentMatch) isValueMatcher_MatchPattern() {}
 
 func (*ValueMatcher_ListMatch) isValueMatcher_MatchPattern() {}
 
+func (*ValueMatcher_OrMatch) isValueMatcher_MatchPattern() {}
+
 // Specifies the way to match a list value.
 type ListMatcher struct {
 	state         protoimpl.MessageState
@@ -182,6 +198,7 @@ type ListMatcher struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to MatchPattern:
+	//
 	//	*ListMatcher_OneOf
 	MatchPattern isListMatcher_MatchPattern `protobuf_oneof:"match_pattern"`
 }
@@ -243,6 +260,54 @@ type ListMatcher_OneOf struct {
 
 func (*ListMatcher_OneOf) isListMatcher_MatchPattern() {}
 
+// Specifies a list of alternatives for the match.
+type OrMatcher struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	ValueMatchers []*ValueMatcher `protobuf:"bytes,1,rep,name=value_matchers,json=valueMatchers,proto3" json:"value_matchers,omitempty"`
+}
+
+func (x *OrMatcher) Reset() {
+	*x = OrMatcher{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_envoy_type_matcher_v3_value_proto_msgTypes[2]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *OrMatcher) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*OrMatcher) ProtoMessage() {}
+
+func (x *OrMatcher) ProtoReflect() protoreflect.Message {
+	mi := &file_envoy_type_matcher_v3_value_proto_msgTypes[2]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use OrMatcher.ProtoReflect.Descriptor instead.
+func (*OrMatcher) Descriptor() ([]byte, []int) {
+	return file_envoy_type_matcher_v3_value_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *OrMatcher) GetValueMatchers() []*ValueMatcher {
+	if x != nil {
+		return x.ValueMatchers
+	}
+	return nil
+}
+
 // NullMatch is an empty message to specify a null value.
 type ValueMatcher_NullMatch struct {
 	state         protoimpl.MessageState
@@ -253,7 +318,7 @@ type ValueMatcher_NullMatch struct {
 func (x *ValueMatcher_NullMatch) Reset() {
 	*x = ValueMatcher_NullMatch{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_envoy_type_matcher_v3_value_proto_msgTypes[2]
+		mi := &file_envoy_type_matcher_v3_value_proto_msgTypes[3]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -266,7 +331,7 @@ func (x *ValueMatcher_NullMatch) String() string {
 func (*ValueMatcher_NullMatch) ProtoMessage() {}
 
 func (x *ValueMatcher_NullMatch) ProtoReflect() protoreflect.Message {
-	mi := &file_envoy_type_matcher_v3_value_proto_msgTypes[2]
+	mi := &file_envoy_type_matcher_v3_value_proto_msgTypes[3]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -298,7 +363,7 @@ var file_envoy_type_matcher_v3_value_proto_rawDesc = []byte{
 	0x6f, 0x1a, 0x21, 0x75, 0x64, 0x70, 0x61, 0x2f, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69,
 	0x6f, 0x6e, 0x73, 0x2f, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x69, 0x6e, 0x67, 0x2e, 0x70,
 	0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x17, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2f, 0x76,
-	0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0xfe, 0x03,
+	0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0xbd, 0x04,
 	0x0a, 0x0c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x12, 0x4e,
 	0x0a, 0x0a, 0x6e, 0x75, 0x6c, 0x6c, 0x5f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x18, 0x01, 0x20, 0x01,
 	0x28, 0x0b, 0x32, 0x2d, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e,
@@ -323,32 +388,42 @@ var file_envoy_type_matcher_v3_value_proto_rawDesc = []byte{
 	0x32, 0x22, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61,
 	0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x4d, 0x61, 0x74,
 	0x63, 0x68, 0x65, 0x72, 0x48, 0x00, 0x52, 0x09, 0x6c, 0x69, 0x73, 0x74, 0x4d, 0x61, 0x74, 0x63,
-	0x68, 0x1a, 0x3d, 0x0a, 0x09, 0x4e, 0x75, 0x6c, 0x6c, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x3a, 0x30,
-	0x9a, 0xc5, 0x88, 0x1e, 0x2b, 0x0a, 0x29, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70,
-	0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x4d,
-	0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x4e, 0x75, 0x6c, 0x6c, 0x4d, 0x61, 0x74, 0x63, 0x68,
-	0x3a, 0x26, 0x9a, 0xc5, 0x88, 0x1e, 0x21, 0x0a, 0x1f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74,
-	0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x56, 0x61, 0x6c, 0x75,
-	0x65, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x14, 0x0a, 0x0d, 0x6d, 0x61, 0x74, 0x63,
-	0x68, 0x5f, 0x70, 0x61, 0x74, 0x74, 0x65, 0x72, 0x6e, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x22, 0x88,
-	0x01, 0x0a, 0x0b, 0x4c, 0x69, 0x73, 0x74, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x12, 0x3c,
-	0x0a, 0x06, 0x6f, 0x6e, 0x65, 0x5f, 0x6f, 0x66, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x23,
-	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63,
-	0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x2e, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x4d, 0x61, 0x74, 0x63,
-	0x68, 0x65, 0x72, 0x48, 0x00, 0x52, 0x05, 0x6f, 0x6e, 0x65, 0x4f, 0x66, 0x3a, 0x25, 0x9a, 0xc5,
-	0x88, 0x1e, 0x20, 0x0a, 0x1e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e,
-	0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x4d, 0x61, 0x74, 0x63,
-	0x68, 0x65, 0x72, 0x42, 0x14, 0x0a, 0x0d, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x5f, 0x70, 0x61, 0x74,
-	0x74, 0x65, 0x72, 0x6e, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x83, 0x01, 0x0a, 0x23, 0x69, 0x6f,
-	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76,
-	0x33, 0x42, 0x0a, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a,
-	0x46, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f,
-	0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79,
-	0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61,
-	0x74, 0x63, 0x68, 0x65, 0x72, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62,
-	0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x68, 0x12, 0x3d, 0x0a, 0x08, 0x6f, 0x72, 0x5f, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x18, 0x07, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x20, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65,
+	0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x2e, 0x4f, 0x72, 0x4d, 0x61,
+	0x74, 0x63, 0x68, 0x65, 0x72, 0x48, 0x00, 0x52, 0x07, 0x6f, 0x72, 0x4d, 0x61, 0x74, 0x63, 0x68,
+	0x1a, 0x3d, 0x0a, 0x09, 0x4e, 0x75, 0x6c, 0x6c, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x3a, 0x30, 0x9a,
+	0xc5, 0x88, 0x1e, 0x2b, 0x0a, 0x29, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65,
+	0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x4d, 0x61,
+	0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x4e, 0x75, 0x6c, 0x6c, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x3a,
+	0x26, 0x9a, 0xc5, 0x88, 0x1e, 0x21, 0x0a, 0x1f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79,
+	0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x56, 0x61, 0x6c, 0x75, 0x65,
+	0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x42, 0x14, 0x0a, 0x0d, 0x6d, 0x61, 0x74, 0x63, 0x68,
+	0x5f, 0x70, 0x61, 0x74, 0x74, 0x65, 0x72, 0x6e, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x22, 0x88, 0x01,
+	0x0a, 0x0b, 0x4c, 0x69, 0x73, 0x74, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x12, 0x3c, 0x0a,
+	0x06, 0x6f, 0x6e, 0x65, 0x5f, 0x6f, 0x66, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x23, 0x2e,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68,
+	0x65, 0x72, 0x2e, 0x76, 0x33, 0x2e, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x4d, 0x61, 0x74, 0x63, 0x68,
+	0x65, 0x72, 0x48, 0x00, 0x52, 0x05, 0x6f, 0x6e, 0x65, 0x4f, 0x66, 0x3a, 0x25, 0x9a, 0xc5, 0x88,
+	0x1e, 0x20, 0x0a, 0x1e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d,
+	0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x4d, 0x61, 0x74, 0x63, 0x68,
+	0x65, 0x72, 0x42, 0x14, 0x0a, 0x0d, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x5f, 0x70, 0x61, 0x74, 0x74,
+	0x65, 0x72, 0x6e, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x22, 0x61, 0x0a, 0x09, 0x4f, 0x72, 0x4d, 0x61,
+	0x74, 0x63, 0x68, 0x65, 0x72, 0x12, 0x54, 0x0a, 0x0e, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x5f, 0x6d,
+	0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x23, 0x2e,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68,
+	0x65, 0x72, 0x2e, 0x76, 0x33, 0x2e, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x4d, 0x61, 0x74, 0x63, 0x68,
+	0x65, 0x72, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x92, 0x01, 0x02, 0x08, 0x02, 0x52, 0x0d, 0x76, 0x61,
+	0x6c, 0x75, 0x65, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x73, 0x42, 0x83, 0x01, 0xba, 0x80,
+	0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x23, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65,
+	0x2e, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x2e, 0x76, 0x33, 0x42, 0x0a, 0x56, 0x61, 0x6c,
+	0x75, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x46, 0x67, 0x69, 0x74, 0x68, 0x75,
+	0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79,
+	0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e,
+	0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x6d, 0x61, 0x74,
+	0x63, 0x68, 0x65, 0x72, 0x2f, 0x76, 0x33, 0x3b, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x76,
+	0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
@@ -363,25 +438,28 @@ func file_envoy_type_matcher_v3_value_proto_rawDescGZIP() []byte {
 	return file_envoy_type_matcher_v3_value_proto_rawDescData
 }
 
-var file_envoy_type_matcher_v3_value_proto_msgTypes = make([]protoimpl.MessageInfo, 3)
+var file_envoy_type_matcher_v3_value_proto_msgTypes = make([]protoimpl.MessageInfo, 4)
 var file_envoy_type_matcher_v3_value_proto_goTypes = []interface{}{
 	(*ValueMatcher)(nil),           // 0: envoy.type.matcher.v3.ValueMatcher
 	(*ListMatcher)(nil),            // 1: envoy.type.matcher.v3.ListMatcher
-	(*ValueMatcher_NullMatch)(nil), // 2: envoy.type.matcher.v3.ValueMatcher.NullMatch
-	(*DoubleMatcher)(nil),          // 3: envoy.type.matcher.v3.DoubleMatcher
-	(*StringMatcher)(nil),          // 4: envoy.type.matcher.v3.StringMatcher
+	(*OrMatcher)(nil),              // 2: envoy.type.matcher.v3.OrMatcher
+	(*ValueMatcher_NullMatch)(nil), // 3: envoy.type.matcher.v3.ValueMatcher.NullMatch
+	(*DoubleMatcher)(nil),          // 4: envoy.type.matcher.v3.DoubleMatcher
+	(*StringMatcher)(nil),          // 5: envoy.type.matcher.v3.StringMatcher
 }
 var file_envoy_type_matcher_v3_value_proto_depIdxs = []int32{
-	2, // 0: envoy.type.matcher.v3.ValueMatcher.null_match:type_name -> envoy.type.matcher.v3.ValueMatcher.NullMatch
-	3, // 1: envoy.type.matcher.v3.ValueMatcher.double_match:type_name -> envoy.type.matcher.v3.DoubleMatcher
-	4, // 2: envoy.type.matcher.v3.ValueMatcher.string_match:type_name -> envoy.type.matcher.v3.StringMatcher
+	3, // 0: envoy.type.matcher.v3.ValueMatcher.null_match:type_name -> envoy.type.matcher.v3.ValueMatcher.NullMatch
+	4, // 1: envoy.type.matcher.v3.ValueMatcher.double_match:type_name -> envoy.type.matcher.v3.DoubleMatcher
+	5, // 2: envoy.type.matcher.v3.ValueMatcher.string_match:type_name -> envoy.type.matcher.v3.StringMatcher
 	1, // 3: envoy.type.matcher.v3.ValueMatcher.list_match:type_name -> envoy.type.matcher.v3.ListMatcher
-	0, // 4: envoy.type.matcher.v3.ListMatcher.one_of:type_name -> envoy.type.matcher.v3.ValueMatcher
-	5, // [5:5] is the sub-list for method output_type
-	5, // [5:5] is the sub-list for method input_type
-	5, // [5:5] is the sub-list for extension type_name
-	5, // [5:5] is the sub-list for extension extendee
-	0, // [0:5] is the sub-list for field type_name
+	2, // 4: envoy.type.matcher.v3.ValueMatcher.or_match:type_name -> envoy.type.matcher.v3.OrMatcher
+	0, // 5: envoy.type.matcher.v3.ListMatcher.one_of:type_name -> envoy.type.matcher.v3.ValueMatcher
+	0, // 6: envoy.type.matcher.v3.OrMatcher.value_matchers:type_name -> envoy.type.matcher.v3.ValueMatcher
+	7, // [7:7] is the sub-list for method output_type
+	7, // [7:7] is the sub-list for method input_type
+	7, // [7:7] is the sub-list for extension type_name
+	7, // [7:7] is the sub-list for extension extendee
+	0, // [0:7] is the sub-list for field type_name
 }
 
 func init() { file_envoy_type_matcher_v3_value_proto_init() }
@@ -417,6 +495,18 @@ func file_envoy_type_matcher_v3_value_proto_init() {
 			}
 		}
 		file_envoy_type_matcher_v3_value_proto_msgTypes[2].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*OrMatcher); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_envoy_type_matcher_v3_value_proto_msgTypes[3].Exporter = func(v interface{}, i int) interface{} {
 			switch v := v.(*ValueMatcher_NullMatch); i {
 			case 0:
 				return &v.state
@@ -436,6 +526,7 @@ func file_envoy_type_matcher_v3_value_proto_init() {
 		(*ValueMatcher_BoolMatch)(nil),
 		(*ValueMatcher_PresentMatch)(nil),
 		(*ValueMatcher_ListMatch)(nil),
+		(*ValueMatcher_OrMatch)(nil),
 	}
 	file_envoy_type_matcher_v3_value_proto_msgTypes[1].OneofWrappers = []interface{}{
 		(*ListMatcher_OneOf)(nil),
@@ -446,7 +537,7 @@ func file_envoy_type_matcher_v3_value_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: file_envoy_type_matcher_v3_value_proto_rawDesc,
 			NumEnums:      0,
-			NumMessages:   3,
+			NumMessages:   4,
 			NumExtensions: 0,
 			NumServices:   0,
 		},
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/value.pb.validate.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/value.pb.validate.go
index cff13d9b993..5bbf95eba26 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/value.pb.validate.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3/value.pb.validate.go
@@ -253,6 +253,48 @@ func (m *ValueMatcher) validate(all bool) error {
 			}
 		}
 
+	case *ValueMatcher_OrMatch:
+		if v == nil {
+			err := ValueMatcherValidationError{
+				field:  "MatchPattern",
+				reason: "oneof value cannot be a typed-nil",
+			}
+			if !all {
+				return err
+			}
+			errors = append(errors, err)
+		}
+		oneofMatchPatternPresent = true
+
+		if all {
+			switch v := interface{}(m.GetOrMatch()).(type) {
+			case interface{ ValidateAll() error }:
+				if err := v.ValidateAll(); err != nil {
+					errors = append(errors, ValueMatcherValidationError{
+						field:  "OrMatch",
+						reason: "embedded message failed validation",
+						cause:  err,
+					})
+				}
+			case interface{ Validate() error }:
+				if err := v.Validate(); err != nil {
+					errors = append(errors, ValueMatcherValidationError{
+						field:  "OrMatch",
+						reason: "embedded message failed validation",
+						cause:  err,
+					})
+				}
+			}
+		} else if v, ok := interface{}(m.GetOrMatch()).(interface{ Validate() error }); ok {
+			if err := v.Validate(); err != nil {
+				return ValueMatcherValidationError{
+					field:  "OrMatch",
+					reason: "embedded message failed validation",
+					cause:  err,
+				}
+			}
+		}
+
 	default:
 		_ = v // ensures v is used
 	}
@@ -501,6 +543,150 @@ var _ interface {
 	ErrorName() string
 } = ListMatcherValidationError{}
 
+// Validate checks the field values on OrMatcher with the rules defined in the
+// proto definition for this message. If any rules are violated, the first
+// error encountered is returned, or nil if there are no violations.
+func (m *OrMatcher) Validate() error {
+	return m.validate(false)
+}
+
+// ValidateAll checks the field values on OrMatcher with the rules defined in
+// the proto definition for this message. If any rules are violated, the
+// result is a list of violation errors wrapped in OrMatcherMultiError, or nil
+// if none found.
+func (m *OrMatcher) ValidateAll() error {
+	return m.validate(true)
+}
+
+func (m *OrMatcher) validate(all bool) error {
+	if m == nil {
+		return nil
+	}
+
+	var errors []error
+
+	if len(m.GetValueMatchers()) < 2 {
+		err := OrMatcherValidationError{
+			field:  "ValueMatchers",
+			reason: "value must contain at least 2 item(s)",
+		}
+		if !all {
+			return err
+		}
+		errors = append(errors, err)
+	}
+
+	for idx, item := range m.GetValueMatchers() {
+		_, _ = idx, item
+
+		if all {
+			switch v := interface{}(item).(type) {
+			case interface{ ValidateAll() error }:
+				if err := v.ValidateAll(); err != nil {
+					errors = append(errors, OrMatcherValidationError{
+						field:  fmt.Sprintf("ValueMatchers[%v]", idx),
+						reason: "embedded message failed validation",
+						cause:  err,
+					})
+				}
+			case interface{ Validate() error }:
+				if err := v.Validate(); err != nil {
+					errors = append(errors, OrMatcherValidationError{
+						field:  fmt.Sprintf("ValueMatchers[%v]", idx),
+						reason: "embedded message failed validation",
+						cause:  err,
+					})
+				}
+			}
+		} else if v, ok := interface{}(item).(interface{ Validate() error }); ok {
+			if err := v.Validate(); err != nil {
+				return OrMatcherValidationError{
+					field:  fmt.Sprintf("ValueMatchers[%v]", idx),
+					reason: "embedded message failed validation",
+					cause:  err,
+				}
+			}
+		}
+
+	}
+
+	if len(errors) > 0 {
+		return OrMatcherMultiError(errors)
+	}
+
+	return nil
+}
+
+// OrMatcherMultiError is an error wrapping multiple validation errors returned
+// by OrMatcher.ValidateAll() if the designated constraints aren't met.
+type OrMatcherMultiError []error
+
+// Error returns a concatenation of all the error messages it wraps.
+func (m OrMatcherMultiError) Error() string {
+	var msgs []string
+	for _, err := range m {
+		msgs = append(msgs, err.Error())
+	}
+	return strings.Join(msgs, "; ")
+}
+
+// AllErrors returns a list of validation violation errors.
+func (m OrMatcherMultiError) AllErrors() []error { return m }
+
+// OrMatcherValidationError is the validation error returned by
+// OrMatcher.Validate if the designated constraints aren't met.
+type OrMatcherValidationError struct {
+	field  string
+	reason string
+	cause  error
+	key    bool
+}
+
+// Field function returns field value.
+func (e OrMatcherValidationError) Field() string { return e.field }
+
+// Reason function returns reason value.
+func (e OrMatcherValidationError) Reason() string { return e.reason }
+
+// Cause function returns cause value.
+func (e OrMatcherValidationError) Cause() error { return e.cause }
+
+// Key function returns key value.
+func (e OrMatcherValidationError) Key() bool { return e.key }
+
+// ErrorName returns error name.
+func (e OrMatcherValidationError) ErrorName() string { return "OrMatcherValidationError" }
+
+// Error satisfies the builtin error interface
+func (e OrMatcherValidationError) Error() string {
+	cause := ""
+	if e.cause != nil {
+		cause = fmt.Sprintf(" | caused by: %v", e.cause)
+	}
+
+	key := ""
+	if e.key {
+		key = "key for "
+	}
+
+	return fmt.Sprintf(
+		"invalid %sOrMatcher.%s: %s%s",
+		key,
+		e.field,
+		e.reason,
+		cause)
+}
+
+var _ error = OrMatcherValidationError{}
+
+var _ interface {
+	Field() string
+	Reason() string
+	Key() bool
+	Cause() error
+	ErrorName() string
+} = OrMatcherValidationError{}
+
 // Validate checks the field values on ValueMatcher_NullMatch with the rules
 // defined in the proto definition for this message. If any rules are
 // violated, the first error encountered is returned, or nil if there are no violations.
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/hash_policy.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/hash_policy.pb.go
index c03381ddca7..2cda6f3dc1d 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/hash_policy.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/hash_policy.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/v3/hash_policy.proto
 
 package typev3
@@ -29,6 +29,7 @@ type HashPolicy struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to PolicySpecifier:
+	//
 	//	*HashPolicy_SourceIp_
 	//	*HashPolicy_FilterState_
 	PolicySpecifier isHashPolicy_PolicySpecifier `protobuf_oneof:"policy_specifier"`
@@ -225,15 +226,15 @@ var file_envoy_type_v3_hash_policy_proto_rawDesc = []byte{
 	0x01, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x3a, 0x1c, 0x9a, 0xc5, 0x88, 0x1e, 0x17, 0x0a, 0x15, 0x65,
 	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x48, 0x61, 0x73, 0x68, 0x50, 0x6f,
 	0x6c, 0x69, 0x63, 0x79, 0x42, 0x17, 0x0a, 0x10, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5f, 0x73,
-	0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x75, 0x0a,
-	0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65,
-	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x0f, 0x48, 0x61,
-	0x73, 0x68, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a,
-	0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f,
-	0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79,
-	0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1,
-	0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x70, 0x65, 0x63, 0x69, 0x66, 0x69, 0x65, 0x72, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x75, 0xba,
+	0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70,
+	0x65, 0x2e, 0x76, 0x33, 0x42, 0x0f, 0x48, 0x61, 0x73, 0x68, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79,
+	0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e,
+	0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67,
+	0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f,
+	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79,
+	0x70, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/http.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/http.pb.go
index 7d21a85f66a..c92aa2d6deb 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/http.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/http.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/v3/http.proto
 
 package typev3
@@ -83,14 +83,14 @@ var file_envoy_type_v3_http_proto_rawDesc = []byte{
 	0x75, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2a, 0x32, 0x0a, 0x0f, 0x43, 0x6f, 0x64, 0x65,
 	0x63, 0x43, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x54, 0x79, 0x70, 0x65, 0x12, 0x09, 0x0a, 0x05, 0x48,
 	0x54, 0x54, 0x50, 0x31, 0x10, 0x00, 0x12, 0x09, 0x0a, 0x05, 0x48, 0x54, 0x54, 0x50, 0x32, 0x10,
-	0x01, 0x12, 0x09, 0x0a, 0x05, 0x48, 0x54, 0x54, 0x50, 0x33, 0x10, 0x02, 0x42, 0x6f, 0x0a, 0x1b,
-	0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e,
-	0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x09, 0x48, 0x74, 0x74,
-	0x70, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62,
-	0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f,
-	0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65,
-	0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74,
-	0x79, 0x70, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70,
+	0x01, 0x12, 0x09, 0x0a, 0x05, 0x48, 0x54, 0x54, 0x50, 0x33, 0x10, 0x02, 0x42, 0x6f, 0xba, 0x80,
+	0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
+	0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65,
+	0x2e, 0x76, 0x33, 0x42, 0x09, 0x48, 0x74, 0x74, 0x70, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01,
+	0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72,
+	0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74,
+	0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70,
 	0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/http_status.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/http_status.pb.go
index 52cd8b77dbf..6ca1677a18c 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/http_status.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/http_status.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/v3/http_status.proto
 
 package typev3
@@ -379,15 +379,15 @@ var file_envoy_type_v3_http_status_proto_rawDesc = []byte{
 	0x64, 0x10, 0xfc, 0x03, 0x12, 0x10, 0x0a, 0x0b, 0x4e, 0x6f, 0x74, 0x45, 0x78, 0x74, 0x65, 0x6e,
 	0x64, 0x65, 0x64, 0x10, 0xfe, 0x03, 0x12, 0x22, 0x0a, 0x1d, 0x4e, 0x65, 0x74, 0x77, 0x6f, 0x72,
 	0x6b, 0x41, 0x75, 0x74, 0x68, 0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52,
-	0x65, 0x71, 0x75, 0x69, 0x72, 0x65, 0x64, 0x10, 0xff, 0x03, 0x42, 0x75, 0x0a, 0x1b, 0x69, 0x6f,
-	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x0f, 0x48, 0x74, 0x74, 0x70, 0x53,
-	0x74, 0x61, 0x74, 0x75, 0x73, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x3b, 0x67, 0x69,
-	0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72,
-	0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70,
-	0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f,
-	0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10,
-	0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x65, 0x71, 0x75, 0x69, 0x72, 0x65, 0x64, 0x10, 0xff, 0x03, 0x42, 0x75, 0xba, 0x80, 0xc8, 0xd1,
+	0x06, 0x02, 0x10, 0x02, 0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72,
+	0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76,
+	0x33, 0x42, 0x0f, 0x48, 0x74, 0x74, 0x70, 0x53, 0x74, 0x61, 0x74, 0x75, 0x73, 0x50, 0x72, 0x6f,
+	0x74, 0x6f, 0x50, 0x01, 0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d,
+	0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63,
+	0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65, 0x76,
+	0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/percent.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/percent.pb.go
index 22f1ff49395..727374bb357 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/percent.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/percent.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/v3/percent.proto
 
 package typev3
@@ -225,14 +225,14 @@ var file_envoy_type_v3_percent_proto_rawDesc = []byte{
 	0x12, 0x0b, 0x0a, 0x07, 0x4d, 0x49, 0x4c, 0x4c, 0x49, 0x4f, 0x4e, 0x10, 0x02, 0x3a, 0x23, 0x9a,
 	0xc5, 0x88, 0x1e, 0x1e, 0x0a, 0x1c, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65,
 	0x2e, 0x46, 0x72, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x50, 0x65, 0x72, 0x63, 0x65,
-	0x6e, 0x74, 0x42, 0x72, 0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72,
-	0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76,
-	0x33, 0x42, 0x0c, 0x50, 0x65, 0x72, 0x63, 0x65, 0x6e, 0x74, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50,
-	0x01, 0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e,
-	0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74,
-	0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f,
-	0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0xba, 0x80,
-	0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x6e, 0x74, 0x42, 0x72, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x1b, 0x69, 0x6f,
+	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x0c, 0x50, 0x65, 0x72, 0x63, 0x65,
+	0x6e, 0x74, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75,
+	0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79,
+	0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e,
+	0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b,
+	0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/range.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/range.pb.go
index 80323c86250..fa10eee0f10 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/range.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/range.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/v3/range.proto
 
 package typev3
@@ -223,14 +223,14 @@ var file_envoy_type_v3_range_proto_rawDesc = []byte{
 	0x28, 0x01, 0x52, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x12, 0x10, 0x0a, 0x03, 0x65, 0x6e, 0x64,
 	0x18, 0x02, 0x20, 0x01, 0x28, 0x01, 0x52, 0x03, 0x65, 0x6e, 0x64, 0x3a, 0x1d, 0x9a, 0xc5, 0x88,
 	0x1e, 0x18, 0x0a, 0x16, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x44,
-	0x6f, 0x75, 0x62, 0x6c, 0x65, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x42, 0x70, 0x0a, 0x1b, 0x69, 0x6f,
-	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x0a, 0x52, 0x61, 0x6e, 0x67, 0x65,
-	0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e,
-	0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67,
-	0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79,
-	0x70, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72,
+	0x6f, 0x75, 0x62, 0x6c, 0x65, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x42, 0x70, 0xba, 0x80, 0xc8, 0xd1,
+	0x06, 0x02, 0x10, 0x02, 0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72,
+	0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76,
+	0x33, 0x42, 0x0a, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a,
+	0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f,
+	0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f,
+	0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79,
+	0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72,
 	0x6f, 0x74, 0x6f, 0x33,
 }
 
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/ratelimit_strategy.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/ratelimit_strategy.pb.go
index adab81a8c9c..b342e22173a 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/ratelimit_strategy.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/ratelimit_strategy.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/v3/ratelimit_strategy.proto
 
 package typev3
@@ -76,6 +76,7 @@ type RateLimitStrategy struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Types that are assignable to Strategy:
+	//
 	//	*RateLimitStrategy_BlanketRule_
 	//	*RateLimitStrategy_RequestsPerTimeUnit_
 	//	*RateLimitStrategy_TokenBucket
@@ -177,14 +178,14 @@ func (*RateLimitStrategy_TokenBucket) isRateLimitStrategy_Strategy() {}
 // Allows to specify the desired requests per second (RPS, QPS), requests per minute (QPM, RPM),
 // etc., without specifying a rate limiting algorithm implementation.
 //
-// ``RequestsPerTimeUnit`` strategy does not demand any specific rate limiting algorithm to be
+// “RequestsPerTimeUnit“ strategy does not demand any specific rate limiting algorithm to be
 // used (in contrast to the :ref:`TokenBucket <envoy_v3_api_msg_type.v3.TokenBucket>`,
 // for example). It implies that the implementation details of rate limiting algorithm are
 // irrelevant as long as the configured number of "requests per time unit" is achieved.
 //
-// Note that the ``TokenBucket`` is still a valid implementation of the ``RequestsPerTimeUnit``
+// Note that the “TokenBucket“ is still a valid implementation of the “RequestsPerTimeUnit“
 // strategy, and may be chosen to enforce the rate limit. However, there's no guarantee it will be
-// the ``TokenBucket`` in particular, and not the Leaky Bucket, the Sliding Window, or any other
+// the “TokenBucket“ in particular, and not the Leaky Bucket, the Sliding Window, or any other
 // rate limiting algorithm that fulfills the requirements.
 type RateLimitStrategy_RequestsPerTimeUnit struct {
 	state         protoimpl.MessageState
@@ -193,18 +194,18 @@ type RateLimitStrategy_RequestsPerTimeUnit struct {
 
 	// The desired number of requests per :ref:`time_unit
 	// <envoy_v3_api_field_type.v3.RateLimitStrategy.RequestsPerTimeUnit.time_unit>` to allow.
-	// If set to ``0``, deny all (equivalent to ``BlanketRule.DENY_ALL``).
+	// If set to “0“, deny all (equivalent to “BlanketRule.DENY_ALL“).
 	//
 	// .. note::
-	//   Note that the algorithm implementation determines the course of action for the requests
-	//   over the limit. As long as the ``requests_per_time_unit`` converges on the desired value,
-	//   it's allowed to treat this field as a soft-limit: allow bursts, redistribute the allowance
-	//   over time, etc.
 	//
+	//	Note that the algorithm implementation determines the course of action for the requests
+	//	over the limit. As long as the ``requests_per_time_unit`` converges on the desired value,
+	//	it's allowed to treat this field as a soft-limit: allow bursts, redistribute the allowance
+	//	over time, etc.
 	RequestsPerTimeUnit uint64 `protobuf:"varint,1,opt,name=requests_per_time_unit,json=requestsPerTimeUnit,proto3" json:"requests_per_time_unit,omitempty"`
 	// The unit of time. Ignored when :ref:`requests_per_time_unit
 	// <envoy_v3_api_field_type.v3.RateLimitStrategy.RequestsPerTimeUnit.requests_per_time_unit>`
-	// is ``0`` (deny all).
+	// is “0“ (deny all).
 	TimeUnit RateLimitUnit `protobuf:"varint,2,opt,name=time_unit,json=timeUnit,proto3,enum=envoy.type.v3.RateLimitUnit" json:"time_unit,omitempty"`
 }
 
@@ -301,15 +302,15 @@ var file_envoy_type_v3_ratelimit_strategy_proto_rawDesc = []byte{
 	0x6e, 0x6b, 0x65, 0x74, 0x52, 0x75, 0x6c, 0x65, 0x12, 0x0d, 0x0a, 0x09, 0x41, 0x4c, 0x4c, 0x4f,
 	0x57, 0x5f, 0x41, 0x4c, 0x4c, 0x10, 0x00, 0x12, 0x0c, 0x0a, 0x08, 0x44, 0x45, 0x4e, 0x59, 0x5f,
 	0x41, 0x4c, 0x4c, 0x10, 0x01, 0x42, 0x0f, 0x0a, 0x08, 0x73, 0x74, 0x72, 0x61, 0x74, 0x65, 0x67,
-	0x79, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x84, 0x01, 0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e,
+	0x79, 0x12, 0x03, 0xf8, 0x42, 0x01, 0x42, 0x84, 0x01, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10,
+	0x02, 0xd2, 0xc6, 0xa4, 0xe1, 0x06, 0x02, 0x08, 0x01, 0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e,
 	0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74,
 	0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x16, 0x52, 0x61, 0x74, 0x65, 0x6c, 0x69, 0x6d, 0x69,
 	0x74, 0x53, 0x74, 0x72, 0x61, 0x74, 0x65, 0x67, 0x79, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01,
 	0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76,
 	0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72,
 	0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74,
-	0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0xba, 0x80, 0xc8,
-	0xd1, 0x06, 0x02, 0x10, 0x02, 0xd2, 0xc6, 0xa4, 0xe1, 0x06, 0x02, 0x08, 0x01, 0x62, 0x06, 0x70,
+	0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70,
 	0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/ratelimit_unit.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/ratelimit_unit.pb.go
index e98d9c59895..6677a074aee 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/ratelimit_unit.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/ratelimit_unit.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/v3/ratelimit_unit.proto
 
 package typev3
@@ -104,14 +104,14 @@ var file_envoy_type_v3_ratelimit_unit_proto_rawDesc = []byte{
 	0x4d, 0x49, 0x4e, 0x55, 0x54, 0x45, 0x10, 0x02, 0x12, 0x08, 0x0a, 0x04, 0x48, 0x4f, 0x55, 0x52,
 	0x10, 0x03, 0x12, 0x07, 0x0a, 0x03, 0x44, 0x41, 0x59, 0x10, 0x04, 0x12, 0x09, 0x0a, 0x05, 0x4d,
 	0x4f, 0x4e, 0x54, 0x48, 0x10, 0x05, 0x12, 0x08, 0x0a, 0x04, 0x59, 0x45, 0x41, 0x52, 0x10, 0x06,
-	0x42, 0x78, 0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78,
-	0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x42,
-	0x12, 0x52, 0x61, 0x74, 0x65, 0x6c, 0x69, 0x6d, 0x69, 0x74, 0x55, 0x6e, 0x69, 0x74, 0x50, 0x72,
-	0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f,
-	0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d,
-	0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e,
-	0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65,
-	0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74,
+	0x42, 0x78, 0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65,
+	0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
+	0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x12, 0x52, 0x61, 0x74, 0x65, 0x6c, 0x69, 0x6d,
+	0x69, 0x74, 0x55, 0x6e, 0x69, 0x74, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x3b, 0x67,
+	0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70,
+	0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d,
+	0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65,
+	0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74,
 	0x6f, 0x33,
 }
 
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/semantic_version.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/semantic_version.pb.go
index 1909162f830..10416e602cf 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/semantic_version.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/semantic_version.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/v3/semantic_version.proto
 
 package typev3
@@ -106,15 +106,15 @@ var file_envoy_type_v3_semantic_version_proto_rawDesc = []byte{
 	0x72, 0x12, 0x14, 0x0a, 0x05, 0x70, 0x61, 0x74, 0x63, 0x68, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0d,
 	0x52, 0x05, 0x70, 0x61, 0x74, 0x63, 0x68, 0x3a, 0x21, 0x9a, 0xc5, 0x88, 0x1e, 0x1c, 0x0a, 0x1a,
 	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x53, 0x65, 0x6d, 0x61, 0x6e,
-	0x74, 0x69, 0x63, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x42, 0x7a, 0x0a, 0x1b, 0x69, 0x6f,
-	0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f,
-	0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x14, 0x53, 0x65, 0x6d, 0x61, 0x6e,
-	0x74, 0x69, 0x63, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50,
-	0x01, 0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e,
-	0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74,
-	0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f,
-	0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0xba, 0x80,
-	0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x74, 0x69, 0x63, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x42, 0x7a, 0xba, 0x80, 0xc8, 0xd1,
+	0x06, 0x02, 0x10, 0x02, 0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72,
+	0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76,
+	0x33, 0x42, 0x14, 0x53, 0x65, 0x6d, 0x61, 0x6e, 0x74, 0x69, 0x63, 0x56, 0x65, 0x72, 0x73, 0x69,
+	0x6f, 0x6e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75,
+	0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79,
+	0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e,
+	0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b,
+	0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/token_bucket.pb.go b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/token_bucket.pb.go
index dd629581c42..5363e5abe08 100644
--- a/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/token_bucket.pb.go
+++ b/vendor/github.com/envoyproxy/go-control-plane/envoy/type/v3/token_bucket.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.28.1
-// 	protoc        v3.21.12
+// 	protoc-gen-go v1.30.0
+// 	protoc        v4.23.4
 // source: envoy/type/v3/token_bucket.proto
 
 package typev3
@@ -37,8 +37,8 @@ type TokenBucket struct {
 	// to a single token.
 	TokensPerFill *wrappers.UInt32Value `protobuf:"bytes,2,opt,name=tokens_per_fill,json=tokensPerFill,proto3" json:"tokens_per_fill,omitempty"`
 	// The fill interval that tokens are added to the bucket. During each fill interval
-	// ``tokens_per_fill`` are added to the bucket. The bucket will never contain more than
-	// ``max_tokens`` tokens.
+	// “tokens_per_fill“ are added to the bucket. The bucket will never contain more than
+	// “max_tokens“ tokens.
 	FillInterval *duration.Duration `protobuf:"bytes,3,opt,name=fill_interval,json=fillInterval,proto3" json:"fill_interval,omitempty"`
 }
 
@@ -126,14 +126,14 @@ var file_envoy_type_v3_token_bucket_proto_rawDesc = []byte{
 	0x00, 0x52, 0x0c, 0x66, 0x69, 0x6c, 0x6c, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6c, 0x3a,
 	0x1d, 0x9a, 0xc5, 0x88, 0x1e, 0x18, 0x0a, 0x16, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79,
 	0x70, 0x65, 0x2e, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x42, 0x75, 0x63, 0x6b, 0x65, 0x74, 0x42, 0x76,
-	0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e,
-	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x10, 0x54,
-	0x6f, 0x6b, 0x65, 0x6e, 0x42, 0x75, 0x63, 0x6b, 0x65, 0x74, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50,
-	0x01, 0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e,
-	0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74,
-	0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e, 0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f,
-	0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b, 0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0xba, 0x80,
-	0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0xba, 0x80, 0xc8, 0xd1, 0x06, 0x02, 0x10, 0x02, 0x0a, 0x1b, 0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76,
+	0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x74, 0x79,
+	0x70, 0x65, 0x2e, 0x76, 0x33, 0x42, 0x10, 0x54, 0x6f, 0x6b, 0x65, 0x6e, 0x42, 0x75, 0x63, 0x6b,
+	0x65, 0x74, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x3b, 0x67, 0x69, 0x74, 0x68, 0x75,
+	0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79,
+	0x2f, 0x67, 0x6f, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, 0x6f, 0x6c, 0x2d, 0x70, 0x6c, 0x61, 0x6e,
+	0x65, 0x2f, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x33, 0x3b,
+	0x74, 0x79, 0x70, 0x65, 0x76, 0x33, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/vendor/github.com/envoyproxy/protoc-gen-validate/validate/validate.proto b/vendor/github.com/envoyproxy/protoc-gen-validate/validate/validate.proto
index 705d382aac4..5aa9653938f 100644
--- a/vendor/github.com/envoyproxy/protoc-gen-validate/validate/validate.proto
+++ b/vendor/github.com/envoyproxy/protoc-gen-validate/validate/validate.proto
@@ -534,7 +534,7 @@ message StringRules {
     // at a maximum
     optional uint64 max_bytes = 5;
 
-    // Pattern specifes that this field must match against the specified
+    // Pattern specifies that this field must match against the specified
     // regular expression (RE2 syntax). The included expression should elide
     // any delimiters.
     optional string pattern  = 6;
@@ -646,7 +646,7 @@ message BytesRules {
     // at a maximum
     optional uint64 max_len = 3;
 
-    // Pattern specifes that this field must match against the specified
+    // Pattern specifies that this field must match against the specified
     // regular expression (RE2 syntax). The included expression should elide
     // any delimiters.
     optional string pattern  = 4;
@@ -732,11 +732,11 @@ message RepeatedRules {
     optional uint64 max_items = 2;
 
     // Unique specifies that all elements in this field must be unique. This
-    // contraint is only applicable to scalar and enum types (messages are not
+    // constraint is only applicable to scalar and enum types (messages are not
     // supported).
     optional bool   unique    = 3;
 
-    // Items specifies the contraints to be applied to each item in the field.
+    // Items specifies the constraints to be applied to each item in the field.
     // Repeated message fields will still execute validation against each item
     // unless skip is specified here.
     optional FieldRules items = 4;
diff --git a/vendor/github.com/facette/natsort/LICENSE b/vendor/github.com/facette/natsort/LICENSE
new file mode 100644
index 00000000000..cc8f232b387
--- /dev/null
+++ b/vendor/github.com/facette/natsort/LICENSE
@@ -0,0 +1,29 @@
+Copyright (c) 2015, Vincent Batoufflet and Marc Falzon
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+ * Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+ * Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+
+ * Neither the name of the authors nor the names of its contributors
+   may be used to endorse or promote products derived from this software
+   without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.
diff --git a/vendor/github.com/facette/natsort/README.md b/vendor/github.com/facette/natsort/README.md
new file mode 100644
index 00000000000..a4362b7283f
--- /dev/null
+++ b/vendor/github.com/facette/natsort/README.md
@@ -0,0 +1,104 @@
+# natsort: natural strings sorting in Go
+
+This is an implementation of the "Alphanum Algorithm" by [Dave Koelle][0] in Go.
+
+[![GoDoc](https://godoc.org/facette.io/natsort?status.svg)](https://godoc.org/facette.io/natsort)
+
+## Usage
+
+```go
+package main
+
+import (
+    "fmt"
+    "strings"
+
+    "facette.io/natsort"
+)
+
+func main() {
+    list := []string{
+        "1000X Radonius Maximus",
+        "10X Radonius",
+        "200X Radonius",
+        "20X Radonius",
+        "20X Radonius Prime",
+        "30X Radonius",
+        "40X Radonius",
+        "Allegia 50 Clasteron",
+        "Allegia 500 Clasteron",
+        "Allegia 50B Clasteron",
+        "Allegia 51 Clasteron",
+        "Allegia 6R Clasteron",
+        "Alpha 100",
+        "Alpha 2",
+        "Alpha 200",
+        "Alpha 2A",
+        "Alpha 2A-8000",
+        "Alpha 2A-900",
+        "Callisto Morphamax",
+        "Callisto Morphamax 500",
+        "Callisto Morphamax 5000",
+        "Callisto Morphamax 600",
+        "Callisto Morphamax 6000 SE",
+        "Callisto Morphamax 6000 SE2",
+        "Callisto Morphamax 700",
+        "Callisto Morphamax 7000",
+        "Xiph Xlater 10000",
+        "Xiph Xlater 2000",
+        "Xiph Xlater 300",
+        "Xiph Xlater 40",
+        "Xiph Xlater 5",
+        "Xiph Xlater 50",
+        "Xiph Xlater 500",
+        "Xiph Xlater 5000",
+        "Xiph Xlater 58",
+    }
+
+    natsort.Sort(list)
+
+    fmt.Println(strings.Join(list, "\n"))
+}
+```
+
+Output:
+
+```
+10X Radonius
+20X Radonius
+20X Radonius Prime
+30X Radonius
+40X Radonius
+200X Radonius
+1000X Radonius Maximus
+Allegia 6R Clasteron
+Allegia 50 Clasteron
+Allegia 50B Clasteron
+Allegia 51 Clasteron
+Allegia 500 Clasteron
+Alpha 2
+Alpha 2A
+Alpha 2A-900
+Alpha 2A-8000
+Alpha 100
+Alpha 200
+Callisto Morphamax
+Callisto Morphamax 500
+Callisto Morphamax 600
+Callisto Morphamax 700
+Callisto Morphamax 5000
+Callisto Morphamax 6000 SE
+Callisto Morphamax 6000 SE2
+Callisto Morphamax 7000
+Xiph Xlater 5
+Xiph Xlater 40
+Xiph Xlater 50
+Xiph Xlater 58
+Xiph Xlater 300
+Xiph Xlater 500
+Xiph Xlater 2000
+Xiph Xlater 5000
+Xiph Xlater 10000
+```
+
+[0]: http://davekoelle.com/alphanum.html
diff --git a/vendor/github.com/facette/natsort/natsort.go b/vendor/github.com/facette/natsort/natsort.go
new file mode 100644
index 00000000000..5c3c28d5ab1
--- /dev/null
+++ b/vendor/github.com/facette/natsort/natsort.go
@@ -0,0 +1,85 @@
+// Package natsort implements natural strings sorting
+package natsort
+
+import (
+	"regexp"
+	"sort"
+	"strconv"
+)
+
+type stringSlice []string
+
+func (s stringSlice) Len() int {
+	return len(s)
+}
+
+func (s stringSlice) Less(a, b int) bool {
+	return Compare(s[a], s[b])
+}
+
+func (s stringSlice) Swap(a, b int) {
+	s[a], s[b] = s[b], s[a]
+}
+
+var chunkifyRegexp = regexp.MustCompile(`(\d+|\D+)`)
+
+func chunkify(s string) []string {
+	return chunkifyRegexp.FindAllString(s, -1)
+}
+
+// Sort sorts a list of strings in a natural order
+func Sort(l []string) {
+	sort.Sort(stringSlice(l))
+}
+
+// Compare returns true if the first string precedes the second one according to natural order
+func Compare(a, b string) bool {
+	chunksA := chunkify(a)
+	chunksB := chunkify(b)
+
+	nChunksA := len(chunksA)
+	nChunksB := len(chunksB)
+
+	for i := range chunksA {
+		if i >= nChunksB {
+			return false
+		}
+
+		aInt, aErr := strconv.Atoi(chunksA[i])
+		bInt, bErr := strconv.Atoi(chunksB[i])
+
+		// If both chunks are numeric, compare them as integers
+		if aErr == nil && bErr == nil {
+			if aInt == bInt {
+				if i == nChunksA-1 {
+					// We reached the last chunk of A, thus B is greater than A
+					return true
+				} else if i == nChunksB-1 {
+					// We reached the last chunk of B, thus A is greater than B
+					return false
+				}
+
+				continue
+			}
+
+			return aInt < bInt
+		}
+
+		// So far both strings are equal, continue to next chunk
+		if chunksA[i] == chunksB[i] {
+			if i == nChunksA-1 {
+				// We reached the last chunk of A, thus B is greater than A
+				return true
+			} else if i == nChunksB-1 {
+				// We reached the last chunk of B, thus A is greater than B
+				return false
+			}
+
+			continue
+		}
+
+		return chunksA[i] < chunksB[i]
+	}
+
+	return false
+}
diff --git a/vendor/github.com/go-logr/logr/README.md b/vendor/github.com/go-logr/logr/README.md
index a8c29bfbd53..8969526a6e5 100644
--- a/vendor/github.com/go-logr/logr/README.md
+++ b/vendor/github.com/go-logr/logr/README.md
@@ -91,11 +91,12 @@ logr design but also left out some parts and changed others:
 | Adding a name to a logger | `WithName` | no API |
 | Modify verbosity of log entries in a call chain | `V` | no API |
 | Grouping of key/value pairs | not supported | `WithGroup`, `GroupValue` |
+| Pass context for extracting additional values | no API | API variants like `InfoCtx` |
 
 The high-level slog API is explicitly meant to be one of many different APIs
 that can be layered on top of a shared `slog.Handler`. logr is one such
-alternative API, with [interoperability](#slog-interoperability) provided by the [`slogr`](slogr)
-package.
+alternative API, with [interoperability](#slog-interoperability) provided by
+some conversion functions.
 
 ### Inspiration
 
@@ -145,24 +146,24 @@ There are implementations for the following logging libraries:
 ## slog interoperability
 
 Interoperability goes both ways, using the `logr.Logger` API with a `slog.Handler`
-and using the `slog.Logger` API with a `logr.LogSink`. [slogr](./slogr) provides `NewLogr` and
-`NewSlogHandler` API calls to convert between a `logr.Logger` and a `slog.Handler`.
+and using the `slog.Logger` API with a `logr.LogSink`. `FromSlogHandler` and
+`ToSlogHandler` convert between a `logr.Logger` and a `slog.Handler`.
 As usual, `slog.New` can be used to wrap such a `slog.Handler` in the high-level
-slog API. `slogr` itself leaves that to the caller.
+slog API.
 
-## Using a `logr.Sink` as backend for slog
+### Using a `logr.LogSink` as backend for slog
 
 Ideally, a logr sink implementation should support both logr and slog by
-implementing both the normal logr interface(s) and `slogr.SlogSink`.  Because
+implementing both the normal logr interface(s) and `SlogSink`.  Because
 of a conflict in the parameters of the common `Enabled` method, it is [not
 possible to implement both slog.Handler and logr.Sink in the same
 type](https://github.com/golang/go/issues/59110).
 
 If both are supported, log calls can go from the high-level APIs to the backend
-without the need to convert parameters. `NewLogr` and `NewSlogHandler` can
+without the need to convert parameters. `FromSlogHandler` and `ToSlogHandler` can
 convert back and forth without adding additional wrappers, with one exception:
 when `Logger.V` was used to adjust the verbosity for a `slog.Handler`, then
-`NewSlogHandler` has to use a wrapper which adjusts the verbosity for future
+`ToSlogHandler` has to use a wrapper which adjusts the verbosity for future
 log calls.
 
 Such an implementation should also support values that implement specific
@@ -187,13 +188,13 @@ Not supporting slog has several drawbacks:
 These drawbacks are severe enough that applications using a mixture of slog and
 logr should switch to a different backend.
 
-## Using a `slog.Handler` as backend for logr
+### Using a `slog.Handler` as backend for logr
 
 Using a plain `slog.Handler` without support for logr works better than the
 other direction:
 - All logr verbosity levels can be mapped 1:1 to their corresponding slog level
   by negating them.
-- Stack unwinding is done by the `slogr.SlogSink` and the resulting program
+- Stack unwinding is done by the `SlogSink` and the resulting program
   counter is passed to the `slog.Handler`.
 - Names added via `Logger.WithName` are gathered and recorded in an additional
   attribute with `logger` as key and the names separated by slash as value.
@@ -205,27 +206,39 @@ ideally support both `logr.Marshaler` and `slog.Valuer`. If compatibility
 with logr implementations without slog support is not important, then
 `slog.Valuer` is sufficient.
 
-## Context support for slog
+### Context support for slog
 
 Storing a logger in a `context.Context` is not supported by
-slog. `logr.NewContext` and `logr.FromContext` can be used with slog like this
-to fill this gap:
-
-    func HandlerFromContext(ctx context.Context) slog.Handler {
-        logger, err := logr.FromContext(ctx)
-        if err == nil {
-            return slogr.NewSlogHandler(logger)
-        }
-        return slog.Default().Handler()
-    }
-
-    func ContextWithHandler(ctx context.Context, handler slog.Handler) context.Context {
-        return logr.NewContext(ctx, slogr.NewLogr(handler))
-    }
-
-The downside is that storing and retrieving a `slog.Handler` needs more
-allocations compared to using a `logr.Logger`. Therefore the recommendation is
-to use the `logr.Logger` API in code which uses contextual logging.
+slog. `NewContextWithSlogLogger` and `FromContextAsSlogLogger` can be
+used to fill this gap. They store and retrieve a `slog.Logger` pointer
+under the same context key that is also used by `NewContext` and
+`FromContext` for `logr.Logger` value.
+
+When `NewContextWithSlogLogger` is followed by `FromContext`, the latter will
+automatically convert the `slog.Logger` to a
+`logr.Logger`. `FromContextAsSlogLogger` does the same for the other direction.
+
+With this approach, binaries which use either slog or logr are as efficient as
+possible with no unnecessary allocations. This is also why the API stores a
+`slog.Logger` pointer: when storing a `slog.Handler`, creating a `slog.Logger`
+on retrieval would need to allocate one.
+
+The downside is that switching back and forth needs more allocations. Because
+logr is the API that is already in use by different packages, in particular
+Kubernetes, the recommendation is to use the `logr.Logger` API in code which
+uses contextual logging.
+
+An alternative to adding values to a logger and storing that logger in the
+context is to store the values in the context and to configure a logging
+backend to extract those values when emitting log entries. This only works when
+log calls are passed the context, which is not supported by the logr API.
+
+With the slog API, it is possible, but not
+required. https://github.com/veqryn/slog-context is a package for slog which
+provides additional support code for this approach. It also contains wrappers
+for the context functions in logr, so developers who prefer to not use the logr
+APIs directly can use those instead and the resulting code will still be
+interoperable with logr.
 
 ## FAQ
 
diff --git a/vendor/github.com/go-logr/logr/context.go b/vendor/github.com/go-logr/logr/context.go
new file mode 100644
index 00000000000..de8bcc3ad89
--- /dev/null
+++ b/vendor/github.com/go-logr/logr/context.go
@@ -0,0 +1,33 @@
+/*
+Copyright 2023 The logr Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package logr
+
+// contextKey is how we find Loggers in a context.Context. With Go < 1.21,
+// the value is always a Logger value. With Go >= 1.21, the value can be a
+// Logger value or a slog.Logger pointer.
+type contextKey struct{}
+
+// notFoundError exists to carry an IsNotFound method.
+type notFoundError struct{}
+
+func (notFoundError) Error() string {
+	return "no logr.Logger was present"
+}
+
+func (notFoundError) IsNotFound() bool {
+	return true
+}
diff --git a/vendor/github.com/go-logr/logr/context_noslog.go b/vendor/github.com/go-logr/logr/context_noslog.go
new file mode 100644
index 00000000000..f012f9a18e8
--- /dev/null
+++ b/vendor/github.com/go-logr/logr/context_noslog.go
@@ -0,0 +1,49 @@
+//go:build !go1.21
+// +build !go1.21
+
+/*
+Copyright 2019 The logr Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package logr
+
+import (
+	"context"
+)
+
+// FromContext returns a Logger from ctx or an error if no Logger is found.
+func FromContext(ctx context.Context) (Logger, error) {
+	if v, ok := ctx.Value(contextKey{}).(Logger); ok {
+		return v, nil
+	}
+
+	return Logger{}, notFoundError{}
+}
+
+// FromContextOrDiscard returns a Logger from ctx.  If no Logger is found, this
+// returns a Logger that discards all log messages.
+func FromContextOrDiscard(ctx context.Context) Logger {
+	if v, ok := ctx.Value(contextKey{}).(Logger); ok {
+		return v
+	}
+
+	return Discard()
+}
+
+// NewContext returns a new Context, derived from ctx, which carries the
+// provided Logger.
+func NewContext(ctx context.Context, logger Logger) context.Context {
+	return context.WithValue(ctx, contextKey{}, logger)
+}
diff --git a/vendor/github.com/go-logr/logr/context_slog.go b/vendor/github.com/go-logr/logr/context_slog.go
new file mode 100644
index 00000000000..065ef0b8280
--- /dev/null
+++ b/vendor/github.com/go-logr/logr/context_slog.go
@@ -0,0 +1,83 @@
+//go:build go1.21
+// +build go1.21
+
+/*
+Copyright 2019 The logr Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package logr
+
+import (
+	"context"
+	"fmt"
+	"log/slog"
+)
+
+// FromContext returns a Logger from ctx or an error if no Logger is found.
+func FromContext(ctx context.Context) (Logger, error) {
+	v := ctx.Value(contextKey{})
+	if v == nil {
+		return Logger{}, notFoundError{}
+	}
+
+	switch v := v.(type) {
+	case Logger:
+		return v, nil
+	case *slog.Logger:
+		return FromSlogHandler(v.Handler()), nil
+	default:
+		// Not reached.
+		panic(fmt.Sprintf("unexpected value type for logr context key: %T", v))
+	}
+}
+
+// FromContextAsSlogLogger returns a slog.Logger from ctx or nil if no such Logger is found.
+func FromContextAsSlogLogger(ctx context.Context) *slog.Logger {
+	v := ctx.Value(contextKey{})
+	if v == nil {
+		return nil
+	}
+
+	switch v := v.(type) {
+	case Logger:
+		return slog.New(ToSlogHandler(v))
+	case *slog.Logger:
+		return v
+	default:
+		// Not reached.
+		panic(fmt.Sprintf("unexpected value type for logr context key: %T", v))
+	}
+}
+
+// FromContextOrDiscard returns a Logger from ctx.  If no Logger is found, this
+// returns a Logger that discards all log messages.
+func FromContextOrDiscard(ctx context.Context) Logger {
+	if logger, err := FromContext(ctx); err == nil {
+		return logger
+	}
+	return Discard()
+}
+
+// NewContext returns a new Context, derived from ctx, which carries the
+// provided Logger.
+func NewContext(ctx context.Context, logger Logger) context.Context {
+	return context.WithValue(ctx, contextKey{}, logger)
+}
+
+// NewContextWithSlogLogger returns a new Context, derived from ctx, which carries the
+// provided slog.Logger.
+func NewContextWithSlogLogger(ctx context.Context, logger *slog.Logger) context.Context {
+	return context.WithValue(ctx, contextKey{}, logger)
+}
diff --git a/vendor/github.com/go-logr/logr/funcr/funcr.go b/vendor/github.com/go-logr/logr/funcr/funcr.go
index 12e5807cc5c..fb2f866f4b7 100644
--- a/vendor/github.com/go-logr/logr/funcr/funcr.go
+++ b/vendor/github.com/go-logr/logr/funcr/funcr.go
@@ -100,6 +100,11 @@ type Options struct {
 	// details, see docs for Go's time.Layout.
 	TimestampFormat string
 
+	// LogInfoLevel tells funcr what key to use to log the info level.
+	// If not specified, the info level will be logged as "level".
+	// If this is set to "", the info level will not be logged at all.
+	LogInfoLevel *string
+
 	// Verbosity tells funcr which V logs to produce.  Higher values enable
 	// more logs.  Info logs at or below this level will be written, while logs
 	// above this level will be discarded.
@@ -213,6 +218,10 @@ func newFormatter(opts Options, outfmt outputFormat) Formatter {
 	if opts.MaxLogDepth == 0 {
 		opts.MaxLogDepth = defaultMaxLogDepth
 	}
+	if opts.LogInfoLevel == nil {
+		opts.LogInfoLevel = new(string)
+		*opts.LogInfoLevel = "level"
+	}
 	f := Formatter{
 		outputFormat: outfmt,
 		prefix:       "",
@@ -227,12 +236,15 @@ func newFormatter(opts Options, outfmt outputFormat) Formatter {
 // implementation. It should be constructed with NewFormatter. Some of
 // its methods directly implement logr.LogSink.
 type Formatter struct {
-	outputFormat outputFormat
-	prefix       string
-	values       []any
-	valuesStr    string
-	depth        int
-	opts         *Options
+	outputFormat    outputFormat
+	prefix          string
+	values          []any
+	valuesStr       string
+	parentValuesStr string
+	depth           int
+	opts            *Options
+	group           string // for slog groups
+	groupDepth      int
 }
 
 // outputFormat indicates which outputFormat to use.
@@ -253,33 +265,62 @@ func (f Formatter) render(builtins, args []any) string {
 	// Empirically bytes.Buffer is faster than strings.Builder for this.
 	buf := bytes.NewBuffer(make([]byte, 0, 1024))
 	if f.outputFormat == outputJSON {
-		buf.WriteByte('{')
+		buf.WriteByte('{') // for the whole line
 	}
+
 	vals := builtins
 	if hook := f.opts.RenderBuiltinsHook; hook != nil {
 		vals = hook(f.sanitize(vals))
 	}
 	f.flatten(buf, vals, false, false) // keys are ours, no need to escape
 	continuing := len(builtins) > 0
-	if len(f.valuesStr) > 0 {
+
+	if f.parentValuesStr != "" {
 		if continuing {
-			if f.outputFormat == outputJSON {
-				buf.WriteByte(',')
-			} else {
-				buf.WriteByte(' ')
-			}
+			buf.WriteByte(f.comma())
 		}
+		buf.WriteString(f.parentValuesStr)
 		continuing = true
+	}
+
+	groupDepth := f.groupDepth
+	if f.group != "" {
+		if f.valuesStr != "" || len(args) != 0 {
+			if continuing {
+				buf.WriteByte(f.comma())
+			}
+			buf.WriteString(f.quoted(f.group, true)) // escape user-provided keys
+			buf.WriteByte(f.colon())
+			buf.WriteByte('{') // for the group
+			continuing = false
+		} else {
+			// The group was empty
+			groupDepth--
+		}
+	}
+
+	if f.valuesStr != "" {
+		if continuing {
+			buf.WriteByte(f.comma())
+		}
 		buf.WriteString(f.valuesStr)
+		continuing = true
 	}
+
 	vals = args
 	if hook := f.opts.RenderArgsHook; hook != nil {
 		vals = hook(f.sanitize(vals))
 	}
 	f.flatten(buf, vals, continuing, true) // escape user-provided keys
+
+	for i := 0; i < groupDepth; i++ {
+		buf.WriteByte('}') // for the groups
+	}
+
 	if f.outputFormat == outputJSON {
-		buf.WriteByte('}')
+		buf.WriteByte('}') // for the whole line
 	}
+
 	return buf.String()
 }
 
@@ -298,9 +339,16 @@ func (f Formatter) flatten(buf *bytes.Buffer, kvList []any, continuing bool, esc
 	if len(kvList)%2 != 0 {
 		kvList = append(kvList, noValue)
 	}
+	copied := false
 	for i := 0; i < len(kvList); i += 2 {
 		k, ok := kvList[i].(string)
 		if !ok {
+			if !copied {
+				newList := make([]any, len(kvList))
+				copy(newList, kvList)
+				kvList = newList
+				copied = true
+			}
 			k = f.nonStringKey(kvList[i])
 			kvList[i] = k
 		}
@@ -308,7 +356,7 @@ func (f Formatter) flatten(buf *bytes.Buffer, kvList []any, continuing bool, esc
 
 		if i > 0 || continuing {
 			if f.outputFormat == outputJSON {
-				buf.WriteByte(',')
+				buf.WriteByte(f.comma())
 			} else {
 				// In theory the format could be something we don't understand.  In
 				// practice, we control it, so it won't be.
@@ -316,24 +364,35 @@ func (f Formatter) flatten(buf *bytes.Buffer, kvList []any, continuing bool, esc
 			}
 		}
 
-		if escapeKeys {
-			buf.WriteString(prettyString(k))
-		} else {
-			// this is faster
-			buf.WriteByte('"')
-			buf.WriteString(k)
-			buf.WriteByte('"')
-		}
-		if f.outputFormat == outputJSON {
-			buf.WriteByte(':')
-		} else {
-			buf.WriteByte('=')
-		}
+		buf.WriteString(f.quoted(k, escapeKeys))
+		buf.WriteByte(f.colon())
 		buf.WriteString(f.pretty(v))
 	}
 	return kvList
 }
 
+func (f Formatter) quoted(str string, escape bool) string {
+	if escape {
+		return prettyString(str)
+	}
+	// this is faster
+	return `"` + str + `"`
+}
+
+func (f Formatter) comma() byte {
+	if f.outputFormat == outputJSON {
+		return ','
+	}
+	return ' '
+}
+
+func (f Formatter) colon() byte {
+	if f.outputFormat == outputJSON {
+		return ':'
+	}
+	return '='
+}
+
 func (f Formatter) pretty(value any) string {
 	return f.prettyWithFlags(value, 0, 0)
 }
@@ -407,12 +466,12 @@ func (f Formatter) prettyWithFlags(value any, flags uint32, depth int) string {
 		}
 		for i := 0; i < len(v); i += 2 {
 			if i > 0 {
-				buf.WriteByte(',')
+				buf.WriteByte(f.comma())
 			}
 			k, _ := v[i].(string) // sanitize() above means no need to check success
 			// arbitrary keys might need escaping
 			buf.WriteString(prettyString(k))
-			buf.WriteByte(':')
+			buf.WriteByte(f.colon())
 			buf.WriteString(f.prettyWithFlags(v[i+1], 0, depth+1))
 		}
 		if flags&flagRawStruct == 0 {
@@ -481,7 +540,7 @@ func (f Formatter) prettyWithFlags(value any, flags uint32, depth int) string {
 				continue
 			}
 			if printComma {
-				buf.WriteByte(',')
+				buf.WriteByte(f.comma())
 			}
 			printComma = true // if we got here, we are rendering a field
 			if fld.Anonymous && fld.Type.Kind() == reflect.Struct && name == "" {
@@ -492,10 +551,8 @@ func (f Formatter) prettyWithFlags(value any, flags uint32, depth int) string {
 				name = fld.Name
 			}
 			// field names can't contain characters which need escaping
-			buf.WriteByte('"')
-			buf.WriteString(name)
-			buf.WriteByte('"')
-			buf.WriteByte(':')
+			buf.WriteString(f.quoted(name, false))
+			buf.WriteByte(f.colon())
 			buf.WriteString(f.prettyWithFlags(v.Field(i).Interface(), 0, depth+1))
 		}
 		if flags&flagRawStruct == 0 {
@@ -520,7 +577,7 @@ func (f Formatter) prettyWithFlags(value any, flags uint32, depth int) string {
 		buf.WriteByte('[')
 		for i := 0; i < v.Len(); i++ {
 			if i > 0 {
-				buf.WriteByte(',')
+				buf.WriteByte(f.comma())
 			}
 			e := v.Index(i)
 			buf.WriteString(f.prettyWithFlags(e.Interface(), 0, depth+1))
@@ -534,7 +591,7 @@ func (f Formatter) prettyWithFlags(value any, flags uint32, depth int) string {
 		i := 0
 		for it.Next() {
 			if i > 0 {
-				buf.WriteByte(',')
+				buf.WriteByte(f.comma())
 			}
 			// If a map key supports TextMarshaler, use it.
 			keystr := ""
@@ -556,7 +613,7 @@ func (f Formatter) prettyWithFlags(value any, flags uint32, depth int) string {
 				}
 			}
 			buf.WriteString(keystr)
-			buf.WriteByte(':')
+			buf.WriteByte(f.colon())
 			buf.WriteString(f.prettyWithFlags(it.Value().Interface(), 0, depth+1))
 			i++
 		}
@@ -706,6 +763,53 @@ func (f Formatter) sanitize(kvList []any) []any {
 	return kvList
 }
 
+// startGroup opens a new group scope (basically a sub-struct), which locks all
+// the current saved values and starts them anew.  This is needed to satisfy
+// slog.
+func (f *Formatter) startGroup(group string) {
+	// Unnamed groups are just inlined.
+	if group == "" {
+		return
+	}
+
+	// Any saved values can no longer be changed.
+	buf := bytes.NewBuffer(make([]byte, 0, 1024))
+	continuing := false
+
+	if f.parentValuesStr != "" {
+		buf.WriteString(f.parentValuesStr)
+		continuing = true
+	}
+
+	if f.group != "" && f.valuesStr != "" {
+		if continuing {
+			buf.WriteByte(f.comma())
+		}
+		buf.WriteString(f.quoted(f.group, true)) // escape user-provided keys
+		buf.WriteByte(f.colon())
+		buf.WriteByte('{') // for the group
+		continuing = false
+	}
+
+	if f.valuesStr != "" {
+		if continuing {
+			buf.WriteByte(f.comma())
+		}
+		buf.WriteString(f.valuesStr)
+	}
+
+	// NOTE: We don't close the scope here - that's done later, when a log line
+	// is actually rendered (because we have N scopes to close).
+
+	f.parentValuesStr = buf.String()
+
+	// Start collecting new values.
+	f.group = group
+	f.groupDepth++
+	f.valuesStr = ""
+	f.values = nil
+}
+
 // Init configures this Formatter from runtime info, such as the call depth
 // imposed by logr itself.
 // Note that this receiver is a pointer, so depth can be saved.
@@ -740,7 +844,10 @@ func (f Formatter) FormatInfo(level int, msg string, kvList []any) (prefix, args
 	if policy := f.opts.LogCaller; policy == All || policy == Info {
 		args = append(args, "caller", f.caller())
 	}
-	args = append(args, "level", level, "msg", msg)
+	if key := *f.opts.LogInfoLevel; key != "" {
+		args = append(args, key, level)
+	}
+	args = append(args, "msg", msg)
 	return prefix, f.render(args, kvList)
 }
 
diff --git a/vendor/github.com/go-logr/logr/funcr/slogsink.go b/vendor/github.com/go-logr/logr/funcr/slogsink.go
new file mode 100644
index 00000000000..7bd84761e2d
--- /dev/null
+++ b/vendor/github.com/go-logr/logr/funcr/slogsink.go
@@ -0,0 +1,105 @@
+//go:build go1.21
+// +build go1.21
+
+/*
+Copyright 2023 The logr Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package funcr
+
+import (
+	"context"
+	"log/slog"
+
+	"github.com/go-logr/logr"
+)
+
+var _ logr.SlogSink = &fnlogger{}
+
+const extraSlogSinkDepth = 3 // 2 for slog, 1 for SlogSink
+
+func (l fnlogger) Handle(_ context.Context, record slog.Record) error {
+	kvList := make([]any, 0, 2*record.NumAttrs())
+	record.Attrs(func(attr slog.Attr) bool {
+		kvList = attrToKVs(attr, kvList)
+		return true
+	})
+
+	if record.Level >= slog.LevelError {
+		l.WithCallDepth(extraSlogSinkDepth).Error(nil, record.Message, kvList...)
+	} else {
+		level := l.levelFromSlog(record.Level)
+		l.WithCallDepth(extraSlogSinkDepth).Info(level, record.Message, kvList...)
+	}
+	return nil
+}
+
+func (l fnlogger) WithAttrs(attrs []slog.Attr) logr.SlogSink {
+	kvList := make([]any, 0, 2*len(attrs))
+	for _, attr := range attrs {
+		kvList = attrToKVs(attr, kvList)
+	}
+	l.AddValues(kvList)
+	return &l
+}
+
+func (l fnlogger) WithGroup(name string) logr.SlogSink {
+	l.startGroup(name)
+	return &l
+}
+
+// attrToKVs appends a slog.Attr to a logr-style kvList.  It handle slog Groups
+// and other details of slog.
+func attrToKVs(attr slog.Attr, kvList []any) []any {
+	attrVal := attr.Value.Resolve()
+	if attrVal.Kind() == slog.KindGroup {
+		groupVal := attrVal.Group()
+		grpKVs := make([]any, 0, 2*len(groupVal))
+		for _, attr := range groupVal {
+			grpKVs = attrToKVs(attr, grpKVs)
+		}
+		if attr.Key == "" {
+			// slog says we have to inline these
+			kvList = append(kvList, grpKVs...)
+		} else {
+			kvList = append(kvList, attr.Key, PseudoStruct(grpKVs))
+		}
+	} else if attr.Key != "" {
+		kvList = append(kvList, attr.Key, attrVal.Any())
+	}
+
+	return kvList
+}
+
+// levelFromSlog adjusts the level by the logger's verbosity and negates it.
+// It ensures that the result is >= 0. This is necessary because the result is
+// passed to a LogSink and that API did not historically document whether
+// levels could be negative or what that meant.
+//
+// Some example usage:
+//
+//	logrV0 := getMyLogger()
+//	logrV2 := logrV0.V(2)
+//	slogV2 := slog.New(logr.ToSlogHandler(logrV2))
+//	slogV2.Debug("msg") // =~ logrV2.V(4) =~ logrV0.V(6)
+//	slogV2.Info("msg")  // =~  logrV2.V(0) =~ logrV0.V(2)
+//	slogv2.Warn("msg")  // =~ logrV2.V(-4) =~ logrV0.V(0)
+func (l fnlogger) levelFromSlog(level slog.Level) int {
+	result := -level
+	if result < 0 {
+		result = 0 // because LogSink doesn't expect negative V levels
+	}
+	return int(result)
+}
diff --git a/vendor/github.com/go-logr/logr/logr.go b/vendor/github.com/go-logr/logr/logr.go
index 2a5075a180f..b4428e105b4 100644
--- a/vendor/github.com/go-logr/logr/logr.go
+++ b/vendor/github.com/go-logr/logr/logr.go
@@ -207,10 +207,6 @@ limitations under the License.
 // those.
 package logr
 
-import (
-	"context"
-)
-
 // New returns a new Logger instance.  This is primarily used by libraries
 // implementing LogSink, rather than end users.  Passing a nil sink will create
 // a Logger which discards all log lines.
@@ -410,45 +406,6 @@ func (l Logger) IsZero() bool {
 	return l.sink == nil
 }
 
-// contextKey is how we find Loggers in a context.Context.
-type contextKey struct{}
-
-// FromContext returns a Logger from ctx or an error if no Logger is found.
-func FromContext(ctx context.Context) (Logger, error) {
-	if v, ok := ctx.Value(contextKey{}).(Logger); ok {
-		return v, nil
-	}
-
-	return Logger{}, notFoundError{}
-}
-
-// notFoundError exists to carry an IsNotFound method.
-type notFoundError struct{}
-
-func (notFoundError) Error() string {
-	return "no logr.Logger was present"
-}
-
-func (notFoundError) IsNotFound() bool {
-	return true
-}
-
-// FromContextOrDiscard returns a Logger from ctx.  If no Logger is found, this
-// returns a Logger that discards all log messages.
-func FromContextOrDiscard(ctx context.Context) Logger {
-	if v, ok := ctx.Value(contextKey{}).(Logger); ok {
-		return v
-	}
-
-	return Discard()
-}
-
-// NewContext returns a new Context, derived from ctx, which carries the
-// provided Logger.
-func NewContext(ctx context.Context, logger Logger) context.Context {
-	return context.WithValue(ctx, contextKey{}, logger)
-}
-
 // RuntimeInfo holds information that the logr "core" library knows which
 // LogSinks might want to know.
 type RuntimeInfo struct {
diff --git a/vendor/github.com/go-logr/logr/sloghandler.go b/vendor/github.com/go-logr/logr/sloghandler.go
new file mode 100644
index 00000000000..82d1ba49481
--- /dev/null
+++ b/vendor/github.com/go-logr/logr/sloghandler.go
@@ -0,0 +1,192 @@
+//go:build go1.21
+// +build go1.21
+
+/*
+Copyright 2023 The logr Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package logr
+
+import (
+	"context"
+	"log/slog"
+)
+
+type slogHandler struct {
+	// May be nil, in which case all logs get discarded.
+	sink LogSink
+	// Non-nil if sink is non-nil and implements SlogSink.
+	slogSink SlogSink
+
+	// groupPrefix collects values from WithGroup calls. It gets added as
+	// prefix to value keys when handling a log record.
+	groupPrefix string
+
+	// levelBias can be set when constructing the handler to influence the
+	// slog.Level of log records. A positive levelBias reduces the
+	// slog.Level value. slog has no API to influence this value after the
+	// handler got created, so it can only be set indirectly through
+	// Logger.V.
+	levelBias slog.Level
+}
+
+var _ slog.Handler = &slogHandler{}
+
+// groupSeparator is used to concatenate WithGroup names and attribute keys.
+const groupSeparator = "."
+
+// GetLevel is used for black box unit testing.
+func (l *slogHandler) GetLevel() slog.Level {
+	return l.levelBias
+}
+
+func (l *slogHandler) Enabled(_ context.Context, level slog.Level) bool {
+	return l.sink != nil && (level >= slog.LevelError || l.sink.Enabled(l.levelFromSlog(level)))
+}
+
+func (l *slogHandler) Handle(ctx context.Context, record slog.Record) error {
+	if l.slogSink != nil {
+		// Only adjust verbosity level of log entries < slog.LevelError.
+		if record.Level < slog.LevelError {
+			record.Level -= l.levelBias
+		}
+		return l.slogSink.Handle(ctx, record)
+	}
+
+	// No need to check for nil sink here because Handle will only be called
+	// when Enabled returned true.
+
+	kvList := make([]any, 0, 2*record.NumAttrs())
+	record.Attrs(func(attr slog.Attr) bool {
+		kvList = attrToKVs(attr, l.groupPrefix, kvList)
+		return true
+	})
+	if record.Level >= slog.LevelError {
+		l.sinkWithCallDepth().Error(nil, record.Message, kvList...)
+	} else {
+		level := l.levelFromSlog(record.Level)
+		l.sinkWithCallDepth().Info(level, record.Message, kvList...)
+	}
+	return nil
+}
+
+// sinkWithCallDepth adjusts the stack unwinding so that when Error or Info
+// are called by Handle, code in slog gets skipped.
+//
+// This offset currently (Go 1.21.0) works for calls through
+// slog.New(ToSlogHandler(...)).  There's no guarantee that the call
+// chain won't change. Wrapping the handler will also break unwinding. It's
+// still better than not adjusting at all....
+//
+// This cannot be done when constructing the handler because FromSlogHandler needs
+// access to the original sink without this adjustment. A second copy would
+// work, but then WithAttrs would have to be called for both of them.
+func (l *slogHandler) sinkWithCallDepth() LogSink {
+	if sink, ok := l.sink.(CallDepthLogSink); ok {
+		return sink.WithCallDepth(2)
+	}
+	return l.sink
+}
+
+func (l *slogHandler) WithAttrs(attrs []slog.Attr) slog.Handler {
+	if l.sink == nil || len(attrs) == 0 {
+		return l
+	}
+
+	clone := *l
+	if l.slogSink != nil {
+		clone.slogSink = l.slogSink.WithAttrs(attrs)
+		clone.sink = clone.slogSink
+	} else {
+		kvList := make([]any, 0, 2*len(attrs))
+		for _, attr := range attrs {
+			kvList = attrToKVs(attr, l.groupPrefix, kvList)
+		}
+		clone.sink = l.sink.WithValues(kvList...)
+	}
+	return &clone
+}
+
+func (l *slogHandler) WithGroup(name string) slog.Handler {
+	if l.sink == nil {
+		return l
+	}
+	if name == "" {
+		// slog says to inline empty groups
+		return l
+	}
+	clone := *l
+	if l.slogSink != nil {
+		clone.slogSink = l.slogSink.WithGroup(name)
+		clone.sink = clone.slogSink
+	} else {
+		clone.groupPrefix = addPrefix(clone.groupPrefix, name)
+	}
+	return &clone
+}
+
+// attrToKVs appends a slog.Attr to a logr-style kvList.  It handle slog Groups
+// and other details of slog.
+func attrToKVs(attr slog.Attr, groupPrefix string, kvList []any) []any {
+	attrVal := attr.Value.Resolve()
+	if attrVal.Kind() == slog.KindGroup {
+		groupVal := attrVal.Group()
+		grpKVs := make([]any, 0, 2*len(groupVal))
+		prefix := groupPrefix
+		if attr.Key != "" {
+			prefix = addPrefix(groupPrefix, attr.Key)
+		}
+		for _, attr := range groupVal {
+			grpKVs = attrToKVs(attr, prefix, grpKVs)
+		}
+		kvList = append(kvList, grpKVs...)
+	} else if attr.Key != "" {
+		kvList = append(kvList, addPrefix(groupPrefix, attr.Key), attrVal.Any())
+	}
+
+	return kvList
+}
+
+func addPrefix(prefix, name string) string {
+	if prefix == "" {
+		return name
+	}
+	if name == "" {
+		return prefix
+	}
+	return prefix + groupSeparator + name
+}
+
+// levelFromSlog adjusts the level by the logger's verbosity and negates it.
+// It ensures that the result is >= 0. This is necessary because the result is
+// passed to a LogSink and that API did not historically document whether
+// levels could be negative or what that meant.
+//
+// Some example usage:
+//
+//	logrV0 := getMyLogger()
+//	logrV2 := logrV0.V(2)
+//	slogV2 := slog.New(logr.ToSlogHandler(logrV2))
+//	slogV2.Debug("msg") // =~ logrV2.V(4) =~ logrV0.V(6)
+//	slogV2.Info("msg")  // =~  logrV2.V(0) =~ logrV0.V(2)
+//	slogv2.Warn("msg")  // =~ logrV2.V(-4) =~ logrV0.V(0)
+func (l *slogHandler) levelFromSlog(level slog.Level) int {
+	result := -level
+	result += l.levelBias // in case the original Logger had a V level
+	if result < 0 {
+		result = 0 // because LogSink doesn't expect negative V levels
+	}
+	return int(result)
+}
diff --git a/vendor/github.com/go-logr/logr/slogr.go b/vendor/github.com/go-logr/logr/slogr.go
new file mode 100644
index 00000000000..28a83d02439
--- /dev/null
+++ b/vendor/github.com/go-logr/logr/slogr.go
@@ -0,0 +1,100 @@
+//go:build go1.21
+// +build go1.21
+
+/*
+Copyright 2023 The logr Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package logr
+
+import (
+	"context"
+	"log/slog"
+)
+
+// FromSlogHandler returns a Logger which writes to the slog.Handler.
+//
+// The logr verbosity level is mapped to slog levels such that V(0) becomes
+// slog.LevelInfo and V(4) becomes slog.LevelDebug.
+func FromSlogHandler(handler slog.Handler) Logger {
+	if handler, ok := handler.(*slogHandler); ok {
+		if handler.sink == nil {
+			return Discard()
+		}
+		return New(handler.sink).V(int(handler.levelBias))
+	}
+	return New(&slogSink{handler: handler})
+}
+
+// ToSlogHandler returns a slog.Handler which writes to the same sink as the Logger.
+//
+// The returned logger writes all records with level >= slog.LevelError as
+// error log entries with LogSink.Error, regardless of the verbosity level of
+// the Logger:
+//
+//	logger := <some Logger with 0 as verbosity level>
+//	slog.New(ToSlogHandler(logger.V(10))).Error(...) -> logSink.Error(...)
+//
+// The level of all other records gets reduced by the verbosity
+// level of the Logger and the result is negated. If it happens
+// to be negative, then it gets replaced by zero because a LogSink
+// is not expected to handled negative levels:
+//
+//	slog.New(ToSlogHandler(logger)).Debug(...) -> logger.GetSink().Info(level=4, ...)
+//	slog.New(ToSlogHandler(logger)).Warning(...) -> logger.GetSink().Info(level=0, ...)
+//	slog.New(ToSlogHandler(logger)).Info(...) -> logger.GetSink().Info(level=0, ...)
+//	slog.New(ToSlogHandler(logger.V(4))).Info(...) -> logger.GetSink().Info(level=4, ...)
+func ToSlogHandler(logger Logger) slog.Handler {
+	if sink, ok := logger.GetSink().(*slogSink); ok && logger.GetV() == 0 {
+		return sink.handler
+	}
+
+	handler := &slogHandler{sink: logger.GetSink(), levelBias: slog.Level(logger.GetV())}
+	if slogSink, ok := handler.sink.(SlogSink); ok {
+		handler.slogSink = slogSink
+	}
+	return handler
+}
+
+// SlogSink is an optional interface that a LogSink can implement to support
+// logging through the slog.Logger or slog.Handler APIs better. It then should
+// also support special slog values like slog.Group. When used as a
+// slog.Handler, the advantages are:
+//
+//   - stack unwinding gets avoided in favor of logging the pre-recorded PC,
+//     as intended by slog
+//   - proper grouping of key/value pairs via WithGroup
+//   - verbosity levels > slog.LevelInfo can be recorded
+//   - less overhead
+//
+// Both APIs (Logger and slog.Logger/Handler) then are supported equally
+// well. Developers can pick whatever API suits them better and/or mix
+// packages which use either API in the same binary with a common logging
+// implementation.
+//
+// This interface is necessary because the type implementing the LogSink
+// interface cannot also implement the slog.Handler interface due to the
+// different prototype of the common Enabled method.
+//
+// An implementation could support both interfaces in two different types, but then
+// additional interfaces would be needed to convert between those types in FromSlogHandler
+// and ToSlogHandler.
+type SlogSink interface {
+	LogSink
+
+	Handle(ctx context.Context, record slog.Record) error
+	WithAttrs(attrs []slog.Attr) SlogSink
+	WithGroup(name string) SlogSink
+}
diff --git a/vendor/github.com/go-logr/logr/slogsink.go b/vendor/github.com/go-logr/logr/slogsink.go
new file mode 100644
index 00000000000..4060fcbc2b0
--- /dev/null
+++ b/vendor/github.com/go-logr/logr/slogsink.go
@@ -0,0 +1,120 @@
+//go:build go1.21
+// +build go1.21
+
+/*
+Copyright 2023 The logr Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package logr
+
+import (
+	"context"
+	"log/slog"
+	"runtime"
+	"time"
+)
+
+var (
+	_ LogSink          = &slogSink{}
+	_ CallDepthLogSink = &slogSink{}
+	_ Underlier        = &slogSink{}
+)
+
+// Underlier is implemented by the LogSink returned by NewFromLogHandler.
+type Underlier interface {
+	// GetUnderlying returns the Handler used by the LogSink.
+	GetUnderlying() slog.Handler
+}
+
+const (
+	// nameKey is used to log the `WithName` values as an additional attribute.
+	nameKey = "logger"
+
+	// errKey is used to log the error parameter of Error as an additional attribute.
+	errKey = "err"
+)
+
+type slogSink struct {
+	callDepth int
+	name      string
+	handler   slog.Handler
+}
+
+func (l *slogSink) Init(info RuntimeInfo) {
+	l.callDepth = info.CallDepth
+}
+
+func (l *slogSink) GetUnderlying() slog.Handler {
+	return l.handler
+}
+
+func (l *slogSink) WithCallDepth(depth int) LogSink {
+	newLogger := *l
+	newLogger.callDepth += depth
+	return &newLogger
+}
+
+func (l *slogSink) Enabled(level int) bool {
+	return l.handler.Enabled(context.Background(), slog.Level(-level))
+}
+
+func (l *slogSink) Info(level int, msg string, kvList ...interface{}) {
+	l.log(nil, msg, slog.Level(-level), kvList...)
+}
+
+func (l *slogSink) Error(err error, msg string, kvList ...interface{}) {
+	l.log(err, msg, slog.LevelError, kvList...)
+}
+
+func (l *slogSink) log(err error, msg string, level slog.Level, kvList ...interface{}) {
+	var pcs [1]uintptr
+	// skip runtime.Callers, this function, Info/Error, and all helper functions above that.
+	runtime.Callers(3+l.callDepth, pcs[:])
+
+	record := slog.NewRecord(time.Now(), level, msg, pcs[0])
+	if l.name != "" {
+		record.AddAttrs(slog.String(nameKey, l.name))
+	}
+	if err != nil {
+		record.AddAttrs(slog.Any(errKey, err))
+	}
+	record.Add(kvList...)
+	_ = l.handler.Handle(context.Background(), record)
+}
+
+func (l slogSink) WithName(name string) LogSink {
+	if l.name != "" {
+		l.name += "/"
+	}
+	l.name += name
+	return &l
+}
+
+func (l slogSink) WithValues(kvList ...interface{}) LogSink {
+	l.handler = l.handler.WithAttrs(kvListToAttrs(kvList...))
+	return &l
+}
+
+func kvListToAttrs(kvList ...interface{}) []slog.Attr {
+	// We don't need the record itself, only its Add method.
+	record := slog.NewRecord(time.Time{}, 0, "", 0)
+	record.Add(kvList...)
+	attrs := make([]slog.Attr, 0, record.NumAttrs())
+	record.Attrs(func(attr slog.Attr) bool {
+		attrs = append(attrs, attr)
+		return true
+	})
+	return attrs
+}
diff --git a/vendor/github.com/go-openapi/errors/.golangci.yml b/vendor/github.com/go-openapi/errors/.golangci.yml
index 4e1fc0c7d48..cf88ead324d 100644
--- a/vendor/github.com/go-openapi/errors/.golangci.yml
+++ b/vendor/github.com/go-openapi/errors/.golangci.yml
@@ -4,45 +4,59 @@ linters-settings:
   golint:
     min-confidence: 0
   gocyclo:
-    min-complexity: 30
+    min-complexity: 45
   maligned:
     suggest-new: true
   dupl:
-    threshold: 100
+    threshold: 200
   goconst:
     min-len: 2
-    min-occurrences: 4
+    min-occurrences: 3
+
 linters:
   enable-all: true
   disable:
+    - errname # this repo doesn't follow the convention advised by this linter
     - maligned
+    - unparam
     - lll
+    - gochecknoinits
     - gochecknoglobals
+    - funlen
     - godox
     - gocognit
     - whitespace
     - wsl
-    - funlen
-    - gochecknoglobals
-    - gochecknoinits
-    - scopelint
     - wrapcheck
-    - exhaustivestruct
-    - exhaustive
-    - nlreturn
     - testpackage
-    - gci
-    - gofumpt
-    - goerr113
+    - nlreturn
     - gomnd
-    - tparallel
+    - exhaustivestruct
+    - goerr113
+    - errorlint
     - nestif
     - godot
-    - errorlint
+    - gofumpt
     - paralleltest
     - tparallel
-    - cyclop
-    - errname
-    - varnamelen
+    - thelper
+    - ifshort
     - exhaustruct
-    - maintidx
+    - varnamelen
+    - gci
+    - depguard
+    - errchkjson
+    - inamedparam
+    - nonamedreturns
+    - musttag
+    - ireturn
+    - forcetypeassert
+    - cyclop
+    # deprecated linters
+    - deadcode
+    - interfacer
+    - scopelint
+    - varcheck
+    - structcheck
+    - golint
+    - nosnakecase
diff --git a/vendor/github.com/go-openapi/errors/README.md b/vendor/github.com/go-openapi/errors/README.md
index 4aac049e608..6d57ea55c7c 100644
--- a/vendor/github.com/go-openapi/errors/README.md
+++ b/vendor/github.com/go-openapi/errors/README.md
@@ -1,11 +1,8 @@
-# OpenAPI errors
+# OpenAPI errors [![Build Status](https://github.com/go-openapi/errors/actions/workflows/go-test.yml/badge.svg)](https://github.com/go-openapi/errors/actions?query=workflow%3A"go+test") [![codecov](https://codecov.io/gh/go-openapi/errors/branch/master/graph/badge.svg)](https://codecov.io/gh/go-openapi/errors)
 
-[![Build Status](https://travis-ci.org/go-openapi/errors.svg?branch=master)](https://travis-ci.org/go-openapi/errors)
-[![codecov](https://codecov.io/gh/go-openapi/errors/branch/master/graph/badge.svg)](https://codecov.io/gh/go-openapi/errors)
 [![Slack Status](https://slackin.goswagger.io/badge.svg)](https://slackin.goswagger.io)
 [![license](http://img.shields.io/badge/license-Apache%20v2-orange.svg)](https://raw.githubusercontent.com/go-openapi/errors/master/LICENSE)
 [![Go Reference](https://pkg.go.dev/badge/github.com/go-openapi/errors.svg)](https://pkg.go.dev/github.com/go-openapi/errors)
-[![GolangCI](https://golangci.com/badges/github.com/go-openapi/errors.svg)](https://golangci.com)
 [![Go Report Card](https://goreportcard.com/badge/github.com/go-openapi/errors)](https://goreportcard.com/report/github.com/go-openapi/errors)
 
 Shared errors and error interface used throughout the various libraries found in the go-openapi toolkit.
diff --git a/vendor/github.com/go-openapi/errors/api.go b/vendor/github.com/go-openapi/errors/api.go
index c13f3435fa8..5320cb96304 100644
--- a/vendor/github.com/go-openapi/errors/api.go
+++ b/vendor/github.com/go-openapi/errors/api.go
@@ -55,9 +55,15 @@ func (a apiError) MarshalJSON() ([]byte, error) {
 // New creates a new API error with a code and a message
 func New(code int32, message string, args ...interface{}) Error {
 	if len(args) > 0 {
-		return &apiError{code, fmt.Sprintf(message, args...)}
+		return &apiError{
+			code:    code,
+			message: fmt.Sprintf(message, args...),
+		}
+	}
+	return &apiError{
+		code:    code,
+		message: message,
 	}
-	return &apiError{code, message}
 }
 
 // NotFound creates a new not found error
@@ -130,10 +136,14 @@ func flattenComposite(errs *CompositeError) *CompositeError {
 // MethodNotAllowed creates a new method not allowed error
 func MethodNotAllowed(requested string, allow []string) Error {
 	msg := fmt.Sprintf("method %s is not allowed, but [%s] are", requested, strings.Join(allow, ","))
-	return &MethodNotAllowedError{code: http.StatusMethodNotAllowed, Allowed: allow, message: msg}
+	return &MethodNotAllowedError{
+		code:    http.StatusMethodNotAllowed,
+		Allowed: allow,
+		message: msg,
+	}
 }
 
-// ServeError the error handler interface implementation
+// ServeError implements the http error handler interface
 func ServeError(rw http.ResponseWriter, r *http.Request, err error) {
 	rw.Header().Set("Content-Type", "application/json")
 	switch e := err.(type) {
diff --git a/vendor/github.com/go-openapi/errors/schema.go b/vendor/github.com/go-openapi/errors/schema.go
index da5f6c78cb5..cf7ac2ed4da 100644
--- a/vendor/github.com/go-openapi/errors/schema.go
+++ b/vendor/github.com/go-openapi/errors/schema.go
@@ -120,6 +120,10 @@ func (c *CompositeError) Error() string {
 	return c.message
 }
 
+func (c *CompositeError) Unwrap() []error {
+	return c.Errors
+}
+
 // MarshalJSON implements the JSON encoding interface
 func (c CompositeError) MarshalJSON() ([]byte, error) {
 	return json.Marshal(map[string]interface{}{
@@ -133,7 +137,7 @@ func (c CompositeError) MarshalJSON() ([]byte, error) {
 func CompositeValidationError(errors ...error) *CompositeError {
 	return &CompositeError{
 		code:    CompositeErrorCode,
-		Errors:  append([]error{}, errors...),
+		Errors:  append(make([]error, 0, len(errors)), errors...),
 		message: "validation failure list",
 	}
 }
diff --git a/vendor/github.com/go-openapi/strfmt/default.go b/vendor/github.com/go-openapi/strfmt/default.go
index a89a4de3f38..2813714060e 100644
--- a/vendor/github.com/go-openapi/strfmt/default.go
+++ b/vendor/github.com/go-openapi/strfmt/default.go
@@ -25,6 +25,7 @@ import (
 	"strings"
 
 	"github.com/asaskevich/govalidator"
+	"github.com/google/uuid"
 	"go.mongodb.org/mongo-driver/bson"
 )
 
@@ -57,24 +58,35 @@ const (
 	//   - long top-level domain names (e.g. example.london) are permitted
 	//   - symbol unicode points are permitted (e.g. emoji) (not for top-level domain)
 	HostnamePattern = `^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$`
+
+	// json null type
+	jsonNull = "null"
+)
+
+const (
 	// UUIDPattern Regex for UUID that allows uppercase
-	UUIDPattern = `(?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$`
+	//
+	// Deprecated: strfmt no longer uses regular expressions to validate UUIDs.
+	UUIDPattern = `(?i)(^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$)|(^[0-9a-f]{32}$)`
+
 	// UUID3Pattern Regex for UUID3 that allows uppercase
-	UUID3Pattern = `(?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?3[0-9a-f]{3}-?[0-9a-f]{4}-?[0-9a-f]{12}$`
+	//
+	// Deprecated: strfmt no longer uses regular expressions to validate UUIDs.
+	UUID3Pattern = `(?i)(^[0-9a-f]{8}-[0-9a-f]{4}-3[0-9a-f]{3}-[0-9a-f]{4}-[0-9a-f]{12}$)|(^[0-9a-f]{12}3[0-9a-f]{3}?[0-9a-f]{16}$)`
+
 	// UUID4Pattern Regex for UUID4 that allows uppercase
-	UUID4Pattern = `(?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?4[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$`
+	//
+	// Deprecated: strfmt no longer uses regular expressions to validate UUIDs.
+	UUID4Pattern = `(?i)(^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$)|(^[0-9a-f]{12}4[0-9a-f]{3}[89ab][0-9a-f]{15}$)`
+
 	// UUID5Pattern Regex for UUID5 that allows uppercase
-	UUID5Pattern = `(?i)^[0-9a-f]{8}-?[0-9a-f]{4}-?5[0-9a-f]{3}-?[89ab][0-9a-f]{3}-?[0-9a-f]{12}$`
-	// json null type
-	jsonNull = "null"
+	//
+	// Deprecated: strfmt no longer uses regular expressions to validate UUIDs.
+	UUID5Pattern = `(?i)(^[0-9a-f]{8}-[0-9a-f]{4}-5[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$)|(^[0-9a-f]{12}5[0-9a-f]{3}[89ab][0-9a-f]{15}$)`
 )
 
 var (
 	rxHostname = regexp.MustCompile(HostnamePattern)
-	rxUUID     = regexp.MustCompile(UUIDPattern)
-	rxUUID3    = regexp.MustCompile(UUID3Pattern)
-	rxUUID4    = regexp.MustCompile(UUID4Pattern)
-	rxUUID5    = regexp.MustCompile(UUID5Pattern)
 )
 
 // IsHostname returns true when the string is a valid hostname
@@ -99,24 +111,28 @@ func IsHostname(str string) bool {
 	return valid
 }
 
-// IsUUID returns true is the string matches a UUID, upper case is allowed
+// IsUUID returns true is the string matches a UUID (in any version, including v6 and v7), upper case is allowed
 func IsUUID(str string) bool {
-	return rxUUID.MatchString(str)
+	_, err := uuid.Parse(str)
+	return err == nil
 }
 
-// IsUUID3 returns true is the string matches a UUID, upper case is allowed
+// IsUUID3 returns true is the string matches a UUID v3, upper case is allowed
 func IsUUID3(str string) bool {
-	return rxUUID3.MatchString(str)
+	id, err := uuid.Parse(str)
+	return err == nil && id.Version() == uuid.Version(3)
 }
 
-// IsUUID4 returns true is the string matches a UUID, upper case is allowed
+// IsUUID4 returns true is the string matches a UUID v4, upper case is allowed
 func IsUUID4(str string) bool {
-	return rxUUID4.MatchString(str)
+	id, err := uuid.Parse(str)
+	return err == nil && id.Version() == uuid.Version(4)
 }
 
-// IsUUID5 returns true is the string matches a UUID, upper case is allowed
+// IsUUID5 returns true is the string matches a UUID v5, upper case is allowed
 func IsUUID5(str string) bool {
-	return rxUUID5.MatchString(str)
+	id, err := uuid.Parse(str)
+	return err == nil && id.Version() == uuid.Version(5)
 }
 
 // IsEmail validates an email address.
diff --git a/vendor/github.com/go-resty/resty/v2/README.md b/vendor/github.com/go-resty/resty/v2/README.md
index 5949af0383e..d6d501ef89e 100644
--- a/vendor/github.com/go-resty/resty/v2/README.md
+++ b/vendor/github.com/go-resty/resty/v2/README.md
@@ -4,7 +4,7 @@
 <p align="center"><a href="#features">Features</a> section describes in detail about Resty capabilities</p>
 </p>
 <p align="center">
-<p align="center"><a href="https://github.com/go-resty/resty/actions/workflows/ci.yml?query=branch%3Amaster"><img src="https://github.com/go-resty/resty/actions/workflows/ci.yml/badge.svg" alt="Build Status"></a> <a href="https://codecov.io/gh/go-resty/resty/branch/master"><img src="https://codecov.io/gh/go-resty/resty/branch/master/graph/badge.svg" alt="Code Coverage"></a> <a href="https://goreportcard.com/report/go-resty/resty"><img src="https://goreportcard.com/badge/go-resty/resty" alt="Go Report Card"></a> <a href="https://github.com/go-resty/resty/releases/latest"><img src="https://img.shields.io/badge/version-2.10.0-blue.svg" alt="Release Version"></a> <a href="https://pkg.go.dev/github.com/go-resty/resty/v2"><img src="https://pkg.go.dev/badge/github.com/go-resty/resty" alt="GoDoc"></a> <a href="LICENSE"><img src="https://img.shields.io/github/license/go-resty/resty.svg" alt="License"></a> <a href="https://github.com/avelino/awesome-go"><img src="https://awesome.re/mentioned-badge.svg" alt="Mentioned in Awesome Go"></a></p>
+<p align="center"><a href="https://github.com/go-resty/resty/actions/workflows/ci.yml?query=branch%3Amaster"><img src="https://github.com/go-resty/resty/actions/workflows/ci.yml/badge.svg" alt="Build Status"></a> <a href="https://codecov.io/gh/go-resty/resty/branch/master"><img src="https://codecov.io/gh/go-resty/resty/branch/master/graph/badge.svg" alt="Code Coverage"></a> <a href="https://goreportcard.com/report/go-resty/resty"><img src="https://goreportcard.com/badge/go-resty/resty" alt="Go Report Card"></a> <a href="https://github.com/go-resty/resty/releases/latest"><img src="https://img.shields.io/badge/version-2.11.0-blue.svg" alt="Release Version"></a> <a href="https://pkg.go.dev/github.com/go-resty/resty/v2"><img src="https://pkg.go.dev/badge/github.com/go-resty/resty" alt="GoDoc"></a> <a href="LICENSE"><img src="https://img.shields.io/github/license/go-resty/resty.svg" alt="License"></a> <a href="https://github.com/avelino/awesome-go"><img src="https://awesome.re/mentioned-badge.svg" alt="Mentioned in Awesome Go"></a></p>
 </p>
 <p align="center">
 <h4 align="center">Resty Communication Channels</h4>
@@ -13,7 +13,7 @@
 
 ## News
 
-  * v2.10.0 [released](https://github.com/go-resty/resty/releases/tag/v2.10.0) and tagged on Oct 14, 2023.
+  * v2.11.0 [released](https://github.com/go-resty/resty/releases/tag/v2.11.0) and tagged on Dec 27, 2023.
   * v2.0.0 [released](https://github.com/go-resty/resty/releases/tag/v2.0.0) and tagged on Jul 16, 2019.
   * v1.12.0 [released](https://github.com/go-resty/resty/releases/tag/v1.12.0) and tagged on Feb 27, 2019.
   * v1.0 released and tagged on Sep 25, 2017. - Resty's first version was released on Sep 15, 2015 then it grew gradually as a very handy and helpful library. Its been a two years since first release. I'm very thankful to Resty users and its [contributors](https://github.com/go-resty/resty/graphs/contributors).
@@ -110,7 +110,7 @@ Resty author also published following projects for Go Community.
 
 ```bash
 # Go Modules
-require github.com/go-resty/resty/v2 v2.7.0
+require github.com/go-resty/resty/v2 v2.11.0
 ```
 
 ## Usage
diff --git a/vendor/github.com/go-resty/resty/v2/digest.go b/vendor/github.com/go-resty/resty/v2/digest.go
index a1088007a14..9dd3a13b578 100644
--- a/vendor/github.com/go-resty/resty/v2/digest.go
+++ b/vendor/github.com/go-resty/resty/v2/digest.go
@@ -133,14 +133,17 @@ func parseChallenge(input string) (*challenge, error) {
 		return nil, ErrDigestBadChallenge
 	}
 	s = strings.Trim(s[7:], ws)
-	sl := strings.Split(s, ", ")
+	sl := strings.Split(s, ",")
 	c := &challenge{}
 	var r []string
 	for i := range sl {
+		sl[i] = strings.TrimSpace(sl[i])
 		r = strings.SplitN(sl[i], "=", 2)
 		if len(r) != 2 {
 			return nil, ErrDigestBadChallenge
 		}
+		r[0] = strings.TrimSpace(r[0])
+		r[1] = strings.TrimSpace(r[1])
 		switch r[0] {
 		case "realm":
 			c.realm = strings.Trim(r[1], qs)
@@ -151,9 +154,9 @@ func parseChallenge(input string) (*challenge, error) {
 		case "opaque":
 			c.opaque = strings.Trim(r[1], qs)
 		case "stale":
-			c.stale = r[1]
+			c.stale = strings.Trim(r[1], qs)
 		case "algorithm":
-			c.algorithm = r[1]
+			c.algorithm = strings.Trim(r[1], qs)
 		case "qop":
 			c.qop = strings.Trim(r[1], qs)
 		case "charset":
diff --git a/vendor/github.com/go-resty/resty/v2/middleware.go b/vendor/github.com/go-resty/resty/v2/middleware.go
index a43a41b5f31..ac2bbc9e88d 100644
--- a/vendor/github.com/go-resty/resty/v2/middleware.go
+++ b/vendor/github.com/go-resty/resty/v2/middleware.go
@@ -481,7 +481,6 @@ func handleContentType(c *Client, r *Request) {
 
 func handleRequestBody(c *Client, r *Request) error {
 	var bodyBytes []byte
-	releaseBuffer(r.bodyBuf)
 	r.bodyBuf = nil
 
 	switch body := r.Body.(type) {
diff --git a/vendor/github.com/godbus/dbus/v5/CONTRIBUTING.md b/vendor/github.com/godbus/dbus/v5/CONTRIBUTING.md
new file mode 100644
index 00000000000..c88f9b2bdd0
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/CONTRIBUTING.md
@@ -0,0 +1,50 @@
+# How to Contribute
+
+## Getting Started
+
+- Fork the repository on GitHub
+- Read the [README](README.markdown) for build and test instructions
+- Play with the project, submit bugs, submit patches!
+
+## Contribution Flow
+
+This is a rough outline of what a contributor's workflow looks like:
+
+- Create a topic branch from where you want to base your work (usually master).
+- Make commits of logical units.
+- Make sure your commit messages are in the proper format (see below).
+- Push your changes to a topic branch in your fork of the repository.
+- Make sure the tests pass, and add any new tests as appropriate.
+- Submit a pull request to the original repository.
+
+Thanks for your contributions!
+
+### Format of the Commit Message
+
+We follow a rough convention for commit messages that is designed to answer two
+questions: what changed and why. The subject line should feature the what and
+the body of the commit should describe the why.
+
+```
+scripts: add the test-cluster command
+
+this uses tmux to setup a test cluster that you can easily kill and
+start for debugging.
+
+Fixes #38
+```
+
+The format can be described more formally as follows:
+
+```
+<subsystem>: <what changed>
+<BLANK LINE>
+<why this change was made>
+<BLANK LINE>
+<footer>
+```
+
+The first line is the subject and should be no longer than 70 characters, the
+second line is always blank, and other lines should be wrapped at 80 characters.
+This allows the message to be easier to read on GitHub as well as in various
+git tools.
diff --git a/vendor/github.com/godbus/dbus/v5/LICENSE b/vendor/github.com/godbus/dbus/v5/LICENSE
new file mode 100644
index 00000000000..670d88fcaaf
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/LICENSE
@@ -0,0 +1,25 @@
+Copyright (c) 2013, Georg Reinke (<guelfey at gmail dot com>), Google
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+1. Redistributions of source code must retain the above copyright notice,
+this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+notice, this list of conditions and the following disclaimer in the
+documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
+TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/vendor/github.com/godbus/dbus/v5/MAINTAINERS b/vendor/github.com/godbus/dbus/v5/MAINTAINERS
new file mode 100644
index 00000000000..27618c9cd11
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/MAINTAINERS
@@ -0,0 +1,3 @@
+Brandon Philips <brandon@ifup.org> (@philips)
+Brian Waldon <brian@waldon.cc> (@bcwaldon)
+John Southworth <jsouthwo@brocade.com> (@jsouthworth)
diff --git a/vendor/github.com/godbus/dbus/v5/README.markdown b/vendor/github.com/godbus/dbus/v5/README.markdown
new file mode 100644
index 00000000000..1fb2eacaa15
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/README.markdown
@@ -0,0 +1,46 @@
+![Build Status](https://github.com/godbus/dbus/workflows/Go/badge.svg)
+
+dbus
+----
+
+dbus is a simple library that implements native Go client bindings for the
+D-Bus message bus system.
+
+### Features
+
+* Complete native implementation of the D-Bus message protocol
+* Go-like API (channels for signals / asynchronous method calls, Goroutine-safe connections)
+* Subpackages that help with the introspection / property interfaces
+
+### Installation
+
+This packages requires Go 1.7. If you installed it and set up your GOPATH, just run:
+
+```
+go get github.com/godbus/dbus
+```
+
+If you want to use the subpackages, you can install them the same way.
+
+### Usage
+
+The complete package documentation and some simple examples are available at
+[godoc.org](http://godoc.org/github.com/godbus/dbus). Also, the
+[_examples](https://github.com/godbus/dbus/tree/master/_examples) directory
+gives a short overview over the basic usage. 
+
+#### Projects using godbus
+- [notify](https://github.com/esiqveland/notify) provides desktop notifications over dbus into a library.
+- [go-bluetooth](https://github.com/muka/go-bluetooth) provides a bluetooth client over bluez dbus API.
+- [playerbm](https://github.com/altdesktop/playerbm) a bookmark utility for media players.
+- [iwd](https://github.com/shibumi/iwd) go bindings for the internet wireless daemon "iwd".
+
+Please note that the API is considered unstable for now and may change without
+further notice.
+
+### License
+
+go.dbus is available under the Simplified BSD License; see LICENSE for the full
+text.
+
+Nearly all of the credit for this library goes to github.com/guelfey/go.dbus.
diff --git a/vendor/github.com/godbus/dbus/v5/auth.go b/vendor/github.com/godbus/dbus/v5/auth.go
new file mode 100644
index 00000000000..283487a0e31
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/auth.go
@@ -0,0 +1,252 @@
+package dbus
+
+import (
+	"bufio"
+	"bytes"
+	"errors"
+	"io"
+	"os"
+	"strconv"
+)
+
+// AuthStatus represents the Status of an authentication mechanism.
+type AuthStatus byte
+
+const (
+	// AuthOk signals that authentication is finished; the next command
+	// from the server should be an OK.
+	AuthOk AuthStatus = iota
+
+	// AuthContinue signals that additional data is needed; the next command
+	// from the server should be a DATA.
+	AuthContinue
+
+	// AuthError signals an error; the server sent invalid data or some
+	// other unexpected thing happened and the current authentication
+	// process should be aborted.
+	AuthError
+)
+
+type authState byte
+
+const (
+	waitingForData authState = iota
+	waitingForOk
+	waitingForReject
+)
+
+// Auth defines the behaviour of an authentication mechanism.
+type Auth interface {
+	// Return the name of the mechanism, the argument to the first AUTH command
+	// and the next status.
+	FirstData() (name, resp []byte, status AuthStatus)
+
+	// Process the given DATA command, and return the argument to the DATA
+	// command and the next status. If len(resp) == 0, no DATA command is sent.
+	HandleData(data []byte) (resp []byte, status AuthStatus)
+}
+
+// Auth authenticates the connection, trying the given list of authentication
+// mechanisms (in that order). If nil is passed, the EXTERNAL and
+// DBUS_COOKIE_SHA1 mechanisms are tried for the current user. For private
+// connections, this method must be called before sending any messages to the
+// bus. Auth must not be called on shared connections.
+func (conn *Conn) Auth(methods []Auth) error {
+	if methods == nil {
+		uid := strconv.Itoa(os.Getuid())
+		methods = []Auth{AuthExternal(uid), AuthCookieSha1(uid, getHomeDir())}
+	}
+	in := bufio.NewReader(conn.transport)
+	err := conn.transport.SendNullByte()
+	if err != nil {
+		return err
+	}
+	err = authWriteLine(conn.transport, []byte("AUTH"))
+	if err != nil {
+		return err
+	}
+	s, err := authReadLine(in)
+	if err != nil {
+		return err
+	}
+	if len(s) < 2 || !bytes.Equal(s[0], []byte("REJECTED")) {
+		return errors.New("dbus: authentication protocol error")
+	}
+	s = s[1:]
+	for _, v := range s {
+		for _, m := range methods {
+			if name, data, status := m.FirstData(); bytes.Equal(v, name) {
+				var ok bool
+				err = authWriteLine(conn.transport, []byte("AUTH"), v, data)
+				if err != nil {
+					return err
+				}
+				switch status {
+				case AuthOk:
+					err, ok = conn.tryAuth(m, waitingForOk, in)
+				case AuthContinue:
+					err, ok = conn.tryAuth(m, waitingForData, in)
+				default:
+					panic("dbus: invalid authentication status")
+				}
+				if err != nil {
+					return err
+				}
+				if ok {
+					if conn.transport.SupportsUnixFDs() {
+						err = authWriteLine(conn, []byte("NEGOTIATE_UNIX_FD"))
+						if err != nil {
+							return err
+						}
+						line, err := authReadLine(in)
+						if err != nil {
+							return err
+						}
+						switch {
+						case bytes.Equal(line[0], []byte("AGREE_UNIX_FD")):
+							conn.EnableUnixFDs()
+							conn.unixFD = true
+						case bytes.Equal(line[0], []byte("ERROR")):
+						default:
+							return errors.New("dbus: authentication protocol error")
+						}
+					}
+					err = authWriteLine(conn.transport, []byte("BEGIN"))
+					if err != nil {
+						return err
+					}
+					go conn.inWorker()
+					return nil
+				}
+			}
+		}
+	}
+	return errors.New("dbus: authentication failed")
+}
+
+// tryAuth tries to authenticate with m as the mechanism, using state as the
+// initial authState and in for reading input. It returns (nil, true) on
+// success, (nil, false) on a REJECTED and (someErr, false) if some other
+// error occurred.
+func (conn *Conn) tryAuth(m Auth, state authState, in *bufio.Reader) (error, bool) {
+	for {
+		s, err := authReadLine(in)
+		if err != nil {
+			return err, false
+		}
+		switch {
+		case state == waitingForData && string(s[0]) == "DATA":
+			if len(s) != 2 {
+				err = authWriteLine(conn.transport, []byte("ERROR"))
+				if err != nil {
+					return err, false
+				}
+				continue
+			}
+			data, status := m.HandleData(s[1])
+			switch status {
+			case AuthOk, AuthContinue:
+				if len(data) != 0 {
+					err = authWriteLine(conn.transport, []byte("DATA"), data)
+					if err != nil {
+						return err, false
+					}
+				}
+				if status == AuthOk {
+					state = waitingForOk
+				}
+			case AuthError:
+				err = authWriteLine(conn.transport, []byte("ERROR"))
+				if err != nil {
+					return err, false
+				}
+			}
+		case state == waitingForData && string(s[0]) == "REJECTED":
+			return nil, false
+		case state == waitingForData && string(s[0]) == "ERROR":
+			err = authWriteLine(conn.transport, []byte("CANCEL"))
+			if err != nil {
+				return err, false
+			}
+			state = waitingForReject
+		case state == waitingForData && string(s[0]) == "OK":
+			if len(s) != 2 {
+				err = authWriteLine(conn.transport, []byte("CANCEL"))
+				if err != nil {
+					return err, false
+				}
+				state = waitingForReject
+			}
+			conn.uuid = string(s[1])
+			return nil, true
+		case state == waitingForData:
+			err = authWriteLine(conn.transport, []byte("ERROR"))
+			if err != nil {
+				return err, false
+			}
+		case state == waitingForOk && string(s[0]) == "OK":
+			if len(s) != 2 {
+				err = authWriteLine(conn.transport, []byte("CANCEL"))
+				if err != nil {
+					return err, false
+				}
+				state = waitingForReject
+			}
+			conn.uuid = string(s[1])
+			return nil, true
+		case state == waitingForOk && string(s[0]) == "REJECTED":
+			return nil, false
+		case state == waitingForOk && (string(s[0]) == "DATA" ||
+			string(s[0]) == "ERROR"):
+
+			err = authWriteLine(conn.transport, []byte("CANCEL"))
+			if err != nil {
+				return err, false
+			}
+			state = waitingForReject
+		case state == waitingForOk:
+			err = authWriteLine(conn.transport, []byte("ERROR"))
+			if err != nil {
+				return err, false
+			}
+		case state == waitingForReject && string(s[0]) == "REJECTED":
+			return nil, false
+		case state == waitingForReject:
+			return errors.New("dbus: authentication protocol error"), false
+		default:
+			panic("dbus: invalid auth state")
+		}
+	}
+}
+
+// authReadLine reads a line and separates it into its fields.
+func authReadLine(in *bufio.Reader) ([][]byte, error) {
+	data, err := in.ReadBytes('\n')
+	if err != nil {
+		return nil, err
+	}
+	data = bytes.TrimSuffix(data, []byte("\r\n"))
+	return bytes.Split(data, []byte{' '}), nil
+}
+
+// authWriteLine writes the given line in the authentication protocol format
+// (elements of data separated by a " " and terminated by "\r\n").
+func authWriteLine(out io.Writer, data ...[]byte) error {
+	buf := make([]byte, 0)
+	for i, v := range data {
+		buf = append(buf, v...)
+		if i != len(data)-1 {
+			buf = append(buf, ' ')
+		}
+	}
+	buf = append(buf, '\r')
+	buf = append(buf, '\n')
+	n, err := out.Write(buf)
+	if err != nil {
+		return err
+	}
+	if n != len(buf) {
+		return io.ErrUnexpectedEOF
+	}
+	return nil
+}
diff --git a/vendor/github.com/godbus/dbus/v5/auth_anonymous.go b/vendor/github.com/godbus/dbus/v5/auth_anonymous.go
new file mode 100644
index 00000000000..75f3ad34d7a
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/auth_anonymous.go
@@ -0,0 +1,16 @@
+package dbus
+
+// AuthAnonymous returns an Auth that uses the ANONYMOUS mechanism.
+func AuthAnonymous() Auth {
+	return &authAnonymous{}
+}
+
+type authAnonymous struct{}
+
+func (a *authAnonymous) FirstData() (name, resp []byte, status AuthStatus) {
+	return []byte("ANONYMOUS"), nil, AuthOk
+}
+
+func (a *authAnonymous) HandleData(data []byte) (resp []byte, status AuthStatus) {
+	return nil, AuthError
+}
diff --git a/vendor/github.com/godbus/dbus/v5/auth_external.go b/vendor/github.com/godbus/dbus/v5/auth_external.go
new file mode 100644
index 00000000000..7e376d3ef6a
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/auth_external.go
@@ -0,0 +1,26 @@
+package dbus
+
+import (
+	"encoding/hex"
+)
+
+// AuthExternal returns an Auth that authenticates as the given user with the
+// EXTERNAL mechanism.
+func AuthExternal(user string) Auth {
+	return authExternal{user}
+}
+
+// AuthExternal implements the EXTERNAL authentication mechanism.
+type authExternal struct {
+	user string
+}
+
+func (a authExternal) FirstData() ([]byte, []byte, AuthStatus) {
+	b := make([]byte, 2*len(a.user))
+	hex.Encode(b, []byte(a.user))
+	return []byte("EXTERNAL"), b, AuthOk
+}
+
+func (a authExternal) HandleData(b []byte) ([]byte, AuthStatus) {
+	return nil, AuthError
+}
diff --git a/vendor/github.com/godbus/dbus/v5/auth_sha1.go b/vendor/github.com/godbus/dbus/v5/auth_sha1.go
new file mode 100644
index 00000000000..80286700b6d
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/auth_sha1.go
@@ -0,0 +1,102 @@
+package dbus
+
+import (
+	"bufio"
+	"bytes"
+	"crypto/rand"
+	"crypto/sha1"
+	"encoding/hex"
+	"os"
+)
+
+// AuthCookieSha1 returns an Auth that authenticates as the given user with the
+// DBUS_COOKIE_SHA1 mechanism. The home parameter should specify the home
+// directory of the user.
+func AuthCookieSha1(user, home string) Auth {
+	return authCookieSha1{user, home}
+}
+
+type authCookieSha1 struct {
+	user, home string
+}
+
+func (a authCookieSha1) FirstData() ([]byte, []byte, AuthStatus) {
+	b := make([]byte, 2*len(a.user))
+	hex.Encode(b, []byte(a.user))
+	return []byte("DBUS_COOKIE_SHA1"), b, AuthContinue
+}
+
+func (a authCookieSha1) HandleData(data []byte) ([]byte, AuthStatus) {
+	challenge := make([]byte, len(data)/2)
+	_, err := hex.Decode(challenge, data)
+	if err != nil {
+		return nil, AuthError
+	}
+	b := bytes.Split(challenge, []byte{' '})
+	if len(b) != 3 {
+		return nil, AuthError
+	}
+	context := b[0]
+	id := b[1]
+	svchallenge := b[2]
+	cookie := a.getCookie(context, id)
+	if cookie == nil {
+		return nil, AuthError
+	}
+	clchallenge := a.generateChallenge()
+	if clchallenge == nil {
+		return nil, AuthError
+	}
+	hash := sha1.New()
+	hash.Write(bytes.Join([][]byte{svchallenge, clchallenge, cookie}, []byte{':'}))
+	hexhash := make([]byte, 2*hash.Size())
+	hex.Encode(hexhash, hash.Sum(nil))
+	data = append(clchallenge, ' ')
+	data = append(data, hexhash...)
+	resp := make([]byte, 2*len(data))
+	hex.Encode(resp, data)
+	return resp, AuthOk
+}
+
+// getCookie searches for the cookie identified by id in context and returns
+// the cookie content or nil. (Since HandleData can't return a specific error,
+// but only whether an error occurred, this function also doesn't bother to
+// return an error.)
+func (a authCookieSha1) getCookie(context, id []byte) []byte {
+	file, err := os.Open(a.home + "/.dbus-keyrings/" + string(context))
+	if err != nil {
+		return nil
+	}
+	defer file.Close()
+	rd := bufio.NewReader(file)
+	for {
+		line, err := rd.ReadBytes('\n')
+		if err != nil {
+			return nil
+		}
+		line = line[:len(line)-1]
+		b := bytes.Split(line, []byte{' '})
+		if len(b) != 3 {
+			return nil
+		}
+		if bytes.Equal(b[0], id) {
+			return b[2]
+		}
+	}
+}
+
+// generateChallenge returns a random, hex-encoded challenge, or nil on error
+// (see above).
+func (a authCookieSha1) generateChallenge() []byte {
+	b := make([]byte, 16)
+	n, err := rand.Read(b)
+	if err != nil {
+		return nil
+	}
+	if n != 16 {
+		return nil
+	}
+	enc := make([]byte, 32)
+	hex.Encode(enc, b)
+	return enc
+}
diff --git a/vendor/github.com/godbus/dbus/v5/call.go b/vendor/github.com/godbus/dbus/v5/call.go
new file mode 100644
index 00000000000..b06b063580f
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/call.go
@@ -0,0 +1,69 @@
+package dbus
+
+import (
+	"context"
+	"errors"
+)
+
+var errSignature = errors.New("dbus: mismatched signature")
+
+// Call represents a pending or completed method call.
+type Call struct {
+	Destination string
+	Path        ObjectPath
+	Method      string
+	Args        []interface{}
+
+	// Strobes when the call is complete.
+	Done chan *Call
+
+	// After completion, the error status. If this is non-nil, it may be an
+	// error message from the peer (with Error as its type) or some other error.
+	Err error
+
+	// Holds the response once the call is done.
+	Body []interface{}
+
+	// ResponseSequence stores the sequence number of the DBus message containing
+	// the call response (or error). This can be compared to the sequence number
+	// of other call responses and signals on this connection to determine their
+	// relative ordering on the underlying DBus connection.
+	// For errors, ResponseSequence is populated only if the error came from a
+	// DBusMessage that was received or if there was an error receiving. In case of
+	// failure to make the call, ResponseSequence will be NoSequence.
+	ResponseSequence Sequence
+
+	// tracks context and canceler
+	ctx         context.Context
+	ctxCanceler context.CancelFunc
+}
+
+func (c *Call) Context() context.Context {
+	if c.ctx == nil {
+		return context.Background()
+	}
+
+	return c.ctx
+}
+
+func (c *Call) ContextCancel() {
+	if c.ctxCanceler != nil {
+		c.ctxCanceler()
+	}
+}
+
+// Store stores the body of the reply into the provided pointers. It returns
+// an error if the signatures of the body and retvalues don't match, or if
+// the error status is not nil.
+func (c *Call) Store(retvalues ...interface{}) error {
+	if c.Err != nil {
+		return c.Err
+	}
+
+	return Store(c.Body, retvalues...)
+}
+
+func (c *Call) done() {
+	c.Done <- c
+	c.ContextCancel()
+}
diff --git a/vendor/github.com/godbus/dbus/v5/conn.go b/vendor/github.com/godbus/dbus/v5/conn.go
new file mode 100644
index 00000000000..29fe018ad82
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/conn.go
@@ -0,0 +1,959 @@
+package dbus
+
+import (
+	"context"
+	"errors"
+	"io"
+	"os"
+	"strings"
+	"sync"
+)
+
+var (
+	systemBus     *Conn
+	systemBusLck  sync.Mutex
+	sessionBus    *Conn
+	sessionBusLck sync.Mutex
+)
+
+// ErrClosed is the error returned by calls on a closed connection.
+var ErrClosed = errors.New("dbus: connection closed by user")
+
+// Conn represents a connection to a message bus (usually, the system or
+// session bus).
+//
+// Connections are either shared or private. Shared connections
+// are shared between calls to the functions that return them. As a result,
+// the methods Close, Auth and Hello must not be called on them.
+//
+// Multiple goroutines may invoke methods on a connection simultaneously.
+type Conn struct {
+	transport
+
+	ctx       context.Context
+	cancelCtx context.CancelFunc
+
+	closeOnce sync.Once
+	closeErr  error
+
+	busObj BusObject
+	unixFD bool
+	uuid   string
+
+	handler       Handler
+	signalHandler SignalHandler
+	serialGen     SerialGenerator
+	inInt         Interceptor
+	outInt        Interceptor
+	auth          []Auth
+
+	names      *nameTracker
+	calls      *callTracker
+	outHandler *outputHandler
+
+	eavesdropped    chan<- *Message
+	eavesdroppedLck sync.Mutex
+}
+
+// SessionBus returns a shared connection to the session bus, connecting to it
+// if not already done.
+func SessionBus() (conn *Conn, err error) {
+	sessionBusLck.Lock()
+	defer sessionBusLck.Unlock()
+	if sessionBus != nil &&
+		sessionBus.Connected() {
+		return sessionBus, nil
+	}
+	defer func() {
+		if conn != nil {
+			sessionBus = conn
+		}
+	}()
+	conn, err = ConnectSessionBus()
+	return
+}
+
+func getSessionBusAddress() (string, error) {
+	if address := os.Getenv("DBUS_SESSION_BUS_ADDRESS"); address != "" && address != "autolaunch:" {
+		return address, nil
+
+	} else if address := tryDiscoverDbusSessionBusAddress(); address != "" {
+		os.Setenv("DBUS_SESSION_BUS_ADDRESS", address)
+		return address, nil
+	}
+	return getSessionBusPlatformAddress()
+}
+
+// SessionBusPrivate returns a new private connection to the session bus.
+func SessionBusPrivate(opts ...ConnOption) (*Conn, error) {
+	address, err := getSessionBusAddress()
+	if err != nil {
+		return nil, err
+	}
+
+	return Dial(address, opts...)
+}
+
+// SessionBusPrivate returns a new private connection to the session bus.
+//
+// Deprecated: use SessionBusPrivate with options instead.
+func SessionBusPrivateHandler(handler Handler, signalHandler SignalHandler) (*Conn, error) {
+	return SessionBusPrivate(WithHandler(handler), WithSignalHandler(signalHandler))
+}
+
+// SystemBus returns a shared connection to the system bus, connecting to it if
+// not already done.
+func SystemBus() (conn *Conn, err error) {
+	systemBusLck.Lock()
+	defer systemBusLck.Unlock()
+	if systemBus != nil &&
+		systemBus.Connected() {
+		return systemBus, nil
+	}
+	defer func() {
+		if conn != nil {
+			systemBus = conn
+		}
+	}()
+	conn, err = ConnectSystemBus()
+	return
+}
+
+// ConnectSessionBus connects to the session bus.
+func ConnectSessionBus(opts ...ConnOption) (*Conn, error) {
+	address, err := getSessionBusAddress()
+	if err != nil {
+		return nil, err
+	}
+	return Connect(address, opts...)
+}
+
+// ConnectSystemBus connects to the system bus.
+func ConnectSystemBus(opts ...ConnOption) (*Conn, error) {
+	return Connect(getSystemBusPlatformAddress(), opts...)
+}
+
+// Connect connects to the given address.
+//
+// Returned connection is ready to use and doesn't require calling
+// Auth and Hello methods to make it usable.
+func Connect(address string, opts ...ConnOption) (*Conn, error) {
+	conn, err := Dial(address, opts...)
+	if err != nil {
+		return nil, err
+	}
+	if err = conn.Auth(conn.auth); err != nil {
+		_ = conn.Close()
+		return nil, err
+	}
+	if err = conn.Hello(); err != nil {
+		_ = conn.Close()
+		return nil, err
+	}
+	return conn, nil
+}
+
+// SystemBusPrivate returns a new private connection to the system bus.
+// Note: this connection is not ready to use. One must perform Auth and Hello
+// on the connection before it is useable.
+func SystemBusPrivate(opts ...ConnOption) (*Conn, error) {
+	return Dial(getSystemBusPlatformAddress(), opts...)
+}
+
+// SystemBusPrivateHandler returns a new private connection to the system bus, using the provided handlers.
+//
+// Deprecated: use SystemBusPrivate with options instead.
+func SystemBusPrivateHandler(handler Handler, signalHandler SignalHandler) (*Conn, error) {
+	return SystemBusPrivate(WithHandler(handler), WithSignalHandler(signalHandler))
+}
+
+// Dial establishes a new private connection to the message bus specified by address.
+func Dial(address string, opts ...ConnOption) (*Conn, error) {
+	tr, err := getTransport(address)
+	if err != nil {
+		return nil, err
+	}
+	return newConn(tr, opts...)
+}
+
+// DialHandler establishes a new private connection to the message bus specified by address, using the supplied handlers.
+//
+// Deprecated: use Dial with options instead.
+func DialHandler(address string, handler Handler, signalHandler SignalHandler) (*Conn, error) {
+	return Dial(address, WithSignalHandler(signalHandler))
+}
+
+// ConnOption is a connection option.
+type ConnOption func(conn *Conn) error
+
+// WithHandler overrides the default handler.
+func WithHandler(handler Handler) ConnOption {
+	return func(conn *Conn) error {
+		conn.handler = handler
+		return nil
+	}
+}
+
+// WithSignalHandler overrides the default signal handler.
+func WithSignalHandler(handler SignalHandler) ConnOption {
+	return func(conn *Conn) error {
+		conn.signalHandler = handler
+		return nil
+	}
+}
+
+// WithSerialGenerator overrides the default signals generator.
+func WithSerialGenerator(gen SerialGenerator) ConnOption {
+	return func(conn *Conn) error {
+		conn.serialGen = gen
+		return nil
+	}
+}
+
+// WithAuth sets authentication methods for the auth conversation.
+func WithAuth(methods ...Auth) ConnOption {
+	return func(conn *Conn) error {
+		conn.auth = methods
+		return nil
+	}
+}
+
+// Interceptor intercepts incoming and outgoing messages.
+type Interceptor func(msg *Message)
+
+// WithIncomingInterceptor sets the given interceptor for incoming messages.
+func WithIncomingInterceptor(interceptor Interceptor) ConnOption {
+	return func(conn *Conn) error {
+		conn.inInt = interceptor
+		return nil
+	}
+}
+
+// WithOutgoingInterceptor sets the given interceptor for outgoing messages.
+func WithOutgoingInterceptor(interceptor Interceptor) ConnOption {
+	return func(conn *Conn) error {
+		conn.outInt = interceptor
+		return nil
+	}
+}
+
+// WithContext overrides  the default context for the connection.
+func WithContext(ctx context.Context) ConnOption {
+	return func(conn *Conn) error {
+		conn.ctx = ctx
+		return nil
+	}
+}
+
+// NewConn creates a new private *Conn from an already established connection.
+func NewConn(conn io.ReadWriteCloser, opts ...ConnOption) (*Conn, error) {
+	return newConn(genericTransport{conn}, opts...)
+}
+
+// NewConnHandler creates a new private *Conn from an already established connection, using the supplied handlers.
+//
+// Deprecated: use NewConn with options instead.
+func NewConnHandler(conn io.ReadWriteCloser, handler Handler, signalHandler SignalHandler) (*Conn, error) {
+	return NewConn(genericTransport{conn}, WithHandler(handler), WithSignalHandler(signalHandler))
+}
+
+// newConn creates a new *Conn from a transport.
+func newConn(tr transport, opts ...ConnOption) (*Conn, error) {
+	conn := new(Conn)
+	conn.transport = tr
+	for _, opt := range opts {
+		if err := opt(conn); err != nil {
+			return nil, err
+		}
+	}
+	if conn.ctx == nil {
+		conn.ctx = context.Background()
+	}
+	conn.ctx, conn.cancelCtx = context.WithCancel(conn.ctx)
+	go func() {
+		<-conn.ctx.Done()
+		conn.Close()
+	}()
+
+	conn.calls = newCallTracker()
+	if conn.handler == nil {
+		conn.handler = NewDefaultHandler()
+	}
+	if conn.signalHandler == nil {
+		conn.signalHandler = NewDefaultSignalHandler()
+	}
+	if conn.serialGen == nil {
+		conn.serialGen = newSerialGenerator()
+	}
+	conn.outHandler = &outputHandler{conn: conn}
+	conn.names = newNameTracker()
+	conn.busObj = conn.Object("org.freedesktop.DBus", "/org/freedesktop/DBus")
+	return conn, nil
+}
+
+// BusObject returns the object owned by the bus daemon which handles
+// administrative requests.
+func (conn *Conn) BusObject() BusObject {
+	return conn.busObj
+}
+
+// Close closes the connection. Any blocked operations will return with errors
+// and the channels passed to Eavesdrop and Signal are closed. This method must
+// not be called on shared connections.
+func (conn *Conn) Close() error {
+	conn.closeOnce.Do(func() {
+		conn.outHandler.close()
+		if term, ok := conn.signalHandler.(Terminator); ok {
+			term.Terminate()
+		}
+
+		if term, ok := conn.handler.(Terminator); ok {
+			term.Terminate()
+		}
+
+		conn.eavesdroppedLck.Lock()
+		if conn.eavesdropped != nil {
+			close(conn.eavesdropped)
+		}
+		conn.eavesdroppedLck.Unlock()
+
+		conn.cancelCtx()
+
+		conn.closeErr = conn.transport.Close()
+	})
+	return conn.closeErr
+}
+
+// Context returns the context associated with the connection.  The
+// context will be cancelled when the connection is closed.
+func (conn *Conn) Context() context.Context {
+	return conn.ctx
+}
+
+// Connected returns whether conn is connected
+func (conn *Conn) Connected() bool {
+	return conn.ctx.Err() == nil
+}
+
+// Eavesdrop causes conn to send all incoming messages to the given channel
+// without further processing. Method replies, errors and signals will not be
+// sent to the appropriate channels and method calls will not be handled. If nil
+// is passed, the normal behaviour is restored.
+//
+// The caller has to make sure that ch is sufficiently buffered;
+// if a message arrives when a write to ch is not possible, the message is
+// discarded.
+func (conn *Conn) Eavesdrop(ch chan<- *Message) {
+	conn.eavesdroppedLck.Lock()
+	conn.eavesdropped = ch
+	conn.eavesdroppedLck.Unlock()
+}
+
+// getSerial returns an unused serial.
+func (conn *Conn) getSerial() uint32 {
+	return conn.serialGen.GetSerial()
+}
+
+// Hello sends the initial org.freedesktop.DBus.Hello call. This method must be
+// called after authentication, but before sending any other messages to the
+// bus. Hello must not be called for shared connections.
+func (conn *Conn) Hello() error {
+	var s string
+	err := conn.busObj.Call("org.freedesktop.DBus.Hello", 0).Store(&s)
+	if err != nil {
+		return err
+	}
+	conn.names.acquireUniqueConnectionName(s)
+	return nil
+}
+
+// inWorker runs in an own goroutine, reading incoming messages from the
+// transport and dispatching them appropriately.
+func (conn *Conn) inWorker() {
+	sequenceGen := newSequenceGenerator()
+	for {
+		msg, err := conn.ReadMessage()
+		if err != nil {
+			if _, ok := err.(InvalidMessageError); !ok {
+				// Some read error occurred (usually EOF); we can't really do
+				// anything but to shut down all stuff and returns errors to all
+				// pending replies.
+				conn.Close()
+				conn.calls.finalizeAllWithError(sequenceGen, err)
+				return
+			}
+			// invalid messages are ignored
+			continue
+		}
+		conn.eavesdroppedLck.Lock()
+		if conn.eavesdropped != nil {
+			select {
+			case conn.eavesdropped <- msg:
+			default:
+			}
+			conn.eavesdroppedLck.Unlock()
+			continue
+		}
+		conn.eavesdroppedLck.Unlock()
+		dest, _ := msg.Headers[FieldDestination].value.(string)
+		found := dest == "" ||
+			!conn.names.uniqueNameIsKnown() ||
+			conn.names.isKnownName(dest)
+		if !found {
+			// Eavesdropped a message, but no channel for it is registered.
+			// Ignore it.
+			continue
+		}
+
+		if conn.inInt != nil {
+			conn.inInt(msg)
+		}
+		sequence := sequenceGen.next()
+		switch msg.Type {
+		case TypeError:
+			conn.serialGen.RetireSerial(conn.calls.handleDBusError(sequence, msg))
+		case TypeMethodReply:
+			conn.serialGen.RetireSerial(conn.calls.handleReply(sequence, msg))
+		case TypeSignal:
+			conn.handleSignal(sequence, msg)
+		case TypeMethodCall:
+			go conn.handleCall(msg)
+		}
+
+	}
+}
+
+func (conn *Conn) handleSignal(sequence Sequence, msg *Message) {
+	iface := msg.Headers[FieldInterface].value.(string)
+	member := msg.Headers[FieldMember].value.(string)
+	// as per http://dbus.freedesktop.org/doc/dbus-specification.html ,
+	// sender is optional for signals.
+	sender, _ := msg.Headers[FieldSender].value.(string)
+	if iface == "org.freedesktop.DBus" && sender == "org.freedesktop.DBus" {
+		if member == "NameLost" {
+			// If we lost the name on the bus, remove it from our
+			// tracking list.
+			name, ok := msg.Body[0].(string)
+			if !ok {
+				panic("Unable to read the lost name")
+			}
+			conn.names.loseName(name)
+		} else if member == "NameAcquired" {
+			// If we acquired the name on the bus, add it to our
+			// tracking list.
+			name, ok := msg.Body[0].(string)
+			if !ok {
+				panic("Unable to read the acquired name")
+			}
+			conn.names.acquireName(name)
+		}
+	}
+	signal := &Signal{
+		Sender:   sender,
+		Path:     msg.Headers[FieldPath].value.(ObjectPath),
+		Name:     iface + "." + member,
+		Body:     msg.Body,
+		Sequence: sequence,
+	}
+	conn.signalHandler.DeliverSignal(iface, member, signal)
+}
+
+// Names returns the list of all names that are currently owned by this
+// connection. The slice is always at least one element long, the first element
+// being the unique name of the connection.
+func (conn *Conn) Names() []string {
+	return conn.names.listKnownNames()
+}
+
+// Object returns the object identified by the given destination name and path.
+func (conn *Conn) Object(dest string, path ObjectPath) BusObject {
+	return &Object{conn, dest, path}
+}
+
+func (conn *Conn) sendMessageAndIfClosed(msg *Message, ifClosed func()) {
+	if msg.serial == 0 {
+		msg.serial = conn.getSerial()
+	}
+	if conn.outInt != nil {
+		conn.outInt(msg)
+	}
+	err := conn.outHandler.sendAndIfClosed(msg, ifClosed)
+	conn.calls.handleSendError(msg, err)
+	if err != nil {
+		conn.serialGen.RetireSerial(msg.serial)
+	} else if msg.Type != TypeMethodCall {
+		conn.serialGen.RetireSerial(msg.serial)
+	}
+}
+
+// Send sends the given message to the message bus. You usually don't need to
+// use this; use the higher-level equivalents (Call / Go, Emit and Export)
+// instead. If msg is a method call and NoReplyExpected is not set, a non-nil
+// call is returned and the same value is sent to ch (which must be buffered)
+// once the call is complete. Otherwise, ch is ignored and a Call structure is
+// returned of which only the Err member is valid.
+func (conn *Conn) Send(msg *Message, ch chan *Call) *Call {
+	return conn.send(context.Background(), msg, ch)
+}
+
+// SendWithContext acts like Send but takes a context
+func (conn *Conn) SendWithContext(ctx context.Context, msg *Message, ch chan *Call) *Call {
+	return conn.send(ctx, msg, ch)
+}
+
+func (conn *Conn) send(ctx context.Context, msg *Message, ch chan *Call) *Call {
+	if ctx == nil {
+		panic("nil context")
+	}
+	if ch == nil {
+		ch = make(chan *Call, 1)
+	} else if cap(ch) == 0 {
+		panic("dbus: unbuffered channel passed to (*Conn).Send")
+	}
+
+	var call *Call
+	ctx, canceler := context.WithCancel(ctx)
+	msg.serial = conn.getSerial()
+	if msg.Type == TypeMethodCall && msg.Flags&FlagNoReplyExpected == 0 {
+		call = new(Call)
+		call.Destination, _ = msg.Headers[FieldDestination].value.(string)
+		call.Path, _ = msg.Headers[FieldPath].value.(ObjectPath)
+		iface, _ := msg.Headers[FieldInterface].value.(string)
+		member, _ := msg.Headers[FieldMember].value.(string)
+		call.Method = iface + "." + member
+		call.Args = msg.Body
+		call.Done = ch
+		call.ctx = ctx
+		call.ctxCanceler = canceler
+		conn.calls.track(msg.serial, call)
+		go func() {
+			<-ctx.Done()
+			conn.calls.handleSendError(msg, ctx.Err())
+		}()
+		conn.sendMessageAndIfClosed(msg, func() {
+			conn.calls.handleSendError(msg, ErrClosed)
+			canceler()
+		})
+	} else {
+		canceler()
+		call = &Call{Err: nil, Done: ch}
+		ch <- call
+		conn.sendMessageAndIfClosed(msg, func() {
+			call = &Call{Err: ErrClosed}
+		})
+	}
+	return call
+}
+
+// sendError creates an error message corresponding to the parameters and sends
+// it to conn.out.
+func (conn *Conn) sendError(err error, dest string, serial uint32) {
+	var e *Error
+	switch em := err.(type) {
+	case Error:
+		e = &em
+	case *Error:
+		e = em
+	case DBusError:
+		name, body := em.DBusError()
+		e = NewError(name, body)
+	default:
+		e = MakeFailedError(err)
+	}
+	msg := new(Message)
+	msg.Type = TypeError
+	msg.Headers = make(map[HeaderField]Variant)
+	if dest != "" {
+		msg.Headers[FieldDestination] = MakeVariant(dest)
+	}
+	msg.Headers[FieldErrorName] = MakeVariant(e.Name)
+	msg.Headers[FieldReplySerial] = MakeVariant(serial)
+	msg.Body = e.Body
+	if len(e.Body) > 0 {
+		msg.Headers[FieldSignature] = MakeVariant(SignatureOf(e.Body...))
+	}
+	conn.sendMessageAndIfClosed(msg, nil)
+}
+
+// sendReply creates a method reply message corresponding to the parameters and
+// sends it to conn.out.
+func (conn *Conn) sendReply(dest string, serial uint32, values ...interface{}) {
+	msg := new(Message)
+	msg.Type = TypeMethodReply
+	msg.Headers = make(map[HeaderField]Variant)
+	if dest != "" {
+		msg.Headers[FieldDestination] = MakeVariant(dest)
+	}
+	msg.Headers[FieldReplySerial] = MakeVariant(serial)
+	msg.Body = values
+	if len(values) > 0 {
+		msg.Headers[FieldSignature] = MakeVariant(SignatureOf(values...))
+	}
+	conn.sendMessageAndIfClosed(msg, nil)
+}
+
+// AddMatchSignal registers the given match rule to receive broadcast
+// signals based on their contents.
+func (conn *Conn) AddMatchSignal(options ...MatchOption) error {
+	return conn.AddMatchSignalContext(context.Background(), options...)
+}
+
+// AddMatchSignalContext acts like AddMatchSignal but takes a context.
+func (conn *Conn) AddMatchSignalContext(ctx context.Context, options ...MatchOption) error {
+	options = append([]MatchOption{withMatchType("signal")}, options...)
+	return conn.busObj.CallWithContext(
+		ctx,
+		"org.freedesktop.DBus.AddMatch", 0,
+		formatMatchOptions(options),
+	).Store()
+}
+
+// RemoveMatchSignal removes the first rule that matches previously registered with AddMatchSignal.
+func (conn *Conn) RemoveMatchSignal(options ...MatchOption) error {
+	return conn.RemoveMatchSignalContext(context.Background(), options...)
+}
+
+// RemoveMatchSignalContext acts like RemoveMatchSignal but takes a context.
+func (conn *Conn) RemoveMatchSignalContext(ctx context.Context, options ...MatchOption) error {
+	options = append([]MatchOption{withMatchType("signal")}, options...)
+	return conn.busObj.CallWithContext(
+		ctx,
+		"org.freedesktop.DBus.RemoveMatch", 0,
+		formatMatchOptions(options),
+	).Store()
+}
+
+// Signal registers the given channel to be passed all received signal messages.
+//
+// Multiple of these channels can be registered at the same time.
+//
+// These channels are "overwritten" by Eavesdrop; i.e., if there currently is a
+// channel for eavesdropped messages, this channel receives all signals, and
+// none of the channels passed to Signal will receive any signals.
+//
+// Panics if the signal handler is not a `SignalRegistrar`.
+func (conn *Conn) Signal(ch chan<- *Signal) {
+	handler, ok := conn.signalHandler.(SignalRegistrar)
+	if !ok {
+		panic("cannot use this method with a non SignalRegistrar handler")
+	}
+	handler.AddSignal(ch)
+}
+
+// RemoveSignal removes the given channel from the list of the registered channels.
+//
+// Panics if the signal handler is not a `SignalRegistrar`.
+func (conn *Conn) RemoveSignal(ch chan<- *Signal) {
+	handler, ok := conn.signalHandler.(SignalRegistrar)
+	if !ok {
+		panic("cannot use this method with a non SignalRegistrar handler")
+	}
+	handler.RemoveSignal(ch)
+}
+
+// SupportsUnixFDs returns whether the underlying transport supports passing of
+// unix file descriptors. If this is false, method calls containing unix file
+// descriptors will return an error and emitted signals containing them will
+// not be sent.
+func (conn *Conn) SupportsUnixFDs() bool {
+	return conn.unixFD
+}
+
+// Error represents a D-Bus message of type Error.
+type Error struct {
+	Name string
+	Body []interface{}
+}
+
+func NewError(name string, body []interface{}) *Error {
+	return &Error{name, body}
+}
+
+func (e Error) Error() string {
+	if len(e.Body) >= 1 {
+		s, ok := e.Body[0].(string)
+		if ok {
+			return s
+		}
+	}
+	return e.Name
+}
+
+// Signal represents a D-Bus message of type Signal. The name member is given in
+// "interface.member" notation, e.g. org.freedesktop.D-Bus.NameLost.
+type Signal struct {
+	Sender   string
+	Path     ObjectPath
+	Name     string
+	Body     []interface{}
+	Sequence Sequence
+}
+
+// transport is a D-Bus transport.
+type transport interface {
+	// Read and Write raw data (for example, for the authentication protocol).
+	io.ReadWriteCloser
+
+	// Send the initial null byte used for the EXTERNAL mechanism.
+	SendNullByte() error
+
+	// Returns whether this transport supports passing Unix FDs.
+	SupportsUnixFDs() bool
+
+	// Signal the transport that Unix FD passing is enabled for this connection.
+	EnableUnixFDs()
+
+	// Read / send a message, handling things like Unix FDs.
+	ReadMessage() (*Message, error)
+	SendMessage(*Message) error
+}
+
+var (
+	transports = make(map[string]func(string) (transport, error))
+)
+
+func getTransport(address string) (transport, error) {
+	var err error
+	var t transport
+
+	addresses := strings.Split(address, ";")
+	for _, v := range addresses {
+		i := strings.IndexRune(v, ':')
+		if i == -1 {
+			err = errors.New("dbus: invalid bus address (no transport)")
+			continue
+		}
+		f := transports[v[:i]]
+		if f == nil {
+			err = errors.New("dbus: invalid bus address (invalid or unsupported transport)")
+			continue
+		}
+		t, err = f(v[i+1:])
+		if err == nil {
+			return t, nil
+		}
+	}
+	return nil, err
+}
+
+// getKey gets a key from a the list of keys. Returns "" on error / not found...
+func getKey(s, key string) string {
+	for _, keyEqualsValue := range strings.Split(s, ",") {
+		keyValue := strings.SplitN(keyEqualsValue, "=", 2)
+		if len(keyValue) == 2 && keyValue[0] == key {
+			return keyValue[1]
+		}
+	}
+	return ""
+}
+
+type outputHandler struct {
+	conn    *Conn
+	sendLck sync.Mutex
+	closed  struct {
+		isClosed bool
+		lck      sync.RWMutex
+	}
+}
+
+func (h *outputHandler) sendAndIfClosed(msg *Message, ifClosed func()) error {
+	h.closed.lck.RLock()
+	defer h.closed.lck.RUnlock()
+	if h.closed.isClosed {
+		if ifClosed != nil {
+			ifClosed()
+		}
+		return nil
+	}
+	h.sendLck.Lock()
+	defer h.sendLck.Unlock()
+	return h.conn.SendMessage(msg)
+}
+
+func (h *outputHandler) close() {
+	h.closed.lck.Lock()
+	defer h.closed.lck.Unlock()
+	h.closed.isClosed = true
+}
+
+type serialGenerator struct {
+	lck        sync.Mutex
+	nextSerial uint32
+	serialUsed map[uint32]bool
+}
+
+func newSerialGenerator() *serialGenerator {
+	return &serialGenerator{
+		serialUsed: map[uint32]bool{0: true},
+		nextSerial: 1,
+	}
+}
+
+func (gen *serialGenerator) GetSerial() uint32 {
+	gen.lck.Lock()
+	defer gen.lck.Unlock()
+	n := gen.nextSerial
+	for gen.serialUsed[n] {
+		n++
+	}
+	gen.serialUsed[n] = true
+	gen.nextSerial = n + 1
+	return n
+}
+
+func (gen *serialGenerator) RetireSerial(serial uint32) {
+	gen.lck.Lock()
+	defer gen.lck.Unlock()
+	delete(gen.serialUsed, serial)
+}
+
+type nameTracker struct {
+	lck    sync.RWMutex
+	unique string
+	names  map[string]struct{}
+}
+
+func newNameTracker() *nameTracker {
+	return &nameTracker{names: map[string]struct{}{}}
+}
+func (tracker *nameTracker) acquireUniqueConnectionName(name string) {
+	tracker.lck.Lock()
+	defer tracker.lck.Unlock()
+	tracker.unique = name
+}
+func (tracker *nameTracker) acquireName(name string) {
+	tracker.lck.Lock()
+	defer tracker.lck.Unlock()
+	tracker.names[name] = struct{}{}
+}
+func (tracker *nameTracker) loseName(name string) {
+	tracker.lck.Lock()
+	defer tracker.lck.Unlock()
+	delete(tracker.names, name)
+}
+
+func (tracker *nameTracker) uniqueNameIsKnown() bool {
+	tracker.lck.RLock()
+	defer tracker.lck.RUnlock()
+	return tracker.unique != ""
+}
+func (tracker *nameTracker) isKnownName(name string) bool {
+	tracker.lck.RLock()
+	defer tracker.lck.RUnlock()
+	_, ok := tracker.names[name]
+	return ok || name == tracker.unique
+}
+func (tracker *nameTracker) listKnownNames() []string {
+	tracker.lck.RLock()
+	defer tracker.lck.RUnlock()
+	out := make([]string, 0, len(tracker.names)+1)
+	out = append(out, tracker.unique)
+	for k := range tracker.names {
+		out = append(out, k)
+	}
+	return out
+}
+
+type callTracker struct {
+	calls map[uint32]*Call
+	lck   sync.RWMutex
+}
+
+func newCallTracker() *callTracker {
+	return &callTracker{calls: map[uint32]*Call{}}
+}
+
+func (tracker *callTracker) track(sn uint32, call *Call) {
+	tracker.lck.Lock()
+	tracker.calls[sn] = call
+	tracker.lck.Unlock()
+}
+
+func (tracker *callTracker) handleReply(sequence Sequence, msg *Message) uint32 {
+	serial := msg.Headers[FieldReplySerial].value.(uint32)
+	tracker.lck.RLock()
+	_, ok := tracker.calls[serial]
+	tracker.lck.RUnlock()
+	if ok {
+		tracker.finalizeWithBody(serial, sequence, msg.Body)
+	}
+	return serial
+}
+
+func (tracker *callTracker) handleDBusError(sequence Sequence, msg *Message) uint32 {
+	serial := msg.Headers[FieldReplySerial].value.(uint32)
+	tracker.lck.RLock()
+	_, ok := tracker.calls[serial]
+	tracker.lck.RUnlock()
+	if ok {
+		name, _ := msg.Headers[FieldErrorName].value.(string)
+		tracker.finalizeWithError(serial, sequence, Error{name, msg.Body})
+	}
+	return serial
+}
+
+func (tracker *callTracker) handleSendError(msg *Message, err error) {
+	if err == nil {
+		return
+	}
+	tracker.lck.RLock()
+	_, ok := tracker.calls[msg.serial]
+	tracker.lck.RUnlock()
+	if ok {
+		tracker.finalizeWithError(msg.serial, NoSequence, err)
+	}
+}
+
+// finalize was the only func that did not strobe Done
+func (tracker *callTracker) finalize(sn uint32) {
+	tracker.lck.Lock()
+	defer tracker.lck.Unlock()
+	c, ok := tracker.calls[sn]
+	if ok {
+		delete(tracker.calls, sn)
+		c.ContextCancel()
+	}
+}
+
+func (tracker *callTracker) finalizeWithBody(sn uint32, sequence Sequence, body []interface{}) {
+	tracker.lck.Lock()
+	c, ok := tracker.calls[sn]
+	if ok {
+		delete(tracker.calls, sn)
+	}
+	tracker.lck.Unlock()
+	if ok {
+		c.Body = body
+		c.ResponseSequence = sequence
+		c.done()
+	}
+}
+
+func (tracker *callTracker) finalizeWithError(sn uint32, sequence Sequence, err error) {
+	tracker.lck.Lock()
+	c, ok := tracker.calls[sn]
+	if ok {
+		delete(tracker.calls, sn)
+	}
+	tracker.lck.Unlock()
+	if ok {
+		c.Err = err
+		c.ResponseSequence = sequence
+		c.done()
+	}
+}
+
+func (tracker *callTracker) finalizeAllWithError(sequenceGen *sequenceGenerator, err error) {
+	tracker.lck.Lock()
+	closedCalls := make([]*Call, 0, len(tracker.calls))
+	for sn := range tracker.calls {
+		closedCalls = append(closedCalls, tracker.calls[sn])
+	}
+	tracker.calls = map[uint32]*Call{}
+	tracker.lck.Unlock()
+	for _, call := range closedCalls {
+		call.Err = err
+		call.ResponseSequence = sequenceGen.next()
+		call.done()
+	}
+}
diff --git a/vendor/github.com/godbus/dbus/v5/conn_darwin.go b/vendor/github.com/godbus/dbus/v5/conn_darwin.go
new file mode 100644
index 00000000000..6e2e4020216
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/conn_darwin.go
@@ -0,0 +1,37 @@
+package dbus
+
+import (
+	"errors"
+	"fmt"
+	"os"
+	"os/exec"
+)
+
+const defaultSystemBusAddress = "unix:path=/opt/local/var/run/dbus/system_bus_socket"
+
+func getSessionBusPlatformAddress() (string, error) {
+	cmd := exec.Command("launchctl", "getenv", "DBUS_LAUNCHD_SESSION_BUS_SOCKET")
+	b, err := cmd.CombinedOutput()
+
+	if err != nil {
+		return "", err
+	}
+
+	if len(b) == 0 {
+		return "", errors.New("dbus: couldn't determine address of session bus")
+	}
+
+	return "unix:path=" + string(b[:len(b)-1]), nil
+}
+
+func getSystemBusPlatformAddress() string {
+	address := os.Getenv("DBUS_LAUNCHD_SESSION_BUS_SOCKET")
+	if address != "" {
+		return fmt.Sprintf("unix:path=%s", address)
+	}
+	return defaultSystemBusAddress
+}
+
+func tryDiscoverDbusSessionBusAddress() string {
+	return ""
+}
diff --git a/vendor/github.com/godbus/dbus/v5/conn_other.go b/vendor/github.com/godbus/dbus/v5/conn_other.go
new file mode 100644
index 00000000000..616dcf66449
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/conn_other.go
@@ -0,0 +1,93 @@
+// +build !darwin
+
+package dbus
+
+import (
+	"bytes"
+	"errors"
+	"fmt"
+	"io/ioutil"
+	"os"
+	"os/exec"
+	"os/user"
+	"path"
+	"strings"
+)
+
+var execCommand = exec.Command
+
+func getSessionBusPlatformAddress() (string, error) {
+	cmd := execCommand("dbus-launch")
+	b, err := cmd.CombinedOutput()
+
+	if err != nil {
+		return "", err
+	}
+
+	i := bytes.IndexByte(b, '=')
+	j := bytes.IndexByte(b, '\n')
+
+	if i == -1 || j == -1 || i > j {
+		return "", errors.New("dbus: couldn't determine address of session bus")
+	}
+
+	env, addr := string(b[0:i]), string(b[i+1:j])
+	os.Setenv(env, addr)
+
+	return addr, nil
+}
+
+// tryDiscoverDbusSessionBusAddress tries to discover an existing dbus session
+// and return the value of its DBUS_SESSION_BUS_ADDRESS.
+// It tries different techniques employed by different operating systems,
+// returning the first valid address it finds, or an empty string.
+//
+// * /run/user/<uid>/bus           if this exists, it *is* the bus socket. present on
+//                                 Ubuntu 18.04
+// * /run/user/<uid>/dbus-session: if this exists, it can be parsed for the bus
+//                                 address. present on Ubuntu 16.04
+//
+// See https://dbus.freedesktop.org/doc/dbus-launch.1.html
+func tryDiscoverDbusSessionBusAddress() string {
+	if runtimeDirectory, err := getRuntimeDirectory(); err == nil {
+
+		if runUserBusFile := path.Join(runtimeDirectory, "bus"); fileExists(runUserBusFile) {
+			// if /run/user/<uid>/bus exists, that file itself
+			// *is* the unix socket, so return its path
+			return fmt.Sprintf("unix:path=%s", runUserBusFile)
+		}
+		if runUserSessionDbusFile := path.Join(runtimeDirectory, "dbus-session"); fileExists(runUserSessionDbusFile) {
+			// if /run/user/<uid>/dbus-session exists, it's a
+			// text file // containing the address of the socket, e.g.:
+			// DBUS_SESSION_BUS_ADDRESS=unix:abstract=/tmp/dbus-E1c73yNqrG
+
+			if f, err := ioutil.ReadFile(runUserSessionDbusFile); err == nil {
+				fileContent := string(f)
+
+				prefix := "DBUS_SESSION_BUS_ADDRESS="
+
+				if strings.HasPrefix(fileContent, prefix) {
+					address := strings.TrimRight(strings.TrimPrefix(fileContent, prefix), "\n\r")
+					return address
+				}
+			}
+		}
+	}
+	return ""
+}
+
+func getRuntimeDirectory() (string, error) {
+	if currentUser, err := user.Current(); err != nil {
+		return "", err
+	} else {
+		return fmt.Sprintf("/run/user/%s", currentUser.Uid), nil
+	}
+}
+
+func fileExists(filename string) bool {
+	if _, err := os.Stat(filename); !os.IsNotExist(err) {
+		return true
+	} else {
+		return false
+	}
+}
diff --git a/vendor/github.com/godbus/dbus/v5/conn_unix.go b/vendor/github.com/godbus/dbus/v5/conn_unix.go
new file mode 100644
index 00000000000..58aee7d2af5
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/conn_unix.go
@@ -0,0 +1,17 @@
+//+build !windows,!solaris,!darwin
+
+package dbus
+
+import (
+	"os"
+)
+
+const defaultSystemBusAddress = "unix:path=/var/run/dbus/system_bus_socket"
+
+func getSystemBusPlatformAddress() string {
+	address := os.Getenv("DBUS_SYSTEM_BUS_ADDRESS")
+	if address != "" {
+		return address
+	}
+	return defaultSystemBusAddress
+}
diff --git a/vendor/github.com/godbus/dbus/v5/conn_windows.go b/vendor/github.com/godbus/dbus/v5/conn_windows.go
new file mode 100644
index 00000000000..4291e4519cc
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/conn_windows.go
@@ -0,0 +1,15 @@
+//+build windows
+
+package dbus
+
+import "os"
+
+const defaultSystemBusAddress = "tcp:host=127.0.0.1,port=12434"
+
+func getSystemBusPlatformAddress() string {
+	address := os.Getenv("DBUS_SYSTEM_BUS_ADDRESS")
+	if address != "" {
+		return address
+	}
+	return defaultSystemBusAddress
+}
diff --git a/vendor/github.com/godbus/dbus/v5/dbus.go b/vendor/github.com/godbus/dbus/v5/dbus.go
new file mode 100644
index 00000000000..ddf3b7afde9
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/dbus.go
@@ -0,0 +1,432 @@
+package dbus
+
+import (
+	"errors"
+	"fmt"
+	"reflect"
+	"strings"
+)
+
+var (
+	byteType        = reflect.TypeOf(byte(0))
+	boolType        = reflect.TypeOf(false)
+	uint8Type       = reflect.TypeOf(uint8(0))
+	int16Type       = reflect.TypeOf(int16(0))
+	uint16Type      = reflect.TypeOf(uint16(0))
+	intType         = reflect.TypeOf(int(0))
+	uintType        = reflect.TypeOf(uint(0))
+	int32Type       = reflect.TypeOf(int32(0))
+	uint32Type      = reflect.TypeOf(uint32(0))
+	int64Type       = reflect.TypeOf(int64(0))
+	uint64Type      = reflect.TypeOf(uint64(0))
+	float64Type     = reflect.TypeOf(float64(0))
+	stringType      = reflect.TypeOf("")
+	signatureType   = reflect.TypeOf(Signature{""})
+	objectPathType  = reflect.TypeOf(ObjectPath(""))
+	variantType     = reflect.TypeOf(Variant{Signature{""}, nil})
+	interfacesType  = reflect.TypeOf([]interface{}{})
+	interfaceType   = reflect.TypeOf((*interface{})(nil)).Elem()
+	unixFDType      = reflect.TypeOf(UnixFD(0))
+	unixFDIndexType = reflect.TypeOf(UnixFDIndex(0))
+	errType         = reflect.TypeOf((*error)(nil)).Elem()
+)
+
+// An InvalidTypeError signals that a value which cannot be represented in the
+// D-Bus wire format was passed to a function.
+type InvalidTypeError struct {
+	Type reflect.Type
+}
+
+func (e InvalidTypeError) Error() string {
+	return "dbus: invalid type " + e.Type.String()
+}
+
+// Store copies the values contained in src to dest, which must be a slice of
+// pointers. It converts slices of interfaces from src to corresponding structs
+// in dest. An error is returned if the lengths of src and dest or the types of
+// their elements don't match.
+func Store(src []interface{}, dest ...interface{}) error {
+	if len(src) != len(dest) {
+		return errors.New("dbus.Store: length mismatch")
+	}
+
+	for i := range src {
+		if err := storeInterfaces(src[i], dest[i]); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func storeInterfaces(src, dest interface{}) error {
+	return store(reflect.ValueOf(dest), reflect.ValueOf(src))
+}
+
+func store(dest, src reflect.Value) error {
+	if dest.Kind() == reflect.Ptr {
+		if dest.IsNil() {
+			dest.Set(reflect.New(dest.Type().Elem()))
+		}
+		return store(dest.Elem(), src)
+	}
+	switch src.Kind() {
+	case reflect.Slice:
+		return storeSlice(dest, src)
+	case reflect.Map:
+		return storeMap(dest, src)
+	default:
+		return storeBase(dest, src)
+	}
+}
+
+func storeBase(dest, src reflect.Value) error {
+	return setDest(dest, src)
+}
+
+func setDest(dest, src reflect.Value) error {
+	if !isVariant(src.Type()) && isVariant(dest.Type()) {
+		//special conversion for dbus.Variant
+		dest.Set(reflect.ValueOf(MakeVariant(src.Interface())))
+		return nil
+	}
+	if isVariant(src.Type()) && !isVariant(dest.Type()) {
+		src = getVariantValue(src)
+		return store(dest, src)
+	}
+	if !src.Type().ConvertibleTo(dest.Type()) {
+		return fmt.Errorf(
+			"dbus.Store: type mismatch: cannot convert %s to %s",
+			src.Type(), dest.Type())
+	}
+	dest.Set(src.Convert(dest.Type()))
+	return nil
+}
+
+func kindsAreCompatible(dest, src reflect.Type) bool {
+	switch {
+	case isVariant(dest):
+		return true
+	case dest.Kind() == reflect.Interface:
+		return true
+	default:
+		return dest.Kind() == src.Kind()
+	}
+}
+
+func isConvertibleTo(dest, src reflect.Type) bool {
+	switch {
+	case isVariant(dest):
+		return true
+	case dest.Kind() == reflect.Interface:
+		return true
+	case dest.Kind() == reflect.Slice:
+		return src.Kind() == reflect.Slice &&
+			isConvertibleTo(dest.Elem(), src.Elem())
+	case dest.Kind() == reflect.Struct:
+		return src == interfacesType
+	default:
+		return src.ConvertibleTo(dest)
+	}
+}
+
+func storeMap(dest, src reflect.Value) error {
+	switch {
+	case !kindsAreCompatible(dest.Type(), src.Type()):
+		return fmt.Errorf(
+			"dbus.Store: type mismatch: "+
+				"map: cannot store a value of %s into %s",
+			src.Type(), dest.Type())
+	case isVariant(dest.Type()):
+		return storeMapIntoVariant(dest, src)
+	case dest.Kind() == reflect.Interface:
+		return storeMapIntoInterface(dest, src)
+	case isConvertibleTo(dest.Type().Key(), src.Type().Key()) &&
+		isConvertibleTo(dest.Type().Elem(), src.Type().Elem()):
+		return storeMapIntoMap(dest, src)
+	default:
+		return fmt.Errorf(
+			"dbus.Store: type mismatch: "+
+				"map: cannot convert a value of %s into %s",
+			src.Type(), dest.Type())
+	}
+}
+
+func storeMapIntoVariant(dest, src reflect.Value) error {
+	dv := reflect.MakeMap(src.Type())
+	err := store(dv, src)
+	if err != nil {
+		return err
+	}
+	return storeBase(dest, dv)
+}
+
+func storeMapIntoInterface(dest, src reflect.Value) error {
+	var dv reflect.Value
+	if isVariant(src.Type().Elem()) {
+		//Convert variants to interface{} recursively when converting
+		//to interface{}
+		dv = reflect.MakeMap(
+			reflect.MapOf(src.Type().Key(), interfaceType))
+	} else {
+		dv = reflect.MakeMap(src.Type())
+	}
+	err := store(dv, src)
+	if err != nil {
+		return err
+	}
+	return storeBase(dest, dv)
+}
+
+func storeMapIntoMap(dest, src reflect.Value) error {
+	if dest.IsNil() {
+		dest.Set(reflect.MakeMap(dest.Type()))
+	}
+	keys := src.MapKeys()
+	for _, key := range keys {
+		dkey := key.Convert(dest.Type().Key())
+		dval := reflect.New(dest.Type().Elem()).Elem()
+		err := store(dval, getVariantValue(src.MapIndex(key)))
+		if err != nil {
+			return err
+		}
+		dest.SetMapIndex(dkey, dval)
+	}
+	return nil
+}
+
+func storeSlice(dest, src reflect.Value) error {
+	switch {
+	case src.Type() == interfacesType && dest.Kind() == reflect.Struct:
+		//The decoder always decodes structs as slices of interface{}
+		return storeStruct(dest, src)
+	case !kindsAreCompatible(dest.Type(), src.Type()):
+		return fmt.Errorf(
+			"dbus.Store: type mismatch: "+
+				"slice: cannot store a value of %s into %s",
+			src.Type(), dest.Type())
+	case isVariant(dest.Type()):
+		return storeSliceIntoVariant(dest, src)
+	case dest.Kind() == reflect.Interface:
+		return storeSliceIntoInterface(dest, src)
+	case isConvertibleTo(dest.Type().Elem(), src.Type().Elem()):
+		return storeSliceIntoSlice(dest, src)
+	default:
+		return fmt.Errorf(
+			"dbus.Store: type mismatch: "+
+				"slice: cannot convert a value of %s into %s",
+			src.Type(), dest.Type())
+	}
+}
+
+func storeStruct(dest, src reflect.Value) error {
+	if isVariant(dest.Type()) {
+		return storeBase(dest, src)
+	}
+	dval := make([]interface{}, 0, dest.NumField())
+	dtype := dest.Type()
+	for i := 0; i < dest.NumField(); i++ {
+		field := dest.Field(i)
+		ftype := dtype.Field(i)
+		if ftype.PkgPath != "" {
+			continue
+		}
+		if ftype.Tag.Get("dbus") == "-" {
+			continue
+		}
+		dval = append(dval, field.Addr().Interface())
+	}
+	if src.Len() != len(dval) {
+		return fmt.Errorf(
+			"dbus.Store: type mismatch: "+
+				"destination struct does not have "+
+				"enough fields need: %d have: %d",
+			src.Len(), len(dval))
+	}
+	return Store(src.Interface().([]interface{}), dval...)
+}
+
+func storeSliceIntoVariant(dest, src reflect.Value) error {
+	dv := reflect.MakeSlice(src.Type(), src.Len(), src.Cap())
+	err := store(dv, src)
+	if err != nil {
+		return err
+	}
+	return storeBase(dest, dv)
+}
+
+func storeSliceIntoInterface(dest, src reflect.Value) error {
+	var dv reflect.Value
+	if isVariant(src.Type().Elem()) {
+		//Convert variants to interface{} recursively when converting
+		//to interface{}
+		dv = reflect.MakeSlice(reflect.SliceOf(interfaceType),
+			src.Len(), src.Cap())
+	} else {
+		dv = reflect.MakeSlice(src.Type(), src.Len(), src.Cap())
+	}
+	err := store(dv, src)
+	if err != nil {
+		return err
+	}
+	return storeBase(dest, dv)
+}
+
+func storeSliceIntoSlice(dest, src reflect.Value) error {
+	if dest.IsNil() || dest.Len() < src.Len() {
+		dest.Set(reflect.MakeSlice(dest.Type(), src.Len(), src.Cap()))
+	}
+	if dest.Len() != src.Len() {
+		return fmt.Errorf(
+			"dbus.Store: type mismatch: "+
+				"slices are different lengths "+
+				"need: %d have: %d",
+			src.Len(), dest.Len())
+	}
+	for i := 0; i < src.Len(); i++ {
+		err := store(dest.Index(i), getVariantValue(src.Index(i)))
+		if err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func getVariantValue(in reflect.Value) reflect.Value {
+	if isVariant(in.Type()) {
+		return reflect.ValueOf(in.Interface().(Variant).Value())
+	}
+	return in
+}
+
+func isVariant(t reflect.Type) bool {
+	return t == variantType
+}
+
+// An ObjectPath is an object path as defined by the D-Bus spec.
+type ObjectPath string
+
+// IsValid returns whether the object path is valid.
+func (o ObjectPath) IsValid() bool {
+	s := string(o)
+	if len(s) == 0 {
+		return false
+	}
+	if s[0] != '/' {
+		return false
+	}
+	if s[len(s)-1] == '/' && len(s) != 1 {
+		return false
+	}
+	// probably not used, but technically possible
+	if s == "/" {
+		return true
+	}
+	split := strings.Split(s[1:], "/")
+	for _, v := range split {
+		if len(v) == 0 {
+			return false
+		}
+		for _, c := range v {
+			if !isMemberChar(c) {
+				return false
+			}
+		}
+	}
+	return true
+}
+
+// A UnixFD is a Unix file descriptor sent over the wire. See the package-level
+// documentation for more information about Unix file descriptor passsing.
+type UnixFD int32
+
+// A UnixFDIndex is the representation of a Unix file descriptor in a message.
+type UnixFDIndex uint32
+
+// alignment returns the alignment of values of type t.
+func alignment(t reflect.Type) int {
+	switch t {
+	case variantType:
+		return 1
+	case objectPathType:
+		return 4
+	case signatureType:
+		return 1
+	case interfacesType:
+		return 4
+	}
+	switch t.Kind() {
+	case reflect.Uint8:
+		return 1
+	case reflect.Uint16, reflect.Int16:
+		return 2
+	case reflect.Uint, reflect.Int, reflect.Uint32, reflect.Int32, reflect.String, reflect.Array, reflect.Slice, reflect.Map:
+		return 4
+	case reflect.Uint64, reflect.Int64, reflect.Float64, reflect.Struct:
+		return 8
+	case reflect.Ptr:
+		return alignment(t.Elem())
+	}
+	return 1
+}
+
+// isKeyType returns whether t is a valid type for a D-Bus dict.
+func isKeyType(t reflect.Type) bool {
+	switch t.Kind() {
+	case reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64,
+		reflect.Int16, reflect.Int32, reflect.Int64, reflect.Float64,
+		reflect.String, reflect.Uint, reflect.Int:
+
+		return true
+	}
+	return false
+}
+
+// isValidInterface returns whether s is a valid name for an interface.
+func isValidInterface(s string) bool {
+	if len(s) == 0 || len(s) > 255 || s[0] == '.' {
+		return false
+	}
+	elem := strings.Split(s, ".")
+	if len(elem) < 2 {
+		return false
+	}
+	for _, v := range elem {
+		if len(v) == 0 {
+			return false
+		}
+		if v[0] >= '0' && v[0] <= '9' {
+			return false
+		}
+		for _, c := range v {
+			if !isMemberChar(c) {
+				return false
+			}
+		}
+	}
+	return true
+}
+
+// isValidMember returns whether s is a valid name for a member.
+func isValidMember(s string) bool {
+	if len(s) == 0 || len(s) > 255 {
+		return false
+	}
+	i := strings.Index(s, ".")
+	if i != -1 {
+		return false
+	}
+	if s[0] >= '0' && s[0] <= '9' {
+		return false
+	}
+	for _, c := range s {
+		if !isMemberChar(c) {
+			return false
+		}
+	}
+	return true
+}
+
+func isMemberChar(c rune) bool {
+	return (c >= '0' && c <= '9') || (c >= 'A' && c <= 'Z') ||
+		(c >= 'a' && c <= 'z') || c == '_'
+}
diff --git a/vendor/github.com/godbus/dbus/v5/decoder.go b/vendor/github.com/godbus/dbus/v5/decoder.go
new file mode 100644
index 00000000000..ede91575b3e
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/decoder.go
@@ -0,0 +1,286 @@
+package dbus
+
+import (
+	"encoding/binary"
+	"io"
+	"reflect"
+)
+
+type decoder struct {
+	in    io.Reader
+	order binary.ByteOrder
+	pos   int
+}
+
+// newDecoder returns a new decoder that reads values from in. The input is
+// expected to be in the given byte order.
+func newDecoder(in io.Reader, order binary.ByteOrder) *decoder {
+	dec := new(decoder)
+	dec.in = in
+	dec.order = order
+	return dec
+}
+
+// align aligns the input to the given boundary and panics on error.
+func (dec *decoder) align(n int) {
+	if dec.pos%n != 0 {
+		newpos := (dec.pos + n - 1) & ^(n - 1)
+		empty := make([]byte, newpos-dec.pos)
+		if _, err := io.ReadFull(dec.in, empty); err != nil {
+			panic(err)
+		}
+		dec.pos = newpos
+	}
+}
+
+// Calls binary.Read(dec.in, dec.order, v) and panics on read errors.
+func (dec *decoder) binread(v interface{}) {
+	if err := binary.Read(dec.in, dec.order, v); err != nil {
+		panic(err)
+	}
+}
+
+func (dec *decoder) Decode(sig Signature) (vs []interface{}, err error) {
+	defer func() {
+		var ok bool
+		v := recover()
+		if err, ok = v.(error); ok {
+			if err == io.EOF || err == io.ErrUnexpectedEOF {
+				err = FormatError("unexpected EOF")
+			}
+		}
+	}()
+	vs = make([]interface{}, 0)
+	s := sig.str
+	for s != "" {
+		err, rem := validSingle(s, 0)
+		if err != nil {
+			return nil, err
+		}
+		v := dec.decode(s[:len(s)-len(rem)], 0)
+		vs = append(vs, v)
+		s = rem
+	}
+	return vs, nil
+}
+
+func (dec *decoder) decode(s string, depth int) interface{} {
+	dec.align(alignment(typeFor(s)))
+	switch s[0] {
+	case 'y':
+		var b [1]byte
+		if _, err := dec.in.Read(b[:]); err != nil {
+			panic(err)
+		}
+		dec.pos++
+		return b[0]
+	case 'b':
+		i := dec.decode("u", depth).(uint32)
+		switch {
+		case i == 0:
+			return false
+		case i == 1:
+			return true
+		default:
+			panic(FormatError("invalid value for boolean"))
+		}
+	case 'n':
+		var i int16
+		dec.binread(&i)
+		dec.pos += 2
+		return i
+	case 'i':
+		var i int32
+		dec.binread(&i)
+		dec.pos += 4
+		return i
+	case 'x':
+		var i int64
+		dec.binread(&i)
+		dec.pos += 8
+		return i
+	case 'q':
+		var i uint16
+		dec.binread(&i)
+		dec.pos += 2
+		return i
+	case 'u':
+		var i uint32
+		dec.binread(&i)
+		dec.pos += 4
+		return i
+	case 't':
+		var i uint64
+		dec.binread(&i)
+		dec.pos += 8
+		return i
+	case 'd':
+		var f float64
+		dec.binread(&f)
+		dec.pos += 8
+		return f
+	case 's':
+		length := dec.decode("u", depth).(uint32)
+		b := make([]byte, int(length)+1)
+		if _, err := io.ReadFull(dec.in, b); err != nil {
+			panic(err)
+		}
+		dec.pos += int(length) + 1
+		return string(b[:len(b)-1])
+	case 'o':
+		return ObjectPath(dec.decode("s", depth).(string))
+	case 'g':
+		length := dec.decode("y", depth).(byte)
+		b := make([]byte, int(length)+1)
+		if _, err := io.ReadFull(dec.in, b); err != nil {
+			panic(err)
+		}
+		dec.pos += int(length) + 1
+		sig, err := ParseSignature(string(b[:len(b)-1]))
+		if err != nil {
+			panic(err)
+		}
+		return sig
+	case 'v':
+		if depth >= 64 {
+			panic(FormatError("input exceeds container depth limit"))
+		}
+		var variant Variant
+		sig := dec.decode("g", depth).(Signature)
+		if len(sig.str) == 0 {
+			panic(FormatError("variant signature is empty"))
+		}
+		err, rem := validSingle(sig.str, 0)
+		if err != nil {
+			panic(err)
+		}
+		if rem != "" {
+			panic(FormatError("variant signature has multiple types"))
+		}
+		variant.sig = sig
+		variant.value = dec.decode(sig.str, depth+1)
+		return variant
+	case 'h':
+		return UnixFDIndex(dec.decode("u", depth).(uint32))
+	case 'a':
+		if len(s) > 1 && s[1] == '{' {
+			ksig := s[2:3]
+			vsig := s[3 : len(s)-1]
+			v := reflect.MakeMap(reflect.MapOf(typeFor(ksig), typeFor(vsig)))
+			if depth >= 63 {
+				panic(FormatError("input exceeds container depth limit"))
+			}
+			length := dec.decode("u", depth).(uint32)
+			// Even for empty maps, the correct padding must be included
+			dec.align(8)
+			spos := dec.pos
+			for dec.pos < spos+int(length) {
+				dec.align(8)
+				if !isKeyType(v.Type().Key()) {
+					panic(InvalidTypeError{v.Type()})
+				}
+				kv := dec.decode(ksig, depth+2)
+				vv := dec.decode(vsig, depth+2)
+				v.SetMapIndex(reflect.ValueOf(kv), reflect.ValueOf(vv))
+			}
+			return v.Interface()
+		}
+		if depth >= 64 {
+			panic(FormatError("input exceeds container depth limit"))
+		}
+		sig := s[1:]
+		length := dec.decode("u", depth).(uint32)
+		// capacity can be determined only for fixed-size element types
+		var capacity int
+		if s := sigByteSize(sig); s != 0 {
+			capacity = int(length) / s
+		}
+		v := reflect.MakeSlice(reflect.SliceOf(typeFor(sig)), 0, capacity)
+		// Even for empty arrays, the correct padding must be included
+		align := alignment(typeFor(s[1:]))
+		if len(s) > 1 && s[1] == '(' {
+			//Special case for arrays of structs
+			//structs decode as a slice of interface{} values
+			//but the dbus alignment does not match this
+			align = 8
+		}
+		dec.align(align)
+		spos := dec.pos
+		for dec.pos < spos+int(length) {
+			ev := dec.decode(s[1:], depth+1)
+			v = reflect.Append(v, reflect.ValueOf(ev))
+		}
+		return v.Interface()
+	case '(':
+		if depth >= 64 {
+			panic(FormatError("input exceeds container depth limit"))
+		}
+		dec.align(8)
+		v := make([]interface{}, 0)
+		s = s[1 : len(s)-1]
+		for s != "" {
+			err, rem := validSingle(s, 0)
+			if err != nil {
+				panic(err)
+			}
+			ev := dec.decode(s[:len(s)-len(rem)], depth+1)
+			v = append(v, ev)
+			s = rem
+		}
+		return v
+	default:
+		panic(SignatureError{Sig: s})
+	}
+}
+
+// sigByteSize tries to calculates size of the given signature in bytes.
+//
+// It returns zero when it can't, for example when it contains non-fixed size
+// types such as strings, maps and arrays that require reading of the transmitted
+// data, for that we would need to implement the unread method for Decoder first.
+func sigByteSize(sig string) int {
+	var total int
+	for offset := 0; offset < len(sig); {
+		switch sig[offset] {
+		case 'y':
+			total += 1
+			offset += 1
+		case 'n', 'q':
+			total += 2
+			offset += 1
+		case 'b', 'i', 'u', 'h':
+			total += 4
+			offset += 1
+		case 'x', 't', 'd':
+			total += 8
+			offset += 1
+		case '(':
+			i := 1
+			depth := 1
+			for i < len(sig[offset:]) && depth != 0 {
+				if sig[offset+i] == '(' {
+					depth++
+				} else if sig[offset+i] == ')' {
+					depth--
+				}
+				i++
+			}
+			s := sigByteSize(sig[offset+1 : offset+i-1])
+			if s == 0 {
+				return 0
+			}
+			total += s
+			offset += i
+		default:
+			return 0
+		}
+	}
+	return total
+}
+
+// A FormatError is an error in the wire format.
+type FormatError string
+
+func (e FormatError) Error() string {
+	return "dbus: wire format error: " + string(e)
+}
diff --git a/vendor/github.com/godbus/dbus/v5/default_handler.go b/vendor/github.com/godbus/dbus/v5/default_handler.go
new file mode 100644
index 00000000000..13132c6b479
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/default_handler.go
@@ -0,0 +1,342 @@
+package dbus
+
+import (
+	"bytes"
+	"reflect"
+	"strings"
+	"sync"
+)
+
+func newIntrospectIntf(h *defaultHandler) *exportedIntf {
+	methods := make(map[string]Method)
+	methods["Introspect"] = exportedMethod{
+		reflect.ValueOf(func(msg Message) (string, *Error) {
+			path := msg.Headers[FieldPath].value.(ObjectPath)
+			return h.introspectPath(path), nil
+		}),
+	}
+	return newExportedIntf(methods, true)
+}
+
+//NewDefaultHandler returns an instance of the default
+//call handler. This is useful if you want to implement only
+//one of the two handlers but not both.
+//
+// Deprecated: this is the default value, don't use it, it will be unexported.
+func NewDefaultHandler() *defaultHandler {
+	h := &defaultHandler{
+		objects:     make(map[ObjectPath]*exportedObj),
+		defaultIntf: make(map[string]*exportedIntf),
+	}
+	h.defaultIntf["org.freedesktop.DBus.Introspectable"] = newIntrospectIntf(h)
+	return h
+}
+
+type defaultHandler struct {
+	sync.RWMutex
+	objects     map[ObjectPath]*exportedObj
+	defaultIntf map[string]*exportedIntf
+}
+
+func (h *defaultHandler) PathExists(path ObjectPath) bool {
+	_, ok := h.objects[path]
+	return ok
+}
+
+func (h *defaultHandler) introspectPath(path ObjectPath) string {
+	subpath := make(map[string]struct{})
+	var xml bytes.Buffer
+	xml.WriteString("<node>")
+	for obj := range h.objects {
+		p := string(path)
+		if p != "/" {
+			p += "/"
+		}
+		if strings.HasPrefix(string(obj), p) {
+			node_name := strings.Split(string(obj[len(p):]), "/")[0]
+			subpath[node_name] = struct{}{}
+		}
+	}
+	for s := range subpath {
+		xml.WriteString("\n\t<node name=\"" + s + "\"/>")
+	}
+	xml.WriteString("\n</node>")
+	return xml.String()
+}
+
+func (h *defaultHandler) LookupObject(path ObjectPath) (ServerObject, bool) {
+	h.RLock()
+	defer h.RUnlock()
+	object, ok := h.objects[path]
+	if ok {
+		return object, ok
+	}
+
+	// If an object wasn't found for this exact path,
+	// look for a matching subtree registration
+	subtreeObject := newExportedObject()
+	path = path[:strings.LastIndex(string(path), "/")]
+	for len(path) > 0 {
+		object, ok = h.objects[path]
+		if ok {
+			for name, iface := range object.interfaces {
+				// Only include this handler if it registered for the subtree
+				if iface.isFallbackInterface() {
+					subtreeObject.interfaces[name] = iface
+				}
+			}
+			break
+		}
+
+		path = path[:strings.LastIndex(string(path), "/")]
+	}
+
+	for name, intf := range h.defaultIntf {
+		if _, exists := subtreeObject.interfaces[name]; exists {
+			continue
+		}
+		subtreeObject.interfaces[name] = intf
+	}
+
+	return subtreeObject, true
+}
+
+func (h *defaultHandler) AddObject(path ObjectPath, object *exportedObj) {
+	h.Lock()
+	h.objects[path] = object
+	h.Unlock()
+}
+
+func (h *defaultHandler) DeleteObject(path ObjectPath) {
+	h.Lock()
+	delete(h.objects, path)
+	h.Unlock()
+}
+
+type exportedMethod struct {
+	reflect.Value
+}
+
+func (m exportedMethod) Call(args ...interface{}) ([]interface{}, error) {
+	t := m.Type()
+
+	params := make([]reflect.Value, len(args))
+	for i := 0; i < len(args); i++ {
+		params[i] = reflect.ValueOf(args[i]).Elem()
+	}
+
+	ret := m.Value.Call(params)
+	var err error
+	nilErr := false // The reflection will find almost-nils, let's only pass back clean ones!
+	if t.NumOut() > 0 {
+		if e, ok := ret[t.NumOut()-1].Interface().(*Error); ok { // godbus *Error
+			nilErr = ret[t.NumOut()-1].IsNil()
+			ret = ret[:t.NumOut()-1]
+			err = e
+		} else if ret[t.NumOut()-1].Type().Implements(errType) { // Go error
+			i := ret[t.NumOut()-1].Interface()
+			if i == nil {
+				nilErr = ret[t.NumOut()-1].IsNil()
+			} else {
+				err = i.(error)
+			}
+			ret = ret[:t.NumOut()-1]
+		}
+	}
+	out := make([]interface{}, len(ret))
+	for i, val := range ret {
+		out[i] = val.Interface()
+	}
+	if nilErr || err == nil {
+		//concrete type to interface nil is a special case
+		return out, nil
+	}
+	return out, err
+}
+
+func (m exportedMethod) NumArguments() int {
+	return m.Value.Type().NumIn()
+}
+
+func (m exportedMethod) ArgumentValue(i int) interface{} {
+	return reflect.Zero(m.Type().In(i)).Interface()
+}
+
+func (m exportedMethod) NumReturns() int {
+	return m.Value.Type().NumOut()
+}
+
+func (m exportedMethod) ReturnValue(i int) interface{} {
+	return reflect.Zero(m.Type().Out(i)).Interface()
+}
+
+func newExportedObject() *exportedObj {
+	return &exportedObj{
+		interfaces: make(map[string]*exportedIntf),
+	}
+}
+
+type exportedObj struct {
+	mu         sync.RWMutex
+	interfaces map[string]*exportedIntf
+}
+
+func (obj *exportedObj) LookupInterface(name string) (Interface, bool) {
+	if name == "" {
+		return obj, true
+	}
+	obj.mu.RLock()
+	defer obj.mu.RUnlock()
+	intf, exists := obj.interfaces[name]
+	return intf, exists
+}
+
+func (obj *exportedObj) AddInterface(name string, iface *exportedIntf) {
+	obj.mu.Lock()
+	defer obj.mu.Unlock()
+	obj.interfaces[name] = iface
+}
+
+func (obj *exportedObj) DeleteInterface(name string) {
+	obj.mu.Lock()
+	defer obj.mu.Unlock()
+	delete(obj.interfaces, name)
+}
+
+func (obj *exportedObj) LookupMethod(name string) (Method, bool) {
+	obj.mu.RLock()
+	defer obj.mu.RUnlock()
+	for _, intf := range obj.interfaces {
+		method, exists := intf.LookupMethod(name)
+		if exists {
+			return method, exists
+		}
+	}
+	return nil, false
+}
+
+func (obj *exportedObj) isFallbackInterface() bool {
+	return false
+}
+
+func newExportedIntf(methods map[string]Method, includeSubtree bool) *exportedIntf {
+	return &exportedIntf{
+		methods:        methods,
+		includeSubtree: includeSubtree,
+	}
+}
+
+type exportedIntf struct {
+	methods map[string]Method
+
+	// Whether or not this export is for the entire subtree
+	includeSubtree bool
+}
+
+func (obj *exportedIntf) LookupMethod(name string) (Method, bool) {
+	out, exists := obj.methods[name]
+	return out, exists
+}
+
+func (obj *exportedIntf) isFallbackInterface() bool {
+	return obj.includeSubtree
+}
+
+//NewDefaultSignalHandler returns an instance of the default
+//signal handler. This is useful if you want to implement only
+//one of the two handlers but not both.
+//
+// Deprecated: this is the default value, don't use it, it will be unexported.
+func NewDefaultSignalHandler() *defaultSignalHandler {
+	return &defaultSignalHandler{}
+}
+
+type defaultSignalHandler struct {
+	mu      sync.RWMutex
+	closed  bool
+	signals []*signalChannelData
+}
+
+func (sh *defaultSignalHandler) DeliverSignal(intf, name string, signal *Signal) {
+	sh.mu.RLock()
+	defer sh.mu.RUnlock()
+	if sh.closed {
+		return
+	}
+	for _, scd := range sh.signals {
+		scd.deliver(signal)
+	}
+}
+
+func (sh *defaultSignalHandler) Terminate() {
+	sh.mu.Lock()
+	defer sh.mu.Unlock()
+	if sh.closed {
+		return
+	}
+
+	for _, scd := range sh.signals {
+		scd.close()
+		close(scd.ch)
+	}
+	sh.closed = true
+	sh.signals = nil
+}
+
+func (sh *defaultSignalHandler) AddSignal(ch chan<- *Signal) {
+	sh.mu.Lock()
+	defer sh.mu.Unlock()
+	if sh.closed {
+		return
+	}
+	sh.signals = append(sh.signals, &signalChannelData{
+		ch:   ch,
+		done: make(chan struct{}),
+	})
+}
+
+func (sh *defaultSignalHandler) RemoveSignal(ch chan<- *Signal) {
+	sh.mu.Lock()
+	defer sh.mu.Unlock()
+	if sh.closed {
+		return
+	}
+	for i := len(sh.signals) - 1; i >= 0; i-- {
+		if ch == sh.signals[i].ch {
+			sh.signals[i].close()
+			copy(sh.signals[i:], sh.signals[i+1:])
+			sh.signals[len(sh.signals)-1] = nil
+			sh.signals = sh.signals[:len(sh.signals)-1]
+		}
+	}
+}
+
+type signalChannelData struct {
+	wg   sync.WaitGroup
+	ch   chan<- *Signal
+	done chan struct{}
+}
+
+func (scd *signalChannelData) deliver(signal *Signal) {
+	select {
+	case scd.ch <- signal:
+	case <-scd.done:
+		return
+	default:
+		scd.wg.Add(1)
+		go scd.deferredDeliver(signal)
+	}
+}
+
+func (scd *signalChannelData) deferredDeliver(signal *Signal) {
+	select {
+	case scd.ch <- signal:
+	case <-scd.done:
+	}
+	scd.wg.Done()
+}
+
+func (scd *signalChannelData) close() {
+	close(scd.done)
+	scd.wg.Wait() // wait until all spawned goroutines return
+}
diff --git a/vendor/github.com/godbus/dbus/v5/doc.go b/vendor/github.com/godbus/dbus/v5/doc.go
new file mode 100644
index 00000000000..ade1df951cd
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/doc.go
@@ -0,0 +1,69 @@
+/*
+Package dbus implements bindings to the D-Bus message bus system.
+
+To use the message bus API, you first need to connect to a bus (usually the
+session or system bus). The acquired connection then can be used to call methods
+on remote objects and emit or receive signals. Using the Export method, you can
+arrange D-Bus methods calls to be directly translated to method calls on a Go
+value.
+
+Conversion Rules
+
+For outgoing messages, Go types are automatically converted to the
+corresponding D-Bus types. The following types are directly encoded as their
+respective D-Bus equivalents:
+
+     Go type     | D-Bus type
+     ------------+-----------
+     byte        | BYTE
+     bool        | BOOLEAN
+     int16       | INT16
+     uint16      | UINT16
+     int         | INT32
+     uint        | UINT32
+     int32       | INT32
+     uint32      | UINT32
+     int64       | INT64
+     uint64      | UINT64
+     float64     | DOUBLE
+     string      | STRING
+     ObjectPath  | OBJECT_PATH
+     Signature   | SIGNATURE
+     Variant     | VARIANT
+     interface{} | VARIANT
+     UnixFDIndex | UNIX_FD
+
+Slices and arrays encode as ARRAYs of their element type.
+
+Maps encode as DICTs, provided that their key type can be used as a key for
+a DICT.
+
+Structs other than Variant and Signature encode as a STRUCT containing their
+exported fields. Fields whose tags contain `dbus:"-"` and unexported fields will
+be skipped.
+
+Pointers encode as the value they're pointed to.
+
+Types convertible to one of the base types above will be mapped as the
+base type.
+
+Trying to encode any other type or a slice, map or struct containing an
+unsupported type will result in an InvalidTypeError.
+
+For incoming messages, the inverse of these rules are used, with the exception
+of STRUCTs. Incoming STRUCTS are represented as a slice of empty interfaces
+containing the struct fields in the correct order. The Store function can be
+used to convert such values to Go structs.
+
+Unix FD passing
+
+Handling Unix file descriptors deserves special mention. To use them, you should
+first check that they are supported on a connection by calling SupportsUnixFDs.
+If it returns true, all method of Connection will translate messages containing
+UnixFD's to messages that are accompanied by the given file descriptors with the
+UnixFD values being substituted by the correct indices. Similarly, the indices
+of incoming messages are automatically resolved. It shouldn't be necessary to use
+UnixFDIndex.
+
+*/
+package dbus
diff --git a/vendor/github.com/godbus/dbus/v5/encoder.go b/vendor/github.com/godbus/dbus/v5/encoder.go
new file mode 100644
index 00000000000..adfbb75c559
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/encoder.go
@@ -0,0 +1,210 @@
+package dbus
+
+import (
+	"bytes"
+	"encoding/binary"
+	"io"
+	"reflect"
+)
+
+// An encoder encodes values to the D-Bus wire format.
+type encoder struct {
+	out   io.Writer
+	order binary.ByteOrder
+	pos   int
+}
+
+// NewEncoder returns a new encoder that writes to out in the given byte order.
+func newEncoder(out io.Writer, order binary.ByteOrder) *encoder {
+	return newEncoderAtOffset(out, 0, order)
+}
+
+// newEncoderAtOffset returns a new encoder that writes to out in the given
+// byte order. Specify the offset to initialize pos for proper alignment
+// computation.
+func newEncoderAtOffset(out io.Writer, offset int, order binary.ByteOrder) *encoder {
+	enc := new(encoder)
+	enc.out = out
+	enc.order = order
+	enc.pos = offset
+	return enc
+}
+
+// Aligns the next output to be on a multiple of n. Panics on write errors.
+func (enc *encoder) align(n int) {
+	pad := enc.padding(0, n)
+	if pad > 0 {
+		empty := make([]byte, pad)
+		if _, err := enc.out.Write(empty); err != nil {
+			panic(err)
+		}
+		enc.pos += pad
+	}
+}
+
+// pad returns the number of bytes of padding, based on current position and additional offset.
+// and alignment.
+func (enc *encoder) padding(offset, algn int) int {
+	abs := enc.pos + offset
+	if abs%algn != 0 {
+		newabs := (abs + algn - 1) & ^(algn - 1)
+		return newabs - abs
+	}
+	return 0
+}
+
+// Calls binary.Write(enc.out, enc.order, v) and panics on write errors.
+func (enc *encoder) binwrite(v interface{}) {
+	if err := binary.Write(enc.out, enc.order, v); err != nil {
+		panic(err)
+	}
+}
+
+// Encode encodes the given values to the underlying reader. All written values
+// are aligned properly as required by the D-Bus spec.
+func (enc *encoder) Encode(vs ...interface{}) (err error) {
+	defer func() {
+		err, _ = recover().(error)
+	}()
+	for _, v := range vs {
+		enc.encode(reflect.ValueOf(v), 0)
+	}
+	return nil
+}
+
+// encode encodes the given value to the writer and panics on error. depth holds
+// the depth of the container nesting.
+func (enc *encoder) encode(v reflect.Value, depth int) {
+	enc.align(alignment(v.Type()))
+	switch v.Kind() {
+	case reflect.Uint8:
+		var b [1]byte
+		b[0] = byte(v.Uint())
+		if _, err := enc.out.Write(b[:]); err != nil {
+			panic(err)
+		}
+		enc.pos++
+	case reflect.Bool:
+		if v.Bool() {
+			enc.encode(reflect.ValueOf(uint32(1)), depth)
+		} else {
+			enc.encode(reflect.ValueOf(uint32(0)), depth)
+		}
+	case reflect.Int16:
+		enc.binwrite(int16(v.Int()))
+		enc.pos += 2
+	case reflect.Uint16:
+		enc.binwrite(uint16(v.Uint()))
+		enc.pos += 2
+	case reflect.Int, reflect.Int32:
+		enc.binwrite(int32(v.Int()))
+		enc.pos += 4
+	case reflect.Uint, reflect.Uint32:
+		enc.binwrite(uint32(v.Uint()))
+		enc.pos += 4
+	case reflect.Int64:
+		enc.binwrite(v.Int())
+		enc.pos += 8
+	case reflect.Uint64:
+		enc.binwrite(v.Uint())
+		enc.pos += 8
+	case reflect.Float64:
+		enc.binwrite(v.Float())
+		enc.pos += 8
+	case reflect.String:
+		enc.encode(reflect.ValueOf(uint32(len(v.String()))), depth)
+		b := make([]byte, v.Len()+1)
+		copy(b, v.String())
+		b[len(b)-1] = 0
+		n, err := enc.out.Write(b)
+		if err != nil {
+			panic(err)
+		}
+		enc.pos += n
+	case reflect.Ptr:
+		enc.encode(v.Elem(), depth)
+	case reflect.Slice, reflect.Array:
+		if depth >= 64 {
+			panic(FormatError("input exceeds container depth limit"))
+		}
+		// Lookahead offset: 4 bytes for uint32 length (with alignment),
+		// plus alignment for elements.
+		n := enc.padding(0, 4) + 4
+		offset := enc.pos + n + enc.padding(n, alignment(v.Type().Elem()))
+
+		var buf bytes.Buffer
+		bufenc := newEncoderAtOffset(&buf, offset, enc.order)
+
+		for i := 0; i < v.Len(); i++ {
+			bufenc.encode(v.Index(i), depth+1)
+		}
+		enc.encode(reflect.ValueOf(uint32(buf.Len())), depth)
+		length := buf.Len()
+		enc.align(alignment(v.Type().Elem()))
+		if _, err := buf.WriteTo(enc.out); err != nil {
+			panic(err)
+		}
+		enc.pos += length
+	case reflect.Struct:
+		if depth >= 64 && v.Type() != signatureType {
+			panic(FormatError("input exceeds container depth limit"))
+		}
+		switch t := v.Type(); t {
+		case signatureType:
+			str := v.Field(0)
+			enc.encode(reflect.ValueOf(byte(str.Len())), depth+1)
+			b := make([]byte, str.Len()+1)
+			copy(b, str.String())
+			b[len(b)-1] = 0
+			n, err := enc.out.Write(b)
+			if err != nil {
+				panic(err)
+			}
+			enc.pos += n
+		case variantType:
+			variant := v.Interface().(Variant)
+			enc.encode(reflect.ValueOf(variant.sig), depth+1)
+			enc.encode(reflect.ValueOf(variant.value), depth+1)
+		default:
+			for i := 0; i < v.Type().NumField(); i++ {
+				field := t.Field(i)
+				if field.PkgPath == "" && field.Tag.Get("dbus") != "-" {
+					enc.encode(v.Field(i), depth+1)
+				}
+			}
+		}
+	case reflect.Map:
+		// Maps are arrays of structures, so they actually increase the depth by
+		// 2.
+		if depth >= 63 {
+			panic(FormatError("input exceeds container depth limit"))
+		}
+		if !isKeyType(v.Type().Key()) {
+			panic(InvalidTypeError{v.Type()})
+		}
+		keys := v.MapKeys()
+		// Lookahead offset: 4 bytes for uint32 length (with alignment),
+		// plus 8-byte alignment
+		n := enc.padding(0, 4) + 4
+		offset := enc.pos + n + enc.padding(n, 8)
+
+		var buf bytes.Buffer
+		bufenc := newEncoderAtOffset(&buf, offset, enc.order)
+		for _, k := range keys {
+			bufenc.align(8)
+			bufenc.encode(k, depth+2)
+			bufenc.encode(v.MapIndex(k), depth+2)
+		}
+		enc.encode(reflect.ValueOf(uint32(buf.Len())), depth)
+		length := buf.Len()
+		enc.align(8)
+		if _, err := buf.WriteTo(enc.out); err != nil {
+			panic(err)
+		}
+		enc.pos += length
+	case reflect.Interface:
+		enc.encode(reflect.ValueOf(MakeVariant(v.Interface())), depth)
+	default:
+		panic(InvalidTypeError{v.Type()})
+	}
+}
diff --git a/vendor/github.com/godbus/dbus/v5/export.go b/vendor/github.com/godbus/dbus/v5/export.go
new file mode 100644
index 00000000000..2447b51d469
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/export.go
@@ -0,0 +1,441 @@
+package dbus
+
+import (
+	"errors"
+	"fmt"
+	"reflect"
+	"strings"
+)
+
+var (
+	ErrMsgInvalidArg = Error{
+		"org.freedesktop.DBus.Error.InvalidArgs",
+		[]interface{}{"Invalid type / number of args"},
+	}
+	ErrMsgNoObject = Error{
+		"org.freedesktop.DBus.Error.NoSuchObject",
+		[]interface{}{"No such object"},
+	}
+	ErrMsgUnknownMethod = Error{
+		"org.freedesktop.DBus.Error.UnknownMethod",
+		[]interface{}{"Unknown / invalid method"},
+	}
+	ErrMsgUnknownInterface = Error{
+		"org.freedesktop.DBus.Error.UnknownInterface",
+		[]interface{}{"Object does not implement the interface"},
+	}
+)
+
+func MakeFailedError(err error) *Error {
+	return &Error{
+		"org.freedesktop.DBus.Error.Failed",
+		[]interface{}{err.Error()},
+	}
+}
+
+// Sender is a type which can be used in exported methods to receive the message
+// sender.
+type Sender string
+
+func computeMethodName(name string, mapping map[string]string) string {
+	newname, ok := mapping[name]
+	if ok {
+		name = newname
+	}
+	return name
+}
+
+func getMethods(in interface{}, mapping map[string]string) map[string]reflect.Value {
+	if in == nil {
+		return nil
+	}
+	methods := make(map[string]reflect.Value)
+	val := reflect.ValueOf(in)
+	typ := val.Type()
+	for i := 0; i < typ.NumMethod(); i++ {
+		methtype := typ.Method(i)
+		method := val.Method(i)
+		t := method.Type()
+		// only track valid methods must return *Error as last arg
+		// and must be exported
+		if t.NumOut() == 0 ||
+			t.Out(t.NumOut()-1) != reflect.TypeOf(&ErrMsgInvalidArg) ||
+			methtype.PkgPath != "" {
+			continue
+		}
+		// map names while building table
+		methods[computeMethodName(methtype.Name, mapping)] = method
+	}
+	return methods
+}
+
+func getAllMethods(in interface{}, mapping map[string]string) map[string]reflect.Value {
+	if in == nil {
+		return nil
+	}
+	methods := make(map[string]reflect.Value)
+	val := reflect.ValueOf(in)
+	typ := val.Type()
+	for i := 0; i < typ.NumMethod(); i++ {
+		methtype := typ.Method(i)
+		method := val.Method(i)
+		// map names while building table
+		methods[computeMethodName(methtype.Name, mapping)] = method
+	}
+	return methods
+}
+
+func standardMethodArgumentDecode(m Method, sender string, msg *Message, body []interface{}) ([]interface{}, error) {
+	pointers := make([]interface{}, m.NumArguments())
+	decode := make([]interface{}, 0, len(body))
+
+	for i := 0; i < m.NumArguments(); i++ {
+		tp := reflect.TypeOf(m.ArgumentValue(i))
+		val := reflect.New(tp)
+		pointers[i] = val.Interface()
+		if tp == reflect.TypeOf((*Sender)(nil)).Elem() {
+			val.Elem().SetString(sender)
+		} else if tp == reflect.TypeOf((*Message)(nil)).Elem() {
+			val.Elem().Set(reflect.ValueOf(*msg))
+		} else {
+			decode = append(decode, pointers[i])
+		}
+	}
+
+	if len(decode) != len(body) {
+		return nil, ErrMsgInvalidArg
+	}
+
+	if err := Store(body, decode...); err != nil {
+		return nil, ErrMsgInvalidArg
+	}
+
+	return pointers, nil
+}
+
+func (conn *Conn) decodeArguments(m Method, sender string, msg *Message) ([]interface{}, error) {
+	if decoder, ok := m.(ArgumentDecoder); ok {
+		return decoder.DecodeArguments(conn, sender, msg, msg.Body)
+	}
+	return standardMethodArgumentDecode(m, sender, msg, msg.Body)
+}
+
+// handleCall handles the given method call (i.e. looks if it's one of the
+// pre-implemented ones and searches for a corresponding handler if not).
+func (conn *Conn) handleCall(msg *Message) {
+	name := msg.Headers[FieldMember].value.(string)
+	path := msg.Headers[FieldPath].value.(ObjectPath)
+	ifaceName, _ := msg.Headers[FieldInterface].value.(string)
+	sender, hasSender := msg.Headers[FieldSender].value.(string)
+	serial := msg.serial
+	if ifaceName == "org.freedesktop.DBus.Peer" {
+		switch name {
+		case "Ping":
+			conn.sendReply(sender, serial)
+		case "GetMachineId":
+			conn.sendReply(sender, serial, conn.uuid)
+		default:
+			conn.sendError(ErrMsgUnknownMethod, sender, serial)
+		}
+		return
+	}
+	if len(name) == 0 {
+		conn.sendError(ErrMsgUnknownMethod, sender, serial)
+	}
+
+	object, ok := conn.handler.LookupObject(path)
+	if !ok {
+		conn.sendError(ErrMsgNoObject, sender, serial)
+		return
+	}
+
+	iface, exists := object.LookupInterface(ifaceName)
+	if !exists {
+		conn.sendError(ErrMsgUnknownInterface, sender, serial)
+		return
+	}
+
+	m, exists := iface.LookupMethod(name)
+	if !exists {
+		conn.sendError(ErrMsgUnknownMethod, sender, serial)
+		return
+	}
+	args, err := conn.decodeArguments(m, sender, msg)
+	if err != nil {
+		conn.sendError(err, sender, serial)
+		return
+	}
+
+	ret, err := m.Call(args...)
+	if err != nil {
+		conn.sendError(err, sender, serial)
+		return
+	}
+
+	if msg.Flags&FlagNoReplyExpected == 0 {
+		reply := new(Message)
+		reply.Type = TypeMethodReply
+		reply.Headers = make(map[HeaderField]Variant)
+		if hasSender {
+			reply.Headers[FieldDestination] = msg.Headers[FieldSender]
+		}
+		reply.Headers[FieldReplySerial] = MakeVariant(msg.serial)
+		reply.Body = make([]interface{}, len(ret))
+		for i := 0; i < len(ret); i++ {
+			reply.Body[i] = ret[i]
+		}
+		reply.Headers[FieldSignature] = MakeVariant(SignatureOf(reply.Body...))
+
+		conn.sendMessageAndIfClosed(reply, nil)
+	}
+}
+
+// Emit emits the given signal on the message bus. The name parameter must be
+// formatted as "interface.member", e.g., "org.freedesktop.DBus.NameLost".
+func (conn *Conn) Emit(path ObjectPath, name string, values ...interface{}) error {
+	if !path.IsValid() {
+		return errors.New("dbus: invalid object path")
+	}
+	i := strings.LastIndex(name, ".")
+	if i == -1 {
+		return errors.New("dbus: invalid method name")
+	}
+	iface := name[:i]
+	member := name[i+1:]
+	if !isValidMember(member) {
+		return errors.New("dbus: invalid method name")
+	}
+	if !isValidInterface(iface) {
+		return errors.New("dbus: invalid interface name")
+	}
+	msg := new(Message)
+	msg.Type = TypeSignal
+	msg.Headers = make(map[HeaderField]Variant)
+	msg.Headers[FieldInterface] = MakeVariant(iface)
+	msg.Headers[FieldMember] = MakeVariant(member)
+	msg.Headers[FieldPath] = MakeVariant(path)
+	msg.Body = values
+	if len(values) > 0 {
+		msg.Headers[FieldSignature] = MakeVariant(SignatureOf(values...))
+	}
+
+	var closed bool
+	conn.sendMessageAndIfClosed(msg, func() {
+		closed = true
+	})
+	if closed {
+		return ErrClosed
+	}
+	return nil
+}
+
+// Export registers the given value to be exported as an object on the
+// message bus.
+//
+// If a method call on the given path and interface is received, an exported
+// method with the same name is called with v as the receiver if the
+// parameters match and the last return value is of type *Error. If this
+// *Error is not nil, it is sent back to the caller as an error.
+// Otherwise, a method reply is sent with the other return values as its body.
+//
+// Any parameters with the special type Sender are set to the sender of the
+// dbus message when the method is called. Parameters of this type do not
+// contribute to the dbus signature of the method (i.e. the method is exposed
+// as if the parameters of type Sender were not there).
+//
+// Similarly, any parameters with the type Message are set to the raw message
+// received on the bus. Again, parameters of this type do not contribute to the
+// dbus signature of the method.
+//
+// Every method call is executed in a new goroutine, so the method may be called
+// in multiple goroutines at once.
+//
+// Method calls on the interface org.freedesktop.DBus.Peer will be automatically
+// handled for every object.
+//
+// Passing nil as the first parameter will cause conn to cease handling calls on
+// the given combination of path and interface.
+//
+// Export returns an error if path is not a valid path name.
+func (conn *Conn) Export(v interface{}, path ObjectPath, iface string) error {
+	return conn.ExportWithMap(v, nil, path, iface)
+}
+
+// ExportAll registers all exported methods defined by the given object on
+// the message bus.
+//
+// Unlike Export there is no requirement to have the last parameter as type
+// *Error. If you want to be able to return error then you can append an error
+// type parameter to your method signature. If the error returned is not nil,
+// it is sent back to the caller as an error. Otherwise, a method reply is
+// sent with the other return values as its body.
+func (conn *Conn) ExportAll(v interface{}, path ObjectPath, iface string) error {
+	return conn.export(getAllMethods(v, nil), path, iface, false)
+}
+
+// ExportWithMap works exactly like Export but provides the ability to remap
+// method names (e.g. export a lower-case method).
+//
+// The keys in the map are the real method names (exported on the struct), and
+// the values are the method names to be exported on DBus.
+func (conn *Conn) ExportWithMap(v interface{}, mapping map[string]string, path ObjectPath, iface string) error {
+	return conn.export(getMethods(v, mapping), path, iface, false)
+}
+
+// ExportSubtree works exactly like Export but registers the given value for
+// an entire subtree rather under the root path provided.
+//
+// In order to make this useful, one parameter in each of the value's exported
+// methods should be a Message, in which case it will contain the raw message
+// (allowing one to get access to the path that caused the method to be called).
+//
+// Note that more specific export paths take precedence over less specific. For
+// example, a method call using the ObjectPath /foo/bar/baz will call a method
+// exported on /foo/bar before a method exported on /foo.
+func (conn *Conn) ExportSubtree(v interface{}, path ObjectPath, iface string) error {
+	return conn.ExportSubtreeWithMap(v, nil, path, iface)
+}
+
+// ExportSubtreeWithMap works exactly like ExportSubtree but provides the
+// ability to remap method names (e.g. export a lower-case method).
+//
+// The keys in the map are the real method names (exported on the struct), and
+// the values are the method names to be exported on DBus.
+func (conn *Conn) ExportSubtreeWithMap(v interface{}, mapping map[string]string, path ObjectPath, iface string) error {
+	return conn.export(getMethods(v, mapping), path, iface, true)
+}
+
+// ExportMethodTable like Export registers the given methods as an object
+// on the message bus. Unlike Export the it uses a method table to define
+// the object instead of a native go object.
+//
+// The method table is a map from method name to function closure
+// representing the method. This allows an object exported on the bus to not
+// necessarily be a native go object. It can be useful for generating exposed
+// methods on the fly.
+//
+// Any non-function objects in the method table are ignored.
+func (conn *Conn) ExportMethodTable(methods map[string]interface{}, path ObjectPath, iface string) error {
+	return conn.exportMethodTable(methods, path, iface, false)
+}
+
+// Like ExportSubtree, but with the same caveats as ExportMethodTable.
+func (conn *Conn) ExportSubtreeMethodTable(methods map[string]interface{}, path ObjectPath, iface string) error {
+	return conn.exportMethodTable(methods, path, iface, true)
+}
+
+func (conn *Conn) exportMethodTable(methods map[string]interface{}, path ObjectPath, iface string, includeSubtree bool) error {
+	var out map[string]reflect.Value
+	if methods != nil {
+		out = make(map[string]reflect.Value)
+		for name, method := range methods {
+			rval := reflect.ValueOf(method)
+			if rval.Kind() != reflect.Func {
+				continue
+			}
+			t := rval.Type()
+			// only track valid methods must return *Error as last arg
+			if t.NumOut() == 0 ||
+				t.Out(t.NumOut()-1) != reflect.TypeOf(&ErrMsgInvalidArg) {
+				continue
+			}
+			out[name] = rval
+		}
+	}
+	return conn.export(out, path, iface, includeSubtree)
+}
+
+func (conn *Conn) unexport(h *defaultHandler, path ObjectPath, iface string) error {
+	if h.PathExists(path) {
+		obj := h.objects[path]
+		obj.DeleteInterface(iface)
+		if len(obj.interfaces) == 0 {
+			h.DeleteObject(path)
+		}
+	}
+	return nil
+}
+
+// export is the worker function for all exports/registrations.
+func (conn *Conn) export(methods map[string]reflect.Value, path ObjectPath, iface string, includeSubtree bool) error {
+	h, ok := conn.handler.(*defaultHandler)
+	if !ok {
+		return fmt.Errorf(
+			`dbus: export only allowed on the default handler. Received: %T"`,
+			conn.handler)
+	}
+
+	if !path.IsValid() {
+		return fmt.Errorf(`dbus: Invalid path name: "%s"`, path)
+	}
+
+	// Remove a previous export if the interface is nil
+	if methods == nil {
+		return conn.unexport(h, path, iface)
+	}
+
+	// If this is the first handler for this path, make a new map to hold all
+	// handlers for this path.
+	if !h.PathExists(path) {
+		h.AddObject(path, newExportedObject())
+	}
+
+	exportedMethods := make(map[string]Method)
+	for name, method := range methods {
+		exportedMethods[name] = exportedMethod{method}
+	}
+
+	// Finally, save this handler
+	obj := h.objects[path]
+	obj.AddInterface(iface, newExportedIntf(exportedMethods, includeSubtree))
+
+	return nil
+}
+
+// ReleaseName calls org.freedesktop.DBus.ReleaseName and awaits a response.
+func (conn *Conn) ReleaseName(name string) (ReleaseNameReply, error) {
+	var r uint32
+	err := conn.busObj.Call("org.freedesktop.DBus.ReleaseName", 0, name).Store(&r)
+	if err != nil {
+		return 0, err
+	}
+	return ReleaseNameReply(r), nil
+}
+
+// RequestName calls org.freedesktop.DBus.RequestName and awaits a response.
+func (conn *Conn) RequestName(name string, flags RequestNameFlags) (RequestNameReply, error) {
+	var r uint32
+	err := conn.busObj.Call("org.freedesktop.DBus.RequestName", 0, name, flags).Store(&r)
+	if err != nil {
+		return 0, err
+	}
+	return RequestNameReply(r), nil
+}
+
+// ReleaseNameReply is the reply to a ReleaseName call.
+type ReleaseNameReply uint32
+
+const (
+	ReleaseNameReplyReleased ReleaseNameReply = 1 + iota
+	ReleaseNameReplyNonExistent
+	ReleaseNameReplyNotOwner
+)
+
+// RequestNameFlags represents the possible flags for a RequestName call.
+type RequestNameFlags uint32
+
+const (
+	NameFlagAllowReplacement RequestNameFlags = 1 << iota
+	NameFlagReplaceExisting
+	NameFlagDoNotQueue
+)
+
+// RequestNameReply is the reply to a RequestName call.
+type RequestNameReply uint32
+
+const (
+	RequestNameReplyPrimaryOwner RequestNameReply = 1 + iota
+	RequestNameReplyInQueue
+	RequestNameReplyExists
+	RequestNameReplyAlreadyOwner
+)
diff --git a/vendor/github.com/godbus/dbus/v5/homedir.go b/vendor/github.com/godbus/dbus/v5/homedir.go
new file mode 100644
index 00000000000..0b745f9313a
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/homedir.go
@@ -0,0 +1,28 @@
+package dbus
+
+import (
+	"os"
+	"sync"
+)
+
+var (
+	homeDir     string
+	homeDirLock sync.Mutex
+)
+
+func getHomeDir() string {
+	homeDirLock.Lock()
+	defer homeDirLock.Unlock()
+
+	if homeDir != "" {
+		return homeDir
+	}
+
+	homeDir = os.Getenv("HOME")
+	if homeDir != "" {
+		return homeDir
+	}
+
+	homeDir = lookupHomeDir()
+	return homeDir
+}
diff --git a/vendor/github.com/godbus/dbus/v5/homedir_dynamic.go b/vendor/github.com/godbus/dbus/v5/homedir_dynamic.go
new file mode 100644
index 00000000000..2732081e73b
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/homedir_dynamic.go
@@ -0,0 +1,15 @@
+// +build !static_build
+
+package dbus
+
+import (
+	"os/user"
+)
+
+func lookupHomeDir() string {
+	u, err := user.Current()
+	if err != nil {
+		return "/"
+	}
+	return u.HomeDir
+}
diff --git a/vendor/github.com/godbus/dbus/v5/homedir_static.go b/vendor/github.com/godbus/dbus/v5/homedir_static.go
new file mode 100644
index 00000000000..b9d9cb5525a
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/homedir_static.go
@@ -0,0 +1,45 @@
+// +build static_build
+
+package dbus
+
+import (
+	"bufio"
+	"os"
+	"strconv"
+	"strings"
+)
+
+func lookupHomeDir() string {
+	myUid := os.Getuid()
+
+	f, err := os.Open("/etc/passwd")
+	if err != nil {
+		return "/"
+	}
+	defer f.Close()
+
+	s := bufio.NewScanner(f)
+
+	for s.Scan() {
+		if err := s.Err(); err != nil {
+			break
+		}
+
+		line := strings.TrimSpace(s.Text())
+		if line == "" {
+			continue
+		}
+
+		parts := strings.Split(line, ":")
+
+		if len(parts) >= 6 {
+			uid, err := strconv.Atoi(parts[2])
+			if err == nil && uid == myUid {
+				return parts[5]
+			}
+		}
+	}
+
+	// Default to / if we can't get a better value
+	return "/"
+}
diff --git a/vendor/github.com/godbus/dbus/v5/match.go b/vendor/github.com/godbus/dbus/v5/match.go
new file mode 100644
index 00000000000..5a607e53e41
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/match.go
@@ -0,0 +1,89 @@
+package dbus
+
+import (
+	"strconv"
+	"strings"
+)
+
+// MatchOption specifies option for dbus routing match rule. Options can be constructed with WithMatch* helpers.
+// For full list of available options consult
+// https://dbus.freedesktop.org/doc/dbus-specification.html#message-bus-routing-match-rules
+type MatchOption struct {
+	key   string
+	value string
+}
+
+func formatMatchOptions(options []MatchOption) string {
+	items := make([]string, 0, len(options))
+	for _, option := range options {
+		items = append(items, option.key+"='"+option.value+"'")
+	}
+	return strings.Join(items, ",")
+}
+
+// WithMatchOption creates match option with given key and value
+func WithMatchOption(key, value string) MatchOption {
+	return MatchOption{key, value}
+}
+
+// doesn't make sense to export this option because clients can only
+// subscribe to messages with signal type.
+func withMatchType(typ string) MatchOption {
+	return WithMatchOption("type", typ)
+}
+
+// WithMatchSender sets sender match option.
+func WithMatchSender(sender string) MatchOption {
+	return WithMatchOption("sender", sender)
+}
+
+// WithMatchSender sets interface match option.
+func WithMatchInterface(iface string) MatchOption {
+	return WithMatchOption("interface", iface)
+}
+
+// WithMatchMember sets member match option.
+func WithMatchMember(member string) MatchOption {
+	return WithMatchOption("member", member)
+}
+
+// WithMatchObjectPath creates match option that filters events based on given path
+func WithMatchObjectPath(path ObjectPath) MatchOption {
+	return WithMatchOption("path", string(path))
+}
+
+// WithMatchPathNamespace sets path_namespace match option.
+func WithMatchPathNamespace(namespace ObjectPath) MatchOption {
+	return WithMatchOption("path_namespace", string(namespace))
+}
+
+// WithMatchDestination sets destination match option.
+func WithMatchDestination(destination string) MatchOption {
+	return WithMatchOption("destination", destination)
+}
+
+// WithMatchArg sets argN match option, range of N is 0 to 63.
+func WithMatchArg(argIdx int, value string) MatchOption {
+	if argIdx < 0 || argIdx > 63 {
+		panic("range of argument index is 0 to 63")
+	}
+	return WithMatchOption("arg"+strconv.Itoa(argIdx), value)
+}
+
+// WithMatchArgPath sets argN path match option, range of N is 0 to 63.
+func WithMatchArgPath(argIdx int, path string) MatchOption {
+	if argIdx < 0 || argIdx > 63 {
+		panic("range of argument index is 0 to 63")
+	}
+	return WithMatchOption("arg"+strconv.Itoa(argIdx)+"path", path)
+}
+
+// WithMatchArg0Namespace sets arg0namespace match option.
+func WithMatchArg0Namespace(arg0Namespace string) MatchOption {
+	return WithMatchOption("arg0namespace", arg0Namespace)
+}
+
+// WithMatchEavesdrop sets eavesdrop match option.
+func WithMatchEavesdrop(eavesdrop bool) MatchOption {
+	return WithMatchOption("eavesdrop", strconv.FormatBool(eavesdrop))
+}
diff --git a/vendor/github.com/godbus/dbus/v5/message.go b/vendor/github.com/godbus/dbus/v5/message.go
new file mode 100644
index 00000000000..6a925367ebe
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/message.go
@@ -0,0 +1,353 @@
+package dbus
+
+import (
+	"bytes"
+	"encoding/binary"
+	"errors"
+	"io"
+	"reflect"
+	"strconv"
+)
+
+const protoVersion byte = 1
+
+// Flags represents the possible flags of a D-Bus message.
+type Flags byte
+
+const (
+	// FlagNoReplyExpected signals that the message is not expected to generate
+	// a reply. If this flag is set on outgoing messages, any possible reply
+	// will be discarded.
+	FlagNoReplyExpected Flags = 1 << iota
+	// FlagNoAutoStart signals that the message bus should not automatically
+	// start an application when handling this message.
+	FlagNoAutoStart
+	// FlagAllowInteractiveAuthorization may be set on a method call
+	// message to inform the receiving side that the caller is prepared
+	// to wait for interactive authorization, which might take a
+	// considerable time to complete. For instance, if this flag is set,
+	// it would be appropriate to query the user for passwords or
+	// confirmation via Polkit or a similar framework.
+	FlagAllowInteractiveAuthorization
+)
+
+// Type represents the possible types of a D-Bus message.
+type Type byte
+
+const (
+	TypeMethodCall Type = 1 + iota
+	TypeMethodReply
+	TypeError
+	TypeSignal
+	typeMax
+)
+
+func (t Type) String() string {
+	switch t {
+	case TypeMethodCall:
+		return "method call"
+	case TypeMethodReply:
+		return "reply"
+	case TypeError:
+		return "error"
+	case TypeSignal:
+		return "signal"
+	}
+	return "invalid"
+}
+
+// HeaderField represents the possible byte codes for the headers
+// of a D-Bus message.
+type HeaderField byte
+
+const (
+	FieldPath HeaderField = 1 + iota
+	FieldInterface
+	FieldMember
+	FieldErrorName
+	FieldReplySerial
+	FieldDestination
+	FieldSender
+	FieldSignature
+	FieldUnixFDs
+	fieldMax
+)
+
+// An InvalidMessageError describes the reason why a D-Bus message is regarded as
+// invalid.
+type InvalidMessageError string
+
+func (e InvalidMessageError) Error() string {
+	return "dbus: invalid message: " + string(e)
+}
+
+// fieldType are the types of the various header fields.
+var fieldTypes = [fieldMax]reflect.Type{
+	FieldPath:        objectPathType,
+	FieldInterface:   stringType,
+	FieldMember:      stringType,
+	FieldErrorName:   stringType,
+	FieldReplySerial: uint32Type,
+	FieldDestination: stringType,
+	FieldSender:      stringType,
+	FieldSignature:   signatureType,
+	FieldUnixFDs:     uint32Type,
+}
+
+// requiredFields lists the header fields that are required by the different
+// message types.
+var requiredFields = [typeMax][]HeaderField{
+	TypeMethodCall:  {FieldPath, FieldMember},
+	TypeMethodReply: {FieldReplySerial},
+	TypeError:       {FieldErrorName, FieldReplySerial},
+	TypeSignal:      {FieldPath, FieldInterface, FieldMember},
+}
+
+// Message represents a single D-Bus message.
+type Message struct {
+	Type
+	Flags
+	Headers map[HeaderField]Variant
+	Body    []interface{}
+
+	serial uint32
+}
+
+type header struct {
+	Field byte
+	Variant
+}
+
+// DecodeMessage tries to decode a single message in the D-Bus wire format
+// from the given reader. The byte order is figured out from the first byte.
+// The possibly returned error can be an error of the underlying reader, an
+// InvalidMessageError or a FormatError.
+func DecodeMessage(rd io.Reader) (msg *Message, err error) {
+	var order binary.ByteOrder
+	var hlength, length uint32
+	var typ, flags, proto byte
+	var headers []header
+
+	b := make([]byte, 1)
+	_, err = rd.Read(b)
+	if err != nil {
+		return
+	}
+	switch b[0] {
+	case 'l':
+		order = binary.LittleEndian
+	case 'B':
+		order = binary.BigEndian
+	default:
+		return nil, InvalidMessageError("invalid byte order")
+	}
+
+	dec := newDecoder(rd, order)
+	dec.pos = 1
+
+	msg = new(Message)
+	vs, err := dec.Decode(Signature{"yyyuu"})
+	if err != nil {
+		return nil, err
+	}
+	if err = Store(vs, &typ, &flags, &proto, &length, &msg.serial); err != nil {
+		return nil, err
+	}
+	msg.Type = Type(typ)
+	msg.Flags = Flags(flags)
+
+	// get the header length separately because we need it later
+	b = make([]byte, 4)
+	_, err = io.ReadFull(rd, b)
+	if err != nil {
+		return nil, err
+	}
+	binary.Read(bytes.NewBuffer(b), order, &hlength)
+	if hlength+length+16 > 1<<27 {
+		return nil, InvalidMessageError("message is too long")
+	}
+	dec = newDecoder(io.MultiReader(bytes.NewBuffer(b), rd), order)
+	dec.pos = 12
+	vs, err = dec.Decode(Signature{"a(yv)"})
+	if err != nil {
+		return nil, err
+	}
+	if err = Store(vs, &headers); err != nil {
+		return nil, err
+	}
+
+	msg.Headers = make(map[HeaderField]Variant)
+	for _, v := range headers {
+		msg.Headers[HeaderField(v.Field)] = v.Variant
+	}
+
+	dec.align(8)
+	body := make([]byte, int(length))
+	if length != 0 {
+		_, err := io.ReadFull(rd, body)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	if err = msg.IsValid(); err != nil {
+		return nil, err
+	}
+	sig, _ := msg.Headers[FieldSignature].value.(Signature)
+	if sig.str != "" {
+		buf := bytes.NewBuffer(body)
+		dec = newDecoder(buf, order)
+		vs, err := dec.Decode(sig)
+		if err != nil {
+			return nil, err
+		}
+		msg.Body = vs
+	}
+
+	return
+}
+
+// EncodeTo encodes and sends a message to the given writer. The byte order must
+// be either binary.LittleEndian or binary.BigEndian. If the message is not
+// valid or an error occurs when writing, an error is returned.
+func (msg *Message) EncodeTo(out io.Writer, order binary.ByteOrder) error {
+	if err := msg.IsValid(); err != nil {
+		return err
+	}
+	var vs [7]interface{}
+	switch order {
+	case binary.LittleEndian:
+		vs[0] = byte('l')
+	case binary.BigEndian:
+		vs[0] = byte('B')
+	default:
+		return errors.New("dbus: invalid byte order")
+	}
+	body := new(bytes.Buffer)
+	enc := newEncoder(body, order)
+	if len(msg.Body) != 0 {
+		enc.Encode(msg.Body...)
+	}
+	vs[1] = msg.Type
+	vs[2] = msg.Flags
+	vs[3] = protoVersion
+	vs[4] = uint32(len(body.Bytes()))
+	vs[5] = msg.serial
+	headers := make([]header, 0, len(msg.Headers))
+	for k, v := range msg.Headers {
+		headers = append(headers, header{byte(k), v})
+	}
+	vs[6] = headers
+	var buf bytes.Buffer
+	enc = newEncoder(&buf, order)
+	enc.Encode(vs[:]...)
+	enc.align(8)
+	body.WriteTo(&buf)
+	if buf.Len() > 1<<27 {
+		return InvalidMessageError("message is too long")
+	}
+	if _, err := buf.WriteTo(out); err != nil {
+		return err
+	}
+	return nil
+}
+
+// IsValid checks whether msg is a valid message and returns an
+// InvalidMessageError if it is not.
+func (msg *Message) IsValid() error {
+	if msg.Flags & ^(FlagNoAutoStart|FlagNoReplyExpected|FlagAllowInteractiveAuthorization) != 0 {
+		return InvalidMessageError("invalid flags")
+	}
+	if msg.Type == 0 || msg.Type >= typeMax {
+		return InvalidMessageError("invalid message type")
+	}
+	for k, v := range msg.Headers {
+		if k == 0 || k >= fieldMax {
+			return InvalidMessageError("invalid header")
+		}
+		if reflect.TypeOf(v.value) != fieldTypes[k] {
+			return InvalidMessageError("invalid type of header field")
+		}
+	}
+	for _, v := range requiredFields[msg.Type] {
+		if _, ok := msg.Headers[v]; !ok {
+			return InvalidMessageError("missing required header")
+		}
+	}
+	if path, ok := msg.Headers[FieldPath]; ok {
+		if !path.value.(ObjectPath).IsValid() {
+			return InvalidMessageError("invalid path name")
+		}
+	}
+	if iface, ok := msg.Headers[FieldInterface]; ok {
+		if !isValidInterface(iface.value.(string)) {
+			return InvalidMessageError("invalid interface name")
+		}
+	}
+	if member, ok := msg.Headers[FieldMember]; ok {
+		if !isValidMember(member.value.(string)) {
+			return InvalidMessageError("invalid member name")
+		}
+	}
+	if errname, ok := msg.Headers[FieldErrorName]; ok {
+		if !isValidInterface(errname.value.(string)) {
+			return InvalidMessageError("invalid error name")
+		}
+	}
+	if len(msg.Body) != 0 {
+		if _, ok := msg.Headers[FieldSignature]; !ok {
+			return InvalidMessageError("missing signature")
+		}
+	}
+	return nil
+}
+
+// Serial returns the message's serial number. The returned value is only valid
+// for messages received by eavesdropping.
+func (msg *Message) Serial() uint32 {
+	return msg.serial
+}
+
+// String returns a string representation of a message similar to the format of
+// dbus-monitor.
+func (msg *Message) String() string {
+	if err := msg.IsValid(); err != nil {
+		return "<invalid>"
+	}
+	s := msg.Type.String()
+	if v, ok := msg.Headers[FieldSender]; ok {
+		s += " from " + v.value.(string)
+	}
+	if v, ok := msg.Headers[FieldDestination]; ok {
+		s += " to " + v.value.(string)
+	}
+	s += " serial " + strconv.FormatUint(uint64(msg.serial), 10)
+	if v, ok := msg.Headers[FieldReplySerial]; ok {
+		s += " reply_serial " + strconv.FormatUint(uint64(v.value.(uint32)), 10)
+	}
+	if v, ok := msg.Headers[FieldUnixFDs]; ok {
+		s += " unixfds " + strconv.FormatUint(uint64(v.value.(uint32)), 10)
+	}
+	if v, ok := msg.Headers[FieldPath]; ok {
+		s += " path " + string(v.value.(ObjectPath))
+	}
+	if v, ok := msg.Headers[FieldInterface]; ok {
+		s += " interface " + v.value.(string)
+	}
+	if v, ok := msg.Headers[FieldErrorName]; ok {
+		s += " error " + v.value.(string)
+	}
+	if v, ok := msg.Headers[FieldMember]; ok {
+		s += " member " + v.value.(string)
+	}
+	if len(msg.Body) != 0 {
+		s += "\n"
+	}
+	for i, v := range msg.Body {
+		s += "  " + MakeVariant(v).String()
+		if i != len(msg.Body)-1 {
+			s += "\n"
+		}
+	}
+	return s
+}
diff --git a/vendor/github.com/godbus/dbus/v5/object.go b/vendor/github.com/godbus/dbus/v5/object.go
new file mode 100644
index 00000000000..664abb7fbab
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/object.go
@@ -0,0 +1,174 @@
+package dbus
+
+import (
+	"context"
+	"errors"
+	"strings"
+)
+
+// BusObject is the interface of a remote object on which methods can be
+// invoked.
+type BusObject interface {
+	Call(method string, flags Flags, args ...interface{}) *Call
+	CallWithContext(ctx context.Context, method string, flags Flags, args ...interface{}) *Call
+	Go(method string, flags Flags, ch chan *Call, args ...interface{}) *Call
+	GoWithContext(ctx context.Context, method string, flags Flags, ch chan *Call, args ...interface{}) *Call
+	AddMatchSignal(iface, member string, options ...MatchOption) *Call
+	RemoveMatchSignal(iface, member string, options ...MatchOption) *Call
+	GetProperty(p string) (Variant, error)
+	StoreProperty(p string, value interface{}) error
+	SetProperty(p string, v interface{}) error
+	Destination() string
+	Path() ObjectPath
+}
+
+// Object represents a remote object on which methods can be invoked.
+type Object struct {
+	conn *Conn
+	dest string
+	path ObjectPath
+}
+
+// Call calls a method with (*Object).Go and waits for its reply.
+func (o *Object) Call(method string, flags Flags, args ...interface{}) *Call {
+	return <-o.createCall(context.Background(), method, flags, make(chan *Call, 1), args...).Done
+}
+
+// CallWithContext acts like Call but takes a context
+func (o *Object) CallWithContext(ctx context.Context, method string, flags Flags, args ...interface{}) *Call {
+	return <-o.createCall(ctx, method, flags, make(chan *Call, 1), args...).Done
+}
+
+// AddMatchSignal subscribes BusObject to signals from specified interface,
+// method (member). Additional filter rules can be added via WithMatch* option constructors.
+// Note: To filter events by object path you have to specify this path via an option.
+//
+// Deprecated: use (*Conn) AddMatchSignal instead.
+func (o *Object) AddMatchSignal(iface, member string, options ...MatchOption) *Call {
+	base := []MatchOption{
+		withMatchType("signal"),
+		WithMatchInterface(iface),
+		WithMatchMember(member),
+	}
+
+	options = append(base, options...)
+	return o.conn.BusObject().Call(
+		"org.freedesktop.DBus.AddMatch",
+		0,
+		formatMatchOptions(options),
+	)
+}
+
+// RemoveMatchSignal unsubscribes BusObject from signals from specified interface,
+// method (member). Additional filter rules can be added via WithMatch* option constructors
+//
+// Deprecated: use (*Conn) RemoveMatchSignal instead.
+func (o *Object) RemoveMatchSignal(iface, member string, options ...MatchOption) *Call {
+	base := []MatchOption{
+		withMatchType("signal"),
+		WithMatchInterface(iface),
+		WithMatchMember(member),
+	}
+
+	options = append(base, options...)
+	return o.conn.BusObject().Call(
+		"org.freedesktop.DBus.RemoveMatch",
+		0,
+		formatMatchOptions(options),
+	)
+}
+
+// Go calls a method with the given arguments asynchronously. It returns a
+// Call structure representing this method call. The passed channel will
+// return the same value once the call is done. If ch is nil, a new channel
+// will be allocated. Otherwise, ch has to be buffered or Go will panic.
+//
+// If the flags include FlagNoReplyExpected, ch is ignored and a Call structure
+// is returned with any error in Err and a closed channel in Done containing
+// the returned Call as it's one entry.
+//
+// If the method parameter contains a dot ('.'), the part before the last dot
+// specifies the interface on which the method is called.
+func (o *Object) Go(method string, flags Flags, ch chan *Call, args ...interface{}) *Call {
+	return o.createCall(context.Background(), method, flags, ch, args...)
+}
+
+// GoWithContext acts like Go but takes a context
+func (o *Object) GoWithContext(ctx context.Context, method string, flags Flags, ch chan *Call, args ...interface{}) *Call {
+	return o.createCall(ctx, method, flags, ch, args...)
+}
+
+func (o *Object) createCall(ctx context.Context, method string, flags Flags, ch chan *Call, args ...interface{}) *Call {
+	if ctx == nil {
+		panic("nil context")
+	}
+	iface := ""
+	i := strings.LastIndex(method, ".")
+	if i != -1 {
+		iface = method[:i]
+	}
+	method = method[i+1:]
+	msg := new(Message)
+	msg.Type = TypeMethodCall
+	msg.Flags = flags & (FlagNoAutoStart | FlagNoReplyExpected)
+	msg.Headers = make(map[HeaderField]Variant)
+	msg.Headers[FieldPath] = MakeVariant(o.path)
+	msg.Headers[FieldDestination] = MakeVariant(o.dest)
+	msg.Headers[FieldMember] = MakeVariant(method)
+	if iface != "" {
+		msg.Headers[FieldInterface] = MakeVariant(iface)
+	}
+	msg.Body = args
+	if len(args) > 0 {
+		msg.Headers[FieldSignature] = MakeVariant(SignatureOf(args...))
+	}
+	return o.conn.SendWithContext(ctx, msg, ch)
+}
+
+// GetProperty calls org.freedesktop.DBus.Properties.Get on the given
+// object. The property name must be given in interface.member notation.
+func (o *Object) GetProperty(p string) (Variant, error) {
+	var result Variant
+	err := o.StoreProperty(p, &result)
+	return result, err
+}
+
+// StoreProperty calls org.freedesktop.DBus.Properties.Get on the given
+// object. The property name must be given in interface.member notation.
+// It stores the returned property into the provided value.
+func (o *Object) StoreProperty(p string, value interface{}) error {
+	idx := strings.LastIndex(p, ".")
+	if idx == -1 || idx+1 == len(p) {
+		return errors.New("dbus: invalid property " + p)
+	}
+
+	iface := p[:idx]
+	prop := p[idx+1:]
+
+	return o.Call("org.freedesktop.DBus.Properties.Get", 0, iface, prop).
+		Store(value)
+}
+
+// SetProperty calls org.freedesktop.DBus.Properties.Set on the given
+// object. The property name must be given in interface.member notation.
+func (o *Object) SetProperty(p string, v interface{}) error {
+	idx := strings.LastIndex(p, ".")
+	if idx == -1 || idx+1 == len(p) {
+		return errors.New("dbus: invalid property " + p)
+	}
+
+	iface := p[:idx]
+	prop := p[idx+1:]
+
+	return o.Call("org.freedesktop.DBus.Properties.Set", 0, iface, prop, v).Err
+}
+
+// Destination returns the destination that calls on (o *Object) are sent to.
+func (o *Object) Destination() string {
+	return o.dest
+}
+
+// Path returns the path that calls on (o *Object") are sent to.
+func (o *Object) Path() ObjectPath {
+	return o.path
+}
diff --git a/vendor/github.com/godbus/dbus/v5/sequence.go b/vendor/github.com/godbus/dbus/v5/sequence.go
new file mode 100644
index 00000000000..89435d3933b
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/sequence.go
@@ -0,0 +1,24 @@
+package dbus
+
+// Sequence represents the value of a monotonically increasing counter.
+type Sequence uint64
+
+const (
+	// NoSequence indicates the absence of a sequence value.
+	NoSequence Sequence = 0
+)
+
+// sequenceGenerator represents a monotonically increasing counter.
+type sequenceGenerator struct {
+	nextSequence Sequence
+}
+
+func (generator *sequenceGenerator) next() Sequence {
+	result := generator.nextSequence
+	generator.nextSequence++
+	return result
+}
+
+func newSequenceGenerator() *sequenceGenerator {
+	return &sequenceGenerator{nextSequence: 1}
+}
diff --git a/vendor/github.com/godbus/dbus/v5/sequential_handler.go b/vendor/github.com/godbus/dbus/v5/sequential_handler.go
new file mode 100644
index 00000000000..ef2fcdba179
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/sequential_handler.go
@@ -0,0 +1,125 @@
+package dbus
+
+import (
+	"sync"
+)
+
+// NewSequentialSignalHandler returns an instance of a new
+// signal handler that guarantees sequential processing of signals. It is a
+// guarantee of this signal handler that signals will be written to
+// channels in the order they are received on the DBus connection.
+func NewSequentialSignalHandler() SignalHandler {
+	return &sequentialSignalHandler{}
+}
+
+type sequentialSignalHandler struct {
+	mu      sync.RWMutex
+	closed  bool
+	signals []*sequentialSignalChannelData
+}
+
+func (sh *sequentialSignalHandler) DeliverSignal(intf, name string, signal *Signal) {
+	sh.mu.RLock()
+	defer sh.mu.RUnlock()
+	if sh.closed {
+		return
+	}
+	for _, scd := range sh.signals {
+		scd.deliver(signal)
+	}
+}
+
+func (sh *sequentialSignalHandler) Terminate() {
+	sh.mu.Lock()
+	defer sh.mu.Unlock()
+	if sh.closed {
+		return
+	}
+
+	for _, scd := range sh.signals {
+		scd.close()
+		close(scd.ch)
+	}
+	sh.closed = true
+	sh.signals = nil
+}
+
+func (sh *sequentialSignalHandler) AddSignal(ch chan<- *Signal) {
+	sh.mu.Lock()
+	defer sh.mu.Unlock()
+	if sh.closed {
+		return
+	}
+	sh.signals = append(sh.signals, newSequentialSignalChannelData(ch))
+}
+
+func (sh *sequentialSignalHandler) RemoveSignal(ch chan<- *Signal) {
+	sh.mu.Lock()
+	defer sh.mu.Unlock()
+	if sh.closed {
+		return
+	}
+	for i := len(sh.signals) - 1; i >= 0; i-- {
+		if ch == sh.signals[i].ch {
+			sh.signals[i].close()
+			copy(sh.signals[i:], sh.signals[i+1:])
+			sh.signals[len(sh.signals)-1] = nil
+			sh.signals = sh.signals[:len(sh.signals)-1]
+		}
+	}
+}
+
+type sequentialSignalChannelData struct {
+	ch   chan<- *Signal
+	in   chan *Signal
+	done chan struct{}
+}
+
+func newSequentialSignalChannelData(ch chan<- *Signal) *sequentialSignalChannelData {
+	scd := &sequentialSignalChannelData{
+		ch:   ch,
+		in:   make(chan *Signal),
+		done: make(chan struct{}),
+	}
+	go scd.bufferSignals()
+	return scd
+}
+
+func (scd *sequentialSignalChannelData) bufferSignals() {
+	defer close(scd.done)
+
+	// Ensure that signals are delivered to scd.ch in the same
+	// order they are received from scd.in.
+	var queue []*Signal
+	for {
+		if len(queue) == 0 {
+			signal, ok := <- scd.in
+			if !ok {
+				return
+			}
+			queue = append(queue, signal)
+		}
+		select {
+		case scd.ch <- queue[0]:
+			copy(queue, queue[1:])
+			queue[len(queue)-1] = nil
+			queue = queue[:len(queue)-1]
+		case signal, ok := <-scd.in:
+			if !ok {
+				return
+			}
+			queue = append(queue, signal)
+		}
+	}
+}
+
+func (scd *sequentialSignalChannelData) deliver(signal *Signal) {
+	scd.in <- signal
+}
+
+func (scd *sequentialSignalChannelData) close() {
+	close(scd.in)
+	// Ensure that bufferSignals() has exited and won't attempt
+	// any future sends on scd.ch
+	<-scd.done
+}
diff --git a/vendor/github.com/godbus/dbus/v5/server_interfaces.go b/vendor/github.com/godbus/dbus/v5/server_interfaces.go
new file mode 100644
index 00000000000..79d97edf3ec
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/server_interfaces.go
@@ -0,0 +1,107 @@
+package dbus
+
+// Terminator allows a handler to implement a shutdown mechanism that
+// is called when the connection terminates.
+type Terminator interface {
+	Terminate()
+}
+
+// Handler is the representation of a D-Bus Application.
+//
+// The Handler must have a way to lookup objects given
+// an ObjectPath. The returned object must implement the
+// ServerObject interface.
+type Handler interface {
+	LookupObject(path ObjectPath) (ServerObject, bool)
+}
+
+// ServerObject is the representation of an D-Bus Object.
+//
+// Objects are registered at a path for a given Handler.
+// The Objects implement D-Bus interfaces. The semantics
+// of Interface lookup is up to the implementation of
+// the ServerObject. The ServerObject implementation may
+// choose to implement empty string as a valid interface
+// represeting all methods or not per the D-Bus specification.
+type ServerObject interface {
+	LookupInterface(name string) (Interface, bool)
+}
+
+// An Interface is the representation of a D-Bus Interface.
+//
+// Interfaces are a grouping of methods implemented by the Objects.
+// Interfaces are responsible for routing method calls.
+type Interface interface {
+	LookupMethod(name string) (Method, bool)
+}
+
+// A Method represents the exposed methods on D-Bus.
+type Method interface {
+	// Call requires that all arguments are decoded before being passed to it.
+	Call(args ...interface{}) ([]interface{}, error)
+	NumArguments() int
+	NumReturns() int
+	// ArgumentValue returns a representative value for the argument at position
+	// it should be of the proper type. reflect.Zero would be a good mechanism
+	// to use for this Value.
+	ArgumentValue(position int) interface{}
+	// ReturnValue returns a representative value for the return at position
+	// it should be of the proper type. reflect.Zero would be a good mechanism
+	// to use for this Value.
+	ReturnValue(position int) interface{}
+}
+
+// An Argument Decoder can decode arguments using the non-standard mechanism
+//
+// If a method implements this interface then the non-standard
+// decoder will be used.
+//
+// Method arguments must be decoded from the message.
+// The mechanism for doing this will vary based on the
+// implementation of the method. A normal approach is provided
+// as part of this library, but may be replaced with
+// any other decoding scheme.
+type ArgumentDecoder interface {
+	// To decode the arguments of a method the sender and message are
+	// provided incase the semantics of the implementer provides access
+	// to these as part of the method invocation.
+	DecodeArguments(conn *Conn, sender string, msg *Message, args []interface{}) ([]interface{}, error)
+}
+
+// A SignalHandler is responsible for delivering a signal.
+//
+// Signal delivery may be changed from the default channel
+// based approach by Handlers implementing the SignalHandler
+// interface.
+type SignalHandler interface {
+	DeliverSignal(iface, name string, signal *Signal)
+}
+
+// SignalRegistrar manages signal delivery channels.
+//
+// This is an optional set of methods for `SignalHandler`.
+type SignalRegistrar interface {
+	AddSignal(ch chan<- *Signal)
+	RemoveSignal(ch chan<- *Signal)
+}
+
+// A DBusError is used to convert a generic object to a D-Bus error.
+//
+// Any custom error mechanism may implement this interface to provide
+// a custom encoding of the error on D-Bus. By default if a normal
+// error is returned, it will be encoded as the generic
+// "org.freedesktop.DBus.Error.Failed" error. By implementing this
+// interface as well a custom encoding may be provided.
+type DBusError interface {
+	DBusError() (string, []interface{})
+}
+
+// SerialGenerator is responsible for serials generation.
+//
+// Different approaches for the serial generation can be used,
+// maintaining a map guarded with a mutex (the standard way) or
+// simply increment an atomic counter.
+type SerialGenerator interface {
+	GetSerial() uint32
+	RetireSerial(serial uint32)
+}
diff --git a/vendor/github.com/godbus/dbus/v5/sig.go b/vendor/github.com/godbus/dbus/v5/sig.go
new file mode 100644
index 00000000000..2d326cebc0d
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/sig.go
@@ -0,0 +1,259 @@
+package dbus
+
+import (
+	"fmt"
+	"reflect"
+	"strings"
+)
+
+var sigToType = map[byte]reflect.Type{
+	'y': byteType,
+	'b': boolType,
+	'n': int16Type,
+	'q': uint16Type,
+	'i': int32Type,
+	'u': uint32Type,
+	'x': int64Type,
+	't': uint64Type,
+	'd': float64Type,
+	's': stringType,
+	'g': signatureType,
+	'o': objectPathType,
+	'v': variantType,
+	'h': unixFDIndexType,
+}
+
+// Signature represents a correct type signature as specified by the D-Bus
+// specification. The zero value represents the empty signature, "".
+type Signature struct {
+	str string
+}
+
+// SignatureOf returns the concatenation of all the signatures of the given
+// values. It panics if one of them is not representable in D-Bus.
+func SignatureOf(vs ...interface{}) Signature {
+	var s string
+	for _, v := range vs {
+		s += getSignature(reflect.TypeOf(v))
+	}
+	return Signature{s}
+}
+
+// SignatureOfType returns the signature of the given type. It panics if the
+// type is not representable in D-Bus.
+func SignatureOfType(t reflect.Type) Signature {
+	return Signature{getSignature(t)}
+}
+
+// getSignature returns the signature of the given type and panics on unknown types.
+func getSignature(t reflect.Type) string {
+	// handle simple types first
+	switch t.Kind() {
+	case reflect.Uint8:
+		return "y"
+	case reflect.Bool:
+		return "b"
+	case reflect.Int16:
+		return "n"
+	case reflect.Uint16:
+		return "q"
+	case reflect.Int, reflect.Int32:
+		if t == unixFDType {
+			return "h"
+		}
+		return "i"
+	case reflect.Uint, reflect.Uint32:
+		if t == unixFDIndexType {
+			return "h"
+		}
+		return "u"
+	case reflect.Int64:
+		return "x"
+	case reflect.Uint64:
+		return "t"
+	case reflect.Float64:
+		return "d"
+	case reflect.Ptr:
+		return getSignature(t.Elem())
+	case reflect.String:
+		if t == objectPathType {
+			return "o"
+		}
+		return "s"
+	case reflect.Struct:
+		if t == variantType {
+			return "v"
+		} else if t == signatureType {
+			return "g"
+		}
+		var s string
+		for i := 0; i < t.NumField(); i++ {
+			field := t.Field(i)
+			if field.PkgPath == "" && field.Tag.Get("dbus") != "-" {
+				s += getSignature(t.Field(i).Type)
+			}
+		}
+		return "(" + s + ")"
+	case reflect.Array, reflect.Slice:
+		return "a" + getSignature(t.Elem())
+	case reflect.Map:
+		if !isKeyType(t.Key()) {
+			panic(InvalidTypeError{t})
+		}
+		return "a{" + getSignature(t.Key()) + getSignature(t.Elem()) + "}"
+	case reflect.Interface:
+		return "v"
+	}
+	panic(InvalidTypeError{t})
+}
+
+// ParseSignature returns the signature represented by this string, or a
+// SignatureError if the string is not a valid signature.
+func ParseSignature(s string) (sig Signature, err error) {
+	if len(s) == 0 {
+		return
+	}
+	if len(s) > 255 {
+		return Signature{""}, SignatureError{s, "too long"}
+	}
+	sig.str = s
+	for err == nil && len(s) != 0 {
+		err, s = validSingle(s, 0)
+	}
+	if err != nil {
+		sig = Signature{""}
+	}
+
+	return
+}
+
+// ParseSignatureMust behaves like ParseSignature, except that it panics if s
+// is not valid.
+func ParseSignatureMust(s string) Signature {
+	sig, err := ParseSignature(s)
+	if err != nil {
+		panic(err)
+	}
+	return sig
+}
+
+// Empty returns whether the signature is the empty signature.
+func (s Signature) Empty() bool {
+	return s.str == ""
+}
+
+// Single returns whether the signature represents a single, complete type.
+func (s Signature) Single() bool {
+	err, r := validSingle(s.str, 0)
+	return err != nil && r == ""
+}
+
+// String returns the signature's string representation.
+func (s Signature) String() string {
+	return s.str
+}
+
+// A SignatureError indicates that a signature passed to a function or received
+// on a connection is not a valid signature.
+type SignatureError struct {
+	Sig    string
+	Reason string
+}
+
+func (e SignatureError) Error() string {
+	return fmt.Sprintf("dbus: invalid signature: %q (%s)", e.Sig, e.Reason)
+}
+
+// Try to read a single type from this string. If it was successful, err is nil
+// and rem is the remaining unparsed part. Otherwise, err is a non-nil
+// SignatureError and rem is "". depth is the current recursion depth which may
+// not be greater than 64 and should be given as 0 on the first call.
+func validSingle(s string, depth int) (err error, rem string) {
+	if s == "" {
+		return SignatureError{Sig: s, Reason: "empty signature"}, ""
+	}
+	if depth > 64 {
+		return SignatureError{Sig: s, Reason: "container nesting too deep"}, ""
+	}
+	switch s[0] {
+	case 'y', 'b', 'n', 'q', 'i', 'u', 'x', 't', 'd', 's', 'g', 'o', 'v', 'h':
+		return nil, s[1:]
+	case 'a':
+		if len(s) > 1 && s[1] == '{' {
+			i := findMatching(s[1:], '{', '}')
+			if i == -1 {
+				return SignatureError{Sig: s, Reason: "unmatched '{'"}, ""
+			}
+			i++
+			rem = s[i+1:]
+			s = s[2:i]
+			if err, _ = validSingle(s[:1], depth+1); err != nil {
+				return err, ""
+			}
+			err, nr := validSingle(s[1:], depth+1)
+			if err != nil {
+				return err, ""
+			}
+			if nr != "" {
+				return SignatureError{Sig: s, Reason: "too many types in dict"}, ""
+			}
+			return nil, rem
+		}
+		return validSingle(s[1:], depth+1)
+	case '(':
+		i := findMatching(s, '(', ')')
+		if i == -1 {
+			return SignatureError{Sig: s, Reason: "unmatched ')'"}, ""
+		}
+		rem = s[i+1:]
+		s = s[1:i]
+		for err == nil && s != "" {
+			err, s = validSingle(s, depth+1)
+		}
+		if err != nil {
+			rem = ""
+		}
+		return
+	}
+	return SignatureError{Sig: s, Reason: "invalid type character"}, ""
+}
+
+func findMatching(s string, left, right rune) int {
+	n := 0
+	for i, v := range s {
+		if v == left {
+			n++
+		} else if v == right {
+			n--
+		}
+		if n == 0 {
+			return i
+		}
+	}
+	return -1
+}
+
+// typeFor returns the type of the given signature. It ignores any left over
+// characters and panics if s doesn't start with a valid type signature.
+func typeFor(s string) (t reflect.Type) {
+	err, _ := validSingle(s, 0)
+	if err != nil {
+		panic(err)
+	}
+
+	if t, ok := sigToType[s[0]]; ok {
+		return t
+	}
+	switch s[0] {
+	case 'a':
+		if s[1] == '{' {
+			i := strings.LastIndex(s, "}")
+			t = reflect.MapOf(sigToType[s[2]], typeFor(s[3:i]))
+		} else {
+			t = reflect.SliceOf(typeFor(s[1:]))
+		}
+	case '(':
+		t = interfacesType
+	}
+	return
+}
diff --git a/vendor/github.com/godbus/dbus/v5/transport_darwin.go b/vendor/github.com/godbus/dbus/v5/transport_darwin.go
new file mode 100644
index 00000000000..1bba0d6bf78
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/transport_darwin.go
@@ -0,0 +1,6 @@
+package dbus
+
+func (t *unixTransport) SendNullByte() error {
+	_, err := t.Write([]byte{0})
+	return err
+}
diff --git a/vendor/github.com/godbus/dbus/v5/transport_generic.go b/vendor/github.com/godbus/dbus/v5/transport_generic.go
new file mode 100644
index 00000000000..718a1ff0219
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/transport_generic.go
@@ -0,0 +1,50 @@
+package dbus
+
+import (
+	"encoding/binary"
+	"errors"
+	"io"
+	"unsafe"
+)
+
+var nativeEndian binary.ByteOrder
+
+func detectEndianness() binary.ByteOrder {
+	var x uint32 = 0x01020304
+	if *(*byte)(unsafe.Pointer(&x)) == 0x01 {
+		return binary.BigEndian
+	}
+	return binary.LittleEndian
+}
+
+func init() {
+	nativeEndian = detectEndianness()
+}
+
+type genericTransport struct {
+	io.ReadWriteCloser
+}
+
+func (t genericTransport) SendNullByte() error {
+	_, err := t.Write([]byte{0})
+	return err
+}
+
+func (t genericTransport) SupportsUnixFDs() bool {
+	return false
+}
+
+func (t genericTransport) EnableUnixFDs() {}
+
+func (t genericTransport) ReadMessage() (*Message, error) {
+	return DecodeMessage(t)
+}
+
+func (t genericTransport) SendMessage(msg *Message) error {
+	for _, v := range msg.Body {
+		if _, ok := v.(UnixFD); ok {
+			return errors.New("dbus: unix fd passing not enabled")
+		}
+	}
+	return msg.EncodeTo(t, nativeEndian)
+}
diff --git a/vendor/github.com/godbus/dbus/v5/transport_nonce_tcp.go b/vendor/github.com/godbus/dbus/v5/transport_nonce_tcp.go
new file mode 100644
index 00000000000..697739efafb
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/transport_nonce_tcp.go
@@ -0,0 +1,39 @@
+//+build !windows
+
+package dbus
+
+import (
+	"errors"
+	"io/ioutil"
+	"net"
+)
+
+func init() {
+	transports["nonce-tcp"] = newNonceTcpTransport
+}
+
+func newNonceTcpTransport(keys string) (transport, error) {
+	host := getKey(keys, "host")
+	port := getKey(keys, "port")
+	noncefile := getKey(keys, "noncefile")
+	if host == "" || port == "" || noncefile == "" {
+		return nil, errors.New("dbus: unsupported address (must set host, port and noncefile)")
+	}
+	protocol, err := tcpFamily(keys)
+	if err != nil {
+		return nil, err
+	}
+	socket, err := net.Dial(protocol, net.JoinHostPort(host, port))
+	if err != nil {
+		return nil, err
+	}
+	b, err := ioutil.ReadFile(noncefile)
+	if err != nil {
+		return nil, err
+	}
+	_, err = socket.Write(b)
+	if err != nil {
+		return nil, err
+	}
+	return NewConn(socket)
+}
diff --git a/vendor/github.com/godbus/dbus/v5/transport_tcp.go b/vendor/github.com/godbus/dbus/v5/transport_tcp.go
new file mode 100644
index 00000000000..f91c9b7d709
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/transport_tcp.go
@@ -0,0 +1,41 @@
+package dbus
+
+import (
+	"errors"
+	"net"
+)
+
+func init() {
+	transports["tcp"] = newTcpTransport
+}
+
+func tcpFamily(keys string) (string, error) {
+	switch getKey(keys, "family") {
+	case "":
+		return "tcp", nil
+	case "ipv4":
+		return "tcp4", nil
+	case "ipv6":
+		return "tcp6", nil
+	default:
+		return "", errors.New("dbus: invalid tcp family (must be ipv4 or ipv6)")
+	}
+}
+
+func newTcpTransport(keys string) (transport, error) {
+	host := getKey(keys, "host")
+	port := getKey(keys, "port")
+	if host == "" || port == "" {
+		return nil, errors.New("dbus: unsupported address (must set host and port)")
+	}
+
+	protocol, err := tcpFamily(keys)
+	if err != nil {
+		return nil, err
+	}
+	socket, err := net.Dial(protocol, net.JoinHostPort(host, port))
+	if err != nil {
+		return nil, err
+	}
+	return NewConn(socket)
+}
diff --git a/vendor/github.com/godbus/dbus/v5/transport_unix.go b/vendor/github.com/godbus/dbus/v5/transport_unix.go
new file mode 100644
index 00000000000..c7cd02f97fd
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/transport_unix.go
@@ -0,0 +1,214 @@
+//+build !windows,!solaris
+
+package dbus
+
+import (
+	"bytes"
+	"encoding/binary"
+	"errors"
+	"io"
+	"net"
+	"syscall"
+)
+
+type oobReader struct {
+	conn *net.UnixConn
+	oob  []byte
+	buf  [4096]byte
+}
+
+func (o *oobReader) Read(b []byte) (n int, err error) {
+	n, oobn, flags, _, err := o.conn.ReadMsgUnix(b, o.buf[:])
+	if err != nil {
+		return n, err
+	}
+	if flags&syscall.MSG_CTRUNC != 0 {
+		return n, errors.New("dbus: control data truncated (too many fds received)")
+	}
+	o.oob = append(o.oob, o.buf[:oobn]...)
+	return n, nil
+}
+
+type unixTransport struct {
+	*net.UnixConn
+	rdr        *oobReader
+	hasUnixFDs bool
+}
+
+func newUnixTransport(keys string) (transport, error) {
+	var err error
+
+	t := new(unixTransport)
+	abstract := getKey(keys, "abstract")
+	path := getKey(keys, "path")
+	switch {
+	case abstract == "" && path == "":
+		return nil, errors.New("dbus: invalid address (neither path nor abstract set)")
+	case abstract != "" && path == "":
+		t.UnixConn, err = net.DialUnix("unix", nil, &net.UnixAddr{Name: "@" + abstract, Net: "unix"})
+		if err != nil {
+			return nil, err
+		}
+		return t, nil
+	case abstract == "" && path != "":
+		t.UnixConn, err = net.DialUnix("unix", nil, &net.UnixAddr{Name: path, Net: "unix"})
+		if err != nil {
+			return nil, err
+		}
+		return t, nil
+	default:
+		return nil, errors.New("dbus: invalid address (both path and abstract set)")
+	}
+}
+
+func init() {
+	transports["unix"] = newUnixTransport
+}
+
+func (t *unixTransport) EnableUnixFDs() {
+	t.hasUnixFDs = true
+}
+
+func (t *unixTransport) ReadMessage() (*Message, error) {
+	var (
+		blen, hlen uint32
+		csheader   [16]byte
+		headers    []header
+		order      binary.ByteOrder
+		unixfds    uint32
+	)
+	// To be sure that all bytes of out-of-band data are read, we use a special
+	// reader that uses ReadUnix on the underlying connection instead of Read
+	// and gathers the out-of-band data in a buffer.
+	if t.rdr == nil {
+		t.rdr = &oobReader{conn: t.UnixConn}
+	} else {
+		t.rdr.oob = nil
+	}
+
+	// read the first 16 bytes (the part of the header that has a constant size),
+	// from which we can figure out the length of the rest of the message
+	if _, err := io.ReadFull(t.rdr, csheader[:]); err != nil {
+		return nil, err
+	}
+	switch csheader[0] {
+	case 'l':
+		order = binary.LittleEndian
+	case 'B':
+		order = binary.BigEndian
+	default:
+		return nil, InvalidMessageError("invalid byte order")
+	}
+	// csheader[4:8] -> length of message body, csheader[12:16] -> length of
+	// header fields (without alignment)
+	binary.Read(bytes.NewBuffer(csheader[4:8]), order, &blen)
+	binary.Read(bytes.NewBuffer(csheader[12:]), order, &hlen)
+	if hlen%8 != 0 {
+		hlen += 8 - (hlen % 8)
+	}
+
+	// decode headers and look for unix fds
+	headerdata := make([]byte, hlen+4)
+	copy(headerdata, csheader[12:])
+	if _, err := io.ReadFull(t.rdr, headerdata[4:]); err != nil {
+		return nil, err
+	}
+	dec := newDecoder(bytes.NewBuffer(headerdata), order)
+	dec.pos = 12
+	vs, err := dec.Decode(Signature{"a(yv)"})
+	if err != nil {
+		return nil, err
+	}
+	Store(vs, &headers)
+	for _, v := range headers {
+		if v.Field == byte(FieldUnixFDs) {
+			unixfds, _ = v.Variant.value.(uint32)
+		}
+	}
+	all := make([]byte, 16+hlen+blen)
+	copy(all, csheader[:])
+	copy(all[16:], headerdata[4:])
+	if _, err := io.ReadFull(t.rdr, all[16+hlen:]); err != nil {
+		return nil, err
+	}
+	if unixfds != 0 {
+		if !t.hasUnixFDs {
+			return nil, errors.New("dbus: got unix fds on unsupported transport")
+		}
+		// read the fds from the OOB data
+		scms, err := syscall.ParseSocketControlMessage(t.rdr.oob)
+		if err != nil {
+			return nil, err
+		}
+		if len(scms) != 1 {
+			return nil, errors.New("dbus: received more than one socket control message")
+		}
+		fds, err := syscall.ParseUnixRights(&scms[0])
+		if err != nil {
+			return nil, err
+		}
+		msg, err := DecodeMessage(bytes.NewBuffer(all))
+		if err != nil {
+			return nil, err
+		}
+		// substitute the values in the message body (which are indices for the
+		// array receiver via OOB) with the actual values
+		for i, v := range msg.Body {
+			switch v.(type) {
+			case UnixFDIndex:
+				j := v.(UnixFDIndex)
+				if uint32(j) >= unixfds {
+					return nil, InvalidMessageError("invalid index for unix fd")
+				}
+				msg.Body[i] = UnixFD(fds[j])
+			case []UnixFDIndex:
+				idxArray := v.([]UnixFDIndex)
+				fdArray := make([]UnixFD, len(idxArray))
+				for k, j := range idxArray {
+					if uint32(j) >= unixfds {
+						return nil, InvalidMessageError("invalid index for unix fd")
+					}
+					fdArray[k] = UnixFD(fds[j])
+				}
+				msg.Body[i] = fdArray
+			}
+		}
+		return msg, nil
+	}
+	return DecodeMessage(bytes.NewBuffer(all))
+}
+
+func (t *unixTransport) SendMessage(msg *Message) error {
+	fds := make([]int, 0)
+	for i, v := range msg.Body {
+		if fd, ok := v.(UnixFD); ok {
+			msg.Body[i] = UnixFDIndex(len(fds))
+			fds = append(fds, int(fd))
+		}
+	}
+	if len(fds) != 0 {
+		if !t.hasUnixFDs {
+			return errors.New("dbus: unix fd passing not enabled")
+		}
+		msg.Headers[FieldUnixFDs] = MakeVariant(uint32(len(fds)))
+		oob := syscall.UnixRights(fds...)
+		buf := new(bytes.Buffer)
+		msg.EncodeTo(buf, nativeEndian)
+		n, oobn, err := t.UnixConn.WriteMsgUnix(buf.Bytes(), oob, nil)
+		if err != nil {
+			return err
+		}
+		if n != buf.Len() || oobn != len(oob) {
+			return io.ErrShortWrite
+		}
+	} else {
+		if err := msg.EncodeTo(t, nativeEndian); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func (t *unixTransport) SupportsUnixFDs() bool {
+	return true
+}
diff --git a/vendor/github.com/godbus/dbus/v5/transport_unixcred_dragonfly.go b/vendor/github.com/godbus/dbus/v5/transport_unixcred_dragonfly.go
new file mode 100644
index 00000000000..a8cd39395f0
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/transport_unixcred_dragonfly.go
@@ -0,0 +1,95 @@
+// The UnixCredentials system call is currently only implemented on Linux
+// http://golang.org/src/pkg/syscall/sockcmsg_linux.go
+// https://golang.org/s/go1.4-syscall
+// http://code.google.com/p/go/source/browse/unix/sockcmsg_linux.go?repo=sys
+
+// Local implementation of the UnixCredentials system call for DragonFly BSD
+
+package dbus
+
+/*
+#include <sys/ucred.h>
+*/
+import "C"
+
+import (
+	"io"
+	"os"
+	"syscall"
+	"unsafe"
+)
+
+// http://golang.org/src/pkg/syscall/ztypes_linux_amd64.go
+// http://golang.org/src/pkg/syscall/ztypes_dragonfly_amd64.go
+type Ucred struct {
+	Pid int32
+	Uid uint32
+	Gid uint32
+}
+
+// http://golang.org/src/pkg/syscall/types_linux.go
+// http://golang.org/src/pkg/syscall/types_dragonfly.go
+// https://github.com/DragonFlyBSD/DragonFlyBSD/blob/master/sys/sys/ucred.h
+const (
+	SizeofUcred = C.sizeof_struct_ucred
+)
+
+// http://golang.org/src/pkg/syscall/sockcmsg_unix.go
+func cmsgAlignOf(salen int) int {
+	// From http://golang.org/src/pkg/syscall/sockcmsg_unix.go
+	//salign := sizeofPtr
+	// NOTE: It seems like 64-bit Darwin and DragonFly BSD kernels
+	// still require 32-bit aligned access to network subsystem.
+	//if darwin64Bit || dragonfly64Bit {
+	//	salign = 4
+	//}
+	salign := 4
+	return (salen + salign - 1) & ^(salign - 1)
+}
+
+// http://golang.org/src/pkg/syscall/sockcmsg_unix.go
+func cmsgData(h *syscall.Cmsghdr) unsafe.Pointer {
+	return unsafe.Pointer(uintptr(unsafe.Pointer(h)) + uintptr(cmsgAlignOf(syscall.SizeofCmsghdr)))
+}
+
+// http://golang.org/src/pkg/syscall/sockcmsg_linux.go
+// UnixCredentials encodes credentials into a socket control message
+// for sending to another process. This can be used for
+// authentication.
+func UnixCredentials(ucred *Ucred) []byte {
+	b := make([]byte, syscall.CmsgSpace(SizeofUcred))
+	h := (*syscall.Cmsghdr)(unsafe.Pointer(&b[0]))
+	h.Level = syscall.SOL_SOCKET
+	h.Type = syscall.SCM_CREDS
+	h.SetLen(syscall.CmsgLen(SizeofUcred))
+	*((*Ucred)(cmsgData(h))) = *ucred
+	return b
+}
+
+// http://golang.org/src/pkg/syscall/sockcmsg_linux.go
+// ParseUnixCredentials decodes a socket control message that contains
+// credentials in a Ucred structure. To receive such a message, the
+// SO_PASSCRED option must be enabled on the socket.
+func ParseUnixCredentials(m *syscall.SocketControlMessage) (*Ucred, error) {
+	if m.Header.Level != syscall.SOL_SOCKET {
+		return nil, syscall.EINVAL
+	}
+	if m.Header.Type != syscall.SCM_CREDS {
+		return nil, syscall.EINVAL
+	}
+	ucred := *(*Ucred)(unsafe.Pointer(&m.Data[0]))
+	return &ucred, nil
+}
+
+func (t *unixTransport) SendNullByte() error {
+	ucred := &Ucred{Pid: int32(os.Getpid()), Uid: uint32(os.Getuid()), Gid: uint32(os.Getgid())}
+	b := UnixCredentials(ucred)
+	_, oobn, err := t.UnixConn.WriteMsgUnix([]byte{0}, b, nil)
+	if err != nil {
+		return err
+	}
+	if oobn != len(b) {
+		return io.ErrShortWrite
+	}
+	return nil
+}
diff --git a/vendor/github.com/godbus/dbus/v5/transport_unixcred_freebsd.go b/vendor/github.com/godbus/dbus/v5/transport_unixcred_freebsd.go
new file mode 100644
index 00000000000..1b5ed2089d0
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/transport_unixcred_freebsd.go
@@ -0,0 +1,92 @@
+// The UnixCredentials system call is currently only implemented on Linux
+// http://golang.org/src/pkg/syscall/sockcmsg_linux.go
+// https://golang.org/s/go1.4-syscall
+// http://code.google.com/p/go/source/browse/unix/sockcmsg_linux.go?repo=sys
+
+// Local implementation of the UnixCredentials system call for FreeBSD
+
+package dbus
+
+/*
+const int sizeofPtr = sizeof(void*);
+#define _WANT_UCRED
+#include <sys/types.h>
+#include <sys/ucred.h>
+*/
+import "C"
+
+import (
+	"io"
+	"os"
+	"syscall"
+	"unsafe"
+)
+
+// http://golang.org/src/pkg/syscall/ztypes_linux_amd64.go
+// https://golang.org/src/syscall/ztypes_freebsd_amd64.go
+type Ucred struct {
+	Pid int32
+	Uid uint32
+	Gid uint32
+}
+
+// http://golang.org/src/pkg/syscall/types_linux.go
+// https://golang.org/src/syscall/types_freebsd.go
+// https://github.com/freebsd/freebsd/blob/master/sys/sys/ucred.h
+const (
+	SizeofUcred = C.sizeof_struct_ucred
+)
+
+// http://golang.org/src/pkg/syscall/sockcmsg_unix.go
+func cmsgAlignOf(salen int) int {
+	salign := C.sizeofPtr
+
+	return (salen + salign - 1) & ^(salign - 1)
+}
+
+// http://golang.org/src/pkg/syscall/sockcmsg_unix.go
+func cmsgData(h *syscall.Cmsghdr) unsafe.Pointer {
+	return unsafe.Pointer(uintptr(unsafe.Pointer(h)) + uintptr(cmsgAlignOf(syscall.SizeofCmsghdr)))
+}
+
+// http://golang.org/src/pkg/syscall/sockcmsg_linux.go
+// UnixCredentials encodes credentials into a socket control message
+// for sending to another process. This can be used for
+// authentication.
+func UnixCredentials(ucred *Ucred) []byte {
+	b := make([]byte, syscall.CmsgSpace(SizeofUcred))
+	h := (*syscall.Cmsghdr)(unsafe.Pointer(&b[0]))
+	h.Level = syscall.SOL_SOCKET
+	h.Type = syscall.SCM_CREDS
+	h.SetLen(syscall.CmsgLen(SizeofUcred))
+	*((*Ucred)(cmsgData(h))) = *ucred
+	return b
+}
+
+// http://golang.org/src/pkg/syscall/sockcmsg_linux.go
+// ParseUnixCredentials decodes a socket control message that contains
+// credentials in a Ucred structure. To receive such a message, the
+// SO_PASSCRED option must be enabled on the socket.
+func ParseUnixCredentials(m *syscall.SocketControlMessage) (*Ucred, error) {
+	if m.Header.Level != syscall.SOL_SOCKET {
+		return nil, syscall.EINVAL
+	}
+	if m.Header.Type != syscall.SCM_CREDS {
+		return nil, syscall.EINVAL
+	}
+	ucred := *(*Ucred)(unsafe.Pointer(&m.Data[0]))
+	return &ucred, nil
+}
+
+func (t *unixTransport) SendNullByte() error {
+	ucred := &Ucred{Pid: int32(os.Getpid()), Uid: uint32(os.Getuid()), Gid: uint32(os.Getgid())}
+	b := UnixCredentials(ucred)
+	_, oobn, err := t.UnixConn.WriteMsgUnix([]byte{0}, b, nil)
+	if err != nil {
+		return err
+	}
+	if oobn != len(b) {
+		return io.ErrShortWrite
+	}
+	return nil
+}
diff --git a/vendor/github.com/godbus/dbus/v5/transport_unixcred_linux.go b/vendor/github.com/godbus/dbus/v5/transport_unixcred_linux.go
new file mode 100644
index 00000000000..d9dfdf69821
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/transport_unixcred_linux.go
@@ -0,0 +1,25 @@
+// The UnixCredentials system call is currently only implemented on Linux
+// http://golang.org/src/pkg/syscall/sockcmsg_linux.go
+// https://golang.org/s/go1.4-syscall
+// http://code.google.com/p/go/source/browse/unix/sockcmsg_linux.go?repo=sys
+
+package dbus
+
+import (
+	"io"
+	"os"
+	"syscall"
+)
+
+func (t *unixTransport) SendNullByte() error {
+	ucred := &syscall.Ucred{Pid: int32(os.Getpid()), Uid: uint32(os.Getuid()), Gid: uint32(os.Getgid())}
+	b := syscall.UnixCredentials(ucred)
+	_, oobn, err := t.UnixConn.WriteMsgUnix([]byte{0}, b, nil)
+	if err != nil {
+		return err
+	}
+	if oobn != len(b) {
+		return io.ErrShortWrite
+	}
+	return nil
+}
diff --git a/vendor/github.com/godbus/dbus/v5/transport_unixcred_openbsd.go b/vendor/github.com/godbus/dbus/v5/transport_unixcred_openbsd.go
new file mode 100644
index 00000000000..af7bafdf953
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/transport_unixcred_openbsd.go
@@ -0,0 +1,14 @@
+package dbus
+
+import "io"
+
+func (t *unixTransport) SendNullByte() error {
+	n, _, err := t.UnixConn.WriteMsgUnix([]byte{0}, nil, nil)
+	if err != nil {
+		return err
+	}
+	if n != 1 {
+		return io.ErrShortWrite
+	}
+	return nil
+}
diff --git a/vendor/github.com/godbus/dbus/v5/variant.go b/vendor/github.com/godbus/dbus/v5/variant.go
new file mode 100644
index 00000000000..f1e81f3ede6
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/variant.go
@@ -0,0 +1,150 @@
+package dbus
+
+import (
+	"bytes"
+	"fmt"
+	"reflect"
+	"sort"
+	"strconv"
+)
+
+// Variant represents the D-Bus variant type.
+type Variant struct {
+	sig   Signature
+	value interface{}
+}
+
+// MakeVariant converts the given value to a Variant. It panics if v cannot be
+// represented as a D-Bus type.
+func MakeVariant(v interface{}) Variant {
+	return MakeVariantWithSignature(v, SignatureOf(v))
+}
+
+// MakeVariantWithSignature converts the given value to a Variant.
+func MakeVariantWithSignature(v interface{}, s Signature) Variant {
+	return Variant{s, v}
+}
+
+// ParseVariant parses the given string as a variant as described at
+// https://developer.gnome.org/glib/stable/gvariant-text.html. If sig is not
+// empty, it is taken to be the expected signature for the variant.
+func ParseVariant(s string, sig Signature) (Variant, error) {
+	tokens := varLex(s)
+	p := &varParser{tokens: tokens}
+	n, err := varMakeNode(p)
+	if err != nil {
+		return Variant{}, err
+	}
+	if sig.str == "" {
+		sig, err = varInfer(n)
+		if err != nil {
+			return Variant{}, err
+		}
+	}
+	v, err := n.Value(sig)
+	if err != nil {
+		return Variant{}, err
+	}
+	return MakeVariant(v), nil
+}
+
+// format returns a formatted version of v and whether this string can be parsed
+// unambigously.
+func (v Variant) format() (string, bool) {
+	switch v.sig.str[0] {
+	case 'b', 'i':
+		return fmt.Sprint(v.value), true
+	case 'n', 'q', 'u', 'x', 't', 'd', 'h':
+		return fmt.Sprint(v.value), false
+	case 's':
+		return strconv.Quote(v.value.(string)), true
+	case 'o':
+		return strconv.Quote(string(v.value.(ObjectPath))), false
+	case 'g':
+		return strconv.Quote(v.value.(Signature).str), false
+	case 'v':
+		s, unamb := v.value.(Variant).format()
+		if !unamb {
+			return "<@" + v.value.(Variant).sig.str + " " + s + ">", true
+		}
+		return "<" + s + ">", true
+	case 'y':
+		return fmt.Sprintf("%#x", v.value.(byte)), false
+	}
+	rv := reflect.ValueOf(v.value)
+	switch rv.Kind() {
+	case reflect.Slice:
+		if rv.Len() == 0 {
+			return "[]", false
+		}
+		unamb := true
+		buf := bytes.NewBuffer([]byte("["))
+		for i := 0; i < rv.Len(); i++ {
+			// TODO: slooow
+			s, b := MakeVariant(rv.Index(i).Interface()).format()
+			unamb = unamb && b
+			buf.WriteString(s)
+			if i != rv.Len()-1 {
+				buf.WriteString(", ")
+			}
+		}
+		buf.WriteByte(']')
+		return buf.String(), unamb
+	case reflect.Map:
+		if rv.Len() == 0 {
+			return "{}", false
+		}
+		unamb := true
+		var buf bytes.Buffer
+		kvs := make([]string, rv.Len())
+		for i, k := range rv.MapKeys() {
+			s, b := MakeVariant(k.Interface()).format()
+			unamb = unamb && b
+			buf.Reset()
+			buf.WriteString(s)
+			buf.WriteString(": ")
+			s, b = MakeVariant(rv.MapIndex(k).Interface()).format()
+			unamb = unamb && b
+			buf.WriteString(s)
+			kvs[i] = buf.String()
+		}
+		buf.Reset()
+		buf.WriteByte('{')
+		sort.Strings(kvs)
+		for i, kv := range kvs {
+			if i > 0 {
+				buf.WriteString(", ")
+			}
+			buf.WriteString(kv)
+		}
+		buf.WriteByte('}')
+		return buf.String(), unamb
+	}
+	return `"INVALID"`, true
+}
+
+// Signature returns the D-Bus signature of the underlying value of v.
+func (v Variant) Signature() Signature {
+	return v.sig
+}
+
+// String returns the string representation of the underlying value of v as
+// described at https://developer.gnome.org/glib/stable/gvariant-text.html.
+func (v Variant) String() string {
+	s, unamb := v.format()
+	if !unamb {
+		return "@" + v.sig.str + " " + s
+	}
+	return s
+}
+
+// Value returns the underlying value of v.
+func (v Variant) Value() interface{} {
+	return v.value
+}
+
+// Store converts the variant into a native go type using the same
+// mechanism as the "Store" function.
+func (v Variant) Store(value interface{}) error {
+	return storeInterfaces(v.value, value)
+}
diff --git a/vendor/github.com/godbus/dbus/v5/variant_lexer.go b/vendor/github.com/godbus/dbus/v5/variant_lexer.go
new file mode 100644
index 00000000000..bf1398c8f05
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/variant_lexer.go
@@ -0,0 +1,284 @@
+package dbus
+
+import (
+	"fmt"
+	"strings"
+	"unicode"
+	"unicode/utf8"
+)
+
+// Heavily inspired by the lexer from text/template.
+
+type varToken struct {
+	typ varTokenType
+	val string
+}
+
+type varTokenType byte
+
+const (
+	tokEOF varTokenType = iota
+	tokError
+	tokNumber
+	tokString
+	tokBool
+	tokArrayStart
+	tokArrayEnd
+	tokDictStart
+	tokDictEnd
+	tokVariantStart
+	tokVariantEnd
+	tokComma
+	tokColon
+	tokType
+	tokByteString
+)
+
+type varLexer struct {
+	input  string
+	start  int
+	pos    int
+	width  int
+	tokens []varToken
+}
+
+type lexState func(*varLexer) lexState
+
+func varLex(s string) []varToken {
+	l := &varLexer{input: s}
+	l.run()
+	return l.tokens
+}
+
+func (l *varLexer) accept(valid string) bool {
+	if strings.ContainsRune(valid, l.next()) {
+		return true
+	}
+	l.backup()
+	return false
+}
+
+func (l *varLexer) backup() {
+	l.pos -= l.width
+}
+
+func (l *varLexer) emit(t varTokenType) {
+	l.tokens = append(l.tokens, varToken{t, l.input[l.start:l.pos]})
+	l.start = l.pos
+}
+
+func (l *varLexer) errorf(format string, v ...interface{}) lexState {
+	l.tokens = append(l.tokens, varToken{
+		tokError,
+		fmt.Sprintf(format, v...),
+	})
+	return nil
+}
+
+func (l *varLexer) ignore() {
+	l.start = l.pos
+}
+
+func (l *varLexer) next() rune {
+	var r rune
+
+	if l.pos >= len(l.input) {
+		l.width = 0
+		return -1
+	}
+	r, l.width = utf8.DecodeRuneInString(l.input[l.pos:])
+	l.pos += l.width
+	return r
+}
+
+func (l *varLexer) run() {
+	for state := varLexNormal; state != nil; {
+		state = state(l)
+	}
+}
+
+func (l *varLexer) peek() rune {
+	r := l.next()
+	l.backup()
+	return r
+}
+
+func varLexNormal(l *varLexer) lexState {
+	for {
+		r := l.next()
+		switch {
+		case r == -1:
+			l.emit(tokEOF)
+			return nil
+		case r == '[':
+			l.emit(tokArrayStart)
+		case r == ']':
+			l.emit(tokArrayEnd)
+		case r == '{':
+			l.emit(tokDictStart)
+		case r == '}':
+			l.emit(tokDictEnd)
+		case r == '<':
+			l.emit(tokVariantStart)
+		case r == '>':
+			l.emit(tokVariantEnd)
+		case r == ':':
+			l.emit(tokColon)
+		case r == ',':
+			l.emit(tokComma)
+		case r == '\'' || r == '"':
+			l.backup()
+			return varLexString
+		case r == '@':
+			l.backup()
+			return varLexType
+		case unicode.IsSpace(r):
+			l.ignore()
+		case unicode.IsNumber(r) || r == '+' || r == '-':
+			l.backup()
+			return varLexNumber
+		case r == 'b':
+			pos := l.start
+			if n := l.peek(); n == '"' || n == '\'' {
+				return varLexByteString
+			}
+			// not a byte string; try to parse it as a type or bool below
+			l.pos = pos + 1
+			l.width = 1
+			fallthrough
+		default:
+			// either a bool or a type. Try bools first.
+			l.backup()
+			if l.pos+4 <= len(l.input) {
+				if l.input[l.pos:l.pos+4] == "true" {
+					l.pos += 4
+					l.emit(tokBool)
+					continue
+				}
+			}
+			if l.pos+5 <= len(l.input) {
+				if l.input[l.pos:l.pos+5] == "false" {
+					l.pos += 5
+					l.emit(tokBool)
+					continue
+				}
+			}
+			// must be a type.
+			return varLexType
+		}
+	}
+}
+
+var varTypeMap = map[string]string{
+	"boolean":    "b",
+	"byte":       "y",
+	"int16":      "n",
+	"uint16":     "q",
+	"int32":      "i",
+	"uint32":     "u",
+	"int64":      "x",
+	"uint64":     "t",
+	"double":     "f",
+	"string":     "s",
+	"objectpath": "o",
+	"signature":  "g",
+}
+
+func varLexByteString(l *varLexer) lexState {
+	q := l.next()
+Loop:
+	for {
+		switch l.next() {
+		case '\\':
+			if r := l.next(); r != -1 {
+				break
+			}
+			fallthrough
+		case -1:
+			return l.errorf("unterminated bytestring")
+		case q:
+			break Loop
+		}
+	}
+	l.emit(tokByteString)
+	return varLexNormal
+}
+
+func varLexNumber(l *varLexer) lexState {
+	l.accept("+-")
+	digits := "0123456789"
+	if l.accept("0") {
+		if l.accept("x") {
+			digits = "0123456789abcdefABCDEF"
+		} else {
+			digits = "01234567"
+		}
+	}
+	for strings.ContainsRune(digits, l.next()) {
+	}
+	l.backup()
+	if l.accept(".") {
+		for strings.ContainsRune(digits, l.next()) {
+		}
+		l.backup()
+	}
+	if l.accept("eE") {
+		l.accept("+-")
+		for strings.ContainsRune("0123456789", l.next()) {
+		}
+		l.backup()
+	}
+	if r := l.peek(); unicode.IsLetter(r) {
+		l.next()
+		return l.errorf("bad number syntax: %q", l.input[l.start:l.pos])
+	}
+	l.emit(tokNumber)
+	return varLexNormal
+}
+
+func varLexString(l *varLexer) lexState {
+	q := l.next()
+Loop:
+	for {
+		switch l.next() {
+		case '\\':
+			if r := l.next(); r != -1 {
+				break
+			}
+			fallthrough
+		case -1:
+			return l.errorf("unterminated string")
+		case q:
+			break Loop
+		}
+	}
+	l.emit(tokString)
+	return varLexNormal
+}
+
+func varLexType(l *varLexer) lexState {
+	at := l.accept("@")
+	for {
+		r := l.next()
+		if r == -1 {
+			break
+		}
+		if unicode.IsSpace(r) {
+			l.backup()
+			break
+		}
+	}
+	if at {
+		if _, err := ParseSignature(l.input[l.start+1 : l.pos]); err != nil {
+			return l.errorf("%s", err)
+		}
+	} else {
+		if _, ok := varTypeMap[l.input[l.start:l.pos]]; ok {
+			l.emit(tokType)
+			return varLexNormal
+		}
+		return l.errorf("unrecognized type %q", l.input[l.start:l.pos])
+	}
+	l.emit(tokType)
+	return varLexNormal
+}
diff --git a/vendor/github.com/godbus/dbus/v5/variant_parser.go b/vendor/github.com/godbus/dbus/v5/variant_parser.go
new file mode 100644
index 00000000000..d20f5da6dd2
--- /dev/null
+++ b/vendor/github.com/godbus/dbus/v5/variant_parser.go
@@ -0,0 +1,817 @@
+package dbus
+
+import (
+	"bytes"
+	"errors"
+	"fmt"
+	"io"
+	"reflect"
+	"strconv"
+	"strings"
+	"unicode/utf8"
+)
+
+type varParser struct {
+	tokens []varToken
+	i      int
+}
+
+func (p *varParser) backup() {
+	p.i--
+}
+
+func (p *varParser) next() varToken {
+	if p.i < len(p.tokens) {
+		t := p.tokens[p.i]
+		p.i++
+		return t
+	}
+	return varToken{typ: tokEOF}
+}
+
+type varNode interface {
+	Infer() (Signature, error)
+	String() string
+	Sigs() sigSet
+	Value(Signature) (interface{}, error)
+}
+
+func varMakeNode(p *varParser) (varNode, error) {
+	var sig Signature
+
+	for {
+		t := p.next()
+		switch t.typ {
+		case tokEOF:
+			return nil, io.ErrUnexpectedEOF
+		case tokError:
+			return nil, errors.New(t.val)
+		case tokNumber:
+			return varMakeNumNode(t, sig)
+		case tokString:
+			return varMakeStringNode(t, sig)
+		case tokBool:
+			if sig.str != "" && sig.str != "b" {
+				return nil, varTypeError{t.val, sig}
+			}
+			b, err := strconv.ParseBool(t.val)
+			if err != nil {
+				return nil, err
+			}
+			return boolNode(b), nil
+		case tokArrayStart:
+			return varMakeArrayNode(p, sig)
+		case tokVariantStart:
+			return varMakeVariantNode(p, sig)
+		case tokDictStart:
+			return varMakeDictNode(p, sig)
+		case tokType:
+			if sig.str != "" {
+				return nil, errors.New("unexpected type annotation")
+			}
+			if t.val[0] == '@' {
+				sig.str = t.val[1:]
+			} else {
+				sig.str = varTypeMap[t.val]
+			}
+		case tokByteString:
+			if sig.str != "" && sig.str != "ay" {
+				return nil, varTypeError{t.val, sig}
+			}
+			b, err := varParseByteString(t.val)
+			if err != nil {
+				return nil, err
+			}
+			return byteStringNode(b), nil
+		default:
+			return nil, fmt.Errorf("unexpected %q", t.val)
+		}
+	}
+}
+
+type varTypeError struct {
+	val string
+	sig Signature
+}
+
+func (e varTypeError) Error() string {
+	return fmt.Sprintf("dbus: can't parse %q as type %q", e.val, e.sig.str)
+}
+
+type sigSet map[Signature]bool
+
+func (s sigSet) Empty() bool {
+	return len(s) == 0
+}
+
+func (s sigSet) Intersect(s2 sigSet) sigSet {
+	r := make(sigSet)
+	for k := range s {
+		if s2[k] {
+			r[k] = true
+		}
+	}
+	return r
+}
+
+func (s sigSet) Single() (Signature, bool) {
+	if len(s) == 1 {
+		for k := range s {
+			return k, true
+		}
+	}
+	return Signature{}, false
+}
+
+func (s sigSet) ToArray() sigSet {
+	r := make(sigSet, len(s))
+	for k := range s {
+		r[Signature{"a" + k.str}] = true
+	}
+	return r
+}
+
+type numNode struct {
+	sig Signature
+	str string
+	val interface{}
+}
+
+var numSigSet = sigSet{
+	Signature{"y"}: true,
+	Signature{"n"}: true,
+	Signature{"q"}: true,
+	Signature{"i"}: true,
+	Signature{"u"}: true,
+	Signature{"x"}: true,
+	Signature{"t"}: true,
+	Signature{"d"}: true,
+}
+
+func (n numNode) Infer() (Signature, error) {
+	if strings.ContainsAny(n.str, ".e") {
+		return Signature{"d"}, nil
+	}
+	return Signature{"i"}, nil
+}
+
+func (n numNode) String() string {
+	return n.str
+}
+
+func (n numNode) Sigs() sigSet {
+	if n.sig.str != "" {
+		return sigSet{n.sig: true}
+	}
+	if strings.ContainsAny(n.str, ".e") {
+		return sigSet{Signature{"d"}: true}
+	}
+	return numSigSet
+}
+
+func (n numNode) Value(sig Signature) (interface{}, error) {
+	if n.sig.str != "" && n.sig != sig {
+		return nil, varTypeError{n.str, sig}
+	}
+	if n.val != nil {
+		return n.val, nil
+	}
+	return varNumAs(n.str, sig)
+}
+
+func varMakeNumNode(tok varToken, sig Signature) (varNode, error) {
+	if sig.str == "" {
+		return numNode{str: tok.val}, nil
+	}
+	num, err := varNumAs(tok.val, sig)
+	if err != nil {
+		return nil, err
+	}
+	return numNode{sig: sig, val: num}, nil
+}
+
+func varNumAs(s string, sig Signature) (interface{}, error) {
+	isUnsigned := false
+	size := 32
+	switch sig.str {
+	case "n":
+		size = 16
+	case "i":
+	case "x":
+		size = 64
+	case "y":
+		size = 8
+		isUnsigned = true
+	case "q":
+		size = 16
+		isUnsigned = true
+	case "u":
+		isUnsigned = true
+	case "t":
+		size = 64
+		isUnsigned = true
+	case "d":
+		d, err := strconv.ParseFloat(s, 64)
+		if err != nil {
+			return nil, err
+		}
+		return d, nil
+	default:
+		return nil, varTypeError{s, sig}
+	}
+	base := 10
+	if strings.HasPrefix(s, "0x") {
+		base = 16
+		s = s[2:]
+	}
+	if strings.HasPrefix(s, "0") && len(s) != 1 {
+		base = 8
+		s = s[1:]
+	}
+	if isUnsigned {
+		i, err := strconv.ParseUint(s, base, size)
+		if err != nil {
+			return nil, err
+		}
+		var v interface{} = i
+		switch sig.str {
+		case "y":
+			v = byte(i)
+		case "q":
+			v = uint16(i)
+		case "u":
+			v = uint32(i)
+		}
+		return v, nil
+	}
+	i, err := strconv.ParseInt(s, base, size)
+	if err != nil {
+		return nil, err
+	}
+	var v interface{} = i
+	switch sig.str {
+	case "n":
+		v = int16(i)
+	case "i":
+		v = int32(i)
+	}
+	return v, nil
+}
+
+type stringNode struct {
+	sig Signature
+	str string      // parsed
+	val interface{} // has correct type
+}
+
+var stringSigSet = sigSet{
+	Signature{"s"}: true,
+	Signature{"g"}: true,
+	Signature{"o"}: true,
+}
+
+func (n stringNode) Infer() (Signature, error) {
+	return Signature{"s"}, nil
+}
+
+func (n stringNode) String() string {
+	return n.str
+}
+
+func (n stringNode) Sigs() sigSet {
+	if n.sig.str != "" {
+		return sigSet{n.sig: true}
+	}
+	return stringSigSet
+}
+
+func (n stringNode) Value(sig Signature) (interface{}, error) {
+	if n.sig.str != "" && n.sig != sig {
+		return nil, varTypeError{n.str, sig}
+	}
+	if n.val != nil {
+		return n.val, nil
+	}
+	switch {
+	case sig.str == "g":
+		return Signature{n.str}, nil
+	case sig.str == "o":
+		return ObjectPath(n.str), nil
+	case sig.str == "s":
+		return n.str, nil
+	default:
+		return nil, varTypeError{n.str, sig}
+	}
+}
+
+func varMakeStringNode(tok varToken, sig Signature) (varNode, error) {
+	if sig.str != "" && sig.str != "s" && sig.str != "g" && sig.str != "o" {
+		return nil, fmt.Errorf("invalid type %q for string", sig.str)
+	}
+	s, err := varParseString(tok.val)
+	if err != nil {
+		return nil, err
+	}
+	n := stringNode{str: s}
+	if sig.str == "" {
+		return stringNode{str: s}, nil
+	}
+	n.sig = sig
+	switch sig.str {
+	case "o":
+		n.val = ObjectPath(s)
+	case "g":
+		n.val = Signature{s}
+	case "s":
+		n.val = s
+	}
+	return n, nil
+}
+
+func varParseString(s string) (string, error) {
+	// quotes are guaranteed to be there
+	s = s[1 : len(s)-1]
+	buf := new(bytes.Buffer)
+	for len(s) != 0 {
+		r, size := utf8.DecodeRuneInString(s)
+		if r == utf8.RuneError && size == 1 {
+			return "", errors.New("invalid UTF-8")
+		}
+		s = s[size:]
+		if r != '\\' {
+			buf.WriteRune(r)
+			continue
+		}
+		r, size = utf8.DecodeRuneInString(s)
+		if r == utf8.RuneError && size == 1 {
+			return "", errors.New("invalid UTF-8")
+		}
+		s = s[size:]
+		switch r {
+		case 'a':
+			buf.WriteRune(0x7)
+		case 'b':
+			buf.WriteRune(0x8)
+		case 'f':
+			buf.WriteRune(0xc)
+		case 'n':
+			buf.WriteRune('\n')
+		case 'r':
+			buf.WriteRune('\r')
+		case 't':
+			buf.WriteRune('\t')
+		case '\n':
+		case 'u':
+			if len(s) < 4 {
+				return "", errors.New("short unicode escape")
+			}
+			r, err := strconv.ParseUint(s[:4], 16, 32)
+			if err != nil {
+				return "", err
+			}
+			buf.WriteRune(rune(r))
+			s = s[4:]
+		case 'U':
+			if len(s) < 8 {
+				return "", errors.New("short unicode escape")
+			}
+			r, err := strconv.ParseUint(s[:8], 16, 32)
+			if err != nil {
+				return "", err
+			}
+			buf.WriteRune(rune(r))
+			s = s[8:]
+		default:
+			buf.WriteRune(r)
+		}
+	}
+	return buf.String(), nil
+}
+
+var boolSigSet = sigSet{Signature{"b"}: true}
+
+type boolNode bool
+
+func (boolNode) Infer() (Signature, error) {
+	return Signature{"b"}, nil
+}
+
+func (b boolNode) String() string {
+	if b {
+		return "true"
+	}
+	return "false"
+}
+
+func (boolNode) Sigs() sigSet {
+	return boolSigSet
+}
+
+func (b boolNode) Value(sig Signature) (interface{}, error) {
+	if sig.str != "b" {
+		return nil, varTypeError{b.String(), sig}
+	}
+	return bool(b), nil
+}
+
+type arrayNode struct {
+	set      sigSet
+	children []varNode
+	val      interface{}
+}
+
+func (n arrayNode) Infer() (Signature, error) {
+	for _, v := range n.children {
+		csig, err := varInfer(v)
+		if err != nil {
+			continue
+		}
+		return Signature{"a" + csig.str}, nil
+	}
+	return Signature{}, fmt.Errorf("can't infer type for %q", n.String())
+}
+
+func (n arrayNode) String() string {
+	s := "["
+	for i, v := range n.children {
+		s += v.String()
+		if i != len(n.children)-1 {
+			s += ", "
+		}
+	}
+	return s + "]"
+}
+
+func (n arrayNode) Sigs() sigSet {
+	return n.set
+}
+
+func (n arrayNode) Value(sig Signature) (interface{}, error) {
+	if n.set.Empty() {
+		// no type information whatsoever, so this must be an empty slice
+		return reflect.MakeSlice(typeFor(sig.str), 0, 0).Interface(), nil
+	}
+	if !n.set[sig] {
+		return nil, varTypeError{n.String(), sig}
+	}
+	s := reflect.MakeSlice(typeFor(sig.str), len(n.children), len(n.children))
+	for i, v := range n.children {
+		rv, err := v.Value(Signature{sig.str[1:]})
+		if err != nil {
+			return nil, err
+		}
+		s.Index(i).Set(reflect.ValueOf(rv))
+	}
+	return s.Interface(), nil
+}
+
+func varMakeArrayNode(p *varParser, sig Signature) (varNode, error) {
+	var n arrayNode
+	if sig.str != "" {
+		n.set = sigSet{sig: true}
+	}
+	if t := p.next(); t.typ == tokArrayEnd {
+		return n, nil
+	} else {
+		p.backup()
+	}
+Loop:
+	for {
+		t := p.next()
+		switch t.typ {
+		case tokEOF:
+			return nil, io.ErrUnexpectedEOF
+		case tokError:
+			return nil, errors.New(t.val)
+		}
+		p.backup()
+		cn, err := varMakeNode(p)
+		if err != nil {
+			return nil, err
+		}
+		if cset := cn.Sigs(); !cset.Empty() {
+			if n.set.Empty() {
+				n.set = cset.ToArray()
+			} else {
+				nset := cset.ToArray().Intersect(n.set)
+				if nset.Empty() {
+					return nil, fmt.Errorf("can't parse %q with given type information", cn.String())
+				}
+				n.set = nset
+			}
+		}
+		n.children = append(n.children, cn)
+		switch t := p.next(); t.typ {
+		case tokEOF:
+			return nil, io.ErrUnexpectedEOF
+		case tokError:
+			return nil, errors.New(t.val)
+		case tokArrayEnd:
+			break Loop
+		case tokComma:
+			continue
+		default:
+			return nil, fmt.Errorf("unexpected %q", t.val)
+		}
+	}
+	return n, nil
+}
+
+type variantNode struct {
+	n varNode
+}
+
+var variantSet = sigSet{
+	Signature{"v"}: true,
+}
+
+func (variantNode) Infer() (Signature, error) {
+	return Signature{"v"}, nil
+}
+
+func (n variantNode) String() string {
+	return "<" + n.n.String() + ">"
+}
+
+func (variantNode) Sigs() sigSet {
+	return variantSet
+}
+
+func (n variantNode) Value(sig Signature) (interface{}, error) {
+	if sig.str != "v" {
+		return nil, varTypeError{n.String(), sig}
+	}
+	sig, err := varInfer(n.n)
+	if err != nil {
+		return nil, err
+	}
+	v, err := n.n.Value(sig)
+	if err != nil {
+		return nil, err
+	}
+	return MakeVariant(v), nil
+}
+
+func varMakeVariantNode(p *varParser, sig Signature) (varNode, error) {
+	n, err := varMakeNode(p)
+	if err != nil {
+		return nil, err
+	}
+	if t := p.next(); t.typ != tokVariantEnd {
+		return nil, fmt.Errorf("unexpected %q", t.val)
+	}
+	vn := variantNode{n}
+	if sig.str != "" && sig.str != "v" {
+		return nil, varTypeError{vn.String(), sig}
+	}
+	return variantNode{n}, nil
+}
+
+type dictEntry struct {
+	key, val varNode
+}
+
+type dictNode struct {
+	kset, vset sigSet
+	children   []dictEntry
+	val        interface{}
+}
+
+func (n dictNode) Infer() (Signature, error) {
+	for _, v := range n.children {
+		ksig, err := varInfer(v.key)
+		if err != nil {
+			continue
+		}
+		vsig, err := varInfer(v.val)
+		if err != nil {
+			continue
+		}
+		return Signature{"a{" + ksig.str + vsig.str + "}"}, nil
+	}
+	return Signature{}, fmt.Errorf("can't infer type for %q", n.String())
+}
+
+func (n dictNode) String() string {
+	s := "{"
+	for i, v := range n.children {
+		s += v.key.String() + ": " + v.val.String()
+		if i != len(n.children)-1 {
+			s += ", "
+		}
+	}
+	return s + "}"
+}
+
+func (n dictNode) Sigs() sigSet {
+	r := sigSet{}
+	for k := range n.kset {
+		for v := range n.vset {
+			sig := "a{" + k.str + v.str + "}"
+			r[Signature{sig}] = true
+		}
+	}
+	return r
+}
+
+func (n dictNode) Value(sig Signature) (interface{}, error) {
+	set := n.Sigs()
+	if set.Empty() {
+		// no type information -> empty dict
+		return reflect.MakeMap(typeFor(sig.str)).Interface(), nil
+	}
+	if !set[sig] {
+		return nil, varTypeError{n.String(), sig}
+	}
+	m := reflect.MakeMap(typeFor(sig.str))
+	ksig := Signature{sig.str[2:3]}
+	vsig := Signature{sig.str[3 : len(sig.str)-1]}
+	for _, v := range n.children {
+		kv, err := v.key.Value(ksig)
+		if err != nil {
+			return nil, err
+		}
+		vv, err := v.val.Value(vsig)
+		if err != nil {
+			return nil, err
+		}
+		m.SetMapIndex(reflect.ValueOf(kv), reflect.ValueOf(vv))
+	}
+	return m.Interface(), nil
+}
+
+func varMakeDictNode(p *varParser, sig Signature) (varNode, error) {
+	var n dictNode
+
+	if sig.str != "" {
+		if len(sig.str) < 5 {
+			return nil, fmt.Errorf("invalid signature %q for dict type", sig)
+		}
+		ksig := Signature{string(sig.str[2])}
+		vsig := Signature{sig.str[3 : len(sig.str)-1]}
+		n.kset = sigSet{ksig: true}
+		n.vset = sigSet{vsig: true}
+	}
+	if t := p.next(); t.typ == tokDictEnd {
+		return n, nil
+	} else {
+		p.backup()
+	}
+Loop:
+	for {
+		t := p.next()
+		switch t.typ {
+		case tokEOF:
+			return nil, io.ErrUnexpectedEOF
+		case tokError:
+			return nil, errors.New(t.val)
+		}
+		p.backup()
+		kn, err := varMakeNode(p)
+		if err != nil {
+			return nil, err
+		}
+		if kset := kn.Sigs(); !kset.Empty() {
+			if n.kset.Empty() {
+				n.kset = kset
+			} else {
+				n.kset = kset.Intersect(n.kset)
+				if n.kset.Empty() {
+					return nil, fmt.Errorf("can't parse %q with given type information", kn.String())
+				}
+			}
+		}
+		t = p.next()
+		switch t.typ {
+		case tokEOF:
+			return nil, io.ErrUnexpectedEOF
+		case tokError:
+			return nil, errors.New(t.val)
+		case tokColon:
+		default:
+			return nil, fmt.Errorf("unexpected %q", t.val)
+		}
+		t = p.next()
+		switch t.typ {
+		case tokEOF:
+			return nil, io.ErrUnexpectedEOF
+		case tokError:
+			return nil, errors.New(t.val)
+		}
+		p.backup()
+		vn, err := varMakeNode(p)
+		if err != nil {
+			return nil, err
+		}
+		if vset := vn.Sigs(); !vset.Empty() {
+			if n.vset.Empty() {
+				n.vset = vset
+			} else {
+				n.vset = n.vset.Intersect(vset)
+				if n.vset.Empty() {
+					return nil, fmt.Errorf("can't parse %q with given type information", vn.String())
+				}
+			}
+		}
+		n.children = append(n.children, dictEntry{kn, vn})
+		t = p.next()
+		switch t.typ {
+		case tokEOF:
+			return nil, io.ErrUnexpectedEOF
+		case tokError:
+			return nil, errors.New(t.val)
+		case tokDictEnd:
+			break Loop
+		case tokComma:
+			continue
+		default:
+			return nil, fmt.Errorf("unexpected %q", t.val)
+		}
+	}
+	return n, nil
+}
+
+type byteStringNode []byte
+
+var byteStringSet = sigSet{
+	Signature{"ay"}: true,
+}
+
+func (byteStringNode) Infer() (Signature, error) {
+	return Signature{"ay"}, nil
+}
+
+func (b byteStringNode) String() string {
+	return string(b)
+}
+
+func (b byteStringNode) Sigs() sigSet {
+	return byteStringSet
+}
+
+func (b byteStringNode) Value(sig Signature) (interface{}, error) {
+	if sig.str != "ay" {
+		return nil, varTypeError{b.String(), sig}
+	}
+	return []byte(b), nil
+}
+
+func varParseByteString(s string) ([]byte, error) {
+	// quotes and b at start are guaranteed to be there
+	b := make([]byte, 0, 1)
+	s = s[2 : len(s)-1]
+	for len(s) != 0 {
+		c := s[0]
+		s = s[1:]
+		if c != '\\' {
+			b = append(b, c)
+			continue
+		}
+		c = s[0]
+		s = s[1:]
+		switch c {
+		case 'a':
+			b = append(b, 0x7)
+		case 'b':
+			b = append(b, 0x8)
+		case 'f':
+			b = append(b, 0xc)
+		case 'n':
+			b = append(b, '\n')
+		case 'r':
+			b = append(b, '\r')
+		case 't':
+			b = append(b, '\t')
+		case 'x':
+			if len(s) < 2 {
+				return nil, errors.New("short escape")
+			}
+			n, err := strconv.ParseUint(s[:2], 16, 8)
+			if err != nil {
+				return nil, err
+			}
+			b = append(b, byte(n))
+			s = s[2:]
+		case '0':
+			if len(s) < 3 {
+				return nil, errors.New("short escape")
+			}
+			n, err := strconv.ParseUint(s[:3], 8, 8)
+			if err != nil {
+				return nil, err
+			}
+			b = append(b, byte(n))
+			s = s[3:]
+		default:
+			b = append(b, c)
+		}
+	}
+	return append(b, 0), nil
+}
+
+func varInfer(n varNode) (Signature, error) {
+	if sig, ok := n.Sigs().Single(); ok {
+		return sig, nil
+	}
+	return n.Infer()
+}
diff --git a/vendor/github.com/golang-jwt/jwt/v5/MIGRATION_GUIDE.md b/vendor/github.com/golang-jwt/jwt/v5/MIGRATION_GUIDE.md
index 6ad1c22bbe3..ff9c57e1d84 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/MIGRATION_GUIDE.md
+++ b/vendor/github.com/golang-jwt/jwt/v5/MIGRATION_GUIDE.md
@@ -17,7 +17,7 @@ and corresponding updates for existing programs.
 
 ## Parsing and Validation Options
 
-Under the hood, a new `validator` struct takes care of validating the claims. A
+Under the hood, a new `Validator` struct takes care of validating the claims. A
 long awaited feature has been the option to fine-tune the validation of tokens.
 This is now possible with several `ParserOption` functions that can be appended
 to most `Parse` functions, such as `ParseWithClaims`. The most important options
@@ -68,6 +68,16 @@ type Claims interface {
 }
 ```
 
+Users that previously directly called the `Valid` function on their claims,
+e.g., to perform validation independently of parsing/verifying a token, can now
+use the `jwt.NewValidator` function to create a `Validator` independently of the
+`Parser`.
+
+```go
+var v = jwt.NewValidator(jwt.WithLeeway(5*time.Second))
+v.Validate(myClaims)
+```
+
 ### Supported Claim Types and Removal of `StandardClaims`
 
 The two standard claim types supported by this library, `MapClaims` and
@@ -169,7 +179,7 @@ be a drop-in replacement, if you're having troubles migrating, please open an
 issue.
 
 You can replace all occurrences of `github.com/dgrijalva/jwt-go` or
-`github.com/golang-jwt/jwt` with `github.com/golang-jwt/jwt/v5`, either manually
+`github.com/golang-jwt/jwt` with `github.com/golang-jwt/jwt/v4`, either manually
 or by using tools such as `sed` or `gofmt`.
 
 And then you'd typically run:
diff --git a/vendor/github.com/golang-jwt/jwt/v5/ecdsa.go b/vendor/github.com/golang-jwt/jwt/v5/ecdsa.go
index 4ccae2a857d..ca85659ba4b 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/ecdsa.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/ecdsa.go
@@ -62,7 +62,7 @@ func (m *SigningMethodECDSA) Verify(signingString string, sig []byte, key interf
 	case *ecdsa.PublicKey:
 		ecdsaKey = k
 	default:
-		return ErrInvalidKeyType
+		return newError("ECDSA verify expects *ecsda.PublicKey", ErrInvalidKeyType)
 	}
 
 	if len(sig) != 2*m.KeySize {
@@ -96,7 +96,7 @@ func (m *SigningMethodECDSA) Sign(signingString string, key interface{}) ([]byte
 	case *ecdsa.PrivateKey:
 		ecdsaKey = k
 	default:
-		return nil, ErrInvalidKeyType
+		return nil, newError("ECDSA sign expects *ecsda.PrivateKey", ErrInvalidKeyType)
 	}
 
 	// Create the hasher
diff --git a/vendor/github.com/golang-jwt/jwt/v5/ed25519.go b/vendor/github.com/golang-jwt/jwt/v5/ed25519.go
index 3db00e4a233..c2138119e51 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/ed25519.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/ed25519.go
@@ -1,11 +1,10 @@
 package jwt
 
 import (
-	"errors"
-
 	"crypto"
 	"crypto/ed25519"
 	"crypto/rand"
+	"errors"
 )
 
 var (
@@ -39,7 +38,7 @@ func (m *SigningMethodEd25519) Verify(signingString string, sig []byte, key inte
 	var ok bool
 
 	if ed25519Key, ok = key.(ed25519.PublicKey); !ok {
-		return ErrInvalidKeyType
+		return newError("Ed25519 verify expects ed25519.PublicKey", ErrInvalidKeyType)
 	}
 
 	if len(ed25519Key) != ed25519.PublicKeySize {
@@ -61,7 +60,7 @@ func (m *SigningMethodEd25519) Sign(signingString string, key interface{}) ([]by
 	var ok bool
 
 	if ed25519Key, ok = key.(crypto.Signer); !ok {
-		return nil, ErrInvalidKeyType
+		return nil, newError("Ed25519 sign expects crypto.Signer", ErrInvalidKeyType)
 	}
 
 	if _, ok := ed25519Key.Public().(ed25519.PublicKey); !ok {
diff --git a/vendor/github.com/golang-jwt/jwt/v5/errors_go_other.go b/vendor/github.com/golang-jwt/jwt/v5/errors_go_other.go
index 3afb04e648f..2ad542f00ca 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/errors_go_other.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/errors_go_other.go
@@ -22,7 +22,7 @@ func (je joinedError) Is(err error) bool {
 
 // wrappedErrors is a workaround for wrapping multiple errors in environments
 // where Go 1.20 is not available. It basically uses the already implemented
-// functionatlity of joinedError to handle multiple errors with supplies a
+// functionality of joinedError to handle multiple errors with supplies a
 // custom error message that is identical to the one we produce in Go 1.20 using
 // multiple %w directives.
 type wrappedErrors struct {
diff --git a/vendor/github.com/golang-jwt/jwt/v5/hmac.go b/vendor/github.com/golang-jwt/jwt/v5/hmac.go
index 91b688ba9f1..96c62722d18 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/hmac.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/hmac.go
@@ -59,7 +59,7 @@ func (m *SigningMethodHMAC) Verify(signingString string, sig []byte, key interfa
 	// Verify the key is the right type
 	keyBytes, ok := key.([]byte)
 	if !ok {
-		return ErrInvalidKeyType
+		return newError("HMAC verify expects []byte", ErrInvalidKeyType)
 	}
 
 	// Can we use the specified hashing method?
@@ -91,7 +91,7 @@ func (m *SigningMethodHMAC) Verify(signingString string, sig []byte, key interfa
 func (m *SigningMethodHMAC) Sign(signingString string, key interface{}) ([]byte, error) {
 	if keyBytes, ok := key.([]byte); ok {
 		if !m.Hash.Available() {
-			return nil, ErrHashUnavailable
+			return nil, newError("HMAC sign expects []byte", ErrInvalidKeyType)
 		}
 
 		hasher := hmac.New(m.Hash.New, keyBytes)
diff --git a/vendor/github.com/golang-jwt/jwt/v5/none.go b/vendor/github.com/golang-jwt/jwt/v5/none.go
index c93daa58495..685c2ea3065 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/none.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/none.go
@@ -32,7 +32,7 @@ func (m *signingMethodNone) Verify(signingString string, sig []byte, key interfa
 		return NoneSignatureTypeDisallowedError
 	}
 	// If signing method is none, signature must be an empty string
-	if string(sig) != "" {
+	if len(sig) != 0 {
 		return newError("'none' signing method with non-empty signature", ErrTokenUnverifiable)
 	}
 
diff --git a/vendor/github.com/golang-jwt/jwt/v5/parser.go b/vendor/github.com/golang-jwt/jwt/v5/parser.go
index f4386fbaace..ecf99af78f9 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/parser.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/parser.go
@@ -18,7 +18,7 @@ type Parser struct {
 	// Skip claims validation during token parsing.
 	skipClaimsValidation bool
 
-	validator *validator
+	validator *Validator
 
 	decodeStrict bool
 
@@ -28,7 +28,7 @@ type Parser struct {
 // NewParser creates a new Parser with the specified options
 func NewParser(options ...ParserOption) *Parser {
 	p := &Parser{
-		validator: &validator{},
+		validator: &Validator{},
 	}
 
 	// Loop through our parsing options and apply them
@@ -74,24 +74,40 @@ func (p *Parser) ParseWithClaims(tokenString string, claims Claims, keyFunc Keyf
 		}
 	}
 
-	// Lookup key
-	var key interface{}
+	// Decode signature
+	token.Signature, err = p.DecodeSegment(parts[2])
+	if err != nil {
+		return token, newError("could not base64 decode signature", ErrTokenMalformed, err)
+	}
+	text := strings.Join(parts[0:2], ".")
+
+	// Lookup key(s)
 	if keyFunc == nil {
 		// keyFunc was not provided.  short circuiting validation
 		return token, newError("no keyfunc was provided", ErrTokenUnverifiable)
 	}
-	if key, err = keyFunc(token); err != nil {
-		return token, newError("error while executing keyfunc", ErrTokenUnverifiable, err)
-	}
 
-	// Decode signature
-	token.Signature, err = p.DecodeSegment(parts[2])
+	got, err := keyFunc(token)
 	if err != nil {
-		return token, newError("could not base64 decode signature", ErrTokenMalformed, err)
+		return token, newError("error while executing keyfunc", ErrTokenUnverifiable, err)
 	}
 
-	// Perform signature validation
-	if err = token.Method.Verify(strings.Join(parts[0:2], "."), token.Signature, key); err != nil {
+	switch have := got.(type) {
+	case VerificationKeySet:
+		if len(have.Keys) == 0 {
+			return token, newError("keyfunc returned empty verification key set", ErrTokenUnverifiable)
+		}
+		// Iterate through keys and verify signature, skipping the rest when a match is found.
+		// Return the last error if no match is found.
+		for _, key := range have.Keys {
+			if err = token.Method.Verify(text, token.Signature, key); err == nil {
+				break
+			}
+		}
+	default:
+		err = token.Method.Verify(text, token.Signature, have)
+	}
+	if err != nil {
 		return token, newError("", ErrTokenSignatureInvalid, err)
 	}
 
@@ -99,7 +115,7 @@ func (p *Parser) ParseWithClaims(tokenString string, claims Claims, keyFunc Keyf
 	if !p.skipClaimsValidation {
 		// Make sure we have at least a default validator
 		if p.validator == nil {
-			p.validator = newValidator()
+			p.validator = NewValidator()
 		}
 
 		if err := p.validator.Validate(claims); err != nil {
@@ -117,8 +133,8 @@ func (p *Parser) ParseWithClaims(tokenString string, claims Claims, keyFunc Keyf
 //
 // WARNING: Don't use this method unless you know what you're doing.
 //
-// It's only ever useful in cases where you know the signature is valid (because it has
-// been checked previously in the stack) and you want to extract values from it.
+// It's only ever useful in cases where you know the signature is valid (since it has already
+// been or will be checked elsewhere in the stack) and you want to extract values from it.
 func (p *Parser) ParseUnverified(tokenString string, claims Claims) (token *Token, parts []string, err error) {
 	parts = strings.Split(tokenString, ".")
 	if len(parts) != 3 {
@@ -130,9 +146,6 @@ func (p *Parser) ParseUnverified(tokenString string, claims Claims) (token *Toke
 	// parse Header
 	var headerBytes []byte
 	if headerBytes, err = p.DecodeSegment(parts[0]); err != nil {
-		if strings.HasPrefix(strings.ToLower(tokenString), "bearer ") {
-			return token, parts, newError("tokenstring should not contain 'bearer '", ErrTokenMalformed)
-		}
 		return token, parts, newError("could not base64 decode header", ErrTokenMalformed, err)
 	}
 	if err = json.Unmarshal(headerBytes, &token.Header); err != nil {
@@ -140,23 +153,33 @@ func (p *Parser) ParseUnverified(tokenString string, claims Claims) (token *Toke
 	}
 
 	// parse Claims
-	var claimBytes []byte
 	token.Claims = claims
 
-	if claimBytes, err = p.DecodeSegment(parts[1]); err != nil {
+	claimBytes, err := p.DecodeSegment(parts[1])
+	if err != nil {
 		return token, parts, newError("could not base64 decode claim", ErrTokenMalformed, err)
 	}
-	dec := json.NewDecoder(bytes.NewBuffer(claimBytes))
-	if p.useJSONNumber {
-		dec.UseNumber()
-	}
-	// JSON Decode.  Special case for map type to avoid weird pointer behavior
-	if c, ok := token.Claims.(MapClaims); ok {
-		err = dec.Decode(&c)
+
+	// If `useJSONNumber` is enabled then we must use *json.Decoder to decode
+	// the claims. However, this comes with a performance penalty so only use
+	// it if we must and, otherwise, simple use json.Unmarshal.
+	if !p.useJSONNumber {
+		// JSON Unmarshal. Special case for map type to avoid weird pointer behavior.
+		if c, ok := token.Claims.(MapClaims); ok {
+			err = json.Unmarshal(claimBytes, &c)
+		} else {
+			err = json.Unmarshal(claimBytes, &claims)
+		}
 	} else {
-		err = dec.Decode(&claims)
+		dec := json.NewDecoder(bytes.NewBuffer(claimBytes))
+		dec.UseNumber()
+		// JSON Decode. Special case for map type to avoid weird pointer behavior.
+		if c, ok := token.Claims.(MapClaims); ok {
+			err = dec.Decode(&c)
+		} else {
+			err = dec.Decode(&claims)
+		}
 	}
-	// Handle decode error
 	if err != nil {
 		return token, parts, newError("could not JSON decode claim", ErrTokenMalformed, err)
 	}
diff --git a/vendor/github.com/golang-jwt/jwt/v5/parser_option.go b/vendor/github.com/golang-jwt/jwt/v5/parser_option.go
index 1b5af970f66..88a780fbd4a 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/parser_option.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/parser_option.go
@@ -58,6 +58,14 @@ func WithIssuedAt() ParserOption {
 	}
 }
 
+// WithExpirationRequired returns the ParserOption to make exp claim required.
+// By default exp claim is optional.
+func WithExpirationRequired() ParserOption {
+	return func(p *Parser) {
+		p.validator.requireExp = true
+	}
+}
+
 // WithAudience configures the validator to require the specified audience in
 // the `aud` claim. Validation will fail if the audience is not listed in the
 // token or the `aud` claim is missing.
diff --git a/vendor/github.com/golang-jwt/jwt/v5/rsa.go b/vendor/github.com/golang-jwt/jwt/v5/rsa.go
index daff094313d..83cbee6ae2b 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/rsa.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/rsa.go
@@ -51,7 +51,7 @@ func (m *SigningMethodRSA) Verify(signingString string, sig []byte, key interfac
 	var ok bool
 
 	if rsaKey, ok = key.(*rsa.PublicKey); !ok {
-		return ErrInvalidKeyType
+		return newError("RSA verify expects *rsa.PublicKey", ErrInvalidKeyType)
 	}
 
 	// Create hasher
@@ -73,7 +73,7 @@ func (m *SigningMethodRSA) Sign(signingString string, key interface{}) ([]byte,
 
 	// Validate type of key
 	if rsaKey, ok = key.(*rsa.PrivateKey); !ok {
-		return nil, ErrInvalidKey
+		return nil, newError("RSA sign expects *rsa.PrivateKey", ErrInvalidKeyType)
 	}
 
 	// Create the hasher
diff --git a/vendor/github.com/golang-jwt/jwt/v5/rsa_pss.go b/vendor/github.com/golang-jwt/jwt/v5/rsa_pss.go
index 9599f0a46c0..28c386ec43a 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/rsa_pss.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/rsa_pss.go
@@ -88,7 +88,7 @@ func (m *SigningMethodRSAPSS) Verify(signingString string, sig []byte, key inter
 	case *rsa.PublicKey:
 		rsaKey = k
 	default:
-		return ErrInvalidKey
+		return newError("RSA-PSS verify expects *rsa.PublicKey", ErrInvalidKeyType)
 	}
 
 	// Create hasher
@@ -115,7 +115,7 @@ func (m *SigningMethodRSAPSS) Sign(signingString string, key interface{}) ([]byt
 	case *rsa.PrivateKey:
 		rsaKey = k
 	default:
-		return nil, ErrInvalidKeyType
+		return nil, newError("RSA-PSS sign expects *rsa.PrivateKey", ErrInvalidKeyType)
 	}
 
 	// Create the hasher
diff --git a/vendor/github.com/golang-jwt/jwt/v5/token.go b/vendor/github.com/golang-jwt/jwt/v5/token.go
index c8ad7c7834d..352873a2d9c 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/token.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/token.go
@@ -1,6 +1,7 @@
 package jwt
 
 import (
+	"crypto"
 	"encoding/base64"
 	"encoding/json"
 )
@@ -9,8 +10,21 @@ import (
 // the key for verification.  The function receives the parsed, but unverified
 // Token.  This allows you to use properties in the Header of the token (such as
 // `kid`) to identify which key to use.
+//
+// The returned interface{} may be a single key or a VerificationKeySet containing
+// multiple keys.
 type Keyfunc func(*Token) (interface{}, error)
 
+// VerificationKey represents a public or secret key for verifying a token's signature.
+type VerificationKey interface {
+	crypto.PublicKey | []uint8
+}
+
+// VerificationKeySet is a set of public or secret keys. It is used by the parser to verify a token.
+type VerificationKeySet struct {
+	Keys []VerificationKey
+}
+
 // Token represents a JWT Token.  Different fields will be used depending on
 // whether you're creating or parsing/verifying a token.
 type Token struct {
diff --git a/vendor/github.com/golang-jwt/jwt/v5/types.go b/vendor/github.com/golang-jwt/jwt/v5/types.go
index b82b38867d0..b2655a9e6d2 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/types.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/types.go
@@ -4,7 +4,6 @@ import (
 	"encoding/json"
 	"fmt"
 	"math"
-	"reflect"
 	"strconv"
 	"time"
 )
@@ -121,14 +120,14 @@ func (s *ClaimStrings) UnmarshalJSON(data []byte) (err error) {
 		for _, vv := range v {
 			vs, ok := vv.(string)
 			if !ok {
-				return &json.UnsupportedTypeError{Type: reflect.TypeOf(vv)}
+				return ErrInvalidType
 			}
 			aud = append(aud, vs)
 		}
 	case nil:
 		return nil
 	default:
-		return &json.UnsupportedTypeError{Type: reflect.TypeOf(v)}
+		return ErrInvalidType
 	}
 
 	*s = aud
diff --git a/vendor/github.com/golang-jwt/jwt/v5/validator.go b/vendor/github.com/golang-jwt/jwt/v5/validator.go
index 3850438939d..008ecd8712e 100644
--- a/vendor/github.com/golang-jwt/jwt/v5/validator.go
+++ b/vendor/github.com/golang-jwt/jwt/v5/validator.go
@@ -28,13 +28,12 @@ type ClaimsValidator interface {
 	Validate() error
 }
 
-// validator is the core of the new Validation API. It is automatically used by
+// Validator is the core of the new Validation API. It is automatically used by
 // a [Parser] during parsing and can be modified with various parser options.
 //
-// Note: This struct is intentionally not exported (yet) as we want to
-// internally finalize its API. In the future, we might make it publicly
-// available.
-type validator struct {
+// The [NewValidator] function should be used to create an instance of this
+// struct.
+type Validator struct {
 	// leeway is an optional leeway that can be provided to account for clock skew.
 	leeway time.Duration
 
@@ -42,6 +41,9 @@ type validator struct {
 	// validation. If unspecified, this defaults to time.Now.
 	timeFunc func() time.Time
 
+	// requireExp specifies whether the exp claim is required
+	requireExp bool
+
 	// verifyIat specifies whether the iat (Issued At) claim will be verified.
 	// According to https://www.rfc-editor.org/rfc/rfc7519#section-4.1.6 this
 	// only specifies the age of the token, but no validation check is
@@ -62,16 +64,28 @@ type validator struct {
 	expectedSub string
 }
 
-// newValidator can be used to create a stand-alone validator with the supplied
+// NewValidator can be used to create a stand-alone validator with the supplied
 // options. This validator can then be used to validate already parsed claims.
-func newValidator(opts ...ParserOption) *validator {
+//
+// Note: Under normal circumstances, explicitly creating a validator is not
+// needed and can potentially be dangerous; instead functions of the [Parser]
+// class should be used.
+//
+// The [Validator] is only checking the *validity* of the claims, such as its
+// expiration time, but it does NOT perform *signature verification* of the
+// token.
+func NewValidator(opts ...ParserOption) *Validator {
 	p := NewParser(opts...)
 	return p.validator
 }
 
 // Validate validates the given claims. It will also perform any custom
 // validation if claims implements the [ClaimsValidator] interface.
-func (v *validator) Validate(claims Claims) error {
+//
+// Note: It will NOT perform any *signature verification* on the token that
+// contains the claims and expects that the [Claim] was already successfully
+// verified.
+func (v *Validator) Validate(claims Claims) error {
 	var (
 		now  time.Time
 		errs []error = make([]error, 0, 6)
@@ -86,8 +100,9 @@ func (v *validator) Validate(claims Claims) error {
 	}
 
 	// We always need to check the expiration time, but usage of the claim
-	// itself is OPTIONAL.
-	if err = v.verifyExpiresAt(claims, now, false); err != nil {
+	// itself is OPTIONAL by default. requireExp overrides this behavior
+	// and makes the exp claim mandatory.
+	if err = v.verifyExpiresAt(claims, now, v.requireExp); err != nil {
 		errs = append(errs, err)
 	}
 
@@ -149,7 +164,7 @@ func (v *validator) Validate(claims Claims) error {
 //
 // Additionally, if any error occurs while retrieving the claim, e.g., when its
 // the wrong type, an ErrTokenUnverifiable error will be returned.
-func (v *validator) verifyExpiresAt(claims Claims, cmp time.Time, required bool) error {
+func (v *Validator) verifyExpiresAt(claims Claims, cmp time.Time, required bool) error {
 	exp, err := claims.GetExpirationTime()
 	if err != nil {
 		return err
@@ -170,7 +185,7 @@ func (v *validator) verifyExpiresAt(claims Claims, cmp time.Time, required bool)
 //
 // Additionally, if any error occurs while retrieving the claim, e.g., when its
 // the wrong type, an ErrTokenUnverifiable error will be returned.
-func (v *validator) verifyIssuedAt(claims Claims, cmp time.Time, required bool) error {
+func (v *Validator) verifyIssuedAt(claims Claims, cmp time.Time, required bool) error {
 	iat, err := claims.GetIssuedAt()
 	if err != nil {
 		return err
@@ -191,7 +206,7 @@ func (v *validator) verifyIssuedAt(claims Claims, cmp time.Time, required bool)
 //
 // Additionally, if any error occurs while retrieving the claim, e.g., when its
 // the wrong type, an ErrTokenUnverifiable error will be returned.
-func (v *validator) verifyNotBefore(claims Claims, cmp time.Time, required bool) error {
+func (v *Validator) verifyNotBefore(claims Claims, cmp time.Time, required bool) error {
 	nbf, err := claims.GetNotBefore()
 	if err != nil {
 		return err
@@ -211,7 +226,7 @@ func (v *validator) verifyNotBefore(claims Claims, cmp time.Time, required bool)
 //
 // Additionally, if any error occurs while retrieving the claim, e.g., when its
 // the wrong type, an ErrTokenUnverifiable error will be returned.
-func (v *validator) verifyAudience(claims Claims, cmp string, required bool) error {
+func (v *Validator) verifyAudience(claims Claims, cmp string, required bool) error {
 	aud, err := claims.GetAudience()
 	if err != nil {
 		return err
@@ -247,7 +262,7 @@ func (v *validator) verifyAudience(claims Claims, cmp string, required bool) err
 //
 // Additionally, if any error occurs while retrieving the claim, e.g., when its
 // the wrong type, an ErrTokenUnverifiable error will be returned.
-func (v *validator) verifyIssuer(claims Claims, cmp string, required bool) error {
+func (v *Validator) verifyIssuer(claims Claims, cmp string, required bool) error {
 	iss, err := claims.GetIssuer()
 	if err != nil {
 		return err
@@ -267,7 +282,7 @@ func (v *validator) verifyIssuer(claims Claims, cmp string, required bool) error
 //
 // Additionally, if any error occurs while retrieving the claim, e.g., when its
 // the wrong type, an ErrTokenUnverifiable error will be returned.
-func (v *validator) verifySubject(claims Claims, cmp string, required bool) error {
+func (v *Validator) verifySubject(claims Claims, cmp string, required bool) error {
 	sub, err := claims.GetSubject()
 	if err != nil {
 		return err
diff --git a/vendor/github.com/google/pprof/profile/encode.go b/vendor/github.com/google/pprof/profile/encode.go
index 182c926b908..860bb304c34 100644
--- a/vendor/github.com/google/pprof/profile/encode.go
+++ b/vendor/github.com/google/pprof/profile/encode.go
@@ -530,6 +530,7 @@ func (p *Line) decoder() []decoder {
 func (p *Line) encode(b *buffer) {
 	encodeUint64Opt(b, 1, p.functionIDX)
 	encodeInt64Opt(b, 2, p.Line)
+	encodeInt64Opt(b, 3, p.Column)
 }
 
 var lineDecoder = []decoder{
@@ -538,6 +539,8 @@ var lineDecoder = []decoder{
 	func(b *buffer, m message) error { return decodeUint64(b, &m.(*Line).functionIDX) },
 	// optional int64 line = 2
 	func(b *buffer, m message) error { return decodeInt64(b, &m.(*Line).Line) },
+	// optional int64 column = 3
+	func(b *buffer, m message) error { return decodeInt64(b, &m.(*Line).Column) },
 }
 
 func (p *Function) decoder() []decoder {
diff --git a/vendor/github.com/google/pprof/profile/legacy_java_profile.go b/vendor/github.com/google/pprof/profile/legacy_java_profile.go
index 91f45e53c6c..4580bab1839 100644
--- a/vendor/github.com/google/pprof/profile/legacy_java_profile.go
+++ b/vendor/github.com/google/pprof/profile/legacy_java_profile.go
@@ -56,7 +56,7 @@ func javaCPUProfile(b []byte, period int64, parse func(b []byte) (uint64, []byte
 	}
 
 	// Strip out addresses for better merge.
-	if err = p.Aggregate(true, true, true, true, false); err != nil {
+	if err = p.Aggregate(true, true, true, true, false, false); err != nil {
 		return nil, err
 	}
 
@@ -99,7 +99,7 @@ func parseJavaProfile(b []byte) (*Profile, error) {
 	}
 
 	// Strip out addresses for better merge.
-	if err = p.Aggregate(true, true, true, true, false); err != nil {
+	if err = p.Aggregate(true, true, true, true, false, false); err != nil {
 		return nil, err
 	}
 
diff --git a/vendor/github.com/google/pprof/profile/merge.go b/vendor/github.com/google/pprof/profile/merge.go
index 4b66282cb8e..eee0132e740 100644
--- a/vendor/github.com/google/pprof/profile/merge.go
+++ b/vendor/github.com/google/pprof/profile/merge.go
@@ -326,12 +326,13 @@ func (l *Location) key() locationKey {
 		key.addr -= l.Mapping.Start
 		key.mappingID = l.Mapping.ID
 	}
-	lines := make([]string, len(l.Line)*2)
+	lines := make([]string, len(l.Line)*3)
 	for i, line := range l.Line {
 		if line.Function != nil {
 			lines[i*2] = strconv.FormatUint(line.Function.ID, 16)
 		}
 		lines[i*2+1] = strconv.FormatInt(line.Line, 16)
+		lines[i*2+2] = strconv.FormatInt(line.Column, 16)
 	}
 	key.lines = strings.Join(lines, "|")
 	return key
@@ -418,6 +419,7 @@ func (pm *profileMerger) mapLine(src Line) Line {
 	ln := Line{
 		Function: pm.mapFunction(src.Function),
 		Line:     src.Line,
+		Column:   src.Column,
 	}
 	return ln
 }
diff --git a/vendor/github.com/google/pprof/profile/profile.go b/vendor/github.com/google/pprof/profile/profile.go
index 60ef7e92687..62df80a5563 100644
--- a/vendor/github.com/google/pprof/profile/profile.go
+++ b/vendor/github.com/google/pprof/profile/profile.go
@@ -145,6 +145,7 @@ type Location struct {
 type Line struct {
 	Function *Function
 	Line     int64
+	Column   int64
 
 	functionIDX uint64
 }
@@ -436,7 +437,7 @@ func (p *Profile) CheckValid() error {
 // Aggregate merges the locations in the profile into equivalence
 // classes preserving the request attributes. It also updates the
 // samples to point to the merged locations.
-func (p *Profile) Aggregate(inlineFrame, function, filename, linenumber, address bool) error {
+func (p *Profile) Aggregate(inlineFrame, function, filename, linenumber, columnnumber, address bool) error {
 	for _, m := range p.Mapping {
 		m.HasInlineFrames = m.HasInlineFrames && inlineFrame
 		m.HasFunctions = m.HasFunctions && function
@@ -458,7 +459,7 @@ func (p *Profile) Aggregate(inlineFrame, function, filename, linenumber, address
 	}
 
 	// Aggregate locations
-	if !inlineFrame || !address || !linenumber {
+	if !inlineFrame || !address || !linenumber || !columnnumber {
 		for _, l := range p.Location {
 			if !inlineFrame && len(l.Line) > 1 {
 				l.Line = l.Line[len(l.Line)-1:]
@@ -466,6 +467,12 @@ func (p *Profile) Aggregate(inlineFrame, function, filename, linenumber, address
 			if !linenumber {
 				for i := range l.Line {
 					l.Line[i].Line = 0
+					l.Line[i].Column = 0
+				}
+			}
+			if !columnnumber {
+				for i := range l.Line {
+					l.Line[i].Column = 0
 				}
 			}
 			if !address {
@@ -627,10 +634,11 @@ func (l *Location) string() string {
 	for li := range l.Line {
 		lnStr := "??"
 		if fn := l.Line[li].Function; fn != nil {
-			lnStr = fmt.Sprintf("%s %s:%d s=%d",
+			lnStr = fmt.Sprintf("%s %s:%d:%d s=%d",
 				fn.Name,
 				fn.Filename,
 				l.Line[li].Line,
+				l.Line[li].Column,
 				fn.StartLine)
 			if fn.Name != fn.SystemName {
 				lnStr = lnStr + "(" + fn.SystemName + ")"
diff --git a/vendor/github.com/google/uuid/CHANGELOG.md b/vendor/github.com/google/uuid/CHANGELOG.md
index 7ed347d3ad7..c9fb829dc64 100644
--- a/vendor/github.com/google/uuid/CHANGELOG.md
+++ b/vendor/github.com/google/uuid/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.5.0](https://github.com/google/uuid/compare/v1.4.0...v1.5.0) (2023-12-12)
+
+
+### Features
+
+* Validate UUID without creating new UUID ([#141](https://github.com/google/uuid/issues/141)) ([9ee7366](https://github.com/google/uuid/commit/9ee7366e66c9ad96bab89139418a713dc584ae29))
+
 ## [1.4.0](https://github.com/google/uuid/compare/v1.3.1...v1.4.0) (2023-10-26)
 
 
diff --git a/vendor/github.com/google/uuid/time.go b/vendor/github.com/google/uuid/time.go
index e6ef06cdc87..c351129279f 100644
--- a/vendor/github.com/google/uuid/time.go
+++ b/vendor/github.com/google/uuid/time.go
@@ -108,12 +108,23 @@ func setClockSequence(seq int) {
 }
 
 // Time returns the time in 100s of nanoseconds since 15 Oct 1582 encoded in
-// uuid.  The time is only defined for version 1 and 2 UUIDs.
+// uuid.  The time is only defined for version 1, 2, 6 and 7 UUIDs.
 func (uuid UUID) Time() Time {
-	time := int64(binary.BigEndian.Uint32(uuid[0:4]))
-	time |= int64(binary.BigEndian.Uint16(uuid[4:6])) << 32
-	time |= int64(binary.BigEndian.Uint16(uuid[6:8])&0xfff) << 48
-	return Time(time)
+	var t Time
+	switch uuid.Version() {
+	case 6:
+		time := binary.BigEndian.Uint64(uuid[:8]) // Ignore uuid[6] version b0110
+		t = Time(time)
+	case 7:
+		time := binary.BigEndian.Uint64(uuid[:8])
+		t = Time((time>>16)*10000 + g1582ns100)
+	default: // forward compatible
+		time := int64(binary.BigEndian.Uint32(uuid[0:4]))
+		time |= int64(binary.BigEndian.Uint16(uuid[4:6])) << 32
+		time |= int64(binary.BigEndian.Uint16(uuid[6:8])&0xfff) << 48
+		t = Time(time)
+	}
+	return t
 }
 
 // ClockSequence returns the clock sequence encoded in uuid.
diff --git a/vendor/github.com/google/uuid/uuid.go b/vendor/github.com/google/uuid/uuid.go
index dc75f7d9909..5232b486780 100644
--- a/vendor/github.com/google/uuid/uuid.go
+++ b/vendor/github.com/google/uuid/uuid.go
@@ -186,6 +186,59 @@ func Must(uuid UUID, err error) UUID {
 	return uuid
 }
 
+// Validate returns an error if s is not a properly formatted UUID in one of the following formats:
+//   xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+//   urn:uuid:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+//   xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+//   {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
+// It returns an error if the format is invalid, otherwise nil.
+func Validate(s string) error {
+	switch len(s) {
+	// Standard UUID format
+	case 36:
+
+	// UUID with "urn:uuid:" prefix
+	case 36 + 9:
+		if !strings.EqualFold(s[:9], "urn:uuid:") {
+			return fmt.Errorf("invalid urn prefix: %q", s[:9])
+		}
+		s = s[9:]
+
+	// UUID enclosed in braces
+	case 36 + 2:
+		if s[0] != '{' || s[len(s)-1] != '}' {
+			return fmt.Errorf("invalid bracketed UUID format")
+		}
+		s = s[1 : len(s)-1]
+
+	// UUID without hyphens
+	case 32:
+		for i := 0; i < len(s); i += 2 {
+			_, ok := xtob(s[i], s[i+1])
+			if !ok {
+				return errors.New("invalid UUID format")
+			}
+		}
+
+	default:
+		return invalidLengthError{len(s)}
+	}
+
+	// Check for standard UUID format
+	if len(s) == 36 {
+		if s[8] != '-' || s[13] != '-' || s[18] != '-' || s[23] != '-' {
+			return errors.New("invalid UUID format")
+		}
+		for _, x := range []int{0, 2, 4, 6, 9, 11, 14, 16, 19, 21, 24, 26, 28, 30, 32, 34} {
+			if _, ok := xtob(s[x], s[x+1]); !ok {
+				return errors.New("invalid UUID format")
+			}
+		}
+	}
+
+	return nil
+}
+
 // String returns the string form of uuid, xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
 // , or "" if uuid is invalid.
 func (uuid UUID) String() string {
diff --git a/vendor/github.com/google/uuid/version6.go b/vendor/github.com/google/uuid/version6.go
new file mode 100644
index 00000000000..339a959a7a2
--- /dev/null
+++ b/vendor/github.com/google/uuid/version6.go
@@ -0,0 +1,56 @@
+// Copyright 2023 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import "encoding/binary"
+
+// UUID version 6 is a field-compatible version of UUIDv1, reordered for improved DB locality.
+// It is expected that UUIDv6 will primarily be used in contexts where there are existing v1 UUIDs.
+// Systems that do not involve legacy UUIDv1 SHOULD consider using UUIDv7 instead.
+//
+// see https://datatracker.ietf.org/doc/html/draft-peabody-dispatch-new-uuid-format-03#uuidv6
+//
+// NewV6 returns a Version 6 UUID based on the current NodeID and clock
+// sequence, and the current time. If the NodeID has not been set by SetNodeID
+// or SetNodeInterface then it will be set automatically. If the NodeID cannot
+// be set NewV6 set NodeID is random bits automatically . If clock sequence has not been set by
+// SetClockSequence then it will be set automatically. If GetTime fails to
+// return the current NewV6 returns Nil and an error.
+func NewV6() (UUID, error) {
+	var uuid UUID
+	now, seq, err := GetTime()
+	if err != nil {
+		return uuid, err
+	}
+
+	/*
+	    0                   1                   2                   3
+	    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |                           time_high                           |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |           time_mid            |      time_low_and_version     |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |clk_seq_hi_res |  clk_seq_low  |         node (0-1)            |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	   |                         node (2-5)                            |
+	   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	*/
+
+	binary.BigEndian.PutUint64(uuid[0:], uint64(now))
+	binary.BigEndian.PutUint16(uuid[8:], seq)
+
+	uuid[6] = 0x60 | (uuid[6] & 0x0F)
+	uuid[8] = 0x80 | (uuid[8] & 0x3F)
+
+	nodeMu.Lock()
+	if nodeID == zeroID {
+		setNodeInterface("")
+	}
+	copy(uuid[10:], nodeID[:])
+	nodeMu.Unlock()
+
+	return uuid, nil
+}
diff --git a/vendor/github.com/google/uuid/version7.go b/vendor/github.com/google/uuid/version7.go
new file mode 100644
index 00000000000..ba9dd5eb689
--- /dev/null
+++ b/vendor/github.com/google/uuid/version7.go
@@ -0,0 +1,75 @@
+// Copyright 2023 Google Inc.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package uuid
+
+import (
+	"io"
+)
+
+// UUID version 7 features a time-ordered value field derived from the widely
+// implemented and well known Unix Epoch timestamp source,
+// the number of milliseconds seconds since midnight 1 Jan 1970 UTC, leap seconds excluded.
+// As well as improved entropy characteristics over versions 1 or 6.
+//
+// see https://datatracker.ietf.org/doc/html/draft-peabody-dispatch-new-uuid-format-03#name-uuid-version-7
+//
+// Implementations SHOULD utilize UUID version 7 over UUID version 1 and 6 if possible.
+//
+// NewV7 returns a Version 7 UUID based on the current time(Unix Epoch).
+// Uses the randomness pool if it was enabled with EnableRandPool.
+// On error, NewV7 returns Nil and an error
+func NewV7() (UUID, error) {
+	uuid, err := NewRandom()
+	if err != nil {
+		return uuid, err
+	}
+	makeV7(uuid[:])
+	return uuid, nil
+}
+
+// NewV7FromReader returns a Version 7 UUID based on the current time(Unix Epoch).
+// it use NewRandomFromReader fill random bits.
+// On error, NewV7FromReader returns Nil and an error.
+func NewV7FromReader(r io.Reader) (UUID, error) {
+	uuid, err := NewRandomFromReader(r)
+	if err != nil {
+		return uuid, err
+	}
+
+	makeV7(uuid[:])
+	return uuid, nil
+}
+
+// makeV7 fill 48 bits time (uuid[0] - uuid[5]), set version b0111 (uuid[6])
+// uuid[8] already has the right version number (Variant is 10)
+// see function  NewV7 and NewV7FromReader
+func makeV7(uuid []byte) {
+	/*
+		 0                   1                   2                   3
+		 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+		+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+		|                           unix_ts_ms                          |
+		+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+		|          unix_ts_ms           |  ver  |       rand_a          |
+		+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+		|var|                        rand_b                             |
+		+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+		|                            rand_b                             |
+		+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+	*/
+	_ = uuid[15] // bounds check
+
+	t := timeNow().UnixMilli()
+
+	uuid[0] = byte(t >> 40)
+	uuid[1] = byte(t >> 32)
+	uuid[2] = byte(t >> 24)
+	uuid[3] = byte(t >> 16)
+	uuid[4] = byte(t >> 8)
+	uuid[5] = byte(t)
+
+	uuid[6] = 0x70 | (uuid[6] & 0x0F)
+	// uuid[8] has already has right version
+}
diff --git a/vendor/github.com/hashicorp/consul/api/.copywrite.hcl b/vendor/github.com/hashicorp/consul/api/.copywrite.hcl
index 34d99ba25e1..7e4c0b58a8a 100644
--- a/vendor/github.com/hashicorp/consul/api/.copywrite.hcl
+++ b/vendor/github.com/hashicorp/consul/api/.copywrite.hcl
@@ -2,7 +2,7 @@ schema_version = 1
 
 project {
   license		= "MPL-2.0"
-  copyright_year	= 2023
+  copyright_year	= 2024
 
   header_ignore		= []
 }
diff --git a/vendor/github.com/hashicorp/consul/api/acl.go b/vendor/github.com/hashicorp/consul/api/acl.go
index 47b38eb6ca6..f95e597af48 100644
--- a/vendor/github.com/hashicorp/consul/api/acl.go
+++ b/vendor/github.com/hashicorp/consul/api/acl.go
@@ -26,6 +26,8 @@ const (
 	ACLTemplatedPolicyDNSName              = "builtin/dns"
 	ACLTemplatedPolicyNomadServerName      = "builtin/nomad-server"
 	ACLTemplatedPolicyWorkloadIdentityName = "builtin/workload-identity"
+	ACLTemplatedPolicyAPIGatewayName       = "builtin/api-gateway"
+	ACLTemplatedPolicyNomadClientName      = "builtin/nomad-client"
 )
 
 type ACLLink struct {
@@ -172,6 +174,7 @@ type ACLTemplatedPolicyResponse struct {
 	TemplateName string
 	Schema       string
 	Template     string
+	Description  string
 }
 
 type ACLTemplatedPolicyVariables struct {
diff --git a/vendor/github.com/hashicorp/consul/api/config_entry.go b/vendor/github.com/hashicorp/consul/api/config_entry.go
index b59c20fd300..ffc18a85ed5 100644
--- a/vendor/github.com/hashicorp/consul/api/config_entry.go
+++ b/vendor/github.com/hashicorp/consul/api/config_entry.go
@@ -341,6 +341,7 @@ type InstanceLevelRateLimits struct {
 	RequestsMaxBurst int `alias:"requests_max_burst"`
 
 	// Routes is a list of rate limits applied to specific routes.
+	// For a given request, the first matching route will be applied, if any
 	// Overrides any top-level configuration.
 	Routes []InstanceLevelRouteRateLimits
 }
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/client.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/client.go
index f609ccfe1ea..917bb513abc 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/client.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/client.go
@@ -65,7 +65,7 @@ type Client struct {
 	applicationVersion      string
 	userAgent               string
 	debugWriter             io.Writer
-	instrumentationRegistry *prometheus.Registry
+	instrumentationRegistry prometheus.Registerer
 
 	Action           ActionClient
 	Certificate      CertificateClient
@@ -163,7 +163,7 @@ func WithHTTPClient(httpClient *http.Client) ClientOption {
 }
 
 // WithInstrumentation configures a Client to collect metrics about the performed HTTP requests.
-func WithInstrumentation(registry *prometheus.Registry) ClientOption {
+func WithInstrumentation(registry prometheus.Registerer) ClientOption {
 	return func(client *Client) {
 		client.instrumentationRegistry = registry
 	}
@@ -286,8 +286,8 @@ func (c *Client) Do(r *http.Request, v interface{}) (*Response, error) {
 			return response, fmt.Errorf("hcloud: error reading response meta data: %s", err)
 		}
 
-		if resp.StatusCode >= 400 && resp.StatusCode <= 599 {
-			err = errorFromResponse(resp, body)
+		if response.StatusCode >= 400 && response.StatusCode <= 599 {
+			err = errorFromResponse(response, body)
 			if err == nil {
 				err = fmt.Errorf("hcloud: server responded with status code %d", resp.StatusCode)
 			} else if IsError(err, ErrorCodeConflict) {
@@ -359,7 +359,7 @@ func dumpRequest(r *http.Request) ([]byte, error) {
 	return dumpReq, nil
 }
 
-func errorFromResponse(resp *http.Response, body []byte) error {
+func errorFromResponse(resp *Response, body []byte) error {
 	if !strings.HasPrefix(resp.Header.Get("Content-Type"), "application/json") {
 		return nil
 	}
@@ -371,7 +371,10 @@ func errorFromResponse(resp *http.Response, body []byte) error {
 	if respBody.Error.Code == "" && respBody.Error.Message == "" {
 		return nil
 	}
-	return ErrorFromSchema(respBody.Error)
+
+	hcErr := ErrorFromSchema(respBody.Error)
+	hcErr.response = resp
+	return hcErr
 }
 
 // Response represents a response from the API. It embeds http.Response.
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/datacenter.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/datacenter.go
index b1fc1c1e4ca..42c443da311 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/datacenter.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/datacenter.go
@@ -20,8 +20,9 @@ type Datacenter struct {
 
 // DatacenterServerTypes represents the server types available and supported in a datacenter.
 type DatacenterServerTypes struct {
-	Supported []*ServerType
-	Available []*ServerType
+	Supported             []*ServerType
+	AvailableForMigration []*ServerType
+	Available             []*ServerType
 }
 
 // DatacenterClient is a client for the datacenter API.
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/error.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/error.go
index ac689d11048..653043e6dac 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/error.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/error.go
@@ -94,12 +94,19 @@ type Error struct {
 	Code    ErrorCode
 	Message string
 	Details interface{}
+
+	response *Response
 }
 
 func (e Error) Error() string {
 	return fmt.Sprintf("%s (%s)", e.Message, e.Code)
 }
 
+// Response returns the [Response] that contained the error if available.
+func (e Error) Response() *Response {
+	return e.response
+}
+
 // ErrorDetailsInvalidInput contains the details of an 'invalid_input' error.
 type ErrorDetailsInvalidInput struct {
 	Fields []ErrorDetailsInvalidInputField
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/hcloud.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/hcloud.go
index 3d31d3251da..fe8550bf791 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/hcloud.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/hcloud.go
@@ -2,4 +2,4 @@
 package hcloud
 
 // Version is the library's version following Semantic Versioning.
-const Version = "2.4.0" // x-release-please-version
+const Version = "2.6.0" // x-release-please-version
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/interface_gen.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/interface_gen.go
new file mode 100644
index 00000000000..d367899dd39
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/interface_gen.go
@@ -0,0 +1,22 @@
+package hcloud
+
+//go:generate go run github.com/vburenin/ifacemaker -f action.go -s ActionClient -i IActionClient -p hcloud -o zz_action_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f action.go -s ResourceActionClient -i IResourceActionClient -p hcloud -o zz_resource_action_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f datacenter.go -s DatacenterClient -i IDatacenterClient -p hcloud -o zz_datacenter_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f floating_ip.go -s FloatingIPClient -i IFloatingIPClient -p hcloud -o zz_floating_ip_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f image.go -s ImageClient -i IImageClient -p hcloud -o zz_image_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f iso.go -s ISOClient -i IISOClient -p hcloud -o zz_iso_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f location.go -s LocationClient -i ILocationClient -p hcloud -o zz_location_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f network.go -s NetworkClient -i INetworkClient -p hcloud -o zz_network_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f pricing.go -s PricingClient -i IPricingClient -p hcloud -o zz_pricing_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f server.go -s ServerClient -i IServerClient -p hcloud -o zz_server_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f server_type.go -s ServerTypeClient -i IServerTypeClient -p hcloud -o zz_server_type_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f ssh_key.go -s SSHKeyClient -i ISSHKeyClient -p hcloud -o zz_ssh_key_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f volume.go -s VolumeClient -i IVolumeClient -p hcloud -o zz_volume_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f load_balancer.go -s LoadBalancerClient -i ILoadBalancerClient -p hcloud -o zz_load_balancer_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f load_balancer_type.go -s LoadBalancerTypeClient -i ILoadBalancerTypeClient -p hcloud -o zz_load_balancer_type_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f certificate.go -s CertificateClient -i ICertificateClient -p hcloud -o zz_certificate_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f firewall.go -s FirewallClient -i IFirewallClient -p hcloud -o zz_firewall_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f placement_group.go -s PlacementGroupClient -i IPlacementGroupClient -p hcloud -o zz_placement_group_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f rdns.go -s RDNSClient -i IRDNSClient -p hcloud -o zz_rdns_client_iface.go
+//go:generate go run github.com/vburenin/ifacemaker -f primary_ip.go -s PrimaryIPClient -i IPrimaryIPClient -p hcloud -o zz_primary_ip_client_iface.go
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/internal/instrumentation/metrics.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/internal/instrumentation/metrics.go
index aa57c7107c0..e52bd606a13 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/internal/instrumentation/metrics.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/internal/instrumentation/metrics.go
@@ -13,11 +13,11 @@ import (
 
 type Instrumenter struct {
 	subsystemIdentifier     string // will be used as part of the metric name (hcloud_<identifier>_requests_total)
-	instrumentationRegistry *prometheus.Registry
+	instrumentationRegistry prometheus.Registerer
 }
 
 // New creates a new Instrumenter. The subsystemIdentifier will be used as part of the metric names (e.g. hcloud_<identifier>_requests_total).
-func New(subsystemIdentifier string, instrumentationRegistry *prometheus.Registry) *Instrumenter {
+func New(subsystemIdentifier string, instrumentationRegistry prometheus.Registerer) *Instrumenter {
 	return &Instrumenter{subsystemIdentifier: subsystemIdentifier, instrumentationRegistry: instrumentationRegistry}
 }
 
@@ -84,7 +84,7 @@ func (i *Instrumenter) instrumentRoundTripperEndpoint(counter *prometheus.Counte
 // registerOrReuse will try to register the passed Collector, but in case a conflicting collector was already registered,
 // it will instead return that collector. Make sure to always use the collector return by this method.
 // Similar to [Registry.MustRegister] it will panic if any other error occurs.
-func registerOrReuse[C prometheus.Collector](registry *prometheus.Registry, collector C) C {
+func registerOrReuse[C prometheus.Collector](registry prometheus.Registerer, collector C) C {
 	err := registry.Register(collector)
 	if err != nil {
 		// If we get a AlreadyRegisteredError we can return the existing collector
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/load_balancer_type.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/load_balancer_type.go
index 40e37913ccb..60502127633 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/load_balancer_type.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/load_balancer_type.go
@@ -19,6 +19,7 @@ type LoadBalancerType struct {
 	MaxTargets              int
 	MaxAssignedCertificates int
 	Pricings                []LoadBalancerTypeLocationPricing
+	Deprecated              *string
 }
 
 // LoadBalancerTypeClient is a client for the Load Balancer types API.
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema.go
index b7f046f09ce..097b282ce3b 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema.go
@@ -1,1271 +1,370 @@
 package hcloud
 
 import (
-	"fmt"
-	"net"
-	"strconv"
-	"time"
-
 	"github.com/hetznercloud/hcloud-go/v2/hcloud/schema"
 )
 
 // This file provides converter functions to convert models in the
 // schema package to models in the hcloud package and vice versa.
 
+var c converter
+
 // ActionFromSchema converts a schema.Action to an Action.
 func ActionFromSchema(s schema.Action) *Action {
-	action := &Action{
-		ID:        s.ID,
-		Status:    ActionStatus(s.Status),
-		Command:   s.Command,
-		Progress:  s.Progress,
-		Started:   s.Started,
-		Resources: []*ActionResource{},
-	}
-	if s.Finished != nil {
-		action.Finished = *s.Finished
-	}
-	if s.Error != nil {
-		action.ErrorCode = s.Error.Code
-		action.ErrorMessage = s.Error.Message
-	}
-	for _, r := range s.Resources {
-		action.Resources = append(action.Resources, &ActionResource{
-			ID:   r.ID,
-			Type: ActionResourceType(r.Type),
-		})
-	}
-	return action
+	return c.ActionFromSchema(s)
+}
+
+// SchemaFromAction converts an Action to a schema.Action.
+func SchemaFromAction(a *Action) schema.Action {
+	return c.SchemaFromAction(a)
 }
 
 // ActionsFromSchema converts a slice of schema.Action to a slice of Action.
 func ActionsFromSchema(s []schema.Action) []*Action {
-	actions := make([]*Action, len(s))
-	for i, a := range s {
-		actions[i] = ActionFromSchema(a)
-	}
-	return actions
+	return c.ActionsFromSchema(s)
+}
+
+// SchemaFromActions converts a slice of Action to a slice of schema.Action.
+func SchemaFromActions(a []*Action) []schema.Action {
+	return c.SchemaFromActions(a)
 }
 
 // FloatingIPFromSchema converts a schema.FloatingIP to a FloatingIP.
 func FloatingIPFromSchema(s schema.FloatingIP) *FloatingIP {
-	f := &FloatingIP{
-		ID:           s.ID,
-		Type:         FloatingIPType(s.Type),
-		HomeLocation: LocationFromSchema(s.HomeLocation),
-		Created:      s.Created,
-		Blocked:      s.Blocked,
-		Protection: FloatingIPProtection{
-			Delete: s.Protection.Delete,
-		},
-		Name: s.Name,
-	}
-	if s.Description != nil {
-		f.Description = *s.Description
-	}
-	if s.Server != nil {
-		f.Server = &Server{ID: *s.Server}
-	}
-	if f.Type == FloatingIPTypeIPv4 {
-		f.IP = net.ParseIP(s.IP)
-	} else {
-		f.IP, f.Network, _ = net.ParseCIDR(s.IP)
-	}
-	f.DNSPtr = map[string]string{}
-	for _, entry := range s.DNSPtr {
-		f.DNSPtr[entry.IP] = entry.DNSPtr
-	}
-	f.Labels = map[string]string{}
-	for key, value := range s.Labels {
-		f.Labels[key] = value
-	}
-	return f
+	return c.FloatingIPFromSchema(s)
+}
+
+// SchemaFromFloatingIP converts a FloatingIP to a schema.FloatingIP.
+func SchemaFromFloatingIP(f *FloatingIP) schema.FloatingIP {
+	return c.SchemaFromFloatingIP(f)
 }
 
 // PrimaryIPFromSchema converts a schema.PrimaryIP to a PrimaryIP.
 func PrimaryIPFromSchema(s schema.PrimaryIP) *PrimaryIP {
-	f := &PrimaryIP{
-		ID:         s.ID,
-		Type:       PrimaryIPType(s.Type),
-		AutoDelete: s.AutoDelete,
-
-		Created: s.Created,
-		Blocked: s.Blocked,
-		Protection: PrimaryIPProtection{
-			Delete: s.Protection.Delete,
-		},
-		Name:         s.Name,
-		AssigneeType: s.AssigneeType,
-		AssigneeID:   s.AssigneeID,
-		Datacenter:   DatacenterFromSchema(s.Datacenter),
-	}
-
-	if f.Type == PrimaryIPTypeIPv4 {
-		f.IP = net.ParseIP(s.IP)
-	} else {
-		f.IP, f.Network, _ = net.ParseCIDR(s.IP)
-	}
-	f.DNSPtr = map[string]string{}
-	for _, entry := range s.DNSPtr {
-		f.DNSPtr[entry.IP] = entry.DNSPtr
-	}
-	f.Labels = map[string]string{}
-	for key, value := range s.Labels {
-		f.Labels[key] = value
-	}
-	return f
+	return c.PrimaryIPFromSchema(s)
+}
+
+// SchemaFromPrimaryIP converts a PrimaryIP to a schema.PrimaryIP.
+func SchemaFromPrimaryIP(p *PrimaryIP) schema.PrimaryIP {
+	return c.SchemaFromPrimaryIP(p)
 }
 
 // ISOFromSchema converts a schema.ISO to an ISO.
 func ISOFromSchema(s schema.ISO) *ISO {
-	iso := &ISO{
-		ID:          s.ID,
-		Name:        s.Name,
-		Description: s.Description,
-		Type:        ISOType(s.Type),
-		Deprecated:  s.Deprecated,
-		DeprecatableResource: DeprecatableResource{
-			DeprecationFromSchema(s.Deprecation),
-		},
-	}
-	if s.Architecture != nil {
-		iso.Architecture = Ptr(Architecture(*s.Architecture))
-	}
-	return iso
+	return c.ISOFromSchema(s)
+}
+
+// SchemaFromISO converts an ISO to a schema.ISO.
+func SchemaFromISO(i *ISO) schema.ISO {
+	return c.SchemaFromISO(i)
 }
 
 // LocationFromSchema converts a schema.Location to a Location.
 func LocationFromSchema(s schema.Location) *Location {
-	return &Location{
-		ID:          s.ID,
-		Name:        s.Name,
-		Description: s.Description,
-		Country:     s.Country,
-		City:        s.City,
-		Latitude:    s.Latitude,
-		Longitude:   s.Longitude,
-		NetworkZone: NetworkZone(s.NetworkZone),
-	}
+	return c.LocationFromSchema(s)
+}
+
+// SchemaFromLocation converts a Location to a schema.Location.
+func SchemaFromLocation(l *Location) schema.Location {
+	return c.SchemaFromLocation(l)
 }
 
 // DatacenterFromSchema converts a schema.Datacenter to a Datacenter.
 func DatacenterFromSchema(s schema.Datacenter) *Datacenter {
-	d := &Datacenter{
-		ID:          s.ID,
-		Name:        s.Name,
-		Description: s.Description,
-		Location:    LocationFromSchema(s.Location),
-		ServerTypes: DatacenterServerTypes{
-			Available: []*ServerType{},
-			Supported: []*ServerType{},
-		},
-	}
-	for _, t := range s.ServerTypes.Available {
-		d.ServerTypes.Available = append(d.ServerTypes.Available, &ServerType{ID: t})
-	}
-	for _, t := range s.ServerTypes.Supported {
-		d.ServerTypes.Supported = append(d.ServerTypes.Supported, &ServerType{ID: t})
-	}
-	return d
+	return c.DatacenterFromSchema(s)
+}
+
+// SchemaFromDatacenter converts a Datacenter to a schema.Datacenter.
+func SchemaFromDatacenter(d *Datacenter) schema.Datacenter {
+	return c.SchemaFromDatacenter(d)
 }
 
 // ServerFromSchema converts a schema.Server to a Server.
 func ServerFromSchema(s schema.Server) *Server {
-	server := &Server{
-		ID:              s.ID,
-		Name:            s.Name,
-		Status:          ServerStatus(s.Status),
-		Created:         s.Created,
-		PublicNet:       ServerPublicNetFromSchema(s.PublicNet),
-		ServerType:      ServerTypeFromSchema(s.ServerType),
-		IncludedTraffic: s.IncludedTraffic,
-		RescueEnabled:   s.RescueEnabled,
-		Datacenter:      DatacenterFromSchema(s.Datacenter),
-		Locked:          s.Locked,
-		PrimaryDiskSize: s.PrimaryDiskSize,
-		Protection: ServerProtection{
-			Delete:  s.Protection.Delete,
-			Rebuild: s.Protection.Rebuild,
-		},
-	}
-	if s.Image != nil {
-		server.Image = ImageFromSchema(*s.Image)
-	}
-	if s.BackupWindow != nil {
-		server.BackupWindow = *s.BackupWindow
-	}
-	if s.OutgoingTraffic != nil {
-		server.OutgoingTraffic = *s.OutgoingTraffic
-	}
-	if s.IngoingTraffic != nil {
-		server.IngoingTraffic = *s.IngoingTraffic
-	}
-	if s.ISO != nil {
-		server.ISO = ISOFromSchema(*s.ISO)
-	}
-	server.Labels = map[string]string{}
-	for key, value := range s.Labels {
-		server.Labels[key] = value
-	}
-	for _, id := range s.Volumes {
-		server.Volumes = append(server.Volumes, &Volume{ID: id})
-	}
-	for _, privNet := range s.PrivateNet {
-		server.PrivateNet = append(server.PrivateNet, ServerPrivateNetFromSchema(privNet))
-	}
-	if s.PlacementGroup != nil {
-		server.PlacementGroup = PlacementGroupFromSchema(*s.PlacementGroup)
-	}
-	return server
+	return c.ServerFromSchema(s)
+}
+
+// SchemaFromServer converts a Server to a schema.Server.
+func SchemaFromServer(s *Server) schema.Server {
+	return c.SchemaFromServer(s)
 }
 
 // ServerPublicNetFromSchema converts a schema.ServerPublicNet to a ServerPublicNet.
 func ServerPublicNetFromSchema(s schema.ServerPublicNet) ServerPublicNet {
-	publicNet := ServerPublicNet{
-		IPv4: ServerPublicNetIPv4FromSchema(s.IPv4),
-		IPv6: ServerPublicNetIPv6FromSchema(s.IPv6),
-	}
-	for _, id := range s.FloatingIPs {
-		publicNet.FloatingIPs = append(publicNet.FloatingIPs, &FloatingIP{ID: id})
-	}
-	for _, fw := range s.Firewalls {
-		publicNet.Firewalls = append(publicNet.Firewalls,
-			&ServerFirewallStatus{
-				Firewall: Firewall{ID: fw.ID},
-				Status:   FirewallStatus(fw.Status)},
-		)
-	}
-	return publicNet
+	return c.ServerPublicNetFromSchema(s)
+}
+
+// SchemaFromServerPublicNet converts a ServerPublicNet to a schema.ServerPublicNet.
+func SchemaFromServerPublicNet(s ServerPublicNet) schema.ServerPublicNet {
+	return c.SchemaFromServerPublicNet(s)
 }
 
 // ServerPublicNetIPv4FromSchema converts a schema.ServerPublicNetIPv4 to
 // a ServerPublicNetIPv4.
 func ServerPublicNetIPv4FromSchema(s schema.ServerPublicNetIPv4) ServerPublicNetIPv4 {
-	return ServerPublicNetIPv4{
-		ID:      s.ID,
-		IP:      net.ParseIP(s.IP),
-		Blocked: s.Blocked,
-		DNSPtr:  s.DNSPtr,
-	}
+	return c.ServerPublicNetIPv4FromSchema(s)
+}
+
+// SchemaFromServerPublicNetIPv4 converts a ServerPublicNetIPv4 to
+// a schema.ServerPublicNetIPv4.
+func SchemaFromServerPublicNetIPv4(s ServerPublicNetIPv4) schema.ServerPublicNetIPv4 {
+	return c.SchemaFromServerPublicNetIPv4(s)
 }
 
 // ServerPublicNetIPv6FromSchema converts a schema.ServerPublicNetIPv6 to
 // a ServerPublicNetIPv6.
 func ServerPublicNetIPv6FromSchema(s schema.ServerPublicNetIPv6) ServerPublicNetIPv6 {
-	ipv6 := ServerPublicNetIPv6{
-		ID:      s.ID,
-		Blocked: s.Blocked,
-		DNSPtr:  map[string]string{},
-	}
-	ipv6.IP, ipv6.Network, _ = net.ParseCIDR(s.IP)
+	return c.ServerPublicNetIPv6FromSchema(s)
+}
 
-	for _, dnsPtr := range s.DNSPtr {
-		ipv6.DNSPtr[dnsPtr.IP] = dnsPtr.DNSPtr
-	}
-	return ipv6
+// SchemaFromServerPublicNetIPv6 converts a ServerPublicNetIPv6 to
+// a schema.ServerPublicNetIPv6.
+func SchemaFromServerPublicNetIPv6(s ServerPublicNetIPv6) schema.ServerPublicNetIPv6 {
+	return c.SchemaFromServerPublicNetIPv6(s)
 }
 
 // ServerPrivateNetFromSchema converts a schema.ServerPrivateNet to a ServerPrivateNet.
 func ServerPrivateNetFromSchema(s schema.ServerPrivateNet) ServerPrivateNet {
-	n := ServerPrivateNet{
-		Network:    &Network{ID: s.Network},
-		IP:         net.ParseIP(s.IP),
-		MACAddress: s.MACAddress,
-	}
-	for _, ip := range s.AliasIPs {
-		n.Aliases = append(n.Aliases, net.ParseIP(ip))
-	}
-	return n
+	return c.ServerPrivateNetFromSchema(s)
+}
+
+// SchemaFromServerPrivateNet converts a ServerPrivateNet to a schema.ServerPrivateNet.
+func SchemaFromServerPrivateNet(s ServerPrivateNet) schema.ServerPrivateNet {
+	return c.SchemaFromServerPrivateNet(s)
 }
 
 // ServerTypeFromSchema converts a schema.ServerType to a ServerType.
 func ServerTypeFromSchema(s schema.ServerType) *ServerType {
-	st := &ServerType{
-		ID:              s.ID,
-		Name:            s.Name,
-		Description:     s.Description,
-		Cores:           s.Cores,
-		Memory:          s.Memory,
-		Disk:            s.Disk,
-		StorageType:     StorageType(s.StorageType),
-		CPUType:         CPUType(s.CPUType),
-		Architecture:    Architecture(s.Architecture),
-		IncludedTraffic: s.IncludedTraffic,
-		DeprecatableResource: DeprecatableResource{
-			DeprecationFromSchema(s.Deprecation),
-		},
-	}
-	for _, price := range s.Prices {
-		st.Pricings = append(st.Pricings, ServerTypeLocationPricing{
-			Location: &Location{Name: price.Location},
-			Hourly: Price{
-				Net:   price.PriceHourly.Net,
-				Gross: price.PriceHourly.Gross,
-			},
-			Monthly: Price{
-				Net:   price.PriceMonthly.Net,
-				Gross: price.PriceMonthly.Gross,
-			},
-		})
-	}
-
-	return st
+	return c.ServerTypeFromSchema(s)
+}
+
+// SchemaFromServerType converts a ServerType to a schema.ServerType.
+func SchemaFromServerType(s *ServerType) schema.ServerType {
+	return c.SchemaFromServerType(s)
 }
 
 // SSHKeyFromSchema converts a schema.SSHKey to a SSHKey.
 func SSHKeyFromSchema(s schema.SSHKey) *SSHKey {
-	sshKey := &SSHKey{
-		ID:          s.ID,
-		Name:        s.Name,
-		Fingerprint: s.Fingerprint,
-		PublicKey:   s.PublicKey,
-		Created:     s.Created,
-	}
-	sshKey.Labels = map[string]string{}
-	for key, value := range s.Labels {
-		sshKey.Labels[key] = value
-	}
-	return sshKey
+	return c.SSHKeyFromSchema(s)
+}
+
+// SchemaFromSSHKey converts a SSHKey to a schema.SSHKey.
+func SchemaFromSSHKey(s *SSHKey) schema.SSHKey {
+	return c.SchemaFromSSHKey(s)
 }
 
 // ImageFromSchema converts a schema.Image to an Image.
 func ImageFromSchema(s schema.Image) *Image {
-	i := &Image{
-		ID:           s.ID,
-		Type:         ImageType(s.Type),
-		Status:       ImageStatus(s.Status),
-		Description:  s.Description,
-		DiskSize:     s.DiskSize,
-		Created:      s.Created,
-		RapidDeploy:  s.RapidDeploy,
-		OSFlavor:     s.OSFlavor,
-		Architecture: Architecture(s.Architecture),
-		Protection: ImageProtection{
-			Delete: s.Protection.Delete,
-		},
-		Deprecated: s.Deprecated,
-		Deleted:    s.Deleted,
-	}
-	if s.Name != nil {
-		i.Name = *s.Name
-	}
-	if s.ImageSize != nil {
-		i.ImageSize = *s.ImageSize
-	}
-	if s.OSVersion != nil {
-		i.OSVersion = *s.OSVersion
-	}
-	if s.CreatedFrom != nil {
-		i.CreatedFrom = &Server{
-			ID:   s.CreatedFrom.ID,
-			Name: s.CreatedFrom.Name,
-		}
-	}
-	if s.BoundTo != nil {
-		i.BoundTo = &Server{
-			ID: *s.BoundTo,
-		}
-	}
-	i.Labels = map[string]string{}
-	for key, value := range s.Labels {
-		i.Labels[key] = value
-	}
-	return i
+	return c.ImageFromSchema(s)
+}
+
+// SchemaFromImage converts an Image to a schema.Image.
+func SchemaFromImage(i *Image) schema.Image {
+	return c.SchemaFromImage(i)
 }
 
 // VolumeFromSchema converts a schema.Volume to a Volume.
 func VolumeFromSchema(s schema.Volume) *Volume {
-	v := &Volume{
-		ID:          s.ID,
-		Name:        s.Name,
-		Location:    LocationFromSchema(s.Location),
-		Size:        s.Size,
-		Status:      VolumeStatus(s.Status),
-		LinuxDevice: s.LinuxDevice,
-		Protection: VolumeProtection{
-			Delete: s.Protection.Delete,
-		},
-		Created: s.Created,
-	}
-	if s.Server != nil {
-		v.Server = &Server{ID: *s.Server}
-	}
-	v.Labels = map[string]string{}
-	for key, value := range s.Labels {
-		v.Labels[key] = value
-	}
-	return v
+	return c.VolumeFromSchema(s)
+}
+
+// SchemaFromVolume converts a Volume to a schema.Volume.
+func SchemaFromVolume(v *Volume) schema.Volume {
+	return c.SchemaFromVolume(v)
 }
 
 // NetworkFromSchema converts a schema.Network to a Network.
 func NetworkFromSchema(s schema.Network) *Network {
-	n := &Network{
-		ID:      s.ID,
-		Name:    s.Name,
-		Created: s.Created,
-		Protection: NetworkProtection{
-			Delete: s.Protection.Delete,
-		},
-		Labels:                map[string]string{},
-		ExposeRoutesToVSwitch: s.ExposeRoutesToVSwitch,
-	}
-
-	_, n.IPRange, _ = net.ParseCIDR(s.IPRange)
-
-	for _, subnet := range s.Subnets {
-		n.Subnets = append(n.Subnets, NetworkSubnetFromSchema(subnet))
-	}
-	for _, route := range s.Routes {
-		n.Routes = append(n.Routes, NetworkRouteFromSchema(route))
-	}
-	for _, serverID := range s.Servers {
-		n.Servers = append(n.Servers, &Server{ID: serverID})
-	}
-	for key, value := range s.Labels {
-		n.Labels[key] = value
-	}
-
-	return n
+	return c.NetworkFromSchema(s)
+}
+
+// SchemaFromNetwork converts a Network to a schema.Network.
+func SchemaFromNetwork(n *Network) schema.Network {
+	return c.SchemaFromNetwork(n)
 }
 
 // NetworkSubnetFromSchema converts a schema.NetworkSubnet to a NetworkSubnet.
 func NetworkSubnetFromSchema(s schema.NetworkSubnet) NetworkSubnet {
-	sn := NetworkSubnet{
-		Type:        NetworkSubnetType(s.Type),
-		NetworkZone: NetworkZone(s.NetworkZone),
-		Gateway:     net.ParseIP(s.Gateway),
-		VSwitchID:   s.VSwitchID,
-	}
-	_, sn.IPRange, _ = net.ParseCIDR(s.IPRange)
-	return sn
+	return c.NetworkSubnetFromSchema(s)
+}
+
+// SchemaFromNetworkSubnet converts a NetworkSubnet to a schema.NetworkSubnet.
+func SchemaFromNetworkSubnet(n NetworkSubnet) schema.NetworkSubnet {
+	return c.SchemaFromNetworkSubnet(n)
 }
 
 // NetworkRouteFromSchema converts a schema.NetworkRoute to a NetworkRoute.
 func NetworkRouteFromSchema(s schema.NetworkRoute) NetworkRoute {
-	r := NetworkRoute{
-		Gateway: net.ParseIP(s.Gateway),
-	}
-	_, r.Destination, _ = net.ParseCIDR(s.Destination)
-	return r
+	return c.NetworkRouteFromSchema(s)
+}
+
+// SchemaFromNetworkRoute converts a NetworkRoute to a schema.NetworkRoute.
+func SchemaFromNetworkRoute(n NetworkRoute) schema.NetworkRoute {
+	return c.SchemaFromNetworkRoute(n)
 }
 
 // LoadBalancerTypeFromSchema converts a schema.LoadBalancerType to a LoadBalancerType.
 func LoadBalancerTypeFromSchema(s schema.LoadBalancerType) *LoadBalancerType {
-	lt := &LoadBalancerType{
-		ID:                      s.ID,
-		Name:                    s.Name,
-		Description:             s.Description,
-		MaxConnections:          s.MaxConnections,
-		MaxServices:             s.MaxServices,
-		MaxTargets:              s.MaxTargets,
-		MaxAssignedCertificates: s.MaxAssignedCertificates,
-	}
-	for _, price := range s.Prices {
-		lt.Pricings = append(lt.Pricings, LoadBalancerTypeLocationPricing{
-			Location: &Location{Name: price.Location},
-			Hourly: Price{
-				Net:   price.PriceHourly.Net,
-				Gross: price.PriceHourly.Gross,
-			},
-			Monthly: Price{
-				Net:   price.PriceMonthly.Net,
-				Gross: price.PriceMonthly.Gross,
-			},
-		})
-	}
-	return lt
+	return c.LoadBalancerTypeFromSchema(s)
+}
+
+// SchemaFromLoadBalancerType converts a LoadBalancerType to a schema.LoadBalancerType.
+func SchemaFromLoadBalancerType(l *LoadBalancerType) schema.LoadBalancerType {
+	return c.SchemaFromLoadBalancerType(l)
 }
 
 // LoadBalancerFromSchema converts a schema.LoadBalancer to a LoadBalancer.
 func LoadBalancerFromSchema(s schema.LoadBalancer) *LoadBalancer {
-	l := &LoadBalancer{
-		ID:   s.ID,
-		Name: s.Name,
-		PublicNet: LoadBalancerPublicNet{
-			Enabled: s.PublicNet.Enabled,
-			IPv4: LoadBalancerPublicNetIPv4{
-				IP:     net.ParseIP(s.PublicNet.IPv4.IP),
-				DNSPtr: s.PublicNet.IPv4.DNSPtr,
-			},
-			IPv6: LoadBalancerPublicNetIPv6{
-				IP:     net.ParseIP(s.PublicNet.IPv6.IP),
-				DNSPtr: s.PublicNet.IPv6.DNSPtr,
-			},
-		},
-		Location:         LocationFromSchema(s.Location),
-		LoadBalancerType: LoadBalancerTypeFromSchema(s.LoadBalancerType),
-		Algorithm:        LoadBalancerAlgorithm{Type: LoadBalancerAlgorithmType(s.Algorithm.Type)},
-		Protection: LoadBalancerProtection{
-			Delete: s.Protection.Delete,
-		},
-		Labels:          map[string]string{},
-		Created:         s.Created,
-		IncludedTraffic: s.IncludedTraffic,
-	}
-	for _, privateNet := range s.PrivateNet {
-		l.PrivateNet = append(l.PrivateNet, LoadBalancerPrivateNet{
-			Network: &Network{ID: privateNet.Network},
-			IP:      net.ParseIP(privateNet.IP),
-		})
-	}
-	if s.OutgoingTraffic != nil {
-		l.OutgoingTraffic = *s.OutgoingTraffic
-	}
-	if s.IngoingTraffic != nil {
-		l.IngoingTraffic = *s.IngoingTraffic
-	}
-	for _, service := range s.Services {
-		l.Services = append(l.Services, LoadBalancerServiceFromSchema(service))
-	}
-	for _, target := range s.Targets {
-		l.Targets = append(l.Targets, LoadBalancerTargetFromSchema(target))
-	}
-	for key, value := range s.Labels {
-		l.Labels[key] = value
-	}
-	return l
+	return c.LoadBalancerFromSchema(s)
+}
+
+// SchemaFromLoadBalancer converts a LoadBalancer to a schema.LoadBalancer.
+func SchemaFromLoadBalancer(l *LoadBalancer) schema.LoadBalancer {
+	return c.SchemaFromLoadBalancer(l)
 }
 
 // LoadBalancerServiceFromSchema converts a schema.LoadBalancerService to a LoadBalancerService.
 func LoadBalancerServiceFromSchema(s schema.LoadBalancerService) LoadBalancerService {
-	ls := LoadBalancerService{
-		Protocol:        LoadBalancerServiceProtocol(s.Protocol),
-		ListenPort:      s.ListenPort,
-		DestinationPort: s.DestinationPort,
-		Proxyprotocol:   s.Proxyprotocol,
-		HealthCheck:     LoadBalancerServiceHealthCheckFromSchema(s.HealthCheck),
-	}
-	if s.HTTP != nil {
-		ls.HTTP = LoadBalancerServiceHTTP{
-			CookieName:     s.HTTP.CookieName,
-			CookieLifetime: time.Duration(s.HTTP.CookieLifetime) * time.Second,
-			RedirectHTTP:   s.HTTP.RedirectHTTP,
-			StickySessions: s.HTTP.StickySessions,
-		}
-		for _, certificateID := range s.HTTP.Certificates {
-			ls.HTTP.Certificates = append(ls.HTTP.Certificates, &Certificate{ID: certificateID})
-		}
-	}
-	return ls
+	return c.LoadBalancerServiceFromSchema(s)
+}
+
+// SchemaFromLoadBalancerService converts a LoadBalancerService to a schema.LoadBalancerService.
+func SchemaFromLoadBalancerService(l LoadBalancerService) schema.LoadBalancerService {
+	return c.SchemaFromLoadBalancerService(l)
 }
 
 // LoadBalancerServiceHealthCheckFromSchema converts a schema.LoadBalancerServiceHealthCheck to a LoadBalancerServiceHealthCheck.
 func LoadBalancerServiceHealthCheckFromSchema(s *schema.LoadBalancerServiceHealthCheck) LoadBalancerServiceHealthCheck {
-	lsh := LoadBalancerServiceHealthCheck{
-		Protocol: LoadBalancerServiceProtocol(s.Protocol),
-		Port:     s.Port,
-		Interval: time.Duration(s.Interval) * time.Second,
-		Retries:  s.Retries,
-		Timeout:  time.Duration(s.Timeout) * time.Second,
-	}
-	if s.HTTP != nil {
-		lsh.HTTP = &LoadBalancerServiceHealthCheckHTTP{
-			Domain:      s.HTTP.Domain,
-			Path:        s.HTTP.Path,
-			Response:    s.HTTP.Response,
-			StatusCodes: s.HTTP.StatusCodes,
-			TLS:         s.HTTP.TLS,
-		}
-	}
-	return lsh
+	return c.LoadBalancerServiceHealthCheckFromSchema(s)
+}
+
+// SchemaFromLoadBalancerServiceHealthCheck converts a LoadBalancerServiceHealthCheck to a schema.LoadBalancerServiceHealthCheck.
+func SchemaFromLoadBalancerServiceHealthCheck(l LoadBalancerServiceHealthCheck) *schema.LoadBalancerServiceHealthCheck {
+	return c.SchemaFromLoadBalancerServiceHealthCheck(l)
 }
 
 // LoadBalancerTargetFromSchema converts a schema.LoadBalancerTarget to a LoadBalancerTarget.
 func LoadBalancerTargetFromSchema(s schema.LoadBalancerTarget) LoadBalancerTarget {
-	lt := LoadBalancerTarget{
-		Type:         LoadBalancerTargetType(s.Type),
-		UsePrivateIP: s.UsePrivateIP,
-	}
-	if s.Server != nil {
-		lt.Server = &LoadBalancerTargetServer{
-			Server: &Server{ID: s.Server.ID},
-		}
-	}
-	if s.LabelSelector != nil {
-		lt.LabelSelector = &LoadBalancerTargetLabelSelector{
-			Selector: s.LabelSelector.Selector,
-		}
-	}
-	if s.IP != nil {
-		lt.IP = &LoadBalancerTargetIP{IP: s.IP.IP}
-	}
-
-	for _, healthStatus := range s.HealthStatus {
-		lt.HealthStatus = append(lt.HealthStatus, LoadBalancerTargetHealthStatusFromSchema(healthStatus))
-	}
-	for _, target := range s.Targets {
-		lt.Targets = append(lt.Targets, LoadBalancerTargetFromSchema(target))
-	}
-	return lt
+	return c.LoadBalancerTargetFromSchema(s)
+}
+
+// SchemaFromLoadBalancerTarget converts a LoadBalancerTarget to a schema.LoadBalancerTarget.
+func SchemaFromLoadBalancerTarget(l LoadBalancerTarget) schema.LoadBalancerTarget {
+	return c.SchemaFromLoadBalancerTarget(l)
 }
 
 // LoadBalancerTargetHealthStatusFromSchema converts a schema.LoadBalancerTarget to a LoadBalancerTarget.
 func LoadBalancerTargetHealthStatusFromSchema(s schema.LoadBalancerTargetHealthStatus) LoadBalancerTargetHealthStatus {
-	return LoadBalancerTargetHealthStatus{
-		ListenPort: s.ListenPort,
-		Status:     LoadBalancerTargetHealthStatusStatus(s.Status),
-	}
+	return c.LoadBalancerTargetHealthStatusFromSchema(s)
+}
+
+// SchemaFromLoadBalancerTargetHealthStatus converts a LoadBalancerTarget to a schema.LoadBalancerTarget.
+func SchemaFromLoadBalancerTargetHealthStatus(l LoadBalancerTargetHealthStatus) schema.LoadBalancerTargetHealthStatus {
+	return c.SchemaFromLoadBalancerTargetHealthStatus(l)
 }
 
 // CertificateFromSchema converts a schema.Certificate to a Certificate.
 func CertificateFromSchema(s schema.Certificate) *Certificate {
-	c := &Certificate{
-		ID:             s.ID,
-		Name:           s.Name,
-		Type:           CertificateType(s.Type),
-		Certificate:    s.Certificate,
-		Created:        s.Created,
-		NotValidBefore: s.NotValidBefore,
-		NotValidAfter:  s.NotValidAfter,
-		DomainNames:    s.DomainNames,
-		Fingerprint:    s.Fingerprint,
-	}
-	if s.Status != nil {
-		c.Status = &CertificateStatus{
-			Issuance: CertificateStatusType(s.Status.Issuance),
-			Renewal:  CertificateStatusType(s.Status.Renewal),
-		}
-		if s.Status.Error != nil {
-			certErr := ErrorFromSchema(*s.Status.Error)
-			c.Status.Error = &certErr
-		}
-	}
-	if len(s.Labels) > 0 {
-		c.Labels = s.Labels
-	}
-	if len(s.UsedBy) > 0 {
-		c.UsedBy = make([]CertificateUsedByRef, len(s.UsedBy))
-		for i, ref := range s.UsedBy {
-			c.UsedBy[i] = CertificateUsedByRef{ID: ref.ID, Type: CertificateUsedByRefType(ref.Type)}
-		}
-	}
-
-	return c
+	return c.CertificateFromSchema(s)
+}
+
+// SchemaFromCertificate converts a Certificate to a schema.Certificate.
+func SchemaFromCertificate(ct *Certificate) schema.Certificate {
+	return c.SchemaFromCertificate(ct)
 }
 
 // PaginationFromSchema converts a schema.MetaPagination to a Pagination.
 func PaginationFromSchema(s schema.MetaPagination) Pagination {
-	return Pagination{
-		Page:         s.Page,
-		PerPage:      s.PerPage,
-		PreviousPage: s.PreviousPage,
-		NextPage:     s.NextPage,
-		LastPage:     s.LastPage,
-		TotalEntries: s.TotalEntries,
-	}
+	return c.PaginationFromSchema(s)
+}
+
+// SchemaFromPagination converts a Pagination to a schema.MetaPagination.
+func SchemaFromPagination(p Pagination) schema.MetaPagination {
+	return c.SchemaFromPagination(p)
 }
 
 // ErrorFromSchema converts a schema.Error to an Error.
 func ErrorFromSchema(s schema.Error) Error {
-	e := Error{
-		Code:    ErrorCode(s.Code),
-		Message: s.Message,
-	}
-
-	if d, ok := s.Details.(schema.ErrorDetailsInvalidInput); ok {
-		details := ErrorDetailsInvalidInput{
-			Fields: []ErrorDetailsInvalidInputField{},
-		}
-		for _, field := range d.Fields {
-			details.Fields = append(details.Fields, ErrorDetailsInvalidInputField{
-				Name:     field.Name,
-				Messages: field.Messages,
-			})
-		}
-		e.Details = details
-	}
-	return e
+	return c.ErrorFromSchema(s)
+}
+
+// SchemaFromError converts an Error to a schema.Error.
+func SchemaFromError(e Error) schema.Error {
+	return c.SchemaFromError(e)
 }
 
 // PricingFromSchema converts a schema.Pricing to a Pricing.
 func PricingFromSchema(s schema.Pricing) Pricing {
-	p := Pricing{
-		Image: ImagePricing{
-			PerGBMonth: Price{
-				Currency: s.Currency,
-				VATRate:  s.VATRate,
-				Net:      s.Image.PricePerGBMonth.Net,
-				Gross:    s.Image.PricePerGBMonth.Gross,
-			},
-		},
-		FloatingIP: FloatingIPPricing{
-			Monthly: Price{
-				Currency: s.Currency,
-				VATRate:  s.VATRate,
-				Net:      s.FloatingIP.PriceMonthly.Net,
-				Gross:    s.FloatingIP.PriceMonthly.Gross,
-			},
-		},
-		Traffic: TrafficPricing{
-			PerTB: Price{
-				Currency: s.Currency,
-				VATRate:  s.VATRate,
-				Net:      s.Traffic.PricePerTB.Net,
-				Gross:    s.Traffic.PricePerTB.Gross,
-			},
-		},
-		ServerBackup: ServerBackupPricing{
-			Percentage: s.ServerBackup.Percentage,
-		},
-		Volume: VolumePricing{
-			PerGBMonthly: Price{
-				Currency: s.Currency,
-				VATRate:  s.VATRate,
-				Net:      s.Volume.PricePerGBPerMonth.Net,
-				Gross:    s.Volume.PricePerGBPerMonth.Gross,
-			},
-		},
-	}
-	for _, floatingIPType := range s.FloatingIPs {
-		var pricings []FloatingIPTypeLocationPricing
-		for _, price := range floatingIPType.Prices {
-			p := FloatingIPTypeLocationPricing{
-				Location: &Location{Name: price.Location},
-				Monthly: Price{
-					Currency: s.Currency,
-					VATRate:  s.VATRate,
-					Net:      price.PriceMonthly.Net,
-					Gross:    price.PriceMonthly.Gross,
-				},
-			}
-			pricings = append(pricings, p)
-		}
-		p.FloatingIPs = append(p.FloatingIPs, FloatingIPTypePricing{Type: FloatingIPType(floatingIPType.Type), Pricings: pricings})
-	}
-	for _, primaryIPType := range s.PrimaryIPs {
-		var pricings []PrimaryIPTypePricing
-		for _, price := range primaryIPType.Prices {
-			p := PrimaryIPTypePricing{
-				Location: price.Location,
-				Monthly: PrimaryIPPrice{
-					Net:   price.PriceMonthly.Net,
-					Gross: price.PriceMonthly.Gross,
-				},
-				Hourly: PrimaryIPPrice{
-					Net:   price.PriceHourly.Net,
-					Gross: price.PriceHourly.Gross,
-				},
-			}
-			pricings = append(pricings, p)
-		}
-		p.PrimaryIPs = append(p.PrimaryIPs, PrimaryIPPricing{Type: primaryIPType.Type, Pricings: pricings})
-	}
-	for _, serverType := range s.ServerTypes {
-		var pricings []ServerTypeLocationPricing
-		for _, price := range serverType.Prices {
-			pricings = append(pricings, ServerTypeLocationPricing{
-				Location: &Location{Name: price.Location},
-				Hourly: Price{
-					Currency: s.Currency,
-					VATRate:  s.VATRate,
-					Net:      price.PriceHourly.Net,
-					Gross:    price.PriceHourly.Gross,
-				},
-				Monthly: Price{
-					Currency: s.Currency,
-					VATRate:  s.VATRate,
-					Net:      price.PriceMonthly.Net,
-					Gross:    price.PriceMonthly.Gross,
-				},
-			})
-		}
-		p.ServerTypes = append(p.ServerTypes, ServerTypePricing{
-			ServerType: &ServerType{
-				ID:   serverType.ID,
-				Name: serverType.Name,
-			},
-			Pricings: pricings,
-		})
-	}
-	for _, loadBalancerType := range s.LoadBalancerTypes {
-		var pricings []LoadBalancerTypeLocationPricing
-		for _, price := range loadBalancerType.Prices {
-			pricings = append(pricings, LoadBalancerTypeLocationPricing{
-				Location: &Location{Name: price.Location},
-				Hourly: Price{
-					Currency: s.Currency,
-					VATRate:  s.VATRate,
-					Net:      price.PriceHourly.Net,
-					Gross:    price.PriceHourly.Gross,
-				},
-				Monthly: Price{
-					Currency: s.Currency,
-					VATRate:  s.VATRate,
-					Net:      price.PriceMonthly.Net,
-					Gross:    price.PriceMonthly.Gross,
-				},
-			})
-		}
-		p.LoadBalancerTypes = append(p.LoadBalancerTypes, LoadBalancerTypePricing{
-			LoadBalancerType: &LoadBalancerType{
-				ID:   loadBalancerType.ID,
-				Name: loadBalancerType.Name,
-			},
-			Pricings: pricings,
-		})
-	}
-	return p
+	return c.PricingFromSchema(s)
+}
+
+// SchemaFromPricing converts a Pricing to a schema.Pricing.
+func SchemaFromPricing(p Pricing) schema.Pricing {
+	return c.SchemaFromPricing(p)
 }
 
 // FirewallFromSchema converts a schema.Firewall to a Firewall.
 func FirewallFromSchema(s schema.Firewall) *Firewall {
-	f := &Firewall{
-		ID:      s.ID,
-		Name:    s.Name,
-		Labels:  map[string]string{},
-		Created: s.Created,
-	}
-	for key, value := range s.Labels {
-		f.Labels[key] = value
-	}
-	for _, res := range s.AppliedTo {
-		r := FirewallResource{Type: FirewallResourceType(res.Type)}
-		switch r.Type {
-		case FirewallResourceTypeLabelSelector:
-			r.LabelSelector = &FirewallResourceLabelSelector{Selector: res.LabelSelector.Selector}
-		case FirewallResourceTypeServer:
-			r.Server = &FirewallResourceServer{ID: res.Server.ID}
-		}
-		f.AppliedTo = append(f.AppliedTo, r)
-	}
-	for _, rule := range s.Rules {
-		sourceIPs := []net.IPNet{}
-		for _, sourceIP := range rule.SourceIPs {
-			_, mask, err := net.ParseCIDR(sourceIP)
-			if err == nil && mask != nil {
-				sourceIPs = append(sourceIPs, *mask)
-			}
-		}
-		destinationIPs := []net.IPNet{}
-		for _, destinationIP := range rule.DestinationIPs {
-			_, mask, err := net.ParseCIDR(destinationIP)
-			if err == nil && mask != nil {
-				destinationIPs = append(destinationIPs, *mask)
-			}
-		}
-		f.Rules = append(f.Rules, FirewallRule{
-			Direction:      FirewallRuleDirection(rule.Direction),
-			SourceIPs:      sourceIPs,
-			DestinationIPs: destinationIPs,
-			Protocol:       FirewallRuleProtocol(rule.Protocol),
-			Port:           rule.Port,
-			Description:    rule.Description,
-		})
-	}
-	return f
+	return c.FirewallFromSchema(s)
+}
+
+// SchemaFromFirewall converts a Firewall to a schema.Firewall.
+func SchemaFromFirewall(f *Firewall) schema.Firewall {
+	return c.SchemaFromFirewall(f)
 }
 
 // PlacementGroupFromSchema converts a schema.PlacementGroup to a PlacementGroup.
 func PlacementGroupFromSchema(s schema.PlacementGroup) *PlacementGroup {
-	g := &PlacementGroup{
-		ID:      s.ID,
-		Name:    s.Name,
-		Labels:  s.Labels,
-		Created: s.Created,
-		Servers: s.Servers,
-		Type:    PlacementGroupType(s.Type),
-	}
-	return g
+	return c.PlacementGroupFromSchema(s)
+}
+
+// SchemaFromPlacementGroup converts a PlacementGroup to a schema.PlacementGroup.
+func SchemaFromPlacementGroup(p *PlacementGroup) schema.PlacementGroup {
+	return c.SchemaFromPlacementGroup(p)
+}
+
+// DeprecationFromSchema converts a [schema.DeprecationInfo] to a [DeprecationInfo].
+func DeprecationFromSchema(s *schema.DeprecationInfo) *DeprecationInfo {
+	return c.DeprecationFromSchema(s)
+}
+
+// SchemaFromDeprecation converts a [DeprecationInfo] to a [schema.DeprecationInfo].
+func SchemaFromDeprecation(d *DeprecationInfo) *schema.DeprecationInfo {
+	return c.SchemaFromDeprecation(d)
 }
 
 func placementGroupCreateOptsToSchema(opts PlacementGroupCreateOpts) schema.PlacementGroupCreateRequest {
-	req := schema.PlacementGroupCreateRequest{
-		Name: opts.Name,
-		Type: string(opts.Type),
-	}
-	if opts.Labels != nil {
-		req.Labels = &opts.Labels
-	}
-	return req
+	return c.SchemaFromPlacementGroupCreateOpts(opts)
 }
 
 func loadBalancerCreateOptsToSchema(opts LoadBalancerCreateOpts) schema.LoadBalancerCreateRequest {
-	req := schema.LoadBalancerCreateRequest{
-		Name:            opts.Name,
-		PublicInterface: opts.PublicInterface,
-	}
-	if opts.Algorithm != nil {
-		req.Algorithm = &schema.LoadBalancerCreateRequestAlgorithm{
-			Type: string(opts.Algorithm.Type),
-		}
-	}
-	if opts.LoadBalancerType.ID != 0 {
-		req.LoadBalancerType = opts.LoadBalancerType.ID
-	} else if opts.LoadBalancerType.Name != "" {
-		req.LoadBalancerType = opts.LoadBalancerType.Name
-	}
-	if opts.Location != nil {
-		if opts.Location.ID != 0 {
-			req.Location = Ptr(strconv.FormatInt(opts.Location.ID, 10))
-		} else {
-			req.Location = Ptr(opts.Location.Name)
-		}
-	}
-	if opts.NetworkZone != "" {
-		req.NetworkZone = Ptr(string(opts.NetworkZone))
-	}
-	if opts.Labels != nil {
-		req.Labels = &opts.Labels
-	}
-	if opts.Network != nil {
-		req.Network = Ptr(opts.Network.ID)
-	}
-	for _, target := range opts.Targets {
-		schemaTarget := schema.LoadBalancerCreateRequestTarget{
-			UsePrivateIP: target.UsePrivateIP,
-		}
-		switch target.Type {
-		case LoadBalancerTargetTypeServer:
-			schemaTarget.Type = string(LoadBalancerTargetTypeServer)
-			schemaTarget.Server = &schema.LoadBalancerCreateRequestTargetServer{ID: target.Server.Server.ID}
-		case LoadBalancerTargetTypeLabelSelector:
-			schemaTarget.Type = string(LoadBalancerTargetTypeLabelSelector)
-			schemaTarget.LabelSelector = &schema.LoadBalancerCreateRequestTargetLabelSelector{Selector: target.LabelSelector.Selector}
-		case LoadBalancerTargetTypeIP:
-			schemaTarget.Type = string(LoadBalancerTargetTypeIP)
-			schemaTarget.IP = &schema.LoadBalancerCreateRequestTargetIP{IP: target.IP.IP}
-		}
-		req.Targets = append(req.Targets, schemaTarget)
-	}
-	for _, service := range opts.Services {
-		schemaService := schema.LoadBalancerCreateRequestService{
-			Protocol:        string(service.Protocol),
-			ListenPort:      service.ListenPort,
-			DestinationPort: service.DestinationPort,
-			Proxyprotocol:   service.Proxyprotocol,
-		}
-		if service.HTTP != nil {
-			schemaService.HTTP = &schema.LoadBalancerCreateRequestServiceHTTP{
-				RedirectHTTP:   service.HTTP.RedirectHTTP,
-				StickySessions: service.HTTP.StickySessions,
-				CookieName:     service.HTTP.CookieName,
-			}
-			if service.HTTP.CookieLifetime != nil {
-				if sec := service.HTTP.CookieLifetime.Seconds(); sec != 0 {
-					schemaService.HTTP.CookieLifetime = Ptr(int(sec))
-				}
-			}
-			if service.HTTP.Certificates != nil {
-				certificates := []int64{}
-				for _, certificate := range service.HTTP.Certificates {
-					certificates = append(certificates, certificate.ID)
-				}
-				schemaService.HTTP.Certificates = &certificates
-			}
-		}
-		if service.HealthCheck != nil {
-			schemaHealthCheck := &schema.LoadBalancerCreateRequestServiceHealthCheck{
-				Protocol: string(service.HealthCheck.Protocol),
-				Port:     service.HealthCheck.Port,
-				Retries:  service.HealthCheck.Retries,
-			}
-			if service.HealthCheck.Interval != nil {
-				schemaHealthCheck.Interval = Ptr(int(service.HealthCheck.Interval.Seconds()))
-			}
-			if service.HealthCheck.Timeout != nil {
-				schemaHealthCheck.Timeout = Ptr(int(service.HealthCheck.Timeout.Seconds()))
-			}
-			if service.HealthCheck.HTTP != nil {
-				schemaHealthCheckHTTP := &schema.LoadBalancerCreateRequestServiceHealthCheckHTTP{
-					Domain:   service.HealthCheck.HTTP.Domain,
-					Path:     service.HealthCheck.HTTP.Path,
-					Response: service.HealthCheck.HTTP.Response,
-					TLS:      service.HealthCheck.HTTP.TLS,
-				}
-				if service.HealthCheck.HTTP.StatusCodes != nil {
-					schemaHealthCheckHTTP.StatusCodes = &service.HealthCheck.HTTP.StatusCodes //nolint:gosec // does not result in bug
-				}
-				schemaHealthCheck.HTTP = schemaHealthCheckHTTP
-			}
-			schemaService.HealthCheck = schemaHealthCheck
-		}
-		req.Services = append(req.Services, schemaService)
-	}
-	return req
+	return c.SchemaFromLoadBalancerCreateOpts(opts)
 }
 
 func loadBalancerAddServiceOptsToSchema(opts LoadBalancerAddServiceOpts) schema.LoadBalancerActionAddServiceRequest {
-	req := schema.LoadBalancerActionAddServiceRequest{
-		Protocol:        string(opts.Protocol),
-		ListenPort:      opts.ListenPort,
-		DestinationPort: opts.DestinationPort,
-		Proxyprotocol:   opts.Proxyprotocol,
-	}
-	if opts.HTTP != nil {
-		req.HTTP = &schema.LoadBalancerActionAddServiceRequestHTTP{
-			CookieName:     opts.HTTP.CookieName,
-			RedirectHTTP:   opts.HTTP.RedirectHTTP,
-			StickySessions: opts.HTTP.StickySessions,
-		}
-		if opts.HTTP.CookieLifetime != nil {
-			req.HTTP.CookieLifetime = Ptr(int(opts.HTTP.CookieLifetime.Seconds()))
-		}
-		if opts.HTTP.Certificates != nil {
-			certificates := []int64{}
-			for _, certificate := range opts.HTTP.Certificates {
-				certificates = append(certificates, certificate.ID)
-			}
-			req.HTTP.Certificates = &certificates
-		}
-	}
-	if opts.HealthCheck != nil {
-		req.HealthCheck = &schema.LoadBalancerActionAddServiceRequestHealthCheck{
-			Protocol: string(opts.HealthCheck.Protocol),
-			Port:     opts.HealthCheck.Port,
-			Retries:  opts.HealthCheck.Retries,
-		}
-		if opts.HealthCheck.Interval != nil {
-			req.HealthCheck.Interval = Ptr(int(opts.HealthCheck.Interval.Seconds()))
-		}
-		if opts.HealthCheck.Timeout != nil {
-			req.HealthCheck.Timeout = Ptr(int(opts.HealthCheck.Timeout.Seconds()))
-		}
-		if opts.HealthCheck.HTTP != nil {
-			req.HealthCheck.HTTP = &schema.LoadBalancerActionAddServiceRequestHealthCheckHTTP{
-				Domain:   opts.HealthCheck.HTTP.Domain,
-				Path:     opts.HealthCheck.HTTP.Path,
-				Response: opts.HealthCheck.HTTP.Response,
-				TLS:      opts.HealthCheck.HTTP.TLS,
-			}
-			if opts.HealthCheck.HTTP.StatusCodes != nil {
-				req.HealthCheck.HTTP.StatusCodes = &opts.HealthCheck.HTTP.StatusCodes
-			}
-		}
-	}
-	return req
+	return c.SchemaFromLoadBalancerAddServiceOpts(opts)
 }
 
 func loadBalancerUpdateServiceOptsToSchema(opts LoadBalancerUpdateServiceOpts) schema.LoadBalancerActionUpdateServiceRequest {
-	req := schema.LoadBalancerActionUpdateServiceRequest{
-		DestinationPort: opts.DestinationPort,
-		Proxyprotocol:   opts.Proxyprotocol,
-	}
-	if opts.Protocol != "" {
-		req.Protocol = Ptr(string(opts.Protocol))
-	}
-	if opts.HTTP != nil {
-		req.HTTP = &schema.LoadBalancerActionUpdateServiceRequestHTTP{
-			CookieName:     opts.HTTP.CookieName,
-			RedirectHTTP:   opts.HTTP.RedirectHTTP,
-			StickySessions: opts.HTTP.StickySessions,
-		}
-		if opts.HTTP.CookieLifetime != nil {
-			req.HTTP.CookieLifetime = Ptr(int(opts.HTTP.CookieLifetime.Seconds()))
-		}
-		if opts.HTTP.Certificates != nil {
-			certificates := []int64{}
-			for _, certificate := range opts.HTTP.Certificates {
-				certificates = append(certificates, certificate.ID)
-			}
-			req.HTTP.Certificates = &certificates
-		}
-	}
-	if opts.HealthCheck != nil {
-		req.HealthCheck = &schema.LoadBalancerActionUpdateServiceRequestHealthCheck{
-			Port:    opts.HealthCheck.Port,
-			Retries: opts.HealthCheck.Retries,
-		}
-		if opts.HealthCheck.Interval != nil {
-			req.HealthCheck.Interval = Ptr(int(opts.HealthCheck.Interval.Seconds()))
-		}
-		if opts.HealthCheck.Timeout != nil {
-			req.HealthCheck.Timeout = Ptr(int(opts.HealthCheck.Timeout.Seconds()))
-		}
-		if opts.HealthCheck.Protocol != "" {
-			req.HealthCheck.Protocol = Ptr(string(opts.HealthCheck.Protocol))
-		}
-		if opts.HealthCheck.HTTP != nil {
-			req.HealthCheck.HTTP = &schema.LoadBalancerActionUpdateServiceRequestHealthCheckHTTP{
-				Domain:   opts.HealthCheck.HTTP.Domain,
-				Path:     opts.HealthCheck.HTTP.Path,
-				Response: opts.HealthCheck.HTTP.Response,
-				TLS:      opts.HealthCheck.HTTP.TLS,
-			}
-			if opts.HealthCheck.HTTP.StatusCodes != nil {
-				req.HealthCheck.HTTP.StatusCodes = &opts.HealthCheck.HTTP.StatusCodes
-			}
-		}
-	}
-	return req
+	return c.SchemaFromLoadBalancerUpdateServiceOpts(opts)
 }
 
 func firewallCreateOptsToSchema(opts FirewallCreateOpts) schema.FirewallCreateRequest {
-	req := schema.FirewallCreateRequest{
-		Name: opts.Name,
-	}
-	if opts.Labels != nil {
-		req.Labels = &opts.Labels
-	}
-	for _, rule := range opts.Rules {
-		schemaRule := schema.FirewallRule{
-			Direction:   string(rule.Direction),
-			Protocol:    string(rule.Protocol),
-			Port:        rule.Port,
-			Description: rule.Description,
-		}
-		switch rule.Direction {
-		case FirewallRuleDirectionOut:
-			schemaRule.DestinationIPs = make([]string, len(rule.DestinationIPs))
-			for i, destinationIP := range rule.DestinationIPs {
-				schemaRule.DestinationIPs[i] = destinationIP.String()
-			}
-		case FirewallRuleDirectionIn:
-			schemaRule.SourceIPs = make([]string, len(rule.SourceIPs))
-			for i, sourceIP := range rule.SourceIPs {
-				schemaRule.SourceIPs[i] = sourceIP.String()
-			}
-		}
-		req.Rules = append(req.Rules, schemaRule)
-	}
-	for _, res := range opts.ApplyTo {
-		schemaFirewallResource := schema.FirewallResource{
-			Type: string(res.Type),
-		}
-		switch res.Type {
-		case FirewallResourceTypeServer:
-			schemaFirewallResource.Server = &schema.FirewallResourceServer{
-				ID: res.Server.ID,
-			}
-		case FirewallResourceTypeLabelSelector:
-			schemaFirewallResource.LabelSelector = &schema.FirewallResourceLabelSelector{Selector: res.LabelSelector.Selector}
-		}
-
-		req.ApplyTo = append(req.ApplyTo, schemaFirewallResource)
-	}
-	return req
+	return c.SchemaFromFirewallCreateOpts(opts)
 }
 
 func firewallSetRulesOptsToSchema(opts FirewallSetRulesOpts) schema.FirewallActionSetRulesRequest {
-	req := schema.FirewallActionSetRulesRequest{Rules: []schema.FirewallRule{}}
-	for _, rule := range opts.Rules {
-		schemaRule := schema.FirewallRule{
-			Direction:   string(rule.Direction),
-			Protocol:    string(rule.Protocol),
-			Port:        rule.Port,
-			Description: rule.Description,
-		}
-		switch rule.Direction {
-		case FirewallRuleDirectionOut:
-			schemaRule.DestinationIPs = make([]string, len(rule.DestinationIPs))
-			for i, destinationIP := range rule.DestinationIPs {
-				schemaRule.DestinationIPs[i] = destinationIP.String()
-			}
-		case FirewallRuleDirectionIn:
-			schemaRule.SourceIPs = make([]string, len(rule.SourceIPs))
-			for i, sourceIP := range rule.SourceIPs {
-				schemaRule.SourceIPs[i] = sourceIP.String()
-			}
-		}
-		req.Rules = append(req.Rules, schemaRule)
-	}
-	return req
+	return c.SchemaFromFirewallSetRulesOpts(opts)
 }
 
 func firewallResourceToSchema(resource FirewallResource) schema.FirewallResource {
-	s := schema.FirewallResource{
-		Type: string(resource.Type),
-	}
-	switch resource.Type {
-	case FirewallResourceTypeLabelSelector:
-		s.LabelSelector = &schema.FirewallResourceLabelSelector{Selector: resource.LabelSelector.Selector}
-	case FirewallResourceTypeServer:
-		s.Server = &schema.FirewallResourceServer{ID: resource.Server.ID}
-	}
-	return s
+	return c.SchemaFromFirewallResource(resource)
 }
 
 func serverMetricsFromSchema(s *schema.ServerGetMetricsResponse) (*ServerMetrics, error) {
-	ms := ServerMetrics{
-		Start: s.Metrics.Start,
-		End:   s.Metrics.End,
-		Step:  s.Metrics.Step,
-	}
-
-	timeSeries := make(map[string][]ServerMetricsValue)
-	for tsName, v := range s.Metrics.TimeSeries {
-		vals := make([]ServerMetricsValue, len(v.Values))
-
-		for i, rawVal := range v.Values {
-			var val ServerMetricsValue
-
-			tup, ok := rawVal.([]interface{})
-			if !ok {
-				return nil, fmt.Errorf("failed to convert value to tuple: %v", rawVal)
-			}
-			if len(tup) != 2 {
-				return nil, fmt.Errorf("invalid tuple size: %d: %v", len(tup), rawVal)
-			}
-			ts, ok := tup[0].(float64)
-			if !ok {
-				return nil, fmt.Errorf("convert to float64: %v", tup[0])
-			}
-			val.Timestamp = ts
-
-			v, ok := tup[1].(string)
-			if !ok {
-				return nil, fmt.Errorf("not a string: %v", tup[1])
-			}
-			val.Value = v
-			vals[i] = val
-		}
-
-		timeSeries[tsName] = vals
-	}
-	ms.TimeSeries = timeSeries
-
-	return &ms, nil
+	return c.ServerMetricsFromSchema(s)
 }
 
 func loadBalancerMetricsFromSchema(s *schema.LoadBalancerGetMetricsResponse) (*LoadBalancerMetrics, error) {
-	ms := LoadBalancerMetrics{
-		Start: s.Metrics.Start,
-		End:   s.Metrics.End,
-		Step:  s.Metrics.Step,
-	}
-
-	timeSeries := make(map[string][]LoadBalancerMetricsValue)
-	for tsName, v := range s.Metrics.TimeSeries {
-		vals := make([]LoadBalancerMetricsValue, len(v.Values))
-
-		for i, rawVal := range v.Values {
-			var val LoadBalancerMetricsValue
-
-			tup, ok := rawVal.([]interface{})
-			if !ok {
-				return nil, fmt.Errorf("failed to convert value to tuple: %v", rawVal)
-			}
-			if len(tup) != 2 {
-				return nil, fmt.Errorf("invalid tuple size: %d: %v", len(tup), rawVal)
-			}
-			ts, ok := tup[0].(float64)
-			if !ok {
-				return nil, fmt.Errorf("convert to float64: %v", tup[0])
-			}
-			val.Timestamp = ts
-
-			v, ok := tup[1].(string)
-			if !ok {
-				return nil, fmt.Errorf("not a string: %v", tup[1])
-			}
-			val.Value = v
-			vals[i] = val
-		}
-
-		timeSeries[tsName] = vals
-	}
-	ms.TimeSeries = timeSeries
-
-	return &ms, nil
-}
-
-// DeprecationFromSchema converts a [schema.DeprecationInfo] to a [DeprecationInfo].
-func DeprecationFromSchema(s *schema.DeprecationInfo) *DeprecationInfo {
-	if s == nil {
-		return nil
-	}
-
-	return &DeprecationInfo{
-		Announced:        s.Announced,
-		UnavailableAfter: s.UnavailableAfter,
-	}
+	return c.LoadBalancerMetricsFromSchema(s)
 }
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/datacenter.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/datacenter.go
index eaa12429f83..54590d2a2a5 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/datacenter.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/datacenter.go
@@ -2,14 +2,18 @@ package schema
 
 // Datacenter defines the schema of a datacenter.
 type Datacenter struct {
-	ID          int64    `json:"id"`
-	Name        string   `json:"name"`
-	Description string   `json:"description"`
-	Location    Location `json:"location"`
-	ServerTypes struct {
-		Supported []int64 `json:"supported"`
-		Available []int64 `json:"available"`
-	} `json:"server_types"`
+	ID          int64                 `json:"id"`
+	Name        string                `json:"name"`
+	Description string                `json:"description"`
+	Location    Location              `json:"location"`
+	ServerTypes DatacenterServerTypes `json:"server_types"`
+}
+
+// DatacenterServerTypes defines the schema of the server types available in a datacenter.
+type DatacenterServerTypes struct {
+	Supported             []int64 `json:"supported"`
+	AvailableForMigration []int64 `json:"available_for_migration"`
+	Available             []int64 `json:"available"`
 }
 
 // DatacenterGetResponse defines the schema of the response when retrieving a single datacenter.
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/image.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/image.go
index 1520935ec7c..eacc20f8962 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/image.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/image.go
@@ -11,7 +11,7 @@ type Image struct {
 	Description  string            `json:"description"`
 	ImageSize    *float32          `json:"image_size"`
 	DiskSize     float32           `json:"disk_size"`
-	Created      time.Time         `json:"created"`
+	Created      *time.Time        `json:"created"`
 	CreatedFrom  *ImageCreatedFrom `json:"created_from"`
 	BoundTo      *int64            `json:"bound_to"`
 	OSFlavor     string            `json:"os_flavor"`
@@ -19,8 +19,8 @@ type Image struct {
 	Architecture string            `json:"architecture"`
 	RapidDeploy  bool              `json:"rapid_deploy"`
 	Protection   ImageProtection   `json:"protection"`
-	Deprecated   time.Time         `json:"deprecated"`
-	Deleted      time.Time         `json:"deleted"`
+	Deprecated   *time.Time        `json:"deprecated"`
+	Deleted      *time.Time        `json:"deleted"`
 	Labels       map[string]string `json:"labels"`
 }
 
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/iso.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/iso.go
index 0fcb1a6c945..4cf48cc1aef 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/iso.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/iso.go
@@ -1,15 +1,12 @@
 package schema
 
-import "time"
-
 // ISO defines the schema of an ISO image.
 type ISO struct {
-	ID           int64     `json:"id"`
-	Name         string    `json:"name"`
-	Description  string    `json:"description"`
-	Type         string    `json:"type"`
-	Architecture *string   `json:"architecture"`
-	Deprecated   time.Time `json:"deprecated"`
+	ID           int64   `json:"id"`
+	Name         string  `json:"name"`
+	Description  string  `json:"description"`
+	Type         string  `json:"type"`
+	Architecture *string `json:"architecture"`
 	DeprecatableResource
 }
 
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/load_balancer_type.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/load_balancer_type.go
index 09ac43d7a6c..b0193d3a86f 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/load_balancer_type.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/load_balancer_type.go
@@ -10,6 +10,7 @@ type LoadBalancerType struct {
 	MaxTargets              int                            `json:"max_targets"`
 	MaxAssignedCertificates int                            `json:"max_assigned_certificates"`
 	Prices                  []PricingLoadBalancerTypePrice `json:"prices"`
+	Deprecated              *string                        `json:"deprecated"`
 }
 
 // LoadBalancerTypeListResponse defines the schema of the response when
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/server.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/server.go
index 39a10b06483..068b3e81f94 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/server.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/server.go
@@ -25,6 +25,7 @@ type Server struct {
 	Volumes         []int64            `json:"volumes"`
 	PrimaryDiskSize int                `json:"primary_disk_size"`
 	PlacementGroup  *PlacementGroup    `json:"placement_group"`
+	LoadBalancers   []int64            `json:"load_balancers"`
 }
 
 // ServerProtection defines the schema of a server's resource protection.
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/server_type.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/server_type.go
index 0920a5ee16d..21a87da9a9b 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/server_type.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema/server_type.go
@@ -13,6 +13,7 @@ type ServerType struct {
 	Architecture    string                   `json:"architecture"`
 	IncludedTraffic int64                    `json:"included_traffic"`
 	Prices          []PricingServerTypePrice `json:"prices"`
+	Deprecated      bool                     `json:"deprecated"`
 	DeprecatableResource
 }
 
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema_assign.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema_assign.go
new file mode 100644
index 00000000000..8894e350691
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema_assign.go
@@ -0,0 +1,15 @@
+//go:build !goverter
+
+package hcloud
+
+/*
+This file is needed so that c is assigned to a converterImpl{}.
+If we did this in schema.go, goverter would fail because of a
+compiler error (converterImpl might not be defined).
+Because this file is not compiled by goverter, we can safely
+assign c here.
+*/
+
+func init() {
+	c = &converterImpl{}
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema_gen.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema_gen.go
new file mode 100644
index 00000000000..1008bddd868
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/schema_gen.go
@@ -0,0 +1,928 @@
+package hcloud
+
+import (
+	"encoding/json"
+	"fmt"
+	"net"
+	"time"
+
+	"github.com/hetznercloud/hcloud-go/v2/hcloud/schema"
+)
+
+//go:generate go run github.com/jmattheis/goverter/cmd/goverter gen ./...
+
+/*
+This file generates conversions methods between the schema and the hcloud package.
+Goverter (https://github.com/jmattheis/goverter) is used to generate these conversion
+methods. Goverter is configured using comments in and on the [converter] interface.
+A struct implementing the interface methods, [converterImpl], is generated in zz_schema.go.
+The generated methods are then wrapped in schema.go to be exported.
+
+You can find a documentation of goverter here: https://goverter.jmattheis.de/
+*/
+
+// goverter:converter
+//
+// Specify where and in which package to output the generated
+// conversion methods.
+// goverter:output:file zz_schema.go
+// goverter:output:package github.com/hetznercloud/hcloud-go/v2/hcloud
+//
+// In case of *T -> T conversion, use zero value if *T is nil.
+// goverter:useZeroValueOnPointerInconsistency yes
+//
+// Do not deep copy in case of *T -> *T conversion.
+// goverter:skipCopySameType yes
+//
+// Explicit conversion methods are needed for non-trivial cases
+// where the target, source or both are of primitive types. Struct
+// to struct conversions can be handled by goverter directly.
+// goverter:extend ipFromString
+// goverter:extend stringFromIP
+// goverter:extend ipNetFromString
+// goverter:extend stringFromIPNet
+// goverter:extend timeToTimePtr
+// goverter:extend serverFromInt64
+// goverter:extend int64FromServer
+// goverter:extend networkFromInt64
+// goverter:extend int64FromNetwork
+// goverter:extend loadBalancerFromInt64
+// goverter:extend int64FromLoadBalancer
+// goverter:extend volumeFromInt64
+// goverter:extend int64FromVolume
+// goverter:extend certificateFromInt64
+// goverter:extend int64FromCertificate
+// goverter:extend locationFromString
+// goverter:extend stringFromLocation
+// goverter:extend serverTypeFromInt64
+// goverter:extend int64FromServerType
+// goverter:extend floatingIPFromInt64
+// goverter:extend int64FromFloatingIP
+// goverter:extend mapFromFloatingIPDNSPtrSchema
+// goverter:extend floatingIPDNSPtrSchemaFromMap
+// goverter:extend mapFromPrimaryIPDNSPtrSchema
+// goverter:extend primaryIPDNSPtrSchemaFromMap
+// goverter:extend mapFromServerPublicNetIPv6DNSPtrSchema
+// goverter:extend serverPublicNetIPv6DNSPtrSchemaFromMap
+// goverter:extend firewallStatusFromSchemaServerFirewall
+// goverter:extend serverFirewallSchemaFromFirewallStatus
+// goverter:extend durationFromIntSeconds
+// goverter:extend intSecondsFromDuration
+// goverter:extend serverFromImageCreatedFromSchema
+// goverter:extend anyFromLoadBalancerType
+// goverter:extend serverMetricsTimeSeriesFromSchema
+// goverter:extend loadBalancerMetricsTimeSeriesFromSchema
+// goverter:extend stringPtrFromLoadBalancerServiceProtocol
+// goverter:extend stringPtrFromNetworkZone
+// goverter:extend schemaFromLoadBalancerCreateOptsTargetLabelSelector
+// goverter:extend schemaFromLoadBalancerCreateOptsTargetServer
+// goverter:extend schemaFromLoadBalancerCreateOptsTargetIP
+// goverter:extend stringMapToStringMapPtr
+type converter interface {
+
+	// goverter:map Error.Code ErrorCode
+	// goverter:map Error.Message ErrorMessage
+	ActionFromSchema(schema.Action) *Action
+
+	// goverter:map . Error | schemaActionErrorFromAction
+	SchemaFromAction(*Action) schema.Action
+
+	ActionsFromSchema([]schema.Action) []*Action
+
+	SchemaFromActions([]*Action) []schema.Action
+
+	// goverter:map . IP | ipFromFloatingIPSchema
+	// goverter:map . Network | networkFromFloatingIPSchema
+	FloatingIPFromSchema(schema.FloatingIP) *FloatingIP
+
+	// goverter:map . IP | floatingIPToIPString
+	SchemaFromFloatingIP(*FloatingIP) schema.FloatingIP
+
+	// goverter:map . IP | ipFromPrimaryIPSchema
+	// goverter:map . Network | networkFromPrimaryIPSchema
+	PrimaryIPFromSchema(schema.PrimaryIP) *PrimaryIP
+
+	// goverter:map . IP | primaryIPToIPString
+	SchemaFromPrimaryIP(*PrimaryIP) schema.PrimaryIP
+
+	ISOFromSchema(schema.ISO) *ISO
+
+	// We cannot use goverter settings when mapping a struct to a struct pointer
+	// See [converter.ISOFromSchema]
+	// See https://github.com/jmattheis/goverter/issues/114
+	// goverter:map DeprecatableResource.Deprecation.UnavailableAfter Deprecated
+	intISOFromSchema(schema.ISO) ISO
+
+	SchemaFromISO(*ISO) schema.ISO
+
+	LocationFromSchema(schema.Location) *Location
+
+	SchemaFromLocation(*Location) schema.Location
+
+	DatacenterFromSchema(schema.Datacenter) *Datacenter
+
+	SchemaFromDatacenter(*Datacenter) schema.Datacenter
+
+	ServerFromSchema(schema.Server) *Server
+
+	// goverter:map OutgoingTraffic | mapZeroUint64ToNil
+	// goverter:map IngoingTraffic | mapZeroUint64ToNil
+	// goverter:map BackupWindow | mapEmptyStringToNil
+	SchemaFromServer(*Server) schema.Server
+
+	ServerPublicNetFromSchema(schema.ServerPublicNet) ServerPublicNet
+
+	SchemaFromServerPublicNet(ServerPublicNet) schema.ServerPublicNet
+
+	ServerPublicNetIPv4FromSchema(schema.ServerPublicNetIPv4) ServerPublicNetIPv4
+
+	SchemaFromServerPublicNetIPv4(ServerPublicNetIPv4) schema.ServerPublicNetIPv4
+
+	// goverter:map . IP | ipFromServerPublicNetIPv6Schema
+	// goverter:map . Network | ipNetFromServerPublicNetIPv6Schema
+	ServerPublicNetIPv6FromSchema(schema.ServerPublicNetIPv6) ServerPublicNetIPv6
+
+	// goverter:map Network IP
+	SchemaFromServerPublicNetIPv6(ServerPublicNetIPv6) schema.ServerPublicNetIPv6
+
+	// goverter:map AliasIPs Aliases
+	ServerPrivateNetFromSchema(schema.ServerPrivateNet) ServerPrivateNet
+
+	// goverter:map Aliases AliasIPs
+	SchemaFromServerPrivateNet(ServerPrivateNet) schema.ServerPrivateNet
+
+	// goverter:map Prices Pricings
+	ServerTypeFromSchema(schema.ServerType) *ServerType
+
+	// goverter:map Pricings Prices
+	// goverter:map DeprecatableResource.Deprecation Deprecated | isDeprecationNotNil
+	SchemaFromServerType(*ServerType) schema.ServerType
+
+	ImageFromSchema(schema.Image) *Image
+
+	SchemaFromImage(*Image) schema.Image
+
+	// Needed because of how goverter works internally, see https://github.com/jmattheis/goverter/issues/114
+	// goverter:map ImageSize | mapZeroFloat32ToNil
+	intSchemaFromImage(Image) schema.Image
+
+	// goverter:ignore Currency
+	// goverter:ignore VATRate
+	PriceFromSchema(schema.Price) Price
+
+	SSHKeyFromSchema(schema.SSHKey) *SSHKey
+
+	SchemaFromSSHKey(*SSHKey) schema.SSHKey
+
+	VolumeFromSchema(schema.Volume) *Volume
+
+	SchemaFromVolume(*Volume) schema.Volume
+
+	NetworkFromSchema(schema.Network) *Network
+
+	SchemaFromNetwork(*Network) schema.Network
+
+	NetworkSubnetFromSchema(schema.NetworkSubnet) NetworkSubnet
+
+	SchemaFromNetworkSubnet(NetworkSubnet) schema.NetworkSubnet
+
+	NetworkRouteFromSchema(schema.NetworkRoute) NetworkRoute
+
+	SchemaFromNetworkRoute(NetworkRoute) schema.NetworkRoute
+
+	LoadBalancerFromSchema(schema.LoadBalancer) *LoadBalancer
+
+	// goverter:map OutgoingTraffic | mapZeroUint64ToNil
+	// goverter:map IngoingTraffic | mapZeroUint64ToNil
+	SchemaFromLoadBalancer(*LoadBalancer) schema.LoadBalancer
+
+	// goverter:map Prices Pricings
+	LoadBalancerTypeFromSchema(schema.LoadBalancerType) *LoadBalancerType
+
+	// goverter:map Pricings Prices
+	SchemaFromLoadBalancerType(*LoadBalancerType) schema.LoadBalancerType
+
+	// goverter:map PriceHourly Hourly
+	// goverter:map PriceMonthly Monthly
+	LoadBalancerTypeLocationPricingFromSchema(schema.PricingLoadBalancerTypePrice) LoadBalancerTypeLocationPricing
+
+	// goverter:map Hourly PriceHourly
+	// goverter:map Monthly PriceMonthly
+	SchemaFromLoadBalancerTypeLocationPricing(LoadBalancerTypeLocationPricing) schema.PricingLoadBalancerTypePrice
+
+	LoadBalancerServiceFromSchema(schema.LoadBalancerService) LoadBalancerService
+
+	SchemaFromLoadBalancerService(LoadBalancerService) schema.LoadBalancerService
+
+	LoadBalancerServiceHealthCheckFromSchema(*schema.LoadBalancerServiceHealthCheck) LoadBalancerServiceHealthCheck
+
+	SchemaFromLoadBalancerServiceHealthCheck(LoadBalancerServiceHealthCheck) *schema.LoadBalancerServiceHealthCheck
+
+	LoadBalancerTargetFromSchema(schema.LoadBalancerTarget) LoadBalancerTarget
+
+	SchemaFromLoadBalancerTarget(LoadBalancerTarget) schema.LoadBalancerTarget
+
+	// goverter:map ID Server
+	LoadBalancerTargetServerFromSchema(schema.LoadBalancerTargetServer) LoadBalancerTargetServer
+
+	// goverter:map Server ID
+	SchemaFromLoadBalancerServerTarget(LoadBalancerTargetServer) schema.LoadBalancerTargetServer
+
+	LoadBalancerTargetHealthStatusFromSchema(schema.LoadBalancerTargetHealthStatus) LoadBalancerTargetHealthStatus
+
+	SchemaFromLoadBalancerTargetHealthStatus(LoadBalancerTargetHealthStatus) schema.LoadBalancerTargetHealthStatus
+
+	CertificateFromSchema(schema.Certificate) *Certificate
+
+	SchemaFromCertificate(*Certificate) schema.Certificate
+
+	PaginationFromSchema(schema.MetaPagination) Pagination
+
+	SchemaFromPagination(Pagination) schema.MetaPagination
+
+	// goverter:ignore response
+	// goverter:map Details | errorDetailsFromSchema
+	ErrorFromSchema(schema.Error) Error
+
+	// goverter:map Details | schemaFromErrorDetails
+	// goverter:map Details DetailsRaw | rawSchemaFromErrorDetails
+	SchemaFromError(Error) schema.Error
+
+	// goverter:map . Image | imagePricingFromSchema
+	// goverter:map . FloatingIP | floatingIPPricingFromSchema
+	// goverter:map . FloatingIPs | floatingIPTypePricingFromSchema
+	// goverter:map . PrimaryIPs | primaryIPPricingFromSchema
+	// goverter:map . Traffic | trafficPricingFromSchema
+	// goverter:map . ServerTypes | serverTypePricingFromSchema
+	// goverter:map . LoadBalancerTypes | loadBalancerTypePricingFromSchema
+	// goverter:map . Volume | volumePricingFromSchema
+	PricingFromSchema(schema.Pricing) Pricing
+
+	// goverter:map PriceHourly Hourly
+	// goverter:map PriceMonthly Monthly
+	serverTypePricingFromSchema(schema.PricingServerTypePrice) ServerTypeLocationPricing
+
+	// goverter:map Image.PerGBMonth.Currency Currency
+	// goverter:map Image.PerGBMonth.VATRate VATRate
+	SchemaFromPricing(Pricing) schema.Pricing
+
+	// goverter:map PerGBMonth PricePerGBMonth
+	schemaFromImagePricing(ImagePricing) schema.PricingImage
+
+	// goverter:map Monthly PriceMonthly
+	schemaFromFloatingIPPricing(FloatingIPPricing) schema.PricingFloatingIP
+
+	// goverter:map Pricings Prices
+	schemaFromFloatingIPTypePricing(FloatingIPTypePricing) schema.PricingFloatingIPType
+
+	// goverter:map Monthly PriceMonthly
+	schemaFromFloatingIPTypeLocationPricing(FloatingIPTypeLocationPricing) schema.PricingFloatingIPTypePrice
+
+	// goverter:map Pricings Prices
+	schemaFromPrimaryIPPricing(PrimaryIPPricing) schema.PricingPrimaryIP
+
+	// goverter:map Monthly PriceMonthly
+	// goverter:map Hourly PriceHourly
+	schemaFromPrimaryIPTypePricing(PrimaryIPTypePricing) schema.PricingPrimaryIPTypePrice
+
+	// goverter:map PerTB PricePerTB
+	schemaFromTrafficPricing(TrafficPricing) schema.PricingTraffic
+
+	// goverter:map Pricings Prices
+	// goverter:map ServerType.ID ID
+	// goverter:map ServerType.Name Name
+	schemaFromServerTypePricing(ServerTypePricing) schema.PricingServerType
+
+	// goverter:map Pricings Prices
+	// goverter:map LoadBalancerType.ID ID
+	// goverter:map LoadBalancerType.Name Name
+	schemaFromLoadBalancerTypePricing(LoadBalancerTypePricing) schema.PricingLoadBalancerType
+
+	// goverter:map PerGBMonthly PricePerGBPerMonth
+	schemaFromVolumePricing(VolumePricing) schema.PricingVolume
+
+	// goverter:map Monthly PriceMonthly
+	// goverter:map Hourly PriceHourly
+	schemaFromServerTypeLocationPricing(ServerTypeLocationPricing) schema.PricingServerTypePrice
+
+	FirewallFromSchema(schema.Firewall) *Firewall
+
+	SchemaFromFirewall(*Firewall) schema.Firewall
+
+	PlacementGroupFromSchema(schema.PlacementGroup) *PlacementGroup
+
+	SchemaFromPlacementGroup(*PlacementGroup) schema.PlacementGroup
+
+	SchemaFromPlacementGroupCreateOpts(PlacementGroupCreateOpts) schema.PlacementGroupCreateRequest
+
+	SchemaFromLoadBalancerCreateOpts(LoadBalancerCreateOpts) schema.LoadBalancerCreateRequest
+
+	// goverter:map Server.ID ID
+	SchemaFromLoadBalancerCreateOptsTargetServer(LoadBalancerCreateOptsTargetServer) schema.LoadBalancerCreateRequestTargetServer
+
+	SchemaFromLoadBalancerAddServiceOpts(LoadBalancerAddServiceOpts) schema.LoadBalancerActionAddServiceRequest
+
+	// goverter:ignore ListenPort
+	SchemaFromLoadBalancerUpdateServiceOpts(LoadBalancerUpdateServiceOpts) schema.LoadBalancerActionUpdateServiceRequest
+
+	SchemaFromFirewallCreateOpts(FirewallCreateOpts) schema.FirewallCreateRequest
+
+	SchemaFromFirewallSetRulesOpts(FirewallSetRulesOpts) schema.FirewallActionSetRulesRequest
+
+	SchemaFromFirewallResource(FirewallResource) schema.FirewallResource
+
+	// goverter:autoMap Metrics
+	ServerMetricsFromSchema(*schema.ServerGetMetricsResponse) (*ServerMetrics, error)
+
+	// goverter:autoMap Metrics
+	LoadBalancerMetricsFromSchema(*schema.LoadBalancerGetMetricsResponse) (*LoadBalancerMetrics, error)
+
+	DeprecationFromSchema(*schema.DeprecationInfo) *DeprecationInfo
+
+	SchemaFromDeprecation(*DeprecationInfo) *schema.DeprecationInfo
+}
+
+func schemaActionErrorFromAction(a Action) *schema.ActionError {
+	if a.ErrorCode != "" && a.ErrorMessage != "" {
+		return &schema.ActionError{
+			Code:    a.ErrorCode,
+			Message: a.ErrorMessage,
+		}
+	}
+	return nil
+}
+
+func ipFromFloatingIPSchema(s schema.FloatingIP) net.IP {
+	if s.Type == string(FloatingIPTypeIPv4) {
+		return net.ParseIP(s.IP)
+	}
+	ip, _, _ := net.ParseCIDR(s.IP)
+	return ip
+}
+
+func networkFromFloatingIPSchema(s schema.FloatingIP) *net.IPNet {
+	if s.Type == string(FloatingIPTypeIPv4) {
+		return nil
+	}
+	_, n, _ := net.ParseCIDR(s.IP)
+	return n
+}
+
+func ipFromPrimaryIPSchema(s schema.PrimaryIP) net.IP {
+	if s.Type == string(FloatingIPTypeIPv4) {
+		return net.ParseIP(s.IP)
+	}
+	ip, _, _ := net.ParseCIDR(s.IP)
+	return ip
+}
+
+func networkFromPrimaryIPSchema(s schema.PrimaryIP) *net.IPNet {
+	if s.Type == string(FloatingIPTypeIPv4) {
+		return nil
+	}
+	_, n, _ := net.ParseCIDR(s.IP)
+	return n
+}
+
+func serverFromInt64(id int64) Server {
+	return Server{ID: id}
+}
+
+func int64FromServer(s Server) int64 {
+	return s.ID
+}
+
+func networkFromInt64(id int64) Network {
+	return Network{ID: id}
+}
+
+func int64FromNetwork(network Network) int64 {
+	return network.ID
+}
+
+func loadBalancerFromInt64(id int64) LoadBalancer {
+	return LoadBalancer{ID: id}
+}
+
+func int64FromLoadBalancer(lb LoadBalancer) int64 {
+	return lb.ID
+}
+
+func volumeFromInt64(id int64) *Volume {
+	return &Volume{ID: id}
+}
+
+func int64FromVolume(volume *Volume) int64 {
+	if volume == nil {
+		return 0
+	}
+	return volume.ID
+}
+
+func serverTypeFromInt64(id int64) *ServerType {
+	return &ServerType{ID: id}
+}
+
+func int64FromServerType(s *ServerType) int64 {
+	if s == nil {
+		return 0
+	}
+	return s.ID
+}
+
+func certificateFromInt64(id int64) *Certificate {
+	return &Certificate{ID: id}
+}
+
+func int64FromCertificate(c *Certificate) int64 {
+	if c == nil {
+		return 0
+	}
+	return c.ID
+}
+
+func locationFromString(s string) Location {
+	return Location{Name: s}
+}
+
+func stringFromLocation(l Location) string {
+	return l.Name
+}
+
+func mapFromFloatingIPDNSPtrSchema(dnsPtr []schema.FloatingIPDNSPtr) map[string]string {
+	m := make(map[string]string, len(dnsPtr))
+	for _, entry := range dnsPtr {
+		m[entry.IP] = entry.DNSPtr
+	}
+	return m
+}
+
+func floatingIPDNSPtrSchemaFromMap(m map[string]string) []schema.FloatingIPDNSPtr {
+	dnsPtr := make([]schema.FloatingIPDNSPtr, 0, len(m))
+	for ip, ptr := range m {
+		dnsPtr = append(dnsPtr, schema.FloatingIPDNSPtr{
+			IP:     ip,
+			DNSPtr: ptr,
+		})
+	}
+	return dnsPtr
+}
+
+func mapFromPrimaryIPDNSPtrSchema(dnsPtr []schema.PrimaryIPDNSPTR) map[string]string {
+	m := make(map[string]string, len(dnsPtr))
+	for _, entry := range dnsPtr {
+		m[entry.IP] = entry.DNSPtr
+	}
+	return m
+}
+
+func primaryIPDNSPtrSchemaFromMap(m map[string]string) []schema.PrimaryIPDNSPTR {
+	dnsPtr := make([]schema.PrimaryIPDNSPTR, 0, len(m))
+	for ip, ptr := range m {
+		dnsPtr = append(dnsPtr, schema.PrimaryIPDNSPTR{
+			IP:     ip,
+			DNSPtr: ptr,
+		})
+	}
+	return dnsPtr
+}
+
+func mapFromServerPublicNetIPv6DNSPtrSchema(dnsPtr []schema.ServerPublicNetIPv6DNSPtr) map[string]string {
+	m := make(map[string]string, len(dnsPtr))
+	for _, entry := range dnsPtr {
+		m[entry.IP] = entry.DNSPtr
+	}
+	return m
+}
+
+func serverPublicNetIPv6DNSPtrSchemaFromMap(m map[string]string) []schema.ServerPublicNetIPv6DNSPtr {
+	dnsPtr := make([]schema.ServerPublicNetIPv6DNSPtr, 0, len(m))
+	for ip, ptr := range m {
+		dnsPtr = append(dnsPtr, schema.ServerPublicNetIPv6DNSPtr{
+			IP:     ip,
+			DNSPtr: ptr,
+		})
+	}
+	return dnsPtr
+}
+
+func floatingIPToIPString(ip FloatingIP) string {
+	if ip.Type == FloatingIPTypeIPv4 {
+		return ip.IP.String()
+	}
+	return ip.Network.String()
+}
+
+func primaryIPToIPString(ip PrimaryIP) string {
+	if ip.Type == PrimaryIPTypeIPv4 {
+		return ip.IP.String()
+	}
+	return ip.Network.String()
+}
+
+func floatingIPFromInt64(id int64) *FloatingIP {
+	return &FloatingIP{ID: id}
+}
+
+func int64FromFloatingIP(f *FloatingIP) int64 {
+	if f == nil {
+		return 0
+	}
+	return f.ID
+}
+
+func firewallStatusFromSchemaServerFirewall(fw schema.ServerFirewall) *ServerFirewallStatus {
+	return &ServerFirewallStatus{
+		Firewall: Firewall{ID: fw.ID},
+		Status:   FirewallStatus(fw.Status),
+	}
+}
+
+func serverFirewallSchemaFromFirewallStatus(s *ServerFirewallStatus) schema.ServerFirewall {
+	return schema.ServerFirewall{
+		ID:     s.Firewall.ID,
+		Status: string(s.Status),
+	}
+}
+
+func ipFromServerPublicNetIPv6Schema(s schema.ServerPublicNetIPv6) net.IP {
+	ip, _, _ := net.ParseCIDR(s.IP)
+	return ip
+}
+
+func ipNetFromServerPublicNetIPv6Schema(s schema.ServerPublicNetIPv6) *net.IPNet {
+	_, n, _ := net.ParseCIDR(s.IP)
+	return n
+}
+
+func serverFromImageCreatedFromSchema(s schema.ImageCreatedFrom) Server {
+	return Server{
+		ID:   s.ID,
+		Name: s.Name,
+	}
+}
+
+func ipFromString(s string) net.IP {
+	return net.ParseIP(s)
+}
+
+func stringFromIP(ip net.IP) string {
+	if ip == nil {
+		return ""
+	}
+	return ip.String()
+}
+
+func ipNetFromString(s string) net.IPNet {
+	_, n, _ := net.ParseCIDR(s)
+	if n == nil {
+		return net.IPNet{}
+	}
+	return *n
+}
+
+func stringFromIPNet(ip net.IPNet) string {
+	return ip.String()
+}
+
+func timeToTimePtr(t time.Time) *time.Time {
+	// Some hcloud structs don't use pointers for nullable times, so the zero value
+	// should be treated as nil.
+	if t == (time.Time{}) {
+		return nil
+	}
+	return &t
+}
+
+func durationFromIntSeconds(s int) time.Duration {
+	return time.Duration(s) * time.Second
+}
+
+func intSecondsFromDuration(d time.Duration) int {
+	return int(d.Seconds())
+}
+
+func errorDetailsFromSchema(d interface{}) interface{} {
+	if d, ok := d.(schema.ErrorDetailsInvalidInput); ok {
+		details := ErrorDetailsInvalidInput{
+			Fields: make([]ErrorDetailsInvalidInputField, len(d.Fields)),
+		}
+		for i, field := range d.Fields {
+			details.Fields[i] = ErrorDetailsInvalidInputField{
+				Name:     field.Name,
+				Messages: field.Messages,
+			}
+		}
+		return details
+	}
+	return nil
+}
+
+func schemaFromErrorDetails(d interface{}) interface{} {
+	if d, ok := d.(ErrorDetailsInvalidInput); ok {
+		details := schema.ErrorDetailsInvalidInput{
+			Fields: make([]struct {
+				Name     string   `json:"name"`
+				Messages []string `json:"messages"`
+			}, len(d.Fields)),
+		}
+		for i, field := range d.Fields {
+			details.Fields[i] = struct {
+				Name     string   `json:"name"`
+				Messages []string `json:"messages"`
+			}{Name: field.Name, Messages: field.Messages}
+		}
+		return details
+	}
+	return nil
+}
+
+func imagePricingFromSchema(s schema.Pricing) ImagePricing {
+	return ImagePricing{
+		PerGBMonth: Price{
+			Net:      s.Image.PricePerGBMonth.Net,
+			Gross:    s.Image.PricePerGBMonth.Gross,
+			Currency: s.Currency,
+			VATRate:  s.VATRate,
+		},
+	}
+}
+
+func floatingIPPricingFromSchema(s schema.Pricing) FloatingIPPricing {
+	return FloatingIPPricing{
+		Monthly: Price{
+			Net:      s.FloatingIP.PriceMonthly.Net,
+			Gross:    s.FloatingIP.PriceMonthly.Gross,
+			Currency: s.Currency,
+			VATRate:  s.VATRate,
+		},
+	}
+}
+
+func floatingIPTypePricingFromSchema(s schema.Pricing) []FloatingIPTypePricing {
+	p := make([]FloatingIPTypePricing, len(s.FloatingIPs))
+	for i, floatingIPType := range s.FloatingIPs {
+		var pricings = make([]FloatingIPTypeLocationPricing, len(floatingIPType.Prices))
+		for i, price := range floatingIPType.Prices {
+			pricings[i] = FloatingIPTypeLocationPricing{
+				Location: &Location{Name: price.Location},
+				Monthly: Price{
+					Currency: s.Currency,
+					VATRate:  s.VATRate,
+					Net:      price.PriceMonthly.Net,
+					Gross:    price.PriceMonthly.Gross,
+				},
+			}
+		}
+		p[i] = FloatingIPTypePricing{Type: FloatingIPType(floatingIPType.Type), Pricings: pricings}
+	}
+	return p
+}
+
+func primaryIPPricingFromSchema(s schema.Pricing) []PrimaryIPPricing {
+	p := make([]PrimaryIPPricing, len(s.FloatingIPs))
+	for i, primaryIPType := range s.PrimaryIPs {
+		var pricings = make([]PrimaryIPTypePricing, len(primaryIPType.Prices))
+		for i, price := range primaryIPType.Prices {
+			pricings[i] = PrimaryIPTypePricing{
+				Location: price.Location,
+				Monthly: PrimaryIPPrice{
+					Net:   price.PriceMonthly.Net,
+					Gross: price.PriceMonthly.Gross,
+				},
+				Hourly: PrimaryIPPrice{
+					Net:   price.PriceHourly.Net,
+					Gross: price.PriceHourly.Gross,
+				},
+			}
+		}
+		p[i] = PrimaryIPPricing{Type: primaryIPType.Type, Pricings: pricings}
+	}
+	return p
+}
+
+func trafficPricingFromSchema(s schema.Pricing) TrafficPricing {
+	return TrafficPricing{
+		PerTB: Price{
+			Net:      s.Traffic.PricePerTB.Net,
+			Gross:    s.Traffic.PricePerTB.Gross,
+			Currency: s.Currency,
+			VATRate:  s.VATRate,
+		},
+	}
+}
+
+func serverTypePricingFromSchema(s schema.Pricing) []ServerTypePricing {
+	p := make([]ServerTypePricing, len(s.ServerTypes))
+	for i, serverType := range s.ServerTypes {
+		var pricings = make([]ServerTypeLocationPricing, len(serverType.Prices))
+		for i, price := range serverType.Prices {
+			pricings[i] = ServerTypeLocationPricing{
+				Location: &Location{Name: price.Location},
+				Hourly: Price{
+					Currency: s.Currency,
+					VATRate:  s.VATRate,
+					Net:      price.PriceHourly.Net,
+					Gross:    price.PriceHourly.Gross,
+				},
+				Monthly: Price{
+					Currency: s.Currency,
+					VATRate:  s.VATRate,
+					Net:      price.PriceMonthly.Net,
+					Gross:    price.PriceMonthly.Gross,
+				},
+			}
+		}
+		p[i] = ServerTypePricing{
+			ServerType: &ServerType{
+				ID:   serverType.ID,
+				Name: serverType.Name,
+			},
+			Pricings: pricings,
+		}
+	}
+	return p
+}
+
+func loadBalancerTypePricingFromSchema(s schema.Pricing) []LoadBalancerTypePricing {
+	p := make([]LoadBalancerTypePricing, len(s.LoadBalancerTypes))
+	for i, loadBalancerType := range s.LoadBalancerTypes {
+		var pricings = make([]LoadBalancerTypeLocationPricing, len(loadBalancerType.Prices))
+		for i, price := range loadBalancerType.Prices {
+			pricings[i] = LoadBalancerTypeLocationPricing{
+				Location: &Location{Name: price.Location},
+				Hourly: Price{
+					Currency: s.Currency,
+					VATRate:  s.VATRate,
+					Net:      price.PriceHourly.Net,
+					Gross:    price.PriceHourly.Gross,
+				},
+				Monthly: Price{
+					Currency: s.Currency,
+					VATRate:  s.VATRate,
+					Net:      price.PriceMonthly.Net,
+					Gross:    price.PriceMonthly.Gross,
+				},
+			}
+		}
+		p[i] = LoadBalancerTypePricing{
+			LoadBalancerType: &LoadBalancerType{
+				ID:   loadBalancerType.ID,
+				Name: loadBalancerType.Name,
+			},
+			Pricings: pricings,
+		}
+	}
+	return p
+}
+
+func volumePricingFromSchema(s schema.Pricing) VolumePricing {
+	return VolumePricing{
+		PerGBMonthly: Price{
+			Net:      s.Volume.PricePerGBPerMonth.Net,
+			Gross:    s.Volume.PricePerGBPerMonth.Gross,
+			Currency: s.Currency,
+			VATRate:  s.VATRate,
+		},
+	}
+}
+
+func anyFromLoadBalancerType(t *LoadBalancerType) interface{} {
+	if t == nil {
+		return nil
+	}
+	if t.ID != 0 {
+		return t.ID
+	}
+	return t.Name
+}
+
+func serverMetricsTimeSeriesFromSchema(s schema.ServerTimeSeriesVals) ([]ServerMetricsValue, error) {
+	vals := make([]ServerMetricsValue, len(s.Values))
+
+	for i, rawVal := range s.Values {
+		var val ServerMetricsValue
+
+		tup, ok := rawVal.([]interface{})
+		if !ok {
+			return nil, fmt.Errorf("failed to convert value to tuple: %v", rawVal)
+		}
+		if len(tup) != 2 {
+			return nil, fmt.Errorf("invalid tuple size: %d: %v", len(tup), rawVal)
+		}
+		ts, ok := tup[0].(float64)
+		if !ok {
+			return nil, fmt.Errorf("convert to float64: %v", tup[0])
+		}
+		val.Timestamp = ts
+
+		v, ok := tup[1].(string)
+		if !ok {
+			return nil, fmt.Errorf("not a string: %v", tup[1])
+		}
+		val.Value = v
+		vals[i] = val
+	}
+
+	return vals, nil
+}
+
+func loadBalancerMetricsTimeSeriesFromSchema(s schema.LoadBalancerTimeSeriesVals) ([]LoadBalancerMetricsValue, error) {
+	vals := make([]LoadBalancerMetricsValue, len(s.Values))
+
+	for i, rawVal := range s.Values {
+		var val LoadBalancerMetricsValue
+
+		tup, ok := rawVal.([]interface{})
+		if !ok {
+			return nil, fmt.Errorf("failed to convert value to tuple: %v", rawVal)
+		}
+		if len(tup) != 2 {
+			return nil, fmt.Errorf("invalid tuple size: %d: %v", len(tup), rawVal)
+		}
+		ts, ok := tup[0].(float64)
+		if !ok {
+			return nil, fmt.Errorf("convert to float64: %v", tup[0])
+		}
+		val.Timestamp = ts
+
+		v, ok := tup[1].(string)
+		if !ok {
+			return nil, fmt.Errorf("not a string: %v", tup[1])
+		}
+		val.Value = v
+		vals[i] = val
+	}
+
+	return vals, nil
+}
+
+func mapEmptyStringToNil(s string) *string {
+	if s == "" {
+		return nil
+	}
+	return &s
+}
+
+func stringPtrFromLoadBalancerServiceProtocol(p LoadBalancerServiceProtocol) *string {
+	return mapEmptyStringToNil(string(p))
+}
+
+func stringPtrFromNetworkZone(z NetworkZone) *string {
+	return mapEmptyStringToNil(string(z))
+}
+
+func mapZeroUint64ToNil(i uint64) *uint64 {
+	if i == 0 {
+		return nil
+	}
+	return &i
+}
+
+func schemaFromLoadBalancerCreateOptsTargetLabelSelector(l LoadBalancerCreateOptsTargetLabelSelector) *schema.LoadBalancerCreateRequestTargetLabelSelector {
+	if l.Selector == "" {
+		return nil
+	}
+	return &schema.LoadBalancerCreateRequestTargetLabelSelector{Selector: l.Selector}
+}
+
+func schemaFromLoadBalancerCreateOptsTargetIP(l LoadBalancerCreateOptsTargetIP) *schema.LoadBalancerCreateRequestTargetIP {
+	if l.IP == "" {
+		return nil
+	}
+	return &schema.LoadBalancerCreateRequestTargetIP{IP: l.IP}
+}
+
+func schemaFromLoadBalancerCreateOptsTargetServer(l LoadBalancerCreateOptsTargetServer) *schema.LoadBalancerCreateRequestTargetServer {
+	if l.Server == nil {
+		return nil
+	}
+	return &schema.LoadBalancerCreateRequestTargetServer{ID: l.Server.ID}
+}
+
+func stringMapToStringMapPtr(m map[string]string) *map[string]string {
+	if m == nil {
+		return nil
+	}
+	return &m
+}
+
+func rawSchemaFromErrorDetails(v interface{}) json.RawMessage {
+	d := schemaFromErrorDetails(v)
+	if v == nil {
+		return nil
+	}
+	msg, _ := json.Marshal(d)
+	return msg
+}
+
+func mapZeroFloat32ToNil(f float32) *float32 {
+	if f == 0 {
+		return nil
+	}
+	return &f
+}
+
+func isDeprecationNotNil(d *DeprecationInfo) bool {
+	return d != nil
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/server.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/server.go
index d85699c925e..fe8bf934c4b 100644
--- a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/server.go
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/server.go
@@ -38,6 +38,7 @@ type Server struct {
 	Volumes         []*Volume
 	PrimaryDiskSize int
 	PlacementGroup  *PlacementGroup
+	LoadBalancers   []*LoadBalancer
 }
 
 // ServerProtection represents the protection level of a server.
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_action_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_action_client_iface.go
new file mode 100644
index 00000000000..1917574a94d
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_action_client_iface.go
@@ -0,0 +1,60 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IActionClient ...
+type IActionClient interface {
+	// GetByID retrieves an action by its ID. If the action does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*Action, *Response, error)
+	// List returns a list of actions for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts ActionListOpts) ([]*Action, *Response, error)
+	// All returns all actions.
+	All(ctx context.Context) ([]*Action, error)
+	// AllWithOpts returns all actions for the given options.
+	AllWithOpts(ctx context.Context, opts ActionListOpts) ([]*Action, error)
+	// WatchOverallProgress watches several actions' progress until they complete
+	// with success or error. This watching happens in a goroutine and updates are
+	// provided through the two returned channels:
+	//
+	//   - The first channel receives percentage updates of the progress, based on
+	//     the number of completed versus total watched actions. The return value
+	//     is an int between 0 and 100.
+	//   - The second channel returned receives errors for actions that did not
+	//     complete successfully, as well as any errors that happened while
+	//     querying the API.
+	//
+	// By default, the method keeps watching until all actions have finished
+	// processing. If you want to be able to cancel the method or configure a
+	// timeout, use the [context.Context]. Once the method has stopped watching,
+	// both returned channels are closed.
+	//
+	// WatchOverallProgress uses the [WithPollBackoffFunc] of the [Client] to wait
+	// until sending the next request.
+	WatchOverallProgress(ctx context.Context, actions []*Action) (<-chan int, <-chan error)
+	// WatchProgress watches one action's progress until it completes with success
+	// or error. This watching happens in a goroutine and updates are provided
+	// through the two returned channels:
+	//
+	//   - The first channel receives percentage updates of the progress, based on
+	//     the progress percentage indicated by the API. The return value is an int
+	//     between 0 and 100.
+	//   - The second channel receives any errors that happened while querying the
+	//     API, as well as the error of the action if it did not complete
+	//     successfully, or nil if it did.
+	//
+	// By default, the method keeps watching until the action has finished
+	// processing. If you want to be able to cancel the method or configure a
+	// timeout, use the [context.Context]. Once the method has stopped watching,
+	// both returned channels are closed.
+	//
+	// WatchProgress uses the [WithPollBackoffFunc] of the [Client] to wait until
+	// sending the next request.
+	WatchProgress(ctx context.Context, action *Action) (<-chan int, <-chan error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_certificate_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_certificate_client_iface.go
new file mode 100644
index 00000000000..94583925ff5
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_certificate_client_iface.go
@@ -0,0 +1,40 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// ICertificateClient ...
+type ICertificateClient interface {
+	// GetByID retrieves a Certificate by its ID. If the Certificate does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*Certificate, *Response, error)
+	// GetByName retrieves a Certificate by its name. If the Certificate does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*Certificate, *Response, error)
+	// Get retrieves a Certificate by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a Certificate by its name. If the Certificate does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*Certificate, *Response, error)
+	// List returns a list of Certificates for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts CertificateListOpts) ([]*Certificate, *Response, error)
+	// All returns all Certificates.
+	All(ctx context.Context) ([]*Certificate, error)
+	// AllWithOpts returns all Certificates for the given options.
+	AllWithOpts(ctx context.Context, opts CertificateListOpts) ([]*Certificate, error)
+	// Create creates a new uploaded certificate.
+	//
+	// Create returns an error for certificates of any other type. Use
+	// CreateCertificate to create such certificates.
+	Create(ctx context.Context, opts CertificateCreateOpts) (*Certificate, *Response, error)
+	// CreateCertificate creates a new certificate of any type.
+	CreateCertificate(ctx context.Context, opts CertificateCreateOpts) (CertificateCreateResult, *Response, error)
+	// Update updates a Certificate.
+	Update(ctx context.Context, certificate *Certificate, opts CertificateUpdateOpts) (*Certificate, *Response, error)
+	// Delete deletes a certificate.
+	Delete(ctx context.Context, certificate *Certificate) (*Response, error)
+	// RetryIssuance retries the issuance of a failed managed certificate.
+	RetryIssuance(ctx context.Context, certificate *Certificate) (*Action, *Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_datacenter_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_datacenter_client_iface.go
new file mode 100644
index 00000000000..f9376756783
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_datacenter_client_iface.go
@@ -0,0 +1,27 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IDatacenterClient ...
+type IDatacenterClient interface {
+	// GetByID retrieves a datacenter by its ID. If the datacenter does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*Datacenter, *Response, error)
+	// GetByName retrieves a datacenter by its name. If the datacenter does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*Datacenter, *Response, error)
+	// Get retrieves a datacenter by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a datacenter by its name. If the datacenter does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*Datacenter, *Response, error)
+	// List returns a list of datacenters for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts DatacenterListOpts) ([]*Datacenter, *Response, error)
+	// All returns all datacenters.
+	All(ctx context.Context) ([]*Datacenter, error)
+	// AllWithOpts returns all datacenters for the given options.
+	AllWithOpts(ctx context.Context, opts DatacenterListOpts) ([]*Datacenter, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_firewall_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_firewall_client_iface.go
new file mode 100644
index 00000000000..ce6481158b5
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_firewall_client_iface.go
@@ -0,0 +1,37 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IFirewallClient ...
+type IFirewallClient interface {
+	// GetByID retrieves a Firewall by its ID. If the Firewall does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*Firewall, *Response, error)
+	// GetByName retrieves a Firewall by its name. If the Firewall does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*Firewall, *Response, error)
+	// Get retrieves a Firewall by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a Firewall by its name. If the Firewall does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*Firewall, *Response, error)
+	// List returns a list of Firewalls for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts FirewallListOpts) ([]*Firewall, *Response, error)
+	// All returns all Firewalls.
+	All(ctx context.Context) ([]*Firewall, error)
+	// AllWithOpts returns all Firewalls for the given options.
+	AllWithOpts(ctx context.Context, opts FirewallListOpts) ([]*Firewall, error)
+	// Create creates a new Firewall.
+	Create(ctx context.Context, opts FirewallCreateOpts) (FirewallCreateResult, *Response, error)
+	// Update updates a Firewall.
+	Update(ctx context.Context, firewall *Firewall, opts FirewallUpdateOpts) (*Firewall, *Response, error)
+	// Delete deletes a Firewall.
+	Delete(ctx context.Context, firewall *Firewall) (*Response, error)
+	// SetRules sets the rules of a Firewall.
+	SetRules(ctx context.Context, firewall *Firewall, opts FirewallSetRulesOpts) ([]*Action, *Response, error)
+	ApplyResources(ctx context.Context, firewall *Firewall, resources []FirewallResource) ([]*Action, *Response, error)
+	RemoveResources(ctx context.Context, firewall *Firewall, resources []FirewallResource) ([]*Action, *Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_floating_ip_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_floating_ip_client_iface.go
new file mode 100644
index 00000000000..4d71be26906
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_floating_ip_client_iface.go
@@ -0,0 +1,43 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IFloatingIPClient ...
+type IFloatingIPClient interface {
+	// GetByID retrieves a Floating IP by its ID. If the Floating IP does not exist,
+	// nil is returned.
+	GetByID(ctx context.Context, id int64) (*FloatingIP, *Response, error)
+	// GetByName retrieves a Floating IP by its name. If the Floating IP does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*FloatingIP, *Response, error)
+	// Get retrieves a Floating IP by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a Floating IP by its name. If the Floating IP does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*FloatingIP, *Response, error)
+	// List returns a list of Floating IPs for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts FloatingIPListOpts) ([]*FloatingIP, *Response, error)
+	// All returns all Floating IPs.
+	All(ctx context.Context) ([]*FloatingIP, error)
+	// AllWithOpts returns all Floating IPs for the given options.
+	AllWithOpts(ctx context.Context, opts FloatingIPListOpts) ([]*FloatingIP, error)
+	// Create creates a Floating IP.
+	Create(ctx context.Context, opts FloatingIPCreateOpts) (FloatingIPCreateResult, *Response, error)
+	// Delete deletes a Floating IP.
+	Delete(ctx context.Context, floatingIP *FloatingIP) (*Response, error)
+	// Update updates a Floating IP.
+	Update(ctx context.Context, floatingIP *FloatingIP, opts FloatingIPUpdateOpts) (*FloatingIP, *Response, error)
+	// Assign assigns a Floating IP to a server.
+	Assign(ctx context.Context, floatingIP *FloatingIP, server *Server) (*Action, *Response, error)
+	// Unassign unassigns a Floating IP from the currently assigned server.
+	Unassign(ctx context.Context, floatingIP *FloatingIP) (*Action, *Response, error)
+	// ChangeDNSPtr changes or resets the reverse DNS pointer for a Floating IP address.
+	// Pass a nil ptr to reset the reverse DNS pointer to its default value.
+	ChangeDNSPtr(ctx context.Context, floatingIP *FloatingIP, ip string, ptr *string) (*Action, *Response, error)
+	// ChangeProtection changes the resource protection level of a Floating IP.
+	ChangeProtection(ctx context.Context, floatingIP *FloatingIP, opts FloatingIPChangeProtectionOpts) (*Action, *Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_image_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_image_client_iface.go
new file mode 100644
index 00000000000..17fbcd929a0
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_image_client_iface.go
@@ -0,0 +1,48 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IImageClient ...
+type IImageClient interface {
+	// GetByID retrieves an image by its ID. If the image does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*Image, *Response, error)
+	// GetByName retrieves an image by its name. If the image does not exist, nil is returned.
+	//
+	// Deprecated: Use [ImageClient.GetByNameAndArchitecture] instead.
+	GetByName(ctx context.Context, name string) (*Image, *Response, error)
+	// GetByNameAndArchitecture retrieves an image by its name and architecture. If the image does not exist,
+	// nil is returned.
+	// In contrast to [ImageClient.Get], this method also returns deprecated images. Depending on your needs you should
+	// check for this in your calling method.
+	GetByNameAndArchitecture(ctx context.Context, name string, architecture Architecture) (*Image, *Response, error)
+	// Get retrieves an image by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves an image by its name. If the image does not exist, nil is returned.
+	//
+	// Deprecated: Use [ImageClient.GetForArchitecture] instead.
+	Get(ctx context.Context, idOrName string) (*Image, *Response, error)
+	// GetForArchitecture retrieves an image by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves an image by its name and architecture. If the image does not exist, nil is returned.
+	//
+	// In contrast to [ImageClient.Get], this method also returns deprecated images. Depending on your needs you should
+	// check for this in your calling method.
+	GetForArchitecture(ctx context.Context, idOrName string, architecture Architecture) (*Image, *Response, error)
+	// List returns a list of images for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts ImageListOpts) ([]*Image, *Response, error)
+	// All returns all images.
+	All(ctx context.Context) ([]*Image, error)
+	// AllWithOpts returns all images for the given options.
+	AllWithOpts(ctx context.Context, opts ImageListOpts) ([]*Image, error)
+	// Delete deletes an image.
+	Delete(ctx context.Context, image *Image) (*Response, error)
+	// Update updates an image.
+	Update(ctx context.Context, image *Image, opts ImageUpdateOpts) (*Image, *Response, error)
+	// ChangeProtection changes the resource protection level of an image.
+	ChangeProtection(ctx context.Context, image *Image, opts ImageChangeProtectionOpts) (*Action, *Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_iso_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_iso_client_iface.go
new file mode 100644
index 00000000000..aff450edffd
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_iso_client_iface.go
@@ -0,0 +1,26 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IISOClient ...
+type IISOClient interface {
+	// GetByID retrieves an ISO by its ID.
+	GetByID(ctx context.Context, id int64) (*ISO, *Response, error)
+	// GetByName retrieves an ISO by its name.
+	GetByName(ctx context.Context, name string) (*ISO, *Response, error)
+	// Get retrieves an ISO by its ID if the input can be parsed as an integer, otherwise it retrieves an ISO by its name.
+	Get(ctx context.Context, idOrName string) (*ISO, *Response, error)
+	// List returns a list of ISOs for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts ISOListOpts) ([]*ISO, *Response, error)
+	// All returns all ISOs.
+	All(ctx context.Context) ([]*ISO, error)
+	// AllWithOpts returns all ISOs for the given options.
+	AllWithOpts(ctx context.Context, opts ISOListOpts) ([]*ISO, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_load_balancer_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_load_balancer_client_iface.go
new file mode 100644
index 00000000000..2665f22b02d
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_load_balancer_client_iface.go
@@ -0,0 +1,71 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+	"net"
+)
+
+// ILoadBalancerClient ...
+type ILoadBalancerClient interface {
+	// GetByID retrieves a Load Balancer by its ID. If the Load Balancer does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*LoadBalancer, *Response, error)
+	// GetByName retrieves a Load Balancer by its name. If the Load Balancer does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*LoadBalancer, *Response, error)
+	// Get retrieves a Load Balancer by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a Load Balancer by its name. If the Load Balancer does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*LoadBalancer, *Response, error)
+	// List returns a list of Load Balancers for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts LoadBalancerListOpts) ([]*LoadBalancer, *Response, error)
+	// All returns all Load Balancers.
+	All(ctx context.Context) ([]*LoadBalancer, error)
+	// AllWithOpts returns all Load Balancers for the given options.
+	AllWithOpts(ctx context.Context, opts LoadBalancerListOpts) ([]*LoadBalancer, error)
+	// Update updates a Load Balancer.
+	Update(ctx context.Context, loadBalancer *LoadBalancer, opts LoadBalancerUpdateOpts) (*LoadBalancer, *Response, error)
+	// Create creates a new Load Balancer.
+	Create(ctx context.Context, opts LoadBalancerCreateOpts) (LoadBalancerCreateResult, *Response, error)
+	// Delete deletes a Load Balancer.
+	Delete(ctx context.Context, loadBalancer *LoadBalancer) (*Response, error)
+	// AddServerTarget adds a server target to a Load Balancer.
+	AddServerTarget(ctx context.Context, loadBalancer *LoadBalancer, opts LoadBalancerAddServerTargetOpts) (*Action, *Response, error)
+	// RemoveServerTarget removes a server target from a Load Balancer.
+	RemoveServerTarget(ctx context.Context, loadBalancer *LoadBalancer, server *Server) (*Action, *Response, error)
+	// AddLabelSelectorTarget adds a label selector target to a Load Balancer.
+	AddLabelSelectorTarget(ctx context.Context, loadBalancer *LoadBalancer, opts LoadBalancerAddLabelSelectorTargetOpts) (*Action, *Response, error)
+	// RemoveLabelSelectorTarget removes a label selector target from a Load Balancer.
+	RemoveLabelSelectorTarget(ctx context.Context, loadBalancer *LoadBalancer, labelSelector string) (*Action, *Response, error)
+	// AddIPTarget adds an IP target to a Load Balancer.
+	AddIPTarget(ctx context.Context, loadBalancer *LoadBalancer, opts LoadBalancerAddIPTargetOpts) (*Action, *Response, error)
+	// RemoveIPTarget removes an IP target from a Load Balancer.
+	RemoveIPTarget(ctx context.Context, loadBalancer *LoadBalancer, ip net.IP) (*Action, *Response, error)
+	// AddService adds a service to a Load Balancer.
+	AddService(ctx context.Context, loadBalancer *LoadBalancer, opts LoadBalancerAddServiceOpts) (*Action, *Response, error)
+	// UpdateService updates a Load Balancer service.
+	UpdateService(ctx context.Context, loadBalancer *LoadBalancer, listenPort int, opts LoadBalancerUpdateServiceOpts) (*Action, *Response, error)
+	// DeleteService deletes a Load Balancer service.
+	DeleteService(ctx context.Context, loadBalancer *LoadBalancer, listenPort int) (*Action, *Response, error)
+	// ChangeProtection changes the resource protection level of a Load Balancer.
+	ChangeProtection(ctx context.Context, loadBalancer *LoadBalancer, opts LoadBalancerChangeProtectionOpts) (*Action, *Response, error)
+	// ChangeAlgorithm changes the algorithm of a Load Balancer.
+	ChangeAlgorithm(ctx context.Context, loadBalancer *LoadBalancer, opts LoadBalancerChangeAlgorithmOpts) (*Action, *Response, error)
+	// AttachToNetwork attaches a Load Balancer to a network.
+	AttachToNetwork(ctx context.Context, loadBalancer *LoadBalancer, opts LoadBalancerAttachToNetworkOpts) (*Action, *Response, error)
+	// DetachFromNetwork detaches a Load Balancer from a network.
+	DetachFromNetwork(ctx context.Context, loadBalancer *LoadBalancer, opts LoadBalancerDetachFromNetworkOpts) (*Action, *Response, error)
+	// EnablePublicInterface enables the Load Balancer's public network interface.
+	EnablePublicInterface(ctx context.Context, loadBalancer *LoadBalancer) (*Action, *Response, error)
+	// DisablePublicInterface disables the Load Balancer's public network interface.
+	DisablePublicInterface(ctx context.Context, loadBalancer *LoadBalancer) (*Action, *Response, error)
+	// ChangeType changes a Load Balancer's type.
+	ChangeType(ctx context.Context, loadBalancer *LoadBalancer, opts LoadBalancerChangeTypeOpts) (*Action, *Response, error)
+	// GetMetrics obtains metrics for a Load Balancer.
+	GetMetrics(ctx context.Context, lb *LoadBalancer, opts LoadBalancerGetMetricsOpts) (*LoadBalancerMetrics, *Response, error)
+	// ChangeDNSPtr changes or resets the reverse DNS pointer for a Load Balancer.
+	// Pass a nil ptr to reset the reverse DNS pointer to its default value.
+	ChangeDNSPtr(ctx context.Context, lb *LoadBalancer, ip string, ptr *string) (*Action, *Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_load_balancer_type_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_load_balancer_type_client_iface.go
new file mode 100644
index 00000000000..fd3289d4df2
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_load_balancer_type_client_iface.go
@@ -0,0 +1,27 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// ILoadBalancerTypeClient ...
+type ILoadBalancerTypeClient interface {
+	// GetByID retrieves a Load Balancer type by its ID. If the Load Balancer type does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*LoadBalancerType, *Response, error)
+	// GetByName retrieves a Load Balancer type by its name. If the Load Balancer type does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*LoadBalancerType, *Response, error)
+	// Get retrieves a Load Balancer type by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a Load Balancer type by its name. If the Load Balancer type does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*LoadBalancerType, *Response, error)
+	// List returns a list of Load Balancer types for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts LoadBalancerTypeListOpts) ([]*LoadBalancerType, *Response, error)
+	// All returns all Load Balancer types.
+	All(ctx context.Context) ([]*LoadBalancerType, error)
+	// AllWithOpts returns all Load Balancer types for the given options.
+	AllWithOpts(ctx context.Context, opts LoadBalancerTypeListOpts) ([]*LoadBalancerType, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_location_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_location_client_iface.go
new file mode 100644
index 00000000000..9da4d5f6bd7
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_location_client_iface.go
@@ -0,0 +1,27 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// ILocationClient ...
+type ILocationClient interface {
+	// GetByID retrieves a location by its ID. If the location does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*Location, *Response, error)
+	// GetByName retrieves an location by its name. If the location does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*Location, *Response, error)
+	// Get retrieves a location by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a location by its name. If the location does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*Location, *Response, error)
+	// List returns a list of locations for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts LocationListOpts) ([]*Location, *Response, error)
+	// All returns all locations.
+	All(ctx context.Context) ([]*Location, error)
+	// AllWithOpts returns all locations for the given options.
+	AllWithOpts(ctx context.Context, opts LocationListOpts) ([]*Location, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_network_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_network_client_iface.go
new file mode 100644
index 00000000000..f8b752e3478
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_network_client_iface.go
@@ -0,0 +1,45 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// INetworkClient ...
+type INetworkClient interface {
+	// GetByID retrieves a network by its ID. If the network does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*Network, *Response, error)
+	// GetByName retrieves a network by its name. If the network does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*Network, *Response, error)
+	// Get retrieves a network by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a network by its name. If the network does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*Network, *Response, error)
+	// List returns a list of networks for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts NetworkListOpts) ([]*Network, *Response, error)
+	// All returns all networks.
+	All(ctx context.Context) ([]*Network, error)
+	// AllWithOpts returns all networks for the given options.
+	AllWithOpts(ctx context.Context, opts NetworkListOpts) ([]*Network, error)
+	// Delete deletes a network.
+	Delete(ctx context.Context, network *Network) (*Response, error)
+	// Update updates a network.
+	Update(ctx context.Context, network *Network, opts NetworkUpdateOpts) (*Network, *Response, error)
+	// Create creates a new network.
+	Create(ctx context.Context, opts NetworkCreateOpts) (*Network, *Response, error)
+	// ChangeIPRange changes the IP range of a network.
+	ChangeIPRange(ctx context.Context, network *Network, opts NetworkChangeIPRangeOpts) (*Action, *Response, error)
+	// AddSubnet adds a subnet to a network.
+	AddSubnet(ctx context.Context, network *Network, opts NetworkAddSubnetOpts) (*Action, *Response, error)
+	// DeleteSubnet deletes a subnet from a network.
+	DeleteSubnet(ctx context.Context, network *Network, opts NetworkDeleteSubnetOpts) (*Action, *Response, error)
+	// AddRoute adds a route to a network.
+	AddRoute(ctx context.Context, network *Network, opts NetworkAddRouteOpts) (*Action, *Response, error)
+	// DeleteRoute deletes a route from a network.
+	DeleteRoute(ctx context.Context, network *Network, opts NetworkDeleteRouteOpts) (*Action, *Response, error)
+	// ChangeProtection changes the resource protection level of a network.
+	ChangeProtection(ctx context.Context, network *Network, opts NetworkChangeProtectionOpts) (*Action, *Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_placement_group_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_placement_group_client_iface.go
new file mode 100644
index 00000000000..9fadd4f2cba
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_placement_group_client_iface.go
@@ -0,0 +1,33 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IPlacementGroupClient ...
+type IPlacementGroupClient interface {
+	// GetByID retrieves a PlacementGroup by its ID. If the PlacementGroup does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*PlacementGroup, *Response, error)
+	// GetByName retrieves a PlacementGroup by its name. If the PlacementGroup does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*PlacementGroup, *Response, error)
+	// Get retrieves a PlacementGroup by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a PlacementGroup by its name. If the PlacementGroup does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*PlacementGroup, *Response, error)
+	// List returns a list of PlacementGroups for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts PlacementGroupListOpts) ([]*PlacementGroup, *Response, error)
+	// All returns all PlacementGroups.
+	All(ctx context.Context) ([]*PlacementGroup, error)
+	// AllWithOpts returns all PlacementGroups for the given options.
+	AllWithOpts(ctx context.Context, opts PlacementGroupListOpts) ([]*PlacementGroup, error)
+	// Create creates a new PlacementGroup.
+	Create(ctx context.Context, opts PlacementGroupCreateOpts) (PlacementGroupCreateResult, *Response, error)
+	// Update updates a PlacementGroup.
+	Update(ctx context.Context, placementGroup *PlacementGroup, opts PlacementGroupUpdateOpts) (*PlacementGroup, *Response, error)
+	// Delete deletes a PlacementGroup.
+	Delete(ctx context.Context, placementGroup *PlacementGroup) (*Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_pricing_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_pricing_client_iface.go
new file mode 100644
index 00000000000..cd4068c6228
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_pricing_client_iface.go
@@ -0,0 +1,13 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IPricingClient ...
+type IPricingClient interface {
+	// Get retrieves pricing information.
+	Get(ctx context.Context) (Pricing, *Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_primary_ip_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_primary_ip_client_iface.go
new file mode 100644
index 00000000000..6b8e617e233
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_primary_ip_client_iface.go
@@ -0,0 +1,43 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IPrimaryIPClient ...
+type IPrimaryIPClient interface {
+	// GetByID retrieves a Primary IP by its ID. If the Primary IP does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*PrimaryIP, *Response, error)
+	// GetByIP retrieves a Primary IP by its IP Address. If the Primary IP does not exist, nil is returned.
+	GetByIP(ctx context.Context, ip string) (*PrimaryIP, *Response, error)
+	// GetByName retrieves a Primary IP by its name. If the Primary IP does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*PrimaryIP, *Response, error)
+	// Get retrieves a Primary IP by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a Primary IP by its name. If the Primary IP does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*PrimaryIP, *Response, error)
+	// List returns a list of Primary IPs for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts PrimaryIPListOpts) ([]*PrimaryIP, *Response, error)
+	// All returns all Primary IPs.
+	All(ctx context.Context) ([]*PrimaryIP, error)
+	// AllWithOpts returns all Primary IPs for the given options.
+	AllWithOpts(ctx context.Context, opts PrimaryIPListOpts) ([]*PrimaryIP, error)
+	// Create creates a Primary IP.
+	Create(ctx context.Context, reqBody PrimaryIPCreateOpts) (*PrimaryIPCreateResult, *Response, error)
+	// Delete deletes a Primary IP.
+	Delete(ctx context.Context, primaryIP *PrimaryIP) (*Response, error)
+	// Update updates a Primary IP.
+	Update(ctx context.Context, primaryIP *PrimaryIP, reqBody PrimaryIPUpdateOpts) (*PrimaryIP, *Response, error)
+	// Assign a Primary IP to a resource.
+	Assign(ctx context.Context, opts PrimaryIPAssignOpts) (*Action, *Response, error)
+	// Unassign a Primary IP from a resource.
+	Unassign(ctx context.Context, id int64) (*Action, *Response, error)
+	// ChangeDNSPtr Change the reverse DNS from a Primary IP.
+	ChangeDNSPtr(ctx context.Context, opts PrimaryIPChangeDNSPtrOpts) (*Action, *Response, error)
+	// ChangeProtection Changes the protection configuration of a Primary IP.
+	ChangeProtection(ctx context.Context, opts PrimaryIPChangeProtectionOpts) (*Action, *Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_rdns_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_rdns_client_iface.go
new file mode 100644
index 00000000000..f92f186779f
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_rdns_client_iface.go
@@ -0,0 +1,15 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+	"net"
+)
+
+// IRDNSClient ...
+type IRDNSClient interface {
+	// ChangeDNSPtr changes or resets the reverse DNS pointer for a IP address.
+	// Pass a nil ptr to reset the reverse DNS pointer to its default value.
+	ChangeDNSPtr(ctx context.Context, rdns RDNSSupporter, ip net.IP, ptr *string) (*Action, *Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_resource_action_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_resource_action_client_iface.go
new file mode 100644
index 00000000000..67910ab223a
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_resource_action_client_iface.go
@@ -0,0 +1,20 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IResourceActionClient ...
+type IResourceActionClient interface {
+	// GetByID retrieves an action by its ID. If the action does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*Action, *Response, error)
+	// List returns a list of actions for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts ActionListOpts) ([]*Action, *Response, error)
+	// All returns all actions for the given options.
+	All(ctx context.Context, opts ActionListOpts) ([]*Action, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_schema.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_schema.go
new file mode 100644
index 00000000000..a908ab360e9
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_schema.go
@@ -0,0 +1,2476 @@
+// Code generated by github.com/jmattheis/goverter, DO NOT EDIT.
+//go:build !goverter
+
+package hcloud
+
+import (
+	schema "github.com/hetznercloud/hcloud-go/v2/hcloud/schema"
+	"net"
+	"time"
+)
+
+type converterImpl struct{}
+
+func (c *converterImpl) ActionFromSchema(source schema.Action) *Action {
+	var hcloudAction Action
+	hcloudAction.ID = source.ID
+	hcloudAction.Status = ActionStatus(source.Status)
+	hcloudAction.Command = source.Command
+	hcloudAction.Progress = source.Progress
+	hcloudAction.Started = source.Started
+	hcloudAction.Finished = c.pTimeTimeToTimeTime(source.Finished)
+	var pString *string
+	if source.Error != nil {
+		pString = &source.Error.Code
+	}
+	var xstring string
+	if pString != nil {
+		xstring = *pString
+	}
+	hcloudAction.ErrorCode = xstring
+	var pString2 *string
+	if source.Error != nil {
+		pString2 = &source.Error.Message
+	}
+	var xstring2 string
+	if pString2 != nil {
+		xstring2 = *pString2
+	}
+	hcloudAction.ErrorMessage = xstring2
+	var pHcloudActionResourceList []*ActionResource
+	if source.Resources != nil {
+		pHcloudActionResourceList = make([]*ActionResource, len(source.Resources))
+		for i := 0; i < len(source.Resources); i++ {
+			pHcloudActionResourceList[i] = c.schemaActionResourceReferenceToPHcloudActionResource(source.Resources[i])
+		}
+	}
+	hcloudAction.Resources = pHcloudActionResourceList
+	return &hcloudAction
+}
+func (c *converterImpl) ActionsFromSchema(source []schema.Action) []*Action {
+	var pHcloudActionList []*Action
+	if source != nil {
+		pHcloudActionList = make([]*Action, len(source))
+		for i := 0; i < len(source); i++ {
+			pHcloudActionList[i] = c.ActionFromSchema(source[i])
+		}
+	}
+	return pHcloudActionList
+}
+func (c *converterImpl) CertificateFromSchema(source schema.Certificate) *Certificate {
+	var hcloudCertificate Certificate
+	hcloudCertificate.ID = source.ID
+	hcloudCertificate.Name = source.Name
+	hcloudCertificate.Labels = source.Labels
+	hcloudCertificate.Type = CertificateType(source.Type)
+	hcloudCertificate.Certificate = source.Certificate
+	hcloudCertificate.Created = c.timeTimeToTimeTime(source.Created)
+	hcloudCertificate.NotValidBefore = c.timeTimeToTimeTime(source.NotValidBefore)
+	hcloudCertificate.NotValidAfter = c.timeTimeToTimeTime(source.NotValidAfter)
+	hcloudCertificate.DomainNames = source.DomainNames
+	hcloudCertificate.Fingerprint = source.Fingerprint
+	hcloudCertificate.Status = c.pSchemaCertificateStatusRefToPHcloudCertificateStatus(source.Status)
+	var hcloudCertificateUsedByRefList []CertificateUsedByRef
+	if source.UsedBy != nil {
+		hcloudCertificateUsedByRefList = make([]CertificateUsedByRef, len(source.UsedBy))
+		for i := 0; i < len(source.UsedBy); i++ {
+			hcloudCertificateUsedByRefList[i] = c.schemaCertificateUsedByRefToHcloudCertificateUsedByRef(source.UsedBy[i])
+		}
+	}
+	hcloudCertificate.UsedBy = hcloudCertificateUsedByRefList
+	return &hcloudCertificate
+}
+func (c *converterImpl) DatacenterFromSchema(source schema.Datacenter) *Datacenter {
+	var hcloudDatacenter Datacenter
+	hcloudDatacenter.ID = source.ID
+	hcloudDatacenter.Name = source.Name
+	hcloudDatacenter.Description = source.Description
+	hcloudDatacenter.Location = c.LocationFromSchema(source.Location)
+	hcloudDatacenter.ServerTypes = c.schemaDatacenterServerTypesToHcloudDatacenterServerTypes(source.ServerTypes)
+	return &hcloudDatacenter
+}
+func (c *converterImpl) DeprecationFromSchema(source *schema.DeprecationInfo) *DeprecationInfo {
+	var pHcloudDeprecationInfo *DeprecationInfo
+	if source != nil {
+		var hcloudDeprecationInfo DeprecationInfo
+		hcloudDeprecationInfo.Announced = c.timeTimeToTimeTime((*source).Announced)
+		hcloudDeprecationInfo.UnavailableAfter = c.timeTimeToTimeTime((*source).UnavailableAfter)
+		pHcloudDeprecationInfo = &hcloudDeprecationInfo
+	}
+	return pHcloudDeprecationInfo
+}
+func (c *converterImpl) ErrorFromSchema(source schema.Error) Error {
+	var hcloudError Error
+	hcloudError.Code = ErrorCode(source.Code)
+	hcloudError.Message = source.Message
+	hcloudError.Details = errorDetailsFromSchema(source.Details)
+	return hcloudError
+}
+func (c *converterImpl) FirewallFromSchema(source schema.Firewall) *Firewall {
+	var hcloudFirewall Firewall
+	hcloudFirewall.ID = source.ID
+	hcloudFirewall.Name = source.Name
+	hcloudFirewall.Labels = source.Labels
+	hcloudFirewall.Created = c.timeTimeToTimeTime(source.Created)
+	var hcloudFirewallRuleList []FirewallRule
+	if source.Rules != nil {
+		hcloudFirewallRuleList = make([]FirewallRule, len(source.Rules))
+		for i := 0; i < len(source.Rules); i++ {
+			hcloudFirewallRuleList[i] = c.schemaFirewallRuleToHcloudFirewallRule(source.Rules[i])
+		}
+	}
+	hcloudFirewall.Rules = hcloudFirewallRuleList
+	var hcloudFirewallResourceList []FirewallResource
+	if source.AppliedTo != nil {
+		hcloudFirewallResourceList = make([]FirewallResource, len(source.AppliedTo))
+		for j := 0; j < len(source.AppliedTo); j++ {
+			hcloudFirewallResourceList[j] = c.schemaFirewallResourceToHcloudFirewallResource(source.AppliedTo[j])
+		}
+	}
+	hcloudFirewall.AppliedTo = hcloudFirewallResourceList
+	return &hcloudFirewall
+}
+func (c *converterImpl) FloatingIPFromSchema(source schema.FloatingIP) *FloatingIP {
+	var hcloudFloatingIP FloatingIP
+	hcloudFloatingIP.ID = source.ID
+	var xstring string
+	if source.Description != nil {
+		xstring = *source.Description
+	}
+	hcloudFloatingIP.Description = xstring
+	hcloudFloatingIP.Created = c.timeTimeToTimeTime(source.Created)
+	hcloudFloatingIP.IP = ipFromFloatingIPSchema(source)
+	hcloudFloatingIP.Network = networkFromFloatingIPSchema(source)
+	hcloudFloatingIP.Type = FloatingIPType(source.Type)
+	var pHcloudServer *Server
+	if source.Server != nil {
+		hcloudServer := serverFromInt64(*source.Server)
+		pHcloudServer = &hcloudServer
+	}
+	hcloudFloatingIP.Server = pHcloudServer
+	hcloudFloatingIP.DNSPtr = mapFromFloatingIPDNSPtrSchema(source.DNSPtr)
+	hcloudFloatingIP.HomeLocation = c.LocationFromSchema(source.HomeLocation)
+	hcloudFloatingIP.Blocked = source.Blocked
+	hcloudFloatingIP.Protection = c.schemaFloatingIPProtectionToHcloudFloatingIPProtection(source.Protection)
+	hcloudFloatingIP.Labels = source.Labels
+	hcloudFloatingIP.Name = source.Name
+	return &hcloudFloatingIP
+}
+func (c *converterImpl) ISOFromSchema(source schema.ISO) *ISO {
+	hcloudISO := c.intISOFromSchema(source)
+	return &hcloudISO
+}
+func (c *converterImpl) ImageFromSchema(source schema.Image) *Image {
+	var hcloudImage Image
+	hcloudImage.ID = source.ID
+	var xstring string
+	if source.Name != nil {
+		xstring = *source.Name
+	}
+	hcloudImage.Name = xstring
+	hcloudImage.Type = ImageType(source.Type)
+	hcloudImage.Status = ImageStatus(source.Status)
+	hcloudImage.Description = source.Description
+	var xfloat32 float32
+	if source.ImageSize != nil {
+		xfloat32 = *source.ImageSize
+	}
+	hcloudImage.ImageSize = xfloat32
+	hcloudImage.DiskSize = source.DiskSize
+	hcloudImage.Created = c.pTimeTimeToTimeTime(source.Created)
+	hcloudImage.CreatedFrom = c.pSchemaImageCreatedFromToPHcloudServer(source.CreatedFrom)
+	var pHcloudServer *Server
+	if source.BoundTo != nil {
+		hcloudServer := serverFromInt64(*source.BoundTo)
+		pHcloudServer = &hcloudServer
+	}
+	hcloudImage.BoundTo = pHcloudServer
+	hcloudImage.RapidDeploy = source.RapidDeploy
+	hcloudImage.OSFlavor = source.OSFlavor
+	var xstring2 string
+	if source.OSVersion != nil {
+		xstring2 = *source.OSVersion
+	}
+	hcloudImage.OSVersion = xstring2
+	hcloudImage.Architecture = Architecture(source.Architecture)
+	hcloudImage.Protection = c.schemaImageProtectionToHcloudImageProtection(source.Protection)
+	hcloudImage.Deprecated = c.pTimeTimeToTimeTime(source.Deprecated)
+	hcloudImage.Labels = source.Labels
+	hcloudImage.Deleted = c.pTimeTimeToTimeTime(source.Deleted)
+	return &hcloudImage
+}
+func (c *converterImpl) LoadBalancerFromSchema(source schema.LoadBalancer) *LoadBalancer {
+	var hcloudLoadBalancer LoadBalancer
+	hcloudLoadBalancer.ID = source.ID
+	hcloudLoadBalancer.Name = source.Name
+	hcloudLoadBalancer.PublicNet = c.schemaLoadBalancerPublicNetToHcloudLoadBalancerPublicNet(source.PublicNet)
+	var hcloudLoadBalancerPrivateNetList []LoadBalancerPrivateNet
+	if source.PrivateNet != nil {
+		hcloudLoadBalancerPrivateNetList = make([]LoadBalancerPrivateNet, len(source.PrivateNet))
+		for i := 0; i < len(source.PrivateNet); i++ {
+			hcloudLoadBalancerPrivateNetList[i] = c.schemaLoadBalancerPrivateNetToHcloudLoadBalancerPrivateNet(source.PrivateNet[i])
+		}
+	}
+	hcloudLoadBalancer.PrivateNet = hcloudLoadBalancerPrivateNetList
+	hcloudLoadBalancer.Location = c.LocationFromSchema(source.Location)
+	hcloudLoadBalancer.LoadBalancerType = c.LoadBalancerTypeFromSchema(source.LoadBalancerType)
+	hcloudLoadBalancer.Algorithm = c.schemaLoadBalancerAlgorithmToHcloudLoadBalancerAlgorithm(source.Algorithm)
+	var hcloudLoadBalancerServiceList []LoadBalancerService
+	if source.Services != nil {
+		hcloudLoadBalancerServiceList = make([]LoadBalancerService, len(source.Services))
+		for j := 0; j < len(source.Services); j++ {
+			hcloudLoadBalancerServiceList[j] = c.LoadBalancerServiceFromSchema(source.Services[j])
+		}
+	}
+	hcloudLoadBalancer.Services = hcloudLoadBalancerServiceList
+	var hcloudLoadBalancerTargetList []LoadBalancerTarget
+	if source.Targets != nil {
+		hcloudLoadBalancerTargetList = make([]LoadBalancerTarget, len(source.Targets))
+		for k := 0; k < len(source.Targets); k++ {
+			hcloudLoadBalancerTargetList[k] = c.LoadBalancerTargetFromSchema(source.Targets[k])
+		}
+	}
+	hcloudLoadBalancer.Targets = hcloudLoadBalancerTargetList
+	hcloudLoadBalancer.Protection = c.schemaLoadBalancerProtectionToHcloudLoadBalancerProtection(source.Protection)
+	hcloudLoadBalancer.Labels = source.Labels
+	hcloudLoadBalancer.Created = c.timeTimeToTimeTime(source.Created)
+	hcloudLoadBalancer.IncludedTraffic = source.IncludedTraffic
+	var xuint64 uint64
+	if source.OutgoingTraffic != nil {
+		xuint64 = *source.OutgoingTraffic
+	}
+	hcloudLoadBalancer.OutgoingTraffic = xuint64
+	var xuint642 uint64
+	if source.IngoingTraffic != nil {
+		xuint642 = *source.IngoingTraffic
+	}
+	hcloudLoadBalancer.IngoingTraffic = xuint642
+	return &hcloudLoadBalancer
+}
+func (c *converterImpl) LoadBalancerMetricsFromSchema(source *schema.LoadBalancerGetMetricsResponse) (*LoadBalancerMetrics, error) {
+	var pHcloudLoadBalancerMetrics *LoadBalancerMetrics
+	if source != nil {
+		var hcloudLoadBalancerMetrics LoadBalancerMetrics
+		hcloudLoadBalancerMetrics.Start = c.timeTimeToTimeTime((*source).Metrics.Start)
+		hcloudLoadBalancerMetrics.End = c.timeTimeToTimeTime((*source).Metrics.End)
+		hcloudLoadBalancerMetrics.Step = (*source).Metrics.Step
+		mapStringHcloudLoadBalancerMetricsValueList := make(map[string][]LoadBalancerMetricsValue, len((*source).Metrics.TimeSeries))
+		for key, value := range (*source).Metrics.TimeSeries {
+			hcloudLoadBalancerMetricsValueList, err := loadBalancerMetricsTimeSeriesFromSchema(value)
+			if err != nil {
+				return nil, err
+			}
+			mapStringHcloudLoadBalancerMetricsValueList[key] = hcloudLoadBalancerMetricsValueList
+		}
+		hcloudLoadBalancerMetrics.TimeSeries = mapStringHcloudLoadBalancerMetricsValueList
+		pHcloudLoadBalancerMetrics = &hcloudLoadBalancerMetrics
+	}
+	return pHcloudLoadBalancerMetrics, nil
+}
+func (c *converterImpl) LoadBalancerServiceFromSchema(source schema.LoadBalancerService) LoadBalancerService {
+	var hcloudLoadBalancerService LoadBalancerService
+	hcloudLoadBalancerService.Protocol = LoadBalancerServiceProtocol(source.Protocol)
+	hcloudLoadBalancerService.ListenPort = source.ListenPort
+	hcloudLoadBalancerService.DestinationPort = source.DestinationPort
+	hcloudLoadBalancerService.Proxyprotocol = source.Proxyprotocol
+	hcloudLoadBalancerService.HTTP = c.pSchemaLoadBalancerServiceHTTPToHcloudLoadBalancerServiceHTTP(source.HTTP)
+	hcloudLoadBalancerService.HealthCheck = c.LoadBalancerServiceHealthCheckFromSchema(source.HealthCheck)
+	return hcloudLoadBalancerService
+}
+func (c *converterImpl) LoadBalancerServiceHealthCheckFromSchema(source *schema.LoadBalancerServiceHealthCheck) LoadBalancerServiceHealthCheck {
+	var hcloudLoadBalancerServiceHealthCheck LoadBalancerServiceHealthCheck
+	if source != nil {
+		var hcloudLoadBalancerServiceHealthCheck2 LoadBalancerServiceHealthCheck
+		hcloudLoadBalancerServiceHealthCheck2.Protocol = LoadBalancerServiceProtocol((*source).Protocol)
+		hcloudLoadBalancerServiceHealthCheck2.Port = (*source).Port
+		hcloudLoadBalancerServiceHealthCheck2.Interval = durationFromIntSeconds((*source).Interval)
+		hcloudLoadBalancerServiceHealthCheck2.Timeout = durationFromIntSeconds((*source).Timeout)
+		hcloudLoadBalancerServiceHealthCheck2.Retries = (*source).Retries
+		hcloudLoadBalancerServiceHealthCheck2.HTTP = c.pSchemaLoadBalancerServiceHealthCheckHTTPToPHcloudLoadBalancerServiceHealthCheckHTTP((*source).HTTP)
+		hcloudLoadBalancerServiceHealthCheck = hcloudLoadBalancerServiceHealthCheck2
+	}
+	return hcloudLoadBalancerServiceHealthCheck
+}
+func (c *converterImpl) LoadBalancerTargetFromSchema(source schema.LoadBalancerTarget) LoadBalancerTarget {
+	var hcloudLoadBalancerTarget LoadBalancerTarget
+	hcloudLoadBalancerTarget.Type = LoadBalancerTargetType(source.Type)
+	hcloudLoadBalancerTarget.Server = c.pSchemaLoadBalancerTargetServerToPHcloudLoadBalancerTargetServer(source.Server)
+	hcloudLoadBalancerTarget.LabelSelector = c.pSchemaLoadBalancerTargetLabelSelectorToPHcloudLoadBalancerTargetLabelSelector(source.LabelSelector)
+	hcloudLoadBalancerTarget.IP = c.pSchemaLoadBalancerTargetIPToPHcloudLoadBalancerTargetIP(source.IP)
+	var hcloudLoadBalancerTargetHealthStatusList []LoadBalancerTargetHealthStatus
+	if source.HealthStatus != nil {
+		hcloudLoadBalancerTargetHealthStatusList = make([]LoadBalancerTargetHealthStatus, len(source.HealthStatus))
+		for i := 0; i < len(source.HealthStatus); i++ {
+			hcloudLoadBalancerTargetHealthStatusList[i] = c.LoadBalancerTargetHealthStatusFromSchema(source.HealthStatus[i])
+		}
+	}
+	hcloudLoadBalancerTarget.HealthStatus = hcloudLoadBalancerTargetHealthStatusList
+	var hcloudLoadBalancerTargetList []LoadBalancerTarget
+	if source.Targets != nil {
+		hcloudLoadBalancerTargetList = make([]LoadBalancerTarget, len(source.Targets))
+		for j := 0; j < len(source.Targets); j++ {
+			hcloudLoadBalancerTargetList[j] = c.LoadBalancerTargetFromSchema(source.Targets[j])
+		}
+	}
+	hcloudLoadBalancerTarget.Targets = hcloudLoadBalancerTargetList
+	hcloudLoadBalancerTarget.UsePrivateIP = source.UsePrivateIP
+	return hcloudLoadBalancerTarget
+}
+func (c *converterImpl) LoadBalancerTargetHealthStatusFromSchema(source schema.LoadBalancerTargetHealthStatus) LoadBalancerTargetHealthStatus {
+	var hcloudLoadBalancerTargetHealthStatus LoadBalancerTargetHealthStatus
+	hcloudLoadBalancerTargetHealthStatus.ListenPort = source.ListenPort
+	hcloudLoadBalancerTargetHealthStatus.Status = LoadBalancerTargetHealthStatusStatus(source.Status)
+	return hcloudLoadBalancerTargetHealthStatus
+}
+func (c *converterImpl) LoadBalancerTargetServerFromSchema(source schema.LoadBalancerTargetServer) LoadBalancerTargetServer {
+	var hcloudLoadBalancerTargetServer LoadBalancerTargetServer
+	hcloudServer := serverFromInt64(source.ID)
+	hcloudLoadBalancerTargetServer.Server = &hcloudServer
+	return hcloudLoadBalancerTargetServer
+}
+func (c *converterImpl) LoadBalancerTypeFromSchema(source schema.LoadBalancerType) *LoadBalancerType {
+	var hcloudLoadBalancerType LoadBalancerType
+	hcloudLoadBalancerType.ID = source.ID
+	hcloudLoadBalancerType.Name = source.Name
+	hcloudLoadBalancerType.Description = source.Description
+	hcloudLoadBalancerType.MaxConnections = source.MaxConnections
+	hcloudLoadBalancerType.MaxServices = source.MaxServices
+	hcloudLoadBalancerType.MaxTargets = source.MaxTargets
+	hcloudLoadBalancerType.MaxAssignedCertificates = source.MaxAssignedCertificates
+	var hcloudLoadBalancerTypeLocationPricingList []LoadBalancerTypeLocationPricing
+	if source.Prices != nil {
+		hcloudLoadBalancerTypeLocationPricingList = make([]LoadBalancerTypeLocationPricing, len(source.Prices))
+		for i := 0; i < len(source.Prices); i++ {
+			hcloudLoadBalancerTypeLocationPricingList[i] = c.LoadBalancerTypeLocationPricingFromSchema(source.Prices[i])
+		}
+	}
+	hcloudLoadBalancerType.Pricings = hcloudLoadBalancerTypeLocationPricingList
+	hcloudLoadBalancerType.Deprecated = source.Deprecated
+	return &hcloudLoadBalancerType
+}
+func (c *converterImpl) LoadBalancerTypeLocationPricingFromSchema(source schema.PricingLoadBalancerTypePrice) LoadBalancerTypeLocationPricing {
+	var hcloudLoadBalancerTypeLocationPricing LoadBalancerTypeLocationPricing
+	hcloudLocation := locationFromString(source.Location)
+	hcloudLoadBalancerTypeLocationPricing.Location = &hcloudLocation
+	hcloudLoadBalancerTypeLocationPricing.Hourly = c.PriceFromSchema(source.PriceHourly)
+	hcloudLoadBalancerTypeLocationPricing.Monthly = c.PriceFromSchema(source.PriceMonthly)
+	return hcloudLoadBalancerTypeLocationPricing
+}
+func (c *converterImpl) LocationFromSchema(source schema.Location) *Location {
+	var hcloudLocation Location
+	hcloudLocation.ID = source.ID
+	hcloudLocation.Name = source.Name
+	hcloudLocation.Description = source.Description
+	hcloudLocation.Country = source.Country
+	hcloudLocation.City = source.City
+	hcloudLocation.Latitude = source.Latitude
+	hcloudLocation.Longitude = source.Longitude
+	hcloudLocation.NetworkZone = NetworkZone(source.NetworkZone)
+	return &hcloudLocation
+}
+func (c *converterImpl) NetworkFromSchema(source schema.Network) *Network {
+	var hcloudNetwork Network
+	hcloudNetwork.ID = source.ID
+	hcloudNetwork.Name = source.Name
+	hcloudNetwork.Created = c.timeTimeToTimeTime(source.Created)
+	netIPNet := ipNetFromString(source.IPRange)
+	hcloudNetwork.IPRange = &netIPNet
+	var hcloudNetworkSubnetList []NetworkSubnet
+	if source.Subnets != nil {
+		hcloudNetworkSubnetList = make([]NetworkSubnet, len(source.Subnets))
+		for i := 0; i < len(source.Subnets); i++ {
+			hcloudNetworkSubnetList[i] = c.NetworkSubnetFromSchema(source.Subnets[i])
+		}
+	}
+	hcloudNetwork.Subnets = hcloudNetworkSubnetList
+	var hcloudNetworkRouteList []NetworkRoute
+	if source.Routes != nil {
+		hcloudNetworkRouteList = make([]NetworkRoute, len(source.Routes))
+		for j := 0; j < len(source.Routes); j++ {
+			hcloudNetworkRouteList[j] = c.NetworkRouteFromSchema(source.Routes[j])
+		}
+	}
+	hcloudNetwork.Routes = hcloudNetworkRouteList
+	var pHcloudServerList []*Server
+	if source.Servers != nil {
+		pHcloudServerList = make([]*Server, len(source.Servers))
+		for k := 0; k < len(source.Servers); k++ {
+			hcloudServer := serverFromInt64(source.Servers[k])
+			pHcloudServerList[k] = &hcloudServer
+		}
+	}
+	hcloudNetwork.Servers = pHcloudServerList
+	hcloudNetwork.Protection = c.schemaNetworkProtectionToHcloudNetworkProtection(source.Protection)
+	hcloudNetwork.Labels = source.Labels
+	hcloudNetwork.ExposeRoutesToVSwitch = source.ExposeRoutesToVSwitch
+	return &hcloudNetwork
+}
+func (c *converterImpl) NetworkRouteFromSchema(source schema.NetworkRoute) NetworkRoute {
+	var hcloudNetworkRoute NetworkRoute
+	netIPNet := ipNetFromString(source.Destination)
+	hcloudNetworkRoute.Destination = &netIPNet
+	hcloudNetworkRoute.Gateway = ipFromString(source.Gateway)
+	return hcloudNetworkRoute
+}
+func (c *converterImpl) NetworkSubnetFromSchema(source schema.NetworkSubnet) NetworkSubnet {
+	var hcloudNetworkSubnet NetworkSubnet
+	hcloudNetworkSubnet.Type = NetworkSubnetType(source.Type)
+	netIPNet := ipNetFromString(source.IPRange)
+	hcloudNetworkSubnet.IPRange = &netIPNet
+	hcloudNetworkSubnet.NetworkZone = NetworkZone(source.NetworkZone)
+	hcloudNetworkSubnet.Gateway = ipFromString(source.Gateway)
+	hcloudNetworkSubnet.VSwitchID = source.VSwitchID
+	return hcloudNetworkSubnet
+}
+func (c *converterImpl) PaginationFromSchema(source schema.MetaPagination) Pagination {
+	var hcloudPagination Pagination
+	hcloudPagination.Page = source.Page
+	hcloudPagination.PerPage = source.PerPage
+	hcloudPagination.PreviousPage = source.PreviousPage
+	hcloudPagination.NextPage = source.NextPage
+	hcloudPagination.LastPage = source.LastPage
+	hcloudPagination.TotalEntries = source.TotalEntries
+	return hcloudPagination
+}
+func (c *converterImpl) PlacementGroupFromSchema(source schema.PlacementGroup) *PlacementGroup {
+	var hcloudPlacementGroup PlacementGroup
+	hcloudPlacementGroup.ID = source.ID
+	hcloudPlacementGroup.Name = source.Name
+	hcloudPlacementGroup.Labels = source.Labels
+	hcloudPlacementGroup.Created = c.timeTimeToTimeTime(source.Created)
+	hcloudPlacementGroup.Servers = source.Servers
+	hcloudPlacementGroup.Type = PlacementGroupType(source.Type)
+	return &hcloudPlacementGroup
+}
+func (c *converterImpl) PriceFromSchema(source schema.Price) Price {
+	var hcloudPrice Price
+	hcloudPrice.Net = source.Net
+	hcloudPrice.Gross = source.Gross
+	return hcloudPrice
+}
+func (c *converterImpl) PricingFromSchema(source schema.Pricing) Pricing {
+	var hcloudPricing Pricing
+	hcloudPricing.Image = imagePricingFromSchema(source)
+	hcloudPricing.FloatingIP = floatingIPPricingFromSchema(source)
+	hcloudPricing.FloatingIPs = floatingIPTypePricingFromSchema(source)
+	hcloudPricing.PrimaryIPs = primaryIPPricingFromSchema(source)
+	hcloudPricing.Traffic = trafficPricingFromSchema(source)
+	hcloudPricing.ServerBackup = c.schemaPricingServerBackupToHcloudServerBackupPricing(source.ServerBackup)
+	hcloudPricing.ServerTypes = serverTypePricingFromSchema(source)
+	hcloudPricing.LoadBalancerTypes = loadBalancerTypePricingFromSchema(source)
+	hcloudPricing.Volume = volumePricingFromSchema(source)
+	return hcloudPricing
+}
+func (c *converterImpl) PrimaryIPFromSchema(source schema.PrimaryIP) *PrimaryIP {
+	var hcloudPrimaryIP PrimaryIP
+	hcloudPrimaryIP.ID = source.ID
+	hcloudPrimaryIP.IP = ipFromPrimaryIPSchema(source)
+	hcloudPrimaryIP.Network = networkFromPrimaryIPSchema(source)
+	hcloudPrimaryIP.Labels = source.Labels
+	hcloudPrimaryIP.Name = source.Name
+	hcloudPrimaryIP.Type = PrimaryIPType(source.Type)
+	hcloudPrimaryIP.Protection = c.schemaPrimaryIPProtectionToHcloudPrimaryIPProtection(source.Protection)
+	hcloudPrimaryIP.DNSPtr = mapFromPrimaryIPDNSPtrSchema(source.DNSPtr)
+	hcloudPrimaryIP.AssigneeID = source.AssigneeID
+	hcloudPrimaryIP.AssigneeType = source.AssigneeType
+	hcloudPrimaryIP.AutoDelete = source.AutoDelete
+	hcloudPrimaryIP.Blocked = source.Blocked
+	hcloudPrimaryIP.Created = c.timeTimeToTimeTime(source.Created)
+	hcloudPrimaryIP.Datacenter = c.DatacenterFromSchema(source.Datacenter)
+	return &hcloudPrimaryIP
+}
+func (c *converterImpl) SSHKeyFromSchema(source schema.SSHKey) *SSHKey {
+	var hcloudSSHKey SSHKey
+	hcloudSSHKey.ID = source.ID
+	hcloudSSHKey.Name = source.Name
+	hcloudSSHKey.Fingerprint = source.Fingerprint
+	hcloudSSHKey.PublicKey = source.PublicKey
+	hcloudSSHKey.Labels = source.Labels
+	hcloudSSHKey.Created = c.timeTimeToTimeTime(source.Created)
+	return &hcloudSSHKey
+}
+func (c *converterImpl) SchemaFromAction(source *Action) schema.Action {
+	var schemaAction schema.Action
+	if source != nil {
+		var schemaAction2 schema.Action
+		schemaAction2.ID = (*source).ID
+		schemaAction2.Status = string((*source).Status)
+		schemaAction2.Command = (*source).Command
+		schemaAction2.Progress = (*source).Progress
+		schemaAction2.Started = c.timeTimeToTimeTime((*source).Started)
+		schemaAction2.Finished = timeToTimePtr((*source).Finished)
+		schemaAction2.Error = schemaActionErrorFromAction((*source))
+		var schemaActionResourceReferenceList []schema.ActionResourceReference
+		if (*source).Resources != nil {
+			schemaActionResourceReferenceList = make([]schema.ActionResourceReference, len((*source).Resources))
+			for i := 0; i < len((*source).Resources); i++ {
+				schemaActionResourceReferenceList[i] = c.pHcloudActionResourceToSchemaActionResourceReference((*source).Resources[i])
+			}
+		}
+		schemaAction2.Resources = schemaActionResourceReferenceList
+		schemaAction = schemaAction2
+	}
+	return schemaAction
+}
+func (c *converterImpl) SchemaFromActions(source []*Action) []schema.Action {
+	var schemaActionList []schema.Action
+	if source != nil {
+		schemaActionList = make([]schema.Action, len(source))
+		for i := 0; i < len(source); i++ {
+			schemaActionList[i] = c.SchemaFromAction(source[i])
+		}
+	}
+	return schemaActionList
+}
+func (c *converterImpl) SchemaFromCertificate(source *Certificate) schema.Certificate {
+	var schemaCertificate schema.Certificate
+	if source != nil {
+		var schemaCertificate2 schema.Certificate
+		schemaCertificate2.ID = (*source).ID
+		schemaCertificate2.Name = (*source).Name
+		schemaCertificate2.Labels = (*source).Labels
+		schemaCertificate2.Type = string((*source).Type)
+		schemaCertificate2.Certificate = (*source).Certificate
+		schemaCertificate2.Created = c.timeTimeToTimeTime((*source).Created)
+		schemaCertificate2.NotValidBefore = c.timeTimeToTimeTime((*source).NotValidBefore)
+		schemaCertificate2.NotValidAfter = c.timeTimeToTimeTime((*source).NotValidAfter)
+		schemaCertificate2.DomainNames = (*source).DomainNames
+		schemaCertificate2.Fingerprint = (*source).Fingerprint
+		schemaCertificate2.Status = c.pHcloudCertificateStatusToPSchemaCertificateStatusRef((*source).Status)
+		var schemaCertificateUsedByRefList []schema.CertificateUsedByRef
+		if (*source).UsedBy != nil {
+			schemaCertificateUsedByRefList = make([]schema.CertificateUsedByRef, len((*source).UsedBy))
+			for i := 0; i < len((*source).UsedBy); i++ {
+				schemaCertificateUsedByRefList[i] = c.hcloudCertificateUsedByRefToSchemaCertificateUsedByRef((*source).UsedBy[i])
+			}
+		}
+		schemaCertificate2.UsedBy = schemaCertificateUsedByRefList
+		schemaCertificate = schemaCertificate2
+	}
+	return schemaCertificate
+}
+func (c *converterImpl) SchemaFromDatacenter(source *Datacenter) schema.Datacenter {
+	var schemaDatacenter schema.Datacenter
+	if source != nil {
+		var schemaDatacenter2 schema.Datacenter
+		schemaDatacenter2.ID = (*source).ID
+		schemaDatacenter2.Name = (*source).Name
+		schemaDatacenter2.Description = (*source).Description
+		schemaDatacenter2.Location = c.SchemaFromLocation((*source).Location)
+		schemaDatacenter2.ServerTypes = c.hcloudDatacenterServerTypesToSchemaDatacenterServerTypes((*source).ServerTypes)
+		schemaDatacenter = schemaDatacenter2
+	}
+	return schemaDatacenter
+}
+func (c *converterImpl) SchemaFromDeprecation(source *DeprecationInfo) *schema.DeprecationInfo {
+	var pSchemaDeprecationInfo *schema.DeprecationInfo
+	if source != nil {
+		var schemaDeprecationInfo schema.DeprecationInfo
+		schemaDeprecationInfo.Announced = c.timeTimeToTimeTime((*source).Announced)
+		schemaDeprecationInfo.UnavailableAfter = c.timeTimeToTimeTime((*source).UnavailableAfter)
+		pSchemaDeprecationInfo = &schemaDeprecationInfo
+	}
+	return pSchemaDeprecationInfo
+}
+func (c *converterImpl) SchemaFromError(source Error) schema.Error {
+	var schemaError schema.Error
+	schemaError.Code = string(source.Code)
+	schemaError.Message = source.Message
+	schemaError.DetailsRaw = rawSchemaFromErrorDetails(source.Details)
+	schemaError.Details = schemaFromErrorDetails(source.Details)
+	return schemaError
+}
+func (c *converterImpl) SchemaFromFirewall(source *Firewall) schema.Firewall {
+	var schemaFirewall schema.Firewall
+	if source != nil {
+		var schemaFirewall2 schema.Firewall
+		schemaFirewall2.ID = (*source).ID
+		schemaFirewall2.Name = (*source).Name
+		schemaFirewall2.Labels = (*source).Labels
+		schemaFirewall2.Created = c.timeTimeToTimeTime((*source).Created)
+		var schemaFirewallRuleList []schema.FirewallRule
+		if (*source).Rules != nil {
+			schemaFirewallRuleList = make([]schema.FirewallRule, len((*source).Rules))
+			for i := 0; i < len((*source).Rules); i++ {
+				schemaFirewallRuleList[i] = c.hcloudFirewallRuleToSchemaFirewallRule((*source).Rules[i])
+			}
+		}
+		schemaFirewall2.Rules = schemaFirewallRuleList
+		var schemaFirewallResourceList []schema.FirewallResource
+		if (*source).AppliedTo != nil {
+			schemaFirewallResourceList = make([]schema.FirewallResource, len((*source).AppliedTo))
+			for j := 0; j < len((*source).AppliedTo); j++ {
+				schemaFirewallResourceList[j] = c.SchemaFromFirewallResource((*source).AppliedTo[j])
+			}
+		}
+		schemaFirewall2.AppliedTo = schemaFirewallResourceList
+		schemaFirewall = schemaFirewall2
+	}
+	return schemaFirewall
+}
+func (c *converterImpl) SchemaFromFirewallCreateOpts(source FirewallCreateOpts) schema.FirewallCreateRequest {
+	var schemaFirewallCreateRequest schema.FirewallCreateRequest
+	schemaFirewallCreateRequest.Name = source.Name
+	schemaFirewallCreateRequest.Labels = stringMapToStringMapPtr(source.Labels)
+	var schemaFirewallRuleList []schema.FirewallRule
+	if source.Rules != nil {
+		schemaFirewallRuleList = make([]schema.FirewallRule, len(source.Rules))
+		for i := 0; i < len(source.Rules); i++ {
+			schemaFirewallRuleList[i] = c.hcloudFirewallRuleToSchemaFirewallRule(source.Rules[i])
+		}
+	}
+	schemaFirewallCreateRequest.Rules = schemaFirewallRuleList
+	var schemaFirewallResourceList []schema.FirewallResource
+	if source.ApplyTo != nil {
+		schemaFirewallResourceList = make([]schema.FirewallResource, len(source.ApplyTo))
+		for j := 0; j < len(source.ApplyTo); j++ {
+			schemaFirewallResourceList[j] = c.SchemaFromFirewallResource(source.ApplyTo[j])
+		}
+	}
+	schemaFirewallCreateRequest.ApplyTo = schemaFirewallResourceList
+	return schemaFirewallCreateRequest
+}
+func (c *converterImpl) SchemaFromFirewallResource(source FirewallResource) schema.FirewallResource {
+	var schemaFirewallResource schema.FirewallResource
+	schemaFirewallResource.Type = string(source.Type)
+	schemaFirewallResource.Server = c.pHcloudFirewallResourceServerToPSchemaFirewallResourceServer(source.Server)
+	schemaFirewallResource.LabelSelector = c.pHcloudFirewallResourceLabelSelectorToPSchemaFirewallResourceLabelSelector(source.LabelSelector)
+	return schemaFirewallResource
+}
+func (c *converterImpl) SchemaFromFirewallSetRulesOpts(source FirewallSetRulesOpts) schema.FirewallActionSetRulesRequest {
+	var schemaFirewallActionSetRulesRequest schema.FirewallActionSetRulesRequest
+	var schemaFirewallRuleList []schema.FirewallRule
+	if source.Rules != nil {
+		schemaFirewallRuleList = make([]schema.FirewallRule, len(source.Rules))
+		for i := 0; i < len(source.Rules); i++ {
+			schemaFirewallRuleList[i] = c.hcloudFirewallRuleToSchemaFirewallRule(source.Rules[i])
+		}
+	}
+	schemaFirewallActionSetRulesRequest.Rules = schemaFirewallRuleList
+	return schemaFirewallActionSetRulesRequest
+}
+func (c *converterImpl) SchemaFromFloatingIP(source *FloatingIP) schema.FloatingIP {
+	var schemaFloatingIP schema.FloatingIP
+	if source != nil {
+		var schemaFloatingIP2 schema.FloatingIP
+		schemaFloatingIP2.ID = (*source).ID
+		pString := (*source).Description
+		schemaFloatingIP2.Description = &pString
+		schemaFloatingIP2.Created = c.timeTimeToTimeTime((*source).Created)
+		schemaFloatingIP2.IP = floatingIPToIPString((*source))
+		schemaFloatingIP2.Type = string((*source).Type)
+		schemaFloatingIP2.Server = c.pHcloudServerToPInt64((*source).Server)
+		schemaFloatingIP2.DNSPtr = floatingIPDNSPtrSchemaFromMap((*source).DNSPtr)
+		schemaFloatingIP2.HomeLocation = c.SchemaFromLocation((*source).HomeLocation)
+		schemaFloatingIP2.Blocked = (*source).Blocked
+		schemaFloatingIP2.Protection = c.hcloudFloatingIPProtectionToSchemaFloatingIPProtection((*source).Protection)
+		schemaFloatingIP2.Labels = (*source).Labels
+		schemaFloatingIP2.Name = (*source).Name
+		schemaFloatingIP = schemaFloatingIP2
+	}
+	return schemaFloatingIP
+}
+func (c *converterImpl) SchemaFromISO(source *ISO) schema.ISO {
+	var schemaISO schema.ISO
+	if source != nil {
+		var schemaISO2 schema.ISO
+		schemaISO2.ID = (*source).ID
+		schemaISO2.Name = (*source).Name
+		schemaISO2.Description = (*source).Description
+		schemaISO2.Type = string((*source).Type)
+		var pString *string
+		if (*source).Architecture != nil {
+			xstring := string(*(*source).Architecture)
+			pString = &xstring
+		}
+		schemaISO2.Architecture = pString
+		schemaISO2.DeprecatableResource = c.hcloudDeprecatableResourceToSchemaDeprecatableResource((*source).DeprecatableResource)
+		schemaISO = schemaISO2
+	}
+	return schemaISO
+}
+func (c *converterImpl) SchemaFromImage(source *Image) schema.Image {
+	var schemaImage schema.Image
+	if source != nil {
+		schemaImage = c.intSchemaFromImage((*source))
+	}
+	return schemaImage
+}
+func (c *converterImpl) SchemaFromLoadBalancer(source *LoadBalancer) schema.LoadBalancer {
+	var schemaLoadBalancer schema.LoadBalancer
+	if source != nil {
+		var schemaLoadBalancer2 schema.LoadBalancer
+		schemaLoadBalancer2.ID = (*source).ID
+		schemaLoadBalancer2.Name = (*source).Name
+		schemaLoadBalancer2.PublicNet = c.hcloudLoadBalancerPublicNetToSchemaLoadBalancerPublicNet((*source).PublicNet)
+		var schemaLoadBalancerPrivateNetList []schema.LoadBalancerPrivateNet
+		if (*source).PrivateNet != nil {
+			schemaLoadBalancerPrivateNetList = make([]schema.LoadBalancerPrivateNet, len((*source).PrivateNet))
+			for i := 0; i < len((*source).PrivateNet); i++ {
+				schemaLoadBalancerPrivateNetList[i] = c.hcloudLoadBalancerPrivateNetToSchemaLoadBalancerPrivateNet((*source).PrivateNet[i])
+			}
+		}
+		schemaLoadBalancer2.PrivateNet = schemaLoadBalancerPrivateNetList
+		schemaLoadBalancer2.Location = c.SchemaFromLocation((*source).Location)
+		schemaLoadBalancer2.LoadBalancerType = c.SchemaFromLoadBalancerType((*source).LoadBalancerType)
+		schemaLoadBalancer2.Protection = c.hcloudLoadBalancerProtectionToSchemaLoadBalancerProtection((*source).Protection)
+		schemaLoadBalancer2.Labels = (*source).Labels
+		schemaLoadBalancer2.Created = c.timeTimeToTimeTime((*source).Created)
+		var schemaLoadBalancerServiceList []schema.LoadBalancerService
+		if (*source).Services != nil {
+			schemaLoadBalancerServiceList = make([]schema.LoadBalancerService, len((*source).Services))
+			for j := 0; j < len((*source).Services); j++ {
+				schemaLoadBalancerServiceList[j] = c.SchemaFromLoadBalancerService((*source).Services[j])
+			}
+		}
+		schemaLoadBalancer2.Services = schemaLoadBalancerServiceList
+		var schemaLoadBalancerTargetList []schema.LoadBalancerTarget
+		if (*source).Targets != nil {
+			schemaLoadBalancerTargetList = make([]schema.LoadBalancerTarget, len((*source).Targets))
+			for k := 0; k < len((*source).Targets); k++ {
+				schemaLoadBalancerTargetList[k] = c.SchemaFromLoadBalancerTarget((*source).Targets[k])
+			}
+		}
+		schemaLoadBalancer2.Targets = schemaLoadBalancerTargetList
+		schemaLoadBalancer2.Algorithm = c.hcloudLoadBalancerAlgorithmToSchemaLoadBalancerAlgorithm((*source).Algorithm)
+		schemaLoadBalancer2.IncludedTraffic = (*source).IncludedTraffic
+		schemaLoadBalancer2.OutgoingTraffic = mapZeroUint64ToNil((*source).OutgoingTraffic)
+		schemaLoadBalancer2.IngoingTraffic = mapZeroUint64ToNil((*source).IngoingTraffic)
+		schemaLoadBalancer = schemaLoadBalancer2
+	}
+	return schemaLoadBalancer
+}
+func (c *converterImpl) SchemaFromLoadBalancerAddServiceOpts(source LoadBalancerAddServiceOpts) schema.LoadBalancerActionAddServiceRequest {
+	var schemaLoadBalancerActionAddServiceRequest schema.LoadBalancerActionAddServiceRequest
+	schemaLoadBalancerActionAddServiceRequest.Protocol = string(source.Protocol)
+	schemaLoadBalancerActionAddServiceRequest.ListenPort = source.ListenPort
+	schemaLoadBalancerActionAddServiceRequest.DestinationPort = source.DestinationPort
+	schemaLoadBalancerActionAddServiceRequest.Proxyprotocol = source.Proxyprotocol
+	schemaLoadBalancerActionAddServiceRequest.HTTP = c.pHcloudLoadBalancerAddServiceOptsHTTPToPSchemaLoadBalancerActionAddServiceRequestHTTP(source.HTTP)
+	schemaLoadBalancerActionAddServiceRequest.HealthCheck = c.pHcloudLoadBalancerAddServiceOptsHealthCheckToPSchemaLoadBalancerActionAddServiceRequestHealthCheck(source.HealthCheck)
+	return schemaLoadBalancerActionAddServiceRequest
+}
+func (c *converterImpl) SchemaFromLoadBalancerCreateOpts(source LoadBalancerCreateOpts) schema.LoadBalancerCreateRequest {
+	var schemaLoadBalancerCreateRequest schema.LoadBalancerCreateRequest
+	schemaLoadBalancerCreateRequest.Name = source.Name
+	schemaLoadBalancerCreateRequest.LoadBalancerType = anyFromLoadBalancerType(source.LoadBalancerType)
+	schemaLoadBalancerCreateRequest.Algorithm = c.pHcloudLoadBalancerAlgorithmToPSchemaLoadBalancerCreateRequestAlgorithm(source.Algorithm)
+	schemaLoadBalancerCreateRequest.Location = c.pHcloudLocationToPString(source.Location)
+	schemaLoadBalancerCreateRequest.NetworkZone = stringPtrFromNetworkZone(source.NetworkZone)
+	schemaLoadBalancerCreateRequest.Labels = stringMapToStringMapPtr(source.Labels)
+	var schemaLoadBalancerCreateRequestTargetList []schema.LoadBalancerCreateRequestTarget
+	if source.Targets != nil {
+		schemaLoadBalancerCreateRequestTargetList = make([]schema.LoadBalancerCreateRequestTarget, len(source.Targets))
+		for i := 0; i < len(source.Targets); i++ {
+			schemaLoadBalancerCreateRequestTargetList[i] = c.hcloudLoadBalancerCreateOptsTargetToSchemaLoadBalancerCreateRequestTarget(source.Targets[i])
+		}
+	}
+	schemaLoadBalancerCreateRequest.Targets = schemaLoadBalancerCreateRequestTargetList
+	var schemaLoadBalancerCreateRequestServiceList []schema.LoadBalancerCreateRequestService
+	if source.Services != nil {
+		schemaLoadBalancerCreateRequestServiceList = make([]schema.LoadBalancerCreateRequestService, len(source.Services))
+		for j := 0; j < len(source.Services); j++ {
+			schemaLoadBalancerCreateRequestServiceList[j] = c.hcloudLoadBalancerCreateOptsServiceToSchemaLoadBalancerCreateRequestService(source.Services[j])
+		}
+	}
+	schemaLoadBalancerCreateRequest.Services = schemaLoadBalancerCreateRequestServiceList
+	schemaLoadBalancerCreateRequest.PublicInterface = source.PublicInterface
+	schemaLoadBalancerCreateRequest.Network = c.pHcloudNetworkToPInt64(source.Network)
+	return schemaLoadBalancerCreateRequest
+}
+func (c *converterImpl) SchemaFromLoadBalancerCreateOptsTargetServer(source LoadBalancerCreateOptsTargetServer) schema.LoadBalancerCreateRequestTargetServer {
+	var schemaLoadBalancerCreateRequestTargetServer schema.LoadBalancerCreateRequestTargetServer
+	var pInt64 *int64
+	if source.Server != nil {
+		pInt64 = &source.Server.ID
+	}
+	var xint64 int64
+	if pInt64 != nil {
+		xint64 = *pInt64
+	}
+	schemaLoadBalancerCreateRequestTargetServer.ID = xint64
+	return schemaLoadBalancerCreateRequestTargetServer
+}
+func (c *converterImpl) SchemaFromLoadBalancerServerTarget(source LoadBalancerTargetServer) schema.LoadBalancerTargetServer {
+	var schemaLoadBalancerTargetServer schema.LoadBalancerTargetServer
+	schemaLoadBalancerTargetServer.ID = c.pHcloudServerToInt64(source.Server)
+	return schemaLoadBalancerTargetServer
+}
+func (c *converterImpl) SchemaFromLoadBalancerService(source LoadBalancerService) schema.LoadBalancerService {
+	var schemaLoadBalancerService schema.LoadBalancerService
+	schemaLoadBalancerService.Protocol = string(source.Protocol)
+	schemaLoadBalancerService.ListenPort = source.ListenPort
+	schemaLoadBalancerService.DestinationPort = source.DestinationPort
+	schemaLoadBalancerService.Proxyprotocol = source.Proxyprotocol
+	schemaLoadBalancerService.HTTP = c.hcloudLoadBalancerServiceHTTPToPSchemaLoadBalancerServiceHTTP(source.HTTP)
+	schemaLoadBalancerService.HealthCheck = c.SchemaFromLoadBalancerServiceHealthCheck(source.HealthCheck)
+	return schemaLoadBalancerService
+}
+func (c *converterImpl) SchemaFromLoadBalancerServiceHealthCheck(source LoadBalancerServiceHealthCheck) *schema.LoadBalancerServiceHealthCheck {
+	var schemaLoadBalancerServiceHealthCheck schema.LoadBalancerServiceHealthCheck
+	schemaLoadBalancerServiceHealthCheck.Protocol = string(source.Protocol)
+	schemaLoadBalancerServiceHealthCheck.Port = source.Port
+	schemaLoadBalancerServiceHealthCheck.Interval = intSecondsFromDuration(source.Interval)
+	schemaLoadBalancerServiceHealthCheck.Timeout = intSecondsFromDuration(source.Timeout)
+	schemaLoadBalancerServiceHealthCheck.Retries = source.Retries
+	schemaLoadBalancerServiceHealthCheck.HTTP = c.pHcloudLoadBalancerServiceHealthCheckHTTPToPSchemaLoadBalancerServiceHealthCheckHTTP(source.HTTP)
+	return &schemaLoadBalancerServiceHealthCheck
+}
+func (c *converterImpl) SchemaFromLoadBalancerTarget(source LoadBalancerTarget) schema.LoadBalancerTarget {
+	var schemaLoadBalancerTarget schema.LoadBalancerTarget
+	schemaLoadBalancerTarget.Type = string(source.Type)
+	schemaLoadBalancerTarget.Server = c.pHcloudLoadBalancerTargetServerToPSchemaLoadBalancerTargetServer(source.Server)
+	schemaLoadBalancerTarget.LabelSelector = c.pHcloudLoadBalancerTargetLabelSelectorToPSchemaLoadBalancerTargetLabelSelector(source.LabelSelector)
+	schemaLoadBalancerTarget.IP = c.pHcloudLoadBalancerTargetIPToPSchemaLoadBalancerTargetIP(source.IP)
+	var schemaLoadBalancerTargetHealthStatusList []schema.LoadBalancerTargetHealthStatus
+	if source.HealthStatus != nil {
+		schemaLoadBalancerTargetHealthStatusList = make([]schema.LoadBalancerTargetHealthStatus, len(source.HealthStatus))
+		for i := 0; i < len(source.HealthStatus); i++ {
+			schemaLoadBalancerTargetHealthStatusList[i] = c.SchemaFromLoadBalancerTargetHealthStatus(source.HealthStatus[i])
+		}
+	}
+	schemaLoadBalancerTarget.HealthStatus = schemaLoadBalancerTargetHealthStatusList
+	schemaLoadBalancerTarget.UsePrivateIP = source.UsePrivateIP
+	var schemaLoadBalancerTargetList []schema.LoadBalancerTarget
+	if source.Targets != nil {
+		schemaLoadBalancerTargetList = make([]schema.LoadBalancerTarget, len(source.Targets))
+		for j := 0; j < len(source.Targets); j++ {
+			schemaLoadBalancerTargetList[j] = c.SchemaFromLoadBalancerTarget(source.Targets[j])
+		}
+	}
+	schemaLoadBalancerTarget.Targets = schemaLoadBalancerTargetList
+	return schemaLoadBalancerTarget
+}
+func (c *converterImpl) SchemaFromLoadBalancerTargetHealthStatus(source LoadBalancerTargetHealthStatus) schema.LoadBalancerTargetHealthStatus {
+	var schemaLoadBalancerTargetHealthStatus schema.LoadBalancerTargetHealthStatus
+	schemaLoadBalancerTargetHealthStatus.ListenPort = source.ListenPort
+	schemaLoadBalancerTargetHealthStatus.Status = string(source.Status)
+	return schemaLoadBalancerTargetHealthStatus
+}
+func (c *converterImpl) SchemaFromLoadBalancerType(source *LoadBalancerType) schema.LoadBalancerType {
+	var schemaLoadBalancerType schema.LoadBalancerType
+	if source != nil {
+		var schemaLoadBalancerType2 schema.LoadBalancerType
+		schemaLoadBalancerType2.ID = (*source).ID
+		schemaLoadBalancerType2.Name = (*source).Name
+		schemaLoadBalancerType2.Description = (*source).Description
+		schemaLoadBalancerType2.MaxConnections = (*source).MaxConnections
+		schemaLoadBalancerType2.MaxServices = (*source).MaxServices
+		schemaLoadBalancerType2.MaxTargets = (*source).MaxTargets
+		schemaLoadBalancerType2.MaxAssignedCertificates = (*source).MaxAssignedCertificates
+		var schemaPricingLoadBalancerTypePriceList []schema.PricingLoadBalancerTypePrice
+		if (*source).Pricings != nil {
+			schemaPricingLoadBalancerTypePriceList = make([]schema.PricingLoadBalancerTypePrice, len((*source).Pricings))
+			for i := 0; i < len((*source).Pricings); i++ {
+				schemaPricingLoadBalancerTypePriceList[i] = c.SchemaFromLoadBalancerTypeLocationPricing((*source).Pricings[i])
+			}
+		}
+		schemaLoadBalancerType2.Prices = schemaPricingLoadBalancerTypePriceList
+		schemaLoadBalancerType2.Deprecated = (*source).Deprecated
+		schemaLoadBalancerType = schemaLoadBalancerType2
+	}
+	return schemaLoadBalancerType
+}
+func (c *converterImpl) SchemaFromLoadBalancerTypeLocationPricing(source LoadBalancerTypeLocationPricing) schema.PricingLoadBalancerTypePrice {
+	var schemaPricingLoadBalancerTypePrice schema.PricingLoadBalancerTypePrice
+	schemaPricingLoadBalancerTypePrice.Location = c.pHcloudLocationToString(source.Location)
+	schemaPricingLoadBalancerTypePrice.PriceHourly = c.hcloudPriceToSchemaPrice(source.Hourly)
+	schemaPricingLoadBalancerTypePrice.PriceMonthly = c.hcloudPriceToSchemaPrice(source.Monthly)
+	return schemaPricingLoadBalancerTypePrice
+}
+func (c *converterImpl) SchemaFromLoadBalancerUpdateServiceOpts(source LoadBalancerUpdateServiceOpts) schema.LoadBalancerActionUpdateServiceRequest {
+	var schemaLoadBalancerActionUpdateServiceRequest schema.LoadBalancerActionUpdateServiceRequest
+	schemaLoadBalancerActionUpdateServiceRequest.Protocol = stringPtrFromLoadBalancerServiceProtocol(source.Protocol)
+	schemaLoadBalancerActionUpdateServiceRequest.DestinationPort = source.DestinationPort
+	schemaLoadBalancerActionUpdateServiceRequest.Proxyprotocol = source.Proxyprotocol
+	schemaLoadBalancerActionUpdateServiceRequest.HTTP = c.pHcloudLoadBalancerUpdateServiceOptsHTTPToPSchemaLoadBalancerActionUpdateServiceRequestHTTP(source.HTTP)
+	schemaLoadBalancerActionUpdateServiceRequest.HealthCheck = c.pHcloudLoadBalancerUpdateServiceOptsHealthCheckToPSchemaLoadBalancerActionUpdateServiceRequestHealthCheck(source.HealthCheck)
+	return schemaLoadBalancerActionUpdateServiceRequest
+}
+func (c *converterImpl) SchemaFromLocation(source *Location) schema.Location {
+	var schemaLocation schema.Location
+	if source != nil {
+		var schemaLocation2 schema.Location
+		schemaLocation2.ID = (*source).ID
+		schemaLocation2.Name = (*source).Name
+		schemaLocation2.Description = (*source).Description
+		schemaLocation2.Country = (*source).Country
+		schemaLocation2.City = (*source).City
+		schemaLocation2.Latitude = (*source).Latitude
+		schemaLocation2.Longitude = (*source).Longitude
+		schemaLocation2.NetworkZone = string((*source).NetworkZone)
+		schemaLocation = schemaLocation2
+	}
+	return schemaLocation
+}
+func (c *converterImpl) SchemaFromNetwork(source *Network) schema.Network {
+	var schemaNetwork schema.Network
+	if source != nil {
+		var schemaNetwork2 schema.Network
+		schemaNetwork2.ID = (*source).ID
+		schemaNetwork2.Name = (*source).Name
+		schemaNetwork2.Created = c.timeTimeToTimeTime((*source).Created)
+		schemaNetwork2.IPRange = c.pNetIPNetToString((*source).IPRange)
+		var schemaNetworkSubnetList []schema.NetworkSubnet
+		if (*source).Subnets != nil {
+			schemaNetworkSubnetList = make([]schema.NetworkSubnet, len((*source).Subnets))
+			for i := 0; i < len((*source).Subnets); i++ {
+				schemaNetworkSubnetList[i] = c.SchemaFromNetworkSubnet((*source).Subnets[i])
+			}
+		}
+		schemaNetwork2.Subnets = schemaNetworkSubnetList
+		var schemaNetworkRouteList []schema.NetworkRoute
+		if (*source).Routes != nil {
+			schemaNetworkRouteList = make([]schema.NetworkRoute, len((*source).Routes))
+			for j := 0; j < len((*source).Routes); j++ {
+				schemaNetworkRouteList[j] = c.SchemaFromNetworkRoute((*source).Routes[j])
+			}
+		}
+		schemaNetwork2.Routes = schemaNetworkRouteList
+		var int64List []int64
+		if (*source).Servers != nil {
+			int64List = make([]int64, len((*source).Servers))
+			for k := 0; k < len((*source).Servers); k++ {
+				int64List[k] = c.pHcloudServerToInt64((*source).Servers[k])
+			}
+		}
+		schemaNetwork2.Servers = int64List
+		schemaNetwork2.Protection = c.hcloudNetworkProtectionToSchemaNetworkProtection((*source).Protection)
+		schemaNetwork2.Labels = (*source).Labels
+		schemaNetwork2.ExposeRoutesToVSwitch = (*source).ExposeRoutesToVSwitch
+		schemaNetwork = schemaNetwork2
+	}
+	return schemaNetwork
+}
+func (c *converterImpl) SchemaFromNetworkRoute(source NetworkRoute) schema.NetworkRoute {
+	var schemaNetworkRoute schema.NetworkRoute
+	schemaNetworkRoute.Destination = c.pNetIPNetToString(source.Destination)
+	schemaNetworkRoute.Gateway = stringFromIP(source.Gateway)
+	return schemaNetworkRoute
+}
+func (c *converterImpl) SchemaFromNetworkSubnet(source NetworkSubnet) schema.NetworkSubnet {
+	var schemaNetworkSubnet schema.NetworkSubnet
+	schemaNetworkSubnet.Type = string(source.Type)
+	schemaNetworkSubnet.IPRange = c.pNetIPNetToString(source.IPRange)
+	schemaNetworkSubnet.NetworkZone = string(source.NetworkZone)
+	schemaNetworkSubnet.Gateway = stringFromIP(source.Gateway)
+	schemaNetworkSubnet.VSwitchID = source.VSwitchID
+	return schemaNetworkSubnet
+}
+func (c *converterImpl) SchemaFromPagination(source Pagination) schema.MetaPagination {
+	var schemaMetaPagination schema.MetaPagination
+	schemaMetaPagination.Page = source.Page
+	schemaMetaPagination.PerPage = source.PerPage
+	schemaMetaPagination.PreviousPage = source.PreviousPage
+	schemaMetaPagination.NextPage = source.NextPage
+	schemaMetaPagination.LastPage = source.LastPage
+	schemaMetaPagination.TotalEntries = source.TotalEntries
+	return schemaMetaPagination
+}
+func (c *converterImpl) SchemaFromPlacementGroup(source *PlacementGroup) schema.PlacementGroup {
+	var schemaPlacementGroup schema.PlacementGroup
+	if source != nil {
+		var schemaPlacementGroup2 schema.PlacementGroup
+		schemaPlacementGroup2.ID = (*source).ID
+		schemaPlacementGroup2.Name = (*source).Name
+		schemaPlacementGroup2.Labels = (*source).Labels
+		schemaPlacementGroup2.Created = c.timeTimeToTimeTime((*source).Created)
+		schemaPlacementGroup2.Servers = (*source).Servers
+		schemaPlacementGroup2.Type = string((*source).Type)
+		schemaPlacementGroup = schemaPlacementGroup2
+	}
+	return schemaPlacementGroup
+}
+func (c *converterImpl) SchemaFromPlacementGroupCreateOpts(source PlacementGroupCreateOpts) schema.PlacementGroupCreateRequest {
+	var schemaPlacementGroupCreateRequest schema.PlacementGroupCreateRequest
+	schemaPlacementGroupCreateRequest.Name = source.Name
+	schemaPlacementGroupCreateRequest.Labels = stringMapToStringMapPtr(source.Labels)
+	schemaPlacementGroupCreateRequest.Type = string(source.Type)
+	return schemaPlacementGroupCreateRequest
+}
+func (c *converterImpl) SchemaFromPricing(source Pricing) schema.Pricing {
+	var schemaPricing schema.Pricing
+	schemaPricing.Currency = source.Image.PerGBMonth.Currency
+	schemaPricing.VATRate = source.Image.PerGBMonth.VATRate
+	schemaPricing.Image = c.schemaFromImagePricing(source.Image)
+	schemaPricing.FloatingIP = c.schemaFromFloatingIPPricing(source.FloatingIP)
+	var schemaPricingFloatingIPTypeList []schema.PricingFloatingIPType
+	if source.FloatingIPs != nil {
+		schemaPricingFloatingIPTypeList = make([]schema.PricingFloatingIPType, len(source.FloatingIPs))
+		for i := 0; i < len(source.FloatingIPs); i++ {
+			schemaPricingFloatingIPTypeList[i] = c.schemaFromFloatingIPTypePricing(source.FloatingIPs[i])
+		}
+	}
+	schemaPricing.FloatingIPs = schemaPricingFloatingIPTypeList
+	var schemaPricingPrimaryIPList []schema.PricingPrimaryIP
+	if source.PrimaryIPs != nil {
+		schemaPricingPrimaryIPList = make([]schema.PricingPrimaryIP, len(source.PrimaryIPs))
+		for j := 0; j < len(source.PrimaryIPs); j++ {
+			schemaPricingPrimaryIPList[j] = c.schemaFromPrimaryIPPricing(source.PrimaryIPs[j])
+		}
+	}
+	schemaPricing.PrimaryIPs = schemaPricingPrimaryIPList
+	schemaPricing.Traffic = c.schemaFromTrafficPricing(source.Traffic)
+	schemaPricing.ServerBackup = c.hcloudServerBackupPricingToSchemaPricingServerBackup(source.ServerBackup)
+	var schemaPricingServerTypeList []schema.PricingServerType
+	if source.ServerTypes != nil {
+		schemaPricingServerTypeList = make([]schema.PricingServerType, len(source.ServerTypes))
+		for k := 0; k < len(source.ServerTypes); k++ {
+			schemaPricingServerTypeList[k] = c.schemaFromServerTypePricing(source.ServerTypes[k])
+		}
+	}
+	schemaPricing.ServerTypes = schemaPricingServerTypeList
+	var schemaPricingLoadBalancerTypeList []schema.PricingLoadBalancerType
+	if source.LoadBalancerTypes != nil {
+		schemaPricingLoadBalancerTypeList = make([]schema.PricingLoadBalancerType, len(source.LoadBalancerTypes))
+		for l := 0; l < len(source.LoadBalancerTypes); l++ {
+			schemaPricingLoadBalancerTypeList[l] = c.schemaFromLoadBalancerTypePricing(source.LoadBalancerTypes[l])
+		}
+	}
+	schemaPricing.LoadBalancerTypes = schemaPricingLoadBalancerTypeList
+	schemaPricing.Volume = c.schemaFromVolumePricing(source.Volume)
+	return schemaPricing
+}
+func (c *converterImpl) SchemaFromPrimaryIP(source *PrimaryIP) schema.PrimaryIP {
+	var schemaPrimaryIP schema.PrimaryIP
+	if source != nil {
+		var schemaPrimaryIP2 schema.PrimaryIP
+		schemaPrimaryIP2.ID = (*source).ID
+		schemaPrimaryIP2.IP = primaryIPToIPString((*source))
+		schemaPrimaryIP2.Labels = (*source).Labels
+		schemaPrimaryIP2.Name = (*source).Name
+		schemaPrimaryIP2.Type = string((*source).Type)
+		schemaPrimaryIP2.Protection = c.hcloudPrimaryIPProtectionToSchemaPrimaryIPProtection((*source).Protection)
+		schemaPrimaryIP2.DNSPtr = primaryIPDNSPtrSchemaFromMap((*source).DNSPtr)
+		schemaPrimaryIP2.AssigneeID = (*source).AssigneeID
+		schemaPrimaryIP2.AssigneeType = (*source).AssigneeType
+		schemaPrimaryIP2.AutoDelete = (*source).AutoDelete
+		schemaPrimaryIP2.Blocked = (*source).Blocked
+		schemaPrimaryIP2.Created = c.timeTimeToTimeTime((*source).Created)
+		schemaPrimaryIP2.Datacenter = c.SchemaFromDatacenter((*source).Datacenter)
+		schemaPrimaryIP = schemaPrimaryIP2
+	}
+	return schemaPrimaryIP
+}
+func (c *converterImpl) SchemaFromSSHKey(source *SSHKey) schema.SSHKey {
+	var schemaSSHKey schema.SSHKey
+	if source != nil {
+		var schemaSSHKey2 schema.SSHKey
+		schemaSSHKey2.ID = (*source).ID
+		schemaSSHKey2.Name = (*source).Name
+		schemaSSHKey2.Fingerprint = (*source).Fingerprint
+		schemaSSHKey2.PublicKey = (*source).PublicKey
+		schemaSSHKey2.Labels = (*source).Labels
+		schemaSSHKey2.Created = c.timeTimeToTimeTime((*source).Created)
+		schemaSSHKey = schemaSSHKey2
+	}
+	return schemaSSHKey
+}
+func (c *converterImpl) SchemaFromServer(source *Server) schema.Server {
+	var schemaServer schema.Server
+	if source != nil {
+		var schemaServer2 schema.Server
+		schemaServer2.ID = (*source).ID
+		schemaServer2.Name = (*source).Name
+		schemaServer2.Status = string((*source).Status)
+		schemaServer2.Created = c.timeTimeToTimeTime((*source).Created)
+		schemaServer2.PublicNet = c.SchemaFromServerPublicNet((*source).PublicNet)
+		var schemaServerPrivateNetList []schema.ServerPrivateNet
+		if (*source).PrivateNet != nil {
+			schemaServerPrivateNetList = make([]schema.ServerPrivateNet, len((*source).PrivateNet))
+			for i := 0; i < len((*source).PrivateNet); i++ {
+				schemaServerPrivateNetList[i] = c.SchemaFromServerPrivateNet((*source).PrivateNet[i])
+			}
+		}
+		schemaServer2.PrivateNet = schemaServerPrivateNetList
+		schemaServer2.ServerType = c.SchemaFromServerType((*source).ServerType)
+		schemaServer2.IncludedTraffic = (*source).IncludedTraffic
+		schemaServer2.OutgoingTraffic = mapZeroUint64ToNil((*source).OutgoingTraffic)
+		schemaServer2.IngoingTraffic = mapZeroUint64ToNil((*source).IngoingTraffic)
+		schemaServer2.BackupWindow = mapEmptyStringToNil((*source).BackupWindow)
+		schemaServer2.RescueEnabled = (*source).RescueEnabled
+		schemaServer2.ISO = c.pHcloudISOToPSchemaISO((*source).ISO)
+		schemaServer2.Locked = (*source).Locked
+		schemaServer2.Datacenter = c.SchemaFromDatacenter((*source).Datacenter)
+		schemaServer2.Image = c.pHcloudImageToPSchemaImage((*source).Image)
+		schemaServer2.Protection = c.hcloudServerProtectionToSchemaServerProtection((*source).Protection)
+		schemaServer2.Labels = (*source).Labels
+		var int64List []int64
+		if (*source).Volumes != nil {
+			int64List = make([]int64, len((*source).Volumes))
+			for j := 0; j < len((*source).Volumes); j++ {
+				int64List[j] = int64FromVolume((*source).Volumes[j])
+			}
+		}
+		schemaServer2.Volumes = int64List
+		schemaServer2.PrimaryDiskSize = (*source).PrimaryDiskSize
+		schemaServer2.PlacementGroup = c.pHcloudPlacementGroupToPSchemaPlacementGroup((*source).PlacementGroup)
+		var int64List2 []int64
+		if (*source).LoadBalancers != nil {
+			int64List2 = make([]int64, len((*source).LoadBalancers))
+			for k := 0; k < len((*source).LoadBalancers); k++ {
+				int64List2[k] = c.pHcloudLoadBalancerToInt64((*source).LoadBalancers[k])
+			}
+		}
+		schemaServer2.LoadBalancers = int64List2
+		schemaServer = schemaServer2
+	}
+	return schemaServer
+}
+func (c *converterImpl) SchemaFromServerPrivateNet(source ServerPrivateNet) schema.ServerPrivateNet {
+	var schemaServerPrivateNet schema.ServerPrivateNet
+	schemaServerPrivateNet.Network = c.pHcloudNetworkToInt64(source.Network)
+	schemaServerPrivateNet.IP = stringFromIP(source.IP)
+	var stringList []string
+	if source.Aliases != nil {
+		stringList = make([]string, len(source.Aliases))
+		for i := 0; i < len(source.Aliases); i++ {
+			stringList[i] = stringFromIP(source.Aliases[i])
+		}
+	}
+	schemaServerPrivateNet.AliasIPs = stringList
+	schemaServerPrivateNet.MACAddress = source.MACAddress
+	return schemaServerPrivateNet
+}
+func (c *converterImpl) SchemaFromServerPublicNet(source ServerPublicNet) schema.ServerPublicNet {
+	var schemaServerPublicNet schema.ServerPublicNet
+	schemaServerPublicNet.IPv4 = c.SchemaFromServerPublicNetIPv4(source.IPv4)
+	schemaServerPublicNet.IPv6 = c.SchemaFromServerPublicNetIPv6(source.IPv6)
+	var int64List []int64
+	if source.FloatingIPs != nil {
+		int64List = make([]int64, len(source.FloatingIPs))
+		for i := 0; i < len(source.FloatingIPs); i++ {
+			int64List[i] = int64FromFloatingIP(source.FloatingIPs[i])
+		}
+	}
+	schemaServerPublicNet.FloatingIPs = int64List
+	var schemaServerFirewallList []schema.ServerFirewall
+	if source.Firewalls != nil {
+		schemaServerFirewallList = make([]schema.ServerFirewall, len(source.Firewalls))
+		for j := 0; j < len(source.Firewalls); j++ {
+			schemaServerFirewallList[j] = serverFirewallSchemaFromFirewallStatus(source.Firewalls[j])
+		}
+	}
+	schemaServerPublicNet.Firewalls = schemaServerFirewallList
+	return schemaServerPublicNet
+}
+func (c *converterImpl) SchemaFromServerPublicNetIPv4(source ServerPublicNetIPv4) schema.ServerPublicNetIPv4 {
+	var schemaServerPublicNetIPv4 schema.ServerPublicNetIPv4
+	schemaServerPublicNetIPv4.ID = source.ID
+	schemaServerPublicNetIPv4.IP = stringFromIP(source.IP)
+	schemaServerPublicNetIPv4.Blocked = source.Blocked
+	schemaServerPublicNetIPv4.DNSPtr = source.DNSPtr
+	return schemaServerPublicNetIPv4
+}
+func (c *converterImpl) SchemaFromServerPublicNetIPv6(source ServerPublicNetIPv6) schema.ServerPublicNetIPv6 {
+	var schemaServerPublicNetIPv6 schema.ServerPublicNetIPv6
+	schemaServerPublicNetIPv6.ID = source.ID
+	schemaServerPublicNetIPv6.IP = c.pNetIPNetToString(source.Network)
+	schemaServerPublicNetIPv6.Blocked = source.Blocked
+	schemaServerPublicNetIPv6.DNSPtr = serverPublicNetIPv6DNSPtrSchemaFromMap(source.DNSPtr)
+	return schemaServerPublicNetIPv6
+}
+func (c *converterImpl) SchemaFromServerType(source *ServerType) schema.ServerType {
+	var schemaServerType schema.ServerType
+	if source != nil {
+		var schemaServerType2 schema.ServerType
+		schemaServerType2.ID = (*source).ID
+		schemaServerType2.Name = (*source).Name
+		schemaServerType2.Description = (*source).Description
+		schemaServerType2.Cores = (*source).Cores
+		schemaServerType2.Memory = (*source).Memory
+		schemaServerType2.Disk = (*source).Disk
+		schemaServerType2.StorageType = string((*source).StorageType)
+		schemaServerType2.CPUType = string((*source).CPUType)
+		schemaServerType2.Architecture = string((*source).Architecture)
+		schemaServerType2.IncludedTraffic = (*source).IncludedTraffic
+		var schemaPricingServerTypePriceList []schema.PricingServerTypePrice
+		if (*source).Pricings != nil {
+			schemaPricingServerTypePriceList = make([]schema.PricingServerTypePrice, len((*source).Pricings))
+			for i := 0; i < len((*source).Pricings); i++ {
+				schemaPricingServerTypePriceList[i] = c.schemaFromServerTypeLocationPricing((*source).Pricings[i])
+			}
+		}
+		schemaServerType2.Prices = schemaPricingServerTypePriceList
+		schemaServerType2.Deprecated = isDeprecationNotNil((*source).DeprecatableResource.Deprecation)
+		schemaServerType2.DeprecatableResource = c.hcloudDeprecatableResourceToSchemaDeprecatableResource((*source).DeprecatableResource)
+		schemaServerType = schemaServerType2
+	}
+	return schemaServerType
+}
+func (c *converterImpl) SchemaFromVolume(source *Volume) schema.Volume {
+	var schemaVolume schema.Volume
+	if source != nil {
+		var schemaVolume2 schema.Volume
+		schemaVolume2.ID = (*source).ID
+		schemaVolume2.Name = (*source).Name
+		schemaVolume2.Server = c.pHcloudServerToPInt64((*source).Server)
+		schemaVolume2.Status = string((*source).Status)
+		schemaVolume2.Location = c.SchemaFromLocation((*source).Location)
+		schemaVolume2.Size = (*source).Size
+		schemaVolume2.Protection = c.hcloudVolumeProtectionToSchemaVolumeProtection((*source).Protection)
+		schemaVolume2.Labels = (*source).Labels
+		schemaVolume2.LinuxDevice = (*source).LinuxDevice
+		schemaVolume2.Created = c.timeTimeToTimeTime((*source).Created)
+		schemaVolume = schemaVolume2
+	}
+	return schemaVolume
+}
+func (c *converterImpl) ServerFromSchema(source schema.Server) *Server {
+	var hcloudServer Server
+	hcloudServer.ID = source.ID
+	hcloudServer.Name = source.Name
+	hcloudServer.Status = ServerStatus(source.Status)
+	hcloudServer.Created = c.timeTimeToTimeTime(source.Created)
+	hcloudServer.PublicNet = c.ServerPublicNetFromSchema(source.PublicNet)
+	var hcloudServerPrivateNetList []ServerPrivateNet
+	if source.PrivateNet != nil {
+		hcloudServerPrivateNetList = make([]ServerPrivateNet, len(source.PrivateNet))
+		for i := 0; i < len(source.PrivateNet); i++ {
+			hcloudServerPrivateNetList[i] = c.ServerPrivateNetFromSchema(source.PrivateNet[i])
+		}
+	}
+	hcloudServer.PrivateNet = hcloudServerPrivateNetList
+	hcloudServer.ServerType = c.ServerTypeFromSchema(source.ServerType)
+	hcloudServer.Datacenter = c.DatacenterFromSchema(source.Datacenter)
+	hcloudServer.IncludedTraffic = source.IncludedTraffic
+	var xuint64 uint64
+	if source.OutgoingTraffic != nil {
+		xuint64 = *source.OutgoingTraffic
+	}
+	hcloudServer.OutgoingTraffic = xuint64
+	var xuint642 uint64
+	if source.IngoingTraffic != nil {
+		xuint642 = *source.IngoingTraffic
+	}
+	hcloudServer.IngoingTraffic = xuint642
+	var xstring string
+	if source.BackupWindow != nil {
+		xstring = *source.BackupWindow
+	}
+	hcloudServer.BackupWindow = xstring
+	hcloudServer.RescueEnabled = source.RescueEnabled
+	hcloudServer.Locked = source.Locked
+	hcloudServer.ISO = c.pSchemaISOToPHcloudISO(source.ISO)
+	hcloudServer.Image = c.pSchemaImageToPHcloudImage(source.Image)
+	hcloudServer.Protection = c.schemaServerProtectionToHcloudServerProtection(source.Protection)
+	hcloudServer.Labels = source.Labels
+	var pHcloudVolumeList []*Volume
+	if source.Volumes != nil {
+		pHcloudVolumeList = make([]*Volume, len(source.Volumes))
+		for j := 0; j < len(source.Volumes); j++ {
+			pHcloudVolumeList[j] = volumeFromInt64(source.Volumes[j])
+		}
+	}
+	hcloudServer.Volumes = pHcloudVolumeList
+	hcloudServer.PrimaryDiskSize = source.PrimaryDiskSize
+	hcloudServer.PlacementGroup = c.pSchemaPlacementGroupToPHcloudPlacementGroup(source.PlacementGroup)
+	var pHcloudLoadBalancerList []*LoadBalancer
+	if source.LoadBalancers != nil {
+		pHcloudLoadBalancerList = make([]*LoadBalancer, len(source.LoadBalancers))
+		for k := 0; k < len(source.LoadBalancers); k++ {
+			hcloudLoadBalancer := loadBalancerFromInt64(source.LoadBalancers[k])
+			pHcloudLoadBalancerList[k] = &hcloudLoadBalancer
+		}
+	}
+	hcloudServer.LoadBalancers = pHcloudLoadBalancerList
+	return &hcloudServer
+}
+func (c *converterImpl) ServerMetricsFromSchema(source *schema.ServerGetMetricsResponse) (*ServerMetrics, error) {
+	var pHcloudServerMetrics *ServerMetrics
+	if source != nil {
+		var hcloudServerMetrics ServerMetrics
+		hcloudServerMetrics.Start = c.timeTimeToTimeTime((*source).Metrics.Start)
+		hcloudServerMetrics.End = c.timeTimeToTimeTime((*source).Metrics.End)
+		hcloudServerMetrics.Step = (*source).Metrics.Step
+		mapStringHcloudServerMetricsValueList := make(map[string][]ServerMetricsValue, len((*source).Metrics.TimeSeries))
+		for key, value := range (*source).Metrics.TimeSeries {
+			hcloudServerMetricsValueList, err := serverMetricsTimeSeriesFromSchema(value)
+			if err != nil {
+				return nil, err
+			}
+			mapStringHcloudServerMetricsValueList[key] = hcloudServerMetricsValueList
+		}
+		hcloudServerMetrics.TimeSeries = mapStringHcloudServerMetricsValueList
+		pHcloudServerMetrics = &hcloudServerMetrics
+	}
+	return pHcloudServerMetrics, nil
+}
+func (c *converterImpl) ServerPrivateNetFromSchema(source schema.ServerPrivateNet) ServerPrivateNet {
+	var hcloudServerPrivateNet ServerPrivateNet
+	hcloudNetwork := networkFromInt64(source.Network)
+	hcloudServerPrivateNet.Network = &hcloudNetwork
+	hcloudServerPrivateNet.IP = ipFromString(source.IP)
+	var netIPList []net.IP
+	if source.AliasIPs != nil {
+		netIPList = make([]net.IP, len(source.AliasIPs))
+		for i := 0; i < len(source.AliasIPs); i++ {
+			netIPList[i] = ipFromString(source.AliasIPs[i])
+		}
+	}
+	hcloudServerPrivateNet.Aliases = netIPList
+	hcloudServerPrivateNet.MACAddress = source.MACAddress
+	return hcloudServerPrivateNet
+}
+func (c *converterImpl) ServerPublicNetFromSchema(source schema.ServerPublicNet) ServerPublicNet {
+	var hcloudServerPublicNet ServerPublicNet
+	hcloudServerPublicNet.IPv4 = c.ServerPublicNetIPv4FromSchema(source.IPv4)
+	hcloudServerPublicNet.IPv6 = c.ServerPublicNetIPv6FromSchema(source.IPv6)
+	var pHcloudFloatingIPList []*FloatingIP
+	if source.FloatingIPs != nil {
+		pHcloudFloatingIPList = make([]*FloatingIP, len(source.FloatingIPs))
+		for i := 0; i < len(source.FloatingIPs); i++ {
+			pHcloudFloatingIPList[i] = floatingIPFromInt64(source.FloatingIPs[i])
+		}
+	}
+	hcloudServerPublicNet.FloatingIPs = pHcloudFloatingIPList
+	var pHcloudServerFirewallStatusList []*ServerFirewallStatus
+	if source.Firewalls != nil {
+		pHcloudServerFirewallStatusList = make([]*ServerFirewallStatus, len(source.Firewalls))
+		for j := 0; j < len(source.Firewalls); j++ {
+			pHcloudServerFirewallStatusList[j] = firewallStatusFromSchemaServerFirewall(source.Firewalls[j])
+		}
+	}
+	hcloudServerPublicNet.Firewalls = pHcloudServerFirewallStatusList
+	return hcloudServerPublicNet
+}
+func (c *converterImpl) ServerPublicNetIPv4FromSchema(source schema.ServerPublicNetIPv4) ServerPublicNetIPv4 {
+	var hcloudServerPublicNetIPv4 ServerPublicNetIPv4
+	hcloudServerPublicNetIPv4.ID = source.ID
+	hcloudServerPublicNetIPv4.IP = ipFromString(source.IP)
+	hcloudServerPublicNetIPv4.Blocked = source.Blocked
+	hcloudServerPublicNetIPv4.DNSPtr = source.DNSPtr
+	return hcloudServerPublicNetIPv4
+}
+func (c *converterImpl) ServerPublicNetIPv6FromSchema(source schema.ServerPublicNetIPv6) ServerPublicNetIPv6 {
+	var hcloudServerPublicNetIPv6 ServerPublicNetIPv6
+	hcloudServerPublicNetIPv6.ID = source.ID
+	hcloudServerPublicNetIPv6.IP = ipFromServerPublicNetIPv6Schema(source)
+	hcloudServerPublicNetIPv6.Network = ipNetFromServerPublicNetIPv6Schema(source)
+	hcloudServerPublicNetIPv6.Blocked = source.Blocked
+	hcloudServerPublicNetIPv6.DNSPtr = mapFromServerPublicNetIPv6DNSPtrSchema(source.DNSPtr)
+	return hcloudServerPublicNetIPv6
+}
+func (c *converterImpl) ServerTypeFromSchema(source schema.ServerType) *ServerType {
+	var hcloudServerType ServerType
+	hcloudServerType.ID = source.ID
+	hcloudServerType.Name = source.Name
+	hcloudServerType.Description = source.Description
+	hcloudServerType.Cores = source.Cores
+	hcloudServerType.Memory = source.Memory
+	hcloudServerType.Disk = source.Disk
+	hcloudServerType.StorageType = StorageType(source.StorageType)
+	hcloudServerType.CPUType = CPUType(source.CPUType)
+	hcloudServerType.Architecture = Architecture(source.Architecture)
+	hcloudServerType.IncludedTraffic = source.IncludedTraffic
+	var hcloudServerTypeLocationPricingList []ServerTypeLocationPricing
+	if source.Prices != nil {
+		hcloudServerTypeLocationPricingList = make([]ServerTypeLocationPricing, len(source.Prices))
+		for i := 0; i < len(source.Prices); i++ {
+			hcloudServerTypeLocationPricingList[i] = c.serverTypePricingFromSchema(source.Prices[i])
+		}
+	}
+	hcloudServerType.Pricings = hcloudServerTypeLocationPricingList
+	hcloudServerType.DeprecatableResource = c.schemaDeprecatableResourceToHcloudDeprecatableResource(source.DeprecatableResource)
+	return &hcloudServerType
+}
+func (c *converterImpl) VolumeFromSchema(source schema.Volume) *Volume {
+	var hcloudVolume Volume
+	hcloudVolume.ID = source.ID
+	hcloudVolume.Name = source.Name
+	hcloudVolume.Status = VolumeStatus(source.Status)
+	var pHcloudServer *Server
+	if source.Server != nil {
+		hcloudServer := serverFromInt64(*source.Server)
+		pHcloudServer = &hcloudServer
+	}
+	hcloudVolume.Server = pHcloudServer
+	hcloudVolume.Location = c.LocationFromSchema(source.Location)
+	hcloudVolume.Size = source.Size
+	hcloudVolume.Protection = c.schemaVolumeProtectionToHcloudVolumeProtection(source.Protection)
+	hcloudVolume.Labels = source.Labels
+	hcloudVolume.LinuxDevice = source.LinuxDevice
+	hcloudVolume.Created = c.timeTimeToTimeTime(source.Created)
+	return &hcloudVolume
+}
+func (c *converterImpl) hcloudCertificateStatusTypeToString(source CertificateStatusType) string {
+	return string(source)
+}
+func (c *converterImpl) hcloudCertificateUsedByRefToSchemaCertificateUsedByRef(source CertificateUsedByRef) schema.CertificateUsedByRef {
+	var schemaCertificateUsedByRef schema.CertificateUsedByRef
+	schemaCertificateUsedByRef.ID = source.ID
+	schemaCertificateUsedByRef.Type = string(source.Type)
+	return schemaCertificateUsedByRef
+}
+func (c *converterImpl) hcloudDatacenterServerTypesToSchemaDatacenterServerTypes(source DatacenterServerTypes) schema.DatacenterServerTypes {
+	var schemaDatacenterServerTypes schema.DatacenterServerTypes
+	var int64List []int64
+	if source.Supported != nil {
+		int64List = make([]int64, len(source.Supported))
+		for i := 0; i < len(source.Supported); i++ {
+			int64List[i] = int64FromServerType(source.Supported[i])
+		}
+	}
+	schemaDatacenterServerTypes.Supported = int64List
+	var int64List2 []int64
+	if source.AvailableForMigration != nil {
+		int64List2 = make([]int64, len(source.AvailableForMigration))
+		for j := 0; j < len(source.AvailableForMigration); j++ {
+			int64List2[j] = int64FromServerType(source.AvailableForMigration[j])
+		}
+	}
+	schemaDatacenterServerTypes.AvailableForMigration = int64List2
+	var int64List3 []int64
+	if source.Available != nil {
+		int64List3 = make([]int64, len(source.Available))
+		for k := 0; k < len(source.Available); k++ {
+			int64List3[k] = int64FromServerType(source.Available[k])
+		}
+	}
+	schemaDatacenterServerTypes.Available = int64List3
+	return schemaDatacenterServerTypes
+}
+func (c *converterImpl) hcloudDeprecatableResourceToSchemaDeprecatableResource(source DeprecatableResource) schema.DeprecatableResource {
+	var schemaDeprecatableResource schema.DeprecatableResource
+	schemaDeprecatableResource.Deprecation = c.SchemaFromDeprecation(source.Deprecation)
+	return schemaDeprecatableResource
+}
+func (c *converterImpl) hcloudFirewallRuleToSchemaFirewallRule(source FirewallRule) schema.FirewallRule {
+	var schemaFirewallRule schema.FirewallRule
+	schemaFirewallRule.Direction = string(source.Direction)
+	var stringList []string
+	if source.SourceIPs != nil {
+		stringList = make([]string, len(source.SourceIPs))
+		for i := 0; i < len(source.SourceIPs); i++ {
+			stringList[i] = stringFromIPNet(source.SourceIPs[i])
+		}
+	}
+	schemaFirewallRule.SourceIPs = stringList
+	var stringList2 []string
+	if source.DestinationIPs != nil {
+		stringList2 = make([]string, len(source.DestinationIPs))
+		for j := 0; j < len(source.DestinationIPs); j++ {
+			stringList2[j] = stringFromIPNet(source.DestinationIPs[j])
+		}
+	}
+	schemaFirewallRule.DestinationIPs = stringList2
+	schemaFirewallRule.Protocol = string(source.Protocol)
+	schemaFirewallRule.Port = source.Port
+	schemaFirewallRule.Description = source.Description
+	return schemaFirewallRule
+}
+func (c *converterImpl) hcloudFloatingIPProtectionToSchemaFloatingIPProtection(source FloatingIPProtection) schema.FloatingIPProtection {
+	var schemaFloatingIPProtection schema.FloatingIPProtection
+	schemaFloatingIPProtection.Delete = source.Delete
+	return schemaFloatingIPProtection
+}
+func (c *converterImpl) hcloudImageProtectionToSchemaImageProtection(source ImageProtection) schema.ImageProtection {
+	var schemaImageProtection schema.ImageProtection
+	schemaImageProtection.Delete = source.Delete
+	return schemaImageProtection
+}
+func (c *converterImpl) hcloudLoadBalancerAlgorithmToSchemaLoadBalancerAlgorithm(source LoadBalancerAlgorithm) schema.LoadBalancerAlgorithm {
+	var schemaLoadBalancerAlgorithm schema.LoadBalancerAlgorithm
+	schemaLoadBalancerAlgorithm.Type = string(source.Type)
+	return schemaLoadBalancerAlgorithm
+}
+func (c *converterImpl) hcloudLoadBalancerCreateOptsServiceToSchemaLoadBalancerCreateRequestService(source LoadBalancerCreateOptsService) schema.LoadBalancerCreateRequestService {
+	var schemaLoadBalancerCreateRequestService schema.LoadBalancerCreateRequestService
+	schemaLoadBalancerCreateRequestService.Protocol = string(source.Protocol)
+	schemaLoadBalancerCreateRequestService.ListenPort = source.ListenPort
+	schemaLoadBalancerCreateRequestService.DestinationPort = source.DestinationPort
+	schemaLoadBalancerCreateRequestService.Proxyprotocol = source.Proxyprotocol
+	schemaLoadBalancerCreateRequestService.HTTP = c.pHcloudLoadBalancerCreateOptsServiceHTTPToPSchemaLoadBalancerCreateRequestServiceHTTP(source.HTTP)
+	schemaLoadBalancerCreateRequestService.HealthCheck = c.pHcloudLoadBalancerCreateOptsServiceHealthCheckToPSchemaLoadBalancerCreateRequestServiceHealthCheck(source.HealthCheck)
+	return schemaLoadBalancerCreateRequestService
+}
+func (c *converterImpl) hcloudLoadBalancerCreateOptsTargetToSchemaLoadBalancerCreateRequestTarget(source LoadBalancerCreateOptsTarget) schema.LoadBalancerCreateRequestTarget {
+	var schemaLoadBalancerCreateRequestTarget schema.LoadBalancerCreateRequestTarget
+	schemaLoadBalancerCreateRequestTarget.Type = string(source.Type)
+	schemaLoadBalancerCreateRequestTarget.Server = schemaFromLoadBalancerCreateOptsTargetServer(source.Server)
+	schemaLoadBalancerCreateRequestTarget.LabelSelector = schemaFromLoadBalancerCreateOptsTargetLabelSelector(source.LabelSelector)
+	schemaLoadBalancerCreateRequestTarget.IP = schemaFromLoadBalancerCreateOptsTargetIP(source.IP)
+	schemaLoadBalancerCreateRequestTarget.UsePrivateIP = source.UsePrivateIP
+	return schemaLoadBalancerCreateRequestTarget
+}
+func (c *converterImpl) hcloudLoadBalancerPrivateNetToSchemaLoadBalancerPrivateNet(source LoadBalancerPrivateNet) schema.LoadBalancerPrivateNet {
+	var schemaLoadBalancerPrivateNet schema.LoadBalancerPrivateNet
+	schemaLoadBalancerPrivateNet.Network = c.pHcloudNetworkToInt64(source.Network)
+	schemaLoadBalancerPrivateNet.IP = stringFromIP(source.IP)
+	return schemaLoadBalancerPrivateNet
+}
+func (c *converterImpl) hcloudLoadBalancerProtectionToSchemaLoadBalancerProtection(source LoadBalancerProtection) schema.LoadBalancerProtection {
+	var schemaLoadBalancerProtection schema.LoadBalancerProtection
+	schemaLoadBalancerProtection.Delete = source.Delete
+	return schemaLoadBalancerProtection
+}
+func (c *converterImpl) hcloudLoadBalancerPublicNetIPv4ToSchemaLoadBalancerPublicNetIPv4(source LoadBalancerPublicNetIPv4) schema.LoadBalancerPublicNetIPv4 {
+	var schemaLoadBalancerPublicNetIPv4 schema.LoadBalancerPublicNetIPv4
+	schemaLoadBalancerPublicNetIPv4.IP = stringFromIP(source.IP)
+	schemaLoadBalancerPublicNetIPv4.DNSPtr = source.DNSPtr
+	return schemaLoadBalancerPublicNetIPv4
+}
+func (c *converterImpl) hcloudLoadBalancerPublicNetIPv6ToSchemaLoadBalancerPublicNetIPv6(source LoadBalancerPublicNetIPv6) schema.LoadBalancerPublicNetIPv6 {
+	var schemaLoadBalancerPublicNetIPv6 schema.LoadBalancerPublicNetIPv6
+	schemaLoadBalancerPublicNetIPv6.IP = stringFromIP(source.IP)
+	schemaLoadBalancerPublicNetIPv6.DNSPtr = source.DNSPtr
+	return schemaLoadBalancerPublicNetIPv6
+}
+func (c *converterImpl) hcloudLoadBalancerPublicNetToSchemaLoadBalancerPublicNet(source LoadBalancerPublicNet) schema.LoadBalancerPublicNet {
+	var schemaLoadBalancerPublicNet schema.LoadBalancerPublicNet
+	schemaLoadBalancerPublicNet.Enabled = source.Enabled
+	schemaLoadBalancerPublicNet.IPv4 = c.hcloudLoadBalancerPublicNetIPv4ToSchemaLoadBalancerPublicNetIPv4(source.IPv4)
+	schemaLoadBalancerPublicNet.IPv6 = c.hcloudLoadBalancerPublicNetIPv6ToSchemaLoadBalancerPublicNetIPv6(source.IPv6)
+	return schemaLoadBalancerPublicNet
+}
+func (c *converterImpl) hcloudLoadBalancerServiceHTTPToPSchemaLoadBalancerServiceHTTP(source LoadBalancerServiceHTTP) *schema.LoadBalancerServiceHTTP {
+	var schemaLoadBalancerServiceHTTP schema.LoadBalancerServiceHTTP
+	schemaLoadBalancerServiceHTTP.CookieName = source.CookieName
+	schemaLoadBalancerServiceHTTP.CookieLifetime = intSecondsFromDuration(source.CookieLifetime)
+	var int64List []int64
+	if source.Certificates != nil {
+		int64List = make([]int64, len(source.Certificates))
+		for i := 0; i < len(source.Certificates); i++ {
+			int64List[i] = int64FromCertificate(source.Certificates[i])
+		}
+	}
+	schemaLoadBalancerServiceHTTP.Certificates = int64List
+	schemaLoadBalancerServiceHTTP.RedirectHTTP = source.RedirectHTTP
+	schemaLoadBalancerServiceHTTP.StickySessions = source.StickySessions
+	return &schemaLoadBalancerServiceHTTP
+}
+func (c *converterImpl) hcloudNetworkProtectionToSchemaNetworkProtection(source NetworkProtection) schema.NetworkProtection {
+	var schemaNetworkProtection schema.NetworkProtection
+	schemaNetworkProtection.Delete = source.Delete
+	return schemaNetworkProtection
+}
+func (c *converterImpl) hcloudPriceToSchemaPrice(source Price) schema.Price {
+	var schemaPrice schema.Price
+	schemaPrice.Net = source.Net
+	schemaPrice.Gross = source.Gross
+	return schemaPrice
+}
+func (c *converterImpl) hcloudPrimaryIPPriceToSchemaPrice(source PrimaryIPPrice) schema.Price {
+	var schemaPrice schema.Price
+	schemaPrice.Net = source.Net
+	schemaPrice.Gross = source.Gross
+	return schemaPrice
+}
+func (c *converterImpl) hcloudPrimaryIPProtectionToSchemaPrimaryIPProtection(source PrimaryIPProtection) schema.PrimaryIPProtection {
+	var schemaPrimaryIPProtection schema.PrimaryIPProtection
+	schemaPrimaryIPProtection.Delete = source.Delete
+	return schemaPrimaryIPProtection
+}
+func (c *converterImpl) hcloudServerBackupPricingToSchemaPricingServerBackup(source ServerBackupPricing) schema.PricingServerBackup {
+	var schemaPricingServerBackup schema.PricingServerBackup
+	schemaPricingServerBackup.Percentage = source.Percentage
+	return schemaPricingServerBackup
+}
+func (c *converterImpl) hcloudServerProtectionToSchemaServerProtection(source ServerProtection) schema.ServerProtection {
+	var schemaServerProtection schema.ServerProtection
+	schemaServerProtection.Delete = source.Delete
+	schemaServerProtection.Rebuild = source.Rebuild
+	return schemaServerProtection
+}
+func (c *converterImpl) hcloudVolumeProtectionToSchemaVolumeProtection(source VolumeProtection) schema.VolumeProtection {
+	var schemaVolumeProtection schema.VolumeProtection
+	schemaVolumeProtection.Delete = source.Delete
+	return schemaVolumeProtection
+}
+func (c *converterImpl) intISOFromSchema(source schema.ISO) ISO {
+	var hcloudISO ISO
+	hcloudISO.ID = source.ID
+	hcloudISO.Name = source.Name
+	hcloudISO.Description = source.Description
+	hcloudISO.Type = ISOType(source.Type)
+	var pHcloudArchitecture *Architecture
+	if source.Architecture != nil {
+		hcloudArchitecture := Architecture(*source.Architecture)
+		pHcloudArchitecture = &hcloudArchitecture
+	}
+	hcloudISO.Architecture = pHcloudArchitecture
+	var pTimeTime *time.Time
+	if source.DeprecatableResource.Deprecation != nil {
+		pTimeTime = &source.DeprecatableResource.Deprecation.UnavailableAfter
+	}
+	hcloudISO.Deprecated = c.pTimeTimeToTimeTime(pTimeTime)
+	hcloudISO.DeprecatableResource = c.schemaDeprecatableResourceToHcloudDeprecatableResource(source.DeprecatableResource)
+	return hcloudISO
+}
+func (c *converterImpl) intSchemaFromImage(source Image) schema.Image {
+	var schemaImage schema.Image
+	schemaImage.ID = source.ID
+	schemaImage.Status = string(source.Status)
+	schemaImage.Type = string(source.Type)
+	pString := source.Name
+	schemaImage.Name = &pString
+	schemaImage.Description = source.Description
+	schemaImage.ImageSize = mapZeroFloat32ToNil(source.ImageSize)
+	schemaImage.DiskSize = source.DiskSize
+	schemaImage.Created = timeToTimePtr(source.Created)
+	schemaImage.CreatedFrom = c.pHcloudServerToPSchemaImageCreatedFrom(source.CreatedFrom)
+	schemaImage.BoundTo = c.pHcloudServerToPInt64(source.BoundTo)
+	schemaImage.OSFlavor = source.OSFlavor
+	pString2 := source.OSVersion
+	schemaImage.OSVersion = &pString2
+	schemaImage.Architecture = string(source.Architecture)
+	schemaImage.RapidDeploy = source.RapidDeploy
+	schemaImage.Protection = c.hcloudImageProtectionToSchemaImageProtection(source.Protection)
+	schemaImage.Deprecated = timeToTimePtr(source.Deprecated)
+	schemaImage.Deleted = timeToTimePtr(source.Deleted)
+	schemaImage.Labels = source.Labels
+	return schemaImage
+}
+func (c *converterImpl) pHcloudActionResourceToSchemaActionResourceReference(source *ActionResource) schema.ActionResourceReference {
+	var schemaActionResourceReference schema.ActionResourceReference
+	if source != nil {
+		var schemaActionResourceReference2 schema.ActionResourceReference
+		schemaActionResourceReference2.ID = (*source).ID
+		schemaActionResourceReference2.Type = string((*source).Type)
+		schemaActionResourceReference = schemaActionResourceReference2
+	}
+	return schemaActionResourceReference
+}
+func (c *converterImpl) pHcloudCertificateStatusToPSchemaCertificateStatusRef(source *CertificateStatus) *schema.CertificateStatusRef {
+	var pSchemaCertificateStatusRef *schema.CertificateStatusRef
+	if source != nil {
+		var schemaCertificateStatusRef schema.CertificateStatusRef
+		schemaCertificateStatusRef.Issuance = c.hcloudCertificateStatusTypeToString((*source).Issuance)
+		schemaCertificateStatusRef.Renewal = c.hcloudCertificateStatusTypeToString((*source).Renewal)
+		schemaCertificateStatusRef.Error = c.pHcloudErrorToPSchemaError((*source).Error)
+		pSchemaCertificateStatusRef = &schemaCertificateStatusRef
+	}
+	return pSchemaCertificateStatusRef
+}
+func (c *converterImpl) pHcloudErrorToPSchemaError(source *Error) *schema.Error {
+	var pSchemaError *schema.Error
+	if source != nil {
+		schemaError := c.SchemaFromError((*source))
+		pSchemaError = &schemaError
+	}
+	return pSchemaError
+}
+func (c *converterImpl) pHcloudFirewallResourceLabelSelectorToPSchemaFirewallResourceLabelSelector(source *FirewallResourceLabelSelector) *schema.FirewallResourceLabelSelector {
+	var pSchemaFirewallResourceLabelSelector *schema.FirewallResourceLabelSelector
+	if source != nil {
+		var schemaFirewallResourceLabelSelector schema.FirewallResourceLabelSelector
+		schemaFirewallResourceLabelSelector.Selector = (*source).Selector
+		pSchemaFirewallResourceLabelSelector = &schemaFirewallResourceLabelSelector
+	}
+	return pSchemaFirewallResourceLabelSelector
+}
+func (c *converterImpl) pHcloudFirewallResourceServerToPSchemaFirewallResourceServer(source *FirewallResourceServer) *schema.FirewallResourceServer {
+	var pSchemaFirewallResourceServer *schema.FirewallResourceServer
+	if source != nil {
+		var schemaFirewallResourceServer schema.FirewallResourceServer
+		schemaFirewallResourceServer.ID = (*source).ID
+		pSchemaFirewallResourceServer = &schemaFirewallResourceServer
+	}
+	return pSchemaFirewallResourceServer
+}
+func (c *converterImpl) pHcloudISOToPSchemaISO(source *ISO) *schema.ISO {
+	var pSchemaISO *schema.ISO
+	if source != nil {
+		var schemaISO schema.ISO
+		schemaISO.ID = (*source).ID
+		schemaISO.Name = (*source).Name
+		schemaISO.Description = (*source).Description
+		schemaISO.Type = string((*source).Type)
+		var pString *string
+		if (*source).Architecture != nil {
+			xstring := string(*(*source).Architecture)
+			pString = &xstring
+		}
+		schemaISO.Architecture = pString
+		schemaISO.DeprecatableResource = c.hcloudDeprecatableResourceToSchemaDeprecatableResource((*source).DeprecatableResource)
+		pSchemaISO = &schemaISO
+	}
+	return pSchemaISO
+}
+func (c *converterImpl) pHcloudImageToPSchemaImage(source *Image) *schema.Image {
+	var pSchemaImage *schema.Image
+	if source != nil {
+		schemaImage := c.intSchemaFromImage((*source))
+		pSchemaImage = &schemaImage
+	}
+	return pSchemaImage
+}
+func (c *converterImpl) pHcloudLoadBalancerAddServiceOptsHTTPToPSchemaLoadBalancerActionAddServiceRequestHTTP(source *LoadBalancerAddServiceOptsHTTP) *schema.LoadBalancerActionAddServiceRequestHTTP {
+	var pSchemaLoadBalancerActionAddServiceRequestHTTP *schema.LoadBalancerActionAddServiceRequestHTTP
+	if source != nil {
+		var schemaLoadBalancerActionAddServiceRequestHTTP schema.LoadBalancerActionAddServiceRequestHTTP
+		schemaLoadBalancerActionAddServiceRequestHTTP.CookieName = (*source).CookieName
+		var pInt *int
+		if (*source).CookieLifetime != nil {
+			xint := intSecondsFromDuration(*(*source).CookieLifetime)
+			pInt = &xint
+		}
+		schemaLoadBalancerActionAddServiceRequestHTTP.CookieLifetime = pInt
+		var int64List []int64
+		if (*source).Certificates != nil {
+			int64List = make([]int64, len((*source).Certificates))
+			for i := 0; i < len((*source).Certificates); i++ {
+				int64List[i] = int64FromCertificate((*source).Certificates[i])
+			}
+		}
+		schemaLoadBalancerActionAddServiceRequestHTTP.Certificates = &int64List
+		schemaLoadBalancerActionAddServiceRequestHTTP.RedirectHTTP = (*source).RedirectHTTP
+		schemaLoadBalancerActionAddServiceRequestHTTP.StickySessions = (*source).StickySessions
+		pSchemaLoadBalancerActionAddServiceRequestHTTP = &schemaLoadBalancerActionAddServiceRequestHTTP
+	}
+	return pSchemaLoadBalancerActionAddServiceRequestHTTP
+}
+func (c *converterImpl) pHcloudLoadBalancerAddServiceOptsHealthCheckHTTPToPSchemaLoadBalancerActionAddServiceRequestHealthCheckHTTP(source *LoadBalancerAddServiceOptsHealthCheckHTTP) *schema.LoadBalancerActionAddServiceRequestHealthCheckHTTP {
+	var pSchemaLoadBalancerActionAddServiceRequestHealthCheckHTTP *schema.LoadBalancerActionAddServiceRequestHealthCheckHTTP
+	if source != nil {
+		var schemaLoadBalancerActionAddServiceRequestHealthCheckHTTP schema.LoadBalancerActionAddServiceRequestHealthCheckHTTP
+		schemaLoadBalancerActionAddServiceRequestHealthCheckHTTP.Domain = (*source).Domain
+		schemaLoadBalancerActionAddServiceRequestHealthCheckHTTP.Path = (*source).Path
+		schemaLoadBalancerActionAddServiceRequestHealthCheckHTTP.Response = (*source).Response
+		schemaLoadBalancerActionAddServiceRequestHealthCheckHTTP.StatusCodes = &(*source).StatusCodes
+		schemaLoadBalancerActionAddServiceRequestHealthCheckHTTP.TLS = (*source).TLS
+		pSchemaLoadBalancerActionAddServiceRequestHealthCheckHTTP = &schemaLoadBalancerActionAddServiceRequestHealthCheckHTTP
+	}
+	return pSchemaLoadBalancerActionAddServiceRequestHealthCheckHTTP
+}
+func (c *converterImpl) pHcloudLoadBalancerAddServiceOptsHealthCheckToPSchemaLoadBalancerActionAddServiceRequestHealthCheck(source *LoadBalancerAddServiceOptsHealthCheck) *schema.LoadBalancerActionAddServiceRequestHealthCheck {
+	var pSchemaLoadBalancerActionAddServiceRequestHealthCheck *schema.LoadBalancerActionAddServiceRequestHealthCheck
+	if source != nil {
+		var schemaLoadBalancerActionAddServiceRequestHealthCheck schema.LoadBalancerActionAddServiceRequestHealthCheck
+		schemaLoadBalancerActionAddServiceRequestHealthCheck.Protocol = string((*source).Protocol)
+		schemaLoadBalancerActionAddServiceRequestHealthCheck.Port = (*source).Port
+		var pInt *int
+		if (*source).Interval != nil {
+			xint := intSecondsFromDuration(*(*source).Interval)
+			pInt = &xint
+		}
+		schemaLoadBalancerActionAddServiceRequestHealthCheck.Interval = pInt
+		var pInt2 *int
+		if (*source).Timeout != nil {
+			xint2 := intSecondsFromDuration(*(*source).Timeout)
+			pInt2 = &xint2
+		}
+		schemaLoadBalancerActionAddServiceRequestHealthCheck.Timeout = pInt2
+		schemaLoadBalancerActionAddServiceRequestHealthCheck.Retries = (*source).Retries
+		schemaLoadBalancerActionAddServiceRequestHealthCheck.HTTP = c.pHcloudLoadBalancerAddServiceOptsHealthCheckHTTPToPSchemaLoadBalancerActionAddServiceRequestHealthCheckHTTP((*source).HTTP)
+		pSchemaLoadBalancerActionAddServiceRequestHealthCheck = &schemaLoadBalancerActionAddServiceRequestHealthCheck
+	}
+	return pSchemaLoadBalancerActionAddServiceRequestHealthCheck
+}
+func (c *converterImpl) pHcloudLoadBalancerAlgorithmToPSchemaLoadBalancerCreateRequestAlgorithm(source *LoadBalancerAlgorithm) *schema.LoadBalancerCreateRequestAlgorithm {
+	var pSchemaLoadBalancerCreateRequestAlgorithm *schema.LoadBalancerCreateRequestAlgorithm
+	if source != nil {
+		var schemaLoadBalancerCreateRequestAlgorithm schema.LoadBalancerCreateRequestAlgorithm
+		schemaLoadBalancerCreateRequestAlgorithm.Type = string((*source).Type)
+		pSchemaLoadBalancerCreateRequestAlgorithm = &schemaLoadBalancerCreateRequestAlgorithm
+	}
+	return pSchemaLoadBalancerCreateRequestAlgorithm
+}
+func (c *converterImpl) pHcloudLoadBalancerCreateOptsServiceHTTPToPSchemaLoadBalancerCreateRequestServiceHTTP(source *LoadBalancerCreateOptsServiceHTTP) *schema.LoadBalancerCreateRequestServiceHTTP {
+	var pSchemaLoadBalancerCreateRequestServiceHTTP *schema.LoadBalancerCreateRequestServiceHTTP
+	if source != nil {
+		var schemaLoadBalancerCreateRequestServiceHTTP schema.LoadBalancerCreateRequestServiceHTTP
+		schemaLoadBalancerCreateRequestServiceHTTP.CookieName = (*source).CookieName
+		var pInt *int
+		if (*source).CookieLifetime != nil {
+			xint := intSecondsFromDuration(*(*source).CookieLifetime)
+			pInt = &xint
+		}
+		schemaLoadBalancerCreateRequestServiceHTTP.CookieLifetime = pInt
+		var int64List []int64
+		if (*source).Certificates != nil {
+			int64List = make([]int64, len((*source).Certificates))
+			for i := 0; i < len((*source).Certificates); i++ {
+				int64List[i] = int64FromCertificate((*source).Certificates[i])
+			}
+		}
+		schemaLoadBalancerCreateRequestServiceHTTP.Certificates = &int64List
+		schemaLoadBalancerCreateRequestServiceHTTP.RedirectHTTP = (*source).RedirectHTTP
+		schemaLoadBalancerCreateRequestServiceHTTP.StickySessions = (*source).StickySessions
+		pSchemaLoadBalancerCreateRequestServiceHTTP = &schemaLoadBalancerCreateRequestServiceHTTP
+	}
+	return pSchemaLoadBalancerCreateRequestServiceHTTP
+}
+func (c *converterImpl) pHcloudLoadBalancerCreateOptsServiceHealthCheckHTTPToPSchemaLoadBalancerCreateRequestServiceHealthCheckHTTP(source *LoadBalancerCreateOptsServiceHealthCheckHTTP) *schema.LoadBalancerCreateRequestServiceHealthCheckHTTP {
+	var pSchemaLoadBalancerCreateRequestServiceHealthCheckHTTP *schema.LoadBalancerCreateRequestServiceHealthCheckHTTP
+	if source != nil {
+		var schemaLoadBalancerCreateRequestServiceHealthCheckHTTP schema.LoadBalancerCreateRequestServiceHealthCheckHTTP
+		schemaLoadBalancerCreateRequestServiceHealthCheckHTTP.Domain = (*source).Domain
+		schemaLoadBalancerCreateRequestServiceHealthCheckHTTP.Path = (*source).Path
+		schemaLoadBalancerCreateRequestServiceHealthCheckHTTP.Response = (*source).Response
+		schemaLoadBalancerCreateRequestServiceHealthCheckHTTP.StatusCodes = &(*source).StatusCodes
+		schemaLoadBalancerCreateRequestServiceHealthCheckHTTP.TLS = (*source).TLS
+		pSchemaLoadBalancerCreateRequestServiceHealthCheckHTTP = &schemaLoadBalancerCreateRequestServiceHealthCheckHTTP
+	}
+	return pSchemaLoadBalancerCreateRequestServiceHealthCheckHTTP
+}
+func (c *converterImpl) pHcloudLoadBalancerCreateOptsServiceHealthCheckToPSchemaLoadBalancerCreateRequestServiceHealthCheck(source *LoadBalancerCreateOptsServiceHealthCheck) *schema.LoadBalancerCreateRequestServiceHealthCheck {
+	var pSchemaLoadBalancerCreateRequestServiceHealthCheck *schema.LoadBalancerCreateRequestServiceHealthCheck
+	if source != nil {
+		var schemaLoadBalancerCreateRequestServiceHealthCheck schema.LoadBalancerCreateRequestServiceHealthCheck
+		schemaLoadBalancerCreateRequestServiceHealthCheck.Protocol = string((*source).Protocol)
+		schemaLoadBalancerCreateRequestServiceHealthCheck.Port = (*source).Port
+		var pInt *int
+		if (*source).Interval != nil {
+			xint := intSecondsFromDuration(*(*source).Interval)
+			pInt = &xint
+		}
+		schemaLoadBalancerCreateRequestServiceHealthCheck.Interval = pInt
+		var pInt2 *int
+		if (*source).Timeout != nil {
+			xint2 := intSecondsFromDuration(*(*source).Timeout)
+			pInt2 = &xint2
+		}
+		schemaLoadBalancerCreateRequestServiceHealthCheck.Timeout = pInt2
+		schemaLoadBalancerCreateRequestServiceHealthCheck.Retries = (*source).Retries
+		schemaLoadBalancerCreateRequestServiceHealthCheck.HTTP = c.pHcloudLoadBalancerCreateOptsServiceHealthCheckHTTPToPSchemaLoadBalancerCreateRequestServiceHealthCheckHTTP((*source).HTTP)
+		pSchemaLoadBalancerCreateRequestServiceHealthCheck = &schemaLoadBalancerCreateRequestServiceHealthCheck
+	}
+	return pSchemaLoadBalancerCreateRequestServiceHealthCheck
+}
+func (c *converterImpl) pHcloudLoadBalancerServiceHealthCheckHTTPToPSchemaLoadBalancerServiceHealthCheckHTTP(source *LoadBalancerServiceHealthCheckHTTP) *schema.LoadBalancerServiceHealthCheckHTTP {
+	var pSchemaLoadBalancerServiceHealthCheckHTTP *schema.LoadBalancerServiceHealthCheckHTTP
+	if source != nil {
+		var schemaLoadBalancerServiceHealthCheckHTTP schema.LoadBalancerServiceHealthCheckHTTP
+		schemaLoadBalancerServiceHealthCheckHTTP.Domain = (*source).Domain
+		schemaLoadBalancerServiceHealthCheckHTTP.Path = (*source).Path
+		schemaLoadBalancerServiceHealthCheckHTTP.Response = (*source).Response
+		schemaLoadBalancerServiceHealthCheckHTTP.StatusCodes = (*source).StatusCodes
+		schemaLoadBalancerServiceHealthCheckHTTP.TLS = (*source).TLS
+		pSchemaLoadBalancerServiceHealthCheckHTTP = &schemaLoadBalancerServiceHealthCheckHTTP
+	}
+	return pSchemaLoadBalancerServiceHealthCheckHTTP
+}
+func (c *converterImpl) pHcloudLoadBalancerTargetIPToPSchemaLoadBalancerTargetIP(source *LoadBalancerTargetIP) *schema.LoadBalancerTargetIP {
+	var pSchemaLoadBalancerTargetIP *schema.LoadBalancerTargetIP
+	if source != nil {
+		var schemaLoadBalancerTargetIP schema.LoadBalancerTargetIP
+		schemaLoadBalancerTargetIP.IP = (*source).IP
+		pSchemaLoadBalancerTargetIP = &schemaLoadBalancerTargetIP
+	}
+	return pSchemaLoadBalancerTargetIP
+}
+func (c *converterImpl) pHcloudLoadBalancerTargetLabelSelectorToPSchemaLoadBalancerTargetLabelSelector(source *LoadBalancerTargetLabelSelector) *schema.LoadBalancerTargetLabelSelector {
+	var pSchemaLoadBalancerTargetLabelSelector *schema.LoadBalancerTargetLabelSelector
+	if source != nil {
+		var schemaLoadBalancerTargetLabelSelector schema.LoadBalancerTargetLabelSelector
+		schemaLoadBalancerTargetLabelSelector.Selector = (*source).Selector
+		pSchemaLoadBalancerTargetLabelSelector = &schemaLoadBalancerTargetLabelSelector
+	}
+	return pSchemaLoadBalancerTargetLabelSelector
+}
+func (c *converterImpl) pHcloudLoadBalancerTargetServerToPSchemaLoadBalancerTargetServer(source *LoadBalancerTargetServer) *schema.LoadBalancerTargetServer {
+	var pSchemaLoadBalancerTargetServer *schema.LoadBalancerTargetServer
+	if source != nil {
+		schemaLoadBalancerTargetServer := c.SchemaFromLoadBalancerServerTarget((*source))
+		pSchemaLoadBalancerTargetServer = &schemaLoadBalancerTargetServer
+	}
+	return pSchemaLoadBalancerTargetServer
+}
+func (c *converterImpl) pHcloudLoadBalancerToInt64(source *LoadBalancer) int64 {
+	var xint64 int64
+	if source != nil {
+		xint64 = int64FromLoadBalancer((*source))
+	}
+	return xint64
+}
+func (c *converterImpl) pHcloudLoadBalancerUpdateServiceOptsHTTPToPSchemaLoadBalancerActionUpdateServiceRequestHTTP(source *LoadBalancerUpdateServiceOptsHTTP) *schema.LoadBalancerActionUpdateServiceRequestHTTP {
+	var pSchemaLoadBalancerActionUpdateServiceRequestHTTP *schema.LoadBalancerActionUpdateServiceRequestHTTP
+	if source != nil {
+		var schemaLoadBalancerActionUpdateServiceRequestHTTP schema.LoadBalancerActionUpdateServiceRequestHTTP
+		schemaLoadBalancerActionUpdateServiceRequestHTTP.CookieName = (*source).CookieName
+		var pInt *int
+		if (*source).CookieLifetime != nil {
+			xint := intSecondsFromDuration(*(*source).CookieLifetime)
+			pInt = &xint
+		}
+		schemaLoadBalancerActionUpdateServiceRequestHTTP.CookieLifetime = pInt
+		var int64List []int64
+		if (*source).Certificates != nil {
+			int64List = make([]int64, len((*source).Certificates))
+			for i := 0; i < len((*source).Certificates); i++ {
+				int64List[i] = int64FromCertificate((*source).Certificates[i])
+			}
+		}
+		schemaLoadBalancerActionUpdateServiceRequestHTTP.Certificates = &int64List
+		schemaLoadBalancerActionUpdateServiceRequestHTTP.RedirectHTTP = (*source).RedirectHTTP
+		schemaLoadBalancerActionUpdateServiceRequestHTTP.StickySessions = (*source).StickySessions
+		pSchemaLoadBalancerActionUpdateServiceRequestHTTP = &schemaLoadBalancerActionUpdateServiceRequestHTTP
+	}
+	return pSchemaLoadBalancerActionUpdateServiceRequestHTTP
+}
+func (c *converterImpl) pHcloudLoadBalancerUpdateServiceOptsHealthCheckHTTPToPSchemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP(source *LoadBalancerUpdateServiceOptsHealthCheckHTTP) *schema.LoadBalancerActionUpdateServiceRequestHealthCheckHTTP {
+	var pSchemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP *schema.LoadBalancerActionUpdateServiceRequestHealthCheckHTTP
+	if source != nil {
+		var schemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP schema.LoadBalancerActionUpdateServiceRequestHealthCheckHTTP
+		schemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP.Domain = (*source).Domain
+		schemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP.Path = (*source).Path
+		schemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP.Response = (*source).Response
+		schemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP.StatusCodes = &(*source).StatusCodes
+		schemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP.TLS = (*source).TLS
+		pSchemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP = &schemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP
+	}
+	return pSchemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP
+}
+func (c *converterImpl) pHcloudLoadBalancerUpdateServiceOptsHealthCheckToPSchemaLoadBalancerActionUpdateServiceRequestHealthCheck(source *LoadBalancerUpdateServiceOptsHealthCheck) *schema.LoadBalancerActionUpdateServiceRequestHealthCheck {
+	var pSchemaLoadBalancerActionUpdateServiceRequestHealthCheck *schema.LoadBalancerActionUpdateServiceRequestHealthCheck
+	if source != nil {
+		var schemaLoadBalancerActionUpdateServiceRequestHealthCheck schema.LoadBalancerActionUpdateServiceRequestHealthCheck
+		schemaLoadBalancerActionUpdateServiceRequestHealthCheck.Protocol = stringPtrFromLoadBalancerServiceProtocol((*source).Protocol)
+		schemaLoadBalancerActionUpdateServiceRequestHealthCheck.Port = (*source).Port
+		var pInt *int
+		if (*source).Interval != nil {
+			xint := intSecondsFromDuration(*(*source).Interval)
+			pInt = &xint
+		}
+		schemaLoadBalancerActionUpdateServiceRequestHealthCheck.Interval = pInt
+		var pInt2 *int
+		if (*source).Timeout != nil {
+			xint2 := intSecondsFromDuration(*(*source).Timeout)
+			pInt2 = &xint2
+		}
+		schemaLoadBalancerActionUpdateServiceRequestHealthCheck.Timeout = pInt2
+		schemaLoadBalancerActionUpdateServiceRequestHealthCheck.Retries = (*source).Retries
+		schemaLoadBalancerActionUpdateServiceRequestHealthCheck.HTTP = c.pHcloudLoadBalancerUpdateServiceOptsHealthCheckHTTPToPSchemaLoadBalancerActionUpdateServiceRequestHealthCheckHTTP((*source).HTTP)
+		pSchemaLoadBalancerActionUpdateServiceRequestHealthCheck = &schemaLoadBalancerActionUpdateServiceRequestHealthCheck
+	}
+	return pSchemaLoadBalancerActionUpdateServiceRequestHealthCheck
+}
+func (c *converterImpl) pHcloudLocationToPString(source *Location) *string {
+	var pString *string
+	if source != nil {
+		xstring := stringFromLocation((*source))
+		pString = &xstring
+	}
+	return pString
+}
+func (c *converterImpl) pHcloudLocationToString(source *Location) string {
+	var xstring string
+	if source != nil {
+		xstring = stringFromLocation((*source))
+	}
+	return xstring
+}
+func (c *converterImpl) pHcloudNetworkToInt64(source *Network) int64 {
+	var xint64 int64
+	if source != nil {
+		xint64 = int64FromNetwork((*source))
+	}
+	return xint64
+}
+func (c *converterImpl) pHcloudNetworkToPInt64(source *Network) *int64 {
+	var pInt64 *int64
+	if source != nil {
+		xint64 := int64FromNetwork((*source))
+		pInt64 = &xint64
+	}
+	return pInt64
+}
+func (c *converterImpl) pHcloudPlacementGroupToPSchemaPlacementGroup(source *PlacementGroup) *schema.PlacementGroup {
+	var pSchemaPlacementGroup *schema.PlacementGroup
+	if source != nil {
+		var schemaPlacementGroup schema.PlacementGroup
+		schemaPlacementGroup.ID = (*source).ID
+		schemaPlacementGroup.Name = (*source).Name
+		schemaPlacementGroup.Labels = (*source).Labels
+		schemaPlacementGroup.Created = c.timeTimeToTimeTime((*source).Created)
+		schemaPlacementGroup.Servers = (*source).Servers
+		schemaPlacementGroup.Type = string((*source).Type)
+		pSchemaPlacementGroup = &schemaPlacementGroup
+	}
+	return pSchemaPlacementGroup
+}
+func (c *converterImpl) pHcloudServerToInt64(source *Server) int64 {
+	var xint64 int64
+	if source != nil {
+		xint64 = int64FromServer((*source))
+	}
+	return xint64
+}
+func (c *converterImpl) pHcloudServerToPInt64(source *Server) *int64 {
+	var pInt64 *int64
+	if source != nil {
+		xint64 := int64FromServer((*source))
+		pInt64 = &xint64
+	}
+	return pInt64
+}
+func (c *converterImpl) pHcloudServerToPSchemaImageCreatedFrom(source *Server) *schema.ImageCreatedFrom {
+	var pSchemaImageCreatedFrom *schema.ImageCreatedFrom
+	if source != nil {
+		var schemaImageCreatedFrom schema.ImageCreatedFrom
+		schemaImageCreatedFrom.ID = (*source).ID
+		schemaImageCreatedFrom.Name = (*source).Name
+		pSchemaImageCreatedFrom = &schemaImageCreatedFrom
+	}
+	return pSchemaImageCreatedFrom
+}
+func (c *converterImpl) pNetIPNetToString(source *net.IPNet) string {
+	var xstring string
+	if source != nil {
+		xstring = stringFromIPNet((*source))
+	}
+	return xstring
+}
+func (c *converterImpl) pSchemaCertificateStatusRefToPHcloudCertificateStatus(source *schema.CertificateStatusRef) *CertificateStatus {
+	var pHcloudCertificateStatus *CertificateStatus
+	if source != nil {
+		var hcloudCertificateStatus CertificateStatus
+		hcloudCertificateStatus.Issuance = CertificateStatusType((*source).Issuance)
+		hcloudCertificateStatus.Renewal = CertificateStatusType((*source).Renewal)
+		hcloudCertificateStatus.Error = c.pSchemaErrorToPHcloudError((*source).Error)
+		pHcloudCertificateStatus = &hcloudCertificateStatus
+	}
+	return pHcloudCertificateStatus
+}
+func (c *converterImpl) pSchemaErrorToPHcloudError(source *schema.Error) *Error {
+	var pHcloudError *Error
+	if source != nil {
+		hcloudError := c.ErrorFromSchema((*source))
+		pHcloudError = &hcloudError
+	}
+	return pHcloudError
+}
+func (c *converterImpl) pSchemaFirewallResourceLabelSelectorToPHcloudFirewallResourceLabelSelector(source *schema.FirewallResourceLabelSelector) *FirewallResourceLabelSelector {
+	var pHcloudFirewallResourceLabelSelector *FirewallResourceLabelSelector
+	if source != nil {
+		var hcloudFirewallResourceLabelSelector FirewallResourceLabelSelector
+		hcloudFirewallResourceLabelSelector.Selector = (*source).Selector
+		pHcloudFirewallResourceLabelSelector = &hcloudFirewallResourceLabelSelector
+	}
+	return pHcloudFirewallResourceLabelSelector
+}
+func (c *converterImpl) pSchemaFirewallResourceServerToPHcloudFirewallResourceServer(source *schema.FirewallResourceServer) *FirewallResourceServer {
+	var pHcloudFirewallResourceServer *FirewallResourceServer
+	if source != nil {
+		var hcloudFirewallResourceServer FirewallResourceServer
+		hcloudFirewallResourceServer.ID = (*source).ID
+		pHcloudFirewallResourceServer = &hcloudFirewallResourceServer
+	}
+	return pHcloudFirewallResourceServer
+}
+func (c *converterImpl) pSchemaISOToPHcloudISO(source *schema.ISO) *ISO {
+	var pHcloudISO *ISO
+	if source != nil {
+		hcloudISO := c.intISOFromSchema((*source))
+		pHcloudISO = &hcloudISO
+	}
+	return pHcloudISO
+}
+func (c *converterImpl) pSchemaImageCreatedFromToPHcloudServer(source *schema.ImageCreatedFrom) *Server {
+	var pHcloudServer *Server
+	if source != nil {
+		hcloudServer := serverFromImageCreatedFromSchema((*source))
+		pHcloudServer = &hcloudServer
+	}
+	return pHcloudServer
+}
+func (c *converterImpl) pSchemaImageToPHcloudImage(source *schema.Image) *Image {
+	var pHcloudImage *Image
+	if source != nil {
+		var hcloudImage Image
+		hcloudImage.ID = (*source).ID
+		var xstring string
+		if (*source).Name != nil {
+			xstring = *(*source).Name
+		}
+		hcloudImage.Name = xstring
+		hcloudImage.Type = ImageType((*source).Type)
+		hcloudImage.Status = ImageStatus((*source).Status)
+		hcloudImage.Description = (*source).Description
+		var xfloat32 float32
+		if (*source).ImageSize != nil {
+			xfloat32 = *(*source).ImageSize
+		}
+		hcloudImage.ImageSize = xfloat32
+		hcloudImage.DiskSize = (*source).DiskSize
+		hcloudImage.Created = c.pTimeTimeToTimeTime((*source).Created)
+		hcloudImage.CreatedFrom = c.pSchemaImageCreatedFromToPHcloudServer((*source).CreatedFrom)
+		var pHcloudServer *Server
+		if (*source).BoundTo != nil {
+			hcloudServer := serverFromInt64(*(*source).BoundTo)
+			pHcloudServer = &hcloudServer
+		}
+		hcloudImage.BoundTo = pHcloudServer
+		hcloudImage.RapidDeploy = (*source).RapidDeploy
+		hcloudImage.OSFlavor = (*source).OSFlavor
+		var xstring2 string
+		if (*source).OSVersion != nil {
+			xstring2 = *(*source).OSVersion
+		}
+		hcloudImage.OSVersion = xstring2
+		hcloudImage.Architecture = Architecture((*source).Architecture)
+		hcloudImage.Protection = c.schemaImageProtectionToHcloudImageProtection((*source).Protection)
+		hcloudImage.Deprecated = c.pTimeTimeToTimeTime((*source).Deprecated)
+		hcloudImage.Labels = (*source).Labels
+		hcloudImage.Deleted = c.pTimeTimeToTimeTime((*source).Deleted)
+		pHcloudImage = &hcloudImage
+	}
+	return pHcloudImage
+}
+func (c *converterImpl) pSchemaLoadBalancerServiceHTTPToHcloudLoadBalancerServiceHTTP(source *schema.LoadBalancerServiceHTTP) LoadBalancerServiceHTTP {
+	var hcloudLoadBalancerServiceHTTP LoadBalancerServiceHTTP
+	if source != nil {
+		var hcloudLoadBalancerServiceHTTP2 LoadBalancerServiceHTTP
+		hcloudLoadBalancerServiceHTTP2.CookieName = (*source).CookieName
+		hcloudLoadBalancerServiceHTTP2.CookieLifetime = durationFromIntSeconds((*source).CookieLifetime)
+		var pHcloudCertificateList []*Certificate
+		if (*source).Certificates != nil {
+			pHcloudCertificateList = make([]*Certificate, len((*source).Certificates))
+			for i := 0; i < len((*source).Certificates); i++ {
+				pHcloudCertificateList[i] = certificateFromInt64((*source).Certificates[i])
+			}
+		}
+		hcloudLoadBalancerServiceHTTP2.Certificates = pHcloudCertificateList
+		hcloudLoadBalancerServiceHTTP2.RedirectHTTP = (*source).RedirectHTTP
+		hcloudLoadBalancerServiceHTTP2.StickySessions = (*source).StickySessions
+		hcloudLoadBalancerServiceHTTP = hcloudLoadBalancerServiceHTTP2
+	}
+	return hcloudLoadBalancerServiceHTTP
+}
+func (c *converterImpl) pSchemaLoadBalancerServiceHealthCheckHTTPToPHcloudLoadBalancerServiceHealthCheckHTTP(source *schema.LoadBalancerServiceHealthCheckHTTP) *LoadBalancerServiceHealthCheckHTTP {
+	var pHcloudLoadBalancerServiceHealthCheckHTTP *LoadBalancerServiceHealthCheckHTTP
+	if source != nil {
+		var hcloudLoadBalancerServiceHealthCheckHTTP LoadBalancerServiceHealthCheckHTTP
+		hcloudLoadBalancerServiceHealthCheckHTTP.Domain = (*source).Domain
+		hcloudLoadBalancerServiceHealthCheckHTTP.Path = (*source).Path
+		hcloudLoadBalancerServiceHealthCheckHTTP.Response = (*source).Response
+		hcloudLoadBalancerServiceHealthCheckHTTP.StatusCodes = (*source).StatusCodes
+		hcloudLoadBalancerServiceHealthCheckHTTP.TLS = (*source).TLS
+		pHcloudLoadBalancerServiceHealthCheckHTTP = &hcloudLoadBalancerServiceHealthCheckHTTP
+	}
+	return pHcloudLoadBalancerServiceHealthCheckHTTP
+}
+func (c *converterImpl) pSchemaLoadBalancerTargetIPToPHcloudLoadBalancerTargetIP(source *schema.LoadBalancerTargetIP) *LoadBalancerTargetIP {
+	var pHcloudLoadBalancerTargetIP *LoadBalancerTargetIP
+	if source != nil {
+		var hcloudLoadBalancerTargetIP LoadBalancerTargetIP
+		hcloudLoadBalancerTargetIP.IP = (*source).IP
+		pHcloudLoadBalancerTargetIP = &hcloudLoadBalancerTargetIP
+	}
+	return pHcloudLoadBalancerTargetIP
+}
+func (c *converterImpl) pSchemaLoadBalancerTargetLabelSelectorToPHcloudLoadBalancerTargetLabelSelector(source *schema.LoadBalancerTargetLabelSelector) *LoadBalancerTargetLabelSelector {
+	var pHcloudLoadBalancerTargetLabelSelector *LoadBalancerTargetLabelSelector
+	if source != nil {
+		var hcloudLoadBalancerTargetLabelSelector LoadBalancerTargetLabelSelector
+		hcloudLoadBalancerTargetLabelSelector.Selector = (*source).Selector
+		pHcloudLoadBalancerTargetLabelSelector = &hcloudLoadBalancerTargetLabelSelector
+	}
+	return pHcloudLoadBalancerTargetLabelSelector
+}
+func (c *converterImpl) pSchemaLoadBalancerTargetServerToPHcloudLoadBalancerTargetServer(source *schema.LoadBalancerTargetServer) *LoadBalancerTargetServer {
+	var pHcloudLoadBalancerTargetServer *LoadBalancerTargetServer
+	if source != nil {
+		hcloudLoadBalancerTargetServer := c.LoadBalancerTargetServerFromSchema((*source))
+		pHcloudLoadBalancerTargetServer = &hcloudLoadBalancerTargetServer
+	}
+	return pHcloudLoadBalancerTargetServer
+}
+func (c *converterImpl) pSchemaPlacementGroupToPHcloudPlacementGroup(source *schema.PlacementGroup) *PlacementGroup {
+	var pHcloudPlacementGroup *PlacementGroup
+	if source != nil {
+		var hcloudPlacementGroup PlacementGroup
+		hcloudPlacementGroup.ID = (*source).ID
+		hcloudPlacementGroup.Name = (*source).Name
+		hcloudPlacementGroup.Labels = (*source).Labels
+		hcloudPlacementGroup.Created = c.timeTimeToTimeTime((*source).Created)
+		hcloudPlacementGroup.Servers = (*source).Servers
+		hcloudPlacementGroup.Type = PlacementGroupType((*source).Type)
+		pHcloudPlacementGroup = &hcloudPlacementGroup
+	}
+	return pHcloudPlacementGroup
+}
+func (c *converterImpl) pTimeTimeToTimeTime(source *time.Time) time.Time {
+	var timeTime time.Time
+	if source != nil {
+		timeTime = (*source)
+	}
+	return timeTime
+}
+func (c *converterImpl) schemaActionResourceReferenceToPHcloudActionResource(source schema.ActionResourceReference) *ActionResource {
+	var hcloudActionResource ActionResource
+	hcloudActionResource.ID = source.ID
+	hcloudActionResource.Type = ActionResourceType(source.Type)
+	return &hcloudActionResource
+}
+func (c *converterImpl) schemaCertificateUsedByRefToHcloudCertificateUsedByRef(source schema.CertificateUsedByRef) CertificateUsedByRef {
+	var hcloudCertificateUsedByRef CertificateUsedByRef
+	hcloudCertificateUsedByRef.ID = source.ID
+	hcloudCertificateUsedByRef.Type = CertificateUsedByRefType(source.Type)
+	return hcloudCertificateUsedByRef
+}
+func (c *converterImpl) schemaDatacenterServerTypesToHcloudDatacenterServerTypes(source schema.DatacenterServerTypes) DatacenterServerTypes {
+	var hcloudDatacenterServerTypes DatacenterServerTypes
+	var pHcloudServerTypeList []*ServerType
+	if source.Supported != nil {
+		pHcloudServerTypeList = make([]*ServerType, len(source.Supported))
+		for i := 0; i < len(source.Supported); i++ {
+			pHcloudServerTypeList[i] = serverTypeFromInt64(source.Supported[i])
+		}
+	}
+	hcloudDatacenterServerTypes.Supported = pHcloudServerTypeList
+	var pHcloudServerTypeList2 []*ServerType
+	if source.AvailableForMigration != nil {
+		pHcloudServerTypeList2 = make([]*ServerType, len(source.AvailableForMigration))
+		for j := 0; j < len(source.AvailableForMigration); j++ {
+			pHcloudServerTypeList2[j] = serverTypeFromInt64(source.AvailableForMigration[j])
+		}
+	}
+	hcloudDatacenterServerTypes.AvailableForMigration = pHcloudServerTypeList2
+	var pHcloudServerTypeList3 []*ServerType
+	if source.Available != nil {
+		pHcloudServerTypeList3 = make([]*ServerType, len(source.Available))
+		for k := 0; k < len(source.Available); k++ {
+			pHcloudServerTypeList3[k] = serverTypeFromInt64(source.Available[k])
+		}
+	}
+	hcloudDatacenterServerTypes.Available = pHcloudServerTypeList3
+	return hcloudDatacenterServerTypes
+}
+func (c *converterImpl) schemaDeprecatableResourceToHcloudDeprecatableResource(source schema.DeprecatableResource) DeprecatableResource {
+	var hcloudDeprecatableResource DeprecatableResource
+	hcloudDeprecatableResource.Deprecation = c.DeprecationFromSchema(source.Deprecation)
+	return hcloudDeprecatableResource
+}
+func (c *converterImpl) schemaFirewallResourceToHcloudFirewallResource(source schema.FirewallResource) FirewallResource {
+	var hcloudFirewallResource FirewallResource
+	hcloudFirewallResource.Type = FirewallResourceType(source.Type)
+	hcloudFirewallResource.Server = c.pSchemaFirewallResourceServerToPHcloudFirewallResourceServer(source.Server)
+	hcloudFirewallResource.LabelSelector = c.pSchemaFirewallResourceLabelSelectorToPHcloudFirewallResourceLabelSelector(source.LabelSelector)
+	return hcloudFirewallResource
+}
+func (c *converterImpl) schemaFirewallRuleToHcloudFirewallRule(source schema.FirewallRule) FirewallRule {
+	var hcloudFirewallRule FirewallRule
+	hcloudFirewallRule.Direction = FirewallRuleDirection(source.Direction)
+	var netIPNetList []net.IPNet
+	if source.SourceIPs != nil {
+		netIPNetList = make([]net.IPNet, len(source.SourceIPs))
+		for i := 0; i < len(source.SourceIPs); i++ {
+			netIPNetList[i] = ipNetFromString(source.SourceIPs[i])
+		}
+	}
+	hcloudFirewallRule.SourceIPs = netIPNetList
+	var netIPNetList2 []net.IPNet
+	if source.DestinationIPs != nil {
+		netIPNetList2 = make([]net.IPNet, len(source.DestinationIPs))
+		for j := 0; j < len(source.DestinationIPs); j++ {
+			netIPNetList2[j] = ipNetFromString(source.DestinationIPs[j])
+		}
+	}
+	hcloudFirewallRule.DestinationIPs = netIPNetList2
+	hcloudFirewallRule.Protocol = FirewallRuleProtocol(source.Protocol)
+	hcloudFirewallRule.Port = source.Port
+	hcloudFirewallRule.Description = source.Description
+	return hcloudFirewallRule
+}
+func (c *converterImpl) schemaFloatingIPProtectionToHcloudFloatingIPProtection(source schema.FloatingIPProtection) FloatingIPProtection {
+	var hcloudFloatingIPProtection FloatingIPProtection
+	hcloudFloatingIPProtection.Delete = source.Delete
+	return hcloudFloatingIPProtection
+}
+func (c *converterImpl) schemaFromFloatingIPPricing(source FloatingIPPricing) schema.PricingFloatingIP {
+	var schemaPricingFloatingIP schema.PricingFloatingIP
+	schemaPricingFloatingIP.PriceMonthly = c.hcloudPriceToSchemaPrice(source.Monthly)
+	return schemaPricingFloatingIP
+}
+func (c *converterImpl) schemaFromFloatingIPTypeLocationPricing(source FloatingIPTypeLocationPricing) schema.PricingFloatingIPTypePrice {
+	var schemaPricingFloatingIPTypePrice schema.PricingFloatingIPTypePrice
+	schemaPricingFloatingIPTypePrice.Location = c.pHcloudLocationToString(source.Location)
+	schemaPricingFloatingIPTypePrice.PriceMonthly = c.hcloudPriceToSchemaPrice(source.Monthly)
+	return schemaPricingFloatingIPTypePrice
+}
+func (c *converterImpl) schemaFromFloatingIPTypePricing(source FloatingIPTypePricing) schema.PricingFloatingIPType {
+	var schemaPricingFloatingIPType schema.PricingFloatingIPType
+	schemaPricingFloatingIPType.Type = string(source.Type)
+	var schemaPricingFloatingIPTypePriceList []schema.PricingFloatingIPTypePrice
+	if source.Pricings != nil {
+		schemaPricingFloatingIPTypePriceList = make([]schema.PricingFloatingIPTypePrice, len(source.Pricings))
+		for i := 0; i < len(source.Pricings); i++ {
+			schemaPricingFloatingIPTypePriceList[i] = c.schemaFromFloatingIPTypeLocationPricing(source.Pricings[i])
+		}
+	}
+	schemaPricingFloatingIPType.Prices = schemaPricingFloatingIPTypePriceList
+	return schemaPricingFloatingIPType
+}
+func (c *converterImpl) schemaFromImagePricing(source ImagePricing) schema.PricingImage {
+	var schemaPricingImage schema.PricingImage
+	schemaPricingImage.PricePerGBMonth = c.hcloudPriceToSchemaPrice(source.PerGBMonth)
+	return schemaPricingImage
+}
+func (c *converterImpl) schemaFromLoadBalancerTypePricing(source LoadBalancerTypePricing) schema.PricingLoadBalancerType {
+	var schemaPricingLoadBalancerType schema.PricingLoadBalancerType
+	var pInt64 *int64
+	if source.LoadBalancerType != nil {
+		pInt64 = &source.LoadBalancerType.ID
+	}
+	var xint64 int64
+	if pInt64 != nil {
+		xint64 = *pInt64
+	}
+	schemaPricingLoadBalancerType.ID = xint64
+	var pString *string
+	if source.LoadBalancerType != nil {
+		pString = &source.LoadBalancerType.Name
+	}
+	var xstring string
+	if pString != nil {
+		xstring = *pString
+	}
+	schemaPricingLoadBalancerType.Name = xstring
+	var schemaPricingLoadBalancerTypePriceList []schema.PricingLoadBalancerTypePrice
+	if source.Pricings != nil {
+		schemaPricingLoadBalancerTypePriceList = make([]schema.PricingLoadBalancerTypePrice, len(source.Pricings))
+		for i := 0; i < len(source.Pricings); i++ {
+			schemaPricingLoadBalancerTypePriceList[i] = c.SchemaFromLoadBalancerTypeLocationPricing(source.Pricings[i])
+		}
+	}
+	schemaPricingLoadBalancerType.Prices = schemaPricingLoadBalancerTypePriceList
+	return schemaPricingLoadBalancerType
+}
+func (c *converterImpl) schemaFromPrimaryIPPricing(source PrimaryIPPricing) schema.PricingPrimaryIP {
+	var schemaPricingPrimaryIP schema.PricingPrimaryIP
+	schemaPricingPrimaryIP.Type = source.Type
+	var schemaPricingPrimaryIPTypePriceList []schema.PricingPrimaryIPTypePrice
+	if source.Pricings != nil {
+		schemaPricingPrimaryIPTypePriceList = make([]schema.PricingPrimaryIPTypePrice, len(source.Pricings))
+		for i := 0; i < len(source.Pricings); i++ {
+			schemaPricingPrimaryIPTypePriceList[i] = c.schemaFromPrimaryIPTypePricing(source.Pricings[i])
+		}
+	}
+	schemaPricingPrimaryIP.Prices = schemaPricingPrimaryIPTypePriceList
+	return schemaPricingPrimaryIP
+}
+func (c *converterImpl) schemaFromPrimaryIPTypePricing(source PrimaryIPTypePricing) schema.PricingPrimaryIPTypePrice {
+	var schemaPricingPrimaryIPTypePrice schema.PricingPrimaryIPTypePrice
+	schemaPricingPrimaryIPTypePrice.Datacenter = source.Datacenter
+	schemaPricingPrimaryIPTypePrice.Location = source.Location
+	schemaPricingPrimaryIPTypePrice.PriceHourly = c.hcloudPrimaryIPPriceToSchemaPrice(source.Hourly)
+	schemaPricingPrimaryIPTypePrice.PriceMonthly = c.hcloudPrimaryIPPriceToSchemaPrice(source.Monthly)
+	return schemaPricingPrimaryIPTypePrice
+}
+func (c *converterImpl) schemaFromServerTypeLocationPricing(source ServerTypeLocationPricing) schema.PricingServerTypePrice {
+	var schemaPricingServerTypePrice schema.PricingServerTypePrice
+	schemaPricingServerTypePrice.Location = c.pHcloudLocationToString(source.Location)
+	schemaPricingServerTypePrice.PriceHourly = c.hcloudPriceToSchemaPrice(source.Hourly)
+	schemaPricingServerTypePrice.PriceMonthly = c.hcloudPriceToSchemaPrice(source.Monthly)
+	return schemaPricingServerTypePrice
+}
+func (c *converterImpl) schemaFromServerTypePricing(source ServerTypePricing) schema.PricingServerType {
+	var schemaPricingServerType schema.PricingServerType
+	var pInt64 *int64
+	if source.ServerType != nil {
+		pInt64 = &source.ServerType.ID
+	}
+	var xint64 int64
+	if pInt64 != nil {
+		xint64 = *pInt64
+	}
+	schemaPricingServerType.ID = xint64
+	var pString *string
+	if source.ServerType != nil {
+		pString = &source.ServerType.Name
+	}
+	var xstring string
+	if pString != nil {
+		xstring = *pString
+	}
+	schemaPricingServerType.Name = xstring
+	var schemaPricingServerTypePriceList []schema.PricingServerTypePrice
+	if source.Pricings != nil {
+		schemaPricingServerTypePriceList = make([]schema.PricingServerTypePrice, len(source.Pricings))
+		for i := 0; i < len(source.Pricings); i++ {
+			schemaPricingServerTypePriceList[i] = c.schemaFromServerTypeLocationPricing(source.Pricings[i])
+		}
+	}
+	schemaPricingServerType.Prices = schemaPricingServerTypePriceList
+	return schemaPricingServerType
+}
+func (c *converterImpl) schemaFromTrafficPricing(source TrafficPricing) schema.PricingTraffic {
+	var schemaPricingTraffic schema.PricingTraffic
+	schemaPricingTraffic.PricePerTB = c.hcloudPriceToSchemaPrice(source.PerTB)
+	return schemaPricingTraffic
+}
+func (c *converterImpl) schemaFromVolumePricing(source VolumePricing) schema.PricingVolume {
+	var schemaPricingVolume schema.PricingVolume
+	schemaPricingVolume.PricePerGBPerMonth = c.hcloudPriceToSchemaPrice(source.PerGBMonthly)
+	return schemaPricingVolume
+}
+func (c *converterImpl) schemaImageProtectionToHcloudImageProtection(source schema.ImageProtection) ImageProtection {
+	var hcloudImageProtection ImageProtection
+	hcloudImageProtection.Delete = source.Delete
+	return hcloudImageProtection
+}
+func (c *converterImpl) schemaLoadBalancerAlgorithmToHcloudLoadBalancerAlgorithm(source schema.LoadBalancerAlgorithm) LoadBalancerAlgorithm {
+	var hcloudLoadBalancerAlgorithm LoadBalancerAlgorithm
+	hcloudLoadBalancerAlgorithm.Type = LoadBalancerAlgorithmType(source.Type)
+	return hcloudLoadBalancerAlgorithm
+}
+func (c *converterImpl) schemaLoadBalancerPrivateNetToHcloudLoadBalancerPrivateNet(source schema.LoadBalancerPrivateNet) LoadBalancerPrivateNet {
+	var hcloudLoadBalancerPrivateNet LoadBalancerPrivateNet
+	hcloudNetwork := networkFromInt64(source.Network)
+	hcloudLoadBalancerPrivateNet.Network = &hcloudNetwork
+	hcloudLoadBalancerPrivateNet.IP = ipFromString(source.IP)
+	return hcloudLoadBalancerPrivateNet
+}
+func (c *converterImpl) schemaLoadBalancerProtectionToHcloudLoadBalancerProtection(source schema.LoadBalancerProtection) LoadBalancerProtection {
+	var hcloudLoadBalancerProtection LoadBalancerProtection
+	hcloudLoadBalancerProtection.Delete = source.Delete
+	return hcloudLoadBalancerProtection
+}
+func (c *converterImpl) schemaLoadBalancerPublicNetIPv4ToHcloudLoadBalancerPublicNetIPv4(source schema.LoadBalancerPublicNetIPv4) LoadBalancerPublicNetIPv4 {
+	var hcloudLoadBalancerPublicNetIPv4 LoadBalancerPublicNetIPv4
+	hcloudLoadBalancerPublicNetIPv4.IP = ipFromString(source.IP)
+	hcloudLoadBalancerPublicNetIPv4.DNSPtr = source.DNSPtr
+	return hcloudLoadBalancerPublicNetIPv4
+}
+func (c *converterImpl) schemaLoadBalancerPublicNetIPv6ToHcloudLoadBalancerPublicNetIPv6(source schema.LoadBalancerPublicNetIPv6) LoadBalancerPublicNetIPv6 {
+	var hcloudLoadBalancerPublicNetIPv6 LoadBalancerPublicNetIPv6
+	hcloudLoadBalancerPublicNetIPv6.IP = ipFromString(source.IP)
+	hcloudLoadBalancerPublicNetIPv6.DNSPtr = source.DNSPtr
+	return hcloudLoadBalancerPublicNetIPv6
+}
+func (c *converterImpl) schemaLoadBalancerPublicNetToHcloudLoadBalancerPublicNet(source schema.LoadBalancerPublicNet) LoadBalancerPublicNet {
+	var hcloudLoadBalancerPublicNet LoadBalancerPublicNet
+	hcloudLoadBalancerPublicNet.Enabled = source.Enabled
+	hcloudLoadBalancerPublicNet.IPv4 = c.schemaLoadBalancerPublicNetIPv4ToHcloudLoadBalancerPublicNetIPv4(source.IPv4)
+	hcloudLoadBalancerPublicNet.IPv6 = c.schemaLoadBalancerPublicNetIPv6ToHcloudLoadBalancerPublicNetIPv6(source.IPv6)
+	return hcloudLoadBalancerPublicNet
+}
+func (c *converterImpl) schemaNetworkProtectionToHcloudNetworkProtection(source schema.NetworkProtection) NetworkProtection {
+	var hcloudNetworkProtection NetworkProtection
+	hcloudNetworkProtection.Delete = source.Delete
+	return hcloudNetworkProtection
+}
+func (c *converterImpl) schemaPricingServerBackupToHcloudServerBackupPricing(source schema.PricingServerBackup) ServerBackupPricing {
+	var hcloudServerBackupPricing ServerBackupPricing
+	hcloudServerBackupPricing.Percentage = source.Percentage
+	return hcloudServerBackupPricing
+}
+func (c *converterImpl) schemaPrimaryIPProtectionToHcloudPrimaryIPProtection(source schema.PrimaryIPProtection) PrimaryIPProtection {
+	var hcloudPrimaryIPProtection PrimaryIPProtection
+	hcloudPrimaryIPProtection.Delete = source.Delete
+	return hcloudPrimaryIPProtection
+}
+func (c *converterImpl) schemaServerProtectionToHcloudServerProtection(source schema.ServerProtection) ServerProtection {
+	var hcloudServerProtection ServerProtection
+	hcloudServerProtection.Delete = source.Delete
+	hcloudServerProtection.Rebuild = source.Rebuild
+	return hcloudServerProtection
+}
+func (c *converterImpl) schemaVolumeProtectionToHcloudVolumeProtection(source schema.VolumeProtection) VolumeProtection {
+	var hcloudVolumeProtection VolumeProtection
+	hcloudVolumeProtection.Delete = source.Delete
+	return hcloudVolumeProtection
+}
+func (c *converterImpl) serverTypePricingFromSchema(source schema.PricingServerTypePrice) ServerTypeLocationPricing {
+	var hcloudServerTypeLocationPricing ServerTypeLocationPricing
+	hcloudLocation := locationFromString(source.Location)
+	hcloudServerTypeLocationPricing.Location = &hcloudLocation
+	hcloudServerTypeLocationPricing.Hourly = c.PriceFromSchema(source.PriceHourly)
+	hcloudServerTypeLocationPricing.Monthly = c.PriceFromSchema(source.PriceMonthly)
+	return hcloudServerTypeLocationPricing
+}
+func (c *converterImpl) timeTimeToTimeTime(source time.Time) time.Time {
+	return source
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_server_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_server_client_iface.go
new file mode 100644
index 00000000000..82038a30cba
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_server_client_iface.go
@@ -0,0 +1,90 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IServerClient ...
+type IServerClient interface {
+	// GetByID retrieves a server by its ID. If the server does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*Server, *Response, error)
+	// GetByName retrieves a server by its name. If the server does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*Server, *Response, error)
+	// Get retrieves a server by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a server by its name. If the server does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*Server, *Response, error)
+	// List returns a list of servers for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts ServerListOpts) ([]*Server, *Response, error)
+	// All returns all servers.
+	All(ctx context.Context) ([]*Server, error)
+	// AllWithOpts returns all servers for the given options.
+	AllWithOpts(ctx context.Context, opts ServerListOpts) ([]*Server, error)
+	// Create creates a new server.
+	Create(ctx context.Context, opts ServerCreateOpts) (ServerCreateResult, *Response, error)
+	// Delete deletes a server.
+	//
+	// Deprecated: Use [ServerClient.DeleteWithResult] instead.
+	Delete(ctx context.Context, server *Server) (*Response, error)
+	// DeleteWithResult deletes a server and returns the parsed response containing the action.
+	DeleteWithResult(ctx context.Context, server *Server) (*ServerDeleteResult, *Response, error)
+	// Update updates a server.
+	Update(ctx context.Context, server *Server, opts ServerUpdateOpts) (*Server, *Response, error)
+	// Poweron starts a server.
+	Poweron(ctx context.Context, server *Server) (*Action, *Response, error)
+	// Reboot reboots a server.
+	Reboot(ctx context.Context, server *Server) (*Action, *Response, error)
+	// Reset resets a server.
+	Reset(ctx context.Context, server *Server) (*Action, *Response, error)
+	// Shutdown shuts down a server.
+	Shutdown(ctx context.Context, server *Server) (*Action, *Response, error)
+	// Poweroff stops a server.
+	Poweroff(ctx context.Context, server *Server) (*Action, *Response, error)
+	// ResetPassword resets a server's password.
+	ResetPassword(ctx context.Context, server *Server) (ServerResetPasswordResult, *Response, error)
+	// CreateImage creates an image from a server.
+	CreateImage(ctx context.Context, server *Server, opts *ServerCreateImageOpts) (ServerCreateImageResult, *Response, error)
+	// EnableRescue enables rescue mode for a server.
+	EnableRescue(ctx context.Context, server *Server, opts ServerEnableRescueOpts) (ServerEnableRescueResult, *Response, error)
+	// DisableRescue disables rescue mode for a server.
+	DisableRescue(ctx context.Context, server *Server) (*Action, *Response, error)
+	// Rebuild rebuilds a server.
+	//
+	// Deprecated: Use [ServerClient.RebuildWithResult] instead.
+	Rebuild(ctx context.Context, server *Server, opts ServerRebuildOpts) (*Action, *Response, error)
+	// RebuildWithResult rebuilds a server.
+	RebuildWithResult(ctx context.Context, server *Server, opts ServerRebuildOpts) (ServerRebuildResult, *Response, error)
+	// AttachISO attaches an ISO to a server.
+	AttachISO(ctx context.Context, server *Server, iso *ISO) (*Action, *Response, error)
+	// DetachISO detaches the currently attached ISO from a server.
+	DetachISO(ctx context.Context, server *Server) (*Action, *Response, error)
+	// EnableBackup enables backup for a server. Pass in an empty backup window to let the
+	// API pick a window for you. See the API documentation at docs.hetzner.cloud for a list
+	// of valid backup windows.
+	EnableBackup(ctx context.Context, server *Server, window string) (*Action, *Response, error)
+	// DisableBackup disables backup for a server.
+	DisableBackup(ctx context.Context, server *Server) (*Action, *Response, error)
+	// ChangeType changes a server's type.
+	ChangeType(ctx context.Context, server *Server, opts ServerChangeTypeOpts) (*Action, *Response, error)
+	// ChangeDNSPtr changes or resets the reverse DNS pointer for a server IP address.
+	// Pass a nil ptr to reset the reverse DNS pointer to its default value.
+	ChangeDNSPtr(ctx context.Context, server *Server, ip string, ptr *string) (*Action, *Response, error)
+	// ChangeProtection changes the resource protection level of a server.
+	ChangeProtection(ctx context.Context, server *Server, opts ServerChangeProtectionOpts) (*Action, *Response, error)
+	// RequestConsole requests a WebSocket VNC console.
+	RequestConsole(ctx context.Context, server *Server) (ServerRequestConsoleResult, *Response, error)
+	// AttachToNetwork attaches a server to a network.
+	AttachToNetwork(ctx context.Context, server *Server, opts ServerAttachToNetworkOpts) (*Action, *Response, error)
+	// DetachFromNetwork detaches a server from a network.
+	DetachFromNetwork(ctx context.Context, server *Server, opts ServerDetachFromNetworkOpts) (*Action, *Response, error)
+	// ChangeAliasIPs changes a server's alias IPs in a network.
+	ChangeAliasIPs(ctx context.Context, server *Server, opts ServerChangeAliasIPsOpts) (*Action, *Response, error)
+	// GetMetrics obtains metrics for Server.
+	GetMetrics(ctx context.Context, server *Server, opts ServerGetMetricsOpts) (*ServerMetrics, *Response, error)
+	AddToPlacementGroup(ctx context.Context, server *Server, placementGroup *PlacementGroup) (*Action, *Response, error)
+	RemoveFromPlacementGroup(ctx context.Context, server *Server) (*Action, *Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_server_type_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_server_type_client_iface.go
new file mode 100644
index 00000000000..57c57afa060
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_server_type_client_iface.go
@@ -0,0 +1,27 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IServerTypeClient ...
+type IServerTypeClient interface {
+	// GetByID retrieves a server type by its ID. If the server type does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*ServerType, *Response, error)
+	// GetByName retrieves a server type by its name. If the server type does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*ServerType, *Response, error)
+	// Get retrieves a server type by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a server type by its name. If the server type does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*ServerType, *Response, error)
+	// List returns a list of server types for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts ServerTypeListOpts) ([]*ServerType, *Response, error)
+	// All returns all server types.
+	All(ctx context.Context) ([]*ServerType, error)
+	// AllWithOpts returns all server types for the given options.
+	AllWithOpts(ctx context.Context, opts ServerTypeListOpts) ([]*ServerType, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_ssh_key_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_ssh_key_client_iface.go
new file mode 100644
index 00000000000..d2c6988d9c3
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_ssh_key_client_iface.go
@@ -0,0 +1,35 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// ISSHKeyClient ...
+type ISSHKeyClient interface {
+	// GetByID retrieves a SSH key by its ID. If the SSH key does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*SSHKey, *Response, error)
+	// GetByName retrieves a SSH key by its name. If the SSH key does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*SSHKey, *Response, error)
+	// GetByFingerprint retreives a SSH key by its fingerprint. If the SSH key does not exist, nil is returned.
+	GetByFingerprint(ctx context.Context, fingerprint string) (*SSHKey, *Response, error)
+	// Get retrieves a SSH key by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a SSH key by its name. If the SSH key does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*SSHKey, *Response, error)
+	// List returns a list of SSH keys for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts SSHKeyListOpts) ([]*SSHKey, *Response, error)
+	// All returns all SSH keys.
+	All(ctx context.Context) ([]*SSHKey, error)
+	// AllWithOpts returns all SSH keys with the given options.
+	AllWithOpts(ctx context.Context, opts SSHKeyListOpts) ([]*SSHKey, error)
+	// Create creates a new SSH key with the given options.
+	Create(ctx context.Context, opts SSHKeyCreateOpts) (*SSHKey, *Response, error)
+	// Delete deletes a SSH key.
+	Delete(ctx context.Context, sshKey *SSHKey) (*Response, error)
+	// Update updates a SSH key.
+	Update(ctx context.Context, sshKey *SSHKey, opts SSHKeyUpdateOpts) (*SSHKey, *Response, error)
+}
diff --git a/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_volume_client_iface.go b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_volume_client_iface.go
new file mode 100644
index 00000000000..28edb7a270e
--- /dev/null
+++ b/vendor/github.com/hetznercloud/hcloud-go/v2/hcloud/zz_volume_client_iface.go
@@ -0,0 +1,43 @@
+// Code generated by ifacemaker; DO NOT EDIT.
+
+package hcloud
+
+import (
+	"context"
+)
+
+// IVolumeClient ...
+type IVolumeClient interface {
+	// GetByID retrieves a volume by its ID. If the volume does not exist, nil is returned.
+	GetByID(ctx context.Context, id int64) (*Volume, *Response, error)
+	// GetByName retrieves a volume by its name. If the volume does not exist, nil is returned.
+	GetByName(ctx context.Context, name string) (*Volume, *Response, error)
+	// Get retrieves a volume by its ID if the input can be parsed as an integer, otherwise it
+	// retrieves a volume by its name. If the volume does not exist, nil is returned.
+	Get(ctx context.Context, idOrName string) (*Volume, *Response, error)
+	// List returns a list of volumes for a specific page.
+	//
+	// Please note that filters specified in opts are not taken into account
+	// when their value corresponds to their zero value or when they are empty.
+	List(ctx context.Context, opts VolumeListOpts) ([]*Volume, *Response, error)
+	// All returns all volumes.
+	All(ctx context.Context) ([]*Volume, error)
+	// AllWithOpts returns all volumes with the given options.
+	AllWithOpts(ctx context.Context, opts VolumeListOpts) ([]*Volume, error)
+	// Create creates a new volume with the given options.
+	Create(ctx context.Context, opts VolumeCreateOpts) (VolumeCreateResult, *Response, error)
+	// Delete deletes a volume.
+	Delete(ctx context.Context, volume *Volume) (*Response, error)
+	// Update updates a volume.
+	Update(ctx context.Context, volume *Volume, opts VolumeUpdateOpts) (*Volume, *Response, error)
+	// AttachWithOpts attaches a volume to a server.
+	AttachWithOpts(ctx context.Context, volume *Volume, opts VolumeAttachOpts) (*Action, *Response, error)
+	// Attach attaches a volume to a server.
+	Attach(ctx context.Context, volume *Volume, server *Server) (*Action, *Response, error)
+	// Detach detaches a volume from a server.
+	Detach(ctx context.Context, volume *Volume) (*Action, *Response, error)
+	// ChangeProtection changes the resource protection level of a volume.
+	ChangeProtection(ctx context.Context, volume *Volume, opts VolumeChangeProtectionOpts) (*Action, *Response, error)
+	// Resize changes the size of a volume.
+	Resize(ctx context.Context, volume *Volume, size int) (*Action, *Response, error)
+}
diff --git a/vendor/github.com/ionos-cloud/sdk-go/v6/client.go b/vendor/github.com/ionos-cloud/sdk-go/v6/client.go
index 4cc47e26804..fe8471d96fb 100644
--- a/vendor/github.com/ionos-cloud/sdk-go/v6/client.go
+++ b/vendor/github.com/ionos-cloud/sdk-go/v6/client.go
@@ -52,7 +52,7 @@ const (
 	RequestStatusFailed  = "FAILED"
 	RequestStatusDone    = "DONE"
 
-	Version = "6.1.10"
+	Version = "6.1.11"
 )
 
 // Constants for APIs
diff --git a/vendor/github.com/ionos-cloud/sdk-go/v6/configuration.go b/vendor/github.com/ionos-cloud/sdk-go/v6/configuration.go
index 260cecacbd8..cb0488ae058 100644
--- a/vendor/github.com/ionos-cloud/sdk-go/v6/configuration.go
+++ b/vendor/github.com/ionos-cloud/sdk-go/v6/configuration.go
@@ -131,7 +131,7 @@ func NewConfiguration(username, password, token, hostUrl string) *Configuration
 	cfg := &Configuration{
 		DefaultHeader:      make(map[string]string),
 		DefaultQueryParams: url.Values{},
-		UserAgent:          "ionos-cloud-sdk-go/v6.1.10",
+		UserAgent:          "ionos-cloud-sdk-go/v6.1.11",
 		Debug:              false,
 		Username:           username,
 		Password:           password,
diff --git a/vendor/github.com/ionos-cloud/sdk-go/v6/model_datacenter_properties.go b/vendor/github.com/ionos-cloud/sdk-go/v6/model_datacenter_properties.go
index 67f0763fec3..454fd49622d 100644
--- a/vendor/github.com/ionos-cloud/sdk-go/v6/model_datacenter_properties.go
+++ b/vendor/github.com/ionos-cloud/sdk-go/v6/model_datacenter_properties.go
@@ -22,7 +22,7 @@ type DatacenterProperties struct {
 	Description *string `json:"description,omitempty"`
 	// List of features supported by the location where this data center is provisioned.
 	Features *[]string `json:"features,omitempty"`
-	// [The IPv6 feature is in beta phase and not ready for production usage.] This value is either 'null' or contains an automatically-assigned /56 IPv6 CIDR block if IPv6 is enabled on this virtual data center. It can neither be changed nor removed.
+	// This value is either 'null' or contains an automatically-assigned /56 IPv6 CIDR block if IPv6 is enabled on this virtual data center. It can neither be changed nor removed.
 	// to set this field to `nil` in order to be marshalled, the explicit nil address `Nilstring` can be used, or the setter `SetIpv6CidrBlockNil`
 	Ipv6CidrBlock *string `json:"ipv6CidrBlock,omitempty"`
 	// The physical location where the datacenter will be created. This will be where all of your servers live. Property cannot be modified after datacenter creation (disallowed in update requests).
diff --git a/vendor/github.com/ionos-cloud/sdk-go/v6/model_kubernetes_cluster_properties.go b/vendor/github.com/ionos-cloud/sdk-go/v6/model_kubernetes_cluster_properties.go
index 66956d3f7bd..ed0629c7fd4 100644
--- a/vendor/github.com/ionos-cloud/sdk-go/v6/model_kubernetes_cluster_properties.go
+++ b/vendor/github.com/ionos-cloud/sdk-go/v6/model_kubernetes_cluster_properties.go
@@ -21,10 +21,18 @@ type KubernetesClusterProperties struct {
 	// List of available versions for upgrading the cluster
 	AvailableUpgradeVersions *[]string `json:"availableUpgradeVersions,omitempty"`
 	// The Kubernetes version the cluster is running. This imposes restrictions on what Kubernetes versions can be run in a cluster's nodepools. Additionally, not all Kubernetes versions are viable upgrade targets for all prior versions.
-	K8sVersion        *string                      `json:"k8sVersion,omitempty"`
+	K8sVersion *string `json:"k8sVersion,omitempty"`
+	// The location of the cluster if the cluster is private. This property is immutable. The location must be enabled for your contract or you must have a Datacenter within that location. This attribute is mandatory if the cluster is private.
+	Location          *string                      `json:"location,omitempty"`
 	MaintenanceWindow *KubernetesMaintenanceWindow `json:"maintenanceWindow,omitempty"`
 	// A Kubernetes cluster name. Valid Kubernetes cluster name must be 63 characters or less and must be empty or begin and end with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_), dots (.), and alphanumerics between.
 	Name *string `json:"name"`
+	// The nat gateway IP of the cluster if the cluster is private. This property is immutable. Must be a reserved IP in the same location as the cluster's location. This attribute is mandatory if the cluster is private.
+	NatGatewayIp *string `json:"natGatewayIp,omitempty"`
+	// The node subnet of the cluster, if the cluster is private. This property is optional and immutable. Must be a valid CIDR notation for an IPv4 network prefix of 16 bits length.
+	NodeSubnet *string `json:"nodeSubnet,omitempty"`
+	// The indicator if the cluster is public or private. Be aware that setting it to false is currently in beta phase.
+	Public *bool `json:"public,omitempty"`
 	// List of S3 bucket configured for K8s usage. For now it contains only an S3 bucket used to store K8s API audit logs
 	S3Buckets *[]S3Bucket `json:"s3Buckets,omitempty"`
 	// List of versions that may be used for node pools under this cluster
@@ -39,6 +47,8 @@ func NewKubernetesClusterProperties(name string) *KubernetesClusterProperties {
 	this := KubernetesClusterProperties{}
 
 	this.Name = &name
+	var public bool = true
+	this.Public = &public
 
 	return &this
 }
@@ -48,6 +58,8 @@ func NewKubernetesClusterProperties(name string) *KubernetesClusterProperties {
 // but it doesn't guarantee that properties required by API are set
 func NewKubernetesClusterPropertiesWithDefaults() *KubernetesClusterProperties {
 	this := KubernetesClusterProperties{}
+	var public bool = true
+	this.Public = &public
 	return &this
 }
 
@@ -165,6 +177,44 @@ func (o *KubernetesClusterProperties) HasK8sVersion() bool {
 	return false
 }
 
+// GetLocation returns the Location field value
+// If the value is explicit nil, nil is returned
+func (o *KubernetesClusterProperties) GetLocation() *string {
+	if o == nil {
+		return nil
+	}
+
+	return o.Location
+
+}
+
+// GetLocationOk returns a tuple with the Location field value
+// and a boolean to check if the value has been set.
+// NOTE: If the value is an explicit nil, `nil, true` will be returned
+func (o *KubernetesClusterProperties) GetLocationOk() (*string, bool) {
+	if o == nil {
+		return nil, false
+	}
+
+	return o.Location, true
+}
+
+// SetLocation sets field value
+func (o *KubernetesClusterProperties) SetLocation(v string) {
+
+	o.Location = &v
+
+}
+
+// HasLocation returns a boolean if a field has been set.
+func (o *KubernetesClusterProperties) HasLocation() bool {
+	if o != nil && o.Location != nil {
+		return true
+	}
+
+	return false
+}
+
 // GetMaintenanceWindow returns the MaintenanceWindow field value
 // If the value is explicit nil, nil is returned
 func (o *KubernetesClusterProperties) GetMaintenanceWindow() *KubernetesMaintenanceWindow {
@@ -241,6 +291,120 @@ func (o *KubernetesClusterProperties) HasName() bool {
 	return false
 }
 
+// GetNatGatewayIp returns the NatGatewayIp field value
+// If the value is explicit nil, nil is returned
+func (o *KubernetesClusterProperties) GetNatGatewayIp() *string {
+	if o == nil {
+		return nil
+	}
+
+	return o.NatGatewayIp
+
+}
+
+// GetNatGatewayIpOk returns a tuple with the NatGatewayIp field value
+// and a boolean to check if the value has been set.
+// NOTE: If the value is an explicit nil, `nil, true` will be returned
+func (o *KubernetesClusterProperties) GetNatGatewayIpOk() (*string, bool) {
+	if o == nil {
+		return nil, false
+	}
+
+	return o.NatGatewayIp, true
+}
+
+// SetNatGatewayIp sets field value
+func (o *KubernetesClusterProperties) SetNatGatewayIp(v string) {
+
+	o.NatGatewayIp = &v
+
+}
+
+// HasNatGatewayIp returns a boolean if a field has been set.
+func (o *KubernetesClusterProperties) HasNatGatewayIp() bool {
+	if o != nil && o.NatGatewayIp != nil {
+		return true
+	}
+
+	return false
+}
+
+// GetNodeSubnet returns the NodeSubnet field value
+// If the value is explicit nil, nil is returned
+func (o *KubernetesClusterProperties) GetNodeSubnet() *string {
+	if o == nil {
+		return nil
+	}
+
+	return o.NodeSubnet
+
+}
+
+// GetNodeSubnetOk returns a tuple with the NodeSubnet field value
+// and a boolean to check if the value has been set.
+// NOTE: If the value is an explicit nil, `nil, true` will be returned
+func (o *KubernetesClusterProperties) GetNodeSubnetOk() (*string, bool) {
+	if o == nil {
+		return nil, false
+	}
+
+	return o.NodeSubnet, true
+}
+
+// SetNodeSubnet sets field value
+func (o *KubernetesClusterProperties) SetNodeSubnet(v string) {
+
+	o.NodeSubnet = &v
+
+}
+
+// HasNodeSubnet returns a boolean if a field has been set.
+func (o *KubernetesClusterProperties) HasNodeSubnet() bool {
+	if o != nil && o.NodeSubnet != nil {
+		return true
+	}
+
+	return false
+}
+
+// GetPublic returns the Public field value
+// If the value is explicit nil, nil is returned
+func (o *KubernetesClusterProperties) GetPublic() *bool {
+	if o == nil {
+		return nil
+	}
+
+	return o.Public
+
+}
+
+// GetPublicOk returns a tuple with the Public field value
+// and a boolean to check if the value has been set.
+// NOTE: If the value is an explicit nil, `nil, true` will be returned
+func (o *KubernetesClusterProperties) GetPublicOk() (*bool, bool) {
+	if o == nil {
+		return nil, false
+	}
+
+	return o.Public, true
+}
+
+// SetPublic sets field value
+func (o *KubernetesClusterProperties) SetPublic(v bool) {
+
+	o.Public = &v
+
+}
+
+// HasPublic returns a boolean if a field has been set.
+func (o *KubernetesClusterProperties) HasPublic() bool {
+	if o != nil && o.Public != nil {
+		return true
+	}
+
+	return false
+}
+
 // GetS3Buckets returns the S3Buckets field value
 // If the value is explicit nil, nil is returned
 func (o *KubernetesClusterProperties) GetS3Buckets() *[]S3Bucket {
@@ -331,6 +495,10 @@ func (o KubernetesClusterProperties) MarshalJSON() ([]byte, error) {
 		toSerialize["k8sVersion"] = o.K8sVersion
 	}
 
+	if o.Location != nil {
+		toSerialize["location"] = o.Location
+	}
+
 	if o.MaintenanceWindow != nil {
 		toSerialize["maintenanceWindow"] = o.MaintenanceWindow
 	}
@@ -339,6 +507,18 @@ func (o KubernetesClusterProperties) MarshalJSON() ([]byte, error) {
 		toSerialize["name"] = o.Name
 	}
 
+	if o.NatGatewayIp != nil {
+		toSerialize["natGatewayIp"] = o.NatGatewayIp
+	}
+
+	if o.NodeSubnet != nil {
+		toSerialize["nodeSubnet"] = o.NodeSubnet
+	}
+
+	if o.Public != nil {
+		toSerialize["public"] = o.Public
+	}
+
 	if o.S3Buckets != nil {
 		toSerialize["s3Buckets"] = o.S3Buckets
 	}
diff --git a/vendor/github.com/ionos-cloud/sdk-go/v6/model_kubernetes_cluster_properties_for_post.go b/vendor/github.com/ionos-cloud/sdk-go/v6/model_kubernetes_cluster_properties_for_post.go
index 9215373b9ce..14c2b97b955 100644
--- a/vendor/github.com/ionos-cloud/sdk-go/v6/model_kubernetes_cluster_properties_for_post.go
+++ b/vendor/github.com/ionos-cloud/sdk-go/v6/model_kubernetes_cluster_properties_for_post.go
@@ -19,10 +19,18 @@ type KubernetesClusterPropertiesForPost struct {
 	// Access to the K8s API server is restricted to these CIDRs. Intra-cluster traffic is not affected by this restriction. If no AllowList is specified, access is not limited. If an IP is specified without a subnet mask, the default value is 32 for IPv4 and 128 for IPv6.
 	ApiSubnetAllowList *[]string `json:"apiSubnetAllowList,omitempty"`
 	// The Kubernetes version that the cluster is running. This limits which Kubernetes versions can run in a cluster's node pools. Also, not all Kubernetes versions are suitable upgrade targets for all earlier versions.
-	K8sVersion        *string                      `json:"k8sVersion,omitempty"`
+	K8sVersion *string `json:"k8sVersion,omitempty"`
+	// This attribute is mandatory if the cluster is private. The location must be enabled for your contract, or you must have a data center at that location. This property is not adjustable.
+	Location          *string                      `json:"location,omitempty"`
 	MaintenanceWindow *KubernetesMaintenanceWindow `json:"maintenanceWindow,omitempty"`
 	// A Kubernetes cluster name. Valid Kubernetes cluster name must be 63 characters or less and must be empty or begin and end with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_), dots (.), and alphanumerics between.
 	Name *string `json:"name"`
+	// The nat gateway IP of the cluster if the cluster is private. This property is immutable. Must be a reserved IP in the same location as the cluster's location. This attribute is mandatory if the cluster is private.
+	NatGatewayIp *string `json:"natGatewayIp,omitempty"`
+	// The node subnet of the cluster, if the cluster is private. This property is optional and immutable. Must be a valid CIDR notation for an IPv4 network prefix of 16 bits length.
+	NodeSubnet *string `json:"nodeSubnet,omitempty"`
+	// The indicator whether the cluster is public or private. Note that the status FALSE is still in the beta phase.
+	Public *bool `json:"public,omitempty"`
 	// List of S3 buckets configured for K8s usage. At the moment, it contains only one S3 bucket that is used to store K8s API audit logs.
 	S3Buckets *[]S3Bucket `json:"s3Buckets,omitempty"`
 }
@@ -35,6 +43,8 @@ func NewKubernetesClusterPropertiesForPost(name string) *KubernetesClusterProper
 	this := KubernetesClusterPropertiesForPost{}
 
 	this.Name = &name
+	var public bool = true
+	this.Public = &public
 
 	return &this
 }
@@ -44,6 +54,8 @@ func NewKubernetesClusterPropertiesForPost(name string) *KubernetesClusterProper
 // but it doesn't guarantee that properties required by API are set
 func NewKubernetesClusterPropertiesForPostWithDefaults() *KubernetesClusterPropertiesForPost {
 	this := KubernetesClusterPropertiesForPost{}
+	var public bool = true
+	this.Public = &public
 	return &this
 }
 
@@ -123,6 +135,44 @@ func (o *KubernetesClusterPropertiesForPost) HasK8sVersion() bool {
 	return false
 }
 
+// GetLocation returns the Location field value
+// If the value is explicit nil, nil is returned
+func (o *KubernetesClusterPropertiesForPost) GetLocation() *string {
+	if o == nil {
+		return nil
+	}
+
+	return o.Location
+
+}
+
+// GetLocationOk returns a tuple with the Location field value
+// and a boolean to check if the value has been set.
+// NOTE: If the value is an explicit nil, `nil, true` will be returned
+func (o *KubernetesClusterPropertiesForPost) GetLocationOk() (*string, bool) {
+	if o == nil {
+		return nil, false
+	}
+
+	return o.Location, true
+}
+
+// SetLocation sets field value
+func (o *KubernetesClusterPropertiesForPost) SetLocation(v string) {
+
+	o.Location = &v
+
+}
+
+// HasLocation returns a boolean if a field has been set.
+func (o *KubernetesClusterPropertiesForPost) HasLocation() bool {
+	if o != nil && o.Location != nil {
+		return true
+	}
+
+	return false
+}
+
 // GetMaintenanceWindow returns the MaintenanceWindow field value
 // If the value is explicit nil, nil is returned
 func (o *KubernetesClusterPropertiesForPost) GetMaintenanceWindow() *KubernetesMaintenanceWindow {
@@ -199,6 +249,120 @@ func (o *KubernetesClusterPropertiesForPost) HasName() bool {
 	return false
 }
 
+// GetNatGatewayIp returns the NatGatewayIp field value
+// If the value is explicit nil, nil is returned
+func (o *KubernetesClusterPropertiesForPost) GetNatGatewayIp() *string {
+	if o == nil {
+		return nil
+	}
+
+	return o.NatGatewayIp
+
+}
+
+// GetNatGatewayIpOk returns a tuple with the NatGatewayIp field value
+// and a boolean to check if the value has been set.
+// NOTE: If the value is an explicit nil, `nil, true` will be returned
+func (o *KubernetesClusterPropertiesForPost) GetNatGatewayIpOk() (*string, bool) {
+	if o == nil {
+		return nil, false
+	}
+
+	return o.NatGatewayIp, true
+}
+
+// SetNatGatewayIp sets field value
+func (o *KubernetesClusterPropertiesForPost) SetNatGatewayIp(v string) {
+
+	o.NatGatewayIp = &v
+
+}
+
+// HasNatGatewayIp returns a boolean if a field has been set.
+func (o *KubernetesClusterPropertiesForPost) HasNatGatewayIp() bool {
+	if o != nil && o.NatGatewayIp != nil {
+		return true
+	}
+
+	return false
+}
+
+// GetNodeSubnet returns the NodeSubnet field value
+// If the value is explicit nil, nil is returned
+func (o *KubernetesClusterPropertiesForPost) GetNodeSubnet() *string {
+	if o == nil {
+		return nil
+	}
+
+	return o.NodeSubnet
+
+}
+
+// GetNodeSubnetOk returns a tuple with the NodeSubnet field value
+// and a boolean to check if the value has been set.
+// NOTE: If the value is an explicit nil, `nil, true` will be returned
+func (o *KubernetesClusterPropertiesForPost) GetNodeSubnetOk() (*string, bool) {
+	if o == nil {
+		return nil, false
+	}
+
+	return o.NodeSubnet, true
+}
+
+// SetNodeSubnet sets field value
+func (o *KubernetesClusterPropertiesForPost) SetNodeSubnet(v string) {
+
+	o.NodeSubnet = &v
+
+}
+
+// HasNodeSubnet returns a boolean if a field has been set.
+func (o *KubernetesClusterPropertiesForPost) HasNodeSubnet() bool {
+	if o != nil && o.NodeSubnet != nil {
+		return true
+	}
+
+	return false
+}
+
+// GetPublic returns the Public field value
+// If the value is explicit nil, nil is returned
+func (o *KubernetesClusterPropertiesForPost) GetPublic() *bool {
+	if o == nil {
+		return nil
+	}
+
+	return o.Public
+
+}
+
+// GetPublicOk returns a tuple with the Public field value
+// and a boolean to check if the value has been set.
+// NOTE: If the value is an explicit nil, `nil, true` will be returned
+func (o *KubernetesClusterPropertiesForPost) GetPublicOk() (*bool, bool) {
+	if o == nil {
+		return nil, false
+	}
+
+	return o.Public, true
+}
+
+// SetPublic sets field value
+func (o *KubernetesClusterPropertiesForPost) SetPublic(v bool) {
+
+	o.Public = &v
+
+}
+
+// HasPublic returns a boolean if a field has been set.
+func (o *KubernetesClusterPropertiesForPost) HasPublic() bool {
+	if o != nil && o.Public != nil {
+		return true
+	}
+
+	return false
+}
+
 // GetS3Buckets returns the S3Buckets field value
 // If the value is explicit nil, nil is returned
 func (o *KubernetesClusterPropertiesForPost) GetS3Buckets() *[]S3Bucket {
@@ -247,6 +411,10 @@ func (o KubernetesClusterPropertiesForPost) MarshalJSON() ([]byte, error) {
 		toSerialize["k8sVersion"] = o.K8sVersion
 	}
 
+	if o.Location != nil {
+		toSerialize["location"] = o.Location
+	}
+
 	if o.MaintenanceWindow != nil {
 		toSerialize["maintenanceWindow"] = o.MaintenanceWindow
 	}
@@ -255,6 +423,18 @@ func (o KubernetesClusterPropertiesForPost) MarshalJSON() ([]byte, error) {
 		toSerialize["name"] = o.Name
 	}
 
+	if o.NatGatewayIp != nil {
+		toSerialize["natGatewayIp"] = o.NatGatewayIp
+	}
+
+	if o.NodeSubnet != nil {
+		toSerialize["nodeSubnet"] = o.NodeSubnet
+	}
+
+	if o.Public != nil {
+		toSerialize["public"] = o.Public
+	}
+
 	if o.S3Buckets != nil {
 		toSerialize["s3Buckets"] = o.S3Buckets
 	}
diff --git a/vendor/github.com/ionos-cloud/sdk-go/v6/model_lan_properties.go b/vendor/github.com/ionos-cloud/sdk-go/v6/model_lan_properties.go
index a50a0693854..141f0e1d198 100644
--- a/vendor/github.com/ionos-cloud/sdk-go/v6/model_lan_properties.go
+++ b/vendor/github.com/ionos-cloud/sdk-go/v6/model_lan_properties.go
@@ -18,7 +18,7 @@ import (
 type LanProperties struct {
 	// IP failover configurations for lan
 	IpFailover *[]IPFailover `json:"ipFailover,omitempty"`
-	// [The IPv6 feature is in beta phase and not ready for production usage.] For a GET request, this value is either 'null' or contains the LAN's /64 IPv6 CIDR block if this LAN is IPv6 enabled. For POST/PUT/PATCH requests, 'AUTO' will result in enabling this LAN for IPv6 and automatically assign a /64 IPv6 CIDR block to this LAN and /80 IPv6 CIDR blocks to the NICs and one /128 IPv6 address to each connected NIC. If you choose the IPv6 CIDR block for the LAN on your own, then you must provide a /64 block, which is inside the IPv6 CIDR block of the virtual datacenter and unique inside all LANs from this virtual datacenter. If you enable IPv6 on a LAN with NICs, those NICs will get a /80 IPv6 CIDR block and one IPv6 address assigned to each automatically, unless you specify them explicitly on the LAN and on the NICs. A virtual data center is limited to a maximum of 256 IPv6-enabled LANs.
+	// For a GET request, this value is either 'null' or contains the LAN's /64 IPv6 CIDR block if this LAN is IPv6 enabled. For POST/PUT/PATCH requests, 'AUTO' will result in enabling this LAN for IPv6 and automatically assign a /64 IPv6 CIDR block to this LAN and /80 IPv6 CIDR blocks to the NICs and one /128 IPv6 address to each connected NIC. If you choose the IPv6 CIDR block for the LAN on your own, then you must provide a /64 block, which is inside the IPv6 CIDR block of the virtual datacenter and unique inside all LANs from this virtual datacenter. If you enable IPv6 on a LAN with NICs, those NICs will get a /80 IPv6 CIDR block and one IPv6 address assigned to each automatically, unless you specify them explicitly on the LAN and on the NICs. A virtual data center is limited to a maximum of 256 IPv6-enabled LANs.
 	// to set this field to `nil` in order to be marshalled, the explicit nil address `Nilstring` can be used, or the setter `SetIpv6CidrBlockNil`
 	Ipv6CidrBlock *string `json:"ipv6CidrBlock,omitempty"`
 	// The name of the  resource.
diff --git a/vendor/github.com/ionos-cloud/sdk-go/v6/model_lan_properties_post.go b/vendor/github.com/ionos-cloud/sdk-go/v6/model_lan_properties_post.go
index 387effb4cd1..a7da1b9f728 100644
--- a/vendor/github.com/ionos-cloud/sdk-go/v6/model_lan_properties_post.go
+++ b/vendor/github.com/ionos-cloud/sdk-go/v6/model_lan_properties_post.go
@@ -18,7 +18,7 @@ import (
 type LanPropertiesPost struct {
 	// IP failover configurations for lan
 	IpFailover *[]IPFailover `json:"ipFailover,omitempty"`
-	// [The IPv6 feature is in beta phase and not ready for production usage.] For a GET request, this value is either 'null' or contains the LAN's /64 IPv6 CIDR block if this LAN is IPv6-enabled. For POST/PUT/PATCH requests, 'AUTO' will result in enabling this LAN for IPv6 and automatically assign a /64 IPv6 CIDR block to this LAN. If you choose the IPv6 CIDR block on your own, then you must provide a /64 block, which is inside the IPv6 CIDR block of the virtual datacenter and unique inside all LANs from this virtual datacenter. If you enable IPv6 on a LAN with NICs, those NICs will get a /80 IPv6 CIDR block and one IPv6 address assigned to each automatically, unless you specify them explicitly on the NICs. A virtual data center is limited to a maximum of 256 IPv6-enabled LANs.
+	// For a GET request, this value is either 'null' or contains the LAN's /64 IPv6 CIDR block if this LAN is IPv6-enabled. For POST/PUT/PATCH requests, 'AUTO' will result in enabling this LAN for IPv6 and automatically assign a /64 IPv6 CIDR block to this LAN. If you choose the IPv6 CIDR block on your own, then you must provide a /64 block, which is inside the IPv6 CIDR block of the virtual datacenter and unique inside all LANs from this virtual datacenter. If you enable IPv6 on a LAN with NICs, those NICs will get a /80 IPv6 CIDR block and one IPv6 address assigned to each automatically, unless you specify them explicitly on the NICs. A virtual data center is limited to a maximum of 256 IPv6-enabled LANs.
 	// to set this field to `nil` in order to be marshalled, the explicit nil address `Nilstring` can be used, or the setter `SetIpv6CidrBlockNil`
 	Ipv6CidrBlock *string `json:"ipv6CidrBlock,omitempty"`
 	// The name of the  resource.
diff --git a/vendor/github.com/ionos-cloud/sdk-go/v6/model_nic_properties.go b/vendor/github.com/ionos-cloud/sdk-go/v6/model_nic_properties.go
index cda1f50b01d..c24c1a4ca95 100644
--- a/vendor/github.com/ionos-cloud/sdk-go/v6/model_nic_properties.go
+++ b/vendor/github.com/ionos-cloud/sdk-go/v6/model_nic_properties.go
@@ -20,7 +20,7 @@ type NicProperties struct {
 	DeviceNumber *int32 `json:"deviceNumber,omitempty"`
 	// Indicates if the NIC will reserve an IP using DHCP.
 	Dhcp *bool `json:"dhcp,omitempty"`
-	// [The IPv6 feature is in beta phase and not ready for production usage.] Indicates if the NIC will receive an IPv6 using DHCP. It can be set to 'true' or 'false' only if this NIC is connected to an IPv6 enabled LAN.
+	// Indicates if the NIC will receive an IPv6 using DHCP. It can be set to 'true' or 'false' only if this NIC is connected to an IPv6 enabled LAN.
 	// to set this field to `nil` in order to be marshalled, the explicit nil address `Nilbool` can be used, or the setter `SetDhcpv6Nil`
 	Dhcpv6 *bool `json:"dhcpv6,omitempty"`
 	// Activate or deactivate the firewall. By default, an active firewall without any defined rules will block all incoming network traffic except for the firewall rules that explicitly allows certain protocols, IP addresses and ports.
@@ -30,10 +30,10 @@ type NicProperties struct {
 	// Collection of IP addresses, assigned to the NIC. Explicitly assigned public IPs need to come from reserved IP blocks. Passing value null or empty array will assign an IP address automatically.
 	// to set this field to `nil` in order to be marshalled, the explicit nil address `Nil[]string` can be used, or the setter `SetIpsNil`
 	Ips *[]string `json:"ips,omitempty"`
-	// [The IPv6 feature is in beta phase and not ready for production usage.] If this NIC is connected to an IPv6 enabled LAN then this property contains the /80 IPv6 CIDR block of the NIC. If you leave this property 'null' when adding a NIC to an IPv6-enabled LAN, then an IPv6 CIDR block will automatically be assigned to the NIC, but you can also specify an /80 IPv6 CIDR block for the NIC on your own, which must be inside the /64 IPv6 CIDR block of the LAN and unique. This value can only be set, if the LAN already has an IPv6 CIDR block assigned. An IPv6-enabled LAN is limited to a maximum of 65,536 NICs.
+	// If this NIC is connected to an IPv6 enabled LAN then this property contains the /80 IPv6 CIDR block of the NIC. If you leave this property 'null' when adding a NIC to an IPv6-enabled LAN, then an IPv6 CIDR block will automatically be assigned to the NIC, but you can also specify an /80 IPv6 CIDR block for the NIC on your own, which must be inside the /64 IPv6 CIDR block of the LAN and unique. This value can only be set, if the LAN already has an IPv6 CIDR block assigned. An IPv6-enabled LAN is limited to a maximum of 65,536 NICs.
 	// to set this field to `nil` in order to be marshalled, the explicit nil address `Nilstring` can be used, or the setter `SetIpv6CidrBlockNil`
 	Ipv6CidrBlock *string `json:"ipv6CidrBlock,omitempty"`
-	// [The IPv6 feature is in beta phase and not ready for production usage.] If this NIC is connected to an IPv6 enabled LAN then this property contains the IPv6 IP addresses of the NIC. The maximum number of IPv6 IP addresses per NIC is 50, if you need more, contact support. If you leave this property 'null' when adding a NIC, when changing the NIC's IPv6 CIDR block, when changing the LAN's IPv6 CIDR block or when moving the NIC to a different IPv6 enabled LAN, then we will automatically assign the same number of IPv6 addresses which you had before from the NICs new CIDR block. If you leave this property 'null' while not changing the CIDR block, the IPv6 IP addresses won't be changed either. You can also provide your own self choosen IPv6 addresses, which then must be inside the IPv6 CIDR block of this NIC.
+	// If this NIC is connected to an IPv6 enabled LAN then this property contains the IPv6 IP addresses of the NIC. The maximum number of IPv6 IP addresses per NIC is 50, if you need more, contact support. If you leave this property 'null' when adding a NIC, when changing the NIC's IPv6 CIDR block, when changing the LAN's IPv6 CIDR block or when moving the NIC to a different IPv6 enabled LAN, then we will automatically assign the same number of IPv6 addresses which you had before from the NICs new CIDR block. If you leave this property 'null' while not changing the CIDR block, the IPv6 IP addresses won't be changed either. You can also provide your own self choosen IPv6 addresses, which then must be inside the IPv6 CIDR block of this NIC.
 	// to set this field to `nil` in order to be marshalled, the explicit nil address `Nil[]string` can be used, or the setter `SetIpv6IpsNil`
 	Ipv6Ips *[]string `json:"ipv6Ips,omitempty"`
 	// The LAN ID the NIC will be on. If the LAN ID does not exist, it will be implicitly created.
diff --git a/vendor/github.com/linode/linodego/.gitmodules b/vendor/github.com/linode/linodego/.gitmodules
new file mode 100644
index 00000000000..df7dc11d758
--- /dev/null
+++ b/vendor/github.com/linode/linodego/.gitmodules
@@ -0,0 +1,3 @@
+[submodule "tod_scripts"]
+	path = tod_scripts
+	url = https://github.com/linode/TOD-test-report-uploader.git
diff --git a/vendor/github.com/linode/linodego/account_availability.go b/vendor/github.com/linode/linodego/account_availability.go
new file mode 100644
index 00000000000..9a846415c98
--- /dev/null
+++ b/vendor/github.com/linode/linodego/account_availability.go
@@ -0,0 +1,62 @@
+package linodego
+
+import (
+	"context"
+	"fmt"
+	"net/url"
+
+	"github.com/go-resty/resty/v2"
+)
+
+// AccountAvailability returns the resources information in a region which are NOT available to an account.
+type AccountAvailability struct {
+	// region id
+	Region string `json:"region"`
+
+	// the unavailable resources in a region to the customer
+	Unavailable []string `json:"unavailable"`
+}
+
+// AccountAvailabilityPagedResponse represents a paginated Account Availability API response
+type AccountAvailabilityPagedResponse struct {
+	*PageOptions
+	Data []AccountAvailability `json:"data"`
+}
+
+// endpoint gets the endpoint URL for AccountAvailability
+func (AccountAvailabilityPagedResponse) endpoint(_ ...any) string {
+	return "/account/availability"
+}
+
+func (resp *AccountAvailabilityPagedResponse) castResult(r *resty.Request, e string) (int, int, error) {
+	res, err := coupleAPIErrors(r.SetResult(AccountAvailabilityPagedResponse{}).Get(e))
+	if err != nil {
+		return 0, 0, err
+	}
+	castedRes := res.Result().(*AccountAvailabilityPagedResponse)
+	resp.Data = append(resp.Data, castedRes.Data...)
+	return castedRes.Pages, castedRes.Results, nil
+}
+
+// ListAccountAvailabilities lists all available regions and the resources which are NOT available to the account.
+func (c *Client) ListAccountAvailabilities(ctx context.Context, opts *ListOptions) ([]AccountAvailability, error) {
+	response := AccountAvailabilityPagedResponse{}
+	err := c.listHelper(ctx, &response, opts)
+	if err != nil {
+		return nil, err
+	}
+	return response.Data, nil
+}
+
+// GetAccountAvailability gets the unavailable resources in a region to the customer.
+func (c *Client) GetAccountAvailability(ctx context.Context, regionID string) (*AccountAvailability, error) {
+	req := c.R(ctx).SetResult(&AccountAvailability{})
+	regionID = url.PathEscape(regionID)
+	b := fmt.Sprintf("account/availability/%s", regionID)
+	r, err := coupleAPIErrors(req.Get(b))
+	if err != nil {
+		return nil, err
+	}
+
+	return r.Result().(*AccountAvailability), nil
+}
diff --git a/vendor/github.com/linode/linodego/errors.go b/vendor/github.com/linode/linodego/errors.go
index a872eefe44a..fc3eb654729 100644
--- a/vendor/github.com/linode/linodego/errors.go
+++ b/vendor/github.com/linode/linodego/errors.go
@@ -1,6 +1,7 @@
 package linodego
 
 import (
+	"errors"
 	"fmt"
 	"net/http"
 	"reflect"
@@ -97,8 +98,20 @@ func (e APIError) Error() string {
 	return strings.Join(x, "; ")
 }
 
-func (g Error) Error() string {
-	return fmt.Sprintf("[%03d] %s", g.Code, g.Message)
+func (err Error) Error() string {
+	return fmt.Sprintf("[%03d] %s", err.Code, err.Message)
+}
+
+func (err Error) StatusCode() int {
+	return err.Code
+}
+
+func (err Error) Is(target error) bool {
+	if x, ok := target.(interface{ StatusCode() int }); ok || errors.As(target, &x) {
+		return err.StatusCode() == x.StatusCode()
+	}
+
+	return false
 }
 
 // NewError creates a linodego.Error with a Code identifying the source err type,
diff --git a/vendor/github.com/linode/linodego/go.work.sum b/vendor/github.com/linode/linodego/go.work.sum
index f815c8ed9e1..2a469314f06 100644
--- a/vendor/github.com/linode/linodego/go.work.sum
+++ b/vendor/github.com/linode/linodego/go.work.sum
@@ -167,6 +167,9 @@ golang.org/x/crypto v0.12.0 h1:tFM/ta59kqch6LlvYnPa0yx5a83cL2nHflFhYKvv9Yk=
 golang.org/x/crypto v0.12.0/go.mod h1:NF0Gs7EO5K4qLn+Ylc+fih8BSTeIjAP05siRnAh98yw=
 golang.org/x/crypto v0.13.0 h1:mvySKfSWJ+UKUii46M40LOvyWfN0s2U+46/jDd0e6Ck=
 golang.org/x/crypto v0.14.0 h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=
+golang.org/x/crypto v0.15.0/go.mod h1:4ChreQoLWfG3xLDer1WdlH5NdlQ3+mwnQq1YTKY+72g=
+golang.org/x/crypto v0.16.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
+golang.org/x/crypto v0.18.0/go.mod h1:R0j02AL6hcrfOiy9T4ZYp/rcWeMxM3L6QYxlOuEG1mg=
 golang.org/x/exp v0.0.0-20200224162631-6cc2880d07d6 h1:QE6XYQK6naiK1EPAe1g/ILLxN5RBoH5xkJk3CqlMI/Y=
 golang.org/x/image v0.0.0-20190802002840-cff245a6509b h1:+qEpEAPhDZ1o0x3tHzZTQDArnOixOzGD9HUJfcg0mb4=
 golang.org/x/lint v0.0.0-20201208152925-83fdc39ff7b5 h1:2M3HP5CCK1Si9FQhwnzYhXdG6DXeebvUHFpre8QvbyI=
@@ -189,6 +192,8 @@ golang.org/x/sys v0.0.0-20170830134202-bb24a47a89ea/go.mod h1:STP8DvDyc/dI5b8T5h
 golang.org/x/sys v0.0.0-20190209173611-3b5209105503/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20191022100944-742c48ecaeb7/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.7.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.16.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/term v0.16.0/go.mod h1:yn7UURbUtPyrVJPGPq404EukNFxcm/foM+bV/bfcDsY=
 golang.org/x/tools v0.8.0/go.mod h1:JxBZ99ISMI5ViVkT1tr6tdNmXeTrcpVSD3vZ1RsRdN4=
 golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 h1:H2TDz8ibqkAF6YGhCdN3jS9O0/s90v0rJh3X/OLHEUk=
 golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2/go.mod h1:K8+ghG5WaK9qNqU5K3HdILfMLy1f3aNYFI/wnl100a8=
diff --git a/vendor/github.com/linode/linodego/instance_firewalls.go b/vendor/github.com/linode/linodego/instance_firewalls.go
new file mode 100644
index 00000000000..ffca799e18f
--- /dev/null
+++ b/vendor/github.com/linode/linodego/instance_firewalls.go
@@ -0,0 +1,41 @@
+package linodego
+
+import (
+	"context"
+	"fmt"
+
+	"github.com/go-resty/resty/v2"
+)
+
+// InstanceFirewallsPagedResponse represents a Linode API response for listing of Cloud Firewalls
+type InstanceFirewallsPagedResponse struct {
+	*PageOptions
+	Data []Firewall `json:"data"`
+}
+
+func (InstanceFirewallsPagedResponse) endpoint(ids ...any) string {
+	id := ids[0].(int)
+	return fmt.Sprintf("linode/instances/%d/firewalls", id)
+}
+
+func (resp *InstanceFirewallsPagedResponse) castResult(r *resty.Request, e string) (int, int, error) {
+	res, err := coupleAPIErrors(r.SetResult(InstanceFirewallsPagedResponse{}).Get(e))
+	if err != nil {
+		return 0, 0, err
+	}
+	castedRes := res.Result().(*InstanceFirewallsPagedResponse)
+	resp.Data = append(resp.Data, castedRes.Data...)
+	return castedRes.Pages, castedRes.Results, nil
+}
+
+// ListInstanceFirewalls returns a paginated list of Cloud Firewalls for linodeID
+func (c *Client) ListInstanceFirewalls(ctx context.Context, linodeID int, opts *ListOptions) ([]Firewall, error) {
+	response := InstanceFirewallsPagedResponse{}
+
+	err := c.listHelper(ctx, &response, opts, linodeID)
+	if err != nil {
+		return nil, err
+	}
+
+	return response.Data, nil
+}
diff --git a/vendor/github.com/linode/linodego/instances.go b/vendor/github.com/linode/linodego/instances.go
index d5a51423246..f565973053f 100644
--- a/vendor/github.com/linode/linodego/instances.go
+++ b/vendor/github.com/linode/linodego/instances.go
@@ -35,6 +35,13 @@ const (
 	InstanceResizing     InstanceStatus = "resizing"
 )
 
+type InstanceMigrationType string
+
+const (
+	WarmMigration InstanceMigrationType = "warm"
+	ColdMigration InstanceMigrationType = "cold"
+)
+
 // Instance represents a linode object
 type Instance struct {
 	ID              int             `json:"id"`
@@ -192,12 +199,19 @@ type InstanceCloneOptions struct {
 
 // InstanceResizeOptions is an options struct used when resizing an instance
 type InstanceResizeOptions struct {
-	Type string `json:"type"`
+	Type          string                `json:"type"`
+	MigrationType InstanceMigrationType `json:"migration_type,omitempty"`
 
 	// When enabled, an instance resize will also resize a data disk if the instance has no more than one data disk and one swap disk
 	AllowAutoDiskResize *bool `json:"allow_auto_disk_resize,omitempty"`
 }
 
+// InstanceResizeOptions is an options struct used when resizing an instance
+type InstanceMigrateOptions struct {
+	Type   InstanceMigrationType `json:"type,omitempty"`
+	Region string                `json:"region,omitempty"`
+}
+
 // InstancesPagedResponse represents a linode API response for listing
 type InstancesPagedResponse struct {
 	*PageOptions
@@ -417,8 +431,14 @@ func (c *Client) MutateInstance(ctx context.Context, id int) error {
 }
 
 // MigrateInstance - Migrate an instance
-func (c *Client) MigrateInstance(ctx context.Context, id int) error {
-	return c.simpleInstanceAction(ctx, "migrate", id)
+func (c *Client) MigrateInstance(ctx context.Context, linodeID int, opts InstanceMigrateOptions) error {
+	body, err := json.Marshal(opts)
+	if err != nil {
+		return err
+	}
+	e := fmt.Sprintf("linode/instances/%d/migrate", linodeID)
+	_, err = coupleAPIErrors(c.R(ctx).SetBody(string(body)).Post(e))
+	return err
 }
 
 // simpleInstanceAction is a helper for Instance actions that take no parameters
diff --git a/vendor/github.com/linode/linodego/nodebalancer_firewalls.go b/vendor/github.com/linode/linodego/nodebalancer_firewalls.go
new file mode 100644
index 00000000000..d2b339c7de8
--- /dev/null
+++ b/vendor/github.com/linode/linodego/nodebalancer_firewalls.go
@@ -0,0 +1,41 @@
+package linodego
+
+import (
+	"context"
+	"fmt"
+
+	"github.com/go-resty/resty/v2"
+)
+
+// NodeBalancerFirewallsPagedResponse represents a Linode API response for listing of Cloud Firewalls
+type NodeBalancerFirewallsPagedResponse struct {
+	*PageOptions
+	Data []Firewall `json:"data"`
+}
+
+func (NodeBalancerFirewallsPagedResponse) endpoint(ids ...any) string {
+	id := ids[0].(int)
+	return fmt.Sprintf("nodebalancers/%d/firewalls", id)
+}
+
+func (resp *NodeBalancerFirewallsPagedResponse) castResult(r *resty.Request, e string) (int, int, error) {
+	res, err := coupleAPIErrors(r.SetResult(NodeBalancerFirewallsPagedResponse{}).Get(e))
+	if err != nil {
+		return 0, 0, err
+	}
+	castedRes := res.Result().(*NodeBalancerFirewallsPagedResponse)
+	resp.Data = append(resp.Data, castedRes.Data...)
+	return castedRes.Pages, castedRes.Results, nil
+}
+
+// ListNodeBalancerFirewalls returns a paginated list of Cloud Firewalls for nodebalancerID
+func (c *Client) ListNodeBalancerFirewalls(ctx context.Context, nodebalancerID int, opts *ListOptions) ([]Firewall, error) {
+	response := NodeBalancerFirewallsPagedResponse{}
+
+	err := c.listHelper(ctx, &response, opts, nodebalancerID)
+	if err != nil {
+		return nil, err
+	}
+
+	return response.Data, nil
+}
diff --git a/vendor/github.com/linode/linodego/waitfor.go b/vendor/github.com/linode/linodego/waitfor.go
index e3142694867..0b4d6c7bd3d 100644
--- a/vendor/github.com/linode/linodego/waitfor.go
+++ b/vendor/github.com/linode/linodego/waitfor.go
@@ -669,7 +669,7 @@ func (p *EventPoller) WaitForLatestUnknownEvent(ctx context.Context) (*Event, er
 			}
 
 			for _, event := range events {
-				if !eventMatchesSecondary(p.SecondaryEntityID, event) {
+				if p.SecondaryEntityID != nil && !eventMatchesSecondary(p.SecondaryEntityID, event) {
 					continue
 				}
 
@@ -781,10 +781,10 @@ func (client Client) WaitForResourceFree(
 // matches the configured secondary ID.
 // This logic has been broken out to improve readability.
 func eventMatchesSecondary(configuredID any, e Event) bool {
-	// Always return true if the user is not filtering
-	// on a secondary ID.
-	if configuredID == nil {
-		return true
+	// We should return false if the event has no secondary entity.
+	// e.g. A previous disk deletion has completed.
+	if e.SecondaryEntity == nil {
+		return false
 	}
 
 	secondaryID := e.SecondaryEntity.ID
diff --git a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/NOTICE b/vendor/github.com/matttproud/golang_protobuf_extensions/v2/NOTICE
deleted file mode 100644
index 5d8cb5b72e7..00000000000
--- a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/NOTICE
+++ /dev/null
@@ -1 +0,0 @@
-Copyright 2012 Matt T. Proud (matt.proud@gmail.com)
diff --git a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/.gitignore b/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/.gitignore
deleted file mode 100644
index e16fb946bb9..00000000000
--- a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-cover.dat
diff --git a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/Makefile b/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/Makefile
deleted file mode 100644
index 81be214370d..00000000000
--- a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/Makefile
+++ /dev/null
@@ -1,7 +0,0 @@
-all:
-
-cover:
-	go test -cover -v -coverprofile=cover.dat ./...
-	go tool cover -func cover.dat
-
-.PHONY: cover
diff --git a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/decode.go b/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/decode.go
deleted file mode 100644
index 7c08e564f14..00000000000
--- a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/decode.go
+++ /dev/null
@@ -1,81 +0,0 @@
-// Copyright 2013 Matt T. Proud
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-package pbutil
-
-import (
-	"encoding/binary"
-	"errors"
-	"io"
-
-	"google.golang.org/protobuf/proto"
-)
-
-// TODO: Give error package name prefix in next minor release.
-var errInvalidVarint = errors.New("invalid varint32 encountered")
-
-// ReadDelimited decodes a message from the provided length-delimited stream,
-// where the length is encoded as 32-bit varint prefix to the message body.
-// It returns the total number of bytes read and any applicable error.  This is
-// roughly equivalent to the companion Java API's
-// MessageLite#parseDelimitedFrom.  As per the reader contract, this function
-// calls r.Read repeatedly as required until exactly one message including its
-// prefix is read and decoded (or an error has occurred).  The function never
-// reads more bytes from the stream than required.  The function never returns
-// an error if a message has been read and decoded correctly, even if the end
-// of the stream has been reached in doing so.  In that case, any subsequent
-// calls return (0, io.EOF).
-func ReadDelimited(r io.Reader, m proto.Message) (n int, err error) {
-	// TODO: Consider allowing the caller to specify a decode buffer in the
-	// next major version.
-
-	// TODO: Consider using error wrapping to annotate error state in pass-
-	// through cases in the next minor version.
-
-	// Per AbstractParser#parsePartialDelimitedFrom with
-	// CodedInputStream#readRawVarint32.
-	var headerBuf [binary.MaxVarintLen32]byte
-	var bytesRead, varIntBytes int
-	var messageLength uint64
-	for varIntBytes == 0 { // i.e. no varint has been decoded yet.
-		if bytesRead >= len(headerBuf) {
-			return bytesRead, errInvalidVarint
-		}
-		// We have to read byte by byte here to avoid reading more bytes
-		// than required. Each read byte is appended to what we have
-		// read before.
-		newBytesRead, err := r.Read(headerBuf[bytesRead : bytesRead+1])
-		if newBytesRead == 0 {
-			if err != nil {
-				return bytesRead, err
-			}
-			// A Reader should not return (0, nil); but if it does, it should
-			// be treated as no-op according to the Reader contract.
-			continue
-		}
-		bytesRead += newBytesRead
-		// Now present everything read so far to the varint decoder and
-		// see if a varint can be decoded already.
-		messageLength, varIntBytes = binary.Uvarint(headerBuf[:bytesRead])
-	}
-
-	messageBuf := make([]byte, messageLength)
-	newBytesRead, err := io.ReadFull(r, messageBuf)
-	bytesRead += newBytesRead
-	if err != nil {
-		return bytesRead, err
-	}
-
-	return bytesRead, proto.Unmarshal(messageBuf, m)
-}
diff --git a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/encode.go b/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/encode.go
deleted file mode 100644
index e58dd9d2974..00000000000
--- a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/encode.go
+++ /dev/null
@@ -1,49 +0,0 @@
-// Copyright 2013 Matt T. Proud
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-package pbutil
-
-import (
-	"encoding/binary"
-	"io"
-
-	"google.golang.org/protobuf/proto"
-)
-
-// WriteDelimited encodes and dumps a message to the provided writer prefixed
-// with a 32-bit varint indicating the length of the encoded message, producing
-// a length-delimited record stream, which can be used to chain together
-// encoded messages of the same type together in a file.  It returns the total
-// number of bytes written and any applicable error.  This is roughly
-// equivalent to the companion Java API's MessageLite#writeDelimitedTo.
-func WriteDelimited(w io.Writer, m proto.Message) (n int, err error) {
-	// TODO: Consider allowing the caller to specify an encode buffer in the
-	// next major version.
-
-	buffer, err := proto.Marshal(m)
-	if err != nil {
-		return 0, err
-	}
-
-	var buf [binary.MaxVarintLen32]byte
-	encodedLength := binary.PutUvarint(buf[:], uint64(len(buffer)))
-
-	sync, err := w.Write(buf[:encodedLength])
-	if err != nil {
-		return sync, err
-	}
-
-	n, err = w.Write(buffer)
-	return n + sync, err
-}
diff --git a/vendor/github.com/miekg/dns/README.md b/vendor/github.com/miekg/dns/README.md
index 95bc08d5c34..e57d86afecb 100644
--- a/vendor/github.com/miekg/dns/README.md
+++ b/vendor/github.com/miekg/dns/README.md
@@ -82,6 +82,7 @@ A not-so-up-to-date-list-that-may-be-actually-current:
 * https://dnscheck.tools/
 * https://github.com/egbakou/domainverifier
 * https://github.com/semihalev/sdns
+* https://github.com/wintbiit/NineDNS
 
 
 Send pull request if you want to be listed here.
@@ -125,6 +126,7 @@ Example programs can be found in the `github.com/miekg/exdns` repository.
 *all of them*
 
 * 103{4,5} - DNS standard
+* 1183 - ISDN, X25 and other deprecated records
 * 1348 - NSAP record (removed the record)
 * 1982 - Serial Arithmetic
 * 1876 - LOC record
diff --git a/vendor/github.com/miekg/dns/dnssec_keyscan.go b/vendor/github.com/miekg/dns/dnssec_keyscan.go
index 5e72249b52b..9c9972db6ea 100644
--- a/vendor/github.com/miekg/dns/dnssec_keyscan.go
+++ b/vendor/github.com/miekg/dns/dnssec_keyscan.go
@@ -160,7 +160,7 @@ func parseKey(r io.Reader, file string) (map[string]string, error) {
 			k = l.token
 		case zValue:
 			if k == "" {
-				return nil, &ParseError{file, "no private key seen", l}
+				return nil, &ParseError{file: file, err: "no private key seen", lex: l}
 			}
 
 			m[strings.ToLower(k)] = l.token
diff --git a/vendor/github.com/miekg/dns/generate.go b/vendor/github.com/miekg/dns/generate.go
index 713e9d2dada..a81d2bc51ff 100644
--- a/vendor/github.com/miekg/dns/generate.go
+++ b/vendor/github.com/miekg/dns/generate.go
@@ -116,7 +116,7 @@ func (r *generateReader) parseError(msg string, end int) *ParseError {
 	l.token = r.s[r.si-1 : end]
 	l.column += r.si // l.column starts one zBLANK before r.s
 
-	return &ParseError{r.file, msg, l}
+	return &ParseError{file: r.file, err: msg, lex: l}
 }
 
 func (r *generateReader) Read(p []byte) (int, error) {
diff --git a/vendor/github.com/miekg/dns/privaterr.go b/vendor/github.com/miekg/dns/privaterr.go
index d256b652ea7..350ea5a47a8 100644
--- a/vendor/github.com/miekg/dns/privaterr.go
+++ b/vendor/github.com/miekg/dns/privaterr.go
@@ -84,7 +84,7 @@ Fetch:
 
 	err := r.Data.Parse(text)
 	if err != nil {
-		return &ParseError{"", err.Error(), l}
+		return &ParseError{wrappedErr: err, lex: l}
 	}
 
 	return nil
diff --git a/vendor/github.com/miekg/dns/scan.go b/vendor/github.com/miekg/dns/scan.go
index 062d8ff3a03..1f92ae42165 100644
--- a/vendor/github.com/miekg/dns/scan.go
+++ b/vendor/github.com/miekg/dns/scan.go
@@ -4,7 +4,9 @@ import (
 	"bufio"
 	"fmt"
 	"io"
+	"io/fs"
 	"os"
+	"path"
 	"path/filepath"
 	"strconv"
 	"strings"
@@ -64,20 +66,26 @@ const (
 // ParseError is a parsing error. It contains the parse error and the location in the io.Reader
 // where the error occurred.
 type ParseError struct {
-	file string
-	err  string
-	lex  lex
+	file       string
+	err        string
+	wrappedErr error
+	lex        lex
 }
 
 func (e *ParseError) Error() (s string) {
 	if e.file != "" {
 		s = e.file + ": "
 	}
+	if e.err == "" && e.wrappedErr != nil {
+		e.err = e.wrappedErr.Error()
+	}
 	s += "dns: " + e.err + ": " + strconv.QuoteToASCII(e.lex.token) + " at line: " +
 		strconv.Itoa(e.lex.line) + ":" + strconv.Itoa(e.lex.column)
 	return
 }
 
+func (e *ParseError) Unwrap() error { return e.wrappedErr }
+
 type lex struct {
 	token  string // text of the token
 	err    bool   // when true, token text has lexer error
@@ -168,8 +176,9 @@ type ZoneParser struct {
 	// sub is used to parse $INCLUDE files and $GENERATE directives.
 	// Next, by calling subNext, forwards the resulting RRs from this
 	// sub parser to the calling code.
-	sub    *ZoneParser
-	osFile *os.File
+	sub  *ZoneParser
+	r    io.Reader
+	fsys fs.FS
 
 	includeDepth uint8
 
@@ -188,7 +197,7 @@ func NewZoneParser(r io.Reader, origin, file string) *ZoneParser {
 	if origin != "" {
 		origin = Fqdn(origin)
 		if _, ok := IsDomainName(origin); !ok {
-			pe = &ParseError{file, "bad initial origin name", lex{}}
+			pe = &ParseError{file: file, err: "bad initial origin name"}
 		}
 	}
 
@@ -220,6 +229,24 @@ func (zp *ZoneParser) SetIncludeAllowed(v bool) {
 	zp.includeAllowed = v
 }
 
+// SetIncludeFS provides an [fs.FS] to use when looking for the target of
+// $INCLUDE directives.  ($INCLUDE must still be enabled separately by calling
+// [ZoneParser.SetIncludeAllowed].)  If fsys is nil, [os.Open] will be used.
+//
+// When fsys is an on-disk FS, the ability of $INCLUDE to reach files from
+// outside its root directory depends upon the FS implementation.  For
+// instance, [os.DirFS] will refuse to open paths like "../../etc/passwd",
+// however it will still follow links which may point anywhere on the system.
+//
+// FS paths are slash-separated on all systems, even Windows.  $INCLUDE paths
+// containing other characters such as backslash and colon may be accepted as
+// valid, but those characters will never be interpreted by an FS
+// implementation as path element separators.  See [fs.ValidPath] for more
+// details.
+func (zp *ZoneParser) SetIncludeFS(fsys fs.FS) {
+	zp.fsys = fsys
+}
+
 // Err returns the first non-EOF error that was encountered by the
 // ZoneParser.
 func (zp *ZoneParser) Err() error {
@@ -237,7 +264,7 @@ func (zp *ZoneParser) Err() error {
 }
 
 func (zp *ZoneParser) setParseError(err string, l lex) (RR, bool) {
-	zp.parseErr = &ParseError{zp.file, err, l}
+	zp.parseErr = &ParseError{file: zp.file, err: err, lex: l}
 	return nil, false
 }
 
@@ -260,9 +287,11 @@ func (zp *ZoneParser) subNext() (RR, bool) {
 		return rr, true
 	}
 
-	if zp.sub.osFile != nil {
-		zp.sub.osFile.Close()
-		zp.sub.osFile = nil
+	if zp.sub.r != nil {
+		if c, ok := zp.sub.r.(io.Closer); ok {
+			c.Close()
+		}
+		zp.sub.r = nil
 	}
 
 	if zp.sub.Err() != nil {
@@ -402,24 +431,44 @@ func (zp *ZoneParser) Next() (RR, bool) {
 
 			// Start with the new file
 			includePath := l.token
-			if !filepath.IsAbs(includePath) {
-				includePath = filepath.Join(filepath.Dir(zp.file), includePath)
-			}
+			var r1 io.Reader
+			var e1 error
+			if zp.fsys != nil {
+				// fs.FS always uses / as separator, even on Windows, so use
+				// path instead of filepath here:
+				if !path.IsAbs(includePath) {
+					includePath = path.Join(path.Dir(zp.file), includePath)
+				}
+
+				// os.DirFS, and probably others, expect all paths to be
+				// relative, so clean the path and remove leading / if
+				// present:
+				includePath = strings.TrimLeft(path.Clean(includePath), "/")
 
-			r1, e1 := os.Open(includePath)
+				r1, e1 = zp.fsys.Open(includePath)
+			} else {
+				if !filepath.IsAbs(includePath) {
+					includePath = filepath.Join(filepath.Dir(zp.file), includePath)
+				}
+				r1, e1 = os.Open(includePath)
+			}
 			if e1 != nil {
 				var as string
-				if !filepath.IsAbs(l.token) {
+				if includePath != l.token {
 					as = fmt.Sprintf(" as `%s'", includePath)
 				}
-
-				msg := fmt.Sprintf("failed to open `%s'%s: %v", l.token, as, e1)
-				return zp.setParseError(msg, l)
+				zp.parseErr = &ParseError{
+					file:       zp.file,
+					wrappedErr: fmt.Errorf("failed to open `%s'%s: %w", l.token, as, e1),
+					lex:        l,
+				}
+				return nil, false
 			}
 
 			zp.sub = NewZoneParser(r1, neworigin, includePath)
-			zp.sub.defttl, zp.sub.includeDepth, zp.sub.osFile = zp.defttl, zp.includeDepth+1, r1
+			zp.sub.defttl, zp.sub.includeDepth, zp.sub.r = zp.defttl, zp.includeDepth+1, r1
 			zp.sub.SetIncludeAllowed(true)
+			zp.sub.SetIncludeFS(zp.fsys)
 			return zp.subNext()
 		case zExpectDirTTLBl:
 			if l.value != zBlank {
@@ -1326,12 +1375,12 @@ func slurpRemainder(c *zlexer) *ParseError {
 	case zBlank:
 		l, _ = c.Next()
 		if l.value != zNewline && l.value != zEOF {
-			return &ParseError{"", "garbage after rdata", l}
+			return &ParseError{err: "garbage after rdata", lex: l}
 		}
 	case zNewline:
 	case zEOF:
 	default:
-		return &ParseError{"", "garbage after rdata", l}
+		return &ParseError{err: "garbage after rdata", lex: l}
 	}
 	return nil
 }
@@ -1340,16 +1389,16 @@ func slurpRemainder(c *zlexer) *ParseError {
 // Used for NID and L64 record.
 func stringToNodeID(l lex) (uint64, *ParseError) {
 	if len(l.token) < 19 {
-		return 0, &ParseError{l.token, "bad NID/L64 NodeID/Locator64", l}
+		return 0, &ParseError{file: l.token, err: "bad NID/L64 NodeID/Locator64", lex: l}
 	}
 	// There must be three colons at fixes positions, if not its a parse error
 	if l.token[4] != ':' && l.token[9] != ':' && l.token[14] != ':' {
-		return 0, &ParseError{l.token, "bad NID/L64 NodeID/Locator64", l}
+		return 0, &ParseError{file: l.token, err: "bad NID/L64 NodeID/Locator64", lex: l}
 	}
 	s := l.token[0:4] + l.token[5:9] + l.token[10:14] + l.token[15:19]
 	u, err := strconv.ParseUint(s, 16, 64)
 	if err != nil {
-		return 0, &ParseError{l.token, "bad NID/L64 NodeID/Locator64", l}
+		return 0, &ParseError{file: l.token, err: "bad NID/L64 NodeID/Locator64", lex: l}
 	}
 	return u, nil
 }
diff --git a/vendor/github.com/miekg/dns/scan_rr.go b/vendor/github.com/miekg/dns/scan_rr.go
index a635e1c5cb1..1a90c61f8d4 100644
--- a/vendor/github.com/miekg/dns/scan_rr.go
+++ b/vendor/github.com/miekg/dns/scan_rr.go
@@ -3,6 +3,7 @@ package dns
 import (
 	"encoding/base64"
 	"errors"
+	"fmt"
 	"net"
 	"strconv"
 	"strings"
@@ -15,14 +16,14 @@ func endingToString(c *zlexer, errstr string) (string, *ParseError) {
 	l, _ := c.Next() // zString
 	for l.value != zNewline && l.value != zEOF {
 		if l.err {
-			return s.String(), &ParseError{"", errstr, l}
+			return s.String(), &ParseError{err: errstr, lex: l}
 		}
 		switch l.value {
 		case zString:
 			s.WriteString(l.token)
 		case zBlank: // Ok
 		default:
-			return "", &ParseError{"", errstr, l}
+			return "", &ParseError{err: errstr, lex: l}
 		}
 		l, _ = c.Next()
 	}
@@ -36,7 +37,7 @@ func endingToTxtSlice(c *zlexer, errstr string) ([]string, *ParseError) {
 	// Get the remaining data until we see a zNewline
 	l, _ := c.Next()
 	if l.err {
-		return nil, &ParseError{"", errstr, l}
+		return nil, &ParseError{err: errstr, lex: l}
 	}
 
 	// Build the slice
@@ -45,7 +46,7 @@ func endingToTxtSlice(c *zlexer, errstr string) ([]string, *ParseError) {
 	empty := false
 	for l.value != zNewline && l.value != zEOF {
 		if l.err {
-			return nil, &ParseError{"", errstr, l}
+			return nil, &ParseError{err: errstr, lex: l}
 		}
 		switch l.value {
 		case zString:
@@ -72,7 +73,7 @@ func endingToTxtSlice(c *zlexer, errstr string) ([]string, *ParseError) {
 		case zBlank:
 			if quote {
 				// zBlank can only be seen in between txt parts.
-				return nil, &ParseError{"", errstr, l}
+				return nil, &ParseError{err: errstr, lex: l}
 			}
 		case zQuote:
 			if empty && quote {
@@ -81,13 +82,13 @@ func endingToTxtSlice(c *zlexer, errstr string) ([]string, *ParseError) {
 			quote = !quote
 			empty = true
 		default:
-			return nil, &ParseError{"", errstr, l}
+			return nil, &ParseError{err: errstr, lex: l}
 		}
 		l, _ = c.Next()
 	}
 
 	if quote {
-		return nil, &ParseError{"", errstr, l}
+		return nil, &ParseError{err: errstr, lex: l}
 	}
 
 	return s, nil
@@ -102,7 +103,7 @@ func (rr *A) parse(c *zlexer, o string) *ParseError {
 	// IPv4.
 	isIPv4 := !strings.Contains(l.token, ":")
 	if rr.A == nil || !isIPv4 || l.err {
-		return &ParseError{"", "bad A A", l}
+		return &ParseError{err: "bad A A", lex: l}
 	}
 	return slurpRemainder(c)
 }
@@ -114,7 +115,7 @@ func (rr *AAAA) parse(c *zlexer, o string) *ParseError {
 	// addresses cannot include ":".
 	isIPv6 := strings.Contains(l.token, ":")
 	if rr.AAAA == nil || !isIPv6 || l.err {
-		return &ParseError{"", "bad AAAA AAAA", l}
+		return &ParseError{err: "bad AAAA AAAA", lex: l}
 	}
 	return slurpRemainder(c)
 }
@@ -123,7 +124,7 @@ func (rr *NS) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad NS Ns", l}
+		return &ParseError{err: "bad NS Ns", lex: l}
 	}
 	rr.Ns = name
 	return slurpRemainder(c)
@@ -133,7 +134,7 @@ func (rr *PTR) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad PTR Ptr", l}
+		return &ParseError{err: "bad PTR Ptr", lex: l}
 	}
 	rr.Ptr = name
 	return slurpRemainder(c)
@@ -143,7 +144,7 @@ func (rr *NSAPPTR) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad NSAP-PTR Ptr", l}
+		return &ParseError{err: "bad NSAP-PTR Ptr", lex: l}
 	}
 	rr.Ptr = name
 	return slurpRemainder(c)
@@ -153,7 +154,7 @@ func (rr *RP) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	mbox, mboxOk := toAbsoluteName(l.token, o)
 	if l.err || !mboxOk {
-		return &ParseError{"", "bad RP Mbox", l}
+		return &ParseError{err: "bad RP Mbox", lex: l}
 	}
 	rr.Mbox = mbox
 
@@ -163,7 +164,7 @@ func (rr *RP) parse(c *zlexer, o string) *ParseError {
 
 	txt, txtOk := toAbsoluteName(l.token, o)
 	if l.err || !txtOk {
-		return &ParseError{"", "bad RP Txt", l}
+		return &ParseError{err: "bad RP Txt", lex: l}
 	}
 	rr.Txt = txt
 
@@ -174,7 +175,7 @@ func (rr *MR) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad MR Mr", l}
+		return &ParseError{err: "bad MR Mr", lex: l}
 	}
 	rr.Mr = name
 	return slurpRemainder(c)
@@ -184,7 +185,7 @@ func (rr *MB) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad MB Mb", l}
+		return &ParseError{err: "bad MB Mb", lex: l}
 	}
 	rr.Mb = name
 	return slurpRemainder(c)
@@ -194,7 +195,7 @@ func (rr *MG) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad MG Mg", l}
+		return &ParseError{err: "bad MG Mg", lex: l}
 	}
 	rr.Mg = name
 	return slurpRemainder(c)
@@ -219,6 +220,29 @@ func (rr *HINFO) parse(c *zlexer, o string) *ParseError {
 
 	rr.Cpu = chunks[0]
 	rr.Os = strings.Join(chunks[1:], " ")
+	return nil
+}
+
+// according to RFC 1183 the parsing is identical to HINFO, so just use that code.
+func (rr *ISDN) parse(c *zlexer, o string) *ParseError {
+	chunks, e := endingToTxtSlice(c, "bad ISDN Fields")
+	if e != nil {
+		return e
+	}
+
+	if ln := len(chunks); ln == 0 {
+		return nil
+	} else if ln == 1 {
+		// Can we split it?
+		if out := strings.Fields(chunks[0]); len(out) > 1 {
+			chunks = out
+		} else {
+			chunks = append(chunks, "")
+		}
+	}
+
+	rr.Address = chunks[0]
+	rr.SubAddress = strings.Join(chunks[1:], " ")
 
 	return nil
 }
@@ -227,7 +251,7 @@ func (rr *MINFO) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	rmail, rmailOk := toAbsoluteName(l.token, o)
 	if l.err || !rmailOk {
-		return &ParseError{"", "bad MINFO Rmail", l}
+		return &ParseError{err: "bad MINFO Rmail", lex: l}
 	}
 	rr.Rmail = rmail
 
@@ -237,7 +261,7 @@ func (rr *MINFO) parse(c *zlexer, o string) *ParseError {
 
 	email, emailOk := toAbsoluteName(l.token, o)
 	if l.err || !emailOk {
-		return &ParseError{"", "bad MINFO Email", l}
+		return &ParseError{err: "bad MINFO Email", lex: l}
 	}
 	rr.Email = email
 
@@ -248,7 +272,7 @@ func (rr *MF) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad MF Mf", l}
+		return &ParseError{err: "bad MF Mf", lex: l}
 	}
 	rr.Mf = name
 	return slurpRemainder(c)
@@ -258,7 +282,7 @@ func (rr *MD) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad MD Md", l}
+		return &ParseError{err: "bad MD Md", lex: l}
 	}
 	rr.Md = name
 	return slurpRemainder(c)
@@ -268,7 +292,7 @@ func (rr *MX) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad MX Pref", l}
+		return &ParseError{err: "bad MX Pref", lex: l}
 	}
 	rr.Preference = uint16(i)
 
@@ -278,7 +302,7 @@ func (rr *MX) parse(c *zlexer, o string) *ParseError {
 
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad MX Mx", l}
+		return &ParseError{err: "bad MX Mx", lex: l}
 	}
 	rr.Mx = name
 
@@ -289,7 +313,7 @@ func (rr *RT) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil {
-		return &ParseError{"", "bad RT Preference", l}
+		return &ParseError{err: "bad RT Preference", lex: l}
 	}
 	rr.Preference = uint16(i)
 
@@ -299,7 +323,7 @@ func (rr *RT) parse(c *zlexer, o string) *ParseError {
 
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad RT Host", l}
+		return &ParseError{err: "bad RT Host", lex: l}
 	}
 	rr.Host = name
 
@@ -310,7 +334,7 @@ func (rr *AFSDB) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad AFSDB Subtype", l}
+		return &ParseError{err: "bad AFSDB Subtype", lex: l}
 	}
 	rr.Subtype = uint16(i)
 
@@ -320,7 +344,7 @@ func (rr *AFSDB) parse(c *zlexer, o string) *ParseError {
 
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad AFSDB Hostname", l}
+		return &ParseError{err: "bad AFSDB Hostname", lex: l}
 	}
 	rr.Hostname = name
 	return slurpRemainder(c)
@@ -329,7 +353,7 @@ func (rr *AFSDB) parse(c *zlexer, o string) *ParseError {
 func (rr *X25) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	if l.err {
-		return &ParseError{"", "bad X25 PSDNAddress", l}
+		return &ParseError{err: "bad X25 PSDNAddress", lex: l}
 	}
 	rr.PSDNAddress = l.token
 	return slurpRemainder(c)
@@ -339,7 +363,7 @@ func (rr *KX) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad KX Pref", l}
+		return &ParseError{err: "bad KX Pref", lex: l}
 	}
 	rr.Preference = uint16(i)
 
@@ -349,7 +373,7 @@ func (rr *KX) parse(c *zlexer, o string) *ParseError {
 
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad KX Exchanger", l}
+		return &ParseError{err: "bad KX Exchanger", lex: l}
 	}
 	rr.Exchanger = name
 	return slurpRemainder(c)
@@ -359,7 +383,7 @@ func (rr *CNAME) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad CNAME Target", l}
+		return &ParseError{err: "bad CNAME Target", lex: l}
 	}
 	rr.Target = name
 	return slurpRemainder(c)
@@ -369,7 +393,7 @@ func (rr *DNAME) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad DNAME Target", l}
+		return &ParseError{err: "bad DNAME Target", lex: l}
 	}
 	rr.Target = name
 	return slurpRemainder(c)
@@ -379,7 +403,7 @@ func (rr *SOA) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	ns, nsOk := toAbsoluteName(l.token, o)
 	if l.err || !nsOk {
-		return &ParseError{"", "bad SOA Ns", l}
+		return &ParseError{err: "bad SOA Ns", lex: l}
 	}
 	rr.Ns = ns
 
@@ -389,7 +413,7 @@ func (rr *SOA) parse(c *zlexer, o string) *ParseError {
 
 	mbox, mboxOk := toAbsoluteName(l.token, o)
 	if l.err || !mboxOk {
-		return &ParseError{"", "bad SOA Mbox", l}
+		return &ParseError{err: "bad SOA Mbox", lex: l}
 	}
 	rr.Mbox = mbox
 
@@ -402,16 +426,16 @@ func (rr *SOA) parse(c *zlexer, o string) *ParseError {
 	for i := 0; i < 5; i++ {
 		l, _ = c.Next()
 		if l.err {
-			return &ParseError{"", "bad SOA zone parameter", l}
+			return &ParseError{err: "bad SOA zone parameter", lex: l}
 		}
 		if j, err := strconv.ParseUint(l.token, 10, 32); err != nil {
 			if i == 0 {
 				// Serial must be a number
-				return &ParseError{"", "bad SOA zone parameter", l}
+				return &ParseError{err: "bad SOA zone parameter", lex: l}
 			}
 			// We allow other fields to be unitful duration strings
 			if v, ok = stringToTTL(l.token); !ok {
-				return &ParseError{"", "bad SOA zone parameter", l}
+				return &ParseError{err: "bad SOA zone parameter", lex: l}
 
 			}
 		} else {
@@ -441,7 +465,7 @@ func (rr *SRV) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad SRV Priority", l}
+		return &ParseError{err: "bad SRV Priority", lex: l}
 	}
 	rr.Priority = uint16(i)
 
@@ -449,7 +473,7 @@ func (rr *SRV) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next() // zString
 	i, e1 := strconv.ParseUint(l.token, 10, 16)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad SRV Weight", l}
+		return &ParseError{err: "bad SRV Weight", lex: l}
 	}
 	rr.Weight = uint16(i)
 
@@ -457,7 +481,7 @@ func (rr *SRV) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next() // zString
 	i, e2 := strconv.ParseUint(l.token, 10, 16)
 	if e2 != nil || l.err {
-		return &ParseError{"", "bad SRV Port", l}
+		return &ParseError{err: "bad SRV Port", lex: l}
 	}
 	rr.Port = uint16(i)
 
@@ -467,7 +491,7 @@ func (rr *SRV) parse(c *zlexer, o string) *ParseError {
 
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad SRV Target", l}
+		return &ParseError{err: "bad SRV Target", lex: l}
 	}
 	rr.Target = name
 	return slurpRemainder(c)
@@ -477,7 +501,7 @@ func (rr *NAPTR) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad NAPTR Order", l}
+		return &ParseError{err: "bad NAPTR Order", lex: l}
 	}
 	rr.Order = uint16(i)
 
@@ -485,7 +509,7 @@ func (rr *NAPTR) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next() // zString
 	i, e1 := strconv.ParseUint(l.token, 10, 16)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad NAPTR Preference", l}
+		return &ParseError{err: "bad NAPTR Preference", lex: l}
 	}
 	rr.Preference = uint16(i)
 
@@ -493,57 +517,57 @@ func (rr *NAPTR) parse(c *zlexer, o string) *ParseError {
 	c.Next()        // zBlank
 	l, _ = c.Next() // _QUOTE
 	if l.value != zQuote {
-		return &ParseError{"", "bad NAPTR Flags", l}
+		return &ParseError{err: "bad NAPTR Flags", lex: l}
 	}
 	l, _ = c.Next() // Either String or Quote
 	if l.value == zString {
 		rr.Flags = l.token
 		l, _ = c.Next() // _QUOTE
 		if l.value != zQuote {
-			return &ParseError{"", "bad NAPTR Flags", l}
+			return &ParseError{err: "bad NAPTR Flags", lex: l}
 		}
 	} else if l.value == zQuote {
 		rr.Flags = ""
 	} else {
-		return &ParseError{"", "bad NAPTR Flags", l}
+		return &ParseError{err: "bad NAPTR Flags", lex: l}
 	}
 
 	// Service
 	c.Next()        // zBlank
 	l, _ = c.Next() // _QUOTE
 	if l.value != zQuote {
-		return &ParseError{"", "bad NAPTR Service", l}
+		return &ParseError{err: "bad NAPTR Service", lex: l}
 	}
 	l, _ = c.Next() // Either String or Quote
 	if l.value == zString {
 		rr.Service = l.token
 		l, _ = c.Next() // _QUOTE
 		if l.value != zQuote {
-			return &ParseError{"", "bad NAPTR Service", l}
+			return &ParseError{err: "bad NAPTR Service", lex: l}
 		}
 	} else if l.value == zQuote {
 		rr.Service = ""
 	} else {
-		return &ParseError{"", "bad NAPTR Service", l}
+		return &ParseError{err: "bad NAPTR Service", lex: l}
 	}
 
 	// Regexp
 	c.Next()        // zBlank
 	l, _ = c.Next() // _QUOTE
 	if l.value != zQuote {
-		return &ParseError{"", "bad NAPTR Regexp", l}
+		return &ParseError{err: "bad NAPTR Regexp", lex: l}
 	}
 	l, _ = c.Next() // Either String or Quote
 	if l.value == zString {
 		rr.Regexp = l.token
 		l, _ = c.Next() // _QUOTE
 		if l.value != zQuote {
-			return &ParseError{"", "bad NAPTR Regexp", l}
+			return &ParseError{err: "bad NAPTR Regexp", lex: l}
 		}
 	} else if l.value == zQuote {
 		rr.Regexp = ""
 	} else {
-		return &ParseError{"", "bad NAPTR Regexp", l}
+		return &ParseError{err: "bad NAPTR Regexp", lex: l}
 	}
 
 	// After quote no space??
@@ -553,7 +577,7 @@ func (rr *NAPTR) parse(c *zlexer, o string) *ParseError {
 
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad NAPTR Replacement", l}
+		return &ParseError{err: "bad NAPTR Replacement", lex: l}
 	}
 	rr.Replacement = name
 	return slurpRemainder(c)
@@ -563,7 +587,7 @@ func (rr *TALINK) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	previousName, previousNameOk := toAbsoluteName(l.token, o)
 	if l.err || !previousNameOk {
-		return &ParseError{"", "bad TALINK PreviousName", l}
+		return &ParseError{err: "bad TALINK PreviousName", lex: l}
 	}
 	rr.PreviousName = previousName
 
@@ -573,7 +597,7 @@ func (rr *TALINK) parse(c *zlexer, o string) *ParseError {
 
 	nextName, nextNameOk := toAbsoluteName(l.token, o)
 	if l.err || !nextNameOk {
-		return &ParseError{"", "bad TALINK NextName", l}
+		return &ParseError{err: "bad TALINK NextName", lex: l}
 	}
 	rr.NextName = nextName
 
@@ -591,7 +615,7 @@ func (rr *LOC) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 32)
 	if e != nil || l.err || i > 90 {
-		return &ParseError{"", "bad LOC Latitude", l}
+		return &ParseError{err: "bad LOC Latitude", lex: l}
 	}
 	rr.Latitude = 1000 * 60 * 60 * uint32(i)
 
@@ -602,7 +626,7 @@ func (rr *LOC) parse(c *zlexer, o string) *ParseError {
 		goto East
 	}
 	if i, err := strconv.ParseUint(l.token, 10, 32); err != nil || l.err || i > 59 {
-		return &ParseError{"", "bad LOC Latitude minutes", l}
+		return &ParseError{err: "bad LOC Latitude minutes", lex: l}
 	} else {
 		rr.Latitude += 1000 * 60 * uint32(i)
 	}
@@ -610,7 +634,7 @@ func (rr *LOC) parse(c *zlexer, o string) *ParseError {
 	c.Next() // zBlank
 	l, _ = c.Next()
 	if i, err := strconv.ParseFloat(l.token, 64); err != nil || l.err || i < 0 || i >= 60 {
-		return &ParseError{"", "bad LOC Latitude seconds", l}
+		return &ParseError{err: "bad LOC Latitude seconds", lex: l}
 	} else {
 		rr.Latitude += uint32(1000 * i)
 	}
@@ -621,14 +645,14 @@ func (rr *LOC) parse(c *zlexer, o string) *ParseError {
 		goto East
 	}
 	// If still alive, flag an error
-	return &ParseError{"", "bad LOC Latitude North/South", l}
+	return &ParseError{err: "bad LOC Latitude North/South", lex: l}
 
 East:
 	// East
 	c.Next() // zBlank
 	l, _ = c.Next()
 	if i, err := strconv.ParseUint(l.token, 10, 32); err != nil || l.err || i > 180 {
-		return &ParseError{"", "bad LOC Longitude", l}
+		return &ParseError{err: "bad LOC Longitude", lex: l}
 	} else {
 		rr.Longitude = 1000 * 60 * 60 * uint32(i)
 	}
@@ -639,14 +663,14 @@ East:
 		goto Altitude
 	}
 	if i, err := strconv.ParseUint(l.token, 10, 32); err != nil || l.err || i > 59 {
-		return &ParseError{"", "bad LOC Longitude minutes", l}
+		return &ParseError{err: "bad LOC Longitude minutes", lex: l}
 	} else {
 		rr.Longitude += 1000 * 60 * uint32(i)
 	}
 	c.Next() // zBlank
 	l, _ = c.Next()
 	if i, err := strconv.ParseFloat(l.token, 64); err != nil || l.err || i < 0 || i >= 60 {
-		return &ParseError{"", "bad LOC Longitude seconds", l}
+		return &ParseError{err: "bad LOC Longitude seconds", lex: l}
 	} else {
 		rr.Longitude += uint32(1000 * i)
 	}
@@ -657,19 +681,19 @@ East:
 		goto Altitude
 	}
 	// If still alive, flag an error
-	return &ParseError{"", "bad LOC Longitude East/West", l}
+	return &ParseError{err: "bad LOC Longitude East/West", lex: l}
 
 Altitude:
 	c.Next() // zBlank
 	l, _ = c.Next()
 	if l.token == "" || l.err {
-		return &ParseError{"", "bad LOC Altitude", l}
+		return &ParseError{err: "bad LOC Altitude", lex: l}
 	}
 	if l.token[len(l.token)-1] == 'M' || l.token[len(l.token)-1] == 'm' {
 		l.token = l.token[0 : len(l.token)-1]
 	}
 	if i, err := strconv.ParseFloat(l.token, 64); err != nil {
-		return &ParseError{"", "bad LOC Altitude", l}
+		return &ParseError{err: "bad LOC Altitude", lex: l}
 	} else {
 		rr.Altitude = uint32(i*100.0 + 10000000.0 + 0.5)
 	}
@@ -684,19 +708,19 @@ Altitude:
 			case 0: // Size
 				exp, m, ok := stringToCm(l.token)
 				if !ok {
-					return &ParseError{"", "bad LOC Size", l}
+					return &ParseError{err: "bad LOC Size", lex: l}
 				}
 				rr.Size = exp&0x0f | m<<4&0xf0
 			case 1: // HorizPre
 				exp, m, ok := stringToCm(l.token)
 				if !ok {
-					return &ParseError{"", "bad LOC HorizPre", l}
+					return &ParseError{err: "bad LOC HorizPre", lex: l}
 				}
 				rr.HorizPre = exp&0x0f | m<<4&0xf0
 			case 2: // VertPre
 				exp, m, ok := stringToCm(l.token)
 				if !ok {
-					return &ParseError{"", "bad LOC VertPre", l}
+					return &ParseError{err: "bad LOC VertPre", lex: l}
 				}
 				rr.VertPre = exp&0x0f | m<<4&0xf0
 			}
@@ -704,7 +728,7 @@ Altitude:
 		case zBlank:
 			// Ok
 		default:
-			return &ParseError{"", "bad LOC Size, HorizPre or VertPre", l}
+			return &ParseError{err: "bad LOC Size, HorizPre or VertPre", lex: l}
 		}
 		l, _ = c.Next()
 	}
@@ -716,14 +740,14 @@ func (rr *HIP) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 8)
 	if e != nil || l.err {
-		return &ParseError{"", "bad HIP PublicKeyAlgorithm", l}
+		return &ParseError{err: "bad HIP PublicKeyAlgorithm", lex: l}
 	}
 	rr.PublicKeyAlgorithm = uint8(i)
 
 	c.Next()        // zBlank
 	l, _ = c.Next() // zString
 	if l.token == "" || l.err {
-		return &ParseError{"", "bad HIP Hit", l}
+		return &ParseError{err: "bad HIP Hit", lex: l}
 	}
 	rr.Hit = l.token // This can not contain spaces, see RFC 5205 Section 6.
 	rr.HitLength = uint8(len(rr.Hit)) / 2
@@ -731,12 +755,12 @@ func (rr *HIP) parse(c *zlexer, o string) *ParseError {
 	c.Next()        // zBlank
 	l, _ = c.Next() // zString
 	if l.token == "" || l.err {
-		return &ParseError{"", "bad HIP PublicKey", l}
+		return &ParseError{err: "bad HIP PublicKey", lex: l}
 	}
 	rr.PublicKey = l.token // This cannot contain spaces
 	decodedPK, decodedPKerr := base64.StdEncoding.DecodeString(rr.PublicKey)
 	if decodedPKerr != nil {
-		return &ParseError{"", "bad HIP PublicKey", l}
+		return &ParseError{err: "bad HIP PublicKey", lex: l}
 	}
 	rr.PublicKeyLength = uint16(len(decodedPK))
 
@@ -748,13 +772,13 @@ func (rr *HIP) parse(c *zlexer, o string) *ParseError {
 		case zString:
 			name, nameOk := toAbsoluteName(l.token, o)
 			if l.err || !nameOk {
-				return &ParseError{"", "bad HIP RendezvousServers", l}
+				return &ParseError{err: "bad HIP RendezvousServers", lex: l}
 			}
 			xs = append(xs, name)
 		case zBlank:
 			// Ok
 		default:
-			return &ParseError{"", "bad HIP RendezvousServers", l}
+			return &ParseError{err: "bad HIP RendezvousServers", lex: l}
 		}
 		l, _ = c.Next()
 	}
@@ -768,7 +792,7 @@ func (rr *CERT) parse(c *zlexer, o string) *ParseError {
 	if v, ok := StringToCertType[l.token]; ok {
 		rr.Type = v
 	} else if i, err := strconv.ParseUint(l.token, 10, 16); err != nil {
-		return &ParseError{"", "bad CERT Type", l}
+		return &ParseError{err: "bad CERT Type", lex: l}
 	} else {
 		rr.Type = uint16(i)
 	}
@@ -776,7 +800,7 @@ func (rr *CERT) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next() // zString
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad CERT KeyTag", l}
+		return &ParseError{err: "bad CERT KeyTag", lex: l}
 	}
 	rr.KeyTag = uint16(i)
 	c.Next()        // zBlank
@@ -784,7 +808,7 @@ func (rr *CERT) parse(c *zlexer, o string) *ParseError {
 	if v, ok := StringToAlgorithm[l.token]; ok {
 		rr.Algorithm = v
 	} else if i, err := strconv.ParseUint(l.token, 10, 8); err != nil {
-		return &ParseError{"", "bad CERT Algorithm", l}
+		return &ParseError{err: "bad CERT Algorithm", lex: l}
 	} else {
 		rr.Algorithm = uint8(i)
 	}
@@ -810,7 +834,7 @@ func (rr *CSYNC) parse(c *zlexer, o string) *ParseError {
 	j, e := strconv.ParseUint(l.token, 10, 32)
 	if e != nil {
 		// Serial must be a number
-		return &ParseError{"", "bad CSYNC serial", l}
+		return &ParseError{err: "bad CSYNC serial", lex: l}
 	}
 	rr.Serial = uint32(j)
 
@@ -820,7 +844,7 @@ func (rr *CSYNC) parse(c *zlexer, o string) *ParseError {
 	j, e1 := strconv.ParseUint(l.token, 10, 16)
 	if e1 != nil {
 		// Serial must be a number
-		return &ParseError{"", "bad CSYNC flags", l}
+		return &ParseError{err: "bad CSYNC flags", lex: l}
 	}
 	rr.Flags = uint16(j)
 
@@ -838,12 +862,12 @@ func (rr *CSYNC) parse(c *zlexer, o string) *ParseError {
 			tokenUpper := strings.ToUpper(l.token)
 			if k, ok = StringToType[tokenUpper]; !ok {
 				if k, ok = typeToInt(l.token); !ok {
-					return &ParseError{"", "bad CSYNC TypeBitMap", l}
+					return &ParseError{err: "bad CSYNC TypeBitMap", lex: l}
 				}
 			}
 			rr.TypeBitMap = append(rr.TypeBitMap, k)
 		default:
-			return &ParseError{"", "bad CSYNC TypeBitMap", l}
+			return &ParseError{err: "bad CSYNC TypeBitMap", lex: l}
 		}
 		l, _ = c.Next()
 	}
@@ -854,7 +878,7 @@ func (rr *ZONEMD) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 32)
 	if e != nil || l.err {
-		return &ParseError{"", "bad ZONEMD Serial", l}
+		return &ParseError{err: "bad ZONEMD Serial", lex: l}
 	}
 	rr.Serial = uint32(i)
 
@@ -862,7 +886,7 @@ func (rr *ZONEMD) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next()
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad ZONEMD Scheme", l}
+		return &ParseError{err: "bad ZONEMD Scheme", lex: l}
 	}
 	rr.Scheme = uint8(i)
 
@@ -870,7 +894,7 @@ func (rr *ZONEMD) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next()
 	i, err := strconv.ParseUint(l.token, 10, 8)
 	if err != nil || l.err {
-		return &ParseError{"", "bad ZONEMD Hash Algorithm", l}
+		return &ParseError{err: "bad ZONEMD Hash Algorithm", lex: l}
 	}
 	rr.Hash = uint8(i)
 
@@ -891,11 +915,11 @@ func (rr *RRSIG) parse(c *zlexer, o string) *ParseError {
 		if strings.HasPrefix(tokenUpper, "TYPE") {
 			t, ok = typeToInt(l.token)
 			if !ok {
-				return &ParseError{"", "bad RRSIG Typecovered", l}
+				return &ParseError{err: "bad RRSIG Typecovered", lex: l}
 			}
 			rr.TypeCovered = t
 		} else {
-			return &ParseError{"", "bad RRSIG Typecovered", l}
+			return &ParseError{err: "bad RRSIG Typecovered", lex: l}
 		}
 	} else {
 		rr.TypeCovered = t
@@ -904,14 +928,14 @@ func (rr *RRSIG) parse(c *zlexer, o string) *ParseError {
 	c.Next() // zBlank
 	l, _ = c.Next()
 	if l.err {
-		return &ParseError{"", "bad RRSIG Algorithm", l}
+		return &ParseError{err: "bad RRSIG Algorithm", lex: l}
 	}
 	i, e := strconv.ParseUint(l.token, 10, 8)
 	rr.Algorithm = uint8(i) // if 0 we'll check the mnemonic in the if
 	if e != nil {
 		v, ok := StringToAlgorithm[l.token]
 		if !ok {
-			return &ParseError{"", "bad RRSIG Algorithm", l}
+			return &ParseError{err: "bad RRSIG Algorithm", lex: l}
 		}
 		rr.Algorithm = v
 	}
@@ -920,7 +944,7 @@ func (rr *RRSIG) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next()
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad RRSIG Labels", l}
+		return &ParseError{err: "bad RRSIG Labels", lex: l}
 	}
 	rr.Labels = uint8(i)
 
@@ -928,7 +952,7 @@ func (rr *RRSIG) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next()
 	i, e2 := strconv.ParseUint(l.token, 10, 32)
 	if e2 != nil || l.err {
-		return &ParseError{"", "bad RRSIG OrigTtl", l}
+		return &ParseError{err: "bad RRSIG OrigTtl", lex: l}
 	}
 	rr.OrigTtl = uint32(i)
 
@@ -939,7 +963,7 @@ func (rr *RRSIG) parse(c *zlexer, o string) *ParseError {
 		if i, err := strconv.ParseUint(l.token, 10, 32); err == nil {
 			rr.Expiration = uint32(i)
 		} else {
-			return &ParseError{"", "bad RRSIG Expiration", l}
+			return &ParseError{err: "bad RRSIG Expiration", lex: l}
 		}
 	} else {
 		rr.Expiration = i
@@ -951,7 +975,7 @@ func (rr *RRSIG) parse(c *zlexer, o string) *ParseError {
 		if i, err := strconv.ParseUint(l.token, 10, 32); err == nil {
 			rr.Inception = uint32(i)
 		} else {
-			return &ParseError{"", "bad RRSIG Inception", l}
+			return &ParseError{err: "bad RRSIG Inception", lex: l}
 		}
 	} else {
 		rr.Inception = i
@@ -961,7 +985,7 @@ func (rr *RRSIG) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next()
 	i, e3 := strconv.ParseUint(l.token, 10, 16)
 	if e3 != nil || l.err {
-		return &ParseError{"", "bad RRSIG KeyTag", l}
+		return &ParseError{err: "bad RRSIG KeyTag", lex: l}
 	}
 	rr.KeyTag = uint16(i)
 
@@ -970,7 +994,7 @@ func (rr *RRSIG) parse(c *zlexer, o string) *ParseError {
 	rr.SignerName = l.token
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad RRSIG SignerName", l}
+		return &ParseError{err: "bad RRSIG SignerName", lex: l}
 	}
 	rr.SignerName = name
 
@@ -983,11 +1007,13 @@ func (rr *RRSIG) parse(c *zlexer, o string) *ParseError {
 	return nil
 }
 
+func (rr *NXT) parse(c *zlexer, o string) *ParseError { return rr.NSEC.parse(c, o) }
+
 func (rr *NSEC) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad NSEC NextDomain", l}
+		return &ParseError{err: "bad NSEC NextDomain", lex: l}
 	}
 	rr.NextDomain = name
 
@@ -1005,12 +1031,12 @@ func (rr *NSEC) parse(c *zlexer, o string) *ParseError {
 			tokenUpper := strings.ToUpper(l.token)
 			if k, ok = StringToType[tokenUpper]; !ok {
 				if k, ok = typeToInt(l.token); !ok {
-					return &ParseError{"", "bad NSEC TypeBitMap", l}
+					return &ParseError{err: "bad NSEC TypeBitMap", lex: l}
 				}
 			}
 			rr.TypeBitMap = append(rr.TypeBitMap, k)
 		default:
-			return &ParseError{"", "bad NSEC TypeBitMap", l}
+			return &ParseError{err: "bad NSEC TypeBitMap", lex: l}
 		}
 		l, _ = c.Next()
 	}
@@ -1021,27 +1047,27 @@ func (rr *NSEC3) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 8)
 	if e != nil || l.err {
-		return &ParseError{"", "bad NSEC3 Hash", l}
+		return &ParseError{err: "bad NSEC3 Hash", lex: l}
 	}
 	rr.Hash = uint8(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad NSEC3 Flags", l}
+		return &ParseError{err: "bad NSEC3 Flags", lex: l}
 	}
 	rr.Flags = uint8(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	i, e2 := strconv.ParseUint(l.token, 10, 16)
 	if e2 != nil || l.err {
-		return &ParseError{"", "bad NSEC3 Iterations", l}
+		return &ParseError{err: "bad NSEC3 Iterations", lex: l}
 	}
 	rr.Iterations = uint16(i)
 	c.Next()
 	l, _ = c.Next()
 	if l.token == "" || l.err {
-		return &ParseError{"", "bad NSEC3 Salt", l}
+		return &ParseError{err: "bad NSEC3 Salt", lex: l}
 	}
 	if l.token != "-" {
 		rr.SaltLength = uint8(len(l.token)) / 2
@@ -1051,7 +1077,7 @@ func (rr *NSEC3) parse(c *zlexer, o string) *ParseError {
 	c.Next()
 	l, _ = c.Next()
 	if l.token == "" || l.err {
-		return &ParseError{"", "bad NSEC3 NextDomain", l}
+		return &ParseError{err: "bad NSEC3 NextDomain", lex: l}
 	}
 	rr.HashLength = 20 // Fix for NSEC3 (sha1 160 bits)
 	rr.NextDomain = l.token
@@ -1070,12 +1096,12 @@ func (rr *NSEC3) parse(c *zlexer, o string) *ParseError {
 			tokenUpper := strings.ToUpper(l.token)
 			if k, ok = StringToType[tokenUpper]; !ok {
 				if k, ok = typeToInt(l.token); !ok {
-					return &ParseError{"", "bad NSEC3 TypeBitMap", l}
+					return &ParseError{err: "bad NSEC3 TypeBitMap", lex: l}
 				}
 			}
 			rr.TypeBitMap = append(rr.TypeBitMap, k)
 		default:
-			return &ParseError{"", "bad NSEC3 TypeBitMap", l}
+			return &ParseError{err: "bad NSEC3 TypeBitMap", lex: l}
 		}
 		l, _ = c.Next()
 	}
@@ -1086,21 +1112,21 @@ func (rr *NSEC3PARAM) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 8)
 	if e != nil || l.err {
-		return &ParseError{"", "bad NSEC3PARAM Hash", l}
+		return &ParseError{err: "bad NSEC3PARAM Hash", lex: l}
 	}
 	rr.Hash = uint8(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad NSEC3PARAM Flags", l}
+		return &ParseError{err: "bad NSEC3PARAM Flags", lex: l}
 	}
 	rr.Flags = uint8(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	i, e2 := strconv.ParseUint(l.token, 10, 16)
 	if e2 != nil || l.err {
-		return &ParseError{"", "bad NSEC3PARAM Iterations", l}
+		return &ParseError{err: "bad NSEC3PARAM Iterations", lex: l}
 	}
 	rr.Iterations = uint16(i)
 	c.Next()
@@ -1115,7 +1141,7 @@ func (rr *NSEC3PARAM) parse(c *zlexer, o string) *ParseError {
 func (rr *EUI48) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	if len(l.token) != 17 || l.err {
-		return &ParseError{"", "bad EUI48 Address", l}
+		return &ParseError{err: "bad EUI48 Address", lex: l}
 	}
 	addr := make([]byte, 12)
 	dash := 0
@@ -1124,7 +1150,7 @@ func (rr *EUI48) parse(c *zlexer, o string) *ParseError {
 		addr[i+1] = l.token[i+1+dash]
 		dash++
 		if l.token[i+1+dash] != '-' {
-			return &ParseError{"", "bad EUI48 Address", l}
+			return &ParseError{err: "bad EUI48 Address", lex: l}
 		}
 	}
 	addr[10] = l.token[15]
@@ -1132,7 +1158,7 @@ func (rr *EUI48) parse(c *zlexer, o string) *ParseError {
 
 	i, e := strconv.ParseUint(string(addr), 16, 48)
 	if e != nil {
-		return &ParseError{"", "bad EUI48 Address", l}
+		return &ParseError{err: "bad EUI48 Address", lex: l}
 	}
 	rr.Address = i
 	return slurpRemainder(c)
@@ -1141,7 +1167,7 @@ func (rr *EUI48) parse(c *zlexer, o string) *ParseError {
 func (rr *EUI64) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	if len(l.token) != 23 || l.err {
-		return &ParseError{"", "bad EUI64 Address", l}
+		return &ParseError{err: "bad EUI64 Address", lex: l}
 	}
 	addr := make([]byte, 16)
 	dash := 0
@@ -1150,7 +1176,7 @@ func (rr *EUI64) parse(c *zlexer, o string) *ParseError {
 		addr[i+1] = l.token[i+1+dash]
 		dash++
 		if l.token[i+1+dash] != '-' {
-			return &ParseError{"", "bad EUI64 Address", l}
+			return &ParseError{err: "bad EUI64 Address", lex: l}
 		}
 	}
 	addr[14] = l.token[21]
@@ -1158,7 +1184,7 @@ func (rr *EUI64) parse(c *zlexer, o string) *ParseError {
 
 	i, e := strconv.ParseUint(string(addr), 16, 64)
 	if e != nil {
-		return &ParseError{"", "bad EUI68 Address", l}
+		return &ParseError{err: "bad EUI68 Address", lex: l}
 	}
 	rr.Address = i
 	return slurpRemainder(c)
@@ -1168,14 +1194,14 @@ func (rr *SSHFP) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 8)
 	if e != nil || l.err {
-		return &ParseError{"", "bad SSHFP Algorithm", l}
+		return &ParseError{err: "bad SSHFP Algorithm", lex: l}
 	}
 	rr.Algorithm = uint8(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad SSHFP Type", l}
+		return &ParseError{err: "bad SSHFP Type", lex: l}
 	}
 	rr.Type = uint8(i)
 	c.Next() // zBlank
@@ -1191,21 +1217,21 @@ func (rr *DNSKEY) parseDNSKEY(c *zlexer, o, typ string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad " + typ + " Flags", l}
+		return &ParseError{err: "bad " + typ + " Flags", lex: l}
 	}
 	rr.Flags = uint16(i)
 	c.Next()        // zBlank
 	l, _ = c.Next() // zString
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad " + typ + " Protocol", l}
+		return &ParseError{err: "bad " + typ + " Protocol", lex: l}
 	}
 	rr.Protocol = uint8(i)
 	c.Next()        // zBlank
 	l, _ = c.Next() // zString
 	i, e2 := strconv.ParseUint(l.token, 10, 8)
 	if e2 != nil || l.err {
-		return &ParseError{"", "bad " + typ + " Algorithm", l}
+		return &ParseError{err: "bad " + typ + " Algorithm", lex: l}
 	}
 	rr.Algorithm = uint8(i)
 	s, e3 := endingToString(c, "bad "+typ+" PublicKey")
@@ -1227,7 +1253,7 @@ func (rr *IPSECKEY) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	num, err := strconv.ParseUint(l.token, 10, 8)
 	if err != nil || l.err {
-		return &ParseError{"", "bad IPSECKEY value", l}
+		return &ParseError{err: "bad IPSECKEY value", lex: l}
 	}
 	rr.Precedence = uint8(num)
 	c.Next() // zBlank
@@ -1235,7 +1261,7 @@ func (rr *IPSECKEY) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next()
 	num, err = strconv.ParseUint(l.token, 10, 8)
 	if err != nil || l.err {
-		return &ParseError{"", "bad IPSECKEY value", l}
+		return &ParseError{err: "bad IPSECKEY value", lex: l}
 	}
 	rr.GatewayType = uint8(num)
 	c.Next() // zBlank
@@ -1243,19 +1269,19 @@ func (rr *IPSECKEY) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next()
 	num, err = strconv.ParseUint(l.token, 10, 8)
 	if err != nil || l.err {
-		return &ParseError{"", "bad IPSECKEY value", l}
+		return &ParseError{err: "bad IPSECKEY value", lex: l}
 	}
 	rr.Algorithm = uint8(num)
 	c.Next() // zBlank
 
 	l, _ = c.Next()
 	if l.err {
-		return &ParseError{"", "bad IPSECKEY gateway", l}
+		return &ParseError{err: "bad IPSECKEY gateway", lex: l}
 	}
 
 	rr.GatewayAddr, rr.GatewayHost, err = parseAddrHostUnion(l.token, o, rr.GatewayType)
 	if err != nil {
-		return &ParseError{"", "IPSECKEY " + err.Error(), l}
+		return &ParseError{wrappedErr: fmt.Errorf("IPSECKEY %w", err), lex: l}
 	}
 
 	c.Next() // zBlank
@@ -1272,14 +1298,14 @@ func (rr *AMTRELAY) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	num, err := strconv.ParseUint(l.token, 10, 8)
 	if err != nil || l.err {
-		return &ParseError{"", "bad AMTRELAY value", l}
+		return &ParseError{err: "bad AMTRELAY value", lex: l}
 	}
 	rr.Precedence = uint8(num)
 	c.Next() // zBlank
 
 	l, _ = c.Next()
 	if l.err || !(l.token == "0" || l.token == "1") {
-		return &ParseError{"", "bad discovery value", l}
+		return &ParseError{err: "bad discovery value", lex: l}
 	}
 	if l.token == "1" {
 		rr.GatewayType = 0x80
@@ -1290,19 +1316,19 @@ func (rr *AMTRELAY) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next()
 	num, err = strconv.ParseUint(l.token, 10, 8)
 	if err != nil || l.err {
-		return &ParseError{"", "bad AMTRELAY value", l}
+		return &ParseError{err: "bad AMTRELAY value", lex: l}
 	}
 	rr.GatewayType |= uint8(num)
 	c.Next() // zBlank
 
 	l, _ = c.Next()
 	if l.err {
-		return &ParseError{"", "bad AMTRELAY gateway", l}
+		return &ParseError{err: "bad AMTRELAY gateway", lex: l}
 	}
 
 	rr.GatewayAddr, rr.GatewayHost, err = parseAddrHostUnion(l.token, o, rr.GatewayType&0x7f)
 	if err != nil {
-		return &ParseError{"", "AMTRELAY " + err.Error(), l}
+		return &ParseError{wrappedErr: fmt.Errorf("AMTRELAY %w", err), lex: l}
 	}
 
 	return slurpRemainder(c)
@@ -1338,21 +1364,21 @@ func (rr *RKEY) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad RKEY Flags", l}
+		return &ParseError{err: "bad RKEY Flags", lex: l}
 	}
 	rr.Flags = uint16(i)
 	c.Next()        // zBlank
 	l, _ = c.Next() // zString
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad RKEY Protocol", l}
+		return &ParseError{err: "bad RKEY Protocol", lex: l}
 	}
 	rr.Protocol = uint8(i)
 	c.Next()        // zBlank
 	l, _ = c.Next() // zString
 	i, e2 := strconv.ParseUint(l.token, 10, 8)
 	if e2 != nil || l.err {
-		return &ParseError{"", "bad RKEY Algorithm", l}
+		return &ParseError{err: "bad RKEY Algorithm", lex: l}
 	}
 	rr.Algorithm = uint8(i)
 	s, e3 := endingToString(c, "bad RKEY PublicKey")
@@ -1385,21 +1411,21 @@ func (rr *GPOS) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	_, e := strconv.ParseFloat(l.token, 64)
 	if e != nil || l.err {
-		return &ParseError{"", "bad GPOS Longitude", l}
+		return &ParseError{err: "bad GPOS Longitude", lex: l}
 	}
 	rr.Longitude = l.token
 	c.Next() // zBlank
 	l, _ = c.Next()
 	_, e1 := strconv.ParseFloat(l.token, 64)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad GPOS Latitude", l}
+		return &ParseError{err: "bad GPOS Latitude", lex: l}
 	}
 	rr.Latitude = l.token
 	c.Next() // zBlank
 	l, _ = c.Next()
 	_, e2 := strconv.ParseFloat(l.token, 64)
 	if e2 != nil || l.err {
-		return &ParseError{"", "bad GPOS Altitude", l}
+		return &ParseError{err: "bad GPOS Altitude", lex: l}
 	}
 	rr.Altitude = l.token
 	return slurpRemainder(c)
@@ -1409,7 +1435,7 @@ func (rr *DS) parseDS(c *zlexer, o, typ string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad " + typ + " KeyTag", l}
+		return &ParseError{err: "bad " + typ + " KeyTag", lex: l}
 	}
 	rr.KeyTag = uint16(i)
 	c.Next() // zBlank
@@ -1418,7 +1444,7 @@ func (rr *DS) parseDS(c *zlexer, o, typ string) *ParseError {
 		tokenUpper := strings.ToUpper(l.token)
 		i, ok := StringToAlgorithm[tokenUpper]
 		if !ok || l.err {
-			return &ParseError{"", "bad " + typ + " Algorithm", l}
+			return &ParseError{err: "bad " + typ + " Algorithm", lex: l}
 		}
 		rr.Algorithm = i
 	} else {
@@ -1428,7 +1454,7 @@ func (rr *DS) parseDS(c *zlexer, o, typ string) *ParseError {
 	l, _ = c.Next()
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad " + typ + " DigestType", l}
+		return &ParseError{err: "bad " + typ + " DigestType", lex: l}
 	}
 	rr.DigestType = uint8(i)
 	s, e2 := endingToString(c, "bad "+typ+" Digest")
@@ -1443,7 +1469,7 @@ func (rr *TA) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad TA KeyTag", l}
+		return &ParseError{err: "bad TA KeyTag", lex: l}
 	}
 	rr.KeyTag = uint16(i)
 	c.Next() // zBlank
@@ -1452,7 +1478,7 @@ func (rr *TA) parse(c *zlexer, o string) *ParseError {
 		tokenUpper := strings.ToUpper(l.token)
 		i, ok := StringToAlgorithm[tokenUpper]
 		if !ok || l.err {
-			return &ParseError{"", "bad TA Algorithm", l}
+			return &ParseError{err: "bad TA Algorithm", lex: l}
 		}
 		rr.Algorithm = i
 	} else {
@@ -1462,7 +1488,7 @@ func (rr *TA) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next()
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad TA DigestType", l}
+		return &ParseError{err: "bad TA DigestType", lex: l}
 	}
 	rr.DigestType = uint8(i)
 	s, e2 := endingToString(c, "bad TA Digest")
@@ -1477,21 +1503,21 @@ func (rr *TLSA) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 8)
 	if e != nil || l.err {
-		return &ParseError{"", "bad TLSA Usage", l}
+		return &ParseError{err: "bad TLSA Usage", lex: l}
 	}
 	rr.Usage = uint8(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad TLSA Selector", l}
+		return &ParseError{err: "bad TLSA Selector", lex: l}
 	}
 	rr.Selector = uint8(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	i, e2 := strconv.ParseUint(l.token, 10, 8)
 	if e2 != nil || l.err {
-		return &ParseError{"", "bad TLSA MatchingType", l}
+		return &ParseError{err: "bad TLSA MatchingType", lex: l}
 	}
 	rr.MatchingType = uint8(i)
 	// So this needs be e2 (i.e. different than e), because...??t
@@ -1507,21 +1533,21 @@ func (rr *SMIMEA) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 8)
 	if e != nil || l.err {
-		return &ParseError{"", "bad SMIMEA Usage", l}
+		return &ParseError{err: "bad SMIMEA Usage", lex: l}
 	}
 	rr.Usage = uint8(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad SMIMEA Selector", l}
+		return &ParseError{err: "bad SMIMEA Selector", lex: l}
 	}
 	rr.Selector = uint8(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	i, e2 := strconv.ParseUint(l.token, 10, 8)
 	if e2 != nil || l.err {
-		return &ParseError{"", "bad SMIMEA MatchingType", l}
+		return &ParseError{err: "bad SMIMEA MatchingType", lex: l}
 	}
 	rr.MatchingType = uint8(i)
 	// So this needs be e2 (i.e. different than e), because...??t
@@ -1536,14 +1562,14 @@ func (rr *SMIMEA) parse(c *zlexer, o string) *ParseError {
 func (rr *RFC3597) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	if l.token != "\\#" {
-		return &ParseError{"", "bad RFC3597 Rdata", l}
+		return &ParseError{err: "bad RFC3597 Rdata", lex: l}
 	}
 
 	c.Next() // zBlank
 	l, _ = c.Next()
 	rdlength, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad RFC3597 Rdata ", l}
+		return &ParseError{err: "bad RFC3597 Rdata ", lex: l}
 	}
 
 	s, e1 := endingToString(c, "bad RFC3597 Rdata")
@@ -1551,7 +1577,7 @@ func (rr *RFC3597) parse(c *zlexer, o string) *ParseError {
 		return e1
 	}
 	if int(rdlength)*2 != len(s) {
-		return &ParseError{"", "bad RFC3597 Rdata", l}
+		return &ParseError{err: "bad RFC3597 Rdata", lex: l}
 	}
 	rr.Rdata = s
 	return nil
@@ -1599,14 +1625,14 @@ func (rr *URI) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad URI Priority", l}
+		return &ParseError{err: "bad URI Priority", lex: l}
 	}
 	rr.Priority = uint16(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	i, e1 := strconv.ParseUint(l.token, 10, 16)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad URI Weight", l}
+		return &ParseError{err: "bad URI Weight", lex: l}
 	}
 	rr.Weight = uint16(i)
 
@@ -1616,7 +1642,7 @@ func (rr *URI) parse(c *zlexer, o string) *ParseError {
 		return e2
 	}
 	if len(s) != 1 {
-		return &ParseError{"", "bad URI Target", l}
+		return &ParseError{err: "bad URI Target", lex: l}
 	}
 	rr.Target = s[0]
 	return nil
@@ -1636,7 +1662,7 @@ func (rr *NID) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad NID Preference", l}
+		return &ParseError{err: "bad NID Preference", lex: l}
 	}
 	rr.Preference = uint16(i)
 	c.Next()        // zBlank
@@ -1653,14 +1679,14 @@ func (rr *L32) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad L32 Preference", l}
+		return &ParseError{err: "bad L32 Preference", lex: l}
 	}
 	rr.Preference = uint16(i)
 	c.Next()        // zBlank
 	l, _ = c.Next() // zString
 	rr.Locator32 = net.ParseIP(l.token)
 	if rr.Locator32 == nil || l.err {
-		return &ParseError{"", "bad L32 Locator", l}
+		return &ParseError{err: "bad L32 Locator", lex: l}
 	}
 	return slurpRemainder(c)
 }
@@ -1669,7 +1695,7 @@ func (rr *LP) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad LP Preference", l}
+		return &ParseError{err: "bad LP Preference", lex: l}
 	}
 	rr.Preference = uint16(i)
 
@@ -1678,7 +1704,7 @@ func (rr *LP) parse(c *zlexer, o string) *ParseError {
 	rr.Fqdn = l.token
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{"", "bad LP Fqdn", l}
+		return &ParseError{err: "bad LP Fqdn", lex: l}
 	}
 	rr.Fqdn = name
 	return slurpRemainder(c)
@@ -1688,7 +1714,7 @@ func (rr *L64) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad L64 Preference", l}
+		return &ParseError{err: "bad L64 Preference", lex: l}
 	}
 	rr.Preference = uint16(i)
 	c.Next()        // zBlank
@@ -1705,7 +1731,7 @@ func (rr *UID) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 32)
 	if e != nil || l.err {
-		return &ParseError{"", "bad UID Uid", l}
+		return &ParseError{err: "bad UID Uid", lex: l}
 	}
 	rr.Uid = uint32(i)
 	return slurpRemainder(c)
@@ -1715,7 +1741,7 @@ func (rr *GID) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 32)
 	if e != nil || l.err {
-		return &ParseError{"", "bad GID Gid", l}
+		return &ParseError{err: "bad GID Gid", lex: l}
 	}
 	rr.Gid = uint32(i)
 	return slurpRemainder(c)
@@ -1737,7 +1763,7 @@ func (rr *PX) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{"", "bad PX Preference", l}
+		return &ParseError{err: "bad PX Preference", lex: l}
 	}
 	rr.Preference = uint16(i)
 
@@ -1746,7 +1772,7 @@ func (rr *PX) parse(c *zlexer, o string) *ParseError {
 	rr.Map822 = l.token
 	map822, map822Ok := toAbsoluteName(l.token, o)
 	if l.err || !map822Ok {
-		return &ParseError{"", "bad PX Map822", l}
+		return &ParseError{err: "bad PX Map822", lex: l}
 	}
 	rr.Map822 = map822
 
@@ -1755,7 +1781,7 @@ func (rr *PX) parse(c *zlexer, o string) *ParseError {
 	rr.Mapx400 = l.token
 	mapx400, mapx400Ok := toAbsoluteName(l.token, o)
 	if l.err || !mapx400Ok {
-		return &ParseError{"", "bad PX Mapx400", l}
+		return &ParseError{err: "bad PX Mapx400", lex: l}
 	}
 	rr.Mapx400 = mapx400
 	return slurpRemainder(c)
@@ -1765,14 +1791,14 @@ func (rr *CAA) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 8)
 	if e != nil || l.err {
-		return &ParseError{"", "bad CAA Flag", l}
+		return &ParseError{err: "bad CAA Flag", lex: l}
 	}
 	rr.Flag = uint8(i)
 
 	c.Next()        // zBlank
 	l, _ = c.Next() // zString
 	if l.value != zString {
-		return &ParseError{"", "bad CAA Tag", l}
+		return &ParseError{err: "bad CAA Tag", lex: l}
 	}
 	rr.Tag = l.token
 
@@ -1782,7 +1808,7 @@ func (rr *CAA) parse(c *zlexer, o string) *ParseError {
 		return e1
 	}
 	if len(s) != 1 {
-		return &ParseError{"", "bad CAA Value", l}
+		return &ParseError{err: "bad CAA Value", lex: l}
 	}
 	rr.Value = s[0]
 	return nil
@@ -1793,7 +1819,7 @@ func (rr *TKEY) parse(c *zlexer, o string) *ParseError {
 
 	// Algorithm
 	if l.value != zString {
-		return &ParseError{"", "bad TKEY algorithm", l}
+		return &ParseError{err: "bad TKEY algorithm", lex: l}
 	}
 	rr.Algorithm = l.token
 	c.Next() // zBlank
@@ -1802,13 +1828,13 @@ func (rr *TKEY) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 8)
 	if e != nil || l.err {
-		return &ParseError{"", "bad TKEY key length", l}
+		return &ParseError{err: "bad TKEY key length", lex: l}
 	}
 	rr.KeySize = uint16(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	if l.value != zString {
-		return &ParseError{"", "bad TKEY key", l}
+		return &ParseError{err: "bad TKEY key", lex: l}
 	}
 	rr.Key = l.token
 	c.Next() // zBlank
@@ -1817,13 +1843,13 @@ func (rr *TKEY) parse(c *zlexer, o string) *ParseError {
 	l, _ = c.Next()
 	i, e1 := strconv.ParseUint(l.token, 10, 8)
 	if e1 != nil || l.err {
-		return &ParseError{"", "bad TKEY otherdata length", l}
+		return &ParseError{err: "bad TKEY otherdata length", lex: l}
 	}
 	rr.OtherLen = uint16(i)
 	c.Next() // zBlank
 	l, _ = c.Next()
 	if l.value != zString {
-		return &ParseError{"", "bad TKEY otherday", l}
+		return &ParseError{err: "bad TKEY otherday", lex: l}
 	}
 	rr.OtherData = l.token
 	return nil
@@ -1841,14 +1867,14 @@ func (rr *APL) parse(c *zlexer, o string) *ParseError {
 			continue
 		}
 		if l.value != zString {
-			return &ParseError{"", "unexpected APL field", l}
+			return &ParseError{err: "unexpected APL field", lex: l}
 		}
 
 		// Expected format: [!]afi:address/prefix
 
 		colon := strings.IndexByte(l.token, ':')
 		if colon == -1 {
-			return &ParseError{"", "missing colon in APL field", l}
+			return &ParseError{err: "missing colon in APL field", lex: l}
 		}
 
 		family, cidr := l.token[:colon], l.token[colon+1:]
@@ -1861,7 +1887,7 @@ func (rr *APL) parse(c *zlexer, o string) *ParseError {
 
 		afi, e := strconv.ParseUint(family, 10, 16)
 		if e != nil {
-			return &ParseError{"", "failed to parse APL family: " + e.Error(), l}
+			return &ParseError{wrappedErr: fmt.Errorf("failed to parse APL family: %w", e), lex: l}
 		}
 		var addrLen int
 		switch afi {
@@ -1870,19 +1896,19 @@ func (rr *APL) parse(c *zlexer, o string) *ParseError {
 		case 2:
 			addrLen = net.IPv6len
 		default:
-			return &ParseError{"", "unrecognized APL family", l}
+			return &ParseError{err: "unrecognized APL family", lex: l}
 		}
 
 		ip, subnet, e1 := net.ParseCIDR(cidr)
 		if e1 != nil {
-			return &ParseError{"", "failed to parse APL address: " + e1.Error(), l}
+			return &ParseError{wrappedErr: fmt.Errorf("failed to parse APL address: %w", e1), lex: l}
 		}
 		if !ip.Equal(subnet.IP) {
-			return &ParseError{"", "extra bits in APL address", l}
+			return &ParseError{err: "extra bits in APL address", lex: l}
 		}
 
 		if len(subnet.IP) != addrLen {
-			return &ParseError{"", "address mismatch with the APL family", l}
+			return &ParseError{err: "address mismatch with the APL family", lex: l}
 		}
 
 		prefixes = append(prefixes, APLPrefix{
diff --git a/vendor/github.com/miekg/dns/svcb.go b/vendor/github.com/miekg/dns/svcb.go
index d38aa2f05cb..c1a740b6840 100644
--- a/vendor/github.com/miekg/dns/svcb.go
+++ b/vendor/github.com/miekg/dns/svcb.go
@@ -85,7 +85,7 @@ func (rr *SVCB) parse(c *zlexer, o string) *ParseError {
 	l, _ := c.Next()
 	i, e := strconv.ParseUint(l.token, 10, 16)
 	if e != nil || l.err {
-		return &ParseError{l.token, "bad SVCB priority", l}
+		return &ParseError{file: l.token, err: "bad SVCB priority", lex: l}
 	}
 	rr.Priority = uint16(i)
 
@@ -95,7 +95,7 @@ func (rr *SVCB) parse(c *zlexer, o string) *ParseError {
 
 	name, nameOk := toAbsoluteName(l.token, o)
 	if l.err || !nameOk {
-		return &ParseError{l.token, "bad SVCB Target", l}
+		return &ParseError{file: l.token, err: "bad SVCB Target", lex: l}
 	}
 	rr.Target = name
 
@@ -111,7 +111,7 @@ func (rr *SVCB) parse(c *zlexer, o string) *ParseError {
 			if !canHaveNextKey {
 				// The key we can now read was probably meant to be
 				// a part of the last value.
-				return &ParseError{l.token, "bad SVCB value quotation", l}
+				return &ParseError{file: l.token, err: "bad SVCB value quotation", lex: l}
 			}
 
 			// In key=value pairs, value does not have to be quoted unless value
@@ -124,7 +124,7 @@ func (rr *SVCB) parse(c *zlexer, o string) *ParseError {
 				// Key with no value and no equality sign
 				key = l.token
 			} else if idx == 0 {
-				return &ParseError{l.token, "bad SVCB key", l}
+				return &ParseError{file: l.token, err: "bad SVCB key", lex: l}
 			} else {
 				key, value = l.token[:idx], l.token[idx+1:]
 
@@ -144,30 +144,30 @@ func (rr *SVCB) parse(c *zlexer, o string) *ParseError {
 							value = l.token
 							l, _ = c.Next()
 							if l.value != zQuote {
-								return &ParseError{l.token, "SVCB unterminated value", l}
+								return &ParseError{file: l.token, err: "SVCB unterminated value", lex: l}
 							}
 						case zQuote:
 							// There's nothing in double quotes.
 						default:
-							return &ParseError{l.token, "bad SVCB value", l}
+							return &ParseError{file: l.token, err: "bad SVCB value", lex: l}
 						}
 					}
 				}
 			}
 			kv := makeSVCBKeyValue(svcbStringToKey(key))
 			if kv == nil {
-				return &ParseError{l.token, "bad SVCB key", l}
+				return &ParseError{file: l.token, err: "bad SVCB key", lex: l}
 			}
 			if err := kv.parse(value); err != nil {
-				return &ParseError{l.token, err.Error(), l}
+				return &ParseError{file: l.token, wrappedErr: err, lex: l}
 			}
 			xs = append(xs, kv)
 		case zQuote:
-			return &ParseError{l.token, "SVCB key can't contain double quotes", l}
+			return &ParseError{file: l.token, err: "SVCB key can't contain double quotes", lex: l}
 		case zBlank:
 			canHaveNextKey = true
 		default:
-			return &ParseError{l.token, "bad SVCB values", l}
+			return &ParseError{file: l.token, err: "bad SVCB values", lex: l}
 		}
 		l, _ = c.Next()
 	}
diff --git a/vendor/github.com/miekg/dns/types.go b/vendor/github.com/miekg/dns/types.go
index c9a03dec6d8..8e3129cbd25 100644
--- a/vendor/github.com/miekg/dns/types.go
+++ b/vendor/github.com/miekg/dns/types.go
@@ -135,8 +135,8 @@ const (
 	RcodeNXRrset        = 8  // NXRRSet   - RR Set that should exist does not [DNS Update]
 	RcodeNotAuth        = 9  // NotAuth   - Server Not Authoritative for zone [DNS Update]
 	RcodeNotZone        = 10 // NotZone   - Name not contained in zone        [DNS Update/TSIG]
-	RcodeBadSig         = 16 // BADSIG    - TSIG Signature Failure            [TSIG]
-	RcodeBadVers        = 16 // BADVERS   - Bad OPT Version                   [EDNS0]
+	RcodeBadSig         = 16 // BADSIG    - TSIG Signature Failure            [TSIG]  https://www.rfc-editor.org/rfc/rfc6895.html#section-2.3
+	RcodeBadVers        = 16 // BADVERS   - Bad OPT Version                   [EDNS0] https://www.rfc-editor.org/rfc/rfc6895.html#section-2.3
 	RcodeBadKey         = 17 // BADKEY    - Key not recognized                [TSIG]
 	RcodeBadTime        = 18 // BADTIME   - Signature out of time window      [TSIG]
 	RcodeBadMode        = 19 // BADMODE   - Bad TKEY Mode                     [TKEY]
@@ -402,6 +402,17 @@ func (rr *X25) String() string {
 	return rr.Hdr.String() + rr.PSDNAddress
 }
 
+// ISDN RR. See RFC 1183, Section 3.2.
+type ISDN struct {
+	Hdr        RR_Header
+	Address    string
+	SubAddress string
+}
+
+func (rr *ISDN) String() string {
+	return rr.Hdr.String() + sprintTxt([]string{rr.Address, rr.SubAddress})
+}
+
 // RT RR. See RFC 1183, Section 3.3.
 type RT struct {
 	Hdr        RR_Header
@@ -786,7 +797,7 @@ func (rr *GPOS) String() string {
 	return rr.Hdr.String() + rr.Longitude + " " + rr.Latitude + " " + rr.Altitude
 }
 
-// LOC RR. See RFC RFC 1876.
+// LOC RR. See RFC 1876.
 type LOC struct {
 	Hdr       RR_Header
 	Version   uint8
@@ -898,6 +909,11 @@ func (rr *RRSIG) String() string {
 	return s
 }
 
+// NXT RR. See RFC 2535.
+type NXT struct {
+	NSEC
+}
+
 // NSEC RR. See RFC 4034 and RFC 3755.
 type NSEC struct {
 	Hdr        RR_Header
@@ -982,7 +998,7 @@ func (rr *TALINK) String() string {
 		sprintName(rr.PreviousName) + " " + sprintName(rr.NextName)
 }
 
-// SSHFP RR. See RFC RFC 4255.
+// SSHFP RR. See RFC 4255.
 type SSHFP struct {
 	Hdr         RR_Header
 	Algorithm   uint8
@@ -996,7 +1012,7 @@ func (rr *SSHFP) String() string {
 		" " + strings.ToUpper(rr.FingerPrint)
 }
 
-// KEY RR. See RFC RFC 2535.
+// KEY RR. See RFC 2535.
 type KEY struct {
 	DNSKEY
 }
@@ -1306,7 +1322,7 @@ type NINFO struct {
 
 func (rr *NINFO) String() string { return rr.Hdr.String() + sprintTxt(rr.ZSData) }
 
-// NID RR. See RFC RFC 6742.
+// NID RR. See RFC 6742.
 type NID struct {
 	Hdr        RR_Header
 	Preference uint16
diff --git a/vendor/github.com/miekg/dns/version.go b/vendor/github.com/miekg/dns/version.go
index 9fd300f6606..dc34e5902be 100644
--- a/vendor/github.com/miekg/dns/version.go
+++ b/vendor/github.com/miekg/dns/version.go
@@ -3,7 +3,7 @@ package dns
 import "fmt"
 
 // Version is current version of this library.
-var Version = v{1, 1, 57}
+var Version = v{1, 1, 58}
 
 // v holds the version of this library.
 type v struct {
diff --git a/vendor/github.com/miekg/dns/zduplicate.go b/vendor/github.com/miekg/dns/zduplicate.go
index 450bbbc29d2..03029fb3ebb 100644
--- a/vendor/github.com/miekg/dns/zduplicate.go
+++ b/vendor/github.com/miekg/dns/zduplicate.go
@@ -481,6 +481,21 @@ func (r1 *IPSECKEY) isDuplicate(_r2 RR) bool {
 	return true
 }
 
+func (r1 *ISDN) isDuplicate(_r2 RR) bool {
+	r2, ok := _r2.(*ISDN)
+	if !ok {
+		return false
+	}
+	_ = r2
+	if r1.Address != r2.Address {
+		return false
+	}
+	if r1.SubAddress != r2.SubAddress {
+		return false
+	}
+	return true
+}
+
 func (r1 *KEY) isDuplicate(_r2 RR) bool {
 	r2, ok := _r2.(*KEY)
 	if !ok {
@@ -871,6 +886,26 @@ func (r1 *NULL) isDuplicate(_r2 RR) bool {
 	return true
 }
 
+func (r1 *NXT) isDuplicate(_r2 RR) bool {
+	r2, ok := _r2.(*NXT)
+	if !ok {
+		return false
+	}
+	_ = r2
+	if !isDuplicateName(r1.NextDomain, r2.NextDomain) {
+		return false
+	}
+	if len(r1.TypeBitMap) != len(r2.TypeBitMap) {
+		return false
+	}
+	for i := 0; i < len(r1.TypeBitMap); i++ {
+		if r1.TypeBitMap[i] != r2.TypeBitMap[i] {
+			return false
+		}
+	}
+	return true
+}
+
 func (r1 *OPENPGPKEY) isDuplicate(_r2 RR) bool {
 	r2, ok := _r2.(*OPENPGPKEY)
 	if !ok {
diff --git a/vendor/github.com/miekg/dns/zmsg.go b/vendor/github.com/miekg/dns/zmsg.go
index 3ea0eb423a8..39b3bc8102e 100644
--- a/vendor/github.com/miekg/dns/zmsg.go
+++ b/vendor/github.com/miekg/dns/zmsg.go
@@ -372,6 +372,18 @@ func (rr *IPSECKEY) pack(msg []byte, off int, compression compressionMap, compre
 	return off, nil
 }
 
+func (rr *ISDN) pack(msg []byte, off int, compression compressionMap, compress bool) (off1 int, err error) {
+	off, err = packString(rr.Address, msg, off)
+	if err != nil {
+		return off, err
+	}
+	off, err = packString(rr.SubAddress, msg, off)
+	if err != nil {
+		return off, err
+	}
+	return off, nil
+}
+
 func (rr *KEY) pack(msg []byte, off int, compression compressionMap, compress bool) (off1 int, err error) {
 	off, err = packUint16(rr.Flags, msg, off)
 	if err != nil {
@@ -694,6 +706,18 @@ func (rr *NULL) pack(msg []byte, off int, compression compressionMap, compress b
 	return off, nil
 }
 
+func (rr *NXT) pack(msg []byte, off int, compression compressionMap, compress bool) (off1 int, err error) {
+	off, err = packDomainName(rr.NextDomain, msg, off, compression, false)
+	if err != nil {
+		return off, err
+	}
+	off, err = packDataNsec(rr.TypeBitMap, msg, off)
+	if err != nil {
+		return off, err
+	}
+	return off, nil
+}
+
 func (rr *OPENPGPKEY) pack(msg []byte, off int, compression compressionMap, compress bool) (off1 int, err error) {
 	off, err = packStringBase64(rr.PublicKey, msg, off)
 	if err != nil {
@@ -1746,6 +1770,24 @@ func (rr *IPSECKEY) unpack(msg []byte, off int) (off1 int, err error) {
 	return off, nil
 }
 
+func (rr *ISDN) unpack(msg []byte, off int) (off1 int, err error) {
+	rdStart := off
+	_ = rdStart
+
+	rr.Address, off, err = unpackString(msg, off)
+	if err != nil {
+		return off, err
+	}
+	if off == len(msg) {
+		return off, nil
+	}
+	rr.SubAddress, off, err = unpackString(msg, off)
+	if err != nil {
+		return off, err
+	}
+	return off, nil
+}
+
 func (rr *KEY) unpack(msg []byte, off int) (off1 int, err error) {
 	rdStart := off
 	_ = rdStart
@@ -2224,6 +2266,24 @@ func (rr *NULL) unpack(msg []byte, off int) (off1 int, err error) {
 	return off, nil
 }
 
+func (rr *NXT) unpack(msg []byte, off int) (off1 int, err error) {
+	rdStart := off
+	_ = rdStart
+
+	rr.NextDomain, off, err = UnpackDomainName(msg, off)
+	if err != nil {
+		return off, err
+	}
+	if off == len(msg) {
+		return off, nil
+	}
+	rr.TypeBitMap, off, err = unpackDataNsec(msg, off)
+	if err != nil {
+		return off, err
+	}
+	return off, nil
+}
+
 func (rr *OPENPGPKEY) unpack(msg []byte, off int) (off1 int, err error) {
 	rdStart := off
 	_ = rdStart
diff --git a/vendor/github.com/miekg/dns/ztypes.go b/vendor/github.com/miekg/dns/ztypes.go
index 1b6f43200f7..2c70fc44d6f 100644
--- a/vendor/github.com/miekg/dns/ztypes.go
+++ b/vendor/github.com/miekg/dns/ztypes.go
@@ -36,6 +36,7 @@ var TypeToRR = map[uint16]func() RR{
 	TypeHIP:        func() RR { return new(HIP) },
 	TypeHTTPS:      func() RR { return new(HTTPS) },
 	TypeIPSECKEY:   func() RR { return new(IPSECKEY) },
+	TypeISDN:       func() RR { return new(ISDN) },
 	TypeKEY:        func() RR { return new(KEY) },
 	TypeKX:         func() RR { return new(KX) },
 	TypeL32:        func() RR { return new(L32) },
@@ -59,6 +60,7 @@ var TypeToRR = map[uint16]func() RR{
 	TypeNSEC3:      func() RR { return new(NSEC3) },
 	TypeNSEC3PARAM: func() RR { return new(NSEC3PARAM) },
 	TypeNULL:       func() RR { return new(NULL) },
+	TypeNXT:        func() RR { return new(NXT) },
 	TypeOPENPGPKEY: func() RR { return new(OPENPGPKEY) },
 	TypeOPT:        func() RR { return new(OPT) },
 	TypePTR:        func() RR { return new(PTR) },
@@ -204,6 +206,7 @@ func (rr *HINFO) Header() *RR_Header      { return &rr.Hdr }
 func (rr *HIP) Header() *RR_Header        { return &rr.Hdr }
 func (rr *HTTPS) Header() *RR_Header      { return &rr.Hdr }
 func (rr *IPSECKEY) Header() *RR_Header   { return &rr.Hdr }
+func (rr *ISDN) Header() *RR_Header       { return &rr.Hdr }
 func (rr *KEY) Header() *RR_Header        { return &rr.Hdr }
 func (rr *KX) Header() *RR_Header         { return &rr.Hdr }
 func (rr *L32) Header() *RR_Header        { return &rr.Hdr }
@@ -227,6 +230,7 @@ func (rr *NSEC) Header() *RR_Header       { return &rr.Hdr }
 func (rr *NSEC3) Header() *RR_Header      { return &rr.Hdr }
 func (rr *NSEC3PARAM) Header() *RR_Header { return &rr.Hdr }
 func (rr *NULL) Header() *RR_Header       { return &rr.Hdr }
+func (rr *NXT) Header() *RR_Header        { return &rr.Hdr }
 func (rr *OPENPGPKEY) Header() *RR_Header { return &rr.Hdr }
 func (rr *OPT) Header() *RR_Header        { return &rr.Hdr }
 func (rr *PTR) Header() *RR_Header        { return &rr.Hdr }
@@ -437,6 +441,13 @@ func (rr *IPSECKEY) len(off int, compression map[string]struct{}) int {
 	return l
 }
 
+func (rr *ISDN) len(off int, compression map[string]struct{}) int {
+	l := rr.Hdr.len(off, compression)
+	l += len(rr.Address) + 1
+	l += len(rr.SubAddress) + 1
+	return l
+}
+
 func (rr *KX) len(off int, compression map[string]struct{}) int {
 	l := rr.Hdr.len(off, compression)
 	l += 2 // Preference
@@ -966,6 +977,10 @@ func (rr *IPSECKEY) copy() RR {
 	}
 }
 
+func (rr *ISDN) copy() RR {
+	return &ISDN{rr.Hdr, rr.Address, rr.SubAddress}
+}
+
 func (rr *KEY) copy() RR {
 	return &KEY{*rr.DNSKEY.copy().(*DNSKEY)}
 }
@@ -1092,6 +1107,10 @@ func (rr *NULL) copy() RR {
 	return &NULL{rr.Hdr, rr.Data}
 }
 
+func (rr *NXT) copy() RR {
+	return &NXT{*rr.NSEC.copy().(*NSEC)}
+}
+
 func (rr *OPENPGPKEY) copy() RR {
 	return &OPENPGPKEY{rr.Hdr, rr.PublicKey}
 }
diff --git a/vendor/github.com/nsf/jsondiff/.atom-build.json b/vendor/github.com/nsf/jsondiff/.atom-build.json
new file mode 100644
index 00000000000..5de8573d26c
--- /dev/null
+++ b/vendor/github.com/nsf/jsondiff/.atom-build.json
@@ -0,0 +1,18 @@
+{
+    "cmd": "go",
+    "name": "go install",
+    "sh": false,
+    "args": ["install"],
+    "cwd": "{PROJECT_PATH}",
+    "errorMatch": [
+        "(?<file>[\\/0-9a-zA-Z\\._]+):(?<line>\\d+)"
+    ],
+    "targets": {
+        "go test": {
+            "cmd": "go",
+            "sh": false,
+            "args": ["test"],
+            "cwd": "{PROJECT_PATH}"
+        }
+    }
+}
diff --git a/vendor/github.com/nsf/jsondiff/.gitignore b/vendor/github.com/nsf/jsondiff/.gitignore
new file mode 100644
index 00000000000..54970529083
--- /dev/null
+++ b/vendor/github.com/nsf/jsondiff/.gitignore
@@ -0,0 +1,2 @@
+/webdemo/webdemo.js
+/webdemo/webdemo.js.map
diff --git a/vendor/github.com/nsf/jsondiff/LICENSE b/vendor/github.com/nsf/jsondiff/LICENSE
new file mode 100644
index 00000000000..90d59f5e3e7
--- /dev/null
+++ b/vendor/github.com/nsf/jsondiff/LICENSE
@@ -0,0 +1,19 @@
+Copyright (C) 2019 nsf <no.smile.face@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
diff --git a/vendor/github.com/nsf/jsondiff/README.md b/vendor/github.com/nsf/jsondiff/README.md
new file mode 100644
index 00000000000..c69d0e0a592
--- /dev/null
+++ b/vendor/github.com/nsf/jsondiff/README.md
@@ -0,0 +1,29 @@
+# JsonDiff library
+
+The main purpose of the library is integration into tests which use json and providing human-readable output of test results.
+
+The lib can compare two json items and return a detailed report of the comparison.
+
+At the moment it can detect a couple of types of differences:
+
+ - FullMatch - means items are identical.
+ - SupersetMatch - means first item is a superset of a second item.
+ - NoMatch - means objects are different.
+
+Being a superset means that every object and array which don't match completely in a second item must be a subset of a first item. For example:
+
+```json
+{"a": 1, "b": 2, "c": 3}
+```
+
+Is a superset of (or second item is a subset of a first one):
+
+```json
+{"a": 1, "c": 3}
+```
+
+Library API documentation can be found on godoc.org: https://godoc.org/github.com/nsf/jsondiff
+
+You can try **LIVE** version here (compiled to wasm): https://nosmileface.dev/jsondiff
+
+The library is inspired by http://tlrobinson.net/projects/javascript-fun/jsondiff/
diff --git a/vendor/github.com/nsf/jsondiff/jsondiff.go b/vendor/github.com/nsf/jsondiff/jsondiff.go
new file mode 100644
index 00000000000..ffe12cf984d
--- /dev/null
+++ b/vendor/github.com/nsf/jsondiff/jsondiff.go
@@ -0,0 +1,664 @@
+package jsondiff
+
+import (
+	"bytes"
+	"encoding/json"
+	"io"
+	"reflect"
+	"sort"
+	"strconv"
+)
+
+type Difference int
+
+const (
+	FullMatch Difference = iota
+	SupersetMatch
+	NoMatch
+	FirstArgIsInvalidJson
+	SecondArgIsInvalidJson
+	BothArgsAreInvalidJson
+)
+
+func (d Difference) String() string {
+	switch d {
+	case FullMatch:
+		return "FullMatch"
+	case SupersetMatch:
+		return "SupersetMatch"
+	case NoMatch:
+		return "NoMatch"
+	case FirstArgIsInvalidJson:
+		return "FirstArgIsInvalidJson"
+	case SecondArgIsInvalidJson:
+		return "SecondArgIsInvalidJson"
+	case BothArgsAreInvalidJson:
+		return "BothArgsAreInvalidJson"
+	}
+	return "Invalid"
+}
+
+type Tag struct {
+	Begin string
+	End   string
+}
+
+type Options struct {
+	Normal                Tag
+	Added                 Tag
+	Removed               Tag
+	Changed               Tag
+	Skipped               Tag
+	SkippedArrayElement   func(n int) string
+	SkippedObjectProperty func(n int) string
+	Prefix                string
+	Indent                string
+	PrintTypes            bool
+	ChangedSeparator      string
+	// When provided, this function will be used to compare two numbers. By default numbers are compared using their
+	// literal representation byte by byte.
+	CompareNumbers func(a, b json.Number) bool
+	// When true, only differences will be printed. By default, it will print the full json.
+	SkipMatches bool
+}
+
+func SkippedArrayElement(n int) string {
+	if n == 1 {
+		return "...skipped 1 array element..."
+	} else {
+		ns := strconv.FormatInt(int64(n), 10)
+		return "...skipped " + ns + " array elements..."
+	}
+}
+
+func SkippedObjectProperty(n int) string {
+	if n == 1 {
+		return "...skipped 1 object property..."
+	} else {
+		ns := strconv.FormatInt(int64(n), 10)
+		return "...skipped " + ns + " object properties..."
+	}
+}
+
+// Provides a set of options in JSON format that are fully parseable.
+func DefaultJSONOptions() Options {
+	return Options{
+		Added:            Tag{Begin: "\"prop-added\":{", End: "}"},
+		Removed:          Tag{Begin: "\"prop-removed\":{", End: "}"},
+		Changed:          Tag{Begin: "{\"changed\":[", End: "]}"},
+		ChangedSeparator: ", ",
+		Indent:           "    ",
+	}
+}
+
+// Provides a set of options that are well suited for console output. Options
+// use ANSI foreground color escape sequences to highlight changes.
+func DefaultConsoleOptions() Options {
+	return Options{
+		Added:                 Tag{Begin: "\033[0;32m", End: "\033[0m"},
+		Removed:               Tag{Begin: "\033[0;31m", End: "\033[0m"},
+		Changed:               Tag{Begin: "\033[0;33m", End: "\033[0m"},
+		Skipped:               Tag{Begin: "\033[0;90m", End: "\033[0m"},
+		SkippedArrayElement:   SkippedArrayElement,
+		SkippedObjectProperty: SkippedObjectProperty,
+		ChangedSeparator:      " => ",
+		Indent:                "    ",
+	}
+}
+
+// Provides a set of options that are well suited for HTML output. Works best
+// inside <pre> tag.
+func DefaultHTMLOptions() Options {
+	return Options{
+		Added:                 Tag{Begin: `<span style="background-color: #8bff7f">`, End: `</span>`},
+		Removed:               Tag{Begin: `<span style="background-color: #fd7f7f">`, End: `</span>`},
+		Changed:               Tag{Begin: `<span style="background-color: #fcff7f">`, End: `</span>`},
+		Skipped:               Tag{Begin: `<span style="color: rgba(0, 0, 0, 0.3)">`, End: `</span>`},
+		SkippedArrayElement:   SkippedArrayElement,
+		SkippedObjectProperty: SkippedObjectProperty,
+		ChangedSeparator:      " => ",
+		Indent:                "    ",
+	}
+}
+
+type context struct {
+	opts    *Options
+	level   int
+	lastTag *Tag
+	diff    Difference
+}
+
+func (ctx *context) compareNumbers(a, b json.Number) bool {
+	if ctx.opts.CompareNumbers != nil {
+		return ctx.opts.CompareNumbers(a, b)
+	} else {
+		return a == b
+	}
+}
+
+func (ctx *context) terminateTag(buf *bytes.Buffer) {
+	if ctx.lastTag != nil {
+		buf.WriteString(ctx.lastTag.End)
+		ctx.lastTag = nil
+	}
+}
+
+func (ctx *context) newline(buf *bytes.Buffer, s string) {
+	buf.WriteString(s)
+	if ctx.lastTag != nil {
+		buf.WriteString(ctx.lastTag.End)
+	}
+	buf.WriteString("\n")
+	buf.WriteString(ctx.opts.Prefix)
+	for i := 0; i < ctx.level; i++ {
+		buf.WriteString(ctx.opts.Indent)
+	}
+	if ctx.lastTag != nil {
+		buf.WriteString(ctx.lastTag.Begin)
+	}
+}
+
+func (ctx *context) key(buf *bytes.Buffer, k string) {
+	buf.WriteString(strconv.Quote(k))
+	buf.WriteString(": ")
+}
+
+func (ctx *context) writeValue(buf *bytes.Buffer, v interface{}, full bool) {
+	switch vv := v.(type) {
+	case bool:
+		buf.WriteString(strconv.FormatBool(vv))
+	case json.Number:
+		buf.WriteString(string(vv))
+	case string:
+		buf.WriteString(strconv.Quote(vv))
+	case []interface{}:
+		if full {
+			if len(vv) == 0 {
+				buf.WriteString("[")
+			} else {
+				ctx.level++
+				ctx.newline(buf, "[")
+			}
+			for i, v := range vv {
+				ctx.writeValue(buf, v, true)
+				if i != len(vv)-1 {
+					ctx.newline(buf, ",")
+				} else {
+					ctx.level--
+					ctx.newline(buf, "")
+				}
+			}
+			buf.WriteString("]")
+		} else {
+			buf.WriteString("[]")
+		}
+	case map[string]interface{}:
+		if full {
+			if len(vv) == 0 {
+				buf.WriteString("{")
+			} else {
+				ctx.level++
+				ctx.newline(buf, "{")
+			}
+
+			keys := make([]string, 0, len(vv))
+			for key := range vv {
+				keys = append(keys, key)
+			}
+			sort.Strings(keys)
+
+			i := 0
+			for _, k := range keys {
+				v := vv[k]
+				ctx.key(buf, k)
+				ctx.writeValue(buf, v, true)
+				if i != len(vv)-1 {
+					ctx.newline(buf, ",")
+				} else {
+					ctx.level--
+					ctx.newline(buf, "")
+				}
+				i++
+			}
+			buf.WriteString("}")
+		} else {
+			buf.WriteString("{}")
+		}
+	default:
+		buf.WriteString("null")
+	}
+
+	ctx.writeTypeMaybe(buf, v)
+}
+
+func (ctx *context) writeTypeMaybe(buf *bytes.Buffer, v interface{}) {
+	if ctx.opts.PrintTypes {
+		buf.WriteString(" ")
+		ctx.writeType(buf, v)
+	}
+}
+
+func (ctx *context) writeType(buf *bytes.Buffer, v interface{}) {
+	switch v.(type) {
+	case bool:
+		buf.WriteString("(boolean)")
+	case json.Number:
+		buf.WriteString("(number)")
+	case string:
+		buf.WriteString("(string)")
+	case []interface{}:
+		buf.WriteString("(array)")
+	case map[string]interface{}:
+		buf.WriteString("(object)")
+	default:
+		buf.WriteString("(null)")
+	}
+}
+
+func (ctx *context) writeMismatch(buf *bytes.Buffer, a, b interface{}) {
+	ctx.writeValue(buf, a, false)
+	buf.WriteString(ctx.opts.ChangedSeparator)
+	ctx.writeValue(buf, b, false)
+}
+
+func (ctx *context) tag(buf *bytes.Buffer, tag *Tag) {
+	if ctx.lastTag == tag {
+		return
+	} else if ctx.lastTag != nil {
+		buf.WriteString(ctx.lastTag.End)
+	}
+	buf.WriteString(tag.Begin)
+	ctx.lastTag = tag
+}
+
+func (ctx *context) result(d Difference) {
+	if d == NoMatch {
+		ctx.diff = NoMatch
+	} else if d == SupersetMatch && ctx.diff != NoMatch {
+		ctx.diff = SupersetMatch
+	} else if ctx.diff != NoMatch && ctx.diff != SupersetMatch {
+		ctx.diff = FullMatch
+	}
+}
+
+func (ctx *context) printMismatch(buf *bytes.Buffer, a, b interface{}) {
+	ctx.tag(buf, &ctx.opts.Changed)
+	ctx.writeMismatch(buf, a, b)
+}
+
+func (ctx *context) printSkipped(buf *bytes.Buffer, n *int, strfunc func(n int) string, last bool) {
+	if *n == 0 || strfunc == nil {
+		return
+	}
+	ctx.tag(buf, &ctx.opts.Skipped)
+	buf.WriteString(strfunc(*n))
+	if !last {
+		ctx.tag(buf, &ctx.opts.Normal)
+		ctx.newline(buf, ",")
+	}
+	*n = 0
+}
+
+func (ctx *context) finalize(buf *bytes.Buffer) string {
+	ctx.terminateTag(buf)
+	return buf.String()
+}
+
+type collectionConfig struct {
+	open    string
+	close   string
+	skipped func(n int) string
+	value   interface{}
+}
+
+type dualIterator interface {
+	clone() dualIterator
+	count() int
+	next() (a interface{}, aOK bool, b interface{}, bOK bool, i int)
+	key(buf *bytes.Buffer)
+}
+
+type dualSliceIterator struct {
+	a       []interface{}
+	b       []interface{}
+	max     int
+	current int
+}
+
+func (it *dualSliceIterator) clone() dualIterator {
+	copy := *it
+	return &copy
+}
+
+func (it *dualSliceIterator) count() int {
+	return it.max
+}
+
+func (it *dualSliceIterator) next() (a interface{}, aOK bool, b interface{}, bOK bool, i int) {
+	it.current++
+	i = it.current
+	if i <= it.max {
+		if i < len(it.a) {
+			a = it.a[i]
+			aOK = true
+		}
+		if i < len(it.b) {
+			b = it.b[i]
+			bOK = true
+		}
+	} else {
+		i = -1
+	}
+	return
+}
+
+func (it *dualSliceIterator) key(buf *bytes.Buffer) {
+	// noop
+}
+
+type dualMapIterator struct {
+	a       map[string]interface{}
+	b       map[string]interface{}
+	keys    []string
+	current int
+}
+
+func (it *dualMapIterator) clone() dualIterator {
+	copy := *it
+	return &copy
+}
+
+func (it *dualMapIterator) count() int {
+	return len(it.keys)
+}
+
+func (it *dualMapIterator) next() (a interface{}, aOK bool, b interface{}, bOK bool, i int) {
+	it.current++
+	i = it.current
+	if i < len(it.keys) {
+		key := it.keys[i]
+		a, aOK = it.a[key]
+		b, bOK = it.b[key]
+	} else {
+		i = -1
+	}
+	return
+}
+
+func (it *dualMapIterator) key(buf *bytes.Buffer) {
+	key := it.keys[it.current]
+	buf.WriteString(strconv.Quote(key))
+	buf.WriteString(": ")
+}
+
+func makeDualMapIterator(a, b map[string]interface{}) dualIterator {
+	keysMap := make(map[string]struct{})
+	for k := range a {
+		keysMap[k] = struct{}{}
+	}
+	for k := range b {
+		keysMap[k] = struct{}{}
+	}
+	keys := make([]string, 0, len(keysMap))
+	for k := range keysMap {
+		keys = append(keys, k)
+	}
+	sort.Strings(keys)
+	return &dualMapIterator{
+		a:       a,
+		b:       b,
+		keys:    keys,
+		current: -1,
+	}
+}
+
+func makeDualSliceIterator(a, b []interface{}) dualIterator {
+	max := len(a)
+	if len(b) > max {
+		max = len(b)
+	}
+	return &dualSliceIterator{
+		a:       a,
+		b:       b,
+		max:     max,
+		current: -1,
+	}
+}
+
+func (ctx *context) collectDiffs(it dualIterator) (diffs []string, last int) {
+	ctx.level++
+	last = -1
+	for {
+		a, aok, b, bok, i := it.next()
+		if i == -1 {
+			break
+		}
+		var diff string
+		if aok && bok {
+			diff = ctx.printDiff(a, b)
+		}
+		if len(diff) > 0 || aok != bok {
+			last = i
+		}
+		diffs = append(diffs, diff)
+	}
+	ctx.level--
+	return
+}
+
+func (ctx *context) printCollectionDiff(cfg *collectionConfig, it dualIterator) string {
+	var buf bytes.Buffer
+	diffs, lastDiff := ctx.collectDiffs(it.clone())
+	if ctx.opts.SkipMatches && lastDiff == -1 {
+		// no diffs
+		return ""
+	}
+
+	// some diffs or empty collection
+	ctx.tag(&buf, &ctx.opts.Normal)
+	if it.count() == 0 {
+		buf.WriteString(cfg.open)
+		buf.WriteString(cfg.close)
+		ctx.writeTypeMaybe(&buf, cfg.value)
+		return ctx.finalize(&buf)
+	} else {
+		ctx.level++
+		ctx.newline(&buf, cfg.open)
+	}
+
+	noDiffSpan := 0
+	for {
+		va, aok, vb, bok, i := it.next()
+		equals := true
+		if aok && bok {
+			diff := diffs[i]
+			if len(diff) > 0 {
+				equals = false
+				ctx.printSkipped(&buf, &noDiffSpan, cfg.skipped, false)
+				it.key(&buf)
+				buf.WriteString(diff)
+			}
+		} else if aok {
+			equals = false
+			ctx.printSkipped(&buf, &noDiffSpan, cfg.skipped, false)
+			ctx.tag(&buf, &ctx.opts.Removed)
+			it.key(&buf)
+			ctx.writeValue(&buf, va, true)
+			ctx.result(SupersetMatch)
+		} else if bok {
+			equals = false
+			ctx.printSkipped(&buf, &noDiffSpan, cfg.skipped, false)
+			ctx.tag(&buf, &ctx.opts.Added)
+			it.key(&buf)
+			ctx.writeValue(&buf, vb, true)
+			ctx.result(NoMatch)
+		}
+		if ctx.opts.SkipMatches && equals {
+			noDiffSpan++
+		}
+
+		wroteItem := !ctx.opts.SkipMatches || !equals
+		willWriteMoreItems :=
+			(ctx.opts.SkipMatches && i < lastDiff) ||
+				(ctx.opts.SkipMatches && cfg.skipped != nil && lastDiff < it.count()-1) ||
+				(!ctx.opts.SkipMatches && i < it.count()-1)
+
+		if wroteItem && willWriteMoreItems {
+			ctx.tag(&buf, &ctx.opts.Normal)
+			ctx.newline(&buf, ",")
+		}
+		if i == it.count()-1 {
+			// we're done
+			ctx.printSkipped(&buf, &noDiffSpan, cfg.skipped, true)
+			ctx.level--
+			ctx.tag(&buf, &ctx.opts.Normal)
+			ctx.newline(&buf, "")
+			break
+		}
+	}
+
+	buf.WriteString(cfg.close)
+	ctx.writeTypeMaybe(&buf, cfg.value)
+	return ctx.finalize(&buf)
+}
+
+func (ctx *context) printDiff(a, b interface{}) string {
+	var buf bytes.Buffer
+
+	if a == nil || b == nil {
+		// either is nil, means there are just two cases:
+		// 1. both are nil => match
+		// 2. one of them is nil => mismatch
+		if a == nil && b == nil {
+			// match
+			if !ctx.opts.SkipMatches {
+				ctx.tag(&buf, &ctx.opts.Normal)
+				ctx.writeValue(&buf, a, false)
+				ctx.result(FullMatch)
+			}
+		} else {
+			// mismatch
+			ctx.printMismatch(&buf, a, b)
+			ctx.result(NoMatch)
+		}
+		return ctx.finalize(&buf)
+	}
+
+	ka := reflect.TypeOf(a).Kind()
+	kb := reflect.TypeOf(b).Kind()
+	if ka != kb {
+		// Go type does not match, this is definitely a mismatch since
+		// we parse JSON into interface{}
+		ctx.printMismatch(&buf, a, b)
+		ctx.result(NoMatch)
+		return ctx.finalize(&buf)
+	}
+
+	// big switch here handles type-specific mismatches and returns if that's the case
+	// buf if control flow goes past through this switch, it's a match
+	// NOTE: ka == kb at this point
+	switch ka {
+	case reflect.Bool:
+		if a.(bool) != b.(bool) {
+			ctx.printMismatch(&buf, a, b)
+			ctx.result(NoMatch)
+			return ctx.finalize(&buf)
+		}
+	case reflect.String:
+		// string can be a json.Number here too (because it's a string type)
+		switch aa := a.(type) {
+		case json.Number:
+			bb, ok := b.(json.Number)
+			if !ok || !ctx.compareNumbers(aa, bb) {
+				ctx.printMismatch(&buf, a, b)
+				ctx.result(NoMatch)
+				return ctx.finalize(&buf)
+			}
+		case string:
+			bb, ok := b.(string)
+			if !ok || aa != bb {
+				ctx.printMismatch(&buf, a, b)
+				ctx.result(NoMatch)
+				return ctx.finalize(&buf)
+			}
+		}
+	case reflect.Slice:
+		sa, sb := a.([]interface{}), b.([]interface{})
+		return ctx.printCollectionDiff(&collectionConfig{
+			open:    "[",
+			close:   "]",
+			skipped: ctx.opts.SkippedArrayElement,
+			value:   a,
+		}, makeDualSliceIterator(sa, sb))
+	case reflect.Map:
+		ma, mb := a.(map[string]interface{}), b.(map[string]interface{})
+		return ctx.printCollectionDiff(&collectionConfig{
+			open:    "{",
+			close:   "}",
+			skipped: ctx.opts.SkippedObjectProperty,
+			value:   a,
+		}, makeDualMapIterator(ma, mb))
+	}
+	if !ctx.opts.SkipMatches {
+		ctx.tag(&buf, &ctx.opts.Normal)
+		ctx.writeValue(&buf, a, true)
+		ctx.result(FullMatch)
+	}
+	return ctx.finalize(&buf)
+}
+
+// Compare compares two JSON documents using given options. Returns difference type and
+// a string describing differences.
+//
+// FullMatch means provided arguments are deeply equal.
+//
+// SupersetMatch means first argument is a superset of a second argument. In
+// this context being a superset means that for each object or array in the
+// hierarchy which don't match exactly, it must be a superset of another one.
+// For example:
+//
+//	{"a": 123, "b": 456, "c": [7, 8, 9]}
+//
+// Is a superset of:
+//
+//	{"a": 123, "c": [7, 8]}
+//
+// NoMatch means there is no match.
+//
+// The rest of the difference types mean that one of or both JSON documents are
+// invalid JSON.
+//
+// Returned string uses a format similar to pretty printed JSON to show the
+// human-readable difference between provided JSON documents. It is important
+// to understand that returned format is not a valid JSON and is not meant
+// to be machine readable.
+func Compare(a, b []byte, opts *Options) (Difference, string) {
+	return CompareStreams(bytes.NewReader(a), bytes.NewReader(b), opts)
+}
+
+// CompareStreams compares two JSON documents streamed by the specified readers.
+// See the documentation for `Compare` for a description of the input options and return values.
+func CompareStreams(a, b io.Reader, opts *Options) (Difference, string) {
+	var av, bv interface{}
+	da := json.NewDecoder(a)
+	da.UseNumber()
+	db := json.NewDecoder(b)
+	db.UseNumber()
+	errA := da.Decode(&av)
+	errB := db.Decode(&bv)
+	if errA != nil && errB != nil {
+		return BothArgsAreInvalidJson, "both arguments are invalid json"
+	}
+	if errA != nil {
+		return FirstArgIsInvalidJson, "first argument is invalid json"
+	}
+	if errB != nil {
+		return SecondArgIsInvalidJson, "second argument is invalid json"
+	}
+
+	var buf bytes.Buffer
+
+	ctx := context{opts: opts}
+	buf.WriteString(ctx.printDiff(av, bv))
+	return ctx.diff, buf.String()
+}
diff --git a/vendor/github.com/opencontainers/runtime-spec/LICENSE b/vendor/github.com/opencontainers/runtime-spec/LICENSE
new file mode 100644
index 00000000000..bdc403653e0
--- /dev/null
+++ b/vendor/github.com/opencontainers/runtime-spec/LICENSE
@@ -0,0 +1,191 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2015 The Linux Foundation.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/vendor/github.com/opencontainers/runtime-spec/specs-go/config.go b/vendor/github.com/opencontainers/runtime-spec/specs-go/config.go
new file mode 100644
index 00000000000..c7c7c3d08d1
--- /dev/null
+++ b/vendor/github.com/opencontainers/runtime-spec/specs-go/config.go
@@ -0,0 +1,689 @@
+package specs
+
+import "os"
+
+// Spec is the base configuration for the container.
+type Spec struct {
+	// Version of the Open Container Initiative Runtime Specification with which the bundle complies.
+	Version string `json:"ociVersion"`
+	// Process configures the container process.
+	Process *Process `json:"process,omitempty"`
+	// Root configures the container's root filesystem.
+	Root *Root `json:"root,omitempty"`
+	// Hostname configures the container's hostname.
+	Hostname string `json:"hostname,omitempty"`
+	// Mounts configures additional mounts (on top of Root).
+	Mounts []Mount `json:"mounts,omitempty"`
+	// Hooks configures callbacks for container lifecycle events.
+	Hooks *Hooks `json:"hooks,omitempty" platform:"linux,solaris"`
+	// Annotations contains arbitrary metadata for the container.
+	Annotations map[string]string `json:"annotations,omitempty"`
+
+	// Linux is platform-specific configuration for Linux based containers.
+	Linux *Linux `json:"linux,omitempty" platform:"linux"`
+	// Solaris is platform-specific configuration for Solaris based containers.
+	Solaris *Solaris `json:"solaris,omitempty" platform:"solaris"`
+	// Windows is platform-specific configuration for Windows based containers.
+	Windows *Windows `json:"windows,omitempty" platform:"windows"`
+	// VM specifies configuration for virtual-machine-based containers.
+	VM *VM `json:"vm,omitempty" platform:"vm"`
+}
+
+// Process contains information to start a specific application inside the container.
+type Process struct {
+	// Terminal creates an interactive terminal for the container.
+	Terminal bool `json:"terminal,omitempty"`
+	// ConsoleSize specifies the size of the console.
+	ConsoleSize *Box `json:"consoleSize,omitempty"`
+	// User specifies user information for the process.
+	User User `json:"user"`
+	// Args specifies the binary and arguments for the application to execute.
+	Args []string `json:"args,omitempty"`
+	// CommandLine specifies the full command line for the application to execute on Windows.
+	CommandLine string `json:"commandLine,omitempty" platform:"windows"`
+	// Env populates the process environment for the process.
+	Env []string `json:"env,omitempty"`
+	// Cwd is the current working directory for the process and must be
+	// relative to the container's root.
+	Cwd string `json:"cwd"`
+	// Capabilities are Linux capabilities that are kept for the process.
+	Capabilities *LinuxCapabilities `json:"capabilities,omitempty" platform:"linux"`
+	// Rlimits specifies rlimit options to apply to the process.
+	Rlimits []POSIXRlimit `json:"rlimits,omitempty" platform:"linux,solaris"`
+	// NoNewPrivileges controls whether additional privileges could be gained by processes in the container.
+	NoNewPrivileges bool `json:"noNewPrivileges,omitempty" platform:"linux"`
+	// ApparmorProfile specifies the apparmor profile for the container.
+	ApparmorProfile string `json:"apparmorProfile,omitempty" platform:"linux"`
+	// Specify an oom_score_adj for the container.
+	OOMScoreAdj *int `json:"oomScoreAdj,omitempty" platform:"linux"`
+	// SelinuxLabel specifies the selinux context that the container process is run as.
+	SelinuxLabel string `json:"selinuxLabel,omitempty" platform:"linux"`
+}
+
+// LinuxCapabilities specifies the whitelist of capabilities that are kept for a process.
+// http://man7.org/linux/man-pages/man7/capabilities.7.html
+type LinuxCapabilities struct {
+	// Bounding is the set of capabilities checked by the kernel.
+	Bounding []string `json:"bounding,omitempty" platform:"linux"`
+	// Effective is the set of capabilities checked by the kernel.
+	Effective []string `json:"effective,omitempty" platform:"linux"`
+	// Inheritable is the capabilities preserved across execve.
+	Inheritable []string `json:"inheritable,omitempty" platform:"linux"`
+	// Permitted is the limiting superset for effective capabilities.
+	Permitted []string `json:"permitted,omitempty" platform:"linux"`
+	// Ambient is the ambient set of capabilities that are kept.
+	Ambient []string `json:"ambient,omitempty" platform:"linux"`
+}
+
+// Box specifies dimensions of a rectangle. Used for specifying the size of a console.
+type Box struct {
+	// Height is the vertical dimension of a box.
+	Height uint `json:"height"`
+	// Width is the horizontal dimension of a box.
+	Width uint `json:"width"`
+}
+
+// User specifies specific user (and group) information for the container process.
+type User struct {
+	// UID is the user id.
+	UID uint32 `json:"uid" platform:"linux,solaris"`
+	// GID is the group id.
+	GID uint32 `json:"gid" platform:"linux,solaris"`
+	// Umask is the umask for the init process.
+	Umask uint32 `json:"umask,omitempty" platform:"linux,solaris"`
+	// AdditionalGids are additional group ids set for the container's process.
+	AdditionalGids []uint32 `json:"additionalGids,omitempty" platform:"linux,solaris"`
+	// Username is the user name.
+	Username string `json:"username,omitempty" platform:"windows"`
+}
+
+// Root contains information about the container's root filesystem on the host.
+type Root struct {
+	// Path is the absolute path to the container's root filesystem.
+	Path string `json:"path"`
+	// Readonly makes the root filesystem for the container readonly before the process is executed.
+	Readonly bool `json:"readonly,omitempty"`
+}
+
+// Mount specifies a mount for a container.
+type Mount struct {
+	// Destination is the absolute path where the mount will be placed in the container.
+	Destination string `json:"destination"`
+	// Type specifies the mount kind.
+	Type string `json:"type,omitempty" platform:"linux,solaris"`
+	// Source specifies the source path of the mount.
+	Source string `json:"source,omitempty"`
+	// Options are fstab style mount options.
+	Options []string `json:"options,omitempty"`
+}
+
+// Hook specifies a command that is run at a particular event in the lifecycle of a container
+type Hook struct {
+	Path    string   `json:"path"`
+	Args    []string `json:"args,omitempty"`
+	Env     []string `json:"env,omitempty"`
+	Timeout *int     `json:"timeout,omitempty"`
+}
+
+// Hooks specifies a command that is run in the container at a particular event in the lifecycle of a container
+// Hooks for container setup and teardown
+type Hooks struct {
+	// Prestart is Deprecated. Prestart is a list of hooks to be run before the container process is executed.
+	// It is called in the Runtime Namespace
+	Prestart []Hook `json:"prestart,omitempty"`
+	// CreateRuntime is a list of hooks to be run after the container has been created but before pivot_root or any equivalent operation has been called
+	// It is called in the Runtime Namespace
+	CreateRuntime []Hook `json:"createRuntime,omitempty"`
+	// CreateContainer is a list of hooks to be run after the container has been created but before pivot_root or any equivalent operation has been called
+	// It is called in the Container Namespace
+	CreateContainer []Hook `json:"createContainer,omitempty"`
+	// StartContainer is a list of hooks to be run after the start operation is called but before the container process is started
+	// It is called in the Container Namespace
+	StartContainer []Hook `json:"startContainer,omitempty"`
+	// Poststart is a list of hooks to be run after the container process is started.
+	// It is called in the Runtime Namespace
+	Poststart []Hook `json:"poststart,omitempty"`
+	// Poststop is a list of hooks to be run after the container process exits.
+	// It is called in the Runtime Namespace
+	Poststop []Hook `json:"poststop,omitempty"`
+}
+
+// Linux contains platform-specific configuration for Linux based containers.
+type Linux struct {
+	// UIDMapping specifies user mappings for supporting user namespaces.
+	UIDMappings []LinuxIDMapping `json:"uidMappings,omitempty"`
+	// GIDMapping specifies group mappings for supporting user namespaces.
+	GIDMappings []LinuxIDMapping `json:"gidMappings,omitempty"`
+	// Sysctl are a set of key value pairs that are set for the container on start
+	Sysctl map[string]string `json:"sysctl,omitempty"`
+	// Resources contain cgroup information for handling resource constraints
+	// for the container
+	Resources *LinuxResources `json:"resources,omitempty"`
+	// CgroupsPath specifies the path to cgroups that are created and/or joined by the container.
+	// The path is expected to be relative to the cgroups mountpoint.
+	// If resources are specified, the cgroups at CgroupsPath will be updated based on resources.
+	CgroupsPath string `json:"cgroupsPath,omitempty"`
+	// Namespaces contains the namespaces that are created and/or joined by the container
+	Namespaces []LinuxNamespace `json:"namespaces,omitempty"`
+	// Devices are a list of device nodes that are created for the container
+	Devices []LinuxDevice `json:"devices,omitempty"`
+	// Seccomp specifies the seccomp security settings for the container.
+	Seccomp *LinuxSeccomp `json:"seccomp,omitempty"`
+	// RootfsPropagation is the rootfs mount propagation mode for the container.
+	RootfsPropagation string `json:"rootfsPropagation,omitempty"`
+	// MaskedPaths masks over the provided paths inside the container.
+	MaskedPaths []string `json:"maskedPaths,omitempty"`
+	// ReadonlyPaths sets the provided paths as RO inside the container.
+	ReadonlyPaths []string `json:"readonlyPaths,omitempty"`
+	// MountLabel specifies the selinux context for the mounts in the container.
+	MountLabel string `json:"mountLabel,omitempty"`
+	// IntelRdt contains Intel Resource Director Technology (RDT) information for
+	// handling resource constraints (e.g., L3 cache, memory bandwidth) for the container
+	IntelRdt *LinuxIntelRdt `json:"intelRdt,omitempty"`
+	// Personality contains configuration for the Linux personality syscall
+	Personality *LinuxPersonality `json:"personality,omitempty"`
+}
+
+// LinuxNamespace is the configuration for a Linux namespace
+type LinuxNamespace struct {
+	// Type is the type of namespace
+	Type LinuxNamespaceType `json:"type"`
+	// Path is a path to an existing namespace persisted on disk that can be joined
+	// and is of the same type
+	Path string `json:"path,omitempty"`
+}
+
+// LinuxNamespaceType is one of the Linux namespaces
+type LinuxNamespaceType string
+
+const (
+	// PIDNamespace for isolating process IDs
+	PIDNamespace LinuxNamespaceType = "pid"
+	// NetworkNamespace for isolating network devices, stacks, ports, etc
+	NetworkNamespace LinuxNamespaceType = "network"
+	// MountNamespace for isolating mount points
+	MountNamespace LinuxNamespaceType = "mount"
+	// IPCNamespace for isolating System V IPC, POSIX message queues
+	IPCNamespace LinuxNamespaceType = "ipc"
+	// UTSNamespace for isolating hostname and NIS domain name
+	UTSNamespace LinuxNamespaceType = "uts"
+	// UserNamespace for isolating user and group IDs
+	UserNamespace LinuxNamespaceType = "user"
+	// CgroupNamespace for isolating cgroup hierarchies
+	CgroupNamespace LinuxNamespaceType = "cgroup"
+)
+
+// LinuxIDMapping specifies UID/GID mappings
+type LinuxIDMapping struct {
+	// ContainerID is the starting UID/GID in the container
+	ContainerID uint32 `json:"containerID"`
+	// HostID is the starting UID/GID on the host to be mapped to 'ContainerID'
+	HostID uint32 `json:"hostID"`
+	// Size is the number of IDs to be mapped
+	Size uint32 `json:"size"`
+}
+
+// POSIXRlimit type and restrictions
+type POSIXRlimit struct {
+	// Type of the rlimit to set
+	Type string `json:"type"`
+	// Hard is the hard limit for the specified type
+	Hard uint64 `json:"hard"`
+	// Soft is the soft limit for the specified type
+	Soft uint64 `json:"soft"`
+}
+
+// LinuxHugepageLimit structure corresponds to limiting kernel hugepages
+type LinuxHugepageLimit struct {
+	// Pagesize is the hugepage size
+	// Format: "<size><unit-prefix>B' (e.g. 64KB, 2MB, 1GB, etc.)
+	Pagesize string `json:"pageSize"`
+	// Limit is the limit of "hugepagesize" hugetlb usage
+	Limit uint64 `json:"limit"`
+}
+
+// LinuxInterfacePriority for network interfaces
+type LinuxInterfacePriority struct {
+	// Name is the name of the network interface
+	Name string `json:"name"`
+	// Priority for the interface
+	Priority uint32 `json:"priority"`
+}
+
+// linuxBlockIODevice holds major:minor format supported in blkio cgroup
+type linuxBlockIODevice struct {
+	// Major is the device's major number.
+	Major int64 `json:"major"`
+	// Minor is the device's minor number.
+	Minor int64 `json:"minor"`
+}
+
+// LinuxWeightDevice struct holds a `major:minor weight` pair for weightDevice
+type LinuxWeightDevice struct {
+	linuxBlockIODevice
+	// Weight is the bandwidth rate for the device.
+	Weight *uint16 `json:"weight,omitempty"`
+	// LeafWeight is the bandwidth rate for the device while competing with the cgroup's child cgroups, CFQ scheduler only
+	LeafWeight *uint16 `json:"leafWeight,omitempty"`
+}
+
+// LinuxThrottleDevice struct holds a `major:minor rate_per_second` pair
+type LinuxThrottleDevice struct {
+	linuxBlockIODevice
+	// Rate is the IO rate limit per cgroup per device
+	Rate uint64 `json:"rate"`
+}
+
+// LinuxBlockIO for Linux cgroup 'blkio' resource management
+type LinuxBlockIO struct {
+	// Specifies per cgroup weight
+	Weight *uint16 `json:"weight,omitempty"`
+	// Specifies tasks' weight in the given cgroup while competing with the cgroup's child cgroups, CFQ scheduler only
+	LeafWeight *uint16 `json:"leafWeight,omitempty"`
+	// Weight per cgroup per device, can override BlkioWeight
+	WeightDevice []LinuxWeightDevice `json:"weightDevice,omitempty"`
+	// IO read rate limit per cgroup per device, bytes per second
+	ThrottleReadBpsDevice []LinuxThrottleDevice `json:"throttleReadBpsDevice,omitempty"`
+	// IO write rate limit per cgroup per device, bytes per second
+	ThrottleWriteBpsDevice []LinuxThrottleDevice `json:"throttleWriteBpsDevice,omitempty"`
+	// IO read rate limit per cgroup per device, IO per second
+	ThrottleReadIOPSDevice []LinuxThrottleDevice `json:"throttleReadIOPSDevice,omitempty"`
+	// IO write rate limit per cgroup per device, IO per second
+	ThrottleWriteIOPSDevice []LinuxThrottleDevice `json:"throttleWriteIOPSDevice,omitempty"`
+}
+
+// LinuxMemory for Linux cgroup 'memory' resource management
+type LinuxMemory struct {
+	// Memory limit (in bytes).
+	Limit *int64 `json:"limit,omitempty"`
+	// Memory reservation or soft_limit (in bytes).
+	Reservation *int64 `json:"reservation,omitempty"`
+	// Total memory limit (memory + swap).
+	Swap *int64 `json:"swap,omitempty"`
+	// Kernel memory limit (in bytes).
+	Kernel *int64 `json:"kernel,omitempty"`
+	// Kernel memory limit for tcp (in bytes)
+	KernelTCP *int64 `json:"kernelTCP,omitempty"`
+	// How aggressive the kernel will swap memory pages.
+	Swappiness *uint64 `json:"swappiness,omitempty"`
+	// DisableOOMKiller disables the OOM killer for out of memory conditions
+	DisableOOMKiller *bool `json:"disableOOMKiller,omitempty"`
+	// Enables hierarchical memory accounting
+	UseHierarchy *bool `json:"useHierarchy,omitempty"`
+}
+
+// LinuxCPU for Linux cgroup 'cpu' resource management
+type LinuxCPU struct {
+	// CPU shares (relative weight (ratio) vs. other cgroups with cpu shares).
+	Shares *uint64 `json:"shares,omitempty"`
+	// CPU hardcap limit (in usecs). Allowed cpu time in a given period.
+	Quota *int64 `json:"quota,omitempty"`
+	// CPU period to be used for hardcapping (in usecs).
+	Period *uint64 `json:"period,omitempty"`
+	// How much time realtime scheduling may use (in usecs).
+	RealtimeRuntime *int64 `json:"realtimeRuntime,omitempty"`
+	// CPU period to be used for realtime scheduling (in usecs).
+	RealtimePeriod *uint64 `json:"realtimePeriod,omitempty"`
+	// CPUs to use within the cpuset. Default is to use any CPU available.
+	Cpus string `json:"cpus,omitempty"`
+	// List of memory nodes in the cpuset. Default is to use any available memory node.
+	Mems string `json:"mems,omitempty"`
+}
+
+// LinuxPids for Linux cgroup 'pids' resource management (Linux 4.3)
+type LinuxPids struct {
+	// Maximum number of PIDs. Default is "no limit".
+	Limit int64 `json:"limit"`
+}
+
+// LinuxNetwork identification and priority configuration
+type LinuxNetwork struct {
+	// Set class identifier for container's network packets
+	ClassID *uint32 `json:"classID,omitempty"`
+	// Set priority of network traffic for container
+	Priorities []LinuxInterfacePriority `json:"priorities,omitempty"`
+}
+
+// LinuxRdma for Linux cgroup 'rdma' resource management (Linux 4.11)
+type LinuxRdma struct {
+	// Maximum number of HCA handles that can be opened. Default is "no limit".
+	HcaHandles *uint32 `json:"hcaHandles,omitempty"`
+	// Maximum number of HCA objects that can be created. Default is "no limit".
+	HcaObjects *uint32 `json:"hcaObjects,omitempty"`
+}
+
+// LinuxResources has container runtime resource constraints
+type LinuxResources struct {
+	// Devices configures the device whitelist.
+	Devices []LinuxDeviceCgroup `json:"devices,omitempty"`
+	// Memory restriction configuration
+	Memory *LinuxMemory `json:"memory,omitempty"`
+	// CPU resource restriction configuration
+	CPU *LinuxCPU `json:"cpu,omitempty"`
+	// Task resource restriction configuration.
+	Pids *LinuxPids `json:"pids,omitempty"`
+	// BlockIO restriction configuration
+	BlockIO *LinuxBlockIO `json:"blockIO,omitempty"`
+	// Hugetlb limit (in bytes)
+	HugepageLimits []LinuxHugepageLimit `json:"hugepageLimits,omitempty"`
+	// Network restriction configuration
+	Network *LinuxNetwork `json:"network,omitempty"`
+	// Rdma resource restriction configuration.
+	// Limits are a set of key value pairs that define RDMA resource limits,
+	// where the key is device name and value is resource limits.
+	Rdma map[string]LinuxRdma `json:"rdma,omitempty"`
+}
+
+// LinuxDevice represents the mknod information for a Linux special device file
+type LinuxDevice struct {
+	// Path to the device.
+	Path string `json:"path"`
+	// Device type, block, char, etc.
+	Type string `json:"type"`
+	// Major is the device's major number.
+	Major int64 `json:"major"`
+	// Minor is the device's minor number.
+	Minor int64 `json:"minor"`
+	// FileMode permission bits for the device.
+	FileMode *os.FileMode `json:"fileMode,omitempty"`
+	// UID of the device.
+	UID *uint32 `json:"uid,omitempty"`
+	// Gid of the device.
+	GID *uint32 `json:"gid,omitempty"`
+}
+
+// LinuxDeviceCgroup represents a device rule for the whitelist controller
+type LinuxDeviceCgroup struct {
+	// Allow or deny
+	Allow bool `json:"allow"`
+	// Device type, block, char, etc.
+	Type string `json:"type,omitempty"`
+	// Major is the device's major number.
+	Major *int64 `json:"major,omitempty"`
+	// Minor is the device's minor number.
+	Minor *int64 `json:"minor,omitempty"`
+	// Cgroup access permissions format, rwm.
+	Access string `json:"access,omitempty"`
+}
+
+// LinuxPersonalityDomain refers to a personality domain.
+type LinuxPersonalityDomain string
+
+// LinuxPersonalityFlag refers to an additional personality flag. None are currently defined.
+type LinuxPersonalityFlag string
+
+// Define domain and flags for Personality
+const (
+	// PerLinux is the standard Linux personality
+	PerLinux LinuxPersonalityDomain = "LINUX"
+	// PerLinux32 sets personality to 32 bit
+	PerLinux32 LinuxPersonalityDomain = "LINUX32"
+)
+
+// LinuxPersonality represents the Linux personality syscall input
+type LinuxPersonality struct {
+	// Domain for the personality
+	Domain LinuxPersonalityDomain `json:"domain"`
+	// Additional flags
+	Flags []LinuxPersonalityFlag `json:"flags,omitempty"`
+}
+
+// Solaris contains platform-specific configuration for Solaris application containers.
+type Solaris struct {
+	// SMF FMRI which should go "online" before we start the container process.
+	Milestone string `json:"milestone,omitempty"`
+	// Maximum set of privileges any process in this container can obtain.
+	LimitPriv string `json:"limitpriv,omitempty"`
+	// The maximum amount of shared memory allowed for this container.
+	MaxShmMemory string `json:"maxShmMemory,omitempty"`
+	// Specification for automatic creation of network resources for this container.
+	Anet []SolarisAnet `json:"anet,omitempty"`
+	// Set limit on the amount of CPU time that can be used by container.
+	CappedCPU *SolarisCappedCPU `json:"cappedCPU,omitempty"`
+	// The physical and swap caps on the memory that can be used by this container.
+	CappedMemory *SolarisCappedMemory `json:"cappedMemory,omitempty"`
+}
+
+// SolarisCappedCPU allows users to set limit on the amount of CPU time that can be used by container.
+type SolarisCappedCPU struct {
+	Ncpus string `json:"ncpus,omitempty"`
+}
+
+// SolarisCappedMemory allows users to set the physical and swap caps on the memory that can be used by this container.
+type SolarisCappedMemory struct {
+	Physical string `json:"physical,omitempty"`
+	Swap     string `json:"swap,omitempty"`
+}
+
+// SolarisAnet provides the specification for automatic creation of network resources for this container.
+type SolarisAnet struct {
+	// Specify a name for the automatically created VNIC datalink.
+	Linkname string `json:"linkname,omitempty"`
+	// Specify the link over which the VNIC will be created.
+	Lowerlink string `json:"lowerLink,omitempty"`
+	// The set of IP addresses that the container can use.
+	Allowedaddr string `json:"allowedAddress,omitempty"`
+	// Specifies whether allowedAddress limitation is to be applied to the VNIC.
+	Configallowedaddr string `json:"configureAllowedAddress,omitempty"`
+	// The value of the optional default router.
+	Defrouter string `json:"defrouter,omitempty"`
+	// Enable one or more types of link protection.
+	Linkprotection string `json:"linkProtection,omitempty"`
+	// Set the VNIC's macAddress
+	Macaddress string `json:"macAddress,omitempty"`
+}
+
+// Windows defines the runtime configuration for Windows based containers, including Hyper-V containers.
+type Windows struct {
+	// LayerFolders contains a list of absolute paths to directories containing image layers.
+	LayerFolders []string `json:"layerFolders"`
+	// Devices are the list of devices to be mapped into the container.
+	Devices []WindowsDevice `json:"devices,omitempty"`
+	// Resources contains information for handling resource constraints for the container.
+	Resources *WindowsResources `json:"resources,omitempty"`
+	// CredentialSpec contains a JSON object describing a group Managed Service Account (gMSA) specification.
+	CredentialSpec interface{} `json:"credentialSpec,omitempty"`
+	// Servicing indicates if the container is being started in a mode to apply a Windows Update servicing operation.
+	Servicing bool `json:"servicing,omitempty"`
+	// IgnoreFlushesDuringBoot indicates if the container is being started in a mode where disk writes are not flushed during its boot process.
+	IgnoreFlushesDuringBoot bool `json:"ignoreFlushesDuringBoot,omitempty"`
+	// HyperV contains information for running a container with Hyper-V isolation.
+	HyperV *WindowsHyperV `json:"hyperv,omitempty"`
+	// Network restriction configuration.
+	Network *WindowsNetwork `json:"network,omitempty"`
+}
+
+// WindowsDevice represents information about a host device to be mapped into the container.
+type WindowsDevice struct {
+	// Device identifier: interface class GUID, etc.
+	ID string `json:"id"`
+	// Device identifier type: "class", etc.
+	IDType string `json:"idType"`
+}
+
+// WindowsResources has container runtime resource constraints for containers running on Windows.
+type WindowsResources struct {
+	// Memory restriction configuration.
+	Memory *WindowsMemoryResources `json:"memory,omitempty"`
+	// CPU resource restriction configuration.
+	CPU *WindowsCPUResources `json:"cpu,omitempty"`
+	// Storage restriction configuration.
+	Storage *WindowsStorageResources `json:"storage,omitempty"`
+}
+
+// WindowsMemoryResources contains memory resource management settings.
+type WindowsMemoryResources struct {
+	// Memory limit in bytes.
+	Limit *uint64 `json:"limit,omitempty"`
+}
+
+// WindowsCPUResources contains CPU resource management settings.
+type WindowsCPUResources struct {
+	// Number of CPUs available to the container.
+	Count *uint64 `json:"count,omitempty"`
+	// CPU shares (relative weight to other containers with cpu shares).
+	Shares *uint16 `json:"shares,omitempty"`
+	// Specifies the portion of processor cycles that this container can use as a percentage times 100.
+	Maximum *uint16 `json:"maximum,omitempty"`
+}
+
+// WindowsStorageResources contains storage resource management settings.
+type WindowsStorageResources struct {
+	// Specifies maximum Iops for the system drive.
+	Iops *uint64 `json:"iops,omitempty"`
+	// Specifies maximum bytes per second for the system drive.
+	Bps *uint64 `json:"bps,omitempty"`
+	// Sandbox size specifies the minimum size of the system drive in bytes.
+	SandboxSize *uint64 `json:"sandboxSize,omitempty"`
+}
+
+// WindowsNetwork contains network settings for Windows containers.
+type WindowsNetwork struct {
+	// List of HNS endpoints that the container should connect to.
+	EndpointList []string `json:"endpointList,omitempty"`
+	// Specifies if unqualified DNS name resolution is allowed.
+	AllowUnqualifiedDNSQuery bool `json:"allowUnqualifiedDNSQuery,omitempty"`
+	// Comma separated list of DNS suffixes to use for name resolution.
+	DNSSearchList []string `json:"DNSSearchList,omitempty"`
+	// Name (ID) of the container that we will share with the network stack.
+	NetworkSharedContainerName string `json:"networkSharedContainerName,omitempty"`
+	// name (ID) of the network namespace that will be used for the container.
+	NetworkNamespace string `json:"networkNamespace,omitempty"`
+}
+
+// WindowsHyperV contains information for configuring a container to run with Hyper-V isolation.
+type WindowsHyperV struct {
+	// UtilityVMPath is an optional path to the image used for the Utility VM.
+	UtilityVMPath string `json:"utilityVMPath,omitempty"`
+}
+
+// VM contains information for virtual-machine-based containers.
+type VM struct {
+	// Hypervisor specifies hypervisor-related configuration for virtual-machine-based containers.
+	Hypervisor VMHypervisor `json:"hypervisor,omitempty"`
+	// Kernel specifies kernel-related configuration for virtual-machine-based containers.
+	Kernel VMKernel `json:"kernel"`
+	// Image specifies guest image related configuration for virtual-machine-based containers.
+	Image VMImage `json:"image,omitempty"`
+}
+
+// VMHypervisor contains information about the hypervisor to use for a virtual machine.
+type VMHypervisor struct {
+	// Path is the host path to the hypervisor used to manage the virtual machine.
+	Path string `json:"path"`
+	// Parameters specifies parameters to pass to the hypervisor.
+	Parameters []string `json:"parameters,omitempty"`
+}
+
+// VMKernel contains information about the kernel to use for a virtual machine.
+type VMKernel struct {
+	// Path is the host path to the kernel used to boot the virtual machine.
+	Path string `json:"path"`
+	// Parameters specifies parameters to pass to the kernel.
+	Parameters []string `json:"parameters,omitempty"`
+	// InitRD is the host path to an initial ramdisk to be used by the kernel.
+	InitRD string `json:"initrd,omitempty"`
+}
+
+// VMImage contains information about the virtual machine root image.
+type VMImage struct {
+	// Path is the host path to the root image that the VM kernel would boot into.
+	Path string `json:"path"`
+	// Format is the root image format type (e.g. "qcow2", "raw", "vhd", etc).
+	Format string `json:"format"`
+}
+
+// LinuxSeccomp represents syscall restrictions
+type LinuxSeccomp struct {
+	DefaultAction LinuxSeccompAction `json:"defaultAction"`
+	Architectures []Arch             `json:"architectures,omitempty"`
+	Flags         []LinuxSeccompFlag `json:"flags,omitempty"`
+	Syscalls      []LinuxSyscall     `json:"syscalls,omitempty"`
+}
+
+// Arch used for additional architectures
+type Arch string
+
+// LinuxSeccompFlag is a flag to pass to seccomp(2).
+type LinuxSeccompFlag string
+
+// Additional architectures permitted to be used for system calls
+// By default only the native architecture of the kernel is permitted
+const (
+	ArchX86         Arch = "SCMP_ARCH_X86"
+	ArchX86_64      Arch = "SCMP_ARCH_X86_64"
+	ArchX32         Arch = "SCMP_ARCH_X32"
+	ArchARM         Arch = "SCMP_ARCH_ARM"
+	ArchAARCH64     Arch = "SCMP_ARCH_AARCH64"
+	ArchMIPS        Arch = "SCMP_ARCH_MIPS"
+	ArchMIPS64      Arch = "SCMP_ARCH_MIPS64"
+	ArchMIPS64N32   Arch = "SCMP_ARCH_MIPS64N32"
+	ArchMIPSEL      Arch = "SCMP_ARCH_MIPSEL"
+	ArchMIPSEL64    Arch = "SCMP_ARCH_MIPSEL64"
+	ArchMIPSEL64N32 Arch = "SCMP_ARCH_MIPSEL64N32"
+	ArchPPC         Arch = "SCMP_ARCH_PPC"
+	ArchPPC64       Arch = "SCMP_ARCH_PPC64"
+	ArchPPC64LE     Arch = "SCMP_ARCH_PPC64LE"
+	ArchS390        Arch = "SCMP_ARCH_S390"
+	ArchS390X       Arch = "SCMP_ARCH_S390X"
+	ArchPARISC      Arch = "SCMP_ARCH_PARISC"
+	ArchPARISC64    Arch = "SCMP_ARCH_PARISC64"
+)
+
+// LinuxSeccompAction taken upon Seccomp rule match
+type LinuxSeccompAction string
+
+// Define actions for Seccomp rules
+const (
+	ActKill  LinuxSeccompAction = "SCMP_ACT_KILL"
+	ActTrap  LinuxSeccompAction = "SCMP_ACT_TRAP"
+	ActErrno LinuxSeccompAction = "SCMP_ACT_ERRNO"
+	ActTrace LinuxSeccompAction = "SCMP_ACT_TRACE"
+	ActAllow LinuxSeccompAction = "SCMP_ACT_ALLOW"
+	ActLog   LinuxSeccompAction = "SCMP_ACT_LOG"
+)
+
+// LinuxSeccompOperator used to match syscall arguments in Seccomp
+type LinuxSeccompOperator string
+
+// Define operators for syscall arguments in Seccomp
+const (
+	OpNotEqual     LinuxSeccompOperator = "SCMP_CMP_NE"
+	OpLessThan     LinuxSeccompOperator = "SCMP_CMP_LT"
+	OpLessEqual    LinuxSeccompOperator = "SCMP_CMP_LE"
+	OpEqualTo      LinuxSeccompOperator = "SCMP_CMP_EQ"
+	OpGreaterEqual LinuxSeccompOperator = "SCMP_CMP_GE"
+	OpGreaterThan  LinuxSeccompOperator = "SCMP_CMP_GT"
+	OpMaskedEqual  LinuxSeccompOperator = "SCMP_CMP_MASKED_EQ"
+)
+
+// LinuxSeccompArg used for matching specific syscall arguments in Seccomp
+type LinuxSeccompArg struct {
+	Index    uint                 `json:"index"`
+	Value    uint64               `json:"value"`
+	ValueTwo uint64               `json:"valueTwo,omitempty"`
+	Op       LinuxSeccompOperator `json:"op"`
+}
+
+// LinuxSyscall is used to match a syscall in Seccomp
+type LinuxSyscall struct {
+	Names  []string           `json:"names"`
+	Action LinuxSeccompAction `json:"action"`
+	Args   []LinuxSeccompArg  `json:"args,omitempty"`
+}
+
+// LinuxIntelRdt has container runtime resource constraints for Intel RDT
+// CAT and MBA features which introduced in Linux 4.10 and 4.12 kernel
+type LinuxIntelRdt struct {
+	// The identity for RDT Class of Service
+	ClosID string `json:"closID,omitempty"`
+	// The schema for L3 cache id and capacity bitmask (CBM)
+	// Format: "L3:<cache_id0>=<cbm0>;<cache_id1>=<cbm1>;..."
+	L3CacheSchema string `json:"l3CacheSchema,omitempty"`
+
+	// The schema of memory bandwidth per L3 cache id
+	// Format: "MB:<cache_id0>=bandwidth0;<cache_id1>=bandwidth1;..."
+	// The unit of memory bandwidth is specified in "percentages" by
+	// default, and in "MBps" if MBA Software Controller is enabled.
+	MemBwSchema string `json:"memBwSchema,omitempty"`
+}
diff --git a/vendor/github.com/opencontainers/runtime-spec/specs-go/state.go b/vendor/github.com/opencontainers/runtime-spec/specs-go/state.go
new file mode 100644
index 00000000000..89dce34be20
--- /dev/null
+++ b/vendor/github.com/opencontainers/runtime-spec/specs-go/state.go
@@ -0,0 +1,17 @@
+package specs
+
+// State holds information about the runtime state of the container.
+type State struct {
+	// Version is the version of the specification that is supported.
+	Version string `json:"ociVersion"`
+	// ID is the container ID
+	ID string `json:"id"`
+	// Status is the runtime status of the container.
+	Status string `json:"status"`
+	// Pid is the process ID for the container process.
+	Pid int `json:"pid,omitempty"`
+	// Bundle is the path to the container's bundle directory.
+	Bundle string `json:"bundle"`
+	// Annotations are key values associated with the container.
+	Annotations map[string]string `json:"annotations,omitempty"`
+}
diff --git a/vendor/github.com/opencontainers/runtime-spec/specs-go/version.go b/vendor/github.com/opencontainers/runtime-spec/specs-go/version.go
new file mode 100644
index 00000000000..bda7e1ca94b
--- /dev/null
+++ b/vendor/github.com/opencontainers/runtime-spec/specs-go/version.go
@@ -0,0 +1,18 @@
+package specs
+
+import "fmt"
+
+const (
+	// VersionMajor is for an API incompatible changes
+	VersionMajor = 1
+	// VersionMinor is for functionality in a backwards-compatible manner
+	VersionMinor = 0
+	// VersionPatch is for backwards-compatible bug fixes
+	VersionPatch = 2
+
+	// VersionDev indicates development branch. Releases will be empty string.
+	VersionDev = ""
+)
+
+// Version is the specification version that the package types support.
+var Version = fmt.Sprintf("%d.%d.%d%s", VersionMajor, VersionMinor, VersionPatch, VersionDev)
diff --git a/vendor/github.com/pbnjay/memory/LICENSE b/vendor/github.com/pbnjay/memory/LICENSE
new file mode 100644
index 00000000000..63ca4a6d249
--- /dev/null
+++ b/vendor/github.com/pbnjay/memory/LICENSE
@@ -0,0 +1,29 @@
+BSD 3-Clause License
+
+Copyright (c) 2017, Jeremy Jay
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/vendor/github.com/pbnjay/memory/README.md b/vendor/github.com/pbnjay/memory/README.md
new file mode 100644
index 00000000000..e98f261a0f3
--- /dev/null
+++ b/vendor/github.com/pbnjay/memory/README.md
@@ -0,0 +1,41 @@
+# memory
+
+Package `memory` provides two methods reporting total physical system memory
+accessible to the kernel, and free memory available to the running application.
+
+This package has no external dependency besides the standard library and default operating system tools.
+
+Documentation:
+[![GoDoc](https://godoc.org/github.com/pbnjay/memory?status.svg)](https://godoc.org/github.com/pbnjay/memory)
+
+This is useful for dynamic code to minimize thrashing and other contention, similar to the stdlib `runtime.NumCPU`
+See some history of the proposal at https://github.com/golang/go/issues/21816
+
+
+## Example
+
+```go
+fmt.Printf("Total system memory: %d\n", memory.TotalMemory())
+fmt.Printf("Free memory: %d\n", memory.FreeMemory())
+```
+
+
+## Testing
+
+Tested/working on:
+ - macOS 10.12.6 (16G29), 10.15.7 (19H2)
+ - Windows 10 1511 (10586.1045)
+ - Linux RHEL (3.10.0-327.3.1.el7.x86_64)
+ - Raspberry Pi 3 (ARMv8) on Raspbian, ODROID-C1+ (ARMv7) on Ubuntu, C.H.I.P
+   (ARMv7).
+ - Amazon Linux 2 aarch64 (m6a.large, 4.14.203-156.332.amzn2.aarch64)
+
+Tested on virtual machines:
+ - Windows 7 SP1 386
+ - Debian stretch 386
+ - NetBSD 7.1 amd64 + 386
+ - OpenBSD 6.1 amd64 + 386
+ - FreeBSD 11.1 amd64 + 386
+ - DragonFly BSD 4.8.1 amd64
+
+If you have access to untested systems please test and report success/bugs.
diff --git a/vendor/github.com/pbnjay/memory/doc.go b/vendor/github.com/pbnjay/memory/doc.go
new file mode 100644
index 00000000000..4e4f984c0f2
--- /dev/null
+++ b/vendor/github.com/pbnjay/memory/doc.go
@@ -0,0 +1,24 @@
+// Package memory provides a single method reporting total system memory
+// accessible to the kernel.
+package memory
+
+// TotalMemory returns the total accessible system memory in bytes.
+//
+// The total accessible memory is installed physical memory size minus reserved
+// areas for the kernel and hardware, if such reservations are reported by
+// the operating system.
+//
+// If accessible memory size could not be determined, then 0 is returned.
+func TotalMemory() uint64 {
+	return sysTotalMemory()
+}
+
+// FreeMemory returns the total free system memory in bytes.
+//
+// The total free memory is installed physical memory size minus reserved
+// areas for other applications running on the same system.
+//
+// If free memory size could not be determined, then 0 is returned.
+func FreeMemory() uint64 {
+	return sysFreeMemory()
+}
diff --git a/vendor/github.com/pbnjay/memory/memory_bsd.go b/vendor/github.com/pbnjay/memory/memory_bsd.go
new file mode 100644
index 00000000000..49d808a9e72
--- /dev/null
+++ b/vendor/github.com/pbnjay/memory/memory_bsd.go
@@ -0,0 +1,19 @@
+// +build freebsd openbsd dragonfly netbsd
+
+package memory
+
+func sysTotalMemory() uint64 {
+	s, err := sysctlUint64("hw.physmem")
+	if err != nil {
+		return 0
+	}
+	return s
+}
+
+func sysFreeMemory() uint64 {
+	s, err := sysctlUint64("hw.usermem")
+	if err != nil {
+		return 0
+	}
+	return s
+}
diff --git a/vendor/github.com/pbnjay/memory/memory_darwin.go b/vendor/github.com/pbnjay/memory/memory_darwin.go
new file mode 100644
index 00000000000..a3f45769904
--- /dev/null
+++ b/vendor/github.com/pbnjay/memory/memory_darwin.go
@@ -0,0 +1,49 @@
+// +build darwin
+
+package memory
+
+import (
+	"os/exec"
+	"regexp"
+	"strconv"
+)
+
+func sysTotalMemory() uint64 {
+	s, err := sysctlUint64("hw.memsize")
+	if err != nil {
+		return 0
+	}
+	return s
+}
+
+func sysFreeMemory() uint64 {
+	cmd := exec.Command("vm_stat")
+	outBytes, err := cmd.Output()
+	if err != nil {
+		return 0
+	}
+
+	rePageSize := regexp.MustCompile("page size of ([0-9]*) bytes")
+	reFreePages := regexp.MustCompile("Pages free: *([0-9]*)\\.")
+
+	// default: page size of 4096 bytes
+	matches := rePageSize.FindSubmatchIndex(outBytes)
+	pageSize := uint64(4096)
+	if len(matches) == 4 {
+		pageSize, err = strconv.ParseUint(string(outBytes[matches[2]:matches[3]]), 10, 64)
+		if err != nil {
+			return 0
+		}
+	}
+
+	// ex: Pages free:                             1126961.
+	matches = reFreePages.FindSubmatchIndex(outBytes)
+	freePages := uint64(0)
+	if len(matches) == 4 {
+		freePages, err = strconv.ParseUint(string(outBytes[matches[2]:matches[3]]), 10, 64)
+		if err != nil {
+			return 0
+		}
+	}
+	return freePages * pageSize
+}
diff --git a/vendor/github.com/pbnjay/memory/memory_linux.go b/vendor/github.com/pbnjay/memory/memory_linux.go
new file mode 100644
index 00000000000..3d07711ce54
--- /dev/null
+++ b/vendor/github.com/pbnjay/memory/memory_linux.go
@@ -0,0 +1,29 @@
+// +build linux
+
+package memory
+
+import "syscall"
+
+func sysTotalMemory() uint64 {
+	in := &syscall.Sysinfo_t{}
+	err := syscall.Sysinfo(in)
+	if err != nil {
+		return 0
+	}
+	// If this is a 32-bit system, then these fields are
+	// uint32 instead of uint64.
+	// So we always convert to uint64 to match signature.
+	return uint64(in.Totalram) * uint64(in.Unit)
+}
+
+func sysFreeMemory() uint64 {
+	in := &syscall.Sysinfo_t{}
+	err := syscall.Sysinfo(in)
+	if err != nil {
+		return 0
+	}
+	// If this is a 32-bit system, then these fields are
+	// uint32 instead of uint64.
+	// So we always convert to uint64 to match signature.
+	return uint64(in.Freeram) * uint64(in.Unit)
+}
diff --git a/vendor/github.com/pbnjay/memory/memory_windows.go b/vendor/github.com/pbnjay/memory/memory_windows.go
new file mode 100644
index 00000000000..c8500cc6f3b
--- /dev/null
+++ b/vendor/github.com/pbnjay/memory/memory_windows.go
@@ -0,0 +1,60 @@
+// +build windows
+
+package memory
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+// omitting a few fields for brevity...
+// https://msdn.microsoft.com/en-us/library/windows/desktop/aa366589(v=vs.85).aspx
+type memStatusEx struct {
+	dwLength     uint32
+	dwMemoryLoad uint32
+	ullTotalPhys uint64
+	ullAvailPhys uint64
+	unused       [5]uint64
+}
+
+func sysTotalMemory() uint64 {
+	kernel32, err := syscall.LoadDLL("kernel32.dll")
+	if err != nil {
+		return 0
+	}
+	// GetPhysicallyInstalledSystemMemory is simpler, but broken on
+	// older versions of windows (and uses this under the hood anyway).
+	globalMemoryStatusEx, err := kernel32.FindProc("GlobalMemoryStatusEx")
+	if err != nil {
+		return 0
+	}
+	msx := &memStatusEx{
+		dwLength: 64,
+	}
+	r, _, _ := globalMemoryStatusEx.Call(uintptr(unsafe.Pointer(msx)))
+	if r == 0 {
+		return 0
+	}
+	return msx.ullTotalPhys
+}
+
+func sysFreeMemory() uint64 {
+	kernel32, err := syscall.LoadDLL("kernel32.dll")
+	if err != nil {
+		return 0
+	}
+	// GetPhysicallyInstalledSystemMemory is simpler, but broken on
+	// older versions of windows (and uses this under the hood anyway).
+	globalMemoryStatusEx, err := kernel32.FindProc("GlobalMemoryStatusEx")
+	if err != nil {
+		return 0
+	}
+	msx := &memStatusEx{
+		dwLength: 64,
+	}
+	r, _, _ := globalMemoryStatusEx.Call(uintptr(unsafe.Pointer(msx)))
+	if r == 0 {
+		return 0
+	}
+	return msx.ullAvailPhys
+}
diff --git a/vendor/github.com/pbnjay/memory/memsysctl.go b/vendor/github.com/pbnjay/memory/memsysctl.go
new file mode 100644
index 00000000000..438d9eff8e6
--- /dev/null
+++ b/vendor/github.com/pbnjay/memory/memsysctl.go
@@ -0,0 +1,21 @@
+// +build darwin freebsd openbsd dragonfly netbsd
+
+package memory
+
+import (
+	"syscall"
+	"unsafe"
+)
+
+func sysctlUint64(name string) (uint64, error) {
+	s, err := syscall.Sysctl(name)
+	if err != nil {
+		return 0, err
+	}
+	// hack because the string conversion above drops a \0
+	b := []byte(s)
+	if len(b) < 8 {
+		b = append(b, 0)
+	}
+	return *(*uint64)(unsafe.Pointer(&b[0])), nil
+}
diff --git a/vendor/github.com/pbnjay/memory/stub.go b/vendor/github.com/pbnjay/memory/stub.go
new file mode 100644
index 00000000000..f29473ba083
--- /dev/null
+++ b/vendor/github.com/pbnjay/memory/stub.go
@@ -0,0 +1,10 @@
+// +build !linux,!darwin,!windows,!freebsd,!dragonfly,!netbsd,!openbsd
+
+package memory
+
+func sysTotalMemory() uint64 {
+	return 0
+}
+func sysFreeMemory() uint64 {
+	return 0
+}
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/histogram.go b/vendor/github.com/prometheus/client_golang/prometheus/histogram.go
index 1feba62c6c9..b5c8bcb395a 100644
--- a/vendor/github.com/prometheus/client_golang/prometheus/histogram.go
+++ b/vendor/github.com/prometheus/client_golang/prometheus/histogram.go
@@ -475,6 +475,9 @@ type HistogramOpts struct {
 
 	// now is for testing purposes, by default it's time.Now.
 	now func() time.Time
+
+	// afterFunc is for testing purposes, by default it's time.AfterFunc.
+	afterFunc func(time.Duration, func()) *time.Timer
 }
 
 // HistogramVecOpts bundles the options to create a HistogramVec metric.
@@ -526,7 +529,9 @@ func newHistogram(desc *Desc, opts HistogramOpts, labelValues ...string) Histogr
 	if opts.now == nil {
 		opts.now = time.Now
 	}
-
+	if opts.afterFunc == nil {
+		opts.afterFunc = time.AfterFunc
+	}
 	h := &histogram{
 		desc:                            desc,
 		upperBounds:                     opts.Buckets,
@@ -536,6 +541,7 @@ func newHistogram(desc *Desc, opts HistogramOpts, labelValues ...string) Histogr
 		nativeHistogramMinResetDuration: opts.NativeHistogramMinResetDuration,
 		lastResetTime:                   opts.now(),
 		now:                             opts.now,
+		afterFunc:                       opts.afterFunc,
 	}
 	if len(h.upperBounds) == 0 && opts.NativeHistogramBucketFactor <= 1 {
 		h.upperBounds = DefBuckets
@@ -716,9 +722,16 @@ type histogram struct {
 	nativeHistogramMinResetDuration time.Duration
 	// lastResetTime is protected by mtx. It is also used as created timestamp.
 	lastResetTime time.Time
+	// resetScheduled is protected by mtx. It is true if a reset is
+	// scheduled for a later time (when nativeHistogramMinResetDuration has
+	// passed).
+	resetScheduled bool
 
 	// now is for testing purposes, by default it's time.Now.
 	now func() time.Time
+
+	// afterFunc is for testing purposes, by default it's time.AfterFunc.
+	afterFunc func(time.Duration, func()) *time.Timer
 }
 
 func (h *histogram) Desc() *Desc {
@@ -874,21 +887,31 @@ func (h *histogram) limitBuckets(counts *histogramCounts, value float64, bucket
 	if h.maybeReset(hotCounts, coldCounts, coldIdx, value, bucket) {
 		return
 	}
+	// One of the other strategies will happen. To undo what they will do as
+	// soon as enough time has passed to satisfy
+	// h.nativeHistogramMinResetDuration, schedule a reset at the right time
+	// if we haven't done so already.
+	if h.nativeHistogramMinResetDuration > 0 && !h.resetScheduled {
+		h.resetScheduled = true
+		h.afterFunc(h.nativeHistogramMinResetDuration-h.now().Sub(h.lastResetTime), h.reset)
+	}
+
 	if h.maybeWidenZeroBucket(hotCounts, coldCounts) {
 		return
 	}
 	h.doubleBucketWidth(hotCounts, coldCounts)
 }
 
-// maybeReset resets the whole histogram if at least h.nativeHistogramMinResetDuration
-// has been passed. It returns true if the histogram has been reset. The caller
-// must have locked h.mtx.
+// maybeReset resets the whole histogram if at least
+// h.nativeHistogramMinResetDuration has been passed. It returns true if the
+// histogram has been reset. The caller must have locked h.mtx.
 func (h *histogram) maybeReset(
 	hot, cold *histogramCounts, coldIdx uint64, value float64, bucket int,
 ) bool {
 	// We are using the possibly mocked h.now() rather than
 	// time.Since(h.lastResetTime) to enable testing.
-	if h.nativeHistogramMinResetDuration == 0 ||
+	if h.nativeHistogramMinResetDuration == 0 || // No reset configured.
+		h.resetScheduled || // Do not interefere if a reset is already scheduled.
 		h.now().Sub(h.lastResetTime) < h.nativeHistogramMinResetDuration {
 		return false
 	}
@@ -906,6 +929,29 @@ func (h *histogram) maybeReset(
 	return true
 }
 
+// reset resets the whole histogram. It locks h.mtx itself, i.e. it has to be
+// called without having locked h.mtx.
+func (h *histogram) reset() {
+	h.mtx.Lock()
+	defer h.mtx.Unlock()
+
+	n := atomic.LoadUint64(&h.countAndHotIdx)
+	hotIdx := n >> 63
+	coldIdx := (^n) >> 63
+	hot := h.counts[hotIdx]
+	cold := h.counts[coldIdx]
+	// Completely reset coldCounts.
+	h.resetCounts(cold)
+	// Make coldCounts the new hot counts while resetting countAndHotIdx.
+	n = atomic.SwapUint64(&h.countAndHotIdx, coldIdx<<63)
+	count := n & ((1 << 63) - 1)
+	waitForCooldown(count, hot)
+	// Finally, reset the formerly hot counts, too.
+	h.resetCounts(hot)
+	h.lastResetTime = h.now()
+	h.resetScheduled = false
+}
+
 // maybeWidenZeroBucket widens the zero bucket until it includes the existing
 // buckets closest to the zero bucket (which could be two, if an equidistant
 // negative and a positive bucket exists, but usually it's only one bucket to be
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/labels.go b/vendor/github.com/prometheus/client_golang/prometheus/labels.go
index b3c4eca2bc1..c21911f292d 100644
--- a/vendor/github.com/prometheus/client_golang/prometheus/labels.go
+++ b/vendor/github.com/prometheus/client_golang/prometheus/labels.go
@@ -165,6 +165,8 @@ func validateValuesInLabels(labels Labels, expectedNumberOfValues int) error {
 
 func validateLabelValues(vals []string, expectedNumberOfValues int) error {
 	if len(vals) != expectedNumberOfValues {
+		// The call below makes vals escape, copy them to avoid that.
+		vals := append([]string(nil), vals...)
 		return fmt.Errorf(
 			"%w: expected %d label values but got %d in %#v",
 			errInconsistentCardinality, expectedNumberOfValues,
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/process_collector_other.go b/vendor/github.com/prometheus/client_golang/prometheus/process_collector_other.go
index c0152cdb613..8c1136ceea3 100644
--- a/vendor/github.com/prometheus/client_golang/prometheus/process_collector_other.go
+++ b/vendor/github.com/prometheus/client_golang/prometheus/process_collector_other.go
@@ -11,8 +11,8 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
-//go:build !windows && !js
-// +build !windows,!js
+//go:build !windows && !js && !wasip1
+// +build !windows,!js,!wasip1
 
 package prometheus
 
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/process_collector_wasip1.go b/vendor/github.com/prometheus/client_golang/prometheus/process_collector_wasip1.go
new file mode 100644
index 00000000000..d8d9a6d7a2f
--- /dev/null
+++ b/vendor/github.com/prometheus/client_golang/prometheus/process_collector_wasip1.go
@@ -0,0 +1,26 @@
+// Copyright 2023 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+//go:build wasip1
+// +build wasip1
+
+package prometheus
+
+func canCollectProcess() bool {
+	return false
+}
+
+func (*processCollector) processCollect(chan<- Metric) {
+	// noop on this platform
+	return
+}
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/problem.go b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/problem.go
new file mode 100644
index 00000000000..9ba42826adb
--- /dev/null
+++ b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/problem.go
@@ -0,0 +1,33 @@
+// Copyright 2020 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package promlint
+
+import dto "github.com/prometheus/client_model/go"
+
+// A Problem is an issue detected by a linter.
+type Problem struct {
+	// The name of the metric indicated by this Problem.
+	Metric string
+
+	// A description of the issue for this Problem.
+	Text string
+}
+
+// newProblem is helper function to create a Problem.
+func newProblem(mf *dto.MetricFamily, text string) Problem {
+	return Problem{
+		Metric: mf.GetName(),
+		Text:   text,
+	}
+}
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/promlint.go b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/promlint.go
index c8864b6c3f5..dd29cccc30c 100644
--- a/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/promlint.go
+++ b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/promlint.go
@@ -16,15 +16,11 @@ package promlint
 
 import (
 	"errors"
-	"fmt"
 	"io"
-	"regexp"
 	"sort"
-	"strings"
-
-	"github.com/prometheus/common/expfmt"
 
 	dto "github.com/prometheus/client_model/go"
+	"github.com/prometheus/common/expfmt"
 )
 
 // A Linter is a Prometheus metrics linter.  It identifies issues with metric
@@ -37,23 +33,8 @@ type Linter struct {
 	// of them.
 	r   io.Reader
 	mfs []*dto.MetricFamily
-}
 
-// A Problem is an issue detected by a Linter.
-type Problem struct {
-	// The name of the metric indicated by this Problem.
-	Metric string
-
-	// A description of the issue for this Problem.
-	Text string
-}
-
-// newProblem is helper function to create a Problem.
-func newProblem(mf *dto.MetricFamily, text string) Problem {
-	return Problem{
-		Metric: mf.GetName(),
-		Text:   text,
-	}
+	customValidations []Validation
 }
 
 // New creates a new Linter that reads an input stream of Prometheus metrics in
@@ -72,6 +53,14 @@ func NewWithMetricFamilies(mfs []*dto.MetricFamily) *Linter {
 	}
 }
 
+// AddCustomValidations adds custom validations to the linter.
+func (l *Linter) AddCustomValidations(vs ...Validation) {
+	if l.customValidations == nil {
+		l.customValidations = make([]Validation, 0, len(vs))
+	}
+	l.customValidations = append(l.customValidations, vs...)
+}
+
 // Lint performs a linting pass, returning a slice of Problems indicating any
 // issues found in the metrics stream. The slice is sorted by metric name
 // and issue description.
@@ -91,11 +80,11 @@ func (l *Linter) Lint() ([]Problem, error) {
 				return nil, err
 			}
 
-			problems = append(problems, lint(mf)...)
+			problems = append(problems, l.lint(mf)...)
 		}
 	}
 	for _, mf := range l.mfs {
-		problems = append(problems, lint(mf)...)
+		problems = append(problems, l.lint(mf)...)
 	}
 
 	// Ensure deterministic output.
@@ -110,276 +99,25 @@ func (l *Linter) Lint() ([]Problem, error) {
 }
 
 // lint is the entry point for linting a single metric.
-func lint(mf *dto.MetricFamily) []Problem {
-	fns := []func(mf *dto.MetricFamily) []Problem{
-		lintHelp,
-		lintMetricUnits,
-		lintCounter,
-		lintHistogramSummaryReserved,
-		lintMetricTypeInName,
-		lintReservedChars,
-		lintCamelCase,
-		lintUnitAbbreviations,
-	}
-
-	var problems []Problem
-	for _, fn := range fns {
-		problems = append(problems, fn(mf)...)
-	}
-
-	// TODO(mdlayher): lint rules for specific metrics types.
-	return problems
-}
-
-// lintHelp detects issues related to the help text for a metric.
-func lintHelp(mf *dto.MetricFamily) []Problem {
+func (l *Linter) lint(mf *dto.MetricFamily) []Problem {
 	var problems []Problem
 
-	// Expect all metrics to have help text available.
-	if mf.Help == nil {
-		problems = append(problems, newProblem(mf, "no help text"))
-	}
-
-	return problems
-}
-
-// lintMetricUnits detects issues with metric unit names.
-func lintMetricUnits(mf *dto.MetricFamily) []Problem {
-	var problems []Problem
-
-	unit, base, ok := metricUnits(*mf.Name)
-	if !ok {
-		// No known units detected.
-		return nil
-	}
-
-	// Unit is already a base unit.
-	if unit == base {
-		return nil
-	}
-
-	problems = append(problems, newProblem(mf, fmt.Sprintf("use base unit %q instead of %q", base, unit)))
-
-	return problems
-}
-
-// lintCounter detects issues specific to counters, as well as patterns that should
-// only be used with counters.
-func lintCounter(mf *dto.MetricFamily) []Problem {
-	var problems []Problem
-
-	isCounter := mf.GetType() == dto.MetricType_COUNTER
-	isUntyped := mf.GetType() == dto.MetricType_UNTYPED
-	hasTotalSuffix := strings.HasSuffix(mf.GetName(), "_total")
-
-	switch {
-	case isCounter && !hasTotalSuffix:
-		problems = append(problems, newProblem(mf, `counter metrics should have "_total" suffix`))
-	case !isUntyped && !isCounter && hasTotalSuffix:
-		problems = append(problems, newProblem(mf, `non-counter metrics should not have "_total" suffix`))
-	}
-
-	return problems
-}
-
-// lintHistogramSummaryReserved detects when other types of metrics use names or labels
-// reserved for use by histograms and/or summaries.
-func lintHistogramSummaryReserved(mf *dto.MetricFamily) []Problem {
-	// These rules do not apply to untyped metrics.
-	t := mf.GetType()
-	if t == dto.MetricType_UNTYPED {
-		return nil
-	}
-
-	var problems []Problem
-
-	isHistogram := t == dto.MetricType_HISTOGRAM
-	isSummary := t == dto.MetricType_SUMMARY
-
-	n := mf.GetName()
-
-	if !isHistogram && strings.HasSuffix(n, "_bucket") {
-		problems = append(problems, newProblem(mf, `non-histogram metrics should not have "_bucket" suffix`))
-	}
-	if !isHistogram && !isSummary && strings.HasSuffix(n, "_count") {
-		problems = append(problems, newProblem(mf, `non-histogram and non-summary metrics should not have "_count" suffix`))
-	}
-	if !isHistogram && !isSummary && strings.HasSuffix(n, "_sum") {
-		problems = append(problems, newProblem(mf, `non-histogram and non-summary metrics should not have "_sum" suffix`))
-	}
-
-	for _, m := range mf.GetMetric() {
-		for _, l := range m.GetLabel() {
-			ln := l.GetName()
-
-			if !isHistogram && ln == "le" {
-				problems = append(problems, newProblem(mf, `non-histogram metrics should not have "le" label`))
-			}
-			if !isSummary && ln == "quantile" {
-				problems = append(problems, newProblem(mf, `non-summary metrics should not have "quantile" label`))
-			}
-		}
-	}
-
-	return problems
-}
-
-// lintMetricTypeInName detects when metric types are included in the metric name.
-func lintMetricTypeInName(mf *dto.MetricFamily) []Problem {
-	var problems []Problem
-	n := strings.ToLower(mf.GetName())
-
-	for i, t := range dto.MetricType_name {
-		if i == int32(dto.MetricType_UNTYPED) {
-			continue
+	for _, fn := range defaultValidations {
+		errs := fn(mf)
+		for _, err := range errs {
+			problems = append(problems, newProblem(mf, err.Error()))
 		}
-
-		typename := strings.ToLower(t)
-		if strings.Contains(n, "_"+typename+"_") || strings.HasSuffix(n, "_"+typename) {
-			problems = append(problems, newProblem(mf, fmt.Sprintf(`metric name should not include type '%s'`, typename)))
-		}
-	}
-	return problems
-}
-
-// lintReservedChars detects colons in metric names.
-func lintReservedChars(mf *dto.MetricFamily) []Problem {
-	var problems []Problem
-	if strings.Contains(mf.GetName(), ":") {
-		problems = append(problems, newProblem(mf, "metric names should not contain ':'"))
-	}
-	return problems
-}
-
-var camelCase = regexp.MustCompile(`[a-z][A-Z]`)
-
-// lintCamelCase detects metric names and label names written in camelCase.
-func lintCamelCase(mf *dto.MetricFamily) []Problem {
-	var problems []Problem
-	if camelCase.FindString(mf.GetName()) != "" {
-		problems = append(problems, newProblem(mf, "metric names should be written in 'snake_case' not 'camelCase'"))
 	}
 
-	for _, m := range mf.GetMetric() {
-		for _, l := range m.GetLabel() {
-			if camelCase.FindString(l.GetName()) != "" {
-				problems = append(problems, newProblem(mf, "label names should be written in 'snake_case' not 'camelCase'"))
+	if l.customValidations != nil {
+		for _, fn := range l.customValidations {
+			errs := fn(mf)
+			for _, err := range errs {
+				problems = append(problems, newProblem(mf, err.Error()))
 			}
 		}
 	}
-	return problems
-}
 
-// lintUnitAbbreviations detects abbreviated units in the metric name.
-func lintUnitAbbreviations(mf *dto.MetricFamily) []Problem {
-	var problems []Problem
-	n := strings.ToLower(mf.GetName())
-	for _, s := range unitAbbreviations {
-		if strings.Contains(n, "_"+s+"_") || strings.HasSuffix(n, "_"+s) {
-			problems = append(problems, newProblem(mf, "metric names should not contain abbreviated units"))
-		}
-	}
+	// TODO(mdlayher): lint rules for specific metrics types.
 	return problems
 }
-
-// metricUnits attempts to detect known unit types used as part of a metric name,
-// e.g. "foo_bytes_total" or "bar_baz_milligrams".
-func metricUnits(m string) (unit, base string, ok bool) {
-	ss := strings.Split(m, "_")
-
-	for _, s := range ss {
-		if base, found := units[s]; found {
-			return s, base, true
-		}
-
-		for _, p := range unitPrefixes {
-			if strings.HasPrefix(s, p) {
-				if base, found := units[s[len(p):]]; found {
-					return s, base, true
-				}
-			}
-		}
-	}
-
-	return "", "", false
-}
-
-// Units and their possible prefixes recognized by this library.  More can be
-// added over time as needed.
-var (
-	// map a unit to the appropriate base unit.
-	units = map[string]string{
-		// Base units.
-		"amperes": "amperes",
-		"bytes":   "bytes",
-		"celsius": "celsius", // Also allow Celsius because it is common in typical Prometheus use cases.
-		"grams":   "grams",
-		"joules":  "joules",
-		"kelvin":  "kelvin", // SI base unit, used in special cases (e.g. color temperature, scientific measurements).
-		"meters":  "meters", // Both American and international spelling permitted.
-		"metres":  "metres",
-		"seconds": "seconds",
-		"volts":   "volts",
-
-		// Non base units.
-		// Time.
-		"minutes": "seconds",
-		"hours":   "seconds",
-		"days":    "seconds",
-		"weeks":   "seconds",
-		// Temperature.
-		"kelvins":    "kelvin",
-		"fahrenheit": "celsius",
-		"rankine":    "celsius",
-		// Length.
-		"inches": "meters",
-		"yards":  "meters",
-		"miles":  "meters",
-		// Bytes.
-		"bits": "bytes",
-		// Energy.
-		"calories": "joules",
-		// Mass.
-		"pounds": "grams",
-		"ounces": "grams",
-	}
-
-	unitPrefixes = []string{
-		"pico",
-		"nano",
-		"micro",
-		"milli",
-		"centi",
-		"deci",
-		"deca",
-		"hecto",
-		"kilo",
-		"kibi",
-		"mega",
-		"mibi",
-		"giga",
-		"gibi",
-		"tera",
-		"tebi",
-		"peta",
-		"pebi",
-	}
-
-	// Common abbreviations that we'd like to discourage.
-	unitAbbreviations = []string{
-		"s",
-		"ms",
-		"us",
-		"ns",
-		"sec",
-		"b",
-		"kb",
-		"mb",
-		"gb",
-		"tb",
-		"pb",
-		"m",
-		"h",
-		"d",
-	}
-)
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validation.go b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validation.go
new file mode 100644
index 00000000000..f52ad9eab67
--- /dev/null
+++ b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validation.go
@@ -0,0 +1,33 @@
+// Copyright 2020 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package promlint
+
+import (
+	dto "github.com/prometheus/client_model/go"
+
+	"github.com/prometheus/client_golang/prometheus/testutil/promlint/validations"
+)
+
+type Validation = func(mf *dto.MetricFamily) []error
+
+var defaultValidations = []Validation{
+	validations.LintHelp,
+	validations.LintMetricUnits,
+	validations.LintCounter,
+	validations.LintHistogramSummaryReserved,
+	validations.LintMetricTypeInName,
+	validations.LintReservedChars,
+	validations.LintCamelCase,
+	validations.LintUnitAbbreviations,
+}
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/counter_validations.go b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/counter_validations.go
new file mode 100644
index 00000000000..f2c2c3905dd
--- /dev/null
+++ b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/counter_validations.go
@@ -0,0 +1,40 @@
+// Copyright 2020 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package validations
+
+import (
+	"errors"
+	"strings"
+
+	dto "github.com/prometheus/client_model/go"
+)
+
+// LintCounter detects issues specific to counters, as well as patterns that should
+// only be used with counters.
+func LintCounter(mf *dto.MetricFamily) []error {
+	var problems []error
+
+	isCounter := mf.GetType() == dto.MetricType_COUNTER
+	isUntyped := mf.GetType() == dto.MetricType_UNTYPED
+	hasTotalSuffix := strings.HasSuffix(mf.GetName(), "_total")
+
+	switch {
+	case isCounter && !hasTotalSuffix:
+		problems = append(problems, errors.New(`counter metrics should have "_total" suffix`))
+	case !isUntyped && !isCounter && hasTotalSuffix:
+		problems = append(problems, errors.New(`non-counter metrics should not have "_total" suffix`))
+	}
+
+	return problems
+}
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/generic_name_validations.go b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/generic_name_validations.go
new file mode 100644
index 00000000000..bc8dbd1e16b
--- /dev/null
+++ b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/generic_name_validations.go
@@ -0,0 +1,101 @@
+// Copyright 2020 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package validations
+
+import (
+	"errors"
+	"fmt"
+	"regexp"
+	"strings"
+
+	dto "github.com/prometheus/client_model/go"
+)
+
+var camelCase = regexp.MustCompile(`[a-z][A-Z]`)
+
+// LintMetricUnits detects issues with metric unit names.
+func LintMetricUnits(mf *dto.MetricFamily) []error {
+	var problems []error
+
+	unit, base, ok := metricUnits(*mf.Name)
+	if !ok {
+		// No known units detected.
+		return nil
+	}
+
+	// Unit is already a base unit.
+	if unit == base {
+		return nil
+	}
+
+	problems = append(problems, fmt.Errorf("use base unit %q instead of %q", base, unit))
+
+	return problems
+}
+
+// LintMetricTypeInName detects when metric types are included in the metric name.
+func LintMetricTypeInName(mf *dto.MetricFamily) []error {
+	var problems []error
+	n := strings.ToLower(mf.GetName())
+
+	for i, t := range dto.MetricType_name {
+		if i == int32(dto.MetricType_UNTYPED) {
+			continue
+		}
+
+		typename := strings.ToLower(t)
+		if strings.Contains(n, "_"+typename+"_") || strings.HasSuffix(n, "_"+typename) {
+			problems = append(problems, fmt.Errorf(`metric name should not include type '%s'`, typename))
+		}
+	}
+	return problems
+}
+
+// LintReservedChars detects colons in metric names.
+func LintReservedChars(mf *dto.MetricFamily) []error {
+	var problems []error
+	if strings.Contains(mf.GetName(), ":") {
+		problems = append(problems, errors.New("metric names should not contain ':'"))
+	}
+	return problems
+}
+
+// LintCamelCase detects metric names and label names written in camelCase.
+func LintCamelCase(mf *dto.MetricFamily) []error {
+	var problems []error
+	if camelCase.FindString(mf.GetName()) != "" {
+		problems = append(problems, errors.New("metric names should be written in 'snake_case' not 'camelCase'"))
+	}
+
+	for _, m := range mf.GetMetric() {
+		for _, l := range m.GetLabel() {
+			if camelCase.FindString(l.GetName()) != "" {
+				problems = append(problems, errors.New("label names should be written in 'snake_case' not 'camelCase'"))
+			}
+		}
+	}
+	return problems
+}
+
+// LintUnitAbbreviations detects abbreviated units in the metric name.
+func LintUnitAbbreviations(mf *dto.MetricFamily) []error {
+	var problems []error
+	n := strings.ToLower(mf.GetName())
+	for _, s := range unitAbbreviations {
+		if strings.Contains(n, "_"+s+"_") || strings.HasSuffix(n, "_"+s) {
+			problems = append(problems, errors.New("metric names should not contain abbreviated units"))
+		}
+	}
+	return problems
+}
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/help_validations.go b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/help_validations.go
new file mode 100644
index 00000000000..1df29446897
--- /dev/null
+++ b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/help_validations.go
@@ -0,0 +1,32 @@
+// Copyright 2020 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package validations
+
+import (
+	"errors"
+
+	dto "github.com/prometheus/client_model/go"
+)
+
+// LintHelp detects issues related to the help text for a metric.
+func LintHelp(mf *dto.MetricFamily) []error {
+	var problems []error
+
+	// Expect all metrics to have help text available.
+	if mf.Help == nil {
+		problems = append(problems, errors.New("no help text"))
+	}
+
+	return problems
+}
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/histogram_validations.go b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/histogram_validations.go
new file mode 100644
index 00000000000..6564bdf3668
--- /dev/null
+++ b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/histogram_validations.go
@@ -0,0 +1,63 @@
+// Copyright 2020 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package validations
+
+import (
+	"errors"
+	"strings"
+
+	dto "github.com/prometheus/client_model/go"
+)
+
+// LintHistogramSummaryReserved detects when other types of metrics use names or labels
+// reserved for use by histograms and/or summaries.
+func LintHistogramSummaryReserved(mf *dto.MetricFamily) []error {
+	// These rules do not apply to untyped metrics.
+	t := mf.GetType()
+	if t == dto.MetricType_UNTYPED {
+		return nil
+	}
+
+	var problems []error
+
+	isHistogram := t == dto.MetricType_HISTOGRAM
+	isSummary := t == dto.MetricType_SUMMARY
+
+	n := mf.GetName()
+
+	if !isHistogram && strings.HasSuffix(n, "_bucket") {
+		problems = append(problems, errors.New(`non-histogram metrics should not have "_bucket" suffix`))
+	}
+	if !isHistogram && !isSummary && strings.HasSuffix(n, "_count") {
+		problems = append(problems, errors.New(`non-histogram and non-summary metrics should not have "_count" suffix`))
+	}
+	if !isHistogram && !isSummary && strings.HasSuffix(n, "_sum") {
+		problems = append(problems, errors.New(`non-histogram and non-summary metrics should not have "_sum" suffix`))
+	}
+
+	for _, m := range mf.GetMetric() {
+		for _, l := range m.GetLabel() {
+			ln := l.GetName()
+
+			if !isHistogram && ln == "le" {
+				problems = append(problems, errors.New(`non-histogram metrics should not have "le" label`))
+			}
+			if !isSummary && ln == "quantile" {
+				problems = append(problems, errors.New(`non-summary metrics should not have "quantile" label`))
+			}
+		}
+	}
+
+	return problems
+}
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/units.go b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/units.go
new file mode 100644
index 00000000000..967977d2b01
--- /dev/null
+++ b/vendor/github.com/prometheus/client_golang/prometheus/testutil/promlint/validations/units.go
@@ -0,0 +1,118 @@
+// Copyright 2020 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package validations
+
+import "strings"
+
+// Units and their possible prefixes recognized by this library.  More can be
+// added over time as needed.
+var (
+	// map a unit to the appropriate base unit.
+	units = map[string]string{
+		// Base units.
+		"amperes": "amperes",
+		"bytes":   "bytes",
+		"celsius": "celsius", // Also allow Celsius because it is common in typical Prometheus use cases.
+		"grams":   "grams",
+		"joules":  "joules",
+		"kelvin":  "kelvin", // SI base unit, used in special cases (e.g. color temperature, scientific measurements).
+		"meters":  "meters", // Both American and international spelling permitted.
+		"metres":  "metres",
+		"seconds": "seconds",
+		"volts":   "volts",
+
+		// Non base units.
+		// Time.
+		"minutes": "seconds",
+		"hours":   "seconds",
+		"days":    "seconds",
+		"weeks":   "seconds",
+		// Temperature.
+		"kelvins":    "kelvin",
+		"fahrenheit": "celsius",
+		"rankine":    "celsius",
+		// Length.
+		"inches": "meters",
+		"yards":  "meters",
+		"miles":  "meters",
+		// Bytes.
+		"bits": "bytes",
+		// Energy.
+		"calories": "joules",
+		// Mass.
+		"pounds": "grams",
+		"ounces": "grams",
+	}
+
+	unitPrefixes = []string{
+		"pico",
+		"nano",
+		"micro",
+		"milli",
+		"centi",
+		"deci",
+		"deca",
+		"hecto",
+		"kilo",
+		"kibi",
+		"mega",
+		"mibi",
+		"giga",
+		"gibi",
+		"tera",
+		"tebi",
+		"peta",
+		"pebi",
+	}
+
+	// Common abbreviations that we'd like to discourage.
+	unitAbbreviations = []string{
+		"s",
+		"ms",
+		"us",
+		"ns",
+		"sec",
+		"b",
+		"kb",
+		"mb",
+		"gb",
+		"tb",
+		"pb",
+		"m",
+		"h",
+		"d",
+	}
+)
+
+// metricUnits attempts to detect known unit types used as part of a metric name,
+// e.g. "foo_bytes_total" or "bar_baz_milligrams".
+func metricUnits(m string) (unit, base string, ok bool) {
+	ss := strings.Split(m, "_")
+
+	for _, s := range ss {
+		if base, found := units[s]; found {
+			return s, base, true
+		}
+
+		for _, p := range unitPrefixes {
+			if strings.HasPrefix(s, p) {
+				if base, found := units[s[len(p):]]; found {
+					return s, base, true
+				}
+			}
+		}
+	}
+
+	return "", "", false
+}
diff --git a/vendor/github.com/prometheus/client_golang/prometheus/testutil/testutil.go b/vendor/github.com/prometheus/client_golang/prometheus/testutil/testutil.go
index 82d4a5436b6..269f56435b8 100644
--- a/vendor/github.com/prometheus/client_golang/prometheus/testutil/testutil.go
+++ b/vendor/github.com/prometheus/client_golang/prometheus/testutil/testutil.go
@@ -47,6 +47,7 @@ import (
 	"github.com/davecgh/go-spew/spew"
 	dto "github.com/prometheus/client_model/go"
 	"github.com/prometheus/common/expfmt"
+	"google.golang.org/protobuf/proto"
 
 	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/client_golang/prometheus/internal"
@@ -230,6 +231,20 @@ func convertReaderToMetricFamily(reader io.Reader) ([]*dto.MetricFamily, error)
 		return nil, fmt.Errorf("converting reader to metric families failed: %w", err)
 	}
 
+	// The text protocol handles empty help fields inconsistently. When
+	// encoding, any non-nil value, include the empty string, produces a
+	// "# HELP" line. But when decoding, the help field is only set to a
+	// non-nil value if the "# HELP" line contains a non-empty value.
+	//
+	// Because metrics in a registry always have non-nil help fields, populate
+	// any nil help fields in the parsed metrics with the empty string so that
+	// when we compare text encodings, the results are consistent.
+	for _, metric := range notNormalized {
+		if metric.Help == nil {
+			metric.Help = proto.String("")
+		}
+	}
+
 	return internal.NormalizeMetricFamilies(notNormalized), nil
 }
 
diff --git a/vendor/github.com/prometheus/common/config/http_config.go b/vendor/github.com/prometheus/common/config/http_config.go
index 4763549b8ff..4a926e8d067 100644
--- a/vendor/github.com/prometheus/common/config/http_config.go
+++ b/vendor/github.com/prometheus/common/config/http_config.go
@@ -546,10 +546,10 @@ func NewRoundTripperFromConfig(cfg HTTPClientConfig, name string, optFuncs ...HT
 
 		// If a authorization_credentials is provided, create a round tripper that will set the
 		// Authorization header correctly on each request.
-		if cfg.Authorization != nil && len(cfg.Authorization.Credentials) > 0 {
-			rt = NewAuthorizationCredentialsRoundTripper(cfg.Authorization.Type, cfg.Authorization.Credentials, rt)
-		} else if cfg.Authorization != nil && len(cfg.Authorization.CredentialsFile) > 0 {
+		if cfg.Authorization != nil && len(cfg.Authorization.CredentialsFile) > 0 {
 			rt = NewAuthorizationCredentialsFileRoundTripper(cfg.Authorization.Type, cfg.Authorization.CredentialsFile, rt)
+		} else if cfg.Authorization != nil {
+			rt = NewAuthorizationCredentialsRoundTripper(cfg.Authorization.Type, cfg.Authorization.Credentials, rt)
 		}
 		// Backwards compatibility, be nice with importers who would not have
 		// called Validate().
@@ -630,7 +630,7 @@ func (rt *authorizationCredentialsFileRoundTripper) RoundTrip(req *http.Request)
 	if len(req.Header.Get("Authorization")) == 0 {
 		b, err := os.ReadFile(rt.authCredentialsFile)
 		if err != nil {
-			return nil, fmt.Errorf("unable to read authorization credentials file %s: %s", rt.authCredentialsFile, err)
+			return nil, fmt.Errorf("unable to read authorization credentials file %s: %w", rt.authCredentialsFile, err)
 		}
 		authCredentials := strings.TrimSpace(string(b))
 
@@ -670,7 +670,7 @@ func (rt *basicAuthRoundTripper) RoundTrip(req *http.Request) (*http.Response, e
 	if rt.usernameFile != "" {
 		usernameBytes, err := os.ReadFile(rt.usernameFile)
 		if err != nil {
-			return nil, fmt.Errorf("unable to read basic auth username file %s: %s", rt.usernameFile, err)
+			return nil, fmt.Errorf("unable to read basic auth username file %s: %w", rt.usernameFile, err)
 		}
 		username = strings.TrimSpace(string(usernameBytes))
 	} else {
@@ -679,7 +679,7 @@ func (rt *basicAuthRoundTripper) RoundTrip(req *http.Request) (*http.Response, e
 	if rt.passwordFile != "" {
 		passwordBytes, err := os.ReadFile(rt.passwordFile)
 		if err != nil {
-			return nil, fmt.Errorf("unable to read basic auth password file %s: %s", rt.passwordFile, err)
+			return nil, fmt.Errorf("unable to read basic auth password file %s: %w", rt.passwordFile, err)
 		}
 		password = strings.TrimSpace(string(passwordBytes))
 	} else {
@@ -723,7 +723,7 @@ func (rt *oauth2RoundTripper) RoundTrip(req *http.Request) (*http.Response, erro
 	if rt.config.ClientSecretFile != "" {
 		data, err := os.ReadFile(rt.config.ClientSecretFile)
 		if err != nil {
-			return nil, fmt.Errorf("unable to read oauth2 client secret file %s: %s", rt.config.ClientSecretFile, err)
+			return nil, fmt.Errorf("unable to read oauth2 client secret file %s: %w", rt.config.ClientSecretFile, err)
 		}
 		secret = strings.TrimSpace(string(data))
 		rt.mtx.RLock()
@@ -977,7 +977,7 @@ func (c *TLSConfig) getClientCertificate(_ *tls.CertificateRequestInfo) (*tls.Ce
 	if c.CertFile != "" {
 		certData, err = os.ReadFile(c.CertFile)
 		if err != nil {
-			return nil, fmt.Errorf("unable to read specified client cert (%s): %s", c.CertFile, err)
+			return nil, fmt.Errorf("unable to read specified client cert (%s): %w", c.CertFile, err)
 		}
 	} else {
 		certData = []byte(c.Cert)
@@ -986,7 +986,7 @@ func (c *TLSConfig) getClientCertificate(_ *tls.CertificateRequestInfo) (*tls.Ce
 	if c.KeyFile != "" {
 		keyData, err = os.ReadFile(c.KeyFile)
 		if err != nil {
-			return nil, fmt.Errorf("unable to read specified client key (%s): %s", c.KeyFile, err)
+			return nil, fmt.Errorf("unable to read specified client key (%s): %w", c.KeyFile, err)
 		}
 	} else {
 		keyData = []byte(c.Key)
@@ -994,7 +994,7 @@ func (c *TLSConfig) getClientCertificate(_ *tls.CertificateRequestInfo) (*tls.Ce
 
 	cert, err := tls.X509KeyPair(certData, keyData)
 	if err != nil {
-		return nil, fmt.Errorf("unable to use specified client cert (%s) & key (%s): %s", c.CertFile, c.KeyFile, err)
+		return nil, fmt.Errorf("unable to use specified client cert (%s) & key (%s): %w", c.CertFile, c.KeyFile, err)
 	}
 
 	return &cert, nil
@@ -1004,7 +1004,7 @@ func (c *TLSConfig) getClientCertificate(_ *tls.CertificateRequestInfo) (*tls.Ce
 func readCAFile(f string) ([]byte, error) {
 	data, err := os.ReadFile(f)
 	if err != nil {
-		return nil, fmt.Errorf("unable to load specified CA cert %s: %s", f, err)
+		return nil, fmt.Errorf("unable to load specified CA cert %s: %w", f, err)
 	}
 	return data, nil
 }
diff --git a/vendor/github.com/prometheus/common/expfmt/decode.go b/vendor/github.com/prometheus/common/expfmt/decode.go
index 0ca86a3dc7c..a909b171c86 100644
--- a/vendor/github.com/prometheus/common/expfmt/decode.go
+++ b/vendor/github.com/prometheus/common/expfmt/decode.go
@@ -14,6 +14,7 @@
 package expfmt
 
 import (
+	"bufio"
 	"fmt"
 	"io"
 	"math"
@@ -21,8 +22,8 @@ import (
 	"net/http"
 
 	dto "github.com/prometheus/client_model/go"
+	"google.golang.org/protobuf/encoding/protodelim"
 
-	"github.com/matttproud/golang_protobuf_extensions/v2/pbutil"
 	"github.com/prometheus/common/model"
 )
 
@@ -86,8 +87,10 @@ type protoDecoder struct {
 
 // Decode implements the Decoder interface.
 func (d *protoDecoder) Decode(v *dto.MetricFamily) error {
-	_, err := pbutil.ReadDelimited(d.r, v)
-	if err != nil {
+	opts := protodelim.UnmarshalOptions{
+		MaxSize: -1,
+	}
+	if err := opts.UnmarshalFrom(bufio.NewReader(d.r), v); err != nil {
 		return err
 	}
 	if !model.IsValidMetricName(model.LabelValue(v.GetName())) {
diff --git a/vendor/github.com/prometheus/common/expfmt/encode.go b/vendor/github.com/prometheus/common/expfmt/encode.go
index ca214060009..02b7a5e8128 100644
--- a/vendor/github.com/prometheus/common/expfmt/encode.go
+++ b/vendor/github.com/prometheus/common/expfmt/encode.go
@@ -18,10 +18,11 @@ import (
 	"io"
 	"net/http"
 
-	"github.com/matttproud/golang_protobuf_extensions/v2/pbutil"
-	"github.com/prometheus/common/internal/bitbucket.org/ww/goautoneg"
+	"google.golang.org/protobuf/encoding/protodelim"
 	"google.golang.org/protobuf/encoding/prototext"
 
+	"github.com/prometheus/common/internal/bitbucket.org/ww/goautoneg"
+
 	dto "github.com/prometheus/client_model/go"
 )
 
@@ -120,7 +121,7 @@ func NewEncoder(w io.Writer, format Format) Encoder {
 	case FmtProtoDelim:
 		return encoderCloser{
 			encode: func(v *dto.MetricFamily) error {
-				_, err := pbutil.WriteDelimited(w, v)
+				_, err := protodelim.MarshalTo(w, v)
 				return err
 			},
 			close: func() error { return nil },
diff --git a/vendor/github.com/prometheus/common/expfmt/text_parse.go b/vendor/github.com/prometheus/common/expfmt/text_parse.go
index 35db1cc9d73..26490211af2 100644
--- a/vendor/github.com/prometheus/common/expfmt/text_parse.go
+++ b/vendor/github.com/prometheus/common/expfmt/text_parse.go
@@ -16,6 +16,7 @@ package expfmt
 import (
 	"bufio"
 	"bytes"
+	"errors"
 	"fmt"
 	"io"
 	"math"
@@ -24,8 +25,9 @@ import (
 
 	dto "github.com/prometheus/client_model/go"
 
-	"github.com/prometheus/common/model"
 	"google.golang.org/protobuf/proto"
+
+	"github.com/prometheus/common/model"
 )
 
 // A stateFn is a function that represents a state in a state machine. By
@@ -112,7 +114,7 @@ func (p *TextParser) TextToMetricFamilies(in io.Reader) (map[string]*dto.MetricF
 	// stream. Turn this error into something nicer and more
 	// meaningful. (io.EOF is often used as a signal for the legitimate end
 	// of an input stream.)
-	if p.err == io.EOF {
+	if p.err != nil && errors.Is(p.err, io.EOF) {
 		p.parseError("unexpected end of input stream")
 	}
 	return p.metricFamiliesByName, p.err
@@ -146,7 +148,7 @@ func (p *TextParser) startOfLine() stateFn {
 		// which is not an error but the signal that we are done.
 		// Any other error that happens to align with the start of
 		// a line is still an error.
-		if p.err == io.EOF {
+		if errors.Is(p.err, io.EOF) {
 			p.err = nil
 		}
 		return nil
diff --git a/vendor/github.com/prometheus/common/model/alert.go b/vendor/github.com/prometheus/common/model/alert.go
index 35e739c7ad2..178fdbaf615 100644
--- a/vendor/github.com/prometheus/common/model/alert.go
+++ b/vendor/github.com/prometheus/common/model/alert.go
@@ -90,13 +90,13 @@ func (a *Alert) Validate() error {
 		return fmt.Errorf("start time must be before end time")
 	}
 	if err := a.Labels.Validate(); err != nil {
-		return fmt.Errorf("invalid label set: %s", err)
+		return fmt.Errorf("invalid label set: %w", err)
 	}
 	if len(a.Labels) == 0 {
 		return fmt.Errorf("at least one label pair required")
 	}
 	if err := a.Annotations.Validate(); err != nil {
-		return fmt.Errorf("invalid annotations: %s", err)
+		return fmt.Errorf("invalid annotations: %w", err)
 	}
 	return nil
 }
diff --git a/vendor/github.com/prometheus/common/model/metadata.go b/vendor/github.com/prometheus/common/model/metadata.go
new file mode 100644
index 00000000000..447ab8ad635
--- /dev/null
+++ b/vendor/github.com/prometheus/common/model/metadata.go
@@ -0,0 +1,28 @@
+// Copyright 2023 The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package model
+
+// MetricType represents metric type values.
+type MetricType string
+
+const (
+	MetricTypeCounter        = MetricType("counter")
+	MetricTypeGauge          = MetricType("gauge")
+	MetricTypeHistogram      = MetricType("histogram")
+	MetricTypeGaugeHistogram = MetricType("gaugehistogram")
+	MetricTypeSummary        = MetricType("summary")
+	MetricTypeInfo           = MetricType("info")
+	MetricTypeStateset       = MetricType("stateset")
+	MetricTypeUnknown        = MetricType("unknown")
+)
diff --git a/vendor/github.com/prometheus/common/model/metric.go b/vendor/github.com/prometheus/common/model/metric.go
index 00804b7fedb..f8c5eabaa99 100644
--- a/vendor/github.com/prometheus/common/model/metric.go
+++ b/vendor/github.com/prometheus/common/model/metric.go
@@ -20,12 +20,10 @@ import (
 	"strings"
 )
 
-var (
-	// MetricNameRE is a regular expression matching valid metric
-	// names. Note that the IsValidMetricName function performs the same
-	// check but faster than a match with this regular expression.
-	MetricNameRE = regexp.MustCompile(`^[a-zA-Z_:][a-zA-Z0-9_:]*$`)
-)
+// MetricNameRE is a regular expression matching valid metric
+// names. Note that the IsValidMetricName function performs the same
+// check but faster than a match with this regular expression.
+var MetricNameRE = regexp.MustCompile(`^[a-zA-Z_:][a-zA-Z0-9_:]*$`)
 
 // A Metric is similar to a LabelSet, but the key difference is that a Metric is
 // a singleton and refers to one and only one stream of samples.
diff --git a/vendor/github.com/prometheus/common/model/signature.go b/vendor/github.com/prometheus/common/model/signature.go
index 8762b13c63d..dc8a0026c48 100644
--- a/vendor/github.com/prometheus/common/model/signature.go
+++ b/vendor/github.com/prometheus/common/model/signature.go
@@ -22,10 +22,8 @@ import (
 // when calculating their combined hash value (aka signature aka fingerprint).
 const SeparatorByte byte = 255
 
-var (
-	// cache the signature of an empty label set.
-	emptyLabelSignature = hashNew()
-)
+// cache the signature of an empty label set.
+var emptyLabelSignature = hashNew()
 
 // LabelsToSignature returns a quasi-unique signature (i.e., fingerprint) for a
 // given label set. (Collisions are possible but unlikely if the number of label
diff --git a/vendor/github.com/prometheus/common/model/silence.go b/vendor/github.com/prometheus/common/model/silence.go
index bb99889d2cc..910b0b71fcc 100644
--- a/vendor/github.com/prometheus/common/model/silence.go
+++ b/vendor/github.com/prometheus/common/model/silence.go
@@ -81,7 +81,7 @@ func (s *Silence) Validate() error {
 	}
 	for _, m := range s.Matchers {
 		if err := m.Validate(); err != nil {
-			return fmt.Errorf("invalid matcher: %s", err)
+			return fmt.Errorf("invalid matcher: %w", err)
 		}
 	}
 	if s.StartsAt.IsZero() {
diff --git a/vendor/github.com/prometheus/common/model/value.go b/vendor/github.com/prometheus/common/model/value.go
index 9eb440413fd..8050637d822 100644
--- a/vendor/github.com/prometheus/common/model/value.go
+++ b/vendor/github.com/prometheus/common/model/value.go
@@ -21,14 +21,12 @@ import (
 	"strings"
 )
 
-var (
-	// ZeroSample is the pseudo zero-value of Sample used to signal a
-	// non-existing sample. It is a Sample with timestamp Earliest, value 0.0,
-	// and metric nil. Note that the natural zero value of Sample has a timestamp
-	// of 0, which is possible to appear in a real Sample and thus not suitable
-	// to signal a non-existing Sample.
-	ZeroSample = Sample{Timestamp: Earliest}
-)
+// ZeroSample is the pseudo zero-value of Sample used to signal a
+// non-existing sample. It is a Sample with timestamp Earliest, value 0.0,
+// and metric nil. Note that the natural zero value of Sample has a timestamp
+// of 0, which is possible to appear in a real Sample and thus not suitable
+// to signal a non-existing Sample.
+var ZeroSample = Sample{Timestamp: Earliest}
 
 // Sample is a sample pair associated with a metric. A single sample must either
 // define Value or Histogram but not both. Histogram == nil implies the Value
@@ -274,7 +272,7 @@ func (s *Scalar) UnmarshalJSON(b []byte) error {
 
 	value, err := strconv.ParseFloat(f, 64)
 	if err != nil {
-		return fmt.Errorf("error parsing sample value: %s", err)
+		return fmt.Errorf("error parsing sample value: %w", err)
 	}
 	s.Value = SampleValue(value)
 	return nil
diff --git a/vendor/github.com/prometheus/common/model/value_float.go b/vendor/github.com/prometheus/common/model/value_float.go
index 0f615a70530..ae35cc2ab4b 100644
--- a/vendor/github.com/prometheus/common/model/value_float.go
+++ b/vendor/github.com/prometheus/common/model/value_float.go
@@ -20,14 +20,12 @@ import (
 	"strconv"
 )
 
-var (
-	// ZeroSamplePair is the pseudo zero-value of SamplePair used to signal a
-	// non-existing sample pair. It is a SamplePair with timestamp Earliest and
-	// value 0.0. Note that the natural zero value of SamplePair has a timestamp
-	// of 0, which is possible to appear in a real SamplePair and thus not
-	// suitable to signal a non-existing SamplePair.
-	ZeroSamplePair = SamplePair{Timestamp: Earliest}
-)
+// ZeroSamplePair is the pseudo zero-value of SamplePair used to signal a
+// non-existing sample pair. It is a SamplePair with timestamp Earliest and
+// value 0.0. Note that the natural zero value of SamplePair has a timestamp
+// of 0, which is possible to appear in a real SamplePair and thus not
+// suitable to signal a non-existing SamplePair.
+var ZeroSamplePair = SamplePair{Timestamp: Earliest}
 
 // A SampleValue is a representation of a value for a given sample at a given
 // time.
diff --git a/vendor/github.com/prometheus/common/promlog/flag/flag.go b/vendor/github.com/prometheus/common/promlog/flag/flag.go
index c25d818d72c..e045b97390f 100644
--- a/vendor/github.com/prometheus/common/promlog/flag/flag.go
+++ b/vendor/github.com/prometheus/common/promlog/flag/flag.go
@@ -14,7 +14,10 @@
 package flag
 
 import (
+	"strings"
+
 	kingpin "github.com/alecthomas/kingpin/v2"
+
 	"github.com/prometheus/common/promlog"
 )
 
@@ -23,23 +26,25 @@ import (
 const LevelFlagName = "log.level"
 
 // LevelFlagHelp is the help description for the log.level flag.
-const LevelFlagHelp = "Only log messages with the given severity or above. One of: [debug, info, warn, error]"
+var LevelFlagHelp = "Only log messages with the given severity or above. One of: [" + strings.Join(promlog.LevelFlagOptions, ", ") + "]"
 
 // FormatFlagName is the canonical flag name to configure the log format
 // within Prometheus projects.
 const FormatFlagName = "log.format"
 
 // FormatFlagHelp is the help description for the log.format flag.
-const FormatFlagHelp = "Output format of log messages. One of: [logfmt, json]"
+var FormatFlagHelp = "Output format of log messages. One of: [" + strings.Join(promlog.FormatFlagOptions, ", ") + "]"
 
 // AddFlags adds the flags used by this package to the Kingpin application.
 // To use the default Kingpin application, call AddFlags(kingpin.CommandLine)
 func AddFlags(a *kingpin.Application, config *promlog.Config) {
 	config.Level = &promlog.AllowedLevel{}
 	a.Flag(LevelFlagName, LevelFlagHelp).
-		Default("info").SetValue(config.Level)
+		Default("info").HintOptions(promlog.LevelFlagOptions...).
+		SetValue(config.Level)
 
 	config.Format = &promlog.AllowedFormat{}
 	a.Flag(FormatFlagName, FormatFlagHelp).
-		Default("logfmt").SetValue(config.Format)
+		Default("logfmt").HintOptions(promlog.FormatFlagOptions...).
+		SetValue(config.Format)
 }
diff --git a/vendor/github.com/prometheus/common/promlog/log.go b/vendor/github.com/prometheus/common/promlog/log.go
index 3ac7b3fdf12..2449c90fbe3 100644
--- a/vendor/github.com/prometheus/common/promlog/log.go
+++ b/vendor/github.com/prometheus/common/promlog/log.go
@@ -34,6 +34,9 @@ var (
 		func() time.Time { return time.Now().UTC() },
 		"2006-01-02T15:04:05.000Z07:00",
 	)
+
+	LevelFlagOptions  = []string{"debug", "info", "warn", "error"}
+	FormatFlagOptions = []string{"logfmt, json"}
 )
 
 // AllowedLevel is a settable identifier for the minimum level a log entry
diff --git a/vendor/github.com/prometheus/common/version/info.go b/vendor/github.com/prometheus/common/version/info.go
index 00caa0ba47a..28884dbc391 100644
--- a/vendor/github.com/prometheus/common/version/info.go
+++ b/vendor/github.com/prometheus/common/version/info.go
@@ -48,12 +48,12 @@ func NewCollector(program string) prometheus.Collector {
 			),
 			ConstLabels: prometheus.Labels{
 				"version":   Version,
-				"revision":  getRevision(),
+				"revision":  GetRevision(),
 				"branch":    Branch,
 				"goversion": GoVersion,
 				"goos":      GoOS,
 				"goarch":    GoArch,
-				"tags":      getTags(),
+				"tags":      GetTags(),
 			},
 		},
 		func() float64 { return 1 },
@@ -75,13 +75,13 @@ func Print(program string) string {
 	m := map[string]string{
 		"program":   program,
 		"version":   Version,
-		"revision":  getRevision(),
+		"revision":  GetRevision(),
 		"branch":    Branch,
 		"buildUser": BuildUser,
 		"buildDate": BuildDate,
 		"goVersion": GoVersion,
 		"platform":  GoOS + "/" + GoArch,
-		"tags":      getTags(),
+		"tags":      GetTags(),
 	}
 	t := template.Must(template.New("version").Parse(versionInfoTmpl))
 
@@ -94,10 +94,10 @@ func Print(program string) string {
 
 // Info returns version, branch and revision information.
 func Info() string {
-	return fmt.Sprintf("(version=%s, branch=%s, revision=%s)", Version, Branch, getRevision())
+	return fmt.Sprintf("(version=%s, branch=%s, revision=%s)", Version, Branch, GetRevision())
 }
 
 // BuildContext returns goVersion, platform, buildUser and buildDate information.
 func BuildContext() string {
-	return fmt.Sprintf("(go=%s, platform=%s, user=%s, date=%s, tags=%s)", GoVersion, GoOS+"/"+GoArch, BuildUser, BuildDate, getTags())
+	return fmt.Sprintf("(go=%s, platform=%s, user=%s, date=%s, tags=%s)", GoVersion, GoOS+"/"+GoArch, BuildUser, BuildDate, GetTags())
 }
diff --git a/vendor/github.com/prometheus/common/version/info_default.go b/vendor/github.com/prometheus/common/version/info_default.go
index 8eb3a0bf177..684996f10a7 100644
--- a/vendor/github.com/prometheus/common/version/info_default.go
+++ b/vendor/github.com/prometheus/common/version/info_default.go
@@ -16,7 +16,7 @@
 
 package version
 
-func getRevision() string {
+func GetRevision() string {
 	return Revision
 }
 
diff --git a/vendor/github.com/prometheus/common/version/info_go118.go b/vendor/github.com/prometheus/common/version/info_go118.go
index bfc7d41038e..992623c6cc9 100644
--- a/vendor/github.com/prometheus/common/version/info_go118.go
+++ b/vendor/github.com/prometheus/common/version/info_go118.go
@@ -18,17 +18,19 @@ package version
 
 import "runtime/debug"
 
-var computedRevision string
-var computedTags string
+var (
+	computedRevision string
+	computedTags     string
+)
 
-func getRevision() string {
+func GetRevision() string {
 	if Revision != "" {
 		return Revision
 	}
 	return computedRevision
 }
 
-func getTags() string {
+func GetTags() string {
 	return computedTags
 }
 
diff --git a/vendor/github.com/prometheus/exporter-toolkit/web/tls_config.go b/vendor/github.com/prometheus/exporter-toolkit/web/tls_config.go
index 4ef31a3f9bf..61383bce162 100644
--- a/vendor/github.com/prometheus/exporter-toolkit/web/tls_config.go
+++ b/vendor/github.com/prometheus/exporter-toolkit/web/tls_config.go
@@ -43,16 +43,19 @@ type Config struct {
 }
 
 type TLSConfig struct {
-	TLSCertPath              string     `yaml:"cert_file"`
-	TLSKeyPath               string     `yaml:"key_file"`
-	ClientAuth               string     `yaml:"client_auth_type"`
-	ClientCAs                string     `yaml:"client_ca_file"`
-	CipherSuites             []Cipher   `yaml:"cipher_suites"`
-	CurvePreferences         []Curve    `yaml:"curve_preferences"`
-	MinVersion               TLSVersion `yaml:"min_version"`
-	MaxVersion               TLSVersion `yaml:"max_version"`
-	PreferServerCipherSuites bool       `yaml:"prefer_server_cipher_suites"`
-	ClientAllowedSans        []string   `yaml:"client_allowed_sans"`
+	TLSCert                  string             `yaml:"cert"`
+	TLSKey                   config_util.Secret `yaml:"key"`
+	ClientCAsText            string             `yaml:"client_ca"`
+	TLSCertPath              string             `yaml:"cert_file"`
+	TLSKeyPath               string             `yaml:"key_file"`
+	ClientAuth               string             `yaml:"client_auth_type"`
+	ClientCAs                string             `yaml:"client_ca_file"`
+	CipherSuites             []Cipher           `yaml:"cipher_suites"`
+	CurvePreferences         []Curve            `yaml:"curve_preferences"`
+	MinVersion               TLSVersion         `yaml:"min_version"`
+	MaxVersion               TLSVersion         `yaml:"max_version"`
+	PreferServerCipherSuites bool               `yaml:"prefer_server_cipher_suites"`
+	ClientAllowedSans        []string           `yaml:"client_allowed_sans"`
 }
 
 type FlagConfig struct {
@@ -132,22 +135,54 @@ func getTLSConfig(configPath string) (*tls.Config, error) {
 	return ConfigToTLSConfig(&c.TLSConfig)
 }
 
-// ConfigToTLSConfig generates the golang tls.Config from the TLSConfig struct.
-func ConfigToTLSConfig(c *TLSConfig) (*tls.Config, error) {
-	if c.TLSCertPath == "" && c.TLSKeyPath == "" && c.ClientAuth == "" && c.ClientCAs == "" {
-		return nil, errNoTLSConfig
+func validateTLSPaths(c *TLSConfig) error {
+	if c.TLSCertPath == "" && c.TLSCert == "" &&
+		c.TLSKeyPath == "" && c.TLSKey == "" &&
+		c.ClientCAs == "" && c.ClientCAsText == "" &&
+		c.ClientAuth == "" {
+		return errNoTLSConfig
 	}
 
-	if c.TLSCertPath == "" {
-		return nil, errors.New("missing cert_file")
+	if c.TLSCertPath == "" && c.TLSCert == "" {
+		return errors.New("missing one of cert or cert_file")
 	}
 
-	if c.TLSKeyPath == "" {
-		return nil, errors.New("missing key_file")
+	if c.TLSKeyPath == "" && c.TLSKey == "" {
+		return errors.New("missing one of key or key_file")
+	}
+
+	return nil
+}
+
+// ConfigToTLSConfig generates the golang tls.Config from the TLSConfig struct.
+func ConfigToTLSConfig(c *TLSConfig) (*tls.Config, error) {
+	if err := validateTLSPaths(c); err != nil {
+		return nil, err
 	}
 
 	loadCert := func() (*tls.Certificate, error) {
-		cert, err := tls.LoadX509KeyPair(c.TLSCertPath, c.TLSKeyPath)
+		var certData, keyData []byte
+		var err error
+
+		if c.TLSCertPath != "" {
+			certData, err = os.ReadFile(c.TLSCertPath)
+			if err != nil {
+				return nil, fmt.Errorf("failed to read cert_file (%s): %s", c.TLSCertPath, err)
+			}
+		} else {
+			certData = []byte(c.TLSCert)
+		}
+
+		if c.TLSKeyPath != "" {
+			keyData, err = os.ReadFile(c.TLSKeyPath)
+			if err != nil {
+				return nil, fmt.Errorf("failed to read key_file (%s): %s", c.TLSKeyPath, err)
+			}
+		} else {
+			keyData = []byte(c.TLSKey)
+		}
+
+		cert, err := tls.X509KeyPair(certData, keyData)
 		if err != nil {
 			return nil, fmt.Errorf("failed to load X509KeyPair: %w", err)
 		}
@@ -193,6 +228,10 @@ func ConfigToTLSConfig(c *TLSConfig) (*tls.Config, error) {
 		}
 		clientCAPool.AppendCertsFromPEM(clientCAFile)
 		cfg.ClientCAs = clientCAPool
+	} else if c.ClientCAsText != "" {
+		clientCAPool := x509.NewCertPool()
+		clientCAPool.AppendCertsFromPEM([]byte(c.ClientCAsText))
+		cfg.ClientCAs = clientCAPool
 	}
 
 	if c.ClientAllowedSans != nil {
@@ -215,7 +254,7 @@ func ConfigToTLSConfig(c *TLSConfig) (*tls.Config, error) {
 		return nil, errors.New("Invalid ClientAuth: " + c.ClientAuth)
 	}
 
-	if c.ClientCAs != "" && cfg.ClientAuth == tls.NoClientCert {
+	if (c.ClientCAs != "" || c.ClientCAsText != "") && cfg.ClientAuth == tls.NoClientCert {
 		return nil, errors.New("Client CA's have been configured without a Client Auth Policy")
 	}
 
diff --git a/vendor/github.com/prometheus/procfs/Makefile.common b/vendor/github.com/prometheus/procfs/Makefile.common
index 0ce7ea4612e..062a2818563 100644
--- a/vendor/github.com/prometheus/procfs/Makefile.common
+++ b/vendor/github.com/prometheus/procfs/Makefile.common
@@ -61,7 +61,7 @@ PROMU_URL     := https://github.com/prometheus/promu/releases/download/v$(PROMU_
 SKIP_GOLANGCI_LINT :=
 GOLANGCI_LINT :=
 GOLANGCI_LINT_OPTS ?=
-GOLANGCI_LINT_VERSION ?= v1.53.3
+GOLANGCI_LINT_VERSION ?= v1.54.2
 # golangci-lint only supports linux, darwin and windows platforms on i386/amd64.
 # windows isn't included here because of the path separator being different.
 ifeq ($(GOHOSTOS),$(filter $(GOHOSTOS),linux darwin))
diff --git a/vendor/github.com/prometheus/procfs/fs_statfs_notype.go b/vendor/github.com/prometheus/procfs/fs_statfs_notype.go
index 13d74e39571..134767d69ac 100644
--- a/vendor/github.com/prometheus/procfs/fs_statfs_notype.go
+++ b/vendor/github.com/prometheus/procfs/fs_statfs_notype.go
@@ -11,8 +11,8 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
-//go:build netbsd || openbsd || solaris || windows || nostatfs
-// +build netbsd openbsd solaris windows nostatfs
+//go:build !freebsd && !linux
+// +build !freebsd,!linux
 
 package procfs
 
diff --git a/vendor/github.com/prometheus/procfs/fs_statfs_type.go b/vendor/github.com/prometheus/procfs/fs_statfs_type.go
index bee151445a0..80df79c3193 100644
--- a/vendor/github.com/prometheus/procfs/fs_statfs_type.go
+++ b/vendor/github.com/prometheus/procfs/fs_statfs_type.go
@@ -11,8 +11,8 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
-//go:build !netbsd && !openbsd && !solaris && !windows && !nostatfs
-// +build !netbsd,!openbsd,!solaris,!windows,!nostatfs
+//go:build freebsd || linux
+// +build freebsd linux
 
 package procfs
 
diff --git a/vendor/github.com/prometheus/procfs/mountstats.go b/vendor/github.com/prometheus/procfs/mountstats.go
index 852c8c4a0e4..9d8af6db742 100644
--- a/vendor/github.com/prometheus/procfs/mountstats.go
+++ b/vendor/github.com/prometheus/procfs/mountstats.go
@@ -44,6 +44,14 @@ const (
 
 	fieldTransport11TCPLen = 13
 	fieldTransport11UDPLen = 10
+
+	// kernel version >= 4.14 MaxLen
+	// See: https://elixir.bootlin.com/linux/v6.4.8/source/net/sunrpc/xprtrdma/xprt_rdma.h#L393
+	fieldTransport11RDMAMaxLen = 28
+
+	// kernel version <= 4.2 MinLen
+	// See: https://elixir.bootlin.com/linux/v4.2.8/source/net/sunrpc/xprtrdma/xprt_rdma.h#L331
+	fieldTransport11RDMAMinLen = 20
 )
 
 // A Mount is a device mount parsed from /proc/[pid]/mountstats.
@@ -233,6 +241,33 @@ type NFSTransportStats struct {
 	// A running counter, incremented on each request as the current size of the
 	// pending queue.
 	CumulativePendingQueue uint64
+
+	// Stats below only available with stat version 1.1.
+	// Transport over RDMA
+
+	// accessed when sending a call
+	ReadChunkCount   uint64
+	WriteChunkCount  uint64
+	ReplyChunkCount  uint64
+	TotalRdmaRequest uint64
+
+	// rarely accessed error counters
+	PullupCopyCount      uint64
+	HardwayRegisterCount uint64
+	FailedMarshalCount   uint64
+	BadReplyCount        uint64
+	MrsRecovered         uint64
+	MrsOrphaned          uint64
+	MrsAllocated         uint64
+	EmptySendctxQ        uint64
+
+	// accessed when receiving a reply
+	TotalRdmaReply    uint64
+	FixupCopyCount    uint64
+	ReplyWaitsForSend uint64
+	LocalInvNeeded    uint64
+	NomsgCallCount    uint64
+	BcallCount        uint64
 }
 
 // parseMountStats parses a /proc/[pid]/mountstats file and returns a slice
@@ -587,14 +622,17 @@ func parseNFSTransportStats(ss []string, statVersion string) (*NFSTransportStats
 			expectedLength = fieldTransport11TCPLen
 		} else if protocol == "udp" {
 			expectedLength = fieldTransport11UDPLen
+		} else if protocol == "rdma" {
+			expectedLength = fieldTransport11RDMAMinLen
 		} else {
 			return nil, fmt.Errorf("%w: invalid NFS protocol \"%s\" in stats 1.1 statement: %v", ErrFileParse, protocol, ss)
 		}
-		if len(ss) != expectedLength {
-			return nil, fmt.Errorf("%w: invalid NFS transport stats 1.1 statement: %v", ErrFileParse, ss)
+		if (len(ss) != expectedLength && (protocol == "tcp" || protocol == "udp")) ||
+			(protocol == "rdma" && len(ss) < expectedLength) {
+			return nil, fmt.Errorf("%w: invalid NFS transport stats 1.1 statement: %v, protocol: %v", ErrFileParse, ss, protocol)
 		}
 	default:
-		return nil, fmt.Errorf("%s: Unrecognized NFS transport stats version: %q", ErrFileParse, statVersion)
+		return nil, fmt.Errorf("%s: Unrecognized NFS transport stats version: %q, protocol: %v", ErrFileParse, statVersion, protocol)
 	}
 
 	// Allocate enough for v1.1 stats since zero value for v1.1 stats will be okay
@@ -604,7 +642,9 @@ func parseNFSTransportStats(ss []string, statVersion string) (*NFSTransportStats
 	// Note: slice length must be set to length of v1.1 stats to avoid a panic when
 	// only v1.0 stats are present.
 	// See: https://github.com/prometheus/node_exporter/issues/571.
-	ns := make([]uint64, fieldTransport11TCPLen)
+	//
+	// Note: NFS Over RDMA slice length is fieldTransport11RDMAMaxLen
+	ns := make([]uint64, fieldTransport11RDMAMaxLen+3)
 	for i, s := range ss {
 		n, err := strconv.ParseUint(s, 10, 64)
 		if err != nil {
@@ -622,9 +662,14 @@ func parseNFSTransportStats(ss []string, statVersion string) (*NFSTransportStats
 	// we set them to 0 here.
 	if protocol == "udp" {
 		ns = append(ns[:2], append(make([]uint64, 3), ns[2:]...)...)
+	} else if protocol == "tcp" {
+		ns = append(ns[:fieldTransport11TCPLen], make([]uint64, fieldTransport11RDMAMaxLen-fieldTransport11TCPLen+3)...)
+	} else if protocol == "rdma" {
+		ns = append(ns[:fieldTransport10TCPLen], append(make([]uint64, 3), ns[fieldTransport10TCPLen:]...)...)
 	}
 
 	return &NFSTransportStats{
+		// NFS xprt over tcp or udp
 		Protocol:                 protocol,
 		Port:                     ns[0],
 		Bind:                     ns[1],
@@ -636,8 +681,32 @@ func parseNFSTransportStats(ss []string, statVersion string) (*NFSTransportStats
 		BadTransactionIDs:        ns[7],
 		CumulativeActiveRequests: ns[8],
 		CumulativeBacklog:        ns[9],
-		MaximumRPCSlotsUsed:      ns[10],
-		CumulativeSendingQueue:   ns[11],
-		CumulativePendingQueue:   ns[12],
+
+		// NFS xprt over tcp or udp
+		// And statVersion 1.1
+		MaximumRPCSlotsUsed:    ns[10],
+		CumulativeSendingQueue: ns[11],
+		CumulativePendingQueue: ns[12],
+
+		// NFS xprt over rdma
+		// And stat Version 1.1
+		ReadChunkCount:       ns[13],
+		WriteChunkCount:      ns[14],
+		ReplyChunkCount:      ns[15],
+		TotalRdmaRequest:     ns[16],
+		PullupCopyCount:      ns[17],
+		HardwayRegisterCount: ns[18],
+		FailedMarshalCount:   ns[19],
+		BadReplyCount:        ns[20],
+		MrsRecovered:         ns[21],
+		MrsOrphaned:          ns[22],
+		MrsAllocated:         ns[23],
+		EmptySendctxQ:        ns[24],
+		TotalRdmaReply:       ns[25],
+		FixupCopyCount:       ns[26],
+		ReplyWaitsForSend:    ns[27],
+		LocalInvNeeded:       ns[28],
+		NomsgCallCount:       ns[29],
+		BcallCount:           ns[30],
 	}, nil
 }
diff --git a/vendor/github.com/prometheus/procfs/proc_fdinfo.go b/vendor/github.com/prometheus/procfs/proc_fdinfo.go
index 4b7933e4f97..fa761b35295 100644
--- a/vendor/github.com/prometheus/procfs/proc_fdinfo.go
+++ b/vendor/github.com/prometheus/procfs/proc_fdinfo.go
@@ -26,6 +26,7 @@ var (
 	rPos          = regexp.MustCompile(`^pos:\s+(\d+)$`)
 	rFlags        = regexp.MustCompile(`^flags:\s+(\d+)$`)
 	rMntID        = regexp.MustCompile(`^mnt_id:\s+(\d+)$`)
+	rIno          = regexp.MustCompile(`^ino:\s+(\d+)$`)
 	rInotify      = regexp.MustCompile(`^inotify`)
 	rInotifyParts = regexp.MustCompile(`^inotify\s+wd:([0-9a-f]+)\s+ino:([0-9a-f]+)\s+sdev:([0-9a-f]+)(?:\s+mask:([0-9a-f]+))?`)
 )
@@ -40,6 +41,8 @@ type ProcFDInfo struct {
 	Flags string
 	// Mount point ID
 	MntID string
+	// Inode number
+	Ino string
 	// List of inotify lines (structured) in the fdinfo file (kernel 3.8+ only)
 	InotifyInfos []InotifyInfo
 }
@@ -51,7 +54,7 @@ func (p Proc) FDInfo(fd string) (*ProcFDInfo, error) {
 		return nil, err
 	}
 
-	var text, pos, flags, mntid string
+	var text, pos, flags, mntid, ino string
 	var inotify []InotifyInfo
 
 	scanner := bufio.NewScanner(bytes.NewReader(data))
@@ -63,6 +66,8 @@ func (p Proc) FDInfo(fd string) (*ProcFDInfo, error) {
 			flags = rFlags.FindStringSubmatch(text)[1]
 		} else if rMntID.MatchString(text) {
 			mntid = rMntID.FindStringSubmatch(text)[1]
+		} else if rIno.MatchString(text) {
+			ino = rIno.FindStringSubmatch(text)[1]
 		} else if rInotify.MatchString(text) {
 			newInotify, err := parseInotifyInfo(text)
 			if err != nil {
@@ -77,6 +82,7 @@ func (p Proc) FDInfo(fd string) (*ProcFDInfo, error) {
 		Pos:          pos,
 		Flags:        flags,
 		MntID:        mntid,
+		Ino:          ino,
 		InotifyInfos: inotify,
 	}
 
diff --git a/vendor/github.com/prometheus/procfs/proc_maps.go b/vendor/github.com/prometheus/procfs/proc_maps.go
index 727549a13f8..7e75c286b5b 100644
--- a/vendor/github.com/prometheus/procfs/proc_maps.go
+++ b/vendor/github.com/prometheus/procfs/proc_maps.go
@@ -63,17 +63,17 @@ type ProcMap struct {
 // parseDevice parses the device token of a line and converts it to a dev_t
 // (mkdev) like structure.
 func parseDevice(s string) (uint64, error) {
-	toks := strings.Split(s, ":")
-	if len(toks) < 2 {
-		return 0, fmt.Errorf("%w: unexpected number of fields, expected: 2, got: %q", ErrFileParse, len(toks))
+	i := strings.Index(s, ":")
+	if i == -1 {
+		return 0, fmt.Errorf("%w: expected separator `:` in %s", ErrFileParse, s)
 	}
 
-	major, err := strconv.ParseUint(toks[0], 16, 0)
+	major, err := strconv.ParseUint(s[0:i], 16, 0)
 	if err != nil {
 		return 0, err
 	}
 
-	minor, err := strconv.ParseUint(toks[1], 16, 0)
+	minor, err := strconv.ParseUint(s[i+1:], 16, 0)
 	if err != nil {
 		return 0, err
 	}
@@ -93,17 +93,17 @@ func parseAddress(s string) (uintptr, error) {
 
 // parseAddresses parses the start-end address.
 func parseAddresses(s string) (uintptr, uintptr, error) {
-	toks := strings.Split(s, "-")
-	if len(toks) < 2 {
-		return 0, 0, fmt.Errorf("%w: invalid address", ErrFileParse)
+	idx := strings.Index(s, "-")
+	if idx == -1 {
+		return 0, 0, fmt.Errorf("%w: expected separator `-` in %s", ErrFileParse, s)
 	}
 
-	saddr, err := parseAddress(toks[0])
+	saddr, err := parseAddress(s[0:idx])
 	if err != nil {
 		return 0, 0, err
 	}
 
-	eaddr, err := parseAddress(toks[1])
+	eaddr, err := parseAddress(s[idx+1:])
 	if err != nil {
 		return 0, 0, err
 	}
diff --git a/vendor/github.com/prometheus/procfs/proc_status.go b/vendor/github.com/prometheus/procfs/proc_status.go
index c055d075db0..46307f5721e 100644
--- a/vendor/github.com/prometheus/procfs/proc_status.go
+++ b/vendor/github.com/prometheus/procfs/proc_status.go
@@ -23,7 +23,7 @@ import (
 )
 
 // ProcStatus provides status information about the process,
-// read from /proc/[pid]/stat.
+// read from /proc/[pid]/status.
 type ProcStatus struct {
 	// The process ID.
 	PID int
@@ -32,6 +32,8 @@ type ProcStatus struct {
 
 	// Thread group ID.
 	TGID int
+	// List of Pid namespace.
+	NSpids []uint64
 
 	// Peak virtual memory size.
 	VmPeak uint64 // nolint:revive
@@ -127,6 +129,8 @@ func (s *ProcStatus) fillStatus(k string, vString string, vUint uint64, vUintByt
 		copy(s.UIDs[:], strings.Split(vString, "\t"))
 	case "Gid":
 		copy(s.GIDs[:], strings.Split(vString, "\t"))
+	case "NSpid":
+		s.NSpids = calcNSPidsList(vString)
 	case "VmPeak":
 		s.VmPeak = vUintBytes
 	case "VmSize":
@@ -200,3 +204,18 @@ func calcCpusAllowedList(cpuString string) []uint64 {
 	sort.Slice(g, func(i, j int) bool { return g[i] < g[j] })
 	return g
 }
+
+func calcNSPidsList(nspidsString string) []uint64 {
+	s := strings.Split(nspidsString, " ")
+	var nspids []uint64
+
+	for _, nspid := range s {
+		nspid, _ := strconv.ParseUint(nspid, 10, 64)
+		if nspid == 0 {
+			continue
+		}
+		nspids = append(nspids, nspid)
+	}
+
+	return nspids
+}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/baremetal/v1/baremetal_sdk.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/baremetal/v1/baremetal_sdk.go
index e793d99ecd2..f25bdb4dc21 100644
--- a/vendor/github.com/scaleway/scaleway-sdk-go/api/baremetal/v1/baremetal_sdk.go
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/baremetal/v1/baremetal_sdk.go
@@ -39,31 +39,6 @@ var (
 	_ = namegenerator.GetRandomName
 )
 
-// API: this API allows to manage your Elastic Metal server.
-// Elastic Metal API.
-type API struct {
-	client *scw.Client
-}
-
-// NewAPI returns a API object from a Scaleway client.
-func NewAPI(client *scw.Client) *API {
-	return &API{
-		client: client,
-	}
-}
-
-// PrivateNetworkAPI: elastic Metal Private Network API.
-type PrivateNetworkAPI struct {
-	client *scw.Client
-}
-
-// NewPrivateNetworkAPI returns a PrivateNetworkAPI object from a Scaleway client.
-func NewPrivateNetworkAPI(client *scw.Client) *PrivateNetworkAPI {
-	return &PrivateNetworkAPI{
-		client: client,
-	}
-}
-
 type IPReverseStatus string
 
 const (
@@ -542,450 +517,1120 @@ func (enum *SettingType) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
-// BMCAccess: bmc access.
-type BMCAccess struct {
-	// URL: URL to access to the server console.
-	URL string `json:"url"`
-	// Login: the login to use for the BMC (Baseboard Management Controller) access authentification.
-	Login string `json:"login"`
-	// Password: the password to use for the BMC (Baseboard Management Controller) access authentification.
-	Password string `json:"password"`
-	// ExpiresAt: the date after which the BMC (Baseboard Management Controller) access will be closed.
-	ExpiresAt *time.Time `json:"expires_at"`
+// OSOSField: osos field.
+type OSOSField struct {
+	Editable bool `json:"editable"`
+
+	Required bool `json:"required"`
+
+	DefaultValue *string `json:"default_value"`
 }
 
 // CPU: cpu.
 type CPU struct {
 	// Name: name of the CPU.
 	Name string `json:"name"`
+
 	// CoreCount: number of CPU cores.
 	CoreCount uint32 `json:"core_count"`
+
 	// ThreadCount: number CPU threads.
 	ThreadCount uint32 `json:"thread_count"`
+
 	// Frequency: frequency of the CPU in MHz.
 	Frequency uint32 `json:"frequency"`
+
 	// Benchmark: benchmark of the CPU.
 	Benchmark string `json:"benchmark"`
 }
 
-// CreateServerRequestInstall: create server request. install.
-type CreateServerRequestInstall struct {
-	// OsID: ID of the OS to installation on the server.
-	OsID string `json:"os_id"`
-	// Hostname: hostname of the server.
-	Hostname string `json:"hostname"`
-	// SSHKeyIDs: SSH key IDs authorized on the server.
-	SSHKeyIDs []string `json:"ssh_key_ids"`
-	// User: user for the installation.
-	User *string `json:"user"`
-	// Password: password for the installation.
-	Password *string `json:"password"`
-	// ServiceUser: regular user that runs the service to be installed on the server.
-	ServiceUser *string `json:"service_user"`
-	// ServicePassword: password used for the service to install.
-	ServicePassword *string `json:"service_password"`
-}
-
 // Disk: disk.
 type Disk struct {
 	// Capacity: capacity of the disk in bytes.
 	Capacity scw.Size `json:"capacity"`
+
 	// Type: type of the disk.
 	Type string `json:"type"`
 }
 
-// GetServerMetricsResponse: get server metrics response.
-type GetServerMetricsResponse struct {
-	// Pings: timeseries object representing pings on the server.
-	Pings *scw.TimeSeries `json:"pings"`
+// Memory: memory.
+type Memory struct {
+	// Capacity: capacity of the memory in bytes.
+	Capacity scw.Size `json:"capacity"`
+
+	// Type: type of the memory.
+	Type string `json:"type"`
+
+	// Frequency: frequency of the memory in MHz.
+	Frequency uint32 `json:"frequency"`
+
+	// IsEcc: true if the memory is an error-correcting code memory.
+	IsEcc bool `json:"is_ecc"`
+}
+
+// OfferOptionOffer: offer option offer.
+type OfferOptionOffer struct {
+	// ID: ID of the option.
+	ID string `json:"id"`
+
+	// Name: name of the option.
+	Name string `json:"name"`
+
+	// Enabled: if true the option is enabled and included by default in the offer
+	// If false the option is available for the offer but not included by default.
+	Enabled bool `json:"enabled"`
+
+	// SubscriptionPeriod: period of subscription for the offer.
+	// Default value: unknown_subscription_period
+	SubscriptionPeriod OfferSubscriptionPeriod `json:"subscription_period"`
+
+	// Price: price of the option.
+	Price *scw.Money `json:"price"`
+
+	// Manageable: boolean to know if option could be managed.
+	Manageable bool `json:"manageable"`
+
+	// OsID: ID of the OS linked to the option.
+	OsID *string `json:"os_id"`
+}
+
+// PersistentMemory: persistent memory.
+type PersistentMemory struct {
+	// Capacity: capacity of the memory in bytes.
+	Capacity scw.Size `json:"capacity"`
+
+	// Type: type of the memory.
+	Type string `json:"type"`
+
+	// Frequency: frequency of the memory in MHz.
+	Frequency uint32 `json:"frequency"`
+}
+
+// RaidController: raid controller.
+type RaidController struct {
+	Model string `json:"model"`
+
+	RaidLevel []string `json:"raid_level"`
 }
 
 // IP: ip.
 type IP struct {
 	// ID: ID of the IP.
 	ID string `json:"id"`
+
 	// Address: address of the IP.
 	Address net.IP `json:"address"`
+
 	// Reverse: reverse IP value.
 	Reverse string `json:"reverse"`
+
 	// Version: version of IP (v4 or v6).
 	// Default value: IPv4
 	Version IPVersion `json:"version"`
+
 	// ReverseStatus: status of the reverse.
 	// Default value: unknown
 	ReverseStatus IPReverseStatus `json:"reverse_status"`
+
 	// ReverseStatusMessage: a message related to the reverse status, e.g. in case of an error.
 	ReverseStatusMessage string `json:"reverse_status_message"`
 }
 
-// ListOSResponse: list os response.
-type ListOSResponse struct {
-	// TotalCount: total count of matching OS.
-	TotalCount uint32 `json:"total_count"`
-	// Os: oS that match filters.
-	Os []*OS `json:"os"`
-}
+// ServerInstall: server install.
+type ServerInstall struct {
+	// OsID: ID of the OS.
+	OsID string `json:"os_id"`
 
-// ListOffersResponse: list offers response.
-type ListOffersResponse struct {
-	// TotalCount: total count of matching offers.
-	TotalCount uint32 `json:"total_count"`
-	// Offers: offers that match filters.
-	Offers []*Offer `json:"offers"`
-}
+	// Hostname: host defined during the server installation.
+	Hostname string `json:"hostname"`
 
-// ListOptionsResponse: list options response.
-type ListOptionsResponse struct {
-	// TotalCount: total count of matching options.
-	TotalCount uint32 `json:"total_count"`
-	// Options: options that match filters.
-	Options []*Option `json:"options"`
-}
+	// SSHKeyIDs: SSH public key IDs defined during server installation.
+	SSHKeyIDs []string `json:"ssh_key_ids"`
 
-// ListServerEventsResponse: list server events response.
-type ListServerEventsResponse struct {
-	// TotalCount: total count of matching events.
-	TotalCount uint32 `json:"total_count"`
-	// Events: server events that match filters.
-	Events []*ServerEvent `json:"events"`
-}
+	// Status: status of the server installation.
+	// Default value: unknown
+	Status ServerInstallStatus `json:"status"`
 
-type ListServerPrivateNetworksResponse struct {
-	ServerPrivateNetworks []*ServerPrivateNetwork `json:"server_private_networks"`
+	// User: user defined in the server installation, or the default user if none were specified.
+	User string `json:"user"`
 
-	TotalCount uint32 `json:"total_count"`
+	// ServiceUser: service user defined in the server installation, or the default user if none were specified.
+	ServiceUser string `json:"service_user"`
+
+	// ServiceURL: address of the installed service.
+	ServiceURL string `json:"service_url"`
 }
 
-// ListServersResponse: list servers response.
-type ListServersResponse struct {
-	// TotalCount: total count of matching servers.
-	TotalCount uint32 `json:"total_count"`
-	// Servers: array of Elastic Metal server objects matching the filters in the request.
-	Servers []*Server `json:"servers"`
+// ServerOption: server option.
+type ServerOption struct {
+	// ID: ID of the option.
+	ID string `json:"id"`
+
+	// Name: name of the option.
+	Name string `json:"name"`
+
+	// Status: status of the option on this server.
+	// Default value: option_status_unknown
+	Status ServerOptionOptionStatus `json:"status"`
+
+	// Manageable: defines whether the option can be managed (added or removed).
+	Manageable bool `json:"manageable"`
+
+	// ExpiresAt: auto expiration date for compatible options.
+	ExpiresAt *time.Time `json:"expires_at"`
 }
 
-// ListSettingsResponse: list settings response.
-type ListSettingsResponse struct {
-	// TotalCount: total count of matching settings.
-	TotalCount uint32 `json:"total_count"`
-	// Settings: settings that match filters.
-	Settings []*Setting `json:"settings"`
+// ServerRescueServer: server rescue server.
+type ServerRescueServer struct {
+	// User: rescue user name.
+	User string `json:"user"`
+
+	// Password: rescue password.
+	Password string `json:"password"`
 }
 
-// Memory: memory.
-type Memory struct {
-	// Capacity: capacity of the memory in bytes.
-	Capacity scw.Size `json:"capacity"`
-	// Type: type of the memory.
-	Type string `json:"type"`
-	// Frequency: frequency of the memory in MHz.
-	Frequency uint32 `json:"frequency"`
-	// IsEcc: true if the memory is an error-correcting code memory.
-	IsEcc bool `json:"is_ecc"`
+// CreateServerRequestInstall: create server request install.
+type CreateServerRequestInstall struct {
+	// OsID: ID of the OS to installation on the server.
+	OsID string `json:"os_id"`
+
+	// Hostname: hostname of the server.
+	Hostname string `json:"hostname"`
+
+	// SSHKeyIDs: SSH key IDs authorized on the server.
+	SSHKeyIDs []string `json:"ssh_key_ids"`
+
+	// User: user for the installation.
+	User *string `json:"user"`
+
+	// Password: password for the installation.
+	Password *string `json:"password"`
+
+	// ServiceUser: regular user that runs the service to be installed on the server.
+	ServiceUser *string `json:"service_user"`
+
+	// ServicePassword: password used for the service to install.
+	ServicePassword *string `json:"service_password"`
 }
 
 // OS: os.
 type OS struct {
 	// ID: ID of the OS.
 	ID string `json:"id"`
+
 	// Name: name of the OS.
 	Name string `json:"name"`
+
 	// Version: version of the OS.
 	Version string `json:"version"`
+
 	// LogoURL: URL of this OS's logo.
 	LogoURL string `json:"logo_url"`
+
 	// SSH: object defining the SSH requirements to install the OS.
 	SSH *OSOSField `json:"ssh"`
+
 	// User: object defining the username requirements to install the OS.
 	User *OSOSField `json:"user"`
+
 	// Password: object defining the password requirements to install the OS.
 	Password *OSOSField `json:"password"`
+
 	// ServiceUser: object defining the username requirements to install the service.
 	ServiceUser *OSOSField `json:"service_user"`
+
 	// ServicePassword: object defining the password requirements to install the service.
 	ServicePassword *OSOSField `json:"service_password"`
+
 	// Enabled: defines if the operating system is enabled or not.
 	Enabled bool `json:"enabled"`
+
 	// LicenseRequired: license required (check server options for pricing details).
 	LicenseRequired bool `json:"license_required"`
+
 	// Allowed: defines if a specific Organization is allowed to install this OS type.
 	Allowed bool `json:"allowed"`
 }
 
-type OSOSField struct {
-	Editable bool `json:"editable"`
-
-	Required bool `json:"required"`
-
-	DefaultValue *string `json:"default_value"`
-}
-
 // Offer: offer.
 type Offer struct {
 	// ID: ID of the offer.
 	ID string `json:"id"`
+
 	// Name: name of the offer.
 	Name string `json:"name"`
+
 	// Stock: stock level.
 	// Default value: empty
 	Stock OfferStock `json:"stock"`
+
 	// Bandwidth: public bandwidth available (in bits/s) with the offer.
 	Bandwidth uint64 `json:"bandwidth"`
+
 	// CommercialRange: commercial range of the offer.
 	CommercialRange string `json:"commercial_range"`
+
 	// PricePerHour: price of the offer for the next 60 minutes (a server order at 11h32 will be payed until 12h32).
 	PricePerHour *scw.Money `json:"price_per_hour"`
+
 	// PricePerMonth: monthly price of the offer, if subscribing on a monthly basis.
 	PricePerMonth *scw.Money `json:"price_per_month"`
+
 	// Disks: disks specifications of the offer.
 	Disks []*Disk `json:"disks"`
+
 	// Enable: defines whether the offer is currently available.
 	Enable bool `json:"enable"`
+
 	// CPUs: CPU specifications of the offer.
 	CPUs []*CPU `json:"cpus"`
+
 	// Memories: memory specifications of the offer.
 	Memories []*Memory `json:"memories"`
+
 	// QuotaName: name of the quota associated to the offer.
 	QuotaName string `json:"quota_name"`
+
 	// PersistentMemories: persistent memory specifications of the offer.
 	PersistentMemories []*PersistentMemory `json:"persistent_memories"`
+
 	// RaidControllers: raid controller specifications of the offer.
 	RaidControllers []*RaidController `json:"raid_controllers"`
+
 	// IncompatibleOsIDs: array of OS images IDs incompatible with the server.
 	IncompatibleOsIDs []string `json:"incompatible_os_ids"`
+
 	// SubscriptionPeriod: period of subscription for the offer.
 	// Default value: unknown_subscription_period
 	SubscriptionPeriod OfferSubscriptionPeriod `json:"subscription_period"`
+
 	// OperationPath: operation path of the service.
 	OperationPath string `json:"operation_path"`
+
 	// Fee: one time fee invoiced by Scaleway for the setup and activation of the server.
 	Fee *scw.Money `json:"fee"`
+
 	// Options: available options for customization of the server.
 	Options []*OfferOptionOffer `json:"options"`
+
 	// PrivateBandwidth: private bandwidth available in bits/s with the offer.
 	PrivateBandwidth uint64 `json:"private_bandwidth"`
+
 	// SharedBandwidth: defines whether the offer's bandwidth is shared or not.
 	SharedBandwidth bool `json:"shared_bandwidth"`
+
 	// Tags: array of tags attached to the offer.
 	Tags []string `json:"tags"`
 }
 
-// OfferOptionOffer: offer. option offer.
-type OfferOptionOffer struct {
-	// ID: ID of the option.
-	ID string `json:"id"`
-	// Name: name of the option.
-	Name string `json:"name"`
-	// Enabled: if true the option is enabled and included by default in the offer.
-	// If false the option is available for the offer but not included by default.
-	Enabled bool `json:"enabled"`
-	// SubscriptionPeriod: period of subscription for the offer.
-	// Default value: unknown_subscription_period
-	SubscriptionPeriod OfferSubscriptionPeriod `json:"subscription_period"`
-	// Price: price of the option.
-	Price *scw.Money `json:"price"`
-	// Manageable: boolean to know if option could be managed.
-	Manageable bool `json:"manageable"`
-	// OsID: ID of the OS linked to the option.
-	OsID *string `json:"os_id"`
-}
-
 // Option: option.
 type Option struct {
 	// ID: ID of the option.
 	ID string `json:"id"`
+
 	// Name: name of the option.
 	Name string `json:"name"`
+
 	// Manageable: defines whether the option is manageable (could be added or removed).
 	Manageable bool `json:"manageable"`
 }
 
-// PersistentMemory: persistent memory.
-type PersistentMemory struct {
-	// Capacity: capacity of the memory in bytes.
-	Capacity scw.Size `json:"capacity"`
-	// Type: type of the memory.
-	Type string `json:"type"`
-	// Frequency: frequency of the memory in MHz.
-	Frequency uint32 `json:"frequency"`
+// ServerEvent: server event.
+type ServerEvent struct {
+	// ID: ID of the server to which the action will be applied.
+	ID string `json:"id"`
+
+	// Action: the action that will be applied to the server.
+	Action string `json:"action"`
+
+	// UpdatedAt: date of last modification of the action.
+	UpdatedAt *time.Time `json:"updated_at"`
+
+	// CreatedAt: date of creation of the action.
+	CreatedAt *time.Time `json:"created_at"`
 }
 
-type RaidController struct {
-	Model string `json:"model"`
+// ServerPrivateNetwork: server private network.
+type ServerPrivateNetwork struct {
+	// ID: the Private Network ID.
+	ID string `json:"id"`
 
-	RaidLevel []string `json:"raid_level"`
+	// ProjectID: the Private Network Project ID.
+	ProjectID string `json:"project_id"`
+
+	// ServerID: the server ID.
+	ServerID string `json:"server_id"`
+
+	// PrivateNetworkID: the Private Network ID.
+	PrivateNetworkID string `json:"private_network_id"`
+
+	// Vlan: the VLAN ID associated to the Private Network.
+	Vlan *uint32 `json:"vlan"`
+
+	// Status: the configuration status of the Private Network.
+	// Default value: unknown
+	Status ServerPrivateNetworkStatus `json:"status"`
+
+	// CreatedAt: the Private Network creation date.
+	CreatedAt *time.Time `json:"created_at"`
+
+	// UpdatedAt: the date the Private Network was last modified.
+	UpdatedAt *time.Time `json:"updated_at"`
 }
 
 // Server: server.
 type Server struct {
 	// ID: ID of the server.
 	ID string `json:"id"`
+
 	// OrganizationID: organization ID the server is attached to.
 	OrganizationID string `json:"organization_id"`
+
 	// ProjectID: project ID the server is attached to.
 	ProjectID string `json:"project_id"`
+
 	// Name: name of the server.
 	Name string `json:"name"`
+
 	// Description: description of the server.
 	Description string `json:"description"`
+
 	// UpdatedAt: last modification date of the server.
 	UpdatedAt *time.Time `json:"updated_at"`
+
 	// CreatedAt: creation date of the server.
 	CreatedAt *time.Time `json:"created_at"`
+
 	// Status: status of the server.
 	// Default value: unknown
 	Status ServerStatus `json:"status"`
+
 	// OfferID: offer ID of the server.
 	OfferID string `json:"offer_id"`
+
 	// OfferName: offer name of the server.
 	OfferName string `json:"offer_name"`
+
 	// Tags: array of custom tags attached to the server.
 	Tags []string `json:"tags"`
+
 	// IPs: array of IPs attached to the server.
 	IPs []*IP `json:"ips"`
+
 	// Domain: domain of the server.
 	Domain string `json:"domain"`
+
 	// BootType: boot type of the server.
 	// Default value: unknown_boot_type
 	BootType ServerBootType `json:"boot_type"`
+
 	// Zone: zone in which is the server located.
 	Zone scw.Zone `json:"zone"`
+
 	// Install: configuration of the installation.
 	Install *ServerInstall `json:"install"`
+
 	// PingStatus: status of server ping.
 	// Default value: ping_status_unknown
 	PingStatus ServerPingStatus `json:"ping_status"`
+
 	// Options: options enabled on the server.
 	Options []*ServerOption `json:"options"`
+
 	// RescueServer: configuration of rescue boot.
 	RescueServer *ServerRescueServer `json:"rescue_server"`
 }
 
-// ServerEvent: server event.
-type ServerEvent struct {
-	// ID: ID of the server to which the action will be applied.
+// Setting: setting.
+type Setting struct {
+	// ID: ID of the setting.
 	ID string `json:"id"`
-	// Action: the action that will be applied to the server.
-	Action string `json:"action"`
-	// UpdatedAt: date of last modification of the action.
-	UpdatedAt *time.Time `json:"updated_at"`
-	// CreatedAt: date of creation of the action.
-	CreatedAt *time.Time `json:"created_at"`
-}
 
-// ServerInstall: server. install.
-type ServerInstall struct {
-	// OsID: ID of the OS.
-	OsID string `json:"os_id"`
-	// Hostname: host defined during the server installation.
-	Hostname string `json:"hostname"`
-	// SSHKeyIDs: SSH public key IDs defined during server installation.
-	SSHKeyIDs []string `json:"ssh_key_ids"`
-	// Status: status of the server installation.
+	// Type: type of the setting.
 	// Default value: unknown
-	Status ServerInstallStatus `json:"status"`
-	// User: user defined in the server installation, or the default user if none were specified.
-	User string `json:"user"`
-	// ServiceUser: service user defined in the server installation, or the default user if none were specified.
-	ServiceUser string `json:"service_user"`
-	// ServiceURL: address of the installed service.
-	ServiceURL string `json:"service_url"`
+	Type SettingType `json:"type"`
+
+	// ProjectID: ID of the Project ID.
+	ProjectID string `json:"project_id"`
+
+	// Enabled: defines whether the setting is enabled.
+	Enabled bool `json:"enabled"`
 }
 
-// ServerOption: server. option.
-type ServerOption struct {
-	// ID: ID of the option.
-	ID string `json:"id"`
-	// Name: name of the option.
-	Name string `json:"name"`
-	// Status: status of the option on this server.
-	// Default value: option_status_unknown
-	Status ServerOptionOptionStatus `json:"status"`
-	// Manageable: defines whether the option can be managed (added or removed).
-	Manageable bool `json:"manageable"`
-	// ExpiresAt: auto expiration date for compatible options.
+// AddOptionServerRequest: add option server request.
+type AddOptionServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server.
+	ServerID string `json:"-"`
+
+	// OptionID: ID of the option to add.
+	OptionID string `json:"-"`
+
+	// ExpiresAt: auto expire the option after this date.
+	ExpiresAt *time.Time `json:"expires_at,omitempty"`
+}
+
+// BMCAccess: bmc access.
+type BMCAccess struct {
+	// URL: URL to access to the server console.
+	URL string `json:"url"`
+
+	// Login: the login to use for the BMC (Baseboard Management Controller) access authentification.
+	Login string `json:"login"`
+
+	// Password: the password to use for the BMC (Baseboard Management Controller) access authentification.
+	Password string `json:"password"`
+
+	// ExpiresAt: the date after which the BMC (Baseboard Management Controller) access will be closed.
 	ExpiresAt *time.Time `json:"expires_at"`
 }
 
-// ServerPrivateNetwork: server private network.
-type ServerPrivateNetwork struct {
-	// ID: the Private Network ID.
-	ID string `json:"id"`
-	// ProjectID: the Private Network Project ID.
-	ProjectID string `json:"project_id"`
-	// ServerID: the server ID.
-	ServerID string `json:"server_id"`
-	// PrivateNetworkID: the Private Network ID.
-	PrivateNetworkID string `json:"private_network_id"`
-	// Vlan: the VLAN ID associated to the Private Network.
-	Vlan *uint32 `json:"vlan"`
-	// Status: the configuration status of the Private Network.
-	// Default value: unknown
-	Status ServerPrivateNetworkStatus `json:"status"`
-	// CreatedAt: the Private Network creation date.
-	CreatedAt *time.Time `json:"created_at"`
-	// UpdatedAt: the date the Private Network was last modified.
-	UpdatedAt *time.Time `json:"updated_at"`
+// CreateServerRequest: create server request.
+type CreateServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// OfferID: offer ID of the new server.
+	OfferID string `json:"offer_id"`
+
+	// Deprecated: OrganizationID: organization ID with which the server will be created.
+	// Precisely one of ProjectID, OrganizationID must be set.
+	OrganizationID *string `json:"organization_id,omitempty"`
+
+	// ProjectID: project ID with which the server will be created.
+	// Precisely one of ProjectID, OrganizationID must be set.
+	ProjectID *string `json:"project_id,omitempty"`
+
+	// Name: name of the server (≠hostname).
+	Name string `json:"name"`
+
+	// Description: description associated with the server, max 255 characters.
+	Description string `json:"description"`
+
+	// Tags: tags to associate to the server.
+	Tags []string `json:"tags"`
+
+	// Install: object describing the configuration details of the OS installation on the server.
+	Install *CreateServerRequestInstall `json:"install,omitempty"`
+
+	// OptionIDs: iDs of options to enable on server.
+	OptionIDs []string `json:"option_ids"`
 }
 
-// ServerRescueServer: server. rescue server.
-type ServerRescueServer struct {
-	// User: rescue user name.
-	User string `json:"user"`
-	// Password: rescue password.
-	Password string `json:"password"`
+// DeleteOptionServerRequest: delete option server request.
+type DeleteOptionServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server.
+	ServerID string `json:"-"`
+
+	// OptionID: ID of the option to delete.
+	OptionID string `json:"-"`
+}
+
+// DeleteServerRequest: delete server request.
+type DeleteServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server to delete.
+	ServerID string `json:"-"`
+}
+
+// GetBMCAccessRequest: get bmc access request.
+type GetBMCAccessRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server.
+	ServerID string `json:"-"`
+}
+
+// GetOSRequest: get os request.
+type GetOSRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// OsID: ID of the OS.
+	OsID string `json:"-"`
+}
+
+// GetOfferRequest: get offer request.
+type GetOfferRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// OfferID: ID of the researched Offer.
+	OfferID string `json:"-"`
+}
+
+// GetOptionRequest: get option request.
+type GetOptionRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// OptionID: ID of the option.
+	OptionID string `json:"-"`
+}
+
+// GetServerMetricsRequest: get server metrics request.
+type GetServerMetricsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: server ID to get the metrics.
+	ServerID string `json:"-"`
+}
+
+// GetServerMetricsResponse: get server metrics response.
+type GetServerMetricsResponse struct {
+	// Pings: timeseries object representing pings on the server.
+	Pings *scw.TimeSeries `json:"pings"`
+}
+
+// GetServerRequest: get server request.
+type GetServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server.
+	ServerID string `json:"-"`
+}
+
+// InstallServerRequest: install server request.
+type InstallServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: server ID to install.
+	ServerID string `json:"-"`
+
+	// OsID: ID of the OS to installation on the server.
+	OsID string `json:"os_id"`
+
+	// Hostname: hostname of the server.
+	Hostname string `json:"hostname"`
+
+	// SSHKeyIDs: SSH key IDs authorized on the server.
+	SSHKeyIDs []string `json:"ssh_key_ids"`
+
+	// User: user used for the installation.
+	User *string `json:"user,omitempty"`
+
+	// Password: password used for the installation.
+	Password *string `json:"password,omitempty"`
+
+	// ServiceUser: user used for the service to install.
+	ServiceUser *string `json:"service_user,omitempty"`
+
+	// ServicePassword: password used for the service to install.
+	ServicePassword *string `json:"service_password,omitempty"`
+}
+
+// ListOSRequest: list os request.
+type ListOSRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Page: page number.
+	Page *int32 `json:"-"`
+
+	// PageSize: number of OS per page.
+	PageSize *uint32 `json:"-"`
+
+	// OfferID: offer IDs to filter OSes for.
+	OfferID *string `json:"-"`
+}
+
+// ListOSResponse: list os response.
+type ListOSResponse struct {
+	// TotalCount: total count of matching OS.
+	TotalCount uint32 `json:"total_count"`
+
+	// Os: oS that match filters.
+	Os []*OS `json:"os"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListOSResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListOSResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListOSResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Os = append(r.Os, results.Os...)
+	r.TotalCount += uint32(len(results.Os))
+	return uint32(len(results.Os)), nil
+}
+
+// ListOffersRequest: list offers request.
+type ListOffersRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Page: page number.
+	Page *int32 `json:"-"`
+
+	// PageSize: number of offers per page.
+	PageSize *uint32 `json:"-"`
+
+	// SubscriptionPeriod: subscription period type to filter offers by.
+	// Default value: unknown_subscription_period
+	SubscriptionPeriod OfferSubscriptionPeriod `json:"-"`
+}
+
+// ListOffersResponse: list offers response.
+type ListOffersResponse struct {
+	// TotalCount: total count of matching offers.
+	TotalCount uint32 `json:"total_count"`
+
+	// Offers: offers that match filters.
+	Offers []*Offer `json:"offers"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListOffersResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListOffersResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListOffersResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Offers = append(r.Offers, results.Offers...)
+	r.TotalCount += uint32(len(results.Offers))
+	return uint32(len(results.Offers)), nil
+}
+
+// ListOptionsRequest: list options request.
+type ListOptionsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Page: page number.
+	Page *int32 `json:"-"`
+
+	// PageSize: number of options per page.
+	PageSize *uint32 `json:"-"`
+
+	// OfferID: offer ID to filter options for.
+	OfferID *string `json:"-"`
+
+	// Name: name to filter options for.
+	Name *string `json:"-"`
+}
+
+// ListOptionsResponse: list options response.
+type ListOptionsResponse struct {
+	// TotalCount: total count of matching options.
+	TotalCount uint32 `json:"total_count"`
+
+	// Options: options that match filters.
+	Options []*Option `json:"options"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListOptionsResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListOptionsResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListOptionsResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Options = append(r.Options, results.Options...)
+	r.TotalCount += uint32(len(results.Options))
+	return uint32(len(results.Options)), nil
+}
+
+// ListServerEventsRequest: list server events request.
+type ListServerEventsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server events searched.
+	ServerID string `json:"-"`
+
+	// Page: page number.
+	Page *int32 `json:"-"`
+
+	// PageSize: number of server events per page.
+	PageSize *uint32 `json:"-"`
+
+	// OrderBy: order of the server events.
+	// Default value: created_at_asc
+	OrderBy ListServerEventsRequestOrderBy `json:"-"`
+}
+
+// ListServerEventsResponse: list server events response.
+type ListServerEventsResponse struct {
+	// TotalCount: total count of matching events.
+	TotalCount uint32 `json:"total_count"`
+
+	// Events: server events that match filters.
+	Events []*ServerEvent `json:"events"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListServerEventsResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListServerEventsResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListServerEventsResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Events = append(r.Events, results.Events...)
+	r.TotalCount += uint32(len(results.Events))
+	return uint32(len(results.Events)), nil
+}
+
+// ListServerPrivateNetworksResponse: list server private networks response.
+type ListServerPrivateNetworksResponse struct {
+	ServerPrivateNetworks []*ServerPrivateNetwork `json:"server_private_networks"`
+
+	TotalCount uint32 `json:"total_count"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListServerPrivateNetworksResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListServerPrivateNetworksResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListServerPrivateNetworksResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.ServerPrivateNetworks = append(r.ServerPrivateNetworks, results.ServerPrivateNetworks...)
+	r.TotalCount += uint32(len(results.ServerPrivateNetworks))
+	return uint32(len(results.ServerPrivateNetworks)), nil
+}
+
+// ListServersRequest: list servers request.
+type ListServersRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Page: page number.
+	Page *int32 `json:"-"`
+
+	// PageSize: number of servers per page.
+	PageSize *uint32 `json:"-"`
+
+	// OrderBy: order of the servers.
+	// Default value: created_at_asc
+	OrderBy ListServersRequestOrderBy `json:"-"`
+
+	// Tags: tags to filter for.
+	Tags []string `json:"-"`
+
+	// Status: status to filter for.
+	Status []string `json:"-"`
+
+	// Name: names to filter for.
+	Name *string `json:"-"`
+
+	// OrganizationID: organization ID to filter for.
+	OrganizationID *string `json:"-"`
+
+	// ProjectID: project ID to filter for.
+	ProjectID *string `json:"-"`
+
+	// OptionID: option ID to filter for.
+	OptionID *string `json:"-"`
+}
+
+// ListServersResponse: list servers response.
+type ListServersResponse struct {
+	// TotalCount: total count of matching servers.
+	TotalCount uint32 `json:"total_count"`
+
+	// Servers: array of Elastic Metal server objects matching the filters in the request.
+	Servers []*Server `json:"servers"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListServersResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListServersResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListServersResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Servers = append(r.Servers, results.Servers...)
+	r.TotalCount += uint32(len(results.Servers))
+	return uint32(len(results.Servers)), nil
+}
+
+// ListSettingsRequest: list settings request.
+type ListSettingsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Page: page number.
+	Page *int32 `json:"-"`
+
+	// PageSize: set the maximum list size.
+	PageSize *uint32 `json:"-"`
+
+	// OrderBy: sort order for items in the response.
+	// Default value: created_at_asc
+	OrderBy ListSettingsRequestOrderBy `json:"-"`
+
+	// ProjectID: ID of the Project.
+	ProjectID *string `json:"-"`
+}
+
+// ListSettingsResponse: list settings response.
+type ListSettingsResponse struct {
+	// TotalCount: total count of matching settings.
+	TotalCount uint32 `json:"total_count"`
+
+	// Settings: settings that match filters.
+	Settings []*Setting `json:"settings"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListSettingsResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListSettingsResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListSettingsResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Settings = append(r.Settings, results.Settings...)
+	r.TotalCount += uint32(len(results.Settings))
+	return uint32(len(results.Settings)), nil
+}
+
+// PrivateNetworkAPIAddServerPrivateNetworkRequest: private network api add server private network request.
+type PrivateNetworkAPIAddServerPrivateNetworkRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: the ID of the server.
+	ServerID string `json:"-"`
+
+	// PrivateNetworkID: the ID of the Private Network.
+	PrivateNetworkID string `json:"private_network_id"`
+}
+
+// PrivateNetworkAPIDeleteServerPrivateNetworkRequest: private network api delete server private network request.
+type PrivateNetworkAPIDeleteServerPrivateNetworkRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: the ID of the server.
+	ServerID string `json:"-"`
+
+	// PrivateNetworkID: the ID of the Private Network.
+	PrivateNetworkID string `json:"-"`
+}
+
+// PrivateNetworkAPIListServerPrivateNetworksRequest: private network api list server private networks request.
+type PrivateNetworkAPIListServerPrivateNetworksRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// OrderBy: the sort order for the returned Private Networks.
+	// Default value: created_at_asc
+	OrderBy ListServerPrivateNetworksRequestOrderBy `json:"-"`
+
+	// Page: the page number for the returned Private Networks.
+	Page *int32 `json:"-"`
+
+	// PageSize: the maximum number of Private Networks per page.
+	PageSize *uint32 `json:"-"`
+
+	// ServerID: filter Private Networks by server ID.
+	ServerID *string `json:"-"`
+
+	// PrivateNetworkID: filter Private Networks by Private Network ID.
+	PrivateNetworkID *string `json:"-"`
+
+	// OrganizationID: filter Private Networks by Organization ID.
+	OrganizationID *string `json:"-"`
+
+	// ProjectID: filter Private Networks by Project ID.
+	ProjectID *string `json:"-"`
+}
+
+// PrivateNetworkAPISetServerPrivateNetworksRequest: private network api set server private networks request.
+type PrivateNetworkAPISetServerPrivateNetworksRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: the ID of the server.
+	ServerID string `json:"-"`
+
+	// PrivateNetworkIDs: the IDs of the Private Networks.
+	PrivateNetworkIDs []string `json:"private_network_ids"`
+}
+
+// RebootServerRequest: reboot server request.
+type RebootServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server to reboot.
+	ServerID string `json:"-"`
+
+	// BootType: the type of boot.
+	// Default value: unknown_boot_type
+	BootType ServerBootType `json:"boot_type"`
+}
+
+// SetServerPrivateNetworksResponse: set server private networks response.
+type SetServerPrivateNetworksResponse struct {
+	ServerPrivateNetworks []*ServerPrivateNetwork `json:"server_private_networks"`
+}
+
+// StartBMCAccessRequest: start bmc access request.
+type StartBMCAccessRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server.
+	ServerID string `json:"-"`
+
+	// IP: the IP authorized to connect to the server.
+	IP net.IP `json:"ip"`
+}
+
+// StartServerRequest: start server request.
+type StartServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server to start.
+	ServerID string `json:"-"`
+
+	// BootType: the type of boot.
+	// Default value: unknown_boot_type
+	BootType ServerBootType `json:"boot_type"`
+}
+
+// StopBMCAccessRequest: stop bmc access request.
+type StopBMCAccessRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server.
+	ServerID string `json:"-"`
+}
+
+// StopServerRequest: stop server request.
+type StopServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server to stop.
+	ServerID string `json:"-"`
+}
+
+// UpdateIPRequest: update ip request.
+type UpdateIPRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server.
+	ServerID string `json:"-"`
+
+	// IPID: ID of the IP to update.
+	IPID string `json:"-"`
+
+	// Reverse: new reverse IP to update, not updated if null.
+	Reverse *string `json:"reverse,omitempty"`
 }
 
-type SetServerPrivateNetworksResponse struct {
-	ServerPrivateNetworks []*ServerPrivateNetwork `json:"server_private_networks"`
+// UpdateServerRequest: update server request.
+type UpdateServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: ID of the server to update.
+	ServerID string `json:"-"`
+
+	// Name: name of the server (≠hostname), not updated if null.
+	Name *string `json:"name,omitempty"`
+
+	// Description: description associated with the server, max 255 characters, not updated if null.
+	Description *string `json:"description,omitempty"`
+
+	// Tags: tags associated with the server, not updated if null.
+	Tags *[]string `json:"tags,omitempty"`
 }
 
-// Setting: setting.
-type Setting struct {
-	// ID: ID of the setting.
-	ID string `json:"id"`
-	// Type: type of the setting.
-	// Default value: unknown
-	Type SettingType `json:"type"`
-	// ProjectID: ID of the Project ID.
-	ProjectID string `json:"project_id"`
+// UpdateSettingRequest: update setting request.
+type UpdateSettingRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SettingID: ID of the setting.
+	SettingID string `json:"-"`
+
 	// Enabled: defines whether the setting is enabled.
-	Enabled bool `json:"enabled"`
+	Enabled *bool `json:"enabled,omitempty"`
 }
 
-// Service API
+// This API allows to manage your Elastic Metal server.
+type API struct {
+	client *scw.Client
+}
 
-// Zones list localities the api is available in
+// NewAPI returns a API object from a Scaleway client.
+func NewAPI(client *scw.Client) *API {
+	return &API{
+		client: client,
+	}
+}
 func (s *API) Zones() []scw.Zone {
 	return []scw.Zone{scw.ZoneFrPar1, scw.ZoneFrPar2, scw.ZoneNlAms1, scw.ZoneNlAms2}
 }
 
-type ListServersRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Page: page number.
-	Page *int32 `json:"-"`
-	// PageSize: number of servers per page.
-	PageSize *uint32 `json:"-"`
-	// OrderBy: order of the servers.
-	// Default value: created_at_asc
-	OrderBy ListServersRequestOrderBy `json:"-"`
-	// Tags: tags to filter for.
-	Tags []string `json:"-"`
-	// Status: status to filter for.
-	Status []string `json:"-"`
-	// Name: names to filter for.
-	Name *string `json:"-"`
-	// OrganizationID: organization ID to filter for.
-	OrganizationID *string `json:"-"`
-	// ProjectID: project ID to filter for.
-	ProjectID *string `json:"-"`
-	// OptionID: option ID to filter for.
-	OptionID *string `json:"-"`
-}
-
-// ListServers: list Elastic Metal servers for an Organization.
-// List Elastic Metal servers for a specific Organization.
+// ListServers: List Elastic Metal servers for a specific Organization.
 func (s *API) ListServers(req *ListServersRequest, opts ...scw.RequestOption) (*ListServersResponse, error) {
 	var err error
 
@@ -1015,10 +1660,9 @@ func (s *API) ListServers(req *ListServersRequest, opts ...scw.RequestOption) (*
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers",
+		Query:  query,
 	}
 
 	var resp ListServersResponse
@@ -1030,15 +1674,7 @@ func (s *API) ListServers(req *ListServersRequest, opts ...scw.RequestOption) (*
 	return &resp, nil
 }
 
-type GetServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server.
-	ServerID string `json:"-"`
-}
-
-// GetServer: get a specific Elastic Metal server.
-// Get full details of an existing Elastic Metal server associated with the ID.
+// GetServer: Get full details of an existing Elastic Metal server associated with the ID.
 func (s *API) GetServer(req *GetServerRequest, opts ...scw.RequestOption) (*Server, error) {
 	var err error
 
@@ -1056,9 +1692,8 @@ func (s *API) GetServer(req *GetServerRequest, opts ...scw.RequestOption) (*Serv
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
 	}
 
 	var resp Server
@@ -1070,57 +1705,32 @@ func (s *API) GetServer(req *GetServerRequest, opts ...scw.RequestOption) (*Serv
 	return &resp, nil
 }
 
-type CreateServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// OfferID: offer ID of the new server.
-	OfferID string `json:"offer_id"`
-	// Deprecated: OrganizationID: organization ID with which the server will be created.
-	// Precisely one of OrganizationID, ProjectID must be set.
-	OrganizationID *string `json:"organization_id,omitempty"`
-	// ProjectID: project ID with which the server will be created.
-	// Precisely one of OrganizationID, ProjectID must be set.
-	ProjectID *string `json:"project_id,omitempty"`
-	// Name: name of the server (≠hostname).
-	Name string `json:"name"`
-	// Description: description associated with the server, max 255 characters.
-	Description string `json:"description"`
-	// Tags: tags to associate to the server.
-	Tags []string `json:"tags"`
-	// Install: object describing the configuration details of the OS installation on the server.
-	Install *CreateServerRequestInstall `json:"install"`
-	// OptionIDs: iDs of options to enable on server.
-	OptionIDs []string `json:"option_ids"`
-}
-
-// CreateServer: create an Elastic Metal server.
-// Create a new Elastic Metal server. Once the server is created, proceed with the [installation of an OS](#post-3e949e).
+// CreateServer: Create a new Elastic Metal server. Once the server is created, proceed with the [installation of an OS](#post-3e949e).
 func (s *API) CreateServer(req *CreateServerRequest, opts ...scw.RequestOption) (*Server, error) {
 	var err error
 
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
 	defaultProjectID, exist := s.client.GetDefaultProjectID()
-	if exist && req.OrganizationID == nil && req.ProjectID == nil {
+	if exist && req.ProjectID == nil && req.OrganizationID == nil {
 		req.ProjectID = &defaultProjectID
 	}
 
 	defaultOrganizationID, exist := s.client.GetDefaultOrganizationID()
-	if exist && req.OrganizationID == nil && req.ProjectID == nil {
+	if exist && req.ProjectID == nil && req.OrganizationID == nil {
 		req.OrganizationID = &defaultOrganizationID
 	}
 
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-
 	if fmt.Sprint(req.Zone) == "" {
 		return nil, errors.New("field Zone cannot be empty in request")
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers",
 	}
 
 	err = scwReq.SetBody(req)
@@ -1137,21 +1747,7 @@ func (s *API) CreateServer(req *CreateServerRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type UpdateServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server to update.
-	ServerID string `json:"-"`
-	// Name: name of the server (≠hostname), not updated if null.
-	Name *string `json:"name"`
-	// Description: description associated with the server, max 255 characters, not updated if null.
-	Description *string `json:"description"`
-	// Tags: tags associated with the server, not updated if null.
-	Tags *[]string `json:"tags"`
-}
-
-// UpdateServer: update an Elastic Metal server.
-// Update the server associated with the ID. You can update parameters such as the server's name, tags and description. Any parameters left null in the request body are not updated.
+// UpdateServer: Update the server associated with the ID. You can update parameters such as the server's name, tags and description. Any parameters left null in the request body are not updated.
 func (s *API) UpdateServer(req *UpdateServerRequest, opts ...scw.RequestOption) (*Server, error) {
 	var err error
 
@@ -1169,9 +1765,8 @@ func (s *API) UpdateServer(req *UpdateServerRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PATCH",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
-		Headers: http.Header{},
+		Method: "PATCH",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -1188,29 +1783,7 @@ func (s *API) UpdateServer(req *UpdateServerRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type InstallServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: server ID to install.
-	ServerID string `json:"-"`
-	// OsID: ID of the OS to installation on the server.
-	OsID string `json:"os_id"`
-	// Hostname: hostname of the server.
-	Hostname string `json:"hostname"`
-	// SSHKeyIDs: SSH key IDs authorized on the server.
-	SSHKeyIDs []string `json:"ssh_key_ids"`
-	// User: user used for the installation.
-	User *string `json:"user"`
-	// Password: password used for the installation.
-	Password *string `json:"password"`
-	// ServiceUser: user used for the service to install.
-	ServiceUser *string `json:"service_user"`
-	// ServicePassword: password used for the service to install.
-	ServicePassword *string `json:"service_password"`
-}
-
-// InstallServer: install an Elastic Metal server.
-// Install an Operating System (OS) on the Elastic Metal server with a specific ID.
+// InstallServer: Install an Operating System (OS) on the Elastic Metal server with a specific ID.
 func (s *API) InstallServer(req *InstallServerRequest, opts ...scw.RequestOption) (*Server, error) {
 	var err error
 
@@ -1228,9 +1801,8 @@ func (s *API) InstallServer(req *InstallServerRequest, opts ...scw.RequestOption
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/install",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/install",
 	}
 
 	err = scwReq.SetBody(req)
@@ -1247,15 +1819,7 @@ func (s *API) InstallServer(req *InstallServerRequest, opts ...scw.RequestOption
 	return &resp, nil
 }
 
-type GetServerMetricsRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: server ID to get the metrics.
-	ServerID string `json:"-"`
-}
-
-// GetServerMetrics: return server metrics.
-// Get the ping status of the server associated with the ID.
+// GetServerMetrics: Get the ping status of the server associated with the ID.
 func (s *API) GetServerMetrics(req *GetServerMetricsRequest, opts ...scw.RequestOption) (*GetServerMetricsResponse, error) {
 	var err error
 
@@ -1273,9 +1837,8 @@ func (s *API) GetServerMetrics(req *GetServerMetricsRequest, opts ...scw.Request
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/metrics",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/metrics",
 	}
 
 	var resp GetServerMetricsResponse
@@ -1287,15 +1850,7 @@ func (s *API) GetServerMetrics(req *GetServerMetricsRequest, opts ...scw.Request
 	return &resp, nil
 }
 
-type DeleteServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server to delete.
-	ServerID string `json:"-"`
-}
-
-// DeleteServer: delete an Elastic Metal server.
-// Delete the server associated with the ID.
+// DeleteServer: Delete the server associated with the ID.
 func (s *API) DeleteServer(req *DeleteServerRequest, opts ...scw.RequestOption) (*Server, error) {
 	var err error
 
@@ -1313,9 +1868,8 @@ func (s *API) DeleteServer(req *DeleteServerRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
 	}
 
 	var resp Server
@@ -1327,18 +1881,7 @@ func (s *API) DeleteServer(req *DeleteServerRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type RebootServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server to reboot.
-	ServerID string `json:"-"`
-	// BootType: the type of boot.
-	// Default value: unknown_boot_type
-	BootType ServerBootType `json:"boot_type"`
-}
-
-// RebootServer: reboot an Elastic Metal server.
-// Reboot the Elastic Metal server associated with the ID, use the `boot_type` `rescue` to reboot the server in rescue mode.
+// RebootServer: Reboot the Elastic Metal server associated with the ID, use the `boot_type` `rescue` to reboot the server in rescue mode.
 func (s *API) RebootServer(req *RebootServerRequest, opts ...scw.RequestOption) (*Server, error) {
 	var err error
 
@@ -1356,9 +1899,8 @@ func (s *API) RebootServer(req *RebootServerRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/reboot",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/reboot",
 	}
 
 	err = scwReq.SetBody(req)
@@ -1375,18 +1917,7 @@ func (s *API) RebootServer(req *RebootServerRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type StartServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server to start.
-	ServerID string `json:"-"`
-	// BootType: the type of boot.
-	// Default value: unknown_boot_type
-	BootType ServerBootType `json:"boot_type"`
-}
-
-// StartServer: start an Elastic Metal server.
-// Start the server associated with the ID.
+// StartServer: Start the server associated with the ID.
 func (s *API) StartServer(req *StartServerRequest, opts ...scw.RequestOption) (*Server, error) {
 	var err error
 
@@ -1404,9 +1935,8 @@ func (s *API) StartServer(req *StartServerRequest, opts ...scw.RequestOption) (*
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/start",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/start",
 	}
 
 	err = scwReq.SetBody(req)
@@ -1423,15 +1953,7 @@ func (s *API) StartServer(req *StartServerRequest, opts ...scw.RequestOption) (*
 	return &resp, nil
 }
 
-type StopServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server to stop.
-	ServerID string `json:"-"`
-}
-
-// StopServer: stop an Elastic Metal server.
-// Stop the server associated with the ID. The server remains allocated to your account and all data remains on the local storage of the server.
+// StopServer: Stop the server associated with the ID. The server remains allocated to your account and all data remains on the local storage of the server.
 func (s *API) StopServer(req *StopServerRequest, opts ...scw.RequestOption) (*Server, error) {
 	var err error
 
@@ -1449,9 +1971,8 @@ func (s *API) StopServer(req *StopServerRequest, opts ...scw.RequestOption) (*Se
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/stop",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/stop",
 	}
 
 	err = scwReq.SetBody(req)
@@ -1468,22 +1989,7 @@ func (s *API) StopServer(req *StopServerRequest, opts ...scw.RequestOption) (*Se
 	return &resp, nil
 }
 
-type ListServerEventsRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server events searched.
-	ServerID string `json:"-"`
-	// Page: page number.
-	Page *int32 `json:"-"`
-	// PageSize: number of server events per page.
-	PageSize *uint32 `json:"-"`
-	// OrderBy: order of the server events.
-	// Default value: created_at_asc
-	OrderBy ListServerEventsRequestOrderBy `json:"-"`
-}
-
-// ListServerEvents: list server events.
-// List event (i.e. start/stop/reboot) associated to the server ID.
+// ListServerEvents: List event (i.e. start/stop/reboot) associated to the server ID.
 func (s *API) ListServerEvents(req *ListServerEventsRequest, opts ...scw.RequestOption) (*ListServerEventsResponse, error) {
 	var err error
 
@@ -1511,10 +2017,9 @@ func (s *API) ListServerEvents(req *ListServerEventsRequest, opts ...scw.Request
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/events",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/events",
+		Query:  query,
 	}
 
 	var resp ListServerEventsResponse
@@ -1526,17 +2031,7 @@ func (s *API) ListServerEvents(req *ListServerEventsRequest, opts ...scw.Request
 	return &resp, nil
 }
 
-type StartBMCAccessRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server.
-	ServerID string `json:"-"`
-	// IP: the IP authorized to connect to the server.
-	IP net.IP `json:"ip"`
-}
-
-// StartBMCAccess: start BMC access.
-// Start BMC (Baseboard Management Controller) access associated with the ID.
+// StartBMCAccess: Start BMC (Baseboard Management Controller) access associated with the ID.
 // The BMC (Baseboard Management Controller) access is available one hour after the installation of the server.
 // You need first to create an option Remote Access. You will find the ID and the price with a call to listOffers (https://developers.scaleway.com/en/products/baremetal/api/#get-78db92). Then add the option https://developers.scaleway.com/en/products/baremetal/api/#post-b14abd.
 // After adding the BMC option, you need to Get Remote Access to get the login/password https://developers.scaleway.com/en/products/baremetal/api/#get-cefc0f. Do not forget to delete the Option after use.
@@ -1557,9 +2052,8 @@ func (s *API) StartBMCAccess(req *StartBMCAccessRequest, opts ...scw.RequestOpti
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/bmc-access",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/bmc-access",
 	}
 
 	err = scwReq.SetBody(req)
@@ -1576,15 +2070,7 @@ func (s *API) StartBMCAccess(req *StartBMCAccessRequest, opts ...scw.RequestOpti
 	return &resp, nil
 }
 
-type GetBMCAccessRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server.
-	ServerID string `json:"-"`
-}
-
-// GetBMCAccess: get BMC access.
-// Get the BMC (Baseboard Management Controller) access associated with the ID, including the URL and login information needed to connect.
+// GetBMCAccess: Get the BMC (Baseboard Management Controller) access associated with the ID, including the URL and login information needed to connect.
 func (s *API) GetBMCAccess(req *GetBMCAccessRequest, opts ...scw.RequestOption) (*BMCAccess, error) {
 	var err error
 
@@ -1602,9 +2088,8 @@ func (s *API) GetBMCAccess(req *GetBMCAccessRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/bmc-access",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/bmc-access",
 	}
 
 	var resp BMCAccess
@@ -1616,15 +2101,7 @@ func (s *API) GetBMCAccess(req *GetBMCAccessRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type StopBMCAccessRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server.
-	ServerID string `json:"-"`
-}
-
-// StopBMCAccess: stop BMC access.
-// Stop BMC (Baseboard Management Controller) access associated with the ID.
+// StopBMCAccess: Stop BMC (Baseboard Management Controller) access associated with the ID.
 func (s *API) StopBMCAccess(req *StopBMCAccessRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -1642,9 +2119,8 @@ func (s *API) StopBMCAccess(req *StopBMCAccessRequest, opts ...scw.RequestOption
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/bmc-access",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/bmc-access",
 	}
 
 	err = s.client.Do(scwReq, nil, opts...)
@@ -1654,19 +2130,7 @@ func (s *API) StopBMCAccess(req *StopBMCAccessRequest, opts ...scw.RequestOption
 	return nil
 }
 
-type UpdateIPRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server.
-	ServerID string `json:"-"`
-	// IPID: ID of the IP to update.
-	IPID string `json:"-"`
-	// Reverse: new reverse IP to update, not updated if null.
-	Reverse *string `json:"reverse"`
-}
-
-// UpdateIP: update IP.
-// Configure the IP address associated with the server ID and IP ID. You can use this method to set a reverse DNS for an IP address.
+// UpdateIP: Configure the IP address associated with the server ID and IP ID. You can use this method to set a reverse DNS for an IP address.
 func (s *API) UpdateIP(req *UpdateIPRequest, opts ...scw.RequestOption) (*IP, error) {
 	var err error
 
@@ -1688,9 +2152,8 @@ func (s *API) UpdateIP(req *UpdateIPRequest, opts ...scw.RequestOption) (*IP, er
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PATCH",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/ips/" + fmt.Sprint(req.IPID) + "",
-		Headers: http.Header{},
+		Method: "PATCH",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/ips/" + fmt.Sprint(req.IPID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -1707,19 +2170,7 @@ func (s *API) UpdateIP(req *UpdateIPRequest, opts ...scw.RequestOption) (*IP, er
 	return &resp, nil
 }
 
-type AddOptionServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server.
-	ServerID string `json:"-"`
-	// OptionID: ID of the option to add.
-	OptionID string `json:"-"`
-	// ExpiresAt: auto expire the option after this date.
-	ExpiresAt *time.Time `json:"expires_at"`
-}
-
-// AddOptionServer: add server option.
-// Add an option, such as Private Networks, to a specific server.
+// AddOptionServer: Add an option, such as Private Networks, to a specific server.
 func (s *API) AddOptionServer(req *AddOptionServerRequest, opts ...scw.RequestOption) (*Server, error) {
 	var err error
 
@@ -1741,9 +2192,8 @@ func (s *API) AddOptionServer(req *AddOptionServerRequest, opts ...scw.RequestOp
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/options/" + fmt.Sprint(req.OptionID) + "",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/options/" + fmt.Sprint(req.OptionID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -1760,17 +2210,7 @@ func (s *API) AddOptionServer(req *AddOptionServerRequest, opts ...scw.RequestOp
 	return &resp, nil
 }
 
-type DeleteOptionServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: ID of the server.
-	ServerID string `json:"-"`
-	// OptionID: ID of the option to delete.
-	OptionID string `json:"-"`
-}
-
-// DeleteOptionServer: delete server option.
-// Delete an option from a specific server.
+// DeleteOptionServer: Delete an option from a specific server.
 func (s *API) DeleteOptionServer(req *DeleteOptionServerRequest, opts ...scw.RequestOption) (*Server, error) {
 	var err error
 
@@ -1792,9 +2232,8 @@ func (s *API) DeleteOptionServer(req *DeleteOptionServerRequest, opts ...scw.Req
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/options/" + fmt.Sprint(req.OptionID) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/options/" + fmt.Sprint(req.OptionID) + "",
 	}
 
 	var resp Server
@@ -1806,20 +2245,7 @@ func (s *API) DeleteOptionServer(req *DeleteOptionServerRequest, opts ...scw.Req
 	return &resp, nil
 }
 
-type ListOffersRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Page: page number.
-	Page *int32 `json:"-"`
-	// PageSize: number of offers per page.
-	PageSize *uint32 `json:"-"`
-	// SubscriptionPeriod: subscription period type to filter offers by.
-	// Default value: unknown_subscription_period
-	SubscriptionPeriod OfferSubscriptionPeriod `json:"-"`
-}
-
-// ListOffers: list offers.
-// List all available Elastic Metal server configurations.
+// ListOffers: List all available Elastic Metal server configurations.
 func (s *API) ListOffers(req *ListOffersRequest, opts ...scw.RequestOption) (*ListOffersResponse, error) {
 	var err error
 
@@ -1843,10 +2269,9 @@ func (s *API) ListOffers(req *ListOffersRequest, opts ...scw.RequestOption) (*Li
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/offers",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/offers",
+		Query:  query,
 	}
 
 	var resp ListOffersResponse
@@ -1858,15 +2283,7 @@ func (s *API) ListOffers(req *ListOffersRequest, opts ...scw.RequestOption) (*Li
 	return &resp, nil
 }
 
-type GetOfferRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// OfferID: ID of the researched Offer.
-	OfferID string `json:"-"`
-}
-
-// GetOffer: get offer.
-// Get details of an offer identified by its offer ID.
+// GetOffer: Get details of an offer identified by its offer ID.
 func (s *API) GetOffer(req *GetOfferRequest, opts ...scw.RequestOption) (*Offer, error) {
 	var err error
 
@@ -1884,9 +2301,8 @@ func (s *API) GetOffer(req *GetOfferRequest, opts ...scw.RequestOption) (*Offer,
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/offers/" + fmt.Sprint(req.OfferID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/offers/" + fmt.Sprint(req.OfferID) + "",
 	}
 
 	var resp Offer
@@ -1898,15 +2314,7 @@ func (s *API) GetOffer(req *GetOfferRequest, opts ...scw.RequestOption) (*Offer,
 	return &resp, nil
 }
 
-type GetOptionRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// OptionID: ID of the option.
-	OptionID string `json:"-"`
-}
-
-// GetOption: get option.
-// Return specific option for the ID.
+// GetOption: Return specific option for the ID.
 func (s *API) GetOption(req *GetOptionRequest, opts ...scw.RequestOption) (*Option, error) {
 	var err error
 
@@ -1924,9 +2332,8 @@ func (s *API) GetOption(req *GetOptionRequest, opts ...scw.RequestOption) (*Opti
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/options/" + fmt.Sprint(req.OptionID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/options/" + fmt.Sprint(req.OptionID) + "",
 	}
 
 	var resp Option
@@ -1938,21 +2345,7 @@ func (s *API) GetOption(req *GetOptionRequest, opts ...scw.RequestOption) (*Opti
 	return &resp, nil
 }
 
-type ListOptionsRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Page: page number.
-	Page *int32 `json:"-"`
-	// PageSize: number of options per page.
-	PageSize *uint32 `json:"-"`
-	// OfferID: offer ID to filter options for.
-	OfferID *string `json:"-"`
-	// Name: name to filter options for.
-	Name *string `json:"-"`
-}
-
-// ListOptions: list options.
-// List all options matching with filters.
+// ListOptions: List all options matching with filters.
 func (s *API) ListOptions(req *ListOptionsRequest, opts ...scw.RequestOption) (*ListOptionsResponse, error) {
 	var err error
 
@@ -1977,10 +2370,9 @@ func (s *API) ListOptions(req *ListOptionsRequest, opts ...scw.RequestOption) (*
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/options",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/options",
+		Query:  query,
 	}
 
 	var resp ListOptionsResponse
@@ -1992,22 +2384,7 @@ func (s *API) ListOptions(req *ListOptionsRequest, opts ...scw.RequestOption) (*
 	return &resp, nil
 }
 
-type ListSettingsRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Page: page number.
-	Page *int32 `json:"-"`
-	// PageSize: set the maximum list size.
-	PageSize *uint32 `json:"-"`
-	// OrderBy: sort order for items in the response.
-	// Default value: created_at_asc
-	OrderBy ListSettingsRequestOrderBy `json:"-"`
-	// ProjectID: ID of the Project.
-	ProjectID *string `json:"-"`
-}
-
-// ListSettings: list all settings.
-// Return all settings for a Project ID.
+// ListSettings: Return all settings for a Project ID.
 func (s *API) ListSettings(req *ListSettingsRequest, opts ...scw.RequestOption) (*ListSettingsResponse, error) {
 	var err error
 
@@ -2032,10 +2409,9 @@ func (s *API) ListSettings(req *ListSettingsRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/settings",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/settings",
+		Query:  query,
 	}
 
 	var resp ListSettingsResponse
@@ -2047,17 +2423,7 @@ func (s *API) ListSettings(req *ListSettingsRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type UpdateSettingRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// SettingID: ID of the setting.
-	SettingID string `json:"-"`
-	// Enabled: defines whether the setting is enabled.
-	Enabled *bool `json:"enabled"`
-}
-
-// UpdateSetting: update setting.
-// Update a setting for a Project ID (enable or disable).
+// UpdateSetting: Update a setting for a Project ID (enable or disable).
 func (s *API) UpdateSetting(req *UpdateSettingRequest, opts ...scw.RequestOption) (*Setting, error) {
 	var err error
 
@@ -2075,9 +2441,8 @@ func (s *API) UpdateSetting(req *UpdateSettingRequest, opts ...scw.RequestOption
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PATCH",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/settings/" + fmt.Sprint(req.SettingID) + "",
-		Headers: http.Header{},
+		Method: "PATCH",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/settings/" + fmt.Sprint(req.SettingID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -2094,19 +2459,7 @@ func (s *API) UpdateSetting(req *UpdateSettingRequest, opts ...scw.RequestOption
 	return &resp, nil
 }
 
-type ListOSRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Page: page number.
-	Page *int32 `json:"-"`
-	// PageSize: number of OS per page.
-	PageSize *uint32 `json:"-"`
-	// OfferID: offer IDs to filter OSes for.
-	OfferID *string `json:"-"`
-}
-
-// ListOS: list available OSes.
-// List all OSes that are available for installation on Elastic Metal servers.
+// ListOS: List all OSes that are available for installation on Elastic Metal servers.
 func (s *API) ListOS(req *ListOSRequest, opts ...scw.RequestOption) (*ListOSResponse, error) {
 	var err error
 
@@ -2130,10 +2483,9 @@ func (s *API) ListOS(req *ListOSRequest, opts ...scw.RequestOption) (*ListOSResp
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/os",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/os",
+		Query:  query,
 	}
 
 	var resp ListOSResponse
@@ -2145,15 +2497,7 @@ func (s *API) ListOS(req *ListOSRequest, opts ...scw.RequestOption) (*ListOSResp
 	return &resp, nil
 }
 
-type GetOSRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// OsID: ID of the OS.
-	OsID string `json:"-"`
-}
-
-// GetOS: get OS with an ID.
-// Return the specific OS for the ID.
+// GetOS: Return the specific OS for the ID.
 func (s *API) GetOS(req *GetOSRequest, opts ...scw.RequestOption) (*OS, error) {
 	var err error
 
@@ -2171,9 +2515,8 @@ func (s *API) GetOS(req *GetOSRequest, opts ...scw.RequestOption) (*OS, error) {
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/os/" + fmt.Sprint(req.OsID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/os/" + fmt.Sprint(req.OsID) + "",
 	}
 
 	var resp OS
@@ -2185,23 +2528,22 @@ func (s *API) GetOS(req *GetOSRequest, opts ...scw.RequestOption) (*OS, error) {
 	return &resp, nil
 }
 
-// Service PrivateNetworkAPI
+// Elastic Metal Private Network API.
+type PrivateNetworkAPI struct {
+	client *scw.Client
+}
 
-// Zones list localities the api is available in
+// NewPrivateNetworkAPI returns a PrivateNetworkAPI object from a Scaleway client.
+func NewPrivateNetworkAPI(client *scw.Client) *PrivateNetworkAPI {
+	return &PrivateNetworkAPI{
+		client: client,
+	}
+}
 func (s *PrivateNetworkAPI) Zones() []scw.Zone {
 	return []scw.Zone{scw.ZoneFrPar2}
 }
 
-type PrivateNetworkAPIAddServerPrivateNetworkRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: the ID of the server.
-	ServerID string `json:"-"`
-	// PrivateNetworkID: the ID of the Private Network.
-	PrivateNetworkID string `json:"private_network_id"`
-}
-
-// AddServerPrivateNetwork: add a server to a Private Network.
+// AddServerPrivateNetwork: Add a server to a Private Network.
 func (s *PrivateNetworkAPI) AddServerPrivateNetwork(req *PrivateNetworkAPIAddServerPrivateNetworkRequest, opts ...scw.RequestOption) (*ServerPrivateNetwork, error) {
 	var err error
 
@@ -2219,9 +2561,8 @@ func (s *PrivateNetworkAPI) AddServerPrivateNetwork(req *PrivateNetworkAPIAddSer
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private-networks",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private-networks",
 	}
 
 	err = scwReq.SetBody(req)
@@ -2238,16 +2579,7 @@ func (s *PrivateNetworkAPI) AddServerPrivateNetwork(req *PrivateNetworkAPIAddSer
 	return &resp, nil
 }
 
-type PrivateNetworkAPISetServerPrivateNetworksRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: the ID of the server.
-	ServerID string `json:"-"`
-	// PrivateNetworkIDs: the IDs of the Private Networks.
-	PrivateNetworkIDs []string `json:"private_network_ids"`
-}
-
-// SetServerPrivateNetworks: set multiple Private Networks on a server.
+// SetServerPrivateNetworks: Set multiple Private Networks on a server.
 func (s *PrivateNetworkAPI) SetServerPrivateNetworks(req *PrivateNetworkAPISetServerPrivateNetworksRequest, opts ...scw.RequestOption) (*SetServerPrivateNetworksResponse, error) {
 	var err error
 
@@ -2265,9 +2597,8 @@ func (s *PrivateNetworkAPI) SetServerPrivateNetworks(req *PrivateNetworkAPISetSe
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PUT",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private-networks",
-		Headers: http.Header{},
+		Method: "PUT",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private-networks",
 	}
 
 	err = scwReq.SetBody(req)
@@ -2284,27 +2615,7 @@ func (s *PrivateNetworkAPI) SetServerPrivateNetworks(req *PrivateNetworkAPISetSe
 	return &resp, nil
 }
 
-type PrivateNetworkAPIListServerPrivateNetworksRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// OrderBy: the sort order for the returned Private Networks.
-	// Default value: created_at_asc
-	OrderBy ListServerPrivateNetworksRequestOrderBy `json:"-"`
-	// Page: the page number for the returned Private Networks.
-	Page *int32 `json:"-"`
-	// PageSize: the maximum number of Private Networks per page.
-	PageSize *uint32 `json:"-"`
-	// ServerID: filter Private Networks by server ID.
-	ServerID *string `json:"-"`
-	// PrivateNetworkID: filter Private Networks by Private Network ID.
-	PrivateNetworkID *string `json:"-"`
-	// OrganizationID: filter Private Networks by Organization ID.
-	OrganizationID *string `json:"-"`
-	// ProjectID: filter Private Networks by Project ID.
-	ProjectID *string `json:"-"`
-}
-
-// ListServerPrivateNetworks: list the Private Networks of a server.
+// ListServerPrivateNetworks: List the Private Networks of a server.
 func (s *PrivateNetworkAPI) ListServerPrivateNetworks(req *PrivateNetworkAPIListServerPrivateNetworksRequest, opts ...scw.RequestOption) (*ListServerPrivateNetworksResponse, error) {
 	var err error
 
@@ -2332,10 +2643,9 @@ func (s *PrivateNetworkAPI) ListServerPrivateNetworks(req *PrivateNetworkAPIList
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/server-private-networks",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/server-private-networks",
+		Query:  query,
 	}
 
 	var resp ListServerPrivateNetworksResponse
@@ -2347,16 +2657,7 @@ func (s *PrivateNetworkAPI) ListServerPrivateNetworks(req *PrivateNetworkAPIList
 	return &resp, nil
 }
 
-type PrivateNetworkAPIDeleteServerPrivateNetworkRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: the ID of the server.
-	ServerID string `json:"-"`
-	// PrivateNetworkID: the ID of the Private Network.
-	PrivateNetworkID string `json:"-"`
-}
-
-// DeleteServerPrivateNetwork: delete a Private Network.
+// DeleteServerPrivateNetwork: Delete a Private Network.
 func (s *PrivateNetworkAPI) DeleteServerPrivateNetwork(req *PrivateNetworkAPIDeleteServerPrivateNetworkRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -2378,9 +2679,8 @@ func (s *PrivateNetworkAPI) DeleteServerPrivateNetwork(req *PrivateNetworkAPIDel
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private-networks/" + fmt.Sprint(req.PrivateNetworkID) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/baremetal/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private-networks/" + fmt.Sprint(req.PrivateNetworkID) + "",
 	}
 
 	err = s.client.Do(scwReq, nil, opts...)
@@ -2389,136 +2689,3 @@ func (s *PrivateNetworkAPI) DeleteServerPrivateNetwork(req *PrivateNetworkAPIDel
 	}
 	return nil
 }
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListServersResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListServersResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListServersResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Servers = append(r.Servers, results.Servers...)
-	r.TotalCount += uint32(len(results.Servers))
-	return uint32(len(results.Servers)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListServerEventsResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListServerEventsResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListServerEventsResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Events = append(r.Events, results.Events...)
-	r.TotalCount += uint32(len(results.Events))
-	return uint32(len(results.Events)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListOffersResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListOffersResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListOffersResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Offers = append(r.Offers, results.Offers...)
-	r.TotalCount += uint32(len(results.Offers))
-	return uint32(len(results.Offers)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListOptionsResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListOptionsResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListOptionsResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Options = append(r.Options, results.Options...)
-	r.TotalCount += uint32(len(results.Options))
-	return uint32(len(results.Options)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListSettingsResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListSettingsResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListSettingsResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Settings = append(r.Settings, results.Settings...)
-	r.TotalCount += uint32(len(results.Settings))
-	return uint32(len(results.Settings)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListOSResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListOSResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListOSResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Os = append(r.Os, results.Os...)
-	r.TotalCount += uint32(len(results.Os))
-	return uint32(len(results.Os)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListServerPrivateNetworksResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListServerPrivateNetworksResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListServerPrivateNetworksResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.ServerPrivateNetworks = append(r.ServerPrivateNetworks, results.ServerPrivateNetworks...)
-	r.TotalCount += uint32(len(results.ServerPrivateNetworks))
-	return uint32(len(results.ServerPrivateNetworks)), nil
-}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/block_sdk.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/block_sdk.go
new file mode 100644
index 00000000000..bb1873c0e1d
--- /dev/null
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/block_sdk.go
@@ -0,0 +1,1250 @@
+// This file was automatically generated. DO NOT EDIT.
+// If you have any remark or suggestion do not hesitate to open an issue.
+
+// Package block provides methods and message types of the block v1alpha1 API.
+package block
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"net"
+	"net/http"
+	"net/url"
+	"strings"
+	"time"
+
+	"github.com/scaleway/scaleway-sdk-go/internal/errors"
+	"github.com/scaleway/scaleway-sdk-go/internal/marshaler"
+	"github.com/scaleway/scaleway-sdk-go/internal/parameter"
+	"github.com/scaleway/scaleway-sdk-go/namegenerator"
+	"github.com/scaleway/scaleway-sdk-go/scw"
+)
+
+// always import dependencies
+var (
+	_ fmt.Stringer
+	_ json.Unmarshaler
+	_ url.URL
+	_ net.IP
+	_ http.Header
+	_ bytes.Reader
+	_ time.Time
+	_ = strings.Join
+
+	_ scw.ScalewayRequest
+	_ marshaler.Duration
+	_ scw.File
+	_ = parameter.AddToQuery
+	_ = namegenerator.GetRandomName
+)
+
+type ListSnapshotsRequestOrderBy string
+
+const (
+	// Order by creation date (ascending chronological order).
+	ListSnapshotsRequestOrderByCreatedAtAsc = ListSnapshotsRequestOrderBy("created_at_asc")
+	// Order by creation date (descending chronological order).
+	ListSnapshotsRequestOrderByCreatedAtDesc = ListSnapshotsRequestOrderBy("created_at_desc")
+	// Order by name (ascending order).
+	ListSnapshotsRequestOrderByNameAsc = ListSnapshotsRequestOrderBy("name_asc")
+	// Order by name (descending order).
+	ListSnapshotsRequestOrderByNameDesc = ListSnapshotsRequestOrderBy("name_desc")
+)
+
+func (enum ListSnapshotsRequestOrderBy) String() string {
+	if enum == "" {
+		// return default value if empty
+		return "created_at_asc"
+	}
+	return string(enum)
+}
+
+func (enum ListSnapshotsRequestOrderBy) MarshalJSON() ([]byte, error) {
+	return []byte(fmt.Sprintf(`"%s"`, enum)), nil
+}
+
+func (enum *ListSnapshotsRequestOrderBy) UnmarshalJSON(data []byte) error {
+	tmp := ""
+
+	if err := json.Unmarshal(data, &tmp); err != nil {
+		return err
+	}
+
+	*enum = ListSnapshotsRequestOrderBy(ListSnapshotsRequestOrderBy(tmp).String())
+	return nil
+}
+
+type ListVolumesRequestOrderBy string
+
+const (
+	// Order by creation date (ascending chronological order).
+	ListVolumesRequestOrderByCreatedAtAsc = ListVolumesRequestOrderBy("created_at_asc")
+	// Order by creation date (descending chronological order).
+	ListVolumesRequestOrderByCreatedAtDesc = ListVolumesRequestOrderBy("created_at_desc")
+	// Order by name (ascending order).
+	ListVolumesRequestOrderByNameAsc = ListVolumesRequestOrderBy("name_asc")
+	// Order by name (descending order).
+	ListVolumesRequestOrderByNameDesc = ListVolumesRequestOrderBy("name_desc")
+)
+
+func (enum ListVolumesRequestOrderBy) String() string {
+	if enum == "" {
+		// return default value if empty
+		return "created_at_asc"
+	}
+	return string(enum)
+}
+
+func (enum ListVolumesRequestOrderBy) MarshalJSON() ([]byte, error) {
+	return []byte(fmt.Sprintf(`"%s"`, enum)), nil
+}
+
+func (enum *ListVolumesRequestOrderBy) UnmarshalJSON(data []byte) error {
+	tmp := ""
+
+	if err := json.Unmarshal(data, &tmp); err != nil {
+		return err
+	}
+
+	*enum = ListVolumesRequestOrderBy(ListVolumesRequestOrderBy(tmp).String())
+	return nil
+}
+
+type ReferenceStatus string
+
+const (
+	// If unspecified, the status of the reference is unknown by default.
+	ReferenceStatusUnknownStatus = ReferenceStatus("unknown_status")
+	// When the reference is being attached (transient).
+	ReferenceStatusAttaching = ReferenceStatus("attaching")
+	// When the reference attached to a volume.
+	ReferenceStatusAttached = ReferenceStatus("attached")
+	// When the reference is being detached (transient).
+	ReferenceStatusDetaching = ReferenceStatus("detaching")
+	// When the reference is detached from a volume - the reference ceases to exist.
+	ReferenceStatusDetached = ReferenceStatus("detached")
+	// Reference undergoing snapshotting operation (transient).
+	ReferenceStatusSnapshotting = ReferenceStatus("snapshotting")
+	// Error status.
+	ReferenceStatusError = ReferenceStatus("error")
+)
+
+func (enum ReferenceStatus) String() string {
+	if enum == "" {
+		// return default value if empty
+		return "unknown_status"
+	}
+	return string(enum)
+}
+
+func (enum ReferenceStatus) MarshalJSON() ([]byte, error) {
+	return []byte(fmt.Sprintf(`"%s"`, enum)), nil
+}
+
+func (enum *ReferenceStatus) UnmarshalJSON(data []byte) error {
+	tmp := ""
+
+	if err := json.Unmarshal(data, &tmp); err != nil {
+		return err
+	}
+
+	*enum = ReferenceStatus(ReferenceStatus(tmp).String())
+	return nil
+}
+
+type ReferenceType string
+
+const (
+	// If unspecified, the reference type is unknown by default.
+	ReferenceTypeUnknownType = ReferenceType("unknown_type")
+	// Reference linked to a snapshot (for snapshots only).
+	ReferenceTypeLink = ReferenceType("link")
+	// Exclusive reference that can be associated to a volume (for volumes only).
+	ReferenceTypeExclusive = ReferenceType("exclusive")
+	// Access to the volume or snapshot in a read-only mode, without storage write access to the resource.
+	ReferenceTypeReadOnly = ReferenceType("read_only")
+)
+
+func (enum ReferenceType) String() string {
+	if enum == "" {
+		// return default value if empty
+		return "unknown_type"
+	}
+	return string(enum)
+}
+
+func (enum ReferenceType) MarshalJSON() ([]byte, error) {
+	return []byte(fmt.Sprintf(`"%s"`, enum)), nil
+}
+
+func (enum *ReferenceType) UnmarshalJSON(data []byte) error {
+	tmp := ""
+
+	if err := json.Unmarshal(data, &tmp); err != nil {
+		return err
+	}
+
+	*enum = ReferenceType(ReferenceType(tmp).String())
+	return nil
+}
+
+type SnapshotStatus string
+
+const (
+	// If unspecified, the snapshot status is unknown by default.
+	SnapshotStatusUnknownStatus = SnapshotStatus("unknown_status")
+	// The snapshot is under creation (transient).
+	SnapshotStatusCreating = SnapshotStatus("creating")
+	// Snapshot exists and is not attached to any reference.
+	SnapshotStatusAvailable = SnapshotStatus("available")
+	// Snapshot in an error status.
+	SnapshotStatusError = SnapshotStatus("error")
+	// Snapshot is being deleted (transient).
+	SnapshotStatusDeleting = SnapshotStatus("deleting")
+	// Snapshot was deleted.
+	SnapshotStatusDeleted = SnapshotStatus("deleted")
+	// Snapshot attached to one or more references.
+	SnapshotStatusInUse  = SnapshotStatus("in_use")
+	SnapshotStatusLocked = SnapshotStatus("locked")
+)
+
+func (enum SnapshotStatus) String() string {
+	if enum == "" {
+		// return default value if empty
+		return "unknown_status"
+	}
+	return string(enum)
+}
+
+func (enum SnapshotStatus) MarshalJSON() ([]byte, error) {
+	return []byte(fmt.Sprintf(`"%s"`, enum)), nil
+}
+
+func (enum *SnapshotStatus) UnmarshalJSON(data []byte) error {
+	tmp := ""
+
+	if err := json.Unmarshal(data, &tmp); err != nil {
+		return err
+	}
+
+	*enum = SnapshotStatus(SnapshotStatus(tmp).String())
+	return nil
+}
+
+type StorageClass string
+
+const (
+	// If unspecified, the Storage Class is unknown by default.
+	StorageClassUnknownStorageClass = StorageClass("unknown_storage_class")
+	// No specific Storage Class selected.
+	StorageClassUnspecified = StorageClass("unspecified")
+	// Classic storage.
+	StorageClassBssd = StorageClass("bssd")
+	// Performance storage with lower latency.
+	StorageClassSbs = StorageClass("sbs")
+)
+
+func (enum StorageClass) String() string {
+	if enum == "" {
+		// return default value if empty
+		return "unknown_storage_class"
+	}
+	return string(enum)
+}
+
+func (enum StorageClass) MarshalJSON() ([]byte, error) {
+	return []byte(fmt.Sprintf(`"%s"`, enum)), nil
+}
+
+func (enum *StorageClass) UnmarshalJSON(data []byte) error {
+	tmp := ""
+
+	if err := json.Unmarshal(data, &tmp); err != nil {
+		return err
+	}
+
+	*enum = StorageClass(StorageClass(tmp).String())
+	return nil
+}
+
+type VolumeStatus string
+
+const (
+	// If unspecified, the volume status is unknown by default.
+	VolumeStatusUnknownStatus = VolumeStatus("unknown_status")
+	// The volume is under creation (transient).
+	VolumeStatusCreating = VolumeStatus("creating")
+	// The volume exists and is not attached to any reference.
+	VolumeStatusAvailable = VolumeStatus("available")
+	// The volume exists and is already attached to a reference.
+	VolumeStatusInUse = VolumeStatus("in_use")
+	// The volume undergoing deletion (transient).
+	VolumeStatusDeleting = VolumeStatus("deleting")
+	VolumeStatusDeleted  = VolumeStatus("deleted")
+	// The volume is being increased (transient).
+	VolumeStatusResizing = VolumeStatus("resizing")
+	// The volume is an error status.
+	VolumeStatusError = VolumeStatus("error")
+	// The volume is undergoing snapshotting operation (transient).
+	VolumeStatusSnapshotting = VolumeStatus("snapshotting")
+	VolumeStatusLocked       = VolumeStatus("locked")
+)
+
+func (enum VolumeStatus) String() string {
+	if enum == "" {
+		// return default value if empty
+		return "unknown_status"
+	}
+	return string(enum)
+}
+
+func (enum VolumeStatus) MarshalJSON() ([]byte, error) {
+	return []byte(fmt.Sprintf(`"%s"`, enum)), nil
+}
+
+func (enum *VolumeStatus) UnmarshalJSON(data []byte) error {
+	tmp := ""
+
+	if err := json.Unmarshal(data, &tmp); err != nil {
+		return err
+	}
+
+	*enum = VolumeStatus(VolumeStatus(tmp).String())
+	return nil
+}
+
+// SnapshotParentVolume: snapshot parent volume.
+type SnapshotParentVolume struct {
+	// ID: parent volume UUID (volume from which the snapshot originates).
+	ID string `json:"id"`
+
+	// Name: name of the parent volume.
+	Name string `json:"name"`
+
+	// Type: volume type of the parent volume.
+	Type string `json:"type"`
+
+	// Status: current status the parent volume.
+	// Default value: unknown_status
+	Status VolumeStatus `json:"status"`
+}
+
+// VolumeSpecifications: volume specifications.
+type VolumeSpecifications struct {
+	// PerfIops: the maximum IO/s expected, according to the different options available in stock (`5000 | 15000`).
+	PerfIops *uint32 `json:"perf_iops"`
+
+	// Class: the storage class of the volume.
+	// Default value: unknown_storage_class
+	Class StorageClass `json:"class"`
+}
+
+// Reference: reference.
+type Reference struct {
+	// ID: UUID of the reference.
+	ID string `json:"id"`
+
+	// ProductResourceType: type of resource to which the reference is associated.
+	ProductResourceType string `json:"product_resource_type"`
+
+	// ProductResourceID: UUID of the product resource it refers to (according to the product_resource_type).
+	ProductResourceID string `json:"product_resource_id"`
+
+	// CreatedAt: creation date of the reference.
+	CreatedAt *time.Time `json:"created_at"`
+
+	// Type: type of reference (link, exclusive, read_only).
+	// Default value: unknown_type
+	Type ReferenceType `json:"type"`
+
+	// Status: status of reference (attaching, attached, detaching).
+	// Default value: unknown_status
+	Status ReferenceStatus `json:"status"`
+}
+
+// CreateVolumeRequestFromEmpty: create volume request from empty.
+type CreateVolumeRequestFromEmpty struct {
+	// Size: must be compliant with the minimum (1 GB) and maximum (10 TB) allowed size.
+	Size scw.Size `json:"size"`
+}
+
+// CreateVolumeRequestFromSnapshot: create volume request from snapshot.
+type CreateVolumeRequestFromSnapshot struct {
+	// Size: must be compliant with the minimum (1 GB) and maximum (10 TB) allowed size.
+	// Size is optional and is used only if a resize of the volume is requested, otherwise original snapshot size will be used.
+	Size *scw.Size `json:"size"`
+
+	// SnapshotID: source snapshot from which volume will be created.
+	SnapshotID string `json:"snapshot_id"`
+}
+
+// SnapshotSummary: snapshot summary.
+type SnapshotSummary struct {
+	// ID: UUID of the snapshot.
+	ID string `json:"id"`
+
+	// Name: name of the snapshot.
+	Name string `json:"name"`
+
+	// ParentVolume: if the parent volume has been deleted, value is null.
+	ParentVolume *SnapshotParentVolume `json:"parent_volume"`
+
+	// Size: size of the snapshot in bytes.
+	Size scw.Size `json:"size"`
+
+	// ProjectID: UUID of the project the snapshot belongs to.
+	ProjectID string `json:"project_id"`
+
+	// CreatedAt: creation date of the snapshot.
+	CreatedAt *time.Time `json:"created_at"`
+
+	// UpdatedAt: last modification date of the properties of a snapshot.
+	UpdatedAt *time.Time `json:"updated_at"`
+
+	// Status: current status of the snapshot (available, in_use, ...).
+	// Default value: unknown_status
+	Status SnapshotStatus `json:"status"`
+
+	// Tags: list of tags assigned to the volume.
+	Tags []string `json:"tags"`
+
+	// Zone: snapshot Availability Zone.
+	Zone scw.Zone `json:"zone"`
+
+	// Class: storage class of the snapshot.
+	// Default value: unknown_storage_class
+	Class StorageClass `json:"class"`
+}
+
+// VolumeType: volume type.
+type VolumeType struct {
+	// Type: volume type.
+	Type string `json:"type"`
+
+	// Pricing: price of the volume billed in GB/hour.
+	Pricing *scw.Money `json:"pricing"`
+
+	// SnapshotPricing: price of the snapshot billed in GB/hour.
+	SnapshotPricing *scw.Money `json:"snapshot_pricing"`
+
+	// Specs: volume specifications of the volume type.
+	Specs *VolumeSpecifications `json:"specs"`
+}
+
+// Volume: volume.
+type Volume struct {
+	// ID: UUID of the volume.
+	ID string `json:"id"`
+
+	// Name: name of the volume.
+	Name string `json:"name"`
+
+	// Type: volume type.
+	Type string `json:"type"`
+
+	// Size: volume size in bytes.
+	Size scw.Size `json:"size"`
+
+	// ProjectID: UUID of the project to which the volume belongs.
+	ProjectID string `json:"project_id"`
+
+	// CreatedAt: creation date of the volume.
+	CreatedAt *time.Time `json:"created_at"`
+
+	// UpdatedAt: last update of the properties of a volume.
+	UpdatedAt *time.Time `json:"updated_at"`
+
+	// References: list of the references to the volume.
+	References []*Reference `json:"references"`
+
+	// ParentSnapshotID: when a volume is created from a snapshot, is the UUID of the snapshot from which the volume has been created.
+	ParentSnapshotID *string `json:"parent_snapshot_id"`
+
+	// Status: current status of the volume (available, in_use, ...).
+	// Default value: unknown_status
+	Status VolumeStatus `json:"status"`
+
+	// Tags: list of tags assigned to the volume.
+	Tags []string `json:"tags"`
+
+	// Zone: volume zone.
+	Zone scw.Zone `json:"zone"`
+
+	// Specs: specifications of the volume.
+	Specs *VolumeSpecifications `json:"specs"`
+
+	// LastDetachedAt: last time the volume was detached.
+	LastDetachedAt *time.Time `json:"last_detached_at"`
+}
+
+// CreateSnapshotRequest: create snapshot request.
+type CreateSnapshotRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// VolumeID: UUID of the volume to snapshot.
+	VolumeID string `json:"volume_id"`
+
+	// Name: name of the snapshot.
+	Name string `json:"name"`
+
+	// ProjectID: UUID of the project to which the volume and the snapshot belong.
+	ProjectID string `json:"project_id"`
+
+	// Tags: list of tags assigned to the snapshot.
+	Tags []string `json:"tags"`
+}
+
+// CreateVolumeRequest: create volume request.
+type CreateVolumeRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Name: name of the volume.
+	Name string `json:"name"`
+
+	// PerfIops: the maximum IO/s expected, according to the different options available in stock (`5000 | 15000`).
+	// Precisely one of PerfIops must be set.
+	PerfIops *uint32 `json:"perf_iops,omitempty"`
+
+	// ProjectID: UUID of the project the volume belongs to.
+	ProjectID string `json:"project_id"`
+
+	// FromEmpty: specify the size of the new volume if creating a new one from scratch.
+	// Precisely one of FromEmpty, FromSnapshot must be set.
+	FromEmpty *CreateVolumeRequestFromEmpty `json:"from_empty,omitempty"`
+
+	// FromSnapshot: specify the snapshot ID of the original snapshot.
+	// Precisely one of FromEmpty, FromSnapshot must be set.
+	FromSnapshot *CreateVolumeRequestFromSnapshot `json:"from_snapshot,omitempty"`
+
+	// Tags: list of tags assigned to the volume.
+	Tags []string `json:"tags"`
+}
+
+// DeleteSnapshotRequest: delete snapshot request.
+type DeleteSnapshotRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SnapshotID: UUID of the snapshot.
+	SnapshotID string `json:"-"`
+}
+
+// DeleteVolumeRequest: delete volume request.
+type DeleteVolumeRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// VolumeID: UUID of the volume.
+	VolumeID string `json:"-"`
+}
+
+// GetSnapshotRequest: get snapshot request.
+type GetSnapshotRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SnapshotID: UUID of the snapshot.
+	SnapshotID string `json:"-"`
+}
+
+// GetVolumeRequest: get volume request.
+type GetVolumeRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// VolumeID: UUID of the volume.
+	VolumeID string `json:"-"`
+}
+
+// ImportSnapshotFromS3Request: import snapshot from s3 request.
+type ImportSnapshotFromS3Request struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	Bucket string `json:"bucket"`
+
+	Key string `json:"key"`
+
+	Name string `json:"name"`
+
+	ProjectID string `json:"project_id"`
+
+	Tags []string `json:"tags"`
+
+	Size *scw.Size `json:"size,omitempty"`
+}
+
+// ListSnapshotsRequest: list snapshots request.
+type ListSnapshotsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// OrderBy: criteria to use when ordering the list.
+	// Default value: created_at_asc
+	OrderBy ListSnapshotsRequestOrderBy `json:"-"`
+
+	// ProjectID: filter by Project ID.
+	ProjectID *string `json:"-"`
+
+	// OrganizationID: filter by Organization ID.
+	OrganizationID *string `json:"-"`
+
+	// Page: page number.
+	Page *int32 `json:"-"`
+
+	// PageSize: page size, defines how many entries are returned in one page, must be lower or equal to 100.
+	PageSize *uint32 `json:"-"`
+
+	// VolumeID: filter snapshots by the ID of the original volume.
+	VolumeID *string `json:"-"`
+
+	// Name: filter snapshots by their names.
+	Name *string `json:"-"`
+}
+
+// ListSnapshotsResponse: list snapshots response.
+type ListSnapshotsResponse struct {
+	// Snapshots: paginated returned list of snapshots.
+	Snapshots []*SnapshotSummary `json:"snapshots"`
+
+	// TotalCount: total number of snpashots in the project.
+	TotalCount uint64 `json:"total_count"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListSnapshotsResponse) UnsafeGetTotalCount() uint64 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListSnapshotsResponse) UnsafeAppend(res interface{}) (uint64, error) {
+	results, ok := res.(*ListSnapshotsResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Snapshots = append(r.Snapshots, results.Snapshots...)
+	r.TotalCount += uint64(len(results.Snapshots))
+	return uint64(len(results.Snapshots)), nil
+}
+
+// ListVolumeTypesRequest: list volume types request.
+type ListVolumeTypesRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Page: page number.
+	Page *int32 `json:"-"`
+
+	// PageSize: page size, defines how many entries are returned in one page, must be lower or equal to 100.
+	PageSize *uint32 `json:"-"`
+}
+
+// ListVolumeTypesResponse: list volume types response.
+type ListVolumeTypesResponse struct {
+	// VolumeTypes: returns paginated list of volume-types.
+	VolumeTypes []*VolumeType `json:"volume_types"`
+
+	// TotalCount: total number of volume-types currently available in stock.
+	TotalCount uint64 `json:"total_count"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListVolumeTypesResponse) UnsafeGetTotalCount() uint64 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListVolumeTypesResponse) UnsafeAppend(res interface{}) (uint64, error) {
+	results, ok := res.(*ListVolumeTypesResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.VolumeTypes = append(r.VolumeTypes, results.VolumeTypes...)
+	r.TotalCount += uint64(len(results.VolumeTypes))
+	return uint64(len(results.VolumeTypes)), nil
+}
+
+// ListVolumesRequest: list volumes request.
+type ListVolumesRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// OrderBy: criteria to use when ordering the list.
+	// Default value: created_at_asc
+	OrderBy ListVolumesRequestOrderBy `json:"-"`
+
+	// ProjectID: filter by Project ID.
+	ProjectID *string `json:"-"`
+
+	// OrganizationID: filter by Organization ID.
+	OrganizationID *string `json:"-"`
+
+	// Page: page number.
+	Page *int32 `json:"-"`
+
+	// PageSize: page size, defines how many entries are returned in one page, must be lower or equal to 100.
+	PageSize *uint32 `json:"-"`
+
+	// Name: filter the return volumes by their names.
+	Name *string `json:"-"`
+
+	// ProductResourceID: filter by a product resource ID linked to this volume (such as an Instance ID).
+	ProductResourceID *string `json:"-"`
+}
+
+// ListVolumesResponse: list volumes response.
+type ListVolumesResponse struct {
+	// Volumes: paginated returned list of volumes.
+	Volumes []*Volume `json:"volumes"`
+
+	// TotalCount: total number of volumes in the project.
+	TotalCount uint64 `json:"total_count"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListVolumesResponse) UnsafeGetTotalCount() uint64 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListVolumesResponse) UnsafeAppend(res interface{}) (uint64, error) {
+	results, ok := res.(*ListVolumesResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Volumes = append(r.Volumes, results.Volumes...)
+	r.TotalCount += uint64(len(results.Volumes))
+	return uint64(len(results.Volumes)), nil
+}
+
+// Snapshot: snapshot.
+type Snapshot struct {
+	// ID: UUID of the snapshot.
+	ID string `json:"id"`
+
+	// Name: name of the snapshot.
+	Name string `json:"name"`
+
+	// ParentVolume: if the parent volume was deleted, value is null.
+	ParentVolume *SnapshotParentVolume `json:"parent_volume"`
+
+	// Size: size in bytes of the snapshot.
+	Size scw.Size `json:"size"`
+
+	// ProjectID: UUID of the project the snapshot belongs to.
+	ProjectID string `json:"project_id"`
+
+	// CreatedAt: creation date of the snapshot.
+	CreatedAt *time.Time `json:"created_at"`
+
+	// UpdatedAt: last modification date of the properties of a snapshot.
+	UpdatedAt *time.Time `json:"updated_at"`
+
+	// References: list of the references to the snapshot.
+	References []*Reference `json:"references"`
+
+	// Status: current status of the snapshot (available, in_use, ...).
+	// Default value: unknown_status
+	Status SnapshotStatus `json:"status"`
+
+	// Tags: list of tags assigned to the volume.
+	Tags []string `json:"tags"`
+
+	// Zone: snapshot zone.
+	Zone scw.Zone `json:"zone"`
+
+	// Class: storage class of the snapshot.
+	// Default value: unknown_storage_class
+	Class StorageClass `json:"class"`
+}
+
+// UpdateSnapshotRequest: update snapshot request.
+type UpdateSnapshotRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SnapshotID: UUID of the snapshot.
+	SnapshotID string `json:"-"`
+
+	// Name: when defined, is the name of the snapshot.
+	Name *string `json:"name,omitempty"`
+
+	// Tags: list of tags assigned to the snapshot.
+	Tags *[]string `json:"tags,omitempty"`
+}
+
+// UpdateVolumeRequest: update volume request.
+type UpdateVolumeRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// VolumeID: UUID of the volume.
+	VolumeID string `json:"-"`
+
+	// Name: when defined, is the new name of the volume.
+	Name *string `json:"name,omitempty"`
+
+	// Size: size in bytes of the volume, with a granularity of 1 GB (10^9 bytes).
+	// Must be compliant with the minimum (1GB) and maximum (10TB) allowed size.
+	Size *scw.Size `json:"size,omitempty"`
+
+	// Tags: list of tags assigned to the volume.
+	Tags *[]string `json:"tags,omitempty"`
+
+	// PerfIops: the selected value must be available for the volume's current storage class.
+	PerfIops *uint32 `json:"perf_iops,omitempty"`
+}
+
+// This API allows you to use and manage your Block Storage volumes.
+type API struct {
+	client *scw.Client
+}
+
+// NewAPI returns a API object from a Scaleway client.
+func NewAPI(client *scw.Client) *API {
+	return &API{
+		client: client,
+	}
+}
+func (s *API) Zones() []scw.Zone {
+	return []scw.Zone{scw.ZoneFrPar1, scw.ZoneFrPar2, scw.ZoneNlAms1, scw.ZoneNlAms3, scw.ZonePlWaw3}
+}
+
+// ListVolumeTypes: List all available volume types in a specified zone. The volume types listed are ordered by name in ascending order.
+func (s *API) ListVolumeTypes(req *ListVolumeTypesRequest, opts ...scw.RequestOption) (*ListVolumeTypesResponse, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	defaultPageSize, exist := s.client.GetDefaultPageSize()
+	if (req.PageSize == nil || *req.PageSize == 0) && exist {
+		req.PageSize = &defaultPageSize
+	}
+
+	query := url.Values{}
+	parameter.AddToQuery(query, "page", req.Page)
+	parameter.AddToQuery(query, "page_size", req.PageSize)
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "GET",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/volume-types",
+		Query:  query,
+	}
+
+	var resp ListVolumeTypesResponse
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
+}
+
+// ListVolumes: List all existing volumes in a specified zone. By default, the volumes listed are ordered by creation date in ascending order. This can be modified via the `order_by` field.
+func (s *API) ListVolumes(req *ListVolumesRequest, opts ...scw.RequestOption) (*ListVolumesResponse, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	defaultPageSize, exist := s.client.GetDefaultPageSize()
+	if (req.PageSize == nil || *req.PageSize == 0) && exist {
+		req.PageSize = &defaultPageSize
+	}
+
+	query := url.Values{}
+	parameter.AddToQuery(query, "order_by", req.OrderBy)
+	parameter.AddToQuery(query, "project_id", req.ProjectID)
+	parameter.AddToQuery(query, "organization_id", req.OrganizationID)
+	parameter.AddToQuery(query, "page", req.Page)
+	parameter.AddToQuery(query, "page_size", req.PageSize)
+	parameter.AddToQuery(query, "name", req.Name)
+	parameter.AddToQuery(query, "product_resource_id", req.ProductResourceID)
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "GET",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/volumes",
+		Query:  query,
+	}
+
+	var resp ListVolumesResponse
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
+}
+
+// CreateVolume: To create a new volume from scratch, you must specify `from_empty` and the `size`.
+// To create a volume from an existing snapshot, specify `from_snapshot` and the `snapshot_id` in the request payload instead, size is optional and can be specified if you need to extend the original size. The volume will take on the same volume class and underlying IOPS limitations as the original snapshot.
+func (s *API) CreateVolume(req *CreateVolumeRequest, opts ...scw.RequestOption) (*Volume, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	if req.ProjectID == "" {
+		defaultProjectID, _ := s.client.GetDefaultProjectID()
+		req.ProjectID = defaultProjectID
+	}
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "POST",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/volumes",
+	}
+
+	err = scwReq.SetBody(req)
+	if err != nil {
+		return nil, err
+	}
+
+	var resp Volume
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
+}
+
+// GetVolume: Retrieve technical information about a specific volume. Details such as size, type, and status are returned in the response.
+func (s *API) GetVolume(req *GetVolumeRequest, opts ...scw.RequestOption) (*Volume, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	if fmt.Sprint(req.VolumeID) == "" {
+		return nil, errors.New("field VolumeID cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "GET",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/volumes/" + fmt.Sprint(req.VolumeID) + "",
+	}
+
+	var resp Volume
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
+}
+
+// DeleteVolume: You must specify the `volume_id` of the volume you want to delete. The volume must not be in the `in_use` status.
+func (s *API) DeleteVolume(req *DeleteVolumeRequest, opts ...scw.RequestOption) error {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	if fmt.Sprint(req.Zone) == "" {
+		return errors.New("field Zone cannot be empty in request")
+	}
+
+	if fmt.Sprint(req.VolumeID) == "" {
+		return errors.New("field VolumeID cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "DELETE",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/volumes/" + fmt.Sprint(req.VolumeID) + "",
+	}
+
+	err = s.client.Do(scwReq, nil, opts...)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+// UpdateVolume: Update the technical details of a volume, such as its name, tags, or its new size and `volume_type` (within the same Block Storage class).
+// You can only resize a volume to a larger size. It is currently not possible to change your Block Storage Class.
+func (s *API) UpdateVolume(req *UpdateVolumeRequest, opts ...scw.RequestOption) (*Volume, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	if fmt.Sprint(req.VolumeID) == "" {
+		return nil, errors.New("field VolumeID cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "PATCH",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/volumes/" + fmt.Sprint(req.VolumeID) + "",
+	}
+
+	err = scwReq.SetBody(req)
+	if err != nil {
+		return nil, err
+	}
+
+	var resp Volume
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
+}
+
+// ListSnapshots: List all available snapshots in a specified zone. By default, the snapshots listed are ordered by creation date in ascending order. This can be modified via the `order_by` field.
+func (s *API) ListSnapshots(req *ListSnapshotsRequest, opts ...scw.RequestOption) (*ListSnapshotsResponse, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	defaultPageSize, exist := s.client.GetDefaultPageSize()
+	if (req.PageSize == nil || *req.PageSize == 0) && exist {
+		req.PageSize = &defaultPageSize
+	}
+
+	query := url.Values{}
+	parameter.AddToQuery(query, "order_by", req.OrderBy)
+	parameter.AddToQuery(query, "project_id", req.ProjectID)
+	parameter.AddToQuery(query, "organization_id", req.OrganizationID)
+	parameter.AddToQuery(query, "page", req.Page)
+	parameter.AddToQuery(query, "page_size", req.PageSize)
+	parameter.AddToQuery(query, "volume_id", req.VolumeID)
+	parameter.AddToQuery(query, "name", req.Name)
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "GET",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/snapshots",
+		Query:  query,
+	}
+
+	var resp ListSnapshotsResponse
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
+}
+
+// GetSnapshot: Retrieve technical information about a specific snapshot. Details such as size, volume type, and status are returned in the response.
+func (s *API) GetSnapshot(req *GetSnapshotRequest, opts ...scw.RequestOption) (*Snapshot, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	if fmt.Sprint(req.SnapshotID) == "" {
+		return nil, errors.New("field SnapshotID cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "GET",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "",
+	}
+
+	var resp Snapshot
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
+}
+
+// CreateSnapshot: To create a snapshot, the volume must be in the `in_use` or the `available` status.
+// If your volume is in a transient state, you need to wait until the end of the current operation.
+func (s *API) CreateSnapshot(req *CreateSnapshotRequest, opts ...scw.RequestOption) (*Snapshot, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	if req.ProjectID == "" {
+		defaultProjectID, _ := s.client.GetDefaultProjectID()
+		req.ProjectID = defaultProjectID
+	}
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "POST",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/snapshots",
+	}
+
+	err = scwReq.SetBody(req)
+	if err != nil {
+		return nil, err
+	}
+
+	var resp Snapshot
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
+}
+
+// ImportSnapshotFromS3:
+func (s *API) ImportSnapshotFromS3(req *ImportSnapshotFromS3Request, opts ...scw.RequestOption) (*Snapshot, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	if req.ProjectID == "" {
+		defaultProjectID, _ := s.client.GetDefaultProjectID()
+		req.ProjectID = defaultProjectID
+	}
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "POST",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/import-from-s3",
+	}
+
+	err = scwReq.SetBody(req)
+	if err != nil {
+		return nil, err
+	}
+
+	var resp Snapshot
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
+}
+
+// DeleteSnapshot: You must specify the `snapshot_id` of the snapshot you want to delete. The snapshot must not be in use.
+func (s *API) DeleteSnapshot(req *DeleteSnapshotRequest, opts ...scw.RequestOption) error {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	if fmt.Sprint(req.Zone) == "" {
+		return errors.New("field Zone cannot be empty in request")
+	}
+
+	if fmt.Sprint(req.SnapshotID) == "" {
+		return errors.New("field SnapshotID cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "DELETE",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "",
+	}
+
+	err = s.client.Do(scwReq, nil, opts...)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+// UpdateSnapshot: Update the name or tags of the snapshot.
+func (s *API) UpdateSnapshot(req *UpdateSnapshotRequest, opts ...scw.RequestOption) (*Snapshot, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	if fmt.Sprint(req.SnapshotID) == "" {
+		return nil, errors.New("field SnapshotID cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "PATCH",
+		Path:   "/block/v1alpha1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "",
+	}
+
+	err = scwReq.SetBody(req)
+	if err != nil {
+		return nil, err
+	}
+
+	var resp Snapshot
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
+}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/snapshot_utils.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/snapshot_utils.go
new file mode 100644
index 00000000000..d16f6114fc5
--- /dev/null
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/snapshot_utils.go
@@ -0,0 +1,59 @@
+package block
+
+import (
+	"time"
+
+	"github.com/scaleway/scaleway-sdk-go/internal/async"
+	"github.com/scaleway/scaleway-sdk-go/internal/errors"
+	"github.com/scaleway/scaleway-sdk-go/scw"
+)
+
+// WaitForSnapshotRequest is used by WaitForSnapshot method.
+type WaitForSnapshotRequest struct {
+	SnapshotID    string
+	Zone          scw.Zone
+	Timeout       *time.Duration
+	RetryInterval *time.Duration
+}
+
+// WaitForSnapshot wait for the snapshot to be in a "terminal state" before returning.
+func (s *API) WaitForSnapshot(req *WaitForSnapshotRequest, opts ...scw.RequestOption) (*Snapshot, error) {
+	timeout := defaultTimeout
+	if req.Timeout != nil {
+		timeout = *req.Timeout
+	}
+	retryInterval := defaultRetryInterval
+	if req.RetryInterval != nil {
+		retryInterval = *req.RetryInterval
+	}
+
+	terminalStatus := map[SnapshotStatus]struct{}{
+		SnapshotStatusAvailable: {},
+		SnapshotStatusInUse:     {},
+		SnapshotStatusError:     {},
+		SnapshotStatusLocked:    {},
+		SnapshotStatusDeleted:   {},
+	}
+
+	snapshot, err := async.WaitSync(&async.WaitSyncConfig{
+		Get: func() (interface{}, bool, error) {
+			res, err := s.GetSnapshot(&GetSnapshotRequest{
+				SnapshotID: req.SnapshotID,
+				Zone:       req.Zone,
+			}, opts...)
+
+			if err != nil {
+				return nil, false, err
+			}
+			_, isTerminal := terminalStatus[res.Status]
+
+			return res, isTerminal, err
+		},
+		Timeout:          timeout,
+		IntervalStrategy: async.LinearIntervalStrategy(retryInterval),
+	})
+	if err != nil {
+		return nil, errors.Wrap(err, "waiting for snapshot failed")
+	}
+	return snapshot.(*Snapshot), nil
+}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/volume_utils.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/volume_utils.go
new file mode 100644
index 00000000000..229b4111d2d
--- /dev/null
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1/volume_utils.go
@@ -0,0 +1,149 @@
+package block
+
+import (
+	"time"
+
+	"github.com/scaleway/scaleway-sdk-go/internal/async"
+	"github.com/scaleway/scaleway-sdk-go/internal/errors"
+	"github.com/scaleway/scaleway-sdk-go/scw"
+)
+
+const (
+	defaultTimeout       = 5 * time.Minute
+	defaultRetryInterval = 5 * time.Second
+)
+
+// WaitForVolumeRequest is used by WaitForVolume method.
+type WaitForVolumeRequest struct {
+	VolumeID      string
+	Zone          scw.Zone
+	Timeout       *time.Duration
+	RetryInterval *time.Duration
+
+	// If set, will wait until this specific status has been reached or the
+	// volume has an error status. This is useful when we need to wait for
+	// the volume to transition from "in_use" to "available".
+	TerminalStatus *VolumeStatus
+}
+
+// WaitForVolume waits for the volume to be in a "terminal state" before returning.
+func (s *API) WaitForVolume(req *WaitForVolumeRequest, opts ...scw.RequestOption) (*Volume, error) {
+	timeout := defaultTimeout
+	if req.Timeout != nil {
+		timeout = *req.Timeout
+	}
+	retryInterval := defaultRetryInterval
+	if req.RetryInterval != nil {
+		retryInterval = *req.RetryInterval
+	}
+
+	terminalStatus := map[VolumeStatus]struct{}{
+		VolumeStatusError:   {},
+		VolumeStatusLocked:  {},
+		VolumeStatusDeleted: {},
+	}
+
+	if req.TerminalStatus != nil {
+		terminalStatus[*req.TerminalStatus] = struct{}{}
+	} else {
+		terminalStatus[VolumeStatusAvailable] = struct{}{}
+		terminalStatus[VolumeStatusInUse] = struct{}{}
+	}
+
+	volume, err := async.WaitSync(&async.WaitSyncConfig{
+		Get: func() (interface{}, bool, error) {
+			res, err := s.GetVolume(&GetVolumeRequest{
+				VolumeID: req.VolumeID,
+				Zone:     req.Zone,
+			}, opts...)
+
+			if err != nil {
+				return nil, false, err
+			}
+			_, isTerminal := terminalStatus[res.Status]
+
+			return res, isTerminal, err
+		},
+		Timeout:          timeout,
+		IntervalStrategy: async.LinearIntervalStrategy(retryInterval),
+	})
+	if err != nil {
+		return nil, errors.Wrap(err, "waiting for volume failed")
+	}
+	return volume.(*Volume), nil
+}
+
+// WaitForVolumeAndReferencesRequest is used by WaitForVolumeAndReferences method.
+type WaitForVolumeAndReferencesRequest struct {
+	VolumeID      string
+	Zone          scw.Zone
+	Timeout       *time.Duration
+	RetryInterval *time.Duration
+
+	VolumeTerminalStatus    *VolumeStatus
+	ReferenceTerminalStatus *ReferenceStatus
+}
+
+// WaitForVolumeAndReferences waits for the volume and its references to be in a "terminal state" before returning.
+func (s *API) WaitForVolumeAndReferences(req *WaitForVolumeAndReferencesRequest, opts ...scw.RequestOption) (*Volume, error) {
+	timeout := defaultTimeout
+	if req.Timeout != nil {
+		timeout = *req.Timeout
+	}
+	retryInterval := defaultRetryInterval
+	if req.RetryInterval != nil {
+		retryInterval = *req.RetryInterval
+	}
+
+	terminalStatus := map[VolumeStatus]struct{}{
+		VolumeStatusError:   {},
+		VolumeStatusLocked:  {},
+		VolumeStatusDeleted: {},
+	}
+	if req.VolumeTerminalStatus != nil {
+		terminalStatus[*req.VolumeTerminalStatus] = struct{}{}
+	} else {
+		terminalStatus[VolumeStatusAvailable] = struct{}{}
+		terminalStatus[VolumeStatusInUse] = struct{}{}
+	}
+
+	referenceTerminalStatus := map[ReferenceStatus]struct{}{
+		ReferenceStatusError: {},
+	}
+	if req.ReferenceTerminalStatus != nil {
+		referenceTerminalStatus[*req.ReferenceTerminalStatus] = struct{}{}
+	} else {
+		referenceTerminalStatus[ReferenceStatusAttached] = struct{}{}
+		referenceTerminalStatus[ReferenceStatusDetached] = struct{}{}
+	}
+
+	volume, err := async.WaitSync(&async.WaitSyncConfig{
+		Get: func() (interface{}, bool, error) {
+			volume, err := s.GetVolume(&GetVolumeRequest{
+				VolumeID: req.VolumeID,
+				Zone:     req.Zone,
+			}, opts...)
+			if err != nil {
+				return nil, false, err
+			}
+
+			referencesAreTerminal := true
+
+			for _, reference := range volume.References {
+				_, referenceIsTerminal := referenceTerminalStatus[reference.Status]
+				referencesAreTerminal = referencesAreTerminal && referenceIsTerminal
+			}
+
+			_, isTerminal := terminalStatus[volume.Status]
+
+			return volume, isTerminal && referencesAreTerminal, nil
+		},
+		Timeout:          timeout,
+		IntervalStrategy: async.LinearIntervalStrategy(retryInterval),
+	})
+	if err != nil {
+		return nil, errors.Wrap(err, "waiting for Volume failed")
+	}
+
+	return volume.(*Volume), nil
+}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/image_utils.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/image_utils.go
index 108ce095fa5..99538fdff1f 100644
--- a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/image_utils.go
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/image_utils.go
@@ -1,8 +1,6 @@
 package instance
 
 import (
-	"fmt"
-	"net/http"
 	"time"
 
 	"github.com/scaleway/scaleway-sdk-go/internal/async"
@@ -56,68 +54,3 @@ func (s *API) WaitForImage(req *WaitForImageRequest, opts ...scw.RequestOption)
 	}
 	return image.(*Image), nil
 }
-
-type UpdateImageRequest struct {
-	Zone             scw.Zone                   `json:"zone"`
-	ImageID          string                     `json:"id"`
-	Name             *string                    `json:"name,omitempty"`
-	Arch             Arch                       `json:"arch,omitempty"`
-	CreationDate     *time.Time                 `json:"creation_date"`
-	ModificationDate *time.Time                 `json:"modification_date"`
-	ExtraVolumes     map[string]*VolumeTemplate `json:"extra_volumes"`
-	FromServer       string                     `json:"from_server,omitempty"`
-	Organization     string                     `json:"organization"`
-	Public           bool                       `json:"public"`
-	RootVolume       *VolumeSummary             `json:"root_volume,omitempty"`
-	State            ImageState                 `json:"state"`
-	Project          string                     `json:"project"`
-	Tags             *[]string                  `json:"tags,omitempty"`
-}
-
-type UpdateImageResponse struct {
-	Image *Image
-}
-
-func (s *API) UpdateImage(req *UpdateImageRequest, opts ...scw.RequestOption) (*UpdateImageResponse, error) {
-	// This function is the equivalent of the private setImage function that is not usable because the json tags and
-	// types are not compatible with what the compute API expects
-
-	if req.Project == "" {
-		defaultProject, _ := s.client.GetDefaultProjectID()
-		req.Project = defaultProject
-	}
-	if req.Organization == "" {
-		defaultOrganization, _ := s.client.GetDefaultOrganizationID()
-		req.Organization = defaultOrganization
-	}
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-	if fmt.Sprint(req.Zone) == "" {
-		return nil, errors.New("field Zone cannot be empty in request")
-	}
-	if fmt.Sprint(req.ImageID) == "" {
-		return nil, errors.New("field ID cannot be empty in request")
-	}
-
-	scwReq := &scw.ScalewayRequest{
-		Method:  "PUT",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images/" + fmt.Sprint(req.ImageID) + "",
-		Headers: http.Header{},
-	}
-
-	err := scwReq.SetBody(req)
-	if err != nil {
-		return nil, err
-	}
-
-	var resp UpdateImageResponse
-
-	err = s.client.Do(scwReq, &resp, opts...)
-	if err != nil {
-		return nil, err
-	}
-
-	return &resp, nil
-}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_metadata_sdk.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_metadata_sdk.go
index 5cba7531a5a..6bf35d64b1c 100644
--- a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_metadata_sdk.go
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_metadata_sdk.go
@@ -14,12 +14,15 @@ import (
 )
 
 var (
-	metadataURL           = "http://169.254.42.42"
 	metadataRetryBindPort = 200
 )
 
+const metadataAPIv4 = "http://169.254.42.42"
+const metadataAPIv6 = "http://[fd00:42::42]"
+
 // MetadataAPI metadata API
 type MetadataAPI struct {
+	MetadataURL *string
 }
 
 // NewMetadataAPI returns a MetadataAPI object from a Scaleway client.
@@ -27,9 +30,25 @@ func NewMetadataAPI() *MetadataAPI {
 	return &MetadataAPI{}
 }
 
+func (meta *MetadataAPI) getMetadataUrl() string {
+	if meta.MetadataURL != nil {
+		return *meta.MetadataURL
+	}
+
+	for _, url := range []string{metadataAPIv4, metadataAPIv6} {
+		http.DefaultClient.Timeout = 3 * time.Second
+		resp, err := http.Get(url)
+		if err == nil && resp.StatusCode == 200 {
+			meta.MetadataURL = &url
+			return url
+		}
+	}
+	return metadataAPIv4
+}
+
 // GetMetadata returns the metadata available from the server
-func (*MetadataAPI) GetMetadata() (m *Metadata, err error) {
-	resp, err := http.Get(metadataURL + "/conf?format=json")
+func (meta *MetadataAPI) GetMetadata() (m *Metadata, err error) {
+	resp, err := http.Get(meta.getMetadataUrl() + "/conf?format=json")
 	if err != nil {
 		return nil, errors.Wrap(err, "error getting metadataURL")
 	}
@@ -43,6 +62,18 @@ func (*MetadataAPI) GetMetadata() (m *Metadata, err error) {
 	return metadata, nil
 }
 
+// MetadataIP represents all public IPs attached
+type MetadataIP struct {
+	ID               string   `json:"id"`
+	Address          string   `json:"address"`
+	Dynamic          bool     `json:"dynamic"`
+	Gateway          string   `json:"gateway"`
+	Netmask          string   `json:"netmask"`
+	Family           string   `json:"family"`
+	ProvisioningMode string   `json:"provisioning_mode"`
+	Tags             []string `json:"tags"`
+}
+
 // Metadata represents the struct return by the metadata API
 type Metadata struct {
 	ID             string `json:"id,omitempty"`
@@ -51,13 +82,20 @@ type Metadata struct {
 	Organization   string `json:"organization,omitempty"`
 	Project        string `json:"project,omitempty"`
 	CommercialType string `json:"commercial_type,omitempty"`
-	PublicIP       struct {
-		Dynamic bool   `json:"dynamic,omitempty"`
-		ID      string `json:"id,omitempty"`
-		Address string `json:"address,omitempty"`
+	//PublicIP IPv4 only
+	PublicIP struct {
+		ID               string `json:"id"`
+		Address          string `json:"address"`
+		Dynamic          bool   `json:"dynamic"`
+		Gateway          string `json:"gateway"`
+		Netmask          string `json:"netmask"`
+		Family           string `json:"family"`
+		ProvisioningMode string `json:"provisioning_mode"`
 	} `json:"public_ip,omitempty"`
-	PrivateIP string `json:"private_ip,omitempty"`
-	IPv6      struct {
+	PublicIpsV4 []MetadataIP `json:"public_ips_v4,omitempty"`
+	PublicIpsV6 []MetadataIP `json:"public_ips_v6,omitempty"`
+	PrivateIP   string       `json:"private_ip,omitempty"`
+	IPv6        struct {
 		Netmask string `json:"netmask,omitempty"`
 		Gateway string `json:"gateway,omitempty"`
 		Address string `json:"address,omitempty"`
@@ -121,7 +159,7 @@ type Metadata struct {
 }
 
 // ListUserData returns the metadata available from the server
-func (*MetadataAPI) ListUserData() (res *UserData, err error) {
+func (meta *MetadataAPI) ListUserData() (res *UserData, err error) {
 	retries := 0
 	for retries <= metadataRetryBindPort {
 		port := rand.Intn(1024)
@@ -140,7 +178,7 @@ func (*MetadataAPI) ListUserData() (res *UserData, err error) {
 			},
 		}
 
-		resp, err := userdataClient.Get(metadataURL + "/user_data?format=json")
+		resp, err := userdataClient.Get(meta.getMetadataUrl() + "/user_data?format=json")
 		if err != nil {
 			retries++ // retry with a different source port
 			continue
@@ -158,7 +196,7 @@ func (*MetadataAPI) ListUserData() (res *UserData, err error) {
 }
 
 // GetUserData returns the value for the given metadata key
-func (*MetadataAPI) GetUserData(key string) ([]byte, error) {
+func (meta *MetadataAPI) GetUserData(key string) ([]byte, error) {
 	if key == "" {
 		return make([]byte, 0), errors.New("key must not be empty in GetUserData")
 	}
@@ -181,7 +219,7 @@ func (*MetadataAPI) GetUserData(key string) ([]byte, error) {
 			},
 		}
 
-		resp, err := userdataClient.Get(metadataURL + "/user_data/" + key)
+		resp, err := userdataClient.Get(meta.getMetadataUrl() + "/user_data/" + key)
 		if err != nil {
 			retries++ // retry with a different source port
 			continue
@@ -199,7 +237,7 @@ func (*MetadataAPI) GetUserData(key string) ([]byte, error) {
 }
 
 // SetUserData sets the userdata key with the given value
-func (*MetadataAPI) SetUserData(key string, value []byte) error {
+func (meta *MetadataAPI) SetUserData(key string, value []byte) error {
 	if key == "" {
 		return errors.New("key must not be empty in SetUserData")
 	}
@@ -221,7 +259,7 @@ func (*MetadataAPI) SetUserData(key string, value []byte) error {
 				}).DialContext,
 			},
 		}
-		request, err := http.NewRequest("PATCH", metadataURL+"/user_data/"+key, bytes.NewBuffer(value))
+		request, err := http.NewRequest("PATCH", meta.getMetadataUrl()+"/user_data/"+key, bytes.NewBuffer(value))
 		if err != nil {
 			return errors.Wrap(err, "error creating patch userdata request")
 		}
@@ -238,7 +276,7 @@ func (*MetadataAPI) SetUserData(key string, value []byte) error {
 }
 
 // DeleteUserData deletes the userdata key and the associated value
-func (*MetadataAPI) DeleteUserData(key string) error {
+func (meta *MetadataAPI) DeleteUserData(key string) error {
 	if key == "" {
 		return errors.New("key must not be empty in DeleteUserData")
 	}
@@ -260,7 +298,7 @@ func (*MetadataAPI) DeleteUserData(key string) error {
 				}).DialContext,
 			},
 		}
-		request, err := http.NewRequest("DELETE", metadataURL+"/user_data/"+key, bytes.NewBuffer([]byte("")))
+		request, err := http.NewRequest("DELETE", meta.getMetadataUrl()+"/user_data/"+key, bytes.NewBuffer([]byte("")))
 		if err != nil {
 			return errors.Wrap(err, "error creating delete userdata request")
 		}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_sdk.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_sdk.go
index c947200bedf..0d497d291b8 100644
--- a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_sdk.go
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_sdk.go
@@ -39,30 +39,19 @@ var (
 	_ = namegenerator.GetRandomName
 )
 
-// API: instance API.
-type API struct {
-	client *scw.Client
-}
-
-// NewAPI returns a API object from a Scaleway client.
-func NewAPI(client *scw.Client) *API {
-	return &API{
-		client: client,
-	}
-}
-
 type Arch string
 
 const (
-	ArchX86_64 = Arch("x86_64")
-	ArchArm    = Arch("arm")
-	ArchArm64  = Arch("arm64")
+	ArchUnknownArch = Arch("unknown_arch")
+	ArchX86_64      = Arch("x86_64")
+	ArchArm         = Arch("arm")
+	ArchArm64       = Arch("arm64")
 )
 
 func (enum Arch) String() string {
 	if enum == "" {
 		// return default value if empty
-		return "x86_64"
+		return "unknown_arch"
 	}
 	return string(enum)
 }
@@ -82,6 +71,38 @@ func (enum *Arch) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+type AttachServerVolumeRequestVolumeType string
+
+const (
+	AttachServerVolumeRequestVolumeTypeUnknownVolumeType = AttachServerVolumeRequestVolumeType("unknown_volume_type")
+	AttachServerVolumeRequestVolumeTypeLSSD              = AttachServerVolumeRequestVolumeType("l_ssd")
+	AttachServerVolumeRequestVolumeTypeBSSD              = AttachServerVolumeRequestVolumeType("b_ssd")
+	AttachServerVolumeRequestVolumeTypeSbsVolume         = AttachServerVolumeRequestVolumeType("sbs_volume")
+)
+
+func (enum AttachServerVolumeRequestVolumeType) String() string {
+	if enum == "" {
+		// return default value if empty
+		return "unknown_volume_type"
+	}
+	return string(enum)
+}
+
+func (enum AttachServerVolumeRequestVolumeType) MarshalJSON() ([]byte, error) {
+	return []byte(fmt.Sprintf(`"%s"`, enum)), nil
+}
+
+func (enum *AttachServerVolumeRequestVolumeType) UnmarshalJSON(data []byte) error {
+	tmp := ""
+
+	if err := json.Unmarshal(data, &tmp); err != nil {
+		return err
+	}
+
+	*enum = AttachServerVolumeRequestVolumeType(AttachServerVolumeRequestVolumeType(tmp).String())
+	return nil
+}
+
 type BootType string
 
 const (
@@ -335,14 +356,15 @@ func (enum *PrivateNICState) UnmarshalJSON(data []byte) error {
 type SecurityGroupPolicy string
 
 const (
-	SecurityGroupPolicyAccept = SecurityGroupPolicy("accept")
-	SecurityGroupPolicyDrop   = SecurityGroupPolicy("drop")
+	SecurityGroupPolicyUnknownPolicy = SecurityGroupPolicy("unknown_policy")
+	SecurityGroupPolicyAccept        = SecurityGroupPolicy("accept")
+	SecurityGroupPolicyDrop          = SecurityGroupPolicy("drop")
 )
 
 func (enum SecurityGroupPolicy) String() string {
 	if enum == "" {
 		// return default value if empty
-		return "accept"
+		return "unknown_policy"
 	}
 	return string(enum)
 }
@@ -365,14 +387,15 @@ func (enum *SecurityGroupPolicy) UnmarshalJSON(data []byte) error {
 type SecurityGroupRuleAction string
 
 const (
-	SecurityGroupRuleActionAccept = SecurityGroupRuleAction("accept")
-	SecurityGroupRuleActionDrop   = SecurityGroupRuleAction("drop")
+	SecurityGroupRuleActionUnknownAction = SecurityGroupRuleAction("unknown_action")
+	SecurityGroupRuleActionAccept        = SecurityGroupRuleAction("accept")
+	SecurityGroupRuleActionDrop          = SecurityGroupRuleAction("drop")
 )
 
 func (enum SecurityGroupRuleAction) String() string {
 	if enum == "" {
 		// return default value if empty
-		return "accept"
+		return "unknown_action"
 	}
 	return string(enum)
 }
@@ -395,14 +418,15 @@ func (enum *SecurityGroupRuleAction) UnmarshalJSON(data []byte) error {
 type SecurityGroupRuleDirection string
 
 const (
-	SecurityGroupRuleDirectionInbound  = SecurityGroupRuleDirection("inbound")
-	SecurityGroupRuleDirectionOutbound = SecurityGroupRuleDirection("outbound")
+	SecurityGroupRuleDirectionUnknownDirection = SecurityGroupRuleDirection("unknown_direction")
+	SecurityGroupRuleDirectionInbound          = SecurityGroupRuleDirection("inbound")
+	SecurityGroupRuleDirectionOutbound         = SecurityGroupRuleDirection("outbound")
 )
 
 func (enum SecurityGroupRuleDirection) String() string {
 	if enum == "" {
 		// return default value if empty
-		return "inbound"
+		return "unknown_direction"
 	}
 	return string(enum)
 }
@@ -425,16 +449,17 @@ func (enum *SecurityGroupRuleDirection) UnmarshalJSON(data []byte) error {
 type SecurityGroupRuleProtocol string
 
 const (
-	SecurityGroupRuleProtocolTCP  = SecurityGroupRuleProtocol("TCP")
-	SecurityGroupRuleProtocolUDP  = SecurityGroupRuleProtocol("UDP")
-	SecurityGroupRuleProtocolICMP = SecurityGroupRuleProtocol("ICMP")
-	SecurityGroupRuleProtocolANY  = SecurityGroupRuleProtocol("ANY")
+	SecurityGroupRuleProtocolUnknownProtocol = SecurityGroupRuleProtocol("unknown_protocol")
+	SecurityGroupRuleProtocolTCP             = SecurityGroupRuleProtocol("TCP")
+	SecurityGroupRuleProtocolUDP             = SecurityGroupRuleProtocol("UDP")
+	SecurityGroupRuleProtocolICMP            = SecurityGroupRuleProtocol("ICMP")
+	SecurityGroupRuleProtocolANY             = SecurityGroupRuleProtocol("ANY")
 )
 
 func (enum SecurityGroupRuleProtocol) String() string {
 	if enum == "" {
 		// return default value if empty
-		return "TCP"
+		return "unknown_protocol"
 	}
 	return string(enum)
 }
@@ -581,6 +606,39 @@ func (enum *ServerIPProvisioningMode) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+type ServerIPState string
+
+const (
+	ServerIPStateUnknownState = ServerIPState("unknown_state")
+	ServerIPStateDetached     = ServerIPState("detached")
+	ServerIPStateAttached     = ServerIPState("attached")
+	ServerIPStatePending      = ServerIPState("pending")
+	ServerIPStateError        = ServerIPState("error")
+)
+
+func (enum ServerIPState) String() string {
+	if enum == "" {
+		// return default value if empty
+		return "unknown_state"
+	}
+	return string(enum)
+}
+
+func (enum ServerIPState) MarshalJSON() ([]byte, error) {
+	return []byte(fmt.Sprintf(`"%s"`, enum)), nil
+}
+
+func (enum *ServerIPState) UnmarshalJSON(data []byte) error {
+	tmp := ""
+
+	if err := json.Unmarshal(data, &tmp); err != nil {
+		return err
+	}
+
+	*enum = ServerIPState(ServerIPState(tmp).String())
+	return nil
+}
+
 type ServerState string
 
 const (
@@ -750,11 +808,11 @@ type VolumeServerState string
 const (
 	VolumeServerStateAvailable    = VolumeServerState("available")
 	VolumeServerStateSnapshotting = VolumeServerState("snapshotting")
-	VolumeServerStateError        = VolumeServerState("error")
 	VolumeServerStateFetching     = VolumeServerState("fetching")
 	VolumeServerStateResizing     = VolumeServerState("resizing")
 	VolumeServerStateSaving       = VolumeServerState("saving")
 	VolumeServerStateHotsyncing   = VolumeServerState("hotsyncing")
+	VolumeServerStateError        = VolumeServerState("error")
 )
 
 func (enum VolumeServerState) String() string {
@@ -817,11 +875,11 @@ type VolumeState string
 const (
 	VolumeStateAvailable    = VolumeState("available")
 	VolumeStateSnapshotting = VolumeState("snapshotting")
-	VolumeStateError        = VolumeState("error")
 	VolumeStateFetching     = VolumeState("fetching")
 	VolumeStateResizing     = VolumeState("resizing")
 	VolumeStateSaving       = VolumeState("saving")
 	VolumeStateHotsyncing   = VolumeState("hotsyncing")
+	VolumeStateError        = VolumeState("error")
 )
 
 func (enum VolumeState) String() string {
@@ -850,11 +908,12 @@ func (enum *VolumeState) UnmarshalJSON(data []byte) error {
 type VolumeVolumeType string
 
 const (
-	VolumeVolumeTypeLSSD      = VolumeVolumeType("l_ssd")
-	VolumeVolumeTypeBSSD      = VolumeVolumeType("b_ssd")
-	VolumeVolumeTypeUnified   = VolumeVolumeType("unified")
-	VolumeVolumeTypeScratch   = VolumeVolumeType("scratch")
-	VolumeVolumeTypeSbsVolume = VolumeVolumeType("sbs_volume")
+	VolumeVolumeTypeLSSD        = VolumeVolumeType("l_ssd")
+	VolumeVolumeTypeBSSD        = VolumeVolumeType("b_ssd")
+	VolumeVolumeTypeUnified     = VolumeVolumeType("unified")
+	VolumeVolumeTypeScratch     = VolumeVolumeType("scratch")
+	VolumeVolumeTypeSbsVolume   = VolumeVolumeType("sbs_volume")
+	VolumeVolumeTypeSbsSnapshot = VolumeVolumeType("sbs_snapshot")
 )
 
 func (enum VolumeVolumeType) String() string {
@@ -880,774 +939,697 @@ func (enum *VolumeVolumeType) UnmarshalJSON(data []byte) error {
 	return nil
 }
 
+// ServerSummary: server summary.
+type ServerSummary struct {
+	ID string `json:"id"`
+
+	Name string `json:"name"`
+}
+
 // Bootscript: bootscript.
 type Bootscript struct {
 	// Bootcmdargs: bootscript arguments.
 	Bootcmdargs string `json:"bootcmdargs"`
+
 	// Default: display if the bootscript is the default bootscript (if no other boot option is configured).
 	Default bool `json:"default"`
+
 	// Dtb: provide information regarding a Device Tree Binary (DTB) for use with C1 servers.
 	Dtb string `json:"dtb"`
+
 	// ID: bootscript ID.
 	ID string `json:"id"`
+
 	// Initrd: initrd (initial ramdisk) configuration.
 	Initrd string `json:"initrd"`
+
 	// Kernel: instance kernel version.
 	Kernel string `json:"kernel"`
+
 	// Organization: bootscript Organization ID.
 	Organization string `json:"organization"`
+
 	// Project: bootscript Project ID.
 	Project string `json:"project"`
+
 	// Public: provide information if the bootscript is public.
 	Public bool `json:"public"`
+
 	// Title: bootscript title.
 	Title string `json:"title"`
+
 	// Arch: bootscript architecture.
-	// Default value: x86_64
+	// Default value: unknown_arch
 	Arch Arch `json:"arch"`
+
 	// Zone: zone in which the bootscript is located.
 	Zone scw.Zone `json:"zone"`
 }
 
-type CreateIPResponse struct {
-	IP *IP `json:"ip"`
-}
-
-type CreateImageResponse struct {
-	Image *Image `json:"image"`
-}
-
-type CreatePlacementGroupResponse struct {
-	PlacementGroup *PlacementGroup `json:"placement_group"`
-}
-
-type CreatePrivateNICResponse struct {
-	PrivateNic *PrivateNIC `json:"private_nic"`
-}
-
-type CreateSecurityGroupResponse struct {
-	SecurityGroup *SecurityGroup `json:"security_group"`
-}
-
-type CreateSecurityGroupRuleResponse struct {
-	Rule *SecurityGroupRule `json:"rule"`
-}
-
-type CreateServerResponse struct {
-	Server *Server `json:"server"`
-}
+// Volume: volume.
+type Volume struct {
+	// ID: volume unique ID.
+	ID string `json:"id"`
 
-type CreateSnapshotResponse struct {
-	Snapshot *Snapshot `json:"snapshot"`
+	// Name: volume name.
+	Name string `json:"name"`
 
-	Task *Task `json:"task"`
-}
+	// Deprecated: ExportURI: show the volume NBD export URI.
+	ExportURI *string `json:"export_uri"`
 
-type CreateVolumeResponse struct {
-	Volume *Volume `json:"volume"`
-}
+	// Size: volume disk size.
+	Size scw.Size `json:"size"`
 
-type Dashboard struct {
-	VolumesCount uint32 `json:"volumes_count"`
+	// VolumeType: volume type.
+	// Default value: l_ssd
+	VolumeType VolumeVolumeType `json:"volume_type"`
 
-	RunningServersCount uint32 `json:"running_servers_count"`
+	// CreationDate: volume creation date.
+	CreationDate *time.Time `json:"creation_date"`
 
-	ServersByTypes map[string]uint32 `json:"servers_by_types"`
+	// ModificationDate: volume modification date.
+	ModificationDate *time.Time `json:"modification_date"`
 
-	ImagesCount uint32 `json:"images_count"`
+	// Organization: volume Organization ID.
+	Organization string `json:"organization"`
 
-	SnapshotsCount uint32 `json:"snapshots_count"`
+	// Project: volume Project ID.
+	Project string `json:"project"`
 
-	ServersCount uint32 `json:"servers_count"`
+	// Tags: volume tags.
+	Tags []string `json:"tags"`
 
-	IPsCount uint32 `json:"ips_count"`
+	// Server: instance attached to the volume.
+	Server *ServerSummary `json:"server"`
 
-	SecurityGroupsCount uint32 `json:"security_groups_count"`
+	// State: volume state.
+	// Default value: available
+	State VolumeState `json:"state"`
 
-	IPsUnused uint32 `json:"ips_unused"`
+	// Zone: zone in which the volume is located.
+	Zone scw.Zone `json:"zone"`
+}
 
-	VolumesLSSDCount uint32 `json:"volumes_l_ssd_count"`
+// VolumeSummary: volume summary.
+type VolumeSummary struct {
+	ID string `json:"id"`
 
-	VolumesBSSDCount uint32 `json:"volumes_b_ssd_count"`
+	Name string `json:"name"`
 
-	VolumesLSSDTotalSize scw.Size `json:"volumes_l_ssd_total_size"`
+	Size scw.Size `json:"size"`
 
-	VolumesBSSDTotalSize scw.Size `json:"volumes_b_ssd_total_size"`
+	// VolumeType: default value: l_ssd
+	VolumeType VolumeVolumeType `json:"volume_type"`
+}
 
-	PrivateNicsCount uint32 `json:"private_nics_count"`
+// ServerTypeNetworkInterface: server type network interface.
+type ServerTypeNetworkInterface struct {
+	// InternalBandwidth: maximum internal bandwidth in bits per seconds.
+	InternalBandwidth *uint64 `json:"internal_bandwidth"`
 
-	PlacementGroupsCount uint32 `json:"placement_groups_count"`
+	// InternetBandwidth: maximum internet bandwidth in bits per seconds.
+	InternetBandwidth *uint64 `json:"internet_bandwidth"`
 }
 
-type ExportSnapshotResponse struct {
-	Task *Task `json:"task"`
-}
+// ServerTypeVolumeConstraintSizes: server type volume constraint sizes.
+type ServerTypeVolumeConstraintSizes struct {
+	// MinSize: minimum volume size in bytes.
+	MinSize scw.Size `json:"min_size"`
 
-type GetBootscriptResponse struct {
-	Bootscript *Bootscript `json:"bootscript"`
+	// MaxSize: maximum volume size in bytes.
+	MaxSize scw.Size `json:"max_size"`
 }
 
-type GetDashboardResponse struct {
-	Dashboard *Dashboard `json:"dashboard"`
-}
+// Image: image.
+type Image struct {
+	ID string `json:"id"`
 
-type GetIPResponse struct {
-	IP *IP `json:"ip"`
-}
+	Name string `json:"name"`
 
-type GetImageResponse struct {
-	Image *Image `json:"image"`
-}
+	// Arch: default value: unknown_arch
+	Arch Arch `json:"arch"`
 
-type GetPlacementGroupResponse struct {
-	PlacementGroup *PlacementGroup `json:"placement_group"`
-}
+	CreationDate *time.Time `json:"creation_date"`
 
-// GetPlacementGroupServersResponse: get placement group servers response.
-type GetPlacementGroupServersResponse struct {
-	// Servers: instances attached to the placement group.
-	Servers []*PlacementGroupServer `json:"servers"`
-}
+	ModificationDate *time.Time `json:"modification_date"`
 
-type GetPrivateNICResponse struct {
-	PrivateNic *PrivateNIC `json:"private_nic"`
-}
+	// Deprecated
+	DefaultBootscript *Bootscript `json:"default_bootscript"`
 
-type GetSecurityGroupResponse struct {
-	SecurityGroup *SecurityGroup `json:"security_group"`
-}
+	ExtraVolumes map[string]*Volume `json:"extra_volumes"`
 
-type GetSecurityGroupRuleResponse struct {
-	Rule *SecurityGroupRule `json:"rule"`
-}
+	FromServer string `json:"from_server"`
 
-type GetServerResponse struct {
-	Server *Server `json:"server"`
-}
+	Organization string `json:"organization"`
 
-// GetServerTypesAvailabilityResponse: get server types availability response.
-type GetServerTypesAvailabilityResponse struct {
-	// Servers: map of server types.
-	Servers map[string]*GetServerTypesAvailabilityResponseAvailability `json:"servers"`
+	Public bool `json:"public"`
 
-	TotalCount uint32 `json:"total_count"`
-}
+	RootVolume *VolumeSummary `json:"root_volume"`
 
-type GetServerTypesAvailabilityResponseAvailability struct {
-	// Availability: default value: available
-	Availability ServerTypesAvailability `json:"availability"`
-}
+	// State: default value: available
+	State ImageState `json:"state"`
 
-type GetSnapshotResponse struct {
-	Snapshot *Snapshot `json:"snapshot"`
-}
+	Project string `json:"project"`
 
-type GetVolumeResponse struct {
-	Volume *Volume `json:"volume"`
+	Tags []string `json:"tags"`
+
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"zone"`
 }
 
-type IP struct {
+// PlacementGroup: placement group.
+type PlacementGroup struct {
+	// ID: placement group unique ID.
 	ID string `json:"id"`
 
-	Address net.IP `json:"address"`
+	// Name: placement group name.
+	Name string `json:"name"`
 
-	Reverse *string `json:"reverse"`
+	// Organization: placement group Organization ID.
+	Organization string `json:"organization"`
 
-	Server *ServerSummary `json:"server"`
-
-	Organization string `json:"organization"`
+	// Project: placement group Project ID.
+	Project string `json:"project"`
 
+	// Tags: placement group tags.
 	Tags []string `json:"tags"`
 
-	Project string `json:"project"`
-	// Type: default value: unknown_iptype
-	Type IPType `json:"type"`
-	// State: default value: unknown_state
-	State IPState `json:"state"`
+	// PolicyMode: select the failure mode when the placement cannot be respected, either optional or enforced.
+	// Default value: optional
+	PolicyMode PlacementGroupPolicyMode `json:"policy_mode"`
 
-	Prefix scw.IPNet `json:"prefix"`
+	// PolicyType: select the behavior of the placement group, either low_latency (group) or max_availability (spread).
+	// Default value: max_availability
+	PolicyType PlacementGroupPolicyType `json:"policy_type"`
+
+	// PolicyRespected: returns true if the policy is respected, false otherwise.
+	PolicyRespected bool `json:"policy_respected"`
 
+	// Zone: zone in which the placement group is located.
 	Zone scw.Zone `json:"zone"`
 }
 
-type Image struct {
+// PrivateNIC: private nic.
+type PrivateNIC struct {
+	// ID: private NIC unique ID.
 	ID string `json:"id"`
 
-	Name string `json:"name"`
-	// Arch: default value: x86_64
-	Arch Arch `json:"arch"`
+	// ServerID: instance to which the private NIC is attached.
+	ServerID string `json:"server_id"`
 
-	CreationDate *time.Time `json:"creation_date"`
+	// PrivateNetworkID: private Network the private NIC is attached to.
+	PrivateNetworkID string `json:"private_network_id"`
 
-	ModificationDate *time.Time `json:"modification_date"`
-	// Deprecated
-	DefaultBootscript *Bootscript `json:"default_bootscript"`
+	// MacAddress: private NIC MAC address.
+	MacAddress string `json:"mac_address"`
 
-	ExtraVolumes map[string]*Volume `json:"extra_volumes"`
+	// State: private NIC state.
+	// Default value: available
+	State PrivateNICState `json:"state"`
 
-	FromServer string `json:"from_server"`
+	// Tags: private NIC tags.
+	Tags []string `json:"tags"`
+}
 
-	Organization string `json:"organization"`
+// SecurityGroupSummary: security group summary.
+type SecurityGroupSummary struct {
+	ID string `json:"id"`
 
-	Public bool `json:"public"`
+	Name string `json:"name"`
+}
 
-	RootVolume *VolumeSummary `json:"root_volume"`
-	// State: default value: available
-	State ImageState `json:"state"`
+// ServerIP: server ip.
+type ServerIP struct {
+	// ID: unique ID of the IP address.
+	ID string `json:"id"`
 
-	Project string `json:"project"`
+	// Address: instance's public IP-Address.
+	Address net.IP `json:"address"`
+
+	// Gateway: gateway's IP address.
+	Gateway net.IP `json:"gateway"`
+
+	// Netmask: cIDR netmask.
+	Netmask string `json:"netmask"`
+
+	// Family: IP address family (inet or inet6).
+	// Default value: inet
+	Family ServerIPIPFamily `json:"family"`
+
+	// Dynamic: true if the IP address is dynamic.
+	Dynamic bool `json:"dynamic"`
 
+	// ProvisioningMode: information about this address provisioning mode.
+	// Default value: manual
+	ProvisioningMode ServerIPProvisioningMode `json:"provisioning_mode"`
+
+	// Tags: tags associated with the IP.
 	Tags []string `json:"tags"`
 
-	Zone scw.Zone `json:"zone"`
+	// State: default value: unknown_state
+	State ServerIPState `json:"state"`
 }
 
-// ListBootscriptsResponse: list bootscripts response.
-type ListBootscriptsResponse struct {
-	// TotalCount: total number of bootscripts.
-	TotalCount uint32 `json:"total_count"`
-	// Bootscripts: list of bootscripts.
-	Bootscripts []*Bootscript `json:"bootscripts"`
-}
+// ServerIPv6: server i pv6.
+type ServerIPv6 struct {
+	// Address: instance IPv6 IP-Address.
+	Address net.IP `json:"address"`
 
-// ListIPsResponse: list ips response.
-type ListIPsResponse struct {
-	// TotalCount: total number of ips.
-	TotalCount uint32 `json:"total_count"`
-	// IPs: list of ips.
-	IPs []*IP `json:"ips"`
-}
+	// Gateway: iPv6 IP-addresses gateway.
+	Gateway net.IP `json:"gateway"`
 
-// ListImagesResponse: list images response.
-type ListImagesResponse struct {
-	// TotalCount: total number of images.
-	TotalCount uint32 `json:"total_count"`
-	// Images: list of images.
-	Images []*Image `json:"images"`
+	// Netmask: iPv6 IP-addresses CIDR netmask.
+	Netmask string `json:"netmask"`
 }
 
-// ListPlacementGroupsResponse: list placement groups response.
-type ListPlacementGroupsResponse struct {
-	// TotalCount: total number of placement groups.
-	TotalCount uint32 `json:"total_count"`
-	// PlacementGroups: list of placement groups.
-	PlacementGroups []*PlacementGroup `json:"placement_groups"`
-}
+// ServerLocation: server location.
+type ServerLocation struct {
+	ClusterID string `json:"cluster_id"`
 
-type ListPrivateNICsResponse struct {
-	PrivateNics []*PrivateNIC `json:"private_nics"`
+	HypervisorID string `json:"hypervisor_id"`
 
-	TotalCount uint64 `json:"total_count"`
-}
+	NodeID string `json:"node_id"`
 
-// ListSecurityGroupRulesResponse: list security group rules response.
-type ListSecurityGroupRulesResponse struct {
-	// TotalCount: total number of security groups.
-	TotalCount uint32 `json:"total_count"`
-	// Rules: list of security rules.
-	Rules []*SecurityGroupRule `json:"rules"`
-}
+	PlatformID string `json:"platform_id"`
 
-// ListSecurityGroupsResponse: list security groups response.
-type ListSecurityGroupsResponse struct {
-	// TotalCount: total number of security groups.
-	TotalCount uint32 `json:"total_count"`
-	// SecurityGroups: list of security groups.
-	SecurityGroups []*SecurityGroup `json:"security_groups"`
+	ZoneID string `json:"zone_id"`
 }
 
-type ListServerActionsResponse struct {
-	Actions []ServerAction `json:"actions"`
+// ServerMaintenance: server maintenance.
+type ServerMaintenance struct {
+	Reason string `json:"reason"`
 }
 
-type ListServerUserDataResponse struct {
-	UserData []string `json:"user_data"`
-}
+// VolumeServer: volume server.
+type VolumeServer struct {
+	ID string `json:"id"`
 
-// ListServersResponse: list servers response.
-type ListServersResponse struct {
-	// TotalCount: total number of Instances.
-	TotalCount uint32 `json:"total_count"`
-	// Servers: list of Instances.
-	Servers []*Server `json:"servers"`
+	Name string `json:"name"`
+
+	ExportURI string `json:"export_uri"`
+
+	Organization string `json:"organization"`
+
+	Server *ServerSummary `json:"server"`
+
+	Size scw.Size `json:"size"`
+
+	// VolumeType: default value: l_ssd
+	VolumeType VolumeServerVolumeType `json:"volume_type"`
+
+	CreationDate *time.Time `json:"creation_date"`
+
+	ModificationDate *time.Time `json:"modification_date"`
+
+	// State: default value: available
+	State VolumeServerState `json:"state"`
+
+	Project string `json:"project"`
+
+	Boot bool `json:"boot"`
+
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"zone"`
 }
 
-// ListServersTypesResponse: list servers types response.
-type ListServersTypesResponse struct {
-	// TotalCount: total number of Instance types.
-	TotalCount uint32 `json:"total_count"`
-	// Servers: list of Instance types.
-	Servers map[string]*ServerType `json:"servers"`
+// SnapshotBaseVolume: snapshot base volume.
+type SnapshotBaseVolume struct {
+	// ID: volume ID on which the snapshot is based.
+	ID string `json:"id"`
+
+	// Name: volume name on which the snapshot is based on.
+	Name string `json:"name"`
 }
 
-// ListSnapshotsResponse: list snapshots response.
-type ListSnapshotsResponse struct {
-	// TotalCount: total number of snapshots.
-	TotalCount uint32 `json:"total_count"`
-	// Snapshots: list of snapshots.
-	Snapshots []*Snapshot `json:"snapshots"`
+// ServerTypeCapabilities: server type capabilities.
+type ServerTypeCapabilities struct {
+	// BlockStorage: defines whether the Instance supports block storage.
+	BlockStorage *bool `json:"block_storage"`
+
+	// BootTypes: list of supported boot types.
+	BootTypes []BootType `json:"boot_types"`
 }
 
-// ListVolumesResponse: list volumes response.
-type ListVolumesResponse struct {
-	// TotalCount: total number of volumes.
-	TotalCount uint32 `json:"total_count"`
-	// Volumes: list of volumes.
-	Volumes []*Volume `json:"volumes"`
+// ServerTypeNetwork: server type network.
+type ServerTypeNetwork struct {
+	// Interfaces: list of available network interfaces.
+	Interfaces []*ServerTypeNetworkInterface `json:"interfaces"`
+
+	// SumInternalBandwidth: total maximum internal bandwidth in bits per seconds.
+	SumInternalBandwidth *uint64 `json:"sum_internal_bandwidth"`
+
+	// SumInternetBandwidth: total maximum internet bandwidth in bits per seconds.
+	SumInternetBandwidth *uint64 `json:"sum_internet_bandwidth"`
+
+	// IPv6Support: true if IPv6 is enabled.
+	IPv6Support bool `json:"ipv6_support"`
 }
 
-// ListVolumesTypesResponse: list volumes types response.
-type ListVolumesTypesResponse struct {
-	// TotalCount: total number of volume types.
-	TotalCount uint32 `json:"total_count"`
-	// Volumes: map of volume types.
-	Volumes map[string]*VolumeType `json:"volumes"`
+// ServerTypeVolumeConstraintsByType: server type volume constraints by type.
+type ServerTypeVolumeConstraintsByType struct {
+	// LSSD: local SSD volumes.
+	LSSD *ServerTypeVolumeConstraintSizes `json:"l_ssd"`
 }
 
-// MigrationPlan: migration plan.
-type MigrationPlan struct {
-	// Volume: a volume which will be migrated to SBS together with the snapshots, if present.
-	Volume *Volume `json:"volume"`
-	// Snapshots: a list of snapshots which will be migrated to SBS together and with the volume, if present.
-	Snapshots []*Snapshot `json:"snapshots"`
-	// ValidationKey: a value to be passed to ApplyBlockMigrationRequest, to confirm that the execution of the plan is being requested.
-	ValidationKey string `json:"validation_key"`
+// VolumeTypeCapabilities: volume type capabilities.
+type VolumeTypeCapabilities struct {
+	Snapshot bool `json:"snapshot"`
 }
 
-type NullableStringValue struct {
-	Null bool `json:"null,omitempty"`
+// VolumeTypeConstraints: volume type constraints.
+type VolumeTypeConstraints struct {
+	Min scw.Size `json:"min"`
 
-	Value string `json:"value,omitempty"`
+	Max scw.Size `json:"max"`
 }
 
-// PlacementGroup: placement group.
-type PlacementGroup struct {
-	// ID: placement group unique ID.
+// Server: server.
+type Server struct {
+	// ID: instance unique ID.
 	ID string `json:"id"`
-	// Name: placement group name.
+
+	// Name: instance name.
 	Name string `json:"name"`
-	// Organization: placement group Organization ID.
+
+	// Organization: instance Organization ID.
 	Organization string `json:"organization"`
-	// Project: placement group Project ID.
+
+	// Project: instance Project ID.
 	Project string `json:"project"`
-	// Tags: placement group tags.
-	Tags []string `json:"tags"`
-	// PolicyMode: select the failure mode when the placement cannot be respected, either optional or enforced.
-	// Default value: optional
-	PolicyMode PlacementGroupPolicyMode `json:"policy_mode"`
-	// PolicyType: select the behavior of the placement group, either low_latency (group) or max_availability (spread).
-	// Default value: max_availability
-	PolicyType PlacementGroupPolicyType `json:"policy_type"`
-	// PolicyRespected: returns true if the policy is respected, false otherwise.
-	PolicyRespected bool `json:"policy_respected"`
-	// Zone: zone in which the placement group is located.
-	Zone scw.Zone `json:"zone"`
-}
-
-// PlacementGroupServer: placement group server.
-type PlacementGroupServer struct {
-	// ID: instance UUID.
-	ID string `json:"id"`
-	// Name: instance name.
-	Name string `json:"name"`
-	// PolicyRespected: defines whether the placement group policy is respected (either 1 or 0).
-	PolicyRespected bool `json:"policy_respected"`
-}
-
-// PrivateNIC: private nic.
-type PrivateNIC struct {
-	// ID: private NIC unique ID.
-	ID string `json:"id,omitempty"`
-	// ServerID: instance to which the private NIC is attached.
-	ServerID string `json:"server_id,omitempty"`
-	// PrivateNetworkID: private Network the private NIC is attached to.
-	PrivateNetworkID string `json:"private_network_id,omitempty"`
-	// MacAddress: private NIC MAC address.
-	MacAddress string `json:"mac_address,omitempty"`
-	// State: private NIC state.
-	// Default value: available
-	State PrivateNICState `json:"state,omitempty"`
-	// Tags: private NIC tags.
-	Tags []string `json:"tags,omitempty"`
-}
-
-// SecurityGroup: security group.
-type SecurityGroup struct {
-	// ID: security group unique ID.
-	ID string `json:"id"`
-	// Name: security group name.
-	Name string `json:"name"`
-	// Description: security group description.
-	Description string `json:"description"`
-	// EnableDefaultSecurity: true if SMTP is blocked on IPv4 and IPv6. This feature is read only, please open a support ticket if you need to make it configurable.
-	EnableDefaultSecurity bool `json:"enable_default_security"`
-	// InboundDefaultPolicy: default inbound policy.
-	// Default value: accept
-	InboundDefaultPolicy SecurityGroupPolicy `json:"inbound_default_policy"`
-	// OutboundDefaultPolicy: default outbound policy.
-	// Default value: accept
-	OutboundDefaultPolicy SecurityGroupPolicy `json:"outbound_default_policy"`
-	// Organization: security group Organization ID.
-	Organization string `json:"organization"`
-	// Project: security group Project ID.
-	Project string `json:"project"`
-	// Tags: security group tags.
-	Tags []string `json:"tags"`
-	// Deprecated: OrganizationDefault: true if it is your default security group for this Organization ID.
-	OrganizationDefault *bool `json:"organization_default,omitempty"`
-	// ProjectDefault: true if it is your default security group for this Project ID.
-	ProjectDefault bool `json:"project_default"`
-	// CreationDate: security group creation date.
-	CreationDate *time.Time `json:"creation_date"`
-	// ModificationDate: security group modification date.
-	ModificationDate *time.Time `json:"modification_date"`
-	// Servers: list of Instances attached to this security group.
-	Servers []*ServerSummary `json:"servers"`
-	// Stateful: defines whether the security group is stateful.
-	Stateful bool `json:"stateful"`
-	// State: security group state.
-	// Default value: available
-	State SecurityGroupState `json:"state"`
-	// Zone: zone in which the security group is located.
-	Zone scw.Zone `json:"zone"`
-}
-
-type SecurityGroupRule struct {
-	ID string `json:"id"`
-	// Protocol: default value: TCP
-	Protocol SecurityGroupRuleProtocol `json:"protocol"`
-	// Direction: default value: inbound
-	Direction SecurityGroupRuleDirection `json:"direction"`
-	// Action: default value: accept
-	Action SecurityGroupRuleAction `json:"action"`
-
-	IPRange scw.IPNet `json:"ip_range"`
-
-	DestPortFrom *uint32 `json:"dest_port_from"`
-
-	DestPortTo *uint32 `json:"dest_port_to"`
-
-	Position uint32 `json:"position"`
-
-	Editable bool `json:"editable"`
-
-	Zone scw.Zone `json:"zone"`
-}
-
-type SecurityGroupSummary struct {
-	ID string `json:"id"`
-
-	Name string `json:"name"`
-}
-
-type SecurityGroupTemplate struct {
-	ID string `json:"id,omitempty"`
 
-	Name string `json:"name,omitempty"`
-}
-
-// Server: server.
-type Server struct {
-	// ID: instance unique ID.
-	ID string `json:"id"`
-	// Name: instance name.
-	Name string `json:"name"`
-	// Organization: instance Organization ID.
-	Organization string `json:"organization"`
-	// Project: instance Project ID.
-	Project string `json:"project"`
 	// AllowedActions: list of allowed actions on the Instance.
 	AllowedActions []ServerAction `json:"allowed_actions"`
+
 	// Tags: tags associated with the Instance.
 	Tags []string `json:"tags"`
+
 	// CommercialType: instance commercial type (eg. GP1-M).
 	CommercialType string `json:"commercial_type"`
+
 	// CreationDate: instance creation date.
 	CreationDate *time.Time `json:"creation_date"`
+
 	// DynamicIPRequired: true if a dynamic IPv4 is required.
 	DynamicIPRequired bool `json:"dynamic_ip_required"`
+
 	// RoutedIPEnabled: true to configure the instance so it uses the new routed IP mode.
 	RoutedIPEnabled bool `json:"routed_ip_enabled"`
+
 	// EnableIPv6: true if IPv6 is enabled.
 	EnableIPv6 bool `json:"enable_ipv6"`
+
 	// Hostname: instance host name.
 	Hostname string `json:"hostname"`
+
 	// Image: information about the Instance image.
 	Image *Image `json:"image"`
+
 	// Protected: defines whether the Instance protection option is activated.
 	Protected bool `json:"protected"`
+
 	// PrivateIP: private IP address of the Instance.
 	PrivateIP *string `json:"private_ip"`
+
 	// PublicIP: information about the public IP.
 	PublicIP *ServerIP `json:"public_ip"`
+
 	// PublicIPs: information about all the public IPs attached to the server.
 	PublicIPs []*ServerIP `json:"public_ips"`
+
 	// MacAddress: the server's MAC address.
 	MacAddress string `json:"mac_address"`
+
 	// ModificationDate: instance modification date.
 	ModificationDate *time.Time `json:"modification_date"`
+
 	// State: instance state.
 	// Default value: running
 	State ServerState `json:"state"`
+
 	// Location: instance location.
 	Location *ServerLocation `json:"location"`
+
 	// IPv6: instance IPv6 address.
 	IPv6 *ServerIPv6 `json:"ipv6"`
+
 	// Deprecated: Bootscript: instance bootscript.
-	Bootscript *Bootscript `json:"bootscript,omitempty"`
+	Bootscript *Bootscript `json:"bootscript"`
+
 	// BootType: instance boot type.
 	// Default value: local
 	BootType BootType `json:"boot_type"`
+
 	// Volumes: instance volumes.
 	Volumes map[string]*VolumeServer `json:"volumes"`
+
 	// SecurityGroup: instance security group.
 	SecurityGroup *SecurityGroupSummary `json:"security_group"`
+
 	// Maintenances: instance planned maintenance.
 	Maintenances []*ServerMaintenance `json:"maintenances"`
+
 	// StateDetail: detailed information about the Instance state.
 	StateDetail string `json:"state_detail"`
+
 	// Arch: instance architecture.
-	// Default value: x86_64
+	// Default value: unknown_arch
 	Arch Arch `json:"arch"`
+
 	// PlacementGroup: instance placement group.
 	PlacementGroup *PlacementGroup `json:"placement_group"`
+
 	// PrivateNics: instance private NICs.
 	PrivateNics []*PrivateNIC `json:"private_nics"`
+
 	// Zone: zone in which the Instance is located.
 	Zone scw.Zone `json:"zone"`
 }
 
-// ServerActionRequestVolumeBackupTemplate: server action request. volume backup template.
-type ServerActionRequestVolumeBackupTemplate struct {
-	// VolumeType: snapshot's volume type.
-	// Overrides the `volume_type` of the snapshot for this volume.
-	// If omitted, the volume type of the original volume will be used.
-	// Default value: unknown_volume_type
-	VolumeType SnapshotVolumeType `json:"volume_type,omitempty"`
-}
+// IP: ip.
+type IP struct {
+	ID string `json:"id"`
 
-type ServerActionResponse struct {
-	Task *Task `json:"task"`
-}
+	Address net.IP `json:"address"`
 
-// ServerIP: server. ip.
-type ServerIP struct {
-	// ID: unique ID of the IP address.
-	ID string `json:"id,omitempty"`
-	// Address: instance's public IP-Address.
-	Address net.IP `json:"address,omitempty"`
-	// Gateway: gateway's IP address.
-	Gateway net.IP `json:"gateway,omitempty"`
-	// Netmask: cIDR netmask.
-	Netmask string `json:"netmask,omitempty"`
-	// Family: IP address family (inet or inet6).
-	// Default value: inet
-	Family ServerIPIPFamily `json:"family,omitempty"`
-	// Dynamic: true if the IP address is dynamic.
-	Dynamic bool `json:"dynamic,omitempty"`
-	// ProvisioningMode: information about this address provisioning mode.
-	// Default value: manual
-	ProvisioningMode ServerIPProvisioningMode `json:"provisioning_mode,omitempty"`
-}
+	Reverse *string `json:"reverse"`
 
-// ServerIPv6: server. ipv6.
-type ServerIPv6 struct {
-	// Address: instance IPv6 IP-Address.
-	Address net.IP `json:"address"`
-	// Gateway: iPv6 IP-addresses gateway.
-	Gateway net.IP `json:"gateway"`
-	// Netmask: iPv6 IP-addresses CIDR netmask.
-	Netmask string `json:"netmask"`
-}
+	Server *ServerSummary `json:"server"`
 
-type ServerLocation struct {
-	ClusterID string `json:"cluster_id"`
+	Organization string `json:"organization"`
 
-	HypervisorID string `json:"hypervisor_id"`
+	Tags []string `json:"tags"`
 
-	NodeID string `json:"node_id"`
+	Project string `json:"project"`
 
-	PlatformID string `json:"platform_id"`
+	// Type: default value: unknown_iptype
+	Type IPType `json:"type"`
 
-	ZoneID string `json:"zone_id"`
+	// State: default value: unknown_state
+	State IPState `json:"state"`
+
+	Prefix scw.IPNet `json:"prefix"`
+
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"zone"`
 }
 
-type ServerMaintenance struct {
-	Reason string `json:"reason"`
+// VolumeTemplate: volume template.
+type VolumeTemplate struct {
+	// ID: UUID of the volume.
+	ID string `json:"id,omitempty"`
+
+	// Name: name of the volume.
+	Name string `json:"name,omitempty"`
+
+	// Size: disk size of the volume, must be a multiple of 512.
+	Size scw.Size `json:"size,omitempty"`
+
+	// VolumeType: type of the volume.
+	// Default value: l_ssd
+	VolumeType VolumeVolumeType `json:"volume_type,omitempty"`
+
+	// Deprecated: Organization: organization ID of the volume.
+	// Precisely one of Project, Organization must be set.
+	Organization *string `json:"organization,omitempty"`
+
+	// Project: project ID of the volume.
+	// Precisely one of Project, Organization must be set.
+	Project *string `json:"project,omitempty"`
 }
 
-type ServerSummary struct {
+// SecurityGroup: security group.
+type SecurityGroup struct {
+	// ID: security group unique ID.
 	ID string `json:"id"`
 
+	// Name: security group name.
 	Name string `json:"name"`
-}
 
-// ServerType: server type.
-type ServerType struct {
-	// Deprecated: MonthlyPrice: estimated monthly price, for a 30 days month, in Euro.
-	MonthlyPrice *float32 `json:"monthly_price,omitempty"`
-	// HourlyPrice: hourly price in Euro.
-	HourlyPrice float32 `json:"hourly_price"`
-	// AltNames: alternative Instance name, if any.
-	AltNames []string `json:"alt_names"`
-	// PerVolumeConstraint: additional volume constraints.
-	PerVolumeConstraint *ServerTypeVolumeConstraintsByType `json:"per_volume_constraint"`
-	// VolumesConstraint: initial volume constraints.
-	VolumesConstraint *ServerTypeVolumeConstraintSizes `json:"volumes_constraint"`
-	// Ncpus: number of CPU.
-	Ncpus uint32 `json:"ncpus"`
-	// Gpu: number of GPU.
-	Gpu *uint64 `json:"gpu"`
-	// RAM: available RAM in bytes.
-	RAM uint64 `json:"ram"`
-	// Arch: CPU architecture.
-	// Default value: x86_64
-	Arch Arch `json:"arch"`
-	// Baremetal: true if it is a baremetal Instance.
-	Baremetal bool `json:"baremetal"`
-	// Network: network available for the Instance.
-	Network *ServerTypeNetwork `json:"network"`
-	// Capabilities: capabilities.
-	Capabilities *ServerTypeCapabilities `json:"capabilities"`
-	// ScratchStorageMaxSize: maximum available scratch storage.
-	ScratchStorageMaxSize *scw.Size `json:"scratch_storage_max_size"`
-}
+	// Description: security group description.
+	Description string `json:"description"`
 
-// ServerTypeCapabilities: server type. capabilities.
-type ServerTypeCapabilities struct {
-	// BlockStorage: defines whether the Instance supports block storage.
-	BlockStorage *bool `json:"block_storage"`
-	// BootTypes: list of supported boot types.
-	BootTypes []BootType `json:"boot_types"`
-}
+	// EnableDefaultSecurity: true if SMTP is blocked on IPv4 and IPv6. This feature is read only, please open a support ticket if you need to make it configurable.
+	EnableDefaultSecurity bool `json:"enable_default_security"`
 
-// ServerTypeNetwork: server type. network.
-type ServerTypeNetwork struct {
-	// Interfaces: list of available network interfaces.
-	Interfaces []*ServerTypeNetworkInterface `json:"interfaces"`
-	// SumInternalBandwidth: total maximum internal bandwidth in bits per seconds.
-	SumInternalBandwidth *uint64 `json:"sum_internal_bandwidth"`
-	// SumInternetBandwidth: total maximum internet bandwidth in bits per seconds.
-	SumInternetBandwidth *uint64 `json:"sum_internet_bandwidth"`
-	// IPv6Support: true if IPv6 is enabled.
-	IPv6Support bool `json:"ipv6_support"`
-}
+	// InboundDefaultPolicy: default inbound policy.
+	// Default value: unknown_policy
+	InboundDefaultPolicy SecurityGroupPolicy `json:"inbound_default_policy"`
 
-// ServerTypeNetworkInterface: server type. network. interface.
-type ServerTypeNetworkInterface struct {
-	// InternalBandwidth: maximum internal bandwidth in bits per seconds.
-	InternalBandwidth *uint64 `json:"internal_bandwidth"`
-	// InternetBandwidth: maximum internet bandwidth in bits per seconds.
-	InternetBandwidth *uint64 `json:"internet_bandwidth"`
-}
+	// OutboundDefaultPolicy: default outbound policy.
+	// Default value: unknown_policy
+	OutboundDefaultPolicy SecurityGroupPolicy `json:"outbound_default_policy"`
 
-// ServerTypeVolumeConstraintSizes: server type. volume constraint sizes.
-type ServerTypeVolumeConstraintSizes struct {
-	// MinSize: minimum volume size in bytes.
-	MinSize scw.Size `json:"min_size"`
-	// MaxSize: maximum volume size in bytes.
-	MaxSize scw.Size `json:"max_size"`
-}
+	// Organization: security group Organization ID.
+	Organization string `json:"organization"`
 
-// ServerTypeVolumeConstraintsByType: server type. volume constraints by type.
-type ServerTypeVolumeConstraintsByType struct {
-	// LSSD: local SSD volumes.
-	LSSD *ServerTypeVolumeConstraintSizes `json:"l_ssd"`
-}
+	// Project: security group Project ID.
+	Project string `json:"project"`
 
-type SetPlacementGroupResponse struct {
-	PlacementGroup *PlacementGroup `json:"placement_group"`
-}
+	// Tags: security group tags.
+	Tags []string `json:"tags"`
 
-// SetPlacementGroupServersResponse: set placement group servers response.
-type SetPlacementGroupServersResponse struct {
-	// Servers: instances attached to the placement group.
-	Servers []*PlacementGroupServer `json:"servers"`
+	// Deprecated: OrganizationDefault: true if it is your default security group for this Organization ID.
+	OrganizationDefault *bool `json:"organization_default"`
+
+	// ProjectDefault: true if it is your default security group for this Project ID.
+	ProjectDefault bool `json:"project_default"`
+
+	// CreationDate: security group creation date.
+	CreationDate *time.Time `json:"creation_date"`
+
+	// ModificationDate: security group modification date.
+	ModificationDate *time.Time `json:"modification_date"`
+
+	// Servers: list of Instances attached to this security group.
+	Servers []*ServerSummary `json:"servers"`
+
+	// Stateful: defines whether the security group is stateful.
+	Stateful bool `json:"stateful"`
+
+	// State: security group state.
+	// Default value: available
+	State SecurityGroupState `json:"state"`
+
+	// Zone: zone in which the security group is located.
+	Zone scw.Zone `json:"zone"`
 }
 
-// SetSecurityGroupRulesRequestRule: set security group rules request. rule.
-type SetSecurityGroupRulesRequestRule struct {
-	// ID: UUID of the security rule to update. If no value is provided, a new rule will be created.
-	ID *string `json:"id"`
-	// Action: action to apply when the rule matches a packet.
-	// Default value: accept
-	Action SecurityGroupRuleAction `json:"action"`
-	// Protocol: protocol family this rule applies to.
-	// Default value: TCP
+// SecurityGroupRule: security group rule.
+type SecurityGroupRule struct {
+	ID string `json:"id"`
+
+	// Protocol: default value: unknown_protocol
 	Protocol SecurityGroupRuleProtocol `json:"protocol"`
-	// Direction: direction the rule applies to.
-	// Default value: inbound
+
+	// Direction: default value: unknown_direction
 	Direction SecurityGroupRuleDirection `json:"direction"`
-	// IPRange: range of IP addresses these rules apply to.
+
+	// Action: default value: unknown_action
+	Action SecurityGroupRuleAction `json:"action"`
+
 	IPRange scw.IPNet `json:"ip_range"`
-	// DestPortFrom: beginning of the range of ports this rule applies to (inclusive). This value will be set to null if protocol is ICMP or ANY.
+
 	DestPortFrom *uint32 `json:"dest_port_from"`
-	// DestPortTo: end of the range of ports this rule applies to (inclusive). This value will be set to null if protocol is ICMP or ANY, or if it is equal to dest_port_from.
+
 	DestPortTo *uint32 `json:"dest_port_to"`
-	// Position: position of this rule in the security group rules list. If several rules are passed with the same position, the resulting order is undefined.
+
 	Position uint32 `json:"position"`
-	// Editable: indicates if this rule is editable. Rules with the value false will be ignored.
-	Editable *bool `json:"editable"`
-	// Zone: zone of the rule. This field is ignored.
-	Zone *scw.Zone `json:"zone"`
+
+	Editable bool `json:"editable"`
+
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"zone"`
 }
 
-type SetSecurityGroupRulesResponse struct {
-	Rules []*SecurityGroupRule `json:"rules"`
+// VolumeServerTemplate: volume server template.
+type VolumeServerTemplate struct {
+	// ID: UUID of the volume.
+	ID *string `json:"id,omitempty"`
+
+	// Boot: force the Instance to boot on this volume.
+	Boot *bool `json:"boot,omitempty"`
+
+	// Name: name of the volume.
+	Name *string `json:"name,omitempty"`
+
+	// Size: disk size of the volume, must be a multiple of 512.
+	Size *scw.Size `json:"size,omitempty"`
+
+	// VolumeType: type of the volume.
+	// Default value: l_ssd
+	VolumeType VolumeVolumeType `json:"volume_type,omitempty"`
+
+	// BaseSnapshot: ID of the snapshot on which this volume will be based.
+	BaseSnapshot *string `json:"base_snapshot,omitempty"`
+
+	// Organization: organization ID of the volume.
+	Organization *string `json:"organization,omitempty"`
+
+	// Project: project ID of the volume.
+	Project *string `json:"project,omitempty"`
 }
 
 // Snapshot: snapshot.
 type Snapshot struct {
 	// ID: snapshot ID.
 	ID string `json:"id"`
+
 	// Name: snapshot name.
 	Name string `json:"name"`
+
 	// Organization: snapshot Organization ID.
 	Organization string `json:"organization"`
+
 	// Project: snapshot Project ID.
 	Project string `json:"project"`
+
 	// Tags: snapshot tags.
 	Tags []string `json:"tags"`
+
 	// VolumeType: snapshot volume type.
 	// Default value: l_ssd
 	VolumeType VolumeVolumeType `json:"volume_type"`
+
 	// Size: snapshot size.
 	Size scw.Size `json:"size"`
+
 	// State: snapshot state.
 	// Default value: available
 	State SnapshotState `json:"state"`
+
 	// BaseVolume: volume on which the snapshot is based on.
 	BaseVolume *SnapshotBaseVolume `json:"base_volume"`
+
 	// CreationDate: snapshot creation date.
 	CreationDate *time.Time `json:"creation_date"`
+
 	// ModificationDate: snapshot modification date.
 	ModificationDate *time.Time `json:"modification_date"`
+
 	// Zone: snapshot zone.
 	Zone scw.Zone `json:"zone"`
+
 	// ErrorReason: reason for the failed snapshot import.
 	ErrorReason *string `json:"error_reason"`
 }
 
-// SnapshotBaseVolume: snapshot. base volume.
-type SnapshotBaseVolume struct {
-	// ID: volume ID on which the snapshot is based.
-	ID string `json:"id"`
-	// Name: volume name on which the snapshot is based on.
-	Name string `json:"name"`
-}
-
 // Task: task.
 type Task struct {
 	// ID: unique ID of the task.
 	ID string `json:"id"`
+
 	// Description: description of the task.
 	Description string `json:"description"`
+
 	// Progress: progress of the task in percent.
 	Progress int32 `json:"progress"`
+
 	// StartedAt: task start date.
 	StartedAt *time.Time `json:"started_at"`
+
 	// TerminatedAt: task end date.
 	TerminatedAt *time.Time `json:"terminated_at"`
+
 	// Status: task status.
 	// Default value: pending
 	Status TaskStatus `json:"status"`
@@ -1655,179 +1637,2257 @@ type Task struct {
 	HrefFrom string `json:"href_from"`
 
 	HrefResult string `json:"href_result"`
+
 	// Zone: zone in which the task is excecuted.
 	Zone scw.Zone `json:"zone"`
 }
 
-type UpdateIPResponse struct {
-	IP *IP `json:"ip"`
-}
+// Dashboard: dashboard.
+type Dashboard struct {
+	VolumesCount uint32 `json:"volumes_count"`
 
-type UpdatePlacementGroupResponse struct {
-	PlacementGroup *PlacementGroup `json:"placement_group"`
-}
+	RunningServersCount uint32 `json:"running_servers_count"`
 
-// UpdatePlacementGroupServersResponse: update placement group servers response.
-type UpdatePlacementGroupServersResponse struct {
-	// Servers: instances attached to the placement group.
-	Servers []*PlacementGroupServer `json:"servers"`
-}
+	ServersByTypes map[string]uint32 `json:"servers_by_types"`
 
-type UpdateServerResponse struct {
-	Server *Server `json:"server"`
-}
+	ImagesCount uint32 `json:"images_count"`
 
-type UpdateVolumeResponse struct {
-	Volume *Volume `json:"volume"`
-}
+	SnapshotsCount uint32 `json:"snapshots_count"`
 
-// Volume: volume.
-type Volume struct {
-	// ID: volume unique ID.
-	ID string `json:"id"`
-	// Name: volume name.
-	Name string `json:"name"`
-	// Deprecated: ExportURI: show the volume NBD export URI.
-	ExportURI *string `json:"export_uri"`
-	// Size: volume disk size.
-	Size scw.Size `json:"size"`
-	// VolumeType: volume type.
-	// Default value: l_ssd
-	VolumeType VolumeVolumeType `json:"volume_type"`
-	// CreationDate: volume creation date.
-	CreationDate *time.Time `json:"creation_date"`
-	// ModificationDate: volume modification date.
-	ModificationDate *time.Time `json:"modification_date"`
-	// Organization: volume Organization ID.
-	Organization string `json:"organization"`
-	// Project: volume Project ID.
-	Project string `json:"project"`
-	// Tags: volume tags.
-	Tags []string `json:"tags"`
-	// Server: instance attached to the volume.
-	Server *ServerSummary `json:"server"`
-	// State: volume state.
-	// Default value: available
-	State VolumeState `json:"state"`
-	// Zone: zone in which the volume is located.
-	Zone scw.Zone `json:"zone"`
-}
+	ServersCount uint32 `json:"servers_count"`
 
-type VolumeServer struct {
-	ID string `json:"id"`
+	IPsCount uint32 `json:"ips_count"`
 
-	Name string `json:"name"`
+	SecurityGroupsCount uint32 `json:"security_groups_count"`
 
-	ExportURI string `json:"export_uri"`
+	IPsUnused uint32 `json:"ips_unused"`
 
-	Organization string `json:"organization"`
+	VolumesLSSDCount uint32 `json:"volumes_l_ssd_count"`
 
-	Server *ServerSummary `json:"server"`
+	VolumesBSSDCount uint32 `json:"volumes_b_ssd_count"`
 
-	Size scw.Size `json:"size"`
-	// VolumeType: default value: l_ssd
-	VolumeType VolumeServerVolumeType `json:"volume_type"`
+	VolumesLSSDTotalSize scw.Size `json:"volumes_l_ssd_total_size"`
 
-	CreationDate *time.Time `json:"creation_date"`
+	VolumesBSSDTotalSize scw.Size `json:"volumes_b_ssd_total_size"`
 
-	ModificationDate *time.Time `json:"modification_date"`
-	// State: default value: available
-	State VolumeServerState `json:"state"`
+	PrivateNicsCount uint32 `json:"private_nics_count"`
 
-	Project string `json:"project"`
+	PlacementGroupsCount uint32 `json:"placement_groups_count"`
+}
 
-	Boot bool `json:"boot"`
+// PlacementGroupServer: placement group server.
+type PlacementGroupServer struct {
+	// ID: instance UUID.
+	ID string `json:"id"`
 
-	Zone scw.Zone `json:"zone"`
+	// Name: instance name.
+	Name string `json:"name"`
+
+	// PolicyRespected: defines whether the placement group policy is respected (either 1 or 0).
+	PolicyRespected bool `json:"policy_respected"`
 }
 
-// VolumeServerTemplate: volume server template.
-type VolumeServerTemplate struct {
-	// ID: UUID of the volume.
-	ID *string `json:"id,omitempty"`
-	// Boot: force the Instance to boot on this volume.
-	// Default value: false
-	Boot *bool `json:"boot,omitempty"`
-	// Name: name of the volume.
-	Name *string `json:"name,omitempty"`
-	// Size: disk size of the volume, must be a multiple of 512.
-	Size *scw.Size `json:"size,omitempty"`
-	// VolumeType: type of the volume.
-	// Default value: l_ssd
-	VolumeType VolumeVolumeType `json:"volume_type,omitempty"`
-	// BaseSnapshot: ID of the snapshot on which this volume will be based.
-	BaseSnapshot *string `json:"base_snapshot,omitempty"`
-	// Organization: organization ID of the volume.
+// GetServerTypesAvailabilityResponseAvailability: get server types availability response availability.
+type GetServerTypesAvailabilityResponseAvailability struct {
+	// Availability: default value: available
+	Availability ServerTypesAvailability `json:"availability"`
+}
+
+// ServerType: server type.
+type ServerType struct {
+	// Deprecated: MonthlyPrice: estimated monthly price, for a 30 days month, in Euro.
+	MonthlyPrice *float32 `json:"monthly_price"`
+
+	// HourlyPrice: hourly price in Euro.
+	HourlyPrice float32 `json:"hourly_price"`
+
+	// AltNames: alternative Instance name, if any.
+	AltNames []string `json:"alt_names"`
+
+	// PerVolumeConstraint: additional volume constraints.
+	PerVolumeConstraint *ServerTypeVolumeConstraintsByType `json:"per_volume_constraint"`
+
+	// VolumesConstraint: initial volume constraints.
+	VolumesConstraint *ServerTypeVolumeConstraintSizes `json:"volumes_constraint"`
+
+	// Ncpus: number of CPU.
+	Ncpus uint32 `json:"ncpus"`
+
+	// Gpu: number of GPU.
+	Gpu *uint64 `json:"gpu"`
+
+	// RAM: available RAM in bytes.
+	RAM uint64 `json:"ram"`
+
+	// Arch: CPU architecture.
+	// Default value: unknown_arch
+	Arch Arch `json:"arch"`
+
+	// Baremetal: true if it is a baremetal Instance.
+	Baremetal bool `json:"baremetal"`
+
+	// Network: network available for the Instance.
+	Network *ServerTypeNetwork `json:"network"`
+
+	// Capabilities: capabilities.
+	Capabilities *ServerTypeCapabilities `json:"capabilities"`
+
+	// ScratchStorageMaxSize: maximum available scratch storage.
+	ScratchStorageMaxSize *scw.Size `json:"scratch_storage_max_size"`
+}
+
+// VolumeType: volume type.
+type VolumeType struct {
+	DisplayName string `json:"display_name"`
+
+	Capabilities *VolumeTypeCapabilities `json:"capabilities"`
+
+	Constraints *VolumeTypeConstraints `json:"constraints"`
+}
+
+// ServerActionRequestVolumeBackupTemplate: server action request volume backup template.
+type ServerActionRequestVolumeBackupTemplate struct {
+	// VolumeType: overrides the `volume_type` of the snapshot for this volume.
+	// If omitted, the volume type of the original volume will be used.
+	// Default value: unknown_volume_type
+	VolumeType SnapshotVolumeType `json:"volume_type,omitempty"`
+}
+
+// SetSecurityGroupRulesRequestRule: set security group rules request rule.
+type SetSecurityGroupRulesRequestRule struct {
+	// ID: UUID of the security rule to update. If no value is provided, a new rule will be created.
+	ID *string `json:"id"`
+
+	// Action: action to apply when the rule matches a packet.
+	// Default value: unknown_action
+	Action SecurityGroupRuleAction `json:"action"`
+
+	// Protocol: protocol family this rule applies to.
+	// Default value: unknown_protocol
+	Protocol SecurityGroupRuleProtocol `json:"protocol"`
+
+	// Direction: direction the rule applies to.
+	// Default value: unknown_direction
+	Direction SecurityGroupRuleDirection `json:"direction"`
+
+	// IPRange: range of IP addresses these rules apply to.
+	IPRange scw.IPNet `json:"ip_range"`
+
+	// DestPortFrom: beginning of the range of ports this rule applies to (inclusive). This value will be set to null if protocol is ICMP or ANY.
+	DestPortFrom *uint32 `json:"dest_port_from"`
+
+	// DestPortTo: end of the range of ports this rule applies to (inclusive). This value will be set to null if protocol is ICMP or ANY, or if it is equal to dest_port_from.
+	DestPortTo *uint32 `json:"dest_port_to"`
+
+	// Position: position of this rule in the security group rules list. If several rules are passed with the same position, the resulting order is undefined.
+	Position uint32 `json:"position"`
+
+	// Editable: indicates if this rule is editable. Rules with the value false will be ignored.
+	Editable *bool `json:"editable"`
+
+	// Zone: zone of the rule. This field is ignored.
+	Zone *scw.Zone `json:"zone"`
+}
+
+// NullableStringValue: nullable string value.
+type NullableStringValue struct {
+	Null bool `json:"null,omitempty"`
+
+	Value string `json:"value,omitempty"`
+}
+
+// VolumeImageUpdateTemplate: volume image update template.
+type VolumeImageUpdateTemplate struct {
+	// ID: UUID of the snapshot.
+	ID string `json:"id,omitempty"`
+}
+
+// SecurityGroupTemplate: security group template.
+type SecurityGroupTemplate struct {
+	ID string `json:"id,omitempty"`
+
+	Name string `json:"name,omitempty"`
+}
+
+// ApplyBlockMigrationRequest: apply block migration request.
+type ApplyBlockMigrationRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// VolumeID: the volume to migrate, along with potentially other resources, according to the migration plan generated with a call to PlanBlockMigration.
+	// Precisely one of VolumeID, SnapshotID must be set.
+	VolumeID *string `json:"volume_id,omitempty"`
+
+	// SnapshotID: the snapshot to migrate, along with potentially other resources, according to the migration plan generated with a call to PlanBlockMigration.
+	// Precisely one of VolumeID, SnapshotID must be set.
+	SnapshotID *string `json:"snapshot_id,omitempty"`
+
+	// ValidationKey: a value to be retrieved from a call to PlanBlockMigration, to confirm that the volume and/or snapshots specified in said plan should be migrated.
+	ValidationKey string `json:"validation_key,omitempty"`
+}
+
+// AttachServerVolumeRequest: attach server volume request.
+type AttachServerVolumeRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	ServerID string `json:"-"`
+
+	VolumeID string `json:"volume_id,omitempty"`
+
+	// VolumeType: default value: unknown_volume_type
+	VolumeType AttachServerVolumeRequestVolumeType `json:"volume_type,omitempty"`
+
+	Boot *bool `json:"boot,omitempty"`
+}
+
+// AttachServerVolumeResponse: attach server volume response.
+type AttachServerVolumeResponse struct {
+	Server *Server `json:"server"`
+}
+
+// CreateIPRequest: create ip request.
+type CreateIPRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Deprecated: Organization: organization ID in which the IP is reserved.
+	// Precisely one of Project, Organization must be set.
 	Organization *string `json:"organization,omitempty"`
-	// Project: project ID of the volume.
+
+	// Project: project ID in which the IP is reserved.
+	// Precisely one of Project, Organization must be set.
 	Project *string `json:"project,omitempty"`
+
+	// Tags: tags of the IP.
+	Tags []string `json:"tags,omitempty"`
+
+	// Server: UUID of the Instance you want to attach the IP to.
+	Server *string `json:"server,omitempty"`
+
+	// Type: IP type to reserve (either 'nat', 'routed_ipv4' or 'routed_ipv6').
+	// Default value: unknown_iptype
+	Type IPType `json:"type,omitempty"`
 }
 
-type VolumeSummary struct {
-	ID string `json:"id"`
+// CreateIPResponse: create ip response.
+type CreateIPResponse struct {
+	IP *IP `json:"ip"`
+}
 
-	Name string `json:"name"`
+// CreateImageRequest: create image request.
+type CreateImageRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
 
-	Size scw.Size `json:"size"`
-	// VolumeType: default value: l_ssd
-	VolumeType VolumeVolumeType `json:"volume_type"`
+	// Name: name of the image.
+	Name string `json:"name,omitempty"`
+
+	// RootVolume: UUID of the snapshot.
+	RootVolume string `json:"root_volume,omitempty"`
+
+	// Arch: architecture of the image.
+	// Default value: unknown_arch
+	Arch Arch `json:"arch,omitempty"`
+
+	// Deprecated: DefaultBootscript: default bootscript of the image.
+	DefaultBootscript *string `json:"default_bootscript,omitempty"`
+
+	// ExtraVolumes: additional volumes of the image.
+	ExtraVolumes map[string]*VolumeTemplate `json:"extra_volumes,omitempty"`
+
+	// Deprecated: Organization: organization ID of the image.
+	// Precisely one of Project, Organization must be set.
+	Organization *string `json:"organization,omitempty"`
+
+	// Project: project ID of the image.
+	// Precisely one of Project, Organization must be set.
+	Project *string `json:"project,omitempty"`
+
+	// Tags: tags of the image.
+	Tags []string `json:"tags,omitempty"`
+
+	// Public: true to create a public image.
+	Public *bool `json:"public,omitempty"`
 }
 
-// VolumeTemplate: volume template.
-type VolumeTemplate struct {
-	// ID: UUID of the volume.
-	ID string `json:"id,omitempty"`
-	// Name: name of the volume.
+// CreateImageResponse: create image response.
+type CreateImageResponse struct {
+	Image *Image `json:"image"`
+}
+
+// CreatePlacementGroupRequest: create placement group request.
+type CreatePlacementGroupRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Name: name of the placement group.
 	Name string `json:"name,omitempty"`
-	// Size: disk size of the volume, must be a multiple of 512.
-	Size scw.Size `json:"size,omitempty"`
-	// VolumeType: type of the volume.
-	// Default value: l_ssd
-	VolumeType VolumeVolumeType `json:"volume_type,omitempty"`
-	// Deprecated: Organization: organization ID of the volume.
-	// Precisely one of Organization, Project must be set.
+
+	// Deprecated: Organization: organization ID of the placement group.
+	// Precisely one of Project, Organization must be set.
 	Organization *string `json:"organization,omitempty"`
-	// Project: project ID of the volume.
-	// Precisely one of Organization, Project must be set.
+
+	// Project: project ID of the placement group.
+	// Precisely one of Project, Organization must be set.
 	Project *string `json:"project,omitempty"`
+
+	// Tags: tags of the placement group.
+	Tags []string `json:"tags,omitempty"`
+
+	// PolicyMode: operating mode of the placement group.
+	// Default value: optional
+	PolicyMode PlacementGroupPolicyMode `json:"policy_mode,omitempty"`
+
+	// PolicyType: policy type of the placement group.
+	// Default value: max_availability
+	PolicyType PlacementGroupPolicyType `json:"policy_type,omitempty"`
+}
+
+// CreatePlacementGroupResponse: create placement group response.
+type CreatePlacementGroupResponse struct {
+	PlacementGroup *PlacementGroup `json:"placement_group"`
+}
+
+// CreatePrivateNICRequest: create private nic request.
+type CreatePrivateNICRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: UUID of the Instance the private NIC will be attached to.
+	ServerID string `json:"-"`
+
+	// PrivateNetworkID: UUID of the private network where the private NIC will be attached.
+	PrivateNetworkID string `json:"private_network_id,omitempty"`
+
+	// Tags: private NIC tags.
+	Tags []string `json:"tags,omitempty"`
+
+	// IPIDs: ip_ids defined from IPAM.
+	IPIDs []string `json:"ip_ids,omitempty"`
+}
+
+// CreatePrivateNICResponse: create private nic response.
+type CreatePrivateNICResponse struct {
+	PrivateNic *PrivateNIC `json:"private_nic"`
+}
+
+// CreateSecurityGroupRequest: create security group request.
+type CreateSecurityGroupRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Name: name of the security group.
+	Name string `json:"name,omitempty"`
+
+	// Description: description of the security group.
+	Description string `json:"description,omitempty"`
+
+	// Deprecated: Organization: organization ID the security group belongs to.
+	// Precisely one of Project, Organization must be set.
+	Organization *string `json:"organization,omitempty"`
+
+	// Project: project ID the security group belong to.
+	// Precisely one of Project, Organization must be set.
+	Project *string `json:"project,omitempty"`
+
+	// Tags: tags of the security group.
+	Tags []string `json:"tags,omitempty"`
+
+	// Deprecated: OrganizationDefault: defines whether this security group becomes the default security group for new Instances.
+	// Precisely one of OrganizationDefault, ProjectDefault must be set.
+	OrganizationDefault *bool `json:"organization_default,omitempty"`
+
+	// ProjectDefault: whether this security group becomes the default security group for new Instances.
+	// Precisely one of OrganizationDefault, ProjectDefault must be set.
+	ProjectDefault *bool `json:"project_default,omitempty"`
+
+	// Stateful: whether the security group is stateful or not.
+	Stateful bool `json:"stateful,omitempty"`
+
+	// InboundDefaultPolicy: default policy for inbound rules.
+	// Default value: unknown_policy
+	InboundDefaultPolicy SecurityGroupPolicy `json:"inbound_default_policy,omitempty"`
+
+	// OutboundDefaultPolicy: default policy for outbound rules.
+	// Default value: unknown_policy
+	OutboundDefaultPolicy SecurityGroupPolicy `json:"outbound_default_policy,omitempty"`
+
+	// EnableDefaultSecurity: true to block SMTP on IPv4 and IPv6. This feature is read only, please open a support ticket if you need to make it configurable.
+	EnableDefaultSecurity *bool `json:"enable_default_security,omitempty"`
+}
+
+// CreateSecurityGroupResponse: create security group response.
+type CreateSecurityGroupResponse struct {
+	SecurityGroup *SecurityGroup `json:"security_group"`
+}
+
+// CreateSecurityGroupRuleRequest: create security group rule request.
+type CreateSecurityGroupRuleRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SecurityGroupID: UUID of the security group.
+	SecurityGroupID string `json:"-"`
+
+	// Protocol: default value: unknown_protocol
+	Protocol SecurityGroupRuleProtocol `json:"protocol,omitempty"`
+
+	// Direction: default value: unknown_direction
+	Direction SecurityGroupRuleDirection `json:"direction,omitempty"`
+
+	// Action: default value: unknown_action
+	Action SecurityGroupRuleAction `json:"action,omitempty"`
+
+	IPRange scw.IPNet `json:"ip_range,omitempty"`
+
+	// DestPortFrom: beginning of the range of ports to apply this rule to (inclusive).
+	DestPortFrom *uint32 `json:"dest_port_from,omitempty"`
+
+	// DestPortTo: end of the range of ports to apply this rule to (inclusive).
+	DestPortTo *uint32 `json:"dest_port_to,omitempty"`
+
+	// Position: position of this rule in the security group rules list.
+	Position uint32 `json:"position,omitempty"`
+
+	// Editable: indicates if this rule is editable (will be ignored).
+	Editable bool `json:"editable,omitempty"`
+}
+
+// CreateSecurityGroupRuleResponse: create security group rule response.
+type CreateSecurityGroupRuleResponse struct {
+	Rule *SecurityGroupRule `json:"rule"`
+}
+
+// CreateServerRequest: create server request.
+type CreateServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Name: instance name.
+	Name string `json:"name,omitempty"`
+
+	// DynamicIPRequired: define if a dynamic IPv4 is required for the Instance.
+	DynamicIPRequired *bool `json:"dynamic_ip_required,omitempty"`
+
+	// RoutedIPEnabled: if true, configure the Instance so it uses the new routed IP mode.
+	RoutedIPEnabled *bool `json:"routed_ip_enabled,omitempty"`
+
+	// CommercialType: define the Instance commercial type (i.e. GP1-S).
+	CommercialType string `json:"commercial_type,omitempty"`
+
+	// Image: instance image ID or label.
+	Image string `json:"image,omitempty"`
+
+	// Volumes: volumes attached to the server.
+	Volumes map[string]*VolumeServerTemplate `json:"volumes,omitempty"`
+
+	// EnableIPv6: true if IPv6 is enabled on the server.
+	EnableIPv6 bool `json:"enable_ipv6,omitempty"`
+
+	// PublicIP: ID of the reserved IP to attach to the Instance.
+	PublicIP *string `json:"public_ip,omitempty"`
+
+	// PublicIPs: a list of reserved IP IDs to attach to the Instance.
+	PublicIPs *[]string `json:"public_ips,omitempty"`
+
+	// BootType: boot type to use.
+	// Default value: local
+	BootType *BootType `json:"boot_type,omitempty"`
+
+	// Deprecated: Bootscript: bootscript ID to use when `boot_type` is set to `bootscript`.
+	Bootscript *string `json:"bootscript,omitempty"`
+
+	// Deprecated: Organization: instance Organization ID.
+	// Precisely one of Project, Organization must be set.
+	Organization *string `json:"organization,omitempty"`
+
+	// Project: instance Project ID.
+	// Precisely one of Project, Organization must be set.
+	Project *string `json:"project,omitempty"`
+
+	// Tags: instance tags.
+	Tags []string `json:"tags,omitempty"`
+
+	// SecurityGroup: security group ID.
+	SecurityGroup *string `json:"security_group,omitempty"`
+
+	// PlacementGroup: placement group ID if Instance must be part of a placement group.
+	PlacementGroup *string `json:"placement_group,omitempty"`
+}
+
+// CreateServerResponse: create server response.
+type CreateServerResponse struct {
+	Server *Server `json:"server"`
+}
+
+// CreateSnapshotRequest: create snapshot request.
+type CreateSnapshotRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Name: name of the snapshot.
+	Name string `json:"name,omitempty"`
+
+	// VolumeID: UUID of the volume.
+	VolumeID *string `json:"volume_id,omitempty"`
+
+	// Tags: tags of the snapshot.
+	Tags *[]string `json:"tags,omitempty"`
+
+	// Deprecated: Organization: organization ID of the snapshot.
+	// Precisely one of Project, Organization must be set.
+	Organization *string `json:"organization,omitempty"`
+
+	// Project: project ID of the snapshot.
+	// Precisely one of Project, Organization must be set.
+	Project *string `json:"project,omitempty"`
+
+	// VolumeType: overrides the volume_type of the snapshot.
+	// If omitted, the volume type of the original volume will be used.
+	// Default value: unknown_volume_type
+	VolumeType SnapshotVolumeType `json:"volume_type,omitempty"`
+
+	// Bucket: bucket name for snapshot imports.
+	Bucket *string `json:"bucket,omitempty"`
+
+	// Key: object key for snapshot imports.
+	Key *string `json:"key,omitempty"`
+
+	// Size: imported snapshot size, must be a multiple of 512.
+	Size *scw.Size `json:"size,omitempty"`
+}
+
+// CreateSnapshotResponse: create snapshot response.
+type CreateSnapshotResponse struct {
+	Snapshot *Snapshot `json:"snapshot"`
+
+	Task *Task `json:"task"`
+}
+
+// CreateVolumeRequest: create volume request.
+type CreateVolumeRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Name: volume name.
+	Name string `json:"name,omitempty"`
+
+	// Deprecated: Organization: volume Organization ID.
+	// Precisely one of Project, Organization must be set.
+	Organization *string `json:"organization,omitempty"`
+
+	// Project: volume Project ID.
+	// Precisely one of Project, Organization must be set.
+	Project *string `json:"project,omitempty"`
+
+	// Tags: volume tags.
+	Tags []string `json:"tags,omitempty"`
+
+	// VolumeType: volume type.
+	// Default value: l_ssd
+	VolumeType VolumeVolumeType `json:"volume_type,omitempty"`
+
+	// Size: volume disk size, must be a multiple of 512.
+	// Precisely one of Size, BaseSnapshot must be set.
+	Size *scw.Size `json:"size,omitempty"`
+
+	// BaseSnapshot: ID of the snapshot on which this volume will be based.
+	// Precisely one of Size, BaseSnapshot must be set.
+	BaseSnapshot *string `json:"base_snapshot,omitempty"`
+}
+
+// CreateVolumeResponse: create volume response.
+type CreateVolumeResponse struct {
+	Volume *Volume `json:"volume"`
+}
+
+// DeleteIPRequest: delete ip request.
+type DeleteIPRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// IP: ID or address of the IP to delete.
+	IP string `json:"-"`
+}
+
+// DeleteImageRequest: delete image request.
+type DeleteImageRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ImageID: UUID of the image you want to delete.
+	ImageID string `json:"-"`
+}
+
+// DeletePlacementGroupRequest: delete placement group request.
+type DeletePlacementGroupRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// PlacementGroupID: UUID of the placement group you want to delete.
+	PlacementGroupID string `json:"-"`
+}
+
+// DeletePrivateNICRequest: delete private nic request.
+type DeletePrivateNICRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: instance to which the private NIC is attached.
+	ServerID string `json:"-"`
+
+	// PrivateNicID: private NIC unique ID.
+	PrivateNicID string `json:"-"`
+}
+
+// DeleteSecurityGroupRequest: delete security group request.
+type DeleteSecurityGroupRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SecurityGroupID: UUID of the security group you want to delete.
+	SecurityGroupID string `json:"-"`
+}
+
+// DeleteSecurityGroupRuleRequest: delete security group rule request.
+type DeleteSecurityGroupRuleRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	SecurityGroupID string `json:"-"`
+
+	SecurityGroupRuleID string `json:"-"`
+}
+
+// DeleteServerRequest: delete server request.
+type DeleteServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	ServerID string `json:"-"`
+}
+
+// DeleteServerUserDataRequest: delete server user data request.
+type DeleteServerUserDataRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: UUID of the Instance.
+	ServerID string `json:"-"`
+
+	// Key: key of the user data to delete.
+	Key string `json:"-"`
+}
+
+// DeleteSnapshotRequest: delete snapshot request.
+type DeleteSnapshotRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SnapshotID: UUID of the snapshot you want to delete.
+	SnapshotID string `json:"-"`
+}
+
+// DeleteVolumeRequest: delete volume request.
+type DeleteVolumeRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// VolumeID: UUID of the volume you want to delete.
+	VolumeID string `json:"-"`
+}
+
+// DetachServerVolumeRequest: detach server volume request.
+type DetachServerVolumeRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	ServerID string `json:"-"`
+
+	VolumeID string `json:"volume_id,omitempty"`
+}
+
+// DetachServerVolumeResponse: detach server volume response.
+type DetachServerVolumeResponse struct {
+	Server *Server `json:"server"`
+}
+
+// ExportSnapshotRequest: export snapshot request.
+type ExportSnapshotRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SnapshotID: snapshot ID.
+	SnapshotID string `json:"-"`
+
+	// Bucket: s3 bucket name.
+	Bucket string `json:"bucket,omitempty"`
+
+	// Key: s3 object key.
+	Key string `json:"key,omitempty"`
+}
+
+// ExportSnapshotResponse: export snapshot response.
+type ExportSnapshotResponse struct {
+	Task *Task `json:"task"`
+}
+
+// GetBootscriptRequest: get bootscript request.
+type GetBootscriptRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	BootscriptID string `json:"-"`
+}
+
+// GetBootscriptResponse: get bootscript response.
+type GetBootscriptResponse struct {
+	Bootscript *Bootscript `json:"bootscript"`
+}
+
+// GetDashboardRequest: get dashboard request.
+type GetDashboardRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	Organization *string `json:"-"`
+
+	Project *string `json:"-"`
+}
+
+// GetDashboardResponse: get dashboard response.
+type GetDashboardResponse struct {
+	Dashboard *Dashboard `json:"dashboard"`
+}
+
+// GetIPRequest: get ip request.
+type GetIPRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// IP: IP ID or address to get.
+	IP string `json:"-"`
+}
+
+// GetIPResponse: get ip response.
+type GetIPResponse struct {
+	IP *IP `json:"ip"`
+}
+
+// GetImageRequest: get image request.
+type GetImageRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ImageID: UUID of the image you want to get.
+	ImageID string `json:"-"`
+}
+
+// GetImageResponse: get image response.
+type GetImageResponse struct {
+	Image *Image `json:"image"`
+}
+
+// GetPlacementGroupRequest: get placement group request.
+type GetPlacementGroupRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// PlacementGroupID: UUID of the placement group you want to get.
+	PlacementGroupID string `json:"-"`
+}
+
+// GetPlacementGroupResponse: get placement group response.
+type GetPlacementGroupResponse struct {
+	PlacementGroup *PlacementGroup `json:"placement_group"`
+}
+
+// GetPlacementGroupServersRequest: get placement group servers request.
+type GetPlacementGroupServersRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// PlacementGroupID: UUID of the placement group you want to get.
+	PlacementGroupID string `json:"-"`
+}
+
+// GetPlacementGroupServersResponse: get placement group servers response.
+type GetPlacementGroupServersResponse struct {
+	// Servers: instances attached to the placement group.
+	Servers []*PlacementGroupServer `json:"servers"`
+}
+
+// GetPrivateNICRequest: get private nic request.
+type GetPrivateNICRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: instance to which the private NIC is attached.
+	ServerID string `json:"-"`
+
+	// PrivateNicID: private NIC unique ID.
+	PrivateNicID string `json:"-"`
+}
+
+// GetPrivateNICResponse: get private nic response.
+type GetPrivateNICResponse struct {
+	PrivateNic *PrivateNIC `json:"private_nic"`
+}
+
+// GetSecurityGroupRequest: get security group request.
+type GetSecurityGroupRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SecurityGroupID: UUID of the security group you want to get.
+	SecurityGroupID string `json:"-"`
+}
+
+// GetSecurityGroupResponse: get security group response.
+type GetSecurityGroupResponse struct {
+	SecurityGroup *SecurityGroup `json:"security_group"`
+}
+
+// GetSecurityGroupRuleRequest: get security group rule request.
+type GetSecurityGroupRuleRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	SecurityGroupID string `json:"-"`
+
+	SecurityGroupRuleID string `json:"-"`
+}
+
+// GetSecurityGroupRuleResponse: get security group rule response.
+type GetSecurityGroupRuleResponse struct {
+	Rule *SecurityGroupRule `json:"rule"`
+}
+
+// GetServerRequest: get server request.
+type GetServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: UUID of the Instance you want to get.
+	ServerID string `json:"-"`
+}
+
+// GetServerResponse: get server response.
+type GetServerResponse struct {
+	Server *Server `json:"server"`
+}
+
+// GetServerTypesAvailabilityRequest: get server types availability request.
+type GetServerTypesAvailabilityRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
+	PerPage *uint32 `json:"-"`
+
+	// Page: a positive integer to choose the page to return.
+	Page *int32 `json:"-"`
+}
+
+// GetServerTypesAvailabilityResponse: get server types availability response.
+type GetServerTypesAvailabilityResponse struct {
+	// Servers: map of server types.
+	Servers map[string]*GetServerTypesAvailabilityResponseAvailability `json:"servers"`
+
+	TotalCount uint32 `json:"total_count"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *GetServerTypesAvailabilityResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *GetServerTypesAvailabilityResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*GetServerTypesAvailabilityResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	if r.Servers == nil {
+		r.Servers = make(map[string]*GetServerTypesAvailabilityResponseAvailability)
+	}
+	for k, v := range results.Servers {
+		r.Servers[k] = v
+	}
+	r.TotalCount += uint32(len(results.Servers))
+	return uint32(len(results.Servers)), nil
+}
+
+// GetSnapshotRequest: get snapshot request.
+type GetSnapshotRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SnapshotID: UUID of the snapshot you want to get.
+	SnapshotID string `json:"-"`
+}
+
+// GetSnapshotResponse: get snapshot response.
+type GetSnapshotResponse struct {
+	Snapshot *Snapshot `json:"snapshot"`
+}
+
+// GetVolumeRequest: get volume request.
+type GetVolumeRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// VolumeID: UUID of the volume you want to get.
+	VolumeID string `json:"-"`
+}
+
+// GetVolumeResponse: get volume response.
+type GetVolumeResponse struct {
+	Volume *Volume `json:"volume"`
+}
+
+// ListBootscriptsRequest: list bootscripts request.
+type ListBootscriptsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	Arch *string `json:"-"`
+
+	Title *string `json:"-"`
+
+	Default *bool `json:"-"`
+
+	Public *bool `json:"-"`
+
+	PerPage *uint32 `json:"-"`
+
+	Page *int32 `json:"-"`
+}
+
+// ListBootscriptsResponse: list bootscripts response.
+type ListBootscriptsResponse struct {
+	// TotalCount: total number of bootscripts.
+	TotalCount uint32 `json:"total_count"`
+
+	// Bootscripts: list of bootscripts.
+	Bootscripts []*Bootscript `json:"bootscripts"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListBootscriptsResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListBootscriptsResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListBootscriptsResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Bootscripts = append(r.Bootscripts, results.Bootscripts...)
+	r.TotalCount += uint32(len(results.Bootscripts))
+	return uint32(len(results.Bootscripts)), nil
+}
+
+// ListDefaultSecurityGroupRulesRequest: list default security group rules request.
+type ListDefaultSecurityGroupRulesRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+}
+
+// ListIPsRequest: list i ps request.
+type ListIPsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Project: project ID in which the IPs are reserved.
+	Project *string `json:"-"`
+
+	// Organization: organization ID in which the IPs are reserved.
+	Organization *string `json:"-"`
+
+	// Tags: filter IPs with these exact tags (to filter with several tags, use commas to separate them).
+	Tags []string `json:"-"`
+
+	// Name: filter on the IP address (Works as a LIKE operation on the IP address).
+	Name *string `json:"-"`
+
+	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
+	PerPage *uint32 `json:"-"`
+
+	// Page: a positive integer to choose the page to return.
+	Page *int32 `json:"-"`
+
+	// Type: filter on the IP Mobility IP type (whose value should be either 'nat', 'routed_ipv4' or 'routed_ipv6').
+	Type *string `json:"-"`
+}
+
+// ListIPsResponse: list i ps response.
+type ListIPsResponse struct {
+	// TotalCount: total number of ips.
+	TotalCount uint32 `json:"total_count"`
+
+	// IPs: list of ips.
+	IPs []*IP `json:"ips"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListIPsResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListIPsResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListIPsResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.IPs = append(r.IPs, results.IPs...)
+	r.TotalCount += uint32(len(results.IPs))
+	return uint32(len(results.IPs)), nil
+}
+
+// ListImagesRequest: list images request.
+type ListImagesRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	Organization *string `json:"-"`
+
+	PerPage *uint32 `json:"-"`
+
+	Page *int32 `json:"-"`
+
+	Name *string `json:"-"`
+
+	Public *bool `json:"-"`
+
+	Arch *string `json:"-"`
+
+	Project *string `json:"-"`
+
+	Tags *string `json:"-"`
+}
+
+// ListImagesResponse: list images response.
+type ListImagesResponse struct {
+	// TotalCount: total number of images.
+	TotalCount uint32 `json:"total_count"`
+
+	// Images: list of images.
+	Images []*Image `json:"images"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListImagesResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListImagesResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListImagesResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Images = append(r.Images, results.Images...)
+	r.TotalCount += uint32(len(results.Images))
+	return uint32(len(results.Images)), nil
+}
+
+// ListPlacementGroupsRequest: list placement groups request.
+type ListPlacementGroupsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
+	PerPage *uint32 `json:"-"`
+
+	// Page: a positive integer to choose the page to return.
+	Page *int32 `json:"-"`
+
+	// Organization: list only placement groups of this Organization ID.
+	Organization *string `json:"-"`
+
+	// Project: list only placement groups of this Project ID.
+	Project *string `json:"-"`
+
+	// Tags: list placement groups with these exact tags (to filter with several tags, use commas to separate them).
+	Tags []string `json:"-"`
+
+	// Name: filter placement groups by name (for eg. "cluster1" will return "cluster100" and "cluster1" but not "foo").
+	Name *string `json:"-"`
+}
+
+// ListPlacementGroupsResponse: list placement groups response.
+type ListPlacementGroupsResponse struct {
+	// TotalCount: total number of placement groups.
+	TotalCount uint32 `json:"total_count"`
+
+	// PlacementGroups: list of placement groups.
+	PlacementGroups []*PlacementGroup `json:"placement_groups"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListPlacementGroupsResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListPlacementGroupsResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListPlacementGroupsResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.PlacementGroups = append(r.PlacementGroups, results.PlacementGroups...)
+	r.TotalCount += uint32(len(results.PlacementGroups))
+	return uint32(len(results.PlacementGroups)), nil
+}
+
+// ListPrivateNICsRequest: list private ni cs request.
+type ListPrivateNICsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: instance to which the private NIC is attached.
+	ServerID string `json:"-"`
+
+	// Tags: private NIC tags.
+	Tags []string `json:"-"`
+
+	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
+	PerPage *uint32 `json:"-"`
+
+	// Page: a positive integer to choose the page to return.
+	Page *int32 `json:"-"`
+}
+
+// ListPrivateNICsResponse: list private ni cs response.
+type ListPrivateNICsResponse struct {
+	PrivateNics []*PrivateNIC `json:"private_nics"`
+
+	TotalCount uint64 `json:"total_count"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListPrivateNICsResponse) UnsafeGetTotalCount() uint64 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListPrivateNICsResponse) UnsafeAppend(res interface{}) (uint64, error) {
+	results, ok := res.(*ListPrivateNICsResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.PrivateNics = append(r.PrivateNics, results.PrivateNics...)
+	r.TotalCount += uint64(len(results.PrivateNics))
+	return uint64(len(results.PrivateNics)), nil
+}
+
+// ListSecurityGroupRulesRequest: list security group rules request.
+type ListSecurityGroupRulesRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SecurityGroupID: UUID of the security group.
+	SecurityGroupID string `json:"-"`
+
+	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
+	PerPage *uint32 `json:"-"`
+
+	// Page: a positive integer to choose the page to return.
+	Page *int32 `json:"-"`
+}
+
+// ListSecurityGroupRulesResponse: list security group rules response.
+type ListSecurityGroupRulesResponse struct {
+	// TotalCount: total number of security groups.
+	TotalCount uint32 `json:"total_count"`
+
+	// Rules: list of security rules.
+	Rules []*SecurityGroupRule `json:"rules"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListSecurityGroupRulesResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListSecurityGroupRulesResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListSecurityGroupRulesResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Rules = append(r.Rules, results.Rules...)
+	r.TotalCount += uint32(len(results.Rules))
+	return uint32(len(results.Rules)), nil
+}
+
+// ListSecurityGroupsRequest: list security groups request.
+type ListSecurityGroupsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Name: name of the security group.
+	Name *string `json:"-"`
+
+	// Organization: security group Organization ID.
+	Organization *string `json:"-"`
+
+	// Project: security group Project ID.
+	Project *string `json:"-"`
+
+	// Tags: list security groups with these exact tags (to filter with several tags, use commas to separate them).
+	Tags []string `json:"-"`
+
+	// ProjectDefault: filter security groups with this value for project_default.
+	ProjectDefault *bool `json:"-"`
+
+	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
+	PerPage *uint32 `json:"-"`
+
+	// Page: a positive integer to choose the page to return.
+	Page *int32 `json:"-"`
+}
+
+// ListSecurityGroupsResponse: list security groups response.
+type ListSecurityGroupsResponse struct {
+	// TotalCount: total number of security groups.
+	TotalCount uint32 `json:"total_count"`
+
+	// SecurityGroups: list of security groups.
+	SecurityGroups []*SecurityGroup `json:"security_groups"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListSecurityGroupsResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListSecurityGroupsResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListSecurityGroupsResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.SecurityGroups = append(r.SecurityGroups, results.SecurityGroups...)
+	r.TotalCount += uint32(len(results.SecurityGroups))
+	return uint32(len(results.SecurityGroups)), nil
+}
+
+// ListServerActionsRequest: list server actions request.
+type ListServerActionsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	ServerID string `json:"-"`
+}
+
+// ListServerActionsResponse: list server actions response.
+type ListServerActionsResponse struct {
+	Actions []ServerAction `json:"actions"`
+}
+
+// ListServerUserDataRequest: list server user data request.
+type ListServerUserDataRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: UUID of the Instance.
+	ServerID string `json:"-"`
+}
+
+// ListServerUserDataResponse: list server user data response.
+type ListServerUserDataResponse struct {
+	UserData []string `json:"user_data"`
+}
+
+// ListServersRequest: list servers request.
+type ListServersRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
+	PerPage *uint32 `json:"-"`
+
+	// Page: a positive integer to choose the page to return.
+	Page *int32 `json:"-"`
+
+	// Organization: list only Instances of this Organization ID.
+	Organization *string `json:"-"`
+
+	// Project: list only Instances of this Project ID.
+	Project *string `json:"-"`
+
+	// Name: filter Instances by name (eg. "server1" will return "server100" and "server1" but not "foo").
+	Name *string `json:"-"`
+
+	// PrivateIP: list Instances by private_ip.
+	PrivateIP *net.IP `json:"-"`
+
+	// WithoutIP: list Instances that are not attached to a public IP.
+	WithoutIP *bool `json:"-"`
+
+	// CommercialType: list Instances of this commercial type.
+	CommercialType *string `json:"-"`
+
+	// State: list Instances in this state.
+	// Default value: running
+	State *ServerState `json:"-"`
+
+	// Tags: list Instances with these exact tags (to filter with several tags, use commas to separate them).
+	Tags []string `json:"-"`
+
+	// PrivateNetwork: list Instances in this Private Network.
+	PrivateNetwork *string `json:"-"`
+
+	// Order: define the order of the returned servers.
+	// Default value: creation_date_desc
+	Order ListServersRequestOrder `json:"-"`
+
+	// PrivateNetworks: list Instances from the given Private Networks (use commas to separate them).
+	PrivateNetworks []string `json:"-"`
+
+	// PrivateNicMacAddress: list Instances associated with the given private NIC MAC address.
+	PrivateNicMacAddress *string `json:"-"`
+
+	// Servers: list Instances from these server ids (use commas to separate them).
+	Servers []string `json:"-"`
+}
+
+// ListServersResponse: list servers response.
+type ListServersResponse struct {
+	// TotalCount: total number of Instances.
+	TotalCount uint32 `json:"total_count"`
+
+	// Servers: list of Instances.
+	Servers []*Server `json:"servers"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListServersResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListServersResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListServersResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Servers = append(r.Servers, results.Servers...)
+	r.TotalCount += uint32(len(results.Servers))
+	return uint32(len(results.Servers)), nil
+}
+
+// ListServersTypesRequest: list servers types request.
+type ListServersTypesRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	PerPage *uint32 `json:"-"`
+
+	Page *int32 `json:"-"`
+}
+
+// ListServersTypesResponse: list servers types response.
+type ListServersTypesResponse struct {
+	// TotalCount: total number of Instance types.
+	TotalCount uint32 `json:"total_count"`
+
+	// Servers: list of Instance types.
+	Servers map[string]*ServerType `json:"servers"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListServersTypesResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListServersTypesResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListServersTypesResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	if r.Servers == nil {
+		r.Servers = make(map[string]*ServerType)
+	}
+	for k, v := range results.Servers {
+		r.Servers[k] = v
+	}
+	r.TotalCount += uint32(len(results.Servers))
+	return uint32(len(results.Servers)), nil
+}
+
+// ListSnapshotsRequest: list snapshots request.
+type ListSnapshotsRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// Organization: list snapshots only for this Organization ID.
+	Organization *string `json:"-"`
+
+	// Project: list snapshots only for this Project ID.
+	Project *string `json:"-"`
+
+	// PerPage: number of snapshots returned per page (positive integer lower or equal to 100).
+	PerPage *uint32 `json:"-"`
+
+	// Page: page to be returned.
+	Page *int32 `json:"-"`
+
+	// Name: list snapshots of the requested name.
+	Name *string `json:"-"`
+
+	// Tags: list snapshots that have the requested tag.
+	Tags *string `json:"-"`
+
+	// BaseVolumeID: list snapshots originating only from this volume.
+	BaseVolumeID *string `json:"-"`
+}
+
+// ListSnapshotsResponse: list snapshots response.
+type ListSnapshotsResponse struct {
+	// TotalCount: total number of snapshots.
+	TotalCount uint32 `json:"total_count"`
+
+	// Snapshots: list of snapshots.
+	Snapshots []*Snapshot `json:"snapshots"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListSnapshotsResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListSnapshotsResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListSnapshotsResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Snapshots = append(r.Snapshots, results.Snapshots...)
+	r.TotalCount += uint32(len(results.Snapshots))
+	return uint32(len(results.Snapshots)), nil
+}
+
+// ListVolumesRequest: list volumes request.
+type ListVolumesRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// VolumeType: filter by volume type.
+	// Default value: l_ssd
+	VolumeType *VolumeVolumeType `json:"-"`
+
+	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
+	PerPage *uint32 `json:"-"`
+
+	// Page: a positive integer to choose the page to return.
+	Page *int32 `json:"-"`
+
+	// Organization: filter volume by Organization ID.
+	Organization *string `json:"-"`
+
+	// Project: filter volume by Project ID.
+	Project *string `json:"-"`
+
+	// Tags: filter volumes with these exact tags (to filter with several tags, use commas to separate them).
+	Tags []string `json:"-"`
+
+	// Name: filter volume by name (for eg. "vol" will return "myvolume" but not "data").
+	Name *string `json:"-"`
+}
+
+// ListVolumesResponse: list volumes response.
+type ListVolumesResponse struct {
+	// TotalCount: total number of volumes.
+	TotalCount uint32 `json:"total_count"`
+
+	// Volumes: list of volumes.
+	Volumes []*Volume `json:"volumes"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListVolumesResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListVolumesResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListVolumesResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	r.Volumes = append(r.Volumes, results.Volumes...)
+	r.TotalCount += uint32(len(results.Volumes))
+	return uint32(len(results.Volumes)), nil
+}
+
+// ListVolumesTypesRequest: list volumes types request.
+type ListVolumesTypesRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	PerPage *uint32 `json:"-"`
+
+	Page *int32 `json:"-"`
+}
+
+// ListVolumesTypesResponse: list volumes types response.
+type ListVolumesTypesResponse struct {
+	// TotalCount: total number of volume types.
+	TotalCount uint32 `json:"total_count"`
+
+	// Volumes: map of volume types.
+	Volumes map[string]*VolumeType `json:"volumes"`
+}
+
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListVolumesTypesResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
+}
+
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListVolumesTypesResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListVolumesTypesResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
+	}
+
+	if r.Volumes == nil {
+		r.Volumes = make(map[string]*VolumeType)
+	}
+	for k, v := range results.Volumes {
+		r.Volumes[k] = v
+	}
+	r.TotalCount += uint32(len(results.Volumes))
+	return uint32(len(results.Volumes)), nil
+}
+
+// MigrationPlan: migration plan.
+type MigrationPlan struct {
+	// Volume: a volume which will be migrated to SBS together with the snapshots, if present.
+	Volume *Volume `json:"volume"`
+
+	// Snapshots: a list of snapshots which will be migrated to SBS together and with the volume, if present.
+	Snapshots []*Snapshot `json:"snapshots"`
+
+	// ValidationKey: a value to be passed to ApplyBlockMigrationRequest, to confirm that the execution of the plan is being requested.
+	ValidationKey string `json:"validation_key"`
+}
+
+// PlanBlockMigrationRequest: plan block migration request.
+type PlanBlockMigrationRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// VolumeID: the volume for which the migration plan will be generated.
+	// Precisely one of VolumeID, SnapshotID must be set.
+	VolumeID *string `json:"volume_id,omitempty"`
+
+	// SnapshotID: the snapshot for which the migration plan will be generated.
+	// Precisely one of VolumeID, SnapshotID must be set.
+	SnapshotID *string `json:"snapshot_id,omitempty"`
+}
+
+// ServerActionRequest: server action request.
+type ServerActionRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: UUID of the Instance.
+	ServerID string `json:"-"`
+
+	// Action: action to perform on the Instance.
+	// Default value: poweron
+	Action ServerAction `json:"action,omitempty"`
+
+	// Name: name of the backup you want to create.
+	// This field should only be specified when performing a backup action.
+	Name *string `json:"name,omitempty"`
+
+	// Volumes: for each volume UUID, the snapshot parameters of the volume.
+	// This field should only be specified when performing a backup action.
+	Volumes map[string]*ServerActionRequestVolumeBackupTemplate `json:"volumes,omitempty"`
+}
+
+// ServerActionResponse: server action response.
+type ServerActionResponse struct {
+	Task *Task `json:"task"`
+}
+
+// SetImageRequest: set image request.
+type SetImageRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	ID string `json:"-"`
+
+	Name string `json:"name"`
+
+	// Arch: default value: unknown_arch
+	Arch Arch `json:"arch"`
+
+	CreationDate *time.Time `json:"creation_date,omitempty"`
+
+	ModificationDate *time.Time `json:"modification_date,omitempty"`
+
+	// Deprecated
+	DefaultBootscript *Bootscript `json:"default_bootscript,omitempty"`
+
+	ExtraVolumes map[string]*Volume `json:"extra_volumes"`
+
+	FromServer string `json:"from_server"`
+
+	Organization string `json:"organization"`
+
+	Public bool `json:"public"`
+
+	RootVolume *VolumeSummary `json:"root_volume,omitempty"`
+
+	// State: default value: available
+	State ImageState `json:"state"`
+
+	Project string `json:"project"`
+
+	Tags *[]string `json:"tags,omitempty"`
+}
+
+// SetPlacementGroupRequest: set placement group request.
+type SetPlacementGroupRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	PlacementGroupID string `json:"-"`
+
+	Name string `json:"name"`
+
+	Organization string `json:"organization"`
+
+	// PolicyMode: default value: optional
+	PolicyMode PlacementGroupPolicyMode `json:"policy_mode"`
+
+	// PolicyType: default value: max_availability
+	PolicyType PlacementGroupPolicyType `json:"policy_type"`
+
+	Project string `json:"project"`
+
+	Tags *[]string `json:"tags,omitempty"`
+}
+
+// SetPlacementGroupResponse: set placement group response.
+type SetPlacementGroupResponse struct {
+	PlacementGroup *PlacementGroup `json:"placement_group"`
+}
+
+// SetPlacementGroupServersRequest: set placement group servers request.
+type SetPlacementGroupServersRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// PlacementGroupID: UUID of the placement group you want to set.
+	PlacementGroupID string `json:"-"`
+
+	// Servers: an array of the Instances' UUIDs you want to configure.
+	Servers []string `json:"servers"`
+}
+
+// SetPlacementGroupServersResponse: set placement group servers response.
+type SetPlacementGroupServersResponse struct {
+	// Servers: instances attached to the placement group.
+	Servers []*PlacementGroupServer `json:"servers"`
+}
+
+// SetSecurityGroupRulesRequest: set security group rules request.
+type SetSecurityGroupRulesRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SecurityGroupID: UUID of the security group to update the rules on.
+	SecurityGroupID string `json:"-"`
+
+	// Rules: list of rules to update in the security group.
+	Rules []*SetSecurityGroupRulesRequestRule `json:"rules"`
+}
+
+// SetSecurityGroupRulesResponse: set security group rules response.
+type SetSecurityGroupRulesResponse struct {
+	Rules []*SecurityGroupRule `json:"rules"`
+}
+
+// UpdateIPRequest: update ip request.
+type UpdateIPRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// IP: IP ID or IP address.
+	IP string `json:"-"`
+
+	// Reverse: reverse domain name.
+	Reverse *NullableStringValue `json:"reverse,omitempty"`
+
+	// Type: convert a 'nat' IP to a 'routed_ipv4'.
+	// Default value: unknown_iptype
+	Type IPType `json:"type,omitempty"`
+
+	// Tags: an array of keywords you want to tag this IP with.
+	Tags *[]string `json:"tags,omitempty"`
+
+	Server *NullableStringValue `json:"server,omitempty"`
+}
+
+// UpdateIPResponse: update ip response.
+type UpdateIPResponse struct {
+	IP *IP `json:"ip"`
+}
+
+// UpdateImageRequest: update image request.
+type UpdateImageRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ImageID: UUID of the image.
+	ImageID string `json:"-"`
+
+	// Name: name of the image.
+	Name *string `json:"name,omitempty"`
+
+	// Arch: architecture of the image.
+	// Default value: unknown_arch
+	Arch Arch `json:"arch,omitempty"`
+
+	// ExtraVolumes: additional snapshots of the image, with extra_volumeKey being the position of the snapshot in the image.
+	ExtraVolumes map[string]*VolumeImageUpdateTemplate `json:"extra_volumes,omitempty"`
+
+	// Tags: tags of the image.
+	Tags *[]string `json:"tags,omitempty"`
+
+	// Public: true to set the image as public.
+	Public *bool `json:"public,omitempty"`
+}
+
+// UpdateImageResponse: update image response.
+type UpdateImageResponse struct {
+	Image *Image `json:"image"`
+}
+
+// UpdatePlacementGroupRequest: update placement group request.
+type UpdatePlacementGroupRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// PlacementGroupID: UUID of the placement group.
+	PlacementGroupID string `json:"-"`
+
+	// Name: name of the placement group.
+	Name *string `json:"name,omitempty"`
+
+	// Tags: tags of the placement group.
+	Tags *[]string `json:"tags,omitempty"`
+
+	// PolicyMode: operating mode of the placement group.
+	// Default value: optional
+	PolicyMode *PlacementGroupPolicyMode `json:"policy_mode,omitempty"`
+
+	// PolicyType: policy type of the placement group.
+	// Default value: max_availability
+	PolicyType *PlacementGroupPolicyType `json:"policy_type,omitempty"`
+}
+
+// UpdatePlacementGroupResponse: update placement group response.
+type UpdatePlacementGroupResponse struct {
+	PlacementGroup *PlacementGroup `json:"placement_group"`
+}
+
+// UpdatePlacementGroupServersRequest: update placement group servers request.
+type UpdatePlacementGroupServersRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// PlacementGroupID: UUID of the placement group you want to update.
+	PlacementGroupID string `json:"-"`
+
+	// Servers: an array of the Instances' UUIDs you want to configure.
+	Servers []string `json:"servers,omitempty"`
+}
+
+// UpdatePlacementGroupServersResponse: update placement group servers response.
+type UpdatePlacementGroupServersResponse struct {
+	// Servers: instances attached to the placement group.
+	Servers []*PlacementGroupServer `json:"servers"`
+}
+
+// UpdatePrivateNICRequest: update private nic request.
+type UpdatePrivateNICRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: UUID of the Instance the private NIC will be attached to.
+	ServerID string `json:"-"`
+
+	// PrivateNicID: private NIC unique ID.
+	PrivateNicID string `json:"-"`
+
+	// Tags: tags used to select private NIC/s.
+	Tags *[]string `json:"tags,omitempty"`
+}
+
+// UpdateSecurityGroupRequest: update security group request.
+type UpdateSecurityGroupRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SecurityGroupID: UUID of the security group.
+	SecurityGroupID string `json:"-"`
+
+	// Name: name of the security group.
+	Name *string `json:"name,omitempty"`
+
+	// Description: description of the security group.
+	Description *string `json:"description,omitempty"`
+
+	// EnableDefaultSecurity: true to block SMTP on IPv4 and IPv6. This feature is read only, please open a support ticket if you need to make it configurable.
+	EnableDefaultSecurity *bool `json:"enable_default_security,omitempty"`
+
+	// InboundDefaultPolicy: default inbound policy.
+	// Default value: unknown_policy
+	InboundDefaultPolicy SecurityGroupPolicy `json:"inbound_default_policy,omitempty"`
+
+	// Tags: tags of the security group.
+	Tags *[]string `json:"tags,omitempty"`
+
+	// Deprecated: OrganizationDefault: please use project_default instead.
+	OrganizationDefault *bool `json:"organization_default,omitempty"`
+
+	// ProjectDefault: true use this security group for future Instances created in this project.
+	ProjectDefault *bool `json:"project_default,omitempty"`
+
+	// OutboundDefaultPolicy: default outbound policy.
+	// Default value: unknown_policy
+	OutboundDefaultPolicy SecurityGroupPolicy `json:"outbound_default_policy,omitempty"`
+
+	// Stateful: true to set the security group as stateful.
+	Stateful *bool `json:"stateful,omitempty"`
+}
+
+// UpdateSecurityGroupResponse: update security group response.
+type UpdateSecurityGroupResponse struct {
+	SecurityGroup *SecurityGroup `json:"security_group"`
+}
+
+// UpdateSecurityGroupRuleRequest: update security group rule request.
+type UpdateSecurityGroupRuleRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SecurityGroupID: UUID of the security group.
+	SecurityGroupID string `json:"-"`
+
+	// SecurityGroupRuleID: UUID of the rule.
+	SecurityGroupRuleID string `json:"-"`
+
+	// Protocol: protocol family this rule applies to.
+	// Default value: unknown_protocol
+	Protocol SecurityGroupRuleProtocol `json:"protocol,omitempty"`
+
+	// Direction: direction the rule applies to.
+	// Default value: unknown_direction
+	Direction SecurityGroupRuleDirection `json:"direction,omitempty"`
+
+	// Action: action to apply when the rule matches a packet.
+	// Default value: unknown_action
+	Action SecurityGroupRuleAction `json:"action,omitempty"`
+
+	// IPRange: range of IP addresses these rules apply to.
+	IPRange *scw.IPNet `json:"ip_range,omitempty"`
+
+	// DestPortFrom: beginning of the range of ports this rule applies to (inclusive). If 0 is provided, unset the parameter.
+	DestPortFrom *uint32 `json:"dest_port_from,omitempty"`
+
+	// DestPortTo: end of the range of ports this rule applies to (inclusive). If 0 is provided, unset the parameter.
+	DestPortTo *uint32 `json:"dest_port_to,omitempty"`
+
+	// Position: position of this rule in the security group rules list.
+	Position *uint32 `json:"position,omitempty"`
+}
+
+// UpdateSecurityGroupRuleResponse: update security group rule response.
+type UpdateSecurityGroupRuleResponse struct {
+	Rule *SecurityGroupRule `json:"rule"`
+}
+
+// UpdateServerRequest: update server request.
+type UpdateServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ServerID: UUID of the Instance.
+	ServerID string `json:"-"`
+
+	// Name: name of the Instance.
+	Name *string `json:"name,omitempty"`
+
+	// BootType: default value: local
+	BootType *BootType `json:"boot_type,omitempty"`
+
+	// Tags: tags of the Instance.
+	Tags *[]string `json:"tags,omitempty"`
+
+	Volumes *map[string]*VolumeServerTemplate `json:"volumes,omitempty"`
+
+	// Deprecated
+	Bootscript *string `json:"bootscript,omitempty"`
+
+	DynamicIPRequired *bool `json:"dynamic_ip_required,omitempty"`
+
+	// RoutedIPEnabled: true to configure the instance so it uses the new routed IP mode (once this is set to True you cannot set it back to False).
+	RoutedIPEnabled *bool `json:"routed_ip_enabled,omitempty"`
+
+	// PublicIPs: a list of reserved IP IDs to attach to the Instance.
+	PublicIPs *[]string `json:"public_ips,omitempty"`
+
+	EnableIPv6 *bool `json:"enable_ipv6,omitempty"`
+
+	Protected *bool `json:"protected,omitempty"`
+
+	SecurityGroup *SecurityGroupTemplate `json:"security_group,omitempty"`
+
+	// PlacementGroup: placement group ID if Instance must be part of a placement group.
+	PlacementGroup *NullableStringValue `json:"placement_group,omitempty"`
+
+	// PrivateNics: instance private NICs.
+	PrivateNics *[]string `json:"private_nics,omitempty"`
+
+	// CommercialType: warning: This field has some restrictions:
+	// - Cannot be changed if the Instance is not in `stopped` state.
+	// - Cannot be changed if the Instance is in a placement group.
+	// - Local storage requirements of the target commercial_types must be fulfilled (i.e. if an Instance has 80GB of local storage, it can be changed into a GP1-XS, which has a maximum of 150GB, but it cannot be changed into a DEV1-S, which has only 20GB).
+	CommercialType *string `json:"commercial_type,omitempty"`
+}
+
+// UpdateServerResponse: update server response.
+type UpdateServerResponse struct {
+	Server *Server `json:"server"`
+}
+
+// UpdateSnapshotRequest: update snapshot request.
+type UpdateSnapshotRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// SnapshotID: UUID of the snapshot.
+	SnapshotID string `json:"-"`
+
+	// Name: name of the snapshot.
+	Name *string `json:"name,omitempty"`
+
+	// Tags: tags of the snapshot.
+	Tags *[]string `json:"tags,omitempty"`
+}
+
+// UpdateSnapshotResponse: update snapshot response.
+type UpdateSnapshotResponse struct {
+	Snapshot *Snapshot `json:"snapshot"`
+}
+
+// UpdateVolumeRequest: update volume request.
+type UpdateVolumeRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// VolumeID: UUID of the volume.
+	VolumeID string `json:"-"`
+
+	// Name: volume name.
+	Name *string `json:"name,omitempty"`
+
+	// Tags: tags of the volume.
+	Tags *[]string `json:"tags,omitempty"`
+
+	// Size: volume disk size, must be a multiple of 512.
+	Size *scw.Size `json:"size,omitempty"`
+}
+
+// UpdateVolumeResponse: update volume response.
+type UpdateVolumeResponse struct {
+	Volume *Volume `json:"volume"`
+}
+
+// setImageResponse: set image response.
+type setImageResponse struct {
+	Image *Image `json:"image"`
+}
+
+// setSecurityGroupRequest: set security group request.
+type setSecurityGroupRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ID: UUID of the security group.
+	ID string `json:"-"`
+
+	// Name: name of the security group.
+	Name string `json:"name"`
+
+	// Tags: tags of the security group.
+	Tags *[]string `json:"tags,omitempty"`
+
+	// CreationDate: creation date of the security group (will be ignored).
+	CreationDate *time.Time `json:"creation_date,omitempty"`
+
+	// ModificationDate: modification date of the security group (will be ignored).
+	ModificationDate *time.Time `json:"modification_date,omitempty"`
+
+	// Description: description of the security group.
+	Description string `json:"description"`
+
+	// EnableDefaultSecurity: true to block SMTP on IPv4 and IPv6. This feature is read only, please open a support ticket if you need to make it configurable.
+	EnableDefaultSecurity bool `json:"enable_default_security"`
+
+	// InboundDefaultPolicy: default inbound policy.
+	// Default value: unknown_policy
+	InboundDefaultPolicy SecurityGroupPolicy `json:"inbound_default_policy"`
+
+	// OutboundDefaultPolicy: default outbound policy.
+	// Default value: unknown_policy
+	OutboundDefaultPolicy SecurityGroupPolicy `json:"outbound_default_policy"`
+
+	// Organization: security groups Organization ID.
+	Organization string `json:"organization"`
+
+	// Project: security group Project ID.
+	Project string `json:"project"`
+
+	// Deprecated: OrganizationDefault: please use project_default instead.
+	OrganizationDefault *bool `json:"organization_default,omitempty"`
+
+	// ProjectDefault: true use this security group for future Instances created in this project.
+	ProjectDefault bool `json:"project_default"`
+
+	// Servers: instances attached to this security group.
+	Servers []*ServerSummary `json:"servers"`
+
+	// Stateful: true to set the security group as stateful.
+	Stateful bool `json:"stateful"`
+}
+
+// setSecurityGroupResponse: set security group response.
+type setSecurityGroupResponse struct {
+	SecurityGroup *SecurityGroup `json:"security_group"`
+}
+
+// setSecurityGroupRuleRequest: set security group rule request.
+type setSecurityGroupRuleRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	SecurityGroupID string `json:"-"`
+
+	SecurityGroupRuleID string `json:"-"`
+
+	ID string `json:"id"`
+
+	// Protocol: default value: unknown_protocol
+	Protocol SecurityGroupRuleProtocol `json:"protocol"`
+
+	// Direction: default value: unknown_direction
+	Direction SecurityGroupRuleDirection `json:"direction"`
+
+	// Action: default value: unknown_action
+	Action SecurityGroupRuleAction `json:"action"`
+
+	IPRange scw.IPNet `json:"ip_range"`
+
+	DestPortFrom *uint32 `json:"dest_port_from,omitempty"`
+
+	DestPortTo *uint32 `json:"dest_port_to,omitempty"`
+
+	Position uint32 `json:"position"`
+
+	Editable bool `json:"editable"`
+}
+
+// setSecurityGroupRuleResponse: set security group rule response.
+type setSecurityGroupRuleResponse struct {
+	Rule *SecurityGroupRule `json:"rule"`
+}
+
+// setServerRequest: set server request.
+type setServerRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
+
+	// ID: instance unique ID.
+	ID string `json:"-"`
+
+	// Name: instance name.
+	Name string `json:"name"`
+
+	// Organization: instance Organization ID.
+	Organization string `json:"organization"`
+
+	// Project: instance Project ID.
+	Project string `json:"project"`
+
+	// AllowedActions: provide a list of allowed actions on the server.
+	AllowedActions []ServerAction `json:"allowed_actions"`
+
+	// Tags: tags associated with the Instance.
+	Tags *[]string `json:"tags,omitempty"`
+
+	// CommercialType: instance commercial type (eg. GP1-M).
+	CommercialType string `json:"commercial_type"`
+
+	// CreationDate: instance creation date.
+	CreationDate *time.Time `json:"creation_date,omitempty"`
+
+	// DynamicIPRequired: true if a dynamic IPv4 is required.
+	DynamicIPRequired bool `json:"dynamic_ip_required"`
+
+	// RoutedIPEnabled: true to configure the instance so it uses the new routed IP mode (once this is set to True you cannot set it back to False).
+	RoutedIPEnabled *bool `json:"routed_ip_enabled,omitempty"`
+
+	// EnableIPv6: true if IPv6 is enabled.
+	EnableIPv6 bool `json:"enable_ipv6"`
+
+	// Hostname: instance host name.
+	Hostname string `json:"hostname"`
+
+	// Image: provide information on the Instance image.
+	Image *Image `json:"image,omitempty"`
+
+	// Protected: instance protection option is activated.
+	Protected bool `json:"protected"`
+
+	// PrivateIP: instance private IP address.
+	PrivateIP *string `json:"private_ip,omitempty"`
+
+	// PublicIP: information about the public IP.
+	PublicIP *ServerIP `json:"public_ip,omitempty"`
+
+	// PublicIPs: information about all the public IPs attached to the server.
+	PublicIPs []*ServerIP `json:"public_ips"`
+
+	// ModificationDate: instance modification date.
+	ModificationDate *time.Time `json:"modification_date,omitempty"`
+
+	// State: instance state.
+	// Default value: running
+	State ServerState `json:"state"`
+
+	// Location: instance location.
+	Location *ServerLocation `json:"location,omitempty"`
+
+	// IPv6: instance IPv6 address.
+	IPv6 *ServerIPv6 `json:"ipv6,omitempty"`
+
+	// Deprecated: Bootscript: instance bootscript.
+	Bootscript *Bootscript `json:"bootscript,omitempty"`
+
+	// BootType: instance boot type.
+	// Default value: local
+	BootType BootType `json:"boot_type"`
+
+	// Volumes: instance volumes.
+	Volumes map[string]*Volume `json:"volumes"`
+
+	// SecurityGroup: instance security group.
+	SecurityGroup *SecurityGroupSummary `json:"security_group,omitempty"`
+
+	// Maintenances: instance planned maintenances.
+	Maintenances []*ServerMaintenance `json:"maintenances"`
+
+	// StateDetail: instance state_detail.
+	StateDetail string `json:"state_detail"`
+
+	// Arch: instance architecture (refers to the CPU architecture used for the Instance, e.g. x86_64, arm64).
+	// Default value: unknown_arch
+	Arch Arch `json:"arch"`
+
+	// PlacementGroup: instance placement group.
+	PlacementGroup *PlacementGroup `json:"placement_group,omitempty"`
+
+	// PrivateNics: instance private NICs.
+	PrivateNics []*PrivateNIC `json:"private_nics"`
+}
+
+// setServerResponse: set server response.
+type setServerResponse struct {
+	Server *Server `json:"server"`
 }
 
-type VolumeType struct {
-	DisplayName string `json:"display_name"`
+// setSnapshotRequest: set snapshot request.
+type setSnapshotRequest struct {
+	// Zone: zone to target. If none is passed will use default zone from the config.
+	Zone scw.Zone `json:"-"`
 
-	Capabilities *VolumeTypeCapabilities `json:"capabilities"`
+	SnapshotID string `json:"-"`
 
-	Constraints *VolumeTypeConstraints `json:"constraints"`
-}
+	ID string `json:"id"`
 
-type VolumeTypeCapabilities struct {
-	Snapshot bool `json:"snapshot"`
-}
+	Name string `json:"name"`
 
-type VolumeTypeConstraints struct {
-	Min scw.Size `json:"min"`
+	Organization string `json:"organization"`
 
-	Max scw.Size `json:"max"`
-}
+	// VolumeType: default value: l_ssd
+	VolumeType VolumeVolumeType `json:"volume_type"`
 
-// setImageResponse: set image response.
-type setImageResponse struct {
-	Image *Image `json:"image"`
-}
+	Size scw.Size `json:"size"`
 
-// setSecurityGroupResponse: set security group response.
-type setSecurityGroupResponse struct {
-	SecurityGroup *SecurityGroup `json:"security_group"`
-}
+	// State: default value: available
+	State SnapshotState `json:"state"`
 
-// setSecurityGroupRuleResponse: set security group rule response.
-type setSecurityGroupRuleResponse struct {
-	Rule *SecurityGroupRule `json:"rule"`
-}
+	BaseVolume *SnapshotBaseVolume `json:"base_volume,omitempty"`
 
-// setServerResponse: set server response.
-type setServerResponse struct {
-	Server *Server `json:"server"`
+	CreationDate *time.Time `json:"creation_date,omitempty"`
+
+	ModificationDate *time.Time `json:"modification_date,omitempty"`
+
+	Project string `json:"project"`
+
+	Tags *[]string `json:"tags,omitempty"`
 }
 
 // setSnapshotResponse: set snapshot response.
@@ -1835,25 +3895,22 @@ type setSnapshotResponse struct {
 	Snapshot *Snapshot `json:"snapshot"`
 }
 
-// Service API
+// Instance API.
+type API struct {
+	client *scw.Client
+}
 
-// Zones list localities the api is available in
+// NewAPI returns a API object from a Scaleway client.
+func NewAPI(client *scw.Client) *API {
+	return &API{
+		client: client,
+	}
+}
 func (s *API) Zones() []scw.Zone {
 	return []scw.Zone{scw.ZoneFrPar1, scw.ZoneFrPar2, scw.ZoneFrPar3, scw.ZoneNlAms1, scw.ZoneNlAms2, scw.ZoneNlAms3, scw.ZonePlWaw1, scw.ZonePlWaw2, scw.ZonePlWaw3}
 }
 
-type GetServerTypesAvailabilityRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
-	// Default value: 50
-	PerPage *uint32 `json:"-"`
-	// Page: a positive integer to choose the page to return.
-	Page *int32 `json:"-"`
-}
-
-// GetServerTypesAvailability: get availability.
-// Get availability for all Instance types.
+// GetServerTypesAvailability: Get availability for all Instance types.
 func (s *API) GetServerTypesAvailability(req *GetServerTypesAvailabilityRequest, opts ...scw.RequestOption) (*GetServerTypesAvailabilityResponse, error) {
 	var err error
 
@@ -1862,11 +3919,6 @@ func (s *API) GetServerTypesAvailability(req *GetServerTypesAvailabilityRequest,
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	parameter.AddToQuery(query, "per_page", req.PerPage)
 	parameter.AddToQuery(query, "page", req.Page)
@@ -1876,10 +3928,9 @@ func (s *API) GetServerTypesAvailability(req *GetServerTypesAvailabilityRequest,
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/products/servers/availability",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/products/servers/availability",
+		Query:  query,
 	}
 
 	var resp GetServerTypesAvailabilityResponse
@@ -1891,17 +3942,7 @@ func (s *API) GetServerTypesAvailability(req *GetServerTypesAvailabilityRequest,
 	return &resp, nil
 }
 
-type ListServersTypesRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	PerPage *uint32 `json:"-"`
-
-	Page *int32 `json:"-"`
-}
-
-// ListServersTypes: list Instance types.
-// List available Instance types and their technical details.
+// ListServersTypes: List available Instance types and their technical details.
 func (s *API) ListServersTypes(req *ListServersTypesRequest, opts ...scw.RequestOption) (*ListServersTypesResponse, error) {
 	var err error
 
@@ -1910,11 +3951,6 @@ func (s *API) ListServersTypes(req *ListServersTypesRequest, opts ...scw.Request
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	parameter.AddToQuery(query, "per_page", req.PerPage)
 	parameter.AddToQuery(query, "page", req.Page)
@@ -1924,10 +3960,9 @@ func (s *API) ListServersTypes(req *ListServersTypesRequest, opts ...scw.Request
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/products/servers",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/products/servers",
+		Query:  query,
 	}
 
 	var resp ListServersTypesResponse
@@ -1939,17 +3974,7 @@ func (s *API) ListServersTypes(req *ListServersTypesRequest, opts ...scw.Request
 	return &resp, nil
 }
 
-type ListVolumesTypesRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	PerPage *uint32 `json:"-"`
-
-	Page *int32 `json:"-"`
-}
-
-// ListVolumesTypes: list volume types.
-// List all volume types and their technical details.
+// ListVolumesTypes: List all volume types and their technical details.
 func (s *API) ListVolumesTypes(req *ListVolumesTypesRequest, opts ...scw.RequestOption) (*ListVolumesTypesResponse, error) {
 	var err error
 
@@ -1958,11 +3983,6 @@ func (s *API) ListVolumesTypes(req *ListVolumesTypesRequest, opts ...scw.Request
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	parameter.AddToQuery(query, "per_page", req.PerPage)
 	parameter.AddToQuery(query, "page", req.Page)
@@ -1972,10 +3992,9 @@ func (s *API) ListVolumesTypes(req *ListVolumesTypesRequest, opts ...scw.Request
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/products/volumes",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/products/volumes",
+		Query:  query,
 	}
 
 	var resp ListVolumesTypesResponse
@@ -1987,44 +4006,7 @@ func (s *API) ListVolumesTypes(req *ListVolumesTypesRequest, opts ...scw.Request
 	return &resp, nil
 }
 
-type ListServersRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
-	// Default value: 50
-	PerPage *uint32 `json:"-"`
-	// Page: a positive integer to choose the page to return.
-	Page *int32 `json:"-"`
-	// Organization: list only Instances of this Organization ID.
-	Organization *string `json:"-"`
-	// Project: list only Instances of this Project ID.
-	Project *string `json:"-"`
-	// Name: filter Instances by name (eg. "server1" will return "server100" and "server1" but not "foo").
-	Name *string `json:"-"`
-	// PrivateIP: list Instances by private_ip.
-	PrivateIP *net.IP `json:"-"`
-	// WithoutIP: list Instances that are not attached to a public IP.
-	WithoutIP *bool `json:"-"`
-	// CommercialType: list Instances of this commercial type.
-	CommercialType *string `json:"-"`
-	// State: list Instances in this state.
-	// Default value: running
-	State *ServerState `json:"-"`
-	// Tags: list Instances with these exact tags (to filter with several tags, use commas to separate them).
-	Tags []string `json:"-"`
-	// PrivateNetwork: list Instances in this Private Network.
-	PrivateNetwork *string `json:"-"`
-	// Order: define the order of the returned servers.
-	// Default value: creation_date_desc
-	Order ListServersRequestOrder `json:"-"`
-	// PrivateNetworks: list Instances from the given Private Networks (use commas to separate them).
-	PrivateNetworks []string `json:"-"`
-	// PrivateNicMacAddress: list Instances associated with the given private NIC MAC address.
-	PrivateNicMacAddress *string `json:"-"`
-}
-
-// ListServers: list all Instances.
-// List all Instances in a specified Availability Zone, e.g. `fr-par-1`.
+// ListServers: List all Instances in a specified Availability Zone, e.g. `fr-par-1`.
 func (s *API) ListServers(req *ListServersRequest, opts ...scw.RequestOption) (*ListServersResponse, error) {
 	var err error
 
@@ -2033,11 +4015,6 @@ func (s *API) ListServers(req *ListServersRequest, opts ...scw.RequestOption) (*
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	parameter.AddToQuery(query, "per_page", req.PerPage)
 	parameter.AddToQuery(query, "page", req.Page)
@@ -2057,16 +4034,18 @@ func (s *API) ListServers(req *ListServersRequest, opts ...scw.RequestOption) (*
 		parameter.AddToQuery(query, "private_networks", strings.Join(req.PrivateNetworks, ","))
 	}
 	parameter.AddToQuery(query, "private_nic_mac_address", req.PrivateNicMacAddress)
+	if len(req.Servers) != 0 {
+		parameter.AddToQuery(query, "servers", strings.Join(req.Servers, ","))
+	}
 
 	if fmt.Sprint(req.Zone) == "" {
 		return nil, errors.New("field Zone cannot be empty in request")
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers",
+		Query:  query,
 	}
 
 	var resp ListServersResponse
@@ -2078,67 +4057,26 @@ func (s *API) ListServers(req *ListServersRequest, opts ...scw.RequestOption) (*
 	return &resp, nil
 }
 
-type CreateServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Name: instance name.
-	Name string `json:"name,omitempty"`
-	// DynamicIPRequired: define if a dynamic IPv4 is required for the Instance.
-	DynamicIPRequired *bool `json:"dynamic_ip_required,omitempty"`
-	// RoutedIPEnabled: if true, configure the Instance so it uses the new routed IP mode.
-	RoutedIPEnabled *bool `json:"routed_ip_enabled,omitempty"`
-	// CommercialType: define the Instance commercial type (i.e. GP1-S).
-	CommercialType string `json:"commercial_type,omitempty"`
-	// Image: instance image ID or label.
-	Image string `json:"image,omitempty"`
-	// Volumes: volumes attached to the server.
-	Volumes map[string]*VolumeServerTemplate `json:"volumes,omitempty"`
-	// EnableIPv6: true if IPv6 is enabled on the server.
-	EnableIPv6 bool `json:"enable_ipv6,omitempty"`
-	// PublicIP: ID of the reserved IP to attach to the Instance.
-	PublicIP *string `json:"public_ip,omitempty"`
-	// PublicIPs: a list of reserved IP IDs to attach to the Instance.
-	PublicIPs *[]string `json:"public_ips,omitempty"`
-	// BootType: boot type to use.
-	// Default value: local
-	BootType *BootType `json:"boot_type,omitempty"`
-	// Deprecated: Bootscript: bootscript ID to use when `boot_type` is set to `bootscript`.
-	Bootscript *string `json:"bootscript,omitempty"`
-	// Deprecated: Organization: instance Organization ID.
-	// Precisely one of Organization, Project must be set.
-	Organization *string `json:"organization,omitempty"`
-	// Project: instance Project ID.
-	// Precisely one of Organization, Project must be set.
-	Project *string `json:"project,omitempty"`
-	// Tags: instance tags.
-	Tags []string `json:"tags,omitempty"`
-	// SecurityGroup: security group ID.
-	SecurityGroup *string `json:"security_group,omitempty"`
-	// PlacementGroup: placement group ID if Instance must be part of a placement group.
-	PlacementGroup *string `json:"placement_group,omitempty"`
-}
-
-// createServer: create an Instance.
-// Create a new Instance of the specified commercial type in the specified zone. Pay attention to the volumes parameter, which takes an object which can be used in different ways to achieve different behaviors.
+// createServer: Create a new Instance of the specified commercial type in the specified zone. Pay attention to the volumes parameter, which takes an object which can be used in different ways to achieve different behaviors.
 // Get more information in the [Technical Information](#technical-information) section of the introduction.
 func (s *API) createServer(req *CreateServerRequest, opts ...scw.RequestOption) (*CreateServerResponse, error) {
 	var err error
 
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
 	defaultProject, exist := s.client.GetDefaultProjectID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Project = &defaultProject
 	}
 
 	defaultOrganization, exist := s.client.GetDefaultOrganizationID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Organization = &defaultOrganization
 	}
 
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-
 	if req.Name == "" {
 		req.Name = namegenerator.GetRandomName("srv")
 	}
@@ -2148,9 +4086,8 @@ func (s *API) createServer(req *CreateServerRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers",
 	}
 
 	err = scwReq.SetBody(req)
@@ -2167,15 +4104,7 @@ func (s *API) createServer(req *CreateServerRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type DeleteServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	ServerID string `json:"-"`
-}
-
-// DeleteServer: delete an Instance.
-// Delete the Instance with the specified ID.
+// DeleteServer: Delete the Instance with the specified ID.
 func (s *API) DeleteServer(req *DeleteServerRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -2193,9 +4122,8 @@ func (s *API) DeleteServer(req *DeleteServerRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
 	}
 
 	err = s.client.Do(scwReq, nil, opts...)
@@ -2205,15 +4133,7 @@ func (s *API) DeleteServer(req *DeleteServerRequest, opts ...scw.RequestOption)
 	return nil
 }
 
-type GetServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: UUID of the Instance you want to get.
-	ServerID string `json:"-"`
-}
-
-// GetServer: get an Instance.
-// Get the details of a specified Instance.
+// GetServer: Get the details of a specified Instance.
 func (s *API) GetServer(req *GetServerRequest, opts ...scw.RequestOption) (*GetServerResponse, error) {
 	var err error
 
@@ -2231,94 +4151,26 @@ func (s *API) GetServer(req *GetServerRequest, opts ...scw.RequestOption) (*GetS
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
 	}
 
 	var resp GetServerResponse
 
 	err = s.client.Do(scwReq, &resp, opts...)
 	if err != nil {
-		return nil, err
-	}
-	return &resp, nil
-}
-
-type setServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ID: instance unique ID.
-	ID string `json:"-"`
-	// Name: instance name.
-	Name string `json:"name"`
-	// Organization: instance Organization ID.
-	Organization string `json:"organization"`
-	// Project: instance Project ID.
-	Project string `json:"project"`
-	// AllowedActions: provide a list of allowed actions on the server.
-	AllowedActions []ServerAction `json:"allowed_actions"`
-	// Tags: tags associated with the Instance.
-	Tags *[]string `json:"tags"`
-	// CommercialType: instance commercial type (eg. GP1-M).
-	CommercialType string `json:"commercial_type"`
-	// CreationDate: instance creation date.
-	CreationDate *time.Time `json:"creation_date"`
-	// DynamicIPRequired: true if a dynamic IPv4 is required.
-	DynamicIPRequired bool `json:"dynamic_ip_required"`
-	// RoutedIPEnabled: true to configure the instance so it uses the new routed IP mode (once this is set to True you cannot set it back to False).
-	RoutedIPEnabled *bool `json:"routed_ip_enabled"`
-	// EnableIPv6: true if IPv6 is enabled.
-	EnableIPv6 bool `json:"enable_ipv6"`
-	// Hostname: instance host name.
-	Hostname string `json:"hostname"`
-	// Image: provide information on the Instance image.
-	Image *Image `json:"image"`
-	// Protected: instance protection option is activated.
-	Protected bool `json:"protected"`
-	// PrivateIP: instance private IP address.
-	PrivateIP *string `json:"private_ip"`
-	// PublicIP: information about the public IP.
-	PublicIP *ServerIP `json:"public_ip"`
-	// PublicIPs: information about all the public IPs attached to the server.
-	PublicIPs []*ServerIP `json:"public_ips"`
-	// ModificationDate: instance modification date.
-	ModificationDate *time.Time `json:"modification_date"`
-	// State: instance state.
-	// Default value: running
-	State ServerState `json:"state"`
-	// Location: instance location.
-	Location *ServerLocation `json:"location"`
-	// IPv6: instance IPv6 address.
-	IPv6 *ServerIPv6 `json:"ipv6"`
-	// Deprecated: Bootscript: instance bootscript.
-	Bootscript *Bootscript `json:"bootscript"`
-	// BootType: instance boot type.
-	// Default value: local
-	BootType BootType `json:"boot_type"`
-	// Volumes: instance volumes.
-	Volumes map[string]*Volume `json:"volumes"`
-	// SecurityGroup: instance security group.
-	SecurityGroup *SecurityGroupSummary `json:"security_group"`
-	// Maintenances: instance planned maintenances.
-	Maintenances []*ServerMaintenance `json:"maintenances"`
-	// StateDetail: instance state_detail.
-	StateDetail string `json:"state_detail"`
-	// Arch: instance architecture (refers to the CPU architecture used for the Instance, e.g. x86_64, arm64).
-	// Default value: x86_64
-	Arch Arch `json:"arch"`
-	// PlacementGroup: instance placement group.
-	PlacementGroup *PlacementGroup `json:"placement_group"`
-	// PrivateNics: instance private NICs.
-	PrivateNics []*PrivateNIC `json:"private_nics"`
+		return nil, err
+	}
+	return &resp, nil
 }
 
+// setServer:
 func (s *API) setServer(req *setServerRequest, opts ...scw.RequestOption) (*setServerResponse, error) {
 	var err error
 
-	if req.Project == "" {
-		defaultProject, _ := s.client.GetDefaultProjectID()
-		req.Project = defaultProject
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
 	}
 
 	if req.Organization == "" {
@@ -2326,9 +4178,9 @@ func (s *API) setServer(req *setServerRequest, opts ...scw.RequestOption) (*setS
 		req.Organization = defaultOrganization
 	}
 
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
+	if req.Project == "" {
+		defaultProject, _ := s.client.GetDefaultProjectID()
+		req.Project = defaultProject
 	}
 
 	if fmt.Sprint(req.Zone) == "" {
@@ -2340,9 +4192,8 @@ func (s *API) setServer(req *setServerRequest, opts ...scw.RequestOption) (*setS
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PUT",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ID) + "",
-		Headers: http.Header{},
+		Method: "PUT",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -2359,47 +4210,7 @@ func (s *API) setServer(req *setServerRequest, opts ...scw.RequestOption) (*setS
 	return &resp, nil
 }
 
-type UpdateServerRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: UUID of the Instance.
-	ServerID string `json:"-"`
-	// Name: name of the Instance.
-	Name *string `json:"name,omitempty"`
-	// BootType: default value: local
-	BootType *BootType `json:"boot_type,omitempty"`
-	// Tags: tags of the Instance.
-	Tags *[]string `json:"tags,omitempty"`
-
-	Volumes *map[string]*VolumeServerTemplate `json:"volumes,omitempty"`
-	// Deprecated
-	Bootscript *string `json:"bootscript,omitempty"`
-
-	DynamicIPRequired *bool `json:"dynamic_ip_required,omitempty"`
-	// RoutedIPEnabled: true to configure the instance so it uses the new routed IP mode (once this is set to True you cannot set it back to False).
-	RoutedIPEnabled *bool `json:"routed_ip_enabled,omitempty"`
-
-	PublicIPs []*ServerIP `json:"public_ips,omitempty"`
-
-	EnableIPv6 *bool `json:"enable_ipv6,omitempty"`
-
-	Protected *bool `json:"protected,omitempty"`
-
-	SecurityGroup *SecurityGroupTemplate `json:"security_group,omitempty"`
-	// PlacementGroup: placement group ID if Instance must be part of a placement group.
-	PlacementGroup *NullableStringValue `json:"placement_group,omitempty"`
-	// PrivateNics: instance private NICs.
-	PrivateNics []*PrivateNIC `json:"private_nics,omitempty"`
-	// CommercialType: set the commercial_type for this Instance.
-	// Warning: This field has some restrictions:
-	// - Cannot be changed if the Instance is not in `stopped` state.
-	// - Cannot be changed if the Instance is in a placement group.
-	// - Local storage requirements of the target commercial_types must be fulfilled (i.e. if an Instance has 80GB of local storage, it can be changed into a GP1-XS, which has a maximum of 150GB, but it cannot be changed into a DEV1-S, which has only 20GB).
-	CommercialType *string `json:"commercial_type,omitempty"`
-}
-
-// updateServer: update an Instance.
-// Update the Instance information, such as name, boot mode, or tags.
+// updateServer: Update the Instance information, such as name, boot mode, or tags.
 func (s *API) updateServer(req *UpdateServerRequest, opts ...scw.RequestOption) (*UpdateServerResponse, error) {
 	var err error
 
@@ -2417,9 +4228,8 @@ func (s *API) updateServer(req *UpdateServerRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PATCH",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
-		Headers: http.Header{},
+		Method: "PATCH",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -2436,15 +4246,7 @@ func (s *API) updateServer(req *UpdateServerRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type ListServerActionsRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	ServerID string `json:"-"`
-}
-
-// ListServerActions: list Instance actions.
-// List all actions (e.g. power on, power off, reboot) that can currently be performed on an Instance.
+// ListServerActions: List all actions (e.g. power on, power off, reboot) that can currently be performed on an Instance.
 func (s *API) ListServerActions(req *ListServerActionsRequest, opts ...scw.RequestOption) (*ListServerActionsResponse, error) {
 	var err error
 
@@ -2462,9 +4264,8 @@ func (s *API) ListServerActions(req *ListServerActionsRequest, opts ...scw.Reque
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/action",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/action",
 	}
 
 	var resp ListServerActionsResponse
@@ -2476,26 +4277,7 @@ func (s *API) ListServerActions(req *ListServerActionsRequest, opts ...scw.Reque
 	return &resp, nil
 }
 
-type ServerActionRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: UUID of the Instance.
-	ServerID string `json:"-"`
-	// Action: action to perform on the Instance.
-	// Default value: poweron
-	Action ServerAction `json:"action"`
-	// Name: name of the backup you want to create.
-	// Name of the backup you want to create.
-	// This field should only be specified when performing a backup action.
-	Name *string `json:"name,omitempty"`
-	// Volumes: for each volume UUID, the snapshot parameters of the volume.
-	// For each volume UUID, the snapshot parameters of the volume.
-	// This field should only be specified when performing a backup action.
-	Volumes map[string]*ServerActionRequestVolumeBackupTemplate `json:"volumes,omitempty"`
-}
-
-// ServerAction: perform action.
-// Perform an action on an Instance.
+// ServerAction: Perform an action on an Instance.
 // Available actions are:
 // * `poweron`: Start a stopped Instance.
 // * `poweroff`: Fully stop the Instance and release the hypervisor slot.
@@ -2525,9 +4307,8 @@ func (s *API) ServerAction(req *ServerActionRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/action",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/action",
 	}
 
 	err = scwReq.SetBody(req)
@@ -2544,15 +4325,7 @@ func (s *API) ServerAction(req *ServerActionRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type ListServerUserDataRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: UUID of the Instance.
-	ServerID string `json:"-"`
-}
-
-// ListServerUserData: list user data.
-// List all user data keys registered on a specified Instance.
+// ListServerUserData: List all user data keys registered on a specified Instance.
 func (s *API) ListServerUserData(req *ListServerUserDataRequest, opts ...scw.RequestOption) (*ListServerUserDataResponse, error) {
 	var err error
 
@@ -2570,9 +4343,8 @@ func (s *API) ListServerUserData(req *ListServerUserDataRequest, opts ...scw.Req
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/user_data",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/user_data",
 	}
 
 	var resp ListServerUserDataResponse
@@ -2584,17 +4356,7 @@ func (s *API) ListServerUserData(req *ListServerUserDataRequest, opts ...scw.Req
 	return &resp, nil
 }
 
-type DeleteServerUserDataRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: UUID of the Instance.
-	ServerID string `json:"-"`
-	// Key: key of the user data to delete.
-	Key string `json:"-"`
-}
-
-// DeleteServerUserData: delete user data.
-// Delete the specified key from an Instance's user data.
+// DeleteServerUserData: Delete the specified key from an Instance's user data.
 func (s *API) DeleteServerUserData(req *DeleteServerUserDataRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -2616,9 +4378,8 @@ func (s *API) DeleteServerUserData(req *DeleteServerUserDataRequest, opts ...scw
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/user_data/" + fmt.Sprint(req.Key) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/user_data/" + fmt.Sprint(req.Key) + "",
 	}
 
 	err = s.client.Do(scwReq, nil, opts...)
@@ -2628,30 +4389,44 @@ func (s *API) DeleteServerUserData(req *DeleteServerUserDataRequest, opts ...scw
 	return nil
 }
 
-type ListImagesRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	Organization *string `json:"-"`
+// AttachServerVolume:
+func (s *API) AttachServerVolume(req *AttachServerVolumeRequest, opts ...scw.RequestOption) (*AttachServerVolumeResponse, error) {
+	var err error
 
-	PerPage *uint32 `json:"-"`
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
 
-	Page *int32 `json:"-"`
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
 
-	Name *string `json:"-"`
+	if fmt.Sprint(req.ServerID) == "" {
+		return nil, errors.New("field ServerID cannot be empty in request")
+	}
 
-	Public *bool `json:"-"`
+	scwReq := &scw.ScalewayRequest{
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/attach-volume",
+	}
 
-	Arch *string `json:"-"`
+	err = scwReq.SetBody(req)
+	if err != nil {
+		return nil, err
+	}
 
-	Project *string `json:"-"`
+	var resp AttachServerVolumeResponse
 
-	Tags *string `json:"-"`
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
 }
 
-// ListImages: list Instance images.
-// List all existing Instance images.
-func (s *API) ListImages(req *ListImagesRequest, opts ...scw.RequestOption) (*ListImagesResponse, error) {
+// DetachServerVolume:
+func (s *API) DetachServerVolume(req *DetachServerVolumeRequest, opts ...scw.RequestOption) (*DetachServerVolumeResponse, error) {
 	var err error
 
 	if req.Zone == "" {
@@ -2659,9 +4434,40 @@ func (s *API) ListImages(req *ListImagesRequest, opts ...scw.RequestOption) (*Li
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	if fmt.Sprint(req.ServerID) == "" {
+		return nil, errors.New("field ServerID cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/detach-volume",
+	}
+
+	err = scwReq.SetBody(req)
+	if err != nil {
+		return nil, err
+	}
+
+	var resp DetachServerVolumeResponse
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
+}
+
+// ListImages: List all existing Instance images.
+func (s *API) ListImages(req *ListImagesRequest, opts ...scw.RequestOption) (*ListImagesResponse, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
 	}
 
 	query := url.Values{}
@@ -2679,10 +4485,9 @@ func (s *API) ListImages(req *ListImagesRequest, opts ...scw.RequestOption) (*Li
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images",
+		Query:  query,
 	}
 
 	var resp ListImagesResponse
@@ -2694,15 +4499,7 @@ func (s *API) ListImages(req *ListImagesRequest, opts ...scw.RequestOption) (*Li
 	return &resp, nil
 }
 
-type GetImageRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ImageID: UUID of the image you want to get.
-	ImageID string `json:"-"`
-}
-
-// GetImage: get an Instance image.
-// Get details of an image with the specified ID.
+// GetImage: Get details of an image with the specified ID.
 func (s *API) GetImage(req *GetImageRequest, opts ...scw.RequestOption) (*GetImageResponse, error) {
 	var err error
 
@@ -2720,9 +4517,8 @@ func (s *API) GetImage(req *GetImageRequest, opts ...scw.RequestOption) (*GetIma
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images/" + fmt.Sprint(req.ImageID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images/" + fmt.Sprint(req.ImageID) + "",
 	}
 
 	var resp GetImageResponse
@@ -2734,52 +4530,25 @@ func (s *API) GetImage(req *GetImageRequest, opts ...scw.RequestOption) (*GetIma
 	return &resp, nil
 }
 
-type CreateImageRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Name: name of the image.
-	Name string `json:"name,omitempty"`
-	// RootVolume: UUID of the snapshot.
-	RootVolume string `json:"root_volume,omitempty"`
-	// Arch: architecture of the image.
-	// Default value: x86_64
-	Arch Arch `json:"arch"`
-	// Deprecated: DefaultBootscript: default bootscript of the image.
-	DefaultBootscript *string `json:"default_bootscript,omitempty"`
-	// ExtraVolumes: additional volumes of the image.
-	ExtraVolumes map[string]*VolumeTemplate `json:"extra_volumes,omitempty"`
-	// Deprecated: Organization: organization ID of the image.
-	// Precisely one of Organization, Project must be set.
-	Organization *string `json:"organization,omitempty"`
-	// Project: project ID of the image.
-	// Precisely one of Organization, Project must be set.
-	Project *string `json:"project,omitempty"`
-	// Tags: tags of the image.
-	Tags []string `json:"tags,omitempty"`
-	// Public: true to create a public image.
-	Public *bool `json:"public,omitempty"`
-}
-
-// CreateImage: create an Instance image.
-// Create an Instance image from the specified snapshot ID.
+// CreateImage: Create an Instance image from the specified snapshot ID.
 func (s *API) CreateImage(req *CreateImageRequest, opts ...scw.RequestOption) (*CreateImageResponse, error) {
 	var err error
 
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
 	defaultProject, exist := s.client.GetDefaultProjectID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Project = &defaultProject
 	}
 
 	defaultOrganization, exist := s.client.GetDefaultOrganizationID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Organization = &defaultOrganization
 	}
 
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-
 	if req.Name == "" {
 		req.Name = namegenerator.GetRandomName("img")
 	}
@@ -2789,9 +4558,8 @@ func (s *API) CreateImage(req *CreateImageRequest, opts ...scw.RequestOption) (*
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images",
 	}
 
 	err = scwReq.SetBody(req)
@@ -2808,54 +4576,56 @@ func (s *API) CreateImage(req *CreateImageRequest, opts ...scw.RequestOption) (*
 	return &resp, nil
 }
 
-type SetImageRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	ID string `json:"-"`
-
-	Name string `json:"name"`
-	// Arch: default value: x86_64
-	Arch Arch `json:"arch"`
+// setImage: Replace all image properties with an image message.
+func (s *API) setImage(req *SetImageRequest, opts ...scw.RequestOption) (*setImageResponse, error) {
+	var err error
 
-	CreationDate *time.Time `json:"creation_date"`
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
 
-	ModificationDate *time.Time `json:"modification_date"`
-	// Deprecated
-	DefaultBootscript *Bootscript `json:"default_bootscript"`
+	if req.Organization == "" {
+		defaultOrganization, _ := s.client.GetDefaultOrganizationID()
+		req.Organization = defaultOrganization
+	}
 
-	ExtraVolumes map[string]*Volume `json:"extra_volumes"`
+	if req.Project == "" {
+		defaultProject, _ := s.client.GetDefaultProjectID()
+		req.Project = defaultProject
+	}
 
-	FromServer string `json:"from_server"`
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
 
-	Organization string `json:"organization"`
+	if fmt.Sprint(req.ID) == "" {
+		return nil, errors.New("field ID cannot be empty in request")
+	}
 
-	Public bool `json:"public"`
+	scwReq := &scw.ScalewayRequest{
+		Method: "PUT",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images/" + fmt.Sprint(req.ID) + "",
+	}
 
-	RootVolume *VolumeSummary `json:"root_volume"`
-	// State: default value: available
-	State ImageState `json:"state"`
+	err = scwReq.SetBody(req)
+	if err != nil {
+		return nil, err
+	}
 
-	Project string `json:"project"`
+	var resp setImageResponse
 
-	Tags *[]string `json:"tags"`
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
 }
 
-// setImage: update image.
-// Replace all image properties with an image message.
-func (s *API) setImage(req *SetImageRequest, opts ...scw.RequestOption) (*setImageResponse, error) {
+// UpdateImage: Update the properties of an image.
+func (s *API) UpdateImage(req *UpdateImageRequest, opts ...scw.RequestOption) (*UpdateImageResponse, error) {
 	var err error
 
-	if req.Project == "" {
-		defaultProject, _ := s.client.GetDefaultProjectID()
-		req.Project = defaultProject
-	}
-
-	if req.Organization == "" {
-		defaultOrganization, _ := s.client.GetDefaultOrganizationID()
-		req.Organization = defaultOrganization
-	}
-
 	if req.Zone == "" {
 		defaultZone, _ := s.client.GetDefaultZone()
 		req.Zone = defaultZone
@@ -2865,14 +4635,13 @@ func (s *API) setImage(req *SetImageRequest, opts ...scw.RequestOption) (*setIma
 		return nil, errors.New("field Zone cannot be empty in request")
 	}
 
-	if fmt.Sprint(req.ID) == "" {
-		return nil, errors.New("field ID cannot be empty in request")
+	if fmt.Sprint(req.ImageID) == "" {
+		return nil, errors.New("field ImageID cannot be empty in request")
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PUT",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images/" + fmt.Sprint(req.ID) + "",
-		Headers: http.Header{},
+		Method: "PATCH",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images/" + fmt.Sprint(req.ImageID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -2880,7 +4649,7 @@ func (s *API) setImage(req *SetImageRequest, opts ...scw.RequestOption) (*setIma
 		return nil, err
 	}
 
-	var resp setImageResponse
+	var resp UpdateImageResponse
 
 	err = s.client.Do(scwReq, &resp, opts...)
 	if err != nil {
@@ -2889,15 +4658,7 @@ func (s *API) setImage(req *SetImageRequest, opts ...scw.RequestOption) (*setIma
 	return &resp, nil
 }
 
-type DeleteImageRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ImageID: UUID of the image you want to delete.
-	ImageID string `json:"-"`
-}
-
-// DeleteImage: delete an Instance image.
-// Delete the image with the specified ID.
+// DeleteImage: Delete the image with the specified ID.
 func (s *API) DeleteImage(req *DeleteImageRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -2915,9 +4676,8 @@ func (s *API) DeleteImage(req *DeleteImageRequest, opts ...scw.RequestOption) er
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images/" + fmt.Sprint(req.ImageID) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/images/" + fmt.Sprint(req.ImageID) + "",
 	}
 
 	err = s.client.Do(scwReq, nil, opts...)
@@ -2927,25 +4687,7 @@ func (s *API) DeleteImage(req *DeleteImageRequest, opts ...scw.RequestOption) er
 	return nil
 }
 
-type ListSnapshotsRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	Organization *string `json:"-"`
-
-	PerPage *uint32 `json:"-"`
-
-	Page *int32 `json:"-"`
-
-	Name *string `json:"-"`
-
-	Project *string `json:"-"`
-
-	Tags *string `json:"-"`
-}
-
-// ListSnapshots: list snapshots.
-// List all snapshots of an Organization in a specified Availability Zone.
+// ListSnapshots: List all snapshots of an Organization in a specified Availability Zone.
 func (s *API) ListSnapshots(req *ListSnapshotsRequest, opts ...scw.RequestOption) (*ListSnapshotsResponse, error) {
 	var err error
 
@@ -2954,28 +4696,23 @@ func (s *API) ListSnapshots(req *ListSnapshotsRequest, opts ...scw.RequestOption
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	parameter.AddToQuery(query, "organization", req.Organization)
+	parameter.AddToQuery(query, "project", req.Project)
 	parameter.AddToQuery(query, "per_page", req.PerPage)
 	parameter.AddToQuery(query, "page", req.Page)
 	parameter.AddToQuery(query, "name", req.Name)
-	parameter.AddToQuery(query, "project", req.Project)
 	parameter.AddToQuery(query, "tags", req.Tags)
+	parameter.AddToQuery(query, "base_volume_id", req.BaseVolumeID)
 
 	if fmt.Sprint(req.Zone) == "" {
 		return nil, errors.New("field Zone cannot be empty in request")
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots",
+		Query:  query,
 	}
 
 	var resp ListSnapshotsResponse
@@ -2987,54 +4724,25 @@ func (s *API) ListSnapshots(req *ListSnapshotsRequest, opts ...scw.RequestOption
 	return &resp, nil
 }
 
-type CreateSnapshotRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Name: name of the snapshot.
-	Name string `json:"name,omitempty"`
-	// VolumeID: UUID of the volume.
-	VolumeID *string `json:"volume_id,omitempty"`
-	// Tags: tags of the snapshot.
-	Tags *[]string `json:"tags,omitempty"`
-	// Deprecated: Organization: organization ID of the snapshot.
-	// Precisely one of Organization, Project must be set.
-	Organization *string `json:"organization,omitempty"`
-	// Project: project ID of the snapshot.
-	// Precisely one of Organization, Project must be set.
-	Project *string `json:"project,omitempty"`
-	// VolumeType: volume type of the snapshot.
-	// Overrides the volume_type of the snapshot.
-	// If omitted, the volume type of the original volume will be used.
-	// Default value: unknown_volume_type
-	VolumeType SnapshotVolumeType `json:"volume_type"`
-	// Bucket: bucket name for snapshot imports.
-	Bucket *string `json:"bucket,omitempty"`
-	// Key: object key for snapshot imports.
-	Key *string `json:"key,omitempty"`
-	// Size: imported snapshot size, must be a multiple of 512.
-	Size *scw.Size `json:"size,omitempty"`
-}
-
-// CreateSnapshot: create a snapshot from a specified volume or from a QCOW2 file.
-// Create a snapshot from a specified volume or from a QCOW2 file in a specified Availability Zone.
+// CreateSnapshot: Create a snapshot from a specified volume or from a QCOW2 file in a specified Availability Zone.
 func (s *API) CreateSnapshot(req *CreateSnapshotRequest, opts ...scw.RequestOption) (*CreateSnapshotResponse, error) {
 	var err error
 
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
 	defaultProject, exist := s.client.GetDefaultProjectID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Project = &defaultProject
 	}
 
 	defaultOrganization, exist := s.client.GetDefaultOrganizationID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Organization = &defaultOrganization
 	}
 
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-
 	if req.Name == "" {
 		req.Name = namegenerator.GetRandomName("snp")
 	}
@@ -3044,9 +4752,8 @@ func (s *API) CreateSnapshot(req *CreateSnapshotRequest, opts ...scw.RequestOpti
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots",
 	}
 
 	err = scwReq.SetBody(req)
@@ -3063,15 +4770,7 @@ func (s *API) CreateSnapshot(req *CreateSnapshotRequest, opts ...scw.RequestOpti
 	return &resp, nil
 }
 
-type GetSnapshotRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// SnapshotID: UUID of the snapshot you want to get.
-	SnapshotID string `json:"-"`
-}
-
-// GetSnapshot: get a snapshot.
-// Get details of a snapshot with the specified ID.
+// GetSnapshot: Get details of a snapshot with the specified ID.
 func (s *API) GetSnapshot(req *GetSnapshotRequest, opts ...scw.RequestOption) (*GetSnapshotResponse, error) {
 	var err error
 
@@ -3089,9 +4788,8 @@ func (s *API) GetSnapshot(req *GetSnapshotRequest, opts ...scw.RequestOption) (*
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "",
 	}
 
 	var resp GetSnapshotResponse
@@ -3103,50 +4801,56 @@ func (s *API) GetSnapshot(req *GetSnapshotRequest, opts ...scw.RequestOption) (*
 	return &resp, nil
 }
 
-type setSnapshotRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	SnapshotID string `json:"-"`
+// setSnapshot: Replace all the properties of a snapshot.
+func (s *API) setSnapshot(req *setSnapshotRequest, opts ...scw.RequestOption) (*setSnapshotResponse, error) {
+	var err error
 
-	ID string `json:"id"`
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
 
-	Name string `json:"name"`
+	if req.Organization == "" {
+		defaultOrganization, _ := s.client.GetDefaultOrganizationID()
+		req.Organization = defaultOrganization
+	}
 
-	Organization string `json:"organization"`
-	// VolumeType: default value: l_ssd
-	VolumeType VolumeVolumeType `json:"volume_type"`
+	if req.Project == "" {
+		defaultProject, _ := s.client.GetDefaultProjectID()
+		req.Project = defaultProject
+	}
 
-	Size scw.Size `json:"size"`
-	// State: default value: available
-	State SnapshotState `json:"state"`
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
 
-	BaseVolume *SnapshotBaseVolume `json:"base_volume"`
+	if fmt.Sprint(req.SnapshotID) == "" {
+		return nil, errors.New("field SnapshotID cannot be empty in request")
+	}
 
-	CreationDate *time.Time `json:"creation_date"`
+	scwReq := &scw.ScalewayRequest{
+		Method: "PUT",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "",
+	}
 
-	ModificationDate *time.Time `json:"modification_date"`
+	err = scwReq.SetBody(req)
+	if err != nil {
+		return nil, err
+	}
 
-	Project string `json:"project"`
+	var resp setSnapshotResponse
 
-	Tags *[]string `json:"tags"`
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
 }
 
-// setSnapshot: update snapshot.
-// Replace all snapshot properties with a snapshot message.
-func (s *API) setSnapshot(req *setSnapshotRequest, opts ...scw.RequestOption) (*setSnapshotResponse, error) {
+// UpdateSnapshot: Update the properties of a snapshot.
+func (s *API) UpdateSnapshot(req *UpdateSnapshotRequest, opts ...scw.RequestOption) (*UpdateSnapshotResponse, error) {
 	var err error
 
-	if req.Project == "" {
-		defaultProject, _ := s.client.GetDefaultProjectID()
-		req.Project = defaultProject
-	}
-
-	if req.Organization == "" {
-		defaultOrganization, _ := s.client.GetDefaultOrganizationID()
-		req.Organization = defaultOrganization
-	}
-
 	if req.Zone == "" {
 		defaultZone, _ := s.client.GetDefaultZone()
 		req.Zone = defaultZone
@@ -3161,9 +4865,8 @@ func (s *API) setSnapshot(req *setSnapshotRequest, opts ...scw.RequestOption) (*
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PUT",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "",
-		Headers: http.Header{},
+		Method: "PATCH",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -3171,7 +4874,7 @@ func (s *API) setSnapshot(req *setSnapshotRequest, opts ...scw.RequestOption) (*
 		return nil, err
 	}
 
-	var resp setSnapshotResponse
+	var resp UpdateSnapshotResponse
 
 	err = s.client.Do(scwReq, &resp, opts...)
 	if err != nil {
@@ -3180,15 +4883,7 @@ func (s *API) setSnapshot(req *setSnapshotRequest, opts ...scw.RequestOption) (*
 	return &resp, nil
 }
 
-type DeleteSnapshotRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// SnapshotID: UUID of the snapshot you want to delete.
-	SnapshotID string `json:"-"`
-}
-
-// DeleteSnapshot: delete a snapshot.
-// Delete the snapshot with the specified ID.
+// DeleteSnapshot: Delete the snapshot with the specified ID.
 func (s *API) DeleteSnapshot(req *DeleteSnapshotRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -3206,9 +4901,8 @@ func (s *API) DeleteSnapshot(req *DeleteSnapshotRequest, opts ...scw.RequestOpti
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "",
 	}
 
 	err = s.client.Do(scwReq, nil, opts...)
@@ -3218,19 +4912,7 @@ func (s *API) DeleteSnapshot(req *DeleteSnapshotRequest, opts ...scw.RequestOpti
 	return nil
 }
 
-type ExportSnapshotRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// SnapshotID: snapshot ID.
-	SnapshotID string `json:"-"`
-	// Bucket: s3 bucket name.
-	Bucket string `json:"bucket,omitempty"`
-	// Key: s3 object key.
-	Key string `json:"key,omitempty"`
-}
-
-// ExportSnapshot: export a snapshot.
-// Export a snapshot to a specified S3 bucket in the same region.
+// ExportSnapshot: Export a snapshot to a specified S3 bucket in the same region.
 func (s *API) ExportSnapshot(req *ExportSnapshotRequest, opts ...scw.RequestOption) (*ExportSnapshotResponse, error) {
 	var err error
 
@@ -3248,9 +4930,8 @@ func (s *API) ExportSnapshot(req *ExportSnapshotRequest, opts ...scw.RequestOpti
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "/export",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/snapshots/" + fmt.Sprint(req.SnapshotID) + "/export",
 	}
 
 	err = scwReq.SetBody(req)
@@ -3267,29 +4948,7 @@ func (s *API) ExportSnapshot(req *ExportSnapshotRequest, opts ...scw.RequestOpti
 	return &resp, nil
 }
 
-type ListVolumesRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// VolumeType: filter by volume type.
-	// Default value: l_ssd
-	VolumeType *VolumeVolumeType `json:"-"`
-	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
-	// Default value: 50
-	PerPage *uint32 `json:"-"`
-	// Page: a positive integer to choose the page to return.
-	Page *int32 `json:"-"`
-	// Organization: filter volume by Organization ID.
-	Organization *string `json:"-"`
-	// Project: filter volume by Project ID.
-	Project *string `json:"-"`
-	// Tags: filter volumes with these exact tags (to filter with several tags, use commas to separate them).
-	Tags []string `json:"-"`
-	// Name: filter volume by name (for eg. "vol" will return "myvolume" but not "data").
-	Name *string `json:"-"`
-}
-
-// ListVolumes: list volumes.
-// List volumes in the specified Availability Zone. You can filter the output by volume type.
+// ListVolumes: List volumes in the specified Availability Zone. You can filter the output by volume type.
 func (s *API) ListVolumes(req *ListVolumesRequest, opts ...scw.RequestOption) (*ListVolumesResponse, error) {
 	var err error
 
@@ -3298,11 +4957,6 @@ func (s *API) ListVolumes(req *ListVolumesRequest, opts ...scw.RequestOption) (*
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	parameter.AddToQuery(query, "volume_type", req.VolumeType)
 	parameter.AddToQuery(query, "per_page", req.PerPage)
@@ -3319,10 +4973,9 @@ func (s *API) ListVolumes(req *ListVolumesRequest, opts ...scw.RequestOption) (*
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/volumes",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/volumes",
+		Query:  query,
 	}
 
 	var resp ListVolumesResponse
@@ -3334,53 +4987,25 @@ func (s *API) ListVolumes(req *ListVolumesRequest, opts ...scw.RequestOption) (*
 	return &resp, nil
 }
 
-type CreateVolumeRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Name: volume name.
-	Name string `json:"name,omitempty"`
-	// Deprecated: Organization: volume Organization ID.
-	// Precisely one of Organization, Project must be set.
-	Organization *string `json:"organization,omitempty"`
-	// Project: volume Project ID.
-	// Precisely one of Organization, Project must be set.
-	Project *string `json:"project,omitempty"`
-	// Tags: volume tags.
-	Tags []string `json:"tags,omitempty"`
-	// VolumeType: volume type.
-	// Default value: l_ssd
-	VolumeType VolumeVolumeType `json:"volume_type"`
-	// Size: volume disk size, must be a multiple of 512.
-	// Precisely one of BaseSnapshot, BaseVolume, Size must be set.
-	Size *scw.Size `json:"size,omitempty"`
-	// BaseVolume: ID of the volume on which this volume will be based.
-	// Precisely one of BaseSnapshot, BaseVolume, Size must be set.
-	BaseVolume *string `json:"base_volume,omitempty"`
-	// BaseSnapshot: ID of the snapshot on which this volume will be based.
-	// Precisely one of BaseSnapshot, BaseVolume, Size must be set.
-	BaseSnapshot *string `json:"base_snapshot,omitempty"`
-}
-
-// CreateVolume: create a volume.
-// Create a volume of a specified type in an Availability Zone.
+// CreateVolume: Create a volume of a specified type in an Availability Zone.
 func (s *API) CreateVolume(req *CreateVolumeRequest, opts ...scw.RequestOption) (*CreateVolumeResponse, error) {
 	var err error
 
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
 	defaultProject, exist := s.client.GetDefaultProjectID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Project = &defaultProject
 	}
 
 	defaultOrganization, exist := s.client.GetDefaultOrganizationID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Organization = &defaultOrganization
 	}
 
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-
 	if req.Name == "" {
 		req.Name = namegenerator.GetRandomName("vol")
 	}
@@ -3390,9 +5015,8 @@ func (s *API) CreateVolume(req *CreateVolumeRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/volumes",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/volumes",
 	}
 
 	err = scwReq.SetBody(req)
@@ -3409,15 +5033,7 @@ func (s *API) CreateVolume(req *CreateVolumeRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type GetVolumeRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// VolumeID: UUID of the volume you want to get.
-	VolumeID string `json:"-"`
-}
-
-// GetVolume: get a volume.
-// Get details of a volume with the specified ID.
+// GetVolume: Get details of a volume with the specified ID.
 func (s *API) GetVolume(req *GetVolumeRequest, opts ...scw.RequestOption) (*GetVolumeResponse, error) {
 	var err error
 
@@ -3435,9 +5051,8 @@ func (s *API) GetVolume(req *GetVolumeRequest, opts ...scw.RequestOption) (*GetV
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/volumes/" + fmt.Sprint(req.VolumeID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/volumes/" + fmt.Sprint(req.VolumeID) + "",
 	}
 
 	var resp GetVolumeResponse
@@ -3449,21 +5064,7 @@ func (s *API) GetVolume(req *GetVolumeRequest, opts ...scw.RequestOption) (*GetV
 	return &resp, nil
 }
 
-type UpdateVolumeRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// VolumeID: UUID of the volume.
-	VolumeID string `json:"-"`
-	// Name: volume name.
-	Name *string `json:"name,omitempty"`
-	// Tags: tags of the volume.
-	Tags *[]string `json:"tags,omitempty"`
-	// Size: volume disk size, must be a multiple of 512.
-	Size *scw.Size `json:"size,omitempty"`
-}
-
-// UpdateVolume: update a volume.
-// Replace the name and/or size properties of a volume specified by its ID, with the specified value(s). Any volume name can be changed, however only `b_ssd` volumes can currently be increased in size.
+// UpdateVolume: Replace the name and/or size properties of a volume specified by its ID, with the specified value(s). Any volume name can be changed, however only `b_ssd` volumes can currently be increased in size.
 func (s *API) UpdateVolume(req *UpdateVolumeRequest, opts ...scw.RequestOption) (*UpdateVolumeResponse, error) {
 	var err error
 
@@ -3481,9 +5082,8 @@ func (s *API) UpdateVolume(req *UpdateVolumeRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PATCH",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/volumes/" + fmt.Sprint(req.VolumeID) + "",
-		Headers: http.Header{},
+		Method: "PATCH",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/volumes/" + fmt.Sprint(req.VolumeID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -3500,15 +5100,7 @@ func (s *API) UpdateVolume(req *UpdateVolumeRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type DeleteVolumeRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// VolumeID: UUID of the volume you want to delete.
-	VolumeID string `json:"-"`
-}
-
-// DeleteVolume: delete a volume.
-// Delete the volume with the specified ID.
+// DeleteVolume: Delete the volume with the specified ID.
 func (s *API) DeleteVolume(req *DeleteVolumeRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -3526,40 +5118,18 @@ func (s *API) DeleteVolume(req *DeleteVolumeRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/volumes/" + fmt.Sprint(req.VolumeID) + "",
-		Headers: http.Header{},
-	}
-
-	err = s.client.Do(scwReq, nil, opts...)
-	if err != nil {
-		return err
+		Method: "DELETE",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/volumes/" + fmt.Sprint(req.VolumeID) + "",
 	}
-	return nil
-}
-
-type ListSecurityGroupsRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Name: name of the security group.
-	Name *string `json:"-"`
-	// Organization: security group Organization ID.
-	Organization *string `json:"-"`
-	// Project: security group Project ID.
-	Project *string `json:"-"`
-	// Tags: list security groups with these exact tags (to filter with several tags, use commas to separate them).
-	Tags []string `json:"-"`
-	// ProjectDefault: filter security groups with this value for project_default.
-	ProjectDefault *bool `json:"-"`
-	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
-	// Default value: 50
-	PerPage *uint32 `json:"-"`
-	// Page: a positive integer to choose the page to return.
-	Page *int32 `json:"-"`
+
+	err = s.client.Do(scwReq, nil, opts...)
+	if err != nil {
+		return err
+	}
+	return nil
 }
 
-// ListSecurityGroups: list security groups.
-// List all existing security groups.
+// ListSecurityGroups: List all existing security groups.
 func (s *API) ListSecurityGroups(req *ListSecurityGroupsRequest, opts ...scw.RequestOption) (*ListSecurityGroupsResponse, error) {
 	var err error
 
@@ -3568,11 +5138,6 @@ func (s *API) ListSecurityGroups(req *ListSecurityGroupsRequest, opts ...scw.Req
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	parameter.AddToQuery(query, "name", req.Name)
 	parameter.AddToQuery(query, "organization", req.Organization)
@@ -3589,10 +5154,9 @@ func (s *API) ListSecurityGroups(req *ListSecurityGroupsRequest, opts ...scw.Req
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups",
+		Query:  query,
 	}
 
 	var resp ListSecurityGroupsResponse
@@ -3604,62 +5168,25 @@ func (s *API) ListSecurityGroups(req *ListSecurityGroupsRequest, opts ...scw.Req
 	return &resp, nil
 }
 
-type CreateSecurityGroupRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Name: name of the security group.
-	Name string `json:"name,omitempty"`
-	// Description: description of the security group.
-	Description string `json:"description,omitempty"`
-	// Deprecated: Organization: organization ID the security group belongs to.
-	// Precisely one of Organization, Project must be set.
-	Organization *string `json:"organization,omitempty"`
-	// Project: project ID the security group belong to.
-	// Precisely one of Organization, Project must be set.
-	Project *string `json:"project,omitempty"`
-	// Tags: tags of the security group.
-	Tags []string `json:"tags,omitempty"`
-	// Deprecated: OrganizationDefault: defines whether this security group becomes the default security group for new Instances.
-	// Default value: false
-	// Precisely one of OrganizationDefault, ProjectDefault must be set.
-	OrganizationDefault *bool `json:"organization_default,omitempty"`
-	// ProjectDefault: whether this security group becomes the default security group for new Instances.
-	// Default value: false
-	// Precisely one of OrganizationDefault, ProjectDefault must be set.
-	ProjectDefault *bool `json:"project_default,omitempty"`
-	// Stateful: whether the security group is stateful or not.
-	// Default value: false
-	Stateful bool `json:"stateful,omitempty"`
-	// InboundDefaultPolicy: default policy for inbound rules.
-	// Default value: accept
-	InboundDefaultPolicy SecurityGroupPolicy `json:"inbound_default_policy"`
-	// OutboundDefaultPolicy: default policy for outbound rules.
-	// Default value: accept
-	OutboundDefaultPolicy SecurityGroupPolicy `json:"outbound_default_policy"`
-	// EnableDefaultSecurity: true to block SMTP on IPv4 and IPv6. This feature is read only, please open a support ticket if you need to make it configurable.
-	EnableDefaultSecurity *bool `json:"enable_default_security,omitempty"`
-}
-
-// CreateSecurityGroup: create a security group.
-// Create a security group with a specified name and description.
+// CreateSecurityGroup: Create a security group with a specified name and description.
 func (s *API) CreateSecurityGroup(req *CreateSecurityGroupRequest, opts ...scw.RequestOption) (*CreateSecurityGroupResponse, error) {
 	var err error
 
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
 	defaultProject, exist := s.client.GetDefaultProjectID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Project = &defaultProject
 	}
 
 	defaultOrganization, exist := s.client.GetDefaultOrganizationID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Organization = &defaultOrganization
 	}
 
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-
 	if req.Name == "" {
 		req.Name = namegenerator.GetRandomName("sg")
 	}
@@ -3669,9 +5196,8 @@ func (s *API) CreateSecurityGroup(req *CreateSecurityGroupRequest, opts ...scw.R
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups",
 	}
 
 	err = scwReq.SetBody(req)
@@ -3688,15 +5214,7 @@ func (s *API) CreateSecurityGroup(req *CreateSecurityGroupRequest, opts ...scw.R
 	return &resp, nil
 }
 
-type GetSecurityGroupRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// SecurityGroupID: UUID of the security group you want to get.
-	SecurityGroupID string `json:"-"`
-}
-
-// GetSecurityGroup: get a security group.
-// Get the details of a security group with the specified ID.
+// GetSecurityGroup: Get the details of a security group with the specified ID.
 func (s *API) GetSecurityGroup(req *GetSecurityGroupRequest, opts ...scw.RequestOption) (*GetSecurityGroupResponse, error) {
 	var err error
 
@@ -3714,9 +5232,8 @@ func (s *API) GetSecurityGroup(req *GetSecurityGroupRequest, opts ...scw.Request
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "",
 	}
 
 	var resp GetSecurityGroupResponse
@@ -3728,15 +5245,7 @@ func (s *API) GetSecurityGroup(req *GetSecurityGroupRequest, opts ...scw.Request
 	return &resp, nil
 }
 
-type DeleteSecurityGroupRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// SecurityGroupID: UUID of the security group you want to delete.
-	SecurityGroupID string `json:"-"`
-}
-
-// DeleteSecurityGroup: delete a security group.
-// Delete a security group with the specified ID.
+// DeleteSecurityGroup: Delete a security group with the specified ID.
 func (s *API) DeleteSecurityGroup(req *DeleteSecurityGroupRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -3754,9 +5263,8 @@ func (s *API) DeleteSecurityGroup(req *DeleteSecurityGroupRequest, opts ...scw.R
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "",
 	}
 
 	err = s.client.Do(scwReq, nil, opts...)
@@ -3766,51 +5274,13 @@ func (s *API) DeleteSecurityGroup(req *DeleteSecurityGroupRequest, opts ...scw.R
 	return nil
 }
 
-type setSecurityGroupRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ID: ID of the security group (will be ignored).
-	ID string `json:"-"`
-	// Name: name of the security group.
-	Name string `json:"name"`
-	// Tags: tags of the security group.
-	Tags *[]string `json:"tags"`
-	// CreationDate: creation date of the security group (will be ignored).
-	CreationDate *time.Time `json:"creation_date"`
-	// ModificationDate: modification date of the security group (will be ignored).
-	ModificationDate *time.Time `json:"modification_date"`
-	// Description: description of the security group.
-	Description string `json:"description"`
-	// EnableDefaultSecurity: true to block SMTP on IPv4 and IPv6. This feature is read only, please open a support ticket if you need to make it configurable.
-	EnableDefaultSecurity bool `json:"enable_default_security"`
-	// InboundDefaultPolicy: default inbound policy.
-	// Default value: accept
-	InboundDefaultPolicy SecurityGroupPolicy `json:"inbound_default_policy"`
-	// OutboundDefaultPolicy: default outbound policy.
-	// Default value: accept
-	OutboundDefaultPolicy SecurityGroupPolicy `json:"outbound_default_policy"`
-	// Organization: security groups Organization ID.
-	Organization string `json:"organization"`
-	// Project: security group Project ID.
-	Project string `json:"project"`
-	// Deprecated: OrganizationDefault: please use project_default instead.
-	OrganizationDefault *bool `json:"organization_default"`
-	// ProjectDefault: true use this security group for future Instances created in this project.
-	ProjectDefault bool `json:"project_default"`
-	// Servers: instances attached to this security group.
-	Servers []*ServerSummary `json:"servers"`
-	// Stateful: true to set the security group as stateful.
-	Stateful bool `json:"stateful"`
-}
-
-// setSecurityGroup: update a security group.
-// Replace all security group properties with a security group message.
+// setSecurityGroup: Replace all security group properties with a security group message.
 func (s *API) setSecurityGroup(req *setSecurityGroupRequest, opts ...scw.RequestOption) (*setSecurityGroupResponse, error) {
 	var err error
 
-	if req.Project == "" {
-		defaultProject, _ := s.client.GetDefaultProjectID()
-		req.Project = defaultProject
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
 	}
 
 	if req.Organization == "" {
@@ -3818,9 +5288,9 @@ func (s *API) setSecurityGroup(req *setSecurityGroupRequest, opts ...scw.Request
 		req.Organization = defaultOrganization
 	}
 
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
+	if req.Project == "" {
+		defaultProject, _ := s.client.GetDefaultProjectID()
+		req.Project = defaultProject
 	}
 
 	if fmt.Sprint(req.Zone) == "" {
@@ -3832,9 +5302,8 @@ func (s *API) setSecurityGroup(req *setSecurityGroupRequest, opts ...scw.Request
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PUT",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.ID) + "",
-		Headers: http.Header{},
+		Method: "PUT",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.ID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -3851,13 +5320,43 @@ func (s *API) setSecurityGroup(req *setSecurityGroupRequest, opts ...scw.Request
 	return &resp, nil
 }
 
-type ListDefaultSecurityGroupRulesRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
+// UpdateSecurityGroup: Update the properties of security group.
+func (s *API) UpdateSecurityGroup(req *UpdateSecurityGroupRequest, opts ...scw.RequestOption) (*UpdateSecurityGroupResponse, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	if fmt.Sprint(req.SecurityGroupID) == "" {
+		return nil, errors.New("field SecurityGroupID cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "PATCH",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "",
+	}
+
+	err = scwReq.SetBody(req)
+	if err != nil {
+		return nil, err
+	}
+
+	var resp UpdateSecurityGroupResponse
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
 }
 
-// ListDefaultSecurityGroupRules: get default rules.
-// Lists the default rules applied to all the security groups.
+// ListDefaultSecurityGroupRules: Lists the default rules applied to all the security groups.
 func (s *API) ListDefaultSecurityGroupRules(req *ListDefaultSecurityGroupRulesRequest, opts ...scw.RequestOption) (*ListSecurityGroupRulesResponse, error) {
 	var err error
 
@@ -3871,9 +5370,8 @@ func (s *API) ListDefaultSecurityGroupRules(req *ListDefaultSecurityGroupRulesRe
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/default/rules",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/default/rules",
 	}
 
 	var resp ListSecurityGroupRulesResponse
@@ -3885,20 +5383,7 @@ func (s *API) ListDefaultSecurityGroupRules(req *ListDefaultSecurityGroupRulesRe
 	return &resp, nil
 }
 
-type ListSecurityGroupRulesRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// SecurityGroupID: UUID of the security group.
-	SecurityGroupID string `json:"-"`
-	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
-	// Default value: 50
-	PerPage *uint32 `json:"-"`
-	// Page: a positive integer to choose the page to return.
-	Page *int32 `json:"-"`
-}
-
-// ListSecurityGroupRules: list rules.
-// List the rules of the a specified security group ID.
+// ListSecurityGroupRules: List the rules of the a specified security group ID.
 func (s *API) ListSecurityGroupRules(req *ListSecurityGroupRulesRequest, opts ...scw.RequestOption) (*ListSecurityGroupRulesResponse, error) {
 	var err error
 
@@ -3907,11 +5392,6 @@ func (s *API) ListSecurityGroupRules(req *ListSecurityGroupRulesRequest, opts ..
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	parameter.AddToQuery(query, "per_page", req.PerPage)
 	parameter.AddToQuery(query, "page", req.Page)
@@ -3925,10 +5405,9 @@ func (s *API) ListSecurityGroupRules(req *ListSecurityGroupRulesRequest, opts ..
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules",
+		Query:  query,
 	}
 
 	var resp ListSecurityGroupRulesResponse
@@ -3940,31 +5419,7 @@ func (s *API) ListSecurityGroupRules(req *ListSecurityGroupRulesRequest, opts ..
 	return &resp, nil
 }
 
-type CreateSecurityGroupRuleRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// SecurityGroupID: UUID of the security group.
-	SecurityGroupID string `json:"-"`
-	// Protocol: default value: TCP
-	Protocol SecurityGroupRuleProtocol `json:"protocol"`
-	// Direction: default value: inbound
-	Direction SecurityGroupRuleDirection `json:"direction"`
-	// Action: default value: accept
-	Action SecurityGroupRuleAction `json:"action"`
-
-	IPRange scw.IPNet `json:"ip_range,omitempty"`
-	// DestPortFrom: beginning of the range of ports to apply this rule to (inclusive).
-	DestPortFrom *uint32 `json:"dest_port_from,omitempty"`
-	// DestPortTo: end of the range of ports to apply this rule to (inclusive).
-	DestPortTo *uint32 `json:"dest_port_to,omitempty"`
-	// Position: position of this rule in the security group rules list.
-	Position uint32 `json:"position,omitempty"`
-	// Editable: indicates if this rule is editable (will be ignored).
-	Editable bool `json:"editable,omitempty"`
-}
-
-// CreateSecurityGroupRule: create rule.
-// Create a rule in the specified security group ID.
+// CreateSecurityGroupRule: Create a rule in the specified security group ID.
 func (s *API) CreateSecurityGroupRule(req *CreateSecurityGroupRuleRequest, opts ...scw.RequestOption) (*CreateSecurityGroupRuleResponse, error) {
 	var err error
 
@@ -3982,9 +5437,8 @@ func (s *API) CreateSecurityGroupRule(req *CreateSecurityGroupRuleRequest, opts
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules",
 	}
 
 	err = scwReq.SetBody(req)
@@ -4001,17 +5455,7 @@ func (s *API) CreateSecurityGroupRule(req *CreateSecurityGroupRuleRequest, opts
 	return &resp, nil
 }
 
-type SetSecurityGroupRulesRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// SecurityGroupID: UUID of the security group to update the rules on.
-	SecurityGroupID string `json:"-"`
-	// Rules: list of rules to update in the security group.
-	Rules []*SetSecurityGroupRulesRequestRule `json:"rules"`
-}
-
-// SetSecurityGroupRules: update all the rules of a security group.
-// Replaces the existing rules of the security group with the rules provided. This endpoint supports the update of existing rules, creation of new rules and deletion of existing rules when they are not passed in the request.
+// SetSecurityGroupRules: Replaces the existing rules of the security group with the rules provided. This endpoint supports the update of existing rules, creation of new rules and deletion of existing rules when they are not passed in the request.
 func (s *API) SetSecurityGroupRules(req *SetSecurityGroupRulesRequest, opts ...scw.RequestOption) (*SetSecurityGroupRulesResponse, error) {
 	var err error
 
@@ -4029,9 +5473,8 @@ func (s *API) SetSecurityGroupRules(req *SetSecurityGroupRulesRequest, opts ...s
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PUT",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules",
-		Headers: http.Header{},
+		Method: "PUT",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules",
 	}
 
 	err = scwReq.SetBody(req)
@@ -4048,17 +5491,7 @@ func (s *API) SetSecurityGroupRules(req *SetSecurityGroupRulesRequest, opts ...s
 	return &resp, nil
 }
 
-type DeleteSecurityGroupRuleRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	SecurityGroupID string `json:"-"`
-
-	SecurityGroupRuleID string `json:"-"`
-}
-
-// DeleteSecurityGroupRule: delete rule.
-// Delete a security group rule with the specified ID.
+// DeleteSecurityGroupRule: Delete a security group rule with the specified ID.
 func (s *API) DeleteSecurityGroupRule(req *DeleteSecurityGroupRuleRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -4080,9 +5513,8 @@ func (s *API) DeleteSecurityGroupRule(req *DeleteSecurityGroupRuleRequest, opts
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules/" + fmt.Sprint(req.SecurityGroupRuleID) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules/" + fmt.Sprint(req.SecurityGroupRuleID) + "",
 	}
 
 	err = s.client.Do(scwReq, nil, opts...)
@@ -4092,17 +5524,7 @@ func (s *API) DeleteSecurityGroupRule(req *DeleteSecurityGroupRuleRequest, opts
 	return nil
 }
 
-type GetSecurityGroupRuleRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	SecurityGroupID string `json:"-"`
-
-	SecurityGroupRuleID string `json:"-"`
-}
-
-// GetSecurityGroupRule: get rule.
-// Get details of a security group rule with the specified ID.
+// GetSecurityGroupRule: Get details of a security group rule with the specified ID.
 func (s *API) GetSecurityGroupRule(req *GetSecurityGroupRuleRequest, opts ...scw.RequestOption) (*GetSecurityGroupRuleResponse, error) {
 	var err error
 
@@ -4124,9 +5546,8 @@ func (s *API) GetSecurityGroupRule(req *GetSecurityGroupRuleRequest, opts ...scw
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules/" + fmt.Sprint(req.SecurityGroupRuleID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules/" + fmt.Sprint(req.SecurityGroupRuleID) + "",
 	}
 
 	var resp GetSecurityGroupRuleResponse
@@ -4138,35 +5559,7 @@ func (s *API) GetSecurityGroupRule(req *GetSecurityGroupRuleRequest, opts ...scw
 	return &resp, nil
 }
 
-type setSecurityGroupRuleRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	SecurityGroupID string `json:"-"`
-
-	SecurityGroupRuleID string `json:"-"`
-
-	ID string `json:"id"`
-	// Protocol: default value: TCP
-	Protocol SecurityGroupRuleProtocol `json:"protocol"`
-	// Direction: default value: inbound
-	Direction SecurityGroupRuleDirection `json:"direction"`
-	// Action: default value: accept
-	Action SecurityGroupRuleAction `json:"action"`
-
-	IPRange scw.IPNet `json:"ip_range"`
-
-	DestPortFrom *uint32 `json:"dest_port_from"`
-
-	DestPortTo *uint32 `json:"dest_port_to"`
-
-	Position uint32 `json:"position"`
-
-	Editable bool `json:"editable"`
-}
-
-// setSecurityGroupRule: update security group rule.
-// Update the rule of a specified security group ID.
+// setSecurityGroupRule: Replace all the properties of a rule from a specified security group.
 func (s *API) setSecurityGroupRule(req *setSecurityGroupRuleRequest, opts ...scw.RequestOption) (*setSecurityGroupRuleResponse, error) {
 	var err error
 
@@ -4188,9 +5581,8 @@ func (s *API) setSecurityGroupRule(req *setSecurityGroupRuleRequest, opts ...scw
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PUT",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules/" + fmt.Sprint(req.SecurityGroupRuleID) + "",
-		Headers: http.Header{},
+		Method: "PUT",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules/" + fmt.Sprint(req.SecurityGroupRuleID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -4207,26 +5599,47 @@ func (s *API) setSecurityGroupRule(req *setSecurityGroupRuleRequest, opts ...scw
 	return &resp, nil
 }
 
-type ListPlacementGroupsRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
-	// Default value: 50
-	PerPage *uint32 `json:"-"`
-	// Page: a positive integer to choose the page to return.
-	Page *int32 `json:"-"`
-	// Organization: list only placement groups of this Organization ID.
-	Organization *string `json:"-"`
-	// Project: list only placement groups of this Project ID.
-	Project *string `json:"-"`
-	// Tags: list placement groups with these exact tags (to filter with several tags, use commas to separate them).
-	Tags []string `json:"-"`
-	// Name: filter placement groups by name (for eg. "cluster1" will return "cluster100" and "cluster1" but not "foo").
-	Name *string `json:"-"`
+// UpdateSecurityGroupRule: Update the properties of a rule from a specified security group.
+func (s *API) UpdateSecurityGroupRule(req *UpdateSecurityGroupRuleRequest, opts ...scw.RequestOption) (*UpdateSecurityGroupRuleResponse, error) {
+	var err error
+
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
+	if fmt.Sprint(req.Zone) == "" {
+		return nil, errors.New("field Zone cannot be empty in request")
+	}
+
+	if fmt.Sprint(req.SecurityGroupID) == "" {
+		return nil, errors.New("field SecurityGroupID cannot be empty in request")
+	}
+
+	if fmt.Sprint(req.SecurityGroupRuleID) == "" {
+		return nil, errors.New("field SecurityGroupRuleID cannot be empty in request")
+	}
+
+	scwReq := &scw.ScalewayRequest{
+		Method: "PATCH",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/security_groups/" + fmt.Sprint(req.SecurityGroupID) + "/rules/" + fmt.Sprint(req.SecurityGroupRuleID) + "",
+	}
+
+	err = scwReq.SetBody(req)
+	if err != nil {
+		return nil, err
+	}
+
+	var resp UpdateSecurityGroupRuleResponse
+
+	err = s.client.Do(scwReq, &resp, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return &resp, nil
 }
 
-// ListPlacementGroups: list placement groups.
-// List all placement groups in a specified Availability Zone.
+// ListPlacementGroups: List all placement groups in a specified Availability Zone.
 func (s *API) ListPlacementGroups(req *ListPlacementGroupsRequest, opts ...scw.RequestOption) (*ListPlacementGroupsResponse, error) {
 	var err error
 
@@ -4235,11 +5648,6 @@ func (s *API) ListPlacementGroups(req *ListPlacementGroupsRequest, opts ...scw.R
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	parameter.AddToQuery(query, "per_page", req.PerPage)
 	parameter.AddToQuery(query, "page", req.Page)
@@ -4255,10 +5663,9 @@ func (s *API) ListPlacementGroups(req *ListPlacementGroupsRequest, opts ...scw.R
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups",
+		Query:  query,
 	}
 
 	var resp ListPlacementGroupsResponse
@@ -4270,47 +5677,25 @@ func (s *API) ListPlacementGroups(req *ListPlacementGroupsRequest, opts ...scw.R
 	return &resp, nil
 }
 
-type CreatePlacementGroupRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Name: name of the placement group.
-	Name string `json:"name,omitempty"`
-	// Deprecated: Organization: organization ID of the placement group.
-	// Precisely one of Organization, Project must be set.
-	Organization *string `json:"organization,omitempty"`
-	// Project: project ID of the placement group.
-	// Precisely one of Organization, Project must be set.
-	Project *string `json:"project,omitempty"`
-	// Tags: tags of the placement group.
-	Tags []string `json:"tags,omitempty"`
-	// PolicyMode: operating mode of the placement group.
-	// Default value: optional
-	PolicyMode PlacementGroupPolicyMode `json:"policy_mode"`
-	// PolicyType: policy type of the placement group.
-	// Default value: max_availability
-	PolicyType PlacementGroupPolicyType `json:"policy_type"`
-}
-
-// CreatePlacementGroup: create a placement group.
-// Create a new placement group in a specified Availability Zone.
+// CreatePlacementGroup: Create a new placement group in a specified Availability Zone.
 func (s *API) CreatePlacementGroup(req *CreatePlacementGroupRequest, opts ...scw.RequestOption) (*CreatePlacementGroupResponse, error) {
 	var err error
 
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
 	defaultProject, exist := s.client.GetDefaultProjectID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Project = &defaultProject
 	}
 
 	defaultOrganization, exist := s.client.GetDefaultOrganizationID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Organization = &defaultOrganization
 	}
 
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-
 	if req.Name == "" {
 		req.Name = namegenerator.GetRandomName("pg")
 	}
@@ -4320,9 +5705,8 @@ func (s *API) CreatePlacementGroup(req *CreatePlacementGroupRequest, opts ...scw
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups",
 	}
 
 	err = scwReq.SetBody(req)
@@ -4339,15 +5723,7 @@ func (s *API) CreatePlacementGroup(req *CreatePlacementGroupRequest, opts ...scw
 	return &resp, nil
 }
 
-type GetPlacementGroupRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// PlacementGroupID: UUID of the placement group you want to get.
-	PlacementGroupID string `json:"-"`
-}
-
-// GetPlacementGroup: get a placement group.
-// Get the specified placement group.
+// GetPlacementGroup: Get the specified placement group.
 func (s *API) GetPlacementGroup(req *GetPlacementGroupRequest, opts ...scw.RequestOption) (*GetPlacementGroupResponse, error) {
 	var err error
 
@@ -4365,9 +5741,8 @@ func (s *API) GetPlacementGroup(req *GetPlacementGroupRequest, opts ...scw.Reque
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "",
 	}
 
 	var resp GetPlacementGroupResponse
@@ -4379,33 +5754,13 @@ func (s *API) GetPlacementGroup(req *GetPlacementGroupRequest, opts ...scw.Reque
 	return &resp, nil
 }
 
-type SetPlacementGroupRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	PlacementGroupID string `json:"-"`
-
-	Name string `json:"name"`
-
-	Organization string `json:"organization"`
-	// PolicyMode: default value: optional
-	PolicyMode PlacementGroupPolicyMode `json:"policy_mode"`
-	// PolicyType: default value: max_availability
-	PolicyType PlacementGroupPolicyType `json:"policy_type"`
-
-	Project string `json:"project"`
-
-	Tags *[]string `json:"tags"`
-}
-
-// SetPlacementGroup: set placement group.
-// Set all parameters of the specified placement group.
+// SetPlacementGroup: Set all parameters of the specified placement group.
 func (s *API) SetPlacementGroup(req *SetPlacementGroupRequest, opts ...scw.RequestOption) (*SetPlacementGroupResponse, error) {
 	var err error
 
-	if req.Project == "" {
-		defaultProject, _ := s.client.GetDefaultProjectID()
-		req.Project = defaultProject
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
 	}
 
 	if req.Organization == "" {
@@ -4413,9 +5768,9 @@ func (s *API) SetPlacementGroup(req *SetPlacementGroupRequest, opts ...scw.Reque
 		req.Organization = defaultOrganization
 	}
 
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
+	if req.Project == "" {
+		defaultProject, _ := s.client.GetDefaultProjectID()
+		req.Project = defaultProject
 	}
 
 	if fmt.Sprint(req.Zone) == "" {
@@ -4427,9 +5782,8 @@ func (s *API) SetPlacementGroup(req *SetPlacementGroupRequest, opts ...scw.Reque
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PUT",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "",
-		Headers: http.Header{},
+		Method: "PUT",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -4446,25 +5800,7 @@ func (s *API) SetPlacementGroup(req *SetPlacementGroupRequest, opts ...scw.Reque
 	return &resp, nil
 }
 
-type UpdatePlacementGroupRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// PlacementGroupID: UUID of the placement group.
-	PlacementGroupID string `json:"-"`
-	// Name: name of the placement group.
-	Name *string `json:"name,omitempty"`
-	// Tags: tags of the placement group.
-	Tags *[]string `json:"tags,omitempty"`
-	// PolicyMode: operating mode of the placement group.
-	// Default value: optional
-	PolicyMode *PlacementGroupPolicyMode `json:"policy_mode,omitempty"`
-	// PolicyType: policy type of the placement group.
-	// Default value: max_availability
-	PolicyType *PlacementGroupPolicyType `json:"policy_type,omitempty"`
-}
-
-// UpdatePlacementGroup: update a placement group.
-// Update one or more parameter of the specified placement group.
+// UpdatePlacementGroup: Update one or more parameter of the specified placement group.
 func (s *API) UpdatePlacementGroup(req *UpdatePlacementGroupRequest, opts ...scw.RequestOption) (*UpdatePlacementGroupResponse, error) {
 	var err error
 
@@ -4482,9 +5818,8 @@ func (s *API) UpdatePlacementGroup(req *UpdatePlacementGroupRequest, opts ...scw
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PATCH",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "",
-		Headers: http.Header{},
+		Method: "PATCH",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -4501,14 +5836,7 @@ func (s *API) UpdatePlacementGroup(req *UpdatePlacementGroupRequest, opts ...scw
 	return &resp, nil
 }
 
-type DeletePlacementGroupRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// PlacementGroupID: UUID of the placement group you want to delete.
-	PlacementGroupID string `json:"-"`
-}
-
-// DeletePlacementGroup: delete the specified placement group.
+// DeletePlacementGroup: Delete the specified placement group.
 func (s *API) DeletePlacementGroup(req *DeletePlacementGroupRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -4526,9 +5854,8 @@ func (s *API) DeletePlacementGroup(req *DeletePlacementGroupRequest, opts ...scw
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "",
 	}
 
 	err = s.client.Do(scwReq, nil, opts...)
@@ -4538,15 +5865,7 @@ func (s *API) DeletePlacementGroup(req *DeletePlacementGroupRequest, opts ...scw
 	return nil
 }
 
-type GetPlacementGroupServersRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// PlacementGroupID: UUID of the placement group you want to get.
-	PlacementGroupID string `json:"-"`
-}
-
-// GetPlacementGroupServers: get placement group servers.
-// Get all Instances belonging to the specified placement group.
+// GetPlacementGroupServers: Get all Instances belonging to the specified placement group.
 func (s *API) GetPlacementGroupServers(req *GetPlacementGroupServersRequest, opts ...scw.RequestOption) (*GetPlacementGroupServersResponse, error) {
 	var err error
 
@@ -4564,9 +5883,8 @@ func (s *API) GetPlacementGroupServers(req *GetPlacementGroupServersRequest, opt
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "/servers",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "/servers",
 	}
 
 	var resp GetPlacementGroupServersResponse
@@ -4578,17 +5896,7 @@ func (s *API) GetPlacementGroupServers(req *GetPlacementGroupServersRequest, opt
 	return &resp, nil
 }
 
-type SetPlacementGroupServersRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// PlacementGroupID: UUID of the placement group you want to set.
-	PlacementGroupID string `json:"-"`
-	// Servers: an array of the Instances' UUIDs you want to configure.
-	Servers []string `json:"servers"`
-}
-
-// SetPlacementGroupServers: set placement group servers.
-// Set all Instances belonging to the specified placement group.
+// SetPlacementGroupServers: Set all Instances belonging to the specified placement group.
 func (s *API) SetPlacementGroupServers(req *SetPlacementGroupServersRequest, opts ...scw.RequestOption) (*SetPlacementGroupServersResponse, error) {
 	var err error
 
@@ -4606,9 +5914,8 @@ func (s *API) SetPlacementGroupServers(req *SetPlacementGroupServersRequest, opt
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PUT",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "/servers",
-		Headers: http.Header{},
+		Method: "PUT",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "/servers",
 	}
 
 	err = scwReq.SetBody(req)
@@ -4625,17 +5932,7 @@ func (s *API) SetPlacementGroupServers(req *SetPlacementGroupServersRequest, opt
 	return &resp, nil
 }
 
-type UpdatePlacementGroupServersRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// PlacementGroupID: UUID of the placement group you want to update.
-	PlacementGroupID string `json:"-"`
-	// Servers: an array of the Instances' UUIDs you want to configure.
-	Servers []string `json:"servers,omitempty"`
-}
-
-// UpdatePlacementGroupServers: update placement group servers.
-// Update all Instances belonging to the specified placement group.
+// UpdatePlacementGroupServers: Update all Instances belonging to the specified placement group.
 func (s *API) UpdatePlacementGroupServers(req *UpdatePlacementGroupServersRequest, opts ...scw.RequestOption) (*UpdatePlacementGroupServersResponse, error) {
 	var err error
 
@@ -4653,9 +5950,8 @@ func (s *API) UpdatePlacementGroupServers(req *UpdatePlacementGroupServersReques
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PATCH",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "/servers",
-		Headers: http.Header{},
+		Method: "PATCH",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/placement_groups/" + fmt.Sprint(req.PlacementGroupID) + "/servers",
 	}
 
 	err = scwReq.SetBody(req)
@@ -4672,26 +5968,7 @@ func (s *API) UpdatePlacementGroupServers(req *UpdatePlacementGroupServersReques
 	return &resp, nil
 }
 
-type ListIPsRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Project: project ID in which the IPs are reserved.
-	Project *string `json:"-"`
-	// Organization: organization ID in which the IPs are reserved.
-	Organization *string `json:"-"`
-	// Tags: filter IPs with these exact tags (to filter with several tags, use commas to separate them).
-	Tags []string `json:"-"`
-	// Name: filter on the IP address (Works as a LIKE operation on the IP address).
-	Name *string `json:"-"`
-	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
-	// Default value: 50
-	PerPage *uint32 `json:"-"`
-	// Page: a positive integer to choose the page to return.
-	Page *int32 `json:"-"`
-}
-
-// ListIPs: list all flexible IPs.
-// List all flexible IPs in a specified zone.
+// ListIPs: List all flexible IPs in a specified zone.
 func (s *API) ListIPs(req *ListIPsRequest, opts ...scw.RequestOption) (*ListIPsResponse, error) {
 	var err error
 
@@ -4700,11 +5977,6 @@ func (s *API) ListIPs(req *ListIPsRequest, opts ...scw.RequestOption) (*ListIPsR
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	parameter.AddToQuery(query, "project", req.Project)
 	parameter.AddToQuery(query, "organization", req.Organization)
@@ -4714,16 +5986,16 @@ func (s *API) ListIPs(req *ListIPsRequest, opts ...scw.RequestOption) (*ListIPsR
 	parameter.AddToQuery(query, "name", req.Name)
 	parameter.AddToQuery(query, "per_page", req.PerPage)
 	parameter.AddToQuery(query, "page", req.Page)
+	parameter.AddToQuery(query, "type", req.Type)
 
 	if fmt.Sprint(req.Zone) == "" {
 		return nil, errors.New("field Zone cannot be empty in request")
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/ips",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/ips",
+		Query:  query,
 	}
 
 	var resp ListIPsResponse
@@ -4735,52 +6007,32 @@ func (s *API) ListIPs(req *ListIPsRequest, opts ...scw.RequestOption) (*ListIPsR
 	return &resp, nil
 }
 
-type CreateIPRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// Deprecated: Organization: organization ID in which the IP is reserved.
-	// Precisely one of Organization, Project must be set.
-	Organization *string `json:"organization,omitempty"`
-	// Project: project ID in which the IP is reserved.
-	// Precisely one of Organization, Project must be set.
-	Project *string `json:"project,omitempty"`
-	// Tags: tags of the IP.
-	Tags []string `json:"tags,omitempty"`
-	// Server: UUID of the Instance you want to attach the IP to.
-	Server *string `json:"server,omitempty"`
-	// Type: IP type to reserve (either 'nat', 'routed_ipv4' or 'routed_ipv6').
-	// Default value: unknown_iptype
-	Type IPType `json:"type"`
-}
-
-// CreateIP: reserve a flexible IP.
-// Reserve a flexible IP and attach it to the specified Instance.
+// CreateIP: Reserve a flexible IP and attach it to the specified Instance.
 func (s *API) CreateIP(req *CreateIPRequest, opts ...scw.RequestOption) (*CreateIPResponse, error) {
 	var err error
 
+	if req.Zone == "" {
+		defaultZone, _ := s.client.GetDefaultZone()
+		req.Zone = defaultZone
+	}
+
 	defaultProject, exist := s.client.GetDefaultProjectID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Project = &defaultProject
 	}
 
 	defaultOrganization, exist := s.client.GetDefaultOrganizationID()
-	if exist && req.Organization == nil && req.Project == nil {
+	if exist && req.Project == nil && req.Organization == nil {
 		req.Organization = &defaultOrganization
 	}
 
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-
 	if fmt.Sprint(req.Zone) == "" {
 		return nil, errors.New("field Zone cannot be empty in request")
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/ips",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/ips",
 	}
 
 	err = scwReq.SetBody(req)
@@ -4797,15 +6049,7 @@ func (s *API) CreateIP(req *CreateIPRequest, opts ...scw.RequestOption) (*Create
 	return &resp, nil
 }
 
-type GetIPRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// IP: IP ID or address to get.
-	IP string `json:"-"`
-}
-
-// GetIP: get a flexible IP.
-// Get details of an IP with the specified ID or address.
+// GetIP: Get details of an IP with the specified ID or address.
 func (s *API) GetIP(req *GetIPRequest, opts ...scw.RequestOption) (*GetIPResponse, error) {
 	var err error
 
@@ -4823,9 +6067,8 @@ func (s *API) GetIP(req *GetIPRequest, opts ...scw.RequestOption) (*GetIPRespons
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/ips/" + fmt.Sprint(req.IP) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/ips/" + fmt.Sprint(req.IP) + "",
 	}
 
 	var resp GetIPResponse
@@ -4837,24 +6080,7 @@ func (s *API) GetIP(req *GetIPRequest, opts ...scw.RequestOption) (*GetIPRespons
 	return &resp, nil
 }
 
-type UpdateIPRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// IP: IP ID or IP address.
-	IP string `json:"-"`
-	// Reverse: reverse domain name.
-	Reverse *NullableStringValue `json:"reverse,omitempty"`
-	// Type: convert a 'nat' IP to a 'routed_ipv4'.
-	// Default value: unknown_iptype
-	Type IPType `json:"type"`
-	// Tags: an array of keywords you want to tag this IP with.
-	Tags *[]string `json:"tags,omitempty"`
-
-	Server *NullableStringValue `json:"server,omitempty"`
-}
-
-// UpdateIP: update a flexible IP.
-// Update a flexible IP in the specified zone with the specified ID.
+// UpdateIP: Update a flexible IP in the specified zone with the specified ID.
 func (s *API) UpdateIP(req *UpdateIPRequest, opts ...scw.RequestOption) (*UpdateIPResponse, error) {
 	var err error
 
@@ -4872,9 +6098,8 @@ func (s *API) UpdateIP(req *UpdateIPRequest, opts ...scw.RequestOption) (*Update
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PATCH",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/ips/" + fmt.Sprint(req.IP) + "",
-		Headers: http.Header{},
+		Method: "PATCH",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/ips/" + fmt.Sprint(req.IP) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -4891,15 +6116,7 @@ func (s *API) UpdateIP(req *UpdateIPRequest, opts ...scw.RequestOption) (*Update
 	return &resp, nil
 }
 
-type DeleteIPRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// IP: ID or address of the IP to delete.
-	IP string `json:"-"`
-}
-
-// DeleteIP: delete a flexible IP.
-// Delete the IP with the specified ID.
+// DeleteIP: Delete the IP with the specified ID.
 func (s *API) DeleteIP(req *DeleteIPRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -4917,9 +6134,8 @@ func (s *API) DeleteIP(req *DeleteIPRequest, opts ...scw.RequestOption) error {
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/ips/" + fmt.Sprint(req.IP) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/ips/" + fmt.Sprint(req.IP) + "",
 	}
 
 	err = s.client.Do(scwReq, nil, opts...)
@@ -4929,22 +6145,7 @@ func (s *API) DeleteIP(req *DeleteIPRequest, opts ...scw.RequestOption) error {
 	return nil
 }
 
-type ListPrivateNICsRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: instance to which the private NIC is attached.
-	ServerID string `json:"-"`
-	// Tags: private NIC tags.
-	Tags []string `json:"-"`
-	// PerPage: a positive integer lower or equal to 100 to select the number of items to return.
-	// Default value: 50
-	PerPage *uint32 `json:"-"`
-	// Page: a positive integer to choose the page to return.
-	Page *int32 `json:"-"`
-}
-
-// ListPrivateNICs: list all private NICs.
-// List all private NICs of a specified Instance.
+// ListPrivateNICs: List all private NICs of a specified Instance.
 func (s *API) ListPrivateNICs(req *ListPrivateNICsRequest, opts ...scw.RequestOption) (*ListPrivateNICsResponse, error) {
 	var err error
 
@@ -4953,11 +6154,6 @@ func (s *API) ListPrivateNICs(req *ListPrivateNICsRequest, opts ...scw.RequestOp
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	if len(req.Tags) != 0 {
 		parameter.AddToQuery(query, "tags", strings.Join(req.Tags, ","))
@@ -4974,10 +6170,9 @@ func (s *API) ListPrivateNICs(req *ListPrivateNICsRequest, opts ...scw.RequestOp
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private_nics",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private_nics",
+		Query:  query,
 	}
 
 	var resp ListPrivateNICsResponse
@@ -4989,20 +6184,7 @@ func (s *API) ListPrivateNICs(req *ListPrivateNICsRequest, opts ...scw.RequestOp
 	return &resp, nil
 }
 
-type CreatePrivateNICRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: UUID of the Instance the private NIC will be attached to.
-	ServerID string `json:"-"`
-	// PrivateNetworkID: UUID of the private network where the private NIC will be attached.
-	PrivateNetworkID string `json:"private_network_id,omitempty"`
-	// Tags: private NIC tags.
-	Tags []string `json:"tags,omitempty"`
-	// IPIDs: ip_ids defined from IPAM.
-	IPIDs []string `json:"ip_ids,omitempty"`
-}
-
-// CreatePrivateNIC: create a private NIC connecting an Instance to a Private Network.
+// CreatePrivateNIC: Create a private NIC connecting an Instance to a Private Network.
 func (s *API) CreatePrivateNIC(req *CreatePrivateNICRequest, opts ...scw.RequestOption) (*CreatePrivateNICResponse, error) {
 	var err error
 
@@ -5020,9 +6202,8 @@ func (s *API) CreatePrivateNIC(req *CreatePrivateNICRequest, opts ...scw.Request
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private_nics",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private_nics",
 	}
 
 	err = scwReq.SetBody(req)
@@ -5039,17 +6220,7 @@ func (s *API) CreatePrivateNIC(req *CreatePrivateNICRequest, opts ...scw.Request
 	return &resp, nil
 }
 
-type GetPrivateNICRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: instance to which the private NIC is attached.
-	ServerID string `json:"-"`
-	// PrivateNicID: private NIC unique ID.
-	PrivateNicID string `json:"-"`
-}
-
-// GetPrivateNIC: get a private NIC.
-// Get private NIC properties.
+// GetPrivateNIC: Get private NIC properties.
 func (s *API) GetPrivateNIC(req *GetPrivateNICRequest, opts ...scw.RequestOption) (*GetPrivateNICResponse, error) {
 	var err error
 
@@ -5071,9 +6242,8 @@ func (s *API) GetPrivateNIC(req *GetPrivateNICRequest, opts ...scw.RequestOption
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private_nics/" + fmt.Sprint(req.PrivateNicID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private_nics/" + fmt.Sprint(req.PrivateNicID) + "",
 	}
 
 	var resp GetPrivateNICResponse
@@ -5081,23 +6251,11 @@ func (s *API) GetPrivateNIC(req *GetPrivateNICRequest, opts ...scw.RequestOption
 	err = s.client.Do(scwReq, &resp, opts...)
 	if err != nil {
 		return nil, err
-	}
-	return &resp, nil
-}
-
-type UpdatePrivateNICRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: UUID of the Instance the private NIC will be attached to.
-	ServerID string `json:"-"`
-	// PrivateNicID: private NIC unique ID.
-	PrivateNicID string `json:"-"`
-	// Tags: tags used to select private NIC/s.
-	Tags *[]string `json:"tags,omitempty"`
+	}
+	return &resp, nil
 }
 
-// UpdatePrivateNIC: update a private NIC.
-// Update one or more parameter(s) of a specified private NIC.
+// UpdatePrivateNIC: Update one or more parameter(s) of a specified private NIC.
 func (s *API) UpdatePrivateNIC(req *UpdatePrivateNICRequest, opts ...scw.RequestOption) (*PrivateNIC, error) {
 	var err error
 
@@ -5119,9 +6277,8 @@ func (s *API) UpdatePrivateNIC(req *UpdatePrivateNICRequest, opts ...scw.Request
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "PATCH",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private_nics/" + fmt.Sprint(req.PrivateNicID) + "",
-		Headers: http.Header{},
+		Method: "PATCH",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private_nics/" + fmt.Sprint(req.PrivateNicID) + "",
 	}
 
 	err = scwReq.SetBody(req)
@@ -5138,16 +6295,7 @@ func (s *API) UpdatePrivateNIC(req *UpdatePrivateNICRequest, opts ...scw.Request
 	return &resp, nil
 }
 
-type DeletePrivateNICRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// ServerID: instance to which the private NIC is attached.
-	ServerID string `json:"-"`
-	// PrivateNicID: private NIC unique ID.
-	PrivateNicID string `json:"-"`
-}
-
-// DeletePrivateNIC: delete a private NIC.
+// DeletePrivateNIC: Delete a private NIC.
 func (s *API) DeletePrivateNIC(req *DeletePrivateNICRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -5169,9 +6317,8 @@ func (s *API) DeletePrivateNIC(req *DeletePrivateNICRequest, opts ...scw.Request
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "DELETE",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private_nics/" + fmt.Sprint(req.PrivateNicID) + "",
-		Headers: http.Header{},
+		Method: "DELETE",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/servers/" + fmt.Sprint(req.ServerID) + "/private_nics/" + fmt.Sprint(req.PrivateNicID) + "",
 	}
 
 	err = s.client.Do(scwReq, nil, opts...)
@@ -5181,24 +6328,7 @@ func (s *API) DeletePrivateNIC(req *DeletePrivateNICRequest, opts ...scw.Request
 	return nil
 }
 
-type ListBootscriptsRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	Arch *string `json:"-"`
-
-	Title *string `json:"-"`
-
-	Default *bool `json:"-"`
-
-	Public *bool `json:"-"`
-
-	PerPage *uint32 `json:"-"`
-
-	Page *int32 `json:"-"`
-}
-
-// Deprecated: ListBootscripts: list bootscripts.
+// Deprecated: ListBootscripts: List bootscripts.
 func (s *API) ListBootscripts(req *ListBootscriptsRequest, opts ...scw.RequestOption) (*ListBootscriptsResponse, error) {
 	var err error
 
@@ -5207,11 +6337,6 @@ func (s *API) ListBootscripts(req *ListBootscriptsRequest, opts ...scw.RequestOp
 		req.Zone = defaultZone
 	}
 
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
 	query := url.Values{}
 	parameter.AddToQuery(query, "arch", req.Arch)
 	parameter.AddToQuery(query, "title", req.Title)
@@ -5225,10 +6350,9 @@ func (s *API) ListBootscripts(req *ListBootscriptsRequest, opts ...scw.RequestOp
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/bootscripts",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/bootscripts",
+		Query:  query,
 	}
 
 	var resp ListBootscriptsResponse
@@ -5240,15 +6364,7 @@ func (s *API) ListBootscripts(req *ListBootscriptsRequest, opts ...scw.RequestOp
 	return &resp, nil
 }
 
-type GetBootscriptRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	BootscriptID string `json:"-"`
-}
-
-// Deprecated: GetBootscript: get bootscripts.
-// Get details of a bootscript with the specified ID.
+// Deprecated: GetBootscript: Get details of a bootscript with the specified ID.
 func (s *API) GetBootscript(req *GetBootscriptRequest, opts ...scw.RequestOption) (*GetBootscriptResponse, error) {
 	var err error
 
@@ -5266,9 +6382,8 @@ func (s *API) GetBootscript(req *GetBootscriptRequest, opts ...scw.RequestOption
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/bootscripts/" + fmt.Sprint(req.BootscriptID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/bootscripts/" + fmt.Sprint(req.BootscriptID) + "",
 	}
 
 	var resp GetBootscriptResponse
@@ -5280,15 +6395,7 @@ func (s *API) GetBootscript(req *GetBootscriptRequest, opts ...scw.RequestOption
 	return &resp, nil
 }
 
-type GetDashboardRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-
-	Organization *string `json:"-"`
-
-	Project *string `json:"-"`
-}
-
+// GetDashboard:
 func (s *API) GetDashboard(req *GetDashboardRequest, opts ...scw.RequestOption) (*GetDashboardResponse, error) {
 	var err error
 
@@ -5306,10 +6413,9 @@ func (s *API) GetDashboard(req *GetDashboardRequest, opts ...scw.RequestOption)
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/dashboard",
-		Query:   query,
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/dashboard",
+		Query:  query,
 	}
 
 	var resp GetDashboardResponse
@@ -5321,19 +6427,7 @@ func (s *API) GetDashboard(req *GetDashboardRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type PlanBlockMigrationRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// VolumeID: the volume for which the migration plan will be generated.
-	// Precisely one of SnapshotID, VolumeID must be set.
-	VolumeID *string `json:"volume_id,omitempty"`
-	// SnapshotID: the snapshot for which the migration plan will be generated.
-	// Precisely one of SnapshotID, VolumeID must be set.
-	SnapshotID *string `json:"snapshot_id,omitempty"`
-}
-
-// PlanBlockMigration: get a volume or snapshot's migration plan.
-// Given a volume or snapshot, returns the migration plan for a call to the RPC ApplyBlockMigration. This plan will include zero or one volume, and zero or more snapshots, which will need to be migrated together. This RPC does not perform the actual migration itself, ApplyBlockMigration must be used. The validation_key value returned by this call must be provided to the ApplyBlockMigration call to confirm that all resources listed in the plan should be migrated.
+// PlanBlockMigration: Given a volume or snapshot, returns the migration plan for a call to the RPC ApplyBlockMigration. This plan will include zero or one volume, and zero or more snapshots, which will need to be migrated together. This RPC does not perform the actual migration itself, ApplyBlockMigration must be used. The validation_key value returned by this call must be provided to the ApplyBlockMigration call to confirm that all resources listed in the plan should be migrated.
 func (s *API) PlanBlockMigration(req *PlanBlockMigrationRequest, opts ...scw.RequestOption) (*MigrationPlan, error) {
 	var err error
 
@@ -5347,9 +6441,8 @@ func (s *API) PlanBlockMigration(req *PlanBlockMigrationRequest, opts ...scw.Req
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/block-migration/plan",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/block-migration/plan",
 	}
 
 	err = scwReq.SetBody(req)
@@ -5366,21 +6459,7 @@ func (s *API) PlanBlockMigration(req *PlanBlockMigrationRequest, opts ...scw.Req
 	return &resp, nil
 }
 
-type ApplyBlockMigrationRequest struct {
-	// Zone: zone to target. If none is passed will use default zone from the config.
-	Zone scw.Zone `json:"-"`
-	// VolumeID: the volume to migrate, along with potentially other resources, according to the migration plan generated with a call to PlanBlockMigration.
-	// Precisely one of SnapshotID, VolumeID must be set.
-	VolumeID *string `json:"volume_id,omitempty"`
-	// SnapshotID: the snapshot to migrate, along with potentially other resources, according to the migration plan generated with a call to PlanBlockMigration.
-	// Precisely one of SnapshotID, VolumeID must be set.
-	SnapshotID *string `json:"snapshot_id,omitempty"`
-	// ValidationKey: a value to be retrieved from a call to PlanBlockMigration, to confirm that the volume and/or snapshots specified in said plan should be migrated.
-	ValidationKey string `json:"validation_key,omitempty"`
-}
-
-// ApplyBlockMigration: migrate a volume and/or snapshots to SBS (Scaleway Block Storage).
-// To be used, this RPC must be preceded by a call to PlanBlockMigration. To migrate all resources mentioned in the MigrationPlan, the validation_key returned in the MigrationPlan must be provided.
+// ApplyBlockMigration: To be used, this RPC must be preceded by a call to PlanBlockMigration. To migrate all resources mentioned in the MigrationPlan, the validation_key returned in the MigrationPlan must be provided.
 func (s *API) ApplyBlockMigration(req *ApplyBlockMigrationRequest, opts ...scw.RequestOption) error {
 	var err error
 
@@ -5394,9 +6473,8 @@ func (s *API) ApplyBlockMigration(req *ApplyBlockMigrationRequest, opts ...scw.R
 	}
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "POST",
-		Path:    "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/block-migration/apply",
-		Headers: http.Header{},
+		Method: "POST",
+		Path:   "/instance/v1/zones/" + fmt.Sprint(req.Zone) + "/block-migration/apply",
 	}
 
 	err = scwReq.SetBody(req)
@@ -5410,193 +6488,3 @@ func (s *API) ApplyBlockMigration(req *ApplyBlockMigrationRequest, opts ...scw.R
 	}
 	return nil
 }
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListServersResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListServersResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListServersResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Servers = append(r.Servers, results.Servers...)
-	r.TotalCount += uint32(len(results.Servers))
-	return uint32(len(results.Servers)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListImagesResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListImagesResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListImagesResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Images = append(r.Images, results.Images...)
-	r.TotalCount += uint32(len(results.Images))
-	return uint32(len(results.Images)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListSnapshotsResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListSnapshotsResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListSnapshotsResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Snapshots = append(r.Snapshots, results.Snapshots...)
-	r.TotalCount += uint32(len(results.Snapshots))
-	return uint32(len(results.Snapshots)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListVolumesResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListVolumesResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListVolumesResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Volumes = append(r.Volumes, results.Volumes...)
-	r.TotalCount += uint32(len(results.Volumes))
-	return uint32(len(results.Volumes)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListSecurityGroupsResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListSecurityGroupsResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListSecurityGroupsResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.SecurityGroups = append(r.SecurityGroups, results.SecurityGroups...)
-	r.TotalCount += uint32(len(results.SecurityGroups))
-	return uint32(len(results.SecurityGroups)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListSecurityGroupRulesResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListSecurityGroupRulesResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListSecurityGroupRulesResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Rules = append(r.Rules, results.Rules...)
-	r.TotalCount += uint32(len(results.Rules))
-	return uint32(len(results.Rules)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListPlacementGroupsResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListPlacementGroupsResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListPlacementGroupsResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.PlacementGroups = append(r.PlacementGroups, results.PlacementGroups...)
-	r.TotalCount += uint32(len(results.PlacementGroups))
-	return uint32(len(results.PlacementGroups)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListIPsResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListIPsResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListIPsResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.IPs = append(r.IPs, results.IPs...)
-	r.TotalCount += uint32(len(results.IPs))
-	return uint32(len(results.IPs)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListPrivateNICsResponse) UnsafeGetTotalCount() uint64 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListPrivateNICsResponse) UnsafeAppend(res interface{}) (uint64, error) {
-	results, ok := res.(*ListPrivateNICsResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.PrivateNics = append(r.PrivateNics, results.PrivateNics...)
-	r.TotalCount += uint64(len(results.PrivateNics))
-	return uint64(len(results.PrivateNics)), nil
-}
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListBootscriptsResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListBootscriptsResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListBootscriptsResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Bootscripts = append(r.Bootscripts, results.Bootscripts...)
-	r.TotalCount += uint32(len(results.Bootscripts))
-	return uint32(len(results.Bootscripts)), nil
-}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_utils.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_utils.go
index c9173840e3e..0d5401df984 100644
--- a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_utils.go
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/instance_utils.go
@@ -109,10 +109,19 @@ type AttachVolumeResponse struct {
 func volumesToVolumeTemplates(volumes map[string]*VolumeServer) map[string]*VolumeServerTemplate {
 	volumeTemplates := map[string]*VolumeServerTemplate{}
 	for key, volume := range volumes {
-		volumeTemplates[key] = &VolumeServerTemplate{
-			ID:   &volume.ID,
-			Name: &volume.Name,
+		volumeTemplate := &VolumeServerTemplate{
+			ID: &volume.ID,
 		}
+
+		if volume.Name != "" {
+			volumeTemplate.Name = &volume.Name
+		}
+
+		if volume.VolumeType == VolumeServerVolumeTypeSbsVolume {
+			volumeTemplate.VolumeType = VolumeVolumeTypeSbsVolume
+		}
+
+		volumeTemplates[key] = volumeTemplate
 	}
 	return volumeTemplates
 }
@@ -122,6 +131,15 @@ func volumesToVolumeTemplates(volumes map[string]*VolumeServer) map[string]*Volu
 // Note: Implementation is thread-safe.
 func (s *API) AttachVolume(req *AttachVolumeRequest, opts ...scw.RequestOption) (*AttachVolumeResponse, error) {
 	defer lockServer(req.Zone, req.ServerID).Unlock()
+	// check where the volume comes from
+	volume, err := s.getUnknownVolume(&getUnknownVolumeRequest{
+		Zone:     req.Zone,
+		VolumeID: req.VolumeID,
+	})
+	if err != nil {
+		return nil, err
+	}
+
 	// get server with volumes
 	getServerResponse, err := s.GetServer(&GetServerRequest{
 		Zone:     req.Zone,
@@ -144,9 +162,13 @@ func (s *API) AttachVolume(req *AttachVolumeRequest, opts ...scw.RequestOption)
 		if _, ok := newVolumes[key]; !ok {
 			newVolumes[key] = &VolumeServerTemplate{
 				ID: &req.VolumeID,
-				// name is ignored on this PATCH
-				Name: &req.VolumeID,
 			}
+			if volume.Type == VolumeVolumeTypeSbsVolume {
+				newVolumes[key].VolumeType = VolumeVolumeTypeSbsVolume
+			} else {
+				newVolumes[key].Name = &req.VolumeID
+			}
+
 			found = true
 			break
 		}
@@ -173,6 +195,10 @@ func (s *API) AttachVolume(req *AttachVolumeRequest, opts ...scw.RequestOption)
 type DetachVolumeRequest struct {
 	Zone     scw.Zone `json:"-"`
 	VolumeID string   `json:"-"`
+	// IsBlockVolume should be set to true if volume is from block API,
+	// can be set to false if volume is from instance API,
+	// if left nil both API will be tried
+	IsBlockVolume *bool `json:"-"`
 }
 
 // DetachVolumeResponse contains the updated server after detaching a volume
@@ -184,27 +210,23 @@ type DetachVolumeResponse struct {
 //
 // Note: Implementation is thread-safe.
 func (s *API) DetachVolume(req *DetachVolumeRequest, opts ...scw.RequestOption) (*DetachVolumeResponse, error) {
-	// get volume
-	getVolumeResponse, err := s.GetVolume(&GetVolumeRequest{
+	volume, err := s.getUnknownVolume(&getUnknownVolumeRequest{
 		Zone:     req.Zone,
 		VolumeID: req.VolumeID,
 	})
 	if err != nil {
 		return nil, err
 	}
-	if getVolumeResponse.Volume == nil {
-		return nil, errors.New("expected volume to have value in response")
-	}
-	if getVolumeResponse.Volume.Server == nil {
+
+	if volume.ServerID == nil {
 		return nil, errors.New("volume should be attached to a server")
 	}
-	serverID := getVolumeResponse.Volume.Server.ID
 
-	defer lockServer(req.Zone, serverID).Unlock()
+	defer lockServer(req.Zone, *volume.ServerID).Unlock()
 	// get server with volumes
 	getServerResponse, err := s.GetServer(&GetServerRequest{
 		Zone:     req.Zone,
-		ServerID: serverID,
+		ServerID: *volume.ServerID,
 	})
 	if err != nil {
 		return nil, err
@@ -222,7 +244,7 @@ func (s *API) DetachVolume(req *DetachVolumeRequest, opts ...scw.RequestOption)
 	// update server
 	updateServerResponse, err := s.updateServer(&UpdateServerRequest{
 		Zone:     req.Zone,
-		ServerID: serverID,
+		ServerID: *volume.ServerID,
 		Volumes:  &newVolumes,
 	})
 	if err != nil {
@@ -286,32 +308,6 @@ func (r *ListImagesResponse) UnsafeSetTotalCount(totalCount int) {
 	r.TotalCount = uint32(totalCount)
 }
 
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListServersTypesResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListServersTypesResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListServersTypesResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	if r.Servers == nil {
-		r.Servers = make(map[string]*ServerType, len(results.Servers))
-	}
-
-	for name, serverType := range results.Servers {
-		r.Servers[name] = serverType
-	}
-
-	r.TotalCount += uint32(len(results.Servers))
-	return uint32(len(results.Servers)), nil
-}
-
 func (v *NullableStringValue) UnmarshalJSON(b []byte) error {
 	if string(b) == "null" {
 		v.Null = true
@@ -436,29 +432,3 @@ func (s *API) WaitForMACAddress(req *WaitForMACAddressRequest, opts ...scw.Reque
 func (r *GetServerTypesAvailabilityResponse) UnsafeSetTotalCount(totalCount int) {
 	r.TotalCount = uint32(totalCount)
 }
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *GetServerTypesAvailabilityResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *GetServerTypesAvailabilityResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*GetServerTypesAvailabilityResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	if r.Servers == nil {
-		r.Servers = make(map[string]*GetServerTypesAvailabilityResponseAvailability, len(results.Servers))
-	}
-
-	for name, serverTypeAvailability := range results.Servers {
-		r.Servers[name] = serverTypeAvailability
-	}
-
-	r.TotalCount += uint32(len(results.Servers))
-	return uint32(len(results.Servers)), nil
-}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/security_group_utils.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/security_group_utils.go
deleted file mode 100644
index 2a79ea5c086..00000000000
--- a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/security_group_utils.go
+++ /dev/null
@@ -1,222 +0,0 @@
-package instance
-
-import (
-	"fmt"
-
-	"github.com/scaleway/scaleway-sdk-go/internal/errors"
-	"github.com/scaleway/scaleway-sdk-go/scw"
-)
-
-// UpdateSecurityGroupRequest contains the parameters to update a security group
-type UpdateSecurityGroupRequest struct {
-	Zone            scw.Zone `json:"-"`
-	SecurityGroupID string   `json:"-"`
-
-	Name                  *string              `json:"name,omitempty"`
-	Description           *string              `json:"description,omitempty"`
-	InboundDefaultPolicy  *SecurityGroupPolicy `json:"inbound_default_policy,omitempty"`
-	OutboundDefaultPolicy *SecurityGroupPolicy `json:"outbound_default_policy,omitempty"`
-	Stateful              *bool                `json:"stateful,omitempty"`
-	OrganizationDefault   *bool                `json:"organization_default,omitempty"`
-	ProjectDefault        *bool                `json:"project_default,omitempty"`
-	EnableDefaultSecurity *bool                `json:"enable_default_security,omitempty"`
-	Tags                  *[]string            `json:"tags,omitempty"`
-}
-
-type UpdateSecurityGroupResponse struct {
-	SecurityGroup *SecurityGroup
-}
-
-// UpdateSecurityGroup updates a security group.
-func (s *API) UpdateSecurityGroup(req *UpdateSecurityGroupRequest, opts ...scw.RequestOption) (*UpdateSecurityGroupResponse, error) {
-	var err error
-
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-
-	if fmt.Sprint(req.Zone) == "" {
-		return nil, errors.New("field Zone cannot be empty in request")
-	}
-
-	if fmt.Sprint(req.SecurityGroupID) == "" {
-		return nil, errors.New("field SecurityGroupID cannot be empty in request")
-	}
-
-	getSGResponse, err := s.GetSecurityGroup(&GetSecurityGroupRequest{
-		Zone:            req.Zone,
-		SecurityGroupID: req.SecurityGroupID,
-	}, opts...)
-	if err != nil {
-		return nil, err
-	}
-
-	setRequest := &setSecurityGroupRequest{
-		ID:                    getSGResponse.SecurityGroup.ID,
-		Name:                  getSGResponse.SecurityGroup.Name,
-		Description:           getSGResponse.SecurityGroup.Description,
-		Organization:          getSGResponse.SecurityGroup.Organization,
-		Project:               getSGResponse.SecurityGroup.Project,
-		OrganizationDefault:   getSGResponse.SecurityGroup.OrganizationDefault,
-		ProjectDefault:        getSGResponse.SecurityGroup.ProjectDefault,
-		OutboundDefaultPolicy: getSGResponse.SecurityGroup.OutboundDefaultPolicy,
-		InboundDefaultPolicy:  getSGResponse.SecurityGroup.InboundDefaultPolicy,
-		Stateful:              getSGResponse.SecurityGroup.Stateful,
-		Zone:                  req.Zone,
-		EnableDefaultSecurity: getSGResponse.SecurityGroup.EnableDefaultSecurity,
-		CreationDate:          getSGResponse.SecurityGroup.CreationDate,
-		ModificationDate:      getSGResponse.SecurityGroup.ModificationDate,
-		Servers:               getSGResponse.SecurityGroup.Servers,
-	}
-
-	// Override the values that need to be updated
-	if req.Name != nil {
-		setRequest.Name = *req.Name
-	}
-	if req.Description != nil {
-		setRequest.Description = *req.Description
-	}
-	if req.InboundDefaultPolicy != nil {
-		setRequest.InboundDefaultPolicy = *req.InboundDefaultPolicy
-	}
-	if req.OutboundDefaultPolicy != nil {
-		setRequest.OutboundDefaultPolicy = *req.OutboundDefaultPolicy
-	}
-	if req.Stateful != nil {
-		setRequest.Stateful = *req.Stateful
-	}
-	if req.OrganizationDefault != nil {
-		setRequest.OrganizationDefault = req.OrganizationDefault
-	}
-	if req.ProjectDefault != nil {
-		setRequest.ProjectDefault = *req.ProjectDefault
-	}
-	if req.EnableDefaultSecurity != nil {
-		setRequest.EnableDefaultSecurity = *req.EnableDefaultSecurity
-	}
-	if req.Tags != nil {
-		setRequest.Tags = req.Tags
-	}
-
-	setRes, err := s.setSecurityGroup(setRequest, opts...)
-	if err != nil {
-		return nil, err
-	}
-
-	return &UpdateSecurityGroupResponse{
-		SecurityGroup: setRes.SecurityGroup,
-	}, nil
-}
-
-// UpdateSecurityGroupRuleRequest contains the parameters to update a security group rule
-type UpdateSecurityGroupRuleRequest struct {
-	Zone                scw.Zone `json:"-"`
-	SecurityGroupID     string   `json:"-"`
-	SecurityGroupRuleID string   `json:"-"`
-
-	Protocol  *SecurityGroupRuleProtocol  `json:"protocol"`
-	Direction *SecurityGroupRuleDirection `json:"direction"`
-	Action    *SecurityGroupRuleAction    `json:"action"`
-	IPRange   *scw.IPNet                  `json:"ip_range"`
-	Position  *uint32                     `json:"position"`
-
-	// If set to 0, DestPortFrom will be removed.
-	// See SecurityGroupRule.DestPortFrom for more information
-	DestPortFrom *uint32 `json:"dest_port_from"`
-
-	// If set to 0, DestPortTo will be removed.
-	// See SecurityGroupRule.DestPortTo for more information
-	DestPortTo *uint32 `json:"dest_port_to"`
-}
-
-type UpdateSecurityGroupRuleResponse struct {
-	Rule *SecurityGroupRule `json:"security_rule"`
-}
-
-// UpdateSecurityGroupRule updates a security group.
-func (s *API) UpdateSecurityGroupRule(req *UpdateSecurityGroupRuleRequest, opts ...scw.RequestOption) (*UpdateSecurityGroupRuleResponse, error) {
-	var err error
-
-	if fmt.Sprint(req.Zone) == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-
-	if fmt.Sprint(req.Zone) == "" {
-		return nil, errors.New("field Zone cannot be empty in request")
-	}
-
-	res, err := s.GetSecurityGroupRule(&GetSecurityGroupRuleRequest{
-		SecurityGroupRuleID: req.SecurityGroupRuleID,
-		SecurityGroupID:     req.SecurityGroupID,
-		Zone:                req.Zone,
-	})
-	if err != nil {
-		return nil, err
-	}
-
-	setRequest := &setSecurityGroupRuleRequest{
-		Zone:                req.Zone,
-		SecurityGroupID:     req.SecurityGroupID,
-		SecurityGroupRuleID: req.SecurityGroupRuleID,
-		ID:                  req.SecurityGroupRuleID,
-		Direction:           res.Rule.Direction,
-		Protocol:            res.Rule.Protocol,
-		DestPortFrom:        res.Rule.DestPortFrom,
-		DestPortTo:          res.Rule.DestPortTo,
-		IPRange:             res.Rule.IPRange,
-		Action:              res.Rule.Action,
-		Position:            res.Rule.Position,
-		Editable:            res.Rule.Editable,
-	}
-
-	// Override the values that need to be updated
-	if req.Action != nil {
-		setRequest.Action = *req.Action
-	}
-	if req.IPRange != nil {
-		setRequest.IPRange = *req.IPRange
-	}
-	if req.DestPortTo != nil {
-		if *req.DestPortTo > 0 {
-			setRequest.DestPortTo = req.DestPortTo
-		} else {
-			setRequest.DestPortTo = nil
-		}
-	}
-	if req.DestPortFrom != nil {
-		if *req.DestPortFrom > 0 {
-			setRequest.DestPortFrom = req.DestPortFrom
-		} else {
-			setRequest.DestPortFrom = nil
-		}
-	}
-	if req.DestPortFrom != nil && req.DestPortTo != nil && *req.DestPortFrom == *req.DestPortTo {
-		setRequest.DestPortTo = nil
-	}
-	if req.Protocol != nil {
-		setRequest.Protocol = *req.Protocol
-	}
-	if req.Direction != nil {
-		setRequest.Direction = *req.Direction
-	}
-	if req.Position != nil {
-		setRequest.Position = *req.Position
-	}
-
-	// When we use ICMP protocol portFrom and portTo should be set to nil
-	if req.Protocol != nil && *req.Protocol == SecurityGroupRuleProtocolICMP {
-		setRequest.DestPortFrom = nil
-		setRequest.DestPortTo = nil
-	}
-
-	resp, err := s.setSecurityGroupRule(setRequest)
-	if err != nil {
-		return nil, err
-	}
-
-	return &UpdateSecurityGroupRuleResponse{
-		Rule: resp.Rule,
-	}, nil
-}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/snapshot_utils.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/snapshot_utils.go
index ec25e8af1cd..6efc419d3bb 100644
--- a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/snapshot_utils.go
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/snapshot_utils.go
@@ -1,7 +1,6 @@
 package instance
 
 import (
-	"fmt"
 	"time"
 
 	"github.com/scaleway/scaleway-sdk-go/internal/async"
@@ -55,68 +54,3 @@ func (s *API) WaitForSnapshot(req *WaitForSnapshotRequest, opts ...scw.RequestOp
 	}
 	return snapshot.(*Snapshot), nil
 }
-
-type UpdateSnapshotRequest struct {
-	Zone       scw.Zone
-	SnapshotID string
-	Name       *string   `json:"name,omitempty"`
-	Tags       *[]string `json:"tags,omitempty"`
-}
-
-type UpdateSnapshotResponse struct {
-	Snapshot *Snapshot
-}
-
-func (s *API) UpdateSnapshot(req *UpdateSnapshotRequest, opts ...scw.RequestOption) (*UpdateSnapshotResponse, error) {
-	var err error
-
-	if req.Zone == "" {
-		defaultZone, _ := s.client.GetDefaultZone()
-		req.Zone = defaultZone
-	}
-
-	if fmt.Sprint(req.Zone) == "" {
-		return nil, errors.New("field Zone cannot be empty in request")
-	}
-
-	if fmt.Sprint(req.SnapshotID) == "" {
-		return nil, errors.New("field SnapshotID cannot be empty in request")
-	}
-
-	getSnapshotResponse, err := s.GetSnapshot(&GetSnapshotRequest{
-		Zone:       req.Zone,
-		SnapshotID: req.SnapshotID,
-	}, opts...)
-	if err != nil {
-		return nil, err
-	}
-
-	setRequest := &setSnapshotRequest{
-		SnapshotID:       getSnapshotResponse.Snapshot.ID,
-		Zone:             getSnapshotResponse.Snapshot.Zone,
-		ID:               getSnapshotResponse.Snapshot.ID,
-		Name:             getSnapshotResponse.Snapshot.Name,
-		CreationDate:     getSnapshotResponse.Snapshot.CreationDate,
-		ModificationDate: getSnapshotResponse.Snapshot.ModificationDate,
-		Organization:     getSnapshotResponse.Snapshot.Organization,
-		Project:          getSnapshotResponse.Snapshot.Project,
-	}
-
-	// Override the values that need to be updated
-	if req.Name != nil {
-		setRequest.Name = *req.Name
-	}
-
-	if req.Tags != nil {
-		setRequest.Tags = req.Tags
-	}
-
-	setRes, err := s.setSnapshot(setRequest, opts...)
-	if err != nil {
-		return nil, err
-	}
-
-	return &UpdateSnapshotResponse{
-		Snapshot: setRes.Snapshot,
-	}, nil
-}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/volume_utils.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/volume_utils.go
index 710c3b5299f..30b98c6e9c5 100644
--- a/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/volume_utils.go
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/instance/v1/volume_utils.go
@@ -1,8 +1,10 @@
 package instance
 
 import (
+	goerrors "errors"
 	"time"
 
+	block "github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1"
 	"github.com/scaleway/scaleway-sdk-go/internal/async"
 	"github.com/scaleway/scaleway-sdk-go/internal/errors"
 	"github.com/scaleway/scaleway-sdk-go/scw"
@@ -54,3 +56,58 @@ func (s *API) WaitForVolume(req *WaitForVolumeRequest, opts ...scw.RequestOption
 	}
 	return volume.(*Volume), nil
 }
+
+type unknownVolume struct {
+	ID       string
+	ServerID *string
+	Type     VolumeVolumeType
+}
+
+type getUnknownVolumeRequest struct {
+	Zone          scw.Zone
+	VolumeID      string
+	IsBlockVolume *bool
+}
+
+// getUnknownVolume is used to get a volume that can be either from instance or block API
+func (s *API) getUnknownVolume(req *getUnknownVolumeRequest, opts ...scw.RequestOption) (*unknownVolume, error) {
+	volume := &unknownVolume{
+		ID: req.VolumeID,
+	}
+
+	// Try instance API
+	if req.IsBlockVolume == nil || *req.IsBlockVolume == false {
+		getVolumeResponse, err := s.GetVolume(&GetVolumeRequest{
+			Zone:     req.Zone,
+			VolumeID: req.VolumeID,
+		})
+		notFoundErr := &scw.ResourceNotFoundError{}
+		if err != nil && !goerrors.As(err, &notFoundErr) {
+			return nil, err
+		}
+
+		if getVolumeResponse != nil {
+			if getVolumeResponse.Volume != nil && getVolumeResponse.Volume.Server != nil {
+				volume.ServerID = &getVolumeResponse.Volume.Server.ID
+			}
+			volume.Type = getVolumeResponse.Volume.VolumeType
+		}
+	}
+	if volume.Type == "" && (req.IsBlockVolume == nil || *req.IsBlockVolume == true) {
+		getVolumeResponse, err := block.NewAPI(s.client).GetVolume(&block.GetVolumeRequest{
+			Zone:     req.Zone,
+			VolumeID: req.VolumeID,
+		})
+		if err != nil {
+			return nil, err
+		}
+		for _, reference := range getVolumeResponse.References {
+			if reference.ProductResourceType == "instance_server" {
+				volume.ServerID = &reference.ProductResourceID
+			}
+		}
+		volume.Type = VolumeVolumeTypeSbsVolume
+	}
+
+	return volume, nil
+}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/marketplace/v1/marketplace_sdk.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/marketplace/v1/marketplace_sdk.go
index b7a2311f889..b430fe8b00a 100644
--- a/vendor/github.com/scaleway/scaleway-sdk-go/api/marketplace/v1/marketplace_sdk.go
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/marketplace/v1/marketplace_sdk.go
@@ -39,184 +39,157 @@ var (
 	_ = namegenerator.GetRandomName
 )
 
-// API: marketplace API.
-type API struct {
-	client *scw.Client
-}
+// LocalImage: local image.
+type LocalImage struct {
+	// ID: version you will typically use to define an image in an API call.
+	ID string `json:"id"`
 
-// NewAPI returns a API object from a Scaleway client.
-func NewAPI(client *scw.Client) *API {
-	return &API{
-		client: client,
-	}
+	// CompatibleCommercialTypes: list of all commercial types that are compatible with this local image.
+	CompatibleCommercialTypes []string `json:"compatible_commercial_types"`
+
+	// Arch: supported architecture for this local image.
+	Arch string `json:"arch"`
+
+	// Zone: availability Zone where this local image is available.
+	Zone scw.Zone `json:"zone"`
 }
 
-type GetImageResponse struct {
-	Image *Image `json:"image"`
+// Organization: organization.
+type Organization struct {
+	ID string `json:"id"`
+
+	Name string `json:"name"`
 }
 
-type GetVersionResponse struct {
-	Version *Version `json:"version"`
+// Version: version.
+type Version struct {
+	// ID: UUID of this version.
+	ID string `json:"id"`
+
+	// Name: name of this version.
+	Name string `json:"name"`
+
+	// CreationDate: creation date of this image version.
+	CreationDate *time.Time `json:"creation_date"`
+
+	// ModificationDate: date of the last modification of this version.
+	ModificationDate *time.Time `json:"modification_date"`
+
+	// LocalImages: list of local images available in this version.
+	LocalImages []*LocalImage `json:"local_images"`
 }
 
 // Image: image.
 type Image struct {
 	// ID: UUID of this image.
 	ID string `json:"id"`
+
 	// Name: name of the image.
 	Name string `json:"name"`
+
 	// Description: text description of this image.
 	Description string `json:"description"`
+
 	// Logo: URL of this image's logo.
 	Logo string `json:"logo"`
+
 	// Categories: list of categories this image belongs to.
 	Categories []string `json:"categories"`
+
 	// CreationDate: creation date of this image.
 	CreationDate *time.Time `json:"creation_date"`
+
 	// ModificationDate: date of the last modification of this image.
 	ModificationDate *time.Time `json:"modification_date"`
+
 	// ValidUntil: expiration date of this image.
 	ValidUntil *time.Time `json:"valid_until"`
-	// Label: label of this image.
-	// Typically an identifier for a distribution (ex. "ubuntu_focal").
+
+	// Label: typically an identifier for a distribution (ex. "ubuntu_focal").
 	Label string `json:"label"`
+
 	// Versions: list of versions of this image.
 	Versions []*Version `json:"versions"`
+
 	// Organization: organization this image belongs to.
 	Organization *Organization `json:"organization"`
 
 	CurrentPublicVersion string `json:"current_public_version"`
 }
 
-type ListImagesResponse struct {
-	Images []*Image `json:"images"`
-
-	TotalCount uint32 `json:"total_count"`
-}
-
-type ListVersionsResponse struct {
-	Versions []*Version `json:"versions"`
-
-	TotalCount uint32 `json:"total_count"`
-}
-
-// LocalImage: local image.
-type LocalImage struct {
-	// ID: UUID of this local image.
-	// Version you will typically use to define an image in an API call.
-	ID string `json:"id"`
-	// CompatibleCommercialTypes: list of all commercial types that are compatible with this local image.
-	CompatibleCommercialTypes []string `json:"compatible_commercial_types"`
-	// Arch: supported architecture for this local image.
-	Arch string `json:"arch"`
-	// Zone: availability Zone where this local image is available.
-	Zone scw.Zone `json:"zone"`
-}
-
-type Organization struct {
-	ID string `json:"id"`
-
-	Name string `json:"name"`
+// GetImageRequest: get image request.
+type GetImageRequest struct {
+	// ImageID: display the image name.
+	ImageID string `json:"-"`
 }
 
-// Version: version.
-type Version struct {
-	// ID: UUID of this version.
-	ID string `json:"id"`
-	// Name: name of this version.
-	Name string `json:"name"`
-	// CreationDate: creation date of this image version.
-	CreationDate *time.Time `json:"creation_date"`
-	// ModificationDate: date of the last modification of this version.
-	ModificationDate *time.Time `json:"modification_date"`
-	// LocalImages: list of local images available in this version.
-	LocalImages []*LocalImage `json:"local_images"`
+// GetImageResponse: get image response.
+type GetImageResponse struct {
+	Image *Image `json:"image"`
 }
 
-// Service API
-
+// ListImagesRequest: list images request.
 type ListImagesRequest struct {
 	// PerPage: a positive integer lower or equal to 100 to select the number of items to display.
 	PerPage *uint32 `json:"-"`
+
 	// Page: a positive integer to choose the page to display.
 	Page *int32 `json:"-"`
 }
 
-// ListImages: list marketplace images.
-func (s *API) ListImages(req *ListImagesRequest, opts ...scw.RequestOption) (*ListImagesResponse, error) {
-	var err error
-
-	defaultPerPage, exist := s.client.GetDefaultPageSize()
-	if (req.PerPage == nil || *req.PerPage == 0) && exist {
-		req.PerPage = &defaultPerPage
-	}
-
-	query := url.Values{}
-	parameter.AddToQuery(query, "per_page", req.PerPage)
-	parameter.AddToQuery(query, "page", req.Page)
-
-	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/marketplace/v1/images",
-		Query:   query,
-		Headers: http.Header{},
-	}
-
-	var resp ListImagesResponse
+// ListImagesResponse: list images response.
+type ListImagesResponse struct {
+	Images []*Image `json:"images"`
 
-	err = s.client.Do(scwReq, &resp, opts...)
-	if err != nil {
-		return nil, err
-	}
-	return &resp, nil
+	TotalCount uint32 `json:"total_count"`
 }
 
-type GetImageRequest struct {
-	// ImageID: display the image name.
-	ImageID string `json:"-"`
+// UnsafeGetTotalCount should not be used
+// Internal usage only
+func (r *ListImagesResponse) UnsafeGetTotalCount() uint32 {
+	return r.TotalCount
 }
 
-// GetImage: get a specific marketplace image.
-func (s *API) GetImage(req *GetImageRequest, opts ...scw.RequestOption) (*GetImageResponse, error) {
-	var err error
-
-	if fmt.Sprint(req.ImageID) == "" {
-		return nil, errors.New("field ImageID cannot be empty in request")
-	}
-
-	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/marketplace/v1/images/" + fmt.Sprint(req.ImageID) + "",
-		Headers: http.Header{},
+// UnsafeAppend should not be used
+// Internal usage only
+func (r *ListImagesResponse) UnsafeAppend(res interface{}) (uint32, error) {
+	results, ok := res.(*ListImagesResponse)
+	if !ok {
+		return 0, errors.New("%T type cannot be appended to type %T", res, r)
 	}
 
-	var resp GetImageResponse
+	r.Images = append(r.Images, results.Images...)
+	r.TotalCount += uint32(len(results.Images))
+	return uint32(len(results.Images)), nil
+}
 
-	err = s.client.Do(scwReq, &resp, opts...)
-	if err != nil {
-		return nil, err
-	}
-	return &resp, nil
+// Marketplace API.
+type API struct {
+	client *scw.Client
 }
 
-type ListVersionsRequest struct {
-	ImageID string `json:"-"`
+// NewAPI returns a API object from a Scaleway client.
+func NewAPI(client *scw.Client) *API {
+	return &API{
+		client: client,
+	}
 }
 
-func (s *API) ListVersions(req *ListVersionsRequest, opts ...scw.RequestOption) (*ListVersionsResponse, error) {
+// ListImages: List marketplace images.
+func (s *API) ListImages(req *ListImagesRequest, opts ...scw.RequestOption) (*ListImagesResponse, error) {
 	var err error
 
-	if fmt.Sprint(req.ImageID) == "" {
-		return nil, errors.New("field ImageID cannot be empty in request")
-	}
+	query := url.Values{}
+	parameter.AddToQuery(query, "per_page", req.PerPage)
+	parameter.AddToQuery(query, "page", req.Page)
 
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/marketplace/v1/images/" + fmt.Sprint(req.ImageID) + "/versions",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/marketplace/v1/images",
+		Query:  query,
 	}
 
-	var resp ListVersionsResponse
+	var resp ListImagesResponse
 
 	err = s.client.Do(scwReq, &resp, opts...)
 	if err != nil {
@@ -225,30 +198,20 @@ func (s *API) ListVersions(req *ListVersionsRequest, opts ...scw.RequestOption)
 	return &resp, nil
 }
 
-type GetVersionRequest struct {
-	ImageID string `json:"-"`
-
-	VersionID string `json:"-"`
-}
-
-func (s *API) GetVersion(req *GetVersionRequest, opts ...scw.RequestOption) (*GetVersionResponse, error) {
+// GetImage: Get a specific marketplace image.
+func (s *API) GetImage(req *GetImageRequest, opts ...scw.RequestOption) (*GetImageResponse, error) {
 	var err error
 
 	if fmt.Sprint(req.ImageID) == "" {
 		return nil, errors.New("field ImageID cannot be empty in request")
 	}
 
-	if fmt.Sprint(req.VersionID) == "" {
-		return nil, errors.New("field VersionID cannot be empty in request")
-	}
-
 	scwReq := &scw.ScalewayRequest{
-		Method:  "GET",
-		Path:    "/marketplace/v1/images/" + fmt.Sprint(req.ImageID) + "/versions/" + fmt.Sprint(req.VersionID) + "",
-		Headers: http.Header{},
+		Method: "GET",
+		Path:   "/marketplace/v1/images/" + fmt.Sprint(req.ImageID) + "",
 	}
 
-	var resp GetVersionResponse
+	var resp GetImageResponse
 
 	err = s.client.Do(scwReq, &resp, opts...)
 	if err != nil {
@@ -256,22 +219,3 @@ func (s *API) GetVersion(req *GetVersionRequest, opts ...scw.RequestOption) (*Ge
 	}
 	return &resp, nil
 }
-
-// UnsafeGetTotalCount should not be used
-// Internal usage only
-func (r *ListImagesResponse) UnsafeGetTotalCount() uint32 {
-	return r.TotalCount
-}
-
-// UnsafeAppend should not be used
-// Internal usage only
-func (r *ListImagesResponse) UnsafeAppend(res interface{}) (uint32, error) {
-	results, ok := res.(*ListImagesResponse)
-	if !ok {
-		return 0, errors.New("%T type cannot be appended to type %T", res, r)
-	}
-
-	r.Images = append(r.Images, results.Images...)
-	r.TotalCount += uint32(len(results.Images))
-	return uint32(len(results.Images)), nil
-}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/api/marketplace/v1/marketplace_utils.go b/vendor/github.com/scaleway/scaleway-sdk-go/api/marketplace/v1/marketplace_utils.go
index 7d999832b6d..f84175e49e8 100644
--- a/vendor/github.com/scaleway/scaleway-sdk-go/api/marketplace/v1/marketplace_utils.go
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/api/marketplace/v1/marketplace_utils.go
@@ -91,9 +91,3 @@ func (s *API) GetLocalImageIDByLabel(req *GetLocalImageIDByLabelRequest, opts ..
 func (r *ListImagesResponse) UnsafeSetTotalCount(totalCount int) {
 	r.TotalCount = uint32(totalCount)
 }
-
-// UnsafeSetTotalCount should not be used
-// Internal usage only
-func (r *ListVersionsResponse) UnsafeSetTotalCount(totalCount int) {
-	r.TotalCount = uint32(totalCount)
-}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/internal/parameter/query.go b/vendor/github.com/scaleway/scaleway-sdk-go/internal/parameter/query.go
index d28979e8567..4bbfd20b668 100644
--- a/vendor/github.com/scaleway/scaleway-sdk-go/internal/parameter/query.go
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/internal/parameter/query.go
@@ -6,6 +6,8 @@ import (
 	"net/url"
 	"reflect"
 	"time"
+
+	"github.com/scaleway/scaleway-sdk-go/scw"
 )
 
 // AddToQuery add a key/value pair to an URL query
@@ -24,12 +26,16 @@ func AddToQuery(query url.Values, key string, value interface{}) {
 	switch {
 	case elemType == reflect.TypeOf(net.IP{}):
 		query.Add(key, value.(*net.IP).String())
+	case elemType == reflect.TypeOf(net.IPNet{}):
+		query.Add(key, value.(*net.IPNet).String())
+	case elemType == reflect.TypeOf(scw.IPNet{}):
+		query.Add(key, value.(*scw.IPNet).String())
 	case elemType.Kind() == reflect.Slice:
 		for i := 0; i < elemValue.Len(); i++ {
 			query.Add(key, fmt.Sprint(elemValue.Index(i).Interface()))
 		}
 	case elemType == reflect.TypeOf(time.Time{}):
-		query.Add(key, value.(time.Time).Format(time.RFC3339))
+		query.Add(key, value.(*time.Time).Format(time.RFC3339))
 	default:
 		query.Add(key, fmt.Sprint(elemValue.Interface()))
 	}
diff --git a/vendor/github.com/scaleway/scaleway-sdk-go/scw/custom_types.go b/vendor/github.com/scaleway/scaleway-sdk-go/scw/custom_types.go
index 9483fee6efa..673a598eb7c 100644
--- a/vendor/github.com/scaleway/scaleway-sdk-go/scw/custom_types.go
+++ b/vendor/github.com/scaleway/scaleway-sdk-go/scw/custom_types.go
@@ -43,6 +43,28 @@ type File struct {
 	Content io.Reader `json:"content"`
 }
 
+func (f *File) MarshalJSON() ([]byte, error) {
+	buf := new(bytes.Buffer)
+	if f.Content != nil {
+		_, err := io.Copy(buf, f.Content)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	tmpFile := struct {
+		Name        string `json:"name"`
+		ContentType string `json:"content_type"`
+		Content     string `json:"content"`
+	}{
+		Name:        f.Name,
+		ContentType: f.ContentType,
+		Content:     buf.String(),
+	}
+
+	return json.Marshal(tmpFile)
+}
+
 func (f *File) UnmarshalJSON(b []byte) error {
 	type file File
 	var tmpFile struct {
@@ -305,6 +327,15 @@ func (d *Duration) UnmarshalJSON(b []byte) error {
 	return nil
 }
 
+func NewDurationFromTimeDuration(t time.Duration) *Duration {
+	duration := Duration{
+		Seconds: int64(t.Seconds()),
+	}
+	duration.Nanos = int32(t.Nanoseconds() - (time.Duration(duration.Seconds) * time.Second).Nanoseconds())
+
+	return &duration
+}
+
 // splitFloatString splits a float represented in a string, and returns its units (left-coma part) and nanos (right-coma part).
 // E.g.:
 // "3"     ==> units = 3  | nanos = 0
diff --git a/vendor/github.com/sirupsen/logrus/.gitignore b/vendor/github.com/sirupsen/logrus/.gitignore
new file mode 100644
index 00000000000..1fb13abebe7
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/.gitignore
@@ -0,0 +1,4 @@
+logrus
+vendor
+
+.idea/
diff --git a/vendor/github.com/sirupsen/logrus/.golangci.yml b/vendor/github.com/sirupsen/logrus/.golangci.yml
new file mode 100644
index 00000000000..65dc2850377
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/.golangci.yml
@@ -0,0 +1,40 @@
+run:
+  # do not run on test files yet
+  tests: false
+
+# all available settings of specific linters
+linters-settings:
+  errcheck:
+    # report about not checking of errors in type assetions: `a := b.(MyStruct)`;
+    # default is false: such cases aren't reported by default.
+    check-type-assertions: false
+
+    # report about assignment of errors to blank identifier: `num, _ := strconv.Atoi(numStr)`;
+    # default is false: such cases aren't reported by default.
+    check-blank: false
+
+  lll:
+    line-length: 100
+    tab-width: 4
+
+  prealloc:
+    simple: false
+    range-loops: false
+    for-loops: false
+
+  whitespace:
+    multi-if: false   # Enforces newlines (or comments) after every multi-line if statement
+    multi-func: false # Enforces newlines (or comments) after every multi-line function signature
+
+linters:
+  enable:
+    - megacheck
+    - govet
+  disable:
+    - maligned
+    - prealloc
+  disable-all: false
+  presets:
+    - bugs
+    - unused
+  fast: false
diff --git a/vendor/github.com/sirupsen/logrus/.travis.yml b/vendor/github.com/sirupsen/logrus/.travis.yml
new file mode 100644
index 00000000000..c1dbd5a3a3e
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/.travis.yml
@@ -0,0 +1,15 @@
+language: go
+go_import_path: github.com/sirupsen/logrus
+git:
+  depth: 1
+env:
+  - GO111MODULE=on
+go: 1.15.x
+os: linux
+install:
+  - ./travis/install.sh
+script:
+  - cd ci
+  - go run mage.go -v -w ../ crossBuild
+  - go run mage.go -v -w ../ lint
+  - go run mage.go -v -w ../ test
diff --git a/vendor/github.com/sirupsen/logrus/CHANGELOG.md b/vendor/github.com/sirupsen/logrus/CHANGELOG.md
new file mode 100644
index 00000000000..7567f612898
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/CHANGELOG.md
@@ -0,0 +1,259 @@
+# 1.8.1
+Code quality:
+  * move magefile in its own subdir/submodule to remove magefile dependency on logrus consumer
+  * improve timestamp format documentation
+
+Fixes:
+  * fix race condition on logger hooks
+
+
+# 1.8.0
+
+Correct versioning number replacing v1.7.1.
+
+# 1.7.1
+
+Beware this release has introduced a new public API and its semver is therefore incorrect.
+
+Code quality:
+  * use go 1.15 in travis
+  * use magefile as task runner
+
+Fixes:
+  * small fixes about new go 1.13 error formatting system
+  * Fix for long time race condiction with mutating data hooks
+
+Features:
+  * build support for zos
+
+# 1.7.0
+Fixes:
+  * the dependency toward a windows terminal library has been removed
+
+Features:
+  * a new buffer pool management API has been added
+  * a set of `<LogLevel>Fn()` functions have been added
+
+# 1.6.0
+Fixes:
+  * end of line cleanup
+  * revert the entry concurrency bug fix whic leads to deadlock under some circumstances
+  * update dependency on go-windows-terminal-sequences to fix a crash with go 1.14
+
+Features:
+  * add an option to the `TextFormatter` to completely disable fields quoting
+
+# 1.5.0
+Code quality:
+  * add golangci linter run on travis
+
+Fixes:
+  * add mutex for hooks concurrent access on `Entry` data
+  * caller function field for go1.14
+  * fix build issue for gopherjs target
+
+Feature:
+  * add an hooks/writer sub-package whose goal is to split output on different stream depending on the trace level
+  * add a `DisableHTMLEscape` option in the `JSONFormatter`
+  * add `ForceQuote` and `PadLevelText` options in the `TextFormatter`
+
+# 1.4.2
+  * Fixes build break for plan9, nacl, solaris
+# 1.4.1
+This new release introduces:
+  * Enhance TextFormatter to not print caller information when they are empty (#944)
+  * Remove dependency on golang.org/x/crypto (#932, #943)
+
+Fixes:
+  * Fix Entry.WithContext method to return a copy of the initial entry (#941)
+
+# 1.4.0
+This new release introduces:
+  * Add `DeferExitHandler`, similar to `RegisterExitHandler` but prepending the handler to the list of handlers (semantically like `defer`) (#848).
+  * Add `CallerPrettyfier` to `JSONFormatter` and `TextFormatter` (#909, #911)
+  * Add `Entry.WithContext()` and `Entry.Context`, to set a context on entries to be used e.g. in hooks (#919).
+
+Fixes:
+  * Fix wrong method calls `Logger.Print` and `Logger.Warningln` (#893).
+  * Update `Entry.Logf` to not do string formatting unless the log level is enabled (#903)
+  * Fix infinite recursion on unknown `Level.String()` (#907)
+  * Fix race condition in `getCaller` (#916).
+
+
+# 1.3.0
+This new release introduces:
+  * Log, Logf, Logln functions for Logger and Entry that take a Level
+
+Fixes:
+  * Building prometheus node_exporter on AIX (#840)
+  * Race condition in TextFormatter (#468)
+  * Travis CI import path (#868)
+  * Remove coloured output on Windows (#862)
+  * Pointer to func as field in JSONFormatter (#870)
+  * Properly marshal Levels (#873)
+
+# 1.2.0
+This new release introduces:
+  * A new method `SetReportCaller` in the `Logger` to enable the file, line and calling function from which the trace has been issued
+  * A new trace level named `Trace` whose level is below `Debug`
+  * A configurable exit function to be called upon a Fatal trace
+  * The `Level` object now implements `encoding.TextUnmarshaler` interface
+
+# 1.1.1
+This is a bug fix release.
+  * fix the build break on Solaris
+  * don't drop a whole trace in JSONFormatter when a field param is a function pointer which can not be serialized
+
+# 1.1.0
+This new release introduces:
+  * several fixes:
+    * a fix for a race condition on entry formatting
+    * proper cleanup of previously used entries before putting them back in the pool
+    * the extra new line at the end of message in text formatter has been removed
+  * a new global public API to check if a level is activated: IsLevelEnabled
+  * the following methods have been added to the Logger object
+    * IsLevelEnabled
+    * SetFormatter
+    * SetOutput
+    * ReplaceHooks
+  * introduction of go module
+  * an indent configuration for the json formatter
+  * output colour support for windows
+  * the field sort function is now configurable for text formatter
+  * the CLICOLOR and CLICOLOR\_FORCE environment variable support in text formater
+
+# 1.0.6
+
+This new release introduces:
+  * a new api WithTime which allows to easily force the time of the log entry
+    which is mostly useful for logger wrapper
+  * a fix reverting the immutability of the entry given as parameter to the hooks
+    a new configuration field of the json formatter in order to put all the fields
+    in a nested dictionnary
+  * a new SetOutput method in the Logger
+  * a new configuration of the textformatter to configure the name of the default keys
+  * a new configuration of the text formatter to disable the level truncation
+
+# 1.0.5
+
+* Fix hooks race (#707)
+* Fix panic deadlock (#695)
+
+# 1.0.4
+
+* Fix race when adding hooks (#612)
+* Fix terminal check in AppEngine (#635)
+
+# 1.0.3
+
+* Replace example files with testable examples
+
+# 1.0.2
+
+* bug: quote non-string values in text formatter (#583)
+* Make (*Logger) SetLevel a public method
+
+# 1.0.1
+
+* bug: fix escaping in text formatter (#575)
+
+# 1.0.0
+
+* Officially changed name to lower-case
+* bug: colors on Windows 10 (#541)
+* bug: fix race in accessing level (#512)
+
+# 0.11.5
+
+* feature: add writer and writerlevel to entry (#372)
+
+# 0.11.4
+
+* bug: fix undefined variable on solaris (#493)
+
+# 0.11.3
+
+* formatter: configure quoting of empty values (#484)
+* formatter: configure quoting character (default is `"`) (#484)
+* bug: fix not importing io correctly in non-linux environments (#481)
+
+# 0.11.2
+
+* bug: fix windows terminal detection (#476)
+
+# 0.11.1
+
+* bug: fix tty detection with custom out (#471)
+
+# 0.11.0
+
+* performance: Use bufferpool to allocate (#370)
+* terminal: terminal detection for app-engine (#343)
+* feature: exit handler (#375)
+
+# 0.10.0
+
+* feature: Add a test hook (#180)
+* feature: `ParseLevel` is now case-insensitive (#326)
+* feature: `FieldLogger` interface that generalizes `Logger` and `Entry` (#308)
+* performance: avoid re-allocations on `WithFields` (#335)
+
+# 0.9.0
+
+* logrus/text_formatter: don't emit empty msg
+* logrus/hooks/airbrake: move out of main repository
+* logrus/hooks/sentry: move out of main repository
+* logrus/hooks/papertrail: move out of main repository
+* logrus/hooks/bugsnag: move out of main repository
+* logrus/core: run tests with `-race`
+* logrus/core: detect TTY based on `stderr`
+* logrus/core: support `WithError` on logger
+* logrus/core: Solaris support
+
+# 0.8.7
+
+* logrus/core: fix possible race (#216)
+* logrus/doc: small typo fixes and doc improvements
+
+
+# 0.8.6
+
+* hooks/raven: allow passing an initialized client
+
+# 0.8.5
+
+* logrus/core: revert #208
+
+# 0.8.4
+
+* formatter/text: fix data race (#218)
+
+# 0.8.3
+
+* logrus/core: fix entry log level (#208)
+* logrus/core: improve performance of text formatter by 40%
+* logrus/core: expose `LevelHooks` type
+* logrus/core: add support for DragonflyBSD and NetBSD
+* formatter/text: print structs more verbosely
+
+# 0.8.2
+
+* logrus: fix more Fatal family functions
+
+# 0.8.1
+
+* logrus: fix not exiting on `Fatalf` and `Fatalln`
+
+# 0.8.0
+
+* logrus: defaults to stderr instead of stdout
+* hooks/sentry: add special field for `*http.Request`
+* formatter/text: ignore Windows for colors
+
+# 0.7.3
+
+* formatter/\*: allow configuration of timestamp layout
+
+# 0.7.2
+
+* formatter/text: Add configuration option for time format (#158)
diff --git a/vendor/github.com/sirupsen/logrus/LICENSE b/vendor/github.com/sirupsen/logrus/LICENSE
new file mode 100644
index 00000000000..f090cb42f37
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/LICENSE
@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2014 Simon Eskildsen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
diff --git a/vendor/github.com/sirupsen/logrus/README.md b/vendor/github.com/sirupsen/logrus/README.md
new file mode 100644
index 00000000000..d1d4a85fd75
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/README.md
@@ -0,0 +1,515 @@
+# Logrus <img src="http://i.imgur.com/hTeVwmJ.png" width="40" height="40" alt=":walrus:" class="emoji" title=":walrus:"/> [![Build Status](https://github.com/sirupsen/logrus/workflows/CI/badge.svg)](https://github.com/sirupsen/logrus/actions?query=workflow%3ACI) [![Build Status](https://travis-ci.org/sirupsen/logrus.svg?branch=master)](https://travis-ci.org/sirupsen/logrus) [![Go Reference](https://pkg.go.dev/badge/github.com/sirupsen/logrus.svg)](https://pkg.go.dev/github.com/sirupsen/logrus)
+
+Logrus is a structured logger for Go (golang), completely API compatible with
+the standard library logger.
+
+**Logrus is in maintenance-mode.** We will not be introducing new features. It's
+simply too hard to do in a way that won't break many people's projects, which is
+the last thing you want from your Logging library (again...).
+
+This does not mean Logrus is dead. Logrus will continue to be maintained for
+security, (backwards compatible) bug fixes, and performance (where we are
+limited by the interface).
+
+I believe Logrus' biggest contribution is to have played a part in today's
+widespread use of structured logging in Golang. There doesn't seem to be a
+reason to do a major, breaking iteration into Logrus V2, since the fantastic Go
+community has built those independently. Many fantastic alternatives have sprung
+up. Logrus would look like those, had it been re-designed with what we know
+about structured logging in Go today. Check out, for example,
+[Zerolog][zerolog], [Zap][zap], and [Apex][apex].
+
+[zerolog]: https://github.com/rs/zerolog
+[zap]: https://github.com/uber-go/zap
+[apex]: https://github.com/apex/log
+
+**Seeing weird case-sensitive problems?** It's in the past been possible to
+import Logrus as both upper- and lower-case. Due to the Go package environment,
+this caused issues in the community and we needed a standard. Some environments
+experienced problems with the upper-case variant, so the lower-case was decided.
+Everything using `logrus` will need to use the lower-case:
+`github.com/sirupsen/logrus`. Any package that isn't, should be changed.
+
+To fix Glide, see [these
+comments](https://github.com/sirupsen/logrus/issues/553#issuecomment-306591437).
+For an in-depth explanation of the casing issue, see [this
+comment](https://github.com/sirupsen/logrus/issues/570#issuecomment-313933276).
+
+Nicely color-coded in development (when a TTY is attached, otherwise just
+plain text):
+
+![Colored](http://i.imgur.com/PY7qMwd.png)
+
+With `log.SetFormatter(&log.JSONFormatter{})`, for easy parsing by logstash
+or Splunk:
+
+```text
+{"animal":"walrus","level":"info","msg":"A group of walrus emerges from the
+ocean","size":10,"time":"2014-03-10 19:57:38.562264131 -0400 EDT"}
+
+{"level":"warning","msg":"The group's number increased tremendously!",
+"number":122,"omg":true,"time":"2014-03-10 19:57:38.562471297 -0400 EDT"}
+
+{"animal":"walrus","level":"info","msg":"A giant walrus appears!",
+"size":10,"time":"2014-03-10 19:57:38.562500591 -0400 EDT"}
+
+{"animal":"walrus","level":"info","msg":"Tremendously sized cow enters the ocean.",
+"size":9,"time":"2014-03-10 19:57:38.562527896 -0400 EDT"}
+
+{"level":"fatal","msg":"The ice breaks!","number":100,"omg":true,
+"time":"2014-03-10 19:57:38.562543128 -0400 EDT"}
+```
+
+With the default `log.SetFormatter(&log.TextFormatter{})` when a TTY is not
+attached, the output is compatible with the
+[logfmt](http://godoc.org/github.com/kr/logfmt) format:
+
+```text
+time="2015-03-26T01:27:38-04:00" level=debug msg="Started observing beach" animal=walrus number=8
+time="2015-03-26T01:27:38-04:00" level=info msg="A group of walrus emerges from the ocean" animal=walrus size=10
+time="2015-03-26T01:27:38-04:00" level=warning msg="The group's number increased tremendously!" number=122 omg=true
+time="2015-03-26T01:27:38-04:00" level=debug msg="Temperature changes" temperature=-4
+time="2015-03-26T01:27:38-04:00" level=panic msg="It's over 9000!" animal=orca size=9009
+time="2015-03-26T01:27:38-04:00" level=fatal msg="The ice breaks!" err=&{0x2082280c0 map[animal:orca size:9009] 2015-03-26 01:27:38.441574009 -0400 EDT panic It's over 9000!} number=100 omg=true
+```
+To ensure this behaviour even if a TTY is attached, set your formatter as follows:
+
+```go
+	log.SetFormatter(&log.TextFormatter{
+		DisableColors: true,
+		FullTimestamp: true,
+	})
+```
+
+#### Logging Method Name
+
+If you wish to add the calling method as a field, instruct the logger via:
+```go
+log.SetReportCaller(true)
+```
+This adds the caller as 'method' like so:
+
+```json
+{"animal":"penguin","level":"fatal","method":"github.com/sirupsen/arcticcreatures.migrate","msg":"a penguin swims by",
+"time":"2014-03-10 19:57:38.562543129 -0400 EDT"}
+```
+
+```text
+time="2015-03-26T01:27:38-04:00" level=fatal method=github.com/sirupsen/arcticcreatures.migrate msg="a penguin swims by" animal=penguin
+```
+Note that this does add measurable overhead - the cost will depend on the version of Go, but is
+between 20 and 40% in recent tests with 1.6 and 1.7.  You can validate this in your
+environment via benchmarks:
+```
+go test -bench=.*CallerTracing
+```
+
+
+#### Case-sensitivity
+
+The organization's name was changed to lower-case--and this will not be changed
+back. If you are getting import conflicts due to case sensitivity, please use
+the lower-case import: `github.com/sirupsen/logrus`.
+
+#### Example
+
+The simplest way to use Logrus is simply the package-level exported logger:
+
+```go
+package main
+
+import (
+  log "github.com/sirupsen/logrus"
+)
+
+func main() {
+  log.WithFields(log.Fields{
+    "animal": "walrus",
+  }).Info("A walrus appears")
+}
+```
+
+Note that it's completely api-compatible with the stdlib logger, so you can
+replace your `log` imports everywhere with `log "github.com/sirupsen/logrus"`
+and you'll now have the flexibility of Logrus. You can customize it all you
+want:
+
+```go
+package main
+
+import (
+  "os"
+  log "github.com/sirupsen/logrus"
+)
+
+func init() {
+  // Log as JSON instead of the default ASCII formatter.
+  log.SetFormatter(&log.JSONFormatter{})
+
+  // Output to stdout instead of the default stderr
+  // Can be any io.Writer, see below for File example
+  log.SetOutput(os.Stdout)
+
+  // Only log the warning severity or above.
+  log.SetLevel(log.WarnLevel)
+}
+
+func main() {
+  log.WithFields(log.Fields{
+    "animal": "walrus",
+    "size":   10,
+  }).Info("A group of walrus emerges from the ocean")
+
+  log.WithFields(log.Fields{
+    "omg":    true,
+    "number": 122,
+  }).Warn("The group's number increased tremendously!")
+
+  log.WithFields(log.Fields{
+    "omg":    true,
+    "number": 100,
+  }).Fatal("The ice breaks!")
+
+  // A common pattern is to re-use fields between logging statements by re-using
+  // the logrus.Entry returned from WithFields()
+  contextLogger := log.WithFields(log.Fields{
+    "common": "this is a common field",
+    "other": "I also should be logged always",
+  })
+
+  contextLogger.Info("I'll be logged with common and other field")
+  contextLogger.Info("Me too")
+}
+```
+
+For more advanced usage such as logging to multiple locations from the same
+application, you can also create an instance of the `logrus` Logger:
+
+```go
+package main
+
+import (
+  "os"
+  "github.com/sirupsen/logrus"
+)
+
+// Create a new instance of the logger. You can have any number of instances.
+var log = logrus.New()
+
+func main() {
+  // The API for setting attributes is a little different than the package level
+  // exported logger. See Godoc.
+  log.Out = os.Stdout
+
+  // You could set this to any `io.Writer` such as a file
+  // file, err := os.OpenFile("logrus.log", os.O_CREATE|os.O_WRONLY|os.O_APPEND, 0666)
+  // if err == nil {
+  //  log.Out = file
+  // } else {
+  //  log.Info("Failed to log to file, using default stderr")
+  // }
+
+  log.WithFields(logrus.Fields{
+    "animal": "walrus",
+    "size":   10,
+  }).Info("A group of walrus emerges from the ocean")
+}
+```
+
+#### Fields
+
+Logrus encourages careful, structured logging through logging fields instead of
+long, unparseable error messages. For example, instead of: `log.Fatalf("Failed
+to send event %s to topic %s with key %d")`, you should log the much more
+discoverable:
+
+```go
+log.WithFields(log.Fields{
+  "event": event,
+  "topic": topic,
+  "key": key,
+}).Fatal("Failed to send event")
+```
+
+We've found this API forces you to think about logging in a way that produces
+much more useful logging messages. We've been in countless situations where just
+a single added field to a log statement that was already there would've saved us
+hours. The `WithFields` call is optional.
+
+In general, with Logrus using any of the `printf`-family functions should be
+seen as a hint you should add a field, however, you can still use the
+`printf`-family functions with Logrus.
+
+#### Default Fields
+
+Often it's helpful to have fields _always_ attached to log statements in an
+application or parts of one. For example, you may want to always log the
+`request_id` and `user_ip` in the context of a request. Instead of writing
+`log.WithFields(log.Fields{"request_id": request_id, "user_ip": user_ip})` on
+every line, you can create a `logrus.Entry` to pass around instead:
+
+```go
+requestLogger := log.WithFields(log.Fields{"request_id": request_id, "user_ip": user_ip})
+requestLogger.Info("something happened on that request") # will log request_id and user_ip
+requestLogger.Warn("something not great happened")
+```
+
+#### Hooks
+
+You can add hooks for logging levels. For example to send errors to an exception
+tracking service on `Error`, `Fatal` and `Panic`, info to StatsD or log to
+multiple places simultaneously, e.g. syslog.
+
+Logrus comes with [built-in hooks](hooks/). Add those, or your custom hook, in
+`init`:
+
+```go
+import (
+  log "github.com/sirupsen/logrus"
+  "gopkg.in/gemnasium/logrus-airbrake-hook.v2" // the package is named "airbrake"
+  logrus_syslog "github.com/sirupsen/logrus/hooks/syslog"
+  "log/syslog"
+)
+
+func init() {
+
+  // Use the Airbrake hook to report errors that have Error severity or above to
+  // an exception tracker. You can create custom hooks, see the Hooks section.
+  log.AddHook(airbrake.NewHook(123, "xyz", "production"))
+
+  hook, err := logrus_syslog.NewSyslogHook("udp", "localhost:514", syslog.LOG_INFO, "")
+  if err != nil {
+    log.Error("Unable to connect to local syslog daemon")
+  } else {
+    log.AddHook(hook)
+  }
+}
+```
+Note: Syslog hook also support connecting to local syslog (Ex. "/dev/log" or "/var/run/syslog" or "/var/run/log"). For the detail, please check the [syslog hook README](hooks/syslog/README.md).
+
+A list of currently known service hooks can be found in this wiki [page](https://github.com/sirupsen/logrus/wiki/Hooks)
+
+
+#### Level logging
+
+Logrus has seven logging levels: Trace, Debug, Info, Warning, Error, Fatal and Panic.
+
+```go
+log.Trace("Something very low level.")
+log.Debug("Useful debugging information.")
+log.Info("Something noteworthy happened!")
+log.Warn("You should probably take a look at this.")
+log.Error("Something failed but I'm not quitting.")
+// Calls os.Exit(1) after logging
+log.Fatal("Bye.")
+// Calls panic() after logging
+log.Panic("I'm bailing.")
+```
+
+You can set the logging level on a `Logger`, then it will only log entries with
+that severity or anything above it:
+
+```go
+// Will log anything that is info or above (warn, error, fatal, panic). Default.
+log.SetLevel(log.InfoLevel)
+```
+
+It may be useful to set `log.Level = logrus.DebugLevel` in a debug or verbose
+environment if your application has that.
+
+Note: If you want different log levels for global (`log.SetLevel(...)`) and syslog logging, please check the [syslog hook README](hooks/syslog/README.md#different-log-levels-for-local-and-remote-logging).
+
+#### Entries
+
+Besides the fields added with `WithField` or `WithFields` some fields are
+automatically added to all logging events:
+
+1. `time`. The timestamp when the entry was created.
+2. `msg`. The logging message passed to `{Info,Warn,Error,Fatal,Panic}` after
+   the `AddFields` call. E.g. `Failed to send event.`
+3. `level`. The logging level. E.g. `info`.
+
+#### Environments
+
+Logrus has no notion of environment.
+
+If you wish for hooks and formatters to only be used in specific environments,
+you should handle that yourself. For example, if your application has a global
+variable `Environment`, which is a string representation of the environment you
+could do:
+
+```go
+import (
+  log "github.com/sirupsen/logrus"
+)
+
+func init() {
+  // do something here to set environment depending on an environment variable
+  // or command-line flag
+  if Environment == "production" {
+    log.SetFormatter(&log.JSONFormatter{})
+  } else {
+    // The TextFormatter is default, you don't actually have to do this.
+    log.SetFormatter(&log.TextFormatter{})
+  }
+}
+```
+
+This configuration is how `logrus` was intended to be used, but JSON in
+production is mostly only useful if you do log aggregation with tools like
+Splunk or Logstash.
+
+#### Formatters
+
+The built-in logging formatters are:
+
+* `logrus.TextFormatter`. Logs the event in colors if stdout is a tty, otherwise
+  without colors.
+  * *Note:* to force colored output when there is no TTY, set the `ForceColors`
+    field to `true`.  To force no colored output even if there is a TTY  set the
+    `DisableColors` field to `true`. For Windows, see
+    [github.com/mattn/go-colorable](https://github.com/mattn/go-colorable).
+  * When colors are enabled, levels are truncated to 4 characters by default. To disable
+    truncation set the `DisableLevelTruncation` field to `true`.
+  * When outputting to a TTY, it's often helpful to visually scan down a column where all the levels are the same width. Setting the `PadLevelText` field to `true` enables this behavior, by adding padding to the level text.
+  * All options are listed in the [generated docs](https://godoc.org/github.com/sirupsen/logrus#TextFormatter).
+* `logrus.JSONFormatter`. Logs fields as JSON.
+  * All options are listed in the [generated docs](https://godoc.org/github.com/sirupsen/logrus#JSONFormatter).
+
+Third party logging formatters:
+
+* [`FluentdFormatter`](https://github.com/joonix/log). Formats entries that can be parsed by Kubernetes and Google Container Engine.
+* [`GELF`](https://github.com/fabienm/go-logrus-formatters). Formats entries so they comply to Graylog's [GELF 1.1 specification](http://docs.graylog.org/en/2.4/pages/gelf.html).
+* [`logstash`](https://github.com/bshuster-repo/logrus-logstash-hook). Logs fields as [Logstash](http://logstash.net) Events.
+* [`prefixed`](https://github.com/x-cray/logrus-prefixed-formatter). Displays log entry source along with alternative layout.
+* [`zalgo`](https://github.com/aybabtme/logzalgo). Invoking the Power of Zalgo.
+* [`nested-logrus-formatter`](https://github.com/antonfisher/nested-logrus-formatter). Converts logrus fields to a nested structure.
+* [`powerful-logrus-formatter`](https://github.com/zput/zxcTool). get fileName, log's line number and the latest function's name when print log; Sava log to files.
+* [`caption-json-formatter`](https://github.com/nolleh/caption_json_formatter). logrus's message json formatter with human-readable caption added.
+
+You can define your formatter by implementing the `Formatter` interface,
+requiring a `Format` method. `Format` takes an `*Entry`. `entry.Data` is a
+`Fields` type (`map[string]interface{}`) with all your fields as well as the
+default ones (see Entries section above):
+
+```go
+type MyJSONFormatter struct {
+}
+
+log.SetFormatter(new(MyJSONFormatter))
+
+func (f *MyJSONFormatter) Format(entry *Entry) ([]byte, error) {
+  // Note this doesn't include Time, Level and Message which are available on
+  // the Entry. Consult `godoc` on information about those fields or read the
+  // source of the official loggers.
+  serialized, err := json.Marshal(entry.Data)
+    if err != nil {
+      return nil, fmt.Errorf("Failed to marshal fields to JSON, %w", err)
+    }
+  return append(serialized, '\n'), nil
+}
+```
+
+#### Logger as an `io.Writer`
+
+Logrus can be transformed into an `io.Writer`. That writer is the end of an `io.Pipe` and it is your responsibility to close it.
+
+```go
+w := logger.Writer()
+defer w.Close()
+
+srv := http.Server{
+    // create a stdlib log.Logger that writes to
+    // logrus.Logger.
+    ErrorLog: log.New(w, "", 0),
+}
+```
+
+Each line written to that writer will be printed the usual way, using formatters
+and hooks. The level for those entries is `info`.
+
+This means that we can override the standard library logger easily:
+
+```go
+logger := logrus.New()
+logger.Formatter = &logrus.JSONFormatter{}
+
+// Use logrus for standard log output
+// Note that `log` here references stdlib's log
+// Not logrus imported under the name `log`.
+log.SetOutput(logger.Writer())
+```
+
+#### Rotation
+
+Log rotation is not provided with Logrus. Log rotation should be done by an
+external program (like `logrotate(8)`) that can compress and delete old log
+entries. It should not be a feature of the application-level logger.
+
+#### Tools
+
+| Tool | Description |
+| ---- | ----------- |
+|[Logrus Mate](https://github.com/gogap/logrus_mate)|Logrus mate is a tool for Logrus to manage loggers, you can initial logger's level, hook and formatter by config file, the logger will be generated with different configs in different environments.|
+|[Logrus Viper Helper](https://github.com/heirko/go-contrib/tree/master/logrusHelper)|An Helper around Logrus to wrap with spf13/Viper to load configuration with fangs! And to simplify Logrus configuration use some behavior of [Logrus Mate](https://github.com/gogap/logrus_mate). [sample](https://github.com/heirko/iris-contrib/blob/master/middleware/logrus-logger/example) |
+
+#### Testing
+
+Logrus has a built in facility for asserting the presence of log messages. This is implemented through the `test` hook and provides:
+
+* decorators for existing logger (`test.NewLocal` and `test.NewGlobal`) which basically just adds the `test` hook
+* a test logger (`test.NewNullLogger`) that just records log messages (and does not output any):
+
+```go
+import(
+  "github.com/sirupsen/logrus"
+  "github.com/sirupsen/logrus/hooks/test"
+  "github.com/stretchr/testify/assert"
+  "testing"
+)
+
+func TestSomething(t*testing.T){
+  logger, hook := test.NewNullLogger()
+  logger.Error("Helloerror")
+
+  assert.Equal(t, 1, len(hook.Entries))
+  assert.Equal(t, logrus.ErrorLevel, hook.LastEntry().Level)
+  assert.Equal(t, "Helloerror", hook.LastEntry().Message)
+
+  hook.Reset()
+  assert.Nil(t, hook.LastEntry())
+}
+```
+
+#### Fatal handlers
+
+Logrus can register one or more functions that will be called when any `fatal`
+level message is logged. The registered handlers will be executed before
+logrus performs an `os.Exit(1)`. This behavior may be helpful if callers need
+to gracefully shutdown. Unlike a `panic("Something went wrong...")` call which can be intercepted with a deferred `recover` a call to `os.Exit(1)` can not be intercepted.
+
+```
+...
+handler := func() {
+  // gracefully shutdown something...
+}
+logrus.RegisterExitHandler(handler)
+...
+```
+
+#### Thread safety
+
+By default, Logger is protected by a mutex for concurrent writes. The mutex is held when calling hooks and writing logs.
+If you are sure such locking is not needed, you can call logger.SetNoLock() to disable the locking.
+
+Situation when locking is not needed includes:
+
+* You have no hooks registered, or hooks calling is already thread-safe.
+
+* Writing to logger.Out is already thread-safe, for example:
+
+  1) logger.Out is protected by locks.
+
+  2) logger.Out is an os.File handler opened with `O_APPEND` flag, and every write is smaller than 4k. (This allows multi-thread/multi-process writing)
+
+     (Refer to http://www.notthewizard.com/2014/06/17/are-files-appends-really-atomic/)
diff --git a/vendor/github.com/sirupsen/logrus/alt_exit.go b/vendor/github.com/sirupsen/logrus/alt_exit.go
new file mode 100644
index 00000000000..8fd189e1cca
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/alt_exit.go
@@ -0,0 +1,76 @@
+package logrus
+
+// The following code was sourced and modified from the
+// https://github.com/tebeka/atexit package governed by the following license:
+//
+// Copyright (c) 2012 Miki Tebeka <miki.tebeka@gmail.com>.
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy of
+// this software and associated documentation files (the "Software"), to deal in
+// the Software without restriction, including without limitation the rights to
+// use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+// the Software, and to permit persons to whom the Software is furnished to do so,
+// subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+// FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+// COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+// IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+// CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+import (
+	"fmt"
+	"os"
+)
+
+var handlers = []func(){}
+
+func runHandler(handler func()) {
+	defer func() {
+		if err := recover(); err != nil {
+			fmt.Fprintln(os.Stderr, "Error: Logrus exit handler error:", err)
+		}
+	}()
+
+	handler()
+}
+
+func runHandlers() {
+	for _, handler := range handlers {
+		runHandler(handler)
+	}
+}
+
+// Exit runs all the Logrus atexit handlers and then terminates the program using os.Exit(code)
+func Exit(code int) {
+	runHandlers()
+	os.Exit(code)
+}
+
+// RegisterExitHandler appends a Logrus Exit handler to the list of handlers,
+// call logrus.Exit to invoke all handlers. The handlers will also be invoked when
+// any Fatal log entry is made.
+//
+// This method is useful when a caller wishes to use logrus to log a fatal
+// message but also needs to gracefully shutdown. An example usecase could be
+// closing database connections, or sending a alert that the application is
+// closing.
+func RegisterExitHandler(handler func()) {
+	handlers = append(handlers, handler)
+}
+
+// DeferExitHandler prepends a Logrus Exit handler to the list of handlers,
+// call logrus.Exit to invoke all handlers. The handlers will also be invoked when
+// any Fatal log entry is made.
+//
+// This method is useful when a caller wishes to use logrus to log a fatal
+// message but also needs to gracefully shutdown. An example usecase could be
+// closing database connections, or sending a alert that the application is
+// closing.
+func DeferExitHandler(handler func()) {
+	handlers = append([]func(){handler}, handlers...)
+}
diff --git a/vendor/github.com/sirupsen/logrus/appveyor.yml b/vendor/github.com/sirupsen/logrus/appveyor.yml
new file mode 100644
index 00000000000..df9d65c3a5b
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/appveyor.yml
@@ -0,0 +1,14 @@
+version: "{build}"
+platform: x64
+clone_folder: c:\gopath\src\github.com\sirupsen\logrus
+environment:
+  GOPATH: c:\gopath
+branches:
+  only:
+    - master
+install:
+  - set PATH=%GOPATH%\bin;c:\go\bin;%PATH%
+  - go version
+build_script:
+  - go get -t
+  - go test
diff --git a/vendor/github.com/sirupsen/logrus/buffer_pool.go b/vendor/github.com/sirupsen/logrus/buffer_pool.go
new file mode 100644
index 00000000000..c7787f77cbf
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/buffer_pool.go
@@ -0,0 +1,43 @@
+package logrus
+
+import (
+	"bytes"
+	"sync"
+)
+
+var (
+	bufferPool BufferPool
+)
+
+type BufferPool interface {
+	Put(*bytes.Buffer)
+	Get() *bytes.Buffer
+}
+
+type defaultPool struct {
+	pool *sync.Pool
+}
+
+func (p *defaultPool) Put(buf *bytes.Buffer) {
+	p.pool.Put(buf)
+}
+
+func (p *defaultPool) Get() *bytes.Buffer {
+	return p.pool.Get().(*bytes.Buffer)
+}
+
+// SetBufferPool allows to replace the default logrus buffer pool
+// to better meets the specific needs of an application.
+func SetBufferPool(bp BufferPool) {
+	bufferPool = bp
+}
+
+func init() {
+	SetBufferPool(&defaultPool{
+		pool: &sync.Pool{
+			New: func() interface{} {
+				return new(bytes.Buffer)
+			},
+		},
+	})
+}
diff --git a/vendor/github.com/sirupsen/logrus/doc.go b/vendor/github.com/sirupsen/logrus/doc.go
new file mode 100644
index 00000000000..da67aba06de
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/doc.go
@@ -0,0 +1,26 @@
+/*
+Package logrus is a structured logger for Go, completely API compatible with the standard library logger.
+
+
+The simplest way to use Logrus is simply the package-level exported logger:
+
+  package main
+
+  import (
+    log "github.com/sirupsen/logrus"
+  )
+
+  func main() {
+    log.WithFields(log.Fields{
+      "animal": "walrus",
+      "number": 1,
+      "size":   10,
+    }).Info("A walrus appears")
+  }
+
+Output:
+  time="2015-09-07T08:48:33Z" level=info msg="A walrus appears" animal=walrus number=1 size=10
+
+For a full guide visit https://github.com/sirupsen/logrus
+*/
+package logrus
diff --git a/vendor/github.com/sirupsen/logrus/entry.go b/vendor/github.com/sirupsen/logrus/entry.go
new file mode 100644
index 00000000000..71cdbbc35d2
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/entry.go
@@ -0,0 +1,442 @@
+package logrus
+
+import (
+	"bytes"
+	"context"
+	"fmt"
+	"os"
+	"reflect"
+	"runtime"
+	"strings"
+	"sync"
+	"time"
+)
+
+var (
+
+	// qualified package name, cached at first use
+	logrusPackage string
+
+	// Positions in the call stack when tracing to report the calling method
+	minimumCallerDepth int
+
+	// Used for caller information initialisation
+	callerInitOnce sync.Once
+)
+
+const (
+	maximumCallerDepth int = 25
+	knownLogrusFrames  int = 4
+)
+
+func init() {
+	// start at the bottom of the stack before the package-name cache is primed
+	minimumCallerDepth = 1
+}
+
+// Defines the key when adding errors using WithError.
+var ErrorKey = "error"
+
+// An entry is the final or intermediate Logrus logging entry. It contains all
+// the fields passed with WithField{,s}. It's finally logged when Trace, Debug,
+// Info, Warn, Error, Fatal or Panic is called on it. These objects can be
+// reused and passed around as much as you wish to avoid field duplication.
+type Entry struct {
+	Logger *Logger
+
+	// Contains all the fields set by the user.
+	Data Fields
+
+	// Time at which the log entry was created
+	Time time.Time
+
+	// Level the log entry was logged at: Trace, Debug, Info, Warn, Error, Fatal or Panic
+	// This field will be set on entry firing and the value will be equal to the one in Logger struct field.
+	Level Level
+
+	// Calling method, with package name
+	Caller *runtime.Frame
+
+	// Message passed to Trace, Debug, Info, Warn, Error, Fatal or Panic
+	Message string
+
+	// When formatter is called in entry.log(), a Buffer may be set to entry
+	Buffer *bytes.Buffer
+
+	// Contains the context set by the user. Useful for hook processing etc.
+	Context context.Context
+
+	// err may contain a field formatting error
+	err string
+}
+
+func NewEntry(logger *Logger) *Entry {
+	return &Entry{
+		Logger: logger,
+		// Default is three fields, plus one optional.  Give a little extra room.
+		Data: make(Fields, 6),
+	}
+}
+
+func (entry *Entry) Dup() *Entry {
+	data := make(Fields, len(entry.Data))
+	for k, v := range entry.Data {
+		data[k] = v
+	}
+	return &Entry{Logger: entry.Logger, Data: data, Time: entry.Time, Context: entry.Context, err: entry.err}
+}
+
+// Returns the bytes representation of this entry from the formatter.
+func (entry *Entry) Bytes() ([]byte, error) {
+	return entry.Logger.Formatter.Format(entry)
+}
+
+// Returns the string representation from the reader and ultimately the
+// formatter.
+func (entry *Entry) String() (string, error) {
+	serialized, err := entry.Bytes()
+	if err != nil {
+		return "", err
+	}
+	str := string(serialized)
+	return str, nil
+}
+
+// Add an error as single field (using the key defined in ErrorKey) to the Entry.
+func (entry *Entry) WithError(err error) *Entry {
+	return entry.WithField(ErrorKey, err)
+}
+
+// Add a context to the Entry.
+func (entry *Entry) WithContext(ctx context.Context) *Entry {
+	dataCopy := make(Fields, len(entry.Data))
+	for k, v := range entry.Data {
+		dataCopy[k] = v
+	}
+	return &Entry{Logger: entry.Logger, Data: dataCopy, Time: entry.Time, err: entry.err, Context: ctx}
+}
+
+// Add a single field to the Entry.
+func (entry *Entry) WithField(key string, value interface{}) *Entry {
+	return entry.WithFields(Fields{key: value})
+}
+
+// Add a map of fields to the Entry.
+func (entry *Entry) WithFields(fields Fields) *Entry {
+	data := make(Fields, len(entry.Data)+len(fields))
+	for k, v := range entry.Data {
+		data[k] = v
+	}
+	fieldErr := entry.err
+	for k, v := range fields {
+		isErrField := false
+		if t := reflect.TypeOf(v); t != nil {
+			switch {
+			case t.Kind() == reflect.Func, t.Kind() == reflect.Ptr && t.Elem().Kind() == reflect.Func:
+				isErrField = true
+			}
+		}
+		if isErrField {
+			tmp := fmt.Sprintf("can not add field %q", k)
+			if fieldErr != "" {
+				fieldErr = entry.err + ", " + tmp
+			} else {
+				fieldErr = tmp
+			}
+		} else {
+			data[k] = v
+		}
+	}
+	return &Entry{Logger: entry.Logger, Data: data, Time: entry.Time, err: fieldErr, Context: entry.Context}
+}
+
+// Overrides the time of the Entry.
+func (entry *Entry) WithTime(t time.Time) *Entry {
+	dataCopy := make(Fields, len(entry.Data))
+	for k, v := range entry.Data {
+		dataCopy[k] = v
+	}
+	return &Entry{Logger: entry.Logger, Data: dataCopy, Time: t, err: entry.err, Context: entry.Context}
+}
+
+// getPackageName reduces a fully qualified function name to the package name
+// There really ought to be to be a better way...
+func getPackageName(f string) string {
+	for {
+		lastPeriod := strings.LastIndex(f, ".")
+		lastSlash := strings.LastIndex(f, "/")
+		if lastPeriod > lastSlash {
+			f = f[:lastPeriod]
+		} else {
+			break
+		}
+	}
+
+	return f
+}
+
+// getCaller retrieves the name of the first non-logrus calling function
+func getCaller() *runtime.Frame {
+	// cache this package's fully-qualified name
+	callerInitOnce.Do(func() {
+		pcs := make([]uintptr, maximumCallerDepth)
+		_ = runtime.Callers(0, pcs)
+
+		// dynamic get the package name and the minimum caller depth
+		for i := 0; i < maximumCallerDepth; i++ {
+			funcName := runtime.FuncForPC(pcs[i]).Name()
+			if strings.Contains(funcName, "getCaller") {
+				logrusPackage = getPackageName(funcName)
+				break
+			}
+		}
+
+		minimumCallerDepth = knownLogrusFrames
+	})
+
+	// Restrict the lookback frames to avoid runaway lookups
+	pcs := make([]uintptr, maximumCallerDepth)
+	depth := runtime.Callers(minimumCallerDepth, pcs)
+	frames := runtime.CallersFrames(pcs[:depth])
+
+	for f, again := frames.Next(); again; f, again = frames.Next() {
+		pkg := getPackageName(f.Function)
+
+		// If the caller isn't part of this package, we're done
+		if pkg != logrusPackage {
+			return &f //nolint:scopelint
+		}
+	}
+
+	// if we got here, we failed to find the caller's context
+	return nil
+}
+
+func (entry Entry) HasCaller() (has bool) {
+	return entry.Logger != nil &&
+		entry.Logger.ReportCaller &&
+		entry.Caller != nil
+}
+
+func (entry *Entry) log(level Level, msg string) {
+	var buffer *bytes.Buffer
+
+	newEntry := entry.Dup()
+
+	if newEntry.Time.IsZero() {
+		newEntry.Time = time.Now()
+	}
+
+	newEntry.Level = level
+	newEntry.Message = msg
+
+	newEntry.Logger.mu.Lock()
+	reportCaller := newEntry.Logger.ReportCaller
+	bufPool := newEntry.getBufferPool()
+	newEntry.Logger.mu.Unlock()
+
+	if reportCaller {
+		newEntry.Caller = getCaller()
+	}
+
+	newEntry.fireHooks()
+	buffer = bufPool.Get()
+	defer func() {
+		newEntry.Buffer = nil
+		buffer.Reset()
+		bufPool.Put(buffer)
+	}()
+	buffer.Reset()
+	newEntry.Buffer = buffer
+
+	newEntry.write()
+
+	newEntry.Buffer = nil
+
+	// To avoid Entry#log() returning a value that only would make sense for
+	// panic() to use in Entry#Panic(), we avoid the allocation by checking
+	// directly here.
+	if level <= PanicLevel {
+		panic(newEntry)
+	}
+}
+
+func (entry *Entry) getBufferPool() (pool BufferPool) {
+	if entry.Logger.BufferPool != nil {
+		return entry.Logger.BufferPool
+	}
+	return bufferPool
+}
+
+func (entry *Entry) fireHooks() {
+	var tmpHooks LevelHooks
+	entry.Logger.mu.Lock()
+	tmpHooks = make(LevelHooks, len(entry.Logger.Hooks))
+	for k, v := range entry.Logger.Hooks {
+		tmpHooks[k] = v
+	}
+	entry.Logger.mu.Unlock()
+
+	err := tmpHooks.Fire(entry.Level, entry)
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "Failed to fire hook: %v\n", err)
+	}
+}
+
+func (entry *Entry) write() {
+	entry.Logger.mu.Lock()
+	defer entry.Logger.mu.Unlock()
+	serialized, err := entry.Logger.Formatter.Format(entry)
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "Failed to obtain reader, %v\n", err)
+		return
+	}
+	if _, err := entry.Logger.Out.Write(serialized); err != nil {
+		fmt.Fprintf(os.Stderr, "Failed to write to log, %v\n", err)
+	}
+}
+
+// Log will log a message at the level given as parameter.
+// Warning: using Log at Panic or Fatal level will not respectively Panic nor Exit.
+// For this behaviour Entry.Panic or Entry.Fatal should be used instead.
+func (entry *Entry) Log(level Level, args ...interface{}) {
+	if entry.Logger.IsLevelEnabled(level) {
+		entry.log(level, fmt.Sprint(args...))
+	}
+}
+
+func (entry *Entry) Trace(args ...interface{}) {
+	entry.Log(TraceLevel, args...)
+}
+
+func (entry *Entry) Debug(args ...interface{}) {
+	entry.Log(DebugLevel, args...)
+}
+
+func (entry *Entry) Print(args ...interface{}) {
+	entry.Info(args...)
+}
+
+func (entry *Entry) Info(args ...interface{}) {
+	entry.Log(InfoLevel, args...)
+}
+
+func (entry *Entry) Warn(args ...interface{}) {
+	entry.Log(WarnLevel, args...)
+}
+
+func (entry *Entry) Warning(args ...interface{}) {
+	entry.Warn(args...)
+}
+
+func (entry *Entry) Error(args ...interface{}) {
+	entry.Log(ErrorLevel, args...)
+}
+
+func (entry *Entry) Fatal(args ...interface{}) {
+	entry.Log(FatalLevel, args...)
+	entry.Logger.Exit(1)
+}
+
+func (entry *Entry) Panic(args ...interface{}) {
+	entry.Log(PanicLevel, args...)
+}
+
+// Entry Printf family functions
+
+func (entry *Entry) Logf(level Level, format string, args ...interface{}) {
+	if entry.Logger.IsLevelEnabled(level) {
+		entry.Log(level, fmt.Sprintf(format, args...))
+	}
+}
+
+func (entry *Entry) Tracef(format string, args ...interface{}) {
+	entry.Logf(TraceLevel, format, args...)
+}
+
+func (entry *Entry) Debugf(format string, args ...interface{}) {
+	entry.Logf(DebugLevel, format, args...)
+}
+
+func (entry *Entry) Infof(format string, args ...interface{}) {
+	entry.Logf(InfoLevel, format, args...)
+}
+
+func (entry *Entry) Printf(format string, args ...interface{}) {
+	entry.Infof(format, args...)
+}
+
+func (entry *Entry) Warnf(format string, args ...interface{}) {
+	entry.Logf(WarnLevel, format, args...)
+}
+
+func (entry *Entry) Warningf(format string, args ...interface{}) {
+	entry.Warnf(format, args...)
+}
+
+func (entry *Entry) Errorf(format string, args ...interface{}) {
+	entry.Logf(ErrorLevel, format, args...)
+}
+
+func (entry *Entry) Fatalf(format string, args ...interface{}) {
+	entry.Logf(FatalLevel, format, args...)
+	entry.Logger.Exit(1)
+}
+
+func (entry *Entry) Panicf(format string, args ...interface{}) {
+	entry.Logf(PanicLevel, format, args...)
+}
+
+// Entry Println family functions
+
+func (entry *Entry) Logln(level Level, args ...interface{}) {
+	if entry.Logger.IsLevelEnabled(level) {
+		entry.Log(level, entry.sprintlnn(args...))
+	}
+}
+
+func (entry *Entry) Traceln(args ...interface{}) {
+	entry.Logln(TraceLevel, args...)
+}
+
+func (entry *Entry) Debugln(args ...interface{}) {
+	entry.Logln(DebugLevel, args...)
+}
+
+func (entry *Entry) Infoln(args ...interface{}) {
+	entry.Logln(InfoLevel, args...)
+}
+
+func (entry *Entry) Println(args ...interface{}) {
+	entry.Infoln(args...)
+}
+
+func (entry *Entry) Warnln(args ...interface{}) {
+	entry.Logln(WarnLevel, args...)
+}
+
+func (entry *Entry) Warningln(args ...interface{}) {
+	entry.Warnln(args...)
+}
+
+func (entry *Entry) Errorln(args ...interface{}) {
+	entry.Logln(ErrorLevel, args...)
+}
+
+func (entry *Entry) Fatalln(args ...interface{}) {
+	entry.Logln(FatalLevel, args...)
+	entry.Logger.Exit(1)
+}
+
+func (entry *Entry) Panicln(args ...interface{}) {
+	entry.Logln(PanicLevel, args...)
+}
+
+// Sprintlnn => Sprint no newline. This is to get the behavior of how
+// fmt.Sprintln where spaces are always added between operands, regardless of
+// their type. Instead of vendoring the Sprintln implementation to spare a
+// string allocation, we do the simplest thing.
+func (entry *Entry) sprintlnn(args ...interface{}) string {
+	msg := fmt.Sprintln(args...)
+	return msg[:len(msg)-1]
+}
diff --git a/vendor/github.com/sirupsen/logrus/exported.go b/vendor/github.com/sirupsen/logrus/exported.go
new file mode 100644
index 00000000000..017c30ce678
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/exported.go
@@ -0,0 +1,270 @@
+package logrus
+
+import (
+	"context"
+	"io"
+	"time"
+)
+
+var (
+	// std is the name of the standard logger in stdlib `log`
+	std = New()
+)
+
+func StandardLogger() *Logger {
+	return std
+}
+
+// SetOutput sets the standard logger output.
+func SetOutput(out io.Writer) {
+	std.SetOutput(out)
+}
+
+// SetFormatter sets the standard logger formatter.
+func SetFormatter(formatter Formatter) {
+	std.SetFormatter(formatter)
+}
+
+// SetReportCaller sets whether the standard logger will include the calling
+// method as a field.
+func SetReportCaller(include bool) {
+	std.SetReportCaller(include)
+}
+
+// SetLevel sets the standard logger level.
+func SetLevel(level Level) {
+	std.SetLevel(level)
+}
+
+// GetLevel returns the standard logger level.
+func GetLevel() Level {
+	return std.GetLevel()
+}
+
+// IsLevelEnabled checks if the log level of the standard logger is greater than the level param
+func IsLevelEnabled(level Level) bool {
+	return std.IsLevelEnabled(level)
+}
+
+// AddHook adds a hook to the standard logger hooks.
+func AddHook(hook Hook) {
+	std.AddHook(hook)
+}
+
+// WithError creates an entry from the standard logger and adds an error to it, using the value defined in ErrorKey as key.
+func WithError(err error) *Entry {
+	return std.WithField(ErrorKey, err)
+}
+
+// WithContext creates an entry from the standard logger and adds a context to it.
+func WithContext(ctx context.Context) *Entry {
+	return std.WithContext(ctx)
+}
+
+// WithField creates an entry from the standard logger and adds a field to
+// it. If you want multiple fields, use `WithFields`.
+//
+// Note that it doesn't log until you call Debug, Print, Info, Warn, Fatal
+// or Panic on the Entry it returns.
+func WithField(key string, value interface{}) *Entry {
+	return std.WithField(key, value)
+}
+
+// WithFields creates an entry from the standard logger and adds multiple
+// fields to it. This is simply a helper for `WithField`, invoking it
+// once for each field.
+//
+// Note that it doesn't log until you call Debug, Print, Info, Warn, Fatal
+// or Panic on the Entry it returns.
+func WithFields(fields Fields) *Entry {
+	return std.WithFields(fields)
+}
+
+// WithTime creates an entry from the standard logger and overrides the time of
+// logs generated with it.
+//
+// Note that it doesn't log until you call Debug, Print, Info, Warn, Fatal
+// or Panic on the Entry it returns.
+func WithTime(t time.Time) *Entry {
+	return std.WithTime(t)
+}
+
+// Trace logs a message at level Trace on the standard logger.
+func Trace(args ...interface{}) {
+	std.Trace(args...)
+}
+
+// Debug logs a message at level Debug on the standard logger.
+func Debug(args ...interface{}) {
+	std.Debug(args...)
+}
+
+// Print logs a message at level Info on the standard logger.
+func Print(args ...interface{}) {
+	std.Print(args...)
+}
+
+// Info logs a message at level Info on the standard logger.
+func Info(args ...interface{}) {
+	std.Info(args...)
+}
+
+// Warn logs a message at level Warn on the standard logger.
+func Warn(args ...interface{}) {
+	std.Warn(args...)
+}
+
+// Warning logs a message at level Warn on the standard logger.
+func Warning(args ...interface{}) {
+	std.Warning(args...)
+}
+
+// Error logs a message at level Error on the standard logger.
+func Error(args ...interface{}) {
+	std.Error(args...)
+}
+
+// Panic logs a message at level Panic on the standard logger.
+func Panic(args ...interface{}) {
+	std.Panic(args...)
+}
+
+// Fatal logs a message at level Fatal on the standard logger then the process will exit with status set to 1.
+func Fatal(args ...interface{}) {
+	std.Fatal(args...)
+}
+
+// TraceFn logs a message from a func at level Trace on the standard logger.
+func TraceFn(fn LogFunction) {
+	std.TraceFn(fn)
+}
+
+// DebugFn logs a message from a func at level Debug on the standard logger.
+func DebugFn(fn LogFunction) {
+	std.DebugFn(fn)
+}
+
+// PrintFn logs a message from a func at level Info on the standard logger.
+func PrintFn(fn LogFunction) {
+	std.PrintFn(fn)
+}
+
+// InfoFn logs a message from a func at level Info on the standard logger.
+func InfoFn(fn LogFunction) {
+	std.InfoFn(fn)
+}
+
+// WarnFn logs a message from a func at level Warn on the standard logger.
+func WarnFn(fn LogFunction) {
+	std.WarnFn(fn)
+}
+
+// WarningFn logs a message from a func at level Warn on the standard logger.
+func WarningFn(fn LogFunction) {
+	std.WarningFn(fn)
+}
+
+// ErrorFn logs a message from a func at level Error on the standard logger.
+func ErrorFn(fn LogFunction) {
+	std.ErrorFn(fn)
+}
+
+// PanicFn logs a message from a func at level Panic on the standard logger.
+func PanicFn(fn LogFunction) {
+	std.PanicFn(fn)
+}
+
+// FatalFn logs a message from a func at level Fatal on the standard logger then the process will exit with status set to 1.
+func FatalFn(fn LogFunction) {
+	std.FatalFn(fn)
+}
+
+// Tracef logs a message at level Trace on the standard logger.
+func Tracef(format string, args ...interface{}) {
+	std.Tracef(format, args...)
+}
+
+// Debugf logs a message at level Debug on the standard logger.
+func Debugf(format string, args ...interface{}) {
+	std.Debugf(format, args...)
+}
+
+// Printf logs a message at level Info on the standard logger.
+func Printf(format string, args ...interface{}) {
+	std.Printf(format, args...)
+}
+
+// Infof logs a message at level Info on the standard logger.
+func Infof(format string, args ...interface{}) {
+	std.Infof(format, args...)
+}
+
+// Warnf logs a message at level Warn on the standard logger.
+func Warnf(format string, args ...interface{}) {
+	std.Warnf(format, args...)
+}
+
+// Warningf logs a message at level Warn on the standard logger.
+func Warningf(format string, args ...interface{}) {
+	std.Warningf(format, args...)
+}
+
+// Errorf logs a message at level Error on the standard logger.
+func Errorf(format string, args ...interface{}) {
+	std.Errorf(format, args...)
+}
+
+// Panicf logs a message at level Panic on the standard logger.
+func Panicf(format string, args ...interface{}) {
+	std.Panicf(format, args...)
+}
+
+// Fatalf logs a message at level Fatal on the standard logger then the process will exit with status set to 1.
+func Fatalf(format string, args ...interface{}) {
+	std.Fatalf(format, args...)
+}
+
+// Traceln logs a message at level Trace on the standard logger.
+func Traceln(args ...interface{}) {
+	std.Traceln(args...)
+}
+
+// Debugln logs a message at level Debug on the standard logger.
+func Debugln(args ...interface{}) {
+	std.Debugln(args...)
+}
+
+// Println logs a message at level Info on the standard logger.
+func Println(args ...interface{}) {
+	std.Println(args...)
+}
+
+// Infoln logs a message at level Info on the standard logger.
+func Infoln(args ...interface{}) {
+	std.Infoln(args...)
+}
+
+// Warnln logs a message at level Warn on the standard logger.
+func Warnln(args ...interface{}) {
+	std.Warnln(args...)
+}
+
+// Warningln logs a message at level Warn on the standard logger.
+func Warningln(args ...interface{}) {
+	std.Warningln(args...)
+}
+
+// Errorln logs a message at level Error on the standard logger.
+func Errorln(args ...interface{}) {
+	std.Errorln(args...)
+}
+
+// Panicln logs a message at level Panic on the standard logger.
+func Panicln(args ...interface{}) {
+	std.Panicln(args...)
+}
+
+// Fatalln logs a message at level Fatal on the standard logger then the process will exit with status set to 1.
+func Fatalln(args ...interface{}) {
+	std.Fatalln(args...)
+}
diff --git a/vendor/github.com/sirupsen/logrus/formatter.go b/vendor/github.com/sirupsen/logrus/formatter.go
new file mode 100644
index 00000000000..408883773eb
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/formatter.go
@@ -0,0 +1,78 @@
+package logrus
+
+import "time"
+
+// Default key names for the default fields
+const (
+	defaultTimestampFormat = time.RFC3339
+	FieldKeyMsg            = "msg"
+	FieldKeyLevel          = "level"
+	FieldKeyTime           = "time"
+	FieldKeyLogrusError    = "logrus_error"
+	FieldKeyFunc           = "func"
+	FieldKeyFile           = "file"
+)
+
+// The Formatter interface is used to implement a custom Formatter. It takes an
+// `Entry`. It exposes all the fields, including the default ones:
+//
+// * `entry.Data["msg"]`. The message passed from Info, Warn, Error ..
+// * `entry.Data["time"]`. The timestamp.
+// * `entry.Data["level"]. The level the entry was logged at.
+//
+// Any additional fields added with `WithField` or `WithFields` are also in
+// `entry.Data`. Format is expected to return an array of bytes which are then
+// logged to `logger.Out`.
+type Formatter interface {
+	Format(*Entry) ([]byte, error)
+}
+
+// This is to not silently overwrite `time`, `msg`, `func` and `level` fields when
+// dumping it. If this code wasn't there doing:
+//
+//  logrus.WithField("level", 1).Info("hello")
+//
+// Would just silently drop the user provided level. Instead with this code
+// it'll logged as:
+//
+//  {"level": "info", "fields.level": 1, "msg": "hello", "time": "..."}
+//
+// It's not exported because it's still using Data in an opinionated way. It's to
+// avoid code duplication between the two default formatters.
+func prefixFieldClashes(data Fields, fieldMap FieldMap, reportCaller bool) {
+	timeKey := fieldMap.resolve(FieldKeyTime)
+	if t, ok := data[timeKey]; ok {
+		data["fields."+timeKey] = t
+		delete(data, timeKey)
+	}
+
+	msgKey := fieldMap.resolve(FieldKeyMsg)
+	if m, ok := data[msgKey]; ok {
+		data["fields."+msgKey] = m
+		delete(data, msgKey)
+	}
+
+	levelKey := fieldMap.resolve(FieldKeyLevel)
+	if l, ok := data[levelKey]; ok {
+		data["fields."+levelKey] = l
+		delete(data, levelKey)
+	}
+
+	logrusErrKey := fieldMap.resolve(FieldKeyLogrusError)
+	if l, ok := data[logrusErrKey]; ok {
+		data["fields."+logrusErrKey] = l
+		delete(data, logrusErrKey)
+	}
+
+	// If reportCaller is not set, 'func' will not conflict.
+	if reportCaller {
+		funcKey := fieldMap.resolve(FieldKeyFunc)
+		if l, ok := data[funcKey]; ok {
+			data["fields."+funcKey] = l
+		}
+		fileKey := fieldMap.resolve(FieldKeyFile)
+		if l, ok := data[fileKey]; ok {
+			data["fields."+fileKey] = l
+		}
+	}
+}
diff --git a/vendor/github.com/sirupsen/logrus/hooks.go b/vendor/github.com/sirupsen/logrus/hooks.go
new file mode 100644
index 00000000000..3f151cdc392
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/hooks.go
@@ -0,0 +1,34 @@
+package logrus
+
+// A hook to be fired when logging on the logging levels returned from
+// `Levels()` on your implementation of the interface. Note that this is not
+// fired in a goroutine or a channel with workers, you should handle such
+// functionality yourself if your call is non-blocking and you don't wish for
+// the logging calls for levels returned from `Levels()` to block.
+type Hook interface {
+	Levels() []Level
+	Fire(*Entry) error
+}
+
+// Internal type for storing the hooks on a logger instance.
+type LevelHooks map[Level][]Hook
+
+// Add a hook to an instance of logger. This is called with
+// `log.Hooks.Add(new(MyHook))` where `MyHook` implements the `Hook` interface.
+func (hooks LevelHooks) Add(hook Hook) {
+	for _, level := range hook.Levels() {
+		hooks[level] = append(hooks[level], hook)
+	}
+}
+
+// Fire all the hooks for the passed level. Used by `entry.log` to fire
+// appropriate hooks for a log entry.
+func (hooks LevelHooks) Fire(level Level, entry *Entry) error {
+	for _, hook := range hooks[level] {
+		if err := hook.Fire(entry); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
diff --git a/vendor/github.com/sirupsen/logrus/json_formatter.go b/vendor/github.com/sirupsen/logrus/json_formatter.go
new file mode 100644
index 00000000000..c96dc5636bf
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/json_formatter.go
@@ -0,0 +1,128 @@
+package logrus
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"runtime"
+)
+
+type fieldKey string
+
+// FieldMap allows customization of the key names for default fields.
+type FieldMap map[fieldKey]string
+
+func (f FieldMap) resolve(key fieldKey) string {
+	if k, ok := f[key]; ok {
+		return k
+	}
+
+	return string(key)
+}
+
+// JSONFormatter formats logs into parsable json
+type JSONFormatter struct {
+	// TimestampFormat sets the format used for marshaling timestamps.
+	// The format to use is the same than for time.Format or time.Parse from the standard
+	// library.
+	// The standard Library already provides a set of predefined format.
+	TimestampFormat string
+
+	// DisableTimestamp allows disabling automatic timestamps in output
+	DisableTimestamp bool
+
+	// DisableHTMLEscape allows disabling html escaping in output
+	DisableHTMLEscape bool
+
+	// DataKey allows users to put all the log entry parameters into a nested dictionary at a given key.
+	DataKey string
+
+	// FieldMap allows users to customize the names of keys for default fields.
+	// As an example:
+	// formatter := &JSONFormatter{
+	//   	FieldMap: FieldMap{
+	// 		 FieldKeyTime:  "@timestamp",
+	// 		 FieldKeyLevel: "@level",
+	// 		 FieldKeyMsg:   "@message",
+	// 		 FieldKeyFunc:  "@caller",
+	//    },
+	// }
+	FieldMap FieldMap
+
+	// CallerPrettyfier can be set by the user to modify the content
+	// of the function and file keys in the json data when ReportCaller is
+	// activated. If any of the returned value is the empty string the
+	// corresponding key will be removed from json fields.
+	CallerPrettyfier func(*runtime.Frame) (function string, file string)
+
+	// PrettyPrint will indent all json logs
+	PrettyPrint bool
+}
+
+// Format renders a single log entry
+func (f *JSONFormatter) Format(entry *Entry) ([]byte, error) {
+	data := make(Fields, len(entry.Data)+4)
+	for k, v := range entry.Data {
+		switch v := v.(type) {
+		case error:
+			// Otherwise errors are ignored by `encoding/json`
+			// https://github.com/sirupsen/logrus/issues/137
+			data[k] = v.Error()
+		default:
+			data[k] = v
+		}
+	}
+
+	if f.DataKey != "" {
+		newData := make(Fields, 4)
+		newData[f.DataKey] = data
+		data = newData
+	}
+
+	prefixFieldClashes(data, f.FieldMap, entry.HasCaller())
+
+	timestampFormat := f.TimestampFormat
+	if timestampFormat == "" {
+		timestampFormat = defaultTimestampFormat
+	}
+
+	if entry.err != "" {
+		data[f.FieldMap.resolve(FieldKeyLogrusError)] = entry.err
+	}
+	if !f.DisableTimestamp {
+		data[f.FieldMap.resolve(FieldKeyTime)] = entry.Time.Format(timestampFormat)
+	}
+	data[f.FieldMap.resolve(FieldKeyMsg)] = entry.Message
+	data[f.FieldMap.resolve(FieldKeyLevel)] = entry.Level.String()
+	if entry.HasCaller() {
+		funcVal := entry.Caller.Function
+		fileVal := fmt.Sprintf("%s:%d", entry.Caller.File, entry.Caller.Line)
+		if f.CallerPrettyfier != nil {
+			funcVal, fileVal = f.CallerPrettyfier(entry.Caller)
+		}
+		if funcVal != "" {
+			data[f.FieldMap.resolve(FieldKeyFunc)] = funcVal
+		}
+		if fileVal != "" {
+			data[f.FieldMap.resolve(FieldKeyFile)] = fileVal
+		}
+	}
+
+	var b *bytes.Buffer
+	if entry.Buffer != nil {
+		b = entry.Buffer
+	} else {
+		b = &bytes.Buffer{}
+	}
+
+	encoder := json.NewEncoder(b)
+	encoder.SetEscapeHTML(!f.DisableHTMLEscape)
+	if f.PrettyPrint {
+		encoder.SetIndent("", "  ")
+	}
+	if err := encoder.Encode(data); err != nil {
+		return nil, fmt.Errorf("failed to marshal fields to JSON, %w", err)
+	}
+
+	return b.Bytes(), nil
+}
diff --git a/vendor/github.com/sirupsen/logrus/logger.go b/vendor/github.com/sirupsen/logrus/logger.go
new file mode 100644
index 00000000000..5ff0aef6d3f
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/logger.go
@@ -0,0 +1,417 @@
+package logrus
+
+import (
+	"context"
+	"io"
+	"os"
+	"sync"
+	"sync/atomic"
+	"time"
+)
+
+// LogFunction For big messages, it can be more efficient to pass a function
+// and only call it if the log level is actually enables rather than
+// generating the log message and then checking if the level is enabled
+type LogFunction func() []interface{}
+
+type Logger struct {
+	// The logs are `io.Copy`'d to this in a mutex. It's common to set this to a
+	// file, or leave it default which is `os.Stderr`. You can also set this to
+	// something more adventurous, such as logging to Kafka.
+	Out io.Writer
+	// Hooks for the logger instance. These allow firing events based on logging
+	// levels and log entries. For example, to send errors to an error tracking
+	// service, log to StatsD or dump the core on fatal errors.
+	Hooks LevelHooks
+	// All log entries pass through the formatter before logged to Out. The
+	// included formatters are `TextFormatter` and `JSONFormatter` for which
+	// TextFormatter is the default. In development (when a TTY is attached) it
+	// logs with colors, but to a file it wouldn't. You can easily implement your
+	// own that implements the `Formatter` interface, see the `README` or included
+	// formatters for examples.
+	Formatter Formatter
+
+	// Flag for whether to log caller info (off by default)
+	ReportCaller bool
+
+	// The logging level the logger should log at. This is typically (and defaults
+	// to) `logrus.Info`, which allows Info(), Warn(), Error() and Fatal() to be
+	// logged.
+	Level Level
+	// Used to sync writing to the log. Locking is enabled by Default
+	mu MutexWrap
+	// Reusable empty entry
+	entryPool sync.Pool
+	// Function to exit the application, defaults to `os.Exit()`
+	ExitFunc exitFunc
+	// The buffer pool used to format the log. If it is nil, the default global
+	// buffer pool will be used.
+	BufferPool BufferPool
+}
+
+type exitFunc func(int)
+
+type MutexWrap struct {
+	lock     sync.Mutex
+	disabled bool
+}
+
+func (mw *MutexWrap) Lock() {
+	if !mw.disabled {
+		mw.lock.Lock()
+	}
+}
+
+func (mw *MutexWrap) Unlock() {
+	if !mw.disabled {
+		mw.lock.Unlock()
+	}
+}
+
+func (mw *MutexWrap) Disable() {
+	mw.disabled = true
+}
+
+// Creates a new logger. Configuration should be set by changing `Formatter`,
+// `Out` and `Hooks` directly on the default logger instance. You can also just
+// instantiate your own:
+//
+//    var log = &logrus.Logger{
+//      Out: os.Stderr,
+//      Formatter: new(logrus.TextFormatter),
+//      Hooks: make(logrus.LevelHooks),
+//      Level: logrus.DebugLevel,
+//    }
+//
+// It's recommended to make this a global instance called `log`.
+func New() *Logger {
+	return &Logger{
+		Out:          os.Stderr,
+		Formatter:    new(TextFormatter),
+		Hooks:        make(LevelHooks),
+		Level:        InfoLevel,
+		ExitFunc:     os.Exit,
+		ReportCaller: false,
+	}
+}
+
+func (logger *Logger) newEntry() *Entry {
+	entry, ok := logger.entryPool.Get().(*Entry)
+	if ok {
+		return entry
+	}
+	return NewEntry(logger)
+}
+
+func (logger *Logger) releaseEntry(entry *Entry) {
+	entry.Data = map[string]interface{}{}
+	logger.entryPool.Put(entry)
+}
+
+// WithField allocates a new entry and adds a field to it.
+// Debug, Print, Info, Warn, Error, Fatal or Panic must be then applied to
+// this new returned entry.
+// If you want multiple fields, use `WithFields`.
+func (logger *Logger) WithField(key string, value interface{}) *Entry {
+	entry := logger.newEntry()
+	defer logger.releaseEntry(entry)
+	return entry.WithField(key, value)
+}
+
+// Adds a struct of fields to the log entry. All it does is call `WithField` for
+// each `Field`.
+func (logger *Logger) WithFields(fields Fields) *Entry {
+	entry := logger.newEntry()
+	defer logger.releaseEntry(entry)
+	return entry.WithFields(fields)
+}
+
+// Add an error as single field to the log entry.  All it does is call
+// `WithError` for the given `error`.
+func (logger *Logger) WithError(err error) *Entry {
+	entry := logger.newEntry()
+	defer logger.releaseEntry(entry)
+	return entry.WithError(err)
+}
+
+// Add a context to the log entry.
+func (logger *Logger) WithContext(ctx context.Context) *Entry {
+	entry := logger.newEntry()
+	defer logger.releaseEntry(entry)
+	return entry.WithContext(ctx)
+}
+
+// Overrides the time of the log entry.
+func (logger *Logger) WithTime(t time.Time) *Entry {
+	entry := logger.newEntry()
+	defer logger.releaseEntry(entry)
+	return entry.WithTime(t)
+}
+
+func (logger *Logger) Logf(level Level, format string, args ...interface{}) {
+	if logger.IsLevelEnabled(level) {
+		entry := logger.newEntry()
+		entry.Logf(level, format, args...)
+		logger.releaseEntry(entry)
+	}
+}
+
+func (logger *Logger) Tracef(format string, args ...interface{}) {
+	logger.Logf(TraceLevel, format, args...)
+}
+
+func (logger *Logger) Debugf(format string, args ...interface{}) {
+	logger.Logf(DebugLevel, format, args...)
+}
+
+func (logger *Logger) Infof(format string, args ...interface{}) {
+	logger.Logf(InfoLevel, format, args...)
+}
+
+func (logger *Logger) Printf(format string, args ...interface{}) {
+	entry := logger.newEntry()
+	entry.Printf(format, args...)
+	logger.releaseEntry(entry)
+}
+
+func (logger *Logger) Warnf(format string, args ...interface{}) {
+	logger.Logf(WarnLevel, format, args...)
+}
+
+func (logger *Logger) Warningf(format string, args ...interface{}) {
+	logger.Warnf(format, args...)
+}
+
+func (logger *Logger) Errorf(format string, args ...interface{}) {
+	logger.Logf(ErrorLevel, format, args...)
+}
+
+func (logger *Logger) Fatalf(format string, args ...interface{}) {
+	logger.Logf(FatalLevel, format, args...)
+	logger.Exit(1)
+}
+
+func (logger *Logger) Panicf(format string, args ...interface{}) {
+	logger.Logf(PanicLevel, format, args...)
+}
+
+// Log will log a message at the level given as parameter.
+// Warning: using Log at Panic or Fatal level will not respectively Panic nor Exit.
+// For this behaviour Logger.Panic or Logger.Fatal should be used instead.
+func (logger *Logger) Log(level Level, args ...interface{}) {
+	if logger.IsLevelEnabled(level) {
+		entry := logger.newEntry()
+		entry.Log(level, args...)
+		logger.releaseEntry(entry)
+	}
+}
+
+func (logger *Logger) LogFn(level Level, fn LogFunction) {
+	if logger.IsLevelEnabled(level) {
+		entry := logger.newEntry()
+		entry.Log(level, fn()...)
+		logger.releaseEntry(entry)
+	}
+}
+
+func (logger *Logger) Trace(args ...interface{}) {
+	logger.Log(TraceLevel, args...)
+}
+
+func (logger *Logger) Debug(args ...interface{}) {
+	logger.Log(DebugLevel, args...)
+}
+
+func (logger *Logger) Info(args ...interface{}) {
+	logger.Log(InfoLevel, args...)
+}
+
+func (logger *Logger) Print(args ...interface{}) {
+	entry := logger.newEntry()
+	entry.Print(args...)
+	logger.releaseEntry(entry)
+}
+
+func (logger *Logger) Warn(args ...interface{}) {
+	logger.Log(WarnLevel, args...)
+}
+
+func (logger *Logger) Warning(args ...interface{}) {
+	logger.Warn(args...)
+}
+
+func (logger *Logger) Error(args ...interface{}) {
+	logger.Log(ErrorLevel, args...)
+}
+
+func (logger *Logger) Fatal(args ...interface{}) {
+	logger.Log(FatalLevel, args...)
+	logger.Exit(1)
+}
+
+func (logger *Logger) Panic(args ...interface{}) {
+	logger.Log(PanicLevel, args...)
+}
+
+func (logger *Logger) TraceFn(fn LogFunction) {
+	logger.LogFn(TraceLevel, fn)
+}
+
+func (logger *Logger) DebugFn(fn LogFunction) {
+	logger.LogFn(DebugLevel, fn)
+}
+
+func (logger *Logger) InfoFn(fn LogFunction) {
+	logger.LogFn(InfoLevel, fn)
+}
+
+func (logger *Logger) PrintFn(fn LogFunction) {
+	entry := logger.newEntry()
+	entry.Print(fn()...)
+	logger.releaseEntry(entry)
+}
+
+func (logger *Logger) WarnFn(fn LogFunction) {
+	logger.LogFn(WarnLevel, fn)
+}
+
+func (logger *Logger) WarningFn(fn LogFunction) {
+	logger.WarnFn(fn)
+}
+
+func (logger *Logger) ErrorFn(fn LogFunction) {
+	logger.LogFn(ErrorLevel, fn)
+}
+
+func (logger *Logger) FatalFn(fn LogFunction) {
+	logger.LogFn(FatalLevel, fn)
+	logger.Exit(1)
+}
+
+func (logger *Logger) PanicFn(fn LogFunction) {
+	logger.LogFn(PanicLevel, fn)
+}
+
+func (logger *Logger) Logln(level Level, args ...interface{}) {
+	if logger.IsLevelEnabled(level) {
+		entry := logger.newEntry()
+		entry.Logln(level, args...)
+		logger.releaseEntry(entry)
+	}
+}
+
+func (logger *Logger) Traceln(args ...interface{}) {
+	logger.Logln(TraceLevel, args...)
+}
+
+func (logger *Logger) Debugln(args ...interface{}) {
+	logger.Logln(DebugLevel, args...)
+}
+
+func (logger *Logger) Infoln(args ...interface{}) {
+	logger.Logln(InfoLevel, args...)
+}
+
+func (logger *Logger) Println(args ...interface{}) {
+	entry := logger.newEntry()
+	entry.Println(args...)
+	logger.releaseEntry(entry)
+}
+
+func (logger *Logger) Warnln(args ...interface{}) {
+	logger.Logln(WarnLevel, args...)
+}
+
+func (logger *Logger) Warningln(args ...interface{}) {
+	logger.Warnln(args...)
+}
+
+func (logger *Logger) Errorln(args ...interface{}) {
+	logger.Logln(ErrorLevel, args...)
+}
+
+func (logger *Logger) Fatalln(args ...interface{}) {
+	logger.Logln(FatalLevel, args...)
+	logger.Exit(1)
+}
+
+func (logger *Logger) Panicln(args ...interface{}) {
+	logger.Logln(PanicLevel, args...)
+}
+
+func (logger *Logger) Exit(code int) {
+	runHandlers()
+	if logger.ExitFunc == nil {
+		logger.ExitFunc = os.Exit
+	}
+	logger.ExitFunc(code)
+}
+
+//When file is opened with appending mode, it's safe to
+//write concurrently to a file (within 4k message on Linux).
+//In these cases user can choose to disable the lock.
+func (logger *Logger) SetNoLock() {
+	logger.mu.Disable()
+}
+
+func (logger *Logger) level() Level {
+	return Level(atomic.LoadUint32((*uint32)(&logger.Level)))
+}
+
+// SetLevel sets the logger level.
+func (logger *Logger) SetLevel(level Level) {
+	atomic.StoreUint32((*uint32)(&logger.Level), uint32(level))
+}
+
+// GetLevel returns the logger level.
+func (logger *Logger) GetLevel() Level {
+	return logger.level()
+}
+
+// AddHook adds a hook to the logger hooks.
+func (logger *Logger) AddHook(hook Hook) {
+	logger.mu.Lock()
+	defer logger.mu.Unlock()
+	logger.Hooks.Add(hook)
+}
+
+// IsLevelEnabled checks if the log level of the logger is greater than the level param
+func (logger *Logger) IsLevelEnabled(level Level) bool {
+	return logger.level() >= level
+}
+
+// SetFormatter sets the logger formatter.
+func (logger *Logger) SetFormatter(formatter Formatter) {
+	logger.mu.Lock()
+	defer logger.mu.Unlock()
+	logger.Formatter = formatter
+}
+
+// SetOutput sets the logger output.
+func (logger *Logger) SetOutput(output io.Writer) {
+	logger.mu.Lock()
+	defer logger.mu.Unlock()
+	logger.Out = output
+}
+
+func (logger *Logger) SetReportCaller(reportCaller bool) {
+	logger.mu.Lock()
+	defer logger.mu.Unlock()
+	logger.ReportCaller = reportCaller
+}
+
+// ReplaceHooks replaces the logger hooks and returns the old ones
+func (logger *Logger) ReplaceHooks(hooks LevelHooks) LevelHooks {
+	logger.mu.Lock()
+	oldHooks := logger.Hooks
+	logger.Hooks = hooks
+	logger.mu.Unlock()
+	return oldHooks
+}
+
+// SetBufferPool sets the logger buffer pool.
+func (logger *Logger) SetBufferPool(pool BufferPool) {
+	logger.mu.Lock()
+	defer logger.mu.Unlock()
+	logger.BufferPool = pool
+}
diff --git a/vendor/github.com/sirupsen/logrus/logrus.go b/vendor/github.com/sirupsen/logrus/logrus.go
new file mode 100644
index 00000000000..2f16224cb9f
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/logrus.go
@@ -0,0 +1,186 @@
+package logrus
+
+import (
+	"fmt"
+	"log"
+	"strings"
+)
+
+// Fields type, used to pass to `WithFields`.
+type Fields map[string]interface{}
+
+// Level type
+type Level uint32
+
+// Convert the Level to a string. E.g. PanicLevel becomes "panic".
+func (level Level) String() string {
+	if b, err := level.MarshalText(); err == nil {
+		return string(b)
+	} else {
+		return "unknown"
+	}
+}
+
+// ParseLevel takes a string level and returns the Logrus log level constant.
+func ParseLevel(lvl string) (Level, error) {
+	switch strings.ToLower(lvl) {
+	case "panic":
+		return PanicLevel, nil
+	case "fatal":
+		return FatalLevel, nil
+	case "error":
+		return ErrorLevel, nil
+	case "warn", "warning":
+		return WarnLevel, nil
+	case "info":
+		return InfoLevel, nil
+	case "debug":
+		return DebugLevel, nil
+	case "trace":
+		return TraceLevel, nil
+	}
+
+	var l Level
+	return l, fmt.Errorf("not a valid logrus Level: %q", lvl)
+}
+
+// UnmarshalText implements encoding.TextUnmarshaler.
+func (level *Level) UnmarshalText(text []byte) error {
+	l, err := ParseLevel(string(text))
+	if err != nil {
+		return err
+	}
+
+	*level = l
+
+	return nil
+}
+
+func (level Level) MarshalText() ([]byte, error) {
+	switch level {
+	case TraceLevel:
+		return []byte("trace"), nil
+	case DebugLevel:
+		return []byte("debug"), nil
+	case InfoLevel:
+		return []byte("info"), nil
+	case WarnLevel:
+		return []byte("warning"), nil
+	case ErrorLevel:
+		return []byte("error"), nil
+	case FatalLevel:
+		return []byte("fatal"), nil
+	case PanicLevel:
+		return []byte("panic"), nil
+	}
+
+	return nil, fmt.Errorf("not a valid logrus level %d", level)
+}
+
+// A constant exposing all logging levels
+var AllLevels = []Level{
+	PanicLevel,
+	FatalLevel,
+	ErrorLevel,
+	WarnLevel,
+	InfoLevel,
+	DebugLevel,
+	TraceLevel,
+}
+
+// These are the different logging levels. You can set the logging level to log
+// on your instance of logger, obtained with `logrus.New()`.
+const (
+	// PanicLevel level, highest level of severity. Logs and then calls panic with the
+	// message passed to Debug, Info, ...
+	PanicLevel Level = iota
+	// FatalLevel level. Logs and then calls `logger.Exit(1)`. It will exit even if the
+	// logging level is set to Panic.
+	FatalLevel
+	// ErrorLevel level. Logs. Used for errors that should definitely be noted.
+	// Commonly used for hooks to send errors to an error tracking service.
+	ErrorLevel
+	// WarnLevel level. Non-critical entries that deserve eyes.
+	WarnLevel
+	// InfoLevel level. General operational entries about what's going on inside the
+	// application.
+	InfoLevel
+	// DebugLevel level. Usually only enabled when debugging. Very verbose logging.
+	DebugLevel
+	// TraceLevel level. Designates finer-grained informational events than the Debug.
+	TraceLevel
+)
+
+// Won't compile if StdLogger can't be realized by a log.Logger
+var (
+	_ StdLogger = &log.Logger{}
+	_ StdLogger = &Entry{}
+	_ StdLogger = &Logger{}
+)
+
+// StdLogger is what your logrus-enabled library should take, that way
+// it'll accept a stdlib logger and a logrus logger. There's no standard
+// interface, this is the closest we get, unfortunately.
+type StdLogger interface {
+	Print(...interface{})
+	Printf(string, ...interface{})
+	Println(...interface{})
+
+	Fatal(...interface{})
+	Fatalf(string, ...interface{})
+	Fatalln(...interface{})
+
+	Panic(...interface{})
+	Panicf(string, ...interface{})
+	Panicln(...interface{})
+}
+
+// The FieldLogger interface generalizes the Entry and Logger types
+type FieldLogger interface {
+	WithField(key string, value interface{}) *Entry
+	WithFields(fields Fields) *Entry
+	WithError(err error) *Entry
+
+	Debugf(format string, args ...interface{})
+	Infof(format string, args ...interface{})
+	Printf(format string, args ...interface{})
+	Warnf(format string, args ...interface{})
+	Warningf(format string, args ...interface{})
+	Errorf(format string, args ...interface{})
+	Fatalf(format string, args ...interface{})
+	Panicf(format string, args ...interface{})
+
+	Debug(args ...interface{})
+	Info(args ...interface{})
+	Print(args ...interface{})
+	Warn(args ...interface{})
+	Warning(args ...interface{})
+	Error(args ...interface{})
+	Fatal(args ...interface{})
+	Panic(args ...interface{})
+
+	Debugln(args ...interface{})
+	Infoln(args ...interface{})
+	Println(args ...interface{})
+	Warnln(args ...interface{})
+	Warningln(args ...interface{})
+	Errorln(args ...interface{})
+	Fatalln(args ...interface{})
+	Panicln(args ...interface{})
+
+	// IsDebugEnabled() bool
+	// IsInfoEnabled() bool
+	// IsWarnEnabled() bool
+	// IsErrorEnabled() bool
+	// IsFatalEnabled() bool
+	// IsPanicEnabled() bool
+}
+
+// Ext1FieldLogger (the first extension to FieldLogger) is superfluous, it is
+// here for consistancy. Do not use. Use Logger or Entry instead.
+type Ext1FieldLogger interface {
+	FieldLogger
+	Tracef(format string, args ...interface{})
+	Trace(args ...interface{})
+	Traceln(args ...interface{})
+}
diff --git a/vendor/github.com/sirupsen/logrus/terminal_check_appengine.go b/vendor/github.com/sirupsen/logrus/terminal_check_appengine.go
new file mode 100644
index 00000000000..2403de98192
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/terminal_check_appengine.go
@@ -0,0 +1,11 @@
+// +build appengine
+
+package logrus
+
+import (
+	"io"
+)
+
+func checkIfTerminal(w io.Writer) bool {
+	return true
+}
diff --git a/vendor/github.com/sirupsen/logrus/terminal_check_bsd.go b/vendor/github.com/sirupsen/logrus/terminal_check_bsd.go
new file mode 100644
index 00000000000..499789984d2
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/terminal_check_bsd.go
@@ -0,0 +1,13 @@
+// +build darwin dragonfly freebsd netbsd openbsd
+// +build !js
+
+package logrus
+
+import "golang.org/x/sys/unix"
+
+const ioctlReadTermios = unix.TIOCGETA
+
+func isTerminal(fd int) bool {
+	_, err := unix.IoctlGetTermios(fd, ioctlReadTermios)
+	return err == nil
+}
diff --git a/vendor/github.com/sirupsen/logrus/terminal_check_js.go b/vendor/github.com/sirupsen/logrus/terminal_check_js.go
new file mode 100644
index 00000000000..ebdae3ec626
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/terminal_check_js.go
@@ -0,0 +1,7 @@
+// +build js
+
+package logrus
+
+func isTerminal(fd int) bool {
+	return false
+}
diff --git a/vendor/github.com/sirupsen/logrus/terminal_check_no_terminal.go b/vendor/github.com/sirupsen/logrus/terminal_check_no_terminal.go
new file mode 100644
index 00000000000..97af92c68ea
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/terminal_check_no_terminal.go
@@ -0,0 +1,11 @@
+// +build js nacl plan9
+
+package logrus
+
+import (
+	"io"
+)
+
+func checkIfTerminal(w io.Writer) bool {
+	return false
+}
diff --git a/vendor/github.com/sirupsen/logrus/terminal_check_notappengine.go b/vendor/github.com/sirupsen/logrus/terminal_check_notappengine.go
new file mode 100644
index 00000000000..3293fb3caad
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/terminal_check_notappengine.go
@@ -0,0 +1,17 @@
+// +build !appengine,!js,!windows,!nacl,!plan9
+
+package logrus
+
+import (
+	"io"
+	"os"
+)
+
+func checkIfTerminal(w io.Writer) bool {
+	switch v := w.(type) {
+	case *os.File:
+		return isTerminal(int(v.Fd()))
+	default:
+		return false
+	}
+}
diff --git a/vendor/github.com/sirupsen/logrus/terminal_check_solaris.go b/vendor/github.com/sirupsen/logrus/terminal_check_solaris.go
new file mode 100644
index 00000000000..f6710b3bd0b
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/terminal_check_solaris.go
@@ -0,0 +1,11 @@
+package logrus
+
+import (
+	"golang.org/x/sys/unix"
+)
+
+// IsTerminal returns true if the given file descriptor is a terminal.
+func isTerminal(fd int) bool {
+	_, err := unix.IoctlGetTermio(fd, unix.TCGETA)
+	return err == nil
+}
diff --git a/vendor/github.com/sirupsen/logrus/terminal_check_unix.go b/vendor/github.com/sirupsen/logrus/terminal_check_unix.go
new file mode 100644
index 00000000000..04748b8515f
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/terminal_check_unix.go
@@ -0,0 +1,13 @@
+// +build linux aix zos
+// +build !js
+
+package logrus
+
+import "golang.org/x/sys/unix"
+
+const ioctlReadTermios = unix.TCGETS
+
+func isTerminal(fd int) bool {
+	_, err := unix.IoctlGetTermios(fd, ioctlReadTermios)
+	return err == nil
+}
diff --git a/vendor/github.com/sirupsen/logrus/terminal_check_windows.go b/vendor/github.com/sirupsen/logrus/terminal_check_windows.go
new file mode 100644
index 00000000000..2879eb50ea6
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/terminal_check_windows.go
@@ -0,0 +1,27 @@
+// +build !appengine,!js,windows
+
+package logrus
+
+import (
+	"io"
+	"os"
+
+	"golang.org/x/sys/windows"
+)
+
+func checkIfTerminal(w io.Writer) bool {
+	switch v := w.(type) {
+	case *os.File:
+		handle := windows.Handle(v.Fd())
+		var mode uint32
+		if err := windows.GetConsoleMode(handle, &mode); err != nil {
+			return false
+		}
+		mode |= windows.ENABLE_VIRTUAL_TERMINAL_PROCESSING
+		if err := windows.SetConsoleMode(handle, mode); err != nil {
+			return false
+		}
+		return true
+	}
+	return false
+}
diff --git a/vendor/github.com/sirupsen/logrus/text_formatter.go b/vendor/github.com/sirupsen/logrus/text_formatter.go
new file mode 100644
index 00000000000..be2c6efe5ed
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/text_formatter.go
@@ -0,0 +1,339 @@
+package logrus
+
+import (
+	"bytes"
+	"fmt"
+	"os"
+	"runtime"
+	"sort"
+	"strconv"
+	"strings"
+	"sync"
+	"time"
+	"unicode/utf8"
+)
+
+const (
+	red    = 31
+	yellow = 33
+	blue   = 36
+	gray   = 37
+)
+
+var baseTimestamp time.Time
+
+func init() {
+	baseTimestamp = time.Now()
+}
+
+// TextFormatter formats logs into text
+type TextFormatter struct {
+	// Set to true to bypass checking for a TTY before outputting colors.
+	ForceColors bool
+
+	// Force disabling colors.
+	DisableColors bool
+
+	// Force quoting of all values
+	ForceQuote bool
+
+	// DisableQuote disables quoting for all values.
+	// DisableQuote will have a lower priority than ForceQuote.
+	// If both of them are set to true, quote will be forced on all values.
+	DisableQuote bool
+
+	// Override coloring based on CLICOLOR and CLICOLOR_FORCE. - https://bixense.com/clicolors/
+	EnvironmentOverrideColors bool
+
+	// Disable timestamp logging. useful when output is redirected to logging
+	// system that already adds timestamps.
+	DisableTimestamp bool
+
+	// Enable logging the full timestamp when a TTY is attached instead of just
+	// the time passed since beginning of execution.
+	FullTimestamp bool
+
+	// TimestampFormat to use for display when a full timestamp is printed.
+	// The format to use is the same than for time.Format or time.Parse from the standard
+	// library.
+	// The standard Library already provides a set of predefined format.
+	TimestampFormat string
+
+	// The fields are sorted by default for a consistent output. For applications
+	// that log extremely frequently and don't use the JSON formatter this may not
+	// be desired.
+	DisableSorting bool
+
+	// The keys sorting function, when uninitialized it uses sort.Strings.
+	SortingFunc func([]string)
+
+	// Disables the truncation of the level text to 4 characters.
+	DisableLevelTruncation bool
+
+	// PadLevelText Adds padding the level text so that all the levels output at the same length
+	// PadLevelText is a superset of the DisableLevelTruncation option
+	PadLevelText bool
+
+	// QuoteEmptyFields will wrap empty fields in quotes if true
+	QuoteEmptyFields bool
+
+	// Whether the logger's out is to a terminal
+	isTerminal bool
+
+	// FieldMap allows users to customize the names of keys for default fields.
+	// As an example:
+	// formatter := &TextFormatter{
+	//     FieldMap: FieldMap{
+	//         FieldKeyTime:  "@timestamp",
+	//         FieldKeyLevel: "@level",
+	//         FieldKeyMsg:   "@message"}}
+	FieldMap FieldMap
+
+	// CallerPrettyfier can be set by the user to modify the content
+	// of the function and file keys in the data when ReportCaller is
+	// activated. If any of the returned value is the empty string the
+	// corresponding key will be removed from fields.
+	CallerPrettyfier func(*runtime.Frame) (function string, file string)
+
+	terminalInitOnce sync.Once
+
+	// The max length of the level text, generated dynamically on init
+	levelTextMaxLength int
+}
+
+func (f *TextFormatter) init(entry *Entry) {
+	if entry.Logger != nil {
+		f.isTerminal = checkIfTerminal(entry.Logger.Out)
+	}
+	// Get the max length of the level text
+	for _, level := range AllLevels {
+		levelTextLength := utf8.RuneCount([]byte(level.String()))
+		if levelTextLength > f.levelTextMaxLength {
+			f.levelTextMaxLength = levelTextLength
+		}
+	}
+}
+
+func (f *TextFormatter) isColored() bool {
+	isColored := f.ForceColors || (f.isTerminal && (runtime.GOOS != "windows"))
+
+	if f.EnvironmentOverrideColors {
+		switch force, ok := os.LookupEnv("CLICOLOR_FORCE"); {
+		case ok && force != "0":
+			isColored = true
+		case ok && force == "0", os.Getenv("CLICOLOR") == "0":
+			isColored = false
+		}
+	}
+
+	return isColored && !f.DisableColors
+}
+
+// Format renders a single log entry
+func (f *TextFormatter) Format(entry *Entry) ([]byte, error) {
+	data := make(Fields)
+	for k, v := range entry.Data {
+		data[k] = v
+	}
+	prefixFieldClashes(data, f.FieldMap, entry.HasCaller())
+	keys := make([]string, 0, len(data))
+	for k := range data {
+		keys = append(keys, k)
+	}
+
+	var funcVal, fileVal string
+
+	fixedKeys := make([]string, 0, 4+len(data))
+	if !f.DisableTimestamp {
+		fixedKeys = append(fixedKeys, f.FieldMap.resolve(FieldKeyTime))
+	}
+	fixedKeys = append(fixedKeys, f.FieldMap.resolve(FieldKeyLevel))
+	if entry.Message != "" {
+		fixedKeys = append(fixedKeys, f.FieldMap.resolve(FieldKeyMsg))
+	}
+	if entry.err != "" {
+		fixedKeys = append(fixedKeys, f.FieldMap.resolve(FieldKeyLogrusError))
+	}
+	if entry.HasCaller() {
+		if f.CallerPrettyfier != nil {
+			funcVal, fileVal = f.CallerPrettyfier(entry.Caller)
+		} else {
+			funcVal = entry.Caller.Function
+			fileVal = fmt.Sprintf("%s:%d", entry.Caller.File, entry.Caller.Line)
+		}
+
+		if funcVal != "" {
+			fixedKeys = append(fixedKeys, f.FieldMap.resolve(FieldKeyFunc))
+		}
+		if fileVal != "" {
+			fixedKeys = append(fixedKeys, f.FieldMap.resolve(FieldKeyFile))
+		}
+	}
+
+	if !f.DisableSorting {
+		if f.SortingFunc == nil {
+			sort.Strings(keys)
+			fixedKeys = append(fixedKeys, keys...)
+		} else {
+			if !f.isColored() {
+				fixedKeys = append(fixedKeys, keys...)
+				f.SortingFunc(fixedKeys)
+			} else {
+				f.SortingFunc(keys)
+			}
+		}
+	} else {
+		fixedKeys = append(fixedKeys, keys...)
+	}
+
+	var b *bytes.Buffer
+	if entry.Buffer != nil {
+		b = entry.Buffer
+	} else {
+		b = &bytes.Buffer{}
+	}
+
+	f.terminalInitOnce.Do(func() { f.init(entry) })
+
+	timestampFormat := f.TimestampFormat
+	if timestampFormat == "" {
+		timestampFormat = defaultTimestampFormat
+	}
+	if f.isColored() {
+		f.printColored(b, entry, keys, data, timestampFormat)
+	} else {
+
+		for _, key := range fixedKeys {
+			var value interface{}
+			switch {
+			case key == f.FieldMap.resolve(FieldKeyTime):
+				value = entry.Time.Format(timestampFormat)
+			case key == f.FieldMap.resolve(FieldKeyLevel):
+				value = entry.Level.String()
+			case key == f.FieldMap.resolve(FieldKeyMsg):
+				value = entry.Message
+			case key == f.FieldMap.resolve(FieldKeyLogrusError):
+				value = entry.err
+			case key == f.FieldMap.resolve(FieldKeyFunc) && entry.HasCaller():
+				value = funcVal
+			case key == f.FieldMap.resolve(FieldKeyFile) && entry.HasCaller():
+				value = fileVal
+			default:
+				value = data[key]
+			}
+			f.appendKeyValue(b, key, value)
+		}
+	}
+
+	b.WriteByte('\n')
+	return b.Bytes(), nil
+}
+
+func (f *TextFormatter) printColored(b *bytes.Buffer, entry *Entry, keys []string, data Fields, timestampFormat string) {
+	var levelColor int
+	switch entry.Level {
+	case DebugLevel, TraceLevel:
+		levelColor = gray
+	case WarnLevel:
+		levelColor = yellow
+	case ErrorLevel, FatalLevel, PanicLevel:
+		levelColor = red
+	case InfoLevel:
+		levelColor = blue
+	default:
+		levelColor = blue
+	}
+
+	levelText := strings.ToUpper(entry.Level.String())
+	if !f.DisableLevelTruncation && !f.PadLevelText {
+		levelText = levelText[0:4]
+	}
+	if f.PadLevelText {
+		// Generates the format string used in the next line, for example "%-6s" or "%-7s".
+		// Based on the max level text length.
+		formatString := "%-" + strconv.Itoa(f.levelTextMaxLength) + "s"
+		// Formats the level text by appending spaces up to the max length, for example:
+		// 	- "INFO   "
+		//	- "WARNING"
+		levelText = fmt.Sprintf(formatString, levelText)
+	}
+
+	// Remove a single newline if it already exists in the message to keep
+	// the behavior of logrus text_formatter the same as the stdlib log package
+	entry.Message = strings.TrimSuffix(entry.Message, "\n")
+
+	caller := ""
+	if entry.HasCaller() {
+		funcVal := fmt.Sprintf("%s()", entry.Caller.Function)
+		fileVal := fmt.Sprintf("%s:%d", entry.Caller.File, entry.Caller.Line)
+
+		if f.CallerPrettyfier != nil {
+			funcVal, fileVal = f.CallerPrettyfier(entry.Caller)
+		}
+
+		if fileVal == "" {
+			caller = funcVal
+		} else if funcVal == "" {
+			caller = fileVal
+		} else {
+			caller = fileVal + " " + funcVal
+		}
+	}
+
+	switch {
+	case f.DisableTimestamp:
+		fmt.Fprintf(b, "\x1b[%dm%s\x1b[0m%s %-44s ", levelColor, levelText, caller, entry.Message)
+	case !f.FullTimestamp:
+		fmt.Fprintf(b, "\x1b[%dm%s\x1b[0m[%04d]%s %-44s ", levelColor, levelText, int(entry.Time.Sub(baseTimestamp)/time.Second), caller, entry.Message)
+	default:
+		fmt.Fprintf(b, "\x1b[%dm%s\x1b[0m[%s]%s %-44s ", levelColor, levelText, entry.Time.Format(timestampFormat), caller, entry.Message)
+	}
+	for _, k := range keys {
+		v := data[k]
+		fmt.Fprintf(b, " \x1b[%dm%s\x1b[0m=", levelColor, k)
+		f.appendValue(b, v)
+	}
+}
+
+func (f *TextFormatter) needsQuoting(text string) bool {
+	if f.ForceQuote {
+		return true
+	}
+	if f.QuoteEmptyFields && len(text) == 0 {
+		return true
+	}
+	if f.DisableQuote {
+		return false
+	}
+	for _, ch := range text {
+		if !((ch >= 'a' && ch <= 'z') ||
+			(ch >= 'A' && ch <= 'Z') ||
+			(ch >= '0' && ch <= '9') ||
+			ch == '-' || ch == '.' || ch == '_' || ch == '/' || ch == '@' || ch == '^' || ch == '+') {
+			return true
+		}
+	}
+	return false
+}
+
+func (f *TextFormatter) appendKeyValue(b *bytes.Buffer, key string, value interface{}) {
+	if b.Len() > 0 {
+		b.WriteByte(' ')
+	}
+	b.WriteString(key)
+	b.WriteByte('=')
+	f.appendValue(b, value)
+}
+
+func (f *TextFormatter) appendValue(b *bytes.Buffer, value interface{}) {
+	stringVal, ok := value.(string)
+	if !ok {
+		stringVal = fmt.Sprint(value)
+	}
+
+	if !f.needsQuoting(stringVal) {
+		b.WriteString(stringVal)
+	} else {
+		b.WriteString(fmt.Sprintf("%q", stringVal))
+	}
+}
diff --git a/vendor/github.com/sirupsen/logrus/writer.go b/vendor/github.com/sirupsen/logrus/writer.go
new file mode 100644
index 00000000000..074fd4b8bd7
--- /dev/null
+++ b/vendor/github.com/sirupsen/logrus/writer.go
@@ -0,0 +1,102 @@
+package logrus
+
+import (
+	"bufio"
+	"io"
+	"runtime"
+	"strings"
+)
+
+// Writer at INFO level. See WriterLevel for details.
+func (logger *Logger) Writer() *io.PipeWriter {
+	return logger.WriterLevel(InfoLevel)
+}
+
+// WriterLevel returns an io.Writer that can be used to write arbitrary text to
+// the logger at the given log level. Each line written to the writer will be
+// printed in the usual way using formatters and hooks. The writer is part of an
+// io.Pipe and it is the callers responsibility to close the writer when done.
+// This can be used to override the standard library logger easily.
+func (logger *Logger) WriterLevel(level Level) *io.PipeWriter {
+	return NewEntry(logger).WriterLevel(level)
+}
+
+// Writer returns an io.Writer that writes to the logger at the info log level
+func (entry *Entry) Writer() *io.PipeWriter {
+	return entry.WriterLevel(InfoLevel)
+}
+
+// WriterLevel returns an io.Writer that writes to the logger at the given log level
+func (entry *Entry) WriterLevel(level Level) *io.PipeWriter {
+	reader, writer := io.Pipe()
+
+	var printFunc func(args ...interface{})
+
+	// Determine which log function to use based on the specified log level
+	switch level {
+	case TraceLevel:
+		printFunc = entry.Trace
+	case DebugLevel:
+		printFunc = entry.Debug
+	case InfoLevel:
+		printFunc = entry.Info
+	case WarnLevel:
+		printFunc = entry.Warn
+	case ErrorLevel:
+		printFunc = entry.Error
+	case FatalLevel:
+		printFunc = entry.Fatal
+	case PanicLevel:
+		printFunc = entry.Panic
+	default:
+		printFunc = entry.Print
+	}
+
+	// Start a new goroutine to scan the input and write it to the logger using the specified print function.
+	// It splits the input into chunks of up to 64KB to avoid buffer overflows.
+	go entry.writerScanner(reader, printFunc)
+
+	// Set a finalizer function to close the writer when it is garbage collected
+	runtime.SetFinalizer(writer, writerFinalizer)
+
+	return writer
+}
+
+// writerScanner scans the input from the reader and writes it to the logger
+func (entry *Entry) writerScanner(reader *io.PipeReader, printFunc func(args ...interface{})) {
+	scanner := bufio.NewScanner(reader)
+
+	// Set the buffer size to the maximum token size to avoid buffer overflows
+	scanner.Buffer(make([]byte, bufio.MaxScanTokenSize), bufio.MaxScanTokenSize)
+
+	// Define a split function to split the input into chunks of up to 64KB
+	chunkSize := bufio.MaxScanTokenSize // 64KB
+	splitFunc := func(data []byte, atEOF bool) (int, []byte, error) {
+		if len(data) >= chunkSize {
+			return chunkSize, data[:chunkSize], nil
+		}
+
+		return bufio.ScanLines(data, atEOF)
+	}
+
+	// Use the custom split function to split the input
+	scanner.Split(splitFunc)
+
+	// Scan the input and write it to the logger using the specified print function
+	for scanner.Scan() {
+		printFunc(strings.TrimRight(scanner.Text(), "\r\n"))
+	}
+
+	// If there was an error while scanning the input, log an error
+	if err := scanner.Err(); err != nil {
+		entry.Errorf("Error while reading from Writer: %s", err)
+	}
+
+	// Close the reader when we are done
+	reader.Close()
+}
+
+// WriterFinalizer is a finalizer function that closes then given writer when it is garbage collected
+func writerFinalizer(writer *io.PipeWriter) {
+	writer.Close()
+}
diff --git a/vendor/go.opentelemetry.io/collector/pdata/pcommon/value.go b/vendor/go.opentelemetry.io/collector/pdata/pcommon/value.go
index 2e0443dd3b2..77a84e51758 100644
--- a/vendor/go.opentelemetry.io/collector/pdata/pcommon/value.go
+++ b/vendor/go.opentelemetry.io/collector/pdata/pcommon/value.go
@@ -129,6 +129,8 @@ func (v Value) getState() *internal.State {
 	return internal.GetValueState(internal.Value(v))
 }
 
+// FromRaw sets the value from the given raw value.
+// Calling this function on zero-initialized Value will cause a panic.
 func (v Value) FromRaw(iv any) error {
 	switch tv := iv.(type) {
 	case nil:
@@ -198,37 +200,31 @@ func (v Value) Type() ValueType {
 // Str returns the string value associated with this Value.
 // The shorter name is used instead of String to avoid implementing fmt.Stringer interface.
 // If the Type() is not ValueTypeStr then returns empty string.
-// Calling this function on zero-initialized Value will cause a panic.
 func (v Value) Str() string {
 	return v.getOrig().GetStringValue()
 }
 
 // Int returns the int64 value associated with this Value.
 // If the Type() is not ValueTypeInt then returns int64(0).
-// Calling this function on zero-initialized Value will cause a panic.
 func (v Value) Int() int64 {
 	return v.getOrig().GetIntValue()
 }
 
 // Double returns the float64 value associated with this Value.
 // If the Type() is not ValueTypeDouble then returns float64(0).
-// Calling this function on zero-initialized Value will cause a panic.
 func (v Value) Double() float64 {
 	return v.getOrig().GetDoubleValue()
 }
 
 // Bool returns the bool value associated with this Value.
 // If the Type() is not ValueTypeBool then returns false.
-// Calling this function on zero-initialized Value will cause a panic.
 func (v Value) Bool() bool {
 	return v.getOrig().GetBoolValue()
 }
 
 // Map returns the map value associated with this Value.
-// If the Type() is not ValueTypeMap then returns an invalid map. Note that using
-// such map can cause panic.
-//
-// Calling this function on zero-initialized Value will cause a panic.
+// If the function is called on zero-initialized Value or if the Type() is not ValueTypeMap
+// then it returns an invalid map. Note that using such map can cause panic.
 func (v Value) Map() Map {
 	kvlist := v.getOrig().GetKvlistValue()
 	if kvlist == nil {
@@ -238,10 +234,8 @@ func (v Value) Map() Map {
 }
 
 // Slice returns the slice value associated with this Value.
-// If the Type() is not ValueTypeSlice then returns an invalid slice. Note that using
-// such slice can cause panic.
-//
-// Calling this function on zero-initialized Value will cause a panic.
+// If the function is called on zero-initialized Value or if the Type() is not ValueTypeSlice
+// then returns an invalid slice. Note that using such slice can cause panic.
 func (v Value) Slice() Slice {
 	arr := v.getOrig().GetArrayValue()
 	if arr == nil {
@@ -251,10 +245,8 @@ func (v Value) Slice() Slice {
 }
 
 // Bytes returns the ByteSlice value associated with this Value.
-// If the Type() is not ValueTypeBytes then returns an invalid ByteSlice object. Note that using
-// such slice can cause panic.
-//
-// Calling this function on zero-initialized Value will cause a panic.
+// If the function is called on zero-initialized Value or if the Type() is not ValueTypeBytes
+// then returns an invalid ByteSlice object. Note that using such slice can cause panic.
 func (v Value) Bytes() ByteSlice {
 	bv, ok := v.getOrig().GetValue().(*otlpcommon.AnyValue_BytesValue)
 	if !ok {
@@ -325,6 +317,7 @@ func (v Value) SetEmptySlice() Slice {
 }
 
 // CopyTo copies the Value instance overriding the destination.
+// Calling this function on zero-initialized Value will cause a panic.
 func (v Value) CopyTo(dest Value) {
 	dest.getState().AssertMutable()
 	destOrig := dest.getOrig()
@@ -370,6 +363,7 @@ func (v Value) CopyTo(dest Value) {
 // AsString converts an OTLP Value object of any type to its equivalent string
 // representation. This differs from Str which only returns a non-empty value
 // if the ValueType is ValueTypeStr.
+// Calling this function on zero-initialized Value will cause a panic.
 func (v Value) AsString() string {
 	switch v.Type() {
 	case ValueTypeEmpty:
diff --git a/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/handler.go b/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/handler.go
index 9a8260059d9..af84f0e4bb5 100644
--- a/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/handler.go
+++ b/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/handler.go
@@ -26,7 +26,7 @@ import (
 	"go.opentelemetry.io/otel/attribute"
 	"go.opentelemetry.io/otel/metric"
 	"go.opentelemetry.io/otel/propagation"
-	semconv "go.opentelemetry.io/otel/semconv/v1.17.0"
+	semconv "go.opentelemetry.io/otel/semconv/v1.20.0"
 	"go.opentelemetry.io/otel/trace"
 )
 
@@ -43,10 +43,12 @@ type middleware struct {
 	writeEvent        bool
 	filters           []Filter
 	spanNameFormatter func(string, *http.Request) string
-	counters          map[string]metric.Int64Counter
-	valueRecorders    map[string]metric.Float64Histogram
 	publicEndpoint    bool
 	publicEndpointFn  func(*http.Request) bool
+
+	requestBytesCounter  metric.Int64Counter
+	responseBytesCounter metric.Int64Counter
+	serverLatencyMeasure metric.Float64Histogram
 }
 
 func defaultHandlerFormatter(operation string, _ *http.Request) string {
@@ -104,33 +106,27 @@ func handleErr(err error) {
 }
 
 func (h *middleware) createMeasures() {
-	h.counters = make(map[string]metric.Int64Counter)
-	h.valueRecorders = make(map[string]metric.Float64Histogram)
-
-	requestBytesCounter, err := h.meter.Int64Counter(
+	var err error
+	h.requestBytesCounter, err = h.meter.Int64Counter(
 		RequestContentLength,
 		metric.WithUnit("By"),
 		metric.WithDescription("Measures the size of HTTP request content length (uncompressed)"),
 	)
 	handleErr(err)
 
-	responseBytesCounter, err := h.meter.Int64Counter(
+	h.responseBytesCounter, err = h.meter.Int64Counter(
 		ResponseContentLength,
 		metric.WithUnit("By"),
 		metric.WithDescription("Measures the size of HTTP response content length (uncompressed)"),
 	)
 	handleErr(err)
 
-	serverLatencyMeasure, err := h.meter.Float64Histogram(
+	h.serverLatencyMeasure, err = h.meter.Float64Histogram(
 		ServerLatency,
 		metric.WithUnit("ms"),
 		metric.WithDescription("Measures the duration of HTTP request handling"),
 	)
 	handleErr(err)
-
-	h.counters[RequestContentLength] = requestBytesCounter
-	h.counters[ResponseContentLength] = responseBytesCounter
-	h.valueRecorders[ServerLatency] = serverLatencyMeasure
 }
 
 // serveHTTP sets up tracing and calls the given next http.Handler with the span
@@ -236,13 +232,13 @@ func (h *middleware) serveHTTP(w http.ResponseWriter, r *http.Request, next http
 		attributes = append(attributes, semconv.HTTPStatusCode(rww.statusCode))
 	}
 	o := metric.WithAttributes(attributes...)
-	h.counters[RequestContentLength].Add(ctx, bw.read, o)
-	h.counters[ResponseContentLength].Add(ctx, rww.written, o)
+	h.requestBytesCounter.Add(ctx, bw.read, o)
+	h.responseBytesCounter.Add(ctx, rww.written, o)
 
 	// Use floating point division here for higher precision (instead of Millisecond method).
 	elapsedTime := float64(time.Since(requestStartTime)) / float64(time.Millisecond)
 
-	h.valueRecorders[ServerLatency].Record(ctx, elapsedTime, o)
+	h.serverLatencyMeasure.Record(ctx, elapsedTime, o)
 }
 
 func setAfterServeAttributes(span trace.Span, read, wrote int64, statusCode int, rerr, werr error) {
diff --git a/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/semconvutil/httpconv.go b/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/semconvutil/httpconv.go
index d3dede9ebbd..794d4c26a45 100644
--- a/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/semconvutil/httpconv.go
+++ b/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/semconvutil/httpconv.go
@@ -24,7 +24,7 @@ import (
 
 	"go.opentelemetry.io/otel/attribute"
 	"go.opentelemetry.io/otel/codes"
-	semconv "go.opentelemetry.io/otel/semconv/v1.17.0"
+	semconv "go.opentelemetry.io/otel/semconv/v1.20.0"
 )
 
 // HTTPClientResponse returns trace attributes for an HTTP response received by a
@@ -149,9 +149,7 @@ func HTTPResponseHeader(h http.Header) []attribute.KeyValue {
 type httpConv struct {
 	NetConv *netConv
 
-	EnduserIDKey                 attribute.Key
 	HTTPClientIPKey              attribute.Key
-	HTTPFlavorKey                attribute.Key
 	HTTPMethodKey                attribute.Key
 	HTTPRequestContentLengthKey  attribute.Key
 	HTTPResponseContentLengthKey attribute.Key
@@ -161,15 +159,13 @@ type httpConv struct {
 	HTTPStatusCodeKey            attribute.Key
 	HTTPTargetKey                attribute.Key
 	HTTPURLKey                   attribute.Key
-	HTTPUserAgentKey             attribute.Key
+	UserAgentOriginalKey         attribute.Key
 }
 
 var hc = &httpConv{
 	NetConv: nc,
 
-	EnduserIDKey:                 semconv.EnduserIDKey,
 	HTTPClientIPKey:              semconv.HTTPClientIPKey,
-	HTTPFlavorKey:                semconv.HTTPFlavorKey,
 	HTTPMethodKey:                semconv.HTTPMethodKey,
 	HTTPRequestContentLengthKey:  semconv.HTTPRequestContentLengthKey,
 	HTTPResponseContentLengthKey: semconv.HTTPResponseContentLengthKey,
@@ -179,7 +175,7 @@ var hc = &httpConv{
 	HTTPStatusCodeKey:            semconv.HTTPStatusCodeKey,
 	HTTPTargetKey:                semconv.HTTPTargetKey,
 	HTTPURLKey:                   semconv.HTTPURLKey,
-	HTTPUserAgentKey:             semconv.HTTPUserAgentKey,
+	UserAgentOriginalKey:         semconv.UserAgentOriginalKey,
 }
 
 // ClientResponse returns attributes for an HTTP response received by a client
@@ -193,6 +189,10 @@ var hc = &httpConv{
 //
 //	append(ClientResponse(resp), ClientRequest(resp.Request)...)
 func (c *httpConv) ClientResponse(resp *http.Response) []attribute.KeyValue {
+	/* The following semantic conventions are returned if present:
+	http.status_code                int
+	http.response_content_length    int
+	*/
 	var n int
 	if resp.StatusCode > 0 {
 		n++
@@ -212,11 +212,31 @@ func (c *httpConv) ClientResponse(resp *http.Response) []attribute.KeyValue {
 }
 
 // ClientRequest returns attributes for an HTTP request made by a client. The
-// following attributes are always returned: "http.url", "http.flavor",
-// "http.method", "net.peer.name". The following attributes are returned if the
-// related values are defined in req: "net.peer.port", "http.user_agent",
-// "http.request_content_length", "enduser.id".
+// following attributes are always returned: "http.url", "http.method",
+// "net.peer.name". The following attributes are returned if the related values
+// are defined in req: "net.peer.port", "http.user_agent",
+// "http.request_content_length", "user_agent.original".
 func (c *httpConv) ClientRequest(req *http.Request) []attribute.KeyValue {
+	/* The following semantic conventions are returned if present:
+	http.method                     string
+	user_agent.original             string
+	http.url                        string
+	net.peer.name                   string
+	net.peer.port                   int
+	http.request_content_length     int
+	*/
+
+	/* The following semantic conventions are not returned:
+	http.status_code                This requires the response. See ClientResponse.
+	http.response_content_length    This requires the response. See ClientResponse.
+	net.sock.family                 This requires the socket used.
+	net.sock.peer.addr              This requires the socket used.
+	net.sock.peer.name              This requires the socket used.
+	net.sock.peer.port              This requires the socket used.
+	http.resend_count               This is something outside of a single request.
+	net.protocol.name               The value is the Request is ignored, and the go client will always use "http".
+	net.protocol.version            The value in the Request is ignored, and the go client will always use 1.1 or 2.0.
+	*/
 	n := 3 // URL, peer name, proto, and method.
 	var h string
 	if req.URL != nil {
@@ -234,14 +254,10 @@ func (c *httpConv) ClientRequest(req *http.Request) []attribute.KeyValue {
 	if req.ContentLength > 0 {
 		n++
 	}
-	userID, _, hasUserID := req.BasicAuth()
-	if hasUserID {
-		n++
-	}
+
 	attrs := make([]attribute.KeyValue, 0, n)
 
 	attrs = append(attrs, c.method(req.Method))
-	attrs = append(attrs, c.flavor(req.Proto))
 
 	var u string
 	if req.URL != nil {
@@ -260,17 +276,13 @@ func (c *httpConv) ClientRequest(req *http.Request) []attribute.KeyValue {
 	}
 
 	if useragent != "" {
-		attrs = append(attrs, c.HTTPUserAgentKey.String(useragent))
+		attrs = append(attrs, c.UserAgentOriginalKey.String(useragent))
 	}
 
 	if l := req.ContentLength; l > 0 {
 		attrs = append(attrs, c.HTTPRequestContentLengthKey.Int64(l))
 	}
 
-	if hasUserID {
-		attrs = append(attrs, c.EnduserIDKey.String(userID))
-	}
-
 	return attrs
 }
 
@@ -291,18 +303,35 @@ func (c *httpConv) ClientRequest(req *http.Request) []attribute.KeyValue {
 // The req Host will be used to determine the server instead.
 //
 // The following attributes are always returned: "http.method", "http.scheme",
-// "http.flavor", "http.target", "net.host.name". The following attributes are
-// returned if they related values are defined in req: "net.host.port",
-// "net.sock.peer.addr", "net.sock.peer.port", "http.user_agent", "enduser.id",
-// "http.client_ip".
+// "http.target", "net.host.name". The following attributes are returned if they
+// related values are defined in req: "net.host.port", "net.sock.peer.addr",
+// "net.sock.peer.port", "user_agent.original", "http.client_ip",
+// "net.protocol.name", "net.protocol.version".
 func (c *httpConv) ServerRequest(server string, req *http.Request) []attribute.KeyValue {
-	// TODO: This currently does not add the specification required
-	// `http.target` attribute. It has too high of a cardinality to safely be
-	// added. An alternate should be added, or this comment removed, when it is
-	// addressed by the specification. If it is ultimately decided to continue
-	// not including the attribute, the HTTPTargetKey field of the httpConv
-	// should be removed as well.
-
+	/* The following semantic conventions are returned if present:
+	http.method             string
+	http.scheme             string
+	net.host.name           string
+	net.host.port           int
+	net.sock.peer.addr      string
+	net.sock.peer.port      int
+	user_agent.original     string
+	http.client_ip          string
+	net.protocol.name       string Note: not set if the value is "http".
+	net.protocol.version    string
+	http.target             string Note: doesn't include the query parameter.
+	*/
+
+	/* The following semantic conventions are not returned:
+	http.status_code                This requires the response.
+	http.request_content_length     This requires the len() of body, which can mutate it.
+	http.response_content_length    This requires the response.
+	http.route                      This is not available.
+	net.sock.peer.name              This would require a DNS lookup.
+	net.sock.host.addr              The request doesn't have access to the underlying socket.
+	net.sock.host.port              The request doesn't have access to the underlying socket.
+
+	*/
 	n := 4 // Method, scheme, proto, and host name.
 	var host string
 	var p int
@@ -330,19 +359,31 @@ func (c *httpConv) ServerRequest(server string, req *http.Request) []attribute.K
 	if useragent != "" {
 		n++
 	}
-	userID, _, hasUserID := req.BasicAuth()
-	if hasUserID {
-		n++
-	}
+
 	clientIP := serverClientIP(req.Header.Get("X-Forwarded-For"))
 	if clientIP != "" {
 		n++
 	}
+
+	var target string
+	if req.URL != nil {
+		target = req.URL.Path
+		if target != "" {
+			n++
+		}
+	}
+	protoName, protoVersion := netProtocol(req.Proto)
+	if protoName != "" && protoName != "http" {
+		n++
+	}
+	if protoVersion != "" {
+		n++
+	}
+
 	attrs := make([]attribute.KeyValue, 0, n)
 
 	attrs = append(attrs, c.method(req.Method))
 	attrs = append(attrs, c.scheme(req.TLS != nil))
-	attrs = append(attrs, c.flavor(req.Proto))
 	attrs = append(attrs, c.NetConv.HostName(host))
 
 	if hostPort > 0 {
@@ -359,17 +400,24 @@ func (c *httpConv) ServerRequest(server string, req *http.Request) []attribute.K
 	}
 
 	if useragent != "" {
-		attrs = append(attrs, c.HTTPUserAgentKey.String(useragent))
-	}
-
-	if hasUserID {
-		attrs = append(attrs, c.EnduserIDKey.String(userID))
+		attrs = append(attrs, c.UserAgentOriginalKey.String(useragent))
 	}
 
 	if clientIP != "" {
 		attrs = append(attrs, c.HTTPClientIPKey.String(clientIP))
 	}
 
+	if target != "" {
+		attrs = append(attrs, c.HTTPTargetKey.String(target))
+	}
+
+	if protoName != "" && protoName != "http" {
+		attrs = append(attrs, c.NetConv.NetProtocolName.String(protoName))
+	}
+	if protoVersion != "" {
+		attrs = append(attrs, c.NetConv.NetProtocolVersion.String(protoVersion))
+	}
+
 	return attrs
 }
 
@@ -394,14 +442,18 @@ func (c *httpConv) ServerRequest(server string, req *http.Request) []attribute.K
 // "http.flavor", "net.host.name". The following attributes are
 // returned if they related values are defined in req: "net.host.port".
 func (c *httpConv) ServerRequestMetrics(server string, req *http.Request) []attribute.KeyValue {
-	// TODO: This currently does not add the specification required
-	// `http.target` attribute. It has too high of a cardinality to safely be
-	// added. An alternate should be added, or this comment removed, when it is
-	// addressed by the specification. If it is ultimately decided to continue
-	// not including the attribute, the HTTPTargetKey field of the httpConv
-	// should be removed as well.
-
-	n := 4 // Method, scheme, proto, and host name.
+	/* The following semantic conventions are returned if present:
+	http.scheme             string
+	http.route              string
+	http.method             string
+	http.status_code        int
+	net.host.name           string
+	net.host.port           int
+	net.protocol.name       string Note: not set if the value is "http".
+	net.protocol.version    string
+	*/
+
+	n := 3 // Method, scheme, and host name.
 	var host string
 	var p int
 	if server == "" {
@@ -417,16 +469,29 @@ func (c *httpConv) ServerRequestMetrics(server string, req *http.Request) []attr
 	if hostPort > 0 {
 		n++
 	}
+	protoName, protoVersion := netProtocol(req.Proto)
+	if protoName != "" {
+		n++
+	}
+	if protoVersion != "" {
+		n++
+	}
+
 	attrs := make([]attribute.KeyValue, 0, n)
 
 	attrs = append(attrs, c.methodMetric(req.Method))
 	attrs = append(attrs, c.scheme(req.TLS != nil))
-	attrs = append(attrs, c.flavor(req.Proto))
 	attrs = append(attrs, c.NetConv.HostName(host))
 
 	if hostPort > 0 {
 		attrs = append(attrs, c.NetConv.HostPort(hostPort))
 	}
+	if protoName != "" {
+		attrs = append(attrs, c.NetConv.NetProtocolName.String(protoName))
+	}
+	if protoVersion != "" {
+		attrs = append(attrs, c.NetConv.NetProtocolVersion.String(protoVersion))
+	}
 
 	return attrs
 }
@@ -455,21 +520,6 @@ func (c *httpConv) scheme(https bool) attribute.KeyValue { // nolint:revive
 	return c.HTTPSchemeHTTP
 }
 
-func (c *httpConv) flavor(proto string) attribute.KeyValue {
-	switch proto {
-	case "HTTP/1.0":
-		return c.HTTPFlavorKey.String("1.0")
-	case "HTTP/1.1":
-		return c.HTTPFlavorKey.String("1.1")
-	case "HTTP/2":
-		return c.HTTPFlavorKey.String("2.0")
-	case "HTTP/3":
-		return c.HTTPFlavorKey.String("3.0")
-	default:
-		return c.HTTPFlavorKey.String(proto)
-	}
-}
-
 func serverClientIP(xForwardedFor string) string {
 	if idx := strings.Index(xForwardedFor, ","); idx >= 0 {
 		xForwardedFor = xForwardedFor[:idx]
diff --git a/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/semconvutil/netconv.go b/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/semconvutil/netconv.go
index bde8893437d..cb4cb9355dd 100644
--- a/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/semconvutil/netconv.go
+++ b/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/semconvutil/netconv.go
@@ -22,7 +22,7 @@ import (
 	"strings"
 
 	"go.opentelemetry.io/otel/attribute"
-	semconv "go.opentelemetry.io/otel/semconv/v1.17.0"
+	semconv "go.opentelemetry.io/otel/semconv/v1.20.0"
 )
 
 // NetTransport returns a trace attribute describing the transport protocol of the
@@ -57,6 +57,8 @@ type netConv struct {
 	NetHostPortKey     attribute.Key
 	NetPeerNameKey     attribute.Key
 	NetPeerPortKey     attribute.Key
+	NetProtocolName    attribute.Key
+	NetProtocolVersion attribute.Key
 	NetSockFamilyKey   attribute.Key
 	NetSockPeerAddrKey attribute.Key
 	NetSockPeerPortKey attribute.Key
@@ -73,6 +75,8 @@ var nc = &netConv{
 	NetHostPortKey:     semconv.NetHostPortKey,
 	NetPeerNameKey:     semconv.NetPeerNameKey,
 	NetPeerPortKey:     semconv.NetPeerPortKey,
+	NetProtocolName:    semconv.NetProtocolNameKey,
+	NetProtocolVersion: semconv.NetProtocolVersionKey,
 	NetSockFamilyKey:   semconv.NetSockFamilyKey,
 	NetSockPeerAddrKey: semconv.NetSockPeerAddrKey,
 	NetSockPeerPortKey: semconv.NetSockPeerPortKey,
@@ -366,3 +370,9 @@ func splitHostPort(hostport string) (host string, port int) {
 	}
 	return host, int(p)
 }
+
+func netProtocol(proto string) (name string, version string) {
+	name, version, _ = strings.Cut(proto, "/")
+	name = strings.ToLower(name)
+	return name, version
+}
diff --git a/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/version.go b/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/version.go
index bd41c180421..9a4a02143d5 100644
--- a/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/version.go
+++ b/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/version.go
@@ -16,7 +16,7 @@ package otelhttp // import "go.opentelemetry.io/contrib/instrumentation/net/http
 
 // Version is the current release version of the otelhttp instrumentation.
 func Version() string {
-	return "0.46.1"
+	return "0.47.0"
 	// This string is updated by the pre_release.sh script during release
 }
 
diff --git a/vendor/go.opentelemetry.io/otel/CHANGELOG.md b/vendor/go.opentelemetry.io/otel/CHANGELOG.md
index 24874f856e3..fe670d79cc2 100644
--- a/vendor/go.opentelemetry.io/otel/CHANGELOG.md
+++ b/vendor/go.opentelemetry.io/otel/CHANGELOG.md
@@ -8,6 +8,46 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 
 ## [Unreleased]
 
+## [1.22.0/0.45.0] 2024-01-17
+
+### Added
+
+- The `go.opentelemetry.io/otel/semconv/v1.22.0` package.
+  The package contains semantic conventions from the `v1.22.0` version of the OpenTelemetry Semantic Conventions. (#4735)
+- The `go.opentelemetry.io/otel/semconv/v1.23.0` package.
+  The package contains semantic conventions from the `v1.23.0` version of the OpenTelemetry Semantic Conventions. (#4746)
+- The `go.opentelemetry.io/otel/semconv/v1.23.1` package.
+  The package contains semantic conventions from the `v1.23.1` version of the OpenTelemetry Semantic Conventions. (#4749)
+- The `go.opentelemetry.io/otel/semconv/v1.24.0` package.
+  The package contains semantic conventions from the `v1.24.0` version of the OpenTelemetry Semantic Conventions. (#4770)
+- Add `WithResourceAsConstantLabels` option to apply resource attributes for every metric emitted by the Prometheus exporter. (#4733)
+- Experimental cardinality limiting is added to the metric SDK.
+  See [metric documentation](./sdk/metric/EXPERIMENTAL.md#cardinality-limit) for more information about this feature and how to enable it. (#4457)
+- Add `NewMemberRaw` and `NewKeyValuePropertyRaw` in `go.opentelemetry.io/otel/baggage`. (#4804)
+
+### Changed
+
+- Upgrade all use of `go.opentelemetry.io/otel/semconv` to use `v1.24.0`. (#4754)
+- Update transformations in `go.opentelemetry.io/otel/exporters/zipkin` to follow `v1.19.0` version of the OpenTelemetry specification. (#4754)
+- Record synchronous measurements when the passed context is canceled instead of dropping in `go.opentelemetry.io/otel/sdk/metric`.
+  If you do not want to make a measurement when the context is cancelled, you need to handle it yourself (e.g  `if ctx.Err() != nil`). (#4671)
+- Improve `go.opentelemetry.io/otel/trace.TraceState`'s performance. (#4722)
+- Improve `go.opentelemetry.io/otel/propagation.TraceContext`'s performance. (#4721)
+- Improve `go.opentelemetry.io/otel/baggage` performance. (#4743)
+- Improve performance of the `(*Set).Filter` method in `go.opentelemetry.io/otel/attribute` when the passed filter does not filter out any attributes from the set. (#4774)
+- `Member.String` in `go.opentelemetry.io/otel/baggage` percent-encodes only when necessary. (#4775)
+- Improve `go.opentelemetry.io/otel/trace.Span`'s performance when adding multiple attributes. (#4818)
+- `Property.Value` in `go.opentelemetry.io/otel/baggage` now returns a raw string instead of a percent-encoded value. (#4804)
+
+### Fixed
+
+- Fix `Parse` in `go.opentelemetry.io/otel/baggage` to validate member value before percent-decoding. (#4755)
+- Fix whitespace encoding of `Member.String` in `go.opentelemetry.io/otel/baggage`. (#4756)
+- Fix observable not registered error when the asynchronous instrument has a drop aggregation in `go.opentelemetry.io/otel/sdk/metric`. (#4772)
+- Fix baggage item key so that it is not canonicalized in `go.opentelemetry.io/otel/bridge/opentracing`. (#4776)
+- Fix `go.opentelemetry.io/otel/bridge/opentracing` to properly handle baggage values that requires escaping during propagation. (#4804)
+- Fix a bug where using multiple readers resulted in incorrect asynchronous counter values in `go.opentelemetry.io/otel/sdk/metric`. (#4742)
+
 ## [1.21.0/0.44.0] 2023-11-16
 
 ### Removed
@@ -2735,7 +2775,8 @@ It contains api and sdk for trace and meter.
 - CircleCI build CI manifest files.
 - CODEOWNERS file to track owners of this project.
 
-[Unreleased]: https://github.com/open-telemetry/opentelemetry-go/compare/v1.21.0...HEAD
+[Unreleased]: https://github.com/open-telemetry/opentelemetry-go/compare/v1.22.0...HEAD
+[1.22.0/0.45.0]: https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.22.0
 [1.21.0/0.44.0]: https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.21.0
 [1.20.0/0.43.0]: https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.20.0
 [1.19.0/0.42.0/0.0.7]: https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.19.0
diff --git a/vendor/go.opentelemetry.io/otel/CONTRIBUTING.md b/vendor/go.opentelemetry.io/otel/CONTRIBUTING.md
index 850606ae692..31857a61738 100644
--- a/vendor/go.opentelemetry.io/otel/CONTRIBUTING.md
+++ b/vendor/go.opentelemetry.io/otel/CONTRIBUTING.md
@@ -591,6 +591,26 @@ this.
 
 [^3]: https://github.com/open-telemetry/opentelemetry-go/issues/3548
 
+### Ignoring context cancellation
+
+OpenTelemetry API implementations need to ignore the cancellation of the context that are
+passed when recording a value (e.g. starting a span, recording a measurement, emitting a log).
+Recording methods should not return an error describing the cancellation state of the context
+when they complete, nor should they abort any work.
+
+This rule may not apply if the OpenTelemetry specification defines a timeout mechanism for
+the method. In that case the context cancellation can be used for the timeout with the
+restriction that this behavior is documented for the method. Otherwise, timeouts
+are expected to be handled by the user calling the API, not the implementation.
+
+Stoppage of the telemetry pipeline is handled by calling the appropriate `Shutdown` method
+of a provider. It is assumed the context passed from a user is not used for this purpose.
+
+Outside of the direct recording of telemetry from the API (e.g. exporting telemetry,
+force flushing telemetry, shutting down a signal provider) the context cancellation
+should be honored. This means all work done on behalf of the user provided context
+should be canceled.
+
 ## Approvers and Maintainers
 
 ### Approvers
@@ -610,6 +630,7 @@ this.
 
 ### Emeritus
 
+- [Liz Fong-Jones](https://github.com/lizthegrey), Honeycomb
 - [Gustavo Silva Paiva](https://github.com/paivagustavo), LightStep
 - [Josh MacDonald](https://github.com/jmacd), LightStep
 
diff --git a/vendor/go.opentelemetry.io/otel/README.md b/vendor/go.opentelemetry.io/otel/README.md
index 2c5b0cc28ab..44e1bfc9b5e 100644
--- a/vendor/go.opentelemetry.io/otel/README.md
+++ b/vendor/go.opentelemetry.io/otel/README.md
@@ -66,7 +66,7 @@ are made for those systems currently.
 
 ## Getting Started
 
-You can find a getting started guide on [opentelemetry.io](https://opentelemetry.io/docs/go/getting-started/).
+You can find a getting started guide on [opentelemetry.io](https://opentelemetry.io/docs/languages/go/getting-started/).
 
 OpenTelemetry's goal is to provide a single set of APIs to capture distributed
 traces and metrics from your application and send them to an observability
diff --git a/vendor/go.opentelemetry.io/otel/RELEASING.md b/vendor/go.opentelemetry.io/otel/RELEASING.md
index 82ce3ee46a1..d2691d0bd8b 100644
--- a/vendor/go.opentelemetry.io/otel/RELEASING.md
+++ b/vendor/go.opentelemetry.io/otel/RELEASING.md
@@ -123,12 +123,12 @@ Once verified be sure to [make a release for the `contrib` repository](https://g
 
 ### Website Documentation
 
-Update the [Go instrumentation documentation] in the OpenTelemetry website under [content/en/docs/instrumentation/go].
+Update the [Go instrumentation documentation] in the OpenTelemetry website under [content/en/docs/languages/go].
 Importantly, bump any package versions referenced to be the latest one you just released and ensure all code examples still compile and are accurate.
 
 [OpenTelemetry Semantic Conventions]: https://github.com/open-telemetry/semantic-conventions
-[Go instrumentation documentation]: https://opentelemetry.io/docs/instrumentation/go/
-[content/en/docs/instrumentation/go]: https://github.com/open-telemetry/opentelemetry.io/tree/main/content/en/docs/instrumentation/go
+[Go instrumentation documentation]: https://opentelemetry.io/docs/languages/go/
+[content/en/docs/languages/go]: https://github.com/open-telemetry/opentelemetry.io/tree/main/content/en/docs/languages/go
 
 ### Demo Repository
 
diff --git a/vendor/go.opentelemetry.io/otel/attribute/set.go b/vendor/go.opentelemetry.io/otel/attribute/set.go
index 9f9303d4f15..7e6765b06b7 100644
--- a/vendor/go.opentelemetry.io/otel/attribute/set.go
+++ b/vendor/go.opentelemetry.io/otel/attribute/set.go
@@ -279,52 +279,75 @@ func NewSetWithSortableFiltered(kvs []KeyValue, tmp *Sortable, filter Filter) (S
 		position--
 		kvs[offset], kvs[position] = kvs[position], kvs[offset]
 	}
+	kvs = kvs[position:]
+
 	if filter != nil {
-		return filterSet(kvs[position:], filter)
+		if div := filteredToFront(kvs, filter); div != 0 {
+			return Set{equivalent: computeDistinct(kvs[div:])}, kvs[:div]
+		}
 	}
-	return Set{
-		equivalent: computeDistinct(kvs[position:]),
-	}, nil
+	return Set{equivalent: computeDistinct(kvs)}, nil
 }
 
-// filterSet reorders kvs so that included keys are contiguous at the end of
-// the slice, while excluded keys precede the included keys.
-func filterSet(kvs []KeyValue, filter Filter) (Set, []KeyValue) {
-	var excluded []KeyValue
-
-	// Move attributes that do not match the filter so they're adjacent before
-	// calling computeDistinct().
-	distinctPosition := len(kvs)
-
-	// Swap indistinct keys forward and distinct keys toward the
-	// end of the slice.
-	offset := len(kvs) - 1
-	for ; offset >= 0; offset-- {
-		if filter(kvs[offset]) {
-			distinctPosition--
-			kvs[offset], kvs[distinctPosition] = kvs[distinctPosition], kvs[offset]
-			continue
+// filteredToFront filters slice in-place using keep function. All KeyValues that need to
+// be removed are moved to the front. All KeyValues that need to be kept are
+// moved (in-order) to the back. The index for the first KeyValue to be kept is
+// returned.
+func filteredToFront(slice []KeyValue, keep Filter) int {
+	n := len(slice)
+	j := n
+	for i := n - 1; i >= 0; i-- {
+		if keep(slice[i]) {
+			j--
+			slice[i], slice[j] = slice[j], slice[i]
 		}
 	}
-	excluded = kvs[:distinctPosition]
-
-	return Set{
-		equivalent: computeDistinct(kvs[distinctPosition:]),
-	}, excluded
+	return j
 }
 
 // Filter returns a filtered copy of this Set. See the documentation for
 // NewSetWithSortableFiltered for more details.
 func (l *Set) Filter(re Filter) (Set, []KeyValue) {
 	if re == nil {
-		return Set{
-			equivalent: l.equivalent,
-		}, nil
+		return *l, nil
 	}
 
-	// Note: This could be refactored to avoid the temporary slice
-	// allocation, if it proves to be expensive.
-	return filterSet(l.ToSlice(), re)
+	// Iterate in reverse to the first attribute that will be filtered out.
+	n := l.Len()
+	first := n - 1
+	for ; first >= 0; first-- {
+		kv, _ := l.Get(first)
+		if !re(kv) {
+			break
+		}
+	}
+
+	// No attributes will be dropped, return the immutable Set l and nil.
+	if first < 0 {
+		return *l, nil
+	}
+
+	// Copy now that we know we need to return a modified set.
+	//
+	// Do not do this in-place on the underlying storage of *Set l. Sets are
+	// immutable and filtering should not change this.
+	slice := l.ToSlice()
+
+	// Don't re-iterate the slice if only slice[0] is filtered.
+	if first == 0 {
+		// It is safe to assume len(slice) >= 1 given we found at least one
+		// attribute above that needs to be filtered out.
+		return Set{equivalent: computeDistinct(slice[1:])}, slice[:1]
+	}
+
+	// Move the filtered slice[first] to the front (preserving order).
+	kv := slice[first]
+	copy(slice[1:first+1], slice[:first])
+	slice[0] = kv
+
+	// Do not re-evaluate re(slice[first+1:]).
+	div := filteredToFront(slice[1:first+1], re) + 1
+	return Set{equivalent: computeDistinct(slice[div:])}, slice[:div]
 }
 
 // computeDistinct returns a Distinct using either the fixed- or
diff --git a/vendor/go.opentelemetry.io/otel/baggage/baggage.go b/vendor/go.opentelemetry.io/otel/baggage/baggage.go
index 84532cb1da3..7d27cf77d5c 100644
--- a/vendor/go.opentelemetry.io/otel/baggage/baggage.go
+++ b/vendor/go.opentelemetry.io/otel/baggage/baggage.go
@@ -18,7 +18,6 @@ import (
 	"errors"
 	"fmt"
 	"net/url"
-	"regexp"
 	"strings"
 
 	"go.opentelemetry.io/otel/internal/baggage"
@@ -32,16 +31,6 @@ const (
 	listDelimiter     = ","
 	keyValueDelimiter = "="
 	propertyDelimiter = ";"
-
-	keyDef      = `([\x21\x23-\x27\x2A\x2B\x2D\x2E\x30-\x39\x41-\x5a\x5e-\x7a\x7c\x7e]+)`
-	valueDef    = `([\x21\x23-\x2b\x2d-\x3a\x3c-\x5B\x5D-\x7e]*)`
-	keyValueDef = `\s*` + keyDef + `\s*` + keyValueDelimiter + `\s*` + valueDef + `\s*`
-)
-
-var (
-	keyRe      = regexp.MustCompile(`^` + keyDef + `$`)
-	valueRe    = regexp.MustCompile(`^` + valueDef + `$`)
-	propertyRe = regexp.MustCompile(`^(?:\s*` + keyDef + `\s*|` + keyValueDef + `)$`)
 )
 
 var (
@@ -67,7 +56,7 @@ type Property struct {
 //
 // If key is invalid, an error will be returned.
 func NewKeyProperty(key string) (Property, error) {
-	if !keyRe.MatchString(key) {
+	if !validateKey(key) {
 		return newInvalidProperty(), fmt.Errorf("%w: %q", errInvalidKey, key)
 	}
 
@@ -77,14 +66,29 @@ func NewKeyProperty(key string) (Property, error) {
 
 // NewKeyValueProperty returns a new Property for key with value.
 //
-// If key or value are invalid, an error will be returned.
+// The passed key must be compliant with W3C Baggage specification.
+// The passed value must be precent-encoded as defined in W3C Baggage specification.
+//
+// Notice: Consider using [NewKeyValuePropertyRaw] instead
+// that does not require precent-encoding of the value.
 func NewKeyValueProperty(key, value string) (Property, error) {
-	if !keyRe.MatchString(key) {
-		return newInvalidProperty(), fmt.Errorf("%w: %q", errInvalidKey, key)
+	if !validateValue(value) {
+		return newInvalidProperty(), fmt.Errorf("%w: %q", errInvalidValue, value)
 	}
-	if !valueRe.MatchString(value) {
+	decodedValue, err := url.PathUnescape(value)
+	if err != nil {
 		return newInvalidProperty(), fmt.Errorf("%w: %q", errInvalidValue, value)
 	}
+	return NewKeyValuePropertyRaw(key, decodedValue)
+}
+
+// NewKeyValuePropertyRaw returns a new Property for key with value.
+//
+// The passed key must be compliant with W3C Baggage specification.
+func NewKeyValuePropertyRaw(key, value string) (Property, error) {
+	if !validateKey(key) {
+		return newInvalidProperty(), fmt.Errorf("%w: %q", errInvalidKey, key)
+	}
 
 	p := Property{
 		key:      key,
@@ -106,20 +110,11 @@ func parseProperty(property string) (Property, error) {
 		return newInvalidProperty(), nil
 	}
 
-	match := propertyRe.FindStringSubmatch(property)
-	if len(match) != 4 {
+	p, ok := parsePropertyInternal(property)
+	if !ok {
 		return newInvalidProperty(), fmt.Errorf("%w: %q", errInvalidProperty, property)
 	}
 
-	var p Property
-	if match[1] != "" {
-		p.key = match[1]
-	} else {
-		p.key = match[2]
-		p.value = match[3]
-		p.hasValue = true
-	}
-
 	return p, nil
 }
 
@@ -130,12 +125,9 @@ func (p Property) validate() error {
 		return fmt.Errorf("invalid property: %w", err)
 	}
 
-	if !keyRe.MatchString(p.key) {
+	if !validateKey(p.key) {
 		return errFunc(fmt.Errorf("%w: %q", errInvalidKey, p.key))
 	}
-	if p.hasValue && !valueRe.MatchString(p.value) {
-		return errFunc(fmt.Errorf("%w: %q", errInvalidValue, p.value))
-	}
 	if !p.hasValue && p.value != "" {
 		return errFunc(errors.New("inconsistent value"))
 	}
@@ -154,11 +146,11 @@ func (p Property) Value() (string, bool) {
 	return p.value, p.hasValue
 }
 
-// String encodes Property into a string compliant with the W3C Baggage
+// String encodes Property into a header string compliant with the W3C Baggage
 // specification.
 func (p Property) String() string {
 	if p.hasValue {
-		return fmt.Sprintf("%s%s%v", p.key, keyValueDelimiter, p.value)
+		return fmt.Sprintf("%s%s%v", p.key, keyValueDelimiter, valueEscape(p.value))
 	}
 	return p.key
 }
@@ -218,7 +210,7 @@ func (p properties) validate() error {
 	return nil
 }
 
-// String encodes properties into a string compliant with the W3C Baggage
+// String encodes properties into a header string compliant with the W3C Baggage
 // specification.
 func (p properties) String() string {
 	props := make([]string, len(p))
@@ -240,11 +232,28 @@ type Member struct {
 	hasData bool
 }
 
-// NewMember returns a new Member from the passed arguments. The key will be
-// used directly while the value will be url decoded after validation. An error
-// is returned if the created Member would be invalid according to the W3C
-// Baggage specification.
+// NewMemberRaw returns a new Member from the passed arguments.
+//
+// The passed key must be compliant with W3C Baggage specification.
+// The passed value must be precent-encoded as defined in W3C Baggage specification.
+//
+// Notice: Consider using [NewMemberRaw] instead
+// that does not require precent-encoding of the value.
 func NewMember(key, value string, props ...Property) (Member, error) {
+	if !validateValue(value) {
+		return newInvalidMember(), fmt.Errorf("%w: %q", errInvalidValue, value)
+	}
+	decodedValue, err := url.PathUnescape(value)
+	if err != nil {
+		return newInvalidMember(), fmt.Errorf("%w: %q", errInvalidValue, value)
+	}
+	return NewMemberRaw(key, decodedValue, props...)
+}
+
+// NewMemberRaw returns a new Member from the passed arguments.
+//
+// The passed key must be compliant with W3C Baggage specification.
+func NewMemberRaw(key, value string, props ...Property) (Member, error) {
 	m := Member{
 		key:        key,
 		value:      value,
@@ -254,11 +263,6 @@ func NewMember(key, value string, props ...Property) (Member, error) {
 	if err := m.validate(); err != nil {
 		return newInvalidMember(), err
 	}
-	decodedValue, err := url.PathUnescape(value)
-	if err != nil {
-		return newInvalidMember(), fmt.Errorf("%w: %q", errInvalidValue, value)
-	}
-	m.value = decodedValue
 	return m, nil
 }
 
@@ -274,11 +278,7 @@ func parseMember(member string) (Member, error) {
 		return newInvalidMember(), fmt.Errorf("%w: %d", errMemberBytes, n)
 	}
 
-	var (
-		key, value string
-		props      properties
-	)
-
+	var props properties
 	keyValue, properties, found := strings.Cut(member, propertyDelimiter)
 	if found {
 		// Parse the member properties.
@@ -299,36 +299,34 @@ func parseMember(member string) (Member, error) {
 	}
 	// "Leading and trailing whitespaces are allowed but MUST be trimmed
 	// when converting the header into a data structure."
-	key = strings.TrimSpace(k)
-	var err error
-	value, err = url.PathUnescape(strings.TrimSpace(v))
-	if err != nil {
-		return newInvalidMember(), fmt.Errorf("%w: %q", err, value)
-	}
-	if !keyRe.MatchString(key) {
+	key := strings.TrimSpace(k)
+	if !validateKey(key) {
 		return newInvalidMember(), fmt.Errorf("%w: %q", errInvalidKey, key)
 	}
-	if !valueRe.MatchString(value) {
-		return newInvalidMember(), fmt.Errorf("%w: %q", errInvalidValue, value)
+
+	val := strings.TrimSpace(v)
+	if !validateValue(val) {
+		return newInvalidMember(), fmt.Errorf("%w: %q", errInvalidValue, v)
 	}
 
+	// Decode a precent-encoded value.
+	value, err := url.PathUnescape(val)
+	if err != nil {
+		return newInvalidMember(), fmt.Errorf("%w: %v", errInvalidValue, err)
+	}
 	return Member{key: key, value: value, properties: props, hasData: true}, nil
 }
 
 // validate ensures m conforms to the W3C Baggage specification.
-// A key is just an ASCII string, but a value must be URL encoded UTF-8,
-// returning an error otherwise.
+// A key must be an ASCII string, returning an error otherwise.
 func (m Member) validate() error {
 	if !m.hasData {
 		return fmt.Errorf("%w: %q", errInvalidMember, m)
 	}
 
-	if !keyRe.MatchString(m.key) {
+	if !validateKey(m.key) {
 		return fmt.Errorf("%w: %q", errInvalidKey, m.key)
 	}
-	if !valueRe.MatchString(m.value) {
-		return fmt.Errorf("%w: %q", errInvalidValue, m.value)
-	}
 	return m.properties.validate()
 }
 
@@ -341,11 +339,13 @@ func (m Member) Value() string { return m.value }
 // Properties returns a copy of the Member properties.
 func (m Member) Properties() []Property { return m.properties.Copy() }
 
-// String encodes Member into a string compliant with the W3C Baggage
+// String encodes Member into a header string compliant with the W3C Baggage
 // specification.
 func (m Member) String() string {
-	// A key is just an ASCII string, but a value is URL encoded UTF-8.
-	s := fmt.Sprintf("%s%s%s", m.key, keyValueDelimiter, url.QueryEscape(m.value))
+	// A key is just an ASCII string. A value is restricted to be
+	// US-ASCII characters excluding CTLs, whitespace,
+	// DQUOTE, comma, semicolon, and backslash.
+	s := fmt.Sprintf("%s%s%s", m.key, keyValueDelimiter, valueEscape(m.value))
 	if len(m.properties) > 0 {
 		s = fmt.Sprintf("%s%s%s", s, propertyDelimiter, m.properties.String())
 	}
@@ -536,9 +536,8 @@ func (b Baggage) Len() int {
 	return len(b.list)
 }
 
-// String encodes Baggage into a string compliant with the W3C Baggage
-// specification. The returned string will be invalid if the Baggage contains
-// any invalid list-members.
+// String encodes Baggage into a header string compliant with the W3C Baggage
+// specification.
 func (b Baggage) String() string {
 	members := make([]string, 0, len(b.list))
 	for k, v := range b.list {
@@ -550,3 +549,196 @@ func (b Baggage) String() string {
 	}
 	return strings.Join(members, listDelimiter)
 }
+
+// parsePropertyInternal attempts to decode a Property from the passed string.
+// It follows the spec at https://www.w3.org/TR/baggage/#definition.
+func parsePropertyInternal(s string) (p Property, ok bool) {
+	// For the entire function we will use "   key    =    value  " as an example.
+	// Attempting to parse the key.
+	// First skip spaces at the beginning "<   >key    =    value  " (they could be empty).
+	index := skipSpace(s, 0)
+
+	// Parse the key: "   <key>    =    value  ".
+	keyStart := index
+	keyEnd := index
+	for _, c := range s[keyStart:] {
+		if !validateKeyChar(c) {
+			break
+		}
+		keyEnd++
+	}
+
+	// If we couldn't find any valid key character,
+	// it means the key is either empty or invalid.
+	if keyStart == keyEnd {
+		return
+	}
+
+	// Skip spaces after the key: "   key<    >=    value  ".
+	index = skipSpace(s, keyEnd)
+
+	if index == len(s) {
+		// A key can have no value, like: "   key    ".
+		ok = true
+		p.key = s[keyStart:keyEnd]
+		return
+	}
+
+	// If we have not reached the end and we can't find the '=' delimiter,
+	// it means the property is invalid.
+	if s[index] != keyValueDelimiter[0] {
+		return
+	}
+
+	// Attempting to parse the value.
+	// Match: "   key    =<    >value  ".
+	index = skipSpace(s, index+1)
+
+	// Match the value string: "   key    =    <value>  ".
+	// A valid property can be: "   key    =".
+	// Therefore, we don't have to check if the value is empty.
+	valueStart := index
+	valueEnd := index
+	for _, c := range s[valueStart:] {
+		if !validateValueChar(c) {
+			break
+		}
+		valueEnd++
+	}
+
+	// Skip all trailing whitespaces: "   key    =    value<  >".
+	index = skipSpace(s, valueEnd)
+
+	// If after looking for the value and skipping whitespaces
+	// we have not reached the end, it means the property is
+	// invalid, something like: "   key    =    value  value1".
+	if index != len(s) {
+		return
+	}
+
+	// Decode a precent-encoded value.
+	value, err := url.PathUnescape(s[valueStart:valueEnd])
+	if err != nil {
+		return
+	}
+
+	ok = true
+	p.key = s[keyStart:keyEnd]
+	p.hasValue = true
+
+	p.value = value
+	return
+}
+
+func skipSpace(s string, offset int) int {
+	i := offset
+	for ; i < len(s); i++ {
+		c := s[i]
+		if c != ' ' && c != '\t' {
+			break
+		}
+	}
+	return i
+}
+
+func validateKey(s string) bool {
+	if len(s) == 0 {
+		return false
+	}
+
+	for _, c := range s {
+		if !validateKeyChar(c) {
+			return false
+		}
+	}
+
+	return true
+}
+
+func validateKeyChar(c int32) bool {
+	return (c >= 0x23 && c <= 0x27) ||
+		(c >= 0x30 && c <= 0x39) ||
+		(c >= 0x41 && c <= 0x5a) ||
+		(c >= 0x5e && c <= 0x7a) ||
+		c == 0x21 ||
+		c == 0x2a ||
+		c == 0x2b ||
+		c == 0x2d ||
+		c == 0x2e ||
+		c == 0x7c ||
+		c == 0x7e
+}
+
+func validateValue(s string) bool {
+	for _, c := range s {
+		if !validateValueChar(c) {
+			return false
+		}
+	}
+
+	return true
+}
+
+func validateValueChar(c int32) bool {
+	return c == 0x21 ||
+		(c >= 0x23 && c <= 0x2b) ||
+		(c >= 0x2d && c <= 0x3a) ||
+		(c >= 0x3c && c <= 0x5b) ||
+		(c >= 0x5d && c <= 0x7e)
+}
+
+// valueEscape escapes the string so it can be safely placed inside a baggage value,
+// replacing special characters with %XX sequences as needed.
+//
+// The implementation is based on:
+// https://github.com/golang/go/blob/f6509cf5cdbb5787061b784973782933c47f1782/src/net/url/url.go#L285.
+func valueEscape(s string) string {
+	hexCount := 0
+	for i := 0; i < len(s); i++ {
+		c := s[i]
+		if shouldEscape(c) {
+			hexCount++
+		}
+	}
+
+	if hexCount == 0 {
+		return s
+	}
+
+	var buf [64]byte
+	var t []byte
+
+	required := len(s) + 2*hexCount
+	if required <= len(buf) {
+		t = buf[:required]
+	} else {
+		t = make([]byte, required)
+	}
+
+	j := 0
+	for i := 0; i < len(s); i++ {
+		c := s[i]
+		if shouldEscape(s[i]) {
+			const upperhex = "0123456789ABCDEF"
+			t[j] = '%'
+			t[j+1] = upperhex[c>>4]
+			t[j+2] = upperhex[c&15]
+			j += 3
+		} else {
+			t[j] = c
+			j++
+		}
+	}
+
+	return string(t)
+}
+
+// shouldEscape returns true if the specified byte should be escaped when
+// appearing in a baggage value string.
+func shouldEscape(c byte) bool {
+	if c == '%' {
+		// The percent character must be encoded so that percent-encoding can work.
+		return true
+	}
+	return !validateValueChar(int32(c))
+}
diff --git a/vendor/go.opentelemetry.io/otel/doc.go b/vendor/go.opentelemetry.io/otel/doc.go
index daa36c89dc6..36d7c24e88e 100644
--- a/vendor/go.opentelemetry.io/otel/doc.go
+++ b/vendor/go.opentelemetry.io/otel/doc.go
@@ -22,7 +22,7 @@ transmitted anywhere. An implementation of the OpenTelemetry SDK, like the
 default SDK implementation (go.opentelemetry.io/otel/sdk), and associated
 exporters are used to process and transport this data.
 
-To read the getting started guide, see https://opentelemetry.io/docs/go/getting-started/.
+To read the getting started guide, see https://opentelemetry.io/docs/languages/go/getting-started/.
 
 To read more about tracing, see go.opentelemetry.io/otel/trace.
 
diff --git a/vendor/go.opentelemetry.io/otel/exporters/otlp/otlptrace/version.go b/vendor/go.opentelemetry.io/otel/exporters/otlp/otlptrace/version.go
index 8ee285b8d52..3b3bc35911b 100644
--- a/vendor/go.opentelemetry.io/otel/exporters/otlp/otlptrace/version.go
+++ b/vendor/go.opentelemetry.io/otel/exporters/otlp/otlptrace/version.go
@@ -16,5 +16,5 @@ package otlptrace // import "go.opentelemetry.io/otel/exporters/otlp/otlptrace"
 
 // Version is the current release version of the OpenTelemetry OTLP trace exporter in use.
 func Version() string {
-	return "1.21.0"
+	return "1.22.0"
 }
diff --git a/vendor/go.opentelemetry.io/otel/propagation/trace_context.go b/vendor/go.opentelemetry.io/otel/propagation/trace_context.go
index 75a8f3435a5..63e5d62221f 100644
--- a/vendor/go.opentelemetry.io/otel/propagation/trace_context.go
+++ b/vendor/go.opentelemetry.io/otel/propagation/trace_context.go
@@ -18,7 +18,7 @@ import (
 	"context"
 	"encoding/hex"
 	"fmt"
-	"regexp"
+	"strings"
 
 	"go.opentelemetry.io/otel/trace"
 )
@@ -28,6 +28,7 @@ const (
 	maxVersion        = 254
 	traceparentHeader = "traceparent"
 	tracestateHeader  = "tracestate"
+	delimiter         = "-"
 )
 
 // TraceContext is a propagator that supports the W3C Trace Context format
@@ -41,8 +42,8 @@ const (
 type TraceContext struct{}
 
 var (
-	_              TextMapPropagator = TraceContext{}
-	traceCtxRegExp                   = regexp.MustCompile("^(?P<version>[0-9a-f]{2})-(?P<traceID>[a-f0-9]{32})-(?P<spanID>[a-f0-9]{16})-(?P<traceFlags>[a-f0-9]{2})(?:-.*)?$")
+	_           TextMapPropagator = TraceContext{}
+	versionPart                   = fmt.Sprintf("%.2X", supportedVersion)
 )
 
 // Inject set tracecontext from the Context into the carrier.
@@ -59,12 +60,19 @@ func (tc TraceContext) Inject(ctx context.Context, carrier TextMapCarrier) {
 	// Clear all flags other than the trace-context supported sampling bit.
 	flags := sc.TraceFlags() & trace.FlagsSampled
 
-	h := fmt.Sprintf("%.2x-%s-%s-%s",
-		supportedVersion,
-		sc.TraceID(),
-		sc.SpanID(),
-		flags)
-	carrier.Set(traceparentHeader, h)
+	var sb strings.Builder
+	sb.Grow(2 + 32 + 16 + 2 + 3)
+	_, _ = sb.WriteString(versionPart)
+	traceID := sc.TraceID()
+	spanID := sc.SpanID()
+	flagByte := [1]byte{byte(flags)}
+	var buf [32]byte
+	for _, src := range [][]byte{traceID[:], spanID[:], flagByte[:]} {
+		_ = sb.WriteByte(delimiter[0])
+		n := hex.Encode(buf[:], src)
+		_, _ = sb.Write(buf[:n])
+	}
+	carrier.Set(traceparentHeader, sb.String())
 }
 
 // Extract reads tracecontext from the carrier into a returned Context.
@@ -86,21 +94,8 @@ func (tc TraceContext) extract(carrier TextMapCarrier) trace.SpanContext {
 		return trace.SpanContext{}
 	}
 
-	matches := traceCtxRegExp.FindStringSubmatch(h)
-
-	if len(matches) == 0 {
-		return trace.SpanContext{}
-	}
-
-	if len(matches) < 5 { // four subgroups plus the overall match
-		return trace.SpanContext{}
-	}
-
-	if len(matches[1]) != 2 {
-		return trace.SpanContext{}
-	}
-	ver, err := hex.DecodeString(matches[1])
-	if err != nil {
+	var ver [1]byte
+	if !extractPart(ver[:], &h, 2) {
 		return trace.SpanContext{}
 	}
 	version := int(ver[0])
@@ -108,36 +103,24 @@ func (tc TraceContext) extract(carrier TextMapCarrier) trace.SpanContext {
 		return trace.SpanContext{}
 	}
 
-	if version == 0 && len(matches) != 5 { // four subgroups plus the overall match
-		return trace.SpanContext{}
-	}
-
-	if len(matches[2]) != 32 {
-		return trace.SpanContext{}
-	}
-
 	var scc trace.SpanContextConfig
-
-	scc.TraceID, err = trace.TraceIDFromHex(matches[2][:32])
-	if err != nil {
+	if !extractPart(scc.TraceID[:], &h, 32) {
 		return trace.SpanContext{}
 	}
-
-	if len(matches[3]) != 16 {
-		return trace.SpanContext{}
-	}
-	scc.SpanID, err = trace.SpanIDFromHex(matches[3])
-	if err != nil {
+	if !extractPart(scc.SpanID[:], &h, 16) {
 		return trace.SpanContext{}
 	}
 
-	if len(matches[4]) != 2 {
+	var opts [1]byte
+	if !extractPart(opts[:], &h, 2) {
 		return trace.SpanContext{}
 	}
-	opts, err := hex.DecodeString(matches[4])
-	if err != nil || len(opts) < 1 || (version == 0 && opts[0] > 2) {
+	if version == 0 && (h != "" || opts[0] > 2) {
+		// version 0 not allow extra
+		// version 0 not allow other flag
 		return trace.SpanContext{}
 	}
+
 	// Clear all flags other than the trace-context supported sampling bit.
 	scc.TraceFlags = trace.TraceFlags(opts[0]) & trace.FlagsSampled
 
@@ -155,6 +138,29 @@ func (tc TraceContext) extract(carrier TextMapCarrier) trace.SpanContext {
 	return sc
 }
 
+// upperHex detect hex is upper case Unicode characters.
+func upperHex(v string) bool {
+	for _, c := range v {
+		if c >= 'A' && c <= 'F' {
+			return true
+		}
+	}
+	return false
+}
+
+func extractPart(dst []byte, h *string, n int) bool {
+	part, left, _ := strings.Cut(*h, delimiter)
+	*h = left
+	// hex.Decode decodes unsupported upper-case characters, so exclude explicitly.
+	if len(part) != n || upperHex(part) {
+		return false
+	}
+	if p, err := hex.Decode(dst, []byte(part)); err != nil || p != n/2 {
+		return false
+	}
+	return true
+}
+
 // Fields returns the keys who's values are set with Inject.
 func (tc TraceContext) Fields() []string {
 	return []string{traceparentHeader, tracestateHeader}
diff --git a/vendor/go.opentelemetry.io/otel/sdk/resource/builtin.go b/vendor/go.opentelemetry.io/otel/sdk/resource/builtin.go
index c63a0dd1f8c..6a2c08293a8 100644
--- a/vendor/go.opentelemetry.io/otel/sdk/resource/builtin.go
+++ b/vendor/go.opentelemetry.io/otel/sdk/resource/builtin.go
@@ -22,7 +22,7 @@ import (
 
 	"go.opentelemetry.io/otel/attribute"
 	"go.opentelemetry.io/otel/sdk"
-	semconv "go.opentelemetry.io/otel/semconv/v1.21.0"
+	semconv "go.opentelemetry.io/otel/semconv/v1.24.0"
 )
 
 type (
diff --git a/vendor/go.opentelemetry.io/otel/sdk/resource/container.go b/vendor/go.opentelemetry.io/otel/sdk/resource/container.go
index 3d536228283..c881b2895be 100644
--- a/vendor/go.opentelemetry.io/otel/sdk/resource/container.go
+++ b/vendor/go.opentelemetry.io/otel/sdk/resource/container.go
@@ -22,7 +22,7 @@ import (
 	"os"
 	"regexp"
 
-	semconv "go.opentelemetry.io/otel/semconv/v1.21.0"
+	semconv "go.opentelemetry.io/otel/semconv/v1.24.0"
 )
 
 type containerIDProvider func() (string, error)
diff --git a/vendor/go.opentelemetry.io/otel/sdk/resource/env.go b/vendor/go.opentelemetry.io/otel/sdk/resource/env.go
index e29ae563a69..be4cbe423ea 100644
--- a/vendor/go.opentelemetry.io/otel/sdk/resource/env.go
+++ b/vendor/go.opentelemetry.io/otel/sdk/resource/env.go
@@ -23,7 +23,7 @@ import (
 
 	"go.opentelemetry.io/otel"
 	"go.opentelemetry.io/otel/attribute"
-	semconv "go.opentelemetry.io/otel/semconv/v1.21.0"
+	semconv "go.opentelemetry.io/otel/semconv/v1.24.0"
 )
 
 const (
diff --git a/vendor/go.opentelemetry.io/otel/sdk/resource/host_id.go b/vendor/go.opentelemetry.io/otel/sdk/resource/host_id.go
index fb1ebf2cab2..f579329c2c6 100644
--- a/vendor/go.opentelemetry.io/otel/sdk/resource/host_id.go
+++ b/vendor/go.opentelemetry.io/otel/sdk/resource/host_id.go
@@ -19,7 +19,7 @@ import (
 	"errors"
 	"strings"
 
-	semconv "go.opentelemetry.io/otel/semconv/v1.21.0"
+	semconv "go.opentelemetry.io/otel/semconv/v1.24.0"
 )
 
 type hostIDProvider func() (string, error)
diff --git a/vendor/go.opentelemetry.io/otel/sdk/resource/os.go b/vendor/go.opentelemetry.io/otel/sdk/resource/os.go
index 0cbd559739c..8fbf071c178 100644
--- a/vendor/go.opentelemetry.io/otel/sdk/resource/os.go
+++ b/vendor/go.opentelemetry.io/otel/sdk/resource/os.go
@@ -19,7 +19,7 @@ import (
 	"strings"
 
 	"go.opentelemetry.io/otel/attribute"
-	semconv "go.opentelemetry.io/otel/semconv/v1.21.0"
+	semconv "go.opentelemetry.io/otel/semconv/v1.24.0"
 )
 
 type osDescriptionProvider func() (string, error)
diff --git a/vendor/go.opentelemetry.io/otel/sdk/resource/process.go b/vendor/go.opentelemetry.io/otel/sdk/resource/process.go
index ecdd11dd762..739ea4512ac 100644
--- a/vendor/go.opentelemetry.io/otel/sdk/resource/process.go
+++ b/vendor/go.opentelemetry.io/otel/sdk/resource/process.go
@@ -22,7 +22,7 @@ import (
 	"path/filepath"
 	"runtime"
 
-	semconv "go.opentelemetry.io/otel/semconv/v1.21.0"
+	semconv "go.opentelemetry.io/otel/semconv/v1.24.0"
 )
 
 type (
diff --git a/vendor/go.opentelemetry.io/otel/sdk/trace/span.go b/vendor/go.opentelemetry.io/otel/sdk/trace/span.go
index 36dbf67764b..85bc702a019 100644
--- a/vendor/go.opentelemetry.io/otel/sdk/trace/span.go
+++ b/vendor/go.opentelemetry.io/otel/sdk/trace/span.go
@@ -30,7 +30,7 @@ import (
 	"go.opentelemetry.io/otel/sdk/instrumentation"
 	"go.opentelemetry.io/otel/sdk/internal"
 	"go.opentelemetry.io/otel/sdk/resource"
-	semconv "go.opentelemetry.io/otel/semconv/v1.21.0"
+	semconv "go.opentelemetry.io/otel/semconv/v1.24.0"
 	"go.opentelemetry.io/otel/trace"
 	"go.opentelemetry.io/otel/trace/embedded"
 )
@@ -208,6 +208,16 @@ func (s *recordingSpan) SetStatus(code codes.Code, description string) {
 	s.status = status
 }
 
+// ensureAttributesCapacity inlines functionality from slices.Grow
+// so that we can avoid needing to import golang.org/x/exp for go1.20.
+// Once support for go1.20 is dropped, we can use slices.Grow available since go1.21 instead.
+// Tracking issue: https://github.com/open-telemetry/opentelemetry-go/issues/4819.
+func (s *recordingSpan) ensureAttributesCapacity(minCapacity int) {
+	if n := minCapacity - cap(s.attributes); n > 0 {
+		s.attributes = append(s.attributes[:cap(s.attributes)], make([]attribute.KeyValue, n)...)[:len(s.attributes)]
+	}
+}
+
 // SetAttributes sets attributes of this span.
 //
 // If a key from attributes already exists the value associated with that key
@@ -242,6 +252,7 @@ func (s *recordingSpan) SetAttributes(attributes ...attribute.KeyValue) {
 
 	// Otherwise, add without deduplication. When attributes are read they
 	// will be deduplicated, optimizing the operation.
+	s.ensureAttributesCapacity(len(s.attributes) + len(attributes))
 	for _, a := range attributes {
 		if !a.Valid() {
 			// Drop all invalid attributes.
@@ -277,6 +288,12 @@ func (s *recordingSpan) addOverCapAttrs(limit int, attrs []attribute.KeyValue) {
 
 	// Now that s.attributes is deduplicated, adding unique attributes up to
 	// the capacity of s will not over allocate s.attributes.
+	if sum := len(attrs) + len(s.attributes); sum < limit {
+		// After support for go1.20 is dropped, simplify if-else to min(sum, limit).
+		s.ensureAttributesCapacity(sum)
+	} else {
+		s.ensureAttributesCapacity(limit)
+	}
 	for _, a := range attrs {
 		if !a.Valid() {
 			// Drop all invalid attributes.
diff --git a/vendor/go.opentelemetry.io/otel/sdk/version.go b/vendor/go.opentelemetry.io/otel/sdk/version.go
index 422d4c964b3..17b16cc7966 100644
--- a/vendor/go.opentelemetry.io/otel/sdk/version.go
+++ b/vendor/go.opentelemetry.io/otel/sdk/version.go
@@ -16,5 +16,5 @@ package sdk // import "go.opentelemetry.io/otel/sdk"
 
 // Version is the current release version of the OpenTelemetry SDK in use.
 func Version() string {
-	return "1.21.0"
+	return "1.22.0"
 }
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/attribute_group.go b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/attribute_group.go
new file mode 100644
index 00000000000..67d1d4c44d7
--- /dev/null
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/attribute_group.go
@@ -0,0 +1,1209 @@
+// Copyright The OpenTelemetry Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// Code generated from semantic convention specification. DO NOT EDIT.
+
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.20.0"
+
+import "go.opentelemetry.io/otel/attribute"
+
+// Describes HTTP attributes.
+const (
+	// HTTPMethodKey is the attribute Key conforming to the "http.method"
+	// semantic conventions. It represents the hTTP request method.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: stable
+	// Examples: 'GET', 'POST', 'HEAD'
+	HTTPMethodKey = attribute.Key("http.method")
+
+	// HTTPStatusCodeKey is the attribute Key conforming to the
+	// "http.status_code" semantic conventions. It represents the [HTTP
+	// response status code](https://tools.ietf.org/html/rfc7231#section-6).
+	//
+	// Type: int
+	// RequirementLevel: ConditionallyRequired (If and only if one was
+	// received/sent.)
+	// Stability: stable
+	// Examples: 200
+	HTTPStatusCodeKey = attribute.Key("http.status_code")
+)
+
+// HTTPMethod returns an attribute KeyValue conforming to the "http.method"
+// semantic conventions. It represents the hTTP request method.
+func HTTPMethod(val string) attribute.KeyValue {
+	return HTTPMethodKey.String(val)
+}
+
+// HTTPStatusCode returns an attribute KeyValue conforming to the
+// "http.status_code" semantic conventions. It represents the [HTTP response
+// status code](https://tools.ietf.org/html/rfc7231#section-6).
+func HTTPStatusCode(val int) attribute.KeyValue {
+	return HTTPStatusCodeKey.Int(val)
+}
+
+// HTTP Server spans attributes
+const (
+	// HTTPSchemeKey is the attribute Key conforming to the "http.scheme"
+	// semantic conventions. It represents the URI scheme identifying the used
+	// protocol.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: stable
+	// Examples: 'http', 'https'
+	HTTPSchemeKey = attribute.Key("http.scheme")
+
+	// HTTPRouteKey is the attribute Key conforming to the "http.route"
+	// semantic conventions. It represents the matched route (path template in
+	// the format used by the respective server framework). See note below
+	//
+	// Type: string
+	// RequirementLevel: ConditionallyRequired (If and only if it's available)
+	// Stability: stable
+	// Examples: '/users/:userID?', '{controller}/{action}/{id?}'
+	// Note: MUST NOT be populated when this is not supported by the HTTP
+	// server framework as the route attribute should have low-cardinality and
+	// the URI path can NOT substitute it.
+	// SHOULD include the [application
+	// root](/specification/trace/semantic_conventions/http.md#http-server-definitions)
+	// if there is one.
+	HTTPRouteKey = attribute.Key("http.route")
+)
+
+// HTTPScheme returns an attribute KeyValue conforming to the "http.scheme"
+// semantic conventions. It represents the URI scheme identifying the used
+// protocol.
+func HTTPScheme(val string) attribute.KeyValue {
+	return HTTPSchemeKey.String(val)
+}
+
+// HTTPRoute returns an attribute KeyValue conforming to the "http.route"
+// semantic conventions. It represents the matched route (path template in the
+// format used by the respective server framework). See note below
+func HTTPRoute(val string) attribute.KeyValue {
+	return HTTPRouteKey.String(val)
+}
+
+// Attributes for Events represented using Log Records.
+const (
+	// EventNameKey is the attribute Key conforming to the "event.name"
+	// semantic conventions. It represents the name identifies the event.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: stable
+	// Examples: 'click', 'exception'
+	EventNameKey = attribute.Key("event.name")
+
+	// EventDomainKey is the attribute Key conforming to the "event.domain"
+	// semantic conventions. It represents the domain identifies the business
+	// context for the events.
+	//
+	// Type: Enum
+	// RequirementLevel: Required
+	// Stability: stable
+	// Note: Events across different domains may have same `event.name`, yet be
+	// unrelated events.
+	EventDomainKey = attribute.Key("event.domain")
+)
+
+var (
+	// Events from browser apps
+	EventDomainBrowser = EventDomainKey.String("browser")
+	// Events from mobile apps
+	EventDomainDevice = EventDomainKey.String("device")
+	// Events from Kubernetes
+	EventDomainK8S = EventDomainKey.String("k8s")
+)
+
+// EventName returns an attribute KeyValue conforming to the "event.name"
+// semantic conventions. It represents the name identifies the event.
+func EventName(val string) attribute.KeyValue {
+	return EventNameKey.String(val)
+}
+
+// These attributes may be used for any network related operation.
+const (
+	// NetTransportKey is the attribute Key conforming to the "net.transport"
+	// semantic conventions. It represents the transport protocol used. See
+	// note below.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: stable
+	NetTransportKey = attribute.Key("net.transport")
+
+	// NetProtocolNameKey is the attribute Key conforming to the
+	// "net.protocol.name" semantic conventions. It represents the application
+	// layer protocol used. The value SHOULD be normalized to lowercase.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'amqp', 'http', 'mqtt'
+	NetProtocolNameKey = attribute.Key("net.protocol.name")
+
+	// NetProtocolVersionKey is the attribute Key conforming to the
+	// "net.protocol.version" semantic conventions. It represents the version
+	// of the application layer protocol used. See note below.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '3.1.1'
+	// Note: `net.protocol.version` refers to the version of the protocol used
+	// and might be different from the protocol client's version. If the HTTP
+	// client used has a version of `0.27.2`, but sends HTTP version `1.1`,
+	// this attribute should be set to `1.1`.
+	NetProtocolVersionKey = attribute.Key("net.protocol.version")
+
+	// NetSockPeerNameKey is the attribute Key conforming to the
+	// "net.sock.peer.name" semantic conventions. It represents the remote
+	// socket peer name.
+	//
+	// Type: string
+	// RequirementLevel: Recommended (If available and different from
+	// `net.peer.name` and if `net.sock.peer.addr` is set.)
+	// Stability: stable
+	// Examples: 'proxy.example.com'
+	NetSockPeerNameKey = attribute.Key("net.sock.peer.name")
+
+	// NetSockPeerAddrKey is the attribute Key conforming to the
+	// "net.sock.peer.addr" semantic conventions. It represents the remote
+	// socket peer address: IPv4 or IPv6 for internet protocols, path for local
+	// communication,
+	// [etc](https://man7.org/linux/man-pages/man7/address_families.7.html).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '127.0.0.1', '/tmp/mysql.sock'
+	NetSockPeerAddrKey = attribute.Key("net.sock.peer.addr")
+
+	// NetSockPeerPortKey is the attribute Key conforming to the
+	// "net.sock.peer.port" semantic conventions. It represents the remote
+	// socket peer port.
+	//
+	// Type: int
+	// RequirementLevel: Recommended (If defined for the address family and if
+	// different than `net.peer.port` and if `net.sock.peer.addr` is set.)
+	// Stability: stable
+	// Examples: 16456
+	NetSockPeerPortKey = attribute.Key("net.sock.peer.port")
+
+	// NetSockFamilyKey is the attribute Key conforming to the
+	// "net.sock.family" semantic conventions. It represents the protocol
+	// [address
+	// family](https://man7.org/linux/man-pages/man7/address_families.7.html)
+	// which is used for communication.
+	//
+	// Type: Enum
+	// RequirementLevel: ConditionallyRequired (If different than `inet` and if
+	// any of `net.sock.peer.addr` or `net.sock.host.addr` are set. Consumers
+	// of telemetry SHOULD accept both IPv4 and IPv6 formats for the address in
+	// `net.sock.peer.addr` if `net.sock.family` is not set. This is to support
+	// instrumentations that follow previous versions of this document.)
+	// Stability: stable
+	// Examples: 'inet6', 'bluetooth'
+	NetSockFamilyKey = attribute.Key("net.sock.family")
+
+	// NetPeerNameKey is the attribute Key conforming to the "net.peer.name"
+	// semantic conventions. It represents the logical remote hostname, see
+	// note below.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'example.com'
+	// Note: `net.peer.name` SHOULD NOT be set if capturing it would require an
+	// extra DNS lookup.
+	NetPeerNameKey = attribute.Key("net.peer.name")
+
+	// NetPeerPortKey is the attribute Key conforming to the "net.peer.port"
+	// semantic conventions. It represents the logical remote port number
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 80, 8080, 443
+	NetPeerPortKey = attribute.Key("net.peer.port")
+
+	// NetHostNameKey is the attribute Key conforming to the "net.host.name"
+	// semantic conventions. It represents the logical local hostname or
+	// similar, see note below.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'localhost'
+	NetHostNameKey = attribute.Key("net.host.name")
+
+	// NetHostPortKey is the attribute Key conforming to the "net.host.port"
+	// semantic conventions. It represents the logical local port number,
+	// preferably the one that the peer used to connect
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 8080
+	NetHostPortKey = attribute.Key("net.host.port")
+
+	// NetSockHostAddrKey is the attribute Key conforming to the
+	// "net.sock.host.addr" semantic conventions. It represents the local
+	// socket address. Useful in case of a multi-IP host.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '192.168.0.1'
+	NetSockHostAddrKey = attribute.Key("net.sock.host.addr")
+
+	// NetSockHostPortKey is the attribute Key conforming to the
+	// "net.sock.host.port" semantic conventions. It represents the local
+	// socket port number.
+	//
+	// Type: int
+	// RequirementLevel: ConditionallyRequired (If defined for the address
+	// family and if different than `net.host.port` and if `net.sock.host.addr`
+	// is set. In other cases, it is still recommended to set this.)
+	// Stability: stable
+	// Examples: 35555
+	NetSockHostPortKey = attribute.Key("net.sock.host.port")
+)
+
+var (
+	// ip_tcp
+	NetTransportTCP = NetTransportKey.String("ip_tcp")
+	// ip_udp
+	NetTransportUDP = NetTransportKey.String("ip_udp")
+	// Named or anonymous pipe. See note below
+	NetTransportPipe = NetTransportKey.String("pipe")
+	// In-process communication
+	NetTransportInProc = NetTransportKey.String("inproc")
+	// Something else (non IP-based)
+	NetTransportOther = NetTransportKey.String("other")
+)
+
+var (
+	// IPv4 address
+	NetSockFamilyInet = NetSockFamilyKey.String("inet")
+	// IPv6 address
+	NetSockFamilyInet6 = NetSockFamilyKey.String("inet6")
+	// Unix domain socket path
+	NetSockFamilyUnix = NetSockFamilyKey.String("unix")
+)
+
+// NetProtocolName returns an attribute KeyValue conforming to the
+// "net.protocol.name" semantic conventions. It represents the application
+// layer protocol used. The value SHOULD be normalized to lowercase.
+func NetProtocolName(val string) attribute.KeyValue {
+	return NetProtocolNameKey.String(val)
+}
+
+// NetProtocolVersion returns an attribute KeyValue conforming to the
+// "net.protocol.version" semantic conventions. It represents the version of
+// the application layer protocol used. See note below.
+func NetProtocolVersion(val string) attribute.KeyValue {
+	return NetProtocolVersionKey.String(val)
+}
+
+// NetSockPeerName returns an attribute KeyValue conforming to the
+// "net.sock.peer.name" semantic conventions. It represents the remote socket
+// peer name.
+func NetSockPeerName(val string) attribute.KeyValue {
+	return NetSockPeerNameKey.String(val)
+}
+
+// NetSockPeerAddr returns an attribute KeyValue conforming to the
+// "net.sock.peer.addr" semantic conventions. It represents the remote socket
+// peer address: IPv4 or IPv6 for internet protocols, path for local
+// communication,
+// [etc](https://man7.org/linux/man-pages/man7/address_families.7.html).
+func NetSockPeerAddr(val string) attribute.KeyValue {
+	return NetSockPeerAddrKey.String(val)
+}
+
+// NetSockPeerPort returns an attribute KeyValue conforming to the
+// "net.sock.peer.port" semantic conventions. It represents the remote socket
+// peer port.
+func NetSockPeerPort(val int) attribute.KeyValue {
+	return NetSockPeerPortKey.Int(val)
+}
+
+// NetPeerName returns an attribute KeyValue conforming to the
+// "net.peer.name" semantic conventions. It represents the logical remote
+// hostname, see note below.
+func NetPeerName(val string) attribute.KeyValue {
+	return NetPeerNameKey.String(val)
+}
+
+// NetPeerPort returns an attribute KeyValue conforming to the
+// "net.peer.port" semantic conventions. It represents the logical remote port
+// number
+func NetPeerPort(val int) attribute.KeyValue {
+	return NetPeerPortKey.Int(val)
+}
+
+// NetHostName returns an attribute KeyValue conforming to the
+// "net.host.name" semantic conventions. It represents the logical local
+// hostname or similar, see note below.
+func NetHostName(val string) attribute.KeyValue {
+	return NetHostNameKey.String(val)
+}
+
+// NetHostPort returns an attribute KeyValue conforming to the
+// "net.host.port" semantic conventions. It represents the logical local port
+// number, preferably the one that the peer used to connect
+func NetHostPort(val int) attribute.KeyValue {
+	return NetHostPortKey.Int(val)
+}
+
+// NetSockHostAddr returns an attribute KeyValue conforming to the
+// "net.sock.host.addr" semantic conventions. It represents the local socket
+// address. Useful in case of a multi-IP host.
+func NetSockHostAddr(val string) attribute.KeyValue {
+	return NetSockHostAddrKey.String(val)
+}
+
+// NetSockHostPort returns an attribute KeyValue conforming to the
+// "net.sock.host.port" semantic conventions. It represents the local socket
+// port number.
+func NetSockHostPort(val int) attribute.KeyValue {
+	return NetSockHostPortKey.Int(val)
+}
+
+// These attributes may be used for any network related operation.
+const (
+	// NetHostConnectionTypeKey is the attribute Key conforming to the
+	// "net.host.connection.type" semantic conventions. It represents the
+	// internet connection type currently being used by the host.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'wifi'
+	NetHostConnectionTypeKey = attribute.Key("net.host.connection.type")
+
+	// NetHostConnectionSubtypeKey is the attribute Key conforming to the
+	// "net.host.connection.subtype" semantic conventions. It represents the
+	// this describes more details regarding the connection.type. It may be the
+	// type of cell technology connection, but it could be used for describing
+	// details about a wifi connection.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'LTE'
+	NetHostConnectionSubtypeKey = attribute.Key("net.host.connection.subtype")
+
+	// NetHostCarrierNameKey is the attribute Key conforming to the
+	// "net.host.carrier.name" semantic conventions. It represents the name of
+	// the mobile carrier.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'sprint'
+	NetHostCarrierNameKey = attribute.Key("net.host.carrier.name")
+
+	// NetHostCarrierMccKey is the attribute Key conforming to the
+	// "net.host.carrier.mcc" semantic conventions. It represents the mobile
+	// carrier country code.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '310'
+	NetHostCarrierMccKey = attribute.Key("net.host.carrier.mcc")
+
+	// NetHostCarrierMncKey is the attribute Key conforming to the
+	// "net.host.carrier.mnc" semantic conventions. It represents the mobile
+	// carrier network code.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '001'
+	NetHostCarrierMncKey = attribute.Key("net.host.carrier.mnc")
+
+	// NetHostCarrierIccKey is the attribute Key conforming to the
+	// "net.host.carrier.icc" semantic conventions. It represents the ISO
+	// 3166-1 alpha-2 2-character country code associated with the mobile
+	// carrier network.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'DE'
+	NetHostCarrierIccKey = attribute.Key("net.host.carrier.icc")
+)
+
+var (
+	// wifi
+	NetHostConnectionTypeWifi = NetHostConnectionTypeKey.String("wifi")
+	// wired
+	NetHostConnectionTypeWired = NetHostConnectionTypeKey.String("wired")
+	// cell
+	NetHostConnectionTypeCell = NetHostConnectionTypeKey.String("cell")
+	// unavailable
+	NetHostConnectionTypeUnavailable = NetHostConnectionTypeKey.String("unavailable")
+	// unknown
+	NetHostConnectionTypeUnknown = NetHostConnectionTypeKey.String("unknown")
+)
+
+var (
+	// GPRS
+	NetHostConnectionSubtypeGprs = NetHostConnectionSubtypeKey.String("gprs")
+	// EDGE
+	NetHostConnectionSubtypeEdge = NetHostConnectionSubtypeKey.String("edge")
+	// UMTS
+	NetHostConnectionSubtypeUmts = NetHostConnectionSubtypeKey.String("umts")
+	// CDMA
+	NetHostConnectionSubtypeCdma = NetHostConnectionSubtypeKey.String("cdma")
+	// EVDO Rel. 0
+	NetHostConnectionSubtypeEvdo0 = NetHostConnectionSubtypeKey.String("evdo_0")
+	// EVDO Rev. A
+	NetHostConnectionSubtypeEvdoA = NetHostConnectionSubtypeKey.String("evdo_a")
+	// CDMA2000 1XRTT
+	NetHostConnectionSubtypeCdma20001xrtt = NetHostConnectionSubtypeKey.String("cdma2000_1xrtt")
+	// HSDPA
+	NetHostConnectionSubtypeHsdpa = NetHostConnectionSubtypeKey.String("hsdpa")
+	// HSUPA
+	NetHostConnectionSubtypeHsupa = NetHostConnectionSubtypeKey.String("hsupa")
+	// HSPA
+	NetHostConnectionSubtypeHspa = NetHostConnectionSubtypeKey.String("hspa")
+	// IDEN
+	NetHostConnectionSubtypeIden = NetHostConnectionSubtypeKey.String("iden")
+	// EVDO Rev. B
+	NetHostConnectionSubtypeEvdoB = NetHostConnectionSubtypeKey.String("evdo_b")
+	// LTE
+	NetHostConnectionSubtypeLte = NetHostConnectionSubtypeKey.String("lte")
+	// EHRPD
+	NetHostConnectionSubtypeEhrpd = NetHostConnectionSubtypeKey.String("ehrpd")
+	// HSPAP
+	NetHostConnectionSubtypeHspap = NetHostConnectionSubtypeKey.String("hspap")
+	// GSM
+	NetHostConnectionSubtypeGsm = NetHostConnectionSubtypeKey.String("gsm")
+	// TD-SCDMA
+	NetHostConnectionSubtypeTdScdma = NetHostConnectionSubtypeKey.String("td_scdma")
+	// IWLAN
+	NetHostConnectionSubtypeIwlan = NetHostConnectionSubtypeKey.String("iwlan")
+	// 5G NR (New Radio)
+	NetHostConnectionSubtypeNr = NetHostConnectionSubtypeKey.String("nr")
+	// 5G NRNSA (New Radio Non-Standalone)
+	NetHostConnectionSubtypeNrnsa = NetHostConnectionSubtypeKey.String("nrnsa")
+	// LTE CA
+	NetHostConnectionSubtypeLteCa = NetHostConnectionSubtypeKey.String("lte_ca")
+)
+
+// NetHostCarrierName returns an attribute KeyValue conforming to the
+// "net.host.carrier.name" semantic conventions. It represents the name of the
+// mobile carrier.
+func NetHostCarrierName(val string) attribute.KeyValue {
+	return NetHostCarrierNameKey.String(val)
+}
+
+// NetHostCarrierMcc returns an attribute KeyValue conforming to the
+// "net.host.carrier.mcc" semantic conventions. It represents the mobile
+// carrier country code.
+func NetHostCarrierMcc(val string) attribute.KeyValue {
+	return NetHostCarrierMccKey.String(val)
+}
+
+// NetHostCarrierMnc returns an attribute KeyValue conforming to the
+// "net.host.carrier.mnc" semantic conventions. It represents the mobile
+// carrier network code.
+func NetHostCarrierMnc(val string) attribute.KeyValue {
+	return NetHostCarrierMncKey.String(val)
+}
+
+// NetHostCarrierIcc returns an attribute KeyValue conforming to the
+// "net.host.carrier.icc" semantic conventions. It represents the ISO 3166-1
+// alpha-2 2-character country code associated with the mobile carrier network.
+func NetHostCarrierIcc(val string) attribute.KeyValue {
+	return NetHostCarrierIccKey.String(val)
+}
+
+// Semantic conventions for HTTP client and server Spans.
+const (
+	// HTTPRequestContentLengthKey is the attribute Key conforming to the
+	// "http.request_content_length" semantic conventions. It represents the
+	// size of the request payload body in bytes. This is the number of bytes
+	// transferred excluding headers and is often, but not always, present as
+	// the
+	// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
+	// header. For requests using transport encoding, this should be the
+	// compressed size.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 3495
+	HTTPRequestContentLengthKey = attribute.Key("http.request_content_length")
+
+	// HTTPResponseContentLengthKey is the attribute Key conforming to the
+	// "http.response_content_length" semantic conventions. It represents the
+	// size of the response payload body in bytes. This is the number of bytes
+	// transferred excluding headers and is often, but not always, present as
+	// the
+	// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
+	// header. For requests using transport encoding, this should be the
+	// compressed size.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 3495
+	HTTPResponseContentLengthKey = attribute.Key("http.response_content_length")
+)
+
+// HTTPRequestContentLength returns an attribute KeyValue conforming to the
+// "http.request_content_length" semantic conventions. It represents the size
+// of the request payload body in bytes. This is the number of bytes
+// transferred excluding headers and is often, but not always, present as the
+// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
+// header. For requests using transport encoding, this should be the compressed
+// size.
+func HTTPRequestContentLength(val int) attribute.KeyValue {
+	return HTTPRequestContentLengthKey.Int(val)
+}
+
+// HTTPResponseContentLength returns an attribute KeyValue conforming to the
+// "http.response_content_length" semantic conventions. It represents the size
+// of the response payload body in bytes. This is the number of bytes
+// transferred excluding headers and is often, but not always, present as the
+// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
+// header. For requests using transport encoding, this should be the compressed
+// size.
+func HTTPResponseContentLength(val int) attribute.KeyValue {
+	return HTTPResponseContentLengthKey.Int(val)
+}
+
+// Semantic convention describing per-message attributes populated on messaging
+// spans or links.
+const (
+	// MessagingMessageIDKey is the attribute Key conforming to the
+	// "messaging.message.id" semantic conventions. It represents a value used
+	// by the messaging system as an identifier for the message, represented as
+	// a string.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '452a7c7c7c7048c2f887f61572b18fc2'
+	MessagingMessageIDKey = attribute.Key("messaging.message.id")
+
+	// MessagingMessageConversationIDKey is the attribute Key conforming to the
+	// "messaging.message.conversation_id" semantic conventions. It represents
+	// the [conversation ID](#conversations) identifying the conversation to
+	// which the message belongs, represented as a string. Sometimes called
+	// "Correlation ID".
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'MyConversationID'
+	MessagingMessageConversationIDKey = attribute.Key("messaging.message.conversation_id")
+
+	// MessagingMessagePayloadSizeBytesKey is the attribute Key conforming to
+	// the "messaging.message.payload_size_bytes" semantic conventions. It
+	// represents the (uncompressed) size of the message payload in bytes. Also
+	// use this attribute if it is unknown whether the compressed or
+	// uncompressed payload size is reported.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 2738
+	MessagingMessagePayloadSizeBytesKey = attribute.Key("messaging.message.payload_size_bytes")
+
+	// MessagingMessagePayloadCompressedSizeBytesKey is the attribute Key
+	// conforming to the "messaging.message.payload_compressed_size_bytes"
+	// semantic conventions. It represents the compressed size of the message
+	// payload in bytes.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 2048
+	MessagingMessagePayloadCompressedSizeBytesKey = attribute.Key("messaging.message.payload_compressed_size_bytes")
+)
+
+// MessagingMessageID returns an attribute KeyValue conforming to the
+// "messaging.message.id" semantic conventions. It represents a value used by
+// the messaging system as an identifier for the message, represented as a
+// string.
+func MessagingMessageID(val string) attribute.KeyValue {
+	return MessagingMessageIDKey.String(val)
+}
+
+// MessagingMessageConversationID returns an attribute KeyValue conforming
+// to the "messaging.message.conversation_id" semantic conventions. It
+// represents the [conversation ID](#conversations) identifying the
+// conversation to which the message belongs, represented as a string.
+// Sometimes called "Correlation ID".
+func MessagingMessageConversationID(val string) attribute.KeyValue {
+	return MessagingMessageConversationIDKey.String(val)
+}
+
+// MessagingMessagePayloadSizeBytes returns an attribute KeyValue conforming
+// to the "messaging.message.payload_size_bytes" semantic conventions. It
+// represents the (uncompressed) size of the message payload in bytes. Also use
+// this attribute if it is unknown whether the compressed or uncompressed
+// payload size is reported.
+func MessagingMessagePayloadSizeBytes(val int) attribute.KeyValue {
+	return MessagingMessagePayloadSizeBytesKey.Int(val)
+}
+
+// MessagingMessagePayloadCompressedSizeBytes returns an attribute KeyValue
+// conforming to the "messaging.message.payload_compressed_size_bytes" semantic
+// conventions. It represents the compressed size of the message payload in
+// bytes.
+func MessagingMessagePayloadCompressedSizeBytes(val int) attribute.KeyValue {
+	return MessagingMessagePayloadCompressedSizeBytesKey.Int(val)
+}
+
+// Semantic convention for attributes that describe messaging destination on
+// broker
+const (
+	// MessagingDestinationNameKey is the attribute Key conforming to the
+	// "messaging.destination.name" semantic conventions. It represents the
+	// message destination name
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'MyQueue', 'MyTopic'
+	// Note: Destination name SHOULD uniquely identify a specific queue, topic
+	// or other entity within the broker. If
+	// the broker does not have such notion, the destination name SHOULD
+	// uniquely identify the broker.
+	MessagingDestinationNameKey = attribute.Key("messaging.destination.name")
+
+	// MessagingDestinationTemplateKey is the attribute Key conforming to the
+	// "messaging.destination.template" semantic conventions. It represents the
+	// low cardinality representation of the messaging destination name
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '/customers/{customerID}'
+	// Note: Destination names could be constructed from templates. An example
+	// would be a destination name involving a user name or product id.
+	// Although the destination name in this case is of high cardinality, the
+	// underlying template is of low cardinality and can be effectively used
+	// for grouping and aggregation.
+	MessagingDestinationTemplateKey = attribute.Key("messaging.destination.template")
+
+	// MessagingDestinationTemporaryKey is the attribute Key conforming to the
+	// "messaging.destination.temporary" semantic conventions. It represents a
+	// boolean that is true if the message destination is temporary and might
+	// not exist anymore after messages are processed.
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: stable
+	MessagingDestinationTemporaryKey = attribute.Key("messaging.destination.temporary")
+
+	// MessagingDestinationAnonymousKey is the attribute Key conforming to the
+	// "messaging.destination.anonymous" semantic conventions. It represents a
+	// boolean that is true if the message destination is anonymous (could be
+	// unnamed or have auto-generated name).
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: stable
+	MessagingDestinationAnonymousKey = attribute.Key("messaging.destination.anonymous")
+)
+
+// MessagingDestinationName returns an attribute KeyValue conforming to the
+// "messaging.destination.name" semantic conventions. It represents the message
+// destination name
+func MessagingDestinationName(val string) attribute.KeyValue {
+	return MessagingDestinationNameKey.String(val)
+}
+
+// MessagingDestinationTemplate returns an attribute KeyValue conforming to
+// the "messaging.destination.template" semantic conventions. It represents the
+// low cardinality representation of the messaging destination name
+func MessagingDestinationTemplate(val string) attribute.KeyValue {
+	return MessagingDestinationTemplateKey.String(val)
+}
+
+// MessagingDestinationTemporary returns an attribute KeyValue conforming to
+// the "messaging.destination.temporary" semantic conventions. It represents a
+// boolean that is true if the message destination is temporary and might not
+// exist anymore after messages are processed.
+func MessagingDestinationTemporary(val bool) attribute.KeyValue {
+	return MessagingDestinationTemporaryKey.Bool(val)
+}
+
+// MessagingDestinationAnonymous returns an attribute KeyValue conforming to
+// the "messaging.destination.anonymous" semantic conventions. It represents a
+// boolean that is true if the message destination is anonymous (could be
+// unnamed or have auto-generated name).
+func MessagingDestinationAnonymous(val bool) attribute.KeyValue {
+	return MessagingDestinationAnonymousKey.Bool(val)
+}
+
+// Semantic convention for attributes that describe messaging source on broker
+const (
+	// MessagingSourceNameKey is the attribute Key conforming to the
+	// "messaging.source.name" semantic conventions. It represents the message
+	// source name
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'MyQueue', 'MyTopic'
+	// Note: Source name SHOULD uniquely identify a specific queue, topic, or
+	// other entity within the broker. If
+	// the broker does not have such notion, the source name SHOULD uniquely
+	// identify the broker.
+	MessagingSourceNameKey = attribute.Key("messaging.source.name")
+
+	// MessagingSourceTemplateKey is the attribute Key conforming to the
+	// "messaging.source.template" semantic conventions. It represents the low
+	// cardinality representation of the messaging source name
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '/customers/{customerID}'
+	// Note: Source names could be constructed from templates. An example would
+	// be a source name involving a user name or product id. Although the
+	// source name in this case is of high cardinality, the underlying template
+	// is of low cardinality and can be effectively used for grouping and
+	// aggregation.
+	MessagingSourceTemplateKey = attribute.Key("messaging.source.template")
+
+	// MessagingSourceTemporaryKey is the attribute Key conforming to the
+	// "messaging.source.temporary" semantic conventions. It represents a
+	// boolean that is true if the message source is temporary and might not
+	// exist anymore after messages are processed.
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: stable
+	MessagingSourceTemporaryKey = attribute.Key("messaging.source.temporary")
+
+	// MessagingSourceAnonymousKey is the attribute Key conforming to the
+	// "messaging.source.anonymous" semantic conventions. It represents a
+	// boolean that is true if the message source is anonymous (could be
+	// unnamed or have auto-generated name).
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: stable
+	MessagingSourceAnonymousKey = attribute.Key("messaging.source.anonymous")
+)
+
+// MessagingSourceName returns an attribute KeyValue conforming to the
+// "messaging.source.name" semantic conventions. It represents the message
+// source name
+func MessagingSourceName(val string) attribute.KeyValue {
+	return MessagingSourceNameKey.String(val)
+}
+
+// MessagingSourceTemplate returns an attribute KeyValue conforming to the
+// "messaging.source.template" semantic conventions. It represents the low
+// cardinality representation of the messaging source name
+func MessagingSourceTemplate(val string) attribute.KeyValue {
+	return MessagingSourceTemplateKey.String(val)
+}
+
+// MessagingSourceTemporary returns an attribute KeyValue conforming to the
+// "messaging.source.temporary" semantic conventions. It represents a boolean
+// that is true if the message source is temporary and might not exist anymore
+// after messages are processed.
+func MessagingSourceTemporary(val bool) attribute.KeyValue {
+	return MessagingSourceTemporaryKey.Bool(val)
+}
+
+// MessagingSourceAnonymous returns an attribute KeyValue conforming to the
+// "messaging.source.anonymous" semantic conventions. It represents a boolean
+// that is true if the message source is anonymous (could be unnamed or have
+// auto-generated name).
+func MessagingSourceAnonymous(val bool) attribute.KeyValue {
+	return MessagingSourceAnonymousKey.Bool(val)
+}
+
+// Attributes for RabbitMQ
+const (
+	// MessagingRabbitmqDestinationRoutingKeyKey is the attribute Key
+	// conforming to the "messaging.rabbitmq.destination.routing_key" semantic
+	// conventions. It represents the rabbitMQ message routing key.
+	//
+	// Type: string
+	// RequirementLevel: ConditionallyRequired (If not empty.)
+	// Stability: stable
+	// Examples: 'myKey'
+	MessagingRabbitmqDestinationRoutingKeyKey = attribute.Key("messaging.rabbitmq.destination.routing_key")
+)
+
+// MessagingRabbitmqDestinationRoutingKey returns an attribute KeyValue
+// conforming to the "messaging.rabbitmq.destination.routing_key" semantic
+// conventions. It represents the rabbitMQ message routing key.
+func MessagingRabbitmqDestinationRoutingKey(val string) attribute.KeyValue {
+	return MessagingRabbitmqDestinationRoutingKeyKey.String(val)
+}
+
+// Attributes for Apache Kafka
+const (
+	// MessagingKafkaMessageKeyKey is the attribute Key conforming to the
+	// "messaging.kafka.message.key" semantic conventions. It represents the
+	// message keys in Kafka are used for grouping alike messages to ensure
+	// they're processed on the same partition. They differ from
+	// `messaging.message.id` in that they're not unique. If the key is `null`,
+	// the attribute MUST NOT be set.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'myKey'
+	// Note: If the key type is not string, it's string representation has to
+	// be supplied for the attribute. If the key has no unambiguous, canonical
+	// string form, don't include its value.
+	MessagingKafkaMessageKeyKey = attribute.Key("messaging.kafka.message.key")
+
+	// MessagingKafkaConsumerGroupKey is the attribute Key conforming to the
+	// "messaging.kafka.consumer.group" semantic conventions. It represents the
+	// name of the Kafka Consumer Group that is handling the message. Only
+	// applies to consumers, not producers.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'my-group'
+	MessagingKafkaConsumerGroupKey = attribute.Key("messaging.kafka.consumer.group")
+
+	// MessagingKafkaClientIDKey is the attribute Key conforming to the
+	// "messaging.kafka.client_id" semantic conventions. It represents the
+	// client ID for the Consumer or Producer that is handling the message.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'client-5'
+	MessagingKafkaClientIDKey = attribute.Key("messaging.kafka.client_id")
+
+	// MessagingKafkaDestinationPartitionKey is the attribute Key conforming to
+	// the "messaging.kafka.destination.partition" semantic conventions. It
+	// represents the partition the message is sent to.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 2
+	MessagingKafkaDestinationPartitionKey = attribute.Key("messaging.kafka.destination.partition")
+
+	// MessagingKafkaSourcePartitionKey is the attribute Key conforming to the
+	// "messaging.kafka.source.partition" semantic conventions. It represents
+	// the partition the message is received from.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 2
+	MessagingKafkaSourcePartitionKey = attribute.Key("messaging.kafka.source.partition")
+
+	// MessagingKafkaMessageOffsetKey is the attribute Key conforming to the
+	// "messaging.kafka.message.offset" semantic conventions. It represents the
+	// offset of a record in the corresponding Kafka partition.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 42
+	MessagingKafkaMessageOffsetKey = attribute.Key("messaging.kafka.message.offset")
+
+	// MessagingKafkaMessageTombstoneKey is the attribute Key conforming to the
+	// "messaging.kafka.message.tombstone" semantic conventions. It represents
+	// a boolean that is true if the message is a tombstone.
+	//
+	// Type: boolean
+	// RequirementLevel: ConditionallyRequired (If value is `true`. When
+	// missing, the value is assumed to be `false`.)
+	// Stability: stable
+	MessagingKafkaMessageTombstoneKey = attribute.Key("messaging.kafka.message.tombstone")
+)
+
+// MessagingKafkaMessageKey returns an attribute KeyValue conforming to the
+// "messaging.kafka.message.key" semantic conventions. It represents the
+// message keys in Kafka are used for grouping alike messages to ensure they're
+// processed on the same partition. They differ from `messaging.message.id` in
+// that they're not unique. If the key is `null`, the attribute MUST NOT be
+// set.
+func MessagingKafkaMessageKey(val string) attribute.KeyValue {
+	return MessagingKafkaMessageKeyKey.String(val)
+}
+
+// MessagingKafkaConsumerGroup returns an attribute KeyValue conforming to
+// the "messaging.kafka.consumer.group" semantic conventions. It represents the
+// name of the Kafka Consumer Group that is handling the message. Only applies
+// to consumers, not producers.
+func MessagingKafkaConsumerGroup(val string) attribute.KeyValue {
+	return MessagingKafkaConsumerGroupKey.String(val)
+}
+
+// MessagingKafkaClientID returns an attribute KeyValue conforming to the
+// "messaging.kafka.client_id" semantic conventions. It represents the client
+// ID for the Consumer or Producer that is handling the message.
+func MessagingKafkaClientID(val string) attribute.KeyValue {
+	return MessagingKafkaClientIDKey.String(val)
+}
+
+// MessagingKafkaDestinationPartition returns an attribute KeyValue
+// conforming to the "messaging.kafka.destination.partition" semantic
+// conventions. It represents the partition the message is sent to.
+func MessagingKafkaDestinationPartition(val int) attribute.KeyValue {
+	return MessagingKafkaDestinationPartitionKey.Int(val)
+}
+
+// MessagingKafkaSourcePartition returns an attribute KeyValue conforming to
+// the "messaging.kafka.source.partition" semantic conventions. It represents
+// the partition the message is received from.
+func MessagingKafkaSourcePartition(val int) attribute.KeyValue {
+	return MessagingKafkaSourcePartitionKey.Int(val)
+}
+
+// MessagingKafkaMessageOffset returns an attribute KeyValue conforming to
+// the "messaging.kafka.message.offset" semantic conventions. It represents the
+// offset of a record in the corresponding Kafka partition.
+func MessagingKafkaMessageOffset(val int) attribute.KeyValue {
+	return MessagingKafkaMessageOffsetKey.Int(val)
+}
+
+// MessagingKafkaMessageTombstone returns an attribute KeyValue conforming
+// to the "messaging.kafka.message.tombstone" semantic conventions. It
+// represents a boolean that is true if the message is a tombstone.
+func MessagingKafkaMessageTombstone(val bool) attribute.KeyValue {
+	return MessagingKafkaMessageTombstoneKey.Bool(val)
+}
+
+// Attributes for Apache RocketMQ
+const (
+	// MessagingRocketmqNamespaceKey is the attribute Key conforming to the
+	// "messaging.rocketmq.namespace" semantic conventions. It represents the
+	// namespace of RocketMQ resources, resources in different namespaces are
+	// individual.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: stable
+	// Examples: 'myNamespace'
+	MessagingRocketmqNamespaceKey = attribute.Key("messaging.rocketmq.namespace")
+
+	// MessagingRocketmqClientGroupKey is the attribute Key conforming to the
+	// "messaging.rocketmq.client_group" semantic conventions. It represents
+	// the name of the RocketMQ producer/consumer group that is handling the
+	// message. The client type is identified by the SpanKind.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: stable
+	// Examples: 'myConsumerGroup'
+	MessagingRocketmqClientGroupKey = attribute.Key("messaging.rocketmq.client_group")
+
+	// MessagingRocketmqClientIDKey is the attribute Key conforming to the
+	// "messaging.rocketmq.client_id" semantic conventions. It represents the
+	// unique identifier for each client.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: stable
+	// Examples: 'myhost@8742@s8083jm'
+	MessagingRocketmqClientIDKey = attribute.Key("messaging.rocketmq.client_id")
+
+	// MessagingRocketmqMessageDeliveryTimestampKey is the attribute Key
+	// conforming to the "messaging.rocketmq.message.delivery_timestamp"
+	// semantic conventions. It represents the timestamp in milliseconds that
+	// the delay message is expected to be delivered to consumer.
+	//
+	// Type: int
+	// RequirementLevel: ConditionallyRequired (If the message type is delay
+	// and delay time level is not specified.)
+	// Stability: stable
+	// Examples: 1665987217045
+	MessagingRocketmqMessageDeliveryTimestampKey = attribute.Key("messaging.rocketmq.message.delivery_timestamp")
+
+	// MessagingRocketmqMessageDelayTimeLevelKey is the attribute Key
+	// conforming to the "messaging.rocketmq.message.delay_time_level" semantic
+	// conventions. It represents the delay time level for delay message, which
+	// determines the message delay time.
+	//
+	// Type: int
+	// RequirementLevel: ConditionallyRequired (If the message type is delay
+	// and delivery timestamp is not specified.)
+	// Stability: stable
+	// Examples: 3
+	MessagingRocketmqMessageDelayTimeLevelKey = attribute.Key("messaging.rocketmq.message.delay_time_level")
+
+	// MessagingRocketmqMessageGroupKey is the attribute Key conforming to the
+	// "messaging.rocketmq.message.group" semantic conventions. It represents
+	// the it is essential for FIFO message. Messages that belong to the same
+	// message group are always processed one by one within the same consumer
+	// group.
+	//
+	// Type: string
+	// RequirementLevel: ConditionallyRequired (If the message type is FIFO.)
+	// Stability: stable
+	// Examples: 'myMessageGroup'
+	MessagingRocketmqMessageGroupKey = attribute.Key("messaging.rocketmq.message.group")
+
+	// MessagingRocketmqMessageTypeKey is the attribute Key conforming to the
+	// "messaging.rocketmq.message.type" semantic conventions. It represents
+	// the type of message.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: stable
+	MessagingRocketmqMessageTypeKey = attribute.Key("messaging.rocketmq.message.type")
+
+	// MessagingRocketmqMessageTagKey is the attribute Key conforming to the
+	// "messaging.rocketmq.message.tag" semantic conventions. It represents the
+	// secondary classifier of message besides topic.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'tagA'
+	MessagingRocketmqMessageTagKey = attribute.Key("messaging.rocketmq.message.tag")
+
+	// MessagingRocketmqMessageKeysKey is the attribute Key conforming to the
+	// "messaging.rocketmq.message.keys" semantic conventions. It represents
+	// the key(s) of message, another way to mark message besides message id.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'keyA', 'keyB'
+	MessagingRocketmqMessageKeysKey = attribute.Key("messaging.rocketmq.message.keys")
+
+	// MessagingRocketmqConsumptionModelKey is the attribute Key conforming to
+	// the "messaging.rocketmq.consumption_model" semantic conventions. It
+	// represents the model of message consumption. This only applies to
+	// consumer spans.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: stable
+	MessagingRocketmqConsumptionModelKey = attribute.Key("messaging.rocketmq.consumption_model")
+)
+
+var (
+	// Normal message
+	MessagingRocketmqMessageTypeNormal = MessagingRocketmqMessageTypeKey.String("normal")
+	// FIFO message
+	MessagingRocketmqMessageTypeFifo = MessagingRocketmqMessageTypeKey.String("fifo")
+	// Delay message
+	MessagingRocketmqMessageTypeDelay = MessagingRocketmqMessageTypeKey.String("delay")
+	// Transaction message
+	MessagingRocketmqMessageTypeTransaction = MessagingRocketmqMessageTypeKey.String("transaction")
+)
+
+var (
+	// Clustering consumption model
+	MessagingRocketmqConsumptionModelClustering = MessagingRocketmqConsumptionModelKey.String("clustering")
+	// Broadcasting consumption model
+	MessagingRocketmqConsumptionModelBroadcasting = MessagingRocketmqConsumptionModelKey.String("broadcasting")
+)
+
+// MessagingRocketmqNamespace returns an attribute KeyValue conforming to
+// the "messaging.rocketmq.namespace" semantic conventions. It represents the
+// namespace of RocketMQ resources, resources in different namespaces are
+// individual.
+func MessagingRocketmqNamespace(val string) attribute.KeyValue {
+	return MessagingRocketmqNamespaceKey.String(val)
+}
+
+// MessagingRocketmqClientGroup returns an attribute KeyValue conforming to
+// the "messaging.rocketmq.client_group" semantic conventions. It represents
+// the name of the RocketMQ producer/consumer group that is handling the
+// message. The client type is identified by the SpanKind.
+func MessagingRocketmqClientGroup(val string) attribute.KeyValue {
+	return MessagingRocketmqClientGroupKey.String(val)
+}
+
+// MessagingRocketmqClientID returns an attribute KeyValue conforming to the
+// "messaging.rocketmq.client_id" semantic conventions. It represents the
+// unique identifier for each client.
+func MessagingRocketmqClientID(val string) attribute.KeyValue {
+	return MessagingRocketmqClientIDKey.String(val)
+}
+
+// MessagingRocketmqMessageDeliveryTimestamp returns an attribute KeyValue
+// conforming to the "messaging.rocketmq.message.delivery_timestamp" semantic
+// conventions. It represents the timestamp in milliseconds that the delay
+// message is expected to be delivered to consumer.
+func MessagingRocketmqMessageDeliveryTimestamp(val int) attribute.KeyValue {
+	return MessagingRocketmqMessageDeliveryTimestampKey.Int(val)
+}
+
+// MessagingRocketmqMessageDelayTimeLevel returns an attribute KeyValue
+// conforming to the "messaging.rocketmq.message.delay_time_level" semantic
+// conventions. It represents the delay time level for delay message, which
+// determines the message delay time.
+func MessagingRocketmqMessageDelayTimeLevel(val int) attribute.KeyValue {
+	return MessagingRocketmqMessageDelayTimeLevelKey.Int(val)
+}
+
+// MessagingRocketmqMessageGroup returns an attribute KeyValue conforming to
+// the "messaging.rocketmq.message.group" semantic conventions. It represents
+// the it is essential for FIFO message. Messages that belong to the same
+// message group are always processed one by one within the same consumer
+// group.
+func MessagingRocketmqMessageGroup(val string) attribute.KeyValue {
+	return MessagingRocketmqMessageGroupKey.String(val)
+}
+
+// MessagingRocketmqMessageTag returns an attribute KeyValue conforming to
+// the "messaging.rocketmq.message.tag" semantic conventions. It represents the
+// secondary classifier of message besides topic.
+func MessagingRocketmqMessageTag(val string) attribute.KeyValue {
+	return MessagingRocketmqMessageTagKey.String(val)
+}
+
+// MessagingRocketmqMessageKeys returns an attribute KeyValue conforming to
+// the "messaging.rocketmq.message.keys" semantic conventions. It represents
+// the key(s) of message, another way to mark message besides message id.
+func MessagingRocketmqMessageKeys(val ...string) attribute.KeyValue {
+	return MessagingRocketmqMessageKeysKey.StringSlice(val)
+}
+
+// Describes user-agent attributes.
+const (
+	// UserAgentOriginalKey is the attribute Key conforming to the
+	// "user_agent.original" semantic conventions. It represents the value of
+	// the [HTTP
+	// User-Agent](https://www.rfc-editor.org/rfc/rfc9110.html#field.user-agent)
+	// header sent by the client.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'CERN-LineMode/2.15 libwww/2.17b3'
+	UserAgentOriginalKey = attribute.Key("user_agent.original")
+)
+
+// UserAgentOriginal returns an attribute KeyValue conforming to the
+// "user_agent.original" semantic conventions. It represents the value of the
+// [HTTP
+// User-Agent](https://www.rfc-editor.org/rfc/rfc9110.html#field.user-agent)
+// header sent by the client.
+func UserAgentOriginal(val string) attribute.KeyValue {
+	return UserAgentOriginalKey.String(val)
+}
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/doc.go b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/doc.go
similarity index 85%
rename from vendor/go.opentelemetry.io/otel/semconv/v1.17.0/doc.go
rename to vendor/go.opentelemetry.io/otel/semconv/v1.20.0/doc.go
index 71a1f7748d5..359c5a69624 100644
--- a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/doc.go
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/doc.go
@@ -16,5 +16,5 @@
 //
 // OpenTelemetry semantic conventions are agreed standardized naming
 // patterns for OpenTelemetry things. This package represents the conventions
-// as of the v1.17.0 version of the OpenTelemetry specification.
-package semconv // import "go.opentelemetry.io/otel/semconv/v1.17.0"
+// as of the v1.20.0 version of the OpenTelemetry specification.
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.20.0"
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/event.go b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/event.go
similarity index 99%
rename from vendor/go.opentelemetry.io/otel/semconv/v1.17.0/event.go
rename to vendor/go.opentelemetry.io/otel/semconv/v1.20.0/event.go
index 679c40c4de4..8ac9350d2b2 100644
--- a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/event.go
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/event.go
@@ -14,7 +14,7 @@
 
 // Code generated from semantic convention specification. DO NOT EDIT.
 
-package semconv // import "go.opentelemetry.io/otel/semconv/v1.17.0"
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.20.0"
 
 import "go.opentelemetry.io/otel/attribute"
 
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/exception.go b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/exception.go
similarity index 91%
rename from vendor/go.opentelemetry.io/otel/semconv/v1.17.0/exception.go
rename to vendor/go.opentelemetry.io/otel/semconv/v1.20.0/exception.go
index 9b8c559de42..09ff4dfdbf7 100644
--- a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/exception.go
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/exception.go
@@ -12,7 +12,7 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
-package semconv // import "go.opentelemetry.io/otel/semconv/v1.17.0"
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.20.0"
 
 const (
 	// ExceptionEventName is the name of the Span event representing an exception.
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/http.go b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/http.go
similarity index 91%
rename from vendor/go.opentelemetry.io/otel/semconv/v1.17.0/http.go
rename to vendor/go.opentelemetry.io/otel/semconv/v1.20.0/http.go
index d5c4b5c136a..342aede95f1 100644
--- a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/http.go
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/http.go
@@ -12,7 +12,7 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
-package semconv // import "go.opentelemetry.io/otel/semconv/v1.17.0"
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.20.0"
 
 // HTTP scheme attributes.
 var (
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/resource.go b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/resource.go
similarity index 92%
rename from vendor/go.opentelemetry.io/otel/semconv/v1.17.0/resource.go
rename to vendor/go.opentelemetry.io/otel/semconv/v1.20.0/resource.go
index 39a2eab3a6a..a2b906742a8 100644
--- a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/resource.go
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/resource.go
@@ -14,7 +14,7 @@
 
 // Code generated from semantic convention specification. DO NOT EDIT.
 
-package semconv // import "go.opentelemetry.io/otel/semconv/v1.17.0"
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.20.0"
 
 import "go.opentelemetry.io/otel/attribute"
 
@@ -71,22 +71,6 @@ const (
 	// SHOULD be left unset.
 	BrowserMobileKey = attribute.Key("browser.mobile")
 
-	// BrowserUserAgentKey is the attribute Key conforming to the
-	// "browser.user_agent" semantic conventions. It represents the full
-	// user-agent string provided by the browser
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)
-	// AppleWebKit/537.36 (KHTML, '
-	//  'like Gecko) Chrome/95.0.4638.54 Safari/537.36'
-	// Note: The user-agent value SHOULD be provided only from browsers that do
-	// not have a mechanism to retrieve brands and platform individually from
-	// the User-Agent Client Hints API. To retrieve the value, the legacy
-	// `navigator.userAgent` API can be used.
-	BrowserUserAgentKey = attribute.Key("browser.user_agent")
-
 	// BrowserLanguageKey is the attribute Key conforming to the
 	// "browser.language" semantic conventions. It represents the preferred
 	// language of the user using the browser
@@ -121,13 +105,6 @@ func BrowserMobile(val bool) attribute.KeyValue {
 	return BrowserMobileKey.Bool(val)
 }
 
-// BrowserUserAgent returns an attribute KeyValue conforming to the
-// "browser.user_agent" semantic conventions. It represents the full user-agent
-// string provided by the browser
-func BrowserUserAgent(val string) attribute.KeyValue {
-	return BrowserUserAgentKey.String(val)
-}
-
 // BrowserLanguage returns an attribute KeyValue conforming to the
 // "browser.language" semantic conventions. It represents the preferred
 // language of the user using the browser
@@ -171,9 +148,56 @@ const (
 	// regions](https://azure.microsoft.com/en-us/global-infrastructure/geographies/),
 	// [Google Cloud regions](https://cloud.google.com/about/locations), or
 	// [Tencent Cloud
-	// regions](https://intl.cloud.tencent.com/document/product/213/6091).
+	// regions](https://www.tencentcloud.com/document/product/213/6091).
 	CloudRegionKey = attribute.Key("cloud.region")
 
+	// CloudResourceIDKey is the attribute Key conforming to the
+	// "cloud.resource_id" semantic conventions. It represents the cloud
+	// provider-specific native identifier of the monitored cloud resource
+	// (e.g. an
+	// [ARN](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html)
+	// on AWS, a [fully qualified resource
+	// ID](https://learn.microsoft.com/en-us/rest/api/resources/resources/get-by-id)
+	// on Azure, a [full resource
+	// name](https://cloud.google.com/apis/design/resource_names#full_resource_name)
+	// on GCP)
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'arn:aws:lambda:REGION:ACCOUNT_ID:function:my-function',
+	// '//run.googleapis.com/projects/PROJECT_ID/locations/LOCATION_ID/services/SERVICE_ID',
+	// '/subscriptions/<SUBSCIPTION_GUID>/resourceGroups/<RG>/providers/Microsoft.Web/sites/<FUNCAPP>/functions/<FUNC>'
+	// Note: On some cloud providers, it may not be possible to determine the
+	// full ID at startup,
+	// so it may be necessary to set `cloud.resource_id` as a span attribute
+	// instead.
+	//
+	// The exact value to use for `cloud.resource_id` depends on the cloud
+	// provider.
+	// The following well-known definitions MUST be used if you set this
+	// attribute and they apply:
+	//
+	// * **AWS Lambda:** The function
+	// [ARN](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html).
+	//   Take care not to use the "invoked ARN" directly but replace any
+	//   [alias
+	// suffix](https://docs.aws.amazon.com/lambda/latest/dg/configuration-aliases.html)
+	//   with the resolved function version, as the same runtime instance may
+	// be invokable with
+	//   multiple different aliases.
+	// * **GCP:** The [URI of the
+	// resource](https://cloud.google.com/iam/docs/full-resource-names)
+	// * **Azure:** The [Fully Qualified Resource
+	// ID](https://docs.microsoft.com/en-us/rest/api/resources/resources/get-by-id)
+	// of the invoked function,
+	//   *not* the function app, having the form
+	// `/subscriptions/<SUBSCIPTION_GUID>/resourceGroups/<RG>/providers/Microsoft.Web/sites/<FUNCAPP>/functions/<FUNC>`.
+	//   This means that a span attribute MUST be used, as an Azure function
+	// app can host multiple functions that would usually share
+	//   a TracerProvider.
+	CloudResourceIDKey = attribute.Key("cloud.resource_id")
+
 	// CloudAvailabilityZoneKey is the attribute Key conforming to the
 	// "cloud.availability_zone" semantic conventions. It represents the cloud
 	// regions often have multiple, isolated locations known as zones to
@@ -208,6 +232,8 @@ var (
 	CloudProviderAzure = CloudProviderKey.String("azure")
 	// Google Cloud Platform
 	CloudProviderGCP = CloudProviderKey.String("gcp")
+	// Heroku Platform as a Service
+	CloudProviderHeroku = CloudProviderKey.String("heroku")
 	// IBM Cloud
 	CloudProviderIbmCloud = CloudProviderKey.String("ibm_cloud")
 	// Tencent Cloud
@@ -258,7 +284,7 @@ var (
 	// Google Cloud App Engine (GAE)
 	CloudPlatformGCPAppEngine = CloudPlatformKey.String("gcp_app_engine")
 	// Red Hat OpenShift on Google Cloud
-	CloudPlatformGoogleCloudOpenshift = CloudPlatformKey.String("google_cloud_openshift")
+	CloudPlatformGCPOpenshift = CloudPlatformKey.String("gcp_openshift")
 	// Red Hat OpenShift on IBM Cloud
 	CloudPlatformIbmCloudOpenshift = CloudPlatformKey.String("ibm_cloud_openshift")
 	// Tencent Cloud Cloud Virtual Machine (CVM)
@@ -283,6 +309,19 @@ func CloudRegion(val string) attribute.KeyValue {
 	return CloudRegionKey.String(val)
 }
 
+// CloudResourceID returns an attribute KeyValue conforming to the
+// "cloud.resource_id" semantic conventions. It represents the cloud
+// provider-specific native identifier of the monitored cloud resource (e.g. an
+// [ARN](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html)
+// on AWS, a [fully qualified resource
+// ID](https://learn.microsoft.com/en-us/rest/api/resources/resources/get-by-id)
+// on Azure, a [full resource
+// name](https://cloud.google.com/apis/design/resource_names#full_resource_name)
+// on GCP)
+func CloudResourceID(val string) attribute.KeyValue {
+	return CloudResourceIDKey.String(val)
+}
+
 // CloudAvailabilityZone returns an attribute KeyValue conforming to the
 // "cloud.availability_zone" semantic conventions. It represents the cloud
 // regions often have multiple, isolated locations known as zones to increase
@@ -506,6 +545,60 @@ func AWSLogStreamARNs(val ...string) attribute.KeyValue {
 	return AWSLogStreamARNsKey.StringSlice(val)
 }
 
+// Heroku dyno metadata
+const (
+	// HerokuReleaseCreationTimestampKey is the attribute Key conforming to the
+	// "heroku.release.creation_timestamp" semantic conventions. It represents
+	// the time and date the release was created
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '2022-10-23T18:00:42Z'
+	HerokuReleaseCreationTimestampKey = attribute.Key("heroku.release.creation_timestamp")
+
+	// HerokuReleaseCommitKey is the attribute Key conforming to the
+	// "heroku.release.commit" semantic conventions. It represents the commit
+	// hash for the current release
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'e6134959463efd8966b20e75b913cafe3f5ec'
+	HerokuReleaseCommitKey = attribute.Key("heroku.release.commit")
+
+	// HerokuAppIDKey is the attribute Key conforming to the "heroku.app.id"
+	// semantic conventions. It represents the unique identifier for the
+	// application
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '2daa2797-e42b-4624-9322-ec3f968df4da'
+	HerokuAppIDKey = attribute.Key("heroku.app.id")
+)
+
+// HerokuReleaseCreationTimestamp returns an attribute KeyValue conforming
+// to the "heroku.release.creation_timestamp" semantic conventions. It
+// represents the time and date the release was created
+func HerokuReleaseCreationTimestamp(val string) attribute.KeyValue {
+	return HerokuReleaseCreationTimestampKey.String(val)
+}
+
+// HerokuReleaseCommit returns an attribute KeyValue conforming to the
+// "heroku.release.commit" semantic conventions. It represents the commit hash
+// for the current release
+func HerokuReleaseCommit(val string) attribute.KeyValue {
+	return HerokuReleaseCommitKey.String(val)
+}
+
+// HerokuAppID returns an attribute KeyValue conforming to the
+// "heroku.app.id" semantic conventions. It represents the unique identifier
+// for the application
+func HerokuAppID(val string) attribute.KeyValue {
+	return HerokuAppIDKey.String(val)
+}
+
 // A container instance.
 const (
 	// ContainerNameKey is the attribute Key conforming to the "container.name"
@@ -741,43 +834,9 @@ const (
 	//   can also be seen in the resource JSON for the function).
 	//   This means that a span attribute MUST be used, as an Azure function
 	//   app can host multiple functions that would usually share
-	//   a TracerProvider (see also the `faas.id` attribute).
+	//   a TracerProvider (see also the `cloud.resource_id` attribute).
 	FaaSNameKey = attribute.Key("faas.name")
 
-	// FaaSIDKey is the attribute Key conforming to the "faas.id" semantic
-	// conventions. It represents the unique ID of the single function that
-	// this runtime instance executes.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'arn:aws:lambda:us-west-2:123456789012:function:my-function'
-	// Note: On some cloud providers, it may not be possible to determine the
-	// full ID at startup,
-	// so consider setting `faas.id` as a span attribute instead.
-	//
-	// The exact value to use for `faas.id` depends on the cloud provider:
-	//
-	// * **AWS Lambda:** The function
-	// [ARN](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html).
-	//   Take care not to use the "invoked ARN" directly but replace any
-	//   [alias
-	// suffix](https://docs.aws.amazon.com/lambda/latest/dg/configuration-aliases.html)
-	//   with the resolved function version, as the same runtime instance may
-	// be invokable with
-	//   multiple different aliases.
-	// * **GCP:** The [URI of the
-	// resource](https://cloud.google.com/iam/docs/full-resource-names)
-	// * **Azure:** The [Fully Qualified Resource
-	// ID](https://docs.microsoft.com/en-us/rest/api/resources/resources/get-by-id)
-	// of the invoked function,
-	//   *not* the function app, having the form
-	// `/subscriptions/<SUBSCIPTION_GUID>/resourceGroups/<RG>/providers/Microsoft.Web/sites/<FUNCAPP>/functions/<FUNC>`.
-	//   This means that a span attribute MUST be used, as an Azure function
-	// app can host multiple functions that would usually share
-	//   a TracerProvider.
-	FaaSIDKey = attribute.Key("faas.id")
-
 	// FaaSVersionKey is the attribute Key conforming to the "faas.version"
 	// semantic conventions. It represents the immutable version of the
 	// function being executed.
@@ -814,16 +873,17 @@ const (
 
 	// FaaSMaxMemoryKey is the attribute Key conforming to the
 	// "faas.max_memory" semantic conventions. It represents the amount of
-	// memory available to the serverless function in MiB.
+	// memory available to the serverless function converted to Bytes.
 	//
 	// Type: int
 	// RequirementLevel: Optional
 	// Stability: stable
-	// Examples: 128
+	// Examples: 134217728
 	// Note: It's recommended to set this attribute since e.g. too little
 	// memory can easily stop a Java AWS Lambda function from working
 	// correctly. On AWS Lambda, the environment variable
-	// `AWS_LAMBDA_FUNCTION_MEMORY_SIZE` provides this information.
+	// `AWS_LAMBDA_FUNCTION_MEMORY_SIZE` provides this information (which must
+	// be multiplied by 1,048,576).
 	FaaSMaxMemoryKey = attribute.Key("faas.max_memory")
 )
 
@@ -834,13 +894,6 @@ func FaaSName(val string) attribute.KeyValue {
 	return FaaSNameKey.String(val)
 }
 
-// FaaSID returns an attribute KeyValue conforming to the "faas.id" semantic
-// conventions. It represents the unique ID of the single function that this
-// runtime instance executes.
-func FaaSID(val string) attribute.KeyValue {
-	return FaaSIDKey.String(val)
-}
-
 // FaaSVersion returns an attribute KeyValue conforming to the
 // "faas.version" semantic conventions. It represents the immutable version of
 // the function being executed.
@@ -858,7 +911,7 @@ func FaaSInstance(val string) attribute.KeyValue {
 
 // FaaSMaxMemory returns an attribute KeyValue conforming to the
 // "faas.max_memory" semantic conventions. It represents the amount of memory
-// available to the serverless function in MiB.
+// available to the serverless function converted to Bytes.
 func FaaSMaxMemory(val int) attribute.KeyValue {
 	return FaaSMaxMemoryKey.Int(val)
 }
@@ -868,8 +921,8 @@ const (
 	// HostIDKey is the attribute Key conforming to the "host.id" semantic
 	// conventions. It represents the unique host ID. For Cloud, this must be
 	// the instance_id assigned by the cloud provider. For non-containerized
-	// Linux systems, the `machine-id` located in `/etc/machine-id` or
-	// `/var/lib/dbus/machine-id` may be used.
+	// systems, this should be the `machine-id`. See the table below for the
+	// sources to use to determine the `machine-id` based on operating system.
 	//
 	// Type: string
 	// RequirementLevel: Optional
@@ -960,9 +1013,9 @@ var (
 
 // HostID returns an attribute KeyValue conforming to the "host.id" semantic
 // conventions. It represents the unique host ID. For Cloud, this must be the
-// instance_id assigned by the cloud provider. For non-containerized Linux
-// systems, the `machine-id` located in `/etc/machine-id` or
-// `/var/lib/dbus/machine-id` may be used.
+// instance_id assigned by the cloud provider. For non-containerized systems,
+// this should be the `machine-id`. See the table below for the sources to use
+// to determine the `machine-id` based on operating system.
 func HostID(val string) attribute.KeyValue {
 	return HostIDKey.String(val)
 }
@@ -1706,7 +1759,17 @@ const (
 	// `unknown_service:bash`. If `process.executable.name` is not available,
 	// the value MUST be set to `unknown_service`.
 	ServiceNameKey = attribute.Key("service.name")
+)
 
+// ServiceName returns an attribute KeyValue conforming to the
+// "service.name" semantic conventions. It represents the logical name of the
+// service.
+func ServiceName(val string) attribute.KeyValue {
+	return ServiceNameKey.String(val)
+}
+
+// A service instance.
+const (
 	// ServiceNamespaceKey is the attribute Key conforming to the
 	// "service.namespace" semantic conventions. It represents a namespace for
 	// `service.name`.
@@ -1732,7 +1795,8 @@ const (
 	// Type: string
 	// RequirementLevel: Optional
 	// Stability: stable
-	// Examples: '627cc493-f310-47de-96bd-71410b7dec09'
+	// Examples: 'my-k8s-pod-deployment-1',
+	// '627cc493-f310-47de-96bd-71410b7dec09'
 	// Note: MUST be unique for each instance of the same
 	// `service.namespace,service.name` pair (in other words
 	// `service.namespace,service.name,service.instance.id` triplet MUST be
@@ -1759,13 +1823,6 @@ const (
 	ServiceVersionKey = attribute.Key("service.version")
 )
 
-// ServiceName returns an attribute KeyValue conforming to the
-// "service.name" semantic conventions. It represents the logical name of the
-// service.
-func ServiceName(val string) attribute.KeyValue {
-	return ServiceNameKey.String(val)
-}
-
 // ServiceNamespace returns an attribute KeyValue conforming to the
 // "service.namespace" semantic conventions. It represents a namespace for
 // `service.name`.
@@ -1795,7 +1852,7 @@ const (
 	// telemetry SDK as defined above.
 	//
 	// Type: string
-	// RequirementLevel: Optional
+	// RequirementLevel: Required
 	// Stability: stable
 	// Examples: 'opentelemetry'
 	TelemetrySDKNameKey = attribute.Key("telemetry.sdk.name")
@@ -1805,7 +1862,7 @@ const (
 	// language of the telemetry SDK.
 	//
 	// Type: Enum
-	// RequirementLevel: Optional
+	// RequirementLevel: Required
 	// Stability: stable
 	TelemetrySDKLanguageKey = attribute.Key("telemetry.sdk.language")
 
@@ -1814,20 +1871,10 @@ const (
 	// string of the telemetry SDK.
 	//
 	// Type: string
-	// RequirementLevel: Optional
+	// RequirementLevel: Required
 	// Stability: stable
 	// Examples: '1.2.3'
 	TelemetrySDKVersionKey = attribute.Key("telemetry.sdk.version")
-
-	// TelemetryAutoVersionKey is the attribute Key conforming to the
-	// "telemetry.auto.version" semantic conventions. It represents the version
-	// string of the auto instrumentation agent, if used.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: '1.2.3'
-	TelemetryAutoVersionKey = attribute.Key("telemetry.auto.version")
 )
 
 var (
@@ -1869,6 +1916,20 @@ func TelemetrySDKVersion(val string) attribute.KeyValue {
 	return TelemetrySDKVersionKey.String(val)
 }
 
+// The telemetry SDK used to capture data recorded by the instrumentation
+// libraries.
+const (
+	// TelemetryAutoVersionKey is the attribute Key conforming to the
+	// "telemetry.auto.version" semantic conventions. It represents the version
+	// string of the auto instrumentation agent, if used.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '1.2.3'
+	TelemetryAutoVersionKey = attribute.Key("telemetry.auto.version")
+)
+
 // TelemetryAutoVersion returns an attribute KeyValue conforming to the
 // "telemetry.auto.version" semantic conventions. It represents the version
 // string of the auto instrumentation agent, if used.
@@ -1936,7 +1997,7 @@ func WebEngineDescription(val string) attribute.KeyValue {
 // Attributes used by non-OTLP exporters to represent OpenTelemetry Scope's
 // concepts.
 const (
-	// OtelScopeNameKey is the attribute Key conforming to the
+	// OTelScopeNameKey is the attribute Key conforming to the
 	// "otel.scope.name" semantic conventions. It represents the name of the
 	// instrumentation scope - (`InstrumentationScope.Name` in OTLP).
 	//
@@ -1944,9 +2005,9 @@ const (
 	// RequirementLevel: Optional
 	// Stability: stable
 	// Examples: 'io.opentelemetry.contrib.mongodb'
-	OtelScopeNameKey = attribute.Key("otel.scope.name")
+	OTelScopeNameKey = attribute.Key("otel.scope.name")
 
-	// OtelScopeVersionKey is the attribute Key conforming to the
+	// OTelScopeVersionKey is the attribute Key conforming to the
 	// "otel.scope.version" semantic conventions. It represents the version of
 	// the instrumentation scope - (`InstrumentationScope.Version` in OTLP).
 	//
@@ -1954,27 +2015,27 @@ const (
 	// RequirementLevel: Optional
 	// Stability: stable
 	// Examples: '1.0.0'
-	OtelScopeVersionKey = attribute.Key("otel.scope.version")
+	OTelScopeVersionKey = attribute.Key("otel.scope.version")
 )
 
-// OtelScopeName returns an attribute KeyValue conforming to the
+// OTelScopeName returns an attribute KeyValue conforming to the
 // "otel.scope.name" semantic conventions. It represents the name of the
 // instrumentation scope - (`InstrumentationScope.Name` in OTLP).
-func OtelScopeName(val string) attribute.KeyValue {
-	return OtelScopeNameKey.String(val)
+func OTelScopeName(val string) attribute.KeyValue {
+	return OTelScopeNameKey.String(val)
 }
 
-// OtelScopeVersion returns an attribute KeyValue conforming to the
+// OTelScopeVersion returns an attribute KeyValue conforming to the
 // "otel.scope.version" semantic conventions. It represents the version of the
 // instrumentation scope - (`InstrumentationScope.Version` in OTLP).
-func OtelScopeVersion(val string) attribute.KeyValue {
-	return OtelScopeVersionKey.String(val)
+func OTelScopeVersion(val string) attribute.KeyValue {
+	return OTelScopeVersionKey.String(val)
 }
 
 // Span attributes used by non-OTLP exporters to represent OpenTelemetry
 // Scope's concepts.
 const (
-	// OtelLibraryNameKey is the attribute Key conforming to the
+	// OTelLibraryNameKey is the attribute Key conforming to the
 	// "otel.library.name" semantic conventions. It represents the deprecated,
 	// use the `otel.scope.name` attribute.
 	//
@@ -1982,9 +2043,9 @@ const (
 	// RequirementLevel: Optional
 	// Stability: deprecated
 	// Examples: 'io.opentelemetry.contrib.mongodb'
-	OtelLibraryNameKey = attribute.Key("otel.library.name")
+	OTelLibraryNameKey = attribute.Key("otel.library.name")
 
-	// OtelLibraryVersionKey is the attribute Key conforming to the
+	// OTelLibraryVersionKey is the attribute Key conforming to the
 	// "otel.library.version" semantic conventions. It represents the
 	// deprecated, use the `otel.scope.version` attribute.
 	//
@@ -1992,19 +2053,19 @@ const (
 	// RequirementLevel: Optional
 	// Stability: deprecated
 	// Examples: '1.0.0'
-	OtelLibraryVersionKey = attribute.Key("otel.library.version")
+	OTelLibraryVersionKey = attribute.Key("otel.library.version")
 )
 
-// OtelLibraryName returns an attribute KeyValue conforming to the
+// OTelLibraryName returns an attribute KeyValue conforming to the
 // "otel.library.name" semantic conventions. It represents the deprecated, use
 // the `otel.scope.name` attribute.
-func OtelLibraryName(val string) attribute.KeyValue {
-	return OtelLibraryNameKey.String(val)
+func OTelLibraryName(val string) attribute.KeyValue {
+	return OTelLibraryNameKey.String(val)
 }
 
-// OtelLibraryVersion returns an attribute KeyValue conforming to the
+// OTelLibraryVersion returns an attribute KeyValue conforming to the
 // "otel.library.version" semantic conventions. It represents the deprecated,
 // use the `otel.scope.version` attribute.
-func OtelLibraryVersion(val string) attribute.KeyValue {
-	return OtelLibraryVersionKey.String(val)
+func OTelLibraryVersion(val string) attribute.KeyValue {
+	return OTelLibraryVersionKey.String(val)
 }
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/schema.go b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/schema.go
similarity index 86%
rename from vendor/go.opentelemetry.io/otel/semconv/v1.17.0/schema.go
rename to vendor/go.opentelemetry.io/otel/semconv/v1.20.0/schema.go
index 42fc525d165..e449e5c3b9f 100644
--- a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/schema.go
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/schema.go
@@ -12,9 +12,9 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
-package semconv // import "go.opentelemetry.io/otel/semconv/v1.17.0"
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.20.0"
 
 // SchemaURL is the schema URL that matches the version of the semantic conventions
 // that this package defines. Semconv packages starting from v1.4.0 must declare
 // non-empty schema URL in the form https://opentelemetry.io/schemas/<version>
-const SchemaURL = "https://opentelemetry.io/schemas/1.17.0"
+const SchemaURL = "https://opentelemetry.io/schemas/1.20.0"
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/trace.go b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/trace.go
similarity index 63%
rename from vendor/go.opentelemetry.io/otel/semconv/v1.17.0/trace.go
rename to vendor/go.opentelemetry.io/otel/semconv/v1.20.0/trace.go
index 8c4a7299d27..8517741485c 100644
--- a/vendor/go.opentelemetry.io/otel/semconv/v1.17.0/trace.go
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.20.0/trace.go
@@ -14,7 +14,7 @@
 
 // Code generated from semantic convention specification. DO NOT EDIT.
 
-package semconv // import "go.opentelemetry.io/otel/semconv/v1.17.0"
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.20.0"
 
 import "go.opentelemetry.io/otel/attribute"
 
@@ -84,42 +84,31 @@ func ExceptionStacktrace(val string) attribute.KeyValue {
 	return ExceptionStacktraceKey.String(val)
 }
 
-// Attributes for Events represented using Log Records.
+// The attributes described in this section are rather generic. They may be
+// used in any Log Record they apply to.
 const (
-	// EventNameKey is the attribute Key conforming to the "event.name"
-	// semantic conventions. It represents the name identifies the event.
+	// LogRecordUIDKey is the attribute Key conforming to the "log.record.uid"
+	// semantic conventions. It represents a unique identifier for the Log
+	// Record.
 	//
 	// Type: string
-	// RequirementLevel: Required
-	// Stability: stable
-	// Examples: 'click', 'exception'
-	EventNameKey = attribute.Key("event.name")
-
-	// EventDomainKey is the attribute Key conforming to the "event.domain"
-	// semantic conventions. It represents the domain identifies the business
-	// context for the events.
-	//
-	// Type: Enum
-	// RequirementLevel: Required
+	// RequirementLevel: Optional
 	// Stability: stable
-	// Note: Events across different domains may have same `event.name`, yet be
-	// unrelated events.
-	EventDomainKey = attribute.Key("event.domain")
-)
-
-var (
-	// Events from browser apps
-	EventDomainBrowser = EventDomainKey.String("browser")
-	// Events from mobile apps
-	EventDomainDevice = EventDomainKey.String("device")
-	// Events from Kubernetes
-	EventDomainK8S = EventDomainKey.String("k8s")
+	// Examples: '01ARZ3NDEKTSV4RRFFQ69G5FAV'
+	// Note: If an id is provided, other log records with the same id will be
+	// considered duplicates and can be removed safely. This means, that two
+	// distinguishable log records MUST have different values.
+	// The id MAY be an [Universally Unique Lexicographically Sortable
+	// Identifier (ULID)](https://github.com/ulid/spec), but other identifiers
+	// (e.g. UUID) may be used as needed.
+	LogRecordUIDKey = attribute.Key("log.record.uid")
 )
 
-// EventName returns an attribute KeyValue conforming to the "event.name"
-// semantic conventions. It represents the name identifies the event.
-func EventName(val string) attribute.KeyValue {
-	return EventNameKey.String(val)
+// LogRecordUID returns an attribute KeyValue conforming to the
+// "log.record.uid" semantic conventions. It represents a unique identifier for
+// the Log Record.
+func LogRecordUID(val string) attribute.KeyValue {
+	return LogRecordUIDKey.String(val)
 }
 
 // Span attributes used by AWS Lambda (in addition to general `faas`
@@ -135,7 +124,8 @@ const (
 	// RequirementLevel: Optional
 	// Stability: stable
 	// Examples: 'arn:aws:lambda:us-east-1:123456:function:myfunction:myalias'
-	// Note: This may be different from `faas.id` if an alias is involved.
+	// Note: This may be different from `cloud.resource_id` if an alias is
+	// involved.
 	AWSLambdaInvokedARNKey = attribute.Key("aws.lambda.invoked_arn")
 )
 
@@ -342,11 +332,10 @@ const (
 	// executed.
 	//
 	// Type: string
-	// RequirementLevel: ConditionallyRequired (If applicable and not
-	// explicitly disabled via instrumentation configuration.)
+	// RequirementLevel: Recommended (Should be collected by default only if
+	// there is sanitization that excludes sensitive information.)
 	// Stability: stable
 	// Examples: 'SELECT * FROM wuser_table', 'SET mykey "WuValue"'
-	// Note: The value may be sanitized to exclude sensitive information.
 	DBStatementKey = attribute.Key("db.statement")
 
 	// DBOperationKey is the attribute Key conforming to the "db.operation"
@@ -374,6 +363,8 @@ var (
 	DBSystemOtherSQL = DBSystemKey.String("other_sql")
 	// Microsoft SQL Server
 	DBSystemMSSQL = DBSystemKey.String("mssql")
+	// Microsoft SQL Server Compact
+	DBSystemMssqlcompact = DBSystemKey.String("mssqlcompact")
 	// MySQL
 	DBSystemMySQL = DBSystemKey.String("mysql")
 	// Oracle Database
@@ -468,6 +459,10 @@ var (
 	DBSystemOpensearch = DBSystemKey.String("opensearch")
 	// ClickHouse
 	DBSystemClickhouse = DBSystemKey.String("clickhouse")
+	// Cloud Spanner
+	DBSystemSpanner = DBSystemKey.String("spanner")
+	// Trino
+	DBSystemTrino = DBSystemKey.String("trino")
 )
 
 // DBConnectionString returns an attribute KeyValue conforming to the
@@ -764,10 +759,175 @@ func DBSQLTable(val string) attribute.KeyValue {
 	return DBSQLTableKey.String(val)
 }
 
+// Call-level attributes for Cosmos DB.
+const (
+	// DBCosmosDBClientIDKey is the attribute Key conforming to the
+	// "db.cosmosdb.client_id" semantic conventions. It represents the unique
+	// Cosmos client instance id.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '3ba4827d-4422-483f-b59f-85b74211c11d'
+	DBCosmosDBClientIDKey = attribute.Key("db.cosmosdb.client_id")
+
+	// DBCosmosDBOperationTypeKey is the attribute Key conforming to the
+	// "db.cosmosdb.operation_type" semantic conventions. It represents the
+	// cosmosDB Operation Type.
+	//
+	// Type: Enum
+	// RequirementLevel: ConditionallyRequired (when performing one of the
+	// operations in this list)
+	// Stability: stable
+	DBCosmosDBOperationTypeKey = attribute.Key("db.cosmosdb.operation_type")
+
+	// DBCosmosDBConnectionModeKey is the attribute Key conforming to the
+	// "db.cosmosdb.connection_mode" semantic conventions. It represents the
+	// cosmos client connection mode.
+	//
+	// Type: Enum
+	// RequirementLevel: ConditionallyRequired (if not `direct` (or pick gw as
+	// default))
+	// Stability: stable
+	DBCosmosDBConnectionModeKey = attribute.Key("db.cosmosdb.connection_mode")
+
+	// DBCosmosDBContainerKey is the attribute Key conforming to the
+	// "db.cosmosdb.container" semantic conventions. It represents the cosmos
+	// DB container name.
+	//
+	// Type: string
+	// RequirementLevel: ConditionallyRequired (if available)
+	// Stability: stable
+	// Examples: 'anystring'
+	DBCosmosDBContainerKey = attribute.Key("db.cosmosdb.container")
+
+	// DBCosmosDBRequestContentLengthKey is the attribute Key conforming to the
+	// "db.cosmosdb.request_content_length" semantic conventions. It represents
+	// the request payload size in bytes
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	DBCosmosDBRequestContentLengthKey = attribute.Key("db.cosmosdb.request_content_length")
+
+	// DBCosmosDBStatusCodeKey is the attribute Key conforming to the
+	// "db.cosmosdb.status_code" semantic conventions. It represents the cosmos
+	// DB status code.
+	//
+	// Type: int
+	// RequirementLevel: ConditionallyRequired (if response was received)
+	// Stability: stable
+	// Examples: 200, 201
+	DBCosmosDBStatusCodeKey = attribute.Key("db.cosmosdb.status_code")
+
+	// DBCosmosDBSubStatusCodeKey is the attribute Key conforming to the
+	// "db.cosmosdb.sub_status_code" semantic conventions. It represents the
+	// cosmos DB sub status code.
+	//
+	// Type: int
+	// RequirementLevel: ConditionallyRequired (when response was received and
+	// contained sub-code.)
+	// Stability: stable
+	// Examples: 1000, 1002
+	DBCosmosDBSubStatusCodeKey = attribute.Key("db.cosmosdb.sub_status_code")
+
+	// DBCosmosDBRequestChargeKey is the attribute Key conforming to the
+	// "db.cosmosdb.request_charge" semantic conventions. It represents the rU
+	// consumed for that operation
+	//
+	// Type: double
+	// RequirementLevel: ConditionallyRequired (when available)
+	// Stability: stable
+	// Examples: 46.18, 1.0
+	DBCosmosDBRequestChargeKey = attribute.Key("db.cosmosdb.request_charge")
+)
+
+var (
+	// invalid
+	DBCosmosDBOperationTypeInvalid = DBCosmosDBOperationTypeKey.String("Invalid")
+	// create
+	DBCosmosDBOperationTypeCreate = DBCosmosDBOperationTypeKey.String("Create")
+	// patch
+	DBCosmosDBOperationTypePatch = DBCosmosDBOperationTypeKey.String("Patch")
+	// read
+	DBCosmosDBOperationTypeRead = DBCosmosDBOperationTypeKey.String("Read")
+	// read_feed
+	DBCosmosDBOperationTypeReadFeed = DBCosmosDBOperationTypeKey.String("ReadFeed")
+	// delete
+	DBCosmosDBOperationTypeDelete = DBCosmosDBOperationTypeKey.String("Delete")
+	// replace
+	DBCosmosDBOperationTypeReplace = DBCosmosDBOperationTypeKey.String("Replace")
+	// execute
+	DBCosmosDBOperationTypeExecute = DBCosmosDBOperationTypeKey.String("Execute")
+	// query
+	DBCosmosDBOperationTypeQuery = DBCosmosDBOperationTypeKey.String("Query")
+	// head
+	DBCosmosDBOperationTypeHead = DBCosmosDBOperationTypeKey.String("Head")
+	// head_feed
+	DBCosmosDBOperationTypeHeadFeed = DBCosmosDBOperationTypeKey.String("HeadFeed")
+	// upsert
+	DBCosmosDBOperationTypeUpsert = DBCosmosDBOperationTypeKey.String("Upsert")
+	// batch
+	DBCosmosDBOperationTypeBatch = DBCosmosDBOperationTypeKey.String("Batch")
+	// query_plan
+	DBCosmosDBOperationTypeQueryPlan = DBCosmosDBOperationTypeKey.String("QueryPlan")
+	// execute_javascript
+	DBCosmosDBOperationTypeExecuteJavascript = DBCosmosDBOperationTypeKey.String("ExecuteJavaScript")
+)
+
+var (
+	// Gateway (HTTP) connections mode
+	DBCosmosDBConnectionModeGateway = DBCosmosDBConnectionModeKey.String("gateway")
+	// Direct connection
+	DBCosmosDBConnectionModeDirect = DBCosmosDBConnectionModeKey.String("direct")
+)
+
+// DBCosmosDBClientID returns an attribute KeyValue conforming to the
+// "db.cosmosdb.client_id" semantic conventions. It represents the unique
+// Cosmos client instance id.
+func DBCosmosDBClientID(val string) attribute.KeyValue {
+	return DBCosmosDBClientIDKey.String(val)
+}
+
+// DBCosmosDBContainer returns an attribute KeyValue conforming to the
+// "db.cosmosdb.container" semantic conventions. It represents the cosmos DB
+// container name.
+func DBCosmosDBContainer(val string) attribute.KeyValue {
+	return DBCosmosDBContainerKey.String(val)
+}
+
+// DBCosmosDBRequestContentLength returns an attribute KeyValue conforming
+// to the "db.cosmosdb.request_content_length" semantic conventions. It
+// represents the request payload size in bytes
+func DBCosmosDBRequestContentLength(val int) attribute.KeyValue {
+	return DBCosmosDBRequestContentLengthKey.Int(val)
+}
+
+// DBCosmosDBStatusCode returns an attribute KeyValue conforming to the
+// "db.cosmosdb.status_code" semantic conventions. It represents the cosmos DB
+// status code.
+func DBCosmosDBStatusCode(val int) attribute.KeyValue {
+	return DBCosmosDBStatusCodeKey.Int(val)
+}
+
+// DBCosmosDBSubStatusCode returns an attribute KeyValue conforming to the
+// "db.cosmosdb.sub_status_code" semantic conventions. It represents the cosmos
+// DB sub status code.
+func DBCosmosDBSubStatusCode(val int) attribute.KeyValue {
+	return DBCosmosDBSubStatusCodeKey.Int(val)
+}
+
+// DBCosmosDBRequestCharge returns an attribute KeyValue conforming to the
+// "db.cosmosdb.request_charge" semantic conventions. It represents the rU
+// consumed for that operation
+func DBCosmosDBRequestCharge(val float64) attribute.KeyValue {
+	return DBCosmosDBRequestChargeKey.Float64(val)
+}
+
 // Span attributes used by non-OTLP exporters to represent OpenTelemetry Span's
 // concepts.
 const (
-	// OtelStatusCodeKey is the attribute Key conforming to the
+	// OTelStatusCodeKey is the attribute Key conforming to the
 	// "otel.status_code" semantic conventions. It represents the name of the
 	// code, either "OK" or "ERROR". MUST NOT be set if the status code is
 	// UNSET.
@@ -775,9 +935,9 @@ const (
 	// Type: Enum
 	// RequirementLevel: Optional
 	// Stability: stable
-	OtelStatusCodeKey = attribute.Key("otel.status_code")
+	OTelStatusCodeKey = attribute.Key("otel.status_code")
 
-	// OtelStatusDescriptionKey is the attribute Key conforming to the
+	// OTelStatusDescriptionKey is the attribute Key conforming to the
 	// "otel.status_description" semantic conventions. It represents the
 	// description of the Status if it has a value, otherwise not set.
 	//
@@ -785,21 +945,21 @@ const (
 	// RequirementLevel: Optional
 	// Stability: stable
 	// Examples: 'resource not found'
-	OtelStatusDescriptionKey = attribute.Key("otel.status_description")
+	OTelStatusDescriptionKey = attribute.Key("otel.status_description")
 )
 
 var (
 	// The operation has been validated by an Application developer or Operator to have completed successfully
-	OtelStatusCodeOk = OtelStatusCodeKey.String("OK")
+	OTelStatusCodeOk = OTelStatusCodeKey.String("OK")
 	// The operation contains an error
-	OtelStatusCodeError = OtelStatusCodeKey.String("ERROR")
+	OTelStatusCodeError = OTelStatusCodeKey.String("ERROR")
 )
 
-// OtelStatusDescription returns an attribute KeyValue conforming to the
+// OTelStatusDescription returns an attribute KeyValue conforming to the
 // "otel.status_description" semantic conventions. It represents the
 // description of the Status if it has a value, otherwise not set.
-func OtelStatusDescription(val string) attribute.KeyValue {
-	return OtelStatusDescriptionKey.String(val)
+func OTelStatusDescription(val string) attribute.KeyValue {
+	return OTelStatusDescriptionKey.String(val)
 }
 
 // This semantic convention describes an instance of a function that runs
@@ -808,7 +968,7 @@ func OtelStatusDescription(val string) attribute.KeyValue {
 const (
 	// FaaSTriggerKey is the attribute Key conforming to the "faas.trigger"
 	// semantic conventions. It represents the type of the trigger which caused
-	// this function execution.
+	// this function invocation.
 	//
 	// Type: Enum
 	// RequirementLevel: Optional
@@ -824,15 +984,15 @@ const (
 	// call to invoke the lambda, which is often HTTP).
 	FaaSTriggerKey = attribute.Key("faas.trigger")
 
-	// FaaSExecutionKey is the attribute Key conforming to the "faas.execution"
-	// semantic conventions. It represents the execution ID of the current
-	// function execution.
+	// FaaSInvocationIDKey is the attribute Key conforming to the
+	// "faas.invocation_id" semantic conventions. It represents the invocation
+	// ID of the current function invocation.
 	//
 	// Type: string
 	// RequirementLevel: Optional
 	// Stability: stable
 	// Examples: 'af9d5aa4-a685-4c5f-a22b-444f80b3cc28'
-	FaaSExecutionKey = attribute.Key("faas.execution")
+	FaaSInvocationIDKey = attribute.Key("faas.invocation_id")
 )
 
 var (
@@ -848,11 +1008,11 @@ var (
 	FaaSTriggerOther = FaaSTriggerKey.String("other")
 )
 
-// FaaSExecution returns an attribute KeyValue conforming to the
-// "faas.execution" semantic conventions. It represents the execution ID of the
-// current function execution.
-func FaaSExecution(val string) attribute.KeyValue {
-	return FaaSExecutionKey.String(val)
+// FaaSInvocationID returns an attribute KeyValue conforming to the
+// "faas.invocation_id" semantic conventions. It represents the invocation ID
+// of the current function invocation.
+func FaaSInvocationID(val string) attribute.KeyValue {
+	return FaaSInvocationIDKey.String(val)
 }
 
 // Semantic Convention for FaaS triggered as a response to some data source
@@ -1071,405 +1231,6 @@ func FaaSInvokedRegion(val string) attribute.KeyValue {
 	return FaaSInvokedRegionKey.String(val)
 }
 
-// These attributes may be used for any network related operation.
-const (
-	// NetTransportKey is the attribute Key conforming to the "net.transport"
-	// semantic conventions. It represents the transport protocol used. See
-	// note below.
-	//
-	// Type: Enum
-	// RequirementLevel: Optional
-	// Stability: stable
-	NetTransportKey = attribute.Key("net.transport")
-
-	// NetAppProtocolNameKey is the attribute Key conforming to the
-	// "net.app.protocol.name" semantic conventions. It represents the
-	// application layer protocol used. The value SHOULD be normalized to
-	// lowercase.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'amqp', 'http', 'mqtt'
-	NetAppProtocolNameKey = attribute.Key("net.app.protocol.name")
-
-	// NetAppProtocolVersionKey is the attribute Key conforming to the
-	// "net.app.protocol.version" semantic conventions. It represents the
-	// version of the application layer protocol used. See note below.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: '3.1.1'
-	// Note: `net.app.protocol.version` refers to the version of the protocol
-	// used and might be different from the protocol client's version. If the
-	// HTTP client used has a version of `0.27.2`, but sends HTTP version
-	// `1.1`, this attribute should be set to `1.1`.
-	NetAppProtocolVersionKey = attribute.Key("net.app.protocol.version")
-
-	// NetSockPeerNameKey is the attribute Key conforming to the
-	// "net.sock.peer.name" semantic conventions. It represents the remote
-	// socket peer name.
-	//
-	// Type: string
-	// RequirementLevel: Recommended (If available and different from
-	// `net.peer.name` and if `net.sock.peer.addr` is set.)
-	// Stability: stable
-	// Examples: 'proxy.example.com'
-	NetSockPeerNameKey = attribute.Key("net.sock.peer.name")
-
-	// NetSockPeerAddrKey is the attribute Key conforming to the
-	// "net.sock.peer.addr" semantic conventions. It represents the remote
-	// socket peer address: IPv4 or IPv6 for internet protocols, path for local
-	// communication,
-	// [etc](https://man7.org/linux/man-pages/man7/address_families.7.html).
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: '127.0.0.1', '/tmp/mysql.sock'
-	NetSockPeerAddrKey = attribute.Key("net.sock.peer.addr")
-
-	// NetSockPeerPortKey is the attribute Key conforming to the
-	// "net.sock.peer.port" semantic conventions. It represents the remote
-	// socket peer port.
-	//
-	// Type: int
-	// RequirementLevel: Recommended (If defined for the address family and if
-	// different than `net.peer.port` and if `net.sock.peer.addr` is set.)
-	// Stability: stable
-	// Examples: 16456
-	NetSockPeerPortKey = attribute.Key("net.sock.peer.port")
-
-	// NetSockFamilyKey is the attribute Key conforming to the
-	// "net.sock.family" semantic conventions. It represents the protocol
-	// [address
-	// family](https://man7.org/linux/man-pages/man7/address_families.7.html)
-	// which is used for communication.
-	//
-	// Type: Enum
-	// RequirementLevel: ConditionallyRequired (If different than `inet` and if
-	// any of `net.sock.peer.addr` or `net.sock.host.addr` are set. Consumers
-	// of telemetry SHOULD accept both IPv4 and IPv6 formats for the address in
-	// `net.sock.peer.addr` if `net.sock.family` is not set. This is to support
-	// instrumentations that follow previous versions of this document.)
-	// Stability: stable
-	// Examples: 'inet6', 'bluetooth'
-	NetSockFamilyKey = attribute.Key("net.sock.family")
-
-	// NetPeerNameKey is the attribute Key conforming to the "net.peer.name"
-	// semantic conventions. It represents the logical remote hostname, see
-	// note below.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'example.com'
-	// Note: `net.peer.name` SHOULD NOT be set if capturing it would require an
-	// extra DNS lookup.
-	NetPeerNameKey = attribute.Key("net.peer.name")
-
-	// NetPeerPortKey is the attribute Key conforming to the "net.peer.port"
-	// semantic conventions. It represents the logical remote port number
-	//
-	// Type: int
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 80, 8080, 443
-	NetPeerPortKey = attribute.Key("net.peer.port")
-
-	// NetHostNameKey is the attribute Key conforming to the "net.host.name"
-	// semantic conventions. It represents the logical local hostname or
-	// similar, see note below.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'localhost'
-	NetHostNameKey = attribute.Key("net.host.name")
-
-	// NetHostPortKey is the attribute Key conforming to the "net.host.port"
-	// semantic conventions. It represents the logical local port number,
-	// preferably the one that the peer used to connect
-	//
-	// Type: int
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 8080
-	NetHostPortKey = attribute.Key("net.host.port")
-
-	// NetSockHostAddrKey is the attribute Key conforming to the
-	// "net.sock.host.addr" semantic conventions. It represents the local
-	// socket address. Useful in case of a multi-IP host.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: '192.168.0.1'
-	NetSockHostAddrKey = attribute.Key("net.sock.host.addr")
-
-	// NetSockHostPortKey is the attribute Key conforming to the
-	// "net.sock.host.port" semantic conventions. It represents the local
-	// socket port number.
-	//
-	// Type: int
-	// RequirementLevel: Recommended (If defined for the address family and if
-	// different than `net.host.port` and if `net.sock.host.addr` is set.)
-	// Stability: stable
-	// Examples: 35555
-	NetSockHostPortKey = attribute.Key("net.sock.host.port")
-
-	// NetHostConnectionTypeKey is the attribute Key conforming to the
-	// "net.host.connection.type" semantic conventions. It represents the
-	// internet connection type currently being used by the host.
-	//
-	// Type: Enum
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'wifi'
-	NetHostConnectionTypeKey = attribute.Key("net.host.connection.type")
-
-	// NetHostConnectionSubtypeKey is the attribute Key conforming to the
-	// "net.host.connection.subtype" semantic conventions. It represents the
-	// this describes more details regarding the connection.type. It may be the
-	// type of cell technology connection, but it could be used for describing
-	// details about a wifi connection.
-	//
-	// Type: Enum
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'LTE'
-	NetHostConnectionSubtypeKey = attribute.Key("net.host.connection.subtype")
-
-	// NetHostCarrierNameKey is the attribute Key conforming to the
-	// "net.host.carrier.name" semantic conventions. It represents the name of
-	// the mobile carrier.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'sprint'
-	NetHostCarrierNameKey = attribute.Key("net.host.carrier.name")
-
-	// NetHostCarrierMccKey is the attribute Key conforming to the
-	// "net.host.carrier.mcc" semantic conventions. It represents the mobile
-	// carrier country code.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: '310'
-	NetHostCarrierMccKey = attribute.Key("net.host.carrier.mcc")
-
-	// NetHostCarrierMncKey is the attribute Key conforming to the
-	// "net.host.carrier.mnc" semantic conventions. It represents the mobile
-	// carrier network code.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: '001'
-	NetHostCarrierMncKey = attribute.Key("net.host.carrier.mnc")
-
-	// NetHostCarrierIccKey is the attribute Key conforming to the
-	// "net.host.carrier.icc" semantic conventions. It represents the ISO
-	// 3166-1 alpha-2 2-character country code associated with the mobile
-	// carrier network.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'DE'
-	NetHostCarrierIccKey = attribute.Key("net.host.carrier.icc")
-)
-
-var (
-	// ip_tcp
-	NetTransportTCP = NetTransportKey.String("ip_tcp")
-	// ip_udp
-	NetTransportUDP = NetTransportKey.String("ip_udp")
-	// Named or anonymous pipe. See note below
-	NetTransportPipe = NetTransportKey.String("pipe")
-	// In-process communication
-	NetTransportInProc = NetTransportKey.String("inproc")
-	// Something else (non IP-based)
-	NetTransportOther = NetTransportKey.String("other")
-)
-
-var (
-	// IPv4 address
-	NetSockFamilyInet = NetSockFamilyKey.String("inet")
-	// IPv6 address
-	NetSockFamilyInet6 = NetSockFamilyKey.String("inet6")
-	// Unix domain socket path
-	NetSockFamilyUnix = NetSockFamilyKey.String("unix")
-)
-
-var (
-	// wifi
-	NetHostConnectionTypeWifi = NetHostConnectionTypeKey.String("wifi")
-	// wired
-	NetHostConnectionTypeWired = NetHostConnectionTypeKey.String("wired")
-	// cell
-	NetHostConnectionTypeCell = NetHostConnectionTypeKey.String("cell")
-	// unavailable
-	NetHostConnectionTypeUnavailable = NetHostConnectionTypeKey.String("unavailable")
-	// unknown
-	NetHostConnectionTypeUnknown = NetHostConnectionTypeKey.String("unknown")
-)
-
-var (
-	// GPRS
-	NetHostConnectionSubtypeGprs = NetHostConnectionSubtypeKey.String("gprs")
-	// EDGE
-	NetHostConnectionSubtypeEdge = NetHostConnectionSubtypeKey.String("edge")
-	// UMTS
-	NetHostConnectionSubtypeUmts = NetHostConnectionSubtypeKey.String("umts")
-	// CDMA
-	NetHostConnectionSubtypeCdma = NetHostConnectionSubtypeKey.String("cdma")
-	// EVDO Rel. 0
-	NetHostConnectionSubtypeEvdo0 = NetHostConnectionSubtypeKey.String("evdo_0")
-	// EVDO Rev. A
-	NetHostConnectionSubtypeEvdoA = NetHostConnectionSubtypeKey.String("evdo_a")
-	// CDMA2000 1XRTT
-	NetHostConnectionSubtypeCdma20001xrtt = NetHostConnectionSubtypeKey.String("cdma2000_1xrtt")
-	// HSDPA
-	NetHostConnectionSubtypeHsdpa = NetHostConnectionSubtypeKey.String("hsdpa")
-	// HSUPA
-	NetHostConnectionSubtypeHsupa = NetHostConnectionSubtypeKey.String("hsupa")
-	// HSPA
-	NetHostConnectionSubtypeHspa = NetHostConnectionSubtypeKey.String("hspa")
-	// IDEN
-	NetHostConnectionSubtypeIden = NetHostConnectionSubtypeKey.String("iden")
-	// EVDO Rev. B
-	NetHostConnectionSubtypeEvdoB = NetHostConnectionSubtypeKey.String("evdo_b")
-	// LTE
-	NetHostConnectionSubtypeLte = NetHostConnectionSubtypeKey.String("lte")
-	// EHRPD
-	NetHostConnectionSubtypeEhrpd = NetHostConnectionSubtypeKey.String("ehrpd")
-	// HSPAP
-	NetHostConnectionSubtypeHspap = NetHostConnectionSubtypeKey.String("hspap")
-	// GSM
-	NetHostConnectionSubtypeGsm = NetHostConnectionSubtypeKey.String("gsm")
-	// TD-SCDMA
-	NetHostConnectionSubtypeTdScdma = NetHostConnectionSubtypeKey.String("td_scdma")
-	// IWLAN
-	NetHostConnectionSubtypeIwlan = NetHostConnectionSubtypeKey.String("iwlan")
-	// 5G NR (New Radio)
-	NetHostConnectionSubtypeNr = NetHostConnectionSubtypeKey.String("nr")
-	// 5G NRNSA (New Radio Non-Standalone)
-	NetHostConnectionSubtypeNrnsa = NetHostConnectionSubtypeKey.String("nrnsa")
-	// LTE CA
-	NetHostConnectionSubtypeLteCa = NetHostConnectionSubtypeKey.String("lte_ca")
-)
-
-// NetAppProtocolName returns an attribute KeyValue conforming to the
-// "net.app.protocol.name" semantic conventions. It represents the application
-// layer protocol used. The value SHOULD be normalized to lowercase.
-func NetAppProtocolName(val string) attribute.KeyValue {
-	return NetAppProtocolNameKey.String(val)
-}
-
-// NetAppProtocolVersion returns an attribute KeyValue conforming to the
-// "net.app.protocol.version" semantic conventions. It represents the version
-// of the application layer protocol used. See note below.
-func NetAppProtocolVersion(val string) attribute.KeyValue {
-	return NetAppProtocolVersionKey.String(val)
-}
-
-// NetSockPeerName returns an attribute KeyValue conforming to the
-// "net.sock.peer.name" semantic conventions. It represents the remote socket
-// peer name.
-func NetSockPeerName(val string) attribute.KeyValue {
-	return NetSockPeerNameKey.String(val)
-}
-
-// NetSockPeerAddr returns an attribute KeyValue conforming to the
-// "net.sock.peer.addr" semantic conventions. It represents the remote socket
-// peer address: IPv4 or IPv6 for internet protocols, path for local
-// communication,
-// [etc](https://man7.org/linux/man-pages/man7/address_families.7.html).
-func NetSockPeerAddr(val string) attribute.KeyValue {
-	return NetSockPeerAddrKey.String(val)
-}
-
-// NetSockPeerPort returns an attribute KeyValue conforming to the
-// "net.sock.peer.port" semantic conventions. It represents the remote socket
-// peer port.
-func NetSockPeerPort(val int) attribute.KeyValue {
-	return NetSockPeerPortKey.Int(val)
-}
-
-// NetPeerName returns an attribute KeyValue conforming to the
-// "net.peer.name" semantic conventions. It represents the logical remote
-// hostname, see note below.
-func NetPeerName(val string) attribute.KeyValue {
-	return NetPeerNameKey.String(val)
-}
-
-// NetPeerPort returns an attribute KeyValue conforming to the
-// "net.peer.port" semantic conventions. It represents the logical remote port
-// number
-func NetPeerPort(val int) attribute.KeyValue {
-	return NetPeerPortKey.Int(val)
-}
-
-// NetHostName returns an attribute KeyValue conforming to the
-// "net.host.name" semantic conventions. It represents the logical local
-// hostname or similar, see note below.
-func NetHostName(val string) attribute.KeyValue {
-	return NetHostNameKey.String(val)
-}
-
-// NetHostPort returns an attribute KeyValue conforming to the
-// "net.host.port" semantic conventions. It represents the logical local port
-// number, preferably the one that the peer used to connect
-func NetHostPort(val int) attribute.KeyValue {
-	return NetHostPortKey.Int(val)
-}
-
-// NetSockHostAddr returns an attribute KeyValue conforming to the
-// "net.sock.host.addr" semantic conventions. It represents the local socket
-// address. Useful in case of a multi-IP host.
-func NetSockHostAddr(val string) attribute.KeyValue {
-	return NetSockHostAddrKey.String(val)
-}
-
-// NetSockHostPort returns an attribute KeyValue conforming to the
-// "net.sock.host.port" semantic conventions. It represents the local socket
-// port number.
-func NetSockHostPort(val int) attribute.KeyValue {
-	return NetSockHostPortKey.Int(val)
-}
-
-// NetHostCarrierName returns an attribute KeyValue conforming to the
-// "net.host.carrier.name" semantic conventions. It represents the name of the
-// mobile carrier.
-func NetHostCarrierName(val string) attribute.KeyValue {
-	return NetHostCarrierNameKey.String(val)
-}
-
-// NetHostCarrierMcc returns an attribute KeyValue conforming to the
-// "net.host.carrier.mcc" semantic conventions. It represents the mobile
-// carrier country code.
-func NetHostCarrierMcc(val string) attribute.KeyValue {
-	return NetHostCarrierMccKey.String(val)
-}
-
-// NetHostCarrierMnc returns an attribute KeyValue conforming to the
-// "net.host.carrier.mnc" semantic conventions. It represents the mobile
-// carrier network code.
-func NetHostCarrierMnc(val string) attribute.KeyValue {
-	return NetHostCarrierMncKey.String(val)
-}
-
-// NetHostCarrierIcc returns an attribute KeyValue conforming to the
-// "net.host.carrier.icc" semantic conventions. It represents the ISO 3166-1
-// alpha-2 2-character country code associated with the mobile carrier network.
-func NetHostCarrierIcc(val string) attribute.KeyValue {
-	return NetHostCarrierIccKey.String(val)
-}
-
 // Operations that access some remote service.
 const (
 	// PeerServiceKey is the attribute Key conforming to the "peer.service"
@@ -1700,140 +1461,6 @@ func CodeColumn(val int) attribute.KeyValue {
 	return CodeColumnKey.Int(val)
 }
 
-// Semantic conventions for HTTP client and server Spans.
-const (
-	// HTTPMethodKey is the attribute Key conforming to the "http.method"
-	// semantic conventions. It represents the hTTP request method.
-	//
-	// Type: string
-	// RequirementLevel: Required
-	// Stability: stable
-	// Examples: 'GET', 'POST', 'HEAD'
-	HTTPMethodKey = attribute.Key("http.method")
-
-	// HTTPStatusCodeKey is the attribute Key conforming to the
-	// "http.status_code" semantic conventions. It represents the [HTTP
-	// response status code](https://tools.ietf.org/html/rfc7231#section-6).
-	//
-	// Type: int
-	// RequirementLevel: ConditionallyRequired (If and only if one was
-	// received/sent.)
-	// Stability: stable
-	// Examples: 200
-	HTTPStatusCodeKey = attribute.Key("http.status_code")
-
-	// HTTPFlavorKey is the attribute Key conforming to the "http.flavor"
-	// semantic conventions. It represents the kind of HTTP protocol used.
-	//
-	// Type: Enum
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Note: If `net.transport` is not specified, it can be assumed to be
-	// `IP.TCP` except if `http.flavor` is `QUIC`, in which case `IP.UDP` is
-	// assumed.
-	HTTPFlavorKey = attribute.Key("http.flavor")
-
-	// HTTPUserAgentKey is the attribute Key conforming to the
-	// "http.user_agent" semantic conventions. It represents the value of the
-	// [HTTP
-	// User-Agent](https://www.rfc-editor.org/rfc/rfc9110.html#field.user-agent)
-	// header sent by the client.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'CERN-LineMode/2.15 libwww/2.17b3'
-	HTTPUserAgentKey = attribute.Key("http.user_agent")
-
-	// HTTPRequestContentLengthKey is the attribute Key conforming to the
-	// "http.request_content_length" semantic conventions. It represents the
-	// size of the request payload body in bytes. This is the number of bytes
-	// transferred excluding headers and is often, but not always, present as
-	// the
-	// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
-	// header. For requests using transport encoding, this should be the
-	// compressed size.
-	//
-	// Type: int
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 3495
-	HTTPRequestContentLengthKey = attribute.Key("http.request_content_length")
-
-	// HTTPResponseContentLengthKey is the attribute Key conforming to the
-	// "http.response_content_length" semantic conventions. It represents the
-	// size of the response payload body in bytes. This is the number of bytes
-	// transferred excluding headers and is often, but not always, present as
-	// the
-	// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
-	// header. For requests using transport encoding, this should be the
-	// compressed size.
-	//
-	// Type: int
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 3495
-	HTTPResponseContentLengthKey = attribute.Key("http.response_content_length")
-)
-
-var (
-	// HTTP/1.0
-	HTTPFlavorHTTP10 = HTTPFlavorKey.String("1.0")
-	// HTTP/1.1
-	HTTPFlavorHTTP11 = HTTPFlavorKey.String("1.1")
-	// HTTP/2
-	HTTPFlavorHTTP20 = HTTPFlavorKey.String("2.0")
-	// HTTP/3
-	HTTPFlavorHTTP30 = HTTPFlavorKey.String("3.0")
-	// SPDY protocol
-	HTTPFlavorSPDY = HTTPFlavorKey.String("SPDY")
-	// QUIC protocol
-	HTTPFlavorQUIC = HTTPFlavorKey.String("QUIC")
-)
-
-// HTTPMethod returns an attribute KeyValue conforming to the "http.method"
-// semantic conventions. It represents the hTTP request method.
-func HTTPMethod(val string) attribute.KeyValue {
-	return HTTPMethodKey.String(val)
-}
-
-// HTTPStatusCode returns an attribute KeyValue conforming to the
-// "http.status_code" semantic conventions. It represents the [HTTP response
-// status code](https://tools.ietf.org/html/rfc7231#section-6).
-func HTTPStatusCode(val int) attribute.KeyValue {
-	return HTTPStatusCodeKey.Int(val)
-}
-
-// HTTPUserAgent returns an attribute KeyValue conforming to the
-// "http.user_agent" semantic conventions. It represents the value of the [HTTP
-// User-Agent](https://www.rfc-editor.org/rfc/rfc9110.html#field.user-agent)
-// header sent by the client.
-func HTTPUserAgent(val string) attribute.KeyValue {
-	return HTTPUserAgentKey.String(val)
-}
-
-// HTTPRequestContentLength returns an attribute KeyValue conforming to the
-// "http.request_content_length" semantic conventions. It represents the size
-// of the request payload body in bytes. This is the number of bytes
-// transferred excluding headers and is often, but not always, present as the
-// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
-// header. For requests using transport encoding, this should be the compressed
-// size.
-func HTTPRequestContentLength(val int) attribute.KeyValue {
-	return HTTPRequestContentLengthKey.Int(val)
-}
-
-// HTTPResponseContentLength returns an attribute KeyValue conforming to the
-// "http.response_content_length" semantic conventions. It represents the size
-// of the response payload body in bytes. This is the number of bytes
-// transferred excluding headers and is often, but not always, present as the
-// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
-// header. For requests using transport encoding, this should be the compressed
-// size.
-func HTTPResponseContentLength(val int) attribute.KeyValue {
-	return HTTPResponseContentLengthKey.Int(val)
-}
-
 // Semantic Convention for HTTP Client
 const (
 	// HTTPURLKey is the attribute Key conforming to the "http.url" semantic
@@ -1885,16 +1512,6 @@ func HTTPResendCount(val int) attribute.KeyValue {
 
 // Semantic Convention for HTTP Server
 const (
-	// HTTPSchemeKey is the attribute Key conforming to the "http.scheme"
-	// semantic conventions. It represents the URI scheme identifying the used
-	// protocol.
-	//
-	// Type: string
-	// RequirementLevel: Required
-	// Stability: stable
-	// Examples: 'http', 'https'
-	HTTPSchemeKey = attribute.Key("http.scheme")
-
 	// HTTPTargetKey is the attribute Key conforming to the "http.target"
 	// semantic conventions. It represents the full request target as passed in
 	// a HTTP request line or equivalent.
@@ -1902,22 +1519,9 @@ const (
 	// Type: string
 	// RequirementLevel: Required
 	// Stability: stable
-	// Examples: '/path/12314/?q=ddds'
+	// Examples: '/users/12314/?q=ddds'
 	HTTPTargetKey = attribute.Key("http.target")
 
-	// HTTPRouteKey is the attribute Key conforming to the "http.route"
-	// semantic conventions. It represents the matched route (path template in
-	// the format used by the respective server framework). See note below
-	//
-	// Type: string
-	// RequirementLevel: ConditionallyRequired (If and only if it's available)
-	// Stability: stable
-	// Examples: '/users/:userID?', '{controller}/{action}/{id?}'
-	// Note: 'http.route' MUST NOT be populated when this is not supported by
-	// the HTTP server framework as the route attribute should have
-	// low-cardinality and the URI path can NOT substitute it.
-	HTTPRouteKey = attribute.Key("http.route")
-
 	// HTTPClientIPKey is the attribute Key conforming to the "http.client_ip"
 	// semantic conventions. It represents the IP address of the original
 	// client behind all proxies, if known (e.g. from
@@ -1943,13 +1547,6 @@ const (
 	HTTPClientIPKey = attribute.Key("http.client_ip")
 )
 
-// HTTPScheme returns an attribute KeyValue conforming to the "http.scheme"
-// semantic conventions. It represents the URI scheme identifying the used
-// protocol.
-func HTTPScheme(val string) attribute.KeyValue {
-	return HTTPSchemeKey.String(val)
-}
-
 // HTTPTarget returns an attribute KeyValue conforming to the "http.target"
 // semantic conventions. It represents the full request target as passed in a
 // HTTP request line or equivalent.
@@ -1957,13 +1554,6 @@ func HTTPTarget(val string) attribute.KeyValue {
 	return HTTPTargetKey.String(val)
 }
 
-// HTTPRoute returns an attribute KeyValue conforming to the "http.route"
-// semantic conventions. It represents the matched route (path template in the
-// format used by the respective server framework). See note below
-func HTTPRoute(val string) attribute.KeyValue {
-	return HTTPRouteKey.String(val)
-}
-
 // HTTPClientIP returns an attribute KeyValue conforming to the
 // "http.client_ip" semantic conventions. It represents the IP address of the
 // original client behind all proxies, if known (e.g. from
@@ -1972,6 +1562,32 @@ func HTTPClientIP(val string) attribute.KeyValue {
 	return HTTPClientIPKey.String(val)
 }
 
+// The `aws` conventions apply to operations using the AWS SDK. They map
+// request or response parameters in AWS SDK API calls to attributes on a Span.
+// The conventions have been collected over time based on feedback from AWS
+// users of tracing and will continue to evolve as new interesting conventions
+// are found.
+// Some descriptions are also provided for populating general OpenTelemetry
+// semantic conventions based on these APIs.
+const (
+	// AWSRequestIDKey is the attribute Key conforming to the "aws.request_id"
+	// semantic conventions. It represents the AWS request ID as returned in
+	// the response headers `x-amz-request-id` or `x-amz-requestid`.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '79b9da39-b7ae-508a-a6bc-864b2829c622', 'C9ER4AJX75574TDJ'
+	AWSRequestIDKey = attribute.Key("aws.request_id")
+)
+
+// AWSRequestID returns an attribute KeyValue conforming to the
+// "aws.request_id" semantic conventions. It represents the AWS request ID as
+// returned in the response headers `x-amz-request-id` or `x-amz-requestid`.
+func AWSRequestID(val string) attribute.KeyValue {
+	return AWSRequestIDKey.String(val)
+}
+
 // Attributes that exist for multiple DynamoDB request types.
 const (
 	// AWSDynamoDBTableNamesKey is the attribute Key conforming to the
@@ -2399,6 +2015,198 @@ func AWSDynamoDBGlobalSecondaryIndexUpdates(val ...string) attribute.KeyValue {
 	return AWSDynamoDBGlobalSecondaryIndexUpdatesKey.StringSlice(val)
 }
 
+// Attributes that exist for S3 request types.
+const (
+	// AWSS3BucketKey is the attribute Key conforming to the "aws.s3.bucket"
+	// semantic conventions. It represents the S3 bucket name the request
+	// refers to. Corresponds to the `--bucket` parameter of the [S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/index.html)
+	// operations.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'some-bucket-name'
+	// Note: The `bucket` attribute is applicable to all S3 operations that
+	// reference a bucket, i.e. that require the bucket name as a mandatory
+	// parameter.
+	// This applies to almost all S3 operations except `list-buckets`.
+	AWSS3BucketKey = attribute.Key("aws.s3.bucket")
+
+	// AWSS3KeyKey is the attribute Key conforming to the "aws.s3.key" semantic
+	// conventions. It represents the S3 object key the request refers to.
+	// Corresponds to the `--key` parameter of the [S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/index.html)
+	// operations.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'someFile.yml'
+	// Note: The `key` attribute is applicable to all object-related S3
+	// operations, i.e. that require the object key as a mandatory parameter.
+	// This applies in particular to the following operations:
+	//
+	// -
+	// [copy-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/copy-object.html)
+	// -
+	// [delete-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/delete-object.html)
+	// -
+	// [get-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/get-object.html)
+	// -
+	// [head-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/head-object.html)
+	// -
+	// [put-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/put-object.html)
+	// -
+	// [restore-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/restore-object.html)
+	// -
+	// [select-object-content](https://docs.aws.amazon.com/cli/latest/reference/s3api/select-object-content.html)
+	// -
+	// [abort-multipart-upload](https://docs.aws.amazon.com/cli/latest/reference/s3api/abort-multipart-upload.html)
+	// -
+	// [complete-multipart-upload](https://docs.aws.amazon.com/cli/latest/reference/s3api/complete-multipart-upload.html)
+	// -
+	// [create-multipart-upload](https://docs.aws.amazon.com/cli/latest/reference/s3api/create-multipart-upload.html)
+	// -
+	// [list-parts](https://docs.aws.amazon.com/cli/latest/reference/s3api/list-parts.html)
+	// -
+	// [upload-part](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part.html)
+	// -
+	// [upload-part-copy](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part-copy.html)
+	AWSS3KeyKey = attribute.Key("aws.s3.key")
+
+	// AWSS3CopySourceKey is the attribute Key conforming to the
+	// "aws.s3.copy_source" semantic conventions. It represents the source
+	// object (in the form `bucket`/`key`) for the copy operation.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'someFile.yml'
+	// Note: The `copy_source` attribute applies to S3 copy operations and
+	// corresponds to the `--copy-source` parameter
+	// of the [copy-object operation within the S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/copy-object.html).
+	// This applies in particular to the following operations:
+	//
+	// -
+	// [copy-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/copy-object.html)
+	// -
+	// [upload-part-copy](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part-copy.html)
+	AWSS3CopySourceKey = attribute.Key("aws.s3.copy_source")
+
+	// AWSS3UploadIDKey is the attribute Key conforming to the
+	// "aws.s3.upload_id" semantic conventions. It represents the upload ID
+	// that identifies the multipart upload.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'dfRtDYWFbkRONycy.Yxwh66Yjlx.cph0gtNBtJ'
+	// Note: The `upload_id` attribute applies to S3 multipart-upload
+	// operations and corresponds to the `--upload-id` parameter
+	// of the [S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/index.html)
+	// multipart operations.
+	// This applies in particular to the following operations:
+	//
+	// -
+	// [abort-multipart-upload](https://docs.aws.amazon.com/cli/latest/reference/s3api/abort-multipart-upload.html)
+	// -
+	// [complete-multipart-upload](https://docs.aws.amazon.com/cli/latest/reference/s3api/complete-multipart-upload.html)
+	// -
+	// [list-parts](https://docs.aws.amazon.com/cli/latest/reference/s3api/list-parts.html)
+	// -
+	// [upload-part](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part.html)
+	// -
+	// [upload-part-copy](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part-copy.html)
+	AWSS3UploadIDKey = attribute.Key("aws.s3.upload_id")
+
+	// AWSS3DeleteKey is the attribute Key conforming to the "aws.s3.delete"
+	// semantic conventions. It represents the delete request container that
+	// specifies the objects to be deleted.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples:
+	// 'Objects=[{Key=string,VersionID=string},{Key=string,VersionID=string}],Quiet=boolean'
+	// Note: The `delete` attribute is only applicable to the
+	// [delete-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/delete-object.html)
+	// operation.
+	// The `delete` attribute corresponds to the `--delete` parameter of the
+	// [delete-objects operation within the S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/delete-objects.html).
+	AWSS3DeleteKey = attribute.Key("aws.s3.delete")
+
+	// AWSS3PartNumberKey is the attribute Key conforming to the
+	// "aws.s3.part_number" semantic conventions. It represents the part number
+	// of the part being uploaded in a multipart-upload operation. This is a
+	// positive integer between 1 and 10,000.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 3456
+	// Note: The `part_number` attribute is only applicable to the
+	// [upload-part](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part.html)
+	// and
+	// [upload-part-copy](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part-copy.html)
+	// operations.
+	// The `part_number` attribute corresponds to the `--part-number` parameter
+	// of the
+	// [upload-part operation within the S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part.html).
+	AWSS3PartNumberKey = attribute.Key("aws.s3.part_number")
+)
+
+// AWSS3Bucket returns an attribute KeyValue conforming to the
+// "aws.s3.bucket" semantic conventions. It represents the S3 bucket name the
+// request refers to. Corresponds to the `--bucket` parameter of the [S3
+// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/index.html)
+// operations.
+func AWSS3Bucket(val string) attribute.KeyValue {
+	return AWSS3BucketKey.String(val)
+}
+
+// AWSS3Key returns an attribute KeyValue conforming to the "aws.s3.key"
+// semantic conventions. It represents the S3 object key the request refers to.
+// Corresponds to the `--key` parameter of the [S3
+// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/index.html)
+// operations.
+func AWSS3Key(val string) attribute.KeyValue {
+	return AWSS3KeyKey.String(val)
+}
+
+// AWSS3CopySource returns an attribute KeyValue conforming to the
+// "aws.s3.copy_source" semantic conventions. It represents the source object
+// (in the form `bucket`/`key`) for the copy operation.
+func AWSS3CopySource(val string) attribute.KeyValue {
+	return AWSS3CopySourceKey.String(val)
+}
+
+// AWSS3UploadID returns an attribute KeyValue conforming to the
+// "aws.s3.upload_id" semantic conventions. It represents the upload ID that
+// identifies the multipart upload.
+func AWSS3UploadID(val string) attribute.KeyValue {
+	return AWSS3UploadIDKey.String(val)
+}
+
+// AWSS3Delete returns an attribute KeyValue conforming to the
+// "aws.s3.delete" semantic conventions. It represents the delete request
+// container that specifies the objects to be deleted.
+func AWSS3Delete(val string) attribute.KeyValue {
+	return AWSS3DeleteKey.String(val)
+}
+
+// AWSS3PartNumber returns an attribute KeyValue conforming to the
+// "aws.s3.part_number" semantic conventions. It represents the part number of
+// the part being uploaded in a multipart-upload operation. This is a positive
+// integer between 1 and 10,000.
+func AWSS3PartNumber(val int) attribute.KeyValue {
+	return AWSS3PartNumberKey.Int(val)
+}
+
 // Semantic conventions to apply when instrumenting the GraphQL implementation.
 // They map GraphQL operations to attributes on a Span.
 const (
@@ -2457,287 +2265,6 @@ func GraphqlDocument(val string) attribute.KeyValue {
 	return GraphqlDocumentKey.String(val)
 }
 
-// Semantic convention describing per-message attributes populated on messaging
-// spans or links.
-const (
-	// MessagingMessageIDKey is the attribute Key conforming to the
-	// "messaging.message.id" semantic conventions. It represents a value used
-	// by the messaging system as an identifier for the message, represented as
-	// a string.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: '452a7c7c7c7048c2f887f61572b18fc2'
-	MessagingMessageIDKey = attribute.Key("messaging.message.id")
-
-	// MessagingMessageConversationIDKey is the attribute Key conforming to the
-	// "messaging.message.conversation_id" semantic conventions. It represents
-	// the [conversation ID](#conversations) identifying the conversation to
-	// which the message belongs, represented as a string. Sometimes called
-	// "Correlation ID".
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'MyConversationID'
-	MessagingMessageConversationIDKey = attribute.Key("messaging.message.conversation_id")
-
-	// MessagingMessagePayloadSizeBytesKey is the attribute Key conforming to
-	// the "messaging.message.payload_size_bytes" semantic conventions. It
-	// represents the (uncompressed) size of the message payload in bytes. Also
-	// use this attribute if it is unknown whether the compressed or
-	// uncompressed payload size is reported.
-	//
-	// Type: int
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 2738
-	MessagingMessagePayloadSizeBytesKey = attribute.Key("messaging.message.payload_size_bytes")
-
-	// MessagingMessagePayloadCompressedSizeBytesKey is the attribute Key
-	// conforming to the "messaging.message.payload_compressed_size_bytes"
-	// semantic conventions. It represents the compressed size of the message
-	// payload in bytes.
-	//
-	// Type: int
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 2048
-	MessagingMessagePayloadCompressedSizeBytesKey = attribute.Key("messaging.message.payload_compressed_size_bytes")
-)
-
-// MessagingMessageID returns an attribute KeyValue conforming to the
-// "messaging.message.id" semantic conventions. It represents a value used by
-// the messaging system as an identifier for the message, represented as a
-// string.
-func MessagingMessageID(val string) attribute.KeyValue {
-	return MessagingMessageIDKey.String(val)
-}
-
-// MessagingMessageConversationID returns an attribute KeyValue conforming
-// to the "messaging.message.conversation_id" semantic conventions. It
-// represents the [conversation ID](#conversations) identifying the
-// conversation to which the message belongs, represented as a string.
-// Sometimes called "Correlation ID".
-func MessagingMessageConversationID(val string) attribute.KeyValue {
-	return MessagingMessageConversationIDKey.String(val)
-}
-
-// MessagingMessagePayloadSizeBytes returns an attribute KeyValue conforming
-// to the "messaging.message.payload_size_bytes" semantic conventions. It
-// represents the (uncompressed) size of the message payload in bytes. Also use
-// this attribute if it is unknown whether the compressed or uncompressed
-// payload size is reported.
-func MessagingMessagePayloadSizeBytes(val int) attribute.KeyValue {
-	return MessagingMessagePayloadSizeBytesKey.Int(val)
-}
-
-// MessagingMessagePayloadCompressedSizeBytes returns an attribute KeyValue
-// conforming to the "messaging.message.payload_compressed_size_bytes" semantic
-// conventions. It represents the compressed size of the message payload in
-// bytes.
-func MessagingMessagePayloadCompressedSizeBytes(val int) attribute.KeyValue {
-	return MessagingMessagePayloadCompressedSizeBytesKey.Int(val)
-}
-
-// Semantic convention for attributes that describe messaging destination on
-// broker
-const (
-	// MessagingDestinationNameKey is the attribute Key conforming to the
-	// "messaging.destination.name" semantic conventions. It represents the
-	// message destination name
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'MyQueue', 'MyTopic'
-	// Note: Destination name SHOULD uniquely identify a specific queue, topic
-	// or other entity within the broker. If
-	// the broker does not have such notion, the destination name SHOULD
-	// uniquely identify the broker.
-	MessagingDestinationNameKey = attribute.Key("messaging.destination.name")
-
-	// MessagingDestinationKindKey is the attribute Key conforming to the
-	// "messaging.destination.kind" semantic conventions. It represents the
-	// kind of message destination
-	//
-	// Type: Enum
-	// RequirementLevel: Optional
-	// Stability: stable
-	MessagingDestinationKindKey = attribute.Key("messaging.destination.kind")
-
-	// MessagingDestinationTemplateKey is the attribute Key conforming to the
-	// "messaging.destination.template" semantic conventions. It represents the
-	// low cardinality representation of the messaging destination name
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: '/customers/{customerID}'
-	// Note: Destination names could be constructed from templates. An example
-	// would be a destination name involving a user name or product id.
-	// Although the destination name in this case is of high cardinality, the
-	// underlying template is of low cardinality and can be effectively used
-	// for grouping and aggregation.
-	MessagingDestinationTemplateKey = attribute.Key("messaging.destination.template")
-
-	// MessagingDestinationTemporaryKey is the attribute Key conforming to the
-	// "messaging.destination.temporary" semantic conventions. It represents a
-	// boolean that is true if the message destination is temporary and might
-	// not exist anymore after messages are processed.
-	//
-	// Type: boolean
-	// RequirementLevel: Optional
-	// Stability: stable
-	MessagingDestinationTemporaryKey = attribute.Key("messaging.destination.temporary")
-
-	// MessagingDestinationAnonymousKey is the attribute Key conforming to the
-	// "messaging.destination.anonymous" semantic conventions. It represents a
-	// boolean that is true if the message destination is anonymous (could be
-	// unnamed or have auto-generated name).
-	//
-	// Type: boolean
-	// RequirementLevel: Optional
-	// Stability: stable
-	MessagingDestinationAnonymousKey = attribute.Key("messaging.destination.anonymous")
-)
-
-var (
-	// A message sent to a queue
-	MessagingDestinationKindQueue = MessagingDestinationKindKey.String("queue")
-	// A message sent to a topic
-	MessagingDestinationKindTopic = MessagingDestinationKindKey.String("topic")
-)
-
-// MessagingDestinationName returns an attribute KeyValue conforming to the
-// "messaging.destination.name" semantic conventions. It represents the message
-// destination name
-func MessagingDestinationName(val string) attribute.KeyValue {
-	return MessagingDestinationNameKey.String(val)
-}
-
-// MessagingDestinationTemplate returns an attribute KeyValue conforming to
-// the "messaging.destination.template" semantic conventions. It represents the
-// low cardinality representation of the messaging destination name
-func MessagingDestinationTemplate(val string) attribute.KeyValue {
-	return MessagingDestinationTemplateKey.String(val)
-}
-
-// MessagingDestinationTemporary returns an attribute KeyValue conforming to
-// the "messaging.destination.temporary" semantic conventions. It represents a
-// boolean that is true if the message destination is temporary and might not
-// exist anymore after messages are processed.
-func MessagingDestinationTemporary(val bool) attribute.KeyValue {
-	return MessagingDestinationTemporaryKey.Bool(val)
-}
-
-// MessagingDestinationAnonymous returns an attribute KeyValue conforming to
-// the "messaging.destination.anonymous" semantic conventions. It represents a
-// boolean that is true if the message destination is anonymous (could be
-// unnamed or have auto-generated name).
-func MessagingDestinationAnonymous(val bool) attribute.KeyValue {
-	return MessagingDestinationAnonymousKey.Bool(val)
-}
-
-// Semantic convention for attributes that describe messaging source on broker
-const (
-	// MessagingSourceNameKey is the attribute Key conforming to the
-	// "messaging.source.name" semantic conventions. It represents the message
-	// source name
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'MyQueue', 'MyTopic'
-	// Note: Source name SHOULD uniquely identify a specific queue, topic, or
-	// other entity within the broker. If
-	// the broker does not have such notion, the source name SHOULD uniquely
-	// identify the broker.
-	MessagingSourceNameKey = attribute.Key("messaging.source.name")
-
-	// MessagingSourceKindKey is the attribute Key conforming to the
-	// "messaging.source.kind" semantic conventions. It represents the kind of
-	// message source
-	//
-	// Type: Enum
-	// RequirementLevel: Optional
-	// Stability: stable
-	MessagingSourceKindKey = attribute.Key("messaging.source.kind")
-
-	// MessagingSourceTemplateKey is the attribute Key conforming to the
-	// "messaging.source.template" semantic conventions. It represents the low
-	// cardinality representation of the messaging source name
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: '/customers/{customerID}'
-	// Note: Source names could be constructed from templates. An example would
-	// be a source name involving a user name or product id. Although the
-	// source name in this case is of high cardinality, the underlying template
-	// is of low cardinality and can be effectively used for grouping and
-	// aggregation.
-	MessagingSourceTemplateKey = attribute.Key("messaging.source.template")
-
-	// MessagingSourceTemporaryKey is the attribute Key conforming to the
-	// "messaging.source.temporary" semantic conventions. It represents a
-	// boolean that is true if the message source is temporary and might not
-	// exist anymore after messages are processed.
-	//
-	// Type: boolean
-	// RequirementLevel: Optional
-	// Stability: stable
-	MessagingSourceTemporaryKey = attribute.Key("messaging.source.temporary")
-
-	// MessagingSourceAnonymousKey is the attribute Key conforming to the
-	// "messaging.source.anonymous" semantic conventions. It represents a
-	// boolean that is true if the message source is anonymous (could be
-	// unnamed or have auto-generated name).
-	//
-	// Type: boolean
-	// RequirementLevel: Optional
-	// Stability: stable
-	MessagingSourceAnonymousKey = attribute.Key("messaging.source.anonymous")
-)
-
-var (
-	// A message received from a queue
-	MessagingSourceKindQueue = MessagingSourceKindKey.String("queue")
-	// A message received from a topic
-	MessagingSourceKindTopic = MessagingSourceKindKey.String("topic")
-)
-
-// MessagingSourceName returns an attribute KeyValue conforming to the
-// "messaging.source.name" semantic conventions. It represents the message
-// source name
-func MessagingSourceName(val string) attribute.KeyValue {
-	return MessagingSourceNameKey.String(val)
-}
-
-// MessagingSourceTemplate returns an attribute KeyValue conforming to the
-// "messaging.source.template" semantic conventions. It represents the low
-// cardinality representation of the messaging source name
-func MessagingSourceTemplate(val string) attribute.KeyValue {
-	return MessagingSourceTemplateKey.String(val)
-}
-
-// MessagingSourceTemporary returns an attribute KeyValue conforming to the
-// "messaging.source.temporary" semantic conventions. It represents a boolean
-// that is true if the message source is temporary and might not exist anymore
-// after messages are processed.
-func MessagingSourceTemporary(val bool) attribute.KeyValue {
-	return MessagingSourceTemporaryKey.Bool(val)
-}
-
-// MessagingSourceAnonymous returns an attribute KeyValue conforming to the
-// "messaging.source.anonymous" semantic conventions. It represents a boolean
-// that is true if the message source is anonymous (could be unnamed or have
-// auto-generated name).
-func MessagingSourceAnonymous(val bool) attribute.KeyValue {
-	return MessagingSourceAnonymousKey.Bool(val)
-}
-
 // General attributes used in messaging systems.
 const (
 	// MessagingSystemKey is the attribute Key conforming to the
@@ -2832,349 +2359,6 @@ func MessagingConsumerID(val string) attribute.KeyValue {
 	return MessagingConsumerIDKey.String(val)
 }
 
-// Attributes for RabbitMQ
-const (
-	// MessagingRabbitmqDestinationRoutingKeyKey is the attribute Key
-	// conforming to the "messaging.rabbitmq.destination.routing_key" semantic
-	// conventions. It represents the rabbitMQ message routing key.
-	//
-	// Type: string
-	// RequirementLevel: ConditionallyRequired (If not empty.)
-	// Stability: stable
-	// Examples: 'myKey'
-	MessagingRabbitmqDestinationRoutingKeyKey = attribute.Key("messaging.rabbitmq.destination.routing_key")
-)
-
-// MessagingRabbitmqDestinationRoutingKey returns an attribute KeyValue
-// conforming to the "messaging.rabbitmq.destination.routing_key" semantic
-// conventions. It represents the rabbitMQ message routing key.
-func MessagingRabbitmqDestinationRoutingKey(val string) attribute.KeyValue {
-	return MessagingRabbitmqDestinationRoutingKeyKey.String(val)
-}
-
-// Attributes for Apache Kafka
-const (
-	// MessagingKafkaMessageKeyKey is the attribute Key conforming to the
-	// "messaging.kafka.message.key" semantic conventions. It represents the
-	// message keys in Kafka are used for grouping alike messages to ensure
-	// they're processed on the same partition. They differ from
-	// `messaging.message.id` in that they're not unique. If the key is `null`,
-	// the attribute MUST NOT be set.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'myKey'
-	// Note: If the key type is not string, it's string representation has to
-	// be supplied for the attribute. If the key has no unambiguous, canonical
-	// string form, don't include its value.
-	MessagingKafkaMessageKeyKey = attribute.Key("messaging.kafka.message.key")
-
-	// MessagingKafkaConsumerGroupKey is the attribute Key conforming to the
-	// "messaging.kafka.consumer.group" semantic conventions. It represents the
-	// name of the Kafka Consumer Group that is handling the message. Only
-	// applies to consumers, not producers.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'my-group'
-	MessagingKafkaConsumerGroupKey = attribute.Key("messaging.kafka.consumer.group")
-
-	// MessagingKafkaClientIDKey is the attribute Key conforming to the
-	// "messaging.kafka.client_id" semantic conventions. It represents the
-	// client ID for the Consumer or Producer that is handling the message.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'client-5'
-	MessagingKafkaClientIDKey = attribute.Key("messaging.kafka.client_id")
-
-	// MessagingKafkaDestinationPartitionKey is the attribute Key conforming to
-	// the "messaging.kafka.destination.partition" semantic conventions. It
-	// represents the partition the message is sent to.
-	//
-	// Type: int
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 2
-	MessagingKafkaDestinationPartitionKey = attribute.Key("messaging.kafka.destination.partition")
-
-	// MessagingKafkaSourcePartitionKey is the attribute Key conforming to the
-	// "messaging.kafka.source.partition" semantic conventions. It represents
-	// the partition the message is received from.
-	//
-	// Type: int
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 2
-	MessagingKafkaSourcePartitionKey = attribute.Key("messaging.kafka.source.partition")
-
-	// MessagingKafkaMessageOffsetKey is the attribute Key conforming to the
-	// "messaging.kafka.message.offset" semantic conventions. It represents the
-	// offset of a record in the corresponding Kafka partition.
-	//
-	// Type: int
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 42
-	MessagingKafkaMessageOffsetKey = attribute.Key("messaging.kafka.message.offset")
-
-	// MessagingKafkaMessageTombstoneKey is the attribute Key conforming to the
-	// "messaging.kafka.message.tombstone" semantic conventions. It represents
-	// a boolean that is true if the message is a tombstone.
-	//
-	// Type: boolean
-	// RequirementLevel: ConditionallyRequired (If value is `true`. When
-	// missing, the value is assumed to be `false`.)
-	// Stability: stable
-	MessagingKafkaMessageTombstoneKey = attribute.Key("messaging.kafka.message.tombstone")
-)
-
-// MessagingKafkaMessageKey returns an attribute KeyValue conforming to the
-// "messaging.kafka.message.key" semantic conventions. It represents the
-// message keys in Kafka are used for grouping alike messages to ensure they're
-// processed on the same partition. They differ from `messaging.message.id` in
-// that they're not unique. If the key is `null`, the attribute MUST NOT be
-// set.
-func MessagingKafkaMessageKey(val string) attribute.KeyValue {
-	return MessagingKafkaMessageKeyKey.String(val)
-}
-
-// MessagingKafkaConsumerGroup returns an attribute KeyValue conforming to
-// the "messaging.kafka.consumer.group" semantic conventions. It represents the
-// name of the Kafka Consumer Group that is handling the message. Only applies
-// to consumers, not producers.
-func MessagingKafkaConsumerGroup(val string) attribute.KeyValue {
-	return MessagingKafkaConsumerGroupKey.String(val)
-}
-
-// MessagingKafkaClientID returns an attribute KeyValue conforming to the
-// "messaging.kafka.client_id" semantic conventions. It represents the client
-// ID for the Consumer or Producer that is handling the message.
-func MessagingKafkaClientID(val string) attribute.KeyValue {
-	return MessagingKafkaClientIDKey.String(val)
-}
-
-// MessagingKafkaDestinationPartition returns an attribute KeyValue
-// conforming to the "messaging.kafka.destination.partition" semantic
-// conventions. It represents the partition the message is sent to.
-func MessagingKafkaDestinationPartition(val int) attribute.KeyValue {
-	return MessagingKafkaDestinationPartitionKey.Int(val)
-}
-
-// MessagingKafkaSourcePartition returns an attribute KeyValue conforming to
-// the "messaging.kafka.source.partition" semantic conventions. It represents
-// the partition the message is received from.
-func MessagingKafkaSourcePartition(val int) attribute.KeyValue {
-	return MessagingKafkaSourcePartitionKey.Int(val)
-}
-
-// MessagingKafkaMessageOffset returns an attribute KeyValue conforming to
-// the "messaging.kafka.message.offset" semantic conventions. It represents the
-// offset of a record in the corresponding Kafka partition.
-func MessagingKafkaMessageOffset(val int) attribute.KeyValue {
-	return MessagingKafkaMessageOffsetKey.Int(val)
-}
-
-// MessagingKafkaMessageTombstone returns an attribute KeyValue conforming
-// to the "messaging.kafka.message.tombstone" semantic conventions. It
-// represents a boolean that is true if the message is a tombstone.
-func MessagingKafkaMessageTombstone(val bool) attribute.KeyValue {
-	return MessagingKafkaMessageTombstoneKey.Bool(val)
-}
-
-// Attributes for Apache RocketMQ
-const (
-	// MessagingRocketmqNamespaceKey is the attribute Key conforming to the
-	// "messaging.rocketmq.namespace" semantic conventions. It represents the
-	// namespace of RocketMQ resources, resources in different namespaces are
-	// individual.
-	//
-	// Type: string
-	// RequirementLevel: Required
-	// Stability: stable
-	// Examples: 'myNamespace'
-	MessagingRocketmqNamespaceKey = attribute.Key("messaging.rocketmq.namespace")
-
-	// MessagingRocketmqClientGroupKey is the attribute Key conforming to the
-	// "messaging.rocketmq.client_group" semantic conventions. It represents
-	// the name of the RocketMQ producer/consumer group that is handling the
-	// message. The client type is identified by the SpanKind.
-	//
-	// Type: string
-	// RequirementLevel: Required
-	// Stability: stable
-	// Examples: 'myConsumerGroup'
-	MessagingRocketmqClientGroupKey = attribute.Key("messaging.rocketmq.client_group")
-
-	// MessagingRocketmqClientIDKey is the attribute Key conforming to the
-	// "messaging.rocketmq.client_id" semantic conventions. It represents the
-	// unique identifier for each client.
-	//
-	// Type: string
-	// RequirementLevel: Required
-	// Stability: stable
-	// Examples: 'myhost@8742@s8083jm'
-	MessagingRocketmqClientIDKey = attribute.Key("messaging.rocketmq.client_id")
-
-	// MessagingRocketmqMessageDeliveryTimestampKey is the attribute Key
-	// conforming to the "messaging.rocketmq.message.delivery_timestamp"
-	// semantic conventions. It represents the timestamp in milliseconds that
-	// the delay message is expected to be delivered to consumer.
-	//
-	// Type: int
-	// RequirementLevel: ConditionallyRequired (If the message type is delay
-	// and delay time level is not specified.)
-	// Stability: stable
-	// Examples: 1665987217045
-	MessagingRocketmqMessageDeliveryTimestampKey = attribute.Key("messaging.rocketmq.message.delivery_timestamp")
-
-	// MessagingRocketmqMessageDelayTimeLevelKey is the attribute Key
-	// conforming to the "messaging.rocketmq.message.delay_time_level" semantic
-	// conventions. It represents the delay time level for delay message, which
-	// determines the message delay time.
-	//
-	// Type: int
-	// RequirementLevel: ConditionallyRequired (If the message type is delay
-	// and delivery timestamp is not specified.)
-	// Stability: stable
-	// Examples: 3
-	MessagingRocketmqMessageDelayTimeLevelKey = attribute.Key("messaging.rocketmq.message.delay_time_level")
-
-	// MessagingRocketmqMessageGroupKey is the attribute Key conforming to the
-	// "messaging.rocketmq.message.group" semantic conventions. It represents
-	// the it is essential for FIFO message. Messages that belong to the same
-	// message group are always processed one by one within the same consumer
-	// group.
-	//
-	// Type: string
-	// RequirementLevel: ConditionallyRequired (If the message type is FIFO.)
-	// Stability: stable
-	// Examples: 'myMessageGroup'
-	MessagingRocketmqMessageGroupKey = attribute.Key("messaging.rocketmq.message.group")
-
-	// MessagingRocketmqMessageTypeKey is the attribute Key conforming to the
-	// "messaging.rocketmq.message.type" semantic conventions. It represents
-	// the type of message.
-	//
-	// Type: Enum
-	// RequirementLevel: Optional
-	// Stability: stable
-	MessagingRocketmqMessageTypeKey = attribute.Key("messaging.rocketmq.message.type")
-
-	// MessagingRocketmqMessageTagKey is the attribute Key conforming to the
-	// "messaging.rocketmq.message.tag" semantic conventions. It represents the
-	// secondary classifier of message besides topic.
-	//
-	// Type: string
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'tagA'
-	MessagingRocketmqMessageTagKey = attribute.Key("messaging.rocketmq.message.tag")
-
-	// MessagingRocketmqMessageKeysKey is the attribute Key conforming to the
-	// "messaging.rocketmq.message.keys" semantic conventions. It represents
-	// the key(s) of message, another way to mark message besides message id.
-	//
-	// Type: string[]
-	// RequirementLevel: Optional
-	// Stability: stable
-	// Examples: 'keyA', 'keyB'
-	MessagingRocketmqMessageKeysKey = attribute.Key("messaging.rocketmq.message.keys")
-
-	// MessagingRocketmqConsumptionModelKey is the attribute Key conforming to
-	// the "messaging.rocketmq.consumption_model" semantic conventions. It
-	// represents the model of message consumption. This only applies to
-	// consumer spans.
-	//
-	// Type: Enum
-	// RequirementLevel: Optional
-	// Stability: stable
-	MessagingRocketmqConsumptionModelKey = attribute.Key("messaging.rocketmq.consumption_model")
-)
-
-var (
-	// Normal message
-	MessagingRocketmqMessageTypeNormal = MessagingRocketmqMessageTypeKey.String("normal")
-	// FIFO message
-	MessagingRocketmqMessageTypeFifo = MessagingRocketmqMessageTypeKey.String("fifo")
-	// Delay message
-	MessagingRocketmqMessageTypeDelay = MessagingRocketmqMessageTypeKey.String("delay")
-	// Transaction message
-	MessagingRocketmqMessageTypeTransaction = MessagingRocketmqMessageTypeKey.String("transaction")
-)
-
-var (
-	// Clustering consumption model
-	MessagingRocketmqConsumptionModelClustering = MessagingRocketmqConsumptionModelKey.String("clustering")
-	// Broadcasting consumption model
-	MessagingRocketmqConsumptionModelBroadcasting = MessagingRocketmqConsumptionModelKey.String("broadcasting")
-)
-
-// MessagingRocketmqNamespace returns an attribute KeyValue conforming to
-// the "messaging.rocketmq.namespace" semantic conventions. It represents the
-// namespace of RocketMQ resources, resources in different namespaces are
-// individual.
-func MessagingRocketmqNamespace(val string) attribute.KeyValue {
-	return MessagingRocketmqNamespaceKey.String(val)
-}
-
-// MessagingRocketmqClientGroup returns an attribute KeyValue conforming to
-// the "messaging.rocketmq.client_group" semantic conventions. It represents
-// the name of the RocketMQ producer/consumer group that is handling the
-// message. The client type is identified by the SpanKind.
-func MessagingRocketmqClientGroup(val string) attribute.KeyValue {
-	return MessagingRocketmqClientGroupKey.String(val)
-}
-
-// MessagingRocketmqClientID returns an attribute KeyValue conforming to the
-// "messaging.rocketmq.client_id" semantic conventions. It represents the
-// unique identifier for each client.
-func MessagingRocketmqClientID(val string) attribute.KeyValue {
-	return MessagingRocketmqClientIDKey.String(val)
-}
-
-// MessagingRocketmqMessageDeliveryTimestamp returns an attribute KeyValue
-// conforming to the "messaging.rocketmq.message.delivery_timestamp" semantic
-// conventions. It represents the timestamp in milliseconds that the delay
-// message is expected to be delivered to consumer.
-func MessagingRocketmqMessageDeliveryTimestamp(val int) attribute.KeyValue {
-	return MessagingRocketmqMessageDeliveryTimestampKey.Int(val)
-}
-
-// MessagingRocketmqMessageDelayTimeLevel returns an attribute KeyValue
-// conforming to the "messaging.rocketmq.message.delay_time_level" semantic
-// conventions. It represents the delay time level for delay message, which
-// determines the message delay time.
-func MessagingRocketmqMessageDelayTimeLevel(val int) attribute.KeyValue {
-	return MessagingRocketmqMessageDelayTimeLevelKey.Int(val)
-}
-
-// MessagingRocketmqMessageGroup returns an attribute KeyValue conforming to
-// the "messaging.rocketmq.message.group" semantic conventions. It represents
-// the it is essential for FIFO message. Messages that belong to the same
-// message group are always processed one by one within the same consumer
-// group.
-func MessagingRocketmqMessageGroup(val string) attribute.KeyValue {
-	return MessagingRocketmqMessageGroupKey.String(val)
-}
-
-// MessagingRocketmqMessageTag returns an attribute KeyValue conforming to
-// the "messaging.rocketmq.message.tag" semantic conventions. It represents the
-// secondary classifier of message besides topic.
-func MessagingRocketmqMessageTag(val string) attribute.KeyValue {
-	return MessagingRocketmqMessageTagKey.String(val)
-}
-
-// MessagingRocketmqMessageKeys returns an attribute KeyValue conforming to
-// the "messaging.rocketmq.message.keys" semantic conventions. It represents
-// the key(s) of message, another way to mark message besides message id.
-func MessagingRocketmqMessageKeys(val ...string) attribute.KeyValue {
-	return MessagingRocketmqMessageKeysKey.StringSlice(val)
-}
-
 // Semantic conventions for remote procedure calls.
 const (
 	// RPCSystemKey is the attribute Key conforming to the "rpc.system"
@@ -3227,6 +2411,8 @@ var (
 	RPCSystemDotnetWcf = RPCSystemKey.String("dotnet_wcf")
 	// Apache Dubbo
 	RPCSystemApacheDubbo = RPCSystemKey.String("apache_dubbo")
+	// Connect RPC
+	RPCSystemConnectRPC = RPCSystemKey.String("connect_rpc")
 )
 
 // RPCService returns an attribute KeyValue conforming to the "rpc.service"
@@ -3373,3 +2559,52 @@ func RPCJsonrpcErrorCode(val int) attribute.KeyValue {
 func RPCJsonrpcErrorMessage(val string) attribute.KeyValue {
 	return RPCJsonrpcErrorMessageKey.String(val)
 }
+
+// Tech-specific attributes for Connect RPC.
+const (
+	// RPCConnectRPCErrorCodeKey is the attribute Key conforming to the
+	// "rpc.connect_rpc.error_code" semantic conventions. It represents the
+	// [error codes](https://connect.build/docs/protocol/#error-codes) of the
+	// Connect request. Error codes are always string values.
+	//
+	// Type: Enum
+	// RequirementLevel: ConditionallyRequired (If response is not successful
+	// and if error code available.)
+	// Stability: stable
+	RPCConnectRPCErrorCodeKey = attribute.Key("rpc.connect_rpc.error_code")
+)
+
+var (
+	// cancelled
+	RPCConnectRPCErrorCodeCancelled = RPCConnectRPCErrorCodeKey.String("cancelled")
+	// unknown
+	RPCConnectRPCErrorCodeUnknown = RPCConnectRPCErrorCodeKey.String("unknown")
+	// invalid_argument
+	RPCConnectRPCErrorCodeInvalidArgument = RPCConnectRPCErrorCodeKey.String("invalid_argument")
+	// deadline_exceeded
+	RPCConnectRPCErrorCodeDeadlineExceeded = RPCConnectRPCErrorCodeKey.String("deadline_exceeded")
+	// not_found
+	RPCConnectRPCErrorCodeNotFound = RPCConnectRPCErrorCodeKey.String("not_found")
+	// already_exists
+	RPCConnectRPCErrorCodeAlreadyExists = RPCConnectRPCErrorCodeKey.String("already_exists")
+	// permission_denied
+	RPCConnectRPCErrorCodePermissionDenied = RPCConnectRPCErrorCodeKey.String("permission_denied")
+	// resource_exhausted
+	RPCConnectRPCErrorCodeResourceExhausted = RPCConnectRPCErrorCodeKey.String("resource_exhausted")
+	// failed_precondition
+	RPCConnectRPCErrorCodeFailedPrecondition = RPCConnectRPCErrorCodeKey.String("failed_precondition")
+	// aborted
+	RPCConnectRPCErrorCodeAborted = RPCConnectRPCErrorCodeKey.String("aborted")
+	// out_of_range
+	RPCConnectRPCErrorCodeOutOfRange = RPCConnectRPCErrorCodeKey.String("out_of_range")
+	// unimplemented
+	RPCConnectRPCErrorCodeUnimplemented = RPCConnectRPCErrorCodeKey.String("unimplemented")
+	// internal
+	RPCConnectRPCErrorCodeInternal = RPCConnectRPCErrorCodeKey.String("internal")
+	// unavailable
+	RPCConnectRPCErrorCodeUnavailable = RPCConnectRPCErrorCodeKey.String("unavailable")
+	// data_loss
+	RPCConnectRPCErrorCodeDataLoss = RPCConnectRPCErrorCodeKey.String("data_loss")
+	// unauthenticated
+	RPCConnectRPCErrorCodeUnauthenticated = RPCConnectRPCErrorCodeKey.String("unauthenticated")
+)
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.21.0/doc.go b/vendor/go.opentelemetry.io/otel/semconv/v1.21.0/doc.go
index 7cf424855e9..0318b5ec48f 100644
--- a/vendor/go.opentelemetry.io/otel/semconv/v1.21.0/doc.go
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.21.0/doc.go
@@ -15,6 +15,6 @@
 // Package semconv implements OpenTelemetry semantic conventions.
 //
 // OpenTelemetry semantic conventions are agreed standardized naming
-// patterns for OpenTelemetry things. This package represents the conventions
-// as of the v1.21.0 version of the OpenTelemetry specification.
+// patterns for OpenTelemetry things. This package represents the v1.21.0
+// version of the OpenTelemetry semantic conventions.
 package semconv // import "go.opentelemetry.io/otel/semconv/v1.21.0"
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/attribute_group.go b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/attribute_group.go
new file mode 100644
index 00000000000..31726598d61
--- /dev/null
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/attribute_group.go
@@ -0,0 +1,4398 @@
+// Copyright The OpenTelemetry Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// Code generated from semantic convention specification. DO NOT EDIT.
+
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.24.0"
+
+import "go.opentelemetry.io/otel/attribute"
+
+// Describes FaaS attributes.
+const (
+	// FaaSInvokedNameKey is the attribute Key conforming to the
+	// "faas.invoked_name" semantic conventions. It represents the name of the
+	// invoked function.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'my-function'
+	// Note: SHOULD be equal to the `faas.name` resource attribute of the
+	// invoked function.
+	FaaSInvokedNameKey = attribute.Key("faas.invoked_name")
+
+	// FaaSInvokedProviderKey is the attribute Key conforming to the
+	// "faas.invoked_provider" semantic conventions. It represents the cloud
+	// provider of the invoked function.
+	//
+	// Type: Enum
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Note: SHOULD be equal to the `cloud.provider` resource attribute of the
+	// invoked function.
+	FaaSInvokedProviderKey = attribute.Key("faas.invoked_provider")
+
+	// FaaSInvokedRegionKey is the attribute Key conforming to the
+	// "faas.invoked_region" semantic conventions. It represents the cloud
+	// region of the invoked function.
+	//
+	// Type: string
+	// RequirementLevel: ConditionallyRequired (For some cloud providers, like
+	// AWS or GCP, the region in which a function is hosted is essential to
+	// uniquely identify the function and also part of its endpoint. Since it's
+	// part of the endpoint being called, the region is always known to
+	// clients. In these cases, `faas.invoked_region` MUST be set accordingly.
+	// If the region is unknown to the client or not required for identifying
+	// the invoked function, setting `faas.invoked_region` is optional.)
+	// Stability: experimental
+	// Examples: 'eu-central-1'
+	// Note: SHOULD be equal to the `cloud.region` resource attribute of the
+	// invoked function.
+	FaaSInvokedRegionKey = attribute.Key("faas.invoked_region")
+
+	// FaaSTriggerKey is the attribute Key conforming to the "faas.trigger"
+	// semantic conventions. It represents the type of the trigger which caused
+	// this function invocation.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	FaaSTriggerKey = attribute.Key("faas.trigger")
+)
+
+var (
+	// Alibaba Cloud
+	FaaSInvokedProviderAlibabaCloud = FaaSInvokedProviderKey.String("alibaba_cloud")
+	// Amazon Web Services
+	FaaSInvokedProviderAWS = FaaSInvokedProviderKey.String("aws")
+	// Microsoft Azure
+	FaaSInvokedProviderAzure = FaaSInvokedProviderKey.String("azure")
+	// Google Cloud Platform
+	FaaSInvokedProviderGCP = FaaSInvokedProviderKey.String("gcp")
+	// Tencent Cloud
+	FaaSInvokedProviderTencentCloud = FaaSInvokedProviderKey.String("tencent_cloud")
+)
+
+var (
+	// A response to some data source operation such as a database or filesystem read/write
+	FaaSTriggerDatasource = FaaSTriggerKey.String("datasource")
+	// To provide an answer to an inbound HTTP request
+	FaaSTriggerHTTP = FaaSTriggerKey.String("http")
+	// A function is set to be executed when messages are sent to a messaging system
+	FaaSTriggerPubsub = FaaSTriggerKey.String("pubsub")
+	// A function is scheduled to be executed regularly
+	FaaSTriggerTimer = FaaSTriggerKey.String("timer")
+	// If none of the others apply
+	FaaSTriggerOther = FaaSTriggerKey.String("other")
+)
+
+// FaaSInvokedName returns an attribute KeyValue conforming to the
+// "faas.invoked_name" semantic conventions. It represents the name of the
+// invoked function.
+func FaaSInvokedName(val string) attribute.KeyValue {
+	return FaaSInvokedNameKey.String(val)
+}
+
+// FaaSInvokedRegion returns an attribute KeyValue conforming to the
+// "faas.invoked_region" semantic conventions. It represents the cloud region
+// of the invoked function.
+func FaaSInvokedRegion(val string) attribute.KeyValue {
+	return FaaSInvokedRegionKey.String(val)
+}
+
+// Attributes for Events represented using Log Records.
+const (
+	// EventNameKey is the attribute Key conforming to the "event.name"
+	// semantic conventions. It represents the identifies the class / type of
+	// event.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'browser.mouse.click', 'device.app.lifecycle'
+	// Note: Event names are subject to the same rules as [attribute
+	// names](https://github.com/open-telemetry/opentelemetry-specification/tree/v1.26.0/specification/common/attribute-naming.md).
+	// Notably, event names are namespaced to avoid collisions and provide a
+	// clean separation of semantics for events in separate domains like
+	// browser, mobile, and kubernetes.
+	EventNameKey = attribute.Key("event.name")
+)
+
+// EventName returns an attribute KeyValue conforming to the "event.name"
+// semantic conventions. It represents the identifies the class / type of
+// event.
+func EventName(val string) attribute.KeyValue {
+	return EventNameKey.String(val)
+}
+
+// The attributes described in this section are rather generic. They may be
+// used in any Log Record they apply to.
+const (
+	// LogRecordUIDKey is the attribute Key conforming to the "log.record.uid"
+	// semantic conventions. It represents a unique identifier for the Log
+	// Record.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '01ARZ3NDEKTSV4RRFFQ69G5FAV'
+	// Note: If an id is provided, other log records with the same id will be
+	// considered duplicates and can be removed safely. This means, that two
+	// distinguishable log records MUST have different values.
+	// The id MAY be an [Universally Unique Lexicographically Sortable
+	// Identifier (ULID)](https://github.com/ulid/spec), but other identifiers
+	// (e.g. UUID) may be used as needed.
+	LogRecordUIDKey = attribute.Key("log.record.uid")
+)
+
+// LogRecordUID returns an attribute KeyValue conforming to the
+// "log.record.uid" semantic conventions. It represents a unique identifier for
+// the Log Record.
+func LogRecordUID(val string) attribute.KeyValue {
+	return LogRecordUIDKey.String(val)
+}
+
+// Describes Log attributes
+const (
+	// LogIostreamKey is the attribute Key conforming to the "log.iostream"
+	// semantic conventions. It represents the stream associated with the log.
+	// See below for a list of well-known values.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	LogIostreamKey = attribute.Key("log.iostream")
+)
+
+var (
+	// Logs from stdout stream
+	LogIostreamStdout = LogIostreamKey.String("stdout")
+	// Events from stderr stream
+	LogIostreamStderr = LogIostreamKey.String("stderr")
+)
+
+// A file to which log was emitted.
+const (
+	// LogFileNameKey is the attribute Key conforming to the "log.file.name"
+	// semantic conventions. It represents the basename of the file.
+	//
+	// Type: string
+	// RequirementLevel: Recommended
+	// Stability: experimental
+	// Examples: 'audit.log'
+	LogFileNameKey = attribute.Key("log.file.name")
+
+	// LogFileNameResolvedKey is the attribute Key conforming to the
+	// "log.file.name_resolved" semantic conventions. It represents the
+	// basename of the file, with symlinks resolved.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'uuid.log'
+	LogFileNameResolvedKey = attribute.Key("log.file.name_resolved")
+
+	// LogFilePathKey is the attribute Key conforming to the "log.file.path"
+	// semantic conventions. It represents the full path to the file.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '/var/log/mysql/audit.log'
+	LogFilePathKey = attribute.Key("log.file.path")
+
+	// LogFilePathResolvedKey is the attribute Key conforming to the
+	// "log.file.path_resolved" semantic conventions. It represents the full
+	// path to the file, with symlinks resolved.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '/var/lib/docker/uuid.log'
+	LogFilePathResolvedKey = attribute.Key("log.file.path_resolved")
+)
+
+// LogFileName returns an attribute KeyValue conforming to the
+// "log.file.name" semantic conventions. It represents the basename of the
+// file.
+func LogFileName(val string) attribute.KeyValue {
+	return LogFileNameKey.String(val)
+}
+
+// LogFileNameResolved returns an attribute KeyValue conforming to the
+// "log.file.name_resolved" semantic conventions. It represents the basename of
+// the file, with symlinks resolved.
+func LogFileNameResolved(val string) attribute.KeyValue {
+	return LogFileNameResolvedKey.String(val)
+}
+
+// LogFilePath returns an attribute KeyValue conforming to the
+// "log.file.path" semantic conventions. It represents the full path to the
+// file.
+func LogFilePath(val string) attribute.KeyValue {
+	return LogFilePathKey.String(val)
+}
+
+// LogFilePathResolved returns an attribute KeyValue conforming to the
+// "log.file.path_resolved" semantic conventions. It represents the full path
+// to the file, with symlinks resolved.
+func LogFilePathResolved(val string) attribute.KeyValue {
+	return LogFilePathResolvedKey.String(val)
+}
+
+// Describes Database attributes
+const (
+	// PoolNameKey is the attribute Key conforming to the "pool.name" semantic
+	// conventions. It represents the name of the connection pool; unique
+	// within the instrumented application. In case the connection pool
+	// implementation doesn't provide a name, then the
+	// [db.connection_string](/docs/database/database-spans.md#connection-level-attributes)
+	// should be used
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'myDataSource'
+	PoolNameKey = attribute.Key("pool.name")
+
+	// StateKey is the attribute Key conforming to the "state" semantic
+	// conventions. It represents the state of a connection in the pool
+	//
+	// Type: Enum
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'idle'
+	StateKey = attribute.Key("state")
+)
+
+var (
+	// idle
+	StateIdle = StateKey.String("idle")
+	// used
+	StateUsed = StateKey.String("used")
+)
+
+// PoolName returns an attribute KeyValue conforming to the "pool.name"
+// semantic conventions. It represents the name of the connection pool; unique
+// within the instrumented application. In case the connection pool
+// implementation doesn't provide a name, then the
+// [db.connection_string](/docs/database/database-spans.md#connection-level-attributes)
+// should be used
+func PoolName(val string) attribute.KeyValue {
+	return PoolNameKey.String(val)
+}
+
+// ASP.NET Core attributes
+const (
+	// AspnetcoreDiagnosticsHandlerTypeKey is the attribute Key conforming to
+	// the "aspnetcore.diagnostics.handler.type" semantic conventions. It
+	// represents the full type name of the
+	// [`IExceptionHandler`](https://learn.microsoft.com/dotnet/api/microsoft.aspnetcore.diagnostics.iexceptionhandler)
+	// implementation that handled the exception.
+	//
+	// Type: string
+	// RequirementLevel: ConditionallyRequired (if and only if the exception
+	// was handled by this handler.)
+	// Stability: experimental
+	// Examples: 'Contoso.MyHandler'
+	AspnetcoreDiagnosticsHandlerTypeKey = attribute.Key("aspnetcore.diagnostics.handler.type")
+
+	// AspnetcoreRateLimitingPolicyKey is the attribute Key conforming to the
+	// "aspnetcore.rate_limiting.policy" semantic conventions. It represents
+	// the rate limiting policy name.
+	//
+	// Type: string
+	// RequirementLevel: ConditionallyRequired (if the matched endpoint for the
+	// request had a rate-limiting policy.)
+	// Stability: experimental
+	// Examples: 'fixed', 'sliding', 'token'
+	AspnetcoreRateLimitingPolicyKey = attribute.Key("aspnetcore.rate_limiting.policy")
+
+	// AspnetcoreRateLimitingResultKey is the attribute Key conforming to the
+	// "aspnetcore.rate_limiting.result" semantic conventions. It represents
+	// the rate-limiting result, shows whether the lease was acquired or
+	// contains a rejection reason
+	//
+	// Type: Enum
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'acquired', 'request_canceled'
+	AspnetcoreRateLimitingResultKey = attribute.Key("aspnetcore.rate_limiting.result")
+
+	// AspnetcoreRequestIsUnhandledKey is the attribute Key conforming to the
+	// "aspnetcore.request.is_unhandled" semantic conventions. It represents
+	// the flag indicating if request was handled by the application pipeline.
+	//
+	// Type: boolean
+	// RequirementLevel: ConditionallyRequired (if and only if the request was
+	// not handled.)
+	// Stability: experimental
+	// Examples: True
+	AspnetcoreRequestIsUnhandledKey = attribute.Key("aspnetcore.request.is_unhandled")
+
+	// AspnetcoreRoutingIsFallbackKey is the attribute Key conforming to the
+	// "aspnetcore.routing.is_fallback" semantic conventions. It represents a
+	// value that indicates whether the matched route is a fallback route.
+	//
+	// Type: boolean
+	// RequirementLevel: ConditionallyRequired (If and only if a route was
+	// successfully matched.)
+	// Stability: experimental
+	// Examples: True
+	AspnetcoreRoutingIsFallbackKey = attribute.Key("aspnetcore.routing.is_fallback")
+)
+
+var (
+	// Lease was acquired
+	AspnetcoreRateLimitingResultAcquired = AspnetcoreRateLimitingResultKey.String("acquired")
+	// Lease request was rejected by the endpoint limiter
+	AspnetcoreRateLimitingResultEndpointLimiter = AspnetcoreRateLimitingResultKey.String("endpoint_limiter")
+	// Lease request was rejected by the global limiter
+	AspnetcoreRateLimitingResultGlobalLimiter = AspnetcoreRateLimitingResultKey.String("global_limiter")
+	// Lease request was canceled
+	AspnetcoreRateLimitingResultRequestCanceled = AspnetcoreRateLimitingResultKey.String("request_canceled")
+)
+
+// AspnetcoreDiagnosticsHandlerType returns an attribute KeyValue conforming
+// to the "aspnetcore.diagnostics.handler.type" semantic conventions. It
+// represents the full type name of the
+// [`IExceptionHandler`](https://learn.microsoft.com/dotnet/api/microsoft.aspnetcore.diagnostics.iexceptionhandler)
+// implementation that handled the exception.
+func AspnetcoreDiagnosticsHandlerType(val string) attribute.KeyValue {
+	return AspnetcoreDiagnosticsHandlerTypeKey.String(val)
+}
+
+// AspnetcoreRateLimitingPolicy returns an attribute KeyValue conforming to
+// the "aspnetcore.rate_limiting.policy" semantic conventions. It represents
+// the rate limiting policy name.
+func AspnetcoreRateLimitingPolicy(val string) attribute.KeyValue {
+	return AspnetcoreRateLimitingPolicyKey.String(val)
+}
+
+// AspnetcoreRequestIsUnhandled returns an attribute KeyValue conforming to
+// the "aspnetcore.request.is_unhandled" semantic conventions. It represents
+// the flag indicating if request was handled by the application pipeline.
+func AspnetcoreRequestIsUnhandled(val bool) attribute.KeyValue {
+	return AspnetcoreRequestIsUnhandledKey.Bool(val)
+}
+
+// AspnetcoreRoutingIsFallback returns an attribute KeyValue conforming to
+// the "aspnetcore.routing.is_fallback" semantic conventions. It represents a
+// value that indicates whether the matched route is a fallback route.
+func AspnetcoreRoutingIsFallback(val bool) attribute.KeyValue {
+	return AspnetcoreRoutingIsFallbackKey.Bool(val)
+}
+
+// SignalR attributes
+const (
+	// SignalrConnectionStatusKey is the attribute Key conforming to the
+	// "signalr.connection.status" semantic conventions. It represents the
+	// signalR HTTP connection closure status.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'app_shutdown', 'timeout'
+	SignalrConnectionStatusKey = attribute.Key("signalr.connection.status")
+
+	// SignalrTransportKey is the attribute Key conforming to the
+	// "signalr.transport" semantic conventions. It represents the [SignalR
+	// transport
+	// type](https://github.com/dotnet/aspnetcore/blob/main/src/SignalR/docs/specs/TransportProtocols.md)
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'web_sockets', 'long_polling'
+	SignalrTransportKey = attribute.Key("signalr.transport")
+)
+
+var (
+	// The connection was closed normally
+	SignalrConnectionStatusNormalClosure = SignalrConnectionStatusKey.String("normal_closure")
+	// The connection was closed due to a timeout
+	SignalrConnectionStatusTimeout = SignalrConnectionStatusKey.String("timeout")
+	// The connection was closed because the app is shutting down
+	SignalrConnectionStatusAppShutdown = SignalrConnectionStatusKey.String("app_shutdown")
+)
+
+var (
+	// ServerSentEvents protocol
+	SignalrTransportServerSentEvents = SignalrTransportKey.String("server_sent_events")
+	// LongPolling protocol
+	SignalrTransportLongPolling = SignalrTransportKey.String("long_polling")
+	// WebSockets protocol
+	SignalrTransportWebSockets = SignalrTransportKey.String("web_sockets")
+)
+
+// Describes JVM buffer metric attributes.
+const (
+	// JvmBufferPoolNameKey is the attribute Key conforming to the
+	// "jvm.buffer.pool.name" semantic conventions. It represents the name of
+	// the buffer pool.
+	//
+	// Type: string
+	// RequirementLevel: Recommended
+	// Stability: experimental
+	// Examples: 'mapped', 'direct'
+	// Note: Pool names are generally obtained via
+	// [BufferPoolMXBean#getName()](https://docs.oracle.com/en/java/javase/11/docs/api/java.management/java/lang/management/BufferPoolMXBean.html#getName()).
+	JvmBufferPoolNameKey = attribute.Key("jvm.buffer.pool.name")
+)
+
+// JvmBufferPoolName returns an attribute KeyValue conforming to the
+// "jvm.buffer.pool.name" semantic conventions. It represents the name of the
+// buffer pool.
+func JvmBufferPoolName(val string) attribute.KeyValue {
+	return JvmBufferPoolNameKey.String(val)
+}
+
+// Describes JVM memory metric attributes.
+const (
+	// JvmMemoryPoolNameKey is the attribute Key conforming to the
+	// "jvm.memory.pool.name" semantic conventions. It represents the name of
+	// the memory pool.
+	//
+	// Type: string
+	// RequirementLevel: Recommended
+	// Stability: stable
+	// Examples: 'G1 Old Gen', 'G1 Eden space', 'G1 Survivor Space'
+	// Note: Pool names are generally obtained via
+	// [MemoryPoolMXBean#getName()](https://docs.oracle.com/en/java/javase/11/docs/api/java.management/java/lang/management/MemoryPoolMXBean.html#getName()).
+	JvmMemoryPoolNameKey = attribute.Key("jvm.memory.pool.name")
+
+	// JvmMemoryTypeKey is the attribute Key conforming to the
+	// "jvm.memory.type" semantic conventions. It represents the type of
+	// memory.
+	//
+	// Type: Enum
+	// RequirementLevel: Recommended
+	// Stability: stable
+	// Examples: 'heap', 'non_heap'
+	JvmMemoryTypeKey = attribute.Key("jvm.memory.type")
+)
+
+var (
+	// Heap memory
+	JvmMemoryTypeHeap = JvmMemoryTypeKey.String("heap")
+	// Non-heap memory
+	JvmMemoryTypeNonHeap = JvmMemoryTypeKey.String("non_heap")
+)
+
+// JvmMemoryPoolName returns an attribute KeyValue conforming to the
+// "jvm.memory.pool.name" semantic conventions. It represents the name of the
+// memory pool.
+func JvmMemoryPoolName(val string) attribute.KeyValue {
+	return JvmMemoryPoolNameKey.String(val)
+}
+
+// Describes System metric attributes
+const (
+	// SystemDeviceKey is the attribute Key conforming to the "system.device"
+	// semantic conventions. It represents the device identifier
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '(identifier)'
+	SystemDeviceKey = attribute.Key("system.device")
+)
+
+// SystemDevice returns an attribute KeyValue conforming to the
+// "system.device" semantic conventions. It represents the device identifier
+func SystemDevice(val string) attribute.KeyValue {
+	return SystemDeviceKey.String(val)
+}
+
+// Describes System CPU metric attributes
+const (
+	// SystemCPULogicalNumberKey is the attribute Key conforming to the
+	// "system.cpu.logical_number" semantic conventions. It represents the
+	// logical CPU number [0..n-1]
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 1
+	SystemCPULogicalNumberKey = attribute.Key("system.cpu.logical_number")
+
+	// SystemCPUStateKey is the attribute Key conforming to the
+	// "system.cpu.state" semantic conventions. It represents the state of the
+	// CPU
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'idle', 'interrupt'
+	SystemCPUStateKey = attribute.Key("system.cpu.state")
+)
+
+var (
+	// user
+	SystemCPUStateUser = SystemCPUStateKey.String("user")
+	// system
+	SystemCPUStateSystem = SystemCPUStateKey.String("system")
+	// nice
+	SystemCPUStateNice = SystemCPUStateKey.String("nice")
+	// idle
+	SystemCPUStateIdle = SystemCPUStateKey.String("idle")
+	// iowait
+	SystemCPUStateIowait = SystemCPUStateKey.String("iowait")
+	// interrupt
+	SystemCPUStateInterrupt = SystemCPUStateKey.String("interrupt")
+	// steal
+	SystemCPUStateSteal = SystemCPUStateKey.String("steal")
+)
+
+// SystemCPULogicalNumber returns an attribute KeyValue conforming to the
+// "system.cpu.logical_number" semantic conventions. It represents the logical
+// CPU number [0..n-1]
+func SystemCPULogicalNumber(val int) attribute.KeyValue {
+	return SystemCPULogicalNumberKey.Int(val)
+}
+
+// Describes System Memory metric attributes
+const (
+	// SystemMemoryStateKey is the attribute Key conforming to the
+	// "system.memory.state" semantic conventions. It represents the memory
+	// state
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'free', 'cached'
+	SystemMemoryStateKey = attribute.Key("system.memory.state")
+)
+
+var (
+	// used
+	SystemMemoryStateUsed = SystemMemoryStateKey.String("used")
+	// free
+	SystemMemoryStateFree = SystemMemoryStateKey.String("free")
+	// shared
+	SystemMemoryStateShared = SystemMemoryStateKey.String("shared")
+	// buffers
+	SystemMemoryStateBuffers = SystemMemoryStateKey.String("buffers")
+	// cached
+	SystemMemoryStateCached = SystemMemoryStateKey.String("cached")
+)
+
+// Describes System Memory Paging metric attributes
+const (
+	// SystemPagingDirectionKey is the attribute Key conforming to the
+	// "system.paging.direction" semantic conventions. It represents the paging
+	// access direction
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'in'
+	SystemPagingDirectionKey = attribute.Key("system.paging.direction")
+
+	// SystemPagingStateKey is the attribute Key conforming to the
+	// "system.paging.state" semantic conventions. It represents the memory
+	// paging state
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'free'
+	SystemPagingStateKey = attribute.Key("system.paging.state")
+
+	// SystemPagingTypeKey is the attribute Key conforming to the
+	// "system.paging.type" semantic conventions. It represents the memory
+	// paging type
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'minor'
+	SystemPagingTypeKey = attribute.Key("system.paging.type")
+)
+
+var (
+	// in
+	SystemPagingDirectionIn = SystemPagingDirectionKey.String("in")
+	// out
+	SystemPagingDirectionOut = SystemPagingDirectionKey.String("out")
+)
+
+var (
+	// used
+	SystemPagingStateUsed = SystemPagingStateKey.String("used")
+	// free
+	SystemPagingStateFree = SystemPagingStateKey.String("free")
+)
+
+var (
+	// major
+	SystemPagingTypeMajor = SystemPagingTypeKey.String("major")
+	// minor
+	SystemPagingTypeMinor = SystemPagingTypeKey.String("minor")
+)
+
+// Describes Filesystem metric attributes
+const (
+	// SystemFilesystemModeKey is the attribute Key conforming to the
+	// "system.filesystem.mode" semantic conventions. It represents the
+	// filesystem mode
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'rw, ro'
+	SystemFilesystemModeKey = attribute.Key("system.filesystem.mode")
+
+	// SystemFilesystemMountpointKey is the attribute Key conforming to the
+	// "system.filesystem.mountpoint" semantic conventions. It represents the
+	// filesystem mount path
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '/mnt/data'
+	SystemFilesystemMountpointKey = attribute.Key("system.filesystem.mountpoint")
+
+	// SystemFilesystemStateKey is the attribute Key conforming to the
+	// "system.filesystem.state" semantic conventions. It represents the
+	// filesystem state
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'used'
+	SystemFilesystemStateKey = attribute.Key("system.filesystem.state")
+
+	// SystemFilesystemTypeKey is the attribute Key conforming to the
+	// "system.filesystem.type" semantic conventions. It represents the
+	// filesystem type
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'ext4'
+	SystemFilesystemTypeKey = attribute.Key("system.filesystem.type")
+)
+
+var (
+	// used
+	SystemFilesystemStateUsed = SystemFilesystemStateKey.String("used")
+	// free
+	SystemFilesystemStateFree = SystemFilesystemStateKey.String("free")
+	// reserved
+	SystemFilesystemStateReserved = SystemFilesystemStateKey.String("reserved")
+)
+
+var (
+	// fat32
+	SystemFilesystemTypeFat32 = SystemFilesystemTypeKey.String("fat32")
+	// exfat
+	SystemFilesystemTypeExfat = SystemFilesystemTypeKey.String("exfat")
+	// ntfs
+	SystemFilesystemTypeNtfs = SystemFilesystemTypeKey.String("ntfs")
+	// refs
+	SystemFilesystemTypeRefs = SystemFilesystemTypeKey.String("refs")
+	// hfsplus
+	SystemFilesystemTypeHfsplus = SystemFilesystemTypeKey.String("hfsplus")
+	// ext4
+	SystemFilesystemTypeExt4 = SystemFilesystemTypeKey.String("ext4")
+)
+
+// SystemFilesystemMode returns an attribute KeyValue conforming to the
+// "system.filesystem.mode" semantic conventions. It represents the filesystem
+// mode
+func SystemFilesystemMode(val string) attribute.KeyValue {
+	return SystemFilesystemModeKey.String(val)
+}
+
+// SystemFilesystemMountpoint returns an attribute KeyValue conforming to
+// the "system.filesystem.mountpoint" semantic conventions. It represents the
+// filesystem mount path
+func SystemFilesystemMountpoint(val string) attribute.KeyValue {
+	return SystemFilesystemMountpointKey.String(val)
+}
+
+// Describes Network metric attributes
+const (
+	// SystemNetworkStateKey is the attribute Key conforming to the
+	// "system.network.state" semantic conventions. It represents a stateless
+	// protocol MUST NOT set this attribute
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'close_wait'
+	SystemNetworkStateKey = attribute.Key("system.network.state")
+)
+
+var (
+	// close
+	SystemNetworkStateClose = SystemNetworkStateKey.String("close")
+	// close_wait
+	SystemNetworkStateCloseWait = SystemNetworkStateKey.String("close_wait")
+	// closing
+	SystemNetworkStateClosing = SystemNetworkStateKey.String("closing")
+	// delete
+	SystemNetworkStateDelete = SystemNetworkStateKey.String("delete")
+	// established
+	SystemNetworkStateEstablished = SystemNetworkStateKey.String("established")
+	// fin_wait_1
+	SystemNetworkStateFinWait1 = SystemNetworkStateKey.String("fin_wait_1")
+	// fin_wait_2
+	SystemNetworkStateFinWait2 = SystemNetworkStateKey.String("fin_wait_2")
+	// last_ack
+	SystemNetworkStateLastAck = SystemNetworkStateKey.String("last_ack")
+	// listen
+	SystemNetworkStateListen = SystemNetworkStateKey.String("listen")
+	// syn_recv
+	SystemNetworkStateSynRecv = SystemNetworkStateKey.String("syn_recv")
+	// syn_sent
+	SystemNetworkStateSynSent = SystemNetworkStateKey.String("syn_sent")
+	// time_wait
+	SystemNetworkStateTimeWait = SystemNetworkStateKey.String("time_wait")
+)
+
+// Describes System Process metric attributes
+const (
+	// SystemProcessesStatusKey is the attribute Key conforming to the
+	// "system.processes.status" semantic conventions. It represents the
+	// process state, e.g., [Linux Process State
+	// Codes](https://man7.org/linux/man-pages/man1/ps.1.html#PROCESS_STATE_CODES)
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'running'
+	SystemProcessesStatusKey = attribute.Key("system.processes.status")
+)
+
+var (
+	// running
+	SystemProcessesStatusRunning = SystemProcessesStatusKey.String("running")
+	// sleeping
+	SystemProcessesStatusSleeping = SystemProcessesStatusKey.String("sleeping")
+	// stopped
+	SystemProcessesStatusStopped = SystemProcessesStatusKey.String("stopped")
+	// defunct
+	SystemProcessesStatusDefunct = SystemProcessesStatusKey.String("defunct")
+)
+
+// These attributes may be used to describe the client in a connection-based
+// network interaction where there is one side that initiates the connection
+// (the client is the side that initiates the connection). This covers all TCP
+// network interactions since TCP is connection-based and one side initiates
+// the connection (an exception is made for peer-to-peer communication over TCP
+// where the "user-facing" surface of the protocol / API doesn't expose a clear
+// notion of client and server). This also covers UDP network interactions
+// where one side initiates the interaction, e.g. QUIC (HTTP/3) and DNS.
+const (
+	// ClientAddressKey is the attribute Key conforming to the "client.address"
+	// semantic conventions. It represents the client address - domain name if
+	// available without reverse DNS lookup; otherwise, IP address or Unix
+	// domain socket name.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'client.example.com', '10.1.2.80', '/tmp/my.sock'
+	// Note: When observed from the server side, and when communicating through
+	// an intermediary, `client.address` SHOULD represent the client address
+	// behind any intermediaries,  for example proxies, if it's available.
+	ClientAddressKey = attribute.Key("client.address")
+
+	// ClientPortKey is the attribute Key conforming to the "client.port"
+	// semantic conventions. It represents the client port number.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 65123
+	// Note: When observed from the server side, and when communicating through
+	// an intermediary, `client.port` SHOULD represent the client port behind
+	// any intermediaries,  for example proxies, if it's available.
+	ClientPortKey = attribute.Key("client.port")
+)
+
+// ClientAddress returns an attribute KeyValue conforming to the
+// "client.address" semantic conventions. It represents the client address -
+// domain name if available without reverse DNS lookup; otherwise, IP address
+// or Unix domain socket name.
+func ClientAddress(val string) attribute.KeyValue {
+	return ClientAddressKey.String(val)
+}
+
+// ClientPort returns an attribute KeyValue conforming to the "client.port"
+// semantic conventions. It represents the client port number.
+func ClientPort(val int) attribute.KeyValue {
+	return ClientPortKey.Int(val)
+}
+
+// The attributes used to describe telemetry in the context of databases.
+const (
+	// DBCassandraConsistencyLevelKey is the attribute Key conforming to the
+	// "db.cassandra.consistency_level" semantic conventions. It represents the
+	// consistency level of the query. Based on consistency values from
+	// [CQL](https://docs.datastax.com/en/cassandra-oss/3.0/cassandra/dml/dmlConfigConsistency.html).
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	DBCassandraConsistencyLevelKey = attribute.Key("db.cassandra.consistency_level")
+
+	// DBCassandraCoordinatorDCKey is the attribute Key conforming to the
+	// "db.cassandra.coordinator.dc" semantic conventions. It represents the
+	// data center of the coordinating node for a query.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'us-west-2'
+	DBCassandraCoordinatorDCKey = attribute.Key("db.cassandra.coordinator.dc")
+
+	// DBCassandraCoordinatorIDKey is the attribute Key conforming to the
+	// "db.cassandra.coordinator.id" semantic conventions. It represents the ID
+	// of the coordinating node for a query.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'be13faa2-8574-4d71-926d-27f16cf8a7af'
+	DBCassandraCoordinatorIDKey = attribute.Key("db.cassandra.coordinator.id")
+
+	// DBCassandraIdempotenceKey is the attribute Key conforming to the
+	// "db.cassandra.idempotence" semantic conventions. It represents the
+	// whether or not the query is idempotent.
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	DBCassandraIdempotenceKey = attribute.Key("db.cassandra.idempotence")
+
+	// DBCassandraPageSizeKey is the attribute Key conforming to the
+	// "db.cassandra.page_size" semantic conventions. It represents the fetch
+	// size used for paging, i.e. how many rows will be returned at once.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 5000
+	DBCassandraPageSizeKey = attribute.Key("db.cassandra.page_size")
+
+	// DBCassandraSpeculativeExecutionCountKey is the attribute Key conforming
+	// to the "db.cassandra.speculative_execution_count" semantic conventions.
+	// It represents the number of times a query was speculatively executed.
+	// Not set or `0` if the query was not executed speculatively.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 0, 2
+	DBCassandraSpeculativeExecutionCountKey = attribute.Key("db.cassandra.speculative_execution_count")
+
+	// DBCassandraTableKey is the attribute Key conforming to the
+	// "db.cassandra.table" semantic conventions. It represents the name of the
+	// primary Cassandra table that the operation is acting upon, including the
+	// keyspace name (if applicable).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'mytable'
+	// Note: This mirrors the db.sql.table attribute but references cassandra
+	// rather than sql. It is not recommended to attempt any client-side
+	// parsing of `db.statement` just to get this property, but it should be
+	// set if it is provided by the library being instrumented. If the
+	// operation is acting upon an anonymous table, or more than one table,
+	// this value MUST NOT be set.
+	DBCassandraTableKey = attribute.Key("db.cassandra.table")
+
+	// DBConnectionStringKey is the attribute Key conforming to the
+	// "db.connection_string" semantic conventions. It represents the
+	// connection string used to connect to the database. It is recommended to
+	// remove embedded credentials.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Server=(localdb)\\v11.0;Integrated Security=true;'
+	DBConnectionStringKey = attribute.Key("db.connection_string")
+
+	// DBCosmosDBClientIDKey is the attribute Key conforming to the
+	// "db.cosmosdb.client_id" semantic conventions. It represents the unique
+	// Cosmos client instance id.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '3ba4827d-4422-483f-b59f-85b74211c11d'
+	DBCosmosDBClientIDKey = attribute.Key("db.cosmosdb.client_id")
+
+	// DBCosmosDBConnectionModeKey is the attribute Key conforming to the
+	// "db.cosmosdb.connection_mode" semantic conventions. It represents the
+	// cosmos client connection mode.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	DBCosmosDBConnectionModeKey = attribute.Key("db.cosmosdb.connection_mode")
+
+	// DBCosmosDBContainerKey is the attribute Key conforming to the
+	// "db.cosmosdb.container" semantic conventions. It represents the cosmos
+	// DB container name.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'anystring'
+	DBCosmosDBContainerKey = attribute.Key("db.cosmosdb.container")
+
+	// DBCosmosDBOperationTypeKey is the attribute Key conforming to the
+	// "db.cosmosdb.operation_type" semantic conventions. It represents the
+	// cosmosDB Operation Type.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	DBCosmosDBOperationTypeKey = attribute.Key("db.cosmosdb.operation_type")
+
+	// DBCosmosDBRequestChargeKey is the attribute Key conforming to the
+	// "db.cosmosdb.request_charge" semantic conventions. It represents the rU
+	// consumed for that operation
+	//
+	// Type: double
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 46.18, 1.0
+	DBCosmosDBRequestChargeKey = attribute.Key("db.cosmosdb.request_charge")
+
+	// DBCosmosDBRequestContentLengthKey is the attribute Key conforming to the
+	// "db.cosmosdb.request_content_length" semantic conventions. It represents
+	// the request payload size in bytes
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	DBCosmosDBRequestContentLengthKey = attribute.Key("db.cosmosdb.request_content_length")
+
+	// DBCosmosDBStatusCodeKey is the attribute Key conforming to the
+	// "db.cosmosdb.status_code" semantic conventions. It represents the cosmos
+	// DB status code.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 200, 201
+	DBCosmosDBStatusCodeKey = attribute.Key("db.cosmosdb.status_code")
+
+	// DBCosmosDBSubStatusCodeKey is the attribute Key conforming to the
+	// "db.cosmosdb.sub_status_code" semantic conventions. It represents the
+	// cosmos DB sub status code.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 1000, 1002
+	DBCosmosDBSubStatusCodeKey = attribute.Key("db.cosmosdb.sub_status_code")
+
+	// DBElasticsearchClusterNameKey is the attribute Key conforming to the
+	// "db.elasticsearch.cluster.name" semantic conventions. It represents the
+	// represents the identifier of an Elasticsearch cluster.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'e9106fc68e3044f0b1475b04bf4ffd5f'
+	DBElasticsearchClusterNameKey = attribute.Key("db.elasticsearch.cluster.name")
+
+	// DBElasticsearchNodeNameKey is the attribute Key conforming to the
+	// "db.elasticsearch.node.name" semantic conventions. It represents the
+	// represents the human-readable identifier of the node/instance to which a
+	// request was routed.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'instance-0000000001'
+	DBElasticsearchNodeNameKey = attribute.Key("db.elasticsearch.node.name")
+
+	// DBInstanceIDKey is the attribute Key conforming to the "db.instance.id"
+	// semantic conventions. It represents an identifier (address, unique name,
+	// or any other identifier) of the database instance that is executing
+	// queries or mutations on the current connection. This is useful in cases
+	// where the database is running in a clustered environment and the
+	// instrumentation is able to record the node executing the query. The
+	// client may obtain this value in databases like MySQL using queries like
+	// `select @@hostname`.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'mysql-e26b99z.example.com'
+	DBInstanceIDKey = attribute.Key("db.instance.id")
+
+	// DBJDBCDriverClassnameKey is the attribute Key conforming to the
+	// "db.jdbc.driver_classname" semantic conventions. It represents the
+	// fully-qualified class name of the [Java Database Connectivity
+	// (JDBC)](https://docs.oracle.com/javase/8/docs/technotes/guides/jdbc/)
+	// driver used to connect.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'org.postgresql.Driver',
+	// 'com.microsoft.sqlserver.jdbc.SQLServerDriver'
+	DBJDBCDriverClassnameKey = attribute.Key("db.jdbc.driver_classname")
+
+	// DBMongoDBCollectionKey is the attribute Key conforming to the
+	// "db.mongodb.collection" semantic conventions. It represents the MongoDB
+	// collection being accessed within the database stated in `db.name`.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'customers', 'products'
+	DBMongoDBCollectionKey = attribute.Key("db.mongodb.collection")
+
+	// DBMSSQLInstanceNameKey is the attribute Key conforming to the
+	// "db.mssql.instance_name" semantic conventions. It represents the
+	// Microsoft SQL Server [instance
+	// name](https://docs.microsoft.com/sql/connect/jdbc/building-the-connection-url?view=sql-server-ver15)
+	// connecting to. This name is used to determine the port of a named
+	// instance.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'MSSQLSERVER'
+	// Note: If setting a `db.mssql.instance_name`, `server.port` is no longer
+	// required (but still recommended if non-standard).
+	DBMSSQLInstanceNameKey = attribute.Key("db.mssql.instance_name")
+
+	// DBNameKey is the attribute Key conforming to the "db.name" semantic
+	// conventions. It represents the this attribute is used to report the name
+	// of the database being accessed. For commands that switch the database,
+	// this should be set to the target database (even if the command fails).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'customers', 'main'
+	// Note: In some SQL databases, the database name to be used is called
+	// "schema name". In case there are multiple layers that could be
+	// considered for database name (e.g. Oracle instance name and schema
+	// name), the database name to be used is the more specific layer (e.g.
+	// Oracle schema name).
+	DBNameKey = attribute.Key("db.name")
+
+	// DBOperationKey is the attribute Key conforming to the "db.operation"
+	// semantic conventions. It represents the name of the operation being
+	// executed, e.g. the [MongoDB command
+	// name](https://docs.mongodb.com/manual/reference/command/#database-operations)
+	// such as `findAndModify`, or the SQL keyword.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'findAndModify', 'HMSET', 'SELECT'
+	// Note: When setting this to an SQL keyword, it is not recommended to
+	// attempt any client-side parsing of `db.statement` just to get this
+	// property, but it should be set if the operation name is provided by the
+	// library being instrumented. If the SQL statement has an ambiguous
+	// operation, or performs more than one operation, this value may be
+	// omitted.
+	DBOperationKey = attribute.Key("db.operation")
+
+	// DBRedisDBIndexKey is the attribute Key conforming to the
+	// "db.redis.database_index" semantic conventions. It represents the index
+	// of the database being accessed as used in the [`SELECT`
+	// command](https://redis.io/commands/select), provided as an integer. To
+	// be used instead of the generic `db.name` attribute.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 0, 1, 15
+	DBRedisDBIndexKey = attribute.Key("db.redis.database_index")
+
+	// DBSQLTableKey is the attribute Key conforming to the "db.sql.table"
+	// semantic conventions. It represents the name of the primary table that
+	// the operation is acting upon, including the database name (if
+	// applicable).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'public.users', 'customers'
+	// Note: It is not recommended to attempt any client-side parsing of
+	// `db.statement` just to get this property, but it should be set if it is
+	// provided by the library being instrumented. If the operation is acting
+	// upon an anonymous table, or more than one table, this value MUST NOT be
+	// set.
+	DBSQLTableKey = attribute.Key("db.sql.table")
+
+	// DBStatementKey is the attribute Key conforming to the "db.statement"
+	// semantic conventions. It represents the database statement being
+	// executed.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'SELECT * FROM wuser_table', 'SET mykey "WuValue"'
+	DBStatementKey = attribute.Key("db.statement")
+
+	// DBSystemKey is the attribute Key conforming to the "db.system" semantic
+	// conventions. It represents an identifier for the database management
+	// system (DBMS) product being used. See below for a list of well-known
+	// identifiers.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	DBSystemKey = attribute.Key("db.system")
+
+	// DBUserKey is the attribute Key conforming to the "db.user" semantic
+	// conventions. It represents the username for accessing the database.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'readonly_user', 'reporting_user'
+	DBUserKey = attribute.Key("db.user")
+)
+
+var (
+	// all
+	DBCassandraConsistencyLevelAll = DBCassandraConsistencyLevelKey.String("all")
+	// each_quorum
+	DBCassandraConsistencyLevelEachQuorum = DBCassandraConsistencyLevelKey.String("each_quorum")
+	// quorum
+	DBCassandraConsistencyLevelQuorum = DBCassandraConsistencyLevelKey.String("quorum")
+	// local_quorum
+	DBCassandraConsistencyLevelLocalQuorum = DBCassandraConsistencyLevelKey.String("local_quorum")
+	// one
+	DBCassandraConsistencyLevelOne = DBCassandraConsistencyLevelKey.String("one")
+	// two
+	DBCassandraConsistencyLevelTwo = DBCassandraConsistencyLevelKey.String("two")
+	// three
+	DBCassandraConsistencyLevelThree = DBCassandraConsistencyLevelKey.String("three")
+	// local_one
+	DBCassandraConsistencyLevelLocalOne = DBCassandraConsistencyLevelKey.String("local_one")
+	// any
+	DBCassandraConsistencyLevelAny = DBCassandraConsistencyLevelKey.String("any")
+	// serial
+	DBCassandraConsistencyLevelSerial = DBCassandraConsistencyLevelKey.String("serial")
+	// local_serial
+	DBCassandraConsistencyLevelLocalSerial = DBCassandraConsistencyLevelKey.String("local_serial")
+)
+
+var (
+	// Gateway (HTTP) connections mode
+	DBCosmosDBConnectionModeGateway = DBCosmosDBConnectionModeKey.String("gateway")
+	// Direct connection
+	DBCosmosDBConnectionModeDirect = DBCosmosDBConnectionModeKey.String("direct")
+)
+
+var (
+	// invalid
+	DBCosmosDBOperationTypeInvalid = DBCosmosDBOperationTypeKey.String("Invalid")
+	// create
+	DBCosmosDBOperationTypeCreate = DBCosmosDBOperationTypeKey.String("Create")
+	// patch
+	DBCosmosDBOperationTypePatch = DBCosmosDBOperationTypeKey.String("Patch")
+	// read
+	DBCosmosDBOperationTypeRead = DBCosmosDBOperationTypeKey.String("Read")
+	// read_feed
+	DBCosmosDBOperationTypeReadFeed = DBCosmosDBOperationTypeKey.String("ReadFeed")
+	// delete
+	DBCosmosDBOperationTypeDelete = DBCosmosDBOperationTypeKey.String("Delete")
+	// replace
+	DBCosmosDBOperationTypeReplace = DBCosmosDBOperationTypeKey.String("Replace")
+	// execute
+	DBCosmosDBOperationTypeExecute = DBCosmosDBOperationTypeKey.String("Execute")
+	// query
+	DBCosmosDBOperationTypeQuery = DBCosmosDBOperationTypeKey.String("Query")
+	// head
+	DBCosmosDBOperationTypeHead = DBCosmosDBOperationTypeKey.String("Head")
+	// head_feed
+	DBCosmosDBOperationTypeHeadFeed = DBCosmosDBOperationTypeKey.String("HeadFeed")
+	// upsert
+	DBCosmosDBOperationTypeUpsert = DBCosmosDBOperationTypeKey.String("Upsert")
+	// batch
+	DBCosmosDBOperationTypeBatch = DBCosmosDBOperationTypeKey.String("Batch")
+	// query_plan
+	DBCosmosDBOperationTypeQueryPlan = DBCosmosDBOperationTypeKey.String("QueryPlan")
+	// execute_javascript
+	DBCosmosDBOperationTypeExecuteJavascript = DBCosmosDBOperationTypeKey.String("ExecuteJavaScript")
+)
+
+var (
+	// Some other SQL database. Fallback only. See notes
+	DBSystemOtherSQL = DBSystemKey.String("other_sql")
+	// Microsoft SQL Server
+	DBSystemMSSQL = DBSystemKey.String("mssql")
+	// Microsoft SQL Server Compact
+	DBSystemMssqlcompact = DBSystemKey.String("mssqlcompact")
+	// MySQL
+	DBSystemMySQL = DBSystemKey.String("mysql")
+	// Oracle Database
+	DBSystemOracle = DBSystemKey.String("oracle")
+	// IBM DB2
+	DBSystemDB2 = DBSystemKey.String("db2")
+	// PostgreSQL
+	DBSystemPostgreSQL = DBSystemKey.String("postgresql")
+	// Amazon Redshift
+	DBSystemRedshift = DBSystemKey.String("redshift")
+	// Apache Hive
+	DBSystemHive = DBSystemKey.String("hive")
+	// Cloudscape
+	DBSystemCloudscape = DBSystemKey.String("cloudscape")
+	// HyperSQL DataBase
+	DBSystemHSQLDB = DBSystemKey.String("hsqldb")
+	// Progress Database
+	DBSystemProgress = DBSystemKey.String("progress")
+	// SAP MaxDB
+	DBSystemMaxDB = DBSystemKey.String("maxdb")
+	// SAP HANA
+	DBSystemHanaDB = DBSystemKey.String("hanadb")
+	// Ingres
+	DBSystemIngres = DBSystemKey.String("ingres")
+	// FirstSQL
+	DBSystemFirstSQL = DBSystemKey.String("firstsql")
+	// EnterpriseDB
+	DBSystemEDB = DBSystemKey.String("edb")
+	// InterSystems Caché
+	DBSystemCache = DBSystemKey.String("cache")
+	// Adabas (Adaptable Database System)
+	DBSystemAdabas = DBSystemKey.String("adabas")
+	// Firebird
+	DBSystemFirebird = DBSystemKey.String("firebird")
+	// Apache Derby
+	DBSystemDerby = DBSystemKey.String("derby")
+	// FileMaker
+	DBSystemFilemaker = DBSystemKey.String("filemaker")
+	// Informix
+	DBSystemInformix = DBSystemKey.String("informix")
+	// InstantDB
+	DBSystemInstantDB = DBSystemKey.String("instantdb")
+	// InterBase
+	DBSystemInterbase = DBSystemKey.String("interbase")
+	// MariaDB
+	DBSystemMariaDB = DBSystemKey.String("mariadb")
+	// Netezza
+	DBSystemNetezza = DBSystemKey.String("netezza")
+	// Pervasive PSQL
+	DBSystemPervasive = DBSystemKey.String("pervasive")
+	// PointBase
+	DBSystemPointbase = DBSystemKey.String("pointbase")
+	// SQLite
+	DBSystemSqlite = DBSystemKey.String("sqlite")
+	// Sybase
+	DBSystemSybase = DBSystemKey.String("sybase")
+	// Teradata
+	DBSystemTeradata = DBSystemKey.String("teradata")
+	// Vertica
+	DBSystemVertica = DBSystemKey.String("vertica")
+	// H2
+	DBSystemH2 = DBSystemKey.String("h2")
+	// ColdFusion IMQ
+	DBSystemColdfusion = DBSystemKey.String("coldfusion")
+	// Apache Cassandra
+	DBSystemCassandra = DBSystemKey.String("cassandra")
+	// Apache HBase
+	DBSystemHBase = DBSystemKey.String("hbase")
+	// MongoDB
+	DBSystemMongoDB = DBSystemKey.String("mongodb")
+	// Redis
+	DBSystemRedis = DBSystemKey.String("redis")
+	// Couchbase
+	DBSystemCouchbase = DBSystemKey.String("couchbase")
+	// CouchDB
+	DBSystemCouchDB = DBSystemKey.String("couchdb")
+	// Microsoft Azure Cosmos DB
+	DBSystemCosmosDB = DBSystemKey.String("cosmosdb")
+	// Amazon DynamoDB
+	DBSystemDynamoDB = DBSystemKey.String("dynamodb")
+	// Neo4j
+	DBSystemNeo4j = DBSystemKey.String("neo4j")
+	// Apache Geode
+	DBSystemGeode = DBSystemKey.String("geode")
+	// Elasticsearch
+	DBSystemElasticsearch = DBSystemKey.String("elasticsearch")
+	// Memcached
+	DBSystemMemcached = DBSystemKey.String("memcached")
+	// CockroachDB
+	DBSystemCockroachdb = DBSystemKey.String("cockroachdb")
+	// OpenSearch
+	DBSystemOpensearch = DBSystemKey.String("opensearch")
+	// ClickHouse
+	DBSystemClickhouse = DBSystemKey.String("clickhouse")
+	// Cloud Spanner
+	DBSystemSpanner = DBSystemKey.String("spanner")
+	// Trino
+	DBSystemTrino = DBSystemKey.String("trino")
+)
+
+// DBCassandraCoordinatorDC returns an attribute KeyValue conforming to the
+// "db.cassandra.coordinator.dc" semantic conventions. It represents the data
+// center of the coordinating node for a query.
+func DBCassandraCoordinatorDC(val string) attribute.KeyValue {
+	return DBCassandraCoordinatorDCKey.String(val)
+}
+
+// DBCassandraCoordinatorID returns an attribute KeyValue conforming to the
+// "db.cassandra.coordinator.id" semantic conventions. It represents the ID of
+// the coordinating node for a query.
+func DBCassandraCoordinatorID(val string) attribute.KeyValue {
+	return DBCassandraCoordinatorIDKey.String(val)
+}
+
+// DBCassandraIdempotence returns an attribute KeyValue conforming to the
+// "db.cassandra.idempotence" semantic conventions. It represents the whether
+// or not the query is idempotent.
+func DBCassandraIdempotence(val bool) attribute.KeyValue {
+	return DBCassandraIdempotenceKey.Bool(val)
+}
+
+// DBCassandraPageSize returns an attribute KeyValue conforming to the
+// "db.cassandra.page_size" semantic conventions. It represents the fetch size
+// used for paging, i.e. how many rows will be returned at once.
+func DBCassandraPageSize(val int) attribute.KeyValue {
+	return DBCassandraPageSizeKey.Int(val)
+}
+
+// DBCassandraSpeculativeExecutionCount returns an attribute KeyValue
+// conforming to the "db.cassandra.speculative_execution_count" semantic
+// conventions. It represents the number of times a query was speculatively
+// executed. Not set or `0` if the query was not executed speculatively.
+func DBCassandraSpeculativeExecutionCount(val int) attribute.KeyValue {
+	return DBCassandraSpeculativeExecutionCountKey.Int(val)
+}
+
+// DBCassandraTable returns an attribute KeyValue conforming to the
+// "db.cassandra.table" semantic conventions. It represents the name of the
+// primary Cassandra table that the operation is acting upon, including the
+// keyspace name (if applicable).
+func DBCassandraTable(val string) attribute.KeyValue {
+	return DBCassandraTableKey.String(val)
+}
+
+// DBConnectionString returns an attribute KeyValue conforming to the
+// "db.connection_string" semantic conventions. It represents the connection
+// string used to connect to the database. It is recommended to remove embedded
+// credentials.
+func DBConnectionString(val string) attribute.KeyValue {
+	return DBConnectionStringKey.String(val)
+}
+
+// DBCosmosDBClientID returns an attribute KeyValue conforming to the
+// "db.cosmosdb.client_id" semantic conventions. It represents the unique
+// Cosmos client instance id.
+func DBCosmosDBClientID(val string) attribute.KeyValue {
+	return DBCosmosDBClientIDKey.String(val)
+}
+
+// DBCosmosDBContainer returns an attribute KeyValue conforming to the
+// "db.cosmosdb.container" semantic conventions. It represents the cosmos DB
+// container name.
+func DBCosmosDBContainer(val string) attribute.KeyValue {
+	return DBCosmosDBContainerKey.String(val)
+}
+
+// DBCosmosDBRequestCharge returns an attribute KeyValue conforming to the
+// "db.cosmosdb.request_charge" semantic conventions. It represents the rU
+// consumed for that operation
+func DBCosmosDBRequestCharge(val float64) attribute.KeyValue {
+	return DBCosmosDBRequestChargeKey.Float64(val)
+}
+
+// DBCosmosDBRequestContentLength returns an attribute KeyValue conforming
+// to the "db.cosmosdb.request_content_length" semantic conventions. It
+// represents the request payload size in bytes
+func DBCosmosDBRequestContentLength(val int) attribute.KeyValue {
+	return DBCosmosDBRequestContentLengthKey.Int(val)
+}
+
+// DBCosmosDBStatusCode returns an attribute KeyValue conforming to the
+// "db.cosmosdb.status_code" semantic conventions. It represents the cosmos DB
+// status code.
+func DBCosmosDBStatusCode(val int) attribute.KeyValue {
+	return DBCosmosDBStatusCodeKey.Int(val)
+}
+
+// DBCosmosDBSubStatusCode returns an attribute KeyValue conforming to the
+// "db.cosmosdb.sub_status_code" semantic conventions. It represents the cosmos
+// DB sub status code.
+func DBCosmosDBSubStatusCode(val int) attribute.KeyValue {
+	return DBCosmosDBSubStatusCodeKey.Int(val)
+}
+
+// DBElasticsearchClusterName returns an attribute KeyValue conforming to
+// the "db.elasticsearch.cluster.name" semantic conventions. It represents the
+// represents the identifier of an Elasticsearch cluster.
+func DBElasticsearchClusterName(val string) attribute.KeyValue {
+	return DBElasticsearchClusterNameKey.String(val)
+}
+
+// DBElasticsearchNodeName returns an attribute KeyValue conforming to the
+// "db.elasticsearch.node.name" semantic conventions. It represents the
+// represents the human-readable identifier of the node/instance to which a
+// request was routed.
+func DBElasticsearchNodeName(val string) attribute.KeyValue {
+	return DBElasticsearchNodeNameKey.String(val)
+}
+
+// DBInstanceID returns an attribute KeyValue conforming to the
+// "db.instance.id" semantic conventions. It represents an identifier (address,
+// unique name, or any other identifier) of the database instance that is
+// executing queries or mutations on the current connection. This is useful in
+// cases where the database is running in a clustered environment and the
+// instrumentation is able to record the node executing the query. The client
+// may obtain this value in databases like MySQL using queries like `select
+// @@hostname`.
+func DBInstanceID(val string) attribute.KeyValue {
+	return DBInstanceIDKey.String(val)
+}
+
+// DBJDBCDriverClassname returns an attribute KeyValue conforming to the
+// "db.jdbc.driver_classname" semantic conventions. It represents the
+// fully-qualified class name of the [Java Database Connectivity
+// (JDBC)](https://docs.oracle.com/javase/8/docs/technotes/guides/jdbc/) driver
+// used to connect.
+func DBJDBCDriverClassname(val string) attribute.KeyValue {
+	return DBJDBCDriverClassnameKey.String(val)
+}
+
+// DBMongoDBCollection returns an attribute KeyValue conforming to the
+// "db.mongodb.collection" semantic conventions. It represents the MongoDB
+// collection being accessed within the database stated in `db.name`.
+func DBMongoDBCollection(val string) attribute.KeyValue {
+	return DBMongoDBCollectionKey.String(val)
+}
+
+// DBMSSQLInstanceName returns an attribute KeyValue conforming to the
+// "db.mssql.instance_name" semantic conventions. It represents the Microsoft
+// SQL Server [instance
+// name](https://docs.microsoft.com/sql/connect/jdbc/building-the-connection-url?view=sql-server-ver15)
+// connecting to. This name is used to determine the port of a named instance.
+func DBMSSQLInstanceName(val string) attribute.KeyValue {
+	return DBMSSQLInstanceNameKey.String(val)
+}
+
+// DBName returns an attribute KeyValue conforming to the "db.name" semantic
+// conventions. It represents the this attribute is used to report the name of
+// the database being accessed. For commands that switch the database, this
+// should be set to the target database (even if the command fails).
+func DBName(val string) attribute.KeyValue {
+	return DBNameKey.String(val)
+}
+
+// DBOperation returns an attribute KeyValue conforming to the
+// "db.operation" semantic conventions. It represents the name of the operation
+// being executed, e.g. the [MongoDB command
+// name](https://docs.mongodb.com/manual/reference/command/#database-operations)
+// such as `findAndModify`, or the SQL keyword.
+func DBOperation(val string) attribute.KeyValue {
+	return DBOperationKey.String(val)
+}
+
+// DBRedisDBIndex returns an attribute KeyValue conforming to the
+// "db.redis.database_index" semantic conventions. It represents the index of
+// the database being accessed as used in the [`SELECT`
+// command](https://redis.io/commands/select), provided as an integer. To be
+// used instead of the generic `db.name` attribute.
+func DBRedisDBIndex(val int) attribute.KeyValue {
+	return DBRedisDBIndexKey.Int(val)
+}
+
+// DBSQLTable returns an attribute KeyValue conforming to the "db.sql.table"
+// semantic conventions. It represents the name of the primary table that the
+// operation is acting upon, including the database name (if applicable).
+func DBSQLTable(val string) attribute.KeyValue {
+	return DBSQLTableKey.String(val)
+}
+
+// DBStatement returns an attribute KeyValue conforming to the
+// "db.statement" semantic conventions. It represents the database statement
+// being executed.
+func DBStatement(val string) attribute.KeyValue {
+	return DBStatementKey.String(val)
+}
+
+// DBUser returns an attribute KeyValue conforming to the "db.user" semantic
+// conventions. It represents the username for accessing the database.
+func DBUser(val string) attribute.KeyValue {
+	return DBUserKey.String(val)
+}
+
+// Describes deprecated HTTP attributes.
+const (
+	// HTTPFlavorKey is the attribute Key conforming to the "http.flavor"
+	// semantic conventions.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Deprecated: use `network.protocol.name` instead.
+	HTTPFlavorKey = attribute.Key("http.flavor")
+
+	// HTTPMethodKey is the attribute Key conforming to the "http.method"
+	// semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 'GET', 'POST', 'HEAD'
+	// Deprecated: use `http.request.method` instead.
+	HTTPMethodKey = attribute.Key("http.method")
+
+	// HTTPRequestContentLengthKey is the attribute Key conforming to the
+	// "http.request_content_length" semantic conventions.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 3495
+	// Deprecated: use `http.request.header.content-length` instead.
+	HTTPRequestContentLengthKey = attribute.Key("http.request_content_length")
+
+	// HTTPResponseContentLengthKey is the attribute Key conforming to the
+	// "http.response_content_length" semantic conventions.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 3495
+	// Deprecated: use `http.response.header.content-length` instead.
+	HTTPResponseContentLengthKey = attribute.Key("http.response_content_length")
+
+	// HTTPSchemeKey is the attribute Key conforming to the "http.scheme"
+	// semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 'http', 'https'
+	// Deprecated: use `url.scheme` instead.
+	HTTPSchemeKey = attribute.Key("http.scheme")
+
+	// HTTPStatusCodeKey is the attribute Key conforming to the
+	// "http.status_code" semantic conventions.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 200
+	// Deprecated: use `http.response.status_code` instead.
+	HTTPStatusCodeKey = attribute.Key("http.status_code")
+
+	// HTTPTargetKey is the attribute Key conforming to the "http.target"
+	// semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: '/search?q=OpenTelemetry#SemConv'
+	// Deprecated: use `url.path` and `url.query` instead.
+	HTTPTargetKey = attribute.Key("http.target")
+
+	// HTTPURLKey is the attribute Key conforming to the "http.url" semantic
+	// conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 'https://www.foo.bar/search?q=OpenTelemetry#SemConv'
+	// Deprecated: use `url.full` instead.
+	HTTPURLKey = attribute.Key("http.url")
+
+	// HTTPUserAgentKey is the attribute Key conforming to the
+	// "http.user_agent" semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 'CERN-LineMode/2.15 libwww/2.17b3', 'Mozilla/5.0 (iPhone; CPU
+	// iPhone OS 14_7_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko)
+	// Version/14.1.2 Mobile/15E148 Safari/604.1'
+	// Deprecated: use `user_agent.original` instead.
+	HTTPUserAgentKey = attribute.Key("http.user_agent")
+)
+
+var (
+	// HTTP/1.0
+	//
+	// Deprecated: use `network.protocol.name` instead.
+	HTTPFlavorHTTP10 = HTTPFlavorKey.String("1.0")
+	// HTTP/1.1
+	//
+	// Deprecated: use `network.protocol.name` instead.
+	HTTPFlavorHTTP11 = HTTPFlavorKey.String("1.1")
+	// HTTP/2
+	//
+	// Deprecated: use `network.protocol.name` instead.
+	HTTPFlavorHTTP20 = HTTPFlavorKey.String("2.0")
+	// HTTP/3
+	//
+	// Deprecated: use `network.protocol.name` instead.
+	HTTPFlavorHTTP30 = HTTPFlavorKey.String("3.0")
+	// SPDY protocol
+	//
+	// Deprecated: use `network.protocol.name` instead.
+	HTTPFlavorSPDY = HTTPFlavorKey.String("SPDY")
+	// QUIC protocol
+	//
+	// Deprecated: use `network.protocol.name` instead.
+	HTTPFlavorQUIC = HTTPFlavorKey.String("QUIC")
+)
+
+// HTTPMethod returns an attribute KeyValue conforming to the "http.method"
+// semantic conventions.
+//
+// Deprecated: use `http.request.method` instead.
+func HTTPMethod(val string) attribute.KeyValue {
+	return HTTPMethodKey.String(val)
+}
+
+// HTTPRequestContentLength returns an attribute KeyValue conforming to the
+// "http.request_content_length" semantic conventions.
+//
+// Deprecated: use `http.request.header.content-length` instead.
+func HTTPRequestContentLength(val int) attribute.KeyValue {
+	return HTTPRequestContentLengthKey.Int(val)
+}
+
+// HTTPResponseContentLength returns an attribute KeyValue conforming to the
+// "http.response_content_length" semantic conventions.
+//
+// Deprecated: use `http.response.header.content-length` instead.
+func HTTPResponseContentLength(val int) attribute.KeyValue {
+	return HTTPResponseContentLengthKey.Int(val)
+}
+
+// HTTPScheme returns an attribute KeyValue conforming to the "http.scheme"
+// semantic conventions.
+//
+// Deprecated: use `url.scheme` instead.
+func HTTPScheme(val string) attribute.KeyValue {
+	return HTTPSchemeKey.String(val)
+}
+
+// HTTPStatusCode returns an attribute KeyValue conforming to the
+// "http.status_code" semantic conventions.
+//
+// Deprecated: use `http.response.status_code` instead.
+func HTTPStatusCode(val int) attribute.KeyValue {
+	return HTTPStatusCodeKey.Int(val)
+}
+
+// HTTPTarget returns an attribute KeyValue conforming to the "http.target"
+// semantic conventions.
+//
+// Deprecated: use `url.path` and `url.query` instead.
+func HTTPTarget(val string) attribute.KeyValue {
+	return HTTPTargetKey.String(val)
+}
+
+// HTTPURL returns an attribute KeyValue conforming to the "http.url"
+// semantic conventions.
+//
+// Deprecated: use `url.full` instead.
+func HTTPURL(val string) attribute.KeyValue {
+	return HTTPURLKey.String(val)
+}
+
+// HTTPUserAgent returns an attribute KeyValue conforming to the
+// "http.user_agent" semantic conventions.
+//
+// Deprecated: use `user_agent.original` instead.
+func HTTPUserAgent(val string) attribute.KeyValue {
+	return HTTPUserAgentKey.String(val)
+}
+
+// These attributes may be used for any network related operation.
+const (
+	// NetHostNameKey is the attribute Key conforming to the "net.host.name"
+	// semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 'example.com'
+	// Deprecated: use `server.address`.
+	NetHostNameKey = attribute.Key("net.host.name")
+
+	// NetHostPortKey is the attribute Key conforming to the "net.host.port"
+	// semantic conventions.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 8080
+	// Deprecated: use `server.port`.
+	NetHostPortKey = attribute.Key("net.host.port")
+
+	// NetPeerNameKey is the attribute Key conforming to the "net.peer.name"
+	// semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 'example.com'
+	// Deprecated: use `server.address` on client spans and `client.address` on
+	// server spans.
+	NetPeerNameKey = attribute.Key("net.peer.name")
+
+	// NetPeerPortKey is the attribute Key conforming to the "net.peer.port"
+	// semantic conventions.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 8080
+	// Deprecated: use `server.port` on client spans and `client.port` on
+	// server spans.
+	NetPeerPortKey = attribute.Key("net.peer.port")
+
+	// NetProtocolNameKey is the attribute Key conforming to the
+	// "net.protocol.name" semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 'amqp', 'http', 'mqtt'
+	// Deprecated: use `network.protocol.name`.
+	NetProtocolNameKey = attribute.Key("net.protocol.name")
+
+	// NetProtocolVersionKey is the attribute Key conforming to the
+	// "net.protocol.version" semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: '3.1.1'
+	// Deprecated: use `network.protocol.version`.
+	NetProtocolVersionKey = attribute.Key("net.protocol.version")
+
+	// NetSockFamilyKey is the attribute Key conforming to the
+	// "net.sock.family" semantic conventions.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Deprecated: use `network.transport` and `network.type`.
+	NetSockFamilyKey = attribute.Key("net.sock.family")
+
+	// NetSockHostAddrKey is the attribute Key conforming to the
+	// "net.sock.host.addr" semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: '/var/my.sock'
+	// Deprecated: use `network.local.address`.
+	NetSockHostAddrKey = attribute.Key("net.sock.host.addr")
+
+	// NetSockHostPortKey is the attribute Key conforming to the
+	// "net.sock.host.port" semantic conventions.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 8080
+	// Deprecated: use `network.local.port`.
+	NetSockHostPortKey = attribute.Key("net.sock.host.port")
+
+	// NetSockPeerAddrKey is the attribute Key conforming to the
+	// "net.sock.peer.addr" semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: '192.168.0.1'
+	// Deprecated: use `network.peer.address`.
+	NetSockPeerAddrKey = attribute.Key("net.sock.peer.addr")
+
+	// NetSockPeerNameKey is the attribute Key conforming to the
+	// "net.sock.peer.name" semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: '/var/my.sock'
+	// Deprecated: no replacement at this time.
+	NetSockPeerNameKey = attribute.Key("net.sock.peer.name")
+
+	// NetSockPeerPortKey is the attribute Key conforming to the
+	// "net.sock.peer.port" semantic conventions.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 65531
+	// Deprecated: use `network.peer.port`.
+	NetSockPeerPortKey = attribute.Key("net.sock.peer.port")
+
+	// NetTransportKey is the attribute Key conforming to the "net.transport"
+	// semantic conventions.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Deprecated: use `network.transport`.
+	NetTransportKey = attribute.Key("net.transport")
+)
+
+var (
+	// IPv4 address
+	//
+	// Deprecated: use `network.transport` and `network.type`.
+	NetSockFamilyInet = NetSockFamilyKey.String("inet")
+	// IPv6 address
+	//
+	// Deprecated: use `network.transport` and `network.type`.
+	NetSockFamilyInet6 = NetSockFamilyKey.String("inet6")
+	// Unix domain socket path
+	//
+	// Deprecated: use `network.transport` and `network.type`.
+	NetSockFamilyUnix = NetSockFamilyKey.String("unix")
+)
+
+var (
+	// ip_tcp
+	//
+	// Deprecated: use `network.transport`.
+	NetTransportTCP = NetTransportKey.String("ip_tcp")
+	// ip_udp
+	//
+	// Deprecated: use `network.transport`.
+	NetTransportUDP = NetTransportKey.String("ip_udp")
+	// Named or anonymous pipe
+	//
+	// Deprecated: use `network.transport`.
+	NetTransportPipe = NetTransportKey.String("pipe")
+	// In-process communication
+	//
+	// Deprecated: use `network.transport`.
+	NetTransportInProc = NetTransportKey.String("inproc")
+	// Something else (non IP-based)
+	//
+	// Deprecated: use `network.transport`.
+	NetTransportOther = NetTransportKey.String("other")
+)
+
+// NetHostName returns an attribute KeyValue conforming to the
+// "net.host.name" semantic conventions.
+//
+// Deprecated: use `server.address`.
+func NetHostName(val string) attribute.KeyValue {
+	return NetHostNameKey.String(val)
+}
+
+// NetHostPort returns an attribute KeyValue conforming to the
+// "net.host.port" semantic conventions.
+//
+// Deprecated: use `server.port`.
+func NetHostPort(val int) attribute.KeyValue {
+	return NetHostPortKey.Int(val)
+}
+
+// NetPeerName returns an attribute KeyValue conforming to the
+// "net.peer.name" semantic conventions.
+//
+// Deprecated: use `server.address` on client spans and `client.address` on
+// server spans.
+func NetPeerName(val string) attribute.KeyValue {
+	return NetPeerNameKey.String(val)
+}
+
+// NetPeerPort returns an attribute KeyValue conforming to the
+// "net.peer.port" semantic conventions.
+//
+// Deprecated: use `server.port` on client spans and `client.port` on server
+// spans.
+func NetPeerPort(val int) attribute.KeyValue {
+	return NetPeerPortKey.Int(val)
+}
+
+// NetProtocolName returns an attribute KeyValue conforming to the
+// "net.protocol.name" semantic conventions.
+//
+// Deprecated: use `network.protocol.name`.
+func NetProtocolName(val string) attribute.KeyValue {
+	return NetProtocolNameKey.String(val)
+}
+
+// NetProtocolVersion returns an attribute KeyValue conforming to the
+// "net.protocol.version" semantic conventions.
+//
+// Deprecated: use `network.protocol.version`.
+func NetProtocolVersion(val string) attribute.KeyValue {
+	return NetProtocolVersionKey.String(val)
+}
+
+// NetSockHostAddr returns an attribute KeyValue conforming to the
+// "net.sock.host.addr" semantic conventions.
+//
+// Deprecated: use `network.local.address`.
+func NetSockHostAddr(val string) attribute.KeyValue {
+	return NetSockHostAddrKey.String(val)
+}
+
+// NetSockHostPort returns an attribute KeyValue conforming to the
+// "net.sock.host.port" semantic conventions.
+//
+// Deprecated: use `network.local.port`.
+func NetSockHostPort(val int) attribute.KeyValue {
+	return NetSockHostPortKey.Int(val)
+}
+
+// NetSockPeerAddr returns an attribute KeyValue conforming to the
+// "net.sock.peer.addr" semantic conventions.
+//
+// Deprecated: use `network.peer.address`.
+func NetSockPeerAddr(val string) attribute.KeyValue {
+	return NetSockPeerAddrKey.String(val)
+}
+
+// NetSockPeerName returns an attribute KeyValue conforming to the
+// "net.sock.peer.name" semantic conventions.
+//
+// Deprecated: no replacement at this time.
+func NetSockPeerName(val string) attribute.KeyValue {
+	return NetSockPeerNameKey.String(val)
+}
+
+// NetSockPeerPort returns an attribute KeyValue conforming to the
+// "net.sock.peer.port" semantic conventions.
+//
+// Deprecated: use `network.peer.port`.
+func NetSockPeerPort(val int) attribute.KeyValue {
+	return NetSockPeerPortKey.Int(val)
+}
+
+// These attributes may be used to describe the receiver of a network
+// exchange/packet. These should be used when there is no client/server
+// relationship between the two sides, or when that relationship is unknown.
+// This covers low-level network interactions (e.g. packet tracing) where you
+// don't know if there was a connection or which side initiated it. This also
+// covers unidirectional UDP flows and peer-to-peer communication where the
+// "user-facing" surface of the protocol / API doesn't expose a clear notion of
+// client and server.
+const (
+	// DestinationAddressKey is the attribute Key conforming to the
+	// "destination.address" semantic conventions. It represents the
+	// destination address - domain name if available without reverse DNS
+	// lookup; otherwise, IP address or Unix domain socket name.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'destination.example.com', '10.1.2.80', '/tmp/my.sock'
+	// Note: When observed from the source side, and when communicating through
+	// an intermediary, `destination.address` SHOULD represent the destination
+	// address behind any intermediaries, for example proxies, if it's
+	// available.
+	DestinationAddressKey = attribute.Key("destination.address")
+
+	// DestinationPortKey is the attribute Key conforming to the
+	// "destination.port" semantic conventions. It represents the destination
+	// port number
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 3389, 2888
+	DestinationPortKey = attribute.Key("destination.port")
+)
+
+// DestinationAddress returns an attribute KeyValue conforming to the
+// "destination.address" semantic conventions. It represents the destination
+// address - domain name if available without reverse DNS lookup; otherwise, IP
+// address or Unix domain socket name.
+func DestinationAddress(val string) attribute.KeyValue {
+	return DestinationAddressKey.String(val)
+}
+
+// DestinationPort returns an attribute KeyValue conforming to the
+// "destination.port" semantic conventions. It represents the destination port
+// number
+func DestinationPort(val int) attribute.KeyValue {
+	return DestinationPortKey.Int(val)
+}
+
+// These attributes may be used for any disk related operation.
+const (
+	// DiskIoDirectionKey is the attribute Key conforming to the
+	// "disk.io.direction" semantic conventions. It represents the disk IO
+	// operation direction.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'read'
+	DiskIoDirectionKey = attribute.Key("disk.io.direction")
+)
+
+var (
+	// read
+	DiskIoDirectionRead = DiskIoDirectionKey.String("read")
+	// write
+	DiskIoDirectionWrite = DiskIoDirectionKey.String("write")
+)
+
+// The shared attributes used to report an error.
+const (
+	// ErrorTypeKey is the attribute Key conforming to the "error.type"
+	// semantic conventions. It represents the describes a class of error the
+	// operation ended with.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'timeout', 'java.net.UnknownHostException',
+	// 'server_certificate_invalid', '500'
+	// Note: The `error.type` SHOULD be predictable and SHOULD have low
+	// cardinality.
+	// Instrumentations SHOULD document the list of errors they report.
+	//
+	// The cardinality of `error.type` within one instrumentation library
+	// SHOULD be low.
+	// Telemetry consumers that aggregate data from multiple instrumentation
+	// libraries and applications
+	// should be prepared for `error.type` to have high cardinality at query
+	// time when no
+	// additional filters are applied.
+	//
+	// If the operation has completed successfully, instrumentations SHOULD NOT
+	// set `error.type`.
+	//
+	// If a specific domain defines its own set of error identifiers (such as
+	// HTTP or gRPC status codes),
+	// it's RECOMMENDED to:
+	//
+	// * Use a domain-specific attribute
+	// * Set `error.type` to capture all errors, regardless of whether they are
+	// defined within the domain-specific set or not.
+	ErrorTypeKey = attribute.Key("error.type")
+)
+
+var (
+	// A fallback error value to be used when the instrumentation doesn't define a custom value
+	ErrorTypeOther = ErrorTypeKey.String("_OTHER")
+)
+
+// The shared attributes used to report a single exception associated with a
+// span or log.
+const (
+	// ExceptionEscapedKey is the attribute Key conforming to the
+	// "exception.escaped" semantic conventions. It represents the sHOULD be
+	// set to true if the exception event is recorded at a point where it is
+	// known that the exception is escaping the scope of the span.
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Note: An exception is considered to have escaped (or left) the scope of
+	// a span,
+	// if that span is ended while the exception is still logically "in
+	// flight".
+	// This may be actually "in flight" in some languages (e.g. if the
+	// exception
+	// is passed to a Context manager's `__exit__` method in Python) but will
+	// usually be caught at the point of recording the exception in most
+	// languages.
+	//
+	// It is usually not possible to determine at the point where an exception
+	// is thrown
+	// whether it will escape the scope of a span.
+	// However, it is trivial to know that an exception
+	// will escape, if one checks for an active exception just before ending
+	// the span,
+	// as done in the [example for recording span
+	// exceptions](#recording-an-exception).
+	//
+	// It follows that an exception may still escape the scope of the span
+	// even if the `exception.escaped` attribute was not set or set to false,
+	// since the event might have been recorded at a time where it was not
+	// clear whether the exception will escape.
+	ExceptionEscapedKey = attribute.Key("exception.escaped")
+
+	// ExceptionMessageKey is the attribute Key conforming to the
+	// "exception.message" semantic conventions. It represents the exception
+	// message.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Division by zero', "Can't convert 'int' object to str
+	// implicitly"
+	ExceptionMessageKey = attribute.Key("exception.message")
+
+	// ExceptionStacktraceKey is the attribute Key conforming to the
+	// "exception.stacktrace" semantic conventions. It represents a stacktrace
+	// as a string in the natural representation for the language runtime. The
+	// representation is to be determined and documented by each language SIG.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Exception in thread "main" java.lang.RuntimeException: Test
+	// exception\\n at '
+	//  'com.example.GenerateTrace.methodB(GenerateTrace.java:13)\\n at '
+	//  'com.example.GenerateTrace.methodA(GenerateTrace.java:9)\\n at '
+	//  'com.example.GenerateTrace.main(GenerateTrace.java:5)'
+	ExceptionStacktraceKey = attribute.Key("exception.stacktrace")
+
+	// ExceptionTypeKey is the attribute Key conforming to the "exception.type"
+	// semantic conventions. It represents the type of the exception (its
+	// fully-qualified class name, if applicable). The dynamic type of the
+	// exception should be preferred over the static type in languages that
+	// support it.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'java.net.ConnectException', 'OSError'
+	ExceptionTypeKey = attribute.Key("exception.type")
+)
+
+// ExceptionEscaped returns an attribute KeyValue conforming to the
+// "exception.escaped" semantic conventions. It represents the sHOULD be set to
+// true if the exception event is recorded at a point where it is known that
+// the exception is escaping the scope of the span.
+func ExceptionEscaped(val bool) attribute.KeyValue {
+	return ExceptionEscapedKey.Bool(val)
+}
+
+// ExceptionMessage returns an attribute KeyValue conforming to the
+// "exception.message" semantic conventions. It represents the exception
+// message.
+func ExceptionMessage(val string) attribute.KeyValue {
+	return ExceptionMessageKey.String(val)
+}
+
+// ExceptionStacktrace returns an attribute KeyValue conforming to the
+// "exception.stacktrace" semantic conventions. It represents a stacktrace as a
+// string in the natural representation for the language runtime. The
+// representation is to be determined and documented by each language SIG.
+func ExceptionStacktrace(val string) attribute.KeyValue {
+	return ExceptionStacktraceKey.String(val)
+}
+
+// ExceptionType returns an attribute KeyValue conforming to the
+// "exception.type" semantic conventions. It represents the type of the
+// exception (its fully-qualified class name, if applicable). The dynamic type
+// of the exception should be preferred over the static type in languages that
+// support it.
+func ExceptionType(val string) attribute.KeyValue {
+	return ExceptionTypeKey.String(val)
+}
+
+// Semantic convention attributes in the HTTP namespace.
+const (
+	// HTTPRequestBodySizeKey is the attribute Key conforming to the
+	// "http.request.body.size" semantic conventions. It represents the size of
+	// the request payload body in bytes. This is the number of bytes
+	// transferred excluding headers and is often, but not always, present as
+	// the
+	// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
+	// header. For requests using transport encoding, this should be the
+	// compressed size.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 3495
+	HTTPRequestBodySizeKey = attribute.Key("http.request.body.size")
+
+	// HTTPRequestMethodKey is the attribute Key conforming to the
+	// "http.request.method" semantic conventions. It represents the hTTP
+	// request method.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'GET', 'POST', 'HEAD'
+	// Note: HTTP request method value SHOULD be "known" to the
+	// instrumentation.
+	// By default, this convention defines "known" methods as the ones listed
+	// in [RFC9110](https://www.rfc-editor.org/rfc/rfc9110.html#name-methods)
+	// and the PATCH method defined in
+	// [RFC5789](https://www.rfc-editor.org/rfc/rfc5789.html).
+	//
+	// If the HTTP request method is not known to instrumentation, it MUST set
+	// the `http.request.method` attribute to `_OTHER`.
+	//
+	// If the HTTP instrumentation could end up converting valid HTTP request
+	// methods to `_OTHER`, then it MUST provide a way to override
+	// the list of known HTTP methods. If this override is done via environment
+	// variable, then the environment variable MUST be named
+	// OTEL_INSTRUMENTATION_HTTP_KNOWN_METHODS and support a comma-separated
+	// list of case-sensitive known HTTP methods
+	// (this list MUST be a full override of the default known method, it is
+	// not a list of known methods in addition to the defaults).
+	//
+	// HTTP method names are case-sensitive and `http.request.method` attribute
+	// value MUST match a known HTTP method name exactly.
+	// Instrumentations for specific web frameworks that consider HTTP methods
+	// to be case insensitive, SHOULD populate a canonical equivalent.
+	// Tracing instrumentations that do so, MUST also set
+	// `http.request.method_original` to the original value.
+	HTTPRequestMethodKey = attribute.Key("http.request.method")
+
+	// HTTPRequestMethodOriginalKey is the attribute Key conforming to the
+	// "http.request.method_original" semantic conventions. It represents the
+	// original HTTP method sent by the client in the request line.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'GeT', 'ACL', 'foo'
+	HTTPRequestMethodOriginalKey = attribute.Key("http.request.method_original")
+
+	// HTTPRequestResendCountKey is the attribute Key conforming to the
+	// "http.request.resend_count" semantic conventions. It represents the
+	// ordinal number of request resending attempt (for any reason, including
+	// redirects).
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 3
+	// Note: The resend count SHOULD be updated each time an HTTP request gets
+	// resent by the client, regardless of what was the cause of the resending
+	// (e.g. redirection, authorization failure, 503 Server Unavailable,
+	// network issues, or any other).
+	HTTPRequestResendCountKey = attribute.Key("http.request.resend_count")
+
+	// HTTPResponseBodySizeKey is the attribute Key conforming to the
+	// "http.response.body.size" semantic conventions. It represents the size
+	// of the response payload body in bytes. This is the number of bytes
+	// transferred excluding headers and is often, but not always, present as
+	// the
+	// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
+	// header. For requests using transport encoding, this should be the
+	// compressed size.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 3495
+	HTTPResponseBodySizeKey = attribute.Key("http.response.body.size")
+
+	// HTTPResponseStatusCodeKey is the attribute Key conforming to the
+	// "http.response.status_code" semantic conventions. It represents the
+	// [HTTP response status
+	// code](https://tools.ietf.org/html/rfc7231#section-6).
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 200
+	HTTPResponseStatusCodeKey = attribute.Key("http.response.status_code")
+
+	// HTTPRouteKey is the attribute Key conforming to the "http.route"
+	// semantic conventions. It represents the matched route, that is, the path
+	// template in the format used by the respective server framework.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '/users/:userID?', '{controller}/{action}/{id?}'
+	// Note: MUST NOT be populated when this is not supported by the HTTP
+	// server framework as the route attribute should have low-cardinality and
+	// the URI path can NOT substitute it.
+	// SHOULD include the [application
+	// root](/docs/http/http-spans.md#http-server-definitions) if there is one.
+	HTTPRouteKey = attribute.Key("http.route")
+)
+
+var (
+	// CONNECT method
+	HTTPRequestMethodConnect = HTTPRequestMethodKey.String("CONNECT")
+	// DELETE method
+	HTTPRequestMethodDelete = HTTPRequestMethodKey.String("DELETE")
+	// GET method
+	HTTPRequestMethodGet = HTTPRequestMethodKey.String("GET")
+	// HEAD method
+	HTTPRequestMethodHead = HTTPRequestMethodKey.String("HEAD")
+	// OPTIONS method
+	HTTPRequestMethodOptions = HTTPRequestMethodKey.String("OPTIONS")
+	// PATCH method
+	HTTPRequestMethodPatch = HTTPRequestMethodKey.String("PATCH")
+	// POST method
+	HTTPRequestMethodPost = HTTPRequestMethodKey.String("POST")
+	// PUT method
+	HTTPRequestMethodPut = HTTPRequestMethodKey.String("PUT")
+	// TRACE method
+	HTTPRequestMethodTrace = HTTPRequestMethodKey.String("TRACE")
+	// Any HTTP method that the instrumentation has no prior knowledge of
+	HTTPRequestMethodOther = HTTPRequestMethodKey.String("_OTHER")
+)
+
+// HTTPRequestBodySize returns an attribute KeyValue conforming to the
+// "http.request.body.size" semantic conventions. It represents the size of the
+// request payload body in bytes. This is the number of bytes transferred
+// excluding headers and is often, but not always, present as the
+// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
+// header. For requests using transport encoding, this should be the compressed
+// size.
+func HTTPRequestBodySize(val int) attribute.KeyValue {
+	return HTTPRequestBodySizeKey.Int(val)
+}
+
+// HTTPRequestMethodOriginal returns an attribute KeyValue conforming to the
+// "http.request.method_original" semantic conventions. It represents the
+// original HTTP method sent by the client in the request line.
+func HTTPRequestMethodOriginal(val string) attribute.KeyValue {
+	return HTTPRequestMethodOriginalKey.String(val)
+}
+
+// HTTPRequestResendCount returns an attribute KeyValue conforming to the
+// "http.request.resend_count" semantic conventions. It represents the ordinal
+// number of request resending attempt (for any reason, including redirects).
+func HTTPRequestResendCount(val int) attribute.KeyValue {
+	return HTTPRequestResendCountKey.Int(val)
+}
+
+// HTTPResponseBodySize returns an attribute KeyValue conforming to the
+// "http.response.body.size" semantic conventions. It represents the size of
+// the response payload body in bytes. This is the number of bytes transferred
+// excluding headers and is often, but not always, present as the
+// [Content-Length](https://www.rfc-editor.org/rfc/rfc9110.html#field.content-length)
+// header. For requests using transport encoding, this should be the compressed
+// size.
+func HTTPResponseBodySize(val int) attribute.KeyValue {
+	return HTTPResponseBodySizeKey.Int(val)
+}
+
+// HTTPResponseStatusCode returns an attribute KeyValue conforming to the
+// "http.response.status_code" semantic conventions. It represents the [HTTP
+// response status code](https://tools.ietf.org/html/rfc7231#section-6).
+func HTTPResponseStatusCode(val int) attribute.KeyValue {
+	return HTTPResponseStatusCodeKey.Int(val)
+}
+
+// HTTPRoute returns an attribute KeyValue conforming to the "http.route"
+// semantic conventions. It represents the matched route, that is, the path
+// template in the format used by the respective server framework.
+func HTTPRoute(val string) attribute.KeyValue {
+	return HTTPRouteKey.String(val)
+}
+
+// Attributes describing telemetry around messaging systems and messaging
+// activities.
+const (
+	// MessagingBatchMessageCountKey is the attribute Key conforming to the
+	// "messaging.batch.message_count" semantic conventions. It represents the
+	// number of messages sent, received, or processed in the scope of the
+	// batching operation.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 0, 1, 2
+	// Note: Instrumentations SHOULD NOT set `messaging.batch.message_count` on
+	// spans that operate with a single message. When a messaging client
+	// library supports both batch and single-message API for the same
+	// operation, instrumentations SHOULD use `messaging.batch.message_count`
+	// for batching APIs and SHOULD NOT use it for single-message APIs.
+	MessagingBatchMessageCountKey = attribute.Key("messaging.batch.message_count")
+
+	// MessagingClientIDKey is the attribute Key conforming to the
+	// "messaging.client_id" semantic conventions. It represents a unique
+	// identifier for the client that consumes or produces a message.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'client-5', 'myhost@8742@s8083jm'
+	MessagingClientIDKey = attribute.Key("messaging.client_id")
+
+	// MessagingDestinationAnonymousKey is the attribute Key conforming to the
+	// "messaging.destination.anonymous" semantic conventions. It represents a
+	// boolean that is true if the message destination is anonymous (could be
+	// unnamed or have auto-generated name).
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	MessagingDestinationAnonymousKey = attribute.Key("messaging.destination.anonymous")
+
+	// MessagingDestinationNameKey is the attribute Key conforming to the
+	// "messaging.destination.name" semantic conventions. It represents the
+	// message destination name
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'MyQueue', 'MyTopic'
+	// Note: Destination name SHOULD uniquely identify a specific queue, topic
+	// or other entity within the broker. If
+	// the broker doesn't have such notion, the destination name SHOULD
+	// uniquely identify the broker.
+	MessagingDestinationNameKey = attribute.Key("messaging.destination.name")
+
+	// MessagingDestinationTemplateKey is the attribute Key conforming to the
+	// "messaging.destination.template" semantic conventions. It represents the
+	// low cardinality representation of the messaging destination name
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '/customers/{customerID}'
+	// Note: Destination names could be constructed from templates. An example
+	// would be a destination name involving a user name or product id.
+	// Although the destination name in this case is of high cardinality, the
+	// underlying template is of low cardinality and can be effectively used
+	// for grouping and aggregation.
+	MessagingDestinationTemplateKey = attribute.Key("messaging.destination.template")
+
+	// MessagingDestinationTemporaryKey is the attribute Key conforming to the
+	// "messaging.destination.temporary" semantic conventions. It represents a
+	// boolean that is true if the message destination is temporary and might
+	// not exist anymore after messages are processed.
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	MessagingDestinationTemporaryKey = attribute.Key("messaging.destination.temporary")
+
+	// MessagingDestinationPublishAnonymousKey is the attribute Key conforming
+	// to the "messaging.destination_publish.anonymous" semantic conventions.
+	// It represents a boolean that is true if the publish message destination
+	// is anonymous (could be unnamed or have auto-generated name).
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	MessagingDestinationPublishAnonymousKey = attribute.Key("messaging.destination_publish.anonymous")
+
+	// MessagingDestinationPublishNameKey is the attribute Key conforming to
+	// the "messaging.destination_publish.name" semantic conventions. It
+	// represents the name of the original destination the message was
+	// published to
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'MyQueue', 'MyTopic'
+	// Note: The name SHOULD uniquely identify a specific queue, topic, or
+	// other entity within the broker. If
+	// the broker doesn't have such notion, the original destination name
+	// SHOULD uniquely identify the broker.
+	MessagingDestinationPublishNameKey = attribute.Key("messaging.destination_publish.name")
+
+	// MessagingGCPPubsubMessageOrderingKeyKey is the attribute Key conforming
+	// to the "messaging.gcp_pubsub.message.ordering_key" semantic conventions.
+	// It represents the ordering key for a given message. If the attribute is
+	// not present, the message does not have an ordering key.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'ordering_key'
+	MessagingGCPPubsubMessageOrderingKeyKey = attribute.Key("messaging.gcp_pubsub.message.ordering_key")
+
+	// MessagingKafkaConsumerGroupKey is the attribute Key conforming to the
+	// "messaging.kafka.consumer.group" semantic conventions. It represents the
+	// name of the Kafka Consumer Group that is handling the message. Only
+	// applies to consumers, not producers.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'my-group'
+	MessagingKafkaConsumerGroupKey = attribute.Key("messaging.kafka.consumer.group")
+
+	// MessagingKafkaDestinationPartitionKey is the attribute Key conforming to
+	// the "messaging.kafka.destination.partition" semantic conventions. It
+	// represents the partition the message is sent to.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 2
+	MessagingKafkaDestinationPartitionKey = attribute.Key("messaging.kafka.destination.partition")
+
+	// MessagingKafkaMessageKeyKey is the attribute Key conforming to the
+	// "messaging.kafka.message.key" semantic conventions. It represents the
+	// message keys in Kafka are used for grouping alike messages to ensure
+	// they're processed on the same partition. They differ from
+	// `messaging.message.id` in that they're not unique. If the key is `null`,
+	// the attribute MUST NOT be set.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'myKey'
+	// Note: If the key type is not string, it's string representation has to
+	// be supplied for the attribute. If the key has no unambiguous, canonical
+	// string form, don't include its value.
+	MessagingKafkaMessageKeyKey = attribute.Key("messaging.kafka.message.key")
+
+	// MessagingKafkaMessageOffsetKey is the attribute Key conforming to the
+	// "messaging.kafka.message.offset" semantic conventions. It represents the
+	// offset of a record in the corresponding Kafka partition.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 42
+	MessagingKafkaMessageOffsetKey = attribute.Key("messaging.kafka.message.offset")
+
+	// MessagingKafkaMessageTombstoneKey is the attribute Key conforming to the
+	// "messaging.kafka.message.tombstone" semantic conventions. It represents
+	// a boolean that is true if the message is a tombstone.
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	MessagingKafkaMessageTombstoneKey = attribute.Key("messaging.kafka.message.tombstone")
+
+	// MessagingMessageBodySizeKey is the attribute Key conforming to the
+	// "messaging.message.body.size" semantic conventions. It represents the
+	// size of the message body in bytes.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 1439
+	// Note: This can refer to both the compressed or uncompressed body size.
+	// If both sizes are known, the uncompressed
+	// body size should be used.
+	MessagingMessageBodySizeKey = attribute.Key("messaging.message.body.size")
+
+	// MessagingMessageConversationIDKey is the attribute Key conforming to the
+	// "messaging.message.conversation_id" semantic conventions. It represents
+	// the conversation ID identifying the conversation to which the message
+	// belongs, represented as a string. Sometimes called "Correlation ID".
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'MyConversationID'
+	MessagingMessageConversationIDKey = attribute.Key("messaging.message.conversation_id")
+
+	// MessagingMessageEnvelopeSizeKey is the attribute Key conforming to the
+	// "messaging.message.envelope.size" semantic conventions. It represents
+	// the size of the message body and metadata in bytes.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 2738
+	// Note: This can refer to both the compressed or uncompressed size. If
+	// both sizes are known, the uncompressed
+	// size should be used.
+	MessagingMessageEnvelopeSizeKey = attribute.Key("messaging.message.envelope.size")
+
+	// MessagingMessageIDKey is the attribute Key conforming to the
+	// "messaging.message.id" semantic conventions. It represents a value used
+	// by the messaging system as an identifier for the message, represented as
+	// a string.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '452a7c7c7c7048c2f887f61572b18fc2'
+	MessagingMessageIDKey = attribute.Key("messaging.message.id")
+
+	// MessagingOperationKey is the attribute Key conforming to the
+	// "messaging.operation" semantic conventions. It represents a string
+	// identifying the kind of messaging operation.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Note: If a custom value is used, it MUST be of low cardinality.
+	MessagingOperationKey = attribute.Key("messaging.operation")
+
+	// MessagingRabbitmqDestinationRoutingKeyKey is the attribute Key
+	// conforming to the "messaging.rabbitmq.destination.routing_key" semantic
+	// conventions. It represents the rabbitMQ message routing key.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'myKey'
+	MessagingRabbitmqDestinationRoutingKeyKey = attribute.Key("messaging.rabbitmq.destination.routing_key")
+
+	// MessagingRocketmqClientGroupKey is the attribute Key conforming to the
+	// "messaging.rocketmq.client_group" semantic conventions. It represents
+	// the name of the RocketMQ producer/consumer group that is handling the
+	// message. The client type is identified by the SpanKind.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'myConsumerGroup'
+	MessagingRocketmqClientGroupKey = attribute.Key("messaging.rocketmq.client_group")
+
+	// MessagingRocketmqConsumptionModelKey is the attribute Key conforming to
+	// the "messaging.rocketmq.consumption_model" semantic conventions. It
+	// represents the model of message consumption. This only applies to
+	// consumer spans.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	MessagingRocketmqConsumptionModelKey = attribute.Key("messaging.rocketmq.consumption_model")
+
+	// MessagingRocketmqMessageDelayTimeLevelKey is the attribute Key
+	// conforming to the "messaging.rocketmq.message.delay_time_level" semantic
+	// conventions. It represents the delay time level for delay message, which
+	// determines the message delay time.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 3
+	MessagingRocketmqMessageDelayTimeLevelKey = attribute.Key("messaging.rocketmq.message.delay_time_level")
+
+	// MessagingRocketmqMessageDeliveryTimestampKey is the attribute Key
+	// conforming to the "messaging.rocketmq.message.delivery_timestamp"
+	// semantic conventions. It represents the timestamp in milliseconds that
+	// the delay message is expected to be delivered to consumer.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 1665987217045
+	MessagingRocketmqMessageDeliveryTimestampKey = attribute.Key("messaging.rocketmq.message.delivery_timestamp")
+
+	// MessagingRocketmqMessageGroupKey is the attribute Key conforming to the
+	// "messaging.rocketmq.message.group" semantic conventions. It represents
+	// the it is essential for FIFO message. Messages that belong to the same
+	// message group are always processed one by one within the same consumer
+	// group.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'myMessageGroup'
+	MessagingRocketmqMessageGroupKey = attribute.Key("messaging.rocketmq.message.group")
+
+	// MessagingRocketmqMessageKeysKey is the attribute Key conforming to the
+	// "messaging.rocketmq.message.keys" semantic conventions. It represents
+	// the key(s) of message, another way to mark message besides message id.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'keyA', 'keyB'
+	MessagingRocketmqMessageKeysKey = attribute.Key("messaging.rocketmq.message.keys")
+
+	// MessagingRocketmqMessageTagKey is the attribute Key conforming to the
+	// "messaging.rocketmq.message.tag" semantic conventions. It represents the
+	// secondary classifier of message besides topic.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'tagA'
+	MessagingRocketmqMessageTagKey = attribute.Key("messaging.rocketmq.message.tag")
+
+	// MessagingRocketmqMessageTypeKey is the attribute Key conforming to the
+	// "messaging.rocketmq.message.type" semantic conventions. It represents
+	// the type of message.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	MessagingRocketmqMessageTypeKey = attribute.Key("messaging.rocketmq.message.type")
+
+	// MessagingRocketmqNamespaceKey is the attribute Key conforming to the
+	// "messaging.rocketmq.namespace" semantic conventions. It represents the
+	// namespace of RocketMQ resources, resources in different namespaces are
+	// individual.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'myNamespace'
+	MessagingRocketmqNamespaceKey = attribute.Key("messaging.rocketmq.namespace")
+
+	// MessagingSystemKey is the attribute Key conforming to the
+	// "messaging.system" semantic conventions. It represents an identifier for
+	// the messaging system being used. See below for a list of well-known
+	// identifiers.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	MessagingSystemKey = attribute.Key("messaging.system")
+)
+
+var (
+	// One or more messages are provided for publishing to an intermediary. If a single message is published, the context of the "Publish" span can be used as the creation context and no "Create" span needs to be created
+	MessagingOperationPublish = MessagingOperationKey.String("publish")
+	// A message is created. "Create" spans always refer to a single message and are used to provide a unique creation context for messages in batch publishing scenarios
+	MessagingOperationCreate = MessagingOperationKey.String("create")
+	// One or more messages are requested by a consumer. This operation refers to pull-based scenarios, where consumers explicitly call methods of messaging SDKs to receive messages
+	MessagingOperationReceive = MessagingOperationKey.String("receive")
+	// One or more messages are passed to a consumer. This operation refers to push-based scenarios, where consumer register callbacks which get called by messaging SDKs
+	MessagingOperationDeliver = MessagingOperationKey.String("deliver")
+)
+
+var (
+	// Clustering consumption model
+	MessagingRocketmqConsumptionModelClustering = MessagingRocketmqConsumptionModelKey.String("clustering")
+	// Broadcasting consumption model
+	MessagingRocketmqConsumptionModelBroadcasting = MessagingRocketmqConsumptionModelKey.String("broadcasting")
+)
+
+var (
+	// Normal message
+	MessagingRocketmqMessageTypeNormal = MessagingRocketmqMessageTypeKey.String("normal")
+	// FIFO message
+	MessagingRocketmqMessageTypeFifo = MessagingRocketmqMessageTypeKey.String("fifo")
+	// Delay message
+	MessagingRocketmqMessageTypeDelay = MessagingRocketmqMessageTypeKey.String("delay")
+	// Transaction message
+	MessagingRocketmqMessageTypeTransaction = MessagingRocketmqMessageTypeKey.String("transaction")
+)
+
+var (
+	// Apache ActiveMQ
+	MessagingSystemActivemq = MessagingSystemKey.String("activemq")
+	// Amazon Simple Queue Service (SQS)
+	MessagingSystemAWSSqs = MessagingSystemKey.String("aws_sqs")
+	// Azure Event Grid
+	MessagingSystemAzureEventgrid = MessagingSystemKey.String("azure_eventgrid")
+	// Azure Event Hubs
+	MessagingSystemAzureEventhubs = MessagingSystemKey.String("azure_eventhubs")
+	// Azure Service Bus
+	MessagingSystemAzureServicebus = MessagingSystemKey.String("azure_servicebus")
+	// Google Cloud Pub/Sub
+	MessagingSystemGCPPubsub = MessagingSystemKey.String("gcp_pubsub")
+	// Java Message Service
+	MessagingSystemJms = MessagingSystemKey.String("jms")
+	// Apache Kafka
+	MessagingSystemKafka = MessagingSystemKey.String("kafka")
+	// RabbitMQ
+	MessagingSystemRabbitmq = MessagingSystemKey.String("rabbitmq")
+	// Apache RocketMQ
+	MessagingSystemRocketmq = MessagingSystemKey.String("rocketmq")
+)
+
+// MessagingBatchMessageCount returns an attribute KeyValue conforming to
+// the "messaging.batch.message_count" semantic conventions. It represents the
+// number of messages sent, received, or processed in the scope of the batching
+// operation.
+func MessagingBatchMessageCount(val int) attribute.KeyValue {
+	return MessagingBatchMessageCountKey.Int(val)
+}
+
+// MessagingClientID returns an attribute KeyValue conforming to the
+// "messaging.client_id" semantic conventions. It represents a unique
+// identifier for the client that consumes or produces a message.
+func MessagingClientID(val string) attribute.KeyValue {
+	return MessagingClientIDKey.String(val)
+}
+
+// MessagingDestinationAnonymous returns an attribute KeyValue conforming to
+// the "messaging.destination.anonymous" semantic conventions. It represents a
+// boolean that is true if the message destination is anonymous (could be
+// unnamed or have auto-generated name).
+func MessagingDestinationAnonymous(val bool) attribute.KeyValue {
+	return MessagingDestinationAnonymousKey.Bool(val)
+}
+
+// MessagingDestinationName returns an attribute KeyValue conforming to the
+// "messaging.destination.name" semantic conventions. It represents the message
+// destination name
+func MessagingDestinationName(val string) attribute.KeyValue {
+	return MessagingDestinationNameKey.String(val)
+}
+
+// MessagingDestinationTemplate returns an attribute KeyValue conforming to
+// the "messaging.destination.template" semantic conventions. It represents the
+// low cardinality representation of the messaging destination name
+func MessagingDestinationTemplate(val string) attribute.KeyValue {
+	return MessagingDestinationTemplateKey.String(val)
+}
+
+// MessagingDestinationTemporary returns an attribute KeyValue conforming to
+// the "messaging.destination.temporary" semantic conventions. It represents a
+// boolean that is true if the message destination is temporary and might not
+// exist anymore after messages are processed.
+func MessagingDestinationTemporary(val bool) attribute.KeyValue {
+	return MessagingDestinationTemporaryKey.Bool(val)
+}
+
+// MessagingDestinationPublishAnonymous returns an attribute KeyValue
+// conforming to the "messaging.destination_publish.anonymous" semantic
+// conventions. It represents a boolean that is true if the publish message
+// destination is anonymous (could be unnamed or have auto-generated name).
+func MessagingDestinationPublishAnonymous(val bool) attribute.KeyValue {
+	return MessagingDestinationPublishAnonymousKey.Bool(val)
+}
+
+// MessagingDestinationPublishName returns an attribute KeyValue conforming
+// to the "messaging.destination_publish.name" semantic conventions. It
+// represents the name of the original destination the message was published to
+func MessagingDestinationPublishName(val string) attribute.KeyValue {
+	return MessagingDestinationPublishNameKey.String(val)
+}
+
+// MessagingGCPPubsubMessageOrderingKey returns an attribute KeyValue
+// conforming to the "messaging.gcp_pubsub.message.ordering_key" semantic
+// conventions. It represents the ordering key for a given message. If the
+// attribute is not present, the message does not have an ordering key.
+func MessagingGCPPubsubMessageOrderingKey(val string) attribute.KeyValue {
+	return MessagingGCPPubsubMessageOrderingKeyKey.String(val)
+}
+
+// MessagingKafkaConsumerGroup returns an attribute KeyValue conforming to
+// the "messaging.kafka.consumer.group" semantic conventions. It represents the
+// name of the Kafka Consumer Group that is handling the message. Only applies
+// to consumers, not producers.
+func MessagingKafkaConsumerGroup(val string) attribute.KeyValue {
+	return MessagingKafkaConsumerGroupKey.String(val)
+}
+
+// MessagingKafkaDestinationPartition returns an attribute KeyValue
+// conforming to the "messaging.kafka.destination.partition" semantic
+// conventions. It represents the partition the message is sent to.
+func MessagingKafkaDestinationPartition(val int) attribute.KeyValue {
+	return MessagingKafkaDestinationPartitionKey.Int(val)
+}
+
+// MessagingKafkaMessageKey returns an attribute KeyValue conforming to the
+// "messaging.kafka.message.key" semantic conventions. It represents the
+// message keys in Kafka are used for grouping alike messages to ensure they're
+// processed on the same partition. They differ from `messaging.message.id` in
+// that they're not unique. If the key is `null`, the attribute MUST NOT be
+// set.
+func MessagingKafkaMessageKey(val string) attribute.KeyValue {
+	return MessagingKafkaMessageKeyKey.String(val)
+}
+
+// MessagingKafkaMessageOffset returns an attribute KeyValue conforming to
+// the "messaging.kafka.message.offset" semantic conventions. It represents the
+// offset of a record in the corresponding Kafka partition.
+func MessagingKafkaMessageOffset(val int) attribute.KeyValue {
+	return MessagingKafkaMessageOffsetKey.Int(val)
+}
+
+// MessagingKafkaMessageTombstone returns an attribute KeyValue conforming
+// to the "messaging.kafka.message.tombstone" semantic conventions. It
+// represents a boolean that is true if the message is a tombstone.
+func MessagingKafkaMessageTombstone(val bool) attribute.KeyValue {
+	return MessagingKafkaMessageTombstoneKey.Bool(val)
+}
+
+// MessagingMessageBodySize returns an attribute KeyValue conforming to the
+// "messaging.message.body.size" semantic conventions. It represents the size
+// of the message body in bytes.
+func MessagingMessageBodySize(val int) attribute.KeyValue {
+	return MessagingMessageBodySizeKey.Int(val)
+}
+
+// MessagingMessageConversationID returns an attribute KeyValue conforming
+// to the "messaging.message.conversation_id" semantic conventions. It
+// represents the conversation ID identifying the conversation to which the
+// message belongs, represented as a string. Sometimes called "Correlation ID".
+func MessagingMessageConversationID(val string) attribute.KeyValue {
+	return MessagingMessageConversationIDKey.String(val)
+}
+
+// MessagingMessageEnvelopeSize returns an attribute KeyValue conforming to
+// the "messaging.message.envelope.size" semantic conventions. It represents
+// the size of the message body and metadata in bytes.
+func MessagingMessageEnvelopeSize(val int) attribute.KeyValue {
+	return MessagingMessageEnvelopeSizeKey.Int(val)
+}
+
+// MessagingMessageID returns an attribute KeyValue conforming to the
+// "messaging.message.id" semantic conventions. It represents a value used by
+// the messaging system as an identifier for the message, represented as a
+// string.
+func MessagingMessageID(val string) attribute.KeyValue {
+	return MessagingMessageIDKey.String(val)
+}
+
+// MessagingRabbitmqDestinationRoutingKey returns an attribute KeyValue
+// conforming to the "messaging.rabbitmq.destination.routing_key" semantic
+// conventions. It represents the rabbitMQ message routing key.
+func MessagingRabbitmqDestinationRoutingKey(val string) attribute.KeyValue {
+	return MessagingRabbitmqDestinationRoutingKeyKey.String(val)
+}
+
+// MessagingRocketmqClientGroup returns an attribute KeyValue conforming to
+// the "messaging.rocketmq.client_group" semantic conventions. It represents
+// the name of the RocketMQ producer/consumer group that is handling the
+// message. The client type is identified by the SpanKind.
+func MessagingRocketmqClientGroup(val string) attribute.KeyValue {
+	return MessagingRocketmqClientGroupKey.String(val)
+}
+
+// MessagingRocketmqMessageDelayTimeLevel returns an attribute KeyValue
+// conforming to the "messaging.rocketmq.message.delay_time_level" semantic
+// conventions. It represents the delay time level for delay message, which
+// determines the message delay time.
+func MessagingRocketmqMessageDelayTimeLevel(val int) attribute.KeyValue {
+	return MessagingRocketmqMessageDelayTimeLevelKey.Int(val)
+}
+
+// MessagingRocketmqMessageDeliveryTimestamp returns an attribute KeyValue
+// conforming to the "messaging.rocketmq.message.delivery_timestamp" semantic
+// conventions. It represents the timestamp in milliseconds that the delay
+// message is expected to be delivered to consumer.
+func MessagingRocketmqMessageDeliveryTimestamp(val int) attribute.KeyValue {
+	return MessagingRocketmqMessageDeliveryTimestampKey.Int(val)
+}
+
+// MessagingRocketmqMessageGroup returns an attribute KeyValue conforming to
+// the "messaging.rocketmq.message.group" semantic conventions. It represents
+// the it is essential for FIFO message. Messages that belong to the same
+// message group are always processed one by one within the same consumer
+// group.
+func MessagingRocketmqMessageGroup(val string) attribute.KeyValue {
+	return MessagingRocketmqMessageGroupKey.String(val)
+}
+
+// MessagingRocketmqMessageKeys returns an attribute KeyValue conforming to
+// the "messaging.rocketmq.message.keys" semantic conventions. It represents
+// the key(s) of message, another way to mark message besides message id.
+func MessagingRocketmqMessageKeys(val ...string) attribute.KeyValue {
+	return MessagingRocketmqMessageKeysKey.StringSlice(val)
+}
+
+// MessagingRocketmqMessageTag returns an attribute KeyValue conforming to
+// the "messaging.rocketmq.message.tag" semantic conventions. It represents the
+// secondary classifier of message besides topic.
+func MessagingRocketmqMessageTag(val string) attribute.KeyValue {
+	return MessagingRocketmqMessageTagKey.String(val)
+}
+
+// MessagingRocketmqNamespace returns an attribute KeyValue conforming to
+// the "messaging.rocketmq.namespace" semantic conventions. It represents the
+// namespace of RocketMQ resources, resources in different namespaces are
+// individual.
+func MessagingRocketmqNamespace(val string) attribute.KeyValue {
+	return MessagingRocketmqNamespaceKey.String(val)
+}
+
+// These attributes may be used for any network related operation.
+const (
+	// NetworkCarrierIccKey is the attribute Key conforming to the
+	// "network.carrier.icc" semantic conventions. It represents the ISO 3166-1
+	// alpha-2 2-character country code associated with the mobile carrier
+	// network.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'DE'
+	NetworkCarrierIccKey = attribute.Key("network.carrier.icc")
+
+	// NetworkCarrierMccKey is the attribute Key conforming to the
+	// "network.carrier.mcc" semantic conventions. It represents the mobile
+	// carrier country code.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '310'
+	NetworkCarrierMccKey = attribute.Key("network.carrier.mcc")
+
+	// NetworkCarrierMncKey is the attribute Key conforming to the
+	// "network.carrier.mnc" semantic conventions. It represents the mobile
+	// carrier network code.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '001'
+	NetworkCarrierMncKey = attribute.Key("network.carrier.mnc")
+
+	// NetworkCarrierNameKey is the attribute Key conforming to the
+	// "network.carrier.name" semantic conventions. It represents the name of
+	// the mobile carrier.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'sprint'
+	NetworkCarrierNameKey = attribute.Key("network.carrier.name")
+
+	// NetworkConnectionSubtypeKey is the attribute Key conforming to the
+	// "network.connection.subtype" semantic conventions. It represents the
+	// this describes more details regarding the connection.type. It may be the
+	// type of cell technology connection, but it could be used for describing
+	// details about a wifi connection.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'LTE'
+	NetworkConnectionSubtypeKey = attribute.Key("network.connection.subtype")
+
+	// NetworkConnectionTypeKey is the attribute Key conforming to the
+	// "network.connection.type" semantic conventions. It represents the
+	// internet connection type.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'wifi'
+	NetworkConnectionTypeKey = attribute.Key("network.connection.type")
+
+	// NetworkIoDirectionKey is the attribute Key conforming to the
+	// "network.io.direction" semantic conventions. It represents the network
+	// IO operation direction.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'transmit'
+	NetworkIoDirectionKey = attribute.Key("network.io.direction")
+
+	// NetworkLocalAddressKey is the attribute Key conforming to the
+	// "network.local.address" semantic conventions. It represents the local
+	// address of the network connection - IP address or Unix domain socket
+	// name.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '10.1.2.80', '/tmp/my.sock'
+	NetworkLocalAddressKey = attribute.Key("network.local.address")
+
+	// NetworkLocalPortKey is the attribute Key conforming to the
+	// "network.local.port" semantic conventions. It represents the local port
+	// number of the network connection.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 65123
+	NetworkLocalPortKey = attribute.Key("network.local.port")
+
+	// NetworkPeerAddressKey is the attribute Key conforming to the
+	// "network.peer.address" semantic conventions. It represents the peer
+	// address of the network connection - IP address or Unix domain socket
+	// name.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '10.1.2.80', '/tmp/my.sock'
+	NetworkPeerAddressKey = attribute.Key("network.peer.address")
+
+	// NetworkPeerPortKey is the attribute Key conforming to the
+	// "network.peer.port" semantic conventions. It represents the peer port
+	// number of the network connection.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 65123
+	NetworkPeerPortKey = attribute.Key("network.peer.port")
+
+	// NetworkProtocolNameKey is the attribute Key conforming to the
+	// "network.protocol.name" semantic conventions. It represents the [OSI
+	// application layer](https://osi-model.com/application-layer/) or non-OSI
+	// equivalent.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'amqp', 'http', 'mqtt'
+	// Note: The value SHOULD be normalized to lowercase.
+	NetworkProtocolNameKey = attribute.Key("network.protocol.name")
+
+	// NetworkProtocolVersionKey is the attribute Key conforming to the
+	// "network.protocol.version" semantic conventions. It represents the
+	// version of the protocol specified in `network.protocol.name`.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '3.1.1'
+	// Note: `network.protocol.version` refers to the version of the protocol
+	// used and might be different from the protocol client's version. If the
+	// HTTP client has a version of `0.27.2`, but sends HTTP version `1.1`,
+	// this attribute should be set to `1.1`.
+	NetworkProtocolVersionKey = attribute.Key("network.protocol.version")
+
+	// NetworkTransportKey is the attribute Key conforming to the
+	// "network.transport" semantic conventions. It represents the [OSI
+	// transport layer](https://osi-model.com/transport-layer/) or
+	// [inter-process communication
+	// method](https://wikipedia.org/wiki/Inter-process_communication).
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'tcp', 'udp'
+	// Note: The value SHOULD be normalized to lowercase.
+	//
+	// Consider always setting the transport when setting a port number, since
+	// a port number is ambiguous without knowing the transport. For example
+	// different processes could be listening on TCP port 12345 and UDP port
+	// 12345.
+	NetworkTransportKey = attribute.Key("network.transport")
+
+	// NetworkTypeKey is the attribute Key conforming to the "network.type"
+	// semantic conventions. It represents the [OSI network
+	// layer](https://osi-model.com/network-layer/) or non-OSI equivalent.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'ipv4', 'ipv6'
+	// Note: The value SHOULD be normalized to lowercase.
+	NetworkTypeKey = attribute.Key("network.type")
+)
+
+var (
+	// GPRS
+	NetworkConnectionSubtypeGprs = NetworkConnectionSubtypeKey.String("gprs")
+	// EDGE
+	NetworkConnectionSubtypeEdge = NetworkConnectionSubtypeKey.String("edge")
+	// UMTS
+	NetworkConnectionSubtypeUmts = NetworkConnectionSubtypeKey.String("umts")
+	// CDMA
+	NetworkConnectionSubtypeCdma = NetworkConnectionSubtypeKey.String("cdma")
+	// EVDO Rel. 0
+	NetworkConnectionSubtypeEvdo0 = NetworkConnectionSubtypeKey.String("evdo_0")
+	// EVDO Rev. A
+	NetworkConnectionSubtypeEvdoA = NetworkConnectionSubtypeKey.String("evdo_a")
+	// CDMA2000 1XRTT
+	NetworkConnectionSubtypeCdma20001xrtt = NetworkConnectionSubtypeKey.String("cdma2000_1xrtt")
+	// HSDPA
+	NetworkConnectionSubtypeHsdpa = NetworkConnectionSubtypeKey.String("hsdpa")
+	// HSUPA
+	NetworkConnectionSubtypeHsupa = NetworkConnectionSubtypeKey.String("hsupa")
+	// HSPA
+	NetworkConnectionSubtypeHspa = NetworkConnectionSubtypeKey.String("hspa")
+	// IDEN
+	NetworkConnectionSubtypeIden = NetworkConnectionSubtypeKey.String("iden")
+	// EVDO Rev. B
+	NetworkConnectionSubtypeEvdoB = NetworkConnectionSubtypeKey.String("evdo_b")
+	// LTE
+	NetworkConnectionSubtypeLte = NetworkConnectionSubtypeKey.String("lte")
+	// EHRPD
+	NetworkConnectionSubtypeEhrpd = NetworkConnectionSubtypeKey.String("ehrpd")
+	// HSPAP
+	NetworkConnectionSubtypeHspap = NetworkConnectionSubtypeKey.String("hspap")
+	// GSM
+	NetworkConnectionSubtypeGsm = NetworkConnectionSubtypeKey.String("gsm")
+	// TD-SCDMA
+	NetworkConnectionSubtypeTdScdma = NetworkConnectionSubtypeKey.String("td_scdma")
+	// IWLAN
+	NetworkConnectionSubtypeIwlan = NetworkConnectionSubtypeKey.String("iwlan")
+	// 5G NR (New Radio)
+	NetworkConnectionSubtypeNr = NetworkConnectionSubtypeKey.String("nr")
+	// 5G NRNSA (New Radio Non-Standalone)
+	NetworkConnectionSubtypeNrnsa = NetworkConnectionSubtypeKey.String("nrnsa")
+	// LTE CA
+	NetworkConnectionSubtypeLteCa = NetworkConnectionSubtypeKey.String("lte_ca")
+)
+
+var (
+	// wifi
+	NetworkConnectionTypeWifi = NetworkConnectionTypeKey.String("wifi")
+	// wired
+	NetworkConnectionTypeWired = NetworkConnectionTypeKey.String("wired")
+	// cell
+	NetworkConnectionTypeCell = NetworkConnectionTypeKey.String("cell")
+	// unavailable
+	NetworkConnectionTypeUnavailable = NetworkConnectionTypeKey.String("unavailable")
+	// unknown
+	NetworkConnectionTypeUnknown = NetworkConnectionTypeKey.String("unknown")
+)
+
+var (
+	// transmit
+	NetworkIoDirectionTransmit = NetworkIoDirectionKey.String("transmit")
+	// receive
+	NetworkIoDirectionReceive = NetworkIoDirectionKey.String("receive")
+)
+
+var (
+	// TCP
+	NetworkTransportTCP = NetworkTransportKey.String("tcp")
+	// UDP
+	NetworkTransportUDP = NetworkTransportKey.String("udp")
+	// Named or anonymous pipe
+	NetworkTransportPipe = NetworkTransportKey.String("pipe")
+	// Unix domain socket
+	NetworkTransportUnix = NetworkTransportKey.String("unix")
+)
+
+var (
+	// IPv4
+	NetworkTypeIpv4 = NetworkTypeKey.String("ipv4")
+	// IPv6
+	NetworkTypeIpv6 = NetworkTypeKey.String("ipv6")
+)
+
+// NetworkCarrierIcc returns an attribute KeyValue conforming to the
+// "network.carrier.icc" semantic conventions. It represents the ISO 3166-1
+// alpha-2 2-character country code associated with the mobile carrier network.
+func NetworkCarrierIcc(val string) attribute.KeyValue {
+	return NetworkCarrierIccKey.String(val)
+}
+
+// NetworkCarrierMcc returns an attribute KeyValue conforming to the
+// "network.carrier.mcc" semantic conventions. It represents the mobile carrier
+// country code.
+func NetworkCarrierMcc(val string) attribute.KeyValue {
+	return NetworkCarrierMccKey.String(val)
+}
+
+// NetworkCarrierMnc returns an attribute KeyValue conforming to the
+// "network.carrier.mnc" semantic conventions. It represents the mobile carrier
+// network code.
+func NetworkCarrierMnc(val string) attribute.KeyValue {
+	return NetworkCarrierMncKey.String(val)
+}
+
+// NetworkCarrierName returns an attribute KeyValue conforming to the
+// "network.carrier.name" semantic conventions. It represents the name of the
+// mobile carrier.
+func NetworkCarrierName(val string) attribute.KeyValue {
+	return NetworkCarrierNameKey.String(val)
+}
+
+// NetworkLocalAddress returns an attribute KeyValue conforming to the
+// "network.local.address" semantic conventions. It represents the local
+// address of the network connection - IP address or Unix domain socket name.
+func NetworkLocalAddress(val string) attribute.KeyValue {
+	return NetworkLocalAddressKey.String(val)
+}
+
+// NetworkLocalPort returns an attribute KeyValue conforming to the
+// "network.local.port" semantic conventions. It represents the local port
+// number of the network connection.
+func NetworkLocalPort(val int) attribute.KeyValue {
+	return NetworkLocalPortKey.Int(val)
+}
+
+// NetworkPeerAddress returns an attribute KeyValue conforming to the
+// "network.peer.address" semantic conventions. It represents the peer address
+// of the network connection - IP address or Unix domain socket name.
+func NetworkPeerAddress(val string) attribute.KeyValue {
+	return NetworkPeerAddressKey.String(val)
+}
+
+// NetworkPeerPort returns an attribute KeyValue conforming to the
+// "network.peer.port" semantic conventions. It represents the peer port number
+// of the network connection.
+func NetworkPeerPort(val int) attribute.KeyValue {
+	return NetworkPeerPortKey.Int(val)
+}
+
+// NetworkProtocolName returns an attribute KeyValue conforming to the
+// "network.protocol.name" semantic conventions. It represents the [OSI
+// application layer](https://osi-model.com/application-layer/) or non-OSI
+// equivalent.
+func NetworkProtocolName(val string) attribute.KeyValue {
+	return NetworkProtocolNameKey.String(val)
+}
+
+// NetworkProtocolVersion returns an attribute KeyValue conforming to the
+// "network.protocol.version" semantic conventions. It represents the version
+// of the protocol specified in `network.protocol.name`.
+func NetworkProtocolVersion(val string) attribute.KeyValue {
+	return NetworkProtocolVersionKey.String(val)
+}
+
+// Attributes for remote procedure calls.
+const (
+	// RPCConnectRPCErrorCodeKey is the attribute Key conforming to the
+	// "rpc.connect_rpc.error_code" semantic conventions. It represents the
+	// [error codes](https://connect.build/docs/protocol/#error-codes) of the
+	// Connect request. Error codes are always string values.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	RPCConnectRPCErrorCodeKey = attribute.Key("rpc.connect_rpc.error_code")
+
+	// RPCGRPCStatusCodeKey is the attribute Key conforming to the
+	// "rpc.grpc.status_code" semantic conventions. It represents the [numeric
+	// status
+	// code](https://github.com/grpc/grpc/blob/v1.33.2/doc/statuscodes.md) of
+	// the gRPC request.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	RPCGRPCStatusCodeKey = attribute.Key("rpc.grpc.status_code")
+
+	// RPCJsonrpcErrorCodeKey is the attribute Key conforming to the
+	// "rpc.jsonrpc.error_code" semantic conventions. It represents the
+	// `error.code` property of response if it is an error response.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: -32700, 100
+	RPCJsonrpcErrorCodeKey = attribute.Key("rpc.jsonrpc.error_code")
+
+	// RPCJsonrpcErrorMessageKey is the attribute Key conforming to the
+	// "rpc.jsonrpc.error_message" semantic conventions. It represents the
+	// `error.message` property of response if it is an error response.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Parse error', 'User already exists'
+	RPCJsonrpcErrorMessageKey = attribute.Key("rpc.jsonrpc.error_message")
+
+	// RPCJsonrpcRequestIDKey is the attribute Key conforming to the
+	// "rpc.jsonrpc.request_id" semantic conventions. It represents the `id`
+	// property of request or response. Since protocol allows id to be int,
+	// string, `null` or missing (for notifications), value is expected to be
+	// cast to string for simplicity. Use empty string in case of `null` value.
+	// Omit entirely if this is a notification.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '10', 'request-7', ''
+	RPCJsonrpcRequestIDKey = attribute.Key("rpc.jsonrpc.request_id")
+
+	// RPCJsonrpcVersionKey is the attribute Key conforming to the
+	// "rpc.jsonrpc.version" semantic conventions. It represents the protocol
+	// version as in `jsonrpc` property of request/response. Since JSON-RPC 1.0
+	// doesn't specify this, the value can be omitted.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '2.0', '1.0'
+	RPCJsonrpcVersionKey = attribute.Key("rpc.jsonrpc.version")
+
+	// RPCMethodKey is the attribute Key conforming to the "rpc.method"
+	// semantic conventions. It represents the name of the (logical) method
+	// being called, must be equal to the $method part in the span name.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'exampleMethod'
+	// Note: This is the logical name of the method from the RPC interface
+	// perspective, which can be different from the name of any implementing
+	// method/function. The `code.function` attribute may be used to store the
+	// latter (e.g., method actually executing the call on the server side, RPC
+	// client stub method on the client side).
+	RPCMethodKey = attribute.Key("rpc.method")
+
+	// RPCServiceKey is the attribute Key conforming to the "rpc.service"
+	// semantic conventions. It represents the full (logical) name of the
+	// service being called, including its package name, if applicable.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'myservice.EchoService'
+	// Note: This is the logical name of the service from the RPC interface
+	// perspective, which can be different from the name of any implementing
+	// class. The `code.namespace` attribute may be used to store the latter
+	// (despite the attribute name, it may include a class name; e.g., class
+	// with method actually executing the call on the server side, RPC client
+	// stub class on the client side).
+	RPCServiceKey = attribute.Key("rpc.service")
+
+	// RPCSystemKey is the attribute Key conforming to the "rpc.system"
+	// semantic conventions. It represents a string identifying the remoting
+	// system. See below for a list of well-known identifiers.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	RPCSystemKey = attribute.Key("rpc.system")
+)
+
+var (
+	// cancelled
+	RPCConnectRPCErrorCodeCancelled = RPCConnectRPCErrorCodeKey.String("cancelled")
+	// unknown
+	RPCConnectRPCErrorCodeUnknown = RPCConnectRPCErrorCodeKey.String("unknown")
+	// invalid_argument
+	RPCConnectRPCErrorCodeInvalidArgument = RPCConnectRPCErrorCodeKey.String("invalid_argument")
+	// deadline_exceeded
+	RPCConnectRPCErrorCodeDeadlineExceeded = RPCConnectRPCErrorCodeKey.String("deadline_exceeded")
+	// not_found
+	RPCConnectRPCErrorCodeNotFound = RPCConnectRPCErrorCodeKey.String("not_found")
+	// already_exists
+	RPCConnectRPCErrorCodeAlreadyExists = RPCConnectRPCErrorCodeKey.String("already_exists")
+	// permission_denied
+	RPCConnectRPCErrorCodePermissionDenied = RPCConnectRPCErrorCodeKey.String("permission_denied")
+	// resource_exhausted
+	RPCConnectRPCErrorCodeResourceExhausted = RPCConnectRPCErrorCodeKey.String("resource_exhausted")
+	// failed_precondition
+	RPCConnectRPCErrorCodeFailedPrecondition = RPCConnectRPCErrorCodeKey.String("failed_precondition")
+	// aborted
+	RPCConnectRPCErrorCodeAborted = RPCConnectRPCErrorCodeKey.String("aborted")
+	// out_of_range
+	RPCConnectRPCErrorCodeOutOfRange = RPCConnectRPCErrorCodeKey.String("out_of_range")
+	// unimplemented
+	RPCConnectRPCErrorCodeUnimplemented = RPCConnectRPCErrorCodeKey.String("unimplemented")
+	// internal
+	RPCConnectRPCErrorCodeInternal = RPCConnectRPCErrorCodeKey.String("internal")
+	// unavailable
+	RPCConnectRPCErrorCodeUnavailable = RPCConnectRPCErrorCodeKey.String("unavailable")
+	// data_loss
+	RPCConnectRPCErrorCodeDataLoss = RPCConnectRPCErrorCodeKey.String("data_loss")
+	// unauthenticated
+	RPCConnectRPCErrorCodeUnauthenticated = RPCConnectRPCErrorCodeKey.String("unauthenticated")
+)
+
+var (
+	// OK
+	RPCGRPCStatusCodeOk = RPCGRPCStatusCodeKey.Int(0)
+	// CANCELLED
+	RPCGRPCStatusCodeCancelled = RPCGRPCStatusCodeKey.Int(1)
+	// UNKNOWN
+	RPCGRPCStatusCodeUnknown = RPCGRPCStatusCodeKey.Int(2)
+	// INVALID_ARGUMENT
+	RPCGRPCStatusCodeInvalidArgument = RPCGRPCStatusCodeKey.Int(3)
+	// DEADLINE_EXCEEDED
+	RPCGRPCStatusCodeDeadlineExceeded = RPCGRPCStatusCodeKey.Int(4)
+	// NOT_FOUND
+	RPCGRPCStatusCodeNotFound = RPCGRPCStatusCodeKey.Int(5)
+	// ALREADY_EXISTS
+	RPCGRPCStatusCodeAlreadyExists = RPCGRPCStatusCodeKey.Int(6)
+	// PERMISSION_DENIED
+	RPCGRPCStatusCodePermissionDenied = RPCGRPCStatusCodeKey.Int(7)
+	// RESOURCE_EXHAUSTED
+	RPCGRPCStatusCodeResourceExhausted = RPCGRPCStatusCodeKey.Int(8)
+	// FAILED_PRECONDITION
+	RPCGRPCStatusCodeFailedPrecondition = RPCGRPCStatusCodeKey.Int(9)
+	// ABORTED
+	RPCGRPCStatusCodeAborted = RPCGRPCStatusCodeKey.Int(10)
+	// OUT_OF_RANGE
+	RPCGRPCStatusCodeOutOfRange = RPCGRPCStatusCodeKey.Int(11)
+	// UNIMPLEMENTED
+	RPCGRPCStatusCodeUnimplemented = RPCGRPCStatusCodeKey.Int(12)
+	// INTERNAL
+	RPCGRPCStatusCodeInternal = RPCGRPCStatusCodeKey.Int(13)
+	// UNAVAILABLE
+	RPCGRPCStatusCodeUnavailable = RPCGRPCStatusCodeKey.Int(14)
+	// DATA_LOSS
+	RPCGRPCStatusCodeDataLoss = RPCGRPCStatusCodeKey.Int(15)
+	// UNAUTHENTICATED
+	RPCGRPCStatusCodeUnauthenticated = RPCGRPCStatusCodeKey.Int(16)
+)
+
+var (
+	// gRPC
+	RPCSystemGRPC = RPCSystemKey.String("grpc")
+	// Java RMI
+	RPCSystemJavaRmi = RPCSystemKey.String("java_rmi")
+	// .NET WCF
+	RPCSystemDotnetWcf = RPCSystemKey.String("dotnet_wcf")
+	// Apache Dubbo
+	RPCSystemApacheDubbo = RPCSystemKey.String("apache_dubbo")
+	// Connect RPC
+	RPCSystemConnectRPC = RPCSystemKey.String("connect_rpc")
+)
+
+// RPCJsonrpcErrorCode returns an attribute KeyValue conforming to the
+// "rpc.jsonrpc.error_code" semantic conventions. It represents the
+// `error.code` property of response if it is an error response.
+func RPCJsonrpcErrorCode(val int) attribute.KeyValue {
+	return RPCJsonrpcErrorCodeKey.Int(val)
+}
+
+// RPCJsonrpcErrorMessage returns an attribute KeyValue conforming to the
+// "rpc.jsonrpc.error_message" semantic conventions. It represents the
+// `error.message` property of response if it is an error response.
+func RPCJsonrpcErrorMessage(val string) attribute.KeyValue {
+	return RPCJsonrpcErrorMessageKey.String(val)
+}
+
+// RPCJsonrpcRequestID returns an attribute KeyValue conforming to the
+// "rpc.jsonrpc.request_id" semantic conventions. It represents the `id`
+// property of request or response. Since protocol allows id to be int, string,
+// `null` or missing (for notifications), value is expected to be cast to
+// string for simplicity. Use empty string in case of `null` value. Omit
+// entirely if this is a notification.
+func RPCJsonrpcRequestID(val string) attribute.KeyValue {
+	return RPCJsonrpcRequestIDKey.String(val)
+}
+
+// RPCJsonrpcVersion returns an attribute KeyValue conforming to the
+// "rpc.jsonrpc.version" semantic conventions. It represents the protocol
+// version as in `jsonrpc` property of request/response. Since JSON-RPC 1.0
+// doesn't specify this, the value can be omitted.
+func RPCJsonrpcVersion(val string) attribute.KeyValue {
+	return RPCJsonrpcVersionKey.String(val)
+}
+
+// RPCMethod returns an attribute KeyValue conforming to the "rpc.method"
+// semantic conventions. It represents the name of the (logical) method being
+// called, must be equal to the $method part in the span name.
+func RPCMethod(val string) attribute.KeyValue {
+	return RPCMethodKey.String(val)
+}
+
+// RPCService returns an attribute KeyValue conforming to the "rpc.service"
+// semantic conventions. It represents the full (logical) name of the service
+// being called, including its package name, if applicable.
+func RPCService(val string) attribute.KeyValue {
+	return RPCServiceKey.String(val)
+}
+
+// These attributes may be used to describe the server in a connection-based
+// network interaction where there is one side that initiates the connection
+// (the client is the side that initiates the connection). This covers all TCP
+// network interactions since TCP is connection-based and one side initiates
+// the connection (an exception is made for peer-to-peer communication over TCP
+// where the "user-facing" surface of the protocol / API doesn't expose a clear
+// notion of client and server). This also covers UDP network interactions
+// where one side initiates the interaction, e.g. QUIC (HTTP/3) and DNS.
+const (
+	// ServerAddressKey is the attribute Key conforming to the "server.address"
+	// semantic conventions. It represents the server domain name if available
+	// without reverse DNS lookup; otherwise, IP address or Unix domain socket
+	// name.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'example.com', '10.1.2.80', '/tmp/my.sock'
+	// Note: When observed from the client side, and when communicating through
+	// an intermediary, `server.address` SHOULD represent the server address
+	// behind any intermediaries, for example proxies, if it's available.
+	ServerAddressKey = attribute.Key("server.address")
+
+	// ServerPortKey is the attribute Key conforming to the "server.port"
+	// semantic conventions. It represents the server port number.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 80, 8080, 443
+	// Note: When observed from the client side, and when communicating through
+	// an intermediary, `server.port` SHOULD represent the server port behind
+	// any intermediaries, for example proxies, if it's available.
+	ServerPortKey = attribute.Key("server.port")
+)
+
+// ServerAddress returns an attribute KeyValue conforming to the
+// "server.address" semantic conventions. It represents the server domain name
+// if available without reverse DNS lookup; otherwise, IP address or Unix
+// domain socket name.
+func ServerAddress(val string) attribute.KeyValue {
+	return ServerAddressKey.String(val)
+}
+
+// ServerPort returns an attribute KeyValue conforming to the "server.port"
+// semantic conventions. It represents the server port number.
+func ServerPort(val int) attribute.KeyValue {
+	return ServerPortKey.Int(val)
+}
+
+// These attributes may be used to describe the sender of a network
+// exchange/packet. These should be used when there is no client/server
+// relationship between the two sides, or when that relationship is unknown.
+// This covers low-level network interactions (e.g. packet tracing) where you
+// don't know if there was a connection or which side initiated it. This also
+// covers unidirectional UDP flows and peer-to-peer communication where the
+// "user-facing" surface of the protocol / API doesn't expose a clear notion of
+// client and server.
+const (
+	// SourceAddressKey is the attribute Key conforming to the "source.address"
+	// semantic conventions. It represents the source address - domain name if
+	// available without reverse DNS lookup; otherwise, IP address or Unix
+	// domain socket name.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'source.example.com', '10.1.2.80', '/tmp/my.sock'
+	// Note: When observed from the destination side, and when communicating
+	// through an intermediary, `source.address` SHOULD represent the source
+	// address behind any intermediaries, for example proxies, if it's
+	// available.
+	SourceAddressKey = attribute.Key("source.address")
+
+	// SourcePortKey is the attribute Key conforming to the "source.port"
+	// semantic conventions. It represents the source port number
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 3389, 2888
+	SourcePortKey = attribute.Key("source.port")
+)
+
+// SourceAddress returns an attribute KeyValue conforming to the
+// "source.address" semantic conventions. It represents the source address -
+// domain name if available without reverse DNS lookup; otherwise, IP address
+// or Unix domain socket name.
+func SourceAddress(val string) attribute.KeyValue {
+	return SourceAddressKey.String(val)
+}
+
+// SourcePort returns an attribute KeyValue conforming to the "source.port"
+// semantic conventions. It represents the source port number
+func SourcePort(val int) attribute.KeyValue {
+	return SourcePortKey.Int(val)
+}
+
+// Semantic convention attributes in the TLS namespace.
+const (
+	// TLSCipherKey is the attribute Key conforming to the "tls.cipher"
+	// semantic conventions. It represents the string indicating the
+	// [cipher](https://datatracker.ietf.org/doc/html/rfc5246#appendix-A.5)
+	// used during the current connection.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'TLS_RSA_WITH_3DES_EDE_CBC_SHA',
+	// 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256'
+	// Note: The values allowed for `tls.cipher` MUST be one of the
+	// `Descriptions` of the [registered TLS Cipher
+	// Suits](https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#table-tls-parameters-4).
+	TLSCipherKey = attribute.Key("tls.cipher")
+
+	// TLSClientCertificateKey is the attribute Key conforming to the
+	// "tls.client.certificate" semantic conventions. It represents the
+	// pEM-encoded stand-alone certificate offered by the client. This is
+	// usually mutually-exclusive of `client.certificate_chain` since this
+	// value also exists in that list.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'MII...'
+	TLSClientCertificateKey = attribute.Key("tls.client.certificate")
+
+	// TLSClientCertificateChainKey is the attribute Key conforming to the
+	// "tls.client.certificate_chain" semantic conventions. It represents the
+	// array of PEM-encoded certificates that make up the certificate chain
+	// offered by the client. This is usually mutually-exclusive of
+	// `client.certificate` since that value should be the first certificate in
+	// the chain.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'MII...', 'MI...'
+	TLSClientCertificateChainKey = attribute.Key("tls.client.certificate_chain")
+
+	// TLSClientHashMd5Key is the attribute Key conforming to the
+	// "tls.client.hash.md5" semantic conventions. It represents the
+	// certificate fingerprint using the MD5 digest of DER-encoded version of
+	// certificate offered by the client. For consistency with other hash
+	// values, this value should be formatted as an uppercase hash.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '0F76C7F2C55BFD7D8E8B8F4BFBF0C9EC'
+	TLSClientHashMd5Key = attribute.Key("tls.client.hash.md5")
+
+	// TLSClientHashSha1Key is the attribute Key conforming to the
+	// "tls.client.hash.sha1" semantic conventions. It represents the
+	// certificate fingerprint using the SHA1 digest of DER-encoded version of
+	// certificate offered by the client. For consistency with other hash
+	// values, this value should be formatted as an uppercase hash.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '9E393D93138888D288266C2D915214D1D1CCEB2A'
+	TLSClientHashSha1Key = attribute.Key("tls.client.hash.sha1")
+
+	// TLSClientHashSha256Key is the attribute Key conforming to the
+	// "tls.client.hash.sha256" semantic conventions. It represents the
+	// certificate fingerprint using the SHA256 digest of DER-encoded version
+	// of certificate offered by the client. For consistency with other hash
+	// values, this value should be formatted as an uppercase hash.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples:
+	// '0687F666A054EF17A08E2F2162EAB4CBC0D265E1D7875BE74BF3C712CA92DAF0'
+	TLSClientHashSha256Key = attribute.Key("tls.client.hash.sha256")
+
+	// TLSClientIssuerKey is the attribute Key conforming to the
+	// "tls.client.issuer" semantic conventions. It represents the
+	// distinguished name of
+	// [subject](https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2.6)
+	// of the issuer of the x.509 certificate presented by the client.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'CN=Example Root CA, OU=Infrastructure Team, DC=example,
+	// DC=com'
+	TLSClientIssuerKey = attribute.Key("tls.client.issuer")
+
+	// TLSClientJa3Key is the attribute Key conforming to the "tls.client.ja3"
+	// semantic conventions. It represents a hash that identifies clients based
+	// on how they perform an SSL/TLS handshake.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'd4e5b18d6b55c71272893221c96ba240'
+	TLSClientJa3Key = attribute.Key("tls.client.ja3")
+
+	// TLSClientNotAfterKey is the attribute Key conforming to the
+	// "tls.client.not_after" semantic conventions. It represents the date/Time
+	// indicating when client certificate is no longer considered valid.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '2021-01-01T00:00:00.000Z'
+	TLSClientNotAfterKey = attribute.Key("tls.client.not_after")
+
+	// TLSClientNotBeforeKey is the attribute Key conforming to the
+	// "tls.client.not_before" semantic conventions. It represents the
+	// date/Time indicating when client certificate is first considered valid.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '1970-01-01T00:00:00.000Z'
+	TLSClientNotBeforeKey = attribute.Key("tls.client.not_before")
+
+	// TLSClientServerNameKey is the attribute Key conforming to the
+	// "tls.client.server_name" semantic conventions. It represents the also
+	// called an SNI, this tells the server which hostname to which the client
+	// is attempting to connect to.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry.io'
+	TLSClientServerNameKey = attribute.Key("tls.client.server_name")
+
+	// TLSClientSubjectKey is the attribute Key conforming to the
+	// "tls.client.subject" semantic conventions. It represents the
+	// distinguished name of subject of the x.509 certificate presented by the
+	// client.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'CN=myclient, OU=Documentation Team, DC=example, DC=com'
+	TLSClientSubjectKey = attribute.Key("tls.client.subject")
+
+	// TLSClientSupportedCiphersKey is the attribute Key conforming to the
+	// "tls.client.supported_ciphers" semantic conventions. It represents the
+	// array of ciphers offered by the client during the client hello.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
+	// "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "..."'
+	TLSClientSupportedCiphersKey = attribute.Key("tls.client.supported_ciphers")
+
+	// TLSCurveKey is the attribute Key conforming to the "tls.curve" semantic
+	// conventions. It represents the string indicating the curve used for the
+	// given cipher, when applicable
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'secp256r1'
+	TLSCurveKey = attribute.Key("tls.curve")
+
+	// TLSEstablishedKey is the attribute Key conforming to the
+	// "tls.established" semantic conventions. It represents the boolean flag
+	// indicating if the TLS negotiation was successful and transitioned to an
+	// encrypted tunnel.
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: True
+	TLSEstablishedKey = attribute.Key("tls.established")
+
+	// TLSNextProtocolKey is the attribute Key conforming to the
+	// "tls.next_protocol" semantic conventions. It represents the string
+	// indicating the protocol being tunneled. Per the values in the [IANA
+	// registry](https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml#alpn-protocol-ids),
+	// this string should be lower case.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'http/1.1'
+	TLSNextProtocolKey = attribute.Key("tls.next_protocol")
+
+	// TLSProtocolNameKey is the attribute Key conforming to the
+	// "tls.protocol.name" semantic conventions. It represents the normalized
+	// lowercase protocol name parsed from original string of the negotiated
+	// [SSL/TLS protocol
+	// version](https://www.openssl.org/docs/man1.1.1/man3/SSL_get_version.html#RETURN-VALUES)
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	TLSProtocolNameKey = attribute.Key("tls.protocol.name")
+
+	// TLSProtocolVersionKey is the attribute Key conforming to the
+	// "tls.protocol.version" semantic conventions. It represents the numeric
+	// part of the version parsed from the original string of the negotiated
+	// [SSL/TLS protocol
+	// version](https://www.openssl.org/docs/man1.1.1/man3/SSL_get_version.html#RETURN-VALUES)
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '1.2', '3'
+	TLSProtocolVersionKey = attribute.Key("tls.protocol.version")
+
+	// TLSResumedKey is the attribute Key conforming to the "tls.resumed"
+	// semantic conventions. It represents the boolean flag indicating if this
+	// TLS connection was resumed from an existing TLS negotiation.
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: True
+	TLSResumedKey = attribute.Key("tls.resumed")
+
+	// TLSServerCertificateKey is the attribute Key conforming to the
+	// "tls.server.certificate" semantic conventions. It represents the
+	// pEM-encoded stand-alone certificate offered by the server. This is
+	// usually mutually-exclusive of `server.certificate_chain` since this
+	// value also exists in that list.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'MII...'
+	TLSServerCertificateKey = attribute.Key("tls.server.certificate")
+
+	// TLSServerCertificateChainKey is the attribute Key conforming to the
+	// "tls.server.certificate_chain" semantic conventions. It represents the
+	// array of PEM-encoded certificates that make up the certificate chain
+	// offered by the server. This is usually mutually-exclusive of
+	// `server.certificate` since that value should be the first certificate in
+	// the chain.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'MII...', 'MI...'
+	TLSServerCertificateChainKey = attribute.Key("tls.server.certificate_chain")
+
+	// TLSServerHashMd5Key is the attribute Key conforming to the
+	// "tls.server.hash.md5" semantic conventions. It represents the
+	// certificate fingerprint using the MD5 digest of DER-encoded version of
+	// certificate offered by the server. For consistency with other hash
+	// values, this value should be formatted as an uppercase hash.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '0F76C7F2C55BFD7D8E8B8F4BFBF0C9EC'
+	TLSServerHashMd5Key = attribute.Key("tls.server.hash.md5")
+
+	// TLSServerHashSha1Key is the attribute Key conforming to the
+	// "tls.server.hash.sha1" semantic conventions. It represents the
+	// certificate fingerprint using the SHA1 digest of DER-encoded version of
+	// certificate offered by the server. For consistency with other hash
+	// values, this value should be formatted as an uppercase hash.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '9E393D93138888D288266C2D915214D1D1CCEB2A'
+	TLSServerHashSha1Key = attribute.Key("tls.server.hash.sha1")
+
+	// TLSServerHashSha256Key is the attribute Key conforming to the
+	// "tls.server.hash.sha256" semantic conventions. It represents the
+	// certificate fingerprint using the SHA256 digest of DER-encoded version
+	// of certificate offered by the server. For consistency with other hash
+	// values, this value should be formatted as an uppercase hash.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples:
+	// '0687F666A054EF17A08E2F2162EAB4CBC0D265E1D7875BE74BF3C712CA92DAF0'
+	TLSServerHashSha256Key = attribute.Key("tls.server.hash.sha256")
+
+	// TLSServerIssuerKey is the attribute Key conforming to the
+	// "tls.server.issuer" semantic conventions. It represents the
+	// distinguished name of
+	// [subject](https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2.6)
+	// of the issuer of the x.509 certificate presented by the client.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'CN=Example Root CA, OU=Infrastructure Team, DC=example,
+	// DC=com'
+	TLSServerIssuerKey = attribute.Key("tls.server.issuer")
+
+	// TLSServerJa3sKey is the attribute Key conforming to the
+	// "tls.server.ja3s" semantic conventions. It represents a hash that
+	// identifies servers based on how they perform an SSL/TLS handshake.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'd4e5b18d6b55c71272893221c96ba240'
+	TLSServerJa3sKey = attribute.Key("tls.server.ja3s")
+
+	// TLSServerNotAfterKey is the attribute Key conforming to the
+	// "tls.server.not_after" semantic conventions. It represents the date/Time
+	// indicating when server certificate is no longer considered valid.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '2021-01-01T00:00:00.000Z'
+	TLSServerNotAfterKey = attribute.Key("tls.server.not_after")
+
+	// TLSServerNotBeforeKey is the attribute Key conforming to the
+	// "tls.server.not_before" semantic conventions. It represents the
+	// date/Time indicating when server certificate is first considered valid.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '1970-01-01T00:00:00.000Z'
+	TLSServerNotBeforeKey = attribute.Key("tls.server.not_before")
+
+	// TLSServerSubjectKey is the attribute Key conforming to the
+	// "tls.server.subject" semantic conventions. It represents the
+	// distinguished name of subject of the x.509 certificate presented by the
+	// server.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'CN=myserver, OU=Documentation Team, DC=example, DC=com'
+	TLSServerSubjectKey = attribute.Key("tls.server.subject")
+)
+
+var (
+	// ssl
+	TLSProtocolNameSsl = TLSProtocolNameKey.String("ssl")
+	// tls
+	TLSProtocolNameTLS = TLSProtocolNameKey.String("tls")
+)
+
+// TLSCipher returns an attribute KeyValue conforming to the "tls.cipher"
+// semantic conventions. It represents the string indicating the
+// [cipher](https://datatracker.ietf.org/doc/html/rfc5246#appendix-A.5) used
+// during the current connection.
+func TLSCipher(val string) attribute.KeyValue {
+	return TLSCipherKey.String(val)
+}
+
+// TLSClientCertificate returns an attribute KeyValue conforming to the
+// "tls.client.certificate" semantic conventions. It represents the pEM-encoded
+// stand-alone certificate offered by the client. This is usually
+// mutually-exclusive of `client.certificate_chain` since this value also
+// exists in that list.
+func TLSClientCertificate(val string) attribute.KeyValue {
+	return TLSClientCertificateKey.String(val)
+}
+
+// TLSClientCertificateChain returns an attribute KeyValue conforming to the
+// "tls.client.certificate_chain" semantic conventions. It represents the array
+// of PEM-encoded certificates that make up the certificate chain offered by
+// the client. This is usually mutually-exclusive of `client.certificate` since
+// that value should be the first certificate in the chain.
+func TLSClientCertificateChain(val ...string) attribute.KeyValue {
+	return TLSClientCertificateChainKey.StringSlice(val)
+}
+
+// TLSClientHashMd5 returns an attribute KeyValue conforming to the
+// "tls.client.hash.md5" semantic conventions. It represents the certificate
+// fingerprint using the MD5 digest of DER-encoded version of certificate
+// offered by the client. For consistency with other hash values, this value
+// should be formatted as an uppercase hash.
+func TLSClientHashMd5(val string) attribute.KeyValue {
+	return TLSClientHashMd5Key.String(val)
+}
+
+// TLSClientHashSha1 returns an attribute KeyValue conforming to the
+// "tls.client.hash.sha1" semantic conventions. It represents the certificate
+// fingerprint using the SHA1 digest of DER-encoded version of certificate
+// offered by the client. For consistency with other hash values, this value
+// should be formatted as an uppercase hash.
+func TLSClientHashSha1(val string) attribute.KeyValue {
+	return TLSClientHashSha1Key.String(val)
+}
+
+// TLSClientHashSha256 returns an attribute KeyValue conforming to the
+// "tls.client.hash.sha256" semantic conventions. It represents the certificate
+// fingerprint using the SHA256 digest of DER-encoded version of certificate
+// offered by the client. For consistency with other hash values, this value
+// should be formatted as an uppercase hash.
+func TLSClientHashSha256(val string) attribute.KeyValue {
+	return TLSClientHashSha256Key.String(val)
+}
+
+// TLSClientIssuer returns an attribute KeyValue conforming to the
+// "tls.client.issuer" semantic conventions. It represents the distinguished
+// name of
+// [subject](https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2.6) of
+// the issuer of the x.509 certificate presented by the client.
+func TLSClientIssuer(val string) attribute.KeyValue {
+	return TLSClientIssuerKey.String(val)
+}
+
+// TLSClientJa3 returns an attribute KeyValue conforming to the
+// "tls.client.ja3" semantic conventions. It represents a hash that identifies
+// clients based on how they perform an SSL/TLS handshake.
+func TLSClientJa3(val string) attribute.KeyValue {
+	return TLSClientJa3Key.String(val)
+}
+
+// TLSClientNotAfter returns an attribute KeyValue conforming to the
+// "tls.client.not_after" semantic conventions. It represents the date/Time
+// indicating when client certificate is no longer considered valid.
+func TLSClientNotAfter(val string) attribute.KeyValue {
+	return TLSClientNotAfterKey.String(val)
+}
+
+// TLSClientNotBefore returns an attribute KeyValue conforming to the
+// "tls.client.not_before" semantic conventions. It represents the date/Time
+// indicating when client certificate is first considered valid.
+func TLSClientNotBefore(val string) attribute.KeyValue {
+	return TLSClientNotBeforeKey.String(val)
+}
+
+// TLSClientServerName returns an attribute KeyValue conforming to the
+// "tls.client.server_name" semantic conventions. It represents the also called
+// an SNI, this tells the server which hostname to which the client is
+// attempting to connect to.
+func TLSClientServerName(val string) attribute.KeyValue {
+	return TLSClientServerNameKey.String(val)
+}
+
+// TLSClientSubject returns an attribute KeyValue conforming to the
+// "tls.client.subject" semantic conventions. It represents the distinguished
+// name of subject of the x.509 certificate presented by the client.
+func TLSClientSubject(val string) attribute.KeyValue {
+	return TLSClientSubjectKey.String(val)
+}
+
+// TLSClientSupportedCiphers returns an attribute KeyValue conforming to the
+// "tls.client.supported_ciphers" semantic conventions. It represents the array
+// of ciphers offered by the client during the client hello.
+func TLSClientSupportedCiphers(val ...string) attribute.KeyValue {
+	return TLSClientSupportedCiphersKey.StringSlice(val)
+}
+
+// TLSCurve returns an attribute KeyValue conforming to the "tls.curve"
+// semantic conventions. It represents the string indicating the curve used for
+// the given cipher, when applicable
+func TLSCurve(val string) attribute.KeyValue {
+	return TLSCurveKey.String(val)
+}
+
+// TLSEstablished returns an attribute KeyValue conforming to the
+// "tls.established" semantic conventions. It represents the boolean flag
+// indicating if the TLS negotiation was successful and transitioned to an
+// encrypted tunnel.
+func TLSEstablished(val bool) attribute.KeyValue {
+	return TLSEstablishedKey.Bool(val)
+}
+
+// TLSNextProtocol returns an attribute KeyValue conforming to the
+// "tls.next_protocol" semantic conventions. It represents the string
+// indicating the protocol being tunneled. Per the values in the [IANA
+// registry](https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml#alpn-protocol-ids),
+// this string should be lower case.
+func TLSNextProtocol(val string) attribute.KeyValue {
+	return TLSNextProtocolKey.String(val)
+}
+
+// TLSProtocolVersion returns an attribute KeyValue conforming to the
+// "tls.protocol.version" semantic conventions. It represents the numeric part
+// of the version parsed from the original string of the negotiated [SSL/TLS
+// protocol
+// version](https://www.openssl.org/docs/man1.1.1/man3/SSL_get_version.html#RETURN-VALUES)
+func TLSProtocolVersion(val string) attribute.KeyValue {
+	return TLSProtocolVersionKey.String(val)
+}
+
+// TLSResumed returns an attribute KeyValue conforming to the "tls.resumed"
+// semantic conventions. It represents the boolean flag indicating if this TLS
+// connection was resumed from an existing TLS negotiation.
+func TLSResumed(val bool) attribute.KeyValue {
+	return TLSResumedKey.Bool(val)
+}
+
+// TLSServerCertificate returns an attribute KeyValue conforming to the
+// "tls.server.certificate" semantic conventions. It represents the pEM-encoded
+// stand-alone certificate offered by the server. This is usually
+// mutually-exclusive of `server.certificate_chain` since this value also
+// exists in that list.
+func TLSServerCertificate(val string) attribute.KeyValue {
+	return TLSServerCertificateKey.String(val)
+}
+
+// TLSServerCertificateChain returns an attribute KeyValue conforming to the
+// "tls.server.certificate_chain" semantic conventions. It represents the array
+// of PEM-encoded certificates that make up the certificate chain offered by
+// the server. This is usually mutually-exclusive of `server.certificate` since
+// that value should be the first certificate in the chain.
+func TLSServerCertificateChain(val ...string) attribute.KeyValue {
+	return TLSServerCertificateChainKey.StringSlice(val)
+}
+
+// TLSServerHashMd5 returns an attribute KeyValue conforming to the
+// "tls.server.hash.md5" semantic conventions. It represents the certificate
+// fingerprint using the MD5 digest of DER-encoded version of certificate
+// offered by the server. For consistency with other hash values, this value
+// should be formatted as an uppercase hash.
+func TLSServerHashMd5(val string) attribute.KeyValue {
+	return TLSServerHashMd5Key.String(val)
+}
+
+// TLSServerHashSha1 returns an attribute KeyValue conforming to the
+// "tls.server.hash.sha1" semantic conventions. It represents the certificate
+// fingerprint using the SHA1 digest of DER-encoded version of certificate
+// offered by the server. For consistency with other hash values, this value
+// should be formatted as an uppercase hash.
+func TLSServerHashSha1(val string) attribute.KeyValue {
+	return TLSServerHashSha1Key.String(val)
+}
+
+// TLSServerHashSha256 returns an attribute KeyValue conforming to the
+// "tls.server.hash.sha256" semantic conventions. It represents the certificate
+// fingerprint using the SHA256 digest of DER-encoded version of certificate
+// offered by the server. For consistency with other hash values, this value
+// should be formatted as an uppercase hash.
+func TLSServerHashSha256(val string) attribute.KeyValue {
+	return TLSServerHashSha256Key.String(val)
+}
+
+// TLSServerIssuer returns an attribute KeyValue conforming to the
+// "tls.server.issuer" semantic conventions. It represents the distinguished
+// name of
+// [subject](https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2.6) of
+// the issuer of the x.509 certificate presented by the client.
+func TLSServerIssuer(val string) attribute.KeyValue {
+	return TLSServerIssuerKey.String(val)
+}
+
+// TLSServerJa3s returns an attribute KeyValue conforming to the
+// "tls.server.ja3s" semantic conventions. It represents a hash that identifies
+// servers based on how they perform an SSL/TLS handshake.
+func TLSServerJa3s(val string) attribute.KeyValue {
+	return TLSServerJa3sKey.String(val)
+}
+
+// TLSServerNotAfter returns an attribute KeyValue conforming to the
+// "tls.server.not_after" semantic conventions. It represents the date/Time
+// indicating when server certificate is no longer considered valid.
+func TLSServerNotAfter(val string) attribute.KeyValue {
+	return TLSServerNotAfterKey.String(val)
+}
+
+// TLSServerNotBefore returns an attribute KeyValue conforming to the
+// "tls.server.not_before" semantic conventions. It represents the date/Time
+// indicating when server certificate is first considered valid.
+func TLSServerNotBefore(val string) attribute.KeyValue {
+	return TLSServerNotBeforeKey.String(val)
+}
+
+// TLSServerSubject returns an attribute KeyValue conforming to the
+// "tls.server.subject" semantic conventions. It represents the distinguished
+// name of subject of the x.509 certificate presented by the server.
+func TLSServerSubject(val string) attribute.KeyValue {
+	return TLSServerSubjectKey.String(val)
+}
+
+// Attributes describing URL.
+const (
+	// URLFragmentKey is the attribute Key conforming to the "url.fragment"
+	// semantic conventions. It represents the [URI
+	// fragment](https://www.rfc-editor.org/rfc/rfc3986#section-3.5) component
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'SemConv'
+	URLFragmentKey = attribute.Key("url.fragment")
+
+	// URLFullKey is the attribute Key conforming to the "url.full" semantic
+	// conventions. It represents the absolute URL describing a network
+	// resource according to [RFC3986](https://www.rfc-editor.org/rfc/rfc3986)
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'https://www.foo.bar/search?q=OpenTelemetry#SemConv',
+	// '//localhost'
+	// Note: For network calls, URL usually has
+	// `scheme://host[:port][path][?query][#fragment]` format, where the
+	// fragment is not transmitted over HTTP, but if it is known, it SHOULD be
+	// included nevertheless.
+	// `url.full` MUST NOT contain credentials passed via URL in form of
+	// `https://username:password@www.example.com/`. In such case username and
+	// password SHOULD be redacted and attribute's value SHOULD be
+	// `https://REDACTED:REDACTED@www.example.com/`.
+	// `url.full` SHOULD capture the absolute URL when it is available (or can
+	// be reconstructed) and SHOULD NOT be validated or modified except for
+	// sanitizing purposes.
+	URLFullKey = attribute.Key("url.full")
+
+	// URLPathKey is the attribute Key conforming to the "url.path" semantic
+	// conventions. It represents the [URI
+	// path](https://www.rfc-editor.org/rfc/rfc3986#section-3.3) component
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: '/search'
+	URLPathKey = attribute.Key("url.path")
+
+	// URLQueryKey is the attribute Key conforming to the "url.query" semantic
+	// conventions. It represents the [URI
+	// query](https://www.rfc-editor.org/rfc/rfc3986#section-3.4) component
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'q=OpenTelemetry'
+	// Note: Sensitive content provided in query string SHOULD be scrubbed when
+	// instrumentations can identify it.
+	URLQueryKey = attribute.Key("url.query")
+
+	// URLSchemeKey is the attribute Key conforming to the "url.scheme"
+	// semantic conventions. It represents the [URI
+	// scheme](https://www.rfc-editor.org/rfc/rfc3986#section-3.1) component
+	// identifying the used protocol.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'https', 'ftp', 'telnet'
+	URLSchemeKey = attribute.Key("url.scheme")
+)
+
+// URLFragment returns an attribute KeyValue conforming to the
+// "url.fragment" semantic conventions. It represents the [URI
+// fragment](https://www.rfc-editor.org/rfc/rfc3986#section-3.5) component
+func URLFragment(val string) attribute.KeyValue {
+	return URLFragmentKey.String(val)
+}
+
+// URLFull returns an attribute KeyValue conforming to the "url.full"
+// semantic conventions. It represents the absolute URL describing a network
+// resource according to [RFC3986](https://www.rfc-editor.org/rfc/rfc3986)
+func URLFull(val string) attribute.KeyValue {
+	return URLFullKey.String(val)
+}
+
+// URLPath returns an attribute KeyValue conforming to the "url.path"
+// semantic conventions. It represents the [URI
+// path](https://www.rfc-editor.org/rfc/rfc3986#section-3.3) component
+func URLPath(val string) attribute.KeyValue {
+	return URLPathKey.String(val)
+}
+
+// URLQuery returns an attribute KeyValue conforming to the "url.query"
+// semantic conventions. It represents the [URI
+// query](https://www.rfc-editor.org/rfc/rfc3986#section-3.4) component
+func URLQuery(val string) attribute.KeyValue {
+	return URLQueryKey.String(val)
+}
+
+// URLScheme returns an attribute KeyValue conforming to the "url.scheme"
+// semantic conventions. It represents the [URI
+// scheme](https://www.rfc-editor.org/rfc/rfc3986#section-3.1) component
+// identifying the used protocol.
+func URLScheme(val string) attribute.KeyValue {
+	return URLSchemeKey.String(val)
+}
+
+// Describes user-agent attributes.
+const (
+	// UserAgentOriginalKey is the attribute Key conforming to the
+	// "user_agent.original" semantic conventions. It represents the value of
+	// the [HTTP
+	// User-Agent](https://www.rfc-editor.org/rfc/rfc9110.html#field.user-agent)
+	// header sent by the client.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: stable
+	// Examples: 'CERN-LineMode/2.15 libwww/2.17b3', 'Mozilla/5.0 (iPhone; CPU
+	// iPhone OS 14_7_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko)
+	// Version/14.1.2 Mobile/15E148 Safari/604.1'
+	UserAgentOriginalKey = attribute.Key("user_agent.original")
+)
+
+// UserAgentOriginal returns an attribute KeyValue conforming to the
+// "user_agent.original" semantic conventions. It represents the value of the
+// [HTTP
+// User-Agent](https://www.rfc-editor.org/rfc/rfc9110.html#field.user-agent)
+// header sent by the client.
+func UserAgentOriginal(val string) attribute.KeyValue {
+	return UserAgentOriginalKey.String(val)
+}
+
+// Session is defined as the period of time encompassing all activities
+// performed by the application and the actions executed by the end user.
+// Consequently, a Session is represented as a collection of Logs, Events, and
+// Spans emitted by the Client Application throughout the Session's duration.
+// Each Session is assigned a unique identifier, which is included as an
+// attribute in the Logs, Events, and Spans generated during the Session's
+// lifecycle.
+// When a session reaches end of life, typically due to user inactivity or
+// session timeout, a new session identifier will be assigned. The previous
+// session identifier may be provided by the instrumentation so that telemetry
+// backends can link the two sessions.
+const (
+	// SessionIDKey is the attribute Key conforming to the "session.id"
+	// semantic conventions. It represents a unique id to identify a session.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '00112233-4455-6677-8899-aabbccddeeff'
+	SessionIDKey = attribute.Key("session.id")
+
+	// SessionPreviousIDKey is the attribute Key conforming to the
+	// "session.previous_id" semantic conventions. It represents the previous
+	// `session.id` for this user, when known.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '00112233-4455-6677-8899-aabbccddeeff'
+	SessionPreviousIDKey = attribute.Key("session.previous_id")
+)
+
+// SessionID returns an attribute KeyValue conforming to the "session.id"
+// semantic conventions. It represents a unique id to identify a session.
+func SessionID(val string) attribute.KeyValue {
+	return SessionIDKey.String(val)
+}
+
+// SessionPreviousID returns an attribute KeyValue conforming to the
+// "session.previous_id" semantic conventions. It represents the previous
+// `session.id` for this user, when known.
+func SessionPreviousID(val string) attribute.KeyValue {
+	return SessionPreviousIDKey.String(val)
+}
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/doc.go b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/doc.go
new file mode 100644
index 00000000000..9b802db2722
--- /dev/null
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/doc.go
@@ -0,0 +1,20 @@
+// Copyright The OpenTelemetry Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// Package semconv implements OpenTelemetry semantic conventions.
+//
+// OpenTelemetry semantic conventions are agreed standardized naming
+// patterns for OpenTelemetry things. This package represents the v1.24.0
+// version of the OpenTelemetry semantic conventions.
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.24.0"
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/event.go b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/event.go
new file mode 100644
index 00000000000..cd3c7162955
--- /dev/null
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/event.go
@@ -0,0 +1,211 @@
+// Copyright The OpenTelemetry Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// Code generated from semantic convention specification. DO NOT EDIT.
+
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.24.0"
+
+import "go.opentelemetry.io/otel/attribute"
+
+// This event represents an occurrence of a lifecycle transition on the iOS
+// platform.
+const (
+	// IosStateKey is the attribute Key conforming to the "ios.state" semantic
+	// conventions. It represents the this attribute represents the state the
+	// application has transitioned into at the occurrence of the event.
+	//
+	// Type: Enum
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Note: The iOS lifecycle states are defined in the [UIApplicationDelegate
+	// documentation](https://developer.apple.com/documentation/uikit/uiapplicationdelegate#1656902),
+	// and from which the `OS terminology` column values are derived.
+	IosStateKey = attribute.Key("ios.state")
+)
+
+var (
+	// The app has become `active`. Associated with UIKit notification `applicationDidBecomeActive`
+	IosStateActive = IosStateKey.String("active")
+	// The app is now `inactive`. Associated with UIKit notification `applicationWillResignActive`
+	IosStateInactive = IosStateKey.String("inactive")
+	// The app is now in the background. This value is associated with UIKit notification `applicationDidEnterBackground`
+	IosStateBackground = IosStateKey.String("background")
+	// The app is now in the foreground. This value is associated with UIKit notification `applicationWillEnterForeground`
+	IosStateForeground = IosStateKey.String("foreground")
+	// The app is about to terminate. Associated with UIKit notification `applicationWillTerminate`
+	IosStateTerminate = IosStateKey.String("terminate")
+)
+
+// This event represents an occurrence of a lifecycle transition on the Android
+// platform.
+const (
+	// AndroidStateKey is the attribute Key conforming to the "android.state"
+	// semantic conventions. It represents the this attribute represents the
+	// state the application has transitioned into at the occurrence of the
+	// event.
+	//
+	// Type: Enum
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Note: The Android lifecycle states are defined in [Activity lifecycle
+	// callbacks](https://developer.android.com/guide/components/activities/activity-lifecycle#lc),
+	// and from which the `OS identifiers` are derived.
+	AndroidStateKey = attribute.Key("android.state")
+)
+
+var (
+	// Any time before Activity.onResume() or, if the app has no Activity, Context.startService() has been called in the app for the first time
+	AndroidStateCreated = AndroidStateKey.String("created")
+	// Any time after Activity.onPause() or, if the app has no Activity, Context.stopService() has been called when the app was in the foreground state
+	AndroidStateBackground = AndroidStateKey.String("background")
+	// Any time after Activity.onResume() or, if the app has no Activity, Context.startService() has been called when the app was in either the created or background states
+	AndroidStateForeground = AndroidStateKey.String("foreground")
+)
+
+// This semantic convention defines the attributes used to represent a feature
+// flag evaluation as an event.
+const (
+	// FeatureFlagKeyKey is the attribute Key conforming to the
+	// "feature_flag.key" semantic conventions. It represents the unique
+	// identifier of the feature flag.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'logo-color'
+	FeatureFlagKeyKey = attribute.Key("feature_flag.key")
+
+	// FeatureFlagProviderNameKey is the attribute Key conforming to the
+	// "feature_flag.provider_name" semantic conventions. It represents the
+	// name of the service provider that performs the flag evaluation.
+	//
+	// Type: string
+	// RequirementLevel: Recommended
+	// Stability: experimental
+	// Examples: 'Flag Manager'
+	FeatureFlagProviderNameKey = attribute.Key("feature_flag.provider_name")
+
+	// FeatureFlagVariantKey is the attribute Key conforming to the
+	// "feature_flag.variant" semantic conventions. It represents the sHOULD be
+	// a semantic identifier for a value. If one is unavailable, a stringified
+	// version of the value can be used.
+	//
+	// Type: string
+	// RequirementLevel: Recommended
+	// Stability: experimental
+	// Examples: 'red', 'true', 'on'
+	// Note: A semantic identifier, commonly referred to as a variant, provides
+	// a means
+	// for referring to a value without including the value itself. This can
+	// provide additional context for understanding the meaning behind a value.
+	// For example, the variant `red` maybe be used for the value `#c05543`.
+	//
+	// A stringified version of the value can be used in situations where a
+	// semantic identifier is unavailable. String representation of the value
+	// should be determined by the implementer.
+	FeatureFlagVariantKey = attribute.Key("feature_flag.variant")
+)
+
+// FeatureFlagKey returns an attribute KeyValue conforming to the
+// "feature_flag.key" semantic conventions. It represents the unique identifier
+// of the feature flag.
+func FeatureFlagKey(val string) attribute.KeyValue {
+	return FeatureFlagKeyKey.String(val)
+}
+
+// FeatureFlagProviderName returns an attribute KeyValue conforming to the
+// "feature_flag.provider_name" semantic conventions. It represents the name of
+// the service provider that performs the flag evaluation.
+func FeatureFlagProviderName(val string) attribute.KeyValue {
+	return FeatureFlagProviderNameKey.String(val)
+}
+
+// FeatureFlagVariant returns an attribute KeyValue conforming to the
+// "feature_flag.variant" semantic conventions. It represents the sHOULD be a
+// semantic identifier for a value. If one is unavailable, a stringified
+// version of the value can be used.
+func FeatureFlagVariant(val string) attribute.KeyValue {
+	return FeatureFlagVariantKey.String(val)
+}
+
+// RPC received/sent message.
+const (
+	// MessageCompressedSizeKey is the attribute Key conforming to the
+	// "message.compressed_size" semantic conventions. It represents the
+	// compressed size of the message in bytes.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	MessageCompressedSizeKey = attribute.Key("message.compressed_size")
+
+	// MessageIDKey is the attribute Key conforming to the "message.id"
+	// semantic conventions. It represents the mUST be calculated as two
+	// different counters starting from `1` one for sent messages and one for
+	// received message.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Note: This way we guarantee that the values will be consistent between
+	// different implementations.
+	MessageIDKey = attribute.Key("message.id")
+
+	// MessageTypeKey is the attribute Key conforming to the "message.type"
+	// semantic conventions. It represents the whether this is a received or
+	// sent message.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	MessageTypeKey = attribute.Key("message.type")
+
+	// MessageUncompressedSizeKey is the attribute Key conforming to the
+	// "message.uncompressed_size" semantic conventions. It represents the
+	// uncompressed size of the message in bytes.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	MessageUncompressedSizeKey = attribute.Key("message.uncompressed_size")
+)
+
+var (
+	// sent
+	MessageTypeSent = MessageTypeKey.String("SENT")
+	// received
+	MessageTypeReceived = MessageTypeKey.String("RECEIVED")
+)
+
+// MessageCompressedSize returns an attribute KeyValue conforming to the
+// "message.compressed_size" semantic conventions. It represents the compressed
+// size of the message in bytes.
+func MessageCompressedSize(val int) attribute.KeyValue {
+	return MessageCompressedSizeKey.Int(val)
+}
+
+// MessageID returns an attribute KeyValue conforming to the "message.id"
+// semantic conventions. It represents the mUST be calculated as two different
+// counters starting from `1` one for sent messages and one for received
+// message.
+func MessageID(val int) attribute.KeyValue {
+	return MessageIDKey.Int(val)
+}
+
+// MessageUncompressedSize returns an attribute KeyValue conforming to the
+// "message.uncompressed_size" semantic conventions. It represents the
+// uncompressed size of the message in bytes.
+func MessageUncompressedSize(val int) attribute.KeyValue {
+	return MessageUncompressedSizeKey.Int(val)
+}
diff --git a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/doc.go b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/exception.go
similarity index 70%
rename from vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/doc.go
rename to vendor/go.opentelemetry.io/otel/semconv/v1.24.0/exception.go
index c318385cbed..ef9bbd37a8c 100644
--- a/vendor/github.com/matttproud/golang_protobuf_extensions/v2/pbutil/doc.go
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/exception.go
@@ -1,4 +1,4 @@
-// Copyright 2013 Matt T. Proud
+// Copyright The OpenTelemetry Authors
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -12,5 +12,9 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
-// Package pbutil provides record length-delimited Protocol Buffer streaming.
-package pbutil
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.24.0"
+
+const (
+	// ExceptionEventName is the name of the Span event representing an exception.
+	ExceptionEventName = "exception"
+)
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/resource.go b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/resource.go
new file mode 100644
index 00000000000..69eda1959f2
--- /dev/null
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/resource.go
@@ -0,0 +1,2556 @@
+// Copyright The OpenTelemetry Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// Code generated from semantic convention specification. DO NOT EDIT.
+
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.24.0"
+
+import "go.opentelemetry.io/otel/attribute"
+
+// A cloud environment (e.g. GCP, Azure, AWS).
+const (
+	// CloudAccountIDKey is the attribute Key conforming to the
+	// "cloud.account.id" semantic conventions. It represents the cloud account
+	// ID the resource is assigned to.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '111111111111', 'opentelemetry'
+	CloudAccountIDKey = attribute.Key("cloud.account.id")
+
+	// CloudAvailabilityZoneKey is the attribute Key conforming to the
+	// "cloud.availability_zone" semantic conventions. It represents the cloud
+	// regions often have multiple, isolated locations known as zones to
+	// increase availability. Availability zone represents the zone where the
+	// resource is running.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'us-east-1c'
+	// Note: Availability zones are called "zones" on Alibaba Cloud and Google
+	// Cloud.
+	CloudAvailabilityZoneKey = attribute.Key("cloud.availability_zone")
+
+	// CloudPlatformKey is the attribute Key conforming to the "cloud.platform"
+	// semantic conventions. It represents the cloud platform in use.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Note: The prefix of the service SHOULD match the one specified in
+	// `cloud.provider`.
+	CloudPlatformKey = attribute.Key("cloud.platform")
+
+	// CloudProviderKey is the attribute Key conforming to the "cloud.provider"
+	// semantic conventions. It represents the name of the cloud provider.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	CloudProviderKey = attribute.Key("cloud.provider")
+
+	// CloudRegionKey is the attribute Key conforming to the "cloud.region"
+	// semantic conventions. It represents the geographical region the resource
+	// is running.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'us-central1', 'us-east-1'
+	// Note: Refer to your provider's docs to see the available regions, for
+	// example [Alibaba Cloud
+	// regions](https://www.alibabacloud.com/help/doc-detail/40654.htm), [AWS
+	// regions](https://aws.amazon.com/about-aws/global-infrastructure/regions_az/),
+	// [Azure
+	// regions](https://azure.microsoft.com/global-infrastructure/geographies/),
+	// [Google Cloud regions](https://cloud.google.com/about/locations), or
+	// [Tencent Cloud
+	// regions](https://www.tencentcloud.com/document/product/213/6091).
+	CloudRegionKey = attribute.Key("cloud.region")
+
+	// CloudResourceIDKey is the attribute Key conforming to the
+	// "cloud.resource_id" semantic conventions. It represents the cloud
+	// provider-specific native identifier of the monitored cloud resource
+	// (e.g. an
+	// [ARN](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html)
+	// on AWS, a [fully qualified resource
+	// ID](https://learn.microsoft.com/rest/api/resources/resources/get-by-id)
+	// on Azure, a [full resource
+	// name](https://cloud.google.com/apis/design/resource_names#full_resource_name)
+	// on GCP)
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'arn:aws:lambda:REGION:ACCOUNT_ID:function:my-function',
+	// '//run.googleapis.com/projects/PROJECT_ID/locations/LOCATION_ID/services/SERVICE_ID',
+	// '/subscriptions/<SUBSCIPTION_GUID>/resourceGroups/<RG>/providers/Microsoft.Web/sites/<FUNCAPP>/functions/<FUNC>'
+	// Note: On some cloud providers, it may not be possible to determine the
+	// full ID at startup,
+	// so it may be necessary to set `cloud.resource_id` as a span attribute
+	// instead.
+	//
+	// The exact value to use for `cloud.resource_id` depends on the cloud
+	// provider.
+	// The following well-known definitions MUST be used if you set this
+	// attribute and they apply:
+	//
+	// * **AWS Lambda:** The function
+	// [ARN](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html).
+	//   Take care not to use the "invoked ARN" directly but replace any
+	//   [alias
+	// suffix](https://docs.aws.amazon.com/lambda/latest/dg/configuration-aliases.html)
+	//   with the resolved function version, as the same runtime instance may
+	// be invokable with
+	//   multiple different aliases.
+	// * **GCP:** The [URI of the
+	// resource](https://cloud.google.com/iam/docs/full-resource-names)
+	// * **Azure:** The [Fully Qualified Resource
+	// ID](https://docs.microsoft.com/rest/api/resources/resources/get-by-id)
+	// of the invoked function,
+	//   *not* the function app, having the form
+	// `/subscriptions/<SUBSCIPTION_GUID>/resourceGroups/<RG>/providers/Microsoft.Web/sites/<FUNCAPP>/functions/<FUNC>`.
+	//   This means that a span attribute MUST be used, as an Azure function
+	// app can host multiple functions that would usually share
+	//   a TracerProvider.
+	CloudResourceIDKey = attribute.Key("cloud.resource_id")
+)
+
+var (
+	// Alibaba Cloud Elastic Compute Service
+	CloudPlatformAlibabaCloudECS = CloudPlatformKey.String("alibaba_cloud_ecs")
+	// Alibaba Cloud Function Compute
+	CloudPlatformAlibabaCloudFc = CloudPlatformKey.String("alibaba_cloud_fc")
+	// Red Hat OpenShift on Alibaba Cloud
+	CloudPlatformAlibabaCloudOpenshift = CloudPlatformKey.String("alibaba_cloud_openshift")
+	// AWS Elastic Compute Cloud
+	CloudPlatformAWSEC2 = CloudPlatformKey.String("aws_ec2")
+	// AWS Elastic Container Service
+	CloudPlatformAWSECS = CloudPlatformKey.String("aws_ecs")
+	// AWS Elastic Kubernetes Service
+	CloudPlatformAWSEKS = CloudPlatformKey.String("aws_eks")
+	// AWS Lambda
+	CloudPlatformAWSLambda = CloudPlatformKey.String("aws_lambda")
+	// AWS Elastic Beanstalk
+	CloudPlatformAWSElasticBeanstalk = CloudPlatformKey.String("aws_elastic_beanstalk")
+	// AWS App Runner
+	CloudPlatformAWSAppRunner = CloudPlatformKey.String("aws_app_runner")
+	// Red Hat OpenShift on AWS (ROSA)
+	CloudPlatformAWSOpenshift = CloudPlatformKey.String("aws_openshift")
+	// Azure Virtual Machines
+	CloudPlatformAzureVM = CloudPlatformKey.String("azure_vm")
+	// Azure Container Instances
+	CloudPlatformAzureContainerInstances = CloudPlatformKey.String("azure_container_instances")
+	// Azure Kubernetes Service
+	CloudPlatformAzureAKS = CloudPlatformKey.String("azure_aks")
+	// Azure Functions
+	CloudPlatformAzureFunctions = CloudPlatformKey.String("azure_functions")
+	// Azure App Service
+	CloudPlatformAzureAppService = CloudPlatformKey.String("azure_app_service")
+	// Azure Red Hat OpenShift
+	CloudPlatformAzureOpenshift = CloudPlatformKey.String("azure_openshift")
+	// Google Bare Metal Solution (BMS)
+	CloudPlatformGCPBareMetalSolution = CloudPlatformKey.String("gcp_bare_metal_solution")
+	// Google Cloud Compute Engine (GCE)
+	CloudPlatformGCPComputeEngine = CloudPlatformKey.String("gcp_compute_engine")
+	// Google Cloud Run
+	CloudPlatformGCPCloudRun = CloudPlatformKey.String("gcp_cloud_run")
+	// Google Cloud Kubernetes Engine (GKE)
+	CloudPlatformGCPKubernetesEngine = CloudPlatformKey.String("gcp_kubernetes_engine")
+	// Google Cloud Functions (GCF)
+	CloudPlatformGCPCloudFunctions = CloudPlatformKey.String("gcp_cloud_functions")
+	// Google Cloud App Engine (GAE)
+	CloudPlatformGCPAppEngine = CloudPlatformKey.String("gcp_app_engine")
+	// Red Hat OpenShift on Google Cloud
+	CloudPlatformGCPOpenshift = CloudPlatformKey.String("gcp_openshift")
+	// Red Hat OpenShift on IBM Cloud
+	CloudPlatformIbmCloudOpenshift = CloudPlatformKey.String("ibm_cloud_openshift")
+	// Tencent Cloud Cloud Virtual Machine (CVM)
+	CloudPlatformTencentCloudCvm = CloudPlatformKey.String("tencent_cloud_cvm")
+	// Tencent Cloud Elastic Kubernetes Service (EKS)
+	CloudPlatformTencentCloudEKS = CloudPlatformKey.String("tencent_cloud_eks")
+	// Tencent Cloud Serverless Cloud Function (SCF)
+	CloudPlatformTencentCloudScf = CloudPlatformKey.String("tencent_cloud_scf")
+)
+
+var (
+	// Alibaba Cloud
+	CloudProviderAlibabaCloud = CloudProviderKey.String("alibaba_cloud")
+	// Amazon Web Services
+	CloudProviderAWS = CloudProviderKey.String("aws")
+	// Microsoft Azure
+	CloudProviderAzure = CloudProviderKey.String("azure")
+	// Google Cloud Platform
+	CloudProviderGCP = CloudProviderKey.String("gcp")
+	// Heroku Platform as a Service
+	CloudProviderHeroku = CloudProviderKey.String("heroku")
+	// IBM Cloud
+	CloudProviderIbmCloud = CloudProviderKey.String("ibm_cloud")
+	// Tencent Cloud
+	CloudProviderTencentCloud = CloudProviderKey.String("tencent_cloud")
+)
+
+// CloudAccountID returns an attribute KeyValue conforming to the
+// "cloud.account.id" semantic conventions. It represents the cloud account ID
+// the resource is assigned to.
+func CloudAccountID(val string) attribute.KeyValue {
+	return CloudAccountIDKey.String(val)
+}
+
+// CloudAvailabilityZone returns an attribute KeyValue conforming to the
+// "cloud.availability_zone" semantic conventions. It represents the cloud
+// regions often have multiple, isolated locations known as zones to increase
+// availability. Availability zone represents the zone where the resource is
+// running.
+func CloudAvailabilityZone(val string) attribute.KeyValue {
+	return CloudAvailabilityZoneKey.String(val)
+}
+
+// CloudRegion returns an attribute KeyValue conforming to the
+// "cloud.region" semantic conventions. It represents the geographical region
+// the resource is running.
+func CloudRegion(val string) attribute.KeyValue {
+	return CloudRegionKey.String(val)
+}
+
+// CloudResourceID returns an attribute KeyValue conforming to the
+// "cloud.resource_id" semantic conventions. It represents the cloud
+// provider-specific native identifier of the monitored cloud resource (e.g. an
+// [ARN](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html)
+// on AWS, a [fully qualified resource
+// ID](https://learn.microsoft.com/rest/api/resources/resources/get-by-id) on
+// Azure, a [full resource
+// name](https://cloud.google.com/apis/design/resource_names#full_resource_name)
+// on GCP)
+func CloudResourceID(val string) attribute.KeyValue {
+	return CloudResourceIDKey.String(val)
+}
+
+// A container instance.
+const (
+	// ContainerCommandKey is the attribute Key conforming to the
+	// "container.command" semantic conventions. It represents the command used
+	// to run the container (i.e. the command name).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'otelcontribcol'
+	// Note: If using embedded credentials or sensitive data, it is recommended
+	// to remove them to prevent potential leakage.
+	ContainerCommandKey = attribute.Key("container.command")
+
+	// ContainerCommandArgsKey is the attribute Key conforming to the
+	// "container.command_args" semantic conventions. It represents the all the
+	// command arguments (including the command/executable itself) run by the
+	// container. [2]
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'otelcontribcol, --config, config.yaml'
+	ContainerCommandArgsKey = attribute.Key("container.command_args")
+
+	// ContainerCommandLineKey is the attribute Key conforming to the
+	// "container.command_line" semantic conventions. It represents the full
+	// command run by the container as a single string representing the full
+	// command. [2]
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'otelcontribcol --config config.yaml'
+	ContainerCommandLineKey = attribute.Key("container.command_line")
+
+	// ContainerIDKey is the attribute Key conforming to the "container.id"
+	// semantic conventions. It represents the container ID. Usually a UUID, as
+	// for example used to [identify Docker
+	// containers](https://docs.docker.com/engine/reference/run/#container-identification).
+	// The UUID might be abbreviated.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'a3bf90e006b2'
+	ContainerIDKey = attribute.Key("container.id")
+
+	// ContainerImageIDKey is the attribute Key conforming to the
+	// "container.image.id" semantic conventions. It represents the runtime
+	// specific image identifier. Usually a hash algorithm followed by a UUID.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples:
+	// 'sha256:19c92d0a00d1b66d897bceaa7319bee0dd38a10a851c60bcec9474aa3f01e50f'
+	// Note: Docker defines a sha256 of the image id; `container.image.id`
+	// corresponds to the `Image` field from the Docker container inspect
+	// [API](https://docs.docker.com/engine/api/v1.43/#tag/Container/operation/ContainerInspect)
+	// endpoint.
+	// K8S defines a link to the container registry repository with digest
+	// `"imageID": "registry.azurecr.io
+	// /namespace/service/dockerfile@sha256:bdeabd40c3a8a492eaf9e8e44d0ebbb84bac7ee25ac0cf8a7159d25f62555625"`.
+	// The ID is assinged by the container runtime and can vary in different
+	// environments. Consider using `oci.manifest.digest` if it is important to
+	// identify the same image in different environments/runtimes.
+	ContainerImageIDKey = attribute.Key("container.image.id")
+
+	// ContainerImageNameKey is the attribute Key conforming to the
+	// "container.image.name" semantic conventions. It represents the name of
+	// the image the container was built on.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'gcr.io/opentelemetry/operator'
+	ContainerImageNameKey = attribute.Key("container.image.name")
+
+	// ContainerImageRepoDigestsKey is the attribute Key conforming to the
+	// "container.image.repo_digests" semantic conventions. It represents the
+	// repo digests of the container image as provided by the container
+	// runtime.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples:
+	// 'example@sha256:afcc7f1ac1b49db317a7196c902e61c6c3c4607d63599ee1a82d702d249a0ccb',
+	// 'internal.registry.example.com:5000/example@sha256:b69959407d21e8a062e0416bf13405bb2b71ed7a84dde4158ebafacfa06f5578'
+	// Note:
+	// [Docker](https://docs.docker.com/engine/api/v1.43/#tag/Image/operation/ImageInspect)
+	// and
+	// [CRI](https://github.com/kubernetes/cri-api/blob/c75ef5b473bbe2d0a4fc92f82235efd665ea8e9f/pkg/apis/runtime/v1/api.proto#L1237-L1238)
+	// report those under the `RepoDigests` field.
+	ContainerImageRepoDigestsKey = attribute.Key("container.image.repo_digests")
+
+	// ContainerImageTagsKey is the attribute Key conforming to the
+	// "container.image.tags" semantic conventions. It represents the container
+	// image tags. An example can be found in [Docker Image
+	// Inspect](https://docs.docker.com/engine/api/v1.43/#tag/Image/operation/ImageInspect).
+	// Should be only the `<tag>` section of the full name for example from
+	// `registry.example.com/my-org/my-image:<tag>`.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'v1.27.1', '3.5.7-0'
+	ContainerImageTagsKey = attribute.Key("container.image.tags")
+
+	// ContainerNameKey is the attribute Key conforming to the "container.name"
+	// semantic conventions. It represents the container name used by container
+	// runtime.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry-autoconf'
+	ContainerNameKey = attribute.Key("container.name")
+
+	// ContainerRuntimeKey is the attribute Key conforming to the
+	// "container.runtime" semantic conventions. It represents the container
+	// runtime managing this container.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'docker', 'containerd', 'rkt'
+	ContainerRuntimeKey = attribute.Key("container.runtime")
+)
+
+// ContainerCommand returns an attribute KeyValue conforming to the
+// "container.command" semantic conventions. It represents the command used to
+// run the container (i.e. the command name).
+func ContainerCommand(val string) attribute.KeyValue {
+	return ContainerCommandKey.String(val)
+}
+
+// ContainerCommandArgs returns an attribute KeyValue conforming to the
+// "container.command_args" semantic conventions. It represents the all the
+// command arguments (including the command/executable itself) run by the
+// container. [2]
+func ContainerCommandArgs(val ...string) attribute.KeyValue {
+	return ContainerCommandArgsKey.StringSlice(val)
+}
+
+// ContainerCommandLine returns an attribute KeyValue conforming to the
+// "container.command_line" semantic conventions. It represents the full
+// command run by the container as a single string representing the full
+// command. [2]
+func ContainerCommandLine(val string) attribute.KeyValue {
+	return ContainerCommandLineKey.String(val)
+}
+
+// ContainerID returns an attribute KeyValue conforming to the
+// "container.id" semantic conventions. It represents the container ID. Usually
+// a UUID, as for example used to [identify Docker
+// containers](https://docs.docker.com/engine/reference/run/#container-identification).
+// The UUID might be abbreviated.
+func ContainerID(val string) attribute.KeyValue {
+	return ContainerIDKey.String(val)
+}
+
+// ContainerImageID returns an attribute KeyValue conforming to the
+// "container.image.id" semantic conventions. It represents the runtime
+// specific image identifier. Usually a hash algorithm followed by a UUID.
+func ContainerImageID(val string) attribute.KeyValue {
+	return ContainerImageIDKey.String(val)
+}
+
+// ContainerImageName returns an attribute KeyValue conforming to the
+// "container.image.name" semantic conventions. It represents the name of the
+// image the container was built on.
+func ContainerImageName(val string) attribute.KeyValue {
+	return ContainerImageNameKey.String(val)
+}
+
+// ContainerImageRepoDigests returns an attribute KeyValue conforming to the
+// "container.image.repo_digests" semantic conventions. It represents the repo
+// digests of the container image as provided by the container runtime.
+func ContainerImageRepoDigests(val ...string) attribute.KeyValue {
+	return ContainerImageRepoDigestsKey.StringSlice(val)
+}
+
+// ContainerImageTags returns an attribute KeyValue conforming to the
+// "container.image.tags" semantic conventions. It represents the container
+// image tags. An example can be found in [Docker Image
+// Inspect](https://docs.docker.com/engine/api/v1.43/#tag/Image/operation/ImageInspect).
+// Should be only the `<tag>` section of the full name for example from
+// `registry.example.com/my-org/my-image:<tag>`.
+func ContainerImageTags(val ...string) attribute.KeyValue {
+	return ContainerImageTagsKey.StringSlice(val)
+}
+
+// ContainerName returns an attribute KeyValue conforming to the
+// "container.name" semantic conventions. It represents the container name used
+// by container runtime.
+func ContainerName(val string) attribute.KeyValue {
+	return ContainerNameKey.String(val)
+}
+
+// ContainerRuntime returns an attribute KeyValue conforming to the
+// "container.runtime" semantic conventions. It represents the container
+// runtime managing this container.
+func ContainerRuntime(val string) attribute.KeyValue {
+	return ContainerRuntimeKey.String(val)
+}
+
+// Describes device attributes.
+const (
+	// DeviceIDKey is the attribute Key conforming to the "device.id" semantic
+	// conventions. It represents a unique identifier representing the device
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '2ab2916d-a51f-4ac8-80ee-45ac31a28092'
+	// Note: The device identifier MUST only be defined using the values
+	// outlined below. This value is not an advertising identifier and MUST NOT
+	// be used as such. On iOS (Swift or Objective-C), this value MUST be equal
+	// to the [vendor
+	// identifier](https://developer.apple.com/documentation/uikit/uidevice/1620059-identifierforvendor).
+	// On Android (Java or Kotlin), this value MUST be equal to the Firebase
+	// Installation ID or a globally unique UUID which is persisted across
+	// sessions in your application. More information can be found
+	// [here](https://developer.android.com/training/articles/user-data-ids) on
+	// best practices and exact implementation details. Caution should be taken
+	// when storing personal data or anything which can identify a user. GDPR
+	// and data protection laws may apply, ensure you do your own due
+	// diligence.
+	DeviceIDKey = attribute.Key("device.id")
+
+	// DeviceManufacturerKey is the attribute Key conforming to the
+	// "device.manufacturer" semantic conventions. It represents the name of
+	// the device manufacturer
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Apple', 'Samsung'
+	// Note: The Android OS provides this field via
+	// [Build](https://developer.android.com/reference/android/os/Build#MANUFACTURER).
+	// iOS apps SHOULD hardcode the value `Apple`.
+	DeviceManufacturerKey = attribute.Key("device.manufacturer")
+
+	// DeviceModelIdentifierKey is the attribute Key conforming to the
+	// "device.model.identifier" semantic conventions. It represents the model
+	// identifier for the device
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'iPhone3,4', 'SM-G920F'
+	// Note: It's recommended this value represents a machine-readable version
+	// of the model identifier rather than the market or consumer-friendly name
+	// of the device.
+	DeviceModelIdentifierKey = attribute.Key("device.model.identifier")
+
+	// DeviceModelNameKey is the attribute Key conforming to the
+	// "device.model.name" semantic conventions. It represents the marketing
+	// name for the device model
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'iPhone 6s Plus', 'Samsung Galaxy S6'
+	// Note: It's recommended this value represents a human-readable version of
+	// the device model rather than a machine-readable alternative.
+	DeviceModelNameKey = attribute.Key("device.model.name")
+)
+
+// DeviceID returns an attribute KeyValue conforming to the "device.id"
+// semantic conventions. It represents a unique identifier representing the
+// device
+func DeviceID(val string) attribute.KeyValue {
+	return DeviceIDKey.String(val)
+}
+
+// DeviceManufacturer returns an attribute KeyValue conforming to the
+// "device.manufacturer" semantic conventions. It represents the name of the
+// device manufacturer
+func DeviceManufacturer(val string) attribute.KeyValue {
+	return DeviceManufacturerKey.String(val)
+}
+
+// DeviceModelIdentifier returns an attribute KeyValue conforming to the
+// "device.model.identifier" semantic conventions. It represents the model
+// identifier for the device
+func DeviceModelIdentifier(val string) attribute.KeyValue {
+	return DeviceModelIdentifierKey.String(val)
+}
+
+// DeviceModelName returns an attribute KeyValue conforming to the
+// "device.model.name" semantic conventions. It represents the marketing name
+// for the device model
+func DeviceModelName(val string) attribute.KeyValue {
+	return DeviceModelNameKey.String(val)
+}
+
+// A host is defined as a computing instance. For example, physical servers,
+// virtual machines, switches or disk array.
+const (
+	// HostArchKey is the attribute Key conforming to the "host.arch" semantic
+	// conventions. It represents the CPU architecture the host system is
+	// running on.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	HostArchKey = attribute.Key("host.arch")
+
+	// HostCPUCacheL2SizeKey is the attribute Key conforming to the
+	// "host.cpu.cache.l2.size" semantic conventions. It represents the amount
+	// of level 2 memory cache available to the processor (in Bytes).
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 12288000
+	HostCPUCacheL2SizeKey = attribute.Key("host.cpu.cache.l2.size")
+
+	// HostCPUFamilyKey is the attribute Key conforming to the
+	// "host.cpu.family" semantic conventions. It represents the family or
+	// generation of the CPU.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '6', 'PA-RISC 1.1e'
+	HostCPUFamilyKey = attribute.Key("host.cpu.family")
+
+	// HostCPUModelIDKey is the attribute Key conforming to the
+	// "host.cpu.model.id" semantic conventions. It represents the model
+	// identifier. It provides more granular information about the CPU,
+	// distinguishing it from other CPUs within the same family.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '6', '9000/778/B180L'
+	HostCPUModelIDKey = attribute.Key("host.cpu.model.id")
+
+	// HostCPUModelNameKey is the attribute Key conforming to the
+	// "host.cpu.model.name" semantic conventions. It represents the model
+	// designation of the processor.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '11th Gen Intel(R) Core(TM) i7-1185G7 @ 3.00GHz'
+	HostCPUModelNameKey = attribute.Key("host.cpu.model.name")
+
+	// HostCPUSteppingKey is the attribute Key conforming to the
+	// "host.cpu.stepping" semantic conventions. It represents the stepping or
+	// core revisions.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 1
+	HostCPUSteppingKey = attribute.Key("host.cpu.stepping")
+
+	// HostCPUVendorIDKey is the attribute Key conforming to the
+	// "host.cpu.vendor.id" semantic conventions. It represents the processor
+	// manufacturer identifier. A maximum 12-character string.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'GenuineIntel'
+	// Note: [CPUID](https://wiki.osdev.org/CPUID) command returns the vendor
+	// ID string in EBX, EDX and ECX registers. Writing these to memory in this
+	// order results in a 12-character string.
+	HostCPUVendorIDKey = attribute.Key("host.cpu.vendor.id")
+
+	// HostIDKey is the attribute Key conforming to the "host.id" semantic
+	// conventions. It represents the unique host ID. For Cloud, this must be
+	// the instance_id assigned by the cloud provider. For non-containerized
+	// systems, this should be the `machine-id`. See the table below for the
+	// sources to use to determine the `machine-id` based on operating system.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'fdbf79e8af94cb7f9e8df36789187052'
+	HostIDKey = attribute.Key("host.id")
+
+	// HostImageIDKey is the attribute Key conforming to the "host.image.id"
+	// semantic conventions. It represents the vM image ID or host OS image ID.
+	// For Cloud, this value is from the provider.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'ami-07b06b442921831e5'
+	HostImageIDKey = attribute.Key("host.image.id")
+
+	// HostImageNameKey is the attribute Key conforming to the
+	// "host.image.name" semantic conventions. It represents the name of the VM
+	// image or OS install the host was instantiated from.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'infra-ami-eks-worker-node-7d4ec78312', 'CentOS-8-x86_64-1905'
+	HostImageNameKey = attribute.Key("host.image.name")
+
+	// HostImageVersionKey is the attribute Key conforming to the
+	// "host.image.version" semantic conventions. It represents the version
+	// string of the VM image or host OS as defined in [Version
+	// Attributes](/docs/resource/README.md#version-attributes).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '0.1'
+	HostImageVersionKey = attribute.Key("host.image.version")
+
+	// HostIPKey is the attribute Key conforming to the "host.ip" semantic
+	// conventions. It represents the available IP addresses of the host,
+	// excluding loopback interfaces.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '192.168.1.140', 'fe80::abc2:4a28:737a:609e'
+	// Note: IPv4 Addresses MUST be specified in dotted-quad notation. IPv6
+	// addresses MUST be specified in the [RFC
+	// 5952](https://www.rfc-editor.org/rfc/rfc5952.html) format.
+	HostIPKey = attribute.Key("host.ip")
+
+	// HostMacKey is the attribute Key conforming to the "host.mac" semantic
+	// conventions. It represents the available MAC addresses of the host,
+	// excluding loopback interfaces.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'AC-DE-48-23-45-67', 'AC-DE-48-23-45-67-01-9F'
+	// Note: MAC Addresses MUST be represented in [IEEE RA hexadecimal
+	// form](https://standards.ieee.org/wp-content/uploads/import/documents/tutorials/eui.pdf):
+	// as hyphen-separated octets in uppercase hexadecimal form from most to
+	// least significant.
+	HostMacKey = attribute.Key("host.mac")
+
+	// HostNameKey is the attribute Key conforming to the "host.name" semantic
+	// conventions. It represents the name of the host. On Unix systems, it may
+	// contain what the hostname command returns, or the fully qualified
+	// hostname, or another name specified by the user.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry-test'
+	HostNameKey = attribute.Key("host.name")
+
+	// HostTypeKey is the attribute Key conforming to the "host.type" semantic
+	// conventions. It represents the type of host. For Cloud, this must be the
+	// machine type.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'n1-standard-1'
+	HostTypeKey = attribute.Key("host.type")
+)
+
+var (
+	// AMD64
+	HostArchAMD64 = HostArchKey.String("amd64")
+	// ARM32
+	HostArchARM32 = HostArchKey.String("arm32")
+	// ARM64
+	HostArchARM64 = HostArchKey.String("arm64")
+	// Itanium
+	HostArchIA64 = HostArchKey.String("ia64")
+	// 32-bit PowerPC
+	HostArchPPC32 = HostArchKey.String("ppc32")
+	// 64-bit PowerPC
+	HostArchPPC64 = HostArchKey.String("ppc64")
+	// IBM z/Architecture
+	HostArchS390x = HostArchKey.String("s390x")
+	// 32-bit x86
+	HostArchX86 = HostArchKey.String("x86")
+)
+
+// HostCPUCacheL2Size returns an attribute KeyValue conforming to the
+// "host.cpu.cache.l2.size" semantic conventions. It represents the amount of
+// level 2 memory cache available to the processor (in Bytes).
+func HostCPUCacheL2Size(val int) attribute.KeyValue {
+	return HostCPUCacheL2SizeKey.Int(val)
+}
+
+// HostCPUFamily returns an attribute KeyValue conforming to the
+// "host.cpu.family" semantic conventions. It represents the family or
+// generation of the CPU.
+func HostCPUFamily(val string) attribute.KeyValue {
+	return HostCPUFamilyKey.String(val)
+}
+
+// HostCPUModelID returns an attribute KeyValue conforming to the
+// "host.cpu.model.id" semantic conventions. It represents the model
+// identifier. It provides more granular information about the CPU,
+// distinguishing it from other CPUs within the same family.
+func HostCPUModelID(val string) attribute.KeyValue {
+	return HostCPUModelIDKey.String(val)
+}
+
+// HostCPUModelName returns an attribute KeyValue conforming to the
+// "host.cpu.model.name" semantic conventions. It represents the model
+// designation of the processor.
+func HostCPUModelName(val string) attribute.KeyValue {
+	return HostCPUModelNameKey.String(val)
+}
+
+// HostCPUStepping returns an attribute KeyValue conforming to the
+// "host.cpu.stepping" semantic conventions. It represents the stepping or core
+// revisions.
+func HostCPUStepping(val int) attribute.KeyValue {
+	return HostCPUSteppingKey.Int(val)
+}
+
+// HostCPUVendorID returns an attribute KeyValue conforming to the
+// "host.cpu.vendor.id" semantic conventions. It represents the processor
+// manufacturer identifier. A maximum 12-character string.
+func HostCPUVendorID(val string) attribute.KeyValue {
+	return HostCPUVendorIDKey.String(val)
+}
+
+// HostID returns an attribute KeyValue conforming to the "host.id" semantic
+// conventions. It represents the unique host ID. For Cloud, this must be the
+// instance_id assigned by the cloud provider. For non-containerized systems,
+// this should be the `machine-id`. See the table below for the sources to use
+// to determine the `machine-id` based on operating system.
+func HostID(val string) attribute.KeyValue {
+	return HostIDKey.String(val)
+}
+
+// HostImageID returns an attribute KeyValue conforming to the
+// "host.image.id" semantic conventions. It represents the vM image ID or host
+// OS image ID. For Cloud, this value is from the provider.
+func HostImageID(val string) attribute.KeyValue {
+	return HostImageIDKey.String(val)
+}
+
+// HostImageName returns an attribute KeyValue conforming to the
+// "host.image.name" semantic conventions. It represents the name of the VM
+// image or OS install the host was instantiated from.
+func HostImageName(val string) attribute.KeyValue {
+	return HostImageNameKey.String(val)
+}
+
+// HostImageVersion returns an attribute KeyValue conforming to the
+// "host.image.version" semantic conventions. It represents the version string
+// of the VM image or host OS as defined in [Version
+// Attributes](/docs/resource/README.md#version-attributes).
+func HostImageVersion(val string) attribute.KeyValue {
+	return HostImageVersionKey.String(val)
+}
+
+// HostIP returns an attribute KeyValue conforming to the "host.ip" semantic
+// conventions. It represents the available IP addresses of the host, excluding
+// loopback interfaces.
+func HostIP(val ...string) attribute.KeyValue {
+	return HostIPKey.StringSlice(val)
+}
+
+// HostMac returns an attribute KeyValue conforming to the "host.mac"
+// semantic conventions. It represents the available MAC addresses of the host,
+// excluding loopback interfaces.
+func HostMac(val ...string) attribute.KeyValue {
+	return HostMacKey.StringSlice(val)
+}
+
+// HostName returns an attribute KeyValue conforming to the "host.name"
+// semantic conventions. It represents the name of the host. On Unix systems,
+// it may contain what the hostname command returns, or the fully qualified
+// hostname, or another name specified by the user.
+func HostName(val string) attribute.KeyValue {
+	return HostNameKey.String(val)
+}
+
+// HostType returns an attribute KeyValue conforming to the "host.type"
+// semantic conventions. It represents the type of host. For Cloud, this must
+// be the machine type.
+func HostType(val string) attribute.KeyValue {
+	return HostTypeKey.String(val)
+}
+
+// Kubernetes resource attributes.
+const (
+	// K8SClusterNameKey is the attribute Key conforming to the
+	// "k8s.cluster.name" semantic conventions. It represents the name of the
+	// cluster.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry-cluster'
+	K8SClusterNameKey = attribute.Key("k8s.cluster.name")
+
+	// K8SClusterUIDKey is the attribute Key conforming to the
+	// "k8s.cluster.uid" semantic conventions. It represents a pseudo-ID for
+	// the cluster, set to the UID of the `kube-system` namespace.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '218fc5a9-a5f1-4b54-aa05-46717d0ab26d'
+	// Note: K8S doesn't have support for obtaining a cluster ID. If this is
+	// ever
+	// added, we will recommend collecting the `k8s.cluster.uid` through the
+	// official APIs. In the meantime, we are able to use the `uid` of the
+	// `kube-system` namespace as a proxy for cluster ID. Read on for the
+	// rationale.
+	//
+	// Every object created in a K8S cluster is assigned a distinct UID. The
+	// `kube-system` namespace is used by Kubernetes itself and will exist
+	// for the lifetime of the cluster. Using the `uid` of the `kube-system`
+	// namespace is a reasonable proxy for the K8S ClusterID as it will only
+	// change if the cluster is rebuilt. Furthermore, Kubernetes UIDs are
+	// UUIDs as standardized by
+	// [ISO/IEC 9834-8 and ITU-T
+	// X.667](https://www.itu.int/ITU-T/studygroups/com17/oid.html).
+	// Which states:
+	//
+	// > If generated according to one of the mechanisms defined in Rec.
+	//   ITU-T X.667 | ISO/IEC 9834-8, a UUID is either guaranteed to be
+	//   different from all other UUIDs generated before 3603 A.D., or is
+	//   extremely likely to be different (depending on the mechanism chosen).
+	//
+	// Therefore, UIDs between clusters should be extremely unlikely to
+	// conflict.
+	K8SClusterUIDKey = attribute.Key("k8s.cluster.uid")
+
+	// K8SContainerNameKey is the attribute Key conforming to the
+	// "k8s.container.name" semantic conventions. It represents the name of the
+	// Container from Pod specification, must be unique within a Pod. Container
+	// runtime usually uses different globally unique name (`container.name`).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'redis'
+	K8SContainerNameKey = attribute.Key("k8s.container.name")
+
+	// K8SContainerRestartCountKey is the attribute Key conforming to the
+	// "k8s.container.restart_count" semantic conventions. It represents the
+	// number of times the container was restarted. This attribute can be used
+	// to identify a particular container (running or stopped) within a
+	// container spec.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 0, 2
+	K8SContainerRestartCountKey = attribute.Key("k8s.container.restart_count")
+
+	// K8SCronJobNameKey is the attribute Key conforming to the
+	// "k8s.cronjob.name" semantic conventions. It represents the name of the
+	// CronJob.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry'
+	K8SCronJobNameKey = attribute.Key("k8s.cronjob.name")
+
+	// K8SCronJobUIDKey is the attribute Key conforming to the
+	// "k8s.cronjob.uid" semantic conventions. It represents the UID of the
+	// CronJob.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '275ecb36-5aa8-4c2a-9c47-d8bb681b9aff'
+	K8SCronJobUIDKey = attribute.Key("k8s.cronjob.uid")
+
+	// K8SDaemonSetNameKey is the attribute Key conforming to the
+	// "k8s.daemonset.name" semantic conventions. It represents the name of the
+	// DaemonSet.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry'
+	K8SDaemonSetNameKey = attribute.Key("k8s.daemonset.name")
+
+	// K8SDaemonSetUIDKey is the attribute Key conforming to the
+	// "k8s.daemonset.uid" semantic conventions. It represents the UID of the
+	// DaemonSet.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '275ecb36-5aa8-4c2a-9c47-d8bb681b9aff'
+	K8SDaemonSetUIDKey = attribute.Key("k8s.daemonset.uid")
+
+	// K8SDeploymentNameKey is the attribute Key conforming to the
+	// "k8s.deployment.name" semantic conventions. It represents the name of
+	// the Deployment.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry'
+	K8SDeploymentNameKey = attribute.Key("k8s.deployment.name")
+
+	// K8SDeploymentUIDKey is the attribute Key conforming to the
+	// "k8s.deployment.uid" semantic conventions. It represents the UID of the
+	// Deployment.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '275ecb36-5aa8-4c2a-9c47-d8bb681b9aff'
+	K8SDeploymentUIDKey = attribute.Key("k8s.deployment.uid")
+
+	// K8SJobNameKey is the attribute Key conforming to the "k8s.job.name"
+	// semantic conventions. It represents the name of the Job.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry'
+	K8SJobNameKey = attribute.Key("k8s.job.name")
+
+	// K8SJobUIDKey is the attribute Key conforming to the "k8s.job.uid"
+	// semantic conventions. It represents the UID of the Job.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '275ecb36-5aa8-4c2a-9c47-d8bb681b9aff'
+	K8SJobUIDKey = attribute.Key("k8s.job.uid")
+
+	// K8SNamespaceNameKey is the attribute Key conforming to the
+	// "k8s.namespace.name" semantic conventions. It represents the name of the
+	// namespace that the pod is running in.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'default'
+	K8SNamespaceNameKey = attribute.Key("k8s.namespace.name")
+
+	// K8SNodeNameKey is the attribute Key conforming to the "k8s.node.name"
+	// semantic conventions. It represents the name of the Node.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'node-1'
+	K8SNodeNameKey = attribute.Key("k8s.node.name")
+
+	// K8SNodeUIDKey is the attribute Key conforming to the "k8s.node.uid"
+	// semantic conventions. It represents the UID of the Node.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '1eb3a0c6-0477-4080-a9cb-0cb7db65c6a2'
+	K8SNodeUIDKey = attribute.Key("k8s.node.uid")
+
+	// K8SPodNameKey is the attribute Key conforming to the "k8s.pod.name"
+	// semantic conventions. It represents the name of the Pod.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry-pod-autoconf'
+	K8SPodNameKey = attribute.Key("k8s.pod.name")
+
+	// K8SPodUIDKey is the attribute Key conforming to the "k8s.pod.uid"
+	// semantic conventions. It represents the UID of the Pod.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '275ecb36-5aa8-4c2a-9c47-d8bb681b9aff'
+	K8SPodUIDKey = attribute.Key("k8s.pod.uid")
+
+	// K8SReplicaSetNameKey is the attribute Key conforming to the
+	// "k8s.replicaset.name" semantic conventions. It represents the name of
+	// the ReplicaSet.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry'
+	K8SReplicaSetNameKey = attribute.Key("k8s.replicaset.name")
+
+	// K8SReplicaSetUIDKey is the attribute Key conforming to the
+	// "k8s.replicaset.uid" semantic conventions. It represents the UID of the
+	// ReplicaSet.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '275ecb36-5aa8-4c2a-9c47-d8bb681b9aff'
+	K8SReplicaSetUIDKey = attribute.Key("k8s.replicaset.uid")
+
+	// K8SStatefulSetNameKey is the attribute Key conforming to the
+	// "k8s.statefulset.name" semantic conventions. It represents the name of
+	// the StatefulSet.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry'
+	K8SStatefulSetNameKey = attribute.Key("k8s.statefulset.name")
+
+	// K8SStatefulSetUIDKey is the attribute Key conforming to the
+	// "k8s.statefulset.uid" semantic conventions. It represents the UID of the
+	// StatefulSet.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '275ecb36-5aa8-4c2a-9c47-d8bb681b9aff'
+	K8SStatefulSetUIDKey = attribute.Key("k8s.statefulset.uid")
+)
+
+// K8SClusterName returns an attribute KeyValue conforming to the
+// "k8s.cluster.name" semantic conventions. It represents the name of the
+// cluster.
+func K8SClusterName(val string) attribute.KeyValue {
+	return K8SClusterNameKey.String(val)
+}
+
+// K8SClusterUID returns an attribute KeyValue conforming to the
+// "k8s.cluster.uid" semantic conventions. It represents a pseudo-ID for the
+// cluster, set to the UID of the `kube-system` namespace.
+func K8SClusterUID(val string) attribute.KeyValue {
+	return K8SClusterUIDKey.String(val)
+}
+
+// K8SContainerName returns an attribute KeyValue conforming to the
+// "k8s.container.name" semantic conventions. It represents the name of the
+// Container from Pod specification, must be unique within a Pod. Container
+// runtime usually uses different globally unique name (`container.name`).
+func K8SContainerName(val string) attribute.KeyValue {
+	return K8SContainerNameKey.String(val)
+}
+
+// K8SContainerRestartCount returns an attribute KeyValue conforming to the
+// "k8s.container.restart_count" semantic conventions. It represents the number
+// of times the container was restarted. This attribute can be used to identify
+// a particular container (running or stopped) within a container spec.
+func K8SContainerRestartCount(val int) attribute.KeyValue {
+	return K8SContainerRestartCountKey.Int(val)
+}
+
+// K8SCronJobName returns an attribute KeyValue conforming to the
+// "k8s.cronjob.name" semantic conventions. It represents the name of the
+// CronJob.
+func K8SCronJobName(val string) attribute.KeyValue {
+	return K8SCronJobNameKey.String(val)
+}
+
+// K8SCronJobUID returns an attribute KeyValue conforming to the
+// "k8s.cronjob.uid" semantic conventions. It represents the UID of the
+// CronJob.
+func K8SCronJobUID(val string) attribute.KeyValue {
+	return K8SCronJobUIDKey.String(val)
+}
+
+// K8SDaemonSetName returns an attribute KeyValue conforming to the
+// "k8s.daemonset.name" semantic conventions. It represents the name of the
+// DaemonSet.
+func K8SDaemonSetName(val string) attribute.KeyValue {
+	return K8SDaemonSetNameKey.String(val)
+}
+
+// K8SDaemonSetUID returns an attribute KeyValue conforming to the
+// "k8s.daemonset.uid" semantic conventions. It represents the UID of the
+// DaemonSet.
+func K8SDaemonSetUID(val string) attribute.KeyValue {
+	return K8SDaemonSetUIDKey.String(val)
+}
+
+// K8SDeploymentName returns an attribute KeyValue conforming to the
+// "k8s.deployment.name" semantic conventions. It represents the name of the
+// Deployment.
+func K8SDeploymentName(val string) attribute.KeyValue {
+	return K8SDeploymentNameKey.String(val)
+}
+
+// K8SDeploymentUID returns an attribute KeyValue conforming to the
+// "k8s.deployment.uid" semantic conventions. It represents the UID of the
+// Deployment.
+func K8SDeploymentUID(val string) attribute.KeyValue {
+	return K8SDeploymentUIDKey.String(val)
+}
+
+// K8SJobName returns an attribute KeyValue conforming to the "k8s.job.name"
+// semantic conventions. It represents the name of the Job.
+func K8SJobName(val string) attribute.KeyValue {
+	return K8SJobNameKey.String(val)
+}
+
+// K8SJobUID returns an attribute KeyValue conforming to the "k8s.job.uid"
+// semantic conventions. It represents the UID of the Job.
+func K8SJobUID(val string) attribute.KeyValue {
+	return K8SJobUIDKey.String(val)
+}
+
+// K8SNamespaceName returns an attribute KeyValue conforming to the
+// "k8s.namespace.name" semantic conventions. It represents the name of the
+// namespace that the pod is running in.
+func K8SNamespaceName(val string) attribute.KeyValue {
+	return K8SNamespaceNameKey.String(val)
+}
+
+// K8SNodeName returns an attribute KeyValue conforming to the
+// "k8s.node.name" semantic conventions. It represents the name of the Node.
+func K8SNodeName(val string) attribute.KeyValue {
+	return K8SNodeNameKey.String(val)
+}
+
+// K8SNodeUID returns an attribute KeyValue conforming to the "k8s.node.uid"
+// semantic conventions. It represents the UID of the Node.
+func K8SNodeUID(val string) attribute.KeyValue {
+	return K8SNodeUIDKey.String(val)
+}
+
+// K8SPodName returns an attribute KeyValue conforming to the "k8s.pod.name"
+// semantic conventions. It represents the name of the Pod.
+func K8SPodName(val string) attribute.KeyValue {
+	return K8SPodNameKey.String(val)
+}
+
+// K8SPodUID returns an attribute KeyValue conforming to the "k8s.pod.uid"
+// semantic conventions. It represents the UID of the Pod.
+func K8SPodUID(val string) attribute.KeyValue {
+	return K8SPodUIDKey.String(val)
+}
+
+// K8SReplicaSetName returns an attribute KeyValue conforming to the
+// "k8s.replicaset.name" semantic conventions. It represents the name of the
+// ReplicaSet.
+func K8SReplicaSetName(val string) attribute.KeyValue {
+	return K8SReplicaSetNameKey.String(val)
+}
+
+// K8SReplicaSetUID returns an attribute KeyValue conforming to the
+// "k8s.replicaset.uid" semantic conventions. It represents the UID of the
+// ReplicaSet.
+func K8SReplicaSetUID(val string) attribute.KeyValue {
+	return K8SReplicaSetUIDKey.String(val)
+}
+
+// K8SStatefulSetName returns an attribute KeyValue conforming to the
+// "k8s.statefulset.name" semantic conventions. It represents the name of the
+// StatefulSet.
+func K8SStatefulSetName(val string) attribute.KeyValue {
+	return K8SStatefulSetNameKey.String(val)
+}
+
+// K8SStatefulSetUID returns an attribute KeyValue conforming to the
+// "k8s.statefulset.uid" semantic conventions. It represents the UID of the
+// StatefulSet.
+func K8SStatefulSetUID(val string) attribute.KeyValue {
+	return K8SStatefulSetUIDKey.String(val)
+}
+
+// An OCI image manifest.
+const (
+	// OciManifestDigestKey is the attribute Key conforming to the
+	// "oci.manifest.digest" semantic conventions. It represents the digest of
+	// the OCI image manifest. For container images specifically is the digest
+	// by which the container image is known.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples:
+	// 'sha256:e4ca62c0d62f3e886e684806dfe9d4e0cda60d54986898173c1083856cfda0f4'
+	// Note: Follows [OCI Image Manifest
+	// Specification](https://github.com/opencontainers/image-spec/blob/main/manifest.md),
+	// and specifically the [Digest
+	// property](https://github.com/opencontainers/image-spec/blob/main/descriptor.md#digests).
+	// An example can be found in [Example Image
+	// Manifest](https://docs.docker.com/registry/spec/manifest-v2-2/#example-image-manifest).
+	OciManifestDigestKey = attribute.Key("oci.manifest.digest")
+)
+
+// OciManifestDigest returns an attribute KeyValue conforming to the
+// "oci.manifest.digest" semantic conventions. It represents the digest of the
+// OCI image manifest. For container images specifically is the digest by which
+// the container image is known.
+func OciManifestDigest(val string) attribute.KeyValue {
+	return OciManifestDigestKey.String(val)
+}
+
+// The operating system (OS) on which the process represented by this resource
+// is running.
+const (
+	// OSBuildIDKey is the attribute Key conforming to the "os.build_id"
+	// semantic conventions. It represents the unique identifier for a
+	// particular build or compilation of the operating system.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'TQ3C.230805.001.B2', '20E247', '22621'
+	OSBuildIDKey = attribute.Key("os.build_id")
+
+	// OSDescriptionKey is the attribute Key conforming to the "os.description"
+	// semantic conventions. It represents the human readable (not intended to
+	// be parsed) OS version information, like e.g. reported by `ver` or
+	// `lsb_release -a` commands.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Microsoft Windows [Version 10.0.18363.778]', 'Ubuntu 18.04.1
+	// LTS'
+	OSDescriptionKey = attribute.Key("os.description")
+
+	// OSNameKey is the attribute Key conforming to the "os.name" semantic
+	// conventions. It represents the human readable operating system name.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'iOS', 'Android', 'Ubuntu'
+	OSNameKey = attribute.Key("os.name")
+
+	// OSTypeKey is the attribute Key conforming to the "os.type" semantic
+	// conventions. It represents the operating system type.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	OSTypeKey = attribute.Key("os.type")
+
+	// OSVersionKey is the attribute Key conforming to the "os.version"
+	// semantic conventions. It represents the version string of the operating
+	// system as defined in [Version
+	// Attributes](/docs/resource/README.md#version-attributes).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '14.2.1', '18.04.1'
+	OSVersionKey = attribute.Key("os.version")
+)
+
+var (
+	// Microsoft Windows
+	OSTypeWindows = OSTypeKey.String("windows")
+	// Linux
+	OSTypeLinux = OSTypeKey.String("linux")
+	// Apple Darwin
+	OSTypeDarwin = OSTypeKey.String("darwin")
+	// FreeBSD
+	OSTypeFreeBSD = OSTypeKey.String("freebsd")
+	// NetBSD
+	OSTypeNetBSD = OSTypeKey.String("netbsd")
+	// OpenBSD
+	OSTypeOpenBSD = OSTypeKey.String("openbsd")
+	// DragonFly BSD
+	OSTypeDragonflyBSD = OSTypeKey.String("dragonflybsd")
+	// HP-UX (Hewlett Packard Unix)
+	OSTypeHPUX = OSTypeKey.String("hpux")
+	// AIX (Advanced Interactive eXecutive)
+	OSTypeAIX = OSTypeKey.String("aix")
+	// SunOS, Oracle Solaris
+	OSTypeSolaris = OSTypeKey.String("solaris")
+	// IBM z/OS
+	OSTypeZOS = OSTypeKey.String("z_os")
+)
+
+// OSBuildID returns an attribute KeyValue conforming to the "os.build_id"
+// semantic conventions. It represents the unique identifier for a particular
+// build or compilation of the operating system.
+func OSBuildID(val string) attribute.KeyValue {
+	return OSBuildIDKey.String(val)
+}
+
+// OSDescription returns an attribute KeyValue conforming to the
+// "os.description" semantic conventions. It represents the human readable (not
+// intended to be parsed) OS version information, like e.g. reported by `ver`
+// or `lsb_release -a` commands.
+func OSDescription(val string) attribute.KeyValue {
+	return OSDescriptionKey.String(val)
+}
+
+// OSName returns an attribute KeyValue conforming to the "os.name" semantic
+// conventions. It represents the human readable operating system name.
+func OSName(val string) attribute.KeyValue {
+	return OSNameKey.String(val)
+}
+
+// OSVersion returns an attribute KeyValue conforming to the "os.version"
+// semantic conventions. It represents the version string of the operating
+// system as defined in [Version
+// Attributes](/docs/resource/README.md#version-attributes).
+func OSVersion(val string) attribute.KeyValue {
+	return OSVersionKey.String(val)
+}
+
+// An operating system process.
+const (
+	// ProcessCommandKey is the attribute Key conforming to the
+	// "process.command" semantic conventions. It represents the command used
+	// to launch the process (i.e. the command name). On Linux based systems,
+	// can be set to the zeroth string in `proc/[pid]/cmdline`. On Windows, can
+	// be set to the first parameter extracted from `GetCommandLineW`.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'cmd/otelcol'
+	ProcessCommandKey = attribute.Key("process.command")
+
+	// ProcessCommandArgsKey is the attribute Key conforming to the
+	// "process.command_args" semantic conventions. It represents the all the
+	// command arguments (including the command/executable itself) as received
+	// by the process. On Linux-based systems (and some other Unixoid systems
+	// supporting procfs), can be set according to the list of null-delimited
+	// strings extracted from `proc/[pid]/cmdline`. For libc-based executables,
+	// this would be the full argv vector passed to `main`.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'cmd/otecol', '--config=config.yaml'
+	ProcessCommandArgsKey = attribute.Key("process.command_args")
+
+	// ProcessCommandLineKey is the attribute Key conforming to the
+	// "process.command_line" semantic conventions. It represents the full
+	// command used to launch the process as a single string representing the
+	// full command. On Windows, can be set to the result of `GetCommandLineW`.
+	// Do not set this if you have to assemble it just for monitoring; use
+	// `process.command_args` instead.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'C:\\cmd\\otecol --config="my directory\\config.yaml"'
+	ProcessCommandLineKey = attribute.Key("process.command_line")
+
+	// ProcessExecutableNameKey is the attribute Key conforming to the
+	// "process.executable.name" semantic conventions. It represents the name
+	// of the process executable. On Linux based systems, can be set to the
+	// `Name` in `proc/[pid]/status`. On Windows, can be set to the base name
+	// of `GetProcessImageFileNameW`.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'otelcol'
+	ProcessExecutableNameKey = attribute.Key("process.executable.name")
+
+	// ProcessExecutablePathKey is the attribute Key conforming to the
+	// "process.executable.path" semantic conventions. It represents the full
+	// path to the process executable. On Linux based systems, can be set to
+	// the target of `proc/[pid]/exe`. On Windows, can be set to the result of
+	// `GetProcessImageFileNameW`.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '/usr/bin/cmd/otelcol'
+	ProcessExecutablePathKey = attribute.Key("process.executable.path")
+
+	// ProcessOwnerKey is the attribute Key conforming to the "process.owner"
+	// semantic conventions. It represents the username of the user that owns
+	// the process.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'root'
+	ProcessOwnerKey = attribute.Key("process.owner")
+
+	// ProcessParentPIDKey is the attribute Key conforming to the
+	// "process.parent_pid" semantic conventions. It represents the parent
+	// Process identifier (PPID).
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 111
+	ProcessParentPIDKey = attribute.Key("process.parent_pid")
+
+	// ProcessPIDKey is the attribute Key conforming to the "process.pid"
+	// semantic conventions. It represents the process identifier (PID).
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 1234
+	ProcessPIDKey = attribute.Key("process.pid")
+
+	// ProcessRuntimeDescriptionKey is the attribute Key conforming to the
+	// "process.runtime.description" semantic conventions. It represents an
+	// additional description about the runtime of the process, for example a
+	// specific vendor customization of the runtime environment.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Eclipse OpenJ9 Eclipse OpenJ9 VM openj9-0.21.0'
+	ProcessRuntimeDescriptionKey = attribute.Key("process.runtime.description")
+
+	// ProcessRuntimeNameKey is the attribute Key conforming to the
+	// "process.runtime.name" semantic conventions. It represents the name of
+	// the runtime of this process. For compiled native binaries, this SHOULD
+	// be the name of the compiler.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'OpenJDK Runtime Environment'
+	ProcessRuntimeNameKey = attribute.Key("process.runtime.name")
+
+	// ProcessRuntimeVersionKey is the attribute Key conforming to the
+	// "process.runtime.version" semantic conventions. It represents the
+	// version of the runtime of this process, as returned by the runtime
+	// without modification.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '14.0.2'
+	ProcessRuntimeVersionKey = attribute.Key("process.runtime.version")
+)
+
+// ProcessCommand returns an attribute KeyValue conforming to the
+// "process.command" semantic conventions. It represents the command used to
+// launch the process (i.e. the command name). On Linux based systems, can be
+// set to the zeroth string in `proc/[pid]/cmdline`. On Windows, can be set to
+// the first parameter extracted from `GetCommandLineW`.
+func ProcessCommand(val string) attribute.KeyValue {
+	return ProcessCommandKey.String(val)
+}
+
+// ProcessCommandArgs returns an attribute KeyValue conforming to the
+// "process.command_args" semantic conventions. It represents the all the
+// command arguments (including the command/executable itself) as received by
+// the process. On Linux-based systems (and some other Unixoid systems
+// supporting procfs), can be set according to the list of null-delimited
+// strings extracted from `proc/[pid]/cmdline`. For libc-based executables,
+// this would be the full argv vector passed to `main`.
+func ProcessCommandArgs(val ...string) attribute.KeyValue {
+	return ProcessCommandArgsKey.StringSlice(val)
+}
+
+// ProcessCommandLine returns an attribute KeyValue conforming to the
+// "process.command_line" semantic conventions. It represents the full command
+// used to launch the process as a single string representing the full command.
+// On Windows, can be set to the result of `GetCommandLineW`. Do not set this
+// if you have to assemble it just for monitoring; use `process.command_args`
+// instead.
+func ProcessCommandLine(val string) attribute.KeyValue {
+	return ProcessCommandLineKey.String(val)
+}
+
+// ProcessExecutableName returns an attribute KeyValue conforming to the
+// "process.executable.name" semantic conventions. It represents the name of
+// the process executable. On Linux based systems, can be set to the `Name` in
+// `proc/[pid]/status`. On Windows, can be set to the base name of
+// `GetProcessImageFileNameW`.
+func ProcessExecutableName(val string) attribute.KeyValue {
+	return ProcessExecutableNameKey.String(val)
+}
+
+// ProcessExecutablePath returns an attribute KeyValue conforming to the
+// "process.executable.path" semantic conventions. It represents the full path
+// to the process executable. On Linux based systems, can be set to the target
+// of `proc/[pid]/exe`. On Windows, can be set to the result of
+// `GetProcessImageFileNameW`.
+func ProcessExecutablePath(val string) attribute.KeyValue {
+	return ProcessExecutablePathKey.String(val)
+}
+
+// ProcessOwner returns an attribute KeyValue conforming to the
+// "process.owner" semantic conventions. It represents the username of the user
+// that owns the process.
+func ProcessOwner(val string) attribute.KeyValue {
+	return ProcessOwnerKey.String(val)
+}
+
+// ProcessParentPID returns an attribute KeyValue conforming to the
+// "process.parent_pid" semantic conventions. It represents the parent Process
+// identifier (PPID).
+func ProcessParentPID(val int) attribute.KeyValue {
+	return ProcessParentPIDKey.Int(val)
+}
+
+// ProcessPID returns an attribute KeyValue conforming to the "process.pid"
+// semantic conventions. It represents the process identifier (PID).
+func ProcessPID(val int) attribute.KeyValue {
+	return ProcessPIDKey.Int(val)
+}
+
+// ProcessRuntimeDescription returns an attribute KeyValue conforming to the
+// "process.runtime.description" semantic conventions. It represents an
+// additional description about the runtime of the process, for example a
+// specific vendor customization of the runtime environment.
+func ProcessRuntimeDescription(val string) attribute.KeyValue {
+	return ProcessRuntimeDescriptionKey.String(val)
+}
+
+// ProcessRuntimeName returns an attribute KeyValue conforming to the
+// "process.runtime.name" semantic conventions. It represents the name of the
+// runtime of this process. For compiled native binaries, this SHOULD be the
+// name of the compiler.
+func ProcessRuntimeName(val string) attribute.KeyValue {
+	return ProcessRuntimeNameKey.String(val)
+}
+
+// ProcessRuntimeVersion returns an attribute KeyValue conforming to the
+// "process.runtime.version" semantic conventions. It represents the version of
+// the runtime of this process, as returned by the runtime without
+// modification.
+func ProcessRuntimeVersion(val string) attribute.KeyValue {
+	return ProcessRuntimeVersionKey.String(val)
+}
+
+// The Android platform on which the Android application is running.
+const (
+	// AndroidOSAPILevelKey is the attribute Key conforming to the
+	// "android.os.api_level" semantic conventions. It represents the uniquely
+	// identifies the framework API revision offered by a version
+	// (`os.version`) of the android operating system. More information can be
+	// found
+	// [here](https://developer.android.com/guide/topics/manifest/uses-sdk-element#APILevels).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '33', '32'
+	AndroidOSAPILevelKey = attribute.Key("android.os.api_level")
+)
+
+// AndroidOSAPILevel returns an attribute KeyValue conforming to the
+// "android.os.api_level" semantic conventions. It represents the uniquely
+// identifies the framework API revision offered by a version (`os.version`) of
+// the android operating system. More information can be found
+// [here](https://developer.android.com/guide/topics/manifest/uses-sdk-element#APILevels).
+func AndroidOSAPILevel(val string) attribute.KeyValue {
+	return AndroidOSAPILevelKey.String(val)
+}
+
+// The web browser in which the application represented by the resource is
+// running. The `browser.*` attributes MUST be used only for resources that
+// represent applications running in a web browser (regardless of whether
+// running on a mobile or desktop device).
+const (
+	// BrowserBrandsKey is the attribute Key conforming to the "browser.brands"
+	// semantic conventions. It represents the array of brand name and version
+	// separated by a space
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: ' Not A;Brand 99', 'Chromium 99', 'Chrome 99'
+	// Note: This value is intended to be taken from the [UA client hints
+	// API](https://wicg.github.io/ua-client-hints/#interface)
+	// (`navigator.userAgentData.brands`).
+	BrowserBrandsKey = attribute.Key("browser.brands")
+
+	// BrowserLanguageKey is the attribute Key conforming to the
+	// "browser.language" semantic conventions. It represents the preferred
+	// language of the user using the browser
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'en', 'en-US', 'fr', 'fr-FR'
+	// Note: This value is intended to be taken from the Navigator API
+	// `navigator.language`.
+	BrowserLanguageKey = attribute.Key("browser.language")
+
+	// BrowserMobileKey is the attribute Key conforming to the "browser.mobile"
+	// semantic conventions. It represents a boolean that is true if the
+	// browser is running on a mobile device
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Note: This value is intended to be taken from the [UA client hints
+	// API](https://wicg.github.io/ua-client-hints/#interface)
+	// (`navigator.userAgentData.mobile`). If unavailable, this attribute
+	// SHOULD be left unset.
+	BrowserMobileKey = attribute.Key("browser.mobile")
+
+	// BrowserPlatformKey is the attribute Key conforming to the
+	// "browser.platform" semantic conventions. It represents the platform on
+	// which the browser is running
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Windows', 'macOS', 'Android'
+	// Note: This value is intended to be taken from the [UA client hints
+	// API](https://wicg.github.io/ua-client-hints/#interface)
+	// (`navigator.userAgentData.platform`). If unavailable, the legacy
+	// `navigator.platform` API SHOULD NOT be used instead and this attribute
+	// SHOULD be left unset in order for the values to be consistent.
+	// The list of possible values is defined in the [W3C User-Agent Client
+	// Hints
+	// specification](https://wicg.github.io/ua-client-hints/#sec-ch-ua-platform).
+	// Note that some (but not all) of these values can overlap with values in
+	// the [`os.type` and `os.name` attributes](./os.md). However, for
+	// consistency, the values in the `browser.platform` attribute should
+	// capture the exact value that the user agent provides.
+	BrowserPlatformKey = attribute.Key("browser.platform")
+)
+
+// BrowserBrands returns an attribute KeyValue conforming to the
+// "browser.brands" semantic conventions. It represents the array of brand name
+// and version separated by a space
+func BrowserBrands(val ...string) attribute.KeyValue {
+	return BrowserBrandsKey.StringSlice(val)
+}
+
+// BrowserLanguage returns an attribute KeyValue conforming to the
+// "browser.language" semantic conventions. It represents the preferred
+// language of the user using the browser
+func BrowserLanguage(val string) attribute.KeyValue {
+	return BrowserLanguageKey.String(val)
+}
+
+// BrowserMobile returns an attribute KeyValue conforming to the
+// "browser.mobile" semantic conventions. It represents a boolean that is true
+// if the browser is running on a mobile device
+func BrowserMobile(val bool) attribute.KeyValue {
+	return BrowserMobileKey.Bool(val)
+}
+
+// BrowserPlatform returns an attribute KeyValue conforming to the
+// "browser.platform" semantic conventions. It represents the platform on which
+// the browser is running
+func BrowserPlatform(val string) attribute.KeyValue {
+	return BrowserPlatformKey.String(val)
+}
+
+// Resources used by AWS Elastic Container Service (ECS).
+const (
+	// AWSECSClusterARNKey is the attribute Key conforming to the
+	// "aws.ecs.cluster.arn" semantic conventions. It represents the ARN of an
+	// [ECS
+	// cluster](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/clusters.html).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'arn:aws:ecs:us-west-2:123456789123:cluster/my-cluster'
+	AWSECSClusterARNKey = attribute.Key("aws.ecs.cluster.arn")
+
+	// AWSECSContainerARNKey is the attribute Key conforming to the
+	// "aws.ecs.container.arn" semantic conventions. It represents the Amazon
+	// Resource Name (ARN) of an [ECS container
+	// instance](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ECS_instances.html).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples:
+	// 'arn:aws:ecs:us-west-1:123456789123:container/32624152-9086-4f0e-acae-1a75b14fe4d9'
+	AWSECSContainerARNKey = attribute.Key("aws.ecs.container.arn")
+
+	// AWSECSLaunchtypeKey is the attribute Key conforming to the
+	// "aws.ecs.launchtype" semantic conventions. It represents the [launch
+	// type](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html)
+	// for an ECS task.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	AWSECSLaunchtypeKey = attribute.Key("aws.ecs.launchtype")
+
+	// AWSECSTaskARNKey is the attribute Key conforming to the
+	// "aws.ecs.task.arn" semantic conventions. It represents the ARN of an
+	// [ECS task
+	// definition](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definitions.html).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples:
+	// 'arn:aws:ecs:us-west-1:123456789123:task/10838bed-421f-43ef-870a-f43feacbbb5b'
+	AWSECSTaskARNKey = attribute.Key("aws.ecs.task.arn")
+
+	// AWSECSTaskFamilyKey is the attribute Key conforming to the
+	// "aws.ecs.task.family" semantic conventions. It represents the task
+	// definition family this task definition is a member of.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'opentelemetry-family'
+	AWSECSTaskFamilyKey = attribute.Key("aws.ecs.task.family")
+
+	// AWSECSTaskRevisionKey is the attribute Key conforming to the
+	// "aws.ecs.task.revision" semantic conventions. It represents the revision
+	// for this task definition.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '8', '26'
+	AWSECSTaskRevisionKey = attribute.Key("aws.ecs.task.revision")
+)
+
+var (
+	// ec2
+	AWSECSLaunchtypeEC2 = AWSECSLaunchtypeKey.String("ec2")
+	// fargate
+	AWSECSLaunchtypeFargate = AWSECSLaunchtypeKey.String("fargate")
+)
+
+// AWSECSClusterARN returns an attribute KeyValue conforming to the
+// "aws.ecs.cluster.arn" semantic conventions. It represents the ARN of an [ECS
+// cluster](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/clusters.html).
+func AWSECSClusterARN(val string) attribute.KeyValue {
+	return AWSECSClusterARNKey.String(val)
+}
+
+// AWSECSContainerARN returns an attribute KeyValue conforming to the
+// "aws.ecs.container.arn" semantic conventions. It represents the Amazon
+// Resource Name (ARN) of an [ECS container
+// instance](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ECS_instances.html).
+func AWSECSContainerARN(val string) attribute.KeyValue {
+	return AWSECSContainerARNKey.String(val)
+}
+
+// AWSECSTaskARN returns an attribute KeyValue conforming to the
+// "aws.ecs.task.arn" semantic conventions. It represents the ARN of an [ECS
+// task
+// definition](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definitions.html).
+func AWSECSTaskARN(val string) attribute.KeyValue {
+	return AWSECSTaskARNKey.String(val)
+}
+
+// AWSECSTaskFamily returns an attribute KeyValue conforming to the
+// "aws.ecs.task.family" semantic conventions. It represents the task
+// definition family this task definition is a member of.
+func AWSECSTaskFamily(val string) attribute.KeyValue {
+	return AWSECSTaskFamilyKey.String(val)
+}
+
+// AWSECSTaskRevision returns an attribute KeyValue conforming to the
+// "aws.ecs.task.revision" semantic conventions. It represents the revision for
+// this task definition.
+func AWSECSTaskRevision(val string) attribute.KeyValue {
+	return AWSECSTaskRevisionKey.String(val)
+}
+
+// Resources used by AWS Elastic Kubernetes Service (EKS).
+const (
+	// AWSEKSClusterARNKey is the attribute Key conforming to the
+	// "aws.eks.cluster.arn" semantic conventions. It represents the ARN of an
+	// EKS cluster.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'arn:aws:ecs:us-west-2:123456789123:cluster/my-cluster'
+	AWSEKSClusterARNKey = attribute.Key("aws.eks.cluster.arn")
+)
+
+// AWSEKSClusterARN returns an attribute KeyValue conforming to the
+// "aws.eks.cluster.arn" semantic conventions. It represents the ARN of an EKS
+// cluster.
+func AWSEKSClusterARN(val string) attribute.KeyValue {
+	return AWSEKSClusterARNKey.String(val)
+}
+
+// Resources specific to Amazon Web Services.
+const (
+	// AWSLogGroupARNsKey is the attribute Key conforming to the
+	// "aws.log.group.arns" semantic conventions. It represents the Amazon
+	// Resource Name(s) (ARN) of the AWS log group(s).
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples:
+	// 'arn:aws:logs:us-west-1:123456789012:log-group:/aws/my/group:*'
+	// Note: See the [log group ARN format
+	// documentation](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/iam-access-control-overview-cwl.html#CWL_ARN_Format).
+	AWSLogGroupARNsKey = attribute.Key("aws.log.group.arns")
+
+	// AWSLogGroupNamesKey is the attribute Key conforming to the
+	// "aws.log.group.names" semantic conventions. It represents the name(s) of
+	// the AWS log group(s) an application is writing to.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '/aws/lambda/my-function', 'opentelemetry-service'
+	// Note: Multiple log groups must be supported for cases like
+	// multi-container applications, where a single application has sidecar
+	// containers, and each write to their own log group.
+	AWSLogGroupNamesKey = attribute.Key("aws.log.group.names")
+
+	// AWSLogStreamARNsKey is the attribute Key conforming to the
+	// "aws.log.stream.arns" semantic conventions. It represents the ARN(s) of
+	// the AWS log stream(s).
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples:
+	// 'arn:aws:logs:us-west-1:123456789012:log-group:/aws/my/group:log-stream:logs/main/10838bed-421f-43ef-870a-f43feacbbb5b'
+	// Note: See the [log stream ARN format
+	// documentation](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/iam-access-control-overview-cwl.html#CWL_ARN_Format).
+	// One log group can contain several log streams, so these ARNs necessarily
+	// identify both a log group and a log stream.
+	AWSLogStreamARNsKey = attribute.Key("aws.log.stream.arns")
+
+	// AWSLogStreamNamesKey is the attribute Key conforming to the
+	// "aws.log.stream.names" semantic conventions. It represents the name(s)
+	// of the AWS log stream(s) an application is writing to.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'logs/main/10838bed-421f-43ef-870a-f43feacbbb5b'
+	AWSLogStreamNamesKey = attribute.Key("aws.log.stream.names")
+)
+
+// AWSLogGroupARNs returns an attribute KeyValue conforming to the
+// "aws.log.group.arns" semantic conventions. It represents the Amazon Resource
+// Name(s) (ARN) of the AWS log group(s).
+func AWSLogGroupARNs(val ...string) attribute.KeyValue {
+	return AWSLogGroupARNsKey.StringSlice(val)
+}
+
+// AWSLogGroupNames returns an attribute KeyValue conforming to the
+// "aws.log.group.names" semantic conventions. It represents the name(s) of the
+// AWS log group(s) an application is writing to.
+func AWSLogGroupNames(val ...string) attribute.KeyValue {
+	return AWSLogGroupNamesKey.StringSlice(val)
+}
+
+// AWSLogStreamARNs returns an attribute KeyValue conforming to the
+// "aws.log.stream.arns" semantic conventions. It represents the ARN(s) of the
+// AWS log stream(s).
+func AWSLogStreamARNs(val ...string) attribute.KeyValue {
+	return AWSLogStreamARNsKey.StringSlice(val)
+}
+
+// AWSLogStreamNames returns an attribute KeyValue conforming to the
+// "aws.log.stream.names" semantic conventions. It represents the name(s) of
+// the AWS log stream(s) an application is writing to.
+func AWSLogStreamNames(val ...string) attribute.KeyValue {
+	return AWSLogStreamNamesKey.StringSlice(val)
+}
+
+// Resource used by Google Cloud Run.
+const (
+	// GCPCloudRunJobExecutionKey is the attribute Key conforming to the
+	// "gcp.cloud_run.job.execution" semantic conventions. It represents the
+	// name of the Cloud Run
+	// [execution](https://cloud.google.com/run/docs/managing/job-executions)
+	// being run for the Job, as set by the
+	// [`CLOUD_RUN_EXECUTION`](https://cloud.google.com/run/docs/container-contract#jobs-env-vars)
+	// environment variable.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'job-name-xxxx', 'sample-job-mdw84'
+	GCPCloudRunJobExecutionKey = attribute.Key("gcp.cloud_run.job.execution")
+
+	// GCPCloudRunJobTaskIndexKey is the attribute Key conforming to the
+	// "gcp.cloud_run.job.task_index" semantic conventions. It represents the
+	// index for a task within an execution as provided by the
+	// [`CLOUD_RUN_TASK_INDEX`](https://cloud.google.com/run/docs/container-contract#jobs-env-vars)
+	// environment variable.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 0, 1
+	GCPCloudRunJobTaskIndexKey = attribute.Key("gcp.cloud_run.job.task_index")
+)
+
+// GCPCloudRunJobExecution returns an attribute KeyValue conforming to the
+// "gcp.cloud_run.job.execution" semantic conventions. It represents the name
+// of the Cloud Run
+// [execution](https://cloud.google.com/run/docs/managing/job-executions) being
+// run for the Job, as set by the
+// [`CLOUD_RUN_EXECUTION`](https://cloud.google.com/run/docs/container-contract#jobs-env-vars)
+// environment variable.
+func GCPCloudRunJobExecution(val string) attribute.KeyValue {
+	return GCPCloudRunJobExecutionKey.String(val)
+}
+
+// GCPCloudRunJobTaskIndex returns an attribute KeyValue conforming to the
+// "gcp.cloud_run.job.task_index" semantic conventions. It represents the index
+// for a task within an execution as provided by the
+// [`CLOUD_RUN_TASK_INDEX`](https://cloud.google.com/run/docs/container-contract#jobs-env-vars)
+// environment variable.
+func GCPCloudRunJobTaskIndex(val int) attribute.KeyValue {
+	return GCPCloudRunJobTaskIndexKey.Int(val)
+}
+
+// Resources used by Google Compute Engine (GCE).
+const (
+	// GCPGceInstanceHostnameKey is the attribute Key conforming to the
+	// "gcp.gce.instance.hostname" semantic conventions. It represents the
+	// hostname of a GCE instance. This is the full value of the default or
+	// [custom
+	// hostname](https://cloud.google.com/compute/docs/instances/custom-hostname-vm).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'my-host1234.example.com',
+	// 'sample-vm.us-west1-b.c.my-project.internal'
+	GCPGceInstanceHostnameKey = attribute.Key("gcp.gce.instance.hostname")
+
+	// GCPGceInstanceNameKey is the attribute Key conforming to the
+	// "gcp.gce.instance.name" semantic conventions. It represents the instance
+	// name of a GCE instance. This is the value provided by `host.name`, the
+	// visible name of the instance in the Cloud Console UI, and the prefix for
+	// the default hostname of the instance as defined by the [default internal
+	// DNS
+	// name](https://cloud.google.com/compute/docs/internal-dns#instance-fully-qualified-domain-names).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'instance-1', 'my-vm-name'
+	GCPGceInstanceNameKey = attribute.Key("gcp.gce.instance.name")
+)
+
+// GCPGceInstanceHostname returns an attribute KeyValue conforming to the
+// "gcp.gce.instance.hostname" semantic conventions. It represents the hostname
+// of a GCE instance. This is the full value of the default or [custom
+// hostname](https://cloud.google.com/compute/docs/instances/custom-hostname-vm).
+func GCPGceInstanceHostname(val string) attribute.KeyValue {
+	return GCPGceInstanceHostnameKey.String(val)
+}
+
+// GCPGceInstanceName returns an attribute KeyValue conforming to the
+// "gcp.gce.instance.name" semantic conventions. It represents the instance
+// name of a GCE instance. This is the value provided by `host.name`, the
+// visible name of the instance in the Cloud Console UI, and the prefix for the
+// default hostname of the instance as defined by the [default internal DNS
+// name](https://cloud.google.com/compute/docs/internal-dns#instance-fully-qualified-domain-names).
+func GCPGceInstanceName(val string) attribute.KeyValue {
+	return GCPGceInstanceNameKey.String(val)
+}
+
+// Heroku dyno metadata
+const (
+	// HerokuAppIDKey is the attribute Key conforming to the "heroku.app.id"
+	// semantic conventions. It represents the unique identifier for the
+	// application
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '2daa2797-e42b-4624-9322-ec3f968df4da'
+	HerokuAppIDKey = attribute.Key("heroku.app.id")
+
+	// HerokuReleaseCommitKey is the attribute Key conforming to the
+	// "heroku.release.commit" semantic conventions. It represents the commit
+	// hash for the current release
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'e6134959463efd8966b20e75b913cafe3f5ec'
+	HerokuReleaseCommitKey = attribute.Key("heroku.release.commit")
+
+	// HerokuReleaseCreationTimestampKey is the attribute Key conforming to the
+	// "heroku.release.creation_timestamp" semantic conventions. It represents
+	// the time and date the release was created
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '2022-10-23T18:00:42Z'
+	HerokuReleaseCreationTimestampKey = attribute.Key("heroku.release.creation_timestamp")
+)
+
+// HerokuAppID returns an attribute KeyValue conforming to the
+// "heroku.app.id" semantic conventions. It represents the unique identifier
+// for the application
+func HerokuAppID(val string) attribute.KeyValue {
+	return HerokuAppIDKey.String(val)
+}
+
+// HerokuReleaseCommit returns an attribute KeyValue conforming to the
+// "heroku.release.commit" semantic conventions. It represents the commit hash
+// for the current release
+func HerokuReleaseCommit(val string) attribute.KeyValue {
+	return HerokuReleaseCommitKey.String(val)
+}
+
+// HerokuReleaseCreationTimestamp returns an attribute KeyValue conforming
+// to the "heroku.release.creation_timestamp" semantic conventions. It
+// represents the time and date the release was created
+func HerokuReleaseCreationTimestamp(val string) attribute.KeyValue {
+	return HerokuReleaseCreationTimestampKey.String(val)
+}
+
+// The software deployment.
+const (
+	// DeploymentEnvironmentKey is the attribute Key conforming to the
+	// "deployment.environment" semantic conventions. It represents the name of
+	// the [deployment
+	// environment](https://wikipedia.org/wiki/Deployment_environment) (aka
+	// deployment tier).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'staging', 'production'
+	// Note: `deployment.environment` does not affect the uniqueness
+	// constraints defined through
+	// the `service.namespace`, `service.name` and `service.instance.id`
+	// resource attributes.
+	// This implies that resources carrying the following attribute
+	// combinations MUST be
+	// considered to be identifying the same service:
+	//
+	// * `service.name=frontend`, `deployment.environment=production`
+	// * `service.name=frontend`, `deployment.environment=staging`.
+	DeploymentEnvironmentKey = attribute.Key("deployment.environment")
+)
+
+// DeploymentEnvironment returns an attribute KeyValue conforming to the
+// "deployment.environment" semantic conventions. It represents the name of the
+// [deployment environment](https://wikipedia.org/wiki/Deployment_environment)
+// (aka deployment tier).
+func DeploymentEnvironment(val string) attribute.KeyValue {
+	return DeploymentEnvironmentKey.String(val)
+}
+
+// A serverless instance.
+const (
+	// FaaSInstanceKey is the attribute Key conforming to the "faas.instance"
+	// semantic conventions. It represents the execution environment ID as a
+	// string, that will be potentially reused for other invocations to the
+	// same function/function version.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '2021/06/28/[$LATEST]2f399eb14537447da05ab2a2e39309de'
+	// Note: * **AWS Lambda:** Use the (full) log stream name.
+	FaaSInstanceKey = attribute.Key("faas.instance")
+
+	// FaaSMaxMemoryKey is the attribute Key conforming to the
+	// "faas.max_memory" semantic conventions. It represents the amount of
+	// memory available to the serverless function converted to Bytes.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 134217728
+	// Note: It's recommended to set this attribute since e.g. too little
+	// memory can easily stop a Java AWS Lambda function from working
+	// correctly. On AWS Lambda, the environment variable
+	// `AWS_LAMBDA_FUNCTION_MEMORY_SIZE` provides this information (which must
+	// be multiplied by 1,048,576).
+	FaaSMaxMemoryKey = attribute.Key("faas.max_memory")
+
+	// FaaSNameKey is the attribute Key conforming to the "faas.name" semantic
+	// conventions. It represents the name of the single function that this
+	// runtime instance executes.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'my-function', 'myazurefunctionapp/some-function-name'
+	// Note: This is the name of the function as configured/deployed on the
+	// FaaS
+	// platform and is usually different from the name of the callback
+	// function (which may be stored in the
+	// [`code.namespace`/`code.function`](/docs/general/attributes.md#source-code-attributes)
+	// span attributes).
+	//
+	// For some cloud providers, the above definition is ambiguous. The
+	// following
+	// definition of function name MUST be used for this attribute
+	// (and consequently the span name) for the listed cloud
+	// providers/products:
+	//
+	// * **Azure:**  The full name `<FUNCAPP>/<FUNC>`, i.e., function app name
+	//   followed by a forward slash followed by the function name (this form
+	//   can also be seen in the resource JSON for the function).
+	//   This means that a span attribute MUST be used, as an Azure function
+	//   app can host multiple functions that would usually share
+	//   a TracerProvider (see also the `cloud.resource_id` attribute).
+	FaaSNameKey = attribute.Key("faas.name")
+
+	// FaaSVersionKey is the attribute Key conforming to the "faas.version"
+	// semantic conventions. It represents the immutable version of the
+	// function being executed.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '26', 'pinkfroid-00002'
+	// Note: Depending on the cloud provider and platform, use:
+	//
+	// * **AWS Lambda:** The [function
+	// version](https://docs.aws.amazon.com/lambda/latest/dg/configuration-versions.html)
+	//   (an integer represented as a decimal string).
+	// * **Google Cloud Run (Services):** The
+	// [revision](https://cloud.google.com/run/docs/managing/revisions)
+	//   (i.e., the function name plus the revision suffix).
+	// * **Google Cloud Functions:** The value of the
+	//   [`K_REVISION` environment
+	// variable](https://cloud.google.com/functions/docs/env-var#runtime_environment_variables_set_automatically).
+	// * **Azure Functions:** Not applicable. Do not set this attribute.
+	FaaSVersionKey = attribute.Key("faas.version")
+)
+
+// FaaSInstance returns an attribute KeyValue conforming to the
+// "faas.instance" semantic conventions. It represents the execution
+// environment ID as a string, that will be potentially reused for other
+// invocations to the same function/function version.
+func FaaSInstance(val string) attribute.KeyValue {
+	return FaaSInstanceKey.String(val)
+}
+
+// FaaSMaxMemory returns an attribute KeyValue conforming to the
+// "faas.max_memory" semantic conventions. It represents the amount of memory
+// available to the serverless function converted to Bytes.
+func FaaSMaxMemory(val int) attribute.KeyValue {
+	return FaaSMaxMemoryKey.Int(val)
+}
+
+// FaaSName returns an attribute KeyValue conforming to the "faas.name"
+// semantic conventions. It represents the name of the single function that
+// this runtime instance executes.
+func FaaSName(val string) attribute.KeyValue {
+	return FaaSNameKey.String(val)
+}
+
+// FaaSVersion returns an attribute KeyValue conforming to the
+// "faas.version" semantic conventions. It represents the immutable version of
+// the function being executed.
+func FaaSVersion(val string) attribute.KeyValue {
+	return FaaSVersionKey.String(val)
+}
+
+// A service instance.
+const (
+	// ServiceNameKey is the attribute Key conforming to the "service.name"
+	// semantic conventions. It represents the logical name of the service.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'shoppingcart'
+	// Note: MUST be the same for all instances of horizontally scaled
+	// services. If the value was not specified, SDKs MUST fallback to
+	// `unknown_service:` concatenated with
+	// [`process.executable.name`](process.md#process), e.g.
+	// `unknown_service:bash`. If `process.executable.name` is not available,
+	// the value MUST be set to `unknown_service`.
+	ServiceNameKey = attribute.Key("service.name")
+
+	// ServiceVersionKey is the attribute Key conforming to the
+	// "service.version" semantic conventions. It represents the version string
+	// of the service API or implementation. The format is not defined by these
+	// conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '2.0.0', 'a01dbef8a'
+	ServiceVersionKey = attribute.Key("service.version")
+)
+
+// ServiceName returns an attribute KeyValue conforming to the
+// "service.name" semantic conventions. It represents the logical name of the
+// service.
+func ServiceName(val string) attribute.KeyValue {
+	return ServiceNameKey.String(val)
+}
+
+// ServiceVersion returns an attribute KeyValue conforming to the
+// "service.version" semantic conventions. It represents the version string of
+// the service API or implementation. The format is not defined by these
+// conventions.
+func ServiceVersion(val string) attribute.KeyValue {
+	return ServiceVersionKey.String(val)
+}
+
+// A service instance.
+const (
+	// ServiceInstanceIDKey is the attribute Key conforming to the
+	// "service.instance.id" semantic conventions. It represents the string ID
+	// of the service instance.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'my-k8s-pod-deployment-1',
+	// '627cc493-f310-47de-96bd-71410b7dec09'
+	// Note: MUST be unique for each instance of the same
+	// `service.namespace,service.name` pair (in other words
+	// `service.namespace,service.name,service.instance.id` triplet MUST be
+	// globally unique). The ID helps to distinguish instances of the same
+	// service that exist at the same time (e.g. instances of a horizontally
+	// scaled service). It is preferable for the ID to be persistent and stay
+	// the same for the lifetime of the service instance, however it is
+	// acceptable that the ID is ephemeral and changes during important
+	// lifetime events for the service (e.g. service restarts). If the service
+	// has no inherent unique ID that can be used as the value of this
+	// attribute it is recommended to generate a random Version 1 or Version 4
+	// RFC 4122 UUID (services aiming for reproducible UUIDs may also use
+	// Version 5, see RFC 4122 for more recommendations).
+	ServiceInstanceIDKey = attribute.Key("service.instance.id")
+
+	// ServiceNamespaceKey is the attribute Key conforming to the
+	// "service.namespace" semantic conventions. It represents a namespace for
+	// `service.name`.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Shop'
+	// Note: A string value having a meaning that helps to distinguish a group
+	// of services, for example the team name that owns a group of services.
+	// `service.name` is expected to be unique within the same namespace. If
+	// `service.namespace` is not specified in the Resource then `service.name`
+	// is expected to be unique for all services that have no explicit
+	// namespace defined (so the empty/unspecified namespace is simply one more
+	// valid namespace). Zero-length namespace string is assumed equal to
+	// unspecified namespace.
+	ServiceNamespaceKey = attribute.Key("service.namespace")
+)
+
+// ServiceInstanceID returns an attribute KeyValue conforming to the
+// "service.instance.id" semantic conventions. It represents the string ID of
+// the service instance.
+func ServiceInstanceID(val string) attribute.KeyValue {
+	return ServiceInstanceIDKey.String(val)
+}
+
+// ServiceNamespace returns an attribute KeyValue conforming to the
+// "service.namespace" semantic conventions. It represents a namespace for
+// `service.name`.
+func ServiceNamespace(val string) attribute.KeyValue {
+	return ServiceNamespaceKey.String(val)
+}
+
+// The telemetry SDK used to capture data recorded by the instrumentation
+// libraries.
+const (
+	// TelemetrySDKLanguageKey is the attribute Key conforming to the
+	// "telemetry.sdk.language" semantic conventions. It represents the
+	// language of the telemetry SDK.
+	//
+	// Type: Enum
+	// RequirementLevel: Required
+	// Stability: experimental
+	TelemetrySDKLanguageKey = attribute.Key("telemetry.sdk.language")
+
+	// TelemetrySDKNameKey is the attribute Key conforming to the
+	// "telemetry.sdk.name" semantic conventions. It represents the name of the
+	// telemetry SDK as defined above.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'opentelemetry'
+	// Note: The OpenTelemetry SDK MUST set the `telemetry.sdk.name` attribute
+	// to `opentelemetry`.
+	// If another SDK, like a fork or a vendor-provided implementation, is
+	// used, this SDK MUST set the
+	// `telemetry.sdk.name` attribute to the fully-qualified class or module
+	// name of this SDK's main entry point
+	// or another suitable identifier depending on the language.
+	// The identifier `opentelemetry` is reserved and MUST NOT be used in this
+	// case.
+	// All custom identifiers SHOULD be stable across different versions of an
+	// implementation.
+	TelemetrySDKNameKey = attribute.Key("telemetry.sdk.name")
+
+	// TelemetrySDKVersionKey is the attribute Key conforming to the
+	// "telemetry.sdk.version" semantic conventions. It represents the version
+	// string of the telemetry SDK.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: '1.2.3'
+	TelemetrySDKVersionKey = attribute.Key("telemetry.sdk.version")
+)
+
+var (
+	// cpp
+	TelemetrySDKLanguageCPP = TelemetrySDKLanguageKey.String("cpp")
+	// dotnet
+	TelemetrySDKLanguageDotnet = TelemetrySDKLanguageKey.String("dotnet")
+	// erlang
+	TelemetrySDKLanguageErlang = TelemetrySDKLanguageKey.String("erlang")
+	// go
+	TelemetrySDKLanguageGo = TelemetrySDKLanguageKey.String("go")
+	// java
+	TelemetrySDKLanguageJava = TelemetrySDKLanguageKey.String("java")
+	// nodejs
+	TelemetrySDKLanguageNodejs = TelemetrySDKLanguageKey.String("nodejs")
+	// php
+	TelemetrySDKLanguagePHP = TelemetrySDKLanguageKey.String("php")
+	// python
+	TelemetrySDKLanguagePython = TelemetrySDKLanguageKey.String("python")
+	// ruby
+	TelemetrySDKLanguageRuby = TelemetrySDKLanguageKey.String("ruby")
+	// rust
+	TelemetrySDKLanguageRust = TelemetrySDKLanguageKey.String("rust")
+	// swift
+	TelemetrySDKLanguageSwift = TelemetrySDKLanguageKey.String("swift")
+	// webjs
+	TelemetrySDKLanguageWebjs = TelemetrySDKLanguageKey.String("webjs")
+)
+
+// TelemetrySDKName returns an attribute KeyValue conforming to the
+// "telemetry.sdk.name" semantic conventions. It represents the name of the
+// telemetry SDK as defined above.
+func TelemetrySDKName(val string) attribute.KeyValue {
+	return TelemetrySDKNameKey.String(val)
+}
+
+// TelemetrySDKVersion returns an attribute KeyValue conforming to the
+// "telemetry.sdk.version" semantic conventions. It represents the version
+// string of the telemetry SDK.
+func TelemetrySDKVersion(val string) attribute.KeyValue {
+	return TelemetrySDKVersionKey.String(val)
+}
+
+// The telemetry SDK used to capture data recorded by the instrumentation
+// libraries.
+const (
+	// TelemetryDistroNameKey is the attribute Key conforming to the
+	// "telemetry.distro.name" semantic conventions. It represents the name of
+	// the auto instrumentation agent or distribution, if used.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'parts-unlimited-java'
+	// Note: Official auto instrumentation agents and distributions SHOULD set
+	// the `telemetry.distro.name` attribute to
+	// a string starting with `opentelemetry-`, e.g.
+	// `opentelemetry-java-instrumentation`.
+	TelemetryDistroNameKey = attribute.Key("telemetry.distro.name")
+
+	// TelemetryDistroVersionKey is the attribute Key conforming to the
+	// "telemetry.distro.version" semantic conventions. It represents the
+	// version string of the auto instrumentation agent or distribution, if
+	// used.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '1.2.3'
+	TelemetryDistroVersionKey = attribute.Key("telemetry.distro.version")
+)
+
+// TelemetryDistroName returns an attribute KeyValue conforming to the
+// "telemetry.distro.name" semantic conventions. It represents the name of the
+// auto instrumentation agent or distribution, if used.
+func TelemetryDistroName(val string) attribute.KeyValue {
+	return TelemetryDistroNameKey.String(val)
+}
+
+// TelemetryDistroVersion returns an attribute KeyValue conforming to the
+// "telemetry.distro.version" semantic conventions. It represents the version
+// string of the auto instrumentation agent or distribution, if used.
+func TelemetryDistroVersion(val string) attribute.KeyValue {
+	return TelemetryDistroVersionKey.String(val)
+}
+
+// Resource describing the packaged software running the application code. Web
+// engines are typically executed using process.runtime.
+const (
+	// WebEngineDescriptionKey is the attribute Key conforming to the
+	// "webengine.description" semantic conventions. It represents the
+	// additional description of the web engine (e.g. detailed version and
+	// edition information).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'WildFly Full 21.0.0.Final (WildFly Core 13.0.1.Final) -
+	// 2.2.2.Final'
+	WebEngineDescriptionKey = attribute.Key("webengine.description")
+
+	// WebEngineNameKey is the attribute Key conforming to the "webengine.name"
+	// semantic conventions. It represents the name of the web engine.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'WildFly'
+	WebEngineNameKey = attribute.Key("webengine.name")
+
+	// WebEngineVersionKey is the attribute Key conforming to the
+	// "webengine.version" semantic conventions. It represents the version of
+	// the web engine.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '21.0.0'
+	WebEngineVersionKey = attribute.Key("webengine.version")
+)
+
+// WebEngineDescription returns an attribute KeyValue conforming to the
+// "webengine.description" semantic conventions. It represents the additional
+// description of the web engine (e.g. detailed version and edition
+// information).
+func WebEngineDescription(val string) attribute.KeyValue {
+	return WebEngineDescriptionKey.String(val)
+}
+
+// WebEngineName returns an attribute KeyValue conforming to the
+// "webengine.name" semantic conventions. It represents the name of the web
+// engine.
+func WebEngineName(val string) attribute.KeyValue {
+	return WebEngineNameKey.String(val)
+}
+
+// WebEngineVersion returns an attribute KeyValue conforming to the
+// "webengine.version" semantic conventions. It represents the version of the
+// web engine.
+func WebEngineVersion(val string) attribute.KeyValue {
+	return WebEngineVersionKey.String(val)
+}
+
+// Attributes used by non-OTLP exporters to represent OpenTelemetry Scope's
+// concepts.
+const (
+	// OTelScopeNameKey is the attribute Key conforming to the
+	// "otel.scope.name" semantic conventions. It represents the name of the
+	// instrumentation scope - (`InstrumentationScope.Name` in OTLP).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'io.opentelemetry.contrib.mongodb'
+	OTelScopeNameKey = attribute.Key("otel.scope.name")
+
+	// OTelScopeVersionKey is the attribute Key conforming to the
+	// "otel.scope.version" semantic conventions. It represents the version of
+	// the instrumentation scope - (`InstrumentationScope.Version` in OTLP).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '1.0.0'
+	OTelScopeVersionKey = attribute.Key("otel.scope.version")
+)
+
+// OTelScopeName returns an attribute KeyValue conforming to the
+// "otel.scope.name" semantic conventions. It represents the name of the
+// instrumentation scope - (`InstrumentationScope.Name` in OTLP).
+func OTelScopeName(val string) attribute.KeyValue {
+	return OTelScopeNameKey.String(val)
+}
+
+// OTelScopeVersion returns an attribute KeyValue conforming to the
+// "otel.scope.version" semantic conventions. It represents the version of the
+// instrumentation scope - (`InstrumentationScope.Version` in OTLP).
+func OTelScopeVersion(val string) attribute.KeyValue {
+	return OTelScopeVersionKey.String(val)
+}
+
+// Span attributes used by non-OTLP exporters to represent OpenTelemetry
+// Scope's concepts.
+const (
+	// OTelLibraryNameKey is the attribute Key conforming to the
+	// "otel.library.name" semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: 'io.opentelemetry.contrib.mongodb'
+	// Deprecated: use the `otel.scope.name` attribute.
+	OTelLibraryNameKey = attribute.Key("otel.library.name")
+
+	// OTelLibraryVersionKey is the attribute Key conforming to the
+	// "otel.library.version" semantic conventions.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: deprecated
+	// Examples: '1.0.0'
+	// Deprecated: use the `otel.scope.version` attribute.
+	OTelLibraryVersionKey = attribute.Key("otel.library.version")
+)
+
+// OTelLibraryName returns an attribute KeyValue conforming to the
+// "otel.library.name" semantic conventions.
+//
+// Deprecated: use the `otel.scope.name` attribute.
+func OTelLibraryName(val string) attribute.KeyValue {
+	return OTelLibraryNameKey.String(val)
+}
+
+// OTelLibraryVersion returns an attribute KeyValue conforming to the
+// "otel.library.version" semantic conventions.
+//
+// Deprecated: use the `otel.scope.version` attribute.
+func OTelLibraryVersion(val string) attribute.KeyValue {
+	return OTelLibraryVersionKey.String(val)
+}
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/schema.go b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/schema.go
new file mode 100644
index 00000000000..9733ce888a0
--- /dev/null
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/schema.go
@@ -0,0 +1,20 @@
+// Copyright The OpenTelemetry Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.24.0"
+
+// SchemaURL is the schema URL that matches the version of the semantic conventions
+// that this package defines. Semconv packages starting from v1.4.0 must declare
+// non-empty schema URL in the form https://opentelemetry.io/schemas/<version>
+const SchemaURL = "https://opentelemetry.io/schemas/1.24.0"
diff --git a/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/trace.go b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/trace.go
new file mode 100644
index 00000000000..397174818b7
--- /dev/null
+++ b/vendor/go.opentelemetry.io/otel/semconv/v1.24.0/trace.go
@@ -0,0 +1,1334 @@
+// Copyright The OpenTelemetry Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// Code generated from semantic convention specification. DO NOT EDIT.
+
+package semconv // import "go.opentelemetry.io/otel/semconv/v1.24.0"
+
+import "go.opentelemetry.io/otel/attribute"
+
+// Operations that access some remote service.
+const (
+	// PeerServiceKey is the attribute Key conforming to the "peer.service"
+	// semantic conventions. It represents the
+	// [`service.name`](/docs/resource/README.md#service) of the remote
+	// service. SHOULD be equal to the actual `service.name` resource attribute
+	// of the remote service if any.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'AuthTokenCache'
+	PeerServiceKey = attribute.Key("peer.service")
+)
+
+// PeerService returns an attribute KeyValue conforming to the
+// "peer.service" semantic conventions. It represents the
+// [`service.name`](/docs/resource/README.md#service) of the remote service.
+// SHOULD be equal to the actual `service.name` resource attribute of the
+// remote service if any.
+func PeerService(val string) attribute.KeyValue {
+	return PeerServiceKey.String(val)
+}
+
+// These attributes may be used for any operation with an authenticated and/or
+// authorized enduser.
+const (
+	// EnduserIDKey is the attribute Key conforming to the "enduser.id"
+	// semantic conventions. It represents the username or client_id extracted
+	// from the access token or
+	// [Authorization](https://tools.ietf.org/html/rfc7235#section-4.2) header
+	// in the inbound request from outside the system.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'username'
+	EnduserIDKey = attribute.Key("enduser.id")
+
+	// EnduserRoleKey is the attribute Key conforming to the "enduser.role"
+	// semantic conventions. It represents the actual/assumed role the client
+	// is making the request under extracted from token or application security
+	// context.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'admin'
+	EnduserRoleKey = attribute.Key("enduser.role")
+
+	// EnduserScopeKey is the attribute Key conforming to the "enduser.scope"
+	// semantic conventions. It represents the scopes or granted authorities
+	// the client currently possesses extracted from token or application
+	// security context. The value would come from the scope associated with an
+	// [OAuth 2.0 Access
+	// Token](https://tools.ietf.org/html/rfc6749#section-3.3) or an attribute
+	// value in a [SAML 2.0
+	// Assertion](http://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-tech-overview-2.0.html).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'read:message, write:files'
+	EnduserScopeKey = attribute.Key("enduser.scope")
+)
+
+// EnduserID returns an attribute KeyValue conforming to the "enduser.id"
+// semantic conventions. It represents the username or client_id extracted from
+// the access token or
+// [Authorization](https://tools.ietf.org/html/rfc7235#section-4.2) header in
+// the inbound request from outside the system.
+func EnduserID(val string) attribute.KeyValue {
+	return EnduserIDKey.String(val)
+}
+
+// EnduserRole returns an attribute KeyValue conforming to the
+// "enduser.role" semantic conventions. It represents the actual/assumed role
+// the client is making the request under extracted from token or application
+// security context.
+func EnduserRole(val string) attribute.KeyValue {
+	return EnduserRoleKey.String(val)
+}
+
+// EnduserScope returns an attribute KeyValue conforming to the
+// "enduser.scope" semantic conventions. It represents the scopes or granted
+// authorities the client currently possesses extracted from token or
+// application security context. The value would come from the scope associated
+// with an [OAuth 2.0 Access
+// Token](https://tools.ietf.org/html/rfc6749#section-3.3) or an attribute
+// value in a [SAML 2.0
+// Assertion](http://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-tech-overview-2.0.html).
+func EnduserScope(val string) attribute.KeyValue {
+	return EnduserScopeKey.String(val)
+}
+
+// These attributes allow to report this unit of code and therefore to provide
+// more context about the span.
+const (
+	// CodeColumnKey is the attribute Key conforming to the "code.column"
+	// semantic conventions. It represents the column number in `code.filepath`
+	// best representing the operation. It SHOULD point within the code unit
+	// named in `code.function`.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 16
+	CodeColumnKey = attribute.Key("code.column")
+
+	// CodeFilepathKey is the attribute Key conforming to the "code.filepath"
+	// semantic conventions. It represents the source code file name that
+	// identifies the code unit as uniquely as possible (preferably an absolute
+	// file path).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '/usr/local/MyApplication/content_root/app/index.php'
+	CodeFilepathKey = attribute.Key("code.filepath")
+
+	// CodeFunctionKey is the attribute Key conforming to the "code.function"
+	// semantic conventions. It represents the method or function name, or
+	// equivalent (usually rightmost part of the code unit's name).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'serveRequest'
+	CodeFunctionKey = attribute.Key("code.function")
+
+	// CodeLineNumberKey is the attribute Key conforming to the "code.lineno"
+	// semantic conventions. It represents the line number in `code.filepath`
+	// best representing the operation. It SHOULD point within the code unit
+	// named in `code.function`.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 42
+	CodeLineNumberKey = attribute.Key("code.lineno")
+
+	// CodeNamespaceKey is the attribute Key conforming to the "code.namespace"
+	// semantic conventions. It represents the "namespace" within which
+	// `code.function` is defined. Usually the qualified class or module name,
+	// such that `code.namespace` + some separator + `code.function` form a
+	// unique identifier for the code unit.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'com.example.MyHTTPService'
+	CodeNamespaceKey = attribute.Key("code.namespace")
+
+	// CodeStacktraceKey is the attribute Key conforming to the
+	// "code.stacktrace" semantic conventions. It represents a stacktrace as a
+	// string in the natural representation for the language runtime. The
+	// representation is to be determined and documented by each language SIG.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'at
+	// com.example.GenerateTrace.methodB(GenerateTrace.java:13)\\n at '
+	//  'com.example.GenerateTrace.methodA(GenerateTrace.java:9)\\n at '
+	//  'com.example.GenerateTrace.main(GenerateTrace.java:5)'
+	CodeStacktraceKey = attribute.Key("code.stacktrace")
+)
+
+// CodeColumn returns an attribute KeyValue conforming to the "code.column"
+// semantic conventions. It represents the column number in `code.filepath`
+// best representing the operation. It SHOULD point within the code unit named
+// in `code.function`.
+func CodeColumn(val int) attribute.KeyValue {
+	return CodeColumnKey.Int(val)
+}
+
+// CodeFilepath returns an attribute KeyValue conforming to the
+// "code.filepath" semantic conventions. It represents the source code file
+// name that identifies the code unit as uniquely as possible (preferably an
+// absolute file path).
+func CodeFilepath(val string) attribute.KeyValue {
+	return CodeFilepathKey.String(val)
+}
+
+// CodeFunction returns an attribute KeyValue conforming to the
+// "code.function" semantic conventions. It represents the method or function
+// name, or equivalent (usually rightmost part of the code unit's name).
+func CodeFunction(val string) attribute.KeyValue {
+	return CodeFunctionKey.String(val)
+}
+
+// CodeLineNumber returns an attribute KeyValue conforming to the "code.lineno"
+// semantic conventions. It represents the line number in `code.filepath` best
+// representing the operation. It SHOULD point within the code unit named in
+// `code.function`.
+func CodeLineNumber(val int) attribute.KeyValue {
+	return CodeLineNumberKey.Int(val)
+}
+
+// CodeNamespace returns an attribute KeyValue conforming to the
+// "code.namespace" semantic conventions. It represents the "namespace" within
+// which `code.function` is defined. Usually the qualified class or module
+// name, such that `code.namespace` + some separator + `code.function` form a
+// unique identifier for the code unit.
+func CodeNamespace(val string) attribute.KeyValue {
+	return CodeNamespaceKey.String(val)
+}
+
+// CodeStacktrace returns an attribute KeyValue conforming to the
+// "code.stacktrace" semantic conventions. It represents a stacktrace as a
+// string in the natural representation for the language runtime. The
+// representation is to be determined and documented by each language SIG.
+func CodeStacktrace(val string) attribute.KeyValue {
+	return CodeStacktraceKey.String(val)
+}
+
+// These attributes may be used for any operation to store information about a
+// thread that started a span.
+const (
+	// ThreadIDKey is the attribute Key conforming to the "thread.id" semantic
+	// conventions. It represents the current "managed" thread ID (as opposed
+	// to OS thread ID).
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 42
+	ThreadIDKey = attribute.Key("thread.id")
+
+	// ThreadNameKey is the attribute Key conforming to the "thread.name"
+	// semantic conventions. It represents the current thread name.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'main'
+	ThreadNameKey = attribute.Key("thread.name")
+)
+
+// ThreadID returns an attribute KeyValue conforming to the "thread.id"
+// semantic conventions. It represents the current "managed" thread ID (as
+// opposed to OS thread ID).
+func ThreadID(val int) attribute.KeyValue {
+	return ThreadIDKey.Int(val)
+}
+
+// ThreadName returns an attribute KeyValue conforming to the "thread.name"
+// semantic conventions. It represents the current thread name.
+func ThreadName(val string) attribute.KeyValue {
+	return ThreadNameKey.String(val)
+}
+
+// Span attributes used by AWS Lambda (in addition to general `faas`
+// attributes).
+const (
+	// AWSLambdaInvokedARNKey is the attribute Key conforming to the
+	// "aws.lambda.invoked_arn" semantic conventions. It represents the full
+	// invoked ARN as provided on the `Context` passed to the function
+	// (`Lambda-Runtime-Invoked-Function-ARN` header on the
+	// `/runtime/invocation/next` applicable).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'arn:aws:lambda:us-east-1:123456:function:myfunction:myalias'
+	// Note: This may be different from `cloud.resource_id` if an alias is
+	// involved.
+	AWSLambdaInvokedARNKey = attribute.Key("aws.lambda.invoked_arn")
+)
+
+// AWSLambdaInvokedARN returns an attribute KeyValue conforming to the
+// "aws.lambda.invoked_arn" semantic conventions. It represents the full
+// invoked ARN as provided on the `Context` passed to the function
+// (`Lambda-Runtime-Invoked-Function-ARN` header on the
+// `/runtime/invocation/next` applicable).
+func AWSLambdaInvokedARN(val string) attribute.KeyValue {
+	return AWSLambdaInvokedARNKey.String(val)
+}
+
+// Attributes for CloudEvents. CloudEvents is a specification on how to define
+// event data in a standard way. These attributes can be attached to spans when
+// performing operations with CloudEvents, regardless of the protocol being
+// used.
+const (
+	// CloudeventsEventIDKey is the attribute Key conforming to the
+	// "cloudevents.event_id" semantic conventions. It represents the
+	// [event_id](https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md#id)
+	// uniquely identifies the event.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: '123e4567-e89b-12d3-a456-426614174000', '0001'
+	CloudeventsEventIDKey = attribute.Key("cloudevents.event_id")
+
+	// CloudeventsEventSourceKey is the attribute Key conforming to the
+	// "cloudevents.event_source" semantic conventions. It represents the
+	// [source](https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md#source-1)
+	// identifies the context in which an event happened.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'https://github.com/cloudevents',
+	// '/cloudevents/spec/pull/123', 'my-service'
+	CloudeventsEventSourceKey = attribute.Key("cloudevents.event_source")
+
+	// CloudeventsEventSpecVersionKey is the attribute Key conforming to the
+	// "cloudevents.event_spec_version" semantic conventions. It represents the
+	// [version of the CloudEvents
+	// specification](https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md#specversion)
+	// which the event uses.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '1.0'
+	CloudeventsEventSpecVersionKey = attribute.Key("cloudevents.event_spec_version")
+
+	// CloudeventsEventSubjectKey is the attribute Key conforming to the
+	// "cloudevents.event_subject" semantic conventions. It represents the
+	// [subject](https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md#subject)
+	// of the event in the context of the event producer (identified by
+	// source).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'mynewfile.jpg'
+	CloudeventsEventSubjectKey = attribute.Key("cloudevents.event_subject")
+
+	// CloudeventsEventTypeKey is the attribute Key conforming to the
+	// "cloudevents.event_type" semantic conventions. It represents the
+	// [event_type](https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md#type)
+	// contains a value describing the type of event related to the originating
+	// occurrence.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'com.github.pull_request.opened',
+	// 'com.example.object.deleted.v2'
+	CloudeventsEventTypeKey = attribute.Key("cloudevents.event_type")
+)
+
+// CloudeventsEventID returns an attribute KeyValue conforming to the
+// "cloudevents.event_id" semantic conventions. It represents the
+// [event_id](https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md#id)
+// uniquely identifies the event.
+func CloudeventsEventID(val string) attribute.KeyValue {
+	return CloudeventsEventIDKey.String(val)
+}
+
+// CloudeventsEventSource returns an attribute KeyValue conforming to the
+// "cloudevents.event_source" semantic conventions. It represents the
+// [source](https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md#source-1)
+// identifies the context in which an event happened.
+func CloudeventsEventSource(val string) attribute.KeyValue {
+	return CloudeventsEventSourceKey.String(val)
+}
+
+// CloudeventsEventSpecVersion returns an attribute KeyValue conforming to
+// the "cloudevents.event_spec_version" semantic conventions. It represents the
+// [version of the CloudEvents
+// specification](https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md#specversion)
+// which the event uses.
+func CloudeventsEventSpecVersion(val string) attribute.KeyValue {
+	return CloudeventsEventSpecVersionKey.String(val)
+}
+
+// CloudeventsEventSubject returns an attribute KeyValue conforming to the
+// "cloudevents.event_subject" semantic conventions. It represents the
+// [subject](https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md#subject)
+// of the event in the context of the event producer (identified by source).
+func CloudeventsEventSubject(val string) attribute.KeyValue {
+	return CloudeventsEventSubjectKey.String(val)
+}
+
+// CloudeventsEventType returns an attribute KeyValue conforming to the
+// "cloudevents.event_type" semantic conventions. It represents the
+// [event_type](https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md#type)
+// contains a value describing the type of event related to the originating
+// occurrence.
+func CloudeventsEventType(val string) attribute.KeyValue {
+	return CloudeventsEventTypeKey.String(val)
+}
+
+// Semantic conventions for the OpenTracing Shim
+const (
+	// OpentracingRefTypeKey is the attribute Key conforming to the
+	// "opentracing.ref_type" semantic conventions. It represents the
+	// parent-child Reference type
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Note: The causal relationship between a child Span and a parent Span.
+	OpentracingRefTypeKey = attribute.Key("opentracing.ref_type")
+)
+
+var (
+	// The parent Span depends on the child Span in some capacity
+	OpentracingRefTypeChildOf = OpentracingRefTypeKey.String("child_of")
+	// The parent Span doesn't depend in any way on the result of the child Span
+	OpentracingRefTypeFollowsFrom = OpentracingRefTypeKey.String("follows_from")
+)
+
+// Span attributes used by non-OTLP exporters to represent OpenTelemetry Span's
+// concepts.
+const (
+	// OTelStatusCodeKey is the attribute Key conforming to the
+	// "otel.status_code" semantic conventions. It represents the name of the
+	// code, either "OK" or "ERROR". MUST NOT be set if the status code is
+	// UNSET.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	OTelStatusCodeKey = attribute.Key("otel.status_code")
+
+	// OTelStatusDescriptionKey is the attribute Key conforming to the
+	// "otel.status_description" semantic conventions. It represents the
+	// description of the Status if it has a value, otherwise not set.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'resource not found'
+	OTelStatusDescriptionKey = attribute.Key("otel.status_description")
+)
+
+var (
+	// The operation has been validated by an Application developer or Operator to have completed successfully
+	OTelStatusCodeOk = OTelStatusCodeKey.String("OK")
+	// The operation contains an error
+	OTelStatusCodeError = OTelStatusCodeKey.String("ERROR")
+)
+
+// OTelStatusDescription returns an attribute KeyValue conforming to the
+// "otel.status_description" semantic conventions. It represents the
+// description of the Status if it has a value, otherwise not set.
+func OTelStatusDescription(val string) attribute.KeyValue {
+	return OTelStatusDescriptionKey.String(val)
+}
+
+// This semantic convention describes an instance of a function that runs
+// without provisioning or managing of servers (also known as serverless
+// functions or Function as a Service (FaaS)) with spans.
+const (
+	// FaaSInvocationIDKey is the attribute Key conforming to the
+	// "faas.invocation_id" semantic conventions. It represents the invocation
+	// ID of the current function invocation.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'af9d5aa4-a685-4c5f-a22b-444f80b3cc28'
+	FaaSInvocationIDKey = attribute.Key("faas.invocation_id")
+)
+
+// FaaSInvocationID returns an attribute KeyValue conforming to the
+// "faas.invocation_id" semantic conventions. It represents the invocation ID
+// of the current function invocation.
+func FaaSInvocationID(val string) attribute.KeyValue {
+	return FaaSInvocationIDKey.String(val)
+}
+
+// Semantic Convention for FaaS triggered as a response to some data source
+// operation such as a database or filesystem read/write.
+const (
+	// FaaSDocumentCollectionKey is the attribute Key conforming to the
+	// "faas.document.collection" semantic conventions. It represents the name
+	// of the source on which the triggering operation was performed. For
+	// example, in Cloud Storage or S3 corresponds to the bucket name, and in
+	// Cosmos DB to the database name.
+	//
+	// Type: string
+	// RequirementLevel: Required
+	// Stability: experimental
+	// Examples: 'myBucketName', 'myDBName'
+	FaaSDocumentCollectionKey = attribute.Key("faas.document.collection")
+
+	// FaaSDocumentNameKey is the attribute Key conforming to the
+	// "faas.document.name" semantic conventions. It represents the document
+	// name/table subjected to the operation. For example, in Cloud Storage or
+	// S3 is the name of the file, and in Cosmos DB the table name.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'myFile.txt', 'myTableName'
+	FaaSDocumentNameKey = attribute.Key("faas.document.name")
+
+	// FaaSDocumentOperationKey is the attribute Key conforming to the
+	// "faas.document.operation" semantic conventions. It represents the
+	// describes the type of the operation that was performed on the data.
+	//
+	// Type: Enum
+	// RequirementLevel: Required
+	// Stability: experimental
+	FaaSDocumentOperationKey = attribute.Key("faas.document.operation")
+
+	// FaaSDocumentTimeKey is the attribute Key conforming to the
+	// "faas.document.time" semantic conventions. It represents a string
+	// containing the time when the data was accessed in the [ISO
+	// 8601](https://www.iso.org/iso-8601-date-and-time-format.html) format
+	// expressed in [UTC](https://www.w3.org/TR/NOTE-datetime).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '2020-01-23T13:47:06Z'
+	FaaSDocumentTimeKey = attribute.Key("faas.document.time")
+)
+
+var (
+	// When a new object is created
+	FaaSDocumentOperationInsert = FaaSDocumentOperationKey.String("insert")
+	// When an object is modified
+	FaaSDocumentOperationEdit = FaaSDocumentOperationKey.String("edit")
+	// When an object is deleted
+	FaaSDocumentOperationDelete = FaaSDocumentOperationKey.String("delete")
+)
+
+// FaaSDocumentCollection returns an attribute KeyValue conforming to the
+// "faas.document.collection" semantic conventions. It represents the name of
+// the source on which the triggering operation was performed. For example, in
+// Cloud Storage or S3 corresponds to the bucket name, and in Cosmos DB to the
+// database name.
+func FaaSDocumentCollection(val string) attribute.KeyValue {
+	return FaaSDocumentCollectionKey.String(val)
+}
+
+// FaaSDocumentName returns an attribute KeyValue conforming to the
+// "faas.document.name" semantic conventions. It represents the document
+// name/table subjected to the operation. For example, in Cloud Storage or S3
+// is the name of the file, and in Cosmos DB the table name.
+func FaaSDocumentName(val string) attribute.KeyValue {
+	return FaaSDocumentNameKey.String(val)
+}
+
+// FaaSDocumentTime returns an attribute KeyValue conforming to the
+// "faas.document.time" semantic conventions. It represents a string containing
+// the time when the data was accessed in the [ISO
+// 8601](https://www.iso.org/iso-8601-date-and-time-format.html) format
+// expressed in [UTC](https://www.w3.org/TR/NOTE-datetime).
+func FaaSDocumentTime(val string) attribute.KeyValue {
+	return FaaSDocumentTimeKey.String(val)
+}
+
+// Semantic Convention for FaaS scheduled to be executed regularly.
+const (
+	// FaaSCronKey is the attribute Key conforming to the "faas.cron" semantic
+	// conventions. It represents a string containing the schedule period as
+	// [Cron
+	// Expression](https://docs.oracle.com/cd/E12058_01/doc/doc.1014/e12030/cron_expressions.htm).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '0/5 * * * ? *'
+	FaaSCronKey = attribute.Key("faas.cron")
+
+	// FaaSTimeKey is the attribute Key conforming to the "faas.time" semantic
+	// conventions. It represents a string containing the function invocation
+	// time in the [ISO
+	// 8601](https://www.iso.org/iso-8601-date-and-time-format.html) format
+	// expressed in [UTC](https://www.w3.org/TR/NOTE-datetime).
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '2020-01-23T13:47:06Z'
+	FaaSTimeKey = attribute.Key("faas.time")
+)
+
+// FaaSCron returns an attribute KeyValue conforming to the "faas.cron"
+// semantic conventions. It represents a string containing the schedule period
+// as [Cron
+// Expression](https://docs.oracle.com/cd/E12058_01/doc/doc.1014/e12030/cron_expressions.htm).
+func FaaSCron(val string) attribute.KeyValue {
+	return FaaSCronKey.String(val)
+}
+
+// FaaSTime returns an attribute KeyValue conforming to the "faas.time"
+// semantic conventions. It represents a string containing the function
+// invocation time in the [ISO
+// 8601](https://www.iso.org/iso-8601-date-and-time-format.html) format
+// expressed in [UTC](https://www.w3.org/TR/NOTE-datetime).
+func FaaSTime(val string) attribute.KeyValue {
+	return FaaSTimeKey.String(val)
+}
+
+// Contains additional attributes for incoming FaaS spans.
+const (
+	// FaaSColdstartKey is the attribute Key conforming to the "faas.coldstart"
+	// semantic conventions. It represents a boolean that is true if the
+	// serverless function is executed for the first time (aka cold-start).
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	FaaSColdstartKey = attribute.Key("faas.coldstart")
+)
+
+// FaaSColdstart returns an attribute KeyValue conforming to the
+// "faas.coldstart" semantic conventions. It represents a boolean that is true
+// if the serverless function is executed for the first time (aka cold-start).
+func FaaSColdstart(val bool) attribute.KeyValue {
+	return FaaSColdstartKey.Bool(val)
+}
+
+// The `aws` conventions apply to operations using the AWS SDK. They map
+// request or response parameters in AWS SDK API calls to attributes on a Span.
+// The conventions have been collected over time based on feedback from AWS
+// users of tracing and will continue to evolve as new interesting conventions
+// are found.
+// Some descriptions are also provided for populating general OpenTelemetry
+// semantic conventions based on these APIs.
+const (
+	// AWSRequestIDKey is the attribute Key conforming to the "aws.request_id"
+	// semantic conventions. It represents the AWS request ID as returned in
+	// the response headers `x-amz-request-id` or `x-amz-requestid`.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '79b9da39-b7ae-508a-a6bc-864b2829c622', 'C9ER4AJX75574TDJ'
+	AWSRequestIDKey = attribute.Key("aws.request_id")
+)
+
+// AWSRequestID returns an attribute KeyValue conforming to the
+// "aws.request_id" semantic conventions. It represents the AWS request ID as
+// returned in the response headers `x-amz-request-id` or `x-amz-requestid`.
+func AWSRequestID(val string) attribute.KeyValue {
+	return AWSRequestIDKey.String(val)
+}
+
+// Attributes that exist for multiple DynamoDB request types.
+const (
+	// AWSDynamoDBAttributesToGetKey is the attribute Key conforming to the
+	// "aws.dynamodb.attributes_to_get" semantic conventions. It represents the
+	// value of the `AttributesToGet` request parameter.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'lives', 'id'
+	AWSDynamoDBAttributesToGetKey = attribute.Key("aws.dynamodb.attributes_to_get")
+
+	// AWSDynamoDBConsistentReadKey is the attribute Key conforming to the
+	// "aws.dynamodb.consistent_read" semantic conventions. It represents the
+	// value of the `ConsistentRead` request parameter.
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	AWSDynamoDBConsistentReadKey = attribute.Key("aws.dynamodb.consistent_read")
+
+	// AWSDynamoDBConsumedCapacityKey is the attribute Key conforming to the
+	// "aws.dynamodb.consumed_capacity" semantic conventions. It represents the
+	// JSON-serialized value of each item in the `ConsumedCapacity` response
+	// field.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '{ "CapacityUnits": number, "GlobalSecondaryIndexes": {
+	// "string" : { "CapacityUnits": number, "ReadCapacityUnits": number,
+	// "WriteCapacityUnits": number } }, "LocalSecondaryIndexes": { "string" :
+	// { "CapacityUnits": number, "ReadCapacityUnits": number,
+	// "WriteCapacityUnits": number } }, "ReadCapacityUnits": number, "Table":
+	// { "CapacityUnits": number, "ReadCapacityUnits": number,
+	// "WriteCapacityUnits": number }, "TableName": "string",
+	// "WriteCapacityUnits": number }'
+	AWSDynamoDBConsumedCapacityKey = attribute.Key("aws.dynamodb.consumed_capacity")
+
+	// AWSDynamoDBIndexNameKey is the attribute Key conforming to the
+	// "aws.dynamodb.index_name" semantic conventions. It represents the value
+	// of the `IndexName` request parameter.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'name_to_group'
+	AWSDynamoDBIndexNameKey = attribute.Key("aws.dynamodb.index_name")
+
+	// AWSDynamoDBItemCollectionMetricsKey is the attribute Key conforming to
+	// the "aws.dynamodb.item_collection_metrics" semantic conventions. It
+	// represents the JSON-serialized value of the `ItemCollectionMetrics`
+	// response field.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '{ "string" : [ { "ItemCollectionKey": { "string" : { "B":
+	// blob, "BOOL": boolean, "BS": [ blob ], "L": [ "AttributeValue" ], "M": {
+	// "string" : "AttributeValue" }, "N": "string", "NS": [ "string" ],
+	// "NULL": boolean, "S": "string", "SS": [ "string" ] } },
+	// "SizeEstimateRangeGB": [ number ] } ] }'
+	AWSDynamoDBItemCollectionMetricsKey = attribute.Key("aws.dynamodb.item_collection_metrics")
+
+	// AWSDynamoDBLimitKey is the attribute Key conforming to the
+	// "aws.dynamodb.limit" semantic conventions. It represents the value of
+	// the `Limit` request parameter.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 10
+	AWSDynamoDBLimitKey = attribute.Key("aws.dynamodb.limit")
+
+	// AWSDynamoDBProjectionKey is the attribute Key conforming to the
+	// "aws.dynamodb.projection" semantic conventions. It represents the value
+	// of the `ProjectionExpression` request parameter.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Title', 'Title, Price, Color', 'Title, Description,
+	// RelatedItems, ProductReviews'
+	AWSDynamoDBProjectionKey = attribute.Key("aws.dynamodb.projection")
+
+	// AWSDynamoDBProvisionedReadCapacityKey is the attribute Key conforming to
+	// the "aws.dynamodb.provisioned_read_capacity" semantic conventions. It
+	// represents the value of the `ProvisionedThroughput.ReadCapacityUnits`
+	// request parameter.
+	//
+	// Type: double
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 1.0, 2.0
+	AWSDynamoDBProvisionedReadCapacityKey = attribute.Key("aws.dynamodb.provisioned_read_capacity")
+
+	// AWSDynamoDBProvisionedWriteCapacityKey is the attribute Key conforming
+	// to the "aws.dynamodb.provisioned_write_capacity" semantic conventions.
+	// It represents the value of the
+	// `ProvisionedThroughput.WriteCapacityUnits` request parameter.
+	//
+	// Type: double
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 1.0, 2.0
+	AWSDynamoDBProvisionedWriteCapacityKey = attribute.Key("aws.dynamodb.provisioned_write_capacity")
+
+	// AWSDynamoDBSelectKey is the attribute Key conforming to the
+	// "aws.dynamodb.select" semantic conventions. It represents the value of
+	// the `Select` request parameter.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'ALL_ATTRIBUTES', 'COUNT'
+	AWSDynamoDBSelectKey = attribute.Key("aws.dynamodb.select")
+
+	// AWSDynamoDBTableNamesKey is the attribute Key conforming to the
+	// "aws.dynamodb.table_names" semantic conventions. It represents the keys
+	// in the `RequestItems` object field.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Users', 'Cats'
+	AWSDynamoDBTableNamesKey = attribute.Key("aws.dynamodb.table_names")
+)
+
+// AWSDynamoDBAttributesToGet returns an attribute KeyValue conforming to
+// the "aws.dynamodb.attributes_to_get" semantic conventions. It represents the
+// value of the `AttributesToGet` request parameter.
+func AWSDynamoDBAttributesToGet(val ...string) attribute.KeyValue {
+	return AWSDynamoDBAttributesToGetKey.StringSlice(val)
+}
+
+// AWSDynamoDBConsistentRead returns an attribute KeyValue conforming to the
+// "aws.dynamodb.consistent_read" semantic conventions. It represents the value
+// of the `ConsistentRead` request parameter.
+func AWSDynamoDBConsistentRead(val bool) attribute.KeyValue {
+	return AWSDynamoDBConsistentReadKey.Bool(val)
+}
+
+// AWSDynamoDBConsumedCapacity returns an attribute KeyValue conforming to
+// the "aws.dynamodb.consumed_capacity" semantic conventions. It represents the
+// JSON-serialized value of each item in the `ConsumedCapacity` response field.
+func AWSDynamoDBConsumedCapacity(val ...string) attribute.KeyValue {
+	return AWSDynamoDBConsumedCapacityKey.StringSlice(val)
+}
+
+// AWSDynamoDBIndexName returns an attribute KeyValue conforming to the
+// "aws.dynamodb.index_name" semantic conventions. It represents the value of
+// the `IndexName` request parameter.
+func AWSDynamoDBIndexName(val string) attribute.KeyValue {
+	return AWSDynamoDBIndexNameKey.String(val)
+}
+
+// AWSDynamoDBItemCollectionMetrics returns an attribute KeyValue conforming
+// to the "aws.dynamodb.item_collection_metrics" semantic conventions. It
+// represents the JSON-serialized value of the `ItemCollectionMetrics` response
+// field.
+func AWSDynamoDBItemCollectionMetrics(val string) attribute.KeyValue {
+	return AWSDynamoDBItemCollectionMetricsKey.String(val)
+}
+
+// AWSDynamoDBLimit returns an attribute KeyValue conforming to the
+// "aws.dynamodb.limit" semantic conventions. It represents the value of the
+// `Limit` request parameter.
+func AWSDynamoDBLimit(val int) attribute.KeyValue {
+	return AWSDynamoDBLimitKey.Int(val)
+}
+
+// AWSDynamoDBProjection returns an attribute KeyValue conforming to the
+// "aws.dynamodb.projection" semantic conventions. It represents the value of
+// the `ProjectionExpression` request parameter.
+func AWSDynamoDBProjection(val string) attribute.KeyValue {
+	return AWSDynamoDBProjectionKey.String(val)
+}
+
+// AWSDynamoDBProvisionedReadCapacity returns an attribute KeyValue
+// conforming to the "aws.dynamodb.provisioned_read_capacity" semantic
+// conventions. It represents the value of the
+// `ProvisionedThroughput.ReadCapacityUnits` request parameter.
+func AWSDynamoDBProvisionedReadCapacity(val float64) attribute.KeyValue {
+	return AWSDynamoDBProvisionedReadCapacityKey.Float64(val)
+}
+
+// AWSDynamoDBProvisionedWriteCapacity returns an attribute KeyValue
+// conforming to the "aws.dynamodb.provisioned_write_capacity" semantic
+// conventions. It represents the value of the
+// `ProvisionedThroughput.WriteCapacityUnits` request parameter.
+func AWSDynamoDBProvisionedWriteCapacity(val float64) attribute.KeyValue {
+	return AWSDynamoDBProvisionedWriteCapacityKey.Float64(val)
+}
+
+// AWSDynamoDBSelect returns an attribute KeyValue conforming to the
+// "aws.dynamodb.select" semantic conventions. It represents the value of the
+// `Select` request parameter.
+func AWSDynamoDBSelect(val string) attribute.KeyValue {
+	return AWSDynamoDBSelectKey.String(val)
+}
+
+// AWSDynamoDBTableNames returns an attribute KeyValue conforming to the
+// "aws.dynamodb.table_names" semantic conventions. It represents the keys in
+// the `RequestItems` object field.
+func AWSDynamoDBTableNames(val ...string) attribute.KeyValue {
+	return AWSDynamoDBTableNamesKey.StringSlice(val)
+}
+
+// DynamoDB.CreateTable
+const (
+	// AWSDynamoDBGlobalSecondaryIndexesKey is the attribute Key conforming to
+	// the "aws.dynamodb.global_secondary_indexes" semantic conventions. It
+	// represents the JSON-serialized value of each item of the
+	// `GlobalSecondaryIndexes` request field
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '{ "IndexName": "string", "KeySchema": [ { "AttributeName":
+	// "string", "KeyType": "string" } ], "Projection": { "NonKeyAttributes": [
+	// "string" ], "ProjectionType": "string" }, "ProvisionedThroughput": {
+	// "ReadCapacityUnits": number, "WriteCapacityUnits": number } }'
+	AWSDynamoDBGlobalSecondaryIndexesKey = attribute.Key("aws.dynamodb.global_secondary_indexes")
+
+	// AWSDynamoDBLocalSecondaryIndexesKey is the attribute Key conforming to
+	// the "aws.dynamodb.local_secondary_indexes" semantic conventions. It
+	// represents the JSON-serialized value of each item of the
+	// `LocalSecondaryIndexes` request field.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '{ "IndexARN": "string", "IndexName": "string",
+	// "IndexSizeBytes": number, "ItemCount": number, "KeySchema": [ {
+	// "AttributeName": "string", "KeyType": "string" } ], "Projection": {
+	// "NonKeyAttributes": [ "string" ], "ProjectionType": "string" } }'
+	AWSDynamoDBLocalSecondaryIndexesKey = attribute.Key("aws.dynamodb.local_secondary_indexes")
+)
+
+// AWSDynamoDBGlobalSecondaryIndexes returns an attribute KeyValue
+// conforming to the "aws.dynamodb.global_secondary_indexes" semantic
+// conventions. It represents the JSON-serialized value of each item of the
+// `GlobalSecondaryIndexes` request field
+func AWSDynamoDBGlobalSecondaryIndexes(val ...string) attribute.KeyValue {
+	return AWSDynamoDBGlobalSecondaryIndexesKey.StringSlice(val)
+}
+
+// AWSDynamoDBLocalSecondaryIndexes returns an attribute KeyValue conforming
+// to the "aws.dynamodb.local_secondary_indexes" semantic conventions. It
+// represents the JSON-serialized value of each item of the
+// `LocalSecondaryIndexes` request field.
+func AWSDynamoDBLocalSecondaryIndexes(val ...string) attribute.KeyValue {
+	return AWSDynamoDBLocalSecondaryIndexesKey.StringSlice(val)
+}
+
+// DynamoDB.ListTables
+const (
+	// AWSDynamoDBExclusiveStartTableKey is the attribute Key conforming to the
+	// "aws.dynamodb.exclusive_start_table" semantic conventions. It represents
+	// the value of the `ExclusiveStartTableName` request parameter.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'Users', 'CatsTable'
+	AWSDynamoDBExclusiveStartTableKey = attribute.Key("aws.dynamodb.exclusive_start_table")
+
+	// AWSDynamoDBTableCountKey is the attribute Key conforming to the
+	// "aws.dynamodb.table_count" semantic conventions. It represents the the
+	// number of items in the `TableNames` response parameter.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 20
+	AWSDynamoDBTableCountKey = attribute.Key("aws.dynamodb.table_count")
+)
+
+// AWSDynamoDBExclusiveStartTable returns an attribute KeyValue conforming
+// to the "aws.dynamodb.exclusive_start_table" semantic conventions. It
+// represents the value of the `ExclusiveStartTableName` request parameter.
+func AWSDynamoDBExclusiveStartTable(val string) attribute.KeyValue {
+	return AWSDynamoDBExclusiveStartTableKey.String(val)
+}
+
+// AWSDynamoDBTableCount returns an attribute KeyValue conforming to the
+// "aws.dynamodb.table_count" semantic conventions. It represents the the
+// number of items in the `TableNames` response parameter.
+func AWSDynamoDBTableCount(val int) attribute.KeyValue {
+	return AWSDynamoDBTableCountKey.Int(val)
+}
+
+// DynamoDB.Query
+const (
+	// AWSDynamoDBScanForwardKey is the attribute Key conforming to the
+	// "aws.dynamodb.scan_forward" semantic conventions. It represents the
+	// value of the `ScanIndexForward` request parameter.
+	//
+	// Type: boolean
+	// RequirementLevel: Optional
+	// Stability: experimental
+	AWSDynamoDBScanForwardKey = attribute.Key("aws.dynamodb.scan_forward")
+)
+
+// AWSDynamoDBScanForward returns an attribute KeyValue conforming to the
+// "aws.dynamodb.scan_forward" semantic conventions. It represents the value of
+// the `ScanIndexForward` request parameter.
+func AWSDynamoDBScanForward(val bool) attribute.KeyValue {
+	return AWSDynamoDBScanForwardKey.Bool(val)
+}
+
+// DynamoDB.Scan
+const (
+	// AWSDynamoDBCountKey is the attribute Key conforming to the
+	// "aws.dynamodb.count" semantic conventions. It represents the value of
+	// the `Count` response parameter.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 10
+	AWSDynamoDBCountKey = attribute.Key("aws.dynamodb.count")
+
+	// AWSDynamoDBScannedCountKey is the attribute Key conforming to the
+	// "aws.dynamodb.scanned_count" semantic conventions. It represents the
+	// value of the `ScannedCount` response parameter.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 50
+	AWSDynamoDBScannedCountKey = attribute.Key("aws.dynamodb.scanned_count")
+
+	// AWSDynamoDBSegmentKey is the attribute Key conforming to the
+	// "aws.dynamodb.segment" semantic conventions. It represents the value of
+	// the `Segment` request parameter.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 10
+	AWSDynamoDBSegmentKey = attribute.Key("aws.dynamodb.segment")
+
+	// AWSDynamoDBTotalSegmentsKey is the attribute Key conforming to the
+	// "aws.dynamodb.total_segments" semantic conventions. It represents the
+	// value of the `TotalSegments` request parameter.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 100
+	AWSDynamoDBTotalSegmentsKey = attribute.Key("aws.dynamodb.total_segments")
+)
+
+// AWSDynamoDBCount returns an attribute KeyValue conforming to the
+// "aws.dynamodb.count" semantic conventions. It represents the value of the
+// `Count` response parameter.
+func AWSDynamoDBCount(val int) attribute.KeyValue {
+	return AWSDynamoDBCountKey.Int(val)
+}
+
+// AWSDynamoDBScannedCount returns an attribute KeyValue conforming to the
+// "aws.dynamodb.scanned_count" semantic conventions. It represents the value
+// of the `ScannedCount` response parameter.
+func AWSDynamoDBScannedCount(val int) attribute.KeyValue {
+	return AWSDynamoDBScannedCountKey.Int(val)
+}
+
+// AWSDynamoDBSegment returns an attribute KeyValue conforming to the
+// "aws.dynamodb.segment" semantic conventions. It represents the value of the
+// `Segment` request parameter.
+func AWSDynamoDBSegment(val int) attribute.KeyValue {
+	return AWSDynamoDBSegmentKey.Int(val)
+}
+
+// AWSDynamoDBTotalSegments returns an attribute KeyValue conforming to the
+// "aws.dynamodb.total_segments" semantic conventions. It represents the value
+// of the `TotalSegments` request parameter.
+func AWSDynamoDBTotalSegments(val int) attribute.KeyValue {
+	return AWSDynamoDBTotalSegmentsKey.Int(val)
+}
+
+// DynamoDB.UpdateTable
+const (
+	// AWSDynamoDBAttributeDefinitionsKey is the attribute Key conforming to
+	// the "aws.dynamodb.attribute_definitions" semantic conventions. It
+	// represents the JSON-serialized value of each item in the
+	// `AttributeDefinitions` request field.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '{ "AttributeName": "string", "AttributeType": "string" }'
+	AWSDynamoDBAttributeDefinitionsKey = attribute.Key("aws.dynamodb.attribute_definitions")
+
+	// AWSDynamoDBGlobalSecondaryIndexUpdatesKey is the attribute Key
+	// conforming to the "aws.dynamodb.global_secondary_index_updates" semantic
+	// conventions. It represents the JSON-serialized value of each item in the
+	// the `GlobalSecondaryIndexUpdates` request field.
+	//
+	// Type: string[]
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: '{ "Create": { "IndexName": "string", "KeySchema": [ {
+	// "AttributeName": "string", "KeyType": "string" } ], "Projection": {
+	// "NonKeyAttributes": [ "string" ], "ProjectionType": "string" },
+	// "ProvisionedThroughput": { "ReadCapacityUnits": number,
+	// "WriteCapacityUnits": number } }'
+	AWSDynamoDBGlobalSecondaryIndexUpdatesKey = attribute.Key("aws.dynamodb.global_secondary_index_updates")
+)
+
+// AWSDynamoDBAttributeDefinitions returns an attribute KeyValue conforming
+// to the "aws.dynamodb.attribute_definitions" semantic conventions. It
+// represents the JSON-serialized value of each item in the
+// `AttributeDefinitions` request field.
+func AWSDynamoDBAttributeDefinitions(val ...string) attribute.KeyValue {
+	return AWSDynamoDBAttributeDefinitionsKey.StringSlice(val)
+}
+
+// AWSDynamoDBGlobalSecondaryIndexUpdates returns an attribute KeyValue
+// conforming to the "aws.dynamodb.global_secondary_index_updates" semantic
+// conventions. It represents the JSON-serialized value of each item in the the
+// `GlobalSecondaryIndexUpdates` request field.
+func AWSDynamoDBGlobalSecondaryIndexUpdates(val ...string) attribute.KeyValue {
+	return AWSDynamoDBGlobalSecondaryIndexUpdatesKey.StringSlice(val)
+}
+
+// Attributes that exist for S3 request types.
+const (
+	// AWSS3BucketKey is the attribute Key conforming to the "aws.s3.bucket"
+	// semantic conventions. It represents the S3 bucket name the request
+	// refers to. Corresponds to the `--bucket` parameter of the [S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/index.html)
+	// operations.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'some-bucket-name'
+	// Note: The `bucket` attribute is applicable to all S3 operations that
+	// reference a bucket, i.e. that require the bucket name as a mandatory
+	// parameter.
+	// This applies to almost all S3 operations except `list-buckets`.
+	AWSS3BucketKey = attribute.Key("aws.s3.bucket")
+
+	// AWSS3CopySourceKey is the attribute Key conforming to the
+	// "aws.s3.copy_source" semantic conventions. It represents the source
+	// object (in the form `bucket`/`key`) for the copy operation.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'someFile.yml'
+	// Note: The `copy_source` attribute applies to S3 copy operations and
+	// corresponds to the `--copy-source` parameter
+	// of the [copy-object operation within the S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/copy-object.html).
+	// This applies in particular to the following operations:
+	//
+	// -
+	// [copy-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/copy-object.html)
+	// -
+	// [upload-part-copy](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part-copy.html)
+	AWSS3CopySourceKey = attribute.Key("aws.s3.copy_source")
+
+	// AWSS3DeleteKey is the attribute Key conforming to the "aws.s3.delete"
+	// semantic conventions. It represents the delete request container that
+	// specifies the objects to be deleted.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples:
+	// 'Objects=[{Key=string,VersionID=string},{Key=string,VersionID=string}],Quiet=boolean'
+	// Note: The `delete` attribute is only applicable to the
+	// [delete-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/delete-object.html)
+	// operation.
+	// The `delete` attribute corresponds to the `--delete` parameter of the
+	// [delete-objects operation within the S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/delete-objects.html).
+	AWSS3DeleteKey = attribute.Key("aws.s3.delete")
+
+	// AWSS3KeyKey is the attribute Key conforming to the "aws.s3.key" semantic
+	// conventions. It represents the S3 object key the request refers to.
+	// Corresponds to the `--key` parameter of the [S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/index.html)
+	// operations.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'someFile.yml'
+	// Note: The `key` attribute is applicable to all object-related S3
+	// operations, i.e. that require the object key as a mandatory parameter.
+	// This applies in particular to the following operations:
+	//
+	// -
+	// [copy-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/copy-object.html)
+	// -
+	// [delete-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/delete-object.html)
+	// -
+	// [get-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/get-object.html)
+	// -
+	// [head-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/head-object.html)
+	// -
+	// [put-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/put-object.html)
+	// -
+	// [restore-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/restore-object.html)
+	// -
+	// [select-object-content](https://docs.aws.amazon.com/cli/latest/reference/s3api/select-object-content.html)
+	// -
+	// [abort-multipart-upload](https://docs.aws.amazon.com/cli/latest/reference/s3api/abort-multipart-upload.html)
+	// -
+	// [complete-multipart-upload](https://docs.aws.amazon.com/cli/latest/reference/s3api/complete-multipart-upload.html)
+	// -
+	// [create-multipart-upload](https://docs.aws.amazon.com/cli/latest/reference/s3api/create-multipart-upload.html)
+	// -
+	// [list-parts](https://docs.aws.amazon.com/cli/latest/reference/s3api/list-parts.html)
+	// -
+	// [upload-part](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part.html)
+	// -
+	// [upload-part-copy](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part-copy.html)
+	AWSS3KeyKey = attribute.Key("aws.s3.key")
+
+	// AWSS3PartNumberKey is the attribute Key conforming to the
+	// "aws.s3.part_number" semantic conventions. It represents the part number
+	// of the part being uploaded in a multipart-upload operation. This is a
+	// positive integer between 1 and 10,000.
+	//
+	// Type: int
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 3456
+	// Note: The `part_number` attribute is only applicable to the
+	// [upload-part](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part.html)
+	// and
+	// [upload-part-copy](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part-copy.html)
+	// operations.
+	// The `part_number` attribute corresponds to the `--part-number` parameter
+	// of the
+	// [upload-part operation within the S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part.html).
+	AWSS3PartNumberKey = attribute.Key("aws.s3.part_number")
+
+	// AWSS3UploadIDKey is the attribute Key conforming to the
+	// "aws.s3.upload_id" semantic conventions. It represents the upload ID
+	// that identifies the multipart upload.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'dfRtDYWFbkRONycy.Yxwh66Yjlx.cph0gtNBtJ'
+	// Note: The `upload_id` attribute applies to S3 multipart-upload
+	// operations and corresponds to the `--upload-id` parameter
+	// of the [S3
+	// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/index.html)
+	// multipart operations.
+	// This applies in particular to the following operations:
+	//
+	// -
+	// [abort-multipart-upload](https://docs.aws.amazon.com/cli/latest/reference/s3api/abort-multipart-upload.html)
+	// -
+	// [complete-multipart-upload](https://docs.aws.amazon.com/cli/latest/reference/s3api/complete-multipart-upload.html)
+	// -
+	// [list-parts](https://docs.aws.amazon.com/cli/latest/reference/s3api/list-parts.html)
+	// -
+	// [upload-part](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part.html)
+	// -
+	// [upload-part-copy](https://docs.aws.amazon.com/cli/latest/reference/s3api/upload-part-copy.html)
+	AWSS3UploadIDKey = attribute.Key("aws.s3.upload_id")
+)
+
+// AWSS3Bucket returns an attribute KeyValue conforming to the
+// "aws.s3.bucket" semantic conventions. It represents the S3 bucket name the
+// request refers to. Corresponds to the `--bucket` parameter of the [S3
+// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/index.html)
+// operations.
+func AWSS3Bucket(val string) attribute.KeyValue {
+	return AWSS3BucketKey.String(val)
+}
+
+// AWSS3CopySource returns an attribute KeyValue conforming to the
+// "aws.s3.copy_source" semantic conventions. It represents the source object
+// (in the form `bucket`/`key`) for the copy operation.
+func AWSS3CopySource(val string) attribute.KeyValue {
+	return AWSS3CopySourceKey.String(val)
+}
+
+// AWSS3Delete returns an attribute KeyValue conforming to the
+// "aws.s3.delete" semantic conventions. It represents the delete request
+// container that specifies the objects to be deleted.
+func AWSS3Delete(val string) attribute.KeyValue {
+	return AWSS3DeleteKey.String(val)
+}
+
+// AWSS3Key returns an attribute KeyValue conforming to the "aws.s3.key"
+// semantic conventions. It represents the S3 object key the request refers to.
+// Corresponds to the `--key` parameter of the [S3
+// API](https://docs.aws.amazon.com/cli/latest/reference/s3api/index.html)
+// operations.
+func AWSS3Key(val string) attribute.KeyValue {
+	return AWSS3KeyKey.String(val)
+}
+
+// AWSS3PartNumber returns an attribute KeyValue conforming to the
+// "aws.s3.part_number" semantic conventions. It represents the part number of
+// the part being uploaded in a multipart-upload operation. This is a positive
+// integer between 1 and 10,000.
+func AWSS3PartNumber(val int) attribute.KeyValue {
+	return AWSS3PartNumberKey.Int(val)
+}
+
+// AWSS3UploadID returns an attribute KeyValue conforming to the
+// "aws.s3.upload_id" semantic conventions. It represents the upload ID that
+// identifies the multipart upload.
+func AWSS3UploadID(val string) attribute.KeyValue {
+	return AWSS3UploadIDKey.String(val)
+}
+
+// Semantic conventions to apply when instrumenting the GraphQL implementation.
+// They map GraphQL operations to attributes on a Span.
+const (
+	// GraphqlDocumentKey is the attribute Key conforming to the
+	// "graphql.document" semantic conventions. It represents the GraphQL
+	// document being executed.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'query findBookByID { bookByID(id: ?) { name } }'
+	// Note: The value may be sanitized to exclude sensitive information.
+	GraphqlDocumentKey = attribute.Key("graphql.document")
+
+	// GraphqlOperationNameKey is the attribute Key conforming to the
+	// "graphql.operation.name" semantic conventions. It represents the name of
+	// the operation being executed.
+	//
+	// Type: string
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'findBookByID'
+	GraphqlOperationNameKey = attribute.Key("graphql.operation.name")
+
+	// GraphqlOperationTypeKey is the attribute Key conforming to the
+	// "graphql.operation.type" semantic conventions. It represents the type of
+	// the operation being executed.
+	//
+	// Type: Enum
+	// RequirementLevel: Optional
+	// Stability: experimental
+	// Examples: 'query', 'mutation', 'subscription'
+	GraphqlOperationTypeKey = attribute.Key("graphql.operation.type")
+)
+
+var (
+	// GraphQL query
+	GraphqlOperationTypeQuery = GraphqlOperationTypeKey.String("query")
+	// GraphQL mutation
+	GraphqlOperationTypeMutation = GraphqlOperationTypeKey.String("mutation")
+	// GraphQL subscription
+	GraphqlOperationTypeSubscription = GraphqlOperationTypeKey.String("subscription")
+)
+
+// GraphqlDocument returns an attribute KeyValue conforming to the
+// "graphql.document" semantic conventions. It represents the GraphQL document
+// being executed.
+func GraphqlDocument(val string) attribute.KeyValue {
+	return GraphqlDocumentKey.String(val)
+}
+
+// GraphqlOperationName returns an attribute KeyValue conforming to the
+// "graphql.operation.name" semantic conventions. It represents the name of the
+// operation being executed.
+func GraphqlOperationName(val string) attribute.KeyValue {
+	return GraphqlOperationNameKey.String(val)
+}
diff --git a/vendor/go.opentelemetry.io/otel/trace/tracestate.go b/vendor/go.opentelemetry.io/otel/trace/tracestate.go
index d1e47ca2faa..db936ba5b73 100644
--- a/vendor/go.opentelemetry.io/otel/trace/tracestate.go
+++ b/vendor/go.opentelemetry.io/otel/trace/tracestate.go
@@ -17,20 +17,14 @@ package trace // import "go.opentelemetry.io/otel/trace"
 import (
 	"encoding/json"
 	"fmt"
-	"regexp"
 	"strings"
 )
 
 const (
 	maxListMembers = 32
 
-	listDelimiter = ","
-
-	// based on the W3C Trace Context specification, see
-	// https://www.w3.org/TR/trace-context-1/#tracestate-header
-	noTenantKeyFormat   = `[a-z][_0-9a-z\-\*\/]*`
-	withTenantKeyFormat = `[a-z0-9][_0-9a-z\-\*\/]*@[a-z][_0-9a-z\-\*\/]*`
-	valueFormat         = `[\x20-\x2b\x2d-\x3c\x3e-\x7e]*[\x21-\x2b\x2d-\x3c\x3e-\x7e]`
+	listDelimiters  = ","
+	memberDelimiter = "="
 
 	errInvalidKey    errorConst = "invalid tracestate key"
 	errInvalidValue  errorConst = "invalid tracestate value"
@@ -39,43 +33,128 @@ const (
 	errDuplicate     errorConst = "duplicate list-member in tracestate"
 )
 
-var (
-	noTenantKeyRe   = regexp.MustCompile(`^` + noTenantKeyFormat + `$`)
-	withTenantKeyRe = regexp.MustCompile(`^` + withTenantKeyFormat + `$`)
-	valueRe         = regexp.MustCompile(`^` + valueFormat + `$`)
-	memberRe        = regexp.MustCompile(`^\s*((?:` + noTenantKeyFormat + `)|(?:` + withTenantKeyFormat + `))=(` + valueFormat + `)\s*$`)
-)
-
 type member struct {
 	Key   string
 	Value string
 }
 
-func newMember(key, value string) (member, error) {
-	if len(key) > 256 {
-		return member{}, fmt.Errorf("%w: %s", errInvalidKey, key)
+// according to (chr = %x20 / (nblk-char = %x21-2B / %x2D-3C / %x3E-7E) )
+// means (chr = %x20-2B / %x2D-3C / %x3E-7E) .
+func checkValueChar(v byte) bool {
+	return v >= '\x20' && v <= '\x7e' && v != '\x2c' && v != '\x3d'
+}
+
+// according to (nblk-chr = %x21-2B / %x2D-3C / %x3E-7E) .
+func checkValueLast(v byte) bool {
+	return v >= '\x21' && v <= '\x7e' && v != '\x2c' && v != '\x3d'
+}
+
+// based on the W3C Trace Context specification
+//
+//	value    = (0*255(chr)) nblk-chr
+//	nblk-chr = %x21-2B / %x2D-3C / %x3E-7E
+//	chr      = %x20 / nblk-chr
+//
+// see https://www.w3.org/TR/trace-context-1/#value
+func checkValue(val string) bool {
+	n := len(val)
+	if n == 0 || n > 256 {
+		return false
+	}
+	for i := 0; i < n-1; i++ {
+		if !checkValueChar(val[i]) {
+			return false
+		}
 	}
-	if !noTenantKeyRe.MatchString(key) {
-		if !withTenantKeyRe.MatchString(key) {
-			return member{}, fmt.Errorf("%w: %s", errInvalidKey, key)
+	return checkValueLast(val[n-1])
+}
+
+func checkKeyRemain(key string) bool {
+	// ( lcalpha / DIGIT / "_" / "-"/ "*" / "/" )
+	for _, v := range key {
+		if isAlphaNum(byte(v)) {
+			continue
 		}
-		atIndex := strings.LastIndex(key, "@")
-		if atIndex > 241 || len(key)-1-atIndex > 14 {
-			return member{}, fmt.Errorf("%w: %s", errInvalidKey, key)
+		switch v {
+		case '_', '-', '*', '/':
+			continue
 		}
+		return false
+	}
+	return true
+}
+
+// according to
+//
+//	simple-key = lcalpha (0*255( lcalpha / DIGIT / "_" / "-"/ "*" / "/" ))
+//	system-id = lcalpha (0*13( lcalpha / DIGIT / "_" / "-"/ "*" / "/" ))
+//
+// param n is remain part length, should be 255 in simple-key or 13 in system-id.
+func checkKeyPart(key string, n int) bool {
+	if len(key) == 0 {
+		return false
+	}
+	first := key[0] // key's first char
+	ret := len(key[1:]) <= n
+	ret = ret && first >= 'a' && first <= 'z'
+	return ret && checkKeyRemain(key[1:])
+}
+
+func isAlphaNum(c byte) bool {
+	if c >= 'a' && c <= 'z' {
+		return true
 	}
-	if len(value) > 256 || !valueRe.MatchString(value) {
-		return member{}, fmt.Errorf("%w: %s", errInvalidValue, value)
+	return c >= '0' && c <= '9'
+}
+
+// according to
+//
+//	tenant-id = ( lcalpha / DIGIT ) 0*240( lcalpha / DIGIT / "_" / "-"/ "*" / "/" )
+//
+// param n is remain part length, should be 240 exactly.
+func checkKeyTenant(key string, n int) bool {
+	if len(key) == 0 {
+		return false
+	}
+	return isAlphaNum(key[0]) && len(key[1:]) <= n && checkKeyRemain(key[1:])
+}
+
+// based on the W3C Trace Context specification
+//
+//	key = simple-key / multi-tenant-key
+//	simple-key = lcalpha (0*255( lcalpha / DIGIT / "_" / "-"/ "*" / "/" ))
+//	multi-tenant-key = tenant-id "@" system-id
+//	tenant-id = ( lcalpha / DIGIT ) (0*240( lcalpha / DIGIT / "_" / "-"/ "*" / "/" ))
+//	system-id = lcalpha (0*13( lcalpha / DIGIT / "_" / "-"/ "*" / "/" ))
+//	lcalpha    = %x61-7A ; a-z
+//
+// see https://www.w3.org/TR/trace-context-1/#tracestate-header.
+func checkKey(key string) bool {
+	tenant, system, ok := strings.Cut(key, "@")
+	if !ok {
+		return checkKeyPart(key, 255)
+	}
+	return checkKeyTenant(tenant, 240) && checkKeyPart(system, 13)
+}
+
+func newMember(key, value string) (member, error) {
+	if !checkKey(key) {
+		return member{}, errInvalidKey
+	}
+	if !checkValue(value) {
+		return member{}, errInvalidValue
 	}
 	return member{Key: key, Value: value}, nil
 }
 
 func parseMember(m string) (member, error) {
-	matches := memberRe.FindStringSubmatch(m)
-	if len(matches) != 3 {
+	key, val, ok := strings.Cut(m, memberDelimiter)
+	if !ok {
 		return member{}, fmt.Errorf("%w: %s", errInvalidMember, m)
 	}
-	result, e := newMember(matches[1], matches[2])
+	key = strings.TrimLeft(key, " \t")
+	val = strings.TrimRight(val, " \t")
+	result, e := newMember(key, val)
 	if e != nil {
 		return member{}, fmt.Errorf("%w: %s", errInvalidMember, m)
 	}
@@ -85,7 +164,7 @@ func parseMember(m string) (member, error) {
 // String encodes member into a string compliant with the W3C Trace Context
 // specification.
 func (m member) String() string {
-	return fmt.Sprintf("%s=%s", m.Key, m.Value)
+	return m.Key + "=" + m.Value
 }
 
 // TraceState provides additional vendor-specific trace identification
@@ -109,8 +188,8 @@ var _ json.Marshaler = TraceState{}
 // ParseTraceState attempts to decode a TraceState from the passed
 // string. It returns an error if the input is invalid according to the W3C
 // Trace Context specification.
-func ParseTraceState(tracestate string) (TraceState, error) {
-	if tracestate == "" {
+func ParseTraceState(ts string) (TraceState, error) {
+	if ts == "" {
 		return TraceState{}, nil
 	}
 
@@ -120,7 +199,9 @@ func ParseTraceState(tracestate string) (TraceState, error) {
 
 	var members []member
 	found := make(map[string]struct{})
-	for _, memberStr := range strings.Split(tracestate, listDelimiter) {
+	for ts != "" {
+		var memberStr string
+		memberStr, ts, _ = strings.Cut(ts, listDelimiters)
 		if len(memberStr) == 0 {
 			continue
 		}
@@ -153,11 +234,29 @@ func (ts TraceState) MarshalJSON() ([]byte, error) {
 // Trace Context specification. The returned string will be invalid if the
 // TraceState contains any invalid members.
 func (ts TraceState) String() string {
-	members := make([]string, len(ts.list))
-	for i, m := range ts.list {
-		members[i] = m.String()
+	if len(ts.list) == 0 {
+		return ""
+	}
+	var n int
+	n += len(ts.list)     // member delimiters: '='
+	n += len(ts.list) - 1 // list delimiters: ','
+	for _, mem := range ts.list {
+		n += len(mem.Key)
+		n += len(mem.Value)
 	}
-	return strings.Join(members, listDelimiter)
+
+	var sb strings.Builder
+	sb.Grow(n)
+	_, _ = sb.WriteString(ts.list[0].Key)
+	_ = sb.WriteByte('=')
+	_, _ = sb.WriteString(ts.list[0].Value)
+	for i := 1; i < len(ts.list); i++ {
+		_ = sb.WriteByte(listDelimiters[0])
+		_, _ = sb.WriteString(ts.list[i].Key)
+		_ = sb.WriteByte('=')
+		_, _ = sb.WriteString(ts.list[i].Value)
+	}
+	return sb.String()
 }
 
 // Get returns the value paired with key from the corresponding TraceState
@@ -189,15 +288,25 @@ func (ts TraceState) Insert(key, value string) (TraceState, error) {
 	if err != nil {
 		return ts, err
 	}
-
-	cTS := ts.Delete(key)
-	if cTS.Len()+1 <= maxListMembers {
-		cTS.list = append(cTS.list, member{})
+	n := len(ts.list)
+	found := n
+	for i := range ts.list {
+		if ts.list[i].Key == key {
+			found = i
+		}
+	}
+	cTS := TraceState{}
+	if found == n && n < maxListMembers {
+		cTS.list = make([]member, n+1)
+	} else {
+		cTS.list = make([]member, n)
 	}
-	// When the number of members exceeds capacity, drop the "right-most".
-	copy(cTS.list[1:], cTS.list)
 	cTS.list[0] = m
-
+	// When the number of members exceeds capacity, drop the "right-most".
+	copy(cTS.list[1:], ts.list[0:found])
+	if found < n {
+		copy(cTS.list[1+found:], ts.list[found+1:])
+	}
 	return cTS, nil
 }
 
diff --git a/vendor/go.opentelemetry.io/otel/version.go b/vendor/go.opentelemetry.io/otel/version.go
index e2f743585d1..c7aba1c3f44 100644
--- a/vendor/go.opentelemetry.io/otel/version.go
+++ b/vendor/go.opentelemetry.io/otel/version.go
@@ -16,5 +16,5 @@ package otel // import "go.opentelemetry.io/otel"
 
 // Version is the current release version of OpenTelemetry in use.
 func Version() string {
-	return "1.21.0"
+	return "1.22.0"
 }
diff --git a/vendor/go.opentelemetry.io/otel/versions.yaml b/vendor/go.opentelemetry.io/otel/versions.yaml
index 3c153c9d6fc..a9cfb80ae5c 100644
--- a/vendor/go.opentelemetry.io/otel/versions.yaml
+++ b/vendor/go.opentelemetry.io/otel/versions.yaml
@@ -14,7 +14,7 @@
 
 module-sets:
   stable-v1:
-    version: v1.21.0
+    version: v1.22.0
     modules:
       - go.opentelemetry.io/otel
       - go.opentelemetry.io/otel/bridge/opentracing
@@ -34,7 +34,7 @@ module-sets:
       - go.opentelemetry.io/otel/sdk/metric
       - go.opentelemetry.io/otel/trace
   experimental-metrics:
-    version: v0.44.0
+    version: v0.45.0
     modules:
       - go.opentelemetry.io/otel/bridge/opencensus
       - go.opentelemetry.io/otel/bridge/opencensus/test
diff --git a/vendor/golang.org/x/crypto/internal/poly1305/bits_compat.go b/vendor/golang.org/x/crypto/internal/poly1305/bits_compat.go
deleted file mode 100644
index d33c8890fc5..00000000000
--- a/vendor/golang.org/x/crypto/internal/poly1305/bits_compat.go
+++ /dev/null
@@ -1,39 +0,0 @@
-// Copyright 2019 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-//go:build !go1.13
-
-package poly1305
-
-// Generic fallbacks for the math/bits intrinsics, copied from
-// src/math/bits/bits.go. They were added in Go 1.12, but Add64 and Sum64 had
-// variable time fallbacks until Go 1.13.
-
-func bitsAdd64(x, y, carry uint64) (sum, carryOut uint64) {
-	sum = x + y + carry
-	carryOut = ((x & y) | ((x | y) &^ sum)) >> 63
-	return
-}
-
-func bitsSub64(x, y, borrow uint64) (diff, borrowOut uint64) {
-	diff = x - y - borrow
-	borrowOut = ((^x & y) | (^(x ^ y) & diff)) >> 63
-	return
-}
-
-func bitsMul64(x, y uint64) (hi, lo uint64) {
-	const mask32 = 1<<32 - 1
-	x0 := x & mask32
-	x1 := x >> 32
-	y0 := y & mask32
-	y1 := y >> 32
-	w0 := x0 * y0
-	t := x1*y0 + w0>>32
-	w1 := t & mask32
-	w2 := t >> 32
-	w1 += x0 * y1
-	hi = x1*y1 + w2 + w1>>32
-	lo = x * y
-	return
-}
diff --git a/vendor/golang.org/x/crypto/internal/poly1305/bits_go1.13.go b/vendor/golang.org/x/crypto/internal/poly1305/bits_go1.13.go
deleted file mode 100644
index 495c1fa6972..00000000000
--- a/vendor/golang.org/x/crypto/internal/poly1305/bits_go1.13.go
+++ /dev/null
@@ -1,21 +0,0 @@
-// Copyright 2019 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-//go:build go1.13
-
-package poly1305
-
-import "math/bits"
-
-func bitsAdd64(x, y, carry uint64) (sum, carryOut uint64) {
-	return bits.Add64(x, y, carry)
-}
-
-func bitsSub64(x, y, borrow uint64) (diff, borrowOut uint64) {
-	return bits.Sub64(x, y, borrow)
-}
-
-func bitsMul64(x, y uint64) (hi, lo uint64) {
-	return bits.Mul64(x, y)
-}
diff --git a/vendor/golang.org/x/crypto/internal/poly1305/sum_generic.go b/vendor/golang.org/x/crypto/internal/poly1305/sum_generic.go
index e041da5ea3e..ec2202bd7d5 100644
--- a/vendor/golang.org/x/crypto/internal/poly1305/sum_generic.go
+++ b/vendor/golang.org/x/crypto/internal/poly1305/sum_generic.go
@@ -7,7 +7,10 @@
 
 package poly1305
 
-import "encoding/binary"
+import (
+	"encoding/binary"
+	"math/bits"
+)
 
 // Poly1305 [RFC 7539] is a relatively simple algorithm: the authentication tag
 // for a 64 bytes message is approximately
@@ -114,13 +117,13 @@ type uint128 struct {
 }
 
 func mul64(a, b uint64) uint128 {
-	hi, lo := bitsMul64(a, b)
+	hi, lo := bits.Mul64(a, b)
 	return uint128{lo, hi}
 }
 
 func add128(a, b uint128) uint128 {
-	lo, c := bitsAdd64(a.lo, b.lo, 0)
-	hi, c := bitsAdd64(a.hi, b.hi, c)
+	lo, c := bits.Add64(a.lo, b.lo, 0)
+	hi, c := bits.Add64(a.hi, b.hi, c)
 	if c != 0 {
 		panic("poly1305: unexpected overflow")
 	}
@@ -155,8 +158,8 @@ func updateGeneric(state *macState, msg []byte) {
 		// hide leading zeroes. For full chunks, that's 1 << 128, so we can just
 		// add 1 to the most significant (2¹²⁸) limb, h2.
 		if len(msg) >= TagSize {
-			h0, c = bitsAdd64(h0, binary.LittleEndian.Uint64(msg[0:8]), 0)
-			h1, c = bitsAdd64(h1, binary.LittleEndian.Uint64(msg[8:16]), c)
+			h0, c = bits.Add64(h0, binary.LittleEndian.Uint64(msg[0:8]), 0)
+			h1, c = bits.Add64(h1, binary.LittleEndian.Uint64(msg[8:16]), c)
 			h2 += c + 1
 
 			msg = msg[TagSize:]
@@ -165,8 +168,8 @@ func updateGeneric(state *macState, msg []byte) {
 			copy(buf[:], msg)
 			buf[len(msg)] = 1
 
-			h0, c = bitsAdd64(h0, binary.LittleEndian.Uint64(buf[0:8]), 0)
-			h1, c = bitsAdd64(h1, binary.LittleEndian.Uint64(buf[8:16]), c)
+			h0, c = bits.Add64(h0, binary.LittleEndian.Uint64(buf[0:8]), 0)
+			h1, c = bits.Add64(h1, binary.LittleEndian.Uint64(buf[8:16]), c)
 			h2 += c
 
 			msg = nil
@@ -219,9 +222,9 @@ func updateGeneric(state *macState, msg []byte) {
 		m3 := h2r1
 
 		t0 := m0.lo
-		t1, c := bitsAdd64(m1.lo, m0.hi, 0)
-		t2, c := bitsAdd64(m2.lo, m1.hi, c)
-		t3, _ := bitsAdd64(m3.lo, m2.hi, c)
+		t1, c := bits.Add64(m1.lo, m0.hi, 0)
+		t2, c := bits.Add64(m2.lo, m1.hi, c)
+		t3, _ := bits.Add64(m3.lo, m2.hi, c)
 
 		// Now we have the result as 4 64-bit limbs, and we need to reduce it
 		// modulo 2¹³⁰ - 5. The special shape of this Crandall prime lets us do
@@ -243,14 +246,14 @@ func updateGeneric(state *macState, msg []byte) {
 
 		// To add c * 5 to h, we first add cc = c * 4, and then add (cc >> 2) = c.
 
-		h0, c = bitsAdd64(h0, cc.lo, 0)
-		h1, c = bitsAdd64(h1, cc.hi, c)
+		h0, c = bits.Add64(h0, cc.lo, 0)
+		h1, c = bits.Add64(h1, cc.hi, c)
 		h2 += c
 
 		cc = shiftRightBy2(cc)
 
-		h0, c = bitsAdd64(h0, cc.lo, 0)
-		h1, c = bitsAdd64(h1, cc.hi, c)
+		h0, c = bits.Add64(h0, cc.lo, 0)
+		h1, c = bits.Add64(h1, cc.hi, c)
 		h2 += c
 
 		// h2 is at most 3 + 1 + 1 = 5, making the whole of h at most
@@ -287,9 +290,9 @@ func finalize(out *[TagSize]byte, h *[3]uint64, s *[2]uint64) {
 	// in constant time, we compute t = h - (2¹³⁰ - 5), and select h as the
 	// result if the subtraction underflows, and t otherwise.
 
-	hMinusP0, b := bitsSub64(h0, p0, 0)
-	hMinusP1, b := bitsSub64(h1, p1, b)
-	_, b = bitsSub64(h2, p2, b)
+	hMinusP0, b := bits.Sub64(h0, p0, 0)
+	hMinusP1, b := bits.Sub64(h1, p1, b)
+	_, b = bits.Sub64(h2, p2, b)
 
 	// h = h if h < p else h - p
 	h0 = select64(b, h0, hMinusP0)
@@ -301,8 +304,8 @@ func finalize(out *[TagSize]byte, h *[3]uint64, s *[2]uint64) {
 	//
 	// by just doing a wide addition with the 128 low bits of h and discarding
 	// the overflow.
-	h0, c := bitsAdd64(h0, s[0], 0)
-	h1, _ = bitsAdd64(h1, s[1], c)
+	h0, c := bits.Add64(h0, s[0], 0)
+	h1, _ = bits.Add64(h1, s[1], c)
 
 	binary.LittleEndian.PutUint64(out[0:8], h0)
 	binary.LittleEndian.PutUint64(out[8:16], h1)
diff --git a/vendor/golang.org/x/exp/slices/slices.go b/vendor/golang.org/x/exp/slices/slices.go
index 5e8158bba86..46ceac34399 100644
--- a/vendor/golang.org/x/exp/slices/slices.go
+++ b/vendor/golang.org/x/exp/slices/slices.go
@@ -209,25 +209,37 @@ func Insert[S ~[]E, E any](s S, i int, v ...E) S {
 	return s
 }
 
+// clearSlice sets all elements up to the length of s to the zero value of E.
+// We may use the builtin clear func instead, and remove clearSlice, when upgrading
+// to Go 1.21+.
+func clearSlice[S ~[]E, E any](s S) {
+	var zero E
+	for i := range s {
+		s[i] = zero
+	}
+}
+
 // Delete removes the elements s[i:j] from s, returning the modified slice.
-// Delete panics if s[i:j] is not a valid slice of s.
-// Delete is O(len(s)-j), so if many items must be deleted, it is better to
+// Delete panics if j > len(s) or s[i:j] is not a valid slice of s.
+// Delete is O(len(s)-i), so if many items must be deleted, it is better to
 // make a single call deleting them all together than to delete one at a time.
-// Delete might not modify the elements s[len(s)-(j-i):len(s)]. If those
-// elements contain pointers you might consider zeroing those elements so that
-// objects they reference can be garbage collected.
+// Delete zeroes the elements s[len(s)-(j-i):len(s)].
 func Delete[S ~[]E, E any](s S, i, j int) S {
-	_ = s[i:j] // bounds check
+	_ = s[i:j:len(s)] // bounds check
 
-	return append(s[:i], s[j:]...)
+	if i == j {
+		return s
+	}
+
+	oldlen := len(s)
+	s = append(s[:i], s[j:]...)
+	clearSlice(s[len(s):oldlen]) // zero/nil out the obsolete elements, for GC
+	return s
 }
 
 // DeleteFunc removes any elements from s for which del returns true,
 // returning the modified slice.
-// When DeleteFunc removes m elements, it might not modify the elements
-// s[len(s)-m:len(s)]. If those elements contain pointers you might consider
-// zeroing those elements so that objects they reference can be garbage
-// collected.
+// DeleteFunc zeroes the elements between the new length and the original length.
 func DeleteFunc[S ~[]E, E any](s S, del func(E) bool) S {
 	i := IndexFunc(s, del)
 	if i == -1 {
@@ -240,11 +252,13 @@ func DeleteFunc[S ~[]E, E any](s S, del func(E) bool) S {
 			i++
 		}
 	}
+	clearSlice(s[i:]) // zero/nil out the obsolete elements, for GC
 	return s[:i]
 }
 
 // Replace replaces the elements s[i:j] by the given v, and returns the
 // modified slice. Replace panics if s[i:j] is not a valid slice of s.
+// When len(v) < (j-i), Replace zeroes the elements between the new length and the original length.
 func Replace[S ~[]E, E any](s S, i, j int, v ...E) S {
 	_ = s[i:j] // verify that i:j is a valid subslice
 
@@ -272,6 +286,7 @@ func Replace[S ~[]E, E any](s S, i, j int, v ...E) S {
 		if i+len(v) != j {
 			copy(r[i+len(v):], s[j:])
 		}
+		clearSlice(s[tot:]) // zero/nil out the obsolete elements, for GC
 		return r
 	}
 
@@ -345,9 +360,7 @@ func Clone[S ~[]E, E any](s S) S {
 // This is like the uniq command found on Unix.
 // Compact modifies the contents of the slice s and returns the modified slice,
 // which may have a smaller length.
-// When Compact discards m elements in total, it might not modify the elements
-// s[len(s)-m:len(s)]. If those elements contain pointers you might consider
-// zeroing those elements so that objects they reference can be garbage collected.
+// Compact zeroes the elements between the new length and the original length.
 func Compact[S ~[]E, E comparable](s S) S {
 	if len(s) < 2 {
 		return s
@@ -361,11 +374,13 @@ func Compact[S ~[]E, E comparable](s S) S {
 			i++
 		}
 	}
+	clearSlice(s[i:]) // zero/nil out the obsolete elements, for GC
 	return s[:i]
 }
 
 // CompactFunc is like [Compact] but uses an equality function to compare elements.
 // For runs of elements that compare equal, CompactFunc keeps the first one.
+// CompactFunc zeroes the elements between the new length and the original length.
 func CompactFunc[S ~[]E, E any](s S, eq func(E, E) bool) S {
 	if len(s) < 2 {
 		return s
@@ -379,6 +394,7 @@ func CompactFunc[S ~[]E, E any](s S, eq func(E, E) bool) S {
 			i++
 		}
 	}
+	clearSlice(s[i:]) // zero/nil out the obsolete elements, for GC
 	return s[:i]
 }
 
diff --git a/vendor/golang.org/x/net/context/context.go b/vendor/golang.org/x/net/context/context.go
deleted file mode 100644
index cf66309c4a8..00000000000
--- a/vendor/golang.org/x/net/context/context.go
+++ /dev/null
@@ -1,56 +0,0 @@
-// Copyright 2014 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-// Package context defines the Context type, which carries deadlines,
-// cancelation signals, and other request-scoped values across API boundaries
-// and between processes.
-// As of Go 1.7 this package is available in the standard library under the
-// name context.  https://golang.org/pkg/context.
-//
-// Incoming requests to a server should create a Context, and outgoing calls to
-// servers should accept a Context. The chain of function calls between must
-// propagate the Context, optionally replacing it with a modified copy created
-// using WithDeadline, WithTimeout, WithCancel, or WithValue.
-//
-// Programs that use Contexts should follow these rules to keep interfaces
-// consistent across packages and enable static analysis tools to check context
-// propagation:
-//
-// Do not store Contexts inside a struct type; instead, pass a Context
-// explicitly to each function that needs it. The Context should be the first
-// parameter, typically named ctx:
-//
-//	func DoSomething(ctx context.Context, arg Arg) error {
-//		// ... use ctx ...
-//	}
-//
-// Do not pass a nil Context, even if a function permits it. Pass context.TODO
-// if you are unsure about which Context to use.
-//
-// Use context Values only for request-scoped data that transits processes and
-// APIs, not for passing optional parameters to functions.
-//
-// The same Context may be passed to functions running in different goroutines;
-// Contexts are safe for simultaneous use by multiple goroutines.
-//
-// See http://blog.golang.org/context for example code for a server that uses
-// Contexts.
-package context // import "golang.org/x/net/context"
-
-// Background returns a non-nil, empty Context. It is never canceled, has no
-// values, and has no deadline. It is typically used by the main function,
-// initialization, and tests, and as the top-level Context for incoming
-// requests.
-func Background() Context {
-	return background
-}
-
-// TODO returns a non-nil, empty Context. Code should use context.TODO when
-// it's unclear which Context to use or it is not yet available (because the
-// surrounding function has not yet been extended to accept a Context
-// parameter).  TODO is recognized by static analysis tools that determine
-// whether Contexts are propagated correctly in a program.
-func TODO() Context {
-	return todo
-}
diff --git a/vendor/golang.org/x/net/context/go17.go b/vendor/golang.org/x/net/context/go17.go
deleted file mode 100644
index 0c1b8679376..00000000000
--- a/vendor/golang.org/x/net/context/go17.go
+++ /dev/null
@@ -1,72 +0,0 @@
-// Copyright 2016 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-//go:build go1.7
-
-package context
-
-import (
-	"context" // standard library's context, as of Go 1.7
-	"time"
-)
-
-var (
-	todo       = context.TODO()
-	background = context.Background()
-)
-
-// Canceled is the error returned by Context.Err when the context is canceled.
-var Canceled = context.Canceled
-
-// DeadlineExceeded is the error returned by Context.Err when the context's
-// deadline passes.
-var DeadlineExceeded = context.DeadlineExceeded
-
-// WithCancel returns a copy of parent with a new Done channel. The returned
-// context's Done channel is closed when the returned cancel function is called
-// or when the parent context's Done channel is closed, whichever happens first.
-//
-// Canceling this context releases resources associated with it, so code should
-// call cancel as soon as the operations running in this Context complete.
-func WithCancel(parent Context) (ctx Context, cancel CancelFunc) {
-	ctx, f := context.WithCancel(parent)
-	return ctx, f
-}
-
-// WithDeadline returns a copy of the parent context with the deadline adjusted
-// to be no later than d. If the parent's deadline is already earlier than d,
-// WithDeadline(parent, d) is semantically equivalent to parent. The returned
-// context's Done channel is closed when the deadline expires, when the returned
-// cancel function is called, or when the parent context's Done channel is
-// closed, whichever happens first.
-//
-// Canceling this context releases resources associated with it, so code should
-// call cancel as soon as the operations running in this Context complete.
-func WithDeadline(parent Context, deadline time.Time) (Context, CancelFunc) {
-	ctx, f := context.WithDeadline(parent, deadline)
-	return ctx, f
-}
-
-// WithTimeout returns WithDeadline(parent, time.Now().Add(timeout)).
-//
-// Canceling this context releases resources associated with it, so code should
-// call cancel as soon as the operations running in this Context complete:
-//
-//	func slowOperationWithTimeout(ctx context.Context) (Result, error) {
-//		ctx, cancel := context.WithTimeout(ctx, 100*time.Millisecond)
-//		defer cancel()  // releases resources if slowOperation completes before timeout elapses
-//		return slowOperation(ctx)
-//	}
-func WithTimeout(parent Context, timeout time.Duration) (Context, CancelFunc) {
-	return WithDeadline(parent, time.Now().Add(timeout))
-}
-
-// WithValue returns a copy of parent in which the value associated with key is
-// val.
-//
-// Use context Values only for request-scoped data that transits processes and
-// APIs, not for passing optional parameters to functions.
-func WithValue(parent Context, key interface{}, val interface{}) Context {
-	return context.WithValue(parent, key, val)
-}
diff --git a/vendor/golang.org/x/net/context/go19.go b/vendor/golang.org/x/net/context/go19.go
deleted file mode 100644
index e31e35a9045..00000000000
--- a/vendor/golang.org/x/net/context/go19.go
+++ /dev/null
@@ -1,20 +0,0 @@
-// Copyright 2017 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-//go:build go1.9
-
-package context
-
-import "context" // standard library's context, as of Go 1.7
-
-// A Context carries a deadline, a cancelation signal, and other values across
-// API boundaries.
-//
-// Context's methods may be called by multiple goroutines simultaneously.
-type Context = context.Context
-
-// A CancelFunc tells an operation to abandon its work.
-// A CancelFunc does not wait for the work to stop.
-// After the first call, subsequent calls to a CancelFunc do nothing.
-type CancelFunc = context.CancelFunc
diff --git a/vendor/golang.org/x/net/context/pre_go17.go b/vendor/golang.org/x/net/context/pre_go17.go
deleted file mode 100644
index 065ff3dfa52..00000000000
--- a/vendor/golang.org/x/net/context/pre_go17.go
+++ /dev/null
@@ -1,300 +0,0 @@
-// Copyright 2014 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-//go:build !go1.7
-
-package context
-
-import (
-	"errors"
-	"fmt"
-	"sync"
-	"time"
-)
-
-// An emptyCtx is never canceled, has no values, and has no deadline. It is not
-// struct{}, since vars of this type must have distinct addresses.
-type emptyCtx int
-
-func (*emptyCtx) Deadline() (deadline time.Time, ok bool) {
-	return
-}
-
-func (*emptyCtx) Done() <-chan struct{} {
-	return nil
-}
-
-func (*emptyCtx) Err() error {
-	return nil
-}
-
-func (*emptyCtx) Value(key interface{}) interface{} {
-	return nil
-}
-
-func (e *emptyCtx) String() string {
-	switch e {
-	case background:
-		return "context.Background"
-	case todo:
-		return "context.TODO"
-	}
-	return "unknown empty Context"
-}
-
-var (
-	background = new(emptyCtx)
-	todo       = new(emptyCtx)
-)
-
-// Canceled is the error returned by Context.Err when the context is canceled.
-var Canceled = errors.New("context canceled")
-
-// DeadlineExceeded is the error returned by Context.Err when the context's
-// deadline passes.
-var DeadlineExceeded = errors.New("context deadline exceeded")
-
-// WithCancel returns a copy of parent with a new Done channel. The returned
-// context's Done channel is closed when the returned cancel function is called
-// or when the parent context's Done channel is closed, whichever happens first.
-//
-// Canceling this context releases resources associated with it, so code should
-// call cancel as soon as the operations running in this Context complete.
-func WithCancel(parent Context) (ctx Context, cancel CancelFunc) {
-	c := newCancelCtx(parent)
-	propagateCancel(parent, c)
-	return c, func() { c.cancel(true, Canceled) }
-}
-
-// newCancelCtx returns an initialized cancelCtx.
-func newCancelCtx(parent Context) *cancelCtx {
-	return &cancelCtx{
-		Context: parent,
-		done:    make(chan struct{}),
-	}
-}
-
-// propagateCancel arranges for child to be canceled when parent is.
-func propagateCancel(parent Context, child canceler) {
-	if parent.Done() == nil {
-		return // parent is never canceled
-	}
-	if p, ok := parentCancelCtx(parent); ok {
-		p.mu.Lock()
-		if p.err != nil {
-			// parent has already been canceled
-			child.cancel(false, p.err)
-		} else {
-			if p.children == nil {
-				p.children = make(map[canceler]bool)
-			}
-			p.children[child] = true
-		}
-		p.mu.Unlock()
-	} else {
-		go func() {
-			select {
-			case <-parent.Done():
-				child.cancel(false, parent.Err())
-			case <-child.Done():
-			}
-		}()
-	}
-}
-
-// parentCancelCtx follows a chain of parent references until it finds a
-// *cancelCtx. This function understands how each of the concrete types in this
-// package represents its parent.
-func parentCancelCtx(parent Context) (*cancelCtx, bool) {
-	for {
-		switch c := parent.(type) {
-		case *cancelCtx:
-			return c, true
-		case *timerCtx:
-			return c.cancelCtx, true
-		case *valueCtx:
-			parent = c.Context
-		default:
-			return nil, false
-		}
-	}
-}
-
-// removeChild removes a context from its parent.
-func removeChild(parent Context, child canceler) {
-	p, ok := parentCancelCtx(parent)
-	if !ok {
-		return
-	}
-	p.mu.Lock()
-	if p.children != nil {
-		delete(p.children, child)
-	}
-	p.mu.Unlock()
-}
-
-// A canceler is a context type that can be canceled directly. The
-// implementations are *cancelCtx and *timerCtx.
-type canceler interface {
-	cancel(removeFromParent bool, err error)
-	Done() <-chan struct{}
-}
-
-// A cancelCtx can be canceled. When canceled, it also cancels any children
-// that implement canceler.
-type cancelCtx struct {
-	Context
-
-	done chan struct{} // closed by the first cancel call.
-
-	mu       sync.Mutex
-	children map[canceler]bool // set to nil by the first cancel call
-	err      error             // set to non-nil by the first cancel call
-}
-
-func (c *cancelCtx) Done() <-chan struct{} {
-	return c.done
-}
-
-func (c *cancelCtx) Err() error {
-	c.mu.Lock()
-	defer c.mu.Unlock()
-	return c.err
-}
-
-func (c *cancelCtx) String() string {
-	return fmt.Sprintf("%v.WithCancel", c.Context)
-}
-
-// cancel closes c.done, cancels each of c's children, and, if
-// removeFromParent is true, removes c from its parent's children.
-func (c *cancelCtx) cancel(removeFromParent bool, err error) {
-	if err == nil {
-		panic("context: internal error: missing cancel error")
-	}
-	c.mu.Lock()
-	if c.err != nil {
-		c.mu.Unlock()
-		return // already canceled
-	}
-	c.err = err
-	close(c.done)
-	for child := range c.children {
-		// NOTE: acquiring the child's lock while holding parent's lock.
-		child.cancel(false, err)
-	}
-	c.children = nil
-	c.mu.Unlock()
-
-	if removeFromParent {
-		removeChild(c.Context, c)
-	}
-}
-
-// WithDeadline returns a copy of the parent context with the deadline adjusted
-// to be no later than d. If the parent's deadline is already earlier than d,
-// WithDeadline(parent, d) is semantically equivalent to parent. The returned
-// context's Done channel is closed when the deadline expires, when the returned
-// cancel function is called, or when the parent context's Done channel is
-// closed, whichever happens first.
-//
-// Canceling this context releases resources associated with it, so code should
-// call cancel as soon as the operations running in this Context complete.
-func WithDeadline(parent Context, deadline time.Time) (Context, CancelFunc) {
-	if cur, ok := parent.Deadline(); ok && cur.Before(deadline) {
-		// The current deadline is already sooner than the new one.
-		return WithCancel(parent)
-	}
-	c := &timerCtx{
-		cancelCtx: newCancelCtx(parent),
-		deadline:  deadline,
-	}
-	propagateCancel(parent, c)
-	d := deadline.Sub(time.Now())
-	if d <= 0 {
-		c.cancel(true, DeadlineExceeded) // deadline has already passed
-		return c, func() { c.cancel(true, Canceled) }
-	}
-	c.mu.Lock()
-	defer c.mu.Unlock()
-	if c.err == nil {
-		c.timer = time.AfterFunc(d, func() {
-			c.cancel(true, DeadlineExceeded)
-		})
-	}
-	return c, func() { c.cancel(true, Canceled) }
-}
-
-// A timerCtx carries a timer and a deadline. It embeds a cancelCtx to
-// implement Done and Err. It implements cancel by stopping its timer then
-// delegating to cancelCtx.cancel.
-type timerCtx struct {
-	*cancelCtx
-	timer *time.Timer // Under cancelCtx.mu.
-
-	deadline time.Time
-}
-
-func (c *timerCtx) Deadline() (deadline time.Time, ok bool) {
-	return c.deadline, true
-}
-
-func (c *timerCtx) String() string {
-	return fmt.Sprintf("%v.WithDeadline(%s [%s])", c.cancelCtx.Context, c.deadline, c.deadline.Sub(time.Now()))
-}
-
-func (c *timerCtx) cancel(removeFromParent bool, err error) {
-	c.cancelCtx.cancel(false, err)
-	if removeFromParent {
-		// Remove this timerCtx from its parent cancelCtx's children.
-		removeChild(c.cancelCtx.Context, c)
-	}
-	c.mu.Lock()
-	if c.timer != nil {
-		c.timer.Stop()
-		c.timer = nil
-	}
-	c.mu.Unlock()
-}
-
-// WithTimeout returns WithDeadline(parent, time.Now().Add(timeout)).
-//
-// Canceling this context releases resources associated with it, so code should
-// call cancel as soon as the operations running in this Context complete:
-//
-//	func slowOperationWithTimeout(ctx context.Context) (Result, error) {
-//		ctx, cancel := context.WithTimeout(ctx, 100*time.Millisecond)
-//		defer cancel()  // releases resources if slowOperation completes before timeout elapses
-//		return slowOperation(ctx)
-//	}
-func WithTimeout(parent Context, timeout time.Duration) (Context, CancelFunc) {
-	return WithDeadline(parent, time.Now().Add(timeout))
-}
-
-// WithValue returns a copy of parent in which the value associated with key is
-// val.
-//
-// Use context Values only for request-scoped data that transits processes and
-// APIs, not for passing optional parameters to functions.
-func WithValue(parent Context, key interface{}, val interface{}) Context {
-	return &valueCtx{parent, key, val}
-}
-
-// A valueCtx carries a key-value pair. It implements Value for that key and
-// delegates all other calls to the embedded Context.
-type valueCtx struct {
-	Context
-	key, val interface{}
-}
-
-func (c *valueCtx) String() string {
-	return fmt.Sprintf("%v.WithValue(%#v, %#v)", c.Context, c.key, c.val)
-}
-
-func (c *valueCtx) Value(key interface{}) interface{} {
-	if c.key == key {
-		return c.val
-	}
-	return c.Context.Value(key)
-}
diff --git a/vendor/golang.org/x/net/context/pre_go19.go b/vendor/golang.org/x/net/context/pre_go19.go
deleted file mode 100644
index ec5a6380335..00000000000
--- a/vendor/golang.org/x/net/context/pre_go19.go
+++ /dev/null
@@ -1,109 +0,0 @@
-// Copyright 2014 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-//go:build !go1.9
-
-package context
-
-import "time"
-
-// A Context carries a deadline, a cancelation signal, and other values across
-// API boundaries.
-//
-// Context's methods may be called by multiple goroutines simultaneously.
-type Context interface {
-	// Deadline returns the time when work done on behalf of this context
-	// should be canceled. Deadline returns ok==false when no deadline is
-	// set. Successive calls to Deadline return the same results.
-	Deadline() (deadline time.Time, ok bool)
-
-	// Done returns a channel that's closed when work done on behalf of this
-	// context should be canceled. Done may return nil if this context can
-	// never be canceled. Successive calls to Done return the same value.
-	//
-	// WithCancel arranges for Done to be closed when cancel is called;
-	// WithDeadline arranges for Done to be closed when the deadline
-	// expires; WithTimeout arranges for Done to be closed when the timeout
-	// elapses.
-	//
-	// Done is provided for use in select statements:
-	//
-	//  // Stream generates values with DoSomething and sends them to out
-	//  // until DoSomething returns an error or ctx.Done is closed.
-	//  func Stream(ctx context.Context, out chan<- Value) error {
-	//  	for {
-	//  		v, err := DoSomething(ctx)
-	//  		if err != nil {
-	//  			return err
-	//  		}
-	//  		select {
-	//  		case <-ctx.Done():
-	//  			return ctx.Err()
-	//  		case out <- v:
-	//  		}
-	//  	}
-	//  }
-	//
-	// See http://blog.golang.org/pipelines for more examples of how to use
-	// a Done channel for cancelation.
-	Done() <-chan struct{}
-
-	// Err returns a non-nil error value after Done is closed. Err returns
-	// Canceled if the context was canceled or DeadlineExceeded if the
-	// context's deadline passed. No other values for Err are defined.
-	// After Done is closed, successive calls to Err return the same value.
-	Err() error
-
-	// Value returns the value associated with this context for key, or nil
-	// if no value is associated with key. Successive calls to Value with
-	// the same key returns the same result.
-	//
-	// Use context values only for request-scoped data that transits
-	// processes and API boundaries, not for passing optional parameters to
-	// functions.
-	//
-	// A key identifies a specific value in a Context. Functions that wish
-	// to store values in Context typically allocate a key in a global
-	// variable then use that key as the argument to context.WithValue and
-	// Context.Value. A key can be any type that supports equality;
-	// packages should define keys as an unexported type to avoid
-	// collisions.
-	//
-	// Packages that define a Context key should provide type-safe accessors
-	// for the values stores using that key:
-	//
-	// 	// Package user defines a User type that's stored in Contexts.
-	// 	package user
-	//
-	// 	import "golang.org/x/net/context"
-	//
-	// 	// User is the type of value stored in the Contexts.
-	// 	type User struct {...}
-	//
-	// 	// key is an unexported type for keys defined in this package.
-	// 	// This prevents collisions with keys defined in other packages.
-	// 	type key int
-	//
-	// 	// userKey is the key for user.User values in Contexts. It is
-	// 	// unexported; clients use user.NewContext and user.FromContext
-	// 	// instead of using this key directly.
-	// 	var userKey key = 0
-	//
-	// 	// NewContext returns a new Context that carries value u.
-	// 	func NewContext(ctx context.Context, u *User) context.Context {
-	// 		return context.WithValue(ctx, userKey, u)
-	// 	}
-	//
-	// 	// FromContext returns the User value stored in ctx, if any.
-	// 	func FromContext(ctx context.Context) (*User, bool) {
-	// 		u, ok := ctx.Value(userKey).(*User)
-	// 		return u, ok
-	// 	}
-	Value(key interface{}) interface{}
-}
-
-// A CancelFunc tells an operation to abandon its work.
-// A CancelFunc does not wait for the work to stop.
-// After the first call, subsequent calls to a CancelFunc do nothing.
-type CancelFunc func()
diff --git a/vendor/golang.org/x/oauth2/google/default.go b/vendor/golang.org/x/oauth2/google/default.go
index 12b12a30c55..02ccd08a770 100644
--- a/vendor/golang.org/x/oauth2/google/default.go
+++ b/vendor/golang.org/x/oauth2/google/default.go
@@ -12,6 +12,7 @@ import (
 	"os"
 	"path/filepath"
 	"runtime"
+	"sync"
 	"time"
 
 	"cloud.google.com/go/compute/metadata"
@@ -41,12 +42,20 @@ type Credentials struct {
 	// running on Google Cloud Platform.
 	JSON []byte
 
+	udMu sync.Mutex // guards universeDomain
 	// universeDomain is the default service domain for a given Cloud universe.
 	universeDomain string
 }
 
 // UniverseDomain returns the default service domain for a given Cloud universe.
+//
 // The default value is "googleapis.com".
+//
+// Deprecated: Use instead (*Credentials).GetUniverseDomain(), which supports
+// obtaining the universe domain when authenticating via the GCE metadata server.
+// Unlike GetUniverseDomain, this method, UniverseDomain, will always return the
+// default value when authenticating via the GCE metadata server.
+// See also [The attached service account](https://cloud.google.com/docs/authentication/application-default-credentials#attached-sa).
 func (c *Credentials) UniverseDomain() string {
 	if c.universeDomain == "" {
 		return universeDomainDefault
@@ -54,6 +63,55 @@ func (c *Credentials) UniverseDomain() string {
 	return c.universeDomain
 }
 
+// GetUniverseDomain returns the default service domain for a given Cloud
+// universe.
+//
+// The default value is "googleapis.com".
+//
+// It obtains the universe domain from the attached service account on GCE when
+// authenticating via the GCE metadata server. See also [The attached service
+// account](https://cloud.google.com/docs/authentication/application-default-credentials#attached-sa).
+// If the GCE metadata server returns a 404 error, the default value is
+// returned. If the GCE metadata server returns an error other than 404, the
+// error is returned.
+func (c *Credentials) GetUniverseDomain() (string, error) {
+	c.udMu.Lock()
+	defer c.udMu.Unlock()
+	if c.universeDomain == "" && metadata.OnGCE() {
+		// If we're on Google Compute Engine, an App Engine standard second
+		// generation runtime, or App Engine flexible, use the metadata server.
+		err := c.computeUniverseDomain()
+		if err != nil {
+			return "", err
+		}
+	}
+	// If not on Google Compute Engine, or in case of any non-error path in
+	// computeUniverseDomain that did not set universeDomain, set the default
+	// universe domain.
+	if c.universeDomain == "" {
+		c.universeDomain = universeDomainDefault
+	}
+	return c.universeDomain, nil
+}
+
+// computeUniverseDomain fetches the default service domain for a given Cloud
+// universe from Google Compute Engine (GCE)'s metadata server. It's only valid
+// to use this method if your program is running on a GCE instance.
+func (c *Credentials) computeUniverseDomain() error {
+	var err error
+	c.universeDomain, err = metadata.Get("universe/universe_domain")
+	if err != nil {
+		if _, ok := err.(metadata.NotDefinedError); ok {
+			// http.StatusNotFound (404)
+			c.universeDomain = universeDomainDefault
+			return nil
+		} else {
+			return err
+		}
+	}
+	return nil
+}
+
 // DefaultCredentials is the old name of Credentials.
 //
 // Deprecated: use Credentials instead.
@@ -91,6 +149,12 @@ type CredentialsParams struct {
 	// Note: This option is currently only respected when using credentials
 	// fetched from the GCE metadata server.
 	EarlyTokenRefresh time.Duration
+
+	// UniverseDomain is the default service domain for a given Cloud universe.
+	// Only supported in authentication flows that support universe domains.
+	// This value takes precedence over a universe domain explicitly specified
+	// in a credentials config file or by the GCE metadata server. Optional.
+	UniverseDomain string
 }
 
 func (params CredentialsParams) deepCopy() CredentialsParams {
@@ -175,8 +239,9 @@ func FindDefaultCredentialsWithParams(ctx context.Context, params CredentialsPar
 	if metadata.OnGCE() {
 		id, _ := metadata.ProjectID()
 		return &Credentials{
-			ProjectID:   id,
-			TokenSource: computeTokenSource("", params.EarlyTokenRefresh, params.Scopes...),
+			ProjectID:      id,
+			TokenSource:    computeTokenSource("", params.EarlyTokenRefresh, params.Scopes...),
+			universeDomain: params.UniverseDomain,
 		}, nil
 	}
 
@@ -217,6 +282,9 @@ func CredentialsFromJSONWithParams(ctx context.Context, jsonData []byte, params
 	}
 
 	universeDomain := f.UniverseDomain
+	if params.UniverseDomain != "" {
+		universeDomain = params.UniverseDomain
+	}
 	// Authorized user credentials are only supported in the googleapis.com universe.
 	if f.Type == userCredentialsKey {
 		universeDomain = universeDomainDefault
diff --git a/vendor/golang.org/x/sync/errgroup/errgroup.go b/vendor/golang.org/x/sync/errgroup/errgroup.go
index b18efb743fe..948a3ee63d4 100644
--- a/vendor/golang.org/x/sync/errgroup/errgroup.go
+++ b/vendor/golang.org/x/sync/errgroup/errgroup.go
@@ -4,6 +4,9 @@
 
 // Package errgroup provides synchronization, error propagation, and Context
 // cancelation for groups of goroutines working on subtasks of a common task.
+//
+// [errgroup.Group] is related to [sync.WaitGroup] but adds handling of tasks
+// returning errors.
 package errgroup
 
 import (
diff --git a/vendor/golang.org/x/sys/unix/mkerrors.sh b/vendor/golang.org/x/sys/unix/mkerrors.sh
index 6202638bae8..c6492020ec7 100644
--- a/vendor/golang.org/x/sys/unix/mkerrors.sh
+++ b/vendor/golang.org/x/sys/unix/mkerrors.sh
@@ -248,6 +248,7 @@ struct ltchars {
 #include <linux/module.h>
 #include <linux/mount.h>
 #include <linux/netfilter/nfnetlink.h>
+#include <linux/netfilter/nf_tables.h>
 #include <linux/netlink.h>
 #include <linux/net_namespace.h>
 #include <linux/nfc.h>
@@ -283,10 +284,6 @@ struct ltchars {
 #include <asm/termbits.h>
 #endif
 
-#ifndef MSG_FASTOPEN
-#define MSG_FASTOPEN    0x20000000
-#endif
-
 #ifndef PTRACE_GETREGS
 #define PTRACE_GETREGS	0xc
 #endif
@@ -295,14 +292,6 @@ struct ltchars {
 #define PTRACE_SETREGS	0xd
 #endif
 
-#ifndef SOL_NETLINK
-#define SOL_NETLINK	270
-#endif
-
-#ifndef SOL_SMC
-#define SOL_SMC 286
-#endif
-
 #ifdef SOL_BLUETOOTH
 // SPARC includes this in /usr/include/sparc64-linux-gnu/bits/socket.h
 // but it is already in bluetooth_linux.go
@@ -319,10 +308,23 @@ struct ltchars {
 #undef TIPC_WAIT_FOREVER
 #define TIPC_WAIT_FOREVER 0xffffffff
 
-// Copied from linux/l2tp.h
-// Including linux/l2tp.h here causes conflicts between linux/in.h
-// and netinet/in.h included via net/route.h above.
-#define IPPROTO_L2TP		115
+// Copied from linux/netfilter/nf_nat.h
+// Including linux/netfilter/nf_nat.h here causes conflicts between linux/in.h
+// and netinet/in.h.
+#define NF_NAT_RANGE_MAP_IPS			(1 << 0)
+#define NF_NAT_RANGE_PROTO_SPECIFIED		(1 << 1)
+#define NF_NAT_RANGE_PROTO_RANDOM		(1 << 2)
+#define NF_NAT_RANGE_PERSISTENT			(1 << 3)
+#define NF_NAT_RANGE_PROTO_RANDOM_FULLY		(1 << 4)
+#define NF_NAT_RANGE_PROTO_OFFSET		(1 << 5)
+#define NF_NAT_RANGE_NETMAP			(1 << 6)
+#define NF_NAT_RANGE_PROTO_RANDOM_ALL		\
+	(NF_NAT_RANGE_PROTO_RANDOM | NF_NAT_RANGE_PROTO_RANDOM_FULLY)
+#define NF_NAT_RANGE_MASK					\
+	(NF_NAT_RANGE_MAP_IPS | NF_NAT_RANGE_PROTO_SPECIFIED |	\
+	 NF_NAT_RANGE_PROTO_RANDOM | NF_NAT_RANGE_PERSISTENT |	\
+	 NF_NAT_RANGE_PROTO_RANDOM_FULLY | NF_NAT_RANGE_PROTO_OFFSET | \
+	 NF_NAT_RANGE_NETMAP)
 
 // Copied from linux/hid.h.
 // Keep in sync with the size of the referenced fields.
@@ -603,6 +605,9 @@ ccflags="$@"
 		$2 ~ /^FSOPT_/ ||
 		$2 ~ /^WDIO[CFS]_/ ||
 		$2 ~ /^NFN/ ||
+		$2 !~ /^NFT_META_IIFTYPE/ &&
+		$2 ~ /^NFT_/ ||
+		$2 ~ /^NF_NAT_/ ||
 		$2 ~ /^XDP_/ ||
 		$2 ~ /^RWF_/ ||
 		$2 ~ /^(HDIO|WIN|SMART)_/ ||
diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux.go b/vendor/golang.org/x/sys/unix/zerrors_linux.go
index c73cfe2f10b..a5d3ff8df95 100644
--- a/vendor/golang.org/x/sys/unix/zerrors_linux.go
+++ b/vendor/golang.org/x/sys/unix/zerrors_linux.go
@@ -2127,6 +2127,60 @@ const (
 	NFNL_SUBSYS_QUEUE                           = 0x3
 	NFNL_SUBSYS_ULOG                            = 0x4
 	NFS_SUPER_MAGIC                             = 0x6969
+	NFT_CHAIN_FLAGS                             = 0x7
+	NFT_CHAIN_MAXNAMELEN                        = 0x100
+	NFT_CT_MAX                                  = 0x17
+	NFT_DATA_RESERVED_MASK                      = 0xffffff00
+	NFT_DATA_VALUE_MAXLEN                       = 0x40
+	NFT_EXTHDR_OP_MAX                           = 0x4
+	NFT_FIB_RESULT_MAX                          = 0x3
+	NFT_INNER_MASK                              = 0xf
+	NFT_LOGLEVEL_MAX                            = 0x8
+	NFT_NAME_MAXLEN                             = 0x100
+	NFT_NG_MAX                                  = 0x1
+	NFT_OBJECT_CONNLIMIT                        = 0x5
+	NFT_OBJECT_COUNTER                          = 0x1
+	NFT_OBJECT_CT_EXPECT                        = 0x9
+	NFT_OBJECT_CT_HELPER                        = 0x3
+	NFT_OBJECT_CT_TIMEOUT                       = 0x7
+	NFT_OBJECT_LIMIT                            = 0x4
+	NFT_OBJECT_MAX                              = 0xa
+	NFT_OBJECT_QUOTA                            = 0x2
+	NFT_OBJECT_SECMARK                          = 0x8
+	NFT_OBJECT_SYNPROXY                         = 0xa
+	NFT_OBJECT_TUNNEL                           = 0x6
+	NFT_OBJECT_UNSPEC                           = 0x0
+	NFT_OBJ_MAXNAMELEN                          = 0x100
+	NFT_OSF_MAXGENRELEN                         = 0x10
+	NFT_QUEUE_FLAG_BYPASS                       = 0x1
+	NFT_QUEUE_FLAG_CPU_FANOUT                   = 0x2
+	NFT_QUEUE_FLAG_MASK                         = 0x3
+	NFT_REG32_COUNT                             = 0x10
+	NFT_REG32_SIZE                              = 0x4
+	NFT_REG_MAX                                 = 0x4
+	NFT_REG_SIZE                                = 0x10
+	NFT_REJECT_ICMPX_MAX                        = 0x3
+	NFT_RT_MAX                                  = 0x4
+	NFT_SECMARK_CTX_MAXLEN                      = 0x100
+	NFT_SET_MAXNAMELEN                          = 0x100
+	NFT_SOCKET_MAX                              = 0x3
+	NFT_TABLE_F_MASK                            = 0x3
+	NFT_TABLE_MAXNAMELEN                        = 0x100
+	NFT_TRACETYPE_MAX                           = 0x3
+	NFT_TUNNEL_F_MASK                           = 0x7
+	NFT_TUNNEL_MAX                              = 0x1
+	NFT_TUNNEL_MODE_MAX                         = 0x2
+	NFT_USERDATA_MAXLEN                         = 0x100
+	NFT_XFRM_KEY_MAX                            = 0x6
+	NF_NAT_RANGE_MAP_IPS                        = 0x1
+	NF_NAT_RANGE_MASK                           = 0x7f
+	NF_NAT_RANGE_NETMAP                         = 0x40
+	NF_NAT_RANGE_PERSISTENT                     = 0x8
+	NF_NAT_RANGE_PROTO_OFFSET                   = 0x20
+	NF_NAT_RANGE_PROTO_RANDOM                   = 0x4
+	NF_NAT_RANGE_PROTO_RANDOM_ALL               = 0x14
+	NF_NAT_RANGE_PROTO_RANDOM_FULLY             = 0x10
+	NF_NAT_RANGE_PROTO_SPECIFIED                = 0x2
 	NILFS_SUPER_MAGIC                           = 0x3434
 	NL0                                         = 0x0
 	NL1                                         = 0x100
diff --git a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.go b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.go
index a1d061597cc..9dc42410b78 100644
--- a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.go
+++ b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_386.go
@@ -2297,5 +2297,3 @@ func unveil(path *byte, flags *byte) (err error) {
 var libc_unveil_trampoline_addr uintptr
 
 //go:cgo_import_dynamic libc_unveil unveil "libc.so"
-
-
diff --git a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.go b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.go
index 5b2a7409778..0d3a0751cd4 100644
--- a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.go
+++ b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_amd64.go
@@ -2297,5 +2297,3 @@ func unveil(path *byte, flags *byte) (err error) {
 var libc_unveil_trampoline_addr uintptr
 
 //go:cgo_import_dynamic libc_unveil unveil "libc.so"
-
-
diff --git a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.go b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.go
index f6eda1344a8..c39f7776db3 100644
--- a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.go
+++ b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm.go
@@ -2297,5 +2297,3 @@ func unveil(path *byte, flags *byte) (err error) {
 var libc_unveil_trampoline_addr uintptr
 
 //go:cgo_import_dynamic libc_unveil unveil "libc.so"
-
-
diff --git a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.go b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.go
index 55df20ae9d8..57571d072fe 100644
--- a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.go
+++ b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_arm64.go
@@ -2297,5 +2297,3 @@ func unveil(path *byte, flags *byte) (err error) {
 var libc_unveil_trampoline_addr uintptr
 
 //go:cgo_import_dynamic libc_unveil unveil "libc.so"
-
-
diff --git a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.go b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.go
index 8c1155cbc08..e62963e67e2 100644
--- a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.go
+++ b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_mips64.go
@@ -2297,5 +2297,3 @@ func unveil(path *byte, flags *byte) (err error) {
 var libc_unveil_trampoline_addr uintptr
 
 //go:cgo_import_dynamic libc_unveil unveil "libc.so"
-
-
diff --git a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_ppc64.go b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_ppc64.go
index 7cc80c58d98..00831354c82 100644
--- a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_ppc64.go
+++ b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_ppc64.go
@@ -2297,5 +2297,3 @@ func unveil(path *byte, flags *byte) (err error) {
 var libc_unveil_trampoline_addr uintptr
 
 //go:cgo_import_dynamic libc_unveil unveil "libc.so"
-
-
diff --git a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_riscv64.go b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_riscv64.go
index 0688737f494..79029ed5848 100644
--- a/vendor/golang.org/x/sys/unix/zsyscall_openbsd_riscv64.go
+++ b/vendor/golang.org/x/sys/unix/zsyscall_openbsd_riscv64.go
@@ -2297,5 +2297,3 @@ func unveil(path *byte, flags *byte) (err error) {
 var libc_unveil_trampoline_addr uintptr
 
 //go:cgo_import_dynamic libc_unveil unveil "libc.so"
-
-
diff --git a/vendor/golang.org/x/sys/windows/syscall_windows.go b/vendor/golang.org/x/sys/windows/syscall_windows.go
index 47dc5796769..ffb8708ccf8 100644
--- a/vendor/golang.org/x/sys/windows/syscall_windows.go
+++ b/vendor/golang.org/x/sys/windows/syscall_windows.go
@@ -194,6 +194,7 @@ func NewCallbackCDecl(fn interface{}) uintptr {
 //sys	GetComputerName(buf *uint16, n *uint32) (err error) = GetComputerNameW
 //sys	GetComputerNameEx(nametype uint32, buf *uint16, n *uint32) (err error) = GetComputerNameExW
 //sys	SetEndOfFile(handle Handle) (err error)
+//sys	SetFileValidData(handle Handle, validDataLength int64) (err error)
 //sys	GetSystemTimeAsFileTime(time *Filetime)
 //sys	GetSystemTimePreciseAsFileTime(time *Filetime)
 //sys	GetTimeZoneInformation(tzi *Timezoneinformation) (rc uint32, err error) [failretval==0xffffffff]
diff --git a/vendor/golang.org/x/sys/windows/zsyscall_windows.go b/vendor/golang.org/x/sys/windows/zsyscall_windows.go
index 146a1f0196f..e8791c82c30 100644
--- a/vendor/golang.org/x/sys/windows/zsyscall_windows.go
+++ b/vendor/golang.org/x/sys/windows/zsyscall_windows.go
@@ -342,6 +342,7 @@ var (
 	procSetDefaultDllDirectories                             = modkernel32.NewProc("SetDefaultDllDirectories")
 	procSetDllDirectoryW                                     = modkernel32.NewProc("SetDllDirectoryW")
 	procSetEndOfFile                                         = modkernel32.NewProc("SetEndOfFile")
+	procSetFileValidData                                     = modkernel32.NewProc("SetFileValidData")
 	procSetEnvironmentVariableW                              = modkernel32.NewProc("SetEnvironmentVariableW")
 	procSetErrorMode                                         = modkernel32.NewProc("SetErrorMode")
 	procSetEvent                                             = modkernel32.NewProc("SetEvent")
@@ -2988,6 +2989,14 @@ func SetEndOfFile(handle Handle) (err error) {
 	return
 }
 
+func SetFileValidData(handle Handle, validDataLength int64) (err error) {
+	r1, _, e1 := syscall.Syscall(procSetFileValidData.Addr(), 2, uintptr(handle), uintptr(validDataLength), 0)
+	if r1 == 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
 func SetEnvironmentVariable(name *uint16, value *uint16) (err error) {
 	r1, _, e1 := syscall.Syscall(procSetEnvironmentVariableW.Addr(), 2, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(value)), 0)
 	if r1 == 0 {
diff --git a/vendor/golang.org/x/tools/cmd/goimports/goimports_gc.go b/vendor/golang.org/x/tools/cmd/goimports/goimports_gc.go
index 190a56535ca..3326646d035 100644
--- a/vendor/golang.org/x/tools/cmd/goimports/goimports_gc.go
+++ b/vendor/golang.org/x/tools/cmd/goimports/goimports_gc.go
@@ -19,8 +19,8 @@ func doTrace() func() {
 		bw, flush := bufferedFileWriter(*traceProfile)
 		trace.Start(bw)
 		return func() {
-			flush()
 			trace.Stop()
+			flush()
 		}
 	}
 	return func() {}
diff --git a/vendor/golang.org/x/tools/go/ast/astutil/enclosing.go b/vendor/golang.org/x/tools/go/ast/astutil/enclosing.go
index 9fa5aa192c2..2c4c4e23289 100644
--- a/vendor/golang.org/x/tools/go/ast/astutil/enclosing.go
+++ b/vendor/golang.org/x/tools/go/ast/astutil/enclosing.go
@@ -11,8 +11,6 @@ import (
 	"go/ast"
 	"go/token"
 	"sort"
-
-	"golang.org/x/tools/internal/typeparams"
 )
 
 // PathEnclosingInterval returns the node that encloses the source
@@ -322,7 +320,7 @@ func childrenOf(n ast.Node) []ast.Node {
 			children = append(children, n.Recv)
 		}
 		children = append(children, n.Name)
-		if tparams := typeparams.ForFuncType(n.Type); tparams != nil {
+		if tparams := n.Type.TypeParams; tparams != nil {
 			children = append(children, tparams)
 		}
 		if n.Type.Params != nil {
@@ -377,7 +375,7 @@ func childrenOf(n ast.Node) []ast.Node {
 			tok(n.Lbrack, len("[")),
 			tok(n.Rbrack, len("]")))
 
-	case *typeparams.IndexListExpr:
+	case *ast.IndexListExpr:
 		children = append(children,
 			tok(n.Lbrack, len("[")),
 			tok(n.Rbrack, len("]")))
@@ -588,7 +586,7 @@ func NodeDescription(n ast.Node) string {
 		return "decrement statement"
 	case *ast.IndexExpr:
 		return "index expression"
-	case *typeparams.IndexListExpr:
+	case *ast.IndexListExpr:
 		return "index list expression"
 	case *ast.InterfaceType:
 		return "interface type"
diff --git a/vendor/golang.org/x/tools/go/ast/astutil/rewrite.go b/vendor/golang.org/x/tools/go/ast/astutil/rewrite.go
index f430b21b9b9..58934f76633 100644
--- a/vendor/golang.org/x/tools/go/ast/astutil/rewrite.go
+++ b/vendor/golang.org/x/tools/go/ast/astutil/rewrite.go
@@ -9,8 +9,6 @@ import (
 	"go/ast"
 	"reflect"
 	"sort"
-
-	"golang.org/x/tools/internal/typeparams"
 )
 
 // An ApplyFunc is invoked by Apply for each node n, even if n is nil,
@@ -252,7 +250,7 @@ func (a *application) apply(parent ast.Node, name string, iter *iterator, n ast.
 		a.apply(n, "X", nil, n.X)
 		a.apply(n, "Index", nil, n.Index)
 
-	case *typeparams.IndexListExpr:
+	case *ast.IndexListExpr:
 		a.apply(n, "X", nil, n.X)
 		a.applyList(n, "Indices")
 
@@ -293,7 +291,7 @@ func (a *application) apply(parent ast.Node, name string, iter *iterator, n ast.
 		a.apply(n, "Fields", nil, n.Fields)
 
 	case *ast.FuncType:
-		if tparams := typeparams.ForFuncType(n); tparams != nil {
+		if tparams := n.TypeParams; tparams != nil {
 			a.apply(n, "TypeParams", nil, tparams)
 		}
 		a.apply(n, "Params", nil, n.Params)
@@ -408,7 +406,7 @@ func (a *application) apply(parent ast.Node, name string, iter *iterator, n ast.
 	case *ast.TypeSpec:
 		a.apply(n, "Doc", nil, n.Doc)
 		a.apply(n, "Name", nil, n.Name)
-		if tparams := typeparams.ForTypeSpec(n); tparams != nil {
+		if tparams := n.TypeParams; tparams != nil {
 			a.apply(n, "TypeParams", nil, tparams)
 		}
 		a.apply(n, "Type", nil, n.Type)
diff --git a/vendor/golang.org/x/tools/go/packages/doc.go b/vendor/golang.org/x/tools/go/packages/doc.go
index a7a8f73e3d1..b2a0b7c6a67 100644
--- a/vendor/golang.org/x/tools/go/packages/doc.go
+++ b/vendor/golang.org/x/tools/go/packages/doc.go
@@ -5,12 +5,32 @@
 /*
 Package packages loads Go packages for inspection and analysis.
 
-The Load function takes as input a list of patterns and return a list of Package
-structs describing individual packages matched by those patterns.
-The LoadMode controls the amount of detail in the loaded packages.
-
-Load passes most patterns directly to the underlying build tool,
-but all patterns with the prefix "query=", where query is a
+The [Load] function takes as input a list of patterns and returns a
+list of [Package] values describing individual packages matched by those
+patterns.
+A [Config] specifies configuration options, the most important of which is
+the [LoadMode], which controls the amount of detail in the loaded packages.
+
+Load passes most patterns directly to the underlying build tool.
+The default build tool is the go command.
+Its supported patterns are described at
+https://pkg.go.dev/cmd/go#hdr-Package_lists_and_patterns.
+
+Load may be used in Go projects that use alternative build systems, by
+installing an appropriate "driver" program for the build system and
+specifying its location in the GOPACKAGESDRIVER environment variable.
+For example,
+https://github.com/bazelbuild/rules_go/wiki/Editor-and-tool-integration
+explains how to use the driver for Bazel.
+The driver program is responsible for interpreting patterns in its
+preferred notation and reporting information about the packages that
+they identify.
+(See driverRequest and driverResponse types for the JSON
+schema used by the protocol.
+Though the protocol is supported, these types are currently unexported;
+see #64608 for a proposal to publish them.)
+
+Regardless of driver, all patterns with the prefix "query=", where query is a
 non-empty string of letters from [a-z], are reserved and may be
 interpreted as query operators.
 
@@ -64,7 +84,7 @@ reported about the loaded packages. See the documentation for type LoadMode
 for details.
 
 Most tools should pass their command-line arguments (after any flags)
-uninterpreted to the loader, so that the loader can interpret them
+uninterpreted to [Load], so that it can interpret them
 according to the conventions of the underlying build system.
 See the Example function for typical usage.
 */
diff --git a/vendor/golang.org/x/tools/go/packages/packages.go b/vendor/golang.org/x/tools/go/packages/packages.go
index bd79efc1aaf..81e9e6a727d 100644
--- a/vendor/golang.org/x/tools/go/packages/packages.go
+++ b/vendor/golang.org/x/tools/go/packages/packages.go
@@ -27,7 +27,6 @@ import (
 	"golang.org/x/tools/go/gcexportdata"
 	"golang.org/x/tools/internal/gocommand"
 	"golang.org/x/tools/internal/packagesinternal"
-	"golang.org/x/tools/internal/typeparams"
 	"golang.org/x/tools/internal/typesinternal"
 	"golang.org/x/tools/internal/versions"
 )
@@ -1015,10 +1014,10 @@ func (ld *loader) loadPackage(lpkg *loaderPackage) {
 		Defs:       make(map[*ast.Ident]types.Object),
 		Uses:       make(map[*ast.Ident]types.Object),
 		Implicits:  make(map[ast.Node]types.Object),
+		Instances:  make(map[*ast.Ident]types.Instance),
 		Scopes:     make(map[ast.Node]*types.Scope),
 		Selections: make(map[*ast.SelectorExpr]*types.Selection),
 	}
-	typeparams.InitInstanceInfo(lpkg.TypesInfo)
 	versions.InitFileVersions(lpkg.TypesInfo)
 	lpkg.TypesSizes = ld.sizes
 
diff --git a/vendor/golang.org/x/tools/go/types/objectpath/objectpath.go b/vendor/golang.org/x/tools/go/types/objectpath/objectpath.go
index e742ecc4644..11d5c8c3adf 100644
--- a/vendor/golang.org/x/tools/go/types/objectpath/objectpath.go
+++ b/vendor/golang.org/x/tools/go/types/objectpath/objectpath.go
@@ -223,7 +223,7 @@ func (enc *Encoder) For(obj types.Object) (Path, error) {
 	//    Reject obviously non-viable cases.
 	switch obj := obj.(type) {
 	case *types.TypeName:
-		if _, ok := obj.Type().(*typeparams.TypeParam); !ok {
+		if _, ok := obj.Type().(*types.TypeParam); !ok {
 			// With the exception of type parameters, only package-level type names
 			// have a path.
 			return "", fmt.Errorf("no path for %v", obj)
@@ -283,7 +283,7 @@ func (enc *Encoder) For(obj types.Object) (Path, error) {
 			}
 		} else {
 			if named, _ := T.(*types.Named); named != nil {
-				if r := findTypeParam(obj, typeparams.ForNamed(named), path, nil); r != nil {
+				if r := findTypeParam(obj, named.TypeParams(), path, nil); r != nil {
 					// generic named type
 					return Path(r), nil
 				}
@@ -462,7 +462,7 @@ func find(obj types.Object, T types.Type, path []byte, seen map[*types.TypeName]
 		}
 		return find(obj, T.Elem(), append(path, opElem), seen)
 	case *types.Signature:
-		if r := findTypeParam(obj, typeparams.ForSignature(T), path, seen); r != nil {
+		if r := findTypeParam(obj, T.TypeParams(), path, seen); r != nil {
 			return r
 		}
 		if r := find(obj, T.Params(), append(path, opParams), seen); r != nil {
@@ -505,7 +505,7 @@ func find(obj types.Object, T types.Type, path []byte, seen map[*types.TypeName]
 			}
 		}
 		return nil
-	case *typeparams.TypeParam:
+	case *types.TypeParam:
 		name := T.Obj()
 		if name == obj {
 			return append(path, opObj)
@@ -525,7 +525,7 @@ func find(obj types.Object, T types.Type, path []byte, seen map[*types.TypeName]
 	panic(T)
 }
 
-func findTypeParam(obj types.Object, list *typeparams.TypeParamList, path []byte, seen map[*types.TypeName]bool) []byte {
+func findTypeParam(obj types.Object, list *types.TypeParamList, path []byte, seen map[*types.TypeName]bool) []byte {
 	for i := 0; i < list.Len(); i++ {
 		tparam := list.At(i)
 		path2 := appendOpArg(path, opTypeParam, i)
@@ -562,7 +562,7 @@ func Object(pkg *types.Package, p Path) (types.Object, error) {
 	}
 	// abstraction of *types.{Named,Signature}
 	type hasTypeParams interface {
-		TypeParams() *typeparams.TypeParamList
+		TypeParams() *types.TypeParamList
 	}
 	// abstraction of *types.{Named,TypeParam}
 	type hasObj interface {
@@ -664,7 +664,7 @@ func Object(pkg *types.Package, p Path) (types.Object, error) {
 			t = tparams.At(index)
 
 		case opConstraint:
-			tparam, ok := t.(*typeparams.TypeParam)
+			tparam, ok := t.(*types.TypeParam)
 			if !ok {
 				return nil, fmt.Errorf("cannot apply %q to %s (got %T, want type parameter)", code, t, t)
 			}
diff --git a/vendor/golang.org/x/tools/internal/event/keys/util.go b/vendor/golang.org/x/tools/internal/event/keys/util.go
new file mode 100644
index 00000000000..c0e8e731c90
--- /dev/null
+++ b/vendor/golang.org/x/tools/internal/event/keys/util.go
@@ -0,0 +1,21 @@
+// Copyright 2023 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package keys
+
+import (
+	"sort"
+	"strings"
+)
+
+// Join returns a canonical join of the keys in S:
+// a sorted comma-separated string list.
+func Join[S ~[]T, T ~string](s S) string {
+	strs := make([]string, 0, len(s))
+	for _, v := range s {
+		strs = append(strs, string(v))
+	}
+	sort.Strings(strs)
+	return strings.Join(strs, ",")
+}
diff --git a/vendor/golang.org/x/tools/internal/gcimporter/iexport.go b/vendor/golang.org/x/tools/internal/gcimporter/iexport.go
index 6103dd7102b..2ee8c70164f 100644
--- a/vendor/golang.org/x/tools/internal/gcimporter/iexport.go
+++ b/vendor/golang.org/x/tools/internal/gcimporter/iexport.go
@@ -24,7 +24,6 @@ import (
 
 	"golang.org/x/tools/go/types/objectpath"
 	"golang.org/x/tools/internal/tokeninternal"
-	"golang.org/x/tools/internal/typeparams"
 )
 
 // IExportShallow encodes "shallow" export data for the specified package.
@@ -481,7 +480,7 @@ func (p *iexporter) doDecl(obj types.Object) {
 		}
 
 		// Function.
-		if typeparams.ForSignature(sig).Len() == 0 {
+		if sig.TypeParams().Len() == 0 {
 			w.tag('F')
 		} else {
 			w.tag('G')
@@ -494,7 +493,7 @@ func (p *iexporter) doDecl(obj types.Object) {
 		//
 		// While importing the type parameters, tparamList computes and records
 		// their export name, so that it can be later used when writing the index.
-		if tparams := typeparams.ForSignature(sig); tparams.Len() > 0 {
+		if tparams := sig.TypeParams(); tparams.Len() > 0 {
 			w.tparamList(obj.Name(), tparams, obj.Pkg())
 		}
 		w.signature(sig)
@@ -507,14 +506,14 @@ func (p *iexporter) doDecl(obj types.Object) {
 	case *types.TypeName:
 		t := obj.Type()
 
-		if tparam, ok := t.(*typeparams.TypeParam); ok {
+		if tparam, ok := t.(*types.TypeParam); ok {
 			w.tag('P')
 			w.pos(obj.Pos())
 			constraint := tparam.Constraint()
 			if p.version >= iexportVersionGo1_18 {
 				implicit := false
 				if iface, _ := constraint.(*types.Interface); iface != nil {
-					implicit = typeparams.IsImplicit(iface)
+					implicit = iface.IsImplicit()
 				}
 				w.bool(implicit)
 			}
@@ -535,17 +534,17 @@ func (p *iexporter) doDecl(obj types.Object) {
 			panic(internalErrorf("%s is not a defined type", t))
 		}
 
-		if typeparams.ForNamed(named).Len() == 0 {
+		if named.TypeParams().Len() == 0 {
 			w.tag('T')
 		} else {
 			w.tag('U')
 		}
 		w.pos(obj.Pos())
 
-		if typeparams.ForNamed(named).Len() > 0 {
+		if named.TypeParams().Len() > 0 {
 			// While importing the type parameters, tparamList computes and records
 			// their export name, so that it can be later used when writing the index.
-			w.tparamList(obj.Name(), typeparams.ForNamed(named), obj.Pkg())
+			w.tparamList(obj.Name(), named.TypeParams(), obj.Pkg())
 		}
 
 		underlying := obj.Type().Underlying()
@@ -565,7 +564,7 @@ func (p *iexporter) doDecl(obj types.Object) {
 
 			// Receiver type parameters are type arguments of the receiver type, so
 			// their name must be qualified before exporting recv.
-			if rparams := typeparams.RecvTypeParams(sig); rparams.Len() > 0 {
+			if rparams := sig.RecvTypeParams(); rparams.Len() > 0 {
 				prefix := obj.Name() + "." + m.Name()
 				for i := 0; i < rparams.Len(); i++ {
 					rparam := rparams.At(i)
@@ -740,19 +739,19 @@ func (w *exportWriter) doTyp(t types.Type, pkg *types.Package) {
 	}
 	switch t := t.(type) {
 	case *types.Named:
-		if targs := typeparams.NamedTypeArgs(t); targs.Len() > 0 {
+		if targs := t.TypeArgs(); targs.Len() > 0 {
 			w.startType(instanceType)
 			// TODO(rfindley): investigate if this position is correct, and if it
 			// matters.
 			w.pos(t.Obj().Pos())
 			w.typeList(targs, pkg)
-			w.typ(typeparams.NamedTypeOrigin(t), pkg)
+			w.typ(t.Origin(), pkg)
 			return
 		}
 		w.startType(definedType)
 		w.qualifiedType(t.Obj())
 
-	case *typeparams.TypeParam:
+	case *types.TypeParam:
 		w.startType(typeParamType)
 		w.qualifiedType(t.Obj())
 
@@ -868,7 +867,7 @@ func (w *exportWriter) doTyp(t types.Type, pkg *types.Package) {
 			w.signature(sig)
 		}
 
-	case *typeparams.Union:
+	case *types.Union:
 		w.startType(unionType)
 		nt := t.Len()
 		w.uint64(uint64(nt))
@@ -948,14 +947,14 @@ func (w *exportWriter) signature(sig *types.Signature) {
 	}
 }
 
-func (w *exportWriter) typeList(ts *typeparams.TypeList, pkg *types.Package) {
+func (w *exportWriter) typeList(ts *types.TypeList, pkg *types.Package) {
 	w.uint64(uint64(ts.Len()))
 	for i := 0; i < ts.Len(); i++ {
 		w.typ(ts.At(i), pkg)
 	}
 }
 
-func (w *exportWriter) tparamList(prefix string, list *typeparams.TypeParamList, pkg *types.Package) {
+func (w *exportWriter) tparamList(prefix string, list *types.TypeParamList, pkg *types.Package) {
 	ll := uint64(list.Len())
 	w.uint64(ll)
 	for i := 0; i < list.Len(); i++ {
@@ -973,7 +972,7 @@ const blankMarker = "$"
 // differs from its actual object name: it is prefixed with a qualifier, and
 // blank type parameter names are disambiguated by their index in the type
 // parameter list.
-func tparamExportName(prefix string, tparam *typeparams.TypeParam) string {
+func tparamExportName(prefix string, tparam *types.TypeParam) string {
 	assert(prefix != "")
 	name := tparam.Obj().Name()
 	if name == "_" {
diff --git a/vendor/golang.org/x/tools/internal/gcimporter/iimport.go b/vendor/golang.org/x/tools/internal/gcimporter/iimport.go
index 8e64cf644fc..9bde15e3bc6 100644
--- a/vendor/golang.org/x/tools/internal/gcimporter/iimport.go
+++ b/vendor/golang.org/x/tools/internal/gcimporter/iimport.go
@@ -22,7 +22,6 @@ import (
 	"strings"
 
 	"golang.org/x/tools/go/types/objectpath"
-	"golang.org/x/tools/internal/typeparams"
 )
 
 type intReader struct {
@@ -321,7 +320,7 @@ func iimportCommon(fset *token.FileSet, getPackages GetPackagesFunc, data []byte
 	// Therefore, we defer calling SetConstraint there, and call it here instead
 	// after all types are complete.
 	for _, d := range p.later {
-		typeparams.SetTypeParamConstraint(d.t, d.constraint)
+		d.t.SetConstraint(d.constraint)
 	}
 
 	for _, typ := range p.interfaceList {
@@ -339,7 +338,7 @@ func iimportCommon(fset *token.FileSet, getPackages GetPackagesFunc, data []byte
 }
 
 type setConstraintArgs struct {
-	t          *typeparams.TypeParam
+	t          *types.TypeParam
 	constraint types.Type
 }
 
@@ -549,7 +548,7 @@ func (r *importReader) obj(name string) {
 		r.declare(types.NewConst(pos, r.currPkg, name, typ, val))
 
 	case 'F', 'G':
-		var tparams []*typeparams.TypeParam
+		var tparams []*types.TypeParam
 		if tag == 'G' {
 			tparams = r.tparamList()
 		}
@@ -566,7 +565,7 @@ func (r *importReader) obj(name string) {
 		r.declare(obj)
 		if tag == 'U' {
 			tparams := r.tparamList()
-			typeparams.SetForNamed(named, tparams)
+			named.SetTypeParams(tparams)
 		}
 
 		underlying := r.p.typAt(r.uint64(), named).Underlying()
@@ -583,12 +582,12 @@ func (r *importReader) obj(name string) {
 				// typeparams being used in the method sig/body).
 				base := baseType(recv.Type())
 				assert(base != nil)
-				targs := typeparams.NamedTypeArgs(base)
-				var rparams []*typeparams.TypeParam
+				targs := base.TypeArgs()
+				var rparams []*types.TypeParam
 				if targs.Len() > 0 {
-					rparams = make([]*typeparams.TypeParam, targs.Len())
+					rparams = make([]*types.TypeParam, targs.Len())
 					for i := range rparams {
-						rparams[i] = targs.At(i).(*typeparams.TypeParam)
+						rparams[i] = targs.At(i).(*types.TypeParam)
 					}
 				}
 				msig := r.signature(recv, rparams, nil)
@@ -606,7 +605,7 @@ func (r *importReader) obj(name string) {
 		}
 		name0 := tparamName(name)
 		tn := types.NewTypeName(pos, r.currPkg, name0, nil)
-		t := typeparams.NewTypeParam(tn, nil)
+		t := types.NewTypeParam(tn, nil)
 
 		// To handle recursive references to the typeparam within its
 		// bound, save the partial type in tparamIndex before reading the bounds.
@@ -622,7 +621,7 @@ func (r *importReader) obj(name string) {
 			if iface == nil {
 				errorf("non-interface constraint marked implicit")
 			}
-			typeparams.MarkImplicit(iface)
+			iface.MarkImplicit()
 		}
 		// The constraint type may not be complete, if we
 		// are in the middle of a type recursion involving type
@@ -966,7 +965,7 @@ func (r *importReader) doType(base *types.Named) (res types.Type) {
 		// The imported instantiated type doesn't include any methods, so
 		// we must always use the methods of the base (orig) type.
 		// TODO provide a non-nil *Environment
-		t, _ := typeparams.Instantiate(nil, baseType, targs, false)
+		t, _ := types.Instantiate(nil, baseType, targs, false)
 
 		// Workaround for golang/go#61561. See the doc for instanceList for details.
 		r.p.instanceList = append(r.p.instanceList, t)
@@ -976,11 +975,11 @@ func (r *importReader) doType(base *types.Named) (res types.Type) {
 		if r.p.version < iexportVersionGenerics {
 			errorf("unexpected instantiation type")
 		}
-		terms := make([]*typeparams.Term, r.uint64())
+		terms := make([]*types.Term, r.uint64())
 		for i := range terms {
-			terms[i] = typeparams.NewTerm(r.bool(), r.typ())
+			terms[i] = types.NewTerm(r.bool(), r.typ())
 		}
-		return typeparams.NewUnion(terms)
+		return types.NewUnion(terms)
 	}
 }
 
@@ -1008,23 +1007,23 @@ func (r *importReader) objectPathObject() types.Object {
 	return obj
 }
 
-func (r *importReader) signature(recv *types.Var, rparams []*typeparams.TypeParam, tparams []*typeparams.TypeParam) *types.Signature {
+func (r *importReader) signature(recv *types.Var, rparams []*types.TypeParam, tparams []*types.TypeParam) *types.Signature {
 	params := r.paramList()
 	results := r.paramList()
 	variadic := params.Len() > 0 && r.bool()
-	return typeparams.NewSignatureType(recv, rparams, tparams, params, results, variadic)
+	return types.NewSignatureType(recv, rparams, tparams, params, results, variadic)
 }
 
-func (r *importReader) tparamList() []*typeparams.TypeParam {
+func (r *importReader) tparamList() []*types.TypeParam {
 	n := r.uint64()
 	if n == 0 {
 		return nil
 	}
-	xs := make([]*typeparams.TypeParam, n)
+	xs := make([]*types.TypeParam, n)
 	for i := range xs {
 		// Note: the standard library importer is tolerant of nil types here,
 		// though would panic in SetTypeParams.
-		xs[i] = r.typ().(*typeparams.TypeParam)
+		xs[i] = r.typ().(*types.TypeParam)
 	}
 	return xs
 }
diff --git a/vendor/golang.org/x/tools/internal/imports/fix.go b/vendor/golang.org/x/tools/internal/imports/fix.go
index 01e8ba5fa2d..dd369c072e0 100644
--- a/vendor/golang.org/x/tools/internal/imports/fix.go
+++ b/vendor/golang.org/x/tools/internal/imports/fix.go
@@ -254,7 +254,7 @@ type pass struct {
 	otherFiles           []*ast.File    // sibling files.
 
 	// Intermediate state, generated by load.
-	existingImports map[string]*ImportInfo
+	existingImports map[string][]*ImportInfo
 	allRefs         references
 	missingRefs     references
 
@@ -319,7 +319,7 @@ func (p *pass) importIdentifier(imp *ImportInfo) string {
 func (p *pass) load() ([]*ImportFix, bool) {
 	p.knownPackages = map[string]*packageInfo{}
 	p.missingRefs = references{}
-	p.existingImports = map[string]*ImportInfo{}
+	p.existingImports = map[string][]*ImportInfo{}
 
 	// Load basic information about the file in question.
 	p.allRefs = collectReferences(p.f)
@@ -350,7 +350,7 @@ func (p *pass) load() ([]*ImportFix, bool) {
 		}
 	}
 	for _, imp := range imports {
-		p.existingImports[p.importIdentifier(imp)] = imp
+		p.existingImports[p.importIdentifier(imp)] = append(p.existingImports[p.importIdentifier(imp)], imp)
 	}
 
 	// Find missing references.
@@ -389,31 +389,33 @@ func (p *pass) fix() ([]*ImportFix, bool) {
 
 	// Found everything, or giving up. Add the new imports and remove any unused.
 	var fixes []*ImportFix
-	for _, imp := range p.existingImports {
-		// We deliberately ignore globals here, because we can't be sure
-		// they're in the same package. People do things like put multiple
-		// main packages in the same directory, and we don't want to
-		// remove imports if they happen to have the same name as a var in
-		// a different package.
-		if _, ok := p.allRefs[p.importIdentifier(imp)]; !ok {
-			fixes = append(fixes, &ImportFix{
-				StmtInfo:  *imp,
-				IdentName: p.importIdentifier(imp),
-				FixType:   DeleteImport,
-			})
-			continue
-		}
+	for _, identifierImports := range p.existingImports {
+		for _, imp := range identifierImports {
+			// We deliberately ignore globals here, because we can't be sure
+			// they're in the same package. People do things like put multiple
+			// main packages in the same directory, and we don't want to
+			// remove imports if they happen to have the same name as a var in
+			// a different package.
+			if _, ok := p.allRefs[p.importIdentifier(imp)]; !ok {
+				fixes = append(fixes, &ImportFix{
+					StmtInfo:  *imp,
+					IdentName: p.importIdentifier(imp),
+					FixType:   DeleteImport,
+				})
+				continue
+			}
 
-		// An existing import may need to update its import name to be correct.
-		if name := p.importSpecName(imp); name != imp.Name {
-			fixes = append(fixes, &ImportFix{
-				StmtInfo: ImportInfo{
-					Name:       name,
-					ImportPath: imp.ImportPath,
-				},
-				IdentName: p.importIdentifier(imp),
-				FixType:   SetImportName,
-			})
+			// An existing import may need to update its import name to be correct.
+			if name := p.importSpecName(imp); name != imp.Name {
+				fixes = append(fixes, &ImportFix{
+					StmtInfo: ImportInfo{
+						Name:       name,
+						ImportPath: imp.ImportPath,
+					},
+					IdentName: p.importIdentifier(imp),
+					FixType:   SetImportName,
+				})
+			}
 		}
 	}
 	// Collecting fixes involved map iteration, so sort for stability. See
diff --git a/vendor/golang.org/x/tools/internal/typeparams/common.go b/vendor/golang.org/x/tools/internal/typeparams/common.go
index d0d0649fe2a..cdab9885314 100644
--- a/vendor/golang.org/x/tools/internal/typeparams/common.go
+++ b/vendor/golang.org/x/tools/internal/typeparams/common.go
@@ -42,7 +42,7 @@ func UnpackIndexExpr(n ast.Node) (x ast.Expr, lbrack token.Pos, indices []ast.Ex
 	switch e := n.(type) {
 	case *ast.IndexExpr:
 		return e.X, e.Lbrack, []ast.Expr{e.Index}, e.Rbrack
-	case *IndexListExpr:
+	case *ast.IndexListExpr:
 		return e.X, e.Lbrack, e.Indices, e.Rbrack
 	}
 	return nil, token.NoPos, nil, token.NoPos
@@ -63,7 +63,7 @@ func PackIndexExpr(x ast.Expr, lbrack token.Pos, indices []ast.Expr, rbrack toke
 			Rbrack: rbrack,
 		}
 	default:
-		return &IndexListExpr{
+		return &ast.IndexListExpr{
 			X:       x,
 			Lbrack:  lbrack,
 			Indices: indices,
@@ -74,7 +74,7 @@ func PackIndexExpr(x ast.Expr, lbrack token.Pos, indices []ast.Expr, rbrack toke
 
 // IsTypeParam reports whether t is a type parameter.
 func IsTypeParam(t types.Type) bool {
-	_, ok := t.(*TypeParam)
+	_, ok := t.(*types.TypeParam)
 	return ok
 }
 
@@ -100,11 +100,11 @@ func OriginMethod(fn *types.Func) *types.Func {
 		// Receiver is a *types.Interface.
 		return fn
 	}
-	if ForNamed(named).Len() == 0 {
+	if named.TypeParams().Len() == 0 {
 		// Receiver base has no type parameters, so we can avoid the lookup below.
 		return fn
 	}
-	orig := NamedTypeOrigin(named)
+	orig := named.Origin()
 	gfn, _, _ := types.LookupFieldOrMethod(orig, true, fn.Pkg(), fn.Name())
 
 	// This is a fix for a gopls crash (#60628) due to a go/types bug (#60634). In:
@@ -157,7 +157,7 @@ func OriginMethod(fn *types.Func) *types.Func {
 //
 // In this case, GenericAssignableTo reports that instantiations of Container
 // are assignable to the corresponding instantiation of Interface.
-func GenericAssignableTo(ctxt *Context, V, T types.Type) bool {
+func GenericAssignableTo(ctxt *types.Context, V, T types.Type) bool {
 	// If V and T are not both named, or do not have matching non-empty type
 	// parameter lists, fall back on types.AssignableTo.
 
@@ -167,9 +167,9 @@ func GenericAssignableTo(ctxt *Context, V, T types.Type) bool {
 		return types.AssignableTo(V, T)
 	}
 
-	vtparams := ForNamed(VN)
-	ttparams := ForNamed(TN)
-	if vtparams.Len() == 0 || vtparams.Len() != ttparams.Len() || NamedTypeArgs(VN).Len() != 0 || NamedTypeArgs(TN).Len() != 0 {
+	vtparams := VN.TypeParams()
+	ttparams := TN.TypeParams()
+	if vtparams.Len() == 0 || vtparams.Len() != ttparams.Len() || VN.TypeArgs().Len() != 0 || TN.TypeArgs().Len() != 0 {
 		return types.AssignableTo(V, T)
 	}
 
@@ -182,7 +182,7 @@ func GenericAssignableTo(ctxt *Context, V, T types.Type) bool {
 	// Minor optimization: ensure we share a context across the two
 	// instantiations below.
 	if ctxt == nil {
-		ctxt = NewContext()
+		ctxt = types.NewContext()
 	}
 
 	var targs []types.Type
@@ -190,12 +190,12 @@ func GenericAssignableTo(ctxt *Context, V, T types.Type) bool {
 		targs = append(targs, vtparams.At(i))
 	}
 
-	vinst, err := Instantiate(ctxt, V, targs, true)
+	vinst, err := types.Instantiate(ctxt, V, targs, true)
 	if err != nil {
 		panic("type parameters should satisfy their own constraints")
 	}
 
-	tinst, err := Instantiate(ctxt, T, targs, true)
+	tinst, err := types.Instantiate(ctxt, T, targs, true)
 	if err != nil {
 		return false
 	}
diff --git a/vendor/golang.org/x/tools/internal/typeparams/coretype.go b/vendor/golang.org/x/tools/internal/typeparams/coretype.go
index 71248209ee5..7ea8840eab7 100644
--- a/vendor/golang.org/x/tools/internal/typeparams/coretype.go
+++ b/vendor/golang.org/x/tools/internal/typeparams/coretype.go
@@ -108,15 +108,15 @@ func CoreType(T types.Type) types.Type {
 //
 // _NormalTerms makes no guarantees about the order of terms, except that it
 // is deterministic.
-func _NormalTerms(typ types.Type) ([]*Term, error) {
+func _NormalTerms(typ types.Type) ([]*types.Term, error) {
 	switch typ := typ.(type) {
-	case *TypeParam:
+	case *types.TypeParam:
 		return StructuralTerms(typ)
-	case *Union:
+	case *types.Union:
 		return UnionTermSet(typ)
 	case *types.Interface:
 		return InterfaceTermSet(typ)
 	default:
-		return []*Term{NewTerm(false, typ)}, nil
+		return []*types.Term{types.NewTerm(false, typ)}, nil
 	}
 }
diff --git a/vendor/golang.org/x/tools/internal/typeparams/enabled_go117.go b/vendor/golang.org/x/tools/internal/typeparams/enabled_go117.go
deleted file mode 100644
index 18212390e19..00000000000
--- a/vendor/golang.org/x/tools/internal/typeparams/enabled_go117.go
+++ /dev/null
@@ -1,12 +0,0 @@
-// Copyright 2021 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-//go:build !go1.18
-// +build !go1.18
-
-package typeparams
-
-// Enabled reports whether type parameters are enabled in the current build
-// environment.
-const Enabled = false
diff --git a/vendor/golang.org/x/tools/internal/typeparams/enabled_go118.go b/vendor/golang.org/x/tools/internal/typeparams/enabled_go118.go
deleted file mode 100644
index d67148823c4..00000000000
--- a/vendor/golang.org/x/tools/internal/typeparams/enabled_go118.go
+++ /dev/null
@@ -1,15 +0,0 @@
-// Copyright 2021 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-//go:build go1.18
-// +build go1.18
-
-package typeparams
-
-// Note: this constant is in a separate file as this is the only acceptable
-// diff between the <1.18 API of this package and the 1.18 API.
-
-// Enabled reports whether type parameters are enabled in the current build
-// environment.
-const Enabled = true
diff --git a/vendor/golang.org/x/tools/internal/typeparams/normalize.go b/vendor/golang.org/x/tools/internal/typeparams/normalize.go
index 9c631b6512d..93c80fdc96c 100644
--- a/vendor/golang.org/x/tools/internal/typeparams/normalize.go
+++ b/vendor/golang.org/x/tools/internal/typeparams/normalize.go
@@ -60,7 +60,7 @@ var ErrEmptyTypeSet = errors.New("empty type set")
 //
 // StructuralTerms makes no guarantees about the order of terms, except that it
 // is deterministic.
-func StructuralTerms(tparam *TypeParam) ([]*Term, error) {
+func StructuralTerms(tparam *types.TypeParam) ([]*types.Term, error) {
 	constraint := tparam.Constraint()
 	if constraint == nil {
 		return nil, fmt.Errorf("%s has nil constraint", tparam)
@@ -78,7 +78,7 @@ func StructuralTerms(tparam *TypeParam) ([]*Term, error) {
 //
 // See the documentation of StructuralTerms for more information on
 // normalization.
-func InterfaceTermSet(iface *types.Interface) ([]*Term, error) {
+func InterfaceTermSet(iface *types.Interface) ([]*types.Term, error) {
 	return computeTermSet(iface)
 }
 
@@ -88,11 +88,11 @@ func InterfaceTermSet(iface *types.Interface) ([]*Term, error) {
 //
 // See the documentation of StructuralTerms for more information on
 // normalization.
-func UnionTermSet(union *Union) ([]*Term, error) {
+func UnionTermSet(union *types.Union) ([]*types.Term, error) {
 	return computeTermSet(union)
 }
 
-func computeTermSet(typ types.Type) ([]*Term, error) {
+func computeTermSet(typ types.Type) ([]*types.Term, error) {
 	tset, err := computeTermSetInternal(typ, make(map[types.Type]*termSet), 0)
 	if err != nil {
 		return nil, err
@@ -103,9 +103,9 @@ func computeTermSet(typ types.Type) ([]*Term, error) {
 	if tset.terms.isAll() {
 		return nil, nil
 	}
-	var terms []*Term
+	var terms []*types.Term
 	for _, term := range tset.terms {
-		terms = append(terms, NewTerm(term.tilde, term.typ))
+		terms = append(terms, types.NewTerm(term.tilde, term.typ))
 	}
 	return terms, nil
 }
@@ -162,7 +162,7 @@ func computeTermSetInternal(t types.Type, seen map[types.Type]*termSet, depth in
 		tset.terms = allTermlist
 		for i := 0; i < u.NumEmbeddeds(); i++ {
 			embedded := u.EmbeddedType(i)
-			if _, ok := embedded.Underlying().(*TypeParam); ok {
+			if _, ok := embedded.Underlying().(*types.TypeParam); ok {
 				return nil, fmt.Errorf("invalid embedded type %T", embedded)
 			}
 			tset2, err := computeTermSetInternal(embedded, seen, depth+1)
@@ -171,7 +171,7 @@ func computeTermSetInternal(t types.Type, seen map[types.Type]*termSet, depth in
 			}
 			tset.terms = tset.terms.intersect(tset2.terms)
 		}
-	case *Union:
+	case *types.Union:
 		// The term set of a union is the union of term sets of its terms.
 		tset.terms = nil
 		for i := 0; i < u.Len(); i++ {
@@ -184,7 +184,7 @@ func computeTermSetInternal(t types.Type, seen map[types.Type]*termSet, depth in
 					return nil, err
 				}
 				terms = tset2.terms
-			case *TypeParam, *Union:
+			case *types.TypeParam, *types.Union:
 				// A stand-alone type parameter or union is not permitted as union
 				// term.
 				return nil, fmt.Errorf("invalid union term %T", t)
@@ -199,7 +199,7 @@ func computeTermSetInternal(t types.Type, seen map[types.Type]*termSet, depth in
 				return nil, fmt.Errorf("exceeded max term count %d", maxTermCount)
 			}
 		}
-	case *TypeParam:
+	case *types.TypeParam:
 		panic("unreachable")
 	default:
 		// For all other types, the term set is just a single non-tilde term
diff --git a/vendor/golang.org/x/tools/internal/typeparams/typeparams_go117.go b/vendor/golang.org/x/tools/internal/typeparams/typeparams_go117.go
deleted file mode 100644
index 7ed86e1711b..00000000000
--- a/vendor/golang.org/x/tools/internal/typeparams/typeparams_go117.go
+++ /dev/null
@@ -1,197 +0,0 @@
-// Copyright 2021 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-//go:build !go1.18
-// +build !go1.18
-
-package typeparams
-
-import (
-	"go/ast"
-	"go/token"
-	"go/types"
-)
-
-func unsupported() {
-	panic("type parameters are unsupported at this go version")
-}
-
-// IndexListExpr is a placeholder type, as type parameters are not supported at
-// this Go version. Its methods panic on use.
-type IndexListExpr struct {
-	ast.Expr
-	X       ast.Expr   // expression
-	Lbrack  token.Pos  // position of "["
-	Indices []ast.Expr // index expressions
-	Rbrack  token.Pos  // position of "]"
-}
-
-// ForTypeSpec returns an empty field list, as type parameters on not supported
-// at this Go version.
-func ForTypeSpec(*ast.TypeSpec) *ast.FieldList {
-	return nil
-}
-
-// ForFuncType returns an empty field list, as type parameters are not
-// supported at this Go version.
-func ForFuncType(*ast.FuncType) *ast.FieldList {
-	return nil
-}
-
-// TypeParam is a placeholder type, as type parameters are not supported at
-// this Go version. Its methods panic on use.
-type TypeParam struct{ types.Type }
-
-func (*TypeParam) Index() int             { unsupported(); return 0 }
-func (*TypeParam) Constraint() types.Type { unsupported(); return nil }
-func (*TypeParam) Obj() *types.TypeName   { unsupported(); return nil }
-
-// TypeParamList is a placeholder for an empty type parameter list.
-type TypeParamList struct{}
-
-func (*TypeParamList) Len() int          { return 0 }
-func (*TypeParamList) At(int) *TypeParam { unsupported(); return nil }
-
-// TypeList is a placeholder for an empty type list.
-type TypeList struct{}
-
-func (*TypeList) Len() int          { return 0 }
-func (*TypeList) At(int) types.Type { unsupported(); return nil }
-
-// NewTypeParam is unsupported at this Go version, and panics.
-func NewTypeParam(name *types.TypeName, constraint types.Type) *TypeParam {
-	unsupported()
-	return nil
-}
-
-// SetTypeParamConstraint is unsupported at this Go version, and panics.
-func SetTypeParamConstraint(tparam *TypeParam, constraint types.Type) {
-	unsupported()
-}
-
-// NewSignatureType calls types.NewSignature, panicking if recvTypeParams or
-// typeParams is non-empty.
-func NewSignatureType(recv *types.Var, recvTypeParams, typeParams []*TypeParam, params, results *types.Tuple, variadic bool) *types.Signature {
-	if len(recvTypeParams) != 0 || len(typeParams) != 0 {
-		panic("signatures cannot have type parameters at this Go version")
-	}
-	return types.NewSignature(recv, params, results, variadic)
-}
-
-// ForSignature returns an empty slice.
-func ForSignature(*types.Signature) *TypeParamList {
-	return nil
-}
-
-// RecvTypeParams returns a nil slice.
-func RecvTypeParams(sig *types.Signature) *TypeParamList {
-	return nil
-}
-
-// IsComparable returns false, as no interfaces are type-restricted at this Go
-// version.
-func IsComparable(*types.Interface) bool {
-	return false
-}
-
-// IsMethodSet returns true, as no interfaces are type-restricted at this Go
-// version.
-func IsMethodSet(*types.Interface) bool {
-	return true
-}
-
-// IsImplicit returns false, as no interfaces are implicit at this Go version.
-func IsImplicit(*types.Interface) bool {
-	return false
-}
-
-// MarkImplicit does nothing, because this Go version does not have implicit
-// interfaces.
-func MarkImplicit(*types.Interface) {}
-
-// ForNamed returns an empty type parameter list, as type parameters are not
-// supported at this Go version.
-func ForNamed(*types.Named) *TypeParamList {
-	return nil
-}
-
-// SetForNamed panics if tparams is non-empty.
-func SetForNamed(_ *types.Named, tparams []*TypeParam) {
-	if len(tparams) > 0 {
-		unsupported()
-	}
-}
-
-// NamedTypeArgs returns nil.
-func NamedTypeArgs(*types.Named) *TypeList {
-	return nil
-}
-
-// NamedTypeOrigin is the identity method at this Go version.
-func NamedTypeOrigin(named *types.Named) *types.Named {
-	return named
-}
-
-// Term holds information about a structural type restriction.
-type Term struct {
-	tilde bool
-	typ   types.Type
-}
-
-func (m *Term) Tilde() bool      { return m.tilde }
-func (m *Term) Type() types.Type { return m.typ }
-func (m *Term) String() string {
-	pre := ""
-	if m.tilde {
-		pre = "~"
-	}
-	return pre + m.typ.String()
-}
-
-// NewTerm is unsupported at this Go version, and panics.
-func NewTerm(tilde bool, typ types.Type) *Term {
-	return &Term{tilde, typ}
-}
-
-// Union is a placeholder type, as type parameters are not supported at this Go
-// version. Its methods panic on use.
-type Union struct{ types.Type }
-
-func (*Union) Len() int         { return 0 }
-func (*Union) Term(i int) *Term { unsupported(); return nil }
-
-// NewUnion is unsupported at this Go version, and panics.
-func NewUnion(terms []*Term) *Union {
-	unsupported()
-	return nil
-}
-
-// InitInstanceInfo is a noop at this Go version.
-func InitInstanceInfo(*types.Info) {}
-
-// Instance is a placeholder type, as type parameters are not supported at this
-// Go version.
-type Instance struct {
-	TypeArgs *TypeList
-	Type     types.Type
-}
-
-// GetInstances returns a nil map, as type parameters are not supported at this
-// Go version.
-func GetInstances(info *types.Info) map[*ast.Ident]Instance { return nil }
-
-// Context is a placeholder type, as type parameters are not supported at
-// this Go version.
-type Context struct{}
-
-// NewContext returns a placeholder Context instance.
-func NewContext() *Context {
-	return &Context{}
-}
-
-// Instantiate is unsupported on this Go version, and panics.
-func Instantiate(ctxt *Context, typ types.Type, targs []types.Type, validate bool) (types.Type, error) {
-	unsupported()
-	return nil, nil
-}
diff --git a/vendor/golang.org/x/tools/internal/typeparams/typeparams_go118.go b/vendor/golang.org/x/tools/internal/typeparams/typeparams_go118.go
deleted file mode 100644
index cf301af1dbe..00000000000
--- a/vendor/golang.org/x/tools/internal/typeparams/typeparams_go118.go
+++ /dev/null
@@ -1,151 +0,0 @@
-// Copyright 2021 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-//go:build go1.18
-// +build go1.18
-
-package typeparams
-
-import (
-	"go/ast"
-	"go/types"
-)
-
-// IndexListExpr is an alias for ast.IndexListExpr.
-type IndexListExpr = ast.IndexListExpr
-
-// ForTypeSpec returns n.TypeParams.
-func ForTypeSpec(n *ast.TypeSpec) *ast.FieldList {
-	if n == nil {
-		return nil
-	}
-	return n.TypeParams
-}
-
-// ForFuncType returns n.TypeParams.
-func ForFuncType(n *ast.FuncType) *ast.FieldList {
-	if n == nil {
-		return nil
-	}
-	return n.TypeParams
-}
-
-// TypeParam is an alias for types.TypeParam
-type TypeParam = types.TypeParam
-
-// TypeParamList is an alias for types.TypeParamList
-type TypeParamList = types.TypeParamList
-
-// TypeList is an alias for types.TypeList
-type TypeList = types.TypeList
-
-// NewTypeParam calls types.NewTypeParam.
-func NewTypeParam(name *types.TypeName, constraint types.Type) *TypeParam {
-	return types.NewTypeParam(name, constraint)
-}
-
-// SetTypeParamConstraint calls tparam.SetConstraint(constraint).
-func SetTypeParamConstraint(tparam *TypeParam, constraint types.Type) {
-	tparam.SetConstraint(constraint)
-}
-
-// NewSignatureType calls types.NewSignatureType.
-func NewSignatureType(recv *types.Var, recvTypeParams, typeParams []*TypeParam, params, results *types.Tuple, variadic bool) *types.Signature {
-	return types.NewSignatureType(recv, recvTypeParams, typeParams, params, results, variadic)
-}
-
-// ForSignature returns sig.TypeParams()
-func ForSignature(sig *types.Signature) *TypeParamList {
-	return sig.TypeParams()
-}
-
-// RecvTypeParams returns sig.RecvTypeParams().
-func RecvTypeParams(sig *types.Signature) *TypeParamList {
-	return sig.RecvTypeParams()
-}
-
-// IsComparable calls iface.IsComparable().
-func IsComparable(iface *types.Interface) bool {
-	return iface.IsComparable()
-}
-
-// IsMethodSet calls iface.IsMethodSet().
-func IsMethodSet(iface *types.Interface) bool {
-	return iface.IsMethodSet()
-}
-
-// IsImplicit calls iface.IsImplicit().
-func IsImplicit(iface *types.Interface) bool {
-	return iface.IsImplicit()
-}
-
-// MarkImplicit calls iface.MarkImplicit().
-func MarkImplicit(iface *types.Interface) {
-	iface.MarkImplicit()
-}
-
-// ForNamed extracts the (possibly empty) type parameter object list from
-// named.
-func ForNamed(named *types.Named) *TypeParamList {
-	return named.TypeParams()
-}
-
-// SetForNamed sets the type params tparams on n. Each tparam must be of
-// dynamic type *types.TypeParam.
-func SetForNamed(n *types.Named, tparams []*TypeParam) {
-	n.SetTypeParams(tparams)
-}
-
-// NamedTypeArgs returns named.TypeArgs().
-func NamedTypeArgs(named *types.Named) *TypeList {
-	return named.TypeArgs()
-}
-
-// NamedTypeOrigin returns named.Orig().
-func NamedTypeOrigin(named *types.Named) *types.Named {
-	return named.Origin()
-}
-
-// Term is an alias for types.Term.
-type Term = types.Term
-
-// NewTerm calls types.NewTerm.
-func NewTerm(tilde bool, typ types.Type) *Term {
-	return types.NewTerm(tilde, typ)
-}
-
-// Union is an alias for types.Union
-type Union = types.Union
-
-// NewUnion calls types.NewUnion.
-func NewUnion(terms []*Term) *Union {
-	return types.NewUnion(terms)
-}
-
-// InitInstanceInfo initializes info to record information about type and
-// function instances.
-func InitInstanceInfo(info *types.Info) {
-	info.Instances = make(map[*ast.Ident]types.Instance)
-}
-
-// Instance is an alias for types.Instance.
-type Instance = types.Instance
-
-// GetInstances returns info.Instances.
-func GetInstances(info *types.Info) map[*ast.Ident]Instance {
-	return info.Instances
-}
-
-// Context is an alias for types.Context.
-type Context = types.Context
-
-// NewContext calls types.NewContext.
-func NewContext() *Context {
-	return types.NewContext()
-}
-
-// Instantiate calls types.Instantiate.
-func Instantiate(ctxt *Context, typ types.Type, targs []types.Type, validate bool) (types.Type, error) {
-	return types.Instantiate(ctxt, typ, targs, validate)
-}
diff --git a/vendor/golang.org/x/tools/internal/versions/versions_go121.go b/vendor/golang.org/x/tools/internal/versions/versions.go
similarity index 80%
rename from vendor/golang.org/x/tools/internal/versions/versions_go121.go
rename to vendor/golang.org/x/tools/internal/versions/versions.go
index cf4a7d0360f..e16f6c33a52 100644
--- a/vendor/golang.org/x/tools/internal/versions/versions_go121.go
+++ b/vendor/golang.org/x/tools/internal/versions/versions.go
@@ -2,11 +2,14 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
-//go:build !go1.22
-// +build !go1.22
-
 package versions
 
+// Note: If we use build tags to use go/versions when go >=1.22,
+// we run into go.dev/issue/53737. Under some operations users would see an
+// import of "go/versions" even if they would not compile the file.
+// For example, during `go get -u ./...` (go.dev/issue/64490) we do not try to include
+// For this reason, this library just a clone of go/versions for the moment.
+
 // Lang returns the Go language version for version x.
 // If x is not a valid version, Lang returns the empty string.
 // For example:
diff --git a/vendor/golang.org/x/tools/internal/versions/versions_go122.go b/vendor/golang.org/x/tools/internal/versions/versions_go122.go
deleted file mode 100644
index c1c1814b28d..00000000000
--- a/vendor/golang.org/x/tools/internal/versions/versions_go122.go
+++ /dev/null
@@ -1,38 +0,0 @@
-// Copyright 2023 The Go Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-//go:build go1.22
-// +build go1.22
-
-package versions
-
-import (
-	"go/version"
-)
-
-// Lang returns the Go language version for version x.
-// If x is not a valid version, Lang returns the empty string.
-// For example:
-//
-//	Lang("go1.21rc2") = "go1.21"
-//	Lang("go1.21.2") = "go1.21"
-//	Lang("go1.21") = "go1.21"
-//	Lang("go1") = "go1"
-//	Lang("bad") = ""
-//	Lang("1.21") = ""
-func Lang(x string) string { return version.Lang(x) }
-
-// Compare returns -1, 0, or +1 depending on whether
-// x < y, x == y, or x > y, interpreted as Go versions.
-// The versions x and y must begin with a "go" prefix: "go1.21" not "1.21".
-// Invalid versions, including the empty string, compare less than
-// valid versions and equal to each other.
-// The language version "go1.21" compares less than the
-// release candidate and eventual releases "go1.21rc1" and "go1.21.0".
-// Custom toolchain suffixes are ignored during comparison:
-// "go1.21.0" and "go1.21.0-bigcorp" are equal.
-func Compare(x, y string) int { return version.Compare(x, y) }
-
-// IsValid reports whether the version x is valid.
-func IsValid(x string) bool { return version.IsValid(x) }
diff --git a/vendor/google.golang.org/api/compute/v1/compute-api.json b/vendor/google.golang.org/api/compute/v1/compute-api.json
index 2411236d405..92948da62ad 100644
--- a/vendor/google.golang.org/api/compute/v1/compute-api.json
+++ b/vendor/google.golang.org/api/compute/v1/compute-api.json
@@ -1367,7 +1367,7 @@
           ],
           "parameters": {
             "backendBucket": {
-              "description": "Name of the BackendService resource to which the security policy should be set. The name should conform to RFC1035.",
+              "description": "Name of the BackendBucket resource to which the security policy should be set. The name should conform to RFC1035.",
               "location": "path",
               "required": true,
               "type": "string"
@@ -8066,7 +8066,7 @@
           ]
         },
         "listManagedInstances": {
-          "description": "Lists all of the instances in the managed instance group. Each instance in the list has a currentAction, which indicates the action that the managed instance group is performing on the instance. For example, if the group is still creating an instance, the currentAction is CREATING. If a previous action failed, the list displays the errors for that failed action. The orderBy query parameter is not supported. The `pageToken` query parameter is supported only in the alpha and beta API and only if the group's `listManagedInstancesResults` field is set to `PAGINATED`.",
+          "description": "Lists all of the instances in the managed instance group. Each instance in the list has a currentAction, which indicates the action that the managed instance group is performing on the instance. For example, if the group is still creating an instance, the currentAction is CREATING. If a previous action failed, the list displays the errors for that failed action. The orderBy query parameter is not supported. The `pageToken` query parameter is supported only if the group's `listManagedInstancesResults` field is set to `PAGINATED`.",
           "flatPath": "projects/{project}/zones/{zone}/instanceGroupManagers/{instanceGroupManager}/listManagedInstances",
           "httpMethod": "POST",
           "id": "compute.instanceGroupManagers.listManagedInstances",
@@ -10326,6 +10326,53 @@
             "https://www.googleapis.com/auth/compute.readonly"
           ]
         },
+        "performMaintenance": {
+          "description": "Perform a manual maintenance on the instance.",
+          "flatPath": "projects/{project}/zones/{zone}/instances/{instance}/performMaintenance",
+          "httpMethod": "POST",
+          "id": "compute.instances.performMaintenance",
+          "parameterOrder": [
+            "project",
+            "zone",
+            "instance"
+          ],
+          "parameters": {
+            "instance": {
+              "description": "Name of the instance scoping this request.",
+              "location": "path",
+              "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+              "required": true,
+              "type": "string"
+            },
+            "project": {
+              "description": "Project ID for this request.",
+              "location": "path",
+              "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+              "required": true,
+              "type": "string"
+            },
+            "requestId": {
+              "description": "An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).",
+              "location": "query",
+              "type": "string"
+            },
+            "zone": {
+              "description": "The name of the zone for this request.",
+              "location": "path",
+              "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
+              "required": true,
+              "type": "string"
+            }
+          },
+          "path": "projects/{project}/zones/{zone}/instances/{instance}/performMaintenance",
+          "response": {
+            "$ref": "Operation"
+          },
+          "scopes": [
+            "https://www.googleapis.com/auth/cloud-platform",
+            "https://www.googleapis.com/auth/compute"
+          ]
+        },
         "removeResourcePolicies": {
           "description": "Removes resource policies from an instance.",
           "flatPath": "projects/{project}/zones/{zone}/instances/{instance}/removeResourcePolicies",
@@ -11248,6 +11295,11 @@
               "location": "query",
               "type": "string"
             },
+            "withExtendedNotifications": {
+              "description": "Determines whether the customers receive notifications before migration. Only applicable to SF vms.",
+              "location": "query",
+              "type": "boolean"
+            },
             "zone": {
               "description": "The name of the zone for this request.",
               "location": "path",
@@ -11374,7 +11426,7 @@
           ],
           "parameters": {
             "discardLocalSsd": {
-              "description": "If true, discard the contents of any attached localSSD partitions. Default value is false.",
+              "description": "This property is required if the instance has any attached Local SSD disks. If false, Local SSD data will be preserved when the instance is suspended. If true, the contents of any attached Local SSD disks will be discarded.",
               "location": "query",
               "type": "boolean"
             },
@@ -11426,7 +11478,7 @@
           ],
           "parameters": {
             "discardLocalSsd": {
-              "description": "If true, discard the contents of any attached localSSD partitions. Default value is false.",
+              "description": "This property is required if the instance has any attached Local SSD disks. If false, Local SSD data will be preserved when the instance is suspended. If true, the contents of any attached Local SSD disks will be discarded.",
               "location": "query",
               "type": "boolean"
             },
@@ -21869,7 +21921,7 @@
           ]
         },
         "listManagedInstances": {
-          "description": "Lists the instances in the managed instance group and instances that are scheduled to be created. The list includes any current actions that the group has scheduled for its instances. The orderBy query parameter is not supported. The `pageToken` query parameter is supported only in the alpha and beta API and only if the group's `listManagedInstancesResults` field is set to `PAGINATED`.",
+          "description": "Lists the instances in the managed instance group and instances that are scheduled to be created. The list includes any current actions that the group has scheduled for its instances. The orderBy query parameter is not supported. The `pageToken` query parameter is supported only if the group's `listManagedInstancesResults` field is set to `PAGINATED`.",
           "flatPath": "projects/{project}/regions/{region}/instanceGroupManagers/{instanceGroupManager}/listManagedInstances",
           "httpMethod": "POST",
           "id": "compute.regionInstanceGroupManagers.listManagedInstances",
@@ -26547,6 +26599,73 @@
         }
       }
     },
+    "regionZones": {
+      "methods": {
+        "list": {
+          "description": "Retrieves the list of Zone resources under the specific region available to the specified project.",
+          "flatPath": "projects/{project}/regions/{region}/zones",
+          "httpMethod": "GET",
+          "id": "compute.regionZones.list",
+          "parameterOrder": [
+            "project",
+            "region"
+          ],
+          "parameters": {
+            "filter": {
+              "description": "A filter expression that filters resources listed in the response. Most Compute resources support two types of filter expressions: expressions that support regular expressions and expressions that follow API improvement proposal AIP-160. These two types of filter expressions cannot be mixed in one request. If you want to use AIP-160, your expression must specify the field name, an operator, and the value that you want to use for filtering. The value must be a string, a number, or a boolean. The operator must be either `=`, `!=`, `\u003e`, `\u003c`, `\u003c=`, `\u003e=` or `:`. For example, if you are filtering Compute Engine instances, you can exclude instances named `example-instance` by specifying `name != example-instance`. The `:*` comparison can be used to test whether a key has been defined. For example, to find all objects with `owner` label use: ``` labels.owner:* ``` You can also filter nested fields. For example, you could specify `scheduling.automaticRestart = false` to include instances only if they are not scheduled for automatic restarts. You can use filtering on nested fields to filter based on resource labels. To filter on multiple expressions, provide each separate expression within parentheses. For example: ``` (scheduling.automaticRestart = true) (cpuPlatform = \"Intel Skylake\") ``` By default, each expression is an `AND` expression. However, you can include `AND` and `OR` expressions explicitly. For example: ``` (cpuPlatform = \"Intel Skylake\") OR (cpuPlatform = \"Intel Broadwell\") AND (scheduling.automaticRestart = true) ``` If you want to use a regular expression, use the `eq` (equal) or `ne` (not equal) operator against a single un-parenthesized expression with or without quotes or against multiple parenthesized expressions. Examples: `fieldname eq unquoted literal` `fieldname eq 'single quoted literal'` `fieldname eq \"double quoted literal\"` `(fieldname1 eq literal) (fieldname2 ne \"literal\")` The literal value is interpreted as a regular expression using Google RE2 library syntax. The literal value must match the entire field. For example, to filter for instances that do not end with name \"instance\", you would use `name ne .*instance`. You cannot combine constraints on multiple fields using regular expressions.",
+              "location": "query",
+              "type": "string"
+            },
+            "maxResults": {
+              "default": "500",
+              "description": "The maximum number of results per page that should be returned. If the number of available results is larger than `maxResults`, Compute Engine returns a `nextPageToken` that can be used to get the next page of results in subsequent list requests. Acceptable values are `0` to `500`, inclusive. (Default: `500`)",
+              "format": "uint32",
+              "location": "query",
+              "minimum": "0",
+              "type": "integer"
+            },
+            "orderBy": {
+              "description": "Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based on the creation timestamp using `orderBy=\"creationTimestamp desc\"`. This sorts results based on the `creationTimestamp` field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first. Currently, only sorting by `name` or `creationTimestamp desc` is supported.",
+              "location": "query",
+              "type": "string"
+            },
+            "pageToken": {
+              "description": "Specifies a page token to use. Set `pageToken` to the `nextPageToken` returned by a previous list request to get the next page of results.",
+              "location": "query",
+              "type": "string"
+            },
+            "project": {
+              "description": "Project ID for this request.",
+              "location": "path",
+              "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+              "required": true,
+              "type": "string"
+            },
+            "region": {
+              "description": "Region for this request.",
+              "location": "path",
+              "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
+              "required": true,
+              "type": "string"
+            },
+            "returnPartialSuccess": {
+              "description": "Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.",
+              "location": "query",
+              "type": "boolean"
+            }
+          },
+          "path": "projects/{project}/regions/{region}/zones",
+          "response": {
+            "$ref": "ZoneList"
+          },
+          "scopes": [
+            "https://www.googleapis.com/auth/cloud-platform",
+            "https://www.googleapis.com/auth/compute",
+            "https://www.googleapis.com/auth/compute.readonly"
+          ]
+        }
+      }
+    },
     "regions": {
       "methods": {
         "get": {
@@ -33196,7 +33315,7 @@
           ]
         },
         "setSslPolicy": {
-          "description": "Sets the SSL policy for TargetSslProxy. The SSL policy specifies the server-side support for SSL features. This affects connections between clients and the SSL proxy load balancer. They do not affect the connection between the load balancer and the backends.",
+          "description": "Sets the SSL policy for TargetSslProxy. The SSL policy specifies the server-side support for SSL features. This affects connections between clients and the load balancer. They do not affect the connection between the load balancer and the backends.",
           "flatPath": "projects/{project}/global/targetSslProxies/{targetSslProxy}/setSslPolicy",
           "httpMethod": "POST",
           "id": "compute.targetSslProxies.setSslPolicy",
@@ -35267,7 +35386,7 @@
       }
     }
   },
-  "revision": "20231031",
+  "revision": "20240109",
   "rootUrl": "https://compute.googleapis.com/",
   "schemas": {
     "AWSV4Signature": {
@@ -36528,6 +36647,80 @@
       },
       "type": "object"
     },
+    "AllocationAggregateReservation": {
+      "description": "This reservation type is specified by total resource amounts (e.g. total count of CPUs) and can account for multiple instance SKUs. In other words, one can create instances of varying shapes against this reservation.",
+      "id": "AllocationAggregateReservation",
+      "properties": {
+        "inUseResources": {
+          "description": "[Output only] List of resources currently in use.",
+          "items": {
+            "$ref": "AllocationAggregateReservationReservedResourceInfo"
+          },
+          "type": "array"
+        },
+        "reservedResources": {
+          "description": "List of reserved resources (CPUs, memory, accelerators).",
+          "items": {
+            "$ref": "AllocationAggregateReservationReservedResourceInfo"
+          },
+          "type": "array"
+        },
+        "vmFamily": {
+          "description": "The VM family that all instances scheduled against this reservation must belong to.",
+          "enum": [
+            "VM_FAMILY_CLOUD_TPU_LITE_DEVICE_CT5L",
+            "VM_FAMILY_CLOUD_TPU_LITE_POD_SLICE_CT5LP",
+            "VM_FAMILY_CLOUD_TPU_POD_SLICE_CT4P"
+          ],
+          "enumDescriptions": [
+            "",
+            "",
+            ""
+          ],
+          "type": "string"
+        },
+        "workloadType": {
+          "description": "The workload type of the instances that will target this reservation.",
+          "enum": [
+            "BATCH",
+            "SERVING",
+            "UNSPECIFIED"
+          ],
+          "enumDescriptions": [
+            "Reserved resources will be optimized for BATCH workloads, such as ML training.",
+            "Reserved resources will be optimized for SERVING workloads, such as ML inference.",
+            ""
+          ],
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "AllocationAggregateReservationReservedResourceInfo": {
+      "id": "AllocationAggregateReservationReservedResourceInfo",
+      "properties": {
+        "accelerator": {
+          "$ref": "AllocationAggregateReservationReservedResourceInfoAccelerator",
+          "description": "Properties of accelerator resources in this reservation."
+        }
+      },
+      "type": "object"
+    },
+    "AllocationAggregateReservationReservedResourceInfoAccelerator": {
+      "id": "AllocationAggregateReservationReservedResourceInfoAccelerator",
+      "properties": {
+        "acceleratorCount": {
+          "description": "Number of accelerators of specified type.",
+          "format": "int32",
+          "type": "integer"
+        },
+        "acceleratorType": {
+          "description": "Full or partial URL to accelerator type. e.g. \"projects/{PROJECT}/zones/{ZONE}/acceleratorTypes/ct4l\"",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "AllocationResourceStatus": {
       "description": "[Output Only] Contains output only fields.",
       "id": "AllocationResourceStatus",
@@ -36801,6 +36994,10 @@
           "description": "Specifies the disk type to use to create the instance. If not specified, the default is pd-standard, specified using the full URL. For example: https://www.googleapis.com/compute/v1/projects/project/zones/zone /diskTypes/pd-standard For a full list of acceptable values, see Persistent disk types. If you specify this field when creating a VM, you can provide either the full or partial URL. For example, the following values are valid: - https://www.googleapis.com/compute/v1/projects/project/zones/zone /diskTypes/diskType - projects/project/zones/zone/diskTypes/diskType - zones/zone/diskTypes/diskType If you specify this field when creating or updating an instance template or all-instances configuration, specify the type of the disk, not the URL. For example: pd-standard.",
           "type": "string"
         },
+        "enableConfidentialCompute": {
+          "description": "Whether this disk is using confidential compute mode.",
+          "type": "boolean"
+        },
         "labels": {
           "additionalProperties": {
             "type": "string"
@@ -38172,7 +38369,7 @@
       "id": "BackendService",
       "properties": {
         "affinityCookieTtlSec": {
-          "description": "Lifetime of cookies in seconds. This setting is applicable to external and internal HTTP(S) load balancers and Traffic Director and requires GENERATED_COOKIE or HTTP_COOKIE session affinity. If set to 0, the cookie is non-persistent and lasts only until the end of the browser session (or equivalent). The maximum allowed value is two weeks (1,209,600). Not supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true.",
+          "description": "Lifetime of cookies in seconds. This setting is applicable to Application Load Balancers and Traffic Director and requires GENERATED_COOKIE or HTTP_COOKIE session affinity. If set to 0, the cookie is non-persistent and lasts only until the end of the browser session (or equivalent). The maximum allowed value is two weeks (1,209,600). Not supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true.",
           "format": "int32",
           "type": "integer"
         },
@@ -38207,7 +38404,7 @@
         },
         "connectionTrackingPolicy": {
           "$ref": "BackendServiceConnectionTrackingPolicy",
-          "description": "Connection Tracking configuration for this BackendService. Connection tracking policy settings are only available for Network Load Balancing and Internal TCP/UDP Load Balancing."
+          "description": "Connection Tracking configuration for this BackendService. Connection tracking policy settings are only available for external passthrough Network Load Balancers and internal passthrough Network Load Balancers."
         },
         "consistentHash": {
           "$ref": "ConsistentHashLoadBalancerSettings",
@@ -38240,12 +38437,12 @@
           "type": "string"
         },
         "enableCDN": {
-          "description": "If true, enables Cloud CDN for the backend service of an external HTTP(S) load balancer.",
+          "description": "If true, enables Cloud CDN for the backend service of a global external Application Load Balancer.",
           "type": "boolean"
         },
         "failoverPolicy": {
           "$ref": "BackendServiceFailoverPolicy",
-          "description": "Requires at least one backend instance group to be defined as a backup (failover) backend. For load balancers that have configurable failover: [Internal TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview)."
+          "description": "Requires at least one backend instance group to be defined as a backup (failover) backend. For load balancers that have configurable failover: [Internal passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview)."
         },
         "fingerprint": {
           "description": "Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a BackendService. An up-to-date fingerprint must be provided in order to update the BackendService, otherwise the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve a BackendService.",
@@ -38261,7 +38458,7 @@
         },
         "iap": {
           "$ref": "BackendServiceIAP",
-          "description": "The configurations for Identity-Aware Proxy on this resource. Not available for Internal TCP/UDP Load Balancing and Network Load Balancing."
+          "description": "The configurations for Identity-Aware Proxy on this resource. Not available for internal passthrough Network Load Balancers and external passthrough Network Load Balancers."
         },
         "id": {
           "description": "[Output Only] The unique identifier for the resource. This identifier is defined by the server.",
@@ -38284,10 +38481,10 @@
             "INVALID_LOAD_BALANCING_SCHEME"
           ],
           "enumDescriptions": [
-            "Signifies that this will be used for external HTTP(S), SSL Proxy, TCP Proxy, or Network Load Balancing",
-            "Signifies that this will be used for External Managed HTTP(S) Load Balancing.",
-            "Signifies that this will be used for Internal TCP/UDP Load Balancing.",
-            "Signifies that this will be used for Internal HTTP(S) Load Balancing.",
+            "Signifies that this will be used for classic Application Load Balancers, global external proxy Network Load Balancers, or external passthrough Network Load Balancers.",
+            "Signifies that this will be used for global external Application Load Balancers, regional external Application Load Balancers, or regional external proxy Network Load Balancers.",
+            "Signifies that this will be used for internal passthrough Network Load Balancers.",
+            "Signifies that this will be used for internal Application Load Balancers.",
             "Signifies that this will be used by Traffic Director.",
             ""
           ],
@@ -38354,12 +38551,12 @@
         },
         "port": {
           "deprecated": true,
-          "description": "Deprecated in favor of portName. The TCP port to connect on the backend. The default value is 80. For Internal TCP/UDP Load Balancing and Network Load Balancing, omit port.",
+          "description": "Deprecated in favor of portName. The TCP port to connect on the backend. The default value is 80. For internal passthrough Network Load Balancers and external passthrough Network Load Balancers, omit port.",
           "format": "int32",
           "type": "integer"
         },
         "portName": {
-          "description": "A named port on a backend instance group representing the port for communication to the backend VMs in that group. The named port must be [defined on each backend instance group](https://cloud.google.com/load-balancing/docs/backend-service#named_ports). This parameter has no meaning if the backends are NEGs. For Internal TCP/UDP Load Balancing and Network Load Balancing, omit port_name.",
+          "description": "A named port on a backend instance group representing the port for communication to the backend VMs in that group. The named port must be [defined on each backend instance group](https://cloud.google.com/load-balancing/docs/backend-service#named_ports). This parameter has no meaning if the backends are NEGs. For internal passthrough Network Load Balancers and external passthrough Network Load Balancers, omit port_name.",
           "type": "string"
         },
         "protocol": {
@@ -38738,11 +38935,11 @@
           "type": "string"
         },
         "enableStrongAffinity": {
-          "description": "Enable Strong Session Affinity for Network Load Balancing. This option is not available publicly.",
+          "description": "Enable Strong Session Affinity for external passthrough Network Load Balancers. This option is not available publicly.",
           "type": "boolean"
         },
         "idleTimeoutSec": {
-          "description": "Specifies how long to keep a Connection Tracking entry while there is no matching traffic (in seconds). For Internal TCP/UDP Load Balancing: - The minimum (default) is 10 minutes and the maximum is 16 hours. - It can be set only if Connection Tracking is less than 5-tuple (i.e. Session Affinity is CLIENT_IP_NO_DESTINATION, CLIENT_IP or CLIENT_IP_PROTO, and Tracking Mode is PER_SESSION). For Network Load Balancer the default is 60 seconds. This option is not available publicly.",
+          "description": "Specifies how long to keep a Connection Tracking entry while there is no matching traffic (in seconds). For internal passthrough Network Load Balancers: - The minimum (default) is 10 minutes and the maximum is 16 hours. - It can be set only if Connection Tracking is less than 5-tuple (i.e. Session Affinity is CLIENT_IP_NO_DESTINATION, CLIENT_IP or CLIENT_IP_PROTO, and Tracking Mode is PER_SESSION). For external passthrough Network Load Balancers the default is 60 seconds. This option is not available publicly.",
           "format": "int32",
           "type": "integer"
         },
@@ -38764,7 +38961,7 @@
       "type": "object"
     },
     "BackendServiceFailoverPolicy": {
-      "description": "For load balancers that have configurable failover: [Internal TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview). On failover or failback, this field indicates whether connection draining will be honored. Google Cloud has a fixed connection draining timeout of 10 minutes. A setting of true terminates existing TCP connections to the active pool during failover and failback, immediately draining traffic. A setting of false allows existing TCP connections to persist, even on VMs no longer in the active pool, for up to the duration of the connection draining timeout (10 minutes).",
+      "description": "For load balancers that have configurable failover: [Internal passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview). On failover or failback, this field indicates whether connection draining will be honored. Google Cloud has a fixed connection draining timeout of 10 minutes. A setting of true terminates existing TCP connections to the active pool during failover and failback, immediately draining traffic. A setting of false allows existing TCP connections to persist, even on VMs no longer in the active pool, for up to the duration of the connection draining timeout (10 minutes).",
       "id": "BackendServiceFailoverPolicy",
       "properties": {
         "disableConnectionDrainOnFailover": {
@@ -38772,7 +38969,7 @@
           "type": "boolean"
         },
         "dropTrafficIfUnhealthy": {
-          "description": "If set to true, connections to the load balancer are dropped when all primary and all backup backend VMs are unhealthy.If set to false, connections are distributed among all primary VMs when all primary and all backup backend VMs are unhealthy. For load balancers that have configurable failover: [Internal TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview). The default is false.",
+          "description": "If set to true, connections to the load balancer are dropped when all primary and all backup backend VMs are unhealthy.If set to false, connections are distributed among all primary VMs when all primary and all backup backend VMs are unhealthy. For load balancers that have configurable failover: [Internal passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview). The default is false.",
           "type": "boolean"
         },
         "failoverRatio": {
@@ -39639,7 +39836,7 @@
           "description": "The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)."
         },
         "members": {
-          "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.",
+          "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.",
           "items": {
             "type": "string"
           },
@@ -39886,6 +40083,13 @@
           "description": "[Output Only] Commitment end time in RFC3339 text format.",
           "type": "string"
         },
+        "existingReservations": {
+          "description": "Specifies the already existing reservations to attach to the Commitment. This field is optional, and it can be a full or partial URL. For example, the following are valid URLs to an reservation: - https://www.googleapis.com/compute/v1/projects/project/zones/zone /reservations/reservation - projects/project/zones/zone/reservations/reservation ",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
         "id": {
           "description": "[Output Only] The unique identifier for the resource. This identifier is defined by the server.",
           "format": "uint64",
@@ -39931,7 +40135,7 @@
           "type": "string"
         },
         "reservations": {
-          "description": "List of create-on-create reseravtions for this commitment.",
+          "description": "List of create-on-create reservations for this commitment.",
           "items": {
             "$ref": "Reservation"
           },
@@ -40783,6 +40987,10 @@
           "$ref": "CustomerEncryptionKey",
           "description": "Encrypts the disk using a customer-supplied encryption key or a customer-managed encryption key. Encryption keys do not protect access to metadata of the disk. After you encrypt a disk with a customer-supplied key, you must provide the same key if you use the disk later. For example, to create a disk snapshot, to create a disk image, to create a machine image, or to attach the disk to a virtual machine. After you encrypt a disk with a customer-managed key, the diskEncryptionKey.kmsKeyName is set to a key *version* name once the disk is created. The disk is encrypted with this version of the key. In the response, diskEncryptionKey.kmsKeyName appears in the following format: \"diskEncryptionKey.kmsKeyName\": \"projects/kms_project_id/locations/region/keyRings/ key_region/cryptoKeys/key /cryptoKeysVersions/version If you do not provide an encryption key when creating the disk, then the disk is encrypted using an automatically generated key and you don't need to provide a key to use the disk later."
         },
+        "enableConfidentialCompute": {
+          "description": "Whether this disk is using confidential compute mode.",
+          "type": "boolean"
+        },
         "guestOsFeatures": {
           "description": "A list of features to enable on the guest operating system. Applicable only for bootable images. Read Enabling guest operating system features to see a list of available options.",
           "items": {
@@ -40894,6 +41102,11 @@
           "$ref": "DiskResourceStatus",
           "description": "[Output Only] Status information for the disk resource."
         },
+        "satisfiesPzi": {
+          "description": "Output only. Reserved for future use.",
+          "readOnly": true,
+          "type": "boolean"
+        },
         "satisfiesPzs": {
           "description": "[Output Only] Reserved for future use.",
           "type": "boolean"
@@ -43535,7 +43748,7 @@
       "type": "object"
     },
     "ForwardingRule": {
-      "description": "Represents a Forwarding Rule resource. Forwarding rule resources in Google Cloud can be either regional or global in scope: * [Global](https://cloud.google.com/compute/docs/reference/rest/v1/globalForwardingRules) * [Regional](https://cloud.google.com/compute/docs/reference/rest/v1/forwardingRules) A forwarding rule and its corresponding IP address represent the frontend configuration of a Google Cloud Platform load balancer. Forwarding rules can also reference target instances and Cloud VPN Classic gateways (targetVpnGateway). For more information, read Forwarding rule concepts and Using protocol forwarding.",
+      "description": "Represents a Forwarding Rule resource. Forwarding rule resources in Google Cloud can be either regional or global in scope: * [Global](https://cloud.google.com/compute/docs/reference/rest/v1/globalForwardingRules) * [Regional](https://cloud.google.com/compute/docs/reference/rest/v1/forwardingRules) A forwarding rule and its corresponding IP address represent the frontend configuration of a Google Cloud load balancer. Forwarding rules can also reference target instances and Cloud VPN Classic gateways (targetVpnGateway). For more information, read Forwarding rule concepts and Using protocol forwarding.",
       "id": "ForwardingRule",
       "properties": {
         "IPAddress": {
@@ -43569,7 +43782,7 @@
           "type": "boolean"
         },
         "allowGlobalAccess": {
-          "description": "This field is used along with the backend_service field for internal load balancing or with the target field for internal TargetInstance. If set to true, clients can access the Internal TCP/UDP Load Balancer, Internal HTTP(S) and TCP Proxy Load Balancer from all regions. If false, only allows access from the local region the load balancer is located at. Note that for INTERNAL_MANAGED forwarding rules, this field cannot be changed after the forwarding rule is created.",
+          "description": "If set to true, clients can access the internal passthrough Network Load Balancers, the regional internal Application Load Balancer, and the regional internal proxy Network Load Balancer from all regions. If false, only allows access from the local region the load balancer is located at. Note that for INTERNAL_MANAGED forwarding rules, this field cannot be changed after the forwarding rule is created.",
           "type": "boolean"
         },
         "allowPscGlobalAccess": {
@@ -43577,11 +43790,11 @@
           "type": "boolean"
         },
         "backendService": {
-          "description": "Identifies the backend service to which the forwarding rule sends traffic. Required for Internal TCP/UDP Load Balancing and Network Load Balancing; must be omitted for all other load balancer types.",
+          "description": "Identifies the backend service to which the forwarding rule sends traffic. Required for internal and external passthrough Network Load Balancers; must be omitted for all other load balancer types.",
           "type": "string"
         },
         "baseForwardingRule": {
-          "description": "[Output Only] The URL for the corresponding base Forwarding Rule. By base Forwarding Rule, we mean the Forwarding Rule that has the same IP address, protocol, and port settings with the current Forwarding Rule, but without sourceIPRanges specified. Always empty if the current Forwarding Rule does not have sourceIPRanges specified.",
+          "description": "[Output Only] The URL for the corresponding base forwarding rule. By base forwarding rule, we mean the forwarding rule that has the same IP address, protocol, and port settings with the current forwarding rule, but without sourceIPRanges specified. Always empty if the current forwarding rule does not have sourceIPRanges specified.",
           "type": "string"
         },
         "creationTimestamp": {
@@ -43622,7 +43835,7 @@
         },
         "kind": {
           "default": "compute#forwardingRule",
-          "description": "[Output Only] Type of the resource. Always compute#forwardingRule for Forwarding Rule resources.",
+          "description": "[Output Only] Type of the resource. Always compute#forwardingRule for forwarding rule resources.",
           "type": "string"
         },
         "labelFingerprint": {
@@ -43670,7 +43883,7 @@
           "type": "string"
         },
         "network": {
-          "description": "This field is not used for global external load balancing. For Internal TCP/UDP Load Balancing, this field identifies the network that the load balanced IP should belong to for this Forwarding Rule. If the subnetwork is specified, the network of the subnetwork will be used. If neither subnetwork nor this field is specified, the default network will be used. For Private Service Connect forwarding rules that forward traffic to Google APIs, a network must be provided.",
+          "description": "This field is not used for global external load balancing. For internal passthrough Network Load Balancers, this field identifies the network that the load balanced IP should belong to for this forwarding rule. If the subnetwork is specified, the network of the subnetwork will be used. If neither subnetwork nor this field is specified, the default network will be used. For Private Service Connect forwarding rules that forward traffic to Google APIs, a network must be provided.",
           "type": "string"
         },
         "networkTier": {
@@ -43705,7 +43918,7 @@
           "type": "array"
         },
         "pscConnectionId": {
-          "description": "[Output Only] The PSC connection id of the PSC Forwarding Rule.",
+          "description": "[Output Only] The PSC connection id of the PSC forwarding rule.",
           "format": "uint64",
           "type": "string"
         },
@@ -43744,23 +43957,23 @@
           "type": "array"
         },
         "serviceLabel": {
-          "description": "An optional prefix to the service name for this Forwarding Rule. If specified, the prefix is the first label of the fully qualified service name. The label must be 1-63 characters long, and comply with RFC1035. Specifically, the label must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. This field is only used for internal load balancing.",
+          "description": "An optional prefix to the service name for this forwarding rule. If specified, the prefix is the first label of the fully qualified service name. The label must be 1-63 characters long, and comply with RFC1035. Specifically, the label must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. This field is only used for internal load balancing.",
           "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
           "type": "string"
         },
         "serviceName": {
-          "description": "[Output Only] The internal fully qualified service name for this Forwarding Rule. This field is only used for internal load balancing.",
+          "description": "[Output Only] The internal fully qualified service name for this forwarding rule. This field is only used for internal load balancing.",
           "type": "string"
         },
         "sourceIpRanges": {
-          "description": "If not empty, this Forwarding Rule will only forward the traffic when the source IP address matches one of the IP addresses or CIDR ranges set here. Note that a Forwarding Rule can only have up to 64 source IP ranges, and this field can only be used with a regional Forwarding Rule whose scheme is EXTERNAL. Each source_ip_range entry should be either an IP address (for example, 1.2.3.4) or a CIDR range (for example, 1.2.3.0/24).",
+          "description": "If not empty, this forwarding rule will only forward the traffic when the source IP address matches one of the IP addresses or CIDR ranges set here. Note that a forwarding rule can only have up to 64 source IP ranges, and this field can only be used with a regional forwarding rule whose scheme is EXTERNAL. Each source_ip_range entry should be either an IP address (for example, 1.2.3.4) or a CIDR range (for example, 1.2.3.0/24).",
           "items": {
             "type": "string"
           },
           "type": "array"
         },
         "subnetwork": {
-          "description": "This field identifies the subnetwork that the load balanced IP should belong to for this Forwarding Rule, used in internal load balancing and network load balancing with IPv6. If the network specified is in auto subnet mode, this field is optional. However, a subnetwork must be specified if the network is in custom subnet mode or when creating external forwarding rule with IPv6.",
+          "description": "This field identifies the subnetwork that the load balanced IP should belong to for this forwarding rule, used with internal load balancers and external passthrough Network Load Balancers with IPv6. If the network specified is in auto subnet mode, this field is optional. However, a subnetwork must be specified if the network is in custom subnet mode or when creating external forwarding rule with IPv6.",
           "type": "string"
         },
         "target": {
@@ -44091,7 +44304,7 @@
       "type": "object"
     },
     "ForwardingRuleServiceDirectoryRegistration": {
-      "description": "Describes the auto-registration of the Forwarding Rule to Service Directory. The region and project of the Service Directory resource generated from this registration will be the same as this Forwarding Rule.",
+      "description": "Describes the auto-registration of the forwarding rule to Service Directory. The region and project of the Service Directory resource generated from this registration will be the same as this forwarding rule.",
       "id": "ForwardingRuleServiceDirectoryRegistration",
       "properties": {
         "namespace": {
@@ -44103,7 +44316,7 @@
           "type": "string"
         },
         "serviceDirectoryRegion": {
-          "description": "[Optional] Service Directory region to register this global forwarding rule under. Default to \"us-central1\". Only used for PSC for Google APIs. All PSC for Google APIs Forwarding Rules on the same network should use the same Service Directory region.",
+          "description": "[Optional] Service Directory region to register this global forwarding rule under. Default to \"us-central1\". Only used for PSC for Google APIs. All PSC for Google APIs forwarding rules on the same network should use the same Service Directory region.",
           "type": "string"
         }
       },
@@ -44260,7 +44473,7 @@
           "type": "string"
         },
         "portSpecification": {
-          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
+          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
           "enum": [
             "USE_FIXED_PORT",
             "USE_NAMED_PORT",
@@ -44447,10 +44660,11 @@
       "id": "GuestOsFeature",
       "properties": {
         "type": {
-          "description": "The ID of a supported feature. To add multiple values, use commas to separate values. Set to one or more of the following values: - VIRTIO_SCSI_MULTIQUEUE - WINDOWS - MULTI_IP_SUBNET - UEFI_COMPATIBLE - GVNIC - SEV_CAPABLE - SUSPEND_RESUME_COMPATIBLE - SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE For more information, see Enabling guest operating system features.",
+          "description": "The ID of a supported feature. To add multiple values, use commas to separate values. Set to one or more of the following values: - VIRTIO_SCSI_MULTIQUEUE - WINDOWS - MULTI_IP_SUBNET - UEFI_COMPATIBLE - GVNIC - SEV_CAPABLE - SUSPEND_RESUME_COMPATIBLE - SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE - TDX_CAPABLE - IDPF For more information, see Enabling guest operating system features.",
           "enum": [
             "FEATURE_TYPE_UNSPECIFIED",
             "GVNIC",
+            "IDPF",
             "MULTI_IP_SUBNET",
             "SECURE_BOOT",
             "SEV_CAPABLE",
@@ -44472,6 +44686,7 @@
             "",
             "",
             "",
+            "",
             ""
           ],
           "type": "string"
@@ -44496,7 +44711,7 @@
           "type": "string"
         },
         "portSpecification": {
-          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
+          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
           "enum": [
             "USE_FIXED_PORT",
             "USE_NAMED_PORT",
@@ -44549,7 +44764,7 @@
           "type": "string"
         },
         "portSpecification": {
-          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Also supported in legacy HTTP health checks for target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
+          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Also supported in legacy HTTP health checks for target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
           "enum": [
             "USE_FIXED_PORT",
             "USE_NAMED_PORT",
@@ -44602,7 +44817,7 @@
           "type": "string"
         },
         "portSpecification": {
-          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
+          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
           "enum": [
             "USE_FIXED_PORT",
             "USE_NAMED_PORT",
@@ -44639,7 +44854,7 @@
       "type": "object"
     },
     "HealthCheck": {
-      "description": "Represents a health check resource. Google Compute Engine has two health check resources: * [Regional](/compute/docs/reference/rest/v1/regionHealthChecks) * [Global](/compute/docs/reference/rest/v1/healthChecks) These health check resources can be used for load balancing and for autohealing VMs in a managed instance group (MIG). **Load balancing** The following load balancer can use either regional or global health check: * Internal TCP/UDP load balancer The following load balancers require regional health check: * Internal HTTP(S) load balancer * Backend service-based network load balancer Traffic Director and the following load balancers require global health check: * External HTTP(S) load balancer * TCP proxy load balancer * SSL proxy load balancer The following load balancer require [legacy HTTP health checks](/compute/docs/reference/rest/v1/httpHealthChecks): * Target pool-based network load balancer **Autohealing in MIGs** The health checks that you use for autohealing VMs in a MIG can be either regional or global. For more information, see Set up an application health check and autohealing. For more information, see Health checks overview.",
+      "description": "Represents a health check resource. Google Compute Engine has two health check resources: * [Regional](/compute/docs/reference/rest/v1/regionHealthChecks) * [Global](/compute/docs/reference/rest/v1/healthChecks) These health check resources can be used for load balancing and for autohealing VMs in a managed instance group (MIG). **Load balancing** Health check requirements vary depending on the type of load balancer. For details about the type of health check supported for each load balancer and corresponding backend type, see Health checks overview: Load balancer guide. **Autohealing in MIGs** The health checks that you use for autohealing VMs in a MIG can be either regional or global. For more information, see Set up an application health check and autohealing. For more information, see Health checks overview.",
       "id": "HealthCheck",
       "properties": {
         "checkIntervalSec": {
@@ -46434,6 +46649,10 @@
           "format": "int64",
           "type": "string"
         },
+        "enableConfidentialCompute": {
+          "description": "Whether this image is created from a confidential compute mode disk. [Output Only]: This field is not set by user, but from source disk.",
+          "type": "boolean"
+        },
         "family": {
           "description": "The name of the image family to which this image belongs. The image family name can be from a publicly managed image family provided by Compute Engine, or from a custom image family you create. For example, centos-stream-9 is a publicly available image family. For more information, see Image family best practices. When creating disks, you can specify an image family instead of a specific image name. The image family always returns its latest image that is not deprecated. The name of the image family must comply with RFC1035.",
           "type": "string"
@@ -46522,6 +46741,11 @@
           },
           "type": "object"
         },
+        "satisfiesPzi": {
+          "description": "Output only. Reserved for future use.",
+          "readOnly": true,
+          "type": "boolean"
+        },
         "satisfiesPzs": {
           "description": "[Output Only] Reserved for future use.",
           "type": "boolean"
@@ -46976,6 +47200,10 @@
           "$ref": "ResourceStatus",
           "description": "[Output Only] Specifies values set for instance attributes as compared to the values requested by user in the corresponding input only field."
         },
+        "satisfiesPzi": {
+          "description": "[Output Only] Reserved for future use.",
+          "type": "boolean"
+        },
         "satisfiesPzs": {
           "description": "[Output Only] Reserved for future use.",
           "type": "boolean"
@@ -53379,6 +53607,11 @@
           "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
           "type": "string"
         },
+        "satisfiesPzi": {
+          "description": "Output only. Reserved for future use.",
+          "readOnly": true,
+          "type": "boolean"
+        },
         "satisfiesPzs": {
           "description": "[Output Only] Reserved for future use.",
           "type": "boolean"
@@ -55571,7 +55804,7 @@
           "type": "string"
         },
         "instance": {
-          "description": "The name for a specific VM instance that the IP address belongs to. This is required for network endpoints of type GCE_VM_IP_PORT. The instance must be in the same zone of network endpoint group. The name must be 1-63 characters long, and comply with RFC1035.",
+          "description": "The name or a URL of a specific VM instance that the IP address belongs to. This is required for network endpoints of type GCE_VM_IP_PORT. The instance must be in the same zone of network endpoint group (for zonal NEGs) or in the zone within the region of the NEG (for regional NEGs). The name must be 1-63 characters long, and comply with RFC1035 or be a valid URL pointing to an existing instance.",
           "type": "string"
         },
         "ipAddress": {
@@ -59079,7 +59312,7 @@
       "type": "object"
     },
     "Operation": {
-      "description": "Represents an Operation resource. Google Compute Engine has three Operation resources: * [Global](/compute/docs/reference/rest/v1/globalOperations) * [Regional](/compute/docs/reference/rest/v1/regionOperations) * [Zonal](/compute/docs/reference/rest/v1/zoneOperations) You can use an operation resource to manage asynchronous API requests. For more information, read Handling API responses. Operations can be global, regional or zonal. - For global operations, use the `globalOperations` resource. - For regional operations, use the `regionOperations` resource. - For zonal operations, use the `zoneOperations` resource. For more information, read Global, Regional, and Zonal Resources.",
+      "description": "Represents an Operation resource. Google Compute Engine has three Operation resources: * [Global](/compute/docs/reference/rest/v1/globalOperations) * [Regional](/compute/docs/reference/rest/v1/regionOperations) * [Zonal](/compute/docs/reference/rest/v1/zoneOperations) You can use an operation resource to manage asynchronous API requests. For more information, read Handling API responses. Operations can be global, regional or zonal. - For global operations, use the `globalOperations` resource. - For regional operations, use the `regionOperations` resource. - For zonal operations, use the `zoneOperations` resource. For more information, read Global, Regional, and Zonal Resources. Note that completed Operation resources have a limited retention period.",
       "id": "Operation",
       "properties": {
         "clientOperationId": {
@@ -60176,14 +60409,14 @@
       "id": "PacketMirroringFilter",
       "properties": {
         "IPProtocols": {
-          "description": "Protocols that apply as filter on mirrored traffic. If no protocols are specified, all traffic that matches the specified CIDR ranges is mirrored. If neither cidrRanges nor IPProtocols is specified, all traffic is mirrored.",
+          "description": "Protocols that apply as filter on mirrored traffic. If no protocols are specified, all traffic that matches the specified CIDR ranges is mirrored. If neither cidrRanges nor IPProtocols is specified, all IPv4 traffic is mirrored.",
           "items": {
             "type": "string"
           },
           "type": "array"
         },
         "cidrRanges": {
-          "description": "IP CIDR ranges that apply as filter on the source (ingress) or destination (egress) IP in the IP header. Only IPv4 is supported. If no ranges are specified, all traffic that matches the specified IPProtocols is mirrored. If neither cidrRanges nor IPProtocols is specified, all traffic is mirrored.",
+          "description": "One or more IPv4 or IPv6 CIDR ranges that apply as filter on the source (ingress) or destination (egress) IP in the IP header. If no ranges are specified, all IPv4 traffic that matches the specified IPProtocols is mirrored. If neither cidrRanges nor IPProtocols is specified, all IPv4 traffic is mirrored. To mirror all IPv4 and IPv6 traffic, use \"0.0.0.0/0,::/0\". Note: Support for IPv6 traffic is in preview.",
           "items": {
             "type": "string"
           },
@@ -61933,6 +62166,7 @@
             "COMMITTED_N2_CPUS",
             "COMMITTED_NVIDIA_A100_80GB_GPUS",
             "COMMITTED_NVIDIA_A100_GPUS",
+            "COMMITTED_NVIDIA_H100_GPUS",
             "COMMITTED_NVIDIA_K80_GPUS",
             "COMMITTED_NVIDIA_L4_GPUS",
             "COMMITTED_NVIDIA_P100_GPUS",
@@ -62008,6 +62242,7 @@
             "PREEMPTIBLE_LOCAL_SSD_GB",
             "PREEMPTIBLE_NVIDIA_A100_80GB_GPUS",
             "PREEMPTIBLE_NVIDIA_A100_GPUS",
+            "PREEMPTIBLE_NVIDIA_H100_GPUS",
             "PREEMPTIBLE_NVIDIA_K80_GPUS",
             "PREEMPTIBLE_NVIDIA_L4_GPUS",
             "PREEMPTIBLE_NVIDIA_P100_GPUS",
@@ -62017,6 +62252,9 @@
             "PREEMPTIBLE_NVIDIA_T4_GPUS",
             "PREEMPTIBLE_NVIDIA_T4_VWS_GPUS",
             "PREEMPTIBLE_NVIDIA_V100_GPUS",
+            "PREEMPTIBLE_TPU_LITE_DEVICE_V5",
+            "PREEMPTIBLE_TPU_LITE_PODSLICE_V5",
+            "PREEMPTIBLE_TPU_PODSLICE_V4",
             "PSC_ILB_CONSUMER_FORWARDING_RULES_PER_PRODUCER_NETWORK",
             "PSC_INTERNAL_LB_FORWARDING_RULES",
             "PUBLIC_ADVERTISED_PREFIXES",
@@ -62054,6 +62292,9 @@
             "TARGET_SSL_PROXIES",
             "TARGET_TCP_PROXIES",
             "TARGET_VPN_GATEWAYS",
+            "TPU_LITE_DEVICE_V5",
+            "TPU_LITE_PODSLICE_V5",
+            "TPU_PODSLICE_V4",
             "URL_MAPS",
             "VPN_GATEWAYS",
             "VPN_TUNNELS",
@@ -62092,6 +62333,7 @@
             "",
             "",
             "",
+            "",
             "Guest CPUs",
             "",
             "",
@@ -62189,6 +62431,10 @@
             "",
             "",
             "",
+            "",
+            "",
+            "",
+            "",
             "The total number of snapshots allowed for a single project.",
             "",
             "",
@@ -62208,6 +62454,9 @@
             "",
             "",
             "",
+            "",
+            "",
+            "",
             ""
           ],
           "type": "string"
@@ -63881,6 +64130,10 @@
       "description": "Represents a reservation resource. A reservation ensures that capacity is held in a specific zone even if the reserved VMs are not running. For more information, read Reserving zonal resources.",
       "id": "Reservation",
       "properties": {
+        "aggregateReservation": {
+          "$ref": "AllocationAggregateReservation",
+          "description": "Reservation for aggregated resources, providing shape flexibility."
+        },
         "commitment": {
           "description": "[Output Only] Full or partial URL to a parent commitment. This field displays for reservations that are tied to a commitment.",
           "type": "string"
@@ -67246,7 +67499,7 @@
           "type": "string"
         },
         "portSpecification": {
-          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
+          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
           "enum": [
             "USE_FIXED_PORT",
             "USE_NAMED_PORT",
@@ -68399,6 +68652,10 @@
           "$ref": "Expr",
           "description": "User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip, source.region_code and contents in the request header. Expressions containing `evaluateThreatIntelligence` require Cloud Armor Managed Protection Plus tier and are not supported in Edge Policies nor in Regional Policies. Expressions containing `evaluatePreconfiguredExpr('sourceiplist-*')` require Cloud Armor Managed Protection Plus tier and are only supported in Global Security Policies."
         },
+        "exprOptions": {
+          "$ref": "SecurityPolicyRuleMatcherExprOptions",
+          "description": "The configuration options available when specifying a user defined CEVAL expression (i.e., 'expr')."
+        },
         "versionedExpr": {
           "description": "Preconfigured versioned expression. If this field is specified, config must also be specified. Available preconfigured expressions along with their requirements are: SRC_IPS_V1 - must specify the corresponding src_ip_range field in config.",
           "enum": [
@@ -68425,6 +68682,36 @@
       },
       "type": "object"
     },
+    "SecurityPolicyRuleMatcherExprOptions": {
+      "id": "SecurityPolicyRuleMatcherExprOptions",
+      "properties": {
+        "recaptchaOptions": {
+          "$ref": "SecurityPolicyRuleMatcherExprOptionsRecaptchaOptions",
+          "description": "reCAPTCHA configuration options to be applied for the rule. If the rule does not evaluate reCAPTCHA tokens, this field has no effect."
+        }
+      },
+      "type": "object"
+    },
+    "SecurityPolicyRuleMatcherExprOptionsRecaptchaOptions": {
+      "id": "SecurityPolicyRuleMatcherExprOptionsRecaptchaOptions",
+      "properties": {
+        "actionTokenSiteKeys": {
+          "description": "A list of site keys to be used during the validation of reCAPTCHA action-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "sessionTokenSiteKeys": {
+          "description": "A list of site keys to be used during the validation of reCAPTCHA session-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "type": "object"
+    },
     "SecurityPolicyRuleNetworkMatcher": {
       "description": "Represents a match condition that incoming network traffic is evaluated against.",
       "id": "SecurityPolicyRuleNetworkMatcher",
@@ -68609,7 +68896,7 @@
           "type": "string"
         },
         "enforceOnKey": {
-          "description": "Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if \"enforceOnKey\" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. ",
+          "description": "Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if \"enforceOnKey\" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. - USER_IP: The IP address of the originating client, which is resolved based on \"userIpRequestHeaders\" configured with the security policy. If there is no \"userIpRequestHeaders\" configuration or an IP address cannot be resolved from it, the key type defaults to IP. ",
           "enum": [
             "ALL",
             "HTTP_COOKIE",
@@ -68618,6 +68905,8 @@
             "IP",
             "REGION_CODE",
             "SNI",
+            "TLS_JA3_FINGERPRINT",
+            "USER_IP",
             "XFF_IP"
           ],
           "enumDescriptions": [
@@ -68628,6 +68917,8 @@
             "",
             "",
             "",
+            "",
+            "",
             ""
           ],
           "type": "string"
@@ -68666,7 +68957,7 @@
           "type": "string"
         },
         "enforceOnKeyType": {
-          "description": "Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if \"enforceOnKeyConfigs\" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. ",
+          "description": "Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if \"enforceOnKeyConfigs\" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. - USER_IP: The IP address of the originating client, which is resolved based on \"userIpRequestHeaders\" configured with the security policy. If there is no \"userIpRequestHeaders\" configuration or an IP address cannot be resolved from it, the key type defaults to IP. ",
           "enum": [
             "ALL",
             "HTTP_COOKIE",
@@ -68675,6 +68966,8 @@
             "IP",
             "REGION_CODE",
             "SNI",
+            "TLS_JA3_FINGERPRINT",
+            "USER_IP",
             "XFF_IP"
           ],
           "enumDescriptions": [
@@ -68685,6 +68978,8 @@
             "",
             "",
             "",
+            "",
+            "",
             ""
           ],
           "type": "string"
@@ -69699,6 +69994,10 @@
           "format": "int64",
           "type": "string"
         },
+        "enableConfidentialCompute": {
+          "description": "Whether this snapshot is created from a confidential compute mode disk. [Output Only]: This field is not set by user, but from source disk.",
+          "type": "boolean"
+        },
         "guestOsFeatures": {
           "description": "[Output Only] A list of features to enable on the guest operating system. Applicable only for bootable images. Read Enabling guest operating system features to see a list of available options.",
           "items": {
@@ -69758,6 +70057,11 @@
           "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
           "type": "string"
         },
+        "satisfiesPzi": {
+          "description": "Output only. Reserved for future use.",
+          "readOnly": true,
+          "type": "boolean"
+        },
         "satisfiesPzs": {
           "description": "[Output Only] Reserved for future use.",
           "type": "boolean"
@@ -71227,7 +71531,7 @@
       "type": "object"
     },
     "SslPolicy": {
-      "description": "Represents an SSL Policy resource. Use SSL policies to control the SSL features, such as versions and cipher suites, offered by an HTTPS or SSL Proxy load balancer. For more information, read SSL Policy Concepts.",
+      "description": "Represents an SSL Policy resource. Use SSL policies to control SSL features, such as versions and cipher suites, that are offered by Application Load Balancers and proxy Network Load Balancers. For more information, read SSL policies overview.",
       "id": "SslPolicy",
       "properties": {
         "creationTimestamp": {
@@ -71642,7 +71946,7 @@
           "type": "string"
         },
         "purpose": {
-          "description": "The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.",
+          "description": "The purpose of the resource. This field can be either PRIVATE, GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. Subnets with purpose set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks that are reserved for Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.",
           "enum": [
             "GLOBAL_MANAGED_PROXY",
             "INTERNAL_HTTPS_LOAD_BALANCER",
@@ -71654,7 +71958,7 @@
           ],
           "enumDescriptions": [
             "Subnet reserved for Global Envoy-based Load Balancing.",
-            "Subnet reserved for Internal HTTP(S) Load Balancing.",
+            "Subnet reserved for Internal HTTP(S) Load Balancing. This is a legacy purpose, please use REGIONAL_MANAGED_PROXY instead.",
             "Regular user created or automatically created subnet.",
             "Subnetwork used as source range for Private NAT Gateways.",
             "Regular user created or automatically created subnet.",
@@ -71667,8 +71971,12 @@
           "description": "URL of the region where the Subnetwork resides. This field can be set only at resource creation time.",
           "type": "string"
         },
+        "reservedInternalRange": {
+          "description": "The URL of the reserved internal range.",
+          "type": "string"
+        },
         "role": {
-          "description": "The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.",
+          "description": "The role of subnetwork. Currently, this field is only used when purpose is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.",
           "enum": [
             "ACTIVE",
             "BACKUP"
@@ -72100,6 +72408,10 @@
         "rangeName": {
           "description": "The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.",
           "type": "string"
+        },
+        "reservedInternalRange": {
+          "description": "The URL of the reserved internal range.",
+          "type": "string"
         }
       },
       "type": "object"
@@ -72288,7 +72600,7 @@
           "type": "string"
         },
         "portSpecification": {
-          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
+          "description": "Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.",
           "enum": [
             "USE_FIXED_PORT",
             "USE_NAMED_PORT",
@@ -74018,7 +74330,7 @@
       "type": "object"
     },
     "TargetPool": {
-      "description": "Represents a Target Pool resource. Target pools are used for network TCP/UDP load balancing. A target pool references member instances, an associated legacy HttpHealthCheck resource, and, optionally, a backup target pool. For more information, read Using target pools.",
+      "description": "Represents a Target Pool resource. Target pools are used with external passthrough Network Load Balancers. A target pool references member instances, an associated legacy HttpHealthCheck resource, and, optionally, a backup target pool. For more information, read Using target pools.",
       "id": "TargetPool",
       "properties": {
         "backupPool": {
@@ -74681,7 +74993,7 @@
       "type": "object"
     },
     "TargetSslProxy": {
-      "description": "Represents a Target SSL Proxy resource. A target SSL proxy is a component of a SSL Proxy load balancer. Global forwarding rules reference a target SSL proxy, and the target proxy then references an external backend service. For more information, read Using Target Proxies.",
+      "description": "Represents a Target SSL Proxy resource. A target SSL proxy is a component of a Proxy Network Load Balancer. The forwarding rule references the target SSL proxy, and the target proxy then references a backend service. For more information, read Proxy Network Load Balancer overview.",
       "id": "TargetSslProxy",
       "properties": {
         "certificateMap": {
@@ -75060,7 +75372,7 @@
       "type": "object"
     },
     "TargetTcpProxy": {
-      "description": "Represents a Target TCP Proxy resource. A target TCP proxy is a component of a TCP Proxy load balancer. Global forwarding rules reference target TCP proxy, and the target proxy then references an external backend service. For more information, read TCP Proxy Load Balancing overview.",
+      "description": "Represents a Target TCP Proxy resource. A target TCP proxy is a component of a Proxy Network Load Balancer. The forwarding rule references the target TCP proxy, and the target proxy then references a backend service. For more information, read Proxy Network Load Balancer overview.",
       "id": "TargetTcpProxy",
       "properties": {
         "creationTimestamp": {
@@ -76807,7 +77119,7 @@
           "type": "string"
         },
         "purpose": {
-          "description": "The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.",
+          "description": "The purpose of the resource. This field can be either PRIVATE, GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. Subnets with purpose set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks that are reserved for Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.",
           "enum": [
             "GLOBAL_MANAGED_PROXY",
             "INTERNAL_HTTPS_LOAD_BALANCER",
@@ -76819,7 +77131,7 @@
           ],
           "enumDescriptions": [
             "Subnet reserved for Global Envoy-based Load Balancing.",
-            "Subnet reserved for Internal HTTP(S) Load Balancing.",
+            "Subnet reserved for Internal HTTP(S) Load Balancing. This is a legacy purpose, please use REGIONAL_MANAGED_PROXY instead.",
             "Regular user created or automatically created subnet.",
             "Subnetwork used as source range for Private NAT Gateways.",
             "Regular user created or automatically created subnet.",
@@ -76829,7 +77141,7 @@
           "type": "string"
         },
         "role": {
-          "description": "The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.",
+          "description": "The role of subnetwork. Currently, this field is only used when purpose is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.",
           "enum": [
             "ACTIVE",
             "BACKUP"
diff --git a/vendor/google.golang.org/api/compute/v1/compute-gen.go b/vendor/google.golang.org/api/compute/v1/compute-gen.go
index 2f9af3b44f8..071ce5724a6 100644
--- a/vendor/google.golang.org/api/compute/v1/compute-gen.go
+++ b/vendor/google.golang.org/api/compute/v1/compute-gen.go
@@ -1,4 +1,4 @@
-// Copyright 2023 Google LLC.
+// Copyright 2024 Google LLC.
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
@@ -95,7 +95,9 @@ const apiId = "compute:v1"
 const apiName = "compute"
 const apiVersion = "v1"
 const basePath = "https://compute.googleapis.com/compute/v1/"
+const basePathTemplate = "https://compute.UNIVERSE_DOMAIN/compute/v1/"
 const mtlsBasePath = "https://compute.mtls.googleapis.com/compute/v1/"
+const defaultUniverseDomain = "googleapis.com"
 
 // OAuth2 scopes used by this API.
 const (
@@ -134,7 +136,9 @@ func NewService(ctx context.Context, opts ...option.ClientOption) (*Service, err
 	// NOTE: prepend, so we don't override user-specified scopes.
 	opts = append([]option.ClientOption{scopesOption}, opts...)
 	opts = append(opts, internaloption.WithDefaultEndpoint(basePath))
+	opts = append(opts, internaloption.WithDefaultEndpointTemplate(basePathTemplate))
 	opts = append(opts, internaloption.WithDefaultMTLSEndpoint(mtlsBasePath))
+	opts = append(opts, internaloption.WithDefaultUniverseDomain(defaultUniverseDomain))
 	client, endpoint, err := htransport.NewClient(ctx, opts...)
 	if err != nil {
 		return nil, err
@@ -227,6 +231,7 @@ func New(client *http.Client) (*Service, error) {
 	s.RegionTargetHttpsProxies = NewRegionTargetHttpsProxiesService(s)
 	s.RegionTargetTcpProxies = NewRegionTargetTcpProxiesService(s)
 	s.RegionUrlMaps = NewRegionUrlMapsService(s)
+	s.RegionZones = NewRegionZonesService(s)
 	s.Regions = NewRegionsService(s)
 	s.Reservations = NewReservationsService(s)
 	s.ResourcePolicies = NewResourcePoliciesService(s)
@@ -396,6 +401,8 @@ type Service struct {
 
 	RegionUrlMaps *RegionUrlMapsService
 
+	RegionZones *RegionZonesService
+
 	Regions *RegionsService
 
 	Reservations *ReservationsService
@@ -1066,6 +1073,15 @@ type RegionUrlMapsService struct {
 	s *Service
 }
 
+func NewRegionZonesService(s *Service) *RegionZonesService {
+	rs := &RegionZonesService{s: s}
+	return rs
+}
+
+type RegionZonesService struct {
+	s *Service
+}
+
 func NewRegionsService(s *Service) *RegionsService {
 	rs := &RegionsService{s: s}
 	return rs
@@ -2968,6 +2984,121 @@ func (s *AliasIpRange) MarshalJSON() ([]byte, error) {
 	return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields)
 }
 
+// AllocationAggregateReservation: This reservation type is specified by
+// total resource amounts (e.g. total count of CPUs) and can account for
+// multiple instance SKUs. In other words, one can create instances of
+// varying shapes against this reservation.
+type AllocationAggregateReservation struct {
+	// InUseResources: [Output only] List of resources currently in use.
+	InUseResources []*AllocationAggregateReservationReservedResourceInfo `json:"inUseResources,omitempty"`
+
+	// ReservedResources: List of reserved resources (CPUs, memory,
+	// accelerators).
+	ReservedResources []*AllocationAggregateReservationReservedResourceInfo `json:"reservedResources,omitempty"`
+
+	// VmFamily: The VM family that all instances scheduled against this
+	// reservation must belong to.
+	//
+	// Possible values:
+	//   "VM_FAMILY_CLOUD_TPU_LITE_DEVICE_CT5L"
+	//   "VM_FAMILY_CLOUD_TPU_LITE_POD_SLICE_CT5LP"
+	//   "VM_FAMILY_CLOUD_TPU_POD_SLICE_CT4P"
+	VmFamily string `json:"vmFamily,omitempty"`
+
+	// WorkloadType: The workload type of the instances that will target
+	// this reservation.
+	//
+	// Possible values:
+	//   "BATCH" - Reserved resources will be optimized for BATCH workloads,
+	// such as ML training.
+	//   "SERVING" - Reserved resources will be optimized for SERVING
+	// workloads, such as ML inference.
+	//   "UNSPECIFIED"
+	WorkloadType string `json:"workloadType,omitempty"`
+
+	// ForceSendFields is a list of field names (e.g. "InUseResources") to
+	// unconditionally include in API requests. By default, fields with
+	// empty or default values are omitted from API requests. However, any
+	// non-pointer, non-interface field appearing in ForceSendFields will be
+	// sent to the server regardless of whether the field is empty or not.
+	// This may be used to include empty fields in Patch requests.
+	ForceSendFields []string `json:"-"`
+
+	// NullFields is a list of field names (e.g. "InUseResources") to
+	// include in API requests with the JSON null value. By default, fields
+	// with empty values are omitted from API requests. However, any field
+	// with an empty value appearing in NullFields will be sent to the
+	// server as null. It is an error if a field in this list has a
+	// non-empty value. This may be used to include null fields in Patch
+	// requests.
+	NullFields []string `json:"-"`
+}
+
+func (s *AllocationAggregateReservation) MarshalJSON() ([]byte, error) {
+	type NoMethod AllocationAggregateReservation
+	raw := NoMethod(*s)
+	return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields)
+}
+
+type AllocationAggregateReservationReservedResourceInfo struct {
+	// Accelerator: Properties of accelerator resources in this reservation.
+	Accelerator *AllocationAggregateReservationReservedResourceInfoAccelerator `json:"accelerator,omitempty"`
+
+	// ForceSendFields is a list of field names (e.g. "Accelerator") to
+	// unconditionally include in API requests. By default, fields with
+	// empty or default values are omitted from API requests. However, any
+	// non-pointer, non-interface field appearing in ForceSendFields will be
+	// sent to the server regardless of whether the field is empty or not.
+	// This may be used to include empty fields in Patch requests.
+	ForceSendFields []string `json:"-"`
+
+	// NullFields is a list of field names (e.g. "Accelerator") to include
+	// in API requests with the JSON null value. By default, fields with
+	// empty values are omitted from API requests. However, any field with
+	// an empty value appearing in NullFields will be sent to the server as
+	// null. It is an error if a field in this list has a non-empty value.
+	// This may be used to include null fields in Patch requests.
+	NullFields []string `json:"-"`
+}
+
+func (s *AllocationAggregateReservationReservedResourceInfo) MarshalJSON() ([]byte, error) {
+	type NoMethod AllocationAggregateReservationReservedResourceInfo
+	raw := NoMethod(*s)
+	return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields)
+}
+
+type AllocationAggregateReservationReservedResourceInfoAccelerator struct {
+	// AcceleratorCount: Number of accelerators of specified type.
+	AcceleratorCount int64 `json:"acceleratorCount,omitempty"`
+
+	// AcceleratorType: Full or partial URL to accelerator type. e.g.
+	// "projects/{PROJECT}/zones/{ZONE}/acceleratorTypes/ct4l"
+	AcceleratorType string `json:"acceleratorType,omitempty"`
+
+	// ForceSendFields is a list of field names (e.g. "AcceleratorCount") to
+	// unconditionally include in API requests. By default, fields with
+	// empty or default values are omitted from API requests. However, any
+	// non-pointer, non-interface field appearing in ForceSendFields will be
+	// sent to the server regardless of whether the field is empty or not.
+	// This may be used to include empty fields in Patch requests.
+	ForceSendFields []string `json:"-"`
+
+	// NullFields is a list of field names (e.g. "AcceleratorCount") to
+	// include in API requests with the JSON null value. By default, fields
+	// with empty values are omitted from API requests. However, any field
+	// with an empty value appearing in NullFields will be sent to the
+	// server as null. It is an error if a field in this list has a
+	// non-empty value. This may be used to include null fields in Patch
+	// requests.
+	NullFields []string `json:"-"`
+}
+
+func (s *AllocationAggregateReservationReservedResourceInfoAccelerator) MarshalJSON() ([]byte, error) {
+	type NoMethod AllocationAggregateReservationReservedResourceInfoAccelerator
+	raw := NoMethod(*s)
+	return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields)
+}
+
 // AllocationResourceStatus: [Output Only] Contains output only fields.
 type AllocationResourceStatus struct {
 	// SpecificSkuAllocation: Allocation Properties of this reservation.
@@ -3375,6 +3506,10 @@ type AttachedDiskInitializeParams struct {
 	// example: pd-standard.
 	DiskType string `json:"diskType,omitempty"`
 
+	// EnableConfidentialCompute: Whether this disk is using confidential
+	// compute mode.
+	EnableConfidentialCompute bool `json:"enableConfidentialCompute,omitempty"`
+
 	// Labels: Labels to apply to this disk. These can be later modified by
 	// the disks.setLabels method. This field is only applicable for
 	// persistent disks.
@@ -5537,13 +5672,13 @@ func (s *BackendBucketListWarningData) MarshalJSON() ([]byte, error) {
 // For more information, see Backend Services.
 type BackendService struct {
 	// AffinityCookieTtlSec: Lifetime of cookies in seconds. This setting is
-	// applicable to external and internal HTTP(S) load balancers and
-	// Traffic Director and requires GENERATED_COOKIE or HTTP_COOKIE session
-	// affinity. If set to 0, the cookie is non-persistent and lasts only
-	// until the end of the browser session (or equivalent). The maximum
-	// allowed value is two weeks (1,209,600). Not supported when the
-	// backend service is referenced by a URL map that is bound to target
-	// gRPC proxy that has validateForProxyless field set to true.
+	// applicable to Application Load Balancers and Traffic Director and
+	// requires GENERATED_COOKIE or HTTP_COOKIE session affinity. If set to
+	// 0, the cookie is non-persistent and lasts only until the end of the
+	// browser session (or equivalent). The maximum allowed value is two
+	// weeks (1,209,600). Not supported when the backend service is
+	// referenced by a URL map that is bound to target gRPC proxy that has
+	// validateForProxyless field set to true.
 	AffinityCookieTtlSec int64 `json:"affinityCookieTtlSec,omitempty"`
 
 	// Backends: The list of backends that serve this BackendService.
@@ -5569,8 +5704,8 @@ type BackendService struct {
 
 	// ConnectionTrackingPolicy: Connection Tracking configuration for this
 	// BackendService. Connection tracking policy settings are only
-	// available for Network Load Balancing and Internal TCP/UDP Load
-	// Balancing.
+	// available for external passthrough Network Load Balancers and
+	// internal passthrough Network Load Balancers.
 	ConnectionTrackingPolicy *BackendServiceConnectionTrackingPolicy `json:"connectionTrackingPolicy,omitempty"`
 
 	// ConsistentHash: Consistent Hash-based load balancing can be used to
@@ -5609,15 +5744,15 @@ type BackendService struct {
 	// security policy associated with this backend service.
 	EdgeSecurityPolicy string `json:"edgeSecurityPolicy,omitempty"`
 
-	// EnableCDN: If true, enables Cloud CDN for the backend service of an
-	// external HTTP(S) load balancer.
+	// EnableCDN: If true, enables Cloud CDN for the backend service of a
+	// global external Application Load Balancer.
 	EnableCDN bool `json:"enableCDN,omitempty"`
 
 	// FailoverPolicy: Requires at least one backend instance group to be
 	// defined as a backup (failover) backend. For load balancers that have
-	// configurable failover: Internal TCP/UDP Load Balancing
+	// configurable failover: Internal passthrough Network Load Balancers
 	// (https://cloud.google.com/load-balancing/docs/internal/failover-overview)
-	// and external TCP/UDP Load Balancing
+	// and external passthrough Network Load Balancers
 	// (https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview).
 	FailoverPolicy *BackendServiceFailoverPolicy `json:"failoverPolicy,omitempty"`
 
@@ -5641,8 +5776,8 @@ type BackendService struct {
 	HealthChecks []string `json:"healthChecks,omitempty"`
 
 	// Iap: The configurations for Identity-Aware Proxy on this resource.
-	// Not available for Internal TCP/UDP Load Balancing and Network Load
-	// Balancing.
+	// Not available for internal passthrough Network Load Balancers and
+	// external passthrough Network Load Balancers.
 	Iap *BackendServiceIAP `json:"iap,omitempty"`
 
 	// Id: [Output Only] The unique identifier for the resource. This
@@ -5658,14 +5793,16 @@ type BackendService struct {
 	// another. For more information, refer to Choosing a load balancer.
 	//
 	// Possible values:
-	//   "EXTERNAL" - Signifies that this will be used for external HTTP(S),
-	// SSL Proxy, TCP Proxy, or Network Load Balancing
-	//   "EXTERNAL_MANAGED" - Signifies that this will be used for External
-	// Managed HTTP(S) Load Balancing.
-	//   "INTERNAL" - Signifies that this will be used for Internal TCP/UDP
-	// Load Balancing.
-	//   "INTERNAL_MANAGED" - Signifies that this will be used for Internal
-	// HTTP(S) Load Balancing.
+	//   "EXTERNAL" - Signifies that this will be used for classic
+	// Application Load Balancers, global external proxy Network Load
+	// Balancers, or external passthrough Network Load Balancers.
+	//   "EXTERNAL_MANAGED" - Signifies that this will be used for global
+	// external Application Load Balancers, regional external Application
+	// Load Balancers, or regional external proxy Network Load Balancers.
+	//   "INTERNAL" - Signifies that this will be used for internal
+	// passthrough Network Load Balancers.
+	//   "INTERNAL_MANAGED" - Signifies that this will be used for internal
+	// Application Load Balancers.
 	//   "INTERNAL_SELF_MANAGED" - Signifies that this will be used by
 	// Traffic Director.
 	//   "INVALID_LOAD_BALANCING_SCHEME"
@@ -5807,16 +5944,18 @@ type BackendService struct {
 	OutlierDetection *OutlierDetection `json:"outlierDetection,omitempty"`
 
 	// Port: Deprecated in favor of portName. The TCP port to connect on the
-	// backend. The default value is 80. For Internal TCP/UDP Load Balancing
-	// and Network Load Balancing, omit port.
+	// backend. The default value is 80. For internal passthrough Network
+	// Load Balancers and external passthrough Network Load Balancers, omit
+	// port.
 	Port int64 `json:"port,omitempty"`
 
 	// PortName: A named port on a backend instance group representing the
 	// port for communication to the backend VMs in that group. The named
 	// port must be defined on each backend instance group
 	// (https://cloud.google.com/load-balancing/docs/backend-service#named_ports).
-	// This parameter has no meaning if the backends are NEGs. For Internal
-	// TCP/UDP Load Balancing and Network Load Balancing, omit port_name.
+	// This parameter has no meaning if the backends are NEGs. For internal
+	// passthrough Network Load Balancers and external passthrough Network
+	// Load Balancers, omit port_name.
 	PortName string `json:"portName,omitempty"`
 
 	// Protocol: The protocol this BackendService uses to communicate with
@@ -6400,18 +6539,19 @@ type BackendServiceConnectionTrackingPolicy struct {
 	//   "NEVER_PERSIST"
 	ConnectionPersistenceOnUnhealthyBackends string `json:"connectionPersistenceOnUnhealthyBackends,omitempty"`
 
-	// EnableStrongAffinity: Enable Strong Session Affinity for Network Load
-	// Balancing. This option is not available publicly.
+	// EnableStrongAffinity: Enable Strong Session Affinity for external
+	// passthrough Network Load Balancers. This option is not available
+	// publicly.
 	EnableStrongAffinity bool `json:"enableStrongAffinity,omitempty"`
 
 	// IdleTimeoutSec: Specifies how long to keep a Connection Tracking
-	// entry while there is no matching traffic (in seconds). For Internal
-	// TCP/UDP Load Balancing: - The minimum (default) is 10 minutes and the
-	// maximum is 16 hours. - It can be set only if Connection Tracking is
-	// less than 5-tuple (i.e. Session Affinity is CLIENT_IP_NO_DESTINATION,
-	// CLIENT_IP or CLIENT_IP_PROTO, and Tracking Mode is PER_SESSION). For
-	// Network Load Balancer the default is 60 seconds. This option is not
-	// available publicly.
+	// entry while there is no matching traffic (in seconds). For internal
+	// passthrough Network Load Balancers: - The minimum (default) is 10
+	// minutes and the maximum is 16 hours. - It can be set only if
+	// Connection Tracking is less than 5-tuple (i.e. Session Affinity is
+	// CLIENT_IP_NO_DESTINATION, CLIENT_IP or CLIENT_IP_PROTO, and Tracking
+	// Mode is PER_SESSION). For external passthrough Network Load Balancers
+	// the default is 60 seconds. This option is not available publicly.
 	IdleTimeoutSec int64 `json:"idleTimeoutSec,omitempty"`
 
 	// TrackingMode: Specifies the key used for connection tracking. There
@@ -6457,9 +6597,9 @@ func (s *BackendServiceConnectionTrackingPolicy) MarshalJSON() ([]byte, error) {
 }
 
 // BackendServiceFailoverPolicy: For load balancers that have
-// configurable failover: Internal TCP/UDP Load Balancing
+// configurable failover: Internal passthrough Network Load Balancers
 // (https://cloud.google.com/load-balancing/docs/internal/failover-overview)
-// and external TCP/UDP Load Balancing
+// and external passthrough Network Load Balancers
 // (https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview).
 // On failover or failback, this field indicates whether connection
 // draining will be honored. Google Cloud has a fixed connection
@@ -6478,9 +6618,9 @@ type BackendServiceFailoverPolicy struct {
 	// unhealthy.If set to false, connections are distributed among all
 	// primary VMs when all primary and all backup backend VMs are
 	// unhealthy. For load balancers that have configurable failover:
-	// Internal TCP/UDP Load Balancing
+	// Internal passthrough Network Load Balancers
 	// (https://cloud.google.com/load-balancing/docs/internal/failover-overview)
-	// and external TCP/UDP Load Balancing
+	// and external passthrough Network Load Balancers
 	// (https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview).
 	// The default is false.
 	DropTrafficIfUnhealthy bool `json:"dropTrafficIfUnhealthy,omitempty"`
@@ -7717,11 +7857,34 @@ type Binding struct {
 	// For example, `admins@example.com`. * `domain:{domain}`: The G Suite
 	// domain (primary) that represents all the users of that domain. For
 	// example, `google.com` or `example.com`. *
-	// `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus
-	// unique identifier) representing a user that has been recently
-	// deleted. For example, `alice@example.com?uid=123456789012345678901`.
-	// If the user is recovered, this value reverts to `user:{emailid}` and
-	// the recovered user retains the role in the binding. *
+	// `principal://iam.googleapis.com/locations/global/workforcePools/{pool_
+	// id}/subject/{subject_attribute_value}`: A single identity in a
+	// workforce identity pool. *
+	// `principalSet://iam.googleapis.com/locations/global/workforcePools/{po
+	// ol_id}/group/{group_id}`: All workforce identities in a group. *
+	// `principalSet://iam.googleapis.com/locations/global/workforcePools/{po
+	// ol_id}/attribute.{attribute_name}/{attribute_value}`: All workforce
+	// identities with a specific attribute value. *
+	// `principalSet://iam.googleapis.com/locations/global/workforcePools/{po
+	// ol_id}/*`: All identities in a workforce identity pool. *
+	// `principal://iam.googleapis.com/projects/{project_number}/locations/gl
+	// obal/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}
+	// `: A single identity in a workload identity pool. *
+	// `principalSet://iam.googleapis.com/projects/{project_number}/locations
+	// /global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload
+	// identity pool group. *
+	// `principalSet://iam.googleapis.com/projects/{project_number}/locations
+	// /global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{at
+	// tribute_value}`: All identities in a workload identity pool with a
+	// certain attribute. *
+	// `principalSet://iam.googleapis.com/projects/{project_number}/locations
+	// /global/workloadIdentityPools/{pool_id}/*`: All identities in a
+	// workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An
+	// email address (plus unique identifier) representing a user that has
+	// been recently deleted. For example,
+	// `alice@example.com?uid=123456789012345678901`. If the user is
+	// recovered, this value reverts to `user:{emailid}` and the recovered
+	// user retains the role in the binding. *
 	// `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address
 	// (plus unique identifier) representing a service account that has been
 	// recently deleted. For example,
@@ -7733,7 +7896,12 @@ type Binding struct {
 	// that has been recently deleted. For example,
 	// `admins@example.com?uid=123456789012345678901`. If the group is
 	// recovered, this value reverts to `group:{emailid}` and the recovered
-	// group retains the role in the binding.
+	// group retains the role in the binding. *
+	// `deleted:principal://iam.googleapis.com/locations/global/workforcePool
+	// s/{pool_id}/subject/{subject_attribute_value}`: Deleted single
+	// identity in a workforce identity pool. For example,
+	// `deleted:principal://iam.googleapis.com/locations/global/workforcePool
+	// s/my-pool-id/subject/my-subject-attribute-value`.
 	Members []string `json:"members,omitempty"`
 
 	// Role: Role that is assigned to the list of `members`, or principals.
@@ -8152,6 +8320,15 @@ type Commitment struct {
 	// format.
 	EndTimestamp string `json:"endTimestamp,omitempty"`
 
+	// ExistingReservations: Specifies the already existing reservations to
+	// attach to the Commitment. This field is optional, and it can be a
+	// full or partial URL. For example, the following are valid URLs to an
+	// reservation: -
+	// https://www.googleapis.com/compute/v1/projects/project/zones/zone
+	// /reservations/reservation -
+	// projects/project/zones/zone/reservations/reservation
+	ExistingReservations []string `json:"existingReservations,omitempty"`
+
 	// Id: [Output Only] The unique identifier for the resource. This
 	// identifier is defined by the server.
 	Id uint64 `json:"id,omitempty,string"`
@@ -8191,7 +8368,7 @@ type Commitment struct {
 	// used.
 	Region string `json:"region,omitempty"`
 
-	// Reservations: List of create-on-create reseravtions for this
+	// Reservations: List of create-on-create reservations for this
 	// commitment.
 	Reservations []*Reservation `json:"reservations,omitempty"`
 
@@ -9340,6 +9517,10 @@ type Disk struct {
 	// provide a key to use the disk later.
 	DiskEncryptionKey *CustomerEncryptionKey `json:"diskEncryptionKey,omitempty"`
 
+	// EnableConfidentialCompute: Whether this disk is using confidential
+	// compute mode.
+	EnableConfidentialCompute bool `json:"enableConfidentialCompute,omitempty"`
+
 	// GuestOsFeatures: A list of features to enable on the guest operating
 	// system. Applicable only for bootable images. Read Enabling guest
 	// operating system features to see a list of available options.
@@ -9440,6 +9621,9 @@ type Disk struct {
 	// resource.
 	ResourceStatus *DiskResourceStatus `json:"resourceStatus,omitempty"`
 
+	// SatisfiesPzi: Output only. Reserved for future use.
+	SatisfiesPzi bool `json:"satisfiesPzi,omitempty"`
+
 	// SatisfiesPzs: [Output Only] Reserved for future use.
 	SatisfiesPzs bool `json:"satisfiesPzs,omitempty"`
 
@@ -13317,10 +13501,10 @@ func (s *FixedOrPercent) MarshalJSON() ([]byte, error) {
 // * Regional
 // (https://cloud.google.com/compute/docs/reference/rest/v1/forwardingRules)
 // A forwarding rule and its corresponding IP address represent the
-// frontend configuration of a Google Cloud Platform load balancer.
-// Forwarding rules can also reference target instances and Cloud VPN
-// Classic gateways (targetVpnGateway). For more information, read
-// Forwarding rule concepts and Using protocol forwarding.
+// frontend configuration of a Google Cloud load balancer. Forwarding
+// rules can also reference target instances and Cloud VPN Classic
+// gateways (targetVpnGateway). For more information, read Forwarding
+// rule concepts and Using protocol forwarding.
 type ForwardingRule struct {
 	// IPAddress: IP address for which this forwarding rule accepts traffic.
 	// When a client sends traffic to this IP address, the forwarding rule
@@ -13381,14 +13565,13 @@ type ForwardingRule struct {
 	// protocol requires allPorts be set to true.
 	AllPorts bool `json:"allPorts,omitempty"`
 
-	// AllowGlobalAccess: This field is used along with the backend_service
-	// field for internal load balancing or with the target field for
-	// internal TargetInstance. If set to true, clients can access the
-	// Internal TCP/UDP Load Balancer, Internal HTTP(S) and TCP Proxy Load
-	// Balancer from all regions. If false, only allows access from the
-	// local region the load balancer is located at. Note that for
-	// INTERNAL_MANAGED forwarding rules, this field cannot be changed after
-	// the forwarding rule is created.
+	// AllowGlobalAccess: If set to true, clients can access the internal
+	// passthrough Network Load Balancers, the regional internal Application
+	// Load Balancer, and the regional internal proxy Network Load Balancer
+	// from all regions. If false, only allows access from the local region
+	// the load balancer is located at. Note that for INTERNAL_MANAGED
+	// forwarding rules, this field cannot be changed after the forwarding
+	// rule is created.
 	AllowGlobalAccess bool `json:"allowGlobalAccess,omitempty"`
 
 	// AllowPscGlobalAccess: This is used in PSC consumer ForwardingRule to
@@ -13396,16 +13579,16 @@ type ForwardingRule struct {
 	AllowPscGlobalAccess bool `json:"allowPscGlobalAccess,omitempty"`
 
 	// BackendService: Identifies the backend service to which the
-	// forwarding rule sends traffic. Required for Internal TCP/UDP Load
-	// Balancing and Network Load Balancing; must be omitted for all other
+	// forwarding rule sends traffic. Required for internal and external
+	// passthrough Network Load Balancers; must be omitted for all other
 	// load balancer types.
 	BackendService string `json:"backendService,omitempty"`
 
 	// BaseForwardingRule: [Output Only] The URL for the corresponding base
-	// Forwarding Rule. By base Forwarding Rule, we mean the Forwarding Rule
+	// forwarding rule. By base forwarding rule, we mean the forwarding rule
 	// that has the same IP address, protocol, and port settings with the
-	// current Forwarding Rule, but without sourceIPRanges specified. Always
-	// empty if the current Forwarding Rule does not have sourceIPRanges
+	// current forwarding rule, but without sourceIPRanges specified. Always
+	// empty if the current forwarding rule does not have sourceIPRanges
 	// specified.
 	BaseForwardingRule string `json:"baseForwardingRule,omitempty"`
 
@@ -13448,7 +13631,7 @@ type ForwardingRule struct {
 	IsMirroringCollector bool `json:"isMirroringCollector,omitempty"`
 
 	// Kind: [Output Only] Type of the resource. Always
-	// compute#forwardingRule for Forwarding Rule resources.
+	// compute#forwardingRule for forwarding rule resources.
 	Kind string `json:"kind,omitempty"`
 
 	// LabelFingerprint: A fingerprint for the labels being applied to this
@@ -13511,10 +13694,10 @@ type ForwardingRule struct {
 	Name string `json:"name,omitempty"`
 
 	// Network: This field is not used for global external load balancing.
-	// For Internal TCP/UDP Load Balancing, this field identifies the
-	// network that the load balanced IP should belong to for this
-	// Forwarding Rule. If the subnetwork is specified, the network of the
-	// subnetwork will be used. If neither subnetwork nor this field is
+	// For internal passthrough Network Load Balancers, this field
+	// identifies the network that the load balanced IP should belong to for
+	// this forwarding rule. If the subnetwork is specified, the network of
+	// the subnetwork will be used. If neither subnetwork nor this field is
 	// specified, the default network will be used. For Private Service
 	// Connect forwarding rules that forward traffic to Google APIs, a
 	// network must be provided.
@@ -13581,7 +13764,7 @@ type ForwardingRule struct {
 	Ports []string `json:"ports,omitempty"`
 
 	// PscConnectionId: [Output Only] The PSC connection id of the PSC
-	// Forwarding Rule.
+	// forwarding rule.
 	PscConnectionId uint64 `json:"pscConnectionId,omitempty,string"`
 
 	// Possible values:
@@ -13611,7 +13794,7 @@ type ForwardingRule struct {
 	ServiceDirectoryRegistrations []*ForwardingRuleServiceDirectoryRegistration `json:"serviceDirectoryRegistrations,omitempty"`
 
 	// ServiceLabel: An optional prefix to the service name for this
-	// Forwarding Rule. If specified, the prefix is the first label of the
+	// forwarding rule. If specified, the prefix is the first label of the
 	// fully qualified service name. The label must be 1-63 characters long,
 	// and comply with RFC1035. Specifically, the label must be 1-63
 	// characters long and match the regular expression
@@ -13622,25 +13805,26 @@ type ForwardingRule struct {
 	ServiceLabel string `json:"serviceLabel,omitempty"`
 
 	// ServiceName: [Output Only] The internal fully qualified service name
-	// for this Forwarding Rule. This field is only used for internal load
+	// for this forwarding rule. This field is only used for internal load
 	// balancing.
 	ServiceName string `json:"serviceName,omitempty"`
 
-	// SourceIpRanges: If not empty, this Forwarding Rule will only forward
+	// SourceIpRanges: If not empty, this forwarding rule will only forward
 	// the traffic when the source IP address matches one of the IP
-	// addresses or CIDR ranges set here. Note that a Forwarding Rule can
+	// addresses or CIDR ranges set here. Note that a forwarding rule can
 	// only have up to 64 source IP ranges, and this field can only be used
-	// with a regional Forwarding Rule whose scheme is EXTERNAL. Each
+	// with a regional forwarding rule whose scheme is EXTERNAL. Each
 	// source_ip_range entry should be either an IP address (for example,
 	// 1.2.3.4) or a CIDR range (for example, 1.2.3.0/24).
 	SourceIpRanges []string `json:"sourceIpRanges,omitempty"`
 
 	// Subnetwork: This field identifies the subnetwork that the load
-	// balanced IP should belong to for this Forwarding Rule, used in
-	// internal load balancing and network load balancing with IPv6. If the
-	// network specified is in auto subnet mode, this field is optional.
-	// However, a subnetwork must be specified if the network is in custom
-	// subnet mode or when creating external forwarding rule with IPv6.
+	// balanced IP should belong to for this forwarding rule, used with
+	// internal load balancers and external passthrough Network Load
+	// Balancers with IPv6. If the network specified is in auto subnet mode,
+	// this field is optional. However, a subnetwork must be specified if
+	// the network is in custom subnet mode or when creating external
+	// forwarding rule with IPv6.
 	Subnetwork string `json:"subnetwork,omitempty"`
 
 	// Target: The URL of the target resource to receive the matched
@@ -14101,9 +14285,9 @@ func (s *ForwardingRuleReference) MarshalJSON() ([]byte, error) {
 }
 
 // ForwardingRuleServiceDirectoryRegistration: Describes the
-// auto-registration of the Forwarding Rule to Service Directory. The
+// auto-registration of the forwarding rule to Service Directory. The
 // region and project of the Service Directory resource generated from
-// this registration will be the same as this Forwarding Rule.
+// this registration will be the same as this forwarding rule.
 type ForwardingRuleServiceDirectoryRegistration struct {
 	// Namespace: Service Directory namespace to register the forwarding
 	// rule under.
@@ -14115,8 +14299,8 @@ type ForwardingRuleServiceDirectoryRegistration struct {
 
 	// ServiceDirectoryRegion: [Optional] Service Directory region to
 	// register this global forwarding rule under. Default to "us-central1".
-	// Only used for PSC for Google APIs. All PSC for Google APIs Forwarding
-	// Rules on the same network should use the same Service Directory
+	// Only used for PSC for Google APIs. All PSC for Google APIs forwarding
+	// rules on the same network should use the same Service Directory
 	// region.
 	ServiceDirectoryRegion string `json:"serviceDirectoryRegion,omitempty"`
 
@@ -14333,7 +14517,7 @@ type GRPCHealthCheck struct {
 	// PortSpecification: Specifies how a port is selected for health
 	// checking. Can be one of the following values: USE_FIXED_PORT:
 	// Specifies a port number explicitly using the port field in the health
-	// check. Supported by backend services for pass-through load balancers
+	// check. Supported by backend services for passthrough load balancers
 	// and backend services for proxy load balancers. Not supported by
 	// target pools. The health check supports all backends supported by the
 	// backend service provided the backend can be health checked. For
@@ -14343,7 +14527,7 @@ type GRPCHealthCheck struct {
 	// specifying the health check port by referring to the backend service.
 	// Only supported by backend services for proxy load balancers. Not
 	// supported by target pools. Not supported by backend services for
-	// pass-through load balancers. Supports all backends that can be health
+	// passthrough load balancers. Supports all backends that can be health
 	// checked; for example, GCE_VM_IP_PORT network endpoint groups and
 	// instance group backends. For GCE_VM_IP_PORT network endpoint group
 	// backends, the health check uses the port number specified for each
@@ -14714,12 +14898,13 @@ type GuestOsFeature struct {
 	// commas to separate values. Set to one or more of the following
 	// values: - VIRTIO_SCSI_MULTIQUEUE - WINDOWS - MULTI_IP_SUBNET -
 	// UEFI_COMPATIBLE - GVNIC - SEV_CAPABLE - SUSPEND_RESUME_COMPATIBLE -
-	// SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE For more information, see
-	// Enabling guest operating system features.
+	// SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE - TDX_CAPABLE - IDPF For more
+	// information, see Enabling guest operating system features.
 	//
 	// Possible values:
 	//   "FEATURE_TYPE_UNSPECIFIED"
 	//   "GVNIC"
+	//   "IDPF"
 	//   "MULTI_IP_SUBNET"
 	//   "SECURE_BOOT"
 	//   "SEV_CAPABLE"
@@ -14773,7 +14958,7 @@ type HTTP2HealthCheck struct {
 	// PortSpecification: Specifies how a port is selected for health
 	// checking. Can be one of the following values: USE_FIXED_PORT:
 	// Specifies a port number explicitly using the port field in the health
-	// check. Supported by backend services for pass-through load balancers
+	// check. Supported by backend services for passthrough load balancers
 	// and backend services for proxy load balancers. Not supported by
 	// target pools. The health check supports all backends supported by the
 	// backend service provided the backend can be health checked. For
@@ -14783,7 +14968,7 @@ type HTTP2HealthCheck struct {
 	// specifying the health check port by referring to the backend service.
 	// Only supported by backend services for proxy load balancers. Not
 	// supported by target pools. Not supported by backend services for
-	// pass-through load balancers. Supports all backends that can be health
+	// passthrough load balancers. Supports all backends that can be health
 	// checked; for example, GCE_VM_IP_PORT network endpoint groups and
 	// instance group backends. For GCE_VM_IP_PORT network endpoint group
 	// backends, the health check uses the port number specified for each
@@ -14867,7 +15052,7 @@ type HTTPHealthCheck struct {
 	// PortSpecification: Specifies how a port is selected for health
 	// checking. Can be one of the following values: USE_FIXED_PORT:
 	// Specifies a port number explicitly using the port field in the health
-	// check. Supported by backend services for pass-through load balancers
+	// check. Supported by backend services for passthrough load balancers
 	// and backend services for proxy load balancers. Also supported in
 	// legacy HTTP health checks for target pools. The health check supports
 	// all backends supported by the backend service provided the backend
@@ -14961,7 +15146,7 @@ type HTTPSHealthCheck struct {
 	// PortSpecification: Specifies how a port is selected for health
 	// checking. Can be one of the following values: USE_FIXED_PORT:
 	// Specifies a port number explicitly using the port field in the health
-	// check. Supported by backend services for pass-through load balancers
+	// check. Supported by backend services for passthrough load balancers
 	// and backend services for proxy load balancers. Not supported by
 	// target pools. The health check supports all backends supported by the
 	// backend service provided the backend can be health checked. For
@@ -14971,7 +15156,7 @@ type HTTPSHealthCheck struct {
 	// specifying the health check port by referring to the backend service.
 	// Only supported by backend services for proxy load balancers. Not
 	// supported by target pools. Not supported by backend services for
-	// pass-through load balancers. Supports all backends that can be health
+	// passthrough load balancers. Supports all backends that can be health
 	// checked; for example, GCE_VM_IP_PORT network endpoint groups and
 	// instance group backends. For GCE_VM_IP_PORT network endpoint group
 	// backends, the health check uses the port number specified for each
@@ -15041,20 +15226,14 @@ func (s *HTTPSHealthCheck) MarshalJSON() ([]byte, error) {
 // (/compute/docs/reference/rest/v1/regionHealthChecks) * Global
 // (/compute/docs/reference/rest/v1/healthChecks) These health check
 // resources can be used for load balancing and for autohealing VMs in a
-// managed instance group (MIG). **Load balancing** The following load
-// balancer can use either regional or global health check: * Internal
-// TCP/UDP load balancer The following load balancers require regional
-// health check: * Internal HTTP(S) load balancer * Backend
-// service-based network load balancer Traffic Director and the
-// following load balancers require global health check: * External
-// HTTP(S) load balancer * TCP proxy load balancer * SSL proxy load
-// balancer The following load balancer require legacy HTTP health
-// checks (/compute/docs/reference/rest/v1/httpHealthChecks): * Target
-// pool-based network load balancer **Autohealing in MIGs** The health
-// checks that you use for autohealing VMs in a MIG can be either
-// regional or global. For more information, see Set up an application
-// health check and autohealing. For more information, see Health checks
-// overview.
+// managed instance group (MIG). **Load balancing** Health check
+// requirements vary depending on the type of load balancer. For details
+// about the type of health check supported for each load balancer and
+// corresponding backend type, see Health checks overview: Load balancer
+// guide. **Autohealing in MIGs** The health checks that you use for
+// autohealing VMs in a MIG can be either regional or global. For more
+// information, see Set up an application health check and autohealing.
+// For more information, see Health checks overview.
 type HealthCheck struct {
 	// CheckIntervalSec: How often (in seconds) to send a health check. The
 	// default value is 5 seconds.
@@ -17753,6 +17932,11 @@ type Image struct {
 	// (in GB).
 	DiskSizeGb int64 `json:"diskSizeGb,omitempty,string"`
 
+	// EnableConfidentialCompute: Whether this image is created from a
+	// confidential compute mode disk. [Output Only]: This field is not set
+	// by user, but from source disk.
+	EnableConfidentialCompute bool `json:"enableConfidentialCompute,omitempty"`
+
 	// Family: The name of the image family to which this image belongs. The
 	// image family name can be from a publicly managed image family
 	// provided by Compute Engine, or from a custom image family you create.
@@ -17819,6 +18003,9 @@ type Image struct {
 	// RawDisk: The parameters of the raw disk image.
 	RawDisk *ImageRawDisk `json:"rawDisk,omitempty"`
 
+	// SatisfiesPzi: Output only. Reserved for future use.
+	SatisfiesPzi bool `json:"satisfiesPzi,omitempty"`
+
 	// SatisfiesPzs: [Output Only] Reserved for future use.
 	SatisfiesPzs bool `json:"satisfiesPzs,omitempty"`
 
@@ -18437,6 +18624,9 @@ type Instance struct {
 	// corresponding input only field.
 	ResourceStatus *ResourceStatus `json:"resourceStatus,omitempty"`
 
+	// SatisfiesPzi: [Output Only] Reserved for future use.
+	SatisfiesPzi bool `json:"satisfiesPzi,omitempty"`
+
 	// SatisfiesPzs: [Output Only] Reserved for future use.
 	SatisfiesPzs bool `json:"satisfiesPzs,omitempty"`
 
@@ -27587,6 +27777,9 @@ type MachineImage struct {
 	// last character, which cannot be a dash.
 	Name string `json:"name,omitempty"`
 
+	// SatisfiesPzi: Output only. Reserved for future use.
+	SatisfiesPzi bool `json:"satisfiesPzi,omitempty"`
+
 	// SatisfiesPzs: [Output Only] Reserved for future use.
 	SatisfiesPzs bool `json:"satisfiesPzs,omitempty"`
 
@@ -30548,11 +30741,13 @@ type NetworkEndpoint struct {
 	// is NON_GCP_FQDN_PORT.
 	Fqdn string `json:"fqdn,omitempty"`
 
-	// Instance: The name for a specific VM instance that the IP address
-	// belongs to. This is required for network endpoints of type
+	// Instance: The name or a URL of a specific VM instance that the IP
+	// address belongs to. This is required for network endpoints of type
 	// GCE_VM_IP_PORT. The instance must be in the same zone of network
-	// endpoint group. The name must be 1-63 characters long, and comply
-	// with RFC1035.
+	// endpoint group (for zonal NEGs) or in the zone within the region of
+	// the NEG (for regional NEGs). The name must be 1-63 characters long,
+	// and comply with RFC1035 or be a valid URL pointing to an existing
+	// instance.
 	Instance string `json:"instance,omitempty"`
 
 	// IpAddress: Optional IPv4 address of network endpoint. The IP address
@@ -35280,7 +35475,8 @@ func (s *NotificationEndpointListWarningData) MarshalJSON() ([]byte, error) {
 // `globalOperations` resource. - For regional operations, use the
 // `regionOperations` resource. - For zonal operations, use the
 // `zoneOperations` resource. For more information, read Global,
-// Regional, and Zonal Resources.
+// Regional, and Zonal Resources. Note that completed Operation
+// resources have a limited retention period.
 type Operation struct {
 	// ClientOperationId: [Output Only] The value of `requestId` if you
 	// provided it in the request. Not present otherwise.
@@ -36689,14 +36885,16 @@ type PacketMirroringFilter struct {
 	// IPProtocols: Protocols that apply as filter on mirrored traffic. If
 	// no protocols are specified, all traffic that matches the specified
 	// CIDR ranges is mirrored. If neither cidrRanges nor IPProtocols is
-	// specified, all traffic is mirrored.
+	// specified, all IPv4 traffic is mirrored.
 	IPProtocols []string `json:"IPProtocols,omitempty"`
 
-	// CidrRanges: IP CIDR ranges that apply as filter on the source
-	// (ingress) or destination (egress) IP in the IP header. Only IPv4 is
-	// supported. If no ranges are specified, all traffic that matches the
+	// CidrRanges: One or more IPv4 or IPv6 CIDR ranges that apply as filter
+	// on the source (ingress) or destination (egress) IP in the IP header.
+	// If no ranges are specified, all IPv4 traffic that matches the
 	// specified IPProtocols is mirrored. If neither cidrRanges nor
-	// IPProtocols is specified, all traffic is mirrored.
+	// IPProtocols is specified, all IPv4 traffic is mirrored. To mirror all
+	// IPv4 and IPv6 traffic, use "0.0.0.0/0,::/0". Note: Support for IPv6
+	// traffic is in preview.
 	CidrRanges []string `json:"cidrRanges,omitempty"`
 
 	// Direction: Direction of traffic to mirror, either INGRESS, EGRESS, or
@@ -39218,6 +39416,7 @@ type Quota struct {
 	//   "COMMITTED_N2_CPUS"
 	//   "COMMITTED_NVIDIA_A100_80GB_GPUS"
 	//   "COMMITTED_NVIDIA_A100_GPUS"
+	//   "COMMITTED_NVIDIA_H100_GPUS"
 	//   "COMMITTED_NVIDIA_K80_GPUS"
 	//   "COMMITTED_NVIDIA_L4_GPUS"
 	//   "COMMITTED_NVIDIA_P100_GPUS"
@@ -39293,6 +39492,7 @@ type Quota struct {
 	//   "PREEMPTIBLE_LOCAL_SSD_GB"
 	//   "PREEMPTIBLE_NVIDIA_A100_80GB_GPUS"
 	//   "PREEMPTIBLE_NVIDIA_A100_GPUS"
+	//   "PREEMPTIBLE_NVIDIA_H100_GPUS"
 	//   "PREEMPTIBLE_NVIDIA_K80_GPUS"
 	//   "PREEMPTIBLE_NVIDIA_L4_GPUS"
 	//   "PREEMPTIBLE_NVIDIA_P100_GPUS"
@@ -39302,6 +39502,9 @@ type Quota struct {
 	//   "PREEMPTIBLE_NVIDIA_T4_GPUS"
 	//   "PREEMPTIBLE_NVIDIA_T4_VWS_GPUS"
 	//   "PREEMPTIBLE_NVIDIA_V100_GPUS"
+	//   "PREEMPTIBLE_TPU_LITE_DEVICE_V5"
+	//   "PREEMPTIBLE_TPU_LITE_PODSLICE_V5"
+	//   "PREEMPTIBLE_TPU_PODSLICE_V4"
 	//   "PSC_ILB_CONSUMER_FORWARDING_RULES_PER_PRODUCER_NETWORK"
 	//   "PSC_INTERNAL_LB_FORWARDING_RULES"
 	//   "PUBLIC_ADVERTISED_PREFIXES"
@@ -39340,6 +39543,9 @@ type Quota struct {
 	//   "TARGET_SSL_PROXIES"
 	//   "TARGET_TCP_PROXIES"
 	//   "TARGET_VPN_GATEWAYS"
+	//   "TPU_LITE_DEVICE_V5"
+	//   "TPU_LITE_PODSLICE_V5"
+	//   "TPU_PODSLICE_V4"
 	//   "URL_MAPS"
 	//   "VPN_GATEWAYS"
 	//   "VPN_TUNNELS"
@@ -41876,6 +42082,10 @@ func (s *RequestMirrorPolicy) MarshalJSON() ([]byte, error) {
 // that capacity is held in a specific zone even if the reserved VMs are
 // not running. For more information, read Reserving zonal resources.
 type Reservation struct {
+	// AggregateReservation: Reservation for aggregated resources, providing
+	// shape flexibility.
+	AggregateReservation *AllocationAggregateReservation `json:"aggregateReservation,omitempty"`
+
 	// Commitment: [Output Only] Full or partial URL to a parent commitment.
 	// This field displays for reservations that are tied to a commitment.
 	Commitment string `json:"commitment,omitempty"`
@@ -41956,20 +42166,22 @@ type Reservation struct {
 	// server.
 	googleapi.ServerResponse `json:"-"`
 
-	// ForceSendFields is a list of field names (e.g. "Commitment") to
-	// unconditionally include in API requests. By default, fields with
-	// empty or default values are omitted from API requests. However, any
-	// non-pointer, non-interface field appearing in ForceSendFields will be
-	// sent to the server regardless of whether the field is empty or not.
-	// This may be used to include empty fields in Patch requests.
+	// ForceSendFields is a list of field names (e.g.
+	// "AggregateReservation") to unconditionally include in API requests.
+	// By default, fields with empty or default values are omitted from API
+	// requests. However, any non-pointer, non-interface field appearing in
+	// ForceSendFields will be sent to the server regardless of whether the
+	// field is empty or not. This may be used to include empty fields in
+	// Patch requests.
 	ForceSendFields []string `json:"-"`
 
-	// NullFields is a list of field names (e.g. "Commitment") to include in
-	// API requests with the JSON null value. By default, fields with empty
-	// values are omitted from API requests. However, any field with an
-	// empty value appearing in NullFields will be sent to the server as
-	// null. It is an error if a field in this list has a non-empty value.
-	// This may be used to include null fields in Patch requests.
+	// NullFields is a list of field names (e.g. "AggregateReservation") to
+	// include in API requests with the JSON null value. By default, fields
+	// with empty values are omitted from API requests. However, any field
+	// with an empty value appearing in NullFields will be sent to the
+	// server as null. It is an error if a field in this list has a
+	// non-empty value. This may be used to include null fields in Patch
+	// requests.
 	NullFields []string `json:"-"`
 }
 
@@ -46270,7 +46482,7 @@ type SSLHealthCheck struct {
 	// PortSpecification: Specifies how a port is selected for health
 	// checking. Can be one of the following values: USE_FIXED_PORT:
 	// Specifies a port number explicitly using the port field in the health
-	// check. Supported by backend services for pass-through load balancers
+	// check. Supported by backend services for passthrough load balancers
 	// and backend services for proxy load balancers. Not supported by
 	// target pools. The health check supports all backends supported by the
 	// backend service provided the backend can be health checked. For
@@ -46280,7 +46492,7 @@ type SSLHealthCheck struct {
 	// specifying the health check port by referring to the backend service.
 	// Only supported by backend services for proxy load balancers. Not
 	// supported by target pools. Not supported by backend services for
-	// pass-through load balancers. Supports all backends that can be health
+	// passthrough load balancers. Supports all backends that can be health
 	// checked; for example, GCE_VM_IP_PORT network endpoint groups and
 	// instance group backends. For GCE_VM_IP_PORT network endpoint group
 	// backends, the health check uses the port number specified for each
@@ -47980,6 +48192,10 @@ type SecurityPolicyRuleMatcher struct {
 	// Security Policies.
 	Expr *Expr `json:"expr,omitempty"`
 
+	// ExprOptions: The configuration options available when specifying a
+	// user defined CEVAL expression (i.e., 'expr').
+	ExprOptions *SecurityPolicyRuleMatcherExprOptions `json:"exprOptions,omitempty"`
+
 	// VersionedExpr: Preconfigured versioned expression. If this field is
 	// specified, config must also be specified. Available preconfigured
 	// expressions along with their requirements are: SRC_IPS_V1 - must
@@ -48041,6 +48257,73 @@ func (s *SecurityPolicyRuleMatcherConfig) MarshalJSON() ([]byte, error) {
 	return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields)
 }
 
+type SecurityPolicyRuleMatcherExprOptions struct {
+	// RecaptchaOptions: reCAPTCHA configuration options to be applied for
+	// the rule. If the rule does not evaluate reCAPTCHA tokens, this field
+	// has no effect.
+	RecaptchaOptions *SecurityPolicyRuleMatcherExprOptionsRecaptchaOptions `json:"recaptchaOptions,omitempty"`
+
+	// ForceSendFields is a list of field names (e.g. "RecaptchaOptions") to
+	// unconditionally include in API requests. By default, fields with
+	// empty or default values are omitted from API requests. However, any
+	// non-pointer, non-interface field appearing in ForceSendFields will be
+	// sent to the server regardless of whether the field is empty or not.
+	// This may be used to include empty fields in Patch requests.
+	ForceSendFields []string `json:"-"`
+
+	// NullFields is a list of field names (e.g. "RecaptchaOptions") to
+	// include in API requests with the JSON null value. By default, fields
+	// with empty values are omitted from API requests. However, any field
+	// with an empty value appearing in NullFields will be sent to the
+	// server as null. It is an error if a field in this list has a
+	// non-empty value. This may be used to include null fields in Patch
+	// requests.
+	NullFields []string `json:"-"`
+}
+
+func (s *SecurityPolicyRuleMatcherExprOptions) MarshalJSON() ([]byte, error) {
+	type NoMethod SecurityPolicyRuleMatcherExprOptions
+	raw := NoMethod(*s)
+	return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields)
+}
+
+type SecurityPolicyRuleMatcherExprOptionsRecaptchaOptions struct {
+	// ActionTokenSiteKeys: A list of site keys to be used during the
+	// validation of reCAPTCHA action-tokens. The provided site keys need to
+	// be created from reCAPTCHA API under the same project where the
+	// security policy is created.
+	ActionTokenSiteKeys []string `json:"actionTokenSiteKeys,omitempty"`
+
+	// SessionTokenSiteKeys: A list of site keys to be used during the
+	// validation of reCAPTCHA session-tokens. The provided site keys need
+	// to be created from reCAPTCHA API under the same project where the
+	// security policy is created.
+	SessionTokenSiteKeys []string `json:"sessionTokenSiteKeys,omitempty"`
+
+	// ForceSendFields is a list of field names (e.g. "ActionTokenSiteKeys")
+	// to unconditionally include in API requests. By default, fields with
+	// empty or default values are omitted from API requests. However, any
+	// non-pointer, non-interface field appearing in ForceSendFields will be
+	// sent to the server regardless of whether the field is empty or not.
+	// This may be used to include empty fields in Patch requests.
+	ForceSendFields []string `json:"-"`
+
+	// NullFields is a list of field names (e.g. "ActionTokenSiteKeys") to
+	// include in API requests with the JSON null value. By default, fields
+	// with empty values are omitted from API requests. However, any field
+	// with an empty value appearing in NullFields will be sent to the
+	// server as null. It is an error if a field in this list has a
+	// non-empty value. This may be used to include null fields in Patch
+	// requests.
+	NullFields []string `json:"-"`
+}
+
+func (s *SecurityPolicyRuleMatcherExprOptionsRecaptchaOptions) MarshalJSON() ([]byte, error) {
+	type NoMethod SecurityPolicyRuleMatcherExprOptionsRecaptchaOptions
+	raw := NoMethod(*s)
+	return gensupport.MarshalJSON(raw, s.ForceSendFields, s.NullFields)
+}
+
 // SecurityPolicyRuleNetworkMatcher: Represents a match condition that
 // incoming network traffic is evaluated against.
 type SecurityPolicyRuleNetworkMatcher struct {
@@ -48296,7 +48579,13 @@ type SecurityPolicyRuleRateLimitOptions struct {
 	// Server name indication in the TLS session of the HTTPS request. The
 	// key value is truncated to the first 128 bytes. The key type defaults
 	// to ALL on a HTTP session. - REGION_CODE: The country/region from
-	// which the request originates.
+	// which the request originates. - TLS_JA3_FINGERPRINT: JA3 TLS/SSL
+	// fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If
+	// not available, the key type defaults to ALL. - USER_IP: The IP
+	// address of the originating client, which is resolved based on
+	// "userIpRequestHeaders" configured with the security policy. If there
+	// is no "userIpRequestHeaders" configuration or an IP address cannot be
+	// resolved from it, the key type defaults to IP.
 	//
 	// Possible values:
 	//   "ALL"
@@ -48306,6 +48595,8 @@ type SecurityPolicyRuleRateLimitOptions struct {
 	//   "IP"
 	//   "REGION_CODE"
 	//   "SNI"
+	//   "TLS_JA3_FINGERPRINT"
+	//   "USER_IP"
 	//   "XFF_IP"
 	EnforceOnKey string `json:"enforceOnKey,omitempty"`
 
@@ -48392,7 +48683,14 @@ type SecurityPolicyRuleRateLimitOptionsEnforceOnKeyConfig struct {
 	// bytes. - SNI: Server name indication in the TLS session of the HTTPS
 	// request. The key value is truncated to the first 128 bytes. The key
 	// type defaults to ALL on a HTTP session. - REGION_CODE: The
-	// country/region from which the request originates.
+	// country/region from which the request originates. -
+	// TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects
+	// using HTTPS, HTTP/2 or HTTP/3. If not available, the key type
+	// defaults to ALL. - USER_IP: The IP address of the originating client,
+	// which is resolved based on "userIpRequestHeaders" configured with the
+	// security policy. If there is no "userIpRequestHeaders" configuration
+	// or an IP address cannot be resolved from it, the key type defaults to
+	// IP.
 	//
 	// Possible values:
 	//   "ALL"
@@ -48402,6 +48700,8 @@ type SecurityPolicyRuleRateLimitOptionsEnforceOnKeyConfig struct {
 	//   "IP"
 	//   "REGION_CODE"
 	//   "SNI"
+	//   "TLS_JA3_FINGERPRINT"
+	//   "USER_IP"
 	//   "XFF_IP"
 	EnforceOnKeyType string `json:"enforceOnKeyType,omitempty"`
 
@@ -49884,6 +50184,11 @@ type Snapshot struct {
 	// snapshot to a disk.
 	DownloadBytes int64 `json:"downloadBytes,omitempty,string"`
 
+	// EnableConfidentialCompute: Whether this snapshot is created from a
+	// confidential compute mode disk. [Output Only]: This field is not set
+	// by user, but from source disk.
+	EnableConfidentialCompute bool `json:"enableConfidentialCompute,omitempty"`
+
 	// GuestOsFeatures: [Output Only] A list of features to enable on the
 	// guest operating system. Applicable only for bootable images. Read
 	// Enabling guest operating system features to see a list of available
@@ -49935,6 +50240,9 @@ type Snapshot struct {
 	// last character, which cannot be a dash.
 	Name string `json:"name,omitempty"`
 
+	// SatisfiesPzi: Output only. Reserved for future use.
+	SatisfiesPzi bool `json:"satisfiesPzi,omitempty"`
+
 	// SatisfiesPzs: [Output Only] Reserved for future use.
 	SatisfiesPzs bool `json:"satisfiesPzs,omitempty"`
 
@@ -51872,9 +52180,9 @@ func (s *SslPoliciesScopedListWarningData) MarshalJSON() ([]byte, error) {
 }
 
 // SslPolicy: Represents an SSL Policy resource. Use SSL policies to
-// control the SSL features, such as versions and cipher suites, offered
-// by an HTTPS or SSL Proxy load balancer. For more information, read
-// SSL Policy Concepts.
+// control SSL features, such as versions and cipher suites, that are
+// offered by Application Load Balancers and proxy Network Load
+// Balancers. For more information, read SSL policies overview.
 type SslPolicy struct {
 	// CreationTimestamp: [Output Only] Creation timestamp in RFC3339 text
 	// format.
@@ -52449,26 +52757,24 @@ type Subnetwork struct {
 	PrivateIpv6GoogleAccess string `json:"privateIpv6GoogleAccess,omitempty"`
 
 	// Purpose: The purpose of the resource. This field can be either
-	// PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
-	// INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for
+	// PRIVATE, GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY,
+	// PRIVATE_SERVICE_CONNECT, or PRIVATE is the default purpose for
 	// user-created subnets or subnets that are automatically created in
-	// auto mode networks. A subnet with purpose set to
-	// REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved
-	// for regional Envoy-based load balancers. A subnet with purpose set to
+	// auto mode networks. Subnets with purpose set to GLOBAL_MANAGED_PROXY
+	// or REGIONAL_MANAGED_PROXY are user-created subnetworks that are
+	// reserved for Envoy-based load balancers. A subnet with purpose set to
 	// PRIVATE_SERVICE_CONNECT is used to publish services using Private
-	// Service Connect. A subnet with purpose set to
-	// INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used
-	// only by regional internal HTTP(S) load balancers. Note that
-	// REGIONAL_MANAGED_PROXY is the preferred setting for all regional
-	// Envoy load balancers. If unspecified, the subnet purpose defaults to
+	// Service Connect. If unspecified, the subnet purpose defaults to
 	// PRIVATE. The enableFlowLogs field isn't supported if the subnet
-	// purpose field is set to REGIONAL_MANAGED_PROXY.
+	// purpose field is set to GLOBAL_MANAGED_PROXY or
+	// REGIONAL_MANAGED_PROXY.
 	//
 	// Possible values:
 	//   "GLOBAL_MANAGED_PROXY" - Subnet reserved for Global Envoy-based
 	// Load Balancing.
 	//   "INTERNAL_HTTPS_LOAD_BALANCER" - Subnet reserved for Internal
-	// HTTP(S) Load Balancing.
+	// HTTP(S) Load Balancing. This is a legacy purpose, please use
+	// REGIONAL_MANAGED_PROXY instead.
 	//   "PRIVATE" - Regular user created or automatically created subnet.
 	//   "PRIVATE_NAT" - Subnetwork used as source range for Private NAT
 	// Gateways.
@@ -52484,12 +52790,16 @@ type Subnetwork struct {
 	// can be set only at resource creation time.
 	Region string `json:"region,omitempty"`
 
+	// ReservedInternalRange: The URL of the reserved internal range.
+	ReservedInternalRange string `json:"reservedInternalRange,omitempty"`
+
 	// Role: The role of subnetwork. Currently, this field is only used when
-	// purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or
-	// BACKUP. An ACTIVE subnetwork is one that is currently being used for
-	// Envoy-based load balancers in a region. A BACKUP subnetwork is one
-	// that is ready to be promoted to ACTIVE or is currently draining. This
-	// field can be updated with a patch request.
+	// purpose is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The
+	// value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one
+	// that is currently being used for Envoy-based load balancers in a
+	// region. A BACKUP subnetwork is one that is ready to be promoted to
+	// ACTIVE or is currently draining. This field can be updated with a
+	// patch request.
 	//
 	// Possible values:
 	//   "ACTIVE" - The ACTIVE subnet that is currently used.
@@ -53055,6 +53365,9 @@ type SubnetworkSecondaryRange struct {
 	// unique within the subnetwork.
 	RangeName string `json:"rangeName,omitempty"`
 
+	// ReservedInternalRange: The URL of the reserved internal range.
+	ReservedInternalRange string `json:"reservedInternalRange,omitempty"`
+
 	// ForceSendFields is a list of field names (e.g. "IpCidrRange") to
 	// unconditionally include in API requests. By default, fields with
 	// empty or default values are omitted from API requests. However, any
@@ -53362,7 +53675,7 @@ type TCPHealthCheck struct {
 	// PortSpecification: Specifies how a port is selected for health
 	// checking. Can be one of the following values: USE_FIXED_PORT:
 	// Specifies a port number explicitly using the port field in the health
-	// check. Supported by backend services for pass-through load balancers
+	// check. Supported by backend services for passthrough load balancers
 	// and backend services for proxy load balancers. Not supported by
 	// target pools. The health check supports all backends supported by the
 	// backend service provided the backend can be health checked. For
@@ -53372,7 +53685,7 @@ type TCPHealthCheck struct {
 	// specifying the health check port by referring to the backend service.
 	// Only supported by backend services for proxy load balancers. Not
 	// supported by target pools. Not supported by backend services for
-	// pass-through load balancers. Supports all backends that can be health
+	// passthrough load balancers. Supports all backends that can be health
 	// checked; for example, GCE_VM_IP_PORT network endpoint groups and
 	// instance group backends. For GCE_VM_IP_PORT network endpoint group
 	// backends, the health check uses the port number specified for each
@@ -55767,10 +56080,10 @@ func (s *TargetInstancesScopedListWarningData) MarshalJSON() ([]byte, error) {
 }
 
 // TargetPool: Represents a Target Pool resource. Target pools are used
-// for network TCP/UDP load balancing. A target pool references member
-// instances, an associated legacy HttpHealthCheck resource, and,
-// optionally, a backup target pool. For more information, read Using
-// target pools.
+// with external passthrough Network Load Balancers. A target pool
+// references member instances, an associated legacy HttpHealthCheck
+// resource, and, optionally, a backup target pool. For more
+// information, read Using target pools.
 type TargetPool struct {
 	// BackupPool: The server-defined URL for the resource. This field is
 	// applicable only when the containing target pool is serving a
@@ -56786,10 +57099,10 @@ func (s *TargetSslProxiesSetSslCertificatesRequest) MarshalJSON() ([]byte, error
 }
 
 // TargetSslProxy: Represents a Target SSL Proxy resource. A target SSL
-// proxy is a component of a SSL Proxy load balancer. Global forwarding
-// rules reference a target SSL proxy, and the target proxy then
-// references an external backend service. For more information, read
-// Using Target Proxies.
+// proxy is a component of a Proxy Network Load Balancer. The forwarding
+// rule references the target SSL proxy, and the target proxy then
+// references a backend service. For more information, read Proxy
+// Network Load Balancer overview.
 type TargetSslProxy struct {
 	// CertificateMap: URL of a certificate map that identifies a
 	// certificate map associated with the given target proxy. This field
@@ -57303,10 +57616,10 @@ func (s *TargetTcpProxiesSetProxyHeaderRequest) MarshalJSON() ([]byte, error) {
 }
 
 // TargetTcpProxy: Represents a Target TCP Proxy resource. A target TCP
-// proxy is a component of a TCP Proxy load balancer. Global forwarding
-// rules reference target TCP proxy, and the target proxy then
-// references an external backend service. For more information, read
-// TCP Proxy Load Balancing overview.
+// proxy is a component of a Proxy Network Load Balancer. The forwarding
+// rule references the target TCP proxy, and the target proxy then
+// references a backend service. For more information, read Proxy
+// Network Load Balancer overview.
 type TargetTcpProxy struct {
 	// CreationTimestamp: [Output Only] Creation timestamp in RFC3339 text
 	// format.
@@ -59676,26 +59989,24 @@ type UsableSubnetwork struct {
 	Network string `json:"network,omitempty"`
 
 	// Purpose: The purpose of the resource. This field can be either
-	// PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
-	// INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for
+	// PRIVATE, GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY,
+	// PRIVATE_SERVICE_CONNECT, or PRIVATE is the default purpose for
 	// user-created subnets or subnets that are automatically created in
-	// auto mode networks. A subnet with purpose set to
-	// REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved
-	// for regional Envoy-based load balancers. A subnet with purpose set to
+	// auto mode networks. Subnets with purpose set to GLOBAL_MANAGED_PROXY
+	// or REGIONAL_MANAGED_PROXY are user-created subnetworks that are
+	// reserved for Envoy-based load balancers. A subnet with purpose set to
 	// PRIVATE_SERVICE_CONNECT is used to publish services using Private
-	// Service Connect. A subnet with purpose set to
-	// INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used
-	// only by regional internal HTTP(S) load balancers. Note that
-	// REGIONAL_MANAGED_PROXY is the preferred setting for all regional
-	// Envoy load balancers. If unspecified, the subnet purpose defaults to
+	// Service Connect. If unspecified, the subnet purpose defaults to
 	// PRIVATE. The enableFlowLogs field isn't supported if the subnet
-	// purpose field is set to REGIONAL_MANAGED_PROXY.
+	// purpose field is set to GLOBAL_MANAGED_PROXY or
+	// REGIONAL_MANAGED_PROXY.
 	//
 	// Possible values:
 	//   "GLOBAL_MANAGED_PROXY" - Subnet reserved for Global Envoy-based
 	// Load Balancing.
 	//   "INTERNAL_HTTPS_LOAD_BALANCER" - Subnet reserved for Internal
-	// HTTP(S) Load Balancing.
+	// HTTP(S) Load Balancing. This is a legacy purpose, please use
+	// REGIONAL_MANAGED_PROXY instead.
 	//   "PRIVATE" - Regular user created or automatically created subnet.
 	//   "PRIVATE_NAT" - Subnetwork used as source range for Private NAT
 	// Gateways.
@@ -59708,11 +60019,12 @@ type UsableSubnetwork struct {
 	Purpose string `json:"purpose,omitempty"`
 
 	// Role: The role of subnetwork. Currently, this field is only used when
-	// purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or
-	// BACKUP. An ACTIVE subnetwork is one that is currently being used for
-	// Envoy-based load balancers in a region. A BACKUP subnetwork is one
-	// that is ready to be promoted to ACTIVE or is currently draining. This
-	// field can be updated with a patch request.
+	// purpose is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The
+	// value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one
+	// that is currently being used for Envoy-based load balancers in a
+	// region. A BACKUP subnetwork is one that is ready to be promoted to
+	// ACTIVE or is currently draining. This field can be updated with a
+	// patch request.
 	//
 	// Possible values:
 	//   "ACTIVE" - The ACTIVE subnet that is currently used.
@@ -68007,7 +68319,7 @@ type BackendBucketsSetEdgeSecurityPolicyCall struct {
 // SetEdgeSecurityPolicy: Sets the edge security policy for the
 // specified backend bucket.
 //
-//   - backendBucket: Name of the BackendService resource to which the
+//   - backendBucket: Name of the BackendBucket resource to which the
 //     security policy should be set. The name should conform to RFC1035.
 //   - project: Project ID for this request.
 func (r *BackendBucketsService) SetEdgeSecurityPolicy(project string, backendBucket string, securitypolicyreference *SecurityPolicyReference) *BackendBucketsSetEdgeSecurityPolicyCall {
@@ -68136,7 +68448,7 @@ func (c *BackendBucketsSetEdgeSecurityPolicyCall) Do(opts ...googleapi.CallOptio
 	//   ],
 	//   "parameters": {
 	//     "backendBucket": {
-	//       "description": "Name of the BackendService resource to which the security policy should be set. The name should conform to RFC1035.",
+	//       "description": "Name of the BackendBucket resource to which the security policy should be set. The name should conform to RFC1035.",
 	//       "location": "path",
 	//       "required": true,
 	//       "type": "string"
@@ -97528,8 +97840,8 @@ type InstanceGroupManagersListManagedInstancesCall struct {
 // instance, the currentAction is CREATING. If a previous action failed,
 // the list displays the errors for that failed action. The orderBy
 // query parameter is not supported. The `pageToken` query parameter is
-// supported only in the alpha and beta API and only if the group's
-// `listManagedInstancesResults` field is set to `PAGINATED`.
+// supported only if the group's `listManagedInstancesResults` field is
+// set to `PAGINATED`.
 //
 //   - instanceGroupManager: The name of the managed instance group.
 //   - project: Project ID for this request.
@@ -97715,7 +98027,7 @@ func (c *InstanceGroupManagersListManagedInstancesCall) Do(opts ...googleapi.Cal
 	}
 	return ret, nil
 	// {
-	//   "description": "Lists all of the instances in the managed instance group. Each instance in the list has a currentAction, which indicates the action that the managed instance group is performing on the instance. For example, if the group is still creating an instance, the currentAction is CREATING. If a previous action failed, the list displays the errors for that failed action. The orderBy query parameter is not supported. The `pageToken` query parameter is supported only in the alpha and beta API and only if the group's `listManagedInstancesResults` field is set to `PAGINATED`.",
+	//   "description": "Lists all of the instances in the managed instance group. Each instance in the list has a currentAction, which indicates the action that the managed instance group is performing on the instance. For example, if the group is still creating an instance, the currentAction is CREATING. If a previous action failed, the list displays the errors for that failed action. The orderBy query parameter is not supported. The `pageToken` query parameter is supported only if the group's `listManagedInstancesResults` field is set to `PAGINATED`.",
 	//   "flatPath": "projects/{project}/zones/{zone}/instanceGroupManagers/{instanceGroupManager}/listManagedInstances",
 	//   "httpMethod": "POST",
 	//   "id": "compute.instanceGroupManagers.listManagedInstances",
@@ -106797,6 +107109,184 @@ func (c *InstancesListReferrersCall) Pages(ctx context.Context, f func(*Instance
 	}
 }
 
+// method id "compute.instances.performMaintenance":
+
+type InstancesPerformMaintenanceCall struct {
+	s          *Service
+	project    string
+	zone       string
+	instance   string
+	urlParams_ gensupport.URLParams
+	ctx_       context.Context
+	header_    http.Header
+}
+
+// PerformMaintenance: Perform a manual maintenance on the instance.
+//
+// - instance: Name of the instance scoping this request.
+// - project: Project ID for this request.
+// - zone: The name of the zone for this request.
+func (r *InstancesService) PerformMaintenance(project string, zone string, instance string) *InstancesPerformMaintenanceCall {
+	c := &InstancesPerformMaintenanceCall{s: r.s, urlParams_: make(gensupport.URLParams)}
+	c.project = project
+	c.zone = zone
+	c.instance = instance
+	return c
+}
+
+// RequestId sets the optional parameter "requestId": An optional
+// request ID to identify requests. Specify a unique request ID so that
+// if you must retry your request, the server will know to ignore the
+// request if it has already been completed. For example, consider a
+// situation where you make an initial request and the request times
+// out. If you make the request again with the same request ID, the
+// server can check if original operation with the same request ID was
+// received, and if so, will ignore the second request. This prevents
+// clients from accidentally creating duplicate commitments. The request
+// ID must be a valid UUID with the exception that zero UUID is not
+// supported ( 00000000-0000-0000-0000-000000000000).
+func (c *InstancesPerformMaintenanceCall) RequestId(requestId string) *InstancesPerformMaintenanceCall {
+	c.urlParams_.Set("requestId", requestId)
+	return c
+}
+
+// Fields allows partial responses to be retrieved. See
+// https://developers.google.com/gdata/docs/2.0/basics#PartialResponse
+// for more information.
+func (c *InstancesPerformMaintenanceCall) Fields(s ...googleapi.Field) *InstancesPerformMaintenanceCall {
+	c.urlParams_.Set("fields", googleapi.CombineFields(s))
+	return c
+}
+
+// Context sets the context to be used in this call's Do method. Any
+// pending HTTP request will be aborted if the provided context is
+// canceled.
+func (c *InstancesPerformMaintenanceCall) Context(ctx context.Context) *InstancesPerformMaintenanceCall {
+	c.ctx_ = ctx
+	return c
+}
+
+// Header returns an http.Header that can be modified by the caller to
+// add HTTP headers to the request.
+func (c *InstancesPerformMaintenanceCall) Header() http.Header {
+	if c.header_ == nil {
+		c.header_ = make(http.Header)
+	}
+	return c.header_
+}
+
+func (c *InstancesPerformMaintenanceCall) doRequest(alt string) (*http.Response, error) {
+	reqHeaders := make(http.Header)
+	reqHeaders.Set("x-goog-api-client", "gl-go/"+gensupport.GoVersion()+" gdcl/"+internal.Version)
+	for k, v := range c.header_ {
+		reqHeaders[k] = v
+	}
+	reqHeaders.Set("User-Agent", c.s.userAgent())
+	var body io.Reader = nil
+	c.urlParams_.Set("alt", alt)
+	c.urlParams_.Set("prettyPrint", "false")
+	urls := googleapi.ResolveRelative(c.s.BasePath, "projects/{project}/zones/{zone}/instances/{instance}/performMaintenance")
+	urls += "?" + c.urlParams_.Encode()
+	req, err := http.NewRequest("POST", urls, body)
+	if err != nil {
+		return nil, err
+	}
+	req.Header = reqHeaders
+	googleapi.Expand(req.URL, map[string]string{
+		"project":  c.project,
+		"zone":     c.zone,
+		"instance": c.instance,
+	})
+	return gensupport.SendRequest(c.ctx_, c.s.client, req)
+}
+
+// Do executes the "compute.instances.performMaintenance" call.
+// Exactly one of *Operation or error will be non-nil. Any non-2xx
+// status code is an error. Response headers are in either
+// *Operation.ServerResponse.Header or (if a response was returned at
+// all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified
+// to check whether the returned error was because
+// http.StatusNotModified was returned.
+func (c *InstancesPerformMaintenanceCall) Do(opts ...googleapi.CallOption) (*Operation, error) {
+	gensupport.SetOptions(c.urlParams_, opts...)
+	res, err := c.doRequest("json")
+	if res != nil && res.StatusCode == http.StatusNotModified {
+		if res.Body != nil {
+			res.Body.Close()
+		}
+		return nil, gensupport.WrapError(&googleapi.Error{
+			Code:   res.StatusCode,
+			Header: res.Header,
+		})
+	}
+	if err != nil {
+		return nil, err
+	}
+	defer googleapi.CloseBody(res)
+	if err := googleapi.CheckResponse(res); err != nil {
+		return nil, gensupport.WrapError(err)
+	}
+	ret := &Operation{
+		ServerResponse: googleapi.ServerResponse{
+			Header:         res.Header,
+			HTTPStatusCode: res.StatusCode,
+		},
+	}
+	target := &ret
+	if err := gensupport.DecodeResponse(target, res); err != nil {
+		return nil, err
+	}
+	return ret, nil
+	// {
+	//   "description": "Perform a manual maintenance on the instance.",
+	//   "flatPath": "projects/{project}/zones/{zone}/instances/{instance}/performMaintenance",
+	//   "httpMethod": "POST",
+	//   "id": "compute.instances.performMaintenance",
+	//   "parameterOrder": [
+	//     "project",
+	//     "zone",
+	//     "instance"
+	//   ],
+	//   "parameters": {
+	//     "instance": {
+	//       "description": "Name of the instance scoping this request.",
+	//       "location": "path",
+	//       "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+	//       "required": true,
+	//       "type": "string"
+	//     },
+	//     "project": {
+	//       "description": "Project ID for this request.",
+	//       "location": "path",
+	//       "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+	//       "required": true,
+	//       "type": "string"
+	//     },
+	//     "requestId": {
+	//       "description": "An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).",
+	//       "location": "query",
+	//       "type": "string"
+	//     },
+	//     "zone": {
+	//       "description": "The name of the zone for this request.",
+	//       "location": "path",
+	//       "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
+	//       "required": true,
+	//       "type": "string"
+	//     }
+	//   },
+	//   "path": "projects/{project}/zones/{zone}/instances/{instance}/performMaintenance",
+	//   "response": {
+	//     "$ref": "Operation"
+	//   },
+	//   "scopes": [
+	//     "https://www.googleapis.com/auth/cloud-platform",
+	//     "https://www.googleapis.com/auth/compute"
+	//   ]
+	// }
+
+}
+
 // method id "compute.instances.removeResourcePolicies":
 
 type InstancesRemoveResourcePoliciesCall struct {
@@ -110163,6 +110653,14 @@ func (c *InstancesSimulateMaintenanceEventCall) RequestId(requestId string) *Ins
 	return c
 }
 
+// WithExtendedNotifications sets the optional parameter
+// "withExtendedNotifications": Determines whether the customers receive
+// notifications before migration. Only applicable to SF vms.
+func (c *InstancesSimulateMaintenanceEventCall) WithExtendedNotifications(withExtendedNotifications bool) *InstancesSimulateMaintenanceEventCall {
+	c.urlParams_.Set("withExtendedNotifications", fmt.Sprint(withExtendedNotifications))
+	return c
+}
+
 // Fields allows partial responses to be retrieved. See
 // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse
 // for more information.
@@ -110280,6 +110778,11 @@ func (c *InstancesSimulateMaintenanceEventCall) Do(opts ...googleapi.CallOption)
 	//       "location": "query",
 	//       "type": "string"
 	//     },
+	//     "withExtendedNotifications": {
+	//       "description": "Determines whether the customers receive notifications before migration. Only applicable to SF vms.",
+	//       "location": "query",
+	//       "type": "boolean"
+	//     },
 	//     "zone": {
 	//       "description": "The name of the zone for this request.",
 	//       "location": "path",
@@ -110699,9 +111202,11 @@ func (r *InstancesService) Stop(project string, zone string, instance string) *I
 	return c
 }
 
-// DiscardLocalSsd sets the optional parameter "discardLocalSsd": If
-// true, discard the contents of any attached localSSD partitions.
-// Default value is false.
+// DiscardLocalSsd sets the optional parameter "discardLocalSsd": This
+// property is required if the instance has any attached Local SSD
+// disks. If false, Local SSD data will be preserved when the instance
+// is suspended. If true, the contents of any attached Local SSD disks
+// will be discarded.
 func (c *InstancesStopCall) DiscardLocalSsd(discardLocalSsd bool) *InstancesStopCall {
 	c.urlParams_.Set("discardLocalSsd", fmt.Sprint(discardLocalSsd))
 	return c
@@ -110822,7 +111327,7 @@ func (c *InstancesStopCall) Do(opts ...googleapi.CallOption) (*Operation, error)
 	//   ],
 	//   "parameters": {
 	//     "discardLocalSsd": {
-	//       "description": "If true, discard the contents of any attached localSSD partitions. Default value is false.",
+	//       "description": "This property is required if the instance has any attached Local SSD disks. If false, Local SSD data will be preserved when the instance is suspended. If true, the contents of any attached Local SSD disks will be discarded.",
 	//       "location": "query",
 	//       "type": "boolean"
 	//     },
@@ -110897,9 +111402,11 @@ func (r *InstancesService) Suspend(project string, zone string, instance string)
 	return c
 }
 
-// DiscardLocalSsd sets the optional parameter "discardLocalSsd": If
-// true, discard the contents of any attached localSSD partitions.
-// Default value is false.
+// DiscardLocalSsd sets the optional parameter "discardLocalSsd": This
+// property is required if the instance has any attached Local SSD
+// disks. If false, Local SSD data will be preserved when the instance
+// is suspended. If true, the contents of any attached Local SSD disks
+// will be discarded.
 func (c *InstancesSuspendCall) DiscardLocalSsd(discardLocalSsd bool) *InstancesSuspendCall {
 	c.urlParams_.Set("discardLocalSsd", fmt.Sprint(discardLocalSsd))
 	return c
@@ -111020,7 +111527,7 @@ func (c *InstancesSuspendCall) Do(opts ...googleapi.CallOption) (*Operation, err
 	//   ],
 	//   "parameters": {
 	//     "discardLocalSsd": {
-	//       "description": "If true, discard the contents of any attached localSSD partitions. Default value is false.",
+	//       "description": "This property is required if the instance has any attached Local SSD disks. If false, Local SSD data will be preserved when the instance is suspended. If true, the contents of any attached Local SSD disks will be discarded.",
 	//       "location": "query",
 	//       "type": "boolean"
 	//     },
@@ -154556,9 +155063,8 @@ type RegionInstanceGroupManagersListManagedInstancesCall struct {
 // group and instances that are scheduled to be created. The list
 // includes any current actions that the group has scheduled for its
 // instances. The orderBy query parameter is not supported. The
-// `pageToken` query parameter is supported only in the alpha and beta
-// API and only if the group's `listManagedInstancesResults` field is
-// set to `PAGINATED`.
+// `pageToken` query parameter is supported only if the group's
+// `listManagedInstancesResults` field is set to `PAGINATED`.
 //
 // - instanceGroupManager: The name of the managed instance group.
 // - project: Project ID for this request.
@@ -154743,7 +155249,7 @@ func (c *RegionInstanceGroupManagersListManagedInstancesCall) Do(opts ...googlea
 	}
 	return ret, nil
 	// {
-	//   "description": "Lists the instances in the managed instance group and instances that are scheduled to be created. The list includes any current actions that the group has scheduled for its instances. The orderBy query parameter is not supported. The `pageToken` query parameter is supported only in the alpha and beta API and only if the group's `listManagedInstancesResults` field is set to `PAGINATED`.",
+	//   "description": "Lists the instances in the managed instance group and instances that are scheduled to be created. The list includes any current actions that the group has scheduled for its instances. The orderBy query parameter is not supported. The `pageToken` query parameter is supported only if the group's `listManagedInstancesResults` field is set to `PAGINATED`.",
 	//   "flatPath": "projects/{project}/regions/{region}/instanceGroupManagers/{instanceGroupManager}/listManagedInstances",
 	//   "httpMethod": "POST",
 	//   "id": "compute.regionInstanceGroupManagers.listManagedInstances",
@@ -173203,6 +173709,298 @@ func (c *RegionUrlMapsValidateCall) Do(opts ...googleapi.CallOption) (*UrlMapsVa
 
 }
 
+// method id "compute.regionZones.list":
+
+type RegionZonesListCall struct {
+	s            *Service
+	project      string
+	region       string
+	urlParams_   gensupport.URLParams
+	ifNoneMatch_ string
+	ctx_         context.Context
+	header_      http.Header
+}
+
+// List: Retrieves the list of Zone resources under the specific region
+// available to the specified project.
+//
+// - project: Project ID for this request.
+// - region: Region for this request.
+func (r *RegionZonesService) List(project string, region string) *RegionZonesListCall {
+	c := &RegionZonesListCall{s: r.s, urlParams_: make(gensupport.URLParams)}
+	c.project = project
+	c.region = region
+	return c
+}
+
+// Filter sets the optional parameter "filter": A filter expression that
+// filters resources listed in the response. Most Compute resources
+// support two types of filter expressions: expressions that support
+// regular expressions and expressions that follow API improvement
+// proposal AIP-160. These two types of filter expressions cannot be
+// mixed in one request. If you want to use AIP-160, your expression
+// must specify the field name, an operator, and the value that you want
+// to use for filtering. The value must be a string, a number, or a
+// boolean. The operator must be either `=`, `!=`, `>`, `<`, `<=`, `>=`
+// or `:`. For example, if you are filtering Compute Engine instances,
+// you can exclude instances named `example-instance` by specifying
+// `name != example-instance`. The `:*` comparison can be used to test
+// whether a key has been defined. For example, to find all objects with
+// `owner` label use: ``` labels.owner:* ``` You can also filter nested
+// fields. For example, you could specify `scheduling.automaticRestart =
+// false` to include instances only if they are not scheduled for
+// automatic restarts. You can use filtering on nested fields to filter
+// based on resource labels. To filter on multiple expressions, provide
+// each separate expression within parentheses. For example: ```
+// (scheduling.automaticRestart = true) (cpuPlatform = "Intel Skylake")
+// ``` By default, each expression is an `AND` expression. However, you
+// can include `AND` and `OR` expressions explicitly. For example: ```
+// (cpuPlatform = "Intel Skylake") OR (cpuPlatform = "Intel Broadwell")
+// AND (scheduling.automaticRestart = true) ``` If you want to use a
+// regular expression, use the `eq` (equal) or `ne` (not equal) operator
+// against a single un-parenthesized expression with or without quotes
+// or against multiple parenthesized expressions. Examples: `fieldname
+// eq unquoted literal` `fieldname eq 'single quoted literal'`
+// `fieldname eq "double quoted literal" `(fieldname1 eq literal)
+// (fieldname2 ne "literal")` The literal value is interpreted as a
+// regular expression using Google RE2 library syntax. The literal value
+// must match the entire field. For example, to filter for instances
+// that do not end with name "instance", you would use `name ne
+// .*instance`. You cannot combine constraints on multiple fields using
+// regular expressions.
+func (c *RegionZonesListCall) Filter(filter string) *RegionZonesListCall {
+	c.urlParams_.Set("filter", filter)
+	return c
+}
+
+// MaxResults sets the optional parameter "maxResults": The maximum
+// number of results per page that should be returned. If the number of
+// available results is larger than `maxResults`, Compute Engine returns
+// a `nextPageToken` that can be used to get the next page of results in
+// subsequent list requests. Acceptable values are `0` to `500`,
+// inclusive. (Default: `500`)
+func (c *RegionZonesListCall) MaxResults(maxResults int64) *RegionZonesListCall {
+	c.urlParams_.Set("maxResults", fmt.Sprint(maxResults))
+	return c
+}
+
+// OrderBy sets the optional parameter "orderBy": Sorts list results by
+// a certain order. By default, results are returned in alphanumerical
+// order based on the resource name. You can also sort results in
+// descending order based on the creation timestamp using
+// `orderBy="creationTimestamp desc". This sorts results based on the
+// `creationTimestamp` field in reverse chronological order (newest
+// result first). Use this to sort resources like operations so that the
+// newest operation is returned first. Currently, only sorting by `name`
+// or `creationTimestamp desc` is supported.
+func (c *RegionZonesListCall) OrderBy(orderBy string) *RegionZonesListCall {
+	c.urlParams_.Set("orderBy", orderBy)
+	return c
+}
+
+// PageToken sets the optional parameter "pageToken": Specifies a page
+// token to use. Set `pageToken` to the `nextPageToken` returned by a
+// previous list request to get the next page of results.
+func (c *RegionZonesListCall) PageToken(pageToken string) *RegionZonesListCall {
+	c.urlParams_.Set("pageToken", pageToken)
+	return c
+}
+
+// ReturnPartialSuccess sets the optional parameter
+// "returnPartialSuccess": Opt-in for partial success behavior which
+// provides partial results in case of failure. The default value is
+// false.
+func (c *RegionZonesListCall) ReturnPartialSuccess(returnPartialSuccess bool) *RegionZonesListCall {
+	c.urlParams_.Set("returnPartialSuccess", fmt.Sprint(returnPartialSuccess))
+	return c
+}
+
+// Fields allows partial responses to be retrieved. See
+// https://developers.google.com/gdata/docs/2.0/basics#PartialResponse
+// for more information.
+func (c *RegionZonesListCall) Fields(s ...googleapi.Field) *RegionZonesListCall {
+	c.urlParams_.Set("fields", googleapi.CombineFields(s))
+	return c
+}
+
+// IfNoneMatch sets the optional parameter which makes the operation
+// fail if the object's ETag matches the given value. This is useful for
+// getting updates only after the object has changed since the last
+// request. Use googleapi.IsNotModified to check whether the response
+// error from Do is the result of In-None-Match.
+func (c *RegionZonesListCall) IfNoneMatch(entityTag string) *RegionZonesListCall {
+	c.ifNoneMatch_ = entityTag
+	return c
+}
+
+// Context sets the context to be used in this call's Do method. Any
+// pending HTTP request will be aborted if the provided context is
+// canceled.
+func (c *RegionZonesListCall) Context(ctx context.Context) *RegionZonesListCall {
+	c.ctx_ = ctx
+	return c
+}
+
+// Header returns an http.Header that can be modified by the caller to
+// add HTTP headers to the request.
+func (c *RegionZonesListCall) Header() http.Header {
+	if c.header_ == nil {
+		c.header_ = make(http.Header)
+	}
+	return c.header_
+}
+
+func (c *RegionZonesListCall) doRequest(alt string) (*http.Response, error) {
+	reqHeaders := make(http.Header)
+	reqHeaders.Set("x-goog-api-client", "gl-go/"+gensupport.GoVersion()+" gdcl/"+internal.Version)
+	for k, v := range c.header_ {
+		reqHeaders[k] = v
+	}
+	reqHeaders.Set("User-Agent", c.s.userAgent())
+	if c.ifNoneMatch_ != "" {
+		reqHeaders.Set("If-None-Match", c.ifNoneMatch_)
+	}
+	var body io.Reader = nil
+	c.urlParams_.Set("alt", alt)
+	c.urlParams_.Set("prettyPrint", "false")
+	urls := googleapi.ResolveRelative(c.s.BasePath, "projects/{project}/regions/{region}/zones")
+	urls += "?" + c.urlParams_.Encode()
+	req, err := http.NewRequest("GET", urls, body)
+	if err != nil {
+		return nil, err
+	}
+	req.Header = reqHeaders
+	googleapi.Expand(req.URL, map[string]string{
+		"project": c.project,
+		"region":  c.region,
+	})
+	return gensupport.SendRequest(c.ctx_, c.s.client, req)
+}
+
+// Do executes the "compute.regionZones.list" call.
+// Exactly one of *ZoneList or error will be non-nil. Any non-2xx status
+// code is an error. Response headers are in either
+// *ZoneList.ServerResponse.Header or (if a response was returned at
+// all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified
+// to check whether the returned error was because
+// http.StatusNotModified was returned.
+func (c *RegionZonesListCall) Do(opts ...googleapi.CallOption) (*ZoneList, error) {
+	gensupport.SetOptions(c.urlParams_, opts...)
+	res, err := c.doRequest("json")
+	if res != nil && res.StatusCode == http.StatusNotModified {
+		if res.Body != nil {
+			res.Body.Close()
+		}
+		return nil, gensupport.WrapError(&googleapi.Error{
+			Code:   res.StatusCode,
+			Header: res.Header,
+		})
+	}
+	if err != nil {
+		return nil, err
+	}
+	defer googleapi.CloseBody(res)
+	if err := googleapi.CheckResponse(res); err != nil {
+		return nil, gensupport.WrapError(err)
+	}
+	ret := &ZoneList{
+		ServerResponse: googleapi.ServerResponse{
+			Header:         res.Header,
+			HTTPStatusCode: res.StatusCode,
+		},
+	}
+	target := &ret
+	if err := gensupport.DecodeResponse(target, res); err != nil {
+		return nil, err
+	}
+	return ret, nil
+	// {
+	//   "description": "Retrieves the list of Zone resources under the specific region available to the specified project.",
+	//   "flatPath": "projects/{project}/regions/{region}/zones",
+	//   "httpMethod": "GET",
+	//   "id": "compute.regionZones.list",
+	//   "parameterOrder": [
+	//     "project",
+	//     "region"
+	//   ],
+	//   "parameters": {
+	//     "filter": {
+	//       "description": "A filter expression that filters resources listed in the response. Most Compute resources support two types of filter expressions: expressions that support regular expressions and expressions that follow API improvement proposal AIP-160. These two types of filter expressions cannot be mixed in one request. If you want to use AIP-160, your expression must specify the field name, an operator, and the value that you want to use for filtering. The value must be a string, a number, or a boolean. The operator must be either `=`, `!=`, `\u003e`, `\u003c`, `\u003c=`, `\u003e=` or `:`. For example, if you are filtering Compute Engine instances, you can exclude instances named `example-instance` by specifying `name != example-instance`. The `:*` comparison can be used to test whether a key has been defined. For example, to find all objects with `owner` label use: ``` labels.owner:* ``` You can also filter nested fields. For example, you could specify `scheduling.automaticRestart = false` to include instances only if they are not scheduled for automatic restarts. You can use filtering on nested fields to filter based on resource labels. To filter on multiple expressions, provide each separate expression within parentheses. For example: ``` (scheduling.automaticRestart = true) (cpuPlatform = \"Intel Skylake\") ``` By default, each expression is an `AND` expression. However, you can include `AND` and `OR` expressions explicitly. For example: ``` (cpuPlatform = \"Intel Skylake\") OR (cpuPlatform = \"Intel Broadwell\") AND (scheduling.automaticRestart = true) ``` If you want to use a regular expression, use the `eq` (equal) or `ne` (not equal) operator against a single un-parenthesized expression with or without quotes or against multiple parenthesized expressions. Examples: `fieldname eq unquoted literal` `fieldname eq 'single quoted literal'` `fieldname eq \"double quoted literal\"` `(fieldname1 eq literal) (fieldname2 ne \"literal\")` The literal value is interpreted as a regular expression using Google RE2 library syntax. The literal value must match the entire field. For example, to filter for instances that do not end with name \"instance\", you would use `name ne .*instance`. You cannot combine constraints on multiple fields using regular expressions.",
+	//       "location": "query",
+	//       "type": "string"
+	//     },
+	//     "maxResults": {
+	//       "default": "500",
+	//       "description": "The maximum number of results per page that should be returned. If the number of available results is larger than `maxResults`, Compute Engine returns a `nextPageToken` that can be used to get the next page of results in subsequent list requests. Acceptable values are `0` to `500`, inclusive. (Default: `500`)",
+	//       "format": "uint32",
+	//       "location": "query",
+	//       "minimum": "0",
+	//       "type": "integer"
+	//     },
+	//     "orderBy": {
+	//       "description": "Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based on the creation timestamp using `orderBy=\"creationTimestamp desc\"`. This sorts results based on the `creationTimestamp` field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first. Currently, only sorting by `name` or `creationTimestamp desc` is supported.",
+	//       "location": "query",
+	//       "type": "string"
+	//     },
+	//     "pageToken": {
+	//       "description": "Specifies a page token to use. Set `pageToken` to the `nextPageToken` returned by a previous list request to get the next page of results.",
+	//       "location": "query",
+	//       "type": "string"
+	//     },
+	//     "project": {
+	//       "description": "Project ID for this request.",
+	//       "location": "path",
+	//       "pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+	//       "required": true,
+	//       "type": "string"
+	//     },
+	//     "region": {
+	//       "description": "Region for this request.",
+	//       "location": "path",
+	//       "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
+	//       "required": true,
+	//       "type": "string"
+	//     },
+	//     "returnPartialSuccess": {
+	//       "description": "Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.",
+	//       "location": "query",
+	//       "type": "boolean"
+	//     }
+	//   },
+	//   "path": "projects/{project}/regions/{region}/zones",
+	//   "response": {
+	//     "$ref": "ZoneList"
+	//   },
+	//   "scopes": [
+	//     "https://www.googleapis.com/auth/cloud-platform",
+	//     "https://www.googleapis.com/auth/compute",
+	//     "https://www.googleapis.com/auth/compute.readonly"
+	//   ]
+	// }
+
+}
+
+// Pages invokes f for each page of results.
+// A non-nil error returned from f will halt the iteration.
+// The provided context supersedes any context provided to the Context method.
+func (c *RegionZonesListCall) Pages(ctx context.Context, f func(*ZoneList) error) error {
+	c.ctx_ = ctx
+	defer c.PageToken(c.urlParams_.Get("pageToken")) // reset paging to original point
+	for {
+		x, err := c.Do()
+		if err != nil {
+			return err
+		}
+		if err := f(x); err != nil {
+			return err
+		}
+		if x.NextPageToken == "" {
+			return nil
+		}
+		c.PageToken(x.NextPageToken)
+	}
+}
+
 // method id "compute.regions.get":
 
 type RegionsGetCall struct {
@@ -201589,8 +202387,8 @@ type TargetSslProxiesSetSslPolicyCall struct {
 
 // SetSslPolicy: Sets the SSL policy for TargetSslProxy. The SSL policy
 // specifies the server-side support for SSL features. This affects
-// connections between clients and the SSL proxy load balancer. They do
-// not affect the connection between the load balancer and the backends.
+// connections between clients and the load balancer. They do not affect
+// the connection between the load balancer and the backends.
 //
 //   - project: Project ID for this request.
 //   - targetSslProxy: Name of the TargetSslProxy resource whose SSL
@@ -201712,7 +202510,7 @@ func (c *TargetSslProxiesSetSslPolicyCall) Do(opts ...googleapi.CallOption) (*Op
 	}
 	return ret, nil
 	// {
-	//   "description": "Sets the SSL policy for TargetSslProxy. The SSL policy specifies the server-side support for SSL features. This affects connections between clients and the SSL proxy load balancer. They do not affect the connection between the load balancer and the backends.",
+	//   "description": "Sets the SSL policy for TargetSslProxy. The SSL policy specifies the server-side support for SSL features. This affects connections between clients and the load balancer. They do not affect the connection between the load balancer and the backends.",
 	//   "flatPath": "projects/{project}/global/targetSslProxies/{targetSslProxy}/setSslPolicy",
 	//   "httpMethod": "POST",
 	//   "id": "compute.targetSslProxies.setSslPolicy",
diff --git a/vendor/google.golang.org/api/internal/settings.go b/vendor/google.golang.org/api/internal/settings.go
index 3356fa97b8f..285e6e04d39 100644
--- a/vendor/google.golang.org/api/internal/settings.go
+++ b/vendor/google.golang.org/api/internal/settings.go
@@ -27,6 +27,7 @@ const (
 type DialSettings struct {
 	Endpoint                      string
 	DefaultEndpoint               string
+	DefaultEndpointTemplate       string
 	DefaultMTLSEndpoint           string
 	Scopes                        []string
 	DefaultScopes                 []string
diff --git a/vendor/google.golang.org/api/internal/version.go b/vendor/google.golang.org/api/internal/version.go
index a130609e5d5..88c15fa93e3 100644
--- a/vendor/google.golang.org/api/internal/version.go
+++ b/vendor/google.golang.org/api/internal/version.go
@@ -5,4 +5,4 @@
 package internal
 
 // Version is the current tagged release of the library.
-const Version = "0.153.0"
+const Version = "0.157.0"
diff --git a/vendor/google.golang.org/api/option/internaloption/internaloption.go b/vendor/google.golang.org/api/option/internaloption/internaloption.go
index 3fdee095c1b..e6b5c102555 100644
--- a/vendor/google.golang.org/api/option/internaloption/internaloption.go
+++ b/vendor/google.golang.org/api/option/internaloption/internaloption.go
@@ -22,10 +22,32 @@ func (o defaultEndpointOption) Apply(settings *internal.DialSettings) {
 // It should only be used internally by generated clients.
 //
 // This is similar to WithEndpoint, but allows us to determine whether the user has overridden the default endpoint.
+//
+// Deprecated: WithDefaultEndpoint does not support setting the universe domain.
+// Use WithDefaultEndpointTemplate and WithDefaultUniverseDomain to compose the
+// default endpoint instead.
 func WithDefaultEndpoint(url string) option.ClientOption {
 	return defaultEndpointOption(url)
 }
 
+type defaultEndpointTemplateOption string
+
+func (o defaultEndpointTemplateOption) Apply(settings *internal.DialSettings) {
+	settings.DefaultEndpointTemplate = string(o)
+}
+
+// WithDefaultEndpointTemplate provides a template for creating the endpoint
+// using a universe domain. See also WithDefaultUniverseDomain and
+// option.WithUniverseDomain. The placeholder UNIVERSE_DOMAIN should be used
+// instead of a concrete universe domain such as "googleapis.com".
+//
+// Example: WithDefaultEndpointTemplate("https://logging.UNIVERSE_DOMAIN/")
+//
+// It should only be used internally by generated clients.
+func WithDefaultEndpointTemplate(url string) option.ClientOption {
+	return defaultEndpointTemplateOption(url)
+}
+
 type defaultMTLSEndpointOption string
 
 func (o defaultMTLSEndpointOption) Apply(settings *internal.DialSettings) {
@@ -144,6 +166,11 @@ func (w withDefaultUniverseDomain) Apply(o *internal.DialSettings) {
 
 // EnableJwtWithScope returns a ClientOption that specifies if scope can be used
 // with self-signed JWT.
+//
+// EnableJwtWithScope is ignored when option.WithUniverseDomain is set
+// to a value other than the Google Default Universe (GDU) of "googleapis.com".
+// For non-GDU domains, token exchange is impossible and services must
+// support self-signed JWTs with scopes.
 func EnableJwtWithScope() option.ClientOption {
 	return enableJwtWithScope(true)
 }
diff --git a/vendor/google.golang.org/api/transport/http/dial.go b/vendor/google.golang.org/api/transport/http/dial.go
index a07362ffdbd..7e322a17c68 100644
--- a/vendor/google.golang.org/api/transport/http/dial.go
+++ b/vendor/google.golang.org/api/transport/http/dial.go
@@ -16,6 +16,7 @@ import (
 	"time"
 
 	"go.opencensus.io/plugin/ochttp"
+	"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp"
 	"golang.org/x/net/http2"
 	"golang.org/x/oauth2"
 	"google.golang.org/api/googleapi/transport"
@@ -69,6 +70,9 @@ func newTransport(ctx context.Context, base http.RoundTripper, settings *interna
 		requestReason: settings.RequestReason,
 	}
 	var trans http.RoundTripper = paramTransport
+	// Give OpenTelemetry precedence over OpenCensus in case user configuration
+	// causes both to write the same header (`X-Cloud-Trace-Context`).
+	trans = addOpenTelemetryTransport(trans, settings)
 	trans = addOCTransport(trans, settings)
 	switch {
 	case settings.NoAuth:
@@ -203,6 +207,13 @@ func fallbackBaseTransport() *http.Transport {
 	}
 }
 
+func addOpenTelemetryTransport(trans http.RoundTripper, settings *internal.DialSettings) http.RoundTripper {
+	if settings.TelemetryDisabled {
+		return trans
+	}
+	return otelhttp.NewTransport(trans)
+}
+
 func addOCTransport(trans http.RoundTripper, settings *internal.DialSettings) http.RoundTripper {
 	if settings.TelemetryDisabled {
 		return trans
diff --git a/vendor/google.golang.org/appengine/.travis.yml b/vendor/google.golang.org/appengine/.travis.yml
deleted file mode 100644
index 6d03f4d36e8..00000000000
--- a/vendor/google.golang.org/appengine/.travis.yml
+++ /dev/null
@@ -1,18 +0,0 @@
-language: go
-
-go_import_path: google.golang.org/appengine
-
-install:
-  - ./travis_install.sh
-
-script:
-  - ./travis_test.sh
-
-matrix:
-  include:
-    - go: 1.9.x
-      env: GOAPP=true
-    - go: 1.10.x
-      env: GOAPP=false
-    - go: 1.11.x
-      env: GO111MODULE=on
diff --git a/vendor/google.golang.org/appengine/CONTRIBUTING.md b/vendor/google.golang.org/appengine/CONTRIBUTING.md
index ffc29852085..289693613cc 100644
--- a/vendor/google.golang.org/appengine/CONTRIBUTING.md
+++ b/vendor/google.golang.org/appengine/CONTRIBUTING.md
@@ -19,14 +19,12 @@
 
 ## Running system tests
 
-Download and install the [Go App Engine SDK](https://cloud.google.com/appengine/docs/go/download). Make sure the `go_appengine` dir is in your `PATH`.
-
 Set the `APPENGINE_DEV_APPSERVER` environment variable to `/path/to/go_appengine/dev_appserver.py`.
 
-Run tests with `goapp test`:
+Run tests with `go test`:
 
 ```
-goapp test -v google.golang.org/appengine/...
+go test -v google.golang.org/appengine/...
 ```
 
 ## Contributor License Agreements
diff --git a/vendor/google.golang.org/appengine/README.md b/vendor/google.golang.org/appengine/README.md
index 9fdbacd3c60..5ccddd9990d 100644
--- a/vendor/google.golang.org/appengine/README.md
+++ b/vendor/google.golang.org/appengine/README.md
@@ -1,6 +1,6 @@
 # Go App Engine packages
 
-[![Build Status](https://travis-ci.org/golang/appengine.svg)](https://travis-ci.org/golang/appengine)
+[![CI Status](https://github.com/golang/appengine/actions/workflows/ci.yml/badge.svg)](https://github.com/golang/appengine/actions/workflows/ci.yml)
 
 This repository supports the Go runtime on *App Engine standard*.
 It provides APIs for interacting with App Engine services.
@@ -51,7 +51,7 @@ code importing `appengine/datastore` will now need to import `google.golang.org/
 Most App Engine services are available with exactly the same API.
 A few APIs were cleaned up, and there are some differences:
 
-* `appengine.Context` has been replaced with the `Context` type from `golang.org/x/net/context`.
+* `appengine.Context` has been replaced with the `Context` type from `context`.
 * Logging methods that were on `appengine.Context` are now functions in `google.golang.org/appengine/log`.
 * `appengine.Timeout` has been removed. Use `context.WithTimeout` instead.
 * `appengine.Datacenter` now takes a `context.Context` argument.
@@ -72,7 +72,7 @@ A few APIs were cleaned up, and there are some differences:
 * `appengine/socket` is not required on App Engine flexible environment / Managed VMs.
   Use the standard `net` package instead.
 
-## Key Encode/Decode compatibiltiy to help with datastore library migrations
+## Key Encode/Decode compatibility to help with datastore library migrations
 
 Key compatibility updates have been added to help customers transition from google.golang.org/appengine/datastore to cloud.google.com/go/datastore.
 The `EnableKeyConversion` enables automatic conversion from a key encoded with cloud.google.com/go/datastore to google.golang.org/appengine/datastore key type.
diff --git a/vendor/google.golang.org/appengine/appengine.go b/vendor/google.golang.org/appengine/appengine.go
index 8c9697674f2..35ba9c89676 100644
--- a/vendor/google.golang.org/appengine/appengine.go
+++ b/vendor/google.golang.org/appengine/appengine.go
@@ -9,10 +9,10 @@
 package appengine // import "google.golang.org/appengine"
 
 import (
+	"context"
 	"net/http"
 
 	"github.com/golang/protobuf/proto"
-	"golang.org/x/net/context"
 
 	"google.golang.org/appengine/internal"
 )
@@ -35,18 +35,18 @@ import (
 //
 // Main is designed so that the app's main package looks like this:
 //
-//      package main
+//	package main
 //
-//      import (
-//              "google.golang.org/appengine"
+//	import (
+//	        "google.golang.org/appengine"
 //
-//              _ "myapp/package0"
-//              _ "myapp/package1"
-//      )
+//	        _ "myapp/package0"
+//	        _ "myapp/package1"
+//	)
 //
-//      func main() {
-//              appengine.Main()
-//      }
+//	func main() {
+//	        appengine.Main()
+//	}
 //
 // The "myapp/packageX" packages are expected to register HTTP handlers
 // in their init functions.
@@ -54,6 +54,9 @@ func Main() {
 	internal.Main()
 }
 
+// Middleware wraps an http handler so that it can make GAE API calls
+var Middleware func(http.Handler) http.Handler = internal.Middleware
+
 // IsDevAppServer reports whether the App Engine app is running in the
 // development App Server.
 func IsDevAppServer() bool {
diff --git a/vendor/google.golang.org/appengine/appengine_vm.go b/vendor/google.golang.org/appengine/appengine_vm.go
index f4b645aad3b..6e1d041cd95 100644
--- a/vendor/google.golang.org/appengine/appengine_vm.go
+++ b/vendor/google.golang.org/appengine/appengine_vm.go
@@ -2,19 +2,19 @@
 // Use of this source code is governed by the Apache 2.0
 // license that can be found in the LICENSE file.
 
+//go:build !appengine
 // +build !appengine
 
 package appengine
 
 import (
-	"golang.org/x/net/context"
-
-	"google.golang.org/appengine/internal"
+	"context"
 )
 
 // BackgroundContext returns a context not associated with a request.
-// This should only be used when not servicing a request.
-// This only works in App Engine "flexible environment".
+//
+// Deprecated: App Engine no longer has a special background context.
+// Just use context.Background().
 func BackgroundContext() context.Context {
-	return internal.BackgroundContext()
+	return context.Background()
 }
diff --git a/vendor/google.golang.org/appengine/identity.go b/vendor/google.golang.org/appengine/identity.go
index b8dcf8f3619..1202fc1a531 100644
--- a/vendor/google.golang.org/appengine/identity.go
+++ b/vendor/google.golang.org/appengine/identity.go
@@ -5,10 +5,9 @@
 package appengine
 
 import (
+	"context"
 	"time"
 
-	"golang.org/x/net/context"
-
 	"google.golang.org/appengine/internal"
 	pb "google.golang.org/appengine/internal/app_identity"
 	modpb "google.golang.org/appengine/internal/modules"
diff --git a/vendor/google.golang.org/appengine/internal/api.go b/vendor/google.golang.org/appengine/internal/api.go
index 721053c20a1..0569f5dd43e 100644
--- a/vendor/google.golang.org/appengine/internal/api.go
+++ b/vendor/google.golang.org/appengine/internal/api.go
@@ -2,12 +2,14 @@
 // Use of this source code is governed by the Apache 2.0
 // license that can be found in the LICENSE file.
 
+//go:build !appengine
 // +build !appengine
 
 package internal
 
 import (
 	"bytes"
+	"context"
 	"errors"
 	"fmt"
 	"io/ioutil"
@@ -24,7 +26,6 @@ import (
 	"time"
 
 	"github.com/golang/protobuf/proto"
-	netcontext "golang.org/x/net/context"
 
 	basepb "google.golang.org/appengine/internal/base"
 	logpb "google.golang.org/appengine/internal/log"
@@ -32,8 +33,7 @@ import (
 )
 
 const (
-	apiPath             = "/rpc_http"
-	defaultTicketSuffix = "/default.20150612t184001.0"
+	apiPath = "/rpc_http"
 )
 
 var (
@@ -65,21 +65,22 @@ var (
 			IdleConnTimeout:     90 * time.Second,
 		},
 	}
-
-	defaultTicketOnce     sync.Once
-	defaultTicket         string
-	backgroundContextOnce sync.Once
-	backgroundContext     netcontext.Context
 )
 
-func apiURL() *url.URL {
+func apiURL(ctx context.Context) *url.URL {
 	host, port := "appengine.googleapis.internal", "10001"
 	if h := os.Getenv("API_HOST"); h != "" {
 		host = h
 	}
+	if hostOverride := ctx.Value(apiHostOverrideKey); hostOverride != nil {
+		host = hostOverride.(string)
+	}
 	if p := os.Getenv("API_PORT"); p != "" {
 		port = p
 	}
+	if portOverride := ctx.Value(apiPortOverrideKey); portOverride != nil {
+		port = portOverride.(string)
+	}
 	return &url.URL{
 		Scheme: "http",
 		Host:   host + ":" + port,
@@ -87,82 +88,97 @@ func apiURL() *url.URL {
 	}
 }
 
-func handleHTTP(w http.ResponseWriter, r *http.Request) {
-	c := &context{
-		req:       r,
-		outHeader: w.Header(),
-		apiURL:    apiURL(),
-	}
-	r = r.WithContext(withContext(r.Context(), c))
-	c.req = r
-
-	stopFlushing := make(chan int)
+// Middleware wraps an http handler so that it can make GAE API calls
+func Middleware(next http.Handler) http.Handler {
+	return handleHTTPMiddleware(executeRequestSafelyMiddleware(next))
+}
 
-	// Patch up RemoteAddr so it looks reasonable.
-	if addr := r.Header.Get(userIPHeader); addr != "" {
-		r.RemoteAddr = addr
-	} else if addr = r.Header.Get(remoteAddrHeader); addr != "" {
-		r.RemoteAddr = addr
-	} else {
-		// Should not normally reach here, but pick a sensible default anyway.
-		r.RemoteAddr = "127.0.0.1"
-	}
-	// The address in the headers will most likely be of these forms:
-	//	123.123.123.123
-	//	2001:db8::1
-	// net/http.Request.RemoteAddr is specified to be in "IP:port" form.
-	if _, _, err := net.SplitHostPort(r.RemoteAddr); err != nil {
-		// Assume the remote address is only a host; add a default port.
-		r.RemoteAddr = net.JoinHostPort(r.RemoteAddr, "80")
-	}
+func handleHTTPMiddleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		c := &aeContext{
+			req:       r,
+			outHeader: w.Header(),
+		}
+		r = r.WithContext(withContext(r.Context(), c))
+		c.req = r
+
+		stopFlushing := make(chan int)
+
+		// Patch up RemoteAddr so it looks reasonable.
+		if addr := r.Header.Get(userIPHeader); addr != "" {
+			r.RemoteAddr = addr
+		} else if addr = r.Header.Get(remoteAddrHeader); addr != "" {
+			r.RemoteAddr = addr
+		} else {
+			// Should not normally reach here, but pick a sensible default anyway.
+			r.RemoteAddr = "127.0.0.1"
+		}
+		// The address in the headers will most likely be of these forms:
+		//	123.123.123.123
+		//	2001:db8::1
+		// net/http.Request.RemoteAddr is specified to be in "IP:port" form.
+		if _, _, err := net.SplitHostPort(r.RemoteAddr); err != nil {
+			// Assume the remote address is only a host; add a default port.
+			r.RemoteAddr = net.JoinHostPort(r.RemoteAddr, "80")
+		}
 
-	// Start goroutine responsible for flushing app logs.
-	// This is done after adding c to ctx.m (and stopped before removing it)
-	// because flushing logs requires making an API call.
-	go c.logFlusher(stopFlushing)
+		if logToLogservice() {
+			// Start goroutine responsible for flushing app logs.
+			// This is done after adding c to ctx.m (and stopped before removing it)
+			// because flushing logs requires making an API call.
+			go c.logFlusher(stopFlushing)
+		}
 
-	executeRequestSafely(c, r)
-	c.outHeader = nil // make sure header changes aren't respected any more
+		next.ServeHTTP(c, r)
+		c.outHeader = nil // make sure header changes aren't respected any more
 
-	stopFlushing <- 1 // any logging beyond this point will be dropped
+		flushed := make(chan struct{})
+		if logToLogservice() {
+			stopFlushing <- 1 // any logging beyond this point will be dropped
 
-	// Flush any pending logs asynchronously.
-	c.pendingLogs.Lock()
-	flushes := c.pendingLogs.flushes
-	if len(c.pendingLogs.lines) > 0 {
-		flushes++
-	}
-	c.pendingLogs.Unlock()
-	flushed := make(chan struct{})
-	go func() {
-		defer close(flushed)
-		// Force a log flush, because with very short requests we
-		// may not ever flush logs.
-		c.flushLog(true)
-	}()
-	w.Header().Set(logFlushHeader, strconv.Itoa(flushes))
+			// Flush any pending logs asynchronously.
+			c.pendingLogs.Lock()
+			flushes := c.pendingLogs.flushes
+			if len(c.pendingLogs.lines) > 0 {
+				flushes++
+			}
+			c.pendingLogs.Unlock()
+			go func() {
+				defer close(flushed)
+				// Force a log flush, because with very short requests we
+				// may not ever flush logs.
+				c.flushLog(true)
+			}()
+			w.Header().Set(logFlushHeader, strconv.Itoa(flushes))
+		}
 
-	// Avoid nil Write call if c.Write is never called.
-	if c.outCode != 0 {
-		w.WriteHeader(c.outCode)
-	}
-	if c.outBody != nil {
-		w.Write(c.outBody)
-	}
-	// Wait for the last flush to complete before returning,
-	// otherwise the security ticket will not be valid.
-	<-flushed
+		// Avoid nil Write call if c.Write is never called.
+		if c.outCode != 0 {
+			w.WriteHeader(c.outCode)
+		}
+		if c.outBody != nil {
+			w.Write(c.outBody)
+		}
+		if logToLogservice() {
+			// Wait for the last flush to complete before returning,
+			// otherwise the security ticket will not be valid.
+			<-flushed
+		}
+	})
 }
 
-func executeRequestSafely(c *context, r *http.Request) {
-	defer func() {
-		if x := recover(); x != nil {
-			logf(c, 4, "%s", renderPanic(x)) // 4 == critical
-			c.outCode = 500
-		}
-	}()
+func executeRequestSafelyMiddleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		defer func() {
+			if x := recover(); x != nil {
+				c := w.(*aeContext)
+				logf(c, 4, "%s", renderPanic(x)) // 4 == critical
+				c.outCode = 500
+			}
+		}()
 
-	http.DefaultServeMux.ServeHTTP(c, r)
+		next.ServeHTTP(w, r)
+	})
 }
 
 func renderPanic(x interface{}) string {
@@ -204,9 +220,9 @@ func renderPanic(x interface{}) string {
 	return string(buf)
 }
 
-// context represents the context of an in-flight HTTP request.
+// aeContext represents the aeContext of an in-flight HTTP request.
 // It implements the appengine.Context and http.ResponseWriter interfaces.
-type context struct {
+type aeContext struct {
 	req *http.Request
 
 	outCode   int
@@ -218,8 +234,6 @@ type context struct {
 		lines   []*logpb.UserAppLogLine
 		flushes int
 	}
-
-	apiURL *url.URL
 }
 
 var contextKey = "holds a *context"
@@ -227,8 +241,8 @@ var contextKey = "holds a *context"
 // jointContext joins two contexts in a superficial way.
 // It takes values and timeouts from a base context, and only values from another context.
 type jointContext struct {
-	base       netcontext.Context
-	valuesOnly netcontext.Context
+	base       context.Context
+	valuesOnly context.Context
 }
 
 func (c jointContext) Deadline() (time.Time, bool) {
@@ -252,94 +266,54 @@ func (c jointContext) Value(key interface{}) interface{} {
 
 // fromContext returns the App Engine context or nil if ctx is not
 // derived from an App Engine context.
-func fromContext(ctx netcontext.Context) *context {
-	c, _ := ctx.Value(&contextKey).(*context)
+func fromContext(ctx context.Context) *aeContext {
+	c, _ := ctx.Value(&contextKey).(*aeContext)
 	return c
 }
 
-func withContext(parent netcontext.Context, c *context) netcontext.Context {
-	ctx := netcontext.WithValue(parent, &contextKey, c)
+func withContext(parent context.Context, c *aeContext) context.Context {
+	ctx := context.WithValue(parent, &contextKey, c)
 	if ns := c.req.Header.Get(curNamespaceHeader); ns != "" {
 		ctx = withNamespace(ctx, ns)
 	}
 	return ctx
 }
 
-func toContext(c *context) netcontext.Context {
-	return withContext(netcontext.Background(), c)
+func toContext(c *aeContext) context.Context {
+	return withContext(context.Background(), c)
 }
 
-func IncomingHeaders(ctx netcontext.Context) http.Header {
+func IncomingHeaders(ctx context.Context) http.Header {
 	if c := fromContext(ctx); c != nil {
 		return c.req.Header
 	}
 	return nil
 }
 
-func ReqContext(req *http.Request) netcontext.Context {
+func ReqContext(req *http.Request) context.Context {
 	return req.Context()
 }
 
-func WithContext(parent netcontext.Context, req *http.Request) netcontext.Context {
+func WithContext(parent context.Context, req *http.Request) context.Context {
 	return jointContext{
 		base:       parent,
 		valuesOnly: req.Context(),
 	}
 }
 
-// DefaultTicket returns a ticket used for background context or dev_appserver.
-func DefaultTicket() string {
-	defaultTicketOnce.Do(func() {
-		if IsDevAppServer() {
-			defaultTicket = "testapp" + defaultTicketSuffix
-			return
-		}
-		appID := partitionlessAppID()
-		escAppID := strings.Replace(strings.Replace(appID, ":", "_", -1), ".", "_", -1)
-		majVersion := VersionID(nil)
-		if i := strings.Index(majVersion, "."); i > 0 {
-			majVersion = majVersion[:i]
-		}
-		defaultTicket = fmt.Sprintf("%s/%s.%s.%s", escAppID, ModuleName(nil), majVersion, InstanceID())
-	})
-	return defaultTicket
-}
-
-func BackgroundContext() netcontext.Context {
-	backgroundContextOnce.Do(func() {
-		// Compute background security ticket.
-		ticket := DefaultTicket()
-
-		c := &context{
-			req: &http.Request{
-				Header: http.Header{
-					ticketHeader: []string{ticket},
-				},
-			},
-			apiURL: apiURL(),
-		}
-		backgroundContext = toContext(c)
-
-		// TODO(dsymonds): Wire up the shutdown handler to do a final flush.
-		go c.logFlusher(make(chan int))
-	})
-
-	return backgroundContext
-}
-
 // RegisterTestRequest registers the HTTP request req for testing, such that
-// any API calls are sent to the provided URL. It returns a closure to delete
-// the registration.
+// any API calls are sent to the provided URL.
 // It should only be used by aetest package.
-func RegisterTestRequest(req *http.Request, apiURL *url.URL, decorate func(netcontext.Context) netcontext.Context) (*http.Request, func()) {
-	c := &context{
-		req:    req,
-		apiURL: apiURL,
-	}
-	ctx := withContext(decorate(req.Context()), c)
-	req = req.WithContext(ctx)
-	c.req = req
-	return req, func() {}
+func RegisterTestRequest(req *http.Request, apiURL *url.URL, appID string) *http.Request {
+	ctx := req.Context()
+	ctx = withAPIHostOverride(ctx, apiURL.Hostname())
+	ctx = withAPIPortOverride(ctx, apiURL.Port())
+	ctx = WithAppIDOverride(ctx, appID)
+
+	// use the unregistered request as a placeholder so that withContext can read the headers
+	c := &aeContext{req: req}
+	c.req = req.WithContext(withContext(ctx, c))
+	return c.req
 }
 
 var errTimeout = &CallError{
@@ -348,7 +322,7 @@ var errTimeout = &CallError{
 	Timeout: true,
 }
 
-func (c *context) Header() http.Header { return c.outHeader }
+func (c *aeContext) Header() http.Header { return c.outHeader }
 
 // Copied from $GOROOT/src/pkg/net/http/transfer.go. Some response status
 // codes do not permit a response body (nor response entity headers such as
@@ -365,7 +339,7 @@ func bodyAllowedForStatus(status int) bool {
 	return true
 }
 
-func (c *context) Write(b []byte) (int, error) {
+func (c *aeContext) Write(b []byte) (int, error) {
 	if c.outCode == 0 {
 		c.WriteHeader(http.StatusOK)
 	}
@@ -376,7 +350,7 @@ func (c *context) Write(b []byte) (int, error) {
 	return len(b), nil
 }
 
-func (c *context) WriteHeader(code int) {
+func (c *aeContext) WriteHeader(code int) {
 	if c.outCode != 0 {
 		logf(c, 3, "WriteHeader called multiple times on request.") // error level
 		return
@@ -384,10 +358,11 @@ func (c *context) WriteHeader(code int) {
 	c.outCode = code
 }
 
-func (c *context) post(body []byte, timeout time.Duration) (b []byte, err error) {
+func post(ctx context.Context, body []byte, timeout time.Duration) (b []byte, err error) {
+	apiURL := apiURL(ctx)
 	hreq := &http.Request{
 		Method: "POST",
-		URL:    c.apiURL,
+		URL:    apiURL,
 		Header: http.Header{
 			apiEndpointHeader: apiEndpointHeaderValue,
 			apiMethodHeader:   apiMethodHeaderValue,
@@ -396,13 +371,16 @@ func (c *context) post(body []byte, timeout time.Duration) (b []byte, err error)
 		},
 		Body:          ioutil.NopCloser(bytes.NewReader(body)),
 		ContentLength: int64(len(body)),
-		Host:          c.apiURL.Host,
-	}
-	if info := c.req.Header.Get(dapperHeader); info != "" {
-		hreq.Header.Set(dapperHeader, info)
+		Host:          apiURL.Host,
 	}
-	if info := c.req.Header.Get(traceHeader); info != "" {
-		hreq.Header.Set(traceHeader, info)
+	c := fromContext(ctx)
+	if c != nil {
+		if info := c.req.Header.Get(dapperHeader); info != "" {
+			hreq.Header.Set(dapperHeader, info)
+		}
+		if info := c.req.Header.Get(traceHeader); info != "" {
+			hreq.Header.Set(traceHeader, info)
+		}
 	}
 
 	tr := apiHTTPClient.Transport.(*http.Transport)
@@ -444,7 +422,7 @@ func (c *context) post(body []byte, timeout time.Duration) (b []byte, err error)
 	return hrespBody, nil
 }
 
-func Call(ctx netcontext.Context, service, method string, in, out proto.Message) error {
+func Call(ctx context.Context, service, method string, in, out proto.Message) error {
 	if ns := NamespaceFromContext(ctx); ns != "" {
 		if fn, ok := NamespaceMods[service]; ok {
 			fn(in, ns)
@@ -463,15 +441,11 @@ func Call(ctx netcontext.Context, service, method string, in, out proto.Message)
 	}
 
 	c := fromContext(ctx)
-	if c == nil {
-		// Give a good error message rather than a panic lower down.
-		return errNotAppEngineContext
-	}
 
 	// Apply transaction modifications if we're in a transaction.
 	if t := transactionFromContext(ctx); t != nil {
 		if t.finished {
-			return errors.New("transaction context has expired")
+			return errors.New("transaction aeContext has expired")
 		}
 		applyTransaction(in, &t.transaction)
 	}
@@ -487,20 +461,13 @@ func Call(ctx netcontext.Context, service, method string, in, out proto.Message)
 		return err
 	}
 
-	ticket := c.req.Header.Get(ticketHeader)
-	// Use a test ticket under test environment.
-	if ticket == "" {
-		if appid := ctx.Value(&appIDOverrideKey); appid != nil {
-			ticket = appid.(string) + defaultTicketSuffix
+	ticket := ""
+	if c != nil {
+		ticket = c.req.Header.Get(ticketHeader)
+		if dri := c.req.Header.Get(devRequestIdHeader); IsDevAppServer() && dri != "" {
+			ticket = dri
 		}
 	}
-	// Fall back to use background ticket when the request ticket is not available in Flex or dev_appserver.
-	if ticket == "" {
-		ticket = DefaultTicket()
-	}
-	if dri := c.req.Header.Get(devRequestIdHeader); IsDevAppServer() && dri != "" {
-		ticket = dri
-	}
 	req := &remotepb.Request{
 		ServiceName: &service,
 		Method:      &method,
@@ -512,7 +479,7 @@ func Call(ctx netcontext.Context, service, method string, in, out proto.Message)
 		return err
 	}
 
-	hrespBody, err := c.post(hreqBody, timeout)
+	hrespBody, err := post(ctx, hreqBody, timeout)
 	if err != nil {
 		return err
 	}
@@ -549,11 +516,11 @@ func Call(ctx netcontext.Context, service, method string, in, out proto.Message)
 	return proto.Unmarshal(res.Response, out)
 }
 
-func (c *context) Request() *http.Request {
+func (c *aeContext) Request() *http.Request {
 	return c.req
 }
 
-func (c *context) addLogLine(ll *logpb.UserAppLogLine) {
+func (c *aeContext) addLogLine(ll *logpb.UserAppLogLine) {
 	// Truncate long log lines.
 	// TODO(dsymonds): Check if this is still necessary.
 	const lim = 8 << 10
@@ -575,18 +542,20 @@ var logLevelName = map[int64]string{
 	4: "CRITICAL",
 }
 
-func logf(c *context, level int64, format string, args ...interface{}) {
+func logf(c *aeContext, level int64, format string, args ...interface{}) {
 	if c == nil {
-		panic("not an App Engine context")
+		panic("not an App Engine aeContext")
 	}
 	s := fmt.Sprintf(format, args...)
 	s = strings.TrimRight(s, "\n") // Remove any trailing newline characters.
-	c.addLogLine(&logpb.UserAppLogLine{
-		TimestampUsec: proto.Int64(time.Now().UnixNano() / 1e3),
-		Level:         &level,
-		Message:       &s,
-	})
-	// Only duplicate log to stderr if not running on App Engine second generation
+	if logToLogservice() {
+		c.addLogLine(&logpb.UserAppLogLine{
+			TimestampUsec: proto.Int64(time.Now().UnixNano() / 1e3),
+			Level:         &level,
+			Message:       &s,
+		})
+	}
+	// Log to stdout if not deployed
 	if !IsSecondGen() {
 		log.Print(logLevelName[level] + ": " + s)
 	}
@@ -594,7 +563,7 @@ func logf(c *context, level int64, format string, args ...interface{}) {
 
 // flushLog attempts to flush any pending logs to the appserver.
 // It should not be called concurrently.
-func (c *context) flushLog(force bool) (flushed bool) {
+func (c *aeContext) flushLog(force bool) (flushed bool) {
 	c.pendingLogs.Lock()
 	// Grab up to 30 MB. We can get away with up to 32 MB, but let's be cautious.
 	n, rem := 0, 30<<20
@@ -655,7 +624,7 @@ const (
 	forceFlushInterval = 60 * time.Second
 )
 
-func (c *context) logFlusher(stop <-chan int) {
+func (c *aeContext) logFlusher(stop <-chan int) {
 	lastFlush := time.Now()
 	tick := time.NewTicker(flushInterval)
 	for {
@@ -673,6 +642,12 @@ func (c *context) logFlusher(stop <-chan int) {
 	}
 }
 
-func ContextForTesting(req *http.Request) netcontext.Context {
-	return toContext(&context{req: req})
+func ContextForTesting(req *http.Request) context.Context {
+	return toContext(&aeContext{req: req})
+}
+
+func logToLogservice() bool {
+	// TODO: replace logservice with json structured logs to $LOG_DIR/app.log.json
+	// where $LOG_DIR is /var/log in prod and some tmpdir in dev
+	return os.Getenv("LOG_TO_LOGSERVICE") != "0"
 }
diff --git a/vendor/google.golang.org/appengine/internal/api_classic.go b/vendor/google.golang.org/appengine/internal/api_classic.go
index f0f40b2e35c..87c33c798e8 100644
--- a/vendor/google.golang.org/appengine/internal/api_classic.go
+++ b/vendor/google.golang.org/appengine/internal/api_classic.go
@@ -2,11 +2,13 @@
 // Use of this source code is governed by the Apache 2.0
 // license that can be found in the LICENSE file.
 
+//go:build appengine
 // +build appengine
 
 package internal
 
 import (
+	"context"
 	"errors"
 	"fmt"
 	"net/http"
@@ -17,20 +19,19 @@ import (
 	basepb "appengine_internal/base"
 
 	"github.com/golang/protobuf/proto"
-	netcontext "golang.org/x/net/context"
 )
 
 var contextKey = "holds an appengine.Context"
 
 // fromContext returns the App Engine context or nil if ctx is not
 // derived from an App Engine context.
-func fromContext(ctx netcontext.Context) appengine.Context {
+func fromContext(ctx context.Context) appengine.Context {
 	c, _ := ctx.Value(&contextKey).(appengine.Context)
 	return c
 }
 
 // This is only for classic App Engine adapters.
-func ClassicContextFromContext(ctx netcontext.Context) (appengine.Context, error) {
+func ClassicContextFromContext(ctx context.Context) (appengine.Context, error) {
 	c := fromContext(ctx)
 	if c == nil {
 		return nil, errNotAppEngineContext
@@ -38,8 +39,8 @@ func ClassicContextFromContext(ctx netcontext.Context) (appengine.Context, error
 	return c, nil
 }
 
-func withContext(parent netcontext.Context, c appengine.Context) netcontext.Context {
-	ctx := netcontext.WithValue(parent, &contextKey, c)
+func withContext(parent context.Context, c appengine.Context) context.Context {
+	ctx := context.WithValue(parent, &contextKey, c)
 
 	s := &basepb.StringProto{}
 	c.Call("__go__", "GetNamespace", &basepb.VoidProto{}, s, nil)
@@ -50,7 +51,7 @@ func withContext(parent netcontext.Context, c appengine.Context) netcontext.Cont
 	return ctx
 }
 
-func IncomingHeaders(ctx netcontext.Context) http.Header {
+func IncomingHeaders(ctx context.Context) http.Header {
 	if c := fromContext(ctx); c != nil {
 		if req, ok := c.Request().(*http.Request); ok {
 			return req.Header
@@ -59,11 +60,11 @@ func IncomingHeaders(ctx netcontext.Context) http.Header {
 	return nil
 }
 
-func ReqContext(req *http.Request) netcontext.Context {
-	return WithContext(netcontext.Background(), req)
+func ReqContext(req *http.Request) context.Context {
+	return WithContext(context.Background(), req)
 }
 
-func WithContext(parent netcontext.Context, req *http.Request) netcontext.Context {
+func WithContext(parent context.Context, req *http.Request) context.Context {
 	c := appengine.NewContext(req)
 	return withContext(parent, c)
 }
@@ -83,11 +84,11 @@ func (t *testingContext) Call(service, method string, _, _ appengine_internal.Pr
 }
 func (t *testingContext) Request() interface{} { return t.req }
 
-func ContextForTesting(req *http.Request) netcontext.Context {
-	return withContext(netcontext.Background(), &testingContext{req: req})
+func ContextForTesting(req *http.Request) context.Context {
+	return withContext(context.Background(), &testingContext{req: req})
 }
 
-func Call(ctx netcontext.Context, service, method string, in, out proto.Message) error {
+func Call(ctx context.Context, service, method string, in, out proto.Message) error {
 	if ns := NamespaceFromContext(ctx); ns != "" {
 		if fn, ok := NamespaceMods[service]; ok {
 			fn(in, ns)
@@ -144,8 +145,8 @@ func Call(ctx netcontext.Context, service, method string, in, out proto.Message)
 	return err
 }
 
-func handleHTTP(w http.ResponseWriter, r *http.Request) {
-	panic("handleHTTP called; this should be impossible")
+func Middleware(next http.Handler) http.Handler {
+	panic("Middleware called; this should be impossible")
 }
 
 func logf(c appengine.Context, level int64, format string, args ...interface{}) {
diff --git a/vendor/google.golang.org/appengine/internal/api_common.go b/vendor/google.golang.org/appengine/internal/api_common.go
index e0c0b214b72..5b95c13d926 100644
--- a/vendor/google.golang.org/appengine/internal/api_common.go
+++ b/vendor/google.golang.org/appengine/internal/api_common.go
@@ -5,20 +5,26 @@
 package internal
 
 import (
+	"context"
 	"errors"
 	"os"
 
 	"github.com/golang/protobuf/proto"
-	netcontext "golang.org/x/net/context"
 )
 
+type ctxKey string
+
+func (c ctxKey) String() string {
+	return "appengine context key: " + string(c)
+}
+
 var errNotAppEngineContext = errors.New("not an App Engine context")
 
-type CallOverrideFunc func(ctx netcontext.Context, service, method string, in, out proto.Message) error
+type CallOverrideFunc func(ctx context.Context, service, method string, in, out proto.Message) error
 
 var callOverrideKey = "holds []CallOverrideFunc"
 
-func WithCallOverride(ctx netcontext.Context, f CallOverrideFunc) netcontext.Context {
+func WithCallOverride(ctx context.Context, f CallOverrideFunc) context.Context {
 	// We avoid appending to any existing call override
 	// so we don't risk overwriting a popped stack below.
 	var cofs []CallOverrideFunc
@@ -26,10 +32,10 @@ func WithCallOverride(ctx netcontext.Context, f CallOverrideFunc) netcontext.Con
 		cofs = append(cofs, uf...)
 	}
 	cofs = append(cofs, f)
-	return netcontext.WithValue(ctx, &callOverrideKey, cofs)
+	return context.WithValue(ctx, &callOverrideKey, cofs)
 }
 
-func callOverrideFromContext(ctx netcontext.Context) (CallOverrideFunc, netcontext.Context, bool) {
+func callOverrideFromContext(ctx context.Context) (CallOverrideFunc, context.Context, bool) {
 	cofs, _ := ctx.Value(&callOverrideKey).([]CallOverrideFunc)
 	if len(cofs) == 0 {
 		return nil, nil, false
@@ -37,7 +43,7 @@ func callOverrideFromContext(ctx netcontext.Context) (CallOverrideFunc, netconte
 	// We found a list of overrides; grab the last, and reconstitute a
 	// context that will hide it.
 	f := cofs[len(cofs)-1]
-	ctx = netcontext.WithValue(ctx, &callOverrideKey, cofs[:len(cofs)-1])
+	ctx = context.WithValue(ctx, &callOverrideKey, cofs[:len(cofs)-1])
 	return f, ctx, true
 }
 
@@ -45,23 +51,35 @@ type logOverrideFunc func(level int64, format string, args ...interface{})
 
 var logOverrideKey = "holds a logOverrideFunc"
 
-func WithLogOverride(ctx netcontext.Context, f logOverrideFunc) netcontext.Context {
-	return netcontext.WithValue(ctx, &logOverrideKey, f)
+func WithLogOverride(ctx context.Context, f logOverrideFunc) context.Context {
+	return context.WithValue(ctx, &logOverrideKey, f)
 }
 
 var appIDOverrideKey = "holds a string, being the full app ID"
 
-func WithAppIDOverride(ctx netcontext.Context, appID string) netcontext.Context {
-	return netcontext.WithValue(ctx, &appIDOverrideKey, appID)
+func WithAppIDOverride(ctx context.Context, appID string) context.Context {
+	return context.WithValue(ctx, &appIDOverrideKey, appID)
+}
+
+var apiHostOverrideKey = ctxKey("holds a string, being the alternate API_HOST")
+
+func withAPIHostOverride(ctx context.Context, apiHost string) context.Context {
+	return context.WithValue(ctx, apiHostOverrideKey, apiHost)
+}
+
+var apiPortOverrideKey = ctxKey("holds a string, being the alternate API_PORT")
+
+func withAPIPortOverride(ctx context.Context, apiPort string) context.Context {
+	return context.WithValue(ctx, apiPortOverrideKey, apiPort)
 }
 
 var namespaceKey = "holds the namespace string"
 
-func withNamespace(ctx netcontext.Context, ns string) netcontext.Context {
-	return netcontext.WithValue(ctx, &namespaceKey, ns)
+func withNamespace(ctx context.Context, ns string) context.Context {
+	return context.WithValue(ctx, &namespaceKey, ns)
 }
 
-func NamespaceFromContext(ctx netcontext.Context) string {
+func NamespaceFromContext(ctx context.Context) string {
 	// If there's no namespace, return the empty string.
 	ns, _ := ctx.Value(&namespaceKey).(string)
 	return ns
@@ -70,14 +88,14 @@ func NamespaceFromContext(ctx netcontext.Context) string {
 // FullyQualifiedAppID returns the fully-qualified application ID.
 // This may contain a partition prefix (e.g. "s~" for High Replication apps),
 // or a domain prefix (e.g. "example.com:").
-func FullyQualifiedAppID(ctx netcontext.Context) string {
+func FullyQualifiedAppID(ctx context.Context) string {
 	if id, ok := ctx.Value(&appIDOverrideKey).(string); ok {
 		return id
 	}
 	return fullyQualifiedAppID(ctx)
 }
 
-func Logf(ctx netcontext.Context, level int64, format string, args ...interface{}) {
+func Logf(ctx context.Context, level int64, format string, args ...interface{}) {
 	if f, ok := ctx.Value(&logOverrideKey).(logOverrideFunc); ok {
 		f(level, format, args...)
 		return
@@ -90,7 +108,7 @@ func Logf(ctx netcontext.Context, level int64, format string, args ...interface{
 }
 
 // NamespacedContext wraps a Context to support namespaces.
-func NamespacedContext(ctx netcontext.Context, namespace string) netcontext.Context {
+func NamespacedContext(ctx context.Context, namespace string) context.Context {
 	return withNamespace(ctx, namespace)
 }
 
diff --git a/vendor/google.golang.org/appengine/internal/identity.go b/vendor/google.golang.org/appengine/internal/identity.go
index 9b4134e4257..0f95aa91d5b 100644
--- a/vendor/google.golang.org/appengine/internal/identity.go
+++ b/vendor/google.golang.org/appengine/internal/identity.go
@@ -5,9 +5,8 @@
 package internal
 
 import (
+	"context"
 	"os"
-
-	netcontext "golang.org/x/net/context"
 )
 
 var (
@@ -23,7 +22,7 @@ var (
 
 // AppID is the implementation of the wrapper function of the same name in
 // ../identity.go. See that file for commentary.
-func AppID(c netcontext.Context) string {
+func AppID(c context.Context) string {
 	return appID(FullyQualifiedAppID(c))
 }
 
@@ -35,7 +34,7 @@ func IsStandard() bool {
 	return appengineStandard || IsSecondGen()
 }
 
-// IsStandard is the implementation of the wrapper function of the same name in
+// IsSecondGen is the implementation of the wrapper function of the same name in
 // ../appengine.go. See that file for commentary.
 func IsSecondGen() bool {
 	// Second-gen runtimes set $GAE_ENV so we use that to check if we're on a second-gen runtime.
diff --git a/vendor/google.golang.org/appengine/internal/identity_classic.go b/vendor/google.golang.org/appengine/internal/identity_classic.go
index 4e979f45e34..5ad3548bf74 100644
--- a/vendor/google.golang.org/appengine/internal/identity_classic.go
+++ b/vendor/google.golang.org/appengine/internal/identity_classic.go
@@ -2,21 +2,22 @@
 // Use of this source code is governed by the Apache 2.0
 // license that can be found in the LICENSE file.
 
+//go:build appengine
 // +build appengine
 
 package internal
 
 import (
-	"appengine"
+	"context"
 
-	netcontext "golang.org/x/net/context"
+	"appengine"
 )
 
 func init() {
 	appengineStandard = true
 }
 
-func DefaultVersionHostname(ctx netcontext.Context) string {
+func DefaultVersionHostname(ctx context.Context) string {
 	c := fromContext(ctx)
 	if c == nil {
 		panic(errNotAppEngineContext)
@@ -24,12 +25,12 @@ func DefaultVersionHostname(ctx netcontext.Context) string {
 	return appengine.DefaultVersionHostname(c)
 }
 
-func Datacenter(_ netcontext.Context) string { return appengine.Datacenter() }
-func ServerSoftware() string                 { return appengine.ServerSoftware() }
-func InstanceID() string                     { return appengine.InstanceID() }
-func IsDevAppServer() bool                   { return appengine.IsDevAppServer() }
+func Datacenter(_ context.Context) string { return appengine.Datacenter() }
+func ServerSoftware() string              { return appengine.ServerSoftware() }
+func InstanceID() string                  { return appengine.InstanceID() }
+func IsDevAppServer() bool                { return appengine.IsDevAppServer() }
 
-func RequestID(ctx netcontext.Context) string {
+func RequestID(ctx context.Context) string {
 	c := fromContext(ctx)
 	if c == nil {
 		panic(errNotAppEngineContext)
@@ -37,14 +38,14 @@ func RequestID(ctx netcontext.Context) string {
 	return appengine.RequestID(c)
 }
 
-func ModuleName(ctx netcontext.Context) string {
+func ModuleName(ctx context.Context) string {
 	c := fromContext(ctx)
 	if c == nil {
 		panic(errNotAppEngineContext)
 	}
 	return appengine.ModuleName(c)
 }
-func VersionID(ctx netcontext.Context) string {
+func VersionID(ctx context.Context) string {
 	c := fromContext(ctx)
 	if c == nil {
 		panic(errNotAppEngineContext)
@@ -52,7 +53,7 @@ func VersionID(ctx netcontext.Context) string {
 	return appengine.VersionID(c)
 }
 
-func fullyQualifiedAppID(ctx netcontext.Context) string {
+func fullyQualifiedAppID(ctx context.Context) string {
 	c := fromContext(ctx)
 	if c == nil {
 		panic(errNotAppEngineContext)
diff --git a/vendor/google.golang.org/appengine/internal/identity_flex.go b/vendor/google.golang.org/appengine/internal/identity_flex.go
index d5e2e7b5e3f..4201b6b585a 100644
--- a/vendor/google.golang.org/appengine/internal/identity_flex.go
+++ b/vendor/google.golang.org/appengine/internal/identity_flex.go
@@ -2,6 +2,7 @@
 // Use of this source code is governed by the Apache 2.0
 // license that can be found in the LICENSE file.
 
+//go:build appenginevm
 // +build appenginevm
 
 package internal
diff --git a/vendor/google.golang.org/appengine/internal/identity_vm.go b/vendor/google.golang.org/appengine/internal/identity_vm.go
index 5d806726355..18ddda3a423 100644
--- a/vendor/google.golang.org/appengine/internal/identity_vm.go
+++ b/vendor/google.golang.org/appengine/internal/identity_vm.go
@@ -2,17 +2,17 @@
 // Use of this source code is governed by the Apache 2.0
 // license that can be found in the LICENSE file.
 
+//go:build !appengine
 // +build !appengine
 
 package internal
 
 import (
+	"context"
 	"log"
 	"net/http"
 	"os"
 	"strings"
-
-	netcontext "golang.org/x/net/context"
 )
 
 // These functions are implementations of the wrapper functions
@@ -24,7 +24,7 @@ const (
 	hDatacenter             = "X-AppEngine-Datacenter"
 )
 
-func ctxHeaders(ctx netcontext.Context) http.Header {
+func ctxHeaders(ctx context.Context) http.Header {
 	c := fromContext(ctx)
 	if c == nil {
 		return nil
@@ -32,15 +32,15 @@ func ctxHeaders(ctx netcontext.Context) http.Header {
 	return c.Request().Header
 }
 
-func DefaultVersionHostname(ctx netcontext.Context) string {
+func DefaultVersionHostname(ctx context.Context) string {
 	return ctxHeaders(ctx).Get(hDefaultVersionHostname)
 }
 
-func RequestID(ctx netcontext.Context) string {
+func RequestID(ctx context.Context) string {
 	return ctxHeaders(ctx).Get(hRequestLogId)
 }
 
-func Datacenter(ctx netcontext.Context) string {
+func Datacenter(ctx context.Context) string {
 	if dc := ctxHeaders(ctx).Get(hDatacenter); dc != "" {
 		return dc
 	}
@@ -71,7 +71,7 @@ func ServerSoftware() string {
 
 // TODO(dsymonds): Remove the metadata fetches.
 
-func ModuleName(_ netcontext.Context) string {
+func ModuleName(_ context.Context) string {
 	if s := os.Getenv("GAE_MODULE_NAME"); s != "" {
 		return s
 	}
@@ -81,7 +81,7 @@ func ModuleName(_ netcontext.Context) string {
 	return string(mustGetMetadata("instance/attributes/gae_backend_name"))
 }
 
-func VersionID(_ netcontext.Context) string {
+func VersionID(_ context.Context) string {
 	if s1, s2 := os.Getenv("GAE_MODULE_VERSION"), os.Getenv("GAE_MINOR_VERSION"); s1 != "" && s2 != "" {
 		return s1 + "." + s2
 	}
@@ -112,7 +112,7 @@ func partitionlessAppID() string {
 	return string(mustGetMetadata("instance/attributes/gae_project"))
 }
 
-func fullyQualifiedAppID(_ netcontext.Context) string {
+func fullyQualifiedAppID(_ context.Context) string {
 	if s := os.Getenv("GAE_APPLICATION"); s != "" {
 		return s
 	}
@@ -130,5 +130,5 @@ func fullyQualifiedAppID(_ netcontext.Context) string {
 }
 
 func IsDevAppServer() bool {
-	return os.Getenv("RUN_WITH_DEVAPPSERVER") != ""
+	return os.Getenv("RUN_WITH_DEVAPPSERVER") != "" || os.Getenv("GAE_ENV") == "localdev"
 }
diff --git a/vendor/google.golang.org/appengine/internal/main.go b/vendor/google.golang.org/appengine/internal/main.go
index 1e765312fd1..afd0ae84fdf 100644
--- a/vendor/google.golang.org/appengine/internal/main.go
+++ b/vendor/google.golang.org/appengine/internal/main.go
@@ -2,6 +2,7 @@
 // Use of this source code is governed by the Apache 2.0
 // license that can be found in the LICENSE file.
 
+//go:build appengine
 // +build appengine
 
 package internal
diff --git a/vendor/google.golang.org/appengine/internal/main_vm.go b/vendor/google.golang.org/appengine/internal/main_vm.go
index ddb79a33387..86a8caf06f3 100644
--- a/vendor/google.golang.org/appengine/internal/main_vm.go
+++ b/vendor/google.golang.org/appengine/internal/main_vm.go
@@ -2,6 +2,7 @@
 // Use of this source code is governed by the Apache 2.0
 // license that can be found in the LICENSE file.
 
+//go:build !appengine
 // +build !appengine
 
 package internal
@@ -29,7 +30,7 @@ func Main() {
 	if IsDevAppServer() {
 		host = "127.0.0.1"
 	}
-	if err := http.ListenAndServe(host+":"+port, http.HandlerFunc(handleHTTP)); err != nil {
+	if err := http.ListenAndServe(host+":"+port, Middleware(http.DefaultServeMux)); err != nil {
 		log.Fatalf("http.ListenAndServe: %v", err)
 	}
 }
diff --git a/vendor/google.golang.org/appengine/internal/transaction.go b/vendor/google.golang.org/appengine/internal/transaction.go
index 9006ae65380..2ae8ab9fa42 100644
--- a/vendor/google.golang.org/appengine/internal/transaction.go
+++ b/vendor/google.golang.org/appengine/internal/transaction.go
@@ -7,11 +7,11 @@ package internal
 // This file implements hooks for applying datastore transactions.
 
 import (
+	"context"
 	"errors"
 	"reflect"
 
 	"github.com/golang/protobuf/proto"
-	netcontext "golang.org/x/net/context"
 
 	basepb "google.golang.org/appengine/internal/base"
 	pb "google.golang.org/appengine/internal/datastore"
@@ -38,13 +38,13 @@ func applyTransaction(pb proto.Message, t *pb.Transaction) {
 
 var transactionKey = "used for *Transaction"
 
-func transactionFromContext(ctx netcontext.Context) *transaction {
+func transactionFromContext(ctx context.Context) *transaction {
 	t, _ := ctx.Value(&transactionKey).(*transaction)
 	return t
 }
 
-func withTransaction(ctx netcontext.Context, t *transaction) netcontext.Context {
-	return netcontext.WithValue(ctx, &transactionKey, t)
+func withTransaction(ctx context.Context, t *transaction) context.Context {
+	return context.WithValue(ctx, &transactionKey, t)
 }
 
 type transaction struct {
@@ -54,7 +54,7 @@ type transaction struct {
 
 var ErrConcurrentTransaction = errors.New("internal: concurrent transaction")
 
-func RunTransactionOnce(c netcontext.Context, f func(netcontext.Context) error, xg bool, readOnly bool, previousTransaction *pb.Transaction) (*pb.Transaction, error) {
+func RunTransactionOnce(c context.Context, f func(context.Context) error, xg bool, readOnly bool, previousTransaction *pb.Transaction) (*pb.Transaction, error) {
 	if transactionFromContext(c) != nil {
 		return nil, errors.New("nested transactions are not supported")
 	}
diff --git a/vendor/google.golang.org/appengine/namespace.go b/vendor/google.golang.org/appengine/namespace.go
index 21860ca0822..6f169be487d 100644
--- a/vendor/google.golang.org/appengine/namespace.go
+++ b/vendor/google.golang.org/appengine/namespace.go
@@ -5,11 +5,10 @@
 package appengine
 
 import (
+	"context"
 	"fmt"
 	"regexp"
 
-	"golang.org/x/net/context"
-
 	"google.golang.org/appengine/internal"
 )
 
diff --git a/vendor/google.golang.org/appengine/timeout.go b/vendor/google.golang.org/appengine/timeout.go
index 05642a992a3..fcf3ad0a58f 100644
--- a/vendor/google.golang.org/appengine/timeout.go
+++ b/vendor/google.golang.org/appengine/timeout.go
@@ -4,7 +4,7 @@
 
 package appengine
 
-import "golang.org/x/net/context"
+import "context"
 
 // IsTimeoutError reports whether err is a timeout error.
 func IsTimeoutError(err error) bool {
diff --git a/vendor/google.golang.org/appengine/travis_install.sh b/vendor/google.golang.org/appengine/travis_install.sh
deleted file mode 100644
index 785b62f46e8..00000000000
--- a/vendor/google.golang.org/appengine/travis_install.sh
+++ /dev/null
@@ -1,18 +0,0 @@
-#!/bin/bash
-set -e
-
-if [[ $GO111MODULE == "on" ]]; then
-  go get .
-else
-  go get -u -v $(go list -f '{{join .Imports "\n"}}{{"\n"}}{{join .TestImports "\n"}}' ./... | sort | uniq | grep -v appengine)
-fi
-
-if [[ $GOAPP == "true" ]]; then
-  mkdir /tmp/sdk
-  curl -o /tmp/sdk.zip "https://storage.googleapis.com/appengine-sdks/featured/go_appengine_sdk_linux_amd64-1.9.68.zip"
-  unzip -q /tmp/sdk.zip -d /tmp/sdk
-  # NOTE: Set the following env vars in the test script:
-  # export PATH="$PATH:/tmp/sdk/go_appengine"
-  # export APPENGINE_DEV_APPSERVER=/tmp/sdk/go_appengine/dev_appserver.py
-fi
-
diff --git a/vendor/google.golang.org/appengine/travis_test.sh b/vendor/google.golang.org/appengine/travis_test.sh
deleted file mode 100644
index d4390f045b6..00000000000
--- a/vendor/google.golang.org/appengine/travis_test.sh
+++ /dev/null
@@ -1,12 +0,0 @@
-#!/bin/bash
-set -e
-
-go version
-go test -v google.golang.org/appengine/...
-go test -v -race google.golang.org/appengine/...
-if [[ $GOAPP == "true" ]]; then
-  export PATH="$PATH:/tmp/sdk/go_appengine"
-  export APPENGINE_DEV_APPSERVER=/tmp/sdk/go_appengine/dev_appserver.py
-  goapp version
-  goapp test -v google.golang.org/appengine/...
-fi
diff --git a/vendor/google.golang.org/appengine/urlfetch/urlfetch.go b/vendor/google.golang.org/appengine/urlfetch/urlfetch.go
index 6ffe1e6d901..6c0d72418d8 100644
--- a/vendor/google.golang.org/appengine/urlfetch/urlfetch.go
+++ b/vendor/google.golang.org/appengine/urlfetch/urlfetch.go
@@ -7,6 +7,7 @@
 package urlfetch // import "google.golang.org/appengine/urlfetch"
 
 import (
+	"context"
 	"errors"
 	"fmt"
 	"io"
@@ -18,7 +19,6 @@ import (
 	"time"
 
 	"github.com/golang/protobuf/proto"
-	"golang.org/x/net/context"
 
 	"google.golang.org/appengine/internal"
 	pb "google.golang.org/appengine/internal/urlfetch"
@@ -44,11 +44,10 @@ type Transport struct {
 var _ http.RoundTripper = (*Transport)(nil)
 
 // Client returns an *http.Client using a default urlfetch Transport. This
-// client will have the default deadline of 5 seconds, and will check the
-// validity of SSL certificates.
+// client will check the validity of SSL certificates.
 //
-// Any deadline of the provided context will be used for requests through this client;
-// if the client does not have a deadline then a 5 second default is used.
+// Any deadline of the provided context will be used for requests through this client.
+// If the client does not have a deadline, then an App Engine default of 60 second is used.
 func Client(ctx context.Context) *http.Client {
 	return &http.Client{
 		Transport: &Transport{
diff --git a/vendor/google.golang.org/grpc/balancer_conn_wrappers.go b/vendor/google.golang.org/grpc/balancer_wrapper.go
similarity index 57%
rename from vendor/google.golang.org/grpc/balancer_conn_wrappers.go
rename to vendor/google.golang.org/grpc/balancer_wrapper.go
index a4411c22bfc..b5e30cff021 100644
--- a/vendor/google.golang.org/grpc/balancer_conn_wrappers.go
+++ b/vendor/google.golang.org/grpc/balancer_wrapper.go
@@ -32,21 +32,13 @@ import (
 	"google.golang.org/grpc/resolver"
 )
 
-type ccbMode int
-
-const (
-	ccbModeActive = iota
-	ccbModeIdle
-	ccbModeClosed
-	ccbModeExitingIdle
-)
-
 // ccBalancerWrapper sits between the ClientConn and the Balancer.
 //
 // ccBalancerWrapper implements methods corresponding to the ones on the
 // balancer.Balancer interface. The ClientConn is free to call these methods
 // concurrently and the ccBalancerWrapper ensures that calls from the ClientConn
-// to the Balancer happen synchronously and in order.
+// to the Balancer happen in order by performing them in the serializer, without
+// any mutexes held.
 //
 // ccBalancerWrapper also implements the balancer.ClientConn interface and is
 // passed to the Balancer implementations. It invokes unexported methods on the
@@ -57,87 +49,75 @@ const (
 type ccBalancerWrapper struct {
 	// The following fields are initialized when the wrapper is created and are
 	// read-only afterwards, and therefore can be accessed without a mutex.
-	cc   *ClientConn
-	opts balancer.BuildOptions
+	cc               *ClientConn
+	opts             balancer.BuildOptions
+	serializer       *grpcsync.CallbackSerializer
+	serializerCancel context.CancelFunc
 
-	// Outgoing (gRPC --> balancer) calls are guaranteed to execute in a
-	// mutually exclusive manner as they are scheduled in the serializer. Fields
-	// accessed *only* in these serializer callbacks, can therefore be accessed
-	// without a mutex.
-	balancer        *gracefulswitch.Balancer
+	// The following fields are only accessed within the serializer or during
+	// initialization.
 	curBalancerName string
+	balancer        *gracefulswitch.Balancer
 
-	// mu guards access to the below fields. Access to the serializer and its
-	// cancel function needs to be mutex protected because they are overwritten
-	// when the wrapper exits idle mode.
-	mu               sync.Mutex
-	serializer       *grpcsync.CallbackSerializer // To serialize all outoing calls.
-	serializerCancel context.CancelFunc           // To close the seralizer at close/enterIdle time.
-	mode             ccbMode                      // Tracks the current mode of the wrapper.
+	// The following field is protected by mu.  Caller must take cc.mu before
+	// taking mu.
+	mu     sync.Mutex
+	closed bool
 }
 
-// newCCBalancerWrapper creates a new balancer wrapper. The underlying balancer
-// is not created until the switchTo() method is invoked.
-func newCCBalancerWrapper(cc *ClientConn, bopts balancer.BuildOptions) *ccBalancerWrapper {
-	ctx, cancel := context.WithCancel(context.Background())
+// newCCBalancerWrapper creates a new balancer wrapper in idle state. The
+// underlying balancer is not created until the switchTo() method is invoked.
+func newCCBalancerWrapper(cc *ClientConn) *ccBalancerWrapper {
+	ctx, cancel := context.WithCancel(cc.ctx)
 	ccb := &ccBalancerWrapper{
-		cc:               cc,
-		opts:             bopts,
+		cc: cc,
+		opts: balancer.BuildOptions{
+			DialCreds:        cc.dopts.copts.TransportCredentials,
+			CredsBundle:      cc.dopts.copts.CredsBundle,
+			Dialer:           cc.dopts.copts.Dialer,
+			Authority:        cc.authority,
+			CustomUserAgent:  cc.dopts.copts.UserAgent,
+			ChannelzParentID: cc.channelzID,
+			Target:           cc.parsedTarget,
+		},
 		serializer:       grpcsync.NewCallbackSerializer(ctx),
 		serializerCancel: cancel,
 	}
-	ccb.balancer = gracefulswitch.NewBalancer(ccb, bopts)
+	ccb.balancer = gracefulswitch.NewBalancer(ccb, ccb.opts)
 	return ccb
 }
 
 // updateClientConnState is invoked by grpc to push a ClientConnState update to
-// the underlying balancer.
+// the underlying balancer.  This is always executed from the serializer, so
+// it is safe to call into the balancer here.
 func (ccb *ccBalancerWrapper) updateClientConnState(ccs *balancer.ClientConnState) error {
-	ccb.mu.Lock()
-	errCh := make(chan error, 1)
-	// Here and everywhere else where Schedule() is called, it is done with the
-	// lock held. But the lock guards only the scheduling part. The actual
-	// callback is called asynchronously without the lock being held.
-	ok := ccb.serializer.Schedule(func(_ context.Context) {
-		errCh <- ccb.balancer.UpdateClientConnState(*ccs)
+	errCh := make(chan error)
+	ok := ccb.serializer.Schedule(func(ctx context.Context) {
+		defer close(errCh)
+		if ctx.Err() != nil || ccb.balancer == nil {
+			return
+		}
+		err := ccb.balancer.UpdateClientConnState(*ccs)
+		if logger.V(2) && err != nil {
+			logger.Infof("error from balancer.UpdateClientConnState: %v", err)
+		}
+		errCh <- err
 	})
 	if !ok {
-		// If we are unable to schedule a function with the serializer, it
-		// indicates that it has been closed. A serializer is only closed when
-		// the wrapper is closed or is in idle.
-		ccb.mu.Unlock()
-		return fmt.Errorf("grpc: cannot send state update to a closed or idle balancer")
-	}
-	ccb.mu.Unlock()
-
-	// We get here only if the above call to Schedule succeeds, in which case it
-	// is guaranteed that the scheduled function will run. Therefore it is safe
-	// to block on this channel.
-	err := <-errCh
-	if logger.V(2) && err != nil {
-		logger.Infof("error from balancer.UpdateClientConnState: %v", err)
+		return nil
 	}
-	return err
-}
-
-// updateSubConnState is invoked by grpc to push a subConn state update to the
-// underlying balancer.
-func (ccb *ccBalancerWrapper) updateSubConnState(sc balancer.SubConn, s connectivity.State, err error) {
-	ccb.mu.Lock()
-	ccb.serializer.Schedule(func(_ context.Context) {
-		// Even though it is optional for balancers, gracefulswitch ensures
-		// opts.StateListener is set, so this cannot ever be nil.
-		sc.(*acBalancerWrapper).stateListener(balancer.SubConnState{ConnectivityState: s, ConnectionError: err})
-	})
-	ccb.mu.Unlock()
+	return <-errCh
 }
 
+// resolverError is invoked by grpc to push a resolver error to the underlying
+// balancer.  The call to the balancer is executed from the serializer.
 func (ccb *ccBalancerWrapper) resolverError(err error) {
-	ccb.mu.Lock()
-	ccb.serializer.Schedule(func(_ context.Context) {
+	ccb.serializer.Schedule(func(ctx context.Context) {
+		if ctx.Err() != nil || ccb.balancer == nil {
+			return
+		}
 		ccb.balancer.ResolverError(err)
 	})
-	ccb.mu.Unlock()
 }
 
 // switchTo is invoked by grpc to instruct the balancer wrapper to switch to the
@@ -151,8 +131,10 @@ func (ccb *ccBalancerWrapper) resolverError(err error) {
 // the ccBalancerWrapper keeps track of the current LB policy name, and skips
 // the graceful balancer switching process if the name does not change.
 func (ccb *ccBalancerWrapper) switchTo(name string) {
-	ccb.mu.Lock()
-	ccb.serializer.Schedule(func(_ context.Context) {
+	ccb.serializer.Schedule(func(ctx context.Context) {
+		if ctx.Err() != nil || ccb.balancer == nil {
+			return
+		}
 		// TODO: Other languages use case-sensitive balancer registries. We should
 		// switch as well. See: https://github.com/grpc/grpc-go/issues/5288.
 		if strings.EqualFold(ccb.curBalancerName, name) {
@@ -160,7 +142,6 @@ func (ccb *ccBalancerWrapper) switchTo(name string) {
 		}
 		ccb.buildLoadBalancingPolicy(name)
 	})
-	ccb.mu.Unlock()
 }
 
 // buildLoadBalancingPolicy performs the following:
@@ -187,115 +168,49 @@ func (ccb *ccBalancerWrapper) buildLoadBalancingPolicy(name string) {
 	ccb.curBalancerName = builder.Name()
 }
 
+// close initiates async shutdown of the wrapper.  cc.mu must be held when
+// calling this function.  To determine the wrapper has finished shutting down,
+// the channel should block on ccb.serializer.Done() without cc.mu held.
 func (ccb *ccBalancerWrapper) close() {
-	channelz.Info(logger, ccb.cc.channelzID, "ccBalancerWrapper: closing")
-	ccb.closeBalancer(ccbModeClosed)
-}
-
-// enterIdleMode is invoked by grpc when the channel enters idle mode upon
-// expiry of idle_timeout. This call blocks until the balancer is closed.
-func (ccb *ccBalancerWrapper) enterIdleMode() {
-	channelz.Info(logger, ccb.cc.channelzID, "ccBalancerWrapper: entering idle mode")
-	ccb.closeBalancer(ccbModeIdle)
-}
-
-// closeBalancer is invoked when the channel is being closed or when it enters
-// idle mode upon expiry of idle_timeout.
-func (ccb *ccBalancerWrapper) closeBalancer(m ccbMode) {
 	ccb.mu.Lock()
-	if ccb.mode == ccbModeClosed || ccb.mode == ccbModeIdle {
-		ccb.mu.Unlock()
-		return
-	}
-
-	ccb.mode = m
-	done := ccb.serializer.Done()
-	b := ccb.balancer
-	ok := ccb.serializer.Schedule(func(_ context.Context) {
-		// Close the serializer to ensure that no more calls from gRPC are sent
-		// to the balancer.
-		ccb.serializerCancel()
-		// Empty the current balancer name because we don't have a balancer
-		// anymore and also so that we act on the next call to switchTo by
-		// creating a new balancer specified by the new resolver.
-		ccb.curBalancerName = ""
-	})
-	if !ok {
-		ccb.mu.Unlock()
-		return
-	}
+	ccb.closed = true
 	ccb.mu.Unlock()
-
-	// Give enqueued callbacks a chance to finish before closing the balancer.
-	<-done
-	b.Close()
-}
-
-// exitIdleMode is invoked by grpc when the channel exits idle mode either
-// because of an RPC or because of an invocation of the Connect() API. This
-// recreates the balancer that was closed previously when entering idle mode.
-//
-// If the channel is not in idle mode, we know for a fact that we are here as a
-// result of the user calling the Connect() method on the ClientConn. In this
-// case, we can simply forward the call to the underlying balancer, instructing
-// it to reconnect to the backends.
-func (ccb *ccBalancerWrapper) exitIdleMode() {
-	ccb.mu.Lock()
-	if ccb.mode == ccbModeClosed {
-		// Request to exit idle is a no-op when wrapper is already closed.
-		ccb.mu.Unlock()
-		return
-	}
-
-	if ccb.mode == ccbModeIdle {
-		// Recreate the serializer which was closed when we entered idle.
-		ctx, cancel := context.WithCancel(context.Background())
-		ccb.serializer = grpcsync.NewCallbackSerializer(ctx)
-		ccb.serializerCancel = cancel
-	}
-
-	// The ClientConn guarantees that mutual exclusion between close() and
-	// exitIdleMode(), and since we just created a new serializer, we can be
-	// sure that the below function will be scheduled.
-	done := make(chan struct{})
-	ccb.serializer.Schedule(func(_ context.Context) {
-		defer close(done)
-
-		ccb.mu.Lock()
-		defer ccb.mu.Unlock()
-
-		if ccb.mode != ccbModeIdle {
-			ccb.balancer.ExitIdle()
+	channelz.Info(logger, ccb.cc.channelzID, "ccBalancerWrapper: closing")
+	ccb.serializer.Schedule(func(context.Context) {
+		if ccb.balancer == nil {
 			return
 		}
-
-		// Gracefulswitch balancer does not support a switchTo operation after
-		// being closed. Hence we need to create a new one here.
-		ccb.balancer = gracefulswitch.NewBalancer(ccb, ccb.opts)
-		ccb.mode = ccbModeActive
-		channelz.Info(logger, ccb.cc.channelzID, "ccBalancerWrapper: exiting idle mode")
-
+		ccb.balancer.Close()
+		ccb.balancer = nil
 	})
-	ccb.mu.Unlock()
-
-	<-done
+	ccb.serializerCancel()
 }
 
-func (ccb *ccBalancerWrapper) isIdleOrClosed() bool {
-	ccb.mu.Lock()
-	defer ccb.mu.Unlock()
-	return ccb.mode == ccbModeIdle || ccb.mode == ccbModeClosed
+// exitIdle invokes the balancer's exitIdle method in the serializer.
+func (ccb *ccBalancerWrapper) exitIdle() {
+	ccb.serializer.Schedule(func(ctx context.Context) {
+		if ctx.Err() != nil || ccb.balancer == nil {
+			return
+		}
+		ccb.balancer.ExitIdle()
+	})
 }
 
 func (ccb *ccBalancerWrapper) NewSubConn(addrs []resolver.Address, opts balancer.NewSubConnOptions) (balancer.SubConn, error) {
-	if ccb.isIdleOrClosed() {
-		return nil, fmt.Errorf("grpc: cannot create SubConn when balancer is closed or idle")
+	ccb.cc.mu.Lock()
+	defer ccb.cc.mu.Unlock()
+
+	ccb.mu.Lock()
+	if ccb.closed {
+		ccb.mu.Unlock()
+		return nil, fmt.Errorf("balancer is being closed; no new SubConns allowed")
 	}
+	ccb.mu.Unlock()
 
 	if len(addrs) == 0 {
 		return nil, fmt.Errorf("grpc: cannot create SubConn with empty address list")
 	}
-	ac, err := ccb.cc.newAddrConn(addrs, opts)
+	ac, err := ccb.cc.newAddrConnLocked(addrs, opts)
 	if err != nil {
 		channelz.Warningf(logger, ccb.cc.channelzID, "acBalancerWrapper: NewSubConn: failed to newAddrConn: %v", err)
 		return nil, err
@@ -316,10 +231,6 @@ func (ccb *ccBalancerWrapper) RemoveSubConn(sc balancer.SubConn) {
 }
 
 func (ccb *ccBalancerWrapper) UpdateAddresses(sc balancer.SubConn, addrs []resolver.Address) {
-	if ccb.isIdleOrClosed() {
-		return
-	}
-
 	acbw, ok := sc.(*acBalancerWrapper)
 	if !ok {
 		return
@@ -328,25 +239,39 @@ func (ccb *ccBalancerWrapper) UpdateAddresses(sc balancer.SubConn, addrs []resol
 }
 
 func (ccb *ccBalancerWrapper) UpdateState(s balancer.State) {
-	if ccb.isIdleOrClosed() {
+	ccb.cc.mu.Lock()
+	defer ccb.cc.mu.Unlock()
+
+	ccb.mu.Lock()
+	if ccb.closed {
+		ccb.mu.Unlock()
 		return
 	}
-
+	ccb.mu.Unlock()
 	// Update picker before updating state.  Even though the ordering here does
 	// not matter, it can lead to multiple calls of Pick in the common start-up
 	// case where we wait for ready and then perform an RPC.  If the picker is
 	// updated later, we could call the "connecting" picker when the state is
 	// updated, and then call the "ready" picker after the picker gets updated.
-	ccb.cc.blockingpicker.updatePicker(s.Picker)
+
+	// Note that there is no need to check if the balancer wrapper was closed,
+	// as we know the graceful switch LB policy will not call cc if it has been
+	// closed.
+	ccb.cc.pickerWrapper.updatePicker(s.Picker)
 	ccb.cc.csMgr.updateState(s.ConnectivityState)
 }
 
 func (ccb *ccBalancerWrapper) ResolveNow(o resolver.ResolveNowOptions) {
-	if ccb.isIdleOrClosed() {
+	ccb.cc.mu.RLock()
+	defer ccb.cc.mu.RUnlock()
+
+	ccb.mu.Lock()
+	if ccb.closed {
+		ccb.mu.Unlock()
 		return
 	}
-
-	ccb.cc.resolveNow(o)
+	ccb.mu.Unlock()
+	ccb.cc.resolveNowLocked(o)
 }
 
 func (ccb *ccBalancerWrapper) Target() string {
@@ -364,6 +289,20 @@ type acBalancerWrapper struct {
 	producers map[balancer.ProducerBuilder]*refCountedProducer
 }
 
+// updateState is invoked by grpc to push a subConn state update to the
+// underlying balancer.
+func (acbw *acBalancerWrapper) updateState(s connectivity.State, err error) {
+	acbw.ccb.serializer.Schedule(func(ctx context.Context) {
+		if ctx.Err() != nil || acbw.ccb.balancer == nil {
+			return
+		}
+		// Even though it is optional for balancers, gracefulswitch ensures
+		// opts.StateListener is set, so this cannot ever be nil.
+		// TODO: delete this comment when UpdateSubConnState is removed.
+		acbw.stateListener(balancer.SubConnState{ConnectivityState: s, ConnectionError: err})
+	})
+}
+
 func (acbw *acBalancerWrapper) String() string {
 	return fmt.Sprintf("SubConn(id:%d)", acbw.ac.channelzID.Int())
 }
@@ -377,20 +316,7 @@ func (acbw *acBalancerWrapper) Connect() {
 }
 
 func (acbw *acBalancerWrapper) Shutdown() {
-	ccb := acbw.ccb
-	if ccb.isIdleOrClosed() {
-		// It it safe to ignore this call when the balancer is closed or in idle
-		// because the ClientConn takes care of closing the connections.
-		//
-		// Not returning early from here when the balancer is closed or in idle
-		// leads to a deadlock though, because of the following sequence of
-		// calls when holding cc.mu:
-		// cc.exitIdleMode --> ccb.enterIdleMode --> gsw.Close -->
-		// ccb.RemoveAddrConn --> cc.removeAddrConn
-		return
-	}
-
-	ccb.cc.removeAddrConn(acbw.ac, errConnDrain)
+	acbw.ccb.cc.removeAddrConn(acbw.ac, errConnDrain)
 }
 
 // NewStream begins a streaming RPC on the addrConn.  If the addrConn is not
diff --git a/vendor/google.golang.org/grpc/binarylog/grpc_binarylog_v1/binarylog.pb.go b/vendor/google.golang.org/grpc/binarylog/grpc_binarylog_v1/binarylog.pb.go
index 5954801122a..e9e97d45111 100644
--- a/vendor/google.golang.org/grpc/binarylog/grpc_binarylog_v1/binarylog.pb.go
+++ b/vendor/google.golang.org/grpc/binarylog/grpc_binarylog_v1/binarylog.pb.go
@@ -430,7 +430,7 @@ type ClientHeader struct {
 	MethodName string `protobuf:"bytes,2,opt,name=method_name,json=methodName,proto3" json:"method_name,omitempty"`
 	// A single process may be used to run multiple virtual
 	// servers with different identities.
-	// The authority is the name of such a server identitiy.
+	// The authority is the name of such a server identity.
 	// It is typically a portion of the URI in the form of
 	// <host> or <host>:<port> .
 	Authority string `protobuf:"bytes,3,opt,name=authority,proto3" json:"authority,omitempty"`
diff --git a/vendor/google.golang.org/grpc/clientconn.go b/vendor/google.golang.org/grpc/clientconn.go
index 429c389e473..f6e815e6bfc 100644
--- a/vendor/google.golang.org/grpc/clientconn.go
+++ b/vendor/google.golang.org/grpc/clientconn.go
@@ -33,9 +33,7 @@ import (
 	"google.golang.org/grpc/balancer/base"
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/connectivity"
-	"google.golang.org/grpc/credentials"
 	"google.golang.org/grpc/internal"
-	"google.golang.org/grpc/internal/backoff"
 	"google.golang.org/grpc/internal/channelz"
 	"google.golang.org/grpc/internal/grpcsync"
 	"google.golang.org/grpc/internal/idle"
@@ -48,9 +46,9 @@ import (
 	"google.golang.org/grpc/status"
 
 	_ "google.golang.org/grpc/balancer/roundrobin"           // To register roundrobin.
-	_ "google.golang.org/grpc/internal/resolver/dns"         // To register dns resolver.
 	_ "google.golang.org/grpc/internal/resolver/passthrough" // To register passthrough resolver.
 	_ "google.golang.org/grpc/internal/resolver/unix"        // To register unix resolver.
+	_ "google.golang.org/grpc/resolver/dns"                  // To register dns resolver.
 )
 
 const (
@@ -119,23 +117,8 @@ func (dcs *defaultConfigSelector) SelectConfig(rpcInfo iresolver.RPCInfo) (*ires
 	}, nil
 }
 
-// DialContext creates a client connection to the given target. By default, it's
-// a non-blocking dial (the function won't wait for connections to be
-// established, and connecting happens in the background). To make it a blocking
-// dial, use WithBlock() dial option.
-//
-// In the non-blocking case, the ctx does not act against the connection. It
-// only controls the setup steps.
-//
-// In the blocking case, ctx can be used to cancel or expire the pending
-// connection. Once this function returns, the cancellation and expiration of
-// ctx will be noop. Users should call ClientConn.Close to terminate all the
-// pending operations after this function returns.
-//
-// The target name syntax is defined in
-// https://github.com/grpc/grpc/blob/master/doc/naming.md.
-// e.g. to use dns resolver, a "dns:///" prefix should be applied to the target.
-func DialContext(ctx context.Context, target string, opts ...DialOption) (conn *ClientConn, err error) {
+// newClient returns a new client in idle mode.
+func newClient(target string, opts ...DialOption) (conn *ClientConn, err error) {
 	cc := &ClientConn{
 		target: target,
 		conns:  make(map[*addrConn]struct{}),
@@ -143,23 +126,11 @@ func DialContext(ctx context.Context, target string, opts ...DialOption) (conn *
 		czData: new(channelzData),
 	}
 
-	// We start the channel off in idle mode, but kick it out of idle at the end
-	// of this method, instead of waiting for the first RPC. Other gRPC
-	// implementations do wait for the first RPC to kick the channel out of
-	// idle. But doing so would be a major behavior change for our users who are
-	// used to seeing the channel active after Dial.
-	//
-	// Taking this approach of kicking it out of idle at the end of this method
-	// allows us to share the code between channel creation and exiting idle
-	// mode. This will also make it easy for us to switch to starting the
-	// channel off in idle, if at all we ever get to do that.
-	cc.idlenessState = ccIdlenessStateIdle
-
 	cc.retryThrottler.Store((*retryThrottler)(nil))
 	cc.safeConfigSelector.UpdateConfigSelector(&defaultConfigSelector{nil})
 	cc.ctx, cc.cancel = context.WithCancel(context.Background())
-	cc.exitIdleCond = sync.NewCond(&cc.mu)
 
+	// Apply dial options.
 	disableGlobalOpts := false
 	for _, opt := range opts {
 		if _, ok := opt.(*disableGlobalDialOptions); ok {
@@ -177,21 +148,9 @@ func DialContext(ctx context.Context, target string, opts ...DialOption) (conn *
 	for _, opt := range opts {
 		opt.apply(&cc.dopts)
 	}
-
 	chainUnaryClientInterceptors(cc)
 	chainStreamClientInterceptors(cc)
 
-	defer func() {
-		if err != nil {
-			cc.Close()
-		}
-	}()
-
-	// Register ClientConn with channelz.
-	cc.channelzRegistration(target)
-
-	cc.csMgr = newConnectivityStateManager(cc.ctx, cc.channelzID)
-
 	if err := cc.validateTransportCredentials(); err != nil {
 		return nil, err
 	}
@@ -205,10 +164,80 @@ func DialContext(ctx context.Context, target string, opts ...DialOption) (conn *
 	}
 	cc.mkp = cc.dopts.copts.KeepaliveParams
 
-	if cc.dopts.copts.UserAgent != "" {
-		cc.dopts.copts.UserAgent += " " + grpcUA
-	} else {
-		cc.dopts.copts.UserAgent = grpcUA
+	// Register ClientConn with channelz.
+	cc.channelzRegistration(target)
+
+	// TODO: Ideally it should be impossible to error from this function after
+	// channelz registration.  This will require removing some channelz logs
+	// from the following functions that can error.  Errors can be returned to
+	// the user, and successful logs can be emitted here, after the checks have
+	// passed and channelz is subsequently registered.
+
+	// Determine the resolver to use.
+	if err := cc.parseTargetAndFindResolver(); err != nil {
+		channelz.RemoveEntry(cc.channelzID)
+		return nil, err
+	}
+	if err = cc.determineAuthority(); err != nil {
+		channelz.RemoveEntry(cc.channelzID)
+		return nil, err
+	}
+
+	cc.csMgr = newConnectivityStateManager(cc.ctx, cc.channelzID)
+	cc.pickerWrapper = newPickerWrapper(cc.dopts.copts.StatsHandlers)
+
+	cc.initIdleStateLocked() // Safe to call without the lock, since nothing else has a reference to cc.
+	cc.idlenessMgr = idle.NewManager((*idler)(cc), cc.dopts.idleTimeout)
+	return cc, nil
+}
+
+// DialContext creates a client connection to the given target. By default, it's
+// a non-blocking dial (the function won't wait for connections to be
+// established, and connecting happens in the background). To make it a blocking
+// dial, use WithBlock() dial option.
+//
+// In the non-blocking case, the ctx does not act against the connection. It
+// only controls the setup steps.
+//
+// In the blocking case, ctx can be used to cancel or expire the pending
+// connection. Once this function returns, the cancellation and expiration of
+// ctx will be noop. Users should call ClientConn.Close to terminate all the
+// pending operations after this function returns.
+//
+// The target name syntax is defined in
+// https://github.com/grpc/grpc/blob/master/doc/naming.md.
+// e.g. to use dns resolver, a "dns:///" prefix should be applied to the target.
+func DialContext(ctx context.Context, target string, opts ...DialOption) (conn *ClientConn, err error) {
+	cc, err := newClient(target, opts...)
+	if err != nil {
+		return nil, err
+	}
+
+	// We start the channel off in idle mode, but kick it out of idle now,
+	// instead of waiting for the first RPC. Other gRPC implementations do wait
+	// for the first RPC to kick the channel out of idle. But doing so would be
+	// a major behavior change for our users who are used to seeing the channel
+	// active after Dial.
+	//
+	// Taking this approach of kicking it out of idle at the end of this method
+	// allows us to share the code between channel creation and exiting idle
+	// mode. This will also make it easy for us to switch to starting the
+	// channel off in idle, i.e. by making newClient exported.
+
+	defer func() {
+		if err != nil {
+			cc.Close()
+		}
+	}()
+
+	// This creates the name resolver, load balancer, etc.
+	if err := cc.idlenessMgr.ExitIdleMode(); err != nil {
+		return nil, err
+	}
+
+	// Return now for non-blocking dials.
+	if !cc.dopts.block {
+		return cc, nil
 	}
 
 	if cc.dopts.timeout > 0 {
@@ -231,49 +260,6 @@ func DialContext(ctx context.Context, target string, opts ...DialOption) (conn *
 		}
 	}()
 
-	if cc.dopts.bs == nil {
-		cc.dopts.bs = backoff.DefaultExponential
-	}
-
-	// Determine the resolver to use.
-	if err := cc.parseTargetAndFindResolver(); err != nil {
-		return nil, err
-	}
-	if err = cc.determineAuthority(); err != nil {
-		return nil, err
-	}
-
-	if cc.dopts.scChan != nil {
-		// Blocking wait for the initial service config.
-		select {
-		case sc, ok := <-cc.dopts.scChan:
-			if ok {
-				cc.sc = &sc
-				cc.safeConfigSelector.UpdateConfigSelector(&defaultConfigSelector{&sc})
-			}
-		case <-ctx.Done():
-			return nil, ctx.Err()
-		}
-	}
-	if cc.dopts.scChan != nil {
-		go cc.scWatcher()
-	}
-
-	// This creates the name resolver, load balancer, blocking picker etc.
-	if err := cc.exitIdleMode(); err != nil {
-		return nil, err
-	}
-
-	// Configure idleness support with configured idle timeout or default idle
-	// timeout duration. Idleness can be explicitly disabled by the user, by
-	// setting the dial option to 0.
-	cc.idlenessMgr = idle.NewManager(idle.ManagerOptions{Enforcer: (*idler)(cc), Timeout: cc.dopts.idleTimeout, Logger: logger})
-
-	// Return early for non-blocking dials.
-	if !cc.dopts.block {
-		return cc, nil
-	}
-
 	// A blocking dial blocks until the clientConn is ready.
 	for {
 		s := cc.GetState()
@@ -320,8 +306,8 @@ func (cc *ClientConn) addTraceEvent(msg string) {
 
 type idler ClientConn
 
-func (i *idler) EnterIdleMode() error {
-	return (*ClientConn)(i).enterIdleMode()
+func (i *idler) EnterIdleMode() {
+	(*ClientConn)(i).enterIdleMode()
 }
 
 func (i *idler) ExitIdleMode() error {
@@ -329,117 +315,71 @@ func (i *idler) ExitIdleMode() error {
 }
 
 // exitIdleMode moves the channel out of idle mode by recreating the name
-// resolver and load balancer.
-func (cc *ClientConn) exitIdleMode() error {
+// resolver and load balancer.  This should never be called directly; use
+// cc.idlenessMgr.ExitIdleMode instead.
+func (cc *ClientConn) exitIdleMode() (err error) {
 	cc.mu.Lock()
 	if cc.conns == nil {
 		cc.mu.Unlock()
 		return errConnClosing
 	}
-	if cc.idlenessState != ccIdlenessStateIdle {
-		channelz.Infof(logger, cc.channelzID, "ClientConn asked to exit idle mode, current mode is %v", cc.idlenessState)
-		cc.mu.Unlock()
-		return nil
-	}
-
-	defer func() {
-		// When Close() and exitIdleMode() race against each other, one of the
-		// following two can happen:
-		// - Close() wins the race and runs first. exitIdleMode() runs after, and
-		//   sees that the ClientConn is already closed and hence returns early.
-		// - exitIdleMode() wins the race and runs first and recreates the balancer
-		//   and releases the lock before recreating the resolver. If Close() runs
-		//   in this window, it will wait for exitIdleMode to complete.
-		//
-		// We achieve this synchronization using the below condition variable.
-		cc.mu.Lock()
-		cc.idlenessState = ccIdlenessStateActive
-		cc.exitIdleCond.Signal()
-		cc.mu.Unlock()
-	}()
-
-	cc.idlenessState = ccIdlenessStateExitingIdle
-	exitedIdle := false
-	if cc.blockingpicker == nil {
-		cc.blockingpicker = newPickerWrapper(cc.dopts.copts.StatsHandlers)
-	} else {
-		cc.blockingpicker.exitIdleMode()
-		exitedIdle = true
-	}
-
-	var credsClone credentials.TransportCredentials
-	if creds := cc.dopts.copts.TransportCredentials; creds != nil {
-		credsClone = creds.Clone()
-	}
-	if cc.balancerWrapper == nil {
-		cc.balancerWrapper = newCCBalancerWrapper(cc, balancer.BuildOptions{
-			DialCreds:        credsClone,
-			CredsBundle:      cc.dopts.copts.CredsBundle,
-			Dialer:           cc.dopts.copts.Dialer,
-			Authority:        cc.authority,
-			CustomUserAgent:  cc.dopts.copts.UserAgent,
-			ChannelzParentID: cc.channelzID,
-			Target:           cc.parsedTarget,
-		})
-	} else {
-		cc.balancerWrapper.exitIdleMode()
-	}
-	cc.firstResolveEvent = grpcsync.NewEvent()
 	cc.mu.Unlock()
 
 	// This needs to be called without cc.mu because this builds a new resolver
-	// which might update state or report error inline which needs to be handled
-	// by cc.updateResolverState() which also grabs cc.mu.
-	if err := cc.initResolverWrapper(credsClone); err != nil {
+	// which might update state or report error inline, which would then need to
+	// acquire cc.mu.
+	if err := cc.resolverWrapper.start(); err != nil {
 		return err
 	}
 
-	if exitedIdle {
-		cc.addTraceEvent("exiting idle mode")
-	}
+	cc.addTraceEvent("exiting idle mode")
 	return nil
 }
 
+// initIdleStateLocked initializes common state to how it should be while idle.
+func (cc *ClientConn) initIdleStateLocked() {
+	cc.resolverWrapper = newCCResolverWrapper(cc)
+	cc.balancerWrapper = newCCBalancerWrapper(cc)
+	cc.firstResolveEvent = grpcsync.NewEvent()
+	// cc.conns == nil is a proxy for the ClientConn being closed. So, instead
+	// of setting it to nil here, we recreate the map. This also means that we
+	// don't have to do this when exiting idle mode.
+	cc.conns = make(map[*addrConn]struct{})
+}
+
 // enterIdleMode puts the channel in idle mode, and as part of it shuts down the
-// name resolver, load balancer and any subchannels.
-func (cc *ClientConn) enterIdleMode() error {
+// name resolver, load balancer, and any subchannels.  This should never be
+// called directly; use cc.idlenessMgr.EnterIdleMode instead.
+func (cc *ClientConn) enterIdleMode() {
 	cc.mu.Lock()
-	defer cc.mu.Unlock()
 
 	if cc.conns == nil {
-		return ErrClientConnClosing
-	}
-	if cc.idlenessState != ccIdlenessStateActive {
-		channelz.Warningf(logger, cc.channelzID, "ClientConn asked to enter idle mode, current mode is %v", cc.idlenessState)
-		return nil
+		cc.mu.Unlock()
+		return
 	}
 
-	// cc.conns == nil is a proxy for the ClientConn being closed. So, instead
-	// of setting it to nil here, we recreate the map. This also means that we
-	// don't have to do this when exiting idle mode.
 	conns := cc.conns
-	cc.conns = make(map[*addrConn]struct{})
 
-	// TODO: Currently, we close the resolver wrapper upon entering idle mode
-	// and create a new one upon exiting idle mode. This means that the
-	// `cc.resolverWrapper` field would be overwritten everytime we exit idle
-	// mode. While this means that we need to hold `cc.mu` when accessing
-	// `cc.resolverWrapper`, it makes the code simpler in the wrapper. We should
-	// try to do the same for the balancer and picker wrappers too.
-	cc.resolverWrapper.close()
-	cc.blockingpicker.enterIdleMode()
-	cc.balancerWrapper.enterIdleMode()
+	rWrapper := cc.resolverWrapper
+	rWrapper.close()
+	cc.pickerWrapper.reset()
+	bWrapper := cc.balancerWrapper
+	bWrapper.close()
 	cc.csMgr.updateState(connectivity.Idle)
-	cc.idlenessState = ccIdlenessStateIdle
 	cc.addTraceEvent("entering idle mode")
 
-	go func() {
-		for ac := range conns {
-			ac.tearDown(errConnIdling)
-		}
-	}()
+	cc.initIdleStateLocked()
 
-	return nil
+	cc.mu.Unlock()
+
+	// Block until the name resolver and LB policy are closed.
+	<-rWrapper.serializer.Done()
+	<-bWrapper.serializer.Done()
+
+	// Close all subchannels after the LB policy is closed.
+	for ac := range conns {
+		ac.tearDown(errConnIdling)
+	}
 }
 
 // validateTransportCredentials performs a series of checks on the configured
@@ -649,66 +589,35 @@ type ClientConn struct {
 	dopts           dialOptions          // Default and user specified dial options.
 	channelzID      *channelz.Identifier // Channelz identifier for the channel.
 	resolverBuilder resolver.Builder     // See parseTargetAndFindResolver().
-	balancerWrapper *ccBalancerWrapper   // Uses gracefulswitch.balancer underneath.
-	idlenessMgr     idle.Manager
+	idlenessMgr     *idle.Manager
 
 	// The following provide their own synchronization, and therefore don't
 	// require cc.mu to be held to access them.
 	csMgr              *connectivityStateManager
-	blockingpicker     *pickerWrapper
+	pickerWrapper      *pickerWrapper
 	safeConfigSelector iresolver.SafeConfigSelector
 	czData             *channelzData
 	retryThrottler     atomic.Value // Updated from service config.
 
-	// firstResolveEvent is used to track whether the name resolver sent us at
-	// least one update. RPCs block on this event.
-	firstResolveEvent *grpcsync.Event
-
 	// mu protects the following fields.
 	// TODO: split mu so the same mutex isn't used for everything.
 	mu              sync.RWMutex
-	resolverWrapper *ccResolverWrapper         // Initialized in Dial; cleared in Close.
+	resolverWrapper *ccResolverWrapper         // Always recreated whenever entering idle to simplify Close.
+	balancerWrapper *ccBalancerWrapper         // Always recreated whenever entering idle to simplify Close.
 	sc              *ServiceConfig             // Latest service config received from the resolver.
 	conns           map[*addrConn]struct{}     // Set to nil on close.
 	mkp             keepalive.ClientParameters // May be updated upon receipt of a GoAway.
-	idlenessState   ccIdlenessState            // Tracks idleness state of the channel.
-	exitIdleCond    *sync.Cond                 // Signalled when channel exits idle.
+	// firstResolveEvent is used to track whether the name resolver sent us at
+	// least one update. RPCs block on this event.  May be accessed without mu
+	// if we know we cannot be asked to enter idle mode while accessing it (e.g.
+	// when the idle manager has already been closed, or if we are already
+	// entering idle mode).
+	firstResolveEvent *grpcsync.Event
 
 	lceMu               sync.Mutex // protects lastConnectionError
 	lastConnectionError error
 }
 
-// ccIdlenessState tracks the idleness state of the channel.
-//
-// Channels start off in `active` and move to `idle` after a period of
-// inactivity. When moving back to `active` upon an incoming RPC, they
-// transition through `exiting_idle`. This state is useful for synchronization
-// with Close().
-//
-// This state tracking is mostly for self-protection. The idlenessManager is
-// expected to keep track of the state as well, and is expected not to call into
-// the ClientConn unnecessarily.
-type ccIdlenessState int8
-
-const (
-	ccIdlenessStateActive ccIdlenessState = iota
-	ccIdlenessStateIdle
-	ccIdlenessStateExitingIdle
-)
-
-func (s ccIdlenessState) String() string {
-	switch s {
-	case ccIdlenessStateActive:
-		return "active"
-	case ccIdlenessStateIdle:
-		return "idle"
-	case ccIdlenessStateExitingIdle:
-		return "exitingIdle"
-	default:
-		return "unknown"
-	}
-}
-
 // WaitForStateChange waits until the connectivity.State of ClientConn changes from sourceState or
 // ctx expires. A true value is returned in former case and false in latter.
 //
@@ -748,29 +657,15 @@ func (cc *ClientConn) GetState() connectivity.State {
 // Notice: This API is EXPERIMENTAL and may be changed or removed in a later
 // release.
 func (cc *ClientConn) Connect() {
-	cc.exitIdleMode()
+	if err := cc.idlenessMgr.ExitIdleMode(); err != nil {
+		cc.addTraceEvent(err.Error())
+		return
+	}
 	// If the ClientConn was not in idle mode, we need to call ExitIdle on the
 	// LB policy so that connections can be created.
-	cc.balancerWrapper.exitIdleMode()
-}
-
-func (cc *ClientConn) scWatcher() {
-	for {
-		select {
-		case sc, ok := <-cc.dopts.scChan:
-			if !ok {
-				return
-			}
-			cc.mu.Lock()
-			// TODO: load balance policy runtime change is ignored.
-			// We may revisit this decision in the future.
-			cc.sc = &sc
-			cc.safeConfigSelector.UpdateConfigSelector(&defaultConfigSelector{&sc})
-			cc.mu.Unlock()
-		case <-cc.ctx.Done():
-			return
-		}
-	}
+	cc.mu.Lock()
+	cc.balancerWrapper.exitIdle()
+	cc.mu.Unlock()
 }
 
 // waitForResolvedAddrs blocks until the resolver has provided addresses or the
@@ -804,11 +699,11 @@ func init() {
 	internal.SubscribeToConnectivityStateChanges = func(cc *ClientConn, s grpcsync.Subscriber) func() {
 		return cc.csMgr.pubSub.Subscribe(s)
 	}
-	internal.EnterIdleModeForTesting = func(cc *ClientConn) error {
-		return cc.enterIdleMode()
+	internal.EnterIdleModeForTesting = func(cc *ClientConn) {
+		cc.idlenessMgr.EnterIdleModeForTesting()
 	}
 	internal.ExitIdleModeForTesting = func(cc *ClientConn) error {
-		return cc.exitIdleMode()
+		return cc.idlenessMgr.ExitIdleMode()
 	}
 }
 
@@ -824,9 +719,8 @@ func (cc *ClientConn) maybeApplyDefaultServiceConfig(addrs []resolver.Address) {
 	}
 }
 
-func (cc *ClientConn) updateResolverState(s resolver.State, err error) error {
+func (cc *ClientConn) updateResolverStateAndUnlock(s resolver.State, err error) error {
 	defer cc.firstResolveEvent.Fire()
-	cc.mu.Lock()
 	// Check if the ClientConn is already closed. Some fields (e.g.
 	// balancerWrapper) are set to nil when closing the ClientConn, and could
 	// cause nil pointer panic if we don't have this check.
@@ -872,7 +766,7 @@ func (cc *ClientConn) updateResolverState(s resolver.State, err error) error {
 			if cc.sc == nil {
 				// Apply the failing LB only if we haven't received valid service config
 				// from the name resolver in the past.
-				cc.applyFailingLB(s.ServiceConfig)
+				cc.applyFailingLBLocked(s.ServiceConfig)
 				cc.mu.Unlock()
 				return ret
 			}
@@ -894,15 +788,13 @@ func (cc *ClientConn) updateResolverState(s resolver.State, err error) error {
 	return ret
 }
 
-// applyFailingLB is akin to configuring an LB policy on the channel which
+// applyFailingLBLocked is akin to configuring an LB policy on the channel which
 // always fails RPCs. Here, an actual LB policy is not configured, but an always
 // erroring picker is configured, which returns errors with information about
 // what was invalid in the received service config. A config selector with no
 // service config is configured, and the connectivity state of the channel is
 // set to TransientFailure.
-//
-// Caller must hold cc.mu.
-func (cc *ClientConn) applyFailingLB(sc *serviceconfig.ParseResult) {
+func (cc *ClientConn) applyFailingLBLocked(sc *serviceconfig.ParseResult) {
 	var err error
 	if sc.Err != nil {
 		err = status.Errorf(codes.Unavailable, "error parsing service config: %v", sc.Err)
@@ -910,14 +802,10 @@ func (cc *ClientConn) applyFailingLB(sc *serviceconfig.ParseResult) {
 		err = status.Errorf(codes.Unavailable, "illegal service config type: %T", sc.Config)
 	}
 	cc.safeConfigSelector.UpdateConfigSelector(&defaultConfigSelector{nil})
-	cc.blockingpicker.updatePicker(base.NewErrPicker(err))
+	cc.pickerWrapper.updatePicker(base.NewErrPicker(err))
 	cc.csMgr.updateState(connectivity.TransientFailure)
 }
 
-func (cc *ClientConn) handleSubConnStateChange(sc balancer.SubConn, s connectivity.State, err error) {
-	cc.balancerWrapper.updateSubConnState(sc, s, err)
-}
-
 // Makes a copy of the input addresses slice and clears out the balancer
 // attributes field. Addresses are passed during subconn creation and address
 // update operations. In both cases, we will clear the balancer attributes by
@@ -932,10 +820,14 @@ func copyAddressesWithoutBalancerAttributes(in []resolver.Address) []resolver.Ad
 	return out
 }
 
-// newAddrConn creates an addrConn for addrs and adds it to cc.conns.
+// newAddrConnLocked creates an addrConn for addrs and adds it to cc.conns.
 //
 // Caller needs to make sure len(addrs) > 0.
-func (cc *ClientConn) newAddrConn(addrs []resolver.Address, opts balancer.NewSubConnOptions) (*addrConn, error) {
+func (cc *ClientConn) newAddrConnLocked(addrs []resolver.Address, opts balancer.NewSubConnOptions) (*addrConn, error) {
+	if cc.conns == nil {
+		return nil, ErrClientConnClosing
+	}
+
 	ac := &addrConn{
 		state:        connectivity.Idle,
 		cc:           cc,
@@ -947,12 +839,6 @@ func (cc *ClientConn) newAddrConn(addrs []resolver.Address, opts balancer.NewSub
 		stateChan:    make(chan struct{}),
 	}
 	ac.ctx, ac.cancel = context.WithCancel(cc.ctx)
-	// Track ac in cc. This needs to be done before any getTransport(...) is called.
-	cc.mu.Lock()
-	defer cc.mu.Unlock()
-	if cc.conns == nil {
-		return nil, ErrClientConnClosing
-	}
 
 	var err error
 	ac.channelzID, err = channelz.RegisterSubChannel(ac, cc.channelzID, "")
@@ -968,6 +854,7 @@ func (cc *ClientConn) newAddrConn(addrs []resolver.Address, opts balancer.NewSub
 		},
 	})
 
+	// Track ac in cc. This needs to be done before any getTransport(...) is called.
 	cc.conns[ac] = struct{}{}
 	return ac, nil
 }
@@ -1174,7 +1061,7 @@ func (cc *ClientConn) healthCheckConfig() *healthCheckConfig {
 }
 
 func (cc *ClientConn) getTransport(ctx context.Context, failfast bool, method string) (transport.ClientTransport, balancer.PickResult, error) {
-	return cc.blockingpicker.pick(ctx, failfast, balancer.PickInfo{
+	return cc.pickerWrapper.pick(ctx, failfast, balancer.PickInfo{
 		Ctx:            ctx,
 		FullMethodName: method,
 	})
@@ -1216,12 +1103,12 @@ func (cc *ClientConn) applyServiceConfigAndBalancer(sc *ServiceConfig, configSel
 
 func (cc *ClientConn) resolveNow(o resolver.ResolveNowOptions) {
 	cc.mu.RLock()
-	r := cc.resolverWrapper
+	cc.resolverWrapper.resolveNow(o)
 	cc.mu.RUnlock()
-	if r == nil {
-		return
-	}
-	go r.resolveNow(o)
+}
+
+func (cc *ClientConn) resolveNowLocked(o resolver.ResolveNowOptions) {
+	cc.resolverWrapper.resolveNow(o)
 }
 
 // ResetConnectBackoff wakes up all subchannels in transient failure and causes
@@ -1253,40 +1140,32 @@ func (cc *ClientConn) Close() error {
 		<-cc.csMgr.pubSub.Done()
 	}()
 
+	// Prevent calls to enter/exit idle immediately, and ensure we are not
+	// currently entering/exiting idle mode.
+	cc.idlenessMgr.Close()
+
 	cc.mu.Lock()
 	if cc.conns == nil {
 		cc.mu.Unlock()
 		return ErrClientConnClosing
 	}
 
-	for cc.idlenessState == ccIdlenessStateExitingIdle {
-		cc.exitIdleCond.Wait()
-	}
-
 	conns := cc.conns
 	cc.conns = nil
 	cc.csMgr.updateState(connectivity.Shutdown)
 
-	pWrapper := cc.blockingpicker
-	rWrapper := cc.resolverWrapper
-	bWrapper := cc.balancerWrapper
-	idlenessMgr := cc.idlenessMgr
+	// We can safely unlock and continue to access all fields now as
+	// cc.conns==nil, preventing any further operations on cc.
 	cc.mu.Unlock()
 
+	cc.resolverWrapper.close()
 	// The order of closing matters here since the balancer wrapper assumes the
 	// picker is closed before it is closed.
-	if pWrapper != nil {
-		pWrapper.close()
-	}
-	if bWrapper != nil {
-		bWrapper.close()
-	}
-	if rWrapper != nil {
-		rWrapper.close()
-	}
-	if idlenessMgr != nil {
-		idlenessMgr.Close()
-	}
+	cc.pickerWrapper.close()
+	cc.balancerWrapper.close()
+
+	<-cc.resolverWrapper.serializer.Done()
+	<-cc.balancerWrapper.serializer.Done()
 
 	for ac := range conns {
 		ac.tearDown(ErrClientConnClosing)
@@ -1307,7 +1186,7 @@ type addrConn struct {
 
 	cc     *ClientConn
 	dopts  dialOptions
-	acbw   balancer.SubConn
+	acbw   *acBalancerWrapper
 	scopts balancer.NewSubConnOptions
 
 	// transport is set when there's a viable transport (note: ac state may not be READY as LB channel
@@ -1345,7 +1224,7 @@ func (ac *addrConn) updateConnectivityState(s connectivity.State, lastErr error)
 	} else {
 		channelz.Infof(logger, ac.channelzID, "Subchannel Connectivity change to %v, last error: %s", s, lastErr)
 	}
-	ac.cc.handleSubConnStateChange(ac.acbw, s, lastErr)
+	ac.acbw.updateState(s, lastErr)
 }
 
 // adjustParams updates parameters used to create transports upon
@@ -1849,7 +1728,7 @@ func (cc *ClientConn) parseTargetAndFindResolver() error {
 	if err != nil {
 		channelz.Infof(logger, cc.channelzID, "dial target %q parse failed: %v", cc.target, err)
 	} else {
-		channelz.Infof(logger, cc.channelzID, "parsed dial target is: %+v", parsedTarget)
+		channelz.Infof(logger, cc.channelzID, "parsed dial target is: %#v", parsedTarget)
 		rb = cc.getResolver(parsedTarget.URL.Scheme)
 		if rb != nil {
 			cc.parsedTarget = parsedTarget
@@ -1981,58 +1860,17 @@ func (cc *ClientConn) determineAuthority() error {
 	}
 
 	endpoint := cc.parsedTarget.Endpoint()
-	target := cc.target
-	switch {
-	case authorityFromDialOption != "":
+	if authorityFromDialOption != "" {
 		cc.authority = authorityFromDialOption
-	case authorityFromCreds != "":
+	} else if authorityFromCreds != "" {
 		cc.authority = authorityFromCreds
-	case strings.HasPrefix(target, "unix:") || strings.HasPrefix(target, "unix-abstract:"):
-		// TODO: remove when the unix resolver implements optional interface to
-		// return channel authority.
-		cc.authority = "localhost"
-	case strings.HasPrefix(endpoint, ":"):
+	} else if auth, ok := cc.resolverBuilder.(resolver.AuthorityOverrider); ok {
+		cc.authority = auth.OverrideAuthority(cc.parsedTarget)
+	} else if strings.HasPrefix(endpoint, ":") {
 		cc.authority = "localhost" + endpoint
-	default:
-		// TODO: Define an optional interface on the resolver builder to return
-		// the channel authority given the user's dial target. For resolvers
-		// which don't implement this interface, we will use the endpoint from
-		// "scheme://authority/endpoint" as the default authority.
-		// Escape the endpoint to handle use cases where the endpoint
-		// might not be a valid authority by default.
-		// For example an endpoint which has multiple paths like
-		// 'a/b/c', which is not a valid authority by default.
+	} else {
 		cc.authority = encodeAuthority(endpoint)
 	}
 	channelz.Infof(logger, cc.channelzID, "Channel authority set to %q", cc.authority)
 	return nil
 }
-
-// initResolverWrapper creates a ccResolverWrapper, which builds the name
-// resolver. This method grabs the lock to assign the newly built resolver
-// wrapper to the cc.resolverWrapper field.
-func (cc *ClientConn) initResolverWrapper(creds credentials.TransportCredentials) error {
-	rw, err := newCCResolverWrapper(cc, ccResolverWrapperOpts{
-		target:  cc.parsedTarget,
-		builder: cc.resolverBuilder,
-		bOpts: resolver.BuildOptions{
-			DisableServiceConfig: cc.dopts.disableServiceConfig,
-			DialCreds:            creds,
-			CredsBundle:          cc.dopts.copts.CredsBundle,
-			Dialer:               cc.dopts.copts.Dialer,
-		},
-		channelzID: cc.channelzID,
-	})
-	if err != nil {
-		return fmt.Errorf("failed to build resolver: %v", err)
-	}
-	// Resolver implementations may report state update or error inline when
-	// built (or right after), and this is handled in cc.updateResolverState.
-	// Also, an error from the resolver might lead to a re-resolution request
-	// from the balancer, which is handled in resolveNow() where
-	// `cc.resolverWrapper` is accessed. Hence, we need to hold the lock here.
-	cc.mu.Lock()
-	cc.resolverWrapper = rw
-	cc.mu.Unlock()
-	return nil
-}
diff --git a/vendor/google.golang.org/grpc/codes/codes.go b/vendor/google.golang.org/grpc/codes/codes.go
index 11b106182db..08476ad1fe1 100644
--- a/vendor/google.golang.org/grpc/codes/codes.go
+++ b/vendor/google.golang.org/grpc/codes/codes.go
@@ -25,7 +25,13 @@ import (
 	"strconv"
 )
 
-// A Code is an unsigned 32-bit error code as defined in the gRPC spec.
+// A Code is a status code defined according to the [gRPC documentation].
+//
+// Only the codes defined as consts in this package are valid codes. Do not use
+// other code values.  Behavior of other codes is implementation-specific and
+// interoperability between implementations is not guaranteed.
+//
+// [gRPC documentation]: https://github.com/grpc/grpc/blob/master/doc/statuscodes.md
 type Code uint32
 
 const (
diff --git a/vendor/google.golang.org/grpc/credentials/tls.go b/vendor/google.golang.org/grpc/credentials/tls.go
index 877b7cd21af..5dafd34edf9 100644
--- a/vendor/google.golang.org/grpc/credentials/tls.go
+++ b/vendor/google.golang.org/grpc/credentials/tls.go
@@ -44,10 +44,25 @@ func (t TLSInfo) AuthType() string {
 	return "tls"
 }
 
+// cipherSuiteLookup returns the string version of a TLS cipher suite ID.
+func cipherSuiteLookup(cipherSuiteID uint16) string {
+	for _, s := range tls.CipherSuites() {
+		if s.ID == cipherSuiteID {
+			return s.Name
+		}
+	}
+	for _, s := range tls.InsecureCipherSuites() {
+		if s.ID == cipherSuiteID {
+			return s.Name
+		}
+	}
+	return fmt.Sprintf("unknown ID: %v", cipherSuiteID)
+}
+
 // GetSecurityValue returns security info requested by channelz.
 func (t TLSInfo) GetSecurityValue() ChannelzSecurityValue {
 	v := &TLSChannelzSecurityValue{
-		StandardName: cipherSuiteLookup[t.State.CipherSuite],
+		StandardName: cipherSuiteLookup(t.State.CipherSuite),
 	}
 	// Currently there's no way to get LocalCertificate info from tls package.
 	if len(t.State.PeerCertificates) > 0 {
@@ -138,10 +153,39 @@ func (c *tlsCreds) OverrideServerName(serverNameOverride string) error {
 	return nil
 }
 
+// The following cipher suites are forbidden for use with HTTP/2 by
+// https://datatracker.ietf.org/doc/html/rfc7540#appendix-A
+var tls12ForbiddenCipherSuites = map[uint16]struct{}{
+	tls.TLS_RSA_WITH_AES_128_CBC_SHA:         {},
+	tls.TLS_RSA_WITH_AES_256_CBC_SHA:         {},
+	tls.TLS_RSA_WITH_AES_128_GCM_SHA256:      {},
+	tls.TLS_RSA_WITH_AES_256_GCM_SHA384:      {},
+	tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: {},
+	tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: {},
+	tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA:   {},
+	tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA:   {},
+}
+
 // NewTLS uses c to construct a TransportCredentials based on TLS.
 func NewTLS(c *tls.Config) TransportCredentials {
 	tc := &tlsCreds{credinternal.CloneTLSConfig(c)}
 	tc.config.NextProtos = credinternal.AppendH2ToNextProtos(tc.config.NextProtos)
+	// If the user did not configure a MinVersion and did not configure a
+	// MaxVersion < 1.2, use MinVersion=1.2, which is required by
+	// https://datatracker.ietf.org/doc/html/rfc7540#section-9.2
+	if tc.config.MinVersion == 0 && (tc.config.MaxVersion == 0 || tc.config.MaxVersion >= tls.VersionTLS12) {
+		tc.config.MinVersion = tls.VersionTLS12
+	}
+	// If the user did not configure CipherSuites, use all "secure" cipher
+	// suites reported by the TLS package, but remove some explicitly forbidden
+	// by https://datatracker.ietf.org/doc/html/rfc7540#appendix-A
+	if tc.config.CipherSuites == nil {
+		for _, cs := range tls.CipherSuites() {
+			if _, ok := tls12ForbiddenCipherSuites[cs.ID]; !ok {
+				tc.config.CipherSuites = append(tc.config.CipherSuites, cs.ID)
+			}
+		}
+	}
 	return tc
 }
 
@@ -205,32 +249,3 @@ type TLSChannelzSecurityValue struct {
 	LocalCertificate  []byte
 	RemoteCertificate []byte
 }
-
-var cipherSuiteLookup = map[uint16]string{
-	tls.TLS_RSA_WITH_RC4_128_SHA:                "TLS_RSA_WITH_RC4_128_SHA",
-	tls.TLS_RSA_WITH_3DES_EDE_CBC_SHA:           "TLS_RSA_WITH_3DES_EDE_CBC_SHA",
-	tls.TLS_RSA_WITH_AES_128_CBC_SHA:            "TLS_RSA_WITH_AES_128_CBC_SHA",
-	tls.TLS_RSA_WITH_AES_256_CBC_SHA:            "TLS_RSA_WITH_AES_256_CBC_SHA",
-	tls.TLS_RSA_WITH_AES_128_GCM_SHA256:         "TLS_RSA_WITH_AES_128_GCM_SHA256",
-	tls.TLS_RSA_WITH_AES_256_GCM_SHA384:         "TLS_RSA_WITH_AES_256_GCM_SHA384",
-	tls.TLS_ECDHE_ECDSA_WITH_RC4_128_SHA:        "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
-	tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA:    "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
-	tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA:    "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
-	tls.TLS_ECDHE_RSA_WITH_RC4_128_SHA:          "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
-	tls.TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA:     "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
-	tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA:      "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
-	tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA:      "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
-	tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256:   "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
-	tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
-	tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:   "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
-	tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
-	tls.TLS_FALLBACK_SCSV:                       "TLS_FALLBACK_SCSV",
-	tls.TLS_RSA_WITH_AES_128_CBC_SHA256:         "TLS_RSA_WITH_AES_128_CBC_SHA256",
-	tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
-	tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256:   "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
-	tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305:    "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
-	tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305:  "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
-	tls.TLS_AES_128_GCM_SHA256:                  "TLS_AES_128_GCM_SHA256",
-	tls.TLS_AES_256_GCM_SHA384:                  "TLS_AES_256_GCM_SHA384",
-	tls.TLS_CHACHA20_POLY1305_SHA256:            "TLS_CHACHA20_POLY1305_SHA256",
-}
diff --git a/vendor/google.golang.org/grpc/dialoptions.go b/vendor/google.golang.org/grpc/dialoptions.go
index cfc9fd85e8d..ba242618040 100644
--- a/vendor/google.golang.org/grpc/dialoptions.go
+++ b/vendor/google.golang.org/grpc/dialoptions.go
@@ -46,6 +46,7 @@ func init() {
 	internal.WithBinaryLogger = withBinaryLogger
 	internal.JoinDialOptions = newJoinDialOption
 	internal.DisableGlobalDialOptions = newDisableGlobalDialOptions
+	internal.WithRecvBufferPool = withRecvBufferPool
 }
 
 // dialOptions configure a Dial call. dialOptions are set by the DialOption
@@ -63,7 +64,6 @@ type dialOptions struct {
 	block                       bool
 	returnLastError             bool
 	timeout                     time.Duration
-	scChan                      <-chan ServiceConfig
 	authority                   string
 	binaryLogger                binarylog.Logger
 	copts                       transport.ConnectOptions
@@ -250,19 +250,6 @@ func WithDecompressor(dc Decompressor) DialOption {
 	})
 }
 
-// WithServiceConfig returns a DialOption which has a channel to read the
-// service configuration.
-//
-// Deprecated: service config should be received through name resolver or via
-// WithDefaultServiceConfig, as specified at
-// https://github.com/grpc/grpc/blob/master/doc/service_config.md.  Will be
-// removed in a future 1.x release.
-func WithServiceConfig(c <-chan ServiceConfig) DialOption {
-	return newFuncDialOption(func(o *dialOptions) {
-		o.scChan = c
-	})
-}
-
 // WithConnectParams configures the ClientConn to use the provided ConnectParams
 // for creating and maintaining connections to servers.
 //
@@ -413,6 +400,17 @@ func WithTimeout(d time.Duration) DialOption {
 // connections. If FailOnNonTempDialError() is set to true, and an error is
 // returned by f, gRPC checks the error's Temporary() method to decide if it
 // should try to reconnect to the network address.
+//
+// Note: All supported releases of Go (as of December 2023) override the OS
+// defaults for TCP keepalive time and interval to 15s. To enable TCP keepalive
+// with OS defaults for keepalive time and interval, use a net.Dialer that sets
+// the KeepAlive field to a negative value, and sets the SO_KEEPALIVE socket
+// option to true from the Control field. For a concrete example of how to do
+// this, see internal.NetDialerWithTCPKeepalive().
+//
+// For more information, please see [issue 23459] in the Go github repo.
+//
+// [issue 23459]: https://github.com/golang/go/issues/23459
 func WithContextDialer(f func(context.Context, string) (net.Conn, error)) DialOption {
 	return newFuncDialOption(func(o *dialOptions) {
 		o.copts.Dialer = f
@@ -487,7 +485,7 @@ func FailOnNonTempDialError(f bool) DialOption {
 // the RPCs.
 func WithUserAgent(s string) DialOption {
 	return newFuncDialOption(func(o *dialOptions) {
-		o.copts.UserAgent = s
+		o.copts.UserAgent = s + " " + grpcUA
 	})
 }
 
@@ -637,14 +635,16 @@ func withHealthCheckFunc(f internal.HealthChecker) DialOption {
 
 func defaultDialOptions() dialOptions {
 	return dialOptions{
-		healthCheckFunc: internal.HealthCheckFunc,
 		copts: transport.ConnectOptions{
-			WriteBufferSize: defaultWriteBufSize,
 			ReadBufferSize:  defaultReadBufSize,
+			WriteBufferSize: defaultWriteBufSize,
 			UseProxy:        true,
+			UserAgent:       grpcUA,
 		},
-		recvBufferPool: nopBufferPool{},
-		idleTimeout:    30 * time.Minute,
+		bs:              internalbackoff.DefaultExponential,
+		healthCheckFunc: internal.HealthCheckFunc,
+		idleTimeout:     30 * time.Minute,
+		recvBufferPool:  nopBufferPool{},
 	}
 }
 
@@ -705,11 +705,13 @@ func WithIdleTimeout(d time.Duration) DialOption {
 // options are used: WithStatsHandler, EnableTracing, or binary logging. In such
 // cases, the shared buffer pool will be ignored.
 //
-// # Experimental
-//
-// Notice: This API is EXPERIMENTAL and may be changed or removed in a
-// later release.
+// Deprecated: use experimental.WithRecvBufferPool instead.  Will be deleted in
+// v1.60.0 or later.
 func WithRecvBufferPool(bufferPool SharedBufferPool) DialOption {
+	return withRecvBufferPool(bufferPool)
+}
+
+func withRecvBufferPool(bufferPool SharedBufferPool) DialOption {
 	return newFuncDialOption(func(o *dialOptions) {
 		o.recvBufferPool = bufferPool
 	})
diff --git a/vendor/google.golang.org/grpc/internal/buffer/unbounded.go b/vendor/google.golang.org/grpc/internal/buffer/unbounded.go
index 4399c3df495..11f91668ac9 100644
--- a/vendor/google.golang.org/grpc/internal/buffer/unbounded.go
+++ b/vendor/google.golang.org/grpc/internal/buffer/unbounded.go
@@ -18,7 +18,10 @@
 // Package buffer provides an implementation of an unbounded buffer.
 package buffer
 
-import "sync"
+import (
+	"errors"
+	"sync"
+)
 
 // Unbounded is an implementation of an unbounded buffer which does not use
 // extra goroutines. This is typically used for passing updates from one entity
@@ -36,6 +39,7 @@ import "sync"
 type Unbounded struct {
 	c       chan any
 	closed  bool
+	closing bool
 	mu      sync.Mutex
 	backlog []any
 }
@@ -45,32 +49,32 @@ func NewUnbounded() *Unbounded {
 	return &Unbounded{c: make(chan any, 1)}
 }
 
+var errBufferClosed = errors.New("Put called on closed buffer.Unbounded")
+
 // Put adds t to the unbounded buffer.
-func (b *Unbounded) Put(t any) {
+func (b *Unbounded) Put(t any) error {
 	b.mu.Lock()
 	defer b.mu.Unlock()
-	if b.closed {
-		return
+	if b.closing {
+		return errBufferClosed
 	}
 	if len(b.backlog) == 0 {
 		select {
 		case b.c <- t:
-			return
+			return nil
 		default:
 		}
 	}
 	b.backlog = append(b.backlog, t)
+	return nil
 }
 
-// Load sends the earliest buffered data, if any, onto the read channel
-// returned by Get(). Users are expected to call this every time they read a
+// Load sends the earliest buffered data, if any, onto the read channel returned
+// by Get(). Users are expected to call this every time they successfully read a
 // value from the read channel.
 func (b *Unbounded) Load() {
 	b.mu.Lock()
 	defer b.mu.Unlock()
-	if b.closed {
-		return
-	}
 	if len(b.backlog) > 0 {
 		select {
 		case b.c <- b.backlog[0]:
@@ -78,6 +82,8 @@ func (b *Unbounded) Load() {
 			b.backlog = b.backlog[1:]
 		default:
 		}
+	} else if b.closing && !b.closed {
+		close(b.c)
 	}
 }
 
@@ -88,18 +94,23 @@ func (b *Unbounded) Load() {
 // send the next buffered value onto the channel if there is any.
 //
 // If the unbounded buffer is closed, the read channel returned by this method
-// is closed.
+// is closed after all data is drained.
 func (b *Unbounded) Get() <-chan any {
 	return b.c
 }
 
-// Close closes the unbounded buffer.
+// Close closes the unbounded buffer. No subsequent data may be Put(), and the
+// channel returned from Get() will be closed after all the data is read and
+// Load() is called for the final time.
 func (b *Unbounded) Close() {
 	b.mu.Lock()
 	defer b.mu.Unlock()
-	if b.closed {
+	if b.closing {
 		return
 	}
-	b.closed = true
-	close(b.c)
+	b.closing = true
+	if len(b.backlog) == 0 {
+		b.closed = true
+		close(b.c)
+	}
 }
diff --git a/vendor/google.golang.org/grpc/internal/channelz/funcs.go b/vendor/google.golang.org/grpc/internal/channelz/funcs.go
index 5395e77529c..fc094f3441b 100644
--- a/vendor/google.golang.org/grpc/internal/channelz/funcs.go
+++ b/vendor/google.golang.org/grpc/internal/channelz/funcs.go
@@ -31,6 +31,7 @@ import (
 	"time"
 
 	"google.golang.org/grpc/grpclog"
+	"google.golang.org/grpc/internal"
 )
 
 const (
@@ -58,6 +59,12 @@ func TurnOn() {
 	}
 }
 
+func init() {
+	internal.ChannelzTurnOffForTesting = func() {
+		atomic.StoreInt32(&curState, 0)
+	}
+}
+
 // IsOn returns whether channelz data collection is on.
 func IsOn() bool {
 	return atomic.LoadInt32(&curState) == 1
diff --git a/vendor/google.golang.org/grpc/internal/envconfig/envconfig.go b/vendor/google.golang.org/grpc/internal/envconfig/envconfig.go
index 3cf10ddfbd4..685a3cb41b1 100644
--- a/vendor/google.golang.org/grpc/internal/envconfig/envconfig.go
+++ b/vendor/google.golang.org/grpc/internal/envconfig/envconfig.go
@@ -36,9 +36,6 @@ var (
 	// "GRPC_RING_HASH_CAP".  This does not override the default bounds
 	// checking which NACKs configs specifying ring sizes > 8*1024*1024 (~8M).
 	RingHashCap = uint64FromEnv("GRPC_RING_HASH_CAP", 4096, 1, 8*1024*1024)
-	// PickFirstLBConfig is set if we should support configuration of the
-	// pick_first LB policy.
-	PickFirstLBConfig = boolFromEnv("GRPC_EXPERIMENTAL_PICKFIRST_LB_CONFIG", true)
 	// LeastRequestLB is set if we should support the least_request_experimental
 	// LB policy, which can be enabled by setting the environment variable
 	// "GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST" to "true".
diff --git a/vendor/google.golang.org/grpc/internal/envconfig/xds.go b/vendor/google.golang.org/grpc/internal/envconfig/xds.go
index 02b4b6a1c10..29f234acb1b 100644
--- a/vendor/google.golang.org/grpc/internal/envconfig/xds.go
+++ b/vendor/google.golang.org/grpc/internal/envconfig/xds.go
@@ -50,46 +50,7 @@ var (
 	//
 	// When both bootstrap FileName and FileContent are set, FileName is used.
 	XDSBootstrapFileContent = os.Getenv(XDSBootstrapFileContentEnv)
-	// XDSRingHash indicates whether ring hash support is enabled, which can be
-	// disabled by setting the environment variable
-	// "GRPC_XDS_EXPERIMENTAL_ENABLE_RING_HASH" to "false".
-	XDSRingHash = boolFromEnv("GRPC_XDS_EXPERIMENTAL_ENABLE_RING_HASH", true)
-	// XDSClientSideSecurity is used to control processing of security
-	// configuration on the client-side.
-	//
-	// Note that there is no env var protection for the server-side because we
-	// have a brand new API on the server-side and users explicitly need to use
-	// the new API to get security integration on the server.
-	XDSClientSideSecurity = boolFromEnv("GRPC_XDS_EXPERIMENTAL_SECURITY_SUPPORT", true)
-	// XDSAggregateAndDNS indicates whether processing of aggregated cluster and
-	// DNS cluster is enabled, which can be disabled by setting the environment
-	// variable "GRPC_XDS_EXPERIMENTAL_ENABLE_AGGREGATE_AND_LOGICAL_DNS_CLUSTER"
-	// to "false".
-	XDSAggregateAndDNS = boolFromEnv("GRPC_XDS_EXPERIMENTAL_ENABLE_AGGREGATE_AND_LOGICAL_DNS_CLUSTER", true)
-
-	// XDSRBAC indicates whether xDS configured RBAC HTTP Filter is enabled,
-	// which can be disabled by setting the environment variable
-	// "GRPC_XDS_EXPERIMENTAL_RBAC" to "false".
-	XDSRBAC = boolFromEnv("GRPC_XDS_EXPERIMENTAL_RBAC", true)
-	// XDSOutlierDetection indicates whether outlier detection support is
-	// enabled, which can be disabled by setting the environment variable
-	// "GRPC_EXPERIMENTAL_ENABLE_OUTLIER_DETECTION" to "false".
-	XDSOutlierDetection = boolFromEnv("GRPC_EXPERIMENTAL_ENABLE_OUTLIER_DETECTION", true)
-	// XDSFederation indicates whether federation support is enabled, which can
-	// be enabled by setting the environment variable
-	// "GRPC_EXPERIMENTAL_XDS_FEDERATION" to "true".
-	XDSFederation = boolFromEnv("GRPC_EXPERIMENTAL_XDS_FEDERATION", true)
-
-	// XDSRLS indicates whether processing of Cluster Specifier plugins and
-	// support for the RLS CLuster Specifier is enabled, which can be disabled by
-	// setting the environment variable "GRPC_EXPERIMENTAL_XDS_RLS_LB" to
-	// "false".
-	XDSRLS = boolFromEnv("GRPC_EXPERIMENTAL_XDS_RLS_LB", true)
 
 	// C2PResolverTestOnlyTrafficDirectorURI is the TD URI for testing.
 	C2PResolverTestOnlyTrafficDirectorURI = os.Getenv("GRPC_TEST_ONLY_GOOGLE_C2P_RESOLVER_TRAFFIC_DIRECTOR_URI")
-	// XDSCustomLBPolicy indicates whether Custom LB Policies are enabled, which
-	// can be disabled by setting the environment variable
-	// "GRPC_EXPERIMENTAL_XDS_CUSTOM_LB_CONFIG" to "false".
-	XDSCustomLBPolicy = boolFromEnv("GRPC_EXPERIMENTAL_XDS_CUSTOM_LB_CONFIG", true)
 )
diff --git a/vendor/google.golang.org/grpc/internal/experimental.go b/vendor/google.golang.org/grpc/internal/experimental.go
new file mode 100644
index 00000000000..7f7044e1731
--- /dev/null
+++ b/vendor/google.golang.org/grpc/internal/experimental.go
@@ -0,0 +1,28 @@
+/*
+ * Copyright 2023 gRPC authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ */
+
+package internal
+
+var (
+	// WithRecvBufferPool is implemented by the grpc package and returns a dial
+	// option to configure a shared buffer pool for a grpc.ClientConn.
+	WithRecvBufferPool any // func (grpc.SharedBufferPool) grpc.DialOption
+
+	// RecvBufferPool is implemented by the grpc package and returns a server
+	// option to configure a shared buffer pool for a grpc.Server.
+	RecvBufferPool any // func (grpc.SharedBufferPool) grpc.ServerOption
+)
diff --git a/vendor/google.golang.org/grpc/internal/grpcsync/callback_serializer.go b/vendor/google.golang.org/grpc/internal/grpcsync/callback_serializer.go
index 900917dbe6c..f7f40a16ace 100644
--- a/vendor/google.golang.org/grpc/internal/grpcsync/callback_serializer.go
+++ b/vendor/google.golang.org/grpc/internal/grpcsync/callback_serializer.go
@@ -20,7 +20,6 @@ package grpcsync
 
 import (
 	"context"
-	"sync"
 
 	"google.golang.org/grpc/internal/buffer"
 )
@@ -38,8 +37,6 @@ type CallbackSerializer struct {
 	done chan struct{}
 
 	callbacks *buffer.Unbounded
-	closedMu  sync.Mutex
-	closed    bool
 }
 
 // NewCallbackSerializer returns a new CallbackSerializer instance. The provided
@@ -65,56 +62,34 @@ func NewCallbackSerializer(ctx context.Context) *CallbackSerializer {
 // callbacks to be executed by the serializer. It is not possible to add
 // callbacks once the context passed to NewCallbackSerializer is cancelled.
 func (cs *CallbackSerializer) Schedule(f func(ctx context.Context)) bool {
-	cs.closedMu.Lock()
-	defer cs.closedMu.Unlock()
-
-	if cs.closed {
-		return false
-	}
-	cs.callbacks.Put(f)
-	return true
+	return cs.callbacks.Put(f) == nil
 }
 
 func (cs *CallbackSerializer) run(ctx context.Context) {
-	var backlog []func(context.Context)
-
 	defer close(cs.done)
+
+	// TODO: when Go 1.21 is the oldest supported version, this loop and Close
+	// can be replaced with:
+	//
+	// context.AfterFunc(ctx, cs.callbacks.Close)
 	for ctx.Err() == nil {
 		select {
 		case <-ctx.Done():
 			// Do nothing here. Next iteration of the for loop will not happen,
 			// since ctx.Err() would be non-nil.
-		case callback, ok := <-cs.callbacks.Get():
-			if !ok {
-				return
-			}
+		case cb := <-cs.callbacks.Get():
 			cs.callbacks.Load()
-			callback.(func(ctx context.Context))(ctx)
+			cb.(func(context.Context))(ctx)
 		}
 	}
 
-	// Fetch pending callbacks if any, and execute them before returning from
-	// this method and closing cs.done.
-	cs.closedMu.Lock()
-	cs.closed = true
-	backlog = cs.fetchPendingCallbacks()
+	// Close the buffer to prevent new callbacks from being added.
 	cs.callbacks.Close()
-	cs.closedMu.Unlock()
-	for _, b := range backlog {
-		b(ctx)
-	}
-}
 
-func (cs *CallbackSerializer) fetchPendingCallbacks() []func(context.Context) {
-	var backlog []func(context.Context)
-	for {
-		select {
-		case b := <-cs.callbacks.Get():
-			backlog = append(backlog, b.(func(context.Context)))
-			cs.callbacks.Load()
-		default:
-			return backlog
-		}
+	// Run all pending callbacks.
+	for cb := range cs.callbacks.Get() {
+		cs.callbacks.Load()
+		cb.(func(context.Context))(ctx)
 	}
 }
 
diff --git a/vendor/google.golang.org/grpc/internal/idle/idle.go b/vendor/google.golang.org/grpc/internal/idle/idle.go
index 6c272476e5e..fe49cb74c55 100644
--- a/vendor/google.golang.org/grpc/internal/idle/idle.go
+++ b/vendor/google.golang.org/grpc/internal/idle/idle.go
@@ -26,8 +26,6 @@ import (
 	"sync"
 	"sync/atomic"
 	"time"
-
-	"google.golang.org/grpc/grpclog"
 )
 
 // For overriding in unit tests.
@@ -39,27 +37,12 @@ var timeAfterFunc = func(d time.Duration, f func()) *time.Timer {
 // and exit from idle mode.
 type Enforcer interface {
 	ExitIdleMode() error
-	EnterIdleMode() error
-}
-
-// Manager defines the functionality required to track RPC activity on a
-// channel.
-type Manager interface {
-	OnCallBegin() error
-	OnCallEnd()
-	Close()
+	EnterIdleMode()
 }
 
-type noopManager struct{}
-
-func (noopManager) OnCallBegin() error { return nil }
-func (noopManager) OnCallEnd()         {}
-func (noopManager) Close()             {}
-
-// manager implements the Manager interface. It uses atomic operations to
-// synchronize access to shared state and a mutex to guarantee mutual exclusion
-// in a critical section.
-type manager struct {
+// Manager implements idleness detection and calls the configured Enforcer to
+// enter/exit idle mode when appropriate.  Must be created by NewManager.
+type Manager struct {
 	// State accessed atomically.
 	lastCallEndTime           int64 // Unix timestamp in nanos; time when the most recent RPC completed.
 	activeCallsCount          int32 // Count of active RPCs; -math.MaxInt32 means channel is idle or is trying to get there.
@@ -69,8 +52,7 @@ type manager struct {
 	// Can be accessed without atomics or mutex since these are set at creation
 	// time and read-only after that.
 	enforcer Enforcer // Functionality provided by grpc.ClientConn.
-	timeout  int64    // Idle timeout duration nanos stored as an int64.
-	logger   grpclog.LoggerV2
+	timeout  time.Duration
 
 	// idleMu is used to guarantee mutual exclusion in two scenarios:
 	// - Opposing intentions:
@@ -88,57 +70,48 @@ type manager struct {
 	timer        *time.Timer
 }
 
-// ManagerOptions is a collection of options used by
-// NewManager.
-type ManagerOptions struct {
-	Enforcer Enforcer
-	Timeout  time.Duration
-	Logger   grpclog.LoggerV2
+// NewManager creates a new idleness manager implementation for the
+// given idle timeout.  It begins in idle mode.
+func NewManager(enforcer Enforcer, timeout time.Duration) *Manager {
+	return &Manager{
+		enforcer:         enforcer,
+		timeout:          timeout,
+		actuallyIdle:     true,
+		activeCallsCount: -math.MaxInt32,
+	}
 }
 
-// NewManager creates a new idleness manager implementation for the
-// given idle timeout.
-func NewManager(opts ManagerOptions) Manager {
-	if opts.Timeout == 0 {
-		return noopManager{}
+// resetIdleTimerLocked resets the idle timer to the given duration.  Called
+// when exiting idle mode or when the timer fires and we need to reset it.
+func (m *Manager) resetIdleTimerLocked(d time.Duration) {
+	if m.isClosed() || m.timeout == 0 || m.actuallyIdle {
+		return
 	}
 
-	m := &manager{
-		enforcer: opts.Enforcer,
-		timeout:  int64(opts.Timeout),
-		logger:   opts.Logger,
+	// It is safe to ignore the return value from Reset() because this method is
+	// only ever called from the timer callback or when exiting idle mode.
+	if m.timer != nil {
+		m.timer.Stop()
 	}
-	m.timer = timeAfterFunc(opts.Timeout, m.handleIdleTimeout)
-	return m
+	m.timer = timeAfterFunc(d, m.handleIdleTimeout)
 }
 
-// resetIdleTimer resets the idle timer to the given duration. This method
-// should only be called from the timer callback.
-func (m *manager) resetIdleTimer(d time.Duration) {
+func (m *Manager) resetIdleTimer(d time.Duration) {
 	m.idleMu.Lock()
 	defer m.idleMu.Unlock()
-
-	if m.timer == nil {
-		// Only close sets timer to nil. We are done.
-		return
-	}
-
-	// It is safe to ignore the return value from Reset() because this method is
-	// only ever called from the timer callback, which means the timer has
-	// already fired.
-	m.timer.Reset(d)
+	m.resetIdleTimerLocked(d)
 }
 
 // handleIdleTimeout is the timer callback that is invoked upon expiry of the
 // configured idle timeout. The channel is considered inactive if there are no
 // ongoing calls and no RPC activity since the last time the timer fired.
-func (m *manager) handleIdleTimeout() {
+func (m *Manager) handleIdleTimeout() {
 	if m.isClosed() {
 		return
 	}
 
 	if atomic.LoadInt32(&m.activeCallsCount) > 0 {
-		m.resetIdleTimer(time.Duration(m.timeout))
+		m.resetIdleTimer(m.timeout)
 		return
 	}
 
@@ -148,24 +121,12 @@ func (m *manager) handleIdleTimeout() {
 		// Set the timer to fire after a duration of idle timeout, calculated
 		// from the time the most recent RPC completed.
 		atomic.StoreInt32(&m.activeSinceLastTimerCheck, 0)
-		m.resetIdleTimer(time.Duration(atomic.LoadInt64(&m.lastCallEndTime) + m.timeout - time.Now().UnixNano()))
+		m.resetIdleTimer(time.Duration(atomic.LoadInt64(&m.lastCallEndTime)-time.Now().UnixNano()) + m.timeout)
 		return
 	}
 
-	// This CAS operation is extremely likely to succeed given that there has
-	// been no activity since the last time we were here.  Setting the
-	// activeCallsCount to -math.MaxInt32 indicates to OnCallBegin() that the
-	// channel is either in idle mode or is trying to get there.
-	if !atomic.CompareAndSwapInt32(&m.activeCallsCount, 0, -math.MaxInt32) {
-		// This CAS operation can fail if an RPC started after we checked for
-		// activity at the top of this method, or one was ongoing from before
-		// the last time we were here. In both case, reset the timer and return.
-		m.resetIdleTimer(time.Duration(m.timeout))
-		return
-	}
-
-	// Now that we've set the active calls count to -math.MaxInt32, it's time to
-	// actually move to idle mode.
+	// Now that we've checked that there has been no activity, attempt to enter
+	// idle mode, which is very likely to succeed.
 	if m.tryEnterIdleMode() {
 		// Successfully entered idle mode. No timer needed until we exit idle.
 		return
@@ -174,8 +135,7 @@ func (m *manager) handleIdleTimeout() {
 	// Failed to enter idle mode due to a concurrent RPC that kept the channel
 	// active, or because of an error from the channel. Undo the attempt to
 	// enter idle, and reset the timer to try again later.
-	atomic.AddInt32(&m.activeCallsCount, math.MaxInt32)
-	m.resetIdleTimer(time.Duration(m.timeout))
+	m.resetIdleTimer(m.timeout)
 }
 
 // tryEnterIdleMode instructs the channel to enter idle mode. But before
@@ -185,36 +145,49 @@ func (m *manager) handleIdleTimeout() {
 // Return value indicates whether or not the channel moved to idle mode.
 //
 // Holds idleMu which ensures mutual exclusion with exitIdleMode.
-func (m *manager) tryEnterIdleMode() bool {
+func (m *Manager) tryEnterIdleMode() bool {
+	// Setting the activeCallsCount to -math.MaxInt32 indicates to OnCallBegin()
+	// that the channel is either in idle mode or is trying to get there.
+	if !atomic.CompareAndSwapInt32(&m.activeCallsCount, 0, -math.MaxInt32) {
+		// This CAS operation can fail if an RPC started after we checked for
+		// activity in the timer handler, or one was ongoing from before the
+		// last time the timer fired, or if a test is attempting to enter idle
+		// mode without checking.  In all cases, abort going into idle mode.
+		return false
+	}
+	// N.B. if we fail to enter idle mode after this, we must re-add
+	// math.MaxInt32 to m.activeCallsCount.
+
 	m.idleMu.Lock()
 	defer m.idleMu.Unlock()
 
 	if atomic.LoadInt32(&m.activeCallsCount) != -math.MaxInt32 {
 		// We raced and lost to a new RPC. Very rare, but stop entering idle.
+		atomic.AddInt32(&m.activeCallsCount, math.MaxInt32)
 		return false
 	}
 	if atomic.LoadInt32(&m.activeSinceLastTimerCheck) == 1 {
-		// An very short RPC could have come in (and also finished) after we
+		// A very short RPC could have come in (and also finished) after we
 		// checked for calls count and activity in handleIdleTimeout(), but
 		// before the CAS operation. So, we need to check for activity again.
+		atomic.AddInt32(&m.activeCallsCount, math.MaxInt32)
 		return false
 	}
 
-	// No new RPCs have come in since we last set the active calls count value
-	// -math.MaxInt32 in the timer callback. And since we have the lock, it is
-	// safe to enter idle mode now.
-	if err := m.enforcer.EnterIdleMode(); err != nil {
-		m.logger.Errorf("Failed to enter idle mode: %v", err)
-		return false
-	}
-
-	// Successfully entered idle mode.
+	// No new RPCs have come in since we set the active calls count value to
+	// -math.MaxInt32. And since we have the lock, it is safe to enter idle mode
+	// unconditionally now.
+	m.enforcer.EnterIdleMode()
 	m.actuallyIdle = true
 	return true
 }
 
+func (m *Manager) EnterIdleModeForTesting() {
+	m.tryEnterIdleMode()
+}
+
 // OnCallBegin is invoked at the start of every RPC.
-func (m *manager) OnCallBegin() error {
+func (m *Manager) OnCallBegin() error {
 	if m.isClosed() {
 		return nil
 	}
@@ -227,7 +200,7 @@ func (m *manager) OnCallBegin() error {
 
 	// Channel is either in idle mode or is in the process of moving to idle
 	// mode. Attempt to exit idle mode to allow this RPC.
-	if err := m.exitIdleMode(); err != nil {
+	if err := m.ExitIdleMode(); err != nil {
 		// Undo the increment to calls count, and return an error causing the
 		// RPC to fail.
 		atomic.AddInt32(&m.activeCallsCount, -1)
@@ -238,28 +211,30 @@ func (m *manager) OnCallBegin() error {
 	return nil
 }
 
-// exitIdleMode instructs the channel to exit idle mode.
-//
-// Holds idleMu which ensures mutual exclusion with tryEnterIdleMode.
-func (m *manager) exitIdleMode() error {
+// ExitIdleMode instructs m to call the enforcer's ExitIdleMode and update m's
+// internal state.
+func (m *Manager) ExitIdleMode() error {
+	// Holds idleMu which ensures mutual exclusion with tryEnterIdleMode.
 	m.idleMu.Lock()
 	defer m.idleMu.Unlock()
 
-	if !m.actuallyIdle {
-		// This can happen in two scenarios:
+	if m.isClosed() || !m.actuallyIdle {
+		// This can happen in three scenarios:
 		// - handleIdleTimeout() set the calls count to -math.MaxInt32 and called
 		//   tryEnterIdleMode(). But before the latter could grab the lock, an RPC
 		//   came in and OnCallBegin() noticed that the calls count is negative.
 		// - Channel is in idle mode, and multiple new RPCs come in at the same
 		//   time, all of them notice a negative calls count in OnCallBegin and get
 		//   here. The first one to get the lock would got the channel to exit idle.
+		// - Channel is not in idle mode, and the user calls Connect which calls
+		//   m.ExitIdleMode.
 		//
-		// Either way, nothing to do here.
+		// In any case, there is nothing to do here.
 		return nil
 	}
 
 	if err := m.enforcer.ExitIdleMode(); err != nil {
-		return fmt.Errorf("channel failed to exit idle mode: %v", err)
+		return fmt.Errorf("failed to exit idle mode: %w", err)
 	}
 
 	// Undo the idle entry process. This also respects any new RPC attempts.
@@ -267,12 +242,12 @@ func (m *manager) exitIdleMode() error {
 	m.actuallyIdle = false
 
 	// Start a new timer to fire after the configured idle timeout.
-	m.timer = timeAfterFunc(time.Duration(m.timeout), m.handleIdleTimeout)
+	m.resetIdleTimerLocked(m.timeout)
 	return nil
 }
 
 // OnCallEnd is invoked at the end of every RPC.
-func (m *manager) OnCallEnd() {
+func (m *Manager) OnCallEnd() {
 	if m.isClosed() {
 		return
 	}
@@ -287,15 +262,17 @@ func (m *manager) OnCallEnd() {
 	atomic.AddInt32(&m.activeCallsCount, -1)
 }
 
-func (m *manager) isClosed() bool {
+func (m *Manager) isClosed() bool {
 	return atomic.LoadInt32(&m.closed) == 1
 }
 
-func (m *manager) Close() {
+func (m *Manager) Close() {
 	atomic.StoreInt32(&m.closed, 1)
 
 	m.idleMu.Lock()
-	m.timer.Stop()
-	m.timer = nil
+	if m.timer != nil {
+		m.timer.Stop()
+		m.timer = nil
+	}
 	m.idleMu.Unlock()
 }
diff --git a/vendor/google.golang.org/grpc/internal/internal.go b/vendor/google.golang.org/grpc/internal/internal.go
index 0d94c63e06e..6c7ea6a5336 100644
--- a/vendor/google.golang.org/grpc/internal/internal.go
+++ b/vendor/google.golang.org/grpc/internal/internal.go
@@ -57,7 +57,7 @@ var (
 	// GetXDSHandshakeInfoForTesting returns a pointer to the xds.HandshakeInfo
 	// stored in the passed in attributes. This is set by
 	// credentials/xds/xds.go.
-	GetXDSHandshakeInfoForTesting any // func (*attributes.Attributes) *xds.HandshakeInfo
+	GetXDSHandshakeInfoForTesting any // func (*attributes.Attributes) *unsafe.Pointer
 	// GetServerCredentials returns the transport credentials configured on a
 	// gRPC server. An xDS-enabled server needs to know what type of credentials
 	// is configured on the underlying gRPC server. This is set by server.go.
@@ -68,11 +68,11 @@ var (
 	// This is used in the 1.0 release of gcp/observability, and thus must not be
 	// deleted or changed.
 	CanonicalString any // func (codes.Code) string
-	// DrainServerTransports initiates a graceful close of existing connections
-	// on a gRPC server accepted on the provided listener address. An
-	// xDS-enabled server invokes this method on a grpc.Server when a particular
-	// listener moves to "not-serving" mode.
-	DrainServerTransports any // func(*grpc.Server, string)
+	// IsRegisteredMethod returns whether the passed in method is registered as
+	// a method on the server.
+	IsRegisteredMethod any // func(*grpc.Server, string) bool
+	// ServerFromContext returns the server from the context.
+	ServerFromContext any // func(context.Context) *grpc.Server
 	// AddGlobalServerOptions adds an array of ServerOption that will be
 	// effective globally for newly created servers. The priority will be: 1.
 	// user-provided; 2. this method; 3. default values.
@@ -177,10 +177,25 @@ var (
 	GRPCResolverSchemeExtraMetadata string = "xds"
 
 	// EnterIdleModeForTesting gets the ClientConn to enter IDLE mode.
-	EnterIdleModeForTesting any // func(*grpc.ClientConn) error
+	EnterIdleModeForTesting any // func(*grpc.ClientConn)
 
 	// ExitIdleModeForTesting gets the ClientConn to exit IDLE mode.
 	ExitIdleModeForTesting any // func(*grpc.ClientConn) error
+
+	ChannelzTurnOffForTesting func()
+
+	// TriggerXDSResourceNameNotFoundForTesting triggers the resource-not-found
+	// error for a given resource type and name. This is usually triggered when
+	// the associated watch timer fires. For testing purposes, having this
+	// function makes events more predictable than relying on timer events.
+	TriggerXDSResourceNameNotFoundForTesting any // func(func(xdsresource.Type, string), string, string) error
+
+	// TriggerXDSResourceNotFoundClient invokes the testing xDS Client singleton
+	// to invoke resource not found for a resource type name and resource name.
+	TriggerXDSResourceNameNotFoundClient any // func(string, string) error
+
+	// FromOutgoingContextRaw returns the un-merged, intermediary contents of metadata.rawMD.
+	FromOutgoingContextRaw any // func(context.Context) (metadata.MD, [][]string, bool)
 )
 
 // HealthChecker defines the signature of the client-side LB channel health checking function.
diff --git a/vendor/google.golang.org/grpc/internal/resolver/dns/dns_resolver.go b/vendor/google.golang.org/grpc/internal/resolver/dns/dns_resolver.go
index 99e1e5b36c8..b66dcb21327 100644
--- a/vendor/google.golang.org/grpc/internal/resolver/dns/dns_resolver.go
+++ b/vendor/google.golang.org/grpc/internal/resolver/dns/dns_resolver.go
@@ -23,7 +23,6 @@ package dns
 import (
 	"context"
 	"encoding/json"
-	"errors"
 	"fmt"
 	"net"
 	"os"
@@ -37,6 +36,7 @@ import (
 	"google.golang.org/grpc/internal/backoff"
 	"google.golang.org/grpc/internal/envconfig"
 	"google.golang.org/grpc/internal/grpcrand"
+	"google.golang.org/grpc/internal/resolver/dns/internal"
 	"google.golang.org/grpc/resolver"
 	"google.golang.org/grpc/serviceconfig"
 )
@@ -47,15 +47,11 @@ var EnableSRVLookups = false
 
 var logger = grpclog.Component("dns")
 
-// Globals to stub out in tests. TODO: Perhaps these two can be combined into a
-// single variable for testing the resolver?
-var (
-	newTimer           = time.NewTimer
-	newTimerDNSResRate = time.NewTimer
-)
-
 func init() {
 	resolver.Register(NewBuilder())
+	internal.TimeAfterFunc = time.After
+	internal.NewNetResolver = newNetResolver
+	internal.AddressDialer = addressDialer
 }
 
 const (
@@ -70,23 +66,6 @@ const (
 	txtAttribute = "grpc_config="
 )
 
-var (
-	errMissingAddr = errors.New("dns resolver: missing address")
-
-	// Addresses ending with a colon that is supposed to be the separator
-	// between host and port is not allowed.  E.g. "::" is a valid address as
-	// it is an IPv6 address (host only) and "[::]:" is invalid as it ends with
-	// a colon as the host and port separator
-	errEndsWithColon = errors.New("dns resolver: missing port after port-separator colon")
-)
-
-var (
-	defaultResolver netResolver = net.DefaultResolver
-	// To prevent excessive re-resolution, we enforce a rate limit on DNS
-	// resolution requests.
-	minDNSResRate = 30 * time.Second
-)
-
 var addressDialer = func(address string) func(context.Context, string, string) (net.Conn, error) {
 	return func(ctx context.Context, network, _ string) (net.Conn, error) {
 		var dialer net.Dialer
@@ -94,7 +73,11 @@ var addressDialer = func(address string) func(context.Context, string, string) (
 	}
 }
 
-var newNetResolver = func(authority string) (netResolver, error) {
+var newNetResolver = func(authority string) (internal.NetResolver, error) {
+	if authority == "" {
+		return net.DefaultResolver, nil
+	}
+
 	host, port, err := parseTarget(authority, defaultDNSSvrPort)
 	if err != nil {
 		return nil, err
@@ -104,7 +87,7 @@ var newNetResolver = func(authority string) (netResolver, error) {
 
 	return &net.Resolver{
 		PreferGo: true,
-		Dial:     addressDialer(authorityWithPort),
+		Dial:     internal.AddressDialer(authorityWithPort),
 	}, nil
 }
 
@@ -142,13 +125,9 @@ func (b *dnsBuilder) Build(target resolver.Target, cc resolver.ClientConn, opts
 		disableServiceConfig: opts.DisableServiceConfig,
 	}
 
-	if target.URL.Host == "" {
-		d.resolver = defaultResolver
-	} else {
-		d.resolver, err = newNetResolver(target.URL.Host)
-		if err != nil {
-			return nil, err
-		}
+	d.resolver, err = internal.NewNetResolver(target.URL.Host)
+	if err != nil {
+		return nil, err
 	}
 
 	d.wg.Add(1)
@@ -161,12 +140,6 @@ func (b *dnsBuilder) Scheme() string {
 	return "dns"
 }
 
-type netResolver interface {
-	LookupHost(ctx context.Context, host string) (addrs []string, err error)
-	LookupSRV(ctx context.Context, service, proto, name string) (cname string, addrs []*net.SRV, err error)
-	LookupTXT(ctx context.Context, name string) (txts []string, err error)
-}
-
 // deadResolver is a resolver that does nothing.
 type deadResolver struct{}
 
@@ -178,7 +151,7 @@ func (deadResolver) Close() {}
 type dnsResolver struct {
 	host     string
 	port     string
-	resolver netResolver
+	resolver internal.NetResolver
 	ctx      context.Context
 	cancel   context.CancelFunc
 	cc       resolver.ClientConn
@@ -223,29 +196,27 @@ func (d *dnsResolver) watcher() {
 			err = d.cc.UpdateState(*state)
 		}
 
-		var timer *time.Timer
+		var waitTime time.Duration
 		if err == nil {
 			// Success resolving, wait for the next ResolveNow. However, also wait 30
 			// seconds at the very least to prevent constantly re-resolving.
 			backoffIndex = 1
-			timer = newTimerDNSResRate(minDNSResRate)
+			waitTime = internal.MinResolutionRate
 			select {
 			case <-d.ctx.Done():
-				timer.Stop()
 				return
 			case <-d.rn:
 			}
 		} else {
 			// Poll on an error found in DNS Resolver or an error received from
 			// ClientConn.
-			timer = newTimer(backoff.DefaultExponential.Backoff(backoffIndex))
+			waitTime = backoff.DefaultExponential.Backoff(backoffIndex)
 			backoffIndex++
 		}
 		select {
 		case <-d.ctx.Done():
-			timer.Stop()
 			return
-		case <-timer.C:
+		case <-internal.TimeAfterFunc(waitTime):
 		}
 	}
 }
@@ -387,7 +358,7 @@ func formatIP(addr string) (addrIP string, ok bool) {
 // target: ":80" defaultPort: "443" returns host: "localhost", port: "80"
 func parseTarget(target, defaultPort string) (host, port string, err error) {
 	if target == "" {
-		return "", "", errMissingAddr
+		return "", "", internal.ErrMissingAddr
 	}
 	if ip := net.ParseIP(target); ip != nil {
 		// target is an IPv4 or IPv6(without brackets) address
@@ -397,7 +368,7 @@ func parseTarget(target, defaultPort string) (host, port string, err error) {
 		if port == "" {
 			// If the port field is empty (target ends with colon), e.g. "[::1]:",
 			// this is an error.
-			return "", "", errEndsWithColon
+			return "", "", internal.ErrEndsWithColon
 		}
 		// target has port, i.e ipv4-host:port, [ipv6-host]:port, host-name:port
 		if host == "" {
diff --git a/vendor/google.golang.org/grpc/internal/resolver/dns/internal/internal.go b/vendor/google.golang.org/grpc/internal/resolver/dns/internal/internal.go
new file mode 100644
index 00000000000..c7fc557d00c
--- /dev/null
+++ b/vendor/google.golang.org/grpc/internal/resolver/dns/internal/internal.go
@@ -0,0 +1,70 @@
+/*
+ *
+ * Copyright 2023 gRPC authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ */
+
+// Package internal contains functionality internal to the dns resolver package.
+package internal
+
+import (
+	"context"
+	"errors"
+	"net"
+	"time"
+)
+
+// NetResolver groups the methods on net.Resolver that are used by the DNS
+// resolver implementation. This allows the default net.Resolver instance to be
+// overidden from tests.
+type NetResolver interface {
+	LookupHost(ctx context.Context, host string) (addrs []string, err error)
+	LookupSRV(ctx context.Context, service, proto, name string) (cname string, addrs []*net.SRV, err error)
+	LookupTXT(ctx context.Context, name string) (txts []string, err error)
+}
+
+var (
+	// ErrMissingAddr is the error returned when building a DNS resolver when
+	// the provided target name is empty.
+	ErrMissingAddr = errors.New("dns resolver: missing address")
+
+	// ErrEndsWithColon is the error returned when building a DNS resolver when
+	// the provided target name ends with a colon that is supposed to be the
+	// separator between host and port.  E.g. "::" is a valid address as it is
+	// an IPv6 address (host only) and "[::]:" is invalid as it ends with a
+	// colon as the host and port separator
+	ErrEndsWithColon = errors.New("dns resolver: missing port after port-separator colon")
+)
+
+// The following vars are overridden from tests.
+var (
+	// MinResolutionRate is the minimum rate at which re-resolutions are
+	// allowed. This helps to prevent excessive re-resolution.
+	MinResolutionRate = 30 * time.Second
+
+	// TimeAfterFunc is used by the DNS resolver to wait for the given duration
+	// to elapse. In non-test code, this is implemented by time.After.  In test
+	// code, this can be used to control the amount of time the resolver is
+	// blocked waiting for the duration to elapse.
+	TimeAfterFunc func(time.Duration) <-chan time.Time
+
+	// NewNetResolver returns the net.Resolver instance for the given target.
+	NewNetResolver func(string) (NetResolver, error)
+
+	// AddressDialer is the dialer used to dial the DNS server. It accepts the
+	// Host portion of the URL corresponding to the user's dial target and
+	// returns a dial function.
+	AddressDialer func(address string) func(context.Context, string, string) (net.Conn, error)
+)
diff --git a/vendor/google.golang.org/grpc/internal/resolver/unix/unix.go b/vendor/google.golang.org/grpc/internal/resolver/unix/unix.go
index 16091168773..27cd81af9e5 100644
--- a/vendor/google.golang.org/grpc/internal/resolver/unix/unix.go
+++ b/vendor/google.golang.org/grpc/internal/resolver/unix/unix.go
@@ -61,6 +61,10 @@ func (b *builder) Scheme() string {
 	return b.scheme
 }
 
+func (b *builder) OverrideAuthority(resolver.Target) string {
+	return "localhost"
+}
+
 type nopResolver struct {
 }
 
diff --git a/vendor/google.golang.org/grpc/internal/tcp_keepalive_others.go b/vendor/google.golang.org/grpc/internal/tcp_keepalive_others.go
new file mode 100644
index 00000000000..4f347edd423
--- /dev/null
+++ b/vendor/google.golang.org/grpc/internal/tcp_keepalive_others.go
@@ -0,0 +1,29 @@
+//go:build !unix && !windows
+
+/*
+ * Copyright 2023 gRPC authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ */
+
+package internal
+
+import (
+	"net"
+)
+
+// NetDialerWithTCPKeepalive returns a vanilla net.Dialer on non-unix platforms.
+func NetDialerWithTCPKeepalive() *net.Dialer {
+	return &net.Dialer{}
+}
diff --git a/vendor/google.golang.org/grpc/internal/tcp_keepalive_unix.go b/vendor/google.golang.org/grpc/internal/tcp_keepalive_unix.go
new file mode 100644
index 00000000000..078137b7fd7
--- /dev/null
+++ b/vendor/google.golang.org/grpc/internal/tcp_keepalive_unix.go
@@ -0,0 +1,54 @@
+//go:build unix
+
+/*
+ * Copyright 2023 gRPC authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ */
+
+package internal
+
+import (
+	"net"
+	"syscall"
+	"time"
+
+	"golang.org/x/sys/unix"
+)
+
+// NetDialerWithTCPKeepalive returns a net.Dialer that enables TCP keepalives on
+// the underlying connection with OS default values for keepalive parameters.
+//
+// TODO: Once https://github.com/golang/go/issues/62254 lands, and the
+// appropriate Go version becomes less than our least supported Go version, we
+// should look into using the new API to make things more straightforward.
+func NetDialerWithTCPKeepalive() *net.Dialer {
+	return &net.Dialer{
+		// Setting a negative value here prevents the Go stdlib from overriding
+		// the values of TCP keepalive time and interval. It also prevents the
+		// Go stdlib from enabling TCP keepalives by default.
+		KeepAlive: time.Duration(-1),
+		// This method is called after the underlying network socket is created,
+		// but before dialing the socket (or calling its connect() method). The
+		// combination of unconditionally enabling TCP keepalives here, and
+		// disabling the overriding of TCP keepalive parameters by setting the
+		// KeepAlive field to a negative value above, results in OS defaults for
+		// the TCP keealive interval and time parameters.
+		Control: func(_, _ string, c syscall.RawConn) error {
+			return c.Control(func(fd uintptr) {
+				unix.SetsockoptInt(int(fd), unix.SOL_SOCKET, unix.SO_KEEPALIVE, 1)
+			})
+		},
+	}
+}
diff --git a/vendor/google.golang.org/grpc/internal/tcp_keepalive_windows.go b/vendor/google.golang.org/grpc/internal/tcp_keepalive_windows.go
new file mode 100644
index 00000000000..fd7d43a8907
--- /dev/null
+++ b/vendor/google.golang.org/grpc/internal/tcp_keepalive_windows.go
@@ -0,0 +1,54 @@
+//go:build windows
+
+/*
+ * Copyright 2023 gRPC authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ */
+
+package internal
+
+import (
+	"net"
+	"syscall"
+	"time"
+
+	"golang.org/x/sys/windows"
+)
+
+// NetDialerWithTCPKeepalive returns a net.Dialer that enables TCP keepalives on
+// the underlying connection with OS default values for keepalive parameters.
+//
+// TODO: Once https://github.com/golang/go/issues/62254 lands, and the
+// appropriate Go version becomes less than our least supported Go version, we
+// should look into using the new API to make things more straightforward.
+func NetDialerWithTCPKeepalive() *net.Dialer {
+	return &net.Dialer{
+		// Setting a negative value here prevents the Go stdlib from overriding
+		// the values of TCP keepalive time and interval. It also prevents the
+		// Go stdlib from enabling TCP keepalives by default.
+		KeepAlive: time.Duration(-1),
+		// This method is called after the underlying network socket is created,
+		// but before dialing the socket (or calling its connect() method). The
+		// combination of unconditionally enabling TCP keepalives here, and
+		// disabling the overriding of TCP keepalive parameters by setting the
+		// KeepAlive field to a negative value above, results in OS defaults for
+		// the TCP keealive interval and time parameters.
+		Control: func(_, _ string, c syscall.RawConn) error {
+			return c.Control(func(fd uintptr) {
+				windows.SetsockoptInt(windows.Handle(fd), windows.SOL_SOCKET, windows.SO_KEEPALIVE, 1)
+			})
+		},
+	}
+}
diff --git a/vendor/google.golang.org/grpc/internal/transport/handler_server.go b/vendor/google.golang.org/grpc/internal/transport/handler_server.go
index 17f7a21b5a9..a9d70e2a16c 100644
--- a/vendor/google.golang.org/grpc/internal/transport/handler_server.go
+++ b/vendor/google.golang.org/grpc/internal/transport/handler_server.go
@@ -75,11 +75,25 @@ func NewServerHandlerTransport(w http.ResponseWriter, r *http.Request, stats []s
 		return nil, errors.New(msg)
 	}
 
+	var localAddr net.Addr
+	if la := r.Context().Value(http.LocalAddrContextKey); la != nil {
+		localAddr, _ = la.(net.Addr)
+	}
+	var authInfo credentials.AuthInfo
+	if r.TLS != nil {
+		authInfo = credentials.TLSInfo{State: *r.TLS, CommonAuthInfo: credentials.CommonAuthInfo{SecurityLevel: credentials.PrivacyAndIntegrity}}
+	}
+	p := peer.Peer{
+		Addr:      strAddr(r.RemoteAddr),
+		LocalAddr: localAddr,
+		AuthInfo:  authInfo,
+	}
 	st := &serverHandlerTransport{
 		rw:             w,
 		req:            r,
 		closedCh:       make(chan struct{}),
 		writes:         make(chan func()),
+		peer:           p,
 		contentType:    contentType,
 		contentSubtype: contentSubtype,
 		stats:          stats,
@@ -134,6 +148,8 @@ type serverHandlerTransport struct {
 
 	headerMD metadata.MD
 
+	peer peer.Peer
+
 	closeOnce sync.Once
 	closedCh  chan struct{} // closed on Close
 
@@ -165,7 +181,13 @@ func (ht *serverHandlerTransport) Close(err error) {
 	})
 }
 
-func (ht *serverHandlerTransport) RemoteAddr() net.Addr { return strAddr(ht.req.RemoteAddr) }
+func (ht *serverHandlerTransport) Peer() *peer.Peer {
+	return &peer.Peer{
+		Addr:      ht.peer.Addr,
+		LocalAddr: ht.peer.LocalAddr,
+		AuthInfo:  ht.peer.AuthInfo,
+	}
+}
 
 // strAddr is a net.Addr backed by either a TCP "ip:port" string, or
 // the empty string if unknown.
@@ -347,10 +369,8 @@ func (ht *serverHandlerTransport) WriteHeader(s *Stream, md metadata.MD) error {
 	return err
 }
 
-func (ht *serverHandlerTransport) HandleStreams(startStream func(*Stream)) {
+func (ht *serverHandlerTransport) HandleStreams(ctx context.Context, startStream func(*Stream)) {
 	// With this transport type there will be exactly 1 stream: this HTTP request.
-
-	ctx := ht.req.Context()
 	var cancel context.CancelFunc
 	if ht.timeoutSet {
 		ctx, cancel = context.WithTimeout(ctx, ht.timeout)
@@ -370,34 +390,19 @@ func (ht *serverHandlerTransport) HandleStreams(startStream func(*Stream)) {
 		ht.Close(errors.New("request is done processing"))
 	}()
 
+	ctx = metadata.NewIncomingContext(ctx, ht.headerMD)
 	req := ht.req
-
 	s := &Stream{
-		id:             0, // irrelevant
-		requestRead:    func(int) {},
-		cancel:         cancel,
-		buf:            newRecvBuffer(),
-		st:             ht,
-		method:         req.URL.Path,
-		recvCompress:   req.Header.Get("grpc-encoding"),
-		contentSubtype: ht.contentSubtype,
-	}
-	pr := &peer.Peer{
-		Addr: ht.RemoteAddr(),
-	}
-	if req.TLS != nil {
-		pr.AuthInfo = credentials.TLSInfo{State: *req.TLS, CommonAuthInfo: credentials.CommonAuthInfo{SecurityLevel: credentials.PrivacyAndIntegrity}}
-	}
-	ctx = metadata.NewIncomingContext(ctx, ht.headerMD)
-	s.ctx = peer.NewContext(ctx, pr)
-	for _, sh := range ht.stats {
-		s.ctx = sh.TagRPC(s.ctx, &stats.RPCTagInfo{FullMethodName: s.method})
-		inHeader := &stats.InHeader{
-			FullMethod:  s.method,
-			RemoteAddr:  ht.RemoteAddr(),
-			Compression: s.recvCompress,
-		}
-		sh.HandleRPC(s.ctx, inHeader)
+		id:               0, // irrelevant
+		ctx:              ctx,
+		requestRead:      func(int) {},
+		cancel:           cancel,
+		buf:              newRecvBuffer(),
+		st:               ht,
+		method:           req.URL.Path,
+		recvCompress:     req.Header.Get("grpc-encoding"),
+		contentSubtype:   ht.contentSubtype,
+		headerWireLength: 0, // won't have access to header wire length until golang/go#18997.
 	}
 	s.trReader = &transportReader{
 		reader:        &recvBufferReader{ctx: s.ctx, ctxDone: s.ctx.Done(), recv: s.buf, freeBuffer: func(*bytes.Buffer) {}},
diff --git a/vendor/google.golang.org/grpc/internal/transport/http2_client.go b/vendor/google.golang.org/grpc/internal/transport/http2_client.go
index d6f5c49358b..c33ac5961b2 100644
--- a/vendor/google.golang.org/grpc/internal/transport/http2_client.go
+++ b/vendor/google.golang.org/grpc/internal/transport/http2_client.go
@@ -36,6 +36,7 @@ import (
 	"golang.org/x/net/http2/hpack"
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/credentials"
+	"google.golang.org/grpc/internal"
 	"google.golang.org/grpc/internal/channelz"
 	icredentials "google.golang.org/grpc/internal/credentials"
 	"google.golang.org/grpc/internal/grpclog"
@@ -43,7 +44,7 @@ import (
 	"google.golang.org/grpc/internal/grpcutil"
 	imetadata "google.golang.org/grpc/internal/metadata"
 	istatus "google.golang.org/grpc/internal/status"
-	"google.golang.org/grpc/internal/syscall"
+	isyscall "google.golang.org/grpc/internal/syscall"
 	"google.golang.org/grpc/internal/transport/networktype"
 	"google.golang.org/grpc/keepalive"
 	"google.golang.org/grpc/metadata"
@@ -58,6 +59,8 @@ import (
 // atomically.
 var clientConnectionCounter uint64
 
+var metadataFromOutgoingContextRaw = internal.FromOutgoingContextRaw.(func(context.Context) (metadata.MD, [][]string, bool))
+
 // http2Client implements the ClientTransport interface with HTTP2.
 type http2Client struct {
 	lastRead  int64 // Keep this field 64-bit aligned. Accessed atomically.
@@ -176,7 +179,7 @@ func dial(ctx context.Context, fn func(context.Context, string) (net.Conn, error
 	if networkType == "tcp" && useProxy {
 		return proxyDial(ctx, address, grpcUA)
 	}
-	return (&net.Dialer{}).DialContext(ctx, networkType, address)
+	return internal.NetDialerWithTCPKeepalive().DialContext(ctx, networkType, address)
 }
 
 func isTemporary(err error) bool {
@@ -262,7 +265,7 @@ func newHTTP2Client(connectCtx, ctx context.Context, addr resolver.Address, opts
 	}
 	keepaliveEnabled := false
 	if kp.Time != infinity {
-		if err = syscall.SetTCPUserTimeout(conn, kp.Timeout); err != nil {
+		if err = isyscall.SetTCPUserTimeout(conn, kp.Timeout); err != nil {
 			return nil, connectionErrorf(false, err, "transport: failed to set TCP_USER_TIMEOUT: %v", err)
 		}
 		keepaliveEnabled = true
@@ -493,8 +496,9 @@ func (t *http2Client) newStream(ctx context.Context, callHdr *CallHdr) *Stream {
 
 func (t *http2Client) getPeer() *peer.Peer {
 	return &peer.Peer{
-		Addr:     t.remoteAddr,
-		AuthInfo: t.authInfo, // Can be nil
+		Addr:      t.remoteAddr,
+		AuthInfo:  t.authInfo, // Can be nil
+		LocalAddr: t.localAddr,
 	}
 }
 
@@ -566,7 +570,7 @@ func (t *http2Client) createHeaderFields(ctx context.Context, callHdr *CallHdr)
 		headerFields = append(headerFields, hpack.HeaderField{Name: "grpc-trace-bin", Value: encodeBinHeader(b)})
 	}
 
-	if md, added, ok := metadata.FromOutgoingContextRaw(ctx); ok {
+	if md, added, ok := metadataFromOutgoingContextRaw(ctx); ok {
 		var k string
 		for k, vv := range md {
 			// HTTP doesn't allow you to set pseudoheaders after non pseudoheaders were set.
@@ -1321,10 +1325,8 @@ func (t *http2Client) handleGoAway(f *http2.GoAwayFrame) {
 	for streamID, stream := range t.activeStreams {
 		if streamID > id && streamID <= upperLimit {
 			// The stream was unprocessed by the server.
-			if streamID > id && streamID <= upperLimit {
-				atomic.StoreUint32(&stream.unprocessed, 1)
-				streamsToClose = append(streamsToClose, stream)
-			}
+			atomic.StoreUint32(&stream.unprocessed, 1)
+			streamsToClose = append(streamsToClose, stream)
 		}
 	}
 	t.mu.Unlock()
diff --git a/vendor/google.golang.org/grpc/internal/transport/http2_server.go b/vendor/google.golang.org/grpc/internal/transport/http2_server.go
index 6fa1eb41992..f6bac0e8a00 100644
--- a/vendor/google.golang.org/grpc/internal/transport/http2_server.go
+++ b/vendor/google.golang.org/grpc/internal/transport/http2_server.go
@@ -68,18 +68,15 @@ var serverConnectionCounter uint64
 
 // http2Server implements the ServerTransport interface with HTTP2.
 type http2Server struct {
-	lastRead    int64 // Keep this field 64-bit aligned. Accessed atomically.
-	ctx         context.Context
-	done        chan struct{}
-	conn        net.Conn
-	loopy       *loopyWriter
-	readerDone  chan struct{} // sync point to enable testing.
-	writerDone  chan struct{} // sync point to enable testing.
-	remoteAddr  net.Addr
-	localAddr   net.Addr
-	authInfo    credentials.AuthInfo // auth info about the connection
-	inTapHandle tap.ServerInHandle
-	framer      *framer
+	lastRead        int64 // Keep this field 64-bit aligned. Accessed atomically.
+	done            chan struct{}
+	conn            net.Conn
+	loopy           *loopyWriter
+	readerDone      chan struct{} // sync point to enable testing.
+	loopyWriterDone chan struct{}
+	peer            peer.Peer
+	inTapHandle     tap.ServerInHandle
+	framer          *framer
 	// The max number of concurrent streams.
 	maxStreams uint32
 	// controlBuf delivers all the control related tasks (e.g., window
@@ -243,16 +240,18 @@ func NewServerTransport(conn net.Conn, config *ServerConfig) (_ ServerTransport,
 	}
 
 	done := make(chan struct{})
+	peer := peer.Peer{
+		Addr:      conn.RemoteAddr(),
+		LocalAddr: conn.LocalAddr(),
+		AuthInfo:  authInfo,
+	}
 	t := &http2Server{
-		ctx:               setConnection(context.Background(), rawConn),
 		done:              done,
 		conn:              conn,
-		remoteAddr:        conn.RemoteAddr(),
-		localAddr:         conn.LocalAddr(),
-		authInfo:          authInfo,
+		peer:              peer,
 		framer:            framer,
 		readerDone:        make(chan struct{}),
-		writerDone:        make(chan struct{}),
+		loopyWriterDone:   make(chan struct{}),
 		maxStreams:        config.MaxStreams,
 		inTapHandle:       config.InTapHandle,
 		fc:                &trInFlow{limit: uint32(icwz)},
@@ -267,8 +266,6 @@ func NewServerTransport(conn net.Conn, config *ServerConfig) (_ ServerTransport,
 		bufferPool:        newBufferPool(),
 	}
 	t.logger = prefixLoggerForServerTransport(t)
-	// Add peer information to the http2server context.
-	t.ctx = peer.NewContext(t.ctx, t.getPeer())
 
 	t.controlBuf = newControlBuffer(t.done)
 	if dynamicWindow {
@@ -277,15 +274,7 @@ func NewServerTransport(conn net.Conn, config *ServerConfig) (_ ServerTransport,
 			updateFlowControl: t.updateFlowControl,
 		}
 	}
-	for _, sh := range t.stats {
-		t.ctx = sh.TagConn(t.ctx, &stats.ConnTagInfo{
-			RemoteAddr: t.remoteAddr,
-			LocalAddr:  t.localAddr,
-		})
-		connBegin := &stats.ConnBegin{}
-		sh.HandleConn(t.ctx, connBegin)
-	}
-	t.channelzID, err = channelz.RegisterNormalSocket(t, config.ChannelzParentID, fmt.Sprintf("%s -> %s", t.remoteAddr, t.localAddr))
+	t.channelzID, err = channelz.RegisterNormalSocket(t, config.ChannelzParentID, fmt.Sprintf("%s -> %s", t.peer.Addr, t.peer.LocalAddr))
 	if err != nil {
 		return nil, err
 	}
@@ -334,7 +323,7 @@ func NewServerTransport(conn net.Conn, config *ServerConfig) (_ ServerTransport,
 		t.loopy = newLoopyWriter(serverSide, t.framer, t.controlBuf, t.bdpEst, t.conn, t.logger)
 		t.loopy.ssGoAwayHandler = t.outgoingGoAwayHandler
 		t.loopy.run()
-		close(t.writerDone)
+		close(t.loopyWriterDone)
 	}()
 	go t.keepalive()
 	return t, nil
@@ -342,7 +331,7 @@ func NewServerTransport(conn net.Conn, config *ServerConfig) (_ ServerTransport,
 
 // operateHeaders takes action on the decoded headers. Returns an error if fatal
 // error encountered and transport needs to close, otherwise returns nil.
-func (t *http2Server) operateHeaders(frame *http2.MetaHeadersFrame, handle func(*Stream)) error {
+func (t *http2Server) operateHeaders(ctx context.Context, frame *http2.MetaHeadersFrame, handle func(*Stream)) error {
 	// Acquire max stream ID lock for entire duration
 	t.maxStreamMu.Lock()
 	defer t.maxStreamMu.Unlock()
@@ -369,10 +358,11 @@ func (t *http2Server) operateHeaders(frame *http2.MetaHeadersFrame, handle func(
 
 	buf := newRecvBuffer()
 	s := &Stream{
-		id:  streamID,
-		st:  t,
-		buf: buf,
-		fc:  &inFlow{limit: uint32(t.initialWindowSize)},
+		id:               streamID,
+		st:               t,
+		buf:              buf,
+		fc:               &inFlow{limit: uint32(t.initialWindowSize)},
+		headerWireLength: int(frame.Header().Length),
 	}
 	var (
 		// if false, content-type was missing or invalid
@@ -511,9 +501,9 @@ func (t *http2Server) operateHeaders(frame *http2.MetaHeadersFrame, handle func(
 		s.state = streamReadDone
 	}
 	if timeoutSet {
-		s.ctx, s.cancel = context.WithTimeout(t.ctx, timeout)
+		s.ctx, s.cancel = context.WithTimeout(ctx, timeout)
 	} else {
-		s.ctx, s.cancel = context.WithCancel(t.ctx)
+		s.ctx, s.cancel = context.WithCancel(ctx)
 	}
 
 	// Attach the received metadata to the context.
@@ -592,18 +582,6 @@ func (t *http2Server) operateHeaders(frame *http2.MetaHeadersFrame, handle func(
 	s.requestRead = func(n int) {
 		t.adjustWindow(s, uint32(n))
 	}
-	for _, sh := range t.stats {
-		s.ctx = sh.TagRPC(s.ctx, &stats.RPCTagInfo{FullMethodName: s.method})
-		inHeader := &stats.InHeader{
-			FullMethod:  s.method,
-			RemoteAddr:  t.remoteAddr,
-			LocalAddr:   t.localAddr,
-			Compression: s.recvCompress,
-			WireLength:  int(frame.Header().Length),
-			Header:      mdata.Copy(),
-		}
-		sh.HandleRPC(s.ctx, inHeader)
-	}
 	s.ctxDone = s.ctx.Done()
 	s.wq = newWriteQuota(defaultWriteQuota, s.ctxDone)
 	s.trReader = &transportReader{
@@ -629,8 +607,11 @@ func (t *http2Server) operateHeaders(frame *http2.MetaHeadersFrame, handle func(
 // HandleStreams receives incoming streams using the given handler. This is
 // typically run in a separate goroutine.
 // traceCtx attaches trace to ctx and returns the new context.
-func (t *http2Server) HandleStreams(handle func(*Stream)) {
-	defer close(t.readerDone)
+func (t *http2Server) HandleStreams(ctx context.Context, handle func(*Stream)) {
+	defer func() {
+		<-t.loopyWriterDone
+		close(t.readerDone)
+	}()
 	for {
 		t.controlBuf.throttle()
 		frame, err := t.framer.fr.ReadFrame()
@@ -664,7 +645,7 @@ func (t *http2Server) HandleStreams(handle func(*Stream)) {
 		}
 		switch frame := frame.(type) {
 		case *http2.MetaHeadersFrame:
-			if err := t.operateHeaders(frame, handle); err != nil {
+			if err := t.operateHeaders(ctx, frame, handle); err != nil {
 				t.Close(err)
 				break
 			}
@@ -979,7 +960,12 @@ func (t *http2Server) WriteHeader(s *Stream, md metadata.MD) error {
 		}
 	}
 	if err := t.writeHeaderLocked(s); err != nil {
-		return status.Convert(err).Err()
+		switch e := err.(type) {
+		case ConnectionError:
+			return status.Error(codes.Unavailable, e.Desc)
+		default:
+			return status.Convert(err).Err()
+		}
 	}
 	return nil
 }
@@ -1242,10 +1228,6 @@ func (t *http2Server) Close(err error) {
 	for _, s := range streams {
 		s.cancel()
 	}
-	for _, sh := range t.stats {
-		connEnd := &stats.ConnEnd{}
-		sh.HandleConn(t.ctx, connEnd)
-	}
 }
 
 // deleteStream deletes the stream s from transport's active streams.
@@ -1311,10 +1293,6 @@ func (t *http2Server) closeStream(s *Stream, rst bool, rstCode http2.ErrCode, eo
 	})
 }
 
-func (t *http2Server) RemoteAddr() net.Addr {
-	return t.remoteAddr
-}
-
 func (t *http2Server) Drain(debugData string) {
 	t.mu.Lock()
 	defer t.mu.Unlock()
@@ -1397,11 +1375,11 @@ func (t *http2Server) ChannelzMetric() *channelz.SocketInternalMetric {
 		LastMessageReceivedTimestamp:     time.Unix(0, atomic.LoadInt64(&t.czData.lastMsgRecvTime)),
 		LocalFlowControlWindow:           int64(t.fc.getSize()),
 		SocketOptions:                    channelz.GetSocketOption(t.conn),
-		LocalAddr:                        t.localAddr,
-		RemoteAddr:                       t.remoteAddr,
+		LocalAddr:                        t.peer.LocalAddr,
+		RemoteAddr:                       t.peer.Addr,
 		// RemoteName :
 	}
-	if au, ok := t.authInfo.(credentials.ChannelzSecurityInfo); ok {
+	if au, ok := t.peer.AuthInfo.(credentials.ChannelzSecurityInfo); ok {
 		s.Security = au.GetSecurityValue()
 	}
 	s.RemoteFlowControlWindow = t.getOutFlowWindow()
@@ -1433,10 +1411,12 @@ func (t *http2Server) getOutFlowWindow() int64 {
 	}
 }
 
-func (t *http2Server) getPeer() *peer.Peer {
+// Peer returns the peer of the transport.
+func (t *http2Server) Peer() *peer.Peer {
 	return &peer.Peer{
-		Addr:     t.remoteAddr,
-		AuthInfo: t.authInfo, // Can be nil
+		Addr:      t.peer.Addr,
+		LocalAddr: t.peer.LocalAddr,
+		AuthInfo:  t.peer.AuthInfo, // Can be nil
 	}
 }
 
@@ -1461,6 +1441,6 @@ func GetConnection(ctx context.Context) net.Conn {
 // SetConnection adds the connection to the context to be able to get
 // information about the destination ip and port for an incoming RPC. This also
 // allows any unary or streaming interceptors to see the connection.
-func setConnection(ctx context.Context, conn net.Conn) context.Context {
+func SetConnection(ctx context.Context, conn net.Conn) context.Context {
 	return context.WithValue(ctx, connectionKey{}, conn)
 }
diff --git a/vendor/google.golang.org/grpc/internal/transport/proxy.go b/vendor/google.golang.org/grpc/internal/transport/proxy.go
index 41596198787..24fa1032574 100644
--- a/vendor/google.golang.org/grpc/internal/transport/proxy.go
+++ b/vendor/google.golang.org/grpc/internal/transport/proxy.go
@@ -28,6 +28,8 @@ import (
 	"net/http"
 	"net/http/httputil"
 	"net/url"
+
+	"google.golang.org/grpc/internal"
 )
 
 const proxyAuthHeaderKey = "Proxy-Authorization"
@@ -112,7 +114,7 @@ func doHTTPConnectHandshake(ctx context.Context, conn net.Conn, backendAddr stri
 // proxyDial dials, connecting to a proxy first if necessary. Checks if a proxy
 // is necessary, dials, does the HTTP CONNECT handshake, and returns the
 // connection.
-func proxyDial(ctx context.Context, addr string, grpcUA string) (conn net.Conn, err error) {
+func proxyDial(ctx context.Context, addr string, grpcUA string) (net.Conn, error) {
 	newAddr := addr
 	proxyURL, err := mapAddress(addr)
 	if err != nil {
@@ -122,15 +124,15 @@ func proxyDial(ctx context.Context, addr string, grpcUA string) (conn net.Conn,
 		newAddr = proxyURL.Host
 	}
 
-	conn, err = (&net.Dialer{}).DialContext(ctx, "tcp", newAddr)
+	conn, err := internal.NetDialerWithTCPKeepalive().DialContext(ctx, "tcp", newAddr)
 	if err != nil {
-		return
+		return nil, err
 	}
-	if proxyURL != nil {
+	if proxyURL == nil {
 		// proxy is disabled if proxyURL is nil.
-		conn, err = doHTTPConnectHandshake(ctx, conn, addr, proxyURL, grpcUA)
+		return conn, err
 	}
-	return
+	return doHTTPConnectHandshake(ctx, conn, addr, proxyURL, grpcUA)
 }
 
 func sendHTTPRequest(ctx context.Context, req *http.Request, conn net.Conn) error {
diff --git a/vendor/google.golang.org/grpc/internal/transport/transport.go b/vendor/google.golang.org/grpc/internal/transport/transport.go
index aac056e723b..b7b8fec1804 100644
--- a/vendor/google.golang.org/grpc/internal/transport/transport.go
+++ b/vendor/google.golang.org/grpc/internal/transport/transport.go
@@ -37,6 +37,7 @@ import (
 	"google.golang.org/grpc/internal/channelz"
 	"google.golang.org/grpc/keepalive"
 	"google.golang.org/grpc/metadata"
+	"google.golang.org/grpc/peer"
 	"google.golang.org/grpc/resolver"
 	"google.golang.org/grpc/stats"
 	"google.golang.org/grpc/status"
@@ -265,7 +266,8 @@ type Stream struct {
 	// headerValid indicates whether a valid header was received.  Only
 	// meaningful after headerChan is closed (always call waitOnHeader() before
 	// reading its value).  Not valid on server side.
-	headerValid bool
+	headerValid      bool
+	headerWireLength int // Only set on server side.
 
 	// hdrMu protects header and trailer metadata on the server-side.
 	hdrMu sync.Mutex
@@ -425,6 +427,12 @@ func (s *Stream) Context() context.Context {
 	return s.ctx
 }
 
+// SetContext sets the context of the stream. This will be deleted once the
+// stats handler callouts all move to gRPC layer.
+func (s *Stream) SetContext(ctx context.Context) {
+	s.ctx = ctx
+}
+
 // Method returns the method for the stream.
 func (s *Stream) Method() string {
 	return s.method
@@ -437,6 +445,12 @@ func (s *Stream) Status() *status.Status {
 	return s.status
 }
 
+// HeaderWireLength returns the size of the headers of the stream as received
+// from the wire. Valid only on the server.
+func (s *Stream) HeaderWireLength() int {
+	return s.headerWireLength
+}
+
 // SetHeader sets the header metadata. This can be called multiple times.
 // Server side only.
 // This should not be called in parallel to other data writes.
@@ -698,7 +712,7 @@ type ClientTransport interface {
 // Write methods for a given Stream will be called serially.
 type ServerTransport interface {
 	// HandleStreams receives incoming streams using the given handler.
-	HandleStreams(func(*Stream))
+	HandleStreams(context.Context, func(*Stream))
 
 	// WriteHeader sends the header metadata for the given stream.
 	// WriteHeader may not be called on all streams.
@@ -717,8 +731,8 @@ type ServerTransport interface {
 	// handlers will be terminated asynchronously.
 	Close(err error)
 
-	// RemoteAddr returns the remote network address.
-	RemoteAddr() net.Addr
+	// Peer returns the peer of the server transport.
+	Peer() *peer.Peer
 
 	// Drain notifies the client this ServerTransport stops accepting new RPCs.
 	Drain(debugData string)
diff --git a/vendor/google.golang.org/grpc/metadata/metadata.go b/vendor/google.golang.org/grpc/metadata/metadata.go
index a2cdcaf12a8..1e9485fd6e2 100644
--- a/vendor/google.golang.org/grpc/metadata/metadata.go
+++ b/vendor/google.golang.org/grpc/metadata/metadata.go
@@ -25,8 +25,14 @@ import (
 	"context"
 	"fmt"
 	"strings"
+
+	"google.golang.org/grpc/internal"
 )
 
+func init() {
+	internal.FromOutgoingContextRaw = fromOutgoingContextRaw
+}
+
 // DecodeKeyValue returns k, v, nil.
 //
 // Deprecated: use k and v directly instead.
@@ -153,14 +159,16 @@ func Join(mds ...MD) MD {
 type mdIncomingKey struct{}
 type mdOutgoingKey struct{}
 
-// NewIncomingContext creates a new context with incoming md attached.
+// NewIncomingContext creates a new context with incoming md attached. md must
+// not be modified after calling this function.
 func NewIncomingContext(ctx context.Context, md MD) context.Context {
 	return context.WithValue(ctx, mdIncomingKey{}, md)
 }
 
 // NewOutgoingContext creates a new context with outgoing md attached. If used
 // in conjunction with AppendToOutgoingContext, NewOutgoingContext will
-// overwrite any previously-appended metadata.
+// overwrite any previously-appended metadata. md must not be modified after
+// calling this function.
 func NewOutgoingContext(ctx context.Context, md MD) context.Context {
 	return context.WithValue(ctx, mdOutgoingKey{}, rawMD{md: md})
 }
@@ -203,7 +211,8 @@ func FromIncomingContext(ctx context.Context) (MD, bool) {
 }
 
 // ValueFromIncomingContext returns the metadata value corresponding to the metadata
-// key from the incoming metadata if it exists. Key must be lower-case.
+// key from the incoming metadata if it exists. Keys are matched in a case insensitive
+// manner.
 //
 // # Experimental
 //
@@ -219,33 +228,29 @@ func ValueFromIncomingContext(ctx context.Context, key string) []string {
 		return copyOf(v)
 	}
 	for k, v := range md {
-		// We need to manually convert all keys to lower case, because MD is a
-		// map, and there's no guarantee that the MD attached to the context is
-		// created using our helper functions.
-		if strings.ToLower(k) == key {
+		// Case insenitive comparison: MD is a map, and there's no guarantee
+		// that the MD attached to the context is created using our helper
+		// functions.
+		if strings.EqualFold(k, key) {
 			return copyOf(v)
 		}
 	}
 	return nil
 }
 
-// the returned slice must not be modified in place
 func copyOf(v []string) []string {
 	vals := make([]string, len(v))
 	copy(vals, v)
 	return vals
 }
 
-// FromOutgoingContextRaw returns the un-merged, intermediary contents of rawMD.
+// fromOutgoingContextRaw returns the un-merged, intermediary contents of rawMD.
 //
 // Remember to perform strings.ToLower on the keys, for both the returned MD (MD
 // is a map, there's no guarantee it's created using our helper functions) and
 // the extra kv pairs (AppendToOutgoingContext doesn't turn them into
 // lowercase).
-//
-// This is intended for gRPC-internal use ONLY. Users should use
-// FromOutgoingContext instead.
-func FromOutgoingContextRaw(ctx context.Context) (MD, [][]string, bool) {
+func fromOutgoingContextRaw(ctx context.Context) (MD, [][]string, bool) {
 	raw, ok := ctx.Value(mdOutgoingKey{}).(rawMD)
 	if !ok {
 		return nil, nil, false
diff --git a/vendor/google.golang.org/grpc/peer/peer.go b/vendor/google.golang.org/grpc/peer/peer.go
index e01d219ffbc..a821ff9b2b7 100644
--- a/vendor/google.golang.org/grpc/peer/peer.go
+++ b/vendor/google.golang.org/grpc/peer/peer.go
@@ -32,6 +32,8 @@ import (
 type Peer struct {
 	// Addr is the peer address.
 	Addr net.Addr
+	// LocalAddr is the local address.
+	LocalAddr net.Addr
 	// AuthInfo is the authentication information of the transport.
 	// It is nil if there is no transport security being used.
 	AuthInfo credentials.AuthInfo
diff --git a/vendor/google.golang.org/grpc/picker_wrapper.go b/vendor/google.golang.org/grpc/picker_wrapper.go
index 236837f4157..bf56faa76d3 100644
--- a/vendor/google.golang.org/grpc/picker_wrapper.go
+++ b/vendor/google.golang.org/grpc/picker_wrapper.go
@@ -37,7 +37,6 @@ import (
 type pickerWrapper struct {
 	mu            sync.Mutex
 	done          bool
-	idle          bool
 	blockingCh    chan struct{}
 	picker        balancer.Picker
 	statsHandlers []stats.Handler // to record blocking picker calls
@@ -53,11 +52,7 @@ func newPickerWrapper(statsHandlers []stats.Handler) *pickerWrapper {
 // updatePicker is called by UpdateBalancerState. It unblocks all blocked pick.
 func (pw *pickerWrapper) updatePicker(p balancer.Picker) {
 	pw.mu.Lock()
-	if pw.done || pw.idle {
-		// There is a small window where a picker update from the LB policy can
-		// race with the channel going to idle mode. If the picker is idle here,
-		// it is because the channel asked it to do so, and therefore it is sage
-		// to ignore the update from the LB policy.
+	if pw.done {
 		pw.mu.Unlock()
 		return
 	}
@@ -210,23 +205,15 @@ func (pw *pickerWrapper) close() {
 	close(pw.blockingCh)
 }
 
-func (pw *pickerWrapper) enterIdleMode() {
-	pw.mu.Lock()
-	defer pw.mu.Unlock()
-	if pw.done {
-		return
-	}
-	pw.idle = true
-}
-
-func (pw *pickerWrapper) exitIdleMode() {
+// reset clears the pickerWrapper and prepares it for being used again when idle
+// mode is exited.
+func (pw *pickerWrapper) reset() {
 	pw.mu.Lock()
 	defer pw.mu.Unlock()
 	if pw.done {
 		return
 	}
 	pw.blockingCh = make(chan struct{})
-	pw.idle = false
 }
 
 // dropError is a wrapper error that indicates the LB policy wishes to drop the
diff --git a/vendor/google.golang.org/grpc/pickfirst.go b/vendor/google.golang.org/grpc/pickfirst.go
index 2e9cf66b4af..5128f9364dd 100644
--- a/vendor/google.golang.org/grpc/pickfirst.go
+++ b/vendor/google.golang.org/grpc/pickfirst.go
@@ -25,7 +25,6 @@ import (
 
 	"google.golang.org/grpc/balancer"
 	"google.golang.org/grpc/connectivity"
-	"google.golang.org/grpc/internal/envconfig"
 	internalgrpclog "google.golang.org/grpc/internal/grpclog"
 	"google.golang.org/grpc/internal/grpcrand"
 	"google.golang.org/grpc/internal/pretty"
@@ -65,19 +64,6 @@ type pfConfig struct {
 }
 
 func (*pickfirstBuilder) ParseConfig(js json.RawMessage) (serviceconfig.LoadBalancingConfig, error) {
-	if !envconfig.PickFirstLBConfig {
-		// Prior to supporting loadbalancing configuration, the pick_first LB
-		// policy did not implement the balancer.ConfigParser interface. This
-		// meant that if a non-empty configuration was passed to it, the service
-		// config unmarshaling code would throw a warning log, but would
-		// continue using the pick_first LB policy. The code below ensures the
-		// same behavior is retained if the env var is not set.
-		if string(js) != "{}" {
-			logger.Warningf("Ignoring non-empty balancer configuration %q for the pick_first LB policy", string(js))
-		}
-		return nil, nil
-	}
-
 	var cfg pfConfig
 	if err := json.Unmarshal(js, &cfg); err != nil {
 		return nil, fmt.Errorf("pickfirst: unable to unmarshal LB policy config: %s, error: %v", string(js), err)
diff --git a/vendor/google.golang.org/grpc/resolver/dns/dns_resolver.go b/vendor/google.golang.org/grpc/resolver/dns/dns_resolver.go
new file mode 100644
index 00000000000..14aa6f20ae0
--- /dev/null
+++ b/vendor/google.golang.org/grpc/resolver/dns/dns_resolver.go
@@ -0,0 +1,36 @@
+/*
+ *
+ * Copyright 2018 gRPC authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ */
+
+// Package dns implements a dns resolver to be installed as the default resolver
+// in grpc.
+//
+// Deprecated: this package is imported by grpc and should not need to be
+// imported directly by users.
+package dns
+
+import (
+	"google.golang.org/grpc/internal/resolver/dns"
+	"google.golang.org/grpc/resolver"
+)
+
+// NewBuilder creates a dnsBuilder which is used to factory DNS resolvers.
+//
+// Deprecated: import grpc and use resolver.Get("dns") instead.
+func NewBuilder() resolver.Builder {
+	return dns.NewBuilder()
+}
diff --git a/vendor/google.golang.org/grpc/resolver/map.go b/vendor/google.golang.org/grpc/resolver/map.go
index 804be887de0..ada5b9bb79b 100644
--- a/vendor/google.golang.org/grpc/resolver/map.go
+++ b/vendor/google.golang.org/grpc/resolver/map.go
@@ -136,3 +136,116 @@ func (a *AddressMap) Values() []any {
 	}
 	return ret
 }
+
+type endpointNode struct {
+	addrs map[string]struct{}
+}
+
+// Equal returns whether the unordered set of addrs are the same between the
+// endpoint nodes.
+func (en *endpointNode) Equal(en2 *endpointNode) bool {
+	if len(en.addrs) != len(en2.addrs) {
+		return false
+	}
+	for addr := range en.addrs {
+		if _, ok := en2.addrs[addr]; !ok {
+			return false
+		}
+	}
+	return true
+}
+
+func toEndpointNode(endpoint Endpoint) endpointNode {
+	en := make(map[string]struct{})
+	for _, addr := range endpoint.Addresses {
+		en[addr.Addr] = struct{}{}
+	}
+	return endpointNode{
+		addrs: en,
+	}
+}
+
+// EndpointMap is a map of endpoints to arbitrary values keyed on only the
+// unordered set of address strings within an endpoint. This map is not thread
+// safe, thus it is unsafe to access concurrently. Must be created via
+// NewEndpointMap; do not construct directly.
+type EndpointMap struct {
+	endpoints map[*endpointNode]any
+}
+
+// NewEndpointMap creates a new EndpointMap.
+func NewEndpointMap() *EndpointMap {
+	return &EndpointMap{
+		endpoints: make(map[*endpointNode]any),
+	}
+}
+
+// Get returns the value for the address in the map, if present.
+func (em *EndpointMap) Get(e Endpoint) (value any, ok bool) {
+	en := toEndpointNode(e)
+	if endpoint := em.find(en); endpoint != nil {
+		return em.endpoints[endpoint], true
+	}
+	return nil, false
+}
+
+// Set updates or adds the value to the address in the map.
+func (em *EndpointMap) Set(e Endpoint, value any) {
+	en := toEndpointNode(e)
+	if endpoint := em.find(en); endpoint != nil {
+		em.endpoints[endpoint] = value
+		return
+	}
+	em.endpoints[&en] = value
+}
+
+// Len returns the number of entries in the map.
+func (em *EndpointMap) Len() int {
+	return len(em.endpoints)
+}
+
+// Keys returns a slice of all current map keys, as endpoints specifying the
+// addresses present in the endpoint keys, in which uniqueness is determined by
+// the unordered set of addresses. Thus, endpoint information returned is not
+// the full endpoint data (drops duplicated addresses and attributes) but can be
+// used for EndpointMap accesses.
+func (em *EndpointMap) Keys() []Endpoint {
+	ret := make([]Endpoint, 0, len(em.endpoints))
+	for en := range em.endpoints {
+		var endpoint Endpoint
+		for addr := range en.addrs {
+			endpoint.Addresses = append(endpoint.Addresses, Address{Addr: addr})
+		}
+		ret = append(ret, endpoint)
+	}
+	return ret
+}
+
+// Values returns a slice of all current map values.
+func (em *EndpointMap) Values() []any {
+	ret := make([]any, 0, len(em.endpoints))
+	for _, val := range em.endpoints {
+		ret = append(ret, val)
+	}
+	return ret
+}
+
+// find returns a pointer to the endpoint node in em if the endpoint node is
+// already present. If not found, nil is returned. The comparisons are done on
+// the unordered set of addresses within an endpoint.
+func (em EndpointMap) find(e endpointNode) *endpointNode {
+	for endpoint := range em.endpoints {
+		if e.Equal(endpoint) {
+			return endpoint
+		}
+	}
+	return nil
+}
+
+// Delete removes the specified endpoint from the map.
+func (em *EndpointMap) Delete(e Endpoint) {
+	en := toEndpointNode(e)
+	if entry := em.find(en); entry != nil {
+		delete(em.endpoints, entry)
+	}
+}
diff --git a/vendor/google.golang.org/grpc/resolver/resolver.go b/vendor/google.golang.org/grpc/resolver/resolver.go
index 11384e228e5..adf89dd9cfe 100644
--- a/vendor/google.golang.org/grpc/resolver/resolver.go
+++ b/vendor/google.golang.org/grpc/resolver/resolver.go
@@ -240,11 +240,6 @@ type ClientConn interface {
 	//
 	// Deprecated: Use UpdateState instead.
 	NewAddress(addresses []Address)
-	// NewServiceConfig is called by resolver to notify ClientConn a new
-	// service config. The service config should be provided as a json string.
-	//
-	// Deprecated: Use UpdateState instead.
-	NewServiceConfig(serviceConfig string)
 	// ParseServiceConfig parses the provided service config and returns an
 	// object that provides the parsed config.
 	ParseServiceConfig(serviceConfigJSON string) *serviceconfig.ParseResult
@@ -286,6 +281,11 @@ func (t Target) Endpoint() string {
 	return strings.TrimPrefix(endpoint, "/")
 }
 
+// String returns a string representation of Target.
+func (t Target) String() string {
+	return t.URL.String()
+}
+
 // Builder creates a resolver that will be used to watch name resolution updates.
 type Builder interface {
 	// Build creates a new resolver for the given target.
@@ -314,3 +314,13 @@ type Resolver interface {
 	// Close closes the resolver.
 	Close()
 }
+
+// AuthorityOverrider is implemented by Builders that wish to override the
+// default authority for the ClientConn.
+// By default, the authority used is target.Endpoint().
+type AuthorityOverrider interface {
+	// OverrideAuthority returns the authority to use for a ClientConn with the
+	// given target. The implementation must generate it without blocking,
+	// typically in line, and must keep it unchanged.
+	OverrideAuthority(Target) string
+}
diff --git a/vendor/google.golang.org/grpc/resolver_conn_wrapper.go b/vendor/google.golang.org/grpc/resolver_conn_wrapper.go
deleted file mode 100644
index d6833056084..00000000000
--- a/vendor/google.golang.org/grpc/resolver_conn_wrapper.go
+++ /dev/null
@@ -1,247 +0,0 @@
-/*
- *
- * Copyright 2017 gRPC authors.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- *
- */
-
-package grpc
-
-import (
-	"context"
-	"strings"
-	"sync"
-
-	"google.golang.org/grpc/balancer"
-	"google.golang.org/grpc/internal/channelz"
-	"google.golang.org/grpc/internal/grpcsync"
-	"google.golang.org/grpc/internal/pretty"
-	"google.golang.org/grpc/resolver"
-	"google.golang.org/grpc/serviceconfig"
-)
-
-// resolverStateUpdater wraps the single method used by ccResolverWrapper to
-// report a state update from the actual resolver implementation.
-type resolverStateUpdater interface {
-	updateResolverState(s resolver.State, err error) error
-}
-
-// ccResolverWrapper is a wrapper on top of cc for resolvers.
-// It implements resolver.ClientConn interface.
-type ccResolverWrapper struct {
-	// The following fields are initialized when the wrapper is created and are
-	// read-only afterwards, and therefore can be accessed without a mutex.
-	cc                  resolverStateUpdater
-	channelzID          *channelz.Identifier
-	ignoreServiceConfig bool
-	opts                ccResolverWrapperOpts
-	serializer          *grpcsync.CallbackSerializer // To serialize all incoming calls.
-	serializerCancel    context.CancelFunc           // To close the serializer, accessed only from close().
-
-	// All incoming (resolver --> gRPC) calls are guaranteed to execute in a
-	// mutually exclusive manner as they are scheduled on the serializer.
-	// Fields accessed *only* in these serializer callbacks, can therefore be
-	// accessed without a mutex.
-	curState resolver.State
-
-	// mu guards access to the below fields.
-	mu       sync.Mutex
-	closed   bool
-	resolver resolver.Resolver // Accessed only from outgoing calls.
-}
-
-// ccResolverWrapperOpts wraps the arguments to be passed when creating a new
-// ccResolverWrapper.
-type ccResolverWrapperOpts struct {
-	target     resolver.Target       // User specified dial target to resolve.
-	builder    resolver.Builder      // Resolver builder to use.
-	bOpts      resolver.BuildOptions // Resolver build options to use.
-	channelzID *channelz.Identifier  // Channelz identifier for the channel.
-}
-
-// newCCResolverWrapper uses the resolver.Builder to build a Resolver and
-// returns a ccResolverWrapper object which wraps the newly built resolver.
-func newCCResolverWrapper(cc resolverStateUpdater, opts ccResolverWrapperOpts) (*ccResolverWrapper, error) {
-	ctx, cancel := context.WithCancel(context.Background())
-	ccr := &ccResolverWrapper{
-		cc:                  cc,
-		channelzID:          opts.channelzID,
-		ignoreServiceConfig: opts.bOpts.DisableServiceConfig,
-		opts:                opts,
-		serializer:          grpcsync.NewCallbackSerializer(ctx),
-		serializerCancel:    cancel,
-	}
-
-	// Cannot hold the lock at build time because the resolver can send an
-	// update or error inline and these incoming calls grab the lock to schedule
-	// a callback in the serializer.
-	r, err := opts.builder.Build(opts.target, ccr, opts.bOpts)
-	if err != nil {
-		cancel()
-		return nil, err
-	}
-
-	// Any error reported by the resolver at build time that leads to a
-	// re-resolution request from the balancer is dropped by grpc until we
-	// return from this function. So, we don't have to handle pending resolveNow
-	// requests here.
-	ccr.mu.Lock()
-	ccr.resolver = r
-	ccr.mu.Unlock()
-
-	return ccr, nil
-}
-
-func (ccr *ccResolverWrapper) resolveNow(o resolver.ResolveNowOptions) {
-	ccr.mu.Lock()
-	defer ccr.mu.Unlock()
-
-	// ccr.resolver field is set only after the call to Build() returns. But in
-	// the process of building, the resolver may send an error update which when
-	// propagated to the balancer may result in a re-resolution request.
-	if ccr.closed || ccr.resolver == nil {
-		return
-	}
-	ccr.resolver.ResolveNow(o)
-}
-
-func (ccr *ccResolverWrapper) close() {
-	ccr.mu.Lock()
-	if ccr.closed {
-		ccr.mu.Unlock()
-		return
-	}
-
-	channelz.Info(logger, ccr.channelzID, "Closing the name resolver")
-
-	// Close the serializer to ensure that no more calls from the resolver are
-	// handled, before actually closing the resolver.
-	ccr.serializerCancel()
-	ccr.closed = true
-	r := ccr.resolver
-	ccr.mu.Unlock()
-
-	// Give enqueued callbacks a chance to finish.
-	<-ccr.serializer.Done()
-
-	// Spawn a goroutine to close the resolver (since it may block trying to
-	// cleanup all allocated resources) and return early.
-	go r.Close()
-}
-
-// serializerScheduleLocked is a convenience method to schedule a function to be
-// run on the serializer while holding ccr.mu.
-func (ccr *ccResolverWrapper) serializerScheduleLocked(f func(context.Context)) {
-	ccr.mu.Lock()
-	ccr.serializer.Schedule(f)
-	ccr.mu.Unlock()
-}
-
-// UpdateState is called by resolver implementations to report new state to gRPC
-// which includes addresses and service config.
-func (ccr *ccResolverWrapper) UpdateState(s resolver.State) error {
-	errCh := make(chan error, 1)
-	if s.Endpoints == nil {
-		s.Endpoints = make([]resolver.Endpoint, 0, len(s.Addresses))
-		for _, a := range s.Addresses {
-			ep := resolver.Endpoint{Addresses: []resolver.Address{a}, Attributes: a.BalancerAttributes}
-			ep.Addresses[0].BalancerAttributes = nil
-			s.Endpoints = append(s.Endpoints, ep)
-		}
-	}
-	ok := ccr.serializer.Schedule(func(context.Context) {
-		ccr.addChannelzTraceEvent(s)
-		ccr.curState = s
-		if err := ccr.cc.updateResolverState(ccr.curState, nil); err == balancer.ErrBadResolverState {
-			errCh <- balancer.ErrBadResolverState
-			return
-		}
-		errCh <- nil
-	})
-	if !ok {
-		// The only time when Schedule() fail to add the callback to the
-		// serializer is when the serializer is closed, and this happens only
-		// when the resolver wrapper is closed.
-		return nil
-	}
-	return <-errCh
-}
-
-// ReportError is called by resolver implementations to report errors
-// encountered during name resolution to gRPC.
-func (ccr *ccResolverWrapper) ReportError(err error) {
-	ccr.serializerScheduleLocked(func(_ context.Context) {
-		channelz.Warningf(logger, ccr.channelzID, "ccResolverWrapper: reporting error to cc: %v", err)
-		ccr.cc.updateResolverState(resolver.State{}, err)
-	})
-}
-
-// NewAddress is called by the resolver implementation to send addresses to
-// gRPC.
-func (ccr *ccResolverWrapper) NewAddress(addrs []resolver.Address) {
-	ccr.serializerScheduleLocked(func(_ context.Context) {
-		ccr.addChannelzTraceEvent(resolver.State{Addresses: addrs, ServiceConfig: ccr.curState.ServiceConfig})
-		ccr.curState.Addresses = addrs
-		ccr.cc.updateResolverState(ccr.curState, nil)
-	})
-}
-
-// NewServiceConfig is called by the resolver implementation to send service
-// configs to gRPC.
-func (ccr *ccResolverWrapper) NewServiceConfig(sc string) {
-	ccr.serializerScheduleLocked(func(_ context.Context) {
-		channelz.Infof(logger, ccr.channelzID, "ccResolverWrapper: got new service config: %s", sc)
-		if ccr.ignoreServiceConfig {
-			channelz.Info(logger, ccr.channelzID, "Service config lookups disabled; ignoring config")
-			return
-		}
-		scpr := parseServiceConfig(sc)
-		if scpr.Err != nil {
-			channelz.Warningf(logger, ccr.channelzID, "ccResolverWrapper: error parsing service config: %v", scpr.Err)
-			return
-		}
-		ccr.addChannelzTraceEvent(resolver.State{Addresses: ccr.curState.Addresses, ServiceConfig: scpr})
-		ccr.curState.ServiceConfig = scpr
-		ccr.cc.updateResolverState(ccr.curState, nil)
-	})
-}
-
-// ParseServiceConfig is called by resolver implementations to parse a JSON
-// representation of the service config.
-func (ccr *ccResolverWrapper) ParseServiceConfig(scJSON string) *serviceconfig.ParseResult {
-	return parseServiceConfig(scJSON)
-}
-
-// addChannelzTraceEvent adds a channelz trace event containing the new
-// state received from resolver implementations.
-func (ccr *ccResolverWrapper) addChannelzTraceEvent(s resolver.State) {
-	var updates []string
-	var oldSC, newSC *ServiceConfig
-	var oldOK, newOK bool
-	if ccr.curState.ServiceConfig != nil {
-		oldSC, oldOK = ccr.curState.ServiceConfig.Config.(*ServiceConfig)
-	}
-	if s.ServiceConfig != nil {
-		newSC, newOK = s.ServiceConfig.Config.(*ServiceConfig)
-	}
-	if oldOK != newOK || (oldOK && newOK && oldSC.rawJSONString != newSC.rawJSONString) {
-		updates = append(updates, "service config updated")
-	}
-	if len(ccr.curState.Addresses) > 0 && len(s.Addresses) == 0 {
-		updates = append(updates, "resolver returned an empty address list")
-	} else if len(ccr.curState.Addresses) == 0 && len(s.Addresses) > 0 {
-		updates = append(updates, "resolver returned new addresses")
-	}
-	channelz.Infof(logger, ccr.channelzID, "Resolver state updated: %s (%v)", pretty.ToJSON(s), strings.Join(updates, "; "))
-}
diff --git a/vendor/google.golang.org/grpc/resolver_wrapper.go b/vendor/google.golang.org/grpc/resolver_wrapper.go
new file mode 100644
index 00000000000..c79bab12149
--- /dev/null
+++ b/vendor/google.golang.org/grpc/resolver_wrapper.go
@@ -0,0 +1,197 @@
+/*
+ *
+ * Copyright 2017 gRPC authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ */
+
+package grpc
+
+import (
+	"context"
+	"strings"
+	"sync"
+
+	"google.golang.org/grpc/internal/channelz"
+	"google.golang.org/grpc/internal/grpcsync"
+	"google.golang.org/grpc/internal/pretty"
+	"google.golang.org/grpc/resolver"
+	"google.golang.org/grpc/serviceconfig"
+)
+
+// ccResolverWrapper is a wrapper on top of cc for resolvers.
+// It implements resolver.ClientConn interface.
+type ccResolverWrapper struct {
+	// The following fields are initialized when the wrapper is created and are
+	// read-only afterwards, and therefore can be accessed without a mutex.
+	cc                  *ClientConn
+	ignoreServiceConfig bool
+	serializer          *grpcsync.CallbackSerializer
+	serializerCancel    context.CancelFunc
+
+	resolver resolver.Resolver // only accessed within the serializer
+
+	// The following fields are protected by mu.  Caller must take cc.mu before
+	// taking mu.
+	mu       sync.Mutex
+	curState resolver.State
+	closed   bool
+}
+
+// newCCResolverWrapper initializes the ccResolverWrapper.  It can only be used
+// after calling start, which builds the resolver.
+func newCCResolverWrapper(cc *ClientConn) *ccResolverWrapper {
+	ctx, cancel := context.WithCancel(cc.ctx)
+	return &ccResolverWrapper{
+		cc:                  cc,
+		ignoreServiceConfig: cc.dopts.disableServiceConfig,
+		serializer:          grpcsync.NewCallbackSerializer(ctx),
+		serializerCancel:    cancel,
+	}
+}
+
+// start builds the name resolver using the resolver.Builder in cc and returns
+// any error encountered.  It must always be the first operation performed on
+// any newly created ccResolverWrapper, except that close may be called instead.
+func (ccr *ccResolverWrapper) start() error {
+	errCh := make(chan error)
+	ccr.serializer.Schedule(func(ctx context.Context) {
+		if ctx.Err() != nil {
+			return
+		}
+		opts := resolver.BuildOptions{
+			DisableServiceConfig: ccr.cc.dopts.disableServiceConfig,
+			DialCreds:            ccr.cc.dopts.copts.TransportCredentials,
+			CredsBundle:          ccr.cc.dopts.copts.CredsBundle,
+			Dialer:               ccr.cc.dopts.copts.Dialer,
+		}
+		var err error
+		ccr.resolver, err = ccr.cc.resolverBuilder.Build(ccr.cc.parsedTarget, ccr, opts)
+		errCh <- err
+	})
+	return <-errCh
+}
+
+func (ccr *ccResolverWrapper) resolveNow(o resolver.ResolveNowOptions) {
+	ccr.serializer.Schedule(func(ctx context.Context) {
+		if ctx.Err() != nil || ccr.resolver == nil {
+			return
+		}
+		ccr.resolver.ResolveNow(o)
+	})
+}
+
+// close initiates async shutdown of the wrapper.  To determine the wrapper has
+// finished shutting down, the channel should block on ccr.serializer.Done()
+// without cc.mu held.
+func (ccr *ccResolverWrapper) close() {
+	channelz.Info(logger, ccr.cc.channelzID, "Closing the name resolver")
+	ccr.mu.Lock()
+	ccr.closed = true
+	ccr.mu.Unlock()
+
+	ccr.serializer.Schedule(func(context.Context) {
+		if ccr.resolver == nil {
+			return
+		}
+		ccr.resolver.Close()
+		ccr.resolver = nil
+	})
+	ccr.serializerCancel()
+}
+
+// UpdateState is called by resolver implementations to report new state to gRPC
+// which includes addresses and service config.
+func (ccr *ccResolverWrapper) UpdateState(s resolver.State) error {
+	ccr.cc.mu.Lock()
+	ccr.mu.Lock()
+	if ccr.closed {
+		ccr.mu.Unlock()
+		ccr.cc.mu.Unlock()
+		return nil
+	}
+	if s.Endpoints == nil {
+		s.Endpoints = make([]resolver.Endpoint, 0, len(s.Addresses))
+		for _, a := range s.Addresses {
+			ep := resolver.Endpoint{Addresses: []resolver.Address{a}, Attributes: a.BalancerAttributes}
+			ep.Addresses[0].BalancerAttributes = nil
+			s.Endpoints = append(s.Endpoints, ep)
+		}
+	}
+	ccr.addChannelzTraceEvent(s)
+	ccr.curState = s
+	ccr.mu.Unlock()
+	return ccr.cc.updateResolverStateAndUnlock(s, nil)
+}
+
+// ReportError is called by resolver implementations to report errors
+// encountered during name resolution to gRPC.
+func (ccr *ccResolverWrapper) ReportError(err error) {
+	ccr.cc.mu.Lock()
+	ccr.mu.Lock()
+	if ccr.closed {
+		ccr.mu.Unlock()
+		ccr.cc.mu.Unlock()
+		return
+	}
+	ccr.mu.Unlock()
+	channelz.Warningf(logger, ccr.cc.channelzID, "ccResolverWrapper: reporting error to cc: %v", err)
+	ccr.cc.updateResolverStateAndUnlock(resolver.State{}, err)
+}
+
+// NewAddress is called by the resolver implementation to send addresses to
+// gRPC.
+func (ccr *ccResolverWrapper) NewAddress(addrs []resolver.Address) {
+	ccr.cc.mu.Lock()
+	ccr.mu.Lock()
+	if ccr.closed {
+		ccr.mu.Unlock()
+		ccr.cc.mu.Unlock()
+		return
+	}
+	s := resolver.State{Addresses: addrs, ServiceConfig: ccr.curState.ServiceConfig}
+	ccr.addChannelzTraceEvent(s)
+	ccr.curState = s
+	ccr.mu.Unlock()
+	ccr.cc.updateResolverStateAndUnlock(s, nil)
+}
+
+// ParseServiceConfig is called by resolver implementations to parse a JSON
+// representation of the service config.
+func (ccr *ccResolverWrapper) ParseServiceConfig(scJSON string) *serviceconfig.ParseResult {
+	return parseServiceConfig(scJSON)
+}
+
+// addChannelzTraceEvent adds a channelz trace event containing the new
+// state received from resolver implementations.
+func (ccr *ccResolverWrapper) addChannelzTraceEvent(s resolver.State) {
+	var updates []string
+	var oldSC, newSC *ServiceConfig
+	var oldOK, newOK bool
+	if ccr.curState.ServiceConfig != nil {
+		oldSC, oldOK = ccr.curState.ServiceConfig.Config.(*ServiceConfig)
+	}
+	if s.ServiceConfig != nil {
+		newSC, newOK = s.ServiceConfig.Config.(*ServiceConfig)
+	}
+	if oldOK != newOK || (oldOK && newOK && oldSC.rawJSONString != newSC.rawJSONString) {
+		updates = append(updates, "service config updated")
+	}
+	if len(ccr.curState.Addresses) > 0 && len(s.Addresses) == 0 {
+		updates = append(updates, "resolver returned an empty address list")
+	} else if len(ccr.curState.Addresses) == 0 && len(s.Addresses) > 0 {
+		updates = append(updates, "resolver returned new addresses")
+	}
+	channelz.Infof(logger, ccr.cc.channelzID, "Resolver state updated: %s (%v)", pretty.ToJSON(s), strings.Join(updates, "; "))
+}
diff --git a/vendor/google.golang.org/grpc/rpc_util.go b/vendor/google.golang.org/grpc/rpc_util.go
index b7723aa09cb..a4b6bc6873c 100644
--- a/vendor/google.golang.org/grpc/rpc_util.go
+++ b/vendor/google.golang.org/grpc/rpc_util.go
@@ -640,14 +640,18 @@ func encode(c baseCodec, msg any) ([]byte, error) {
 	return b, nil
 }
 
-// compress returns the input bytes compressed by compressor or cp.  If both
-// compressors are nil, returns nil.
+// compress returns the input bytes compressed by compressor or cp.
+// If both compressors are nil, or if the message has zero length, returns nil,
+// indicating no compression was done.
 //
 // TODO(dfawley): eliminate cp parameter by wrapping Compressor in an encoding.Compressor.
 func compress(in []byte, cp Compressor, compressor encoding.Compressor) ([]byte, error) {
 	if compressor == nil && cp == nil {
 		return nil, nil
 	}
+	if len(in) == 0 {
+		return nil, nil
+	}
 	wrapErr := func(err error) error {
 		return status.Errorf(codes.Internal, "grpc: error while compressing: %v", err.Error())
 	}
diff --git a/vendor/google.golang.org/grpc/server.go b/vendor/google.golang.org/grpc/server.go
index 8f60d421437..e89c5ac6136 100644
--- a/vendor/google.golang.org/grpc/server.go
+++ b/vendor/google.golang.org/grpc/server.go
@@ -70,9 +70,10 @@ func init() {
 	internal.GetServerCredentials = func(srv *Server) credentials.TransportCredentials {
 		return srv.opts.creds
 	}
-	internal.DrainServerTransports = func(srv *Server, addr string) {
-		srv.drainServerTransports(addr)
+	internal.IsRegisteredMethod = func(srv *Server, method string) bool {
+		return srv.isRegisteredMethod(method)
 	}
+	internal.ServerFromContext = serverFromContext
 	internal.AddGlobalServerOptions = func(opt ...ServerOption) {
 		globalServerOptions = append(globalServerOptions, opt...)
 	}
@@ -81,6 +82,7 @@ func init() {
 	}
 	internal.BinaryLogger = binaryLogger
 	internal.JoinServerOptions = newJoinServerOption
+	internal.RecvBufferPool = recvBufferPool
 }
 
 var statusOK = status.New(codes.OK, "")
@@ -134,12 +136,14 @@ type Server struct {
 	quit               *grpcsync.Event
 	done               *grpcsync.Event
 	channelzRemoveOnce sync.Once
-	serveWG            sync.WaitGroup // counts active Serve goroutines for GracefulStop
+	serveWG            sync.WaitGroup // counts active Serve goroutines for Stop/GracefulStop
+	handlersWG         sync.WaitGroup // counts active method handler goroutines
 
 	channelzID *channelz.Identifier
 	czData     *channelzData
 
-	serverWorkerChannel chan func()
+	serverWorkerChannel      chan func()
+	serverWorkerChannelClose func()
 }
 
 type serverOptions struct {
@@ -170,6 +174,7 @@ type serverOptions struct {
 	headerTableSize       *uint32
 	numServerWorkers      uint32
 	recvBufferPool        SharedBufferPool
+	waitForHandlers       bool
 }
 
 var defaultServerOptions = serverOptions{
@@ -567,6 +572,21 @@ func NumStreamWorkers(numServerWorkers uint32) ServerOption {
 	})
 }
 
+// WaitForHandlers cause Stop to wait until all outstanding method handlers have
+// exited before returning.  If false, Stop will return as soon as all
+// connections have closed, but method handlers may still be running. By
+// default, Stop does not wait for method handlers to return.
+//
+// # Experimental
+//
+// Notice: This API is EXPERIMENTAL and may be changed or removed in a
+// later release.
+func WaitForHandlers(w bool) ServerOption {
+	return newFuncServerOption(func(o *serverOptions) {
+		o.waitForHandlers = w
+	})
+}
+
 // RecvBufferPool returns a ServerOption that configures the server
 // to use the provided shared buffer pool for parsing incoming messages. Depending
 // on the application's workload, this could result in reduced memory allocation.
@@ -578,11 +598,13 @@ func NumStreamWorkers(numServerWorkers uint32) ServerOption {
 // options are used: StatsHandler, EnableTracing, or binary logging. In such
 // cases, the shared buffer pool will be ignored.
 //
-// # Experimental
-//
-// Notice: This API is EXPERIMENTAL and may be changed or removed in a
-// later release.
+// Deprecated: use experimental.WithRecvBufferPool instead.  Will be deleted in
+// v1.60.0 or later.
 func RecvBufferPool(bufferPool SharedBufferPool) ServerOption {
+	return recvBufferPool(bufferPool)
+}
+
+func recvBufferPool(bufferPool SharedBufferPool) ServerOption {
 	return newFuncServerOption(func(o *serverOptions) {
 		o.recvBufferPool = bufferPool
 	})
@@ -616,15 +638,14 @@ func (s *Server) serverWorker() {
 // connections to reduce the time spent overall on runtime.morestack.
 func (s *Server) initServerWorkers() {
 	s.serverWorkerChannel = make(chan func())
+	s.serverWorkerChannelClose = grpcsync.OnceFunc(func() {
+		close(s.serverWorkerChannel)
+	})
 	for i := uint32(0); i < s.opts.numServerWorkers; i++ {
 		go s.serverWorker()
 	}
 }
 
-func (s *Server) stopServerWorkers() {
-	close(s.serverWorkerChannel)
-}
-
 // NewServer creates a gRPC server which has no service registered and has not
 // started to accept requests yet.
 func NewServer(opt ...ServerOption) *Server {
@@ -806,6 +827,18 @@ func (l *listenSocket) Close() error {
 // Serve returns when lis.Accept fails with fatal errors.  lis will be closed when
 // this method returns.
 // Serve will return a non-nil error unless Stop or GracefulStop is called.
+//
+// Note: All supported releases of Go (as of December 2023) override the OS
+// defaults for TCP keepalive time and interval to 15s. To enable TCP keepalive
+// with OS defaults for keepalive time and interval, callers need to do the
+// following two things:
+//   - pass a net.Listener created by calling the Listen method on a
+//     net.ListenConfig with the `KeepAlive` field set to a negative value. This
+//     will result in the Go standard library not overriding OS defaults for TCP
+//     keepalive interval and time. But this will also result in the Go standard
+//     library not enabling TCP keepalives by default.
+//   - override the Accept method on the passed in net.Listener and set the
+//     SO_KEEPALIVE socket option to enable TCP keepalives, with OS defaults.
 func (s *Server) Serve(lis net.Listener) error {
 	s.mu.Lock()
 	s.printf("serving")
@@ -913,24 +946,21 @@ func (s *Server) handleRawConn(lisAddr string, rawConn net.Conn) {
 		return
 	}
 
+	if cc, ok := rawConn.(interface {
+		PassServerTransport(transport.ServerTransport)
+	}); ok {
+		cc.PassServerTransport(st)
+	}
+
 	if !s.addConn(lisAddr, st) {
 		return
 	}
 	go func() {
-		s.serveStreams(st)
+		s.serveStreams(context.Background(), st, rawConn)
 		s.removeConn(lisAddr, st)
 	}()
 }
 
-func (s *Server) drainServerTransports(addr string) {
-	s.mu.Lock()
-	conns := s.conns[addr]
-	for st := range conns {
-		st.Drain("")
-	}
-	s.mu.Unlock()
-}
-
 // newHTTP2Transport sets up a http/2 transport (using the
 // gRPC http2 server transport in transport/http2_server.go).
 func (s *Server) newHTTP2Transport(c net.Conn) transport.ServerTransport {
@@ -971,18 +1001,31 @@ func (s *Server) newHTTP2Transport(c net.Conn) transport.ServerTransport {
 	return st
 }
 
-func (s *Server) serveStreams(st transport.ServerTransport) {
-	defer st.Close(errors.New("finished serving streams for the server transport"))
-	var wg sync.WaitGroup
+func (s *Server) serveStreams(ctx context.Context, st transport.ServerTransport, rawConn net.Conn) {
+	ctx = transport.SetConnection(ctx, rawConn)
+	ctx = peer.NewContext(ctx, st.Peer())
+	for _, sh := range s.opts.statsHandlers {
+		ctx = sh.TagConn(ctx, &stats.ConnTagInfo{
+			RemoteAddr: st.Peer().Addr,
+			LocalAddr:  st.Peer().LocalAddr,
+		})
+		sh.HandleConn(ctx, &stats.ConnBegin{})
+	}
 
-	streamQuota := newHandlerQuota(s.opts.maxConcurrentStreams)
-	st.HandleStreams(func(stream *transport.Stream) {
-		wg.Add(1)
+	defer func() {
+		st.Close(errors.New("finished serving streams for the server transport"))
+		for _, sh := range s.opts.statsHandlers {
+			sh.HandleConn(ctx, &stats.ConnEnd{})
+		}
+	}()
 
+	streamQuota := newHandlerQuota(s.opts.maxConcurrentStreams)
+	st.HandleStreams(ctx, func(stream *transport.Stream) {
+		s.handlersWG.Add(1)
 		streamQuota.acquire()
 		f := func() {
 			defer streamQuota.release()
-			defer wg.Done()
+			defer s.handlersWG.Done()
 			s.handleStream(st, stream)
 		}
 
@@ -996,7 +1039,6 @@ func (s *Server) serveStreams(st transport.ServerTransport) {
 		}
 		go f()
 	})
-	wg.Wait()
 }
 
 var _ http.Handler = (*Server)(nil)
@@ -1040,7 +1082,7 @@ func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 	defer s.removeConn(listenerAddressForServeHTTP, st)
-	s.serveStreams(st)
+	s.serveStreams(r.Context(), st, nil)
 }
 
 func (s *Server) addConn(addr string, st transport.ServerTransport) bool {
@@ -1689,6 +1731,7 @@ func (s *Server) processStreamingRPC(ctx context.Context, t transport.ServerTran
 
 func (s *Server) handleStream(t transport.ServerTransport, stream *transport.Stream) {
 	ctx := stream.Context()
+	ctx = contextWithServer(ctx, s)
 	var ti *traceInfo
 	if EnableTracing {
 		tr := trace.New("grpc.Recv."+methodFamily(stream.Method()), stream.Method())
@@ -1697,7 +1740,7 @@ func (s *Server) handleStream(t transport.ServerTransport, stream *transport.Str
 			tr: tr,
 			firstLine: firstLine{
 				client:     false,
-				remoteAddr: t.RemoteAddr(),
+				remoteAddr: t.Peer().Addr,
 			},
 		}
 		if dl, ok := ctx.Deadline(); ok {
@@ -1731,6 +1774,22 @@ func (s *Server) handleStream(t transport.ServerTransport, stream *transport.Str
 	service := sm[:pos]
 	method := sm[pos+1:]
 
+	md, _ := metadata.FromIncomingContext(ctx)
+	for _, sh := range s.opts.statsHandlers {
+		ctx = sh.TagRPC(ctx, &stats.RPCTagInfo{FullMethodName: stream.Method()})
+		sh.HandleRPC(ctx, &stats.InHeader{
+			FullMethod:  stream.Method(),
+			RemoteAddr:  t.Peer().Addr,
+			LocalAddr:   t.Peer().LocalAddr,
+			Compression: stream.RecvCompress(),
+			WireLength:  stream.HeaderWireLength(),
+			Header:      md,
+		})
+	}
+	// To have calls in stream callouts work. Will delete once all stats handler
+	// calls come from the gRPC layer.
+	stream.SetContext(ctx)
+
 	srv, knownService := s.services[service]
 	if knownService {
 		if md, ok := srv.methods[method]; ok {
@@ -1820,62 +1879,72 @@ func ServerTransportStreamFromContext(ctx context.Context) ServerTransportStream
 // pending RPCs on the client side will get notified by connection
 // errors.
 func (s *Server) Stop() {
-	s.quit.Fire()
+	s.stop(false)
+}
 
-	defer func() {
-		s.serveWG.Wait()
-		s.done.Fire()
-	}()
+// GracefulStop stops the gRPC server gracefully. It stops the server from
+// accepting new connections and RPCs and blocks until all the pending RPCs are
+// finished.
+func (s *Server) GracefulStop() {
+	s.stop(true)
+}
+
+func (s *Server) stop(graceful bool) {
+	s.quit.Fire()
+	defer s.done.Fire()
 
 	s.channelzRemoveOnce.Do(func() { channelz.RemoveEntry(s.channelzID) })
 
 	s.mu.Lock()
-	listeners := s.lis
-	s.lis = nil
-	conns := s.conns
-	s.conns = nil
-	// interrupt GracefulStop if Stop and GracefulStop are called concurrently.
-	s.cv.Broadcast()
+	s.closeListenersLocked()
+	// Wait for serving threads to be ready to exit.  Only then can we be sure no
+	// new conns will be created.
 	s.mu.Unlock()
+	s.serveWG.Wait()
 
-	for lis := range listeners {
-		lis.Close()
+	s.mu.Lock()
+	defer s.mu.Unlock()
+
+	if graceful {
+		s.drainAllServerTransportsLocked()
+	} else {
+		s.closeServerTransportsLocked()
 	}
-	for _, cs := range conns {
-		for st := range cs {
-			st.Close(errors.New("Server.Stop called"))
-		}
+
+	for len(s.conns) != 0 {
+		s.cv.Wait()
 	}
+	s.conns = nil
+
 	if s.opts.numServerWorkers > 0 {
-		s.stopServerWorkers()
+		// Closing the channel (only once, via grpcsync.OnceFunc) after all the
+		// connections have been closed above ensures that there are no
+		// goroutines executing the callback passed to st.HandleStreams (where
+		// the channel is written to).
+		s.serverWorkerChannelClose()
+	}
+
+	if graceful || s.opts.waitForHandlers {
+		s.handlersWG.Wait()
 	}
 
-	s.mu.Lock()
 	if s.events != nil {
 		s.events.Finish()
 		s.events = nil
 	}
-	s.mu.Unlock()
 }
 
-// GracefulStop stops the gRPC server gracefully. It stops the server from
-// accepting new connections and RPCs and blocks until all the pending RPCs are
-// finished.
-func (s *Server) GracefulStop() {
-	s.quit.Fire()
-	defer s.done.Fire()
-
-	s.channelzRemoveOnce.Do(func() { channelz.RemoveEntry(s.channelzID) })
-	s.mu.Lock()
-	if s.conns == nil {
-		s.mu.Unlock()
-		return
+// s.mu must be held by the caller.
+func (s *Server) closeServerTransportsLocked() {
+	for _, conns := range s.conns {
+		for st := range conns {
+			st.Close(errors.New("Server.Stop called"))
+		}
 	}
+}
 
-	for lis := range s.lis {
-		lis.Close()
-	}
-	s.lis = nil
+// s.mu must be held by the caller.
+func (s *Server) drainAllServerTransportsLocked() {
 	if !s.drain {
 		for _, conns := range s.conns {
 			for st := range conns {
@@ -1884,22 +1953,14 @@ func (s *Server) GracefulStop() {
 		}
 		s.drain = true
 	}
+}
 
-	// Wait for serving threads to be ready to exit.  Only then can we be sure no
-	// new conns will be created.
-	s.mu.Unlock()
-	s.serveWG.Wait()
-	s.mu.Lock()
-
-	for len(s.conns) != 0 {
-		s.cv.Wait()
-	}
-	s.conns = nil
-	if s.events != nil {
-		s.events.Finish()
-		s.events = nil
+// s.mu must be held by the caller.
+func (s *Server) closeListenersLocked() {
+	for lis := range s.lis {
+		lis.Close()
 	}
-	s.mu.Unlock()
+	s.lis = nil
 }
 
 // contentSubtype must be lowercase
@@ -1913,11 +1974,50 @@ func (s *Server) getCodec(contentSubtype string) baseCodec {
 	}
 	codec := encoding.GetCodec(contentSubtype)
 	if codec == nil {
+		logger.Warningf("Unsupported codec %q. Defaulting to %q for now. This will start to fail in future releases.", contentSubtype, proto.Name)
 		return encoding.GetCodec(proto.Name)
 	}
 	return codec
 }
 
+type serverKey struct{}
+
+// serverFromContext gets the Server from the context.
+func serverFromContext(ctx context.Context) *Server {
+	s, _ := ctx.Value(serverKey{}).(*Server)
+	return s
+}
+
+// contextWithServer sets the Server in the context.
+func contextWithServer(ctx context.Context, server *Server) context.Context {
+	return context.WithValue(ctx, serverKey{}, server)
+}
+
+// isRegisteredMethod returns whether the passed in method is registered as a
+// method on the server. /service/method and service/method will match if the
+// service and method are registered on the server.
+func (s *Server) isRegisteredMethod(serviceMethod string) bool {
+	if serviceMethod != "" && serviceMethod[0] == '/' {
+		serviceMethod = serviceMethod[1:]
+	}
+	pos := strings.LastIndex(serviceMethod, "/")
+	if pos == -1 { // Invalid method name syntax.
+		return false
+	}
+	service := serviceMethod[:pos]
+	method := serviceMethod[pos+1:]
+	srv, knownService := s.services[service]
+	if knownService {
+		if _, ok := srv.methods[method]; ok {
+			return true
+		}
+		if _, ok := srv.streams[method]; ok {
+			return true
+		}
+	}
+	return false
+}
+
 // SetHeader sets the header metadata to be sent from the server to the client.
 // The context provided must be the context passed to the server's handler.
 //
diff --git a/vendor/google.golang.org/grpc/stream.go b/vendor/google.golang.org/grpc/stream.go
index b14b2fbea2e..d621f52b1ab 100644
--- a/vendor/google.golang.org/grpc/stream.go
+++ b/vendor/google.golang.org/grpc/stream.go
@@ -48,6 +48,8 @@ import (
 	"google.golang.org/grpc/status"
 )
 
+var metadataFromOutgoingContextRaw = internal.FromOutgoingContextRaw.(func(context.Context) (metadata.MD, [][]string, bool))
+
 // StreamHandler defines the handler called by gRPC server to complete the
 // execution of a streaming RPC.
 //
@@ -184,7 +186,7 @@ func newClientStream(ctx context.Context, desc *StreamDesc, cc *ClientConn, meth
 	// when the RPC completes.
 	opts = append([]CallOption{OnFinish(func(error) { cc.idlenessMgr.OnCallEnd() })}, opts...)
 
-	if md, added, ok := metadata.FromOutgoingContextRaw(ctx); ok {
+	if md, added, ok := metadataFromOutgoingContextRaw(ctx); ok {
 		// validate md
 		if err := imetadata.Validate(md); err != nil {
 			return nil, status.Error(codes.Internal, err.Error())
diff --git a/vendor/google.golang.org/grpc/version.go b/vendor/google.golang.org/grpc/version.go
index 6d2cadd79a9..1ad1ba2ad68 100644
--- a/vendor/google.golang.org/grpc/version.go
+++ b/vendor/google.golang.org/grpc/version.go
@@ -19,4 +19,4 @@
 package grpc
 
 // Version is the current grpc version.
-const Version = "1.59.0"
+const Version = "1.61.0"
diff --git a/vendor/google.golang.org/grpc/vet.sh b/vendor/google.golang.org/grpc/vet.sh
index bb480f1f9cc..5da38a40996 100644
--- a/vendor/google.golang.org/grpc/vet.sh
+++ b/vendor/google.golang.org/grpc/vet.sh
@@ -35,7 +35,6 @@ if [[ "$1" = "-install" ]]; then
   # Install the pinned versions as defined in module tools.
   pushd ./test/tools
   go install \
-    golang.org/x/lint/golint \
     golang.org/x/tools/cmd/goimports \
     honnef.co/go/tools/cmd/staticcheck \
     github.com/client9/misspell/cmd/misspell
@@ -77,15 +76,19 @@ fi
 not grep 'func Test[^(]' *_test.go
 not grep 'func Test[^(]' test/*.go
 
+# - Check for typos in test function names
+git grep 'func (s) ' -- "*_test.go" | not grep -v 'func (s) Test'
+git grep 'func [A-Z]' -- "*_test.go" | not grep -v 'func Test\|Benchmark\|Example'
+
 # - Do not import x/net/context.
 not git grep -l 'x/net/context' -- "*.go"
 
 # - Do not import math/rand for real library code.  Use internal/grpcrand for
 #   thread safety.
-git grep -l '"math/rand"' -- "*.go" 2>&1 | not grep -v '^examples\|^stress\|grpcrand\|^benchmark\|wrr_test'
+git grep -l '"math/rand"' -- "*.go" 2>&1 | not grep -v '^examples\|^interop/stress\|grpcrand\|^benchmark\|wrr_test'
 
 # - Do not use "interface{}"; use "any" instead.
-git grep -l 'interface{}' -- "*.go" 2>&1 | not grep -v '\.pb\.go\|protoc-gen-go-grpc'
+git grep -l 'interface{}' -- "*.go" 2>&1 | not grep -v '\.pb\.go\|protoc-gen-go-grpc\|grpc_testing_not_regenerate'
 
 # - Do not call grpclog directly. Use grpclog.Component instead.
 git grep -l -e 'grpclog.I' --or -e 'grpclog.W' --or -e 'grpclog.E' --or -e 'grpclog.F' --or -e 'grpclog.V' -- "*.go" | not grep -v '^grpclog/component.go\|^internal/grpctest/tlogger_test.go'
@@ -94,15 +97,14 @@ git grep -l -e 'grpclog.I' --or -e 'grpclog.W' --or -e 'grpclog.E' --or -e 'grpc
 not git grep "\(import \|^\s*\)\"github.com/golang/protobuf/ptypes/" -- "*.go"
 
 # - Ensure all usages of grpc_testing package are renamed when importing.
-not git grep "\(import \|^\s*\)\"google.golang.org/grpc/interop/grpc_testing" -- "*.go" 
+not git grep "\(import \|^\s*\)\"google.golang.org/grpc/interop/grpc_testing" -- "*.go"
 
 # - Ensure all xds proto imports are renamed to *pb or *grpc.
 git grep '"github.com/envoyproxy/go-control-plane/envoy' -- '*.go' ':(exclude)*.pb.go' | not grep -v 'pb "\|grpc "'
 
 misspell -error .
 
-# - gofmt, goimports, golint (with exceptions for generated code), go vet,
-# go mod tidy.
+# - gofmt, goimports, go vet, go mod tidy.
 # Perform these checks on each module inside gRPC.
 for MOD_FILE in $(find . -name 'go.mod'); do
   MOD_DIR=$(dirname ${MOD_FILE})
@@ -110,7 +112,6 @@ for MOD_FILE in $(find . -name 'go.mod'); do
   go vet -all ./... | fail_on_output
   gofmt -s -d -l . 2>&1 | fail_on_output
   goimports -l . 2>&1 | not grep -vE "\.pb\.go"
-  golint ./... 2>&1 | not grep -vE "/grpc_testing_not_regenerate/.*\.pb\.go:"
 
   go mod tidy -compat=1.19
   git status --porcelain 2>&1 | fail_on_output || \
@@ -119,94 +120,71 @@ for MOD_FILE in $(find . -name 'go.mod'); do
 done
 
 # - Collection of static analysis checks
-#
-# TODO(dfawley): don't use deprecated functions in examples or first-party
-# plugins.
-# TODO(dfawley): enable ST1019 (duplicate imports) but allow for protobufs.
 SC_OUT="$(mktemp)"
-staticcheck -go 1.19 -checks 'inherit,-ST1015,-ST1019,-SA1019' ./... > "${SC_OUT}" || true
-# Error if anything other than deprecation warnings are printed.
-not grep -v "is deprecated:.*SA1019" "${SC_OUT}"
-# Only ignore the following deprecated types/fields/functions.
-not grep -Fv '.CredsBundle
-.HeaderMap
-.Metadata is deprecated: use Attributes
-.NewAddress
-.NewServiceConfig
-.Type is deprecated: use Attributes
-BuildVersion is deprecated
-balancer.ErrTransientFailure
-balancer.Picker
-extDesc.Filename is deprecated
-github.com/golang/protobuf/jsonpb is deprecated
-grpc.CallCustomCodec
-grpc.Code
-grpc.Compressor
-grpc.CustomCodec
-grpc.Decompressor
-grpc.MaxMsgSize
-grpc.MethodConfig
-grpc.NewGZIPCompressor
-grpc.NewGZIPDecompressor
-grpc.RPCCompressor
-grpc.RPCDecompressor
-grpc.ServiceConfig
-grpc.WithCompressor
-grpc.WithDecompressor
-grpc.WithDialer
-grpc.WithMaxMsgSize
-grpc.WithServiceConfig
-grpc.WithTimeout
-http.CloseNotifier
-info.SecurityVersion
-proto is deprecated
-proto.InternalMessageInfo is deprecated
-proto.EnumName is deprecated
-proto.ErrInternalBadWireType is deprecated
-proto.FileDescriptor is deprecated
-proto.Marshaler is deprecated
-proto.MessageType is deprecated
-proto.RegisterEnum is deprecated
-proto.RegisterFile is deprecated
-proto.RegisterType is deprecated
-proto.RegisterExtension is deprecated
-proto.RegisteredExtension is deprecated
-proto.RegisteredExtensions is deprecated
-proto.RegisterMapType is deprecated
-proto.Unmarshaler is deprecated
+staticcheck -go 1.19 -checks 'all' ./... > "${SC_OUT}" || true
+
+# Error for anything other than checks that need exclusions.
+grep -v "(ST1000)" "${SC_OUT}" | grep -v "(SA1019)" | grep -v "(ST1003)" | not grep -v "(ST1019)\|\(other import of\)"
+
+# Exclude underscore checks for generated code.
+grep "(ST1003)" "${SC_OUT}" | not grep -v '\(.pb.go:\)\|\(code_string_test.go:\)\|\(grpc_testing_not_regenerate\)'
+
+# Error for duplicate imports not including grpc protos.
+grep "(ST1019)\|\(other import of\)" "${SC_OUT}" | not grep -Fv 'XXXXX PleaseIgnoreUnused
+channelz/grpc_channelz_v1"
+go-control-plane/envoy
+grpclb/grpc_lb_v1"
+health/grpc_health_v1"
+interop/grpc_testing"
+orca/v3"
+proto/grpc_gcp"
+proto/grpc_lookup_v1"
+reflection/grpc_reflection_v1"
+reflection/grpc_reflection_v1alpha"
+XXXXX PleaseIgnoreUnused'
+
+# Error for any package comments not in generated code.
+grep "(ST1000)" "${SC_OUT}" | not grep -v "\.pb\.go:"
+
+# Only ignore the following deprecated types/fields/functions and exclude
+# generated code.
+grep "(SA1019)" "${SC_OUT}" | not grep -Fv 'XXXXX PleaseIgnoreUnused
+XXXXX Protobuf related deprecation errors:
+"github.com/golang/protobuf
+.pb.go:
+grpc_testing_not_regenerate
+: ptypes.
+proto.RegisterType
+XXXXX gRPC internal usage deprecation errors:
+"google.golang.org/grpc
+: grpc.
+: v1alpha.
+: v1alphareflectionpb.
+BalancerAttributes is deprecated:
+CredsBundle is deprecated:
+Metadata is deprecated: use Attributes instead.
+NewSubConn is deprecated:
+OverrideServerName is deprecated:
+RemoveSubConn is deprecated:
+SecurityVersion is deprecated:
 Target is deprecated: Use the Target field in the BuildOptions instead.
-xxx_messageInfo_
-' "${SC_OUT}"
-
-# - special golint on package comments.
-lint_package_comment_per_package() {
-  # Number of files in this go package.
-  fileCount=$(go list -f '{{len .GoFiles}}' $1)
-  if [ ${fileCount} -eq 0 ]; then
-    return 0
-  fi
-  # Number of package errors generated by golint.
-  lintPackageCommentErrorsCount=$(golint --min_confidence 0 $1 | grep -c "should have a package comment")
-  # golint complains about every file that's missing the package comment. If the
-  # number of files for this package is greater than the number of errors, there's
-  # at least one file with package comment, good. Otherwise, fail.
-  if [ ${fileCount} -le ${lintPackageCommentErrorsCount} ]; then
-    echo "Package $1 (with ${fileCount} files) is missing package comment"
-    return 1
-  fi
-}
-lint_package_comment() {
-  set +ex
-
-  count=0
-  for i in $(go list ./...); do
-    lint_package_comment_per_package "$i"
-    ((count += $?))
-  done
-
-  set -ex
-  return $count
-}
-lint_package_comment
+UpdateAddresses is deprecated:
+UpdateSubConnState is deprecated:
+balancer.ErrTransientFailure is deprecated:
+grpc/reflection/v1alpha/reflection.proto
+XXXXX xDS deprecated fields we support
+.ExactMatch
+.PrefixMatch
+.SafeRegexMatch
+.SuffixMatch
+GetContainsMatch
+GetExactMatch
+GetMatchSubjectAltNames
+GetPrefixMatch
+GetSafeRegexMatch
+GetSuffixMatch
+GetTlsCertificateCertificateProviderInstance
+GetValidationContextCertificateProviderInstance
+XXXXX PleaseIgnoreUnused'
 
 echo SUCCESS
diff --git a/vendor/google.golang.org/protobuf/encoding/protodelim/protodelim.go b/vendor/google.golang.org/protobuf/encoding/protodelim/protodelim.go
new file mode 100644
index 00000000000..2ef36bbcf92
--- /dev/null
+++ b/vendor/google.golang.org/protobuf/encoding/protodelim/protodelim.go
@@ -0,0 +1,160 @@
+// Copyright 2022 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package protodelim marshals and unmarshals varint size-delimited messages.
+package protodelim
+
+import (
+	"bufio"
+	"encoding/binary"
+	"fmt"
+	"io"
+
+	"google.golang.org/protobuf/encoding/protowire"
+	"google.golang.org/protobuf/internal/errors"
+	"google.golang.org/protobuf/proto"
+)
+
+// MarshalOptions is a configurable varint size-delimited marshaler.
+type MarshalOptions struct{ proto.MarshalOptions }
+
+// MarshalTo writes a varint size-delimited wire-format message to w.
+// If w returns an error, MarshalTo returns it unchanged.
+func (o MarshalOptions) MarshalTo(w io.Writer, m proto.Message) (int, error) {
+	msgBytes, err := o.MarshalOptions.Marshal(m)
+	if err != nil {
+		return 0, err
+	}
+
+	sizeBytes := protowire.AppendVarint(nil, uint64(len(msgBytes)))
+	sizeWritten, err := w.Write(sizeBytes)
+	if err != nil {
+		return sizeWritten, err
+	}
+	msgWritten, err := w.Write(msgBytes)
+	if err != nil {
+		return sizeWritten + msgWritten, err
+	}
+	return sizeWritten + msgWritten, nil
+}
+
+// MarshalTo writes a varint size-delimited wire-format message to w
+// with the default options.
+//
+// See the documentation for [MarshalOptions.MarshalTo].
+func MarshalTo(w io.Writer, m proto.Message) (int, error) {
+	return MarshalOptions{}.MarshalTo(w, m)
+}
+
+// UnmarshalOptions is a configurable varint size-delimited unmarshaler.
+type UnmarshalOptions struct {
+	proto.UnmarshalOptions
+
+	// MaxSize is the maximum size in wire-format bytes of a single message.
+	// Unmarshaling a message larger than MaxSize will return an error.
+	// A zero MaxSize will default to 4 MiB.
+	// Setting MaxSize to -1 disables the limit.
+	MaxSize int64
+}
+
+const defaultMaxSize = 4 << 20 // 4 MiB, corresponds to the default gRPC max request/response size
+
+// SizeTooLargeError is an error that is returned when the unmarshaler encounters a message size
+// that is larger than its configured [UnmarshalOptions.MaxSize].
+type SizeTooLargeError struct {
+	// Size is the varint size of the message encountered
+	// that was larger than the provided MaxSize.
+	Size uint64
+
+	// MaxSize is the MaxSize limit configured in UnmarshalOptions, which Size exceeded.
+	MaxSize uint64
+}
+
+func (e *SizeTooLargeError) Error() string {
+	return fmt.Sprintf("message size %d exceeded unmarshaler's maximum configured size %d", e.Size, e.MaxSize)
+}
+
+// Reader is the interface expected by [UnmarshalFrom].
+// It is implemented by *[bufio.Reader].
+type Reader interface {
+	io.Reader
+	io.ByteReader
+}
+
+// UnmarshalFrom parses and consumes a varint size-delimited wire-format message
+// from r.
+// The provided message must be mutable (e.g., a non-nil pointer to a message).
+//
+// The error is [io.EOF] error only if no bytes are read.
+// If an EOF happens after reading some but not all the bytes,
+// UnmarshalFrom returns a non-io.EOF error.
+// In particular if r returns a non-io.EOF error, UnmarshalFrom returns it unchanged,
+// and if only a size is read with no subsequent message, [io.ErrUnexpectedEOF] is returned.
+func (o UnmarshalOptions) UnmarshalFrom(r Reader, m proto.Message) error {
+	var sizeArr [binary.MaxVarintLen64]byte
+	sizeBuf := sizeArr[:0]
+	for i := range sizeArr {
+		b, err := r.ReadByte()
+		if err != nil {
+			// Immediate EOF is unexpected.
+			if err == io.EOF && i != 0 {
+				break
+			}
+			return err
+		}
+		sizeBuf = append(sizeBuf, b)
+		if b < 0x80 {
+			break
+		}
+	}
+	size, n := protowire.ConsumeVarint(sizeBuf)
+	if n < 0 {
+		return protowire.ParseError(n)
+	}
+
+	maxSize := o.MaxSize
+	if maxSize == 0 {
+		maxSize = defaultMaxSize
+	}
+	if maxSize != -1 && size > uint64(maxSize) {
+		return errors.Wrap(&SizeTooLargeError{Size: size, MaxSize: uint64(maxSize)}, "")
+	}
+
+	var b []byte
+	var err error
+	if br, ok := r.(*bufio.Reader); ok {
+		// Use the []byte from the bufio.Reader instead of having to allocate one.
+		// This reduces CPU usage and allocated bytes.
+		b, err = br.Peek(int(size))
+		if err == nil {
+			defer br.Discard(int(size))
+		} else {
+			b = nil
+		}
+	}
+	if b == nil {
+		b = make([]byte, size)
+		_, err = io.ReadFull(r, b)
+	}
+
+	if err == io.EOF {
+		return io.ErrUnexpectedEOF
+	}
+	if err != nil {
+		return err
+	}
+	if err := o.Unmarshal(b, m); err != nil {
+		return err
+	}
+	return nil
+}
+
+// UnmarshalFrom parses and consumes a varint size-delimited wire-format message
+// from r with the default options.
+// The provided message must be mutable (e.g., a non-nil pointer to a message).
+//
+// See the documentation for [UnmarshalOptions.UnmarshalFrom].
+func UnmarshalFrom(r Reader, m proto.Message) error {
+	return UnmarshalOptions{}.UnmarshalFrom(r, m)
+}
diff --git a/vendor/google.golang.org/protobuf/encoding/protojson/decode.go b/vendor/google.golang.org/protobuf/encoding/protojson/decode.go
index 5f28148d805..f47902371a6 100644
--- a/vendor/google.golang.org/protobuf/encoding/protojson/decode.go
+++ b/vendor/google.golang.org/protobuf/encoding/protojson/decode.go
@@ -11,6 +11,7 @@ import (
 	"strconv"
 	"strings"
 
+	"google.golang.org/protobuf/encoding/protowire"
 	"google.golang.org/protobuf/internal/encoding/json"
 	"google.golang.org/protobuf/internal/encoding/messageset"
 	"google.golang.org/protobuf/internal/errors"
@@ -23,7 +24,7 @@ import (
 	"google.golang.org/protobuf/reflect/protoregistry"
 )
 
-// Unmarshal reads the given []byte into the given proto.Message.
+// Unmarshal reads the given []byte into the given [proto.Message].
 // The provided message must be mutable (e.g., a non-nil pointer to a message).
 func Unmarshal(b []byte, m proto.Message) error {
 	return UnmarshalOptions{}.Unmarshal(b, m)
@@ -37,7 +38,7 @@ type UnmarshalOptions struct {
 	// required fields will not return an error.
 	AllowPartial bool
 
-	// If DiscardUnknown is set, unknown fields are ignored.
+	// If DiscardUnknown is set, unknown fields and enum name values are ignored.
 	DiscardUnknown bool
 
 	// Resolver is used for looking up types when unmarshaling
@@ -47,9 +48,13 @@ type UnmarshalOptions struct {
 		protoregistry.MessageTypeResolver
 		protoregistry.ExtensionTypeResolver
 	}
+
+	// RecursionLimit limits how deeply messages may be nested.
+	// If zero, a default limit is applied.
+	RecursionLimit int
 }
 
-// Unmarshal reads the given []byte and populates the given proto.Message
+// Unmarshal reads the given []byte and populates the given [proto.Message]
 // using options in the UnmarshalOptions object.
 // It will clear the message first before setting the fields.
 // If it returns an error, the given message may be partially set.
@@ -67,6 +72,9 @@ func (o UnmarshalOptions) unmarshal(b []byte, m proto.Message) error {
 	if o.Resolver == nil {
 		o.Resolver = protoregistry.GlobalTypes
 	}
+	if o.RecursionLimit == 0 {
+		o.RecursionLimit = protowire.DefaultRecursionLimit
+	}
 
 	dec := decoder{json.NewDecoder(b), o}
 	if err := dec.unmarshalMessage(m.ProtoReflect(), false); err != nil {
@@ -114,6 +122,10 @@ func (d decoder) syntaxError(pos int, f string, x ...interface{}) error {
 
 // unmarshalMessage unmarshals a message into the given protoreflect.Message.
 func (d decoder) unmarshalMessage(m protoreflect.Message, skipTypeURL bool) error {
+	d.opts.RecursionLimit--
+	if d.opts.RecursionLimit < 0 {
+		return errors.New("exceeded max recursion depth")
+	}
 	if unmarshal := wellKnownTypeUnmarshaler(m.Descriptor().FullName()); unmarshal != nil {
 		return unmarshal(d, m)
 	}
@@ -266,7 +278,9 @@ func (d decoder) unmarshalSingular(m protoreflect.Message, fd protoreflect.Field
 	if err != nil {
 		return err
 	}
-	m.Set(fd, val)
+	if val.IsValid() {
+		m.Set(fd, val)
+	}
 	return nil
 }
 
@@ -329,7 +343,7 @@ func (d decoder) unmarshalScalar(fd protoreflect.FieldDescriptor) (protoreflect.
 		}
 
 	case protoreflect.EnumKind:
-		if v, ok := unmarshalEnum(tok, fd); ok {
+		if v, ok := unmarshalEnum(tok, fd, d.opts.DiscardUnknown); ok {
 			return v, nil
 		}
 
@@ -474,7 +488,7 @@ func unmarshalBytes(tok json.Token) (protoreflect.Value, bool) {
 	return protoreflect.ValueOfBytes(b), true
 }
 
-func unmarshalEnum(tok json.Token, fd protoreflect.FieldDescriptor) (protoreflect.Value, bool) {
+func unmarshalEnum(tok json.Token, fd protoreflect.FieldDescriptor, discardUnknown bool) (protoreflect.Value, bool) {
 	switch tok.Kind() {
 	case json.String:
 		// Lookup EnumNumber based on name.
@@ -482,6 +496,9 @@ func unmarshalEnum(tok json.Token, fd protoreflect.FieldDescriptor) (protoreflec
 		if enumVal := fd.Enum().Values().ByName(protoreflect.Name(s)); enumVal != nil {
 			return protoreflect.ValueOfEnum(enumVal.Number()), true
 		}
+		if discardUnknown {
+			return protoreflect.Value{}, true
+		}
 
 	case json.Number:
 		if n, ok := tok.Int(32); ok {
@@ -542,7 +559,9 @@ func (d decoder) unmarshalList(list protoreflect.List, fd protoreflect.FieldDesc
 			if err != nil {
 				return err
 			}
-			list.Append(val)
+			if val.IsValid() {
+				list.Append(val)
+			}
 		}
 	}
 
@@ -609,8 +628,9 @@ Loop:
 		if err != nil {
 			return err
 		}
-
-		mmap.Set(pkey, pval)
+		if pval.IsValid() {
+			mmap.Set(pkey, pval)
+		}
 	}
 
 	return nil
diff --git a/vendor/google.golang.org/protobuf/encoding/protojson/doc.go b/vendor/google.golang.org/protobuf/encoding/protojson/doc.go
index 21d5d2cb18e..ae71007c18b 100644
--- a/vendor/google.golang.org/protobuf/encoding/protojson/doc.go
+++ b/vendor/google.golang.org/protobuf/encoding/protojson/doc.go
@@ -6,6 +6,6 @@
 // format. It follows the guide at
 // https://protobuf.dev/programming-guides/proto3#json.
 //
-// This package produces a different output than the standard "encoding/json"
+// This package produces a different output than the standard [encoding/json]
 // package, which does not operate correctly on protocol buffer messages.
 package protojson
diff --git a/vendor/google.golang.org/protobuf/encoding/protojson/encode.go b/vendor/google.golang.org/protobuf/encoding/protojson/encode.go
index 66b95870e97..3f75098b6fb 100644
--- a/vendor/google.golang.org/protobuf/encoding/protojson/encode.go
+++ b/vendor/google.golang.org/protobuf/encoding/protojson/encode.go
@@ -31,7 +31,7 @@ func Format(m proto.Message) string {
 	return MarshalOptions{Multiline: true}.Format(m)
 }
 
-// Marshal writes the given proto.Message in JSON format using default options.
+// Marshal writes the given [proto.Message] in JSON format using default options.
 // Do not depend on the output being stable. It may change over time across
 // different versions of the program.
 func Marshal(m proto.Message) ([]byte, error) {
@@ -81,6 +81,25 @@ type MarshalOptions struct {
 	//  ╚═══════╧════════════════════════════╝
 	EmitUnpopulated bool
 
+	// EmitDefaultValues specifies whether to emit default-valued primitive fields,
+	// empty lists, and empty maps. The fields affected are as follows:
+	//  ╔═══════╤════════════════════════════════════════╗
+	//  ║ JSON  │ Protobuf field                         ║
+	//  ╠═══════╪════════════════════════════════════════╣
+	//  ║ false │ non-optional scalar boolean fields     ║
+	//  ║ 0     │ non-optional scalar numeric fields     ║
+	//  ║ ""    │ non-optional scalar string/byte fields ║
+	//  ║ []    │ empty repeated fields                  ║
+	//  ║ {}    │ empty map fields                       ║
+	//  ╚═══════╧════════════════════════════════════════╝
+	//
+	// Behaves similarly to EmitUnpopulated, but does not emit "null"-value fields,
+	// i.e. presence-sensing fields that are omitted will remain omitted to preserve
+	// presence-sensing.
+	// EmitUnpopulated takes precedence over EmitDefaultValues since the former generates
+	// a strict superset of the latter.
+	EmitDefaultValues bool
+
 	// Resolver is used for looking up types when expanding google.protobuf.Any
 	// messages. If nil, this defaults to using protoregistry.GlobalTypes.
 	Resolver interface {
@@ -102,7 +121,7 @@ func (o MarshalOptions) Format(m proto.Message) string {
 	return string(b)
 }
 
-// Marshal marshals the given proto.Message in the JSON format using options in
+// Marshal marshals the given [proto.Message] in the JSON format using options in
 // MarshalOptions. Do not depend on the output being stable. It may change over
 // time across different versions of the program.
 func (o MarshalOptions) Marshal(m proto.Message) ([]byte, error) {
@@ -178,7 +197,11 @@ func (m typeURLFieldRanger) Range(f func(protoreflect.FieldDescriptor, protorefl
 
 // unpopulatedFieldRanger wraps a protoreflect.Message and modifies its Range
 // method to additionally iterate over unpopulated fields.
-type unpopulatedFieldRanger struct{ protoreflect.Message }
+type unpopulatedFieldRanger struct {
+	protoreflect.Message
+
+	skipNull bool
+}
 
 func (m unpopulatedFieldRanger) Range(f func(protoreflect.FieldDescriptor, protoreflect.Value) bool) {
 	fds := m.Descriptor().Fields()
@@ -192,6 +215,9 @@ func (m unpopulatedFieldRanger) Range(f func(protoreflect.FieldDescriptor, proto
 		isProto2Scalar := fd.Syntax() == protoreflect.Proto2 && fd.Default().IsValid()
 		isSingularMessage := fd.Cardinality() != protoreflect.Repeated && fd.Message() != nil
 		if isProto2Scalar || isSingularMessage {
+			if m.skipNull {
+				continue
+			}
 			v = protoreflect.Value{} // use invalid value to emit null
 		}
 		if !f(fd, v) {
@@ -217,8 +243,11 @@ func (e encoder) marshalMessage(m protoreflect.Message, typeURL string) error {
 	defer e.EndObject()
 
 	var fields order.FieldRanger = m
-	if e.opts.EmitUnpopulated {
-		fields = unpopulatedFieldRanger{m}
+	switch {
+	case e.opts.EmitUnpopulated:
+		fields = unpopulatedFieldRanger{Message: m, skipNull: false}
+	case e.opts.EmitDefaultValues:
+		fields = unpopulatedFieldRanger{Message: m, skipNull: true}
 	}
 	if typeURL != "" {
 		fields = typeURLFieldRanger{fields, typeURL}
diff --git a/vendor/google.golang.org/protobuf/encoding/protojson/well_known_types.go b/vendor/google.golang.org/protobuf/encoding/protojson/well_known_types.go
index 6c37d417449..25329b7692e 100644
--- a/vendor/google.golang.org/protobuf/encoding/protojson/well_known_types.go
+++ b/vendor/google.golang.org/protobuf/encoding/protojson/well_known_types.go
@@ -176,7 +176,7 @@ func (d decoder) unmarshalAny(m protoreflect.Message) error {
 	// Use another decoder to parse the unread bytes for @type field. This
 	// avoids advancing a read from current decoder because the current JSON
 	// object may contain the fields of the embedded type.
-	dec := decoder{d.Clone(), UnmarshalOptions{}}
+	dec := decoder{d.Clone(), UnmarshalOptions{RecursionLimit: d.opts.RecursionLimit}}
 	tok, err := findTypeURL(dec)
 	switch err {
 	case errEmptyObject:
@@ -308,48 +308,25 @@ Loop:
 // array) in order to advance the read to the next JSON value. It relies on
 // the decoder returning an error if the types are not in valid sequence.
 func (d decoder) skipJSONValue() error {
-	tok, err := d.Read()
-	if err != nil {
-		return err
-	}
-	// Only need to continue reading for objects and arrays.
-	switch tok.Kind() {
-	case json.ObjectOpen:
-		for {
-			tok, err := d.Read()
-			if err != nil {
-				return err
-			}
-			switch tok.Kind() {
-			case json.ObjectClose:
-				return nil
-			case json.Name:
-				// Skip object field value.
-				if err := d.skipJSONValue(); err != nil {
-					return err
-				}
-			}
+	var open int
+	for {
+		tok, err := d.Read()
+		if err != nil {
+			return err
 		}
-
-	case json.ArrayOpen:
-		for {
-			tok, err := d.Peek()
-			if err != nil {
-				return err
-			}
-			switch tok.Kind() {
-			case json.ArrayClose:
-				d.Read()
-				return nil
-			default:
-				// Skip array item.
-				if err := d.skipJSONValue(); err != nil {
-					return err
-				}
+		switch tok.Kind() {
+		case json.ObjectClose, json.ArrayClose:
+			open--
+		case json.ObjectOpen, json.ArrayOpen:
+			open++
+			if open > d.opts.RecursionLimit {
+				return errors.New("exceeded max recursion depth")
 			}
 		}
+		if open == 0 {
+			return nil
+		}
 	}
-	return nil
 }
 
 // unmarshalAnyValue unmarshals the given custom-type message from the JSON
diff --git a/vendor/google.golang.org/protobuf/encoding/prototext/decode.go b/vendor/google.golang.org/protobuf/encoding/prototext/decode.go
index 4921b2d4a76..a45f112bce3 100644
--- a/vendor/google.golang.org/protobuf/encoding/prototext/decode.go
+++ b/vendor/google.golang.org/protobuf/encoding/prototext/decode.go
@@ -21,7 +21,7 @@ import (
 	"google.golang.org/protobuf/reflect/protoregistry"
 )
 
-// Unmarshal reads the given []byte into the given proto.Message.
+// Unmarshal reads the given []byte into the given [proto.Message].
 // The provided message must be mutable (e.g., a non-nil pointer to a message).
 func Unmarshal(b []byte, m proto.Message) error {
 	return UnmarshalOptions{}.Unmarshal(b, m)
@@ -51,7 +51,7 @@ type UnmarshalOptions struct {
 	}
 }
 
-// Unmarshal reads the given []byte and populates the given proto.Message
+// Unmarshal reads the given []byte and populates the given [proto.Message]
 // using options in the UnmarshalOptions object.
 // The provided message must be mutable (e.g., a non-nil pointer to a message).
 func (o UnmarshalOptions) Unmarshal(b []byte, m proto.Message) error {
@@ -739,7 +739,9 @@ func (d decoder) skipValue() error {
 			case text.ListClose:
 				return nil
 			case text.MessageOpen:
-				return d.skipMessageValue()
+				if err := d.skipMessageValue(); err != nil {
+					return err
+				}
 			default:
 				// Skip items. This will not validate whether skipped values are
 				// of the same type or not, same behavior as C++
diff --git a/vendor/google.golang.org/protobuf/encoding/prototext/encode.go b/vendor/google.golang.org/protobuf/encoding/prototext/encode.go
index 722a7b41df3..95967e8112a 100644
--- a/vendor/google.golang.org/protobuf/encoding/prototext/encode.go
+++ b/vendor/google.golang.org/protobuf/encoding/prototext/encode.go
@@ -33,7 +33,7 @@ func Format(m proto.Message) string {
 	return MarshalOptions{Multiline: true}.Format(m)
 }
 
-// Marshal writes the given proto.Message in textproto format using default
+// Marshal writes the given [proto.Message] in textproto format using default
 // options. Do not depend on the output being stable. It may change over time
 // across different versions of the program.
 func Marshal(m proto.Message) ([]byte, error) {
@@ -97,7 +97,7 @@ func (o MarshalOptions) Format(m proto.Message) string {
 	return string(b)
 }
 
-// Marshal writes the given proto.Message in textproto format using options in
+// Marshal writes the given [proto.Message] in textproto format using options in
 // MarshalOptions object. Do not depend on the output being stable. It may
 // change over time across different versions of the program.
 func (o MarshalOptions) Marshal(m proto.Message) ([]byte, error) {
diff --git a/vendor/google.golang.org/protobuf/encoding/protowire/wire.go b/vendor/google.golang.org/protobuf/encoding/protowire/wire.go
index f4b4686cf9d..e942bc983ee 100644
--- a/vendor/google.golang.org/protobuf/encoding/protowire/wire.go
+++ b/vendor/google.golang.org/protobuf/encoding/protowire/wire.go
@@ -6,7 +6,7 @@
 // See https://protobuf.dev/programming-guides/encoding.
 //
 // For marshaling and unmarshaling entire protobuf messages,
-// use the "google.golang.org/protobuf/proto" package instead.
+// use the [google.golang.org/protobuf/proto] package instead.
 package protowire
 
 import (
@@ -87,7 +87,7 @@ func ParseError(n int) error {
 
 // ConsumeField parses an entire field record (both tag and value) and returns
 // the field number, the wire type, and the total length.
-// This returns a negative length upon an error (see ParseError).
+// This returns a negative length upon an error (see [ParseError]).
 //
 // The total length includes the tag header and the end group marker (if the
 // field is a group).
@@ -104,8 +104,8 @@ func ConsumeField(b []byte) (Number, Type, int) {
 }
 
 // ConsumeFieldValue parses a field value and returns its length.
-// This assumes that the field Number and wire Type have already been parsed.
-// This returns a negative length upon an error (see ParseError).
+// This assumes that the field [Number] and wire [Type] have already been parsed.
+// This returns a negative length upon an error (see [ParseError]).
 //
 // When parsing a group, the length includes the end group marker and
 // the end group is verified to match the starting field number.
@@ -164,7 +164,7 @@ func AppendTag(b []byte, num Number, typ Type) []byte {
 }
 
 // ConsumeTag parses b as a varint-encoded tag, reporting its length.
-// This returns a negative length upon an error (see ParseError).
+// This returns a negative length upon an error (see [ParseError]).
 func ConsumeTag(b []byte) (Number, Type, int) {
 	v, n := ConsumeVarint(b)
 	if n < 0 {
@@ -263,7 +263,7 @@ func AppendVarint(b []byte, v uint64) []byte {
 }
 
 // ConsumeVarint parses b as a varint-encoded uint64, reporting its length.
-// This returns a negative length upon an error (see ParseError).
+// This returns a negative length upon an error (see [ParseError]).
 func ConsumeVarint(b []byte) (v uint64, n int) {
 	var y uint64
 	if len(b) <= 0 {
@@ -384,7 +384,7 @@ func AppendFixed32(b []byte, v uint32) []byte {
 }
 
 // ConsumeFixed32 parses b as a little-endian uint32, reporting its length.
-// This returns a negative length upon an error (see ParseError).
+// This returns a negative length upon an error (see [ParseError]).
 func ConsumeFixed32(b []byte) (v uint32, n int) {
 	if len(b) < 4 {
 		return 0, errCodeTruncated
@@ -412,7 +412,7 @@ func AppendFixed64(b []byte, v uint64) []byte {
 }
 
 // ConsumeFixed64 parses b as a little-endian uint64, reporting its length.
-// This returns a negative length upon an error (see ParseError).
+// This returns a negative length upon an error (see [ParseError]).
 func ConsumeFixed64(b []byte) (v uint64, n int) {
 	if len(b) < 8 {
 		return 0, errCodeTruncated
@@ -432,7 +432,7 @@ func AppendBytes(b []byte, v []byte) []byte {
 }
 
 // ConsumeBytes parses b as a length-prefixed bytes value, reporting its length.
-// This returns a negative length upon an error (see ParseError).
+// This returns a negative length upon an error (see [ParseError]).
 func ConsumeBytes(b []byte) (v []byte, n int) {
 	m, n := ConsumeVarint(b)
 	if n < 0 {
@@ -456,7 +456,7 @@ func AppendString(b []byte, v string) []byte {
 }
 
 // ConsumeString parses b as a length-prefixed bytes value, reporting its length.
-// This returns a negative length upon an error (see ParseError).
+// This returns a negative length upon an error (see [ParseError]).
 func ConsumeString(b []byte) (v string, n int) {
 	bb, n := ConsumeBytes(b)
 	return string(bb), n
@@ -471,7 +471,7 @@ func AppendGroup(b []byte, num Number, v []byte) []byte {
 // ConsumeGroup parses b as a group value until the trailing end group marker,
 // and verifies that the end marker matches the provided num. The value v
 // does not contain the end marker, while the length does contain the end marker.
-// This returns a negative length upon an error (see ParseError).
+// This returns a negative length upon an error (see [ParseError]).
 func ConsumeGroup(num Number, b []byte) (v []byte, n int) {
 	n = ConsumeFieldValue(num, StartGroupType, b)
 	if n < 0 {
@@ -495,8 +495,8 @@ func SizeGroup(num Number, n int) int {
 	return n + SizeTag(num)
 }
 
-// DecodeTag decodes the field Number and wire Type from its unified form.
-// The Number is -1 if the decoded field number overflows int32.
+// DecodeTag decodes the field [Number] and wire [Type] from its unified form.
+// The [Number] is -1 if the decoded field number overflows int32.
 // Other than overflow, this does not check for field number validity.
 func DecodeTag(x uint64) (Number, Type) {
 	// NOTE: MessageSet allows for larger field numbers than normal.
@@ -506,7 +506,7 @@ func DecodeTag(x uint64) (Number, Type) {
 	return Number(x >> 3), Type(x & 7)
 }
 
-// EncodeTag encodes the field Number and wire Type into its unified form.
+// EncodeTag encodes the field [Number] and wire [Type] into its unified form.
 func EncodeTag(num Number, typ Type) uint64 {
 	return uint64(num)<<3 | uint64(typ&7)
 }
diff --git a/vendor/google.golang.org/protobuf/internal/descfmt/stringer.go b/vendor/google.golang.org/protobuf/internal/descfmt/stringer.go
index db5248e1b51..a45625c8d1f 100644
--- a/vendor/google.golang.org/protobuf/internal/descfmt/stringer.go
+++ b/vendor/google.golang.org/protobuf/internal/descfmt/stringer.go
@@ -83,7 +83,13 @@ func formatListOpt(vs list, isRoot, allowMulti bool) string {
 	case protoreflect.FileImports:
 		for i := 0; i < vs.Len(); i++ {
 			var rs records
-			rs.Append(reflect.ValueOf(vs.Get(i)), "Path", "Package", "IsPublic", "IsWeak")
+			rv := reflect.ValueOf(vs.Get(i))
+			rs.Append(rv, []methodAndName{
+				{rv.MethodByName("Path"), "Path"},
+				{rv.MethodByName("Package"), "Package"},
+				{rv.MethodByName("IsPublic"), "IsPublic"},
+				{rv.MethodByName("IsWeak"), "IsWeak"},
+			}...)
 			ss = append(ss, "{"+rs.Join()+"}")
 		}
 		return start + joinStrings(ss, allowMulti) + end
@@ -92,34 +98,26 @@ func formatListOpt(vs list, isRoot, allowMulti bool) string {
 		for i := 0; i < vs.Len(); i++ {
 			m := reflect.ValueOf(vs).MethodByName("Get")
 			v := m.Call([]reflect.Value{reflect.ValueOf(i)})[0].Interface()
-			ss = append(ss, formatDescOpt(v.(protoreflect.Descriptor), false, allowMulti && !isEnumValue))
+			ss = append(ss, formatDescOpt(v.(protoreflect.Descriptor), false, allowMulti && !isEnumValue, nil))
 		}
 		return start + joinStrings(ss, allowMulti && isEnumValue) + end
 	}
 }
 
-// descriptorAccessors is a list of accessors to print for each descriptor.
-//
-// Do not print all accessors since some contain redundant information,
-// while others are pointers that we do not want to follow since the descriptor
-// is actually a cyclic graph.
-//
-// Using a list allows us to print the accessors in a sensible order.
-var descriptorAccessors = map[reflect.Type][]string{
-	reflect.TypeOf((*protoreflect.FileDescriptor)(nil)).Elem():      {"Path", "Package", "Imports", "Messages", "Enums", "Extensions", "Services"},
-	reflect.TypeOf((*protoreflect.MessageDescriptor)(nil)).Elem():   {"IsMapEntry", "Fields", "Oneofs", "ReservedNames", "ReservedRanges", "RequiredNumbers", "ExtensionRanges", "Messages", "Enums", "Extensions"},
-	reflect.TypeOf((*protoreflect.FieldDescriptor)(nil)).Elem():     {"Number", "Cardinality", "Kind", "HasJSONName", "JSONName", "HasPresence", "IsExtension", "IsPacked", "IsWeak", "IsList", "IsMap", "MapKey", "MapValue", "HasDefault", "Default", "ContainingOneof", "ContainingMessage", "Message", "Enum"},
-	reflect.TypeOf((*protoreflect.OneofDescriptor)(nil)).Elem():     {"Fields"}, // not directly used; must keep in sync with formatDescOpt
-	reflect.TypeOf((*protoreflect.EnumDescriptor)(nil)).Elem():      {"Values", "ReservedNames", "ReservedRanges"},
-	reflect.TypeOf((*protoreflect.EnumValueDescriptor)(nil)).Elem(): {"Number"},
-	reflect.TypeOf((*protoreflect.ServiceDescriptor)(nil)).Elem():   {"Methods"},
-	reflect.TypeOf((*protoreflect.MethodDescriptor)(nil)).Elem():    {"Input", "Output", "IsStreamingClient", "IsStreamingServer"},
+type methodAndName struct {
+	method reflect.Value
+	name   string
 }
 
 func FormatDesc(s fmt.State, r rune, t protoreflect.Descriptor) {
-	io.WriteString(s, formatDescOpt(t, true, r == 'v' && (s.Flag('+') || s.Flag('#'))))
+	io.WriteString(s, formatDescOpt(t, true, r == 'v' && (s.Flag('+') || s.Flag('#')), nil))
 }
-func formatDescOpt(t protoreflect.Descriptor, isRoot, allowMulti bool) string {
+
+func InternalFormatDescOptForTesting(t protoreflect.Descriptor, isRoot, allowMulti bool, record func(string)) string {
+	return formatDescOpt(t, isRoot, allowMulti, record)
+}
+
+func formatDescOpt(t protoreflect.Descriptor, isRoot, allowMulti bool, record func(string)) string {
 	rv := reflect.ValueOf(t)
 	rt := rv.MethodByName("ProtoType").Type().In(0)
 
@@ -129,26 +127,60 @@ func formatDescOpt(t protoreflect.Descriptor, isRoot, allowMulti bool) string {
 	}
 
 	_, isFile := t.(protoreflect.FileDescriptor)
-	rs := records{allowMulti: allowMulti}
+	rs := records{
+		allowMulti: allowMulti,
+		record:     record,
+	}
 	if t.IsPlaceholder() {
 		if isFile {
-			rs.Append(rv, "Path", "Package", "IsPlaceholder")
+			rs.Append(rv, []methodAndName{
+				{rv.MethodByName("Path"), "Path"},
+				{rv.MethodByName("Package"), "Package"},
+				{rv.MethodByName("IsPlaceholder"), "IsPlaceholder"},
+			}...)
 		} else {
-			rs.Append(rv, "FullName", "IsPlaceholder")
+			rs.Append(rv, []methodAndName{
+				{rv.MethodByName("FullName"), "FullName"},
+				{rv.MethodByName("IsPlaceholder"), "IsPlaceholder"},
+			}...)
 		}
 	} else {
 		switch {
 		case isFile:
-			rs.Append(rv, "Syntax")
+			rs.Append(rv, methodAndName{rv.MethodByName("Syntax"), "Syntax"})
 		case isRoot:
-			rs.Append(rv, "Syntax", "FullName")
+			rs.Append(rv, []methodAndName{
+				{rv.MethodByName("Syntax"), "Syntax"},
+				{rv.MethodByName("FullName"), "FullName"},
+			}...)
 		default:
-			rs.Append(rv, "Name")
+			rs.Append(rv, methodAndName{rv.MethodByName("Name"), "Name"})
 		}
 		switch t := t.(type) {
 		case protoreflect.FieldDescriptor:
-			for _, s := range descriptorAccessors[rt] {
-				switch s {
+			accessors := []methodAndName{
+				{rv.MethodByName("Number"), "Number"},
+				{rv.MethodByName("Cardinality"), "Cardinality"},
+				{rv.MethodByName("Kind"), "Kind"},
+				{rv.MethodByName("HasJSONName"), "HasJSONName"},
+				{rv.MethodByName("JSONName"), "JSONName"},
+				{rv.MethodByName("HasPresence"), "HasPresence"},
+				{rv.MethodByName("IsExtension"), "IsExtension"},
+				{rv.MethodByName("IsPacked"), "IsPacked"},
+				{rv.MethodByName("IsWeak"), "IsWeak"},
+				{rv.MethodByName("IsList"), "IsList"},
+				{rv.MethodByName("IsMap"), "IsMap"},
+				{rv.MethodByName("MapKey"), "MapKey"},
+				{rv.MethodByName("MapValue"), "MapValue"},
+				{rv.MethodByName("HasDefault"), "HasDefault"},
+				{rv.MethodByName("Default"), "Default"},
+				{rv.MethodByName("ContainingOneof"), "ContainingOneof"},
+				{rv.MethodByName("ContainingMessage"), "ContainingMessage"},
+				{rv.MethodByName("Message"), "Message"},
+				{rv.MethodByName("Enum"), "Enum"},
+			}
+			for _, s := range accessors {
+				switch s.name {
 				case "MapKey":
 					if k := t.MapKey(); k != nil {
 						rs.recs = append(rs.recs, [2]string{"MapKey", k.Kind().String()})
@@ -157,20 +189,20 @@ func formatDescOpt(t protoreflect.Descriptor, isRoot, allowMulti bool) string {
 					if v := t.MapValue(); v != nil {
 						switch v.Kind() {
 						case protoreflect.EnumKind:
-							rs.recs = append(rs.recs, [2]string{"MapValue", string(v.Enum().FullName())})
+							rs.AppendRecs("MapValue", [2]string{"MapValue", string(v.Enum().FullName())})
 						case protoreflect.MessageKind, protoreflect.GroupKind:
-							rs.recs = append(rs.recs, [2]string{"MapValue", string(v.Message().FullName())})
+							rs.AppendRecs("MapValue", [2]string{"MapValue", string(v.Message().FullName())})
 						default:
-							rs.recs = append(rs.recs, [2]string{"MapValue", v.Kind().String()})
+							rs.AppendRecs("MapValue", [2]string{"MapValue", v.Kind().String()})
 						}
 					}
 				case "ContainingOneof":
 					if od := t.ContainingOneof(); od != nil {
-						rs.recs = append(rs.recs, [2]string{"Oneof", string(od.Name())})
+						rs.AppendRecs("ContainingOneof", [2]string{"Oneof", string(od.Name())})
 					}
 				case "ContainingMessage":
 					if t.IsExtension() {
-						rs.recs = append(rs.recs, [2]string{"Extendee", string(t.ContainingMessage().FullName())})
+						rs.AppendRecs("ContainingMessage", [2]string{"Extendee", string(t.ContainingMessage().FullName())})
 					}
 				case "Message":
 					if !t.IsMap() {
@@ -187,13 +219,61 @@ func formatDescOpt(t protoreflect.Descriptor, isRoot, allowMulti bool) string {
 				ss = append(ss, string(fs.Get(i).Name()))
 			}
 			if len(ss) > 0 {
-				rs.recs = append(rs.recs, [2]string{"Fields", "[" + joinStrings(ss, false) + "]"})
+				rs.AppendRecs("Fields", [2]string{"Fields", "[" + joinStrings(ss, false) + "]"})
 			}
-		default:
-			rs.Append(rv, descriptorAccessors[rt]...)
+
+		case protoreflect.FileDescriptor:
+			rs.Append(rv, []methodAndName{
+				{rv.MethodByName("Path"), "Path"},
+				{rv.MethodByName("Package"), "Package"},
+				{rv.MethodByName("Imports"), "Imports"},
+				{rv.MethodByName("Messages"), "Messages"},
+				{rv.MethodByName("Enums"), "Enums"},
+				{rv.MethodByName("Extensions"), "Extensions"},
+				{rv.MethodByName("Services"), "Services"},
+			}...)
+
+		case protoreflect.MessageDescriptor:
+			rs.Append(rv, []methodAndName{
+				{rv.MethodByName("IsMapEntry"), "IsMapEntry"},
+				{rv.MethodByName("Fields"), "Fields"},
+				{rv.MethodByName("Oneofs"), "Oneofs"},
+				{rv.MethodByName("ReservedNames"), "ReservedNames"},
+				{rv.MethodByName("ReservedRanges"), "ReservedRanges"},
+				{rv.MethodByName("RequiredNumbers"), "RequiredNumbers"},
+				{rv.MethodByName("ExtensionRanges"), "ExtensionRanges"},
+				{rv.MethodByName("Messages"), "Messages"},
+				{rv.MethodByName("Enums"), "Enums"},
+				{rv.MethodByName("Extensions"), "Extensions"},
+			}...)
+
+		case protoreflect.EnumDescriptor:
+			rs.Append(rv, []methodAndName{
+				{rv.MethodByName("Values"), "Values"},
+				{rv.MethodByName("ReservedNames"), "ReservedNames"},
+				{rv.MethodByName("ReservedRanges"), "ReservedRanges"},
+			}...)
+
+		case protoreflect.EnumValueDescriptor:
+			rs.Append(rv, []methodAndName{
+				{rv.MethodByName("Number"), "Number"},
+			}...)
+
+		case protoreflect.ServiceDescriptor:
+			rs.Append(rv, []methodAndName{
+				{rv.MethodByName("Methods"), "Methods"},
+			}...)
+
+		case protoreflect.MethodDescriptor:
+			rs.Append(rv, []methodAndName{
+				{rv.MethodByName("Input"), "Input"},
+				{rv.MethodByName("Output"), "Output"},
+				{rv.MethodByName("IsStreamingClient"), "IsStreamingClient"},
+				{rv.MethodByName("IsStreamingServer"), "IsStreamingServer"},
+			}...)
 		}
-		if rv.MethodByName("GoType").IsValid() {
-			rs.Append(rv, "GoType")
+		if m := rv.MethodByName("GoType"); m.IsValid() {
+			rs.Append(rv, methodAndName{m, "GoType"})
 		}
 	}
 	return start + rs.Join() + end
@@ -202,19 +282,34 @@ func formatDescOpt(t protoreflect.Descriptor, isRoot, allowMulti bool) string {
 type records struct {
 	recs       [][2]string
 	allowMulti bool
+
+	// record is a function that will be called for every Append() or
+	// AppendRecs() call, to be used for testing with the
+	// InternalFormatDescOptForTesting function.
+	record func(string)
 }
 
-func (rs *records) Append(v reflect.Value, accessors ...string) {
+func (rs *records) AppendRecs(fieldName string, newRecs [2]string) {
+	if rs.record != nil {
+		rs.record(fieldName)
+	}
+	rs.recs = append(rs.recs, newRecs)
+}
+
+func (rs *records) Append(v reflect.Value, accessors ...methodAndName) {
 	for _, a := range accessors {
+		if rs.record != nil {
+			rs.record(a.name)
+		}
 		var rv reflect.Value
-		if m := v.MethodByName(a); m.IsValid() {
-			rv = m.Call(nil)[0]
+		if a.method.IsValid() {
+			rv = a.method.Call(nil)[0]
 		}
 		if v.Kind() == reflect.Struct && !rv.IsValid() {
-			rv = v.FieldByName(a)
+			rv = v.FieldByName(a.name)
 		}
 		if !rv.IsValid() {
-			panic(fmt.Sprintf("unknown accessor: %v.%s", v.Type(), a))
+			panic(fmt.Sprintf("unknown accessor: %v.%s", v.Type(), a.name))
 		}
 		if _, ok := rv.Interface().(protoreflect.Value); ok {
 			rv = rv.MethodByName("Interface").Call(nil)[0]
@@ -261,7 +356,7 @@ func (rs *records) Append(v reflect.Value, accessors ...string) {
 		default:
 			s = fmt.Sprint(v)
 		}
-		rs.recs = append(rs.recs, [2]string{a, s})
+		rs.recs = append(rs.recs, [2]string{a.name, s})
 	}
 }
 
diff --git a/vendor/google.golang.org/protobuf/internal/filedesc/desc.go b/vendor/google.golang.org/protobuf/internal/filedesc/desc.go
index 7c3689baee8..193c68e8f91 100644
--- a/vendor/google.golang.org/protobuf/internal/filedesc/desc.go
+++ b/vendor/google.golang.org/protobuf/internal/filedesc/desc.go
@@ -21,11 +21,26 @@ import (
 	"google.golang.org/protobuf/reflect/protoregistry"
 )
 
+// Edition is an Enum for proto2.Edition
+type Edition int32
+
+// These values align with the value of Enum in descriptor.proto which allows
+// direct conversion between the proto enum and this enum.
+const (
+	EditionUnknown     Edition = 0
+	EditionProto2      Edition = 998
+	EditionProto3      Edition = 999
+	Edition2023        Edition = 1000
+	EditionUnsupported Edition = 100000
+)
+
 // The types in this file may have a suffix:
 //	• L0: Contains fields common to all descriptors (except File) and
 //	must be initialized up front.
 //	• L1: Contains fields specific to a descriptor and
-//	must be initialized up front.
+//	must be initialized up front. If the associated proto uses Editions, the
+//  Editions features must always be resolved. If not explicitly set, the
+//  appropriate default must be resolved and set.
 //	• L2: Contains fields that are lazily initialized when constructing
 //	from the raw file descriptor. When constructing as a literal, the L2
 //	fields must be initialized up front.
@@ -44,6 +59,7 @@ type (
 	}
 	FileL1 struct {
 		Syntax  protoreflect.Syntax
+		Edition Edition // Only used if Syntax == Editions
 		Path    string
 		Package protoreflect.FullName
 
@@ -51,12 +67,35 @@ type (
 		Messages   Messages
 		Extensions Extensions
 		Services   Services
+
+		EditionFeatures FileEditionFeatures
 	}
 	FileL2 struct {
 		Options   func() protoreflect.ProtoMessage
 		Imports   FileImports
 		Locations SourceLocations
 	}
+
+	FileEditionFeatures struct {
+		// IsFieldPresence is true if field_presence is EXPLICIT
+		// https://protobuf.dev/editions/features/#field_presence
+		IsFieldPresence bool
+		// IsOpenEnum is true if enum_type is OPEN
+		// https://protobuf.dev/editions/features/#enum_type
+		IsOpenEnum bool
+		// IsPacked is true if repeated_field_encoding is PACKED
+		// https://protobuf.dev/editions/features/#repeated_field_encoding
+		IsPacked bool
+		// IsUTF8Validated is true if utf_validation is VERIFY
+		// https://protobuf.dev/editions/features/#utf8_validation
+		IsUTF8Validated bool
+		// IsDelimitedEncoded is true if message_encoding is DELIMITED
+		// https://protobuf.dev/editions/features/#message_encoding
+		IsDelimitedEncoded bool
+		// IsJSONCompliant is true if json_format is ALLOW
+		// https://protobuf.dev/editions/features/#json_format
+		IsJSONCompliant bool
+	}
 )
 
 func (fd *File) ParentFile() protoreflect.FileDescriptor { return fd }
@@ -210,6 +249,9 @@ type (
 		ContainingOneof  protoreflect.OneofDescriptor // must be consistent with Message.Oneofs.Fields
 		Enum             protoreflect.EnumDescriptor
 		Message          protoreflect.MessageDescriptor
+
+		// Edition features.
+		Presence bool
 	}
 
 	Oneof struct {
@@ -273,6 +315,9 @@ func (fd *Field) HasJSONName() bool                     { return fd.L1.StringNam
 func (fd *Field) JSONName() string                      { return fd.L1.StringName.getJSON(fd) }
 func (fd *Field) TextName() string                      { return fd.L1.StringName.getText(fd) }
 func (fd *Field) HasPresence() bool {
+	if fd.L0.ParentFile.L1.Syntax == protoreflect.Editions {
+		return fd.L1.Presence || fd.L1.Message != nil || fd.L1.ContainingOneof != nil
+	}
 	return fd.L1.Cardinality != protoreflect.Repeated && (fd.L0.ParentFile.L1.Syntax == protoreflect.Proto2 || fd.L1.Message != nil || fd.L1.ContainingOneof != nil)
 }
 func (fd *Field) HasOptionalKeyword() bool {
diff --git a/vendor/google.golang.org/protobuf/internal/genid/descriptor_gen.go b/vendor/google.golang.org/protobuf/internal/genid/descriptor_gen.go
index 136f1b21573..8f94230ea1c 100644
--- a/vendor/google.golang.org/protobuf/internal/genid/descriptor_gen.go
+++ b/vendor/google.golang.org/protobuf/internal/genid/descriptor_gen.go
@@ -12,6 +12,12 @@ import (
 
 const File_google_protobuf_descriptor_proto = "google/protobuf/descriptor.proto"
 
+// Full and short names for google.protobuf.Edition.
+const (
+	Edition_enum_fullname = "google.protobuf.Edition"
+	Edition_enum_name     = "Edition"
+)
+
 // Names for google.protobuf.FileDescriptorSet.
 const (
 	FileDescriptorSet_message_name     protoreflect.Name     = "FileDescriptorSet"
@@ -81,7 +87,7 @@ const (
 	FileDescriptorProto_Options_field_number          protoreflect.FieldNumber = 8
 	FileDescriptorProto_SourceCodeInfo_field_number   protoreflect.FieldNumber = 9
 	FileDescriptorProto_Syntax_field_number           protoreflect.FieldNumber = 12
-	FileDescriptorProto_Edition_field_number          protoreflect.FieldNumber = 13
+	FileDescriptorProto_Edition_field_number          protoreflect.FieldNumber = 14
 )
 
 // Names for google.protobuf.DescriptorProto.
@@ -184,10 +190,12 @@ const (
 const (
 	ExtensionRangeOptions_UninterpretedOption_field_name protoreflect.Name = "uninterpreted_option"
 	ExtensionRangeOptions_Declaration_field_name         protoreflect.Name = "declaration"
+	ExtensionRangeOptions_Features_field_name            protoreflect.Name = "features"
 	ExtensionRangeOptions_Verification_field_name        protoreflect.Name = "verification"
 
 	ExtensionRangeOptions_UninterpretedOption_field_fullname protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.uninterpreted_option"
 	ExtensionRangeOptions_Declaration_field_fullname         protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.declaration"
+	ExtensionRangeOptions_Features_field_fullname            protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.features"
 	ExtensionRangeOptions_Verification_field_fullname        protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.verification"
 )
 
@@ -195,6 +203,7 @@ const (
 const (
 	ExtensionRangeOptions_UninterpretedOption_field_number protoreflect.FieldNumber = 999
 	ExtensionRangeOptions_Declaration_field_number         protoreflect.FieldNumber = 2
+	ExtensionRangeOptions_Features_field_number            protoreflect.FieldNumber = 50
 	ExtensionRangeOptions_Verification_field_number        protoreflect.FieldNumber = 3
 )
 
@@ -212,29 +221,26 @@ const (
 
 // Field names for google.protobuf.ExtensionRangeOptions.Declaration.
 const (
-	ExtensionRangeOptions_Declaration_Number_field_name     protoreflect.Name = "number"
-	ExtensionRangeOptions_Declaration_FullName_field_name   protoreflect.Name = "full_name"
-	ExtensionRangeOptions_Declaration_Type_field_name       protoreflect.Name = "type"
-	ExtensionRangeOptions_Declaration_IsRepeated_field_name protoreflect.Name = "is_repeated"
-	ExtensionRangeOptions_Declaration_Reserved_field_name   protoreflect.Name = "reserved"
-	ExtensionRangeOptions_Declaration_Repeated_field_name   protoreflect.Name = "repeated"
+	ExtensionRangeOptions_Declaration_Number_field_name   protoreflect.Name = "number"
+	ExtensionRangeOptions_Declaration_FullName_field_name protoreflect.Name = "full_name"
+	ExtensionRangeOptions_Declaration_Type_field_name     protoreflect.Name = "type"
+	ExtensionRangeOptions_Declaration_Reserved_field_name protoreflect.Name = "reserved"
+	ExtensionRangeOptions_Declaration_Repeated_field_name protoreflect.Name = "repeated"
 
-	ExtensionRangeOptions_Declaration_Number_field_fullname     protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.Declaration.number"
-	ExtensionRangeOptions_Declaration_FullName_field_fullname   protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.Declaration.full_name"
-	ExtensionRangeOptions_Declaration_Type_field_fullname       protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.Declaration.type"
-	ExtensionRangeOptions_Declaration_IsRepeated_field_fullname protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.Declaration.is_repeated"
-	ExtensionRangeOptions_Declaration_Reserved_field_fullname   protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.Declaration.reserved"
-	ExtensionRangeOptions_Declaration_Repeated_field_fullname   protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.Declaration.repeated"
+	ExtensionRangeOptions_Declaration_Number_field_fullname   protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.Declaration.number"
+	ExtensionRangeOptions_Declaration_FullName_field_fullname protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.Declaration.full_name"
+	ExtensionRangeOptions_Declaration_Type_field_fullname     protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.Declaration.type"
+	ExtensionRangeOptions_Declaration_Reserved_field_fullname protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.Declaration.reserved"
+	ExtensionRangeOptions_Declaration_Repeated_field_fullname protoreflect.FullName = "google.protobuf.ExtensionRangeOptions.Declaration.repeated"
 )
 
 // Field numbers for google.protobuf.ExtensionRangeOptions.Declaration.
 const (
-	ExtensionRangeOptions_Declaration_Number_field_number     protoreflect.FieldNumber = 1
-	ExtensionRangeOptions_Declaration_FullName_field_number   protoreflect.FieldNumber = 2
-	ExtensionRangeOptions_Declaration_Type_field_number       protoreflect.FieldNumber = 3
-	ExtensionRangeOptions_Declaration_IsRepeated_field_number protoreflect.FieldNumber = 4
-	ExtensionRangeOptions_Declaration_Reserved_field_number   protoreflect.FieldNumber = 5
-	ExtensionRangeOptions_Declaration_Repeated_field_number   protoreflect.FieldNumber = 6
+	ExtensionRangeOptions_Declaration_Number_field_number   protoreflect.FieldNumber = 1
+	ExtensionRangeOptions_Declaration_FullName_field_number protoreflect.FieldNumber = 2
+	ExtensionRangeOptions_Declaration_Type_field_number     protoreflect.FieldNumber = 3
+	ExtensionRangeOptions_Declaration_Reserved_field_number protoreflect.FieldNumber = 5
+	ExtensionRangeOptions_Declaration_Repeated_field_number protoreflect.FieldNumber = 6
 )
 
 // Names for google.protobuf.FieldDescriptorProto.
@@ -478,6 +484,7 @@ const (
 	FileOptions_PhpNamespace_field_name              protoreflect.Name = "php_namespace"
 	FileOptions_PhpMetadataNamespace_field_name      protoreflect.Name = "php_metadata_namespace"
 	FileOptions_RubyPackage_field_name               protoreflect.Name = "ruby_package"
+	FileOptions_Features_field_name                  protoreflect.Name = "features"
 	FileOptions_UninterpretedOption_field_name       protoreflect.Name = "uninterpreted_option"
 
 	FileOptions_JavaPackage_field_fullname               protoreflect.FullName = "google.protobuf.FileOptions.java_package"
@@ -500,6 +507,7 @@ const (
 	FileOptions_PhpNamespace_field_fullname              protoreflect.FullName = "google.protobuf.FileOptions.php_namespace"
 	FileOptions_PhpMetadataNamespace_field_fullname      protoreflect.FullName = "google.protobuf.FileOptions.php_metadata_namespace"
 	FileOptions_RubyPackage_field_fullname               protoreflect.FullName = "google.protobuf.FileOptions.ruby_package"
+	FileOptions_Features_field_fullname                  protoreflect.FullName = "google.protobuf.FileOptions.features"
 	FileOptions_UninterpretedOption_field_fullname       protoreflect.FullName = "google.protobuf.FileOptions.uninterpreted_option"
 )
 
@@ -525,6 +533,7 @@ const (
 	FileOptions_PhpNamespace_field_number              protoreflect.FieldNumber = 41
 	FileOptions_PhpMetadataNamespace_field_number      protoreflect.FieldNumber = 44
 	FileOptions_RubyPackage_field_number               protoreflect.FieldNumber = 45
+	FileOptions_Features_field_number                  protoreflect.FieldNumber = 50
 	FileOptions_UninterpretedOption_field_number       protoreflect.FieldNumber = 999
 )
 
@@ -547,6 +556,7 @@ const (
 	MessageOptions_Deprecated_field_name                         protoreflect.Name = "deprecated"
 	MessageOptions_MapEntry_field_name                           protoreflect.Name = "map_entry"
 	MessageOptions_DeprecatedLegacyJsonFieldConflicts_field_name protoreflect.Name = "deprecated_legacy_json_field_conflicts"
+	MessageOptions_Features_field_name                           protoreflect.Name = "features"
 	MessageOptions_UninterpretedOption_field_name                protoreflect.Name = "uninterpreted_option"
 
 	MessageOptions_MessageSetWireFormat_field_fullname               protoreflect.FullName = "google.protobuf.MessageOptions.message_set_wire_format"
@@ -554,6 +564,7 @@ const (
 	MessageOptions_Deprecated_field_fullname                         protoreflect.FullName = "google.protobuf.MessageOptions.deprecated"
 	MessageOptions_MapEntry_field_fullname                           protoreflect.FullName = "google.protobuf.MessageOptions.map_entry"
 	MessageOptions_DeprecatedLegacyJsonFieldConflicts_field_fullname protoreflect.FullName = "google.protobuf.MessageOptions.deprecated_legacy_json_field_conflicts"
+	MessageOptions_Features_field_fullname                           protoreflect.FullName = "google.protobuf.MessageOptions.features"
 	MessageOptions_UninterpretedOption_field_fullname                protoreflect.FullName = "google.protobuf.MessageOptions.uninterpreted_option"
 )
 
@@ -564,6 +575,7 @@ const (
 	MessageOptions_Deprecated_field_number                         protoreflect.FieldNumber = 3
 	MessageOptions_MapEntry_field_number                           protoreflect.FieldNumber = 7
 	MessageOptions_DeprecatedLegacyJsonFieldConflicts_field_number protoreflect.FieldNumber = 11
+	MessageOptions_Features_field_number                           protoreflect.FieldNumber = 12
 	MessageOptions_UninterpretedOption_field_number                protoreflect.FieldNumber = 999
 )
 
@@ -584,8 +596,9 @@ const (
 	FieldOptions_Weak_field_name                protoreflect.Name = "weak"
 	FieldOptions_DebugRedact_field_name         protoreflect.Name = "debug_redact"
 	FieldOptions_Retention_field_name           protoreflect.Name = "retention"
-	FieldOptions_Target_field_name              protoreflect.Name = "target"
 	FieldOptions_Targets_field_name             protoreflect.Name = "targets"
+	FieldOptions_EditionDefaults_field_name     protoreflect.Name = "edition_defaults"
+	FieldOptions_Features_field_name            protoreflect.Name = "features"
 	FieldOptions_UninterpretedOption_field_name protoreflect.Name = "uninterpreted_option"
 
 	FieldOptions_Ctype_field_fullname               protoreflect.FullName = "google.protobuf.FieldOptions.ctype"
@@ -597,8 +610,9 @@ const (
 	FieldOptions_Weak_field_fullname                protoreflect.FullName = "google.protobuf.FieldOptions.weak"
 	FieldOptions_DebugRedact_field_fullname         protoreflect.FullName = "google.protobuf.FieldOptions.debug_redact"
 	FieldOptions_Retention_field_fullname           protoreflect.FullName = "google.protobuf.FieldOptions.retention"
-	FieldOptions_Target_field_fullname              protoreflect.FullName = "google.protobuf.FieldOptions.target"
 	FieldOptions_Targets_field_fullname             protoreflect.FullName = "google.protobuf.FieldOptions.targets"
+	FieldOptions_EditionDefaults_field_fullname     protoreflect.FullName = "google.protobuf.FieldOptions.edition_defaults"
+	FieldOptions_Features_field_fullname            protoreflect.FullName = "google.protobuf.FieldOptions.features"
 	FieldOptions_UninterpretedOption_field_fullname protoreflect.FullName = "google.protobuf.FieldOptions.uninterpreted_option"
 )
 
@@ -613,8 +627,9 @@ const (
 	FieldOptions_Weak_field_number                protoreflect.FieldNumber = 10
 	FieldOptions_DebugRedact_field_number         protoreflect.FieldNumber = 16
 	FieldOptions_Retention_field_number           protoreflect.FieldNumber = 17
-	FieldOptions_Target_field_number              protoreflect.FieldNumber = 18
 	FieldOptions_Targets_field_number             protoreflect.FieldNumber = 19
+	FieldOptions_EditionDefaults_field_number     protoreflect.FieldNumber = 20
+	FieldOptions_Features_field_number            protoreflect.FieldNumber = 21
 	FieldOptions_UninterpretedOption_field_number protoreflect.FieldNumber = 999
 )
 
@@ -642,6 +657,27 @@ const (
 	FieldOptions_OptionTargetType_enum_name     = "OptionTargetType"
 )
 
+// Names for google.protobuf.FieldOptions.EditionDefault.
+const (
+	FieldOptions_EditionDefault_message_name     protoreflect.Name     = "EditionDefault"
+	FieldOptions_EditionDefault_message_fullname protoreflect.FullName = "google.protobuf.FieldOptions.EditionDefault"
+)
+
+// Field names for google.protobuf.FieldOptions.EditionDefault.
+const (
+	FieldOptions_EditionDefault_Edition_field_name protoreflect.Name = "edition"
+	FieldOptions_EditionDefault_Value_field_name   protoreflect.Name = "value"
+
+	FieldOptions_EditionDefault_Edition_field_fullname protoreflect.FullName = "google.protobuf.FieldOptions.EditionDefault.edition"
+	FieldOptions_EditionDefault_Value_field_fullname   protoreflect.FullName = "google.protobuf.FieldOptions.EditionDefault.value"
+)
+
+// Field numbers for google.protobuf.FieldOptions.EditionDefault.
+const (
+	FieldOptions_EditionDefault_Edition_field_number protoreflect.FieldNumber = 3
+	FieldOptions_EditionDefault_Value_field_number   protoreflect.FieldNumber = 2
+)
+
 // Names for google.protobuf.OneofOptions.
 const (
 	OneofOptions_message_name     protoreflect.Name     = "OneofOptions"
@@ -650,13 +686,16 @@ const (
 
 // Field names for google.protobuf.OneofOptions.
 const (
+	OneofOptions_Features_field_name            protoreflect.Name = "features"
 	OneofOptions_UninterpretedOption_field_name protoreflect.Name = "uninterpreted_option"
 
+	OneofOptions_Features_field_fullname            protoreflect.FullName = "google.protobuf.OneofOptions.features"
 	OneofOptions_UninterpretedOption_field_fullname protoreflect.FullName = "google.protobuf.OneofOptions.uninterpreted_option"
 )
 
 // Field numbers for google.protobuf.OneofOptions.
 const (
+	OneofOptions_Features_field_number            protoreflect.FieldNumber = 1
 	OneofOptions_UninterpretedOption_field_number protoreflect.FieldNumber = 999
 )
 
@@ -671,11 +710,13 @@ const (
 	EnumOptions_AllowAlias_field_name                         protoreflect.Name = "allow_alias"
 	EnumOptions_Deprecated_field_name                         protoreflect.Name = "deprecated"
 	EnumOptions_DeprecatedLegacyJsonFieldConflicts_field_name protoreflect.Name = "deprecated_legacy_json_field_conflicts"
+	EnumOptions_Features_field_name                           protoreflect.Name = "features"
 	EnumOptions_UninterpretedOption_field_name                protoreflect.Name = "uninterpreted_option"
 
 	EnumOptions_AllowAlias_field_fullname                         protoreflect.FullName = "google.protobuf.EnumOptions.allow_alias"
 	EnumOptions_Deprecated_field_fullname                         protoreflect.FullName = "google.protobuf.EnumOptions.deprecated"
 	EnumOptions_DeprecatedLegacyJsonFieldConflicts_field_fullname protoreflect.FullName = "google.protobuf.EnumOptions.deprecated_legacy_json_field_conflicts"
+	EnumOptions_Features_field_fullname                           protoreflect.FullName = "google.protobuf.EnumOptions.features"
 	EnumOptions_UninterpretedOption_field_fullname                protoreflect.FullName = "google.protobuf.EnumOptions.uninterpreted_option"
 )
 
@@ -684,6 +725,7 @@ const (
 	EnumOptions_AllowAlias_field_number                         protoreflect.FieldNumber = 2
 	EnumOptions_Deprecated_field_number                         protoreflect.FieldNumber = 3
 	EnumOptions_DeprecatedLegacyJsonFieldConflicts_field_number protoreflect.FieldNumber = 6
+	EnumOptions_Features_field_number                           protoreflect.FieldNumber = 7
 	EnumOptions_UninterpretedOption_field_number                protoreflect.FieldNumber = 999
 )
 
@@ -696,15 +738,21 @@ const (
 // Field names for google.protobuf.EnumValueOptions.
 const (
 	EnumValueOptions_Deprecated_field_name          protoreflect.Name = "deprecated"
+	EnumValueOptions_Features_field_name            protoreflect.Name = "features"
+	EnumValueOptions_DebugRedact_field_name         protoreflect.Name = "debug_redact"
 	EnumValueOptions_UninterpretedOption_field_name protoreflect.Name = "uninterpreted_option"
 
 	EnumValueOptions_Deprecated_field_fullname          protoreflect.FullName = "google.protobuf.EnumValueOptions.deprecated"
+	EnumValueOptions_Features_field_fullname            protoreflect.FullName = "google.protobuf.EnumValueOptions.features"
+	EnumValueOptions_DebugRedact_field_fullname         protoreflect.FullName = "google.protobuf.EnumValueOptions.debug_redact"
 	EnumValueOptions_UninterpretedOption_field_fullname protoreflect.FullName = "google.protobuf.EnumValueOptions.uninterpreted_option"
 )
 
 // Field numbers for google.protobuf.EnumValueOptions.
 const (
 	EnumValueOptions_Deprecated_field_number          protoreflect.FieldNumber = 1
+	EnumValueOptions_Features_field_number            protoreflect.FieldNumber = 2
+	EnumValueOptions_DebugRedact_field_number         protoreflect.FieldNumber = 3
 	EnumValueOptions_UninterpretedOption_field_number protoreflect.FieldNumber = 999
 )
 
@@ -716,15 +764,18 @@ const (
 
 // Field names for google.protobuf.ServiceOptions.
 const (
+	ServiceOptions_Features_field_name            protoreflect.Name = "features"
 	ServiceOptions_Deprecated_field_name          protoreflect.Name = "deprecated"
 	ServiceOptions_UninterpretedOption_field_name protoreflect.Name = "uninterpreted_option"
 
+	ServiceOptions_Features_field_fullname            protoreflect.FullName = "google.protobuf.ServiceOptions.features"
 	ServiceOptions_Deprecated_field_fullname          protoreflect.FullName = "google.protobuf.ServiceOptions.deprecated"
 	ServiceOptions_UninterpretedOption_field_fullname protoreflect.FullName = "google.protobuf.ServiceOptions.uninterpreted_option"
 )
 
 // Field numbers for google.protobuf.ServiceOptions.
 const (
+	ServiceOptions_Features_field_number            protoreflect.FieldNumber = 34
 	ServiceOptions_Deprecated_field_number          protoreflect.FieldNumber = 33
 	ServiceOptions_UninterpretedOption_field_number protoreflect.FieldNumber = 999
 )
@@ -739,10 +790,12 @@ const (
 const (
 	MethodOptions_Deprecated_field_name          protoreflect.Name = "deprecated"
 	MethodOptions_IdempotencyLevel_field_name    protoreflect.Name = "idempotency_level"
+	MethodOptions_Features_field_name            protoreflect.Name = "features"
 	MethodOptions_UninterpretedOption_field_name protoreflect.Name = "uninterpreted_option"
 
 	MethodOptions_Deprecated_field_fullname          protoreflect.FullName = "google.protobuf.MethodOptions.deprecated"
 	MethodOptions_IdempotencyLevel_field_fullname    protoreflect.FullName = "google.protobuf.MethodOptions.idempotency_level"
+	MethodOptions_Features_field_fullname            protoreflect.FullName = "google.protobuf.MethodOptions.features"
 	MethodOptions_UninterpretedOption_field_fullname protoreflect.FullName = "google.protobuf.MethodOptions.uninterpreted_option"
 )
 
@@ -750,6 +803,7 @@ const (
 const (
 	MethodOptions_Deprecated_field_number          protoreflect.FieldNumber = 33
 	MethodOptions_IdempotencyLevel_field_number    protoreflect.FieldNumber = 34
+	MethodOptions_Features_field_number            protoreflect.FieldNumber = 35
 	MethodOptions_UninterpretedOption_field_number protoreflect.FieldNumber = 999
 )
 
@@ -816,6 +870,120 @@ const (
 	UninterpretedOption_NamePart_IsExtension_field_number protoreflect.FieldNumber = 2
 )
 
+// Names for google.protobuf.FeatureSet.
+const (
+	FeatureSet_message_name     protoreflect.Name     = "FeatureSet"
+	FeatureSet_message_fullname protoreflect.FullName = "google.protobuf.FeatureSet"
+)
+
+// Field names for google.protobuf.FeatureSet.
+const (
+	FeatureSet_FieldPresence_field_name         protoreflect.Name = "field_presence"
+	FeatureSet_EnumType_field_name              protoreflect.Name = "enum_type"
+	FeatureSet_RepeatedFieldEncoding_field_name protoreflect.Name = "repeated_field_encoding"
+	FeatureSet_Utf8Validation_field_name        protoreflect.Name = "utf8_validation"
+	FeatureSet_MessageEncoding_field_name       protoreflect.Name = "message_encoding"
+	FeatureSet_JsonFormat_field_name            protoreflect.Name = "json_format"
+
+	FeatureSet_FieldPresence_field_fullname         protoreflect.FullName = "google.protobuf.FeatureSet.field_presence"
+	FeatureSet_EnumType_field_fullname              protoreflect.FullName = "google.protobuf.FeatureSet.enum_type"
+	FeatureSet_RepeatedFieldEncoding_field_fullname protoreflect.FullName = "google.protobuf.FeatureSet.repeated_field_encoding"
+	FeatureSet_Utf8Validation_field_fullname        protoreflect.FullName = "google.protobuf.FeatureSet.utf8_validation"
+	FeatureSet_MessageEncoding_field_fullname       protoreflect.FullName = "google.protobuf.FeatureSet.message_encoding"
+	FeatureSet_JsonFormat_field_fullname            protoreflect.FullName = "google.protobuf.FeatureSet.json_format"
+)
+
+// Field numbers for google.protobuf.FeatureSet.
+const (
+	FeatureSet_FieldPresence_field_number         protoreflect.FieldNumber = 1
+	FeatureSet_EnumType_field_number              protoreflect.FieldNumber = 2
+	FeatureSet_RepeatedFieldEncoding_field_number protoreflect.FieldNumber = 3
+	FeatureSet_Utf8Validation_field_number        protoreflect.FieldNumber = 4
+	FeatureSet_MessageEncoding_field_number       protoreflect.FieldNumber = 5
+	FeatureSet_JsonFormat_field_number            protoreflect.FieldNumber = 6
+)
+
+// Full and short names for google.protobuf.FeatureSet.FieldPresence.
+const (
+	FeatureSet_FieldPresence_enum_fullname = "google.protobuf.FeatureSet.FieldPresence"
+	FeatureSet_FieldPresence_enum_name     = "FieldPresence"
+)
+
+// Full and short names for google.protobuf.FeatureSet.EnumType.
+const (
+	FeatureSet_EnumType_enum_fullname = "google.protobuf.FeatureSet.EnumType"
+	FeatureSet_EnumType_enum_name     = "EnumType"
+)
+
+// Full and short names for google.protobuf.FeatureSet.RepeatedFieldEncoding.
+const (
+	FeatureSet_RepeatedFieldEncoding_enum_fullname = "google.protobuf.FeatureSet.RepeatedFieldEncoding"
+	FeatureSet_RepeatedFieldEncoding_enum_name     = "RepeatedFieldEncoding"
+)
+
+// Full and short names for google.protobuf.FeatureSet.Utf8Validation.
+const (
+	FeatureSet_Utf8Validation_enum_fullname = "google.protobuf.FeatureSet.Utf8Validation"
+	FeatureSet_Utf8Validation_enum_name     = "Utf8Validation"
+)
+
+// Full and short names for google.protobuf.FeatureSet.MessageEncoding.
+const (
+	FeatureSet_MessageEncoding_enum_fullname = "google.protobuf.FeatureSet.MessageEncoding"
+	FeatureSet_MessageEncoding_enum_name     = "MessageEncoding"
+)
+
+// Full and short names for google.protobuf.FeatureSet.JsonFormat.
+const (
+	FeatureSet_JsonFormat_enum_fullname = "google.protobuf.FeatureSet.JsonFormat"
+	FeatureSet_JsonFormat_enum_name     = "JsonFormat"
+)
+
+// Names for google.protobuf.FeatureSetDefaults.
+const (
+	FeatureSetDefaults_message_name     protoreflect.Name     = "FeatureSetDefaults"
+	FeatureSetDefaults_message_fullname protoreflect.FullName = "google.protobuf.FeatureSetDefaults"
+)
+
+// Field names for google.protobuf.FeatureSetDefaults.
+const (
+	FeatureSetDefaults_Defaults_field_name       protoreflect.Name = "defaults"
+	FeatureSetDefaults_MinimumEdition_field_name protoreflect.Name = "minimum_edition"
+	FeatureSetDefaults_MaximumEdition_field_name protoreflect.Name = "maximum_edition"
+
+	FeatureSetDefaults_Defaults_field_fullname       protoreflect.FullName = "google.protobuf.FeatureSetDefaults.defaults"
+	FeatureSetDefaults_MinimumEdition_field_fullname protoreflect.FullName = "google.protobuf.FeatureSetDefaults.minimum_edition"
+	FeatureSetDefaults_MaximumEdition_field_fullname protoreflect.FullName = "google.protobuf.FeatureSetDefaults.maximum_edition"
+)
+
+// Field numbers for google.protobuf.FeatureSetDefaults.
+const (
+	FeatureSetDefaults_Defaults_field_number       protoreflect.FieldNumber = 1
+	FeatureSetDefaults_MinimumEdition_field_number protoreflect.FieldNumber = 4
+	FeatureSetDefaults_MaximumEdition_field_number protoreflect.FieldNumber = 5
+)
+
+// Names for google.protobuf.FeatureSetDefaults.FeatureSetEditionDefault.
+const (
+	FeatureSetDefaults_FeatureSetEditionDefault_message_name     protoreflect.Name     = "FeatureSetEditionDefault"
+	FeatureSetDefaults_FeatureSetEditionDefault_message_fullname protoreflect.FullName = "google.protobuf.FeatureSetDefaults.FeatureSetEditionDefault"
+)
+
+// Field names for google.protobuf.FeatureSetDefaults.FeatureSetEditionDefault.
+const (
+	FeatureSetDefaults_FeatureSetEditionDefault_Edition_field_name  protoreflect.Name = "edition"
+	FeatureSetDefaults_FeatureSetEditionDefault_Features_field_name protoreflect.Name = "features"
+
+	FeatureSetDefaults_FeatureSetEditionDefault_Edition_field_fullname  protoreflect.FullName = "google.protobuf.FeatureSetDefaults.FeatureSetEditionDefault.edition"
+	FeatureSetDefaults_FeatureSetEditionDefault_Features_field_fullname protoreflect.FullName = "google.protobuf.FeatureSetDefaults.FeatureSetEditionDefault.features"
+)
+
+// Field numbers for google.protobuf.FeatureSetDefaults.FeatureSetEditionDefault.
+const (
+	FeatureSetDefaults_FeatureSetEditionDefault_Edition_field_number  protoreflect.FieldNumber = 3
+	FeatureSetDefaults_FeatureSetEditionDefault_Features_field_number protoreflect.FieldNumber = 2
+)
+
 // Names for google.protobuf.SourceCodeInfo.
 const (
 	SourceCodeInfo_message_name     protoreflect.Name     = "SourceCodeInfo"
diff --git a/vendor/google.golang.org/protobuf/internal/impl/codec_gen.go b/vendor/google.golang.org/protobuf/internal/impl/codec_gen.go
index 1a509b63ebc..f55dc01e3a9 100644
--- a/vendor/google.golang.org/protobuf/internal/impl/codec_gen.go
+++ b/vendor/google.golang.org/protobuf/internal/impl/codec_gen.go
@@ -162,11 +162,20 @@ func appendBoolSlice(b []byte, p pointer, f *coderFieldInfo, opts marshalOptions
 func consumeBoolSlice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.BoolSlice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := 0
+		for _, v := range b {
+			if v < 0x80 {
+				count++
+			}
+		}
+		if count > 0 {
+			p.growBoolSlice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			var v uint64
 			var n int
@@ -732,11 +741,20 @@ func appendInt32Slice(b []byte, p pointer, f *coderFieldInfo, opts marshalOption
 func consumeInt32Slice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Int32Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := 0
+		for _, v := range b {
+			if v < 0x80 {
+				count++
+			}
+		}
+		if count > 0 {
+			p.growInt32Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			var v uint64
 			var n int
@@ -1138,11 +1156,20 @@ func appendSint32Slice(b []byte, p pointer, f *coderFieldInfo, opts marshalOptio
 func consumeSint32Slice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Int32Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := 0
+		for _, v := range b {
+			if v < 0x80 {
+				count++
+			}
+		}
+		if count > 0 {
+			p.growInt32Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			var v uint64
 			var n int
@@ -1544,11 +1571,20 @@ func appendUint32Slice(b []byte, p pointer, f *coderFieldInfo, opts marshalOptio
 func consumeUint32Slice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Uint32Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := 0
+		for _, v := range b {
+			if v < 0x80 {
+				count++
+			}
+		}
+		if count > 0 {
+			p.growUint32Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			var v uint64
 			var n int
@@ -1950,11 +1986,20 @@ func appendInt64Slice(b []byte, p pointer, f *coderFieldInfo, opts marshalOption
 func consumeInt64Slice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Int64Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := 0
+		for _, v := range b {
+			if v < 0x80 {
+				count++
+			}
+		}
+		if count > 0 {
+			p.growInt64Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			var v uint64
 			var n int
@@ -2356,11 +2401,20 @@ func appendSint64Slice(b []byte, p pointer, f *coderFieldInfo, opts marshalOptio
 func consumeSint64Slice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Int64Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := 0
+		for _, v := range b {
+			if v < 0x80 {
+				count++
+			}
+		}
+		if count > 0 {
+			p.growInt64Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			var v uint64
 			var n int
@@ -2762,11 +2816,20 @@ func appendUint64Slice(b []byte, p pointer, f *coderFieldInfo, opts marshalOptio
 func consumeUint64Slice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Uint64Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := 0
+		for _, v := range b {
+			if v < 0x80 {
+				count++
+			}
+		}
+		if count > 0 {
+			p.growUint64Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			var v uint64
 			var n int
@@ -3145,11 +3208,15 @@ func appendSfixed32Slice(b []byte, p pointer, f *coderFieldInfo, opts marshalOpt
 func consumeSfixed32Slice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Int32Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := len(b) / protowire.SizeFixed32()
+		if count > 0 {
+			p.growInt32Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			v, n := protowire.ConsumeFixed32(b)
 			if n < 0 {
@@ -3461,11 +3528,15 @@ func appendFixed32Slice(b []byte, p pointer, f *coderFieldInfo, opts marshalOpti
 func consumeFixed32Slice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Uint32Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := len(b) / protowire.SizeFixed32()
+		if count > 0 {
+			p.growUint32Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			v, n := protowire.ConsumeFixed32(b)
 			if n < 0 {
@@ -3777,11 +3848,15 @@ func appendFloatSlice(b []byte, p pointer, f *coderFieldInfo, opts marshalOption
 func consumeFloatSlice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Float32Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := len(b) / protowire.SizeFixed32()
+		if count > 0 {
+			p.growFloat32Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			v, n := protowire.ConsumeFixed32(b)
 			if n < 0 {
@@ -4093,11 +4168,15 @@ func appendSfixed64Slice(b []byte, p pointer, f *coderFieldInfo, opts marshalOpt
 func consumeSfixed64Slice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Int64Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := len(b) / protowire.SizeFixed64()
+		if count > 0 {
+			p.growInt64Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			v, n := protowire.ConsumeFixed64(b)
 			if n < 0 {
@@ -4409,11 +4488,15 @@ func appendFixed64Slice(b []byte, p pointer, f *coderFieldInfo, opts marshalOpti
 func consumeFixed64Slice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Uint64Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := len(b) / protowire.SizeFixed64()
+		if count > 0 {
+			p.growUint64Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			v, n := protowire.ConsumeFixed64(b)
 			if n < 0 {
@@ -4725,11 +4808,15 @@ func appendDoubleSlice(b []byte, p pointer, f *coderFieldInfo, opts marshalOptio
 func consumeDoubleSlice(b []byte, p pointer, wtyp protowire.Type, f *coderFieldInfo, opts unmarshalOptions) (out unmarshalOutput, err error) {
 	sp := p.Float64Slice()
 	if wtyp == protowire.BytesType {
-		s := *sp
 		b, n := protowire.ConsumeBytes(b)
 		if n < 0 {
 			return out, errDecode
 		}
+		count := len(b) / protowire.SizeFixed64()
+		if count > 0 {
+			p.growFloat64Slice(count)
+		}
+		s := *sp
 		for len(b) > 0 {
 			v, n := protowire.ConsumeFixed64(b)
 			if n < 0 {
diff --git a/vendor/google.golang.org/protobuf/internal/impl/legacy_message.go b/vendor/google.golang.org/protobuf/internal/impl/legacy_message.go
index 61c483fac06..2ab2c629784 100644
--- a/vendor/google.golang.org/protobuf/internal/impl/legacy_message.go
+++ b/vendor/google.golang.org/protobuf/internal/impl/legacy_message.go
@@ -206,13 +206,18 @@ func aberrantLoadMessageDescReentrant(t reflect.Type, name protoreflect.FullName
 
 	// Obtain a list of oneof wrapper types.
 	var oneofWrappers []reflect.Type
-	for _, method := range []string{"XXX_OneofFuncs", "XXX_OneofWrappers"} {
-		if fn, ok := t.MethodByName(method); ok {
-			for _, v := range fn.Func.Call([]reflect.Value{reflect.Zero(fn.Type.In(0))}) {
-				if vs, ok := v.Interface().([]interface{}); ok {
-					for _, v := range vs {
-						oneofWrappers = append(oneofWrappers, reflect.TypeOf(v))
-					}
+	methods := make([]reflect.Method, 0, 2)
+	if m, ok := t.MethodByName("XXX_OneofFuncs"); ok {
+		methods = append(methods, m)
+	}
+	if m, ok := t.MethodByName("XXX_OneofWrappers"); ok {
+		methods = append(methods, m)
+	}
+	for _, fn := range methods {
+		for _, v := range fn.Func.Call([]reflect.Value{reflect.Zero(fn.Type.In(0))}) {
+			if vs, ok := v.Interface().([]interface{}); ok {
+				for _, v := range vs {
+					oneofWrappers = append(oneofWrappers, reflect.TypeOf(v))
 				}
 			}
 		}
diff --git a/vendor/google.golang.org/protobuf/internal/impl/message.go b/vendor/google.golang.org/protobuf/internal/impl/message.go
index 4f5fb67a0dd..629bacdcedd 100644
--- a/vendor/google.golang.org/protobuf/internal/impl/message.go
+++ b/vendor/google.golang.org/protobuf/internal/impl/message.go
@@ -192,12 +192,17 @@ fieldLoop:
 
 	// Derive a mapping of oneof wrappers to fields.
 	oneofWrappers := mi.OneofWrappers
-	for _, method := range []string{"XXX_OneofFuncs", "XXX_OneofWrappers"} {
-		if fn, ok := reflect.PtrTo(t).MethodByName(method); ok {
-			for _, v := range fn.Func.Call([]reflect.Value{reflect.Zero(fn.Type.In(0))}) {
-				if vs, ok := v.Interface().([]interface{}); ok {
-					oneofWrappers = vs
-				}
+	methods := make([]reflect.Method, 0, 2)
+	if m, ok := reflect.PtrTo(t).MethodByName("XXX_OneofFuncs"); ok {
+		methods = append(methods, m)
+	}
+	if m, ok := reflect.PtrTo(t).MethodByName("XXX_OneofWrappers"); ok {
+		methods = append(methods, m)
+	}
+	for _, fn := range methods {
+		for _, v := range fn.Func.Call([]reflect.Value{reflect.Zero(fn.Type.In(0))}) {
+			if vs, ok := v.Interface().([]interface{}); ok {
+				oneofWrappers = vs
 			}
 		}
 	}
diff --git a/vendor/google.golang.org/protobuf/internal/impl/pointer_reflect.go b/vendor/google.golang.org/protobuf/internal/impl/pointer_reflect.go
index 4c491bdf482..517e94434c7 100644
--- a/vendor/google.golang.org/protobuf/internal/impl/pointer_reflect.go
+++ b/vendor/google.golang.org/protobuf/internal/impl/pointer_reflect.go
@@ -159,6 +159,42 @@ func (p pointer) SetPointer(v pointer) {
 	p.v.Elem().Set(v.v)
 }
 
+func growSlice(p pointer, addCap int) {
+	// TODO: Once we only support Go 1.20 and newer, use reflect.Grow.
+	in := p.v.Elem()
+	out := reflect.MakeSlice(in.Type(), in.Len(), in.Len()+addCap)
+	reflect.Copy(out, in)
+	p.v.Elem().Set(out)
+}
+
+func (p pointer) growBoolSlice(addCap int) {
+	growSlice(p, addCap)
+}
+
+func (p pointer) growInt32Slice(addCap int) {
+	growSlice(p, addCap)
+}
+
+func (p pointer) growUint32Slice(addCap int) {
+	growSlice(p, addCap)
+}
+
+func (p pointer) growInt64Slice(addCap int) {
+	growSlice(p, addCap)
+}
+
+func (p pointer) growUint64Slice(addCap int) {
+	growSlice(p, addCap)
+}
+
+func (p pointer) growFloat64Slice(addCap int) {
+	growSlice(p, addCap)
+}
+
+func (p pointer) growFloat32Slice(addCap int) {
+	growSlice(p, addCap)
+}
+
 func (Export) MessageStateOf(p Pointer) *messageState     { panic("not supported") }
 func (ms *messageState) pointer() pointer                 { panic("not supported") }
 func (ms *messageState) messageInfo() *MessageInfo        { panic("not supported") }
diff --git a/vendor/google.golang.org/protobuf/internal/impl/pointer_unsafe.go b/vendor/google.golang.org/protobuf/internal/impl/pointer_unsafe.go
index ee0e0573e39..4b020e31164 100644
--- a/vendor/google.golang.org/protobuf/internal/impl/pointer_unsafe.go
+++ b/vendor/google.golang.org/protobuf/internal/impl/pointer_unsafe.go
@@ -138,6 +138,46 @@ func (p pointer) SetPointer(v pointer) {
 	*(*unsafe.Pointer)(p.p) = (unsafe.Pointer)(v.p)
 }
 
+func (p pointer) growBoolSlice(addCap int) {
+	sp := p.BoolSlice()
+	s := make([]bool, 0, addCap+len(*sp))
+	s = s[:len(*sp)]
+	copy(s, *sp)
+	*sp = s
+}
+
+func (p pointer) growInt32Slice(addCap int) {
+	sp := p.Int32Slice()
+	s := make([]int32, 0, addCap+len(*sp))
+	s = s[:len(*sp)]
+	copy(s, *sp)
+	*sp = s
+}
+
+func (p pointer) growUint32Slice(addCap int) {
+	p.growInt32Slice(addCap)
+}
+
+func (p pointer) growFloat32Slice(addCap int) {
+	p.growInt32Slice(addCap)
+}
+
+func (p pointer) growInt64Slice(addCap int) {
+	sp := p.Int64Slice()
+	s := make([]int64, 0, addCap+len(*sp))
+	s = s[:len(*sp)]
+	copy(s, *sp)
+	*sp = s
+}
+
+func (p pointer) growUint64Slice(addCap int) {
+	p.growInt64Slice(addCap)
+}
+
+func (p pointer) growFloat64Slice(addCap int) {
+	p.growInt64Slice(addCap)
+}
+
 // Static check that MessageState does not exceed the size of a pointer.
 const _ = uint(unsafe.Sizeof(unsafe.Pointer(nil)) - unsafe.Sizeof(MessageState{}))
 
diff --git a/vendor/google.golang.org/protobuf/internal/strs/strings_unsafe.go b/vendor/google.golang.org/protobuf/internal/strs/strings_unsafe_go120.go
similarity index 96%
rename from vendor/google.golang.org/protobuf/internal/strs/strings_unsafe.go
rename to vendor/google.golang.org/protobuf/internal/strs/strings_unsafe_go120.go
index 61a84d34185..a008acd0908 100644
--- a/vendor/google.golang.org/protobuf/internal/strs/strings_unsafe.go
+++ b/vendor/google.golang.org/protobuf/internal/strs/strings_unsafe_go120.go
@@ -2,8 +2,8 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
-//go:build !purego && !appengine
-// +build !purego,!appengine
+//go:build !purego && !appengine && !go1.21
+// +build !purego,!appengine,!go1.21
 
 package strs
 
diff --git a/vendor/google.golang.org/protobuf/internal/strs/strings_unsafe_go121.go b/vendor/google.golang.org/protobuf/internal/strs/strings_unsafe_go121.go
new file mode 100644
index 00000000000..60166f2ba3c
--- /dev/null
+++ b/vendor/google.golang.org/protobuf/internal/strs/strings_unsafe_go121.go
@@ -0,0 +1,74 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+//go:build !purego && !appengine && go1.21
+// +build !purego,!appengine,go1.21
+
+package strs
+
+import (
+	"unsafe"
+
+	"google.golang.org/protobuf/reflect/protoreflect"
+)
+
+// UnsafeString returns an unsafe string reference of b.
+// The caller must treat the input slice as immutable.
+//
+// WARNING: Use carefully. The returned result must not leak to the end user
+// unless the input slice is provably immutable.
+func UnsafeString(b []byte) string {
+	return unsafe.String(unsafe.SliceData(b), len(b))
+}
+
+// UnsafeBytes returns an unsafe bytes slice reference of s.
+// The caller must treat returned slice as immutable.
+//
+// WARNING: Use carefully. The returned result must not leak to the end user.
+func UnsafeBytes(s string) []byte {
+	return unsafe.Slice(unsafe.StringData(s), len(s))
+}
+
+// Builder builds a set of strings with shared lifetime.
+// This differs from strings.Builder, which is for building a single string.
+type Builder struct {
+	buf []byte
+}
+
+// AppendFullName is equivalent to protoreflect.FullName.Append,
+// but optimized for large batches where each name has a shared lifetime.
+func (sb *Builder) AppendFullName(prefix protoreflect.FullName, name protoreflect.Name) protoreflect.FullName {
+	n := len(prefix) + len(".") + len(name)
+	if len(prefix) == 0 {
+		n -= len(".")
+	}
+	sb.grow(n)
+	sb.buf = append(sb.buf, prefix...)
+	sb.buf = append(sb.buf, '.')
+	sb.buf = append(sb.buf, name...)
+	return protoreflect.FullName(sb.last(n))
+}
+
+// MakeString is equivalent to string(b), but optimized for large batches
+// with a shared lifetime.
+func (sb *Builder) MakeString(b []byte) string {
+	sb.grow(len(b))
+	sb.buf = append(sb.buf, b...)
+	return sb.last(len(b))
+}
+
+func (sb *Builder) grow(n int) {
+	if cap(sb.buf)-len(sb.buf) >= n {
+		return
+	}
+
+	// Unlike strings.Builder, we do not need to copy over the contents
+	// of the old buffer since our builder provides no API for
+	// retrieving previously created strings.
+	sb.buf = make([]byte, 0, 2*(cap(sb.buf)+n))
+}
+
+func (sb *Builder) last(n int) string {
+	return UnsafeString(sb.buf[len(sb.buf)-n:])
+}
diff --git a/vendor/google.golang.org/protobuf/internal/version/version.go b/vendor/google.golang.org/protobuf/internal/version/version.go
index 0999f29d501..d8f48faffac 100644
--- a/vendor/google.golang.org/protobuf/internal/version/version.go
+++ b/vendor/google.golang.org/protobuf/internal/version/version.go
@@ -51,7 +51,7 @@ import (
 //  10. Send out the CL for review and submit it.
 const (
 	Major      = 1
-	Minor      = 31
+	Minor      = 32
 	Patch      = 0
 	PreRelease = ""
 )
diff --git a/vendor/google.golang.org/protobuf/proto/decode.go b/vendor/google.golang.org/protobuf/proto/decode.go
index 48d47946bb1..e5b03b56771 100644
--- a/vendor/google.golang.org/protobuf/proto/decode.go
+++ b/vendor/google.golang.org/protobuf/proto/decode.go
@@ -69,7 +69,7 @@ func (o UnmarshalOptions) Unmarshal(b []byte, m Message) error {
 // UnmarshalState parses a wire-format message and places the result in m.
 //
 // This method permits fine-grained control over the unmarshaler.
-// Most users should use Unmarshal instead.
+// Most users should use [Unmarshal] instead.
 func (o UnmarshalOptions) UnmarshalState(in protoiface.UnmarshalInput) (protoiface.UnmarshalOutput, error) {
 	if o.RecursionLimit == 0 {
 		o.RecursionLimit = protowire.DefaultRecursionLimit
diff --git a/vendor/google.golang.org/protobuf/proto/doc.go b/vendor/google.golang.org/protobuf/proto/doc.go
index ec71e717fe7..80ed16a0c29 100644
--- a/vendor/google.golang.org/protobuf/proto/doc.go
+++ b/vendor/google.golang.org/protobuf/proto/doc.go
@@ -18,27 +18,27 @@
 // This package contains functions to convert to and from the wire format,
 // an efficient binary serialization of protocol buffers.
 //
-// • Size reports the size of a message in the wire format.
+//   - [Size] reports the size of a message in the wire format.
 //
-// • Marshal converts a message to the wire format.
-// The MarshalOptions type provides more control over wire marshaling.
+//   - [Marshal] converts a message to the wire format.
+//     The [MarshalOptions] type provides more control over wire marshaling.
 //
-// • Unmarshal converts a message from the wire format.
-// The UnmarshalOptions type provides more control over wire unmarshaling.
+//   - [Unmarshal] converts a message from the wire format.
+//     The [UnmarshalOptions] type provides more control over wire unmarshaling.
 //
 // # Basic message operations
 //
-// • Clone makes a deep copy of a message.
+//   - [Clone] makes a deep copy of a message.
 //
-// • Merge merges the content of a message into another.
+//   - [Merge] merges the content of a message into another.
 //
-// • Equal compares two messages. For more control over comparisons
-// and detailed reporting of differences, see package
-// "google.golang.org/protobuf/testing/protocmp".
+//   - [Equal] compares two messages. For more control over comparisons
+//     and detailed reporting of differences, see package
+//     [google.golang.org/protobuf/testing/protocmp].
 //
-// • Reset clears the content of a message.
+//   - [Reset] clears the content of a message.
 //
-// • CheckInitialized reports whether all required fields in a message are set.
+//   - [CheckInitialized] reports whether all required fields in a message are set.
 //
 // # Optional scalar constructors
 //
@@ -46,9 +46,9 @@
 // as pointers to a value. For example, an optional string field has the
 // Go type *string.
 //
-// • Bool, Int32, Int64, Uint32, Uint64, Float32, Float64, and String
-// take a value and return a pointer to a new instance of it,
-// to simplify construction of optional field values.
+//   - [Bool], [Int32], [Int64], [Uint32], [Uint64], [Float32], [Float64], and [String]
+//     take a value and return a pointer to a new instance of it,
+//     to simplify construction of optional field values.
 //
 // Generated enum types usually have an Enum method which performs the
 // same operation.
@@ -57,29 +57,29 @@
 //
 // # Extension accessors
 //
-// • HasExtension, GetExtension, SetExtension, and ClearExtension
-// access extension field values in a protocol buffer message.
+//   - [HasExtension], [GetExtension], [SetExtension], and [ClearExtension]
+//     access extension field values in a protocol buffer message.
 //
 // Extension fields are only supported in proto2.
 //
 // # Related packages
 //
-// • Package "google.golang.org/protobuf/encoding/protojson" converts messages to
-// and from JSON.
+//   - Package [google.golang.org/protobuf/encoding/protojson] converts messages to
+//     and from JSON.
 //
-// • Package "google.golang.org/protobuf/encoding/prototext" converts messages to
-// and from the text format.
+//   - Package [google.golang.org/protobuf/encoding/prototext] converts messages to
+//     and from the text format.
 //
-// • Package "google.golang.org/protobuf/reflect/protoreflect" provides a
-// reflection interface for protocol buffer data types.
+//   - Package [google.golang.org/protobuf/reflect/protoreflect] provides a
+//     reflection interface for protocol buffer data types.
 //
-// • Package "google.golang.org/protobuf/testing/protocmp" provides features
-// to compare protocol buffer messages with the "github.com/google/go-cmp/cmp"
-// package.
+//   - Package [google.golang.org/protobuf/testing/protocmp] provides features
+//     to compare protocol buffer messages with the [github.com/google/go-cmp/cmp]
+//     package.
 //
-// • Package "google.golang.org/protobuf/types/dynamicpb" provides a dynamic
-// message type, suitable for working with messages where the protocol buffer
-// type is only known at runtime.
+//   - Package [google.golang.org/protobuf/types/dynamicpb] provides a dynamic
+//     message type, suitable for working with messages where the protocol buffer
+//     type is only known at runtime.
 //
 // This module contains additional packages for more specialized use cases.
 // Consult the individual package documentation for details.
diff --git a/vendor/google.golang.org/protobuf/proto/encode.go b/vendor/google.golang.org/protobuf/proto/encode.go
index bf7f816d0e8..4fed202f9fc 100644
--- a/vendor/google.golang.org/protobuf/proto/encode.go
+++ b/vendor/google.golang.org/protobuf/proto/encode.go
@@ -129,7 +129,7 @@ func (o MarshalOptions) MarshalAppend(b []byte, m Message) ([]byte, error) {
 // MarshalState returns the wire-format encoding of a message.
 //
 // This method permits fine-grained control over the marshaler.
-// Most users should use Marshal instead.
+// Most users should use [Marshal] instead.
 func (o MarshalOptions) MarshalState(in protoiface.MarshalInput) (protoiface.MarshalOutput, error) {
 	return o.marshal(in.Buf, in.Message)
 }
diff --git a/vendor/google.golang.org/protobuf/proto/extension.go b/vendor/google.golang.org/protobuf/proto/extension.go
index 5f293cda869..17899a3a767 100644
--- a/vendor/google.golang.org/protobuf/proto/extension.go
+++ b/vendor/google.golang.org/protobuf/proto/extension.go
@@ -26,7 +26,7 @@ func HasExtension(m Message, xt protoreflect.ExtensionType) bool {
 }
 
 // ClearExtension clears an extension field such that subsequent
-// HasExtension calls return false.
+// [HasExtension] calls return false.
 // It panics if m is invalid or if xt does not extend m.
 func ClearExtension(m Message, xt protoreflect.ExtensionType) {
 	m.ProtoReflect().Clear(xt.TypeDescriptor())
diff --git a/vendor/google.golang.org/protobuf/proto/merge.go b/vendor/google.golang.org/protobuf/proto/merge.go
index d761ab331d1..3c6fe57807b 100644
--- a/vendor/google.golang.org/protobuf/proto/merge.go
+++ b/vendor/google.golang.org/protobuf/proto/merge.go
@@ -21,7 +21,7 @@ import (
 // The unknown fields of src are appended to the unknown fields of dst.
 //
 // It is semantically equivalent to unmarshaling the encoded form of src
-// into dst with the UnmarshalOptions.Merge option specified.
+// into dst with the [UnmarshalOptions.Merge] option specified.
 func Merge(dst, src Message) {
 	// TODO: Should nil src be treated as semantically equivalent to a
 	// untyped, read-only, empty message? What about a nil dst?
diff --git a/vendor/google.golang.org/protobuf/proto/proto.go b/vendor/google.golang.org/protobuf/proto/proto.go
index 1f0d183b102..7543ee6b255 100644
--- a/vendor/google.golang.org/protobuf/proto/proto.go
+++ b/vendor/google.golang.org/protobuf/proto/proto.go
@@ -15,18 +15,20 @@ import (
 // protobuf module that accept a Message, except where otherwise specified.
 //
 // This is the v2 interface definition for protobuf messages.
-// The v1 interface definition is "github.com/golang/protobuf/proto".Message.
+// The v1 interface definition is [github.com/golang/protobuf/proto.Message].
 //
-// To convert a v1 message to a v2 message,
-// use "github.com/golang/protobuf/proto".MessageV2.
-// To convert a v2 message to a v1 message,
-// use "github.com/golang/protobuf/proto".MessageV1.
+//   - To convert a v1 message to a v2 message,
+//     use [google.golang.org/protobuf/protoadapt.MessageV2Of].
+//   - To convert a v2 message to a v1 message,
+//     use [google.golang.org/protobuf/protoadapt.MessageV1Of].
 type Message = protoreflect.ProtoMessage
 
-// Error matches all errors produced by packages in the protobuf module.
+// Error matches all errors produced by packages in the protobuf module
+// according to [errors.Is].
 //
-// That is, errors.Is(err, Error) reports whether an error is produced
-// by this module.
+// Example usage:
+//
+//	if errors.Is(err, proto.Error) { ... }
 var Error error
 
 func init() {
diff --git a/vendor/google.golang.org/protobuf/reflect/protodesc/desc.go b/vendor/google.golang.org/protobuf/reflect/protodesc/desc.go
index e4dfb120506..baa0cc6218f 100644
--- a/vendor/google.golang.org/protobuf/reflect/protodesc/desc.go
+++ b/vendor/google.golang.org/protobuf/reflect/protodesc/desc.go
@@ -3,11 +3,11 @@
 // license that can be found in the LICENSE file.
 
 // Package protodesc provides functionality for converting
-// FileDescriptorProto messages to/from protoreflect.FileDescriptor values.
+// FileDescriptorProto messages to/from [protoreflect.FileDescriptor] values.
 //
 // The google.protobuf.FileDescriptorProto is a protobuf message that describes
 // the type information for a .proto file in a form that is easily serializable.
-// The protoreflect.FileDescriptor is a more structured representation of
+// The [protoreflect.FileDescriptor] is a more structured representation of
 // the FileDescriptorProto message where references and remote dependencies
 // can be directly followed.
 package protodesc
@@ -24,11 +24,11 @@ import (
 	"google.golang.org/protobuf/types/descriptorpb"
 )
 
-// Resolver is the resolver used by NewFile to resolve dependencies.
+// Resolver is the resolver used by [NewFile] to resolve dependencies.
 // The enums and messages provided must belong to some parent file,
 // which is also registered.
 //
-// It is implemented by protoregistry.Files.
+// It is implemented by [protoregistry.Files].
 type Resolver interface {
 	FindFileByPath(string) (protoreflect.FileDescriptor, error)
 	FindDescriptorByName(protoreflect.FullName) (protoreflect.Descriptor, error)
@@ -61,19 +61,19 @@ type FileOptions struct {
 	AllowUnresolvable bool
 }
 
-// NewFile creates a new protoreflect.FileDescriptor from the provided
-// file descriptor message. See FileOptions.New for more information.
+// NewFile creates a new [protoreflect.FileDescriptor] from the provided
+// file descriptor message. See [FileOptions.New] for more information.
 func NewFile(fd *descriptorpb.FileDescriptorProto, r Resolver) (protoreflect.FileDescriptor, error) {
 	return FileOptions{}.New(fd, r)
 }
 
-// NewFiles creates a new protoregistry.Files from the provided
-// FileDescriptorSet message. See FileOptions.NewFiles for more information.
+// NewFiles creates a new [protoregistry.Files] from the provided
+// FileDescriptorSet message. See [FileOptions.NewFiles] for more information.
 func NewFiles(fd *descriptorpb.FileDescriptorSet) (*protoregistry.Files, error) {
 	return FileOptions{}.NewFiles(fd)
 }
 
-// New creates a new protoreflect.FileDescriptor from the provided
+// New creates a new [protoreflect.FileDescriptor] from the provided
 // file descriptor message. The file must represent a valid proto file according
 // to protobuf semantics. The returned descriptor is a deep copy of the input.
 //
@@ -93,9 +93,15 @@ func (o FileOptions) New(fd *descriptorpb.FileDescriptorProto, r Resolver) (prot
 		f.L1.Syntax = protoreflect.Proto2
 	case "proto3":
 		f.L1.Syntax = protoreflect.Proto3
+	case "editions":
+		f.L1.Syntax = protoreflect.Editions
+		f.L1.Edition = fromEditionProto(fd.GetEdition())
 	default:
 		return nil, errors.New("invalid syntax: %q", fd.GetSyntax())
 	}
+	if f.L1.Syntax == protoreflect.Editions && (fd.GetEdition() < SupportedEditionsMinimum || fd.GetEdition() > SupportedEditionsMaximum) {
+		return nil, errors.New("use of edition %v not yet supported by the Go Protobuf runtime", fd.GetEdition())
+	}
 	f.L1.Path = fd.GetName()
 	if f.L1.Path == "" {
 		return nil, errors.New("file path must be populated")
@@ -108,6 +114,9 @@ func (o FileOptions) New(fd *descriptorpb.FileDescriptorProto, r Resolver) (prot
 		opts = proto.Clone(opts).(*descriptorpb.FileOptions)
 		f.L2.Options = func() protoreflect.ProtoMessage { return opts }
 	}
+	if f.L1.Syntax == protoreflect.Editions {
+		initFileDescFromFeatureSet(f, fd.GetOptions().GetFeatures())
+	}
 
 	f.L2.Imports = make(filedesc.FileImports, len(fd.GetDependency()))
 	for _, i := range fd.GetPublicDependency() {
@@ -231,7 +240,7 @@ func (is importSet) importPublic(imps protoreflect.FileImports) {
 	}
 }
 
-// NewFiles creates a new protoregistry.Files from the provided
+// NewFiles creates a new [protoregistry.Files] from the provided
 // FileDescriptorSet message. The descriptor set must include only
 // valid files according to protobuf semantics. The returned descriptors
 // are a deep copy of the input.
diff --git a/vendor/google.golang.org/protobuf/reflect/protodesc/desc_init.go b/vendor/google.golang.org/protobuf/reflect/protodesc/desc_init.go
index 37efda1afe9..aff6fd4900e 100644
--- a/vendor/google.golang.org/protobuf/reflect/protodesc/desc_init.go
+++ b/vendor/google.golang.org/protobuf/reflect/protodesc/desc_init.go
@@ -137,6 +137,30 @@ func (r descsByName) initFieldsFromDescriptorProto(fds []*descriptorpb.FieldDesc
 		if fd.JsonName != nil {
 			f.L1.StringName.InitJSON(fd.GetJsonName())
 		}
+
+		if f.Base.L0.ParentFile.Syntax() == protoreflect.Editions {
+			f.L1.Presence = resolveFeatureHasFieldPresence(f.Base.L0.ParentFile, fd)
+			// We reuse the existing field because the old option `[packed =
+			// true]` is mutually exclusive with the editions feature.
+			if fd.GetLabel() == descriptorpb.FieldDescriptorProto_LABEL_REPEATED {
+				f.L1.HasPacked = true
+				f.L1.IsPacked = resolveFeatureRepeatedFieldEncodingPacked(f.Base.L0.ParentFile, fd)
+			}
+
+			// We pretend this option is always explicitly set because the only
+			// use of HasEnforceUTF8 is to determine whether to use EnforceUTF8
+			// or to return the appropriate default.
+			// When using editions we either parse the option or resolve the
+			// appropriate default here (instead of later when this option is
+			// requested from the descriptor).
+			// In proto2/proto3 syntax HasEnforceUTF8 might be false.
+			f.L1.HasEnforceUTF8 = true
+			f.L1.EnforceUTF8 = resolveFeatureEnforceUTF8(f.Base.L0.ParentFile, fd)
+
+			if f.L1.Kind == protoreflect.MessageKind && resolveFeatureDelimitedEncoding(f.Base.L0.ParentFile, fd) {
+				f.L1.Kind = protoreflect.GroupKind
+			}
+		}
 	}
 	return fs, nil
 }
diff --git a/vendor/google.golang.org/protobuf/reflect/protodesc/editions.go b/vendor/google.golang.org/protobuf/reflect/protodesc/editions.go
new file mode 100644
index 00000000000..7352926cab4
--- /dev/null
+++ b/vendor/google.golang.org/protobuf/reflect/protodesc/editions.go
@@ -0,0 +1,177 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package protodesc
+
+import (
+	_ "embed"
+	"fmt"
+	"os"
+	"sync"
+
+	"google.golang.org/protobuf/internal/filedesc"
+	"google.golang.org/protobuf/proto"
+	"google.golang.org/protobuf/types/descriptorpb"
+)
+
+const (
+	SupportedEditionsMinimum = descriptorpb.Edition_EDITION_PROTO2
+	SupportedEditionsMaximum = descriptorpb.Edition_EDITION_2023
+)
+
+//go:embed editions_defaults.binpb
+var binaryEditionDefaults []byte
+var defaults = &descriptorpb.FeatureSetDefaults{}
+var defaultsCacheMu sync.Mutex
+var defaultsCache = make(map[filedesc.Edition]*descriptorpb.FeatureSet)
+
+func init() {
+	err := proto.Unmarshal(binaryEditionDefaults, defaults)
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "unmarshal editions defaults: %v\n", err)
+		os.Exit(1)
+	}
+}
+
+func fromEditionProto(epb descriptorpb.Edition) filedesc.Edition {
+	return filedesc.Edition(epb)
+}
+
+func toEditionProto(ed filedesc.Edition) descriptorpb.Edition {
+	switch ed {
+	case filedesc.EditionUnknown:
+		return descriptorpb.Edition_EDITION_UNKNOWN
+	case filedesc.EditionProto2:
+		return descriptorpb.Edition_EDITION_PROTO2
+	case filedesc.EditionProto3:
+		return descriptorpb.Edition_EDITION_PROTO3
+	case filedesc.Edition2023:
+		return descriptorpb.Edition_EDITION_2023
+	default:
+		panic(fmt.Sprintf("unknown value for edition: %v", ed))
+	}
+}
+
+func getFeatureSetFor(ed filedesc.Edition) *descriptorpb.FeatureSet {
+	defaultsCacheMu.Lock()
+	defer defaultsCacheMu.Unlock()
+	if def, ok := defaultsCache[ed]; ok {
+		return def
+	}
+	edpb := toEditionProto(ed)
+	if defaults.GetMinimumEdition() > edpb || defaults.GetMaximumEdition() < edpb {
+		// This should never happen protodesc.(FileOptions).New would fail when
+		// initializing the file descriptor.
+		// This most likely means the embedded defaults were not updated.
+		fmt.Fprintf(os.Stderr, "internal error: unsupported edition %v (did you forget to update the embedded defaults (i.e. the bootstrap descriptor proto)?)\n", edpb)
+		os.Exit(1)
+	}
+	fs := defaults.GetDefaults()[0].GetFeatures()
+	// Using a linear search for now.
+	// Editions are guaranteed to be sorted and thus we could use a binary search.
+	// Given that there are only a handful of editions (with one more per year)
+	// there is not much reason to use a binary search.
+	for _, def := range defaults.GetDefaults() {
+		if def.GetEdition() <= edpb {
+			fs = def.GetFeatures()
+		} else {
+			break
+		}
+	}
+	defaultsCache[ed] = fs
+	return fs
+}
+
+func resolveFeatureHasFieldPresence(fileDesc *filedesc.File, fieldDesc *descriptorpb.FieldDescriptorProto) bool {
+	fs := fieldDesc.GetOptions().GetFeatures()
+	if fs == nil || fs.FieldPresence == nil {
+		return fileDesc.L1.EditionFeatures.IsFieldPresence
+	}
+	return fs.GetFieldPresence() == descriptorpb.FeatureSet_LEGACY_REQUIRED ||
+		fs.GetFieldPresence() == descriptorpb.FeatureSet_EXPLICIT
+}
+
+func resolveFeatureRepeatedFieldEncodingPacked(fileDesc *filedesc.File, fieldDesc *descriptorpb.FieldDescriptorProto) bool {
+	fs := fieldDesc.GetOptions().GetFeatures()
+	if fs == nil || fs.RepeatedFieldEncoding == nil {
+		return fileDesc.L1.EditionFeatures.IsPacked
+	}
+	return fs.GetRepeatedFieldEncoding() == descriptorpb.FeatureSet_PACKED
+}
+
+func resolveFeatureEnforceUTF8(fileDesc *filedesc.File, fieldDesc *descriptorpb.FieldDescriptorProto) bool {
+	fs := fieldDesc.GetOptions().GetFeatures()
+	if fs == nil || fs.Utf8Validation == nil {
+		return fileDesc.L1.EditionFeatures.IsUTF8Validated
+	}
+	return fs.GetUtf8Validation() == descriptorpb.FeatureSet_VERIFY
+}
+
+func resolveFeatureDelimitedEncoding(fileDesc *filedesc.File, fieldDesc *descriptorpb.FieldDescriptorProto) bool {
+	fs := fieldDesc.GetOptions().GetFeatures()
+	if fs == nil || fs.MessageEncoding == nil {
+		return fileDesc.L1.EditionFeatures.IsDelimitedEncoded
+	}
+	return fs.GetMessageEncoding() == descriptorpb.FeatureSet_DELIMITED
+}
+
+// initFileDescFromFeatureSet initializes editions related fields in fd based
+// on fs. If fs is nil it is assumed to be an empty featureset and all fields
+// will be initialized with the appropriate default. fd.L1.Edition must be set
+// before calling this function.
+func initFileDescFromFeatureSet(fd *filedesc.File, fs *descriptorpb.FeatureSet) {
+	dfs := getFeatureSetFor(fd.L1.Edition)
+	if fs == nil {
+		fs = &descriptorpb.FeatureSet{}
+	}
+
+	var fieldPresence descriptorpb.FeatureSet_FieldPresence
+	if fp := fs.FieldPresence; fp != nil {
+		fieldPresence = *fp
+	} else {
+		fieldPresence = *dfs.FieldPresence
+	}
+	fd.L1.EditionFeatures.IsFieldPresence = fieldPresence == descriptorpb.FeatureSet_LEGACY_REQUIRED ||
+		fieldPresence == descriptorpb.FeatureSet_EXPLICIT
+
+	var enumType descriptorpb.FeatureSet_EnumType
+	if et := fs.EnumType; et != nil {
+		enumType = *et
+	} else {
+		enumType = *dfs.EnumType
+	}
+	fd.L1.EditionFeatures.IsOpenEnum = enumType == descriptorpb.FeatureSet_OPEN
+
+	var respeatedFieldEncoding descriptorpb.FeatureSet_RepeatedFieldEncoding
+	if rfe := fs.RepeatedFieldEncoding; rfe != nil {
+		respeatedFieldEncoding = *rfe
+	} else {
+		respeatedFieldEncoding = *dfs.RepeatedFieldEncoding
+	}
+	fd.L1.EditionFeatures.IsPacked = respeatedFieldEncoding == descriptorpb.FeatureSet_PACKED
+
+	var isUTF8Validated descriptorpb.FeatureSet_Utf8Validation
+	if utf8val := fs.Utf8Validation; utf8val != nil {
+		isUTF8Validated = *utf8val
+	} else {
+		isUTF8Validated = *dfs.Utf8Validation
+	}
+	fd.L1.EditionFeatures.IsUTF8Validated = isUTF8Validated == descriptorpb.FeatureSet_VERIFY
+
+	var messageEncoding descriptorpb.FeatureSet_MessageEncoding
+	if me := fs.MessageEncoding; me != nil {
+		messageEncoding = *me
+	} else {
+		messageEncoding = *dfs.MessageEncoding
+	}
+	fd.L1.EditionFeatures.IsDelimitedEncoded = messageEncoding == descriptorpb.FeatureSet_DELIMITED
+
+	var jsonFormat descriptorpb.FeatureSet_JsonFormat
+	if jf := fs.JsonFormat; jf != nil {
+		jsonFormat = *jf
+	} else {
+		jsonFormat = *dfs.JsonFormat
+	}
+	fd.L1.EditionFeatures.IsJSONCompliant = jsonFormat == descriptorpb.FeatureSet_ALLOW
+}
diff --git a/vendor/google.golang.org/protobuf/reflect/protodesc/editions_defaults.binpb b/vendor/google.golang.org/protobuf/reflect/protodesc/editions_defaults.binpb
new file mode 100644
index 00000000000..1a8610a8439
--- /dev/null
+++ b/vendor/google.golang.org/protobuf/reflect/protodesc/editions_defaults.binpb
@@ -0,0 +1,4 @@
+
+
 
(
0�
+

 (
0
�
+


 (
0
� �(�
\ No newline at end of file
diff --git a/vendor/google.golang.org/protobuf/reflect/protodesc/proto.go b/vendor/google.golang.org/protobuf/reflect/protodesc/proto.go
index a7c5ceffc9b..9d6e05420f7 100644
--- a/vendor/google.golang.org/protobuf/reflect/protodesc/proto.go
+++ b/vendor/google.golang.org/protobuf/reflect/protodesc/proto.go
@@ -16,7 +16,7 @@ import (
 	"google.golang.org/protobuf/types/descriptorpb"
 )
 
-// ToFileDescriptorProto copies a protoreflect.FileDescriptor into a
+// ToFileDescriptorProto copies a [protoreflect.FileDescriptor] into a
 // google.protobuf.FileDescriptorProto message.
 func ToFileDescriptorProto(file protoreflect.FileDescriptor) *descriptorpb.FileDescriptorProto {
 	p := &descriptorpb.FileDescriptorProto{
@@ -70,13 +70,13 @@ func ToFileDescriptorProto(file protoreflect.FileDescriptor) *descriptorpb.FileD
 	for i, exts := 0, file.Extensions(); i < exts.Len(); i++ {
 		p.Extension = append(p.Extension, ToFieldDescriptorProto(exts.Get(i)))
 	}
-	if syntax := file.Syntax(); syntax != protoreflect.Proto2 {
+	if syntax := file.Syntax(); syntax != protoreflect.Proto2 && syntax.IsValid() {
 		p.Syntax = proto.String(file.Syntax().String())
 	}
 	return p
 }
 
-// ToDescriptorProto copies a protoreflect.MessageDescriptor into a
+// ToDescriptorProto copies a [protoreflect.MessageDescriptor] into a
 // google.protobuf.DescriptorProto message.
 func ToDescriptorProto(message protoreflect.MessageDescriptor) *descriptorpb.DescriptorProto {
 	p := &descriptorpb.DescriptorProto{
@@ -119,7 +119,7 @@ func ToDescriptorProto(message protoreflect.MessageDescriptor) *descriptorpb.Des
 	return p
 }
 
-// ToFieldDescriptorProto copies a protoreflect.FieldDescriptor into a
+// ToFieldDescriptorProto copies a [protoreflect.FieldDescriptor] into a
 // google.protobuf.FieldDescriptorProto message.
 func ToFieldDescriptorProto(field protoreflect.FieldDescriptor) *descriptorpb.FieldDescriptorProto {
 	p := &descriptorpb.FieldDescriptorProto{
@@ -168,7 +168,7 @@ func ToFieldDescriptorProto(field protoreflect.FieldDescriptor) *descriptorpb.Fi
 	return p
 }
 
-// ToOneofDescriptorProto copies a protoreflect.OneofDescriptor into a
+// ToOneofDescriptorProto copies a [protoreflect.OneofDescriptor] into a
 // google.protobuf.OneofDescriptorProto message.
 func ToOneofDescriptorProto(oneof protoreflect.OneofDescriptor) *descriptorpb.OneofDescriptorProto {
 	return &descriptorpb.OneofDescriptorProto{
@@ -177,7 +177,7 @@ func ToOneofDescriptorProto(oneof protoreflect.OneofDescriptor) *descriptorpb.On
 	}
 }
 
-// ToEnumDescriptorProto copies a protoreflect.EnumDescriptor into a
+// ToEnumDescriptorProto copies a [protoreflect.EnumDescriptor] into a
 // google.protobuf.EnumDescriptorProto message.
 func ToEnumDescriptorProto(enum protoreflect.EnumDescriptor) *descriptorpb.EnumDescriptorProto {
 	p := &descriptorpb.EnumDescriptorProto{
@@ -200,7 +200,7 @@ func ToEnumDescriptorProto(enum protoreflect.EnumDescriptor) *descriptorpb.EnumD
 	return p
 }
 
-// ToEnumValueDescriptorProto copies a protoreflect.EnumValueDescriptor into a
+// ToEnumValueDescriptorProto copies a [protoreflect.EnumValueDescriptor] into a
 // google.protobuf.EnumValueDescriptorProto message.
 func ToEnumValueDescriptorProto(value protoreflect.EnumValueDescriptor) *descriptorpb.EnumValueDescriptorProto {
 	return &descriptorpb.EnumValueDescriptorProto{
@@ -210,7 +210,7 @@ func ToEnumValueDescriptorProto(value protoreflect.EnumValueDescriptor) *descrip
 	}
 }
 
-// ToServiceDescriptorProto copies a protoreflect.ServiceDescriptor into a
+// ToServiceDescriptorProto copies a [protoreflect.ServiceDescriptor] into a
 // google.protobuf.ServiceDescriptorProto message.
 func ToServiceDescriptorProto(service protoreflect.ServiceDescriptor) *descriptorpb.ServiceDescriptorProto {
 	p := &descriptorpb.ServiceDescriptorProto{
@@ -223,7 +223,7 @@ func ToServiceDescriptorProto(service protoreflect.ServiceDescriptor) *descripto
 	return p
 }
 
-// ToMethodDescriptorProto copies a protoreflect.MethodDescriptor into a
+// ToMethodDescriptorProto copies a [protoreflect.MethodDescriptor] into a
 // google.protobuf.MethodDescriptorProto message.
 func ToMethodDescriptorProto(method protoreflect.MethodDescriptor) *descriptorpb.MethodDescriptorProto {
 	p := &descriptorpb.MethodDescriptorProto{
diff --git a/vendor/google.golang.org/protobuf/reflect/protoreflect/proto.go b/vendor/google.golang.org/protobuf/reflect/protoreflect/proto.go
index 55aa14922b0..ec6572dfda9 100644
--- a/vendor/google.golang.org/protobuf/reflect/protoreflect/proto.go
+++ b/vendor/google.golang.org/protobuf/reflect/protoreflect/proto.go
@@ -10,46 +10,46 @@
 //
 // # Protocol Buffer Descriptors
 //
-// Protobuf descriptors (e.g., EnumDescriptor or MessageDescriptor)
+// Protobuf descriptors (e.g., [EnumDescriptor] or [MessageDescriptor])
 // are immutable objects that represent protobuf type information.
 // They are wrappers around the messages declared in descriptor.proto.
 // Protobuf descriptors alone lack any information regarding Go types.
 //
-// Enums and messages generated by this module implement Enum and ProtoMessage,
+// Enums and messages generated by this module implement [Enum] and [ProtoMessage],
 // where the Descriptor and ProtoReflect.Descriptor accessors respectively
 // return the protobuf descriptor for the values.
 //
 // The protobuf descriptor interfaces are not meant to be implemented by
 // user code since they might need to be extended in the future to support
 // additions to the protobuf language.
-// The "google.golang.org/protobuf/reflect/protodesc" package converts between
+// The [google.golang.org/protobuf/reflect/protodesc] package converts between
 // google.protobuf.DescriptorProto messages and protobuf descriptors.
 //
 // # Go Type Descriptors
 //
-// A type descriptor (e.g., EnumType or MessageType) is a constructor for
+// A type descriptor (e.g., [EnumType] or [MessageType]) is a constructor for
 // a concrete Go type that represents the associated protobuf descriptor.
 // There is commonly a one-to-one relationship between protobuf descriptors and
 // Go type descriptors, but it can potentially be a one-to-many relationship.
 //
-// Enums and messages generated by this module implement Enum and ProtoMessage,
+// Enums and messages generated by this module implement [Enum] and [ProtoMessage],
 // where the Type and ProtoReflect.Type accessors respectively
 // return the protobuf descriptor for the values.
 //
-// The "google.golang.org/protobuf/types/dynamicpb" package can be used to
+// The [google.golang.org/protobuf/types/dynamicpb] package can be used to
 // create Go type descriptors from protobuf descriptors.
 //
 // # Value Interfaces
 //
-// The Enum and Message interfaces provide a reflective view over an
+// The [Enum] and [Message] interfaces provide a reflective view over an
 // enum or message instance. For enums, it provides the ability to retrieve
 // the enum value number for any concrete enum type. For messages, it provides
 // the ability to access or manipulate fields of the message.
 //
-// To convert a proto.Message to a protoreflect.Message, use the
+// To convert a [google.golang.org/protobuf/proto.Message] to a [protoreflect.Message], use the
 // former's ProtoReflect method. Since the ProtoReflect method is new to the
 // v2 message interface, it may not be present on older message implementations.
-// The "github.com/golang/protobuf/proto".MessageReflect function can be used
+// The [github.com/golang/protobuf/proto.MessageReflect] function can be used
 // to obtain a reflective view on older messages.
 //
 // # Relationships
@@ -71,12 +71,12 @@
 //	      │                                 │
 //	      └────────────────── Type() ───────┘
 //
-// • An EnumType describes a concrete Go enum type.
+// • An [EnumType] describes a concrete Go enum type.
 // It has an EnumDescriptor and can construct an Enum instance.
 //
-// • An EnumDescriptor describes an abstract protobuf enum type.
+// • An [EnumDescriptor] describes an abstract protobuf enum type.
 //
-// • An Enum is a concrete enum instance. Generated enums implement Enum.
+// • An [Enum] is a concrete enum instance. Generated enums implement Enum.
 //
 //	  ┌──────────────── New() ─────────────────┐
 //	  │                                        │
@@ -90,24 +90,26 @@
 //	       │                                    │
 //	       └─────────────────── Type() ─────────┘
 //
-// • A MessageType describes a concrete Go message type.
-// It has a MessageDescriptor and can construct a Message instance.
-// Just as how Go's reflect.Type is a reflective description of a Go type,
-// a MessageType is a reflective description of a Go type for a protobuf message.
+// • A [MessageType] describes a concrete Go message type.
+// It has a [MessageDescriptor] and can construct a [Message] instance.
+// Just as how Go's [reflect.Type] is a reflective description of a Go type,
+// a [MessageType] is a reflective description of a Go type for a protobuf message.
 //
-// • A MessageDescriptor describes an abstract protobuf message type.
-// It has no understanding of Go types. In order to construct a MessageType
-// from just a MessageDescriptor, you can consider looking up the message type
-// in the global registry using protoregistry.GlobalTypes.FindMessageByName
-// or constructing a dynamic MessageType using dynamicpb.NewMessageType.
+// • A [MessageDescriptor] describes an abstract protobuf message type.
+// It has no understanding of Go types. In order to construct a [MessageType]
+// from just a [MessageDescriptor], you can consider looking up the message type
+// in the global registry using the FindMessageByName method on
+// [google.golang.org/protobuf/reflect/protoregistry.GlobalTypes]
+// or constructing a dynamic [MessageType] using
+// [google.golang.org/protobuf/types/dynamicpb.NewMessageType].
 //
-// • A Message is a reflective view over a concrete message instance.
-// Generated messages implement ProtoMessage, which can convert to a Message.
-// Just as how Go's reflect.Value is a reflective view over a Go value,
-// a Message is a reflective view over a concrete protobuf message instance.
-// Using Go reflection as an analogy, the ProtoReflect method is similar to
-// calling reflect.ValueOf, and the Message.Interface method is similar to
-// calling reflect.Value.Interface.
+// • A [Message] is a reflective view over a concrete message instance.
+// Generated messages implement [ProtoMessage], which can convert to a [Message].
+// Just as how Go's [reflect.Value] is a reflective view over a Go value,
+// a [Message] is a reflective view over a concrete protobuf message instance.
+// Using Go reflection as an analogy, the [ProtoMessage.ProtoReflect] method is similar to
+// calling [reflect.ValueOf], and the [Message.Interface] method is similar to
+// calling [reflect.Value.Interface].
 //
 //	      ┌── TypeDescriptor() ──┐    ┌───── Descriptor() ─────┐
 //	      │                      V    │                        V
@@ -119,15 +121,15 @@
 //	                                 │                          │
 //	                                 └────── implements ────────┘
 //
-// • An ExtensionType describes a concrete Go implementation of an extension.
-// It has an ExtensionTypeDescriptor and can convert to/from
-// abstract Values and Go values.
+// • An [ExtensionType] describes a concrete Go implementation of an extension.
+// It has an [ExtensionTypeDescriptor] and can convert to/from
+// an abstract [Value] and a Go value.
 //
-// • An ExtensionTypeDescriptor is an ExtensionDescriptor
-// which also has an ExtensionType.
+// • An [ExtensionTypeDescriptor] is an [ExtensionDescriptor]
+// which also has an [ExtensionType].
 //
-// • An ExtensionDescriptor describes an abstract protobuf extension field and
-// may not always be an ExtensionTypeDescriptor.
+// • An [ExtensionDescriptor] describes an abstract protobuf extension field and
+// may not always be an [ExtensionTypeDescriptor].
 package protoreflect
 
 import (
@@ -142,7 +144,7 @@ type doNotImplement pragma.DoNotImplement
 
 // ProtoMessage is the top-level interface that all proto messages implement.
 // This is declared in the protoreflect package to avoid a cyclic dependency;
-// use the proto.Message type instead, which aliases this type.
+// use the [google.golang.org/protobuf/proto.Message] type instead, which aliases this type.
 type ProtoMessage interface{ ProtoReflect() Message }
 
 // Syntax is the language version of the proto file.
@@ -151,8 +153,9 @@ type Syntax syntax
 type syntax int8 // keep exact type opaque as the int type may change
 
 const (
-	Proto2 Syntax = 2
-	Proto3 Syntax = 3
+	Proto2   Syntax = 2
+	Proto3   Syntax = 3
+	Editions Syntax = 4
 )
 
 // IsValid reports whether the syntax is valid.
@@ -436,7 +439,7 @@ type Names interface {
 // FullName is a qualified name that uniquely identifies a proto declaration.
 // A qualified name is the concatenation of the proto package along with the
 // fully-declared name (i.e., name of parent preceding the name of the child),
-// with a '.' delimiter placed between each Name.
+// with a '.' delimiter placed between each [Name].
 //
 // This should not have any leading or trailing dots.
 type FullName string // e.g., "google.protobuf.Field.Kind"
@@ -480,7 +483,7 @@ func isLetterDigit(c byte) bool {
 }
 
 // Name returns the short name, which is the last identifier segment.
-// A single segment FullName is the Name itself.
+// A single segment FullName is the [Name] itself.
 func (n FullName) Name() Name {
 	if i := strings.LastIndexByte(string(n), '.'); i >= 0 {
 		return Name(n[i+1:])
diff --git a/vendor/google.golang.org/protobuf/reflect/protoreflect/source_gen.go b/vendor/google.golang.org/protobuf/reflect/protoreflect/source_gen.go
index 717b106f3da..0c045db6ab6 100644
--- a/vendor/google.golang.org/protobuf/reflect/protoreflect/source_gen.go
+++ b/vendor/google.golang.org/protobuf/reflect/protoreflect/source_gen.go
@@ -35,7 +35,7 @@ func (p *SourcePath) appendFileDescriptorProto(b []byte) []byte {
 		b = p.appendSingularField(b, "source_code_info", (*SourcePath).appendSourceCodeInfo)
 	case 12:
 		b = p.appendSingularField(b, "syntax", nil)
-	case 13:
+	case 14:
 		b = p.appendSingularField(b, "edition", nil)
 	}
 	return b
@@ -180,6 +180,8 @@ func (p *SourcePath) appendFileOptions(b []byte) []byte {
 		b = p.appendSingularField(b, "php_metadata_namespace", nil)
 	case 45:
 		b = p.appendSingularField(b, "ruby_package", nil)
+	case 50:
+		b = p.appendSingularField(b, "features", (*SourcePath).appendFeatureSet)
 	case 999:
 		b = p.appendRepeatedField(b, "uninterpreted_option", (*SourcePath).appendUninterpretedOption)
 	}
@@ -240,6 +242,8 @@ func (p *SourcePath) appendMessageOptions(b []byte) []byte {
 		b = p.appendSingularField(b, "map_entry", nil)
 	case 11:
 		b = p.appendSingularField(b, "deprecated_legacy_json_field_conflicts", nil)
+	case 12:
+		b = p.appendSingularField(b, "features", (*SourcePath).appendFeatureSet)
 	case 999:
 		b = p.appendRepeatedField(b, "uninterpreted_option", (*SourcePath).appendUninterpretedOption)
 	}
@@ -285,6 +289,8 @@ func (p *SourcePath) appendEnumOptions(b []byte) []byte {
 		b = p.appendSingularField(b, "deprecated", nil)
 	case 6:
 		b = p.appendSingularField(b, "deprecated_legacy_json_field_conflicts", nil)
+	case 7:
+		b = p.appendSingularField(b, "features", (*SourcePath).appendFeatureSet)
 	case 999:
 		b = p.appendRepeatedField(b, "uninterpreted_option", (*SourcePath).appendUninterpretedOption)
 	}
@@ -330,6 +336,8 @@ func (p *SourcePath) appendServiceOptions(b []byte) []byte {
 		return b
 	}
 	switch (*p)[0] {
+	case 34:
+		b = p.appendSingularField(b, "features", (*SourcePath).appendFeatureSet)
 	case 33:
 		b = p.appendSingularField(b, "deprecated", nil)
 	case 999:
@@ -361,16 +369,39 @@ func (p *SourcePath) appendFieldOptions(b []byte) []byte {
 		b = p.appendSingularField(b, "debug_redact", nil)
 	case 17:
 		b = p.appendSingularField(b, "retention", nil)
-	case 18:
-		b = p.appendSingularField(b, "target", nil)
 	case 19:
 		b = p.appendRepeatedField(b, "targets", nil)
+	case 20:
+		b = p.appendRepeatedField(b, "edition_defaults", (*SourcePath).appendFieldOptions_EditionDefault)
+	case 21:
+		b = p.appendSingularField(b, "features", (*SourcePath).appendFeatureSet)
 	case 999:
 		b = p.appendRepeatedField(b, "uninterpreted_option", (*SourcePath).appendUninterpretedOption)
 	}
 	return b
 }
 
+func (p *SourcePath) appendFeatureSet(b []byte) []byte {
+	if len(*p) == 0 {
+		return b
+	}
+	switch (*p)[0] {
+	case 1:
+		b = p.appendSingularField(b, "field_presence", nil)
+	case 2:
+		b = p.appendSingularField(b, "enum_type", nil)
+	case 3:
+		b = p.appendSingularField(b, "repeated_field_encoding", nil)
+	case 4:
+		b = p.appendSingularField(b, "utf8_validation", nil)
+	case 5:
+		b = p.appendSingularField(b, "message_encoding", nil)
+	case 6:
+		b = p.appendSingularField(b, "json_format", nil)
+	}
+	return b
+}
+
 func (p *SourcePath) appendUninterpretedOption(b []byte) []byte {
 	if len(*p) == 0 {
 		return b
@@ -422,6 +453,8 @@ func (p *SourcePath) appendExtensionRangeOptions(b []byte) []byte {
 		b = p.appendRepeatedField(b, "uninterpreted_option", (*SourcePath).appendUninterpretedOption)
 	case 2:
 		b = p.appendRepeatedField(b, "declaration", (*SourcePath).appendExtensionRangeOptions_Declaration)
+	case 50:
+		b = p.appendSingularField(b, "features", (*SourcePath).appendFeatureSet)
 	case 3:
 		b = p.appendSingularField(b, "verification", nil)
 	}
@@ -433,6 +466,8 @@ func (p *SourcePath) appendOneofOptions(b []byte) []byte {
 		return b
 	}
 	switch (*p)[0] {
+	case 1:
+		b = p.appendSingularField(b, "features", (*SourcePath).appendFeatureSet)
 	case 999:
 		b = p.appendRepeatedField(b, "uninterpreted_option", (*SourcePath).appendUninterpretedOption)
 	}
@@ -446,6 +481,10 @@ func (p *SourcePath) appendEnumValueOptions(b []byte) []byte {
 	switch (*p)[0] {
 	case 1:
 		b = p.appendSingularField(b, "deprecated", nil)
+	case 2:
+		b = p.appendSingularField(b, "features", (*SourcePath).appendFeatureSet)
+	case 3:
+		b = p.appendSingularField(b, "debug_redact", nil)
 	case 999:
 		b = p.appendRepeatedField(b, "uninterpreted_option", (*SourcePath).appendUninterpretedOption)
 	}
@@ -461,12 +500,27 @@ func (p *SourcePath) appendMethodOptions(b []byte) []byte {
 		b = p.appendSingularField(b, "deprecated", nil)
 	case 34:
 		b = p.appendSingularField(b, "idempotency_level", nil)
+	case 35:
+		b = p.appendSingularField(b, "features", (*SourcePath).appendFeatureSet)
 	case 999:
 		b = p.appendRepeatedField(b, "uninterpreted_option", (*SourcePath).appendUninterpretedOption)
 	}
 	return b
 }
 
+func (p *SourcePath) appendFieldOptions_EditionDefault(b []byte) []byte {
+	if len(*p) == 0 {
+		return b
+	}
+	switch (*p)[0] {
+	case 3:
+		b = p.appendSingularField(b, "edition", nil)
+	case 2:
+		b = p.appendSingularField(b, "value", nil)
+	}
+	return b
+}
+
 func (p *SourcePath) appendUninterpretedOption_NamePart(b []byte) []byte {
 	if len(*p) == 0 {
 		return b
@@ -491,8 +545,6 @@ func (p *SourcePath) appendExtensionRangeOptions_Declaration(b []byte) []byte {
 		b = p.appendSingularField(b, "full_name", nil)
 	case 3:
 		b = p.appendSingularField(b, "type", nil)
-	case 4:
-		b = p.appendSingularField(b, "is_repeated", nil)
 	case 5:
 		b = p.appendSingularField(b, "reserved", nil)
 	case 6:
diff --git a/vendor/google.golang.org/protobuf/reflect/protoreflect/type.go b/vendor/google.golang.org/protobuf/reflect/protoreflect/type.go
index 3867470d30a..60ff62b4c85 100644
--- a/vendor/google.golang.org/protobuf/reflect/protoreflect/type.go
+++ b/vendor/google.golang.org/protobuf/reflect/protoreflect/type.go
@@ -12,7 +12,7 @@ package protoreflect
 // exactly identical. However, it is possible for the same semantically
 // identical proto type to be represented by multiple type descriptors.
 //
-// For example, suppose we have t1 and t2 which are both MessageDescriptors.
+// For example, suppose we have t1 and t2 which are both an [MessageDescriptor].
 // If t1 == t2, then the types are definitely equal and all accessors return
 // the same information. However, if t1 != t2, then it is still possible that
 // they still represent the same proto type (e.g., t1.FullName == t2.FullName).
@@ -115,7 +115,7 @@ type Descriptor interface {
 // corresponds with the google.protobuf.FileDescriptorProto message.
 //
 // Top-level declarations:
-// EnumDescriptor, MessageDescriptor, FieldDescriptor, and/or ServiceDescriptor.
+// [EnumDescriptor], [MessageDescriptor], [FieldDescriptor], and/or [ServiceDescriptor].
 type FileDescriptor interface {
 	Descriptor // Descriptor.FullName is identical to Package
 
@@ -180,8 +180,8 @@ type FileImport struct {
 // corresponds with the google.protobuf.DescriptorProto message.
 //
 // Nested declarations:
-// FieldDescriptor, OneofDescriptor, FieldDescriptor, EnumDescriptor,
-// and/or MessageDescriptor.
+// [FieldDescriptor], [OneofDescriptor], [FieldDescriptor], [EnumDescriptor],
+// and/or [MessageDescriptor].
 type MessageDescriptor interface {
 	Descriptor
 
@@ -214,7 +214,7 @@ type MessageDescriptor interface {
 	ExtensionRanges() FieldRanges
 	// ExtensionRangeOptions returns the ith extension range options.
 	//
-	// To avoid a dependency cycle, this method returns a proto.Message value,
+	// To avoid a dependency cycle, this method returns a proto.Message] value,
 	// which always contains a google.protobuf.ExtensionRangeOptions message.
 	// This method returns a typed nil-pointer if no options are present.
 	// The caller must import the descriptorpb package to use this.
@@ -231,9 +231,9 @@ type MessageDescriptor interface {
 }
 type isMessageDescriptor interface{ ProtoType(MessageDescriptor) }
 
-// MessageType encapsulates a MessageDescriptor with a concrete Go implementation.
+// MessageType encapsulates a [MessageDescriptor] with a concrete Go implementation.
 // It is recommended that implementations of this interface also implement the
-// MessageFieldTypes interface.
+// [MessageFieldTypes] interface.
 type MessageType interface {
 	// New returns a newly allocated empty message.
 	// It may return nil for synthetic messages representing a map entry.
@@ -249,19 +249,19 @@ type MessageType interface {
 	Descriptor() MessageDescriptor
 }
 
-// MessageFieldTypes extends a MessageType by providing type information
+// MessageFieldTypes extends a [MessageType] by providing type information
 // regarding enums and messages referenced by the message fields.
 type MessageFieldTypes interface {
 	MessageType
 
-	// Enum returns the EnumType for the ith field in Descriptor.Fields.
+	// Enum returns the EnumType for the ith field in MessageDescriptor.Fields.
 	// It returns nil if the ith field is not an enum kind.
 	// It panics if out of bounds.
 	//
 	// Invariant: mt.Enum(i).Descriptor() == mt.Descriptor().Fields(i).Enum()
 	Enum(i int) EnumType
 
-	// Message returns the MessageType for the ith field in Descriptor.Fields.
+	// Message returns the MessageType for the ith field in MessageDescriptor.Fields.
 	// It returns nil if the ith field is not a message or group kind.
 	// It panics if out of bounds.
 	//
@@ -286,8 +286,8 @@ type MessageDescriptors interface {
 // corresponds with the google.protobuf.FieldDescriptorProto message.
 //
 // It is used for both normal fields defined within the parent message
-// (e.g., MessageDescriptor.Fields) and fields that extend some remote message
-// (e.g., FileDescriptor.Extensions or MessageDescriptor.Extensions).
+// (e.g., [MessageDescriptor.Fields]) and fields that extend some remote message
+// (e.g., [FileDescriptor.Extensions] or [MessageDescriptor.Extensions]).
 type FieldDescriptor interface {
 	Descriptor
 
@@ -344,7 +344,7 @@ type FieldDescriptor interface {
 	// IsMap reports whether this field represents a map,
 	// where the value type for the associated field is a Map.
 	// It is equivalent to checking whether Cardinality is Repeated,
-	// that the Kind is MessageKind, and that Message.IsMapEntry reports true.
+	// that the Kind is MessageKind, and that MessageDescriptor.IsMapEntry reports true.
 	IsMap() bool
 
 	// MapKey returns the field descriptor for the key in the map entry.
@@ -419,7 +419,7 @@ type OneofDescriptor interface {
 
 	// IsSynthetic reports whether this is a synthetic oneof created to support
 	// proto3 optional semantics. If true, Fields contains exactly one field
-	// with HasOptionalKeyword specified.
+	// with FieldDescriptor.HasOptionalKeyword specified.
 	IsSynthetic() bool
 
 	// Fields is a list of fields belonging to this oneof.
@@ -442,10 +442,10 @@ type OneofDescriptors interface {
 	doNotImplement
 }
 
-// ExtensionDescriptor is an alias of FieldDescriptor for documentation.
+// ExtensionDescriptor is an alias of [FieldDescriptor] for documentation.
 type ExtensionDescriptor = FieldDescriptor
 
-// ExtensionTypeDescriptor is an ExtensionDescriptor with an associated ExtensionType.
+// ExtensionTypeDescriptor is an [ExtensionDescriptor] with an associated [ExtensionType].
 type ExtensionTypeDescriptor interface {
 	ExtensionDescriptor
 
@@ -470,12 +470,12 @@ type ExtensionDescriptors interface {
 	doNotImplement
 }
 
-// ExtensionType encapsulates an ExtensionDescriptor with a concrete
+// ExtensionType encapsulates an [ExtensionDescriptor] with a concrete
 // Go implementation. The nested field descriptor must be for a extension field.
 //
 // While a normal field is a member of the parent message that it is declared
-// within (see Descriptor.Parent), an extension field is a member of some other
-// target message (see ExtensionDescriptor.Extendee) and may have no
+// within (see [Descriptor.Parent]), an extension field is a member of some other
+// target message (see [FieldDescriptor.ContainingMessage]) and may have no
 // relationship with the parent. However, the full name of an extension field is
 // relative to the parent that it is declared within.
 //
@@ -532,7 +532,7 @@ type ExtensionType interface {
 // corresponds with the google.protobuf.EnumDescriptorProto message.
 //
 // Nested declarations:
-// EnumValueDescriptor.
+// [EnumValueDescriptor].
 type EnumDescriptor interface {
 	Descriptor
 
@@ -548,7 +548,7 @@ type EnumDescriptor interface {
 }
 type isEnumDescriptor interface{ ProtoType(EnumDescriptor) }
 
-// EnumType encapsulates an EnumDescriptor with a concrete Go implementation.
+// EnumType encapsulates an [EnumDescriptor] with a concrete Go implementation.
 type EnumType interface {
 	// New returns an instance of this enum type with its value set to n.
 	New(n EnumNumber) Enum
@@ -610,7 +610,7 @@ type EnumValueDescriptors interface {
 // ServiceDescriptor describes a service and
 // corresponds with the google.protobuf.ServiceDescriptorProto message.
 //
-// Nested declarations: MethodDescriptor.
+// Nested declarations: [MethodDescriptor].
 type ServiceDescriptor interface {
 	Descriptor
 
diff --git a/vendor/google.golang.org/protobuf/reflect/protoreflect/value.go b/vendor/google.golang.org/protobuf/reflect/protoreflect/value.go
index 37601b78199..a7b0d06ff32 100644
--- a/vendor/google.golang.org/protobuf/reflect/protoreflect/value.go
+++ b/vendor/google.golang.org/protobuf/reflect/protoreflect/value.go
@@ -27,16 +27,16 @@ type Enum interface {
 // Message is a reflective interface for a concrete message value,
 // encapsulating both type and value information for the message.
 //
-// Accessor/mutators for individual fields are keyed by FieldDescriptor.
+// Accessor/mutators for individual fields are keyed by [FieldDescriptor].
 // For non-extension fields, the descriptor must exactly match the
 // field known by the parent message.
-// For extension fields, the descriptor must implement ExtensionTypeDescriptor,
-// extend the parent message (i.e., have the same message FullName), and
+// For extension fields, the descriptor must implement [ExtensionTypeDescriptor],
+// extend the parent message (i.e., have the same message [FullName]), and
 // be within the parent's extension range.
 //
-// Each field Value can be a scalar or a composite type (Message, List, or Map).
-// See Value for the Go types associated with a FieldDescriptor.
-// Providing a Value that is invalid or of an incorrect type panics.
+// Each field [Value] can be a scalar or a composite type ([Message], [List], or [Map]).
+// See [Value] for the Go types associated with a [FieldDescriptor].
+// Providing a [Value] that is invalid or of an incorrect type panics.
 type Message interface {
 	// Descriptor returns message descriptor, which contains only the protobuf
 	// type information for the message.
@@ -152,7 +152,7 @@ type Message interface {
 	// This method may return nil.
 	//
 	// The returned methods type is identical to
-	// "google.golang.org/protobuf/runtime/protoiface".Methods.
+	// google.golang.org/protobuf/runtime/protoiface.Methods.
 	// Consult the protoiface package documentation for details.
 	ProtoMethods() *methods
 }
@@ -175,8 +175,8 @@ func (b RawFields) IsValid() bool {
 }
 
 // List is a zero-indexed, ordered list.
-// The element Value type is determined by FieldDescriptor.Kind.
-// Providing a Value that is invalid or of an incorrect type panics.
+// The element [Value] type is determined by [FieldDescriptor.Kind].
+// Providing a [Value] that is invalid or of an incorrect type panics.
 type List interface {
 	// Len reports the number of entries in the List.
 	// Get, Set, and Truncate panic with out of bound indexes.
@@ -226,9 +226,9 @@ type List interface {
 }
 
 // Map is an unordered, associative map.
-// The entry MapKey type is determined by FieldDescriptor.MapKey.Kind.
-// The entry Value type is determined by FieldDescriptor.MapValue.Kind.
-// Providing a MapKey or Value that is invalid or of an incorrect type panics.
+// The entry [MapKey] type is determined by [FieldDescriptor.MapKey].Kind.
+// The entry [Value] type is determined by [FieldDescriptor.MapValue].Kind.
+// Providing a [MapKey] or [Value] that is invalid or of an incorrect type panics.
 type Map interface {
 	// Len reports the number of elements in the map.
 	Len() int
diff --git a/vendor/google.golang.org/protobuf/reflect/protoreflect/value_equal.go b/vendor/google.golang.org/protobuf/reflect/protoreflect/value_equal.go
index 591652541f2..654599d4493 100644
--- a/vendor/google.golang.org/protobuf/reflect/protoreflect/value_equal.go
+++ b/vendor/google.golang.org/protobuf/reflect/protoreflect/value_equal.go
@@ -24,19 +24,19 @@ import (
 //     Unlike the == operator, a NaN is equal to another NaN.
 //
 //   - Enums are equal if they contain the same number.
-//     Since Value does not contain an enum descriptor,
+//     Since [Value] does not contain an enum descriptor,
 //     enum values do not consider the type of the enum.
 //
 //   - Other scalar values are equal if they contain the same value.
 //
-//   - Message values are equal if they belong to the same message descriptor,
+//   - [Message] values are equal if they belong to the same message descriptor,
 //     have the same set of populated known and extension field values,
 //     and the same set of unknown fields values.
 //
-//   - Lists are equal if they are the same length and
+//   - [List] values are equal if they are the same length and
 //     each corresponding element is equal.
 //
-//   - Maps are equal if they have the same set of keys and
+//   - [Map] values are equal if they have the same set of keys and
 //     the corresponding value for each key is equal.
 func (v1 Value) Equal(v2 Value) bool {
 	return equalValue(v1, v2)
diff --git a/vendor/google.golang.org/protobuf/reflect/protoreflect/value_union.go b/vendor/google.golang.org/protobuf/reflect/protoreflect/value_union.go
index 08e5ef73fc0..1603097311e 100644
--- a/vendor/google.golang.org/protobuf/reflect/protoreflect/value_union.go
+++ b/vendor/google.golang.org/protobuf/reflect/protoreflect/value_union.go
@@ -11,7 +11,7 @@ import (
 
 // Value is a union where only one Go type may be set at a time.
 // The Value is used to represent all possible values a field may take.
-// The following shows which Go type is used to represent each proto Kind:
+// The following shows which Go type is used to represent each proto [Kind]:
 //
 //	╔════════════╤═════════════════════════════════════╗
 //	║ Go type    │ Protobuf kind                       ║
@@ -31,22 +31,22 @@ import (
 //
 // Multiple protobuf Kinds may be represented by a single Go type if the type
 // can losslessly represent the information for the proto kind. For example,
-// Int64Kind, Sint64Kind, and Sfixed64Kind are all represented by int64,
+// [Int64Kind], [Sint64Kind], and [Sfixed64Kind] are all represented by int64,
 // but use different integer encoding methods.
 //
-// The List or Map types are used if the field cardinality is repeated.
-// A field is a List if FieldDescriptor.IsList reports true.
-// A field is a Map if FieldDescriptor.IsMap reports true.
+// The [List] or [Map] types are used if the field cardinality is repeated.
+// A field is a [List] if [FieldDescriptor.IsList] reports true.
+// A field is a [Map] if [FieldDescriptor.IsMap] reports true.
 //
 // Converting to/from a Value and a concrete Go value panics on type mismatch.
-// For example, ValueOf("hello").Int() panics because this attempts to
+// For example, [ValueOf]("hello").Int() panics because this attempts to
 // retrieve an int64 from a string.
 //
-// List, Map, and Message Values are called "composite" values.
+// [List], [Map], and [Message] Values are called "composite" values.
 //
 // A composite Value may alias (reference) memory at some location,
 // such that changes to the Value updates the that location.
-// A composite value acquired with a Mutable method, such as Message.Mutable,
+// A composite value acquired with a Mutable method, such as [Message.Mutable],
 // always references the source object.
 //
 // For example:
@@ -65,7 +65,7 @@ import (
 //	// appending to the List here may or may not modify the message.
 //	list.Append(protoreflect.ValueOfInt32(0))
 //
-// Some operations, such as Message.Get, may return an "empty, read-only"
+// Some operations, such as [Message.Get], may return an "empty, read-only"
 // composite Value. Modifying an empty, read-only value panics.
 type Value value
 
@@ -306,7 +306,7 @@ func (v Value) Float() float64 {
 	}
 }
 
-// String returns v as a string. Since this method implements fmt.Stringer,
+// String returns v as a string. Since this method implements [fmt.Stringer],
 // this returns the formatted string value for any non-string type.
 func (v Value) String() string {
 	switch v.typ {
@@ -327,7 +327,7 @@ func (v Value) Bytes() []byte {
 	}
 }
 
-// Enum returns v as a EnumNumber and panics if the type is not a EnumNumber.
+// Enum returns v as a [EnumNumber] and panics if the type is not a [EnumNumber].
 func (v Value) Enum() EnumNumber {
 	switch v.typ {
 	case enumType:
@@ -337,7 +337,7 @@ func (v Value) Enum() EnumNumber {
 	}
 }
 
-// Message returns v as a Message and panics if the type is not a Message.
+// Message returns v as a [Message] and panics if the type is not a [Message].
 func (v Value) Message() Message {
 	switch vi := v.getIface().(type) {
 	case Message:
@@ -347,7 +347,7 @@ func (v Value) Message() Message {
 	}
 }
 
-// List returns v as a List and panics if the type is not a List.
+// List returns v as a [List] and panics if the type is not a [List].
 func (v Value) List() List {
 	switch vi := v.getIface().(type) {
 	case List:
@@ -357,7 +357,7 @@ func (v Value) List() List {
 	}
 }
 
-// Map returns v as a Map and panics if the type is not a Map.
+// Map returns v as a [Map] and panics if the type is not a [Map].
 func (v Value) Map() Map {
 	switch vi := v.getIface().(type) {
 	case Map:
@@ -367,7 +367,7 @@ func (v Value) Map() Map {
 	}
 }
 
-// MapKey returns v as a MapKey and panics for invalid MapKey types.
+// MapKey returns v as a [MapKey] and panics for invalid [MapKey] types.
 func (v Value) MapKey() MapKey {
 	switch v.typ {
 	case boolType, int32Type, int64Type, uint32Type, uint64Type, stringType:
@@ -378,8 +378,8 @@ func (v Value) MapKey() MapKey {
 }
 
 // MapKey is used to index maps, where the Go type of the MapKey must match
-// the specified key Kind (see MessageDescriptor.IsMapEntry).
-// The following shows what Go type is used to represent each proto Kind:
+// the specified key [Kind] (see [MessageDescriptor.IsMapEntry]).
+// The following shows what Go type is used to represent each proto [Kind]:
 //
 //	╔═════════╤═════════════════════════════════════╗
 //	║ Go type │ Protobuf kind                       ║
@@ -392,13 +392,13 @@ func (v Value) MapKey() MapKey {
 //	║ string  │ StringKind                          ║
 //	╚═════════╧═════════════════════════════════════╝
 //
-// A MapKey is constructed and accessed through a Value:
+// A MapKey is constructed and accessed through a [Value]:
 //
 //	k := ValueOf("hash").MapKey() // convert string to MapKey
 //	s := k.String()               // convert MapKey to string
 //
-// The MapKey is a strict subset of valid types used in Value;
-// converting a Value to a MapKey with an invalid type panics.
+// The MapKey is a strict subset of valid types used in [Value];
+// converting a [Value] to a MapKey with an invalid type panics.
 type MapKey value
 
 // IsValid reports whether k is populated with a value.
@@ -426,13 +426,13 @@ func (k MapKey) Uint() uint64 {
 	return Value(k).Uint()
 }
 
-// String returns k as a string. Since this method implements fmt.Stringer,
+// String returns k as a string. Since this method implements [fmt.Stringer],
 // this returns the formatted string value for any non-string type.
 func (k MapKey) String() string {
 	return Value(k).String()
 }
 
-// Value returns k as a Value.
+// Value returns k as a [Value].
 func (k MapKey) Value() Value {
 	return Value(k)
 }
diff --git a/vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe.go b/vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe_go120.go
similarity index 97%
rename from vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe.go
rename to vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe_go120.go
index 702ddf22a27..b1fdbe3e8e1 100644
--- a/vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe.go
+++ b/vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe_go120.go
@@ -2,8 +2,8 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
-//go:build !purego && !appengine
-// +build !purego,!appengine
+//go:build !purego && !appengine && !go1.21
+// +build !purego,!appengine,!go1.21
 
 package protoreflect
 
diff --git a/vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe_go121.go b/vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe_go121.go
new file mode 100644
index 00000000000..43547011173
--- /dev/null
+++ b/vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe_go121.go
@@ -0,0 +1,87 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+//go:build !purego && !appengine && go1.21
+// +build !purego,!appengine,go1.21
+
+package protoreflect
+
+import (
+	"unsafe"
+
+	"google.golang.org/protobuf/internal/pragma"
+)
+
+type (
+	ifaceHeader struct {
+		_    [0]interface{} // if interfaces have greater alignment than unsafe.Pointer, this will enforce it.
+		Type unsafe.Pointer
+		Data unsafe.Pointer
+	}
+)
+
+var (
+	nilType     = typeOf(nil)
+	boolType    = typeOf(*new(bool))
+	int32Type   = typeOf(*new(int32))
+	int64Type   = typeOf(*new(int64))
+	uint32Type  = typeOf(*new(uint32))
+	uint64Type  = typeOf(*new(uint64))
+	float32Type = typeOf(*new(float32))
+	float64Type = typeOf(*new(float64))
+	stringType  = typeOf(*new(string))
+	bytesType   = typeOf(*new([]byte))
+	enumType    = typeOf(*new(EnumNumber))
+)
+
+// typeOf returns a pointer to the Go type information.
+// The pointer is comparable and equal if and only if the types are identical.
+func typeOf(t interface{}) unsafe.Pointer {
+	return (*ifaceHeader)(unsafe.Pointer(&t)).Type
+}
+
+// value is a union where only one type can be represented at a time.
+// The struct is 24B large on 64-bit systems and requires the minimum storage
+// necessary to represent each possible type.
+//
+// The Go GC needs to be able to scan variables containing pointers.
+// As such, pointers and non-pointers cannot be intermixed.
+type value struct {
+	pragma.DoNotCompare // 0B
+
+	// typ stores the type of the value as a pointer to the Go type.
+	typ unsafe.Pointer // 8B
+
+	// ptr stores the data pointer for a String, Bytes, or interface value.
+	ptr unsafe.Pointer // 8B
+
+	// num stores a Bool, Int32, Int64, Uint32, Uint64, Float32, Float64, or
+	// Enum value as a raw uint64.
+	//
+	// It is also used to store the length of a String or Bytes value;
+	// the capacity is ignored.
+	num uint64 // 8B
+}
+
+func valueOfString(v string) Value {
+	return Value{typ: stringType, ptr: unsafe.Pointer(unsafe.StringData(v)), num: uint64(len(v))}
+}
+func valueOfBytes(v []byte) Value {
+	return Value{typ: bytesType, ptr: unsafe.Pointer(unsafe.SliceData(v)), num: uint64(len(v))}
+}
+func valueOfIface(v interface{}) Value {
+	p := (*ifaceHeader)(unsafe.Pointer(&v))
+	return Value{typ: p.Type, ptr: p.Data}
+}
+
+func (v Value) getString() string {
+	return unsafe.String((*byte)(v.ptr), v.num)
+}
+func (v Value) getBytes() []byte {
+	return unsafe.Slice((*byte)(v.ptr), v.num)
+}
+func (v Value) getIface() (x interface{}) {
+	*(*ifaceHeader)(unsafe.Pointer(&x)) = ifaceHeader{Type: v.typ, Data: v.ptr}
+	return x
+}
diff --git a/vendor/google.golang.org/protobuf/reflect/protoregistry/registry.go b/vendor/google.golang.org/protobuf/reflect/protoregistry/registry.go
index aeb55977446..6267dc52a67 100644
--- a/vendor/google.golang.org/protobuf/reflect/protoregistry/registry.go
+++ b/vendor/google.golang.org/protobuf/reflect/protoregistry/registry.go
@@ -5,12 +5,12 @@
 // Package protoregistry provides data structures to register and lookup
 // protobuf descriptor types.
 //
-// The Files registry contains file descriptors and provides the ability
+// The [Files] registry contains file descriptors and provides the ability
 // to iterate over the files or lookup a specific descriptor within the files.
-// Files only contains protobuf descriptors and has no understanding of Go
+// [Files] only contains protobuf descriptors and has no understanding of Go
 // type information that may be associated with each descriptor.
 //
-// The Types registry contains descriptor types for which there is a known
+// The [Types] registry contains descriptor types for which there is a known
 // Go type associated with that descriptor. It provides the ability to iterate
 // over the registered types or lookup a type by name.
 package protoregistry
@@ -218,7 +218,7 @@ func (r *Files) checkGenProtoConflict(path string) {
 
 // FindDescriptorByName looks up a descriptor by the full name.
 //
-// This returns (nil, NotFound) if not found.
+// This returns (nil, [NotFound]) if not found.
 func (r *Files) FindDescriptorByName(name protoreflect.FullName) (protoreflect.Descriptor, error) {
 	if r == nil {
 		return nil, NotFound
@@ -310,7 +310,7 @@ func (s *nameSuffix) Pop() (name protoreflect.Name) {
 
 // FindFileByPath looks up a file by the path.
 //
-// This returns (nil, NotFound) if not found.
+// This returns (nil, [NotFound]) if not found.
 // This returns an error if multiple files have the same path.
 func (r *Files) FindFileByPath(path string) (protoreflect.FileDescriptor, error) {
 	if r == nil {
@@ -431,7 +431,7 @@ func rangeTopLevelDescriptors(fd protoreflect.FileDescriptor, f func(protoreflec
 // A compliant implementation must deterministically return the same type
 // if no error is encountered.
 //
-// The Types type implements this interface.
+// The [Types] type implements this interface.
 type MessageTypeResolver interface {
 	// FindMessageByName looks up a message by its full name.
 	// E.g., "google.protobuf.Any"
@@ -451,7 +451,7 @@ type MessageTypeResolver interface {
 // A compliant implementation must deterministically return the same type
 // if no error is encountered.
 //
-// The Types type implements this interface.
+// The [Types] type implements this interface.
 type ExtensionTypeResolver interface {
 	// FindExtensionByName looks up a extension field by the field's full name.
 	// Note that this is the full name of the field as determined by
@@ -590,7 +590,7 @@ func (r *Types) register(kind string, desc protoreflect.Descriptor, typ interfac
 // FindEnumByName looks up an enum by its full name.
 // E.g., "google.protobuf.Field.Kind".
 //
-// This returns (nil, NotFound) if not found.
+// This returns (nil, [NotFound]) if not found.
 func (r *Types) FindEnumByName(enum protoreflect.FullName) (protoreflect.EnumType, error) {
 	if r == nil {
 		return nil, NotFound
@@ -611,7 +611,7 @@ func (r *Types) FindEnumByName(enum protoreflect.FullName) (protoreflect.EnumTyp
 // FindMessageByName looks up a message by its full name,
 // e.g. "google.protobuf.Any".
 //
-// This returns (nil, NotFound) if not found.
+// This returns (nil, [NotFound]) if not found.
 func (r *Types) FindMessageByName(message protoreflect.FullName) (protoreflect.MessageType, error) {
 	if r == nil {
 		return nil, NotFound
@@ -632,7 +632,7 @@ func (r *Types) FindMessageByName(message protoreflect.FullName) (protoreflect.M
 // FindMessageByURL looks up a message by a URL identifier.
 // See documentation on google.protobuf.Any.type_url for the URL format.
 //
-// This returns (nil, NotFound) if not found.
+// This returns (nil, [NotFound]) if not found.
 func (r *Types) FindMessageByURL(url string) (protoreflect.MessageType, error) {
 	// This function is similar to FindMessageByName but
 	// truncates anything before and including '/' in the URL.
@@ -662,7 +662,7 @@ func (r *Types) FindMessageByURL(url string) (protoreflect.MessageType, error) {
 // where the extension is declared and is unrelated to the full name of the
 // message being extended.
 //
-// This returns (nil, NotFound) if not found.
+// This returns (nil, [NotFound]) if not found.
 func (r *Types) FindExtensionByName(field protoreflect.FullName) (protoreflect.ExtensionType, error) {
 	if r == nil {
 		return nil, NotFound
@@ -703,7 +703,7 @@ func (r *Types) FindExtensionByName(field protoreflect.FullName) (protoreflect.E
 // FindExtensionByNumber looks up a extension field by the field number
 // within some parent message, identified by full name.
 //
-// This returns (nil, NotFound) if not found.
+// This returns (nil, [NotFound]) if not found.
 func (r *Types) FindExtensionByNumber(message protoreflect.FullName, field protoreflect.FieldNumber) (protoreflect.ExtensionType, error) {
 	if r == nil {
 		return nil, NotFound
diff --git a/vendor/google.golang.org/protobuf/types/descriptorpb/descriptor.pb.go b/vendor/google.golang.org/protobuf/types/descriptorpb/descriptor.pb.go
index 04c00f737c1..38daa858d07 100644
--- a/vendor/google.golang.org/protobuf/types/descriptorpb/descriptor.pb.go
+++ b/vendor/google.golang.org/protobuf/types/descriptorpb/descriptor.pb.go
@@ -48,6 +48,94 @@ import (
 	sync "sync"
 )
 
+// The full set of known editions.
+type Edition int32
+
+const (
+	// A placeholder for an unknown edition value.
+	Edition_EDITION_UNKNOWN Edition = 0
+	// Legacy syntax "editions".  These pre-date editions, but behave much like
+	// distinct editions.  These can't be used to specify the edition of proto
+	// files, but feature definitions must supply proto2/proto3 defaults for
+	// backwards compatibility.
+	Edition_EDITION_PROTO2 Edition = 998
+	Edition_EDITION_PROTO3 Edition = 999
+	// Editions that have been released.  The specific values are arbitrary and
+	// should not be depended on, but they will always be time-ordered for easy
+	// comparison.
+	Edition_EDITION_2023 Edition = 1000
+	// Placeholder editions for testing feature resolution.  These should not be
+	// used or relyed on outside of tests.
+	Edition_EDITION_1_TEST_ONLY     Edition = 1
+	Edition_EDITION_2_TEST_ONLY     Edition = 2
+	Edition_EDITION_99997_TEST_ONLY Edition = 99997
+	Edition_EDITION_99998_TEST_ONLY Edition = 99998
+	Edition_EDITION_99999_TEST_ONLY Edition = 99999
+)
+
+// Enum value maps for Edition.
+var (
+	Edition_name = map[int32]string{
+		0:     "EDITION_UNKNOWN",
+		998:   "EDITION_PROTO2",
+		999:   "EDITION_PROTO3",
+		1000:  "EDITION_2023",
+		1:     "EDITION_1_TEST_ONLY",
+		2:     "EDITION_2_TEST_ONLY",
+		99997: "EDITION_99997_TEST_ONLY",
+		99998: "EDITION_99998_TEST_ONLY",
+		99999: "EDITION_99999_TEST_ONLY",
+	}
+	Edition_value = map[string]int32{
+		"EDITION_UNKNOWN":         0,
+		"EDITION_PROTO2":          998,
+		"EDITION_PROTO3":          999,
+		"EDITION_2023":            1000,
+		"EDITION_1_TEST_ONLY":     1,
+		"EDITION_2_TEST_ONLY":     2,
+		"EDITION_99997_TEST_ONLY": 99997,
+		"EDITION_99998_TEST_ONLY": 99998,
+		"EDITION_99999_TEST_ONLY": 99999,
+	}
+)
+
+func (x Edition) Enum() *Edition {
+	p := new(Edition)
+	*p = x
+	return p
+}
+
+func (x Edition) String() string {
+	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
+}
+
+func (Edition) Descriptor() protoreflect.EnumDescriptor {
+	return file_google_protobuf_descriptor_proto_enumTypes[0].Descriptor()
+}
+
+func (Edition) Type() protoreflect.EnumType {
+	return &file_google_protobuf_descriptor_proto_enumTypes[0]
+}
+
+func (x Edition) Number() protoreflect.EnumNumber {
+	return protoreflect.EnumNumber(x)
+}
+
+// Deprecated: Do not use.
+func (x *Edition) UnmarshalJSON(b []byte) error {
+	num, err := protoimpl.X.UnmarshalJSONEnum(x.Descriptor(), b)
+	if err != nil {
+		return err
+	}
+	*x = Edition(num)
+	return nil
+}
+
+// Deprecated: Use Edition.Descriptor instead.
+func (Edition) EnumDescriptor() ([]byte, []int) {
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{0}
+}
+
 // The verification state of the extension range.
 type ExtensionRangeOptions_VerificationState int32
 
@@ -80,11 +168,11 @@ func (x ExtensionRangeOptions_VerificationState) String() string {
 }
 
 func (ExtensionRangeOptions_VerificationState) Descriptor() protoreflect.EnumDescriptor {
-	return file_google_protobuf_descriptor_proto_enumTypes[0].Descriptor()
+	return file_google_protobuf_descriptor_proto_enumTypes[1].Descriptor()
 }
 
 func (ExtensionRangeOptions_VerificationState) Type() protoreflect.EnumType {
-	return &file_google_protobuf_descriptor_proto_enumTypes[0]
+	return &file_google_protobuf_descriptor_proto_enumTypes[1]
 }
 
 func (x ExtensionRangeOptions_VerificationState) Number() protoreflect.EnumNumber {
@@ -125,9 +213,10 @@ const (
 	FieldDescriptorProto_TYPE_BOOL    FieldDescriptorProto_Type = 8
 	FieldDescriptorProto_TYPE_STRING  FieldDescriptorProto_Type = 9
 	// Tag-delimited aggregate.
-	// Group type is deprecated and not supported in proto3. However, Proto3
+	// Group type is deprecated and not supported after google.protobuf. However, Proto3
 	// implementations should still be able to parse the group wire format and
-	// treat group fields as unknown fields.
+	// treat group fields as unknown fields.  In Editions, the group wire format
+	// can be enabled via the `message_encoding` feature.
 	FieldDescriptorProto_TYPE_GROUP   FieldDescriptorProto_Type = 10
 	FieldDescriptorProto_TYPE_MESSAGE FieldDescriptorProto_Type = 11 // Length-delimited aggregate.
 	// New in version 2.
@@ -195,11 +284,11 @@ func (x FieldDescriptorProto_Type) String() string {
 }
 
 func (FieldDescriptorProto_Type) Descriptor() protoreflect.EnumDescriptor {
-	return file_google_protobuf_descriptor_proto_enumTypes[1].Descriptor()
+	return file_google_protobuf_descriptor_proto_enumTypes[2].Descriptor()
 }
 
 func (FieldDescriptorProto_Type) Type() protoreflect.EnumType {
-	return &file_google_protobuf_descriptor_proto_enumTypes[1]
+	return &file_google_protobuf_descriptor_proto_enumTypes[2]
 }
 
 func (x FieldDescriptorProto_Type) Number() protoreflect.EnumNumber {
@@ -226,21 +315,24 @@ type FieldDescriptorProto_Label int32
 const (
 	// 0 is reserved for errors
 	FieldDescriptorProto_LABEL_OPTIONAL FieldDescriptorProto_Label = 1
-	FieldDescriptorProto_LABEL_REQUIRED FieldDescriptorProto_Label = 2
 	FieldDescriptorProto_LABEL_REPEATED FieldDescriptorProto_Label = 3
+	// The required label is only allowed in google.protobuf.  In proto3 and Editions
+	// it's explicitly prohibited.  In Editions, the `field_presence` feature
+	// can be used to get this behavior.
+	FieldDescriptorProto_LABEL_REQUIRED FieldDescriptorProto_Label = 2
 )
 
 // Enum value maps for FieldDescriptorProto_Label.
 var (
 	FieldDescriptorProto_Label_name = map[int32]string{
 		1: "LABEL_OPTIONAL",
-		2: "LABEL_REQUIRED",
 		3: "LABEL_REPEATED",
+		2: "LABEL_REQUIRED",
 	}
 	FieldDescriptorProto_Label_value = map[string]int32{
 		"LABEL_OPTIONAL": 1,
-		"LABEL_REQUIRED": 2,
 		"LABEL_REPEATED": 3,
+		"LABEL_REQUIRED": 2,
 	}
 )
 
@@ -255,11 +347,11 @@ func (x FieldDescriptorProto_Label) String() string {
 }
 
 func (FieldDescriptorProto_Label) Descriptor() protoreflect.EnumDescriptor {
-	return file_google_protobuf_descriptor_proto_enumTypes[2].Descriptor()
+	return file_google_protobuf_descriptor_proto_enumTypes[3].Descriptor()
 }
 
 func (FieldDescriptorProto_Label) Type() protoreflect.EnumType {
-	return &file_google_protobuf_descriptor_proto_enumTypes[2]
+	return &file_google_protobuf_descriptor_proto_enumTypes[3]
 }
 
 func (x FieldDescriptorProto_Label) Number() protoreflect.EnumNumber {
@@ -316,11 +408,11 @@ func (x FileOptions_OptimizeMode) String() string {
 }
 
 func (FileOptions_OptimizeMode) Descriptor() protoreflect.EnumDescriptor {
-	return file_google_protobuf_descriptor_proto_enumTypes[3].Descriptor()
+	return file_google_protobuf_descriptor_proto_enumTypes[4].Descriptor()
 }
 
 func (FileOptions_OptimizeMode) Type() protoreflect.EnumType {
-	return &file_google_protobuf_descriptor_proto_enumTypes[3]
+	return &file_google_protobuf_descriptor_proto_enumTypes[4]
 }
 
 func (x FileOptions_OptimizeMode) Number() protoreflect.EnumNumber {
@@ -382,11 +474,11 @@ func (x FieldOptions_CType) String() string {
 }
 
 func (FieldOptions_CType) Descriptor() protoreflect.EnumDescriptor {
-	return file_google_protobuf_descriptor_proto_enumTypes[4].Descriptor()
+	return file_google_protobuf_descriptor_proto_enumTypes[5].Descriptor()
 }
 
 func (FieldOptions_CType) Type() protoreflect.EnumType {
-	return &file_google_protobuf_descriptor_proto_enumTypes[4]
+	return &file_google_protobuf_descriptor_proto_enumTypes[5]
 }
 
 func (x FieldOptions_CType) Number() protoreflect.EnumNumber {
@@ -444,11 +536,11 @@ func (x FieldOptions_JSType) String() string {
 }
 
 func (FieldOptions_JSType) Descriptor() protoreflect.EnumDescriptor {
-	return file_google_protobuf_descriptor_proto_enumTypes[5].Descriptor()
+	return file_google_protobuf_descriptor_proto_enumTypes[6].Descriptor()
 }
 
 func (FieldOptions_JSType) Type() protoreflect.EnumType {
-	return &file_google_protobuf_descriptor_proto_enumTypes[5]
+	return &file_google_protobuf_descriptor_proto_enumTypes[6]
 }
 
 func (x FieldOptions_JSType) Number() protoreflect.EnumNumber {
@@ -506,11 +598,11 @@ func (x FieldOptions_OptionRetention) String() string {
 }
 
 func (FieldOptions_OptionRetention) Descriptor() protoreflect.EnumDescriptor {
-	return file_google_protobuf_descriptor_proto_enumTypes[6].Descriptor()
+	return file_google_protobuf_descriptor_proto_enumTypes[7].Descriptor()
 }
 
 func (FieldOptions_OptionRetention) Type() protoreflect.EnumType {
-	return &file_google_protobuf_descriptor_proto_enumTypes[6]
+	return &file_google_protobuf_descriptor_proto_enumTypes[7]
 }
 
 func (x FieldOptions_OptionRetention) Number() protoreflect.EnumNumber {
@@ -590,11 +682,11 @@ func (x FieldOptions_OptionTargetType) String() string {
 }
 
 func (FieldOptions_OptionTargetType) Descriptor() protoreflect.EnumDescriptor {
-	return file_google_protobuf_descriptor_proto_enumTypes[7].Descriptor()
+	return file_google_protobuf_descriptor_proto_enumTypes[8].Descriptor()
 }
 
 func (FieldOptions_OptionTargetType) Type() protoreflect.EnumType {
-	return &file_google_protobuf_descriptor_proto_enumTypes[7]
+	return &file_google_protobuf_descriptor_proto_enumTypes[8]
 }
 
 func (x FieldOptions_OptionTargetType) Number() protoreflect.EnumNumber {
@@ -652,11 +744,11 @@ func (x MethodOptions_IdempotencyLevel) String() string {
 }
 
 func (MethodOptions_IdempotencyLevel) Descriptor() protoreflect.EnumDescriptor {
-	return file_google_protobuf_descriptor_proto_enumTypes[8].Descriptor()
+	return file_google_protobuf_descriptor_proto_enumTypes[9].Descriptor()
 }
 
 func (MethodOptions_IdempotencyLevel) Type() protoreflect.EnumType {
-	return &file_google_protobuf_descriptor_proto_enumTypes[8]
+	return &file_google_protobuf_descriptor_proto_enumTypes[9]
 }
 
 func (x MethodOptions_IdempotencyLevel) Number() protoreflect.EnumNumber {
@@ -678,6 +770,363 @@ func (MethodOptions_IdempotencyLevel) EnumDescriptor() ([]byte, []int) {
 	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{17, 0}
 }
 
+type FeatureSet_FieldPresence int32
+
+const (
+	FeatureSet_FIELD_PRESENCE_UNKNOWN FeatureSet_FieldPresence = 0
+	FeatureSet_EXPLICIT               FeatureSet_FieldPresence = 1
+	FeatureSet_IMPLICIT               FeatureSet_FieldPresence = 2
+	FeatureSet_LEGACY_REQUIRED        FeatureSet_FieldPresence = 3
+)
+
+// Enum value maps for FeatureSet_FieldPresence.
+var (
+	FeatureSet_FieldPresence_name = map[int32]string{
+		0: "FIELD_PRESENCE_UNKNOWN",
+		1: "EXPLICIT",
+		2: "IMPLICIT",
+		3: "LEGACY_REQUIRED",
+	}
+	FeatureSet_FieldPresence_value = map[string]int32{
+		"FIELD_PRESENCE_UNKNOWN": 0,
+		"EXPLICIT":               1,
+		"IMPLICIT":               2,
+		"LEGACY_REQUIRED":        3,
+	}
+)
+
+func (x FeatureSet_FieldPresence) Enum() *FeatureSet_FieldPresence {
+	p := new(FeatureSet_FieldPresence)
+	*p = x
+	return p
+}
+
+func (x FeatureSet_FieldPresence) String() string {
+	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
+}
+
+func (FeatureSet_FieldPresence) Descriptor() protoreflect.EnumDescriptor {
+	return file_google_protobuf_descriptor_proto_enumTypes[10].Descriptor()
+}
+
+func (FeatureSet_FieldPresence) Type() protoreflect.EnumType {
+	return &file_google_protobuf_descriptor_proto_enumTypes[10]
+}
+
+func (x FeatureSet_FieldPresence) Number() protoreflect.EnumNumber {
+	return protoreflect.EnumNumber(x)
+}
+
+// Deprecated: Do not use.
+func (x *FeatureSet_FieldPresence) UnmarshalJSON(b []byte) error {
+	num, err := protoimpl.X.UnmarshalJSONEnum(x.Descriptor(), b)
+	if err != nil {
+		return err
+	}
+	*x = FeatureSet_FieldPresence(num)
+	return nil
+}
+
+// Deprecated: Use FeatureSet_FieldPresence.Descriptor instead.
+func (FeatureSet_FieldPresence) EnumDescriptor() ([]byte, []int) {
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{19, 0}
+}
+
+type FeatureSet_EnumType int32
+
+const (
+	FeatureSet_ENUM_TYPE_UNKNOWN FeatureSet_EnumType = 0
+	FeatureSet_OPEN              FeatureSet_EnumType = 1
+	FeatureSet_CLOSED            FeatureSet_EnumType = 2
+)
+
+// Enum value maps for FeatureSet_EnumType.
+var (
+	FeatureSet_EnumType_name = map[int32]string{
+		0: "ENUM_TYPE_UNKNOWN",
+		1: "OPEN",
+		2: "CLOSED",
+	}
+	FeatureSet_EnumType_value = map[string]int32{
+		"ENUM_TYPE_UNKNOWN": 0,
+		"OPEN":              1,
+		"CLOSED":            2,
+	}
+)
+
+func (x FeatureSet_EnumType) Enum() *FeatureSet_EnumType {
+	p := new(FeatureSet_EnumType)
+	*p = x
+	return p
+}
+
+func (x FeatureSet_EnumType) String() string {
+	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
+}
+
+func (FeatureSet_EnumType) Descriptor() protoreflect.EnumDescriptor {
+	return file_google_protobuf_descriptor_proto_enumTypes[11].Descriptor()
+}
+
+func (FeatureSet_EnumType) Type() protoreflect.EnumType {
+	return &file_google_protobuf_descriptor_proto_enumTypes[11]
+}
+
+func (x FeatureSet_EnumType) Number() protoreflect.EnumNumber {
+	return protoreflect.EnumNumber(x)
+}
+
+// Deprecated: Do not use.
+func (x *FeatureSet_EnumType) UnmarshalJSON(b []byte) error {
+	num, err := protoimpl.X.UnmarshalJSONEnum(x.Descriptor(), b)
+	if err != nil {
+		return err
+	}
+	*x = FeatureSet_EnumType(num)
+	return nil
+}
+
+// Deprecated: Use FeatureSet_EnumType.Descriptor instead.
+func (FeatureSet_EnumType) EnumDescriptor() ([]byte, []int) {
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{19, 1}
+}
+
+type FeatureSet_RepeatedFieldEncoding int32
+
+const (
+	FeatureSet_REPEATED_FIELD_ENCODING_UNKNOWN FeatureSet_RepeatedFieldEncoding = 0
+	FeatureSet_PACKED                          FeatureSet_RepeatedFieldEncoding = 1
+	FeatureSet_EXPANDED                        FeatureSet_RepeatedFieldEncoding = 2
+)
+
+// Enum value maps for FeatureSet_RepeatedFieldEncoding.
+var (
+	FeatureSet_RepeatedFieldEncoding_name = map[int32]string{
+		0: "REPEATED_FIELD_ENCODING_UNKNOWN",
+		1: "PACKED",
+		2: "EXPANDED",
+	}
+	FeatureSet_RepeatedFieldEncoding_value = map[string]int32{
+		"REPEATED_FIELD_ENCODING_UNKNOWN": 0,
+		"PACKED":                          1,
+		"EXPANDED":                        2,
+	}
+)
+
+func (x FeatureSet_RepeatedFieldEncoding) Enum() *FeatureSet_RepeatedFieldEncoding {
+	p := new(FeatureSet_RepeatedFieldEncoding)
+	*p = x
+	return p
+}
+
+func (x FeatureSet_RepeatedFieldEncoding) String() string {
+	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
+}
+
+func (FeatureSet_RepeatedFieldEncoding) Descriptor() protoreflect.EnumDescriptor {
+	return file_google_protobuf_descriptor_proto_enumTypes[12].Descriptor()
+}
+
+func (FeatureSet_RepeatedFieldEncoding) Type() protoreflect.EnumType {
+	return &file_google_protobuf_descriptor_proto_enumTypes[12]
+}
+
+func (x FeatureSet_RepeatedFieldEncoding) Number() protoreflect.EnumNumber {
+	return protoreflect.EnumNumber(x)
+}
+
+// Deprecated: Do not use.
+func (x *FeatureSet_RepeatedFieldEncoding) UnmarshalJSON(b []byte) error {
+	num, err := protoimpl.X.UnmarshalJSONEnum(x.Descriptor(), b)
+	if err != nil {
+		return err
+	}
+	*x = FeatureSet_RepeatedFieldEncoding(num)
+	return nil
+}
+
+// Deprecated: Use FeatureSet_RepeatedFieldEncoding.Descriptor instead.
+func (FeatureSet_RepeatedFieldEncoding) EnumDescriptor() ([]byte, []int) {
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{19, 2}
+}
+
+type FeatureSet_Utf8Validation int32
+
+const (
+	FeatureSet_UTF8_VALIDATION_UNKNOWN FeatureSet_Utf8Validation = 0
+	FeatureSet_NONE                    FeatureSet_Utf8Validation = 1
+	FeatureSet_VERIFY                  FeatureSet_Utf8Validation = 2
+)
+
+// Enum value maps for FeatureSet_Utf8Validation.
+var (
+	FeatureSet_Utf8Validation_name = map[int32]string{
+		0: "UTF8_VALIDATION_UNKNOWN",
+		1: "NONE",
+		2: "VERIFY",
+	}
+	FeatureSet_Utf8Validation_value = map[string]int32{
+		"UTF8_VALIDATION_UNKNOWN": 0,
+		"NONE":                    1,
+		"VERIFY":                  2,
+	}
+)
+
+func (x FeatureSet_Utf8Validation) Enum() *FeatureSet_Utf8Validation {
+	p := new(FeatureSet_Utf8Validation)
+	*p = x
+	return p
+}
+
+func (x FeatureSet_Utf8Validation) String() string {
+	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
+}
+
+func (FeatureSet_Utf8Validation) Descriptor() protoreflect.EnumDescriptor {
+	return file_google_protobuf_descriptor_proto_enumTypes[13].Descriptor()
+}
+
+func (FeatureSet_Utf8Validation) Type() protoreflect.EnumType {
+	return &file_google_protobuf_descriptor_proto_enumTypes[13]
+}
+
+func (x FeatureSet_Utf8Validation) Number() protoreflect.EnumNumber {
+	return protoreflect.EnumNumber(x)
+}
+
+// Deprecated: Do not use.
+func (x *FeatureSet_Utf8Validation) UnmarshalJSON(b []byte) error {
+	num, err := protoimpl.X.UnmarshalJSONEnum(x.Descriptor(), b)
+	if err != nil {
+		return err
+	}
+	*x = FeatureSet_Utf8Validation(num)
+	return nil
+}
+
+// Deprecated: Use FeatureSet_Utf8Validation.Descriptor instead.
+func (FeatureSet_Utf8Validation) EnumDescriptor() ([]byte, []int) {
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{19, 3}
+}
+
+type FeatureSet_MessageEncoding int32
+
+const (
+	FeatureSet_MESSAGE_ENCODING_UNKNOWN FeatureSet_MessageEncoding = 0
+	FeatureSet_LENGTH_PREFIXED          FeatureSet_MessageEncoding = 1
+	FeatureSet_DELIMITED                FeatureSet_MessageEncoding = 2
+)
+
+// Enum value maps for FeatureSet_MessageEncoding.
+var (
+	FeatureSet_MessageEncoding_name = map[int32]string{
+		0: "MESSAGE_ENCODING_UNKNOWN",
+		1: "LENGTH_PREFIXED",
+		2: "DELIMITED",
+	}
+	FeatureSet_MessageEncoding_value = map[string]int32{
+		"MESSAGE_ENCODING_UNKNOWN": 0,
+		"LENGTH_PREFIXED":          1,
+		"DELIMITED":                2,
+	}
+)
+
+func (x FeatureSet_MessageEncoding) Enum() *FeatureSet_MessageEncoding {
+	p := new(FeatureSet_MessageEncoding)
+	*p = x
+	return p
+}
+
+func (x FeatureSet_MessageEncoding) String() string {
+	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
+}
+
+func (FeatureSet_MessageEncoding) Descriptor() protoreflect.EnumDescriptor {
+	return file_google_protobuf_descriptor_proto_enumTypes[14].Descriptor()
+}
+
+func (FeatureSet_MessageEncoding) Type() protoreflect.EnumType {
+	return &file_google_protobuf_descriptor_proto_enumTypes[14]
+}
+
+func (x FeatureSet_MessageEncoding) Number() protoreflect.EnumNumber {
+	return protoreflect.EnumNumber(x)
+}
+
+// Deprecated: Do not use.
+func (x *FeatureSet_MessageEncoding) UnmarshalJSON(b []byte) error {
+	num, err := protoimpl.X.UnmarshalJSONEnum(x.Descriptor(), b)
+	if err != nil {
+		return err
+	}
+	*x = FeatureSet_MessageEncoding(num)
+	return nil
+}
+
+// Deprecated: Use FeatureSet_MessageEncoding.Descriptor instead.
+func (FeatureSet_MessageEncoding) EnumDescriptor() ([]byte, []int) {
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{19, 4}
+}
+
+type FeatureSet_JsonFormat int32
+
+const (
+	FeatureSet_JSON_FORMAT_UNKNOWN FeatureSet_JsonFormat = 0
+	FeatureSet_ALLOW               FeatureSet_JsonFormat = 1
+	FeatureSet_LEGACY_BEST_EFFORT  FeatureSet_JsonFormat = 2
+)
+
+// Enum value maps for FeatureSet_JsonFormat.
+var (
+	FeatureSet_JsonFormat_name = map[int32]string{
+		0: "JSON_FORMAT_UNKNOWN",
+		1: "ALLOW",
+		2: "LEGACY_BEST_EFFORT",
+	}
+	FeatureSet_JsonFormat_value = map[string]int32{
+		"JSON_FORMAT_UNKNOWN": 0,
+		"ALLOW":               1,
+		"LEGACY_BEST_EFFORT":  2,
+	}
+)
+
+func (x FeatureSet_JsonFormat) Enum() *FeatureSet_JsonFormat {
+	p := new(FeatureSet_JsonFormat)
+	*p = x
+	return p
+}
+
+func (x FeatureSet_JsonFormat) String() string {
+	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
+}
+
+func (FeatureSet_JsonFormat) Descriptor() protoreflect.EnumDescriptor {
+	return file_google_protobuf_descriptor_proto_enumTypes[15].Descriptor()
+}
+
+func (FeatureSet_JsonFormat) Type() protoreflect.EnumType {
+	return &file_google_protobuf_descriptor_proto_enumTypes[15]
+}
+
+func (x FeatureSet_JsonFormat) Number() protoreflect.EnumNumber {
+	return protoreflect.EnumNumber(x)
+}
+
+// Deprecated: Do not use.
+func (x *FeatureSet_JsonFormat) UnmarshalJSON(b []byte) error {
+	num, err := protoimpl.X.UnmarshalJSONEnum(x.Descriptor(), b)
+	if err != nil {
+		return err
+	}
+	*x = FeatureSet_JsonFormat(num)
+	return nil
+}
+
+// Deprecated: Use FeatureSet_JsonFormat.Descriptor instead.
+func (FeatureSet_JsonFormat) EnumDescriptor() ([]byte, []int) {
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{19, 5}
+}
+
 // Represents the identified object's effect on the element in the original
 // .proto file.
 type GeneratedCodeInfo_Annotation_Semantic int32
@@ -716,11 +1165,11 @@ func (x GeneratedCodeInfo_Annotation_Semantic) String() string {
 }
 
 func (GeneratedCodeInfo_Annotation_Semantic) Descriptor() protoreflect.EnumDescriptor {
-	return file_google_protobuf_descriptor_proto_enumTypes[9].Descriptor()
+	return file_google_protobuf_descriptor_proto_enumTypes[16].Descriptor()
 }
 
 func (GeneratedCodeInfo_Annotation_Semantic) Type() protoreflect.EnumType {
-	return &file_google_protobuf_descriptor_proto_enumTypes[9]
+	return &file_google_protobuf_descriptor_proto_enumTypes[16]
 }
 
 func (x GeneratedCodeInfo_Annotation_Semantic) Number() protoreflect.EnumNumber {
@@ -739,7 +1188,7 @@ func (x *GeneratedCodeInfo_Annotation_Semantic) UnmarshalJSON(b []byte) error {
 
 // Deprecated: Use GeneratedCodeInfo_Annotation_Semantic.Descriptor instead.
 func (GeneratedCodeInfo_Annotation_Semantic) EnumDescriptor() ([]byte, []int) {
-	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{20, 0, 0}
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{22, 0, 0}
 }
 
 // The protocol compiler can output a FileDescriptorSet containing the .proto
@@ -822,8 +1271,8 @@ type FileDescriptorProto struct {
 	//
 	// If `edition` is present, this value must be "editions".
 	Syntax *string `protobuf:"bytes,12,opt,name=syntax" json:"syntax,omitempty"`
-	// The edition of the proto file, which is an opaque string.
-	Edition *string `protobuf:"bytes,13,opt,name=edition" json:"edition,omitempty"`
+	// The edition of the proto file.
+	Edition *Edition `protobuf:"varint,14,opt,name=edition,enum=google.protobuf.Edition" json:"edition,omitempty"`
 }
 
 func (x *FileDescriptorProto) Reset() {
@@ -942,11 +1391,11 @@ func (x *FileDescriptorProto) GetSyntax() string {
 	return ""
 }
 
-func (x *FileDescriptorProto) GetEdition() string {
+func (x *FileDescriptorProto) GetEdition() Edition {
 	if x != nil && x.Edition != nil {
 		return *x.Edition
 	}
-	return ""
+	return Edition_EDITION_UNKNOWN
 }
 
 // Describes a message type.
@@ -1079,13 +1528,14 @@ type ExtensionRangeOptions struct {
 
 	// The parser stores options it doesn't recognize here. See above.
 	UninterpretedOption []*UninterpretedOption `protobuf:"bytes,999,rep,name=uninterpreted_option,json=uninterpretedOption" json:"uninterpreted_option,omitempty"`
-	// go/protobuf-stripping-extension-declarations
-	// Like Metadata, but we use a repeated field to hold all extension
-	// declarations. This should avoid the size increases of transforming a large
-	// extension range into small ranges in generated binaries.
+	// For external users: DO NOT USE. We are in the process of open sourcing
+	// extension declaration and executing internal cleanups before it can be
+	// used externally.
 	Declaration []*ExtensionRangeOptions_Declaration `protobuf:"bytes,2,rep,name=declaration" json:"declaration,omitempty"`
+	// Any features defined in the specific edition.
+	Features *FeatureSet `protobuf:"bytes,50,opt,name=features" json:"features,omitempty"`
 	// The verification state of the range.
-	// TODO(b/278783756): flip the default to DECLARATION once all empty ranges
+	// TODO: flip the default to DECLARATION once all empty ranges
 	// are marked as UNVERIFIED.
 	Verification *ExtensionRangeOptions_VerificationState `protobuf:"varint,3,opt,name=verification,enum=google.protobuf.ExtensionRangeOptions_VerificationState,def=1" json:"verification,omitempty"`
 }
@@ -1141,6 +1591,13 @@ func (x *ExtensionRangeOptions) GetDeclaration() []*ExtensionRangeOptions_Declar
 	return nil
 }
 
+func (x *ExtensionRangeOptions) GetFeatures() *FeatureSet {
+	if x != nil {
+		return x.Features
+	}
+	return nil
+}
+
 func (x *ExtensionRangeOptions) GetVerification() ExtensionRangeOptions_VerificationState {
 	if x != nil && x.Verification != nil {
 		return *x.Verification
@@ -1772,6 +2229,8 @@ type FileOptions struct {
 	// is empty. When this option is not set, the package name will be used for
 	// determining the ruby package.
 	RubyPackage *string `protobuf:"bytes,45,opt,name=ruby_package,json=rubyPackage" json:"ruby_package,omitempty"`
+	// Any features defined in the specific edition.
+	Features *FeatureSet `protobuf:"bytes,50,opt,name=features" json:"features,omitempty"`
 	// The parser stores options it doesn't recognize here.
 	// See the documentation for the "Options" section above.
 	UninterpretedOption []*UninterpretedOption `protobuf:"bytes,999,rep,name=uninterpreted_option,json=uninterpretedOption" json:"uninterpreted_option,omitempty"`
@@ -1963,6 +2422,13 @@ func (x *FileOptions) GetRubyPackage() string {
 	return ""
 }
 
+func (x *FileOptions) GetFeatures() *FeatureSet {
+	if x != nil {
+		return x.Features
+	}
+	return nil
+}
+
 func (x *FileOptions) GetUninterpretedOption() []*UninterpretedOption {
 	if x != nil {
 		return x.UninterpretedOption
@@ -2039,11 +2505,13 @@ type MessageOptions struct {
 	// This should only be used as a temporary measure against broken builds due
 	// to the change in behavior for JSON field name conflicts.
 	//
-	// TODO(b/261750190) This is legacy behavior we plan to remove once downstream
+	// TODO This is legacy behavior we plan to remove once downstream
 	// teams have had time to migrate.
 	//
 	// Deprecated: Marked as deprecated in google/protobuf/descriptor.proto.
 	DeprecatedLegacyJsonFieldConflicts *bool `protobuf:"varint,11,opt,name=deprecated_legacy_json_field_conflicts,json=deprecatedLegacyJsonFieldConflicts" json:"deprecated_legacy_json_field_conflicts,omitempty"`
+	// Any features defined in the specific edition.
+	Features *FeatureSet `protobuf:"bytes,12,opt,name=features" json:"features,omitempty"`
 	// The parser stores options it doesn't recognize here. See above.
 	UninterpretedOption []*UninterpretedOption `protobuf:"bytes,999,rep,name=uninterpreted_option,json=uninterpretedOption" json:"uninterpreted_option,omitempty"`
 }
@@ -2123,6 +2591,13 @@ func (x *MessageOptions) GetDeprecatedLegacyJsonFieldConflicts() bool {
 	return false
 }
 
+func (x *MessageOptions) GetFeatures() *FeatureSet {
+	if x != nil {
+		return x.Features
+	}
+	return nil
+}
+
 func (x *MessageOptions) GetUninterpretedOption() []*UninterpretedOption {
 	if x != nil {
 		return x.UninterpretedOption
@@ -2147,7 +2622,9 @@ type FieldOptions struct {
 	// a more efficient representation on the wire. Rather than repeatedly
 	// writing the tag and type for each element, the entire array is encoded as
 	// a single length-delimited blob. In proto3, only explicit setting it to
-	// false will avoid using packed encoding.
+	// false will avoid using packed encoding.  This option is prohibited in
+	// Editions, but the `repeated_field_encoding` feature can be used to control
+	// the behavior.
 	Packed *bool `protobuf:"varint,2,opt,name=packed" json:"packed,omitempty"`
 	// The jstype option determines the JavaScript type used for values of the
 	// field.  The option is permitted only for 64 bit integral and fixed types
@@ -2205,11 +2682,12 @@ type FieldOptions struct {
 	Weak *bool `protobuf:"varint,10,opt,name=weak,def=0" json:"weak,omitempty"`
 	// Indicate that the field value should not be printed out when using debug
 	// formats, e.g. when the field contains sensitive credentials.
-	DebugRedact *bool                         `protobuf:"varint,16,opt,name=debug_redact,json=debugRedact,def=0" json:"debug_redact,omitempty"`
-	Retention   *FieldOptions_OptionRetention `protobuf:"varint,17,opt,name=retention,enum=google.protobuf.FieldOptions_OptionRetention" json:"retention,omitempty"`
-	// Deprecated: Marked as deprecated in google/protobuf/descriptor.proto.
-	Target  *FieldOptions_OptionTargetType  `protobuf:"varint,18,opt,name=target,enum=google.protobuf.FieldOptions_OptionTargetType" json:"target,omitempty"`
-	Targets []FieldOptions_OptionTargetType `protobuf:"varint,19,rep,name=targets,enum=google.protobuf.FieldOptions_OptionTargetType" json:"targets,omitempty"`
+	DebugRedact     *bool                           `protobuf:"varint,16,opt,name=debug_redact,json=debugRedact,def=0" json:"debug_redact,omitempty"`
+	Retention       *FieldOptions_OptionRetention   `protobuf:"varint,17,opt,name=retention,enum=google.protobuf.FieldOptions_OptionRetention" json:"retention,omitempty"`
+	Targets         []FieldOptions_OptionTargetType `protobuf:"varint,19,rep,name=targets,enum=google.protobuf.FieldOptions_OptionTargetType" json:"targets,omitempty"`
+	EditionDefaults []*FieldOptions_EditionDefault  `protobuf:"bytes,20,rep,name=edition_defaults,json=editionDefaults" json:"edition_defaults,omitempty"`
+	// Any features defined in the specific edition.
+	Features *FeatureSet `protobuf:"bytes,21,opt,name=features" json:"features,omitempty"`
 	// The parser stores options it doesn't recognize here. See above.
 	UninterpretedOption []*UninterpretedOption `protobuf:"bytes,999,rep,name=uninterpreted_option,json=uninterpretedOption" json:"uninterpreted_option,omitempty"`
 }
@@ -2320,17 +2798,23 @@ func (x *FieldOptions) GetRetention() FieldOptions_OptionRetention {
 	return FieldOptions_RETENTION_UNKNOWN
 }
 
-// Deprecated: Marked as deprecated in google/protobuf/descriptor.proto.
-func (x *FieldOptions) GetTarget() FieldOptions_OptionTargetType {
-	if x != nil && x.Target != nil {
-		return *x.Target
+func (x *FieldOptions) GetTargets() []FieldOptions_OptionTargetType {
+	if x != nil {
+		return x.Targets
 	}
-	return FieldOptions_TARGET_TYPE_UNKNOWN
+	return nil
 }
 
-func (x *FieldOptions) GetTargets() []FieldOptions_OptionTargetType {
+func (x *FieldOptions) GetEditionDefaults() []*FieldOptions_EditionDefault {
 	if x != nil {
-		return x.Targets
+		return x.EditionDefaults
+	}
+	return nil
+}
+
+func (x *FieldOptions) GetFeatures() *FeatureSet {
+	if x != nil {
+		return x.Features
 	}
 	return nil
 }
@@ -2348,6 +2832,8 @@ type OneofOptions struct {
 	unknownFields   protoimpl.UnknownFields
 	extensionFields protoimpl.ExtensionFields
 
+	// Any features defined in the specific edition.
+	Features *FeatureSet `protobuf:"bytes,1,opt,name=features" json:"features,omitempty"`
 	// The parser stores options it doesn't recognize here. See above.
 	UninterpretedOption []*UninterpretedOption `protobuf:"bytes,999,rep,name=uninterpreted_option,json=uninterpretedOption" json:"uninterpreted_option,omitempty"`
 }
@@ -2384,6 +2870,13 @@ func (*OneofOptions) Descriptor() ([]byte, []int) {
 	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{13}
 }
 
+func (x *OneofOptions) GetFeatures() *FeatureSet {
+	if x != nil {
+		return x.Features
+	}
+	return nil
+}
+
 func (x *OneofOptions) GetUninterpretedOption() []*UninterpretedOption {
 	if x != nil {
 		return x.UninterpretedOption
@@ -2409,11 +2902,13 @@ type EnumOptions struct {
 	// and strips underscored from the fields before comparison in proto3 only.
 	// The new behavior takes `json_name` into account and applies to proto2 as
 	// well.
-	// TODO(b/261750190) Remove this legacy behavior once downstream teams have
+	// TODO Remove this legacy behavior once downstream teams have
 	// had time to migrate.
 	//
 	// Deprecated: Marked as deprecated in google/protobuf/descriptor.proto.
 	DeprecatedLegacyJsonFieldConflicts *bool `protobuf:"varint,6,opt,name=deprecated_legacy_json_field_conflicts,json=deprecatedLegacyJsonFieldConflicts" json:"deprecated_legacy_json_field_conflicts,omitempty"`
+	// Any features defined in the specific edition.
+	Features *FeatureSet `protobuf:"bytes,7,opt,name=features" json:"features,omitempty"`
 	// The parser stores options it doesn't recognize here. See above.
 	UninterpretedOption []*UninterpretedOption `protobuf:"bytes,999,rep,name=uninterpreted_option,json=uninterpretedOption" json:"uninterpreted_option,omitempty"`
 }
@@ -2477,6 +2972,13 @@ func (x *EnumOptions) GetDeprecatedLegacyJsonFieldConflicts() bool {
 	return false
 }
 
+func (x *EnumOptions) GetFeatures() *FeatureSet {
+	if x != nil {
+		return x.Features
+	}
+	return nil
+}
+
 func (x *EnumOptions) GetUninterpretedOption() []*UninterpretedOption {
 	if x != nil {
 		return x.UninterpretedOption
@@ -2495,13 +2997,20 @@ type EnumValueOptions struct {
 	// for the enum value, or it will be completely ignored; in the very least,
 	// this is a formalization for deprecating enum values.
 	Deprecated *bool `protobuf:"varint,1,opt,name=deprecated,def=0" json:"deprecated,omitempty"`
+	// Any features defined in the specific edition.
+	Features *FeatureSet `protobuf:"bytes,2,opt,name=features" json:"features,omitempty"`
+	// Indicate that fields annotated with this enum value should not be printed
+	// out when using debug formats, e.g. when the field contains sensitive
+	// credentials.
+	DebugRedact *bool `protobuf:"varint,3,opt,name=debug_redact,json=debugRedact,def=0" json:"debug_redact,omitempty"`
 	// The parser stores options it doesn't recognize here. See above.
 	UninterpretedOption []*UninterpretedOption `protobuf:"bytes,999,rep,name=uninterpreted_option,json=uninterpretedOption" json:"uninterpreted_option,omitempty"`
 }
 
 // Default values for EnumValueOptions fields.
 const (
-	Default_EnumValueOptions_Deprecated = bool(false)
+	Default_EnumValueOptions_Deprecated  = bool(false)
+	Default_EnumValueOptions_DebugRedact = bool(false)
 )
 
 func (x *EnumValueOptions) Reset() {
@@ -2543,6 +3052,20 @@ func (x *EnumValueOptions) GetDeprecated() bool {
 	return Default_EnumValueOptions_Deprecated
 }
 
+func (x *EnumValueOptions) GetFeatures() *FeatureSet {
+	if x != nil {
+		return x.Features
+	}
+	return nil
+}
+
+func (x *EnumValueOptions) GetDebugRedact() bool {
+	if x != nil && x.DebugRedact != nil {
+		return *x.DebugRedact
+	}
+	return Default_EnumValueOptions_DebugRedact
+}
+
 func (x *EnumValueOptions) GetUninterpretedOption() []*UninterpretedOption {
 	if x != nil {
 		return x.UninterpretedOption
@@ -2556,6 +3079,8 @@ type ServiceOptions struct {
 	unknownFields   protoimpl.UnknownFields
 	extensionFields protoimpl.ExtensionFields
 
+	// Any features defined in the specific edition.
+	Features *FeatureSet `protobuf:"bytes,34,opt,name=features" json:"features,omitempty"`
 	// Is this service deprecated?
 	// Depending on the target platform, this can emit Deprecated annotations
 	// for the service, or it will be completely ignored; in the very least,
@@ -2602,6 +3127,13 @@ func (*ServiceOptions) Descriptor() ([]byte, []int) {
 	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{16}
 }
 
+func (x *ServiceOptions) GetFeatures() *FeatureSet {
+	if x != nil {
+		return x.Features
+	}
+	return nil
+}
+
 func (x *ServiceOptions) GetDeprecated() bool {
 	if x != nil && x.Deprecated != nil {
 		return *x.Deprecated
@@ -2628,6 +3160,8 @@ type MethodOptions struct {
 	// this is a formalization for deprecating methods.
 	Deprecated       *bool                           `protobuf:"varint,33,opt,name=deprecated,def=0" json:"deprecated,omitempty"`
 	IdempotencyLevel *MethodOptions_IdempotencyLevel `protobuf:"varint,34,opt,name=idempotency_level,json=idempotencyLevel,enum=google.protobuf.MethodOptions_IdempotencyLevel,def=0" json:"idempotency_level,omitempty"`
+	// Any features defined in the specific edition.
+	Features *FeatureSet `protobuf:"bytes,35,opt,name=features" json:"features,omitempty"`
 	// The parser stores options it doesn't recognize here. See above.
 	UninterpretedOption []*UninterpretedOption `protobuf:"bytes,999,rep,name=uninterpreted_option,json=uninterpretedOption" json:"uninterpreted_option,omitempty"`
 }
@@ -2684,6 +3218,13 @@ func (x *MethodOptions) GetIdempotencyLevel() MethodOptions_IdempotencyLevel {
 	return Default_MethodOptions_IdempotencyLevel
 }
 
+func (x *MethodOptions) GetFeatures() *FeatureSet {
+	if x != nil {
+		return x.Features
+	}
+	return nil
+}
+
 func (x *MethodOptions) GetUninterpretedOption() []*UninterpretedOption {
 	if x != nil {
 		return x.UninterpretedOption
@@ -2763,35 +3304,200 @@ func (x *UninterpretedOption) GetPositiveIntValue() uint64 {
 	if x != nil && x.PositiveIntValue != nil {
 		return *x.PositiveIntValue
 	}
-	return 0
+	return 0
+}
+
+func (x *UninterpretedOption) GetNegativeIntValue() int64 {
+	if x != nil && x.NegativeIntValue != nil {
+		return *x.NegativeIntValue
+	}
+	return 0
+}
+
+func (x *UninterpretedOption) GetDoubleValue() float64 {
+	if x != nil && x.DoubleValue != nil {
+		return *x.DoubleValue
+	}
+	return 0
+}
+
+func (x *UninterpretedOption) GetStringValue() []byte {
+	if x != nil {
+		return x.StringValue
+	}
+	return nil
+}
+
+func (x *UninterpretedOption) GetAggregateValue() string {
+	if x != nil && x.AggregateValue != nil {
+		return *x.AggregateValue
+	}
+	return ""
+}
+
+// TODO Enums in C++ gencode (and potentially other languages) are
+// not well scoped.  This means that each of the feature enums below can clash
+// with each other.  The short names we've chosen maximize call-site
+// readability, but leave us very open to this scenario.  A future feature will
+// be designed and implemented to handle this, hopefully before we ever hit a
+// conflict here.
+type FeatureSet struct {
+	state           protoimpl.MessageState
+	sizeCache       protoimpl.SizeCache
+	unknownFields   protoimpl.UnknownFields
+	extensionFields protoimpl.ExtensionFields
+
+	FieldPresence         *FeatureSet_FieldPresence         `protobuf:"varint,1,opt,name=field_presence,json=fieldPresence,enum=google.protobuf.FeatureSet_FieldPresence" json:"field_presence,omitempty"`
+	EnumType              *FeatureSet_EnumType              `protobuf:"varint,2,opt,name=enum_type,json=enumType,enum=google.protobuf.FeatureSet_EnumType" json:"enum_type,omitempty"`
+	RepeatedFieldEncoding *FeatureSet_RepeatedFieldEncoding `protobuf:"varint,3,opt,name=repeated_field_encoding,json=repeatedFieldEncoding,enum=google.protobuf.FeatureSet_RepeatedFieldEncoding" json:"repeated_field_encoding,omitempty"`
+	Utf8Validation        *FeatureSet_Utf8Validation        `protobuf:"varint,4,opt,name=utf8_validation,json=utf8Validation,enum=google.protobuf.FeatureSet_Utf8Validation" json:"utf8_validation,omitempty"`
+	MessageEncoding       *FeatureSet_MessageEncoding       `protobuf:"varint,5,opt,name=message_encoding,json=messageEncoding,enum=google.protobuf.FeatureSet_MessageEncoding" json:"message_encoding,omitempty"`
+	JsonFormat            *FeatureSet_JsonFormat            `protobuf:"varint,6,opt,name=json_format,json=jsonFormat,enum=google.protobuf.FeatureSet_JsonFormat" json:"json_format,omitempty"`
+}
+
+func (x *FeatureSet) Reset() {
+	*x = FeatureSet{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[19]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *FeatureSet) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*FeatureSet) ProtoMessage() {}
+
+func (x *FeatureSet) ProtoReflect() protoreflect.Message {
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[19]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use FeatureSet.ProtoReflect.Descriptor instead.
+func (*FeatureSet) Descriptor() ([]byte, []int) {
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{19}
+}
+
+func (x *FeatureSet) GetFieldPresence() FeatureSet_FieldPresence {
+	if x != nil && x.FieldPresence != nil {
+		return *x.FieldPresence
+	}
+	return FeatureSet_FIELD_PRESENCE_UNKNOWN
+}
+
+func (x *FeatureSet) GetEnumType() FeatureSet_EnumType {
+	if x != nil && x.EnumType != nil {
+		return *x.EnumType
+	}
+	return FeatureSet_ENUM_TYPE_UNKNOWN
+}
+
+func (x *FeatureSet) GetRepeatedFieldEncoding() FeatureSet_RepeatedFieldEncoding {
+	if x != nil && x.RepeatedFieldEncoding != nil {
+		return *x.RepeatedFieldEncoding
+	}
+	return FeatureSet_REPEATED_FIELD_ENCODING_UNKNOWN
+}
+
+func (x *FeatureSet) GetUtf8Validation() FeatureSet_Utf8Validation {
+	if x != nil && x.Utf8Validation != nil {
+		return *x.Utf8Validation
+	}
+	return FeatureSet_UTF8_VALIDATION_UNKNOWN
+}
+
+func (x *FeatureSet) GetMessageEncoding() FeatureSet_MessageEncoding {
+	if x != nil && x.MessageEncoding != nil {
+		return *x.MessageEncoding
+	}
+	return FeatureSet_MESSAGE_ENCODING_UNKNOWN
+}
+
+func (x *FeatureSet) GetJsonFormat() FeatureSet_JsonFormat {
+	if x != nil && x.JsonFormat != nil {
+		return *x.JsonFormat
+	}
+	return FeatureSet_JSON_FORMAT_UNKNOWN
+}
+
+// A compiled specification for the defaults of a set of features.  These
+// messages are generated from FeatureSet extensions and can be used to seed
+// feature resolution. The resolution with this object becomes a simple search
+// for the closest matching edition, followed by proto merges.
+type FeatureSetDefaults struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Defaults []*FeatureSetDefaults_FeatureSetEditionDefault `protobuf:"bytes,1,rep,name=defaults" json:"defaults,omitempty"`
+	// The minimum supported edition (inclusive) when this was constructed.
+	// Editions before this will not have defaults.
+	MinimumEdition *Edition `protobuf:"varint,4,opt,name=minimum_edition,json=minimumEdition,enum=google.protobuf.Edition" json:"minimum_edition,omitempty"`
+	// The maximum known edition (inclusive) when this was constructed. Editions
+	// after this will not have reliable defaults.
+	MaximumEdition *Edition `protobuf:"varint,5,opt,name=maximum_edition,json=maximumEdition,enum=google.protobuf.Edition" json:"maximum_edition,omitempty"`
+}
+
+func (x *FeatureSetDefaults) Reset() {
+	*x = FeatureSetDefaults{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[20]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
 }
 
-func (x *UninterpretedOption) GetNegativeIntValue() int64 {
-	if x != nil && x.NegativeIntValue != nil {
-		return *x.NegativeIntValue
-	}
-	return 0
+func (x *FeatureSetDefaults) String() string {
+	return protoimpl.X.MessageStringOf(x)
 }
 
-func (x *UninterpretedOption) GetDoubleValue() float64 {
-	if x != nil && x.DoubleValue != nil {
-		return *x.DoubleValue
+func (*FeatureSetDefaults) ProtoMessage() {}
+
+func (x *FeatureSetDefaults) ProtoReflect() protoreflect.Message {
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[20]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
 	}
-	return 0
+	return mi.MessageOf(x)
 }
 
-func (x *UninterpretedOption) GetStringValue() []byte {
+// Deprecated: Use FeatureSetDefaults.ProtoReflect.Descriptor instead.
+func (*FeatureSetDefaults) Descriptor() ([]byte, []int) {
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{20}
+}
+
+func (x *FeatureSetDefaults) GetDefaults() []*FeatureSetDefaults_FeatureSetEditionDefault {
 	if x != nil {
-		return x.StringValue
+		return x.Defaults
 	}
 	return nil
 }
 
-func (x *UninterpretedOption) GetAggregateValue() string {
-	if x != nil && x.AggregateValue != nil {
-		return *x.AggregateValue
+func (x *FeatureSetDefaults) GetMinimumEdition() Edition {
+	if x != nil && x.MinimumEdition != nil {
+		return *x.MinimumEdition
 	}
-	return ""
+	return Edition_EDITION_UNKNOWN
+}
+
+func (x *FeatureSetDefaults) GetMaximumEdition() Edition {
+	if x != nil && x.MaximumEdition != nil {
+		return *x.MaximumEdition
+	}
+	return Edition_EDITION_UNKNOWN
 }
 
 // Encapsulates information about the original source file from which a
@@ -2855,7 +3561,7 @@ type SourceCodeInfo struct {
 func (x *SourceCodeInfo) Reset() {
 	*x = SourceCodeInfo{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_google_protobuf_descriptor_proto_msgTypes[19]
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[21]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2868,7 +3574,7 @@ func (x *SourceCodeInfo) String() string {
 func (*SourceCodeInfo) ProtoMessage() {}
 
 func (x *SourceCodeInfo) ProtoReflect() protoreflect.Message {
-	mi := &file_google_protobuf_descriptor_proto_msgTypes[19]
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[21]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2881,7 +3587,7 @@ func (x *SourceCodeInfo) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use SourceCodeInfo.ProtoReflect.Descriptor instead.
 func (*SourceCodeInfo) Descriptor() ([]byte, []int) {
-	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{19}
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{21}
 }
 
 func (x *SourceCodeInfo) GetLocation() []*SourceCodeInfo_Location {
@@ -2907,7 +3613,7 @@ type GeneratedCodeInfo struct {
 func (x *GeneratedCodeInfo) Reset() {
 	*x = GeneratedCodeInfo{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_google_protobuf_descriptor_proto_msgTypes[20]
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[22]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2920,7 +3626,7 @@ func (x *GeneratedCodeInfo) String() string {
 func (*GeneratedCodeInfo) ProtoMessage() {}
 
 func (x *GeneratedCodeInfo) ProtoReflect() protoreflect.Message {
-	mi := &file_google_protobuf_descriptor_proto_msgTypes[20]
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[22]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2933,7 +3639,7 @@ func (x *GeneratedCodeInfo) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use GeneratedCodeInfo.ProtoReflect.Descriptor instead.
 func (*GeneratedCodeInfo) Descriptor() ([]byte, []int) {
-	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{20}
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{22}
 }
 
 func (x *GeneratedCodeInfo) GetAnnotation() []*GeneratedCodeInfo_Annotation {
@@ -2956,7 +3662,7 @@ type DescriptorProto_ExtensionRange struct {
 func (x *DescriptorProto_ExtensionRange) Reset() {
 	*x = DescriptorProto_ExtensionRange{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_google_protobuf_descriptor_proto_msgTypes[21]
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[23]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -2969,7 +3675,7 @@ func (x *DescriptorProto_ExtensionRange) String() string {
 func (*DescriptorProto_ExtensionRange) ProtoMessage() {}
 
 func (x *DescriptorProto_ExtensionRange) ProtoReflect() protoreflect.Message {
-	mi := &file_google_protobuf_descriptor_proto_msgTypes[21]
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[23]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3021,7 +3727,7 @@ type DescriptorProto_ReservedRange struct {
 func (x *DescriptorProto_ReservedRange) Reset() {
 	*x = DescriptorProto_ReservedRange{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_google_protobuf_descriptor_proto_msgTypes[22]
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[24]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3034,7 +3740,7 @@ func (x *DescriptorProto_ReservedRange) String() string {
 func (*DescriptorProto_ReservedRange) ProtoMessage() {}
 
 func (x *DescriptorProto_ReservedRange) ProtoReflect() protoreflect.Message {
-	mi := &file_google_protobuf_descriptor_proto_msgTypes[22]
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[24]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3078,10 +3784,6 @@ type ExtensionRangeOptions_Declaration struct {
 	// Metadata.type, Declaration.type must have a leading dot for messages
 	// and enums.
 	Type *string `protobuf:"bytes,3,opt,name=type" json:"type,omitempty"`
-	// Deprecated. Please use "repeated".
-	//
-	// Deprecated: Marked as deprecated in google/protobuf/descriptor.proto.
-	IsRepeated *bool `protobuf:"varint,4,opt,name=is_repeated,json=isRepeated" json:"is_repeated,omitempty"`
 	// If true, indicates that the number is reserved in the extension range,
 	// and any extension field with the number will fail to compile. Set this
 	// when a declared extension field is deleted.
@@ -3094,7 +3796,7 @@ type ExtensionRangeOptions_Declaration struct {
 func (x *ExtensionRangeOptions_Declaration) Reset() {
 	*x = ExtensionRangeOptions_Declaration{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_google_protobuf_descriptor_proto_msgTypes[23]
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[25]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3107,7 +3809,7 @@ func (x *ExtensionRangeOptions_Declaration) String() string {
 func (*ExtensionRangeOptions_Declaration) ProtoMessage() {}
 
 func (x *ExtensionRangeOptions_Declaration) ProtoReflect() protoreflect.Message {
-	mi := &file_google_protobuf_descriptor_proto_msgTypes[23]
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[25]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3144,14 +3846,6 @@ func (x *ExtensionRangeOptions_Declaration) GetType() string {
 	return ""
 }
 
-// Deprecated: Marked as deprecated in google/protobuf/descriptor.proto.
-func (x *ExtensionRangeOptions_Declaration) GetIsRepeated() bool {
-	if x != nil && x.IsRepeated != nil {
-		return *x.IsRepeated
-	}
-	return false
-}
-
 func (x *ExtensionRangeOptions_Declaration) GetReserved() bool {
 	if x != nil && x.Reserved != nil {
 		return *x.Reserved
@@ -3184,7 +3878,7 @@ type EnumDescriptorProto_EnumReservedRange struct {
 func (x *EnumDescriptorProto_EnumReservedRange) Reset() {
 	*x = EnumDescriptorProto_EnumReservedRange{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_google_protobuf_descriptor_proto_msgTypes[24]
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[26]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3197,7 +3891,7 @@ func (x *EnumDescriptorProto_EnumReservedRange) String() string {
 func (*EnumDescriptorProto_EnumReservedRange) ProtoMessage() {}
 
 func (x *EnumDescriptorProto_EnumReservedRange) ProtoReflect() protoreflect.Message {
-	mi := &file_google_protobuf_descriptor_proto_msgTypes[24]
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[26]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3227,6 +3921,61 @@ func (x *EnumDescriptorProto_EnumReservedRange) GetEnd() int32 {
 	return 0
 }
 
+type FieldOptions_EditionDefault struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Edition *Edition `protobuf:"varint,3,opt,name=edition,enum=google.protobuf.Edition" json:"edition,omitempty"`
+	Value   *string  `protobuf:"bytes,2,opt,name=value" json:"value,omitempty"` // Textproto value.
+}
+
+func (x *FieldOptions_EditionDefault) Reset() {
+	*x = FieldOptions_EditionDefault{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[27]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *FieldOptions_EditionDefault) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*FieldOptions_EditionDefault) ProtoMessage() {}
+
+func (x *FieldOptions_EditionDefault) ProtoReflect() protoreflect.Message {
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[27]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use FieldOptions_EditionDefault.ProtoReflect.Descriptor instead.
+func (*FieldOptions_EditionDefault) Descriptor() ([]byte, []int) {
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{12, 0}
+}
+
+func (x *FieldOptions_EditionDefault) GetEdition() Edition {
+	if x != nil && x.Edition != nil {
+		return *x.Edition
+	}
+	return Edition_EDITION_UNKNOWN
+}
+
+func (x *FieldOptions_EditionDefault) GetValue() string {
+	if x != nil && x.Value != nil {
+		return *x.Value
+	}
+	return ""
+}
+
 // The name of the uninterpreted option.  Each string represents a segment in
 // a dot-separated name.  is_extension is true iff a segment represents an
 // extension (denoted with parentheses in options specs in .proto files).
@@ -3244,7 +3993,7 @@ type UninterpretedOption_NamePart struct {
 func (x *UninterpretedOption_NamePart) Reset() {
 	*x = UninterpretedOption_NamePart{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_google_protobuf_descriptor_proto_msgTypes[25]
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[28]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3257,7 +4006,7 @@ func (x *UninterpretedOption_NamePart) String() string {
 func (*UninterpretedOption_NamePart) ProtoMessage() {}
 
 func (x *UninterpretedOption_NamePart) ProtoReflect() protoreflect.Message {
-	mi := &file_google_protobuf_descriptor_proto_msgTypes[25]
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[28]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3287,6 +4036,65 @@ func (x *UninterpretedOption_NamePart) GetIsExtension() bool {
 	return false
 }
 
+// A map from every known edition with a unique set of defaults to its
+// defaults. Not all editions may be contained here.  For a given edition,
+// the defaults at the closest matching edition ordered at or before it should
+// be used.  This field must be in strict ascending order by edition.
+type FeatureSetDefaults_FeatureSetEditionDefault struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Edition  *Edition    `protobuf:"varint,3,opt,name=edition,enum=google.protobuf.Edition" json:"edition,omitempty"`
+	Features *FeatureSet `protobuf:"bytes,2,opt,name=features" json:"features,omitempty"`
+}
+
+func (x *FeatureSetDefaults_FeatureSetEditionDefault) Reset() {
+	*x = FeatureSetDefaults_FeatureSetEditionDefault{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[29]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *FeatureSetDefaults_FeatureSetEditionDefault) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*FeatureSetDefaults_FeatureSetEditionDefault) ProtoMessage() {}
+
+func (x *FeatureSetDefaults_FeatureSetEditionDefault) ProtoReflect() protoreflect.Message {
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[29]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use FeatureSetDefaults_FeatureSetEditionDefault.ProtoReflect.Descriptor instead.
+func (*FeatureSetDefaults_FeatureSetEditionDefault) Descriptor() ([]byte, []int) {
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{20, 0}
+}
+
+func (x *FeatureSetDefaults_FeatureSetEditionDefault) GetEdition() Edition {
+	if x != nil && x.Edition != nil {
+		return *x.Edition
+	}
+	return Edition_EDITION_UNKNOWN
+}
+
+func (x *FeatureSetDefaults_FeatureSetEditionDefault) GetFeatures() *FeatureSet {
+	if x != nil {
+		return x.Features
+	}
+	return nil
+}
+
 type SourceCodeInfo_Location struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -3388,7 +4196,7 @@ type SourceCodeInfo_Location struct {
 func (x *SourceCodeInfo_Location) Reset() {
 	*x = SourceCodeInfo_Location{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_google_protobuf_descriptor_proto_msgTypes[26]
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[30]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3401,7 +4209,7 @@ func (x *SourceCodeInfo_Location) String() string {
 func (*SourceCodeInfo_Location) ProtoMessage() {}
 
 func (x *SourceCodeInfo_Location) ProtoReflect() protoreflect.Message {
-	mi := &file_google_protobuf_descriptor_proto_msgTypes[26]
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[30]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3414,7 +4222,7 @@ func (x *SourceCodeInfo_Location) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use SourceCodeInfo_Location.ProtoReflect.Descriptor instead.
 func (*SourceCodeInfo_Location) Descriptor() ([]byte, []int) {
-	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{19, 0}
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{21, 0}
 }
 
 func (x *SourceCodeInfo_Location) GetPath() []int32 {
@@ -3475,7 +4283,7 @@ type GeneratedCodeInfo_Annotation struct {
 func (x *GeneratedCodeInfo_Annotation) Reset() {
 	*x = GeneratedCodeInfo_Annotation{}
 	if protoimpl.UnsafeEnabled {
-		mi := &file_google_protobuf_descriptor_proto_msgTypes[27]
+		mi := &file_google_protobuf_descriptor_proto_msgTypes[31]
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		ms.StoreMessageInfo(mi)
 	}
@@ -3488,7 +4296,7 @@ func (x *GeneratedCodeInfo_Annotation) String() string {
 func (*GeneratedCodeInfo_Annotation) ProtoMessage() {}
 
 func (x *GeneratedCodeInfo_Annotation) ProtoReflect() protoreflect.Message {
-	mi := &file_google_protobuf_descriptor_proto_msgTypes[27]
+	mi := &file_google_protobuf_descriptor_proto_msgTypes[31]
 	if protoimpl.UnsafeEnabled && x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3501,7 +4309,7 @@ func (x *GeneratedCodeInfo_Annotation) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use GeneratedCodeInfo_Annotation.ProtoReflect.Descriptor instead.
 func (*GeneratedCodeInfo_Annotation) Descriptor() ([]byte, []int) {
-	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{20, 0}
+	return file_google_protobuf_descriptor_proto_rawDescGZIP(), []int{22, 0}
 }
 
 func (x *GeneratedCodeInfo_Annotation) GetPath() []int32 {
@@ -3550,7 +4358,7 @@ var file_google_protobuf_descriptor_proto_rawDesc = []byte{
 	0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
 	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x6c, 0x65, 0x44, 0x65, 0x73,
 	0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x52, 0x04, 0x66, 0x69,
-	0x6c, 0x65, 0x22, 0xfe, 0x04, 0x0a, 0x13, 0x46, 0x69, 0x6c, 0x65, 0x44, 0x65, 0x73, 0x63, 0x72,
+	0x6c, 0x65, 0x22, 0x98, 0x05, 0x0a, 0x13, 0x46, 0x69, 0x6c, 0x65, 0x44, 0x65, 0x73, 0x63, 0x72,
 	0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61,
 	0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x18,
 	0x0a, 0x07, 0x70, 0x61, 0x63, 0x6b, 0x61, 0x67, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52,
@@ -3588,527 +4396,687 @@ var file_google_protobuf_descriptor_proto_rawDesc = []byte{
 	0x75, 0x66, 0x2e, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66,
 	0x6f, 0x52, 0x0e, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66,
 	0x6f, 0x12, 0x16, 0x0a, 0x06, 0x73, 0x79, 0x6e, 0x74, 0x61, 0x78, 0x18, 0x0c, 0x20, 0x01, 0x28,
-	0x09, 0x52, 0x06, 0x73, 0x79, 0x6e, 0x74, 0x61, 0x78, 0x12, 0x18, 0x0a, 0x07, 0x65, 0x64, 0x69,
-	0x74, 0x69, 0x6f, 0x6e, 0x18, 0x0d, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x65, 0x64, 0x69, 0x74,
-	0x69, 0x6f, 0x6e, 0x22, 0xb9, 0x06, 0x0a, 0x0f, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74,
-	0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18,
-	0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x3b, 0x0a, 0x05, 0x66,
-	0x69, 0x65, 0x6c, 0x64, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x67, 0x6f, 0x6f,
-	0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65,
-	0x6c, 0x64, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74,
-	0x6f, 0x52, 0x05, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x12, 0x43, 0x0a, 0x09, 0x65, 0x78, 0x74, 0x65,
-	0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x18, 0x06, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x67, 0x6f,
-	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69,
-	0x65, 0x6c, 0x64, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f,
-	0x74, 0x6f, 0x52, 0x09, 0x65, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x12, 0x41, 0x0a,
-	0x0b, 0x6e, 0x65, 0x73, 0x74, 0x65, 0x64, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x03, 0x20, 0x03,
-	0x28, 0x0b, 0x32, 0x20, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
-	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50,
-	0x72, 0x6f, 0x74, 0x6f, 0x52, 0x0a, 0x6e, 0x65, 0x73, 0x74, 0x65, 0x64, 0x54, 0x79, 0x70, 0x65,
-	0x12, 0x41, 0x0a, 0x09, 0x65, 0x6e, 0x75, 0x6d, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x04, 0x20,
-	0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
-	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x6e, 0x75, 0x6d, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69,
-	0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x52, 0x08, 0x65, 0x6e, 0x75, 0x6d, 0x54,
-	0x79, 0x70, 0x65, 0x12, 0x58, 0x0a, 0x0f, 0x65, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e,
-	0x5f, 0x72, 0x61, 0x6e, 0x67, 0x65, 0x18, 0x05, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2f, 0x2e, 0x67,
+	0x09, 0x52, 0x06, 0x73, 0x79, 0x6e, 0x74, 0x61, 0x78, 0x12, 0x32, 0x0a, 0x07, 0x65, 0x64, 0x69,
+	0x74, 0x69, 0x6f, 0x6e, 0x18, 0x0e, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x18, 0x2e, 0x67, 0x6f, 0x6f,
+	0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x64, 0x69,
+	0x74, 0x69, 0x6f, 0x6e, 0x52, 0x07, 0x65, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0xb9, 0x06,
+	0x0a, 0x0f, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74,
+	0x6f, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x3b, 0x0a, 0x05, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x18, 0x02,
+	0x20, 0x03, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x44, 0x65, 0x73, 0x63,
+	0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x52, 0x05, 0x66, 0x69, 0x65,
+	0x6c, 0x64, 0x12, 0x43, 0x0a, 0x09, 0x65, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x18,
+	0x06, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
+	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x44, 0x65, 0x73,
+	0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x52, 0x09, 0x65, 0x78,
+	0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x12, 0x41, 0x0a, 0x0b, 0x6e, 0x65, 0x73, 0x74, 0x65,
+	0x64, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x20, 0x2e, 0x67,
 	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44,
-	0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x45,
-	0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x52, 0x0e, 0x65,
-	0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x12, 0x44, 0x0a,
-	0x0a, 0x6f, 0x6e, 0x65, 0x6f, 0x66, 0x5f, 0x64, 0x65, 0x63, 0x6c, 0x18, 0x08, 0x20, 0x03, 0x28,
-	0x0b, 0x32, 0x25, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
-	0x62, 0x75, 0x66, 0x2e, 0x4f, 0x6e, 0x65, 0x6f, 0x66, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70,
-	0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x52, 0x09, 0x6f, 0x6e, 0x65, 0x6f, 0x66, 0x44,
-	0x65, 0x63, 0x6c, 0x12, 0x39, 0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x07,
-	0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
-	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x4f, 0x70,
-	0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x55,
-	0x0a, 0x0e, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x5f, 0x72, 0x61, 0x6e, 0x67, 0x65,
-	0x18, 0x09, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2e, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x52, 0x0a,
+	0x6e, 0x65, 0x73, 0x74, 0x65, 0x64, 0x54, 0x79, 0x70, 0x65, 0x12, 0x41, 0x0a, 0x09, 0x65, 0x6e,
+	0x75, 0x6d, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e,
+	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e,
+	0x45, 0x6e, 0x75, 0x6d, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72,
+	0x6f, 0x74, 0x6f, 0x52, 0x08, 0x65, 0x6e, 0x75, 0x6d, 0x54, 0x79, 0x70, 0x65, 0x12, 0x58, 0x0a,
+	0x0f, 0x65, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x72, 0x61, 0x6e, 0x67, 0x65,
+	0x18, 0x05, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2f, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
 	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70,
-	0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x52, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65,
-	0x64, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x52, 0x0d, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64,
-	0x52, 0x61, 0x6e, 0x67, 0x65, 0x12, 0x23, 0x0a, 0x0d, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65,
-	0x64, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x0a, 0x20, 0x03, 0x28, 0x09, 0x52, 0x0c, 0x72, 0x65,
-	0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x4e, 0x61, 0x6d, 0x65, 0x1a, 0x7a, 0x0a, 0x0e, 0x45, 0x78,
-	0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x12, 0x14, 0x0a, 0x05,
-	0x73, 0x74, 0x61, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x05, 0x52, 0x05, 0x73, 0x74, 0x61,
-	0x72, 0x74, 0x12, 0x10, 0x0a, 0x03, 0x65, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x05, 0x52,
-	0x03, 0x65, 0x6e, 0x64, 0x12, 0x40, 0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18,
-	0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x26, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
-	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f,
-	0x6e, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f,
-	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x1a, 0x37, 0x0a, 0x0d, 0x52, 0x65, 0x73, 0x65, 0x72, 0x76,
-	0x65, 0x64, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x05, 0x52, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x12, 0x10, 0x0a,
-	0x03, 0x65, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x05, 0x52, 0x03, 0x65, 0x6e, 0x64, 0x22,
-	0xad, 0x04, 0x0a, 0x15, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x61, 0x6e,
-	0x67, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69,
-	0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f,
-	0x6e, 0x18, 0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
-	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74,
-	0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13,
-	0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74,
-	0x69, 0x6f, 0x6e, 0x12, 0x59, 0x0a, 0x0b, 0x64, 0x65, 0x63, 0x6c, 0x61, 0x72, 0x61, 0x74, 0x69,
-	0x6f, 0x6e, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x32, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
-	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x6e,
-	0x73, 0x69, 0x6f, 0x6e, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73,
-	0x2e, 0x44, 0x65, 0x63, 0x6c, 0x61, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x03, 0x88, 0x01,
-	0x02, 0x52, 0x0b, 0x64, 0x65, 0x63, 0x6c, 0x61, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x68,
-	0x0a, 0x0c, 0x76, 0x65, 0x72, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x03,
-	0x20, 0x01, 0x28, 0x0e, 0x32, 0x38, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
-	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e,
-	0x52, 0x61, 0x6e, 0x67, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x56, 0x65, 0x72,
-	0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x53, 0x74, 0x61, 0x74, 0x65, 0x3a, 0x0a,
-	0x55, 0x4e, 0x56, 0x45, 0x52, 0x49, 0x46, 0x49, 0x45, 0x44, 0x52, 0x0c, 0x76, 0x65, 0x72, 0x69,
-	0x66, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x1a, 0xb3, 0x01, 0x0a, 0x0b, 0x44, 0x65, 0x63,
-	0x6c, 0x61, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x16, 0x0a, 0x06, 0x6e, 0x75, 0x6d, 0x62,
-	0x65, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x05, 0x52, 0x06, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72,
-	0x12, 0x1b, 0x0a, 0x09, 0x66, 0x75, 0x6c, 0x6c, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x02, 0x20,
-	0x01, 0x28, 0x09, 0x52, 0x08, 0x66, 0x75, 0x6c, 0x6c, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x12, 0x0a,
-	0x04, 0x74, 0x79, 0x70, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x74, 0x79, 0x70,
-	0x65, 0x12, 0x23, 0x0a, 0x0b, 0x69, 0x73, 0x5f, 0x72, 0x65, 0x70, 0x65, 0x61, 0x74, 0x65, 0x64,
-	0x18, 0x04, 0x20, 0x01, 0x28, 0x08, 0x42, 0x02, 0x18, 0x01, 0x52, 0x0a, 0x69, 0x73, 0x52, 0x65,
-	0x70, 0x65, 0x61, 0x74, 0x65, 0x64, 0x12, 0x1a, 0x0a, 0x08, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76,
-	0x65, 0x64, 0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76,
-	0x65, 0x64, 0x12, 0x1a, 0x0a, 0x08, 0x72, 0x65, 0x70, 0x65, 0x61, 0x74, 0x65, 0x64, 0x18, 0x06,
-	0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x72, 0x65, 0x70, 0x65, 0x61, 0x74, 0x65, 0x64, 0x22, 0x34,
-	0x0a, 0x11, 0x56, 0x65, 0x72, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x53, 0x74,
-	0x61, 0x74, 0x65, 0x12, 0x0f, 0x0a, 0x0b, 0x44, 0x45, 0x43, 0x4c, 0x41, 0x52, 0x41, 0x54, 0x49,
-	0x4f, 0x4e, 0x10, 0x00, 0x12, 0x0e, 0x0a, 0x0a, 0x55, 0x4e, 0x56, 0x45, 0x52, 0x49, 0x46, 0x49,
-	0x45, 0x44, 0x10, 0x01, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10, 0x80, 0x80, 0x80, 0x80, 0x02, 0x22,
-	0xc1, 0x06, 0x0a, 0x14, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70,
-	0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x16, 0x0a, 0x06,
-	0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x18, 0x03, 0x20, 0x01, 0x28, 0x05, 0x52, 0x06, 0x6e, 0x75,
-	0x6d, 0x62, 0x65, 0x72, 0x12, 0x41, 0x0a, 0x05, 0x6c, 0x61, 0x62, 0x65, 0x6c, 0x18, 0x04, 0x20,
-	0x01, 0x28, 0x0e, 0x32, 0x2b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
-	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x44, 0x65, 0x73, 0x63, 0x72,
-	0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x4c, 0x61, 0x62, 0x65, 0x6c,
-	0x52, 0x05, 0x6c, 0x61, 0x62, 0x65, 0x6c, 0x12, 0x3e, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x18,
-	0x05, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
-	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x44, 0x65, 0x73,
-	0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x54, 0x79, 0x70,
-	0x65, 0x52, 0x04, 0x74, 0x79, 0x70, 0x65, 0x12, 0x1b, 0x0a, 0x09, 0x74, 0x79, 0x70, 0x65, 0x5f,
-	0x6e, 0x61, 0x6d, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x74, 0x79, 0x70, 0x65,
-	0x4e, 0x61, 0x6d, 0x65, 0x12, 0x1a, 0x0a, 0x08, 0x65, 0x78, 0x74, 0x65, 0x6e, 0x64, 0x65, 0x65,
-	0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x65, 0x78, 0x74, 0x65, 0x6e, 0x64, 0x65, 0x65,
-	0x12, 0x23, 0x0a, 0x0d, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x5f, 0x76, 0x61, 0x6c, 0x75,
-	0x65, 0x18, 0x07, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0c, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74,
-	0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x6f, 0x6e, 0x65, 0x6f, 0x66, 0x5f, 0x69,
-	0x6e, 0x64, 0x65, 0x78, 0x18, 0x09, 0x20, 0x01, 0x28, 0x05, 0x52, 0x0a, 0x6f, 0x6e, 0x65, 0x6f,
-	0x66, 0x49, 0x6e, 0x64, 0x65, 0x78, 0x12, 0x1b, 0x0a, 0x09, 0x6a, 0x73, 0x6f, 0x6e, 0x5f, 0x6e,
-	0x61, 0x6d, 0x65, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x6a, 0x73, 0x6f, 0x6e, 0x4e,
-	0x61, 0x6d, 0x65, 0x12, 0x37, 0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x08,
-	0x20, 0x01, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
-	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74, 0x69,
-	0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x27, 0x0a, 0x0f,
-	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x18,
-	0x11, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33, 0x4f, 0x70, 0x74,
-	0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x22, 0xb6, 0x02, 0x0a, 0x04, 0x54, 0x79, 0x70, 0x65, 0x12, 0x0f,
-	0x0a, 0x0b, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x44, 0x4f, 0x55, 0x42, 0x4c, 0x45, 0x10, 0x01, 0x12,
-	0x0e, 0x0a, 0x0a, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x46, 0x4c, 0x4f, 0x41, 0x54, 0x10, 0x02, 0x12,
-	0x0e, 0x0a, 0x0a, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x49, 0x4e, 0x54, 0x36, 0x34, 0x10, 0x03, 0x12,
-	0x0f, 0x0a, 0x0b, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x55, 0x49, 0x4e, 0x54, 0x36, 0x34, 0x10, 0x04,
-	0x12, 0x0e, 0x0a, 0x0a, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x49, 0x4e, 0x54, 0x33, 0x32, 0x10, 0x05,
-	0x12, 0x10, 0x0a, 0x0c, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x46, 0x49, 0x58, 0x45, 0x44, 0x36, 0x34,
-	0x10, 0x06, 0x12, 0x10, 0x0a, 0x0c, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x46, 0x49, 0x58, 0x45, 0x44,
-	0x33, 0x32, 0x10, 0x07, 0x12, 0x0d, 0x0a, 0x09, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x42, 0x4f, 0x4f,
-	0x4c, 0x10, 0x08, 0x12, 0x0f, 0x0a, 0x0b, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x53, 0x54, 0x52, 0x49,
-	0x4e, 0x47, 0x10, 0x09, 0x12, 0x0e, 0x0a, 0x0a, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x47, 0x52, 0x4f,
-	0x55, 0x50, 0x10, 0x0a, 0x12, 0x10, 0x0a, 0x0c, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4d, 0x45, 0x53,
-	0x53, 0x41, 0x47, 0x45, 0x10, 0x0b, 0x12, 0x0e, 0x0a, 0x0a, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x42,
-	0x59, 0x54, 0x45, 0x53, 0x10, 0x0c, 0x12, 0x0f, 0x0a, 0x0b, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x55,
-	0x49, 0x4e, 0x54, 0x33, 0x32, 0x10, 0x0d, 0x12, 0x0d, 0x0a, 0x09, 0x54, 0x59, 0x50, 0x45, 0x5f,
-	0x45, 0x4e, 0x55, 0x4d, 0x10, 0x0e, 0x12, 0x11, 0x0a, 0x0d, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x53,
-	0x46, 0x49, 0x58, 0x45, 0x44, 0x33, 0x32, 0x10, 0x0f, 0x12, 0x11, 0x0a, 0x0d, 0x54, 0x59, 0x50,
-	0x45, 0x5f, 0x53, 0x46, 0x49, 0x58, 0x45, 0x44, 0x36, 0x34, 0x10, 0x10, 0x12, 0x0f, 0x0a, 0x0b,
-	0x54, 0x59, 0x50, 0x45, 0x5f, 0x53, 0x49, 0x4e, 0x54, 0x33, 0x32, 0x10, 0x11, 0x12, 0x0f, 0x0a,
-	0x0b, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x53, 0x49, 0x4e, 0x54, 0x36, 0x34, 0x10, 0x12, 0x22, 0x43,
-	0x0a, 0x05, 0x4c, 0x61, 0x62, 0x65, 0x6c, 0x12, 0x12, 0x0a, 0x0e, 0x4c, 0x41, 0x42, 0x45, 0x4c,
-	0x5f, 0x4f, 0x50, 0x54, 0x49, 0x4f, 0x4e, 0x41, 0x4c, 0x10, 0x01, 0x12, 0x12, 0x0a, 0x0e, 0x4c,
-	0x41, 0x42, 0x45, 0x4c, 0x5f, 0x52, 0x45, 0x51, 0x55, 0x49, 0x52, 0x45, 0x44, 0x10, 0x02, 0x12,
-	0x12, 0x0a, 0x0e, 0x4c, 0x41, 0x42, 0x45, 0x4c, 0x5f, 0x52, 0x45, 0x50, 0x45, 0x41, 0x54, 0x45,
-	0x44, 0x10, 0x03, 0x22, 0x63, 0x0a, 0x14, 0x4f, 0x6e, 0x65, 0x6f, 0x66, 0x44, 0x65, 0x73, 0x63,
-	0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x12, 0x0a, 0x04, 0x6e,
-	0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12,
-	0x37, 0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x1d, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
-	0x75, 0x66, 0x2e, 0x4f, 0x6e, 0x65, 0x6f, 0x66, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52,
-	0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0xe3, 0x02, 0x0a, 0x13, 0x45, 0x6e, 0x75,
-	0x6d, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f,
-	0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04,
-	0x6e, 0x61, 0x6d, 0x65, 0x12, 0x3f, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20,
-	0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
-	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x6e, 0x75, 0x6d, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x44,
-	0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x52, 0x05,
-	0x76, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x36, 0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73,
-	0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
-	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x6e, 0x75, 0x6d, 0x4f, 0x70, 0x74,
-	0x69, 0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x5d, 0x0a,
-	0x0e, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x5f, 0x72, 0x61, 0x6e, 0x67, 0x65, 0x18,
-	0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x36, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
-	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x6e, 0x75, 0x6d, 0x44, 0x65, 0x73, 0x63,
-	0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x45, 0x6e, 0x75, 0x6d,
-	0x52, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x52, 0x0d, 0x72,
-	0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x12, 0x23, 0x0a, 0x0d,
-	0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x05, 0x20,
-	0x03, 0x28, 0x09, 0x52, 0x0c, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x4e, 0x61, 0x6d,
-	0x65, 0x1a, 0x3b, 0x0a, 0x11, 0x45, 0x6e, 0x75, 0x6d, 0x52, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65,
-	0x64, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x18,
+	0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69,
+	0x6f, 0x6e, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x52, 0x0e, 0x65, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69,
+	0x6f, 0x6e, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x12, 0x44, 0x0a, 0x0a, 0x6f, 0x6e, 0x65, 0x6f, 0x66,
+	0x5f, 0x64, 0x65, 0x63, 0x6c, 0x18, 0x08, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x67, 0x6f,
+	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x4f, 0x6e,
+	0x65, 0x6f, 0x66, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f,
+	0x74, 0x6f, 0x52, 0x09, 0x6f, 0x6e, 0x65, 0x6f, 0x66, 0x44, 0x65, 0x63, 0x6c, 0x12, 0x39, 0x0a,
+	0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f,
+	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
+	0x2e, 0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52,
+	0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x55, 0x0a, 0x0e, 0x72, 0x65, 0x73, 0x65,
+	0x72, 0x76, 0x65, 0x64, 0x5f, 0x72, 0x61, 0x6e, 0x67, 0x65, 0x18, 0x09, 0x20, 0x03, 0x28, 0x0b,
+	0x32, 0x2e, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
+	0x75, 0x66, 0x2e, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f,
+	0x74, 0x6f, 0x2e, 0x52, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x52, 0x61, 0x6e, 0x67, 0x65,
+	0x52, 0x0d, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x12,
+	0x23, 0x0a, 0x0d, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x5f, 0x6e, 0x61, 0x6d, 0x65,
+	0x18, 0x0a, 0x20, 0x03, 0x28, 0x09, 0x52, 0x0c, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64,
+	0x4e, 0x61, 0x6d, 0x65, 0x1a, 0x7a, 0x0a, 0x0e, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f,
+	0x6e, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x18,
 	0x01, 0x20, 0x01, 0x28, 0x05, 0x52, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x12, 0x10, 0x0a, 0x03,
-	0x65, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x05, 0x52, 0x03, 0x65, 0x6e, 0x64, 0x22, 0x83,
-	0x01, 0x0a, 0x18, 0x45, 0x6e, 0x75, 0x6d, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x44, 0x65, 0x73, 0x63,
-	0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x12, 0x0a, 0x04, 0x6e,
-	0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12,
-	0x16, 0x0a, 0x06, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x18, 0x02, 0x20, 0x01, 0x28, 0x05, 0x52,
-	0x06, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x12, 0x3b, 0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f,
-	0x6e, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
-	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x6e, 0x75, 0x6d, 0x56,
-	0x61, 0x6c, 0x75, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f, 0x70, 0x74,
-	0x69, 0x6f, 0x6e, 0x73, 0x22, 0xa7, 0x01, 0x0a, 0x16, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65,
+	0x65, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x05, 0x52, 0x03, 0x65, 0x6e, 0x64, 0x12, 0x40,
+	0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x26, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
+	0x66, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x61, 0x6e, 0x67, 0x65,
+	0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73,
+	0x1a, 0x37, 0x0a, 0x0d, 0x52, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x52, 0x61, 0x6e, 0x67,
+	0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x05,
+	0x52, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74, 0x12, 0x10, 0x0a, 0x03, 0x65, 0x6e, 0x64, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x05, 0x52, 0x03, 0x65, 0x6e, 0x64, 0x22, 0xc7, 0x04, 0x0a, 0x15, 0x45, 0x78,
+	0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x4f, 0x70, 0x74, 0x69,
+	0x6f, 0x6e, 0x73, 0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72,
+	0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0xe7, 0x07, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74,
+	0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65,
+	0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x59, 0x0a,
+	0x0b, 0x64, 0x65, 0x63, 0x6c, 0x61, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x32, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x61,
+	0x6e, 0x67, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x44, 0x65, 0x63, 0x6c, 0x61,
+	0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x03, 0x88, 0x01, 0x02, 0x52, 0x0b, 0x64, 0x65, 0x63,
+	0x6c, 0x61, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x37, 0x0a, 0x08, 0x66, 0x65, 0x61, 0x74,
+	0x75, 0x72, 0x65, 0x73, 0x18, 0x32, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f,
+	0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x65, 0x61,
+	0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x52, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65,
+	0x73, 0x12, 0x68, 0x0a, 0x0c, 0x76, 0x65, 0x72, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f,
+	0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x38, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73,
+	0x69, 0x6f, 0x6e, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e,
+	0x56, 0x65, 0x72, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x53, 0x74, 0x61, 0x74,
+	0x65, 0x3a, 0x0a, 0x55, 0x4e, 0x56, 0x45, 0x52, 0x49, 0x46, 0x49, 0x45, 0x44, 0x52, 0x0c, 0x76,
+	0x65, 0x72, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x1a, 0x94, 0x01, 0x0a, 0x0b,
+	0x44, 0x65, 0x63, 0x6c, 0x61, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x16, 0x0a, 0x06, 0x6e,
+	0x75, 0x6d, 0x62, 0x65, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x05, 0x52, 0x06, 0x6e, 0x75, 0x6d,
+	0x62, 0x65, 0x72, 0x12, 0x1b, 0x0a, 0x09, 0x66, 0x75, 0x6c, 0x6c, 0x5f, 0x6e, 0x61, 0x6d, 0x65,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x66, 0x75, 0x6c, 0x6c, 0x4e, 0x61, 0x6d, 0x65,
+	0x12, 0x12, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04,
+	0x74, 0x79, 0x70, 0x65, 0x12, 0x1a, 0x0a, 0x08, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64,
+	0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64,
+	0x12, 0x1a, 0x0a, 0x08, 0x72, 0x65, 0x70, 0x65, 0x61, 0x74, 0x65, 0x64, 0x18, 0x06, 0x20, 0x01,
+	0x28, 0x08, 0x52, 0x08, 0x72, 0x65, 0x70, 0x65, 0x61, 0x74, 0x65, 0x64, 0x4a, 0x04, 0x08, 0x04,
+	0x10, 0x05, 0x22, 0x34, 0x0a, 0x11, 0x56, 0x65, 0x72, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x69,
+	0x6f, 0x6e, 0x53, 0x74, 0x61, 0x74, 0x65, 0x12, 0x0f, 0x0a, 0x0b, 0x44, 0x45, 0x43, 0x4c, 0x41,
+	0x52, 0x41, 0x54, 0x49, 0x4f, 0x4e, 0x10, 0x00, 0x12, 0x0e, 0x0a, 0x0a, 0x55, 0x4e, 0x56, 0x45,
+	0x52, 0x49, 0x46, 0x49, 0x45, 0x44, 0x10, 0x01, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10, 0x80, 0x80,
+	0x80, 0x80, 0x02, 0x22, 0xc1, 0x06, 0x0a, 0x14, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x44, 0x65, 0x73,
+	0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x12, 0x0a, 0x04,
+	0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65,
+	0x12, 0x16, 0x0a, 0x06, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x18, 0x03, 0x20, 0x01, 0x28, 0x05,
+	0x52, 0x06, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x12, 0x41, 0x0a, 0x05, 0x6c, 0x61, 0x62, 0x65,
+	0x6c, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x44,
+	0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x4c,
+	0x61, 0x62, 0x65, 0x6c, 0x52, 0x05, 0x6c, 0x61, 0x62, 0x65, 0x6c, 0x12, 0x3e, 0x0a, 0x04, 0x74,
+	0x79, 0x70, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2a, 0x2e, 0x67, 0x6f, 0x6f, 0x67,
+	0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c,
+	0x64, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f,
+	0x2e, 0x54, 0x79, 0x70, 0x65, 0x52, 0x04, 0x74, 0x79, 0x70, 0x65, 0x12, 0x1b, 0x0a, 0x09, 0x74,
+	0x79, 0x70, 0x65, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08,
+	0x74, 0x79, 0x70, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x1a, 0x0a, 0x08, 0x65, 0x78, 0x74, 0x65,
+	0x6e, 0x64, 0x65, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x65, 0x78, 0x74, 0x65,
+	0x6e, 0x64, 0x65, 0x65, 0x12, 0x23, 0x0a, 0x0d, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x5f,
+	0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x07, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0c, 0x64, 0x65, 0x66,
+	0x61, 0x75, 0x6c, 0x74, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x6f, 0x6e, 0x65,
+	0x6f, 0x66, 0x5f, 0x69, 0x6e, 0x64, 0x65, 0x78, 0x18, 0x09, 0x20, 0x01, 0x28, 0x05, 0x52, 0x0a,
+	0x6f, 0x6e, 0x65, 0x6f, 0x66, 0x49, 0x6e, 0x64, 0x65, 0x78, 0x12, 0x1b, 0x0a, 0x09, 0x6a, 0x73,
+	0x6f, 0x6e, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x6a,
+	0x73, 0x6f, 0x6e, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x37, 0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x73, 0x18, 0x08, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
+	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64,
+	0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73,
+	0x12, 0x27, 0x0a, 0x0f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x61, 0x6c, 0x18, 0x11, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x33, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x61, 0x6c, 0x22, 0xb6, 0x02, 0x0a, 0x04, 0x54, 0x79,
+	0x70, 0x65, 0x12, 0x0f, 0x0a, 0x0b, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x44, 0x4f, 0x55, 0x42, 0x4c,
+	0x45, 0x10, 0x01, 0x12, 0x0e, 0x0a, 0x0a, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x46, 0x4c, 0x4f, 0x41,
+	0x54, 0x10, 0x02, 0x12, 0x0e, 0x0a, 0x0a, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x49, 0x4e, 0x54, 0x36,
+	0x34, 0x10, 0x03, 0x12, 0x0f, 0x0a, 0x0b, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x55, 0x49, 0x4e, 0x54,
+	0x36, 0x34, 0x10, 0x04, 0x12, 0x0e, 0x0a, 0x0a, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x49, 0x4e, 0x54,
+	0x33, 0x32, 0x10, 0x05, 0x12, 0x10, 0x0a, 0x0c, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x46, 0x49, 0x58,
+	0x45, 0x44, 0x36, 0x34, 0x10, 0x06, 0x12, 0x10, 0x0a, 0x0c, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x46,
+	0x49, 0x58, 0x45, 0x44, 0x33, 0x32, 0x10, 0x07, 0x12, 0x0d, 0x0a, 0x09, 0x54, 0x59, 0x50, 0x45,
+	0x5f, 0x42, 0x4f, 0x4f, 0x4c, 0x10, 0x08, 0x12, 0x0f, 0x0a, 0x0b, 0x54, 0x59, 0x50, 0x45, 0x5f,
+	0x53, 0x54, 0x52, 0x49, 0x4e, 0x47, 0x10, 0x09, 0x12, 0x0e, 0x0a, 0x0a, 0x54, 0x59, 0x50, 0x45,
+	0x5f, 0x47, 0x52, 0x4f, 0x55, 0x50, 0x10, 0x0a, 0x12, 0x10, 0x0a, 0x0c, 0x54, 0x59, 0x50, 0x45,
+	0x5f, 0x4d, 0x45, 0x53, 0x53, 0x41, 0x47, 0x45, 0x10, 0x0b, 0x12, 0x0e, 0x0a, 0x0a, 0x54, 0x59,
+	0x50, 0x45, 0x5f, 0x42, 0x59, 0x54, 0x45, 0x53, 0x10, 0x0c, 0x12, 0x0f, 0x0a, 0x0b, 0x54, 0x59,
+	0x50, 0x45, 0x5f, 0x55, 0x49, 0x4e, 0x54, 0x33, 0x32, 0x10, 0x0d, 0x12, 0x0d, 0x0a, 0x09, 0x54,
+	0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x10, 0x0e, 0x12, 0x11, 0x0a, 0x0d, 0x54, 0x59,
+	0x50, 0x45, 0x5f, 0x53, 0x46, 0x49, 0x58, 0x45, 0x44, 0x33, 0x32, 0x10, 0x0f, 0x12, 0x11, 0x0a,
+	0x0d, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x53, 0x46, 0x49, 0x58, 0x45, 0x44, 0x36, 0x34, 0x10, 0x10,
+	0x12, 0x0f, 0x0a, 0x0b, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x53, 0x49, 0x4e, 0x54, 0x33, 0x32, 0x10,
+	0x11, 0x12, 0x0f, 0x0a, 0x0b, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x53, 0x49, 0x4e, 0x54, 0x36, 0x34,
+	0x10, 0x12, 0x22, 0x43, 0x0a, 0x05, 0x4c, 0x61, 0x62, 0x65, 0x6c, 0x12, 0x12, 0x0a, 0x0e, 0x4c,
+	0x41, 0x42, 0x45, 0x4c, 0x5f, 0x4f, 0x50, 0x54, 0x49, 0x4f, 0x4e, 0x41, 0x4c, 0x10, 0x01, 0x12,
+	0x12, 0x0a, 0x0e, 0x4c, 0x41, 0x42, 0x45, 0x4c, 0x5f, 0x52, 0x45, 0x50, 0x45, 0x41, 0x54, 0x45,
+	0x44, 0x10, 0x03, 0x12, 0x12, 0x0a, 0x0e, 0x4c, 0x41, 0x42, 0x45, 0x4c, 0x5f, 0x52, 0x45, 0x51,
+	0x55, 0x49, 0x52, 0x45, 0x44, 0x10, 0x02, 0x22, 0x63, 0x0a, 0x14, 0x4f, 0x6e, 0x65, 0x6f, 0x66,
+	0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x12,
+	0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e,
+	0x61, 0x6d, 0x65, 0x12, 0x37, 0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x1d, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x4f, 0x6e, 0x65, 0x6f, 0x66, 0x4f, 0x70, 0x74, 0x69,
+	0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0xe3, 0x02, 0x0a,
+	0x13, 0x45, 0x6e, 0x75, 0x6d, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50,
+	0x72, 0x6f, 0x74, 0x6f, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x3f, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75,
+	0x65, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x29, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x6e, 0x75, 0x6d, 0x56, 0x61,
+	0x6c, 0x75, 0x65, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f,
+	0x74, 0x6f, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x36, 0x0a, 0x07, 0x6f, 0x70, 0x74,
+	0x69, 0x6f, 0x6e, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f,
+	0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x6e, 0x75,
+	0x6d, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
+	0x73, 0x12, 0x5d, 0x0a, 0x0e, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x5f, 0x72, 0x61,
+	0x6e, 0x67, 0x65, 0x18, 0x04, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x36, 0x2e, 0x67, 0x6f, 0x6f, 0x67,
+	0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x6e, 0x75, 0x6d,
+	0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x2e,
+	0x45, 0x6e, 0x75, 0x6d, 0x52, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x52, 0x61, 0x6e, 0x67,
+	0x65, 0x52, 0x0d, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x52, 0x61, 0x6e, 0x67, 0x65,
+	0x12, 0x23, 0x0a, 0x0d, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x64, 0x5f, 0x6e, 0x61, 0x6d,
+	0x65, 0x18, 0x05, 0x20, 0x03, 0x28, 0x09, 0x52, 0x0c, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65,
+	0x64, 0x4e, 0x61, 0x6d, 0x65, 0x1a, 0x3b, 0x0a, 0x11, 0x45, 0x6e, 0x75, 0x6d, 0x52, 0x65, 0x73,
+	0x65, 0x72, 0x76, 0x65, 0x64, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x73, 0x74,
+	0x61, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x05, 0x52, 0x05, 0x73, 0x74, 0x61, 0x72, 0x74,
+	0x12, 0x10, 0x0a, 0x03, 0x65, 0x6e, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x05, 0x52, 0x03, 0x65,
+	0x6e, 0x64, 0x22, 0x83, 0x01, 0x0a, 0x18, 0x45, 0x6e, 0x75, 0x6d, 0x56, 0x61, 0x6c, 0x75, 0x65,
 	0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x12,
 	0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e,
-	0x61, 0x6d, 0x65, 0x12, 0x3e, 0x0a, 0x06, 0x6d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x18, 0x02, 0x20,
-	0x03, 0x28, 0x0b, 0x32, 0x26, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
-	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x44, 0x65, 0x73, 0x63,
-	0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x52, 0x06, 0x6d, 0x65, 0x74,
-	0x68, 0x6f, 0x64, 0x12, 0x39, 0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x03,
-	0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
-	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x4f, 0x70,
-	0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x89,
-	0x02, 0x0a, 0x15, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70,
-	0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x1d, 0x0a, 0x0a,
-	0x69, 0x6e, 0x70, 0x75, 0x74, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x09, 0x69, 0x6e, 0x70, 0x75, 0x74, 0x54, 0x79, 0x70, 0x65, 0x12, 0x1f, 0x0a, 0x0b, 0x6f,
-	0x75, 0x74, 0x70, 0x75, 0x74, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x0a, 0x6f, 0x75, 0x74, 0x70, 0x75, 0x74, 0x54, 0x79, 0x70, 0x65, 0x12, 0x38, 0x0a, 0x07,
-	0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1e, 0x2e,
+	0x61, 0x6d, 0x65, 0x12, 0x16, 0x0a, 0x06, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x18, 0x02, 0x20,
+	0x01, 0x28, 0x05, 0x52, 0x06, 0x6e, 0x75, 0x6d, 0x62, 0x65, 0x72, 0x12, 0x3b, 0x0a, 0x07, 0x6f,
+	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x67,
+	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45,
+	0x6e, 0x75, 0x6d, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52,
+	0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0xa7, 0x01, 0x0a, 0x16, 0x53, 0x65, 0x72,
+	0x76, 0x69, 0x63, 0x65, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72,
+	0x6f, 0x74, 0x6f, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x3e, 0x0a, 0x06, 0x6d, 0x65, 0x74, 0x68, 0x6f,
+	0x64, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x26, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64,
+	0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x52,
+	0x06, 0x6d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x12, 0x39, 0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
+	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x53, 0x65, 0x72, 0x76, 0x69,
+	0x63, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x73, 0x22, 0x89, 0x02, 0x0a, 0x15, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x44, 0x65, 0x73,
+	0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x12, 0x0a, 0x04,
+	0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65,
+	0x12, 0x1d, 0x0a, 0x0a, 0x69, 0x6e, 0x70, 0x75, 0x74, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x09, 0x69, 0x6e, 0x70, 0x75, 0x74, 0x54, 0x79, 0x70, 0x65, 0x12,
+	0x1f, 0x0a, 0x0b, 0x6f, 0x75, 0x74, 0x70, 0x75, 0x74, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x03,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x6f, 0x75, 0x74, 0x70, 0x75, 0x74, 0x54, 0x79, 0x70, 0x65,
+	0x12, 0x38, 0x0a, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x04, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x1e, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x62, 0x75, 0x66, 0x2e, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
+	0x73, 0x52, 0x07, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x30, 0x0a, 0x10, 0x63, 0x6c,
+	0x69, 0x65, 0x6e, 0x74, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x69, 0x6e, 0x67, 0x18, 0x05,
+	0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0f, 0x63, 0x6c, 0x69,
+	0x65, 0x6e, 0x74, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x69, 0x6e, 0x67, 0x12, 0x30, 0x0a, 0x10,
+	0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x69, 0x6e, 0x67,
+	0x18, 0x06, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0f, 0x73,
+	0x65, 0x72, 0x76, 0x65, 0x72, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x69, 0x6e, 0x67, 0x22, 0xca,
+	0x09, 0x0a, 0x0b, 0x46, 0x69, 0x6c, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x21,
+	0x0a, 0x0c, 0x6a, 0x61, 0x76, 0x61, 0x5f, 0x70, 0x61, 0x63, 0x6b, 0x61, 0x67, 0x65, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x6a, 0x61, 0x76, 0x61, 0x50, 0x61, 0x63, 0x6b, 0x61, 0x67,
+	0x65, 0x12, 0x30, 0x0a, 0x14, 0x6a, 0x61, 0x76, 0x61, 0x5f, 0x6f, 0x75, 0x74, 0x65, 0x72, 0x5f,
+	0x63, 0x6c, 0x61, 0x73, 0x73, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x08, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x12, 0x6a, 0x61, 0x76, 0x61, 0x4f, 0x75, 0x74, 0x65, 0x72, 0x43, 0x6c, 0x61, 0x73, 0x73, 0x6e,
+	0x61, 0x6d, 0x65, 0x12, 0x35, 0x0a, 0x13, 0x6a, 0x61, 0x76, 0x61, 0x5f, 0x6d, 0x75, 0x6c, 0x74,
+	0x69, 0x70, 0x6c, 0x65, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x73, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x08,
+	0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x11, 0x6a, 0x61, 0x76, 0x61, 0x4d, 0x75, 0x6c,
+	0x74, 0x69, 0x70, 0x6c, 0x65, 0x46, 0x69, 0x6c, 0x65, 0x73, 0x12, 0x44, 0x0a, 0x1d, 0x6a, 0x61,
+	0x76, 0x61, 0x5f, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x65, 0x5f, 0x65, 0x71, 0x75, 0x61,
+	0x6c, 0x73, 0x5f, 0x61, 0x6e, 0x64, 0x5f, 0x68, 0x61, 0x73, 0x68, 0x18, 0x14, 0x20, 0x01, 0x28,
+	0x08, 0x42, 0x02, 0x18, 0x01, 0x52, 0x19, 0x6a, 0x61, 0x76, 0x61, 0x47, 0x65, 0x6e, 0x65, 0x72,
+	0x61, 0x74, 0x65, 0x45, 0x71, 0x75, 0x61, 0x6c, 0x73, 0x41, 0x6e, 0x64, 0x48, 0x61, 0x73, 0x68,
+	0x12, 0x3a, 0x0a, 0x16, 0x6a, 0x61, 0x76, 0x61, 0x5f, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x5f,
+	0x63, 0x68, 0x65, 0x63, 0x6b, 0x5f, 0x75, 0x74, 0x66, 0x38, 0x18, 0x1b, 0x20, 0x01, 0x28, 0x08,
+	0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x13, 0x6a, 0x61, 0x76, 0x61, 0x53, 0x74, 0x72,
+	0x69, 0x6e, 0x67, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x55, 0x74, 0x66, 0x38, 0x12, 0x53, 0x0a, 0x0c,
+	0x6f, 0x70, 0x74, 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x5f, 0x66, 0x6f, 0x72, 0x18, 0x09, 0x20, 0x01,
+	0x28, 0x0e, 0x32, 0x29, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x6c, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73,
+	0x2e, 0x4f, 0x70, 0x74, 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x4d, 0x6f, 0x64, 0x65, 0x3a, 0x05, 0x53,
+	0x50, 0x45, 0x45, 0x44, 0x52, 0x0b, 0x6f, 0x70, 0x74, 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x46, 0x6f,
+	0x72, 0x12, 0x1d, 0x0a, 0x0a, 0x67, 0x6f, 0x5f, 0x70, 0x61, 0x63, 0x6b, 0x61, 0x67, 0x65, 0x18,
+	0x0b, 0x20, 0x01, 0x28, 0x09, 0x52, 0x09, 0x67, 0x6f, 0x50, 0x61, 0x63, 0x6b, 0x61, 0x67, 0x65,
+	0x12, 0x35, 0x0a, 0x13, 0x63, 0x63, 0x5f, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x5f, 0x73,
+	0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x73, 0x18, 0x10, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66,
+	0x61, 0x6c, 0x73, 0x65, 0x52, 0x11, 0x63, 0x63, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x53,
+	0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x73, 0x12, 0x39, 0x0a, 0x15, 0x6a, 0x61, 0x76, 0x61, 0x5f,
+	0x67, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x73,
+	0x18, 0x11, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x13, 0x6a,
+	0x61, 0x76, 0x61, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63,
+	0x65, 0x73, 0x12, 0x35, 0x0a, 0x13, 0x70, 0x79, 0x5f, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63,
+	0x5f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x73, 0x18, 0x12, 0x20, 0x01, 0x28, 0x08, 0x3a,
+	0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x11, 0x70, 0x79, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x69,
+	0x63, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x73, 0x12, 0x37, 0x0a, 0x14, 0x70, 0x68, 0x70,
+	0x5f, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65,
+	0x73, 0x18, 0x2a, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x12,
+	0x70, 0x68, 0x70, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63,
+	0x65, 0x73, 0x12, 0x25, 0x0a, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64,
+	0x18, 0x17, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0a, 0x64,
+	0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x12, 0x2e, 0x0a, 0x10, 0x63, 0x63, 0x5f,
+	0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x61, 0x72, 0x65, 0x6e, 0x61, 0x73, 0x18, 0x1f, 0x20,
+	0x01, 0x28, 0x08, 0x3a, 0x04, 0x74, 0x72, 0x75, 0x65, 0x52, 0x0e, 0x63, 0x63, 0x45, 0x6e, 0x61,
+	0x62, 0x6c, 0x65, 0x41, 0x72, 0x65, 0x6e, 0x61, 0x73, 0x12, 0x2a, 0x0a, 0x11, 0x6f, 0x62, 0x6a,
+	0x63, 0x5f, 0x63, 0x6c, 0x61, 0x73, 0x73, 0x5f, 0x70, 0x72, 0x65, 0x66, 0x69, 0x78, 0x18, 0x24,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x0f, 0x6f, 0x62, 0x6a, 0x63, 0x43, 0x6c, 0x61, 0x73, 0x73, 0x50,
+	0x72, 0x65, 0x66, 0x69, 0x78, 0x12, 0x29, 0x0a, 0x10, 0x63, 0x73, 0x68, 0x61, 0x72, 0x70, 0x5f,
+	0x6e, 0x61, 0x6d, 0x65, 0x73, 0x70, 0x61, 0x63, 0x65, 0x18, 0x25, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x0f, 0x63, 0x73, 0x68, 0x61, 0x72, 0x70, 0x4e, 0x61, 0x6d, 0x65, 0x73, 0x70, 0x61, 0x63, 0x65,
+	0x12, 0x21, 0x0a, 0x0c, 0x73, 0x77, 0x69, 0x66, 0x74, 0x5f, 0x70, 0x72, 0x65, 0x66, 0x69, 0x78,
+	0x18, 0x27, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x73, 0x77, 0x69, 0x66, 0x74, 0x50, 0x72, 0x65,
+	0x66, 0x69, 0x78, 0x12, 0x28, 0x0a, 0x10, 0x70, 0x68, 0x70, 0x5f, 0x63, 0x6c, 0x61, 0x73, 0x73,
+	0x5f, 0x70, 0x72, 0x65, 0x66, 0x69, 0x78, 0x18, 0x28, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0e, 0x70,
+	0x68, 0x70, 0x43, 0x6c, 0x61, 0x73, 0x73, 0x50, 0x72, 0x65, 0x66, 0x69, 0x78, 0x12, 0x23, 0x0a,
+	0x0d, 0x70, 0x68, 0x70, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x73, 0x70, 0x61, 0x63, 0x65, 0x18, 0x29,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x0c, 0x70, 0x68, 0x70, 0x4e, 0x61, 0x6d, 0x65, 0x73, 0x70, 0x61,
+	0x63, 0x65, 0x12, 0x34, 0x0a, 0x16, 0x70, 0x68, 0x70, 0x5f, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61,
+	0x74, 0x61, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x73, 0x70, 0x61, 0x63, 0x65, 0x18, 0x2c, 0x20, 0x01,
+	0x28, 0x09, 0x52, 0x14, 0x70, 0x68, 0x70, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x4e,
+	0x61, 0x6d, 0x65, 0x73, 0x70, 0x61, 0x63, 0x65, 0x12, 0x21, 0x0a, 0x0c, 0x72, 0x75, 0x62, 0x79,
+	0x5f, 0x70, 0x61, 0x63, 0x6b, 0x61, 0x67, 0x65, 0x18, 0x2d, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b,
+	0x72, 0x75, 0x62, 0x79, 0x50, 0x61, 0x63, 0x6b, 0x61, 0x67, 0x65, 0x12, 0x37, 0x0a, 0x08, 0x66,
+	0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x18, 0x32, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1b, 0x2e,
 	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e,
-	0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x07, 0x6f,
-	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x30, 0x0a, 0x10, 0x63, 0x6c, 0x69, 0x65, 0x6e, 0x74,
-	0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x69, 0x6e, 0x67, 0x18, 0x05, 0x20, 0x01, 0x28, 0x08,
-	0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0f, 0x63, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x53,
-	0x74, 0x72, 0x65, 0x61, 0x6d, 0x69, 0x6e, 0x67, 0x12, 0x30, 0x0a, 0x10, 0x73, 0x65, 0x72, 0x76,
-	0x65, 0x72, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x69, 0x6e, 0x67, 0x18, 0x06, 0x20, 0x01,
-	0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0f, 0x73, 0x65, 0x72, 0x76, 0x65,
-	0x72, 0x53, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x69, 0x6e, 0x67, 0x22, 0x91, 0x09, 0x0a, 0x0b, 0x46,
-	0x69, 0x6c, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x21, 0x0a, 0x0c, 0x6a, 0x61,
-	0x76, 0x61, 0x5f, 0x70, 0x61, 0x63, 0x6b, 0x61, 0x67, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x0b, 0x6a, 0x61, 0x76, 0x61, 0x50, 0x61, 0x63, 0x6b, 0x61, 0x67, 0x65, 0x12, 0x30, 0x0a,
-	0x14, 0x6a, 0x61, 0x76, 0x61, 0x5f, 0x6f, 0x75, 0x74, 0x65, 0x72, 0x5f, 0x63, 0x6c, 0x61, 0x73,
-	0x73, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x08, 0x20, 0x01, 0x28, 0x09, 0x52, 0x12, 0x6a, 0x61, 0x76,
-	0x61, 0x4f, 0x75, 0x74, 0x65, 0x72, 0x43, 0x6c, 0x61, 0x73, 0x73, 0x6e, 0x61, 0x6d, 0x65, 0x12,
-	0x35, 0x0a, 0x13, 0x6a, 0x61, 0x76, 0x61, 0x5f, 0x6d, 0x75, 0x6c, 0x74, 0x69, 0x70, 0x6c, 0x65,
-	0x5f, 0x66, 0x69, 0x6c, 0x65, 0x73, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61,
-	0x6c, 0x73, 0x65, 0x52, 0x11, 0x6a, 0x61, 0x76, 0x61, 0x4d, 0x75, 0x6c, 0x74, 0x69, 0x70, 0x6c,
-	0x65, 0x46, 0x69, 0x6c, 0x65, 0x73, 0x12, 0x44, 0x0a, 0x1d, 0x6a, 0x61, 0x76, 0x61, 0x5f, 0x67,
-	0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x65, 0x5f, 0x65, 0x71, 0x75, 0x61, 0x6c, 0x73, 0x5f, 0x61,
-	0x6e, 0x64, 0x5f, 0x68, 0x61, 0x73, 0x68, 0x18, 0x14, 0x20, 0x01, 0x28, 0x08, 0x42, 0x02, 0x18,
-	0x01, 0x52, 0x19, 0x6a, 0x61, 0x76, 0x61, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x65, 0x45,
-	0x71, 0x75, 0x61, 0x6c, 0x73, 0x41, 0x6e, 0x64, 0x48, 0x61, 0x73, 0x68, 0x12, 0x3a, 0x0a, 0x16,
-	0x6a, 0x61, 0x76, 0x61, 0x5f, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x5f, 0x63, 0x68, 0x65, 0x63,
-	0x6b, 0x5f, 0x75, 0x74, 0x66, 0x38, 0x18, 0x1b, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61,
-	0x6c, 0x73, 0x65, 0x52, 0x13, 0x6a, 0x61, 0x76, 0x61, 0x53, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x43,
-	0x68, 0x65, 0x63, 0x6b, 0x55, 0x74, 0x66, 0x38, 0x12, 0x53, 0x0a, 0x0c, 0x6f, 0x70, 0x74, 0x69,
-	0x6d, 0x69, 0x7a, 0x65, 0x5f, 0x66, 0x6f, 0x72, 0x18, 0x09, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x29,
-	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
-	0x2e, 0x46, 0x69, 0x6c, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x4f, 0x70, 0x74,
-	0x69, 0x6d, 0x69, 0x7a, 0x65, 0x4d, 0x6f, 0x64, 0x65, 0x3a, 0x05, 0x53, 0x50, 0x45, 0x45, 0x44,
-	0x52, 0x0b, 0x6f, 0x70, 0x74, 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x46, 0x6f, 0x72, 0x12, 0x1d, 0x0a,
-	0x0a, 0x67, 0x6f, 0x5f, 0x70, 0x61, 0x63, 0x6b, 0x61, 0x67, 0x65, 0x18, 0x0b, 0x20, 0x01, 0x28,
-	0x09, 0x52, 0x09, 0x67, 0x6f, 0x50, 0x61, 0x63, 0x6b, 0x61, 0x67, 0x65, 0x12, 0x35, 0x0a, 0x13,
-	0x63, 0x63, 0x5f, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x69,
-	0x63, 0x65, 0x73, 0x18, 0x10, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65,
-	0x52, 0x11, 0x63, 0x63, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x53, 0x65, 0x72, 0x76, 0x69,
-	0x63, 0x65, 0x73, 0x12, 0x39, 0x0a, 0x15, 0x6a, 0x61, 0x76, 0x61, 0x5f, 0x67, 0x65, 0x6e, 0x65,
-	0x72, 0x69, 0x63, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x73, 0x18, 0x11, 0x20, 0x01,
-	0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x13, 0x6a, 0x61, 0x76, 0x61, 0x47,
-	0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x73, 0x12, 0x35,
-	0x0a, 0x13, 0x70, 0x79, 0x5f, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x5f, 0x73, 0x65, 0x72,
-	0x76, 0x69, 0x63, 0x65, 0x73, 0x18, 0x12, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c,
-	0x73, 0x65, 0x52, 0x11, 0x70, 0x79, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x53, 0x65, 0x72,
-	0x76, 0x69, 0x63, 0x65, 0x73, 0x12, 0x37, 0x0a, 0x14, 0x70, 0x68, 0x70, 0x5f, 0x67, 0x65, 0x6e,
-	0x65, 0x72, 0x69, 0x63, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x73, 0x18, 0x2a, 0x20,
-	0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x12, 0x70, 0x68, 0x70, 0x47,
-	0x65, 0x6e, 0x65, 0x72, 0x69, 0x63, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x73, 0x12, 0x25,
-	0x0a, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x18, 0x17, 0x20, 0x01,
-	0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65,
-	0x63, 0x61, 0x74, 0x65, 0x64, 0x12, 0x2e, 0x0a, 0x10, 0x63, 0x63, 0x5f, 0x65, 0x6e, 0x61, 0x62,
-	0x6c, 0x65, 0x5f, 0x61, 0x72, 0x65, 0x6e, 0x61, 0x73, 0x18, 0x1f, 0x20, 0x01, 0x28, 0x08, 0x3a,
-	0x04, 0x74, 0x72, 0x75, 0x65, 0x52, 0x0e, 0x63, 0x63, 0x45, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x41,
-	0x72, 0x65, 0x6e, 0x61, 0x73, 0x12, 0x2a, 0x0a, 0x11, 0x6f, 0x62, 0x6a, 0x63, 0x5f, 0x63, 0x6c,
-	0x61, 0x73, 0x73, 0x5f, 0x70, 0x72, 0x65, 0x66, 0x69, 0x78, 0x18, 0x24, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x0f, 0x6f, 0x62, 0x6a, 0x63, 0x43, 0x6c, 0x61, 0x73, 0x73, 0x50, 0x72, 0x65, 0x66, 0x69,
-	0x78, 0x12, 0x29, 0x0a, 0x10, 0x63, 0x73, 0x68, 0x61, 0x72, 0x70, 0x5f, 0x6e, 0x61, 0x6d, 0x65,
-	0x73, 0x70, 0x61, 0x63, 0x65, 0x18, 0x25, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0f, 0x63, 0x73, 0x68,
-	0x61, 0x72, 0x70, 0x4e, 0x61, 0x6d, 0x65, 0x73, 0x70, 0x61, 0x63, 0x65, 0x12, 0x21, 0x0a, 0x0c,
-	0x73, 0x77, 0x69, 0x66, 0x74, 0x5f, 0x70, 0x72, 0x65, 0x66, 0x69, 0x78, 0x18, 0x27, 0x20, 0x01,
-	0x28, 0x09, 0x52, 0x0b, 0x73, 0x77, 0x69, 0x66, 0x74, 0x50, 0x72, 0x65, 0x66, 0x69, 0x78, 0x12,
-	0x28, 0x0a, 0x10, 0x70, 0x68, 0x70, 0x5f, 0x63, 0x6c, 0x61, 0x73, 0x73, 0x5f, 0x70, 0x72, 0x65,
-	0x66, 0x69, 0x78, 0x18, 0x28, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0e, 0x70, 0x68, 0x70, 0x43, 0x6c,
-	0x61, 0x73, 0x73, 0x50, 0x72, 0x65, 0x66, 0x69, 0x78, 0x12, 0x23, 0x0a, 0x0d, 0x70, 0x68, 0x70,
-	0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x73, 0x70, 0x61, 0x63, 0x65, 0x18, 0x29, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x0c, 0x70, 0x68, 0x70, 0x4e, 0x61, 0x6d, 0x65, 0x73, 0x70, 0x61, 0x63, 0x65, 0x12, 0x34,
-	0x0a, 0x16, 0x70, 0x68, 0x70, 0x5f, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x5f, 0x6e,
-	0x61, 0x6d, 0x65, 0x73, 0x70, 0x61, 0x63, 0x65, 0x18, 0x2c, 0x20, 0x01, 0x28, 0x09, 0x52, 0x14,
-	0x70, 0x68, 0x70, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x4e, 0x61, 0x6d, 0x65, 0x73,
-	0x70, 0x61, 0x63, 0x65, 0x12, 0x21, 0x0a, 0x0c, 0x72, 0x75, 0x62, 0x79, 0x5f, 0x70, 0x61, 0x63,
-	0x6b, 0x61, 0x67, 0x65, 0x18, 0x2d, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x72, 0x75, 0x62, 0x79,
-	0x50, 0x61, 0x63, 0x6b, 0x61, 0x67, 0x65, 0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69, 0x6e, 0x74,
-	0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x18,
-	0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
-	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72,
-	0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13, 0x75, 0x6e,
-	0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f,
-	0x6e, 0x22, 0x3a, 0x0a, 0x0c, 0x4f, 0x70, 0x74, 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x4d, 0x6f, 0x64,
-	0x65, 0x12, 0x09, 0x0a, 0x05, 0x53, 0x50, 0x45, 0x45, 0x44, 0x10, 0x01, 0x12, 0x0d, 0x0a, 0x09,
-	0x43, 0x4f, 0x44, 0x45, 0x5f, 0x53, 0x49, 0x5a, 0x45, 0x10, 0x02, 0x12, 0x10, 0x0a, 0x0c, 0x4c,
-	0x49, 0x54, 0x45, 0x5f, 0x52, 0x55, 0x4e, 0x54, 0x49, 0x4d, 0x45, 0x10, 0x03, 0x2a, 0x09, 0x08,
-	0xe8, 0x07, 0x10, 0x80, 0x80, 0x80, 0x80, 0x02, 0x4a, 0x04, 0x08, 0x26, 0x10, 0x27, 0x22, 0xbb,
-	0x03, 0x0a, 0x0e, 0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
-	0x73, 0x12, 0x3c, 0x0a, 0x17, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x65, 0x74,
-	0x5f, 0x77, 0x69, 0x72, 0x65, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x14, 0x6d, 0x65, 0x73, 0x73, 0x61,
-	0x67, 0x65, 0x53, 0x65, 0x74, 0x57, 0x69, 0x72, 0x65, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12,
-	0x4c, 0x0a, 0x1f, 0x6e, 0x6f, 0x5f, 0x73, 0x74, 0x61, 0x6e, 0x64, 0x61, 0x72, 0x64, 0x5f, 0x64,
-	0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x5f, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73,
-	0x6f, 0x72, 0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52,
-	0x1c, 0x6e, 0x6f, 0x53, 0x74, 0x61, 0x6e, 0x64, 0x61, 0x72, 0x64, 0x44, 0x65, 0x73, 0x63, 0x72,
-	0x69, 0x70, 0x74, 0x6f, 0x72, 0x41, 0x63, 0x63, 0x65, 0x73, 0x73, 0x6f, 0x72, 0x12, 0x25, 0x0a,
-	0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x18, 0x03, 0x20, 0x01, 0x28,
-	0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63,
-	0x61, 0x74, 0x65, 0x64, 0x12, 0x1b, 0x0a, 0x09, 0x6d, 0x61, 0x70, 0x5f, 0x65, 0x6e, 0x74, 0x72,
-	0x79, 0x18, 0x07, 0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x6d, 0x61, 0x70, 0x45, 0x6e, 0x74, 0x72,
-	0x79, 0x12, 0x56, 0x0a, 0x26, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x5f,
-	0x6c, 0x65, 0x67, 0x61, 0x63, 0x79, 0x5f, 0x6a, 0x73, 0x6f, 0x6e, 0x5f, 0x66, 0x69, 0x65, 0x6c,
-	0x64, 0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x6c, 0x69, 0x63, 0x74, 0x73, 0x18, 0x0b, 0x20, 0x01, 0x28,
-	0x08, 0x42, 0x02, 0x18, 0x01, 0x52, 0x22, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65,
-	0x64, 0x4c, 0x65, 0x67, 0x61, 0x63, 0x79, 0x4a, 0x73, 0x6f, 0x6e, 0x46, 0x69, 0x65, 0x6c, 0x64,
-	0x43, 0x6f, 0x6e, 0x66, 0x6c, 0x69, 0x63, 0x74, 0x73, 0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69,
-	0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f,
-	0x6e, 0x18, 0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
-	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74,
-	0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13,
-	0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74,
-	0x69, 0x6f, 0x6e, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10, 0x80, 0x80, 0x80, 0x80, 0x02, 0x4a, 0x04,
-	0x08, 0x04, 0x10, 0x05, 0x4a, 0x04, 0x08, 0x05, 0x10, 0x06, 0x4a, 0x04, 0x08, 0x06, 0x10, 0x07,
-	0x4a, 0x04, 0x08, 0x08, 0x10, 0x09, 0x4a, 0x04, 0x08, 0x09, 0x10, 0x0a, 0x22, 0x85, 0x09, 0x0a,
-	0x0c, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x41, 0x0a,
-	0x05, 0x63, 0x74, 0x79, 0x70, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x23, 0x2e, 0x67,
-	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46,
-	0x69, 0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x43, 0x54, 0x79, 0x70,
-	0x65, 0x3a, 0x06, 0x53, 0x54, 0x52, 0x49, 0x4e, 0x47, 0x52, 0x05, 0x63, 0x74, 0x79, 0x70, 0x65,
-	0x12, 0x16, 0x0a, 0x06, 0x70, 0x61, 0x63, 0x6b, 0x65, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x08,
-	0x52, 0x06, 0x70, 0x61, 0x63, 0x6b, 0x65, 0x64, 0x12, 0x47, 0x0a, 0x06, 0x6a, 0x73, 0x74, 0x79,
-	0x70, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
-	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64,
-	0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x4a, 0x53, 0x54, 0x79, 0x70, 0x65, 0x3a, 0x09,
-	0x4a, 0x53, 0x5f, 0x4e, 0x4f, 0x52, 0x4d, 0x41, 0x4c, 0x52, 0x06, 0x6a, 0x73, 0x74, 0x79, 0x70,
-	0x65, 0x12, 0x19, 0x0a, 0x04, 0x6c, 0x61, 0x7a, 0x79, 0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x3a,
-	0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x04, 0x6c, 0x61, 0x7a, 0x79, 0x12, 0x2e, 0x0a, 0x0f,
-	0x75, 0x6e, 0x76, 0x65, 0x72, 0x69, 0x66, 0x69, 0x65, 0x64, 0x5f, 0x6c, 0x61, 0x7a, 0x79, 0x18,
-	0x0f, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0e, 0x75, 0x6e,
-	0x76, 0x65, 0x72, 0x69, 0x66, 0x69, 0x65, 0x64, 0x4c, 0x61, 0x7a, 0x79, 0x12, 0x25, 0x0a, 0x0a,
-	0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x18, 0x03, 0x20, 0x01, 0x28, 0x08,
-	0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61,
-	0x74, 0x65, 0x64, 0x12, 0x19, 0x0a, 0x04, 0x77, 0x65, 0x61, 0x6b, 0x18, 0x0a, 0x20, 0x01, 0x28,
-	0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x04, 0x77, 0x65, 0x61, 0x6b, 0x12, 0x28,
-	0x0a, 0x0c, 0x64, 0x65, 0x62, 0x75, 0x67, 0x5f, 0x72, 0x65, 0x64, 0x61, 0x63, 0x74, 0x18, 0x10,
-	0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0b, 0x64, 0x65, 0x62,
-	0x75, 0x67, 0x52, 0x65, 0x64, 0x61, 0x63, 0x74, 0x12, 0x4b, 0x0a, 0x09, 0x72, 0x65, 0x74, 0x65,
-	0x6e, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x11, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2d, 0x2e, 0x67, 0x6f,
-	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69,
-	0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x4f, 0x70, 0x74, 0x69, 0x6f,
-	0x6e, 0x52, 0x65, 0x74, 0x65, 0x6e, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x09, 0x72, 0x65, 0x74, 0x65,
-	0x6e, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x4a, 0x0a, 0x06, 0x74, 0x61, 0x72, 0x67, 0x65, 0x74, 0x18,
-	0x12, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2e, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
-	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74,
-	0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x54, 0x61, 0x72, 0x67, 0x65,
-	0x74, 0x54, 0x79, 0x70, 0x65, 0x42, 0x02, 0x18, 0x01, 0x52, 0x06, 0x74, 0x61, 0x72, 0x67, 0x65,
-	0x74, 0x12, 0x48, 0x0a, 0x07, 0x74, 0x61, 0x72, 0x67, 0x65, 0x74, 0x73, 0x18, 0x13, 0x20, 0x03,
-	0x28, 0x0e, 0x32, 0x2e, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
-	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
-	0x73, 0x2e, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x54, 0x61, 0x72, 0x67, 0x65, 0x74, 0x54, 0x79,
-	0x70, 0x65, 0x52, 0x07, 0x74, 0x61, 0x72, 0x67, 0x65, 0x74, 0x73, 0x12, 0x58, 0x0a, 0x14, 0x75,
-	0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70, 0x74,
-	0x69, 0x6f, 0x6e, 0x18, 0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f,
-	0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69,
-	0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
-	0x52, 0x13, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f,
-	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x2f, 0x0a, 0x05, 0x43, 0x54, 0x79, 0x70, 0x65, 0x12, 0x0a,
-	0x0a, 0x06, 0x53, 0x54, 0x52, 0x49, 0x4e, 0x47, 0x10, 0x00, 0x12, 0x08, 0x0a, 0x04, 0x43, 0x4f,
-	0x52, 0x44, 0x10, 0x01, 0x12, 0x10, 0x0a, 0x0c, 0x53, 0x54, 0x52, 0x49, 0x4e, 0x47, 0x5f, 0x50,
-	0x49, 0x45, 0x43, 0x45, 0x10, 0x02, 0x22, 0x35, 0x0a, 0x06, 0x4a, 0x53, 0x54, 0x79, 0x70, 0x65,
-	0x12, 0x0d, 0x0a, 0x09, 0x4a, 0x53, 0x5f, 0x4e, 0x4f, 0x52, 0x4d, 0x41, 0x4c, 0x10, 0x00, 0x12,
-	0x0d, 0x0a, 0x09, 0x4a, 0x53, 0x5f, 0x53, 0x54, 0x52, 0x49, 0x4e, 0x47, 0x10, 0x01, 0x12, 0x0d,
-	0x0a, 0x09, 0x4a, 0x53, 0x5f, 0x4e, 0x55, 0x4d, 0x42, 0x45, 0x52, 0x10, 0x02, 0x22, 0x55, 0x0a,
-	0x0f, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x65, 0x74, 0x65, 0x6e, 0x74, 0x69, 0x6f, 0x6e,
-	0x12, 0x15, 0x0a, 0x11, 0x52, 0x45, 0x54, 0x45, 0x4e, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x55, 0x4e,
-	0x4b, 0x4e, 0x4f, 0x57, 0x4e, 0x10, 0x00, 0x12, 0x15, 0x0a, 0x11, 0x52, 0x45, 0x54, 0x45, 0x4e,
-	0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x52, 0x55, 0x4e, 0x54, 0x49, 0x4d, 0x45, 0x10, 0x01, 0x12, 0x14,
-	0x0a, 0x10, 0x52, 0x45, 0x54, 0x45, 0x4e, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x53, 0x4f, 0x55, 0x52,
-	0x43, 0x45, 0x10, 0x02, 0x22, 0x8c, 0x02, 0x0a, 0x10, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x54,
-	0x61, 0x72, 0x67, 0x65, 0x74, 0x54, 0x79, 0x70, 0x65, 0x12, 0x17, 0x0a, 0x13, 0x54, 0x41, 0x52,
-	0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x55, 0x4e, 0x4b, 0x4e, 0x4f, 0x57, 0x4e,
-	0x10, 0x00, 0x12, 0x14, 0x0a, 0x10, 0x54, 0x41, 0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50,
-	0x45, 0x5f, 0x46, 0x49, 0x4c, 0x45, 0x10, 0x01, 0x12, 0x1f, 0x0a, 0x1b, 0x54, 0x41, 0x52, 0x47,
-	0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x58, 0x54, 0x45, 0x4e, 0x53, 0x49, 0x4f,
-	0x4e, 0x5f, 0x52, 0x41, 0x4e, 0x47, 0x45, 0x10, 0x02, 0x12, 0x17, 0x0a, 0x13, 0x54, 0x41, 0x52,
-	0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4d, 0x45, 0x53, 0x53, 0x41, 0x47, 0x45,
-	0x10, 0x03, 0x12, 0x15, 0x0a, 0x11, 0x54, 0x41, 0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50,
-	0x45, 0x5f, 0x46, 0x49, 0x45, 0x4c, 0x44, 0x10, 0x04, 0x12, 0x15, 0x0a, 0x11, 0x54, 0x41, 0x52,
-	0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4f, 0x4e, 0x45, 0x4f, 0x46, 0x10, 0x05,
-	0x12, 0x14, 0x0a, 0x10, 0x54, 0x41, 0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f,
-	0x45, 0x4e, 0x55, 0x4d, 0x10, 0x06, 0x12, 0x1a, 0x0a, 0x16, 0x54, 0x41, 0x52, 0x47, 0x45, 0x54,
-	0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x45, 0x4e, 0x54, 0x52, 0x59,
-	0x10, 0x07, 0x12, 0x17, 0x0a, 0x13, 0x54, 0x41, 0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50,
-	0x45, 0x5f, 0x53, 0x45, 0x52, 0x56, 0x49, 0x43, 0x45, 0x10, 0x08, 0x12, 0x16, 0x0a, 0x12, 0x54,
-	0x41, 0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x4d, 0x45, 0x54, 0x48, 0x4f,
-	0x44, 0x10, 0x09, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10, 0x80, 0x80, 0x80, 0x80, 0x02, 0x4a, 0x04,
-	0x08, 0x04, 0x10, 0x05, 0x22, 0x73, 0x0a, 0x0c, 0x4f, 0x6e, 0x65, 0x6f, 0x66, 0x4f, 0x70, 0x74,
-	0x69, 0x6f, 0x6e, 0x73, 0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70,
+	0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x52, 0x08, 0x66, 0x65, 0x61, 0x74,
+	0x75, 0x72, 0x65, 0x73, 0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70,
 	0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0xe7, 0x07, 0x20,
 	0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
 	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65,
 	0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13, 0x75, 0x6e, 0x69, 0x6e, 0x74,
-	0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x2a, 0x09,
-	0x08, 0xe8, 0x07, 0x10, 0x80, 0x80, 0x80, 0x80, 0x02, 0x22, 0x98, 0x02, 0x0a, 0x0b, 0x45, 0x6e,
-	0x75, 0x6d, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x1f, 0x0a, 0x0b, 0x61, 0x6c, 0x6c,
-	0x6f, 0x77, 0x5f, 0x61, 0x6c, 0x69, 0x61, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0a,
-	0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x41, 0x6c, 0x69, 0x61, 0x73, 0x12, 0x25, 0x0a, 0x0a, 0x64, 0x65,
+	0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a,
+	0x0a, 0x0c, 0x4f, 0x70, 0x74, 0x69, 0x6d, 0x69, 0x7a, 0x65, 0x4d, 0x6f, 0x64, 0x65, 0x12, 0x09,
+	0x0a, 0x05, 0x53, 0x50, 0x45, 0x45, 0x44, 0x10, 0x01, 0x12, 0x0d, 0x0a, 0x09, 0x43, 0x4f, 0x44,
+	0x45, 0x5f, 0x53, 0x49, 0x5a, 0x45, 0x10, 0x02, 0x12, 0x10, 0x0a, 0x0c, 0x4c, 0x49, 0x54, 0x45,
+	0x5f, 0x52, 0x55, 0x4e, 0x54, 0x49, 0x4d, 0x45, 0x10, 0x03, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10,
+	0x80, 0x80, 0x80, 0x80, 0x02, 0x4a, 0x04, 0x08, 0x26, 0x10, 0x27, 0x22, 0xf4, 0x03, 0x0a, 0x0e,
+	0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x3c,
+	0x0a, 0x17, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x5f, 0x73, 0x65, 0x74, 0x5f, 0x77, 0x69,
+	0x72, 0x65, 0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x3a,
+	0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x14, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x53,
+	0x65, 0x74, 0x57, 0x69, 0x72, 0x65, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0x4c, 0x0a, 0x1f,
+	0x6e, 0x6f, 0x5f, 0x73, 0x74, 0x61, 0x6e, 0x64, 0x61, 0x72, 0x64, 0x5f, 0x64, 0x65, 0x73, 0x63,
+	0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x5f, 0x61, 0x63, 0x63, 0x65, 0x73, 0x73, 0x6f, 0x72, 0x18,
+	0x02, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x1c, 0x6e, 0x6f,
+	0x53, 0x74, 0x61, 0x6e, 0x64, 0x61, 0x72, 0x64, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74,
+	0x6f, 0x72, 0x41, 0x63, 0x63, 0x65, 0x73, 0x73, 0x6f, 0x72, 0x12, 0x25, 0x0a, 0x0a, 0x64, 0x65,
 	0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x18, 0x03, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05,
 	0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65,
-	0x64, 0x12, 0x56, 0x0a, 0x26, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x5f,
-	0x6c, 0x65, 0x67, 0x61, 0x63, 0x79, 0x5f, 0x6a, 0x73, 0x6f, 0x6e, 0x5f, 0x66, 0x69, 0x65, 0x6c,
-	0x64, 0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x6c, 0x69, 0x63, 0x74, 0x73, 0x18, 0x06, 0x20, 0x01, 0x28,
-	0x08, 0x42, 0x02, 0x18, 0x01, 0x52, 0x22, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65,
-	0x64, 0x4c, 0x65, 0x67, 0x61, 0x63, 0x79, 0x4a, 0x73, 0x6f, 0x6e, 0x46, 0x69, 0x65, 0x6c, 0x64,
-	0x43, 0x6f, 0x6e, 0x66, 0x6c, 0x69, 0x63, 0x74, 0x73, 0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69,
-	0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f,
-	0x6e, 0x18, 0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
-	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74,
-	0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13,
-	0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74,
-	0x69, 0x6f, 0x6e, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10, 0x80, 0x80, 0x80, 0x80, 0x02, 0x4a, 0x04,
-	0x08, 0x05, 0x10, 0x06, 0x22, 0x9e, 0x01, 0x0a, 0x10, 0x45, 0x6e, 0x75, 0x6d, 0x56, 0x61, 0x6c,
-	0x75, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x25, 0x0a, 0x0a, 0x64, 0x65, 0x70,
-	0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66,
-	0x61, 0x6c, 0x73, 0x65, 0x52, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64,
-	0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65,
-	0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32,
-	0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
-	0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f,
-	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72,
-	0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10,
-	0x80, 0x80, 0x80, 0x80, 0x02, 0x22, 0x9c, 0x01, 0x0a, 0x0e, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63,
-	0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x25, 0x0a, 0x0a, 0x64, 0x65, 0x70, 0x72,
-	0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x18, 0x21, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61,
-	0x6c, 0x73, 0x65, 0x52, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x12,
+	0x64, 0x12, 0x1b, 0x0a, 0x09, 0x6d, 0x61, 0x70, 0x5f, 0x65, 0x6e, 0x74, 0x72, 0x79, 0x18, 0x07,
+	0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x6d, 0x61, 0x70, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x56,
+	0x0a, 0x26, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x6c, 0x65, 0x67,
+	0x61, 0x63, 0x79, 0x5f, 0x6a, 0x73, 0x6f, 0x6e, 0x5f, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x5f, 0x63,
+	0x6f, 0x6e, 0x66, 0x6c, 0x69, 0x63, 0x74, 0x73, 0x18, 0x0b, 0x20, 0x01, 0x28, 0x08, 0x42, 0x02,
+	0x18, 0x01, 0x52, 0x22, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x4c, 0x65,
+	0x67, 0x61, 0x63, 0x79, 0x4a, 0x73, 0x6f, 0x6e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x43, 0x6f, 0x6e,
+	0x66, 0x6c, 0x69, 0x63, 0x74, 0x73, 0x12, 0x37, 0x0a, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72,
+	0x65, 0x73, 0x18, 0x0c, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
+	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75,
+	0x72, 0x65, 0x53, 0x65, 0x74, 0x52, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x12,
 	0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64,
 	0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24,
 	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
 	0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70,
 	0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65,
 	0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10, 0x80,
-	0x80, 0x80, 0x80, 0x02, 0x22, 0xe0, 0x02, 0x0a, 0x0d, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4f,
-	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x25, 0x0a, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63,
-	0x61, 0x74, 0x65, 0x64, 0x18, 0x21, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73,
-	0x65, 0x52, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x12, 0x71, 0x0a,
-	0x11, 0x69, 0x64, 0x65, 0x6d, 0x70, 0x6f, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x5f, 0x6c, 0x65, 0x76,
-	0x65, 0x6c, 0x18, 0x22, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2f, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
-	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x4d, 0x65, 0x74, 0x68, 0x6f,
-	0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x49, 0x64, 0x65, 0x6d, 0x70, 0x6f, 0x74,
-	0x65, 0x6e, 0x63, 0x79, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x3a, 0x13, 0x49, 0x44, 0x45, 0x4d, 0x50,
-	0x4f, 0x54, 0x45, 0x4e, 0x43, 0x59, 0x5f, 0x55, 0x4e, 0x4b, 0x4e, 0x4f, 0x57, 0x4e, 0x52, 0x10,
-	0x69, 0x64, 0x65, 0x6d, 0x70, 0x6f, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x4c, 0x65, 0x76, 0x65, 0x6c,
-	0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65,
-	0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32,
-	0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
-	0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f,
-	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72,
-	0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x50, 0x0a, 0x10, 0x49, 0x64,
-	0x65, 0x6d, 0x70, 0x6f, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x12, 0x17,
-	0x0a, 0x13, 0x49, 0x44, 0x45, 0x4d, 0x50, 0x4f, 0x54, 0x45, 0x4e, 0x43, 0x59, 0x5f, 0x55, 0x4e,
-	0x4b, 0x4e, 0x4f, 0x57, 0x4e, 0x10, 0x00, 0x12, 0x13, 0x0a, 0x0f, 0x4e, 0x4f, 0x5f, 0x53, 0x49,
-	0x44, 0x45, 0x5f, 0x45, 0x46, 0x46, 0x45, 0x43, 0x54, 0x53, 0x10, 0x01, 0x12, 0x0e, 0x0a, 0x0a,
-	0x49, 0x44, 0x45, 0x4d, 0x50, 0x4f, 0x54, 0x45, 0x4e, 0x54, 0x10, 0x02, 0x2a, 0x09, 0x08, 0xe8,
-	0x07, 0x10, 0x80, 0x80, 0x80, 0x80, 0x02, 0x22, 0x9a, 0x03, 0x0a, 0x13, 0x55, 0x6e, 0x69, 0x6e,
-	0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x12,
-	0x41, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2d, 0x2e,
+	0x80, 0x80, 0x80, 0x02, 0x4a, 0x04, 0x08, 0x04, 0x10, 0x05, 0x4a, 0x04, 0x08, 0x05, 0x10, 0x06,
+	0x4a, 0x04, 0x08, 0x06, 0x10, 0x07, 0x4a, 0x04, 0x08, 0x08, 0x10, 0x09, 0x4a, 0x04, 0x08, 0x09,
+	0x10, 0x0a, 0x22, 0xad, 0x0a, 0x0a, 0x0c, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74, 0x69,
+	0x6f, 0x6e, 0x73, 0x12, 0x41, 0x0a, 0x05, 0x63, 0x74, 0x79, 0x70, 0x65, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x0e, 0x32, 0x23, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
+	0x73, 0x2e, 0x43, 0x54, 0x79, 0x70, 0x65, 0x3a, 0x06, 0x53, 0x54, 0x52, 0x49, 0x4e, 0x47, 0x52,
+	0x05, 0x63, 0x74, 0x79, 0x70, 0x65, 0x12, 0x16, 0x0a, 0x06, 0x70, 0x61, 0x63, 0x6b, 0x65, 0x64,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x52, 0x06, 0x70, 0x61, 0x63, 0x6b, 0x65, 0x64, 0x12, 0x47,
+	0x0a, 0x06, 0x6a, 0x73, 0x74, 0x79, 0x70, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x24,
+	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
+	0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x4a, 0x53,
+	0x54, 0x79, 0x70, 0x65, 0x3a, 0x09, 0x4a, 0x53, 0x5f, 0x4e, 0x4f, 0x52, 0x4d, 0x41, 0x4c, 0x52,
+	0x06, 0x6a, 0x73, 0x74, 0x79, 0x70, 0x65, 0x12, 0x19, 0x0a, 0x04, 0x6c, 0x61, 0x7a, 0x79, 0x18,
+	0x05, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x04, 0x6c, 0x61,
+	0x7a, 0x79, 0x12, 0x2e, 0x0a, 0x0f, 0x75, 0x6e, 0x76, 0x65, 0x72, 0x69, 0x66, 0x69, 0x65, 0x64,
+	0x5f, 0x6c, 0x61, 0x7a, 0x79, 0x18, 0x0f, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c,
+	0x73, 0x65, 0x52, 0x0e, 0x75, 0x6e, 0x76, 0x65, 0x72, 0x69, 0x66, 0x69, 0x65, 0x64, 0x4c, 0x61,
+	0x7a, 0x79, 0x12, 0x25, 0x0a, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64,
+	0x18, 0x03, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0a, 0x64,
+	0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x12, 0x19, 0x0a, 0x04, 0x77, 0x65, 0x61,
+	0x6b, 0x18, 0x0a, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x04,
+	0x77, 0x65, 0x61, 0x6b, 0x12, 0x28, 0x0a, 0x0c, 0x64, 0x65, 0x62, 0x75, 0x67, 0x5f, 0x72, 0x65,
+	0x64, 0x61, 0x63, 0x74, 0x18, 0x10, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73,
+	0x65, 0x52, 0x0b, 0x64, 0x65, 0x62, 0x75, 0x67, 0x52, 0x65, 0x64, 0x61, 0x63, 0x74, 0x12, 0x4b,
+	0x0a, 0x09, 0x72, 0x65, 0x74, 0x65, 0x6e, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x11, 0x20, 0x01, 0x28,
+	0x0e, 0x32, 0x2d, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x62, 0x75, 0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73,
+	0x2e, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x65, 0x74, 0x65, 0x6e, 0x74, 0x69, 0x6f, 0x6e,
+	0x52, 0x09, 0x72, 0x65, 0x74, 0x65, 0x6e, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x48, 0x0a, 0x07, 0x74,
+	0x61, 0x72, 0x67, 0x65, 0x74, 0x73, 0x18, 0x13, 0x20, 0x03, 0x28, 0x0e, 0x32, 0x2e, 0x2e, 0x67,
+	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46,
+	0x69, 0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x4f, 0x70, 0x74, 0x69,
+	0x6f, 0x6e, 0x54, 0x61, 0x72, 0x67, 0x65, 0x74, 0x54, 0x79, 0x70, 0x65, 0x52, 0x07, 0x74, 0x61,
+	0x72, 0x67, 0x65, 0x74, 0x73, 0x12, 0x57, 0x0a, 0x10, 0x65, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e,
+	0x5f, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x73, 0x18, 0x14, 0x20, 0x03, 0x28, 0x0b, 0x32,
+	0x2c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
+	0x66, 0x2e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x45,
+	0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x44, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x52, 0x0f, 0x65,
+	0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x44, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x73, 0x12, 0x37,
+	0x0a, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x18, 0x15, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
+	0x75, 0x66, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x52, 0x08, 0x66,
+	0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69, 0x6e, 0x74,
+	0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x18,
+	0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72,
+	0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13, 0x75, 0x6e,
+	0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x1a, 0x5a, 0x0a, 0x0e, 0x45, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x44, 0x65, 0x66, 0x61,
+	0x75, 0x6c, 0x74, 0x12, 0x32, 0x0a, 0x07, 0x65, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x03,
+	0x20, 0x01, 0x28, 0x0e, 0x32, 0x18, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x07,
+	0x65, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x22, 0x2f, 0x0a,
+	0x05, 0x43, 0x54, 0x79, 0x70, 0x65, 0x12, 0x0a, 0x0a, 0x06, 0x53, 0x54, 0x52, 0x49, 0x4e, 0x47,
+	0x10, 0x00, 0x12, 0x08, 0x0a, 0x04, 0x43, 0x4f, 0x52, 0x44, 0x10, 0x01, 0x12, 0x10, 0x0a, 0x0c,
+	0x53, 0x54, 0x52, 0x49, 0x4e, 0x47, 0x5f, 0x50, 0x49, 0x45, 0x43, 0x45, 0x10, 0x02, 0x22, 0x35,
+	0x0a, 0x06, 0x4a, 0x53, 0x54, 0x79, 0x70, 0x65, 0x12, 0x0d, 0x0a, 0x09, 0x4a, 0x53, 0x5f, 0x4e,
+	0x4f, 0x52, 0x4d, 0x41, 0x4c, 0x10, 0x00, 0x12, 0x0d, 0x0a, 0x09, 0x4a, 0x53, 0x5f, 0x53, 0x54,
+	0x52, 0x49, 0x4e, 0x47, 0x10, 0x01, 0x12, 0x0d, 0x0a, 0x09, 0x4a, 0x53, 0x5f, 0x4e, 0x55, 0x4d,
+	0x42, 0x45, 0x52, 0x10, 0x02, 0x22, 0x55, 0x0a, 0x0f, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52,
+	0x65, 0x74, 0x65, 0x6e, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x15, 0x0a, 0x11, 0x52, 0x45, 0x54, 0x45,
+	0x4e, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x55, 0x4e, 0x4b, 0x4e, 0x4f, 0x57, 0x4e, 0x10, 0x00, 0x12,
+	0x15, 0x0a, 0x11, 0x52, 0x45, 0x54, 0x45, 0x4e, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x52, 0x55, 0x4e,
+	0x54, 0x49, 0x4d, 0x45, 0x10, 0x01, 0x12, 0x14, 0x0a, 0x10, 0x52, 0x45, 0x54, 0x45, 0x4e, 0x54,
+	0x49, 0x4f, 0x4e, 0x5f, 0x53, 0x4f, 0x55, 0x52, 0x43, 0x45, 0x10, 0x02, 0x22, 0x8c, 0x02, 0x0a,
+	0x10, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x54, 0x61, 0x72, 0x67, 0x65, 0x74, 0x54, 0x79, 0x70,
+	0x65, 0x12, 0x17, 0x0a, 0x13, 0x54, 0x41, 0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45,
+	0x5f, 0x55, 0x4e, 0x4b, 0x4e, 0x4f, 0x57, 0x4e, 0x10, 0x00, 0x12, 0x14, 0x0a, 0x10, 0x54, 0x41,
+	0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x46, 0x49, 0x4c, 0x45, 0x10, 0x01,
+	0x12, 0x1f, 0x0a, 0x1b, 0x54, 0x41, 0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f,
+	0x45, 0x58, 0x54, 0x45, 0x4e, 0x53, 0x49, 0x4f, 0x4e, 0x5f, 0x52, 0x41, 0x4e, 0x47, 0x45, 0x10,
+	0x02, 0x12, 0x17, 0x0a, 0x13, 0x54, 0x41, 0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45,
+	0x5f, 0x4d, 0x45, 0x53, 0x53, 0x41, 0x47, 0x45, 0x10, 0x03, 0x12, 0x15, 0x0a, 0x11, 0x54, 0x41,
+	0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x46, 0x49, 0x45, 0x4c, 0x44, 0x10,
+	0x04, 0x12, 0x15, 0x0a, 0x11, 0x54, 0x41, 0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45,
+	0x5f, 0x4f, 0x4e, 0x45, 0x4f, 0x46, 0x10, 0x05, 0x12, 0x14, 0x0a, 0x10, 0x54, 0x41, 0x52, 0x47,
+	0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e, 0x55, 0x4d, 0x10, 0x06, 0x12, 0x1a,
+	0x0a, 0x16, 0x54, 0x41, 0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x45, 0x4e,
+	0x55, 0x4d, 0x5f, 0x45, 0x4e, 0x54, 0x52, 0x59, 0x10, 0x07, 0x12, 0x17, 0x0a, 0x13, 0x54, 0x41,
+	0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x53, 0x45, 0x52, 0x56, 0x49, 0x43,
+	0x45, 0x10, 0x08, 0x12, 0x16, 0x0a, 0x12, 0x54, 0x41, 0x52, 0x47, 0x45, 0x54, 0x5f, 0x54, 0x59,
+	0x50, 0x45, 0x5f, 0x4d, 0x45, 0x54, 0x48, 0x4f, 0x44, 0x10, 0x09, 0x2a, 0x09, 0x08, 0xe8, 0x07,
+	0x10, 0x80, 0x80, 0x80, 0x80, 0x02, 0x4a, 0x04, 0x08, 0x04, 0x10, 0x05, 0x4a, 0x04, 0x08, 0x12,
+	0x10, 0x13, 0x22, 0xac, 0x01, 0x0a, 0x0c, 0x4f, 0x6e, 0x65, 0x6f, 0x66, 0x4f, 0x70, 0x74, 0x69,
+	0x6f, 0x6e, 0x73, 0x12, 0x37, 0x0a, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
+	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53,
+	0x65, 0x74, 0x52, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x12, 0x58, 0x0a, 0x14,
+	0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70,
+	0x74, 0x69, 0x6f, 0x6e, 0x18, 0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f,
+	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e,
+	0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x52, 0x13, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64,
+	0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10, 0x80, 0x80, 0x80, 0x80,
+	0x02, 0x22, 0xd1, 0x02, 0x0a, 0x0b, 0x45, 0x6e, 0x75, 0x6d, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
+	0x73, 0x12, 0x1f, 0x0a, 0x0b, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x5f, 0x61, 0x6c, 0x69, 0x61, 0x73,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0a, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x41, 0x6c, 0x69,
+	0x61, 0x73, 0x12, 0x25, 0x0a, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64,
+	0x18, 0x03, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0a, 0x64,
+	0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x12, 0x56, 0x0a, 0x26, 0x64, 0x65, 0x70,
+	0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x6c, 0x65, 0x67, 0x61, 0x63, 0x79, 0x5f, 0x6a,
+	0x73, 0x6f, 0x6e, 0x5f, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x6c, 0x69,
+	0x63, 0x74, 0x73, 0x18, 0x06, 0x20, 0x01, 0x28, 0x08, 0x42, 0x02, 0x18, 0x01, 0x52, 0x22, 0x64,
+	0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x4c, 0x65, 0x67, 0x61, 0x63, 0x79, 0x4a,
+	0x73, 0x6f, 0x6e, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x43, 0x6f, 0x6e, 0x66, 0x6c, 0x69, 0x63, 0x74,
+	0x73, 0x12, 0x37, 0x0a, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x18, 0x07, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74,
+	0x52, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e,
+	0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69,
+	0x6f, 0x6e, 0x18, 0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67,
+	0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e,
+	0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52,
+	0x13, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70,
+	0x74, 0x69, 0x6f, 0x6e, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10, 0x80, 0x80, 0x80, 0x80, 0x02, 0x4a,
+	0x04, 0x08, 0x05, 0x10, 0x06, 0x22, 0x81, 0x02, 0x0a, 0x10, 0x45, 0x6e, 0x75, 0x6d, 0x56, 0x61,
+	0x6c, 0x75, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x25, 0x0a, 0x0a, 0x64, 0x65,
+	0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05,
+	0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65,
+	0x64, 0x12, 0x37, 0x0a, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x18, 0x02, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74,
+	0x52, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x12, 0x28, 0x0a, 0x0c, 0x64, 0x65,
+	0x62, 0x75, 0x67, 0x5f, 0x72, 0x65, 0x64, 0x61, 0x63, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x08,
+	0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0b, 0x64, 0x65, 0x62, 0x75, 0x67, 0x52, 0x65,
+	0x64, 0x61, 0x63, 0x74, 0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70,
+	0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0xe7, 0x07, 0x20,
+	0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65,
+	0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13, 0x75, 0x6e, 0x69, 0x6e, 0x74,
+	0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x2a, 0x09,
+	0x08, 0xe8, 0x07, 0x10, 0x80, 0x80, 0x80, 0x80, 0x02, 0x22, 0xd5, 0x01, 0x0a, 0x0e, 0x53, 0x65,
+	0x72, 0x76, 0x69, 0x63, 0x65, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x37, 0x0a, 0x08,
+	0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x18, 0x22, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1b,
+	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
+	0x2e, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x52, 0x08, 0x66, 0x65, 0x61,
+	0x74, 0x75, 0x72, 0x65, 0x73, 0x12, 0x25, 0x0a, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61,
+	0x74, 0x65, 0x64, 0x18, 0x21, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65,
+	0x52, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x12, 0x58, 0x0a, 0x14,
+	0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70,
+	0x74, 0x69, 0x6f, 0x6e, 0x18, 0xe7, 0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f,
+	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e,
+	0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f,
+	0x6e, 0x52, 0x13, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64,
+	0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10, 0x80, 0x80, 0x80, 0x80,
+	0x02, 0x22, 0x99, 0x03, 0x0a, 0x0d, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4f, 0x70, 0x74, 0x69,
+	0x6f, 0x6e, 0x73, 0x12, 0x25, 0x0a, 0x0a, 0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65,
+	0x64, 0x18, 0x21, 0x20, 0x01, 0x28, 0x08, 0x3a, 0x05, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x52, 0x0a,
+	0x64, 0x65, 0x70, 0x72, 0x65, 0x63, 0x61, 0x74, 0x65, 0x64, 0x12, 0x71, 0x0a, 0x11, 0x69, 0x64,
+	0x65, 0x6d, 0x70, 0x6f, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x5f, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18,
+	0x22, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2f, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
+	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4f, 0x70,
+	0x74, 0x69, 0x6f, 0x6e, 0x73, 0x2e, 0x49, 0x64, 0x65, 0x6d, 0x70, 0x6f, 0x74, 0x65, 0x6e, 0x63,
+	0x79, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x3a, 0x13, 0x49, 0x44, 0x45, 0x4d, 0x50, 0x4f, 0x54, 0x45,
+	0x4e, 0x43, 0x59, 0x5f, 0x55, 0x4e, 0x4b, 0x4e, 0x4f, 0x57, 0x4e, 0x52, 0x10, 0x69, 0x64, 0x65,
+	0x6d, 0x70, 0x6f, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x4c, 0x65, 0x76, 0x65, 0x6c, 0x12, 0x37, 0x0a,
+	0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x18, 0x23, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
+	0x66, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x52, 0x08, 0x66, 0x65,
+	0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x12, 0x58, 0x0a, 0x14, 0x75, 0x6e, 0x69, 0x6e, 0x74, 0x65,
+	0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x5f, 0x6f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0xe7,
+	0x07, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
+	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70,
+	0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x13, 0x75, 0x6e, 0x69,
+	0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e,
+	0x22, 0x50, 0x0a, 0x10, 0x49, 0x64, 0x65, 0x6d, 0x70, 0x6f, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x4c,
+	0x65, 0x76, 0x65, 0x6c, 0x12, 0x17, 0x0a, 0x13, 0x49, 0x44, 0x45, 0x4d, 0x50, 0x4f, 0x54, 0x45,
+	0x4e, 0x43, 0x59, 0x5f, 0x55, 0x4e, 0x4b, 0x4e, 0x4f, 0x57, 0x4e, 0x10, 0x00, 0x12, 0x13, 0x0a,
+	0x0f, 0x4e, 0x4f, 0x5f, 0x53, 0x49, 0x44, 0x45, 0x5f, 0x45, 0x46, 0x46, 0x45, 0x43, 0x54, 0x53,
+	0x10, 0x01, 0x12, 0x0e, 0x0a, 0x0a, 0x49, 0x44, 0x45, 0x4d, 0x50, 0x4f, 0x54, 0x45, 0x4e, 0x54,
+	0x10, 0x02, 0x2a, 0x09, 0x08, 0xe8, 0x07, 0x10, 0x80, 0x80, 0x80, 0x80, 0x02, 0x22, 0x9a, 0x03,
+	0x0a, 0x13, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f,
+	0x70, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x41, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x02, 0x20,
+	0x03, 0x28, 0x0b, 0x32, 0x2d, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65,
+	0x74, 0x65, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x4e, 0x61, 0x6d, 0x65, 0x50, 0x61,
+	0x72, 0x74, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x29, 0x0a, 0x10, 0x69, 0x64, 0x65, 0x6e,
+	0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x03, 0x20, 0x01,
+	0x28, 0x09, 0x52, 0x0f, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x56, 0x61,
+	0x6c, 0x75, 0x65, 0x12, 0x2c, 0x0a, 0x12, 0x70, 0x6f, 0x73, 0x69, 0x74, 0x69, 0x76, 0x65, 0x5f,
+	0x69, 0x6e, 0x74, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x04, 0x52,
+	0x10, 0x70, 0x6f, 0x73, 0x69, 0x74, 0x69, 0x76, 0x65, 0x49, 0x6e, 0x74, 0x56, 0x61, 0x6c, 0x75,
+	0x65, 0x12, 0x2c, 0x0a, 0x12, 0x6e, 0x65, 0x67, 0x61, 0x74, 0x69, 0x76, 0x65, 0x5f, 0x69, 0x6e,
+	0x74, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x03, 0x52, 0x10, 0x6e,
+	0x65, 0x67, 0x61, 0x74, 0x69, 0x76, 0x65, 0x49, 0x6e, 0x74, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12,
+	0x21, 0x0a, 0x0c, 0x64, 0x6f, 0x75, 0x62, 0x6c, 0x65, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18,
+	0x06, 0x20, 0x01, 0x28, 0x01, 0x52, 0x0b, 0x64, 0x6f, 0x75, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c,
+	0x75, 0x65, 0x12, 0x21, 0x0a, 0x0c, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x5f, 0x76, 0x61, 0x6c,
+	0x75, 0x65, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0c, 0x52, 0x0b, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67,
+	0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x27, 0x0a, 0x0f, 0x61, 0x67, 0x67, 0x72, 0x65, 0x67, 0x61,
+	0x74, 0x65, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x08, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0e,
+	0x61, 0x67, 0x67, 0x72, 0x65, 0x67, 0x61, 0x74, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x1a, 0x4a,
+	0x0a, 0x08, 0x4e, 0x61, 0x6d, 0x65, 0x50, 0x61, 0x72, 0x74, 0x12, 0x1b, 0x0a, 0x09, 0x6e, 0x61,
+	0x6d, 0x65, 0x5f, 0x70, 0x61, 0x72, 0x74, 0x18, 0x01, 0x20, 0x02, 0x28, 0x09, 0x52, 0x08, 0x6e,
+	0x61, 0x6d, 0x65, 0x50, 0x61, 0x72, 0x74, 0x12, 0x21, 0x0a, 0x0c, 0x69, 0x73, 0x5f, 0x65, 0x78,
+	0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x02, 0x28, 0x08, 0x52, 0x0b, 0x69,
+	0x73, 0x45, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f, 0x6e, 0x22, 0xfc, 0x09, 0x0a, 0x0a, 0x46,
+	0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x12, 0x8b, 0x01, 0x0a, 0x0e, 0x66, 0x69,
+	0x65, 0x6c, 0x64, 0x5f, 0x70, 0x72, 0x65, 0x73, 0x65, 0x6e, 0x63, 0x65, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x0e, 0x32, 0x29, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x2e,
+	0x46, 0x69, 0x65, 0x6c, 0x64, 0x50, 0x72, 0x65, 0x73, 0x65, 0x6e, 0x63, 0x65, 0x42, 0x39, 0x88,
+	0x01, 0x01, 0x98, 0x01, 0x04, 0x98, 0x01, 0x01, 0xa2, 0x01, 0x0d, 0x12, 0x08, 0x45, 0x58, 0x50,
+	0x4c, 0x49, 0x43, 0x49, 0x54, 0x18, 0xe6, 0x07, 0xa2, 0x01, 0x0d, 0x12, 0x08, 0x49, 0x4d, 0x50,
+	0x4c, 0x49, 0x43, 0x49, 0x54, 0x18, 0xe7, 0x07, 0xa2, 0x01, 0x0d, 0x12, 0x08, 0x45, 0x58, 0x50,
+	0x4c, 0x49, 0x43, 0x49, 0x54, 0x18, 0xe8, 0x07, 0x52, 0x0d, 0x66, 0x69, 0x65, 0x6c, 0x64, 0x50,
+	0x72, 0x65, 0x73, 0x65, 0x6e, 0x63, 0x65, 0x12, 0x66, 0x0a, 0x09, 0x65, 0x6e, 0x75, 0x6d, 0x5f,
+	0x74, 0x79, 0x70, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x24, 0x2e, 0x67, 0x6f, 0x6f,
+	0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x65, 0x61,
+	0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x2e, 0x45, 0x6e, 0x75, 0x6d, 0x54, 0x79, 0x70, 0x65,
+	0x42, 0x23, 0x88, 0x01, 0x01, 0x98, 0x01, 0x06, 0x98, 0x01, 0x01, 0xa2, 0x01, 0x0b, 0x12, 0x06,
+	0x43, 0x4c, 0x4f, 0x53, 0x45, 0x44, 0x18, 0xe6, 0x07, 0xa2, 0x01, 0x09, 0x12, 0x04, 0x4f, 0x50,
+	0x45, 0x4e, 0x18, 0xe7, 0x07, 0x52, 0x08, 0x65, 0x6e, 0x75, 0x6d, 0x54, 0x79, 0x70, 0x65, 0x12,
+	0x92, 0x01, 0x0a, 0x17, 0x72, 0x65, 0x70, 0x65, 0x61, 0x74, 0x65, 0x64, 0x5f, 0x66, 0x69, 0x65,
+	0x6c, 0x64, 0x5f, 0x65, 0x6e, 0x63, 0x6f, 0x64, 0x69, 0x6e, 0x67, 0x18, 0x03, 0x20, 0x01, 0x28,
+	0x0e, 0x32, 0x31, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x62, 0x75, 0x66, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x2e, 0x52,
+	0x65, 0x70, 0x65, 0x61, 0x74, 0x65, 0x64, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x45, 0x6e, 0x63, 0x6f,
+	0x64, 0x69, 0x6e, 0x67, 0x42, 0x27, 0x88, 0x01, 0x01, 0x98, 0x01, 0x04, 0x98, 0x01, 0x01, 0xa2,
+	0x01, 0x0d, 0x12, 0x08, 0x45, 0x58, 0x50, 0x41, 0x4e, 0x44, 0x45, 0x44, 0x18, 0xe6, 0x07, 0xa2,
+	0x01, 0x0b, 0x12, 0x06, 0x50, 0x41, 0x43, 0x4b, 0x45, 0x44, 0x18, 0xe7, 0x07, 0x52, 0x15, 0x72,
+	0x65, 0x70, 0x65, 0x61, 0x74, 0x65, 0x64, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x45, 0x6e, 0x63, 0x6f,
+	0x64, 0x69, 0x6e, 0x67, 0x12, 0x78, 0x0a, 0x0f, 0x75, 0x74, 0x66, 0x38, 0x5f, 0x76, 0x61, 0x6c,
+	0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2a, 0x2e,
+	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e,
+	0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x2e, 0x55, 0x74, 0x66, 0x38, 0x56,
+	0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x23, 0x88, 0x01, 0x01, 0x98, 0x01,
+	0x04, 0x98, 0x01, 0x01, 0xa2, 0x01, 0x09, 0x12, 0x04, 0x4e, 0x4f, 0x4e, 0x45, 0x18, 0xe6, 0x07,
+	0xa2, 0x01, 0x0b, 0x12, 0x06, 0x56, 0x45, 0x52, 0x49, 0x46, 0x59, 0x18, 0xe7, 0x07, 0x52, 0x0e,
+	0x75, 0x74, 0x66, 0x38, 0x56, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x78,
+	0x0a, 0x10, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x5f, 0x65, 0x6e, 0x63, 0x6f, 0x64, 0x69,
+	0x6e, 0x67, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
+	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75,
+	0x72, 0x65, 0x53, 0x65, 0x74, 0x2e, 0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x45, 0x6e, 0x63,
+	0x6f, 0x64, 0x69, 0x6e, 0x67, 0x42, 0x20, 0x88, 0x01, 0x01, 0x98, 0x01, 0x04, 0x98, 0x01, 0x01,
+	0xa2, 0x01, 0x14, 0x12, 0x0f, 0x4c, 0x45, 0x4e, 0x47, 0x54, 0x48, 0x5f, 0x50, 0x52, 0x45, 0x46,
+	0x49, 0x58, 0x45, 0x44, 0x18, 0xe6, 0x07, 0x52, 0x0f, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65,
+	0x45, 0x6e, 0x63, 0x6f, 0x64, 0x69, 0x6e, 0x67, 0x12, 0x7c, 0x0a, 0x0b, 0x6a, 0x73, 0x6f, 0x6e,
+	0x5f, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x18, 0x06, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x26, 0x2e,
 	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e,
-	0x55, 0x6e, 0x69, 0x6e, 0x74, 0x65, 0x72, 0x70, 0x72, 0x65, 0x74, 0x65, 0x64, 0x4f, 0x70, 0x74,
-	0x69, 0x6f, 0x6e, 0x2e, 0x4e, 0x61, 0x6d, 0x65, 0x50, 0x61, 0x72, 0x74, 0x52, 0x04, 0x6e, 0x61,
-	0x6d, 0x65, 0x12, 0x29, 0x0a, 0x10, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72,
-	0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0f, 0x69, 0x64,
-	0x65, 0x6e, 0x74, 0x69, 0x66, 0x69, 0x65, 0x72, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x2c, 0x0a,
-	0x12, 0x70, 0x6f, 0x73, 0x69, 0x74, 0x69, 0x76, 0x65, 0x5f, 0x69, 0x6e, 0x74, 0x5f, 0x76, 0x61,
-	0x6c, 0x75, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x04, 0x52, 0x10, 0x70, 0x6f, 0x73, 0x69, 0x74,
-	0x69, 0x76, 0x65, 0x49, 0x6e, 0x74, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x2c, 0x0a, 0x12, 0x6e,
-	0x65, 0x67, 0x61, 0x74, 0x69, 0x76, 0x65, 0x5f, 0x69, 0x6e, 0x74, 0x5f, 0x76, 0x61, 0x6c, 0x75,
-	0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x03, 0x52, 0x10, 0x6e, 0x65, 0x67, 0x61, 0x74, 0x69, 0x76,
-	0x65, 0x49, 0x6e, 0x74, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x21, 0x0a, 0x0c, 0x64, 0x6f, 0x75,
-	0x62, 0x6c, 0x65, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x06, 0x20, 0x01, 0x28, 0x01, 0x52,
-	0x0b, 0x64, 0x6f, 0x75, 0x62, 0x6c, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12, 0x21, 0x0a, 0x0c,
-	0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x5f, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x07, 0x20, 0x01,
-	0x28, 0x0c, 0x52, 0x0b, 0x73, 0x74, 0x72, 0x69, 0x6e, 0x67, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x12,
-	0x27, 0x0a, 0x0f, 0x61, 0x67, 0x67, 0x72, 0x65, 0x67, 0x61, 0x74, 0x65, 0x5f, 0x76, 0x61, 0x6c,
-	0x75, 0x65, 0x18, 0x08, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0e, 0x61, 0x67, 0x67, 0x72, 0x65, 0x67,
-	0x61, 0x74, 0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x1a, 0x4a, 0x0a, 0x08, 0x4e, 0x61, 0x6d, 0x65,
-	0x50, 0x61, 0x72, 0x74, 0x12, 0x1b, 0x0a, 0x09, 0x6e, 0x61, 0x6d, 0x65, 0x5f, 0x70, 0x61, 0x72,
-	0x74, 0x18, 0x01, 0x20, 0x02, 0x28, 0x09, 0x52, 0x08, 0x6e, 0x61, 0x6d, 0x65, 0x50, 0x61, 0x72,
-	0x74, 0x12, 0x21, 0x0a, 0x0c, 0x69, 0x73, 0x5f, 0x65, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69, 0x6f,
-	0x6e, 0x18, 0x02, 0x20, 0x02, 0x28, 0x08, 0x52, 0x0b, 0x69, 0x73, 0x45, 0x78, 0x74, 0x65, 0x6e,
-	0x73, 0x69, 0x6f, 0x6e, 0x22, 0xa7, 0x02, 0x0a, 0x0e, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x43,
-	0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x12, 0x44, 0x0a, 0x08, 0x6c, 0x6f, 0x63, 0x61, 0x74,
-	0x69, 0x6f, 0x6e, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x28, 0x2e, 0x67, 0x6f, 0x6f, 0x67,
-	0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x53, 0x6f, 0x75, 0x72,
-	0x63, 0x65, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x2e, 0x4c, 0x6f, 0x63, 0x61, 0x74,
-	0x69, 0x6f, 0x6e, 0x52, 0x08, 0x6c, 0x6f, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x1a, 0xce, 0x01,
-	0x0a, 0x08, 0x4c, 0x6f, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x16, 0x0a, 0x04, 0x70, 0x61,
-	0x74, 0x68, 0x18, 0x01, 0x20, 0x03, 0x28, 0x05, 0x42, 0x02, 0x10, 0x01, 0x52, 0x04, 0x70, 0x61,
-	0x74, 0x68, 0x12, 0x16, 0x0a, 0x04, 0x73, 0x70, 0x61, 0x6e, 0x18, 0x02, 0x20, 0x03, 0x28, 0x05,
-	0x42, 0x02, 0x10, 0x01, 0x52, 0x04, 0x73, 0x70, 0x61, 0x6e, 0x12, 0x29, 0x0a, 0x10, 0x6c, 0x65,
-	0x61, 0x64, 0x69, 0x6e, 0x67, 0x5f, 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x18, 0x03,
-	0x20, 0x01, 0x28, 0x09, 0x52, 0x0f, 0x6c, 0x65, 0x61, 0x64, 0x69, 0x6e, 0x67, 0x43, 0x6f, 0x6d,
-	0x6d, 0x65, 0x6e, 0x74, 0x73, 0x12, 0x2b, 0x0a, 0x11, 0x74, 0x72, 0x61, 0x69, 0x6c, 0x69, 0x6e,
-	0x67, 0x5f, 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x10, 0x74, 0x72, 0x61, 0x69, 0x6c, 0x69, 0x6e, 0x67, 0x43, 0x6f, 0x6d, 0x6d, 0x65, 0x6e,
-	0x74, 0x73, 0x12, 0x3a, 0x0a, 0x19, 0x6c, 0x65, 0x61, 0x64, 0x69, 0x6e, 0x67, 0x5f, 0x64, 0x65,
-	0x74, 0x61, 0x63, 0x68, 0x65, 0x64, 0x5f, 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x18,
-	0x06, 0x20, 0x03, 0x28, 0x09, 0x52, 0x17, 0x6c, 0x65, 0x61, 0x64, 0x69, 0x6e, 0x67, 0x44, 0x65,
-	0x74, 0x61, 0x63, 0x68, 0x65, 0x64, 0x43, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x22, 0xd0,
-	0x02, 0x0a, 0x11, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x65, 0x64, 0x43, 0x6f, 0x64, 0x65,
-	0x49, 0x6e, 0x66, 0x6f, 0x12, 0x4d, 0x0a, 0x0a, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69,
-	0x6f, 0x6e, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2d, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
-	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x47, 0x65, 0x6e, 0x65, 0x72,
-	0x61, 0x74, 0x65, 0x64, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x2e, 0x41, 0x6e, 0x6e,
-	0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0a, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74,
-	0x69, 0x6f, 0x6e, 0x1a, 0xeb, 0x01, 0x0a, 0x0a, 0x41, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69,
-	0x6f, 0x6e, 0x12, 0x16, 0x0a, 0x04, 0x70, 0x61, 0x74, 0x68, 0x18, 0x01, 0x20, 0x03, 0x28, 0x05,
-	0x42, 0x02, 0x10, 0x01, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x12, 0x1f, 0x0a, 0x0b, 0x73, 0x6f,
-	0x75, 0x72, 0x63, 0x65, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x0a, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x62,
-	0x65, 0x67, 0x69, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x05, 0x52, 0x05, 0x62, 0x65, 0x67, 0x69,
-	0x6e, 0x12, 0x10, 0x0a, 0x03, 0x65, 0x6e, 0x64, 0x18, 0x04, 0x20, 0x01, 0x28, 0x05, 0x52, 0x03,
-	0x65, 0x6e, 0x64, 0x12, 0x52, 0x0a, 0x08, 0x73, 0x65, 0x6d, 0x61, 0x6e, 0x74, 0x69, 0x63, 0x18,
-	0x05, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x36, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
-	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x65,
-	0x64, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x2e, 0x41, 0x6e, 0x6e, 0x6f, 0x74, 0x61,
-	0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x53, 0x65, 0x6d, 0x61, 0x6e, 0x74, 0x69, 0x63, 0x52, 0x08, 0x73,
-	0x65, 0x6d, 0x61, 0x6e, 0x74, 0x69, 0x63, 0x22, 0x28, 0x0a, 0x08, 0x53, 0x65, 0x6d, 0x61, 0x6e,
-	0x74, 0x69, 0x63, 0x12, 0x08, 0x0a, 0x04, 0x4e, 0x4f, 0x4e, 0x45, 0x10, 0x00, 0x12, 0x07, 0x0a,
-	0x03, 0x53, 0x45, 0x54, 0x10, 0x01, 0x12, 0x09, 0x0a, 0x05, 0x41, 0x4c, 0x49, 0x41, 0x53, 0x10,
-	0x02, 0x42, 0x7e, 0x0a, 0x13, 0x63, 0x6f, 0x6d, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
-	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x42, 0x10, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69,
-	0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x73, 0x48, 0x01, 0x5a, 0x2d, 0x67, 0x6f,
-	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x67, 0x6f, 0x6c, 0x61, 0x6e, 0x67, 0x2e, 0x6f, 0x72, 0x67, 0x2f,
-	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x73, 0x2f, 0x64,
-	0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x70, 0x62, 0xf8, 0x01, 0x01, 0xa2, 0x02,
-	0x03, 0x47, 0x50, 0x42, 0xaa, 0x02, 0x1a, 0x47, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x50, 0x72,
-	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x52, 0x65, 0x66, 0x6c, 0x65, 0x63, 0x74, 0x69, 0x6f,
-	0x6e,
+	0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x2e, 0x4a, 0x73, 0x6f, 0x6e, 0x46,
+	0x6f, 0x72, 0x6d, 0x61, 0x74, 0x42, 0x33, 0x88, 0x01, 0x01, 0x98, 0x01, 0x03, 0x98, 0x01, 0x06,
+	0x98, 0x01, 0x01, 0xa2, 0x01, 0x17, 0x12, 0x12, 0x4c, 0x45, 0x47, 0x41, 0x43, 0x59, 0x5f, 0x42,
+	0x45, 0x53, 0x54, 0x5f, 0x45, 0x46, 0x46, 0x4f, 0x52, 0x54, 0x18, 0xe6, 0x07, 0xa2, 0x01, 0x0a,
+	0x12, 0x05, 0x41, 0x4c, 0x4c, 0x4f, 0x57, 0x18, 0xe7, 0x07, 0x52, 0x0a, 0x6a, 0x73, 0x6f, 0x6e,
+	0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x22, 0x5c, 0x0a, 0x0d, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x50,
+	0x72, 0x65, 0x73, 0x65, 0x6e, 0x63, 0x65, 0x12, 0x1a, 0x0a, 0x16, 0x46, 0x49, 0x45, 0x4c, 0x44,
+	0x5f, 0x50, 0x52, 0x45, 0x53, 0x45, 0x4e, 0x43, 0x45, 0x5f, 0x55, 0x4e, 0x4b, 0x4e, 0x4f, 0x57,
+	0x4e, 0x10, 0x00, 0x12, 0x0c, 0x0a, 0x08, 0x45, 0x58, 0x50, 0x4c, 0x49, 0x43, 0x49, 0x54, 0x10,
+	0x01, 0x12, 0x0c, 0x0a, 0x08, 0x49, 0x4d, 0x50, 0x4c, 0x49, 0x43, 0x49, 0x54, 0x10, 0x02, 0x12,
+	0x13, 0x0a, 0x0f, 0x4c, 0x45, 0x47, 0x41, 0x43, 0x59, 0x5f, 0x52, 0x45, 0x51, 0x55, 0x49, 0x52,
+	0x45, 0x44, 0x10, 0x03, 0x22, 0x37, 0x0a, 0x08, 0x45, 0x6e, 0x75, 0x6d, 0x54, 0x79, 0x70, 0x65,
+	0x12, 0x15, 0x0a, 0x11, 0x45, 0x4e, 0x55, 0x4d, 0x5f, 0x54, 0x59, 0x50, 0x45, 0x5f, 0x55, 0x4e,
+	0x4b, 0x4e, 0x4f, 0x57, 0x4e, 0x10, 0x00, 0x12, 0x08, 0x0a, 0x04, 0x4f, 0x50, 0x45, 0x4e, 0x10,
+	0x01, 0x12, 0x0a, 0x0a, 0x06, 0x43, 0x4c, 0x4f, 0x53, 0x45, 0x44, 0x10, 0x02, 0x22, 0x56, 0x0a,
+	0x15, 0x52, 0x65, 0x70, 0x65, 0x61, 0x74, 0x65, 0x64, 0x46, 0x69, 0x65, 0x6c, 0x64, 0x45, 0x6e,
+	0x63, 0x6f, 0x64, 0x69, 0x6e, 0x67, 0x12, 0x23, 0x0a, 0x1f, 0x52, 0x45, 0x50, 0x45, 0x41, 0x54,
+	0x45, 0x44, 0x5f, 0x46, 0x49, 0x45, 0x4c, 0x44, 0x5f, 0x45, 0x4e, 0x43, 0x4f, 0x44, 0x49, 0x4e,
+	0x47, 0x5f, 0x55, 0x4e, 0x4b, 0x4e, 0x4f, 0x57, 0x4e, 0x10, 0x00, 0x12, 0x0a, 0x0a, 0x06, 0x50,
+	0x41, 0x43, 0x4b, 0x45, 0x44, 0x10, 0x01, 0x12, 0x0c, 0x0a, 0x08, 0x45, 0x58, 0x50, 0x41, 0x4e,
+	0x44, 0x45, 0x44, 0x10, 0x02, 0x22, 0x43, 0x0a, 0x0e, 0x55, 0x74, 0x66, 0x38, 0x56, 0x61, 0x6c,
+	0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x1b, 0x0a, 0x17, 0x55, 0x54, 0x46, 0x38, 0x5f,
+	0x56, 0x41, 0x4c, 0x49, 0x44, 0x41, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x55, 0x4e, 0x4b, 0x4e, 0x4f,
+	0x57, 0x4e, 0x10, 0x00, 0x12, 0x08, 0x0a, 0x04, 0x4e, 0x4f, 0x4e, 0x45, 0x10, 0x01, 0x12, 0x0a,
+	0x0a, 0x06, 0x56, 0x45, 0x52, 0x49, 0x46, 0x59, 0x10, 0x02, 0x22, 0x53, 0x0a, 0x0f, 0x4d, 0x65,
+	0x73, 0x73, 0x61, 0x67, 0x65, 0x45, 0x6e, 0x63, 0x6f, 0x64, 0x69, 0x6e, 0x67, 0x12, 0x1c, 0x0a,
+	0x18, 0x4d, 0x45, 0x53, 0x53, 0x41, 0x47, 0x45, 0x5f, 0x45, 0x4e, 0x43, 0x4f, 0x44, 0x49, 0x4e,
+	0x47, 0x5f, 0x55, 0x4e, 0x4b, 0x4e, 0x4f, 0x57, 0x4e, 0x10, 0x00, 0x12, 0x13, 0x0a, 0x0f, 0x4c,
+	0x45, 0x4e, 0x47, 0x54, 0x48, 0x5f, 0x50, 0x52, 0x45, 0x46, 0x49, 0x58, 0x45, 0x44, 0x10, 0x01,
+	0x12, 0x0d, 0x0a, 0x09, 0x44, 0x45, 0x4c, 0x49, 0x4d, 0x49, 0x54, 0x45, 0x44, 0x10, 0x02, 0x22,
+	0x48, 0x0a, 0x0a, 0x4a, 0x73, 0x6f, 0x6e, 0x46, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x12, 0x17, 0x0a,
+	0x13, 0x4a, 0x53, 0x4f, 0x4e, 0x5f, 0x46, 0x4f, 0x52, 0x4d, 0x41, 0x54, 0x5f, 0x55, 0x4e, 0x4b,
+	0x4e, 0x4f, 0x57, 0x4e, 0x10, 0x00, 0x12, 0x09, 0x0a, 0x05, 0x41, 0x4c, 0x4c, 0x4f, 0x57, 0x10,
+	0x01, 0x12, 0x16, 0x0a, 0x12, 0x4c, 0x45, 0x47, 0x41, 0x43, 0x59, 0x5f, 0x42, 0x45, 0x53, 0x54,
+	0x5f, 0x45, 0x46, 0x46, 0x4f, 0x52, 0x54, 0x10, 0x02, 0x2a, 0x06, 0x08, 0xe8, 0x07, 0x10, 0xe9,
+	0x07, 0x2a, 0x06, 0x08, 0xe9, 0x07, 0x10, 0xea, 0x07, 0x2a, 0x06, 0x08, 0x8b, 0x4e, 0x10, 0x90,
+	0x4e, 0x4a, 0x06, 0x08, 0xe7, 0x07, 0x10, 0xe8, 0x07, 0x22, 0xfe, 0x02, 0x0a, 0x12, 0x46, 0x65,
+	0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x44, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x73,
+	0x12, 0x58, 0x0a, 0x08, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x73, 0x18, 0x01, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x3c, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x44,
+	0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x73, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53,
+	0x65, 0x74, 0x45, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x44, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74,
+	0x52, 0x08, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x73, 0x12, 0x41, 0x0a, 0x0f, 0x6d, 0x69,
+	0x6e, 0x69, 0x6d, 0x75, 0x6d, 0x5f, 0x65, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x04, 0x20,
+	0x01, 0x28, 0x0e, 0x32, 0x18, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0e, 0x6d,
+	0x69, 0x6e, 0x69, 0x6d, 0x75, 0x6d, 0x45, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x41, 0x0a,
+	0x0f, 0x6d, 0x61, 0x78, 0x69, 0x6d, 0x75, 0x6d, 0x5f, 0x65, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e,
+	0x18, 0x05, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x18, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x45, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e,
+	0x52, 0x0e, 0x6d, 0x61, 0x78, 0x69, 0x6d, 0x75, 0x6d, 0x45, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e,
+	0x1a, 0x87, 0x01, 0x0a, 0x18, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74, 0x45,
+	0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x44, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x12, 0x32, 0x0a,
+	0x07, 0x65, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x18,
+	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
+	0x2e, 0x45, 0x64, 0x69, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x07, 0x65, 0x64, 0x69, 0x74, 0x69, 0x6f,
+	0x6e, 0x12, 0x37, 0x0a, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x18, 0x02, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x1b, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x53, 0x65, 0x74,
+	0x52, 0x08, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x22, 0xa7, 0x02, 0x0a, 0x0e, 0x53,
+	0x6f, 0x75, 0x72, 0x63, 0x65, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x12, 0x44, 0x0a,
+	0x08, 0x6c, 0x6f, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32,
+	0x28, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
+	0x66, 0x2e, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66, 0x6f,
+	0x2e, 0x4c, 0x6f, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x08, 0x6c, 0x6f, 0x63, 0x61, 0x74,
+	0x69, 0x6f, 0x6e, 0x1a, 0xce, 0x01, 0x0a, 0x08, 0x4c, 0x6f, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e,
+	0x12, 0x16, 0x0a, 0x04, 0x70, 0x61, 0x74, 0x68, 0x18, 0x01, 0x20, 0x03, 0x28, 0x05, 0x42, 0x02,
+	0x10, 0x01, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x12, 0x16, 0x0a, 0x04, 0x73, 0x70, 0x61, 0x6e,
+	0x18, 0x02, 0x20, 0x03, 0x28, 0x05, 0x42, 0x02, 0x10, 0x01, 0x52, 0x04, 0x73, 0x70, 0x61, 0x6e,
+	0x12, 0x29, 0x0a, 0x10, 0x6c, 0x65, 0x61, 0x64, 0x69, 0x6e, 0x67, 0x5f, 0x63, 0x6f, 0x6d, 0x6d,
+	0x65, 0x6e, 0x74, 0x73, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0f, 0x6c, 0x65, 0x61, 0x64,
+	0x69, 0x6e, 0x67, 0x43, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x12, 0x2b, 0x0a, 0x11, 0x74,
+	0x72, 0x61, 0x69, 0x6c, 0x69, 0x6e, 0x67, 0x5f, 0x63, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x74, 0x73,
+	0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x10, 0x74, 0x72, 0x61, 0x69, 0x6c, 0x69, 0x6e, 0x67,
+	0x43, 0x6f, 0x6d, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x12, 0x3a, 0x0a, 0x19, 0x6c, 0x65, 0x61, 0x64,
+	0x69, 0x6e, 0x67, 0x5f, 0x64, 0x65, 0x74, 0x61, 0x63, 0x68, 0x65, 0x64, 0x5f, 0x63, 0x6f, 0x6d,
+	0x6d, 0x65, 0x6e, 0x74, 0x73, 0x18, 0x06, 0x20, 0x03, 0x28, 0x09, 0x52, 0x17, 0x6c, 0x65, 0x61,
+	0x64, 0x69, 0x6e, 0x67, 0x44, 0x65, 0x74, 0x61, 0x63, 0x68, 0x65, 0x64, 0x43, 0x6f, 0x6d, 0x6d,
+	0x65, 0x6e, 0x74, 0x73, 0x22, 0xd0, 0x02, 0x0a, 0x11, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74,
+	0x65, 0x64, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x12, 0x4d, 0x0a, 0x0a, 0x61, 0x6e,
+	0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x2d,
+	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
+	0x2e, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x65, 0x64, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e,
+	0x66, 0x6f, 0x2e, 0x41, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0a, 0x61,
+	0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x1a, 0xeb, 0x01, 0x0a, 0x0a, 0x41, 0x6e,
+	0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x16, 0x0a, 0x04, 0x70, 0x61, 0x74, 0x68,
+	0x18, 0x01, 0x20, 0x03, 0x28, 0x05, 0x42, 0x02, 0x10, 0x01, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68,
+	0x12, 0x1f, 0x0a, 0x0b, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x18,
+	0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0a, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x46, 0x69, 0x6c,
+	0x65, 0x12, 0x14, 0x0a, 0x05, 0x62, 0x65, 0x67, 0x69, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x05,
+	0x52, 0x05, 0x62, 0x65, 0x67, 0x69, 0x6e, 0x12, 0x10, 0x0a, 0x03, 0x65, 0x6e, 0x64, 0x18, 0x04,
+	0x20, 0x01, 0x28, 0x05, 0x52, 0x03, 0x65, 0x6e, 0x64, 0x12, 0x52, 0x0a, 0x08, 0x73, 0x65, 0x6d,
+	0x61, 0x6e, 0x74, 0x69, 0x63, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x36, 0x2e, 0x67, 0x6f,
+	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x47, 0x65,
+	0x6e, 0x65, 0x72, 0x61, 0x74, 0x65, 0x64, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x2e,
+	0x41, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x53, 0x65, 0x6d, 0x61, 0x6e,
+	0x74, 0x69, 0x63, 0x52, 0x08, 0x73, 0x65, 0x6d, 0x61, 0x6e, 0x74, 0x69, 0x63, 0x22, 0x28, 0x0a,
+	0x08, 0x53, 0x65, 0x6d, 0x61, 0x6e, 0x74, 0x69, 0x63, 0x12, 0x08, 0x0a, 0x04, 0x4e, 0x4f, 0x4e,
+	0x45, 0x10, 0x00, 0x12, 0x07, 0x0a, 0x03, 0x53, 0x45, 0x54, 0x10, 0x01, 0x12, 0x09, 0x0a, 0x05,
+	0x41, 0x4c, 0x49, 0x41, 0x53, 0x10, 0x02, 0x2a, 0xea, 0x01, 0x0a, 0x07, 0x45, 0x64, 0x69, 0x74,
+	0x69, 0x6f, 0x6e, 0x12, 0x13, 0x0a, 0x0f, 0x45, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x55,
+	0x4e, 0x4b, 0x4e, 0x4f, 0x57, 0x4e, 0x10, 0x00, 0x12, 0x13, 0x0a, 0x0e, 0x45, 0x44, 0x49, 0x54,
+	0x49, 0x4f, 0x4e, 0x5f, 0x50, 0x52, 0x4f, 0x54, 0x4f, 0x32, 0x10, 0xe6, 0x07, 0x12, 0x13, 0x0a,
+	0x0e, 0x45, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x50, 0x52, 0x4f, 0x54, 0x4f, 0x33, 0x10,
+	0xe7, 0x07, 0x12, 0x11, 0x0a, 0x0c, 0x45, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x32, 0x30,
+	0x32, 0x33, 0x10, 0xe8, 0x07, 0x12, 0x17, 0x0a, 0x13, 0x45, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e,
+	0x5f, 0x31, 0x5f, 0x54, 0x45, 0x53, 0x54, 0x5f, 0x4f, 0x4e, 0x4c, 0x59, 0x10, 0x01, 0x12, 0x17,
+	0x0a, 0x13, 0x45, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e, 0x5f, 0x32, 0x5f, 0x54, 0x45, 0x53, 0x54,
+	0x5f, 0x4f, 0x4e, 0x4c, 0x59, 0x10, 0x02, 0x12, 0x1d, 0x0a, 0x17, 0x45, 0x44, 0x49, 0x54, 0x49,
+	0x4f, 0x4e, 0x5f, 0x39, 0x39, 0x39, 0x39, 0x37, 0x5f, 0x54, 0x45, 0x53, 0x54, 0x5f, 0x4f, 0x4e,
+	0x4c, 0x59, 0x10, 0x9d, 0x8d, 0x06, 0x12, 0x1d, 0x0a, 0x17, 0x45, 0x44, 0x49, 0x54, 0x49, 0x4f,
+	0x4e, 0x5f, 0x39, 0x39, 0x39, 0x39, 0x38, 0x5f, 0x54, 0x45, 0x53, 0x54, 0x5f, 0x4f, 0x4e, 0x4c,
+	0x59, 0x10, 0x9e, 0x8d, 0x06, 0x12, 0x1d, 0x0a, 0x17, 0x45, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e,
+	0x5f, 0x39, 0x39, 0x39, 0x39, 0x39, 0x5f, 0x54, 0x45, 0x53, 0x54, 0x5f, 0x4f, 0x4e, 0x4c, 0x59,
+	0x10, 0x9f, 0x8d, 0x06, 0x42, 0x7e, 0x0a, 0x13, 0x63, 0x6f, 0x6d, 0x2e, 0x67, 0x6f, 0x6f, 0x67,
+	0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x42, 0x10, 0x44, 0x65, 0x73,
+	0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x73, 0x48, 0x01, 0x5a,
+	0x2d, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x67, 0x6f, 0x6c, 0x61, 0x6e, 0x67, 0x2e, 0x6f,
+	0x72, 0x67, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2f, 0x74, 0x79, 0x70, 0x65,
+	0x73, 0x2f, 0x64, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x70, 0x62, 0xf8, 0x01,
+	0x01, 0xa2, 0x02, 0x03, 0x47, 0x50, 0x42, 0xaa, 0x02, 0x1a, 0x47, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x52, 0x65, 0x66, 0x6c, 0x65, 0x63,
+	0x74, 0x69, 0x6f, 0x6e,
 }
 
 var (
@@ -4123,103 +5091,136 @@ func file_google_protobuf_descriptor_proto_rawDescGZIP() []byte {
 	return file_google_protobuf_descriptor_proto_rawDescData
 }
 
-var file_google_protobuf_descriptor_proto_enumTypes = make([]protoimpl.EnumInfo, 10)
-var file_google_protobuf_descriptor_proto_msgTypes = make([]protoimpl.MessageInfo, 28)
+var file_google_protobuf_descriptor_proto_enumTypes = make([]protoimpl.EnumInfo, 17)
+var file_google_protobuf_descriptor_proto_msgTypes = make([]protoimpl.MessageInfo, 32)
 var file_google_protobuf_descriptor_proto_goTypes = []interface{}{
-	(ExtensionRangeOptions_VerificationState)(0),  // 0: google.protobuf.ExtensionRangeOptions.VerificationState
-	(FieldDescriptorProto_Type)(0),                // 1: google.protobuf.FieldDescriptorProto.Type
-	(FieldDescriptorProto_Label)(0),               // 2: google.protobuf.FieldDescriptorProto.Label
-	(FileOptions_OptimizeMode)(0),                 // 3: google.protobuf.FileOptions.OptimizeMode
-	(FieldOptions_CType)(0),                       // 4: google.protobuf.FieldOptions.CType
-	(FieldOptions_JSType)(0),                      // 5: google.protobuf.FieldOptions.JSType
-	(FieldOptions_OptionRetention)(0),             // 6: google.protobuf.FieldOptions.OptionRetention
-	(FieldOptions_OptionTargetType)(0),            // 7: google.protobuf.FieldOptions.OptionTargetType
-	(MethodOptions_IdempotencyLevel)(0),           // 8: google.protobuf.MethodOptions.IdempotencyLevel
-	(GeneratedCodeInfo_Annotation_Semantic)(0),    // 9: google.protobuf.GeneratedCodeInfo.Annotation.Semantic
-	(*FileDescriptorSet)(nil),                     // 10: google.protobuf.FileDescriptorSet
-	(*FileDescriptorProto)(nil),                   // 11: google.protobuf.FileDescriptorProto
-	(*DescriptorProto)(nil),                       // 12: google.protobuf.DescriptorProto
-	(*ExtensionRangeOptions)(nil),                 // 13: google.protobuf.ExtensionRangeOptions
-	(*FieldDescriptorProto)(nil),                  // 14: google.protobuf.FieldDescriptorProto
-	(*OneofDescriptorProto)(nil),                  // 15: google.protobuf.OneofDescriptorProto
-	(*EnumDescriptorProto)(nil),                   // 16: google.protobuf.EnumDescriptorProto
-	(*EnumValueDescriptorProto)(nil),              // 17: google.protobuf.EnumValueDescriptorProto
-	(*ServiceDescriptorProto)(nil),                // 18: google.protobuf.ServiceDescriptorProto
-	(*MethodDescriptorProto)(nil),                 // 19: google.protobuf.MethodDescriptorProto
-	(*FileOptions)(nil),                           // 20: google.protobuf.FileOptions
-	(*MessageOptions)(nil),                        // 21: google.protobuf.MessageOptions
-	(*FieldOptions)(nil),                          // 22: google.protobuf.FieldOptions
-	(*OneofOptions)(nil),                          // 23: google.protobuf.OneofOptions
-	(*EnumOptions)(nil),                           // 24: google.protobuf.EnumOptions
-	(*EnumValueOptions)(nil),                      // 25: google.protobuf.EnumValueOptions
-	(*ServiceOptions)(nil),                        // 26: google.protobuf.ServiceOptions
-	(*MethodOptions)(nil),                         // 27: google.protobuf.MethodOptions
-	(*UninterpretedOption)(nil),                   // 28: google.protobuf.UninterpretedOption
-	(*SourceCodeInfo)(nil),                        // 29: google.protobuf.SourceCodeInfo
-	(*GeneratedCodeInfo)(nil),                     // 30: google.protobuf.GeneratedCodeInfo
-	(*DescriptorProto_ExtensionRange)(nil),        // 31: google.protobuf.DescriptorProto.ExtensionRange
-	(*DescriptorProto_ReservedRange)(nil),         // 32: google.protobuf.DescriptorProto.ReservedRange
-	(*ExtensionRangeOptions_Declaration)(nil),     // 33: google.protobuf.ExtensionRangeOptions.Declaration
-	(*EnumDescriptorProto_EnumReservedRange)(nil), // 34: google.protobuf.EnumDescriptorProto.EnumReservedRange
-	(*UninterpretedOption_NamePart)(nil),          // 35: google.protobuf.UninterpretedOption.NamePart
-	(*SourceCodeInfo_Location)(nil),               // 36: google.protobuf.SourceCodeInfo.Location
-	(*GeneratedCodeInfo_Annotation)(nil),          // 37: google.protobuf.GeneratedCodeInfo.Annotation
+	(Edition)(0), // 0: google.protobuf.Edition
+	(ExtensionRangeOptions_VerificationState)(0),        // 1: google.protobuf.ExtensionRangeOptions.VerificationState
+	(FieldDescriptorProto_Type)(0),                      // 2: google.protobuf.FieldDescriptorProto.Type
+	(FieldDescriptorProto_Label)(0),                     // 3: google.protobuf.FieldDescriptorProto.Label
+	(FileOptions_OptimizeMode)(0),                       // 4: google.protobuf.FileOptions.OptimizeMode
+	(FieldOptions_CType)(0),                             // 5: google.protobuf.FieldOptions.CType
+	(FieldOptions_JSType)(0),                            // 6: google.protobuf.FieldOptions.JSType
+	(FieldOptions_OptionRetention)(0),                   // 7: google.protobuf.FieldOptions.OptionRetention
+	(FieldOptions_OptionTargetType)(0),                  // 8: google.protobuf.FieldOptions.OptionTargetType
+	(MethodOptions_IdempotencyLevel)(0),                 // 9: google.protobuf.MethodOptions.IdempotencyLevel
+	(FeatureSet_FieldPresence)(0),                       // 10: google.protobuf.FeatureSet.FieldPresence
+	(FeatureSet_EnumType)(0),                            // 11: google.protobuf.FeatureSet.EnumType
+	(FeatureSet_RepeatedFieldEncoding)(0),               // 12: google.protobuf.FeatureSet.RepeatedFieldEncoding
+	(FeatureSet_Utf8Validation)(0),                      // 13: google.protobuf.FeatureSet.Utf8Validation
+	(FeatureSet_MessageEncoding)(0),                     // 14: google.protobuf.FeatureSet.MessageEncoding
+	(FeatureSet_JsonFormat)(0),                          // 15: google.protobuf.FeatureSet.JsonFormat
+	(GeneratedCodeInfo_Annotation_Semantic)(0),          // 16: google.protobuf.GeneratedCodeInfo.Annotation.Semantic
+	(*FileDescriptorSet)(nil),                           // 17: google.protobuf.FileDescriptorSet
+	(*FileDescriptorProto)(nil),                         // 18: google.protobuf.FileDescriptorProto
+	(*DescriptorProto)(nil),                             // 19: google.protobuf.DescriptorProto
+	(*ExtensionRangeOptions)(nil),                       // 20: google.protobuf.ExtensionRangeOptions
+	(*FieldDescriptorProto)(nil),                        // 21: google.protobuf.FieldDescriptorProto
+	(*OneofDescriptorProto)(nil),                        // 22: google.protobuf.OneofDescriptorProto
+	(*EnumDescriptorProto)(nil),                         // 23: google.protobuf.EnumDescriptorProto
+	(*EnumValueDescriptorProto)(nil),                    // 24: google.protobuf.EnumValueDescriptorProto
+	(*ServiceDescriptorProto)(nil),                      // 25: google.protobuf.ServiceDescriptorProto
+	(*MethodDescriptorProto)(nil),                       // 26: google.protobuf.MethodDescriptorProto
+	(*FileOptions)(nil),                                 // 27: google.protobuf.FileOptions
+	(*MessageOptions)(nil),                              // 28: google.protobuf.MessageOptions
+	(*FieldOptions)(nil),                                // 29: google.protobuf.FieldOptions
+	(*OneofOptions)(nil),                                // 30: google.protobuf.OneofOptions
+	(*EnumOptions)(nil),                                 // 31: google.protobuf.EnumOptions
+	(*EnumValueOptions)(nil),                            // 32: google.protobuf.EnumValueOptions
+	(*ServiceOptions)(nil),                              // 33: google.protobuf.ServiceOptions
+	(*MethodOptions)(nil),                               // 34: google.protobuf.MethodOptions
+	(*UninterpretedOption)(nil),                         // 35: google.protobuf.UninterpretedOption
+	(*FeatureSet)(nil),                                  // 36: google.protobuf.FeatureSet
+	(*FeatureSetDefaults)(nil),                          // 37: google.protobuf.FeatureSetDefaults
+	(*SourceCodeInfo)(nil),                              // 38: google.protobuf.SourceCodeInfo
+	(*GeneratedCodeInfo)(nil),                           // 39: google.protobuf.GeneratedCodeInfo
+	(*DescriptorProto_ExtensionRange)(nil),              // 40: google.protobuf.DescriptorProto.ExtensionRange
+	(*DescriptorProto_ReservedRange)(nil),               // 41: google.protobuf.DescriptorProto.ReservedRange
+	(*ExtensionRangeOptions_Declaration)(nil),           // 42: google.protobuf.ExtensionRangeOptions.Declaration
+	(*EnumDescriptorProto_EnumReservedRange)(nil),       // 43: google.protobuf.EnumDescriptorProto.EnumReservedRange
+	(*FieldOptions_EditionDefault)(nil),                 // 44: google.protobuf.FieldOptions.EditionDefault
+	(*UninterpretedOption_NamePart)(nil),                // 45: google.protobuf.UninterpretedOption.NamePart
+	(*FeatureSetDefaults_FeatureSetEditionDefault)(nil), // 46: google.protobuf.FeatureSetDefaults.FeatureSetEditionDefault
+	(*SourceCodeInfo_Location)(nil),                     // 47: google.protobuf.SourceCodeInfo.Location
+	(*GeneratedCodeInfo_Annotation)(nil),                // 48: google.protobuf.GeneratedCodeInfo.Annotation
 }
 var file_google_protobuf_descriptor_proto_depIdxs = []int32{
-	11, // 0: google.protobuf.FileDescriptorSet.file:type_name -> google.protobuf.FileDescriptorProto
-	12, // 1: google.protobuf.FileDescriptorProto.message_type:type_name -> google.protobuf.DescriptorProto
-	16, // 2: google.protobuf.FileDescriptorProto.enum_type:type_name -> google.protobuf.EnumDescriptorProto
-	18, // 3: google.protobuf.FileDescriptorProto.service:type_name -> google.protobuf.ServiceDescriptorProto
-	14, // 4: google.protobuf.FileDescriptorProto.extension:type_name -> google.protobuf.FieldDescriptorProto
-	20, // 5: google.protobuf.FileDescriptorProto.options:type_name -> google.protobuf.FileOptions
-	29, // 6: google.protobuf.FileDescriptorProto.source_code_info:type_name -> google.protobuf.SourceCodeInfo
-	14, // 7: google.protobuf.DescriptorProto.field:type_name -> google.protobuf.FieldDescriptorProto
-	14, // 8: google.protobuf.DescriptorProto.extension:type_name -> google.protobuf.FieldDescriptorProto
-	12, // 9: google.protobuf.DescriptorProto.nested_type:type_name -> google.protobuf.DescriptorProto
-	16, // 10: google.protobuf.DescriptorProto.enum_type:type_name -> google.protobuf.EnumDescriptorProto
-	31, // 11: google.protobuf.DescriptorProto.extension_range:type_name -> google.protobuf.DescriptorProto.ExtensionRange
-	15, // 12: google.protobuf.DescriptorProto.oneof_decl:type_name -> google.protobuf.OneofDescriptorProto
-	21, // 13: google.protobuf.DescriptorProto.options:type_name -> google.protobuf.MessageOptions
-	32, // 14: google.protobuf.DescriptorProto.reserved_range:type_name -> google.protobuf.DescriptorProto.ReservedRange
-	28, // 15: google.protobuf.ExtensionRangeOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
-	33, // 16: google.protobuf.ExtensionRangeOptions.declaration:type_name -> google.protobuf.ExtensionRangeOptions.Declaration
-	0,  // 17: google.protobuf.ExtensionRangeOptions.verification:type_name -> google.protobuf.ExtensionRangeOptions.VerificationState
-	2,  // 18: google.protobuf.FieldDescriptorProto.label:type_name -> google.protobuf.FieldDescriptorProto.Label
-	1,  // 19: google.protobuf.FieldDescriptorProto.type:type_name -> google.protobuf.FieldDescriptorProto.Type
-	22, // 20: google.protobuf.FieldDescriptorProto.options:type_name -> google.protobuf.FieldOptions
-	23, // 21: google.protobuf.OneofDescriptorProto.options:type_name -> google.protobuf.OneofOptions
-	17, // 22: google.protobuf.EnumDescriptorProto.value:type_name -> google.protobuf.EnumValueDescriptorProto
-	24, // 23: google.protobuf.EnumDescriptorProto.options:type_name -> google.protobuf.EnumOptions
-	34, // 24: google.protobuf.EnumDescriptorProto.reserved_range:type_name -> google.protobuf.EnumDescriptorProto.EnumReservedRange
-	25, // 25: google.protobuf.EnumValueDescriptorProto.options:type_name -> google.protobuf.EnumValueOptions
-	19, // 26: google.protobuf.ServiceDescriptorProto.method:type_name -> google.protobuf.MethodDescriptorProto
-	26, // 27: google.protobuf.ServiceDescriptorProto.options:type_name -> google.protobuf.ServiceOptions
-	27, // 28: google.protobuf.MethodDescriptorProto.options:type_name -> google.protobuf.MethodOptions
-	3,  // 29: google.protobuf.FileOptions.optimize_for:type_name -> google.protobuf.FileOptions.OptimizeMode
-	28, // 30: google.protobuf.FileOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
-	28, // 31: google.protobuf.MessageOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
-	4,  // 32: google.protobuf.FieldOptions.ctype:type_name -> google.protobuf.FieldOptions.CType
-	5,  // 33: google.protobuf.FieldOptions.jstype:type_name -> google.protobuf.FieldOptions.JSType
-	6,  // 34: google.protobuf.FieldOptions.retention:type_name -> google.protobuf.FieldOptions.OptionRetention
-	7,  // 35: google.protobuf.FieldOptions.target:type_name -> google.protobuf.FieldOptions.OptionTargetType
-	7,  // 36: google.protobuf.FieldOptions.targets:type_name -> google.protobuf.FieldOptions.OptionTargetType
-	28, // 37: google.protobuf.FieldOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
-	28, // 38: google.protobuf.OneofOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
-	28, // 39: google.protobuf.EnumOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
-	28, // 40: google.protobuf.EnumValueOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
-	28, // 41: google.protobuf.ServiceOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
-	8,  // 42: google.protobuf.MethodOptions.idempotency_level:type_name -> google.protobuf.MethodOptions.IdempotencyLevel
-	28, // 43: google.protobuf.MethodOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
-	35, // 44: google.protobuf.UninterpretedOption.name:type_name -> google.protobuf.UninterpretedOption.NamePart
-	36, // 45: google.protobuf.SourceCodeInfo.location:type_name -> google.protobuf.SourceCodeInfo.Location
-	37, // 46: google.protobuf.GeneratedCodeInfo.annotation:type_name -> google.protobuf.GeneratedCodeInfo.Annotation
-	13, // 47: google.protobuf.DescriptorProto.ExtensionRange.options:type_name -> google.protobuf.ExtensionRangeOptions
-	9,  // 48: google.protobuf.GeneratedCodeInfo.Annotation.semantic:type_name -> google.protobuf.GeneratedCodeInfo.Annotation.Semantic
-	49, // [49:49] is the sub-list for method output_type
-	49, // [49:49] is the sub-list for method input_type
-	49, // [49:49] is the sub-list for extension type_name
-	49, // [49:49] is the sub-list for extension extendee
-	0,  // [0:49] is the sub-list for field type_name
+	18, // 0: google.protobuf.FileDescriptorSet.file:type_name -> google.protobuf.FileDescriptorProto
+	19, // 1: google.protobuf.FileDescriptorProto.message_type:type_name -> google.protobuf.DescriptorProto
+	23, // 2: google.protobuf.FileDescriptorProto.enum_type:type_name -> google.protobuf.EnumDescriptorProto
+	25, // 3: google.protobuf.FileDescriptorProto.service:type_name -> google.protobuf.ServiceDescriptorProto
+	21, // 4: google.protobuf.FileDescriptorProto.extension:type_name -> google.protobuf.FieldDescriptorProto
+	27, // 5: google.protobuf.FileDescriptorProto.options:type_name -> google.protobuf.FileOptions
+	38, // 6: google.protobuf.FileDescriptorProto.source_code_info:type_name -> google.protobuf.SourceCodeInfo
+	0,  // 7: google.protobuf.FileDescriptorProto.edition:type_name -> google.protobuf.Edition
+	21, // 8: google.protobuf.DescriptorProto.field:type_name -> google.protobuf.FieldDescriptorProto
+	21, // 9: google.protobuf.DescriptorProto.extension:type_name -> google.protobuf.FieldDescriptorProto
+	19, // 10: google.protobuf.DescriptorProto.nested_type:type_name -> google.protobuf.DescriptorProto
+	23, // 11: google.protobuf.DescriptorProto.enum_type:type_name -> google.protobuf.EnumDescriptorProto
+	40, // 12: google.protobuf.DescriptorProto.extension_range:type_name -> google.protobuf.DescriptorProto.ExtensionRange
+	22, // 13: google.protobuf.DescriptorProto.oneof_decl:type_name -> google.protobuf.OneofDescriptorProto
+	28, // 14: google.protobuf.DescriptorProto.options:type_name -> google.protobuf.MessageOptions
+	41, // 15: google.protobuf.DescriptorProto.reserved_range:type_name -> google.protobuf.DescriptorProto.ReservedRange
+	35, // 16: google.protobuf.ExtensionRangeOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
+	42, // 17: google.protobuf.ExtensionRangeOptions.declaration:type_name -> google.protobuf.ExtensionRangeOptions.Declaration
+	36, // 18: google.protobuf.ExtensionRangeOptions.features:type_name -> google.protobuf.FeatureSet
+	1,  // 19: google.protobuf.ExtensionRangeOptions.verification:type_name -> google.protobuf.ExtensionRangeOptions.VerificationState
+	3,  // 20: google.protobuf.FieldDescriptorProto.label:type_name -> google.protobuf.FieldDescriptorProto.Label
+	2,  // 21: google.protobuf.FieldDescriptorProto.type:type_name -> google.protobuf.FieldDescriptorProto.Type
+	29, // 22: google.protobuf.FieldDescriptorProto.options:type_name -> google.protobuf.FieldOptions
+	30, // 23: google.protobuf.OneofDescriptorProto.options:type_name -> google.protobuf.OneofOptions
+	24, // 24: google.protobuf.EnumDescriptorProto.value:type_name -> google.protobuf.EnumValueDescriptorProto
+	31, // 25: google.protobuf.EnumDescriptorProto.options:type_name -> google.protobuf.EnumOptions
+	43, // 26: google.protobuf.EnumDescriptorProto.reserved_range:type_name -> google.protobuf.EnumDescriptorProto.EnumReservedRange
+	32, // 27: google.protobuf.EnumValueDescriptorProto.options:type_name -> google.protobuf.EnumValueOptions
+	26, // 28: google.protobuf.ServiceDescriptorProto.method:type_name -> google.protobuf.MethodDescriptorProto
+	33, // 29: google.protobuf.ServiceDescriptorProto.options:type_name -> google.protobuf.ServiceOptions
+	34, // 30: google.protobuf.MethodDescriptorProto.options:type_name -> google.protobuf.MethodOptions
+	4,  // 31: google.protobuf.FileOptions.optimize_for:type_name -> google.protobuf.FileOptions.OptimizeMode
+	36, // 32: google.protobuf.FileOptions.features:type_name -> google.protobuf.FeatureSet
+	35, // 33: google.protobuf.FileOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
+	36, // 34: google.protobuf.MessageOptions.features:type_name -> google.protobuf.FeatureSet
+	35, // 35: google.protobuf.MessageOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
+	5,  // 36: google.protobuf.FieldOptions.ctype:type_name -> google.protobuf.FieldOptions.CType
+	6,  // 37: google.protobuf.FieldOptions.jstype:type_name -> google.protobuf.FieldOptions.JSType
+	7,  // 38: google.protobuf.FieldOptions.retention:type_name -> google.protobuf.FieldOptions.OptionRetention
+	8,  // 39: google.protobuf.FieldOptions.targets:type_name -> google.protobuf.FieldOptions.OptionTargetType
+	44, // 40: google.protobuf.FieldOptions.edition_defaults:type_name -> google.protobuf.FieldOptions.EditionDefault
+	36, // 41: google.protobuf.FieldOptions.features:type_name -> google.protobuf.FeatureSet
+	35, // 42: google.protobuf.FieldOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
+	36, // 43: google.protobuf.OneofOptions.features:type_name -> google.protobuf.FeatureSet
+	35, // 44: google.protobuf.OneofOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
+	36, // 45: google.protobuf.EnumOptions.features:type_name -> google.protobuf.FeatureSet
+	35, // 46: google.protobuf.EnumOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
+	36, // 47: google.protobuf.EnumValueOptions.features:type_name -> google.protobuf.FeatureSet
+	35, // 48: google.protobuf.EnumValueOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
+	36, // 49: google.protobuf.ServiceOptions.features:type_name -> google.protobuf.FeatureSet
+	35, // 50: google.protobuf.ServiceOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
+	9,  // 51: google.protobuf.MethodOptions.idempotency_level:type_name -> google.protobuf.MethodOptions.IdempotencyLevel
+	36, // 52: google.protobuf.MethodOptions.features:type_name -> google.protobuf.FeatureSet
+	35, // 53: google.protobuf.MethodOptions.uninterpreted_option:type_name -> google.protobuf.UninterpretedOption
+	45, // 54: google.protobuf.UninterpretedOption.name:type_name -> google.protobuf.UninterpretedOption.NamePart
+	10, // 55: google.protobuf.FeatureSet.field_presence:type_name -> google.protobuf.FeatureSet.FieldPresence
+	11, // 56: google.protobuf.FeatureSet.enum_type:type_name -> google.protobuf.FeatureSet.EnumType
+	12, // 57: google.protobuf.FeatureSet.repeated_field_encoding:type_name -> google.protobuf.FeatureSet.RepeatedFieldEncoding
+	13, // 58: google.protobuf.FeatureSet.utf8_validation:type_name -> google.protobuf.FeatureSet.Utf8Validation
+	14, // 59: google.protobuf.FeatureSet.message_encoding:type_name -> google.protobuf.FeatureSet.MessageEncoding
+	15, // 60: google.protobuf.FeatureSet.json_format:type_name -> google.protobuf.FeatureSet.JsonFormat
+	46, // 61: google.protobuf.FeatureSetDefaults.defaults:type_name -> google.protobuf.FeatureSetDefaults.FeatureSetEditionDefault
+	0,  // 62: google.protobuf.FeatureSetDefaults.minimum_edition:type_name -> google.protobuf.Edition
+	0,  // 63: google.protobuf.FeatureSetDefaults.maximum_edition:type_name -> google.protobuf.Edition
+	47, // 64: google.protobuf.SourceCodeInfo.location:type_name -> google.protobuf.SourceCodeInfo.Location
+	48, // 65: google.protobuf.GeneratedCodeInfo.annotation:type_name -> google.protobuf.GeneratedCodeInfo.Annotation
+	20, // 66: google.protobuf.DescriptorProto.ExtensionRange.options:type_name -> google.protobuf.ExtensionRangeOptions
+	0,  // 67: google.protobuf.FieldOptions.EditionDefault.edition:type_name -> google.protobuf.Edition
+	0,  // 68: google.protobuf.FeatureSetDefaults.FeatureSetEditionDefault.edition:type_name -> google.protobuf.Edition
+	36, // 69: google.protobuf.FeatureSetDefaults.FeatureSetEditionDefault.features:type_name -> google.protobuf.FeatureSet
+	16, // 70: google.protobuf.GeneratedCodeInfo.Annotation.semantic:type_name -> google.protobuf.GeneratedCodeInfo.Annotation.Semantic
+	71, // [71:71] is the sub-list for method output_type
+	71, // [71:71] is the sub-list for method input_type
+	71, // [71:71] is the sub-list for extension type_name
+	71, // [71:71] is the sub-list for extension extendee
+	0,  // [0:71] is the sub-list for field type_name
 }
 
 func init() { file_google_protobuf_descriptor_proto_init() }
@@ -4475,19 +5476,21 @@ func file_google_protobuf_descriptor_proto_init() {
 			}
 		}
 		file_google_protobuf_descriptor_proto_msgTypes[19].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*SourceCodeInfo); i {
+			switch v := v.(*FeatureSet); i {
 			case 0:
 				return &v.state
 			case 1:
 				return &v.sizeCache
 			case 2:
 				return &v.unknownFields
+			case 3:
+				return &v.extensionFields
 			default:
 				return nil
 			}
 		}
 		file_google_protobuf_descriptor_proto_msgTypes[20].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*GeneratedCodeInfo); i {
+			switch v := v.(*FeatureSetDefaults); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4499,7 +5502,7 @@ func file_google_protobuf_descriptor_proto_init() {
 			}
 		}
 		file_google_protobuf_descriptor_proto_msgTypes[21].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*DescriptorProto_ExtensionRange); i {
+			switch v := v.(*SourceCodeInfo); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4511,7 +5514,7 @@ func file_google_protobuf_descriptor_proto_init() {
 			}
 		}
 		file_google_protobuf_descriptor_proto_msgTypes[22].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*DescriptorProto_ReservedRange); i {
+			switch v := v.(*GeneratedCodeInfo); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4523,7 +5526,7 @@ func file_google_protobuf_descriptor_proto_init() {
 			}
 		}
 		file_google_protobuf_descriptor_proto_msgTypes[23].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*ExtensionRangeOptions_Declaration); i {
+			switch v := v.(*DescriptorProto_ExtensionRange); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4535,7 +5538,7 @@ func file_google_protobuf_descriptor_proto_init() {
 			}
 		}
 		file_google_protobuf_descriptor_proto_msgTypes[24].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*EnumDescriptorProto_EnumReservedRange); i {
+			switch v := v.(*DescriptorProto_ReservedRange); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4547,7 +5550,7 @@ func file_google_protobuf_descriptor_proto_init() {
 			}
 		}
 		file_google_protobuf_descriptor_proto_msgTypes[25].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*UninterpretedOption_NamePart); i {
+			switch v := v.(*ExtensionRangeOptions_Declaration); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4559,7 +5562,7 @@ func file_google_protobuf_descriptor_proto_init() {
 			}
 		}
 		file_google_protobuf_descriptor_proto_msgTypes[26].Exporter = func(v interface{}, i int) interface{} {
-			switch v := v.(*SourceCodeInfo_Location); i {
+			switch v := v.(*EnumDescriptorProto_EnumReservedRange); i {
 			case 0:
 				return &v.state
 			case 1:
@@ -4571,6 +5574,54 @@ func file_google_protobuf_descriptor_proto_init() {
 			}
 		}
 		file_google_protobuf_descriptor_proto_msgTypes[27].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*FieldOptions_EditionDefault); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_google_protobuf_descriptor_proto_msgTypes[28].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*UninterpretedOption_NamePart); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_google_protobuf_descriptor_proto_msgTypes[29].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*FeatureSetDefaults_FeatureSetEditionDefault); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_google_protobuf_descriptor_proto_msgTypes[30].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*SourceCodeInfo_Location); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_google_protobuf_descriptor_proto_msgTypes[31].Exporter = func(v interface{}, i int) interface{} {
 			switch v := v.(*GeneratedCodeInfo_Annotation); i {
 			case 0:
 				return &v.state
@@ -4588,8 +5639,8 @@ func file_google_protobuf_descriptor_proto_init() {
 		File: protoimpl.DescBuilder{
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: file_google_protobuf_descriptor_proto_rawDesc,
-			NumEnums:      10,
-			NumMessages:   28,
+			NumEnums:      17,
+			NumMessages:   32,
 			NumExtensions: 0,
 			NumServices:   0,
 		},
diff --git a/vendor/google.golang.org/protobuf/types/known/anypb/any.pb.go b/vendor/google.golang.org/protobuf/types/known/anypb/any.pb.go
index 580b232f477..9de51be5403 100644
--- a/vendor/google.golang.org/protobuf/types/known/anypb/any.pb.go
+++ b/vendor/google.golang.org/protobuf/types/known/anypb/any.pb.go
@@ -237,7 +237,8 @@ type Any struct {
 	//
 	// Note: this functionality is not currently available in the official
 	// protobuf release, and it is not used for type URLs beginning with
-	// type.googleapis.com.
+	// type.googleapis.com. As of May 2023, there are no widely used type server
+	// implementations and no plans to implement one.
 	//
 	// Schemes other than `http`, `https` (or the empty scheme) might be
 	// used with implementation specific semantics.
diff --git a/vendor/google.golang.org/protobuf/types/pluginpb/plugin.pb.go b/vendor/google.golang.org/protobuf/types/pluginpb/plugin.pb.go
index d0bb96a9d21..69892f41bd1 100644
--- a/vendor/google.golang.org/protobuf/types/pluginpb/plugin.pb.go
+++ b/vendor/google.golang.org/protobuf/types/pluginpb/plugin.pb.go
@@ -1,32 +1,9 @@
 // Protocol Buffers - Google's data interchange format
 // Copyright 2008 Google Inc.  All rights reserved.
-// https://developers.google.com/protocol-buffers/
 //
-// Redistribution and use in source and binary forms, with or without
-// modification, are permitted provided that the following conditions are
-// met:
-//
-//     * Redistributions of source code must retain the above copyright
-// notice, this list of conditions and the following disclaimer.
-//     * Redistributions in binary form must reproduce the above
-// copyright notice, this list of conditions and the following disclaimer
-// in the documentation and/or other materials provided with the
-// distribution.
-//     * Neither the name of Google Inc. nor the names of its
-// contributors may be used to endorse or promote products derived from
-// this software without specific prior written permission.
-//
-// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
-// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
-// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
-// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
-// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
-// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
-// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file or at
+// https://developers.google.com/open-source/licenses/bsd
 
 // Author: kenton@google.com (Kenton Varda)
 //
@@ -58,8 +35,9 @@ import (
 type CodeGeneratorResponse_Feature int32
 
 const (
-	CodeGeneratorResponse_FEATURE_NONE            CodeGeneratorResponse_Feature = 0
-	CodeGeneratorResponse_FEATURE_PROTO3_OPTIONAL CodeGeneratorResponse_Feature = 1
+	CodeGeneratorResponse_FEATURE_NONE              CodeGeneratorResponse_Feature = 0
+	CodeGeneratorResponse_FEATURE_PROTO3_OPTIONAL   CodeGeneratorResponse_Feature = 1
+	CodeGeneratorResponse_FEATURE_SUPPORTS_EDITIONS CodeGeneratorResponse_Feature = 2
 )
 
 // Enum value maps for CodeGeneratorResponse_Feature.
@@ -67,10 +45,12 @@ var (
 	CodeGeneratorResponse_Feature_name = map[int32]string{
 		0: "FEATURE_NONE",
 		1: "FEATURE_PROTO3_OPTIONAL",
+		2: "FEATURE_SUPPORTS_EDITIONS",
 	}
 	CodeGeneratorResponse_Feature_value = map[string]int32{
-		"FEATURE_NONE":            0,
-		"FEATURE_PROTO3_OPTIONAL": 1,
+		"FEATURE_NONE":              0,
+		"FEATURE_PROTO3_OPTIONAL":   1,
+		"FEATURE_SUPPORTS_EDITIONS": 2,
 	}
 )
 
@@ -201,6 +181,11 @@ type CodeGeneratorRequest struct {
 	// they import.  The files will appear in topological order, so each file
 	// appears before any file that imports it.
 	//
+	// Note: the files listed in files_to_generate will include runtime-retention
+	// options only, but all other files will include source-retention options.
+	// The source_file_descriptors field below is available in case you need
+	// source-retention options for files_to_generate.
+	//
 	// protoc guarantees that all proto_files will be written after
 	// the fields above, even though this is not technically guaranteed by the
 	// protobuf wire format.  This theoretically could allow a plugin to stream
@@ -212,6 +197,10 @@ type CodeGeneratorRequest struct {
 	// Type names of fields and extensions in the FileDescriptorProto are always
 	// fully qualified.
 	ProtoFile []*descriptorpb.FileDescriptorProto `protobuf:"bytes,15,rep,name=proto_file,json=protoFile" json:"proto_file,omitempty"`
+	// File descriptors with all options, including source-retention options.
+	// These descriptors are only provided for the files listed in
+	// files_to_generate.
+	SourceFileDescriptors []*descriptorpb.FileDescriptorProto `protobuf:"bytes,17,rep,name=source_file_descriptors,json=sourceFileDescriptors" json:"source_file_descriptors,omitempty"`
 	// The version number of protocol compiler.
 	CompilerVersion *Version `protobuf:"bytes,3,opt,name=compiler_version,json=compilerVersion" json:"compiler_version,omitempty"`
 }
@@ -269,6 +258,13 @@ func (x *CodeGeneratorRequest) GetProtoFile() []*descriptorpb.FileDescriptorProt
 	return nil
 }
 
+func (x *CodeGeneratorRequest) GetSourceFileDescriptors() []*descriptorpb.FileDescriptorProto {
+	if x != nil {
+		return x.SourceFileDescriptors
+	}
+	return nil
+}
+
 func (x *CodeGeneratorRequest) GetCompilerVersion() *Version {
 	if x != nil {
 		return x.CompilerVersion
@@ -493,7 +489,7 @@ var file_google_protobuf_compiler_plugin_proto_rawDesc = []byte{
 	0x01, 0x28, 0x05, 0x52, 0x05, 0x6d, 0x69, 0x6e, 0x6f, 0x72, 0x12, 0x14, 0x0a, 0x05, 0x70, 0x61,
 	0x74, 0x63, 0x68, 0x18, 0x03, 0x20, 0x01, 0x28, 0x05, 0x52, 0x05, 0x70, 0x61, 0x74, 0x63, 0x68,
 	0x12, 0x16, 0x0a, 0x06, 0x73, 0x75, 0x66, 0x66, 0x69, 0x78, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09,
-	0x52, 0x06, 0x73, 0x75, 0x66, 0x66, 0x69, 0x78, 0x22, 0xf1, 0x01, 0x0a, 0x14, 0x43, 0x6f, 0x64,
+	0x52, 0x06, 0x73, 0x75, 0x66, 0x66, 0x69, 0x78, 0x22, 0xcf, 0x02, 0x0a, 0x14, 0x43, 0x6f, 0x64,
 	0x65, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x6f, 0x72, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73,
 	0x74, 0x12, 0x28, 0x0a, 0x10, 0x66, 0x69, 0x6c, 0x65, 0x5f, 0x74, 0x6f, 0x5f, 0x67, 0x65, 0x6e,
 	0x65, 0x72, 0x61, 0x74, 0x65, 0x18, 0x01, 0x20, 0x03, 0x28, 0x09, 0x52, 0x0e, 0x66, 0x69, 0x6c,
@@ -503,45 +499,53 @@ var file_google_protobuf_compiler_plugin_proto_rawDesc = []byte{
 	0x74, 0x6f, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x18, 0x0f, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e,
 	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e,
 	0x46, 0x69, 0x6c, 0x65, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x50, 0x72,
-	0x6f, 0x74, 0x6f, 0x52, 0x09, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x4c,
-	0x0a, 0x10, 0x63, 0x6f, 0x6d, 0x70, 0x69, 0x6c, 0x65, 0x72, 0x5f, 0x76, 0x65, 0x72, 0x73, 0x69,
-	0x6f, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
-	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x63, 0x6f, 0x6d, 0x70, 0x69,
-	0x6c, 0x65, 0x72, 0x2e, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x0f, 0x63, 0x6f, 0x6d,
-	0x70, 0x69, 0x6c, 0x65, 0x72, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x22, 0x94, 0x03, 0x0a,
-	0x15, 0x43, 0x6f, 0x64, 0x65, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x6f, 0x72, 0x52, 0x65,
-	0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x18,
-	0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x2d, 0x0a, 0x12,
-	0x73, 0x75, 0x70, 0x70, 0x6f, 0x72, 0x74, 0x65, 0x64, 0x5f, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72,
-	0x65, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x11, 0x73, 0x75, 0x70, 0x70, 0x6f, 0x72,
-	0x74, 0x65, 0x64, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x12, 0x48, 0x0a, 0x04, 0x66,
-	0x69, 0x6c, 0x65, 0x18, 0x0f, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x34, 0x2e, 0x67, 0x6f, 0x6f, 0x67,
-	0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x63, 0x6f, 0x6d, 0x70,
-	0x69, 0x6c, 0x65, 0x72, 0x2e, 0x43, 0x6f, 0x64, 0x65, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74,
-	0x6f, 0x72, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x46, 0x69, 0x6c, 0x65, 0x52,
-	0x04, 0x66, 0x69, 0x6c, 0x65, 0x1a, 0xb1, 0x01, 0x0a, 0x04, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x12,
-	0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61,
-	0x6d, 0x65, 0x12, 0x27, 0x0a, 0x0f, 0x69, 0x6e, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x5f,
-	0x70, 0x6f, 0x69, 0x6e, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0e, 0x69, 0x6e, 0x73,
-	0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x69, 0x6e, 0x74, 0x12, 0x18, 0x0a, 0x07, 0x63,
-	0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x18, 0x0f, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x63, 0x6f,
-	0x6e, 0x74, 0x65, 0x6e, 0x74, 0x12, 0x52, 0x0a, 0x13, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74,
-	0x65, 0x64, 0x5f, 0x63, 0x6f, 0x64, 0x65, 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x18, 0x10, 0x20, 0x01,
-	0x28, 0x0b, 0x32, 0x22, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
-	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x65, 0x64, 0x43, 0x6f,
-	0x64, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x52, 0x11, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x65,
-	0x64, 0x43, 0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x22, 0x38, 0x0a, 0x07, 0x46, 0x65, 0x61,
-	0x74, 0x75, 0x72, 0x65, 0x12, 0x10, 0x0a, 0x0c, 0x46, 0x45, 0x41, 0x54, 0x55, 0x52, 0x45, 0x5f,
-	0x4e, 0x4f, 0x4e, 0x45, 0x10, 0x00, 0x12, 0x1b, 0x0a, 0x17, 0x46, 0x45, 0x41, 0x54, 0x55, 0x52,
-	0x45, 0x5f, 0x50, 0x52, 0x4f, 0x54, 0x4f, 0x33, 0x5f, 0x4f, 0x50, 0x54, 0x49, 0x4f, 0x4e, 0x41,
-	0x4c, 0x10, 0x01, 0x42, 0x72, 0x0a, 0x1c, 0x63, 0x6f, 0x6d, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
-	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x63, 0x6f, 0x6d, 0x70, 0x69,
-	0x6c, 0x65, 0x72, 0x42, 0x0c, 0x50, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x50, 0x72, 0x6f, 0x74, 0x6f,
-	0x73, 0x5a, 0x29, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x67, 0x6f, 0x6c, 0x61, 0x6e, 0x67,
-	0x2e, 0x6f, 0x72, 0x67, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2f, 0x74, 0x79,
-	0x70, 0x65, 0x73, 0x2f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x70, 0x62, 0xaa, 0x02, 0x18, 0x47,
-	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x43,
-	0x6f, 0x6d, 0x70, 0x69, 0x6c, 0x65, 0x72,
+	0x6f, 0x74, 0x6f, 0x52, 0x09, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x5c,
+	0x0a, 0x17, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x5f, 0x66, 0x69, 0x6c, 0x65, 0x5f, 0x64, 0x65,
+	0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x73, 0x18, 0x11, 0x20, 0x03, 0x28, 0x0b, 0x32,
+	0x24, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
+	0x66, 0x2e, 0x46, 0x69, 0x6c, 0x65, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72,
+	0x50, 0x72, 0x6f, 0x74, 0x6f, 0x52, 0x15, 0x73, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x46, 0x69, 0x6c,
+	0x65, 0x44, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x73, 0x12, 0x4c, 0x0a, 0x10,
+	0x63, 0x6f, 0x6d, 0x70, 0x69, 0x6c, 0x65, 0x72, 0x5f, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e,
+	0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x63, 0x6f, 0x6d, 0x70, 0x69, 0x6c, 0x65,
+	0x72, 0x2e, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x0f, 0x63, 0x6f, 0x6d, 0x70, 0x69,
+	0x6c, 0x65, 0x72, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x22, 0xb3, 0x03, 0x0a, 0x15, 0x43,
+	0x6f, 0x64, 0x65, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x6f, 0x72, 0x52, 0x65, 0x73, 0x70,
+	0x6f, 0x6e, 0x73, 0x65, 0x12, 0x14, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x09, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x2d, 0x0a, 0x12, 0x73, 0x75,
+	0x70, 0x70, 0x6f, 0x72, 0x74, 0x65, 0x64, 0x5f, 0x66, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x11, 0x73, 0x75, 0x70, 0x70, 0x6f, 0x72, 0x74, 0x65,
+	0x64, 0x46, 0x65, 0x61, 0x74, 0x75, 0x72, 0x65, 0x73, 0x12, 0x48, 0x0a, 0x04, 0x66, 0x69, 0x6c,
+	0x65, 0x18, 0x0f, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x34, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x63, 0x6f, 0x6d, 0x70, 0x69, 0x6c,
+	0x65, 0x72, 0x2e, 0x43, 0x6f, 0x64, 0x65, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x6f, 0x72,
+	0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x2e, 0x46, 0x69, 0x6c, 0x65, 0x52, 0x04, 0x66,
+	0x69, 0x6c, 0x65, 0x1a, 0xb1, 0x01, 0x0a, 0x04, 0x46, 0x69, 0x6c, 0x65, 0x12, 0x12, 0x0a, 0x04,
+	0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65,
+	0x12, 0x27, 0x0a, 0x0f, 0x69, 0x6e, 0x73, 0x65, 0x72, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x70, 0x6f,
+	0x69, 0x6e, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0e, 0x69, 0x6e, 0x73, 0x65, 0x72,
+	0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x69, 0x6e, 0x74, 0x12, 0x18, 0x0a, 0x07, 0x63, 0x6f, 0x6e,
+	0x74, 0x65, 0x6e, 0x74, 0x18, 0x0f, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x63, 0x6f, 0x6e, 0x74,
+	0x65, 0x6e, 0x74, 0x12, 0x52, 0x0a, 0x13, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x65, 0x64,
+	0x5f, 0x63, 0x6f, 0x64, 0x65, 0x5f, 0x69, 0x6e, 0x66, 0x6f, 0x18, 0x10, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x22, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
+	0x75, 0x66, 0x2e, 0x47, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x65, 0x64, 0x43, 0x6f, 0x64, 0x65,
+	0x49, 0x6e, 0x66, 0x6f, 0x52, 0x11, 0x67, 0x65, 0x6e, 0x65, 0x72, 0x61, 0x74, 0x65, 0x64, 0x43,
+	0x6f, 0x64, 0x65, 0x49, 0x6e, 0x66, 0x6f, 0x22, 0x57, 0x0a, 0x07, 0x46, 0x65, 0x61, 0x74, 0x75,
+	0x72, 0x65, 0x12, 0x10, 0x0a, 0x0c, 0x46, 0x45, 0x41, 0x54, 0x55, 0x52, 0x45, 0x5f, 0x4e, 0x4f,
+	0x4e, 0x45, 0x10, 0x00, 0x12, 0x1b, 0x0a, 0x17, 0x46, 0x45, 0x41, 0x54, 0x55, 0x52, 0x45, 0x5f,
+	0x50, 0x52, 0x4f, 0x54, 0x4f, 0x33, 0x5f, 0x4f, 0x50, 0x54, 0x49, 0x4f, 0x4e, 0x41, 0x4c, 0x10,
+	0x01, 0x12, 0x1d, 0x0a, 0x19, 0x46, 0x45, 0x41, 0x54, 0x55, 0x52, 0x45, 0x5f, 0x53, 0x55, 0x50,
+	0x50, 0x4f, 0x52, 0x54, 0x53, 0x5f, 0x45, 0x44, 0x49, 0x54, 0x49, 0x4f, 0x4e, 0x53, 0x10, 0x02,
+	0x42, 0x72, 0x0a, 0x1c, 0x63, 0x6f, 0x6d, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
+	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x63, 0x6f, 0x6d, 0x70, 0x69, 0x6c, 0x65, 0x72,
+	0x42, 0x0c, 0x50, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x73, 0x5a, 0x29,
+	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x67, 0x6f, 0x6c, 0x61, 0x6e, 0x67, 0x2e, 0x6f, 0x72,
+	0x67, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2f, 0x74, 0x79, 0x70, 0x65, 0x73,
+	0x2f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x70, 0x62, 0xaa, 0x02, 0x18, 0x47, 0x6f, 0x6f, 0x67,
+	0x6c, 0x65, 0x2e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x43, 0x6f, 0x6d, 0x70,
+	0x69, 0x6c, 0x65, 0x72,
 }
 
 var (
@@ -569,14 +573,15 @@ var file_google_protobuf_compiler_plugin_proto_goTypes = []interface{}{
 }
 var file_google_protobuf_compiler_plugin_proto_depIdxs = []int32{
 	5, // 0: google.protobuf.compiler.CodeGeneratorRequest.proto_file:type_name -> google.protobuf.FileDescriptorProto
-	1, // 1: google.protobuf.compiler.CodeGeneratorRequest.compiler_version:type_name -> google.protobuf.compiler.Version
-	4, // 2: google.protobuf.compiler.CodeGeneratorResponse.file:type_name -> google.protobuf.compiler.CodeGeneratorResponse.File
-	6, // 3: google.protobuf.compiler.CodeGeneratorResponse.File.generated_code_info:type_name -> google.protobuf.GeneratedCodeInfo
-	4, // [4:4] is the sub-list for method output_type
-	4, // [4:4] is the sub-list for method input_type
-	4, // [4:4] is the sub-list for extension type_name
-	4, // [4:4] is the sub-list for extension extendee
-	0, // [0:4] is the sub-list for field type_name
+	5, // 1: google.protobuf.compiler.CodeGeneratorRequest.source_file_descriptors:type_name -> google.protobuf.FileDescriptorProto
+	1, // 2: google.protobuf.compiler.CodeGeneratorRequest.compiler_version:type_name -> google.protobuf.compiler.Version
+	4, // 3: google.protobuf.compiler.CodeGeneratorResponse.file:type_name -> google.protobuf.compiler.CodeGeneratorResponse.File
+	6, // 4: google.protobuf.compiler.CodeGeneratorResponse.File.generated_code_info:type_name -> google.protobuf.GeneratedCodeInfo
+	5, // [5:5] is the sub-list for method output_type
+	5, // [5:5] is the sub-list for method input_type
+	5, // [5:5] is the sub-list for extension type_name
+	5, // [5:5] is the sub-list for extension extendee
+	0, // [0:5] is the sub-list for field type_name
 }
 
 func init() { file_google_protobuf_compiler_plugin_proto_init() }
diff --git a/vendor/k8s.io/kube-openapi/pkg/builder3/util/util.go b/vendor/k8s.io/kube-openapi/pkg/builder3/util/util.go
deleted file mode 100644
index e0156692563..00000000000
--- a/vendor/k8s.io/kube-openapi/pkg/builder3/util/util.go
+++ /dev/null
@@ -1,51 +0,0 @@
-/*
-Copyright 2022 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package util
-
-import (
-	"reflect"
-
-	"k8s.io/kube-openapi/pkg/schemamutation"
-	"k8s.io/kube-openapi/pkg/validation/spec"
-)
-
-// wrapRefs wraps OpenAPI V3 Schema refs that contain sibling elements.
-// AllOf is used to wrap the Ref to prevent references from having sibling elements
-// Please see https://github.com/kubernetes/kubernetes/issues/106387#issuecomment-967640388
-func WrapRefs(schema *spec.Schema) *spec.Schema {
-	walker := schemamutation.Walker{
-		SchemaCallback: func(schema *spec.Schema) *spec.Schema {
-			orig := schema
-			clone := func() {
-				if orig == schema {
-					schema = new(spec.Schema)
-					*schema = *orig
-				}
-			}
-			if schema.Ref.String() != "" && !reflect.DeepEqual(*schema, spec.Schema{SchemaProps: spec.SchemaProps{Ref: schema.Ref}}) {
-				clone()
-				refSchema := new(spec.Schema)
-				refSchema.Ref = schema.Ref
-				schema.Ref = spec.Ref{}
-				schema.AllOf = []spec.Schema{*refSchema}
-			}
-			return schema
-		},
-		RefCallback: schemamutation.RefCallbackNoop,
-	}
-	return walker.WalkSchema(schema)
-}
diff --git a/vendor/k8s.io/kube-openapi/pkg/cached/cache.go b/vendor/k8s.io/kube-openapi/pkg/cached/cache.go
index 76415b7830b..a66fe8a0958 100644
--- a/vendor/k8s.io/kube-openapi/pkg/cached/cache.go
+++ b/vendor/k8s.io/kube-openapi/pkg/cached/cache.go
@@ -14,7 +14,7 @@ See the License for the specific language governing permissions and
 limitations under the License.
 */
 
-// Package cache provides a cache mechanism based on etags to lazily
+// Package cached provides a cache mechanism based on etags to lazily
 // build, and/or cache results from expensive operation such that those
 // operations are not repeated unnecessarily. The operations can be
 // created as a tree, and replaced dynamically as needed.
@@ -25,16 +25,18 @@ limitations under the License.
 //
 // This package uses a source/transform/sink model of caches to build
 // the dependency tree, and can be used as follows:
-//   - [NewSource]: A source cache that recomputes the content every time.
-//   - [NewStaticSource]: A source cache that always produces the
+//   - [Func]: A source cache that recomputes the content every time.
+//   - [Once]: A source cache that always produces the
 //     same content, it is only called once.
-//   - [NewTransformer]: A cache that transforms data from one format to
+//   - [Transform]: A cache that transforms data from one format to
 //     another. It's only refreshed when the source changes.
-//   - [NewMerger]: A cache that aggregates multiple caches into one.
+//   - [Merge]: A cache that aggregates multiple caches in a map into one.
 //     It's only refreshed when the source changes.
-//   - [Replaceable]: A cache adapter that can be atomically
-//     replaced with a new one, and saves the previous results in case an
-//     error pops-up.
+//   - [MergeList]: A cache that aggregates multiple caches in a list into one.
+//     It's only refreshed when the source changes.
+//   - [Atomic]: A cache adapter that atomically replaces the source with a new one.
+//   - [LastSuccess]: A cache adapter that caches the last successful and returns
+//     it if the next call fails. It extends [Atomic].
 //
 // # Etags
 //
@@ -54,61 +56,45 @@ import (
 	"sync/atomic"
 )
 
-// Result is the content returned from a call to a cache. It can either
-// be created with [NewResultOK] if the call was a success, or
-// [NewResultErr] if the call resulted in an error.
+// Value is wrapping a value behind a getter for lazy evaluation.
+type Value[T any] interface {
+	Get() (value T, etag string, err error)
+}
+
+// Result is wrapping T and error into a struct for cases where a tuple is more
+// convenient or necessary in Golang.
 type Result[T any] struct {
-	Data T
-	Etag string
-	Err  error
+	Value T
+	Etag  string
+	Err   error
 }
 
-// NewResultOK creates a new [Result] for a successful operation.
-func NewResultOK[T any](data T, etag string) Result[T] {
-	return Result[T]{
-		Data: data,
-		Etag: etag,
-	}
+func (r Result[T]) Get() (T, string, error) {
+	return r.Value, r.Etag, r.Err
 }
 
-// NewResultErr creates a new [Result] when an error has happened.
-func NewResultErr[T any](err error) Result[T] {
-	return Result[T]{
-		Err: err,
-	}
+// Func wraps a (thread-safe) function as a Value[T].
+func Func[T any](fn func() (T, string, error)) Value[T] {
+	return valueFunc[T](fn)
 }
 
-// Result can be treated as a [Data] if necessary.
-func (r Result[T]) Get() Result[T] {
-	return r
+type valueFunc[T any] func() (T, string, error)
+
+func (c valueFunc[T]) Get() (T, string, error) {
+	return c()
 }
 
-// Data is a cache that performs an action whose result data will be
-// cached. It also returns an "etag" identifier to version the cache, so
-// that the caller can know if they have the most recent version of the
-// cache (and can decide to cache some operation based on that).
-//
-// The [NewMerger] and [NewTransformer] automatically handle
-// that for you by checking if the etag is updated before calling the
-// merging or transforming function.
-type Data[T any] interface {
-	// Returns the cached data, as well as an "etag" to identify the
-	// version of the cache, or an error if something happened.
-	Get() Result[T]
+// Static returns constant values.
+func Static[T any](value T, etag string) Value[T] {
+	return Result[T]{Value: value, Etag: etag}
 }
 
-// NewMerger creates a new merge cache, a cache that merges the result
-// of other caches. The function only gets called if any of the
-// dependency has changed.
+// Merge merges a of cached values. The merge function only gets called if any of
+// the dependency has changed.
 //
 // If any of the dependency returned an error before, or any of the
 // dependency returned an error this time, or if the mergeFn failed
-// before, then the function is reran.
-//
-// The caches and results are mapped by K so that associated data can be
-// retrieved. The map of dependencies can not be modified after
-// creation, and a new merger should be created (and probably replaced
-// using a [Replaceable]).
+// before, then the function is run again.
 //
 // Note that this assumes there is no "partial" merge, the merge
 // function will remerge all the dependencies together everytime. Since
@@ -118,18 +104,19 @@ type Data[T any] interface {
 // Also note that Golang map iteration is not stable. If the mergeFn
 // depends on the order iteration to be stable, it will need to
 // implement its own sorting or iteration order.
-func NewMerger[K comparable, T, V any](mergeFn func(results map[K]Result[T]) Result[V], caches map[K]Data[T]) Data[V] {
-	listCaches := make([]Data[T], 0, len(caches))
-	// maps from index to key
+func Merge[K comparable, T, V any](mergeFn func(results map[K]Result[T]) (V, string, error), caches map[K]Value[T]) Value[V] {
+	list := make([]Value[T], 0, len(caches))
+
+	// map from index to key
 	indexes := make(map[int]K, len(caches))
 	i := 0
 	for k := range caches {
-		listCaches = append(listCaches, caches[k])
+		list = append(list, caches[k])
 		indexes[i] = k
 		i++
 	}
 
-	return NewListMerger(func(results []Result[T]) Result[V] {
+	return MergeList(func(results []Result[T]) (V, string, error) {
 		if len(results) != len(indexes) {
 			panic(fmt.Errorf("invalid result length %d, expected %d", len(results), len(indexes)))
 		}
@@ -138,20 +125,11 @@ func NewMerger[K comparable, T, V any](mergeFn func(results map[K]Result[T]) Res
 			m[indexes[i]] = results[i]
 		}
 		return mergeFn(m)
-	}, listCaches)
-}
-
-type listMerger[T, V any] struct {
-	lock         sync.Mutex
-	mergeFn      func([]Result[T]) Result[V]
-	caches       []Data[T]
-	cacheResults []Result[T]
-	result       Result[V]
+	}, list)
 }
 
-// NewListMerger creates a new merge cache that merges the results of
-// other caches in list form. The function only gets called if any of
-// the dependency has changed.
+// MergeList merges a list of cached values. The function only gets called if
+// any of the dependency has changed.
 //
 // The benefit of ListMerger over the basic Merger is that caches are
 // stored in an ordered list so the order of the cache will be
@@ -165,31 +143,37 @@ type listMerger[T, V any] struct {
 // function will remerge all the dependencies together everytime. Since
 // the list of dependencies is constant, there is no way to save some
 // partial merge information either.
-func NewListMerger[T, V any](mergeFn func(results []Result[T]) Result[V], caches []Data[T]) Data[V] {
+func MergeList[T, V any](mergeFn func(results []Result[T]) (V, string, error), delegates []Value[T]) Value[V] {
 	return &listMerger[T, V]{
-		mergeFn: mergeFn,
-		caches:  caches,
+		mergeFn:   mergeFn,
+		delegates: delegates,
 	}
 }
 
+type listMerger[T, V any] struct {
+	lock      sync.Mutex
+	mergeFn   func([]Result[T]) (V, string, error)
+	delegates []Value[T]
+	cache     []Result[T]
+	result    Result[V]
+}
+
 func (c *listMerger[T, V]) prepareResultsLocked() []Result[T] {
-	cacheResults := make([]Result[T], len(c.caches))
+	cacheResults := make([]Result[T], len(c.delegates))
 	ch := make(chan struct {
 		int
 		Result[T]
-	}, len(c.caches))
-	for i := range c.caches {
+	}, len(c.delegates))
+	for i := range c.delegates {
 		go func(index int) {
+			value, etag, err := c.delegates[index].Get()
 			ch <- struct {
 				int
 				Result[T]
-			}{
-				index,
-				c.caches[index].Get(),
-			}
+			}{index, Result[T]{Value: value, Etag: etag, Err: err}}
 		}(i)
 	}
-	for i := 0; i < len(c.caches); i++ {
+	for i := 0; i < len(c.delegates); i++ {
 		res := <-ch
 		cacheResults[res.int] = res.Result
 	}
@@ -197,16 +181,16 @@ func (c *listMerger[T, V]) prepareResultsLocked() []Result[T] {
 }
 
 func (c *listMerger[T, V]) needsRunningLocked(results []Result[T]) bool {
-	if c.cacheResults == nil {
+	if c.cache == nil {
 		return true
 	}
 	if c.result.Err != nil {
 		return true
 	}
-	if len(results) != len(c.cacheResults) {
-		panic(fmt.Errorf("invalid number of results: %v (expected %v)", len(results), len(c.cacheResults)))
+	if len(results) != len(c.cache) {
+		panic(fmt.Errorf("invalid number of results: %v (expected %v)", len(results), len(c.cache)))
 	}
-	for i, oldResult := range c.cacheResults {
+	for i, oldResult := range c.cache {
 		newResult := results[i]
 		if newResult.Etag != oldResult.Etag || newResult.Err != nil || oldResult.Err != nil {
 			return true
@@ -215,98 +199,92 @@ func (c *listMerger[T, V]) needsRunningLocked(results []Result[T]) bool {
 	return false
 }
 
-func (c *listMerger[T, V]) Get() Result[V] {
+func (c *listMerger[T, V]) Get() (V, string, error) {
 	c.lock.Lock()
 	defer c.lock.Unlock()
 	cacheResults := c.prepareResultsLocked()
 	if c.needsRunningLocked(cacheResults) {
-		c.cacheResults = cacheResults
-		c.result = c.mergeFn(c.cacheResults)
+		c.cache = cacheResults
+		c.result.Value, c.result.Etag, c.result.Err = c.mergeFn(c.cache)
 	}
-	return c.result
+	return c.result.Value, c.result.Etag, c.result.Err
 }
 
-// NewTransformer creates a new cache that transforms the result of
-// another cache. The transformFn will only be called if the source
-// cache has updated the output, otherwise, the cached result will be
-// returned.
+// Transform the result of another cached value. The transformFn will only be called
+// if the source has updated, otherwise, the result will be returned.
 //
 // If the dependency returned an error before, or it returns an error
 // this time, or if the transformerFn failed before, the function is
 // reran.
-func NewTransformer[T, V any](transformerFn func(Result[T]) Result[V], source Data[T]) Data[V] {
-	return NewListMerger(func(caches []Result[T]) Result[V] {
-		if len(caches) != 1 {
-			panic(fmt.Errorf("invalid cache for transformer cache: %v", caches))
+func Transform[T, V any](transformerFn func(T, string, error) (V, string, error), source Value[T]) Value[V] {
+	return MergeList(func(delegates []Result[T]) (V, string, error) {
+		if len(delegates) != 1 {
+			panic(fmt.Errorf("invalid cache for transformer cache: %v", delegates))
 		}
-		return transformerFn(caches[0])
-	}, []Data[T]{source})
-}
-
-// NewSource creates a new cache that generates some data. This
-// will always be called since we don't know the origin of the data and
-// if it needs to be updated or not. sourceFn MUST be thread-safe.
-func NewSource[T any](sourceFn func() Result[T]) Data[T] {
-	c := source[T](sourceFn)
-	return &c
+		return transformerFn(delegates[0].Value, delegates[0].Etag, delegates[0].Err)
+	}, []Value[T]{source})
 }
 
-type source[T any] func() Result[T]
-
-func (c *source[T]) Get() Result[T] {
-	return (*c)()
-}
-
-// NewStaticSource creates a new cache that always generates the
-// same data. This will only be called once (lazily).
-func NewStaticSource[T any](staticFn func() Result[T]) Data[T] {
-	return &static[T]{
-		fn: staticFn,
+// Once calls Value[T].Get() lazily and only once, even in case of an error result.
+func Once[T any](d Value[T]) Value[T] {
+	return &once[T]{
+		data: d,
 	}
 }
 
-type static[T any] struct {
+type once[T any] struct {
 	once   sync.Once
-	fn     func() Result[T]
+	data   Value[T]
 	result Result[T]
 }
 
-func (c *static[T]) Get() Result[T] {
+func (c *once[T]) Get() (T, string, error) {
 	c.once.Do(func() {
-		c.result = c.fn()
+		c.result.Value, c.result.Etag, c.result.Err = c.data.Get()
 	})
-	return c.result
+	return c.result.Value, c.result.Etag, c.result.Err
 }
 
-// Replaceable is a cache that carries the result even when the cache is
-// replaced. This is the type that should typically be stored in
-// structs.
-type Replaceable[T any] struct {
-	cache  atomic.Pointer[Data[T]]
-	result atomic.Pointer[Result[T]]
+// Replaceable extends the Value[T] interface with the ability to change the
+// underlying Value[T] after construction.
+type Replaceable[T any] interface {
+	Value[T]
+	Store(Value[T])
 }
 
-// Get retrieves the data from the underlying source. [Replaceable]
-// implements the [Data] interface itself. This is a pass-through
-// that calls the most recent underlying cache. If the cache fails but
-// previously had returned a success, that success will be returned
-// instead. If the cache fails but we never returned a success, that
-// failure is returned.
-func (c *Replaceable[T]) Get() Result[T] {
-	result := (*c.cache.Load()).Get()
-
-	for {
-		cResult := c.result.Load()
-		if result.Err != nil && cResult != nil && cResult.Err == nil {
-			return *cResult
-		}
-		if c.result.CompareAndSwap(cResult, &result) {
-			return result
+// Atomic wraps a Value[T] as an atomic value that can be replaced. It implements
+// Replaceable[T].
+type Atomic[T any] struct {
+	value atomic.Pointer[Value[T]]
+}
+
+var _ Replaceable[[]byte] = &Atomic[[]byte]{}
+
+func (x *Atomic[T]) Store(val Value[T])      { x.value.Store(&val) }
+func (x *Atomic[T]) Get() (T, string, error) { return (*x.value.Load()).Get() }
+
+// LastSuccess calls Value[T].Get(), but hides errors by returning the last
+// success if there has been any.
+type LastSuccess[T any] struct {
+	Atomic[T]
+	success atomic.Pointer[Result[T]]
+}
+
+var _ Replaceable[[]byte] = &LastSuccess[[]byte]{}
+
+func (c *LastSuccess[T]) Get() (T, string, error) {
+	success := c.success.Load()
+	value, etag, err := c.Atomic.Get()
+	if err == nil {
+		if success == nil {
+			c.success.CompareAndSwap(nil, &Result[T]{Value: value, Etag: etag, Err: err})
 		}
+		return value, etag, err
+	}
+
+	if success != nil {
+		return success.Value, success.Etag, success.Err
 	}
-}
 
-// Replace changes the cache.
-func (c *Replaceable[T]) Replace(cache Data[T]) {
-	c.cache.Swap(&cache)
+	return value, etag, err
 }
diff --git a/vendor/k8s.io/kube-openapi/pkg/common/common.go b/vendor/k8s.io/kube-openapi/pkg/common/common.go
index 1a6c12e17a5..2e15e163c50 100644
--- a/vendor/k8s.io/kube-openapi/pkg/common/common.go
+++ b/vendor/k8s.io/kube-openapi/pkg/common/common.go
@@ -22,7 +22,6 @@ import (
 
 	"github.com/emicklei/go-restful/v3"
 
-	"k8s.io/kube-openapi/pkg/openapiconv"
 	"k8s.io/kube-openapi/pkg/spec3"
 	"k8s.io/kube-openapi/pkg/validation/spec"
 )
@@ -172,43 +171,6 @@ type OpenAPIV3Config struct {
 	DefaultSecurity []map[string][]string
 }
 
-// ConvertConfigToV3 converts a Config object to an OpenAPIV3Config object
-func ConvertConfigToV3(config *Config) *OpenAPIV3Config {
-	if config == nil {
-		return nil
-	}
-
-	v3Config := &OpenAPIV3Config{
-		Info:                           config.Info,
-		IgnorePrefixes:                 config.IgnorePrefixes,
-		GetDefinitions:                 config.GetDefinitions,
-		GetOperationIDAndTags:          config.GetOperationIDAndTags,
-		GetOperationIDAndTagsFromRoute: config.GetOperationIDAndTagsFromRoute,
-		GetDefinitionName:              config.GetDefinitionName,
-		Definitions:                    config.Definitions,
-		SecuritySchemes:                make(spec3.SecuritySchemes),
-		DefaultSecurity:                config.DefaultSecurity,
-		DefaultResponse:                openapiconv.ConvertResponse(config.DefaultResponse, []string{"application/json"}),
-
-		CommonResponses:     make(map[int]*spec3.Response),
-		ResponseDefinitions: make(map[string]*spec3.Response),
-	}
-
-	if config.SecurityDefinitions != nil {
-		for s, securityScheme := range *config.SecurityDefinitions {
-			v3Config.SecuritySchemes[s] = openapiconv.ConvertSecurityScheme(securityScheme)
-		}
-	}
-	for k, commonResponse := range config.CommonResponses {
-		v3Config.CommonResponses[k] = openapiconv.ConvertResponse(&commonResponse, []string{"application/json"})
-	}
-
-	for k, responseDefinition := range config.ResponseDefinitions {
-		v3Config.ResponseDefinitions[k] = openapiconv.ConvertResponse(&responseDefinition, []string{"application/json"})
-	}
-	return v3Config
-}
-
 type typeInfo struct {
 	name   string
 	format string
diff --git a/vendor/k8s.io/kube-openapi/pkg/handler3/handler.go b/vendor/k8s.io/kube-openapi/pkg/handler3/handler.go
index 2263e2f32b7..fc45634887b 100644
--- a/vendor/k8s.io/kube-openapi/pkg/handler3/handler.go
+++ b/vendor/k8s.io/kube-openapi/pkg/handler3/handler.go
@@ -33,6 +33,7 @@ import (
 	openapi_v3 "github.com/google/gnostic-models/openapiv3"
 	"github.com/google/uuid"
 	"github.com/munnerz/goautoneg"
+
 	"k8s.io/klog/v2"
 	"k8s.io/kube-openapi/pkg/cached"
 	"k8s.io/kube-openapi/pkg/common"
@@ -73,38 +74,38 @@ type timedSpec struct {
 
 // This type is protected by the lock on OpenAPIService.
 type openAPIV3Group struct {
-	specCache cached.Replaceable[*spec3.OpenAPI]
-	pbCache   cached.Data[timedSpec]
-	jsonCache cached.Data[timedSpec]
+	specCache cached.LastSuccess[*spec3.OpenAPI]
+	pbCache   cached.Value[timedSpec]
+	jsonCache cached.Value[timedSpec]
 }
 
 func newOpenAPIV3Group() *openAPIV3Group {
 	o := &openAPIV3Group{}
-	o.jsonCache = cached.NewTransformer[*spec3.OpenAPI](func(result cached.Result[*spec3.OpenAPI]) cached.Result[timedSpec] {
-		if result.Err != nil {
-			return cached.NewResultErr[timedSpec](result.Err)
+	o.jsonCache = cached.Transform[*spec3.OpenAPI](func(spec *spec3.OpenAPI, etag string, err error) (timedSpec, string, error) {
+		if err != nil {
+			return timedSpec{}, "", err
 		}
-		json, err := json.Marshal(result.Data)
+		json, err := json.Marshal(spec)
 		if err != nil {
-			return cached.NewResultErr[timedSpec](err)
+			return timedSpec{}, "", err
 		}
-		return cached.NewResultOK(timedSpec{spec: json, lastModified: time.Now()}, computeETag(json))
+		return timedSpec{spec: json, lastModified: time.Now()}, computeETag(json), nil
 	}, &o.specCache)
-	o.pbCache = cached.NewTransformer(func(result cached.Result[timedSpec]) cached.Result[timedSpec] {
-		if result.Err != nil {
-			return cached.NewResultErr[timedSpec](result.Err)
+	o.pbCache = cached.Transform(func(ts timedSpec, etag string, err error) (timedSpec, string, error) {
+		if err != nil {
+			return timedSpec{}, "", err
 		}
-		proto, err := ToV3ProtoBinary(result.Data.spec)
+		proto, err := ToV3ProtoBinary(ts.spec)
 		if err != nil {
-			return cached.NewResultErr[timedSpec](err)
+			return timedSpec{}, "", err
 		}
-		return cached.NewResultOK(timedSpec{spec: proto, lastModified: result.Data.lastModified}, result.Etag)
+		return timedSpec{spec: proto, lastModified: ts.lastModified}, etag, nil
 	}, o.jsonCache)
 	return o
 }
 
-func (o *openAPIV3Group) UpdateSpec(openapi cached.Data[*spec3.OpenAPI]) {
-	o.specCache.Replace(openapi)
+func (o *openAPIV3Group) UpdateSpec(openapi cached.Value[*spec3.OpenAPI]) {
+	o.specCache.Store(openapi)
 }
 
 // OpenAPIService is the service responsible for serving OpenAPI spec. It has
@@ -114,7 +115,7 @@ type OpenAPIService struct {
 	mutex    sync.Mutex
 	v3Schema map[string]*openAPIV3Group
 
-	discoveryCache cached.Replaceable[timedSpec]
+	discoveryCache cached.LastSuccess[timedSpec]
 }
 
 func computeETag(data []byte) string {
@@ -137,20 +138,20 @@ func NewOpenAPIService() *OpenAPIService {
 	o := &OpenAPIService{}
 	o.v3Schema = make(map[string]*openAPIV3Group)
 	// We're not locked because we haven't shared the structure yet.
-	o.discoveryCache.Replace(o.buildDiscoveryCacheLocked())
+	o.discoveryCache.Store(o.buildDiscoveryCacheLocked())
 	return o
 }
 
-func (o *OpenAPIService) buildDiscoveryCacheLocked() cached.Data[timedSpec] {
-	caches := make(map[string]cached.Data[timedSpec], len(o.v3Schema))
+func (o *OpenAPIService) buildDiscoveryCacheLocked() cached.Value[timedSpec] {
+	caches := make(map[string]cached.Value[timedSpec], len(o.v3Schema))
 	for gvName, group := range o.v3Schema {
 		caches[gvName] = group.jsonCache
 	}
-	return cached.NewMerger(func(results map[string]cached.Result[timedSpec]) cached.Result[timedSpec] {
+	return cached.Merge(func(results map[string]cached.Result[timedSpec]) (timedSpec, string, error) {
 		discovery := &OpenAPIV3Discovery{Paths: make(map[string]OpenAPIV3DiscoveryGroupVersion)}
 		for gvName, result := range results {
 			if result.Err != nil {
-				return cached.NewResultErr[timedSpec](result.Err)
+				return timedSpec{}, "", result.Err
 			}
 			discovery.Paths[gvName] = OpenAPIV3DiscoveryGroupVersion{
 				ServerRelativeURL: constructServerRelativeURL(gvName, result.Etag),
@@ -158,9 +159,9 @@ func (o *OpenAPIService) buildDiscoveryCacheLocked() cached.Data[timedSpec] {
 		}
 		j, err := json.Marshal(discovery)
 		if err != nil {
-			return cached.NewResultErr[timedSpec](err)
+			return timedSpec{}, "", err
 		}
-		return cached.NewResultOK(timedSpec{spec: j, lastModified: time.Now()}, computeETag(j))
+		return timedSpec{spec: j, lastModified: time.Now()}, computeETag(j), nil
 	}, caches)
 }
 
@@ -171,32 +172,32 @@ func (o *OpenAPIService) getSingleGroupBytes(getType string, group string) ([]by
 	if !ok {
 		return nil, "", time.Now(), fmt.Errorf("Cannot find CRD group %s", group)
 	}
-	result := cached.Result[timedSpec]{}
 	switch getType {
 	case subTypeJSON:
-		result = v.jsonCache.Get()
+		ts, etag, err := v.jsonCache.Get()
+		return ts.spec, etag, ts.lastModified, err
 	case subTypeProtobuf, subTypeProtobufDeprecated:
-		result = v.pbCache.Get()
+		ts, etag, err := v.pbCache.Get()
+		return ts.spec, etag, ts.lastModified, err
 	default:
 		return nil, "", time.Now(), fmt.Errorf("Invalid accept clause %s", getType)
 	}
-	return result.Data.spec, result.Etag, result.Data.lastModified, result.Err
 }
 
 // UpdateGroupVersionLazy adds or updates an existing group with the new cached.
-func (o *OpenAPIService) UpdateGroupVersionLazy(group string, openapi cached.Data[*spec3.OpenAPI]) {
+func (o *OpenAPIService) UpdateGroupVersionLazy(group string, openapi cached.Value[*spec3.OpenAPI]) {
 	o.mutex.Lock()
 	defer o.mutex.Unlock()
 	if _, ok := o.v3Schema[group]; !ok {
 		o.v3Schema[group] = newOpenAPIV3Group()
 		// Since there is a new item, we need to re-build the cache map.
-		o.discoveryCache.Replace(o.buildDiscoveryCacheLocked())
+		o.discoveryCache.Store(o.buildDiscoveryCacheLocked())
 	}
 	o.v3Schema[group].UpdateSpec(openapi)
 }
 
 func (o *OpenAPIService) UpdateGroupVersion(group string, openapi *spec3.OpenAPI) {
-	o.UpdateGroupVersionLazy(group, cached.NewResultOK(openapi, uuid.New().String()))
+	o.UpdateGroupVersionLazy(group, cached.Static(openapi, uuid.New().String()))
 }
 
 func (o *OpenAPIService) DeleteGroupVersion(group string) {
@@ -204,19 +205,19 @@ func (o *OpenAPIService) DeleteGroupVersion(group string) {
 	defer o.mutex.Unlock()
 	delete(o.v3Schema, group)
 	// Rebuild the merge cache map since the items have changed.
-	o.discoveryCache.Replace(o.buildDiscoveryCacheLocked())
+	o.discoveryCache.Store(o.buildDiscoveryCacheLocked())
 }
 
 func (o *OpenAPIService) HandleDiscovery(w http.ResponseWriter, r *http.Request) {
-	result := o.discoveryCache.Get()
-	if result.Err != nil {
-		klog.Errorf("Error serving discovery: %s", result.Err)
+	ts, etag, err := o.discoveryCache.Get()
+	if err != nil {
+		klog.Errorf("Error serving discovery: %s", err)
 		w.WriteHeader(http.StatusInternalServerError)
 		return
 	}
-	w.Header().Set("Etag", strconv.Quote(result.Etag))
+	w.Header().Set("Etag", strconv.Quote(etag))
 	w.Header().Set("Content-Type", "application/json")
-	http.ServeContent(w, r, "/openapi/v3", result.Data.lastModified, bytes.NewReader(result.Data.spec))
+	http.ServeContent(w, r, "/openapi/v3", ts.lastModified, bytes.NewReader(ts.spec))
 }
 
 func (o *OpenAPIService) HandleGroupVersion(w http.ResponseWriter, r *http.Request) {
diff --git a/vendor/k8s.io/kube-openapi/pkg/internal/flags.go b/vendor/k8s.io/kube-openapi/pkg/internal/flags.go
index bef60378231..da5485f6a6f 100644
--- a/vendor/k8s.io/kube-openapi/pkg/internal/flags.go
+++ b/vendor/k8s.io/kube-openapi/pkg/internal/flags.go
@@ -22,3 +22,4 @@ var UseOptimizedJSONUnmarshalingV3 bool = true
 
 // Used by tests to selectively disable experimental JSON marshaler
 var UseOptimizedJSONMarshaling bool = true
+var UseOptimizedJSONMarshalingV3 bool = true
diff --git a/vendor/k8s.io/kube-openapi/pkg/openapiconv/convert.go b/vendor/k8s.io/kube-openapi/pkg/openapiconv/convert.go
deleted file mode 100644
index e993fe23d58..00000000000
--- a/vendor/k8s.io/kube-openapi/pkg/openapiconv/convert.go
+++ /dev/null
@@ -1,322 +0,0 @@
-/*
-Copyright 2022 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package openapiconv
-
-import (
-	"strings"
-
-	klog "k8s.io/klog/v2"
-	builderutil "k8s.io/kube-openapi/pkg/builder3/util"
-	"k8s.io/kube-openapi/pkg/spec3"
-	"k8s.io/kube-openapi/pkg/validation/spec"
-)
-
-var OpenAPIV2DefPrefix = "#/definitions/"
-var OpenAPIV3DefPrefix = "#/components/schemas/"
-
-// ConvertV2ToV3 converts an OpenAPI V2 object into V3.
-// Certain references may be shared between the V2 and V3 objects in the conversion.
-func ConvertV2ToV3(v2Spec *spec.Swagger) *spec3.OpenAPI {
-	v3Spec := &spec3.OpenAPI{
-		Version:      "3.0.0",
-		Info:         v2Spec.Info,
-		ExternalDocs: ConvertExternalDocumentation(v2Spec.ExternalDocs),
-		Paths:        ConvertPaths(v2Spec.Paths),
-		Components:   ConvertComponents(v2Spec.SecurityDefinitions, v2Spec.Definitions, v2Spec.Responses, v2Spec.Produces),
-	}
-
-	return v3Spec
-}
-
-func ConvertExternalDocumentation(v2ED *spec.ExternalDocumentation) *spec3.ExternalDocumentation {
-	if v2ED == nil {
-		return nil
-	}
-	return &spec3.ExternalDocumentation{
-		ExternalDocumentationProps: spec3.ExternalDocumentationProps{
-			Description: v2ED.Description,
-			URL:         v2ED.URL,
-		},
-	}
-}
-
-func ConvertComponents(v2SecurityDefinitions spec.SecurityDefinitions, v2Definitions spec.Definitions, v2Responses map[string]spec.Response, produces []string) *spec3.Components {
-	components := &spec3.Components{}
-
-	if v2Definitions != nil {
-		components.Schemas = make(map[string]*spec.Schema)
-	}
-	for s, schema := range v2Definitions {
-		components.Schemas[s] = ConvertSchema(&schema)
-	}
-	if v2SecurityDefinitions != nil {
-		components.SecuritySchemes = make(spec3.SecuritySchemes)
-	}
-	for s, securityScheme := range v2SecurityDefinitions {
-		components.SecuritySchemes[s] = ConvertSecurityScheme(securityScheme)
-	}
-	if v2Responses != nil {
-		components.Responses = make(map[string]*spec3.Response)
-	}
-	for r, response := range v2Responses {
-		components.Responses[r] = ConvertResponse(&response, produces)
-	}
-
-	return components
-}
-
-func ConvertSchema(v2Schema *spec.Schema) *spec.Schema {
-	if v2Schema == nil {
-		return nil
-	}
-	v3Schema := spec.Schema{
-		VendorExtensible:   v2Schema.VendorExtensible,
-		SchemaProps:        v2Schema.SchemaProps,
-		SwaggerSchemaProps: v2Schema.SwaggerSchemaProps,
-		ExtraProps:         v2Schema.ExtraProps,
-	}
-
-	if refString := v2Schema.Ref.String(); refString != "" {
-		if idx := strings.Index(refString, OpenAPIV2DefPrefix); idx != -1 {
-			v3Schema.Ref = spec.MustCreateRef(OpenAPIV3DefPrefix + refString[idx+len(OpenAPIV2DefPrefix):])
-		} else {
-			klog.Errorf("Error: Swagger V2 Ref %s does not contain #/definitions\n", refString)
-		}
-	}
-
-	if v2Schema.Properties != nil {
-		v3Schema.Properties = make(map[string]spec.Schema)
-		for key, property := range v2Schema.Properties {
-			v3Schema.Properties[key] = *ConvertSchema(&property)
-		}
-	}
-	if v2Schema.Items != nil {
-		v3Schema.Items = &spec.SchemaOrArray{
-			Schema:  ConvertSchema(v2Schema.Items.Schema),
-			Schemas: ConvertSchemaList(v2Schema.Items.Schemas),
-		}
-	}
-
-	if v2Schema.AdditionalProperties != nil {
-		v3Schema.AdditionalProperties = &spec.SchemaOrBool{
-			Schema: ConvertSchema(v2Schema.AdditionalProperties.Schema),
-			Allows: v2Schema.AdditionalProperties.Allows,
-		}
-	}
-	if v2Schema.AdditionalItems != nil {
-		v3Schema.AdditionalItems = &spec.SchemaOrBool{
-			Schema: ConvertSchema(v2Schema.AdditionalItems.Schema),
-			Allows: v2Schema.AdditionalItems.Allows,
-		}
-	}
-
-	return builderutil.WrapRefs(&v3Schema)
-}
-
-func ConvertSchemaList(v2SchemaList []spec.Schema) []spec.Schema {
-	if v2SchemaList == nil {
-		return nil
-	}
-	v3SchemaList := []spec.Schema{}
-	for _, s := range v2SchemaList {
-		v3SchemaList = append(v3SchemaList, *ConvertSchema(&s))
-	}
-	return v3SchemaList
-}
-
-func ConvertSecurityScheme(v2securityScheme *spec.SecurityScheme) *spec3.SecurityScheme {
-	if v2securityScheme == nil {
-		return nil
-	}
-	securityScheme := &spec3.SecurityScheme{
-		VendorExtensible: v2securityScheme.VendorExtensible,
-		SecuritySchemeProps: spec3.SecuritySchemeProps{
-			Description: v2securityScheme.Description,
-			Type:        v2securityScheme.Type,
-			Name:        v2securityScheme.Name,
-			In:          v2securityScheme.In,
-		},
-	}
-
-	if v2securityScheme.Flow != "" {
-		securityScheme.Flows = make(map[string]*spec3.OAuthFlow)
-		securityScheme.Flows[v2securityScheme.Flow] = &spec3.OAuthFlow{
-			OAuthFlowProps: spec3.OAuthFlowProps{
-				AuthorizationUrl: v2securityScheme.AuthorizationURL,
-				TokenUrl:         v2securityScheme.TokenURL,
-				Scopes:           v2securityScheme.Scopes,
-			},
-		}
-	}
-	return securityScheme
-}
-
-func ConvertPaths(v2Paths *spec.Paths) *spec3.Paths {
-	if v2Paths == nil {
-		return nil
-	}
-	paths := &spec3.Paths{
-		VendorExtensible: v2Paths.VendorExtensible,
-	}
-
-	if v2Paths.Paths != nil {
-		paths.Paths = make(map[string]*spec3.Path)
-	}
-	for k, v := range v2Paths.Paths {
-		paths.Paths[k] = ConvertPathItem(v)
-	}
-	return paths
-}
-
-func ConvertPathItem(v2pathItem spec.PathItem) *spec3.Path {
-	path := &spec3.Path{
-		Refable: v2pathItem.Refable,
-		PathProps: spec3.PathProps{
-			Get:     ConvertOperation(v2pathItem.Get),
-			Put:     ConvertOperation(v2pathItem.Put),
-			Post:    ConvertOperation(v2pathItem.Post),
-			Delete:  ConvertOperation(v2pathItem.Delete),
-			Options: ConvertOperation(v2pathItem.Options),
-			Head:    ConvertOperation(v2pathItem.Head),
-			Patch:   ConvertOperation(v2pathItem.Patch),
-		},
-		VendorExtensible: v2pathItem.VendorExtensible,
-	}
-	for _, param := range v2pathItem.Parameters {
-		path.Parameters = append(path.Parameters, ConvertParameter(param))
-	}
-	return path
-}
-
-func ConvertOperation(v2Operation *spec.Operation) *spec3.Operation {
-	if v2Operation == nil {
-		return nil
-	}
-	operation := &spec3.Operation{
-		VendorExtensible: v2Operation.VendorExtensible,
-		OperationProps: spec3.OperationProps{
-			Description:  v2Operation.Description,
-			ExternalDocs: ConvertExternalDocumentation(v2Operation.OperationProps.ExternalDocs),
-			Tags:         v2Operation.Tags,
-			Summary:      v2Operation.Summary,
-			Deprecated:   v2Operation.Deprecated,
-			OperationId:  v2Operation.ID,
-		},
-	}
-
-	for _, param := range v2Operation.Parameters {
-		if param.ParamProps.Name == "body" && param.ParamProps.Schema != nil {
-			operation.OperationProps.RequestBody = &spec3.RequestBody{
-				RequestBodyProps: spec3.RequestBodyProps{},
-			}
-			if v2Operation.Consumes != nil {
-				operation.RequestBody.Content = make(map[string]*spec3.MediaType)
-			}
-			for _, consumer := range v2Operation.Consumes {
-				operation.RequestBody.Content[consumer] = &spec3.MediaType{
-					MediaTypeProps: spec3.MediaTypeProps{
-						Schema: ConvertSchema(param.ParamProps.Schema),
-					},
-				}
-			}
-		} else {
-			operation.Parameters = append(operation.Parameters, ConvertParameter(param))
-		}
-	}
-
-	operation.Responses = &spec3.Responses{ResponsesProps: spec3.ResponsesProps{
-		Default: ConvertResponse(v2Operation.Responses.Default, v2Operation.Produces),
-	},
-		VendorExtensible: v2Operation.Responses.VendorExtensible,
-	}
-
-	if v2Operation.Responses.StatusCodeResponses != nil {
-		operation.Responses.StatusCodeResponses = make(map[int]*spec3.Response)
-	}
-	for k, v := range v2Operation.Responses.StatusCodeResponses {
-		operation.Responses.StatusCodeResponses[k] = ConvertResponse(&v, v2Operation.Produces)
-	}
-	return operation
-}
-
-func ConvertResponse(v2Response *spec.Response, produces []string) *spec3.Response {
-	if v2Response == nil {
-		return nil
-	}
-	response := &spec3.Response{
-		Refable:          ConvertRefableResponse(v2Response.Refable),
-		VendorExtensible: v2Response.VendorExtensible,
-		ResponseProps: spec3.ResponseProps{
-			Description: v2Response.Description,
-		},
-	}
-
-	if v2Response.Schema != nil {
-		if produces != nil {
-			response.Content = make(map[string]*spec3.MediaType)
-		}
-		for _, producer := range produces {
-			response.ResponseProps.Content[producer] = &spec3.MediaType{
-				MediaTypeProps: spec3.MediaTypeProps{
-					Schema: ConvertSchema(v2Response.Schema),
-				},
-			}
-		}
-	}
-	return response
-}
-
-func ConvertParameter(v2Param spec.Parameter) *spec3.Parameter {
-	param := &spec3.Parameter{
-		Refable:          ConvertRefableParameter(v2Param.Refable),
-		VendorExtensible: v2Param.VendorExtensible,
-		ParameterProps: spec3.ParameterProps{
-			Name:            v2Param.Name,
-			Description:     v2Param.Description,
-			In:              v2Param.In,
-			Required:        v2Param.Required,
-			Schema:          ConvertSchema(v2Param.Schema),
-			AllowEmptyValue: v2Param.AllowEmptyValue,
-		},
-	}
-	// Convert SimpleSchema into Schema
-	if param.Schema == nil {
-		param.Schema = &spec.Schema{
-			SchemaProps: spec.SchemaProps{
-				Type:        []string{v2Param.Type},
-				Format:      v2Param.Format,
-				UniqueItems: v2Param.UniqueItems,
-			},
-		}
-	}
-
-	return param
-}
-
-func ConvertRefableParameter(refable spec.Refable) spec.Refable {
-	if refable.Ref.String() != "" {
-		return spec.Refable{Ref: spec.MustCreateRef(strings.Replace(refable.Ref.String(), "#/parameters/", "#/components/parameters/", 1))}
-	}
-	return refable
-}
-
-func ConvertRefableResponse(refable spec.Refable) spec.Refable {
-	if refable.Ref.String() != "" {
-		return spec.Refable{Ref: spec.MustCreateRef(strings.Replace(refable.Ref.String(), "#/responses/", "#/components/responses/", 1))}
-	}
-	return refable
-}
diff --git a/vendor/k8s.io/kube-openapi/pkg/schemamutation/walker.go b/vendor/k8s.io/kube-openapi/pkg/schemamutation/walker.go
deleted file mode 100644
index 3fac658e3c0..00000000000
--- a/vendor/k8s.io/kube-openapi/pkg/schemamutation/walker.go
+++ /dev/null
@@ -1,519 +0,0 @@
-/*
-Copyright 2017 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package schemamutation
-
-import (
-	"k8s.io/kube-openapi/pkg/validation/spec"
-)
-
-// Walker runs callback functions on all references of an OpenAPI spec,
-// replacing the values when visiting corresponding types.
-type Walker struct {
-	// SchemaCallback will be called on each schema, taking the original schema,
-	// and before any other callbacks of the Walker.
-	// If the schema needs to be mutated, DO NOT mutate it in-place,
-	// always create a copy, mutate, and return it.
-	SchemaCallback func(schema *spec.Schema) *spec.Schema
-
-	// RefCallback will be called on each ref.
-	// If the ref needs to be mutated, DO NOT mutate it in-place,
-	// always create a copy, mutate, and return it.
-	RefCallback func(ref *spec.Ref) *spec.Ref
-}
-
-type SchemaCallbackFunc func(schema *spec.Schema) *spec.Schema
-type RefCallbackFunc func(ref *spec.Ref) *spec.Ref
-
-var SchemaCallBackNoop SchemaCallbackFunc = func(schema *spec.Schema) *spec.Schema {
-	return schema
-}
-var RefCallbackNoop RefCallbackFunc = func(ref *spec.Ref) *spec.Ref {
-	return ref
-}
-
-// ReplaceReferences rewrites the references without mutating the input.
-// The output might share data with the input.
-func ReplaceReferences(walkRef func(ref *spec.Ref) *spec.Ref, sp *spec.Swagger) *spec.Swagger {
-	walker := &Walker{RefCallback: walkRef, SchemaCallback: SchemaCallBackNoop}
-	return walker.WalkRoot(sp)
-}
-
-func (w *Walker) WalkSchema(schema *spec.Schema) *spec.Schema {
-	if schema == nil {
-		return nil
-	}
-
-	orig := schema
-	clone := func() {
-		if orig == schema {
-			schema = &spec.Schema{}
-			*schema = *orig
-		}
-	}
-
-	// Always run callback on the whole schema first
-	// so that SchemaCallback can take the original schema as input.
-	schema = w.SchemaCallback(schema)
-
-	if r := w.RefCallback(&schema.Ref); r != &schema.Ref {
-		clone()
-		schema.Ref = *r
-	}
-
-	definitionsCloned := false
-	for k, v := range schema.Definitions {
-		if s := w.WalkSchema(&v); s != &v {
-			if !definitionsCloned {
-				definitionsCloned = true
-				clone()
-				schema.Definitions = make(spec.Definitions, len(orig.Definitions))
-				for k2, v2 := range orig.Definitions {
-					schema.Definitions[k2] = v2
-				}
-			}
-			schema.Definitions[k] = *s
-		}
-	}
-
-	propertiesCloned := false
-	for k, v := range schema.Properties {
-		if s := w.WalkSchema(&v); s != &v {
-			if !propertiesCloned {
-				propertiesCloned = true
-				clone()
-				schema.Properties = make(map[string]spec.Schema, len(orig.Properties))
-				for k2, v2 := range orig.Properties {
-					schema.Properties[k2] = v2
-				}
-			}
-			schema.Properties[k] = *s
-		}
-	}
-
-	patternPropertiesCloned := false
-	for k, v := range schema.PatternProperties {
-		if s := w.WalkSchema(&v); s != &v {
-			if !patternPropertiesCloned {
-				patternPropertiesCloned = true
-				clone()
-				schema.PatternProperties = make(map[string]spec.Schema, len(orig.PatternProperties))
-				for k2, v2 := range orig.PatternProperties {
-					schema.PatternProperties[k2] = v2
-				}
-			}
-			schema.PatternProperties[k] = *s
-		}
-	}
-
-	allOfCloned := false
-	for i := range schema.AllOf {
-		if s := w.WalkSchema(&schema.AllOf[i]); s != &schema.AllOf[i] {
-			if !allOfCloned {
-				allOfCloned = true
-				clone()
-				schema.AllOf = make([]spec.Schema, len(orig.AllOf))
-				copy(schema.AllOf, orig.AllOf)
-			}
-			schema.AllOf[i] = *s
-		}
-	}
-
-	anyOfCloned := false
-	for i := range schema.AnyOf {
-		if s := w.WalkSchema(&schema.AnyOf[i]); s != &schema.AnyOf[i] {
-			if !anyOfCloned {
-				anyOfCloned = true
-				clone()
-				schema.AnyOf = make([]spec.Schema, len(orig.AnyOf))
-				copy(schema.AnyOf, orig.AnyOf)
-			}
-			schema.AnyOf[i] = *s
-		}
-	}
-
-	oneOfCloned := false
-	for i := range schema.OneOf {
-		if s := w.WalkSchema(&schema.OneOf[i]); s != &schema.OneOf[i] {
-			if !oneOfCloned {
-				oneOfCloned = true
-				clone()
-				schema.OneOf = make([]spec.Schema, len(orig.OneOf))
-				copy(schema.OneOf, orig.OneOf)
-			}
-			schema.OneOf[i] = *s
-		}
-	}
-
-	if schema.Not != nil {
-		if s := w.WalkSchema(schema.Not); s != schema.Not {
-			clone()
-			schema.Not = s
-		}
-	}
-
-	if schema.AdditionalProperties != nil && schema.AdditionalProperties.Schema != nil {
-		if s := w.WalkSchema(schema.AdditionalProperties.Schema); s != schema.AdditionalProperties.Schema {
-			clone()
-			schema.AdditionalProperties = &spec.SchemaOrBool{Schema: s, Allows: schema.AdditionalProperties.Allows}
-		}
-	}
-
-	if schema.AdditionalItems != nil && schema.AdditionalItems.Schema != nil {
-		if s := w.WalkSchema(schema.AdditionalItems.Schema); s != schema.AdditionalItems.Schema {
-			clone()
-			schema.AdditionalItems = &spec.SchemaOrBool{Schema: s, Allows: schema.AdditionalItems.Allows}
-		}
-	}
-
-	if schema.Items != nil {
-		if schema.Items.Schema != nil {
-			if s := w.WalkSchema(schema.Items.Schema); s != schema.Items.Schema {
-				clone()
-				schema.Items = &spec.SchemaOrArray{Schema: s}
-			}
-		} else {
-			itemsCloned := false
-			for i := range schema.Items.Schemas {
-				if s := w.WalkSchema(&schema.Items.Schemas[i]); s != &schema.Items.Schemas[i] {
-					if !itemsCloned {
-						clone()
-						schema.Items = &spec.SchemaOrArray{
-							Schemas: make([]spec.Schema, len(orig.Items.Schemas)),
-						}
-						itemsCloned = true
-						copy(schema.Items.Schemas, orig.Items.Schemas)
-					}
-					schema.Items.Schemas[i] = *s
-				}
-			}
-		}
-	}
-
-	return schema
-}
-
-func (w *Walker) walkParameter(param *spec.Parameter) *spec.Parameter {
-	if param == nil {
-		return nil
-	}
-
-	orig := param
-	cloned := false
-	clone := func() {
-		if !cloned {
-			cloned = true
-			param = &spec.Parameter{}
-			*param = *orig
-		}
-	}
-
-	if r := w.RefCallback(&param.Ref); r != &param.Ref {
-		clone()
-		param.Ref = *r
-	}
-	if s := w.WalkSchema(param.Schema); s != param.Schema {
-		clone()
-		param.Schema = s
-	}
-	if param.Items != nil {
-		if r := w.RefCallback(&param.Items.Ref); r != &param.Items.Ref {
-			param.Items.Ref = *r
-		}
-	}
-
-	return param
-}
-
-func (w *Walker) walkParameters(params []spec.Parameter) ([]spec.Parameter, bool) {
-	if params == nil {
-		return nil, false
-	}
-
-	orig := params
-	cloned := false
-	clone := func() {
-		if !cloned {
-			cloned = true
-			params = make([]spec.Parameter, len(params))
-			copy(params, orig)
-		}
-	}
-
-	for i := range params {
-		if s := w.walkParameter(&params[i]); s != &params[i] {
-			clone()
-			params[i] = *s
-		}
-	}
-
-	return params, cloned
-}
-
-func (w *Walker) walkResponse(resp *spec.Response) *spec.Response {
-	if resp == nil {
-		return nil
-	}
-
-	orig := resp
-	cloned := false
-	clone := func() {
-		if !cloned {
-			cloned = true
-			resp = &spec.Response{}
-			*resp = *orig
-		}
-	}
-
-	if r := w.RefCallback(&resp.Ref); r != &resp.Ref {
-		clone()
-		resp.Ref = *r
-	}
-	if s := w.WalkSchema(resp.Schema); s != resp.Schema {
-		clone()
-		resp.Schema = s
-	}
-
-	return resp
-}
-
-func (w *Walker) walkResponses(resps *spec.Responses) *spec.Responses {
-	if resps == nil {
-		return nil
-	}
-
-	orig := resps
-	cloned := false
-	clone := func() {
-		if !cloned {
-			cloned = true
-			resps = &spec.Responses{}
-			*resps = *orig
-		}
-	}
-
-	if r := w.walkResponse(resps.ResponsesProps.Default); r != resps.ResponsesProps.Default {
-		clone()
-		resps.Default = r
-	}
-
-	responsesCloned := false
-	for k, v := range resps.ResponsesProps.StatusCodeResponses {
-		if r := w.walkResponse(&v); r != &v {
-			if !responsesCloned {
-				responsesCloned = true
-				clone()
-				resps.ResponsesProps.StatusCodeResponses = make(map[int]spec.Response, len(orig.StatusCodeResponses))
-				for k2, v2 := range orig.StatusCodeResponses {
-					resps.ResponsesProps.StatusCodeResponses[k2] = v2
-				}
-			}
-			resps.ResponsesProps.StatusCodeResponses[k] = *r
-		}
-	}
-
-	return resps
-}
-
-func (w *Walker) walkOperation(op *spec.Operation) *spec.Operation {
-	if op == nil {
-		return nil
-	}
-
-	orig := op
-	cloned := false
-	clone := func() {
-		if !cloned {
-			cloned = true
-			op = &spec.Operation{}
-			*op = *orig
-		}
-	}
-
-	parametersCloned := false
-	for i := range op.Parameters {
-		if s := w.walkParameter(&op.Parameters[i]); s != &op.Parameters[i] {
-			if !parametersCloned {
-				parametersCloned = true
-				clone()
-				op.Parameters = make([]spec.Parameter, len(orig.Parameters))
-				copy(op.Parameters, orig.Parameters)
-			}
-			op.Parameters[i] = *s
-		}
-	}
-
-	if r := w.walkResponses(op.Responses); r != op.Responses {
-		clone()
-		op.Responses = r
-	}
-
-	return op
-}
-
-func (w *Walker) walkPathItem(pathItem *spec.PathItem) *spec.PathItem {
-	if pathItem == nil {
-		return nil
-	}
-
-	orig := pathItem
-	cloned := false
-	clone := func() {
-		if !cloned {
-			cloned = true
-			pathItem = &spec.PathItem{}
-			*pathItem = *orig
-		}
-	}
-
-	if p, changed := w.walkParameters(pathItem.Parameters); changed {
-		clone()
-		pathItem.Parameters = p
-	}
-	if op := w.walkOperation(pathItem.Get); op != pathItem.Get {
-		clone()
-		pathItem.Get = op
-	}
-	if op := w.walkOperation(pathItem.Head); op != pathItem.Head {
-		clone()
-		pathItem.Head = op
-	}
-	if op := w.walkOperation(pathItem.Delete); op != pathItem.Delete {
-		clone()
-		pathItem.Delete = op
-	}
-	if op := w.walkOperation(pathItem.Options); op != pathItem.Options {
-		clone()
-		pathItem.Options = op
-	}
-	if op := w.walkOperation(pathItem.Patch); op != pathItem.Patch {
-		clone()
-		pathItem.Patch = op
-	}
-	if op := w.walkOperation(pathItem.Post); op != pathItem.Post {
-		clone()
-		pathItem.Post = op
-	}
-	if op := w.walkOperation(pathItem.Put); op != pathItem.Put {
-		clone()
-		pathItem.Put = op
-	}
-
-	return pathItem
-}
-
-func (w *Walker) walkPaths(paths *spec.Paths) *spec.Paths {
-	if paths == nil {
-		return nil
-	}
-
-	orig := paths
-	cloned := false
-	clone := func() {
-		if !cloned {
-			cloned = true
-			paths = &spec.Paths{}
-			*paths = *orig
-		}
-	}
-
-	pathsCloned := false
-	for k, v := range paths.Paths {
-		if p := w.walkPathItem(&v); p != &v {
-			if !pathsCloned {
-				pathsCloned = true
-				clone()
-				paths.Paths = make(map[string]spec.PathItem, len(orig.Paths))
-				for k2, v2 := range orig.Paths {
-					paths.Paths[k2] = v2
-				}
-			}
-			paths.Paths[k] = *p
-		}
-	}
-
-	return paths
-}
-
-func (w *Walker) WalkRoot(swagger *spec.Swagger) *spec.Swagger {
-	if swagger == nil {
-		return nil
-	}
-
-	orig := swagger
-	cloned := false
-	clone := func() {
-		if !cloned {
-			cloned = true
-			swagger = &spec.Swagger{}
-			*swagger = *orig
-		}
-	}
-
-	parametersCloned := false
-	for k, v := range swagger.Parameters {
-		if p := w.walkParameter(&v); p != &v {
-			if !parametersCloned {
-				parametersCloned = true
-				clone()
-				swagger.Parameters = make(map[string]spec.Parameter, len(orig.Parameters))
-				for k2, v2 := range orig.Parameters {
-					swagger.Parameters[k2] = v2
-				}
-			}
-			swagger.Parameters[k] = *p
-		}
-	}
-
-	responsesCloned := false
-	for k, v := range swagger.Responses {
-		if r := w.walkResponse(&v); r != &v {
-			if !responsesCloned {
-				responsesCloned = true
-				clone()
-				swagger.Responses = make(map[string]spec.Response, len(orig.Responses))
-				for k2, v2 := range orig.Responses {
-					swagger.Responses[k2] = v2
-				}
-			}
-			swagger.Responses[k] = *r
-		}
-	}
-
-	definitionsCloned := false
-	for k, v := range swagger.Definitions {
-		if s := w.WalkSchema(&v); s != &v {
-			if !definitionsCloned {
-				definitionsCloned = true
-				clone()
-				swagger.Definitions = make(spec.Definitions, len(orig.Definitions))
-				for k2, v2 := range orig.Definitions {
-					swagger.Definitions[k2] = v2
-				}
-			}
-			swagger.Definitions[k] = *s
-		}
-	}
-
-	if swagger.Paths != nil {
-		if p := w.walkPaths(swagger.Paths); p != swagger.Paths {
-			clone()
-			swagger.Paths = p
-		}
-	}
-
-	return swagger
-}
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/encoding.go b/vendor/k8s.io/kube-openapi/pkg/spec3/encoding.go
index 699291f1d8e..1f62c6e772e 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/encoding.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/encoding.go
@@ -32,6 +32,9 @@ type Encoding struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Encoding as JSON
 func (e *Encoding) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(e)
+	}
 	b1, err := json.Marshal(e.EncodingProps)
 	if err != nil {
 		return nil, err
@@ -43,6 +46,16 @@ func (e *Encoding) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2), nil
 }
 
+func (e *Encoding) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		EncodingProps encodingPropsOmitZero `json:",inline"`
+		spec.Extensions
+	}
+	x.Extensions = internal.SanitizeExtensions(e.Extensions)
+	x.EncodingProps = encodingPropsOmitZero(e.EncodingProps)
+	return opts.MarshalNext(enc, x)
+}
+
 func (e *Encoding) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, e)
@@ -82,3 +95,11 @@ type EncodingProps struct {
 	// AllowReserved determines whether the parameter value SHOULD allow reserved characters, as defined by RFC3986
 	AllowReserved bool `json:"allowReserved,omitempty"`
 }
+
+type encodingPropsOmitZero struct {
+	ContentType   string             `json:"contentType,omitempty"`
+	Headers       map[string]*Header `json:"headers,omitempty"`
+	Style         string             `json:"style,omitempty"`
+	Explode       bool               `json:"explode,omitzero"`
+	AllowReserved bool               `json:"allowReserved,omitzero"`
+}
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/example.go b/vendor/k8s.io/kube-openapi/pkg/spec3/example.go
index 03b8727170f..8834a92e6da 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/example.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/example.go
@@ -36,6 +36,9 @@ type Example struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode RequestBody as JSON
 func (e *Example) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(e)
+	}
 	b1, err := json.Marshal(e.Refable)
 	if err != nil {
 		return nil, err
@@ -50,6 +53,17 @@ func (e *Example) MarshalJSON() ([]byte, error) {
 	}
 	return swag.ConcatJSON(b1, b2, b3), nil
 }
+func (e *Example) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		Ref          string `json:"$ref,omitempty"`
+		ExampleProps `json:",inline"`
+		spec.Extensions
+	}
+	x.Ref = e.Refable.Ref.String()
+	x.Extensions = internal.SanitizeExtensions(e.Extensions)
+	x.ExampleProps = e.ExampleProps
+	return opts.MarshalNext(enc, x)
+}
 
 func (e *Example) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/external_documentation.go b/vendor/k8s.io/kube-openapi/pkg/spec3/external_documentation.go
index e79956721ac..f0515496e4d 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/external_documentation.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/external_documentation.go
@@ -39,6 +39,9 @@ type ExternalDocumentationProps struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Responses as JSON
 func (e *ExternalDocumentation) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(e)
+	}
 	b1, err := json.Marshal(e.ExternalDocumentationProps)
 	if err != nil {
 		return nil, err
@@ -50,6 +53,16 @@ func (e *ExternalDocumentation) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2), nil
 }
 
+func (e *ExternalDocumentation) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		ExternalDocumentationProps `json:",inline"`
+		spec.Extensions
+	}
+	x.Extensions = internal.SanitizeExtensions(e.Extensions)
+	x.ExternalDocumentationProps = e.ExternalDocumentationProps
+	return opts.MarshalNext(enc, x)
+}
+
 func (e *ExternalDocumentation) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, e)
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/fuzz.go b/vendor/k8s.io/kube-openapi/pkg/spec3/fuzz.go
index bc19dd48ed6..08b6246cebb 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/fuzz.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/fuzz.go
@@ -35,6 +35,18 @@ var OpenAPIV3FuzzFuncs []interface{} = []interface{}{
 	func(o *OpenAPI, c fuzz.Continue) {
 		c.FuzzNoCustom(o)
 		o.Version = "3.0.0"
+		for i, val := range o.SecurityRequirement {
+			if val == nil {
+				o.SecurityRequirement[i] = make(map[string][]string)
+			}
+
+			for k, v := range val {
+				if v == nil {
+					val[k] = make([]string, 0)
+				}
+			}
+		}
+
 	},
 	func(r *interface{}, c fuzz.Continue) {
 		switch c.Intn(3) {
@@ -169,6 +181,21 @@ var OpenAPIV3FuzzFuncs []interface{} = []interface{}{
 		c.Fuzz(&v.ResponseProps)
 		c.Fuzz(&v.VendorExtensible)
 	},
+	func(v *Operation, c fuzz.Continue) {
+		c.FuzzNoCustom(v)
+		// Do not fuzz null values into the array.
+		for i, val := range v.SecurityRequirement {
+			if val == nil {
+				v.SecurityRequirement[i] = make(map[string][]string)
+			}
+
+			for k, v := range val {
+				if v == nil {
+					val[k] = make([]string, 0)
+				}
+			}
+		}
+	},
 	func(v *spec.Extensions, c fuzz.Continue) {
 		numChildren := c.Intn(5)
 		for i := 0; i < numChildren; i++ {
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/header.go b/vendor/k8s.io/kube-openapi/pkg/spec3/header.go
index ee5a30f797a..9ea30628ceb 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/header.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/header.go
@@ -36,6 +36,9 @@ type Header struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Header as JSON
 func (h *Header) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(h)
+	}
 	b1, err := json.Marshal(h.Refable)
 	if err != nil {
 		return nil, err
@@ -51,6 +54,18 @@ func (h *Header) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2, b3), nil
 }
 
+func (h *Header) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		Ref         string              `json:"$ref,omitempty"`
+		HeaderProps headerPropsOmitZero `json:",inline"`
+		spec.Extensions
+	}
+	x.Ref = h.Refable.Ref.String()
+	x.Extensions = internal.SanitizeExtensions(h.Extensions)
+	x.HeaderProps = headerPropsOmitZero(h.HeaderProps)
+	return opts.MarshalNext(enc, x)
+}
+
 func (h *Header) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, h)
@@ -109,3 +124,19 @@ type HeaderProps struct {
 	// Examples of the header
 	Examples map[string]*Example `json:"examples,omitempty"`
 }
+
+// Marshaling structure only, always edit along with corresponding
+// struct (or compilation will fail).
+type headerPropsOmitZero struct {
+	Description     string                `json:"description,omitempty"`
+	Required        bool                  `json:"required,omitzero"`
+	Deprecated      bool                  `json:"deprecated,omitzero"`
+	AllowEmptyValue bool                  `json:"allowEmptyValue,omitzero"`
+	Style           string                `json:"style,omitempty"`
+	Explode         bool                  `json:"explode,omitzero"`
+	AllowReserved   bool                  `json:"allowReserved,omitzero"`
+	Schema          *spec.Schema          `json:"schema,omitzero"`
+	Content         map[string]*MediaType `json:"content,omitempty"`
+	Example         interface{}           `json:"example,omitempty"`
+	Examples        map[string]*Example   `json:"examples,omitempty"`
+}
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/media_type.go b/vendor/k8s.io/kube-openapi/pkg/spec3/media_type.go
index d390e69bcf7..47eef1edb0a 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/media_type.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/media_type.go
@@ -35,6 +35,9 @@ type MediaType struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode MediaType as JSON
 func (m *MediaType) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(m)
+	}
 	b1, err := json.Marshal(m.MediaTypeProps)
 	if err != nil {
 		return nil, err
@@ -46,6 +49,16 @@ func (m *MediaType) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2), nil
 }
 
+func (e *MediaType) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		MediaTypeProps mediaTypePropsOmitZero `json:",inline"`
+		spec.Extensions
+	}
+	x.Extensions = internal.SanitizeExtensions(e.Extensions)
+	x.MediaTypeProps = mediaTypePropsOmitZero(e.MediaTypeProps)
+	return opts.MarshalNext(enc, x)
+}
+
 func (m *MediaType) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, m)
@@ -84,3 +97,10 @@ type MediaTypeProps struct {
 	// A map between a property name and its encoding information. The key, being the property name, MUST exist in the schema as a property. The encoding object SHALL only apply to requestBody objects when the media type is multipart or application/x-www-form-urlencoded
 	Encoding map[string]*Encoding `json:"encoding,omitempty"`
 }
+
+type mediaTypePropsOmitZero struct {
+	Schema   *spec.Schema         `json:"schema,omitzero"`
+	Example  interface{}          `json:"example,omitempty"`
+	Examples map[string]*Example  `json:"examples,omitempty"`
+	Encoding map[string]*Encoding `json:"encoding,omitempty"`
+}
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/operation.go b/vendor/k8s.io/kube-openapi/pkg/spec3/operation.go
index 28230610bd4..f1e10254795 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/operation.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/operation.go
@@ -35,6 +35,9 @@ type Operation struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Operation as JSON
 func (o *Operation) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(o)
+	}
 	b1, err := json.Marshal(o.OperationProps)
 	if err != nil {
 		return nil, err
@@ -46,6 +49,16 @@ func (o *Operation) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2), nil
 }
 
+func (o *Operation) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		spec.Extensions
+		OperationProps operationPropsOmitZero `json:",inline"`
+	}
+	x.Extensions = internal.SanitizeExtensions(o.Extensions)
+	x.OperationProps = operationPropsOmitZero(o.OperationProps)
+	return opts.MarshalNext(enc, x)
+}
+
 // UnmarshalJSON hydrates this items instance with the data from JSON
 func (o *Operation) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
@@ -95,3 +108,17 @@ type OperationProps struct {
 	// Servers contains an alternative server array to service this operation
 	Servers []*Server `json:"servers,omitempty"`
 }
+
+type operationPropsOmitZero struct {
+	Tags                []string               `json:"tags,omitempty"`
+	Summary             string                 `json:"summary,omitempty"`
+	Description         string                 `json:"description,omitempty"`
+	ExternalDocs        *ExternalDocumentation `json:"externalDocs,omitzero"`
+	OperationId         string                 `json:"operationId,omitempty"`
+	Parameters          []*Parameter           `json:"parameters,omitempty"`
+	RequestBody         *RequestBody           `json:"requestBody,omitzero"`
+	Responses           *Responses             `json:"responses,omitzero"`
+	Deprecated          bool                   `json:"deprecated,omitzero"`
+	SecurityRequirement []map[string][]string  `json:"security,omitempty"`
+	Servers             []*Server              `json:"servers,omitempty"`
+}
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/parameter.go b/vendor/k8s.io/kube-openapi/pkg/spec3/parameter.go
index 613da71a6d3..ada7edb6375 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/parameter.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/parameter.go
@@ -36,6 +36,9 @@ type Parameter struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Parameter as JSON
 func (p *Parameter) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(p)
+	}
 	b1, err := json.Marshal(p.Refable)
 	if err != nil {
 		return nil, err
@@ -51,6 +54,18 @@ func (p *Parameter) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2, b3), nil
 }
 
+func (p *Parameter) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		Ref            string                 `json:"$ref,omitempty"`
+		ParameterProps parameterPropsOmitZero `json:",inline"`
+		spec.Extensions
+	}
+	x.Ref = p.Refable.Ref.String()
+	x.Extensions = internal.SanitizeExtensions(p.Extensions)
+	x.ParameterProps = parameterPropsOmitZero(p.ParameterProps)
+	return opts.MarshalNext(enc, x)
+}
+
 func (p *Parameter) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, p)
@@ -114,3 +129,19 @@ type ParameterProps struct {
 	// Examples of the parameter's potential value. Each example SHOULD contain a value in the correct format as specified in the parameter encoding
 	Examples map[string]*Example `json:"examples,omitempty"`
 }
+
+type parameterPropsOmitZero struct {
+	Name            string                `json:"name,omitempty"`
+	In              string                `json:"in,omitempty"`
+	Description     string                `json:"description,omitempty"`
+	Required        bool                  `json:"required,omitzero"`
+	Deprecated      bool                  `json:"deprecated,omitzero"`
+	AllowEmptyValue bool                  `json:"allowEmptyValue,omitzero"`
+	Style           string                `json:"style,omitempty"`
+	Explode         bool                  `json:"explode,omitzero"`
+	AllowReserved   bool                  `json:"allowReserved,omitzero"`
+	Schema          *spec.Schema          `json:"schema,omitzero"`
+	Content         map[string]*MediaType `json:"content,omitempty"`
+	Example         interface{}           `json:"example,omitempty"`
+	Examples        map[string]*Example   `json:"examples,omitempty"`
+}
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/path.go b/vendor/k8s.io/kube-openapi/pkg/spec3/path.go
index 40d9061aceb..16fbbb4dd93 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/path.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/path.go
@@ -35,15 +35,41 @@ type Paths struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Paths as JSON
 func (p *Paths) MarshalJSON() ([]byte, error) {
-	b1, err := json.Marshal(p.Paths)
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(p)
+	}
+	b1, err := json.Marshal(p.VendorExtensible)
 	if err != nil {
 		return nil, err
 	}
-	b2, err := json.Marshal(p.VendorExtensible)
+
+	pths := make(map[string]*Path)
+	for k, v := range p.Paths {
+		if strings.HasPrefix(k, "/") {
+			pths[k] = v
+		}
+	}
+	b2, err := json.Marshal(pths)
 	if err != nil {
 		return nil, err
 	}
-	return swag.ConcatJSON(b1, b2), nil
+	concated := swag.ConcatJSON(b1, b2)
+	return concated, nil
+}
+
+func (p *Paths) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	m := make(map[string]any, len(p.Extensions)+len(p.Paths))
+	for k, v := range p.Extensions {
+		if internal.IsExtensionKey(k) {
+			m[k] = v
+		}
+	}
+	for k, v := range p.Paths {
+		if strings.HasPrefix(k, "/") {
+			m[k] = v
+		}
+	}
+	return opts.MarshalNext(enc, m)
 }
 
 // UnmarshalJSON hydrates this items instance with the data from JSON
@@ -144,6 +170,9 @@ type Path struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Path as JSON
 func (p *Path) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(p)
+	}
 	b1, err := json.Marshal(p.Refable)
 	if err != nil {
 		return nil, err
@@ -159,6 +188,18 @@ func (p *Path) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2, b3), nil
 }
 
+func (p *Path) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		Ref string `json:"$ref,omitempty"`
+		spec.Extensions
+		PathProps
+	}
+	x.Ref = p.Refable.Ref.String()
+	x.Extensions = internal.SanitizeExtensions(p.Extensions)
+	x.PathProps = p.PathProps
+	return opts.MarshalNext(enc, x)
+}
+
 func (p *Path) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, p)
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/request_body.go b/vendor/k8s.io/kube-openapi/pkg/spec3/request_body.go
index 33267ce675e..6f8607e4009 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/request_body.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/request_body.go
@@ -36,6 +36,9 @@ type RequestBody struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode RequestBody as JSON
 func (r *RequestBody) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(r)
+	}
 	b1, err := json.Marshal(r.Refable)
 	if err != nil {
 		return nil, err
@@ -51,6 +54,18 @@ func (r *RequestBody) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2, b3), nil
 }
 
+func (r *RequestBody) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		Ref              string                   `json:"$ref,omitempty"`
+		RequestBodyProps requestBodyPropsOmitZero `json:",inline"`
+		spec.Extensions
+	}
+	x.Ref = r.Refable.Ref.String()
+	x.Extensions = internal.SanitizeExtensions(r.Extensions)
+	x.RequestBodyProps = requestBodyPropsOmitZero(r.RequestBodyProps)
+	return opts.MarshalNext(enc, x)
+}
+
 func (r *RequestBody) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, r)
@@ -77,6 +92,12 @@ type RequestBodyProps struct {
 	Required bool `json:"required,omitempty"`
 }
 
+type requestBodyPropsOmitZero struct {
+	Description string                `json:"description,omitempty"`
+	Content     map[string]*MediaType `json:"content,omitempty"`
+	Required    bool                  `json:"required,omitzero"`
+}
+
 func (r *RequestBody) UnmarshalNextJSON(opts jsonv2.UnmarshalOptions, dec *jsonv2.Decoder) error {
 	var x struct {
 		spec.Extensions
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/response.go b/vendor/k8s.io/kube-openapi/pkg/spec3/response.go
index 95b388e6c60..73e241fdc9c 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/response.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/response.go
@@ -37,6 +37,9 @@ type Responses struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Responses as JSON
 func (r *Responses) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(r)
+	}
 	b1, err := json.Marshal(r.ResponsesProps)
 	if err != nil {
 		return nil, err
@@ -48,6 +51,25 @@ func (r *Responses) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2), nil
 }
 
+func (r Responses) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	type ArbitraryKeys map[string]interface{}
+	var x struct {
+		ArbitraryKeys
+		Default *Response `json:"default,omitzero"`
+	}
+	x.ArbitraryKeys = make(map[string]any, len(r.Extensions)+len(r.StatusCodeResponses))
+	for k, v := range r.Extensions {
+		if internal.IsExtensionKey(k) {
+			x.ArbitraryKeys[k] = v
+		}
+	}
+	for k, v := range r.StatusCodeResponses {
+		x.ArbitraryKeys[strconv.Itoa(k)] = v
+	}
+	x.Default = r.Default
+	return opts.MarshalNext(enc, x)
+}
+
 func (r *Responses) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, r)
@@ -179,6 +201,9 @@ type Response struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Response as JSON
 func (r *Response) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(r)
+	}
 	b1, err := json.Marshal(r.Refable)
 	if err != nil {
 		return nil, err
@@ -194,6 +219,18 @@ func (r *Response) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2, b3), nil
 }
 
+func (r Response) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		Ref string `json:"$ref,omitempty"`
+		spec.Extensions
+		ResponseProps `json:",inline"`
+	}
+	x.Ref = r.Refable.Ref.String()
+	x.Extensions = internal.SanitizeExtensions(r.Extensions)
+	x.ResponseProps = r.ResponseProps
+	return opts.MarshalNext(enc, x)
+}
+
 func (r *Response) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, r)
@@ -247,6 +284,9 @@ type Link struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Link as JSON
 func (r *Link) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(r)
+	}
 	b1, err := json.Marshal(r.Refable)
 	if err != nil {
 		return nil, err
@@ -262,6 +302,18 @@ func (r *Link) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2, b3), nil
 }
 
+func (r *Link) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		Ref string `json:"$ref,omitempty"`
+		spec.Extensions
+		LinkProps `json:",inline"`
+	}
+	x.Ref = r.Refable.Ref.String()
+	x.Extensions = internal.SanitizeExtensions(r.Extensions)
+	x.LinkProps = r.LinkProps
+	return opts.MarshalNext(enc, x)
+}
+
 func (r *Link) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, r)
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/security_scheme.go b/vendor/k8s.io/kube-openapi/pkg/spec3/security_scheme.go
index edf7e6de3f6..dd1e98ed881 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/security_scheme.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/security_scheme.go
@@ -20,6 +20,8 @@ import (
 	"encoding/json"
 
 	"github.com/go-openapi/swag"
+	"k8s.io/kube-openapi/pkg/internal"
+	jsonv2 "k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json"
 	"k8s.io/kube-openapi/pkg/validation/spec"
 )
 
@@ -32,6 +34,9 @@ type SecurityScheme struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode SecurityScheme as JSON
 func (s *SecurityScheme) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(s)
+	}
 	b1, err := json.Marshal(s.SecuritySchemeProps)
 	if err != nil {
 		return nil, err
@@ -47,6 +52,18 @@ func (s *SecurityScheme) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2, b3), nil
 }
 
+func (s *SecurityScheme) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		Ref                 string `json:"$ref,omitempty"`
+		SecuritySchemeProps `json:",inline"`
+		spec.Extensions
+	}
+	x.Ref = s.Refable.Ref.String()
+	x.Extensions = internal.SanitizeExtensions(s.Extensions)
+	x.SecuritySchemeProps = s.SecuritySchemeProps
+	return opts.MarshalNext(enc, x)
+}
+
 // UnmarshalJSON hydrates this items instance with the data from JSON
 func (s *SecurityScheme) UnmarshalJSON(data []byte) error {
 	if err := json.Unmarshal(data, &s.SecuritySchemeProps); err != nil {
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/server.go b/vendor/k8s.io/kube-openapi/pkg/spec3/server.go
index d5df0a78110..654a42c06e4 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/server.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/server.go
@@ -41,6 +41,9 @@ type ServerProps struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Responses as JSON
 func (s *Server) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(s)
+	}
 	b1, err := json.Marshal(s.ServerProps)
 	if err != nil {
 		return nil, err
@@ -52,6 +55,16 @@ func (s *Server) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2), nil
 }
 
+func (s *Server) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		ServerProps `json:",inline"`
+		spec.Extensions
+	}
+	x.Extensions = internal.SanitizeExtensions(s.Extensions)
+	x.ServerProps = s.ServerProps
+	return opts.MarshalNext(enc, x)
+}
+
 func (s *Server) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, s)
@@ -96,6 +109,9 @@ type ServerVariableProps struct {
 
 // MarshalJSON is a custom marshal function that knows how to encode Responses as JSON
 func (s *ServerVariable) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(s)
+	}
 	b1, err := json.Marshal(s.ServerVariableProps)
 	if err != nil {
 		return nil, err
@@ -107,6 +123,16 @@ func (s *ServerVariable) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2), nil
 }
 
+func (s *ServerVariable) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	var x struct {
+		ServerVariableProps `json:",inline"`
+		spec.Extensions
+	}
+	x.Extensions = internal.SanitizeExtensions(s.Extensions)
+	x.ServerVariableProps = s.ServerVariableProps
+	return opts.MarshalNext(enc, x)
+}
+
 func (s *ServerVariable) UnmarshalJSON(data []byte) error {
 	if internal.UseOptimizedJSONUnmarshalingV3 {
 		return jsonv2.Unmarshal(data, s)
diff --git a/vendor/k8s.io/kube-openapi/pkg/spec3/spec.go b/vendor/k8s.io/kube-openapi/pkg/spec3/spec.go
index bed096fb76b..5db819c7f03 100644
--- a/vendor/k8s.io/kube-openapi/pkg/spec3/spec.go
+++ b/vendor/k8s.io/kube-openapi/pkg/spec3/spec.go
@@ -36,6 +36,8 @@ type OpenAPI struct {
 	Servers []*Server `json:"servers,omitempty"`
 	// Components hold various schemas for the specification
 	Components *Components `json:"components,omitempty"`
+	// SecurityRequirement holds a declaration of which security mechanisms can be used across the API
+	SecurityRequirement []map[string][]string `json:"security,omitempty"`
 	// ExternalDocs holds additional external documentation
 	ExternalDocs *ExternalDocumentation `json:"externalDocs,omitempty"`
 }
@@ -48,3 +50,26 @@ func (o *OpenAPI) UnmarshalJSON(data []byte) error {
 	}
 	return json.Unmarshal(data, &p)
 }
+
+func (o *OpenAPI) MarshalJSON() ([]byte, error) {
+	if internal.UseOptimizedJSONMarshalingV3 {
+		return internal.DeterministicMarshal(o)
+	}
+	type OpenAPIWithNoFunctions OpenAPI
+	p := (*OpenAPIWithNoFunctions)(o)
+	return json.Marshal(&p)
+}
+
+func (o *OpenAPI) MarshalNextJSON(opts jsonv2.MarshalOptions, enc *jsonv2.Encoder) error {
+	type OpenAPIOmitZero struct {
+		Version             string                 `json:"openapi"`
+		Info                *spec.Info             `json:"info"`
+		Paths               *Paths                 `json:"paths,omitzero"`
+		Servers             []*Server              `json:"servers,omitempty"`
+		Components          *Components            `json:"components,omitzero"`
+		SecurityRequirement []map[string][]string  `json:"security,omitempty"`
+		ExternalDocs        *ExternalDocumentation `json:"externalDocs,omitzero"`
+	}
+	x := (*OpenAPIOmitZero)(o)
+	return opts.MarshalNext(enc, x)
+}
diff --git a/vendor/k8s.io/kube-openapi/pkg/validation/spec/fuzz.go b/vendor/k8s.io/kube-openapi/pkg/validation/spec/fuzz.go
deleted file mode 100644
index c66f998f519..00000000000
--- a/vendor/k8s.io/kube-openapi/pkg/validation/spec/fuzz.go
+++ /dev/null
@@ -1,502 +0,0 @@
-/*
-Copyright 2022 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-	http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package spec
-
-import (
-	"github.com/go-openapi/jsonreference"
-	"github.com/google/go-cmp/cmp"
-	fuzz "github.com/google/gofuzz"
-)
-
-var SwaggerFuzzFuncs []interface{} = []interface{}{
-	func(v *Responses, c fuzz.Continue) {
-		c.FuzzNoCustom(v)
-		if v.Default != nil {
-			// Check if we hit maxDepth and left an incomplete value
-			if v.Default.Description == "" {
-				v.Default = nil
-				v.StatusCodeResponses = nil
-			}
-		}
-
-		// conversion has no way to discern empty statusCodeResponses from
-		// nil, since "default" is always included in the map.
-		// So avoid empty responses list
-		if len(v.StatusCodeResponses) == 0 {
-			v.StatusCodeResponses = nil
-		}
-	},
-	func(v *Operation, c fuzz.Continue) {
-		c.FuzzNoCustom(v)
-
-		if v != nil {
-			// force non-nil
-			v.Responses = &Responses{}
-			c.Fuzz(v.Responses)
-
-			v.Schemes = nil
-			if c.RandBool() {
-				v.Schemes = append(v.Schemes, "http")
-			}
-
-			if c.RandBool() {
-				v.Schemes = append(v.Schemes, "https")
-			}
-
-			if c.RandBool() {
-				v.Schemes = append(v.Schemes, "ws")
-			}
-
-			if c.RandBool() {
-				v.Schemes = append(v.Schemes, "wss")
-			}
-
-			// Gnostic unconditionally makes security values non-null
-			// So do not fuzz null values into the array.
-			for i, val := range v.Security {
-				if val == nil {
-					v.Security[i] = make(map[string][]string)
-				}
-
-				for k, v := range val {
-					if v == nil {
-						val[k] = make([]string, 0)
-					}
-				}
-			}
-		}
-	},
-	func(v map[int]Response, c fuzz.Continue) {
-		n := 0
-		c.Fuzz(&n)
-		if n == 0 {
-			// Test that fuzzer is not at maxDepth so we do not
-			// end up with empty elements
-			return
-		}
-
-		// Prevent negative numbers
-		num := c.Intn(4)
-		for i := 0; i < num+2; i++ {
-			val := Response{}
-			c.Fuzz(&val)
-
-			val.Description = c.RandString() + "x"
-			v[100*(i+1)+c.Intn(100)] = val
-		}
-	},
-	func(v map[string]PathItem, c fuzz.Continue) {
-		n := 0
-		c.Fuzz(&n)
-		if n == 0 {
-			// Test that fuzzer is not at maxDepth so we do not
-			// end up with empty elements
-			return
-		}
-
-		num := c.Intn(5)
-		for i := 0; i < num+2; i++ {
-			val := PathItem{}
-			c.Fuzz(&val)
-
-			// Ref params are only allowed in certain locations, so
-			// possibly add a few to PathItems
-			numRefsToAdd := c.Intn(5)
-			for i := 0; i < numRefsToAdd; i++ {
-				theRef := Parameter{}
-				c.Fuzz(&theRef.Refable)
-
-				val.Parameters = append(val.Parameters, theRef)
-			}
-
-			v["/"+c.RandString()] = val
-		}
-	},
-	func(v *SchemaOrArray, c fuzz.Continue) {
-		*v = SchemaOrArray{}
-		// gnostic parser just doesn't support more
-		// than one Schema here
-		v.Schema = &Schema{}
-		c.Fuzz(&v.Schema)
-
-	},
-	func(v *SchemaOrBool, c fuzz.Continue) {
-		*v = SchemaOrBool{}
-
-		if c.RandBool() {
-			v.Allows = c.RandBool()
-		} else {
-			v.Schema = &Schema{}
-			v.Allows = true
-			c.Fuzz(&v.Schema)
-		}
-	},
-	func(v map[string]Response, c fuzz.Continue) {
-		n := 0
-		c.Fuzz(&n)
-		if n == 0 {
-			// Test that fuzzer is not at maxDepth so we do not
-			// end up with empty elements
-			return
-		}
-
-		// Response definitions are not allowed to
-		// be refs
-		for i := 0; i < c.Intn(5)+1; i++ {
-			resp := &Response{}
-
-			c.Fuzz(resp)
-			resp.Ref = Ref{}
-			resp.Description = c.RandString() + "x"
-
-			// Response refs are not vendor extensible by gnostic
-			resp.VendorExtensible.Extensions = nil
-			v[c.RandString()+"x"] = *resp
-		}
-	},
-	func(v *Header, c fuzz.Continue) {
-		if v != nil {
-			c.FuzzNoCustom(v)
-
-			// descendant Items of Header may not be refs
-			cur := v.Items
-			for cur != nil {
-				cur.Ref = Ref{}
-				cur = cur.Items
-			}
-		}
-	},
-	func(v *Ref, c fuzz.Continue) {
-		*v = Ref{}
-		v.Ref, _ = jsonreference.New("http://asd.com/" + c.RandString())
-	},
-	func(v *Response, c fuzz.Continue) {
-		*v = Response{}
-		if c.RandBool() {
-			v.Ref = Ref{}
-			v.Ref.Ref, _ = jsonreference.New("http://asd.com/" + c.RandString())
-		} else {
-			c.Fuzz(&v.VendorExtensible)
-			c.Fuzz(&v.Schema)
-			c.Fuzz(&v.ResponseProps)
-
-			v.Headers = nil
-			v.Ref = Ref{}
-
-			n := 0
-			c.Fuzz(&n)
-			if n != 0 {
-				// Test that fuzzer is not at maxDepth so we do not
-				// end up with empty elements
-				num := c.Intn(4)
-				for i := 0; i < num; i++ {
-					if v.Headers == nil {
-						v.Headers = make(map[string]Header)
-					}
-					hdr := Header{}
-					c.Fuzz(&hdr)
-					if hdr.Type == "" {
-						// hit maxDepth, just abort trying to make haders
-						v.Headers = nil
-						break
-					}
-					v.Headers[c.RandString()+"x"] = hdr
-				}
-			} else {
-				v.Headers = nil
-			}
-		}
-
-		v.Description = c.RandString() + "x"
-
-		// Gnostic parses empty as nil, so to keep avoid putting empty
-		if len(v.Headers) == 0 {
-			v.Headers = nil
-		}
-	},
-	func(v **Info, c fuzz.Continue) {
-		// Info is never nil
-		*v = &Info{}
-		c.FuzzNoCustom(*v)
-
-		(*v).Title = c.RandString() + "x"
-	},
-	func(v *Extensions, c fuzz.Continue) {
-		// gnostic parser only picks up x- vendor extensions
-		numChildren := c.Intn(5)
-		for i := 0; i < numChildren; i++ {
-			if *v == nil {
-				*v = Extensions{}
-			}
-			(*v)["x-"+c.RandString()] = c.RandString()
-		}
-	},
-	func(v *Swagger, c fuzz.Continue) {
-		c.FuzzNoCustom(v)
-
-		if v.Paths == nil {
-			// Force paths non-nil since it does not have omitempty in json tag.
-			// This means a perfect roundtrip (via json) is impossible,
-			// since we can't tell the difference between empty/unspecified paths
-			v.Paths = &Paths{}
-			c.Fuzz(v.Paths)
-		}
-
-		v.Swagger = "2.0"
-
-		// Gnostic support serializing ID at all
-		// unavoidable data loss
-		v.ID = ""
-
-		v.Schemes = nil
-		if c.RandUint64()%2 == 1 {
-			v.Schemes = append(v.Schemes, "http")
-		}
-
-		if c.RandUint64()%2 == 1 {
-			v.Schemes = append(v.Schemes, "https")
-		}
-
-		if c.RandUint64()%2 == 1 {
-			v.Schemes = append(v.Schemes, "ws")
-		}
-
-		if c.RandUint64()%2 == 1 {
-			v.Schemes = append(v.Schemes, "wss")
-		}
-
-		// Gnostic unconditionally makes security values non-null
-		// So do not fuzz null values into the array.
-		for i, val := range v.Security {
-			if val == nil {
-				v.Security[i] = make(map[string][]string)
-			}
-
-			for k, v := range val {
-				if v == nil {
-					val[k] = make([]string, 0)
-				}
-			}
-		}
-	},
-	func(v *SecurityScheme, c fuzz.Continue) {
-		v.Description = c.RandString() + "x"
-		c.Fuzz(&v.VendorExtensible)
-
-		switch c.Intn(3) {
-		case 0:
-			v.Type = "basic"
-		case 1:
-			v.Type = "apiKey"
-			switch c.Intn(2) {
-			case 0:
-				v.In = "header"
-			case 1:
-				v.In = "query"
-			default:
-				panic("unreachable")
-			}
-			v.Name = "x" + c.RandString()
-		case 2:
-			v.Type = "oauth2"
-
-			switch c.Intn(4) {
-			case 0:
-				v.Flow = "accessCode"
-				v.TokenURL = "https://" + c.RandString()
-				v.AuthorizationURL = "https://" + c.RandString()
-			case 1:
-				v.Flow = "application"
-				v.TokenURL = "https://" + c.RandString()
-			case 2:
-				v.Flow = "implicit"
-				v.AuthorizationURL = "https://" + c.RandString()
-			case 3:
-				v.Flow = "password"
-				v.TokenURL = "https://" + c.RandString()
-			default:
-				panic("unreachable")
-			}
-			c.Fuzz(&v.Scopes)
-		default:
-			panic("unreachable")
-		}
-	},
-	func(v *interface{}, c fuzz.Continue) {
-		*v = c.RandString() + "x"
-	},
-	func(v *string, c fuzz.Continue) {
-		*v = c.RandString() + "x"
-	},
-	func(v *ExternalDocumentation, c fuzz.Continue) {
-		v.Description = c.RandString() + "x"
-		v.URL = c.RandString() + "x"
-	},
-	func(v *SimpleSchema, c fuzz.Continue) {
-		c.FuzzNoCustom(v)
-
-		switch c.Intn(5) {
-		case 0:
-			v.Type = "string"
-		case 1:
-			v.Type = "number"
-		case 2:
-			v.Type = "boolean"
-		case 3:
-			v.Type = "integer"
-		case 4:
-			v.Type = "array"
-		default:
-			panic("unreachable")
-		}
-
-		switch c.Intn(5) {
-		case 0:
-			v.CollectionFormat = "csv"
-		case 1:
-			v.CollectionFormat = "ssv"
-		case 2:
-			v.CollectionFormat = "tsv"
-		case 3:
-			v.CollectionFormat = "pipes"
-		case 4:
-			v.CollectionFormat = ""
-		default:
-			panic("unreachable")
-		}
-
-		// None of the types which include SimpleSchema in our definitions
-		// actually support "example" in the official spec
-		v.Example = nil
-
-		// unsupported by openapi
-		v.Nullable = false
-	},
-	func(v *int64, c fuzz.Continue) {
-		c.Fuzz(v)
-
-		// Gnostic does not differentiate between 0 and non-specified
-		// so avoid using 0 for fuzzer
-		if *v == 0 {
-			*v = 1
-		}
-	},
-	func(v *float64, c fuzz.Continue) {
-		c.Fuzz(v)
-
-		// Gnostic does not differentiate between 0 and non-specified
-		// so avoid using 0 for fuzzer
-		if *v == 0.0 {
-			*v = 1.0
-		}
-	},
-	func(v *Parameter, c fuzz.Continue) {
-		if v == nil {
-			return
-		}
-		c.Fuzz(&v.VendorExtensible)
-		if c.RandBool() {
-			// body param
-			v.Description = c.RandString() + "x"
-			v.Name = c.RandString() + "x"
-			v.In = "body"
-			c.Fuzz(&v.Description)
-			c.Fuzz(&v.Required)
-
-			v.Schema = &Schema{}
-			c.Fuzz(&v.Schema)
-
-		} else {
-			c.Fuzz(&v.SimpleSchema)
-			c.Fuzz(&v.CommonValidations)
-			v.AllowEmptyValue = false
-			v.Description = c.RandString() + "x"
-			v.Name = c.RandString() + "x"
-
-			switch c.Intn(4) {
-			case 0:
-				// Header param
-				v.In = "header"
-			case 1:
-				// Form data param
-				v.In = "formData"
-				v.AllowEmptyValue = c.RandBool()
-			case 2:
-				// Query param
-				v.In = "query"
-				v.AllowEmptyValue = c.RandBool()
-			case 3:
-				// Path param
-				v.In = "path"
-				v.Required = true
-			default:
-				panic("unreachable")
-			}
-
-			// descendant Items of Parameter may not be refs
-			cur := v.Items
-			for cur != nil {
-				cur.Ref = Ref{}
-				cur = cur.Items
-			}
-		}
-	},
-	func(v *Schema, c fuzz.Continue) {
-		if c.RandBool() {
-			// file schema
-			c.Fuzz(&v.Default)
-			c.Fuzz(&v.Description)
-			c.Fuzz(&v.Example)
-			c.Fuzz(&v.ExternalDocs)
-
-			c.Fuzz(&v.Format)
-			c.Fuzz(&v.ReadOnly)
-			c.Fuzz(&v.Required)
-			c.Fuzz(&v.Title)
-			v.Type = StringOrArray{"file"}
-
-		} else {
-			// normal schema
-			c.Fuzz(&v.SchemaProps)
-			c.Fuzz(&v.SwaggerSchemaProps)
-			c.Fuzz(&v.VendorExtensible)
-			// c.Fuzz(&v.ExtraProps)
-			// ExtraProps will not roundtrip - gnostic throws out
-			// unrecognized keys
-		}
-
-		// Not supported by official openapi v2 spec
-		// and stripped by k8s apiserver
-		v.ID = ""
-		v.AnyOf = nil
-		v.OneOf = nil
-		v.Not = nil
-		v.Nullable = false
-		v.AdditionalItems = nil
-		v.Schema = ""
-		v.PatternProperties = nil
-		v.Definitions = nil
-		v.Dependencies = nil
-	},
-}
-
-var SwaggerDiffOptions = []cmp.Option{
-	// cmp.Diff panics on Ref since jsonreference.Ref uses unexported fields
-	cmp.Comparer(func(a Ref, b Ref) bool {
-		return a.String() == b.String()
-	}),
-}
diff --git a/vendor/k8s.io/utils/pointer/pointer.go b/vendor/k8s.io/utils/pointer/pointer.go
index b8103223adc..b673a642576 100644
--- a/vendor/k8s.io/utils/pointer/pointer.go
+++ b/vendor/k8s.io/utils/pointer/pointer.go
@@ -14,12 +14,15 @@ See the License for the specific language governing permissions and
 limitations under the License.
 */
 
+// Deprecated: Use functions in k8s.io/utils/ptr instead: ptr.To to obtain
+// a pointer, ptr.Deref to dereference a pointer, ptr.Equal to compare
+// dereferenced pointers.
 package pointer
 
 import (
-	"fmt"
-	"reflect"
 	"time"
+
+	"k8s.io/utils/ptr"
 )
 
 // AllPtrFieldsNil tests whether all pointer fields in a struct are nil.  This is useful when,
@@ -28,383 +31,219 @@ import (
 //
 // This function is only valid for structs and pointers to structs.  Any other
 // type will cause a panic.  Passing a typed nil pointer will return true.
-func AllPtrFieldsNil(obj interface{}) bool {
-	v := reflect.ValueOf(obj)
-	if !v.IsValid() {
-		panic(fmt.Sprintf("reflect.ValueOf() produced a non-valid Value for %#v", obj))
-	}
-	if v.Kind() == reflect.Ptr {
-		if v.IsNil() {
-			return true
-		}
-		v = v.Elem()
-	}
-	for i := 0; i < v.NumField(); i++ {
-		if v.Field(i).Kind() == reflect.Ptr && !v.Field(i).IsNil() {
-			return false
-		}
-	}
-	return true
-}
-
-// Int returns a pointer to an int
-func Int(i int) *int {
-	return &i
-}
+//
+// Deprecated: Use ptr.AllPtrFieldsNil instead.
+var AllPtrFieldsNil = ptr.AllPtrFieldsNil
+
+// Int returns a pointer to an int.
+var Int = ptr.To[int]
 
 // IntPtr is a function variable referring to Int.
 //
-// Deprecated: Use Int instead.
+// Deprecated: Use ptr.To instead.
 var IntPtr = Int // for back-compat
 
 // IntDeref dereferences the int ptr and returns it if not nil, or else
 // returns def.
-func IntDeref(ptr *int, def int) int {
-	if ptr != nil {
-		return *ptr
-	}
-	return def
-}
+var IntDeref = ptr.Deref[int]
 
 // IntPtrDerefOr is a function variable referring to IntDeref.
 //
-// Deprecated: Use IntDeref instead.
+// Deprecated: Use ptr.Deref instead.
 var IntPtrDerefOr = IntDeref // for back-compat
 
 // Int32 returns a pointer to an int32.
-func Int32(i int32) *int32 {
-	return &i
-}
+var Int32 = ptr.To[int32]
 
 // Int32Ptr is a function variable referring to Int32.
 //
-// Deprecated: Use Int32 instead.
+// Deprecated: Use ptr.To instead.
 var Int32Ptr = Int32 // for back-compat
 
 // Int32Deref dereferences the int32 ptr and returns it if not nil, or else
 // returns def.
-func Int32Deref(ptr *int32, def int32) int32 {
-	if ptr != nil {
-		return *ptr
-	}
-	return def
-}
+var Int32Deref = ptr.Deref[int32]
 
 // Int32PtrDerefOr is a function variable referring to Int32Deref.
 //
-// Deprecated: Use Int32Deref instead.
+// Deprecated: Use ptr.Deref instead.
 var Int32PtrDerefOr = Int32Deref // for back-compat
 
 // Int32Equal returns true if both arguments are nil or both arguments
 // dereference to the same value.
-func Int32Equal(a, b *int32) bool {
-	if (a == nil) != (b == nil) {
-		return false
-	}
-	if a == nil {
-		return true
-	}
-	return *a == *b
-}
+var Int32Equal = ptr.Equal[int32]
 
 // Uint returns a pointer to an uint
-func Uint(i uint) *uint {
-	return &i
-}
+var Uint = ptr.To[uint]
 
 // UintPtr is a function variable referring to Uint.
 //
-// Deprecated: Use Uint instead.
+// Deprecated: Use ptr.To instead.
 var UintPtr = Uint // for back-compat
 
 // UintDeref dereferences the uint ptr and returns it if not nil, or else
 // returns def.
-func UintDeref(ptr *uint, def uint) uint {
-	if ptr != nil {
-		return *ptr
-	}
-	return def
-}
+var UintDeref = ptr.Deref[uint]
 
 // UintPtrDerefOr is a function variable referring to UintDeref.
 //
-// Deprecated: Use UintDeref instead.
+// Deprecated: Use ptr.Deref instead.
 var UintPtrDerefOr = UintDeref // for back-compat
 
 // Uint32 returns a pointer to an uint32.
-func Uint32(i uint32) *uint32 {
-	return &i
-}
+var Uint32 = ptr.To[uint32]
 
 // Uint32Ptr is a function variable referring to Uint32.
 //
-// Deprecated: Use Uint32 instead.
+// Deprecated: Use ptr.To instead.
 var Uint32Ptr = Uint32 // for back-compat
 
 // Uint32Deref dereferences the uint32 ptr and returns it if not nil, or else
 // returns def.
-func Uint32Deref(ptr *uint32, def uint32) uint32 {
-	if ptr != nil {
-		return *ptr
-	}
-	return def
-}
+var Uint32Deref = ptr.Deref[uint32]
 
 // Uint32PtrDerefOr is a function variable referring to Uint32Deref.
 //
-// Deprecated: Use Uint32Deref instead.
+// Deprecated: Use ptr.Deref instead.
 var Uint32PtrDerefOr = Uint32Deref // for back-compat
 
 // Uint32Equal returns true if both arguments are nil or both arguments
 // dereference to the same value.
-func Uint32Equal(a, b *uint32) bool {
-	if (a == nil) != (b == nil) {
-		return false
-	}
-	if a == nil {
-		return true
-	}
-	return *a == *b
-}
+var Uint32Equal = ptr.Equal[uint32]
 
 // Int64 returns a pointer to an int64.
-func Int64(i int64) *int64 {
-	return &i
-}
+var Int64 = ptr.To[int64]
 
 // Int64Ptr is a function variable referring to Int64.
 //
-// Deprecated: Use Int64 instead.
+// Deprecated: Use ptr.To instead.
 var Int64Ptr = Int64 // for back-compat
 
 // Int64Deref dereferences the int64 ptr and returns it if not nil, or else
 // returns def.
-func Int64Deref(ptr *int64, def int64) int64 {
-	if ptr != nil {
-		return *ptr
-	}
-	return def
-}
+var Int64Deref = ptr.Deref[int64]
 
 // Int64PtrDerefOr is a function variable referring to Int64Deref.
 //
-// Deprecated: Use Int64Deref instead.
+// Deprecated: Use ptr.Deref instead.
 var Int64PtrDerefOr = Int64Deref // for back-compat
 
 // Int64Equal returns true if both arguments are nil or both arguments
 // dereference to the same value.
-func Int64Equal(a, b *int64) bool {
-	if (a == nil) != (b == nil) {
-		return false
-	}
-	if a == nil {
-		return true
-	}
-	return *a == *b
-}
+var Int64Equal = ptr.Equal[int64]
 
 // Uint64 returns a pointer to an uint64.
-func Uint64(i uint64) *uint64 {
-	return &i
-}
+var Uint64 = ptr.To[uint64]
 
 // Uint64Ptr is a function variable referring to Uint64.
 //
-// Deprecated: Use Uint64 instead.
+// Deprecated: Use ptr.To instead.
 var Uint64Ptr = Uint64 // for back-compat
 
 // Uint64Deref dereferences the uint64 ptr and returns it if not nil, or else
 // returns def.
-func Uint64Deref(ptr *uint64, def uint64) uint64 {
-	if ptr != nil {
-		return *ptr
-	}
-	return def
-}
+var Uint64Deref = ptr.Deref[uint64]
 
 // Uint64PtrDerefOr is a function variable referring to Uint64Deref.
 //
-// Deprecated: Use Uint64Deref instead.
+// Deprecated: Use ptr.Deref instead.
 var Uint64PtrDerefOr = Uint64Deref // for back-compat
 
 // Uint64Equal returns true if both arguments are nil or both arguments
 // dereference to the same value.
-func Uint64Equal(a, b *uint64) bool {
-	if (a == nil) != (b == nil) {
-		return false
-	}
-	if a == nil {
-		return true
-	}
-	return *a == *b
-}
+var Uint64Equal = ptr.Equal[uint64]
 
 // Bool returns a pointer to a bool.
-func Bool(b bool) *bool {
-	return &b
-}
+var Bool = ptr.To[bool]
 
 // BoolPtr is a function variable referring to Bool.
 //
-// Deprecated: Use Bool instead.
+// Deprecated: Use ptr.To instead.
 var BoolPtr = Bool // for back-compat
 
 // BoolDeref dereferences the bool ptr and returns it if not nil, or else
 // returns def.
-func BoolDeref(ptr *bool, def bool) bool {
-	if ptr != nil {
-		return *ptr
-	}
-	return def
-}
+var BoolDeref = ptr.Deref[bool]
 
 // BoolPtrDerefOr is a function variable referring to BoolDeref.
 //
-// Deprecated: Use BoolDeref instead.
+// Deprecated: Use ptr.Deref instead.
 var BoolPtrDerefOr = BoolDeref // for back-compat
 
 // BoolEqual returns true if both arguments are nil or both arguments
 // dereference to the same value.
-func BoolEqual(a, b *bool) bool {
-	if (a == nil) != (b == nil) {
-		return false
-	}
-	if a == nil {
-		return true
-	}
-	return *a == *b
-}
+var BoolEqual = ptr.Equal[bool]
 
 // String returns a pointer to a string.
-func String(s string) *string {
-	return &s
-}
+var String = ptr.To[string]
 
 // StringPtr is a function variable referring to String.
 //
-// Deprecated: Use String instead.
+// Deprecated: Use ptr.To instead.
 var StringPtr = String // for back-compat
 
 // StringDeref dereferences the string ptr and returns it if not nil, or else
 // returns def.
-func StringDeref(ptr *string, def string) string {
-	if ptr != nil {
-		return *ptr
-	}
-	return def
-}
+var StringDeref = ptr.Deref[string]
 
 // StringPtrDerefOr is a function variable referring to StringDeref.
 //
-// Deprecated: Use StringDeref instead.
+// Deprecated: Use ptr.Deref instead.
 var StringPtrDerefOr = StringDeref // for back-compat
 
 // StringEqual returns true if both arguments are nil or both arguments
 // dereference to the same value.
-func StringEqual(a, b *string) bool {
-	if (a == nil) != (b == nil) {
-		return false
-	}
-	if a == nil {
-		return true
-	}
-	return *a == *b
-}
+var StringEqual = ptr.Equal[string]
 
 // Float32 returns a pointer to a float32.
-func Float32(i float32) *float32 {
-	return &i
-}
+var Float32 = ptr.To[float32]
 
 // Float32Ptr is a function variable referring to Float32.
 //
-// Deprecated: Use Float32 instead.
+// Deprecated: Use ptr.To instead.
 var Float32Ptr = Float32
 
 // Float32Deref dereferences the float32 ptr and returns it if not nil, or else
 // returns def.
-func Float32Deref(ptr *float32, def float32) float32 {
-	if ptr != nil {
-		return *ptr
-	}
-	return def
-}
+var Float32Deref = ptr.Deref[float32]
 
 // Float32PtrDerefOr is a function variable referring to Float32Deref.
 //
-// Deprecated: Use Float32Deref instead.
+// Deprecated: Use ptr.Deref instead.
 var Float32PtrDerefOr = Float32Deref // for back-compat
 
 // Float32Equal returns true if both arguments are nil or both arguments
 // dereference to the same value.
-func Float32Equal(a, b *float32) bool {
-	if (a == nil) != (b == nil) {
-		return false
-	}
-	if a == nil {
-		return true
-	}
-	return *a == *b
-}
+var Float32Equal = ptr.Equal[float32]
 
 // Float64 returns a pointer to a float64.
-func Float64(i float64) *float64 {
-	return &i
-}
+var Float64 = ptr.To[float64]
 
 // Float64Ptr is a function variable referring to Float64.
 //
-// Deprecated: Use Float64 instead.
+// Deprecated: Use ptr.To instead.
 var Float64Ptr = Float64
 
 // Float64Deref dereferences the float64 ptr and returns it if not nil, or else
 // returns def.
-func Float64Deref(ptr *float64, def float64) float64 {
-	if ptr != nil {
-		return *ptr
-	}
-	return def
-}
+var Float64Deref = ptr.Deref[float64]
 
 // Float64PtrDerefOr is a function variable referring to Float64Deref.
 //
-// Deprecated: Use Float64Deref instead.
+// Deprecated: Use ptr.Deref instead.
 var Float64PtrDerefOr = Float64Deref // for back-compat
 
 // Float64Equal returns true if both arguments are nil or both arguments
 // dereference to the same value.
-func Float64Equal(a, b *float64) bool {
-	if (a == nil) != (b == nil) {
-		return false
-	}
-	if a == nil {
-		return true
-	}
-	return *a == *b
-}
+var Float64Equal = ptr.Equal[float64]
 
 // Duration returns a pointer to a time.Duration.
-func Duration(d time.Duration) *time.Duration {
-	return &d
-}
+var Duration = ptr.To[time.Duration]
 
 // DurationDeref dereferences the time.Duration ptr and returns it if not nil, or else
 // returns def.
-func DurationDeref(ptr *time.Duration, def time.Duration) time.Duration {
-	if ptr != nil {
-		return *ptr
-	}
-	return def
-}
+var DurationDeref = ptr.Deref[time.Duration]
 
 // DurationEqual returns true if both arguments are nil or both arguments
 // dereference to the same value.
-func DurationEqual(a, b *time.Duration) bool {
-	if (a == nil) != (b == nil) {
-		return false
-	}
-	if a == nil {
-		return true
-	}
-	return *a == *b
-}
+var DurationEqual = ptr.Equal[time.Duration]
diff --git a/vendor/k8s.io/utils/ptr/OWNERS b/vendor/k8s.io/utils/ptr/OWNERS
new file mode 100644
index 00000000000..0d6392752af
--- /dev/null
+++ b/vendor/k8s.io/utils/ptr/OWNERS
@@ -0,0 +1,10 @@
+# See the OWNERS docs at https://go.k8s.io/owners
+
+approvers:
+- apelisse
+- stewart-yu
+- thockin
+reviewers:
+- apelisse
+- stewart-yu
+- thockin
diff --git a/vendor/k8s.io/utils/ptr/README.md b/vendor/k8s.io/utils/ptr/README.md
new file mode 100644
index 00000000000..2ca8073dc73
--- /dev/null
+++ b/vendor/k8s.io/utils/ptr/README.md
@@ -0,0 +1,3 @@
+# Pointer
+
+This package provides some functions for pointer-based operations.
diff --git a/vendor/k8s.io/utils/ptr/ptr.go b/vendor/k8s.io/utils/ptr/ptr.go
new file mode 100644
index 00000000000..659ed3b9e2d
--- /dev/null
+++ b/vendor/k8s.io/utils/ptr/ptr.go
@@ -0,0 +1,73 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package ptr
+
+import (
+	"fmt"
+	"reflect"
+)
+
+// AllPtrFieldsNil tests whether all pointer fields in a struct are nil.  This is useful when,
+// for example, an API struct is handled by plugins which need to distinguish
+// "no plugin accepted this spec" from "this spec is empty".
+//
+// This function is only valid for structs and pointers to structs.  Any other
+// type will cause a panic.  Passing a typed nil pointer will return true.
+func AllPtrFieldsNil(obj interface{}) bool {
+	v := reflect.ValueOf(obj)
+	if !v.IsValid() {
+		panic(fmt.Sprintf("reflect.ValueOf() produced a non-valid Value for %#v", obj))
+	}
+	if v.Kind() == reflect.Ptr {
+		if v.IsNil() {
+			return true
+		}
+		v = v.Elem()
+	}
+	for i := 0; i < v.NumField(); i++ {
+		if v.Field(i).Kind() == reflect.Ptr && !v.Field(i).IsNil() {
+			return false
+		}
+	}
+	return true
+}
+
+// To returns a pointer to the given value.
+func To[T any](v T) *T {
+	return &v
+}
+
+// Deref dereferences ptr and returns the value it points to if no nil, or else
+// returns def.
+func Deref[T any](ptr *T, def T) T {
+	if ptr != nil {
+		return *ptr
+	}
+	return def
+}
+
+// Equal returns true if both arguments are nil or both arguments
+// dereference to the same value.
+func Equal[T comparable](a, b *T) bool {
+	if (a == nil) != (b == nil) {
+		return false
+	}
+	if a == nil {
+		return true
+	}
+	return *a == *b
+}
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 2188781187e..f70befa25d1 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -4,7 +4,7 @@ cloud.google.com/go/compute/internal
 # cloud.google.com/go/compute/metadata v0.2.3
 ## explicit; go 1.19
 cloud.google.com/go/compute/metadata
-# github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0
+# github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.1
 ## explicit; go 1.18
 github.com/Azure/azure-sdk-for-go/sdk/azcore
 github.com/Azure/azure-sdk-for-go/sdk/azcore/arm
@@ -27,10 +27,11 @@ github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime
 github.com/Azure/azure-sdk-for-go/sdk/azcore/streaming
 github.com/Azure/azure-sdk-for-go/sdk/azcore/to
 github.com/Azure/azure-sdk-for-go/sdk/azcore/tracing
-# github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0
+# github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.5.1
 ## explicit; go 1.18
 github.com/Azure/azure-sdk-for-go/sdk/azidentity
-# github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.0
+github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal
+# github.com/Azure/azure-sdk-for-go/sdk/internal v1.5.1
 ## explicit; go 1.18
 github.com/Azure/azure-sdk-for-go/sdk/internal/diag
 github.com/Azure/azure-sdk-for-go/sdk/internal/errorinfo
@@ -39,15 +40,13 @@ github.com/Azure/azure-sdk-for-go/sdk/internal/log
 github.com/Azure/azure-sdk-for-go/sdk/internal/poller
 github.com/Azure/azure-sdk-for-go/sdk/internal/temporal
 github.com/Azure/azure-sdk-for-go/sdk/internal/uuid
-# github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1
+# github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.4.0
 ## explicit; go 1.18
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4
-# github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork v1.1.0
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5
+# github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0
 ## explicit; go 1.18
-# github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1
-## explicit; go 1.18
-github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2
-# github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4
+# github.com/AzureAD/microsoft-authentication-library-for-go v1.2.1
 ## explicit; go 1.18
 github.com/AzureAD/microsoft-authentication-library-for-go/apps/cache
 github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential
@@ -80,6 +79,9 @@ github.com/Code-Hex/go-generics-cache/policy/lfu
 github.com/Code-Hex/go-generics-cache/policy/lru
 github.com/Code-Hex/go-generics-cache/policy/mru
 github.com/Code-Hex/go-generics-cache/policy/simple
+# github.com/KimMachineGun/automemlimit v0.5.0
+## explicit; go 1.19
+github.com/KimMachineGun/automemlimit/memlimit
 # github.com/Microsoft/go-winio v0.6.1
 ## explicit; go 1.17
 github.com/Microsoft/go-winio
@@ -99,7 +101,7 @@ github.com/armon/go-metrics
 # github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
 ## explicit; go 1.13
 github.com/asaskevich/govalidator
-# github.com/aws/aws-sdk-go v1.48.14
+# github.com/aws/aws-sdk-go v1.50.0
 ## explicit; go 1.19
 github.com/aws/aws-sdk-go/aws
 github.com/aws/aws-sdk-go/aws/auth/bearer
@@ -146,6 +148,9 @@ github.com/aws/aws-sdk-go/service/sso/ssoiface
 github.com/aws/aws-sdk-go/service/ssooidc
 github.com/aws/aws-sdk-go/service/sts
 github.com/aws/aws-sdk-go/service/sts/stsiface
+# github.com/bboreham/go-loser v0.0.0-20230920113527-fcc2c21820a3
+## explicit; go 1.20
+github.com/bboreham/go-loser
 # github.com/beorn7/perks v1.0.1
 ## explicit; go 1.11
 github.com/beorn7/perks/quantile
@@ -155,33 +160,54 @@ github.com/cenkalti/backoff/v4
 # github.com/cespare/xxhash/v2 v2.2.0
 ## explicit; go 1.11
 github.com/cespare/xxhash/v2
-# github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4
+# github.com/cilium/ebpf v0.11.0
+## explicit; go 1.19
+github.com/cilium/ebpf
+github.com/cilium/ebpf/asm
+github.com/cilium/ebpf/btf
+github.com/cilium/ebpf/internal
+github.com/cilium/ebpf/internal/kconfig
+github.com/cilium/ebpf/internal/sys
+github.com/cilium/ebpf/internal/tracefs
+github.com/cilium/ebpf/internal/unix
+github.com/cilium/ebpf/link
+# github.com/cncf/xds/go v0.0.0-20231109132714-523115ebc101
 ## explicit; go 1.11
 github.com/cncf/xds/go/udpa/annotations
 github.com/cncf/xds/go/xds/annotations/v3
 github.com/cncf/xds/go/xds/core/v3
+# github.com/containerd/cgroups/v3 v3.0.3
+## explicit; go 1.18
+github.com/containerd/cgroups/v3
+github.com/containerd/cgroups/v3/cgroup1
+github.com/containerd/cgroups/v3/cgroup1/stats
+github.com/containerd/cgroups/v3/cgroup2
+github.com/containerd/cgroups/v3/cgroup2/stats
+# github.com/containerd/log v0.1.0
+## explicit; go 1.20
 # github.com/coreos/go-systemd/v22 v22.5.0
 ## explicit; go 1.12
 github.com/coreos/go-systemd/v22/activation
+github.com/coreos/go-systemd/v22/dbus
 # github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
 ## explicit
 github.com/davecgh/go-spew/spew
 # github.com/dennwc/varint v1.0.0
 ## explicit; go 1.12
 github.com/dennwc/varint
-# github.com/digitalocean/godo v1.106.0
+# github.com/digitalocean/godo v1.108.0
 ## explicit; go 1.20
 github.com/digitalocean/godo
 github.com/digitalocean/godo/metrics
-# github.com/docker/distribution v2.8.2+incompatible
-## explicit
-github.com/docker/distribution/digestset
-github.com/docker/distribution/reference
-# github.com/docker/docker v24.0.7+incompatible
+# github.com/distribution/reference v0.5.0
+## explicit; go 1.20
+github.com/distribution/reference
+# github.com/docker/docker v25.0.0+incompatible
 ## explicit
 github.com/docker/docker/api
 github.com/docker/docker/api/types
 github.com/docker/docker/api/types/blkiodev
+github.com/docker/docker/api/types/checkpoint
 github.com/docker/docker/api/types/container
 github.com/docker/docker/api/types/events
 github.com/docker/docker/api/types/filters
@@ -192,11 +218,14 @@ github.com/docker/docker/api/types/registry
 github.com/docker/docker/api/types/strslice
 github.com/docker/docker/api/types/swarm
 github.com/docker/docker/api/types/swarm/runtime
+github.com/docker/docker/api/types/system
 github.com/docker/docker/api/types/time
 github.com/docker/docker/api/types/versions
 github.com/docker/docker/api/types/volume
 github.com/docker/docker/client
 github.com/docker/docker/errdefs
+github.com/docker/docker/image/spec/specs-go/v1
+github.com/docker/docker/internal/multierror
 # github.com/docker/go-connections v0.4.0
 ## explicit
 github.com/docker/go-connections/nat
@@ -208,23 +237,26 @@ github.com/docker/go-units
 # github.com/edsrzf/mmap-go v1.1.0
 ## explicit; go 1.17
 github.com/edsrzf/mmap-go
-# github.com/emicklei/go-restful/v3 v3.10.2
+# github.com/emicklei/go-restful/v3 v3.11.0
 ## explicit; go 1.13
 github.com/emicklei/go-restful/v3
 github.com/emicklei/go-restful/v3/log
-# github.com/envoyproxy/go-control-plane v0.11.1
+# github.com/envoyproxy/go-control-plane v0.12.0
 ## explicit; go 1.17
 github.com/envoyproxy/go-control-plane/envoy/annotations
 github.com/envoyproxy/go-control-plane/envoy/config/core/v3
 github.com/envoyproxy/go-control-plane/envoy/service/discovery/v3
 github.com/envoyproxy/go-control-plane/envoy/type/matcher/v3
 github.com/envoyproxy/go-control-plane/envoy/type/v3
-# github.com/envoyproxy/protoc-gen-validate v1.0.2
+# github.com/envoyproxy/protoc-gen-validate v1.0.4
 ## explicit; go 1.19
 github.com/envoyproxy/protoc-gen-validate/validate
 # github.com/evanphx/json-patch v5.6.0+incompatible
 ## explicit
 github.com/evanphx/json-patch
+# github.com/facette/natsort v0.0.0-20181210072756-2cd4dd1e2dcb
+## explicit
+github.com/facette/natsort
 # github.com/fatih/color v1.15.0
 ## explicit; go 1.17
 github.com/fatih/color
@@ -248,7 +280,7 @@ github.com/go-kit/log/level
 # github.com/go-logfmt/logfmt v0.6.0
 ## explicit; go 1.17
 github.com/go-logfmt/logfmt
-# github.com/go-logr/logr v1.3.0
+# github.com/go-logr/logr v1.4.1
 ## explicit; go 1.18
 github.com/go-logr/logr
 github.com/go-logr/logr/funcr
@@ -264,8 +296,8 @@ github.com/go-openapi/analysis/internal/flatten/operations
 github.com/go-openapi/analysis/internal/flatten/replace
 github.com/go-openapi/analysis/internal/flatten/schutils
 github.com/go-openapi/analysis/internal/flatten/sortref
-# github.com/go-openapi/errors v0.20.4
-## explicit; go 1.14
+# github.com/go-openapi/errors v0.21.0
+## explicit; go 1.19
 github.com/go-openapi/errors
 # github.com/go-openapi/jsonpointer v0.20.0
 ## explicit; go 1.18
@@ -280,7 +312,7 @@ github.com/go-openapi/loads
 # github.com/go-openapi/spec v0.20.9
 ## explicit; go 1.13
 github.com/go-openapi/spec
-# github.com/go-openapi/strfmt v0.21.9
+# github.com/go-openapi/strfmt v0.22.0
 ## explicit; go 1.19
 github.com/go-openapi/strfmt
 # github.com/go-openapi/swag v0.22.4
@@ -289,12 +321,15 @@ github.com/go-openapi/swag
 # github.com/go-openapi/validate v0.22.1
 ## explicit; go 1.14
 github.com/go-openapi/validate
-# github.com/go-resty/resty/v2 v2.10.0
+# github.com/go-resty/resty/v2 v2.11.0
 ## explicit; go 1.16
 github.com/go-resty/resty/v2
 # github.com/go-zookeeper/zk v1.0.3
 ## explicit; go 1.13
 github.com/go-zookeeper/zk
+# github.com/godbus/dbus/v5 v5.0.4
+## explicit; go 1.12
+github.com/godbus/dbus/v5
 # github.com/gogo/protobuf v1.3.2
 ## explicit; go 1.15
 github.com/gogo/protobuf/gogoproto
@@ -326,7 +361,7 @@ github.com/gogo/protobuf/sortkeys
 github.com/gogo/protobuf/types
 github.com/gogo/protobuf/vanity
 github.com/gogo/protobuf/vanity/command
-# github.com/golang-jwt/jwt/v5 v5.0.0
+# github.com/golang-jwt/jwt/v5 v5.2.0
 ## explicit; go 1.18
 github.com/golang-jwt/jwt/v5
 # github.com/golang/glog v1.1.2
@@ -374,7 +409,7 @@ github.com/google/go-querystring/query
 ## explicit; go 1.12
 github.com/google/gofuzz
 github.com/google/gofuzz/bytesource
-# github.com/google/pprof v0.0.0-20231205033806-a5a03c77bf08
+# github.com/google/pprof v0.0.0-20240117000934-35fc243c5815
 ## explicit; go 1.19
 github.com/google/pprof/profile
 # github.com/google/s2a-go v0.1.7
@@ -400,7 +435,7 @@ github.com/google/s2a-go/internal/v2/remotesigner
 github.com/google/s2a-go/internal/v2/tlsconfigstore
 github.com/google/s2a-go/retry
 github.com/google/s2a-go/stream
-# github.com/google/uuid v1.4.0
+# github.com/google/uuid v1.5.0
 ## explicit
 github.com/google/uuid
 # github.com/googleapis/enterprise-certificate-proxy v0.3.2
@@ -454,7 +489,7 @@ github.com/grpc-ecosystem/grpc-gateway/utilities
 github.com/grpc-ecosystem/grpc-gateway/v2/internal/httprule
 github.com/grpc-ecosystem/grpc-gateway/v2/runtime
 github.com/grpc-ecosystem/grpc-gateway/v2/utilities
-# github.com/hashicorp/consul/api v1.26.1
+# github.com/hashicorp/consul/api v1.27.0
 ## explicit; go 1.19
 github.com/hashicorp/consul/api
 # github.com/hashicorp/cronexpr v1.1.2
@@ -494,7 +529,7 @@ github.com/hashicorp/nomad/api/contexts
 # github.com/hashicorp/serf v0.10.1
 ## explicit; go 1.12
 github.com/hashicorp/serf/coordinate
-# github.com/hetznercloud/hcloud-go/v2 v2.4.0
+# github.com/hetznercloud/hcloud-go/v2 v2.6.0
 ## explicit; go 1.19
 github.com/hetznercloud/hcloud-go/v2/hcloud
 github.com/hetznercloud/hcloud-go/v2/hcloud/internal/instrumentation
@@ -502,7 +537,7 @@ github.com/hetznercloud/hcloud-go/v2/hcloud/schema
 # github.com/imdario/mergo v0.3.16
 ## explicit; go 1.13
 github.com/imdario/mergo
-# github.com/ionos-cloud/sdk-go/v6 v6.1.10
+# github.com/ionos-cloud/sdk-go/v6 v6.1.11
 ## explicit; go 1.19
 github.com/ionos-cloud/sdk-go/v6
 # github.com/jmespath/go-jmespath v0.4.0
@@ -536,7 +571,7 @@ github.com/kolo/xmlrpc
 ## explicit; go 1.11
 github.com/kylelemons/godebug/diff
 github.com/kylelemons/godebug/pretty
-# github.com/linode/linodego v1.25.0
+# github.com/linode/linodego v1.27.1
 ## explicit; go 1.20
 github.com/linode/linodego
 github.com/linode/linodego/internal/duration
@@ -552,10 +587,7 @@ github.com/mattn/go-colorable
 # github.com/mattn/go-isatty v0.0.19
 ## explicit; go 1.15
 github.com/mattn/go-isatty
-# github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0
-## explicit; go 1.19
-github.com/matttproud/golang_protobuf_extensions/v2/pbutil
-# github.com/miekg/dns v1.1.57
+# github.com/miekg/dns v1.1.58
 ## explicit; go 1.19
 github.com/miekg/dns
 # github.com/mitchellh/go-homedir v1.1.0
@@ -580,6 +612,9 @@ github.com/munnerz/goautoneg
 # github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f
 ## explicit
 github.com/mwitkow/go-conntrack
+# github.com/nsf/jsondiff v0.0.0-20230430225905-43f6cf3098c1
+## explicit; go 1.16
+github.com/nsf/jsondiff
 # github.com/oklog/run v1.1.0
 ## explicit; go 1.13
 github.com/oklog/run
@@ -593,10 +628,16 @@ github.com/opencontainers/go-digest
 ## explicit
 github.com/opencontainers/image-spec/specs-go
 github.com/opencontainers/image-spec/specs-go/v1
+# github.com/opencontainers/runtime-spec v1.0.2
+## explicit
+github.com/opencontainers/runtime-spec/specs-go
 # github.com/ovh/go-ovh v1.4.3
 ## explicit; go 1.18
 github.com/ovh/go-ovh/ovh
-# github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8
+# github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58
+## explicit; go 1.16
+github.com/pbnjay/memory
+# github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
 ## explicit; go 1.14
 github.com/pkg/browser
 # github.com/pkg/errors v0.9.1
@@ -608,7 +649,7 @@ github.com/pmezard/go-difflib/difflib
 # github.com/prometheus/alertmanager v0.26.0
 ## explicit; go 1.18
 github.com/prometheus/alertmanager/api/v2/models
-# github.com/prometheus/client_golang v1.17.0
+# github.com/prometheus/client_golang v1.18.0
 ## explicit; go 1.19
 github.com/prometheus/client_golang/api
 github.com/prometheus/client_golang/api/prometheus/v1
@@ -618,10 +659,11 @@ github.com/prometheus/client_golang/prometheus/promauto
 github.com/prometheus/client_golang/prometheus/promhttp
 github.com/prometheus/client_golang/prometheus/testutil
 github.com/prometheus/client_golang/prometheus/testutil/promlint
+github.com/prometheus/client_golang/prometheus/testutil/promlint/validations
 # github.com/prometheus/client_model v0.5.0
 ## explicit; go 1.19
 github.com/prometheus/client_model/go
-# github.com/prometheus/common v0.45.0
+# github.com/prometheus/common v0.46.0
 ## explicit; go 1.20
 github.com/prometheus/common/config
 github.com/prometheus/common/expfmt
@@ -638,17 +680,18 @@ github.com/prometheus/common/assets
 # github.com/prometheus/common/sigv4 v0.1.0
 ## explicit; go 1.15
 github.com/prometheus/common/sigv4
-# github.com/prometheus/exporter-toolkit v0.10.0
+# github.com/prometheus/exporter-toolkit v0.11.0
 ## explicit; go 1.18
 github.com/prometheus/exporter-toolkit/web
-# github.com/prometheus/procfs v0.11.1
+# github.com/prometheus/procfs v0.12.0
 ## explicit; go 1.19
 github.com/prometheus/procfs
 github.com/prometheus/procfs/internal/fs
 github.com/prometheus/procfs/internal/util
-# github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21
+# github.com/scaleway/scaleway-sdk-go v1.0.0-beta.22
 ## explicit; go 1.17
 github.com/scaleway/scaleway-sdk-go/api/baremetal/v1
+github.com/scaleway/scaleway-sdk-go/api/block/v1alpha1
 github.com/scaleway/scaleway-sdk-go/api/instance/v1
 github.com/scaleway/scaleway-sdk-go/api/marketplace/v1
 github.com/scaleway/scaleway-sdk-go/internal/async
@@ -665,6 +708,9 @@ github.com/scaleway/scaleway-sdk-go/validation
 ## explicit; go 1.19
 github.com/shurcooL/httpfs/filter
 github.com/shurcooL/httpfs/union
+# github.com/sirupsen/logrus v1.9.3
+## explicit; go 1.13
+github.com/sirupsen/logrus
 # github.com/spf13/pflag v1.0.5
 ## explicit; go 1.12
 github.com/spf13/pflag
@@ -710,10 +756,10 @@ go.opencensus.io/trace
 go.opencensus.io/trace/internal
 go.opencensus.io/trace/propagation
 go.opencensus.io/trace/tracestate
-# go.opentelemetry.io/collector/featuregate v1.0.0
+# go.opentelemetry.io/collector/featuregate v1.0.1
 ## explicit; go 1.20
 go.opentelemetry.io/collector/featuregate
-# go.opentelemetry.io/collector/pdata v1.0.0
+# go.opentelemetry.io/collector/pdata v1.0.1
 ## explicit; go 1.20
 go.opentelemetry.io/collector/pdata/internal
 go.opentelemetry.io/collector/pdata/internal/data
@@ -730,14 +776,14 @@ go.opentelemetry.io/collector/pdata/internal/otlp
 go.opentelemetry.io/collector/pdata/pcommon
 go.opentelemetry.io/collector/pdata/pmetric
 go.opentelemetry.io/collector/pdata/pmetric/pmetricotlp
-# go.opentelemetry.io/collector/semconv v0.90.1
+# go.opentelemetry.io/collector/semconv v0.93.0
 ## explicit; go 1.20
 go.opentelemetry.io/collector/semconv/v1.6.1
-# go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1
+# go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.47.0
 ## explicit; go 1.20
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/semconvutil
-# go.opentelemetry.io/otel v1.21.0
+# go.opentelemetry.io/otel v1.22.0
 ## explicit; go 1.20
 go.opentelemetry.io/otel
 go.opentelemetry.io/otel/attribute
@@ -748,31 +794,32 @@ go.opentelemetry.io/otel/internal/attribute
 go.opentelemetry.io/otel/internal/baggage
 go.opentelemetry.io/otel/internal/global
 go.opentelemetry.io/otel/propagation
-go.opentelemetry.io/otel/semconv/v1.17.0
+go.opentelemetry.io/otel/semconv/v1.20.0
 go.opentelemetry.io/otel/semconv/v1.21.0
-# go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.21.0
+go.opentelemetry.io/otel/semconv/v1.24.0
+# go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.22.0
 ## explicit; go 1.20
 go.opentelemetry.io/otel/exporters/otlp/otlptrace
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/internal/tracetransform
-# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0
+# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.22.0
 ## explicit; go 1.20
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/envconfig
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/otlpconfig
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/retry
-# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0
+# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.22.0
 ## explicit; go 1.20
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/envconfig
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/otlpconfig
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/retry
-# go.opentelemetry.io/otel/metric v1.21.0
+# go.opentelemetry.io/otel/metric v1.22.0
 ## explicit; go 1.20
 go.opentelemetry.io/otel/metric
 go.opentelemetry.io/otel/metric/embedded
-# go.opentelemetry.io/otel/sdk v1.21.0
+# go.opentelemetry.io/otel/sdk v1.22.0
 ## explicit; go 1.20
 go.opentelemetry.io/otel/sdk
 go.opentelemetry.io/otel/sdk/instrumentation
@@ -780,7 +827,7 @@ go.opentelemetry.io/otel/sdk/internal
 go.opentelemetry.io/otel/sdk/internal/env
 go.opentelemetry.io/otel/sdk/resource
 go.opentelemetry.io/otel/sdk/trace
-# go.opentelemetry.io/otel/trace v1.21.0
+# go.opentelemetry.io/otel/trace v1.22.0
 ## explicit; go 1.20
 go.opentelemetry.io/otel/trace
 go.opentelemetry.io/otel/trace/embedded
@@ -806,7 +853,7 @@ go.uber.org/goleak/internal/stack
 # go.uber.org/multierr v1.11.0
 ## explicit; go 1.19
 go.uber.org/multierr
-# golang.org/x/crypto v0.16.0
+# golang.org/x/crypto v0.18.0
 ## explicit; go 1.18
 golang.org/x/crypto/bcrypt
 golang.org/x/crypto/blowfish
@@ -819,7 +866,7 @@ golang.org/x/crypto/internal/alias
 golang.org/x/crypto/internal/poly1305
 golang.org/x/crypto/pkcs12
 golang.org/x/crypto/pkcs12/internal/rc2
-# golang.org/x/exp v0.0.0-20231206192017-f3f8817b8deb
+# golang.org/x/exp v0.0.0-20240119083558-1b970713d09a
 ## explicit; go 1.20
 golang.org/x/exp/constraints
 golang.org/x/exp/maps
@@ -829,10 +876,9 @@ golang.org/x/exp/slices
 golang.org/x/mod/internal/lazyregexp
 golang.org/x/mod/module
 golang.org/x/mod/semver
-# golang.org/x/net v0.19.0
+# golang.org/x/net v0.20.0
 ## explicit; go 1.18
 golang.org/x/net/bpf
-golang.org/x/net/context
 golang.org/x/net/http/httpguts
 golang.org/x/net/http/httpproxy
 golang.org/x/net/http2
@@ -848,7 +894,7 @@ golang.org/x/net/netutil
 golang.org/x/net/proxy
 golang.org/x/net/publicsuffix
 golang.org/x/net/trace
-# golang.org/x/oauth2 v0.15.0
+# golang.org/x/oauth2 v0.16.0
 ## explicit; go 1.18
 golang.org/x/oauth2
 golang.org/x/oauth2/authhandler
@@ -860,17 +906,17 @@ golang.org/x/oauth2/google/internal/stsexchange
 golang.org/x/oauth2/internal
 golang.org/x/oauth2/jws
 golang.org/x/oauth2/jwt
-# golang.org/x/sync v0.5.0
+# golang.org/x/sync v0.6.0
 ## explicit; go 1.18
 golang.org/x/sync/errgroup
-# golang.org/x/sys v0.15.0
+# golang.org/x/sys v0.16.0
 ## explicit; go 1.18
 golang.org/x/sys/cpu
 golang.org/x/sys/plan9
 golang.org/x/sys/unix
 golang.org/x/sys/windows
 golang.org/x/sys/windows/registry
-# golang.org/x/term v0.15.0
+# golang.org/x/term v0.16.0
 ## explicit; go 1.18
 golang.org/x/term
 # golang.org/x/text v0.14.0
@@ -888,7 +934,7 @@ golang.org/x/text/unicode/norm
 # golang.org/x/time v0.5.0
 ## explicit; go 1.18
 golang.org/x/time/rate
-# golang.org/x/tools v0.16.0
+# golang.org/x/tools v0.17.0
 ## explicit; go 1.18
 golang.org/x/tools/cmd/goimports
 golang.org/x/tools/cmd/stringer
@@ -912,7 +958,7 @@ golang.org/x/tools/internal/tokeninternal
 golang.org/x/tools/internal/typeparams
 golang.org/x/tools/internal/typesinternal
 golang.org/x/tools/internal/versions
-# google.golang.org/api v0.153.0
+# google.golang.org/api v0.157.0
 ## explicit; go 1.19
 google.golang.org/api/compute/v1
 google.golang.org/api/googleapi
@@ -926,7 +972,7 @@ google.golang.org/api/option
 google.golang.org/api/option/internaloption
 google.golang.org/api/transport/http
 google.golang.org/api/transport/http/internal/propagation
-# google.golang.org/appengine v1.6.7
+# google.golang.org/appengine v1.6.8
 ## explicit; go 1.11
 google.golang.org/appengine
 google.golang.org/appengine/internal
@@ -938,20 +984,20 @@ google.golang.org/appengine/internal/modules
 google.golang.org/appengine/internal/remote_api
 google.golang.org/appengine/internal/urlfetch
 google.golang.org/appengine/urlfetch
-# google.golang.org/genproto v0.0.0-20231120223509-83a465c0220f
+# google.golang.org/genproto v0.0.0-20240102182953-50ed04b92917
 ## explicit; go 1.19
 google.golang.org/genproto/internal
-# google.golang.org/genproto/googleapis/api v0.0.0-20231127180814-3a041ad873d4
+# google.golang.org/genproto/googleapis/api v0.0.0-20240116215550-a9fa1716bcac
 ## explicit; go 1.19
 google.golang.org/genproto/googleapis/api
 google.golang.org/genproto/googleapis/api/annotations
 google.golang.org/genproto/googleapis/api/httpbody
-# google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f
+# google.golang.org/genproto/googleapis/rpc v0.0.0-20240116215550-a9fa1716bcac
 ## explicit; go 1.19
 google.golang.org/genproto/googleapis/rpc/code
 google.golang.org/genproto/googleapis/rpc/errdetails
 google.golang.org/genproto/googleapis/rpc/status
-# google.golang.org/grpc v1.59.0
+# google.golang.org/grpc v1.61.0
 ## explicit; go 1.19
 google.golang.org/grpc
 google.golang.org/grpc/attributes
@@ -989,6 +1035,7 @@ google.golang.org/grpc/internal/metadata
 google.golang.org/grpc/internal/pretty
 google.golang.org/grpc/internal/resolver
 google.golang.org/grpc/internal/resolver/dns
+google.golang.org/grpc/internal/resolver/dns/internal
 google.golang.org/grpc/internal/resolver/passthrough
 google.golang.org/grpc/internal/resolver/unix
 google.golang.org/grpc/internal/serviceconfig
@@ -1000,12 +1047,14 @@ google.golang.org/grpc/keepalive
 google.golang.org/grpc/metadata
 google.golang.org/grpc/peer
 google.golang.org/grpc/resolver
+google.golang.org/grpc/resolver/dns
 google.golang.org/grpc/serviceconfig
 google.golang.org/grpc/stats
 google.golang.org/grpc/status
 google.golang.org/grpc/tap
-# google.golang.org/protobuf v1.31.0
-## explicit; go 1.11
+# google.golang.org/protobuf v1.32.0
+## explicit; go 1.17
+google.golang.org/protobuf/encoding/protodelim
 google.golang.org/protobuf/encoding/protojson
 google.golang.org/protobuf/encoding/prototext
 google.golang.org/protobuf/encoding/protowire
@@ -1057,7 +1106,7 @@ gopkg.in/yaml.v2
 gopkg.in/yaml.v3
 # gotest.tools/v3 v3.0.3
 ## explicit; go 1.11
-# k8s.io/api v0.28.4
+# k8s.io/api v0.28.6
 ## explicit; go 1.20
 k8s.io/api/admissionregistration/v1
 k8s.io/api/admissionregistration/v1alpha1
@@ -1111,7 +1160,7 @@ k8s.io/api/scheduling/v1beta1
 k8s.io/api/storage/v1
 k8s.io/api/storage/v1alpha1
 k8s.io/api/storage/v1beta1
-# k8s.io/apimachinery v0.28.4
+# k8s.io/apimachinery v0.28.6
 ## explicit; go 1.20
 k8s.io/apimachinery/pkg/api/equality
 k8s.io/apimachinery/pkg/api/errors
@@ -1161,7 +1210,7 @@ k8s.io/apimachinery/pkg/version
 k8s.io/apimachinery/pkg/watch
 k8s.io/apimachinery/third_party/forked/golang/json
 k8s.io/apimachinery/third_party/forked/golang/reflect
-# k8s.io/client-go v0.28.4
+# k8s.io/client-go v0.28.6
 ## explicit; go 1.20
 k8s.io/client-go/applyconfigurations/admissionregistration/v1
 k8s.io/client-go/applyconfigurations/admissionregistration/v1alpha1
@@ -1350,24 +1399,21 @@ k8s.io/client-go/util/workqueue
 # k8s.io/klog v1.0.0 => github.com/simonpasquier/klog-gokit v0.3.0
 ## explicit; go 1.12
 k8s.io/klog
-# k8s.io/klog/v2 v2.110.1 => github.com/simonpasquier/klog-gokit/v3 v3.3.0
+# k8s.io/klog/v2 v2.120.1 => github.com/simonpasquier/klog-gokit/v3 v3.3.0
 ## explicit; go 1.17
 k8s.io/klog/v2
-# k8s.io/kube-openapi v0.0.0-20230717233707-2695361300d9
+# k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00
 ## explicit; go 1.19
-k8s.io/kube-openapi/pkg/builder3/util
 k8s.io/kube-openapi/pkg/cached
 k8s.io/kube-openapi/pkg/common
 k8s.io/kube-openapi/pkg/handler3
 k8s.io/kube-openapi/pkg/internal
 k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json
-k8s.io/kube-openapi/pkg/openapiconv
 k8s.io/kube-openapi/pkg/schemaconv
-k8s.io/kube-openapi/pkg/schemamutation
 k8s.io/kube-openapi/pkg/spec3
 k8s.io/kube-openapi/pkg/util/proto
 k8s.io/kube-openapi/pkg/validation/spec
-# k8s.io/utils v0.0.0-20230711102312-30195339c3c7
+# k8s.io/utils v0.0.0-20230726121419-3b25d923346b
 ## explicit; go 1.18
 k8s.io/utils/buffer
 k8s.io/utils/clock
@@ -1376,13 +1422,14 @@ k8s.io/utils/integer
 k8s.io/utils/internal/third_party/forked/golang/net
 k8s.io/utils/net
 k8s.io/utils/pointer
+k8s.io/utils/ptr
 k8s.io/utils/strings/slices
 k8s.io/utils/trace
 # sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd
 ## explicit; go 1.18
 sigs.k8s.io/json
 sigs.k8s.io/json/internal/golang/encoding/json
-# sigs.k8s.io/structured-merge-diff/v4 v4.3.0
+# sigs.k8s.io/structured-merge-diff/v4 v4.4.1
 ## explicit; go 1.13
 sigs.k8s.io/structured-merge-diff/v4/fieldpath
 sigs.k8s.io/structured-merge-diff/v4/merge
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/fieldpath/pathelementmap.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/fieldpath/pathelementmap.go
index 9b14ca581b0..41fc2474a43 100644
--- a/vendor/sigs.k8s.io/structured-merge-diff/v4/fieldpath/pathelementmap.go
+++ b/vendor/sigs.k8s.io/structured-merge-diff/v4/fieldpath/pathelementmap.go
@@ -28,20 +28,15 @@ import (
 // for PathElementSet and SetNodeMap, so we could probably share the
 // code.
 type PathElementValueMap struct {
-	members sortedPathElementValues
+	valueMap PathElementMap
 }
 
 func MakePathElementValueMap(size int) PathElementValueMap {
 	return PathElementValueMap{
-		members: make(sortedPathElementValues, 0, size),
+		valueMap: MakePathElementMap(size),
 	}
 }
 
-type pathElementValue struct {
-	PathElement PathElement
-	Value       value.Value
-}
-
 type sortedPathElementValues []pathElementValue
 
 // Implement the sort interface; this would permit bulk creation, which would
@@ -53,7 +48,40 @@ func (spev sortedPathElementValues) Less(i, j int) bool {
 func (spev sortedPathElementValues) Swap(i, j int) { spev[i], spev[j] = spev[j], spev[i] }
 
 // Insert adds the pathelement and associated value in the map.
+// If insert is called twice with the same PathElement, the value is replaced.
 func (s *PathElementValueMap) Insert(pe PathElement, v value.Value) {
+	s.valueMap.Insert(pe, v)
+}
+
+// Get retrieves the value associated with the given PathElement from the map.
+// (nil, false) is returned if there is no such PathElement.
+func (s *PathElementValueMap) Get(pe PathElement) (value.Value, bool) {
+	v, ok := s.valueMap.Get(pe)
+	if !ok {
+		return nil, false
+	}
+	return v.(value.Value), true
+}
+
+// PathElementValueMap is a map from PathElement to interface{}.
+type PathElementMap struct {
+	members sortedPathElementValues
+}
+
+type pathElementValue struct {
+	PathElement PathElement
+	Value       interface{}
+}
+
+func MakePathElementMap(size int) PathElementMap {
+	return PathElementMap{
+		members: make(sortedPathElementValues, 0, size),
+	}
+}
+
+// Insert adds the pathelement and associated value in the map.
+// If insert is called twice with the same PathElement, the value is replaced.
+func (s *PathElementMap) Insert(pe PathElement, v interface{}) {
 	loc := sort.Search(len(s.members), func(i int) bool {
 		return !s.members[i].PathElement.Less(pe)
 	})
@@ -62,6 +90,7 @@ func (s *PathElementValueMap) Insert(pe PathElement, v value.Value) {
 		return
 	}
 	if s.members[loc].PathElement.Equals(pe) {
+		s.members[loc].Value = v
 		return
 	}
 	s.members = append(s.members, pathElementValue{})
@@ -71,7 +100,7 @@ func (s *PathElementValueMap) Insert(pe PathElement, v value.Value) {
 
 // Get retrieves the value associated with the given PathElement from the map.
 // (nil, false) is returned if there is no such PathElement.
-func (s *PathElementValueMap) Get(pe PathElement) (value.Value, bool) {
+func (s *PathElementMap) Get(pe PathElement) (interface{}, bool) {
 	loc := sort.Search(len(s.members), func(i int) bool {
 		return !s.members[i].PathElement.Less(pe)
 	})
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/merge/update.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/merge/update.go
index e1540841d8c..d5a977d607b 100644
--- a/vendor/sigs.k8s.io/structured-merge-diff/v4/merge/update.go
+++ b/vendor/sigs.k8s.io/structured-merge-diff/v4/merge/update.go
@@ -34,8 +34,6 @@ type UpdaterBuilder struct {
 	Converter     Converter
 	IgnoredFields map[fieldpath.APIVersion]*fieldpath.Set
 
-	EnableUnions bool
-
 	// Stop comparing the new object with old object after applying.
 	// This was initially used to avoid spurious etcd update, but
 	// since that's vastly inefficient, we've come-up with a better
@@ -49,7 +47,6 @@ func (u *UpdaterBuilder) BuildUpdater() *Updater {
 	return &Updater{
 		Converter:         u.Converter,
 		IgnoredFields:     u.IgnoredFields,
-		enableUnions:      u.EnableUnions,
 		returnInputOnNoop: u.ReturnInputOnNoop,
 	}
 }
@@ -63,19 +60,9 @@ type Updater struct {
 	// Deprecated: This will eventually become private.
 	IgnoredFields map[fieldpath.APIVersion]*fieldpath.Set
 
-	enableUnions bool
-
 	returnInputOnNoop bool
 }
 
-// EnableUnionFeature turns on union handling. It is disabled by default until the
-// feature is complete.
-//
-// Deprecated: Use the builder instead.
-func (s *Updater) EnableUnionFeature() {
-	s.enableUnions = true
-}
-
 func (s *Updater) update(oldObject, newObject *typed.TypedValue, version fieldpath.APIVersion, managers fieldpath.ManagedFields, workflow string, force bool) (fieldpath.ManagedFields, *typed.Comparison, error) {
 	conflicts := fieldpath.ManagedFields{}
 	removed := fieldpath.ManagedFields{}
@@ -160,12 +147,6 @@ func (s *Updater) Update(liveObject, newObject *typed.TypedValue, version fieldp
 	if err != nil {
 		return nil, fieldpath.ManagedFields{}, err
 	}
-	if s.enableUnions {
-		newObject, err = liveObject.NormalizeUnions(newObject)
-		if err != nil {
-			return nil, fieldpath.ManagedFields{}, err
-		}
-	}
 	managers, compare, err := s.update(liveObject, newObject, version, managers, manager, true)
 	if err != nil {
 		return nil, fieldpath.ManagedFields{}, err
@@ -179,7 +160,7 @@ func (s *Updater) Update(liveObject, newObject *typed.TypedValue, version fieldp
 		ignored = fieldpath.NewSet()
 	}
 	managers[manager] = fieldpath.NewVersionedSet(
-		managers[manager].Set().Union(compare.Modified).Union(compare.Added).Difference(compare.Removed).RecursiveDifference(ignored),
+		managers[manager].Set().Difference(compare.Removed).Union(compare.Modified).Union(compare.Added).RecursiveDifference(ignored),
 		version,
 		false,
 	)
@@ -198,22 +179,10 @@ func (s *Updater) Apply(liveObject, configObject *typed.TypedValue, version fiel
 	if err != nil {
 		return nil, fieldpath.ManagedFields{}, err
 	}
-	if s.enableUnions {
-		configObject, err = configObject.NormalizeUnionsApply(configObject)
-		if err != nil {
-			return nil, fieldpath.ManagedFields{}, err
-		}
-	}
 	newObject, err := liveObject.Merge(configObject)
 	if err != nil {
 		return nil, fieldpath.ManagedFields{}, fmt.Errorf("failed to merge config: %v", err)
 	}
-	if s.enableUnions {
-		newObject, err = configObject.NormalizeUnionsApply(newObject)
-		if err != nil {
-			return nil, fieldpath.ManagedFields{}, err
-		}
-	}
 	lastSet := managers[manager]
 	set, err := configObject.ToFieldSet()
 	if err != nil {
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/schema/schemaschema.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/schema/schemaschema.go
index e4c5caa2aa5..6eb6c36df30 100644
--- a/vendor/sigs.k8s.io/structured-merge-diff/v4/schema/schemaschema.go
+++ b/vendor/sigs.k8s.io/structured-merge-diff/v4/schema/schemaschema.go
@@ -145,6 +145,7 @@ var SchemaSchemaYAML = `types:
         list:
           elementType:
             scalar: string
+          elementRelationship: atomic
 - name: untyped
   map:
     fields:
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/compare.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/compare.go
new file mode 100644
index 00000000000..ed483cbbc4d
--- /dev/null
+++ b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/compare.go
@@ -0,0 +1,460 @@
+/*
+Copyright 2018 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package typed
+
+import (
+	"fmt"
+	"strings"
+
+	"sigs.k8s.io/structured-merge-diff/v4/fieldpath"
+	"sigs.k8s.io/structured-merge-diff/v4/schema"
+	"sigs.k8s.io/structured-merge-diff/v4/value"
+)
+
+// Comparison is the return value of a TypedValue.Compare() operation.
+//
+// No field will appear in more than one of the three fieldsets. If all of the
+// fieldsets are empty, then the objects must have been equal.
+type Comparison struct {
+	// Removed contains any fields removed by rhs (the right-hand-side
+	// object in the comparison).
+	Removed *fieldpath.Set
+	// Modified contains fields present in both objects but different.
+	Modified *fieldpath.Set
+	// Added contains any fields added by rhs.
+	Added *fieldpath.Set
+}
+
+// IsSame returns true if the comparison returned no changes (the two
+// compared objects are similar).
+func (c *Comparison) IsSame() bool {
+	return c.Removed.Empty() && c.Modified.Empty() && c.Added.Empty()
+}
+
+// String returns a human readable version of the comparison.
+func (c *Comparison) String() string {
+	bld := strings.Builder{}
+	if !c.Modified.Empty() {
+		bld.WriteString(fmt.Sprintf("- Modified Fields:\n%v\n", c.Modified))
+	}
+	if !c.Added.Empty() {
+		bld.WriteString(fmt.Sprintf("- Added Fields:\n%v\n", c.Added))
+	}
+	if !c.Removed.Empty() {
+		bld.WriteString(fmt.Sprintf("- Removed Fields:\n%v\n", c.Removed))
+	}
+	return bld.String()
+}
+
+// ExcludeFields fields from the compare recursively removes the fields
+// from the entire comparison
+func (c *Comparison) ExcludeFields(fields *fieldpath.Set) *Comparison {
+	if fields == nil || fields.Empty() {
+		return c
+	}
+	c.Removed = c.Removed.RecursiveDifference(fields)
+	c.Modified = c.Modified.RecursiveDifference(fields)
+	c.Added = c.Added.RecursiveDifference(fields)
+	return c
+}
+
+type compareWalker struct {
+	lhs     value.Value
+	rhs     value.Value
+	schema  *schema.Schema
+	typeRef schema.TypeRef
+
+	// Current path that we are comparing
+	path fieldpath.Path
+
+	// Resulting comparison.
+	comparison *Comparison
+
+	// internal housekeeping--don't set when constructing.
+	inLeaf bool // Set to true if we're in a "big leaf"--atomic map/list
+
+	// Allocate only as many walkers as needed for the depth by storing them here.
+	spareWalkers *[]*compareWalker
+
+	allocator value.Allocator
+}
+
+// compare compares stuff.
+func (w *compareWalker) compare(prefixFn func() string) (errs ValidationErrors) {
+	if w.lhs == nil && w.rhs == nil {
+		// check this condidition here instead of everywhere below.
+		return errorf("at least one of lhs and rhs must be provided")
+	}
+	a, ok := w.schema.Resolve(w.typeRef)
+	if !ok {
+		return errorf("schema error: no type found matching: %v", *w.typeRef.NamedType)
+	}
+
+	alhs := deduceAtom(a, w.lhs)
+	arhs := deduceAtom(a, w.rhs)
+
+	// deduceAtom does not fix the type for nil values
+	// nil is a wildcard and will accept whatever form the other operand takes
+	if w.rhs == nil {
+		errs = append(errs, handleAtom(alhs, w.typeRef, w)...)
+	} else if w.lhs == nil || alhs.Equals(&arhs) {
+		errs = append(errs, handleAtom(arhs, w.typeRef, w)...)
+	} else {
+		w2 := *w
+		errs = append(errs, handleAtom(alhs, w.typeRef, &w2)...)
+		errs = append(errs, handleAtom(arhs, w.typeRef, w)...)
+	}
+
+	if !w.inLeaf {
+		if w.lhs == nil {
+			w.comparison.Added.Insert(w.path)
+		} else if w.rhs == nil {
+			w.comparison.Removed.Insert(w.path)
+		}
+	}
+	return errs.WithLazyPrefix(prefixFn)
+}
+
+// doLeaf should be called on leaves before descending into children, if there
+// will be a descent. It modifies w.inLeaf.
+func (w *compareWalker) doLeaf() {
+	if w.inLeaf {
+		// We're in a "big leaf", an atomic map or list. Ignore
+		// subsequent leaves.
+		return
+	}
+	w.inLeaf = true
+
+	// We don't recurse into leaf fields for merging.
+	if w.lhs == nil {
+		w.comparison.Added.Insert(w.path)
+	} else if w.rhs == nil {
+		w.comparison.Removed.Insert(w.path)
+	} else if !value.EqualsUsing(w.allocator, w.rhs, w.lhs) {
+		// TODO: Equality is not sufficient for this.
+		// Need to implement equality check on the value type.
+		w.comparison.Modified.Insert(w.path)
+	}
+}
+
+func (w *compareWalker) doScalar(t *schema.Scalar) ValidationErrors {
+	// Make sure at least one side is a valid scalar.
+	lerrs := validateScalar(t, w.lhs, "lhs: ")
+	rerrs := validateScalar(t, w.rhs, "rhs: ")
+	if len(lerrs) > 0 && len(rerrs) > 0 {
+		return append(lerrs, rerrs...)
+	}
+
+	// All scalars are leaf fields.
+	w.doLeaf()
+
+	return nil
+}
+
+func (w *compareWalker) prepareDescent(pe fieldpath.PathElement, tr schema.TypeRef, cmp *Comparison) *compareWalker {
+	if w.spareWalkers == nil {
+		// first descent.
+		w.spareWalkers = &[]*compareWalker{}
+	}
+	var w2 *compareWalker
+	if n := len(*w.spareWalkers); n > 0 {
+		w2, *w.spareWalkers = (*w.spareWalkers)[n-1], (*w.spareWalkers)[:n-1]
+	} else {
+		w2 = &compareWalker{}
+	}
+	*w2 = *w
+	w2.typeRef = tr
+	w2.path = append(w2.path, pe)
+	w2.lhs = nil
+	w2.rhs = nil
+	w2.comparison = cmp
+	return w2
+}
+
+func (w *compareWalker) finishDescent(w2 *compareWalker) {
+	// if the descent caused a realloc, ensure that we reuse the buffer
+	// for the next sibling.
+	w.path = w2.path[:len(w2.path)-1]
+	*w.spareWalkers = append(*w.spareWalkers, w2)
+}
+
+func (w *compareWalker) derefMap(prefix string, v value.Value) (value.Map, ValidationErrors) {
+	if v == nil {
+		return nil, nil
+	}
+	m, err := mapValue(w.allocator, v)
+	if err != nil {
+		return nil, errorf("%v: %v", prefix, err)
+	}
+	return m, nil
+}
+
+func (w *compareWalker) visitListItems(t *schema.List, lhs, rhs value.List) (errs ValidationErrors) {
+	rLen := 0
+	if rhs != nil {
+		rLen = rhs.Length()
+	}
+	lLen := 0
+	if lhs != nil {
+		lLen = lhs.Length()
+	}
+
+	maxLength := rLen
+	if lLen > maxLength {
+		maxLength = lLen
+	}
+	// Contains all the unique PEs between lhs and rhs, exactly once.
+	// Order doesn't matter since we're just tracking ownership in a set.
+	allPEs := make([]fieldpath.PathElement, 0, maxLength)
+
+	// Gather all the elements from lhs, indexed by PE, in a list for duplicates.
+	lValues := fieldpath.MakePathElementMap(lLen)
+	for i := 0; i < lLen; i++ {
+		child := lhs.At(i)
+		pe, err := listItemToPathElement(w.allocator, w.schema, t, child)
+		if err != nil {
+			errs = append(errs, errorf("element %v: %v", i, err.Error())...)
+			// If we can't construct the path element, we can't
+			// even report errors deeper in the schema, so bail on
+			// this element.
+			continue
+		}
+
+		if v, found := lValues.Get(pe); found {
+			list := v.([]value.Value)
+			lValues.Insert(pe, append(list, child))
+		} else {
+			lValues.Insert(pe, []value.Value{child})
+			allPEs = append(allPEs, pe)
+		}
+	}
+
+	// Gather all the elements from rhs, indexed by PE, in a list for duplicates.
+	rValues := fieldpath.MakePathElementMap(rLen)
+	for i := 0; i < rLen; i++ {
+		rValue := rhs.At(i)
+		pe, err := listItemToPathElement(w.allocator, w.schema, t, rValue)
+		if err != nil {
+			errs = append(errs, errorf("element %v: %v", i, err.Error())...)
+			// If we can't construct the path element, we can't
+			// even report errors deeper in the schema, so bail on
+			// this element.
+			continue
+		}
+		if v, found := rValues.Get(pe); found {
+			list := v.([]value.Value)
+			rValues.Insert(pe, append(list, rValue))
+		} else {
+			rValues.Insert(pe, []value.Value{rValue})
+			if _, found := lValues.Get(pe); !found {
+				allPEs = append(allPEs, pe)
+			}
+		}
+	}
+
+	for _, pe := range allPEs {
+		lList := []value.Value(nil)
+		if l, ok := lValues.Get(pe); ok {
+			lList = l.([]value.Value)
+		}
+		rList := []value.Value(nil)
+		if l, ok := rValues.Get(pe); ok {
+			rList = l.([]value.Value)
+		}
+
+		switch {
+		case len(lList) == 0 && len(rList) == 0:
+			// We shouldn't be here anyway.
+			return
+		// Normal use-case:
+		// We have no duplicates for this PE, compare items one-to-one.
+		case len(lList) <= 1 && len(rList) <= 1:
+			lValue := value.Value(nil)
+			if len(lList) != 0 {
+				lValue = lList[0]
+			}
+			rValue := value.Value(nil)
+			if len(rList) != 0 {
+				rValue = rList[0]
+			}
+			errs = append(errs, w.compareListItem(t, pe, lValue, rValue)...)
+		// Duplicates before & after use-case:
+		// Compare the duplicates lists as if they were atomic, mark modified if they changed.
+		case len(lList) >= 2 && len(rList) >= 2:
+			listEqual := func(lList, rList []value.Value) bool {
+				if len(lList) != len(rList) {
+					return false
+				}
+				for i := range lList {
+					if !value.Equals(lList[i], rList[i]) {
+						return false
+					}
+				}
+				return true
+			}
+			if !listEqual(lList, rList) {
+				w.comparison.Modified.Insert(append(w.path, pe))
+			}
+		// Duplicates before & not anymore use-case:
+		// Rcursively add new non-duplicate items, Remove duplicate marker,
+		case len(lList) >= 2:
+			if len(rList) != 0 {
+				errs = append(errs, w.compareListItem(t, pe, nil, rList[0])...)
+			}
+			w.comparison.Removed.Insert(append(w.path, pe))
+		// New duplicates use-case:
+		// Recursively remove old non-duplicate items, add duplicate marker.
+		case len(rList) >= 2:
+			if len(lList) != 0 {
+				errs = append(errs, w.compareListItem(t, pe, lList[0], nil)...)
+			}
+			w.comparison.Added.Insert(append(w.path, pe))
+		}
+	}
+
+	return
+}
+
+func (w *compareWalker) indexListPathElements(t *schema.List, list value.List) ([]fieldpath.PathElement, fieldpath.PathElementValueMap, ValidationErrors) {
+	var errs ValidationErrors
+	length := 0
+	if list != nil {
+		length = list.Length()
+	}
+	observed := fieldpath.MakePathElementValueMap(length)
+	pes := make([]fieldpath.PathElement, 0, length)
+	for i := 0; i < length; i++ {
+		child := list.At(i)
+		pe, err := listItemToPathElement(w.allocator, w.schema, t, child)
+		if err != nil {
+			errs = append(errs, errorf("element %v: %v", i, err.Error())...)
+			// If we can't construct the path element, we can't
+			// even report errors deeper in the schema, so bail on
+			// this element.
+			continue
+		}
+		// Ignore repeated occurences of `pe`.
+		if _, found := observed.Get(pe); found {
+			continue
+		}
+		observed.Insert(pe, child)
+		pes = append(pes, pe)
+	}
+	return pes, observed, errs
+}
+
+func (w *compareWalker) compareListItem(t *schema.List, pe fieldpath.PathElement, lChild, rChild value.Value) ValidationErrors {
+	w2 := w.prepareDescent(pe, t.ElementType, w.comparison)
+	w2.lhs = lChild
+	w2.rhs = rChild
+	errs := w2.compare(pe.String)
+	w.finishDescent(w2)
+	return errs
+}
+
+func (w *compareWalker) derefList(prefix string, v value.Value) (value.List, ValidationErrors) {
+	if v == nil {
+		return nil, nil
+	}
+	l, err := listValue(w.allocator, v)
+	if err != nil {
+		return nil, errorf("%v: %v", prefix, err)
+	}
+	return l, nil
+}
+
+func (w *compareWalker) doList(t *schema.List) (errs ValidationErrors) {
+	lhs, _ := w.derefList("lhs: ", w.lhs)
+	if lhs != nil {
+		defer w.allocator.Free(lhs)
+	}
+	rhs, _ := w.derefList("rhs: ", w.rhs)
+	if rhs != nil {
+		defer w.allocator.Free(rhs)
+	}
+
+	// If both lhs and rhs are empty/null, treat it as a
+	// leaf: this helps preserve the empty/null
+	// distinction.
+	emptyPromoteToLeaf := (lhs == nil || lhs.Length() == 0) && (rhs == nil || rhs.Length() == 0)
+
+	if t.ElementRelationship == schema.Atomic || emptyPromoteToLeaf {
+		w.doLeaf()
+		return nil
+	}
+
+	if lhs == nil && rhs == nil {
+		return nil
+	}
+
+	errs = w.visitListItems(t, lhs, rhs)
+
+	return errs
+}
+
+func (w *compareWalker) visitMapItem(t *schema.Map, out map[string]interface{}, key string, lhs, rhs value.Value) (errs ValidationErrors) {
+	fieldType := t.ElementType
+	if sf, ok := t.FindField(key); ok {
+		fieldType = sf.Type
+	}
+	pe := fieldpath.PathElement{FieldName: &key}
+	w2 := w.prepareDescent(pe, fieldType, w.comparison)
+	w2.lhs = lhs
+	w2.rhs = rhs
+	errs = append(errs, w2.compare(pe.String)...)
+	w.finishDescent(w2)
+	return errs
+}
+
+func (w *compareWalker) visitMapItems(t *schema.Map, lhs, rhs value.Map) (errs ValidationErrors) {
+	out := map[string]interface{}{}
+
+	value.MapZipUsing(w.allocator, lhs, rhs, value.Unordered, func(key string, lhsValue, rhsValue value.Value) bool {
+		errs = append(errs, w.visitMapItem(t, out, key, lhsValue, rhsValue)...)
+		return true
+	})
+
+	return errs
+}
+
+func (w *compareWalker) doMap(t *schema.Map) (errs ValidationErrors) {
+	lhs, _ := w.derefMap("lhs: ", w.lhs)
+	if lhs != nil {
+		defer w.allocator.Free(lhs)
+	}
+	rhs, _ := w.derefMap("rhs: ", w.rhs)
+	if rhs != nil {
+		defer w.allocator.Free(rhs)
+	}
+	// If both lhs and rhs are empty/null, treat it as a
+	// leaf: this helps preserve the empty/null
+	// distinction.
+	emptyPromoteToLeaf := (lhs == nil || lhs.Empty()) && (rhs == nil || rhs.Empty())
+
+	if t.ElementRelationship == schema.Atomic || emptyPromoteToLeaf {
+		w.doLeaf()
+		return nil
+	}
+
+	if lhs == nil && rhs == nil {
+		return nil
+	}
+
+	errs = append(errs, w.visitMapItems(t, lhs, rhs)...)
+
+	return errs
+}
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/helpers.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/helpers.go
index 19c77334f6c..78fdb0e75f7 100644
--- a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/helpers.go
+++ b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/helpers.go
@@ -197,7 +197,7 @@ func getAssociativeKeyDefault(s *schema.Schema, list *schema.List, fieldName str
 	return field.Default, nil
 }
 
-func keyedAssociativeListItemToPathElement(a value.Allocator, s *schema.Schema, list *schema.List, index int, child value.Value) (fieldpath.PathElement, error) {
+func keyedAssociativeListItemToPathElement(a value.Allocator, s *schema.Schema, list *schema.List, child value.Value) (fieldpath.PathElement, error) {
 	pe := fieldpath.PathElement{}
 	if child.IsNull() {
 		// null entries are illegal.
@@ -225,7 +225,7 @@ func keyedAssociativeListItemToPathElement(a value.Allocator, s *schema.Schema,
 	return pe, nil
 }
 
-func setItemToPathElement(list *schema.List, index int, child value.Value) (fieldpath.PathElement, error) {
+func setItemToPathElement(child value.Value) (fieldpath.PathElement, error) {
 	pe := fieldpath.PathElement{}
 	switch {
 	case child.IsMap():
@@ -245,16 +245,15 @@ func setItemToPathElement(list *schema.List, index int, child value.Value) (fiel
 	}
 }
 
-func listItemToPathElement(a value.Allocator, s *schema.Schema, list *schema.List, index int, child value.Value) (fieldpath.PathElement, error) {
-	if list.ElementRelationship == schema.Associative {
-		if len(list.Keys) > 0 {
-			return keyedAssociativeListItemToPathElement(a, s, list, index, child)
-		}
+func listItemToPathElement(a value.Allocator, s *schema.Schema, list *schema.List, child value.Value) (fieldpath.PathElement, error) {
+	if list.ElementRelationship != schema.Associative {
+		return fieldpath.PathElement{}, errors.New("invalid indexing of non-associative list")
+	}
 
-		// If there's no keys, then we must be a set of primitives.
-		return setItemToPathElement(list, index, child)
+	if len(list.Keys) > 0 {
+		return keyedAssociativeListItemToPathElement(a, s, list, child)
 	}
 
-	// Use the index as a key for atomic lists.
-	return fieldpath.PathElement{Index: &index}, nil
+	// If there's no keys, then we must be a set of primitives.
+	return setItemToPathElement(child)
 }
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/merge.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/merge.go
index 09209ec82a4..fa227ac405b 100644
--- a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/merge.go
+++ b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/merge.go
@@ -180,14 +180,18 @@ func (w *mergingWalker) visitListItems(t *schema.List, lhs, rhs value.List) (err
 	}
 	out := make([]interface{}, 0, outLen)
 
-	rhsOrder, observedRHS, rhsErrs := w.indexListPathElements(t, rhs)
+	rhsPEs, observedRHS, rhsErrs := w.indexListPathElements(t, rhs, false)
 	errs = append(errs, rhsErrs...)
-	lhsOrder, observedLHS, lhsErrs := w.indexListPathElements(t, lhs)
+	lhsPEs, observedLHS, lhsErrs := w.indexListPathElements(t, lhs, true)
 	errs = append(errs, lhsErrs...)
 
+	if len(errs) != 0 {
+		return errs
+	}
+
 	sharedOrder := make([]*fieldpath.PathElement, 0, rLen)
-	for i := range rhsOrder {
-		pe := &rhsOrder[i]
+	for i := range rhsPEs {
+		pe := &rhsPEs[i]
 		if _, ok := observedLHS.Get(*pe); ok {
 			sharedOrder = append(sharedOrder, pe)
 		}
@@ -199,13 +203,15 @@ func (w *mergingWalker) visitListItems(t *schema.List, lhs, rhs value.List) (err
 		sharedOrder = sharedOrder[1:]
 	}
 
-	lLen, rLen = len(lhsOrder), len(rhsOrder)
+	mergedRHS := fieldpath.MakePathElementMap(len(rhsPEs))
+	lLen, rLen = len(lhsPEs), len(rhsPEs)
 	for lI, rI := 0, 0; lI < lLen || rI < rLen; {
 		if lI < lLen && rI < rLen {
-			pe := lhsOrder[lI]
-			if pe.Equals(rhsOrder[rI]) {
+			pe := lhsPEs[lI]
+			if pe.Equals(rhsPEs[rI]) {
 				// merge LHS & RHS items
-				lChild, _ := observedLHS.Get(pe)
+				mergedRHS.Insert(pe, struct{}{})
+				lChild, _ := observedLHS.Get(pe) // may be nil if the PE is duplicaated.
 				rChild, _ := observedRHS.Get(pe)
 				mergeOut, errs := w.mergeListItem(t, pe, lChild, rChild)
 				errs = append(errs, errs...)
@@ -222,17 +228,17 @@ func (w *mergingWalker) visitListItems(t *schema.List, lhs, rhs value.List) (err
 				}
 				continue
 			}
-			if _, ok := observedRHS.Get(pe); ok && nextShared != nil && !nextShared.Equals(lhsOrder[lI]) {
+			if _, ok := observedRHS.Get(pe); ok && nextShared != nil && !nextShared.Equals(lhsPEs[lI]) {
 				// shared item, but not the one we want in this round
 				lI++
 				continue
 			}
 		}
 		if lI < lLen {
-			pe := lhsOrder[lI]
+			pe := lhsPEs[lI]
 			if _, ok := observedRHS.Get(pe); !ok {
-				// take LHS item
-				lChild, _ := observedLHS.Get(pe)
+				// take LHS item using At to make sure we get the right item (observed may not contain the right item).
+				lChild := lhs.AtUsing(w.allocator, lI)
 				mergeOut, errs := w.mergeListItem(t, pe, lChild, nil)
 				errs = append(errs, errs...)
 				if mergeOut != nil {
@@ -240,12 +246,16 @@ func (w *mergingWalker) visitListItems(t *schema.List, lhs, rhs value.List) (err
 				}
 				lI++
 				continue
+			} else if _, ok := mergedRHS.Get(pe); ok {
+				// we've already merged it with RHS, we don't want to duplicate it, skip it.
+				lI++
 			}
 		}
 		if rI < rLen {
 			// Take the RHS item, merge with matching LHS item if possible
-			pe := rhsOrder[rI]
-			lChild, _ := observedLHS.Get(pe) // may be nil
+			pe := rhsPEs[rI]
+			mergedRHS.Insert(pe, struct{}{})
+			lChild, _ := observedLHS.Get(pe) // may be nil if absent or duplicaated.
 			rChild, _ := observedRHS.Get(pe)
 			mergeOut, errs := w.mergeListItem(t, pe, lChild, rChild)
 			errs = append(errs, errs...)
@@ -272,7 +282,7 @@ func (w *mergingWalker) visitListItems(t *schema.List, lhs, rhs value.List) (err
 	return errs
 }
 
-func (w *mergingWalker) indexListPathElements(t *schema.List, list value.List) ([]fieldpath.PathElement, fieldpath.PathElementValueMap, ValidationErrors) {
+func (w *mergingWalker) indexListPathElements(t *schema.List, list value.List, allowDuplicates bool) ([]fieldpath.PathElement, fieldpath.PathElementValueMap, ValidationErrors) {
 	var errs ValidationErrors
 	length := 0
 	if list != nil {
@@ -282,7 +292,7 @@ func (w *mergingWalker) indexListPathElements(t *schema.List, list value.List) (
 	pes := make([]fieldpath.PathElement, 0, length)
 	for i := 0; i < length; i++ {
 		child := list.At(i)
-		pe, err := listItemToPathElement(w.allocator, w.schema, t, i, child)
+		pe, err := listItemToPathElement(w.allocator, w.schema, t, child)
 		if err != nil {
 			errs = append(errs, errorf("element %v: %v", i, err.Error())...)
 			// If we can't construct the path element, we can't
@@ -290,11 +300,15 @@ func (w *mergingWalker) indexListPathElements(t *schema.List, list value.List) (
 			// this element.
 			continue
 		}
-		if _, found := observed.Get(pe); found {
+		if _, found := observed.Get(pe); found && !allowDuplicates {
 			errs = append(errs, errorf("duplicate entries for key %v", pe.String())...)
 			continue
+		} else if !found {
+			observed.Insert(pe, child)
+		} else {
+			// Duplicated items are not merged with the new value, make them nil.
+			observed.Insert(pe, value.NewValueInterface(nil))
 		}
-		observed.Insert(pe, child)
 		pes = append(pes, pe)
 	}
 	return pes, observed, errs
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/parser.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/parser.go
index 3949a78fc67..4258ee5bab7 100644
--- a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/parser.go
+++ b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/parser.go
@@ -93,13 +93,13 @@ func (p ParseableType) IsValid() bool {
 
 // FromYAML parses a yaml string into an object with the current schema
 // and the type "typename" or an error if validation fails.
-func (p ParseableType) FromYAML(object YAMLObject) (*TypedValue, error) {
+func (p ParseableType) FromYAML(object YAMLObject, opts ...ValidationOptions) (*TypedValue, error) {
 	var v interface{}
 	err := yaml.Unmarshal([]byte(object), &v)
 	if err != nil {
 		return nil, err
 	}
-	return AsTyped(value.NewValueInterface(v), p.Schema, p.TypeRef)
+	return AsTyped(value.NewValueInterface(v), p.Schema, p.TypeRef, opts...)
 }
 
 // FromUnstructured converts a go "interface{}" type, typically an
@@ -108,8 +108,8 @@ func (p ParseableType) FromYAML(object YAMLObject) (*TypedValue, error) {
 // The provided interface{} must be one of: map[string]interface{},
 // map[interface{}]interface{}, []interface{}, int types, float types,
 // string or boolean. Nested interface{} must also be one of these types.
-func (p ParseableType) FromUnstructured(in interface{}) (*TypedValue, error) {
-	return AsTyped(value.NewValueInterface(in), p.Schema, p.TypeRef)
+func (p ParseableType) FromUnstructured(in interface{}, opts ...ValidationOptions) (*TypedValue, error) {
+	return AsTyped(value.NewValueInterface(in), p.Schema, p.TypeRef, opts...)
 }
 
 // FromStructured converts a go "interface{}" type, typically an structured object in
@@ -117,12 +117,12 @@ func (p ParseableType) FromUnstructured(in interface{}) (*TypedValue, error) {
 // schema validation. The provided "interface{}" value must be a pointer so that the
 // value can be modified via reflection. The provided "interface{}" may contain structs
 // and types that are converted to Values by the jsonMarshaler interface.
-func (p ParseableType) FromStructured(in interface{}) (*TypedValue, error) {
+func (p ParseableType) FromStructured(in interface{}, opts ...ValidationOptions) (*TypedValue, error) {
 	v, err := value.NewValueReflect(in)
 	if err != nil {
 		return nil, fmt.Errorf("error creating struct value reflector: %v", err)
 	}
-	return AsTyped(v, p.Schema, p.TypeRef)
+	return AsTyped(v, p.Schema, p.TypeRef, opts...)
 }
 
 // DeducedParseableType is a ParseableType that deduces the type from
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/remove.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/remove.go
index a338d761d43..ad071ee8f3f 100644
--- a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/remove.go
+++ b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/remove.go
@@ -74,9 +74,9 @@ func (w *removingWalker) doList(t *schema.List) (errs ValidationErrors) {
 	iter := l.RangeUsing(w.allocator)
 	defer w.allocator.Free(iter)
 	for iter.Next() {
-		i, item := iter.Item()
+		_, item := iter.Item()
 		// Ignore error because we have already validated this list
-		pe, _ := listItemToPathElement(w.allocator, w.schema, t, i, item)
+		pe, _ := listItemToPathElement(w.allocator, w.schema, t, item)
 		path, _ := fieldpath.MakePath(pe)
 		// save items on the path when we shouldExtract
 		// but ignore them when we are removing (i.e. !w.shouldExtract)
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/tofieldset.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/tofieldset.go
index 047efff0530..d563a87ee6b 100644
--- a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/tofieldset.go
+++ b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/tofieldset.go
@@ -94,9 +94,31 @@ func (v *toFieldSetWalker) doScalar(t *schema.Scalar) ValidationErrors {
 }
 
 func (v *toFieldSetWalker) visitListItems(t *schema.List, list value.List) (errs ValidationErrors) {
+	// Keeps track of the PEs we've seen
+	seen := fieldpath.MakePathElementSet(list.Length())
+	// Keeps tracks of the PEs we've counted as duplicates
+	duplicates := fieldpath.MakePathElementSet(list.Length())
 	for i := 0; i < list.Length(); i++ {
 		child := list.At(i)
-		pe, _ := listItemToPathElement(v.allocator, v.schema, t, i, child)
+		pe, _ := listItemToPathElement(v.allocator, v.schema, t, child)
+		if seen.Has(pe) {
+			if duplicates.Has(pe) {
+				// do nothing
+			} else {
+				v.set.Insert(append(v.path, pe))
+				duplicates.Insert(pe)
+			}
+		} else {
+			seen.Insert(pe)
+		}
+	}
+
+	for i := 0; i < list.Length(); i++ {
+		child := list.At(i)
+		pe, _ := listItemToPathElement(v.allocator, v.schema, t, child)
+		if duplicates.Has(pe) {
+			continue
+		}
 		v2 := v.prepareDescent(pe, t.ElementType)
 		v2.value = child
 		errs = append(errs, v2.toFieldSet()...)
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/typed.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/typed.go
index 6411bd51a94..9be90282806 100644
--- a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/typed.go
+++ b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/typed.go
@@ -17,8 +17,6 @@ limitations under the License.
 package typed
 
 import (
-	"fmt"
-	"strings"
 	"sync"
 
 	"sigs.k8s.io/structured-merge-diff/v4/fieldpath"
@@ -26,16 +24,24 @@ import (
 	"sigs.k8s.io/structured-merge-diff/v4/value"
 )
 
+// ValidationOptions is the list of all the options available when running the validation.
+type ValidationOptions int
+
+const (
+	// AllowDuplicates means that sets and associative lists can have duplicate similar items.
+	AllowDuplicates ValidationOptions = iota
+)
+
 // AsTyped accepts a value and a type and returns a TypedValue. 'v' must have
 // type 'typeName' in the schema. An error is returned if the v doesn't conform
 // to the schema.
-func AsTyped(v value.Value, s *schema.Schema, typeRef schema.TypeRef) (*TypedValue, error) {
+func AsTyped(v value.Value, s *schema.Schema, typeRef schema.TypeRef, opts ...ValidationOptions) (*TypedValue, error) {
 	tv := &TypedValue{
 		value:   v,
 		typeRef: typeRef,
 		schema:  s,
 	}
-	if err := tv.Validate(); err != nil {
+	if err := tv.Validate(opts...); err != nil {
 		return nil, err
 	}
 	return tv, nil
@@ -81,8 +87,14 @@ func (tv TypedValue) Schema() *schema.Schema {
 }
 
 // Validate returns an error with a list of every spec violation.
-func (tv TypedValue) Validate() error {
+func (tv TypedValue) Validate(opts ...ValidationOptions) error {
 	w := tv.walker()
+	for _, opt := range opts {
+		switch opt {
+		case AllowDuplicates:
+			w.allowDuplicates = true
+		}
+	}
 	defer w.finished()
 	if errs := w.validate(nil); len(errs) != 0 {
 		return errs
@@ -117,6 +129,10 @@ func (tv TypedValue) Merge(pso *TypedValue) (*TypedValue, error) {
 	return merge(&tv, pso, ruleKeepRHS, nil)
 }
 
+var cmpwPool = sync.Pool{
+	New: func() interface{} { return &compareWalker{} },
+}
+
 // Compare compares the two objects. See the comments on the `Comparison`
 // struct for details on the return value.
 //
@@ -124,34 +140,44 @@ func (tv TypedValue) Merge(pso *TypedValue) (*TypedValue, error) {
 // match), or an error will be returned. Validation errors will be returned if
 // the objects don't conform to the schema.
 func (tv TypedValue) Compare(rhs *TypedValue) (c *Comparison, err error) {
-	c = &Comparison{
+	lhs := tv
+	if lhs.schema != rhs.schema {
+		return nil, errorf("expected objects with types from the same schema")
+	}
+	if !lhs.typeRef.Equals(&rhs.typeRef) {
+		return nil, errorf("expected objects of the same type, but got %v and %v", lhs.typeRef, rhs.typeRef)
+	}
+
+	cmpw := cmpwPool.Get().(*compareWalker)
+	defer func() {
+		cmpw.lhs = nil
+		cmpw.rhs = nil
+		cmpw.schema = nil
+		cmpw.typeRef = schema.TypeRef{}
+		cmpw.comparison = nil
+		cmpw.inLeaf = false
+
+		cmpwPool.Put(cmpw)
+	}()
+
+	cmpw.lhs = lhs.value
+	cmpw.rhs = rhs.value
+	cmpw.schema = lhs.schema
+	cmpw.typeRef = lhs.typeRef
+	cmpw.comparison = &Comparison{
 		Removed:  fieldpath.NewSet(),
 		Modified: fieldpath.NewSet(),
 		Added:    fieldpath.NewSet(),
 	}
-	a := value.NewFreelistAllocator()
-	_, err = merge(&tv, rhs, func(w *mergingWalker) {
-		if w.lhs == nil {
-			c.Added.Insert(w.path)
-		} else if w.rhs == nil {
-			c.Removed.Insert(w.path)
-		} else if !value.EqualsUsing(a, w.rhs, w.lhs) {
-			// TODO: Equality is not sufficient for this.
-			// Need to implement equality check on the value type.
-			c.Modified.Insert(w.path)
-		}
-	}, func(w *mergingWalker) {
-		if w.lhs == nil {
-			c.Added.Insert(w.path)
-		} else if w.rhs == nil {
-			c.Removed.Insert(w.path)
-		}
-	})
-	if err != nil {
-		return nil, err
+	if cmpw.allocator == nil {
+		cmpw.allocator = value.NewFreelistAllocator()
 	}
 
-	return c, nil
+	errs := cmpw.compare(nil)
+	if len(errs) > 0 {
+		return nil, errs
+	}
+	return cmpw.comparison, nil
 }
 
 // RemoveItems removes each provided list or map item from the value.
@@ -166,63 +192,6 @@ func (tv TypedValue) ExtractItems(items *fieldpath.Set) *TypedValue {
 	return &tv
 }
 
-// NormalizeUnions takes the new object and normalizes the union:
-// - If discriminator changed to non-nil, and a new field has been added
-// that doesn't match, an error is returned,
-// - If discriminator hasn't changed and two fields or more are set, an
-// error is returned,
-// - If discriminator changed to non-nil, all other fields but the
-// discriminated one will be cleared,
-// - Otherwise, If only one field is left, update discriminator to that value.
-//
-// Please note: union behavior isn't finalized yet and this is still experimental.
-func (tv TypedValue) NormalizeUnions(new *TypedValue) (*TypedValue, error) {
-	var errs ValidationErrors
-	var normalizeFn = func(w *mergingWalker) {
-		if w.rhs != nil {
-			v := w.rhs.Unstructured()
-			w.out = &v
-		}
-		if err := normalizeUnions(w); err != nil {
-			errs = append(errs, errorf(err.Error())...)
-		}
-	}
-	out, mergeErrs := merge(&tv, new, func(w *mergingWalker) {}, normalizeFn)
-	if mergeErrs != nil {
-		errs = append(errs, mergeErrs.(ValidationErrors)...)
-	}
-	if len(errs) > 0 {
-		return nil, errs
-	}
-	return out, nil
-}
-
-// NormalizeUnionsApply specifically normalize unions on apply. It
-// validates that the applied union is correct (there should be no
-// ambiguity there), and clear the fields according to the sent intent.
-//
-// Please note: union behavior isn't finalized yet and this is still experimental.
-func (tv TypedValue) NormalizeUnionsApply(new *TypedValue) (*TypedValue, error) {
-	var errs ValidationErrors
-	var normalizeFn = func(w *mergingWalker) {
-		if w.rhs != nil {
-			v := w.rhs.Unstructured()
-			w.out = &v
-		}
-		if err := normalizeUnionsApply(w); err != nil {
-			errs = append(errs, errorf(err.Error())...)
-		}
-	}
-	out, mergeErrs := merge(&tv, new, func(w *mergingWalker) {}, normalizeFn)
-	if mergeErrs != nil {
-		errs = append(errs, mergeErrs.(ValidationErrors)...)
-	}
-	if len(errs) > 0 {
-		return nil, errs
-	}
-	return out, nil
-}
-
 func (tv TypedValue) Empty() *TypedValue {
 	tv.value = value.NewValueInterface(nil)
 	return &tv
@@ -278,50 +247,3 @@ func merge(lhs, rhs *TypedValue, rule, postRule mergeRule) (*TypedValue, error)
 	}
 	return out, nil
 }
-
-// Comparison is the return value of a TypedValue.Compare() operation.
-//
-// No field will appear in more than one of the three fieldsets. If all of the
-// fieldsets are empty, then the objects must have been equal.
-type Comparison struct {
-	// Removed contains any fields removed by rhs (the right-hand-side
-	// object in the comparison).
-	Removed *fieldpath.Set
-	// Modified contains fields present in both objects but different.
-	Modified *fieldpath.Set
-	// Added contains any fields added by rhs.
-	Added *fieldpath.Set
-}
-
-// IsSame returns true if the comparison returned no changes (the two
-// compared objects are similar).
-func (c *Comparison) IsSame() bool {
-	return c.Removed.Empty() && c.Modified.Empty() && c.Added.Empty()
-}
-
-// String returns a human readable version of the comparison.
-func (c *Comparison) String() string {
-	bld := strings.Builder{}
-	if !c.Modified.Empty() {
-		bld.WriteString(fmt.Sprintf("- Modified Fields:\n%v\n", c.Modified))
-	}
-	if !c.Added.Empty() {
-		bld.WriteString(fmt.Sprintf("- Added Fields:\n%v\n", c.Added))
-	}
-	if !c.Removed.Empty() {
-		bld.WriteString(fmt.Sprintf("- Removed Fields:\n%v\n", c.Removed))
-	}
-	return bld.String()
-}
-
-// ExcludeFields fields from the compare recursively removes the fields
-// from the entire comparison
-func (c *Comparison) ExcludeFields(fields *fieldpath.Set) *Comparison {
-	if fields == nil || fields.Empty() {
-		return c
-	}
-	c.Removed = c.Removed.RecursiveDifference(fields)
-	c.Modified = c.Modified.RecursiveDifference(fields)
-	c.Added = c.Added.RecursiveDifference(fields)
-	return c
-}
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/union.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/union.go
deleted file mode 100644
index 1fa5d88ae63..00000000000
--- a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/union.go
+++ /dev/null
@@ -1,276 +0,0 @@
-/*
-Copyright 2019 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package typed
-
-import (
-	"fmt"
-	"strings"
-
-	"sigs.k8s.io/structured-merge-diff/v4/schema"
-	"sigs.k8s.io/structured-merge-diff/v4/value"
-)
-
-func normalizeUnions(w *mergingWalker) error {
-	atom, found := w.schema.Resolve(w.typeRef)
-	if !found {
-		panic(fmt.Sprintf("Unable to resolve schema in normalize union: %v/%v", w.schema, w.typeRef))
-	}
-	// Unions can only be in structures, and the struct must not have been removed
-	if atom.Map == nil || w.out == nil {
-		return nil
-	}
-
-	var old value.Map
-	if w.lhs != nil && !w.lhs.IsNull() {
-		old = w.lhs.AsMap()
-	}
-	for _, union := range atom.Map.Unions {
-		if err := newUnion(&union).Normalize(old, w.rhs.AsMap(), value.NewValueInterface(*w.out).AsMap()); err != nil {
-			return err
-		}
-	}
-	return nil
-}
-
-func normalizeUnionsApply(w *mergingWalker) error {
-	atom, found := w.schema.Resolve(w.typeRef)
-	if !found {
-		panic(fmt.Sprintf("Unable to resolve schema in normalize union: %v/%v", w.schema, w.typeRef))
-	}
-	// Unions can only be in structures, and the struct must not have been removed
-	if atom.Map == nil || w.out == nil {
-		return nil
-	}
-
-	var old value.Map
-	if w.lhs != nil && !w.lhs.IsNull() {
-		old = w.lhs.AsMap()
-	}
-
-	for _, union := range atom.Map.Unions {
-		out := value.NewValueInterface(*w.out)
-		if err := newUnion(&union).NormalizeApply(old, w.rhs.AsMap(), out.AsMap()); err != nil {
-			return err
-		}
-		*w.out = out.Unstructured()
-	}
-	return nil
-}
-
-type discriminated string
-type field string
-
-type discriminatedNames struct {
-	f2d map[field]discriminated
-	d2f map[discriminated]field
-}
-
-func newDiscriminatedName(f2d map[field]discriminated) discriminatedNames {
-	d2f := map[discriminated]field{}
-	for key, value := range f2d {
-		d2f[value] = key
-	}
-	return discriminatedNames{
-		f2d: f2d,
-		d2f: d2f,
-	}
-}
-
-func (dn discriminatedNames) toField(d discriminated) field {
-	if f, ok := dn.d2f[d]; ok {
-		return f
-	}
-	return field(d)
-}
-
-func (dn discriminatedNames) toDiscriminated(f field) discriminated {
-	if d, ok := dn.f2d[f]; ok {
-		return d
-	}
-	return discriminated(f)
-}
-
-type discriminator struct {
-	name string
-}
-
-func (d *discriminator) Set(m value.Map, v discriminated) {
-	if d == nil {
-		return
-	}
-	m.Set(d.name, value.NewValueInterface(string(v)))
-}
-
-func (d *discriminator) Get(m value.Map) discriminated {
-	if d == nil || m == nil {
-		return ""
-	}
-	val, ok := m.Get(d.name)
-	if !ok {
-		return ""
-	}
-	if !val.IsString() {
-		return ""
-	}
-	return discriminated(val.AsString())
-}
-
-type fieldsSet map[field]struct{}
-
-// newFieldsSet returns a map of the fields that are part of the union and are set
-// in the given map.
-func newFieldsSet(m value.Map, fields []field) fieldsSet {
-	if m == nil {
-		return nil
-	}
-	set := fieldsSet{}
-	for _, f := range fields {
-		if subField, ok := m.Get(string(f)); ok && !subField.IsNull() {
-			set.Add(f)
-		}
-	}
-	return set
-}
-
-func (fs fieldsSet) Add(f field) {
-	if fs == nil {
-		fs = map[field]struct{}{}
-	}
-	fs[f] = struct{}{}
-}
-
-func (fs fieldsSet) One() *field {
-	for f := range fs {
-		return &f
-	}
-	return nil
-}
-
-func (fs fieldsSet) Has(f field) bool {
-	_, ok := fs[f]
-	return ok
-}
-
-func (fs fieldsSet) List() []field {
-	fields := []field{}
-	for f := range fs {
-		fields = append(fields, f)
-	}
-	return fields
-}
-
-func (fs fieldsSet) Difference(o fieldsSet) fieldsSet {
-	n := fieldsSet{}
-	for f := range fs {
-		if !o.Has(f) {
-			n.Add(f)
-		}
-	}
-	return n
-}
-
-func (fs fieldsSet) String() string {
-	s := []string{}
-	for k := range fs {
-		s = append(s, string(k))
-	}
-	return strings.Join(s, ", ")
-}
-
-type union struct {
-	deduceInvalidDiscriminator bool
-	d                          *discriminator
-	dn                         discriminatedNames
-	f                          []field
-}
-
-func newUnion(su *schema.Union) *union {
-	u := &union{}
-	if su.Discriminator != nil {
-		u.d = &discriminator{name: *su.Discriminator}
-	}
-	f2d := map[field]discriminated{}
-	for _, f := range su.Fields {
-		u.f = append(u.f, field(f.FieldName))
-		f2d[field(f.FieldName)] = discriminated(f.DiscriminatorValue)
-	}
-	u.dn = newDiscriminatedName(f2d)
-	u.deduceInvalidDiscriminator = su.DeduceInvalidDiscriminator
-	return u
-}
-
-// clear removes all the fields in map that are part of the union, but
-// the one we decided to keep.
-func (u *union) clear(m value.Map, f field) {
-	for _, fieldName := range u.f {
-		if field(fieldName) != f {
-			m.Delete(string(fieldName))
-		}
-	}
-}
-
-func (u *union) Normalize(old, new, out value.Map) error {
-	os := newFieldsSet(old, u.f)
-	ns := newFieldsSet(new, u.f)
-	diff := ns.Difference(os)
-
-	if u.d.Get(old) != u.d.Get(new) && u.d.Get(new) != "" {
-		if len(diff) == 1 && u.d.Get(new) != u.dn.toDiscriminated(*diff.One()) {
-			return fmt.Errorf("discriminator (%v) and field changed (%v) don't match", u.d.Get(new), diff.One())
-		}
-		if len(diff) > 1 {
-			return fmt.Errorf("multiple new fields added: %v", diff)
-		}
-		u.clear(out, u.dn.toField(u.d.Get(new)))
-		return nil
-	}
-
-	if len(ns) > 1 {
-		return fmt.Errorf("multiple fields set without discriminator change: %v", ns)
-	}
-
-	// Set discriminiator if it needs to be deduced.
-	if u.deduceInvalidDiscriminator && len(ns) == 1 {
-		u.d.Set(out, u.dn.toDiscriminated(*ns.One()))
-	}
-
-	return nil
-}
-
-func (u *union) NormalizeApply(applied, merged, out value.Map) error {
-	as := newFieldsSet(applied, u.f)
-	if len(as) > 1 {
-		return fmt.Errorf("more than one field of union applied: %v", as)
-	}
-	if len(as) == 0 {
-		// None is set, just leave.
-		return nil
-	}
-	// We have exactly one, discriminiator must match if set
-	if u.d.Get(applied) != "" && u.d.Get(applied) != u.dn.toDiscriminated(*as.One()) {
-		return fmt.Errorf("applied discriminator (%v) doesn't match applied field (%v)", u.d.Get(applied), *as.One())
-	}
-
-	// Update discriminiator if needed
-	if u.deduceInvalidDiscriminator {
-		u.d.Set(out, u.dn.toDiscriminated(*as.One()))
-	}
-	// Clear others fields.
-	u.clear(out, *as.One())
-
-	return nil
-}
diff --git a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/validate.go b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/validate.go
index edddbafa42d..652e24c819a 100644
--- a/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/validate.go
+++ b/vendor/sigs.k8s.io/structured-merge-diff/v4/typed/validate.go
@@ -33,6 +33,7 @@ func (tv TypedValue) walker() *validatingObjectWalker {
 	v.value = tv.value
 	v.schema = tv.schema
 	v.typeRef = tv.typeRef
+	v.allowDuplicates = false
 	if v.allocator == nil {
 		v.allocator = value.NewFreelistAllocator()
 	}
@@ -49,6 +50,9 @@ type validatingObjectWalker struct {
 	value   value.Value
 	schema  *schema.Schema
 	typeRef schema.TypeRef
+	// If set to true, duplicates will be allowed in
+	// associativeLists/sets.
+	allowDuplicates bool
 
 	// Allocate only as many walkers as needed for the depth by storing them here.
 	spareWalkers *[]*validatingObjectWalker
@@ -129,7 +133,7 @@ func (v *validatingObjectWalker) visitListItems(t *schema.List, list value.List)
 			pe.Index = &i
 		} else {
 			var err error
-			pe, err = listItemToPathElement(v.allocator, v.schema, t, i, child)
+			pe, err = listItemToPathElement(v.allocator, v.schema, t, child)
 			if err != nil {
 				errs = append(errs, errorf("element %v: %v", i, err.Error())...)
 				// If we can't construct the path element, we can't
@@ -137,7 +141,7 @@ func (v *validatingObjectWalker) visitListItems(t *schema.List, list value.List)
 				// this element.
 				return
 			}
-			if observedKeys.Has(pe) {
+			if observedKeys.Has(pe) && !v.allowDuplicates {
 				errs = append(errs, errorf("duplicate entries for key %v", pe.String())...)
 			}
 			observedKeys.Insert(pe)

From f09a1115a9c6cd483bb5bc47fc22847f63f2691b Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Wed, 28 Feb 2024 00:25:55 +0000
Subject: [PATCH 130/132] [bot] assets: generate

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
---
 web/ui/embed.go                               |   2 +-
 web/ui/static/css/prom_console.css.gz         | Bin 1042 -> 1042 bytes
 web/ui/static/js/prom_console.js.gz           | Bin 5951 -> 5951 bytes
 web/ui/static/react/asset-manifest.json.gz    | Bin 271 -> 271 bytes
 web/ui/static/react/favicon.ico.gz            | Bin 3448 -> 3448 bytes
 web/ui/static/react/index.html.gz             | Bin 463 -> 463 bytes
 web/ui/static/react/manifest.json.gz          | Bin 233 -> 233 bytes
 .../react/static/css/main.132f8bd2.css.gz     | Bin 54088 -> 54088 bytes
 .../static/js/main.7cb5d3cf.js.LICENSE.txt.gz | Bin 0 -> 716 bytes
 .../react/static/js/main.7cb5d3cf.js.gz       | Bin 0 -> 491412 bytes
 .../media/codicon.b3726f0165bf67ac6849.ttf.gz | Bin 38773 -> 38773 bytes
 .../media/index.cd351d7c31d0d3fccf96.cjs.gz   | Bin 277 -> 277 bytes
 ...ey.3cf697e5443028ca5e5255b93c7906c5.svg.gz | Bin 944 -> 944 bytes
 .../bootstrap-4.5.2/css/bootstrap-grid.css.gz | Bin 7126 -> 7126 bytes
 .../css/bootstrap-grid.css.map.gz             | Bin 27889 -> 27889 bytes
 .../css/bootstrap-grid.min.css.gz             | Bin 6207 -> 6207 bytes
 .../css/bootstrap-grid.min.css.map.gz         | Bin 14657 -> 14657 bytes
 .../css/bootstrap-reboot.css.gz               | Bin 1731 -> 1731 bytes
 .../css/bootstrap-reboot.css.map.gz           | Bin 17344 -> 17344 bytes
 .../css/bootstrap-reboot.min.css.gz           | Bin 1626 -> 1626 bytes
 .../css/bootstrap-reboot.min.css.map.gz       | Bin 8179 -> 8179 bytes
 .../bootstrap-4.5.2/css/bootstrap.css.gz      | Bin 26150 -> 26150 bytes
 .../bootstrap-4.5.2/css/bootstrap.css.map.gz  | Bin 101408 -> 101408 bytes
 .../bootstrap-4.5.2/css/bootstrap.min.css.gz  | Bin 23819 -> 23819 bytes
 .../css/bootstrap.min.css.map.gz              | Bin 105018 -> 105018 bytes
 .../bootstrap-4.5.2/js/bootstrap.bundle.js.gz | Bin 48699 -> 48699 bytes
 .../js/bootstrap.bundle.js.map.gz             | Bin 92995 -> 92995 bytes
 .../js/bootstrap.bundle.min.js.gz             | Bin 21672 -> 21672 bytes
 .../js/bootstrap.bundle.min.js.map.gz         | Bin 83090 -> 83090 bytes
 .../vendor/bootstrap-4.5.2/js/bootstrap.js.gz | Bin 25582 -> 25582 bytes
 .../bootstrap-4.5.2/js/bootstrap.js.map.gz    | Bin 59080 -> 59080 bytes
 .../bootstrap-4.5.2/js/bootstrap.min.js.gz    | Bin 14781 -> 14781 bytes
 .../js/bootstrap.min.js.map.gz                | Bin 47357 -> 47357 bytes
 .../css/bootstrap-glyphicons.css.gz           | Bin 2604 -> 2604 bytes
 .../css/bootstrap-glyphicons.min.css.gz       | Bin 2537 -> 2537 bytes
 .../fonts/fontawesome/fa-brands-400.eot.gz    | Bin 64822 -> 64822 bytes
 .../fonts/fontawesome/fa-brands-400.svg.gz    | Bin 164467 -> 164467 bytes
 .../fonts/fontawesome/fa-brands-400.ttf.gz    | Bin 64712 -> 64712 bytes
 .../fonts/fontawesome/fa-brands-400.woff.gz   | Bin 63755 -> 63755 bytes
 .../fonts/fontawesome/fa-brands-400.woff2.gz  | Bin 54468 -> 54468 bytes
 .../fonts/fontawesome/fa-regular-400.eot.gz   | Bin 14942 -> 14942 bytes
 .../fonts/fontawesome/fa-regular-400.svg.gz   | Bin 36741 -> 36741 bytes
 .../fonts/fontawesome/fa-regular-400.ttf.gz   | Bin 14953 -> 14953 bytes
 .../fonts/fontawesome/fa-regular-400.woff.gz  | Bin 14734 -> 14734 bytes
 .../fonts/fontawesome/fa-regular-400.woff2.gz | Bin 12264 -> 12264 bytes
 .../fonts/fontawesome/fa-solid-900.eot.gz     | Bin 49857 -> 49857 bytes
 .../fonts/fontawesome/fa-solid-900.svg.gz     | Bin 129484 -> 129484 bytes
 .../fonts/fontawesome/fa-solid-900.ttf.gz     | Bin 49760 -> 49760 bytes
 .../fonts/fontawesome/fa-solid-900.woff.gz    | Bin 48743 -> 48743 bytes
 .../fonts/fontawesome/fa-solid-900.woff2.gz   | Bin 38799 -> 38799 bytes
 .../glyphicons-halflings-regular.eot.gz       | Bin 20083 -> 20083 bytes
 .../glyphicons-halflings-regular.svg.gz       | Bin 26850 -> 26850 bytes
 .../glyphicons-halflings-regular.ttf.gz       | Bin 23542 -> 23542 bytes
 .../glyphicons-halflings-regular.woff.gz      | Bin 23172 -> 23172 bytes
 .../glyphicons-halflings-regular.woff2.gz     | Bin 18065 -> 18065 bytes
 .../maps/glyphicons-fontawesome.css.gz        | Bin 8113 -> 8113 bytes
 .../maps/glyphicons-fontawesome.less.gz       | Bin 8534 -> 8534 bytes
 .../maps/glyphicons-fontawesome.min.css.gz    | Bin 8006 -> 8006 bytes
 .../static/vendor/js/jquery-3.5.1.min.js.gz   | Bin 30848 -> 30848 bytes
 web/ui/static/vendor/js/jquery.hotkeys.js.gz  | Bin 1775 -> 1775 bytes
 .../static/vendor/js/jquery.selection.js.gz   | Bin 2732 -> 2732 bytes
 web/ui/static/vendor/js/popper.min.js.gz      | Bin 6967 -> 6967 bytes
 .../vendor/rickshaw/rickshaw.min.css.gz       | Bin 1475 -> 1475 bytes
 .../static/vendor/rickshaw/rickshaw.min.js.gz | Bin 17974 -> 17974 bytes
 .../rickshaw/vendor/d3.layout.min.js.gz       | Bin 6491 -> 6491 bytes
 .../static/vendor/rickshaw/vendor/d3.v3.js.gz | Bin 49835 -> 49835 bytes
 66 files changed, 1 insertion(+), 1 deletion(-)
 create mode 100644 web/ui/static/react/static/js/main.7cb5d3cf.js.LICENSE.txt.gz
 create mode 100644 web/ui/static/react/static/js/main.7cb5d3cf.js.gz

diff --git a/web/ui/embed.go b/web/ui/embed.go
index 5b235e1f6e0..59310997332 100644
--- a/web/ui/embed.go
+++ b/web/ui/embed.go
@@ -18,5 +18,5 @@ package ui
 
 import "embed"
 
-//go:embed static/css/prom_console.css.gz static/js/prom_console.js.gz static/vendor/bootstrap-4.5.2/css/bootstrap-grid.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap-grid.css.map.gz static/vendor/bootstrap-4.5.2/css/bootstrap-grid.min.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap-grid.min.css.map.gz static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.css.map.gz static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.min.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.min.css.map.gz static/vendor/bootstrap-4.5.2/css/bootstrap.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap.css.map.gz static/vendor/bootstrap-4.5.2/css/bootstrap.min.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap.min.css.map.gz static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.js.gz static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.js.map.gz static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.min.js.gz static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.min.js.map.gz static/vendor/bootstrap-4.5.2/js/bootstrap.js.gz static/vendor/bootstrap-4.5.2/js/bootstrap.js.map.gz static/vendor/bootstrap-4.5.2/js/bootstrap.min.js.gz static/vendor/bootstrap-4.5.2/js/bootstrap.min.js.map.gz static/vendor/bootstrap4-glyphicons/css/bootstrap-glyphicons.css.gz static/vendor/bootstrap4-glyphicons/css/bootstrap-glyphicons.min.css.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.eot.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.svg.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.ttf.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.woff.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.woff2.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.eot.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.svg.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.ttf.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.woff.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.woff2.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.eot.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.svg.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.ttf.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.woff.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.woff2.gz static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.eot.gz static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.svg.gz static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.ttf.gz static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.woff.gz static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.woff2.gz static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.css.gz static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.less.gz static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.min.css.gz static/vendor/js/jquery.hotkeys.js.gz static/vendor/js/jquery.selection.js.gz static/vendor/js/jquery-3.5.1.min.js.gz static/vendor/js/popper.min.js.gz static/vendor/rickshaw/rickshaw.min.css.gz static/vendor/rickshaw/rickshaw.min.js.gz static/vendor/rickshaw/vendor/d3.layout.min.js.gz static/vendor/rickshaw/vendor/d3.v3.js.gz static/react/favicon.ico.gz static/react/manifest.json.gz static/react/static/media/codicon.b3726f0165bf67ac6849.ttf.gz static/react/static/media/prometheus_logo_grey.3cf697e5443028ca5e5255b93c7906c5.svg.gz static/react/static/media/index.cd351d7c31d0d3fccf96.cjs.gz static/react/static/css/main.132f8bd2.css.gz static/react/static/js/main.90fe45be.js.LICENSE.txt.gz static/react/static/js/main.90fe45be.js.gz static/react/index.html.gz static/react/asset-manifest.json.gz
+//go:embed static/css/prom_console.css.gz static/js/prom_console.js.gz static/react/asset-manifest.json.gz static/react/favicon.ico.gz static/react/index.html.gz static/react/manifest.json.gz static/react/static/css/main.132f8bd2.css.gz static/react/static/js/main.7cb5d3cf.js.LICENSE.txt.gz static/react/static/js/main.7cb5d3cf.js.gz static/react/static/media/codicon.b3726f0165bf67ac6849.ttf.gz static/react/static/media/index.cd351d7c31d0d3fccf96.cjs.gz static/react/static/media/prometheus_logo_grey.3cf697e5443028ca5e5255b93c7906c5.svg.gz static/vendor/bootstrap-4.5.2/css/bootstrap-grid.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap-grid.css.map.gz static/vendor/bootstrap-4.5.2/css/bootstrap-grid.min.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap-grid.min.css.map.gz static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.css.map.gz static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.min.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.min.css.map.gz static/vendor/bootstrap-4.5.2/css/bootstrap.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap.css.map.gz static/vendor/bootstrap-4.5.2/css/bootstrap.min.css.gz static/vendor/bootstrap-4.5.2/css/bootstrap.min.css.map.gz static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.js.gz static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.js.map.gz static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.min.js.gz static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.min.js.map.gz static/vendor/bootstrap-4.5.2/js/bootstrap.js.gz static/vendor/bootstrap-4.5.2/js/bootstrap.js.map.gz static/vendor/bootstrap-4.5.2/js/bootstrap.min.js.gz static/vendor/bootstrap-4.5.2/js/bootstrap.min.js.map.gz static/vendor/bootstrap4-glyphicons/css/bootstrap-glyphicons.css.gz static/vendor/bootstrap4-glyphicons/css/bootstrap-glyphicons.min.css.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.eot.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.svg.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.ttf.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.woff.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.woff2.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.eot.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.svg.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.ttf.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.woff.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.woff2.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.eot.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.svg.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.ttf.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.woff.gz static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.woff2.gz static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.eot.gz static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.svg.gz static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.ttf.gz static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.woff.gz static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.woff2.gz static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.css.gz static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.less.gz static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.min.css.gz static/vendor/js/jquery-3.5.1.min.js.gz static/vendor/js/jquery.hotkeys.js.gz static/vendor/js/jquery.selection.js.gz static/vendor/js/popper.min.js.gz static/vendor/rickshaw/rickshaw.min.css.gz static/vendor/rickshaw/rickshaw.min.js.gz static/vendor/rickshaw/vendor/d3.layout.min.js.gz static/vendor/rickshaw/vendor/d3.v3.js.gz
 var EmbedFS embed.FS
diff --git a/web/ui/static/css/prom_console.css.gz b/web/ui/static/css/prom_console.css.gz
index 4854b704742f8a9ea32a7750188c0a9b454468ea..393c4928894f5b487da4e7538acd4477322f6602 100644
GIT binary patch
delta 16
XcmbQlF^Pj+zMF$Xx%S>hc5W5`B-aEx

delta 16
XcmbQlF^Pj+zMF&NakAJ(c5W5`C6fdh

diff --git a/web/ui/static/js/prom_console.js.gz b/web/ui/static/js/prom_console.js.gz
index 58f980f60d9f34b9bd6befe4593e7c719549f27b..be3049faa4477425b962268ccb7c9d2e24cc257f 100644
GIT binary patch
delta 16
Xcmdn5w_lH4zMF$Xx%S>hb_;O;F0ut7

delta 16
Xcmdn5w_lH4zMF$1<F~^`b_;O;FmnY)

diff --git a/web/ui/static/react/asset-manifest.json.gz b/web/ui/static/react/asset-manifest.json.gz
index ac36297cc68b3be81188d3b29801375fa43a6c9c..53043acc0162d2b917736d669ff0f901ae571358 100644
GIT binary patch
literal 271
zcmV+q0r37GiwFpkecojN17UM>WppiVVQy(=Wpi{cYIARH0DY0oZo?oDgztF@%jXLJ
zV8G;6swy%II7Bu?hE|QDyn8Y6Ayih5!_0iUV(*8dD7BfCFOS7NiYVv7SOk83DN*Ia
z5DZjNSIKB_t9v2al=ygQT=K$Y%QFx}V$iF<#ka()q!}u3(txul1fBJBS76psT{n~n
zP1yjn?|7>0A+L*@RXD3}f12FrPUE6($p4Hx{M~5WmU5;@*WtSDVIYdMgb0p-@tOij
ztZlHdQvITHn5QTGMenWlwBg@hWuC;OkqmGnYl$_0<}?)|?Xe<DWy5m2I%C61`OK!g
VJ=2@Z#K70#@dtHJ(Vq?i006iHh!+3=

literal 271
zcmV+q0r37GiwFox?x<w|17UM>WppiVVQy(=Wpi{cYIARH0DY0sj)Nc&Mc?}s#^((x
z2ugotvuSh~ER9Md>}H#$|Gr3lC>ztq%f0u^gt;HGEZ1g4mmjlx5J66znF+Y{B`1aR
zoi|VfT|}c|RJXmNG4b)zxTJ;4mY1c*n)kT+TYO7Qs7zOYRR-)#yw^!Tb$ixOq036}
zUW=v!(bh6n_K?@bPUz40?M|Z|>}go=M%>S^!{3cE&_XuI>zb9cg^nYqocEGJBTE51
zvbMoyR`^TKej1<j7rnRI(}sV4m3WHrN;SYLRVt<dv=p%rXpa?{<LsB))tcF_l+R?!
V+cUknObC1(9)AQs4=WA=005)xh6w-w

diff --git a/web/ui/static/react/favicon.ico.gz b/web/ui/static/react/favicon.ico.gz
index ba62860ffbf0512c5ada8a87e7282eea5570a294..c20c33ad1f7f03147eb6c0ef260b2a57d19389fb 100755
GIT binary patch
delta 16
Xcmew%^+SqXzMF$1tM=YT_Cj6&HHih`

delta 16
Xcmew%^+SqXzMF$X^WBP#?1j7lHChGR

diff --git a/web/ui/static/react/index.html.gz b/web/ui/static/react/index.html.gz
index ddd23afc80c034caaaf0726ed8c6df1cd129d60c..9223acbabef5dc33b318e75275e1388e458c35cd 100644
GIT binary patch
literal 463
zcmV;=0Wkg_iwFpkecojN18Ht#Wq2-VbZu+^ZBk8d+b|6ME1GtV?X|_Q9;^UaV|3lT
zW@vKhDNrQ3R;NgY$fU@>AC<UkGt37`{CMw?H0uvG8afOhdfNJFoloI)cv2FAWE-@d
z)>|MgOs^9HDY>JrxR%wl_AdMu3A~cn$3$jF!kHMP=o55GmQ|<s*-`S5^N%z^Z$Zhu
zgO`CZQgECgFzt)8)GG@Nf#PUPTyW&HFVJWY>SBU@V#$JH(K%A#UsCE}3x$b3rgyv_
zKOMiEizc~&rW`^Nx9#HVtX<zM?w5<US+3i=`yWc4nd@Ke?56p)Xy?s?oQ#0kZF9d`
z|6I%)CEwovO?_x)^G79**I7bcjitPs;Z_IN0n*#}UOnYA=Bb(#5o2;sF7Qu4?lghr
z7I{LLyCX*)rmMSEdsa<dodRR`!a@g0$>SvjCX=O*G&xf}Ba6CFeleTR_R4gu%u8@y
z>}z!+#NddzxVr4FH}<k*j~v&64j!-vpv-dGrA@R4VZ26EauXvVB|UIB#8Krj?nD5v
zf}((+Hy*@yz1PcA_3TW$AgFgJ^e~il^%q!Mw-?STnV2>Uvdw1}%<6f+{{Vf;RtN6_
F002<C<8S}~

literal 463
zcmV;=0Wkg_iwFox?x<w|18Ht#Wq2-VbZu+^ZBk8d+b|6ME1GtV?Y7&17O(<jjnQ@U
z;-Sf<r$CYDTAeHzB9kKjev;#^%`hJ%@#DQm(kwq{ujn`c>!`Q$GM&sy_arzt9&M0%
zUiLtesZIt25`0f>cFl`<X^s2M0$9PZ^MTZ!m{Hzw)&*z<&x=+bk|U2t${%T*>_PB@
zftMj-IE!%t7inLNrcP*x5XeSjW}G1-ZH7u(5SKITLX^zNXRRUO{w1XjddQTwKD^`o
zcrkt{7gaC=&0`3O-PO(4MZLXkR_ms&*4z4i^+WJ8bNj1a+*aS3dRaa2*#ubJRjbYR
zXS1vXe|!Ho^`TlU9|a$;vxKskN_jWKUOLkP(%bl6J^3@HsjA=+eK1eP#h-w&(*QcQ
z7$=0OJ2GTpzPaDjXVsL&DKK@<G_()|A1}@@s3e6X$*AHPqo{HD%|#2Jzw96?$0ax~
z_O-eRqHw}oe!6O}cls)i9zLxF9W7u7K#AqFOFOTROj(I2_|AJm3UY{H=O>j%zh@3W
zGx7|a+*x4X<w34b)kkO8J4T&BCWj#}i@(59n*%di@DOQ}V6@|z1e1E&?>{n<P4@2s
F001>K-@pI>

diff --git a/web/ui/static/react/manifest.json.gz b/web/ui/static/react/manifest.json.gz
index 636d59bc8daf6e84c50d4770c896d0e460a9afa2..17f62000bfdf5feeac71b07354fb68ca78f74e7a 100755
GIT binary patch
delta 15
WcmaFK_>z%bzMF$1tM=YR_D29Kiv`sH

delta 15
WcmaFK_>z%bzMF$X^WBPx?2iB|Vg=6t

diff --git a/web/ui/static/react/static/css/main.132f8bd2.css.gz b/web/ui/static/react/static/css/main.132f8bd2.css.gz
index 334e3afb06cef77df3e2a7a9b0ae5412f8341a4c..0874422c7a1f7c13013f5c841c3d6df0a00f22ee 100644
GIT binary patch
delta 18
acmX@HjQPYeW_I~*4vtB+_cpRSUIqX~S_fSK

delta 18
acmX@HjQPYeW_I~*4i2w(D>kw_UIqX}`Ug+|

diff --git a/web/ui/static/react/static/js/main.7cb5d3cf.js.LICENSE.txt.gz b/web/ui/static/react/static/js/main.7cb5d3cf.js.LICENSE.txt.gz
new file mode 100644
index 0000000000000000000000000000000000000000..1cfc4889f673d19e70d6c878d78eedf47575e6f1
GIT binary patch
literal 716
zcmV;-0yF&|iwFpkecojN18rexZZ0=tVl`wlV`eUDb1qCtLq$$gMJ{xBbO7a6+iu!G
z5PgonV)6zEuK|;gqN<9Tq*73N3rLmvwzdbn#NKsx*R<)^ch(mmgj9WQB!uPh%${@h
z%&Z;sJQb}mwmvsTtfbe8yD%3r(Fk*;)6#gCnTSyugpaoiuNQb;&^z@`u2k`;#VWPn
zDn^6h1<WvkZ`>LsnRjwm7bQ^21U1;Ss)r^F9lGiE!614kskOy42-cYVtgBbTre(y0
z3gV1tNuHzGB0~>^@r#TL>DScZty{s+5=~*O@?fo`iPKET2h=t=sCY-KxP_jH82j`$
z>BCG(m~YFO%e}`8`HO;F%8uarYl-?1W_-ivu@;4;v`BLbZ9+C-LzmNXUjJ~p73XKH
zJ{KrwbNHYLlUqTgxJ*D1wuV?qt3^~=rOjXXHRc^bRC*Qcp1Oo<ZgEQ6Fbe&_g+IDj
z48v(S`M#9~8doS$bHem>DXqv6eE--s78(so+lLQ4#z?7$KHSQfx$JDe1*UMsyJb@o
z?BNAbrlKGx4}-hgtD8^ro0ipOg{3!@#s%g@Y2aGrLellUQr1|_i!p4@Sonqwpwj}{
zDmAGy_j)dBYy5H0ed-5EJEsmA4P1k8n{o+X(4sbtGl!lW41x2bb42eGCVTi{E7}l7
zE4$m;(Sz+|-Xo_m*bLZ+eh!#gACode%?hoOGIqVgXnD3aM_d2EC8tGL1AMs@nV_yP
ztSMWh!hlhwj*-+RNVC`)`a<Wy(seHg=^j*@(%45!V-p5VnjsOIW>e9Ws3k>rKvv^!
zz@Ez<p0i<C50!QiUzk@Rd%_yGYt__0uTl2e{A$mlS1A9#lN_8LQ2(d*UsbnvqUI{6
yw@-8NU2ptW66>^<_q6(;sX_;NZWs6B+uIGD^p3<72JDQDL+=lx9uhu22><~5G+z1u

literal 0
HcmV?d00001

diff --git a/web/ui/static/react/static/js/main.7cb5d3cf.js.gz b/web/ui/static/react/static/js/main.7cb5d3cf.js.gz
new file mode 100644
index 0000000000000000000000000000000000000000..1322ce1994575c1aaf535e1b658e27a9e9755a27
GIT binary patch
literal 491412
zcmbSwV~}M{*JatZZL7=bVwY`Kmu=g&Z5v&#F5R+i+cu{AdESZnhCe25MBZGvGjr$8
zTx*{=c?ct+pc1?{je$U|4a{vAIDQ&_Gh+Q|!eHSDl$B|3yC(Jv@a3B;w6n`)Bt$!F
z#A|;*^}S`y3bSmk09v>H>{~?TO!9<SiE@I&`SR<fEmeeoL`=qnr)Yc>!c>>zp`FPk
z*fy`{ZP}fPs#8h&Qs=yEikt}`S$T!-YP^&Nm_~(1E#Y7T)5nR;=aO<`YwR-i>-qAn
z<*NHil|$udr18sxO=G_sAtJHElA4>llgD8y7P2Qp)jVfiG?Lpu#i%<%_V$vqX13$3
zSJf_mp<tM&@qmS^9Cacje!S6i>BB6YUx1rMFZt%mlLce!zJ<^3*9leZMm?Y8tRd&w
zt5EUmm5F;XhYFtPhy?EH$S-9V;UoI;A1Pz^!w<hDcQU&aXIngjeS`ZtP8DmNkYpMo
z$7m#lV*yjavQ5+Lkm?u<bdpllo3&=R!6Q1uIVSylw%d30*pBxqfp57Vfm-jrkeFA;
zGTo0lye-~ODjt+CKD~1mhzx5Hu`!-o^AUH?!S+1uO&XB-Q;Ak6;>D@uXft-4QFj0*
zoX^F#w=)g)%lp&Evl6apoBRVq&92|smJYsz3qp61UzW@KG-lfHS{@CeWtUfkDjVg8
zm<tCVADf%()VE#Kx2m$;lZl;d5__wKpQ{b*3~rBe$F2`5Pl1~$H|JHZn_aW7&14%A
z?A1-n-e)oyW)(Aqc||#(oi1IAyDq6+4*d5EM$&iL-4(Ux#8nYqdbiF)3+Xwb-)*T8
zds6CF#{&ZwBYNl-CjtZMrc=hz%M(MmZh!oq&U7hdnKj3D2-+?ZmFqLXZz-fV1x#v6
z(Dr$ECKGYp+c!Tn5?J!{@*sj<W*afCY1k$3d9SKdn`;Q<AXYY>^JXI)ZPY6##0V9R
zBrpigO_el~@Zk@3H64G_hL?^=sI1qZM1>-b31@_2Bc(NFP;XeKGq8P=I1LqLVslc-
zdN`|D4ac(Fcrp0meYwNdh=i$SC%kfH+J~3cTWfKh&8bd!>Z{vis1Y;p7*Fg!kyy!Q
z936YMihd!(&!!wpzAD{dk(DI?u<%}l_>*tk&@Ckz;ZaI4CjXA29N92e>(?90lPsBA
zyLLp$Ih2{~(7eu*#zllIbUN79j}IX}o*)`eIMDR$PN(lCP<&yoybDc11n2gkwJq$;
zz*(iFy(WAi!>Q7gQ=53W`)t&`d$)t-tD32oC94`w;Y=-<=a@@Z&d)VomYq<zI;*(S
z6S!PqmrFg#)O*^_1<ASSWlS}Hu|ect+4MP+aczEkjQy=qz4RP>5sX4&aByg^Dpz`4
z_4MwJVq({&wZ;TEtPC|qF<H{MPu0C@T{;srpX1hTwkQ&>1jO`e>Q3AaXlmxDOO2sg
znm5-Ifah$|b!jjm9xCX!G^qb~!?!eJtCV_o-fOq*9e1~sdW}I7?93rh#Hs$fYr4JW
zs3jKNF*iQme=%uG)H;j9*zjL$%e8U_ZM!gyvRRS8U^t{dH1OylSyfm(z^(b`Z(&gL
z*1gH?wfWw%mp6@aF=46@Fjrfw2YcA7nPc3Ua-%tTb_4k1gO_*AjsCBny~xm`zblB>
z60^Z>Gu|i2`3GYl(h;ch*8Q_OpD`r^8Q8O>Iv@Bnzvj+WKDnymgYf1i-ue_(+%x&@
z;VS(IkWdiF5`D=k;mATnaHS^BCQc@BCDp>Z_TXeI^$`f^o}dNmU;iWg=6VG1m~ogA
zDmyAWeVCE~?k3Jxc_z_F;Yd&=CV)<V1-fcyT|0c`njdr;lBN1h!#AE}b#bY1=cZNl
zP!Mqwa3wTOw7)J4@ip<hsnQAn`2c@v^|3}b{hOX${~_9cH}2mMZbttJI1=*TpsxP}
z|Hu5Fu7H2{9Ikmyz9Sfiao)|J@){0(O};*OltJ0$FK}L!FNJs3EIR^`+lJ;9c4k*L
z6-LLbXzf9D1DRrGA6iC3{PWA{bBvm0mK>r&=lD}sa*I*m7CXTz-VOOvhnZs59dg6p
zbB<Emq2>)Py@p#@k<SjMVNkaJ>)<bdU(hJq{nvpE`@E5`42DHZPa=H|d8D|1DTkCT
z#&}>e?+_J!p;MHiz3|^zj<AY<CdDYw*iikQ5%16BOU$~Vj4*Ql7_WPF{QE&eA^(M@
zWg{UObn`a(F0j1*{{XA95upnVw?7`SEgJGEaQ_y6Y?RkvIsZX_n*K&8x6Q?C=eB(<
zcq92=CI-;{@rjo6*8>6~9>G6L_}^eY3NB6kpN)*5|2yknkdFe3uC)#QcMSs}l2(5U
zx<9r*e*Qrwl_<2Dc$#==0nNPsnOOIq{lc^1T(@i8vHK_RKf(Ur;RZJk!P9F~w?^}+
z#b)VWfza3TLq~=46?~(33|mZFCe^gA67?r<guJ7wqpH&<7)Q07F+AxHbZ=5`QfES3
zy!{XF|0mM8b>99%nq7YY=wBNBL!duG{fA$F825)??<u8Sn_(?qS&M%Q)kyq6eAKlw
znK19~mO|&Sny7|)(-uGJVd&EN(!~8m{lV|_bJQa-qzDPd3jqay0Qb5S)4$9GfX1r*
zBSDSzx>f`G{@sv&<VcVMfRDt*;GnZ{bNfG;b-gpJ)LQCTp*s8wFq!m0C<bsIK@Bcp
zEVt?&|A-d)|0Or$4;<D1d8iApun91#3vmCWeh-**n6sJveZGDKMkvPrE^$1LDmQ}`
zBo~PP^!+xjZV-#~2-@%S?@%f`BUL6*e_{VWx+Y)D2h4;9Q2%?x)U+#glfisK%ZPAq
z{=leA#EWrq%h*9WJ$0~HOu(py_%L|s=+X+?^4mRV(&7JQ4U4yMltBH^f}GS)l;D5$
z^B48lfgs7k{3D=$08<vwpZ0(F+{5}${cp1((qBSD|NoNf59i@ZLHf&k>}Zf=5&w0j
z(PM|flm#Bd8u(W&Q~v-sQ{a9L!M{BJv%0_afBXDHbdafkg&Cptk2FJZ5jgN{sN|AM
z+aK=Jpdvw}O#VJ86!iZ|-vy(yp^$fG^=9>dh`QJKU(WX&E@XxJ9I|hfqskkULSLv#
z*q^j9fEor5=8t-)>k;T<_|c?icBgm$Y@SAQ$T#}`+SlL$mjyQM4>K&c{^r-S>D^=D
zUNm|HdIag-B=t}XaYC39GkY_8eOy;~OU-4(pk`b3x4$`Dz4055-gE}iTfkz_GUop=
z7h9cn|C@}{8Z7>o!NU9om`JLf1_0du=lTBH%`Po8AXw5Xp*SIFiuqkXB;mom{;5x&
zdHr(mD*U_b6F-}c@HJb~c_mo^yX>K~c%jljFItE7r}wYdg=!Pq23-6h3U{0j)>Wi8
zo`Fw>8$DdZFSkrAp9`elTO<S*NU<*A0=CE#2s7s>Tee|aR(IVi#UI|nj%#c!Qal^e
zIks~-SF`+rdy%8nM-Pn)rS-m#bsj5A!i{siJHl7Ch476nV_y27rSOekhM_Oh-YbTy
zI)|Wdlv?AT40rxtckqr!6NLP3z%L;!ce{v$o&LUCQ8A12Hnx>#Hk?pbEVYYG0`AZY
z#>{WaFWpooqIfSWhTM~cYT1VgLgL&LsfF36EVMj3z9&%_m<kQjE&N<Mz7@+}Y*hBM
zUgfJg-rHChGpB)fBolqPnB|DRF&2EWw=Ngxn55x_NJ*aMyCl)GvPn$>jT^Z>Po~LY
z67ya)>If4vGl{Lf>dkskOW_>uYL)G2^tblf{M9*V62nar_uJ-=fKq-9=MHJg{w_jL
z(8H4|@U>W%wcl4My$x*d?n_=t+%b0#kll^1cgIT`M}a;++Nypxel@jZc0`ikB3?3>
zE@=*%RRoH6&C9WV<$ow_NjwvGv})^Ul=)Y#6wKQS7g&CX4z3j7-FtQ!b1%S72$$SC
zJlbEE{g$@fr=W#&RcowAD4^+>rK-;DLTnr3miyRa8#4v}A@f?9<nNO#Q>szk+iH(p
zeJ$6h4Y_b;hE}3cF3M)s4XInwBEzBb<JRQc8Vx-}>DWAGV?$?Bl^OZ^y4abVYvJ!G
zu|l(S)y9>k(ZlLPrt5}x8yaJ-Fb0@(J%So&XKh_`U29)8+)YVMwz+S(7#n%ib1caQ
zi#}F5AtrYWCH?MM1Mcc%Pfs^aoEHo<gp?COxbOmBP_H+??<N<08HZM!hnCty6cTwn
zn#Ycv2wD=WHlbSt3YUyNvY*d}*4%5vLO<%b?@pO2$vQ8ORrt@?M)de$JJn(#71BBo
zJ65DkE<PW%7}Q?ZY;!4Nbi3#(4O8?wJ>I$aqILPT1gt$G627Jv0(ZQ2R0Y?>Jvs6`
z$?xb%5<e}`)U<>kwJiE(?>0!nAF8<JEM!?j+FQ0vHFWiaJUFp9DZg$$Vv1+YNDWu5
zU8Xr-O`or>@9(c|eb3&n`?pUm<WsVJgKG#lMg*pwSJ2!wCdo?)tI0A6QV7o&w+m%8
zHe{W#q6d6i)i2~jCnQgJP1cQHIa}|mWE%t?D&f`K)}EebEY1)a-KNd?Hq*E&A6Ri8
z_dgqFZf+}t=T@W-V>Pc7Lkm}&@T^b5GZtQcHo7%*CU(VaV(vB<a(H~pm0U)JnCU<_
zM`~ttZdr;xR-nu6+C7%?_TKUKmH28g=DO2JL)w!~bga|Oz$Mmj?Py7^;2Wb3tBg25
zee3MLi>qNoVpAI@c$hO!vF!R_m~&=yHAX-D{&B2W3?pUM-(LCk`VCht71Vo!Fs-S|
zNq2Fozak5PZND|?=6tW?JP|<^yR==?)2dIwTYSgidF5MPQ#a1-kWl1WZgE^COVZn6
z#gDS*Rck$^u3iXE+Wy$Jxw!gnZX_4YE%=PcQ*SD?6W({2WU~c+_zR)26(<E(3|ZVR
zdF!c3VfxNWl_n0YhPSuIyF&tL@1Oe)-am_QbZxe<G@w67yRcNxBAHsqT9>KTi`sNb
zUw*p1X=Lby`c@^rv%EJ~V-X5B0^15z)_52wtKHrAUza}r^gcN-dUtvz&Sra3<Yxol
zA9}rhH*)@!CT*I(mT79wD?pcMT9e9qLO@BGJL$uV7+m^E8^tGaHu!2W_IQr1eJ)+{
z*geL0a{4*8qOma{^SblSn;q(1Q*ktMp^{b}Xq!5}kmGL8#vgNfC+664sN>+ews4K<
zYH6e9YWXWi?~?zwHeapyql+7Q?3_eGH{wHcTkNC0uwM4h)ee;hFwHi#k_Yf#cC%F`
zn9{`$_>EOQZ$9dJgr~tL@;Om@2uID;r4yd%aCd=$@8e5KMlN<tJh<7p((F(Dx-Wr&
zBN|ul2hS%bjdthm_^SGjH)SrRJ_(;_a;LPCy{2FH<}A->2~E9)fq`<qIPc}qpJ)Lc
z2fG!rOckhBj)UeOjN^BYeKQ-c=nMK~Zh$kpMe{AdebwvLN&DVilg13nBt+yT<K1P)
zYiUd-M`kr6i^|wUbL+#vvdH`NIaqCf5TSFa3d(Oeh$|(E4}G0N+^;>kd`Y=t?hS8^
zEUUMN-|1^VCA@bmuK`;2OZj$$x<i$?b_N7dn7V{4OJ87Ci4?187zj7Lgk4&4v5k*^
z-j?6@x$%Y(&gN@F4oB7kL4{V=w0D5wLk@0#@AH|vu8Af1itZY{_!%Su3q~aTV1GfQ
zOymr=qTC!Ak10rn{4N8{4n7TJr19%{tF+=33~F@9=xOW~Dcr`%*;&O|#~TU}*k<|8
zIvQXpUVHD}*W`sE07?aG1T&qKZ6(U7k&6fkS(Op_9mUjk&jAR5!!5N)?G18hg8~23
zs`^f2(dsd<3A+$z)p)|CWY!d^2Hjp2L@y}RP4IiX+Ox>$-k(=T@rTq`^s_n3vNb(P
z#2v<=8BvnH7@80Cw3wb{Vx9qxnWWzsuR6u>dFyHL1Q{(B)*R<0$T?Iw-qllFeMJc8
z`4gG=1<6lFyT;jD?ghE^VKFj?dXAtW6=NJk)?D|mzW^Vbi6M~tD2F811c?H<P6d}s
z&SMg-Z%??7x9!EdxMi)Dm8}60zFlVJZnv9!D&nCh$I3c(c;!ExLx+g*EAI;S0_C$S
zdHC_h9GydVp3^25-1qhh^Bv(lj42evQ}ZEpHflw?*DD1-B*2wkSVpG?HVASIRA)ZN
z)|#n$5;X&37?3w7tTiseo7zKmVe3PypKd_{d_eIJ5A@+@Q-2b2>&BOk@EzASBx9|Z
z2p+8!fmA>Gqm7Hyb%5+*;MW|kuynOA?9k>UsUh_)0QY(-?EC3EBNm=xwc<ba_Ce)C
zJHd`xM=#=)8^k*3awgd4+tZ6a2nBj{YnRPdYMyL^Ahx|GszSf*Aqs)>?Jo|NU1GUd
zBey+}#rE)(+UxB4I|7RI04RLbp`qRn*80OHQ!c`L)vLgqRvgW0RdDLpe#;%6AF6@`
zF)4;n@uFE8AriPig>pSvwogap5P6#EM`4^fPsTmGCm2|gz?Q?9oB*eD<}zm5=2TTw
zP~(z`s_<E&Jaz^r7*z~(c|Uh5-|ZiZY<p{Ehja`zHnxJ%0f;-c(@B1kqmVZqUG0=u
zkHOYp_gO-{r~3mx+lh(vOR0?9D1JxJCv&mu63?<s)O+4~!-l-li$G1Pk9K7~`!G(a
zK6z@=Dqe9yR-c;%0p}(JZEg({8+Vhv%xXVe6R>XYV4;nED@UGYpNc0Wp3mO)-{>zS
zB}C&a%f4|t4pf}z-1|A6{X2hEn5v@>LIDcqIOq06T;J;RySUet_q9LrDzRTjVS%3a
zwO{H)2djQUw^$ZbV(v>QO?O5oL6Mxg^hnuP3?s$Y_51g%4c3U7obO<g<hLFW<ClWN
zb{z@92^6@GRVKhuPAZz(EHaelTHi~;C5QQ`Mafs?KYK~OCmQG=NRNaV;|ibC8uFv&
z+1riMes+lv`O@CvDytfM3e`0rG5<Em#gILcy$QkVhj(nEZj~bf0xWX*#t6rovEK5r
zeNfS{29XZo3^Oo-yYac*W?ym9Z-`7xIkAFvIp0k_UGi?7`Te@6l-7hC1Wz!bh~9m0
zrS)$d@#FyF?vw#mDN*jm-<=zSevoi-73(mNq2dbs+$!Ux7Hm-TSL5;Xsb=4FxF-9p
zA*`RGf@Q{=$zRyJ4M+Pjb-p4PJeI&n=7<l~$AjC@&!~_Biu7swtTE&ldc770*R2-D
z>aFWMxq>QgC!isX-8;S8RWEtX^F$Cm)CK`Wg(CEcY^p1%^#tz$x5jRf>3qf+xZ{^g
zYR*5xWxOJ9aDGTSt{Z0J7fTgc_3(-q+Ssv;#z3i*n#k;N&j0Z?xwDS?xUrY@CTu}*
z9r<NmgZG@0G$r8u2=YPE*|eS9#(PNZ;DP6t`o{Pgf^%hCb`%4$l>FN3VJToYq<F<a
z@7z*(0Z-*0eCNGpX}2W$OL*&~JHy2#L2u~bu0y(mPtknmZ7}{03|rLKf+BBu8rRI;
z!J494Z&&b5HAy1ArgyyOo+XmZ6C6I!XY@15K-uTXsud}5JQr<Nz;ESMxC5Vj?atNP
za=^Bxf<+nQ8VCeAkp^(s*8;;HZ|MC9e2=u*loXCC&!HH}wrC5Wb8|y-RHUSFXcBu|
z;_R4JeWVUjrezv9>y(BDZ6pHYKhTAl{E>t7>DgldJ))!Mu)P*(T832TnPFT2#Q8=H
ztKrvM0`Q{T%m?72Iud@z-2&#os})=6>kOv|_?gZBZKm*)H^fC=yaVY>C96sQGQyq$
zZEG4Xj@dm}dyH5&6UMzoTGVw+`rvhR#l8AVDn4(P0h|pj4^jWp<Zv~oO0{}yhyGd!
zr<(S#4q_AN_pUF5R9&C$>EeA?1><{88{<e6IvCcuIc}o16}qT4bJ+teT@T8Yt7Rai
zv$3P%M8C}vXIKf!@Gm<;3L8_6?8mlzZwm8Vsnw&5M}W;LsW_~DSBXY%oU{qu?gYch
z!M@G19mp7(&)fQU3?uE)LI!dLj{1l$Wr<f%i7dXZAm-9MKcF_GS}BLN<yTb!5t8kJ
z7YQ+NEXBD*LC6x2HFcTNAXon3X+)VF^gH^4G+?oTZs5QN55n5mSwuucu41oxB!QcB
zr~vT$VhmRRU(Kn^pzycIBVN||RV<LwWU603tVE^|!mYz)rfJyyY1w;U$nGt5;tgN6
zk|xRnUt(3oEPuR5kxZ9pH8t9}96;&W6K1;8AX8P+jMizyp9XVR8jhOfBL{h$0uh7w
z#T3BJ%Df}M6V>`_a2BR-tA>j*)e}|nTbEy7cq=f;6L*dy)Q{?oR_?nrsK78+K);k=
zwpROky}WBkX`SqGP_USo^`eV&K{|TXz?*chgXp7FE$pe@4rF|n1lAd{1?XyD?0h8Y
zWB2C8$*}$+TR(ba=zuwp6PSEv(j<DW&ASVqWz>ToeV_qk?X0w22^W#tEH3cn#eiOW
zJ*rGZ>iCPHcCSV`hgV(=dNV0z_8WZ(wOMQRoQ5jqe(DU)nGjQPoJqJ_6H}d?6q7Bu
zGR~io1b-0|LUj@;)JE<%F&Nt5G*TaBkS4v1gEIf}r@0TAVa1eY6uu5PfVZV~>>^Lo
z-3DBs@PU;8VYf-u%q@_Mq;%jYVx6{s+vjQWglb(9rF{&5oHNg_ZINpGzFox$*_HLA
z=m@zvdsiXK9{$m`5-q-~u@e*xY;`K<Nbn?-^5CHwjPr9bBC4@hc$|}J!r~GKE#m_9
zocyl)3C>}*PLe#{#F?=F3ikjwCsOXyWm%=GCk*1u>%w635tA{w$56sP<3=8piO<9$
zlk*NRbpR70Lgk+#S*CdAnX!PR&7yM4k68MUQqky_?6#+0T{TdrLD8q2c|XVdTYEG6
z_+Z;XXgh}-3&xmY;UUm<hl@)jS3{ph#T11RCF54cqFdU+D_!W7rTpGl@nUR1P<5<C
zPhWQyGu3qf9W13a>+;~6ocvjBYk4&bqe=LTTKcRS^C>M=t*1K=+DGo$nKf{@roRY7
z+_6`{8r1TU+lj|uN#~q@I`%fo8Cy<%v5bjK7qiTL5<@n1_O^3^{S+tYjke&=x_R^1
zJ(_u|=sU&~@KG?2ORLkN9?oa~lc;ZIik^;jBpobnJQ4`^v!iQy#>s9bNp8QIGjc8Y
z_*E*y+ODW>t7?W>n}KSAd!2u{u6^_{&ycBhWD_-6ILS~g7q(6i04%8TkXk|#%qX2S
zhx5sp>OI7?{6O%<F3HPv4^Cr1?yGD&IFzYA5O07MLi2^rGa8*X5zQA$q033m5Ed^v
z!dUqGJ6W>_(rh$_3Jma@Z$Mzn#Q}~K8_y_3X#+U>ZNV|&1wUc-&1aEazs$KMui|Jq
z6y}UBe1G^+SV|=h6ieKsMSse{l@Zv@h3#4p^Ap8<$fwU2*(lCw9y5B*xg=8_cY9?R
zTN{>NHi>#Gj9aK@EcdKCbnrz4m3A%LgZHRY8dWJxM0TFJ0}(vYfqw?3`r+$|T%$)(
zMIj`kxpe6<%xBlu3xsd{Xvqz*kN~!h+iv2Yj#cl9U89Z&!&fTa9dS4u=*&=7ZT^Kq
zZ9}ChT!fWuX_!p=$VEvq@vO<NVV_x!^Z_=Q3G{is2yOSuJ*_b!2UgfUX>)X^&{COm
zc+HlgFL#z^CN7patt1#-o0Mw5n&32(vNRq!WrvRP%Y@c9vGs7fkuUnoSG7Z?X&>#y
z30P{{V@T#Kd%mg#M!&hvpJO;dV93F;iQlHn`Q13spgPCVy!DQeZQbL+bqn=^!B&4b
z7xbW)W+D)v0fb<N`;u;!k|j5}s(T)~Rx5=4!BcCVgZwH{<bqP}(qrh428=t`xbuRh
zK0%w(gNP$G?*4KeXE%-EA>&TdJeY!~Z5Ijb=3GSf_!4XmxmuVL)Y0P{)H$R!IJC?;
ziO@dVft~y3Y6+FcCE?^DPS?2phFXehLOBvQ4rfKuvO$G&r_1u$)~|p_gG04JF@cUq
znK_VCR_8D$4^!orvw8;Z#F%ENy>J@p)=5K^tH$CibdvdZZ@EfFOPlvogMo;bcOcsx
z-6<1dT?#~CQg!g2i=<!j0cJZXnrA*;9P0|<It@^jHZ9D^QMDFg%Ph9AdleYX`Q1-R
znWqT#Wr+20cgY1R(SzV-d2=s-{{GMM-`6$71>MOQdir7`qSuu+Pf52yV~xcd?8i%6
z^7;zu!!U+K$JvjqG^VM1HjX@15aE^gDN#}5%+N60Y3SWKD|5$kKn(<tWlADGu4*RA
zE?-D&&p?SF;>8g74mHf0+lLDh6r@Y!9bm@NoqXSHuLUKC99?E9k|-mTrd}ihm8M#_
zoE4Ae!)c>9Ymi#9X$EYdnH`X9MhMQrdLq^tC$f9=%)SS*d$U+sb30`sOi|`@s^Wlv
zAjCxCuo_sIGVis0@WDf4KEvWj>fSr4f1^KYy;-I`;(C{Eo#@^F03of=P^FzJW7Bn8
z&@dK->0>+Rxu;By*^swRUMx~o#pzz6b*O+bcUwHkQrbD>NY_>ol05K_`sK4)Ph$DY
z$|qk4p)?v@r&&EU;Hj!RK(O~X&HjgZG9W1~E}v3ZPQwR!XHCPIf$;920Sz6^NZ+JC
zTy3G`wZP#HRj?}r{NejU_LZi=U~yjdO&XeH<R`}ETzN^R=-TSVIyK+e<cy4+SRgqy
zqdc)Nks6_bF0Mj1I*p%&>`lu!5SJlbkaCE?-G)(Zk=wM;mU(dG4`(BJ5Kn{$6_z<~
z2@HwkC}4_1esqjpvLtmju`rt-`cvvx->B7x5OnnW<nG@}GP%vIasqE<&8I3&dJAIX
ziMeR$KQgt=`8>}I$=<|8h)o7>j>~D@!?P!F<n_Wi^2`-!aVfbhUlw}g#$_I{@l18~
z<Z6iF4?$MHxjSuMEpY~E7FgYeJ@$^dD=rpSqzq+Rx#x1qF@3l4GRnf`St{(d)0jO6
z!Q|u}VPJ*q>elzJ<|Mk@PT|54Uo<0*D!94OoQ>^h%97S;s;FoOsW7kH|3&54RR_m(
z$i>2@48P<)Qa_BOI>NSUXoG=L_ftdnVDWqZEaSYiQx=c98Jfwu6Zed<MOWddmQfe~
zwBU$iERW*=_?B86MM-LRO+pAb+xFraMmh~gZ9kcyB^6WM_^WoSWlO@egS+lCH|Wte
z!iDGhoJMfY^_OPb`W!lI4n2^HAeCC;5*@J7Cm9DS_ni)jx}fr_FFQO&pQ27328bM(
z&_hr%MQ?`DgX;vGs1n!rEEQhGo>&Hqij>0xo0hp1*OH=aTcL9oT1`r=2rLIchnq%t
z!2-cN<=#)!1GytaB`r88CHnYQ^5DAfb2iX{Azchr>9gxDX0Wx!`j^AKS7R74wKHVk
z!xsh6jgNf;YoaoJ1f)nu9|iD%?d!hMl6J1Y6a37r8;e$HUlI_o0=7R*SY1pT;#`ad
zRCKdi-W5e8Tvwm!4FvcWABTo$f}h`Q7J#!YN_o#BK{bmr*nEteIvu<YCi!w$8|eU<
zm7p%aNk@+Nq@LSUYEnL3UPR_e0~<$GPE`G|minJAQqn38g2$hxI4D-Y1Aa*^+YKO`
z>@R`C#$vyR9}`A`K#)Ug)zi9_ZAXVi?+DCCFMAH!X!I7SJx{{(g!~p9L++m<{s~FP
z8#J{8uEpXq)TajJIuLUmO)MAzED5M1e+d1yj1sxUbV{mi5E%9;4h6$Az&M>>!xv}0
zV)@((ypGoM!v%l@8sr9hfbEhbPf5JvM-&2N5XQJS%|Iua0K^tGJfGaKW(K<x@gvv`
z$wM6#pVcD0M_2@u8v;v^7f-797;##Ji7N=S%*enGs89=xErl&?IpY-v1XAo=5km-n
z`hJ0y${V#mHsVuUBpWF{$OjqRFFcSh#VTx>FA8dl5SbmwWOz_`M7Cg+II)v6pdw8Y
z)n%d&1gD3iijQa&zrT!RyW9v)5L%Cw@18h-yC7l)IYpa9n~UiDjHtL9A<d5+QtB~A
zG&OAQ8eec2_*juBIWNt4Xc=7JA#@w*aL1COO;j1!NGz0$f%*}JWY-c+EC><`cLq9s
z$u@a^cPmI8jbtQMdKVqJG+$pDOn(oTT+}K(-%AG+^x8J+L9OT79<CXZ>abq02&o6E
zJn-I_6fN<9=NShx43fpy336LWA3qKjsdIk0tG^T|)N!DXBPtA67dZK+N1!OS!7$m8
zxLVjXvX+K{5z#A=L@3#W;2bF+QaW-ct^7qAv6jqu@D_O{lA#=4Vu|l(iG(PAY@AML
zsB}O@(J-pHm_JTGRH<83A>mp%GX<L;F4-?kW=SOfXkfi8TonI&A_*f!8*>VY`xW~T
z5jcjp;j$c><B%d`@n+s0E&-fwVu%6?&VuiFELj4i`@(76LtGHr$YJq<-1yt;&;}`j
zYD*BXSX<1ps)jqjstCeakEBLp3p{Z=aT7b1?2|kexX?P}O=s(s>eJ@?rP!Be1Th~H
zVMn^Ky~1`>CT)v=>*=$XHcncwfw22<)BFp@0dyy*QL8HW(&V|;)0^QTH=HZ}^vp0k
zLg3LT%Omjd_K)WBK7hky|FIogOuG(qVXb&*l9Du-Ktup&WZ1f{)nviBZ8qg{`pg|6
zfdzDTb6OQx_K6X_ybJl0h5Ysmf|>O=>7d+Xx}&2-?WqeRm~rFYE_BcerCZAQm5Xg=
z@CQ<4rH`H{Q>nvr6BAgI?(QinQ_r+sEydYW9C{Yz?oNIj;Wk@I>(W4KHSGGT_OOgz
zD;m1e1~|9T<SOAIZKV%e^ieASev|l`IR`<)lMmy`U1X);D}obI*)l0eMoQ7%I80bv
zslr{~W%x(?11axAaM%=0M*<kxbPveUwzaSm!eBp@;0PBdUX0je+w!3&<jhUlW<SIu
zpD4R`L+2!6yYx8*#~wega+h6ZZTic?uno^TchwXGX$OXTuE&MDM(%amL|@NUG$KOC
zUijUc0iz}76lb?xT^wz}ej1-bw*Ds+D<7DDbC=-8Juh>vu$=S*0mMultry3~?<!Xb
zpc@3t48JSzuh*yDC##!l&&O{a7}Z0&Qv=(^9*w%t1X*`6@2dvtQK=`LpQ=@EQ0T9{
z<*#CXyif!unlI;_b^!`tgr^=J=XpOp;0@sgI0=wUrUW=7=?*Sf$!q!N^cLqpLtyN+
zfg0-|YD<tsW0z>YbFKbVVF$N+y7S#k&ZPOZ@gNusijppy%NZu!Fo8jnw6cXx43^d6
z{B@1gtX9Uf-~{bLRCcla#jo39wd@)#4fNe!aEa#}t9{XP!r+PNqf3WV#vdu?+9(fj
zOTb8Ue{qv!eBJEh17f1!Le5~0=}DVmJ8lypr@I71e#*;rgxSziP&PnLkiSL^j$Ts*
z!dJ5LvuPN&e=-h32E<^eNibhN6U86L!?>)@T-Y71*AYRp%vug*YG{f*o{m0fGm5cA
zWXm!`BW}Cp9ONk-*YtG$8|uWxmt<2G0Wh5IK4JU-qjvjgs9v}Ek>;5)MT`G&wOuTe
zfXy|R=pm(bF!_`x^95=y_<n8Dq9tvQ(S7f4Di7XGGfd*OBZz#PmZC0u-NAZ!%Lf~d
zTm}4B++SiAP8C(ji4>(v6CTh6kZF=e1O$>X-qVr*A1fP-171j0xB@Nd2;Bfqip;E3
z+|`zpD^8!=f)6{Bw$!cJwsDXx0IkH+=fp-X(=ThI@PcbSWG-xYqyQG`T43m#QLWt=
z^kQqu%ciOkKO(Ap8DKad%@on@t<UUYRl218qNDDsVpBShvM$+d?ziycc})Ap4wI5D
ze8>J46ZGsM(Mr_$T!;d7gWki$SSj2j7)+C{kbZ_{wM8wGGnQY~^CemMp}&{~@;K3u
zL%z;qSjg3cM%E|zC0<X3-1lXmI(=+`!&I5EiS1g)v)pDkPF^=^)}%aTArjMilo<Ot
z9%!o<?nZ7iP`s6+B5^EX_Nx1N5o;e40zMUo5y}f+ro7*Ej4<tgl1XB$m`hNI6?XPY
zU=GzM4q=Hx>XVTD2+8mgM!r?n*BDyfr{7|W)P$$D7l`^jn$r$A8g8f%+c?%uz;Ig2
zXLin{X65p0aSLzAQR57zG3*4~z^wrzp+kB?%DJRp1g#QYu=tbe<_z(qVp%F?xp(E=
zrf?VrH)JhJvAy69j0&=YR)A1>u^l>d)Px3HJ+r%JM_u2WhQrjdmd&EC#V2^v6>}(r
z41{z#-qt%z52IH@yTWU!_Y;z_-Z1z#9_#L%5#2sJBhmOY5P1g0&laMSo}`jVOKP83
zqsbaF#|=n%<e!a!WP;U_f!f(~G~l@39{oVI1UDG^T%tzxghi)*y`m5@l^H0-I<>Dd
zv`gPEpmjXncr51TN+uFTAZm5JYGZZ<JD?RiCxy=wMZzHl4!v>p@j}^^L5f~EZ(7~}
zpA6DQU&iJk#>b2#bx{ZJoL`lpIY$2&#s?0V>>}5+g9%*tM8XBR7hy+#=E<C*ydNag
zzeyM$>;k8Ly{<~tB{{!Ei5l|6K4diwzrhbIp0$(){kCg<2Bo%uEDL~=vK3`7VN-u^
zGY&hXQe}%sMgwTW_6;tT4({<qns#q)tk)UZba6dw_&B^KdzsH&AV87|2RC0o*xP%g
zd+|!h&D5%W{sK`Ne%mhsdv|Cb+H=ufDuVdM#jN#-1(riu+IO4{rAY6w&t%!6`j$ay
zZP%_V#YpnRjR!g*s-^iT4DN5A$Co9hfFx7EcVH@Xy8$Jmz-JjJxo9%Xo5CiYDWuWf
zm)@UAgF8|DYbFZ@cS4k@*^2F_sY3k>uS;#IC-b`kdxlbf#-EQss!{GY$uT?A4swL#
z0C4u$o6&n2dMLXiI@)h147mM2K5mZ4fsm9dLe5>q!QIC)EL)W=Tjw!UD)l9VSg)Xb
zlF~U~-Dm@eI5Vo=No^6Xu=}nfwD89l&(I-4)A5@oL=&tHNyfFyc540ZfM7%r-5?n8
z5YXoENX4YXg6w;}W)IBdb<jD?_+QZL{8%wpfwp72^CoV!bu%~JuK`S#THw7=b|q-~
zF{*n=&rD5jVvLf5Y;Y-2E+!wzu9qIU*Zh-RjK>5_Yk9eCYMj|nDQz@@7F|Br-FqX@
zAxoSOz(I0RxMj(QF_~tU&vNk-wtEd{F?1^tMecr^Gn&X3B$%K&!U{;>;I)ea_QA(w
z`H59Qr;m21`y~|vzCv!q<@T^9RxKMkZF|1hQ$2~|h>rG-D8Td-{xO80%<u^dv=Q{S
zdCPIjq}NhlBkUrU#D&y!`Mk~SYhfJi0d{85?B?uX?!_!m{4ww``$FZ|>R2w8%`tzj
z0q6K#scHb1HrxmhHJt>?S=%29vgeMHmtW?7+rVneVEILuN&HLr)1Dq{!nEh}Qxq{&
zyXC2;CZwR2^r>G)G)ekBqiKq57-PLe1~L_>_(#id=2noLn|s?L!y_j$DO*D;KL&rO
zW>(egM>Dqy&;`fL`we$2*SU!g)wc%U#DaVThmqBmbrZW!yKNT~g}z5W<fS+D)8Rm`
zTNt($l4EG!2lRo?B1IpT+LeY=n^F?fFH(n~InO?1gpFm0tl@x+R&T_6X6C1e$Wst#
zH<;-n3IqnXnV7;`ig6y%_BuH@NXFxR6UA4G)BCQo2fi%M<Df1i%6WOYJB8#c8QKMN
zB7x8-;$@=yy~U4$7S?RbO+J;sSsb!2U-vpBs%+>%Gok!CI)gxoqweupoG5Q&L-sU6
z=@;BFEU_sL*f-f$XRZW>@?>UE>clc)k!j(E4k^7sV9js^RxDyr(~AR<uA?4+)G1$I
ze8wFZjqgh61Z=Q>W<sC~-b$?H^lcrz^qkbm_P+e=yx+8XcTM@ZG=*qibUQe(vXf3=
zCYBp*?`75eB+i<9QK|`fi^D2x%(i5x@BJZux+6{)g&jew8ErXSh-5wxOg&Oll2YuV
zIx9h&=0i#HH;fdqO}%upOPU()lWAiw%lbBVipPia;b_))EK?G+ZuDbiN_NJ2cE&~y
z#EY`%2`OXE`mDuwkY)*yWl*nR8X&B~Mf|}vkWEp>_MZ=@HPcLn>*eejuUkhzOlUJ}
zL{CV(4)6q0nPbME_S<uj$TAS#g$5*kT&V$LG6yy&1IMp1X}lc0kx1d~1%|TdxgZ)a
zPAz8~3w0qx7Or4@bseta2HVrx2qfA(?wjVDknxdFCS9u7*w;l;t!t%b=rAy({%vNQ
zAdJhPOI}@mo{AyAe|KcGC8=h*;o?v<>KWV9ttmfEhGnWgeTqnk?@S)qx~WL;uXs^g
zyVRcxrXF8emc|OwS|Q776$yKn1Ia4(_h14!R8~{#pwQ4|=vn3!IhV1?Yk-Sd{|K}w
z2{Ph<)U+cD10}pjtYXMv2S~*$R(gn=D~X@@lK_C6elBQ)C%}|M97K4KfNcaZr!#In
z!9|w=&6XGdSSqx$WZ~3jc~%e&n?1YoHjjOjD%}bWUL6~6vjzk+RDWye^sRZMD#l-%
zRF>am!(|^uUROa?%#6(EL(d)aj;(E9e16v07?Ef$Zc<o8Pwv^dgtALxCatB*A45Yd
zco3I3SyVm^oa1f;5~MSRbn}<Y8Krc_2;_&$?9I4aDJN~eVeP~xB$&wnG%y%)j3XCB
z`J6KCA<EMO1I1~qwhD)039k?daexSH(Tk-rX|Lo4*3QmAYlGj+{mzjsAMu;de}r(E
z&p}2!nEz&ECF7c56z&iJ7S8`A3+etd5T%PmtY~h^SPE-dpcEOS-fDRwKwmF3Z_iX>
zTzk-y%+IhxkfPQJWVKskPq2%z`YCalQGDSr3M2=)q=BocvQ0ocv|xVBf6tQF^BLu9
zQ`Oybg8unXy{@}fvnnKVnL;N5cc0ZEE;_d^ur{tQFTGbQ{UfRxVtw^?G=^_xBKlQ(
zY8afxx&2<YaBqzMxD_0GP9G*bhOv*#I~Y4Zpa~w?mS^9$7ntLl$uG$W@l_je8NDCf
zBwZ`>RyN3K%jZItIn|h1_upG0z@0GR^TU%j2P{mKA3cT_oTKCf8_xm0ob^6V&Vk&o
zwSA2emYp({3YM*<gEIH*5>pt?Sgegs3y?Mi!W)m}*g(8l6B*S;XhCet1}(i|#-Y|U
zD&Wf71?ie31ax_h*zRgFU8X^-7#8oiAupzeT;(>!Fw#|q<nJmFO{Akx$>VwGX0}2J
z>)pN`N+ijqZjyDiqiMFma>2oHC3qF;Bf~Ogf~Dln0V%A{n9vrm?cFF--D%{;DYRBv
zjfrjM-!}(59Wt_vC--i!>wjlVjpjn2d*)G|u7bmvWS6_V<p?Z%={t?JPSV6udPSNB
z<Ii(pwq)W@RT#<_{6vBQmm;b260#IPV9|S5>^{8FjTo`T97%OMJVt7z7Q>T{tEkxw
z9Q26ayU~-4hsU|#wGNcEDPfL_!e<VFjbVd>!9((_7tai!f=fH1?15^vL|)*{=6y^S
zJVtI;y~V_GF_9+DH0mas+qij-_kYcR$1;`{Tl5{KP%0d8O3;)UMK*p6gWDT%z>~Xg
zVq&-rq_oVNm?%%lQ6d;%8uIU8UmtrI{CZ%D#loJxEL%@;WWhkVALnjAZ;^3liDed!
z2zbE5uhQIEC%r5GtV7-wHj)E?ex|f1#JML6d2W!@c`Adw7JwCF0Rqu_?MPm|oyw%Z
zsNLg`sJY_HihBG8Zi)NiCNoPMmF_@3t+>b13?|53YDGEZXlEv7veZR3sTx(kwfC*^
zWT{|8J4YH}6yhkA61Gv(afe^<7eE5eaPewq@@nIuVj3dN1CTxD_gKdF)J_~!ByWP;
zDDmqPK^k4i<L`syOnQgZ#d?rOLIY-dx2MJ%NixHrQ6hV!-zky@5`*ZA-;1KpLxfo)
zwGIf?HSqH&K(Qk2-5{6XrQoO!n~k+wELts;2ap^Oo#P)HnLcVA#Mv59FVU23OcCZ)
z&9}y`43YKva6OExzaTy@wmAH}9f2lpAY@cNJfanLaE>dYA;{11FCAHj@)4R<`g+qS
zZw$q5R<1>893q8@ntp`fURJLG3R*XnsY!q@&YbsnJ7)uY8<WCGna%SRFqTBwc~=zs
zzn~|zOO-BfHU&ZLBiuP7DR}Rdw5{`tnwansCgX+&J#R`me>YsaTRg$36RP2+-fk=b
zOw#~m`Z04<Gw&?^DI&;8Q*5kzHp|2L7iLp6v)3fyn+y#u-@nB~r9q#Z^v9b7!J@(U
zud>T=Mv$>03Qq=?Vo_B=72)MJR5CD&%z%8Q7x3E{4=H>rtwjEmBz{++KYvglvimH9
zUG9iHRG9_<QJINm?{$E8gW?QfUrK6%IuhjK_3F#%fR>C&oFt~6D}%A2iS7q8Io7J#
z5s%*o*RdEv>#}CgWcepMs^p54evcXL-x<`RH+3=hcVKd%mu5kkG(39<*v-kbl~*IB
zfbyDB0$VMorB2o+Bci9sZlMxodkr}oz9M_%S+d6Zc?#bgS(Q4(a$@}x18-Rsh8mju
z(GP#9v$O7lg+o?6)ax^(N@s<5Y4u{&U{;*^8~vB=P-4P&L`iuFo0n}+zcg~afqlMS
zH%8G!cbaO#9WxLJYKm5oPI6f7Y!SY;XxPSU2o_dLoBf@dnvD|Rmd<bVwo!1(zm95&
zC%<3eS$ngN1|dPFe3Au@p?#X8tdxD`sG8AmI&;68Yan`Ls0QR9xcUMx2B3vSshXJO
zO^J7)$|SylR3v>v+V#YMto<2}wbEt+7bTIXa|KvZl=WLBn-LkhC>9Cv%F&hdqOzNl
z3P*`F#seprSxuPp#^_^cgqQhs-J3!ao1n*n#@|mTn<iVY0VmWG%8{_Ef!8|^cH&V@
zC!$n-@B;uQdaA~yGn!pl7-ZYKZQ&&(z{9if3Rv5wLBpWlEC)BHrkE@Xb`4sGcleku
zP;H|&ih;u`{pk{deWMv4O&ms1l%T>a8;+W#4sWvClUl=JchOxHp3V%G*ref3TZp=o
zz#lood6R)dX^=vxifY!Nq$L*!_UwZ4N?|B%pC>KNJi#b-HR8-ZQcyjgSdY1jls8t)
zk967`2t2DqfBeOVK;ZTj7WlS#$GQCEGpJ5@I{!K5^k{nn`9{fn5a8~C4!LwRvf{3t
z#IH=yO2EG}m1`gj#t|4hg^X^R`g}+DuB7~e&zkbZim;#WY=!2K$!Q}6)J!Dm@@9<7
z((b%Fh0B#kc&a-JQDl2lEX={A60;rS+AiXenJ@P}194ciQY*7cH`)a7!mLTlluy$b
z?6K$DdWM4wPs56?>7se6XEX4oJ7A&}9WB>i(8qQ+tTL}Fvx0F;frKTb1Lg$#Az3D<
z3l-D@d(V_et_tXQHf-xLTB9s23|SierJ|9`j!wejFb%`bo02-fVAFyXZ^j_T#=#;_
ztXN%-2K3yF-2fWtZ<3d6byKdgCcdog5fGNuIV%b8A-u-}c2sC*E)v;7?m3(E93*|S
z@Rbd7##Lq!1XQriD1;#j?G64gs?JYhNR0zItKmsTvIvr23}z&spO?gcuR2@~qx@To
zc+oeEOY4k;ftoEQga9EVR*Z`cr}hxFN7bgMjZK6^59-z&o6gEVsS%A%sm!c|^vMI5
zZ7#kf9phK7lyQ$xl`{cGGH^>+OHQrbZJioVWq^^U82)&7rLj=orY%lV=b`G^@a=3o
zesL$&p&Fa8Y!>xoh5h_jl+Lnp%@rWXsCmawJAZ~%AI<38jb?ml`jUa2I5)5I5Mpxy
zNB@_yTq15ocQEbv57`!wRZ;J~9$x3~Q;gJxJB?_;10L9}W`Who<b{$$QPA6$7oCAh
zZGoRy#tz7sJV!=cy64h+R0GlNeu<fMm>xFZmm6Q<4H{nY`d?2}Z|?}&S3Hq)SpZhs
zP-*iS=oR(YW8N5k4A0}`#Jv0(jP70L{z|qEV#MHCn}obDJE8qWrSJR6%1C`?y4Sl>
zo{5yuw$ms->aLBbT|n!wuJslj{leLeHQbF5xKalUzNH2kC16DVkPO45vKE;bH}e6(
za_UV}2LBv#LM4&&pL2sHEvH`uWP*d*5|9<HsF%=UP5ANfI24H|=bf<z)=ZJ<)KaN+
zJ9XaW#oP*`9To$dP#+lj@%%o&^zmOhdw>qrEtAR{uj6Kx(4H=ZWG%=lVp}QCIrljJ
z5a|x6p$)=MH!O+nj|VG9Yv4M-z-NS94&D@N_$KlzfWjGN%FL_4_bt4#>yTtm2>G14
zU&R`f6xhrn16ACnluwv?5Sfk+Xgj-QgNVxQX=7rT7be~tjcN1Ur6<|5-Wd#jzA1aA
zvjKfDEFHPP&8yikMKz}vw8q0IaoVz_T>np^Z%E*V6PX(psd(dI!T(ZnAp!WYM9@e&
zQ8e4iXT@ccl{)qQ)D?KwS$nICu`LkuBJCyWqMt-cz)g3u{@G9rwsXR+kP{bCVQ<25
z=t=S-LG7)xu&n55RZh*Wz-!@#BT}u+F&4*7wj&XRCkKZYPn@Rcm7nM?w#I%1?`^#1
zW}BRv!aY8XOVkpNB^(m!3Y2S&V6T?9@Ns!5M-@VMddqg~dIBF*=yg|yxjCE7nT%7z
z_XzHI-O4~fdK{gQkH2?-*M4lMtsv=!jMuTaw?hYYj7fmZ?QF1FTc5Cm;HqNP>y52R
zV7ztQKDZ8a>YKj}+6soF{6h_S+KNXK&jZ}(yF2!f-MvD${CUvHxo%3MY`H$>*vE!+
zC@b5ad(EgKHZikcC|f|z?xXZ4)W=pckP=73@5yGg8(b|?ki_h=!Bel0+Q;A(1iT5`
z61eGyPn&Qsz=-9c{MznDT<z%~D<FJpt6RlD6Qi&~a`>yN#HVTKjpL1(p?avHQ|EVf
z%;Z!cpKV@YQ)lA^8MRjx8i;eHgoARsM6YR9aMk>{&mw!#Z&{>-6ip<OjtMQb0^>hl
zK7K)JblO8n^dlwsPMNF^2B~}-d@RyjDk*k`pWW%19!+;i&|EW7ry`H`*Odm9&5%ag
z663O}BGYX0YEDVpg>5+wsy5?dJao*v#w{UgBv36Zb$Cxy_SpLKWU!V*l(=gkhrWQ+
zU*FIn{o>r(Bd!$aQ+)_+XHA$*+6KQatAl(uq1-jSUwIc}g=zsR#z^_b6Q0~tTeuQ{
zk!s(BK~1fMBSK9P>7J}o63jNSe5xQZ5<xYE5vgXL{*f_|s;K$+Mz@zou^aEE;sY$*
zW9s0&rUWc8^Hv?O1pgBfI>d9BsxhL5AB)r*KS?P5*b%L{c!eCoY-JbB^`&zIUra{S
zMPiNx(<XK|lq-2bw5!T8Edh|a%HpJ@X7Lj2GGwOUJ^L&O*DL>?RFuBTj!C0vn{9H#
zfH+5jHWquU>v+{<-K_bbbtLqS{j_FeT!NPFQBQ$`#c_;&F4L0ST?+xpQhY?DMuK4L
zv_VBjriQp-9Bq&m^x;!+;3ZPdOyk!F%(NwBUROf$KK`^lHxO-D{WOIrSCK_xl5#P$
zB8_nb=FG-fUspcMQ?@3C;F`7o)bAh}1fpFjP#wJFXrCpkg39a4I!$;0BG351Wlf@`
z5-!ko;`=>On8ZdjvJ#6E{~r@RHee<sp8N4AjE=Mo<ZIbUalyf(AaOA#1~okfxAbsr
zi>amVfdWd#_O765*-@7OU@Oh3OWcolJrqjvBePI<)PApNo(J3TN3zgM@C=FpqzWGP
z%kq2BcVK6osISFkZW9+}|4t#f9fGYo=JX`=tfbcNI6JO^1FS(RnOlacfRmZ$fE!d4
zvT!MU6QWJfOlsy1odRWYlq6v@xV<5YZiS$(2Spe*`tg0O*c|WL@0E|R4K4MXSX#fE
zTKJh#VDx=dE;JllPyJ9kj~w#yZ@_EW_h!DeNM2M?Tk(m!VQK6#9lq{jAB5=A81GL$
zF*lXC;{MD~4~J#klQ`7tQ;cH-(Kp%QNvXd|+my*DaI15rtYx6n*lDKUFKCGCtQ$oR
zlMsu&)N<Dr3kkiClfIPKmTaJdAzR0`;mF2FzSSfjRAkbAR~_)JVsdwC#WMcx@6X|8
zW@eu)&Ei~u7QUwyIFOc2_XX2D<6m0Q%Lvbu9&kSnGF{bR1rs&?rtawv7=#xs+3!5C
z4@W3x9swsODGU=X?A%f-Vw8?lw(IB+szZ1Z0jAXbY1#!tzTMW^4a8uGD+5z_WOIJD
zlG+}F>HFUREI`x0&FnW$I%%Rrta+ocl0o~YViA6f-8vUgHgW-Uld|wmC?yGC689R7
zsYaxM*;E5^2{S1|fQcXBLM5)^8dl6Ttg2iCwoRTCDjm1#E~6+xa*fTX?tstLRgzlg
z!pQBZs|q1+h7m6m3FM(@RR(QT*M=rItqwP_0mG>mn!AT4vGyeq5r5N&=_AzDnOj^%
zxmv%o4CK!JEvCHS8gv&3x(f-q(_neBAkdA2sfo$Lax(SpZJNS1!P-t0OiuxGRH`7t
zSzx3VKyXtEx~oG!0^8>U0RW4E97vEFES-tJs~^JI>|ORlQj}SKRsEL77g=dF#R}Te
z%67ggO;Lsj`!Fs2s>T}5+eysgx1-XVH5-th#Cz|vd`9Ut@CPTzc)Ntvrpy}ji(ej>
z=W$L6HRu=R%9x>PIy6nWGUjD)@8rX3FqqBZ--k~g<G<ex`uJ!50RDY6pod3u_<n!z
z03YrTzN3ebALz>iD)wMDeF*=?^zhw0iaxBuh#qE-!};kwI>1LInG?K;&t809I^B~G
zAC}jLi{*JZjmsq3;Nwr^5V-mMwCi<OT`7Wp@x{H?_s*BHN!ua>3->;}y|-7!1?AKc
zWo9L>5uQ+US>f?WNrI0`t`@r$?_49jQBNg@!5kh?{oaR5(Hl}y=|T6y=O=?M8EBQ+
zFUw_|KMR3mb1`aLnZ3>~<%{)tUdoEfCRCa=c7_{!^tjg}O`u~4cr~h&jZC%oQH)aJ
zgZ{8uUq2E=uvypn*UKxIYm%}G5-GIEDOkX4TJx;XZmnW?BmMVG7YUSl2QUOoZZ72%
z#Qhraqz9v7Yz)W}n9D^fV3B?m_FM%fAs*Fw!L!*Wh#<LsySdNT`zy;xG8M~6HW^Yj
zH7e=0oI>h)->9FYT5d5fd5HtZ6bFE~cZ6Ro>Q_oKZy<?;mQb+PYHO(9>O4I@(GrP?
z#3V5RCAw1>b5E5G)Itbz?GV>hDaZCGA=E%(E*{*i04PC724`LYKTK;gZ>gmoiuP4h
z#Zt)@mo=(lp*$8AfUcdFmUW*yae(Y{3T0uH*w%T__=_+)Z!zAWs6uRGNorlTgy6R#
z;I3uIBi||072q#vP`1Dl2gTC7D3Eb`RXJ07iKLGzxx(OFlBbc?OfqO`lR--+gC-fD
zWGP<Zvn~&_p9v$_B=`jvjttq*&CoMsSb#bzhy#|<I>olq&$>==<yu0fnrlKjQPkkz
z5{p49dn#l2Ot}0V*09_&C4;{GxF^FS0N98LdQ{>$%w-A?+U#YN3gcgnT<V%`Wg_H&
zA&P91{?{V^#+134bpqKt&Lixa66B{>gcF(sxQaWy<~T;|TZ(a!(5I9GUitCHBd1Q}
zF4=S1;etIS#@}oVk*d|}t?~}YeTSP>x#I&l=gQ~^Vw7;LD&a{UoTOY5Ef`klGpBi4
zU>(D8C3wIn#QR%z9hp6ar>G&fdWv*U%YY#;LuwZ2*Ks&nKvOvouL1r;AD7ZRFVi$R
z;<r)GBC3e{qOwyLCzk1u)Oh%9$~*CvEwU9nr+TJS*R95O&kP~KrH<(?Vis`N2rb#!
zRCcYdv-y+0g(nK{msP=s6nH2!pl%gq;froJKwH0!0SRJSWdq6>*0<PU|H{%7j)%Ra
zNsg3lcxV9XBE3UP_`N@o@cYk%4AJXjMY_V*G-S@gLn0aappt7FzN@z|TW%ypTCJBI
zNs^SBBq^;;Y74f+U0%cRg$cA+cE=QQ+2}#XC85YyuA+#^o>PjUkp3NIwngLaE>luX
zGt6*?=&;8QDCl)0J7S<=Ph6y``PR~ANP3##^lkEGyLv|gpD3%>=%y^_J6mD5`yuTb
zw@5fUP8T<Xo@09-<MLUa=V3#_6iX{mBmFXi^h*zhlN57NAYMkXT}tx0jDi~&fSsSR
zqz*8&rG%1`<AD^0z$X->Spo!Il{CYsvPu&rWM3*FJKA6$U#36j8E|3c6=xrc5IC>P
zAVU6)#X*w7DctK2D4ar5IH9E;*3z^R!_tUEKleU-<9zsL{bBa4d+)4Dh+vrbZ}6TL
z^gBEVbEBREthh=IifW?tAXDOSKRbcNM2kRxI1MI%o>$>n{5&kf!<O*qQi=YR$>#b)
znO34<cYZVFaEYRrliId~=y4znBD9fUB#Hj4!8|!^G#3oT?%rx^mmYdNiraR15^Epe
z1sfMGYQ}~7dt!f2%$?888xq*}GCs?4IKYkJV?>=V;=-}_%;{bNBaVq#;g*fvy?<p%
z>U6sXy2S5Ids`!!=rRCIa9A?iRZ^f@ieAVe4wX7iaY^>zIYxNg&(Qa~pN&G5inj;~
zmKCC09pjQXQcsC?{ca}^0tFEp8n%u^f1?O91BjiY7NSb^2xyvG^(a`%g${!t;s}%~
z0AARG@%1wImI0^!RN$BEP2<67irzC4k*#Ve8OZ7T&qb+Xrd(JBvf+59Zn^|-y3D=R
zfhawcZP%z5H0LEl_2g92rs(^Tlx<e@cps|pSHfP?-8hCJq98H(E+=-*qCiz;(+OU?
zz!iRKczR5fUhTwued_wTVPe#x1pm`vFkoQ}KGpO<VPzb1`5Yw_Gqo5*#;+54<rCG(
z-v0m~U02Yb>7L;^)<S~PscqEZR`h(v7enJ`>U@Rn&wNE%K%@9T?ciq$)~?iF_E7(h
z?#!g`)I6{2>42v>l>aN3b>-bFx%38Gh2!!sx#nP>^8o%yn(WM4ZZ@5qOkQnKFo5gL
zRJnyN<|C6tdL+fgfDSQ|!y*VzmZ#nnc*Z3iYo&Ofy7($sD4(e*yj&QX`Gt{BMs(P8
z;xk0Bb#rARcXux0{4Cx<+82;<Nf?JH+nsI?cvl)g2LCuyZ=tWoBfc7ss#l|2jTH$K
zT{Y1BWQC+O{s9cLIyDldo|k*jKz4Z~T&I+zqX_;Ud+=4z#b0F=`~a<Up$+R)1>aM<
zk|qwy5+4PLS?LB%*PCc5Yk$!l%X*>BJ*9p&2sELXZV8fs?1YXuBL;5}3&C$RcIL@n
zlD04Sk(Wt}NX7fVRo}m$c*F1|E<IabS+iF>{L|*cH^%xU8`bU6<^FUaWYOJ4X-1B-
z-J(Z_=7q^3zho8%)@xWcdO7f{*A#jT!*N(|0nr_0P}oR*Olx|vRi|>Nfah$aTn~6|
zT8w{vEMSdTKb7s#?a;TB<<4r+`epSEDU<%VL7DV5Q<v7`pMR!3sHTclV8{TomG3RH
z6Y*DDg&C<U(;3OenqwcDxq5D$rpJ!wh_(%BJ?=cZa{(nTvjU2oBuStgsCN>P=p*Tc
z9HA+P>!gq2v_x|>VDzLG;OpCO)h4-p%3g;Vd1Tv|I%AUf;fQ{OLF6Yv)EjE4pm1$z
zj|i#Fb%eA;tRrlCe;9v9W^76ITk6p#U^g*jVM4+JWj>(;vSW&@SOSLez*EbOXgb^D
z%Qxg&(#aEn>BR&|o}o!(;5KxJ;vP3TFYrRw11(N_C0y-tsPwp!R+C4D)#L)NdundR
z&VCqae&H?kE_q9dS(ICS5X@Y_;boGttYZ}%1v9fwCs@kOhwJyqZdrVA-SJAbqCCN&
zt>$64?t$6R)NE+IUIoF??ygZBNo-XDbET>AI!FE0dab_o%|0+eloMidcP9*1F7!dD
z7S+8vyk+D;3n(&|UW1<CTUPxLjnnD(5&Tx7@C(#(&3q+MVeE&>><q(Q682nXg&*pu
zPu|(rA+P9sm41W;(l-0>EO8hn$#@-J!A<;U@fh=Nx(CA?OrY%XU^4L4n(2}+QVb(l
z8IM-mr~t+d(n}pp@dc%Tv%D5#nQlclij7pw%V`XC!}7RdSYGyIJR<AxNjfxRGxDs(
z2eULpG(6>-oM+^=oy2fb)eCr19dB2PYddh1BLi7z`1@e$DQ4xe9GLJx-3|HfZjNTn
z!hGu`V*g0j3}FL9)I*8y?|`1yUkjBb2Mrbr#6F^&2-2(x&(6X%=1M{sGIGnLT9zZ*
zek!G!u(H8g5{bNQ=F)wlEH0*O#3PjWbe8%<ckc|yA`A<(3J~D|W}Q*Ft8z5uEyawf
zI`j%+v9TdkoifRh0n;F;j;TR!(CZ4x;ZmM)9MK#&mlc|p&u}wdVH^u*&X?;P)tGak
z&0epM7+K6kBn+}BBbt=1C5$3Sa6nJv+G&GfuJk&~AYby3nRVT<ng}Y{JHX6E2V05*
zejM9yX@16thcvZk_{!N*(7-{J7A8|VsN90<J7P>zSRd?sDi(bqHp0UX-c*_az#NRV
zZ7QPHR@2~(ExF!Q<PK82(+mlNq&VlsD>y}fCII!3hDwoG$u22W>(?+$OxR0D!(Vv%
ztoe~A50<|)_0=uDejKs^yAoSnIVRSrNR8aFKuoYteGP(4=X!e^lT$A;Ug0xhf-+l0
z=W)UM`_Kz}+GJGHONE>3yE2FCL|!r|$zk2Ix;s^Fo6yw}TFCZQC5DSgfD@uZ4{bO3
zDh1L8ujXR3AlrANyG6abh3XEq(;JT1QrRrwr>CP|NCtYc5?+y*er<)k2WKxff`4x%
zNk!HHbGr=E55qIoHzkvsl2<k*JJr&2+?0&tcpM-m2O=l$B^u|Fq4Ay=8!SxR$F$y<
z7DvF#rm_UGC=c6+XID0;7XGa6S*4a?o{n>KoC>UM=px0MZRMjhRYPlYYu}`1za)42
z#Q$_i{_4zQG3iQ7>98TBTP5m!Z3GV*NASQL!2?pNB^1fDEn)|yrQtJl0Q7Jt)=1Cz
z0wg2F^eF$LmZIQ&iH=hq=Zb_a`H0UE><Ew@;yI+}QM!kF^L@B1oLb~C(evxl0ixJj
ziY23v_<VFJ|8c4g3Kbkc!2$fwNc`L+NAlWrI=7Sb-XYI|$W}mv(s%MdsfXFNeda0~
zR=B|1uvK5fhABx)r!;p+)-Ad2h+>?{sIw|Vw`6(g0>~?G2O}-0eqU11P7(j@BR+-R
zK!Cr!>*jkQfj}dOPEZhi(D@0Cj!?MxDfSBS1Frl?v1^@ze?nRD5_1)am#%9K8e2Zd
z^oS!t5O^vnre;f)VcO_LUX?wFnFz_)SD#dc8*tx9Dw8ea^evK{BV}}8BwPi`CKda{
zGZh-tT&&T{ET=O^MO})vLgkPg8J80|zTQx$$WZnbp*zaBG#^X;?G<oz#BZPqJ|apm
z286>!>N3LBluRC7^w9w^0eiTlqCv5tp{r)fRmF^8mz3pk*ppL49Xo!(go98pphd`Q
zJJ%f2LHhmN8kw6}eTS#Q=H#k0Lj;(*v5Rs7Je+Sk8yUfy4~DK*q@(5l#xks0)0=ig
zsHQ0?L;b-(N5iSIQKM4HXwlaM^JU)FWl8!{XGmT<i4X~r@udtybj$b!f{Jzw`R<vZ
zUuo6OFx3PGc9bleCqElEx_m`=@9Ngd0fX--f|JvVXvBI!hY3k!VIWbIMkoS&#Iq5Q
z=uo|Sml-ceTr8U`Gxd`N#_~x?T4YZ}Tpm^5>3MIr{>ODC&Z!Bejj1!$i;Mk7sil~5
zq{cAqF}f95lAzV?C39QX(43hq05ZN*daN%J3J!0zzE&o;HnjuQPz)o#lyMr=s@Gny
zu{azNJPT4;p*y3-+Q@!!X!{1xpwqpfvydO8B$A!jDO<hq^(FDa%@s|-WnIzwhP`_)
zRz<lpjdx(c@oWcC1pJv^?fefe?EmZl7nRU43e(xn|EL!Kr>nyTWY9VcYX9NDNII$r
zC@D&pFzKL#y#gB~QLVy@sc#X6AN^(^D<!+w@|{m@<;cd?c{QW#h+{zvqM#RS@Ux-z
zLV;`_jUqaB?!cCFDD3T=3IGW7if+bRAOW{iQ7Cs=@mn6f>bWzqMcH`xW0|G3wB(_c
zEVr}|a*F9`WkZ<Zf%m=2)}V%h-WvHLd3x=!gN!xcGc9ilx6(w*A=T348<rOCB?<Oo
znVKR6m3UK`nLp+7nG0M&@)P^fnhjprwJmk6#U{MSS5<=s^?fy<gmwwqW@VDKS(#+o
z%48IcLt9{hrX}JPD)=OH5iaAX$oi`nYI#O<>gv2GiJcdP4LgW@75v}ZxHJMNm-PV3
zg&jay3y9?{w}Qd1##4LnD@kG<iSW_lJDH0x7j{ItO{IG}a{VK>6HN6)Rv3zQdnyJ?
za(3h$^>jBX=m@H%@TxIJU?h%N*bB5UsjVfg)SDYL{Vj5XTk4BPjYQUhE=qx3i;u}t
zB4S_w7!hSEYwyQ)J(I$QTSYxOR#{d0Ze$x5Nc3(ENmaFO205?4T>OJ%qjie4Ox(!3
z%FhE{HynpR3h1IZ<aM`(xs?zhW7tYxW4(3uVNgLxD&J2k4G<^Nanz;@%!xlK*mx#$
zju>qqGgoQG9mnf+rV)k(IIb|st<>rDJdClik@)-OSy{r=ZId!A0@SUnO5-`NR$!me
z5d~JNY~MI{<)Xyp8}%APPbs|b7?)L+Uxs;uo)8HMnfkpiqj5>yHA-egFBLE`h?KO+
zElI$|NZ*47B-U0+Eu_AABss45AQ8Y2kf88nFm%K>F5}I6gT8n@K|)lPnx)|SPE@P{
zR*+UUMsahzl3HmlV{cuhOmFDgm=3K6Oe&LUOSyMyfCqsM=F;y&%9zYPTL_o9zD0Fl
zHVL(+ZI-DY@zA<=!4lQOe&bMFk=nxSdsIVrEElT2jx9KDrnXI{*P2=#n^ulptEjy~
zXreAS7CK3uyrSNXOGqPuk9~3(_$c1s(Iv^Hb$ZpUqpdzJ?;6MSJl+<_^e?<sw_b;L
z5uw#DL?d0Rno~VrYgx(HDmf8W8Ij6L<rT~9ykePUBrGlh>_v|CzzAdXxzwW|d$5YC
z$*EkxTQRq^48O(vs`+ST2vN~K`)L1rrdYdQESku?Wh%#~<!TXGx+_C)Z*_SX#3FE)
zDh^Ssn*-)qGsQt{$+R%=r<Kk!HU(VNDj!T4%N+F_VppwI!TZy8^0}Kk;w{0SgPi_(
z|2Wd_n@WAnxshj0CzOhvQHY+4lIaAtP3z$@<*z0zYC=+pCfYP&7%0QgNsfwKVae8*
zk+~Mgk)qTn5_8ydN(y~~Vy}Zh-Be8U2|brkac8}u5#2FY!QC;0<M0$MZ^#aSA3fBc
zdpdVSj^Y$<725;)00)BMUxG|zV*VNn=_-H2+6yI~<i~ee<pt_Uv`{!n54o0<ow8-O
zJ_kxWBkwPzXpt{UQx>i5#pzKgi&Xm@E+LT0XCc#Uxjp`uI3OC5MB`HY#H%H}7_1d-
zc!>)lUk}>W7O{i9Ol8|L-5Jko@=5he38frs<R^BCQ-yE2K=reQfCUMKQNBLKT)?r*
z%OFC$p7yn&{IPZIrk#CPngd2qx8J<W>hInVHg&73{?u;DYQz$twvWb$d!+&s(d1C?
zCh&Srk*qLS4Wads;2~>ZA?`2z9#FtINMKcg6n$G6D`u#8Tb+1`mI!a_Q%Ao>)K<JL
zb*uxq2WW5ibqmvSvl>?+-gAM*38M=BFf74rARiCNA{2|*?7kWzW8?<#%})E(>Dd6B
z88B-UwDc5;6ET`Skb0{!3##8LN4Bvy!Ex442yA4!yZa8K@MR)Xkg~@TgJZ3x-M#D$
zaTPbM*e5;p+MtbZ4TG+(g~27~L2W>m5}#!)0)#~==v2ai{b5eJe5<4@2FlQpSFe`l
z!RwpG{7$q})2t=gCFh*WU)G5*5Uava3Yv}TuDPRDU4u(h$OCmb4JC2YQZaRn<F!dj
zVumqIh=@pmSQ^9P1CeZ3>-98;Zrf6{u;`uoHD(%WiZ4cNzY`UG&8h@LOKE7GD&{#!
zPsjF7xuX;YUO8PUoG$B>(z_stEtCka<k}w?SVipz+7f9su&QH(BhJyg5Mv2yn+vw!
zxFu?@T<>b$_1VxY5pQdA`x^E6x|C))oC!KsmNY5<%3Q-VDeL841cY1>WPN2>vm|Ds
zSM*b2-8DayD$rg8OF*YwjAZ=YR9n9+&}4>;J%lNeP&ZDLXh`cHrB7dw%EGZWTS}$b
z((dk0=&N0^<%!9bC#}9t>EN%|G6Y=AuQ48&Xj|$(U4MEI0e~5etLC6j)d1@*xPfXh
zZ*dT+5DE)#NxC1!S}pl-se`Gu>8DbuN^g_UygAk+0%C`pS78zi$$wDzoUPf--_`h&
zk}@u7@Ed2;1Np|nKfqdyaOE&Vn`-54S$D`Y+5pC;9AyBm%$hJmL+nRt<XNwcq>ss;
zkgCU^_m!a24#th{BS2zoX(dZC4luFnn3x3P0-#%(@(R{{KCAWll{~1NtcuZ(!FJs5
z0*)J;Kg(tq6eM>iz{CY*Kl@LhqhJ<3Jocb`!J+Wf5Hlsicu@x3Rm$GMGaX&-?bXFJ
zTTHsY|Ndb$xc@ln`uqm36Q?WQx!&(L)h@~_bows4Jvy-SMF#bU@sn@q5w5uz@JFsI
zT6emtyzBkLYFh={I9p`XaPbb%)kOdFn@V0L(E8<s|DgN-^SkE`%2$gRO_@Z>HYZ)L
zF(D2sku@I7wJ7u6fB&C*GNvq<rNtr^#69mr@$EeWs1t!ZRbJf_wEl<s&WFpM`(b)-
zFa8`yPD~;3mO-(*+XaL_&%=wjfVD<GPb6;>5xP`51z}A96?@%LSEJwsJMN1(%;m{~
z!`beN0WVxPK{c;A-1Y>9tx4I8I7z$rILsyd-(51A0`5z-r@|B_o{|5(hOjB${zXgF
zm3QZ{$oYy<qIZ@eV8V{m?Jas;cc(bdR*M<g>%hn4B0=oRHTE!do0FqI!_>pzH6j}!
zMG}LdM8e%cPxAM@Z|`{+^FzHkIqd)Q)Q$|L;yCuZz1WTl3={5k{he-aO1rgjq_@X<
zy>#jNqNI}@Kt{!S9Zq6D7Lf^MFd=WJ3r*}?cYBd|LoYU6Evt-p>v3igz&4r)XaH}Q
zO~mCJEO3K`2sI*l{*ZRfz&)@tKLNnDGFks9PhOO#>$Ng*;TJ*N8+sDY(1M9TclRF|
z9z5Bqi7>P*!%luLDWNspivVKrD4XP%C#s0cpYR!wrifSiuac0Ym+eu*jvcJKbSI?`
zSBjB~?B`OMd;IGzs6`-?axc3~<NSFR5uOL?5eAycAbS{Iog)rW3>Tyf!&$a0<Jnun
zk>_z-7AU2A_V%rQBMnS{=6ul^2V+tsaYGZqNwQbquTyyhVYEMU$lQ8qG+M+Z1)iRE
zo@&x6R0iTT_oXY{w!5E8GHuC3U<YC@xfLw-E<D4Knq(66ViDsyic6$RJgHR@8#*ij
zj;5<JcDe)(UBonuetDr`8%EI{$3T4=!|{n7s}VRM^CU0IXXnXcCbY~K*-YFMVs%KQ
z)pDj<ptc?#m6j1`G2_mUO%g?HH4-SEa4Zu8Q9cC;?SD81<~1}#4YHWX!5(4`b|9a~
zE#CF|LkvTp1PGPFNKgz=7*i_gH(M(u0u30}N~Ksw#37FOj+h7OJ>E%@=w;(@<fc7q
z3Y0a-ZV^h@eV_=M*w2nZViiHR3%BK9Bz!C7@I@m_=(?zMwLIOEh|U4D2^ef-!wp7R
zdzPgo<_ah*9r8~MLoN2fvVkfbo;ARs+flsYc6c?jA-*bu>nDEqX&8MhI19jce)nBC
z?Rvw3-+hsiZ`E+$@BXy9c%4Nb;o-i1|H$vYJx}HUjKjx1Mhq(RYyl6@;^6|`?n4{T
z!ezlV_o2*-A_|w#%YA5a2mU}~KZj@WFH89SfPX&+qy|q9u^V7Y??Wd)WOxDGhx&j@
zv&+{pc6tAac%;hTiHA4I**ScCFc8n&+5>DG(0}<BPCEJkK7i(55op10=;3+1h|vY@
zA+$5<dXI*FH-NQ(KSyyH!moY#YdC=7-{M~wP7nXWI6V9dRr~N47j6&#Lgjn#7yH($
zhaJDA6d2;gqk&#T>{k8WH&^u0ee3CgSm5EKhw|6s``rDLM>K=slgBiL;S({uCt`Tt
ziQ#=GhKDozAK08Bd_RG|xMv?e;14KpihrTNe|0zBKLJ!8Kw~bf7?kb6VnNaW1An04
zf50Co_YM4kar`Izfg%1k{DJZ9!XI9<hcG6G7un}U?un8AE=KN)k@v*N$71Bai;*9Q
zkx#_P{~s~(YccY*82E+<{$Jhy+ITOU`G7S1l$>F}r`_Fq&wvQLh(FwOKFoTqAe+^9
z%JXq}hKZTHAIiYFsj=_l=wtTb9yBGBJT$d*Q!7VdRI82|4**SFz^(Sn&67HM`|8Ec
zhuQjF4$Nj+!t5sg$>aWar|S>1>wRzIe%RalHvi<`IO$)@;0K^CUY5JNy_Y3$4daK8
zy>C!N_f0t-;=h0sUzH~hp7g$fy9<7O_lSN8lIxq2IS8mS#45r5162q9!bv#|x-Yv>
zMHYMXkji~GFv`j1NcQ<m@T^d{cYogn;M`I|^Dn<q8iQA*`_F19H0QSxJq@6p-*^h}
z$B<L~-AEqd42Q@zr_lI2%t;?3I#zMXh`P4uG9P_MjS{9@;(IHCQl~>gCQAHA3{4rr
z{pSo()}p#A_fW`_!p(spdt9TjAGMUGQ;JxASjsR`&#xri%{`l?jI1d-K8|YqZ)W<G
z`_=+Xk!Buv{N`8FoC)XsY>~id-%u2C*Kb%lyTHk*?lU%=_T&nsC^J#-(IIKQHlBy(
zf|OMu=7_SfkenWE4wiZRDalsF+hn=`xKX)NO5KFfbZ!~r!7d?rh<TfoOCnM{LEz*R
zRE4f_m&5r!fAwouP8_)zy(5AIGxn5d_5>Ijbl#LJWo%(Uv+9XnfZU3MM5#=mQru7p
zzres^lJ)@EiTxBOB{xC=m``0*4Y=ib2<_2`Bc@s~%4j%USmVIDG)Xi+(ko`M^7kv-
zU4;<e9FPp6qNO61GcQVH7jX4Mog8m@!SG$vyVRq1@VCsCKJt4@Z<>{5b^#Ck!x&>|
zjFIaPM16Fpg|quUnPEVAXlkIFp)WtgSdI-6qSPzWyE(h*^JbV2@XO=*9OyNv7@q_7
zC@SUXoh<g%k@d_m1hMfXh4|)ZQ~`dLt`}->XxJkk%#XUd@mMpSY&Tml$3+?6R4;<G
zrW7bjh;NV5D<>ps!ocFGS;!cRmrf|OqCYT$_&3G5_blf$y>@ZK=9RV0tM8mn8SO1o
zp#+w2v(T=mNV~JpUOSM=R}Qgd%T#}&4)9G?RTYmAV+yTMicwmL`g{lHL;gm38Wsw(
zO<5P0J4#W}p)iwBlW<ooGF+yUYe3<cBnT6sF=eZTJ21a%>yzIZY{-8|_|Lmu2gZE8
zL{ssR7R^(@4cpi~4@%Amo5&xb_%X`$oB(H{iIIL0BpCNg&$APRMge?78D2GNnEn+3
z1W-j0r9e+aX)qJ3DTEBHoiQZoxT_Rx3qvZ<6KOKp$R^VRTU8`e1hJ(T5gFjY15!JH
z|1Qsy=p6n==-j+Oq)m&?o<%>#SJN!aXOy<iL2>Ym7^Dm{jucmEd5$^NFr#9;H%ove
z1d4#m<}zDmb2F<YHzHyWZf}eBM2M+=X7Gq-r~<3L)3ZNPSNRCey5wmUSMJ8rpg?{?
zfOX8GC<WK;&FuIW3SJJBKi*I!D`b@4hpUPx74i6h-Ja%c7l5%<4Vk{$;K<7KwSU^|
z%!9Y6vWjA)BJd0xwkRoXiv2kyu~c)wLp#`tar(V7CB3X+6*O-Oy>gpYdP8bQqQNf|
z2I>5cS1C7YT#qy5X-6n`5uO#ne%mz(u#zKV^!)gU6T&oGUXzEnN_deKhkQD>8fx>v
zCdO|Jf@H`7UBh6T+9XNGwiZ>#9Coe}ZBDhm&GNg_P}SO*$S@e|%@*AP8yf~NMk4nV
zrEJppw3qLZuK5rF<tC%(?cwifc*wlzxw_UGHo{_DTSl=9KtRXURRok(&)y?rL+$Ts
zpfa+5%d`p?a2tt?Xg92CBvv&KqS~rr1Q4~Vk9Spfq^ZJQD9lVaVas5_wfKoCPu4aO
zLVWLZmg{wADF6|pZNkOyCI<E%Am1s_S^<r*#B=6u3dG$JP23YB*bVwmP)xeLZxokz
z(!I+(DS>5ReF;*Ca3fPl7#_bW5TH9Wy*1DS#+YT1uC6q4v*0+zxv)admaX&Zi)6Pm
zr1Dh^^2m-s9x2=Vn-&qqZVlfa^e9s!Qt?oSHSkz?)0;qHDnMZoOlzR9k~#QBk9SvM
z7j~VMu{SHdH?A@1sXghb$XTLIOL?c8j*8A1lSSd;=d3`pv!=58Y7;E4JOys1ewvJC
zdOA|Vdd40YcoHuH;9xP#6Y`+LkrCa*W``4_2R2?AP*_ZJ(<szYC?3enyu`?Ax&ZY7
zR|jy*8S$<qW#>~MzyPktZ@`0!U@AegqmGx0@iC27h<nd06EZ=fXfvh(xo2}?IX?Cl
zfSiP^mZ$qni5GUFQPc}m=%2#Eta9U^#?x$-&Wghv|Fj!H|LO2p<kLVg%HSUn4H**~
zr04}cipJKAYPk&-l^I8v;GpO&lxqY`e+>NO^g!7pEcPmsBWk!Ho@9D}st;5<aUiY;
zEmi=z900ys)G&+!rRyZX+}cZF#JCKmFo7wI!dO}%BcL>gIc7Kv0di9F7RKPKc%i~U
z@ttg9Pb}*XPiX)quAw{?!q(4*G%rqP*iO>8egN<oZrko5q4s^IQ*>y`{NwW^$B2A?
zHX@)IN=bS2AmUjE`!XC%{_$s8--7xy0|QpS-9l~2TQw?C(j^|4BPKRhcI|qAas|HS
zJsPQxK)IvmvB}l*7+Upg+zlzv9Fw+;y~hS(7xInTd^;5pLJNA8`)zc?SE5Fl7pSxs
z30)OQ8v`REzOV{g;qojaEq{%4)R}j&g2bz(5;L+{fDVlT<;)v`j8L8l0Q<LO4EvIf
z)Kc;qYPm%o#Ar)rYN&09&jCHk4WdtIjiD9RXjO-tWKrfBw7YRqyS^(F(R-9S*h#&U
z7(>R?%n35rHEmA^qfo~o4k=4rc)F)R%dxj6IZJ^!Ia+a|rgpm22tm(Ph(W$pd795N
zvZVg2<9?dgmchv#rZy$xNuzNaO}X|EfsXjgy_4*CHpWUgWLk%P+8#C1{Aatb20#En
z%_>6uR~lZ#${?%D$E@4c>8pB9)7&Rrr`xkXkX4i0>$+WYT_@d>ZqMlw>j~_WNbmqp
zW+A9`+V!DV(V4!NCf)y_4`u{bA);?#B#odwN%20JoyBcTtO=9F56NtXNZ_WDlqaZ7
zcFMNhwK~%{${H-Y8i8H&EL)ho*xbROwx?*E|3ro>qpKnoH;7(GRMe3pcALGLUPggp
z+CT~@%^T?dQbn~dE&5*uv)4FGkoV{%v4?IHio7oc>uifd4D-3O=FF{n!RTUXN}6Q}
z<4p=z)zw6m5Wdl!L1_av=c$qMM#F8uSpW{V2+dkOIpqRM$ro_*QtXvT@6K#KZ`X_n
z%&?sX`D%<L)Pe_cZ0oh8HQ@nod5o<q{jC!f23}lh{1&N2y;!crM&Q(hzt&O&tdhaL
ztd{y*COMU^W<_5)(DYK9ZK&<~g>_~<4CGsAk%B_}7~)&tvE@lA{G+ET*z6=Zkw5#=
zdwLa2CsU($KNPWPh-hEH*$m<TS9o`G&G9}G?}S(2l7`X9#;4pM@{Ke+*0E+|<-jh&
zL@m*X{|H&Zu?zx_;pX)akg?}rP*Woq)Kmt8np#^i5hHbuf+Jz!oMY-eRAIoVr@OmH
zVz2`k?9}UEpyI-{mm&Zb!O3wHHPXJL-(lD}F%`R2ns;YN4XX?$Fn?dp<H(rDk(`G)
zWegB#??W*3!vM|qdOebjV5oMJ0}4VfMY6%c{n3HT_0CA9%}X#aDvU1j2JXaa0u4ly
zc?p-ZvHwmwUZ`zZ)E5Nipx>U<3gA&ui_|b0xmGwD54HY)chQVdPJwbsESW*$i^#FI
z%5~A8F=0m%;0qP_4g5%_)kEml)d#047*en2saboGS-aSD^fCg2ssR^(0NS&0!0s-B
zv4Vkt$0c}X1^RozC>@v?s!!B<D9S}r@feF1?qEaD^{H|@6P1fuU2Sp-W*#Y$Dn&a_
z%xj+j1|W<ChhBd!DLgD3bohP*|Kj&qQ1(-AuCBsNUw?Cz#dmI9f3u!U;j1LHeEod^
zJPp_17k&NB>H3r9dcn*i1h(>yyrs8*sSRjyoMtTDZZS1czx-=u`~)<X2Nd}XUZPc~
zu)l)e8}F>SJ*n=S$RGZ-{3Yy*{cEz%^skZUx=Mq4FMt@cZO{HlP5Z0&P(~PY36n7U
z`y2Rv7b7pb_GKD$I?nray?z7#f0er4XLxg&?(W_@V@o!!n>2O(Q5J2optFm<hV{CP
zryrB@WtNt2FMxSHM~Xa2ch1ti${Mi=tM`*^{t$Szc;{Jmv0TBS(5t|E<9hGX;3w2`
z-#f~t$pXgl;j-7XR_pa27$5NSI}Gzjo_58-zU#eBgX@bh^54M<7?yWXR+-#+>;_c$
z_ueOI(|4eaR-gTQukp|NAH!i&nI!fvQ~39H^udHv=)X@V#^f=3*LwZPf0IsnZ&D;H
zuHe@d{Tg_*8~*2%f2bxtLlNiR%OsEI+2<`AuwI`4{y25Hv55A|?{q$<;<sw>BQ*F?
z^qFJ@EQ%MVvm7oH|K1`0K;NPUXyEPjU#DIX&ci(Me@ewW)%a@~?T0CC==*s3V^ZF1
zc4-e?Wc>8mqoxgZWMa@s7k>09QI+5AUu0kU>UrZmHRw>F0vCYcgm*<5%rL0EwgZ#Y
za5hrZr6y6~&^YLi!5NfM65tXu7sOsw6Pw;8^&m7+)l#t)!8Q>SOQ0Npq>AYQGMl6p
zSB;x;t0wIi$$F$9N|LN{0FIVXX}hjYpc+S-7rjnWOX^BeJW~Z!Z$mfX-b!y_8JS5h
zdo@Z^8rjOEY6C;y5Df-#jTB$U$;@c+sS29Nw1R^HhkH^sbg=*M(R%%4H<PTT6z~x|
z=xya-@B<G``LapIyg#z~)gn6Twvv@uaRZ4KZI`g1;3jpdjmEAWF{^cO^}dyu)m$jA
zytVSk^4imIf$Eq^73vK=ITSf8TevqvMm0~BIMp+D{uYW6ZMMMDezYX?ElIzY^Xo2H
zUaw);&?gzu>#`hrZZs`ZgKu#^t65Br$^(SSGRS0>ky2!x7@$@R-PI|;Au%iHnm>7)
z?lFd6ui+<M9vDJ>;^gG9Gj#m~31cS#nw1=QTpya4z*qhN?}dXC*+wBjRWsWqUQQ*M
zGHfSCtl)}HoNyA32R@DnwSJMNv_~*1zAu;wgjp1OmuP?qgDL{{qSL|zq&6ARMos>a
zJ2BVYpi_OJpgf!a3NAbtg6qSvCMk&lDI_ZdZaCdI=YY(geZ{@tHH7TFo$P=@gMF<o
zZgk^CgohU|A}v7CY1;#lB^Ic9NulSOLSG6BJpy*$q|hT7fKW-lp>iRF=8{@pxYtXd
z))$&uUs{PL+U`Z+v($Ld0m{e_Ok<_JXb~0#g=U~%Xk8stzM93+9<0#WJjkiF@-epE
zrpjt<^x;%Ouscd9e{iObAsKT$yB_VB-aHTEI@~O?+;%r=oAba}mNGoUS9@jl%W^5*
zh~-5k=?B-aqgn@#?m{X|9@N!la$nV{;{=hiJG)GUa*>{ywHaV$!1|i<0BehBDg?HW
z0xbDb-X7>S-Ko(4sB@x$U<?a6DnvOzfF$DpG4R;9I(BzM%x;To{3%t#@$ll8r;^YB
zD%1PJKXv2Fbb<q^n;+cXD5-2TN)o1Cn1`sR{U8rwTmzCp<>Po#2%%Wq&jG^%tAl#D
zoD}m8U^f(%Exi!^Eg3yb**<4lwa+ok1H=sxTa=2xTd|iI{-_n%P>|FX5Ky}&gz!D=
z^TNFgb@30mZ|>bL_McM|{L~#oc=yF!?iqGLA&qDo50X?+|0U^paIxgdV1l560zaW_
zD~~_1Du|8Ol2)921C43rRNziMYYRmPV+t8n-_1VS(%*nyG;$I6gu4;>I~4|Dx=*Hv
z(WUiNYcG_ZMIk1yQo^t*HL;Z#L76eSG+3F6*GwQBYVM$BQtNehj0LEwfoZW<O$Ob}
z#0$b)DCXUcyQ~w)e2XO1rH)eUXlbLYn^b)}ab>VELusJap*ns;&lfkmm4mI!R~D5l
zoW>9)D+-rx4QQMyOc>3Jn)0+YoB$PU$Xb;ftOS}=x3@78*fD2r)G%4$o6Mh$*uXYX
z|EtLKRk1NqrX_By%}k{B@KX|Bq6IQa17MTO7)3T-Ry9dhwg!__aG;r&nGBfgi{9^m
zw@s*=z?5QNfz$zTBJ*@_Y6NK@vIO3dX}f_@?4`IhTiI+zzWv%Tbb1PSxxCG<j3{iL
zGP^b+L?Q;NGH4zrD`WG-CO%C^+f(Z^QNMt3gVh3BBAMvGZ<r)CKr0xp<G@#3+|Uno
zrtAK2y~cop%W*C|@Z3?@gC@ujQ*L&SS#LYZT`U<)`-JV545rP)R!au^$cVDH(Dc`7
zPgS-;ewx_D?5uYA+?*KK5?JjpUBmB89`^TtqimCK^H<9@2RGblUtub8^ZjuH^;}s_
zO|EPwON<zjWKqf(v4wl-CKqR2cVu#^-RPpvfbeuRpQ8suh5PJ=c@p-|1?+a=cEi9l
zHlMcnGi1drC|?6%-VR^7w-yFAnbrKoIMtqpz>U;HlAdWC>D>Nqv~R*&8%qsL>R%nc
zf7Gn9WA<n;?Jby_!vH?Y1Tohs;WG^269q{xH0-BQYJ<KD;hq2r$0aI`!t!8J*K!=;
z*Q#~2&fU5vLBlEg90#Zz2Z>N{CqcAPvB8QU9~B3KQPJ;9W0CBn=yQ0vWqTJ(-GwsV
zP>n92(S@GxLe6&zZFAhYX?x34-SR+*oP>Nh#jF8p{h!+sS1&i#eMFWIrHNXer5G|x
z62^cS^OIbQGTll^Lq@;?f(dk&d8KLU;ibUv`%bR&`WbRH<SMj!TPcIo=zp%ri-}PY
zhWVV+7}GO!EDNj1jCC}iP)EhMtQ%k~$3ZkI43m95>H_Wcm)c%`dJsfpH&Qi+jGcuS
z^_MU|3~7+4s})7ll&x}l5UtnC00ZMKG^8SB2FxrDpKCA2O~p{e&{?QPUD^<wKUP9Z
zh3RHPr%TAM9h7Tlegf1#+Dk|hB$`B;#!~*DC^iYQN$!W}^w{X4j^L+!PAW##+c1r=
z+xi<uD^x`9iDB6y1=O(tsQ;=W3Y1;OZkH~TE=Qx_n`I*Y_JZyX#=fHmUqm$%1?gcT
z{zAbK7G%4GQUp>x)q#7Tn$~<ujQpbU?eC3mzc7XRDh-Y)5~GwDkgdDMhW}LXEYc_G
z;2JS7^>OeDV@M-=kG}-bD_R63T%go4w_Y%ztY}gvHLb-{_n<$dl++#Nv`9trh9dPi
zw}6rXLbFja)|gkGmnaA^qX#A~@8FU<eagxqn~jj+K8a2{Fh@+Vs2bm>+d?hM%gQ0=
zfF3%0TF#*vaoG3^{mwIVyH-1%PsHBtMMZ&ETF~wKHIHd0cLh_S=10xB$hW~<0CM2p
zTH{HraV+Ln=$ORAw^jgIIlUh$7MKkH;>n1@b<b}z^|tBl4d7dzWMsyDD$`<a6hLEz
zU+zF43(BsIK1K^(b|;`$N<#yrvN{1LrwWq?=n{{j1QK=!tmg4}_yyx_+i2E{+bHc@
zNQDsmMR59x9=npgmUR5tUYUn!0ko);bE*3?*OL6_K#!C7hlb1^P2N_?Hs*^r__5n)
ztqID_b)eq$v)3%4C{12ix*#xOfRhgwV}_P#ql7FGVAo=u@KAY}2w`^OdV`AfF@9ug
zyrll2VtY8i+DNDwekA!QY<7+dDc)h@c!0$oa2ul>DH5IOR(7qeAyp1HWeyDEQkLX(
zzX?NXo;N7_Es?vH(HbzaT~zDTnv5+ODv4X`har%r)ABvbA{g52FP{A<Pm^q&y{Rns
zEP&mnLH|>*ebh-+i0o8)F-q1|4f<nXFp#{p%|f5&mXbhcU3s0Paocz$6;dqY$iRFQ
zEr;IGy+2a2OCHd_QmN6TX9`D6kxnaxu9<2`H?_ilQfabHTUiT~^%v+QS+LQfnM8GR
zMeI-Vdy7F|z$SF7V5V1Pf)FO-+4$CY+XMl#<WtxEOZxMajeuPqruNb>g=so6tnIE0
z;&oD#l-yVi#BDxcchkEX-hHY+O*zBGa-Nb$b#8M|BR5C7%p$S#^}1uArS-b|^i3DZ
zHw`m@KBPrF5G$%_*RYPyq;-6@rv;A4Ky==wdkK1PbZi`1pow>*y@`3JK270(xYBR2
zZTn%sKxyqo7q3V-kK~kE6~+?mNs}0&or^duRyo=5p;_bhbbb}gZrQ6H><?-NIz(Pl
zpy0nMCP>H0?RA00zjyNAJN^IXRG5zD!UC~6mIV2toDSrOBibcR@@fp`i;fax?1M4z
z@ZnqpXJZv}$dN|EYNQdRX1GQG=WssSgsX*T6K#8#ErFuL`RP4lRXv=HXe!?Lcb4~?
zTH=w;eN^Sir5aEAMH`fkh%|$`7W(HcDOz~c$9WhnI13j`;wf3m5<4P(H=Gtu-UlX0
zt%r;5H*A&2FUC^$98gL9!M(RHBk^IpJZiX?$f$X$!^Gn_eH6k^2J52-fN{AaU*#Hz
z;=1+#^CWgNJ;1gHMUbJgvvFLb&@v-tw&CKBk;w91V#waYgMfY36Pw<a(XqIUOevfP
zA=IwL91!wNEztk<|BA7|40eKy1uTB#4z>gTf33H^1&M<?#XqS=ynz`q$0x!c%DD(u
z$52{G-Ltq+VE2qrb6a?+%=X&O+f`*>(i^C*|8JRU+)^80;NVFOA1kG|wCT1L-=2Pc
zk<J>m++U#*`3jv`lXZoC{7eIjxOys$qW|{{EEL?MfENCE6-W<E(aQf@%rX8wO7C0Q
zr`h}4WNGk!OAo&Ng16Bl?Q|NHI&mY~m#D;(@_cm2g*V0+K4YN$4+fUX{F_@xApDx(
zyT%qOOt@`lEE<On*bOiS7m@VQvCX5bV@n0%KTPO@rB5zkKr^Q3S^%rB$Afg@Q#?e)
z%{u<u#WlGd(3+toO;mULI2COmOySRDJj&l}N=u^4lX#Eh+k?}919y1%iVq`4qYE&S
zz4^i{!q{hDl@K8dbpeWd7~EF{M2KV<(r+l!hf$HN=I?i<1EqU!)J6$LRr3ychJYB1
zRI1PnehUno!%q}31&J56(S6K$yond_r!c)mtdaAukl@#bcsmBdu(3x4f)5Z@71fV-
z&<$=w->2qzxD@!c4dW;sVSgAu(D9}5f$dJ#>j4VYf=&l6n?)9VRC3oI>Vi5LOB~P8
zaXyRlNqI1s+>f95{Ri+5J`C{z{vn&?zcJ*atG2xOSUu=<hNe`F{JpmX00n%gheLs!
zlj12pd><~|GUz|V{sI^Rd$)^FOqlE&eYOKf<iwq1lRgc0=tB*+KZHudo<n(L;oClZ
z8v6Z5@X1uW|4n<FS0`ayz%2OMx=}w`8`T)E`_8e2%n)ZorS&{3_p-TTT5TT!YyNl2
z0u~4GmF*z0ukXLc)T(j{M|#0sFA2nIdl6^ol_%FS#PZ0L4)-mZ@S3ycAx7_0_K(2a
zsQhca1~wzaP|qyr3xr-6-s3wVtv2MyVt-m~yqd2%;es%#UQ1P4lMb&Oq#mU*=;xs+
zDPC#FKTR=SDaCj~<?Xtd=Ac$x>IRDz5um8MyIau#h`&O|Zk)F5!Rx=$4~zt7nAf)@
zDd7>|u^l9Iaw1TRor~~lC(TMsLrB1=!&BAiF)`#O;jD!3zXKG0Z))#3*{#S@@#Ecq
zy!omzp|=mXg8vavdpAgHVPcr|Q|gbvQikXat}0DxYLx$#&Bl;}Et`#+A7it3XcVyJ
ztAh6XOPptYVP^T~cl}3m*Dt~)1|kT~f!xW%=p$1y-j5BC!O@)lc6Wlrh%3}alq@Y&
zhqWTYY;=JE;jx7K>kZ#}K><&4*vTXt2ZM<{dS5<r>>2s=JYIOqHn78qZsqnBnbfh;
z(NBI$O@hw1%i`En0WmoBEaEbGcc7qnD6}Z+b%jE5wvkA|L%}SF@0zARFs|e~oju25
z+R21ba_WF?ad;RJAR|L1DadmX?dmz;d8HpJm7OF-@gU0w$;AlDG*C&uN8<kZUpc%u
z1O<c0Rvwfb^s74dgMmF@5=(B6cTVHp0qEEflpXeM;DfHAB{0UY1)(s6S@%a2V!EEi
z)y{eN$wDat+x!KXMKjUapQg-6vz?^TVpSxcVj0EWc=bXNN;`b>Q?e+tgzNDKjuUKs
zxTftAQAMz(8c{k){SsaM<;TqUm`yUjG~z0inQg39o9q3?x!yM+>^_D$$pdW=ILbLQ
z`$>M<%MOBgg1<Byf={sSzRcT<d+@hbbe(3~g72Z)pfUX3EQ=Z<@4>3b*n6|205Hfd
ziK%!opQGc+%Pf~>B|^|jIZo+$mE#>}2y9s_$0AXg1__m+NqWZC@$%)Ao{$_WRC8g;
zA*+6du}OVu2DQ00U{ll^fD-jwvN4=~IK}{iYJkul+(HQo@ukuI$7C6#ZQ>tTm}e-h
zikoD#rhb;!!q#hcYKtJS2Fi^QJ4?A7^x{&EyN>dp8re}yvGJ3Jp8ATt={Tksv_hZ%
zO2S~o6bfS*R{~&>*G-I?eItqOmEwIl4mNVO_8;)nFR9zKi>?JJY5;RMvgguY;@=SY
z)&Q?j9S9YR!lRNFTUqAdOny%t^xuxP*|ysV$d;84otXEnLI<jEOxkhVPLQ?A2A|C7
z=G((x+w+6_sk#o*p1VF2zx|l%)8MdUd;>(<FI!;N0!=}+2q-k%Hm0j&F=M%0v*eJo
z2OSJXIybRA@<!|%Gl--#A|#lk;4Y5B0&Gvnp7Cf?sOTp&31+(p*$W{Jz^TT~EH33Y
zcmuCW%rcLi?}(}IT%O12&MXfvVNrKjR<whfq@pVla$h&Bu)Qu`!&**mvDkKO$U0&k
zdbfwi3Q~^y{So$;q^o$N@o!#1znohyP;#~E-t^7lKyf@A?z^Mfpj7-MSu2%lKea@a
zv-`9jC&}u`eCS2kn(H+qF1u&|j7uN>NrQnAl%9k!TXW4RfW`<@^j=@TW#xuLR|uza
z>1AeyoTM$&y_673U~Rd^PZFTUQuCJh8(Zn8Os}_4ozzO3&;nWRWS+z`fbDQ+xmcY+
z^9<qTLHpHLW-XmPH@Yd$!&1`DJ9K^sif_~ZhAnkr(a9XXGG}ATsZHW{YG+blx5}Bc
zF+PFbuPNr3k#bRZk!Qk6&<g>^TrHE0(CtFn#@DJ4RAHTPGVqPzVI0pYoWg)3!}x7?
zHy<nCT~d-^yXFkhqoz`YOXUZ$o>c?c98bjZP)jh{msE>+Wvti5dTll>>4xgHSw}u_
zDhl#Fs$Ikw)fTWcBWmG8Ww`f{!4o5U7^YD@64h!4d)aiAFDI2Xm<;`WzlnU6C)6Zg
zGl6JakxOVh!Dj}PuA(w+EQ}(T&<s0=NGKfF?zoAKr9xldR`Ar{j(6Q{1hk2$+*@F(
z-1K@TwAYk#$O=^(h}?4YI?-{y6p4QZI2=wx;p9{#gi}!&gz+4xdRUCfCC7Z%5Gy;&
z>|7Yibh2(PnKqhBrovp3Y2at*2!9f5FA?{qjA<$c6*ZUr8$(%!XWP8Jx66pAwt&6x
z%*e>F)gO3U04Qk2y^Si}7=yG8hP&f+b}1uXH4N+4PQ2g1LM2)78u_F-BlpmLjO@q4
zeq7p*3;S_uKd#Kj>nOXJ!jI;ew%aL_>Ave7{e^AKTSW=22~=+<VC$xFn8yW>EMJ{t
zMmNzAnD2H%n1@Yq`5rV@ePC97fK{V<)rXB$A6jCrhb=ijN!}*OzAGty`7DJmS8$yG
z^&)BM&*D+|0B%5$zbGZe+caDj=UEw4_4TpVk}vB>SM&6&?xZWj7pPYa3uW&rPU)2x
zfi*5`RMjyVrap^g>mYQGWd`>dUzGYT69c=91;^%?CH~CtRHD)>NJ@2fVAd^RO~r!1
z5z%P(ydoHk_vS#FmQInmBSku7CxcT=T+P9z_u#fb%64KuI-JXfvat&P5BUd$fD<(L
z$rkY*7fyR!zl$I2*Cms=$G5}=omf$LF^mxp{~_8+U)YH1(+#pkyuKU3JDEw?W`r*R
ze3o61>Cg{hI$Okfp@fa%{qeMjbF>eWkPjqCoMNcyAhEm`n=|3^z_%ng3{rG@A__7#
z$3ZNAY>j~U{$-whLgTXtWdNETG1Dl;&SBQ;0Vtpz%)+jGTc2EHWO?8!Q-laLCM45&
zPoEs~Y>0S4d(6H#I=~tL0_Hat77OT?;)SZAkgZ@%cP=C_pOK<_TS{NG*-iHXPLJ#w
zT`RxuA6u@8Mra`0A{lsdRg}NbC2t58Xn>sSrUjibUC<IlRJWlYbw8G2p?*E8m#mIR
zm^iyg|JB~&kyCkmpe;ZMA{-W+jV@;IK1%Rt3PyA%%ERJ3o=FERD<@F32c0U2dwB81
zy=Do^EDmAjpRj-QCXxwD)iPIF3e*S5WX8s*5r^Gj$X4G54!?~x9&G{f-?j+|?^?47
z$SoJ=E)y|wYpTgKP^|{kR=`sof-@UaUfGZD?Z-Fv<E8be@08EAJB2OH`DVGy+{Soc
znXom==$dkxE?QIO@lt%B;K}w8WdQO!G3}%zpM^;NnnX?J+H5@h-XP@CK7k3QPuAM5
z@Bq{8_4{5X1Ik1}O6m3xE~m*Xc?CBaZl3f;lz`F+A{5YMD2_40v=o&vEkHg57?~8M
zU3pBy3ZQ0z?@LS`x|gJI*J`QDGT@-#F$M)MJypw(JSyp*oNh)UgbPWAm)rto-i76&
ztM+5dCcf61QQ?F)kO6;SStM6!Z|%p-)m&z%obtjNmr0>tg<qbFmqR479>GeH_Z4YK
zwI<Qyw=OG6u@Jdxk-AisLQ7D3Z4@iBC1u@Jh0sP6UK&N%6O7`)s#1w3-@7_=bm3ly
z!0;BD;SCLj_nIBagbx|e1KHBgrN3FSp|$?WK0oiiPUVSPekkvuGCPz+3BG?SDUmXJ
z8su%a5GMcILeMffU<<mbQ;f2Ye_c<llpKVIZY=79S?j5&^|W5=Db;%FT56|v+1qA?
zla9rqyec>%;ix<qj7oVZ0pCzEBKG&pc*F-O4UfZ4;LmX?row@v(m<p{%qSGVlEv)(
zp@+t-n)4Lzy#Wd&VnaGa^xf=zQl7tI8-=!v?U)~|78ydj`KcJm15agSrkGkrP^&;i
zTw<T=67}rMAnZq&|7aps-5<u^jgqn9q<NB@ju#^tt_mN$75?cBPrV}z`;j+wy_wc?
zEW8yV?4xlogH{+edP{Ex|9|AoNXAEdhHJMvSjbRZy<mSsDdIJP=gJb87;Yqx5Ioq8
zVeWJ+64BqMIy0R2cI(M$IX9muSFIrBN`soGun{3Op(uIs#Fr{VmK{?SNgFX!a88>Y
z9LCItI+fBUpU1Zw>}*5MsYIYk%t=;9mAMeeSzVeBWVVzQu@lKR3TG_==m2LeHO@*@
zJZrR4uo@+kf@k!5#$arc)AD{4yIJtHf?N77Q(xVURA)tIJ3-Ngif~hwSzd~6TLfH=
z86Uwt7*veWZm7K9Qu!>-E@Ie&?bVg=TNGQbo#CLR#d#L3iW^2VY^kezXp{0;du99L
z74d?v{<p0jSUWXX-y%udQw^HD7@PC9`PK-zrHEl6AFU2$)}WhWiQ1rM$kYw??P=EL
z4)glm8}f#MzwF5J=G|-Zfq}o|xbhTJjX-^JTzQrSPcy9Jy`W!ENK-+-XZFo=a;kzp
z8Ihg@_c|Ppdl;ci$Fosk1OJf)&{X%y&Hp`m^oV~vhX37H|2^iHgVz6U_x*<d9%J{^
z|3D1p{(bs+f3U6jE#2~WV7;F63Ou0yo;=xq^l1O_{*x!)>Hqfc_}_O;|2<IuJ$mo}
z3O%`Nt6%k>>|D*{yYHUx550r120v$wVZ{DL_x>xSu>T1^yN=uSx+kab&-JEzI(n6j
z|EU5_zEbY~FSFpE*~zQy)cYX|USeFUFh`d0uyh8l_e=HN&>j7po&1oU2ESx5kdt5F
zSO15MZh~L4;NHoH)!^ZGgFgP5KY)K94d~&~d=CFU=7%R?^kFrhKE#LlY(77|=Y8`v
zS21Y~6$LBr;YIu@UIbNzj=Cy<z1fP|sQQ2IPhMpHGi_>HG)11Rd747ofUk7Q>&#c<
zyhWgfD&t6jE`j^gSR&DJQDYH+FQnGTXqOv8hcY-rD3&2G0y8){CQot(9klBl4<@2&
z=~Knhk2%U0R67vWDZT)Z6M!$FO{m^#*gK0qOIsf{p4Bn18?=kR3GE_zYVq7ULDgbV
zhazmim5N4Bk<`VgjvNV*EeCV@OYz<^d@3{itr%N;r5@Jn4h$z_me$MpZ&S!Z?D6k-
z#`HYC&rCBDjP}5^RtE61?^7g0_!$KGf9|`Q^e#nM(sU%Fk9G#$R75^p1}Y@XdR>f@
zljSK*hKsI(zh@`K>1fsAn50k%Y7QR-!HTJ|qhPUK58*2l^?(p&!D5p6S#RjggJJ{_
zhlXODAa<;Cwa%ei-4({4WdeMMt<JyDSK@^hY9{Bw7g$;EI9T>%hUjwyI9ZW6r(>g&
z<mC8NsQS;DiGtajpQ3a^*5Rlj=g{48uXhT~Bj7E2J@3dp;_LAX+l%acp_UE`gnLCp
zev>(c$6tV_aJ?UKgT9!8kY@l89cKm`GJ!SmapS&-y%+UpQXv|Z;IGk~{%mAcTv#ad
zS6xhC=<`!pXrF%I90bcU@AWoE69SFGn|rwOIj}gP>lfpBeYA5LXc5d=d?^<f`SA+{
z3Zuh=Qb5ZmgqA-9v~&Q-4-b-)3$$%3GcIw4Kyrw@>luT|Cj^r}2u#ixOs;}Y6)<@p
zd=g;tCOEXf<YIUC4MK<N1K#~%LB}P0?e{MjK0Yb<_#9mFihc|(1blqPsHY};d|a=S
zlaJhTC-^LZ;xp!xu7Sm8>gOZF5CX=Pd&R4HDS+Y<b!UgwMaH+@q4!<_#AO{I-kSh%
zDF8wY|55<Np_tF;jrgH}0@erPwthmOcmqQhVDU!GLIB2_et&btfbj-~!+>#xfbph2
z<~L%%hrt`e0RP7pgi{KH)2ZGkDE=`by253m%!T+i(ZL&&Np_O(PWb4XnT!q1UBZj*
zr<g5zvj6arpQEq<MFoI>iqUc$jg}HGuL9?Sq6jInVd=W#VE@76$v?7_i&KC2VE@55
z0KkHaYxr>g0gnCQ{YUE6<0lU%&ohKLcnifJKUT$oOd3oc_)mu4?aNnB_6PTANRJ-e
z*Nr@SIM~0BCHDspg5ZJ*3`Y-#fR0y_Rj}}%z>nSC2NZYNS;6UWJ=nA5Y489`?E5S4
z@$L$vI0J5ld9D-{egyNL!MqWl9>Khi<h;M&!8@X3Fx-dczqs%j6FJQS`qD$EkNpR`
zvxz7f%zXX}gBwZh#iIvU^IBtBs5d&tfadsxFy_cT@AcI6cpMz<?m~CKQ=X4g`bniG
z!yuSXhW-;Dng>8S8Xb-SlfY;ZKb!`~qod%wKV-av!`<D*8Zc!Z6wrFJ;0vq*d;q-n
z#bxp1#fB3l0&qpHw;kXxEHG}a6hi^@3`U^=gBTc87RRjCQ*RZ70B@lJL|APT5JLrs
zvtTuvjgLk%XabgP5db;5w83uXp3)~ET-2cELDauLnxhnc-Vg5M_kRHf@8MDHFXTqj
ztNl~&JlNm;GRgf1@b3`*Kk;*aFgoWonw{c8W6{%7xY1yObAhQ8W*9#CE`Y`)X~T#B
zYD93m1v5|nTB=`#(qaLi0_;&YE+A`wQy$!LFbyy!eQ-P(_?k#Mq<J0Uybf_*RQ3WV
zatISanB3pJkW#g|bL@&Q>tJ7{e1D)ysE-d&%D-*HO^Ovoj@c+5E8!$b9gX;~6A{i8
zb{5shxe_dr(+}@#2|yA8c@&LgynUv5a0U<I3R~(P0s9c?LE8_A7Uz%~qEVj9B7nx3
znrQ7)Z5VXX!44OvvNl}jvcD+;bb?vnVQ=6kKvp@S!hYtulPOt8W&pAafX*Bc#0>hF
z$qA2+4vLX`#7FEX!0@#*?!Q`+Fj2n`XK)4kybvG(P*PxyIY;dU-6i-`3Nt``Q~XV7
z&+wX!1wDHrZkK^KK)1yg83q5QwJq@~+}-VHQE%thjH4OGDv)8ED}tTFY0C$8KajRS
ze^=)lQH^?HJZFfgsZWAp(f*G-A+%~7C|g0aST#aw;}|5{rRNiSFb~2{Wgc|9hDBg*
zq9#I1WXy0LhqHdn%O7DP0T!!sOlb<l8QTmAhh{7>6eBT59Qiy9=ne9R4p3PsVu69H
z4sjSLH3LIuL;l$E#B^aQ?A8m>^njbzCEZO#hMrOIO-6ZRfmIHLIx29`f&+DluZfK_
zOtTU|VZc~sdtp&zK$?vBh+&-e5e#<8-N6R9)V)KWdT?@wJ}DP@G&$LA^AUsthj}oN
z^@Sk<F@TxK&{`ITvtWC7j7w!W9w?<ih)M#bGQcNjpkod~E|)fYn)bw|EhyKLw-l`E
zh$)W<Mw3tUG68r?{YKPtcpBRHWVK!|6{kFb+kVAQWAS#P`&}7RmqXy@JW<K@8%CMi
zqcn<O;CejlR=Jev^DO`O8N8AL15@T2COmi?;l))NUL=wBG&l;E;!AcRq{?g+0>>vT
zo{_#FAu?LL#b`9~>}8f)-{6eCMVD#Za|$ntieUAC>2s_X?=pH!E|x%~Cq;aiM(0^B
zyHKxxfCDUF0{V&Kw^G=Q>`q3Jb%iC%bJU`w*`))BM1@<H-a+u-nhAtY*lF+7ct<C^
zDIYMD5jMJLnyw#TA^+f<2(<=cTSR9?Rhx5)DnJt6ePy;OrID(&U9lnF5<7<k>>?$P
zp=@EDj@%QpIWYVu$UH2+avChW7@iMDN(aDdQggT0>+&EqwtEA2r(<<TFcB*)#YMQJ
zR6W%qp2{YxL1%ldcbSJdz^!*dz3XbD0~x}mFVYFnnkVUUB~)~*J4@0t@@00ahCTZH
zv{?55qyYH3le}79e4*>AF}N-!I6#lq?OHb=)8a9z$zdB0Sd&i15g4IJC$300j#@rm
zSo@fxr{kWfBm$;4SB5$21FU?K(ul<+kpwv=8mam$G9{4U1)U0Op4#<@mON<SPBw{z
zDe>}VN>1mG$IACkKBOOV8G$*ngD;b$u@b3LSelAvu~8RIY|Ltg&<=JRK)#G;&*K79
zii@+Yz$|e+^*eMqC&U7==M)C2^Ei!0(_m^mOO9Ct@}AN<tn92z?t(=F*EnB)>LKFx
zSA=Xgt|H#8O24G*wFo#rHG+pvt&CC@3KaGyB)#>Q6!IB(eC(s}7an@-_|pw#rfRIn
z>(w++5rXVmg(L8Rn9;Fl{2x-7wI^aE`BNi*x8cpO!T)VUR(ndhsR1>2eYwY#!(*5*
zRsfle+M2Gby=W1KxyWM_1`U<b`ki407!?!|W)c`8ukdR4C-TT?y8606L}VB$XkV#@
zE`e-g8?8i`hzpaLOuazM23iKs!65JPdJTV~b0|i6))PPxlsHgd6R@L2M+F|S-%Bs1
z>b*LU^kVZ-#$||d!+1`mrWL#*-Kn$;Vk-?Ag!jq1PSv96Fu%dOY_Do2<7D2_^*SBr
zv7r=SuTjw<Z(2Da^Loy_`sA76NU-Y$m9vVr+(cT~!Ih1U+FZ7^6Si@u=;-EXiF?F>
z@t=wC64LpW8-FIK6VaYPm%6D;7;leq5t-Gv5zy-jBLs7DBes7)k8gVj;*@hxoqOVQ
z0mNkdTd%wP-1W>x=8O3A)38X;?@wNx6aAAa_`sQQ3<Cw71gJ??Oc-h8`Wkt|kdDR>
zh_AfMJSkx~erLE586rk-YOd1A$plJ3_+rC>p#Q{+IgBsY!gQ@|Eq6px4$86C0P|kM
zT6Me1Mx_ypKr1i8=)A=)LJsn~jk+OEP89-EyMQJwLY39<q0GkZ^q<fZdeKc;4<cbT
z6b4bvY6$TgTMZS}5E?QNlKDQ*cXt!M0c4n4Wj_?z_Cpcb4{dS*%HM~}!bz&9=a~xD
z-5&EmAf8Do@SsAdu|lXmCI`^7e<s{#T#jrY?Q%znH2n*M1gJO?daH}26AEz<%iBX~
zd`1_*A&SBUN?y>Lr*P{Fua%YjaU_4tOuOFQ-PA<s<Ar_!%^WOwNb?}g*k#^n*m7^_
zrS`qhh+3Q2JJ<WNy=h}G-r_C|k5<9l3a$VPFxO70unJ$K3+jmF+`L8l4E+itL0<QZ
z)y(AF4&v~o7IfoW<ghxI=v@6!Wid4+Fo|D`@leJ_t8KHi8CF~OSez&G5;6b0br8t;
zsjny1a{VEUgNsOa+}&MWXqhe1Uoy~d;4d60=iHUQ)L>ZVBqYQ)K+D}WavB`VP5_#Z
ztDAakZR)X{$cBZ|ImxCZ!Q)*7hkJ?l3I5IIbMFu1Gm%N73y~`14=D8qmAUXfp;my5
zL^m=9;yn3mAX{YTQ!}Qv1wz{su{}+Nv`RA*fE#5JrYEDS19VL2zPO_sG%fY0G<>1U
zQ%@N@+?3OWF9;S(NJ1!4+0-x(TVh1RsjSTQ*y5fU-VkwWs;0hn(pzK*db}%cGi2gX
z+UAwb7b50eQdunpw*yO!3@OVxGo8^4u#Qdu?bWi~S-5WKTG*Ykmh2^`BivV{Wq~~~
za$1V*(`X-1J^l;0KLcP?eNY-bZacRd_ELwg2hkF0Mu~6{GS9qvi785=HJlUe!`FxO
zg{%9v@u19_gHsv7!y*=2i6oN*QH22$%-&iRR03FCI?u9lkNk_It2=CI8YoEztZ@gx
z;721e|Bd59p2kU43^7i15dtmZq@3t8gYg2*Cv(~~a5JMu4u|8xBHdI)owj&G#vH*c
zqwg|`Qz6H~shOj_kmQz>t2YuJ#v;GpmP$fu0yB7vXC(RvD<f*lAS^a(2qy<MQDIQH
z1c>y{yQ^i476tTTp5!9O7?ed72f}uN!W)qf1Yc1}0(9K$;zSlgl~g5-h|A$6=yO9=
zWxaHZ*6VG%(k7}BBmqMOVO^)&bw>^0(ZJy-6LabvU?a{&P*P{%6}2%Ha!ec?nrzUE
zfCW8sbYMU{8wf+NX#<~C0nrgM-BW#lfc;J#?$(oic~b!;#Nfz>WBTS&g(X*5>I#}6
z62C=p8CB-SbpgN%(^(D(Vs}@uVH6b4JV!=HNRwESM<bv62r1Z3P?GOUSQOA-JbSyy
zD87y%=0aUKYGyTbD)2~aKp<`IM#>7$9F9jLb&0#fAx{^poP-7VK&6~(Otk_nzK!y1
zvG8Hj1fPY8nUdh|$Q~%%B%+RCHe)_$q^Xm~Px1s#8Hmlx0=0cZG+UHYnhbo*@}%Zf
zn$VRs93;9g*G@Jr>&K_Hoq8+#n7^59L3elWcY;u!pfIn28*D+yDzMRlTn8m^bGd~m
zhsOE|^s`t1UlvzeF`V9{hS5|o?nSWc<x~C1slGC6YE@|><T~hU(%LnVU9x2La99q)
znjBtLaf!UBXvg`;9SF>O%?3UvORqQ`6~PfQ3QPDiJl(92CVA1&t4Cjm0In}pA~R7h
z7D8Bs?|>NML9BTGm?bi9yDbCG#$JVYVjUUW4TqU3Mk*`UbKxyz(W-)t5)|PxD@+Aw
zY{O8Mc1R<)Y-yzpZD}XuIHk*&`SU|mPd5h|ZMp?bT8f21Ws6<{C|)}Lbn;2<)q=k%
zE`l-lL_PAz1^Zsg%eiEgI_}CvHcRGL5_9~L3jI9Mc?@TCTval4BV88fg~l>uyQzNm
zLQAkCUAI(DBPvId=4JDzA@y18?k<sZDuiR|!IJ%01<J6g5w6)26LUwYK9^O5;mJum
zU4-_oCn}8xlP>J)Wth*pes>y1AL*w@=`g04@GH!(x`@1QrYWcGdo?1?7P&oKN>t$?
z^RNwc5plB?%$OC1@YwKwGBc^7)NazC;<B-tDJ7AjGQ5us$IMu)*QkTB!pCVH@9RX2
zx#W^k8~?kb+}89^Z1P-h8{7sPljD(u9CeDkiz(`A>LY<Z!iGLV-G_ok9s6J+jyhk6
zUMcUK&cO9`d|MT`Xsc)LNLo9ma)5kGv$zaSE^ak*5K8|9>~(2S9CoHj6)I8!$F_W>
zw4Gw0$fF|8Nn2bW-sM*q#<a|K@Qm+Bd_>XB!yV{Izsgo6nvhUD)bm(H0n@G$>E0rX
z!o|-Tf^ks2)IblnO5Ug!vL^L(mAoY;WP!m|63QlqY2(wz?Ck(KDhaN|XA7r`ajr=I
z3S>&R=w1&U|IH{FW+NJ^GE<1NExns2K-mC<q6!H29oFD9<_czh--3U8Fu>kNLEaBd
zabFQceF^SFGK^y}uVRdG7Mx-X%yGEKsoXF^GLojzf%%f(by9d$Jy#t&2q(TO4@7Fu
zGzgK}L@7j}GyA3*x5xdA!Xni(@}l(RJZ#WCSpi_QOvS4LLrtoZo;Kt@{v~y53iDB3
zUH6e`6KqOZu-6bs#suxn2?WU^_?j)}YVA~2`i>=?2~S<i@N<&|(WWt7bAu5cVt<z4
zaA1)l2(m^~fMqaEIfXN@62Nl<a?+`kk-A#|fUyA?O?@Hp`7~IbENBfEXlExOa=o77
z6+E7*5E4_0QUNbG422lPv=O0+%-O#tMFOnAYn9^o2E1^>`3BhV0gdxA&(s`h?fzaw
zb0ZBNW^OvLgD(h$ATn9i!j=h*+d~uZ{?HPu;A%hDju^sy7Tx91KWf>Ci?ox$q5_^v
zw6rLC3*)3t4>E1=TpR?cG`3i5ONPx97-_LqLfhxc$ec%_s><4qAr2;gE1e_PX9eEO
zBGcx<>||!h`o9FxWX}8AU(q)EEAcp|$I+LAkPI)s*b68lfLT^bMa}qWisVZXOko-7
zIhXb2VXb@<j%`O0doty6H!l~!oFe!G8NMok>qq^lt!6wa3A?-6;by|V(LV3?9WuZZ
zeeWr$^$l9hR7mAx6ggC+@(A!MmwQ&hX4lf_s4^mk3uV5G!EcmqGqrV_sTSIMAtnQ=
z@}Dx`CkH_uDLECTaiXMQ-RPpv3F8W(cBWMDL6;nZQS&a}D+`fsI4!cps-!x&!O~~|
zK14gSc)oLXp6vYV<6`F`&32Z50MaX0-6p27L1a`C)U(Ec;NB@*p~(LmGQC>F=mN()
zN`m61RP$jFPsFV5?LYP(17^S%{MAoj4$L<@#M+w4>=PqReQ2hpk2KkCkUamEEDD0k
zC>yB^<+qO<d%uFF`u*}$1#LuP@-Vew*v?8D@!68O3{f-JFd>Q9W6Bs}pjc(fA%icC
zO#UK6*^)FTP-zg@T3WxyB=CUwC+t+)ADSyblCy(U%g8uW0FD-@lf)HwTHk)3y2Nze
zGp`V|DFH5y(C*)X#^>PX&NW*ZkQgD)(Xfu9lcNclWlyHlJ(94GHAGGdc-tisAXgE3
z&>OfX-FkQaPMRh&orE?(+Pcs}X;W1aa0ILOnOhA%rlSm^6sJMY3iMUbmE}?DceO;6
zRJs!>tQ7IdQso4I^tz1weV;=}v}tj%^^S70sA_)!Y@|LJ@aoST=-HDw6lxIYn6f5q
zEreSvN}L*LEQvaJm6lnXGFIg4R3S;tyQiTG2}M#3$nuoBLA0Vu_}9A(ldb{W^<xzo
z6_0x(A;Z63!-WiYg$SL>C_N>5DHj4FThhW#C0-_!J;KMr=hp{PdPIi);x@VNWKw+O
zq_x(#yeEGga6??5J@YwSnDVE{iH7h}4s%Aq!;Ek6=%sY>M0hbB&WvdgH1=R}M+6)*
z3h)~!Ap)9hq}|f%Os^mk^E@OTNk8EMQ4}*;`-Dcp-HTp(iRfK)D*J->{9|J)<K!kG
zV<uz_OmQyNGhYZz-mo5B$z~v|crUw5<NUd}qM;Q$8uM_qAR)tg&GBi0tdH4Ae*rw(
zbR-lS3nl%Rw57840V*G*Y_lt%5z+acJdBRqRS>2?Ehw|yd;jgslh5&NU6e`m@yh*1
z7%<letA(pBdzai&(K2lz)`Mp}hVd{B&d<BM@;j}N{>()A^#WelI-7-Qs;ttPuutTo
zm10I)9=^&K){da>Jm2W*0}sqw2{`$}0Kx#l4?Sy;-_8hnz7X692%(3bJ=JgL?463f
zCC35TRw-E%aFQ+^{qYL_ojAuq-=Uv<dfkI-C8a!eQYyNVFnA0reH_U5ef=Kl06wmk
zZz&ym>6n_wE{}N>R8$P3cdQ0tro%YYP0?rXB3S9R;l=1UaJmt!L7d|xcXtoR!Nr7|
zI=r{vzqq##2pHu?_<6my%EFMiXg^dF>BCrEZhK>|U`9Swz?L%GGI7pn@N~-gOD|EY
zNZWZJIGY}t&7KFPVtd3}D32>>m2E7U$kj9Y7mdmx^v?Alpw)A8S>(ujj%=8pU05Jz
zWiex}xn4jWMWSjykpr#OfDXk^?|i*JcIk{S#i@IG<(zxR#*TgpFm}U$9dJdkhK0VM
zM#k@6aC{Ffq#Wa2|I7tA$2c2Y`ASvBt7>FE^n&wyGw+kGjxYOH?zgi|DbAjl+b23;
z3<-aTlPG8VNgg=`Ab)JUPrJKxF#yBieCnUO;~_=RRKVhTe;6hH=pS>5+$gc3Ws>f>
z+mMj<q#kxmY^&>@XGLjx1{gO)=<$^~w(edJu5|eSEA4rxE=hISdxh)u3%9X|q#ocN
z?JrGIs8OKdZe&)4b7`afZ*=Yx*2!BETD0Y+V6ygBoT_Q4Pc~Yfmhaz?FGGw^xK+@@
z9kX3nR@g=}Y>?j3k?<-xVYj-_$&sk^7kUrKJxQqs+O>sQkeaq0A<7`M&NDT2p5CC{
z+o|klQb!~_a>(x^M_-S;muV9pGF4O&Owj_3KN`_O!rbryPcdVWp@~B3RYYaE9|$Ka
zI$5GyZqnni`1yu~zeBU=?rwfCkkL(mox~LGnW;!ZUw=C5>4DLC0-c9u=Sg$tiR?Vo
zohL@;;W%lso1ng=+%GVToP?(sh{6)2k_I+!2|m^mcT7glJUML(GA8_9-ZUrZMQ{?S
zRL%Bmt{<xZ+?Lp^t$HocR*~C5$_V2h#PV8;eIsR5+!t8ih$678)`v@isuLeotu0vt
zRefPskBJ6TSIH1<9s~i!G|Ny|omP4tQ{~Au-BljlU$IF$#x@fn8{YV_ZgW*>^FWs3
zW~qmpn=Y+3kMf!~g5)y1f=sQEX#jfHw8I;%Mk^rYQj#rBfvG)HhvNtZYAXz#JHY5B
zlGC3_sm(k%I+>lKy$CFB?#*3_%>t_hlbd^zcLENN_4*=u7r;RYWxewNb~J@wBHF<h
zim<8lDsUE8+MH<yjndToBl(Nb)_NTt0I?H7O;jj<aj&yr1^8s{CBYXsVdo>ZLO-9R
z<2h{`Uc3I6NjYXIH$M+Xur$Z(wR3zhnCQ8}w;5*X#^FuUgSjTHJ4<xe=f|;p?@pWu
zdS3=}*B9Mk(FKwb2(9$SC1a-*FmX_7No%)+RhTS;75$QJ`3w5C;B{T#y25W>N{U3b
zyDJB95Tp~pcM--z=XwO)Y|0!I@Ot5T3dJ)<izP-IY(`Ar8yq%4oWZU$(3RRd*Fw{{
zI~ddoc4w+=#n9ocY8`f@%2md2nCIb@kw-bfAb!VlCMQhGNH24Nc0LHi7<*!9KrE91
zn{naH>W3j{xUEEJ!(sfL3Qrx4vr%NkiYZXb7Q-2edcy`C8!L#E6w*)%6(UX@?FLee
zVrQ>I05r^dxL~?nSd?(NgLFcF`>CJyRTYj2!sYuz3bD8lEXnWypQhtPa{ahG3(3C9
z<?)V!m9XSBeBIcpkf-OiipjAl6fa1&=qTuL0PQK><BdQS^_(N#5x9)i11$7(BcqR3
zYLHiU?uQ3x&R*Rn08+iP^W5@UWEA(csi#N}X!;PhtpbU7@M4G!8Q?OUVL4!jJPh}w
zKLG72qzen6ia!J5ErG~i1=D^(PSs<%ZtQxsI#{{}RcX7=jWj+syI?x;I1i%*+xrXG
z$bG=qo#DtqbDNlH=0oufkh!~u2doqPmhPcCX~fZTI*zjnaOtI-t9Rs+c&vZqQWSyJ
z7%&SHNi#($vUncu26P4ugMPR{t><dQcSFJf>M%~>IJR8~)!c)i@&&VLa<gA@I&%r$
zS_EwK1EXx2>Gd*R20?xKCiPd%eem_fc8#_i?mS={J-ME!@g#z1!tebr9^5dsuMRbP
zyt~`608E)RAG;)YVK)=Jd=^H`dOpBIjfF)j2msiH3*1&~hwiQV<LMrH7b4scj1mrt
ziWQLs+KNqDA04}9z=%u+jL3{^qAtoDzOaey&q6?`MkixNwteU20*>A}3_c0QgBX?z
z^{6d$MI%JjR(kj&X#B{{|3S_F!OqstcxB=ox)84fSLC!T;h{@-vk2#5p4g`73L)Wg
z-j{y7ct5V!Wrvrviq~{(S9QoShJ`_ljq(v1mYC!j3LrWn;siI}efp*=-=NM`w<--b
zDDDQvTH21~4}jwYm;eYfeD>?pM1rjol=Z>G97iLqw>IRrB9K*O;JHDFc9f9|#}mz2
z2mLxJO1=I{87;Z0EXajV+AuJd91dp7JbhY=ftIE;5Cs?wp-sLlk)O~f96XdO<}%>Y
zp%9wBLyFub&ynTQaOg^zn>5K)1qDgmIg==EbwIedmq-Ej{sdq60>iTO4QQ(~vIHV9
zKMbze^zj0I@Y$hddf#xa54pSdRg0$gaIiUbG6iE)xFHYTlOctH404GK^yZ5Bz2U+)
zEhpTL<2N`-I4kfoc%vw7xIM>#^M=vk8%^%LH!Kl-@qn(LqQUny`$gC#w`bPU6vdZ%
zTsFqUIS$!zGAXA0HkSGrG-wN>GG^t!%ht9CneX#(xrAAwbtrGw!Eo=PuBh#zRQT+h
zFLlg4LIavFGB|2Z-Y4Z*9~yQVTJDFgdoRS%wzP}`ea*3%*z8-`r=y=b+<OiulOY|Q
zVH1k)dN)N~90+Mja-dMePCnvrhzjwklq%l^cAU)Ioxs`p&(t5Hr6Gpv$Xylqn(iH7
z%49Pe2XAjVc({VlJjP)9&np5mQ)kOoyv%td1^tCtml|}@4o#Z&h!4u9Cl@w7=%`t>
z=|SUsWz&;TJoEKBA?l<g4;1{BQXueznhhj1ri=j-!womL-Eeaetw2UeQgc1dn>M5x
zW<?p{BQYM6@5@`xDuxQvc&}oP<*=m%h5G{vm{5a?g_-7#6fdNdfSh)@v*hT4d+F+8
z8e>GhbW#iUf?8uSg=n-0x*t+ZA6qS^8tFkB<SNuK>Sdtg*rmcUgfzT_g9~=kD4d1v
zP|5MN)N?s1f(*)RqF`yT8ix%`WJOM$iS$OwDZ8EoC#xjE5#X^mjmyh8PAMxBl6qE<
zEHv{&>%RlIf6K9Q{en9bV}6(Ycnnxc=<mxQ90S{g0i%O(vvEx??!*QkPL{)FD1s0B
z<d>U`ac#4CSvRA+4&6YRe`tfVy-&s(UD)hcfNN%1puDMDplG=lC9y=84MH~zng{$O
zCa0q91mbmS1TM_HOys>{_#kxlsZEC3mIl+zqlD&^KgL&xjbySU@#<Z2VZC~nt)lbl
z%a<rxufBY%tUhWl$*#jrV*l#+E%YXp_qx24@gKt-n50HLDeG&s?-xb%GhFk9`Hsx-
zK9@&vx>5<DSamP6zoP9Hdp3y|O<6w7AQ|Zy3R0?JGhQ-vM=6!{c#Q&ZW5=^YwF1VM
zpLsEGB|7zn#aGd^EO3#n3d4a~_c+VLv$J?6%@EB{TsS|<a2r%#0Gbh=QevuURwnZV
zqY1zs$1`B*&%=TqJcB1FO~xUd&8RJ;Vq*;S)TKauU9Z78m~;Se7PPaqsdV}#$KD)F
z$?3pv3}JxEu7)0>Y<XpOfUP!`td0be*KQnZ1{Nn=Px5;rvo%%Wvq^E*3d?aDAnTA;
zIzg7+p{70@TRA~KdVAB=6u49ApVJwzUA3T_erEsNcvk0UQu06mViCyKQP!~pMWf8(
za9kmd9$IQC*evBXlp%|d3X@hEzf-zZRt+r%&B$`D^t9({&sP{H&~P?%$OXO&D>H+g
z>LM{!l17RuiPr=*^deuS@{BuN61vc9Yka=ZDM_M+lbD2@X%o>T6_mxzl#_#TRz><u
z!*kNiRhiqlDs$7e+2~Xbte&_tX-wRiXlktiCX~^BWDN`LkcDISbFKnCh=A)iWY;vk
zOwp{neZ{5u;TeXR_A2WxW06$6B(xx5CxQDF!BW^gqKH6Js2xnPsG5>|Z-~*!Pe<YI
zZqf-lVf8x&MqyKE8<FHSWQxQjUlJjvyQ!g`dJXS-iIx|iVn5kvpTP(xk-BmQK@b5T
zpG2qFXwyid`bb9hMW%K9^32@eOlesfnAAax$LksS7gnhRBgilDH=^L~uKqBt-O#=L
z_&(r^{l^`%#+zJfLmc(irD)rF_l@AM_Lc8?9UWm|z3v#&{}{v7mFIDpz>*H{TYWw;
zo+cfRiC3us*U18>i@z@7GNhj!$0>s=j-%8}?#Wh-MZr6VMV4j0pl04zrtBWDepVEq
z!W8Zb9^8quzyF;z`UW=wa^`-yK!a{rlA-H64Fnf(X|V?v8SY@VDx2bWU_>Hlge#ys
zfVcl}K*1LMrhpf-coAM5^6Fy+8l<PU5i1&b;dRqn<MY_VmiI;{mLSncMy^t)30rv8
zA?e|?TsZ9pF`dr6|Av~vW|VIi73@+6B_05rbR2_V5&$MPu8{;Z4^F>@h8zzEgKBqm
zLeg4slK383L}M%2V$+slu=Y!x0KJhMjc*YL`_^5FRQHmDu?bubpdyoR$~CDF!42<-
zP1Au+ZxMM^;=(pQM6Y#Q3i_{E-UjQEKWuvn)jWwqkPc87h;_=qV5c%hM^1U_Q;`Q3
zqh@LDmablL4L9&W75g~Z3D88yq{E-!TG2q5+DcwSn8#d%*Ea~Jy9$`dUlnt;i-;@a
z6i>IFq$ynMB5nAtVry2vU=jv6lc^KAnhqeBm_Jam!TlF3=(f5(Ry3b-Q?>in1!QoT
z`X|(!WB5sD>1raf*8Kv{ve?8UrVo#*^r6a^f`j;&yBOiQGNF(8$@El5X2amsJFl_i
zs@D1I{A6WjLnYaJ9tbYzX&8MhmSF@(Ti{dwiAR?+@&b4U7I7&f=suMJDC7xwK}N!=
z=J38*l|x4T9Kw0c!{zy1DxqBXDN?4Y(sLSzuJzzi>nLA}fEk-p?|mM0XXW|Ftn0mj
zDGwic!^ht6iMK!Sz8iYq?R)$C58(eF8c7K+jr=HkkH0l-wA|hkTD{M$!kVoq<14AJ
z^OAY^RKB@d#4_<U1}|nLB0X1`ntZ#Afr-EV><_#vf3Pt>nc@thsI11R2q$2$tY^)1
z?zRFMWzU8(OvI@okBm_*92J{LTFw*)spVjR@vIDA3iXwB5h@79_ApqMHFH|EX2!Z?
z&1?!MEXjb_h_K8q3YkQ_RpMt@%>p^7BMrBU8b(Qjz=AFW5!8h*h)=POeP;-4L|~()
z>Z@f}My?LTU#lX$<DgEk29nN{ptLBH<sz=k_q+sZc#&NmiO=fFDr(`%q$a|wo|q~Y
zl@Drg3M=Km#YjPD`!9%Wzm#O~h8+2f>mPx(<8-$5XNMo+tVtYZOo<^_h^xaANi(|v
ziZ#gB>{+%-OD#&#x`qtJ9HexojJ<VJDbD&QLv)xaWOJ25mK-Y(E~w@|@MdAR4Er6~
zx5+oZ;TvfRr(UWdO7+o@myEQ~uX2pe2<H&tx=pA>-WLs2T4xvpfwl00VBz&OT{sz7
zTR2Q%`3Qi!g0ZJ6evI&m6x0qI99!LSSissCq~D%Ki0C0$aU4KL2#GNM(a+>B;a^~W
z{Y`!S&2@pimH`m~FOSUWR?uWD!@rX<5JfYU3?wE3ZOK8>qArHg>@PAPN0EVa5mB7Y
zWs-8jOm_N`X0r9~j7ZU)&vF_Z#cE|D0g4Qgy+@Ng=wIdnLi?(m>#Lu=NP?<>+5RK)
zHNjg@H7h<5aV?iQVsIv?hK>@^5j%*=9Z>!J2K`82mtaplC1y{*_2oB-(@;jMFFqMy
zO0gtOP}&G(?OR{LMkpJo%E&w$wr|TGRK`B=2GZxhiL0&LBypptsPQtvU1=|DTpgyb
zjUj%iuzZbW8k7;5BemvvlMHs$M9suN%>ZDd)zQQzX|&WxQ#sJ#D<mPIqh^5z7bRK8
z!+}g!r0SDo#-TJNsu{b4Tc@k44%w}nZs3WDQ+s83m{nI|?{l44GacG$<*(cdnow?Y
z+nbiPy_+tD%2Cm4@G)5)A`!JcOb+R+WcKl#)3-DvAs3%G7rC_L$z&{1Cb|xDN0V-z
z$T@_5Kpm0Sh_RMZvL+aw%ZTY7Hn)H=yrSBt5(6t?IzQQT6j0J6O4oEL#w!vZ1uCrJ
zB=jRsza(FCc!eR}5QdStR&!O!6+Fzn9^^(CIGh7>>!lYH%|q$o%^+~RJ2!-#A)&v#
zT;+Z_n$_S4;wI^6(~CgwIu%}Iz3u?*^@medNi!G8bjn&qF8iIJR>JtYyITi4E0*>w
z0frR$<7-vjPdz|VIf0>^|K1W!B!QFMxHYB;=%!mHa5Iq-EsK&;?e1<Dtd{DOm`B6~
z-qH~EU>_gzMpg9d=GQ;v0c9Yf;KE7#J2LXn?|Ar7rh1_-m+|ytQmU_y1`jj~`_42W
zqJRrROcV?$3}>04<&INw@GvrNL5S6xWt~+xARMsvWsXVgYNZ-d*(p0`I>Q?zT3_bq
zeO6{7YZyn5m7<*faFhlzx6#upj#^nuj)z4In;?$ACGx29sgu;GNW&FxMuo7z5Q#_B
z+?{Ze2zwpCL}Wtbmu@d(b1P&gC4X}*M2kLq5(=vi7E}1q#^bIu=HX%WR3aI&Z6Ooj
z6jL+bG|4hB#??Fo5qOM}UjnKULn&zzt>Y=p@%WjH5TovWCqY6|9lg}MHVzz70>FnC
z6duWnNJ8;qwCwS%VbR4x0%fnHha_F0_KmMi^g_))V!zQpV&C+S*gy4$G8<$5450oj
z%aboLC9KH<+o%k=yRx4vqyGWM%(Fw~8H0951I+)L217s51&M>ffY5x)P$a$)#s&zD
zn0N^(a3b@KmffKhS8nEa#Rwa4{TvLG)tassVoP*C+I5y*=(-&^04xd#gC$83N0DY-
zm5YyRENW^gLJ_5IDGDU7xub5ru$PO(zv73xk@iz&Dy_PeaLKlCHS<1<jwG#NeL_p>
z4I9fQGSRSA67h+YLPX=b&jelE31w}JdOc5%A7;LJoeOHnl841r#iX`_iko8Mcr6t~
z?3<>LI2-R{F0C8_8|)R{G}^42sW_4VfV<`~#-LJaM5i_yrB}5QtqnJD`@p)aqI2TA
zE5oR@qRqw(E%7Z!sjg{PcS<s_)@8q4Td;`4xil;z88&N0s?edf&+5R?)a}RjZNU;=
zphU<TIuA<}7G-W-2a;BFAb8HOek$!naG)a2rqBjNtPO~&+5pbRF(Bb9$y|Vv%z`F-
z`8(hHFyL1T-&N=^d806u<J)^+>E9@9Zap0=z2>|w70uhmju22%4o|jM@d`DzWk6R%
zfz80b(<CfJ$WUsz6VMk-xhU}!m8XvwK8eeF(?B^HEf_Z}h1Ks$J0zh~qPHY-@MSO^
zbBT#U15<BB38ndI<xLe8o=kFiLGm@7GySUK=8GPoW!DeM)c|lzZqrQ%#Aa4DN=M$k
z6IUeI6(-)uE}i@-O>=e4H&mDmOnolHlT|*Yy&(y86qkW%ya&GVqVE_F2PwHky0(Bl
z=goB8N#uu<TnFc0a=LCF)XDOcGLRD7dzmuoiIqX($VLKnJ-35V>^?JrfwsnQnV{DA
z7CB57shzJ{3iHu=yj2pyG3G@JArA;o6>%@2VqLVPmYRH;x8U>x4xa`i9;>)S8}C_O
z%LOVbJY_lw${z$Ak&LQ}7-Jhv?Y}TcuJ(&}WZF;f45cokpI3tCBaNd=p*KK{DC&zO
zKNvh%Mq49(Tc~uOp^toq1c_BXvde2T=}1+HFb5X2@D#12Lzk?nHEsEO#WR8i{)}35
zu0Q)q*6v-Y-@k2$UJ^(TDgYyiD8#2lOFdmji{LpB)<0U<uwXd!o{MbiKcl?(U+|CK
zj90k`$=CUZT5R-oDZ^wTV$?j(fi3@+O7jYh#n^~(vqHNa)O?xu(u2Xkhzg{}Z3uP8
z`waztGo-QO{fYB)4oCh!@0-i|Pn%>{F<kGkz(m!xiVHF2G~lY+sFlK-)k>XGm~r_X
zL$8D_svN(PJwnn?Wc7^#83;zOOX<cdROjLj1E%l<Xv0%KLS9JZ2JsB8NHJn?bt%!r
zHH&|Ibw%bRR-%mK#=9Y0kea0mC!}V9mCBY~$zajLrb4MSie7>E!S_wX+fCXtX&cN9
zlLxH2a;k22vMlon$o)(AI>TX7p$`mm+LI|kM^1hqJ%+}D3FnyX>c-6}yy&Kmh(`+P
zR!wZ2>MKKyH~_w(wpwtmfzS!xp-Ip@CPAF_f)eGyv(rVfK-b&qROVJ%+l%LO7{(#$
zQR7)aR_sS8oM#eSY!WJE8-*j=H(584E$j4c#~z90g(~NOnLv)y#g*233NgGriFvY!
z3zZ$h48LtT4ry;9>31f>@Uqs-DBA1gL69mYOdyyHdjjIUQB=edCN!+v`&UL`!U`R+
zl*BQJXEuOJn)6V;gh{-C`NsLE+yjyuvr7Ooj=vXKI5S6g@8rYh!JrTSJc0j@;m2@(
zdcD69Mt~)(Td`VDLa+?2q0|d60czYUX<ZKs5+kKhz}<)t94de@M&by8keBz)Clr!w
z+I*Ch2qfG4qy^S_b(_vCK()hZixtk%RM0b(#|S_qwrS#!+MuM)I|;z~DVNcW0r@Yd
zS(wjoND5<5oOevCtFfY7;U3V@N!leDvHf9{C;gIUBkWP@d&{8>Y^Q9kPqIR4x5Zw=
z9-w{*y^K;J<c$j2zo08EF8v*fB0Ab3RqalHIDr3_pGP~Wv)vgEFgTh@7u9BQtM80d
zh2QqXk}%uH8Yv`$8J=ljUka_qN2HIIR{{QAHKX+=gYT15VE9guOXv(ur@oq`w(jLu
zR=oTe6_>)fAY}0^`h&0~nSmBLU$Yl7TFm%+sJ-}B?8Ucg^5V0R3^IrPA@GH_8Te8R
zJPMYzfn#1Yc2cCFO>JS{!W~V8XXZh{>@5y?N}?|{111utih?l078?2OrxXKQWH^+q
z8Z%$oGhfoo^FSTUYZ5o764Mztj_2!V9=^LwirCLLO19=wkUUP48pySQ9Z&aUX*PTz
z=2=|`0A0x>V=9Qer%;eklAli%1>l=Ht&`U!zNRvUP45t5yBo<>-GC^<3BV62U<n!E
zy<Ie54CM1GXu%|K>WD%4bEbDj4B4MS48pWEpgT@r07FsoBAuz2<K}xJn&9qi!6uo;
zAquf*{6UK&F~|=9599}giUY&I_m_$yh_Hk{XH0WXZzI2AcCjkJ8YM^*(#c8OoBY4!
zEjLj*wri%J5Z=Qy%}S1@?*EYQWdO%8Pm!8O&F5F*u3FYhUKmQAfLBGwW=tyXkP?`F
z$+i3%E{Tb$2tgwjG2RmtVYuFKK+<E{lI_A{?OAKdO&jFM6m_Fb^i19(tzu@t&y7t6
z?F}}JK?tl{dvQHle3Ic}2F1$66~#cux|)B^sB3sRF!y4=<CV4=XM-MVXwB}rRrz;|
zQ!mm;P345KN%JRk3#bggO4qkk><=4zGrT}rh3YLHA%mMriHRD!BK&LKV9o+y=4GO%
zgZ8FsZqP<-9qpersnUvXGdzp_tp+&x8JdGz3+d}@frxIeJde{R0bZRXMJ;A48P>MB
zn!~Lofws;#BU#>V@;bjjuk)=Z-E>bk9DtGjo>I<aD&IuYd6^aC&Rkszg;@7ZtMQQU
zC?H3vAJ{+5RDx99x-#;i%CuXT;Rt}X03Xq*O&Z;c7p`Rbm2o66^Az2G?^9B&!o{y5
zs+nmZnMwmm8CnKD4o2Hh_{cGgFK=w$Fu>I9y9ar1Nc$}>16mEk+D;`s))`<ubjGSk
zbHB-nyL=m$^!QsIoOG9Y+`r7jW!LMbS$+{N;0M0rghO4@>GWwOi|(oS_qzsmFaz>P
zZvlYX;8&)`g|jG4^=){u1l~Qk-sq}qBpM7KsNlA2R~kI#7dk+XDx)Lo1osDK`$8Fn
z)-)~V#$4`YmVX~M7-LqvuPxQPpql&DFR}d6v(v5Eaf+O@7Z{!y^fQW+g@aK>`sufo
zd40S0P^8Pz?_AfduG+V$_SlybYs+2QHnxc~>@|-p?pH@}&#AoWKZH@a-&Tg@SDsDF
z%jXSQek-Fx;9)y2ZQ;Et$~W;G@a{QGQ4W1eL%$jBt?1g?32GB>Y5Z3C^nh`d3b6)F
z7^Y6l#)ApG^Xt%mVg#8Q4!+G?a%00=@-}6W8mK3D%X#=s5H0hdNM^aZGG1hc;lf0@
z=A*rlGQxqmjGZ7P!nKA9!rB=xt4BPo9r3Jo!gEaD(uhM0gA_o}<3w&nA-7@~Bqzn`
zXbD?U+-575w7e?rQ>3ioyzjR-P_>{%GVm(RJuT#XY5i4P@*0l1fZKO#^m?j4Hd~gV
zy3~MwyusrO;o-(%bE9gPfI`pA`AAQ%-^Dc*ByBT7?!9G3T}GZp0xYx1i3r-|+abiP
zGVa8B^sOfn9OyiV+17PsyE8p=RgaaQTkE1%fw4BKD(5rXT2+qK%uM*V)SlIz%!_6k
zvhzFTdRTnj65Fe%^C_UPr-o3}1?k*jM<}t_snY3JYMRx|I@$#kDH@SzlI2`_i<Ft5
zf>9Gfdy>XNKV)?_{+2hYH%{Wcr&m8`fJ{z<F8%6y{8Ex1^j>C{Q00Hh#P@w!Prm75
ze}BsXy+fBAASem;27{qjCfo1{Un5^>Ot?R4rqcK<TL?*>?D--*D}rhU5p{Zj=tWLr
z)&gG6{;qDtJs50IK2&$O=T4k>vhNSvb^pFm$)peD$~7iI&_nM~m_MyO)?fOidk`l?
zK39msfoo0Pa1RisGj(WZC9~$~=4Q%jOsIz(S&ZU_mJze83A=5m_h!pfn<~P^y13%$
zG=>hU#w8>GKyfQjRH)O|S+PURiXF<V*in#SstgRijpyr-GOLx@p|=oko_bSy^VD0R
zZ3Pp)1so*%1bCEO5vA>=>!JG)21Li$jKOlU@>RuULq#f17y1+kWvJ7~Xy5n)?Miod
zS2T_>4zxc!#lel-LO$`J7v|$r4`$~T<CXNaxMASbzdKs=0<O_7U^!OW5_=Xz$=-B@
z(pfdh1kN)@f<@ypnZXj1K+F`0mJ2pr#0H0c5E03fMGR7dXO4mQvV<J56bxkZCY;Qc
z%VotDxWwG7h5;7^+EOw3Wf)PEL!(_Y>gNvjzg2`{d6L3vjzn&Bz|F;yY_R(M)Ej!C
zNIi&>7U^#1H<yv0y{s1ud!jur?+4*tk$llU(j6y({&N|1m?5(~$xcU6bqpD_9vLHu
zY9la8L`MJnJ<*nz^Z}$*|2t%&mPq@4n0v2Bu^F7a7Zg;^aL!pmfqowbhN&l#Ua%Ae
zSgSKo_ZEBh(K=3?MF30#964XTKBb%!Ll0B5Qf}BJaR|wjh9#T}AZESHFn*l!*C-Ps
zr2~#45LTdxb;)f{I%UM<ZA(0rn2D!6l;*pXQ51;4D%qz}Pfa-rY&)tl;QU9lpfYYM
zFEx?1^k|IGuv8xgKG5x4k4<NZ;ozzOWk8z0(nlQ>D9c}j(RnlHY;sWXILJ)`ad)>o
zz|?w))7U{Z$!y!*CRG8o8-Lh%;}6Xne|YLccMX{t>=X>#i~>wFoM41n;!or_lp~$Y
zV}MFv!CsuC%yYn*5O=7g31nDEgT!WsnO3aEP~mhXHE8a6*X_D8DOU;THM<)S3vpi?
z2<KH0_BcvEjAXG0ml$nw;N^nS7Bn5cAbf$bJ@fx9K<6HBrccO9MOii>wwH#Gfx7Jx
zg_)d1x?Wq)7#-@tZZ60-(;`ogv9Am&$HT$Isnnma%#qX4YFb=KH{sr|CvUTX2;CG-
zh;rfV_<-1Ka_fKp47Cy5nC(qJc@3oc*3(CJY3lT4bowT>!<VVUm+8ajJE;)C$mMby
z&aD#X(H9e*JxLS`L7}zDES!;N!F78EEPflCVxT{b1IS^l2?e;;J2jX|WpIACYnL=9
zIqCY{UhOSZvG7ZpU|QrmWoB%~D>hOYRKvHXw&?jNhNX$NMgH`%s@IngFxT9{de*{;
zLP?PKv)&LhE!6|&OL||KiI`{7++rXDM`;k<OH5RCko3?+0Q0^Z{8psI!VE@<a%5If
zOgW>1q%E!~9|eLR+Kq(bXYMUyf=NHcUl{w}4|VK>8&RxgdG@T8b`VA4s_dz5(Oqj#
zc8oq+d!lQg`RO-y&ZejJ#ajkh&ybK-Md!GvL(hr(sSw}`G$@7S!UPdB78zT)L<f<m
zw-DdIEljTv0LuRK-o7Ocfm=klk;ppU%9|qe;TVr<x&|Cp*iSq&!2yjiLbbxo7!A;~
zN3J&yX59Q2_#xz~cK37di<kDIZ;!mlyAw%<>ly^af(dleM5M){_{b=3aBR}RBehjA
z<R2_N?@VVqG3L;V`XRD<a-oVQfJr@ycwZO*vp_E&0V7lXjW7bcR2{%ku;{JiHcnw>
zS5k4bghkDIi*IMW>9>yHGV}hdx~=@hlWk~Zp6Q*O1Iu6@!6VqiBXbvSPtj^f!Ki#*
zX`lwrqII?ZXV|)E5wLW6(J<njT(l+srbXk->e*-k_uoh+R7)$iZ<vWK2*kC1q*pN-
zO@Sf%_Nce~763Shsc)D+FW`+_v{B-;tS0OTGWs4gGJ}Dv$S`hmH$uz0Gs&#=V4#8q
zo@gn{=_s)XuZi_h&`eTm(aX`vnS?$Zg@P$6!lj7DWfvjSd11BXfow4Dg>uKB!BtAZ
zwH)yc?fi-8RVt(^m34ceR;|gekZ&1NHCHvJY5y+~es_?xRtUfRmV_UAZJS4lU<Tdq
z1QBSnlsOTEa<@-TrGkzKI#1>bp%?^g0EaIQN(|3s><ho{m#~ty2#WmKM$tG(WLL^-
z+oCQaX>&6Q)zCt{YfL6Bf?ScQxgt|Xec(TeNf9i3#Z4^wg?kW?U>1hHFY_@95!ccq
zb61n16n#wrtMmd)70W{oYk-pg1yY@2B>d%80Rwm_v8+>!2kW&O)k+DCjjI}mX_P7Y
z4d@P6Q6e|0;I>GdSCSme>V&&fqudSh{QGbT+ilZ$b;8@dE9HF#&EAUlPX4_DB#HL2
zp5hwi<a-jPybLV`HJ7NFL{cKSB5P*sB`o1XSrp5_SQG{g;h!x6DvH?IqMI8wX((<<
zhNg1c=28PCZ~1tfPxLoU?QnHgUeaW&Z@Ikisg_iIDfa9x<d?XoY6C=~cv~Nsoya2F
zCh<7&<8g?317k{(6jD8!bFx07yR|YMpgz`XCz_xZZyfrp>pM_RnLEWuh+gZ|;H3J(
zmoJpdCNxXd>-E8e-ck%k4Aq<lf5d5U_2MgNEOBkuS3KIj;`Z9O@i-E^J{32*x4QGn
zgFqJKdDcr}HYp6BBIVhIwvIu}uk<6529L*u(4(~V&)@q)J&b}BKk@Evp=BM3gK1t4
z3W{*iGQxsLGGmyxqt2At^ri(JXEwhPE|7|nrY=}dYI3+)Pmhx`&>d8JxS>6x0o`;z
z^U6Mk$Cj~2PEJQLD!P=QTM=PIn6vvcGp;hok;=xQt>Gh;gd?h1!xt(EN6vR>p)BAR
z?sc>mV`?sG0Ut@{7aCNUIJp-hrB{y4`$*6YDq@R0cq0FhWC6Ae8(3DT&iqbPr(u_8
ztUc|>I7qEMpzqZ+#3U73smiGa4QVU6t@nBu72P0my!arsAhptJKlRGH5x&jSKu4Jh
zpu%u$NUaQjSC;?@4`^zh&1xa9I@NJjnWwol4D0&J6A;}zAEg_|oAzM;+me1@hDq^)
zzf5?`^&loEF{|#%Qy+eor!u>PxYG4VDmDv>N+=s;$$?2Ql<K#LCTP$GJV47hBCewh
z+rH%gL&9h;*FcE;iCS*JF{Pr(?E9ab{u+eXJsn$0NVDN)3-TJ@!6Z)8d)G7C3wueu
zy#%mVrC!MGHN6L>VPd0Wypw!WZfTrB2~hf!HA0pUbGx^vwlzBHnV{d@>H6J%*EM=H
zC~r+z1J<<6?uBE?NqI_s>F}dJJasF&9L#}yQugW}VyPO(REYP9dCC*z72O*uPk5I_
zD$!OOrA8wo48S8-jgp{B3nL7Ct`puNox#3jD*ijXL9a8N-tJS3D{EwtyUdfajMH~;
z!?zhKCB-wW*J`P>W3??1CJpUG|1=~tfmL2xDJ{c>6ehw;*`DA5+?fL98*(*s%C1Z?
z)jp0<W(s?<WFj}J7o>f;?!J>A$lvR=NM|P3!!_rsr3Aou>jo(PXmzP!`|tvEYPEH4
zLRGletM9J6(Qu*Gk78oA5pi^%QxttZgKy$R{3(=a$I(-gl{ypoV=pes<N^<<ApHmA
zY+5a)d{zs8fX3N$Pz*>l)mtjoOgu`N4P#^y&SsR@mPIUylTd;aKr0FGrt3A3yAS0`
zLs6t=pTkA$FhR^35l%HqcM(95AWIBzpjf}=i?Lill@Uf96?5#SQb-hcDLJc7f>y@O
zo&g-3p#f~IY)D)B@$gFKkQ0~}FB?^Wzy^1T5ERsm(T>llzUvRI=<DrgqXDuR(E{54
zD56tTTK7r~=~a-{cnk$<EoVj+>6eXXMt(MRS9&nps6v5~0q%76ljhZrU6txMWeLSP
zcz_p(o%OC|$Ei^T5{?z++g#tt4U6x~*vGMrpi~^8k&bskc5MBjJu!3FU>&ugqc~`-
z*_*0^r??An)<(E%9Qo>PG9%ulf(pg1>h*Ezpb)q2sru1VdF-jjIGxG<q~=;&U`Cn(
z11H>qg*8VwGBCcEX*D=MS_UgxT~ty0qlY)^@_X`3ZkwM5C144YCf5>4<PL%c$YF2#
z8}79xv;#!D4NO98sy1*^Ll)}R6By&GaDqf<u3xQdLa(bLEXIaox~_3szw}h5!?fqR
zyIUb<jpL76?5r0g6G<HV!&^GA>){!ur)108Z1Ak5glu?E9HwaNtfY&paD<!(jeL_m
z1`$#tnQ^3xHVU$Zd=vp3fKF_q@Q|$ybB=M?fY=nwigG`<QyM6%6_f^Az}dtG+~vr6
zR45PttBfj}gY_OZWlCEn)#!<FTe=N0_pmb=VU#M7BNaVJ*K2kv1vbr4>!(755o*dZ
zH`8*Y(&{y`Yn9m&wMW%T%7R<uv+$O7I;G|A?h-@So9UF6Mmi<d1}(j*^nk_0G_VUR
zAk5xkqza+bbryEgr9~y_(!xr*B)@XfrQO}`r=&=xi@4hfrhAAF=8No7s*o3LOFS|b
zE+JiTW#K}2SzoQlTgla02G(j!R$`fSyp_U}@7&EY=!VlGTdc?xdAcXPw%6+}#pbYH
zP8NIFd|t#Q=TGn#ZRw+o)n*~l5?&eUqc~|x(r3UBSzC;GhpzmDkwBupld{v2>sfQ5
zi5IT^Y$WPim<(w<NRP|`$^0<_9?db7vS$f(W~Zbd+`@v=0lvwDt;|$HF%<o@y12~p
z@N%ns>+h+O-Cj#qEI^JcK@DQ--#X<4!&HQe_%~nt_=k(~L080&Q^S*kGkpPy@S;(&
zEn;6W&hJ!h{LMVtTOCqS-h+Orl&J#8&<R*Yj9Grm44*LcT}D&EC$eZ)&gC-JmiD4r
z{rhZl;kIN+otN*y87~v~5@hY>xA7laJb{H(e4zFTB_XO+k$OTr8j_vo$49LRV%y^L
z%#u%Co4}O~BVbUt9#i&2V#x0DbJus|=Sy;nwZD3my4`*ACB}VOgjYc~Ns*4~6T8~Q
zJyNWI%^z=-ji~XeA^82FludmD8+FurBCVV`jR%wB)yR{%1VpIfBLp_85I2Z%nQ<a2
zfh}Yj!6e1{%5i!L^fe$N3?yT}c}msfOC3{zeUNLfmE|{+;j^TaPT}@DtGW(iW4(xH
z?=sPSM}0uN5Dbl{-}Dn!I;8NN<cU~+Ek@Ee>*v97Vhw|0U>dTsC9onT#he`K%p*r}
zh#ZCt;V8!^2oLnSeV*hZ$I{bm@AbPkG943L!EYq3rdxcGQV!^6lz-q5Q>O$f*<C4u
zH(h0LxU-A6DLhD5zQT}S?5YZ<wHsaZO*70c-o?=(EDDT@Or7(|I2IyDz{`KnffzNQ
z4tXv$g!eFn_Q;M+gV?y1>)=tiM7t95-g4YM(=E@j`}7)uVDK=NryR2Nu6Kf?ewR69
zo9LBB@HSVvTzry;g`Qx8<>^7PPRrw%e~{mhe=Hp9)5|PZHI0Z8-vdWk<vj5n2AHu*
z(OUkUyx<(Gc6&NX3>SI{__{+e=p?nz)ZwotI5}18X>~)_#@>LP<xR+<46h7Mtc5%E
zbn3oZq*>319jaX_CMl&w@>7vAX~dCC>i{f;5T+nZx&R)aoF*R!=|(2^!|1~#kQ62!
zdEIc;FtVE^oM8hnI)-kBmWCrtwvs`;ku^ig5sLfjG!ikfunD6-3Z?}LvEf_%8V8T#
zN0Z}(h@Hd4sey6jSlEzS)0bILxi$Z~JufP+P>mj>X*Xb1FsLl`s?4^WLJbyl9Ptq9
zHKYs^)>wFRhCv|cyqy0`O8+9EG+6u=qx4kQ;4jw}k`T_gU`1fKk-m;KJ{na~qMrAk
zz>Omrj+uF4j;3D#u)fPg27>oVc`i<P<~0kw5W<SYkTVD#UKzIxP=Y16?v0aHu)7ye
zR9I~PP$Y7y?5ommxl-d<g?BGBlh*0m+mL6Om$8(CtJ~kYkLa4Pd)anXh!g^E<!EmY
zt$Fo!Qcm*h2QLJ~`+#Mv6n~n~sAbIvb-KAW5`=PRN}X!8!F~fp^MgVAR)^}Ui2J7K
z83v=SD(f(NI*o^KeHb|<h0G>~i*WZi5^Rq7@&LWrU8yINm0uNy%VnMcwS<AyA__?s
zHC?x*fcXN`LCBR8v1j*p<$|vx!D!V{6MjRctBRp)v=>C}_jVzKoXyvL<znVF6_Qk=
zyMBFS2M^-=uGO|81e%BgxlQ&9*|D)rl(s_v;+E^*EA8}|f|SK97F)<nQf{j#rEy6t
z9!AZxgK#y+nCFda{VG!c+HwDnGG)KpM)?}<7#B=xx1)YD)SH*KiqJ}>Ew=7p(s!OG
zW&9R{xJfIl1~R^zmy0e&I-ki`6QJzhynF34fiD%GHN?{#e~ams)<nWc$_SXN^Bdwr
zmF?;PS`h}b&1_j{*=98HF+*`Q2i}rh;6i4r(RTdYa2{F&;={dCNZ>?1W7UWHz<rOL
z#lhZp-#y&jU5tl&gTX_<A4%~tNnz!kg=?6Mi-!AF!|r(Kvco@|&#7o>T5oA;w<HbJ
zt)Ymvroqr8;{Fi?3#naZzA~6%Y%!z2!eTq89-PJ}a2YbVvKZBYTepZ`r6q=(Ry;LD
zDg4%`>>V|g<m<9lcvR)kgOwPl&7%iLa=b>_RTDRVghL<7kS+#C-m$Wn8RBEq_*bLy
zMLH^s$<(*BK&$17cp!}-Z0mDYpE|+JMr|$pyp$u%tee*mB+ODXd@c`XE?hDtqd!?B
z{xWf;t%<RX-j`rbNw4ct7>b^B4xfcEwxI-n88t|7<}{AuptaILbB7WPtoNMZyWs<h
ziSS4ti>s4GKyqD$K<L;zmRl>Y4Oy;JyIQ2KnsZGYN}Ql<udCvs;81FiO~FtD#7Kok
zb2Flw1{qUZOALITNI`mGBtH?ii?~T&D?66LrkOY=%3fo%Lx)nGBy<`Qlmgr5M4_X@
ze$#B+gG>kY<MDl}j}Nb+x5*b&xc?D+GVE=<Gk8?>y(@Uq5dlXqsy|S#j?u+w)K2dG
z;hlL`-r>D7??S|lRedF?l*`e2ZN6aL^Mk=;sTDh4ymQz8f;K?sWC*m>njrk-D&Kn@
zPn4kJz4yk}`D#X2>3!b_z3=<rO-=868N6q`ulG5)6d7Ra6xak4rrx}_mo;9)NhW_*
zDpip~)iYGOr><{zTk*XDKFv$WxbXYj;YoU*b()3O?)96!82%_#^&3)ES5_Ro#E@a3
zE9qmfjZC-sf~5>mX`b;WlG5Z5n&|Uw6%ML&v=aJ%lwGw8>y~v%t-D1&=j`tSC-Kq!
ze+RjrOioUHt1~agq!KsK^xG)+?L;)jB9~_&u6@VcpxQS}2&Und+p6Ob0vnt?ATX!-
zT5_wcKD{{v<joCB1+i?~fQxN*VS5kz3U~GQ9%?^u_#NLH#`o{-yA{p=WpQ}}tB^>9
zBbQ1_JgjM=tv3rEGih;_^r4?`Q_pY!^Kx>e=QFMfhCM9k4Ew3uRJi2anWc)fWt=Pg
zP$+)AU?!b?OuR)UW`%iYHfWT#&@iOZp9X5cIvkuB<7gRlBeF2VkePc|6HL02EqhbB
zfA{wLi+lTim*h2EX1(r;9Ax~wyDKL$p~}9j++Q>-?y~=IFt~YXm%T-=r6B2&b=+FX
zcWU{`R&Nw3^@+9ACo|ucnUVca489`95kpM%V%C9APpP?bc4KAJrnT`p*v4WTviT-A
ziCg++unIsEm3FeSnjBr4%idyY%eqwZ)~m|ERXNOfyrYKWt(5Qps_S(=4nmDzhDN}U
ze&+2z9B^p<G%$t5njl!OlY=1YHP+YF^Meo*74PmQ<ERHeObC^iORMoiC)PI_6E3!a
zX+2TQUCr=H&hi`=oc=>-ViJ}SW?B<71+bT=A`y=G#)}dI&9LFbt&__%SnRehh8F2J
z$$>1Q9gWB)!}x&@tBuib4h}FRP(B_H6>HNZBI*cLFR)6|`|RYDWwRb>V03D~9g3&o
zq3b@|kVpM+oCpoqG)SA(Y^&gevsImrrcz|OQmL&n9cAPQNcdT>8Xb*Q0GcCd(lQTb
zCr4z<GCv4+cjx0sLIjR!-UlGWVR>|(b7$Uz7d%oTD8DqPwP=E$Ou<i9gP&ZRal(o^
zx$;z2skIVJiWFn2A-VaPvH6%3saai0lv%J8KDUUl#=(-DW)&wUba|mWPOP^;<wf+a
zv#P2otBSyJ$!#B$8&XseX8S^$8I8F+j8BI4&6du;Revwr4I<HS5Gj@CIo>DPC%{P*
zuNuXLVSeRczGb54oCwoHVfrj41<r9}fr&o{7A_EH55X<nI}4Y@MlQ)ecmYEf>bNg>
zH!PYtG@_LCwk}j!wnc4Qr!p-Ytp`9QL*F=brJ><GaYV+osnRMc=8BimLDRu9T&P+{
zrecZ7{>e5TgY%!w0^zMU7e9!H=N7*N`MqWwAaY1Fe-w1Xxor8^Xql5*9&!7J!Fl4W
zyd&4U2pp$=i}Wj34Uk2>FYdjml;55Qhy4p^{;+q!zAxv2Q>oG?+Nf{Tg7QsWF#%?_
zJ`29!=*}@z75zFk;<J7V#PT<+ffh9U5#(FHpUEY<YFncBYKh*+C2A04H4&j?f(i@v
zhkNhS=qz~Oe*?X|@4exbIt!W_!#aJe07Y9n;}*s0oT=5hayPSssX!=83BEHAQ_6eu
z@sv*c(wQ?v<J-+fVzEp2dI4DMQe&}&d4*{POq|S{f@8p%q2E-W{+71ET<d){k@j!j
z=6-hb=6;)3)b8yUt0WMywb2yr@9=_@&L)@ZN;#ggl(7q#HZk!{b}+!Nw9k_aWL(RT
zy~<H<HJqsG`YS>K6qd2JNymTDQ*fmLC*1kU(m$@)Q8b%YTw`H#%TpEPiE~uOn4U7-
zxEqiB|0-tt`vaM?wbZ7r1|ASMPern^?NTx_)5lT|dy<|C<}zmWE50Z*y!$LGNXx<v
zV0ZGs$ctbY?rbwVJ!lZ^q33-~=PRTywtYz@gO<L!OL4`b8zD#7fYGnl7i|n#d=u+n
z8UeXYlWcc#7ei|8yGbe%+fsqMjLEjV*nW`rY7=nc-V?peg2ZZ-{8_tkGB~AsDn8gB
z3?`-DSV9x>Y!3WY3nyd#w5;4+Rts3PTNwO`KFHp=IvAlWHE<D0{cq8#>bqA_KUvRw
zw`+^?8RhFFvp)s-w@$Hxmi~B-RmFK?+ZPds7*ovqx-S!!tY9!eOI1uo%tCySlP1wX
zZ8@SgIEP-+3*vr`3C2stX<knLt@Y9+moBmNHQi=@qLS$v9v5FK9v4)UT!y$XhqMU>
zDkV3<DrGIe4+p_ee=uSXqNRyW6Jf*zO~1vg;g}X6k-QcL9869*v?F5vf((E95e2au
z2Zih)>gA)n9~8#m&+YgH7(v@e=2}gad@EMHW+%z>kATs_)eJ}E8nb~1;6^0@Q!o!+
zwDI8g#JUo5c$@^+bQ~J7`o<H-vE?hBCx5u{4)5l=B7{ejlYz3c+xjKoK5ImUG`eG1
z1&g&pkz2VUOw$skNEb+I1*WESXeXyN^cZL}1lok`@Iz^bA9=Iv;vHG$!;h!ZINvrb
z4V=gEBY^UIj&!o?i)coLkwUvon<mp|7mew&3&E!?_IMyc)C0~AF?C{EA9%>+sSyUU
zG?tYzSr!T>fqWw&XUe&;r`6opt%<H0{YI?RaTweMgHFO3E9Dsjd|@l0Y!7Vp_N3H4
z*PR@wm~l=cmw?=(n7+o;MR=rKO0HE_61fC`uBe4kstUo_a=l#Ii(LTz|L*K~oO0YL
z4mcBmmF)?t0qZ%Ia)P3fZF8)7a9$)z{z#cssJDvT5%ZGM#ThgFWX21z;FaLM;<PH~
zaX<zA)Uy*}#YRFb{kxT^5Cg^ZvPMlpWuKDZbu6=NUjr*K#qipVj0pv|>+W<ZU-Tch
zuP0Lpb_SSB5G$W0!Siwt=KB-!QLcAYd46AcegpWnySpHo!td^Ndsm6q-JON`M}B;t
zZ1k>Ns!QEi*XJl+zh)m~zfLmW+r76}#svmapXdl|_jW&AetXY0@`k<c?xOxi?=ym8
zx?Xou%tuz9=h-E7Nvy$(JO{Y%{*o4}B?53f+hJj6mis$8#-?U2uo2p)9;|c^NCe)d
z&q)CD!nvL$9;`*zzgEfIyLr3_%j8qM(@8F{lMo%6r`cy<w1I@e)O7hQ&inAD3(K|_
zUG(RiDjZtLRwd$kzdKxh-kAYF!U+Fke~AC<Zam>R1_yf)f3}*(7fK?Gbl+likwT3w
zHZSava%jK3g%I{LeO1O61%K?5s?6>LAoXQ<kt`_VVVZF&Ur&pu{NdgMkFN}v!C>&8
zT~B)a{=@HvD@^8BU#G73<rTstdWq3^#fgC7UWEBslEQ6;Bl;e;(%+|_Z_o22{fM`i
zoDVzEdD^DZ$Ar1?0u~z?bzddYZP|&7B>lk}xgdG{?gQA00n9{hO`1^>-rW;1PSk6L
zz<dT}zKTy_)bHcz$E5tFi1VXtmdq&(VmRw#=z_Qp!%ZlUb3aQLSKW=6v*j-3U+a1N
zK8H(e8b%*|BP*~uO)D8N&6k4a$Pf5JZv!tym|k6;$GAMkVgdyu4)u<`2~n7%RqF!I
z2*yQ$W!{M6zNH|Iuxm`t1U|7@YJ~?o`?$tCkCvZRmGFuHR)dT3&-R4pA$u5N_pqYC
zYbIaf9rCcm&DlBF`L?<G#-68Ac3^VqGs+ME^``2<@BYW^JN%zL>swUY-{0@5zKmlI
zLo-jMe3T8o#+l!GXpd(P<^wgfe^W2}_wUPnVbT9<wL1vQ`HN4eYZWJBV<WZZaoEj-
zDZ0DTHWg*OES#ac1BIplHy?L~d;7&slFrH07F+*6K-<i7xQYr@2-@hvne~AI>^`I)
z8Jvftyds=J=h;V@Ra4#lTUXWt_h=HcJX^A93oaPp5{xkk2xJf88Q?9M?eK~57?bhm
z{$LLw-D_Dr-Hmx>)Y|HUSMORJzW;de;DKz(8f4RPxZ`&1G!KuDwCFQTQ-GX^ZZzE`
z2U4J8+wH@$4hDSO|IY<r&~S$gVR0|2EmW4kKE7duSIBEdFdAs(LPSv<&*!`vdgX4Y
z^xbz@iDBNv6w5eD!UZNoKxD^-F?5}c7@A7`$NcdVxj1JlxYhFlJ~rQE__kZQMO*Hy
zBrW3dRjQ)#Kr`Yh-5(6>!Rub@^PNA$|8+e%*hdlm4|~O~-iU!Hi2je+tTN|qjo-)r
zp6JG-D6&^#D^=1=*Vr_`Z7+0r2m0OfWHyUadl(`l03D~M_Kd6SC(3J4>@-z2?zH=K
zr#)QqSV+g=clQzKJ-q)9k>COVV$qy=qo*0&@@;_ry<E2XV#oXQ{rS8N*tb;N$NwJ7
zNiM@QUKFiMVbE|znM5D2)RoM^04kuTTe}JJG<8v}-3P3pFrAQFG=XHTp2!0&tD@{<
zD=2RnYz2}n3I_;46OOIO4t2ouWY7iy17eV(Ee=-lbTyyTW>v}(>4>YLQAB(J@I&Bb
zpb;K|+EL`7&a=fVHnGx^Cor9sL07xYma?sL=$6)*!F3wXG5a~T%6Xu>VOi$REG)ym
zXxlYGM$>Uk_n&8ut=i!`T4lX6uP(x~*#ECpzHmPL7k20;_~u^m>8$tpV&RS9#}52R
zi=ca6mP`NMz01qXz03Q1S$=j8aO41sc6T_22b|48cSnWn7<3QD%dk8LnljHm#zFT#
z_wVDN#B*O%8g_T)$zl=k@ONfG_h`5?9Q-i+?$PVvcX0lX@ZaG>cz6Ww;py?tgV*@)
z@KN{P!5Bwy@ZrDQ|MK*_P$kR!(vHCY>eJ7feIii*&i?!+UdCaGYuV4~rvlJCOkjJ@
zXwRC@BHVcU`wt(=8dJa)Sy~6c3xMH;-l!x6P9hQ9ArJhq#Xjxr#}_*UqvAdZXUVFd
zQ&>5&s>kXMlWr@_`)4`S#kej10r&H8{?OZD+I;TH#;wCm;N9Kz83W#`-RT4TAGSM~
z-Jd;jncPs=;SM9b{~i7hS{e?Af7$S$Eoc$YkgFI+#0T>vUd+CFr|Ls1k_9wX-NU_y
z@kM3F%+6~Nr4XcEKdXFwMIHk5d9`-rxM9X`64(2f1l<pS9O0hxUVlx%V?a78<}nT^
z=yr`TxbZT~!!kolG4>l3X(!Z&)_51dyvJ!n%ykg}6T9jKv8}J=Y$na&KDolj#7L$P
z&YI)sX}e1^{`|;{Wv4@wp)P7Pk~!WJ#3`^OPYI1<kU*)~P=l~?1>hjC6(^HHceA~e
z{DhF3Iz#bWg7P?>5jqUcQ}n06_%4zBowy?>+}({PBDwV89Bu;N3GL^13Fb~-ui-DH
z>*+py)5VZ>7*-91k!b1}UA#I=G5wOz${Qm-$Xz2eFD*7j?@O#Wi}fWaD>-^_&S-Oq
z^KMmQlbtdS>{rryWwxe-!LDwlST<TImMZN7HW;AkfRpQJpT-n>MpQs{H}z5#G(qY_
zj@YR2sA|+G;R7{TVNgE<97EyWhx|i2S$|0HosC8^9c6#$6~WM38g^C<^&M1RNr7|y
zJ0%@y=vQS!b1(^A{5g)CRJispxj78*hk8?)oRQk#1Blt)DQJ4)MdQIlu7)4EF1~Q>
zL@g#@6bB;o_rjZQ-@U2Wy+tss?H)!o<lS58-CJ>h;>zY>l6wkE926LMTkqD?-mNKX
zu#zC^6&njG+aQu{u+`BJW)|Y?0V+%b3WAH2X`amD=f_6~-`ZL(t)holX#wRZ!*n&d
zAV&C3F#HIt2;%}rE=Z==cT!z$-`ul|mrR7*z8{FAgrO5B3hl@v2ovxT6Ub7C2_~_L
zh3co?ADV5-1R)ZkqLv4fAU-=!7BiU}&xodL;)m^dU~hHkx0@y#haS!2U_?JrKwf#k
zPdSQoGd^%{GGwk#i?{aQJ}t-IRW(bWBPoPQS~&cYj(Q8abACd75|{Jjinx;!lZ)Lv
z^_tG`C#9Xji6D9-Uy=1X9g~7d$86-Jrm^-Nfg^+^F!2%KYa;@vwx)n<OKaXL0C?}e
zo#(H9UH`m({c8Qo>-F*L_0!kK&wl*-FURj*te-z$KYzFW;lphG_QkVzua19O|NQ2K
z`;E|wX{cvy)Z4pS;n2#<tPiw;GUn!z0>Pj?z|+=7Ioxn#!x&-c7;s9Ei{v#(#uY|b
zJ3(*Bs1?#tkW538i)9{1NfG}5$I>gzH-{>eS1EiH@aP_=i>uw;6k|~HwBpOR@q%-n
z5FSBvM&bD#b2O?~Rwv`TL(UA$F^gQ8Bq>_23-q3>+pC?Na-!xu%gQ~b--QUMV+96L
z)YwRpVcE2Z^G_IkN{ZbH0bw>F5wMI%v|K$N^QDgFG$f*>&!K$cucM42=qRU`w`iuD
zQ_Q3QK7~P$qa%*_osy?%<GKw7Dp`=#{%g$bD3;kBEes@SEFuR!!q6w?OTgqfX=AGw
z^v5%|r$)360+q%`Sq<P8iY3Eq9+O>U!M-jyiBE>~+E10LmUcRWe<zn1K{P#E04>)m
zF%O?hRtg*G$t#9S-ay&}eF~7#wmmC!kcb4zn(Cdvm*ND;*Ssa`b?5uiDa{};Mm1Dx
zH-@euKLQP)Fu|9?me8o}Sv_F_;{tQG$-!wb!nb;KCOkC`PgiUm9~WsGp#i{lcf#>q
zK!Dz!BeGgIZ2+HD4A4qZi884-x+kF>Rgx}OA`BNM3I8#^dY4?p2hZ_Enq4|B>Ki6a
z<(|P{{XV020T<GUPCi!+>Aa<g!|MrL<2(rhjGOZo*JqXkK}?pu`qmm3{m7-L1!&>|
z)w;+i%7m(IM)!)c*NF=hy^98abYmssoXLbR$El!^n2W|Q){Bvw^m>9bqv9faRy8!S
zK6jxyY3Pn989?eW#PAFe{$q8Ex#lVzN0>aq4f}mB>i4mGnl_*$_d4wdVb2J1p7f2#
z-ax7M6U<~6juSoFu^Q}k6gWvgNGZE)dJu$@q@Mx-&_jPVip#i>=sy|*F%a6tBUL<v
zZNaNYhT|r?IW(C&^h5afsUK}Nju}yb7z@rIg(0`SkC?oXQQWd0QAS+YW`Kj}9GZgj
zHw2;wdPNtFr-UKkb#GsR2Qw;$XVOzx!;eYtqpSmKmj*nps3*#m8U2P)k^(3%{a-0j
zTWgb)MXGdQu<k}s*mz+8gK!=eFA<aIP+BbWIA$+Oj<xj%`pHr99nK<51~!JbArnU(
z%EKoK0Qj8CC|wkoUx)3Q$O+|YI&><;Tx!cL@*;aVxf1&n`=3q0b77&MlDAz>hWSof
z36-6yP}%6zigvIf&oTur?{jf?96b2iafuc*_sJF1i+V-un5P5tL1?)MBNKbTK-DZU
z^cT)cKIL>p;7xb$zd!8lOe9SxyWNu+&K%scE?|ESzN_#&a)5^=6q&Bd*dZZvl;x;l
z>$(#MdfE>H)tF*aGXrU7=2g%idYQhuD7nt|btG6l>F#t-0T_MbsN67Rn9PTCr)vyO
z&y<ja9VROK_YGR)yn>-88J!&CR+%q=#(H)97H$^D)w}{1SC@mMr=}q|5D+|USbu9z
z(0gHbcZK(Yaea4RQ1}CHcpp8V><$oI%q|ACF4pTOgs3X7$Hp1qCJuNv+=c<5{fICL
zd*b53Ynx+l*ffNO7N5gSkBXuPk6hPw+Ft?D(*Ot~Ycn{bCVV&u29<qMpWt5P;9zyX
zh!w2ks&YFE8*WXFprdw$B4JvBQB)$6@Dhqj*msEHx`+bggWeaO>G$p<T2688%rJ-I
zNkkvwJEXK1&uyFEcp%A{M0gN$h>M(Y5ymDJ*7^Lw^}AhRsDFS1H4Bp082QXYp%L2S
z3e(KDa{db0l^F_aoKTO`ygCP-aMP5<m7vD$Vbo+J%W*ElQ6ht~3{tfkxSm8&z82|=
z=(VrKk><AKrY{<Xjo1Pw)vY?9-#|cW*`T6C^~#7P#CQTL9A%P|tV|&px;9tJvDn_d
zzGJ`y@LU2HtrRXo-`M`qhVSl0U<G*+t^uMK2IhpDgYB9J27u9?@p?YJVxCT0(=t|*
zV3t^?mNs1wNit$@!Ok!KlEHO}&Ke^r4}>mfK!|01>5EOGMU6~4!5lsMD$5uG@!P=w
zh=gf?d6Z*d2fBqZ3hq1Is35cwOnB*#eDf9hmdm}N&EfS>(Z1D$A~_-CA36PpL7^_i
z-O*dQp7k2n9bN*9NvjYMLnElHz*sE>js6k|5d%2+5b=I2MIMzem>vQklqjn1$T6T4
z7p@My*woK4NA#pVn}HmQy+~*A?65T1qlW_y%65x(F~ZZAUeFZ<VoYq&T<s-`RCzEC
z)#3O%x2XZ$X!(RpK<i}Q^{Nmi1O69}&D36{WrobC-x&aXi|5Wm(rTnk-c8bWQO{;z
zxN6d&6=WTpo+EGOlCvgf?I7vm3`1B!Pw3W<RIo`Ui%=K1LP3{zxH~c|?=9|AVa+P9
z`Vb@B$?8F!y;T*D^W-eSWS?^i1Nh~}q8QOvP2^fbWL90txo0f%hUTjh%itVeBnaBc
zV)i;IN?3Of*}gCW3gkJOVZe)GH7)Zv#-E`iH;Y=y<Hd~BWw>?T?@53}6#xtU`5pL(
z0!B9uhC}Zke<F(sx~oWWCkyLTRt;Os!x7EX$|oICP^Q~J<K)>(B=uAj&^$)_W8BGX
zrDKEsv5Hr*ih?gH9x@pSB%&c0CBhNTnDJ3%+6~p2uv3>%016#spNwe=5jR-3%p-eC
zRgBlVw2@@wEL^^7ZsiO;=w(kV?0$A0M<3NFXXw~zQg19>7V<P&*`rlSR=&sLWrK6v
z_K-kXqo1MB9gR|6ZWePUH-__Z+F*@XF(U0tjdY2?YR!V8jshLmk_7xHqsH(lti4fm
zcGrS`t9&L7gQQd73&$8yT4nJCP|_r2ka?Tof$+tXgV+krk(787@KQ%s<|k{VuDKIm
z_U7Sm{K_yrIW{P^%;Qh=8(AT96dQ5gFrc?}c7o>DdsB3o$8W0Q8v@qAdTJ>4GujFV
z=0igv0rJ+9Sxl!!2xMvm?oh&~Tt)i?p)ZkD%zy|H)?wsuUdzCVQT@fL29lS;Rl*c1
ze2gdj(`Quu3*B(;*tiHDKSbh3t^;pwZA9{np=v~h7?v9G+3Y<9CP&zeQ-E=iMKeK9
zxJ$ec7@^>`>@+Tki4Up^V`Cgxn5M$^fk{o|L7`l&H$f4X0*PXta~k!_EH^g~#ypJg
zQ*e55PLR1fkx%F=ZI0^=qMU<4huB4p@~C4Q2inh`{n(KkDdQ5S3Z}&U;8b&reWDCw
z^rwpfLeOpe9K+$lS@KT?-ris^Je6n09J1a~fmq!Z?0l;gztb|^eO@>%1(%f#a}>CS
zv$xhw+nzP3(tE2pmDmhL?c}TUhcKNj5XME^iLRmm?48&3MXX*&M@*32xAxo66r<kG
zu!4Ey`o(7Je3WmINXH^5#seD{Njk$gEhZ9*>*R>Yu8_xo`BeaZLfH=ot~o%$rngM=
zL;vvd>wIMcuVH<?){(Zhvwh4)ss?5a+9Cx>L!ZjwA#TSCTXR;6!%J_fyn^A$ipt)T
z^pwK?TsL)sv^G#gDW}+!R$>hVPO7ZI(i(x2DQmFCE+nqV6v2}tmW|<$B6w0Fcr+as
zZ%lZ%FXbD8v{b2LWk}U@#%1*O8sTfw?6k=;IHFCDv(TWTm;lPBu67rpE&*5iKjO_X
zLx*u!B?Yr|qN!3|iukXN`5kypWX}^aoMK#u>QI%Gq0SY!{&rGQiG7u@8yBWI*rL*z
zm@4Ktb&O{(Gqt~-Id=7MEX`sRdJ=S^jjuMgF`2!6+hbPIrj^LA72!P0f#MvJfeUSo
zwsL6>IS|{MCsM$lhd`*jf%+pCEo$_0rL<wQAoko&#_Vcfum`}MlaABObc$FAX<Fo4
zIKHOil4LSlzPcdav@-rV&z9j?$m`&hoJf}$Fc~u&0}7E*h@oo%`inqFl3z}jy(Q@0
z>Ut>#Po!|!l_`+T<FoAI0$|7KqQxWLwVu^Ba~C%^-zjU_T|_BF@;zh2t2oE_H~dQ3
zo0MqIp$mlkLVS*lWC1Yx!;+&8Z?PF50VqH+8&P=DY{DZ$6d~+Afd{lMIvr&J255p&
zVFX_oOmVV*3PUJP?#o2u*Bb2o%rn8>&pmZm{KPX3iyv+_I&cZl;(srN5f5uMWr`ac
z3!!Ysv;<?+^<$~P&xnYZs)Q94JW-LxA;C|Y*Q)Gie^6CbV9|FN>lTZe+`)Y;+8i9(
zKo;^zSPF^g2&I8FfV9;wxL7AJl)Gf&7Z@ReNm%TTD5rSF@ive=R=KXNl|oA<!-z2h
z!gJJ}hl>IeZRZl8UkD%iN!IWCS%5tRxvP?Cr<UbihL(3J>g-a>?#|qhiQebdbq@wc
zsCuR%v?c>%o2pc4HaryK(4$HsRhbHE7XzL>gG_;1Hy~Kr!j=w&(H{(0oEyfno=h_2
zwhFCuFt7z&cQ@krw*E;J#A!>tff;qqqWIeyv?WH$beJSsEM-a+(jKKUTfG5O9gKWC
zu1mj^^05BtBtC^ECULLl)Ad~s=UNDb{D4v-&@IF^atvExQ2-eb&)zOFv<Nj|ZDeM7
zH%7^}<ye=pyi=r`Eo1Ibo{JmDRhNy`Yuqd>6JoOFdqXlz76YRw%7{g1QB{OS@;5-s
z?ZXO6J+M#=ED1tuV2K!5{j$7qRG~epP?-5j;AA4M%|70c2dn5Y4iDFgw+D0p5(JL!
z$C8=Q1D!3?x>_hYnok3FDoILZb692jy%z}!^Aw#^Um~Cco|%$5ia3&xpS>*rloBB!
z|27d5d6RA%sl;&=;kg>P$>!JtZUna5kJ+`6S1WeOvnVc#H*u8ZGnKxCWt_s)ZE!Pw
zBrZksDBBI<i4j&%)WG1hN%i%$beW`*w>^{rFkWJ8in>4%IG9=&qnN@J(!xBiendB?
z#>-EbJOcUlk$<(9qbpL=8(t@qLT02;D6tFKY-9wh)S#!D<vhC0i?h2cj8%YtmWQCO
z8=*~!J<*<Ddeoy|QHhK#z1e!*=_uK&yisa<W5{4rDT7UULTDgofn056+h7oPGXfea
zUQ{--1rXe?)Cp<-4awHsLRe#}th6l2Qe@o~F5{XWEH-oydKGC|sZ86-neC7ThGUPV
zeO1kx_Ik=exyDKwQobcCv<1RwTR<R9teZ{YyE6P3D`cZDxKdnjF<LEGq&R5%Z%A<r
z{Y$DYv<%}flO#u7G-l9CT~W`&LVVjfc6-ibE2Yf)bko7fsg_isogDs?Bg#*j1Xqa?
zTqU(Bhf;7QGn$}`LFxdV&>dkasmL%Hb#fw_`$+js;P^%&nNC1ig?xCUm=N(PMQ=`J
zjS*3r7*{(26-ZoIQA87CLD^CyWlIq`3O~1HA}vBOdu40aPc3y#tfnb*Jk=RQi=(Vl
z;hcmCPj4r;IQr6XaWQno8ZjDb@NK+M+XX3{bx_;zG|^{M7^_#paBEc;&O<hG%|`rw
zBCPo*@&_Ajk#mNZ*r=^_%{xvl5zwG95zyciP`&wR<WaFuj$r%iH-+M4O^?B<lyhW=
zM>WVeLZsl<)~71Z_LNLPmtot&EO=%uc*A0I0(rDJ)9-|>44h;yvw&G1z8hq`)-FmJ
zsZ<YZNr{k=suLZ%7Fd!M<VBc&e4gaxmDAN$AWG@&dQET1mr3NEegH-4%5{lSpTp{S
zEWAsyRUw=|DO5Zw&MRL;nk-Sx@E0|z7;kk3ErBW~CHlLNYdWB9pPxz!y+l}qzY90=
zOci*M&NO~Of>T)yG+6>nxU*{GO>NZ;1h5gQs^9RrGUN}e3vSx|SSUd*lT>S(kaTZT
z9}Ap<isbl4U9&+B)JruEr-9SSh2~7~2&_m$nP{7kl>>@dCIijIo7qg34Y4@3p^iiX
zk+>jaWgCCG#`$Yl&gQw_fkXFNO1Cc77O8Q|dZ|Td9@bsgVHRWjoF+0_&|F?RGWl+8
zNl{V1W~pUNA#C(CA1W)BO1<~0r7j_}#=5D*>e}4G;vP^cRMYYOUli0NET~DUf|^?$
zXySLIlC~<fYx-;{nKeSV8^L~OzNx{B`?>AKT`J9~2zVe8DWh7Ar=-QnJDH4jVv6_5
zAn%Zd<6@Hg>A_%P-3xy0V%ZoMA4$c2ZZlUjFIpfEZ%xTe%m@E^(`@OuT&&KL)G*Ye
zXUsHA_IKgZ%wCONKt*u95fUsG#M>{Y$t-ymM(3stBOPDE98w6*i4NHpiDQ|xc?%V1
zs|A#mMuOtQ8>WEtIJH_Us9Kw_($DG6l22VLzxrJZ!(BP0;E0vX?VPncEDCg}54vW&
z<Z3bY=%OGI)g0kcye8sS-g0n8@yZx<0L*&H!uH_Gld!*_ILh5+w!oN6k{8C*^EVHI
z1dG*~8U1Z5R!M4)rvK8uSV$hk)4M!Oi;zx1VH7f7uh*HauhqGLvit==VPi1$OvX~*
ztk(^nOGypG735hX3aqD^{owDY77W<dz;2mvOw6GokXZfB4D7I84=aHlV$ub;IzTxJ
z-)z-_8J)>OCCWGsZXLOknwjG>M<+Xxb`tCLx!h}1(s`-8eaN9s{@zOp=L<SSI(B2$
zRTUWJ`9_Ks$+A|1;sjLij}(wAyN!#?Z4HNy6Zj*;4HC($azoZ&Hd_}v<Q1_)E(R+0
zoVL?Y7bLd2AklZDWvBd)!~_J*G1JFSdGkk+cU#$@Sp%0Rh*&CWCbOEkfU^e8TrG6+
zZJq+5WBU~kWgso<D!ilw7~F0CRX?<7QP^gFN1L`aQ&45=Ysr0YSy>jZX6=><({9;_
zQAewN$VBs&O>ki=dm9;iZ>`?wJT|B{f)$B>Lo9yR)&kueqM)q}5Ux_ifug!0)l=2l
zM5L9)g;=jIi9po!x<HT(1iRAWdS#7}@z^|-^JA1Q<rm4u<tXd*-1H<nHHe$+RFGh#
z@s%>k6zCi{Iwg{Z*?cD~C#i20uv2hgad(3M`X`Q=SI-s429LqwijvHowqH#S2d=3a
z7v7M95QCTq2HH5IM)C=fcj6hKonoiVc3uzxX4oC<z){^vvvLPYWS8-5=Ms)9yiIq+
z_XK00?=17|45;ox#Ezg)JS>~-3}pm279B-R(%MLI98pbLTPQyYOzF<rO`1k02wT!<
zyvwfuQgJ?Fkks|gWm2B+ggd2PR)D*(+?i!@k^Wb?!-*wO$N}%;9Z5=a?LC-U7!(q>
zFzSBqUPpks-)qzz5$e|BJVBJYO&BT&N6MjeDRMB2xCh<>5b0Dz4BD0?7s(+Z=K3MW
zi)!Ljk1iA-E#^xOq#i7x@uBN4JHZVlwKe^gww!733ua1QqBoj@Ei(wL0$VjvlVPHx
zv=GOwCKWwKtM1Tojw<b%f=y-Dsl8C+Kb#PMz~IbJ+7gTks7Hz?!2@%JQKCI47(=Mz
zZ!XXCu!sw{QztBpua=}0t!=Ov>KW4DZ6;|VVwXZ>m{KWYTnMMxEu;{gpgOlh73bcU
zrnB}%oV9uIrFPcNgSkFyxc{?YM&!}CbYlgA>U_`k$>XZW!Fi*V-DpPmcAh!MBFx6I
zuQN3tlb5Q;e-4g?t=FVK^Z|~DVLil@!D1HYd+~e@Z5ssFg_zA@a8aAhr{GY`=98u?
zXThf$(I`ko<5XYRr}{$JZ>aBI?C)PR!KU{~(0ZvibE{12KNFJ@)E~T5t+SWPl;)1H
zzdtkG=A?BpPj=_JQj=p_kU54=je^pjG7Y;x<Q-+m78gQhZxersd5>7+UvZvY9tyUM
zZqEN7ZCBpiwvFw-ip<mFl4DAdvNn`yolLq+I#Jz8llG;G`wm4>G7_3(NXl_+>ASzX
z03f(Xb~<@~Se5_~1W4fG?mvw$xyy$wclQ!CQM^$>o=TB7kU6<6HsaPCUTW;;R=H;9
zD)R+R^intne%)pJQgp}}7i-P5K4%%4On-L1*$5DI3`oza{SOJ*k{Qh6Sy7~6XR~^@
zjyBvhjV|)V^BVr>t{OT!V+L7j7<pH6Cw%l*t)1}M|EP?-(E2l)c6ljZIydL3(Xo5!
zO3tDeOHG_rTllN`!e8;mu;-i26lU}*oSmYeD33J0gxL(>AWdrK`8l~%vvFu{yeBNy
z5x{fDodPXKBa@5$t_`n_S}f<9oIBRqxdX-Rnqy<RgGu^tI3v~Xm-9w<<O`%5-wwK7
z)>#F5rQPW;o6_m7e3&v5rW#gVJPkN$WzbAo*)8oi6@FhTXE)S?>d^gv6u$!&zk^Qk
zTbqpKletx3{vx^iZql`>>)c29N)`2mtD=f<Ys4ru1PFPc?3N><HZ6sBNe%=JJqoRE
z%FwHf4YM=jjV0~Zly*92q?L1qPSG4t@0cYyud+qLnhAga8cA8qXFLnf#sv{x4q){$
zEh}AHR1|H=FMrv5`NWa~pS*v$#d02*AGhW)_cKXy=f)roFnR90d!xZv;`&(PY9Xrq
zl<(LeRcac{K(v3@Q#tIlKdlXWEq96e%#6WJ>w}vz=~uG$0_5n$v3Wz4U}XW4b?wD0
z&T1QRjEhFD-8*g{y@;jWey<yhTmF}x8OoJX(QF;M*EA=PzYEpuHy$;wQ}LNQWu=+~
z(PhM-sdR4marZStSCI>S*UBMI(p#BkK}EnRjk=3*Yf1r|83?g&6_2P-1%g;MvDOhG
zIBb+L7}A)$rGj~3=lyPhC(RtpkYtCI`&_e)*&({~s};}GVK^Qa2qY^h35qxgrtuH(
z35HEEs|jA-lGVF!{;aff)D&b2S~^2O*KLblvujP<>`Dcu^3K4;7b~H*VWX-PQe+d}
zBP3Rt<%^R?4#MF8cNPsk1$koc>3L$wMbwMaH0z<W4XF%!7b%pLAgA;m^-6IO6_#iH
zF14n;WdJ<T0y!pVJ{K`s`yC0T&2*7-6d%|R4`WAVrk~9_?Qmz~u2O%EAy{+xH#*yL
z-l}<nxxjc8!(E=V1jt}8F{>hFf%#SW(m*_VAqa7L(G<%K{uq6iFpti7p`~;;nN%XX
zm-ve=^W$QlG`H9(%`H0Ff@P<Cw{WV|_t&u4ua9+(t7};H@XV*P>$3y@g>V$hc<#@k
zXnZ~(2++er`Gp!ved8`Ufs|ZJ?NQ$?=TWH9LaWrZN8wPe*Y1T^5!h-yvt^ifc2|9E
zz2DRZRo7PRy|A0AD611{t5Eh3$vR?uci#?<hm%_fhu5g5oN|a|g~@3NO5N#)xFt?c
zMw`v)F;KUg{K!9b4JzyB_e?sAB(NIFmUq{74|BNF{7vFAMg1B=r>S$<FLdrwzrfW}
z_u?3S#2;C)^0BR0(FZ!nix<&zv^ej!wX6hz9=C_~Q8<%7g!frEjEdZ>zZ6aVIqj(1
zxQ8Fv?B=dg_lAt&9vZ@VMXF&aX>4Nk49rR(j6KWYftWMfQeMv@i{dy$Cl*fz9=b->
zQ;%|_a!HVhGKdKoi3&-D9mDt$P|I=~c)wn2;uxK7Aqudi?^I1h;pDoc0`e>kH~m|J
zt_cXp<XRrgL&H#4-OGB%g>@P+1{}jjlkxvz9hZVJcKPnxv2kscDc??Jd;t~_`tX_0
z7dWnZ_@7gt&?-o{#<#GyXDc=(^?z)n?Tl)^BuMacZo^?BhVzNx(VA{H`PQjBxSDP%
zWrvqaVz{@qlw+;cW(4mX3{4lUwntXdm1l~Q?kkZ=T^zJkrJ)XU>oT$k)5sz)W?Fe#
zI8LhLtPE!leAh}vW?5)RQ;s)gE7Qii*X6^hbpSy?zQ0)TXcXbd*v^tQ?JP!pUa!yV
zm?DOxy)(4bP=L18`M;z!cWSc=mQ|7clH!vZe_ygtFa6Ncv~*jYt8H{8oB>An=LM?$
z%E?WFeR$<o<_dM{F49c9+j(c`G`#QML6`Lkx*@yRdDP=2+yglyU6(yU_AjNzTC6b{
zYNf{l{%zRqUnz-q%0P;hrF;&0CZ=?9yY;g37FD27>p;`O*X?manm4R+?KqgcsU_ZN
z?nEggA_tK@`1%T&h$76K3fXKpPLB65Ipc(RvaTkx<P1AQ?@{Vh4i%ThuJ(T9bn?oq
z@raDAz%ukLp7xb~fpM86`Lk=Tsieuxq7de;wAs~l6dLZ<x?|L)?);Y25zLp8T9WyV
z!=6n=fuae@0YH+I*BB+b$E~2AVw`YQFlT6t$c3-SI~IAcqXw5IAqJuI)(wB<svS4I
zK^*Cwow*FDx}yOD$Ql}KWcU8(u3j(HxPI;1FS+)uzBXdg{H$b#yKAwS{h0L0ZZXk~
z&djt^1}pqE?$qkeyq6L}UaCfS_vNWBEV_n%+n~Eye`9EJg{ntzr%~0eG0wTm=%1en
z<GUkD*hmp|kxK_%_f&twdZ*FVPkFj-2Vt8zJ&;oG?X+vZcP1~_DrJJ|fG?{w2j((I
zH=W#1QG?vNTv4sGB2vBF_ZQ`W0A(q5k1qG&A=!x=vB9~l$AaQqU#GM(kURwWjv(vK
z(O1AI=a^f&<b>C*K!l^5B4>R6Z8E^T<DA^f00aQ$a=@_4FIA@T!kOUP#fUx5UQ?n|
zW*Qz-3UIQMbLRR<DNzDEc}q|EQwXI>=L|kOs2=6YL8eRNn4|8BQ+>N=xuLk8=QI-g
z=E_Ta-v$!>&vfwe^($u*3<&5KZXXN~W&3F4e)cG9e0C%TOy-<>_qR@UL>B5Ks~iA;
z4QFfrwpEo(FekqPK2Xi7b=9HNz2B+Sy<b=A!q3`^|6PL9#+@&{bI<Hr0Q@2l6KgV(
z;5|7;YfNg1(HZt}=(L|k?#h?V%w|9~kX0JQ&k0|i-pcLAnVb3b6{Ne}Y*2L?`&IA^
z97#CJ%wa8JD6uT@h4u^jN4Pb|!wKmzy-dE@v4Kt%?VxbEGd6qGF|vhRIov-+^01qq
z&b>g8^#8E)KBL7TTZT|MFo-z~Vy>3gQLOC`YoEJ23Z-Mw0YQxE<&aKNFKTINPT__z
z?*gWzCnqBpO&R0Gk*_lAFa6-io*pfne+c*5U*aZ*?XZUBzTCR#<VH(;d0gP&Hk;*1
zA;-7b(4eo6bMN{@W#K+IGF0(P`Z3LM>h`tcp85yp(8KXLc10_G+*%~p?x}()z?|;e
zZt|^?U)^>%wUcET(dbA3V4>}17F#=T)VTvkW|+w6%o~oohG0N;k?VYI7)*zDkEDYd
z>>5jr8jQ}ydl-ymb&i?Gwcc7^{mG2R9m6oAaO+Fw88O+8%AS?b7C>iI+F?5E)zq69
zgoqIuBJD7QmS#9MlftgTr-A8D+<f*;%FKK2M*Wm2GDfR7XM=^v)u8}~?8&hCoaE~M
zJDgqjHmSwzbr6m_GEg-FfE)*1-0T{U<uBsPYTd^A>Po?B9=LbxQ;y}ed1-ft`<PMF
z|B*EpYedtMiJ%mhE77T<lX_{HvYNYgH_yKH)iwEx$f<MxiV^y|Pgh;9JJoA=hu4qJ
zI{aSf$d_D~>J$^o>e(8<<c}JWl-ft*jygLHK8xI%L^g>es)*n%g-SQ9iV8Rp-lp(f
z6e;R_Q6+tqO1i{bF(S+^%}|H|LD=7xC5w}fb#^7O_I^h57@^3e%^-h0<H{f7PhlIK
z;3Y1CEa2&_Uyst0x867BCzomlxrCbG0P14fq5P#P!Kd8{#Z_jsJz333(|A=*qh#%v
zc@7^$54CIFu57Lq3ua`Kp-J7E@MfRZI<D)hoqb6Fx5hrgw0{(du_H4yMPZQViCz6x
z(eVbbs0_om>w#kvOs!wfW7-v$(dE+g1;N#~xUB5TU=!{0TuV4@P0~zTW8T65snE99
zZfCD{vC1N5xBWM2Ex)pxh!N>JG_*ZvDf}%7vf{jBDb&)!RGu8<-lc4e?9)ZRULs$f
z-s0v^5rpd$Vd$ircg3itl2)pmbLxMJ%x%BqG_V*ptz*1umfEk*Tit9s2W%zli+Pk+
z$O6%%nnUDxDAIq1zbpJdg&swMzxZ37<0hA7<+8Mg<GIANX|O1}G}1R)%v>LtJ$cc#
zeH)cj|0~=_cU8L)87%jye!eFRT#O9HtZx47QqWU%++XPNeiF7d(8ffB_;H+y*(QJA
zApbzI?|6cIq^og77}m3SP(-i0$Dt?r0tkBg2~)wC_dQw(;M!k_TFNh=R8qp&xwvQ-
zd|XHQXQsAjI2jmLQk-dWcqjw-F<pcFS}Dn^1P}6CY8*qUI)+j@Uz*q(rK&DfDqzl)
zqEZX|Dok6F|4ZsZ3DGXOSp1lZ=saS7iyz1k=+CJ<i*jUXYpkTdrmE;Fj4}!h6v+p_
zpfWypR8j^%<A&1C?4Qz4Ao)dgG!gChL#kQi!D<Qwve31DKowyu!Vk|Di=v*g$QOJW
z=Bo-gBKr?22|$<@AxBgCuc!$5j~C1kEo8+fs$e3*yR+~=aF4LiXc_q*1>Ij7?EIIJ
z+8{S!dNGGDT`SB0_a2^kmW4Y9d#P-`oGHlvte+2?hh_1KicNOa@46fpui;=&V~_cc
z%ChQ<QjMEgwfDk*IDGopeIYPK!k;@asa%T8bA=m{k48ID1F@pgXj#HaSE1>-pUQJm
zGNH;7l^9fC$P*CRPCsnL@RA?lY;WLV=_;H*nQ8u@+!rE3x7}7OZ>e3MQasXgjSW31
zXBy3LMAE9q!m2BL11_&>GX!Z`LpqNIIt<FBaWio?4zPy<gsn#$wly5h1!vomNZg3S
zO%TPJD@It|iy%YQifl7-T%!m$WmL*h$MC6{d<>lA2kL0$Xxfou<i}c$k-8$C#XMG@
z>j{qY6Ms0)`+bd5HOn!Fc?ZUhn4m|$C&t0y;d?~DPV`U`@__mmA){Rc;lzRu3t@Aa
z9V{jk?u!Mmj@MTci~d=j1&hF{M*l`Ml&rvU$0g<B1ZK~A7MFeN2p8udEb~~GKZhTx
z;vy;oT``3pTyZcu;PhjI;#@4NE`P&c+=RWjei!}=Eo0kAEgA>8jSCm%lyqAIeirtB
zge`+w98$zt(m9AA7u|1!NoS%2X=ma6E?`f;<@9xbM8St?kX4W6Kf?6D=hyg+K(C><
zLS>FoF9M`PLFQIGySmP^zsWBBOTbZgI)9JRS1NG>8D{g&QsH;;2>C2JQw9Kd9S;8X
z*_Re!(31ndY&$BzyXs-u3-m&O7j<M|Bn>%K%~K5FEqXyOk5=m#)z7jWyeqCCr=vcy
z$R8+%cPXymJ-9&~Fc-EO(m?GT?4q}S3WEcg82@!m(Q)SpMnIV5_j>l^;2Y=O?x>c|
z^t?oS(Jmu<>C0Z+&<|!oMW@CVnXfFRJ4ZLNvFXWN99ON!M@NMtJ(Gi3LC^c%Uv_x0
z*x=sSTsYs{6O6{4IgS9aK|lX{e+712Iuo-&Qg2{~8{B#uJg(qmt@V}Gn-(_it$J^{
zYC@^4@BMX=F3jrIyML1aSCXz0aZR4alz<r?9Wa?5tcA=O6QMyy2`A#EBm`9;2l%X*
zXoSG2@oz~ipg?eeBoa`NbAh4>P!bYOCxs#z7|VJ+&vgcL5QE>RBC+Y!2%9l2;#q<#
z2><yvb?gqpo&>?iK<w~<#^>wAn>Fu~`ai)zjtrnzy1a(H#4W-!17TcCF*~4(;8Ic^
z!GBt|KxY0e2r2UnxO;c%kH*u=HFydK+}fThfZlm+QVYZy;9z1uo-KH4i;k&{c1=w)
z!<k}+?ZS@-{~IK=bjO8adke(NGHWtblgTHK4k9y{3Butlu{9sHIUJz~INCr=q3F$!
zDjFlCRO9>85tN;taw>UjhS>n{l}zM+xvBBlc{6ncoUun8&R4@Ut6OH(E$8x<F}#81
zE!XhC_?A;3QEMhq>uwUIiNpd!52y5?p*?^3g7=0`*qu644A#-ln5UuCE6<#p`5=OS
zTD>x7r#oIR1#N`_9hk^G#&fxL&%367E~kI(pSPxe>R(G`X<(naOP7|2TQpv@TQpy=
zgGIQp4-fG|y~&rV{4RYMlRd9b_FTCx>jq)HL1^YkPPaBjAuQHmjiWW#h)BEF;*Oo2
zq1BU_EV+?k7yA#R2Njd>vuN6%yUb$0v)6%SpD?ErGg$advQDt0-jswRsyQWcJUcub
zNf)#VCG<@q5cG%h;wuL=*&Y^J)yL$|(tA-lGo5+;4DU#->YYe(X8lkQT_@xT{1Ig6
z|7(38#Z@u<h$xSkg(|A5{23e`pQs3`-eipmD1hQuWW}l1a2ehO*t<p@6#;{}MFtwU
zo5-F<cJ2-x2k~K4^bPEG5C@QbMtFMMQ23Eyh{#WH-25aM<rg{8p9IqhCeH!T_yN;)
z^j3FY<=Vlp)bY&Z>R6y(u%hNnj)96GVmKU|zeOdGg{G0C1GSb2>lY%|;*q^ZwYyER
z@@vdD3SV73?#fE|ikjO7+GY}G<~Fq3Cd3sj)?M8dM6@;Fv%Byk%+e!=fe9<7_F@(s
zfmD&B^+7mi&Ll)WfskkQ%GW{zew8}|lZV)q{6ZkRO5{*i;zNl27bsGyMGZwUEPzRM
z=a}ps4w{*3vd7&2vvwg|b$B>G@Z-ZneeE2t9l^B@F(%Lrj@;~~K0&;VYUv(?RLzI0
zDusup8$f-=;rF%2i>^RKXrjPBV2EKhg9ZK#>Au*7|HeA(d7jSh0R{6Q{IJT=1Lb)d
zr#U+L2T8%%y?O`Y0xgF@Qd(QrI{cegZnxtI&-F5xRYN%&gwV32OZ{D!y6O_8xdXPP
zx@`9y4beIY6oGYfv?ZY3h%+?~^*PJzyeOlb^#DkXfe<9)gMd<V+Hz}!M}8oU71Gp*
zn=4?48T9)i*Woe2n_WerEgL&y2l$aA!L-2@9GaX4yFterY8~Y}0Ef>iy2=Q5t5UF$
zqD20T2wQC~9pK3I=pwj!$yu`sUvp&PWE4H{LiRZrtm1SY#JdtPokv<wgPUU(1RUo|
zz=p>V!6}l4@A>vA@K)#PI$re7gG&%7%A)t}>f0U$)*+{BWKZCk_%L{mD+Z!O9n~c~
zIu?}^gPp?f<Oub5Di0XBbZFtFL-~>J?>*PVQfe^9uv2rpc^e^bLgG)l<2n5x%5#u%
zzEyAH+g@7zf?Iy89?cv@+Vm1m&qe$BS<(f3&xrN&XbuxmI@zu(-@j7n=_TM7yHfKp
z1B%1gr&Xu*n9`Z`xg>=YjFYolrjC&(pi7I;NT@efC|qVvHf=?(c{0elGOg8=X~Q+<
zD<mtB%DuuzmEJh4l#5Z@<tB7wba21KLrr_ebu=x|JKZggP>HAKo6mAXr&*>auqm5m
ze&NY{2b{M(#ANNo)-hscL_KE4#GvTqC<oV9fb-?>8uf>Q^t76xYiwpWbPLl_*x0*?
zUeB<JNp-`<?>o(cyp}`_Vukh3-K(`)aii!dL5z$wivuGzAQNSpCL;V?T-3mLNzdcl
z1SbZNu(2q`akIQcp3ndi5e*EH00Bg{gf89)r`>GQesTgdnLTu>-Dq=D$4gK8qlpo}
z!zWcF!5c_}6&Z=ATto<HJg=R=fQI-X!~YH3wZ^_}L$2iw$TjRI^kuphy)y_xMd7Ms
zCfEw$s*JOf!bs3t5si+`gcJy_I?g5?)tTeriP*ZSv||U&J0l%o4<1D|WfI=vgs&MF
z{k~Icz>2SgoN8u8f7IuO!0_GVej(%JsgLX!`yXc<Ce-X9<sLHWjEC0;ekQNqa%zDY
z2FXiL(RJf6(Az7PmWn~nivs!j?U<o0Q-}9D?@@#O$>p%ez|`t$Vq17-$iB{*WjPL1
zTSrtoc@8^SHaOyHcg>kxdJQ6>x+jfoH{7++Z$cDeO&NO;t5=2(-7G~68x?K82*OG~
zUZ-9lzjo{OqvISn_>*AkLib(_l+)H^CuWGhxC!y6A%K;g#?1rijePIw-e8@G5P1KI
zwOU)AwX$3h(1G|WTK#a9+1Bjcu>WrUF6qC!8ZF;lJz2t+r|>0Myju?+kHUBB`@`X!
zJ|p^E;^+PE=<_LkF6fhLA3vtgC-e!m%V-Jhm&@hTKK%>NEEpcFYvA*To`u7-+$Wwj
zkMPTPXnhYq6r_iCN7x|xMC`Xa8hO^G^qL1LVGbn^fDH)pTm&oR_(-02??Yb^%kl1a
z_lMBrI?B`DC-k%I$$p{yVXZt#lRl~-G0QnrKB`q36^}iOoYc#-Prj}_M0BAVxGVdY
zLlrjBH4pBy&mpjr!1oi!gr!fKJ*6<W99S%>{jS-YS^M;1^IB=Xqsm9kOU=qB=+~U}
z7Rm?@PtvG<01petxXOd<+#K)YNB5sRZ9K3(?Rxb@A3u786HQ4u2=5|`1CBffF)ZZ8
zNIXvw+-Ch|4bmyP7{i``y_!>miHo6nB8buJw(vxN+v7L0h&&dwHv~!^G=|r~9OU<w
z%bzw5g&^lyK;vjc3+q7f;VM+&@K6U3&(p<cHNILQJ4cK|wdrKw3AqO9V0FX#h2CxD
zV47aPmUU_ehrwoZFxpa1QJbR^)%<EZ_FcKLj_UP;B3<WUgj);ElZ~gdx4X`cjx4%G
zqo4X+wx-znf8_lMd)r2`Fbe+_i6=(^!lq2hOB_%Tua{(!87od~Cz%P&$peCrgqQ+o
z0JJPi{O`A_daK4lNzTms-sk&fu?V2o>gww1T33;=_xk)a4iXO2GD53_#23p5h5r$p
zCq%9(kb!sGOQ?0!)3ycN#^Yy9RGTIB4>IOio2ro)%$4o>dGszZHzBQ!RhrW>^8IGF
zZY!K`syd^PJH6cCzRaTA<&k$KkFg+emRQ&U*=CfyL5t$-SqKbBLII`4kob;oU=20T
zlxilXz#B#G#%BPg=~;zL3!3tlq8Lcd#^{iL&h#eruB1C!fWux#o>vZ5|6BTBRVw*b
zo5B4(^-(&YVx~%?%df5GG(zP?+v~7n2y+y{M8xq6%>e}oCn;J#bZ`3a*}YAj&%YtC
z9Y>LIOQ<_|4RmPY-2&t8gkg#^S0RSC)Ume}udzW&n{q~6vDfV;OsoJ}CCJE0OLid4
zBS(z9L}p3{Jy_t4*viFVESl*bo1J1ee1-v2f#9N3oixey_w$vUA4cIr9w-DHukEr-
z@3Q3m7IVKuR@au;3+oVG<y(D~+S)n_?;lKh#4;W9g3%C91blpO@SqpGt}qUQBzNeM
z3VnIs9E=|I6Xk|T-Sb$8GUBt>dnR?|J0_7@Pe!EiqG)O=!dB=FKdLY__yX8{*`+sn
zgjSF$&WQxvzC3|-&^G6#9gN77H&9+rBh(dq1Gt8)XT5!#C>(H&-LKMWnV_t#HM>g$
zykd_csnk=|SRw~ZW-akGS=Y4KC>y~(qII_MzJP|;cfm@f_UOXNyoQs+KmkVPpNWXF
zz79IUy@%RSQJ>1UTZ_aEvGNummein3ymum*9yJ;}n0{~d5x#yt><P-p|3&yK$^5nz
z_|E{+g&G|lXZdo0R|yS06<?abQ-(ccNbn<%U(+jTcUlQCcLtf%#)1~Mm^R1B$E4`J
zeiGYTOtx&f9-G9Dp&_c1){1B8Vv)eDOb1p<8vcyi&dQUtzyz)UhRNT_3(7qEfePrS
zZ6=*$n^F`bb!uq1_AEbN!I&0gChYP2LP+rNx`6CWuc(&2T}sEKu19Ef24&0ShYZCh
z*0Ih8YEn+O19C4o8tp&)s+e5iy(`G2qcL5^(C!-l3Unl<qB<l8J@kuBkpG1(V|K$L
za_#W9GtFp8?lR3h7@ao5Wor)S6mU#v^*8-FQy~N##_1UQ7bRR&gVDxU(j8P628!LT
z?YK(sIL0U3=#<y+YM-dagZg+0M%CwVD$<-J3VVam5dMQS?Ng`vOG+c#Et`>{(~wkq
zG|!h+x}s3dIdcOF-Rpx6oL|Y}CG#@dmja}ABV`lLy0ZPK%DO3%z2=?QjV>ORSrpc7
zea%#*(eDl8BUT{{*^F#ZF~=i|PoXKsO<TpdI;2>vxY)ft{fm5fjonP-+RboD8f-3W
z^*EiuJ*JvWXHpEY42R?8p;mf~m)cT$9v0K(Osqp0fMIT}JddHq@u9l_%na^In!q{V
zr^mDLVsCGuFa~4R%U@^?5gt<%%=O{WFQLn@9kno;{R&MOu*mN2d_S7!9}*U~8f~R?
zZ4T$@dNwu{D|qt7i2>ya2j!-2TD4`(Zf9y`qg}m}Mkp^`hc}yu^rd!4Ya}40qyD9T
zqYagH3G!BLDfPH@IEA{RjipwOf>qG5!#8kV+p$H<Ml8uXrD0Eh7V&crPA;8l84rx1
zpaW%S!Z<;HS)$^Sssl#7Q|{yh*4v5Nka+3NbegU}+G9+5aMR6~aB}tn=3kW5BWiIn
zs+&MBiFOYoT>?J$PSTGUTuz?HwvX(FKB#!DhfMdtk_6I@Rp2MnX4^%+y$fEc))Dii
z;-%0hE83uw&Xb6n*NgMpimzB`qZ=hzw40e5DV-*}I^t@yNS>&bGw~5okHT_$)uOX1
zlU}4=Dr$op$}>`0e!X}=<n>R*CCE&&I;E^S@MPdol!CH2r2H_%i$;Xv^_tu2tK@xn
zg)aU<-Pxa~rlh#RvIPBXDS{^&{@Q5JWYMWgZ1^dHqx+QWcUX1^m!k4C5j^Lz_F-&u
zWBH+_+ywh=`{1IX^$b7C>I*k`I7C&jm8>SygsI^9=w2Z^b2!4}huW(*mu}qRsyaho
zCg73+jAt#QI5`f*e3ZC2<TiXm9&*-8SbxD5MK5)9IoC_(b#fy$Jn0IgDba3XFFsWI
zHVI!%VRI)_C=PR5Mir%!trfI4JIj<dF}y3`q-n=zH#0e0+uQ;p@~I0!%ZjuI<m|*x
z1*Eo5&5Yd*$9T1AI*#@(FL`4`BU1o%_OE6K_bbZ8sgCVjy3yx#H+mLb)#BDILLj(w
zt`W>r)4vYyhNMX+;hJ7UU|&2O`nM4U!|}qBEE@Y7ua!<)THwTj)oY^pF?KA#(zsa`
z+^wu_^UyH*G|A5sSV(2m(O~Rf$`mM;*sJVC`q5+wU?+~=kj;~#J)h2Y?7Atr4)TY!
zed~08lgSQxWNhRVX}jtPN*03C76nsF1>86c?FV4}kTVh1?f?Sq7!tKQhD3aW*}-wD
zQ#w1VE37d=f{Y=WlWtHr1txXCYuq*G{oTl=Kh~L8YCFoviuhT)O<=_GCrDifnQs!3
z&>-;KB6D(*W2*Mhx+y~2dvgE9vMrwYs_@Ry4tp9<wVtnu-PY4)oYm#1P9vgf<P^`i
zPU{9d7rY2u8p4yvc|{?*dL+o$f+<vk+*>iC3R-Qmz|sUzQQbbg%GfTqjE;=^<(B+|
zN$Gl*ozj(ROe!OE^rNEvQkjHB+odu=I!Twx!fc^bW+zKqvy<IKE$l_A`?%&eCp75i
zXSAT?OZt>*ImB8+c;A$6z~MYPV?1Wz2v%f7X?DkCz)Tmouzo6Zu9Zo)A@$6i<<NW<
z27-OO#z+_OyWGbkAU`>QBl;&!sx64!xJ_u8VJxjjyKIJ1Wqf_zeEBcyIl4pkZ+1Vy
zhT7Ys4HSkc+f>^8H0=V~SlRYrmZ6BGy`$uTk6Aa^Yij9ew85jOfQzxYc-KH{f_Li!
zN(#L=zu7g6SSn~x9wq~tk?E&;dylsuflQ(Vfyt3&@s=V=7`~||Lo-IEq}3j0p~@lh
zPiRi36H%n?N_s4!$Eg$oaBjY~z8y2ex_KG2;Zj-8(8I(2w&Gnjv!Z>{9H5qB!hU-s
z!SGdB&sxk}{DK!nq-m`KlAEB*dwXl-Txyqu7<Eaw;nf_01Si@O`sB@vun%&9b_AMZ
z3ku6s^LupXNjs*HcDxD2DY=pdC1S7_DudPkN#dS$bAq-*O}Sr4%Kf5FxsAZL2z5>l
z;8W3T1|TVY=OqHi`scrdk_`{XtHXBOQ&QfQmhvuJ>0LQpp~-AFDO{mgc~1F4j%9#k
ze6_%V0Gh#XQiL4?JyFW2Lu*W2kgkd1Bl}nYl~mTCxKI^@37w2(NT7Jgnjk$^DrwYU
z9|;%zK4R@i?N+KHfcE!C{@US1xZHUuxvk0k23|{ZS5h|dDLk2c9Sp@;xKNRN7jj@P
zb>Lk%QJ+K<r(*7Nb333T!9wfl76gzd08dH6uCL!m;+!+4PLLuMV^n;AUWrg1sW}cL
zJSOK8`6EcpsHj|UJ~7~t;2L-*lhK1<==Y!Of7GBFocV!)v}{SJ;%9wbVE`3;@jkRy
zJY4kM<vuEM<LY&~K*hlO2`%rybLWb+FAoU=0*xU3dKnnf<&i;xy}kE%#;Fpz(vfVQ
zTEgz!;e@;ICChdinvuv(8x8q`Pl&OnhcAKQ#&{|7eaQuq4CC~Wu_E<wsF*I&K`WDv
z>PbX;$+>vx3tdK@TcP(dJoWFzWSJl@IBo&*F?DM6dU7t8p`Oai!6$^Hh2SRynfNXI
z&_AQ?H>7!>neH-L$?g71Tp0Ss=-7p#W3R%C29x?Re5IJwkAwt=zwPaPl$dh#0e`|+
z4lnyJ@uyl9bn?V;epKT;7<>vo+EE_(jPzZ&r0+tKKIG%N_>GCj0q$K6wDg_OMgi3T
zoGuyO2V00p#=VG2`GM2cWozXRy0B2L`|m=z9s1t+1hzpydtu;x=#L%@zV^o_yz)C$
zdE>6e-kwTGBK7hgNC|(b^d`S)r3yfGgQ#QgiB*1jx=cLhs)pF!6Yp;<I8T;%r-Mx)
z<_4JP#KWIFb-p-KEp`LmBIN5hYj|pLr4`^e_*$CIn!w%X$^_0D>xMk`z42M>vai11
z5o7c7M2Sh`h?m>{rkI->W~x|=Id~-_wl(C)bqNIE#D@q2r<tID-W5NjdcoBva!(0H
zLsZaxe4Ty*#x3a0DT>wr6O*AQ@{$bo-HNhE&>O8j?!fkg<LZCr^LbA+{FMLa<RSjI
zy`h1+JO)`_c>$To3}Uj8F<ra?gs=C4ZDEAE`j{Gh-^c$v#(Zz|d~uc{KP6gD>flP{
z9<<rqz7}#f%QMlwA3abXjLOlHAfW&{fV(EF)d}pRpl1w;_JVl=xRQvSy&yV4E63nU
z*&qeIFTd=ywkW#?=0T1R7YgBmu^Z}xRWM?X+AvC4{8iiJ+RE3VgH&T@kCuaIO>fWu
zkeQdeXsvzG`uXJFt|4$^6@@{*CU=Mqz!kd#C8|XOMG|?dQ9f18-EE-TYnicD3UARP
zzXe@eL~$4|paqb1T;`*weQO76(|y0S5&oTM$NMO}`Uv=T84Ne#G-?aUHa(Ak#9-u`
zOa9##zisiizl*MzM0gmucVuD+-$pOCRcJam!>!r#JG82o+qJ6S=Oqk?%v4CRx?T5Y
zOW#fO>&Q;KXQDM~Y}#!iQ3gpP7rjA1N}slQr{Cdd%#81I*5Dd*?fX2=^|;gzX7W_v
zO*ug!ramJxE3-5xVq-g7Hs$~D3^=!xJKWNZbGe1?tyOt;hmhg_jX7HhbiQ2zo!=e;
zD?oRQwz6&Ul$Y*jNnxs15xbg^3cqM>;Dv9V&{D_G!h#25gzs{%-Xvc)Q9zAmobK>j
zEk-pUJYCo>wvp-GvH@G(wxRAAw;h5i%|-N5|8cA8sxXgUF3Db7dROKNhDU~Fg<nPC
zX#@u^*+hHO%V_2jYc~MsW#r#z&#8Wsx<cFJB2ouvQ5I-92$I$1rH79KFzzS9xGl0!
zsEejoFzRe!ge13YM2abyP57=dU4ypjvLV)!gl6ztq>d9otXqKQ;Zo8eh|LJLMhT`O
z6fFW;yx3|rj1e1d;kPKgF0~o)Nt!Gd+Sm}K@Q78~*pSX;R0QczD&~bUTcDSKNa%D{
ze~qUe#)-DZKxmDC!L$t*BPz;E9?-EUDrf*X8!4#Aq|$OQwP$XSrPQ1aLm~?3y-Xrw
zZew4BwP)9qXj^;dx!W8*hwdY9?2Z=EO)C=xKz&tq;Mr8$xvSu}E=`9)3X6dTg$c-H
zfpWktP-GU7+uG9;T6q@3nEKr;<Q9oU9nYjVKn_6zie)@;uxlUjXsmJqnT96Kb{RBk
zC{{!ELE@W)<Q6_QafNxieNk^*Gj5VYflZWJUe8QMzEZh7GH6T%;-F2WeCA9X6H=+>
zJ81@8WHH(hew+D)G@yBc9->8MqB=>QfgB!r#>C9T#~bUYI8IJJnY1fHL+Q)INT!a1
zpGT2N9+&NZJe2y#LDlYgOJ$B!CdPh8AwCKW>SeQhRr`$)D24BDGsZ>R*+Yz5mr&H9
zf;3?mqc}Esz+Sz1ArseOk|RBV$)F6%jSNxD=%@^o<J%Yj;i^6KYju`nj^;-1XFAr3
z%~%#;qs~xPrAuLqJuh*I0EGr$q;N+>KIclMOP9V=l2lSM3p_pi)+^Lmt^p_#(Ib4{
zF@`KyjrgindpFLBfjzCzZ<_fJDg&FgEJ;k@C$rdi=aG-OTqX@os!X{|LY$5j)qV};
zpoNhKHttb{p@TXUw3T$k;Fl~-=ex9(jgt(0^H8z+PjP8}|4W~2iQ1j=aI++9(>zbD
z8R6$qDc?!5Cuyb00VXF+SPB=Ry*(Sm!iiDVX?37)ziO&Sq0G}a_!v=?N%{6rXYK3r
z*Z(@ActtCx?7y(A(kpz7HgFR_4gl@m`QFes0WYh)M=~W+rmItXFKf5qZ{gF5G3GT*
zCkzo8<#QGpgQYeCMoDH%lEuX4Bifp&mSrsM+b5Nan~XVXNs)2AB=tGUudfx6Jfxqf
zdo7gJ2dV`%%@whKsBb{K(*C|B5pE8+T5KpZwvNPogpp%QSeA{IKTr%Xi{A#j(S?EO
z25vzcbQtdjC&MTPXWCj5-!%_VzEk`yEGp+5DtAlBG(ITQk)|Of#+gkhDa#vquu2@c
zz!@s5!5274CCmvv2M)|cqTcKcAvuy8xLrdccQWJ#l6FHmUL&IrF9aa6Su}QA1|WG2
zAPBLp3AfJnR%z63wYp|-H%_a@=HI@48=KEAydR_RfpxWd$6T#GJEs@$c`O?a(ClxS
ztChS&HaTuOw}iY*aO#xH@W~XU=PX?$FEeS64KH#Q0T2_sm~gff=T{b{4Bhk#V-?x}
z$vQE2f^sz5jHb}J2`8ws!Vt;91gmGs{u^NB-aSv2j7usSF4n1zlM|I?dYXA{QF9V#
z0o#T9sU-b$1*a^N@V9LcNco{&m~QH}()qr^*}K|CV*(-IswfppsY2Wedii4{-zvJc
z-9p-kJcJ5|+U7}oDWgx4P*IcWX)fB5q7{yi<|4v8w*q6vR(2m<U*8`N$@c42G}{;?
zei6A`fMv;KgxtnjVFbbkn`T0PTYvV$p_JS-N=xo5ml0fkj2g+H-rU~ZkOv6AYjE%i
z4Pwc##8}nCUd-^_Txnv|>ziVLTL(*1C8$KLks#YRQLbLM!~JPQF&-xw#aZHjWn3)<
z#6<7J40v>aq~v3<rKf)>!d091_#ct_NaMM)@3<UeXj|wO(^2LC8}OMA;*ItiL~T8y
z_%qZE?G8oete@&rLY|cyiLAb+#<hL5UtVUh#|FD~Vpszue7vW-w6JShFp+!R)S=YC
zodex>Xr`#Oo-b0Z%~3yWB*?Dhx_5QyZx2hw*Ug&W?uM1KZ2IbB7GpZI%cGZ3g?mL)
zP<PGUrEof_t-0=pubSz~MH<~3u#gSRsiBT?J@J|-VZMyrh^}U1ja3RMv!`s{gY3rb
zm7>vTg#X0&kFp`v$W&MqS{W2tHBe}2B0$gi9@SK5iCKgs8#A5*LHE|-QV0JM$`)$v
zqdiv0uy;D2`Nq+IZFOUShN_0})(F2z6vV!M$K32!uABYJsuv{@DjeF9*0yrgvN>a$
zS>`w#ibYtCj}I4(=m{s`0wX4z+_0Ta^maP2+sT-vHsTo6xAg5I7`!wPeAyaxqAQ)t
zjjVRZR;z6aX799xMXBejM82Qd$Q$bdeYzz!?c3fSnTBL?D6A3BSe9gFP|oL#)QE^@
zpA$xfD?^C7)SQ^KHUv!@lvYy~P!4Imo`ZYZZ{FGNU9=Mm-C6}+$C}$Jz16~_h*R(4
zoI+rjPu}e``D%uVo#6AA$IO*Zy=fQZ4|h31FupnzXGwuqVd7nFNUZlC5)iX1%N_G;
z03Uim>lcYnJ=-MN08VXlvZ^XJ3wuN9V35=tgp@=|Uns{2>oO^-r(`c=^1mB2oA8KJ
zfxIH<RX1a?CF+XwIxgHwb&iLNbWpQFs>0AhpQ3cb=|g44einWkVLY@9@hkaQy-w%L
zG&^N}oY<5zO{ytulBq6byX?ty;Wnuc<z_x|y9F82F-p)K(n?oX%Vd^qG7NamRJ}N+
z{|@<`F*~o-Ro-4VNdL&bIk188S-_RMw4yEEZyYRk=WJ3%m$qo!V#^_MV#h6a9WUE<
zi(FNUrIEX<Yk$`8b+l)&!VQaUku=qf>ZZDNwz|ckxH+TNLEn=1-ZE&JZ|bJ|<EABy
z&$mt(AGRTFR6x61XwHAM+5|q0;H3QL9fBb0O;nG5SSfo6dNwkw`dMcJAEHr6)b9Aj
zw8mtTq@f3g(;8iOFx3frRNzhCbL*;Yku5Qz-3?q2l+{u1o>cz$pV2-rIaQAFR`wHl
z`VeN|aqoPjc#fJeaK6B`_82Lw7I{e;>6Vf4d4ZP--5#?Ay&R0(;uO;ny-0DTo=0Kk
zJ$Urs8(;hsg`?rY1Mz1Btn3dI>5PEyxjfJ<Q)J^^;`c6As#Cmq>p<M?f`&!-XVmX&
zjX*(X)9!Aif9p`eaM+~LGX0cLnkVygeeLkGwG^yxpzclvt?VEacNTe4W?xo2a%b#B
zJFFp-<+j&-<AptZgIL~p(#pYiBuRP};V7WB9Vj=T@xfBBN=$@gMq8S&pEeGVi6ozp
zfbo|Ia1F^x0t?6W#mXBM_p^!HXd+FKC~jJbe8#BF?-9_dyi68PFX`g@d*od)=(LA7
zw3HH=aA+c5CD~tW0{sM5f1y4p&OTP(N9CDmMXg4#JCtRXdH(LnSrRQeOK98Gw(qnD
zzx$jUM^z+=-fz-s?=rNZu1dUeY)v?SnzUN}YG5FvPk3a0Ozl))qs{D1?)#`U9Q`jh
z%t~^V4GM6-l>*%76yW|W7`79DjJS9O1st>nNowrTFmoDQ^}Dv^s>3AJv3DeJBoYcb
zCTjU6?=rIVMtinv|7gf6y?&RjR%pT8Uh$x_BJKXJY7aWAJ<0Oy5>-%LRUda&?NFdL
zg7qer0i@*!6RkQPa$_U}qNn$$CM`g#QCXyKn2CQh7;QM{VI9MSS(i%c+h$#AL<ACv
z)emj_*@Cda_Yq!@NDMd`1w$W0@|SXbCI{*{L9kCA(38|URW!@VV|XQ`g8^!B@!j<`
z9P_9vNf#nlfnI13Ex|<9hdYK4g(jaAMRd6j3yXif7?tR87^A@wCUQpwH=2gt<_IZ)
zDZ+EiIYxG1$42%X!5}eHY7uZhj4?8s=0Zyuv9zp5EVY@_tOp^K?>_rlmc|I#GECpx
zlEyXr3ygL(O=n>;&1N_9(`qJs$Yx++Qp0GOCoMnpQ0XGE4p3yAYndQisHdpRN(fhi
zY?{x=Cf#T;3(mm9>5Kt{3BP`cJV2~Ak~<WS<%#lZB)+(PGE8-#AfFIc7S`c#oE>U&
z>2W4AZegfVSp3~E>p-R-4TqF2N}ZrF&Wj=`S9wPH86(8i9ql+#?p&ND*$zzv2#H2F
zX$jv!rQuKp?zZLXsRv)72rX-zE-KTa+$<D5dpIr*vvC2F%csSRojAp8+}NcCOt;*q
zqSRYe$VBgAX?4Z6jiqWM4wsEK=8_GUDq-}}o?|>%*yXF5Zu@E@)X4-}e>I)!O*)57
zYOacFxTOJVuPtgXrDRS@%U2VHUy^i-73!cDLLUb~$s3B?hMY`aO`HCIxiLq7b{@yO
zd{1G#$ZtQ!%k?68x;{BciZUF{!k+u8C$QKL8ND;7T6h2j>n~MN3R-@Q3``k5z+&tL
zFY;0{Q)T$r6w<GH8}C<4`15NNUTK};-)><)5BsKb%V~CnJYtI^GfbS`9-47cfqe^y
zyFr{vQU9hzq3mNDA=PN9u`sn*SQ;!W8(2sRpg*yKLPc@l11_&HD*YV(jAmoT8TGRD
z`8+8sOR$_QgQdhqhCro@K&28|bZmK@1*Fp+`a2m~1IOVjtCHPBv&J?jH}cIkrHB$&
z0I2|yS`&}z6}h8;lsAsLLCn*g^~0X%`2zml9Hfi$J9J?u2E)7e_P2X7%c1+l*D((1
zjp7U^e}Db*$9>6~r6-s5DnaeJ@98sY((`)#tl#r{K@TIFSR4CwQMM#^`im*GhCCnC
zGByfZx~((8jO=||GKSBzlp4a)|BGRck{jtE$nydQma&WqC?9)6nTL?BQCJV!*7^P)
zh+S~>GmB+vr_05GvS7(s!{I#?%F4&OUggVe)_Z?p&Q<JfnRX%*uInlDNoFYCs*Ui6
ztS#{Ee`uIL-!ROf&DV9qFke?u{BFzT&b7z2%ml{b;xi>F7&7}reM83~B9A9|kZZ|-
z(vghQaSEJ(3W-K>+hi8dp$*QaN@8#|uLyw~^py%b(tT66sGyImRyfvVFD1f8gpd3V
z6y0M#bu#EfG|IJa&97SO<VxG9DIATd1JP)%pUOm~gAuwcG=~o>Sdw`&;1jzIOiH|@
z1o=jth~jgR#BLW%I^1DIV%b6zi&kWkg)vzoGG~_#9I&8Fur&;Fimz4WBC_w5ZMS0Q
zQ?kH52TZ)a9^#=I@BJDzcoMip3+3J+shAgEw-p;3+X)%EaHUo&+S^-6w-Pu=c1wDa
zl-|_Eq>N~T?yWGciL7h1esE6dAVlLOI#83|Y`M3G2NPCpwg*Q_25kxW#8d=uo=H{f
zN+GLfTzRNn=G(hnh?400=)^J&?5C8h1UeqSIjQJ=#m)qL{uTRZ3Nz%HBs1{XhJAwu
zc#UN56N#$RJ{KKLtJ%yZOESIAqa|+jj)PDNH(G8UcTF+5<FFvAk;CvY!6{h8p1Kjb
z%wvsp6hqP0jDD@2n0Js&vFI}K1boHIN;!oDI-1^R6l3oV5C$eYSMoil6*F4;w&4!K
z^EC|aR#e%VG$i|Tx(3kZ#p~khq!I;%O#CP>2r@T2Y+<u^i^)$>P*AA6B3YNo0(P(Y
z7-9aDNT6H8d78aSR=_jA!FjK28H}<>w?DoAOJIRr`Ag>04eB2efKo#nvuDpkRaLCR
zp}>SI=Ay7r-XECAxwMq(Lx>EscpomMdPkhXFSzrHOMHXLD}M`*$CrmgxhI#jQQ@97
z7=@uq0{beAryoqT$V}q+D__ur3i<eckWjLg!F{a8<on(_{6MG4;6eS%F@9;k{Qr^_
zNt~Z%Fh1x46BaFYDAeSR38ZrAOI_-P_$c1N?exP;ya-_!6mf0v{xF2=jQ25o0#gD!
z9#kSinx?_>qm+Q8Sv7hjLH?1TG5AQLI$yjAWj*;?ybgafnQ-v^(VMaVIy}c(1l1qK
zYkzz}js89IeiWwz{U!HdT<T$v*c11u>fmy$VQwTQ&rs;_E&lUI_~8g0^)N)xKVik6
zho`Flr(^$*qY#L}l4O~G;13)ryqkEm!iVAW0m9(SdnUdW@5MibT=?hW5AmB1%{|i_
z_qjv~xQVHezzzNA;NfsMIq}|$rvmEx!9xFp>ScdKYbr<ZPozozJk-tY?b#mR>)xKh
zUcqows1N>@{r=-<FrpSDs{Isx^4=jJfiS(J&W7Tdr8cmx;wSNwGSRpQU#dd*{<p!Y
zzfs6}ff*C&7Y2dTJLE*~5Q_%NJ`oSy!AL>2GIv$lIdijf))Gu(+9m|+2fkT5?XFtV
zgyx5(PidpaCArR(;d+qzaC4X95iu8QU&Q^sfj9-Hi+L`kI(|O*D)z-9jHZ!hunuP8
zBs5R=#U~^ONBGYmyzd`RKlS@FD1R~&_IH0Y8!Y(q0ek*5R`643d@Q0Veb0RZ&;@RE
z3)4?+1ePmi1PZ?34sPNl$h1*0VGerrPUD%+_};%ok~aY6vygI)Fu|WnY7v^uo5k2m
z!@>wljrxpIN=IP^?e=xGerj&RFO8F2#OHBls3(k9#GHbz5J#5C1ejzb#n@j-aG(}^
z1setyQgW&Cxu3yuj}<%c(o;kmh9p*EDWX9t%7M&ZO(oJn#_-e(u~WD8pp^%Bz<GcN
zc<)J@RUfi44>fayE3(#Ch^ecv6zdsYIwsR-rb%z=2k=A@oPkVeWx|xNf+$q2*r^rI
zxMc5dky(tC&HoAaJXm7Ns(0jhG(<70!Y1;YL@<U|bS}US#yyIEfqVzU%@}w9wSaRd
zjg&SS)8C`H+Td$=kCn;HnW!jSXx4z3eo61cTqw8tu)tr?a2ScGA3hK{{*yU-U+r4z
zX+4&C%dW4F59jDbPOTiqiY8#uMTlJ@aen}VJ_%Ksv9zUB4a@N!%cEHi7O#4A&hDzw
z%QknC@dCyq38QKm_5r@bW)zVr!V?_&8Yi(Z60!;hnxlRVDOLB>(WF|Ey-BGM$1d8r
zzU<12E|Jc{kj_*w9g$)>#+=oNh!*6BD~(AR`IZ88waMw^S?NUsn2sdVB^vDMUdPpR
zFvw<MEYy#5km#R<{h1SdkVlCo>o5<HCxL4ba3Z<2{M|^l2{!$E-1PF6LtO%oM4>Ek
zN_bP#+~aHg;sYFba8eI-fLI=nMKN(TSKkj>T=pKg_WlRF3~L?F*xf1fDY<6+@O&md
zumkix`wa)6$J_zOe~b2$^Hn7+AD{`%Jj2wcGd;?GY>_*6Xn5qTwZNGq5MkCOZ%w<D
z(mSlJscmWSVCF`zxMTJEwmPYH?o|1J^?g&cqGs)ptqth1wK7#OrEw#4nZnDaVQcHc
zNDn)0OZ8>T4v;MpQ=|O-b4*3tbyp{HX2SEd7>a0_JF0v;z@d<mNjf{_^O_vUd~m?%
zREKO_nm^aKaC>7_V)P0R+|XIO{(W<=N%sHD)67HhI*SKmYHzo((hVjvZ85E1Ko2_5
z0f0#H0o9DMhoZ<FNu8C*7bt|!weX!7q?!O874jK|P(#XYc_9s&l=zgxZ0x5UP)Nw<
zv_3|Yp}dcB`_#e$CHNNgQWY$)EoZ7ww|+Ymj)f7L55{3Kj(72x-Sv{#EAZf-#=w)(
zpM#lX-C~i!eZU{bA-=tDg(s2SoXfODbfR$AM!4q#NE;k=HmH2foB|^;9LET^t8`i-
zGh9I5eH<8j8pw3-tFZpoeTKWH4NM=2RZX3V9HvGHzs0r|AY&N7@*<VCbXRc%C)Yus
zTRN=9^k$^r<P;=9zuy_Ml5n^lsn;X>I^^#UY%}W3gFsu`FgCejLo;9=OSxxAQqJpZ
zFFVATCin`56sTXArP9k}xRWYBqz~}7@{JwEZoapdxFT@lC8C{m6C((RD?)0Nabx2|
zO%hj>iaPpM8Gc9)7_bnd>gcA*F-ly+(${kJxITzj4+1rCDuiJXmQn&tSQj~oGYcKv
zqoBF_yU-c_kZ#%Xo<BCX%*1JjX13xpTgfb^S=?y@TO-z;K}NeYZ%x%%Q;L2|HJlrB
zu$@$B!db+BQD#qilSbWx*18A0?t!e!V#g>h4CCLqQFrt-ilph#VXwab_os3jWuKny
zUmffabuhQq-Teo9W#~o5U(e(<bxW^lY<7j^3SqbXlEGP)mS@QV^#`T2hTpF7u_vkW
zFG_rM*pDmb=!TJb2xDj`=NQYP%B4%Oy8h*kh8;cMB>BXG6E8#l3PYg*U#}D<eqebk
z785kvq7cSm)!56efj247u;C8#`1TGN36D1vkK4U7Je2=XWLHwZ`clCiq8gCqo(n}|
z;kp^`|DjS0rXue0-`K`c(v<#?_8Cyjf&tjATh<}gjIpF!tC9ASH6XFtfqpmBRAZSw
zThtRtOdQ+B;xLi}qQlN;c2;=u8O6>rtd52gqlp-d#>sBD90PY*X}hr!x!QHOf<Jv3
z@`J2mB>T1&>;7EdZBZjV=ZELtr7$l=b*5`}WmSn%ZZh9Dyd|vl+-2zzOoO$MG5wB#
zhw#~n6~`p5jAG!l=0IK6GVz=^R#IZ!e_c;{eZ4zxQGm{4OsaDwMKo4AwyPRpwqD4r
zF0|U567lRV>SjVXvdmjZmG>HHpWH?#q5Lw}FEzR980kr4q?422WZ$3`%5Wz0x_%Cr
z!=XYkk}r3)9yJxW^~gGaOSC^xy`X;fs{nh2P9nWy)dr}m2{CGoDdR-#*|4jH)-!M2
zYj(y%F%m=Zz|wU?cyHMN+p!I}kranFP9>gDu>2d0`rQ$tft%Y%_fhkC!%W2Bpmw;m
z5gKdj{Fz*a+6Kj5gS*C!kaM#+WxnL&(WW<qF;!0nhG;qwk95IC#G|w|;*qt7Rc$Rp
zwCBM=dPve%hhY?~4k_vpqUrJoo|i|F?{3XpZq2-5jbaC>;<OoaySWUSG_MCu+HAvu
ziuNEo5niXKS$dMjQKphSZk2ZsZBH886z@lBTaA4<PR&EZ+CZmr*mnByT!eZ<w+_|w
zT^^a)cHE{1<uPgKNuxuC_>$6$)LwVHWgOCfrCUn|+<p;bZssEx_wa@)bX~hzt8~i1
zTKE-XCaQf#vzT#cMO;@WCE9*S25F&vUATrm`Z&@-(a=nvZmqk8MnYr*eOcA9?Xh+B
zHP^I}Yn>ie&)r_^2aMsTgjWUGWcZ@14|y5SCuuO9F)2kFONwVb5I&RUS)C;rh^Wn#
zp^h~-39zNUGPiLp>9KjFUMa5!z(e?VSIPfuwQMlZG-P)ur5SOT@2q4STZOcWcdi_f
zZN^3QI-t5#@1TEed{=&7k@GHYKdo{5N}UM&erlNeT%?BOPo<_;>r<Gd)Vxx%%3?MX
zY1gITMh3sh+9QSET16XR614ixD|cj^T+MEKb@-gtnT{gvzE&7x@@AU?_2!n{W=%g3
zZ5`g9;Q=;i4p>;NS!%-R(Xq<Q61Jg&_l~R{P0sr)CQnxVd>&4B{khzm>HpTu8L};(
z%b58s*DKDyE6GF)BA^nY0}=9eL_pSRgw{w&8$Q_Zip5R%z}TVN^Cm1{iZzPv;!!Nv
zKLXf+Q!~86_QlhD5DmYpKL#=VRl*33$sMfQ#vIjR_pp_z3^8;Uz(_0)J!i0PY0cH>
zT0!DosHJsb%d+U2u#$4>HQ0G0|5ohRwuyB!n+o@=>YE)}p(<M+&|u_u;h33B!jYVv
zgqpqcZ^hcVJYW}7$Mlm^qYSLUAP=3bhSBs|*P0A$a;+a}D>RyEBcp7ebYh+q#u>|^
zp<gq&G3Ov%O5{^+uVnsRdC=N%<>*^$isw3KTE@!td)HV;aI$43ujs&$po>@@q9?2_
z&3#~#X+9f!Qr~iv(Vy#U4C#7^5!`&r0FTI*OQTVMW?jjXxtgX-?RJ?Gn?P$1yGb;y
zW?>pc<StB!7Dg~Xfba^%P?_vx)uplNwyZ$YsZ#T9$oqENRcsULmdXK&nqw+Patr7j
zl{UHhT>1RC%RTX&CgL)rCh<;*&NL=ao!sn0UY3Hd$nx%*`Bdl<Q@CIm4DL&oSoUs2
zNkKU6cI_DSM}ul8zt>mjoLGD<w6a6pUuWf6dQy40!tHT=tg06p7@WsmWi~<AQr?|!
zHM8ClXJ|Lk!OOI?-82?TSpti=qkLBsL68nBT;HN+)6TxIwM%%W2Sf0bc^jj3<N5>u
zT|lD0G2Ss}{S7Oc%w}w$dEb6O%K<%N=l#J<und1R_L~4zQ$0_-c67DqmSA8}UMO)-
zAG7{Shb<(`egDohR<=K3zi%M7L5FyN^PyYpI9MP=*^kdhb7|8j$sQ~}lpJcY3VrC1
zS_VTQB@%`>=xD=XbBdqAqngW#zD*M58OO_A513P5Zw<Mpt*MLzU~L5pzy0>Ib=54C
zw_IXw+rsDHWt?Gr?uEu3$(=;bpD%pT*fDO|3%g#{a_iBt*xV^=Ubca_((Xc{eDgZe
z7LIWHrjVzQ9(J3u#n~OQBfeMFVPm|_ByzgEQSEGDI827<JRa!wQK;R)N8!Bcx>vO<
zM+bdmwv?SWuXdpB?lu9X7PqmA4%^nO)~-r%E^7@!RJ9Qzb)@k%k-iLxcE5#V4#qJI
zY`JMR>pw8dNuBOm7lt~UV98wGdP^~O=E%Er-WU!&9EIV?m1ftiU<P-8=C_Zguonlk
zd#Z!Ji75=k>SHI2+waC(Nnv@z{qt6p2ds8fy#OlQ#X%|mK;fK7Dv2Gg_|eb?r;_-W
z*G^_<)9#L>F4|fqVz?Mvo8rb`>vd@-tPd+@WyNS9B9S9Aa%hVl%JPyh9g3!=sFA+v
zn737kt}?zUV6?O%Qtlvxyr^=wW(8FrO$rjJ`_0-<c{KAZ$8kSQw3%DI;54>gwOxej
z`g-M>6SR66lhS_WTUc8ux=r8IW)Y<XZ&mZykTM(_Z;Yuj9E?g>8U4*-mWMgRBqggk
zI^!U3F#eWwe77kT?6SmzzWAd<rYREZNF?s=`9IR@!0A?oyx4AN_1X7N&)yPr2yV;;
zb~u`t4@Y4V*oTC2g`rWZDt@Rx!%tFRJBv3~rkm|d#@IO-w_9m#V<qIaWyiR^T8c^~
zR}6<LGL5-&guJY8ou9a@NfgZ^Y+Rr=i<=-ND$0bu`r0rP=zWJn&%>}mly*|2G%&KF
zKN>5Sq)pEHn+^uWY-1fSvvG9T98Cm-unLu355GcIOj<CFW^G)E6clt;)tB(wYH<~(
z*<dRiO>Jka2v`3&92*NksUWo1`eyirM5)aTwQ*FlS6RP5*49&-j&@*)@bXUBngbTY
z|5R3DopiBQMP;#Vi_)M|ERCJLAhN+g<Zifzn`|;WuwL0{lDrG`jy03Z1{Y>!1f-QU
zD%uw8#>jby-^E}+-Q&%#wO3SSDZ${hja4dUGOFHg+R*8u=n*y|{JRUg#?|TOj!w5}
z>OYU&Y@zxP?M}MgI1igvA#@%ll-Z8l9AhU$n(6yEHYeb2t$tPSMZ$a6gy7s6DJjo7
zmR3J3eOd-68jhOjgIeNX-7<nX5+Kz-OxR0zTz_HNAJLpm)(>f3H%B#xkyDT#l-3&4
zS{qFvwk|DgF2O^w4D<2wuoy3aVy#rK)pR+Ncr=#|AaRl|z0v-|uU7XSW3HO%OdO-h
zh3e4yRmhMT*bnce7_SZ^6V7EN7GXYJq1QL{mcehiTUJ04u;fY$#6R&80Kb#|r=xJL
z?2k|S;U_c)T!rDXKOzJ;IhxCgXMq39*|_q~ti|Y=6A0w2VcwTRjehJ~qO?{j3515_
zN?+pO2cua(qd$6wF2<@jfgHiG6fjfqQkrpMvhrh9pdSx#T}?#1AsQB6UzfhO7RTt%
zO{SGwr0&dg;r5ocdwcvz#4SG6tu-GyH6PB}BMsNXowK0K>JpfroS<`^a^%Bk)}fcG
zz_Kv~l<kr$W7*eRTqt!sVJydE^y2fkoxYPgn6RleW1+}fwPIQl1myZNdAsTCE{2O7
z?guk8a*~c$n48O36r&RZV8e{X<;<JmIJ4HcxtXF&F~(EUZ5pek*uN>3tv-V6Z4`4C
z$h4Ks_{hwy`ZGmoql3pXTVh?7G`2U=DFSMQcH|9b7!@G{!%qPt6Kf)~4C6x+?ho&C
zvhX}yPL_n%Pl8eM4R$;qlt-a-z#2!eIx-@a^~0xICKOpK#ohccTod!IT*8m7JDn^7
zWMP2h(4;NF;$jXj$LsL;C|p?MgTy-qYO+=)*lIWRS0X+F4A@;#)S5LKrs>>Yn7{Z)
z)5<7J4;etxeqZ?qAvl*h#z(k>I#0w({vF`IPg%TT?N;&WFS~G&DElW2%iblqmld1A
zv}N*7fX7)(E}&Ux;|Wi)&a8)6;|I()M^Hy?0`e8XRJ|Vp4W6+lqsUcy85uK_28;u|
zzDAw6BWmrQN$mz>r>=eeO~A~2KU#c1e!%k^k&iX(&$g&NTM4s-U|4l6g`DWt8-#44
z?hg{5t+Q>>19?@ccxLx!;LMX}*g%(iIm<2ruy0lHZ0kvIkJQdY122&vJlT5Cc0o0<
zrioE$w8H24B0WhH6I?%CgfD^4Y)w4S9kSi9qNq|dUYV8l%B-kszmb^ZSp@i=V<wIw
z{gCV+#_vQsdT2XUblTIY5+z|lWTpX0CM%<hiDZ3zZgFo}VD$LCBlpW%y+x{?hLf0t
z(y^RGci2^&(1*CrmwF6W%o@2-^)ZHpx&shc;jSQ9Srz*w@!?8SRGh>xJj6JC0}OA!
zA?2vqv*(CrA8t)F^)+AK4Q%o|K&JDXkf|+;h0%mIk4+`*r`XuKKN8<}WMw5>M~7<<
zS-e6<dn5>n+=MnN3?q^6V@!|BE^tB7X*J_XS}}+;NvBm2>8D=kB%BnhJoZweo6PGX
zYkFH0HE)YT1tYf8l)*#|DxOGph?BZI1i5Lzk=QQdn@(plAtS>Za~_NgZ;3ue`!PY|
zbGT@swU62e6<oFrYE845&pdgz;F&S!Ha>cQZn#&MU0YN~R4-d2s+abHx;wWxuR~}P
zZv*!|-S*11d#u_8W~I^Y0(c*tHdn=%A`dgM@Hx<rU7#Q9R9&XP(k-y$oM+S`i+CS@
zM(zYkcrbQ@7v??*pfGl;LBs6{7E*(JX#*TlSXeMe+`W;q${q*|%CwXcHcTV3zrPP`
z&uVXPi8AYDAA|jvB`J-dK(64ufA_peF#UJ$?c3S)+qe7vSCiiL^xtpq?auo5_LGkZ
zDi-AWcBCozA%nrev9bbAG}!6&r3Zg3SFZOJ3<V?TPkO!J%ifpr0iP+V2eCgMzVZY5
zS9r@l710A`W4EEBfM1?2ff1!3O18w_UT+t=!+_`j4LM5$$i3b!yu9`30i22%P)Q(<
zfg%_g+aioH11&;iar-u{%j0G2<)ReFN5e_1x*3XNU%BH~)5R=2ky{vl`v#vs!Quiw
zf3o<TItSiqOv&sjIpot=B}o#OH%bHA1L|XLpQ>rSriJZ_O+j&KcM70<6}?|~%9w|t
zRnl8=a&`vHN2guisI3k{Ym0FcoXD7VZ&jU1aXbA~)=imo${@*b;7Lm!#cksf$QM4>
z-%#z_xHL@ogNbR?LUw+OnXQP(TT?(;7Ak47PgyJbly#-HNpW$Nhi}BrLixUN9!9O+
zhmp=_J1r?4K`N6fYHU50XX0_gMUb?>`IP$Vs93la3v-yRkej{QV7i3;GR{|+6MMA}
zg-i}?U~=d3;yYL8;T0v2ZO!Jp-VW8O4XPv^kbajIaFKgt-qvkXfsP_nqXZYOqkT9P
z`m122h}VtKya8y27ZwDrV98v>Ud3*_y3b7?)+Uy^oy)%FK~!L(3nYv#rdB>M*BC1b
z*tB&2EImD2Vp>+BwH|ZgLs4k2Cs+}*g@WgkB{|Xgo6DF5g1f{7+TuXiL>?EPbCZkA
zMUHoC!hx-#OjF5NrK;R2)OZaQI&4c-o>yu{o9)S|!B~<bH5&Z|#-)cSJFb}R9@c83
zm8=!smzj!gS|qGx+pfDd+k#^$6|1zqjkMKmO!l_Y!8$q$v+L{l5XOyX9_53Rky7ih
zh6~3M4cJ<)9J`4m5lH*#2i_g^eE~DUxO}-}`Vtl%{WR9PZcKTm$T%fJ;YvQweDcSB
z6-q-O!-`*DlcbESAT$O7^=dH@L<3>GjD0?xmzlCj4@H-(e3BD2NrRg&&HB!?@d~k`
zqn~)VB}T)<|Mx@WRt5ZB3OIpR(p&|4>4#oEfp3`Mq`&ly;7FmfXM~n$P9sW+gD;r^
zeS?r`WKfMS?f+CTTa_M>hB4pUn_Dk>&Hb)bymDp3IB)o`N9d7o{1=gCzHcI;Ao>9J
zmpIC3aRS%0Phm73pJ<`*S$J|ducd;R*x{WhA@R%bY;vYX8pPsB$YAveZvIxXn~9eM
zhbM>UdwUBhLzdg-&?M)s(?;<`oYQ`5UlC|k$uenCyoAysy!3G$TtDNnWd6^tuU{Tz
ziUs#Rg=bI!_}ZhYV*qPQoY}neeDzD3984By_i^_~sR(Mp7L-9#JGbfBCP~dYU{2@{
z2svKlB)srcyftZ0pyRUX$+Uw{ldCO*(%{={E}-kgYe0^Tl_#J>9QhcFcX9Y6R@tD%
zi#U821FU{jf8WsGA7fv<Hou;#Z_nuOQ+V^O`SpkT_D}lz2fTT%-u$Hg{;B@{K!5*)
z62GfA-^JlooS);d9K47H$ye1Qe18EY=gT~PS9`a}<JucazV~Acq`ycpwe^qqtj3P}
zho0ZW0?3R0^aeiRj!%l}lHR?JMO0NqI$u|&{%a^irwwm#8O@U=e}TQjITf21=TThb
zP8G6LSq4vIAtk=Svlyo#oddAcGwkUsDxw%l>KA4_l&e9%m3g^>Z)1@H`8k!vzl9Gc
z%RH*|!#vNIfm)&hN_|}Er=*OdRidBbe3=*eVO^LyaI{|J#UgkPLr#__`1*M)qx<OJ
zQI((T-|H-`^lv4LDfBY}8Oj#_P)(}Wcz6~0vi6p+lJwoR576p*nbcnDrh}gVo=K6M
zywoqCz)v_vxX_)QCsi8Pzby09=F53nU8H4Ff2|Uh*I%z!3%DlL-`W|}zaT0$n<gmK
zU$5|hSV!1O@Fy+-^sm3;4w_>cakvNm09c!yE|aI~89x62pUd}a7;o(*kp%sK4J7)3
z_z2ief5Za4)(|KEX?~8d)IXt=dOoN<->*GCs69WdJwMXVs@K<iZhz2jDJ%W^{W`A_
z{QykNSyZN_e#ZRma{I_?**pFFJkN5oB~{TBKyg;&>(ev+GR;cZ{t00duG=y(4>75O
z)k7+UD)Ir4DGGk4?MwHGV|<1$zazF~SzgISQ*VI8#7SAgw0}@Z>)A((DS@HKT3O%`
zd{FFLwSLqbMC(VawuoSxw0#7M3Z$sD+A4|D_HP^UJzP3}gWJm$5Ygbfcpt$ni6gpF
zy&K?j4|sC*SuHj%p<b~<dO>+9{f-rr>&y$uH>`*vSG<gR#R?(8;wA8zeMXYWKjSm|
z48)Otg-7<$910Fd^h;Jy;~X!i-?3r}8F?x7igzlH6?YZrl?%MI0X%mZ<cY$IsN9dL
z$P~)RGeqE`(fNVD6ux+-7k}35=YVy@&u3nezvuHqO!aE@{H}^SG=Hq(z)^3pyR~EM
zaZuX%-m0a8&Vg{w!>P_cbPq)HG`yyM$JbReCeG68m#m=Sad<)Vk`*+Z4KHY3vVwdb
zUGrnb^*PRq>UVsclI?RwDPQq10zr0$2hYw1Bx3IFKYGQ7Z;xMR^!9a+oa#x=&E%=S
zaFfy(i6WyOGP!g35hRmV?XFSOZggq~DRunSh|<5<>dyX`?33EfyKX0f>-E|V>wqtc
zj3+(jk1xa-r5&qs5_15Be|eGpq>#ar_TWBT^rZY*g3Wy9RfV!0ziO9)|4kYe!?njo
zWGZb8CQ3P7LXB`5p>dzG%Ra-%vDxW5I!&I#$nk^c3Xn96|D{Ej<Qi*5Hs8ncvZ~Er
zrYi9?-q~TVVQ_g7IW>NjH6oj3I=49@2Qn-z_Or6GUMrSanKZwvhFE49##a2kl%ef$
zWvtjkj%X?WYVB>WNLEWE3n3a(!7wNDU~bdLY*^0Um7DW-<tT&Fjqe-%aNcQ5m6lHc
zydRRbY_Lpgtl<5bs680@?iwi-4x*<MSN~OViWaup^9)eRItjZ-N~yG^OU5i+GHvOS
zQ8&CxjT=|Ewiq2W4}e7ETEn-Isy%3IH$&Azeo_7ii-+f`gH(B&5p&{EZY{Ee(X++C
z$JDP8*R{#GWNPb_3Be?wR8{)s1d?<WH=Us)Z&2PyC9MR73gcTKM9>nqUu<}i^4P^U
zN1el)q54HXGX@3<N}J{!R-rciAYUFeeUUaqd9ZJF$s-*Zeq%goQ1!h$%o+}OOD&PZ
z^hd_&ZaEvzUGw?9y~LY~%-VRPHFt5l$!)y9;c0`0*fv$MgEn1OYHgapf7Ns{4AX(s
zQBOK!uZ^wkBB}LaDwG#fVq)tz-NpS>`%Y*Xdujt%ZN4A}f!A=EO2Skh2ugzW^M5m7
z9(to-f}X<n_1Tek2fYI_caom2+kE&L5n~~ea8L1rY2UPfOQ~aQksr&Q)^vxr38(9C
zMYMv$v-Eh9&JLqJL*$TqaSlS8mr2e*B+X%8QJ&Rc`n@y)Xg9&4MMi5i#ohQbIG+<e
zPZ^%*3m%^6Z!uSmoRIG`;shcDPikFFD%!b$PPasS(?9NNZwf?Mvnx_~{8L`)Ksd@4
zwb$d{0cG%}<#nEKx3ExUl;4;WTxM~*hi21ilxHKB*}QaEI6VVj>3eJQO8QL$*;<*w
zUpAqoiFmF(?;Q+jhqo}KWub1i4cx@zJ%p3BI;vHen57_t7@eob#I0~GbO*pkV!A+^
z$|;u0v!wh#&7ZrBxNN5_=imcZ^Q{WDInuNxCj_>%QScEf_{bDoH4A>t3Vv<U9d-py
zEp2uy+UA;PKPjS9YD25E$v>yCzh5L-n99cwX>zg3iwbkmQA6)iAcKprRFCmlf>Pv{
zS-4{TvIrU#5Ruoa(scG2o&c=`nVHX1X5rYg(?s0!YcsX9|DrA5SPlCPk)}Ams53qa
z-S&-<npY`n72kqyH`KIK2Wc*!1IMPq24j0p(!AD|ePz>BsYKGSGj@k+2VJC<QCWKo
zPP8eIm*^>Jll7O-z6H;*mn^^V{5~e*X#&|6I4UGpmPwdnz9YT39Q?jiVGx+K%cLv^
zrE*;MC#X8FzdFLW$kk!i0#aV~2{~gj^|<`xI7p<5Nw;X75s312^~NHfcS6T0!7>%B
zv>JY6gg7y?8+7W!yrmpl&U}&w%_*sN(4U-dk6q8Sf7pc^&BlBdqoI94HpGAP*bF>I
zm%^tm(|P1rRTdbt-N@O-KFWU=cpR#2p=JT)6b7)u3<=ua9wjU+fn9V>#kx>kM(>8r
z*T4u=a&LU!C1weub5)%PnvS{=#?-FW#XafQ=^mpscJ$pm;@{&joOu%DaN*Nut7org
z_<7?r>W*}4{E4wLfn;=8##X`*`&EggPsPeZ6?ik$etfeVUkxUOMGBER2%^%um_tRx
zAwN`XBmqYBDoIK8ZC3_(m%O6%FkFzDzpTrb(9%oCk7T#LCjorTp9Gb_r>6lNiTTqY
z-;hB_9^#ra=S8&crQ4dK=P)14O(XA*6}p+hF7P6qS;5B}C3{`vV&rd}gVWe<qrtaK
zzsK$MS;?l^{;Jh%f2DZRb!d8?%K=G~8T%5317jSo505bk9J>jxaoopNLa>nL_KUi?
z{f0+hRl7nS$c}4yjWe+OL8^CuRjc0-Q^COylZsC!oO8cbxlGc>0tq=ROHz-$;I4sk
z*l77ez8f65)#qs@GhGsNQ_65PE)H=Bdwc1T9;8>NFQr%CAtLo%tWbehF$%@V*H@rj
zuVrjNa!s_qB0-;j--&EV@4B+DYI0uRWt|iZ`~D@X(&Y~sF58xHnR=8AtrFS}8{3-X
zgIX;Xt%X#=I97h{@la+4ly2BfNo9^O#kzH4M$2?9e8OY}@DuH$5_XN3*4bSNI9;5F
zcW{3&1YszJ8!pt~21cY7?m2WOZ;NUO&05M;q3|Wg=sS`bU7!=Ux%=eSX`OTYIWj6l
zwQ9)@>sRUAoo_q4?c~<THQ*52r&?@>;SPY7039@(Ku`#E0@pbTI^b|yYvahj;GkZ)
zr`YYh(+S`CMTI|1euBxR$UiKX-jsh4$;=Oo>oU81;B=9dYfD0%4ho?6hPjc(fs&=+
zaM^5F4%it=8@*4l@8D1OHR$hgi?C51<kn+)r+$#(O-r7C6`g;XI{zv<|1xM%rseFs
zb$7^lv<peaIV}3qb=9L`b@;i$X^*yO@?2Nso|<$6k5fJ-wlF+KuP&qb7SH?=m82;q
zXb^7=nZ!`V{eNAfJX-x=Z69@$`e<!y4mTw`sjT2{A8(-E0T2!!??sFXOA3>50V8Uv
zI|EQynt4CDFDgzfF_e(@SI1C{TJo%q>q;<{NoM5wJGmKM=2Nc6`si}zP_4y>;kQgL
zOI-#TdakCGGU#f%Xu}Atmtt~qlEgr;3_ZvVJ;)pMpy1vx1?JdcvTd70T9(n&0WOL8
zKG}_H>X375X=mvTw01*<GxpU)&CJu-6eODVqKZ_ilgbuzbQs{9^gIF1-MPpxcHb8d
zheN-vhq7hjWfB#-4eV{)TW1pPi{7rj>KDoTby8M8ESAYLnCCo--=Pg{+mHq$V1YWu
zRfR1L!SY>IvT*QVh&pv&jJA#$bCo&c&io+8V`AyFYhhQEVcV>-=tFvnwhJt0@kclq
z^lMGHQES3fhaY3Tc|XR0C_iMYb@fw{q0y8-X^yt7xmq<?CrQ=QGW;Mp!DndB;N6XE
zB4yAt6L%a+pRLRc-@H~Q(LzhjNlN@}wg^=QH~He}dI6_}d51Ma^J{;OKHO3x?=a=R
z;U@2tw98F<LyCBuf!-XBGQs3W8p9rOIessZ)iho7l}x~SDTB~xDyqF!oPi53Vdn%H
z_$SMRM)^9i>@hWa7M0)S@!GiBFsSvzhr?FD=(FuCiQhdz!Mk1zk9ptlD%-*<tL1gF
zh*;o>rZ&bOSNhO%4i)CQq9uwBgN(r+IX>xw37;tt!Bz>VV&ge7DvsNV1kD9q<KkiE
zfEC{i`I>6r`}JaB)xV!SXyP#(Waz?Be}5PbeMdckt?M}a07N<xEdJ2ltPWJ8lE=7q
z9In^byJ;P;MSqk$)NYkrYHE($`Vf&23Rt7vqMR5`;ou>9769pcm7GU#Y#{v@JoGV;
z5C$$t>rBHT<xjS2dW7S+FG^OD&gYgBqyP*@?d0_}6X8Zcpo_j2Plf@_XIvlkfX!`C
z39r;SiCoyj^0Bej?v1q4i?m$PL3^dn@_-%6X#PVA&(b#I`y0E@OlRoi?(M=T;*Oo)
zwJ~kGEP`XR+;*ZiPS^!NqpU-W`+dR7>{n+=*0vf|oz!C5ID$``I`=FGQpsonxhHLD
z+ZobefPmzqs@>ri2^#k{S#Ed7D{!kPk6+q<lkYmOB)hu~;ZZ2$4Dx8mRD4&-2e_Vo
zA7#J-6lDMmACQQ~xM~1I`?IJFTTB33_2Y_lPjt|)jYu-IA}w2rPmLZNPUxQ$CS}zV
z?JR=4{W-7ziHEtPy(S;78SKPz`KZP~W&Gr-hZYJ0Z3NH@<oiu<wIQuNOe^No@<n;$
zEL)Nc^>%i8ieBTK$)cpXzP|VN^*w2@hKH?m$VHw79=Am0+$D(#dRR813h8hN7&RxW
zcF0R*r`M+d5K^<7o?Lo31Qx{vnLEQ2txCrbfdE&Qrtmj(?43o$vwV>}sl1^-0TLR`
zU#FjvuZ-)x{$X99mnGNY^?DRcRn?;qHKr#8p5EK47ltZb`M5d?^Rb`xLwqfOF6QF`
z9VIu`24^@<536z7?_)8O@P$R$oU0)?QBBV(6RT{EGgqP=cKu15J4Rgkx4i~I1L`K^
zQ^z<fqdnqb!;Hgd?mCR-#v4B+gCu=aYQsY-a-8rR9FzQO1IyPKR@PHSoYs@`mke#K
zOW4S0=2Xh;9B5F4H@96?lt*i(_&&ur(%;6IYFkHc*0FlVHfTy}L{j4zBjd({fuDz0
zST#te@l2o@N01xA^#Vou2?lM$sH$j_K*WK3P`8LaBvO55w8yJWyM|ugohuy(ldRRW
ziXQh>xWeqQo#rq=6xvKZ_15~#!H!sB2rUJno;)i!QDddGF4Ob%5=uTr|4ZV#^qc4T
zdcKtJU41(6IK@$zDS>Qp7-CMdNeVy15a=Zy;sNYmDMH=^l<&GYOadsG`06`Up*)Qw
zH7^FTF<;gxfVMUZ4MnY(e1O}W)r~@FN<#BfzQu6$a{+6ZX9d1CK<({mQCGbXeb%(T
z#|2(`c>tM-Bc_y1g@Uh@>u7tM!n*5fd9FzMz`PE4TA(;zuFqQ{82qQOYwMu3)-Xn!
z+GjKp+_eL;_;#R!wxvb7NPeKxh};M!Hx=*-KLB!}1+Yhh5puWvFdDRU3UEuJ0*EIZ
zq}N~EgA-At3`nNve;iUKjF=kdv&vPB=#!0IND-!Tp8uEEZ42;~y@tG2rLYuav5yHk
zj6mFtzO!{PSVkVXOBS?Ew%Q1`ZY&ks!EmU@rE(LoY|Fw(*lkd^M5WcExI*esK7kWP
z9&2v!PVdahV@btgWRFA3L7X_eku|hGme%o=8?rAW9>+S&Q_MWd4awaievkI!WnKbo
zE`8r7O*dJ)Fn_Yi7x@w;s$@iZWcNr5i}(bgu{#taq3z`0=G)4MuksSLw5?#r5CB`K
zA;#L6$RwD`)QyFNBq5;o%Ab5H<w0&B`Ke^Fspxz^EB~uT&id-6Cj`tIg-Jvcc!U8a
z2-nJzVoTERw)`3`0jUVZnkU!xyo>C7Q_B0CS;paTHT~F@NWv8R4mJY4B6M$Q2MTP@
zjncts$YXju<~b)4>&v4)>zt;_Vhl4kNoxUh^!Zt+Kj6-IS<;H@ND&=<D;B|_LYA=V
zzS$8VgT!~M>lQWjP-ZeJBAf(UhMUyUDiOM4KrY{DgYR|8u=r(JPuo$Av$2H<W<p6Y
zzkx9)GX`U(jVEPmv>%N}a2%&Hf{u6Z-*3yW?)f&@pNK=Wicow<B%;1%H~cWnudfT*
zy?NP>MCsfwEd8Tg7FnoLEl`ho0gx57By7wRd${R#i!RzDa3)>Lk3mL>z!WghLzpDK
zouvC{CZoA0e8Qk2G4Zcs<B#JES2?kj*VkoeGo{f8>Am*YP&#d0K)UZ7Mw5)l+Bgo;
ziD!cZQNGaSCh-Jw=FkDDQXU8FMU~^D-H=ign9%j&E0x#x{ANRIi&TYOpXZ3n7wC3s
zlIVFkh01J+dFT7n-hQuN&CnEY(|#RVB{4uxdHFR$ev<>&g#HcWZ!}GXzrMA=&SapU
zv63Ib&oJh9@h{>@`x#|?v|{PW7PJ?H@7kYK^J16FB>XM*s;-dZ<o}B7nsyjZq;D|b
zm8akYPw8pqU2Q}n-DT+{L+%E+%`2R5y76UKCWPY}y3Hx=`E&FM44A$3S#qAd!34CK
z{ry>yr<pZ@v3<dieN2+~!IfOSzq5R9ijpEFq2ofL(-tAohmys`)iLY?{q;Q>e(36#
zrK@S4zABA_pCg?)N4-#@Ad0eg5;6RgN^l?3Ym{E=A{1&qv490WV0&!t6Q$zxC#voD
z<Ry#Qb~F9zgAp+P=uM&TMO3_dgFV!Qjb`$4#=In;uGhn-9#V7wD|$Jg057n8$ZkbW
zyZ*Pk8hV^V<Ike_ENKmCX)QI-UsxMj(Az~4=S3u?8}i&+19^N7ZvmlBOH=x@)sakc
z1&f22V+}pBUGqX|_ffkhk>@aJC?0`{#r#q-fwMJTmEODUvtciY1|-@z1k)+++BQ&2
zse3Yt%iJi&xM}hhh{-mb1h3}fjb05(CcJCs<pu)(IU`#p9fezlSFBjLW9%Js1t!wu
zwi)p_Z;g1In;@IYQWl+7;mCXybHi%kH8>see<KFOqTe*1kt+g!5&kTnf#wj6%_;J_
zPg#z%^m8Rc?yl+~ca6D-lvH|*y1gpH9})^D<~geV-%4@C)~KDpu>wTMFUru<u@rQ$
z7Z%lp$8NC!T2vem6K6-Tz$`laijK3Q0;*6@2R96maKfpuFef~EiVbYSf~9nYDKQ0|
z_#-XPCa#7PJi`f)(NfC>#i$3qU?D45<O!gJ$m0+t^sah)`|<gJluF5B2Y(Zb3L{qG
zn|i?&lH^kWX|{Mq;ktVNbN}FR{P^G@Mi^-}0Ndg=ZOrEn;Xe-^^k~IDmf<LQAl{W>
z&-16Vt4&Y5xa|S?5@jq`5%Q4F$gwVf%eD$pRR-@$aUOkq9Y@*oR32r)$5H@OzetK>
z9B1&l+)%`ZAItjQ=(WHD3chJA*fMW^O21~OG#bH%DxPMtnEY4<Z>)8$N+Ypfs9>)|
zj&%|i`2egcYB6CBNPuhQ;jJ!>KdEd*=h)M-#rmvy3sa<R({7N~v^?CctVxL`kBJew
zkOQG>8ukK1)bhCd^v$#(XVOA3vsQ}94BR5_{}6{inFABfXe1t(Pr1OfrSydQ^F|RU
zA<F<kwHO5_PqQ)J)?vl(N6MPIQKdhUBk;$u3{|QlRTTRSA-&j`U-~xkMJZ`=*+G+k
zreq;rPWJ5>`0GQuXx%Ny39)0C6r2g+|FbfjJ}rUx&Mek`Tbeu}x6TVY;SZ?MQJUiy
zimif<W`vJ_G$n`sEM29Ux^JLb<M)X2j-hNW;BvZJ_6v9#;dL1)sFRNYC9fubiIm%s
z)RBbR#s3}vSBTwUb~PRGBAXU)4V!T}n&q3HcgP?AD7k;QC$HvkwX`*VY7viqW(XX(
z2%%=FM&YinfyAMHNmIe=YaoM>45UD;g^~~bkYzGNf)9K~JTAv&sPla4NENUm^5!iv
zkrKpKdwc56O_ydB_65LUgXd;P!%1}%F0~`UA?C#jsw4Y?@?{wV)IYWCq@)ypsg+&U
z9hIcxj4^hH1xuvZ<arJp5}NkmE#AHnRe$6Y6Q$Q)iWy2YzAACm0l+ZaR)NS$c`s2`
z^}&b?zyq3FA099syWH@|BFF%$FvcSsk|hIxPGTMo#X200cbC#tUQ)2Vz4c+3j&+{1
zrOx_;N!Pt~KRh<x9C|!x3by_#6DK(0$uKxJ8eQ>;Ug;O8v^m)gKVibhOh@OnAUK|$
z$h<|n-WkFnckyA-KM^W+&29+P3JRVPq(Xw!yx$*FYDc-%<_dIIbT$Pm0hBC|aKnZG
zV(_Ow+6Z;r1!qS`P_2Z2H{&^GNzIPxGuErWBtT6})4GY>k+dw`D71)#WS_`e$ZoVh
z%XYNUdD8(eRCp8R)|bPtD&Gj1<x|~OV|H6LHnOpa^J{P(kYp+4SxR@GD<RX8OSy8w
zdtZj=m31&kuPhrZRghjPg(ZfR&?GfWC!-@7wZq<?tU()0d%3|@TxuGmKv&YL%qMcX
zb2D9ZbTeWa1Kr^U{bFI~FZIrke1D~ueaHDUpl^DlI;&sj2-bk~a=@6jPYq{nhO=%R
z&S<k)A)css!xCti#oWXk4wm&8#I?S8TY5MBP_|yre}`jGd8*9Bca%%&`}UH*w7>op
zgLixZ6{kJTtoKBZ^X<Kvu-^s;wXZtTAC;2V2P&h3L9nmD%hfBhkbPJJQ<sUJ3O!73
zOk7`h@5CII<zZ2=f{y2h@9@@KrCDQ`D$XaBdB29+h0HV7(;;~2LxQ$Y@KT4l!*|FF
zQAr(?6JP4P3%qvX^v!1DU(3TU^uY)Z+TrkDB{GqJA`|&VIsLVqi34B!T!#Nb#zXv#
zevD@0U&`sv<t+Sr>HSc`TSg!Lp+sNbm2PG;xHNyK9AOg~2{m6P`xjAxq9s=U?{(4H
z%uV^$lJ971NPA(pS)p<qu}mAXv3=fHX%cRfjmB0c;Rc*i)79+y`nwqZjF*$19={bB
zFDJ%<Ck|th%`E)@z_SuP9fozMr@2*lxkJ~zsM?_owgXL2jyyjw?a0b+qSLl|<&MD-
ztP{G~FP8pf8BCWmHGp5TcUgXs?U-2QfHBw|YuKj8dg))4z$U-6Y;tJ~x8`sNYk<ZU
zifaYMdAM#s@i?5jA;XS&PiwcQwUe9VrOY|-vYvB*;#bwANyD)^-uG1;Jn!Dly;ITq
zqlba^7nIK+@66Ph$ozT01AJe?$&LroC*ATV_%@d3KYa{=wCNjQx(I&P+e$_;UkDXX
z>3!@0q@I&#6L`!8>fmSA_33xDJI;J@hMilP=*o#bWd>^)dTxcT?VyQ+-^WlpFSF&P
z^-xwiG!F$_TH&^fNgnVNm6ua5^_5F6G2*Kb1`w|>Dp^LqBl?}w@Ak}a5sg?hM5S;;
zhaKox9(G<(bCWrz&Gb;`%}GN?eO4ItSwS2?N|s$gtqg|RM`ev;y0^E7Id{?dLuuR8
zBZ&%wjQbVK0)44+lxfXUQc805BUHkg)~UUe=8t8E2UxZtI*8HVn7V7lg{W>QFPKVC
z$)eum?-Go4STQd@lSr8Ei_*w)6+Rr=#v`Zk&x~bMHI|U<a=Nw^ObBC+(JJjzDgc#h
zaknK&quq=f6Ln<AIEEC>Zn*zxBNzkK5i;o#UV1V3gS_#=nZT|$*&toXFrDmWF7kf5
z!qkTMV9~!&t6uU2$Mkm=Ay)j;I@C}dklwXaTIuy5GDR>s-QM0xeVL1SKeqbnSl<V5
z;K9`@FN18b1P-h?O|t+vWw;8^ROGk3KiA*p_-!-J2iakG@Kw5+6k+Pj7C;kth5IU_
zxjN-?gi5ZghmW197JRA;2S6$RbYiV#7Xv*x6ChAc{8$|KBRlcPs_;+5i35@e2S(r4
z(ldu~DAV(T?73mTu%>+!O1MB{qiVL1>NZXWBUM>nmw=RFV1`;!XI$rl-H<$TZim`e
zN^uid=iw%XTOx}|ODEG=pn{L8?xj3E$l)VlIUaKxp^Knvk}N={9~L4AY)DtPAwds~
zx!7Wzk43G?H0&p!=`q?qAL^8=l++w8?ZN_xs5VT<(H<IDC`!3TI}n41Q2*nI)7K^1
zWeiFx!^kPU?l1S{+UQBmsqkFAmG>_!SIU-caLpQ!qfNUADqgw#=YNhas-*CP(O(Eb
zfFdQi&@1=>%egdpZULI3<Qt$hL}N>z&O2PuwOy^_upA#BhAWdBwc;n^F(Iv#bRQv4
zP{Q@|`g(OFU*VNBls}0IoH$fq(KrD=g(qQXf}Na&3vLdLyLoMQ^LlbZ@|8nXNQ-+<
z4lx7IJUsD*N-2MZg9WBaXPH6NfYUEn3+WOPoCp$F2cHBcX;>zBKlL}q*nQp~A*(n)
zME^Gplb7Lg{L-TCOF-RX`f|1}n>(c6*rz)%kCh4MaPFGC!^{4NJ}+ncasVOmQi==s
zLq>`CqaG!~P>XFlPwSpYnzfrq$vnBAQb&}Nj28BZI7ejrVDPN4c=kcz*^}@?1JB-v
zPZXY=hVN<C;u3xkgvD?0OHNq4f}hm+c=x^Pd~fg7_4PU5#;1}^`c0FZOQJ<SgTx0H
z5+BU1;v%#(@Z1O<^wzx)W^XzB3~A*BMm*ZwijHY$0`q48_ffn<z`bY#+zSP`kKv03
z;C>80D!{!7f0TfG4L`K5@G1NzAmRpl4IRo_&%!qnMz6)U;j{izje`KE5I!NoO}`z;
zGPAwCZ~J}mjzjnvlDls=4tBk8Vfupcm<E9FT-rzEc@<_hDz8|%kIR)~XER^jNsV}(
zX3sIvX@D-OS#t5WB44kbC(GzEcnEL)%+u^m{_O|aylp34g|-H!5$)VsYf0P1-Q1kL
zKrwU1gr2UiEBcGxeyF}#uWqH?d$&@dYPZCjsOjtGD``V$6U=z!O6gtH9p}l47XA$!
zA7!L%qH?AeRPHVdOno>E!*qg%b%>O7;Q`##*RimeoUhOZ(gp<7;1q=)T;ew;0tM>>
zwMp+*9<@(0?J9@_Jw<_hmRmM<C$o~1>74+A^>)K}Z?88e2`)ZdUwcW2W`{YNL!!U?
z?g-76cmq*I(eLu_)3VBoOT+)$;3ov~2~HLY9!C`Jh{Z-(BxS5KG`4{fIsAH$=qim&
ze*OI#2pD0MxnPwOoB?#K1KgBiC6;j0z%a8Ge&l;c<zDMoUOS{^^?e7a0WchZq&#hh
zU$OyGfKHGtyYPyk#1?sntWU1O!l04-al2ZuOA*K&qu5c1#Kxgk1uLNHo%O}P_>N)T
z@#;UPJYBDVk}3Tus&Mo3Z@FWzcO@}4#qb-gTe^29k@FWAc@Gt&R21#<CMT;ve|?oS
zzJ6M9Guqu<!V?m|L;uf{lW4ufxN1@~y76b0JzadRFle_z^TIBHkPcS>Ai-GNSUz>j
zps6*+ZA90E%8HI65*<ZMV05wyVUR;?M|`5+Bl>-&-w%E9QokR{9r|RoJ+HV(yTU)o
z-KQ<rl<&XxVmyy1>~GE!FY5iK;|-e)SduO&tb0b-5WxvnR$dOxh)AxbDjS<KGCr=h
zQE`7NxwW<hO06?SIx>xl@}Ug@nXWC-x;DFWg&d8ktUMFsTfg0^)YNrHZ`!avob0RL
zo>RlN<*r1~wmi3`MAn%>(~+CkOv7t$?@40FkA3Z9fVE1&WpD4LQ$|6{oT8TgUpVDz
z5D``D1X&$sXjwbKwnRjQ&HsK?HwSW~OD$LaZOtd4m0Y`d!_JS`9Vjfcx*)RZf>>JB
z#O+o!yM?J=KguZ;Wo<Fg#ttqIUOhG%+y}Mm7Y2cEKT_YXn2Vl%dm|#KW&wigm$ta~
zTLRymuWAy;u<DPFvi<>DH)MlRFtl<suV4~d<xQTWL#Ju&gG=3wnYytzPc*#IBqNX}
zXzy2eWjS4i2SX;^y<8dFGS_A&3zMmSGZ@We6q_0nDp{NkBZGea^&+Z))0NMHx9OF2
zV>Kr4G5LBDcuL;`tQUdJjzXa1f~>7HiS<ySuTW+R?11Usn^rS^ApW*uCPU7|G6Q!j
z7Uu<!BWE2px1x63Zhp~ipgF!B$}0=<dU%W-8w-}?_>v9JVVjOKqtv*7`qK=DPTCoY
zE@x=cZsG10w5C&sinF{H+c1Wn!8U4_9RI4Y&<7BPd(GjoHoZ-4Jtyu0<o+ypzp~T5
zSh@CPh{PQbn>0Uk6LkDiAvuTMgpAp+YpvV0Bd9yFvG%!Q5fTyKQW=N%Iot`Xg*>q$
z5gCmlI41fBc|+u7LZwqbNXLvmJXyguPN}tTCHT=kRG;q9p0+4`?Z_okAFq`pVpxUu
z{_PPj_?GNFuBElJ?|pIocHh4z-fdxq{$l2d;pZoY+m`DAj|<I$NiJS<V93&9=snGY
z;qx#0G8GnGyq3Dz+?0z!H9lcX7k17EB2yOF%sb}7)*g6PvYPVTv+c!UG>t6bu=na1
z16kWG8oOJRop30x%df9LuB0{rh#S6%JGRN*UN&%Mcv!d>LlkT=Ifs{uw(AM$T6c{b
zb#hbCa(fOcI}K6EAXzs?J13}V0vCnDadc=hXBi3hH0t-!{zCp3r$-3B;xH`9ZkO&4
z<R0Y3mUTAU9hk=+?HOsSrFLi!of=))1{wof>4w^|mYq-)Z6Ch)u(A<A0S|R7P!Ve~
z8P}O~;4A#Vm8h^jD;=veLLNejlPvnZ?&d=rKUcKBvnXg70sUfH|AYr^or8wcMXhMe
z?#K<?g7aFZOyJuSUhnPQ`?qXV5hsnl7_uUar!hNjF+F6ebR9+*9=R_l8g^((ouo@V
zdE1dtiMMx68>p?4Vm9DVb(Rtww&EFq<6$Jg=TxAv3QAmbBQN->)~0?|&FWq>EL(`2
z?G|p&tv=O;s1NaeX1WVlM`LLVST}KDx^Rc%!jKAeWS9<T#3$>w*kncm@>UXL#cj$c
z<jTt2n{9WsLU>^$X=PB7xaA6EmO&y&m<aq^&hCEbYbuPmEg+C6-ko64)13T%fnpU=
z#znqd{*YBU2KhuYOP6ud#C&9-H+jDba>FB8u-RmF=91?{;Vazc`VA374G?|nHhl>P
zL@vqDQ3(yxb`xBp8cgI~33f*f=qRvs!o!jEn;VRlS%*q42c!zf8e!85xKK!xJ<b<{
zPd!nrv*2VUT=^8XEo`yNo;Z(U`TO-*dQ$0%pV})f(`@}Q=sl~7<*mw_j@Gi+*_L8Y
zmK7GOjYm~{*;bLcXZ+~i!Qd{gEKw6pwiHi^>|&asWBW&Dzxbwpg=_Ags<}#RQ5Alp
zrp!7z)$D+zh!0&kw1^KFI~X{-rZFL1fj2Pr38{DP!9X#=sFd89o}M;mFKx0b41<>|
zGXqxPnOlKI>T$88;VG27e*ZlGkUYh}@P$X>@~12MyWv)#->zKQPV%vOo)&WW6rrQ;
z--Js+{y=^hKF#-Eym=+vVOC+w-GauvOMUno@z3rus)$97=bt%SV%-|kZHqJwNU_}8
z!+-Z*CzNC&DQy2gnY$Kcp|Kt^8B5C~PZN~V4JtPZ7cTtK!S(gM>A&BWVt*XW)QQgB
zJ6Jj%WV<RB;fJ{an1NV-8<|tob%T*>g3{;-b1({+;}PA>u+-SPpG|UZ-k+iuId=k(
zJ~O+Kilst80V3^B;9?Y{P@Qb{q_eM7P6^`+SUSOp3fv38n@-4oDA##w0`({}*7(Tf
zYsbQD5-T6TAU1x1<Vz24R0DR`lp>o9M!|@o_769q5Cs!aUU#aH!kMvl;6kMOH7TkT
z0{~rmY_r3q9bt+2#PII~cPy5ElfM8wdy3woQE_Q75F7lx75{0NyO=)cyDi^`d~<xi
z;+CEm5f-W3^Owi4?kOr(60|fv<R9cO`C)JX6b)~vL*h-W{dRkxN(_=fwU5d2hlj0<
zj1702DGfB2ny{7r*xT-sQspb6m!Xk{-B=#&<irid=6O{C9VH>^EnAjVMB)24r5vd`
zfj`Ixg-k_Ug`|o*-_I{#qr%3gt3K+w@l3>H>H7L21=ixi-%oKb%LcT{L7H2=$$^zp
z#&S<-ctL@D%gJl%J;=lv)v~!O65Ru$qij-CgNHCBgGRs9EU*ZzD1@pCl8YxD<2Y|Y
zfZe?!aF1ZmoEXda+;C8`mTe9@X-;itrYRNPMDt=%KB+LKRndAN!99*I$7xd0HiYZP
zGg_Hfc)cQLK|~(1NmsBXBQLq^1N~Zpc^vKSA(2}hmH0!JIb2cjHM21^f8nKeG~!BU
zyX=WexpT-)c{M0EHYA+oE09f~bWtX*cD6y5fhfnXt(4&xLpi?K^4*~v|Eh@)6EdNB
ziuS>nfzccyt+cFC!oh-yh3YiHtBs_Do<p4Fmg{N=#|_iVbnQ?%k)iI?m9lc%H^Yt?
zYgu^?ut=9==7aVx%2&<W$&FK#6Um{fa%7Jm+EYZowhL6)?ecRCc5p)=UNC9hAtp|s
zbePpH+;GnG7b80NnM1e!f}(o!?XcmRt&5RUwmhVZ>uY2{vxSWvh{7JFcP^MKzFxUW
zp%2)?9I!?LJGoG7xQ8|x@mY?@8CX!Iw3oGZ8X2C-BbL0u>Hf{(sU^T_`Xfg!t*m%h
zkZm)RL=Q#nv26b|kCrlSBs|R1Mfw7697|2t`4}^#IgPG;G6>+CP*cCGK97I6{KVh7
zSkeaLt<V3zx9-w^I6QK)>@3sZk*nq124s0-=L(SBshJu#r015mj+>e$3RP_R?og=o
zFN{Xe38v2+J+!E`>(mS_-trye5tQzC?KDqVVq->HB=Ql9Dsd%IH9(t3q~l`s*V^G}
zpLCPUzuIK&7*)Fq_m&;^{J+>q%cLwStd~r)D)()>Sxpx9q-w`@CBwpN3!Pj^j-Fmh
zPj`z@HUplM>=947Fti#9)ObaQ#l*8+VN{q4^dJSs`FKeeBRtcB=!kL`nR37<*Nb5;
z*}^9EDnx{eGsC)}v$y0O3t6QgyPi}&q-4yak0-PbydvTl<eR{V%9Lj~nysd=`RKc)
z-GwL)<@H6~nHZTY>Z%n^9*yT(A+ENGR;(DVxiDyx0-O^{<zNvg=vuzNIxC_w@p?v%
zx1%Bxp^K%Y<(oP^CTQp@x)bc}r_|bKblzz&rcxTK09Q5bC^L!mq_ua$2R5(yz$(j)
z{drPdBnc`R+(1`=XbEP~$&V<N4qm;3MB31p#ASt>xJ<fSnh2#t%ocnzGCE0n#i5f5
z03y{vn<KL!Fo*_oM^Lx?3UiyriVI5*<*)w15Ezr)d((gKysfklBS#LJM_f+_vGQD?
z#gG{n97(xmN>X$_P=bsye1<_^A|2z}|KC;VMZopYAB<x#UL6A4O;*~xwZUpOUZLm9
zU@%5QGTbY$UrF0UfvWX*U=1q2uf_&j1?3AeWjb)H)x<)fgk3Nx`e8L01+XO$7Wbxa
z*C)wvIG{f#dhW3skY4p;0YDt39f>KiOU8M6EN1^A0*I5=6KG*hs83tI;|X<kYoxF;
zB*j7T+g`zuBA3pcl%NAXpXLRu5L%0%M<=R7#<bKq8nVfNsi}5e$wSpT`jjzn7Y?}b
zuCD>^k4eBJ4dfAe(#=!kgH)}f-%qtWPRduna{i+9b!kIM*-NxGjy!2BEz=Xkdwck=
zl5G)^tw=*B2Y-F-#o-c-$4g_UL96w$bv4fPYT5Ja$+F>)i%Qd5dF2+yE4Rhf-gxCk
zu2-&}X<UC@<@(w!En4u+u5xgqc{a+E$xVKQavfSg?OT>jGp3)%7&_8Ds?;)jQfQ~@
z{Bpc`BNHiuYRK}zG)32JY(;j|AF)7wg&WAPaQ%3#ZJ2WsbTA3I_6wubBYF*JjhX_j
zyj7r;+h|=VokSSA(Q-6QHMHE2!&Id|3S=3~BEB;Is{N6Y#T6W61SkL)1qBxR9rr(!
z!M^+I9#5M{N-vjUZsP?s&}**dxeVuxd9F<~A7wgcu3t8FGn=(oD~_(e@<mq(x~r~y
zd)j^Suja70pX}n!<!ML3c^n{=3~xx#EEsSU7})&#5+n)?$6~Ps3=0JYbXu!};Uqln
z0K<uz@L(lQ<Yj&3Ol;v!Y@s46uo975BI0J7%x=>|eL+JD+M?95Dle-=OGRC6BQ<DT
z1BO>9f?Th`U46LIp6b|6w+a_J&L%|*oiHnlh@^sxD@F$CnTzs4t%Y{X=xS?oOOx82
z+pY%#v9zU$^VKDTvot4NhNnvpy#Nf*PnYaOsf&_~XA}7|ahHRvV|mauq3hyP+0;%1
zh$2)86|)8xu$$1a2-g~y%YdHmz4hMu*Ken9XV-79-fmiyTo~1?KeE2pv_O?i7;oY%
zwkfoHb#JrUs7g9w@gVV*kpf-=Wr-M!0vTBqimIZkSkaXwgQvqtSzM}S91A5lYddZg
z$GmG(u(A0U1XRTtO?1F6N!3%Gn25aF(Q;;-kOl-;gu=wsaMq*1bb-qHGS<1qGPsQK
zi1z^;$IT=g!R{_*i7dl;>BZO=ZcwQRDai#Hm~k#^t>J<3Iu@DX*8%#6DMeG}{`=%j
zStzz^=8yfN-ycU4I#U&@(XI=01Q5Wk!_)|F9Z06`JwuxF<tk3U1j8zv_IhH8U?_cS
zGKe7_h$PULnCEs-Tq3eKzNlT9X<-UYJbuO7>B?{3py3$rucjj{TIM(Cog6@SyKAx}
z4w@#gsOC#9F&!|&!YyJ9n+Sm@vXp0x(?coHuzD2t;-~q$BlL{QHGhazjv^z*uh23F
zfG;x34~mpl5!f|}i^kX&J$Y;HGKGboJV9ffP(9bupph~IlrNQRoWLrhm~W9mkqXq1
zLqz~9LlTh!m;}WhfY!a2!vW`Tscv|O%4QSXkcsA1gS1OeZF7K%SO3kSN|NoWMD)f~
zKCKoH=yqM1-3lu<1ZocZp%TpF0N5BzKZlCBL+e<O9$NR4oTq6_F<6NEV(h1|!&{)(
zPld5$F<C)0Xd|_&Q#yWYpjA?%MdHHtVyO+L(DLX>QREjdl9NhVAd!g^dr8(*&6`@y
z5WrrS|FpvY%1Gq###f?QQ(IGiyK7V2aEeCy3Psh8@vFCgX#)Sb@oyRaFRRW`;s9Yl
zp1-Bc<VrHuQ+Pwxtw?LJ+qCuJ#<ol=&-07yu45W@j%jOa9iw8ceM^zln+<dm1>)_j
zVyp;x7MR>M@;w?&r1DZS{L`Gc{23bYkf2==bI&Qnm7P{~KEoZhOM+`Dz1LbiZV>ow
zMlP8+8Dv~>Lt5Z3ITA1LIAyptRCO7w(F7`rOle;8hDtDF%HKZlnmkcDQ~&KS!g|$q
zUCRAd(?EGLGa#gQoZ62o?(pPlI*q52WPvN+&9a(kE2)<3b1G{pkbD)3?J&`KHu3Bx
zSfS?<{7#5NQ>7F%@l>}yq=gQf-0nE4KKgag6CYc+d9)G-<b+DO)_-j?Hl0eazFP8^
zGx_p2=OrTB+qZXF1<I(`b%Sk<f?8<Sx)N6{$qifj&8LasJtbf()U9AfWH@)5N4fQW
z0d~C5k=m?qGV-tZeS*$-*ve5j)XaZ769D`@9q^Gq_Tt^JL|Gq04;$DE*}bWJISV7v
z#sk^2JFcDGrOH}leJpD(b8NSzHJ*u`=ryW~tNX6Gus5pz_^R7*Hg~5f7=$_-41)Zy
za_lYgeqV{4DC|{^GxxV`?W$W#T@h9F<-n}lAk(o~Cvzs&$+rs`6uYD(4DFC@+cT>7
zpI0{>uh_u7oA;a(<*K3hmBQ&9<7SyEt~w;Ax|0eS4!E!8GIAlTz{*Q%XT2Ouw%W|J
zr>^D<T?X)vm12MXeuKGtotvz2m>r;d?pSYhGFoJ+VT!elLmr;zi@(CaD(kMl#=5pN
z(ry1=V^;sEft@UG0c_6u)*0e$;JzKSZx8Ix<hB){{u98yHLNv{{JREp-VSJYg1T0@
zRJE2%Q^wpmbfI5$)6vrD+Oopm=@P|lI=A&!y8C%c_qNy<y7|});HT&`*)l%-ytV%K
z`FRT$e%tLd`m0-Mbi>l(j<7>?S4rL@vc=~QfB092KfJ~8%?RB^R--rfhW8FD7u|58
zv|AUo@$tsks>Q76X1@L@aNCryN{vTP;lzygIUTUdZ_1eit7`~Zt-Y5{1>KY>&D-u&
zEX%8yakQ$BxLK{H`)58)tp>S(qtZ7-lTc}tnoY8R$%?dXsul*A@!T+nyAEd9Hkd;@
z7*a6Sa~2tsSUI{nUqGa0eg~$2Dx5S9Hs^Db96O(z1k?H4g8w&dYI}WeHQm-X#?RdG
zw`tuG1kp4;gS6h%k@N@pFU>;64R+_SsPAohd!`A3^S0%VawDF%kK->PI3E(yk+V9r
zp)dJ=?xtLIsvm3!JXf2-FOpUzOIj6F+Vpy}7Tt>Wd~6rq<abi3a7eVUc>fhh$nYuZ
zB8;BH%FHG)#`jD_rNAa(kSL9)y`DN3s*D5^+EZeJL61sI)I+9H*&x@3W`5rovr_3Q
zpJe^^vO`_AuCn0<q*fVX)#oU{*hg3GY~k_u1*I%)tZC}lnC1-|(>p9M*({*`A&QZ$
z*wh4-wA3FoCkUrNSH5OEyAn*YNkx-=_*c{Tefmq+e5RcLxNJs5M72vJgLOi|C>Pq(
zOG=i$T_*TM<`EL@MuH^+z+5jfP(UvyffP%Ky|*VNN*T%gFs|X=-maT<Bx8}n^PLoS
z42A_)qODbtS2=0G&!Y0>MfQ`*P_vIB3DP^8By-ceWj+N(6RMu*d^;Wn&j_TP3Pr}0
znYHjYRliU9iN@7oJ@(BQzWMLS{MpR7npyFO)qTFRM&FHrRDPmxj+|t@8i?NjZvO}n
zLT#4G_N0Vy?u%X6SQ?hKHdRU5#V(AYRm{$MK@lrx-+zngfxO-?S-D<ey5D56L&ga^
z*mkhf>sLODMl~E~hdRF4IMeW`rrAsdbbPT4ThiOSmYI|6B4&AU9xc;PNqdfS^V#eD
z_}xFA_xw$3-r9}$ktr(wzZ3qbGNQ(23lCV)2Q!-vzESWYEBJ7GNF@}ohOzuj=13~5
z+7L+}@Pan(((XtHl|%<+%B`i6HlLg%MF{5^d;BTKL|XI$WBP;@%d>~uhnIbgo>@9@
zlUcqnZCl^edqE~vo8X1Y1OI-V6qlh}7wAD(#HUq~ylV;fgvXsb`j9;vmpr!^4ZPn{
z&`w<C3}i1TSd<*xU^H$AnF6V;MB~*uhU0_}q6T$)5@63QGnEvIEu@K`<h;ZXtTq=W
zK^NM4`5`HmDgv_G6Z_KD=~y2hGI$LvgiOGf9GVP{4BI3q)L8*Ujgp=>fbUMe2F`wX
zg7wDM>br&}WMqYb6SMKS(3#1i&{6mozK)MXpz$J=NwctlUVv3c%!r*?$ju~omNM^7
z;S9q_R5rSQ<@O}=kiaprF|egh+cTb9(uy=4ecH$QVcW{){qVp<jbz{9+=999DlDXp
zR3A@5_WU6$pr<^^6s2%m>|<2HJgEAkP2kl!>-Vuc^!`b&ubq#SAuUGIaNvu40K?sI
zST=?>R6`rJ49yPA48+B3RP<o3Q9vkI0Zjxk7qb5CDVLFqEY;fg8sQ)55ksjo%WTY>
zws;$_FVE*W=9>I*X%Dlhd`p`gGnmi#k;EXNta;xo)zr|cFvovsQo+4_tqJSFc_&`O
zL3(=L>#M{6-p70U>nx1{bdz2$=&gIcc)I2Avmr)5^9&od9$u|gAI#h{%`gb4*=;|s
zK2|yeV3mid3eUVQP=;a-A?Lu7JMqm@+<W_WTK@JtD`wYkv+K778gBku=@>Jc_zBpX
zKb9;^pWGfrLQ2tB$?3Nr(Tnu;vhQgfa?TXTxmFzK`{^l=n&eqjCjO+C0_1x>KXtcP
z#v+Xa)YIC}%34H@IRxZcs=a><+T+>s&n4M4$hW5n1xD~1bvqAERijCY{Hxk&m+<4x
zSRYSn3l%th*Uvi97+9ab(MYAx0B!Udjp?E$x~eQYXinL0oY(Hz);e!BZ3phR8gzfu
zoSdFW14zzd4R3Y0volt&eRIxu7%Q~iUq)p`w(()2j$5blVQ8SNYY?g7ZPJNo?X;U<
zkY>gh1Gr!DkOU`Q6G`<p7dcQc+!K`68&3b*!B-7aFPw)VQVwC0Wk;48pbQKHW17u)
zea(nJMV|LtPIImWSERR+Eb{n9h;Pibs=4Xfrg5mC?sxM>^?4@Y5IF~R3W;Y+qFBGd
z<~xp7;@hqFomOH?0-K5v-mHr{RC!MTns!A{B`XTkjMhxp;OS7cJxrxOiJmQS7vSww
z#d;`ovSn%IbEs2gr=bj}m<eSzE$@%=ny>j;XsyK7Fy2VIp^zR@HkC>HA&mB^4eM1>
zf<mHX92QQTh?oqAG1Z^jS?u>Qt|p4CaCAtaqJFIu*$<(0kQt5~dW>0_g`S4C6U_!O
za7M9jgM*7dwjSbJvKh1=qV0#~mP6$K-jR5+jH>Wkg%hICIU3g4yKl3FSM(ny_x;Y3
zOqXjr%CvakNE5w@`WrCpl_zh466{;uw%m)4LvdS(2F^{L-==~kxb&5*orriM*9!C$
zZxTddC0pD=+40ob+MF+3`fY}>jd=4$asxAr+d@@%@x##V&|D;j|5-|WtFwf7YJK>q
z;fH$oHxOJ0_e}fsrE?In2GE1AT0tT6Nz?=X|I-QttD~?U?!6jwBg(|s9syT)m`lzm
z3#Hhb-=8Wa0r&l*@ZqET2N<pQ@Zs0@A3PZQRljfU{jHG$%}wU%)|<>9pMTGJ4)+|B
zG5WW>SUf3EJNk@-=@^>yJk3m~gcs8J6z@VGkL4YY5`bNt<;w&smzbGP{ItAFF0toJ
zv1J6U-sTBl?xt;ICSw>IpnkV;vkv`fU8ck7FH7<L(pXg{xX0=4`qNV85&|?Px#<tf
z@MknJE8fApV9S?4;?4)gIDooDv$)@HQEsR4W`MS9JwC|qmNpfICb4jIUSDIZB$nQG
zgu0O3a8d0e0Hx=Wqy4GXz}&YZUV~=${WAO@k@Xpl+3Ps*I!?Mp66b{sej93D`Z>Jw
zx-U9X57TxyaF6xZNrfscn2d^7j!z%b<N^iZ>Xolaapx#x6?WZFAKH3%lyy3e2g)5-
zoK_ZmRVC(j4dyl3_!)I6nPm41@|MC?#uWBwZf{-Xr8ckH@7xM)4Pp|}3oM7OW~AyR
zrY)|Qjih^~6JH^<aXc+zsOxM@nrmXCrF%I!>Zi)l>%=P$tNrHoyS^@u4u->e=cM1X
zB!VXDbgI1MD0qO_1)SeD+)VJ|*Vnt8LI^kiAKxP)LyQkK#_#R98v?da&OUFvsMb?$
zRvWG4+3lXoJ}{r>p5LfSzJy|lV*NP_(eNQH)A=%a)!{(DavkXPVYCic>K=bgEaHz#
z=}!r)+FFifO@5ra$Lhk(J);-e^IV*$G_c|mWmP4PV>i0K#?=5woQO~45SeN{>d9fK
zT`E5vNe9xUq?x}jwevdG3A_{e`TF{kt^y6IvOhRw#nK2H_ALQ#fKNG4pGm*|v$|iu
zEsdQ1k}>gDj5xHiqMUl5IsGq7jJ!Ap7W&Ouat>!%Z@)?IgDZ^BbSighzJxQY_dnl!
zb8_<a*N=z2jZjshB0iI3|8`AOm=#L8L-aQ4tp0TwY7*)-<%l<5D|4N~W06L1IVh_%
z4l&S(_~Hf;Wjnn$jhI|*t0+sBx)V7^%+=N)|0G1$c|o%Dh6`yWeN3fy<lLuYH7UNM
z;OS!-S20C*Wp#a23%@N5jrOoctmIGVkezco2%Xj*SyuUb0?l8f3*<<z<X=ivFrT9=
z&VnRJHol1@NNog$A&9hgy9^j}06kW;^>_Hgpx4Kf@Iz9h)n(sHs0liqCz$S=JqIL@
z-ZBD{#+*m>(pfDs@vo&!_|@Qw|HT-khNyYeDrz2aQS)d<3Vd#Ya90&??)awJ$X6L9
znR2~dbg~VML%B*~8E*=GQy9{Rm8K~<(ac|$(ou$$!ThB%cZmVS&yKIOP6=c!r?fA^
zDld)w3EAhUluldH7N@26k0q`RTrzE<qbgq`0hFp-rYGSc760Z2F-%m_$7+t&ITN&`
zQMQR`rHv2r>?A!!zV>Xce4hWY3{#dG`0wsxGIt)U`K=P@B3!>%dWvYvEl=8;j*Pm*
zC0HKMf|=178K&Q+dC3hEl^Akks0Pm$g}&alh;?=g|Akg5?2GLT5b64wKGV<(V246A
zC#*rFPUnB(5v@($ncK#$R)MR>vBH8$5`F>KHz13^jmg7Vcc-Fq_yLvuJC#*qa^NIX
z#mVuUVzSE($Y3NJNahriw7m)4r)uiv2-Viy1MZ?9FzrPX)u(?*SAWNLk#7X*6Zah^
zZ?%W<_DXEnP<5t{%WU3u3G1M<n1Jy^;#|J+c|C%$x(}!w<~#6G!4M9T$C$c#oZIkx
z11~!qk~BnAeGgr~=(iKHPsBQqQ!L3A3LxMbdKl)kL@1~8s-pyD>m<dgNX~vZlwsf`
zH&r_HE45)C6O_J2Htb`LV$Y4QHC*mR2anh)&zDuYQfI6dz|v70<54S2_O~mbc0nqD
zt^|>Y=J^LqF<jP(Vv0>3Mxu*aTrJQ9a85COHyahF#4H4Tur%)D((A34J;4@LjhEIF
zc&@55$l`L&{3O)oop(o3aHy%J>2RLFO^tB17S-2;)c!k34yYd)P#~J~3@p-F?)(Nj
zQMdbw#1hykU56W8{>?gxPgVCrf9C7m5WbFJ?usH<1^@%oV9a>Z>&purTACr3N_`Pb
zcL3i0{z)FMfs$=^vHkAxohC)cb3MjtdoB<ajL4n_q^8X%GzeQ973&ElonC7V*fX*S
zMjuhi2on*!qNse84FAHR-1GoZmaXIll2h2UmP|d;Vss|r`CpN(py<M|@#%SzuPY4j
zr}*qj2j8w|q{pqiz~pjLoQf++nfsn&ku1OP{Jvt=VZ}oIV}G71L8|Ze2tB=#KRsPm
zben&{*RDjz)Rm~%I7mov=!_D@)i-wU*3cG}7A_j23>2CC#=@w~*F~I^<DX!8(lXgc
zW7WKqhUiktgPuaCDcO>bL6gpa=(k3{Dw4%IPC9d=nKZCSnG-fzq@<yYmW2VM=z~Gb
zw#FQiAg2EyVo)J1*m#Kp1{|~NMsSw9MJknjS==PDYZICQaL1l2x~q0w*4Y$9RYsO1
zi}F=+0-z<6E&hyRSS{si!{kb$y4e)k?n&;Cn=x6{_j!8eyofu^5ulAN!!g^6TR1F|
zvMTb+mKNh>5*5yn)KKk>%opYSwsLi8jSX}rJ<Wi0N%RhqEmvY$Mn)a2ylo|8x<61D
z9RgVJ^~0gycXG*XIxK{`0kYMUN4&Ul-nDOxNoCDbSyXlpvyY=S(T36{%Qyj+dt1$!
ze4i}dwM#y1ej{{~OgaFOqLfHB9kn=|O}Al=GG)?$;oE?}YC8KD7@Glu)lH+przeBo
zXU60SwTIhofK~n?zeoyH*LuD@g4l}<)67X;FY`qYR-#HXILBo6@Dey5nW$59XX6Mh
zEz!QcQ517F;)P#-0KQ$djB*4UqcC@46y~)+(FWX0mszIlP_P7mgt9|Fm>T^GGH}b(
zVc_f`z2iI$di~1CKQ;nu0^Q3x>Y`abv3~{dqe*d`lx1`Z_~Sl%KHQ4W<!@i;*d$1x
z^;p|=;_j9(0xC4?1h|_Ixr|o4?{Y}UHl^@IAJqk3J-6Q|FytU|XK-y_ULtF(V%m`y
zXM-jW5)n&4yL>i@O?*Lo^wDH-6_#-Gh=XZtOtaujC;qu7^t)1&C>giU@Z>Djd|g!-
z=Kc!Ri-CD;TYx9hqd>q(25r5AD?y%}=j$?A<QEw{^`at;2FqxkEPFw3M-~rudiv~(
zef<ju-s=Tl?s!oQw5!|!0=m=tQh&xNiZA`%m#_`?QSh}=X>BDP+uOr|FVYVki1M0B
z5vs@v>Mk&M?*eqy*G@DG45DH1-E4a8S?BO=usaE%$nAwVDZaEJ9K1EIDbrk2@_w7G
zge$~yrLg9dsq*J9kGu0Mx9%Z4!G6k-)8`Mk``k|KUX%w@w(-7z$*$*JlIa_T$68#R
zF2WwL=jVU)`gBh{S>`}@9~^x1;G0KZAAIxhD|%Z*8C+I8icP6(dq$5;%IfnF$PlIc
z8QOQ)vg*OUbDWHNz_r6M-^*8oy@W}}^DdD%H{ED=^x)h&P6-`2GzVT*p}D_S(VR?1
z(1`^`5cKf#Jpb5p_eqU+H5m+^TUyccVWYv~(>AMl2p)WmvTOK=1_^#ThZ_@dt3v+O
zw>smsbpJ6ce|>%bKChmU8@18<c_s&CvY@F9M*U3ASzAy1Z|&Li^I+)q^WZN10FCNw
z`2M49Ee%=0huaFe&12+vU2jwaNdt`1_RthL3Lia0#$7!ghTotOh&!R9aHx;?F%O+j
zW0=+o&m1{r2<L2W&Mu6-I8H4KkYe@%JQLCx?3rIyE6r0hjQq`vly3$KKRMpDpHi5v
z1TW62f9yscSe0-BA8(SziMTQ61V>pt`wHe!9lEPP&V3pv)r__>axhVvp@0`|6{kr>
zv3A|HL^hgHiMGSR3OjlmVK%GSascAt3so`1?=5$%EbBL?ZJn;n_5^a?d;4+mwXxb$
zPOF{wZ3jadCZfzLu60RuZ4$^ZuPJvmEJ@=FqOH5^vanN%pIO$FO1FR0y|N}S=p4U{
z2*uIT1UF0;%JYcWG*TE)JYplD9g2Fh%n_d5jRo488uTnFlOM`z#S&#P^RO7t4-*$U
za|s>wb~<-Kv*Mt+T84AwytD+~$17!ExVgHG3#YKq{U~RiLJ((1E<b^X*#KmR%b8eG
zlAuQU<)HAji%`C|=bXrJ|FKUKd0?JJB|9()*)@237%r~uSanN@URA6S`=bzU1Gi|E
zMg@h61UGYcIZ^cc<nrA_Pq=j%$0heYL)al-6&b>Ah>>QE)IiphZhFJk);wO0u4i)X
z3}T6zGm&PaQ2%|B_k_BRbW)BV^PL4h?vX{I)f3UgGt{aL{!+2ANXi)QKoL+kpvUQg
zaVh}c_iMPM9w$+`E)tLSBkebgNzfvz2gnBztxQ+mOQNL|4<E+VQ3!Va1weo+{aNsN
z)UAa|+D*~fWu~=zs?Gf51g5Iem*QP{MJAZ5iTW-Dv2XI#AoS?NfC~BdiXc;&HIH)j
zgLa2os~>uqP133Iy51`&vOwS%HxRKs94dUGR@%|Eu?(<&s#bZK#mvPMAGgv$*^SNM
z%+mCEMhu5u5@hi6I-SFzb}ID1JbBaMQV@&0R%h8I3~>Y@GDRn1g0xgYm-x_*QQ2fC
zyOi(eeC$`qAIS$kHkG~BOic!XP@(v#v`BdJs@zRpC1nz_E9%2~baE!3?OtVlL~0A_
zYe4>M>2)8P&TZWil!Ox$skbprY*Q#yOrcP<D-=w&vt%x1x*M`&);s{JcACaCj!r)D
zsx~W+#oXRAzg!nf@9mdxAV)!Z4rJ+G`Qfzx@q8%`;l~dA$jY#HR#mIu-o1;9i~WoH
z`+0GC?_f9_V$t4?xu<`o!N`{gtEc(Lus7Tp?mWQ%^}ZCnqn?ouBpEtc{_^UFXZiUG
zP?O?ah~6RgfApo_V<r+OY-%{qFAre_&UWCwc|P1Z*nhaQJlGkG@b3sZg9rV)w}ax^
zcS&gF4vF}(w{wy%mthah8gz-lMY^cY!ruPZy?fBR_)<MT>g`Cv7547;zLY!f)4a{7
z%py!LxLQREB$q+&{_5k-Blti5eZ2bEQ+b&&W@FGBjPMO26iQ)x6u`14F3tc6Ut_?o
zpa%^1;G&3D+6;}!)e;OSfre*!u}BKp;6v!8%$Kk_|Fam4S}I*cMTTDIUDa~3H)^R!
zhg@f8-+c2;OPw=h#XIXfdbDWPQR1fn=#C7~bB2d(Psla`xn#mX_W+uEfG}(t@I83&
zpeJJaKoHf9yowg-x}=qHSA&*E#-IVfqx1wr#?(is1W$5=7%M;MeLei&p2%UrkR90n
zT2(QY3662#PkEUV$>=Si(;ay-@$tV(R!Ib-Dd_LuqnWKr<=q?Ze+>hzcVf}OwDbdR
z`~db&kC4G{RAI=_Qc0mgvzkVQwvG@Hnl&^cwADZ~Xx3219Br1FCnt-=H{V#xOviG-
z?!2K|Ta3$L8Yh_;7BZ_)B+H1p61}}3!bCCf884(5Kj_OI&@5Xvngi;tB_`2Y48>CJ
z;{(D$hUfPUo^vx$je(SXeR~<b+7D_wx;`1Uh-?D94Fxy7vl|Vl<=kFd?(jxkwXiqT
zrJb(o5<lpgCUmX`+AIWD=g~*WCI-FHaEO4$DBCB?{Ni7*Bx`i0grZaDN-=B2oW)`x
zn}x6F<n!E^Ck5oXQ^=Ue8$<;X25oKij}zcs@DW;`FHTx$(D&LAKoKHVLs6u-R#2%w
zI>t!EZzEbU93X(wjF1ErGY6y=ZGnLX`q2}G1m}TEIXlU1jTX1`uMM`&=HaxO*G<1-
zIN*_whEKC*`fk)XyHWsi>o*q&X6urpYzVomT~e`4l(FzMo9iI|%*=8|M!RHl4%e-B
zk(bZWRcVpD%z~en8((~y&uHK;JB7tt?5ByDG?vqOsRiN5N4%q_CQMHR;H+K%Uz}t~
zfuiJY$KZEKCb{M|Ue`);{-!(<r7>YG8I~FiC3~+>YN@qKmCRaoI0PP>Ad3XYxUZ>%
zQ`#p_IdNh`h=+mgk0tD4{(ERMD@eRnQ3fq#0_KEf>7E*MrEi#?+2%8A09WgJaPV;G
z6TYw<P}!hfs#0;q@jfao`n}V+%*AQ5gB=bhICK@(F6$RfVB|W29kZ*TRYoaEyKA?K
zE!M;b+rVN$Ve9ml_CPkWpC0+HwzSszQc5&hZw*hFl3f`cz+g&r*!>eoJnE7G?DyVY
zC_Q+^?asW4Y+`_W1z2F2Q$aq;y{XX$W|Q9Aw-@BQY|LY9mFd6VUc4=5SnuuIFZQ6X
z-i$N;=W|XaIxHHRG4&=_B*qN@32EaaQ9*IdWn1-oFoymYCVK+aMCr_A3N!lZi+kc8
zeV;Y)720h}2+@@$qGqyi>&&fkNaJjpPKUD@s-HC>h{Dl0I!w8(Kn|rMD#fgQ3)k9L
zrbd;Pqp<#&--my5zu)`ni=JBDDf3nD{kzwXrH{RO6Z^9b#)BdO#Gg|8c|f}gvr44!
zXJquxO%sb`pAiF038fJVjUqMeRMaS&NOB$|wE3iduM8^O8tLLYI6MnYXt41QomxzE
z@$Vqxcswl=EUIa_)F^9mPNUVdyo6&d2{9G3-9zu^t|3k{lYzzP(>ZfNka_2+Gt8;D
zw+Eo!)j;fhLBCmEY(t^0uhR)%AhX+w3A7Mkv{Y{r*d3RPo^PMh2{awh#-{LwnAIgg
z2kX<)XLoxHFq^O#1UdvkAl=_C=V4}j3g{61ZO&t8Sopk}Ye|h8Br!22F*=sYZ*%e#
zPi!!?>uY$22RuM6ByylVc`sb2hL7&!yDi$^RxDUW6>zWy1yHqS!}guz%SEy<k5P7M
ze!~qtPRqnb_`5{!L-Q!{Wyqre;>WH~kJ{AmSgPIuD^4)o(AbVi(sGs7F%8XGC*YvM
z=xeE~BOJ5w%c{_H9EK_7;bsO(K`bb6OdpV2P7=s!v<&soc0)D>6_cdPZnPyp3AYDh
zfJt1yR6G!GM>IFWBrU{Ot5$dPC(AuRngRN@PiHc6o)askwW7%pW2dU)=t&3)6%`K<
zK&bF=YW-ouvgODAP-|ggAxdfupicnGuu8D15$4w<^_nuo9|kyFtQtX8AOcnu9Rah8
zFU&B@emFQ74mb4)mtqR5F_YAN6*AtBO`5;~5L`9jrN`0=T{S@Lq2=pLrII$27W0rM
zvpO7F)^!bA;h4EK=(6Z^JYF9j@9oVGm)5lv;kEY13qZc<e73i@Ksd~2*VkS?o%j2*
zaP5mVMJ`<U7@`6y8yIbLpC{1gC;0yv>JMMSk0+?@JI8-Mgk<NZjr@QXyhokUDHOWw
z7^V0PrgeIFxwrSpjP#Wp>8U?np(epQIb81Ty~0I2nW4+Y^aRIx>Wi27!J{uPVHWTs
zgC7%IjF<4?36?nzPx~-VILm{VXi`96y$DqR(~se+!-IzpC$Eme2alnX!|>tP(9lu%
z&DZoaIyjgd1h1sQ!YedXKwp)>yTGuJuP|W1g}d+J^M!oLs0K7K9DBQ`*Vll>AK_4-
z;MBkE?ZLtDk!*OUpJrkB>iRm9Kj76FDzhf(^b^fBNUdrOV2b8xzl9&gDJ|A3<7@OO
z3;`n0c1nR+-cJ-NmS|q!olOwQgP~7&mjbN@kf;hzCU%!Yp@E4Q=AAe8l#e)j4wu2z
z(O|^tea-5L=}N5nt%yyXvTENr)t*qxpIDKW!DCl_?>&u&21JuN*bOUJpQ$S&4=}+>
zSRbc{wSb3VnT=%8HbTp7ILW1H$i3U{n7|&1RNrGK!UPuZIH9mjet`ZTdwaz+1@<Hi
z<B9rJ257E=h!6|)qcr-Tm2^K_b-15dVl>c8Kt4s<2mHmYZK#oHxFSg+u;DMWH<uW2
z)uupynY~2MI(XJ;+oX{*iBMi<PnYWgKf-PE6&ar<i<gT1#I;yR8<>A2mvAk?a!L*<
zU3nY#zg};nxYsQO$ot9$Zb@V844Q_U;hS7{4lAl<J3nM6dGKZ~kb{NG{4>MImK}!J
z@+z^v%;RWD#Uo6Wt?xX7MBdU2=(#csSFWC~FS8hp+i~g}G#lrWZ|@5*dgH)yOEEdq
zEd|<v%gePGnEwduBAQuKz{*Vr{O{O?vlKVFfz%?_{5Wse#V39A0<Xvb-jsVY*P$?E
zTr%PwL@dxOgoJ`=A#WIA_%z>t_2vcI35zA3Z}YHM<*S}p6J<H61_k|rL$}x`vEQJQ
zf5ifJxO|h#A}3*PRp!tL9o~C;a4PGAa3PNU$qKp&cHzS@|FFhWVMX=~i^I@cP1eD&
z?=z1@G<sgy{F|iB7lrQd#P<gky^8I*`vA6?Y)CRfOFWxv-@S68CKT8S;&lAMeU<+3
zQ)s%W)Q|C}qwwVV`qL5hIl*WprUVK}JpiLt&0xGb^--E25N~xBdX-bhzn3~j4Zvx5
zl{+F+;y2VS>MROnb%~av<_<R(y<o@Q)}ni7qPO}u-T@#=B_;nF-+PH);Vx(G;Ou=C
z>BFGc_m-1#Li(mb7GeG@xW~zX>Bp7)tly*mfI-IB#xH=vPluV#Lt#UoCmZSgH6)P`
zTJ9c($<fis+-9sfaCOgkE~+HzUr}H(OvvhgmC0*-!E1Qv6;`j647`FWQ1^pE*L-?|
z9M{HmzS;1X1d-pNWLirC$Sl%QSuGPl4T=maZ62RXKOy#(Bwn~6uafuSRl8x%PO*P3
zZFsOCnpf5gY!X(|G>GXAg*N$7mXDP0iS-_@3l#Pe?F)N7dwFE`5ShF_q6GpT`uj@Q
zBCX`KNPby!P<%00S4>4*rRJ>FAD5F(b!%lgE$Ij_VY{xRzelUgts_|m*@IeP(mrhn
z6oF#LUTtH<XeEyEG$=s^AT2BJV+CUZ3uy9_jP64T70~>y^6tGY`}a;;GKQ+NywMp(
z0ihHjB5O18I!hM|wENHocG<?N9S_h4wG%ADLF_KjkhcK9Mo#iaR1~>md_iWfMk<l2
z>^8sy&=-`<5tD%KNq{B8acuIxkG0=>K8=CV19Xu;#^q6j5kha1gd<h>5Q)<F^+j@P
z)!Nkj@$ya`0ap7IuBZzjGIY^`6ml@>mF7;Zxb@C+!ww6!un&=wYQb}v6KIiCQMxp7
zw$bQSd9mEE#@flOYi7@>;hvDH61`z{hoWL5d@NB9*wL!f=T#RTROY8nS=;U>CufY#
ze%?}1UB;M&Oa7$89$DrOzVk=rq=|~Z5DqFWnG!2l+9u=949K?<5$k2*0#Tb9pw?Ld
zH0g2M?l){`o{sflTdQk$yq<Bb>a}P4&P9_-6NNU^ISRGaJX-Nb+EOoqJDoM@LlfrS
ziywL+-t^!ZXG9?e?+v`Si@yJbiil5!rNGJcQG#zU-Guk8AAlGXcuHmAaz+A*78e13
zD*#B(p0BH3Q!$*?W?rxpnIaER<O8)PcyiRvrG0k!Ks6|t7QmJ!VByVMnRz^ad5pE2
z;TS%Wg`Ny~W9Lzx<rfN{fQ+OFu`WR<tZvp8=$2v3>tx9-M{V2f5>)26WUMWlrmNa{
znVgj@@OkDUVhRZLaV?(aAL%HuyUAxwv@Dx6YvhaOUuDGk;F`1<C1(x?<YcA0!6V%U
zZPa!GE_ddOyylSJTFS&vZ`rDe-m2Mdm|GKBVudgcmECNGWrZ-jH6TqiUnYxjPKD8p
zhVRZWG|4**jncbHL?UURY$wg)SeF75f%{a{@kqqGp^hmHJdGR+_l2#rFKlH-?kn^$
z)Q(uDDnC74CSDiO8|d0SvAY{Lf(vli-k|NToMn)Uq*V=!XKgxuH;O3M46f7uU5%iN
zRv4(gRPeY-xvNRdjV9F%Ak{XMTgH%T9SU-=@s07Dnw)-RS4JPsNoy!?c4<iLEry#t
z*S2%xPE+5`fRLZ*3sm3Tcn%;UQ$$PaM|Xs={_NwS-DN6=A}boQk20HqyC=<t)qB&{
zZMYWQakJW!x@z0B)Q2p~=H{yvQQ;=!ZE&nT3RQ#5r*OuU*ks&-t0$xXYnMdH)>~T%
zo3O8oaV`9yKt&@qlj>%A7#yXSW;>)nbOWVia0Zz0CVWYg+Q}V;WS0b3jWhcx$`W$M
zN4`;Fcw5kxMpzRJpP(nbLspEw@$TSFr`R;Nve94KkJt{tD?K3H^|#+ZF>hcy<G9n1
z&h(THKCvkVGv}Z-`C)28g|P|ki-#XNSQNy=Q;D(LM&8m!0s8~ZCR(|JY>RWzZ8knb
z>g{%HDy*dCG^|gIR<+t4J<i4%MoeHXF?ql5OTIQ^d@Y`i6O8vc$!_#|YrT#)J>Fob
zesDu;*zrxCZb3d6m@C@eUK?|lbUJ0Bd0W>vJj{%TmE&ARvfRT=IahJNDtaenz35k^
zrN2iR_p9PARk;;}GM6gry#|wj`=im{TT#|_Z>W~wWp%?_Nre)O+NLqN<!WqN>w*&7
z#9N@;y#h+-PY0zUui92icMW&Bq<F3ggi@5C@6Yx1MVi4?Z(M{|WHvq|d)%S2#)XRn
zns1V5SlgGYcXA<3%obX(BO?XZ!fm1D(Wr35z-aR6uqJ_*!s`A=898>JZd}R4+#oBF
zV~kdFr?cDN5QXlvSHx3z$%IaX%cV)bK?_1}_T#d|6DU+A80oq#P2K5Xm|ZG-eU0{r
zL02EBDhYN5qvR2a(9J}gd(l<}Yv)OT(e_~HVc-gpx5ui`p(6Z70mA*{<0=B)g3+MX
zV$xr|!K7%fQ>GF`UX%qwLdu(}uzBN@=mSL>P^K!$G@W6#RL)qG@JL2EN+eA1AT5!s
zwG11kn5)SuSdrN=mQy)^)1yqWXhR*i&!-3n;Zo=pOacwK*{>*Yd{X$ib4uyg(7lT6
zkl#vTXlFD~bLe3-5+)2=%1|=l?b=(W2--O<cE301^;0q59-d?@O=0S?FJSS<Yk<$3
zVftDYJ{Al2=HrOl?ImNOE*Zz+qH)PM!4_1sc;AcbIAfnh37E3CH+N=#Vy+*b{Hq0A
zKR(&($HIvzWkWG;6T#!_A2NNRg!2W(-WX%lrY5^f1JdIJcS$`~TgUms2~wRq($3}f
zjmPPbD`YX+pW8%<YciKDHrdbSH)*BO%<}0RV;f;~KdY<zmRq8ZhQqIb5YF=)69o-@
zq>3cKn~cz`1RrtilZWa7Hyj1FCG7uWt0oQg(ilsjRf(pBA4;Bt(bA1?greG7b%rtW
z0Q=5YVNr`Yuk&mvK|>gKN6n~S8-A@Bh2B~nDx)^t!}WD_#J8Zn`;iq-pd4-4XYmsP
zyz-rS)MlYYXhyigj2TxqyY=$kEa-$A46qg&aN~@}7ZlF7(jl|?H}av-K~&g~IZztI
zH;&2kHBf=}F#pU*A#CAjfuowvggJ6JSCC7!mWj}nu;YdwFbFAN*3q0v-^Q8=-zio)
z9W}+aIDO<M6{3;?v*F2rdCj)2C^k&C2`aMsXfxiAjBKe*pu-&OW4t%Kl9pY*jS?*l
zxRBQ*WfSp}Be<BGFDDdvQC7fgBYF&`fWj3!q@~F;vTO`#uG5T+QwnbJVeZW_WSlfV
zFDIop#}I!Qkbj_cdp2hHYyWBqME|uV`b$al%{_Fj(wDrO^Rz5H9gWWpvF<tOBW&Gz
zgsm-Dk5!WC6J@_7i+l=C9M$CnXLcfvwT&^(F)&XS7AF=KpP)3EC-<RkLp~{nssYBr
z1%^5Sd5Op^Aw_h^<;ZcKiI=T@B2U7hI5%J_T9t2VTj{uU+>9Tt%kSz|{IH__z?7mm
zwzX3EB&Sla$K(b%lsjoM7zHxWwppHYwLE9xd1HA#glB4bo(#fK@=&~-exP<{;S&a#
za~Cq_Mu_@eoSK>Ew#!r1<@@lo(dA|MUfC)B7GAbdkKf>Yzf{W^zMM9;`fropg5TsI
zIkKO+V?34XOUAz90_oXDNzdK^G?~V!VTdPQ*cok8q*ii>gGBzlzJBL%Vkj#1;4a7u
z1)W#niw1Ol3|}eeya|6~EsS?RUSEHd`(`(MBY)r<sRYJX@|Tnn?S>zfrG$KXqn_kj
z{fzaAzrYvt1K-g8!8i0{av>@1kA48W3Llbx1TV<8_+olteO|&JeE>Bt$QJ2^yGSp%
z8R^A_PJg1RQC*Qq+QP0QVian96MBKkquHu}3Uw$Kh6O0tVan7)7|6-UCSnt<`h^MA
zCGAhiB$&dmph1DIy&J}RdxOy~(>IxXQKeN#O^bFB@G2aRSBHAq<CP3z6-`&XR2Y{2
zRUEEV%&J;G8Q^v>r-9}twno0L_yIRzNeh&}C3@k(x$@Z8=>z^XSD6OVeP;8z5ygZ7
zGhnfpV+#0hY=HmyIqteLrhp0SXso(Wx6qQ}XnTe`M;9w&mC+@tFo}*}p@G{$%u&|G
zD3e)6+37kuO<-!#6SzCNmIUw74Nuxmyqb3#QFxh}3vdY8qE%R~qoM*T6QhHx`a51L
zOw~^GAMSGWrxc(%avf%~MbEd?brVr7>T6rt^tI#`BY5SPHKx^UBXg4Rc61gfvo>hg
zz!S?*4&kVlNrvoHwBsEn3);c~GGxV;Ta)$FGA`A!)Ja=Nn}vw^WM&~|I~tBv*y(Y`
zF0{MJG@IG($9~rDQ^j$9XdMA|t7-0(%Au5!+E~{HbhES`Mnphh+J?e~VM<O<Q|Mx*
zcrEmz$?c={l-YPG-y;4b3jdhz6UUF*6TM+X1nVE5m5I3_z-YIC+M%ShY?8;>jasq9
z*4uUJ-F7iGGNoIrk2s;yn?mz_Ln2f<sfsAKWdthKsT+r7<J3jzm}G-in55^Ixtu!z
zj@?#0o%T<G*D~8n|Eh$eZE26Tk{@lUv+tnQ&~6rfdrj@a`7E|DomyKnkei02F@vh&
zI`q>ic$ZeFLhyXf?v!M+(H-Yl&f?FxK*3Lhk;Iu<@ImsZGobMON50BbWrQoZF3;!T
zm5SxY$*zpr+uK+H%un1&cUv75G!&3(m9N&TULyc7niv)Nvh1Oav<41ouDxv95m#;&
zCL~6z&<+%b@aLR7M)l}^aNUj5@|Q9x$UevGrP*pN<1h3uXE;9ff?AnHf>YSXz#kV;
zvA}}zRZp%kcKQ3316IqvKQkE|a69eMG~|KBjj!tgH84?i=Rs|Db|*sZ-WaTu%?_Yk
zX@$=?pA^7!!8x&5CKi&U3c*nH_H1J1<Qr%tU?&rK&?!SUO2(wwOGAQ`WAA?=9~p@r
zfB;<pFVW~}WKxX1pBq!ffCovYx*yx>4r_(JpKGxOaGv&tFD1=p&?`0QGF&wVy$n^d
z^6}DeE`<pNkD38P9OwSk3W(#}633Oke47H1Tfp%zD-06U*0U>zrLyT(dt^7vbg*RZ
zRyJWGJPl!`cybw)TJI7|wulBh_!GTo%I3{nRQLdf+Xt{+Bw5Kku`0tn+kuC}hJ;l0
zXE&~J1(2*ZOHe7kyGyKoD|049>x$W5@|gW15eJwdM=?BMAyhuqR8TTiIODsb_}_w>
z3~!A{s4~=Mg#vBsYl#gBNHQ`_)bX{-0iQ%1zMmUoMY4x#S)KSWOoRB)HhO&>A4S*K
z8iUFDMz^E!N3jr8o*lox&z%)kCknODvIp?8FxGUSWn_a<&^|kkAkDxb+Q)$hwpOnC
zMOg6+(YdbO)3te27>t^X;%XqtGV0IJmww;Ih(XCDb#M`Fpb2;v$qkk{;84PIS&Iq<
zycv1O0Qpjh%$?U>tt!P=d1+P`ZoDgsDBs?1sW91u@F>DkTDF-J81B*m!xleiS<ew>
z-MAG&a`FeY5hQ~?S|4Hf>n@U%+>Rvio{1z`@{={mPYc3zA)2#zNy}bLnmf?s%=mpS
zG5vcUcI2wt8+OZ;gvhfri1x)VZWxnaZ<ng|pL4mFy{_D>rZbIv{?;U)r#B?|R5t>Z
z=2O|x8-4c;$v){KpwoOB690w6b8~U0mL)pxq&HGMrRT46ze6<A%#?+fXOlBa6P<h~
z&7i?7MvC#>9QJNQV4O`@Qo$Qkb6tK~jl_s)m<?2RpeW4MPd%s`I??;+>80F>cG9t#
zbWD~PXx)y6mo@E7AC6V|Bl79y%?aw{iY)MgcoSTy{i-6PnaWij<jAg3c5T%3=ueT5
zfuMtGBV;QV$-a!RYP#;5ASoD|+ZR{Oh{<bxum<XWW3FKve`5$H3|0a#m%65_D9iFn
z<%++Q!Io=6^gzlenc$Q+L5Ux6z5X>1pUnZc#20ghus^fdWS<!%SsR2jjy!V<$!h3r
zGH&MA*SpfbAH|Av!PYXF>uW1G9jI?csCt++487`J|FshqaC0>7t)f%KIlxi#B0|(~
zgab<SVvNlW1iP!tc;VbC@m|qp^@o-;PBDKlGFjnW&k8LCi}ibE7Cx!H>Zf0MXxRXb
z1<7O>L~sSw`vUo;(9BML4B{gc)_D8_z8<25O4Ci~7s9Pr=82U$qQBiWo02P=CW890
zGBy)!i3uekw;`(VGNppVAX)y$e=J++BAMq<Bl(3oG)YT~b%t?gZU3s+lQ>RRHn%D6
zt-Qp7D#0mt;pm{<cXi(wh4xCV?;u6>GvXHW-slQDe@DT;<G#{xO@c}AWad!eHRiE&
z6KJ+LD?vTDSTesq^y<T?z$z(Erv#LD<@SRK3rSRj=uiOoRdx-va9VI&Xq&$@<e#Sn
zr9sS5l&(-s2iU2NOi{dt!@WI5cT&RIqfv6-gs(8`o@xZIg{idb9;<ba!nm>SXoV=(
z9ZN$wwZ6xc`Lu4-c5Jow3;!zKr$|v60b;3>?-&kqpVu(c$yWvg;03Me!)olULIWqC
zRGi9ze8nBe8Q759(++9w4kPJcGn=Se$Zy@7H!F9nM4r-Fnt8e9xfH;(sMJX;&nVnY
zSQ=KZ$(AY!#V<PVkuM$&DXrm9yLf5pprk-zZVhc*a2eE?E7Vwq^9E|H!=*wEb5VsI
zu=Xc4Qgjd;gtY<e?X9_#&a2h9?=vi#yI3?gwjY9twST!e9n!d+zK*rmW5YIElL|&d
zGlynMx>)Nh(}6_Cqg~BVAgSnBe1}zc7eBL$Z>X3gv%pS`Il-=6f?b$h+DU~S;8CMD
zlHU4W&rv!;K@-(o8ZY~aBRvjtRLbJ#zsX$nV`qPpZ9)o{np%Qr4FWh$8tI|YW8bA9
zNaKOX(TSW$3kuXuqP@|2sSZf5mbV#A<m>rGTK$j(5;;EW#POwdd$|Sr>8W>X;|wF4
z(3Ei7E1pG8BxpJRWhj^yzF<4SNKB&}?t)b3SlyUZZ1&OCSu2;ram%=FAiA=U-@)lH
z-7j!Md2`<ydjPgK3vDr3)s9@_tQ!%ywKOgb3!5*vM@EtD$C6O>uCx{tvHiQb7rDDx
zm}j;>R9*GQl`ti0Ks7N_GD%R(6xFzdiFtw9xh%gEaNGsP#Oe!7g{H<JZq*oQC2JX)
z)Ot&D^)qJbE7weYrA_ck#~{;~t<&zOBy1ei$`_z&rNnoTHq_uxb`&Sxd~XlV<hg=J
zdZOI7`5J1&%HNx7IOHakEdacoE#+}|tO0o90<hK2A5M{D%|j@l9s4Q+6h9M?6%LDy
zN@v-|d!oNdff1myeJ2WH2Oa!g(m{X2bO=`zZQ^?pT^40<HFqP;IlksC3#jkY7({`E
zlIWy7ETn`zT&3qfT#8LSQMs368LFa|>(Yrw;VVVUZH@p;9W6N%;*AjE4Icx`x{RFC
zNw(-X4emEtqML|y$6zmLuxPM_Wc)y9@?}>+Oc){l-kL^98>@GPTfuB2J4Z4#2qvcZ
zE;>(_6l){P$uG}Mpai!OOrK<Oh6FtsYiUPj4mpoLlE)oO&GEHNGNQjg%W3A(OR@9K
z!w(led`mO+?ckv<Y;%+(=RI*|GnV{sPoPo2YZ>NEX4KG$GgvMSn$<EDJNUQ7MTzB<
z8p(W8*lw1nen<NU8{Gz!)zkf_o^Ov57rZo3NS4cVRi<TY#-q+5m{e6bqXFhhtLLj3
znS3>63Y=46(uK&pIK%yiScfG`qI4^i{A8zV&0(=&R@-v11ik+meI3{GJ>A@}31e}q
z9=`tiYie^574QDqSnoghx@D|e+r8URG5M8BxU<FMDwtCUezCKyoLbmsYNWRx=U?mp
z_rA1C`mmAE3^DHstV9;{;)G|_Vtc*j7T=z~#>uMo4eo#owMC<k12r<fb4^S|j1(!u
zB+m1XuhUP|h(z20TI)1m^#l2vHexBtAc<E6+uXOUDg!G9()IUlRh`I<x^pwP`)X=;
z8i;L9j;F0Pwt31dU9FOe0ywm$RvOZO4h~#IzOmW~{YO@-SJ0W#pd!$bDvhJ1LL$Vc
z0Yy2L%RjW_c7H_l#b98XA&nd;L{wzAH{2Oe7PXzh{@0d-NeVUE$CO(Oz<Stg|MU3q
z<K{B)*l=4jN!2T=&}*2}%BG!DB$3j|$ulCYB4Ef{&?7df@nqt;Z}4zYTVVh3mWela
zpx#R=7uo(JPL^Rzk9vHosJ+#(S1`VzW)JGbgg%}p)mgr96NPC)();r5dN}&#;7gMt
ztX7$PK)dT6JdEd^b?HPy?rm%RxU>ETB(p$uyQ?oA-+u`I#*ZF$Pk?x|dZM(pM(#iA
zY=lhuZXU&`vw<XApKpP}!9mnnbyWZ}TU3|ZfEac63^(%&*kD^nzkq)iqtV;-Nis}2
zTS6}#$>VJsNjEB0a>uq-jpl#`!tSkyxVLJA=Nwq6C1!{N?loC|MyeUQc4);4Zcwe_
zA*&?q6Pr_h8Bwi2!^y$vfm$_=x80_b9hPAFep9!M5Q7m=-2FEN(DUcXQU)fen@Tt(
zOjK67+-6cHhHhsRgMwL-(eP<{_KKHnfkOur5VXes_=KM(WteqAL2CZ1v{mcV@MfJ>
zGcx7kiOSG?>)yZLmS3rGiYY}E@G+lH?7HvM0Gs-btX1E^TuF^%rqL9w!bmK!*Gl(V
zVuw5l2d31(Joc-8sPD2R+F7ZzVEvVLw_0LKl2u<v=Y_jwZiFILKQtPk(Z=drP^EHQ
zSE;c01}^kF&0r7*s<o$X=AxJ;1fyABNul@)>5`%2LCb_}(!QV!);yW=Dk{ou*BxQ<
zBfviq{u4JsxZQhOyv-)pZ?k)TbG7o?Y8eMDjDf4xEDP^V|L2R@+beGpP^eA#8+g-y
zZ)RWl{^VN!db?4JxAIv-%P>Qmfj<5#a}&(r&A|-QZrq<?a1*gcP3ti%^6_Dz#VW_J
z*2>*;IVq;cv;8u8ABM|dj;R{pQMy2rTf#a#CIQHrXK7hLdkfPZ+N#rbHQs>5bU|%m
zbMn_A>~Vk5@1yIr6h<z@P+Y;6U@6FzdJZ&m9WF?@aUwohsg;H6Ck5A&@Ka+KoP{R}
zqGu9Cj>7fcp8DPIYlQsZUws0E{9qCClT<H65|N42ti82JZKO9!k)!|i=f?FJR&k|v
z!cc$q`}4kjscU3*yQw7RWq9xHTW@*=B#bXBZ?Dwtp&^KAQoZe$tVx-lQaovc*b@b@
zm*JBJ#LmN)3S#H-s0nT4;&a+mN2)tmVEJM&5a+PF1_PhL^N9=3Cla2igy)KvjNOtk
zx4PCIDG?*=`8xbL+Xwy?bADaPzjzop^kJ)2u+f6o%z!H$z8jy7$xS^@Yi9FqK7V=K
zsVli%z~!VCo~ZRI1M}9Z3Yl1~-CmeGEJ$<1FEY{>6$CN3J-qX-Y`}l#ngylOyC0a6
zdYXtG(i$bx`i?jcRhreR(<f2VX;czb`6OQl#oAX1S!=Fz-O+Nla3T8Cbq-NE=w>#>
ztTmgWIz^Sar4!Xq#t_T3`cI>DBr_*Q^~{M5O6MG8Ob@4Z$v<Rex{#p{w<|O)BFTAe
z(a2T0NKJLi0>mgrFszK1m<-Ev7$zz_4@#$xXt|^=-|ow3eLI_0G$mBVtAKU!+Ob?M
z*SE4<C6A+ao7JYdP{R-AcJ@K&8;Ncz(b~76tldvB<}XRO<$H?Ehy=4xrEfGPVkv7}
zf7L`~FXjHKREn7#>@rIphBO{4<Wp19hcek_z`Ik+z`V^K7tL9rC`**=*yXO)&Z46M
zrwmt-sQ4ruYA=m{+k(MgBwZxJbiZ8NU6QT$iKAorAsNP~dzUh0+GpInF%iv?L6=N9
zrMghdTZT2u)*MY*3vImmD{3=<2#BU-DmO9BCYMS-6(}=2>40UJsM0QE2vC*z7Gq;E
zs(nWl^5JKJZcz&9!)dg}=2!k~Y*fUq@maY>b=KbAQW3IB2k^?Xlk^lTPoc<SEl$?r
z@ADaenOQRHrj#O(43x|&%-3wy+OCM&0K<k+r-+n%Trytb^>u=_0Yfy|Q#8{tH%-j|
zP(ZK0`+kDXFh@{$x9FgE+)hd1TiSQbxq(Sj6S^|M4*>YOMUlczQfey+-^kucQ>UEY
zTz|Z!Ym?9QI#lP_n`qvHlR66kY9pw1mY!7jdoc3#>F{kCN2^4ZYMuthqB*qdqh_?b
zTh$iZ12C95x>Hf=LTShhx1!_qEi<Q?^mz&Jp}~5M<bAOYe@OPv($h2anE4{LS>2D<
zvkpstdDlE%`^KyKWQ{t%MSlJ*SKGoNqw^qioB>q}qH8;7c{%YA4Oe;jq<WU;#RA&=
zh|We7z4M>q()|7xj-}>9lxzIjqQ;kpC&f3$b2GD8wo7PTXbj9XUZVvJ(~dg$m)oP|
zL`J!GmoD$X_y&bNQVr-(C233Bfjlu<&{txHN|Ut?ujVMQNnjMyp4Y=P-lBH}|NpWl
zzU+ND6H;Fk^!(W-7$5b7bdC6_0F3&WU}n0FIJ<#&sL7NPE=ziXLb<xENJp&C5D8zd
z!~c`_1ApT^sbHO7u9XD~oVMWzMzIf6l^&F}-jmxgJEzL2vV-BFm=bkHfycF|=f&W%
zr+V6HjE(7!u{}*3<Z<1)-;Y8av=I}0AxpTCLY$oQ+)e(gFp`iqj$6w>Qsl7C*1lqd
z^mwAhBA5a!B@3XOmWBG;ANjM5e_K{O(MWv04tt(Ion37Xk9rmpKCIoi)5CFfc)r&1
zlBypbpy>^~!JNO(@`aS<!TG8=LiGt>!^kv>E`YT-934EKBmoZCo|o^}HMgsJ+!wMV
zd8&3>Pmql8`ufwFfPM;-$jQrxc^yR`($lEQi@m*jPqIY;o8s+UrL8sJ_R&-3$tgwz
z6_-S5$qZJJS)?mYOcvu+>7A}8iM7uN%x^MaN6b$a+Tyc9!<A_9GF#RiMGQCMVj>q?
z9vxg?A0Ua;OwlL|WjfIuxuNUpYFGIY0a?eNRbFQg+Rq09cq8>X?EwnOqX`?r*gRl(
z9vx@R;&f{66lnveBYmd;_7QOE7y~5@r6E@phLOgW7=BM);E*C9!a4<W)QA82M?mm$
zKlmuW#sbDhR8@|Qe(Lt(y}ehh^O6yBRcG&1OFTV9>ZXTCoog%JxEM=pIE$3xeVYR-
zm8SzH?lr8<QvjSYvbh86B5f60k%m^T67AHhW7SL~$*R-wO=i(j{-PR7T5(6ayQ#<_
z)!+a=ncIcRbPG$2#?Oi=%7RRZ>qh7|j8qtwNa9-57QgQHfg*u_-P^lZyN!kl)#$>Y
zlP|g#7FlwjFB6m$kzV!ntEK~9t&a7R=t?i55J>q0!gk*<P8;(HSVlCx!HusTf`pjV
z0(ewQvR|$FD(#NOF5lxlSp$9~)kTuvd9BVuIeP~W66v&-g$kK7OQkQ?TM$81{R5Uw
zP|Ix@N-%m)yV>#ZR4Cf*o0&>~_Eh0$ZCR&R+H+FS0;ja+;rgInXZkf9)ic98o)Pbe
zFRfRlU3Y!XMp=B87p4T9xP&Rz4^uhZA$SN6Q^icEof}<W-+NoCvnTS=|Im;)BySUo
zoO%*{GhS?I(-^QjfCj2IMi>|*OdTYYcemuWXvm`FY}jhPTf0HtX)TK_YuSjJL7P|t
zuhN@1o76U~{DON`{_2}_*Lsngo3>UGAd!a(78Qp?UV}vOd60O~z-tVl&zXKA&F(97
zut11KTOg*QIpnv){=A0$=5-79=UcHqZ(x7kj{W3VO6ybFjS$nxTw>fe9R808ow!Mo
z4c4o1#&v{`x8QorhXS3vQk`h&kn6uK;{N@wOa&NNAO1U`e}ih=dRD}Uaj{YQYGhlr
zxM-U~csP)^8ycv)BN!Z*{$ZFj0*ZF_hQ`gm7QRnz76i6v8`%2)8PFw?od^6s&5QI?
z0wsJn)^@{1wf|dQEcW)~AYo)Qu-zteY!fE@Er!!XI|TiJX*uAG7>v+cAm1Jx)A&TA
zuelzdkK(-uE+Wz4!*Qg2Fk|k0ui^o)L?2Zy<V!;U`XrYMV?%*e#8cRpCC$mw=Gf{U
zX(6}?LBSI5j49)SROS@wR=7f~pnQ2`x-Q3x%Q7RTVup(06Vg4)@u33LcC;~Zbfm5u
z=SPQip)yy}OqM={Cmk2zQdbylXw@(p<$rJQx!evcGAFNTjl4#mM_zw)7?3s$W0%cL
zK}BnFP_}MbdQ&^Hny4>TUO8W`3Z1llyC3w8qB4&E#>=pIJt|tSM}@f_RRa@#)<qIn
zIKYYsP}6w}V~JbF65sAtGZ?Xi<!ht5ZNz05w#H=`^0*AcS#YIe^-X`Bix(u-Ptc`a
zJR`xm%rtH;MbD~YIe6WEE7EtXx|g_;-6q}M6GLB%=k6jib{$)ce6qsCNq39<+BH1a
z8Ice030f3Cr(Cu;#-Haj3I6eymHlLe;Xk2V#H}V|;033MQ@LK?TWQq#8L+7fH4st+
zEg4&*azjZR4$Z69a2r)U+(t9SXCvIk-kywo<HWa^);gY%1pirw5dKGR`eMFa3Xff@
zY*hb9F3+RYWcqYHLz%6X&3{W0qe}VW?4kW+vPi4EAd^Xaq-4DbT5{&=3I&hapG7?~
zFB*EU%`hcxB!kPkAC5G+R8Bl!_MRtyM!&9iUPoEEbDU>+PwW`So-b8vlxONJUoNOY
zUVVU4-DFT+mQ`{tp2Cpc9Y^tNdi)N`iQa3Vhsn+_KlH?_e4fL3+WS5MYKummJ3l6C
zn97qPjh3SKBYdP`^hEDPI!~k~RlO<U-vLnf^hETYV3#{&(7yBSdH!eGv%NH5yuLi2
z=gXdIpV!i}qr?QjO)KG`n&EHCz#S?t47jDY%_1t#lEn^r%gYl&n`pxtG+UFl?#cik
z_?8x5j2r!~n7h+`=>T>6MP%+7YdEVb?QgVRYTqT}<#7PB8ztvE2g=`R!yK>fxA{*P
z`+C5z2nHv8F0`l3|9tb!H@ERTk;eJxAJZF*MmRg`c~zfm?@Nr~PE-9-?0orR9jA*(
z&it1wjq^pqUjGe4)#3|_KV$8DU_8TGT+6H<nsIWutJg_yPdWQIHqSd>T2HlMPqew*
zDDMLJDjh`z2Q(@<Xf?1Ad!<|$$OTNlQ^@9GD0hJv9jxx`gYzGlk@BSZ4^K&XRJ6}&
zyX%NVfyRE<R8)&dsgYKHn&i>R{gV@2VUb3su<d}j847M+4H7t!3qug(Lfkjrd(hOw
z;pl#cB|TMZ^$uYc^rJ^LAI09NSA!8jx$fPAjy>(x{cn@#@#8OHdVB}MCQEThHIJ4d
zb7vX-7o1jbEZvSH|G)3F@-~@2Jo*1ecNLiUqiz?I|E7xy;@mg5WadOml5Z9Vk9(*Z
z|HI+l*csREc=s6pTcc*h={)it9*CW<zY#m5(S5Nq+&}Q|#2_rw;0#&3)=n3TMeVfT
z=EiDjJxb<4)AXDb({PJ(yt65{E)3+ek5UOfqB!+FKChFO!_Cs?jxNa8km>~Hh-jTY
z(8ot|`nUvWzI@vnoxEvm{XYSjngCDmzc(F&wvk7V<|mzgkG9y?QQYAk$?4Xu%HQq?
z&`mvhc(C|p*wK_F9H#gP|BK+eLZ8@RcLW>tpN);GnL4NltVG3}V{gN*HlcnW|MU32
zi{`qI|00^#y0|r(fBgvmdlxj<HQLc!?C{I)PWwh^HmVo@cDVobVsZbZ14&zPvjx$&
zwQ)y8Up$^aIBD6q9f%&!7Y~!s&Te|X$_pBm#d$O{d%h0OOKl%Dy{e+q;JbJqj(E6O
zo5O7Q&Ev-pBj{6qmue;RJ-R=7IC{vwt8v%{hL7RDtbh@Re21}uBv*tE8h&>biYts|
zOp(Xr+Rlm~cY)S6_RTr4peHGxO1)XSBe0phU&9N9J@z%4I3)Hl%_tDLZdG2^^+#9}
zlvmneK7QQlL_YJyPq%^o!9o1+VbTr#lQ?=9ZG-;k!Tcmz+zI-PDoyC0oIHN`_~G54
z-)Qzf0eu+B{l)!lEAUMm-H%SX7U9ozn0XH#Kl<7iKj6=UNB6(+#qap@>qn0s_~N@Y
znxUu51&lTL&GYxOe1Vx;UM26>DXhJ~XZjFjmmBf@+DV>Zq~DbjO|8w!QAQftctdeY
zW_{Xxk_>2zyvmVzw^|1>1<Ro3Z|QRROLh)4uHybh%14MKi$B5;_x6m#)I48Ys%*(J
ziFCcJiKu4Ygwi1-gK8K@fp?_so%VlxKanjVr(Y7BRP-d)(Dikrw@y#4Mf#!V3wPK&
z_jO~~xNxeGpOD}!`FQjqiW|r1OViwqs5aio{xc0|fBgNL>b-%5D8uj8v^>A8!|&JP
zS45cm-#k9xq0=2Tl8O%w+q3kfDVch6np7_@vY*uLNJ=70tuWeFhLYay?Rh!owyXPm
zSUqQJ6VH<}F47f-cg8X9<Gl_xFpvU@_MP!qspR&p@y_aV{#7&H9F42Px?*QsX%%V~
zN*`6L(5bj~ry}i6^}h!bfSMdJhK$5i5YWT7QGDjk4R*=%NV=(2B7^D_H~faFmJ?M#
z(p*&_P0-%?rm8R+Kj35Q7+6~mmo&<o)&Y}Plf#!Wp0zQ}QFSIGSg%7QHRV~fO1xj!
z`@dU+^u<4bRHY?KK8YU9f%y}77yJ%cB>PH+8c7!RjZ_5S>a%w!ETX>Tfm7wDr|LV7
zO8_Fz^Qd60KpRdCIyIKb;^`%SiyYYk#!T;EU%foR(R)+VjCt>2R@ex|WHTQqb)Jzn
z$&LVCd`v6;j8j+hQg5E2K`(pLpya~1hw?#UaI$A@AK*}nmaSj(yjnl1t3>NJU^tT^
zi<Wjsa7wa;h|BUg$Jn6~VuVHF(+_Aq&;~=rKiCccbb4%WP%bJZuYX(1xwx-VRByjZ
zPTCq)J+qN(s6r2Gc>ukX0B1NsxJ(F0ZUnW@D(oJt>bw2-zljRK?jq|({C(|^&VQ_Z
zksKR5-yJaw-yK@qh7Sy@;fb&lj+AJbpY|*kLLGz2@LR!kG<-Oe%K+~TUj4kb81-`#
zepi(Y$_I0~_-_9gzi!$<f2BYr(HS~$>U{^jZtC!aLhX>mDH|B}@PzC!D8j{7RL5Nm
zi9VW4zG^g2FgcoZ=tF=1k3=5G(tIr2|09RXC@TA(LU%t&>8}0;)Q!4Es6SJCEo^_i
zKPRsq^tmTf20V3SuA8T3E2Z(fu=VZDm5<SN3H8^F2F#c4Mx;_dbRWBmza}!J+kcX!
z=cG9ZZ}{Hb;G1Y3vfph5HCBf9XL~V;u%Z3gR_r{=qSK^?U17)jwgxCjZ)1ikOl5e(
z_qGNN7KiM2TS1wUkP(FPEWhZ0IPHk+?mYJMba7l~ux*S^$xI5gXpo~IJ9|TyC>@SE
zy@+9>I%$?xI%x!EAFaswM$ZCo=b28Mpf-;O)6LO7hw;R)`^c6_N5}ViBoFDS;6fU1
z$Vkaof21YN1TX?R5$+sStn-HZ6XTfW0Ld*{{xsG}Y*J*)(>=2>YtKN*=7^{g+e>AB
z)<B_Vqev6lK1$NP8?q%)?=;ADY3Ky5f$C$kxbJ{v+x2QIQtL6wrX{nYromq|r=ssQ
zaLVSF@VN<ob!FkO@>SF1!GxG%P()tzJ|9bP$FSX4bLL=UGiB6J*o=1N3wipg(W@tA
zK8N=%ie+BOxVy0SvTZtLX<ZJb?aebB7$%@GcMlbEzU`2~a3<k!oF8iQ$8j!`u4mJH
z7P9^%7MqC2Xp!b6Ffoc_{9N7*J)bhq<tyagqti&Df}lV%Cu)aoHk>xQJIPslS)#VQ
zHI_nC4YX$Zc}<rcf5VA-M?_`Wn9D<qo!({rn|lWYHJt-)sFk(2$#JfZI(E<2NWf@A
zv(THlv8@zlXf$fz$=)8%BdA^RItt5`>1<0c+@_0pX-S{q&=MzC(i7mG-tE6z@Bf*n
znb#9LJ>O|Lk&=tXF``1?cc3sCc``AHG#FH35@m;(p-W8#m}sw$9sE?o8%yqhP!Y~Q
z&NX|aI)H|oNIz!Srhq!>fH28YR4{Me8LXnZ-h~d$)*Q21vaK8xAl+^Yb=)29wl=AE
zd1EA;iqSo{<&~Gn&22ff8YI6VdUA1=#%H&oUbmrK8MD>JIXR~9PF00j9vZ$6l?8h~
zj{4z9Qo9JLT>;|^qcK@-Z(vn11j0X(ON#ptrjs^;2Xt~Uvg9qWwXUyI9MNEOecfKs
zp^8mxv<$kFZKD+j4V~W9S@cF-mrY6V)`*_NFu`~G&-4AHj9ZtR(?NY9Yz0W$3DAZs
zesB|d->LN*wt*xw+ixRVvW?t|k+Fn)D~CPQIYR!JcU=cM0@x?F?P5d`>_@{P%^I0b
z=L`XADF;x&MfEg6S%t=<tu)l2U$Y*`gB`-J1=;3yyj_Z2V?Yy|mecE1(VV<NdZITN
zHOmsSs!is?9_1&1vG-cbbuqQVY^<z$rX>dGNbqj|mv4MWPOiWDt#z6bcs&ANS7?(D
zP*4Aao_s++U!CAjq&ti*!k%!Y{Wf;nh39vDlMSAK^t~RD+X1%M<D1fm(0n~cOP6{7
zg8lA?#P}*!r^%z#*!4P;8tN4TC3o3W*eE%uw#&9;P1^70Y*3mNZ{lwArn=uMOB#37
z*9??C6T3<n2C!rI(5<R%*cRr8;Yg464r>axZ49yUDmnf3<I3xK|GwVwd;O%}^LDPk
z@O%Ea3#U5X19-@m-OEG|7&y4sr01{-+m?tUj!m{X6z-WX5p}gv+pTS%_*Tb80>tOU
zO?B~$Fmr11*|&TLi@&dtcTj*+5>Mkh-$tHrVDC{Nas}OsD=QK=tAN`tcffCVUlL-r
z+o|fW*Jq_ri7*RmFQ9DR?+vu5w&xVkZ&e{H!*z?<_agEA4!lqzU$x3TQ6wjh8%m|Q
zRq~k^?V#y`hMKNPZ&0J4T-x6;zK!!*v3<VZu4QfP;o9xa?Ee~F;xYnYj1ym96nA%P
z<#*fUFPbX2hl~nmA664-8?94Hj2TZWQ4v{KN0~zL$6PH6IwtQo)F%RidKh2{49K8_
zYb7f#R`7u9ES90lK1~`YjL5sMH7jC`m6d8k9EVqU|Anhiz&I=CjwJHTaHnmB%tt5)
zobWFzUPv;g@=Lt|xHSj@A<Nk!LAMb-GP=}Lm|yk+rBYi7U=XBU0{MfDSa3W*Ers|L
z{%h^Y|G{1)y`a)(BP&@t2w1!2`vPiQVY(jzeXy8pkqFpgy`E89Y^|XSAy;^Ihfy~5
zCR+#EEPjizwp8N7eHoU>kWA`y0SC@0<{3J`2XL*}-7T56E)v@*hwi<H!R{i`Uw;+_
zvhDPcX|~OEk^EoQ;);w`oUOgN1O3bWX6ZUqj>RVl7h!~0vO_KU5?Z{ZUrU+P?I8#R
zT`-!p<;JkLr(mUSWC$Ru>s-TH&sDtL`pJuu)R(>+q~}I$M}t@Fx(H!1>qc_J&eAtt
ztE3C9-?Uq)j+x!cKh^@C`Nj*AV|-;f7?l(HIINCEejHAFW*q>@%=+MOb!x#+dGW;`
z(JB0kME?!_BAyT3_g)}rqe?QEm;Tn9i2{f+ns2?^PoD`@RX)_s4qDaqtt#?1RX-nz
z(|{UMo8Fr#yQOY@=F65?XB&|oH-)jJ2C|G2xqq7jO$IJeCP^s;{Kc74cn$!Cz?cIH
z5^&-r`|jZ3+)GSUG&uXzcbTa7wKR;$k1@2nvvGi<l^X#=Xe0$}gj@zDSnlnma@5CR
zPfnAGR#y`len%!QSG{^GKUj?c+v{WlF0~ap{#;@0z&z?hH*MS13KK9CEIS8#LD@o<
zD8RS4lI4`UD*Ak3Qb=)ZH*39O%*oT76Sj2=_ZPKNJ_Wuit(G*}jeu+N^7^{M&=!1`
z6~}-Q?k*z?@0~sD84Q;cwuY9yXA%?!Cl5vsRrHhNFg+IWwhf7!Zzf8<oo>BjHe%I+
z#10B)4hrWARSSl6@v$!h6j-FIG}4iI0$kTRPo|u&P{9`<MZ>7^ibJ?OhViyR7=bDQ
zwmc43$6|hrcAbyExewa`e~um<JoLpe{(OuUo(q}BbA7yz4)rUHq<M&!{_OOKToo&L
zzGq&*F|%GSUgt$6MO`N@%(lk8R4~o8#YHXrrH27ktpx_~>RO@)XGDDVCMnLHzH%-v
zGerU|E0r-HP}h>Hc8(KR{kW+H$hFjzqI5i|o~ck|KpymML#FnHBNjshh>o6nJ=vQi
zW&9j$Ye&DsgPW=;O}^WpsHev<=>g<ny*-z*sd{|8|7ZEJgzCpaE28*)62_p<8mSbO
z)YxKR@0@^F4lploUSP-Ez-VaCo2lu}_af-6tyx{RCzqt$`Bt~OAu)j&?h+bkZFznS
z{MHq7x(|91O*B9_Yh)lQBuyrFHl)aBGDa1XFq@)Uj9YJlX-F5x+VHfaGj=bK^Q;FQ
zuUIHpJ+t1*;W`!I?E#WBv02)MP_PCiQ-N)bQ!C)6w!D0uR1~=7`!~lgf~!CNIIGT=
zL8Z98WU<-siWrS<sAcvYlXp}IYHI)GnfVrJfKpdD%-IJ2r*lzoj!%3->URI(!vnZ=
z;m?PUVAsAp=3BC!xe5p_9L=H>E3uS&Xx<Fe@=a@?mT$Nz?>Dnx2z*DQ>S)LcjfOK7
zj(yyk_+q7VUcdsN4H!d3osUZfcf#!P>KXu~I!sl;81_;a%ZK^;<RmG=l0Q9#%VD@u
z>g#p!Oy-FXmnu(Hp1*s7EK;cM1yY+CuDfz%RJml3I#Y)9rY4o6omNYveiomq`rrFu
zh_TG;6)ONzZ}$K6+z&AOT1kY#q_?XCa`XrU)dq%%<)nK8^SgAYxh-rawdZ|RJy613
zmD*`tp3%9`o~nz@T_(9QQxa8udHU?xgoa{hU~{%eOz2GGfn3Yc(dZlCR~|ilc>m!Z
zGT#zrGI0ThR4Votmsxb4#y=HFoB&H1C!XYuQzJ@42=>F2$b)P5WTx#EsFD3!Ugdml
zxwWh@SPO^fVSxd}UL`BwfsnWu6Da5hHRoO()9a59s9kGqCBLWzYSi{s07<q8D#6(O
zue@w9@(13*ql3|d2YbonQ2-6cVKlLYr_tbGrp`<i%A8cZ7!0ip-L3}lxI79ElKZF#
zml4B5uX2G-cQT;N6o0Fn<}?5L+GJ3ubbN6%0DF?<*(IukG5ArewW<3+N2{ml=_~9M
z7n~v@YZnxtoA!%T==4Qb#q?7WmVU71^I>UJ#Lbq&QD@6IBu$4pJC+NxszZB(gmf9+
zye$SRiXm1<r|av{{n7C2gS|wP^Frd|cgyIMqvyz<Xc7{*>o{&8WDGZ_WuFjl1D$Gw
z@!7`YlbDSuJ|Rmyr)PJ6HfD9~wpq*FA~SY1Q1vJp`|RZ^UwO)$u#WpNOZub7-$s;d
zaJI&Yb-(qnyU!21`?KHyP?JX02dz~f%=Y&96Pa~{VPY)g_*AWtAHb`*XGgQcCMNW2
z$l{yCD|om@VY7xBLIn4J6UffPY%I2sf&RkY0mamBeGwhW)FHYOtS-)!J&tA+*-*yM
z)})h&t1WXdI|{WO-VOrK{Rq`Ih;fDHz4CH5%yfLl_KC$buwDLj8pGIpLN5C1eu6P%
z3c>WdS);aaUi3%x68GyR4(cTi>Lu>iON?eB9)u4>j+o@-@Kd3=9ahpZj%LSMv!|S5
zhVF2X(P6BkYubH-mOkx!Mn$MM1g3Th>T}j`CPW5yB(7Pap`+I#Iyq;<*vpS}UDyYQ
zfLiC#NAk@xbQrk3T%?Sm6+p<eRfc5_bE6)#XEf!SpdE!X)HI`_*Q_rGI~2o0obm&o
zflv;lyE*sJyG7F){N#Pt4St02BRHzre1YW&>_D0ex-L7(pkt2)=X-)CWro&_y^KQa
z@sHDNwi~kb&~+p(!Ih-n_f;@?4X1H!Z7lryI=4-Ittu1=HeiL2s_{aoU$3#K3dmCC
zV3wuE##ZEST*%QkzA7eHNL1G6cv%%mbdE7W6U%)M^b~xbZ6Qoo+HxzfZj(~@6IM0q
zl@W2$`!++$RIzi}&wwP1bt}28u5w^vdIe6e`(*T3gw9K#bm;dWgStA|^W>b^4NSGm
z8Sqx#bftd~vrL!D8c1t5EWF8DK0d}EHBT>}QyltjXqt5Ft8vy~q7ybU*j}RcdB{I!
zlgEKBvdZgRt+|up+y>$3o1wi+McM0iYRT6cfqQ;T(DldT+LlujA=tiN=9D{z;QYWh
zJ5QB4i^?ZT%Am?fkK&;d)>lzmNhdOsU1>Phh=iGRn!x{ogn(@m(KZGSLl)j24pr0B
z88-{Id_Jr?ZRV0+VP*OW)yQMc?3k8E2Q2xm$u&6~7l*pyxWF7Sm}6>Mzyav*GO3N`
z6PiFn2`z?TmSlHY%!CZj+!(?kjzA9}ZOF#4+XT8D=Z)a4>>fYbLv!PhQd412e${J&
zy>7@-SLa<hd<^WNom)itZz!)UoY{I9F+!n)TBRwux2JO~96lJASW87Eucjpq52m)_
zkddF&%|a$r_Qy*`bXWG^7E5QZENP?2f936SSv&Qn<;<zwr1n@v?x2Gq3Q`ClOB31|
zV+$*sggM8_tM=QyYZ9X`@+PXR+(DLDJ@noEQ2EYA*-iE-tc2cHjLKP4ZAXYuX(2-G
zCQWQ@fv08C5Cs4u56G5dpj*uAY*};4aP}R}c401u9*tODo>M#6Doi(9NSOZdz=|9+
zxf%{PTxQX-Fr1aBWDY&O63y{#T@g_u0&v0sb*N=3+{u9zQwcZFKqp?V7eFLT`0yPW
zhQKQ*GuUz|7Y7OmC$}n8zyHnsgAo!r!)I!$r#MV6!^QIlDXosq>KLiD%t+f>TgXD*
zAVNBa^-8Kzz<-Mfmk~aj+@*(yqi?RM-|I-l<;PBdy8()m_D5ztcj3;jDwP<%e8cgL
zMQ$eaf3jS5@DJnNmXo7?w?FX5=l~##vi;=wMjCe`8YzbXhCF773pm2R%@z$ABCg49
zbAPy5hH9HvqX(@Cx>5k!7EL?$^T?mc+^lUMA8?+6QpB}@@Q$0PF4`E*L}PlP-7sZz
zo^%L8orAPWOmy#-GjO+tmKJ_)(zHfJOrCb%ch0nFH8ag&zzoxriT7`WxU?Kw<-&T+
zEFz>4x<GxKQSj}yNw-zsSJn1U0BuV+6WzP#GcBR+lqG*AvoG&QpTq2P=H3xG{pSa%
z3GrVXWpbW&0@67|U6~@>`4T+E2KQb0Niy@>F0Zvg0<(42vY`g|-EqCp*MQF&*@Ih;
zj9oXHV`9|8S(uKUo2Xu!OJWit1DpTkxNBXJSC;^4HiU209N4mXjhk&)S;id}yc>*|
zY3s-ZfxfUi@Yh{f%@<3Wu55GKDQE+^+qN63Gpp{2nO==Vt~NLfvOm?r+%|H)O^kcc
zDvLefV%!51wHNX-jAThIXzfxgfb&MlLoSB+6KYJ<QWv6-sYqqyDEK5ZF__%#PmV*a
zG&H=6RJ>9wqox8>flgmJ)qu1(5AlT3jUrqp5^pfWHKjg2?^N@4^hG0Q3RgVn_#I#B
zU@Q4o31d)y+BkK()T1{j=!{xUDeA^}kDaii%PQjwH40|ljzeq6DSUo7*Hw)}p-*+3
z1|F1wc^ZUD8OB9dvSV{-wXpTJK1zRyX=2dKEh2o_s)O%dAe^O@ODHrTuQ4rrRBCQ5
z;6Wv&Eu^;9d2~5Xex#k(wN|Fcc9N_hD`iKLsZDHX3*&+&i!oh7!j%YYa*i}R)TJy9
zN}D_;XDHMWV7nhYV7!DR8F#9F-&Rjr_}lH34_M#nr{s>cN49p>z7DK#_`qNV{=R9^
z+127*r?CPT0<t}CPR&$C$*?q8TJbfBvc5StZ9!T|@`#h<(JXKTm~{bZjWlN>8}Ra$
z_F4nH_s5pxeCCjTNwaG7=t)sTmw21&Nps5HuC|mlnTeCJjZQ&FLLLrDc$FV&Iq}#E
zw^I0Ek~Jkf-7$u%fZM5*Qj88BVLIEZR8mZJFN==CZ{UoJ1_J><??0fQV|n$A2KNsr
zIo?tD;1TRkM3P6?9#FuvAC@9kdA!oE;KL@HWYePGpM_~4o$4wtWwHM#3v&BOw)JQk
zC<Qs;hk1g1Wq*IH&=||Uu#Cu1J4cr9^lyC{(s6ew%{Nbv#cx|^YsdH~1DK|)(x^cb
z*Z6Fmy$gFi_Vn`P#0&wS58TfOC`?h`ap#)JRQbCk3onmZH`4diUOGeD47QRP(+XRK
zURuy))6D9EF$bM22_V}};8i9wm<vX1Z@snD0;^E(A`fe$H&!%x*-ysBq0E0aRw*Qn
z3<sk>FiDrP92pGq*|->}1m^=xjta+rs?`36!%1<33D1M#h!UU6R`ZazVP@axDssB&
z_pz&f7|E_O*;S;`x?p^6x&q*L@%=}vRg;#Ty)sF$Ve@OlBa@`vj>qO~%T&%bjE_~%
z*@h||lYkg4YL5(QVTlW622PV=y6~^E{RIA)WNaBvF|AR@Ui6csc?wvwDZS(x_xo}%
zBofOH?I$gqs2DzojMa4rnr}@)3awya80n#G$4Wj6UuTlTcL1uwKMLI~2glr@`=-wx
z_2Bq;4xEJY1GlmopC!$8wCC70j$mmH!)ol;aV}N%Es9WBY9rrxHL`);JuSmN!uB;^
z#hX&4bnZwjHb4*j&S?&<fW1->B(l`J7}j2gnC(zxRxKUJ$*OvTg}OQV&pcj-IQ~fs
zQczCMK%<vMkL>z7J7lAlm$2%r$S;UBpai$yVoDvaM?>BL{NKsf)eaoibBqgL_7tlw
z8<0m-!sxanwr2Xk$~{Biws21-99CYo;Hdg?3smKNHht03bbUN9%;NnBr%-JK&asu$
zPpztU${C*0X;KQc+i|hcqBCH2nlv^6DT=I-fJvgtXQ|9VG@+f?%-_!YfoU+v+Muy=
z;6TSY*MQ2Svzsq=s`4c^ia0qVjUz^IqkC&sQKol_T?p($JN0y$W2PdD4^g&7N%olu
zH>H@_Jp)1=NerpHb0q3hy3XWmJ+md3m{iZ<=!3%$?%(YT%K0Fd(AK(})mSQfTsy}g
z4nMS}0e7T`x`mP7;JTPt?m6WR+low0&QBlGT@$WDw+*<nHV#&y7}tz+@qf686E<}u
z4~mtiWXV=Y*ar?*(aef7@qWN+YsQyM_7aCqLVHPQ=G=}HRGBbw?C@KX+w1_-U{J>k
z)j|VhZ;e={u3js{|LGTun5(szxcfhG>1p7#tdk{8P2_4*!4<7?U$u<QA#01Y?lJof
zYNv>8ZS<mYpNVTr+PJgYtF|+*(dR)+rw8?359-}==3Mt%=g!$Fgs>x6jkSr%|4ZDn
zcD0RU`BwyIj#p|6#xf!4$QCRKc`$=w7D#8eJw6=Sl0g$AIg(5|#QyJlAN7)K(@F1#
z{eUTzs!H{|b>A0Op?Df=F9g<}1;rZHj-D(O)}C@;Zb0n>iA`8Ms&lr3W*-zz&y|oq
zRRP9{He!(uqxliQ5J2-Ijpi37ns0C$FMpmQMxm=j2U0|Qwwk<bL;wv<LM_<+Duf}}
zwyR7%(ir_KVOGX~0!=TjQGRGJZ!Saam{-#Mi)a?q@@0J6dM<;bV8?TRp5r=~U6I@X
z#C!;Wl<ZcTC&~ZOPAHGRz*qtL{e@}MR5!W%BFCjYr6No4yWb&G@j7no34&>DmOHwq
zjZvYaIRoEC<!rG>C1PD4w4t$GESGt^?Ml5Au9gVFV=CKqRyjGi<LpdjL&BgR?D|(=
zHT25=-<Mr8{$OT=F04xmC(I*&r3t)#KPQJWO^I|5RtN73K#=T7D;Y*3$Kcn^1ITH^
zJv$4c_CasfpZ8{@tpy}%GMvGi*2FpLNV^NjA}y>EwOI16r9DQq**y={F^y%w7}h2g
z5{#G2&!IhbYuPje)ZVDg<XCEHtc0xv?H4zMQO4BSF7;r?uEa)awc?|&)so5<!+HDQ
zmw4}BB>d|3!hS3^-!ur@@zIgzJ_hslv~5rOeGi?vB*Vv%JHUT1-X&|k;5QciJ0}jN
zOh(f;7e~PW+Ks3zD!=awgcS}rE^eAF5-V8&uxbN-BDk8WPsk5fOZi7AjW(3>EApXw
zG!9s+9I6$tRt3BH%?(SfVowV6%&_#IL#<NHM-4tf`o+pjowT_`ZsPO{n&R^?*ah;D
z;(WxK0Sx<al9X`keg7~xeRK2X!*BjB<SCu0i;u6)&tBhrygc`J_jlb-r&l*ugV+Cj
zbA9uEaCI$gBF*fJlk4}JvIm!{^xKoG>zm6rZ!h0my+@<;R_pKo8q;?E*ZA-I6~-k0
zf9%cv`QV-7eh7&TuFvFkShv1OP;iV^=f6e!XRHdQ?Y;<i%lFZx-gOS}wZ}?LsFi-4
zvm1?96tNCrugD<(Y@`Z7`<ZDIQKQQHmCwwxBl0z!lNH*2S`x27F%+S&;mu9m$k+h#
zcK5o6j^nFrrNgf3@Fx&SZevjbuhao_{CSm*XK;Dg*kjU>mCqU$qm4X?*lfq_Q^%K|
z;^Thx^Vj^eh;E6_lXtza##5q2$(xo1S&G4!c{EMl!nhQF8#AtR&F(Ieq(n7Ueo1tL
zd}7(4e8OSB6(88nu{KLREtOQA6=SI9N&@K^hvL^?2?1QYO<+=JZP!PekcS+$GQ{0W
z<8&F@Y{N^sjo~idlW9LOSomU&xREzmTx+7rbpw0#7Jx+2ld2>~Mi$w?8B=X$&}^Gl
za-s^EXwXBwCg!V;*W18Xk|Gfr-G!KEIYWj~j4t6NFSR(6m>Apm>-~Do8dqOi1IiVX
zdj2%6{U8x@Qr}TMt@<eP)?4k>T&J7U%sgkfD{GWP{R^%VI%Gxz!)hcsS~Pv|Osw-A
z^l2yKpP1af!gw*vN75dOmIW%eGvxplEoF(i&;o(RjHj;jxD5nJ22H?43pdldh^841
z1<!ZduPxpNAxhddjp?F(V9dBQyer5Fg8h4>xdJ@vljSmMPx`gVH;AxewW>`Ipp^P^
zN7{#Gt&grYH!?PIvA&1XO?%fg+A==doITYGqxesqw3Vj6Ui~~^W<@>;h6(S}u=GAk
zGp0f`G>%v+T9px11kRW~CPmXVMN$*=--bHq*c#})O)8;v{j_BZGVX<#JJCwtMUWf4
zfK8nn`np2v)je>?=au1UAZe<^`G~4_gw=!ElO>~gh@k@-U$#<5+C3C#gfKH$dL?9#
z{AedzF6WAHz};le4f<laobl4`Fb#&!D0topQcQ}1J3*xOq0ktND0VDi;xl)Si^&z?
zFsf=$3m&wt+YDJ=fESQayV~$Z33r07NOpo5BmRygCn_AuOtIU5dc)rEaHBYuYVwJz
z%eXV<DWYQ3#)3>*$WrdkTvUaYGjxk_G!|&d%CO89TTh<aO2A;5&G(M9>Og1grmmtr
z0pN*N62ulX_CEGuxdc>A$n_m5l+i>Qz%z0%BLqGH3u%~a-ZVZ*I%Rqm8po-2mP}z!
zD9b#h$gLWxfn=52(|Vz|p{wb8_%EkN@>iiFG!}(aW`I5B#>_a1;hF`3`QkWl%nqEI
zs;Swk_vzEN@aA#|vACVFB`?`+RhoRSX&xhi<Pw>$7z;+k0!?OPl!9IgXStjw6QH;O
zK*Z{<;d5PkH%v!p5y0m_(C=n}qJ$ES{vd0QXBE0bGsk9L5ecx@Nq$M3M?mYsSwmYP
zuN67R;<Ewf`-$dq<Fh2X`L2*9JN&_ovzWI%EhLyP1bE$U=BsB94c~H9WYCKJV!r~#
zi?_Pu|MkpGD2wE%)|0sFdDVtI__85einm??>z$NPJvHwE^d~@ED1hR<Nx$2hz!J+k
zWsn-TLg7x1yS@h$UWo(!E=+k2gCGJJ&PL}um_~CyT%)|z>INc%f}t{}OHQnP8rqRt
zw!4n#tK^fEfqJvTrYR1{*6N<BzJbg7`cM2SZR0W0<S1S%X(DAcO{78!0LU~G-RO5}
z=*r~t*=g|dS5HWO0bEd~p@zgZ*#<3^&*w>eVp4OPeU>OatW7RUMC0p@P&#!S2H@Q%
zWSd9~O`s;2|0=XAv#=^LCpUKpVdg_`Bs7N#sSag$1Obd^5c2sJ5eunK2asoH)Fg6q
zC82FxG<)gMvtOj*;JF|Vp?_B)`p=P6u?Psf1xccXj7f9o2}Mt1b$(QCi+j${qb(&(
zVKh~<LPR7`8M3ae&e1^!;GP!*n)J|0E-<Knvv)nufjR7@bz?E~=3#1jtLI@opS^f&
z-Bvy6#bRyeJh9o7=_^OIQR)Ga0YoMNhPde&0%+cAO^kU$!d{?4m?)Syic2Yw23ilA
zTzlf8qX<VbD0>*YI-#QkKX}E-CK!sDUp4UtEFs7ep#kZ#uv0KPkyt8f#NZrNsW-W?
z5*W4=PbFF?l`B=Ud`&1-NL4a&b2ZmMpa*v>%3wvV#=TgdJ8iY-{ZZ;rYTeGTP)3I6
z!3K44*w_^Bb^PxT_E?yLtGq6_%1yylwi1!CWuPYOJZ!aK{>yxp?4vj4-M49$mUq_I
zw7RpTV>5<>P|4Jmzs|3LW`j(19#rqqW<sb4Vf#tr6Iaz@@|nLts|nxPyrYiIW?{wA
zr{Ct10&nrzTRv)OA%yvsRnZ?pH|axeQA1W#!S{0I(?|k-?bk$I1&8E-sgc`iDeG=t
z#5&lA*9b{*QR^>`F<&@;T4a~p9>=XNXbNZBmjvO&-jo-nu_m)kYckuHhOHPGYJCin
z%<-h=h<bDE`3Ju=@`%qNDUh)vB(!-^ZF8$9?4c9>Pkz!>^&SESrdrla`c(^wHl04o
zp}x3NbeHz_R?-YvH4S($OO#kV)9EexhC$oH0A(TEc8if42aC4Xi#53$%TVf5C=e5z
zhwD$8nc7olxeV(%@<)dV@TcpUtfFgUeVU6Y|6glhuTd98S}1!)p8;?yEcW(L^k_(M
z)T@|YtyX&cU4$XxEg&p<@Ld^N#lT()u}hT_{bS(u9`#&2!dw)?$B|a3GipoHyxt%e
zR^({SYat$kt$fMN=cxYNPqyeBzK*j0s4SFQSgNoEgZdg3@vgEFl1N$7L=33^Pg814
zOG;I2NnD+W$F+l)IPG0)@5tKqcXxYR2bDLVg3@QMBLl}qOurhM<>;F_sTl?)+pPl0
z%it!CPuXPNXG(#%>?scy1_-YE6D);9CkD)()5qF!OHwJSkmED6cTUWdQeipvP6VL0
zR7_66%6Si6g!9&Mf?(q4SrY!0?9!b(ZWB<Z?e!J0AJWJo93Ayhm5We)o#+m_yAIwQ
zI~^9|mJQY}bOy)SU@kA0rNKDvjNtsTY>BT3U7k=rY<E^~m;Acb+mPa^GMKGuZUt*x
zy=Qc5jE_1_18UmipO~6x_BHxe?s3gc^TU>d<NEB>ZRU@HU!Qf@jZ3fb<~cg3Y;5kH
z)6-zOfzv65l7oWvUf5q~Qy#1UFnbsR{p?O<;!!5<f-ndcYFTzNcM#mcK}w_p7WX9B
zh&$kb2K(d-%#PiudvbijM2|n9lmGaq(>YMnsU}eSL5ZDX;pa`7X>QqxJkv2u@-6}}
zOS_-dWv2M@KaE$pN)3V_Io^ejxR&sV#Ve*<8gzOC#?6lfvOEByOQu%RSwRy(z6Ch6
z(MQ^vI*p(WcGmIy#O2`iXt7&!3Pbgd6i@F>$bOi2Or2qkENuhR+DR9Era*-x=6)q6
z$4eT24bu^T#A=xK`yM*_sfJ$L#s?s3=WB31YQXhqUwGu8!4{f$!KYvc*$~1bhP}RT
z=I!;iZBaal9T}O>oO(MlNhC$7&4Nhn>v1r55#gCNDau9P>k#IHU2XPd+(abh9;QYF
zMA+P=8Fq<b6t-%QgY~9x${Ye;Az)gPpo;bzUa)|6(==8rXsj@Z*J!M15DLY=Kbh32
z0ru%rd+c<7^H8SfBT5iYkIwfPh^I$QJjFyjH5eL45$@V!8^}6Jq0wKvjhr{fHO9v-
z)_}$>e{dg|U5=@;Rd;FKAcQ6oCcg=Jllb;dj{dKhLX0$pm<N%`Rntbhl45wmn@FO9
zPrr)*SH)<H-x+1~A3_mbf}9aDZs2dg7hJ%0&Q7JiGO?fB`{<8X21lq?&14n1%wLmU
zb205Qa5mU@%9M{!yPs&oibetLz8Agpn;)$?_FXykSvou2Zir)l2myilz&4Vf;7o)O
z5X!hpNNY=)Xu13l?z8b#6_~MJV2UpCG!si~upQypqQz3O!OT{`Ndo|PdYN`>mPufj
z18mD!F3xO-g!gN1P&J9duE--SRuCIV&~J$BLuLR4SC#ZVNeBDpFIn2>3ji;YCre&w
zBu_R@DL!)?Gy_s7J|N2vw(r)RT04ZX)pE%HjbtkS_g{!B;*!s*wXh<E8CC=qAH&bg
zlY&IX-ZK<+!l5pqsVzjz1?@pg6tZk}?o~xN>Q<a5B@sIatt_}0F_xN92|mRTLGW}F
zI)Df(q!T)fw%Kd!^&pk|Mzi`*hCop|p$y{N#6cvPLdrW}cUL2EWiX)VHW<~pM5UK}
zez}+>+apm}y3DW|4ZRT>8P9R9W_XMBRflHq!8w0$I5O5_EN}ifEU0*o1{84uv&iBq
zo6i_5qcb8F2u}uw!DDaPZm9Wu#!Gb@h2l0^z|GUVjQ|f79KUH0BWk~<r#yvoGYx)^
zhSQPLAhP2+PJ0I}JPNg_J9Kw8w(kH9<;;ey<bcZV-Hia5-Mj0Z9CdmpdwWoWOGCAR
zgS0!~PvTPh;(QO`Qv0GWwU92gRiPEqU^o6PveV{z;S7rv`-o@{Dq`B-GYqVe9R-bT
zq}<87Y3ye%1@7?Y05}l(`$BzV0Ccef1fZMXzW31!iCcb7krqZgom05sN|I$8&-MBk
zo!TJ=F?{BVAPQc?dPs2PsRu_06a|V;A&@S3)s5=do}`!&fvjIc!9_%e>OS~FN@Ykl
zoJLiIr%5UwC^c%gCO5r;B!(9=WUb33`q?ydXblY42ljdsl0&36(*s74>u)XCdq5UW
zO~m^!3f7B5?tTResC02_Lf;J)Xq#MwJYDE?l;?!gE)L?LOM}1?q{Oe^)0{!}ZC>S^
zjVa6lgn*z?B2$p3HCuw@2b67eST*S@f&@*Mp^bV?K5`<dQ3gGMhC;5AP-Cu4E|(Z1
zYdvZOm08PVp1$m~GPIB##|(T410#Tp`7*7l3KzRUgVUlIdAgq{P{2Fmlpk#|us{!Q
zXaZ%OjiM*md)p#DF+NAv(UVLu3^EH-`#KbtJH6ttWZJGr-hvvWrUInqaOs#Jl?;M%
z!Nj)<(VijHNb5q4)D&tIrZNdKpPsUr`C;ExW*mX8(lx~0N?f_4AV*G(GM(4*`FvQR
zOIT&El#{;?HwwH~3Pb`w5+&JcDav<Z+@=Lkqo^R!EBd9<vac&3OsKy4x~7(u3*H}c
zJ3$%)Ik`;f_Hu(mUKr|;lI`T?LTw;zs0{%2lL1ZbNYw#&Ak_g3UJ=MA(ecxeJau-J
z$4h)4sN507AAs{qs9Vvf<*6m_nCLloaPxp`=8goQhR=UV+SRDu0Lt2)YQSEbjE>W)
zoFm;2!?*2I4T+f0hO5=Y-6#Q}IUp9g;b>4-`=RAE`}+(Hz_a5DeV7R|f?~ZCEH9fK
z2`w07mDPqp;}5aYMjoy)a|8-pPQASfRR4g}V>fa=X9G#99a%rE49SQ$VvPC5LBM9-
z*86-z?{nSzyx#j9d(V1GX7MgMLR?pn*RA!krgY21ro0w9QHS$P4yy$ZPSzg5U9~br
zwnj9mX?nXTo`}PgOH@26%k(z0#gm}YGi}4g#F!&^aEPlRn?R#aLS0}p230jMsFHCp
zxMGwzT#)*F6VWT?eivH^ptFn)kOc*Su$d(mVwsjf24Uk)FXu~cWzZ24DWLuv2!m$z
zZo(O~n|rei`e5E7kVIM?wviF^IXfozIhDXfO{9tXQp2KnlNve7-G9E0D>e&jtgEq|
zltP%<@ShJtg>7H4!OV^Vw3VP7H|`?w^c`d4x!+|QKH?TDH7oUTBj4a6L}l?*Op`#7
zuUSGx6Samvi<ekjpgUAfqCT2yBe5S<&S7f-_QJ~^G3{I;^)e6JMbw1eDN0=@^`^rd
zqe+t>pvpB0q5j@6^!wma{v_J|6K4gg3(|>%iP~^5+Na(ADxC7T{s?rkFDPOe*r6UL
zr7qe7su~aAa%uP|6*{j^YhZDkZ7oHB^U48Ho~Tv-wuBu+Z=`SOHGF$JKaSz_8h&ny
zr7`*$P^vIYz%%MjnZ=gc-n@xc3*Hiw3*;H7aZ1&-?}?+P`A7!uLGxzTZQ%2bHt+&f
zMn_4CFixEw>)qO@sD=LLB>p^RYxZ%|n%#(aKm<rV=7H4y-^oxdRN3W9t$#V}A;u#Z
zDeKU=ajnjXf8p4Z<<g!g3inqgaOHl%J%z}CGn|hCPpuLZzCkW$Mq$R3A4G%0^TbiW
z+W0I3cRo%G=Fw?bLk*K*HCiTwv-kVnb8WVI5lXWu1uu2LX1))PJ-^d*xo;EeQ-NGr
zm9pUj%W9=>FE|s#Nd0%{o`vr3Vemc8roMOBb+agg{|D|k&u6~p0^H5<@cLah&-?@T
zw#XOrn^`ig{Ac2!NN?{d|Iig?ZO>QkTa&+OjQIDEZsha)Yf`+9khKrT0Eh_pJ#-*?
zxb=T^VfC`E{{lW=Rr&pA|D`)Y4xsOKIB`Q$U;3WMU-!K(a`b)g06FZw_sspWh_Wi3
zB`^xNtl~I%@V)1lg7Ny^3%6X{``)j}8~W^fFWvDszuR$9B`jZ5e%EuOEcUxF+QRQ1
zxQh(Xh|=#q6RiL4p_|})805z-gM7bjkiUh&mx=xTJk65V`90Ei{@V$Fd`h|$Ae=(S
zLgq|9xC}baQ&>y5@!*vR^8JAr4n{t6Al%bM5n-2%tTO;ZRXR<R0y7^lwEB2P%vpE$
zWL#SC2L;5x!9!A9BXjp;l9%*zXPuO3Mn8~*<)I%)KHRFpuak6UalqlydOeHo=lmN+
ze~1LM@ERI?jqMRnSJgd@zLjTL2p8}jrUz3a`6)?0bLxK**sZ6@E&R=@2!4z70Rt;r
zZ)bU4Snt!a%5RJ4p4!%rZwuCa*E#<swujESTHIUj^I7!?Km^=?kX{rPOd5XYEJF;o
zOsq4Q*2JPkx=biCGe7(zhmoB}r5?{YJm<Gw2Y<U3%z%0WlVGM7&>)ZXBDLVYhyg>u
z%>e_wK#L1wj%24*#$^=4A2e`@rWvJmiSEv<t4TCNli}OUx=QKq&cbNs^mCe&6H2`L
zMm;yv{O${uq!XjQb4ABSKQ8W7`Wkk^HEslcf*&{{u<*YDY=#xV1>409rw&PD^Et5l
z9&W8ye9(DQ@UJ-I);m1lID<G_Y7RsfMc1%P)-{}E`c@7oOax#5XY%c9Uc~P1t8dmP
zKHBi1d}a+Y>r6m2ZvGq~8K*80j9Kh=!y=7l3!`6Pv-f#S=LdQWv;2`@f;Hgb&GOrH
zG7#T&cdr&>>m-h?a500$jjdDIrg&bu)|)Rg>qGLzI>&tk_20q&cU6J;m&tAN2PR;}
zZefH_jI%C)U^%I3Lvuf7QSogs$2^$L>h3<N%nsO=L*>b~+}#~oBYG?WEEdTt!fz{g
z_q(;C>@j2j82Hzs`#kDUPRjJq%5nb&K>6l|2)COX_I(}^jJQET@ePWA`~!fIoC(Q8
zOv3*cZUk@x5-%xn=N}vZSOxe2i33Vt)*-=qNW7o~W<mLfTeJ0No;v~10*M26!r%qc
zhZws3eh#S@oVvjq;NaOy`Gj9OgsRvHxXQQ>hlk<@G1@<T;l==dZqn@L9#10Vyu_TF
zd@3`ZdotrI03&!l_+RqAg*|OuS^KYGY?ILCrXeIvL(A^zT3uadU9tt_QYZOn>VQMs
z045m76@L3SuO!<tw?N81&v~BHW`r!;bCE}*k!+2^<9pI@+?`X9C_%HJ$Hp1kwr$(?
z8QZpP+qP|c=8SFI*3SR15&O3H-q@#o$*!u-?9Ql0R8(bs$+=yBZWHJOi6RYl1OYmw
zM9`brxXHEe$Y!fEAgy3C+5vSn(|)>k-`Od-R?Muf+*OJ!maX}%BTJF;rS+}Ds}WX1
z`y*Q%tV{P3Lmr>c)r*o60~H3Q(JAN?>)|o}t-F0+v{V>~GZ}bPxLGsoS^Q8#@2lKE
zCgl?cOKoL)Ozm}0t9<ipvTd<H6|)p1QnX3ypp~>%sM}eiD}}?!Gb{{wGmk{VMNZHu
zv8E%%oo9VM$fc{F>2V!XmwzH-BV0}%Tfh*#Malwe$)wO_>732^b*-VjYdx>gb4~Lb
zJbgaUrx@b}Wn)AkRU;f&L{uGYVVhXvFuhHxGt4%Tw6>S-=zwGC)I=3Sdp+yktT3+I
zAgn8%fwj5oqo{M|r^4&%Qbd<XerO|8U^FXuu}=DQ6m6OL*n+lh#<^ZU<XqGOY*R<k
zX=<Omy-i|zWYlYRL#AuVJF(JzTR#+JLhyCX#YK^dZfL3Y8JfJ7@x1};SKV9|=J0aV
z-08r<{k8^J*X)=3`KgoS!vRot$w2qzFi@{}Og^=GDbwlYw~67&ME>9@d(>Sj*#jGw
zL<_*E2R_yX9rq^XH^m0P=nER>4v+u9_gjLEdn4sP)&fYk1vc6SAM*moe_#VhzX3Ah
z1sL=C)$#V5g8x<fHRbY~+5tBD2E>1e1xWV=8vFc%f8XmE_lC%SJPD9q3t;pOfd3E*
zkk0peih=*Q7szNEZ0r+~|5y%?(HAW4jq<k*(CGK;eb@nHy!llJ!hc}#n_Bs;02zHF
z;y=LpP3Zv|Z3B;e!vB_ljd~#C-cb3EHvrOK02y}x$39{Ck2?X<f8E&u9`nM(e*pgV
z=+_hu|Ka7=BY?3_BL3rC07gELF_%$+V<|tz12BRU2%_6Dhtz^$rn%?pY@XC3&BX+F
zT3^bE8nl@!=eO>gOsgB!LoZeGyT%)iP^Tqe{==PCz$!bEnyb11ItRcH{A$_Xea--N
z@HKrbamC&MAOH4MPg~;zf&bHgmqL1DL%BZJv1}xMRvIY$>SVdbTyOKBbp{f4b4R4H
zHk`WT51CRhN8e-KD2EQelmaYD)x!=TYw;?$xD{Q%Ra>DLDpwMzS%CX<TY%>`e&u1B
z4=ZR3w97`K>y9{AogjC_FQ`6V&wT}*VAigF-W`aRSfefMyU!C(dws3V?>#KPuY-7q
z&R%r3%iIt8mzxLj6?n&tXPPO-Pm>M+%ATX)bS{leaC#XrmYeSe7yP#xK;k`Mzpmd0
zlZqGL$1OEn>$}qlB7euG3vUZY?nz;k0I`ETw$G{-2#?}k2>qum8qSZl9m&;!>t%0H
z&lzAr*Spvt2W8m$KTk_?y|UsIx|aCB*iU#H>`w~xOxs+_;{|}b1ias8sqYUOxc^tL
z96-=lXrE7dO934jl=)RMpFzkVT+Ld4m^Temr!;&@cFLMYy2|9GR(f{o+6$xO#AU&h
zg>eZ^F2mP17E=!n(?M3A2~(l{OjPB~)GfBjXWQQq=V**+P9{xSruEdRTdb*5ZH9vp
zL(vy-rT|Nm$Bd~w|564srh{eE5uH$s7q%(4Q^o^^zavVq7=ye_Ykuj)S|%wsX&UXO
z$Nj)e@ObI&k3&-j1WdgaQRywJ2FKy5CdcKf`p4-meNz=KV^g;42u!ohh9*8MJ&X%;
zRwlY;WK&h<rBhXwrc+MMluUHZwo_JSCsSSXJxmJ=*e2iqXw%%Qm(tc2&!?=+X_+?G
zNtnE=e@DMA!&6w(h9+ts{Zss%CMI&0jE%L;X&nF7r@EHBOt#H&OtvlAro8@jOnEH=
znedwPn7}pjPSRWVF_K)R7*DL@Oe!~drf~ejRX>*ZG)k}4(-<LT=P*fcRAMbyU&%Qw
zt$|IK`n%{P8Y<Q?9rFa$xfrW1#Al-RxKVhZ6~GnX836v}$Aidy7HTD)$3RR%Y)p(I
z8D;ntWE}HY8?^9Rk~;@nLhL9wuJ$$F0x1h23poQ(0kQ)z1KESb4uS^40(6yz_?3eQ
zoQmEy(g#`Se+U&GdI+9iNi0K5Lu^gVn*f)9^$W`ZOu$XxO#n>LB6byLZ~jeiES?hw
zL&1QNfSACT0F?kt94a0Y=cj`tm=QN0lty~UOi%_XAv2~g2!}L~5w{%FMmofJA+AlF
zDvn<aNg*R{E+~nl_#fRQ(jsPp|9caLc)EYm{~^Xw{H-v4g*uT-VQ!<e%8%?U*1K~N
z{FPyVQ~+2%ia_jc%5KbV&aVG%{BHPPaefbB2}lWyU)(&fcoZcGMjo>^v9qM;zg5hp
z$t4|D%532buSJI#tr_D<^QNrIlm$zUR%SaZju)Df{3Gs`tkM)FD-KK|a)cyEN}AEU
z%qWY=@qb?-Qu4MOM5^<(>KZTV!Mm0A8V&zn_HoI}6P9A37!QAol!n|*BOZu;uQ1dO
z(Ls1n71>G~*L+(umkmbjqu5E>ZbF`bors;3otT~6E&r|ftuQ??K22#+P*GHoU^pO1
z(NS!X_gK65c~aD0nVa<f#NRh3=?}CM;<UB+8&;t(HAWN~mhmAxh-bw9I&q7P;>IJt
zHR5K;sQJP|)0zJIBek_h5-X2HCT<bzaC3eeEAmRn{<^$2R)nRHy)}8wf3-1C$&>#+
z><|)?NAbUF`d`1v|5&rZH{CGMV^OJaB5!D<bvy@^b)J3n%o8|7W7X_H&`eThyz^g1
zNPz$!x$j@?MxlUO;89$5GT;-Z-7MIw^S(D$yBYAA7ykp8tVn+)EcW%gzPTIl7=cn4
zPE+~xIs7)lTL_;&+DOchnjqFdxp_i%LjOo0AUr_40|5JJ`f&hndH--DawEWi!@W7g
zXb_SkDMP?Pz(K}9grOy-v4&eFuCj*PCZe;2J0`v|h4Uq*v4wjkuCj%zHOlTHY9s#H
zA-%Ik{2vI6eJ&v{)36(uyKI6UrXkmm*XcjK82fBOT`@t{kT$e|nWA=%D4X0MY_a{*
zN_I>zHq4^(|8Xw>>mV%;bJOS)Y>=c3oQ+5{xV3*;$Ieksthjf!-LRC?L1B*?Uapug
zd&J2{wD@bG{hFW`|B*@W+%Tq3&k)R%ghoZA(JVikxqYdmUUm`8%ZA-nejUXEkNi!E
zu|LU<Xksg>7I+rdjSTq4X*V0T>%8xS^>zk)`^EnRrYq844a;p2gxdlLmjy63!%yt|
zCjQ;C=o`1Z_rF*Kv-{s&{$IEG?_B@?iEgV6@LO8}nKM-*QA*2gyCXq14OaAgm+zv+
z(^SJ7O3wt!8~(A(e$iW6{W!_%&P#6EblcD;3US-SV^n4HeMaN4eT|gm^n6C|vYzLm
zL6utEX4?*Wba~qLqLzo&%TtVk3l)-xakp~$DQq_5A${t2?k(jafnMs9Lvd9u?w<CU
za_=(LyT4Bv-q|SGd+ckT0ruI-^&D~WV0ghhF&~O|UTzy%VybGXwuimya`uAZ;2d5#
z)`jvT_*YlK&N<nl5N0uyb~q!4Xe!FRNZ1qER(YJ(qcSgkZ>dG<lP#I?m!he$LrsS9
zLFG0jR?9Xm7FmZLtL&3(utkbRe)+;Q%~zgu68xlaRz+SRUTL*iu%<xIH?nP5;mTkY
z&kJn5TRGPO?DHM8?%&cR*Cn^<sgAwO<5OcN$u}2bmGk%Nd%kkHXwemGcAl4)PFXfy
zgKYL*Iz2sTpIZ*dZC23o)5OF@w6~aVw$ioFrP`fRpQqcD^ui%7vqkA3W4v4!gp|77
z){;PcG`EB3)-AV-XtrH9q!`!jJ<sdgZnkaz%EyAhSFYqcTLsdYqE}a{AJ-oFvn9U7
zfwIw2*%#kS=oF97rHP;DT8*Jl>MrfK4A6+3r)#*)5^`w1W=WEs;e=-aW*o1;e#h|H
zwtvhv?=@C>VhU1;dM@G_2spGzwoYy>=kaC{PGX;D;*Ts6kFetcvsb%BFEwJ#v{4{c
zYO5Y+dt=@-UIRTh`$EQd-L;>>4Ry`gtpy?#!Htc~Kex2j-80r2TAr#tqw8x;4q7)=
z+BrTC904=|-2JTmaQ!vO8`~}Oc{w$zG{$#^dzWs#7UdT-(59Ko%Qj1xTEN<4T6628
zf}D6!l&#Nf-D~Z0nQS_PXJDdqr^Xpy{p)*ITkGRnU+)KBLM@-SX*@n&6FEGvjm`NZ
z4QiO}=^A=e=0|Ehs>_tM9-1OtAI0U_=1bGH>ugutu6fy(JB~5WI*ty&SAvz+I2J6{
zZO#R-&MixGQXcM=wW&`N%fKEp)ku#y?hd-nx%Z3RM?7DmH^&?AJkA!(Wz3k1uwNbp
zKOT}|zPRYW@qI7juaO<X2em>6wM6e<AFHn)mD^KZ91~vowAMvCS?Dw5Nq4347*CAC
zj6SD2JoKLk?W3B;%#0pW>_xdBweMeH+34L1HFFnWCN%%j=L)|&jC9Y6Uo62zV-sG6
zZ_+2>O%i3Jr>HO;V?>XggDFa<aY;TOySwQ{B_Yb^64RJ;DX1}wZQyDkrApi-(M&V$
zV+d-dn8hrO-AV4rqE<Dy&;qKmv$kupH@DN9xw5PK@5rmS92zXifW|%W#Fu47E#b8T
z%0B-f%D=sbchgh$53h#{xBI9;Nr`G;TCIo{UNW?|K01!rh$U0QPF>9lxhHiO)I;EW
zP(L(3s?!>G7A37~wCGLnDl?MZ^IMv!)xtSz@wq#zdptGYzdlY7i1-}sK30mJsdOVB
zXOOtBRF0gg#BN1X)?UjgfF$1>fRwlMzo@j*h~Y2IK2|uFa=i~<*dAi*S|^QjS=lV^
zR(J2=Zj993Pfm|dBG@AvUo;fGOt!7vPpCfdAClTqY7O2FtQ_563`UHR(7NkTg{HcZ
zdwi+;Y*mdJYOli6by1B!U>Rf5rc7du65K~8-ixXn5AhsDSDqd^yBB(sJ1CAwi0)tq
zrS@{r_Hu9_wriwDPLOxsapc-wj}^K73bU-9cB*cS5IJu5eYb~CdPk2uoQF)-jZMjB
z{b<&WI-aD2r8O%x*1$niI?N+0LWce2E2|{OQ}Y;64!1QD-Q^(nv8^OWw##zv3D`7y
z{u8{j`UlUJRkKLZi^92ONTwLEQ7t&}?OSk(76w8|R(W+18+b7-?-Y)LOkA@mHq0Zb
zDzUSEf(7_7ql7(X%Xb2nVlRoNQZLvmay`r=I%6)uo@qu?CoO)%4~6vzG}-*dF%2!R
zaz4F#6*pubh8vM>mFhMjsw{=srfw}9&541>fi)u43S^i2abv=B@GZStj_*+T_I#9T
z?)L`1rkvh8@$J{5ZI33~aJkod-+5|c1SrE?I+T9FjS3W+6Iv^{MpgG-@$MVE50P{8
zpAx6hcgtS!v`r6$Z2MTBGCG?BGTXP;wU&<8wPx<mu14(7OAVIywe2RL&%<p?O0+Q9
zIhRPn77CzV$JnAY)LwD~y+M?PeKZo9Ym(n%s@`CBu9;Bx-g|DC*29U<ojo~Gh|~G-
z6CV4>d(SNQz<8{;rRgXl1K#|MNL)*n4RF2VY5Gq)9Y?w5W-WnUW1V?8<-wkF0d!do
zB6=%Il-Fp!3jUTPVKm<$mJpqVk@=%7(Ibnm$WmQpL6;`%j4OgHW@t6oQBH&di&f87
zl-)eKJqx)b<pfGS#zoS*$fG3kxi#-lv~8u@pv_{<q1t+-KC{KoXXkZ!mZtBu6c+MH
zO34GO0JvTvpOB?FRHq@bNmE>I-XE4;6^!s!g^Les6;=aRCX<F<2cdSX=D{JhuUY#X
zEr^$t04`0OI?Tm4hDCMLI?SmJ!?Zj17YlkZn#OBZ)j~{L!>H+;M$F*VXnU9LehWL%
ztEuixoA{Iw^k$|WQ6m!e9T8Y-tLAZwx)aj+&<oWOh^S1HizDGy((sTAb`wNzg7Qyd
ziuyl>EK99CC||p8E$!&<*%YTA)l0iEn&llaW)_2*BBP%+Y@{oC(MKL=&3d-ZA;&t4
zL4(OkR05r7%?3SSmMrXrEt%@mEE`w|lhG%~DaZO$<G{<Y-F|?<mlwe~U%I>{SXJvE
ztC5<{jx2)_-DNlr!;Y2xZ>s(6&6r6FSTfY7S~A%^k@h>)zd!~Pq(~UG0It^da{L=P
z=B?E9noW~M7qt`bW7fiv)jQ>=$w}<ynnTVhQ;*Q2Gb<{mZ{P=-_UW=cnHr?*GxM$_
z)kXYHS#OdnhSqkhLT!c8_>Cyc0(Hbr!YT!%!%9muJOsLuwe~WEki^7EmD)B-Aj?IF
zz!3`=Z(1~#ewFF0BL@XTZuO-pjo&(Vm8LGj3=RsJ9zZwYkS$W!Aj$G<8-`RTa{K1B
zGG`;n8-;-a(-6=dii+|g#OO*!ZArYXHRUVP<g!{2pH1vJ)GG=>tmbhAX{4i;JLpk_
z=CSHx#E6LAdY83zW!Y;eJ=H#gMcm$GAqCIby?WvCi;|-j-*Ym(&UD8;P|YCG%K^@k
z$kzFaUfmUcY*=t6oZph&EMR^1?G!AyTbVc8YxmNbj16C+H;fGrh<YTs5uWAi7*!dX
zk?^^b!U!&kR_blzhUc6HjeX0tF6Wm??VsVO%!a2yADw6uFICvV*gKvSAJ?#S;ZrdT
zEhkN4BM^y;6^VVPjPC}o#!Jm!DKIA;;o!$N8{~_*?>|>B&U{I$u`bhyh(GmuW|1CO
z;bSSeUzj>WFPr@8vKTjN%KX*3arp`Er@g;HJ6MlCgS;9y2nY={xT<V~`P&;cXon`T
zjpXBF85|cZEu)<zP1hZNj`}*y2!RR^2OY;OLFNvtU9jJ)b>Rbb9=@X7==TlK(dgD~
zE`HHkv6S-RUSD2K7l1pV;v=_6o>2Mc;u!1cFlta@TcMqzAls83t|N<4GbjrdUvUl!
z=_%Ax)+g>~W>rp+J9x<<@1yZ>BJ}4@$bl;K7}jhmjmz_vYp+ER;$aOhWe62@*Q0rV
zcD9@A2!4NyMuo6YoP-^&rXEf==>C?)c*!*NRgd)9(RgddJaGQlHp0QL$@z$TfFp7-
zw$8D$K%NR|IzgH-bv%m)ezAtt1*ujjn%M81(bmA9;SdLm${k@Ir$1CLbH3SBR)p#v
z*WEAuCt6C*vt29g6^Oo@l?C<9k&dk6mlOr@MfY*70>9{u^PUj(L8d1@#J6)}LfabE
zefhG#-JZ*$aYxT|z2Y3}bH_=Jhy5+c`vvNZs8S=t;RR(%JArbP11(1}Yfbk){y#24
zmN^leRC9hFbC7ZJQ|hb@DtFNX8%Z>Dz2!N3*)_k*HJ~zj-70M|d(~Q?>1z`5wrv5=
z9j`r1RPL{yz4*9`?2%z8(S*_i5+#F@#9!g76GmQ7w}wenQ7R)dCCul9eUyUYWT!kl
z;dKXQVRO0!kPCEWu6zkF^;bLM?@*ua5*N*1QJ>@2%wFq*d#kN1y&PMdmYt!zgKVr$
z!xuR}nm*=%jvulgx;a(~E|<S47gB{=_X`fY_nq9B`1rJY%lLQ{5PiKL%59oWJXjmM
zGHNbRf6C_G%#e0<504jlO6Q&fbJPZTg&VoCD_Upof@g=wROM$j0M&&ve6|kw!U3L*
zc5h09Y^He~9uF;+YWQ%lYs3bu$6os(r&ToiNk_Ru*nceCc}Q8FK9L9VDI6mi=EmOJ
z=kL44@U_cqjEL&^WM<*NT0trg1BG3ZKG+IM-T4#(H(5Mkv@gv!g@TN4(_6;&;IqIu
z7Q6|!^GT1Fm6FaB8GM^VC21acBi3ocI$HjOXGNTj9^JJa&=3qrX4k)6Gak#ki#w=5
z?+G{#%9=))-nDv|cZC^WQZ}I9si+6ulN?j;mBx)rRg5+*=d|gU<_!hpcxuT>p>w&D
z!(_rlUoBqPL;GXRhw@JlNxWShdq>>Jh{i&}vT~yQt(99el#~~L(`o;*q$4pURD|s<
zwR%iN9<D`8g2g$OoYxI{;;(TRckc&TaeTATGVkDDb5m}^>|#D`m-W8H2-13{d7tVy
ze;UmSv^yJa<BZ$G3!A>mA=xFn5XO!8c2Y(8Qlo@n&aik2)IA@NaTZ3u^EeNnq^>E$
z*Ty2eJy^TH0vkLy<^JL*uRC9uTZY?Yz_2VGcVY1?4SkOM(72Srv9-oo((vJu^2z*}
zi;WmF3ue*i<5%KT#S3;uErI-EY`3`6Jy?1T?oD<vFjt07X?E~LzZ`0Dx}<L{#7(s2
z60mEm=vtHgM_?%BvF6x`pGZY|J2OPIZ9X%QNHf(0j3(m%{Du6iorgOgeY4N?S|FUP
zWu?i7lP<{>#h4j!$;Z-tmYm*k`r;;K{lP;GE*(puY~^hl+NAb0I*@`MFE`f8Ilw9s
zyP&B}hjmSWgmNd7r(C^0ttpEzNMY%@vA*5d;#z&>y8Il|{KaayG?ZRVV@YLetuJ&D
z8{@T(^b{z5YCl=UF@LUjF_e>6r^nJOvUCF~2?|!!F_Q+JIqsAgx^OnU3Pd>H>Acm_
zwC7(3t#18BW%wg3T^x*u76nS2ssu4-7p?qp^Hs%o=|xA){nTItLU#@sx@a+OoMTW=
zUV`}L0{DT|YB}w*RUAO@+^1miiG$blmiBQMoQxmQ<KX`nNsGI@Sj$a*Ta0e*^Ji6T
zq4Wg#Y6ol9X7TV+v{gMbZL6=v-oT}>J3fiu1|L&y3uM5zKLvixY&3xCo`Y5UJ^UEN
z!b{fAx45Q3MzpdV_vUshE;lE`%hqWT(4u+ujr@Ye;TQ=eT2Yr`73p3ON6X;Cz})Nw
z<rj*ox%_o^K5^guMOz3}If~+faYg3Np`Z`H=aZnUe?KR?xENSg9(tG2A-%j<yt+Yf
zX;c>cw2vxkt+6Ox&t78gwI7`;sf?o76Dr8v(??r=DjZ}2nl8;BK|0iT{U`she>E|d
zs(^y3K*>s0c_?^^&gIZ(z9&FRb>i?k3(c_8@tGilpT5w%_RdwP{896C;<389$!x($
zSji`P(-&R)+4lVMqMVQNvMi}0{AdX-+jeEM`4w<+_&eh%{EOw_Vfyf`g#Ct$NA5@C
zrCLn%AC@Z*$Hpq#=v|RWQVglOoQKmUJV~UPb7E5GtfEbAL<92>L3xb_c?(xz!meR-
z5`&eC|NLb@-5RL2Qlq9~WPYXmfw4^#%s`b-=~XGFL%+`<wVuOC4Ou5f51!Vt2c%B_
z9gG@}0KanULYMRP99}VEBjjOzRBMYFc)rHzQ6l7xWDM8<9NioG8&XyU*Z%F9MCEkF
zh&m==gb8W_;Zb}C$&#r;C}d}@U25iNpgeM72rEr&1F>=xw?E4sK{?UvkH|Nx^Q@D~
zVb}e(JCRpCs?8jcDM?rK?U5$y<Io+V{&Hb#*MytRj;2(wQvHPh>Ql&7)!sT~;%5%}
zeRc8hDm^a(;`GE;#IP3hi8CC`@;6GhPY4cUjZCWcY+CL5`5RP3v)=x@2cGGiGLUo3
zn}&&2&xB<irS5@uI_I!VJBf?h79tic3Fqu(FR4mEF7^T>gWI*V?k6W(7B(V_#8UzE
zET@Vk4Kh(iTvX?bIQBNtjCu8)?m2Pus$>W6Z&1$QxBEeI8A`r>Q{>0tf!8GoW`fd5
zH2JgUzqg_VRkiMqTJP)eTkF##Z(_sLN-FIdTGw{!Z;KiDmtBk5O>;VLpBPOJKDh@B
zp~JUly+)^sVYSf+8h9eMAS-SwlbaNEiXqKoEpznlrULnW6@sO}Tl6E(tvs7yFZEmW
z4XiZtuH1UIy!R4M96I6LGxmb<=pej5Ecy;3;!)3*Xs^O_fe4CSnc77TjxQLvxd#YJ
zoZY5cWVsHJWJ@DtwPX454_XTGwX#Z;Zl$)(9hXKnvzVFHu%+flSU#5WbU8c`G!*kY
z^F!fNy^8m?NnPcKz6$rX$zJtk*q>DPd53&u?oWg=JiA%}<)c>}4#EW^;0B#Fk98JX
z<boW5qU#l%MWpOuWK8qSDcz6I=I5c7U!?o9f7gfdJ&HV}_LK^gw}=Wc!@O<pjG)gf
z>zm^Qm2Fg5Q-=g1sney_-Lna=j&5)miqY7sWfx@bM!7TnwA-2FfN+(>FJFS)cfvwe
zjv0e<H>Zm6TXj4z2(0o(BtYv(W+8}y$ENa$2u<}L5ZLMzKUt`w6ya-<ix5??Im0%s
z47^xQy2J*jAu%GjYL{$jzE|HcXFzW~u8wX;A~R4G*M3%ZrdGCl;BF+VZ58L1mp824
zNx3JC(M$=nFPr`V<Mal?c&N8sI%68hvvJ)X2JIs<zd@CuEg&PrSV%Ez_fT38c=R*E
z|KWn38UBEOW0zVFs92JR!K`nLiS1mOo$Yohm7_^*y?J<O%vNQ|guUsB8bKvs62P)g
z@raKIF#yEy)i0{j8wi;UHu2>tG2xC`z>*ADQ-2>{avw5&B=~9{zPR7_={_@2%Kvl6
zGe7_ds-c}Amo2+e3KkW5R8%m6e+kUV+r<Nk2l_ORAfob*qDts6?QIYF+J2b$XHed+
z&14x7x`q@tJDISw9QSdTiGZp$&?87hpcOUOy3N%oPDkriqtjrDQmB`Mf&q=h0^%EK
zWOGP<QBC-XapV=520ul9q8+c~NI}rAENL=NdvF*%0ej5|xZwSa^XkHJZYj@Wq@1<}
zJF=-&9h%*FCQCBcD2vcd@Szy5PI3m#0n1=n2u`=}7uyO{l^7BpitBNg$Vgq~Hek$O
ziqi>OU?}I@CPG4&B0q&_5ycRe-vFi}sIhpPC!uoDqw8fAzUvk|W;OFjA4&8y1#$d5
zV7X8o*r5W?rX2lmlL~Ez(!CkJO%VsQc~W6AFiajjijEZV1(kawH;q`xHFQ<P$y}#t
zhhs~=&Cxb26r9zW?9VO5upR9+Mr!oU2UfbabYXE4d?M<|z{zxiSrT2ENnyFBtZhTd
z>qytd+8@0Y*w14>uHa3D!+NDV3J{#I)?KD{M{{`|X!z{R*kX%d8i6%iHrxPhav$eS
zBare4bjSr3A0&O|qvz5tt`HH_YU2Sjaw0;EDKk|6SvNZAm@=uHrVXK8@ufw>^?8)s
zbUq;g9o>5B>Y*3NNcls1X%htutOjRGCziRUe~HdGm^iKGt9ECuXf*-|;N}btx>#BS
z9pzL5%iXt`x-?IXhrrJCcU8Zm#S2s6FOGdLoaupp=RD@CZMpal3=Q85A4azYYF^%P
z3h*_WkSn~L_BMM`K!kqt68$}UCv$wBt%AN5{a{*b7-0vqwk`Lffic<HwEDJGw4UNF
zc$GB#o;Wwc>jmnFA2%AgHq?N{Hm|)&VlvF&1K50|n5SGKubeba^%QoMYs94E=AU75
zNXQcf&CR@?u`CU=9=u1W)pK2fcDsiU4NJ~sFW-7u%Zymc4VcpoIQPHMtZ((JO0&!<
z#1fm6JKK+)uQqJM_I7Y)PF%OQIDeZcZ!mC^&{d%8_}PNCr{(66`zuq3!aa3m6{tV8
zVhFF@Aw^ml<U;@XJ_<&QR2E%y)-2{5JFAJ7YE)gt$$6b6O#JKPZE{Dm8MJJDYXvrX
zDEc@j-l}t^U$%QU${`yqqNL*XST?AVC-T8*W9g07;O~e9lLO`;Bb!Dc#nK%Dk8OM6
zMsvb|B^v{E&A5vkd_@q?*fV;OwqV3u`Rr-F-f2;r@01-n)8x;8OUA!Qblt`on`IfY
zQmde$<Q>S=9HpwDJ*M+4Lti1_zV15DLEXG~TZgZOB}E^k3a~3E58XfZ4OkgJdsyoV
zS(%W;G9?nfk3XUb*ZbXtXA4YGkJjitSF7`IiVl67p5~SF5cjtD;QNgbEB6-b_~`i$
zsj<>Qo`+%fhi_p2Z%%pcjKQboF5iegA@cfzCR&qMu6mW+%keSdIo<NY-auWYP;IN1
z+{u^KOQ3<*RQCDSyMqN?+7hrmmuNCuZNdQ>QY75*VGEfqSCy%g0D-$QT+54kRu4o;
zqZ1zb9YF{eRZVg|x=mvnR_2GA$@j^bA7+*{s!5MK3=1~HLLp&DycoD!W`e)k@jpmZ
zhk5vRSIOj17KX(;=P(yKAAbZntB|e95$*zLXA^5?p9UbAUICLL*Cow@=7}<E$FRpt
zmOt(IPj1;8UKH`wA|QLrExN)6)Kwcm$E8ODz%eIGquXE)A+1Bi6Y7_(BIt29_sJo>
z%yUNaZ6aY46d}1p>$#@J35)X0^J9*Iy<N$AUVg9h3IqldJb}2WQ$4=aNt@K#4uj=~
z#Nk9E$ODLbQ^t7SZ(a_OGmfK44qdvp$Aq}Mc4$Te_|y5^G>e-L)0*^uI_v4?IdR>u
z+ZC+YlZrE7z}x6BmT1=_XD$Ww)|Eo+FH*9)syYMMVL?GcE)Thnj~pA*7(2E;;}0pp
z;`OsSPjF58UZ6Z_^eDs@X70COG$TI=dG8n|m;<6Yw#v%p`I|s%=is7M?iaq@SJ8Ya
z?v?0BQrrm|D$ocBgSMqZVK+8O9{V82PRbA3w+^8FO!1_#Wo+#++kDIk?Txz8pbOig
zBNerxt!5Xx(qEDm6*$*+YckL0$80EQ(jeMf^E%|<`i?Fqej^1)3-4*h1)2MN7{JHd
zyrC1|`E(-R_arvjA?`@F#l9~m`;50mYHo232jDIhHaa7_Ilbg($uN#OA<&Ykm9N?<
zqk+L`<yf@4aN%N#>5@O0tx3;r15P;k$>#dQX=l?nXl4jHZlS}DwmFq)$hN0i?UdBu
z$$A6Y+u$L;uR3rT=5|55Pnqx{MW<;j{-}SY3_L2ag@ueJ>J4m0c!wEcyjCm4IfS-<
zz^qr0Y*wUgv>+|brk337HeRn7u>aVe>_}8f^WwXrAvy}AGF_JlVg?WIBoDEvh1wGj
z)`p9RaQkR!RE^H9uhG9|hSi4xxa|eJk+aW&?Tj?Dp<+kds2TP+UwB!|fg%+Ai3IQe
zE}%CFdp{YqAD~QxaZWB%SJ%+AB145Y=A&eQ*f1~`!?Fy9I(t-4D`#>g+6Jj@)1WC?
zlF_w)$5W=_%Pef1i+4!4G1b|Gn#GL-4_eS8E;q=L^$B;vD@_U`9Jc2CkoZExMEk7p
zc~{-cmqH|&5E*XWlTaXk>880B#Eh4lS6&yt%NE?g5yP|D*V-(s900bLv^vz9%AXL{
zbvXQ(Hh@zJ&MLz4PD4d@EF&xC*Ct?vq&=3GBh1CE@f9Smk&`5^+2F8m3v!7H?fOuo
zO+<*~tG{K0vPiA;QHF=&aQ*mN<kvNd)J*HX0Pkht>EMjoTXMJ#$^m&iSj^5*vYHJ)
zRKXN_kY=y7ub2ZWgWKu0-?mVn;X!SRhyzepUAY6E6k=w?Q`mTQ^}Ns#-fPOLk3;W*
zquDvv%sEnLp{nClUFfKLU+z(9rL6`BVTCoUj0w(Pr~dn7*oK~p9>3ST7~FPcM_|+C
zg*xd7IUJ~6>U`CF5iIv4eiy<x^iN*oT2ACT^f#cboe8wv3Q5V{wRHbFq^*<E##Lja
zyL_zsPkSlh%eWw+Xi!)Gg!Pp%8h)sln~HLZ<n!SKEAFMU{7&0rhEc95HS3{{IQjws
z|6_!eszyDpZ1zT$J|Wbi-Un#=KbC~`bjoHV$tz(+Xi%fMBYi(s!L*HSRe45Gc<4KN
z&{_7vi0<^~zd8M4#f!kQgxO6QW~B?~CL9Kfop%|pLErVEb+~Mi+-w~W3!f(}(Fav5
zU*#hS5EnHO1B~gF@0^VTZn{V+4=_+Q#nom<KGqchivu0y6drlaCCn#fgDskOJ}pcc
z{6oNy{}O<L9K5VZ3;=m}cy=>n3@pA*%tlZU-T@@z=kH=GXOWu`vx#yr-GnYlgRGzi
z*{+P4FrstEZ%j&?)Xw82grI(u_Km7PSyhawVjhc^>$GwY>5=L5m0Gq@jO4Lc{Deq}
z3iw7z7}AFirAqbgjRa9u;2yMs?Gxe)%M?E;*B$RoYI|0vlg-(FXHv&(%a>Wx*3**w
z$nx{w*b`6Vn2Ci~(j#h+3NDC0*2gpSv=KXWuc$JAX=FkJ(|5ACq{e=L5<z=}*Wx9k
zpzRRxI%Q+utEC9T_-nzkd61cdhmgX=yEEr9X5H0bU^G0?3<%c<Ncng53^b%bYj5Sv
zqoYU`Ph0BKb*j+7QZ;+<P%nd*^a$3Djd7=;A4--@c&dVY6+!H(v+v(-rdipz)>M0K
z(q^ic#nNW)P0PYHvIH=PpIL)M8#~WK!F)T1jfQs{g_7lR)ngv&SkBF?7KzOW?YRsi
zljZ1iLQ$!dBfT$Z4nsf~^%-J`u>sSQ^gpw1Lk)^M5f=~l=2o^7J6WH}VM1LS8~3ha
z-xD9Lu17aqcbz0R8wo46;~ziUxw}#mD8tfNH6JOVuR-YY?*3TOrZW{9RQy>lvI-l@
z0omhiZrlOsoGwZ6!Nyjt<PEf^6L->z7*K$>%Ms16m?_PsZu*P{!`|LP=}{9g&L$Dt
zG~vwLIJJ2h0bF}*$fzUP>ZWYaR|%&jdGQ`C?1b%-_D~fRJ(v4trP8Rf1PJRHg5Vj=
z^!Ii$hsaR_@VarcZq0>hx)`dZJm?N*DZ`<0*$ed)2Sp^5jclcG!QOh<>1oi}C7ksL
zxdGHM_S@Tb?>u-4f|)k6(KiXWqwMQrd>UYuP7B;cT^qWXRJ~NfT-ZHo2aL}N_84@_
zjf^S!dP9ttv7?MhM#swCoIgn5FLTRe$8#;EGlkY_<-LmV4135kQ?k2ba>MbpCXC~S
zv^SuvuY@O0v@Oh({V8l_Mz%Z=<QHL!3oV~;Ztze#(qZmTbUv-SzFrSMYaggJE%8Nj
zy+H5B^z$+Yt8u01)$o9f`l%~G=~F=$M-wS98R+Bjhr~m#y*m}>t+*jmGnX@4ot`cM
zOXoJuYHBN$m6hN22sOT2y1qL)zV2u6xZW?TCwe-671KRobOGT(iW*<c5?R2wNfoqE
zo+}BA+hG%2@5)N47qwl(X|_OVjF5Ygu--G}rhKj*$<2+%49g|s9C~$Vf&h6v4z*lf
z5IMp7|HY))N`z}1pkYQ?j+8kp9rw31Qtz*MM(L-yG?XwfZ;acChLo3=>j##HSGkG~
zDi{h4f+)034W}5x^(*WqphC0hw}X?b)Rmi(XqXjAP3u=V*}3PO6^~PDOSlQQ>%a}3
zEi+0vh)oUzTk^WYG6!rVITD2{YReTQv5_hy=!Z1I+0n8kg(~S^9ZC#a;@mk26<Tx<
zaI)`%9ERds(|2VOWV&OIHNjOJo5gv(HxNbCEb~_}EVmG&v;&Eh2*g9n|JBT+B!_V6
zH2{vsjlA=lLErNN@$~@4=R6Ww{pAJVc7Dc8;%xi3bsnaYcHQ6_($)bI3i)%;J-&$w
z`R#y<J|^FJwUSdUmJQCDecX%nH5=&h8b&Eo0!phnXKB0>O!Jn)VL9JUG1%FdBr^8P
zqs(9F1ffWWDMun%!GKEExzc;!dE;okh>#7=ICBG1#OIuLzDn<WS>wfvvmQq|XhXkC
zAt27pM71EIG{g(afrHj8>GwSuqV~gMPp9;F`tN}YPzb3-XVUi;i{;VilgSqD>nQ4W
z#<aBtDeu$U1xe)qXUFfjr0*F+UFn$a3<1=X2pto^H*t<+GD>w?cM&#r$;CKLc3QXV
zicp}qd7fqG?Hc(aF0zM<gd%zt1lKFJcPnz}l~+uOuT_N|bPzgX<#nw{x<x;1kal!N
zxjbi5R5T243dv7)bU{B2nkQ<Lju~qcr9$(v@Y&>MvHN^4uj${@vLqWTeT5IMmQ7E&
z9|YEkf92qlAJ9ENT4JF0mL2--W9j{^?9lyT#x*Q!hXZ8D?XM*m0e{j2($dAp!vHv7
zH2MeQ*Gkf0Hk_+d-m4^5AQ_d<Et4BWn@PwpgJDm!%0v$v2ZeeWX%&EHAbI~g@99mi
z*khiGW~B2E{F43ey?6g*uo)HKXFogsi7Z+G)d=|o2!oawQ0a)CiD{C4VPL$`)?%Ox
z`mkQiXpJKQtxt3VIWGGIo6s00#XSK}g9=N-Dpl>nC6kU7M=0UM?IEWrQ<SlCv;r=f
z6O9Qv(#7$(x^nKJ9nhvoNYT>HAMAEV98`KS4*Cd2se4EX>^5x7ymU)^&@Lr@Qz6dl
z7iI^ecEwD_ZoB@wTeSfK`G*N~5x%#O>FAR0tecLgVg9KD?1i|$iea<viuXG@U`wOp
zOVVAy#X$}&h&4uKPYjygoCI6|0hx25(Zk^4K=IuIxdY8C7x|DXQBXL$3*HB7J0jrz
zg=GlCEuk8^*GA^)ril_+FI2Ot1+-Toa|y7pTbYB9<E6C)taRaa;=H{qy%09#m1hZC
zqB;$h@6Jx(ygrJ%yBrh1lr|p|Cw1!iat6OkB!+1?k7l#N24s~Gi;RxEICI$6ZYK6g
z$V$Y1o^IgF*^c)lCTa#%&GT#(nfWHOsa3-mOD3k%Dlr8y8W$?aSz_LWLwu3%4Kubn
zB7kUc&bmeT{|;tT4}Ve$GUYrCxS)AuYN&zKB{@J0EPQ3Wc%;gQl7ScXY{%Ly?f5oz
zyTS>G!e%i4{EOn1Hst-2Ykpimaw@`XWT<VlMf;@IzOvW)e6H%RllhIP2S{8rB#N?r
zCEUa^yPt3+5{(Lbvio>-H1j-@**$rX`0#a5D3$%Sw80tf=Ui3&g{l8)!bEck)jFFO
zMMuqoLzIi@i3Ql)+4T|`>Um-t<62Dz^i>)wne)ZU2;o2*&T`pwFncBuliAa?6&<ON
zBh6roF|Xm(xkPV-?A8Dg$_)e(!DUiqu`)=E)8@gq!*!mxaFE!&@Syjta*z{oE<=PC
zxE*alhF`U5u}kmH3d9S$De`T0Nd0L{)*~_DsvlF&{BDCCW-v>wMwo!=;w8TjZ*PK>
zh8TQ^nk=bAXh7D&O@uA%O4$F2cB$q`;8tMohG$S=M$s6*{F{+{lnOqL2W~LiMOBv6
zDHsZAT)lqG7_J+xE^G_J5$h&G^_GW$BQ(CM|2Z?H1E>>a;Tt#P$T?Kdq>qbS@HrW|
zRzW}79QOuG>*j#?{SLnCi}~ZyrVdT_$2uW}PW<NX%C+0{)A&YXVPhKh+r?3+`)K)X
zX7716)pVowh4$r_N8q!`b=4a)b`bEbQMdBE%dcnz)MD&+T4ii!%sSD6{Irrq45|R`
z{UW}O+%+s@z+&HddS}TLwW!sG4?U+YpyAax^n&ySMoC?1Nu1Jy9;U2&LnH|tvv|)5
zS1SChm|T=Bg(}b*ZBKA#v#(as3tgBg77OODI$yH(h?^>B(c5G5NdFJ{y}BE~;{J$_
z3U3;%WusEw@!y0Ol8?T|-?X$&AIa+?V~%`nhuatC60RwFWL78`F6&vju_QQ^76G2@
z8UAy9CGs>GqE-71wLANFqPom*okvm-f9wcy&}j_}Sp(KUF=X@xpat3ToejfXTj~Pg
zn$E6Mb`dbvl7iO7leag(j|o$U6tC#DX54+Xv}rY$DZOidZYL?07UyWgGW#i;f3P6i
zV;5xXN=~pCqxgN;h?Rfwj+mfS^NJg&c&pG^?hhVWdN`xwM+`2sE=Xh$3GQYxT&kDM
z7c3KwS54hS`lSsEZ>8|*5M#uR&u7u{Bzz%y#-w+_Z;?vi{+f#2Hul+2Si+jjt7~b2
zP5{4K6*7WPgBYs0vkOU6#Lp|dm8x$I9kw~)8hyR2X3BA;PpzGZ&K9f?7ZYK3WzE>K
zzf#Q<MyZ!LwZSnSc}7>FXjh6g2lTg$ITEjEi?1(3fw8%|;$iND75RyR14OKgW%M&b
zDM`Zzv<pyn*Mxl#QVRE;dIk$lp8EvPY~-o3#WdR^FUcuYBt$X#m@Rn__*>-J--e&O
z87!fZzSKsIl`U~&76$lJMR<`IdP8r{Nm<*J>=J2J$BHYo#J<!7ucd236fzxj@|VMd
zD*5$Fr{w>Y4G!u(6_&$>_9sCH-@W)srgtY;Vh?S-cM$k2R|K)bhYIo$Dp9!ejDj4l
zKhG3jB5`zOcZbD;^1#f^mq_elP4o!F&+nhIta4p#tw1P-g-h2!^>+zH)UM7D#aCGf
z@)M~DTv`%Oq4IzYHdJYk_Y;h!%J*tXkScqqDTa#|bMvL-S0~82J!ZO?xZGPV$%Q^w
z&xhkDpH6Vekl@m_1@aRzP@D{z{`*`#I`<B!a)i}mu#eC*w0z>u{tlo#v1BADgs{uh
z)v2Y!Q$d?xWF)_r(%Y!PlO$(()OVAw{Wpq47KHvOepD_@>??jp$vKG|kOo=>^U&25
zTwVvoPLdWd40PHqkgXR-+pmtbN&FO<igYt^_#~PvoFe*QjrD=K-$s~1`W`w21{fS>
zT?*GXi==%Z3DXIt$N2LwEK2)rYEfkex0}<)v#GQ70s{7FN=b4N!<-jR+8K07(nv2M
zLUSGmkK)8EC@2k*JvMSJXvW{<?9T!FP#^eyCUx&Hy8ZBF$WU0!U{>q>7u<P`WHYCs
z88wHd)<z&hTpW-y3ui!sXWx#!2AJ+ZUfv@x-O&JClIm)K<P(kY=X_hGGv-bZqz~@#
zCh@hFB3DJemCZp@EF1bq_oz;9C9<Drk$JPre0#6<Lcr;_r3`eD3W{NCYfseV7h{h=
zLWRuV_qf6mS}W!XXsnWsI)+<#LT19wAjf+2J`oOxI+gX=Pg<h%+zG{kLJIOuRD*kj
zLqM2Y?)GrNSQw^cHgJuWykgL5m`qV&y?;!JOa`YI(XMBOIjzaACg!-Yb9!MuyJvY4
zhJOI+Nd3)$t70^xTj@@~B1;+<rlFt%Feba*L)g^9Ps2vu{EWLc_?_j9|LMsGsDol^
zFOS1EL7i?9og3>kJ)sH~UN<yZlu7_&-J@22N}(zL!$*<Dr?E>GhhDE9rNnX5N)IwB
z!KaXGK*ffq`WOHR*Z!wICg%i~SYAj!2piT}NR=n?g9pm6&N%Wwq~g4F^!IUS9s;{w
zl%U6y+JY6JqSL|)2--;QLi9{eIWTy=4i$<e9#BPTPonWibwx?5fu=F11l7yuYVntZ
zo86GM`2kpDOe{nxY^rUcjA(?Vu(xcH1=3vilDxImA)jS$$?(M#mnn5yE6Eq-bvI;u
zSL6oj*j{kUPn@5>r(DyJ6w5C`BAd(Bs8p`9|02Q+tk&>B+4#aqbyIWDB*P_C6Nz!9
zA=5or6j`zg3cY2%a-=D$dDT=ydq>-d@2b>C)gmoY>q44Gn!k7N6y*%T{(h-cg%kz=
zdoev-l?6GLER){Q<i;pxQBzHK(Q&SdqVb(z>uyi>ofIYM+I+FJ&BquYp17lK{z;z%
z=U#NV`l@|3q@^sYbJ&$)V`KRJVr2_lnEBEQpyA<~$}<*lEC0)E>n4cojUP^&xnsD7
z#DfUq;E3SBtrGnfU;^X3L}DA&KOxC@vV5pEd*!I@FyAG#wRS(h1~G4BIBP#nzGbva
zBrPQN=zBu433`-H)Wbxt@j&?+qzmTA!<R_$r8(t6a^)1!R8-CyMnTm(r<b@x+W+PS
z3MmUQqspZ0O|nayEh)Z`uMZ@3-d<wLCHx!4#6wYx&eL7>JS3$tve7&AoUV+oFuQWF
z<8_Mfk=c_*B#4EcLhiF4S;JcGsr(59XL4=twd4wzfF2=<4}L2o@06S%{`teUzgzJ+
zjsR}|n~)9L>h*&t2J$yIUZSS3JFCrDR7v+0A#Pk`i>wsPBJG=M*Jrj}y>d>o;7=(H
z5F;_tlV=q%pH?&n@{b_L=K0h4IoG2GK28A3GUkY|I^lxpS`cgxLYs1O93_t#w&z@!
zA>FD-v8n2r!0vdY3G>;+{<hM`cL^OqqyL0xY8pdKEqH<v_)>cV6~aTgDE;;!g)$&)
z(4KcVGezE<lE%xh(7yy7?MHMkbk6f`bQtRUXEMRU&tA93A8OowK3^#8_dtcySpFo*
z(H{k~_#chi{n!$kACV|qA((XO-JMvBAHkA`PQnnITfAWOw_I?h@8tV2UxfqR#jw=Q
zNJxR@B~m<e{-#4(ipg~d{|@T3a?2=<tA@Wdsx0-XOn7zlW*W0Y7i8I!Qk<=xuG!MB
z0-g!FZ;%;`PyP$*nwKH0;A7weLK|7mGBUp_&am@SJpvhbREAK(n^ayJuR}ZNd<o0<
zdw*!L2(-U@{<QQ_*}T@FlJlVlz4fAoy!jIUDSe}k#tC5)IN$hSbT9@Dm6bk{U}O6z
zN8HM+S#&rZl<dlnZ}D@nQ6E?Bga)23_j7{D?1eIiLF%)GSDVtDm=4R`R2|}kADvgp
zo9K3j`bBM&DKgmw!+Bv&+hlN?9X-;5EuDSIHX6FC>{lD8K70P*|6WqSzm5%tK1vD!
zPwZ<r>(W5MuN?#n=0wwF(*_DdiU2kryu+^b44?3;e6NeGQAs>VqdlNnN-rLEW~AMU
z%!&rf>B!_ds$}hUT_V+3?Mn<AeKbQ1ZKwJii$03HkWyx)jqg&YYyAuXuT0)Ez5@Av
zJZ<nIgj*3&2LcA$pH6wLB*3680uRn?6iz^LbS-_pmc81d(cZb{IV=tvzpBUcDU2NP
z>X!!+BD>Pw7;Nkr!ojP4qR3^!x6yRYWBqI!>~Xqhq<kfys^fVll5yTD*m;6xMX;52
zJ<G3QKBIzRvUo*eEwneQy%O3oAqCIherH0x!$@L^h+%-O5SswGpuqBQhTm&$KGU-Z
zRvhcYCq}68+TA1uJszyDxbnsrwijmmCp<gP6U>K584FBuzb~v(7aq}^xdS$zzui^O
zJnMTb2AeZ&G!ls4a->5}k-kRL`@+fkDMPmy-;a-OnX6<$xr5$QVt55~d#Z5txq<^M
zP85s5AJE#D2It>tr4InwQ+sFi#LX27x5cotr58BS7v2Gg>3gK+o*90k7A5cQj<N2F
z`bNXQa*K`T&-9l#hp(fvaZ_=t7T;_^HWAvStulfL;;dqV?nI{yHP4s1ou|#P)*2_n
z?`Rsd$_R6S1~>n$k`vw{-4%G@wPHBlQZvX3@ox2Dg)u0&o_#ZLSRp3-Z7cg;4^$Ap
ziQb4zk-*Z$$|!Wd+vTtS+7WuF93#&4&%P+sn>2kQTVD#Sh3tGwm!`2hG>owT#>=?P
z1V=(C-Nu2Xi1N|1d9StMjco8|4`rh_J8Z0;u0|WhBe!0+(1{g8aSv@;LB&aCoQT|&
zSnPE>GBKNQz88z3=f^+b9A&sFalQ%ffZ+@@1^vpZ8h9R&UAMu>7~|yHb-l_$>*J@!
zP%AY|#GUGA)oJyKAwRq>jc8Wujb;!(@pNUmSv!>#CT6HNsQZnM63ZR|O>opZlq~!w
zW>_6PQ%&R!xX5Sc*Jw<nTaTtuWgB^o)D|;(lo#c$5tRsQs^T@&nV`|Dkz#a;BQi;v
z*`W^gYlqvM{(yFl_ffDJ=K@vb1*ihN$}O70oZB1gvQztglSPteY6-tRShnZ`_$#}b
z&}L8ayx!qC{7(3y(}ASztu^{-Zn?8Ml*Z-z=v2?Iu5`V_j6X0}qBOXY?NJ&ck8I4P
z<`E2FGG?Yb`2+EGkyLErATb5i%EG+rT2d;+!4uOSY9mr+cKSFH2?pS%w?;8>glP|G
z-{On%`anuBJ^pC^0F3xu%iijEQMe{U1Gtoag_80Rr@Yl$v<#eyqMIlbV?dHYmX?+7
zJIN%U6ALYH9)ElB9V&V!^ZV$<RfWJmm=O`Rd3Jn!Cx}iR@?BWEIy1Mo`pFR!X~Fvc
z7#dhw8?1)ec~>ep;_%H0Hr`-1wu%iGd-IkFi#q9xh*6V>#!hhi?#EQ918|Ca>r_?-
zmaRBsGYWH*?^X9iYJd<dn|0<jEdjJI4McHngK@#4p$B{bsCx*jIstHlN(Y-vUrC!i
zwAd5Zya2RiZtSMsMpwlmA=pH%8B{vsxQf)l_atd?Ut=QzA@r?9{S$yoI2PfHLhn0Q
zDB8CmkA)Em_lBl0U(cwtCikZV74NsMRcJBm=;RBYD=eNw`Z;M#YbbGV3WzmS`FI8&
zcHF;*Xey}G*8zhTrLn{en$lE6{9gb^K)Anu44UsMLrBbqD2`_+j?2Fwedztj;Azgs
zC!?*R+|<Acy($k0hHPkfzQ4MUQ<<?9>cJ~o;vmHY{<Sp`VnapUKxx7Vw!tmDpa3?3
z3*+HEyuE}fMbV4xofGrBwsieLzc9{n8fPxG0a$=UEJWLBp%L1)C6g1oX2)!s-LOyW
zBfDa^>>WF0pV=4ofgP|TcFxY&E4IV-*d_a!?Xna0E8A!9{|G<N45Qk<Z{oP`Q4o9I
zAb=$`%a$R4Wn|W>L>j1@wd@MQtkrNc-!gJZgIJ}KFnyuXt#0l@qnk8wS*EroE0<+z
z6NWA{wT*S%sNeM?_O-#(W(7ECG__&O1KZSQg*>R4+Asn_JF8=#bmN;UZ0xH34f_}@
zWvf@ZuaDI=t@ZYi-8RTq?49o8miJMu;@`5<rg6wv3ab5S%NTesr|b*#Vnu!UpxX*d
zf%)41!Va)SmXG4o7_`gcnjHlS(+}3x4%oS}YO=FHinq1<`07yniG3)34rJz>R}AnP
zql2f?(jA!B5xNzfqB8SfBw>}^Fk%fzK4pTypCiBFDIIVFzY2a!U$`xXtb*}}3^CRp
zvnt|VGZQVhSu37>VoT8Gs{WF%=Vw+!ly_>jOz0D53#Jy#-KnuQ%wVY;A~u#R4%c1T
z9`9jTb%Fq@`-**NTD?7!i|l#IfdSUw(pDOG25hxOFS|5G`P?4m&p~2P-^)gsfmu^Y
z((xp@x(4y;XDY5qlTFk3x!>Hie`(I|QqJ!=&Tlucl;s_d9o^mSs+nvo+YE;N!LUt3
z7o$ew#ZJvuan5#{<{?M8@kBa!oZPddzv>--(hS}G;McXa!~!xD?DmCm1YMYkcsOhy
ziXRU1{eJTY{Sy=BCvrwFAL{?F<j%$zuZA(#i0ZX)mH*RK(;3+BV-+*Rg}Oz|pjX@)
zRuLBr0V8h|7jiuGZ4wt6&(EsV4}}e7ft%iEE}C+HOzbT_9e}LSvd1TuaooUU3`uWY
zp>?NT-$lKH*n+gdff6W7ZS2a76__;Zq%7+<zY%%?X#FE`prB9B8oxzd$yU(J7$)D+
z!?rKE)y)pGP8v5myqJJ`W^~P|vl7Ke7}%)EhK?t-`b4c%$8%&Hjt7A@{pxWv;d*S|
z>_Jr_Fs_L8n=H>U_m%00p}Be#@xU5`SZb>t9r?+KnRMzG>&e1`EOSet*A8Db$2tKu
zd%%~idwR7eqfAu}Inw)fLF&<+Fi?bh<_QizLXy4&`V_Kq3Xpo@e!R7Z(!o~C4tnTm
z2A^-^X+~TF)dP+*bR%`1VIMHWm2=^==_o@Mrh$Q5`mD>iL6{Ew^j?I6O0IG6VKg3C
zwTu&Hvv^>AuW~?QAGV}`i_)YlVe^NdAL_k6p<MN?UPj;QKUFFZqq63{k}40QI!?A5
z)iclgMzrKx!Z=sZh_h8e*!;I3Y;GW|au7;@G<NV9NcqT=GM9&m(qh+IxLb>xCB|DT
z$AfEmu7|%>97)OY@=}!<I9G^?&~Lj<TkNfdI9tYvudLM`PC@?uqY>J;icY>o?Sx!Z
z5C|{X1U_ijEfG4Wxs#u(!F3!1#EZp1hSRA8oNnvxC{o`wf>yWHeicz<%yQwL-QEnd
zNhc{Ws&|%q?58Mr8?o=A;7Pa3et|z58|?2<@U*+heq0hiv@zcGB+EXaB)^ZzF917(
zCz~7bQ-LaFITdm9oRj0TbD>#>)8qsM^yEw6Jci$oKlL0#e}A1;f(A>`nYK2T7{M{(
zqI?7Rh|!%X>>K|r!rSDS92NfU)4#qWzCv+y--Ky|M&FVKxn~ryvNk8VfogNDS4Dq7
zF%8*D&Pu(&IvO;xngJ~HHC9#tQ!&031dW$i(}szxUV&7#S~bj*3gxPEb}V;}01k@K
zr%3sk`st=9pkSCC>3CTKmgU?P-`!D?o7g(w9nO+TbjrsoRsly<?4{8(OHw*>fDgVs
zJvf7nIl4Xx^Y8}P4Usm?!<Fry9rOGRcmpAgF#DHTwy=F<#Bt!szMBKqBy7$@UHg?a
zV#6%D_45w?S$N_uMC0L$g>RTX#C%3U<zj$GAC@K()2)Ri*``tzi#%)c2yJox)&WPf
z|2OPu8Btr_mdIgUeh4M8O&&dxez($<G`vU#tmj>H2V2hNWeNy#d5N)GMs#8rVNg2B
z;|lKOT~xii#dM9dG^v%0#>k=4<|3*kRhDb~OEmuF55m9Il80C-t$apdumr1;2CT}f
zSk;VFIvlyiWj;-f&^pPLkFb4wl_0fs`a0-#=q*FJtb%gc!%+_18ya)+$lEaz?R18(
z^4<(z673RoJ0=V;p=$;05^pQ~VI<KmlxSBdv>RQ719V@W@?2As01X*72I9f~l!yP%
z2oq6l6{tAmxsry}TuF6Q%q&#2)1NI58P&MvT+Oz6(TiPQNYgZAFQom9K3nsJIa0oe
zf8c(RKKyl}%s>4wqWpmE!yL+vbTM%JNG2?5CDh^lggU&RP(O6n*l5wr9qn6aW<Ds5
zt;RX#B)n?s<3V^ujsF;Qk{?>0B@3jhYbjXNg$=(9=GXFP{q@2U{9GxwJ;E<EFh3;M
zaVPt*wzhilT?C>lh^+(AJVujQgbY*I@Vr{!Z29IKPgPag(uPEaX1d*93tWcgN*K0`
zpy$ZweE8k!XLTSK4(h)6>wk~-GmKUxI$0Sf@g%|!prCY2v$Tj;{(5$N^nFD_>QE-f
z>Q{7UM4;OHQZvJP=1QCUdD(3XQo}_z&X0TNjxvgv;%pjdE|*$-3s5W*v5x1kXZ@7#
z&TL`xeTC1h8>_-bl?=?B$GiupQIz<n`xP8n+()ib-hZZhLA%@7&Og)jjbvRFlJidu
zmk|CjCtXICoWDI>e-t?s=6J+OdG&a7+P?hZZ^lnWTuqs|Z@Vb6QNqL1BmVysDOX|}
zT)|vW7Gv?NEwpxn7vnTB#kMjbT-lrvRoFUsidD3`c+y@Hmj{j1o;5XU)4QM-W2TJ^
z-O7DiHfM4Y`EHw_Cr!uM-JPpa;<DzdGEtnjrS*p{$PE?o4e9C+G8EZXF2%P{iEjyB
z0R{1G6oe?g74V1OKC^WQk*O6l7aZfr+foZK?ejdjBPOI!_o5hho<Ai?50A`jVW@oF
z$XMmgI=<N2D1X(~z~<)E%>2sXa`{kxu7aS}ckk)K9)R7EIg*2=`g#@Vtr0A5N_<yF
zq7`aVO~RqpTgH`%C3vTV2Se&E(TIt6n0*kms<UcW1<i@^S^{H@1Y%bY=%rN^6lX5x
z2kcp-cXu#i<KU!i;w6twD(xFtrJvk{MowVhZ!U}^H-Bv<uqfj<n&?K9mQ-H9q9B;G
z<^P7X@OQBN=x#d}CYc~Y%Yckh*cV={APbUHHH^ZqTY>t<*v;&*%N$+BD2mD`7)pBn
za??t!lj>By!8&2$jXb!pI~Du^>q-!1sB*M|C^JA*3J{fb5XpX*<djV-Kr)8H$|{`d
zQh2SOhAI6<?O8g)s(ueEiN_V$P#&g4F<_9ba4W@pMrK}j-Q&{KyAn*5VF)<gt96^Z
z#8TkISXxmrZ9-^MAOIkP5R?A9w9(o+5!?JdmS@a6deExykE+F}B|47Bnlc#qeKnzx
z;#{og^;wyRWqft(_3LH+J$>LwdKr8D`ufLGVQO%=HYr=POSZMK+p5@T-Bybu-10tX
zBnwy12N}iZNEPt#)qF=3@`Ii)YT=*1@;^W7Ht1=^fAQ7xmUcpnv>dZ^+`{N;T&^_}
z9U$A^>tW>eiBfH;a0EAzuof6%N+(Ri$?ew|Phk<^ca!ic&59C+PcaQ@$d`@nv#a0F
zYfFsjq8N7IBl9Ag<)he-MZ#nsHUk?C+4XRMi^x+5!uD9Td}%r-1ew4&5fF+yhidf$
zNB?#fZaK!A9b-_6#Lcn%!Rx{-VJN_a2}1J%rITkB6nE+46!SbEV1V^pC9dU#JG?n+
ze5<WF2Z0=jdP}katki}hhG>e3t=%;Dq9dR~txte6dbsxuq&B_S9t`ql0?2(G5j5l4
zOj;V(+t%jru+Lg+R{4Bb?0qTYv}gi@b`%lf<8MsLSdIl6;}IAJxc~d8!_%O<^J$m^
zvGad9?8rRgP*`SD9|S=*3Dc`tcopvg(edY_Nmj(K@EU(y7XExFe_c4P!<-BFZw~)`
z@38Nk@0s&|oWTON+6|84Jo^As^ydJ>*mwTNA@!5x0p3NGE*#ZGmN!Q;GQrUf4rgU1
z(Ww#G3fVfGprI^^$4fyjtuu*zmSe6A-UZebGchb&cF~*Ok$77$*NR3s4pR5&v&|Pk
zP{y=d^D!&<uh%h~wvmA)dWhV5W^(M0vpBzflN4o^-&!wJ?Xsa_`i(TdQ5dTUBj#r{
zu$$yF8U2X(1m*jjW_U~d#}OvAlO5)4y@zKeC^@VKX+I^^&QIu%^zhRc6U7DKIaLZ-
znfbZ8lv`T!2lhE_(tze9EBI1J|KUZqA7ieVNivE7RL`F&ORUrBbR3UGF-3K7rkG5N
zzThx&r2&qTq~px$O3FHf=btc;`RgqAAOGVbT>rYg{=U2Z^3oqX`tI>UX?-+r%x>h4
z<Q=#`{Zb}keO;A}Oj(Xi#zBKPCC(7hH7rZ_zDxnyNN9GhVPB(xI<`PXi(|+(l$168
z5|3tO{CBJe>jRU_!U!G9NBEMq&$h8GDN8Faev@2XlP^Eko~mNL+1Lb)UE|KIz}qXH
z@WUE570y)Q8HpMgDuW#=TiFZ^Wl?a5hO)2lr#E2N`10#v=h6enY~#cAVdu5SrRAHL
z-Bf$zANr*Fyum&{2A{CcEBFI_-ZqWmooaE5Elz`X*y1z%ffiqyT6|C~zF>=k-~+Ze
zf<L{%maM-w9)n8YS*qk{+^I88cjR?!R^(2-j=|#Hc}+M+qBI4D4)l~un*JPJey$k_
zoc_FKd!<|dcqewjrJ6VZO~r}A`~wQb+x?T7zdQ4`bP4$!L!FbEkb}bDqJZ6XF<>|g
z&G7K>Qup)o%)gusV7Z5#(JaTv>bUQPDly|$r-^)3&-cnx(8SToP8P+72^L~bIM}pl
z41=D;$cQj?Y5WByC349g2G_te@)*x_=TSEDOBTz~0b|>nv1y0_Yo_qewYUOsIGdCS
z!1N6I9P#Z5%mObuLk)m(T7*>mI+>um9lUEen1gTeT^QZntzv4Tx4?zzo-yVan$Dmn
z&^GX@XY*URtd0tb5O2v%Pe;dua~+d`Z&Tw4Iyp}Fu@e+#jk<-LPY2U-@q{AW>!V`F
zj8#f!0RL__B0>T`&*~lE@i}tLc$-pqp-JyAInne-8{MwmAw>~G@+(fZc|DfNK@{0d
z+;aR_;^BHi*GH@_L!wfg^Ay2)56IBPfRi3_$QT)u&T%yg?V&Ld9vWdVsrlLtgOHO}
zKFJwSYFJP?(IJg^M#EnX3U6Kn{6V1Huy99=mv|DzSA#>|brd}Q$Nw(=*JC2Q&<Wo4
zL-!#z4kp;{(A$bugYnwhlzYr_7RY-;KFEJPk`AE2ngDf5f4o5DOSpG@_2!dK41bh+
z$Ha8+n99&Y7crZU2ulmRtA~f4Dbfb?N*<tq=&?Nj61%vav2ED8XES*CbprpKBm|6i
zIdDiM|KBCJ4=x6hkx9qXcQa2pp?;p|-v?9u`;}2A9HQtIg|4Hy*@{cQR?g6E_0b+u
z!4+6QqzyQR!UN`AjPd)SCkMhMpuJ)g!X{(+EN#3F-l6CoX}NoR*cnb{=vj=BVSwlE
z!^#6|L$tGd<my06hY5C|Q#jIq*NrA0Cku4a2jKBLB{JkdjfR-?15c5q8ctYPX3{mp
zV@Jqza9<1-$RsIFLPE|ZK=%)UxFId|6;%ZauZV9Dv8Xf7Ml;mgDO%2qT!aaOX5xE%
zobEg(j#c;o=RDSmM94!GunT@)JfYk^+XHDWfK@#_?EG4MDLfZ`yw1ZbB+`g<$s~e7
z_!nlC{my%MH3^FX#S<SXzCeNXgwwNzcAonln}rc<UrddKa&J7vduY10QTa7}L%s<6
z#;advogdjef!X={v(CZcCMy89$wS|7t@b(X!OlY%7*(7o`Q$Lbim^Xo#)L*U>$N$V
zEsOeOV1L<jF=u{x55U$rqgo%9c#}6NC$WFpcR*6T33-Ar-N5k=`sSV+^Gb2#_@aSX
znSqQ6l>CFK%3cX6>oc)R?xL(u&99mB*l^k#cRoP@|HviDsD^7qqrVhYLYs~UQzl8q
zNwam7Yhi-}hmSbvDtxB^SgdDxa+Rb2-KDNGPr54IW0TK{!w0zX=KTC*MR@D1j6q9?
zBY#Cr&2p$QJWKBLnJH$Y5x~<~HUi-!b9bi_6IzZeLdq!(kxD2U6lFy3=d!Y&CDrHL
zrHhQEG)RoiTZEI$g43HW4^GnHJ$B`ydQlW0k5CoCd@M2dGZHKcS`K4Fbs_Rk@9qvX
zexE*cOCBt#xHnz4XN&JHt2_2L>?G%Sin$-T<rX)`1W++=+!_KUz9R4zjbzCl;4pf5
z{{TsC;{zIH@NFb~$xVoAs~ke2zXf}n8o-Vi(Er&-zz~D*9McDQM-d`NZW0}b&{0wa
zn{>cdU>^teaL0#iUR-CN{YYHyKf{NwOn?itd5&A#<<2ZG;G1>jwx%T@R;%Mgfvi>W
z4h1Rn^B`#nWz#a-dhj;LxSc^_J$IoXU@h1XO+YU<LBpHjuV=l@r=T|A&*x9N@G}}y
z#Nop+kUlKkeAa#8v9G*z45ioOz}PHk5LbpG%fzL9P|?x(f`_Z2f&r>gwQw?08juEV
zP$&|>kt4U%F06t|h;#WyNl5uwyC9uD^6p&t_dD<L6>}VzeIB4c9jK%?@e~jXaU(H2
z+j0=V0;l6>BOD0g4pEKuaGE$Ek<WLx&$lnnkAM8}V9)>lf?k!`)zu^pobOdT_PsOs
z9-$q~_m58Ap8Li(m?JnQyq^X0oj2P@Kkflfr6p9=3Xi=yczfzQD9@Rtf7|=z?Fl7f
znoTR^yT|X2=uMP;PR)0(k9XdlVHN-olFag*gZ-VqUDAxUPxkQ|AOOXvAb)|7`}PE?
z?aA!GW+!{6r^hf(?(}GszuDh~`qxQh)joT3{0>+f>>{Id!489q`Od-i+1cgM_Te7x
zT+AnQwEffN>$gWc=ljPnu|r;PcD{Gw_dqr^>)(I?d|hjCyQIY}aOLF<x|J4DJPM=u
zo;ILxfc!e2P5sRmZ1V*I%wf15{*x|y(uH1dZP+9pm;UB+w)q?{oQ**w%+UhnZ@y%k
zFEJY>g_bD8q5qP>GyDK0n6v<Y<2l=aR<Y0tVie2$-X`m9QnEnA=_zoow=jZDwz-Lh
zKz!n*yEu}~Cv5WxFW;rn&_z1G_l)(P;o2lPo)N#h=J%en-gCMQj*n1x3fs%y++dp<
zP!}Iyoc@a^>;-fQ?f9KY|H(7<<e9n^y#TH7!oh7<;5}+uT(xF$DHMRwJ~m&lYy9Up
zm}9f|pws&603A-b;pYp`u5N!y;?Lae__Zv5j)svu<j(~ZJY%4okah<TPuWe9A`yb$
zPuNZPMf~1mvm)N%bQ&HvkQGhBX@T#0Y?6)ej_dkn7p6B3XOogQ+jyzCKNi5(HeN7p
zJyZqH8FEAX^$f^zh9((&c*@A$222FLxABA(uuopyp25HHxQTNsj>qrf_`|LgFV;6;
zR4|M*3Uhpcz4X{8fWTo!t-93zFw9So0^ZO}dN0{<R+cn?-V63QiGY}%Q1;_2C6K`S
zic+p)tpghHkT9nJ*espgLeW$9A&#dgD8R!LMug-zC0@7=sF$R4V6xuZpnCgU#DnJ^
zJm0=b(g;6~z#GoslP`HN8nW%26YccZUnoc-sh77CpxJZv;!OrD)?a@nAuOJs5)Al)
zJYm}M74em2H}c^u1~n3IO9HF}H$R5yor9=4ySl~>j>%{ZLuJ$$NX9ltKO~JAkVana
z$YpS#8&GY4@_k-c`&>NpeU4YZlWbPVQoh&mdbli+TRnp%H`}g{l6-_wVd-`%Y^^*j
zuGcs4IRmtGzBmhgHhp6qO&?#xgSEBei*nG%pFec@!w=m)B}E8_g^SPLy73qfJfBzY
zulIaWy+=js_(Z>`J707RWnJRLpNuW)IC6)s_8K>+a|r)i`33&x*c%n<t9{y2yA(?0
zCWW8I9$oF~EegNI4#mrx_`~(Ajf!Kj_9+xt+Z3MpE}fU8t&)I>0x~ZBI0Rj3oe*F>
zlPDkxEkxjDRdg^*t4JYwxsE^OAe5WPVZX7F#Qru`;v*B7!e0}<C~OgBM1U8X4$Vc6
zKW1ofrU%u{4*pqDf~o3i2mh>qD!3v=C|>6f$+_=v<LU}M@u`XzCt}v}70y$<I)b0F
zn0NLI4MFtv3k4^@u6VKPiNC;(_zUWX7xHd)iKD2F_#^L1zEYjZm)M<rNgbN4b^!Ng
zpug*8qJ+0ouc@JWg@8h81<l~s3jPGaGX-rQsWgAHFCWEgV20-F-PnGOT^=Us3~`Y<
z<qt-;@~!SzR#9EcD!Ox71-m~(16d@x=MP5r@~!S(R#Dx{D!O}Fg-gsQah_!Gp7Vee
z{wSC3oc5krIDAlRO8ZZ)Xh_n9=A}qRG%MvqsLDy9)Mlis1|JpDNsW~{f}l8xp^{>F
zP8$fn3J<hp^aE~}RbV1@t~<ZZ^5iQX`b>c4&q~<5pFmejM(TNCb7cx@l1qk+<jQ8z
zt3A!3;kU`4fjSEQEGkL%ylQY~6j%*KU&TG=gAj)mtGz8FD*q)CLR3^mOe1ve%n($r
zeW#Cifku?bC0$CYUS20DT*v>E6v+@nFLBpbQfT825StXpc&C^Rfs&0%_c_Rij&x<M
zRKmLg+{IOJ5V~y$wb6>r$?(0C6L)5>F%u5^cgz$gv22nG674gUQu+#TpFjC>_CV}k
zww&<(x;8ChpMTDYi7~g%$(*>F7-@n3?&-+*Htpk$<aoJ``sW<5SO7Ivp#%Rp2Wvw2
z&>ZpZgJ{*i6ToV?-0)Dd4zHTyRe?}|8Pl1fw~%IxZ*Qo`0Jl0kum^kAhUKqi)@J?h
zJHs;NHa>1Q4;)i+K^tF(Y-VzZ4MBSv2SuQ*E|%y+7*HP8kqjh7nFWP@4Sc<(UmF^b
ztzR22xIV2_BlWEGYuU5buTej%>(>rjah7V>&<uU?rX=MZld8v0iQC_tqr(abP`mL2
zM6Qi4;NZtbhs9&A4O<S2$HHOpQu?g%CjccM62EppWx@qVhBf5dOWh~skFVviqAr(E
zGNRJWQp`uSYIr}wR!S)+rLmUk5v16SCj@n)4?w(GIN{$jipd>T=*~v5IBNJwNVCQp
zknCmY(d=dz=PJlov7aWTK1@}^;V+CwoSg_oTwT%Eux2}S;RC&zRGaIN`XI2Veq@2^
z8G4y!Wir0yOHB?$B7C%6OHA)XVF>=0%}l^tQp|*kFX^%LCB1CE8*R<EYhHMi*g%H>
zu2Y6Nte7<5Z`oClo`^Rh1~)#~{rJiaTJ2$8%SmA;<6V7y3ruy)iI?cwk9B6IM%)BW
z5L9VP6-TS@C6#CBNLhkv<VviS8%BR2JkR8wQ5m8hy3U#0Y-ZP98zOeqlA7giYyF-M
zQ>`H@)6J1Pnz2MiiZlKWumU|V^W?_$tfXd_u#4%kju<xWJ)*9=ijLR2@K{%ff^wc6
z!zN|;!<$33Gl%m|VRpIe(6QEaHi?jRi8)mV*6<zHtuK+u->s#p(8vzg8|6KCt{T~-
zLHP(>ii4q+y=8N)ON>59u#;cJ0&&KtyOgtAb|2H3rTm6KWZryYd9VuOPGyp>Z=hW)
z3|5UfN=QqPEa7T+V#!8<<FEozQA9T;9?(bn<ePhxXOLQ*LL*%bM!dF`Q@kUquKq3X
za=kYIp0BcZhTM<aq@>&llbbV-JM`4yM~&Qo88bj7V(L?t6x?u;Gn_Lw4ixMgVD^96
z`xpMUjiXT<{wfsODu4;nyy->?;!$iTacfzr?KDkkJvkr=N@z%c20&Sq#Q$f1=dw3k
zD9KLxJm>u0)6^8O*!#}T&dkoGAG$nSePiZOb73bxd3oaD{$BaB%?*yCFjbtNj~>M6
zVA(4;xG3Onf>FoGXOZ12Q!?n;0G4Q?u9bD|%O(rD?b0dzCDmJ&Q&IP$<-V=~ypeww
zT)w(lenDIMMt#&6eZ08a*v_;1u<3sM_+Nj%|I^3x0`Jy8e*E*U<>24+*`JX?fM(I6
z*<7h+x+I&0%xycBD`;lGiI44xQ;pDzD0d>!5-TJFn|g`yj|8GG&~+vxxU%FEcMWXo
z|NORbjm<0+JUHG};Aw75+;iktj}zsP0ONlU_cFGFuA#EqLVkH|<G5`(!|Iz9Fk!(3
zNrh9J?u*DNudNfE=hX$BXIs*nDM^7-<$m_pF#QM49vbG{nQ^_o9IGih=0Cqo${<W(
z^gPF);F`WjY+>QmSL5ug@$#irqRMplAHtjRNHTHeNt>e%vAg`%V18WAGnm)w&ZJ(#
zklg+G#UFvt1`}`c`|wR3iLgTNB!3(}(9^+xFWL|Xl%ROkZv7&hQW)BQ9{}^*re2ZK
zZyJ{b!~f%GiYKjX0o<4dv#jD=ZwL4%LB{r3A)Tnwq-+e@R;YUwDO>H9&4zY~*>rMT
z1!@HjE7_39p<AMy$WJo}F);!Z$>jB75lllUg0b8DOP}d<*Cgh(Sfr|lO2yA)7VkFh
zwM#y~=q4Rq5(IEu1msOmB$BPr@Q$zAPd6B_#PH~29$4FLob~#{c~<12N+%mo)I#HO
z%V*2l`cZc*Okc4`Y>Oi$D<#!Ms!BxNyT1=KYS!A&s0=T3vQ?!uwg^jWehppz%>mzC
z`6wL@k{VZBL)^FsP`Aq&$f$B0NzPi!I5iD*hMS<=Bxn8S(8pgaj&Wn1J+;J{EHQng
zL>9k^KL^PR$P0j~%1>qaD~qG*{P1=4T*-PCPwn|amPnskB9$e4(bv<j>#Gm-2===#
zh4q^fh(BV&uK|t*FXZ}W>Y_5$^fic0y{zWQw>7n{tn{ohb!s-16AEqd4p1pibKJ;N
z{x52jC=LURR$#u?!YIxBXo8!Ib%)6-rHO$eH&=q9K?UeRFE7U`x!#UhDcG=s!2Nfc
z0euRq{L^wNSJ^QvC5TgLJJOXMg2*Vo7)BHT2cG&Y#;;)l8XQD=w)oU}Y+WQa;@rSY
zX~MDg!w>z%!qPSRN$?)<11@)!^QxSq;HGF_Uk(K%cCgWW6KjEk1lHSD6e~s}a^yEO
z?Kaa*agA{tZo!iQ9RR5PoueM;n|Y*Gh=Cvee1HF#9JyY1$^1i6&*q%j{0VZ1v)U2H
zu0+F-X)71qQ90z6*w!9kedEA-Y;+>j(?BwA=)G49xnIxT2EjBy{%DimM3OQIoJWQ)
zS}?IgbsJk&E)SE{H#Ev1iD#%JIaA7eVrGb?)w$&y>$FOqN&3vK{))%$L#1~fERCHg
zmZrVd$H-Xavih5}=QXYl26Q(kE-1tVZo9vb%eVD@BV`i^tjV-O%9LO=%U@hpURv_K
zr*UbyDKeT*x_Wbr^9)(npQ<Il01t4Yu;X?+@Mxl~$4O^4G;o<d2I^T|KIVC4$tRgK
zHA<-Qerv0zOeKX5)ctAUzKkRs3;%|{mhQ}4{vJklxAMNN9w^pf+iiR8q=r_Nj=0*!
zKs@LU!OYT7N731+s+EhTHcNm*i3RhHNv^(*UYh!@+x`CRsJjMzd0>_tRd1Awd}FVo
zuWZXy!hKp(FU`y9uNoJXG#dM1+i<?T3G?Foffh*ERc5U4oE9ESckrf)Wnzxj`6%Jx
z+)@EALw6vNM7$+1z<a~(m6>Z{)U~54Gne_{x`g^Raf9i%0Zc?uR4H=6m>;T!Rlm6!
z3JO)7;o(}!8lcAT8fD36Ilm(Bk-%Kr&QsQefB?`85b)R%5O53mkkW%wwN6y(N$d2K
z`pawgg!(J>L>_ENl9yat713Q?scYvoofufM&q2Up1JDSP{<bfazl<2gRlrg?NPQ{>
zOYTU$%ksjJZO)@2&;Dw!eMl4Yk&0@zD%2`FM~VhHaYYGJ<hyr&9}jWx;x-=1PrGzS
z4@XNsc(59Fi>szU8Uk)}oJCF!5{wpt$`d|btWD753Oyrzz6vK-<QzQ1r~|j7^un{2
zmV4{m;!X1T=Lm&IL6WV>R1-d7==D){0f6GO!w(>8ME5Z0cDsf26T;C1<>6?3t*bAJ
zA6Y5cDS@W^QrU$n515suxtB58-Y(}M;O83N2#T0?u;$`%cXx`T_Plr$8`rKJ6$ha(
z@>F_f5S@6fLDXnqr+4h>D8}%QFtiEmjs$lGM`?zy3BbCywPzyVCfwZ(g()m#b%-oR
z;ay&47f@_T^!&jhha4HeCZZLqe>)Nj3~QQL?v;9lR`d&swZFJcLX_W!@VS~8Q1VTH
zvpDCuO`?q)QeZ8|xKic983g)}L}9=-0s?^z@x{)L>B2U0)H+91{jWa#js8E_@rVdF
zZ2IXfo4PCyI_s?v4!o(o!BBi6c0f^B<(YQTA4jAA`Z&6Hc7evxADyB7=EM8@Hy`fb
zycyzu_w&29+uNYYbcGKi!qIuP8y2yWkk>duGYtA*C>ZrKt(_!qFJH31W+3D*aaFlW
z!hYnkhlY{Ub1NK#hWXfV`zIl*LEr1;D%HszIA|uf{d@V2pgKRJzEb9rg5Q@26p!1Y
zrCffsq8~@iXTu9NanA`&kK5{g)s*o`-lwb)*m24Q&K@ezt|%~lsDQlk{ZhWGs*rgH
zC&e)Zg(wMeZp+DCZoKi+jLz=q77=M#y_%m(Wnbfb+s=i+20JCONAd0!4|ZGnMsRWm
zc6H^C2@3OiLAekVwD-2sKFXz|4%`luh;)fPG_(RA)Hdi#p_QR+FvQClJ1Flrx2lRl
zqB7<xq$_QOe)hYo-l8KBJ)|R{ku}Rx9$6R`0En>C#On(;{KT#sA#2%$Ym49wSEWdz
zI+cQASrLU_8OQNF@FVj^s`?g6ma-k=8cLMTT{~4b<^_+cTrPonu#I6>SCo^Q6tw@1
zY18wTH-P)yvzM>#%jPg&_6uh+U)YG?5^ukNePm>XYuQ|T?4*#$?!tYFQ$0ATvFq@J
ziB~<K8Z69eKCO*|8jO?OyjVz^ZPg=|QKB#zh`?N2fm~OcDF*jmP-RGB#csj#jEsgP
zO9-t>&4{6uJI+?5v^n{z2dNe1qc^X;+#-O+5;7@v23Qe>kTk<HR0}<UE5!z5FUC8G
zN8zue9a?>C3{6!3?>LMe*Tl)`I>bt^#Bf4{x8LQ9Ym^$8tSG$Ofe9^qZdJkxYrhz<
zu~?-ULIyNlgQ6qiG{vR1TU$^YwKx%Oft-Qtk7xELqF&g6=}}1HZ*|_QW6PM!GIt#7
z<$FMpciS!hlM%uLb$=mtc%UW&RcyIY{8Ajq)eNc?8c+gMF#-4YJ19Zh1`+bE(bREZ
zl?GUKQC)xLqau=q8hsP%6z5|m_?fb8jFP4mYz6e8y-l^`OQ%Uzv}K~ICjwrX$SBXm
z_SKgy8B1N^Q{#6JsG`m<8e2vAFB@k?1;&s~X6|>7)vSz;!Zu^V0+OSsU0Yz<til{;
zRP(VELUsY7O9M8m@G5B8M}c|z;PuYqB*Fvt2t##r7ioulzLIf^`H@{AKcTe><;k5^
z1&#91g5)Z!T9F4JFV`12={XseHVmw~DJl0~!|g-2VqdyMW@QhokeRKxK<2lH*5~2j
zefjd3^?lju<a+YN#d!p}Ohj6^<@qD<Xz}7mm^8GU97mBOZ?qZDW3@f77*9rC<ys$G
zk|*4!k$iEwn&jM`Yll>J=H+h!oRj_g`|P-Ne=l4-I`{XDHfeS!c^fHX$cqGw@iMv)
z3_)?lwPK07@v6{dRw3&%uQkZ3)Z;UZZz^*|kV{>kv5+|@4Z0v#0|P@jMrjpmPXuna
zO&4Ue64r+#45qbiyGCx9(BTp)2f+Er4snT}7)15@<^fR_w3|sKpb|)n+tA+)$D*EL
zWvXN(`juZF0CQU32OF%0?@FEk2r8IS!Nf2hL2p$TXO8q6>TO{Qgx`LB<6gOQL?>ap
zydZ`*inAJ3MJuPbOg~S*e*N9}qy5OYTMJWQwXnJzr!H$Vx|Kbo_&%s!nrvY1jHqh=
z0O&ejvomw{ETiZ`-Sr2L*}3ZLf6;5D9i-F+lq}k?ecs|yr(~%lJnL-RZ9K2Pf46Zx
z#oflK+jbj&{mR|Oh5rxVZQRM<zuTUuLh@)g%A3u{+6sG3_$vI$y(Sjszjv<*6!iFJ
zQyM$v%_h;<gS$<6>H5NrW>~ZTeiBXBHQf4T%ce7O5Dagl+jKVEVq5oA;L)xU@sY)@
z(ovFgcc=M;;E&m2Mn}J5n-z(pCp97}O;aF*Le%MJ(#M}n;sk?rAyK5<q|^WqS4*aj
zI7n`peKY1dbGLgzC|=63V*?rWwQzUAftd9LM$W0j7kOUL!KLXk>UTpgS0iH`={xjo
z*h@M?t?`4ghOUM4kE@Mg(qJ{val91Ba_)4;Dq$%8;ssxVpcJZk=n}DrQXV&Nev0hx
zOYf8<KKk7YB`X>Pn)3;e^KotFcu2|NxXp6yc9Elz#SI~tM(^7LA&$tCw)Cvcj<(_V
ziX4VoY_Dz64aw6-qTAheCsuijuthGeDytNO$CdVOh9okFK#5`07F<DIfnv*!*wTYy
zvv^ry9N~21f=;c<XSS};SS;z8_;<sRtmw<`BW0;a?;1+fk}PQuk8pl%$rF6>mF?tr
z-e;D?T~y;2UujY)V{-Je!|}uSnCGQ?%!-EH?29ps^t}9s&VsD;izh-B{C#sFYx#=l
zQ2H3Zd#9+HzHF<gVqbbMC(9YTUi%&X{pW|O>dS_s%YET^bips**3xzI?;f?R=!-6&
zWTD4yoS;rRG0vM(f6P?=d$jJYciOf(C(N4liQ!sKjpn6HP08xzly6mvtL}57y~VSi
zx*QkwPzEoR^LzdKk0-OXFFd2nq7UI81-xPsi>HxUk8;3L;vt34?mramiaNg->xyzu
zM7nHIQH6I!J&1NI=Djj+Q@JdEuxmQo;{?PPHBI)kk2lSs2ma`$<8%uwma;tsbv_+G
zO2_QKd%MYszHFz-QeSu?$YMD)6XjL@570GHb$!`zjDlY{BBP`+C>90$e*HnJ<_q-(
zsmzz^3sNDI*_ad4SM7H(uOMZ@BwL*P0WirGm7s@{P0bZ_PW-!7tEiSQoH8n7^rYw=
z`FBr3vBEC{gJS6~99^-vF;GMB`-dPOQP-E_A5ritP>?8@(}0q8(jqwc@4mIq)%S&(
zPr0&Rs`ZpBYz*;n<Hau;VZJ&VpfZ+wbchAvvSaG|rZrVhad7!!=JHipg8pF|Ou1U0
zpvjcWzfGelm+2{*O}PSpq=r+j;;++m%J(hXdg=0@o&DD?57qXBWubiAmV-V%Wf|Dg
z>JOZLwx0fCeVJT$q@+4$XSh|ztT2SHRC#$&O0QI2;)hjUq6>;#QdW71E{upRZl{MP
zvpJQQPVYgLm-u0o7ic%ys`3&%<f`E-b?hDkQZw5Y9lJ+Cw0e1ew~pP{0cfr>PlV4c
zd+h%KXaPXwjn-Em;zfryRaejIvb|vTSPlrI9sM(i{lNwxvLg=~fowPbD2!&y?RK@Z
zRqcsro7bG(-EHo4%z(azp{VpyU%^}%e(%%ZJ9c#Wy7GEMDnaJlVV3U_$TM1=Ls8a0
zznf{wSNApig(_@Na%H2V->(Z*s`87-@pADmp~uUmaj+LMbO?G|vRv3p6$YP)niLAA
z{kK=YY|9y{oUi`z>g|VzvZnb;Pk(&<Q0}G94MSkZBqTB3R^Ut(P{QSHS!cS_?A@<A
z+e&5Q=!^&u)j8+7vofk;b;j$Bo0=c+uG;{?7Z|7Yt&a{htILmJ0Uh^z0~pz!&TNci
zkC8bd`=GN&e_Dq<#~EDBn%A%Cka)dno_6<K`15P_692qg@8h5Eex$c#?-Txc`|S(I
z#X`5u&pvu%WrdvcSuQC3+>YEps_IPb$k73Nm5uoz7o{k22KuloZW%Wr3pgSJ(EDNt
z$6<IJ4?;L2lTmnKc&iDeJ-ST_Sg?hg{&G2A+nLLbDRjhpI1(~q2>`*q3t#}vNdlNE
zfM;^{@n`(XE@A>aNxt<{@=E8GCp#cpUp8C1zkg{vHu)}I1?N!J28u&RChsx4_&ap&
z_CO5@et+J<G8AyMqD`LFT$gO8UTnk0TT8Apj)XTm%$ZStC{pQD>u!8m-OBr)S#f24
zmdrsBoVQyv_u4)&aN4{<Ef_2~e2HpFx6R8{kOI-yw|@HY!h(7Vv5z8&z?5Ru%W!%Y
zuPOr}X}<@I98J)W=cbf-Gi2bdvbW|Hr!!?Gfrk#jX5Yz>%QC8QS`KRr<H?0v6+u;7
zt`U2+waJBiZOI7KC6B4-sZmCXwoo3g!d9#P-!gGz29Kt18n8FHA;F|s?5eOZI?J$C
zmQG^^ne;%)ZY0&-fP;<h`mzLy*wU7j+}rAg9jUH{CIuYurPYsgCGh>N|CY@rDuA-k
zBznX#t_3A%{0t<|PtjrvbZlQs3r>$LiPu&|od9mzT|^psjMQs4LdV`vF}erJf%||r
z$d2}Kx1}f4QiQuh`b0-OW>y7t#1GaXNCL~fdlHCX8ynN5LxfS99^74OkDi@1|DE2X
zj{Um%FZXUD4>Yz{6@kV8zHcEVU0CkqDx6QDf&NI9b?kp(Q8>Ng=mUi>Unapaz&Oh)
zw~_f*%$$YUTn2vjF`PF!r3Q#W$DksBsev3TEBg1U`Mpb<xGzr4S$Gpne-5YF74Ay(
z&FQ#Cf$<qOZ3MD1_m+|DhEWtGfJOQxyaHYP4zF=4j{0EBS|X+Zu!NG|&Q}!yE4LQJ
zJ3TJ=w_u$Q%&AP9M%F6|XKA_CD-^0(7kFUJS5q`i!&?yAj}O)_5sKdFfMB<;Eu7;I
zFKxWaINCGde+^A^98m!H#yBI?M*zS#tre@Uj;|*yJy1iBE&UgdLiF!-v>iZA%HRpT
zM0&2GmlwEkFVMS-J!`&@ILmQQXWseDUCg}5ZnwH!$G!f)lei;Ns*12nf;675u)~#K
zvDo`8Sf<{n?Y3L)e#`B)TJ912YahZ-cOQNZI`GqJ<72Oj&xiXx%y7`bEc>k<{%Lnw
zN0_72Yad~r-eLC;a~<s;?9=zXgAQfvw)eXGLD${ywhlT$_oBJ*mv)5{vRXUnJ|h=l
zfjZ=fBIA3Mva>c=hQ+M;?i3cn8Hm$08j_#)Tv0nme>(l*Ny=nj#Pr=m%}Ng&YW5A<
zshr5CvgqZTpRkvXN&1$kW#PUNOZ<f3WiA(RwaJ=9W>FKU!oiN6c~LV$(a#i}7ARlv
z+$!sr7^6OpwdPA{eqs?>r+Q-0yT*jrp#-L&8Ni>-EQ|m^*YG+cshB3Zzi3p_iCYt0
z4<@AG`#Z;Z@}C~3s8sE;hoHpVig{3}`Xb;(Mm9lbTk(66ZXg$cN7j>gfbB$?n0aXz
zVa%GKno1K^%$G+ng^E;qzP9{K*_9=JFOfB#;o-tM6onJ=GVzyJ4H08H#k1!9YP<;Z
z!UuyL%lp9GR8eLXR2|LEe;ZksaFC%&x{g-w3FqeD=Dnv8c7h@%0eRm*W+l+blXnsu
zRuE`a__GS-Z^fyPP;Y`}BRc{BDy;l>H~0tBJyk21I~Sg?g2~}>3*}>W^>oJEj!Be5
zUx~UhnJ4qRneI|o`^DvUO?n?De5y$~#hsdkWcn*^`Y{f|0<_Vr*{Nfhds!n4xz%#O
zX~u*qVwhoNY97NDA=pIH6<|z9PbDUo{I50=dI;l}<xLuA+8MiUL<Bib-%G?|P9I>S
z)vSPy(#%I^lTSoQCWN9IU2PSK3TlW@YlK2Iux=M)$^O3#Q&`M3DJidSn{S|!6!t8}
zt+>uX#Z+g6-72#_0ruZ#voh?v4~<EV==TohJ=gQJ;fTyn7|>O4RWTr=?lAoU2zel#
z(KIl}N|uIt#TkG1P(_1J8>-0sgrQyrL3yYJtW}0+7+52?2^P>Q>I77Pw9z}v{YqvY
zZkekefKjg*RX%;5-ka6iJ8eBfNPEcsa04ozg^`mVShYW*CoQ8VZKEgDfZ3Dn4DzR$
zcRh12O|DqGe5paYaO{`{7|$k)@#^k;c7K2O>#s|E|Ml1Y=wegUZ`j?<R~Ix@b}!r9
z-{-$7{Q>eK?}!$cvblnvc;QdojmYeB6k(*U=mKWqaz@o{Gz-7xl)Ejua+!`RSbY;o
z7gIIXAW7MDp=Q;^5t2D|Wq#||PzatSE4(hlyKt=6DhLypO4j+jU?aLr-q^)xJ?V#g
zDCU7VdT6c>Jd)04OpuG+2BKQE_VdgPu70=C5(}K+;Au0APB6*gf-qHy$yc@=jp7S0
zfFHvNWl-(7Uo?YZD0SuU*NZVw=G?i&Yf;~n|Io_3XbYblOE>+41dWn)w?@eY^{h0g
zrKsg~`YKv2f&?{P)X=aLj|QG-K={|$NOz(e?B2VX8JS)K&gDEF1Gxn2In<B+%B-KE
zpYi7*|EbOrH7|$ouli#e%x6RV>BBN&pFZaWSVHnHF4UDXXt^x5C49L;h4=U7BH{hk
z4UA8J=Q`fac6a$-lV=pItwgB4cQg05iXzy(-Cg}#E{Lh_o0)e5nBzD2_njPpWhf9>
zj_tT_XWpBc`(ajbd-itLBo&&7JTJTNXWsLV>2sQtZ}XF)okYp-orA2=*xh|UYi2=e
z#0Jb9XP_eJWgGX!%=>oczJi+n>tkByx_`~rEiv;@h7W8(Dfm!t>k#d)X6VJeA8g!z
z;&7S_$L`CS_s^O8qr$0r1OI#G{WvS^LiaT#N|M$6*UWo48@|*jAN)%ZN0<8fT@_&b
zdnO_NUo#BT7>xckyC9hhJ$XiXjL9MdBB67);qCcamRGYB<Hg~SOGh$3BE33pvT=VX
zk4|-%n)zwweK&LeQ8}qUsMa>_pK-E=|J*v<Un*;0<QWXLFZ7``VtB3nB)8Xv)mMpc
zp#Z%989?{XGsKSEd#G~w6E182A2aIC-?ui$=&!gZ0^Y6P&%9q}?%!tK=b8K0sw%9M
zV8bYQfB*LxDQu}eGWc9To?o~#!7Tvjs8PRY-Hcj|Bfl}bsQ>wS=w_JS8jo6Sevjxq
zhCBzH5Z@{$g}RsAV#mT;@59XXZ*$$lGczJXM5Av?*oL_OuViv5H>dv=)BZ+j0{C+1
zM${nhE{Db~W<MAN-rvw$+%T(SeCJJ0U8vYNFKf`RW3lhCLFtP6R%~wttP!wNDsdR!
zs+gZ0*bKu?{}9^N-(d_;>BgPhDx*y|mCqqZ1zg_dC?yq@6GQO0zB_SKcj>j<IVw|*
z@n_`;9X*2pd07AH6)8IfsK00^=BvZ~OiRRLH}n#<F}*}=XXruZ`hffRLLqcb+F+`q
zCIt-@w?*xj6lUxM&x!~g`;B*ZgU0g23w8OK63&IUtj9Ptz~B}qe_{qY1jelxvcSt4
zHngo)X*^7C?Z^!=b?G>Lpi!Yl-Q=yY<0f*9tKHprc!oRFHb(9n#jbKa1>`psPIZiX
z8#iGG=4f=vf!owfOyrm<_WcsF7e)zG+?@O4Z)`Rv9m^VWF(fBWMbR@TvMH{`1mi3f
zvpTLXGiIKDOI{aSZUPgC^bEk=P6TJ3kA8RnI_$BBuI7IB!^{HY7CFPotqrB3rbwmI
zKwE|Ys8*Kv;T$&|W*uTpGNr$A+$%uNK;zGI(thcB2l`qZCGLaROJQ;3qHUm#*?g5=
zRh;g6)I-02YvYmurn}m>bHG`*?ieu@?ZDNR9f(fflRs#)Nx&4d8he(QQav*wp$|L%
z!HG)%E+~kGd#8(t$?s>b&Ib&ddsZA9I-(b$!ZQ&nd>V{n$P>uO)_{^QIxytq(APN3
z4ERj-eWkwVLt58R18;g;btqL3^MDs;x8-#+h*qya^lseSs>*9QHRM+u1NZ(um-@qp
zvo|l}3GGn;f~r|5Zq9_k01zS?^=4Oq0F&lb5MEwo12f#JW^Oai2;B~m&*8kN<a&Rf
z`?M2dg8mFC(J<>{_|fStozwx~Sl@B)s1R%=&I^dZ;ZOtT`FT(nD$}Su&|$*dOoZwl
zL}JJNKw*9pbM_+?F^0E+_=G`EatWd&vN)9=5FzG2ctV3MYWi8`Pp;0#X^>p!TV-?_
z2_+vSuQNcU0qb<YTP(_)v*rzHxzBJX-%)T|eJ2*_f-==p-}yX;4k0@z00aYFQ#oz|
zc{%X~hh9pAbxQ8<tFn8E8n_&x?6#fASlDLE50C%TDoEB+QI_U_2lg^vyqe?qY4`@Y
zNQN6SVJcueUk%=G<1w|ndwUCPw+fm_47Z**`dl%Qy1DW<F|)w5{A)!~ZC{?By~QX@
zsQQ4bmE`&=P!CPVJG!bv)QRg!sD^LvkYTa<lt3aV$=sP~<}*o%6n09ASSdlPL+GlQ
zep(Hw)nI~anc0!+g4e|y8Jk3oZlXgY!B$41Nq+x<HY%VBl_9*p58-^ynkc!)=5SU3
zlzeU^^{#I13G@g~<@XtKqhkyW90BhG7+^rL>t11$lTv*8%%kYocryv3dIt-Af6w9b
z1inf<iDU+Fex$#J%kzj7JOSSz5CIo$3k(xW3<HOTo6GA_P)!NJddVIJVqQmrUMWPB
zN8l7GjA3r2rwEk8;#vbp&7`kFv2>2kXZ2~-(R-)RjTz>E!QwTyHUoLzZw!j2CJAP+
zYp+lOO$#XA-=U8_bNz<xpxfsq6j>xPQoAC>h4aK*3c^uLsH9W!lN!6mR`O`1O3%h2
zOj<@Wq-%}qMrbIHY0q%qR=_j@kvnlp2#S=7_)u-W%Y7+Ujau=NJX`~!anaDmV8u(?
z!zN&mfHIH#QP8rjJZm0&Z3Tvos#%4YF{)|Hq{`bm6N68~6n0jGoV$!oXP%ryOPbwa
zcrNV<x1_|XwnnD527zM)aEKcVU{S$dGPE!#cpp}gt06$caI6e!zS!xKJP_O6RiGs_
zCFScz;$Lb1^#}@<0FJ?SCW0C)>{6w27CZSYRv+*jrIQVlb_Zxsfb>P;!JlV<2S=9b
ztaTyDX5JrYpr-IZ;41c}@@uXux$}X$v_*w%XNR>ct11LESUg$eu9YMOFvjApHN#tx
zA6H4BZ$<_PiNhIQj=!4C0I>S>{Kj7cd&4P&t4?pd$lmLqA<E*m;!p~jbAKGn5t?LV
zQ-CJu^yzK$ABa4vPO?Cr*B@wln{-qCA-F*qt~H4K>+ljSn_$@Cavb}~wD~y+vjB70
znRIg6%&vmSHshJbXw`t$gCyn4O(@<=#PgsT2#;!HOv;X2m+M*v73ZDD;wfWFo9V{F
zxbK3$-zEMf&a-=`Z>Cb9a{UDF#-d^ANE%(hB<-~Fw-uRV{rYR<FM?lxwOHfZ77+!^
zD{(7b`jKU{G}?h}fUdjT%53_kaUNX47HZHUk=~FG%uJ#$<r1xA3$JQMD1U8%6N$Mi
zFWMh#Eh3XARWydf-15Gx!|YDWX#N}P8#f!p7cM+p(6!&i2B}&%Lh2dF1IO5=x*5b<
z=IlLb6pH|z=M{&6nrw2#`j(Zy=zVNF<HVnsm05RKLGZh(*jRl1Y3D9vs{xc1o^IYd
zv{N?jb$(0#-=Z!oD4diSieO3+NP`q_YTZDPzVCx13{qw}ybA7EB`Ntzz|}SjwZb4o
z#6F;DvSj|ZV10idH32w$c$8eZyvfFk7c{r<2Z<LOTK3K`27Y9Yp53c-g-MGMa83YD
zK(W7{h<Gu5!>}q~i76e32`vRMa5+7&I6snFs^j7vCPyTx_ztUqVFxz>hJb1tjqdK|
zx(&Mu#(#mNzhnvQ(!3*?uCMZW=7pD_1aGW=x2k7e7h*M^0+kq$)|>H~*OkiUV`^n<
z|3?>JW*1W?qtvn!B^5_+XvYEtng-`9Ch+6vhxi)JMhx1i1Z%z*iFG(>@9q-8udao+
zVzr`nD5DER@v;Mbe;7+nKqJAZKzFEEmE!i9n2bq02gW~zCqC!5_an{LaE{!?OMen(
z>%Q4}U^+EW0dLgqH}^K`2+~6yR_$IWAp0&y1oH?(N{laMYzg$jHVv`uC^jWSS<4k;
z8T*spE)$^Pr!R0C`jdj<<l@%7<7w%q(x49&fapv@)qis}A6~lUywR>LGWbDaq_J3K
z80$&&V+Q9oY0I^{rV1~g+5H+r5&XePLz+NSP|LZWVaN3JTW9{n0`~O9*-PL{UwnA?
z#&WG%y*A;xIBIZ>%*>bYz?E7T1r?h-G3kCnDzUTI>No?S7JKa;nl1MZ4(M;UyN`eN
zT1RZne0ap4k9vpr_h@gw&1cT#t-HQ;fBwJoOd=FeX`4)6<P8q$<j!8d^zcdUeuj2|
z1CUG%<O!$n3ZC4bZkykQjx-Q(Tv=RdLcL)~ypyU|{X4Wv$Ex9pwEdU!xFqk(N>g;w
z+TB$bA9^}k7en)<>d+BbP4&9T&C{OQl0)f<Il_ymoJXyFiq;rpxA`M<-<G$bVnTja
z6S7@jvC1ylA#u>d+JA#c44^4=5J^(9_HV)zj!6>N(n~Xgt&>(<`e;bY#N4791$ykT
zTP3c~&`U#7VB?y#i+}+IxuCeC(2UD48wHK_g}~KKr0XrCrbQS5;HfwN#*_VW)lgAK
zHucDkxsTE|4Z&zcO&~;03aXZhuB(Loj9M{sUYP!T^%hHWt!#QokFpS(;Xg>mxh1Mi
z6J8AFHb-i!++vE<+4fx_%g7m4&`xryXaNZf)AvZzJO+q>CR|;K0r^z~nrx&@HR9ma
z9goq~&6fHr2~Qwx@@k1nt0=*D+58BV4<$S~v_bg;Bb!ljflO;vX4F7Kelv_#fzsT9
z!%;k-9M>V^xN0nz6=8s=rw1u{HpKwsy1UELvC}AAP)wHZ(3^@azB&pAC&8x`fLtM)
zovRRG>3slsrY{r!v;B0WSAdS}i=g8{JSlG7<n-ieO>?(BHVcKZ8QYGfuus^zwAIuG
z#)}~g_2T?~>n?3_??xuIjgi!+NND5znK6}ckVkn-52U4Yn$rWaZuSvihqhn|wj96(
zhN0>h)_rn>?=_qY2kkM9Zb4&7iT`-CIuit2Wcc$C9vf!73{GD>lz}wc2BeQ*mq*cK
z4(F6xDL`%6!$Bw}hX>#W`4!{aYF~H=tD3+&LEsoXRdI~2>I4Z0zLaV**FsM8rphbD
z7dR{tqorfiYBJZRBe@t>5`Yx=2F}7FM55<>cCa)cMsc=*l`R8-533mWtz%cGju7gK
ziBQRAE69n+WhmjR4eo=g1uNzJ(gh(n`qG(`Z4@SN3tH0%jdXsP`k<9mNSx6m0x{XQ
z=`2z6hKMT+RprW;EOx44<_Vrma<s2@zMDhcTS4v*Bkdp9U&j8g%48DwdbZiEiJEZZ
z6`@AN3v<onDIHN?C8yzgs<ND>8uGqC(y|5es-+I+x9**BZI8w^@)DlWmwEKM#{Ddb
z6mlZsE#0BfS#Bb4+9Z7rrG?Tm%v@@ahK>S@;Zuey=Sx{GZIiE*%A)|I@tLjz8{>Fx
z+Lj78Y{68S4Aq24r6^l3)ynx;YO<I&x<;+r#=Dj0dir$%>_!Z}raz<kr`4}nu5M@)
zT)<I7w^5G`qBu1;9CIYrX`059(8n3#4fn^-kJ!ln>Ddun!nU~~8!~AL=g;TRU6Q(4
zbDSI{3|q!&i2dtZ{+J9)fqu;5Wq;32=-zp6<C-RMX$ichLFR|^M-0>cLuc319MuSm
zw!YQ}D6tMZrl2BcKzR*##*luKAa*;oEBSvtN+}6&g~ZxKP6jLH7Ny)~zJmNae<@I|
zkWoMZoX3e4D$_aKx5jaHWo;f7MZUZBe!g`-SKn0==YTiW>Qo{zkjY0RUY<yGL%QQm
zv%jMb+mGm&GbQcw9Hr_`ykIL)fa=$9F6e_r9)ix0srw{IS92+fF|V1=$!?T)K^g#n
zO#NhSB8OLtWwx%7dR>ic!OLe07``ODAv-HkIcinpki1#-6uX<l=GNbhD$xuO)n0LH
z*HB5K_6=+~qhi<k#x-2-f5XjxQ?tpqzIIJ&e@+vn$R^ys14zXc>1PIw9=XP9^y9o$
zf8yq5z3;o*=Da^~Kj{VQhi*9Sr}^g184xH&Pwd+m{VMx3wdj3$9pKDv+#8g1@Ao=g
z$NjBZ{a1<ngPvhT1#e_A^`;syuX294x837zr0{b@7m`_Xyqf$LWT`UJP;P1TC*^@A
z5guq_FDZGT3B8!@RRFTPcyU91ncL!NXpOACWyACsA6x1p+8a66AY!!zzaEa-7j?_E
z;GuI-pVZ+qJa!?iW+|sM(C4HXpjm))N|Uftn(~2DeU&}3?(pJbLKG5$BRxS%x?0dX
z{Dn6QSS0+lHVAzi_w6HyA?M6bSb*XlEw9X1fR9<B*giaw1r+dbV^2o}Lfde3ftCYp
zp;u_MbL_Q)uF}FXHnh;b;*D$d0j^^2w_BCvsgy#NY$X)3sg>7DsJK%Lnyi8$uhzo6
zTZFV!%}7{Xp=63401|2Sjr!jp84gv$8I;99*Df%#dVvB`tAr>NNg?l))@U$J0{=JG
z>k{bpY4arI*3`jN8j7Xcv!XZP<|+zr>;U$g1Ki~6_vgY&JE~H5nN{u=F&Y2Ms?s)L
ziYe9rg-ul*$a-q}1Xjk};aK#`e|$XUHKoP-gNE3UW2|BaGlMkwd=+NF`=vi&-$z!Z
zkEQ<@z{dpM$rnScP*m&36}o0m-nClY&E1|!c0%kd*J@#mNwX`gi1~ZF!nJ&LSMs`)
zTQF~lPO^TA($#VqC&*w3Vu}4IAen>&!;_D*B(EXxFnRVc%VquSClMN5S+pI#3s8%1
zTGKR}B>Jry!&~as;%L6E3CasS(9gmo&4_E0d5L^;cf#%ctU8z;>+0J$3vugEPtmal
zHok}xm_Z=zpaXD1;h`>c8*nl)M?9Me9mSanrH+raWsp!xGzn_xe+qr(TZL_YbBmq6
zBIX9YG;8N8ns>(2yOE)mXtf_KD;vktwK<en`XO;YY*CbreRfn8<-F+;2g2*Z+)xqY
zRI&DS&^M4BO{@A>ty(#Q9%PNAK&y<bH_$P1c!g{_kWh=X_Hor|wK_HJx~b2Ul=%gL
zT`;!@C>P|g%YBaoa<|vs2U;`luJ3ykB6*hZ;}bML;Ou%9Px8jTyuH7NAMXwYy!n#k
zN6EA3Y8p$58#7OOhQc(#3VW8gtA`rbSmT;&WIqb<j2p9mdCRQ>-?2>4R~EYk>+T18
zu5c&D%(q@9em8j&<=`pLlkBuN?u#$bVG$4#>t#1pSzJ37$|sx>0D||&fN)+%-x1YG
zyPGWs;-)m7gx*Y6SwKvj)I1^Slum_qLTm^ACioX=mE<>lV%Gxg?NZx*yK{H!uG}+s
z>dxF-_sTtYPu+#?x~S@NQq*Wi4rDNJ1g*)g2?6e-;6@mJ)>^2dpW$UP30ZJu$c-I&
zLxVk|onydIq_UwoP>lbhzR0LSPz#=fsMeSUnXr|y?`Yjo;$RVzj6jB6@%H&R*eGVs
zA1AA2CLMWLtjJ&6htsOO3TR4OkxU)lvSz4&L|P*F`31XmL`#{<0%bW>$l37fHa0|7
zh-nc2li=8gDMfQX25U3g!E?l|6VGoHXN@Bp;MdeEeN#K){$9m?rUyVT=<BAkuFf9t
zziu0?rg6AGy?gUM@RP|Ev*-35;WJv0pqaHwjgl7;u|xuaka|bf8nzGm0)@zwPN(15
zGboH2WRW2~JjR^A3Xg@$Ci^<Xqlska6T^p|V|*rsN`K48Gz*rNo94c1$f1r{Zf9S>
z4s@^38?ztmchG-oU3-0P_RS{W--xhPH9-GxJd(J^`lenrqxEmBZ)8RL%4(XoW@lf{
zcjw5R5g2PdBU#xJmi@;hn1wg4_1tpgXMfhb&LzxUYpCCr4xCCpkR*L8is1}{!yYC+
z38p|1g+2<lQ#h^~F&tE3guc-(BY)lxoBXgT8Ge|umw%_YJrLjXu#WoVYhyK;1Zj#8
zVvk8HD9Tuie3h!L-|dLKU!2h~TaDb`TcMa**aJ(L#Gv-q_vddVPUv>1Erw3giYd?d
z{ryfcId^#I&K%_t(Xz>|Xaul1a&fx*U%5EE4V2jJe`a~Q`=#YsZC#$DEz7fd;_@8z
zr(Vk)lc)zU^~~c(7mjLElzF9IUCG}-zix+9uiXa>e`VaH+EY)y!Y)0>BlZ1la~3%^
zSM9i`B`DbHX>jL!clWe-OjVH^8z+bBY4CzLL0PI8l_5|SfjZ8-l^LDmOh)H8;{u<V
zXGoy}`REqJ-u*kml0+R%6rJRoL{hqOi74&gNou#R&+SH(%j%j$Z-2UR)v?ufbN(Uw
z=bHzPP`MTMdM3{A9rlGYZ9rzdLp)a6<b?n?3*b-Jq9d0;2zRT!z{8{MG|{q00o`8r
zY4pHew_jcpiz=@%)rI^CA96LTz5qTyP5sNj81hC|)ni+7JaIHmhHbdC$!~8!R(<Yh
z1Q@z^h(6s=1t%7l53hi(fvQ94Q87n`=DL_8uke;`qbe~R375+&*kqDf6x0Mpl^QHV
zV2L*40u%$q>2LX3>{Y3iQokfzRt-r(-$UclAX-sH-rAfBm(e`>ODAGb&o}K&4#DE)
z+arb~AdTOAQ-=T22fAybh>HH^Txvd0O`eCzRaCxQDR|SYf{UyXC=8KtZ9=DA%|uQy
ztAuMPhk+3ke&V7U>oL9&73P6D#|9K|3bJWi7$&}<dzlI?TJ?byir{O?CRC2w*=xaa
z{t=pvs;@b9N0o?bkJ8UIYCf{pYSei&1PLXLM<DJa0?0uoOM4tuh$|qY?#!q{I*TC}
zoaFV$XZ1s~R-uk(&W!Cyx9#QWw7*POuA**LUW3{8iL{Z^WxkgF%E-96`E-yS&-wEf
z_41~f+SyYTjod0FRa~K^fM*n2;X1LT4Fxf5<`w7MHaub+grxiyp&H4usw7lb+dj-^
z?i~-tP}nN4+sIkxPZIOizWB{G*Q;MzLA8yI_C%7)VSP_mS&YDeByQfdd-1C%@B`2Q
zL<gv9%>w3EQ2<D%EFa6sOy|4eAMo-529UVMVzCfDFF<_aoSV~&_$sHS@t}aWSW<LB
zl5&A*LnslWN!&>fk$9u<=uO>|#}jNFfarrUf`FxgbS3eGsY{D(<>FJEl6Pr;oaQ`I
zo4a7KZ3NfFfMrrt;1iM?TI^ujLLuOGeW0vF1K3i8XzKJ>A6S-I0GB6sPDwWYfX<P$
zHP<;x;m+-pccKh|or71?R27fe8~}W{b&E*W$m-;spu;MDaPN3LFiU+NVfA9ZqQ!na
zm8)fpp|E`UyNE3}D-R0NsX`;5O4Tx{pcDSr#G3FcLrfq7Caa9CktQmr-XdVVRSGnE
z@`;&yO85A(B3GZDcp;?M6R$wCe3*XKN_>Jj&CieGC%<r#HM#Da#E?lB`*}-|935y(
zUG76s)2KjM<-)C$7mTBx6vBjTU01gpDx;!G<Ho2Q;h>z~_~=$T*e@5!ea?f%=WU=C
z<g1g^gq)}C%kZSteRvUyJcEhV3L1Oi)NCW1ZdV*LW~Ka9Y?_OT&GY4i*slfjpTD1z
znnlrXg~&QG?8_p)4t_++uqu3n^^U&RD1-H26v2&)u><=ijew>R7AyqCBcEib+yykT
zd-vz7it}f^abH%&y8N(lU%jmickRCUsWO1Kd;W7p`fnTe#~&-w-#~g*e?D*Acc&HU
zQ@ok2NdI}`{`Aj^^qY-4s~Xqk#=UG+q@y#}Un<hiH}0ZWk-pftRgped8#nz|Mf$sq
zd-J|BM7q1K47KjwR?Ys~jnWH??7hR*5xQuK?DpXi-9_1L6ps1yt=DmggN$t7aZ^Y-
zB$NGRg`3o0mH3&if&imW;{`^3me&~FeW#hO#sE)t$2~$}$NWL<$=1dlZ+A(K;uU4b
z5^UU6#fAHwwF`vPuD@6gEY~{5=Xr*YC-``YkKb6|z~iS?OzGcX`k%T-`23unZ#v%%
zEaeAEj3m&G@Sl%%k58;`o?kq_bgKm3*(kUm!OmIH_qd?srPFUIX%<(+cA#7gp+_vI
zj=GMd^;w8?QS==pbTH%kH=gxP9m81g9gpl!9ai(-aTwX?Itr@YSQ~d*@{4X6JyT9S
ztyV6%CAx}o_;<l2aD=w?U$%|@+Ar$P+8L_n&&KoAc)l{87shjHro+phE%NN&Bxh8@
zcj!)(>mGx1E9YxW1V&L%62V%?s2nPi6(tVhx|cl5Hfo^}L^;eSY=y+`QH;=F51;oj
zcql&}x~MLIPZ)R<uQ%bTgZe7;)Wh4(7*I%+E(i?BvTz_RL$}mwrIr|qF^t$vXdpYu
z{eAWq^!U?~I=jZLYxX>biJ?o0sP5^@pwQ7y&D^Zvh0ic9r1Gh5TWd=W)!ji^mTi5u
z#CT=G)Z#(AJ8gOgx{wql#4DUSFnalxvc``5hOhJz8F6cJ4$n~+Fq`16QuopnoZ+f!
z-i}*Ct3m8gL@$l@v!IVrxUrh)D)HF{4^>z!#A~^G=|wo7hpeNN;<aj+|7?8miv^=q
z7SNY8|K%!PC6vC*r~Bzke~lmHOd|v?hk9Kyeck3-)0)10OI_>Ac=cf@#%t)p1Ur4K
zEv>BW$;JK3;@k6wmH9(d3sY|iXOB)=m6<U<-FFx%%Z437E7V7jhf}|>ZCS_t)(muj
z3;!0Qs#<-(0gVWQ6Zw}h6h8Hy|JUWmY5ilfS@)XtKR<UD4<a-`qEh0@=Mm!cHXKgN
zd6?O7W@v1=)%_M$;H%&(a7J2}mNA7eCG0PZuFKM&!_2&&owybX+dRt=ktF8cB=6)Y
zXMPz<cV2fu!Y*ycC84Bl4)z(dVf{=P8^lgk$4$rJM!zP`?(Qjvh{&9w)ZmeSfv<<A
zuhFtw&DGpNBX^*E)8_jtXQP7(1?+8X<6c*)zljO<2%Ss8LFRUd{us3`korIsW#5~^
zPMiimy?d=_R6EpX?#DWuwrEP=NX_*`sH@|&$~!aG@bNdoX}mvHALzb?Pcwg*Ha}mn
zsH9JiB)}1c1hew%0y?8goBWJ0qGSDSJ8iyOI@&hgcZPl+)5NW<RCZ;BwW{i@w(JuW
z5-M&LH2?>s@9kAZc}7W8C5jM#{VPXL?BjAwyeafgg#iE{7z$>5vcW)1@&ZzpVI}t%
z*?E~HXIXHzw@{xNVz4wDTk7Lhx48ryVcxVYv0VX3@Zf%`1R(%@A_erVNCnZAH}Dom
ztKOeM4rOKNl2V_MQ3>!OG&x4iGL-4_HIlefAt}De&@R=z%*wc}Im_SCOiOn(x8Baq
z*j_niP`Rq(kriES>lgT6<Ls>Q@@4IZANq?$KLt#>feIw{fOD620uT;(1|#f4r{Tm<
zus&?{`FzfSIQsa<6Fd)K?sVAhGa+EYkvp@OaPHk2m_D`*m~n3b$M5Q?MPk4NAoxx}
zO2_t@GmLE$YTPsYav^<F%pF0p?xHKB%PI#*L%q5r@BU;Ifimk{nRn0_>7H3G3U7a|
zxUl}LvOtD+m8Vmc7MpNkJ&z|uhcvkkhulbI90^Zkx#F7!qSnO)@y3POfRWVAFs{)2
z=Zc+B-H<vgE4l`!@Fn)aL4E=l$*NgwHlLG}Z+O{i@(K08z6fx6AtOMS*Tx4El#DH<
z@fYXMLzmZTLYe_rUi+$vlm1(Ez(#>_p#ylYhPwin8$}pza$dFtmsECu;AV#Vw*XI~
z)*w0#1`!6`!(fZr4?-kOKWa~_Im*`z{Kz1Nnq#P$f(q)I<BLHiq5Io7o(F#9RD0If
zYA57)jxM<);Y#9d74i$yxBgrEEd{nhKgPqLuU-ra{DT3?4~+8ny3fmn%!zQejc7l4
zKTAA7p{krvv{(n-ub|gJQ;H!#|KEHek8UvFXLT7yDYL$JVN{5QE~EiB{YKke;}2{b
zJXv?zn?eA~CV#oVZ?t#3ta*cuDVjGP6baDj^yMXnQ${}&=ztPn-8Q2*#Wn|6+L6_;
zw=CFoN_dEtX68GT=lTcehE*Ac#j_dW3uk~Im5Oc4m4Ui2PNshu{Ih|!88dV&MSj<9
z)C0<z>j#Sb0!6ZTiEf_A;egE^xT?pt*^m|dizH6dD?c=NYaXcKf^FHEpi=v`{(eC}
z%l%^)wQ`=e^%aT`u<73BJMRXxD%FFD*b|)2jj$@05yJ+e-=b(sc?~xhoC3QZ$G@ed
zD)Q=@b`G00<?$H-f>fCSWGU-yBKjn_TcGj0*f-)01-f=DJt=WJ#x#^0GM1>iIf}zV
zZA#Gy<wR#Q=MoB;lkuTx^k<p@vQFoCVkNw)39gvqiY=r4A#WKU+HjEnlfQI^&Aon0
zGD=DOTksw&>bzL^oQ-r|^iC|FMfzXieD^H!&1yl?H~<vzqmR%<UEx8gD5}<t<w&;8
zl$t<?>mi)aII|yO;N4n|sGr^pIK-HJRTZyg#glx+>s-Yx4tpUgRvQ8R_{+iD_y~j|
z>f4g0pI+niYLx-fiz*>01JGngM-pNzmp~?$jQz0KDeXovjCX2T`gb@gR-zIY56R`&
zx7!CTw<iAIJZw3ZtJb04#xN{&Z=tHOT!2JW3jqeC*&=&+^z!=H)dEEXk|Jr6KPO5y
z9V$t*Pm<`6MAGbQ)=ibQPa}hKGz*tj-snikC{adepn65b!TOUUpf!1Do}?*7L?%0F
zX$_y@Ef-w`kvn9vIRi>xMK;QZT%h}9XRvIBQ!jOwO?A2BB?D&lzd431HA?p^QVBcx
zM)C53YCRq&C%`3J$Il@zK8-yKi=BK+HvLAVf(ejw!biT&y%M=u39fd`R(B_sA+$Mu
zE)r!S>@o&nz{q5xxXM3wMS>#g#_DM$+f}VEn`9W<lx|u)!%d6)1{lMO>w9%;d7~2%
zn|M(%RgjgQ6#?A|%!r(Kw7wHY6EE=23%C)Q;WICQ$0lrpAo*GBvZ;~wgV@l6=p+yX
zyCb(_;|#^84ezYjC+rbWbVdn@7aCL4^K5w2!q~V(X%J&PDfHlkuWS$4bxlZw%7>L2
ztd7?8?fUf;!!KfRw%k<kbs$d#ka|z0k5cC@HBORB3?u0njn4C4adnJ0<^K`3P;t*2
zgi<c7AzESAqi1#oe;Z^Fj#lO9LV^<8nApC+8Uu7EL5Uqq?5Kz=h^y?v1r#0(NTAY1
zN5!XP`zJs#mSY*DU7}Hm5@krw9>7PVsiR=Mvy+qd{%&V)&xNN$dVqhs*~P}-&6s$O
zgd<?fDtZaPV0+5Lzm1K%h#_77IRIyyJ;~YDpT2wfUGLSmu<`$Nu-AFj?pW9nz*tq>
zYD>z(fyNS~HohwTo#4UX1Sb(WYn1|XAlWMGaGVB(2FeRFYeA(LRW3hXfJDPayRS$<
zALwo4DD|Jgs1xUTsD<ePGHMtF1h5~`BO<z%ixS8?422OvVLv;o4y#jR&4q1IcWUfM
zfT*kxnfEehRvDpDgl>c~N<K^q5_oJBXev0kCQLmoy$Mmga}^!UMs!al{&{+XmkuZz
zU3v58hI>^x!<BRyoIBb9`WY<!)bm9FprFr=r-L(K)~JsZ?281w{^;xiMX|Tu4BNYc
zKkW-PX_4RSkkF>yoO)v-`EMO}As)}2#;JSl%^P-HZ#&OcIBfvkOwom-s|%MCFfg2b
zT5s;T*Z8x5wO#>C=SUwkmW8>DG1{%elu-I8RUNy+3(k_w9Tl>IlP!;~c6XOeK`oFp
z0;%o%je)J_5A9K7y=ob+8m<<u+8Bw|&eFca)P5k?vXtDB1%l&3h5waF8;*fCbkDe#
z0$Waji=G~z$z`3Y^+6L`q>xvzOQw$O)VX&yn&L9ZYvgl7^%I_@n&`|sm!6xA3^S=4
zI)nB|9t5i>YqD>#?gk)Sqr|PQ^2)odsPalyd8Mknh9O-apYu*r(046I_DMk&XBk}+
z_+5IR5Wv>(2cYfeQYH<9?*Q;_PQ1(AUHE(K{fx7;-rao%+?;(UDY?F0X+_-K$aQkp
za*c#)H|g(x``NK!eI(J>A6>dXUu;DcKKem_P&8ZnmqnO_Ce66FLEl6T<NP^=T*B6f
zeD%Z0+=Qk~>OEtels>{05ONC9S1H~E0q_<o$+G~`JDu1ZC>4=py)>jR5%o4x7f=m`
zdN8Fk1&e=TCA>T0&hZiE@i)Vkh4H0|Y<s8frNd@|F}m^c>(Yz(VT{2o@xk|42P7FL
z{WiW&r-d_5c{XR^p4?XTdgO#7cHei3eDy`$%XE_wF5*1AMHB?pqDDsWwG}^mpkgWA
ztv2UA@!CVCXX+!E2AlyL{DoB8K&=hO66{$%56(p)AGW8O&q+wNmA|0I<mKQo#-7hk
zqG8m}HpY6O6Ej8qKmr=S>^ZbTg-@62)42F)tUmel3I3v*M2P*Q7<UzuV#1Ei!yStu
z`%Z3vLJmZ^gBv&zt78TXrZL|N?|AH7Aw^Htur6=n&q4CSPci)9?rx5>0LI^8>p~3V
z%Zbq3XP~zO72IKWcPF68iOBKUbY9ynASTIEh+|T#zODIc$KtSWv6pMnQA45mgT1`T
zr{qLf(*K(|SsV-gIW+gt{+K>votnG0+ub<u>OLvyqw}0hIq)7#X~(DqjS)+?VTeXb
zr<BsA6i0W*|N8#uq`E!qe{2dpq2V9fS5Em3)iEKhcVTwk=zFmXe|fNjkAJNkK&QF4
z_bk^R<c7+royyei#kPt6qdWh_EAzVtwsn>MWRLvD?6mP6flg=RJof%L-0YX&X1@eC
z`_&zAw!b{qZoRtkdUX%#x*JjmOQAB0xJ}|A6WgGI4=f4utMsqs^no1&{5T4M&l<H{
z`0s*9FX|Mn%SNcu-1(nYejoCP!WXW8yGnp~>hz4XG4MB(2JiT<19gq({^Ym5s2$#b
z45Jq=kN|npAGP=Q++GL%f8kEnew1rx>L<VHQtj>$C&_$}pc5~XV2!mw68}@l0cUPe
zCot`|EC06;@*YCI!!CR|;PeHMi%|wc#fpvg;(2%-h>8yPFu&UqMPgR07-5&&J=H>-
zOs>KyRJ7N1_h3M+9;XAZENd4zQ-8hy;%n6DLPsELyVKzh*I_&lGRWOK#2IVDs?1iC
zt2FevH8G2q@qEe&o%SA9st4RT#CPDS!ppcnI@qHjL5dhYtzNf<-M(<io{p!web9xv
z_VJrY=lSk*dU|CjT{PA1!H4c4RMgWSU@f4}uJ|X?mtpjqn5)B%+dk@w^mQ<w$DhS8
z@Lz{&S_BdrpeJf^jKMGbB*w|3p<<@Uzg`Pq=^O$W<HGT0F&nw{+NX+*P91e%si0HK
zRkEB1vR<l6Er(8`#pK>VHEB3Uk7FaOMEtvO$$g+PF6?x1u&s;D#?D=Q<{f15CKPw$
zItcWYpPqk?Fm`f~Wb2#&T+3e~75CY;npQo-9j@J!B3%MFV4Jji;z!qhYGL#<CFstW
z??9sJZW<=SsKT0~E59n&-NZV#h-GeV93j&EfVZjc4)Mt76$!mW@$IUZhVOs9Ud&%m
z^Jjhp3!gYezaSQWM(4#*oYnkmKb)g>SF`qdR$IrbZ<3(4O3^RF>sPhUVRlvXYcqd7
zZ(!8FS_(U<2Blx!@F3k9x;4R{B={z+1tC5`iA9)ZKx?5oHq@EaP=}Pp=+A3H7tF22
z2^Op&vsr^xf&SE9p1=6;%a5;Wel*1%vXL=%1}ggdDuiucL!}~AC5*kTgKnZUS1t!o
zh-`W*qKU@?zS84Z06dGHIi<GMnOZ2;6ZKDn>u?hM7~TZ)cc@r$f8Ta}FKK=b#=nKx
zw=gZx!S^VoG4tS^<?RC>)9v5l?VrY5zO;qewo3BC=e`*;-Hz1lTBNV<I0p{;g^Yo0
zL|dnskv5FKQZ96WlTX3`jGQc{Yc`Lw4^R4Ve}A_zH3d+(m1sfX=mLYN6XBlrN7kQ$
z=>$+ON_PF(^l)~FPm^&E{==u<)IaD=@#(17YXwsa5Fxo+?~9;qEjNl^!0uWAf8S=o
zg9;xf+$vz&xAD!laRN}su`QvA$pp=g#Po1Zy<_qA1+eL581?tuVqi?ls}s*f4A3T=
zg(*45WY-rig+mejEYv@avn*af8|oqwBO{nslDuBw<Ts;DqG3?{!mnY3vWnnCK6Mca
z?|lpZh9CS@788Si#v@Wyr~0vK&iLk2zw>R9aupaP*TNO7s^txFhN4wC%Ayb03aZ|o
z;#8=7FM~<AK<`Q_g#v!c{(mqNHtw3|u{exot7FV4VpfahoMPN!A%2iDpJg0InOu&Y
zwww6VaFzDE#wBmZMX4>q6#kWvGNb=lZn|EK<9XkjgvkW$o~a=E{wbAj8|8)9j$p~Y
z633{ps`_9Sg)ic&xuO?(M#V_ot2ha75qzn=+aQV20iK&)`LHQz^1AMo^bDXY*#JQl
z8k@%-$Jc>y5h5?c|FqY`|Ew*5Z)~F~AQjuD#V~UwH&K9s?Du>?3P6I^VPQp%Ls7Au
z4gdq*uqM!=(?;zUMZT$p>fwKuN`GU_E=7~V0};nb&QRqGf|YWifKx*9!&9=|e#bD<
zhKVK52|l0icZsQx^BTWg!#cEs?(==fN)k)d@I^B++V}it&VR=IXT^Wc5Ft+SXXf1r
z@*ok@Lu7)>xB}<}_ttB<SMcxLy92@py@(0HKf<|4dFOwo<<u$oDu7=n^5smf91()h
z7Z};MYT;#y@LMI`@UOm|kf~xmXwwOCEd?Pv<zQgyNLUD64sUd-bpJDb3sE6&#5*t<
zj+R0l8TXafsNrB-1m+}{&=poq%yf0J*8YKG3;htnqQl`gk&$5rEONy=H<H8;?S%g7
z6qo(e)pUYcSK?y2<EpP7mj@nG*W(INcA_i_BGSArxLg6^Rb6PoP#SHTrVPfE9s7Dr
znH-Zp$}U(cCPtCaEq}wcBGQZm-WSQ`cvgcC$q9?%635v@$3*`|9$slNOYKs0K)kf$
z(;5JHDZ4U;9_XG#gREY6LN71GTaL27%<<atPy74(KzhNO=e2fsGiYb*jZeJRaD3d{
z8#cy`W~blkH^z>eLjOG>kG4^GXu0kBm^-wBEz;ULenrOHE1Cs|`!cjwLNcF@W*3IG
zv0JatoPKFqL~iJ!E+?KYa(*hgu@#4qrMop=gIn05JKW7%q;FTK8o3(XUhMATugD2`
z+TsS}irUiEKxtTxT<wV7ja>NZ?d-@`JSH4>#o^bypY1dE6RN7978s<iMe3AOQ8o(<
zRu!NzomO;x>#<60^T+e|uRpy0$E#mozy0p@+t(j{fz=S7-oE<&H2>*VemXn-=db@b
zee=^Rz5TDG5I#HROJhLw02Di3<Cdb)i6jp;Lv$iu{hQt0XvZ@$_%~hzSO8`jwjN$s
z<C2!N#bjMmH&exCs4kYW1|!nSWmvL90YOuRI=wrELO1ThK5ypHtvd?ckTF4Ml)7*p
z0@sz7YslTP&pflVxM^cv(8hzp5o#?rMEBAR;}eE<4UzpO7r194)B2%IVUvt=FjhU1
zBm{W)qQP)?H#FgkfaDaQ&NfP59(qBD+*TaFIfF-g)pmtfde-D>X|lC{N*$(#G}(h5
zDH#i&jn34i>qT?z=HG8<KUK`DceYVDBlnsA00{*XUzzU7`T;{$=KvO`;sar^Yp;5m
zh(;uE2}K}90@6^#uV#pasq<nwA6Lft=*D#~l~>II368xL9GYxD{E05p6DXG)r%)hq
zmfm=jT)6h!JHyb$FqiWtFAD54IyW%P*3zplT~@MRIzy&n`b*DiKX1X?Ej~8jnQ}I6
z6;51Ib#i6l<r6M}%k|Ei<}y>!d=l#3Oh$1%x$u_Q`*P>GA}Gk&p!Yj%bZRLE(^P;%
z{Q%5yC8red+R}07%{8a3Rhnv28h~H#?#5(byz`0m0d}yp2JC1iFU<a6(G&}F9RvK+
zzTo`ufET%+pr#4hMT|-33)c&8z8^pi6R!db2{_sgcEGq^`bfDpenFeKu&G!^nnfn9
zlmTXhU?T??UC?5{1L_^{AFr`=1_rj%q@+f864PxR%-4;i5*5-0S_3x!8UDQkO#a!M
z4YmzTY;GP~#SXwB=Jo(V(cA=|B^^0SaWoMu*~?>q9((NpAT3Yc!Q(p*;fH_<KK=~9
zKl4Xaw)u=7X%`x3leg-PwCEIHh`kfWoy6nyZ=k<M>=5>q0;vsALb8m7s2=4E&pVqE
z{v6sr*S#C}GyK#G*`2<<#&7SczHRhwTD$KYS8t@B-OtYEDW|bFC8dA)%C6z{0qxE7
zXFTTdGpPX@RR1Sa;V&3vbql*-Nh>BRCi$=?>ms6Uqh{nNN_Z##jm-8{{g>vI{ACg>
z?K8=$Or1*i7v$7bm0v4SHPTh6?V-2FS&r6-0Q@pS!SM)awmS6j0tMBbrOhh2j!8sJ
z3uULe?7C1EEftg&q4Eq7H*ebHt@VZ;9oP7><}Yh{M1KxyI6vDtwTV&GK)h!2gLfBE
zAUi4k&d}d745g3$7NqV?f!U%w6NaPygaL@`pr}UO@H<$CfA8+*Y^(l_yRAau|8*%H
zO5ulpnIA-4>F*pO<0PZ%j^-D}@_m+39LoMmVPa9Jb$?I1rBITmt$~O>ktr<WASE8u
z<w2tikAg3XSsEHjaw!XOpWBgG-TV8t!vQfJioU2y)h!gH)vUUi7BodV#;ilXN?9YH
z!D`_2)+)YGQT}Sxec<)7CJG{fXQRwG(gsJKA@LqQS-=Li2J_=cL!zJ#$6f@ph`4Ud
zbHK?fFGVpt%7|Y_v)G=vV`*8y-kn2~`YZdW7<d+%4&XzTA}^#Tkj@frGS<@5URZ<J
z4a^lNu1BI5`Np)3&{gPF<ubIU()*hfIKryZilWJcoJ~>(R&L^yIFvYOl)5#wxXYc(
zG($=TOtnZX3(MRU5`VY&gY2byj{Kv*wc+rrKXnTV$Ar`bSx@?=N?hv@x`Un%p^{cV
zDvb>t<wBnGAvD+SL&LBT=K#XUv$9s+Es+W>N${bEdEdJlS~GaH`l#|mL}T4|pxC_b
z!GjwPZ6JH*Nc)UkDF8>8y!NcgZ*?yQdJ|RrZ@fE{eWhZ-8#0H>?-+fkZyOnBi0q)O
z`s{KFRtOsjy~NC2K2)hiQIy1OGeWXZ_%n;Uu`H!{5ftu2@95m6SJx~kc5OpsQ02+s
zPt9clFB%p+pQ~st{VDpPgl_S>x#B;HZ)5mIb}EZF&AgQc+}{MxP8_>;NfrnKa&W<w
zByEZEhne=fK{;4H3y5hj8!a!qk^p2rocHJO1#)b16&Z9OOAp=A3~1SzQ#x!#ONKyq
zh;7xqa9I8XANsBS_V4}HK(hErk))8DSGpHw-_3#rV(1?-v)|`84hp8Wg34(o4!M?o
zKDFWw+B_BNg4WDXtA9wpeI?33`)DJBe>0@tz7l01qKg}m@R6i+M4O#G>7B<Pr}!xz
zw)^q3kVTXpx5j2XzGSedYUbiZ2H1nJ>3lXW73O<cvv8dv#Dx>Atyp*RY~mcZBxh&{
zZPeq5N6wfuN)WxU$=lS#IVqOLkLvN5N&{bu2Cz*c30?GU03-^^L~%#uL@wxcVuV&Q
zrW*-Bd7dEEl4=4?V8bA{t}<Fyh6okmo#n+Hk~9(2MMc#52CwVilBufq0X|1e5df|O
zBw&-px|{9p<~yuhy*XqgUpXG550O?Qk705LjYjO;*l1dBMjF#HV!65Vw<cP*A(H%G
zmAos`r)=bQp4lWs7K|5Plhw^6b!+v!<499RMv0NQx`^oNB9d1Z(Pr=vTVO5+`D4e~
zR1Zqs)Gi&kLt$)f5D#p!U>@htNjGK`ZRTT~UC0RNJ{CufnO7V>IjVrGMf*1+BbrGR
zbMc8eGdem6!ns}S@=VbB?#%3KF)R04WTDKe2gR(|ml-nw?kqQ`VootUnTa?pw-WfX
zg3^15sD(X)rx}fvN7M*%Q|xjEIx9VWf>KU-(wZe;MYsfxlZMj>@)Im-<fGp!kqix{
z1agHOfmL9fgWD~=aId!2<!(ETa#N!Y>nz73>SJ5SYfv&8L?EH@p?JYRD9<<IJXYSn
zeXb6QggnFCI1PG$^9K(gWpXCJy6P)ZNM6IJ>*}GpbY)1Dmn(D0MS_<gg;_?!b^w^{
zS+wa_d_wC#{))=qoh8r%RbD^fPzjy`nysj!MxQqF)ClpA*@k%3QgFaOj|eehfy(Tb
znU-mGYp&R>Y%9A}Dk|BnC7Hg-wSJWCLR>B#;UX_(lgxx=$SpkfO>C*Gr&fUNSI7B}
zfb&<*jvdJ|qt%7O+XGpJ>tjJQz~c!W<C1&LVP4>WCIQ}jTj-dIDdvoQV>GWFgTU9c
z@GxQfzxqUyzwlH+`1Wm`QS3lf0_Y)GHG(a?EyC#(-KHmu9&()!6u;30I9k~l5$fh`
zud9Y3v53v-8@a?+G)00Zo_T_rNN}-Z=3<$Zb$x;F4YGs@t0wC$HI>fMFtE#sPV*{T
zkezHFz2>06LgcX=vH0wzVn>xFi6Vo)zC$MzGeS3WcpH!L(3iRkc`Yfy&-*4n55VE0
zM1->vakd;TZ8_w~>5E4PFEIFKhmF2sslUW`rW^)d_m%Xc*jY@NekUiX_}vNVsgzEx
zV`^y5k_3brVR1`!H^n#G(Vk|;o;3|p09af~Yo}OfAlj>TAt=rcPl^SG7-@o@jz!9j
zHwMDI(IycfECJ7GSdx&eybvWM^S`L}mGT<hjN3r=Bs`tg@$-xvBdB+NP3bO0Bz|+8
zO{IGUu8?$LzKw6J6LP&kmiM@0kS6T6mp8RE#-MTE)bqfQSC6ZIGZ0XZMe<cKm)l$3
z3<R^?8i?BWjM~MGIaGwIHZxT4y@GujMAnJvK>@}%Jt>WW@!bj5LY=Eyl+SWD<>`?u
zlf-*sAFwqrOb=@L$gU%bZIJiybm3#*(E)=hP6koWqR-fLB23HBvJ9HSYEG<yzEUV}
z+y{2^nE{DY&$8TGU4arPUFo!i=EywnYShA;nJaH}<z8K&_!@xzR+`_noZ+<YSx9bM
zb^8j<D46I&rwjwDZ>9O%cxzghDAXt-NIxzGjRa<~HaEhwJ(X!;874wyL!a{{L_@?D
z=psbpibe)(-5c0BFChZi!4jM)FPPtm1^mX9PfG7ks#XuasZZ<HfR{`7?@-#+>_)j|
zEL%x?Q{Hb^<anX9X*}-~Rm4v{`&2Sqg=}a^CxWvpX~^j?uNHIa^b2--_BouFs-gyc
zLp^ifYrCi3si}5CleX~AwIVyfmYBh<bHjV~oBBd33)2dS{fhzmq~<WM49;Y+JCN-Z
zcC&R-<LUjz!C-@8e$QD0-Vz=@FtF^_dERVt_c(8CO^F$ToTx09iX~qt9!^?A@zig2
zpAkWtegYg`B2@%^ucV2N&=j|cxM>iz<2*-+Zo`nt)8jn8v=fJk;Wuy5Ru1C}n;NV_
zY~sT)c!FZk(DS+eiS&}Zj6b8#>_+IoL7P0MJMH;#ySX=<c<uiDxI45bUdNrEbef$#
zC4KSl@56fg7;3|tW3SWPbL;gGNS=u|KR$rMdwr;M^2}Qbu@5<JmWs2xyOZNW0#uSq
zp$oTQj>>65LMex2x+)W+8~Xjw5!tY?m;`*hzn_R)g_$vY*5^Oqy%F;nQ`Ka?2X%Bx
zLXl!T;era|^-z}Y13;^O7FSq6;Pp@qGuMRbK}vQANKrSjvKqUF5&nt`)lsK%DP>QT
zu0d51vjo$L5z7NL8O}2Uf}-a!dDn(zQi@XkTeQc`ya_6Z)ct3=s65gqsF>ypTieNT
zz;d(+5cujYFWHEtP$XQX8<hN<4ozUpe{%Y5*nE~%H{8Mm&u~xZ1Fuj*XdA}bHCU5u
zD;jN-uebWK6kjEcHeG%n7b*}OUpS2WaUBcS;jFDkDr`c#&_~!lQcp6bxY-8v80RO$
zq1)q!=11HSTlGRo`nqw{jw-9L%ZsiumO1NBol#YhMw_q1(02n$qTw$trl1E4KqrnW
zsocXZ?%6m=h+_#|X=a{Y-4$w;NYQJ|AfxJNb1C0&S4gi=O6EZq7>?ZFkL&;$n1NL;
z#zoFDax%{rsi?Jk-54{1g+xTR{N`r7ed^gW79ccOdVnGAaTjP{k2mg4CUAfpUl|l<
zCemtG;&FlQOl*!GU@8{i)|k2HADhi*tv^3!r{VT3x@fw^*;ek|XO5$ghr(wwhtzxI
zDfiYk<qd^f!jzaao>LkiMt82%)@=>LivIQ!I(KqgB5{WNNiHg>^74{}=3)t>95y@w
z?j*Vxl&^D;Ypzew8g^m=mG4c^iW#}(`XqN1SlE7cjP5+drC^M5asf5WI9>zO$jqaU
zF?%ZgwxVQQv14-f3Rf5?GA`{KotyVhkl#Oy#L*oW3JfBpsFo{;+bJ_g9^|(Zy+S3K
z-cG8voL0$u8$FPbGK0-`8hLGdcQn3W@*xle<{%Ivo}fr-q7t?Ah%`1lBF&^cnLJgF
z4bMb>wX2C%_sVU#?5F_^Fl+j!<yf)`@@0gUq_^%BrYR3bh>W?5I~Xupn3L@8zQ{Qi
zD&0BA!Lwlj4BW*l2H<aA(e(qXonZ!=6IV||z6lpaVrWeWk3X4&<+lYVCQ{Hx*QFEa
z&&2G{1Vs`g^q8QUn#Ag`1#q=Tu<cN{Mk*QI-?w*Amk9Pfe&JN;<0wS+K=kq!UNmP(
zyddXpA?l3_U2hb8kcm08#Yf2S3}CN6B~x=&WNKR%R1O|H)`dEa<ON!Snu+3yF!ka=
z3<O-_rP7@|HVgYHi~9+g*YqP}N4>}^dk-E5AYoju?~ci`hK_WHm9Gt~gZFVbi>IjX
z!T!9Q<_+EF36)mdZ17BKT`~!_PSjj;uC<YC&AHYpSLlW4JwV)Gg(fr!G!_EnxT*Io
z#-$*ag#5S`Au4EJr?fICYoP~tmu<?O4`?~2?^&$AqKI2)x61PT0Pn@}OD>Op)K@IO
zLscH@2Ji2=4=1{n`+F>QyfpG~J10g>h(xGug@O3pHOE5TS9lKJTyrqXLJj=xnxk3f
zYQQ(w=!9_bDSE=Q=B~u_csvUvsGQ&5?~oCM*=ecxMAf0dmOnaXzbo=&NK!9L^(=Ls
zrL1RJs3(_)>Vb}}7;?_g#zx+10!NdFc4bHAPQ5ef$#<Od!aL46_4S#(FIB|Yc5Jx%
zJ#*(nB#hW`E{?B072|V6Ml&6|-8b`#HN($^{4!Pd%@*FJ%_HHlo+`|5G({`aPzm^_
zL0#KyBEqh*SJvWCN5MI4-g8rV?3|Zi;a<C++_n3&7md!*<Jr%29rGFfYV{d}r=Rtm
z$ItmY4?_0l?6zIPu|J#l77O6Vu07UN^1RPO6rE8Xbw$wXU-jS7O(S0@*ySwmno{_Q
z>v0WLF3c*$wL`AXTc}gqFVe+=U6JdZkW?Vm@UvF^fzu)nUq36-WFpqdgvC$Z8ah-O
z`6utT-tMoxt9si7F3p%Hd9`llzBaecwNnR}&+WJcCLwGIP=w_(0B}+N<X+d;ChQgW
z$j><%_(jDy7|s7&WH1D>zmcntiV4>P9yC*!H$Y+DKtaNuHzz+cURCRZ!!44yfUo0`
zUWtp7*8P2aLgLaJoEWZ(o_wsnJYfJ>KNE5R+`2Y^p>fs!?3N&iG{_rkh8|V!lUeQ-
z%ave+tSK6wU^*XP!}5al%gg%c8af*Tfo$+#OY-}h*RDLJFy+OxWT>Wo$DDiMFG!Cs
z7WyNx)EtS~V+OMP<$?+Ig$gF3U?K}9Trk-PEe+xb@(`G?SIeB^bxz4+cInkzMj&W$
zTme)7QImC>Pt`y#R5mJ`XFY>_2V`1h7jEk!!}E@8&+LQo^{Utlo|ejP2=$MAKUCtw
z9dWPfGH-4^TBQ$WXK)%TyF&Au?}$ixa7l2$syVY4`g<$a2RcNJRtmVO0=#7gIt&{z
z)JQ)t5!kfj<X9q2aKB>Lkfyzty-iEREqI6wq>YTP9@(;tT?(+NQf_9n;-}{imYPCd
zqV}KA0u4vYhL1jW=>biB&hQa!(BV(LeW7K3bIEd?vAN<g+HI_k6QT|=Wh$QWzAKDY
z!C>y$l+su^&+RGvKC{mnbEl5h?(|_JFL0;F-fDMuYE-r=R(7_vvZ<&HOPx@sP7*@Q
z)G6^?=#+o6rBnWm?$il&%BXBrtn6%SWm8cZiTAy;-Q78h;HjQ7@vQ1uc^qmH%08zW
zo>6V}l{;rqpX$`vF)qZJQQ5p$*>r1VXQDDJbwZswiPhlF#B-rjFu3YY88dZuLY*=y
zn-?paZmsN0R0gcl1lA5%hx>cAr(-${VMa0720lWO2s!pM0Qsrj+nn!A=bK`_jd@rZ
zKA@yqb`|PJZLTD@xkAnFn71H;yJOCYCHgyU=nraDv`Bwq$4(HV`6p8HT~C~W6!OL+
z+pl|x(@1c)#UsCw)KlDX@Q8jN;19f$q6E!lqSa+rQtCN%?&h8k-EAb$aAzRr8J9Le
z<y;?FE@<?QiFOilh(7w>(wo<9Eb8cT8@10@vaxAypJ&EC&q`Y}D{ReK1J>fqU9sM9
zX`g4tJ}*=@+gjOFRA%h+%-H8yX=`SMt!Z|uVxMQmJ}*=@+gjOFREDcXlzHXRlnK~H
zHxKX-I<y{e3c=2aSfV%+PmY4=LLvTYoM)K;^!)dMfhi)Ea?ZrlLsgSn-~(0TcdfQ?
z>#f`?Z#sZBW{8bsLnqwO5RKXC2`1?|O_j0Txwig{(Be#%Jv))zwWnJP&qQIIH*EMs
zPTnz3o@^Las=8sAq5h0e-%OT0JC;iz8m=ll6NTLs*?<-%>Q+wFS$Psy4}4P-JcDo3
z9q)>WpzT=-->!^rbi?o@32-rj&_JR<CQEd%A&MiV90-wnPsBukju5SAdMPQ;OVY_N
z{nu<emXI0}3jOi*^Y-B&6Mh>6*5&K^5JiU1Y#^lS2~vryogAn6)IeC92Es}(M<7BD
z_wl-Wm38;Zb#ERb3x(FkfMty@Z83q;Q85hu${F~yqK1UUjq=?qHt7s#k_&^tsVwFk
zm?S0!%8)0QGHfthIpnBJC5ER<Afg{*{*!pQW=UNT4!D62)R;OJ8=ZlV{$2RKrlsjj
zmZK-iFo4O;37mDN69tx3%cRi+eah%JBspVmf<|ZgdKyM0LvlS}6f(YDNd1FUo@3~N
zK=|;F)Kg5?pfrM%EVS@xDW9ZwAr~=q<fR*?mSr;o`G6iD^QIByeFPx+E5$L9W#+hA
zxLk(gj4fP%cEjT9b(@d|tFV{P3~~ji51{iW2A!|%`Ii^FyZ^NDuR9^ap8j+$bOY{K
zc1c@>%M>*jj!zy*TlFU+9Nt33+NyVyY_x0vA5~hwM_wa%&;q`k;dy5xu^y%42Gz>t
zrg1awYs{jyHGbTXF>VoyMJ`&<=Gt-NDtz_8w%y%DSkbiVuiMx{)>79%k!l)tnWJG@
z`Bd%3dEHwoL)_6EDNy)>yH5BRy1!omt4I>A)k(<0va@5KQ_fC&p#q*Kbbx=9haC#f
z1uY)C(mNiI_QP@0PaubT2197M$xs{z{mwJ-<nFYc{s3J-qQAsuM?)D#@ExOL{4@}a
zL<L+Lxstfeaq~|(1_v@~Q_+SAZ{3VT&)^5d{&qDd-eebmLg!St4G0=NbX3$LhavJJ
z3J#coxexruPR!yVmasm#U-to<?3B&|KvNIa*x6p=w)%2MU$kYTmg>aaq7F97<3I;?
z+SMJdkdXYd2;uB~N+{Z}3o4gF!?@?}>0mju&%IlZY@lbz-~c%eV0Q+;i3_w~;2hgy
zFG9iXDUhryZ|sh}Q_M=%(`Z(2&twH?L=B&VI$m4_SOL@q6`aWmrg-B6m7ii(vb=7i
zPc6AQ#&UB^0SAliGLhSbGm)z^dZO+^VJ?H-ygYj1Zn<Y%1*D&O^hCV_B9Ut(T9ux-
z7w%Z>x-o9RiP(VdN~EqZ%+5s8lOf-B>JUXXOe)^Asq39FO!BHRcF!7kV>Bn>-0c4T
z_Wu6r{{Gyd^5*tWC7%OD9CtQMC7lWtIep_RG;^iDu5w@T&Am0hp5?wm&F5y#XStfs
zuoqgQry=TPG1Ll$AEsTq6H4Fn($5cnW8Gcx>91xYTY5MH8RW`T<c*Y)lHc^p3ajBT
z>^FO^Z-(rEH?7ROImI}vsLJ47yY#$TexHO>?>Bfu)d%mrd&<$Y{7G;X&!<6B5i%s(
za4z<hT#-RJN#4lnWN@yE%rnfy=6U6hxA;+5+Lgav;n%oSF{`u8b);WyRzYU=GZ`?K
zEcS(oo#-k}PPrvtd`2CEVpEwBT1OavZE@Wq-6UkA$gt6}S+`>d|N5l<&pIETu<I2q
z|FhV%Xz@&Z|7FYfDSk)Owl(}kGr4VArrSNnu%?P|8WRbfLaFUEiaqH>W_P!ZrtJ|&
zTS0XQVS$ZC#LyuT?~#xMr3oFCEzV}R+3EIX*Hz7~%gv%CXSr3a+j?q5G^?1w3BjOr
z*y{Zm-d2%*{{`Nw!X|q^;e_K!RRn!yJjgc8D$2y!2%QY!#GyVH_7{k~8%J0%P~;T6
zdQ$nPoPV9mzjoLj1G8_i=hESf_YOCCfCy}Dj`AJed<si13YcbLSWC-k28(63MhwCp
zw2e!EC;FE?=Y${e`P5@)z^B5GczM5O+OfD1t#6<lkK^ufm*yL-3%b7b&Q0?-&3xW5
zhC&w`Y-De!@F=IOAqI?RSMT<zn;{n^E{e&PQ~3~@=nn;dmJ!~#m>DCYB!xj*imLG9
z(UWP?pMr2mq+EdJ-V4~@v>9@w!&2XJo1Ko6v)GVTuM1VL|G28Tm+B(j=($Rhms%<T
zbv}&I75ka5Z2g4F)>V}iFVd*CVxpHDaK3E5ANi!Ooi-6aiqru)B9^udBNID+Sof9n
z5k=@lgUogpcG?|T+4OV8Fa^t@X_=uz-#mN<+#fU+`calEA=04CXVxPzKXMX$oB4}y
zzRrE)B+KE$A>^eGB(H}d48+c&Ek!r=lmQX#?(R;Kn@;1+OC<4L;TD+*dHAL)L!Co1
zS*B|6K^KEEOYzkaf2Ed@ZN3_9aw-yf(oK_HO7o1FZ8zI{&qNNAF$o`OA%pM36SDr@
z6SCG5vi?7JLge<2;ty;%RmK)+0aK)2p%B)xuC8TWsAZk2WnHZ0rh_T6J(#oh#WqNj
znKi)Sd8#68qb`lB#?q1cin*$r+OJ?SC-G8dPU&Kh#;SX{-rCEx=;d1Va$W8vi>g%X
z>wG`g+xxlB_j6s@PmSn;=_$}psm6{{h0m+VRavxvU2`gcRh2Na1T~S^vv4ZQ@Utu#
z7kMx<3kkO577_%R3-hB?ZA)&F&T$Uut9@dKaA+tZt4_^j(Z%v163n9cFQu%G;VdYR
zg$dK37jE>VE@>145$6i7%LS*!f@`xN$)(X9*SRxca%(gPnp;0>e>vyy=HZWIe{?1%
z=hjsa+b$}<Z!lQ6LB1(31nijtsL%#-lZH0}*Ge-V_B|Oy(NQILf#smxL_W#2l3-3Q
zYAv89J+$A8Y<7DwMiDQPe9K&N%mh4r8G9<Y59u1q=Q#$wmu#*heLYI&MC?mcQqlub
zI8%hUjbyAa$#4d_tnMkf!nwxK>c7Fm`@Gw9u{TsS333su{88HEj<U)brQU@yD8=sX
zoL}tkcwuyK1$Im+hC;OazghD~$va*n2UG6L4?GA;vD~22B~}alaj7yn2d4k}(pqJu
zJMCOO-(fwc%`klr697rk<^8>=M0nzSplfP^a#j9-?1rm21}#}|Lu4!|EOlZk+ajMN
z0#qkju@}H>ErMBx#L1-_jGs;AWj!vx|02sHsAS3fZ^0UQ2Y!OIMUeTNCY}atCYTSG
zt^$|3p{vkyDcT5hD}9#M+k%}F*un@at^9$Z0*CE0Tg~m^3(7pjL3##Hd{|B4sqB1t
z=B?OQEE>X{(If1!D=&S%V)7Yy#`O6aKa<TzRW&FzUv2eSM6L^p!2r-n{R0KgD+-Ja
zB|20WGOkbz-_A;6k<`6V+VoG+)%gPd<kZ_vf&Q~k8?zH26XDNs1O6@=w<qWH=eTh$
zruABT;9C(}f9f;>RMu6=XOz5f8W{%lzJ7LH|McwB;PRM#s9(ZLj$qZFhp>@1<Q>(x
z2iy^&?zQ`~zGK^R8@8^z4O@GS@q@Qv<qXd|B<1<pTh|L;+{$?@&LMXA9ldle25L45
z7E5lXQR_phQoRF=N=hS2%ZgKOPrOBa4S$c}@6V{Oaf+`{^tApneKra#9Li`^x^T#Y
zy)nyDoHR$%#W@;R0iM7}o+0g#Y9PK-sr~9q%@puaU?<N)*M@m;o`n=U-G7Zn(EUV)
znxb9E&-?}5m6E*0hK&!1OV|U$LNl^aBBZe-K5mq)im~C)?6l5^%@jh71&S)yvaYP9
zO|_t~RY|6hhGh@6W-ufzyJ0U<Kbrodgx$=Kqt(UWjLHGRhK;$qdnTGk{d9i9G&us#
z%a2HZYZtzuhv{EzS(_`eIU8u=&uWaWQNj(JO(unZfO1DmcWgR!{z(b9CQT!pQ?oLf
z)1c9Y0S*5RoY%iSI9;Uk>3={gPX8a~71lpwy>3R>`rkqTCod%xc>zh=F3kg&;lP~X
zz_Bx!-QdD8$zFD8`Zsi-z{3~X08an=a@t^}FWi)|sTih<PQUaJ{wz-@^sQ99$Uwp-
zfPE8OIOQ-xnT)L&RBoz4R`o$_r1)9p#?S1mj&6ndF#kK5Z4TIvfc>Me5EdINaCvuT
z6dMFx?V`;m>@8TN9|1uT7~<`i9@sBz2CA(8lofd<uX~85B3BhZv1hHX8h`XP<Bwqc
zkvaZYkDn|)VFJ=6PZdUv$HD5M{k>q}O2*v=1gWT}KcZDPDs!og8K4&xy(4)a#>PG*
zETQ63@k67n+x|WmRh98;#P~H6#0QGj1gGq2pEzpT3hdOdn9$G5_Oc4G-kvGdqw768
zmYNK))MQBHWo^P2ua4A5%JSFz^{k{C@Vqlv8F%6-?r76WV8E*O?dIOIbPx-Lh!`bC
zd<mQ2hBt3bwQ@w3*C-gSNL2z!!zBju%_&F}^4cqx^U-Z`PG4eW80x5{`kQT%p8p+7
z0YH#QS|-~@%fywmOzbtX2Wgpd2B2lkRmzGQNBKod+<)2xuLP~ps6*jdVqm!o)mCse
zwGaao2=JD`y>hdX4pp%a#-{zNzMMu>Q}h+3uu`U&eWbZL5;5AL`pNeQuNVOryWPUe
z4OU1O%c6t{{_zBmfUm)wKaYIE1+rxo1VcE|SQcdJi4>K<%+MME4W1HNyUYb?Ge0}>
z$}epSk5FU{?LX5AC}dxnSK%Q#S0reA59gunKes0hfbUd!eF@R&|14@wfx(&prEVK<
zRhQxv8yGKt&2{8xx)cQdEqN3vBnX+t3-ql;kp{_2EGgZpK-0wwGkLxQ$6o9HK7-$~
zYogZ?P!w>&Oo51qQe=B-u)H;7g54V3v(-Ed>QJ}b8eg^1dnVPE%t*)RC(DR&?23@b
zIz}+Z45nIl5Yx*T!CvqTomSFqg-of_<%TZc1tNGb_hN_qAIQkUUS?DvlZ+Z<5?Q?|
z!XuVsP%Ho@0pQ={rj*DdueeTPfc#atpU{0Z8!c4GE+Hx|HS-~lwYy9ds09w`gFqkW
zbe}1YH!36oSiJGqKw3t0D}bk}+N4-P40v;jBTbB&F!Hg~3QI<zE;7L)zL68P`waCy
zcS+tTlt?)x#Xi_J<Uz7tcL1xB*kCAKU<6b2^e)`q*$QB^j|_?+=Ja7N3aVn>Xdqpo
zzwhp<Vq$NhP^{&tz>mATBIp|SZL^7qAjR`0H~;2r<sx$$;Eby<%4EQvns8ID-Orao
zSfi#!Ij%JzAj5s&H$qBzlhyL_%5P4TTR;ldUKO03!>x)KtTO7V3dU+&5%w+NK+-CP
z%-uM^Spb!lozBqjjk#}0uh<;9?7Hq5qCgx5%+y!*(u^rzo-A@kQ?*bSm&I5osg5V$
zmUZ$-aDraKFwTj#>{V90!<aEc-KwEuEpf#u-uO;ayx<%n+IWsH`aTPj=)1W0jK!6R
zJt^*65%Z`j-Mib!s}wu+CUDx3@)|vv-<BSFr*foKWN9hLZ)fztGFWIeLU_m$;={%f
z{I9eCImCgnoT{d7&h1bPa9_YwEFI|f%OqQj0%HX&F-pvFINqIrwZ4uuP7y1GII<$V
zJ0h|15HJFx|FJ-=ONq?K62bOWo_Q1aVByxmMw2F$S$yH;q)*i?dUx#SK-4J1w#a%m
zC^(ncN1p%7Jm3mf%moRnsYNR38FLjV{!pM4>?xqFny7(vXpOqdS;G^(d*0~_>XghC
zZT$rZdf|N9^U`62=~u!jeP8>(PC16gQhA@07=G-cSY_<ZQG~KW`wA2d-jL6sadV9^
z8;syx@QKkqqHrj6$8Q`%laV*Z&{O~*@bysLiXf*D!RgdjDeet$(rZ-5nKPd~Mq!f5
zju44(ZCo?M!AFS4NXpPvBTQ|BNPMe5*_6&=>9O2gEW^q{@#aEdv%IYXLuxxwuFX?C
zKqtllii<8+eKJZ5_hm~XCn^}Ldd7658s{u7%b7Qp%W|eBzP-^QRL-dOaTR#+xE`wT
zhEBROTx8_(jTZ1E4Vp+8=J9c&C|e{ep%t8XNEVr!?AsFPRhfW7b-IXdH4mFztB?<6
z9z;NwT6%<n=4wO~ZkKc-HyitN7)|5P&42%W6(nou!@=QEuV19T26o`(Gv>M^L_MhZ
z)i09_ce5}_v;N&pztIMmZL~LT8UTej%_mV*`?f3hMteiC_fR;IyD|&$qA3!yj;h!;
z`9saC+S-niCDL_ODlf1sca+-Bg(-{iv8Qe1>px$G6TEz##*-E8qj5Z4H)rsc+D5QF
z^%>xU>P<60$+U~ZLb6>**;3xEPA>CDcu7~;nQ7u*n!Vt6TRs-Ex`p>GEscSPpasM`
z+(;ubH}7L|f|f9DpytkLBF5s|)78>)6LZQZ#$_R|@8h#;Z<(LM>^?L#c5%dVYRrMP
zU4p2Y?F{jD4P%u(3|lMFd@!{*63`dGA`TtBe;PvS9M5asy;96;x;5A_q<H|Dh=q5c
zzeWA{oyd$Yz{w)w4{a;4ta$Ot`;p{+%KckG5!){Z|3N+CjichtY{?<{V7jABMuy|n
z3x}2XAU({d4`MhtJa&kuu8$%-_OrNe1U&KqgE_fqmrJRP9eFqgb<>No5pn0MZhFy=
zDL*}N(P)XW+rj}JYNoFF;h_qQ!gn|AzVx0)PPo?izSi$I9rZnn-E~KO&EkzI^`A?r
zzeM@R!7%7&C($tKXFA&$NhW#Qo*CNNB<ic^w7QS?<yUENfZodC^qZsbO5D_kd{ghs
z$W21+7$IV9Wc&p(;?=z`f-FgmWCt~_(RNg9i8vC@Vr^_F@Fa*1TYaN$@|9FsW?d|!
z8qyQ8qT@q^Gow-9WuC3JfY|zWVe6qI35rj*Lmrqbl+^Ju;|vLBqp>qStAz6ySwnkk
z4Q_z`Rlf+`7_Cj&EW*%`CDEeZ&}HfiL#hC^m2;a(o>oV`7Xdq$cbgfL+f4kT-Ddh^
z7~tUp18~UCdAFH9y3LH)Z6=1;lU5kEgB~<9WpzRCETCa$njt?L&NNk&^AN4uLrF9y
zgTxCV`!eTDGeLY2vNO%t5UkG(U3qg)m{1i)WJxcLL!`ohgp}q@Lx5WI#yLS@T{+8I
zWm#jEjSz^vmyLL57zQZFbb^6E<+hdkRCRJdyCy8`fT69r;}NuqUTSLq2ZQrWg<XWJ
zb0^xnVj|oZ8pU&8$@e0y;`Zj(X7g*q0719EHrii5*#5er{l|Bry91;-tnu#d61Y%C
z?s|^#0)Uk13{@?rU<>D$L=)Q}gz-*h=#7!5eR?JJG!alpHfQv)*j|Rqjf|2sF}Ix@
z);7^_86XTft-hodF1ZqILt8Y0GuKe)@5cpan8rQPVeXzN&iQJLwWA8N()7w-0wCv{
zRvI<-a+iS2KkCz7!lwa@==9D_%X!uYz)+s0_wasgpo-SR`xUjdw2`GWZFOVQnV6BP
z&120Kmx_wz<wpCpszBHw!gnqm%UekLpcK_4uyeVX#{M5Bqlu+dVZ-kfAoTBWuk_hd
zxsbXBhm)B<v0Q?YzHo2i3as1TL#edCfDft?%N2Za-)cA87RoAm2M0M`HOHbp&Y_Zj
zH(n^AP5aWg?Jpq&p<^L~D!@EVe%syMX`@#|ev{V@c{HML`GxlmR3FZiP(FalP(v6s
zi1C4|LMP^;1&sDa)^_Sr-$s*5VPc6wepC?9?c|KHT@+PChNje+dP65x)!J0Est@ih
zN**X=x6<Zw&%N>$>Z!Ln!5FOPL)cB^M}E|~Xx{YAx3%Lg(1VVuEDM&Yd+nVM+x?dN
z3I4YFZTAw6k~Mkgx;*jD)Qqi9$ncaL#}3$onI|3pyO+m0BlE&%qst57U>1dT$19lX
zv2)8SJR4os(Q!NKz}=4K_0ENdNuPk;xU73C<#)>HfU~Z9Q{}nI?98@C&O{@*8rR3O
zLPuw#^@XmSyoq7w>(@vJol&oVqJvzRlG4Mc3vy$Yc;4jE)^T{BF6thssnY0NY)o}1
zIbj!OEzi4rV7}H=8C0>MX;JRZpqa)>OtkNXb(<2P#Rj_VnKTmgB}Ylu7x3cVs-P+2
z$*-fs4X?AU|JbDJ@MD8r>yAN}8`BHA_)hCKy<x9X=vC5~pz|n7f?iE9tb~}QC9gk}
zzg5d*0Ljw9;V*V~a~bBk)mzf-$6tDesiC)eTfW0n#VkXP6$}8gz@Gt^Pz5#{xp}?Y
z&8CQLNzv+#um<ZaDjbSQIsDln{Mqg9o9J_E5L6?eUS@{L37%(VSABw#v1GcTjD=_C
z4CDDYO12<VY#G}LK)o`OUxxQr@`7<_wXA+dj&$t+KLm~xnrHQ(A8e$lExFMnT=_%1
zN|5UXAUJM!2F9JGH?scfqjke~!5Dte`~-eamkB+u;rFkrh<@jozPg0p_W>NY*7+oZ
z-?#BK{Jsn(l1E{|a17PHr-El>I`LtJH%~t!+h%>ZT48fZh*kL+7EHYKq}>^&jdrKs
z!aE80n`$XI`Gv`}f|zu&f#MSm+ctNE6GEwpEL3)Ut3SpWibvwe0Q&gCRNonk3=wC5
z-XgP*%QD3*p)JoGG90lSGe=O7qn6KdW%cRr51cj4eSFP{NiK0N5=&JrjMhYd>+NEf
z&df|<w8|)^ftllz7`bhNv{C2tE>xQ<@!qKOJ<*KCI@d;y?*JHnA??w>v|FuQwqHck
zg?wg~C1zO;Egwc}Ef<#g?MLzL6b5Pic$WM2*{qtDd*iD+BHR&#KdryOz8nwHv0-0*
zmKS!uilC@>cU<k<2uLWrx-Dz*V7znTnJaSr<dP^xwD%U50zhBjMjc2xQ=<ZOs1~7R
z62GFAiGBgv8b4mLz?8npXYnaDKFMb-`@n690E%0dHn*I7cq9~o8y2YkkXZtLCE($m
zoL$lO=WiE6<v!Lb_jO1154T)$Av*ZehZp>=JE^~?=66lysmV@qp|8eC{5fScR*H=V
zR97&>n<d(JEU}j99EqKu-PksA39Z%8yAyXY?VyX)H;lBuAN1TSn2UaQKiG4p{<?p-
z--D+G4!_^oJL&}c?xz*72|?07I5^mc*ELLGe-FO(j+&ik`>khCA7SB98wZF@z;ul|
z=F6V>(r%e=-P~InZ)>q@q6+=8XTD$+`mLLLgDP-Hq5}EY(~pPxv2Emlaxej+n0V@{
zr)CE`Kv02i=1bdn?x<%xlYD8@H^Q1!ru}?joKOpc>ZE1?_#h@;)N8yMg$BXn+z)Ks
zIM4kEfkKh>iODGgO88?fOw7spW92(bMS+wt0DUPYi60427U6*%dm<J&^1JMx*H>Zo
zc6ZfiJ<mudYXd(YGBKai_yn1UX@4SPKNbQlF3YZfbUQ=+*w5G5x_B0jip^XY>H<XJ
z&6OP(S}z40)9l!ukH!~V13f{(Iy?ZerxNiQ>w6AdRXO(w(4s^;4%pm7<N!ub<RG0<
zf(%c%1Fsys%u*bOvoZq@6bGIQk88#$tcv3%#{4{NVq5ueZZj|c_4#zL@@5olv)!K^
zcZVJLRnaq7&wvkD9k<CBSKHa>V2lP}+~1E@?irgr-5Q}Dq1%Hq^Ie!lU3s@KuTVgu
z9+)pwjnZd*##=xg{qC*f^d**2xh1tBax3D4a}#D!d6_H~IVFwCwGuMWl@d)Nt7HO&
zGip%JW$ix8XMW!0>=F{tY9KX;50P6FBbeP41JVbg-E!Qk6OVNDVOXM;_l1u*NbyMy
zUw#7ADZcP<IlcGH{6dFRn?7{l15Jgju4*2-j>;=$<DuO9j_3+bMJ{7YL^gI$DK1Pt
z^e1ebb8i93R2kA0HmMgQwp=)_Ua<Rnb4~D`<@UIZ*jA5hz}AUIO#`DFW^e0uZh^b~
zw(x@Tsa%?#7xmL;ya09kQ{&oscI&`!a`2U#edhnSwSN1os(qp$B_Iv+a8!Vz`mNJ9
zJ9p)X0I3TZAa$|hof~A2TZrsg5g?V030H+;bOr`a!*hq_OzPs>j$Jd|^%<bv0&kqc
z3xFLxN)dEE#AE3^DSxH|C^Lf<Rvtu^Inb0r#?aMgNoLlKA|4~&F`tQ_gZXuUOZZ|Q
zPktL(wZ8zrU|Hl_u=MdSz+PE@`N0|(Gm;+5Ej%38t^Qxm`hR(E)#rUohZz|zk2}02
z#b^9x{bgMH%d}?IbrMyBvpM9Cz~t@jVxk!L{r!$eKyVo@<pbolxV~RhkwT8Y{{<K{
z{G~h={A^vh4J-Sb;t;w+@83!4mxa$72*i7SrcnP#H;|X1Fe_q+P+ArRvn4u<>%_h7
zMP-$$-r@d1zbHwzRw+iePr^xN4Wj1M&fL52`(-}rbhDAZ5F-1ab=X5$L1Z5u;S=g^
zV8l=$v?F`}u(#)EMX8Ayg7cgdSDU{D>l6qs+%F;p?~y)7KPK@qNV4^NGE++BE_)~s
zRzuoN9$k~5%CvF6p}JpL#mgX_B;gWcpkg1J0T5lvkAcLgig}C`UmBTuFFEJfZH!SV
znM}!zWx$QyX~{ca2blv{)}i^*zuOG5zjTHZF)gSqxzloRU0>zZ=wM_*^#V1Sp}YM@
zMwkvohG{Shqd;T`;Xn-B$BJUe#J<s|Egh<AU`?HTZ1y7z?uz?H%Hs-(G*W@rtB~d~
z8~}!6+qU9|W|%RhKQt+QDa;cB!A-y7BVx_%&EXYh1p8(+K`z4cRQis5)(Wgc*|)xG
z&|T(SHkZ_B$eN^b$#_Nqp5`mSCa#8A)Z>Ld&BDu-djFh+nRwnfeG-vCk-T0`&bCz?
zR(GuL&3+_Hc1jQAz1sjXDC~0WtVVh3i(yMd<fsphPZ<C_a!%0x$xcwe8<o6`aOG^%
z`Xqc2K8i2CutTCct&hAERlZJNsoB>?Kj^+ojX*o4%&Y!LSE&Zr!Qf7l#9ueVl>VZ0
zL~4B?u)x2(Pk!X5RuKco)Cg)OK~Xx*ENlcI666=_fBi3+YAIt~?gT18RJ1A}U`H;#
zX$Yu|3j(9#t};O@&7-_^7jx$bo908e0hFnAu8bU_!geERc`l`iha;O_pZQBF1Jv*P
zfQwg-j541}<SU9i|1W#k|0%qG?L-+o9p1P1@4Fob9$(D;#WI*WL#jkZ^NyVSNDI@2
zW@yrm?*ojuV9SSe<zkuDvbdHmlfa+WqBv^MiU33b3P>|Qngq>{(d(#2z78?#7`})s
zE*0>xM>VzyNo$K$n$@oS>!9Y>N=t7$wMCF!#nYyR9)WTyVz{*OVgu;NlR#c4qH>9+
z-n7LV@Fp?2Sz>U7b&ig+K?FM~mhi7bu$$^(#$`(2qBTUzLD(4veH;CRORtH~M;{x%
zeoQawcGDR?zbvYC$~uNXrN%!kVMo63Q?yR7EIhuO>1qt%fx+BSzvE5(S!SpQ@|$3Q
zGLk{gyphFz7$vK|1IKx?zJrI>X5!;*#<g>&M{-p-EVNY)B6oyYSkzf~gHIs<D^hdv
z8O9nn|32Yo^@L(m5o<!kt9WX?P+t*w?Cy539(f^k$A$Vx+Pkt?9|`+Sg?Uh*@>?@M
zwTuFrK8worJe=p&Bj1h8F+-{Y6<+aqI7k16SO?HQ8+N$kBZ=|ZPp0pJSy3NKI!nMl
zk#EI?pZ-QZ_W78lXm@1Hhdp*DBx1?t0R=grr`J>T*-qu)@yxqILTl=s+ZGi=A^S+V
zJX_gC86lk17z85lGjjbu^QY|eA5*@=7wpS8hEf6bCB5>0<9^Jb`YXB$OqakyEycr+
zD_~@)OZfIKAa_RSP#!2y{DM*<Sc_mPV+aS*=Ml-P*bl0EOL0Wf>@{E&_ljBzm+m>%
zirN&XxV2*Rvj)?);JWATwP(*^d*8t_H?aQ}&=mNLgR=UuE7L_n!U;4sv|7VA8lKhn
zxg3rVSSkJjqp|v_dTt~<G^;<>X*5KuzoZoLvf{cvTm3V75~H>HQ_(&S*y_*dZ5~?v
zThVw3?B`Ak;P^@<G_+2Lg<>!Dg1O+77{??oF-u${X*{9)>am!6L)k3}CFhP?c^IFo
zh%%4^W|~UTG6cHt>6XH$s_-dAEA~!x9k_bBhQ*c|7OIAYE}DM!mknV?k7hmielD%*
zGevcoWZbm_yJcxtxmmj&1s6kRY&Xan6qzssNg|0)acow$PX@%9jd!XJ$z5UhWzvI}
z<yN4iruxhnQ@z^8C!lhT7gXi3E!^jpdu5~b>L-u%!9QI)_L-a7{2!p7DRjZX=(X^C
z$9M#dG7(z<Fbk{!K*~6yKi;su)6OTSNXkiDrJdW|T_jQBd4ZFV0}>yb0a69zAV#D(
zoFq8Uz`VA!trziXj)X#1L$8W8M1mGZGEjCEm)<8-C(O_{k-PR_@@M^QQ?;nU7Df)e
zij%Jlq@B~|m7f}PG-Lo8eNEQKg7<V6_9dPwYkV0%=@8bIWg?#S9c;GK&p{e5g4fj7
zQ=*@d97?@AL@oW$b^wO~;^uvAybFYC=0MD&-xZptB!(GxmMcOSNx$L((pww_=QHev
zJ)&2d7#AOjpmKGE7mi$Zvk`@lb=?9@nQezl-IzVvp};045^^<$aT&QlYq+Ri-bac1
zb@PZL%;u#_S$3cTMF`#M{PK7(%e34hAfXOhZs(wd*MNxZbqR7<ZMM+4!5eD&NpTy`
zQBUOt2iKwB_6<G4PZxiB__K#U`}lK!KZp2pgg@=p4fYa`38P7QVCIv=sc9sNO<bNv
zUMq9zc%K`qD>uBEB(X|Wl_HN`B<!|EtEyKUH@~@H2QbV7SZG+bECy2&4hqntX9MV<
zfCM*qBtXL?gdBF|FQEZa2@crLKTRAYsio#90Jx0&gmaDRN@|wHi=1DKcY~W28^wJl
z-oKO2yg{)LK?*+bLZHD3O*4#6PA^M8)x>fSjA`3xvv6Udgb=mB^cz)_wV}eN(iql~
zwT>xf>yVhOl5bU<V#G>d7}{}yo?Maun8VRU@etGk8}1e2!o2t+Y66p&gk!vVy1&2M
zpwHXs3YeP;niiNTBR4v>kRFhP4iy221qU4FN;Qe=#jbFvVOGH3O_dzxZd7@C^<sGt
z53KEHJf5lH!gii;z&|j+2p!KT=?V~6C_|p2*E!<*;aqmuszCU5Lm$T6t`Y<_Ni976
zIn1tX>vJ&vEzB%u7>w-5L&q{g39aSiS;BfGs%$&Xg%<+XlfWMrx(mm>Q}7Rk)T7Z$
zbVAXv;LIzeqhfLc+veHCyAqShyzpW<(IYf*hj%UAgl6dr@;fLr7k)2*MPT4XZGqw4
z21x3qH@0J-OymTFxwR9tOD@rIC#d+(v;$Y?j-qDfU%L71fc+hV$w^Qbhn)>`lrP~j
z>Xq<4vT-}TUgzQagRJ@MuR(eiPgira%~kgWbR__5ZTskH!neh}0j)N^wY#k@P!9Om
z>mKzS<NCnQGueUB0uY^da?yfK&a798scbDpA=g+=r99?^A0a)3QmC5GZeVIY{9n;@
zrUF`O3c+-Bz^4X)B_^^?G;gl~<rICB)y6@9?t#KA^zr_BT5HtO)e>#$ayhVlAl~I#
z?_|Jk2;N^4^qEOZ8p&vNnUk7}PF7}COhHyXA@8wwwcuu%1S#G#u}~?1O$W*2fNXec
zabnDnOBAV9S5C+Vffn>hjK~0GXDAX-AKg1cj@K7*?I0)DZkuxKqKq4N5MBU@HqrnO
zR<8PdHmppg$>}2~Q7?Y|73M)i>uk3Ux(B`XVW&ID<Uw6=^BZC4OV9fCR~{1ZwLok)
zguAJRRR>%a%Hj^-AINC|KVPZXtfEf2@nFJk5h5*ROG;-P>=_oG(0v=lS>@QO=$}R(
zbG{P3WnK)Jf+}V)wPGwrn5b|-=#ZjCum}tH-7+fHNLG0Vbc6X>ghEBr`*=3Xf8y9_
z+wSEu077C5-OC`WxONQCNrUl$RXx4P&8k@!SuJUUk!Ohw#(5_`hCmC*GC-)Ab_xSk
z22RnV5xH-B!OL0l0VXB^_%%2@M&k?NTaBj;<BsJVlf{cA(27y^Guv<l;dQ{2UqO`5
zF4%NOabiT5O`lgr4iY}`Qz8zIfo+Fggwj+SP8DZ}WKej2-+mrKQv12z4>4hP*GKZm
z875u}jUlU;(`=a0WcTMTR$?djUds{Q?!-`WSJ|ouQj^p5A9JK;dI#a*NE!=D;&Q!^
zbB6wBC&p4R(}+RD#LOphlL@N38K&=oPpc4U5E*jsEayF}wCjTZ)UFHkuFK3_msRgN
z41fRt#psW8SN?&IXg7*>Z9gqhQMrJLXkqNuJ!BZCL2?~TzYVk0*+r=;t3zR>c2%WN
zE$)LLw+}MsD?pb~Ly+qN`wuizG+~qR^%DvF=Wu3KH~BK0o&hJ3+kB==KUjPLj5?u-
zOH2)m>0$r~%#HKZUIwa{0rc{rJ^fR(`0|d<W`&-Xe5%nxZQC`vs$sF}OEk?bc6i$!
zv~zPKccELnNf_dtK_A^oV`hR>fth%M%iC67ipieIjq7jQxTt7*2f%e5A~U>lVZ*0L
z0QAqun-P#Aae|?<WwDJ5r}W;}P@|zO=usp{@de3Rlj01YOmS)oAy&g-f<WM_`+GIc
z>Or*kJC6)PsN}r*d&S{6-nf&iiu5IH?q4d>SEde6=V-6ZIy~*8gZ*ve2d1VG(3NT3
z@b=>8E@FUF6|vyuy3;;qiFHJUNkNBwA+*pJ0;e|6lT1dDV&zw;3_~Ag!21>Q#U%ni
ze-Vk-`GI+zFYMMaLL_Rt6Gb5Ot;q{p)PUumIL{I5)wRwrTK~A6ExJCuK-!1{O&&*R
z78wmf!<N?Q37_qw@WS&rex*=R=i!Fr7-EC{)owAodOaMZmDK?%8KttSK?<WpXC_|i
zLIuzZ3NlYNjLs&k*Ehy;Br2X+ykp!7(k0_vI*F5@Kd}>6HVT}X@M53#6TXyNn)t&M
z$2fN+Qva7DXiVX=59xG|1Q+koV=cMUQnDFao&opw`eYdLBZjLpOK}JwGX**~nXjh7
z8D7c;>65F?7o&RfN$CD-HJ`qRefs1|brGsizq&y>@t465AI{!9xiVdZD$}nn@M3*c
z;*nY)uQRkPenLNv+0%<cW?2><Wf%-t;RIJ0c!s;*f_2|wn%;7mwkV=7y+cX^kBoLB
z*=}Uc;?R8SD_AmTR_wZ#vFiq*-19ykY74rthYrE!L)uPkeIKKYuo%Y+UA14-hDW1G
zjH8!AJ4GRuJcFCGVE{4GUs4u?P2%#*P`leEMg%%Qm&?%qr%q0OI}8g6#uVjuiT~sV
z3L9fsOfj0sf1r>)<Wwil%fDQl!(0lWaL@42I5LidK$)a$P|Nr(PQuGD@_{_mo++sZ
z{00Xig=A&4)qdVmw_85B30J7gn>g-rqpeo~XvToEITne;hz)5rS8q!nn#pK|NH#{p
z5)q{&CD-~ZrQ_|PN<9k>&ln6&C?1O^-q5j!?g&|F<D5(5o02!Q=~G5M*P|Zi#ymB~
zJa^ow0!A*n4H~&qS)osXVWntUD7JeTcnI6j9|KGf@q~|-BxJ*X&9d+cM|Nv4(Yt#h
zcQ?>aqX|NZk6?ffSS?HL?Ip$VVIK8{E<oR}#=^4;;6e1rZThjT$U|Hp4qLKku_K@6
z>M2oAV@I=b8@7AOMwx<U#SE@sD;x)g;gucNxAuWI#!3-EvfKvy4|I@R+hWm&an4gw
zfpG#2%{OCxj8h5KUW77LCLC{(i{czIt-MgsT3)-yC)PI?c?B<JKOTs?k6o)T3{Q9c
z#d2WrjmEJ~oo6!fL?>R##BZ!`RN|*qjLDLam&t!>b&m!Xc{3nQ0l?@NjvHY3zB#G6
zEj5iiF6isd^=X6GK&Gx|A)naGBICwAY`5AEa{!WHKkRjmm|*X8dtC~VVaK*5R46sG
zCvGS#w2x6dN0kN@I-1?tQQTUU6e!x=4bfAUQN87yG}=S-VBe3R|JawO^}n~*=?bF(
z8VUB_`pb8ssOgv)<s^TxP|mU?2Z~cL!-O)t3ufq>N0vj4d7yHoNBj^?S25coO6Xh=
z@QRT)uXrtT%qfTT{s`T`BVp;Frr;8<SJ0=F5V-)~A`}N#&K-wX-&C!Ml%in#7T-|!
z7^J(qh|^M3++ieO5ynvhaC9xEzo~ZX==D(H8@njXYP3n+UI~b$ckeRGh&>8T1(d-O
z{gKKsz+iFGRl{S{GM68DK|J76yX}KKn=3$Yuw%4X0W^1;g7S&pfr$|pKEQ)LgY)8H
z;|tT$f{t;iFD`+-a48IQjW)yeLMLEaF>;jCoxGp~<2{h?H0g#%glv!&BzUU^g?-ZC
z6kM9}dShsLhN2p&9*w$V+f=7_cXxC~!;P6F(^A_SMHDNwHi@Uf1z?3cIgVUFa}?Bs
z(JD~X5(Srt9I=lgIBIuyBRF|g?<Yo(yg+zrs9BB%@S&}wA6{a}KN82}Mk;_V*=Skm
zh2v197FjqVy=Aux$mD5gXMe9pwn}&8WBfTBI;fLqp|fp^{f<9JPyLYeQ!=+)c`9&*
z&BG|v^l(Mm!qC->V+4?tXS}++zZY7>u%teqTtr&RaTyDX-uclbQp~CTU^)s!Bll&o
zjJTBra9#QlEUJpq5MbDFciF^i>mS1DG{A7z2|9gQim)rNoSud5J2Rc8gHDr%iT;qq
zX#OtWCi8IVSqTSHsfqtPI``+RFbm!<;aK-9AOMXIbW{IR8VIM89!<Rdeiq+u|F}rE
ze_K_2@u%!f@lBX!Xy<QRlXwX@D(6aogPFnb5ViQ1zL;rgL+8-<CF-k2*-M5AJEvo5
zgi@e+8OMGyMNeqXU8EHMnxB2(ouL#d^k;DmAvDP6M<<lU0st_uFKe$~)zW1!31{I1
z;CeNKL){fteYq;wpC`Lv8!%2o563)|3quMys4Sfd7j7Zm2M9CVt@XRbZ?d#(&qa&8
zW*ohMNhgO3rCF3;?c&Ul0!`lSIfugFa7s&uB6#C!W2hwo?kT3Hxaz!-fG5~dbp$uT
z<VCz#_~@aKz`!ZTR>E{ZkCdzS*-vY*J602PMKN2=;e4NK1AuXEbptN1mzQc<rMPxR
z%l(?=j=yM?31d9CR&uuCjAFPC^t__vNX&3m9Z14_#ei~kl!qjW&H%k&?y*1l4J&{n
zYq88MC+AN~(mVF^g+HmqY3=5DC=6=+>+ljyRcL3QUgB-S(E7OQblZo3qF-cyqn)}{
zf1!+s4Nl@ucOTPdz#75t2G|KS$FUZ$ivDF_g={GzUZEx&7!FX5s$csPvQ-<m_KHGy
zsGY_m;LWj_A%i|&-(g6O3hTgB#Ht`j9Om8tF8ea!bUvpv^xEVCftLq)GlJL>)n$}y
z3eA8Iy9Z^4fet(5TTLBsN!BzkfswoH3k85G>JyzKH($Jek7qml5e%O8j;7PtUZz;M
z<(2MBs})QBx31}b*Al*|O>2Hslf|2ck0dm+kW4WOk0fCQhk2t7@MKwNZ%jI0F902o
z-q)aBPmbe(1B@=5#JP{a(+xx5x=%ddzq4bn+rGbVcMeDr3Ij+W@x<#L(zm?>_*P2W
z-R<q6W|sBwqgBr|`PANbFfLJ_YiX0?HOvVW@7UO0=kWesBpmGt^D46`c-!Bjx1$!l
z9UahHyVG&FHKp1H#FP091A^T#o6V+bLxh`wxo|{1!CxXv%%$`)H`~BbxN-LmI{RCs
z29e$E_BzbA?ez}#$=2I$w+;{3*n4lkvyUVV<lAdw957^058DUGNTD5iAy8Df2s8;l
zH=8;`dBmOU`p%Ah)?`X<7z%YAJaCZ~+zDV>D|Mp`V<}TJs-mW>a=4*;hAe=r&8WkX
zktitcG8y@eQO;o|8)GF`tm-Y73s`>#J}0@-ECBQ=-~-CFh^3rDwpp(1^!|QkxGaoU
z$%JM_JOVC;8X#dJYDmcnEY(fbmeSM`jmh{~m}lO46mQ}R{&3-2X#OhK{O$eymB1Ce
z5qC<mL&%7`mnHLoDVZn#>){0!fj>ICcxY`Nn|M4C$teoTEy$G!bW|K-3nNqr+6e3Z
zomTemoTd9vi+l*ZbHy7E!V~O&qk)}1r%s>d`piSzQeX$BcXZ}qIbcdhXL$EeF<gSX
zGt+PW*bt9N-2+2J7v!W$YQVG|Dz<{=U5!M;qO(fcgPILUJyd@q4O(^?CGGhjYq=2=
znj2i8HwSL*pm&(l3M+AHS(T8moV2r(H;7dB^aSZUWeVd_n`0^b8gZqycfsYWo8^VY
zH)JXqahXi46lebV&)gRjrf!7cv@ndX)UT38+QLE?Kx(KTZHp8NWgsof>F>ANt*%C$
zv3VaQTt8EAF1pf8&w}JKKoU;4YzUlTids{FTa;J~N2m?&u=ORM?nRG(hWIj&((Y`#
zs(4IB@Ea4dO^t$r{gJ4zqMnD0_=gXDB(tXN8i&>9`-n>%2Ls)qeOgJ=0g+G6HG@Dr
zk%4#$`U&z-L7xc9;Z5b*kc@SUDOQ4ZRxqWgV<GGdaPrG}L+7sgvXV!D`&LX^UZN)b
z7GM^=S+=@2AU_@OH^h_Jrw5EaQyvy!`5}fYE&Gqy0bpGL@4cWx@@z_VgdY9T*r8S8
z>0#7QH$a+44xKLYuD4I^#<qB+c}wz&91+H*1S}r1RR)<;QHx$^ya4O$hUL+D6=^`X
zK~~y?KSgtNV~E<)pTjhG&&*vg^<okKptuXwRUQnjq<rNM%^r!a_b2ipw(-v<CAm&{
zs!J{<O586+8c+myjc?ge%bUn@C}lY&uT?Vc(CC5Z6?YPvRcu6X^VE=`E#WL^9UVSR
zawjRzhtQ|?`jY<w!-`|eu*NB$0IpmIQ?U=R5s<T$@_!<3_YMx)4*73JZ&7Z3%Gnbw
z?fQWYq(8?5hGV2W0z2_y*gEQfk+&Rl$b=&BFY0jui-?!nLq;lhMGr4|J$dOBrpoUN
z5c=cFd!VurRnb}srV**F0a~es=m!*g7goFVkyscog=XdWGB?zhxnA2rbQ0oKF6>hH
zgQ3*vF96QCnXZ-uF@_f+Z)ay|@UP>IyMNd#^DWh&)M<5{qC%j%O~YS!4?y|h(0E1>
zlZ|0aQ5Qxj_hSjbg;n;-%0O#qJe$4=D4K274^XOeDh;=U69UV%jhy5GMZPr0ej5D4
zp95f74%gv`?FLYVMl|hC?)J~nID}7yo0x}mCbv$JCJ59_?d)W#mo!}y4jPQ0&~G4(
zg7*V;yK*2#B8|w=hE_N{O4_0bde}WU*iKw3q@NW!E~Q3nyn{raZQ1{I|M6q$P=ofc
z56}01b}ZMr1WaQ6xotUG*7Py0Kfff8;5zNUKBmv^;oqO}i+K~`<<aFf_+r5i-mE?y
znlf`f@#xzEOxcs5i4IGc(%!+*Lr_xfmnw5D4Ls^f5HS$iqsbnTPdiW1w)`sW)C#G%
zG-p6&jx2wkeLr6>(do5(d>PD)H?(xc*C<?&`t3YU^y^tnxL3V@Fx(8F{O?Df+-c8(
zZvj6|>4|DM^P$f-;$7%Ab6HfWk*R4&ZoKg=x{l}9fl=&bIGe%5y+N~U($Ju^l;8!&
ziOz~dTIS=81)FC>0!-@rD}Ne)rq}Q0am*dVbK+DzeXE|nS5NQg>3e^brlB8wJ6~~M
zUoTJ$icdsG=qD7V^IM!OuVCDlYkK84PxSaB#(L15LxN^C_mkYP-Y;V#%ZG5zm3~+y
zV*m$q7lQH6lOVi|gl8w%SGaWVXdyBFil2O+_|p(M9@oMre{Lk8n44DWVjJ%<3JN-C
z!3F8&m7q@p7J)Ebef{+A4MK>S(R@cCCR*r2#owXe5=OKZ@2~-8JX|;zCucmJ60UxN
z+R+$(%8-D1?YPpA5=<`xk(t>Qnbnw;OEG*CVr81l{#%el!CV0yzv9O?LMZ@}*0h40
zd;NY%!EX2kMRKVnH3&|p{|4HdmSYj((n5cO)97-};mVWWWN2>nDtp0iWSUNI>2KnC
zMrTNWlg~i2oKG_Unp$4MEUB(8$=7OBC@WIUSrADo2aWGE`={~zi}Cy~d`<!~^*Eg`
zuYB_zZ(p)^cm+tQH1z90R-FX1fAXJS=+83nvlnRcq26B778By^>8qOzH85eJjl}OD
z+bW^)regOPpdgdr5F#W)N$3#ljGT3mHxxg~)Q(KE>C50c^aWZ=GgOtrEl2gQk{O_v
z_ZZ*|U)L$%#y5U+xncxBgdv%ir1X|x6h!s(i`Z#uMXtl(^SAMhc=|w@(51tRD?b82
z<I7jVw(D}zZ5%I7qv?-+^u@b&<L-64t*4N8c(EaDY<~R}4mH3qIUj6NFd?b>QWn#N
zryF4$xe`r0h>l}&ZKf>5khaeZos#InDX|(=taj!iS#OgGdS*si2+-0?=sn<7jiGdd
z>cZwASqI=-Adz5;0`Zx%uN_u!BvOdT5n+U7TvF{Q(eTTOGmb?6j!lsyV8qFA$0QN^
zNmH^Kc*|@uCrA`0-d)~5WwnuK29t+oyxZJe#xP}@{u74fqFIDT)sZ6sbI!=GH1=8C
zLq9le+nt$Og6;(RCO<T$cCt;Or%3Hd5;`Me|6H%a1rmtwVegfEI~Ht@w015_Hra=T
z@Z_k#GGdlf^>T;2Cq4-<*>@!_df;l2M2PQjgl@iu=o5Bl!Zwu|K{WE;Zy)p=zAQS}
z+uuiS8nprsj-;yP`yjKWH$FgN1doVx7Dz6IvxE=lC=M25iewbUltw23D){h~I3$ar
z7fw!hvq}xsLZV&hhDu#t-4!2TL>%|x&nzZ9Jw`M)iRbi7xBYmui*Ct|USXzifrL^R
zEmv4BOo_qaL-;a?m<0L_56U2;)5(XzIC#3-L9Com^epT1ILVDixNg+O9OSPN{aR=P
zDO+j?l3UrJKMF4JMwPU?F>;K&TBXP_aowBR5e9|PmV9{!j@X{m&u!8b7b)r1Ce3$o
zEH!GeW7?(=suEdV#uF^km#-Z1_d1Y@xW`KOI-ux(u61Im!l+RJII+L=hQRuG)1B-z
z8l_4a4fqmRB$!vVy*&MJ`aoUBJ0r?6GHR0}8nrG&%@-FZ`D))2(8&Q(#8LV3!M`lG
zr}ZHvg-ncJ^JXzWlR>4?!KrW`jY@ON9H&H9pPUD!MM~8h<)fU89>M{JBLI#W?tWXo
zb0Gqm*p5+uHFMlM(K7nqK{3vb(U)6M{K0Z+92-ZTHMw=A!le*vJO_yS<n{ATTUspf
zuz^90P>=Cd1SC&LCS19}B6`YwACCK~@4(=$ve_ZsRTb(PrXt~=XK(tcxFA<d^cLS~
zC0{@^P}B)j3ze`JV567GFzH*Cl4(~jccdx^VWsoT3$1mOTjp>W_9Mi%=uLKw-A*wO
zfF3pu*&k}7hRFTKv%XQcFR|@A?l+LokI;dSR^<es7Okh`ei^m->mGbEjMoQrIjOdV
zGE}rx2Zk~>X)vF?n8&D01lu6(mr{0jS0->#_;WP~(X!*>-{-L7`jm2l4h##8lSL_f
zEFd7qHQ_kdl&Jprc>zWV_c$d#)N(V!Df7T?CjShGB5(x;zZ;ZM>p^#4@8@~NekO~o
zCjq|Qat+vb?3m=6atq)HG0iv!*w67s9qwm_jPPv0j&$|8xxm<h3*@U7c*HG;6BMU2
zdEFr%rU4zT5D!eD6L|2UvoQ1ncWcrH*O$aplEb`>ixkB}5-Ub6UqQl%(+VbzP6GG~
zkP5#XM>-R@9zXNR1W)Qj!_4SFB%@;yokyiySZME}OhJmi%+n{}{8j?L2;NkQRP!^c
zx2EzD(`5&U4k0EokiAnBR3Q2-NvnWH1FYXA)j%V(CJ3|Ck{G)+<p*m+aBK7)^__F0
zx#O_YJkZLEa;g#S!XXFBebqbnHJ^mN#K7q^9})d=#iT~`$2F%r($B75kVrncYPDoz
zu3Sgal*_A2eRJiCNBq}-g-AYa+-|4!hyi~EkNW@Ew<oY~1(ug3=|x5<=LVp_`ml-H
z6M6CoO@;*P^Hr?Q%Xskv5dZT$yMxMd#O#o=++nNNg$1$2lk|)~@$P_@zQVC(uK^||
zK}tTaAnjE&HBt<!%uTmg;|ma^S)0ZSvWy`cQrba)K79mU5-iv<lQ7ty#!-NgYUu?~
z!g~q;K2pU+O>;jb^=l3z&i+IEB!z)fLZveyjvnr2Xpmc>zQZ2oU5N~(0|8hXR3nze
zP+**p!BB?MAvY=<ZAWIzjEvbZL;t;GYRP!&#kVqFR5)_UKFd@S5g-#sJV2Bb=a8B?
z_yDh`%rYolEW3sIpIDP(&*0#$=vPG8TsPV(uPr595tzRai$fHR<CK~}-GcI570L#s
zauc8if&aZM^)EL<)31-5l;$#C+Rng)hh}~Y5g!%MYjEQkgHwr40Z^pBEBRj0VZaSh
zuD`~`daf^$7!J+zlK4SE0mK3nq-hWCWbr8y<MO9doC9>CSQtARWW}Y<<=vMlrMTRL
zlEy0qXysG4&_5&qGooVautOi7-RzOs)iD|)F;=XeA~>0&i<}}*Z%SYy&h~=HELTh{
zo_wtypCApKd{!}B-Cwy)MfOscvtpOCZC$R~dpX!HmBY@E_`l?c&YVOG;||MSBE4dx
zjHlE~$tEB&&NW>^U)1gw_f~{(1-d2_P94#ztZH*`SASIbU+etLWEEf{-%=it6yc!q
z3^I=tC--It64@@aZKrhZS(q5np>4ZL?#NMoe=3InWEiMKNLi6{MVA4kJ!TRHgu_yi
zP}pZW*?DB6K8^-;$Ao7`H1#1B_u$%#+^88LY6%_yC;=TC#K|Uglp6eEx^a;b`eFh)
zz$><Cn!DxU9ieq6O|?}?Dd*jQ-rwIT51^>|X?ThNSU{)0CB?Aa-J&4ha2UFIkPOY9
zdKVP&T~NeiF9JC`k{%Sr3esOkl|R==`E!l7IJhO3wqn+5M7P$gy0Bh}P~j#_$$_h1
zGn}!ahgYoEa!kcz?cPpBKg%}UYu6aBC%sGzbKDIox3EJ_na%J7i@lCf>Qtisx8Ld|
z|L5Q8C0lOwzJ|>p{Zc+*upckPE+yH5q#^mm5JH5h7ES<X&LRm&6atNcRKm-eMolsk
zwuxT1jTS3$cTN%_nnHs?(P#Rzg+Z!jXf%~g%)F*=2@|PT!bkemK#@98Aw84O-@>&T
zU}<sNtS57~g$LGsEO@L9@&mx*B&V`jbZ5MkkIwZ71|P<&^nEy<lLF3z-Ga>9I)#(?
z$8-r7;7Q%Vj9a?HhsxvKF%M+DBPzsA+IoiKtL(HL_gZ?XQ->23_5~}RLmygq&<H!l
z`yJ|V?(gxBR_;fN3C_Vtxf0{M(=FRPH+j$nQptFD>ac+=Q%7w-Vd}Dt?bC@Y_vB>2
zUX`{CTv9ih2M?;zS$;AEJ5gpPpaWkuJFI`TWpcVt8utXpO(-cH6dW4<=f<pLkN<&T
zA3lB95+^SQ><Mifm>WLoG@z4o%p7UV*O3{<$Sx0A3t{8`z@XbtA9VErH7`25`HG!B
zQK#V7>~^xapo6qLO4Gx5P2Ls>QHOE$>{Q6Yz7~z=`iAuTmagSI5EpOUhWQ>=Wdi2r
zkLxGZjR-7#T1U5_O|_6;fI3U0(0IV=BL5xegs&q01N*A?qzM=kG9j99RdlcZpBpvb
z`}_w6ef0D}E1LLBm}_rGp>*R>yxtgHIIc=c$S<C}mLm_W`4I~h5^+ygm4UQMO2R}(
zSeTjEJ1$JIFR`~TFZY3?_j%qE*Z-fv*-vOD^DkK|`$6gwa%`h6$@=CG>57iBv;~8E
z=7gJiBP`Y8X)mgfXvF~;X9K(3&xCHF(#0TSP}BuMPfIdjESmR@teb|&^HzShE}Tk7
zk64Ka@hWSGb2a=(AM?dySv-c~<SOxr`$uh%nWoMuND48ZPA(YwZPk5o1sdEEiFdmo
zI~TI{(I%K;(q&E`FQX_QU25@oDa3BNz;!_vs-V}0EDR3UVF_v~^xL%D@?3vhmOkR_
zO9C$&elql9(DoU9dqA<NRDMY)F0X=C^q(GAm>!!06kKkIY5+nvwW&ZAtq1j+`30|j
zD`6LlRDbcfcUwR{U!er$LTxg+T$O@-^yC&QCw;dxeN|H@&@N8j%6|Gh`7}@PN4Btd
zxP=Luu6#iYlZ~8<1<EgQ3MTr^GrnL)Ce#r&9IiALej8`CaIs|Q4W_j<;J%unG)2mw
z(#bBCo7+kOkwH<#p1)~eI`wF*-^?#Ar7u_Gc{q7JmEZI`e`f;+{awG~h{np1zbO+k
zW$13C1w&deuArCoZ_$U)n|MOnN_d%FkzAP<x}dlAr<_cZ0#I)Wsf(UjTMh$98^fwA
zfn~k!prn{3H}Hga3jBwqCz%m-J=<uZ-c)PlxLWvk>ne%hm1_zL&)vKb@zl*p7#D6{
z{8%xDC+eJA62{TK)0A&sZ``Ba(Id(=Um-z-)B3w0n3_V!m>e0krJJKp`v3_(nX!D+
zliFi9(B4yr)+`VX0SVNHr4ke`TxlZ4-W@4G0~HZ3EH?ybP1&dzniT7me!Kp_<c?!o
z@Sd#EHnR*c)zvS8Y3TPScxyJ8+p%kfsEv+45k`TIrB0ptt5k|4DS(3%3h9yKREG)>
zxUzW#$dXLM<0h8y66u3*X<O-PvGBR`_xDS5wMT|s)M7|Qrb1r{cTgzFSID`dz&O-p
z)6;p}g#C}+SO~k|13K?_W28mCXsqGak2Ta|g&tEI#wf@HYn*SaG$I~~NXZRF4wkC*
zSJ@RAQUwb?oI^?SKpbz-q`CqOL>LxUFwG5b!lqfKvh22@s_zBu7@`jtav7yd$KNd%
zy-`mwuIuBl9Fn1~(TgoGZ9;UUAv&W~j>IZouJBKW>l~HVStbj!3jQM#^Xrv+%Vdlk
zSTX@?mT3t==)VMn7`ikPKp2+#5@WMrp)WG=fxg5B_@HFw+Z9X+_b6r{3LgQY&;X)^
zANiMIbopu;l6hWC&=e9hkzht_jFGiMSGZQjHm`F(x`e~lhjg@aeIMSE4NRCNK3hJc
zm5X>z{RLW=UW!)%c4PnxOo15Ul{6v!Oy;5&nmd@}xPz@gB%nd!l9Dcd;h2>w>;jHf
zi#|Gn#0MA7G~w`fXNOKW=~aMZ`-Fp7#fjjcLfL5PC8PKP$(Cre#M{2*g|jgnUAU>|
z4<^T{c6K2=P%j5qI7J^9vM^n|zecq$cyrq=9fky5m&)*)1abP+GrtL_Q!|*FZVn!p
zLp)7)T5j7JwJr*ALyenr%{P(;A2J^l>&Ngm?AVXA5<w#}j<0TMF7-fjq7s&iKr`wD
z;T(i=$&E=^?J><t($r#)Y3ek_=VUtTzkB%|y>2${!BOuICn#1?_-PejSQ=FAh!;qB
zOG4>K=~r3HkBlVt_wXLDXrN-xG43Hk1a*t^ak;ei3?btYxiM$Qh+@H7%IM4YXk82{
z&7n|keaRXO{DBie@6)SrmZ1fR@A>i*R#H_#<_t5845TUuAE<!$13StOBjp#}m2P0r
z0I)Skk0<C@oT6HV@Mqwp_4+`BOG)Lp;^xcO?_Zq1ef#RghgUDf^$nCl@^_A|4CPrd
z#?%XU#dS$EsJw}cofG}Ca)wJf`{L$z=WpJe|NQ#x_xEuVn)z`0`t7Tizkd5m-}uyD
zQaHf4`Qy7+FJ8UOWq#i`k~hVr-G-P1hG;Z0bRcL3R3oiCv||ZKqvo~fapY!=wgZ`+
zfWmf9Q1PNI_<J3-C6dd4K4D|=LM|A!U-+0j!JCy(G#l;GeUrCI7zMc{@Y)xiWhMX`
zhAe6hybgR<Z~Rfsq}PLw>Wx3jiS!QPn|#TAq6P8V`}#YjSR1l+Def;aO(<<TVV|&V
zn}+%QTxM%*6kC)dpqof@C(@G)AL?!7<DANPQoP>0vDKZ=t^rBIM!Sy*YOaRuev3GI
z^wM(Fc_be9|Fb>#{|noL2Ni*yp!y@UjL|TG*<hfO@uhQc)K)Kt`xwJrzVy0>>V+6)
z`2r`bdPe?TSviF2MB6$->P^Y8zIx$><aqnqQ++hfFQ}2_$`9Ackt3eoNfbOk(o1Qu
z_4IxU;q=4xN;vp}ie-@pYc}BR$yFO=HW+;vf#yFU+sP53AJ}rQiZ;z9f4hD?&F6zR
z^hYnHX9Zyq!LbNsgc||*V*m12x~-`&Bd^d#Hc+iet;g~{1l@7MvCP(-o4)nT60`?>
z?>}Cciwd$AJ4cNB*LMyBeX?|SQ_*@&nGeY3r1Q5wU_QtORZa*Ak*m5;%FTJXOB+o_
z`zC`_9r;{U9#zdQ3Pv)ZX60pEaAEdmYZ0>mHdgc(TlRWvC@|ZkfrIkA9H&?Ca$Ieg
zo(t4lxRQMMXaZ`;8HP{_wRU}0OxCgm5*y{>$Y#<#=)~FN_fHkslWO0tJ8)QHM>qLB
zT;*Fce{Q#*x8&(!R96d!#JVt@=HNJ}G%9(!rF~yb#g$m!mQ!$^Ol}`D52lBhVr(v&
zo=3p-`ZkHD&}|A%Sp{Mu3{)Q7_NFVw?dHeWlo-h7cHOwLWkQMnftC@7jFy2q1$yBj
zi);nQIsygWX(%fLp$tlYP~#K-vL_695Q?kxN82E1(V?(~mt5f>Q;bfIor3-Xb-wwE
zlV*vYzoMz9p6GD%G7+yvJ;-F?W=5-6GlQ5vU)*AH<d#ZS?WEjv3|L&mmqAjLnVGXW
zh*ek~nIrKsrJyW%M+{aVBcvsID#KA&m_s0&wHXM>5fSjr@#i~@Zi~ob%2e7`&71BV
z$o3?2PTGc2qSP=ed3|VfE(Wm}w=1S3=8M%#Ym4iy6?zrfYPRHHD7q!h7;@uWbt0<{
z1Wa;c+<6ja;k=2-mEM3uV8ZnTN?6R#W8%0i@~prCn09yL(mZV30=R9PS2dT$z}@yv
z&QFJw+hk6~<hF4t#TdlE)l{lQGrIHmT;dc;-^k`{Byu(qC6)=qOjIHSb9}LzgM8Uj
za&|*~Cs(H3N8C++#qLK;e>$I&AT~_16tKRRN&K&$<mSg$`hy6wl9n{%8Zu4}HFN2s
zw2uYLS+!u9gvulfw3iOWw<d^LI&Py89(yfEL@GuIfzL>p<ivVdXj#_j<k~UbB}SCf
z*D=sJtcqI^N`1aNhjSrp=m^KyZeFD1Z`36G-V<p1QJknMH)5q|&*qjS53P!X#XMx<
ztJl&nM8QfcWYsP0XN#{CUEgaB{A2A2XD1x^a;YX>H1aP7CUH0+FG}!d7<!XF)H<p3
zXA^qZ1^o^0ZuE6Qh@IBJnD4d@E7DBkMUZz|R86hg8Ihb(RadA^;~J6F!1SirA|Y`T
zl31eyJSjkvEe;aTZ!$J=25O#^TAMz6sx{e4)lF~?b$@+{>lCO?fMy`?>LG8G#F$55
zP50YhE>~kme#*CCl}b+DpWiU(-^pN;z@dB%8VaK*NQ6wsjQ>bfpGb$N*O(2XHS_EF
zDif~;CQ|ne<mx@L(f6jqUMt8vYf#OskP2VU75b*o#>6f3p=$3{-&APW+omVOebGLv
zET?Z-g6jQX+P>pHP^F5v1H-~W1A$Qsbx3j3L-g{e)jO<@k<~|1Qmbc){3Jf25|y7N
zZ#rbwRP@zcx!={_!c7gzUPZTrk^2{ROoP`S+bvrO3;d$`GNAFoOg_EG8yDr3fB0FC
zl!WM|FmDsobSV*lPDqwu$m~3hQ<Wn*GV$UxQ7q-RAB7DyJ}Xh~ql7{Zd2io7$o87I
zh$SUK!1GAX<y%i&vuB~3?{!&U11r`ZN!5iU20AkwQI3KOa*IavnlH&~E)$#gkumzG
zWEzx;i#&8^DS{`{eIu2Z$D7#th54>vnM?y4p*yYAT(@aUZ(MU>D@h2cGbpNhs^e9|
z$DXw0Hg&zls0uOzV-;EFy%H+7-8>r8j*7)QdGX=E$pnyVRl@46u&sXPL?5o7@~HYZ
zZtt-B<*oq!C(d1V%=b?^Q27~8w)fP@ToS#&Nw|QjzfJsTas?^hhS7&448EKDwEJgC
zyg-dn^3bj&1!fXgXr|mO<}WGnLlO|e$#My~gFUAEnhr(;DP`1wfd!k2NB_~m5#`M{
z66Uh{oVC^Eti>Msxy%$H+Y{My@gK`VPg-<+lg%D#T?{A)6mX`ag6vwrg*bF=j+|v3
z{Yx?*3F)Z0<A!ywO^z&71key8FHV|oe>&4mV0h~}WL&}DGcOpefR9q@wg|ZP${PbP
zp1G@fsXE6w2J%0w*WI}!@TZ>5)i}Fp^B<>getPxmn^$kY|L_9^aO6BQ!H89L?)|H?
z*Ki6hy%lr|7##|dKJ)D9$w|BCG}@AtTh+bU27?`<dfpO!_O?aNV6?m_wCzygp@@7(
z5GNYu-2Y!8d%pv9&9>#Qw=bOj_HQo!>0HnvH0Jg8MtRY>^+K4#E3e&h&%NB>Z=HdC
zem`k`h<|-^{`0GMzkd7r14XiI^6Ni=YJhV4yr{PrK4>tF?+Ufl>!Gvx3<p?XpPxY4
zf4zEl4mkK2*ZlR{SNHereW(+Cla|^#QB9pzeLhy7zf-|6Ltae0MrB1vbf$5O(6`Wf
zU8nAq!_uSNQhRc#9UPD{&xjnnHVLCuFn|RGoat-gdO;Jac<H#V0N%V57#G4&d3FY{
z@a?<Pw=aIsz;J-h(INe>Kb`&f>xa{C-@K9vH;Gat!V&K7#;BDujQS0V04jzIo4*k%
zrQGAz{k?zUC8(<qjH0@K(P$g`a1n;eswYsv<k(vdq)cH_U!DL|x?|WZbCO+*k7H-z
z0l*BD4T3#BiB;@U$X8D;21{=a^^0kMr>*$Ah)AD!Rk<u-;0NzQbLjiYP2@^p{Y6z9
zz)@az@4~a-ft6qoTD-j@NWv#hLjd=Bs4#<1oQ9C@?HyoIc;Ykx+1?Q*ix>0Dcd#Wp
z>eF}Tr+<3wPD_3ICx0^chS$ZCW{S13CxF5xtZY*pnTcq;-cfrGi<^nuL=I$O=Xdr{
z?<bea88r+;PjP%Y0XmWv4qVa-%ALSMBdB;zOPk)gtz&(`0Wr5VzdOhs^%a!I3e7m$
zBpfM`3EQ%_jO_ocuJ%mi+qih3{ztstRuCb1IwjAW$Z$HNmb<^V*X>@oqju-eJ?!rH
z@Uh!+4?FEcdThHr05yE-Kw^g<yYSd;(PIx&xzrv$?$P7Ed(h_Z2awp~$3wTf$K{VO
z@dzJ#Ew|gHmU<nxd)THYtf;+DkNfy|K#y2chid8_;v?t9sydW+k9tk1du@EAw)Q&i
zL6@JP*S$l2>_Jy()O*<09@V<H4_%>7?LkjP#v`|Tuzzt;<l~5JRxX21yuH27(LT_v
z7#_Ua>)zi7C+&8-2mgjN!F{Rbp8=0V&fjwm!O`huuqm#YHVrTjZ~3{X?qBBcl-qLX
zA@*VqMe_|0ANSp??p2Zmh~!(lfL^-yG$_XnyuE$kW$!U<7jF!=l%$PN0>q>;B%Q$t
z7e?(+#BJOxM+c8-octfcUa&Xrw{diuPQp;|5u8{S+aVbad+W&I$n1N2>`UqS=wtRV
z+G)7W=l#b28a4j+$Jt$D^XHE@hpooP)pzi}i|3amp`I4j66KA8Yz;IR%`QL-3`0iC
z^!R|uZ$$*5fK_;v$<aL%4D_MUDZy<@)KS?b?2@jtCiS+W#U<g8ud&{CfP|1ysEzW?
zXbArxVGe&|;bXH8N!0Az(WbR9y0LQyLl~1lLfy$BVJ6A3&1UH>o7Wq&5E0!=C^L~H
z3!fMy6Gcgi2Ehy`1ae!uf4Wh|k}DO7)NaGJum+Y>?7&+Zmc80RP3S!7$EG(v%3BT4
zsFacVF7KrZxT?$_BIoyxH(r8e;h@=j*uDDKK)G@-?`6e+3o7NO58oZC7qtuiDMi@@
zmRR;#U#FXi&qvnoH^(Q%J)pf&@(~6nkPHI@7#j{5Yu8^a`Q->-mT^jN`z?5zbGH2s
zJYVATMb25CAr(QLezcG>_EenjHt(-M?Jpp+d4IVRx|>x{?^Ea;0%Y815+Ktd1~CYX
zjTpMVQ%|8yANC2yOE7G8^Z8r?P8Ab^Flio&1ISeYvteNrW%wn;kKE~gZ?E0iof!94
zNnM$dnU)>NR*figI#DhFhf*w2Qv@@Yz(j~?!%MR|%#$8x;)+j*E$a+Jc8rl+jM>F|
zk3`l1TU*`?)pIpb2!tF6@~VoX%#0~4GMr|^N}*vc3*PegE3*|QF$WMRCWqs+_slLN
zH~7r0=aT^#8gvHN>Fn+o3Ta${8!c9Q)p(?Rnb^-qyT>QrSg?)Q`(tq%V-9Qg<Eqs<
zZBeGD?6Nj(tZ1ArX*(5gg=n<0PP3Nk-C3?3H3T{jhQ$3U0U;A8*tefxUEBM7N%GCd
zReRcNAAh`=?!gFv8iwD_p%1^kqbdCE9gOjJ+JfKx1I)8O4dC~{@8IurAAS#8Gx+s;
zSjs=b8m2z}2K!jUtaXIH9mv^kO(0LZ(>cW70P+9@xre{lR=YRp;_nn{1FClKW6Sst
zQud)I?fnVnJUYbRNxOsHpW^fE0D9GF?L*E^dyKyw%+u*k@VPsKvYlQJ@^^qRhu<SC
z+nKhYC!L^&zq1L{&~3G$pWV(F`q|y@LeIMg{sevxXZY2}o_GC&HvR@sb9dYcXa-uZ
z&iwIYb~#@}@iIxX)yI$H*&_XTb1(z+-h+SRk2gmx__qiD4nN-b`yX${UHEtO@n!<=
zli57H{J1)7bs^&fI?-!Q_J8DrU3}~8PXK~djyC0JC&6_vfJfMDxPGlxxW3sW6P2w)
z**cg7@+9zg(rQ7+r-xmb`02FOOZ;nHYm2hCmRCNO=pMEGNy62)rto*)-|KQSmrEGN
z6o%1`BhJv9l`8KZF6Zm-1R!Ja)_xmsk!o#^THE6qCooy#08+c9UQUiC;U!hj+3SV#
zsqSx=YUnQJDy2s$Jp|xZ3(!BH=XCY)CV*)NAh^M0Y_;15^gF@d4ozH#QaZlqO9CZ)
z$lduZh127TnnuWIwGUw3X87-r<|8-=Xkxmp{WVWALVo)Ys>rA=9^IJQ>-n&asjlu`
z6a#h+Q+#W8CStlf6$`YtteDs%vFx4c;RL%$)pr-m;1gBfqb=HM{c!G2VC!FnbD9On
z)Wa<a>?8f|b64^Ah~|Yhb$d*G9@C7BX-1|vQytu@t<FK0eh=w4nDD4O2S5HIm%u;5
zCBR>rhvk~uqIUPG{sSLFSP{_d^L!6N`bsVCAL0n6oy?zOu;Ku3`$Bl8nd<G$gSD76
ztg!=Y9E347#SPLpj(YTam`LE9OhXMK2LvJq$%MZhMt~4`Ra$YzX#x(W5zPwq%ZDoF
zv`($@VHPAWId2Q*Ni4v@ETm=hq3U_Sy?c4~;|KgUp*ki62UD8;>3+<u9vuNepYr4W
zTt4k#7+iilh}8~(zX7#1JN)f)NYQ(<c$K`4vfwiD=RAr|@M4wB*Iel3->D<CXsubi
z8qb5j!zo8#2%XT6N8I6gv|Q0*(*QcO%suRUXKyc##B%XB0tdwF(B=W{hJzk2`em5W
zH#`?Q-F^D?lT{$*dA}_lI<sQu37tX{vxFKZxa(050mH%3HsONp78FWe%;U-SY3Rl&
zO`s2`y#l2KOEH)ibmaBucaLDN>o0j5(Fu6idimG)|3Xv}#<&6<zeT^)w=q4Bsq~m8
zi`KX^r6~*OI1O+Dx?Nm?-r-cVN^5#RlkV?jiGM|C<Oq-w?<lB9JnYGbnV8&!dNHQS
zB}~_u99#woEn}xmf7^ch>Y5Q$j~n#Y)Gg}nbWd%JfRR>jF1khQHl?kFXm-B?Cq3h)
zUIlJC5Oq^m0vvd^Bhn@dOq;bRt&@aVIPvEUVy7>^$34+)(MQ4o-8TPDCIU6I#yy^)
z9_68`=?DUpcLXqeDl<Z7@dTqX`z<^iI2E`Cno*dcA`Zc(dI!{acPi<NRu`#*R(G#Q
zZ!ql@Xm`vjFnIZj3LMh!5&cdH=^gT(ZcQhjRss(9T4O>6Fx(d}-@N<jANahFz|cLQ
z77yunf^*oV&E1_H=HMC5B7(K<QA|jerUXDo^cyI&oAH>t5&>Bkf2Lth#Yr8+)Cew1
z*YC|T9>VE6T7o00;fN;RZ|kxx^oL;71qTWqp$KX|9^hE<n|D--TAuU*t{GOBlE*Z_
z@sX_JV0M_R@?ho{-jDEIR6%{4()3OP-HT4Zr>B3oB)rh3DN_>>%yiav{Mnp~Js^=0
z0KfGUMl*X6FUje*Z{B?%au*50R*xuvUY9^%FCajng*ljDWn%fi{fP=p>6bDg5wYJs
z>T>l*?e0=HKHHN-TDRTiX@cX8n(-Od03x|Tn)ZKCtZJ%fuN4I5Ye3IptA0yGj_B9N
zhQ?FT{NBEt%PA2;aIjMS2km@yvr=^jG<>A__kp~Y)g1%^D-TWyhtUQ?h=Qf)sd4&p
z=VQygBO2k+K?UZWCGl^BecIS7pq<}-05Sz>=Xm)ENaq_YIi}g2P`{a+BgEPx?xRQh
zq!%2}FQv>7I`=wl`o$&NqjLw?P5LEFj@$wK?tM?K_xv9uNiZe4ciPHP*hI!m1R3Lp
zYiga^CFI_lP9zqEiP99ePsMyDi>890Xzy2G&%+$)eMsdFNtuOU6nPWEu1gvptqiOf
z)8p+<MhKng@x9i**aN_bFZ}uZJz$@N_R8LD93<=ag+$u4OvU4L(L{B8Ihw-?%r{Aa
zhK%?m*jtH?g*45GoA!D~@&x%nuQcnuE)fNL0xQFT+L?#rBwQ^BU?vj*FjUXp0sS(}
zwY#kaQxsis{2UlG{+Ompj3J~k?ECaPOEV^#T3w1;4@mzNBYirLfgBZw_}(GG%i$sY
z5_F8I&l5?}R-Jc8^La4U(|&Xyr`_)sr+rd2?LMIrDlz80zX!*-sAE#aL7@UO52%%d
zfW(p+PfuHt{d+VI`>obrKL7&?y9g+K+<<!l4UJBYy?{0ZfzUpky8DFf_UY6G#6iC}
zFd&=ocOOgbA1D%}%Ts@X^WF^>3qc+aXx?VDaI-^NrY@}(Yz@hm5`KgY6wn6RCz4^m
zMfJB^KvGjCAP|@sZ%>#W>56^RsbX1unvm&H6=M{j*MNj^`>XH1fAb!}alcD~i(Zd@
zu|xaB`|R)0$oKd0uogplL-{FBcSgkOUchu@XF3L!?Ug#%_YcTL0l};9cVw=EgSj7N
zDw}^0DDXe%RuH0ohifD31_zQ)Ac|XTpI~(VkUB|c^!^b)Q}+m(_Q&)*@!!3afGc^}
zjIz>dAN2ylxIicpp|lr-V!|2BVJRkaKor?~^j66Uw7rOa+xKS#q5I<wLm#Z$En3sg
z--HoEHUX7tbV5Kh*%KhT?;lBw-`QUf+09GAQl;r3oYg<97Lc22>CDs=_YiJ@kA3ym
zb2=dwQH-J$D8#TlV?MV_zX$Y7DQ%yA>6wm%17c(jsM!PJT@Pql4-Tn?BS~Yo_vYax
z^|Y&iznwc3h|Ze`DxP5apiS+!4~;`0pj?8uJ`}**ZSh>U+d0HPp}Z5`CIiCu2b~uE
zQs=reF}IiWMnmWx@G;Qw!^lt8uNlW3&O@NnW<+`s4d0$o?%olt-@(3+5fT4(K-|qi
zkEr~PK*g81bq)x-9qb({rfi%BN`}*!biy=bnifjD_&_yJXkt4UaGnU@{jTI+Tihz}
zEz68D(Vz~giNiy2=5&JcUhcI7>OY!@c~j(lo0hXp9LK>CW72~oDU4|C>!V^ulRJ~h
zpEnkX^jZfb;W!x6^Mu8jEpuJR1Uch9u~oV~Ue2Qmlr*itMMR#q0~+XrDX@b{6#{?;
zM8^+*lTSqBAGUt@tB;+=qQuA@5LQ1RtbQ<~{>^Y14@vxY*gBL*KrxMz<x)(ezzYG5
zZMILpV~K&g`#d<mVsJs#;5t<!AwuF1k0Rifft;h0=#T^jhn*w(#hxGT5#dKn(9xKG
zaa>0vB{`zq<#+Mf?;Xg29PyeS(-|}o3%ZDw2(gEh`H+$iY2FWMs~`5JQq<Hv0`izA
zVth#)N8sc2kUUY_9R{)^abEc}PlrU69PUxY`)x_^!S0gtHs*N~#K<hAj5L^o7M;U@
z(qFv%?%ju<{^3(s4@h84;;}=5u)~06gQNt9Gi>RIHvSQvPRybm?Tgims1DjahlfBi
zqju2bw;<yY9U43evSEiu)C?{CA&v~j*Af&~(9839lYKa-!ieUk+d3rfn~3VeF$3@6
zq&qIOw@(5gVlobafTdi>r5Q{HG*n<R4yR-KolvWiW!gKM$6Tb_@(ot-A2c^Jnwve<
zSvb&C3q65}=-5AM;glY=55zJKsDdN9gE%6w-Vt&gz_@fZ<6=~{=ZC=H&SmLuU(s^(
z=y#8PkFfN(Bf34&ht;^Z<Wes`P@4pkM??u9^(Jt}nXFfy6WebUC+Ua?lp_Q`pwDJ<
zk`7Dx_NiC<`;>1Y^L1zjZ%F>sJtD!ONe~^;^c>L<cyvTH&~48V34o9MDGus;P2O~-
zexCH%H@+S03)08;+Xd2Rs!5+J(e}(Zj*f`oI~vn*G(DVUzUJQjQ1Ve-Ap?t+2<Jxx
zc|K9GetV4PV+Z9DbAklo6px5H^$9)t?N(k&aYTC#&J8Vv*eggS4hrx4ss`H4Ea&hA
z#ESVI&&;=pUx7WlfmlQmqWE+N;dcOO8XNNHD8E6E4teYo+8aL6sD7_Sza2qp9rh-a
zcifT`SFg=0M(iWshzRo1-=hmVVvT)bjr{|ftOLYBJ`tZjfrx(?kU;dPwI|3VK`u<^
zRF-n?&w#H}^dm3?fJ_v-Qohrfwp-CE{ZY!h+uf=|rYE@^|6reSH#XdZ6NYYfm=^SX
zS_2Y4_&$w>#0KMbkA89MPx)H%=zx9|q2Nm?V!PKh(Y{XtU4MK;zkx*iy#tB%dwV<&
zQ!aIxex_!r3q-|^Td+aGYk^132qX9;lJlo@TN)gazfV13t?^aJvpR_=13~rl5a5W`
z0J@#5KR})v5_rIS76>x*`#03?A+;;EChuNJfgf~XkG=^~K^^+NLqWPDNK~v%o43-p
z5z%a8g3mD#U1LIPV?f)e^iT9%>sx$=qeBh`CblI`Rpww?gBLGfegDIow?DpnPg618
z+oN9`<CtJ`Oi(wbi{mkkctS+bgrsm2lFu`NF(JX=be~p~B=&wF;4xlNtz)XS7hM`x
z4xQx-A=TfX(k;k8iXuUA8#e!h@~1H!v17Uk9|Km>Qkf&oD}JDlG&e_Gs#;R0Je{2m
z%apr^p^{7V62+myv?z=`9@A71NjfG}I4054m|$j1LmmfoJ+ZHkoP)N3mSvlCjRtKh
z6s<mt`GewAk4$tea`|*LV3!r@-dh<=+n4}qJexApwloJTN*4M<OdK}*QIkj$I*KQq
zgX}|6K5!?*zfFj!njrtS-wAvJOgl%DS*|JgF3-5ZD>0)JV)`c}1)LCNIH3VddQ|Nm
zT{G?ndM;b$nI<MlO`Xr}RZiHnIAOgY&F{?#QG}C&BXe&W<MI8DTADYxmVMd~w3?G(
z8l+;HUcJZq2=pchdhm-fTOf%Go%3hqj>BvTJ|_riSJ8xwkFJ9xm2O=aSSN4*RW1+-
zohHPzPEaNaRgQBDG;I|ZNX*Bl6_vp^l(zyJc`w9?V+67ZF*uXiQ5uMIc0dghQk@|3
zl1p+}0)Y<p-z+sH$-oqEm}IG=QojV^A5XCPDe>}CBKW4TjQQ#aAg3r+P@O<663DNr
zJ3O2O!8B#`3Co0#IPG@mm#U^aq-l?CO%L0J)f%@dSF2sXDhF~$700_rm=W=x>R`9n
z!6R0n;QoC_{o4=d7i*o8j?eUfL|?tOmc;aO1Yqw#%XE*5h_qM58XlQ?8&lF=nYQ^%
zCpiRAr!3-O^_gqz1>wOdvF204hEvi~ni2ysB_N*C9l(^>rhurtfMh2D9a%w_e{p0%
zuP0?YdmU4xGbJSwd0j@V|8zn#GVN-S&Xg2Ora}e~jDdILx+)};z)Kneo+;_zOobH0
zr#&~NGki+8bUND?LjB(4l37&$NZu`Uk7iYb(S8sW@Av}}eFbg5c*j4{kF2w@C$5Ai
zbDF3F`mI_s-%qd9DCmA-ddQj@G~GlA1l@_TuB6d3-DAlQu<%-FKP8nW05w7Qe)}V>
z39e+YFVGQ@)By<xg1s(ZXm<l&9PYtyl<w0nk-1%%M#5CxagVIRuY#0SYPwTFDEbqj
z{eq=v-vo3O8qmoe5E2Opj|QYP5)d>7v=M{ZBvIGKomNNCzO#x2?+VQirc(XZDm@cQ
z9laJY`SPM7AWR?l(+GGqR8Wn?#p?diRFF(U5o5r5Eddds0qNlc1o8n&g7*J^yuAy5
z(^j@O{8hlGP3^{{mgH+vH$MurWd=%5fp$6}(?^%BSjCo%YzG3#`Rwmn|FyTYx2ym&
z&w1X?;Ar3PYp?qbqsUwcHKb82MWSC6!5yiR5LZ%I5oKZOLYGNgUt9$GWzzLwNYG`4
z>Xb6d7lX7YnH#7f5BE%zK~y@EIz0{SA=ybmlBa`x5g6S(GG9{}#Y<szr9eMZkaa0w
zZtA7aUdT@BKo_osn)HTiJ%M4{UWUYhw%sG992S|@he|<3rNI7E$cR#G#uQpkDQJom
zjP{f%3vV!k8Y6RWya5vl^s9(c1$E>Neynt$zyJ>Qr5S^3lL9|V!CXy8V?%k2hMFA}
z8M=Op3^9HaFenB~X<%$%$Q61j{YAz}#hV&U4UsYuo}RBy*U2R^PVqa#OvQYINa`b&
zX{XRdNWnFtxaAwfp_!?&@PcTUIfA@sP5a4?nvK&^Yb8)yg{-nCT%DnC#F!z*$uSli
z7=Oz5yEkCaO~0%pI^es^8;JHoq6MNdn=!UW;x~C<Gm8iI1X(aaz&KJS$%&Ho4G(PO
zP~7p*W`WIW7Fe2sgHCOank=wM#R6jhCb_(!D`!s{TpP-P&E$b27aLyEXjHSnG(VA{
zB~1l#4+ER0<qdda(=Rq8<F{i!^lP5h*lIu8!{BIQ(Nk6gq+ie#kzvIpgPNx`vUytG
zV2lM~e8C$`rY=uwn7X5m_eMR%!ZJ!S_W0OHzTsZJ8G1E?PDMO0`7}&o^)yPvzL+U}
z<dZyk%<p{2#WR~gk;392>FJCYII(hijZ`7RpU7LPhiVyKi9Y8Hk`tm_S%s3|#j1D%
zZi6>aSn3pAWabk6^6~&~dk}Ye(698MU+H;ceDhiLpjk=35q>rI>p_fK(I=&TG7S8g
z{yY8Qg^8+^qdZ)KK1+)rR`opA6`)^qVSp|$BI`lXm9C0PQ(;_*Tt`ZaHAW(G6~(az
zNF5i@Vr4zXC%?Yr3R${Hbr122hK4hvYNHQ4VMpdv>6q!PR`xMaAxSJ1nVEO7(wI*W
zE|(87R-lxdWZH)QVEC*(MH8E7{cvwG(7J&{DjEd$@pJTgf*EHHg9klPx+56D9fcmN
z5!%A7Szu8ktO~)uGnWvc2(0D|B;>Rv$7fyxBd2z-Fd>-6v-(`k{Jd(h6<yY+!v~b3
zkwozd9g0yO?`O})a{C5UoNSPey%-A@b>Q|z(vne43yiH};W2VS)s33;3#Fi-!g8lr
z`V{oRB&x8AXwbkaEY@%OVxgI#=`@xl(n``NjK6q3^!R=3Sl<UDCGi>)=`+jG17bn_
z4(cIHC>yqvRKVh=pMHIgGYhQG^RZ2Rrv2#`Q^xR)ei6^Q{PfF5)t~Wd`!RZhiKc!$
z`}OAvg~g?wsQV8^r^MId)Su9`A*vfyV&h1kT0O_n4#}{8kRvx3%w)?Cty|sm$LQP`
z8R-@^2X|-=?pT!hTTvjbfyE>SjR}(?YSAgiG?kOWlSU|<)<hp_shGZ8nfXXLFqql&
zwPERLdU7yI`F9Xne9Kvbo+KE7mP1TSgq9=RPeH8}ISgES($W!XJ@HYtCirZ$D-Af`
zVvVqNNz`(RDowL7n5nQh@d300K*@j^O<v$b|Bgle{2O?V-3igz_~kPYOi*?@k`z7#
z9%Qxj%QX!>qX$u<r3fu~Hn9oyup~71U4b0ZqbWdP8fW@Gogou5D5#@>H0fzGgMrbn
z8EfhY_dtN_C-7~$70ObHh$;P`qFX0zbgQG0mOue6nHduhBZ5qLcLgkE^@8!trsq7U
z#CpL<qyIcg52~>ghxS;l)~4qu9%CQPglbC-JvVC7b4f*SprHw7V*=h_92hBr;W4sa
zn-|~!1d~)Bp^4wJuVRgmK78~dOx6r90+xq)L5P`*Fdpb11`6Ly$I~x*od&j2=tJE3
z=vOGeL!%DrJKCu6$O+CyP25@8`j*r@#t{pOSIa;{uEt22Qb(dh9Ypul)RicW8xp07
zmN=X&F`OBGLuhdMn*R`v1R<vNS1lJ+RO@7nrxvvjr4~bkKaAK4rPy5Z5n+A<{qj+R
zo-O^t><eIeIE6Xb6o+Ys)Y;e=;Do|r9EVE7R)R6ipr}SLWab+E%1q59@7ThmheI?4
z=?(20eG5gbO6jq%iGHzw!-=q)#{<u@P@yb1@S{<s%Kklg&E615-VmUB2+%#83=KOh
zFp`!@tkz)}Y6N*QsyW8P!HY$fTQIdvCex<x#!9IBYvLu<lxai}(lYK=h}j2d9!BUi
z3m)h<HX31*VR9k8irYX$*w%~Io#D$AiNd7^^<8h6V0v+ghRL+0e&GnrT6Ip^>^LGZ
zs~FsW{4&(~J>C%5IaGq_cZOdELL-3c(EtX99=>q_jQoMYu~Tz>8@&@>IlMxse<has
z7gaaIZ(`<8Q{DUbQR2ldqZ$p`Mm1c?Z4Yvt0Mt*R93gHBgx@GYvjN7!Y&81C_Xs0p
zE(ZM$jb7Whq8%ohxDU~JphY9PY7CG}B>zMU+$T|mK8(aPg8oLu?^(hEZth%2H-xO&
zSO_YAsu?k@j9?g-MYxGaObOC2mSCo>JR|uX<2SYKKV!rJ^&KhLf-*8fS9^l=G2k{d
zB)u`Pj&USZ`#5seP=WcZEYnFS%rW|sWIN0Xi<#*cGZ~_*A-W1|eiQ-;4Q!5lAfm58
zP^z@PeifL%%9rLNHq{V|7TG1iz_R*OV38Vtb;1l3%zG5>?<8g4)Qq`PK_k>zW417>
ziLNY_IBbw)xVaL(4b_D;q_{v^d>UqDhyub_*Q{cib!--;bq@y~7$qUN>;4#NsadV@
zpdwKdz<p>R(=V0}h|`$)f*v%22}(|KZD2Z*Kk>3yEBVx1Ylz^OW>~Ju&3i8DP4PR!
zFV-FS4-|I^W5(|Yq?bRy%^I>DOC&jG8)J&a9UJ@DJz~uUl~IA|V_Z?=0Q(7K?-(4H
zF|fjMfU<ny(65p<rt)Vde?s{a$)8yM2#X=q1&l@sGw7(>=!gi2ywnhP2_n(X5Zf=3
z!ZSSxmebQ<(ZSI~fIrbE@37-$nnM{(jGE^f2PeSq#MpwhSUin<J?W3w%#ust*7U}}
zt;Q2{3v8Y76m2u7j(#!fa5B)iY&cHko|BRL!$?@;{-iA4y{eReOyx6HXTjGru<V5u
zqzmAdGgB3}_87-=9AZtv{R<_I#?n$KGHkb@FqMXAqfTx4l!8b|S$4$=;vZv7$9!!9
zsTg-WE%J=;Fffe#i7!0T5F{?!wuC@_ve!!(hV%6_20cB-2q)NI6YQV~u#*XJXecSu
zFXx<qGM_MD@TLI!P@p6f9=7nHOlBxGn}`J~p*@BJU!o~4I`JSup(~m2kPXU9Eu*Tg
zi5C>Y{v_DFu1!ADahVy>z$jZ;6A4vo`i1m4NW}bD)T2RDPr%Hb_+xFl6(y!;Cl^S-
zz?s2GCv9X-Cq<O6Usc?20#wLG7=8I#=mQPciYxRTGYL&60;%4cT_L!e(#X$h&1@_W
zdd>8U7I3;JfLasUue(h>sDZKnovpW5u%etrgAMJ085)c8f>s;5&@);?i?^sJ#hRh!
ziC98JzCc<Uzp#78`*&jEr5AF{VpeIoL|yQ3Fu@fxiO_Fs*-3)c!Yw#SjIL_7LuL#H
z5(-v|7Ipf`cmTv?JW_NC$n=74;(`gl#w0{RTyB#v(K~1`&{S18@Qg0E=+Oz!WD;q^
zJNlygbuH;*!FtDok)<|3G$T3)2Gk^BY6v}wlC}H|)>T`^(vXntq4^4lUKWyNHqaVZ
z;p+ltf@_@maxz912V(-1W$Fj7CI51Rk-}^M=1&yo7w=Urxb93vb$^+Yk+2S-Hw9;E
z3eMCNx6KqBs8KYm#=y)@e8o_@l*lQz=@8a59`Nj`A7QelB3p~3d#R3tlHO?M%O7tj
ze}fp+h?SBy<)qAf?xsU?jNTxG9uBpl!<>0EYP8EPEfj?}JjV)w4Mv5}_r}|I04M@h
zP&Ihf({bE#9R&8F1V%p{2gS<lt2o|fns(qW6Cv~Pr<cD)$zrvJNZ*@+zMEo?PMJ9I
zrYJcDK@H7dZ_3(S-V`{(48RGByB-vGy_v6d(?rdaYDAwwD^6#a)tOA+Xd-`fXe@sM
zjg~xoi9I>R{V@$u5a(bTO6R7?4!mJBmcrwi{E-?VezQ7)Q#u8UpH-&$SMrY%`4h??
zIgK#f<eT-UC%-PF0-$VDnN=K>DG;`4f-WYgo{v8jmi;o8s>Xr*(S42NkL;yUTD-#s
zk7sUgfy+(hP5}-$Rl0v8`6J~$sdNxK(>54K=pR^VQ&3n_V0P0~#yXZt#=wO}zVtH~
z){YL+%F%(U936xMr;9Tnb~7M$GYHIPUMhW)AqrwR^7Nl!b3$jhTW9RkhJFM5Vmq<o
z0{x<TW*N}<WVB<Mg0W2RNNk$|>Af$jZd6|tOH(}`wGy$%tS&A31r{HU%~i`%d~XJc
z5R|&<7rS}9PhH2+WR>CS8m4WREEG1F*Ay*K1FrlrhA{@4PxjU<9&L7*q6v;6c!Y!-
z4DqX$R?V{sO0(JTc;Nenl}-^_?sxJC5ZuRM#NnMy#n(fqY5+7CgVi$zV>SkHHw$4k
z;LWhPfDX|wR}d01J-}aHhHzv^23ES&U$LjZB0lXNoa}fJ7>UtHN=K=XeepnBPQ`1i
zImGlcfY(`4S%1Jdj7dDk#x}@-5yj|YjG4jlo8f+)B|<gKG*L1fmga^V8uEFEGN>i-
zby}qVPV^l*99RIDEeBF%Ead>pXA1q)KzT6qv~urwCjL5DTL|r>=qHX?2y7=5$1*xz
z_|da;DwpUmF(`dv`8`qad!j18C$qJ|c{Zpp#&3cOVzIs*RSr?K=YwRGV;#{EA8X~0
zr3p|P*luA`<4v@sc2jDD&V`R17ebgF`l2A=mx5aJg}9FwiRJ=xuQKcxlpLbfVIqu;
z;UqSQ;tKKDQ;ZCc37HKEi<BKrQNYLINu_!lD|XPtJCGL<8u0Y%;}=D69fY{0u-oa1
z7cwr^Xx|B+CCWX+FY>X=tDzr{1rZ)WnHE>C$Iemo_MT1+-<XiB5^0$Hsi$!XFA5DV
z0ckOVUKVO$0&vNNK=wjhq~Q!r&r%~>9pZ!z<LO3wn2ChBM_-}g49*hc_9pZOnQU`a
z$sS^V7n$9$!`Z})K#W6lV`cyaVg^2LY^cA};-h1!s6s@8&~_T*=^==HWDr&mgq`xd
z6ItgNITC|hhRPVU0_h0B*oF>0yGQ|TH`LqYB*k(FzyY!zD$peZeXcxjJkU^U^$xwn
z!lYxBR|8TrV?rtJUp$3TrAm)yViDv%ibRA+%0!NniVhrVRh_hC3MB&S0)qtlo$TXP
z!$O|}pGkOqU}h&+0!S+(FVX4>#^*`_z=$+|CiFc4M^Wvbm|QV0UIgw%6twtah%{yi
zX?FxFG#U=A1&bi(iCB+)90DU8hl%H8nBg}>%0Mz`zXxL<hFf&n617~HAZ#L>vj|sG
z1aVpf{y_wubcEd#rOdIg&PRl+E|Tkc76^w0_`VN8P&Dz)g)tdvizOvHK1r*pPB2JT
z0;Dzvn6I(al<3=mE(fq!Bgp+DAe9l$7z`8W7xN9=(D%bK4mH3xt{O1iU_nMRrPIdx
zZ>Z;FDk~X63Q=7SVRbn$*k6{6Ek{5mBV1JxHh!dnYBVdPVb&t3iA56`O?)MLPsxPi
zSn7#Qrf=#=i<OzQ#4nX_J*bjkSAC8&)y_K2MktV~yh3%r6bXkaY{0V!r!7hYww98E
zMKdl|Q4-?eV8>JAma-sS=N^717E{GbC&odSw~V(}AYkDBYc?I+|4A4ui|j8}^W5&<
zGHWmfdoG4NC<Z$)246e|td3d9*^9w=j@c~IgMOeF18t9S&BmZV60k)QaJyhb<Ru^;
z6O1AOOFD^@Qrp=CQ{yuQHc_;a7fUE1#9+_Fz+hr#s?qPT^4T;{+l8<Rrc#mT1%VN4
zT_Q8O%AAWaMQS)N_KY4bs~C4oJf75)avI7y4gyb8#$fr!(B6tCLFEG~#Z4M$HH4E8
z4ub$QV%$q&eB){Ba5$c#IPGXE4!0ZeIw#g+Yz?(sVPerE+*2`Y7s#H8z^jf1Tg`7C
z*0_SvlP$3z0e+_&xdvyGeQMPALK{dx6y&jhL2DfmPAa>t;sk~20?g<bI^_X)Y%%l)
z;shgAgO#2IXrcz-EX2SJ<7Ai{n%hcCyj_MK(tqJfYcUbpCET7=Yki-93W#x+z{G*}
z7Zj>fFmVLnr;`&aS31bI6=@Vt_%KL0Bbge(mf9c7KGhyz=qoI9A@NlK$P<8PLZe?2
z5zY`H0Vg8?NtJ*<mjH+-qtP-HDZSs~iv%WHOarRbT8wRQ27u2cz~vKQXvxrjQ(uyU
z0NXtY0uBB~UPT24)5`pBSb0hD3A<dfHOX6oIofe!m}{<20!<~50|^dvGM*G~bAdm&
zwrOV)+P5wY+JUW+Kvyi8j8!Tyg|-QsKUV?V)?>+p`J9ek(@Ekr0Yc^1Gd&H>Oiz`W
z>D0`$p+$-<00!n6J2?q8#}fEJ0=`}ndixjhOxAWJ8o%kd@|C1dM}qM{N|r=JJ*TN>
z1o`M<1V#djuE!&zW*9C2s!%Qt48R)tU=%{@moQjnfT3N}TfpQ5;#%4Odf%lNr4}em
zQW&Za1`i>g6z`{RO7Y?3DZp|C`KSUhuL3xw!MRhwHWYTA0`yXhEqe-gtYQT{Pl3&#
zKv1SoJxsCDQiv^~Q0=87jUPTN&>BE;zzCJB?Nk$NY#`>rNP;>uwB>=&b5S$n%4Mv1
zfMEviGAv0vm`PBd(a&I9d48&twlNr-1?5Bgj%j_}0Cav-xYQbdBQYKwR?eX`vi7jV
zgrJGx$Q&1cAMP2Tf~y7g67-8=uoowKz!nYy&Zwz{w<@sH6_m?~gwWXQOl#qvWJ}Zw
zf=1zXQ8+(p0>gvZ3`&#O@M<DRX<*k5o`M2TA)Jj&?fP;EA$m|?B`D}(s@cRiwF<Tx
zbvXf;hG7Q%2Ka@N@?ccy`%%0W>F_b~V7Wp226q*>JqkFR3c(&542JS&gkR&v7M%f!
zr?g^}CgKOip)O=)3cCI(GX6@4*4~GYMmt}o4@?CWW4{r8Ws%wn_lb%@n<V<At3Y$W
zCvui)4wjgM1ew7ZRUmtUh#hh2IS|FJAl2wbyaAh4DHH-cOaZ1--`F?dl&Dm8b7`(f
zY+3?wSdi2ZUy5DkLSQo*PQzTwDKD0&*2nL7Tbe3HiP~&T0G{NGy_1)Mkq(m%`lT7d
zEfXY~Kpmx*dVU^qFTkZs{lP<-kSRZ2rDsWFG7kX@z?Dktn<dbO7)HDiLsbnn9t13~
z8Pcg%Qb;v`ko&2EkSX9%I+ST;d{9nN3bZBF%$rpSz=P=>O==Dcm~bi*@l$9n12+8e
zQh>M=0;hC5S;{r*ZFDb2W8=l5Kn6ab>0}sh!);b*uFz;S(>~3#&Cm$C95VrrGvSM+
zGoe&dZ2mOVF3LREOVDpDp+xivQ!s#2-Y!0G<^ldrq3Ibe*%pF;)JAD>tQrnA*JZd0
z<)#=L;yc4dD^@ZoFtIfD#Ncj<W0FSVgce&Yt%OHulsI_?Zjs?W^a~ob>Q*>c`j<I^
zTMQCS0kcb$r?IreE$!zxcB9BEfCqap1{20ws`Ol@LCbMBggEn`aLrOa!yULp2o0wY
z*TZmd%(^n=*6>{hMoqH7tjCyjBgEQp$b-yAgzyo*J*-rKbqcUftS>;nQ&~G0&jk_8
zQhoVFI$vM(i_(59dHw2+h@jRKfeYk~f+`wXe37`65V?RSnwlPL?7axqrNL0@gAXA}
z8p<DVa~N(?ib5YXSC_u(Ccp_2Wd=_qHr^=KP2tXB+>A=-K5JjVB1`c`$yEL-fQP|w
zC{nq=Z?k6<s$e>JBoyNXQH(j0jF()oSn~3P<PT<0at<+Z@FhQxVWjv@5uaiz8UOL2
zK;(PyDDMHo3HVC)VIbjqBgD@PyPVnY(BYuggp)osfPz&NsCBe5Lo2h2gPo3SuX~gN
zdIjplK@><m<J#+<#`;)8jYfjLhQ{K<6CJOha<Zo-YA4G#jMr=LcW{<Jh|rkvf_dU(
zz=n;7uwfK)8AJ7+#PAG)un*H$`W=b<5xXf2XNA#v!R}8`Sptk?I;f|LN}x0ovXtV>
zKrIdxC1G@YOBrSgUzW^FkqfoWbFpt~V8Qzs#(rZjTFEx@f{Mh_Z1|H$Aw!liqnfnb
zF@CYQA|DGyavO%CyaXJ?XNzXGZ=g&Oet9ZAmIC<VOKeQA&?u#>k%oQb1IwC*tQv#M
zRHBTm#RvK0LnK4lru!*gl!1Nkt4W)_0DnM$zoAj|&p7W8O%Ao{-XJvOuafmc>qFVb
zGSaCiW$`AR27|$Oywq<PyBR5DlNT7qn5Z#gCTPN_9ZIv<7~WV*k|u(9PYj1Fnf#*J
zD6`Q{363CMX_$sj)DpAGyTG(0ZVnmb(0Apzke{J?C4bc#)Epq@OldS>s_9hNIYMiU
zN{^SuO$r^*X{PZXOa<=eoO6X3Q<#+7T)la7VoBMJkO!|Dur1On@c~9KN2RZe4IfA^
zM%QBi3BFl<m>JS955{Nm+=r=)4;SiGD`F-!pUH?yvn8V<loz8+P;G*0lc?MX+TsnT
zLoFI0m_N*x=Cp>hnxyn${zJb;V|1wTx09F|d(#wEE9?iA8Vd!1zM=Lz><!Y&t>nmD
z#9TKs;Q3c!TtT_DL<>I5nCLge?L0D~1&&!}f{Od&Sd&gsi}O8yq^nbJF=K%U+bTww
zKdL{+dJnOe0nQd+!U3m!90gbf(S&PMlCJOVLh~M@*EL7Mhb0l^W)5d<XBf_0yTh=>
z_tR(=8QpTD$;Q}<5B7o&@80y=rpcCs8zJXtqYNvLni}O`4!-tB;ZG;KrM?h@g)+1P
z*oR^S<NG1-Kc5xE@i)Q_!=ClQ7iKVuP#Wl4+sEk%fK>#n{6N3>o<NJm57?ZHW|XHi
zh=z{JE$|DK7-kq;5Khn$d8>t;ELNF;5-4$=85n5w4%uS-rm{tYQCy+kA(VPU%_PC=
z0RgUYKc4OHn6aZh3oJ)mtTXkSGyiiUdm_OhR9I_cl#%5KVW!pC;BwkF-cM3t{mqhi
zD@ckzt9*(Yb+H1A#okMOm>|)wo}2iB_d>u_st=1GN;1AawG37*`O=v16;E04>jjzd
zBQTk&u+%4f;tv+muqaOWk-SzilqWuzmlvnFhle=dFo5#e0E&Nk=mC3#)DB@snUUn7
zi@-jE0D^K)iQ3OBNfJ$0QKx364c+4r_6*R5V1ymRJCb&hXRM7ihQoYjO2izD*uqFS
zd!un69BrzEK+XcnQ6WuFA>zwGFJTN%qf{^EW+HnOdvl@<M@Ht=8b570prK|>&-m`C
z5LHMV4L1$9STM!XP4^u_#1UT;82lrsKbr}jVZbv?EjH^g6`k>PW>|TnnuMS{a-^Ul
zoeIv78eU6=LxedERpl5JFdcB3jh8UXk@0CgsvV;$3`fLsG@Nt=%LyM=Mn24&eE85H
z*ofVr5Mw$Av@%GLl2ratg{>8|f#^vH3CEC@pbaI#&X$!`g6Ie7zCCgrrN&e0sPdEw
zXC`oLmtHLXVy?YEWR8bFWM+d8&-^}&j_8-?eTeNn<QnNWTCYQE!iUVsqTeAlfb0W9
z^s{-U4^N*|Q)NeumrrQaEfzcev=psR%4Hn04vk~hQL8OTn}1kwW;Y$&|NfDdb<sep
zcc##5mgo7yDFy~8jCV%pj^daR?%fg2^9UI1h%sy*p0L@yHU9!38#9vTL#vw*8O{kq
z3V+O=7yJqH3;hXj5qMAbCwN?IirXEkk^pY3YfD|ij58OAeq)2U%;K>@Vc6BCc54wC
z4;n@~543#7q9YnfBzR|JBx|T=jCBg3_(Ff>7GsMh%XE{%Sma2j#+VsaiK5>`;?h~=
zAU0gpqNpKW-QeC#hp}-S8^OaQUtpkapm|6&Vb<e7@KsNP;i<-xr=wj_-BDl<g<u&E
zS=yW~mTPg5%N{p;ylvnQ6}pK#XNZH07Y=+FHTlB|KENd^Ajwb#;`YEx_1{EzQG}m}
zW|9|1GS$IMNQ2oV5K<>JyyQ^YNU>oC_yrvjMrM^Xw#Y0@A4X5~3mz|&`YVTHNv-8H
zmBIQW#&qZxWxT{Jb}Y)=lZj!#z2<Zr*pY7@2T&3@#jiZSGy!vNFftf9I)qa_5(}K!
zG}20LtgPt6REmB@c?Yi>jPZh;Xjrkyk3V9C4IhS7bV%?$s-BMuj23f-c+3tzL?(%`
zexGGZs0{3VsG}mqfv+#VklvK&BR1`5jM~RIj*~>IG>mupk*5>h9U?8649E5;aFLBB
zlZ815la2WtMj}5Jn>*Hoxp;#XaZE>GFwDT)7=f@EiT(a~xYhXZVu@2bnqi)qe)UJp
z{PagLT2+?D(n-BzN1+#r0EM>B*cQ7<mqTnPC`%jX5TkHy#Mk4oL7wGBuXtko{&J7d
z{}{8BV8-Mnn0gZmQ8Jhk-6#!<+D<x~zS(6LT(5}l2wNU32ohV;)W~9I$RrW8k%<Xw
zcE&6;TCZ`!f&z)~VcJB$fRdon#{N`uHKq<%W6bvm{f<Dtru70-9O{7CL^$;XRG5n$
z02#*sR!J3CBXqbLK}8O8--u!f@CyhISU(1dG9J<uSJA!%0}YKm*2M3{8{|Ui;m8bq
zIwM3BkeVQHY+`4Tp@*SiS@C`876H%$t}q^jmC!!kzZ4A^d4vivp`ySnPe;OE3Ps6H
zG%oG!B$v_H=A_N^#U<x{94@uSydh&p1_=$d+g!Z$IG)OHgo_Rh&c^zVqD|)&Wv*SP
z5@kINOR?7)M<uj#<sl6%OQDjy$)R*9?6l!vw=uf_t1P<)R)aw_h!@(*MWQS|(O6=^
zavR5(fJF0&rZ%4l?<>%+@QG$Mp9oPEH)tGVBgMien(U`U6`yFVaj1xpiY+V9_+uRE
zF|gJ#P7#!leY{CPM5>2h#E&$7lw%{{t{SJFc50=a?4-=PfRCqX?CD!nSQlelIWRw>
zCWfwiWjJW2#EIold6xPi-I|cGOw!m%N!ATbB<k-7zcVBGr`s~AbSsUBCS=V)e-fZI
z9HB`dT3WN|Xm1OT5-qCplgcngv}eXLEx?V2sTOW|6X~B942=sWg)xt0`k;Kz^^ZsV
zxR%)+lu&tzK<`*|M87bC^QUsaDku;yRt&%=V75&_?M#?sMwl8VU^+1<*pz^jwY{ft
z)k-4J6WR57!p3Lg`Ai5jO)pS$*&DPc*<pnU&0HT3!_qHrgGm$_TdWqUAdbC?+jwC>
z3YEk*6HCc(DwN$+!_H_YXaMRC+#3^9Di#+5B3h06YpQcfTl-sr;fqW-m28SbdBK(z
zfH?uF13NqV#e{*YJTbUG=)DQZqDdl-1;VlBTFy#svP8FsUtKZA=5jU}*DOqpvHXJC
z!19~0s-rCB*xnr25Q7;M3Z}RwMy$0_1H&n6qS9|tBLQKB85o}j%&C|{7BTg`eO~3%
z;Z;uMy%eL&L9<2B094@=D?5dxX$lsT;J#DbnbQ!d5SPGg#-H+4<xhbN!O&!Y%gvtx
z`IrrS?Z^e}Hy}t$u;ZqnNTv{&;B^Rp$~;elK7(Wp^;Tf-Kt7&lpkJ&ABo@^L3R@=n
zW#~8Y2OD#&5L1cbxngc>x-DKA!>?T(KaoD5kx9fVM)KI$G&bO5FdL+r%}Vs}YvC-9
zjBNxfkkDMA{4~~Yql5-KjI}QIz#E2}U8xc=K+^`we#?_#epm=gNh?#t304?r))X?T
zX-xM)#j^mch>TE1l&^<?BU9WmQz78up%z1Xv`4kYZaOHom0CZVi$-E3$@V8G47H#c
zgkP{u8vCAEfgO}^Vx)-qwrFw7qJqvLWI+^TlSp5@TwIJ6!>Q4BS|jHSze+8&p-_u5
z;7Ct-jC}!QXPPE0K*wJfMoD2bGaO0QSoHBqgb%GsABKj6z{i9&YQN#om5$k?^RK@d
zIz0PpX&lxv^BJ!__;6L{<BbJhu<jYa<P67RhS9(j#t(6)hI|G1aK!J+K?x!KgB*!|
zIW=Nx%!m594-IV}ip+ilKpXS*<HumiLTA&DmBzEcPn_YVo<XajLMLH>X85b%e#~%{
zM~pGpKEwUWd94Dc8U{=>K8$rTwr^~IhAWV0liJ%&;_}38cT&E*@#uB}P%`Eo+upai
z6OD@WL4KHEo-y0Apz?f@R$p5AGm7EO-k(8u!}dx1%aaAwQ-2o6%TUuMexj<E0frY=
zhy6h{AK>o6D1MMY7BvHV8a74rJHqeOB8~Nvqf?7q_Td1R;x^LO%wXzV<<4BpnC=9<
zW)aVrP+()kwJ}M9NM=z$Y$7cAnPL?wIm8edMZv_jgC9g}yT_YaqY<hAH4N{E^viP^
z;(&)9h9HVwkgd(cCno(B2F)-quOw6sNQYzdRw!_bWFqy6n9s}#9*L(J&|321-7H8d
z*a!_~c6u2mZ#Hnv&l(zj2tg{WiTn`IIs{T0;+6_W11-QwCVCbZC30dg!5C!1tdgt3
z4HpoiARXA<^GABob{XFN=7$9|oyLkyK3=`|p#m>8PBnoP&DiO`MXg4%0J9eN!M^4b
zJOaO&HY$byK0yeUoCrTF0X($+^~}MQN+ZeCFtKFwk@5}g7AeE>EMMuD2YiOOvi0Q+
z0)8TvZ2&0&0|Y;jC^SPP%_g3nVB@MVtaP2h@J@9JIA5K{^)?Wf_Tut>?5AR-k%op|
z(_TLAKO(}GXTuM{hX^BdBf<^>Pa>2trs#b-t2zc--3oGyW%YDlHLf-A&6Sv9(qh>^
zpo&7Up+kob@nO_Nzq6XD5XPPXM<!-AuvbD?D*aX#TOl?&KG+rr(Ex^e`r}}1)+siA
z)UZx?&ww&2qw34&SHG0tk1}mPl*}~73Q!k8RUz`cmisbgweu<48O0|MY2l?5`sEHs
zfmpHPDH13^B)q5*ZnMb8{R5s{<lEpp)pv?>g21uVFdmy#*Mg%M1>%b<oyecD867tV
z^CTZ;NxG<x!AXyXT67|6<Eilsz`kTDk!K%gm44w#4=9ivun7_|^ARqyXp}A)^#UW0
zl5MB_DO6yTZLI^{Q1;Vbna~;I2{?|&!whsm5AX|n8lHnVGz*V+6Mz#$lc~L&x?rN+
zlEg+Q_kNgRJ;Aq#z_*CN`;Ed$we#7m&~)Q1a$uc+OGGnxe4bet08FBJ6m^t0)4<qV
zv>IuqI!b5T$@>rRF2rst7TIde4?Fm<MDioB?V<$Bj8|MROg~cS5Ts7f5`xb<JdZ$S
z#`p$;6VJ??CBr@XJB|bGmKHqJXfV?3{wNu<=o3t+Xf(DgsO5<R%3yH+H@J>)U?u@P
zfg2Gz-kzb~#4K7mHC-`Auy`thXkmstF;w*8%4z!}aB?CrHRM`_y0(wUY{o?4SQ{(W
z2cvRyik?Ei6c3^|c2}X)5Dx~iofGpGGkXD>B?+cZCt_(BioZDS^bJ9x#nPZojN3W^
zj5PL@(+Q~dNPTSCB%Hq(yhhkq`7!QZM&0y5N+y<5ofIPa)Duf&!tesyLx@xc(k~vx
z75J^8oX<v3`dIkm`h~c9LlOc!GC2~%?^+=qDDhZOdV}-JBthQ-24VCIO8`G8h05~A
zS`(b>VmF3Ag$a)u<)#=gPFM_HI1I^r*e&@nv>ISm;>SSTVpU_NNhR(YI?v|-&Ln=7
z&qzSFs23{|#`fi=wd-`$cM{4g1q97)x-S*rWX6zI#qr4Wz_;rgzN&D2&8LRx6a8xC
zx^E>zX2bl*DRm!hL0%Xqv1uhJ-6Fc<U_Vwa)Z$kbrE#B4etbOpLciQZGVl#bH?~o_
z7)n!dnrM{HaM6L%!IUacqY6FaFkWx=n8q61`af#V7ZD+jm7jobEJq;0#KWe@2j&m6
zU|kAm4;u+01Yu*M6>1W2nIPNo6?jkzS|)0!`wXSu1U4q&Y+~upFj7xP$EfgMAzO@Y
zjcfyy5PL8I(@P4%LNk?DO9EpB7l}*85R4o6`0}+nv-EcqR<E0Qm%`qh7E57*M{)Iv
zis^NUIho-%(W+rli@6@}XHm*XCNnc%lUUE259+~BB1<)g?=|W^lq+Yk<_SbA<Oh+I
z8W*dE$q~l5C=*<IFu<b4z;`&+7o}Gzm}cntOjc~5D^i8nP|u>s=+vl@?tzhN0`*To
zH73~1Ni;KWxFq@w7o#&PJQ`SD(JwH7I5DrgL?Vog#x2SK<EphKHV+Pgz_rBJot>2O
zFkfW6$%IJ;KdVH*hWL%}i){vVA_Y#n0y(EVad&6UjCNacqEgH<5Zfe`f<AsB%o-(S
zeat8WwjG3uUQj6;B0}@-U;@RznlpuP6kZfsF-bF1N8{S<pD2fp^ragw3-ma};qmZ0
z(U^}Kc-Bib+OTq}J+0R-)=&wQ4u;mH1QuC3Qbr{aq){S=Gt|8OaqR~#1zwzvwKf8@
zq_j>QK^bgiH4(s}pk={kN%#xCxH5JRKFogxY9`x1^^BHX3c!#?IzFDds4L!L_Z2uj
zu*w?1lu8UpqcJ1}3V4wki)#J2!fS`M0S1+wnvP5&arPmaNQCZc?K&vYvHLVa?zR{Y
zW(60Y*knxs2-Qr?v+3p>K@*EUlqd}hf`Q8AmB66oeF0xz#n}pLiz^OK@A$B{s#roQ
z#DMUqN)XE%I|=K<3qci5#_|lg_U=H(06P6DLRVv%?kNfru9_B=SCAC$il{QpFlYOH
z9}nmFDoM2{n;nc$5JOE8<86etn-6FBzSv-mSs@(TgQGWsF~Hr7T7iy*H5UC2!8FBC
zQ>+B&ixm95l&u%(H^eX2&yS1`ML#ef`mQa&Wd(0O6$eJ4FAC@rKd*SV9=2H`qQ1}{
zzb)iLQ~4Rcr$PH~hP@{{aFkazDqf3I$g#(U(E4EGX2J`cBk0M;D$C`4QB1j?0yBj5
zl@GH`AMfn=DYTVRkb)`5o)qk%RD3doQ6LPVXkthKl^D@6UY`QBp2C4Q9Q(v7-_)&+
zP%p6F6pWM<dP~%XB@Iu90Y9Rp&707G{)&}>y&IH8J&>xUlaOn8C!L$U5!3f*WJIZz
z#yD-Dm624V65LqW#B>@on)4_`5~!mTh96YFFv00d>jx+7y>+1Y4EuPS$4^834lZmB
zDTw^I=h84-YS=`lP|ii*`8#=uHK;5#8JMtnAJ6zu^Z_|sDy@oX3%=4=V9}_Boj#Jw
zZkop%jV(`QMbb=5k5aI`MPW8gFq4p$;msdEZBg_~{5JQ`W504jIhwTT$yKi-6{wf`
zLEV_~uNP=y0T*}5*A*p=N`8bxtBs7Kf!XrojYV2e;Q@X@y#(4}sK*CJpik<FfNOC7
z`^ptXrJeVViw;o%8|VhG@1kGyip7lq>_`GA_XZxHi~x4%fj7Y~v$X@C!9w7($RO~U
z`4YgHRNyn27WiZ2L4Le%7-042*O=TgwM^ZZ;5Wpt(a7@#QD8LklBCkei$jx6G?kGm
z4mGu(sQisoImR4MFs6xor~Es`FB3<>pi<=8p+tgQwc$G<{=#$c%-c5LW%2dmjg_U6
z7wG4mPZBV{(**N5#Z2<eM8ATeiY?A89BH^gIcpuf2s(HXbnr$3phXMs?JNCMQ~<-x
z0D{I~5Mk0Hv=Sjc!lsC^rmToTzsRF~!OSMMf?kR>9z;VyDYYBo!079#N>4A*hkoMA
z0h|p-MpJL7HT42vVH%^sj4PH&NJeJeLL(E;5szs}<n4_yn~jQwlxLtDPXp~k^j~3P
zC}kFYqDDqPPs0q>&kI0>1o~Ait)E9hOi(I{dE!HSV7QkILTQ_0JBtzaY#Lkoc>&z5
z(yutLn`+0#gIAV*UH~I``i*f|@a<Pl%SXnLB}2T2-;sIf$Z#W48W!~PsG~s9heO>)
z48yko&l=G$YUf=^2Xd(O^Cn3pT%S3rda!Dt-$ZNR85RHd0_AbIA#$e6Pd^%PlEHrl
zpnd==$H0?!&StSDIp|nMl^TB<&cv-~Xz(RwmJpm^CBXp`y!5RqovWk?857_5fG7Z1
zFutj+T1Al<?!>qd8yZywysLl*xu}RNo_TSEQ8S7J;9>?p-2(EUXR0L<7dd8?NwL7g
z4)Ida!eSMY#j<2L8+ajR9U#k#u}cz6i9)<m4b4M2q-=B~num1qrcKSm0AADRH#IVQ
z8k;iiZwE8KX74Z1EH+>=sNIOr$qgN~!qKSW_ZxM^nX6|=9f=xxhVg~av|+=LIyLuy
zxL5(cCxGvO+Fs?HgS((VwZ~7oRSQSCjIsmxGg&kaBCk>|<EWK!>t-BUM2yD=et??-
z8{Eg;<Qo%sR^g(Q34TMZ!lfOLrAn)CdD?q|R-2+akRKO|Kh(B$)A8Oe92*Y@zN*!x
zG_Yh*Q@~J=uQMaDV=ZtB2KWUd!=Gujr(sdE-hFdd1u!8HF2Ldq?nKN4(_x-KZ+|+f
zG?Ml;_T$(XQ|$ztp+x8$cii^Aas0f<Fk>^!zzq4rfzbz|?LMux0>f)fS!2@Rb7CNF
zcLA~RYSMTV&9<U!HH+19R{<TdwDW|QjqC}q0f2a)v8n*pI{^eO0eg5J;4iNVKQT3s
zutJ_xLPHke1j8YISq>5m8N>v586+6uRIu7P=N)_6!%#p(Z~YKm^kyf>Bh7W_5CLm8
zb(FWm0vN3XkOa{$I*a=NE`$OYF%beFgBasibgYC5OtDABqhO#VhGFH3W9(@H!Shms
zZzl)^sC#1Wfz&*Bmsq$rHH!v4%$mFf7)IJ<TNE0serD~rKx6oxKM=m!&?~go@(GZG
z0Ph4OI2HkKELwh{%f?z@azBiTC}iX?7@~O`9=wGVz$l7-Q4=<QFis5Tb82xu0~k>S
z?7u=|5x$Wn@s17g@_85xD-)&=4nV^R-m0aTw}vS?)1nd<15#^@*$(m@03X3CdFV1Q
z_XSrTh&>gsS@)0!=Gu-~_lY(mmU)Un;uZ<$d|-CRV|^<vBqK&WHSezsMMr8lttCBF
z!OU#qS*!(~tj-j|SOW~6am{gp$ziB*kc$<X#v(_<m9cGQw<7^OD+KVFAis2xiSu@N
z2^#|CyjbS&FN;%32VjKX8Gf-+35J;9TcJW_9P5~ev*4=Rhd1zwzG5|KDu!i-Zbvv1
z_E+d;K&!yy!kIwznU;GF$HsR$fncL^SiwXOh>Uh6yT#eZX&=ZhAGx9NKeWVoNC5!`
z!{tV8SNe)2<Z&TKA_y#JESg7?;O!-B)uAU28iI-quMivK7uNlunT-t~kdNO0DVA^}
zWF)+{BT3nUkn*9n04)vut=TIEA&HQRkp&{kG4eh@vOr3w0IoyLziTl791qP)XC)d+
zunYW(MYsdF9O8F`ojfpB%Mt^A<p$ZtfU_)E3WhU-hDpi@zv;T34$qsS^J802i#csP
z5l+4ctxs&3G*erg&k|-*4lM9ga|`6TMe}+k)?_-i1%Hwju=SWADqf`_Cq?yhme?Y*
zMp2xu;jAiZUOzs8D=)kxL~xFQ(kL1Ln8+0HiJ~a2f5Ojn)|+>zMVhf<^=7)5Fp+?=
zL*R<TR;I)hI~UkiCZHkUM^j6AV~3_sUlbu07zcQmRFV|T8T@5Vn1e{mYuJN1Qm~ms
zi(FGUm}`Y?sY1M)p&iaDHCSi^85O3RN(WWzk45n+M_Hg6BYBY$EDIQ=(66YQvi^ml
ztSovAV9yue6{}#xY>5E&RrHH^&;#%d7{Dlse!=C}zB6LukSj9ECAcgxsF9~VFobci
zTk0<@b$KL}Pw^{ytl|xs5F`VDqO<})TKEC?)d6e|X?Q+<N9M9*^<*=eAx1E?rQW7f
zga=!()OsX65r$@kvaL}$N@yP=iCnsnl-WE&jg*YWm?Q8_;7N&oBSArG9wFl$7LO1(
zhWRpBFbLccZaO^Gz<7jJ1JNpPqzrvdF68cG2s56t19@KB#gY~mwS?#gI1sR&l7~+N
zn7+_2ANvt_4<lSYBVd6enJ8d^BZVbW6^AwgB;;QmhD<H0M1&DIxY~tGY~EEtXK>m^
zQLHzN5~uQ^d52qkAOnJrs%;eyHJB{0@-h09__#49@l4k+sWwVfZ8YEBXdwPZN_fGs
zD2YuYv(bzoPH!)!l7lhM%@_*6)%G&e$F7(t&9}Fg?s??9+Y8(fYF}?J%Rw^Xz#e{O
zu8d13&31&uniA2H4@B9o@V1$ax8ap3`khvIo55Rww?P{)^k)@%7FutFiQ{YNu|V@L
z7?0$ack~#(m3_c7IJF7J5VZ1N#KpcX;tt@iKbQ>Q3xfXg1Wv|rl|F&hkZ=~+xr#0|
ziZ1jsou0^I=rYyTJ!)ha(`+qG9l}UiiI}=Ds2;N&Rgc*Qa)bNJQv5Xs-ab5sM4WE{
zmGP@D!5HY|c!nXf_?3Qv0)Pl)t1fhN=ILq0Lts7x_5Rc|xF1VNDbp0c*g8zV4TETk
z*U^T7adRDGT|?9z`C9%1+F^_<j|lAgwDZeSnRySz4`btl#W((+q#)BuT+pP(URiln
zP9gUZS_X_Op^U~bU-s36!HsC{B@<}k2e9#?)s!`b__NY~!J`HPNf+1Hp}aN|2Idd}
z@{DCS;S%GAp+t=;9BS<G1X|&Pp-eq))G_F?ajKn=5|U_42Rw^X7=!UM<^$NkvNU^9
z7&(BB7Kh(>BM#Yl9(9NZFk$lo+Mq+No8|dH4+0oLu3$+WOh8LdxZCuLO^gEqV=MZN
z@tc~LeqhVZMnM4{;-X(<<{Q%#hwJlEG^%V^+4-}hpCraQ0lN$l@zKl|)O-}XYDz-&
z2W%iFcgSF*FWixejaOWL0o{Df^m_w|o|Z6()O-C*Y@jp`2`se$R@4C=45M?aSAd<(
z2JjI<zftpC#jz%`#zy%zs@_Z1+lMV20~q_$uX?AgM5xAvGNcuFkrUvJlW?FddbQ)+
z=`hV)Rl-3E@_RPWj=R%~g|VP`%QavRPe2dB+$xyhCV(Lp{qpinfiX-0Xs5t-reNGo
zvCvaM!YM$`6u0R#Mo!i&3Z~$4Pt$SbNl7J!#bT+m1TYArwtZU(2RaLBXmHb!AhB{{
zlyD~|N=wg2)%(nPnldZ}I3N>3lPYgFDFhP2IUf!UO2H4j&_FRb2!9AyG)Qp}Ce<U(
zp6N{x8|9!9lY^38?LAxV16AL4f|CMEfc`G57-?oFm|3s1mU-&Sq$^{>&CGS-sZIl9
zdTS(yTa?EN2oz!BoMKXak4%YNwcdsZU|$yC5i7a|V(nIxBaC<D)Y#t|cl%2$IOb<m
zJyRW377u_9=D`;B<4XGiyI?#v&z-h7b`&PffSpY*@m`-dL_ff;pW;P6IF$*eU}#Lk
zLG=!^7esr`r-LbQ!f9<YMiZD+&ZjAm8i%h7j0cy|bcT&O6TbS$Jg}99#`P=bSlis_
zsfGri@~2>@Ph&KIBt83)xy7e)<<zqe{wU1CX!et8_M^nizB2DXSIaPKlfvrzHIa>&
zU@!^Jr1FiAn?dzv^vrTxtzj@fM<v6Z8fi7VrK5O^AoUHqcN$J>y&O1kN@L4~H3Ogt
zi)F>0QQlvCPvvF+9W&gjGYC>)XBj|=jDDy1MGR1CFggM}WE9N6Rh;2cn}Jn=_jrQP
zA5<VEom3{Zm#BP<U$|ygVhyKe#+TP1P#Rc+`91@4eilqFO3mty<%(0UnfwD042UxW
z<8X$pIRj-i1LT94Hki%E;d-qvaUy+-?E)U6;KbTknhNt;e2hSCf~uGmYi%c;Mn;gi
zz{Z}Sa$mT;fj2d9ZHIWw$2hrInY%m+EW{bMV!>=W+$c6ewb1PuF02^?4a3NoYCi`S
zGl+Gi;QC;%I3&$8)*q>gNBhNN`{gCz;4?7mXR}mk>v2N=;-)@wFvER43)AWy3%c7!
z);ku1k*Bq#@D#a@4D<vmsRXBRhWlrhXqh}X#iFD~8PJzF)h~uek$yeMIKZo1k40P5
z5rf}0HL!m;ZgII31nig@+`Ac3s5Vz<h83Kp#^NXOV)Hd>dt`h(!G+G#r_!jd*63*Q
zBQtai#`xWT_F9YuOye*lqu*(6k$YHwiX3aGL-&=F%<D_ZMz%GZ4YG^(BA=Sgw8aoV
zaV`uJaJ~Z=g#{sQ2WSz}FE2!h>n$9I)r04HpF?^KBX-JZbWJZ1H^Q&B9tua5oPo(m
zc!Qu+QDkIyW#V$jYkA!~7`9EXWdY&|t1ujoL;b!s$FzZ21`DuN@+Qy`VGj@Jx+Z^M
zjYPkZhW8=JB^Z;^FQy|jH*p9(hEUX$1JL&#Fd+I(&3e;!i>8hd;N8b0K;t8vRlWv-
z`lW$cDzu_uy-9%(YY`5s0@1W8pdzCQHSvN>#AvD32DKh84MKqJ&{PcZ8qBUJec$&V
z-8d^vK1?Ft?hDj7!ixDwoj1A=1HgD}^*5Lx=to2?J{n^U6{UNS34}>p&mf-|I4e_W
z1}(WD1ZE2(qaXrT9!6V11YSb~&R)beAwlGuw+EpS0n0b~jVufmG7r&d91blPz*MJ?
z-?7>A;<aoT)o=Mg5jJe2zAN&e&3D^4Y}=j27<+|&kMTRx+<H}C+F)kj4T%v?3UsH6
z4HE)*af*I1Avm`Y6eS{DZxQaB2vVVFf*1%oBLV}}JNKH2A7cC<2&0i-y>qYKOIGjP
zTgDcY54p$Q)^LnRqg49<Yq83&+yw{Y>SYWsN!lhWYMU&*P=DnZ0Tx_5LlaE;Oa8`R
z9c|XjY}@U0dPl2p-R-8kJl<wS-c`L1rP}Vw{Ej+`7h(CJNYwppchI}(^?En`(QGn1
zt~2+yy$_w;M%~$L%Pih@PM$@7sd#(DPgLjXm$F!^a(mU?_B((6sWwlGWVckE{)bDV
zN!9V)!A-A^yy0%So#*Q9otIg@^~U$hGQ8?`gjEn;EZ@8$=tW!iokysg2kTZ^t9Jtd
zIPW}oB^y#?Vcr231>!*IzwxfnD#d>1KOH%H|NYp=P0}6Ilon<8GA!?G=ibToTXnP~
zba%Tr*&ZJD)Y<m@Y;b-!r;mFcKD`su^3DI{1U{u9<=wNhS-*4eB8*Nt=l!z*egCZ9
zK4JAu4*NbusCV(QN`1rgV*>eZRedMLlGQ&=kUA6Rb<S|LuD{nb`6jSjTZKwH5N_(?
zc%|6{;)4BIaLAK}vLdMxH-+@olbrnWNtL8lnGSroJf^0p{(gQurM2!C6wWU>=BCb|
z-t73n2+8Do$Q1F+Sa~k?D!HgC;n`BwD9~{U`ePn@REF{EDmgNJ$5gm!KZSKQ%i?Wh
z&C|n-0AaSx;&AyR6V^x=^*`jt-e8PArGK&I3_9fxOuMS8;8K-#ePx{*40(~GO}%!R
zvl(J#E%Cb8<@GwmyRuaE++SJWQF&>%x1mj3@1jgu)3v^;0!5jm^$dipOH=JaYe#Mt
zb&;6xtffkRts+)@V^l4vi|YFq+Fnn=2CM4Xt$jNX)Y}qpzN#{d%ep7DeM4t*RGC<v
zixqR9ty(>Mc=b^#o#Cal9Ny3k`c5#YQ!{tR-M^@I1cGko@AC}Rp>4**aTVOH>b??r
zV%Pcz`$>l$xWjtnHu=bH@{!ZzBfE{qZo$WH!N*R)$9BO-FMg_lmph1OZk^BEI-fap
zK5G=Un-I;qDrvK1Q%Mti={EAxZRDlX$V<D{Kir%zetP!n&-M0rZ%=aQwh_7|L#K_<
z9Z2XbWSQkwt;%jAb{A5)O)9rZ<us}6HZr$h<`&GHf|*^AA0w;|wL6Hyt+R0JESx%v
zMp3(oB)hB=+-2OkP3+tzc1{yJyUr^&=XOz)7T~jU-gh8S=!EV^ctfK~bc6Sc3+pBe
zozMff{n!mYa5^44p$86hvI7r@8nK#)-QYtvm^4xe&nfDwD{+I5oKdSP#F)k-y9>$=
zJaR^?oX{h;dF2LwbVhvPgno1<`N9qUXm{Yk4*Xc36h=XQaw=Uop`YB*FWlf`cdKS@
z@Ub&hnKM<7ohiti&||x=RLnY7kN;+$`0Ot`^f#yDe>tJQyRhMPBX|LS(<b=D-GNIt
z_{1%{bc0Xa)mys3C#%dJ+tLj_aVK}_27h+Dk-Nd4-EQP=@MpIhc_Zjxw2yxNvEGXo
zuzlvNX5p;nvm|24N|opapE>t!;Q;Ml-C>k&@K<*jr5pU!9Y*N}pSx9U+~9L(du*K0
z^9G{h2A{jlY~0`rH}lpFzHl>d8)e-E-@3t<?%~?G!I#eJ?3~a`7cT7F;7jL9-8rF`
z?n3U|;7jM!?wru?&WyfwLVq}+D>u!)Z~p17*?TwmPy6h=w*&ul=k<LZ^q5*q^FnZO
z&<ELStpx8M2Mj3dM#dwCBNhDdhP>6?>!_}n2_ko5EyCuZ)j4N^ojJ1#yl@t`p7s&L
z>xaeL{QIgY&!14-{pEU5<L=+9Z5{YAH1sAKQA;cB5p?eAF8tFj_{jQxv9MDf7gpf!
z;d)(%o`frQ`)-0ycQp{IKmU<cpU*&o)IIp6PWp9GRCm<#?7|wvi?FWiWn&1xEb1B_
zSl_>F>hEG9)C$jB=*(PX5A(vAxx|?{wYKVeZ<n&ax6ZU>_O!irrfum?+o~R4UVpx`
zM$nkHb)8f$YT|3d)0Voyx^vbn?(E^Lt!ay`Z#z%1QWs%0i5TbRYUQj-bv;mhmsU^Z
zdt|m|O>`$&J>%Zg%+aMiG6@8F0qUeEj9)8jCxCzQ_*q<&(+~e<1%9*xf7`vb^F6l$
zkDa7H9^0ihs<eVn>>7Wz123NcWQG22l01RTcFX^?0{5-&@2&6O>`~Z-?Os2!0{^sI
zw_9)qWB1S=mG%A99-#GYPx3F;_pjEsJ*O|M@0Zs14|X4ZawgCUJg`%qy8$Qdr~AL!
zbMl9s^Vtt}C+yk!!|u@^_9BGVcVvBETHhDecVc~K$_l(+*a172_5GLiZEwM)^}Vvb
zbL+dXzSq{bz1KF@_tyH}S>LJM2fNc-yL4=)Y#ISOxCl#oPOj{nMQV4#o~<jpM^|PM
zJU~->w(SYKumgWNM>w&&o;gWZ&iuQldui90|K-euJ;v96SsmOtr#mrAJsC_G?@+nL
zmsG1pzzf{qu&OoR*?HGH_z$R#$|B33uWjz=BFsuF!_Ne@x7nq7N_gpR<z{{VHvh{C
z)Zfd}V(u+1p1I*aFp$p^n;WrmLW{y-(f(F*Y<Wb>jm<B7uq-y}0jrMx_pY$XFwSKa
zO4<uOEOyaSxkaNYuZLb=TqukG>;@x#0j?U;GO1G*YRPH^9AqqVt;&^!+Ozb6UA9zV
zXk=D!(FtwcM83P~m;hsSSg2(k<Wx4PQ&k@c2UXi@aEq&I064;BxUmEZQ6)p*OZ!dT
z=tQIe&aPmwfUm^@w6EgVI^GBeel7?J4eJqGc*f)WGTUUd4lf+WV<t%K1X7uuW;_oW
zbKctMJ7LQPVGg*Taj{x2)jM4g7tWZ1m7eoay4YCM&LX5`sVn;_t&@H#)^#7(%P@~$
zTYJ>rq1h_DsAd@>vZ`4!H`8L+ENfOu9&UFfgf0eF>{iO+u(M2HQ`huXWvum3?Gn3x
z|7{0oqMhz=*a_4vmhY;KvMobRMF3vrTXn(j&zo6XS%~6$rM6|=URI&1oH0^mUevha
zgYaspt~OQ0%AWp5cHoDC=t(*lx@OM&luuD^w^fvhb^gMoN^L|kvbm}k8NW1JgP)~I
z^nCPdoo$KO%F<Mo^4|BuI&+O?DvM*4)rSL;i5l#3(07C0$W3*Ffg2pUL2v8?M{dxY
zx>dQsksF*ya5%$WEbF;@PH=Yna(y43zN`IU=Sb|p!Vc`#36YhdQ#5~T=g5^EdQ!Yq
z<*%&K<u-@-Cn{}3=T1lSs#Bf-9uB|NAZI9oNF8OM%@e!)OFQtZ9e8L5xXta-nF%Y%
zoqVB`+s_rANZGCJ2n#U1&7Bf}xJB`LSv_W2-+0CAvUa;}_h?yHxGV}$MMYL;VXUcJ
z)RV<mLwy`d>wB5l2`0cLVrK`$yQLefQVn-wsn8`JQ=P4jce~2D7NWVkb0><Y_cs-9
z3u~pg=*x8@mNV`}mQ?A^sSkx4xe{j!b7<){hNaryjXUQYROv0-na8)RU)!or%WmC>
z!n~B0tBV@)ID3*RLoPjQ7UT8JE?Z_%nORy1`SQMfY!*(av_pdT><?Aqn?ONgTgIET
z*V&TORLpDBIO}hnZYn#paYIhd<$Zgi%KP@Vf1h1c8+EJ?Qmyk*Rv~Ysw+p&t4|{_1
z=Ct617EUNF=o+^)1&T@m1n`O$f9rxPi80Vhy~`|tbM6M=oT(bwL+eI+v{WlwC*kK}
zYexaYs97+1vCS<eOKGW*5T0QNH`bO~If?>M8~DXmPa#aKQdi*yzbEX}l{7Akx1p;R
zvQG0VKj9o2&(poKv@hUdx4P+bR@Js9HDt!9ql|)>n>zn$li0;KYm4B>>ZIHb$UY^K
z1B})0EhO(}#xrkA3@v4l3gV!f?5~QuIUWu4;#17V(W;4eds%jM7NBBP<&UlJEVEPM
zBDaGN8o@?#{MJcb7V+!184*QAPWM^)n32EILK?%jjq=+CAx*U=Mx^4<+7%^HjTX7(
zC??U4sW%mGfz?Bs;k_tU+l8~xn{3t8Izp5+gG>`u*}MsIl@|FS8z$E2Go**{BWt(B
z_4=9hb-C)a{C0#^nW`E!2U}TPL)Z6fc*KfU_OjIse#&p5?YWa?VHSC4>z6rQBBVBP
zdn7TYM?6zjwNi#K=(T#&oMdjqp5xtW?ba+YjVx+EkGl-C{-&*J(m>DM)Eh*-ab)AE
zy+KrIhwg7S*@Z0*clH|VZ8%s7x2(6_Ta{esAg5j`WhK(33nPU$6=+hfu2JsHIvtyf
zatFZMP@kh)`m!FH37=P}>{9Ki<uz39_A*?!8J3US$y`2i%QuoQ+~j5cr~!MHmr6fj
z=2Wwn@1ivy--49QR=MP+so^JE8Te#0nMjy|=e?fY$i;1ie{2-~(J2hN@2xGAr?d88
zw|-!snWfrTg!aYOPO;)G77`V}Y1ZK%iE`em(gh3o(#}Gcj1_u973e}$+{M!FV_Oc2
z)=^LF9<MDtD7Iqboh7x7?a(i!idCXEdthr5H^COQ`Ft10N+l+D&9>Q^dh8yW+)lN-
z$la>Q7j2ZQXS&h1ottf~N-HDHBx<Vz^+HmDHR9b`x&7kyTnKB`Zzq^O=c=)>FT-+!
zYI60a+4J_yYdbTDD5j6=9rltPpjv2?)b^&DFl!a4gQaSlwKvtg?dNVz9;&t`>5Vl_
zy0(3^1aX^2qx+}{;w<Fk0cbr3CzL2x#Z=;4247*T080iNv}=u4SA;Hc2BGxoD2Ia_
z74IA+Y6`oEEJe6lj_fuNvsuM}h<Ragf4GHOgs7=|tH!!Zt0GYrkIf>V>=M5@UH<LT
z4L-C(xto|@x~XnWxm$K!?n+hj9KpxXw_9VZZY*|yom(HCrV=^7Ibm-ar>@pArCo;c
z<?N!cn29SZu-Yx<WxxtORAp?dg5}%TI_h+Z+oA&czO*JBB*bM6R+ik6dI7Twpagb=
zU7CWi)e#O_P$|j68t`xI!@t=OiJw{-FSA4un(b`AsCc`zl);y7YUu`<DX^_wU{<+!
z;#=Z1a%|x`F^fLzu_3}8{c{WcKDP#H->DC*cy{+*<6X9C1K*>La-qe(mrb^GQ4|ha
z8|udkH~Gg47voSDO$<hDE*d!0vWdK?jcx>dteslhOfF^Ju+|0md>Q6#cZ*zwx1?GC
z{no_h<-~nj<~AyE;e^)IAtz$v2J@x8v8kc9^R2U~Tl2Zyy{zR~m?TFAvvWd;8_G5o
z8P9>ur5m*O0!N^<z2e1IM^@MY$6VHnB;m+Lthu5``_))9U!Ga~fp-+DtFynEZQ?dX
zVQFeCFy^hQ>-oM8g8v#TS0gcVIm$mQ3!9CZI>DrjZGK3ybb>oKb?2r=xpg0{%OZ6I
zLL9N#S#p-Gf@dI;P7v!tiwQ?kx2@$(E!)AwO-<@l-p6T47iGOsSDD^`ERKk;mhtw=
z=~ZaVs-P!Stj)E`Q(auzz@3l>6C7*k{@(E9p!l|2u@m1gURZ)KHwwzAM8<s2)<>$|
zvQcEgG7fA_1SE`H<d=|TMhhbM>#g!KPudeq8_LaEM{!5C<yxH1a0EpDEcr4LxDn4+
zL?A}`;f;qi>hoN3j0CT#S@{&Wtmc{mS~?x*(9#a=oV1;jc3H0ohn99|kvO59lT&v^
zH(%SWP~bN^U|B6u=wa!EoV4VLleTn1PTI~X_tL5JrIWUE%Dr^zeCecJI^}+I>io?~
zyL8I^=G6I{llD_$hZYZ=G&i(!a=vuZoY18^)ec_#+fVhP>=x1Tb+yt<CloPD5TPkT
zuPv)A4*7OS+hloM&_bi7B%>cLYW;{=+P|st>iH^ME}z$l;0W6ma;va>t!jZ&y4>b9
z<B(7=!>6$j5j41M-gQod-^}JpsVcNEa2rW%NamDxQW8^quNg;3R^8DMP!#X$t5x%?
z0)YyZ(!Vdgspz38AhUhb?;M17>7-%KoAb>HKV(aWA&r!&G{(4V4ZOD&Y+f%4eW5_I
zoGPlIUc@TkbK+(lCYC-%yd-p}%DPZtxwQx}LZpj4+3d1ywFaA=W?0G|u&hJ121VUP
zmXm1+$t4NW$Mv438&Y#rrqV|}vA9muJKZ4XG(6zvjLC*Zi0CtjT{^czS%szyk=d$s
zVY4oX@?ID+*XLIG))#`XdFufAYEN2*79+T{15fP0uXbQrIEAW^NVa%8Hl@%U+a`t9
znOl;y$d5AICQ9VATg8E<U?YR48x`q#weX28)$>O@nM8j&!o$nb4gO>c>7HuJMU0W{
zl<0Nn4ETFTPTWXM%0>i>FUoLH!*MM~wB<vUjL}5;eNjc&S{Q%04Q*u64KDAyscw)3
zoT)8;ae@$kHj+&kifeDfa#8PTR^70Ii`N_F445L`hOP*gi&*71$}xH7>~-*MZi3TV
zog>~?=ZI~78cW43k}`>F#q`n+NKSWR*7Y2V0>jG6jtteoDBbL=Fkp)iSd*l%BbGZ>
zp0J7Cq}){zzCQ15$_QG!fj34Y#i&EHl@jfTmO{1uguU&oD)yp{62)FZU3+r}w>Q#I
zx3H6JWsPQhdox<irfsrriGI1hB|&rOZkgTolv^5-akR&`H?#c78r04Xly)Go1GJfT
zjlGoE;c~Zh(#vG&q%T<u#@hNEuAx%dNG+Yzol{fdwDT+bI(WQVFEfj)q#Qk=O}28v
ze5!1YMA;Iy7)i@*rDnv(oiHw^@?BKg$#kbWT1m?^+t}!v8{E0Uqz>XXFC3Q~RcMGy
zf{;(^rnf_!wps3+)Xg$!q$iE^oi#!Eg_Y`r*h`3|lgfTVE^PMM@)vv2x1|X(;&S<3
zTy~kcy0rBsDi&x`U4)@6@hY8A^43M6ca5-UScG9SB5Fp&&4{EKu~%u@jJRk<SVWC}
zzO3qZBOEuvW!Q*VHX{m0ySK3QL#hqpAz<`z5n9&xC9)=)Vwu><*2PhzPRLsB!dh#}
zvuTL1AJxaASk_Y=RUu8Z)Bmd=p>7*X{fUAWX|TuV2RL>GO?%0=@%vlK?x*8chmNtU
z;)9UQ2G1|+4B&{!qZri$tQryO&1D?{b_i2nL|ZAduNi6lb+=Rx)iS)Y_;iWE(ZQ?8
zE()82$zfNVL=iQQU6Z0aM-Pf=r#D7GFv3_JZJm@gz)XbJrA!?So6ynFDc5Ux8>bq4
z+=$2<;dPPaTRVb?J10!v%L>thPBV|d-fkQY?Fa(l&O~q^**QUnPfg+N+uD|5RXa1{
zWQgQ+abIAuU3uvSA2^2#)1SCOhda0mHw#;JwjnENge4eSEW1X!?Mj2rj?*&=yVAui
z+vQrCKQz;of*lVuB+}FJL=slQVyNudVx`;`Inj6MI2~GB2nU54dF^`WJ1QIL6yfG@
zf}vZT2z{$ixVFf7PTQ=i@O`U~&m0vwS4+<7d_jk{SlhQiQb%|aVS(rJ(#~nuS)b^)
zDyi7ReG$pk7BjR-Yp#mu;1&7Bp4_2|tQ0lFjjgId>rtN$t$x*zIUu4czIS*mo|t`b
zpfP8qRgxIMDm-ylOY@*p^sr_XF1PlPy>LRyt*gd#;e@q3?ahWoSq-hCD%O#!wPn3%
zWQ9P^5dgYDNi7=5MKir@X0VC8dZ%94Xr(oW7uNUER-n7E1ItJCxx9E}wcu#-T{t05
zyKvI1au@Y|eX)FGkLkh!FD#C<acfI?KwUWTj$Yh_8??O{Rj1MEj?+_4dE_KLviAXN
zABhH%d!PSI`$Z*nsx7G%y`@T{sjXl$k0J3dmVa3@WtqBfW6Pn99iSPrlbq0IWi!uQ
zb<)+gsl>xk?ntOiGZRNydM~Wl=**Xq5?d+{_1GJUwvJ6@Jh!KcWn~uSXlu3N`Ww<<
z=;2j~xt(fl?~M)9QBJ?IZ56e0{8FE}=hocrB1gZ$)pep&2g*@$BOI|(hn?OCN2*c1
zYUm44mIjoS7*|zmFN+O{S;5PepR+>)bAwfiVNH!kTQO{3GpsfD+R2UE(&i4wwqjfC
zC~d`#Y8$uf=)kRACUex_IX5ylS<;CeX3Y%?xhd9;D#vOWOI3_IKde-s_{c)-s0J>C
z+t<}x+Dx6xDhb7G;_7D`&$a`lqn1y1m>r~V`&Oeq+rfNc)AURc=(U|y<`^5Jl%zFv
za~;R4G#m!QfIUjudZ?rEaKd=RePgi5BY9w3FFxE@E{=Y*1Anu#{oPLa*-m+82Y#^w
z|7|z=+)jC62VUBN-|WEecHkd&;14_SPdgCWfyfTTb|A6)mfC@Zoh`Eif7yZ8c3^1-
zR(2q_t6tkFZ|p#62R3$KYX^3A;L;AfwFB?$z?B_%ZvrEryq3N1_i5eFhgSR}>-z`m
z`^VJUDOUX7t?wt+_fzZpXY2c!_5F+W{ohu9o?G!RtnZiB_ixts@7DJ}tnWXpIzuZy
zvc6;MJF&i%^_^PZ7uNT}`p&HHzpU@qwvDy*y|TV@>$|YN*VgwN>$|kRH`e#o`rcXJ
zm)7@N>-(McePw;Wx4!S&7Te#OfOu@OQXbiXAMC)7cA3X^%HQn3-|fH?JMh%5;F$?9
zee~SU_QDRlv;)7{f#2=GKkUFCb~~Y+64`;+4kUI!*@4s!T-bqy9mwp!Uv}WN9a!3d
zl^w|KK;ifTumf)#!+Sfhu>)H>u(Jb~cHpfYcxMN$?7({oXak7pY%s=QvR&n+nG;$%
zp+=%f<@)-Q(Rl3m^X}*W8@|lrB2oW%`s6w4n46fNUOas=YKa@R<#Tg5p_c4(t5y0|
zxm`~k8djm7i=1xvEYpSSEF56WS-nv2wpHN%mfDPVTUEupeDTAy3RE@N%~ySD^p`#!
zafU3vcq+k%$_YNox7qgUiMmwF`DKwMcLpcyMZM^k{j49(^X_mO1igMtU$cof>Ge1C
zH5yHZy_37PBX@PCj<`dE^LdB<cKRHFF?tlkADx?S;Wl`E-E}+g;ilK?H*0;OF2eW<
z70aj8tq01r%O}-eHpYhroB_ACfa&G>`9o^I|NOz@$EX}%68Y%eR^^-QQq6rzs6x6#
zwQ2#EG9gLC`VJ|cKd7TwV_o!2G&@?YqU!};)@eSUZx0T-+j+qg-@~%y^G?27MXKy@
z>eX5m>7DKAhb7PM@%H9;Yuw)FM~I_b1y<=aKVsVg3YU6jPrHMDxOWhGG-t<+lxEyN
zB<iN$*pvUi4nnp{a}aIaZy%U72z|o-A9P>$Hp33&zHY1oj~-chsx4(_tRkDad864G
zIjr;CHffpcdM*{WKrS;wu?4_P+@=Oem^Dnqx`Gt9!u6^YfprBRHDR=5*xtWT+xo7k
z-icV(?c5Ofzr9|J`SUA9_RpwM0K~slD;N2Unk|6wZ&hEF`;0aKeEz-axd_#a^<0`e
z;8W`fX#aWbEUnG-@e%Cp$A7a0yXa@Mgd6<-%^-j({AX2T9U^lp-@XnN4ExMxq8jRb
zbO1Hf{5LE9<kU3b@qbXi6#UFqK6h>Zg8_W*+WrSs5C8v}oYDXLX8!RXF0|~>o4ywe
zhsQP|=MWO=NWEJZ<#sc-vt((v!#VPc&fV&2R=w?_EZ*K>p4<zHdQ_H0*(L05P2E??
zo$!t>08Bu$ztXFo3_2>+dKt#5`_0+)t5+Xxy1lbk=l}ZR@axl~^KUNtoma2EIOz21
zT=yjMou71iH#hx&favXAmp6>?Ak)#hEVc#r^JufoV%5**dRFU%ZSfr4yJg70<>%W)
zwmIR^n<Q)e#r1XPtU$GQe$dJ1oSq-W;d0q6dhHWr@>+d~vOKxNg=pG}{7#m$OO|lU
z4*2eL4vXH2d83JF3qpWVeOO-X*s;u}@AZh@cp7dON2~B1;S_~_!s%Y7KbQ(RJ0}8U
zaI*O}JlPx`_Tr=UZnNlizUUlodOX5%Zu-^jaCZm`>v#0JRqsW0JBRVnUqwcF`kmfk
zr}yEG*<~nl6t34x+N(5c{i=VxlRGz^p7nYa_7mr!fo`^89`kILGUYiTS5_t2QC#G4
zxa~Fv-Ro7mN>;X;_XrcqPxE6gc%#!yW$L3fF~v~S%OO2k&#eyMoUH5gxs|tHTJgNl
z>%N^c-z}G>FD32Z;m8j@PRYx@%e%bSd)D5(W!GF^7dQRUbTazXx!3~?=0MlDwmsgX
zJY1=p`rHs~dG<Cp(C8t149wOn0j8zQd)xBrL*At=){zZIr<JBUUUX?ybD4zgk*R+3
zQ+UZ<ZPM&w2iWy9HMN<$+vD!G+q=HLoA;!%cRdV)Ce+zS1T8z<(F(-ey{irm=!X}(
zs{ck$>Mc`vvOS7eo$?2}e|vq>i%8u%IH;jPJ$VI1^Wk?Uk*n|a^jy|!xxML6hyLs{
zHbTFgKflVi;XA+%I{c=SbmA+JLZ{nad|nLQ+pPPQQ>Qtt-LDQ6onD?LO4^B<Y_Drp
zji@x*tDDbR`wiB9)BSMM?^LV)uJ>UhtG;)TYKR!#^q2F^shw7Le64G8hqJMOUI*Zk
zR-U_8_q!^8Lzm0(x*q}c9!+R){hc+SU(6PGmR?`CzN`1=pV%gU{&~}XI;Y_!^A2qi
zT*`^H?)(hk6qn9valGr+!CpU|f9QO9|Kg%#m%Xx7Uv`dLYjJZ?O>RV=>ft)6IR2XO
z_dE8Kd26M07Ot@lnc|PP3YIk0WKd1f>5dNa+4HMaR4k7&o#VXQ>m3(dZgZ8#Ka|Ca
zwq@K_zRsj4mExY7xF1z6C0ZlfO0+eB#4S6}-`qNMN#<e87Zv$FyLg;$Z!00GR6ssB
ze^D$|$i2~D6!$RPhQDR%?QOM~bgIXEN-6F)|DlkeV=sSwOi|Uh9shtX{~}lD>wYBV
z6v{?wsJ`uZyN3Np%4s&E*<I=~TykFe!>RPA%3;1K{)c4|ZUf(J#nu_H^Uy5VK~uwc
z_~{yS9#ex3at&D?F0=RS%`E>_U1S8mZm+2&FW1--%{ABCFQedX+w!qF;J3B<*a8UE
zw-nUxg?^-@&LKs0K+1k%-s>Dvwx08BLj%sR1I;I5e-3{}6#eBEZh-~2K?4B?e|!Fn
zE9nRtY;}hdPWcDfo`&n&`b|mHVfvM9ZQZcS-L=ad9B>D_S|^})E6iflm=}-!Q0Ql{
z7%40t6eG6+#mEQ6u<C)r#-rFeU{VB(m`{qO-mbEZx^0X)nZ~KVq{zEl7ZZt+{T(kM
zTM<?lNFCr51y{*&o$5qLj-?E*wJDuUjp;8GxgaVImGK9~JXg0?KuJ`XekI#yFCgW$
z7LY=>FW~b<SgPbRZoIvW+_PpJR|wRXYLSmB=C(u7>D=Bo#3P@4>evctqa<$f1tUHc
z%0`h4XgQpiW1Z*-lOd#VjZWM)WC#DK1E%bQWw^51xV;KHqp8V`(-nRKf>~K~B{dA=
z&?kVHl|>h?!5H0OW@gMM#s03s*B^l{I+-fdU%CkG^^X;yWL<>5bdir70iCRi(AQ1>
zeTDSiQH+;@wgo4li5+n@y?h>bJ0T}n#CGq_2O^wL)RHiGlx(?@>e8m%*DVEa!?SK{
z`_pykvYJhzKGH_-gh-=qZWGPDn?|)Q=dP~4Y^k2BEm7^RYf<1t${Uu&+4g*%_w$?n
z0$6x`{Oz-S*0B;g{Z3U;=iK1PE!jVk@lQgp%1mu;$;^ywq&JJDMfoU<7q=GE>CIxV
z)z$4yabmLoGyrZdBFR$7-ldI6u#@&DqlxJ20()EI6D3>P{CE}3>NM8w)}tf$G8=5&
z&23`ava7wU`&|H(a`Pc-Kcm628<|b?UI81gcFWi)?Zq@Q-BL`a>=$d@2e&SyyZWDA
z_*>Te-&^hq)pjeXqT34S%W1EKj&Cc{I_Gu#UJ=HDe_>1!89BsRIHF1x+#^e`>?|7-
ziEMOpxh+z}UQ>e5y7?q-FRNg>ZdQqF%PO$LFwAeu-0zqiZaDyzXX)+5bOw~t2(sHV
z9l6&vJM*90h01TuO?{(eyU?HEa@ojEF;0$BX}ZA9B$17Ln__v{?5d7M&KhNR2Uf@L
zjm^d58^xTomZFTcH;ZuGUe@QTu?Z+*KT{KfZWL)I?^l3b(I_Q5WiKmm=tfq=wPdYu
z>}LKdVXsh)al2*e_|_sVtyIx_1!^qZEm6m}7qQXpmXdaIYXz;)%t~l2)C$k6g#AJq
z`EHcZv3uDy-tFerk*%5cwxo`9GvD-|u`qw+2fhA%`kMOVS+BpEKNIOr#p>r!zbO+G
zNl>qUxtAT%qP_f^H471Y{WtB^%T~7XYx!lbfAN_GHd6mpdv-ayR(ADH#l8OT^KZ`n
z_2tpotMl{2>sM#p)8p>F(^ttMeY`rNzrEAmb@#0E)p@VWX{UEz`MtA$y?S+i{p!_G
z@9WbZg(=WIoudR*@rtrmpVwc0(d&J4(f@V+&8t`4SFd`f6nNWI=3=s@PXqvyHut-W
ze$gYWyqI^s>>LtuzBnt+duN05LkiP6byG^0LfJf}G%l49rvH=*W%KteGVQlgSlPkB
z-K`}~4Z9tFgDT56S$wC%!i+n3qGQv)6YaKlvdx{m*xm^*!)(bCprbp#5Y|T|N183w
zoiL{io1MB_iH$yl%Pia+6TJ|w6cO;ED4X5f)Ge0#EhdGMcF;7{cGD_L=6PxtpkH6J
z9-J~#+FORleY&&SZMJtJ>N_=<--C06TD(rRSAr2;*>~Q-K_}A4Zr!9ihhOoPSG;{n
zv%wYJF_l=Y=_<ZLBP`OP4qtV@`PY}HwD-=x{_^yTZ~Dp>bkjWjpD+K<omF^+si8{N
zbQ5x=VSe?NpQykJh1)xHBUAE4mgm$sr6zY2{o_tjf;;?<Q4nlO=(qC=n&1J8z;k@w
z^Lj#McSOUGK3F2(Yb+!!aF$q&Y;a}tX(hGtLcA<^PVUfHI#!Ljsd4*n*I2AoUe_pe
z^Vzu(V!xrj|K9J~yQZJ_%if3L%!u=eo;`ijE&IRrJ70L6-tqSOT0wGsL$g6=FgHs-
zIL+zI9d|nYZ2p!zepv7Uq<z?r=NY7t{WX1Hm-m<RyIwz{AkM%^g!3Cw1^vrz-d}ak
zXm-#05ewXn7Q$}s^`Fk~4o-I8nnq7{hjUNXB$?-DyYv2gT8~7QW`R$=G_>o!qM3Yu
zeck!0qd)$S{*a`FNm`hs1wobfcloa~>uW8N#2(q)d7Et)ci!;BksH~;i|~?84vPkP
z;w43|rX~60<xCC^o?c&fX)Xo=r(ywN#o@ej)HzIgfMC5fL9O__Vv6v2xI15qz`Dz;
ze`np(;%oObM+|)G%|R2{0=0PGS3}wZVHL2tVX^DM!S2xeu3B@M`DgP@cim5VC+m5a
z*5~dsmQ`QS)kz(DMi8{yVaMJq{rHWS9?>ie?VaM!@%k(|7uL+v`F+$x`-CG;2teOm
z($3)F(|~VoYB_7)3kIL1)6n_z&x>Udh08y8dG=<f{>+j;|7_Jbs-&>_(FNTS^RE0Q
zaM?TbsKwF5(F6L376pshdtF2CG<2%yNbqu(4b_99XNjB(NVdbuc*48sQK4EoZPXKP
zs*jWMXc2CJLOj9RJVc}4?=G4u4rRC3GXv!}Kdojx+LMK?P+_&Nmwc}egBx4NpuFj`
z-21Z@rj<Ppr2F7N{?a7n-SK!h>V0gzZqbYAw#A$J>0T7{-YP-`ilWnNO_XwcqDs!e
zbJ%0uFz(#HrPd~wa*JM<v_PPzC9PE>LJDkZRTbR!?H#WK2qyPHE4I)!+s@742u^J~
zy-NG0yA`0dr?Inj+cer}QVn#`ZdH2|M04BwzpWv+YT)}}%TQ1;_jTwKX5iG`vJG_Y
z%&R;&7}U*i1g)Y0Z=YF>yDre-acXTzZ)-%3#mCl~N^w_kOm*?=>w+##paynt@9xc?
z0r8JFk1F*|nM+0$|FfaiN;!sS{)ud8i<=nwciHL#(B=C2?f{`$ue8?$a13Qevrm|#
z8Swi_h(Tw)#|m5eaG0(2BD|nxn5O%@c0dPO?G$Zf)ZRi6n6~Doche6BgVE<TI2uof
zd~<vt)MA<N6K(3<mN^0&R>Y0#a3hFh0=D69$yDxI!Wj{mA-1Dd<9*o3fv7UORLS#g
zxK*rw18V!0w5r@Hdq)TdfAOZPI<S?F-4K5GA=j<SCe~SHg3x!?vMQ@D#8tG01hVZF
zDhuZyzW72msf>EH4omeJ18(nIOd#>35{7Lo-K^p$+dNgPf}&2t<M>P+nRW?9C~soI
zn13kBw_%z5s?u|}SEXV-)qk^7)ETOin>?R~+CrxlqabAZc1S}=_Qybqqn_4!W(ntR
zRbcBUdqBG7%&{DjNQ&YXVl+p5V!+2!0_-edD+M{`vL%&;LSHy%un$ThoQFoQHsY(G
zrV(PoMYpU2x1o3<1_meZzYPtsaCrD$8d}W5v-e;F+|AAw=Tzg}f}l`A-+cYwO(~F?
zKum#{0|wjO5rMMk0dHDU2N(TkMg#FaYcN(=>K3}=zJKfz<$EVPpMMNf(J+bz$i&uZ
z9qe{W71Hc0dFhi#v+=+i1dKDa<l<Ecmpap!j$m7+v<xq-x+ZK;+LBE=|0kQF>6}wG
zIBjdSESUFEN;YrE)~M~-_$?frZ7?JJzb%`FXu2{29<8|`Q?@$iF`ao!b@8s`M;hGR
zyY{(}v;AkOQk~PMlhHaoyA2WD8&hFG2jyeg{#<4oJtluZJGU+GihzKwZbZAfEz2@|
zf2FgGiS%vD0#E+BC676oZNnt2JmfuKHj6i5PG?KbQf<~nUagup?XTL$852a&d1f_e
zy)+gcdrDmD;6O;+dBtw2VeQF==xtHDjhVVFj&+2hOq@l>FOTsjl0TXJiRDiyf1Vy2
zt=kg~m94r6_*8A`D%VnMCx70{pH%*A_Uo#l0CJR8#7#8|Z>$T3XM|=Uy4fB<?hL!)
zWq*70pxUU2iX@7U0{z)A&NN@walh!pG~ZC1eg=46(06@1&37Eshkc$=;0f)X`Fr}{
z>t>$P$1eaF^O8UHDW1m^5Gx>bB;=sp#q*~W$ToGyTeO>bu-Dgmn9Ca!XpHTRiF8KS
zQkSk}ePb7>hJJg2jTA8RvY+vz`_bMNY>_LKSrdDE!#kbV%=+y)Gs%f1xjol=$tCM`
zYpzss>BYP~U#at%mA*Y^EIF-haC_cR=QVre_MA^8=Woo;)N8|NP}}<Kk)z5cnw@A^
zNz0!|{>1Vpls`}9PeK)ZeAT<ovcIQdb~tT>H;wSR5#BYz&l=(Tjqs`wUck&<u(0_h
z5k^E7e4K!&@iI2?@qMabG@O1WIYo3A+c7XNX6g;RUbk~Aao*_>X0g9!ce@3hoP&eb
zS>7kYK+7`|(eMTC8`S@ti<YqS58K+gn*qes3)kA>zP-N@hVc2;?Ckl#=|CA?fiJ<0
zTM4xVo^<R;=#}1$Z5>l>_RO;Xy6F-j%*Py#52_IoP^}j$KFyBl4Ea;<vp8z33}h_|
zlW5^pzr3B7!f2pg-dpSuKMN*yvs1f_&BxRn28(;SwYZloLO8DGlDjYSXi71MZ5E6^
zia}Rbsoh^wrHmYveuAMyOZFdlvmuDN46|HH?u&`~g)tCgmQ9YW)2%#FbQ!O)Bm!)C
zCi&R!O4U*3R0zk%<s5W7fY*i`>tMD<WB+qbwRnqxmlzyr@e(5&0p?X73Rchj1n;85
zK!LKgN{RsrJ{Zpud$w5F%?VNNW(|(leXWjjOgH+iT+D6p3wv1JW|zF{!n6HohzZ2`
zL0kVVICTqIY}uLBCt~C5Zzda6eP!6D$qp}XJCA4uI?HggeN1@rJCOn1?QRba3f@*2
zF)dqN3MYrkgodEZYncQPgPY?v;Cf4MY>Pp=lNR`rmBabK5nzV)$TfDZXF>E6G7&Pg
znXfg$<>wqaI^d(RXB&{;-8)9SPm1L>TOWVeEQ+_scfEeR**u_$-5ht)WwCvctvkZ+
z%D2azFE@9t@BHKV&X@1#?;rH{s?&eRz=iO%Rk%H7z}3HMMy#m#0vr<wC&HA`q0J&o
zx0~Y+?~aM?ygK#=H-?k*Vxfd}v&q9XSXu-<Ht6Fri(gaM5GeAWic3{CAlXg-3$eLA
zW@vaqm%0q}*_!P&O{hf*&DO?8l=Mrn$vAFKJ>!m1zmUZCHgN1>o1JoGU5nA9fVDX*
zQyi^nD(Po;k>y69f1+)sk@kxuu~B!?t8ByPgOl=G0(6Imy=G3a_I4{iE6*Vd?$wYx
zGb^1lz{ro@abLm<^^bmjbfv%lAZWW$+ZQq;X4rH<YFaAn0<QHw<VTo#ChAYSsw<2u
zR*hK{OQH_Cy`GrJcDP>)UKZLt49*usJm?k(;jyZj-}QRO-B>q3DSWpUD~+jkdvq$g
zo#V@F!?yDfA+<NV%i9`u8XEMhA(<9G2m`Dkr!Ok#05kl}n{wOj=J!<ZYy2K|i+fx8
z=3m+gtn|{ONu(2G#+Xsl^^RjB<Rjk2gmsj)4t|d1tI`!Kk{@A{qb|Cg_%hq82sxzV
zbj>(*T$EXI#1C+)`!NIUU&AEZZRigAkYr++e;glrH~sY-KsaQqL9m%^Nb6#&E6@~}
zjhM{`bfMkz`pda@vi!C<N+`S8#!K3r5_7h^=bfJo&c7uz;~ha_9m!GONmMtRQy!{o
z34nc%FW*>367f0HMKUfzN3ITf=QsVGl_Pd@#FFFb-ZJ7gj^$z@0;L<b<`8a4o6yvl
zt5eH4HMhlDx8^MBoQgXp*K>$@`=;B??iIany5+sRa&tf#!+E#-x~sm9?`;o@-eJz)
z_u|9ty{t!><FAqbu%IB-7=In!i@#QfTgL6IzW0vaeW#s8WOQo#C7qG@=-s!q0|^s%
zW#ucVB;u@m94CvhnNy>@N$%y$3jCUS|8;p{pNKHpbT`zS_1D|OW$&B%lx)7<P^3l`
zqIp;yC|W-WaHmaO(RaJk-Enl&EsoxW?-<1SahJ9VyKlI%BCa^1&Ji_pM9mz#W{w@_
zxGNefPruz9ne$*&Ttcq2PxbVv`98P!ZP?YHeX6a`70~gG`{}$Z+YYaPQ0@4Wy;uFS
zQmQ!Q*6wkizV31z_qe~`aG&tiJMW#?C-P}O+p5*^hpNuww9nr_ZH|+^0EXj2e@L{V
z`@I#!&?#HbKLE%d+cT2ViRtwL@Q>|@N$KeHZU|ifRBAwKR!6Gm>RW;xr!Jh^u>5<~
zU-yoiC0nbba8bP8;F5TB3H3HyWHsQ~YJr9W*XDvtN`T;0r3hE!u`V3c^TGy2ZSjl*
zU>Nh(<bG>xdtR=J5SFFds`fr`2Htt_Bh!+uL47;;xwQaa#qQ$YI+Vs9(P+^r&CFY#
z^?B!QmasxfezcJALh*A#9lDmQELonb^7lqQME;~RpX}Y-C!dcW>~*q2@F1!BXf4Rv
zA;i9cRrFQ2F!^vJt_pTgnbA&%KS|k$n+3nC{x;v=hD0FzJDA3&^VS_@4nOy%Mu-%l
zTUBPax9IFXezu2gvc6zr1&D?$j*8t@FI|_em_3LA?3=(=X0pnHekAV|A=B^fsqR~T
zF#c`th^V?^x#Z`oy1nnJ=rg@{&bz&PY}m(T!18`qUpN%#4=}!~z4~4h>qd18Q(cDY
zuI|n0UWBzfSJXSrZLFP|X@q|%)g|v}HxqZEB_qezm0vY0ziL!|)mHfxRdUsD$;k2G
zGg^Su#!HHRX>_Xhmo%g};nNC<)!jckLap_Q4uAujknygg#dfvqhV6T)%jk_e350Mo
zdVbSmmrI*X_X9sv+syxwowY62&AM*iTQ@z-3d8so#`9h=P5T`j+?K+QqI#HY>mssw
zCi?^jXXHOTVeA5@d0anUTC#R~xSm~(VU^9UK}+Gfoo|!u^1Ir#nvkK+m<|qFB99Ec
zesEwoUtQL4{aDssuVTt}yH(?NzM<xi!X!bS?k6e;*K3t0FN!YR#mQBtnl|i^wO;At
zPRNhuu`f?%>b2BpllnA1DISIK>x+_II30KXD^1f*zw`cH21d_u#~Ta>9l~Q0b`X5r
z85|AO>dxS3tX3Vy3rd2#_ezjG9Znq~KBY5pk8w1_O*u}oQhn=pcc_n9a_7H1&+8bq
zk>gHY<ZSl!c0m}<z0I27dWR$5mf^YssO+w=eJI<FDk|3CH(zePA)4%)FXL|r$^Pcc
z<-2bP&8ELs-}EE;`|j1zhe6-F>Ap(n?@jL;!kxeQ@~RnoD=o4$wB&YCstw;pblbBd
zY=dAj@l-ew-g&=tBK-4SyPJoq@_1KXs^ke1qn}azr)mRH%R9g&gSTp}YuE96i1(TQ
zwX_7hSQ`GkyoVTc2Z)Ya=*+IsjONyKJ$JXJ(^U4grA0lwFj7lvxT44X906Q!cD{LQ
zHc4v-ln|`VRihrzjN4u-{>*OH441XjfdfIQqjKKZ`H~GiOV^^OWhK|Dj0wn{X7gs$
zC$@mjwE>@CFV>k;b`#f>G-c>7fJ~VDwcBie3zz&RRJP%R_|2E=y;Fs|p<lJs6auU>
zFq}T#X)O1EHvzP#TH@RK8t%<)&X^$~g6+!N?mC{<1>?S()H}A*Xm5YA#<*A(rB&mm
z?<UzbZgh>9WLAoQ$HH`Kw%Y-r$tEdQRqMJcp+gG|^+Qw6u6%ua<yS40FYC&$K3(||
zl?wxR^CDX*makjA)^}^R`A5yY?rwXHWs3A2#_v{c!`1pl!MVG6>(yp4#&4O2UazG~
zS9@Lh<6~XgwRfp#?b20Sm#&&!+TX7EM~_xS2PtnYSA4YGuFqV?Pk|Geu`SU~n&<iS
z<Y~1>el1u<Hu(qdl^2|aCg`+NN-QGi&PG`g&n0sk{+l)ssuUel7LvQopFKSnAE(XO
zCd^1!q<H%->veV71M1&J!BsVKobEMomYmDcK5k9A?1>dybD!Q?P3?^L)feoI_Y3;3
z1CxtSq7zrvQkdC#@648+!<jHEp*d&oZ=aT{{b{i(I(xr2GmTVCPO*PtK33VS^P}&^
z&)lqX%C>6%7Jb)gf&(W%LlY;tx8I{q?~}*o>N9$B)oGiGx+g^=`L>=Y7Za|xeghBw
zj2S#r=M^AlMh;!S4B9#t?$pfEY}|t2Z3-8yt$!SRR~i|g$k*)2AOAZ&x%$kWT;1Li
z_h9|6EK6Kf`T2{}xTWScyN&t2+B=j;H3?3u%3}=p!nNCRWJoboTz6%^{SK~0&+XKw
zmPGg5ZtmYz4Y85txK+=W=ruW7X$wB>I#_FOeBr?aw+i)h$n<{5-l?Qp5DGBgRtHON
z(#HDP$k5znQA!UWNMk89)C0Pm3I$@|*^nIHhSBC`1-Iw>s1!3;K9XD+D)04s?}B#t
zmhHV~AVlTZ_r&LRz5!5e1b}V$9q~Ijy&qU&?`UJNVQ&uoH$A-Lt#}XU=uOk<U#fBg
zuEyYKdNk_X^lrL;{r66l%*~q&8>U9aMciF?!5odD7VR&i6LM;Kmp)307&>gHT*=)*
z&*?anW~wZfnX-0IFI~J-@*CEr+T0262v1eatHV2{WX*fRG#v8^-Lzu_Qo*VGfq!;O
zbPV?8o?=wSx((qi_AYG2E`I$t^p!5d?dd+eydx=<eoKqO&K=_vUVDkBCV4^GHlA0#
zzoZZFk*LjxEi`xYs8-o~N&y!)=_m82b$U8aq;VMp8^L^FcXTbFy`3aC2(qOzbd(d2
zWPRLQREi*8W8Ww(gB7sDn$vJPA**rIzdtXk-OyjnKN!oeO&Rl_ykMClK1B15HSQea
z0Sm%0%WB>wcy)b!zjqYlL21M5?1(y-=w4+<tR+6@eb1O-!C2v{$Ip<#&KoOUJ<!8^
z4?E0mLJkfx=1g00w2e;kqlF3+&1`(Yrg`10cf@9B`Sxd;In8c0Dec<-!h2Dt>af%1
z+4eRi=hNtHXExh;tp;{%(jno#n0JDs$&uITU(LVaXFtC9ChPy+u+ge}LZ?z4rMV~(
zaf&tbzt&n=@Op17#aU&y)}E!ygU4pHALX{W`%DxdJ0U#$FhwA)NVe4P{U^9+{=Xa0
z&pl7{f$M2|Yhwg@ck&I%?VE2p5KoG?s(cV`RJVt_--)^ToklqS-Fh_P!(VS01RY=W
zEuGBc-;Iglpua5u`dc15iM3fXffzc-&VwlX3v6dTR^JXz`RhyxFI@ZFIF`6`f(ir?
zo^QkWwNs@m!0$&ZRbD8eORP?_sIF$w(-76A)=&iyq<fonYTEkvyVkbhYz&iD;kqrG
zTzIBuUFt`;?lu6dy`!|DG2>5LmK9RX0HiHb*{C{hf7^p9NV9U&_V5fUP;a^e%EPLc
zAIWmhqde+T<)7}y??)Ge{4~dCZNu*N(CdBa%ixM6`Cq8=&eqhY-n6W~wO{DC9je1F
zHq-IImCn=+=Fn-+zulgmVSDB0=f`K~Tz!6fcdNZa;Bjx8$@V;6_cw$B9201yKYejq
z#UXs$^l4M^(~HTRkDU2#2$yV4sBm5_^x1%5+6Pvq_vq4XdK;oEQ=9*{u!=*dn1oJk
zv99g#kO<Q~5F1`!FS=px`nntPbB@&Le7+HWDX&p{?_TdD{&sW1#Va=~M6BBN_j<KA
zf?hFaj|8kg4k+{IpSUv*4#K-a@2?LI_|NaI8adrF)P>Sjx8=*H$0CN1Ys}_ECf{{4
z<h|3g^W*aRx>+41<i|AXlGP2k_}nZ=cTKZR6(5UAy6zRS6!k+lVZDOg4}|T7bb%jh
ze64fXy*PxVyyWN=YZKJe_d}+>Sr2^kE8UN5uH9F#A9pobT}+U{PF@sidq>{%ogwWX
zhJJ3Y8c~LB>i^Tws#_99z1=PAdG&g&w<=BZQv<OampwfQ|16FDgM-BQqhLFr9(VK+
zd&#=3qn5LZTJ5{?anKh}HSB+NPl=yVo)3Z+@zr>Q&l|p+o6y|$kTzhnhwp6c%e?aX
zby9qrYr6u2s}c%C2ax~tP72!Mq5xXqNs9OUU2oo6pcfI+^}3>bZ~Ba9wJp=U)8StA
znSM4%CA8v8bnt|bvomV^{G^v3(mv&C*bRyCPs7F`*Vi8Y678Xl1fljl({To=)Ci!H
zCy??(os~NPmqf=oUv;ll<9@Gal2Me}YgUEQ(#+~ZMiYE$uH(GlVxx9SxB0Q^9k2C%
zVfSV1CtA~!d&})04cpUu-tp3GNrgqvHvf3~<Y5uF+zf&UG0TAE!Td-^u8r7=x49}G
z>KVGeR=wtQnZ0;*#Li&4lqYAZ+F(_5T=1A6qXs<I##|Y8D_uuh1EbAq*ZU5;OP!Up
z%s{+rhKb~vm&~i<%W-d3Oatu0jA|VaB&<-*aDJDdz_%GR(eKidoRyTPC%PqtRz;_{
zYBv>4{H94#45-etbLRvV^+>XBi<69+()R!n5mbFfz?qpN1mvZ~(mF?(oTE<`sNWr8
zY;u<+$8`Jc)=Xy~zrSghrB;rO_>$dwHejCZMfLg`*)z_m?}*dhJ3>cRmTh9p0pl!f
zE~25Tz-!%b2e&<uTX#CWCN>kDRq(iTxIOHgch2{)@t*jmd&e|zvF^W~Yh>cd+~5)Y
zpXZ%3ew1(U>ecqutMb*W{MD=UywiVy2hgNz-Oj%{hd&>74zJny<iD=j@#HJ*U-A|F
zPxd7Ji%!48J`8_{B2vg!4XwwXA#F{_RXbH^7rJcdS9B%~FymNNReD-~(iL&cA-E?o
zN6;u69UOS$gIiPK;zCrlpU=PPp1m5}d-cvsU%i{8=hy#Y@0&gP^97Ig-IUUHKhS@#
z-rhU^=AtItzIRc})6S~_Zy!Y;yEILc&arj~+8waZyu;3`SDi!Z(jqJ$(Ae(NW;GA|
zdA*9=(DlZY^$t<2$WBz1yhHn3@uMC^n;~(RDcl-Oc;5eBkL|(ye*e*YZSkUP+_3D2
z{Y`(}kNUfQ(og4)`U@a3z(@Me=&;_Wf2+Bo?bN@NKX2sEh5Wf{<tSq@w?OmQEgN0J
zzs@`HLdCCDa=pPY=mSnAuEX87NNI64_+kZ|YhK>6SZ=Np_Ktj=WE=Khlw2>eBvJWw
zwjmI6y(E0*dbMNz+)`b$OU7%uFOwo)UR`UB7q!KH5|U2;`MjgID{c2AyqDg;_rv)I
zuRp%Q);+yO(!c5>a83DWv3dDv@v$ptP5R%@X-&>h=Id_f@cChfkAV)Kef_U5uJ8WO
z`RTl;V@{91>Y8Js&&^lobY8x?e${Cvyy|eutIoBqw|A{;p|jTM|2gj**A2dU)$Mlw
z{i=J{%@lsM^VRwJb?5MVs`=~Q^%3QJ#ZCABVS@lZ-g3J84_iRP*M0dz$-lHEch9~%
z{2y+G0=+8hUyT;7zoW><cI2PE{y&@b(G+|^`F@yxc>M6#N&7E7L6rL7$^GZg-BcQM
zo&Mtfk8Y|YU7vk@&dK**y!iFF(eC#&w&#ytK77_ppiVyc>G6|BXO6qriJ+*jnP$Gu
zw+sGvj|07XUAUXNF4B9jN0mj@v&H1|HPO4YTxW;0342}Iv|sn~>v~`51RZ|GK7y}%
z)rP?Wb~3ieq<g3_Qr@q>(lmUbv*b!8#@R!2Y+RkJ-ErM3_2&A5#v~)E2k4H00(5SY
z-YL3nb*y_jKl>N;{R`d2oBmJpZ@5=kzTRy$bhzfu5Y!H@quq8}<UMAty`+4LR|$Xq
zCPn^>;5MC78hiKETl%FX))7>o|Hb^9GwS*`{Xd*N^a&`?wZTA7Z~Fgky~#R*cMQ%2
z!h5}Y<IyM>SBwH8IP-4@r`k3%EsNCy4fnhGA+q+4TNA(g&Kq2hM*eKv_Xd7&kYA6+
zfzLK<{U2=_AD4Xp@AI9q)YmO1lHd&+;CXPs9KKGPsb#WJTblP?|3i|M$DR5r?$BPK
zJ<wUI3nENAH{y>e)$F2duDNUvj<9#R#D@016Uxr)uwlJbH@WfYM7>PsA5d=t-F;L&
z^BPxv4R7GF%t6Zcve|Fw_H1u3f2$4q^s~FHiAk5<vj4Q72sYxN@O1BOPq$T<k7w|g
z%(w|V@oaPb%;Yg+EYA)OX7a~FuyP3sYK-{+8-78E#eUb<8+OFYA{<W_?XKs)!OENQ
z;vU}dU9%Dy=V3zZnRZSaicO3rF228doDhE7bJ_}zvV`d|6PX$UiESmS7kd(1&`C>W
z2M2$vajY$sVodr|RdVmvtnygpkR@WRhPsK(_g62%3#NOzpw{3=m`56%_q24N&Iy%c
z&ilzatDM~ZJ{;@by*OjHydAhA+tDiRg#O~$<-R_hD_;LT6TUqCf0^X#>tC##Ok{ME
z`4=YY;2>u0%KFq${%sHF&U^98L<hec&l`e{PL|M}ej3l4*jzX6L5ro4w;#_JJvR66
zF6T?kRYfD+yLZxC5|K0S#;2YC>Kw+$on!3~ipP5xsV*n?PM*$}^%KuGmJ5k`8j~Y1
z=uKzt(~>^L1Xj-1*cCS+aW^SD8(v<0U=H4bS4sphjS<$K+MZFTD}?lgIJ(vcu|AxP
zLkd1>IncJePe7tr%l?^`D|n2(@0eji808bK&2H?l&XgDwbbIIh{0w=|=cNS>w#t4Q
z_H1!JXAWAOo~xSX-!$c3HT1MR{NBCGhuVT{l`9T2W%h1yi62Lb1;~K6cI)mGc6av$
z=y%>SI}JCdFw!7(A-Hc<QGUFNu3g3TH9~Ufc6zr}nSH!Ue&cGz(kq6e_Ruw}%iKw)
z9q3(2PV3t$<5W-;<nA1Ao55`J(28KuV;w^vmL+R{@A6UIFKji=L$=ebVTbmxxAv`T
z5rOl=ZQn`DZG&oNfhd+v8+YIA$~~N$=iN_2KHT|PInU0*bB0{>O<S~E@E`uh6X!RM
zJ-f4`Z&8y_tswZ|z}oqnYUkq_h|_(}*71Xi&2yKz_<SoBmK?iia=uRKPU~*w#U4wn
zAI<MFPhHq;T|yj^`C61{)aLqnee_mEue0q_i7?QK6IPo>WWOcu;NSr|NY{2{Xu^+w
z^~79geHV(8Ih(w|7WGNC*|NS7>pU!rkf866z5aWiGQJTBdu&6n?yMc@wCeE<SyRt<
zH|~@RtFJA#TNSDtg7>(2+J$rp=OC6bz}q^K7@xyTR!Ldh2X6i<`(_{JR~LwsjyId1
z!cDWd{d~7u1(jcfo9@^B<G<dd;cLY-6v4kekT|%J`t`(~(mk4H%dIMp9zSe(5Td?6
z{^<XAuX#N<Pkis+wG3%)*o2FYLgLnMp7ChcCvwrDgM+AITs1MJS|FUCp5-j~qwyX8
zUk^$X7q=ecYM=sC_v2&&s=o0~hhLok^(hhIV(Y}fGX_^lXE3{^hdsMz2FD}J1p=LN
zzHK=wcphVLlFdsk()iC>&`1gv%*@A&`#=6W>XB{m^z>FtmoA*WL#KMxT7X~iA1sHB
z`SP+<`U$rn$K2$O`TR{tB7(Gihz3LN7f+weJKu(P2)=#QIb0lezPht0RXYFbt2@<A
z`IY(l>bq~h3BUVR==i$GJ*KH|$uDYmcMM~Y>ZLj)l0GE*yG~!Vz^yY==)BXbytnTJ
zQ?yuhr^n(IT{s_XY|>U&mi*6LI@?worL~s}{|ki<ziugX^j}AZ%!Ih5=&@#swv?=s
z`rQ^(R3mJ?2Iategs^?#l%i34MYqlDc#)^yc}O|;*1lRQLXdsvX}0v=Wa`w0rPTmb
zE=hem+rKjy-Mf}yw67oMr_J-xt$;f5HLsbp%rt$)`@+8dtfipKt;23icGVy)hSE;c
zSl2XwJ$^VHVt`$9GMORXA86-OcW;$W+`GHIEvW+QL}q%7;k1b$*&MhT3mdB2q#@hh
zvB$ph-a|z6P;HsGN<=i@UIH#g^HXJfb2_cf=MNkn!h^o*vAlIFxwoInO?~x_%Tq0$
zEvfXq>YKVcI36D4TpueNZF<L>8@@64S)Mz8GgxH1V1l_pa6X0~BHQ{^ffn(KUO`~S
z{fOw7i?eMTOJUpV;iVZ_)}(#{0<5F!>lR#&r_3P5nqO2$R5*3T)v<7?3(*9=sYbNz
zZ)7-U>bz$uWdH3pIh>Ih?e804%`)6tiibj6T}VgMt}5?+_;@AShvpU~e<BQbsm^j&
zO35PU;^4sOhFCfKjhwyHg4^uhjf`@QISQ4kO?g@#H*momJ%@@+!`WLySz4Z&yn~$m
zJG;D8adDAn?^VJNf0b$j1#o`rsmIDY^6=4fIxH<NDs#AVgD4%!B6RBIU_IY57-Y2}
zJIwBw^p+X)`mfFR6;XylIYNaa1HQv2h$Y-GEYQwNGVQGYq+sgti7B76GKp7hloGs!
zK9tAOymbJ#tJT%H9rZzI(rtz6;U_d|mdx>J&=)BG%SP>z;&`k2IB3T|^y@Wd9V$kE
zpi8BeA$u-6{?PfZbG*-+7Ue|N=waFDUOGh|R?(%p%!=LSc@{14G^thge{Rb}m@!5D
z0Mz~X14KY=q{f+dKIb0?jqj_o;G7^a{n80I8{&7wy2F-K78x0hz!Lhrgeb;5JN^J;
zt6xiuhcve$S^8){oI}#@<lBWbKuM;ipm(bKrjG)J*e4YCbbi?7Kd0PZ{v1;-uXpT!
z-R-c%N9qco2Aw1(#HL@AA7v-!)cfgPhGYK2VBKl(#t6~c4$WO|od_D58*{XOIKm8Q
z<}256%Dea&!#U-gb9cIriQIWC*>l!P+cNhwXMic8+?WA$>AtVHF!#2-d({JMSeF4;
zJgBFTaSm=Rw_@zY3g9X>)w_q~i=QI>+=bHvCJG)31bau4_HNrY5VdV;StOqOZLTyE
z+!jl19eG&yUzK2%vWonUrE@%CE2_SY<FJ((Zqdm)ifekr3eeJgnx1XavfU2KGh4C)
z-0Y^`IF^oHS8a!4?8)TH>K2yjwkUs<r_>2_`}i);NO{OgbRCI0Eg7>pHaSlD;S>t~
zO9ylDw^CLcDeoOKHfa*=gzpGP>3m_Q$$qIfn>6)5It%Oi9G2BK`3HkKF!g)QO0Vbo
zS<G%JiZf-k6;0iT9%?6YM*J8zVTn->HZF$%I)I1No4Oy);cVBAzc*w(-i{VsqZ_s|
zVWH=z#gOOjU1hOztqsjR(MH}Zm}7ku7S3g?Xm;9Rsic9@ZNPnQGl~1}=dtK=wizw-
z@6YcNc5*lFujcYFR|*s_(-&=WA|DZrDVj(8U?Q^^;?uX?sQ;djWOjSsM9-+Ar}Knn
zBwxY=gE`$#+33gWcm3!VL{DeoX?lcP2_(&Ndc?Dg@AH0maByF`v6^>xb7rD0=lpgK
z?Nt85n$$f)_E;jxZ}N%&3&KMF<Dd7V`R?E#wIs1;yK@@P;UPs69?RpRx>obud_afm
zDeH$32;z~t13Wl5JX}$JkT4&X)aLx`87<C=YGduxn@X5?pLQbGC!O6&XSW~kY#;J~
zm1wDUKh-_aF}`gj2pOlYQYr2T^&pZSL{<;D>nmzC!pm+nT)k_%t9$bj_Ttyqt1k=s
z7!c(9ruc3?xVdS$uq=f}-g!W8HW(q~c!EJtL<7;SFJA(MTJ?~SODQjir8!0=_4>4A
zz*1I^0G|@Rcc%J^=;3~T-nW}-+SRKj;_S#H9IeuV_1-b0Jt>4bE9OgsOR_kk$ASn}
zE`@M{;c?rIRN@uif|8F*MyX_ajz8qZ_ITUIbpks|5avaT%&=B1<w<FdL|)dd+||+`
z3Pa(QecEsYs4C^sm`Byk=Ik|AF8NqSM1QhgV?5#=)?9Z$2m0(`996S+X&;dY-pyr)
zg1b#?u{X}!<#*6du!uIU!O&f|Rihe+M88F-=jdp&{esr|uI~}W_XyfshWW*9ZT(YY
zUbum8*}*7}{o8MLtpR-Pj*5+JQo!ZsJUZpqmbf1c4B*{rdCUpidNWPpH4yHKZMD7c
zMGPpOl&fLmI=p#HkWsM<G)Iz8gg6A06;!F78W7i!VcE1plO0?fEej&hp>$e*^RZl1
zco$qgX-y$$=41)cJVnuJ*T!6xHKCKN7kOLyZIYQVW-3ba*6OEaZ*KT~M!<?6xLSFw
zu`3TeF*kx)y4TnLLlI#FzbLR`0^9C5Q{B5>uW#6R2otHQS(LXSrnO+2FMgx{d5t7t
z@0v8j#l7j9uhvmJ!el#CRe+B7weC}0D_&W5sszJ`^3-?mi8|p3>(b`?ur{gqcHCxN
zB7JCkLZG@Dj?g-I?`+em%C@n+)CaA?Ti6_dr>`yZPc4~6X8-A>Fv5MzkgPp27@7ZV
zb|xq7wc+u&sxB6}0>Q>R92fhnX;=rDG7W|G$^bEJ6I&9r6=2oOV6n8$w)Z^bQg8P1
z)P%wrtL5c~+v8mFva#ZRjkVpy;3WTcdy*f{{hroA$!mucc(y%BK3akIsS1|+L#ka(
zh>1ki=kK<s^m}se9^)q`rozIl@S?rK+SH?}?&R>Wpw6||17V@r#Y7#<tv&sw|ACz?
z7I+|(k9JhN<8OZJ3a@Sw<@UBH6aLOt;f1{KV&hA5D7Ty#*6oMQE?Q+<dD@eZoBjNy
z<TnZnYgQhr^%s`PLCv(DAFH=7=a+^GrW3uan5w6P<E5c>q#uMW^zjzM8n4A@ZqP}r
zse+I>%mqKcUd|tiu3p@OWg%_+cpmG@N@g5r`tJHVW=Gn>r=yyAyRgw9)$mJI1DJWG
z(Ol|h+Eax*i&Mx$s;Jb$jqX5&vu@NpUfdIbCilC?{rrJ&HLI&@3d#WZi?!vb`=4w)
z>}w`D;dJedii)Gytld--9P9Ms__SgK^^V!>Zqut~zFxve8PF{E>Y!g+*U_|fIw#w2
z^OG&VJ8%d)P?7D{#z$36JLMcAC>@o+*BQPu(tCYfuuEM6VHOjSAB3Ud-9J36O}zn=
zYGT$xIZw7?Yh~!Bt!1$inq8)Ji5iu-o$O@_B|g`$1vOh}X+mCe<vOZ2$ZsmksE_xK
z4?>en>zAx0yk$?1TjRdr#He->VF#^3rrm5RZq5%m=&?r3A!7m*=ZsYpqdwyHyICVv
z)tWtZ6q#zm$C)l$m#RkXOGfSC4&|&o*ZEp*>tkl=)eR=fW`fv61VMn9cHgGnee1cH
zm~AU_WjfAEQxa_UnRheP!=}!LE#F^5-H!ut&$j-px{z93um}!@F@?OMTg+3q$>7Dg
zTS{EXai#dMw86Xvd1gl$HVTdAJ^w7`=IxIDGk(MG_UmDQqf(g{mM|{_t->;e`u56i
z*qpKRb*CR!yX%xD<v0fMb$`yP(RVYNh0|xpG~Lho2~n`zMM%a@^X~orQ$CB`>{K1|
z!|SlPmQfr(o!{4w;;iRX_$iV7M1!sSygHOl=VfjB7=gCi(dLV=B2UlW(-)I>_x0DV
zXDOwWET_VUjC#$}6V0DCt9vTdtz`}GQ;6z0DS_lr$N8e5j@$^x=(f^SdnL-u`n%q7
z!tq3XvAff=HFq-PKf9iJi{UATJ7?zCQ*El(UGz=;G%>UrPIWIrT4I_jqtZ)3S3U5(
z15=GRfNEdIa6u)Kmosp@8Q`DO){mLss*?Ejq(cy&ddCB1FWp9(@&lf9;W5LV1?KJ9
z^kgt!mWfc4pC;7Vk`-t2Zp@pW`g3=l^8w?>+<Ntfi*)Yeo&KnK211}`H|HnoZ^M(d
zco`_&F|YNQd(=L4n7|OvZ|}SYeOy4UR4cpDp@vY6WAzo;>+!?ZnDK0Wc(^{vz75$o
zq}^nu>wvLqr30qA>+fh&NC)uA7h=VYU9*v(exh4n&$KEKxUBE_QsXI|#p4cpsovAQ
zF8k|m=_J0dt6T$upnDu!F?g$3+{e9}r^brbT<qv!y~UVqW7$`TzbAmuHx}M?H<n2$
zfN+RTJKia<VK`w?)Rh8?uFUVr4D>t>&DTlHesKEMPO13)Ma4+5jF`V0*zZ~z+mD@g
zDM|q8Jpo3xbnFZ|{S_NFQ`axK|8M4b|AOB&WdK$wiFFy=?O4_0+2LHMoi}tU9FGmx
z*GFFe*ZGAR8;^Sjebg8V5OlT(j@)NYamKM9o%f5g`{xu(TLLU;+6gja3BSU`e9(s0
z1XaYk3A|b6ccb3Pd)f(!(TaOd@G@pIlQkPL$blo6)zgey?#;9L6)h?AOP|i~zUSr+
z4i@+BG5>ibv;CA-pXyp15+tUK+~GylCu*<I?Y-}=`j<SjfUzO^PZKYk-TS<-D;nGN
z_5VlRpQyKOC2OPbtw`988ZaS=l7}ReVLpzB*y$)vY$r-WF+LCpNr)+c1|Z7=`Ca>|
zw`z?bC_BCP{?GS2-6F8C=Al;2^^X6B_(|TYKEX^G@a`S$D0QZ0@jHSZbZDq2@60k%
z=Xz#^>2P>b>6zJ_YGiPi6vY=y!&3$CFr|I8q&<KgK2iLElJE#!c49a6b0#Mo`G`YK
ztnu=d5yac1X~N!4W~O@FHJFwX3})I^K*qEtk*G+f$t7^AOGn^n>^<)96N>um5n7_d
z0ngHrBDKFwTq9}boI5}!W!W&pHL)8ilF(>=h7%2~T&jYZi2$&|sW&!7<-v^iZsGFE
zVhb-)O*{xXu7|c15cp)rwJ_9XG(>xuKw|m!Hq%cC_!YZ=k}e@N1i^skiHu-W^Sw$m
z%ryg17CWiF)5LP8@GW-=Wek++Yc`MfqIi?mPjlWG3Z~Y;O7Br@jJVWd5XFO>Efx$6
z=_+T>l$$5Cfnd<?n-8sYA}*J6C(Nw5ZfZ+$dmMij;Lfwy)gnpGwZDKM;^go{q*T*b
z8~QwE9;~n7wN9mc?;6YbYs_L;f$oUcDET24wU7~ANMofUVg{qnZsHzd)>yij=NL;y
zFLHpA=knYbz*i%oDc@vJ&!L+H3O;O8wPIXFU(T}T6&%zF3!D<z>L9V!2d1Ht=2g0h
zBw=q;f_kDfM`gzCHlhv#LcCt_720yGVf2)W1KhSmzeZv)==g2X)S68aJe9y5E9AoG
zf$|Ka{cjk^S1#k<lXXm}(YS-b>9<4>Oq?kdx@L>#$B*<9@_F;lbo_I&``5j2lx}|<
zkN!H|J?`Hhuv3ZVxH>M5PscZ-k^g?YJG>tb2lpuN-u(rvdo5e%@0M5};f;sNu~*g(
zRH)_3+J6q5=fFKl0cnn<cstAc-U@V~RSVDN`qI{i43Jq}&5=66+P92;@AfB~K$zqx
z?9=uL21Q9{3pyE4SQZLigQPvr@@6O}uC2((`1OzowgHh;eimw6yGrXElfN&-VVdJ<
zEd0buTOB$)h?n8`P^<Wj!<DQW&Khm?ma-Z4xtcte4a{Di2<vF>mCOR7N*x`=3O>9<
zCC!lgk<yEkaI8)fpiSMXWO5+%LoJrPE${CQJuIV$;MPcK`E=>U`0f0yy#DdEzX`+S
zxab!6Tw9P$zw<6Z(B`Jf*`bNEwe`qcwwTj_>4vs4S_<5H7XK;c^vCth@ZRY7>iB5f
zyC04Ix<9_T_%Fwz{(v3fv_jtc9)1|n_g2<ePe1GGq{2<gB)BJ(On*%1&V6~d&QZp0
z5cylfkq})hj2#dDG*;7##b(LzIJCYslzW;TaY8v{&r6Y7>S(aydap6x7+ce}*G&T7
zViE_Dx_mUmSsgU7>nW06=&GzUm`ZTTxY0T&d_Y%~u?G)$U1McxT#E8W+s|ARS*NN^
zBu*sZ8*Hc^SRAj0qEwwY#r0OGag!=}(6-YlVXn=3aj1?k&?<ILZ?Y#rD)jYY0m9G}
z$ov9w0tdJ{hW57Gfn$~rL-osBF+2i@H2%RtsfW-92MNMvi=QP&;RD&HPh^)0>QpbF
z2Sl&G7EL}|JeUz3u^T^4KC#XV<zTsl$iHiLdJCx*<Pr$j<~hFo)n1j(y}Z}Dm#tjH
z1B4LwuL^{Z^nl{R^3mL*z6QRDDRloJyH^}!D=<zxjY7-Yg>lPxGArxM^~&kHt5Z-|
z!(>IDcK~F;G581@&><w8W&v7g3eGYt%TWBFMH+ArPa`(n1D`7$rXqq@`fGbF+GWiR
z#xC9H6dI|SCtqj*&D^q#J)oUOgPf(Qh@RSY{SUi*%c*M}GZL%a9vOde44gGw0ni#K
zfWq)gJ$Po!vglO}DhXQ<7AqPM54QJ~aq9Xv_1sEbql@i%tEIzD_&smEh;MAF^1HT|
zTenjB9%>J|EzhKb*1O)YU<WOYo3l?H(r>Nmy6WLe+c~&!kt4xtDSD@>!)wT!9T81r
za`VYwrwrOI#{T_^wq#oi-;vqX){B+`C)VX{>maJSAGExbxP9rU{<`dITKN2!-FA4;
zsObx)s;yOtqP4tquFLOX=q@sxz($TX1-m*nu(-3lt9*gX8d!H^R^B0Xgv&?9a3&2`
z5~JZt(ja85g(kb0&xmjhbSR~X){kO)7dcAs9Phfcfe^eU*=Kiv+1TPhP6!LfZ*yZY
z$$%HYQ=+{iQeV*igz>BZppy9;hKeXT{F(#C!2k=Nveuyo5vnMDVtEZvB}VK5XjjB7
zKvJ>38sDtHCA;u*=TK-p*UjAx7g$;j*&o)9#!3C9<!^^QWdK7!yuT2HKMy&+M^#?r
zHDL#pb{)GjEsKnCuQZ>rLqDCjInN54k*9N@{rd}Y0gERsiH;(x>r|}dqOl(BJfw;c
zVY2p2cCw@k{I7zvPllDKpkJn<e*DH9GjEg7;c7+&e2YlDNZ>ry;qNk5rcp-l=djGT
z;gz|C7E}<CWjpXr3j&L(Juu8Olu-Aw;lmyDdXsxbn=@iH+k7-JA`1jIECl03_{wtr
zym*q%>WsN?x*QBL_M!tCWp+_kAK=ak2}C$;?tvK`=1Boz9Y;!?C!f+z2i>_6k2YT2
zG{{un=~gXp0|eG5HM>RJa-jj`6gt|n*CCUG%K`Xx&b8{wpk(zsMI$>1&RhCO*K%00
zXw3SGBJ@nUR_pTtGbDIq=@^OXmvuC?PT%JsgcE!n)T9w#q=fVwMB48r4TvVPxCc%3
z$@ccrG~UK04TfUtL+C<aPzKxSuc)_qlg~;gs(Pir*O9YIc>B?k!VtpC-La~h`7)lB
zE@siLi0D1oRY-lhc@*iaZnI+5uk0vqJg3X{j;eV3jj~vK;!^4(Lv4>kg!$O+sTdBn
z?3$wPj=s)!bfaxw_)fXb{+3Gv4CbyY??-T0S!Erpkz_Oqi1yD<KLogJ%QILM2C)N_
z!axpM5UokwAIGDBij^}22oI(lrPj*|0I|_si~p$~>x!m<)XIL_;{ZVTKdp2xR`sA#
z=yV4#*=A&-N<P&H%+s+51>vc)tMo(NwSVPuu<Ih1#L7A`;O|sM=SxJ%XaT13xz`7w
zw@iH&!0Ux{{rDKr)OaBo%+(K9$mQtvn8B(%9pocW_G6FGlSV7t&Ygi64)_Li?n?8>
zw1aFNrm(P`)CCISnio`Gq&u<}bS|h1{c$hAJ`cvySjDchZIj|tD9*(FR210;moaA0
zJCs%~-?unIYPIp(+U}BjA|C&phy$?~P+J&CbEZDS>|QQ%88&j2S%S)k1RXJ*b3z`0
zoKTj$ug*nn84e{*w|QDFMcMdZ&ffS}!xWU=kzjCZl)Q!F^KeeM$Z)PT7t%1N@!o(C
zNFM(HhBgTEUN62rlSysV3Swa*lm#(;gYQX&xYP-lIWem~==J5?G8u%K&JyaAyQ6_^
z!4yGop%Qym?`48glZ@4_pO)nt(A?c$sN*wH)}tNK+q<9e9Zr4wqoZ$)+Gh+!Rj&?+
zdM1DzIt_sFgc?!*P}QES`5ppSa=$RXDt!*S%bFa3`6UOs&o8p_5^~|lxTNbm)+JE2
z{&;k2%=B;?_6a3}vcs?%+=xqWjbg;JZs)`S9o*oL`zs$gP{bd6y4*9R9<L#FhUQYq
zpxFXbntT-nZQAk>oT4-VUyo49a&%{WPzeMg<dFImPvFTB9drRwkxbwQXLM^jL(FRJ
z`9r7Na#Q-812=iBrwuQ(tGU_|3Ai@l3KVc>++kgwuR<gssET7a=)Q~nLNpwGcLQ)$
zW^!}dvut@P+E(;RxXRUeiw2b|c_sEqkq|gfbnFkhwc5@_;gHeUMUksn(qZRAS4Ig!
zQD82f+D+cy8?Ll5DB|ty26(M=<e37bqXmZay#&M`2rYd<0*%(W<6Irdc(aLOa|dIF
zclZ*9dJ1iDqEF}wqQ63D83A`LccyYFP(XR(7tS4{8B@Dqi0015RuYBp!Kp>Wjm0w}
zu&aU|UZllYws?V=%Lr>&h`WUatE2w<;#tI}|HkgYI-t~&YnIHpFK6s^PCf2ir4`}x
zl=Qu^kAQ7NJBtpCXIk1YEwLFB5j=IBo@KD^23%q97e~UpeynqP>+V4u&t;mTj<u`#
ze|x*f-kv{D-UrGVWXmJnqvwapjO)iTox+{Y4*+qUdBu0#50UPz3dtoeT|4#Pvetw&
z$bI3-0^37|q}ia<7UwmQXoxDr!%><y1NH13x=_q=hTGe!X3hzb2Uh^aKJx-MIhzn3
z&}w@5@Ansre|rbxK|DGdYqlik<3S}dHUyiwn8P_JPQU}n@Dj&>u6)dwA`#s$hy%0|
z^JH4SoK)p(HuM%-wMduUgAQ+kYu0Wxqh2^UKADY=s?^7gJ%fO*I_a~8f&yDJrG{3r
zpw%KbAbXiLP(yx{V@}IRsba_FsD@~fD?QLwyw;NnQ;zf*Hz6&|gdO=q4QMhX+)_!r
zE66v{HjSS;5wAu|^=0JDOfPsB6-u&D-<u!Qi1-mU=ujC?=-yR4A5N)b{mIdw&WFul
zHq`xy26M#61XrVkf>+#R1c0_L>h0aQpvP@dO^95cR+;%s_MN8ubv`$-Gfck9S4!6!
zMokt6RKMfhqoDhj4hSR0S=U+fW$KH?x2^Zho+EL05bKQL2%@WrlSu1hvX^E%m-)2U
zTgpSS7pJZkk@#cj;?9rU3R}J*5E&|C?xAD+Hf$A1nt>7wh*Jk^dmOv@Vx_0rfV+E|
zpIuhWe-PO`g67p(v%;1(w$&`4#SoNKYL!pdMAfJQ_i&sPt=LNHQyKXIajJGKL1z=l
z?q^2~UfYA#;6dJb391i7$xbG8cdTQy+xiKg?_&B=qRCSXjZg=D9EgmkmRHyxTlp%X
zn7E?aoGVWX*j{q?u$N3~nb!swA#DUd78-|Q2XC8jJL*irLylk%H5@hLLE|w)BUkZN
za0un0xg3EpI$nnEWB}|tA-*Ik=ykhKVT!8G)>qI)=V|>YZPG8_`*!pM{oDP4hZTm*
zlZ-X*(u_8)ewt@Wd*YL*PTV|RE{;d~d5lN|Gs-f0u>GeOJm$nVQL-zNuy@*)5*X``
z22&c-cF?m?qX{Puwr^|&ZA<Hwy~T0L+M!p4Tr4`ERnSzId}DHqRPcraxs1aA@LrtM
zuqPfUPeDm381}LOB7G~BlOJ9_|4Ec0_yk2uxZ)Blql!K)>&)59V)alYzFV(idE|=O
zSJqQoJaf2dd<~&YIdNZ?@zgKnokuDu2Ud4O9id0<GKjUHFfQc`?e%r_PFCuDy|&_s
zUoj&wj(WjLGcC`nB58*2287W~_2SmvZW1jUM|i}trJDBx2qqQ}IKueNiTV@=YAUg7
z>Oi~0FN__L9PN}z3A99e6fc5zTTe@}ZIziLtOkW=dx!3TlT7TUIO5&GM0Q2HVb|YX
zr5-xM`3l5j!q`Q^)mGC1SmBx~TZycy9TJG*y#-ED8$Q6Nw4NSTIdZ@7Xb`uq&@Sq}
zpi2_Jl~!JS62_}EqI|(5bnnns6xNQ`)E={QprrU}o4vivF0<~77&BrOx)QecI(-kX
zL|h1=2i11LKp;>FH_OFhC6Fd(bB=|p{X@v$ptSNJR+Fcro2_<>AXcJ!pqywP?Qkw>
z9o#~rdRSPSR?797vw@TphlU3*V%L25L@-{rOu4<yHg_S~N|ajcWg(y4vQezAp`1l&
zu@P9hOK`NKMkB{OVhaR>1mSbb@*8GofH~y!v^#F1ntIL=99W<ui%<v<G*ex~pF}>i
zo^`*%5pto@s4+`jjAf^;fT^y9lFsgH33!*f5xfM%S%Mjk3(R+W>)$JedVMvh%e41L
zgQpF;cfG$o%uze=w}Ltmv07#L&v(`q*cGev*!6RcP{$7a%t`F7W-`mt>X&P4QhP^s
ze#{YuS9ypozDESO&#98jB2GPBu!+l^+uknWM$DzH^B5+-ONj@3%?iqjuuX_Moa{mf
z_D%{`j#64WZ{vz{Zr+->7<#=}z430GSYmGyx(vR?aG5TFRrR*VLm*$%o5wqg=y=+r
zmr?e3%pd4=5$*2O<z+R=;=?RyN5bMTT2Zoy!k~8vO>3qUzZ%~((XpmkG74Umb9#M|
zpPfTS_FdUD<pn+bn4LDkI6lpi6?Q@Vv6BXLl=)hYQ)6)tLNr@>F)!<EDmschdoRjT
z`8)~#gKD8U;8YTxXX1ax%crLFd6slhMnM5tBkuPskr1bK^I^vEI5=S6A`llKUaA-s
z!bgZMeFV?SP{dI=g2<tB9~et$Cs0$e-v=Li)g9tSxih&$wCqkn{Y2d{teQ|K*g$iR
z_`r@VL(U+PIf--`25>4zH(EUNY$00NXpoeNHvfEUt5-)b(-gg9)0`L>&$hN^)C@8T
zwp8yX`_%k=u|PUC(yJGXJvkspGG*M^S#KW2;of#0-K4(=w-rXaly!&Dq<e5l7N!Y!
zFuO^9FuO^0t`t_HapQgg;*z8{TP)Bb)Ig#0F`V^6{Py;uo5g5<Jm}#sl#mE7yM$`@
z91@f!t(s&;PY5gy-J^<G8y6Xb5N6Td*=RZJs=?oTWnw+lQ0o_&ONWae%AJ#P`oVMV
zU9_x=*z{d(oyOTZ@pW-@%$Ac|Jvf1kg353gk_xPJGlsWWOMe6Cs3=499ZPAL@v^xt
z;?)8w%IvdYT<P!p7>*ou53mXqTp=h(SUO`^EW}e8eTGr2Ukel`Xe0rfdbCc~^NclG
zq~do%%MGN-O{Ymoi4|7uv<&u}F!<R+u^O3(o+|M!%tp$7hboRL)vX6zpO;r1XYsAN
z=@@rC&!=4)04fhe&E?tItm_i&h((_b6~2#_L!|?c7WDJV<@;Q<Gdz-CT~fbFVZn_V
z8lEZ2Uc0whu)`aUMfia}`4&$tgD1*!gyJ_Ae_fQ*%UO0~alA`){hhu`7un<@jp|92
z&zs$RH8v|<Cvpb#NqSPHXM7kU@2EUz8{$p#ci1ycvhqbaY&vL18dLECcwl^{{LeZD
zK^)j<1noS^OMlblrvIaO{dzc~eF%L^{PHD4`=Rw_{9kHEVN{zNenLlty#M~*u6Yiq
zg`(u@A4;i&U5%}&S%(4wPqJ0L2{)l0P_sO8jiwH5?Dv8IVFPzwgVA10y#rs93I)_T
zc^t=+ayA(4n~(SC{j4f4=aS95IVGCPE6@Nqs!I9M%}Nd5YG=LIR4RLQzoX1+HU7b<
z4=<8IFm^!sRpua&h6Qs?7@F1SC*8@)LkPjA?yA~>9EKgS9ds42%=ek7;sDvii63RK
z-x?GayuWXQcY^9p#PQ-@c~B7SQ!p}voHIC^l_%*80?Z(W36TQbP5UE(iWk`q&vSx@
zQ^K+Epx2h4Q`to?SfMqY#{9sqQ?thi`cncun__D3@#a#oRCKW8<X`&fU$WXdLdsaS
z<{QAK#nyifkFR<MyLN?tT<7ja+qK6hNwXI6NZgo1n!Tx=y~BIcgF~@XVRtx(<47DX
z=22S|MFg*2q{}#Wyv5|>L2e~bZxjbHSG=Ya{ufSsxUvT9O_K0~!pU-Qp=FClt3J|e
zn&8odu3VaDeJ0}60S7hkqobYk=3@49l_?eMJnGfJlx7L&(1RIszQ767py9xdFZF_=
z(jZP;U3b?vC*AVG{Zzq5^x$B#%n(dF_djWs!crXM$>r!!dweL_eoU!}=7dMz-`<N@
z%}lu?GLt-qlZ_nO3v}xJ$<4t#=9?*C_eJkv{7y#-U6^r;>1f6+9_f`*UIc?6GM2-+
zK@(0GZTyLE($QZ#bTfil+X;6Nu-Mt0uQJ!wxk-NMB=6be?^<q?SnVaAwB(;gNW?p7
zvXOUiAqr+n65$K!r6yyWh#Q!21Mm+U=MLTj^CpqEiti5ix(4eA+$UYdKz#uJXhqCZ
zAbUyKb!PSIbV2z>uA(Y=nVEIlG~ri`Q4RBMnKpoXvo6|@kcRRUJUpoAbm<!|iMl?6
z_%P)kc3{QtNBl#_8#j9gF9V(v8>ZHky+cLQRrv0Q9vUeJje264{?H_MYe3p3pc3^w
zon%lZIOhlv)rttGupCEemdP$SEXeCuRepAsRmudb5d+RL3Uy2MJe%a{jLA9JtAKNN
zhSMh2@65o1C^J1vWt3*>%MM+jiNnQ(9%!su4MB?eU2NsW=u2SgW<9y-XBQXQG)K$~
zw-0f~hFGv?5m*(PD88WD{F?Ph8<~l)WU09EJgZEk<Bp*MA*#E2@RD-Q3A1{YvBijG
zzd3wgfF6G_kz1uDpXAO&l#jNV+Zq=u+ILxe3V-gZ9dY25X{$sy*ySz4G#GTvBb`D=
zAvazfn2o!}!0<F<B?i6mi`K@E!#epWgQ%efVc!xZ{uXG>03l*X|55dU9l@D5dor(&
zD|cikQmr7zE|n;(L;VQ^8GB*SL9iX=F<G4@I3A&5*9Va+oW-4}@9#M-vBTsPu4R5w
zcV{!2kChLYy)j+(;e>8IsYUr0+0hP0qWF;J{v>H1uR}gwbVG&J@WeZ0gOi;TS_kE_
z{V-lzc9vM_1iPR-j7ypjuH#gsdZhsoMU3?t$m+#<-3OH)+n#s98W$FFm0>Fw5HwZJ
zQ+B{aqH8g{q>G;soKQW&vcin+VR>1=W911><K-N|Za3kfp5Lr@ifNoON3N{{1n9G(
z7j#IOBdU=;V4m@-YnnyzOz(ERd;Nq&rUUGg;iWb_x%B(n>&1PlYM_vhnT5%6VlhZZ
z?DU_UTq}%)>l^1Fe?&ZVd%CnEzAxOg97W;3v2S&lhc(-e7dQ#a>$filHGn%*j^@(}
zs&ah169qlJi|CCIpPie>U{gbS7UBtERv^4J{-9KJZ$j(f3W;{bDQ%+Jj^6r&rU1vn
zx^lWK`~)If*}=0Nvw^9Du!rJ&`bYpBxp@=thA^H@n~qI=>A661%d|Gl_BL%v*$`V>
z`pNFg=m75SY^XfOT+?b=UKQq0=mcE~l#l_NN3L=seLS=uwWy5`qIGq82!)?I(ral%
zSBE`p3f`!+ix1jr9kpyplRc1DHe^R4n0c%rZMUxzt(C`e1;M-95-d;~x?iXHd!S*o
z$6e$g(9JCtU3bc;78h8&)n+UE)qMRVQkn_8G7ut=>>V`s+MQu%ClkU@tR6DGu)kTm
z&DqJl2#aWk5a#hn%>nJ0J>E@Dnqv=N8;VW$Q9+~H%@ohY^$MZ9>4>@mW0}nwZZB34
z4n!nj20B>%;Pk4lRXfzxix`f%>C&%EGo!+(?ixe}_0~I;IVfsZ<~weRn?ch#?$HWs
z)h?}BlE*ZE1mvg={8-g2LL0*s<TE$NSz)145fr}FP$G4)tC6yYXr>3K)heqA1x%Rz
zTdyL9^(ta#C26#DW!>nt+uHKqy|s*WORP*K6TDs#g%809UPBunR?ucgKmn{9Z!_3!
zI*KNU@RU#9xDMpA9q~keKiN|%q6pW`o@D09+_N}mTvqwZa;w#~Zdw=jtV=vMF-;@w
zpOfuw3EqpB_nKKj2ER>56;=>zpU8ki9se;!ME24{B8EqyI8aflFX5amHI;WE`J^H>
z&dqg3@Skde7JzoZo*U3PQNFmb3kGw$4*Alk!_1Xg)xGAkrF8s>njMETDvo{9TGei~
z&Z8ZM##XsB&f-s5K`=yXbhb4-S<RAtcR4hpRzt!8$O~}MV6d+R-Cf^20pIn-SH6t0
zaZAH=?f8^>z-NYZRppI-R*J2x3;|2gZr36sqpUj~W&>OkY9?7ZO+kdgC+L48M9z1Y
zCrUpy<}Ez<#OPy(8Y4PPc%(krX9`F)+SMW5BB($ddfRvn52608jtBeP-P~KoiqiPs
zX@#2TFD>i2Lm^Ychkw|JzC%qz2xLKTDPP<t86EKKvXGf|!JOX(4XHB)?f`(iO~i_*
zUdoPil%)u!9JRR=D-nabtSG~0T~-@tu*;Z36bIFAS&d1%$y?TQOeI;39gnx!z$Ibe
z+8Fmu{-CrcCsrJnY?6@I>T>y6u9^(&-)SpJYr!!bZ+}#GSLV*!@KrW=shgB*UGIaf
zty^*(@SCFptW)e2FwkjIk&h;1{<~yh*P_|fWbxjW;83Oj9=r?*s<}AwJ-^6aHtEGY
zkr~ymiv<xnka%B(iWOuJKRiLiD?k+59>)LJKz)u^XB<=2g&|4$HK>kcc$r^Z@-V?x
z^D%~1W9Zebaj<S5yvkr}x2ZmxRyZ_I3ojv9=c6V6q~T6p)Y_(3@E>WrYnJ{=C$8s=
zUE7;AY(0@)uk?0lyep-%=HJ-|Ts9|sFR&l836A^B+)(GRtDC+mFF85~QkrU}N=>sS
z&1ZPx#rT;>aV~U0=_(7goBggI{=fq(II6Gj^6W~rQptTd)vZ<!)$<$4N<TV9MItg!
z(ydueUHIKTa%1J`DP3^C+ec2F6UE$Q)w8Md!qhjqN5oN9{B9q)gg^mj7MfB?hvdbi
zU!CW41IS@C{7THf^=TzRw*vmjiy%IkT~_L~q?>2O8<1gj^M!&?h(;Og5Z=&~BBDp~
z2~HM3Vbv!N4@v<)rg?)I4<#uW1n5u@m+nr3r52i}R0U0;G~&U(tu5F(3(agO5>*~f
zN;M?)`(t>xhI+}yNgF9~G=(1;O-n{DT2r9~IR{~zg&zqvzsdq*Qx~7b4G;4DsE63^
zE0~MHyi7*~|IiGFl@rhY2G({nYjtybFB<xt$+Tt8x;s3c_}bS^6m_9PjcYx?E$Rhf
zD+ZSb)!5Bz<r(W1MM1Qd_erEpz1O%({8<pyTEvG`9jaK;f(V<d`MTF_&|&Jx5!@l)
zQqx#rL36vHYu4$1cpTe%2l>$HLCyx8tHWBisDo|;Ts1gn$tzy(rMSfw_;OKR))_8P
zf-3w>`RF|J<19<xWjdLFjfQ?IyLyuX>O~dNpSmDa*Ae!2RIIt0^eC{YQ|#8lmtuJ7
zGF%YjG?yi+iJ~2jTJ9@L4mc$sEvXDAga~lM$my0+#;Oc#4D^IL`e$C~JFQ2mdi0%D
z|K{{%To$Xm>~+~=>`S_x*4Zhtfy64#gA_A2#*@A~VQ|&hV!Mf`wzQn4VQHqQ7wiN*
z=hMJ`VwV@n<9TVANQ_`~i^Nq#m<oK;ERv%|4dW;vf>M|NSmu$zYSH*faXe(RcP2uy
zjRc)B{(=Q_FO>t$^%7*yIEALXah32MLz_i35*GJZA8~PSmKSe!^Y}G=Qp#d*T|69&
z{z}G+gr2ny*$(vZeuwe_CEnXS9zA^Y;MIfU(c*Y~Jibq9H(ZOnN4`z4_zVQ51#<H$
zTy<XAxDF44rb0e;U#%S<h5;)F1qi1=bhH(V|LmI;^Ue-M|8ia6#9puq=LEuhu{Hhe
z)WlYMyP~LVwK7ZqnLBVL<Pdnq3~Qj_)k>>wOV6@SzTd%0d@;s?TB09>$J5duBl0nO
z(77X5xbX2rxwnJf)`WIvTXoA*M4(<F4_I~wb*l?`;#mAa?&7-S%cEFZWkKrZ#3lRF
z9e1)WviO1GOvt|1ObnT5n9iylnV3MR164p2b_1=`$nQ{&_Oul(S<SDGg2fX@Z@x(g
z%F40P@ef6<s~=z5kWYun<@R1YWuNo$X>uM;Ssr(~SX{!Z<f^_3D0o+sb8G9h8s0Rr
z3Jk5|ZJb2Wm$&qGa0+V?NGGNaqnWzNYF6M<$4@f$jKm;Xl<6;d)xs+Ik#STw)%8`(
ziJ*nw8_)A7E6z9ySgz3{{J|i~m{JK!SXu$A<}2LQR`coS%miRLIJtLua6<cRo>Uw=
z{E$O>9f_7{IFH#?MFiJ6S^+GLukgWC2Y&}j)HOOm%&-$4-9%|srK8mNMQjgHdY8t3
zXNY&!r_M}NXHrz9m9XZn64s_Q|C;;yis+)bk7x0mqm%8_74<z3HDzo+w>E#1507?U
zXH?U#)r^_}&;5`~p<ew#DvUoBFfkh-5B$9><}Ikk$q=p25D;?iYPT8d=HC(RJi;E1
z48z+2NKcJ!krUo5X@+j>1%ho*<UdeBmP)0>&g$-q1t5Cq_+Y@IW@*77<4VHrm0r+c
z__F*c%J=Ux&f=`Hm)A2%C?ijA-dHue3WlBhV|MPnf~>THoVGQq<2w1MeI{(S6{Kkl
zZBG<?En9PC0WaZEw6+cF3Qi*BP@GQX6)WPjg9H+=%n>6nWjFL-*t0wENW?94_PAKg
zYMpL{dAp)#UPVl{@&z=}GpTyy%)b*U3Tlh-W=+>N3wG@iO~l-;Sh1irQAb6v+ZMF)
zCUQ-EGqaCGDXEB5w18qX$*eB|PSY2jbxxsEVD~(1;X#0Z178TvdWc#Ge&DsBP_AV$
zsx!w!Md-b2yllB@V9tSnI)hBRq<n`4$ZE!}*wK0;uUK4Xt8Ou%;3RSCAwyGE92`44
zT16iBlvL1>`|Wk4ecMjL)yiC4N1HZt4Y0EnD^$2rXBF8FKEso&MX2~g{Lg#&$jqvz
zpQ}tpiPrefI;4>`zp=fJv~Sx<T3};)cF^q5MUqv`cPwoIaPoY5b5}(Y^Ur(AZM(3y
zm9Ww@+Yqte`_rbAC-lG2pchSv8(;CoYvMYv-h;Y_gwqTSRo2O9$6*Rv7g5I1V?Y9X
zI^aH?)^SxhA&!(^K}4x*l)tEE2zsA~0VHEJ=K6+4a*Xvf4-wba7awvfNMssFWbJ;K
zAm3SqxIS^H3FD&4DCl=P0|E>Fv2j2`FE6r@u?Wbnvj`Z&3wT@KAKSb7AYnl?slhrJ
zYBYt?-dMkCjjWo}@dTA7ea8>VvQhg?13EeEe9o_dM+!so9VTlb#>iM%Ubo{dMdNSt
z1IKr@9P@kqj<JazF{`7g&M4~)rD9Co&%9U>GO$<WAdsg(12H72#~^mk*dP$tp;I65
zxeoYv2YLz+L?Ljdql^93a@U`E#-0+Jja`%FCh8v?l+$TV?<M&`3S2Qs*+nHY6Ghm_
z2LssFQCN*q+EvXM{t@RUK42jcIlM#a_}?$B|NURvmg(9WeYiP)ABjnNPg|t_#?H;Q
zcjFtrEx4AZd-Q{$8uRSRiNn$Clyh(_*$5Yk>*(sk@`C8mZ2D5HifNbqk*&zE4dR(7
zg|kYWZRJphQ5N9z7~4mpGpn)93Kt#9^*=3+lMOW(9^x|o#hVj?zM@CDpc%k4Sgy_Y
zSvOMro7N+UIF2{Bqftk;l)k|TEZa`-QfXxnrm(5lVo@L*7+j`urnDVWS4+KNrArq$
zVYG~Pv*Nd7oDE}+k2~}HeKz~9e9yC6ht%$`s)LB*{)_1>b5HA?t9;5%Ob9gR#Sy>c
zcuC*Oi%oY@b-5%(XnR$MPAlCqRqT|4FA{^=ro*%s1Oq2V`M*83*eB0@n&=|H6|<UI
z-sG%67_ISctyDO5MnXwl16b2)CUwuEPjh94JgIAr<QU9VB+5a0!oHoegIRXk47T_1
zZ~p#($2+*&r^gFwI4`!Faz4P9c{+u|#{tpNWi=&W(hs2Nx~6&^hx9-hKo8iAoQl5R
zuJezmM{3!olmjs3PiN)Tpk_Cbs^vj?*_665w+C)NzdGRleHFx~z6I^v$Ngr?JtUE=
zE60_-6-hvKh|*g*r%k`NkIRwcRG=?#R}q=vR`6z#1k`#!o8{JBm6elWac@$%m$saq
zog~n+PvBWMHQNy}F7K<|TM-82(!ujcIjeNoYmI|JND$@nk}g1Y9rk2arW}Q8DZpBD
zwctCv+xnU6@BVNwGY0#5C~$>y#;rY^<?|#^;b5?w*cQGOad#1z3A6haCb4-b{CW~r
zzwRh&y)S)?KT*z?yrW)ZvwTg623RguaAEJlku~{Jl~2cPU6ZW<A|VYPnk}*>FX5N6
zv!$==dYIcPUsaECT7Wu-3P2l45ohtn&Y1Dh35VrbSw6*r?=ou#%boDaHCrM3r+`Bp
z=LwB6o!8l*&S)1RU=WPn{i+-w;4HUu(l@Aud}>RcXL8`^Q$VPJpZKktX#78j*NQe!
zXc2^s|5`{)^%eL46SRcS)H9l(O0^vC^`oAXD&2oo&gGKn{3`BmOa{i)<<viwI$LKx
zW3CGaUJ>~916=AHWhZZPc+)v7KL+rn8W7IVvBJEPGBI(}c+N*yiBbpL!^+?SuQ?=A
z1Km&8t!c)RE+%-Ib+}-|;U|4Zu)WNh&K1cIndkQoR?itF5-HGYB5uI2!<UQ*D2K3R
z1M^on<5=)!CcJKYGRg>P-04NTaYf@YThjrn@A5i7$!9sylfijDon}Q4>#Im@j%A!v
zVY*NWC4M<iC)kgOV}D9}@`#sX5Zvzf1J|K!<Kat*_G4o`dY40n!-OBei~VSSyd4&h
z&__M??=GHjqCsO}_@wEu$4vshI+#Km?hW9{2Vn!?y0|Y<L7^Z&3}jmc0}VF=BUI>%
z|IqZ_Z9>A6{V0%&OuJQ?_l!%SqBqUpVrsL`fwIbBXlhfL>uu|QNL|8#Ur5)!xmrMV
zQS!qFJ;tTVMT4;JU0=6NWp}M^_G@Y$Ouj6iUN?3pcb`24Q47uz^5Z1SA$|zts0O`e
zb+0#OuaCF$?RtB%4c|jp`MB=Q?P}Mp9mI$<n8JkSuH0lH2RPr_3M{VV`GPV90tj<T
zCc+3IQCNKmu=Qnq#+I@uwIHU(zBWCe?Fd{f(BV+K`?|G7G!cF3y2HXq+)ePULx+H?
zOBnCpbg&hm^FdzB@-<GcWSAU!3s9Ps;a+5urZ({)mCvFtoG*Ba5;;CoDe!C{mZ)Bz
zSi?piQv!%p*SU+~iZhLRINx@;=g#4_VJZ-S-ce=csK8D>N6JAR7iWf_N<b)rW<Cv}
zRhkV$g4aG!nGKVRJs}mtU@sUHtZZ$(a}7SFMSj8hlg|ha@&j9+K;th31HXBJL{>@U
zK|i}l&$5@;IHJ}#yS%U^PG{Ns@2m1kKfgS$^5PA@S*QvFhbo^wpxa76Kjdosx5vfQ
zPk0H(S~}^4G@>4zy!2)=Vk12@jp`}HBcmGpFh5U4&9WxaT1*x4X?ev-AD?mHQ#_UB
z1rH;i&7RwOh-xXP&N~N$b6>0SO?H?=*C@Zp8=Gb`@nZ1x3mb2~tvmE<L{a9}rqApA
zruD9{HpdGbfdKY4O_zs5)Xxo355ppHC)U7kAPe^Orejlo=XK(Ekg?E#PAqLnI<<JT
zQl1Jf5!k|A&g`%n%waI+@E+;(X|E3Kkjq@B1&(;d(WvRBQ{L?=fVZIFT^k60Z<8I<
zsY^<Kf;rk^fk72Ljuf@(xNc${*F~#D2xPaSNWea=tt(zjgaC$x7*0atKF_Kg001*l
zw`L+?c~`1jHxx>Rs~*mgVl8N(7RS{U9GPgc;s@RH?5EdM;~aKj-IWZlU&_c^H+Q-E
z@Ni~VTHL^yJB1y@RTt?@xrl2xK0+fJ0u8wG;&+XvuNcw_JCL-3KB;`l>n8wu@T4+?
z2ID~D^carkC=eu@&|5)-#;cr3XKYCuD(W+%x9Mi7%+yz|lt?>y?7mI-(|1^N+O#$c
z<=}n|)qP$@gFi4sRTFoJ0!$_r0n{B`Rcouzfi$6O)T0=2e_HI8eNJnv7ruK^=w*B<
zo&ar~q#UXXt&As7;WVDZ70Zq=xc>z8aaKFWUf5Qx=nGTYXWS^RSI@k16B$+(Rc0F^
zVRYhr#Dy6an1j?#A0au6o~Ygw4&NsEcNSW##1iZ69mUtE!f>2%$c<{Nvpc49TYxIw
z=DqOAmKpSyUHjttS`g<!&<R%qR#;;}5NmE2Ju1psVYVGid~;N?9uA9$w(TZ#wLn;-
z06JYAp<N4vj1+$W8}KMrj1NkpFQ9TzQPop;h(rTWKA<x`D!2Ffx9^0ISh}==aTRKN
z2f&!5EG_e;?QNiVo#<?p-_9Zl7#OqyGsws-9&RGer}rwBUeGoss$pz*9aAQ_(o8@V
ztzP3qm2mxw7SKr0TNa|7PCw;J-t+1z%Zg;)#PhYbPV^D5v%{eT$VU-~&9Vz^l}5G9
z>D(wa(wbHj5pj>yvvuMnnyl<Ptxg(kVFOpDN|Jq*XiG6|fCK-gr986t)4X-h7WST{
zOYO2+6}QPK=L(MN?wakADF8gQmIQQBI%Q1v?e}F|U3Nq)i;K@S=1#!Q^iptP72Lg~
zDM|F4jhwk0YhiY~;LR-V$9vu1lzxWPs)gY+zoDMhZ9DtX&8BDH{QBx9n=28hn`Cta
z#Rgv2FVaPkJJKl|7RDH3-K3iD61i#_uaGUyCUw8XZhgroW3$n^r`6gRhg^)#qR);l
zg^pj2<WVL|rk#hW%yK=bZ$m#T;;pFTC$k~xP>$m}6@=&}yF&+%u3OzB2=t!k)YQI`
zf)E{@9p7{z+co_LFOEM)?Y=W^e>E_`#2WyA>v2$LwxIQ<TwxEd=;(JO^R4))J=WF$
zaP&CA)8XstptieX*zyT9SGrCkufD>Swfb%6&bFW%C9Ts<e*F1aw7c(^`vhDzKvSph
zla-Aan}q?R6WfYl+DQ{%HsXj@{Npa*w{`(<wTLZqNZ+hi^&5^$y(wM7pH6_)vNryM
z9pND&99{)4^mX$<lg&>m`0rek9!?t=yf{(MrmClGa`G-^w?XvU<P!wow44J3Qm_uY
z*Tl%1X{!O;mh@tcXl+Fw8{fM<-|vE54>FNMH^O98mwB?kjQ~*kn(h$+!#8_0PAJvz
z=n7hWM=TyzJBq$eDkU|=g=+h8Za81A#%cJR5Odsla6;0IB>)oLb`!$9+)u&HU>qs8
z($!AOtu*_XgL0}szJhJbjNORs!t-VoH9&>Wv6+<aisRqkjRCMDftJ15*A8{~NMHrL
z;Pcd}%9_JjM)|B+EI3L=;qn>h0^hO7y}7w4wmB}x-ga2*+C*k5O2_9iL3MjVbULPl
zZo|+bD-$OuD*{x^;dYQ_w!F7Ti2tw{fR<Rzv={d&)5HsKkg+Qc=;<Ja{lr8W5a$^g
zf-KDIfoms#(aaksjcCnJN=fuFgAcGk1dt3?Fq9=M0=0dyqMh@s9yBKLxm<z+A_(+k
z4$O4x=^GSgCS#c;xW-kUL-Fny7Fs^7!pvyUbKJExqg?X1<BfnfvHBnbFmrEKOL;4a
zOEItZEE%nz-DcQY-T`B<mFu)abVHKOzEQI>OJB&+?^zw1Vff_>8x!#s4JK}cVx6pT
z0f>v|d<{r1HhtvWvvlDMg>YIi1ca3X52J|SDxMt&`-pii451wE$RtAoGJ+1xCi@Nz
z*%^Hvn<!@3!#>BOWEO{zI?UyWOegXrRqDO)*=p)2;j2`739*+nN?n5!o1{{T)D3&V
zU%~>QWA!5+CV7Cxz$d!9V_n>UsdM&WU$R+&A7*7P*S>0wKSZ20krM1yP4w+;h+`-v
z&f@b1KBLY<-Bm^?;YY~6YByqYs9%`~=_-eQSAo)1DxP(Bbc9e9I$fpW*?>%yCU54t
zyU420z=1l}Km*+9!914OFz%26U+2rC9do~03#8{w{7GLFgHLo*3`QM$QBg1UoQr1<
zHDeDD242vs*h=*Paf;=58LR4B1SkivR$*M^h8n=yNc-M9a5d%nZ1LGr)Q2iO?K=0O
zqpjw@vhy-O$;47>M4ee}Fn`!9T3yCbwPLB|EZ)_OHoV1`;t}Z(1oKq$h~ra_$NZcr
zW$RfK;eUWt1u|aN(Jy4pz=LIcmrtf2MT!GqMKlslg=s}<UJ}SVQzx`j?7p~{tSv*g
z76K5&Hl^2#FT1Yo&O}>mdpovqvACCN)fS7?k2b}j$)Sm-LE4zGP3;Yn5df{P#h?Y`
zaUf_Y^G<0)(9E0;A)n5OOqNOHa`KE=vXH1b9%4QMtU>0K7nj+=DO{r*0w8_d+WN>$
z7t44kBY0a5>!c$jW5m>npL!Ts8;g^63`H>FceI*TGMbv_*gpR5JpVC{)ymJgZ(1>f
zji#KfW4W+4?npT6h<3vThjil%!nfk89_ph;j$y;;%;T=&u@u5`g^qx6Mk^w3+oBVI
zG$GP9lX++Sol`IcnJrnf<3|RJ9#&|SQ05%0m#1OQ@np;=>bR+S1|A6<;M#(IpV$IU
zPb}4AXE`yd4V`=1$!IHp;i9u<?w39H%OCES{W0%!+Dm)!VT6Hy9O|}dyTBdkDg5<v
zN;LTB#jDfsA^xNlFy;v2hKNk6M6!7r#iv_a&dPR7tl6EXi-lUw*mFUt;ShDvIR-Hf
zNTm8tM9Aq7CuKkwR(wfUCMx`h0pS>FF3Tx92n2ger)XYSpAP-l!rXR%y`fJ^XgHlk
z1OEeKfLh0!FbINqov@pOs&zzbbg^ox{FA<h2Sgog5}Dc{Og*I9nZ<iEjakcg1ZzEK
zrP*d_@dmn^%hOXLXLYfpKX4>#ssr{jhd$CTm`fqUF{0Y7#YrC7<nf?8i^2J|oUas!
zOkL)nyXJaPPaFmhHiYGD3g<0qHe&neUK&8PC?f~AFK3QPEoxBhw4%+aba*pZ`fTab
zlptie-Xj8I9m*`?In3K@L=aT+`M9qm>0q;g%4F<@XeceKCaNb>ju+Iob&|oP4bU?Q
z-pDg5k<cMoYO!D&!Zu`x{+5E*{;;y)JJ|KkX<p>@IRoQ{QBP=hn$45$$oC|TacxOt
zRGu~`xM-?)pE9@Vdz?mXO2|6|U8?%XuJxhiEp8Ad_u80=;%LE*x~EM@R)Pes@w*_+
zZ*oL1V-@7Z=Hp3c{1y=do%xG|dJ~tG_{+VfP00Q*BO8O8b^X)TjE4rfu!V&FGZvr~
z>(-$NaM?}mNyK!OKXGR_IX-d73D{Y(o&{7zA*0g{jjMPsiVim60tv`PR|rN~^$w;U
zyS-qhp$=_$?X3Ea|2ZJ(NKb7r<`8WDOppDkE(zWkLRp;Ls|`uZ)rw__1?KP`GPCmQ
z*w*6;YV5Q&GOdkFt1|AxY&L2(#rTS4p3ZEd7BiC#&!n*1`fxDJ)@vn|pw&b<>8$tS
zfF`}y^`LAVT9KD4#4;AtF&3n9MQW}Cd!E8P<3RnoSC6NsB)n=`x~>pnMYoND9B&QB
zKEfpgra@}<ocYu<>f$3fETUWr`;9sA*EuKg5LD7D32%mEHB!PD2=qQHtZJ0hvE=mU
zmyPp*YmyJDBKu8MxBLRzr&YkN$JuBoEd!K23F|1s+-(D1HfdyOwq)j=;jwUOj}$wO
z^JzLpSgj~j)-`g13$wq7aM_Cv3PY_ZhB)m*<_#-Gu|t1*a8>t1qb8c4o>uIF(BoMr
zd$*j=?#ND{Fnq!Q5-fCGkhv9JHnC)gojX6F4N+bV?)Lk%PIWWbrw7CQzuoVvdzX#@
zVaRI?HBlYMt1!3*G@3EhD)4da0DD&fz+5&^0C$+}U?d+DEB!A;XGrI&l)3JTcynDW
zxh{Qt@j?`QCQO~k`REEhQ0`~~9bqrf5#yd0Ng$>y>}OX3Wl7WyLNgoX?kJnaT?PZH
zgOQX?f+o<;qg0?fs*WFi)87-*l2%fG(8L!kEk(Qt#8rRF#`gyv-h}k)<@rZkcCENP
zwr+R+Nf2RMYHdXCm9F^`14|X-LWfFTE}D4svyY!>B}j<_H$7J#gvWz{s?`KS6_LpE
zAOVHbMCL+Cu3HAUEOd8ba{yRtg|Oj+W?;f1Ir<3#+UbGQyjj6gAl`@8Wvg7RzA~wd
zE?W~t!*UR2eoR9eNDq!j3aRAGRH8gIaTPlB4JuH40<hRQ%uK2~5lQFz14e%J@COpo
zq$R!7o_*cTNv+G4l?ddleyq2*x(L<AHR=YP5gt`!c9k~)io`m!o%^pXX=8&?!w>`l
z*k-MWqxK@HMkU7vTlFVZ@cw+TBC?f@sc|hf6=<zw0rynim<nNO8b_(CJ4Yfut3K}@
zU-fp+qHZ+eqETvvX59`r$tPvKn8dBUYpf=KiK4!A9P?l1jwuySRm(8tt)jl?kS%H(
z;CD*K%d5K(__okap%&svl|zrdRT<L-z97kpe9s(Xx-fGCsEi|JK)Vq*a@7y6@tuFH
zmDY+I40M*(9Ht_0l*5nQ8hrUj77epOr<uOrGe3~*eAOlW3QQH<f$L#v%eDPyV5(!3
zI+FUI<nQI;9k0OFl`j5guytb%q{OwOdw{*!us0e<>u2nN!7m4MqJ8*<APt#0$oyP`
ztn@@Q$-DJmTA&YBd#rTqIH?#KTQW908@y|@lQiv8jfVerHIZE@R@v#WKiJ-5EfJZW
z0oZAT7&jNQCuJ4Hyg>)DPf;+yvU!*TUo(y-iAE^a3@LNnBDmJ`o|h2UMToAEXDSx_
zu&txgQ8#oCnpWX2ZKXv*sZ~Ny-z=RzFJ>QLUYEZAkq-zW`DU}3G8I#AKPz<zDpFq2
zrvmBaOg&xJ*<m`Thf^qne5Z6^wb97qsf0xE$TZ+6W(Tvg9q+Pd%5z0Gk~;B_7qCO^
z&B$Plpb<XxI!-c39u>}6*B53EP29vE6lu<a4_2&d96wf_l}Z%BM3*FjXT@C(9jT3=
zcZP7~2oR#fiy*eP(Z+;C6(W{=92Zt0pNerz5%IDCb$@<4NRu=0f;dcIsu(<V2RsJf
z2_q2~Fv{@qe{vq3DzBZ&HY^_g|9WnPjfD9<=$haA+j|F5kr;O+_EY>HPq<<f0OaYf
zL0|%zx0hi>rNCT?FmkgOWx80jZ_>{$SYa2;Y1~_|!YmkvGT=q);EE6|nhYD`)>+k~
zcp~0rpyN}>60c#286SsvqB=)cS^uE2Jb?=Aqojbx5JW$!rDj5ua<8c}8sxS!rQ$Q%
z;2mr>AOjIc9HFzPBvy#=*&V!oZElFyuLB*o(_8E7mcLYd;S4e_kG1Sq%!rbRR}n&~
zzUELSeZ^D5mdvmv4@A_j&}rqgtMFnR$(i_oJuBzJ?D<9_{|Zj6jUqPpv`5_+gg_ow
zyJtQvON7BXh@rhV87BG4NiUQ0b-O_GBn~>xwU(?`Njda)s@}`gtB|%SZTc#K8n%++
z*xgzUs~*1i2c{C$8&M&tI=#**#vm4vW;|fo8lzs+q@!J}qN}x&yM4g2wvNKZ8V47%
zO2~BX117=P`iiR(imZ~IGN^`rC#sGfRM$0sw%R;I2FmrhZaf+mtEhPhC)}KYJ{vIk
zq5(`(ByNHEDs+%h4=dK)16z`1bzg=jst&oHAU0W(`3#0m><%zvgEB#S*3_yts*amp
zGaByWQ)!~uQ`<^tt$Zm@l9X8q1CC#o4)fmLz-VWRVMTtgKdcAziS<isR(pY7LdX=a
z2@VGQvgF|BTU(oj2{r}=+`>iQ^albYSE2g_Mz0bA9zJ8mo#YXnAUOtf@n{_MK*jiK
zj9b*nicMDIdAVv$4o=3KOdF86`lu<y1R?99rq0L`>lMuIL{%a0Em&?d++h(F!Y%3*
zWq<G9S|pS$&X-FMb5*Q4%L{B{l->y(uQC!O_(t0{#t^sK0kbm@_|lN6Wspgm%&;Gs
zQt(@3w?=Cr$%@-<wXugmSrCX(+{H+f`&Ug;?##-G=y1MAjAVqcb(EjuH-OW_T>{fg
zHxY@rDnyJ6cJd1O#;UL|ayrPq>>2_E+0{n5^XU2E&#1GCr0yqGdGV6VGwDW$ZukAg
zj4&DNs7}`<+#njNVz<`ceR!3g0T_h=*HvXzMbsEvo<lOZ$uc)i3xj6`O#^`r8p~h<
zTG>MZ(S_r#xf5D@o)2jbbyU?Nz~umL7SHOBiZ`O7r|{20hi*aK6ll!<<ga2^#GnHM
z)|7A7_|s~TG;v|m9RPQljA+~s;9vVtYbPp~>dFWEAd5db-;7&-&R|1N+R(KGpRm?x
za+ypLc3}1(26Lfk*;2djn?EXQ`n0zaRvHKO)Z)oIj3GmzB{_9kjiD1G3Lv1RC44TF
zmYkvkAzrZ2d#B*YUlaE3H11FZAp)P4)P!$Os^R|NR_sgz^}z&VrgR&cGjTEvI|J~3
z{A>VTVae%0Zc4^v0^&%t3JI#il4b2XbCit-9vF>Tn`bqo@Ts`Hgg(KEo_-Ze)x0Y?
zBy(zn3tZ9ao$Tn4fb{a5T?}(T)WnZUyjYyZdZFvysW_lZoqL6dn}b%$R4$Md{x#Br
z3EOzL!>c@?Eu!*GTt|XXu9vEgXb+TEFx*{gqKulJj&c==HCr3l^)gAdP$s{>N4Kku
ztc>A=GZQ2?{cMC>sb_3L0;V>=QiLF<GPfzH9;$Z^eT4bge%ac}GxpjMnmyo^G12RE
ze86^aGwa)126T$G&N?EdLF##8^ny$@WMir(jnb5}yc4GIo9tP7v7k<$hXrk=NbLmb
zZAf511`^_zH>M5XZO%D$XWcR&wDU@Yo>KylM2AybVRUWDt_V0%c(o7eP)&4SC+yAE
zM3~iqsMhGt7-;N35`w*-6dd&;-1V0T^z5|{Uz|ANO|;_vx(lj*R{Z8yj-HCqW@IB$
zJyntE*XeMBnsQA0H@Yh2SVEd;dj(`*bUdc}>m}1~!{cK2EdEYic=hGUMcybe!6Juy
zlLgH#fv?kima*L6;k5#WH`#}?tcYA;!eislMU!w{_?5!nd_gqbigZ7{(yZKQSi-MB
zG(eTTU_>|n>MdY+(G?;80U-1^AaY4ZgJ6muQ%0zcDocmwExJ&O7QC-})I_GSimQSf
zQmKs*s`Mi1<jjaW*sgWsV77GJ2hBk_(rP;6Br6aW@7EX4;Bbvd3wBG^3lgH_SHHMa
z6rmXykI<o7-Wse<GCLC6`TOl<R((*e`G20Jd0|xK^crNoeZG*FxE^CmXxh1S%vm18
z!#rECVCjrNOWmAXLDbS0BqWb6wr(eYYH~xxKv5ZGB;q;3P3owC3%31Hiz<SWGz+&S
zQ~0N)9kZc(A1jvCl7oY=>f&mJhQ#;mr!i%iXvKrbYeI1}&Bozv)xP#P0RYV3HP-vI
zd{smT0df-&h6(-F0A0N%m-FHKM--8Fi`7v?8i(#eoIhbKgGP3Nge=YsW&e^W`{N2Y
zG&3|i@)m3Iif3aDn_d%S`D(vU;OKXH`mddv1f(9(Q#cxKjicAe=&!Bu&E5EC20%ME
zhlI**95>^e;pi_^Ilf8o>Fgr@TLGx=AHP~Wef;1NaP?<MJKjCs-Hrc*_rLfF|9#pd
z!Oh)38(9W72`&7!Lmwq|9R>g9iYk4rnN{McF`AaB{6L#}_K9|G$$vdrCQk1;5H%Kv
zmvCy#9K4_hNLLcr2eYg+-bM(R-3(%}1k2d?0g_s+a$P_|(fY>dSmDMey3vNy;`##m
zd`}w3?_W5P@3nDcF`A4;uTa1Ty|ST>yDwFlc`{Mzw`+A%=Zi(YSX6Yo5A)$BA*u67
z@recqW|TH5kUOhSK9AxQe_(qFy>?AurfzQ7%hBPf*fNO_H(qKx^go&wR~<?wf2Z$X
zW=%uAt9MQbD^M1dK*FsJUlUpG905L{Q|#*@8$ga<(i9S6S&Sw4yA#^ZHT#5pN}Mf!
zZCE;)T*<GigfoHr;6Xp0r8S}o=BGKKD9}xAQZ^HH`#Sh^S<MEz5=LzTItl@yH$Rp{
zCJsdEe?pY(f)GXgf14=R3RnG3Z=2hMpE|zrarrN<@+n6(zOgHy=Sta|PfEfQB`gp}
zSglG}IdDW2c9`~|n5gLIptd<IAbhsdmSrSx_x<+O)zvml<;6C2S#G)M!3Ltj!tu$k
zubymw6U4BcfT1iKvpsDjG>GsP=D5BBi6bB>cnsqAc=uYmn8h209TERsvx7`015#9u
zzteZAiu1D6eW%t@=kD<d{T!d{N|W@8-(9JX-tbFbAwH|=qOP+ic{ZD>!hufw{qV;?
zjY22E7p(4<PW$2I^Pi*#@3N{<=6u}6U?4me;jnD*m@(1vidupJN()a$C1c<N%K}=)
z&X$%fqnGMET(d3Brn+3CM$ruE)bPRa&k6{R!5?6{x~Ux11qn7z5y8<v!84@9S5;cj
zsH+BvPgG*7*-m;tY-zAVw^6w~DB8Au@nw8y&-LY8Sz%AXJ&|!Q7Kg%Ukyo}avOX-P
z3U{K5GMvJXjc{~6dbaWLIlVqiXEQiRgLOkO$u=&C!l__+^_(iNo3y#C5#*T3`3peV
zclh%*2_z^pVF&S9@(FVH4=)>#GyRwj;0v`eo>F=%%#(Nyp*v$PM1QJ6Ezwjo$<K|L
zaOOlVr=w;iY5+Ju$G-)HKI0@@`^ob|(2VvGYa~fWSx45Thi5c`XEX}`i=i@vfjpSa
z{IPVopPmo%fzf+-A^s#*M(%7!Yg<O!q20N0M-p^lFQC(`;;}Ddn0QtBG&{^MB%bM7
zCM}vd+__Nsl1$fN*S33k*y4L0ooNfTY;>mfgKP892sZs3YBnSMjiE&2`R1Xsbb{m3
zp%1cHyfx?^yxVX_Fy}vneI0v#$t1%^<EG#&iVt@P1|%WOKKOC5P*+F<6-I-<J!@hI
z{P%+0UD%kZkg7WuS#w?zmfEPmZ-*vDvQSQQB`2YMVe}<hj}HZbwxOiMS(S9jlotg0
zqfd1=t_CJ`Ew?ETCRQ)<6MK~;zqZEH!$n-y4PEJV>r2fa6gT@t^vSOXP?M%rhPAbI
zxZ~W2HXfqIbaX~lBGDv|ykb@%%fRxcu!+0@co`oOibl&d*A)L5<02=tW!P4fVG`Pw
zdzlD`K3i-G3eoE^=Hamj0tSdsUbibLKfZ4}`UdH<3L3Qex1v!bD+Ka9(>CTFi~GDn
z!!<L*o*@;~6+A&g1{%ijXORZBK~=LTKc*kAsUN)n2=Jxqq2SC~P!+|_GC19`l8~ge
zU@Q~vCE*)mf;1%Bb`T7MsHc`rsR63|!ubP_p2#>BC|9O?j~a;q5?^*#7`#q`-uq?;
zQk`C}cc~9*C6D>3MhDqdf{P!r#njnO8+wMpv(s&zXZvN2=!x-4N#?x~a(P`PKb1uW
zPeqgSz~+YZ+b*+Rd&Q(|t#aeOM%^u`3btRd0<u>DVV@lZ9x%cfxUh!Me{@Hok|Y1i
zc)0dU4|D=|+f5$gD(gLMdcncQ+oZqK-wVKK8rW*YLl2E#uD7V8n<w`3=tM#s9_~n-
zqL+m9Yi~<#nh1HO@mYKbR<4mro+%j5mApkj4SFNAm?PO9TDKH5TWm;7ILIX%BqN1g
zRUC?74Qf+2fPg6|!^p(hjzvV0y?C~@b=ra*9B^qwy&8LPiKYW204BZ>;}Aqt3@6E2
z7fyO0fyy7iiGe8{30$AUCJ*k~h%&l}KSUN9^WEB<SLM~li-Qm0_Fnvg=v%&4`7QXV
z+%TA?OVNK|!Z(d;xkP~}K8P>kcZ8BP2XnZ$1$jGxjjU(uGQor?mUN!ffLgIPUD^Hq
z@HSy@C-ju;_i6aqy<7eMVsWc~8^Qqi$qg@7%$*&lP&P8BqC_|dk=cz0w9}{}<^xBy
z5wIB_2@*s-GpGuV+zKk$I%5(tw{)T^18bQuDB!rs45SeI))L`WbZ|oBeuMiDoq^wr
zD3^X=0c@D?LNHW`;>N>L<jsh6=z4taC{I$U8dDZSRnd~2Mx<!LXg=qgGWM-4+m#$b
zhkU#Y59y$!2%2=ly3tBluVZ++;6WsoP9CPAyd11mdFXam$SPIa*tLkFP1|16md|1i
zJVPk|%w0=$G4brr2o)C`o^e5^-Do~a+sLgqjj065$`LO{w!=Zrs$VQ8amZ4dBo?D|
zq%%^Cu%{*DROsOorrCtxauQ$^W=6nX1@hQw8O_QL&9NH{^If1S)nBt7JMRd1njh7?
z2XeTLA|T3-PI&J*Ys*ZakZwG$A_|}AzdIF7u!&3^{6^cA9WJLsWUIylww|B!u7>M-
zs2R-6CYoUWojuK&Q#7AqMi|J{5s^Wm78r<L1l}z`QoPfeX*f@-A?BY!I(#tzRFdTb
z*Jb0BP;wjt8b?!N0+!3AUylObL5z7HG)wIC3)<@^QG7BCTR1`ZE;;Ku@judiZ_og7
zDYAkDB=6`lUsE2}y)LG%e##!j`vTYq6oT~{@C^p+Y4{diK6HeDfr5XM+Fa;<4Cwm0
zV2UUsgy=$$sgq<gd_XU9MFEq0ki3mI36pwDpn+=8Q_5#FgIfwl44AGW7^@#S;7&+H
z{#%eVG*=%zPhZn`bQ!;m&&JW<qwDHximUBy{9tS=1%Ven2RW~RzjrB~4CPu>%QWD(
z$I?gKlGO6$0M(td^BkuUN}I7Zg?GO`RQI>JW4E_8KF=yKUD$ldnqQh6KVz~RETJ_P
zQyWLxW`jVLKtCbXUov>>rnq$(H3y9ikL>AVL6I;<$fTyjae2!^%8w0k9x7k>)nZY?
z1m4`Xk>WX7uUX8&%7oq7#2O+EDmf%YtPah9T~@ROU#vHx%#}SJRT!?4@s>h2=$(nw
z#hN)B$;gAytP<eht%)hhhB;96=C*a{^A&`^%s3C)9jmZ*&3Mi2#<YgRhTSua+C878
z=-y&38)mtTEtqflfwiIFRR?MATB5zHDxD*w=IZ=8TnxUsLvhXmbswv`3w}M=c}L2n
zFg&e$S|!m=_BQNCPWVin&9`>(V(sdh<7P!LXrk+~Ebkzb_``~+!1l)n5qh|qY#h2q
zCg`fDiz}WGX5v{<bO&bt62l2ofp0b;))Low<~TC85QfgGLu(a3EOyi?v5eD=7#m5q
zJJ?I-juF9U><4t^jjxjpMLTZcvRG-ui*U;82-QluA;RFKoPG#8;&)r~5)-;ri%hj9
zAfGPns8Jbt&g<-QTGra>QisEiRz?n@rQ(@(f9k4alh(`$WeAMdjd6BOxCL&;lR>>d
zuUsq>2!|6yr`-Ad@W-c3GgoA$!a_2fWafwe(j=ey>`7p6fBzOe++N1tH*G-|H9}kD
zBkh-}PBu5cC&E3rqB(t7Wi(Gsp3Z8hg@50~AGu&cRUn({tRb&DAgAb<O4W-6YTnE|
zZk|SSyny634j7X`(m&869C|iX%GVil`7)t6@kXbf<<BsWtLv+>nnF>CN(+wb;?_2C
z0&7|)LF3XYqb8z=4BBb)io4Q6TLg_eLxp@Z_<dU~RW{w`h{Ld6?@Uhue{F+^Zpq0i
zPa%z2+4`VUz1ZD4jK>!Vb-9?8>69NBi{d9H!ud&2-u%pDEu&_W^RzgVNZ_$zHZU?b
z(R_%3LdnFsWyNFGM4?f`JnY9RYc$A1ogPmdj13=tX+}C}45h)2Y$E02fEg1*&nQ+R
ze~G$Oo1LtbXZYzPFVgD6z$PyTpI9K~XIxU#opOvYl9)AmUd6SsKf8KP38tx`TPs{M
z`$M}9#h`Qco#g~7J#p9$;8U#Ou)udws5H#b16e&`tW1Qbl6hP^q3*<MlBR5G6(2-c
zEpUb35=L-4tl05coXR^EE}q2x*$F90lw98v+!>j$<Wa(3E4hs~JmKz|^lWm`nf`v;
ze(_|$s<qwYlW;gdtqWv~B$)-jUw~R=E&}Z!QcwYq3(B7^gVOmB)x^0sY-RO?35!>!
zRs5C!TXd$=g6lP{Sh(GSUzu7S7%J4=keg9?U?IUh$$K9TUD#a5Eet7WBnnxdl<0q;
zGdz^{xUMDx2Jw`WY7TI?HWb<CU*3)Ofrx`A3fWs*Rp<aDAxCfbZ}VL!ui!I2V4U2K
zi3((~V|N#Fij2>Ne>c$f`vIy-Npw66hsoCBMzlB{irIy;aY0(m2f;)Mh(+c<*Ye`k
zm>~adM2VLPJ<){k1+N{6fQL?JtcH_y?jkhAx&iZ`J35SJHHxRQ9nMNS=Lcg)PtzX_
z1Ns|ud1FvKf0pHB|6N&*ZBz+d0{jMY@l%B|4qi=9#YZb7>Hh191={MTz&gT92;m;Y
zONl2#s4{URL?f^HLF6^PDjKvViYLes3+V~dk{p$jH99Lkp$;!mw!7$Vc)Ucd%w&yU
zz$U#)>kYz+H?WT|V{uBOU&j7yB#MohCnZ!?@yBx)oEZDdWn6UmOf@hjA0CCJw%~>u
zcSytM`tmpv4qAJ{o7P-nBSYg10a8;ap~JW>4^t+`(j<3cH)v3_lz?<B-F^Cs9b0gB
zSG<QM4|Z~}Nbr$2R!5-_n-DaF)v?b(Qz1_h+`}Hce{WZQ+?OEU7a(h>35B08LmV>Z
z>2V$1BzuQ7)o?T(gx&ViN>dO39QGnzgCD}AE^NMZ$WdE5ev;PU@QXP7fw3G@%3`Y^
zump{nJb?R5_)>*dUzPkU3ME+-4M$C@1%xV$XoOYrqj<1w5M(W<#Wr!|j%e{Mm_FLM
z$f`5SJB}-tXp4-tB!Yo6bAfTHwGLBY2M-DpWP)S1Z^J!^T~Z1Ad>xLN?FSP5){pVd
z`q^qJ6uW8Abh)0DK!3r{&tJa65!Ak8`Vb|oFls6STP<FVD61(hZq#=2n?VR-jwn@+
z>|r^?eLBtG-8bIRLT4MYn}k#GfiHBnKG?K)KJP7ErKLSLhWTRQhz1zPZsKe#uD%s-
zqeTcS4}jAy@`I2af}x@DQR%TdjMF->&Qt^uea@&6A(`1y^Ep4R_nKp*D@P`fvWg8D
zAV>pDHRBWLMFl{n^9h!7ZsY2iNP<aFWwR7K)&QnWGu4Ms{K%@Rnavv4Hetpw@#4@6
zPdJCWz5KnnKI51Md9QYFM1);}2x=In@Sig?ogi{z2hLpKh!0gq13w&Zj&Qv6)k&%)
z&ayZ&Mlc&~8CZBuZ6{Hr-3fzNi5WP-ue@zf@VA%RENGqc;6c4pF8ts!3t%OA#`faF
zW`|#NyC>0L#?x~mp^+ROVcA|wrYqWB0raJAG2WqdnbE;DQ!BM&HjDOi+8Co*ahA~X
zMgW(oYj`oRr7zdTCnP+x^m&u6ja&Q)u6%h`doa;H%l?pF#hAN+%%uAAyL?$j11{8;
zEd8Z6laEbsci%ULW@~C+n(pWj;K-{CD3slfvU5xKltkBz)yi^JBs_B}RwjYKYN<Z|
z%$z*9=bWmK>asWxhq$mc#nnty1wXfPu`>j7SUb+OaAqAhNH7GI*eENW`{B(2JVo7c
zK42^H(O;Ew6B#{<D_Nv=CPWUixwNpwuJ?Auf6Ww23@NHwYIW9sTUuym<p`T%ytRzo
zsr*uF7oVx^tp?`kOJ>z8qrvoIahmx)cR$%+Y7lgqy&S|Q_?o1v-M<=`Q><3JJh%-G
zRy@y^D~{aUno46yjg9^s?Dag!2H&>#0sJ~R$JCASYm^IyaA7=v$;1IYn=o==K`+i2
z2UT1Qt3mFb?ud&e)l$6uuD~?c`R|DD5p{WdCbln!Z=KWWo&Bss-n#h<FVL?Jf!;*1
z4rmW6A8dbn!%(dpSancH3=gxSDpt4&KFnKvpyH);I0%+fCK4-S*Fi7S?2`fX0S7@z
zmm-qg3RpXW*SU1o*)o2U_VfW$c04g#<hsIL4WA1v>W6i-kS{uZ+d#+OwYFX>d&srM
z*SVepC1iaXdu_`|qG2;KV;$3Zo|;R*hhn2(!hn>seancB-i`<jy^=pR0nr);j!Yxc
z{zLgV_ug~{9hX=#_;0rHNSo7OhK6$RG3H5Rf-CYAPy+D0IHkR<M7-j$%G<hDc{H}7
z=eQ-eb|v7RY&^CKWE~s7?U36CcDz)XK1mK*0sHTDa&BERQ<l7tUB;KiN|9E9(^FG|
z@@t#<&jdP<4yu3!@PFG`%9O!Xwc-)UX+F4lGf?tABv94Rn!XwE5Y8ccxNZbR7+jQ>
zbq4!!=t@L3iO$eFxOS!M*9GYT{9J6X(~Aw|2V+CKz}O(NApe+c$R^yN%{6(mF+G{d
z1J^nwY(Sna=kg1BPoB_O^+a{qer?$PYzUisL+pz;#4dT`P4<E7rQbPXap8fgSN0k-
zbC-dm8ua-c<xKyI3()@1uA(p!V;!tkD_gK3xS*6-k?j68I<Ai|pFDo@<oNxA{<yb*
zVWOK7wKCjb=UMZreBbusZ4A*EU0dO{39kTF0V;$;0hHf~^O#Ho|F-nweiT<7jHOJI
ze2WFc!BQJ~v@2luV-<59;iAU=fHNh$$hZQ6e_qa}FCdHXy`!)@UP?Vm^QPAus5cIp
z!5SH?d6#%LshYn6#g)V{XgV^+vdI;feWDsl&iPfmNhHq^0-Z9=poEcBD923jw_L%M
z@h;D0exgxU`J^MfhLo~m@6dG~=4*+=c9*J3e+n}<`g<n6-zne4dcQyHK@5iGj<H2n
zh;sPSVkcqIv4}@Yy^09t5V5NfBFxLGscB~j$pZxa?_XfQ6c>2DVdLBs<-@W#rK8&^
zH>9jU5IMNbjijKR#sVg(%Y0F<4ShaZ#+~lID>ozRIznE|&7E&<@2`MGcMRdJ{XS6j
zkIVuJi*WDG-8(2r>Fap`2R0023IkNQAl<-nO`71q)IPNBOsM8tcl+N!$E-?5>SgTA
zex3xnPRHLF9k+<6N4*AMj{1v`Q(wcrFI(|?<A`&VA|Q+2w1W>;j?rO&Gzkj@QW%)(
z81)?3{nJum_AC5(RqtZ)CJYWsoaqfn2tSrZwt;xPIRVrS`LOeMy|eK$%QnuNW?m0=
zcP}{kZw_&|+o)2zgt64S|Fuiw*v^~X6R1RH)vmH~p4g$dZh-29)iL8ae)q;!2Ycpv
zX}bUI-C?%<&DVqM{@vU3wEyiO+rIscHP}6|=M#Y=T>nNKE2S?nQubK8isohyG4BaC
zl;E?s?<k&bT0xcXK@;|cTe3%4w)YTiLi=UlXcK92w|_J3&1m~NWg0JpN#z#Ecd102
z_L5mxwTj#{NM(9+Vh41I0olN~s4;VEWS`44YItq7r4HLJC&Vy0K?qdi)3o5wDhN?L
zf)%o5c-VTTUNj+@%0<AML!<q%d!?3?a?7MZ5rGnJyIFMgmvDl534d;vA>rlz{boGM
zNmsd#9AuQS-U_UT5K%|Bv4Z`mcQ?CzlLMO`&>$!=+1u?ei9{%k6_4^dfR#^APO5rv
z7_vR1+xJLO(fG(Ape~ChpVdUb&C59)zks*WUo@jTW5+K3l<zO)%JVh222%#<Cc{S+
z@J#!B&|&OxNb00<!alpx+>|(e%3GQ!X=y+6;V9kyxH0Y>N4t4+5PX05DiF{Q!6V!L
z7re)HfzgBQKgYXg@W!ZYEdy&a?^MkBKHZA%EG08lp(7$NLSf8k#T#wXQv<<-CPnNp
z5yVTKh98R0=1j?Rmc{Bx&=VqMUrx#@qtj@rRtdKBgB7=f2W5gS5E3zzHrs@>G|}$f
zes-Jo#zBPH$gZF+N`G;yhse+?31!jUO$;kzNXXKlNeZjCXPUk6-Nd`yW#^mD`_TKk
z?R^_$c2r!>ybYZ%+fF)_z%=dHUC8BHX~UJ2?Uix^l?U69g*&qhWLR2ZPRti)q275A
zgu%xp2Yc;+A?(B;PC=!o>_-AO4n2t6+1B}X)t#n^BThwX4W|^~WcX$rDwHrSM${*n
zQEnwFp_B6bs!)-xKZs)R1ONjbB8^J!B$~8y0x460e8A2z;HkF#JyY6r!YX@KG_xJ-
zBJA!bWkqKvjI^fsR9VbZ3a-IFX+~K&0=KoI8*b?%o{!)>hFy6y*5hW!?RyGvr#$wu
z`hRntZJ-+)={%1&PKZXD(!qql_Z*~AbDmO4+N2x6hO+4nG_FN8XBK^0TG!Ak5$-f|
z*qjvh!19C;&_A-Y3Zw0PT$}z`D&sz)b<rg{s`UM`M|<P;H@qvLNY*Y;pnyJmh}^0k
z8IgHFV7oyqFdbY;J#`&nI`a`E6?DlsH`{G)xVu={E2O{c>P3dToI&q|9HLyr*j1af
zPTs<w-CS=|xK%FinYi+B+WJX4gG!%=FG3EmO&F%~N<CqB)P(lnYzu6pyI*3|&5h#~
zZRak&5HApN+EAWz0C#g-HUHnWSF_PMM8Co}oz?^d9NwJ8!E4vo$&o#syhnJ9o#8cT
zvDg)12Rf1_A0UUWm<Dw)hDZXFvmPa=(;QD_{Ek%<Jxs#s(F=h=S;8L5MHeMSggfgg
znhtl}z&Qf->~xrRD4?W}o?$^wv3SffPU9463h?NMUHF2<wJ$=X#4qUn3qxr|ibZm_
zSCHiLEuJG^DsCNZXRln~_Mc8)MMG5t{L18EYJs^%qOp<22umm^Z7I=Ucv6wY_UgUG
zEP~%fG3NCt?Tq*OS$ppeH|Z_aQIuJM<#qG%f~bFILEZ>`VrV!=VUl292{)1*WRU(S
zdMaC6-fQSyIzNVn;V%R~TiLV8ISb<3yo-JeN57?IkB!>g8bS$UUfYO0HeWUq?Fkc{
zo5Gy+N;#7h5X_gudr?JUW7$eL46q>#F7o2C$?5=rr1{7-FT?uY{$c@*ka}xte(x?7
z{32><<9@QSzjJq|zq9d2dAUK?@dgV?og4)IHNDgeg!*!+E_hJ2)0BLA-Ikm>*r(&G
zjZxu5(2iP?1n0#h@q>$*)dova$riClTr6W5zh*Xgm;Y=ajUs(i4LDc5M^r&jaS!nw
z&D{v~Nh(w2S-q+WXU1oE^5VktP4=OtL%Zsm&0uod(9^1L)EFT*9DHSlz$?B!$OXoe
zy7Dt9m^j0u>tbRyp$b8YOQ7aUfL(8=>@g5OJ=&%~aH?Uoy*HrL<{qK+Kkjgts*98S
z?6SP93Fo*<tLYG`zs>zpe^)+_)mJ80u_y1rBzGIgu|YD>o`IaBdc0(cXsw|I?+tNB
zFUtz7MGG9eO3{|*yGe2oPEv22WEoMB*}TdoPype`)akpj+90sNdFezdsb1vmxYc$|
z&b1w0S9BRacOi*;`z9+##X;D6LUpDmb!bQy+hN8;qHR6g$kKK^bMo2VxTC*>7=!l<
z2CvAZh)09)_j=3tM}6Frpuclx=k~3Dl7Q9yrjwEIT8PL3kF&gZQ`2oqkL;{C$?<5;
z4BZSr0*WO^^ozX76&`$@DHzNMB~V8(-DRAycFA*h|K}~_HnL~gyUz-6#yW1ZmIo2|
zvGYlC_)6pJ_ahVJOI96K<B3}HVc;X?j>*aw>f!PGye8mf?w8EfDcT|2`Q>?e#quZS
z%DD+pn0*652*cs#qf=k_ub|iTf`3Jy-Qk;laZ?cC>NhuEKu$nCJ-f{6x{JfgmM|Q!
z>nvm+<dj(!coluuNNI)+<Wb%xcQSF~i%1W}2$&B1`sRWIX(}kQR8XTlaid8PGs!7E
zTo!Yva8AwRceH$W`^gFVg-D`uFp~Fi7i7YWc0)8cZurrzZwDjWhv|BqQT`#9>J*c(
z_fv33vZ%G+HVFm84pZg}o*#P^QeNE&G7C1sSlM>0={v&AG<19cVY&qshOA;on57tA
z{S?1~;b38ToiDr1a$Feq`r}aj3Y1|Zw}E3w=X!4Z?n~-Z+VI_xikHibc5m`yY}m}a
z8&r|YIh{iVOYI7{%=W}9hZQj#?S|S0<_%1XB_x!P*T24c$g#>^PX%4WV@fFaG;a7c
z^6;_7#m8X2NyDk+H{!TYcyiW(@*9v|M)&saLi7NhtYd4_*!)V`&$S#l>EU*X5Ru$m
zE{;TmzXBSUw&yF%nLi&)?0<5Ec8)7hWiW$H@>t>+0A=L+aRb|G<KnVz2+$C@BZcFQ
zGotw!m~4#bN7Vy2#J&+G^$$=c)?3G4GGlnzfvcXgCb@7E2(CzDmihlV-apE1<BFl)
z?(V3&eW`TPusVJ(8LVO6PzMX}UWWE1QXd|G-Kam{1s`ZplJ7$P#Vhl+IDwy34z)$Y
zpAzRaUOf`4!d~rYSDlk6{%OrYf#yEJd8$`=WlvTy&K8;QZ8w=<s|cgDG{d)FPBU;w
z1NZbcLu?8amOx<9L->N>^6JJQIIKOfjzqy(qHm5t*C}vpajK>iezkz1heSd@luIRe
z{gIkCFDV>u;ebE16UrK6F(hgoqCP~MxL~%rk(oKG=8MXdO_G6rr330*s?S+8lec30
zFL9W@xhr>a*$g}lL_+`LX>lptv?b@=<QQYRN~!3d);aOm)GGyjgg~p|y5xPWG;LMU
zv#fCn;2>&)E{5OhbK&k&NMPGF0(%US7@&&ru%|f?4j*go%#M|S+V74`a5Z9A=B&+6
z{PCYo<jK0F#})3>j@N%$_hpAOc!M%qR%Uh3>lIO{qA-Q*JH4>1Nk>F?*pi8e^I`U;
z%-$1LoDAbrpgS0d4+{OtYToh~#hj7-bU!~;`P3U_Q%^X)uC%bF?{vecKtWwqE^t?X
zX0WI1V%~g!4~okIIzq3?H(605VwSu=Lrej@LPO|uR$dLZ_hU8+gl6e;=s5LR8Amcw
zJ-OhXk1G`sS-l^YMRV?@2q&MLuCq#^tP<*hYN<>7FtRbla{rtX2tr3PT`|-{rg?TD
zZ`J8!|C{}N6uQc?H`DaPVP3P8ZGZrIu4u5W=dts8e#(<fzsYIH0W9dTB_*^T{edn0
zhR$jRAL@jVTj7E`tzNH<Qb(|7$-H!}qe9r0mg0qQ<<sowX@@5r!qa%Q_{mPQ`^vNI
zCLGCJa8hetIL$1bTS!)hQ(8*{CwOowDl-q?W%_w*tBk}d^|jm!;wMJz51Sot%jiUR
z%Na#d2Tdhn<!O0YX`=^q*z@{HResEht*usqqi$6l*i}j@&DpnUExD*H<20m2XvM3`
zhKJ!tAaYqWz;Am(KwCA-4z4L(>BFwXP7a;&dn3+4u#prJbpL+eW!7mf9Yb{1M{&G(
zu<98=m4@mzJS1NR50Y{P(Et>@AR^FS-S1l3ZgCEqG!=^VG@OS_D?AX4N4hPFHSN@-
zBV#PZbpg(z5>HhkARN6&;!GvZ5`K|H*<I?3yd*YR@-!bWR0euVRDx<9gpTPlJtrnn
zGAO2!<WRzDn=E<ey1N80uq$+bS-h(|%`b^fj`REd$X+x#%gp8+*tSd_Ko5jVvX;8l
zhHeXSmF<kCET)N(qp1x`X+s~746v;wzuNwxiBaiRfNaV&>IHj2q`h6P(k&5h8Rs@R
zTX$=}6*8YuEYrKzrfA8~xb<?UzMQi<=_AG7q3=g&Rlp$%VQbgQL9~$Lit_t!Vc=A^
zaV7O3T3zM~<E-(6IYe~Xx5D4bc*>ortx|;sf-c@_s$jshZk};BpTPNwmhpiNggoa6
z$Y>F9QafU-SrJS=7Hou_qab+daX~a{PQ>X(U~zAVv?ihZ8fyo-X)nNZxZg(UxW|6N
z58xwL8)a_qM?!p8iQD`^txbxTAD}pSTs+WUQSUX9r8+WdGAM=sf|@3e;8SGs1_}@a
z%35T_DlJH8HHX5Dub_G7isP`X|9I8dR^y7fcOeJVyb|4twroz}#9cd6>%tPeb`OV6
zcF<a#^iNUSA6?H7PV}D%>r>O(zJZfSprXveV#Jj7rbqBxfVb#CpaC71)BH?p2fZe2
z;rS`!6wj+^UZgXQE%{?sz;q#TqVk2;<)?e^vYKR~&rFbX^%E`nBIxZNPe1L&`^#OO
zYDf5!kGvnkVls=|pdSYBP8su#5K@G(?_tQQc2wYypEw*+q+d9TP~@A8tq)6$w-1!h
z=#p{xj%nT0ZJH*fDefJY>LMFnVX+KYRKb*>lDxbY?15F=wL^s?_#$x_wL|B*6W!3-
zK6W@@0~R{+tigZ;ad?@0s)@LKlztclqgN%Z@kZK=H-3B-#6|YL(didu1zwu_3CQOl
zn9{$Ekxqw4ODXaP94b|Ab@(P_M(~C?-tdc}7mo?*41ym6=V*WDhm=zrnQq)-npS*r
z{iGdTj~?e6ge5N(E(NZfvsw@R%7dV1*qH2Mz1cP*RIUDTKj{yPVbFsM>Ors#ALJ-9
zFR#MAzBMB1#}(T;YJEdm{1ZZA!o8?hG6;K|?1smq(O<`-@y%nx4Z`DN+RUS;=i`fu
zu&$%w;;>vC9uD!};!(MH^oaiq@!x_bZaAf%a=5q}m5ZzKaB)PxNA&v(rTs()?ap%X
z2mf2xzw~GE;nRM6d%5^P+0M?wv$L}yHTC`X;rHKvkEd+$c#$q1EY8n|i>FVAi#KnE
zi;IilqOOOFmsIVy%f<V}?~9Kghl@Y|94>aE-Lv?0=TLrp^>Xp!tHqB$4)Nb&Mul%L
zk^Og^)<+)v{<$3qsXSO!@hF+*=;pT*S`{*{kn%hN3<tNGpP`}J<>BLDSashrG1ORN
zj=Mn>7F<cuRRixk!T#XDp4M2wzO^+&0&X|o-(H+tt&2K>&C1L1E*z#9Atz1k0x<+x
z%IQP`+dV#(G+XO4PokLUiXR)@X*M0!vc!7@Qyq^+Pz(TcY{rRt8Su;BVd-k|xx80}
z=g_Hf#PEfP;d==kJ1Afc@mC+dOuU#_MKIg#KU=z>29<>^_!D+}>`rwQ|Bl}M&i*`~
z;pWC8NW_7kQ4_t40z1?6#6<+}xXevQPDnKsXDF%E5;>wDM@)UqzI!DoHlh0j6t=cr
z>p*d0$!h{4K=Ikj9~axno+Sa$ho{LWIxmCZd~k6wsOyafLHy$@dFAIpaCo@;=+Q1t
zF}?Ep;o-)kctfYOk~U0H{sd4PZ**mFPT{YXSQeP-4<G7T#hNd^Akc<RSu8e-VKWHV
z)JL?i-k$3OfIO-|`8c*uj~?kK3{5=WWhOk^AhWTiwF1Oy>w-)EmYDF?AcX=uA2-@E
zJ!da*(La*lt7#Dbk{H~^7XH4iMWHbxvoW}ACY|_q^6B)F@@6pP-T0~w;yLY?LGV?*
zk)D-wISzt!<CHM6IwK@*O5bZr`f6(5FOWlIcJy+=AGHWCKBtex#yR0#^nA|W@B*LK
zC`Pw5Jxw{Co+<eX$>1o_;}xglg+3f|Gr$4q`A}NH8-4nKPam?B+W7E+zu={Ici0bY
zI4?7!U4MX}C0J{3?kXBqrpUlX@!0)px|_!?3Ylf?P_3<M5gH(nISybN5BJEnp&}X<
zEW2@<sHq7>Z#0>AT@_wqtw2Wyjqrx)Z!f3=ej-rikosljZ0}V~#vv78ye3<Tp|qlz
zT4g@CcSGel6hf1fh(|0qEIQ*w$KxU9{t#0&#607WO^!4q`(j-4(`Avv4t-wbWtBG{
z203P8X)#by187-|nkzsT+iuJw_^E{>SjpTg^egyfM97D)_WBSw_X${kb-NE{qbmdP
z%G~P@8D*Pf`HaDPf57jjv$CZ_IkV%2iW;~)T4)1eaBC~CpX4;&OgzC9$vk7$k<;Ci
z%p0K@cF|%R7sK!{(_U1HsEbRZ14~7NOP$kIP`J$2UZ-FliIec2VUi64`ol3*dUT00
zN68U{WEx3!sxgL_yuAXg(azg=YYXeL^MN(oBkdD}p#%!<f2;k-Wg+{0nqh0k(y#iO
zeigB)CH^6EUn9QuKU?0_fu6eC;ElL+$r3)9nvTve6)a!3k`;X_PCEi2XO@D+AxZdb
zM#`DciW~~;LBU+<Ebic>jKLi=FNy_2Ewy{+%J|XA#?wvU!~8Le&okUgyYX}W#nS_R
z`gCi#8(+xdZF+o1kE7o9cu4Pe>HV$BKirMa)T4U+;Jm7&qfA|WsPu(?LA6&-wR<rt
ze$StKyYU<QiQaysw?7wnN1cNq_w_7~fAZ49;Xpn`LwtPYR1qHUs4mdA_$9vdx4#{K
z>c{(c?k-3FO1D2AU-tVC`rGt#=gAZL`*j~LkG{sslW+Ou$)ksOdGv%|p7g)Q-#vMG
z{A7&VooZW*sPtVf(7#KiclC$xxV|~`Kk84BU<OWr?(fWr`pD4r4F{-prSy)^6@sS2
z0#PR{(dr-WNl2@mMMJL3ve0A8njSc;oX44OOZV742d}fx;;q5)aS*%K(L`(znHMea
zLsZ`J2<G-<5Pi|{7^zGQwtQWB0S4fcXt5|4i)tCUop|lRWJkAi`<NR2>&DIAa3_pt
z^2eW+tm=7ud;`&~Kk}W04gb4;dp*ipf(~WRa;@FKOdz)xM4Z-$T^NWX@`wp4Wws&*
zx#WZVJIy^<{7Gd8^|R^&_r-G>BXd&jyuM2ChwZu$*a0v6ZRt+V-)6TcHrCeGB>Wvq
zzP0tcta)7QyiTcJg-kxn;y+>V_XP2yo@U8@{A-rnihs+J+wqMoxfB19C3oXrvgGUd
z`z-m!PTRk|ofT$ZHN7VK%DMc1u<%dGH0jEeC!=|=L2nWe6y9^1cyHf|J9<gjY!@&k
zjBzUzL%zX>``-@szZu-x+b+KP`m6orvus7+rgX?xWNs?GBkX|{tO=bi5V%JJ(jL4T
z#Ieb&rI^-UU&cR&!C?@OKyJkQ<2X1h13yH&>jO%zpxz#E6BI<De%$XA3$L;a1bKdW
z&M_m^J#H%c4{CBNAv85ms5*@&ic|akO%xLp!YJQn>XD!6y3ntOLEE2)A&Z?(6Ifww
zaI~k&eYT)mhEB%_-9Y;*E@_(4lT4kx?LC|OQ1Y*qa4CyIgFn?MGo;yJRbj-52XdmS
zp)^ztJ`$4P3ENqOFAhhVB={jMF4OA6>nGVs#Se#RH93F%fY8$!J%4!p!)1}tpV^1k
z4=&Fx>*n>#Y~Ezhm3jSq(v<l9seC61kFp6r7!NA1L8(eBXaSX@YF#nvMYX6CwV@_d
z;*~F&WcSgid^8>^j@<DWJh{bj9rZ9{bVHU+@-mAn{Iw@PZ+wJtm@AT9CQrr8P;VoH
zc#Q{Mx>p8*d#1Dr=r@t@M(CakPC1c%8mGlHMLdyU>{fYQ(_VW!wgyK7?D~=LruFOO
zq;+GGk45tz_kUf3tF3enXVP@}T@|_zyW1r^5jV@NmAAZ@5VTVvn6zAx!>$iC`qcU&
zrkQ*D1V_s#Pp08$Kf4vf7_++!q}>)uDlnJF+JLe(fbJf(>R4agkd?zgv5cA_+al4G
z{>)LPSnVdl)(tBb6AijcwEE;0_)i*JEdFsbUtC~a-Pa7-p{Q54+kw$8cJ|NX_vysg
zKTR4(Q$>m&bnZH%mhj)+iILrkr4gVz+p&Op)0*96RF6A0nu93^e+4~v-&Gzm9PBW1
z+zW2dZysEC0M^$j=i&N_X)IdAb>Y=ZlbI)-o$LjRwe7@RRk>Zv+da{}*xE9z*hV|&
zSe-%512>+r*jhx&dPO^Cs<SM-V0ZO-C9^{z&6}3F%BI7*&;_zJuD*aD?*2uD<&9kp
z^rHqyh>kpn`eq!Lu>=45S=moG&1kSBR&N)15o+!S*ch5o0@dBmF+l>JuYfUrPeXLp
ztm+;P!?{5zJ6T9Nh?nIdsrp@&-NvH3KS(aqUkCej6>*yt#&;WT48w_P@3n&vB4W(c
zfh07*)m!r=BW|33^#bMOXwa_RehZ=&1hSu!vhmMGySc5c|ExO>Bkg}}X4dp#&3trE
zh0H?Lo`q{B;M!IlP8+t6V=CxV1j>?EQ`Jk$%4QXA`jh+aO9<kN1*C%Z4ekP^+t7x1
z1>hI_3AaD%FZn<C;#MhsDujIvMFI1an<uZg%yfU9i7Yj))LX@pRXeo(+oA%hK8yR5
z)iv_&lQ8JzO3<|cgowQBXl0kL)V6N5S6ZpQsFmw#C_8F!SgY>o5VpXryLSh-?%r7v
zG5klH686m01tJ+P!@cBN`Zt7f$L(kk^x*!MY3e@F^pKVkP2XQj&`V{IA-IK5>^6!8
zEa7rL(3d-FzR;(;1ZUl^Aj(BZ7JN`NxxDTP0Zm2TC>k8a9g<w?dy&N#P6DM|W$`;V
z#U?SitdjJ%ar~!zQT45m+<y`!EHOBgPt;O0-d|mnkMgs;Vb3*LG*B!tUDukLx(l0P
zYf5pMXNX1^@AWx%M?GDpz1*o@$Upb*ely(rw%;ERn23Z;__0Y&GDlnyvo|AS2;f|H
zwRhRMp0*mx*aR&m8*ySc-yVk@hni40vD&v;?{>fMm5YtQXyQ8siV)kbc2c0#;8x{V
z<2bc@(739CT|ElF%mWA;lP9Xrwq^F<N!W<*>%$odn=MfWZ!jDhz)j3J#>us{Iz5RU
z{^NyDo+MxQnr%JM?eOa!CV<Xb8L56eN<W0rb`yQ|b+6psbG&dhE_a&6pB#&6ulM!M
zu-V?DE%bG-*e+3!+eAKN=yQ)|GEETrJjsxEGML<F@CC=xSr5JsC)=Drmv4@!^T{NN
zKVd5k@|d+KF%N^(L0R9f5?%>fHrN(0zBF-!lZ-{Gs%Vfo^<?+!sAm*Q(tCTuGD&-9
z4crE)dbantra^lDtX26iq|Dpx)Yum7?Xj0m^O>^Kpr95oC}SR5<&5X7wNhr~s75^Z
zq$66bj%RDT>{T=dM`zr<6J&<?!a<`u)AGuH{SdJY46chSaBr`!gnN5c67*wT2Ii|C
z;oH%Xd^^Ioye^OAGk~*bJx~?$sy|X*1+FE-9eFXI?+66GvK-Z`D-V1h*)K;&=F86j
z(N}2iikpb>v6HRYj7qIU2!~rnCL!#}qbB)8GcxGMG!cWljx6Lw(^g~A)8{x@T9@a8
z<MPM?mt>XujQoO}x)wGZJVdZVn3vPx%C=!!K6P*YH%`TG6>YLdH#gV$k8AtU<NtNV
zgUSY4b}?MBatvY8p)9F1%Q%Xt2=icC*OJv=?rhUj=~$`stFIS}uWe7beutua)na2R
z)utx?I?^7aZ4@QMCZ?S|1(Fm@v8AEW!@GSt{U<U6-N{43(|l>f^gpYpORzEh59?}G
zlSv(c`YgkJtP<6+lyn?pR&l~kF=t#-GXI!M;$wBv`E75{9(ymrEwZPux2ZkknSFe0
zA2IZG(h+C&+hUdJmz3)i$V|Ves9TCb5(-JHQo|QXT3UO2jjUy7+LE-WSrl_gX`NRF
z3$YFqw!q)ZCJA0%7F5gY!;*hqU1l|YkFseYPp{4|D}H!V<@kA-(j;K@Tmi~=QW0uF
z6)28^D1!oC-iMr*vQkdUNckum<?=E;W^v1F{`<Qxba~{msS+(V(37ZT2Ks&AzmBr4
ztxa|)r}<<0ixIqhMrL6Q#94Xr6=+-keuxIyuoy9#0l9{w$@H^xG28NfH+VO8)Yy^B
zw$bs?k%WIit8{ig+a~2%*CKs#RH^?X*^74w9O;Xf-ePVab$`3ai<K|J_x{?K!0e49
z9#0vqDQSc#E`<M_AZE2|E7g3NMCa<-I=)DvqqTh3Nm;xmJn_tD3a$?F^HP`g?6%wc
zXFa`EV6)QBy4;`Z(?6esbuE4I0IuuOmzVf&cjMX>b}SIC6McD&dBU$}*9yP9a)#r&
z1{8E1_s;`~QyNA4Q)Ixzige5Y6;?>LQim%h>-yL!)G`OUL!xzjyfa)QF8fDyuN9ef
zH_!zKud5zl@$;3hgKNG>&YuoPDAzHTj<2RG>wxGN3hfL$(s)AGdaf1QwF`Hy*fpiS
z!X2ye8JS;u(AP=*o;1plhivK<fuEL(;p;#vscBOe5w*$l)a4!xoHR~odypWK@khg&
z@NJX~sY-Mz6CYHY?eEk7tiN(98GGq{y}e2<S;Xh7udkt=b(d^^e*LHYF?RBXeE+F?
zB0S$|=(!!jS6`!3+g}_1-1ZaE$F_67tqRXpVX`AW^9UOVyME~upqZn%BFyqCaD`|q
zHHRGqlE+Q^+;)o6zO;Qi5jXyqC!$-dxk_SoO-ZMub@gNNdUbNvN?ZSV$Lw7F@xMD)
z1fkb=NE7j0^Q6CZ%#!|;{Jt_resilc^kv<#v-8V;CYV)Z5aAya{82tGJQ?lRzKB+%
z91YNt*GjPBUUOPbyYkT!<K`=$^_NtHwS>}4w2O*Z$Dn|pfBkiCzRva6gVacDC+4X(
zPjf5J?KtFZ3FmyhjI`qvbkw-I;$NEeI>BrGh26TYj>+fi@b}+J4e7Pw-|yQTXtqy;
z9Cm-P*xR=m|Gg&TVzGbQQB+r~m7iH2v|iZjYw##%SD{<4(sL0@N><bHwDYqzNA0z)
zg&~a1*tj;WbB-@0!RP!)67ZzO@v*?reF{;<)2B*c9kBf-vpLW4;rv{E_`c!9H%NT*
zMkW4R63;I#Rz>Hk7eViP*V9VWdl<F`yRVt8R1Lz1{x>SpY06;Lt^Db=eRLP&njSv=
zOb<U-&AR^4P6|?qAdSZd^tdN1V=<?twGei&yzbo+wks9M3VD2BAD>!A@VR|_V;`SB
z^<+lp=icj^H~v@5+nIgA_&?~1+;30qH&zLtM$pnY{#B<yzD2dKa9g$bj+w0o&FEJs
z2f)s<9QFsLQOT##(l9$p7r?B4zHoTN^m+(*TG*2!j9;z@rV2FZj+&%x?nlhbW92>$
zk&u)&0nf*p0qA>dd;h@JWaViku=UYzt#qWWZwpiUxz=twZYcj*)3p7NexsFMt?$y)
z|ApZ@b^m`gT+QMyiez_`&c{TGUkvHbZXTBft8+XRQ+7|6qiToy&F=5*!Ewv{A{Yce
z9|i+@PVxNUFks{+E#gU$eA0eo1}|gZVZh*N?AZSgev6eo|KJZ1>906O8vGKw7U+Y2
z$I6BwYhuq3pkbeugQG_KwyXy)?K54ggNOE2%6!+v-aRuYie+4Lh{}24nZnKd2)C{h
zsxoBLxL)Mgr^2i)*@G%9?Ajnbg~hlg1Uvj5owzbQxMJuIkQBV81HKI(CXU7^7d5dM
zO&}2XM>8&5B|`)59-4wTG%aPJ>LP2DM+1-yJwiJXpwH%FhTlPRzkk4FZkbGruyTZ`
z3PC}AZBB;q*$8IF42+o~qUY_s=%mWhHwVr3_A>AFG!dIRQiQ_}zo5$NMex_?uiaz%
zH@<npMTVxvze>RlpgjNXH4G97`-g)_<-2)n>#$%o<?6$yB1vHlcydz3%J1Zg&Ya^A
z{b5=l%-LyPz>mZ9a+YoU%Xm5aR{-@xxP3yDh-sDthtD7V`s3r*KRti-`pNTOe|khW
z+Y*e9Qy8(UkZ5J}iMz->*Av1ij<TN@Pr#bGLO*E^iPdvV+Tf#Pi-sx9!{9%63@CyH
z74eP7iwJN#8;@v8Ka`hn#D11F8%@ap-Zt`P$W(=zN5{KtVay+8Art3dO<2=hq6{XP
za%x&5G(_}145a7M5jaVuvkL(y9Br#$7NVdnIYPNC;q^J*5U*_!x~GD4r!-jznE~(Q
z>RQ#cxb1Y-QWKssn{JfF>;qii!$m7QqMy({<_c4Gm@h@w`lUwz>I@F)m7m3WR~p`y
za=TpRMOnco-f1aOVtFpK6FQ?xuZ&uu-bd9-$0L)DedB!^M`cH%SF82qOS=h2$*<d-
z?fFVIM2)W|GCO@WS-H4S;VGo~L9-NZwg>R?s`}&{0Tue}RrnKKc<fiS;7B3-vqMw%
z7=hqDtq5#6i7$mS$V<4C0|z=4<#heZpB<;gzG&mTy>C6!Xxg~WX4SqtWwqQP4<!lq
z13!h{Vqz=<RkeWCED}@dQfGle^iL9rP}Zj8a1?S_qF4p@dj%-wH7fmx)#Ryxi)#e0
z)8X1)OIJI-#2G<Ts*ifgwQ4_ssz!G{Z4^tMajOjK7#!=!Jqpov9tDi3sM20q6mJ>>
z<WwwG;2&SYTBvz6_Q`Cfu2-8cO-J+7A#7jJh@DRto^wDnY`DT(Tiej|g@bG3ikiK}
z6tIWA*GEhndI0A1giwspQ%c-JB0b!P3l1pj#+)Y_K1GgSbuoIlzkeG<IqbagN)<z0
zp#bi;SjgiI`}hay_!V{hrt6@G`**$_{)WUGI`M`i-az6XI*}gkL*@IAY_Po-^LSqC
z0X@=6k{H>&KjEnI{?kmn;yh(y!p#l&1l_0Gdm^`>Jim12nZoO~lk0n(OJ_>pRhkjY
zcZ9h9bzI*J!{I>uS$w*?T(J9%Xq(dD)?yof7Dwt)9v0$egMXrkGKQ}f8&Rm;VYGfn
zJ2BPVi-!DP*x@*1L4EiWUvKQjZ?EZ->XPkISBDm>J@SA4S%1!ob>2SW4@EN4>h#-(
zhue<`>)17Y-ZrzhJ62lvCKC^*mEn8(w>>%<A02H!Hd*w%w{rO3cZu*fO+4}%fKL^t
zb+2i+*dKo!9=hG%>)Ueb3#ERuH2vUin0_AFmdr=@+y2sR%yjW<w-HIY>*dsSaN0ON
z;t7BHR9w;Ryrh4e<9IqSf8cYa$JOe5ac91`ooywD{px;Fsh~RD4w(O(=8-4v$P@cn
zT3^i<CtanflwF#N7ko^1hoJb5!*Cn^W+EayuaJ)YPekA1)n&Fg%BG7~=a-8oRlazc
zHj9^+bXN_J>u4A%*KpBs9sZCOiznI1;xMfi59Ss9epvi)S<wGyiwBoyi<jAa@qE%O
zek$KB9%U00!Lq_{CO^`F7|0J!h&)Bq3VQPEtHt++uNI@n4-bDHk6u0+zls*&=+BSv
z$Emg(RTI%!drt)7udfFEnDW!#$B$kOw)bz-!%KR&)$hj-AL$29x!aEqAL$3A+}`iU
zKR?nBobpZIAvxcyMs;NEdRR2Zb@Hwtx+R;0lW4JcYo6nI@<CHs@hmwi9KZCnP=5?x
z^SWfO{OrhbZai30t`DFw5bus_tP#?c?!-ir5zRH(gno#;?~f0da$6c?vC=m!D6P;5
zFtEAD>Rt8d)>u=aXnW?iebj3E7TV4edfKNO4x#sYN2(v~cJpi6MXt?Kqh#0Rlpfw5
zivahm&>gvL{Y7<^N|WHvV9B2Ot6rFMY~x;-@^AdN#kIU*j<U7m<tNT%&C_J`6Jw`M
zV?uwzv%c1yE}%PYUrYbB!mITVy0xWbJ0?Sp3`Cqc+ShiwwG4-h-1%N|``h7ucB|J6
z8nzB&!yvpl8rL2N!|{3)j{XXx@y%m6AS#X<c0jb@`b7$l>*Kl?t)%~j^qadaCrU`W
zvFkf+ec9qxAw1!CjT1Q)NR+mhfk#`%Nv%;#AnJuVgNjq61A*YQ6z=lHo_qiAOw&MM
z^<H_;(V*Q(>U|Z#ueFYZ;=@!<+i{fJRkTa*H}Cd)4&nUJ!$Ggq?!=5EMg(tO70WH5
zEmhF2C9Lum{_Nw=9sIeAKVK6qw)wK)fXy)+%Bt=mAV`|PODxBP_zpR~L4j}aXAg0n
zVOyO%@FG^BkbF=kN{31ykXa=VorH*_5@>?KkP1ix_Um;A<gv3iU#Ma8m=EOeC(STq
za4CTqY%PRTDgwl&#SgzYrwN`h^g1>ucbLx4o>b)p2Zni)&Sod+1YYj77d^Yvde~*I
zpRP7jRjY(#+Qs^?an*!>cSdgm!tWI2m7^3wO<vX+v~NbM=3}u=I#iDT8l#)jutQ8K
z(=OoUR#|Pg9(CPMkYJ0afY(z2^JT*Q$6Q_s2<B-|LH&5|Pw@UT=e1Ef9I7KvUh_^*
znOrLImndF06U@gDIHfNuYtlibtf6KQrGU=T13<)n>=lZ2uacrQd%FAPgUpS#R=(v8
zs~NMqEcKl59~dw*o7hPCz0Y3h;Xd#0y+MDV>tkw=Uzi~5>$l&$w;SHuA51#ZqjE<N
zc&4jJ`s!SVb{9Qp2G5(wGbR)>Hk~1BYj|a@dY4^7I_ylu|0CdF`zf7HmB>tQqfRC!
zKJ84oG5SUHY`yNQu-tX?`Exg-71!}xv2@r?#p|nR=lkz<w3cS)$UZ)X$s!CEZ_{3S
z4PM#z-^XUFzHP!k3YrqO#`?fptCU<vFjo%4O5PsRTLjKPb^mK@*&6*6+egdq&}wO{
zLf=mPK<J-tjjdW$Z_dtaZ{~g%t|$Se^@=q+(;<39zY(|s)&0AsFB&}UWJAu8_41gi
z$dHeIoSf01B0MWDF`5!ak_Go?*uf>B?3!cL@p;NSbr4RHcc{de>+0bo6CRFtaw*N8
zV#n^GP>OlL(>4)6=h@5WufMt57Xgh<eDUPrYurh2)cTqgbhuX>R1C3h^geNR2_haa
zRz6GS8uva)Bq~)6S<4fyJ~j&$8Gqf2#b|8AE&@Jk!G<~ZJ2-mbT;+b4h49uaWe}kT
zoc@%WG*ZF2!F7trNOKS+l!xF1s}pQ61-UR+q8qntPm>K%e9}wo%cD^~9)`uxosqqP
zQ@ILLrget?Mvvi8k)eYQc?P}IwPg<Yix&wknQfoM^UscE9vOgkFWK9NU61C<DJd_5
z2F}2dQ{7LA2!<3|(uz&T5L8RJR2BeMK&ihgb+;0D3s9dGHoBEbjh(FexFxi+Wj3oc
z(y$Ku+8%EDQa>yUnh3G`pP0=LsWRV}7na0e<VM5-Z+zzFGhf{7E49MCypgJ@K4M;m
z{;P!k&>5kGK)|9@kK!5|-a5d`>(Lqz1c2HRKr{ymhpQY<dH2sXG%lgnJnN?p`N~o|
zjYkU+>qg?kg{En<cDybpvO+D96^Qms(MprNlQ22<!jk(<!aU2fP35S{r`)qqH3n%%
zG}*a$JWUyw$a@^@%-_LC-Rs|!*m$e){9^u4Ps%Dw@^~`L?}4pf(sPkCN+dv_X|bRW
ziv{l!^)XKAdBPC)0HHSF<jM`tph2F(#{`FjM`aEwS0qjxK?0dDDuhs;UxXI83<))4
z2&>#q(lRxy0E7g-x8p`>`*6x^mdo3?(=IjJ+FJEW!JF8*ke{{?-nSub@L!pY?}UJN
zFocG6vG>F>)qXLD+SzfxI(0M5W@i4WgGQ^EbmnQXcrK?|%UrOT&BQ@JUyOpDho77n
zpZz5*T!&vQIpcZKI468gWUY316`w(HYevl?p%WzWwr&PFob2<l85Bdl(gwdV3_$!%
z392{Mp^IG&yWd*lKA4+IS7?gC$?7)~Qx)Gk#x-Ob4PG0gVW_rFV_|03URbjcqCtvE
zc<&Bo9X*MzrN0~<Z_jx$`xk*uhqinafAh@D0(2_rG&N?&@aIB(F8Fg{&I=6(5t6sI
zYM%3)pZkup7lz~}^JF#dBf+YPfi4prWU)fxj2c2plHuo+dNna29Lt!F#>7?4cFcLz
zthzyM_Yf~@%~T~vp@h%fm{;Yye40%+@|wl^d9jghRCI{Xiu@xb6GjAtXrrt)2xHn1
zD_AWmXVrnGx>OnoRC&FD>LF+UyOtG;;*G2Gd~&WEsIpm}p3Jh1bW)Xdy+MUGPO9>%
z&MJB-rW-0cc)hdn6I?Gy`@3iy@JaQc=HTMfoZ#kVm7ZnOosFMoS&D#r*=bgx179X{
z|GVBswJXwgf7AM#5J#xzkW0aab}y&=>}cH5jd-+-EqdvtGgA3WfhCc?LXDP|f#ypG
zGs~v&hNI?ik-q0Rd09%s{<2|Gh1*nYH|X&H^heR{HpVkKal#gOp%B<LwAiy`gXbYn
z!1t}epu6h_gQ5OkGMM|TgK<22`&wYYN?3Mj;_~LqRuriyKgF9yFHE%#;!LTCHNsEd
zJ1Flp*0pvS!7$$o5`hG`C@%ovQLY?20qCr{wj;i#t_FGiT}CZsK|C6FIw*?!o)UK1
zF8<)O$*Sv1^Nmt=#Pwo-M0B4F^+Om9diwk<<DyJP+Jo2IOTx0zknyt(id6aEh_!~W
zj>;1Ve!(dQ+X%)^@Tt;6DuL!zN#TW$Xoq{J1!F0+HhC?eSYiURvZk2wF#>OLPIUNo
zOmtE8D>+atYscBFeBC{nm1$$M(B%R>P5sJ<9hejPj&efOlq+GB+EJQwC(E0XF<-}_
zvz-(PsR8tnF}ua0Pm|Q_s8zr#h<jcNyyVK43ut`htOLoZ;EZ^jB!Uv+xlS}*h_`v7
zkwd)A5)VV9qyuj#39X#<oM<!FNpIHM%WmDA_wHu5Z`S-gxp^1-aT|n_a;3emZ|0sm
zy`)$5Zrv<<d;2#FleI~q;VEwl+k0LZGy9Xv6S|w+C}$HloS7G&G<9@0YcJQm{&0Km
zCaZ~7P?Mwmb(8QJC&5Kk=4H!j`Z@(uS`iyxQL72tuc_iZi0yL4w#!hygyAQvpu)ly
zG&t|PQg1>ADu~nB>lxoyz1(q*TCTSRahwQVHWTF?6+0~G1=fLDpRuBCME!wwXk7Fj
zhX3dPgxT)hKAR3S{GNS9i^@g=OKLLslg{~oGV}AFVwDSJe0uyz>E-{ao>}!BSty}f
ziC!UGBFce;<C2a^7F!1>CuOo5j*ffB+hb7}**$Y2j$D@Qco<>BGCswi$y#2Ul1dyB
z0X3xMp#2JVPFRg9y=r@7X6E#49VaFDJ2XF-<Z(3G8}|^|2O_Fy*oPZN)&%O0hvi_~
z*?osz-ztYp5}RCH8#@!YED6EK4bK>LJ%Q7t%%b)KAe51V>TehJ1(U{HT#lH{FXmgX
zTJersh>3@;lMkAEs!pBrvhAJ=CocC#>aX5TPSKCvae<bz99@Y&4!H6k+TV8iGR`8a
z3z^Uk)|<u)Atc-vC+_LJy}QEd3bUKE^m=P-I)>6)Ta83YDaGJNLm(AUUHfSh;sBdg
zeE%q`ZjihcU4nEVa&cfoLpE_-S;h5P@pDz4Az1G4J82`Piy_<2r5MXF2i*mXNoD)P
znt<oV4{}EdCP(G#vUP=FYvuzz0gkR^=^2C>EAb9bWD2UN)-C+WY;>>fHfVBm54}*8
zezv|B8}GqNPQ8j@M>&7(_F@yp`0}KwQs|SbG4oQW$+6mor5iw9s)Aso)sXoRLmu6?
zp0zs&bm@+U)wG9yH2X_?l~Sg#&J?QM;SSBBCmVjB-#PQM**bipwK)_>;H<-d?veJ|
z&{EPBfN*op<iBmBKTZKg*)?oazO?&ZGwM`)rp%qFdyAZ@#n_yOdQl&}eD(4?C+v9Y
z0RjJ$1U!iw%XHXy7m6>Zh=!f~%Iuw;*XfY`<*Cy!1>Z4csL2oUYQ;%=atVDv-Wc{G
z?3k3m-Tl5k+FnucJXca3Uy*j6SJ%*mUAD;4bwxT$y!gTr!c=i#;?jpat3>ow36-+#
z#c?khLZ9n+dNUgBY>ZihtjBs^J+1ad572<Ssgx(*J4Js++0k}yJVX?<cxQYw`a>%8
z6A!x*kGc{capJ4h4^O|i-j~u*M?<WQkHq38m38N}n^m03VV-=ts3C)KvFdm_5V2Vu
zAM!WGn3n?y;iw`L_QW46@Z}-9)b3@2e8)%52~31(a#bqDjELhA5(-0$ml6U)i11*K
zy7uV<{A$AEF-y-Q!pP6%?N@obkhkCDt(LbN>Knfjjt$(O#n}-hFS+ISU(oW8CDjEr
zn1}|;FSq#RN?vaB%T!+O@XNWp+~t=GdHI@OYI%WX3}KD~rGSP>UJh0R8s-S?cv_Vg
zh)E0Gu%_fEQSE<KLR_2gAVU=MV*}$po^ygsby9h=9p^iTNRp^NM7V*ZCgLuSVqR*5
zHOt~a(KP{+l&d`LR%UhlbZ$+KS)~_h$Wd2ww_Tz+`iio(Hfk~bw-XqSeW)W{5*AxT
zHyxJzPhNc%SQcuOniysM023%||7O@|cf2M{Cd@k&Ob2?TYv90LJBpvd(wgmU^Q~y@
z=4QKhO)YLD(pP1d{gnsI{0Q8Hq(j>(Mjm0!Fta~VGcbVR)=!cr@_V)I_cAtfW5&U#
z_9r(Joi=4E*>{91FMZ6)Kv3(7vPHy{IyPMoq)GUmx@Q@C0a0y1IM1rQoW>jC2R8Cq
zeTFS-Iew;~6o@yZf@tR-SW3~#Z09T$&8FM51JjERbE%5C_9Yz?qE8$Y7=zVFnlm@w
zDZ0YAv&OaT&3l^EeAfbM(jiiBY6T9wwWq_aRALv4DxT0W0Zz&>Wp#v*-sC3yQEzQ=
zbl3o#u|VbE=ctz=Lv9slnDokg(kn+Eq6%7AIo$+{#e~SFH|5T0k));dR!&o(g{Mhg
z^2PbEOlW89#R1JL{B82<Hoa?vHE{T#uN_pcgI-!JJSNFY&fw^?xrnr-Ll+CKcCnEA
z=Vy6&BtL2|W{%{|v3-5i;`oVlW)ox>ZGlZ(0m5vogV=@*Q0&Iq;X57*)3G+ZNA}#B
za`bQhrJqNNC0Se6<hfx_)-I#+!Z0gqmu*@5tjpFb-s%9(U~-RR$+{u)1IX2*BEeNm
zL!+%F(W#9s@z$0bJkw$N<-+sZG@i{Hj;}0YtJ8c2$Y^;c20&~|JWpPlrO_#&le4wu
zK*GPjWC7~*B74NMs^qiuG)wEorX2~}7m4Z-WgZhz6S$6X%*6bo$#~{pTRYSI^c1j6
z)_c?HIT!b~?+$It1A5;Z+D_4Xe`q>RZ+k;CG<w?~n&Hvg*F!t7fvwZgfKa^x_t|jP
zjXc3J+rjangX6wK(3-djR(?77yOotC5?)>-pBxxbr7f>~1>n4~GFgSIOBkpT0_;@{
zK_2BEJ5S0TZSF6s7y@Q1I<|Ji;1^RT-h>T|&WHHxczmR*i_<+3jfnZ6M!)K0MmHD=
zyBCO4;RVBe;t-4?O>c1+o_gEij2U6Vs?waAHU|k@Q-_}fw9Y-ZU=DGFct{SsFUkk8
zf!OyQrrN-HzUL98dYT)TALl4C{D0T~dv5=|KGT}CdhF(P)e-bfYy4lkBcMHXCefTh
z1)BkFhHYZ8a$oY+;KD%ou7tn@VH7}RZm22{L=f%=26~bdK87?d9iemyBErv*yM?44
zB)NJAK3VpqYg7J@tPMKttPVkV=QaN92D=BPhvHuHnN@X%`-hKEs&TzcFT@v`I=y<X
zkmNW|`@*tn?)}2ww}mF+YIY6ZSFw6GX+sFFoH?%D`Rc12y!a}CxQQqtmpj$wBth$&
z7bf~NAuLzWi$R|JTVb0e;xvo3(g9}>T*J%Ze%8WJzlvLK7Pa)0gTHU1iOkEPP!Kl<
z4aLpDn2Y=U*4^xmn*qSxeuqKIH+OIQSy)Qz=egUz{f)^q%}&$HSu+s!{C27NhQ%-+
z%;_XKYx(ce*w*W?e)k&npjKx4-$EIwtErm+?1de~q68fGNIHZ2=@Ypf7F2e-q`MtI
z(Qa67x5@w;)}`oVNv>9&o|A{ZLs{1m;{MR)V(PMTw}nAg5S^;-JvfcsI6OSuc=Tuk
z_N5!z_;X|Q{o$+epMSchPdHhh^E#?LpNhMCh<}G(A81c2aBc~3nN_w9SI_r3DA=Ds
z28NzF@#xjqHFh2SIVObXnheza!5fKMWTPlG<+GR1g<c@QCjDzlQ6h3b;@&j+U>^MI
z-R<9OAJLn1I$Fgoo8r$P#%So57S$QoXGXPdOpdF%D!gVz6bY@#uyFV0hVriVI`0J=
zH+Q2z^N&S?Em0)`x*UVxz=xPWig1m{^C~esQ)dQ-x;aXt0jL+|+x&?r2B?!dPe@@f
z3VK!VUtuu*7xdBZxuM|{b5?B%2@fZx&jS-P4eYnBsR`%|=DmN7f(R8m=v~%pdPT2v
zCa&PU3_stQ=5+sxy*Vs*6hsj;lM)B5q)6@YKXsH7Z=O61a$eSr>VkWzlvUS_WQqDS
zrff3z<`$`jUEtxHGW^t(e3WAF^#<9}9C4>3ly&F)@*;(n9qkf@N_m}hTxGcuiK=Rg
zqR@=keYhg4{C{XLJO~~R4eNh;FzL!*nsRk0lgdz-Mwnta0Yg`pLwtf5M=DM7Tsu<n
zG(NO&aM{{IiF3SP=^ac!Vs-O%<^+V`O;}f+2HY$K*lBado{835?DNLlS%VrQdsRBm
zHc-c9dX_0KM3+^HsoB~1b+vHlIy%zj>b6efnu&DVch^x^0G16jui83El8=?bW>rF9
zH$JJL_b{vCOMW=1;=?Mrb*F##*8Vp)FDqNw)Z43J_EpnsqOTk_@oCleMdyU%Ta6GH
zZ68(xKiZ#zz&g4F*Hx>7>b0u1$(-bftt*EQ;`tjRSXOcrtQP(*OszGyHebdH87({)
z>mRGZX+;Ob#W|a#@InhCzF8+`+0Mw%8f$W2zPi<_LgB90RnRISIO4Sh_(f1XX<eD?
z!MfF{Nymu$^2#*1r~^zPaGzf%Bf07c`0|%l9j&6$+6Dg9CAYQ{+SW}kbeFE*mZ?WK
z;lk*$in=iPYpSKQ6?KsX*A<ynzKeK=tK3{4-`Y``_`hhA6TXdYzP<O~-RQkrE7g3#
zW~b)crT$wRzV~&jw*R3`zf$jiy77DM;a;=(d&y<B{ZICPYx=J{0lnlz>c%1P%Uyd6
zddW<co1xr)`z$<IxdNT$wwZk($woEJ^(p2Qc0!W+1Pw@gr_8&`=WBM5K(5+M<!NUs
z%xPqzj~Ws=)>Jn=U`gd0uK+*Fq^eYNusweOXPs?vyjG|ls1~*JR?{$BoSD{HurkPu
z+i)dS8Dx%^X)WH&952(J+|%nLeRU*!AKL3><+BR)^k_`a|KE{Q_Potbe&MbqObS0L
zojxZ#sFOu~HGa;V0HHS5r<`rc)ZvMRT2Zg3vEW(*7x9Yugbke27K`PON|G06I^I;C
z)+l>$kgTveWy?3=N$|VYb|+#q)gl<J_^tr>sx&Yi72};cFD4oLaDd{3PFN8o*iT9B
z?C036>au9^nYt3J7l48NmhA2JJ$N8J8kn}FhF04SkZ`JUdSRT>I*Jh03IkG1!etII
zWy;ng<9K(!&gUkiTglU?B|WUD&9UfCX^v{xf52O1t4u0iK;E>zOmvy5Dz94K%-S?+
z)_ziu|0nxEPt<aXds<)1sL-9ppLDMLbGanjq@8W4l@muiOJm0`524y#POBPH`7%4+
z8~5memuI*)*xp;A2Ag3SW_p7O)ETU#fY+Dp2vCL|k=5xiP)ryv9YK1%b%oH(n3iPs
z8d^oAFYNQs*Y38Gy@ATOg!j%VvPrcd6Dimbz_#pXuYe4%T|n*Hz>zq<{J(gF*uMX8
zj40AE%J2TK9VL$MKN=%@PhK72Lw|%u3;y~s=It@^5Ob&Vx#<_5FBk)T(FC}4R9jn>
zThn5ZJEL{Jx}$Xw(CspGzH9FO&7#Mta&A4|p5$;`M!8%i6FLaf0Y}azZqT1qS7;(H
z+rXyryW_}dZ5t10$-bZslWlz)zh5&BZ2d19iOIOWokuNJ;f~io&sgc_uB>LdysUqB
zXEput9aOY4qn~hjp~3-hiN)f*qxkcucLpS|>j=6a^e4xkwBstqF-Y6TpcE$}uc30P
zU?(E~`Kjz|IEt%wUW^B!l{)LlJL_1<D|H;S7HB2@Prg2akhcsg1<UITnx$STSbVNU
zvzjYKt80T5J*l)sSw9}ZO^PfD!tS^n`KRs)_`dSvglg(pQ>liMUX7pU_)c2??Srdf
z@wtW-k*ynZX>NA*<fuD1sQ+2xQQCgS8yy){y?=D&|HCJ`ItF#n-E77ak+p{W%RjE}
z%J!_g%I~YT7lynYPw}lHuaSfMHwc^iglC>L9R0i!<~<xr{kv+1iIwk;AbGVpxQ?=E
z1QOuwO`Mwa=^R>LQL7h9y5dUDV~wP~V>p*nlD1vLd2E9p+^wajfmr~PET4s;&tr;q
zZz(>!B;C3hW?<_094wA?^^?SI3g~3wL`$5jpVp+VOLo!$Pi(sP0moiGeL%=8`m;BV
zgAZlE-!WV6*AF`UR@XQBxwZZy{oZbUh1n-{=24{{y=VW0-hOu8==JYP*^1IL7nL$9
zv&yw%Kx#FW3ePnY2ae%=T4(~BHqwxNh|>3@8t|hMem$lXj?;wx(7@g+8`clrv;X40
z(d<6c-G|oX2l=D^exPpusV!kC@A^R;*g<sNvaG$V<Evbsm2XLBLY(hBHN%GeSzVil
zI#)ph5E)m!!tnhNoSms1v@Qspg+y?rY72h<{bve#@Ku+k%ZZvqqk*nCu&Eu%@Fk8L
z&Q|7pSp9;~XQqZ2qmwi@SB$<(STvh;PZGR*d$K#Il{admoY_Y-?u0u--<?<K+>0!}
zFyE2GNl^X2%HnrUmNS#`Gd7!=6FoO-$WpX(7dE5P`mNiKR7^5nHK|WVzgo6J*=kJ0
z8t;@>SLLJpEEm^knGR$33jkH{OX)b5km<FqCVo*fYf`?J!BNq3IYM~!T1U(92TJgl
zdrL4_wf6|13ZCL=qXmyjtt>8W8ohC8P+q^4)*jiQb&no-3xir(t!n}0uu<L)SAu21
zN5kvVjh?kO>yKHHXGLRT#zC!}x-gEPs?m3Jpkc4499c|21N9x+#oBy6%Q=#m*fDs4
z#G2e{qC2+U;Web?cK0_H14T+3jV{MFGSL;B87uTitr322VU-@KbyBy#SuFj|S<IT5
z)Z2QssGcLUba;E9Auqp4Vz(ax>#EZ3`Vi&<qX4e-<)T#b59yX;Qy@Lk345wP7j`3E
zT$qi--GLbbrH$j?wDO!R)1kIlfD3bKzef9T@h|Ob1ygR{F<y}Nb;8~qX|%TO*R|h1
z8$ZCL;f89z%;PGLbLquPZ3KZ{fIy?3yj&N7^8frF9dgo<LBLbCb5TIoXbrqySKKT8
zQX?atnyvl(QlTRq*U6sJJ@e}K>PG21YfFDYaVmdzUHR<R7nG+8zFu3w?Juc-YWQYt
z4R^k%2CCxQwN>0*Q-z#^mZ6M34NmgjUD<~(aX=ZE^P9XrH?Q)JLtEyFEbKw4*<<&T
zZ|S8+=|M!<X~z-@X2DsSYk>HN07T4v81#379(&z``xR8Wrp8BHW12fPPV!a%KI~Xb
z`4w~g%&g1#uoTGOWYdjbiyThW(%A;&nOs4oPrYk-1Q#82;65tE9{x5gDe%!v7D|B6
z?>tZ5TBS`VNMi0#HGdR5DK3NO#Oe7uCtX%4(dFh{x;1CZc@FrVJS<~+(xxEEpYn<e
zBYDElF!4#g=SS9IPo7tJ7C~B4$V*jTB&B)$sk}-merw7kR}V-``I(5iWSZegA@mQL
z<chy21^47>DQ}{(p8RTF8^Ym=<Tv#W9rxsh^YXls@_%?~s+M0=qS)mgaf8t6N@{r&
zm9~lV0-8OUbHYXXKKZ`jr@Tmh;U~;;UYtFdrDt{Wg0rzbJr7OYwaK}pD+9pfaVfLG
z9tM)PYHpNA!!z}YyFYoSUW_a?$z+a-dXCIZ6?b~@e)-|zq@3wM9rA|NB64J&kL-IG
z6y-Gg8%hNEOxL<IxvZO#?#J<}H?lyyFWyrswo30a>IL_MWh8z5;pOw6k`Joms@Fg8
zh%bx$eR9EH6t_Ehz;6=luPk`3-*b{8nUh!c4RmtyQorMLCEw{c#sMDk8}ORsV<YSQ
zW0ubO+c_s_>_2&`wwl5HlV3SSA+d>ltdk#P@qzaxGp+`fZqEwF1d|g}aiV_f<bC7R
zp4i7ad1G=@1>Ei*m6Kw6^NZU*o%Od?BJB!O;6^1KqfL|Ls*j24YVyRiiqxlW?~w4T
z9+bkR8m<7E1Bv>rlTz<{!gLbzR3}9)TOMFAF;8`p=aS#R$YkE~c2IE+qrH-REY*AR
zyfnuzc~I(8#;`28;P>;ielW|=Xw$=)vZ~;nI@^z4zDnMzXV&LVKB%`}O=CwkC3&Hr
zUp-XM8hR&_T)*;WtaCldHFQ$>VI!SPvbrv-wn{3LN!iP$_Q)8-Sst0KREt(Cp02He
zv*<d4c-BOElXDIHaBT(1VatD%@)(k*R*Qu7o+U%aqsu?_Fo~LXi54s)vpm{|$`QzK
z``+&TKZy2OH`}#T(lTBLd?Lsa#Al`4xrcf3s_V|3=56*AyRyrZDTt=5;SiacMyf`|
zn0?4QTD7?oxMmirh<=$h52dFJPR?|E04<s{4J$o4h1#?1#qmG4x6cmfs!=&kxJc<1
z(fxANah>r5CuKRy(!#YZABJL(47sf1ueV9W6B`WPr2CtD@wGV*wCgaQuaqdq+)4-r
zaB3)_Ok~)FGwdb~i(VRi^)-z}NL9zb_}A=Td;$)IWUX3RwJ6U~8qR%>3^D`8jL1>E
zye=b0w03hpFe|Hdj?9YbDA;cHi_d3YY2w}I%Mg)CB@P`l?YsC8P|^(wp8Se5$37sr
zfds|KNWRC5c9NZ3=KN~RH&lWfBs}?nv!r$N<dXVDJ2*oEAn1>H0N*xwQ|U+Mha^9m
zcgNd)@{>um60+AO&5GL|J84!R_B*F4z?nDpg{Lw}ofPRr?W9N*hwW05e96gte}CY|
z)4XDfbafeCwG#PCe_;yo{rbpzrIkwl_EMyiKYMA?%|E>~>CtbiW#z+-b~BRv2PY$N
zK++UEMjcY2DiEL+if8dB%;;eBiS+;mLBHSM+vfiTF)I@c_ICTRr~?f4Vh$r5JSd8C
z<55XheNIq|SA!BC1u@%&;At5<752CH_P1}D3b#9I6fAt>;dzzUjji*$hq_LBT8`HR
zu-{d&3&ZAoQ8$ZXx~Qhnt_gha8e}N{>|gEaP+%Kbk6jFdPXyL9m=(hSYRT+)co<NB
z1`;7CfYR$Nd93IWxuWF~nygGJm}`??yYFoIEJ3U7{eN2MN*L4iD?-v|E0av7!sms6
z-?!G2slCz8a$g3?4qH9ZobMa<Z62<sY6&&(bCW~7wy4~4C~axwMaNej#dkl&YQw6J
zPP)b}RUv-S8nr5wAC2Oz&T85g1c?**u`M|KuyWnMDLE*I6TrajZ7(TrRxKYk%ITN-
z#QwjG_b;7a93Ev|-f)lnTj)b>rLk^Aycg@UZM*rdJktJNf9PmJYlpck6m_wd_qng#
zWwoE$?t1LP!%eZX(ppQ?+g|zoq`$S5^4|&lMaT_K;lGo6ND1>^!p!HJ)b$_pa1zlC
z53jq_0O1$4zkl+tU<F0AM;7L+%1s&cH+FT~;FI{kt<45%@TI_)MtzYjRD896J5GD}
zQ0yWc)})tIczctFDdIV9C(@~kjh^YlWEWvrCSN6c`*AH~RT|fN_f6tjZMm|w(cZYr
za{HTp|7Nzkcl&Pt+pit{S2vG*q+H1CXmIA&8z#ft-ujJMT|%H>3SDd&m}tR`7?+4#
zfOSr_x~sGHy;9@_apCQO-W$ZLFcv1t;6n=(TE-+gdH2?VV~=7|_x44>wX1bU;_+h(
z-q_Z~a74qo-LI+7%9`F<Z0N6gJgyCf`nG@jCO)${zh_5b*6DVibHE{hXE32MP{n=8
z0jC103d>&A*_>l4r=f{@r7`($&gq6^1BJ(QS5{&0Yw@NiuMlxPZ#KXsb+pi5wK<wC
zrF<Wvsn+c5y7T$f-u}(~JKyeScYC+??$9LMy{YX~RSuj7`2BShV%=@LMn;_09HIt0
z^}9Tw62g0aD9?C&tdi;RwLH@G8~-kk5Fk8~N7k8;N4S&wTOJ{ed?t?{Tu)nnI#csz
z#Y^rJ4|dAYh&yI*l=Y~O<FGaGr(ZDe_EG>^j<PXV#MAL>o;=M%-=S3$|0bz6;fBs8
zGN&m1LlVT3RuumtuR@i?->ck;1d9JH@8ZJCnVuh<>6xo_MipVS`?bU-$Wlk%7{l{>
zT@P;Gj_J>x_yT{<2mAZ+bg+LnzG8!q_;9ed=fq(yQdgr$Q>-4n0XN`#@#bbh*PCm}
zUZx$lbr!LQXwc|c8dlg^*g#B!>UVYtJhAWRc(3jI6z_BUeu(#(eZRu{iGBZo_sfJX
zvtp;Nx3*X)mydD1Q3AiK1iI<=@O}~SOR;moZx@8=Qo=-iJrDS$*g5C7^B|s3Lan||
z1AZwGjFH}^L0p?y#EP8Wxgx^+GPztVW~$H?3eE2E7kax2;u+$5a-O-$bBH{1%5%tX
zhe152gcJ4k1HOu?(aAU(?T?A>zZ~6y%hLOOdb&NPTdqi5xx=MvRG)U6L}%$B(3xCL
z1biCPlCeW%YjK}?SdUZ#1~(23m2j*S<Q#?kLp`MxNyLkHlhPU`4Pi;B+qINWjgypX
zY$>lXx<9a<>)9upL3~!dmS%<z1QAgeCq{IH=-W!!hAn+WFhJX{&d&;1L^UZqa_bn9
zwT_b7@Qw^~9`sHP6J5dt=;(;a9gJ#<Rc%D}c!;P>4w)bJM2%1scddViQb55Z?VvVl
zXVpX6C((9DNGRbKJx9%Wo?hq5<BMk9K~$BE&?N1mTX5;p$u=K_WSKd+6|HcRsEg^P
zHgnTQ>;!({2pZOmI=cAfR|%n&8UJPEa>mHvjFH1KsfVzCdy>D;rr|9&*7nY@-;-F|
zgCL;2a{>o=+Yl<!9;#a%qs>l9Cy~yP+8jKV_V<ZXgF6xJd{r;_Ip~GOFz*$;;17<q
z)C*_yI_nW&kk|Pz?ah0^BlSvPnNY)e7`)O6!wLM3K2@(7y=Jy_O|NAycqwt52Eot$
zM}hb<NImzNdZK5k5y@3$OmDQalCzwjrqkqzpN#nIg?y-!pVWgZiA}y!iE1^IhbEIy
z1drAGQ>Fu6tG7qM=YLl(BC2_$3krt+vwHnSi-rDH34bu!|BT<XSnCzPDVi^N&u=16
z{ga;|{d~et9*y&>3{<`SrZPysZ}6K?FMsee(;&a_qlle;kOI=*@A*Y&l7CBC<y9m}
zQ@pxT#koppy|O4zUaVx)ylBa&)K%-kM`7T+uDa@QoY;CsqMEI-5f){WPcrt@F-hln
zlg{dhZYUxS(YBJ-{u~CsE2%o<iXv!#uTs=HC<WK|R)>#@yi#gezX#naMK(4WN6K+r
zGD}FZM^fWw%CbI^3Sp+AuqDC%&i=PMx9JFme=sNLlz>N0zYr(?P~ahbpJZjs@dJ|v
z50HmV@eA4Mj5Evnp5r;MnaO(su97U!DXP&fX`jQ{it=tk7!wx|0d8_eFNS~l0Ciaz
z+evQf<28O>NK?9|Nol$voXzLCQybWy?{abTk{8*J(yxz&F$7mB=Y?s7dQdnuNTnA!
z&jVdNGupJj61hXfHKBzb!uSH%D0W?yw!XYNud@2QoK2G)pM1xf$ukVWz#&<Mr>_ow
zyz~0W;j84+qX(}Zzj}7~`1Oy^A3peTu;QO4i2WR|Up{{L{HI4RS91=454JKNcIOlC
zPRQ$irVUFa2Z3srt1+$FCOG}jNs`)*9zXu~fYnF0M@QqMqaZ$f{?n_crh#A?m&-6(
z#&^Hj`_|*21~{Oih8-wpPzn(t;Pw0pK}qIW)qD_Tf|~9@_1QWhJ5OsTBVCLuIp*ry
zv-)vyd688JW_Xb8WbfxC!Ua2|R8xIm#KA*`Y)mj=bK>+Va1x{^6C!XpjM$xV5=^1<
zcL%st=O`e50A&g#Oj9X@Q8IEux+FN+9{uU{qGlAl4tmlQYr8x=PpgOJGz*JpoUkvC
zpue|&>-L?yUw`v06f>@AwL!?DdD!Jps3DXV&Vt4ICy4w3m)6HShD+z|>^%Sb&FrEm
z=WnaJ33lrFEN@T{ni`MO$+_POtRh8=zPr4gtv4Cbf-8t<>2z&5VMSI$*=_DEX=4q&
zGR_7A38?2+LKV9mvtfcfN7a$#hP<Nfqc|d76Lez~2#tAyyJI%XrW;pzbI#Nf;%-`H
z8H43Xad0I-^w-JWL4B|7K=`1hMK}GOBj}yR%N_T?^*D+Ov8&1BIV7f&(R`fb^oMsM
zQ5<Q~AU3zIX-1oBcF)+*&8U@9SCEcoW2pmAsD^)|r8c0SESK@E+x`8|9ovq5mBDl2
zvg@Q}ju5ghbQDMD9q#RB^t-oP4Deel7I3{P0WKQ245rTP^}qRg(7qN|Iz*&Kc&q>I
zH|$hCq%(306g;KTP(ZsE;kSJt*%NxY`|T|-dXp+7Vjz|Yj}FSPjz7^!`njBaI3@gP
zkjDANe3oGq_=Xzfaeba&3?@s60`wT`WsI7?u!rbPHz-mku7i|SJ29_^=4nvU#9$a-
z)~pP@(o@vk0ReWUB~&VPG~-W*wz=e=RW_9A6E8ldhPt-@?KgM6plb&X>;)_^Iuf6O
z`T1%Njb-vu-@5w^xawbaGtfrZoXGL`q-zn^B5|PK1F&;cCRZtzh8vjL5e6?A*)k|D
zScyr{7-SsyBVzlLpLIo?p{uKuY~uNrRWK$hvqL<&<K%I?$vgAF?)l@(<kJl>Tk;8S
z?}r4)v%zLRzJc=POrEp%M3z7fikH(0@>cWoSPq9xsQEE3imZB?<!9%OeLu>l%{jl8
z#YOq?l;*ddR9RMt6TGf3833_-AX>$(k>72N^YkqHUDSxo`ybwWrMpQrm$MlHzdNt5
z%DMCQyYu{qJZH00ez?j`-sH_QIL64PkG^x#Uea8rh^ls4N@`v}Pi3>ej1S#IhAZ6O
z7WRxw{#7Iaa$fyWBP*Aq;6~5`ze<@~%J&$`LBhUCB!zietNb7Hk!w5&?Yp{dZFGVD
zvLngd!~`nJjt!{#kae}q(IrQcyzxX89V0_7V}ZUm$0vY1kZRC*<p{NMUMeM^%|>GR
zZI;*G<p44I{szBpqbQ4Q)kR?gO_MpzA*!6f@upm$_xn_{n(7Qub@k$$B9!O7%*F;j
zjV{G*T%n7n5#P|ITbC*QkxGAbOMh&Y{urr<ak|90gvFiGv{;}+6LL<srRm=}-JO0t
z=hBPXwEVn{6<xC>sp><`NJAKq1MC^+ePw?DL8GO4K%;wbZ)QjLAbL*ycEK0)CPoj&
zZs+lC`_FG0f?Y0`_Sz~5N4a%-|4VK^R)==301lNbcOl;rxr>a_?U4^VFdIl>mIJ~o
z=w5R!78E&1cYqbN4*ANZmaSg3E)u*N20OExrX%*mGTe)SNh}s_Q(Z_I#Pq{SSn5L)
z4JK^UB;ruFaO&f(oVZw|O9$DZ7tGohl60%Lb0==7{RcG;1Tg3RfgU&?eG|s1q=9?6
zXpzUDhzbJ(yWtNdN>n2^(FF7`#}xVm-Ed0xl7BLIkN__B_3f{HgvSZ{cEC<AtQW>A
z>A>>BVig(OaOcR{>N&xEHne#CxG_(Kc{(*uB6@dxIEPLEghqvDQwE<d;4=QnlM+Em
zPJ2nA;~f`E4NhFHxe13nPj>$rZ5%hp#c_3f+3)u!<K8aeN0b_`B%dJpua)G>WOo#g
z!P`Eh498PEP3dVH(f1H{Z`@n(&&}f<c}48NQTBK|>TOG8K1xFHK!ViqM_d*MLIsAi
zC_cTP)Ovg$4}d10MB<u+&@7JAz@Q@B-iw9^Q(-vnmmKBzc}Pd;+||6H7bfP4a2~N2
zaDpZXB{$6onaJk=d8+*hkTjz0A2c-6aVrl_JKX*>;UtO>olf~P$!(=6Oi|o2a#1iS
z=e|$$z-Yzx5TMG|!TXRp&)kGiGUvTyqB_gCQXSa(yz17}M8%iJf0$E?9*RWk@Y-=F
zrMs<l4ViXUX2F}eHMN?$R=N?NZYO(7Oqiql@I16}lhhuM=kY8)q0PCuNBip2l5sUe
z^-k~Uz|jXOk=%7c>s*b}aWtCPfYMAy*n`%O?KhAQ#=L$G^LjcM4yTxQ)!|N))p#Q4
zbcJ!%!w_PWB4T+h9AE;(%!YU#G|4O)Or0X{-6D%cZc9OC#AS-)BpSHQoa-|Ax@K}T
zgQtVbp&}i&w$#JUtUU8x!r+;(kvHmU0=<8`0)*!f9s(TaUjgJk|Jq0!JWl9w2fE{@
zJD1fAs!-I6)152$2ru|?nn)NndOU|8l8>@=PQgD|Mni4O*2HBrDBy<QUPD#1jQ8&J
zS2+xtcD{S}&Ynv#AKL3snA=J2q)f_-c|OY$|0*#4p>h@WIC3skx*XroVR=>RYlhCq
z>PPY0lUyDsCl}V0&nO6w>E8|<_=Kb5<K3OHgeM&ij*kcQ?TW$T@o^aP4`p49{=#n<
zjiX+4d>lo?#kHTqQSauEYF$umH=`&RTgO3haOP@!D6K+$H5B6TDJSqN8h8Z1W(gCc
z(`=Ss<aC1Re%cLGh-111D-$gAKo;SI<EhhmD@JsD4(SGB&xDMm_Y#HBg=u^UHqT-2
zMBhM{5q-X-G6D$%z0c@8(y2wjcDfJ>L>WD&pWEa3IsM!j6W&@NrsxIzd_6vxaKugC
zOp}PaFLc5?MdX}nY=dy}Dd8Na@!LdVz(1g2-Q<V(ED46Kqz~MK#bOp80egRbpc?ta
z3e6wsX!d&Xyds?Z{os_%JIr(qKE&l5b4@h)Sxk3QmNtX8F>S>rr=)jrT2rpPelytI
zyrAR;^!wmwI1i7a!NoAxxfu+C(O*HY4nIV_VB8x9OUwOB?^$F>O|N)?fcoMDK@9a|
zI1xu(%?u*w%W3xOi)T=zF*54W@$T@y#=B=-{_TUWf}UK5V0F`#*pCdp81CJTe1Dls
zSL0&R+HHI+B*JoLLg9(whoQ4z|IvXLjw<MX6fg|&-DC|1)ICbxQB&Cqq8mYcf`~!}
zS2u%dJO*^a@^gZ<pO%Cgg%utmSV}a_hhaJ}Q}vL5Mp+P&OP53cU~c<52Y*;Ny4h&X
zr0!~j^_e;*bV4Sh8M`$zmN7|kDV9S!de20kW;<%HK&zvd%ywj-MF#|>o4mNpmR&UT
zzi2vW%7}6f{?(IKdjAR##o#2{P{iZEq9u^V@G=s0jM<KC&rYIzeT87OOTl>K<Py)5
zEPqEC|DS*LAUocXDacPhP)ohw{}F)<E~HDn=&dp9ksbW=j?n0`i+S_mUy;Fg4{4DO
z@9DM<4zWno-bqr2m!rdR6mJ%^SaOA)M4uTv5fLlxvhxl})tl~L!Dr{<M9)Pp;mJ50
z>ZKjbEVPY!CxWU;muEW~Tnz2Wy>w6R|J=D9(ER+f$@xzvhQ6Lq>c4m*^bF`hZy-&>
zy4=C@Y8Qmr(TAfQy7`j7HU~F8EyHMZJYF2{9v_b*nv&r7_{N@VZZ%(5M?%GqcX6F|
z6`T3qV}urOVuxBgaVrLqS`$i;LnJ*62$<)N_kl}|zLXq`4#staw#5zI!d5<1;hrr7
z8VTV}H}vKnsAm}B149Sk>K{xjD4J+cG$&9r@j#J<qVp*2(J7cm_R77)y9P0Idj||q
z=MFRt4jQ>s2)~^xh(Vy~u&44~_6{l6O}LWiC5Oq}9P8m+L$cvzk4PELH>3$s#dH$V
z>{}puu~X_-(LzFqCQMRI^-VP_q2W!9NQ9;|O~TWm&eo4@#z9IaklUW(H@Sh9x!3tH
zxDgDht*ujDF#5)M7B>iIn}yze6ZBHLT#6|2oGc!;4EZ`%H&#m;d%=CB-eCu40#|!^
zSxvOBpj|=$hnvSk+M^6l3&SoHOHobuv%P5JqAR7wR9I)zA}ai9a22AK6tY538e5@9
zi>~Y$Y=xyS=600>vXmIyP|zK=adq2M_Aa_|-z%(zW|1y(2{j{QciM1Qffupuk<+Y-
zYITKT(2PpP@`)hf*fTl?%`*O`f9r0CHJK7yb+CUv<@LjIR#q=B=b#0$smvjy8clps
z&ZhJ;%`fOLl$r7gJ%Eo}&FC&hBCI6gVk$n*r_-#U2OQWp8DQ?^**Pj92=#`3s|<CW
zLFhuiAF|o3yyDN7D1MQiK?F)qlMg8}T%FVUa)I;%vYmaW>Nz=k!8M(neXr^|Is3!Z
zM%lQ&le0rp<H^}Wsq^IQNNQcW0%Q&|Wr-^|bjWy4=+iR(_S?NL6o7v7?Kig~9U)32
z#QksfYzidBdwcs%3dD%Fza<*nq(E}~&DZ<4Z3_B#_iHE19EJAbb7|)BHz#4CBO^9|
zI}X8Qc7hSrl{)5b99Ej!D7IM<-Kmh?1!+@VLK>+3PH$Ayz~~d*9D{&J-3)GaSk&ms
zYnkaR4s7RD`ToQ6(;c|!s0og6BENX|M6<$nCUVZA*p0@m8#!daovqqJrFF_fqL9Os
zfURK%Lor14Qi3q>AQh3G#Umt+A;p}qb}$Z)j15M{|9>zz)6Fj&9f0?eZ%woDXYow$
zDtgAXc$NcDK4@Oh%7-)PR^9#j?w9R;f3H_7=OJI&*=c)cw-jmI{hW61=hCVXnEhO?
z+0T>mLSiSH7^Gzg*ja?s&pVMjF_U;=CT6mXaoWCM5;TW8;TmuGN7$c?`O1XNR)E9F
z3UIhwnZm>N6i$)l&aHi$a*FQUxpg;+KPIO;1nr^2AD`3n#Ru>s!aa;0EQt_{?acCp
zhib0V^U7q~!xBOrfD8RZHyK^jSwqx~x(egWBdy;l(O@?EI0mOP^UsyxiYC*r{fR|{
z%n09s+WThM5MEgz0^yXXTyS;5Ms%7ZEnY66=$gS2;1ovJvk&x&pdNy&z4bQVrMvkK
zTbs{}y*9h9(cC}0TREHFX>$uYfh4TJ7I!*Dk$^S(<5gHANQN@;GB7JkC!LjoPrXuw
zMP(d=%d@O`Mn^ww=#%n5&K$4|!8q=9^usW4l$E2+9W$0scw^Sl_^2V=2waV*RjQX5
zH;!u4w5u(aX1rJF?9DZkDE{7kok7cQ<*ieqcfgs9?w?SJ4b=8ul|m$%KxsUp5*$Ue
z%tj~j7>aDpxjvBkD4Wdc)&9AT?T1|$wD_<^wYJ}EI0iy!N|myBlHnOBG^TI)R+w8m
z6fOWl_#ag!wYcG0Y(;DX)Ky!iT*jE%GOo?mfDFs1H95Fj{>LYWQI)RAscA1k5#XOr
zP`g4~(|<Ziy2dY>B)NkB$EQi*bX^lAkqZ9VB&}8__57z(Wb6B)NqQ(ZddDoayh8iU
zX-`K6BVd8M+nxdqPIGG!UZX>`is>~jr#Mnt*qKtoE?i8n7#}!vFruv>7?ev3e^ScE
z37jZtF9ycKAWT&_1EO=Gb2<$t_JXX{1(_$ce?c;zMftPqz-l$WL|>n?=o0}|V1@en
ztmXQ2r}`qT-aN{yMn_-x0<8LfY6j^ZA`F(v(a<`gni7(2rlL|)Q6|;ORA6#TnT)mb
z%dT`R>K)nk{>LW$vS4Rm&b*(<yq~n^-6&#1nCae?{>?fYC$0CMmIga5RDKK9juY+d
z`h}eUpL~&Cb)G`@Cw9`JT$~b2yLi}oY$+*?{*_onn`-8`G?-uM&9TD!c1$~=#R2J_
zFKMWi9crm?Ks_FUs9DvBx1VnCs}zaMq>3_;(m1ypy=rfwrURX$jZ4tc*|)8V53G^F
zlzMH(J~8`iva-MG>-HDSDkd4h<bGVcM|<KQ?TNR=<||vQxR->fzp>_H6JOgVC23E?
zF+a4%+WjQ+&wfz<$@G8OTz_t+CHmo%XaqCUshVlTJ8aMNgy6_$XPU#)PRv}-qfaT#
z_1w;N>dkfCG1p=4Pj$UI)%7^Zd*wfy>MFY^-(?Ta^Vup~Hi6cS+>`Y}Tl3yA$=O&_
zFrtjsMZ>76$q=-_8)}=FpcT6>_V9ixTgLyBK|Ywx)-iPGmYH@@NoEH$Y6sBZy&aG#
zIO7dhFLMDn1e+?e%*_f+_1Xhh`Ew&-Vb5=9v=cLQ_``)T?qk@0MHcB|!o)#^5QKp-
zf1=+v)e}wgWOhkC3QHj^5K!QhFbk+Yt09{#@&#f7^-15MMl=P?jg3jK9~_S5htDB$
zvU@ly!*o@)E-yMjbyrd3bW8G%T3@t7i*uL_EH45~kHoxn9S0}CrEQhbh#)4C+ue-a
zwEEipGU|^_g~0p%+x4xb@wfMEO9sNOhs|;=bj$9tC`&Fv_J5)dnO3wD4eGqs$Q~Up
zqju95;5=a@D_cdfCY?yuM1khHI-pxy`f0}jeBnF}^0NY$y#djuf^nU$V7f*tuqw;O
zk|}iSPs<5oqO3B3iDX=d$DnqeJCa#^;*aD+jbxUbtc>I`nW>Rnnvq;~jpVX(Bq#nz
zPW+K5Ix9;EZXei0KKE;t_7&iZRvbJrXxcc<vl%<Yy~yi2V_iGU!G?B~9YhDK3MQ&f
zW+Mt9Q9^#*7@W|K(AIOBxUn+;L*c9M&_#F0!i25*mYZ*^I|AbOeX}|a?Wl^ojShB=
zK~?#HyCW(a*KkQk=i|kqp!GVr#9Gna>46TjvRT*4Qf{zFx3<7Ajn}M6MVRi+3FEC>
zTd->B@~+<a*+Q>a;(c|Tf4qcB0o(_f%P!SDXO6DEi4P5&fQchA&>wN{+;RIV0c7oh
zE&mqFM$K3(HbZ_a;sC43;{mFjR_R5p-}FA<_r)S}?;3c~S^5Cd;iLp=EIgeA;L+Al
zc&Z84wF<~syO4e4*GGAC9tua&5gNM+W7o=n3M~UFu9X4tTp0NdOfA-IwN5`pL!bF!
z*&I7f$?L>1qL%|KCS6qeI@Y7d{mOG=SwP+z`Th7(;n)4WA)#>tHX7Y?g<y2ybWVX*
zu~mrWD6_ryWL-Q04WgUj%9g`np|4?N%P$8UPM}s>KmqObG7no2PGaOjSF^>Ju~dU4
zGdX!%@gIlUblC14C&VyyVE?YAjQSmpCS9~xe^;*-@zVvsVRz#?s$>t1)+ly1PWmvi
z6{(>Sk-arCLh%9YS>(gq(`Eqw(l-_IzYB-cm-w}6pf&QoBW#{yC-j!`YAM}YF2}Id
zE3(2;)aK1K11N0@OGheqcoc)+3ky|VA)gJtw$O90ki&%hOt}Ys4_he6x>Bjjd%-o7
zY|_eVp`G68ojw-cI@gsjLvP=?^Myv}U!n~0_5R(vzBt&IZcf_LO$buI{r1kjFGz*X
zOT+@yJNtXzMlE~g)Rp8-+G6Cm()Jcg2ev~&VzwesW*&F&u&!TzD4O&=V+}zJP1Lk5
zizJI74xR0sLP@`7m1cSq31~8j;yJ(1XP0Mrk<6p+I4ISc8$6}Lt8_^<q#B`<lT_4?
zNjbZ`pnE48m{k6;pDOi0DOoZ75m{25g%TdB3REsQ7R1gvq^mqV1G|%lOtUhF&$X9L
zI(hS|B3xl>Yt4r+hcy(<=Bz`T#MZnH242W#0bDY1L+7~{3^v$7n47tmD4y+11;WPD
zAh<WF!D5+THur<>nHT6tiJI?VDx@}g=4;QqsY#04nK#sT*%p>uJuk0b@@9Ze>sro>
zA*00OoYEyzm%JP_#ln(L2P*m<6Q%Q=wq6%aJso!rg)oDXnblc<KS*}AvU^+&kBeP4
zae$M&i}ZbHhP!<$X3rM#B`@rk-hP}LMfh6d?UP8$FMx$>D~q|OUlqd0=aOh1D4NBG
z^iXBfcuK#}`fAyI8_l;vCZ-9dbbMt{CB#9Qbmqvk-<gfvSanQR+}LPgah{~Ty<P#U
z3|h?)fAUCcZ`M&S*jQ`?7-7yrBus~<Kf$E6DD)I4^akP3Jww&TjoLZed#*0@U&qZ@
zWwyX5xF1Bl3Vx<(-yIj!jd`zxCa2~op=a{lI^8)&*af}otjCCMHkjH<-rfvdLt)xg
zR3p_XUC;r*S##R%b-n!!?ofve5<LBylla8k+$YNz8Yo|OtK4<3hi)As|C;%tOXbV2
zi&pSzt96vEf!2nsy_Vul%CLk}BD$gJ?<ZNH7X1qr8u-ASx=oCE#JN#Ax3HD^n~PVE
z7JI102%3A;%=UHw_u4o3hS52g<J3Y39TzolEw0wIUdDI&{o7xtGu2+#bY)#9E9+XX
ztn0kJuD*6;?XK(mGumY7I&HE%{DcV~Sbh%{EsBgDU}=>At)AJ$E=N<o$ZG1{+Edsj
zncx?~c#yS3QGYyiUk1jT7PB!*Ry3|+wM!iPjmWMb>ySnVGlOscn11{qy<5fWZ7xI6
zuOjzrGz*vU*R(MI=>hkY*|1l>^^wL=z?V5<i%#^*vnjpRMz;-H<IXptF{`xPSi26Y
zy%B5G-P%VCRcO<FbL*RkwdlV7de2pcJ2h^1S2&fQRgpUt{P{qu#7l?cj|p_RQ>6(1
z2@3X{<ve~)mq%f_gU=Or@H~0G!X12&oGYRAg@z&z1d6<V&4~Z&*Mmz-0xYA03-ptq
z4*%*h{L(HrcgsP?jWq%;40rKE^y&FdMn8tT_*}S)G@y@0El@orpChVehQWY{KWc2}
zlh{G(_xNq{Zbz+fd`8pvj;`(l{WUpLj)mWHtIF_zvnS2y?U)V64Bhn6)A+!7ISfCF
z!Mdj7R<qPPi>41(vrKgshp=1CHPg8)eY%?I1ere1oW$L$__&VulGFIq9Kq9Nj2-^J
zc*pMD>a)+1bVsm<!*u?zENb|aqJ!w9eh-&RV0Q?>zI*3ewn%5>{MQ#hzAAqv{1PVV
zFy1+TRX&k)KBc$&``_Y}UJ@{>%h|h(4(cUN;t9Q7HW}->-tG5qfkG<?Xu|qd5ryX{
zPt<F~I<Eo^9;on=VE{jf;>(F0R1t1-k$flauHmGIXt;Og{cvlGkm<LsDTRR&nQ?is
z3dr|50r{Q_$oCkK(*RgNr@ywSj5>t!B?!h+7uy%<UB0(B8)GK7%HICDteb}~UpnS&
zntRp|+NpinQbow5@D}maA><A_={8n)M86(io@S?~23epCbSJ?j$mQwjY1T>~N-gJU
z{oV6JFe7ZG>OmpMds_WWXWfen_E<^Bd-L65vHREYRc~;-d%U}=mDuo=5SOWbw1i(G
zDFd5us58;xZf#u{V|*4d=&m5D4$MtOP@srWfK5@%NJ{pDhHV~3T<yW8X<=(C*Ayf-
zs0+W4%^T)mshH1(eK$>ldknNTK&b}3)9@|_DK!$*xuHwbxl=Qb#bSV&Mmg->UN7WV
zOAA*>LU+=WHLok2l@YI;K>rV1?X1FR9{7rEeI_rpmDIhQS-cH+++|$$5|~1(uf4qk
z)o{`*MUL2K((yh4@5YKEqcpK^zUwLo2+g<sgY;f~08bs+y=Fv^sTbDU>HYhA(KxD;
zi7LxtAZcULqsqZ#oE)4GjrwLuPrW@gp`X~^iD<!?NVY+?-Hg&PeYE0hVF7i^<Q?mP
zRj_cY6D-_v!NM&K7Md<^Lygu&VXT-hl@<0-vm?>WG;L}&jBE^|RMmG{)Vc713ef81
zOlWB$g>>pf5v|<~)m}rhm4?jsgDMf$6m5{1ZKz6WovQgNM%1@iXn|<ER_^zu?%^d@
zClWc%SyuU3&Y}-2f~IK+wLctU2cOeA8OKS7njbbi<oX7(^70Z(kLXQxt-GAcrAw+0
zwy<HaE#pIt*&Omo2Dg?uTG3#oXVtJ#RW`aRw*%Esw^-@V`O?7F*uWXvM5J(|cBQfE
zFjZuF3b&-((SfdU89RV3JYgReTp#;SIk9lhG1z98;*!aMTgb!yt>h@lYIUC_rFgul
z!JqF`SWcJ$jTSO9Vj}gXGrIk9)cAy;h78>-O|xWZzd7-_ZB+g0PA@q2#dXydy4q4B
z|8??-CT9>LGOKB0cw(P<)d}4(DRIYW)F+5X7K;;m70~~IErA?$E@$q_#M{352-}5*
z$0g2T7o5}7Hs`Z0>{E7)$YcS1Qyv&rF$~VTp|e330B#P_cWFKYGeWDlZD>q{r3`eX
zsGD*|cjHnZRjNiy*knV%@QLU?`gXOr5H%MR{B)~TWN+K`N<J%S1T6_2+wgNUZ@yRj
z8X!orqvJ!+=~|wP-1+Ltcer$LxNxnOG@_^^2;MOY1TlicR`^lpS%;HXqJ9q=YfIf|
z{c%F(N6lDy!Qso6{gJ?4S--ZGe&?(sAcW$lrP+-fywI5%#+r3jKUD|ajg&YsgGbMG
zLcEV#TOSRl;TZtMN<#QHTE^erx%-7?iF>zhech5necLk0z18LydMt-Yn<V;DYd$f$
zgZB$<bO%kIix13ZxYOUiD}09AL<2=kxrk9OlPvxIZICP>)%*3g^hjN}{ms{r5HGiH
z-Mu9Sd(5o3NIq$9)F61I`BE`<<siUT4PqfO2Z6|3=^MYvGl*R(M}N~w#hX@?>mX1D
z76Dx|$tMKUp?&r<Umoy3E75q_tL}3IQl($rJf6`sr`f7G`BI$zN?-7#T508d{624V
ze*G+E^qVSYGE#f`S@%P~qkrmoNu=ACjAa?0!Skx7>^?Xe7M%_syVNdrn)9r1qGnpz
z4rrO=VkBg{R&ZzwkQ-4Dn(x5H^ObgTGFXvmOPD6+#QRyJm^F&Tcx5;$;-VL92fZdf
z!xJVX&<{u+4;nX9cNVugTg`YN1?9zw0BWc06BrhB*Jkg4)H*CwJK&MCf6wB;T}5i4
zCGw`+vb!m#UVF-Q#M)A5gIy>O`tiG*ZsxM82XK%n&-zoYbT0;d$4$$Xr?+*YEK|Qk
zV6F;X3BQj(9TxjNAod%NTWXqO!zL3MPQ@=}Kf1yIXcW<>8Mt{iMQ=1q9*kH?(R<R0
z7mCF~@eb%orf$>PX?Y5Zk_b|%a1F}f_QQQYkE-N~C_U7L=vs0+bh0H%^^t#B6NR4$
z_XC!}d~*BB(ZwWzj^Vq6Yj(W5qzPP?)hueKI$@?GFX9?6(g9#9^-*3TAi8+sRQ0Sp
z3&WfoMrlSPzdfOfDZx}-GGA8k%{;oK%ktEyL{yQcSgx2?D}r9;o@>;-qBf+W^K3Rp
z;H618!8Q6`IIWU>;1rD&U>dyF$~%Iq*NNN1veL<GmB6|{RHovmXG7JEj1~GMEzDIH
zqKLJ?tmSf}7ztT7HWOH}LEu<>8MVJ_P#|g0j>?h%a~Sn~z9jNlL!|opGL8_0=@(N@
zFv~A5EBRd<^NY(;UaQV8!0VcVABqW;K|b4<h*v)|QYonOIyRG4L0wt39q25sbBA9f
zLv|~0XBRi%^;WDXk*YS4Tf_inb#O#Kr`)fL%XxOOaFI)VX?fMWQvrYZ%y1b>41Xqs
zKd+%R%b`{57sbRh(8b9qd_ZSM!${W2OjE7df;L4!L3LR?kX}b|D}!Sg(cO8?$d&FX
zyLXdd_`Iga(dyA#&18V4(-Eg?+OFJRArMVG#6-pYQ}FEbMmJi9CK~b7iw~imkLLx@
z0O+<{)3BCZ{lDzJ3tQYqwl?}#pg$i*8U*eJjBT}*{_rhvVvNVwaT3DjQ>%qh+(;cs
zZ5u<+Z$Il&msOG)aAs!jbIx<}#I#f@mFl``)w;Z^V*i|~>7QfUMP%`3#XESKkjK?a
zJd5OMDG{M0QNr~)TrGfc82SaV4}I%^bBIG$SXug16;^F(7L}lkC2v$HUjoe{#9GO0
zJ1a9jYS~RbYQz9hEtY&=xT--PWo{p3!h7JB#TD+6k~_)HP)!{F`ZN{1QP)Im^G|9x
zc=bq&Sh1_1Qy8354by@AwPHF<m2vm91(!OPO+l5Z$<0U^;_abD6W!PTied@{%_{jY
zl}UFd%yMKN)SwWEtxQDriy&>gI$ux78%)rc2kz^@u@Q0D$U_xv&+5F(vl=)$vs}?m
z>Vq%X>9oZ~<M+_#%&ZsIo*RBpd1srsc9b2fU>c1ni4e!e{95bj7h-mo?(8m=E3oPw
zQ_wYjs49*~%O^Q+_$0IVCG%8I1Qa=_#L=qYXK*a}N3zW3qiK{3Sq#QP6#C38s`PYG
zY^87Ac*QC?i}T4;p<Pac+PIonE%>U&J!m>GsYLV$BzF%j2kkS#o!y4Oj@i?C-1fBA
z{Ew#CH%z}JJ(CVqsG23bE)pPxP9lhDbCn6&nztWz87v6T2l@t_Bx*Yl))(f&!^P;E
z-5za-P^`aj-|k-araTh7c1RWkQpGiN!?(ysOD0C)JH7~ZAUiE_o0bT$3#i@R1L~vr
zr)2CSjOyp2{Kx_9h=*EHJG`(+6!o~#)4MhPdi2Q=M?m&yr({05r9sn58)J5mqy#;L
zlp=(pHEgP**UudB)F1LLr!z$+1AiZBzc7fl9o+(_r<ycwJ-aKWazX4Z;n;YSg4gH_
zQ3^B@m;p9;Kxsk;%!B=45}fi1GFGI()R)ZzBT}v5(63;qkay-IICK%|yAup|+Ybec
z7WGm3JfsI(A!$$RN0NopieU7Q#zLaOeWg#uUX~Wzgax&F;gyD?6&##-dq=%(@v*Ri
zyMcQCFete)55vYAoIDtWJa5&D1C-^|eT<DkBerW8JG&?_gRfrS3G4NB{jn{l<on@r
zW^uL6Evho^?WzVPZLX1fwU6Z{unC%Xwjb(u6hB!-M{m5uKUQyS^FUaeLEC@ZqW7V%
zmFkzawzpaG5w<^(_g-gTZ<)^CdKk>qCrx+jmpFa9(cRnB-2>CzTjZ%x9SPrJqOzTX
zFbJk<7`E@}&uwixpSy3;`%e19(5MMJSnSqV%=I~>BXgjdvNH%K(Txi*{?}I<&MIIP
z_ARRb%LZ8mSSZNKop$Voxvu3_;B4iIc0^XI#U0=n(L=5^%7bx$?}_bAPlfw|+}L6@
zPG&d;134TILkkwjPlFP;Gh47(t2)E3v(mO3Yk1pT!_Y&gOBe8Nh`&9AWU;lV>SBhx
z2sDQ*tb(JXtzfW?Axfc%b7JD?^_?9Y4i9b43_E9fbLT;Gy&!Vk2jI|uMHgsqg0@lh
zRxjAu)y3`V7VbDyYUhDYzvs;Fd;L(g`5roL)!U}cI|Hm|icQ^Ch2Pr_-GzH^8?u}d
zx-IZvS#{>!GkJGId4zCI@i3(0az3kpOJoV3D}zQ}S{3r(roJU1_R-O9Fo1b`1cYQ8
ze_<s-bD(zjcDcvfF%ATi)eWpjk)JKJl%T%XIyem7RgRH$G{&TKkwuYwDoz;rF~xI{
z31s5!Cb50&5uACURdh1wmTfEpF5*K%Z4XOr*0wZ&*%>O)OV+@Df+Nt{+TH&;+S~Z;
zSZT2{f4N^fsYk5UUq)7cD?MK)lnq{|x4DA&)NjiR<m@;Uy3yTx)_TyDQLEVTP&j<l
z-&7`qtA9de{qDx$6JyLp?ZcGZD+7*cl8mx2Bkfe;D!Ky9c$6ITDY1)VE~$&KsEjiE
z@*G&W=RiKFG<R?(l%6|{e6#VohezCDm!EFZqtxz#NaJ}YM2`clvKmT@WmeN%T{#CD
zotW#R+9jDQTIT^%80owo8HgZrBrT5IEXM)GGN!|6q7J7{28{OQrjV4%0)m?A6Q+%u
zQ#&oUx3E}7eN2EMx31}3hu!_9XPSM2LdR$wbe7dRJ}a*S7FnbZD@2ZEfGB}nbxgK{
zG6mbcS|MMi;a?RuMu+p1SN|L2sD`$5;FlGgsVvHZw_#vBQiu-K1rL*nX=yM(j^uL^
zc*q2-+nhuzs%}^(FV|w0yb0QxYr&+gXzpUb`W-^bqxrE@z8L9t#s%~U?F9N9#oGc<
z&3fUn;kB_-dK-W6haatv2~!_OXZpqUF!>mKG<G8&gS`$X7VjfE5_G07g53wZgIhW>
zJJuj&bV(+#oi?5*orM{%B3rBufKBhiRD+8tCXMlG9u-nvG&hpld21`!H<H`&2;U8R
zzyIE&m@8w9h&CJTV|X+eO#Fl&{;l^nd<gX6Z=4I$`|#;~KjavE`=bixNyvfn;0DQq
zS8YV_GFlK;NGuGp(>?`or!Z{E$m=098LzEnJj>%v=%sViJ($M&Ax6&7M0Mg{B6l*e
zM0GCUuRK&qQ;B{@k=Y`sW^vM~t|^rTavB`<R(b&%A_o|k5;t5lTZwOaDd@qOv+p|r
z0Lq{=bE!nvwXItk7d7X`f7Dlky&uq5Vv?08!5}XQ?Flib>uHPuTLKJVQl&GpFCrI<
zhBL*fae4aMaC0~__b{=>YiskhwSBZYTH@@0oKlcMN4xNihE<GeV={Iy!;rdoMFB*3
z6F`KAoUaRdZk++L4pa85+DB#U5^daaXKpMTzdTx9b?&uhF8!1hb6AM&ZCpRQo~blv
zO`RR8S@}XbU=j_=8yQiUs}@8pYd@5|Az{r3Zzi&jF!5}gPll=UMZ2OgC}HCntvuW<
zrF@+Y7_7609Ut7-$grc;E-r~{*1)*4nJnyD^@1!vx|Kf5$5BlqWjEqzd)!A-tD~R9
zd0y0HTBZ%ayMdIhu2u=l6Y1Y-_XJUPn<AZn<+`C_xJC|maaQpfubybzgKwVFx>c1^
z(CC_H;lHCXD9}~qc@97_f~}T&ri;5rmSEJE42oGUv@(pjYoHJzg*@Ikf7IVa{b9Ya
z;Y(jTFKxbXR3H0FqtR#UF*s-&V7}h}TB$U_odMMX`WW?mHN~kAiNsYa#5%n;v@4F|
zzGS0v{hs@y-|znZ_y2YD`{D1^@!v<k|NZy7ckX^TCpayu1x@Q4Cxo5R1nM|+x@##R
z(ZX%%Pgz8{OEl0{d03#n=cqt~VEkc00NP}k%IR@OrP{j^qf_Iqf{05&qd-&!Sfa8b
z9LF4?K9OPkI8R$Hl_w(>?B+q7rAK+82J5@tP|u@w1#`2D2<--m5njV2M@n=J7HHu$
zmcuvNBxu~<W@~bGbnwX`icQ9+IuY0crQll~M2!{FSm0hv)S1plC^YmN8PM9TkrXu(
z8qz)s8cGqdprhd%(tE=6H1(ljPrNu_7xPwIGa`1^8(IircrDpbsz)YXdgJgAar9>5
zXsOF+N&3HqDB9v2Dqk0m<0{?VxyJhF@%;2OEl2!A)7+E(GQBYu;D?`qTos=;$8`~V
z^E|DRc$RwY*q-Q)E{vBZlWV({ru<N2`kJmC^(Jv0hd9_-Lhs)Fqk>(ND-$T758XQJ
zCn4N?!Vbi|ZycB|A<j3JAt*>)2)2vazG7YjtwNUA^VfU$dQZVa;HhG0sJY>vdcT+G
z_eh2u>e>*R^{8I&-TiylUV?BbD}TRhjU(-cZ!j!VH6L}6#JbSUaEWLa<;1ComFx*s
zFI$pyv(xRZMd#N8Z0NcnSFIJ~z{=RCNBv_#T861`1d{_|Ximg!utX>Ih4~Sgw~$}{
zCAl26%2`P2HJPY!@h+t^+rP981-fe{%KL7hy{!6+K>LQZA1z!Ho+d-+X$GXl8R)LT
zv1#z(;{2kXID4LcQ_@@W9fwrdoQ5PE>4|<EnoHBO79JQoY)KpdX1xs8^{8ioGmw|*
z@WOJQyGvX-{M#JXUc{`LX=AnYHhbF7;<m(zmO2J7aF4N)Yb9LTIb=vB;fEP?4XU&f
z<0$lKixKrZ!am(4oYn3C*Z*sT$WU#vFQKq;vb<hC3{E>}Ld$t5=Dw3>`3PW{#_kTo
zbhS83>5bS%v-m%>GF55+XN4nq-r8Ysv83{}aJ%Z_w@BbEP_fKj5E+QMo9T|$D+NU~
zK!8)=`&_~iN16)t+Ek>!oQjA?3)i~w!jf$fOIe{C5*9M;R0+ZplF|;?rWrAe=JSje
zSOhXjLk4aPg33rF^cBNKjSSOiBEI4r1g<Zz9<p4v`yzXtiahFLja(WhO&v)DC66(%
zkokDl`rM$S@P218e&C^-yAD*F-~HhGBd=IDkOJiVjtYwxnurk#P)0hQ%0}*o<+{10
zZl?NEM{Ae(N@;4Yt}YR6IlP2nRG2f6ty21&3a+R0H8>|QEOV8fXV3y5I>O&oj08Gm
z{e^LW*KQmI%wxvjw$o+n-!)pdpP!xMx>$59`)k;qhA0De!?U%uuWF+t5v1okR8w$M
z#-O;@b2j+vmnd4Kz&u0SgQN7g%T4xR5$xU@Y~9x9^~Ok?ZK*VSq$b8AwUXYa<Z{YD
zTI7h@09R}Hvt=p{&9F3HY-m3xoYI{>kxp$VMt!Vfg`JRHv$`fBai(sN2&-c=udJly
zg*EdUr3RHK$yG(tcZLj8NmO6yd-;s{x-4cXVu_1a0_DSV+3kxnR<1idCFWG2*qb_4
zQ1~))Gq059XD*Dr$?Rw!wX&zt1hukX;b(9>Jk`P{(STDQeW;ye?53|aOjmZJL)WX~
zeNle=e}hYxZTL5Nb9KCSlM|Qi%j^BOGz~eSvy&`=QjFV6MM5QDFFZ5J<-`<0WH6D9
zS##r@vcw~z^|=TGuHMph?C4nd1>E2#Ci33WCG6z?_X%@-!me`y`xpJUy4-D+Yu%TE
zHa@&HDytjqxEr<6-GbuQ7L*vogbElajhKK@T+S~DPJzMO#=Jib7`BmiD(j=aFU`i0
z+NLCGsLMIVg|Ns}6v+zp4T{1WltVQ4IryAwTF=0rX;AnS*RA++!RT-p3s&3Dq!^De
zGgd~!9y533xaFWVWuuzxE{fx*_Vq!HvW+OQ3|(N!(pTwAZ8P_ERLoG?Qe|sv4Db<^
zgix~&CBgnnMVa$bPM+zLC2C!5p!C<VNS&ZznX4Q|UN%x1U<_NPwtfs2hXyHR8fIcK
zXbPxNRTXM%906;A(ZO0_+KSFFZ7L|$uuG_z0K*4)M_OV6ysoFxJdHr7lV!xb*o~MM
zH(cW=N*VkywzgJ{y#y?5X}5n1av*b7LffMqDB}D>`j|q_ll}*fCAd_PwRbsHd1hv3
zg*4!kXW^g-6$S)L!A?0(4R#O`ZU^{MP*U7zt_4kt7&HPaW+zoi(ResgN-iU$kjt`1
zE{AUPw;PDHj=dvpT%{kRYcJbYXuI13Z2!gOG#{pp7hx)#3@<dIu|00^RuVV_qh5~~
z!By;GRrX=2PT=3L@@potv=Zv$2*aMpX(sf>MW-FWzgUj|qqftyH3ArN;Mf!c#_H<0
zby*Vm^WRY;b-F~tlDhI=HR)vRQ40X#)~`D<=6_@Lr~)0eQ({U45Wj|J(N?M!&x%W8
zM4W#uQj#%^MwvlW46{eEi9w(-u#zZ7f6+wgEk-q(($ynxSv!HCp@cWlUi=*cg;^FF
z5RB=D8|cwS&r82_srH+FBNZq5dl+z&=X1xvsK}e^7^qKLF8v3;wIRPXUJ@<0i_CUR
z^0W~PGVTukdQE9!PBsfGyF5&r^KY1%O~7%VG11tNR~Y)KNifvbekcBX-I<0E*~dO|
zKdPS2iRQW>%F2G&Fi$EzThL0Uehbp8tByD7&uN;Ay{Z#tPO#6H7+`||glY_}eRV~S
z>hVkg-}cRFi?wk6)*LmpKlV9-o9gMf#bU<>*A(}Vm`t8s7CG_#93GI+_FG_Zxb-7_
z;gJVW&A2y4v)O((SzAlgEBd=`0rp+X-N!m6bB*TJz*rJv<*Q&VXg@>(t<B0l3^G4J
zdKJ(|E*0K+SOvtig^6O`fN_Is_^X&su969_gNF@;G><kd?6%;y0-ZQ9&8RU9!EWcu
zOaWWI$g8Y7T#XI*rt~mI&gTTEab)>AWOG{?z%)K38jlio8~~v1BQK8zh#5Ta!yH4I
zNnqZ>BBHkH{kZd}FX}6+K#0Rk0u>VSrrUn=R79BkT$B@s*|t4k<G*sQ;Rc$(v0|~S
z^xPsZiJg^s_vOt{2(I1zsj*F$48)=_NT@|<muHj&9i>_2!1`dJA!^;+_W7{UW5w-y
ztXSG(g_&i|2kTsdaY)vV2&}Qvz1G!NjUEcsm@ln^o)hR0hW(eDvYY)TduzdWq)i%i
zx4~xcMJ1NyrRVDd<4%XD-0<y3+&J_RBJGI|RD^CJT$4wUZmUnl-!O)LaLJ^IiBRr9
z2>fTlej*H_4)jSS>YL^9K(licYsCuE0us<(?q3fM`ptnQ8xbGXlbepDW-Al`P%4F3
zVlJL}XVyVAdLBJ^g2tQDGE4y`EHM*EwFlrUVE33sr$v!`)P^Za`*`>F{P*f|XA##c
z+HiyO`5iQNsGddYSJ*z-Qi9%{HS1C+l=nd|v@VLZT((^g)HZ{K`5j;jX8f1)$Vb&N
zOP^RuHEgnsmKpR@&LX*Qo;26!6uQ)WlVD;*u#-iAYPZ{oU>Q3WMX&dFcKc*x${rq8
zIvO{nqZuWrBbEs`qwo_Aq(!X#>|))C1?#nJt>YjzwT^?rjS&h3ECQ_5U)5dyB~da5
z{z0hTot=C4mFAKH|4dEbpRq>Jo$GKv!G3g^p3mwF#DQfWBp?mL>tv<qso}~uRlphP
z;exEcG8LScBtS9`l`0g!Wz9>Brr+pAlX+Da=bDYS$rMcQZSgV9v#-`xmn^}RlAZZS
zAk|E=FByM7><6w%8qVFeq_R=|vha+x&Jb0e?E`zfp&51EAxuThFy-L3cW}z4GzKj}
zTlU*rc%G)p0kK1{9YRp(QD^o-(Xs1MiV9QfSl=6}=ci?w9_rpkv4_aBP<c@D>ps!$
z1_}(H?;3gHdIPx+m4_jF8(A*(2XM;0ah|KWtPG3lGn7Oqmt?4pvN5tcPp-~V{*YAR
zLp3rPhIvVkwvGv&%&>5g*+vvw0ekQEF>IBXQ-`jCUR1$Zwt|f<Um5OIf4`$6u=svW
zcIh;g`RqAOPsz!P@5=1M8Hp>6yHP=auVi%dUmld@dq@9u{P*7veY&}G7oCo%$O3BO
z6j~6lnJl+}DvO{Tx?ivFnR$25sBq$<CF&GymZ@3HR?Ceeb^Q^E<Xm)MEby8S+1hcG
zJGc>u59694PFOmuhV0G}Rpgw_PFIy5uzM#uRUWa@qy(;^#L%<Kxl&~q^?cYWk9+p;
z0>^GtQ(Z23Z6UJu3Ho0f_u?scs5CU_aW4IWnT0`%CNIJGW(I)9e5aY07DvJnu@+MA
zW7ql^_yss2lNYg%@<Ijp0;`l>K(t}>R#k^#tn5){{p;az#xDo5A*3S15dfySx`w<M
z)q5w2qJsf?%4SUqT$lpWqDm)^OQ=2^@k@f_R#7Zsa&sCcwl0cxp&L^bB}a*^Kaw{X
zU*YIf0cE_dkB06j2&?Hi!$7<T@<b{vgFn^1Qk3iVaQTYqAFD;<EE7S1_b{vk)x3HR
zoZK^_s74)#VW;$R>zRGDy}CHc<#L%7ImU>p<)&&n*rbcOKpY*<VnjR8b~9r4MN2_7
z<ML~1Wl6NMgl}D4b+7xh!*5M{4j~X0kU=UVhcbq8MHPz$8bc3zw4I<(5*yV&9{K|^
zsn(OHHMAH#ObQIwk?lUqPT_oVq#B<)5`nHQKn-n9K=eenU1WmHR0r2C#|MFVYUXj~
zPTI`p{f*0WYqa1RHAt=ep!ozWb@L|g{O)_}v^Qu1K^=#hb{gcnzkgP{73T3fI_{`A
z7F{O_T=Y&DFI|O01<Lt%CjsbZqsz@B-G#Y|wyHy%SvhJz3huO%8pOJr8$=*R_K1nK
z?U125_N8#-OFr&r2<+o9Ir@_`IV)#4D`z+>v71-z@mclv(d-yUsS#lSI^N{eAfYPk
z6Duj7lT%YLg9*H{>YT~FsU#7WF04;U3c>wo3!lo3#Hn4;Q7zrXab)5xBcl&n_kJ`R
z?tj-G?&}3OiN;6!dJ5y_Fjr6n)>~l}-G0<?K+Pv=7GvmYA`ei3_4(qOcRjb8f>!J1
zK^l!2@6mjQ=c^fRmBQa91CCR&^6mCZv&E#XVlV||-KVyn%{*U@1%}Lt4KCgD0}gX*
zs5l(9Su_(=`Y?{P9G4QM3s0&L`(#zC+?PyKE3K%PZB53;9{DJ=E*O>s?kG9c0q{pe
z;^~Q5?szlVW462$hd0<aN@fCuJ`otT82>0v43_D&2NqgE#Bu>&aPzT6^KJF0lI&V-
z*tL)ury7mDHG^UD0*@Bf$PY+RJ<MsjovO{Yp?vEG?te=UuG|ot%v_BT^PJ>`N=6Vv
z3rI){G6$Zfhy+(N%+0bw9*%Z3%(Ssl&@=D)I@%r6w}&Hhh*~HHS$m9`+u^m$9Ms%4
zXi<I(Pm=(zt{OM;N}-f{g>!QGyN9^@;@f5|m4TLKqW(D}vk!+K3~m}db9Qqi3~qCR
zvbo!$F<GnPKs3uut`24iVj382lI3!1rCqk@VbZZ?Wp<5E)J_v{Qu3MW2obr{vpro0
zLHliLSJY7~JwRX@e_eE0r+`Mk$MV0CTi7jEl_Lsr3slAib08Em;EL196FfvnlBk3L
z%LFoRam};Hw18uRTZ{k5K>RD+E&{0u3C(p*ZBo?J(KbgM?L0YJ+GwOus5#K#mIN?1
zRUH^cQ#ArUYo$iZXOfG&tY^p#x=JezSD`PBrH&TtrNJ`gjc~covkqxdP&a1}lgl7A
zvP7l!Y0hfc<CT=r)Df||1S5P+KLieEVggz<SF(STr3Irl8Y4lB1&MITCj4xG$CqG=
z+}9X5-SMMpI7V%<Wt6-uLTLaZyz#a?Mu)78!PQkUat<*gFTrduJx2V4HdHKbLccyp
zTjxjX?xX#q1gP@<QH;Tn11w4(1U3f#Xo?tLa3(^?Jzrmhm^$PziwX)3IJR^$PaLjK
z7|*BcH8E-kF*4*qKqcBG_t-3egmAuCkY>$#Gc4QFt`%kl&H>Fmu{7`v+eeq$$Gtwa
z47A4OS;?=j744S)QoXuPQdFJB5qU{{Zqqex1?=~moig-m*#~voD$yRJx|gi6Z^Y?c
zMD?(EWRA?m`Z_fVPPC#uDdC|Z_<Ue0Q%jSNrL<P_+qAYK#Gx)pM-5d>9jKH_nPbPm
zdp6CnF_vU(!HuWUOp6bgWzKPsX1EA&ln{jumubMTbx3CugsdaRHi51UtrRk223Mc=
zGd}phdHX}A5};7@5X$m-s(WL~oa3aJkEiJqI(yV`5JS0>iDXc@kqjz<Wrtcn)ol%7
zUpMn(oHe9{b?=>eb!DvIHS`=fhJ|y78hG(dBe(dr?=ccAb(JWc#662<!aDs9bf|9U
z^A3yhZB@{(t}MQxxq^qe)@i%Rj<I>q&Hc{>rz#w-HjA(_NIOlwrLj-xwH39nu4!z#
zq?^TYb=l6{{pG!S17D(048^=&A%h9?&DyB}-qG&SuE7#%QpXTjDsr3rE_-7nR0b?e
z(6@j?%GVo%VfkIucgZ?RQA?s2S65rOmy@L!Fh?63{?bwB%B@tkc7}G~S#*Tw%k@D>
z2h2sMz8-b-4<6o9M^7G1rO{4j<npw;>yr+fHTV>5w!iaG>8{BW7j@V7cklOEcg?Y3
zQFlEU^dGYFnl;<|MzcLJe!3FrQAdtF!>13>hw8v6zC|=y^5>FnRi7Ml*_MfREljjg
z<P5x3{wN*hu=S9wy*1IcHunQILQ=b<Yt>mRs$Uc6JrqcAS3r_K=@1khvVT&h*(#S_
zM<5RL4guc1P@1AZrhDmnFI-VJFX}rhpW|v}lH$xKKl7FS>;uQ9UHLH2CTaM4epc7B
zD!h9){gh45fxcvMPWs@x3Cy@WOQvacR~5SPV1tX@IM>C%QTp=L!P93a&tCmZCL_Sr
z@fqOtyT>nIJUMyy<|V?G1n-|7o*W)L`RUo)lOGNa--gQlL?pl7d;3FI^1&OE`}yAC
z+mkoXp1*l^_yd|XY`)xk_5Iq~|8xx;b!S5OO6`I9eg1HeB=GnC?pAY@exE;h5RZSK
z-#hJZ|31HeZ|lJ(rky4OxO;dCPj<Ka_u={Wz58OwK7ana`FR_*pX7{2tS)9*a(8QM
zYq#fXeRr+E=T-eJ{Jh}|U7++R4VrOeA~O6=e1nE=0swWpm!sf^3s~w`j&^Z*RC;Ws
z>!WOjjlQBL8Pa-I?+DF%j(wex-D!hz5quI@trgsnrAG7>uJDYB_Q25$ZV=cxI)e+v
zFh?EYVNwjDi~_R76sUPwu6>mY^?A$klqyeoO*scT4;tAl$+M@wrL6jw<(sN}Zn&VR
zfFu!=Iw~;>FpzPEi10Do8H2kh!Myr2Q_9GlHHYi>>{A_$;hMu(NBeNeUiQ%hE-AWs
zbc%`i^Z+lgVS8{vR(R(@)<nqmKKTL@`xEsk+hKiL1os{cZt1}5T2z%Si>l0^7ROQ6
zfm)o%REt_%(FTW`9>RE~U!dmLxd}#qftJK1!lHz+!8b;gipDqIhig<eTyKCCC<_E*
zg++`52N7m@#<Ykfx>apt{bUZSbX7ovhz7B_j>#P`7+#M_LdoThaucms)3z)!pF$vq
zoGlhhUnvS8J2n<gZt;N@aH!;nQ!Q2*=e1ZNh%hA{`79D<88({6WES6{6xLg6d~OQY
zs<JuercR=Qt}x%zmZeT6>(yy7Vz0q-bU)*@aV)QYZZ!+ypsdF5IzOD%RdNBT=3`g{
z9s=Mi)d+GVPAD`p1z-=n#u-Tfc>Nbbz5ZTxp#a`RX^c`0ny<L?@|r*q29#)d`5zQW
zmqjC$NJX`_VkjgA+u!f@5Pu~9Zey^vR?y$(^fwZ0r#n2|foQRhVmDt1Gl8lDwORu3
ztlPwvV@;gN-x+8!Im2BDCVhRnF?tXfK)9=`Wv>J+&^WGzi;byA{Z0De*_Ro0&^~so
z@eufiT4^-QTU4%<)!>3eH&!X=KnSe^g9|GBCNxASP~I`Z6zgfArp}V8c}M>h9IyMq
zU7v$cwgSdf^BHa~cuJx<w*n++g%IfAt1G?r+?~#yN{Q5kl#Gx|2xhV)BrQw>#9ZiM
zH$QM%*tLAR04!;>(*csidRk1QmIrCrTljybCPOFUqQI5qHmqbhkeNKeq*%X{G$1N#
z2lB4@T4KJ{%tf10#U<!W$bw1qs167{IY=4{QjQj!-Cz=gFj(@7{zCD%>bRXd{y2Ip
zJ;o<mExLjU5i(z0tYGG@FXJaA?2}=e3wBvEv!VmfT~d)IQL?=y(scABH`$0h6&40f
zy;ARArj@9*6oAB?v+7!>!j3sbSY$|_E3}7dKRvOJ-2*U2mZWbIi1v+60w^x{Pll^N
z+%aF_v+VA&V1k7ZGc7cj{%3$hj*f?oz!K^Z74;r$?raY3D{ZU_u*GAa<7}U1U(qzb
zBZS1fTS)2n-pJx~R7)A+%6{S~J@y;^#_EXmpMdvJmFyeLT_@t^+FEBkgPPBD<<iGa
z2<v5e=twlOY#_NWhe|Ya)^uk!9dwNj0WAkgHyBQ7;-Ym0krr{$R@sDC9h65|l)?UI
z?$OlOKJ|n4g3X#Tr_2Ot^K-^Nr?_Y~blY;T;EW>JNGX7yv*t7tuXW(gWQ}|>ma*M;
zva74rjE8V-4X!NmN0T6D>pg>;YH(7y0X-Y-Eas@!aWm?*Rduxqjspx8%<Li5_?k_D
zEOaIVdD?k!|KE5DC7EY@O+1>?zbss$VIc)IjITmMbAquracD{#heklXY+A&@j?>mH
zk<cU%S~vd9zfLG>HE|Utg$=T%PE|I+ow;PgpoFZ~W|YC}*^SJBiqIXb<I4!u;*HpH
zjS^0?DMCAR891t<dXY98aN?2N0tb+WqCMRmceX_UJKQbiZ&0#tnzO~mty!J4W_3lg
zdP}5Gu&0NEzD+^7|AYHmJ2nLcCa4lH33H=D*mp!+Q?!EDw)<mb=gfLBQ?1a0r)WD2
zn1@jaEm#Av>eR!Lg3~D2Oy=s!D~uf&94_^$NZ_MK5`c+tl$M+B7uvW5kw=V03)+YF
z8AnZRyVf%2J9AcL6Q03w+uDSm6wVW%QyxlZ3_t~J4^9>FP2XwxZFaQ)L8lZ4+Wvre
zv0XeLOOW<s98<KJ!zTM3Egsd&+UT}E)bJlN(T&7%nw3?}>NPe!Phblz?M|E+^?l;(
z#7b@N)<fP2e6+;HM@twVP18-`53P_!|NU50LcCj$7@o;Gbh->?OC%s)cyoWa-w`g*
zSxp57A>428bgop{ja0Y~FKBYIAI#0m6zY5*on!A0ZX0jz7CWR%C*mfZNDQ5*j2dv}
zR6mmxBkrac24u3Z6r)^5F-T=y8j4X0ic#8q)KCoV3A7aYl|3$FZ6e0Gp&wmD0oVOp
z<r+D6S~e2=Uj6+paI@%$2OHn0CYvoC=mgDid&)u<5_z5<z)I~YM+@UAn6hbnZl+Ws
zx0M-iPI?~9g2c`Pv_PLh{Snvl-!%^|NuM3|;0PWdS<UOPw*vq50<J&mG(w7=$oE(Y
zd5`T2dnP*>cgW{TwZTbb!O53o==QjnTp*~uQWm{TPirbm-M>LsO-e9|_i%N<Zq`dV
zyB1eR5dcz{bRDdiS>4NJLs-TUvkk|~110YrzFooDx`O#udh7hcdT(=OKfV~JD;LEa
zUP~t^1xd~jrp0jH;#jq*W{Uovi)L%^rk2@CkD)uI?QbWdRU@;uzNDd1`={zLPd@qv
zCt|Z0(x8X#x7KhI2e@ZoSX35r$hCQB(DjPZHR;{`J1nwwj>xv2uaiVtwDcy2Klweo
zLfMpqW!>aumYaqAGZuxp*--_Tr*XkSvjDXJa~*T8t{k@|a^J*!y<yLth+ZLUzRY2T
z-yj3*G-%bzI6?Ym09_N~u5pw(;22J3_c!~_*iP*IZ=Bbpa4Q(nB0jH1t-2|91Roam
za9NPXwBb20%1wuwv=HqtARX2}Hj-_#oo>n33lWX7j6B0{&<L}sxL1$RiNDvJQt<M6
zNh4vv>0m`%Z>pKL0}J+r!xWt_bR<EA1XpiF77)aph}N12r(mDVF=hE=l&R5!4U?)B
zh|2jxA?g8l*ckMz8DbT3BPUl}UFEXTo%V5#y-fGwX>V`(%Qf_D@3MzejDuR3;X{R*
zY@zap(4@%i9tQXGVY}@}4tiz-L4wj~d)`=ay+yA*;g?#6>$48Zy2*l~rp4Sfk;%PO
z8BQBXd@<BxrchsS6{vAC7O1P}$)FK}N@dJmGQUkhMb+7r)=(+Y22FmGWkKcX&u3^p
z#apCC8NxDRtf$u8+MDPS4ZyqBsLg};$@<_Y6Ppc#7V+pv-+dkk%A|oZl~e$2?r9X(
zJv5W2h+lQ_ZZ^}-nd^!0eig+XRmUTqmT=|8u!zIB8P76Z8X>l8%z&%#oo=wwH?{)9
zPQ}nDqV-V$=U6eBZZ=(%_`@BQU9w1U>~VWzAMUu)z9pS)t2G(5E;ddRC05+$XJ!fg
zt2ORh($^(q?x-I#70c`Pf_TyE)#<eVQofOM7kaJw8l_b(79|XAfvzO*V;rFLRYd8X
z3&U~T)&$x~RAIy^?2nnaXsliymDZ?V1nm0#5F>i^&?IF+U7?OuvPT|Ee)<}U?T(rD
zhq%?!SaA;Qz6OVj++-Q(ki#72<Z7aWkNwy0`SJQ4GGw3zEn8XnNKkg5yLhVV*;5B_
z5P7p~-A__bXu9U<^-Q4KFPQoNWt~C*HQ(AP*P_}iUEVqxuv*@pUNyK{5EM^~g%Aet
z7HdTHS?#Wpjy|hVNOWDF)y+({@m-5$nXAFSK#qyyyNRc@Ep}4>;|(Tu>@T+0L>5bL
zwZSM(@EQ`n)c2vIHh*O~^7n;_j7)cWwF-|deRZlS7?bNr2ONIv9*p%E36`{jaJff<
z>t4|G+z$mORWHk}NWikPXu4ZCg2J$%gq4f<O~i5HDL@@h%5}ubjS8_V=8aiu)T+&o
z@@Cs3?$Y2r8IThAVEm{Y#_U*@3B946AwM$;#PTDj0=zN&nvo{rMoq5~T2+D1!%mfC
zLq~&-61Q~1z~C{`QGlw&BH~)gg%LHte69>i^SN>nV4xaj>N}q@ujw#05y#!}dg{I>
zjCMEAFU;d}IP^eUcJAF@Ubu2D{9A7m?a`h91>36;+9Z$u*85u{t%xwxXd|(VdUu;?
z8HGG<B*u6|Z=@xV@wAx;?Edd{GjWC?lADRssCU#%8%Mq4X4*XJdCj!_sOLA+CJ`J+
z8)>Hz919z1Ur}7sNIQ#qe{ZH8M7^+?wub_eM%sCF_vrWf_x$(M-^-QW|N5Kf-yI(P
z{`>F8mkXpwpXB3JdL9n{x6W|&`(1Ao{r-0!a{d|J-8_P>{~JbsJ-!=!z&9uH#_93h
zOw9HsmAwew2XBJU!I$7;@G^K6ybTV6$A4X496X6AG$=2<gHz8Bo<)y0vky5?ACibx
z!AbN)JN*0-^@FFVJAaKpC}t`B;TbQqwB=UUTd#v(w3Wdn;*>d4{Ix;q2n;w%(|+)^
zrbUWayjHMecuMwu`7Sz9B<*peY<#)?x(Y*uB6$G~5u^Ew&!~|rSx7%I|5W@l<DVpa
zAN?|%6qoOjt~N?|?=L=|p%K{y;xS!aT`=ku{#5)k<DbMI9!5vXXDxW54#B?!@BL%w
z)At(#fepDb<u8x<XTm?H{ByuRU-@T0#8$tE*!qA>5ud2qc^CA_7r~3*7YTp4G7q8G
zUPVu}z~-s(Kt{R!+eR0yqxbE+q<!+$+S*&jQ+~@p=5HCiAAd6bsrV=1pP7HDIuAbi
z5g|D?&@R(^4<9j>$bK()kHFP5(9f=}9`j3#!SaXK(_XPYVT8Sm-VdD`zT6m~{dO_*
zUv9tv!B;-2G5N@SuHLVlZpUW94|P5x#5C(fE&m)f-l6)xzq<O9?Rh`@Bm9KdLl{Qr
z=g@P%_}P3!f`6{mJbHQfCc0p-pTG4&py9!dz4fN6uhs{)x0JErU+paQ`m(N)jo1s%
zt(`emA~@$xdE!GmP<$YskDi!AvV3i0E5NU6ywux#wg|Ch(CXj|LiM=Iaa}i$7As`<
zf+V83XtC%oYik!AC+&hK@dZ!f3!cOm93J_C=dwq|eNfG#vS{)93T$lHdPGR<REy3U
z#;Qzzfz7{7+chXG&KIb3Ymq|o*@zI#+|`9zm0#Ake8>Xd#3?g+Z^(HF6GpSOz(ZqQ
zj4EhJb^Or#)EM?pjbZ=PJ?x)a!@j)TPkB!`^y!nD(fnn7Jvanr(*QPgD2TBFuZ_S8
zw}wTa!SXw@|3bFE80z*Ww(D}SWK*t>QpEnlAM`BkJm4(xM|GVY$$|-u-2PpP;HBzR
z=EVP{SaS`HEUWvqRaRiVlc4@|)<*9q{B`2fp^S|Zb%eTH=^e;9tCTSB+C`kAJ-aaP
z^a$p}OMc0OUC`-I^jjkQf`NDAcyc6o&M>50cKp}P`>-h^bEWto(-pxbTi1ocewXy~
zUo><MTn4x%_#UqozP5&wZ;iw?ddMnc1^h^8uDVW6S&*5dOtuIf>^{8ZT-(0)V8?e|
ztQY1k!#i|OtkPP!I<g+33_4bfGZz`Uhwyr6ON(uI%_I^!`6uyoiasakD*G0uTD1ZL
zkxkIkuv(d9Wt!B}3vB^wJtD>zFfi%L|3OXg22RoH|EvH9_7VDXbLAbh)0D?Jgyz=s
zNvjWE#RASZSKg%YWaS)K%9XfYK{w*??%mTd49;EXt_^y5!+xcwJv9<WB<#J&p-EYs
z*DF6~#Z<X`B@5e!wTL4DXV0v9lm0n}c1@yGnOk1QXssNk!5BlNBi7TnD5mg(WrTQu
zKOd(hT(B82T<~6w7j(vii#W#usGx&WjNma%$&w@0SJ-&C(;h37iJ~y-VkxD_Q~OJ=
z)IoI?({K7EP7rb4?awd^TGJyet(DfM$r<G&@&w|x)0&!gHUag6x$ApyX27X=i}QHY
zJAC%!&9k>BPY+IB9iYql;o-^KA6^`u9K1RC_2Avf`xh@?o;-eb^8Ce{XHR=j?smHZ
zPSIxU3ZcS)W4AE(R@9%*_=p5V7tIHoS<OzfBiRg1Sd@fp(Wx+jGM9hOiGT~+qDf!X
z*Va;Tr0W)%4+hw-#gahiLGR=wt@euv$)Xj$)M|f$K+sQ$*~Q!9$uygdi@2P~IPGPW
zcxZXHa}V8E>1O-h7KWFPfghkCEkUoyu>`!BktYnAb)bP}ndUul=1km<NH=YbMrnAd
z8KzXMvPue~RLdwf7Mo(Kln-ew!j^GQRa)6}T^{mhAl+iowq3R$U7bZdO{=8LW_7_*
zDcGyf^%cFWI3yP_L<*7sy)Lcr&9rXjS~d)Z^`qt%KdiO=0prlGihaJ8`+Uu|<p0;!
zs8Zd68u-<|zX>0B7Gp#P*|M*^LQwsRF^O+zVKwTSRfr;$1~<KmVFp4`rzI8Yp0-%Y
zn|dGk2_G9_!^W5no*EM}j^L)XAeU^v#!$2^bF*vmUM^q}H0B`=Ae)Y4(r6@)GPD$_
z4QHSG-$i{isnjt|jasr?uvPx8W^{JrjQ++7wW0vdRFN;LXJ$_8=-L!>%C^8-2%A11
zH-XL&VMaS{6VQydB1h|mLadue-dtV5aT=o*=cn0+IX_2coo&IgoNWR&KbKjpp83JD
zIaJ_SQJ`T{%ejNXH`jeyQD7$Shl5jz4lgnLfN)W7otyx-40M+ZvxV<lJ3PTfxw;gq
zZG4lSq9GYHSY6p&z;TCdJ>7&Y{M^aX<+((GrgW}88I7xUJO*|ojfM5Q7Af*zx4!48
z7lNZ>5wRFpNuQ%~u`#)!@u)`k%p7l6is!iSG`g>z*lh3aJ8|Iis9lfJg1ZEni6K!c
zVoS%IHu_6znIqvB9%86bxVq}<LF?a3x*2ogs)Z>kvO<dWeVUfpC*Wm8E2@?A_+q8V
zf#ua~2Yq*?C|B&1FjYlV<b}4?7L#_OgsWTwvQV-$fNn}*!%cKG@b#6mxXS-luZ+_a
z11iIr8klgD@NOW_jX(`f4jgt_4?#&!#om3|y;??=E{W7`vk|j^4Eb^2BH=RqH8uF!
zz{%m5)tws??;DE8$pcGNLI#pD6b0`!1tDfAR3YqA^0z*7#0IOa8Pw@|4(Ddtr<YBS
zL+tn!U~+-KM)%m2^LbUTq!|XIfniv|w{c#?X2z1`t68MF^EuiR&SF8kgG({%Le&GQ
zY-6+ih)J}p4|}Fu;23Qg7*h~FtEiq=83zQyc2A;xuM$VkO8bTk+a0*-rPA3R7FuVQ
zJs}ryKHbGD$uzF2mAG<xNG%r;LA>pf7vuu`tk(9PHE)ivH44_MFj~&9-UQLSi6kll
zlLQ1pe5^fBbEJRB1Wz+G<8;^>4eWq>YK37#Sh5hq1#`{l<FTo^WdgueOmr}dj2d(E
ziOR5vGz787r;*pUvH{;Ku<7yIS`1fHKbWnp&G?({fkV$y^>9;F+T_*==#GtM%_h8Q
zR0Uoh88<PYS<AzkYd_8zMhf@XUOY&3dsEZE)U+ElqR3suI4H|nZQT}a4hn$&jE}<5
z@|idDfJKAyE)ge@+oHm9@y&w0^w-wLo?JHYMnP%7B`jGE^>xdkT6nfnujgb^z(6J#
z5UY8<It#vfXF*Tp$1fm$8268cC{mrIZWrizv~|+~*9d>Mcl_o@fzxVMqY%=b0?yA{
z{agC}(s7Ukn7a=K4;dSAu+?|N7dr5|8pjQ2R#N`~qfvgiJ1LUtE{WVW7(b%iJgd*A
zqfColqTV`;3>=H{_OXZn3)iFG8a%0vjxlTA!jO?*hI;b!_F*49&0r6FgLPS<3atDu
zcz?Y&T=|q$S&ibk^&TQ|kTB{L39=IE(S}WtnSf9ihz_U<o1~vs()?3a7CC;AUZxkR
ze4thNWF?+VNU9xASI*Mu3?8p&2ir}yAJ)JfO!s1MYwNy(w`1YjVTvxOa3YaMNTj8F
z&_OJgb)c3rXehcb`mK`?q5Y!V8x|x`ztl43DRgME2~{MyIOC0sqt$MfmC<W}TU!3m
zV7T2bm)g$MQbwbKyZ?0*?rr>b5^sF{ectas>2KiA(_Q-efNq}C&2zfhdj1^#Zr`VD
z+xMT+-{){Mc#coDpo9(jd5V82+t%O#K6%ooo9EBqX1m`Xz|GV9_|Ef(^yK-|CwTMp
zIo&*e{`C0&sTKQuW3#{U5I_C+K7OXp-`u6oY(J;Z?DUWSe&=qmAGMBsZt(YDf`{Ex
zXR>|O$n9DH%=j%ylFsT%9S*8!E25~q+x)YGKP=ggYoH_Jd7V<6ilQTtwC&oTANitp
zl_9{|<zJspsgP7CGjw#$82Q|<DFSU}%4>&whRM>J)dEqh_&aEw5ml{BP^VEA^J;nl
z3++Xor{xcC_g}6kI!%UB`sN8rOJUt-CKn2^k)>0RXU`_QKPUmJdHlo0gwYAjgZg5c
z_O!L~O0P>k0>tzTS1r;29E5%Vhht>|23Lr;54-izQIE&s34>qt0(HNk(6D;P!BLOc
zr&ok4%-58Pl=nFXbnC&_RZ2a3_UAnN1ZjA^k<!iaad-Wca}I)opAipDRjq>oRTZN=
zG;6E9{&i2mcc5!Nd{EcbES*lNn|u1yzvR<S*KE=E+yGPUPselgWJZ7*{1osfX$fTc
zO{!q)v@D;xBbisKN;rUN`6=C-&d%a*s7>?xJ>Vsa&(9(85Xc_Pytul^lNGGgbNn1#
zy`I965xb}?rj?#{_zTB`Nk&zg=!@5|Jp;*qk*f=x{sty~onlF7#6#FpuZo{p5tFW*
zWs?bfd|DJU*vwcE3m4`&tTWhP;N^;uomLP9@_-Mq+&^$ZeK=XE63C6<%<=gYX8B51
zr{{;5_Kh=p`&Pr3@alshIfqWkW;8nIKtwQ!{qo@QHUk9T>vycAUZOYA9_&&%LQmbQ
zxSj5WiC&H<6^FeYe=0&3K-;4HR;BJPDHV!4#4@yx*KNwWcXJ05!*PJdZ5!dScLe*~
zv48i2-3Im=Va8mCA<J`|+dv<zN;qrmF~HJ~kXVp2_s~=4=5o|G?o}ZHKyN*=@Y7ze
zATENi!+QW!K&!t8`WnTOJwD+;jo`^EeGP}Rt1HjtYlA`vdZT45O6|)3oY&Z#3M-mR
zKd{w-wp_DFbQC?<oWVkldaQIeMl46EW8OkdGC5zWkBwII=1v<D+UW)bL&5mw&Y0>r
zdci#({R5DrrkrqA*NPS)rqj){azYW*l4Xm!B09jcYB$^CZR^5nw)xpHg=2Se+PzRa
z$HDgV3XgM?yxUB^x*B{}+jtF(69jc*mkW&k8le9qk6o7vZgq8^C77oHB0cK63EV*$
za}De`I%NZp(3>br5SacbNbps+lUZ}BxQ9K>r@-?NLEmbT67&#T(GSZe(=tkrN{3@P
zj!enhtJdkT*9-HIptKx*h)%<84k@_4cF;}8e0inzQDiQxTw5b3u6)!(SKM_N?~&V(
zSBG$h#$#W*fhgnf7sOBG^~PC>4&p1YQGB4|&IUqU(iRby@i<F1aHm<(i5nE8Wd%s8
zeldYF=*BFr&-jW$9-yOKxsd@&P|lRby(?{l^>meb27L<&`fV0WAXhah;Aj@hnx%w*
zxPcqt2VnBxJO(dLHwx&`tiIqIs>ms9h?5N}P+glmup4ij#^>2oT_Yj4R~zx<50vF`
zLJgBKIny^6Q<YJh70}IR?v4-Bi`m%*8Xl<2qRgOIxxHs_^A$m?ryUPJp&Bm11108y
z3Vho5qORc&;@5v!$<E>6D!OKx*3f|)IFslWs{j|O#piMP5uQSBeR-alOWI~uV7`?!
zuG&n?rU1L0e9Vynn8h$`Pzm@bT<1lVZVXmt1&!qfa1C%OUomx}A%;#Nn*>qSsxD@#
zUUaDk0tFHuQ#>orKb+ZWxXHFIkY0RDHzqNZkHSBhz`-<h3N`}fsk}v$5Pg4+ivMW_
zKRQL!2yZ`U6PVN}@Y;y;<P0SUc#ZN66^wxHZ3}VVX>_JdvMreB8A>-c#@Qq@H)Ml_
zcXhQf!(KgK`Lq!uZ#qt4R=^E{T;NweZDf<Q_)x~PGfF>?(MTrdsq=|Y3^vl!Q`AV{
zjG}pT!Ix$l$-4^*MPsHA%EE9I&k=m%%lQ<xrZ3Qdk1Jo)g1?yw)V}@NW9T5*^Scfb
zEmoR76vn{zBFn1o$^@8ZeJ3tqxIe4QI;%}GiS+(`RqQEqBMw?XvaZ3yhY#=4$9fJ2
z2b~ong#s21FQ+k@tkESKo?n01`b$;$W&b5s=fT}vZzpb*;4DTapLjehi>f-HA-@%G
zIk*M$ezr;7@I#rNs`q*(p~oetF+HP{n>v$rZK!rtCYYJuiJ8};!|eGU-~5XW=%X!#
zW{y8a#pcP0vQK*P>g}^Pul8OZYD=YehtE1~l!8B_-Tt7z9ekkQ-Qa?L?+5Sc_d)Om
ze+N6kXS#nFe4+b(@R5GEf|vBW9lXNdt$y&9?(YSM^t&58ru0GZgnl0c&*=AIaDu<v
z{ooh+U8*V8=0?iY2)c`B+SACU4F8OtdOZ^3ZYmSBo(~N&iG;l}g|rKsb_&OOmGiw#
zWvTKB5)F9pMijw&df7vBewq3yn^5W(n@Tc-FIe(N@x7w_9G8<5oD4qnn*HRwf-^1p
z=RqH~Qco~&20VIeADsht)k8aLlQNCJBHG1co5JWFeqhU^bFUA>V3J^)_!DC)PkQLB
zW0EK7c>dv}E@2VsemD^?!PZ3bfgV~_+Zv=F;^g9lPwzdJ)V>b>h;A{Y+HTFB<zC3h
z8q8Iua2#qOo2Dat8g_gGjvjxkt))kQPzc-J|Nh_lBfVpPl+w}89tnSIYOr7XXpkVK
z-oCOU$TgYE(Reuds6%yYbp700`MVd_EB?s8>knU}lZ!g~_0-`3-Q?C^ud^=qxf62e
z2djdF=03MTAJ27I^gN>KVAu$B%RIy?yv2bUE=ku`bJ!k@66n}}xQ$$<WfDrM-b`tR
zDi>MJEojk&nX7Cj*4El4C6`#iwoOGH93AVfH@0)tqMb2C^N*UXE~qR8Bqv_R7nQ}3
zXpelQW4!fy*d&tzeORrnq0?*&le^++A%ciTDoG+g1R0R(c4{113<wH{V$g&JkI>hn
z{|LQE%A@!golK6B<Ds8yY>;kQ<QT>q8v&%_P>Z}&Z47G?!%-IfQGE6g!rcAuHa3#0
zE16qNR!laVdJip^ac6>k3@>}yb<I{l$If0D;6|M0!Lk{uqZy&J0FHi>tU~D?9xD+~
z0QmugXd2-ng$uiC-{GoN$9~uy;}7c8Z%*{TdF)`Vj`V|F`=Ixd2&Q_lEgl>iVyqrM
z?0EQ+NHS;WvlG@9{|wC6)945FedGmHVT1P5O=i1ormd}xOef7;9VH<z&=8|Qf7uTE
zS&=!{l8^}Ovd!0I>KqrAcMLnjA=o#y>`6;yE_B_V>kXJ&^g*Y;=FOT@-<VXr|8n|!
zoqk9g_CD@Y{N$y1qKA^xUp3Qd6c?R{+^KIS)}1??rfUBs)U(y?k=_%%=dbrRbyOqu
z<<It=6U7=_^YUxWQt-<kL(5m=6tJi<jY4WQCOr&2={)gzv}cZb&zS`Q^68N_+3$rS
zP0#4JdTRabE}+LUT}?>!=rF_zp3LG46iNpu_d7w$E@{{YZ(&dhyOA0sS9dqQBi6MU
zj!Rb*Nq6k3pl;L<DnTaCM!vB^RI_BRTP45BqYObISn@;;IoPKtyreLY3dTXQ<|y+e
zRlvCT(o=%mGM;2CAr_M8f8dv(qezYPmYh9H7_3H0%X7Pqu!<w2ZU~hgD#*KSaHUDO
zG-4EcI+-2ydh2LsM$XVpy(@_yyWw2AO?h&x#Ii@gIatRn$cLsHn5d`rHP&-YJGpLn
z*V3ZMc7VEaQ-iDl(Y)N^48AL@^>W9ko+9l1yu_WWppXCDf;r(Dz{9$j(J-Tfjd;B|
z1?aG+AenKD(A$t4{mfkYUeWedA@kRh*eQ#Kx3&^>9i>pW!sDqRgPs&T;nGbt<3>H0
zK`G3;(->H%UZ^Z|{Q#Co;j<3HBRfom{74r6wyr<5F<d0yP6VrKs%fi?k-ku7NWSlE
zWrF0Sn|S8_qzyQ5-$Fz|MS`U5G$q?A{^&r2>V_LjFEr<ZN#SbUwT+Zi%<HsI@<x>w
zvhE@u<<NsCpUW7vRlpb37+#BvVpYKl(RXPoYsNcyy(vG5a&$KZ4gBa+rXeG9WwWY}
z4fE)Zr?XSFN9s4s5p%?;Xmsh;G%Ny@@UyaVRjT4CJadU6kyeK?G8j&yrlC_6>FK6A
zf}ax*l6nOw73%n`I<_V$k9jj!Z>kd13b^CddKwq1E>^#k`+BoMlWg{nM#9I`pI*bc
zMHj0CedVdUh;%Tac}Dlm$2P`CH6Nd6Z1|0RgT8Kz<*sHP&7ih=#bD9aO}ee0j7n<l
zrm`yx+ZpAIK>#ZG0(Opk?)!nBda9STeQ|R-QB&QdXmz!jON>sDY9l{9sV-{{ay!>I
z!1!~Rp<FfHyGj88RQEFQsWqSHfwA_|YF4Nb7}i9(yVonPHVl~|=Y<*T8rP4kWmGSS
zGb6~joY@L5Rlc4*k=yp%^^_u@;&NL`E_${!Ju4<N?9o7u5db(Xb>LB-#VzWbfa*M_
z(l@j}bhFDT-z+AVJ6M*w?ko{dS#1QR?M;zU@#+qa$ZlALwa?X()iiKqt30q28*?2_
zL5%w4)z<8nM?v4xu-R(HsiSpArchfBBTXU8G;{Rt56efnwq-0Snsx6EwEL($M%6Cm
zRKc#L2`R$hH)r=9<j(SAO{3^q+mtW>h3BM2r5}_eq~LVb_lNp1?#Lwh;5xu)+#zsW
z<~6wLsjND+7AkJRwaf_*Q!86=fTQK{m&?vC`$N6DP&$Wsl<5!xAaE4+h0dXP2~ll3
z7)k25#}WDIHkWIdus#&Hv3fUm_UNun+|0%sR)E~EtJLKrO#CUexVY|-oqa*w*v|vK
z1&LNRTeHP+C*6Qlxv#t#2H!<`68g<Iw{a{eQvCvkexay3Aq(~xkA1Oh&*#3m<2lYi
zGpD`IrrO#>)FeRKz%wxSR}I}1dt`2R8~Hx^>NY4%2bsy$UbPw(oiwPB=E$jY_Jaet
zGMgMSL0>-P$P4gf71P$zeYRVMu0w;yaH;YLpY{S&gD%bW;O;&=ra${HdqMT-Ls!PF
ze!qVgp7n&8EHUDjt}Ld9dGsOpnqt@x2rG6??pE!Zr|fH+E#}a^yAvpJ74SpX7Jwr(
znv<!?bxl#|y$Fh!eaH{2;AeDw@gWQBCuwk+24B<2JC!lT6%pcHm(-W<-n@WmFitn&
zqfm8Yk&8~EsgJWqB}Dbm&|z<qMiXdhxBWS=IN2xQY{a|0M^OBC7?soDu8Clo>%B*J
z={XRUiGpUO-ErvL_?n@lTTeb?$0cAZ-R!su@(E{`&k%X0^XRsJxHp@vt<leB`Xx=?
z<yCx|zAWGf{#^CqNOmW0u-E4Iy!L_nl&22*(}bs~aQ!&5JB9Fn60Jhw3ai&ZX;bRj
z+BVtJq1flGwWlLCTw&n;te3b$Fo0~5xgsq2IM2?>$l?WQpfYr*nZwx?_Q^3BqP##$
zn1gwZVhT6$5RK&;Y46dNgVVk|pQc~L<@d1d&D8xtIYHUGNn*Sj^JTuR@bXj@a>^xq
z*4MAe^5avg?+?#P)PJkHSLugXK0Uw+l0c@+CVMbz_4OMrQC&XEC*lsxMCC2o@#uR-
z+i~y2+ngW^P${|$v}AfuW*&HlhAU5|@%c>O{9qm_TN%34jVQ|5S<Ky2$K%87EBj<-
zlj1WaekEH3x+;ou`dl`h9@vt|LQCAEpvSpIyPT)m^2beL+aH^@Z_ImaTB|HQEf&FE
z8XfiCr{j+qn%bYEW$%9R75*Mb)QfX-7;va8$||*x)iF8kDH_=e5zAklA68|KK8rdJ
zTB1Wd)f}Wp>G8;e{kGOIn8SL#H~S*=IiJ#ok3PB5Vti|~Qwvyi*(^La2R*iWHGpLs
z8$EOegLVQ-1q?8dlVJ~rB_?XmNZGxls-9DludNPk!9j_BxA}2YE*277;UHaNiL;k>
zV@LooSWh*gTi<U4GLT`=2YzrsuD;Y=3*T6F{7I)F*aPNh!A`?`8LLHxhC1|Hs)da|
zDU1)Tl`~4s&Ogu(O04k$8uB5{)mor6eV*1-8ii<~X+=H<v;t6YNb{dQu@F@CgF{u}
z@1Iz4V;^j}TGkX@$DcPC)4}$AjQ=&f1!ph0e{+U&OWW;pQEdx?rNv%dt$Mwa6WaT;
ze0jcR#dpzKSJa3mFEAV(U#3UR*SCDhPG8s#CJ@I|Oz@tTNp!>_heJR^?bfpatv9|P
zKSPO*xvEN2_M}PcegmzUnrZVgYo&3t@K!SNMk?_<t17h3Bim79Sw3hQf%ipMyicuB
z2pg8i<%g7Hx==48;bjj#L~AHZ;KYg?gUr9HG!KPrIU?0|KlOuc6RraH`;kV;ensF_
zw5PvG`H1{k{eIzJyC^=U8YVtMm5aaBDgRA#@V6fHecy=fD?DZ3hlhL~%Sv<)f0KIR
zQJ^%xwKHp8QVl+*qc8Zs#>EYxrm#9gsJM`4yh<4a<a4SWr9VS)(HA<Te!)9#CbbH_
zgVedhNfREkho&w0Z9|~rN!{0>5u;$VU7JOv*o=>{e$??#(&%j(JWJ7*;3RbnXMVv<
z%24RDlHI}O7nEXQ0RgsB6#CRTrOK|h{ujBURNy@(D^)Oim8Wp><WYh8vozGoOSST}
z4}K``v_Gs)d|J%M)6~r<(wf=#fe@uni_dvGr8Db3u=nkh&aCfd&HK)5&(LPN7kWjs
zS{V5aI<*w&pF5t{HEaENt+K(t(3xUDdlKsCJLH~mPosPE@`rNSkVNQfaoCZ%wu~1X
zHKfo^Hdom80A`(eXk<V++pE#6g3`uh|Ak3^U>Kxfw_@-Q3TXy}>=U})H#Cu07Qt93
zm*RLbd4~4oXmpU~7<mdEK6(KZ@<(cNDWA~g8I|hlH03W0?3{ifRuuZd21%eSre+Zf
zhOAR9dEv17(_+?abL`gIpo7hP8;Mn+6>vXJVVPsWztLKJt|-J0boWl({R|za@;j=}
z-v}`2Inp2@oVe3jdAIx*sjAt}sQ}UuihC)&31C?d=|mn+$&Ip3eRY&of_$H2XV5hr
zz~K~!pvkBN@CN;@U8K3l>rLYi6}$Q9{5U!FwX%Ln4d~Q1>$2hxqr72e_z%4?40x9z
zlO;{<(WVp5855E%2@+FVZ!20!wmGyZG+s2quBbNXKrn63$h|k6bQ@fJuj@rUxM~4>
z3^VrNfux>4*$uAC{M*z}shWjP8&sIS(c<>-1IDlgYruw`sR3Ap;Y7XMa44cG@z~kY
zOP?{08Mdi(E28pb(pSzyM<z9-uzy6w5Y?4gK2H~H!G;!e%v0j4e8mS8EI(nv!H|l~
z<dy+FTEZk5s`SE5uZI~FR%K(vB3*QKHO1OcJP=0YP<70s5;`HX@*>7yfHhK?>Qr2v
zio?kzxY+b-rcD*qi6252KnDG=LTg1;F&w=_fivjFcNd>wDa(q_@cT=PZ?^s+GBVVB
zGkU8W%i78Ju+P1O-fB55q-!QrZuj@iWL~NmUil~u>jfDnxVwo6>Nw=q-qTC^>S|YC
zI^bLC;Nh!ZHD2iZug@erW@LPe>x(BU5v0{xcgawNl~u2!j#CxXwAQnvYhm6tA5|Ch
zZQa@33;)OFiQ8Gdnvig{YTl-6G0hRT%~r&?MiLhZO$Tyb2Spu}HO|ni#&8d@(k~_I
zw^F~en!FwM<5@7Zmt%ToUPrxi<T%jhd4;a#vz5A-Cua#lG)?&$eZ%O2-NEAdmjoH7
zmC1O@7s|~`y`%1^Omz*VqN_g^guh(Q1a|wC1i@R_5elD*Th0XMX(|YQ2~Ghopfuuk
z$hYbRT_wfrVkLnK;2P?5g{!4v{wljbJmasBVtPd>tAz)U-7oj+Hv4=@CjaT=AP>`E
zQk)YPLE%#CfLz-SFW{@^&v8Es2fJ5!kdp|H@`Yu<=P49m#=zy2Rd`e!OPIHsCrjg4
zNk{})ZVr2JR{)C_s*x6u`#tX5+L-L&{WOh<F>U9jfkqcTePpD2EV^oERwF2~>lA!p
zhI=3yPod#Ar@xrUND93VMQx^s<aMV-)p{`PEKT&(X)T$V4o3!56PTVygX<A&rTevK
z-!Z$m*!^ofPS&WMu50|o;FiGOG>7&IF-*+y*bb*IvRqpuQG!L>EPX<2!&4&eS`yu^
zwi|n1db&^{mWj+M>Q_AAIWF0n)1l~YNHU$hw~l}x%B}5Ix@qPw5KdCL7V!DaX^bp)
zR+L$N;Q%~ln{!-#aO^lK=lT1rKGWGeL^kVqBS%y;7OO3^$;~$NSaOe0+>#^gm$hS^
z0C9M7XVE?VB0nvN^Fy70eaj`iXSFcKCatH*X$|;fc;V)74*T{1u7}_!>@T_UgZA_Y
z5SJiuW}rK2Vz!!Dmz!A^I86$mk_h;j!IakwFr0c!D-UWdWv2FGH|wP%X4xL1mSbCK
zr+|iKjh3ZRhP57cch{w5kIBT<K7kLW_+7<){Eu|!rPE=mCbrKsQLvfT)-v}ox@^D<
zg&vFv1VB+%Ln9J?n9#$d@v!2D6+Nu<!&z-a)dvXB<=hIW3`O!~6SQjEo!GF+BZhE|
zET34H6>Q6h--5XN=;H2)XRlC5I5jJKulD5`;}fk9YwahDHP4Yyro{e<sp4Nkdd8#S
zi?G^=)0TAs{bma3S2m5TT^mh9%8pCGj>I{R1cs~-18|N5Akr#Mt0+x$x7*t_T3Dd@
z&)BIUoJ+=7JOAd&F%Q|d1sLHMoL9$$L1JGS`d<luTT8g)q#N5wXL|k5T8haoEzbT?
z!{q%Kd1BW+)##ws)8nZ3SzRNzH>sm2^&BrCiCD%Dwa}FUmleX-dwV*e7uf4(7_2)m
zc{8n7UH*nqy~_89bzA<<p$br5mvL@bKg#~rq(FXqL)BUY7ia?(yssUMvNxLCUyzhk
z^&{QTDfxp;PBm_6M9DP7H3t}>lTn9hK0SV4I|WC%2#W|OT8tG`N7tGbC{>&2Y9wf=
z|IpZap0Yy!P;bh?vNu6T1~Wp}XX9ur=GJ#Qw^<SUzB54LjwR`z>j*l(Co7A-x{cIK
zOpuR_XF5{-OHOw_hc3JJyz<sw9@ZF-YFw0rcgDY;>%f+ZvjwUlQtTv!Du{HRh(Qky
zF6h$3SFg<#rYUd<`{=Dnn9R9QK4yr7CpsZLpVb**REeuRDKBPq$MwYh#q+lKZS&ET
z_L|cS24s(*tDK*7g0Mm6=Bd0v<)rg;-%Y4g58?Hpxo&apoY<-hb|3}ikymB$0S|KS
zWtFBM`MJ2N8J^m?A_p_~s?N^g*op{d>gJugc?n}(J47VteU1sbLR<;e{o}d|%U&3e
zMq7H1L;ZD7;?Md3NI}$t$+hm4uq!mQ(4_)q8o;sQExB$W<_=D7bqxoDnO6pIB!vCY
zb2j<B`0RVU*q+qU16$E&n&`1eb<G%2W4^(?fJE)|Y^(8XC)hI2b{fyNgB_(J+k!`$
zzLDwn$ioa<Q1Osn-Nte`aS&{8sZ_XoXdm=V?yY;fI`v@yHzqrVhS5(RnCv_KhbI61
z0PoBTJA((igMs<Ru6YNpw;m35?(O#VvwQe#_x_;&;K43@gwl2bouFPDZ0~Fh?%&^f
zpx@dKOp+=2LI2)%e|LM=WU~D*=-=PI50%<7%@_nW4Nj5NFnRDhsa*vbPGXpbFX1d!
z(a1<?C%oNP3bH<04hLC85Wa}TM{fi%>ezTG=%fTog(B6x9`4LXiD4Ph3^9HY)QT+9
zjlRF8%|5CqTl;4`#OKur*d~~Al~1p$rYCDqB>6DGqeMO8!=EZNhXQ={ZYJMNny=}G
z8*wh<kwFQb*Z&SKwg(%(!D8|KQ9m3!dQ|w29u54BLD1)ue9e9b6kM-fi&gYRI#rdA
z@B>Dq_yj`)>vrRD1)-Jl4^!1yzS6?lbk^Y1Yf*s*nW0}s@O?zwq8g#Fptxdc0D1mt
zd`JsB;=j}abD_`2sSPtp?yb3V05KHgtQy&yP@MmscFK%|lk`A2GizkFl`WNEe4zWR
zLVR6&@ST4`OGZ#Aui8}Q?YHyd3fGw*h`bNlS!s3uljJI%P1Q?SJxHT_gDn)fC>L#~
zm>OTO%TK)m3vl<r&h|Z6?dV|O%BSI@f#bjTT6TZBwjnh1f7C8)_0cgM8ny@D<qSBj
z75qklB9wyW0Pc?8RaC1LTW<`8&BeJ!AlzbgVgk=MWW(OV?p66mwV7SOYO+4Cj?naX
zGnszf-Wu7<u4oGsC}IT9pb+mlHu3Hc^;O@$>Mw%ls+?)@A^1UEzkIbtHGWq|V()oZ
zrR8Hh#6VrmQSxUeOG7pk+^Na)!e|X^Yi{~1y}Ckk0TpBFdvr{FmJZS6fDtqfQ`iG_
zc7tx<L59q~y84AsBCNVkl>Bq;y{m)o>&-E+uXL6)#YiVk@di}^>B}85eDg{&aD&~D
zW|uhlqB!r-+)DFcT9Gi(`ACr2Swfl!){*^WKj`Sl%C$8T_ZGg<Ta?NOsqrb}tpi`o
z?B_^)C%y@<Hm!S6aNRJJFtTJ-YFtOBeAYIv1R9l62$NOrgmNdHxrH!U<*q1q)tTFo
zCTne?5%ub2He=o>3!t1CIna7I3uM1Tp|;cx8M7+MDIVnmrrhbZ<q9}T+xOa0O%34U
zNkKhcFk%!sYY0tlbHYXMQ?HN$ESPtB34`zJXgI&33e%k|ER8qQDu&fp#~+4T{2M!B
z-x9^XnHBrOUc{nNDUjt?vgI<_ZPLf02sXP`1nU;A{G>`P*U|io?x8YJ!V#ioKPuf+
zszh9M-Z1paRs5vda6)xXq=Wi2N^^>=p`v^M^KF7e{aBBF)K0Z<A?(J3%s{{lt)&$(
z4LKg@q53EfKzpkp_jIw5vUq^Pv>^aXepGDKoHc_BiqvK{28ww~jD8vn9@V44hVh{m
z9+-|c|6_WA;emCW0v#@x+!#iEZQrAlfiw-awTuw>HQ0Eg8hA}5zM>@H#2=v+gsmWe
zkq`_+X>IwX961)r!sI2%n?gdXbkX}|jFJ(uUO6G4DgtO%pzJ3s1%3frg$8~n%yxz8
zE@ZkI{heRX2<}Rm{FW1WviL3g=U7>49L2}<8vMdhrG{k`BC?Jh9g5ysJ=O6yXs=Bt
zky<(?l81RRYA1yRZL5tM*v)EG=3%UwlvP-*_=6HG6mSHbMCzdpSnGuDnQ_^wS}x)f
zl-R6+MygT)S41BU*{91bZ`4fi{IECAKjvuKCV;+Vi>MfJA0gJ>vfe9mpK%sM!<Phy
zY1g&!-l&zbthTIVemozKr(BXupr~-mhl6SiQ>V%*r@I#cWang3*yb4Uh$vN+2eUkw
z=D|3RE~(+K&(JEoAB^dP6<l!z2*3iEXW-xtYjlU`;LOrZ^Z4rODSEm=^AH=XHQC^#
zSG_Ig6<sfac^<)v90LvA&m;1x9OuF1r!4&(qC+K+=4ptbJtvfJAM%~5eEX1(LFImd
ztbFw=R(gt{vcH%sOoQ%9e^I}br!J>Ir5E@f%CGq{o~jEJ9q|<`(fwkAaZ%WRFZ>Ms
zMOKQ`Pk4d-R6-{~dw5NEb&m~mw&~=B$#Gg1=SrYT&#hhZ2nFWPbeLS3F>DmG2+#uX
zoSNPKde1y$0-SEz+#XuWOwqFe|1isgPZdNBnlpP9S-WyiZ%lK23Dd`<|7z2J^+R|7
z@AP4EMX4WDI5qVbf4#1Lzc%alD-?z1kY8!=Phs%S=!(Yw6viLrc_i;WO-r06esEwj
z-~@3;hH~uL95~gC$ds%e`T@K!tKf}{?%;AhF@r$wpNn~#=m<n8dhBYNlR-DneM?z!
zI*HimPgKuyX!M_Mjj_>Ol@G9VpH)fNgFi9GaympW!f{-Ny_H_@GCi%s-X5GDKjURD
zcsEnG?`FN=4f!(hJze(#Gz3;DWF;ItO{Zb+DGAMc!TSsz9vt?9{WPD48hr|Hdcodo
zRyC3i5x5p!=iiqIEE((<U*SlV(-{jFSnpk)O`u~b@KA3NTtIssguTac@=?LLJ`8(r
z<8d#5vwiQ$G>uER+=liN6CVtAp?qAxaCx7<4<CaYC}eMnsqp^mc#f#FTm2B@2~}K^
zt^2mq;5>=lwY`mbKcFddu)V|A+zs3J@QV|;fbacKV7!s-`%cepKM*~;{m|{!oxanl
zJ5U;M4=GBVcXn<64zP{S2Y3NBdA@}gP>tu?cmeM`-@yxb;rTthfC@a{#S8fK^ZR%K
zpMCxSy9&Pd{2^Wpu)scEQPEiT7M4B0!grwXSMzi3j{(+74%OBcJVuc@49j~M7U<5f
z#}u*`sE!VMijLx(fH~PygcAlI2PN!j;woK=-v~~zwSyY-(<b2^wUf|0VRaSQ!}rMN
z0>8AniW)4->3tSHo^M##@I~w$82?SKSTg*DL|wTLsIi251Ovri@&$4xtYa~&kvg?G
zm!P0*(2_><9e<=|Z^$0EMAx4vR+!)lm0_4I;OeSJwqc^k3spIM34ubLdLiOrfVkQ~
zz@|mQ?91&py)vDpajo8^t-os<)ZBX))$8a3dX5{us`QfAZfv+|HJ0`HEKAP5sRG~p
z4IsoHiTr*6Lj2O*ea!JYBtOsk41O6U9Cr@<J{;JQb3&zAj(-2IMPfE3CIx?yC8<9n
z>jv*}p%mI4c_kp2=W%(#1pk%0yRi*pMW4V8?yb3J&E3Q%bc}Q7eCQZz{P0_M3zBgl
zZnI||s&z+ub~>%&PCkX7=v`9f>wP{;)9F+3Xd~SeX*drkYbR^LPn;rul|}yAQKXZh
z<GK0bZ^WX)#Xip!KX^>tbO=-BNgf?NguM!O8rWctgJ*d(1_tYiwE}Hur-KtED!^=7
z;l8g<&H5hrG{|Pu@iH5q?tkIWyoGJJQ9jVelRS7z&%M=W`PJ14aC{FQ;orgFyXXWe
z{W_1jh|>0!AN-L!&QmY)PQy-KNlHYufrznBtb1*(mlfkbnx$yO_*)MNJ4s6qbS7TO
z!k}|vU6`!xs4*{Y$Aqz%&2nlq@jFQ-!6y#HEu093jW{kN<9SY9fmc7k#z@|f=;?}@
zS^bNLA-wMCn+>9+J$AFjGYz`W!Y)c)`Rp0Zp0rhk@d)smVj_@NEwDWaWvtUF|9l~j
zT>X`KNy(qn6kTq`Ui(f;Wf1yALs80W*9b?;Y>d-YJz8D;fsA*cmyScn<w__GeijG}
zFHs&C^dEV3bW&hQ8Dlu$`!@O!hp?UJUQgH+Xo~}uJEBxrxgzorHG~tZa&fA{8ci~>
zad(uk?boKT?H|<sk0`2>!m97}e*e8!lC!0eNDC>ah>ff&B`xat4E<wne7{&GP>7ql
zK-D?-qgcZ1;G$%wd2zjM%`h+A@HM8ypr=H(Xl+z<BBsN;D)%BSqPk##CR{?Dq2?)K
z+pKodlB=tSkGhGBkoXnAUERTx<DHzAO>#yQ2dk*J2R)i4j3W%r9c>(EMR$dUb!0gw
z?ZI+$SzCj_`c-RgQICcF2a~Oa0)sRl2VZop`bQo-OMNmYCZV#`zbKbdqj_OxP}aK$
z+K?3n=}fB>NYv<ILuqOS&{AOdFpAL)jRii#5GIylVj)5_X`0RMjMmgf`88UOgl`PX
zVw{4gSA<lv5Yv_XK^wWHiDo4-JI<9I6P;frkHGF(rraE}YGkgQ(7OVhjYYhuCq_x`
zT}&9<#VA=Qgh*M}T`z#`yeXomUEyQflo?+-albmy|4qED&foyGd0bnQYBp$)cn*Y3
zB@>hZucB_`f2B-J9m8yn({0e*FkCm1gK42)WdjV}je)+fF-LfFj6f9l>)VprvhI1I
z)xATa?GEyei&@hqb^C>|+kkdaVMdcsuqzK9VG4_B!w6*QdLb1NT5XX&BJ23?Odnq2
zdtnhMl#+TQT?`S!Jq@|e>Kjl#6n4n&M+kW9Bxt|h1*TgMd$?6Ve^m3rajGcf3|yrM
z39B{h<_UO&Qnpv6`#uTY8N;WxKK)#h_$(}Or8%mMSV!F>niPUAqQ?*9*9eKP72k&k
zRd2Anwlo8pUPuk^*TS=^i8NB|VjcYiyLByt&ZnCQF7e`d34~MaBSQ|7z%#fD^Fc)}
zea}KDeOlba=rhWZw?HpP_Ml$Pl@l6%+(Um>=XKxg6~?hua0q9`Uu8yCkZcH!1n&s>
zTpr?>OLCHcU2^V$Pjc=xw`CLkhEF+y*br_p<!D5CWwLlsMAvid$Xs`BrokR#>;fam
zzn|3apM}F~e=s|fidw$OQ-J&tb5msa(1D#oPhuCMbNHtTHn;~@dj-t<pI~?qI@#<)
zYzmp>K&tjIP~jOasZkMKvgLEJ>E;a3zF8zb%O{JlK%;C78Ab>gP!g<crzWr;x(Nnh
zFH1jLI1V_A9_oTUU>$9t0bd?4Jt;QjZ9rQueY)5**PLoz5O)jc_q8?HNIn69!p?wU
zD3E(Ckb6BZkbUK9IP7aJ*jM#f2W(aBD-KzMeXRxiTA(UMD+i&kVaY!RhC;a->K}IZ
zQ-6yp)qjQOUt-0s%3Dyo4B|iI(+C$&T<6A#g^F;T7@swq8RHL!)~%8LC=Q8#S2VA)
zGM>&$<-n-_e!>vE=2!SUK5hCwz7|f9@b}$prQyK&RJwAWGs=YWiqwBGpuPHwF^Bn2
zmkZ~Ur4F4>UFS}91z$o_0_As!mrv9sxm_yfOE`d0<Y4|GS4{oWay@<0<%asq^+%;k
z?)y)ORHnbrH|o$Nd_Ccm6W|=eAzLwj$l^r}tiDRWWIVFZ^aVLp($!0Ig~lv&aex;_
zImB1{<_d?NE)MiXVe-?PsuSs5b-gdH@qKl9U@r^tCY4f=cv}C|#RsUf{ehmM^6837
zCy5RJbvkK4ope|STh{020+?IXxeb=wam8)8@Gf`pRaV>bv+t4ldtW@d(5xZc0RN{f
zr!R`5_r);`;Be}>Xeq&wbz=>LQPQy=*sL^WH)d64?514d?;1D;OpO;z>DRq5>o~|O
z%H@!Y!cYf64Pd1;k3ypFRN;oqnsOu=)D%pA%q_j`41V+X9;b--`GU{e82MU`HdMpN
zrh=ZCBt3$6fuT1&A|!tFR%6nbwk+`nw-T>*1x4A$;iEZ6|4rp<&x2lTlK;go(5dPT
zEIV>^Sy4_YE3R|OitCB8qMS`ujC;un8KAC^E6Iv=30ZM{Kvs;yM{{?;n4j8NLsED_
z$~k%~xoNB@lh+mNnBfv;?Rg>B{pW%>g~L>A?zD&NO%W^SQZ*-nC(LnR#JxAbAy}U9
zOM@r0JT4oSa9rBnFm2i!1#OecAVcJwU`A)KI~p*DLY!F0oZvSVE9AEp(96RIYBZ<O
z^K{t6_W_3L2ZHZ;mqutmM{$`II5uLEcNj$3Gs8!9fU6_r)=^70%@zi_>%mg6<?#^D
zi-zqQ!kLqe5>=2pf*~}9U*_Dtfj-4ijB(Mp*d!{@7^{ksO?~7FW^m(FA4^LhQGYI|
z&^=*ot?abg0iIT4Rl#_cFbXq_@>a2+4(k*{8{<c2!-y56dKGzG9sioT1pkJL5Uk1%
zdc@P{UD`lw5@LjxQj8GA1Uv_0vEDm5VT+>PklYaY#PJvf!)dTZF;8<ux<VfaI#Im>
zqQG`{3}=N4YMt!4%NPy@=Mt`Xdsl~t-x90iEgdz}qgTZ-hEl*^oPkL<*5>Des)d56
zL#&kv&g%z!-`DpG=UjeRG!0>Q9+?GW4hkkngn4wdb3BqasOF3E;WBaH+S<cad9Z`C
z2Zla!qc3O|VmQgH!tqKqN#h7Iap|pEx!$n6incJK;DV<;3|Ho(e+>>-Z{4d$J!5d(
zQ^V&EV=6Vl@xwznl(7T6R6&NsCAxmaG?0nxrN^yaddv37u#}bd$XG{}qph%1{vQ3X
zjDD>J-Uddmi~gZgjFu<*zFwe-sx^|wkEQ5-qo~a4YZ3++wpxL%_YBXd6PQ)x2m@Y8
z7I($Sj9)oQ+kkBNtxMHYT7iQI$K?X!w{&KQV#8Y$dYh7DgqkOXG?Hf$S7`4eZ?J}9
zFS^{KOFduwG$aw+P(p5LXC-YgtWC4Y%=+qThpnv@Ra|CE&9o4jcy;vveiAW(6Cp?w
z7+mlI7tN$kLs)50p?IkMw_;r(s!_!?BD^&ZA1<koZ!1%Y%2dtD=*GjU&^SfZMcQ-U
z=_;saUgC_`Zz<>}Pu0?A_$LYpnn4pZSlCLsK>94?m?YO!-&=KeY5L%ajgE+;?+;Im
zibLC^YkX#->o^g*4hQ;N!5IW(yq{wf(W7I%H73z3UZL!RVdiS0yMLa;Zqp3WC^WU&
z<t;}H5WTUuDqpEBuA+~*#MLn#9kYn9d$8*sw6icwPt-%HLp#fun0I={UyD!Su)_Dv
zysR<7dT%kr0a<psRo8M9jYFh_C`<Ix){s)%&u1-IqE6HzajL<(e$AVJNCFE9Pa<K{
zxy9bY>AnLvN#Bca8hMYoFKB4aoR14BhRUbq7xGrLTTopn?3FBR<#Wy9Prs<&k2Pf3
zbF#d|q_<8L)LsVZ6DOUCHzYrHhqjnq=x#L~&L=d;`zimcfKJlq$LSCuQgTy7uSlG!
z>!GN4eY|ArwW;NTgK@Mv#aP1J8^|XF^JqHKG-{Nr_Y49n!6GKZDXwwN>Fx&;*dA2&
ziK48hk+&aBd>7glso6e~GP7x%0-@cHPBqUlH+WOtY4kMpCczxt&895*d{#ihX|Rtv
zjbN-O{Up+OcZ>d`sTHawbW{QsBbaFufD*Y1DML+!40XCt(0{bE-A6w+=8x?XQ<^@}
z<<wc;Dtt_=yhb*i1mv5&p?BAiKV0=@1R^Pnim$G6X_}3hU_+RpJ>u*rEsqI9=jtjU
zpdH{-jO@M~l_90LoZKjJh2eUSU=@q977nTrG_uem0JZ9_n6V%CM^q_>n1Y(j@U1aA
zX3c!4@;$hn@fh#wOUlLydq0G)G3Fld26UE~aZgWyIt8auLku;K8X~NT>S`f1niC&}
zDCe@zSvL&DzEs7!5~z99l43#8s(>D@3f`8hQ4*FVx^?fXlo_YMxkgR0sdpMo)_Y76
z;rNR)&DY}iF`N~g&W!e<Iy@uMvn?V{+k<*?QFAPci7(DvS=4?oZ4@<zqNZ5a)1X>g
zoB2u$I*(@1m_F2a8dbyn;ePZ>;lZ+*tgq9m-G^tV(R_G1JjExczQ3=Yz)5wou|M>u
zm<}aRbbRmrqx}t7+jC5xLtp50%%Fx3maoRy$AwG@0xwo?fx2i_)M6@J<oH_C5@^!X
z!Xq%=V9KXEelRoiW2~}_p|7SC=F^^iddxfF`E~^3RrsOS23d7svP50zfJIjb?u-ES
z#Cwu*4@unD=%?I31iZ_UbAyW?bN_2p6>K{4HHr)3e9xkcjb^+mO1i`NR@aB|O<EBv
zRaGG4*C;8>5$G!=d?oKofAn(>z4MjkQRo3(#Bg*88bdYBO1v{D(1|dGD!WY^Koja}
z<M#2lDN17!=yaIrDp+A~*68z~h1ZBZcIFGE=vhlC3YFR`qBB%#7Fwg}ck^!W^c>ZU
z-7t>4gQ709?{4UVIqKl83{yl})Zhb7H0(%+hiDwLk@Gt!e37G*Q8i_;;ukl^XE`q4
z1}EH<!LmQ_UeqPA9Xd>AL&O|5-$4oT(l?aOq4kmy-5UFeJ#8>S%iwuFB4bVpK-%@a
zhSBue+SV3pnw6bq$7>1(Yq$r`o}ypT$AV%^Zn8x=q&~-pFdgqeuDwya4)8rF>p5DR
z9Yp9tizt@4^^Wy^tl{9c)Ik<4Hv2xAB%YyCw+Qy6DtC{l_@BAArvyD+Y{#BpJI*lf
z^JtIkLZgFF@4^SsZ#lyrdiohMJ&^v38>p&fH`^R{b)fqV<x@>NSnbWcMaHsZ0?)wL
z9@^;kgV(uw#p)zXD0zyAQpdP|y@t;GBUg~w4Wn6x{9VwjXc%+BoPVxemz&jQ9%}U&
zl&tK75u+4`3;m#BytH>TS<oUBDJ}d)Unu6hqeji1Kyfs}D6<_qLLal0J6<U>cMAHd
zG9X|nXHaos(S>1cZSaV%T!XC@PGq2F>SX<(%R*XbS+r`qWMsvvsMV_Aq2K{heNXTr
z$`FC<5Tr&*&frqd;HK6}9fOt4=(4$8Hp~)AGkX^wk>+u5G>g$>ln=_hOADdH)D#rf
zfg_C$b77ZtQZ&)1YI|G>3OuK1%ua*do|2opJ(=7ipJjP0$*3bT#cz07L=iiv7Yl^;
zAf!U7dq!9YZoZoH=`)MUgr=pbi&pIb;AlfmZBytVZcmC!@wUSJUt7Dks)78CF&?vE
z0t3ep=IL(AV6Iq)be7p@%uwhB6z2`KSS}|`g<<4KJ<y6+!t5GDuk+@2kJ$v#t1~*c
z%z{##ErAz$it({B?5|k%D||8lb}B42L)plxyH@2x7|Yz80#Uwa=JRr+nOMe2eO>4<
zFMlY@sTW1V0{pk4lisRGBfPuw;s^z2poJIO5={FNtO5a<*Tr+>U@VS?`Pg&E+|Uh9
zg4^9po6h20UclKso7uo79kzKU5S9$S-0`&O%CJ20ln7CMLyn~xHaWl*_4^OqHo;X&
zct618jqIh4i2JVlodmr*^;_~ry=TYtXIgX|*-8Xml93d9J+g*NrP4&rNnDZRVsgO&
zo86Zrk-K9}YWdA{h_5;psv7S?e}&*n*ldvOM|n|cx*>FBzp{cVVjzPI`dAyeTF9pU
zFy%wq1E(bxUkzzAX^rksbUK&^cUH~Sh^`n(PgpYp+gNXG5a-vsdq+jJtJl{T9d&W=
z|M8>$C=_Pf_eFFIeO&MpD)N|MJ<nkJ-s!D>Uj#qeRMbRPoSK#<)c`E>liEHZ6$rl|
z5LHTHS9<hQam*@RgNr5u6<BfmFxMdpa+J~l$--AnWMxY@&3d8rX3omFSxLEy<G=>f
zG_rE{Vnb;vT=(ZtWwS=IInK-6m+Ao7`PS*8v<^(@`by<uIBXO&u^1<{VjOij*tXZ^
z(!@$Jt{A1-%I-xf3u`V?8Mwj;Fy?}jZ98$<MLk#2qaU%7ZcAck)aufJ&KhN4tq@S)
znKq!%*cC~MfM!)0Z3r{jnfT_V;ys{&B2qJD=zmw0s1!C)J(BXMDvtyHQ4uD}jSbP7
zaj7<ua(!LrGw)jq1{J?`ULuz7ei=c9=D=!A=n4fPr)4xRZH2#<E?y!zI;i6<u5`jT
zTs1gB@T#`;a5nM+*%q}xUgR`wr~4|t&%69Qu0Ez5byvCPOKPz6#r@W6jBf@^m<m>3
zDsbT==#2WvjvvXzQdvp=n`(z0dh1F>nIB}r#9U50i}0TE3VkBF))$I-u?P-I;3#08
zOkmvLXI}=D+be}KZokx{j&ifIX%e%GCNX0y0JY*{EHIGnI_G86e8(BmRFfN7<)AB8
zS%Hc=*&~+77_Jcq3U!N(oE}NORy}&2wxTQb9|S*>O+@dV!m2?&PLDEq^D>~FL0@;)
zeAJi&$kZ(x))Wp1&ahrx%}ZP@wwD9$%v5*g#5^HPGmAcceaEi0f&%S6#9;P#PE})a
z3PZnqS+uGO=MrbWn2P$LN;jiVfaQ!M7F?*`_vLl4gKwOtO<?@sv-6m>Q0Czm_uaE%
zKArrUrPE39(fwxn=RB?I*RbQ(!As{6jC%0ONx><^-LC8S5_t4!@Yc!o;`}_FWYF!V
zA&2FS0E~~FEDfOlC(gr{#b@*6nfv9*)PD4Y2=Oo44g?m>$8z+sbm5Vns)2Z|e*Y*@
zH1VR0UIHlyek-Fvy7S$Oa`e)9Pt9`7v+<%79=FetfT+X9E4Wt1EN@GF@PGJ_HJgVv
z<pHNWwkh{H<%vz%<&<YO<(`q*G&f>58tf0WEE`~|4<G7s-j-bQLxXa9s8jCil*c+{
zSEoGDDF&4FS$WI)yek`CfmA_Q2+B*-aQUSxWH343l*Y=z@am-}@d96$8lvlUIn)FD
z8DC!fT1r36U)6i7f0TxudkQb(B+!UtY+=ES%F}WP)qnWV2@u0xcWz`;wWkvj|D?Et
zgRX~a4i*7uz7cu_4#8>yDrc)45z?^xOl?qvTEef!;9EzyZRmryWpD?mOKxmEXyz_B
z$l^a>(r>;YW}27lV=Ns=)@k;^PS)>BBhw=%EQ8erTzMm;cFp(=HOoVsjFw?L$}x;H
z{*Vc#z?OBqrhg)ahz;z1RHKt-3NJBh;w5GX8ka?oLFE<PaAtYPpUj3Z1iJeZ#w22f
z>O^r=aKX<R{!KWhm6?@BHRVojbThO#Qp^NH+}1vEQ$hj+hc7Sh$im_k`Q!@fz#iFd
zVqi}gUL(Ih6!Ij&ZL0?Sh*C1{E0**L4rr1RR&SnU#Qf-HD$h{vBITT`;wM#PC+0ni
z$q>%X+4SR%GaJ)8W3}$;fUW8X#~L|}4jBfVO*91bwlcfJ>IVq1uG4|%N00^jY?ubc
z7&ebj>Ev-%S0VHjrqZm?0ZP(L4#$s8)@-|vtQquB4Rg=wmFSXM9rgp+Quu}n`i$Zy
zmW%VKVLy{NATqc`sXNK|tdcp-d=<^vbd!}e|CpyR7cVg!JEN^MLUVFe9><kJ{-+8A
z)3}{hox#y@5?(66X4NO@>1mqOy59Dvq=pM8hNwtTJJn(hW4*kp=DJl)HCt>-v(7lh
zoad_kz^~DTsd>7ouB6~^n#n!n(f~}O{29g&#thD^1owA=#`WAoiQ<g-&Q2V0&a<;v
zE*;T+UsDC<ZmFui2FV_35-_UOya+vYmD5j<t8{V;<d=X52siG`JrT;WDVmhXTKr<5
z9}hYFc1;y|Ra8|p3}vs4F@jfMuVRx=(Wkiu@aEpli9ApjQ$#b{&70~<^!28`6g{px
zDjSt(6B%M;Q|g$QM8bI4+$!ByYWs?!p_FPu4asR*Tr*9}=CsW8JS>{?urTv5P_f<Q
zvdB$PE|lXm=C(g-b#;Ugj$HqsnO$y8`<ZJzow<`@$izhhC^y$!0%^@<hCyVhWoFh2
zT>!?%bD#3OA^3-=3Z~JFYCW8(X{~n|)EbQ9Xc{K`09IQxqu0hurmX@=nWGib*qOME
zDi7x>tb+Q^d^B$L<}{q^?~a?jIa9G=l?}14Y;7_zEt04oj3a0qw-&a3G~UHYPEFW{
z8?yw62PoDmpN)F0MGLiqDk0X+KChTQEtc3>EOC3W#9fQU*JimB*ceZvSgT7bm^%CD
z&%+_1m4!U+vu)wJH;GR5=U|o3qY2|p><9Cp@{M5tq&vn1E8F3OLs>@~JN<|E*VNtB
z?#@uz=nF&Ws!Ocze0k)2HpIa1hIy=vsnMKSO<6M?Kmn(Fe_;aLneHM{K36T;-U@7u
zGQDd3k-3bH;^VMl4O6UxI_`IjTJ<lCny$lm<V~Y-v>(i(xgVM-vL7T@Q6&)3Jv27Q
zN4{fR-d?WCpn4di4Lj~Bl~{_+<qk`>b3rdOwHlL+-`o$xa)@R@i<CqiWsieDpb<%+
zxJ9~hn3rfSBf(}udWP~XH5!4ra(Gq_ypBqc+PZkv(#5N07cbrSg0z$hOhiB8f(uwH
zT@tjG?C#+J6~Duh=PKff5FdA%!KRshUMV)oHYG>V6R_f^l@RC(YMn=V4Ds;C(N!B!
z*Tw7ymLcQ=7Gnmu{g?*~9n4($n!ERifm1T3vn;yIs{LY4c*|{2JOa&3H(d!A9ttST
zI(`Wl$NWz${4lL~7j60@bQGYZ)APzh-<y2`$;l#M)li2$%=E(1aa#MX5(T}Q#EAI;
zF=Lq@OrW5kL`kEr)SGlRjg$1>Rxw!L(IEIYR`7XICYqygt!I|iF6Y`6s&*yTjsk3u
zg+sJuYgAheE}A>o8r7;srK(XuVH@n^JTQ}!JU(NirtTox4e>n-56!gamLaZrS32}6
zmL9GO_$EZ%5nxVP^?F{WES}IWBNorNphiRPF?u0pQlqq&xq{tQSf$Y%^%1qynP~XB
zmPS0YW+EftIWsTwL$8d^&`oi4T82W@oFOx<`Q*Ya-%%VC{)luqr5~cAhY>+)GI(gO
zVXa1_eienNl#%-7(}_NGK?Sowj0FZEXigwt3;tD|OZlxj7r~;Q3!<0m)&yM|{+a-f
zXtdvF)9ITuNwZHW36an=Yw1Ip6iZ5c_v&!(`LmO23%)52m#=Eh!izKD7TUzdt97oR
zA^-T);L}S-@lX<^9c*xcGGJ=%1wlzWNpuS550noKwY86&+1JnMQs>okJL{a=HXF@c
zSYiR4F><0{OY7G~B(Q!T()wvyLPv7G=VfuuLP0cV=03@AM_W?vvQb@D?A29Q{*r)#
z@^}XHsAlUoCPgy4*zh|i1Z|gSGT!w<J10u2v^iR5Bf4Hf_v?15*WC-(R`Z&NXl#j0
zkR~)srgEvrM0q;jViqi`r>Vo!Y@+IC+3_9bN&d{Dy|RoifcDd`K(~^Np%uHJW!S0T
zJs{{b(gyb90ya;`okrPRIJbjU6@tAb5`3rt3=mt(EZaq=zHsM0>h@HyuU>E61e3J8
zvLW@*0@(mL!|4(IY@V>?*PHZ|oPsDZgxMt-H<oc1%x|Iw|1=}(2u_JE7bZS)I#NMy
zQ70ebA7tlh`4!Yjv&RLSoXI|PTf6mO$M@L^L3d;$!^1v>q-$F^U07L~HH2F=IBSg&
z7zDi|9#MrSd5pc)LV?s~MhY#_AE{}u0!QLAL>sAAE_>@PF5~7OMV5QLV5R4;_ZGdd
zmR!aAtQ`!9PbiwtsOi}AjE*Q;IZ%ugR3Rs0=pT^_c*C&f1C&Z|pDHP!zNJF|T0o`0
zk2+;P5C^85wk6U|xmKl8O;HT}nzt_$|5eI{tlM<RDmhXeaab2q4}CLfq1%wPLkE4l
zrZ|Y|mVlg52ZT*(d`wyrN#QJf>|Mp?wfuh6M}~%9Zed7dp4vo>5jMY51nEd}WY$4x
zM1oJs<v+?tP)qL0Ei_#(LiauwfT<!ld}`vKi;_w7t=@GQp2}|ZqNCaBZ<o3d&8s|E
zo&P}A0;8Es$gM{yZcx7g`!ntzG~JwZA*1j73{x05GqYPCG6v*}!I4^^FQ`oBH>l*(
z$Pn0|uwN>$21WEU)R5i{$elyK$%f)i&6k!Vr1IBv%#Q9Dw8vlKpU<{*GR4iDozJ+{
z1YJV8-6ZPt?{CxT!g%)Rc-aVy&4DTFXwiLVsPD+HB3t!sgFP2}V234ervb1c3OvtX
zC#v=L-LFU(Tu1e$r<0ASxOwLeKUU(zKegXTjuWNkiK3`N$3)5HMB!r$Lc5r%<SfSf
z5Sog^SS_hF?oWSaWPkL+GoZfQ(e@SQU7XgceW%-ea=*!?>pmD!t3s_LX%9iC4R-Fk
zE0ay+LnaU~B05B7yZeP)!E}GVtov7JZ4z_9ixn;}MrwBQIGFiN4g;a39o!_R-$ij#
zH=pYCoH{-CyIW^h1$91mc)p~=C(@0fvtx^{jy1uOX|RE3Ks1V6$Fqc<Wywuf&lUpO
zME7j5v}aA(ysQh_{qm50_2&xN=ZINUH2WNwW_khoot|Um+%BKWc3k%@bS~skC}<Q+
zXwH>!S65K@Nj(fTQsd5HI0bf}JaVm72kSZl_T3G}QH;6;*qgsP&b;HbwbMt52`-89
z*D-Il-<^)UuhCd}T>Bwh8<v25XZPWw;~+UYJw{2s6>6Wc)+Eweldnq5zkn@wY<A)^
zxf9n|6oQmw-WfFH)Ns4g(JVR(r-q+6g9e>JoxWlxo{}$%>(!NWNi$KOv9kPVG*q)2
z<7keESlkRe*J3Tkty+vlEyhrbv9W%c5qiuxD(KV8KJzu2K&fSLDnFH)$^2Dz$9R)@
zeBFYtG?h+6`sHr=+N$7JQNgcJ!LQc)2uo}uV_9QP?EVy8z=D}Tr6!y(f{kNriWeRa
zbJvM&+B`<x>-%C(cvUoIo*vrW$~y2Z=o_l(XvUsK3Cva0+?{d4fl`Qg#`+#kSgQw{
z6F8a<zpk%~3^3qo5`P_eXVIy0?e{~tb|&#2P2$twfZa-=tzzEnnR$$O7^g6=?L0m;
z^LVd0k53V1EA#fC^S=64O*D=6LbHORJ($CLP^~kZ$J_=vgQ1M6sL83C!An}Jr`Q3_
zWZM=-q{zI3R#gr}RSuvk2WGBJX)>SEWIpw8{^G<tg-QLj@l`vo4`lb8Hs<vK&Fin>
z0nh7itt*vyyLmm;bW@1yQI1{l<eo*>3g6b&GP6gRfzK#r*o@HHvc`^~;S#Sc6$g0g
zt1T>RZ(#~HV#;4aWDY&?XY6(|Q~Ugs?(Rn#*Mq|(>k7jxhQ`ixANm0uB2Wj|sIy?R
zQuvlu8k-o*v&Nx>KXF6xl4YEs+`Q=i3KgOkSWP$3VpHtGwueqZz$G^8ubD<viQ;r}
zn}a-hg<LKd#Cdcj9WK|YGP3$XB}=Nz7MysgVFT1y&D5;0r+3y=@;EU7=MM1(<gBw4
zT8(<wNpUl~$0Ew@Ch@2gjZuNtEIk-C2cwXK;mRKtP#AFbncHKw9N9sOPNp#HVhS@&
z0W*}lX*XZAf7;buHu9D<t3BG>2F&n}YpM!FN1>qoiBff4gHuBu@X-tL<g4>!y0&(q
zw1mAmY&fSdToZS-ug>%mPaQ)Jws_bIm7N8rs^r1Fu(?NW1wVT>gn`kj^{i};8_c@w
zH(B&PLyP3#GhYq-;0t>81RpcB&HVxuerc{==_>)Sndyj$&=`2qsLuTz>nS3nJBOL$
zj5{v9SDEsUd6_BSj*nS@-%LgD4Q;b-I-!m{ltAgg2L|E@UWw0BiX8gx&5LlKHxf86
z_zlp=I)Z04ikZo`awG$LgthM!qd4u99pMN7W--Nj>gvjK{Ns%Mhw$kXTSY&wGKtej
zT?ZZbDl;xDLzeGC;zyep<Wx&#$LtSlrG;+vR_=J_Q{gX7A<Bl+sSyk0PiRp4VoZO@
zw8N|N$`jH-5}$KO6q=;Uyxr9g2osFl+G~*%ev+PDOb}ifZGN<KDmk!PuT@5-umQI8
zzA|{Izw2mC^`}WOw29%R<LN;;QL=urW8U3aQzE>MVvWF)y*Dq_g<k$O2{|drU^Xtu
zUlff~csdzLELBi5j?#dqR>h$pOBLJ%38+n`g(<^SLS0CKYs)M5sj~Kdt$zP-4US(p
zHl@!i?_OXGZ4hogced@`(`PTAy?yqy7bsDKOpt15Dc8}`Yh%14<lQ4r-nmlqv>`Q5
z9jUqdR0Q#JsfZ+-_d@AQ+0e|u(2+^Hp(_lKCeWMA(>An}0_X5mgm>EyKty?y-wj)z
z>#2BVY<Z<LnA=Vrt}XYPNQTcf0sbS?+M(AOJ3i~hNqQUAS*%Au@mb;Jjt@IpTj)&2
zie1_K4f<R6*0d&XizgOazrvgYiUd>ZDH5Os-s1d&(rXcG%Gdr4*OiCwN_Qngg{-TC
zamo<b8N!uWdN^~qEA<)`Z5@xyo`rrjnw#MGeXD;M?t&^nb?XPpwzk$23caIOjdyhK
zER81`I~XAa)b;A~f@PGFLix&|4Mqv*saljl&0Qu31V6%cAcC73mL09OtbVkqo2BTc
zn#eNDUrWh$-zQ^I-MQkc!MDH-DBJ*nEpW+W@1i3ZcF_P1-0AVwfD~U}jpz#KqrxB%
zB`g$0Q%4NAdzy{tGnUhpA7ojl8dl*G`ZI3I^tK?795^x~NKE4nmN|j8phq6v$)sD?
zo$M$*-aPqSlpkMUFggkw@N-&L@V1K6%i=ThTGVHMtgPXW^)v(i0?1cd2H!WI316+?
zr!49RKdOqSv2v19zj=%csE8eUU&fyHAu}VtHE^8sW5>-w_=Bq`brxN}Hjpe0q<x%^
z9HWi`)LkE)E{>(?8GRVqm0`QkqNZ&q)o?^nNo;1?5B_1<8?E%VLH*p)MsMTrFb3u=
zCu2Y8EBHFJY*Ns{i~4WX+q(B%)><un6gy?>(Ez*K^nANsqBf81mz4hkd=Hrhk>^z$
z)Os1Gv30~^>t7yk{-7Rp9_6}KzkVl=oy4AYe!O(Lf(^^8Uxc}(w(#wr_ELCjG*n;l
z=*O%vW?116{?yzGRK&zWVH$gKvZb-EAe3WW0}OFP%ffce)mEZAO3~%zbqZBo1XBuK
z7$dwuj8HBJ^eAzgnzRyox7CFnzUwz^ql8CPESw5#*Q#W8<M~r3(M5;F_^tZaI8=&m
zp2ZIOP?y=s2r<1wq064e*180TDL|f+Y9_>sd8>19X|UVM8+4y5)5)83GEdSnN;O7B
zOxD@9-59c<?QxPxtDjP1SCu?+{G%Lw0_E?MEJUdh!F{==?M`{6DvQJuW^9HGW1d8r
z2DL4R%JT_5T*&bQ-8_EE)}}rQ&{T<Nd|fFqC%X$`WOeGwaJI=8Fuy*erRonzmACwi
zCyRQ*lSR0DKvmtB=!7bBhiGG~Kc~XovTU5IH2pVMNgr{lk(WeOG{&$IerWn(40N1n
z^Hnq@pMdFNrW}P_H?G;*+Kk4<mIy_Ks+=U4A<A82KfqWM$_2H#Q(#_e{GO>ho)}f&
z&QJA*S~o|Hq9F4`ZOF$$|Noy_9QJFlNX+ylQ|4s{YM9G;+b0W_ie4<ZqeZEg1&N**
z6#qpGLc(1?!*Ct9@8rzTCEL4X8Y6n%@9gYMcXk#OqF3j!Ysg)1BC3R9qA*sEhsJ8f
zyi8JUW>;U&a>;HQAx(&2QZb7>Cs+tzuGob-fK*)7?Bzg_UT@&$iU3$Sauuox4A5#}
zL@jv+*o=Xh45;Q3<_Crk()I_3iI_?)SLGdTmzcS|M4Ax${h*30g8{^>+MKJQaY8<5
z7@^oJ89o8^9?|S*a2$-`r++-0!3HyAue_!K@P0HWQ^Q~q?Mri8M5Ny2dJN}yIUgge
z-I%BPSJ>jMZ?rqHF0r_9Kj4?cIxw$>#Uh|K@Y&yKg!Azz5BAYC&D>8FW`pdVp<-1N
zG*rAq{!H{7q>lrd{!=`0rRab06%AmUGv^8ppQT=al!Ce2`QTNQvF9JAsd>@x)J0^U
zQt+PuS&{xD8`xxfu<={%#i-jDJbF|Oi=*loN(kb$=%2I20(OU^90spA_LugMhGDYJ
z44Q#I(#9C(k<*O?c#(Ul=qPO-OWiZ<>Yk#}JqphvLrsJHK2PzCaQopOG>Drs!!QAe
zK@1nCLCqI)4#*0t*70i(H2Jjd@C{NM&f=g&k;3u9H<UM;MlWL#H0VbXsm_?bN2sx~
zn~5@!Fe?Whx^sCZsNvWT#=-!`P&+j)Km%wmX+oHsip>Uj_~CLkE~WU@h<Dzi){-ov
z0)ss5xJmz(9!zBqcJyCsV@(C+|0>9zvA?-QAImgI%9NP)V3JmKSzLrUT+OPm=-`mO
z8cz<=Wq9NfJEo<DD!ZGBj+#QEsQj-L2r&z)Wd>9ybY#bH#;!L%G?Fih#s_?9*?JZ`
z=vV@vF2Lb#jH84ki|wMWS~-P-RBLmgX#}01Eb-CH#Qh2k$lwZJQOKOe9kF1sq%`h4
zZxxS~8S3Ec;w80X+3<Sii0dnG0XY4%_?#??H`Uk+&0ZD*M~Dw*R)kLlL)Eb|8LG5y
z)x^xjDs#?C*mw5^yTMN2T4ny}<~r}r^`Vt(C)jG_xwysIjMsF4N3=i^Oh(FC_!?%s
zmTD05mJu+d&dZLZWT69(2?O{heaiJQJQttAFykr=<xzUfH3?KhFJdS38dP4AwKq6>
z?d|7SDkEqH)piEeN*Zq1WOtUh^7TSGLS{G}3SedYQ30Gx=r!Jrj^MM$XzXFC^5ws)
zDm*|pSLmZtAp{a5u&D>%<)eoWfF8<SG$lAG*Z?rc{YQ}Fej^8$@_n{hmvPSc<3r~z
z8qhwUlJd9qY|Jn>SH5tdzh5@E_l8p~A3#fe0BxK+l@QaMHyeT`;D+j^i~xor9;u^$
z7J3>dgbA>chM+&9IU8ljQwjK1R8aqz8Q9i%Z7rr0zlbB0to4m3$n~+-AHTZ7bVh>^
zz)4=LHjBo#>H8WjENNum{jiE+;6!ucN;CJE9|xH@f5QnD7$5@5R@y;ksAjO7tj96O
z%Z!nkj<tVg7-s>nh8hSkEMvM=5BW~*lYH~ye3oLA-B0NcaXy)*D*0u6QOs*6Cpv|y
zOFgFg?o?gz$ny2mbUgn+NJu8(GzD@rk!f$uT+<(6-tv&o1)O#;i-C)IF#$@Joo4E@
z8uTx#UZtPkq)4FPoLh#ggGKQ6`aW^Jvb8-*dmn~X+9C<CY8SFcxoFi-pSpXr>81Y7
z#CGo*V%r+5&erXTeaVcao0DmV;67J6C}MCeJzL1R(QGx7jIQ#z*>H4*@{6XJNAR>Y
z^R&fZ<Z06mmbSi$r7hYlt)B8{V#=R3r~I3aDc|<#BfcLcOR!f21^f&w5^~%M*;wC#
zq7$-oH!-j21PPNW$QO;Z*E%9X#b{@UQWOoSDj^peeUzP);!cN!!tgKJ%lGCf&>U`-
z3tWoxDar=K9q$!NY>*1E0kml!`9*cK>ZBW@nL>F^Q8HbRO9d^atuDhSfp$KGZ;~zR
z!6~9kcN}gpfEh)+&b?k4_SU_B6zl6QM!GL$ME88!%5&`U+7}Z*g=<B107K|{meoa0
z6qwt4&Zd9O2Vvk9m(RN4z<@I1SEHrxLB8uL?cw#5_H(?HR{q&dE8n+wpAUBT`Qq$8
zQ?vUV$feklhD>8`7W0(&<`v5Cb}!LC|3{Z7*UT=@BRnfwT=K5<IO*O_m-QHweZ%lS
z{+}HF@hyjc{4Wgu`2VrPKmHF6|M-@}|0Hf0FC3tkc<{`%NjMS017%caRQIFL<n&8N
z0dz!rlacWZWojUd|03)N2w`cnq^;b@$YJZyLz7`KsPT`4^#O+TF^=+ASI=VOFMJgZ
z0#!>g6wqdYVFUlNiI+()uSFa82KO}()>`z>GRP7ttCVM_r)@I`qkdMBkz5+Cbve?&
zdE|%6iw$-Z!JtVvUK^l-a2et<6<Kp9>j(v_!UK3t4rOGKfws_@GIXbI4N_qksYWoR
z-XZj)djWfg!Xf50w=!0(H1@}_hT$hLE3aJ3e2Uj(WkFP_z%xuSS&phk_@g`=7ruw5
z9)v0`2`z!D=8sfoXMQM$lReL4<G*}OJ48sK?lEHHvoYEpxwUQA24A7+&+W|CN^5+o
zOjy)J2~53*D#q;ggB@)jXQ6j>2mU7Jv8eGMEq$7_H)M=7?E;ZqZ(~8$U1!+@2t$ud
z>Tw=iUG+2t*q9)#+(57eAkG_*Q<?2^PG23OF+edV_)YmV;c~uYnB7J2XT^cc<q6y~
z$iF*l)&<oVhh!s0s$;DKN*Hvf)&eTo!UylPMC76hsj5QCL}7TF+ICbU%$1>|dFU09
zQ_W5zCqG0;Ix4j=+_0iS7%xE2Pdn5v90?JVJ3~UON3kIRshXSQW^C~cU~z0c5HsjE
zhpaL!JuAJufgNNhD?$h1tPM1c&A*w(=Km=g``l>@%qeP!ZWV&MBPfzG0*~1E(=<aX
zx-E*9?MP1um9#BbD?v4L%MbQ6l11=IUGZk5<V`Cbv|oHTNSX%j!&qTRCCYdu)<90d
zOra($$BD9$cW0v+;zP~+aK@uJ>l$h8o|Z2KVhYBcF}$YT08Q~SfTrQN8=@(`1+G{3
zdrMz{GZ`8{6jxUqy?Sl!90vxsshJ;G9Nl@#2qRW#NOQzULiQlWp{$zu0#!W1)xy_o
zfRd}L1SmphcQHy9PLC;0l~$P)tUAfAt`0a?0$-n#&#gc5zNzo7fwzjg;jOv{va8Up
z)Fq%+*H-SDhp6kkp+W+Ds<z-$KwSRPdqHFUMJ>amsG=yE>Y<(_RbUooG=ue?{N)ND
z#32)^OP4k%@b)&1fW=&EH%JE|W|V~Amm0q#vDKczGH$R7b3s^Igam`YOHyOS;nk=@
zx>BK87}1q#IbGSmhOP{~X(wUX|3<>%|98`sv0C_&u2hPy1TC5pbkdX|qdYh1k0^d}
zJG!!O>B>IRl~$QRS7wr~%!sZ`(EV}bO~0k@xVvxFYZ{a9Hk3sd+nMYYRMl@FFt)hm
zPgSY6p)<NTXT5&Y{FLu*-P?7^RA&#G&%&@fcJ6B0&fCWCh*8*C!PT29_}9LIO}Pc-
zoODsniJ+Vn8o~a5sZW@gYY!urSr)!ejl-wn_Z7Z>)1{H)nXRp@#`=_0uC4t^FjE0a
z?(ONaaQ2TUu?<+LtVrYT1>8xeNp7u7J(T=K=yNQmZ&_zL0q{}V749I@oSAa~KcvJ2
z1qY!zD<qt!sT5-HO3~zg$BF5ku&Q!mSL$6)NhU{orPmLdsjUR|7gd4wLUXycre4=O
zCw4zOJG)-`?0Wli9NdY6U*q5(aqxW{T{ir-0_e-~;w2fE3;gDv+;e_VHn;99I<Z!u
zB!5$&Sw(B=pix~BdG?g12dlA7aP%H;YYlN?i;;)&2yr0Wy=RP4EQDTbDHsi6xp}I@
z!dF+ToM2>&G3I)EmQ~M97B7QoL|)D(Suj}31jMChBwDu2wYBGn7e-c@Lf~OD1Th-R
z{1_8PQzj1B%TN9JqBZfpk1=k28=XM3CH*o3wke&wEaC~q6ZkiMRtq||x9{EC+1cL0
zdU#$Q{aSgKC~XOQpEC3jPJ4lFe@M`uomgpB{FUSG)3o=6zJdv+4%h<e%JydNlf4En
z<xC6rT6|7h?tyR=Bd4{YxO3zt3)~Z|RL2Ru_0P6c<$L6!LJYUts(9WeAuMv1!h;`M
zHf{<Q!Zgq7tyPyRX_@WudJ!nKUFi#WW-pTs=_9g;Si2EWlMDwEB|l0-7vu~oSZbs-
zct^Ngo6F3CX==)fM*Fr^sxzEcIgP;;qsoAfzN@@4SUREdg|FLJ8?9unW@aJa{?I(q
zLHTq<DNO*>)VPpegPfY$twJ=fPTJBdHRp}Ud6>enMglt}OUEx?G_<cMrdFRtVf)A<
zJ5iQgxnr8UW15)wYq1Imqzy|ww~@KLb8SdtW#c6J>UwZl%8;|*JMm4Yj|xU%MdTAg
z$0623lLXDFSn!>?dmsxt06`(3Y7-URK)V6e!*=XEYw4or3kI|cF!-K9IS^~HNL*e>
zS&lZ&M#e;}<z0|fkAX^kj>}0!A>5EpF_t3c7BZI{^QBLwAtAId&Za0<hM#?$A{--1
zX(F>l=*63&><F#UOmRG!MS>|GrbkQzMI0{{4qeC>_?4(skJUIz0e_j?DBu_97wDWt
z#UgvCHChfGR9iaC1IsV?zF$Oxwc={aN-=kL94|>;yPA{GS_(f6*_~WtW$3H|GlX5(
zyIBk%kqO~P4js4;^-ANBDMCSZ=siau_UHvKAv;JOV!{ha(2ledv_sFwt1F`{k_Ctm
zjA;|F!%XGWmc1y}q5;-}IhmqKKwC-@(nV046~sl!@D@F&I!(GB^|>KKLFr&N<_64}
zVAL&CvSHB(>4lVUxla+-bT3#-_|hi^Kz%^!Y$<F;ZZ`~v$^(~}c*y@EaS1Yqm}w9m
zYRXtIAl(*Tmz`hK4J(IIALrq=wXAVg&0K0wKC#J_V#|c4!e`S3*SoLyr0c3)7jP;%
z1LiN(Z8iIwHnHh?*I*BIjJ9#-ZJu8;v-X`;2pfnKxv~-7lbkRWyU5EuUz6%Fzfqjs
z-t^LH!b@#iv_^@U!$XHViy1f<?nLa^Vn;DV!Y)6tUPuFMMu@hpMxnka$(er5e(VH8
zjS~ZZfUq9|MuuszT5O6l2nqZH>8V9VkdsnEr%UYcJZj*itLd4KQbqpp1npK|&a$MK
zPUBgXPI_V9tU<A4z2{C1iY2SN7}WwU0Sk7j#Me%}!ouxkfi`gM-ZV78(iWmeA({<#
z4U}0I!r6WPd7x6&OBw-eM?&okC1BdX#H>Ek0&k!U2N=rR=G``NtuxPWL~ln3kic^U
zCVoQ*fL&`ORYg-|&`eNd(LE;Hl?KP$cX(_aS*aBCwvq=l#Ylc|2Q36eQ|^V&@NH!P
z(*PBt2pF|B?vUS??fX?476e*jtYTESN@K$jtQIcJl`XA7I(Bz0Oa)CI+K?MaXVeA$
zr7Ne>bsuVLdRHN;v7L{8Dvl%cxcCu%(X^hI?<9+-#fM(_vhaFIoG0nDhg&b*P7BCj
z5Da;}Wv69)p7v-OX~hTMq;S%oa6uRztoh=nY?2l#YdoK1MNe@=2p{vNknk~3#GB$M
zJ#Li1rmXyh6#K1JxAPC`1KD}}L01yi<HyEJ!LmwDQe4y(XNL{!!?fK2`D_kNPEin^
za7kJIDV}Dn!m4yiy;E$Sd@keJOnWR`evYes*y6I;G!0i*lg)E=v$(D_6C5P0x<9=z
zkkuH7{6h+7;snJ!EGhJp&9k^V_>2zRP?P$?L*1^IMaj|ZIOu7{7bP{bQ3ulG2)Jda
z0j<^?1$-HKS033ngY39V;FBTbru!<wQnud4L@1!@swS_+48z&vhe-(}pX#}`hFwr`
z0@^R>$*w228moVJ2)s$XMtEVJy-Jx7il%c6dAiR?@Ef{}N|!<-*(~xW(~Kf+7I2;5
zb@UnrsX)*d$Bd&8etc5s&N@xiqFIFOerEB|vM}4ENHb3rx+8h;jML4t`g}^AJ5SM~
zLne=~ud*3wDs!@Gn{Bc~se*>|fE;}4Q3Mhw`G>drFQeWge&@SKzu#3?y?|N!^WsxV
z_+?%y!OUP1w9)I~EI4X^E)U@R8REkQ%GTP?{XmaE#7E*8#?mkgW;8RG(Q2Qz-><l(
z&*&oJdpNU&t)gEY(vc}h6<JJ)EEd7fOyd#mXkcQU5!757%%Y2wgUDP*JX42wlDAj!
z7YS(l<t0QEp_(#5L^DG~GxVJsHcIIrq#gCV9WhNMF>RO9Nl-gJW{4`G&1TV$eBqF|
z)LEH&F=kPg3Y=Yc*{0W%-a?SxjKk>`!6kVuXb;e9>)_C2Rr4ghuIid-K>HU&qBCto
zlo8vSAnl%_h2XSF2oq(VHIAl7$?*^t*#&fFgb}4b;Wx*y@FsEoAuWq}HN7}Y>lb<z
zb1o(`7=L**-aI)$ilABvB=)N=Lhb}f$4)RFxq+%M;s^eYp^!6ONNX1utA{}4@p(0$
z%@9RI?Fr8&8L0%`$7QY}Z6!eLb*>+X&4bZyJdfvf@f^rsr4qc>=8^cS)#JwAk+^$D
zsueVl?;NU`1Y<NFS}fa7Qrb@t!WhWJvi&5b{iJ)=^4AJRdq?xbDy{cw=<D&kPQ4x_
z)1G+8Q<?lF6WkI&F`d<x;wAbM{wT)!I(ZVTys3$rnLl%d+PU2vVjsP3AI!u)m^%C5
zZydw4vE`W~Vh2yXXdPyDF|2kctNsrr<83Qs!<e^&x)mb2)%9$8-Z()7U2OWuYqRN%
z+Gv)Xc6I7jCHQp>vrq+zyMHdwP~k-E?Eb#m-rmCe!_Q$r6ji+3#EOny9GG+76a{an
zgm0SRH1(n=nP*i-PGOr&7+BzCA|>b{1>{m3Vylg$&I*k&dsD%Niu>H?SA{OcnDef7
zm4BVWl#R&Ogj9EglEz<<g8Y(1+t47)g7@3>3+GEn-!Y2S!-Tz^y}|a**5LmAt@~?#
zB&Y;-(_SS0)zv}e9VWq(1YOy@;_51IOnDWShDKt?IdI!EEVuJ5Le-d|Y$(jdS$ELa
z#T1!)3LZSf1*1k;%P?D`?Zh*}!*SBmi<_5cQDKGnK5koyA15A@MPsh6I`JCm_;s>z
zEytWGktK`Mg!nzsUo?uO1lT=^dqQ0<dF~`=4gp!`TWKT@l2ksCc*0R4$@~;HJ#V%k
zM}b{|#;LiltpT=zq@~tNTAzZXhPq1hdE&(NOI+<*qMav#M97BW#<ezTBnnk;(#Gyg
zTrsLjvt&idyPcZM#Eq%cObJ_c)l{Zd?Pd*9*{o;-Sg28FXYk<}*?P`cz=IdEF<osV
z(nSJ2!fB{N?TEss9Oa~^4?TRlaAk<vJxm#8SXy(nWzBD-@<S6)k}9sP{Z@MZckdEO
zD`280Xjfupd(+TCofuK-l=zMU;1@JyXK8k;IGrnZ{R!G@CU@2h*P<^L4_Dmri_xND
z4BsGSt^!6{f4-rhm1~Qu(p2x#huJ}4>+jfI8%2jck^0bjxit6JoBMQFNHyljGoe&k
zDi}1xvz^He0QS@5pM@r8z)#_oh1(6>Wg~hYuYy7<O@l(opN$GYc9YYAL04x)zmb5~
zwKu4xITX*=WHeZVi5kLRpTdEf9b{`;1>7)O)rZRKl-fG$le$E+c1_c%8{DQ=wcAw3
zzPV`XUv>kQp$oNeg^@|RK=23QS*c@zu<YA_nA2DE8s6zY++8Dleg)4C3HPCYVD6-{
zZ?<uBT_!5mJDz8XZw2t$dT>u56?c40i?US~ieVvl_a+}l6&D}8xe34^xJB4UE^o4g
z+i>c0&0J|9_OCRwB{QXY(hxCu)axNvir}63di2gyadeb+SwTo^6wKU0>XlLN_ni87
z<wKg2|8)Lg1!i0FF<j}bBYbdG#UIjj$cDG{L@h}r21o_)BE46NicUpEfgh`iX}U>r
z5tylb>{4~X=#?q0L73ScPzX8U{QVpYXayaFSUa&b84D!l_aYUk`|4^}U;61L3Ow=&
zi{?Z$3Tq%hbdW;=7?qe(Rpzd(Ku)__+g3oR`W;Jwywg%3H<kjqv=q=$3(WIH-ZT`@
zPvqvhSO9Mvi9TEezq&nVjkvO=9Wptxty0v>)H$EIXE?SchRuPdYquDHrBrlaQsSxv
zVe*&Ds3@zFR<-i#6TOl{Wi2^Wu}nbKEXm3slr)OIo3y{%KDn=Uo!q+)_QleJJq2+z
z8i<0}BC-@9Ec~J=p+T`x)|IGa{zv0upO5QG+BMdp=I{~Cy%@hX^JmRcVmc?n;VtLD
z??>@55EAB+mP*Q2Dcq)&f~otP1y<u51Xkmwz-rtjup0X#JZ|D3AwwM{6km)1bH~aK
zZD_i<&@m+o><f%7r;gFt2zy6Ok)X5F70|TWm#6x8HuIa^jm0u4QXRe8(bHE~!27jC
zmYCi#0(R7<e#bj&Yct3Q)tkakdk8UAI}&48>FxqfUUw6r#ISA9bt2L6$eTvf(bN@&
zV!XW3tdXXAiGjJN6cExKnyKHAosLIs5fk#qN;E1GsR3?jz25rtR$|gy%(~7==9vaL
zV$pF^EE+()X7FIDdl_og@|&HSZG<L)#sY#2PoQ%ROissyhF)9bt=?3#FHrFx$5AqD
zoJGb>!QmqKN7ojRcc|64%%szQ?mdvj{dhJ~zajjyo&|Gb!~xTBnt2-o3dW7V4%=wd
z8egCmB)U`{g$fj28+;JaHX444;)>!ZxsUw==kh=3K=OTpR>Htv^a+Pd*zxXPQwtqb
zfSB5)PAP8iSwYja-LtN&ZBqyC4OcBFyi&pIWsc{Fd#=g4cahBTQF?-`5}CbrbxzkN
zRaimbPs!*f*sasgE3nGFqxvkXfP(&%Y{rv`hj*qoeFc79GrKp$hwXZ34lcMfj}D3d
z(<hu!8uoe%#EZ(Q`IF@{3TiY`zajjyGwL*vZZ`;1Afs?B8K#<`6E)na;V)lT9ABIW
zV*}6BLJKEOOfYG1)Q+9#gjQ6y${cB@VMe5li=fI|_ja|M&>jbEbfks|yk)6eGZwS3
zDq7-Y=GBcjs%!-_%7qVa?jr+|0xd5Qdgnz>5{PM6agoOPYS=ze7%!(yKVK(@^_xf1
z-EDaoJu{2f1hc=*2nb=035tVPF1WKi|EtJW$m2$}jeKzGp`o$2y~YP&ZH|^I?ZGhB
z*uqia`6kYkI$@<WD;NK+$|xU;VWDG>&>49L&23Aroe~re$VJ3EK`#&3k)H9dPa#sB
znz?h)LZS#Re`hV%<7kYsMrqs0++(dqV~Q~X(5RtozzL_Yff`S6?zO!z+rc|-H$_o}
zK+|zqr?0I|GA}2*OJB$&mStCgNsVw>90Sel<inth9H@FX)p>2_F3i`Rk+|1A5~d{)
z!2yebLDisIzm4uhMd>N>&z^6h2|DyhTTMPR^of^{T3TB=UTjk|(UhRb%H>T<e6qW>
z$ho@f)PqLA6!)QZVH8h3p`i=@cRlSmNSZ={bl4CB==Ci6nPVMx>?0mUB1T5bN9D6-
z4o8K&LxZ4dHjOWOK`)0{3_lr6=dzA5W^Pz)s>cyOWtETneI=A>=;!Fe!_vZ<mS(en
ztFp<lnrir?Qh$?OR8$*GMb1-EXJk#Z%)<&uMD48R705uZ7dEPC1Sa0rwiTId8S#m+
z4{i)Qq(>Y$<zEo5bVX172JuSz*TpLqE8m)cUzFV}+(n6!fa3f-tDk3Zuz8oCBmE>E
zWyv$|Ly1hSk<u-0!Hw)(w<jXQ;L<_+L`FyT4I831HoXm@@~$Ks2-^H`%@iCdJFpYf
z*Wq$^)?lAMk(gX4o5Ti}o@mx<@*aa3n5#etI>-|-L<=jhVZI4?!MYP2p~(-qm<*!3
zQ-u}Kv@=j_c}uIGb{5rW0y@Uay50+^qC(yT#P>bV6ESnniL-5CL8Ve9nRaLu)3zow
zZD~T&E?s8RvrQ#Bu7)a2Pkz2@YCA>rgG9ulxToE%uCBK2<&M4-(Ga-lp$rk-2+*n`
zMSsGcH2zXDz;R<A=&NAV=*giMi?f;Lo6X?9h@>C~X<KiUb<}XSXSA(`^G%}y7#DM}
zD|n|fjJVzF`8ufaTC_2^k5N-=<)=h@)3=Z==nQ@16KLgJJ9@073qixE_}kF2;XO;T
zckSiifxhO7Z0T0{ngFkuV2F{S+&t3U%_84&a=xHQw6<`@;k4VLZrP$3eIWNeG^DxE
zS0ZXg!*hft8xSj;js=VT3#@MGrx?}Cej$|MUo%v(<q4EDdeE>W5+U6&8*I1CbJB{2
z4Y8f(HHx6QXiM>%ujGhahZYc0FOm8}^PF!o_xq+ONS{t~)0bH9#(JdI!e(;%5Q1k{
zyHU7%0PntJW@0*2`W_0Clg{TNLdm~-Ji2-~Z*<iyn|5(S(>kAv7$;2zGa&SgfH2>9
zv8*E0CmhcdIb)~Rp|hg1mdRXS80JTrpjw$jwJgP2NgFgPS9n@oGz->H7HOCN1!5O2
z6iZxM%@`jjFS)+#CxbC2N{j*r)rS{=)kzTHPW6^DOo4L=-Qe3ZcdgG*PORPLmE8qO
zN~=x}+F2*{n;Ggivy7W9U}iEbW=)ExpHMA~2Q5aP%&}pjmvOZwcC{vQ!Am3l$`6x9
z0?tI4B8v45W4&YhR|FU|46m$9#~^C(3EeLAGA)}NvH2D;q@@`p^Of5af{SvA*0Ssz
zozjd>X-CIsEwR}os!)3t?=D`(2u97}(%GnDZASae?d5W9PFQP*1tTNmh!!Up17@^^
zGK&9IJSuX;N<>8buTQQdhBFS#Rpi9NV&e}AwT6td;C2iAa8oqn9@bqU;yugRlUtsh
zaqRf!9?;b3(#T{Rl9^(dO7FO=-Af&js<q5o`Ryvt5T*5HTg+Y=qw@tDIYH@~Btz5V
zbMzEey3dQ0=W88ZDD`U@^@rsn6D_@5kG6C;-|VP7hP4Yn>w}hkKdkDT?EAm!T&@ZK
znMyuKhp?bR?m}C`xccmzE8VS1p0ytu8+6>irJKd3@UjT5dDdyNo;fD#xod=;k;yuW
z`((1wV!Af!9q+e|*u$<&#=q$3IPCTCn{c*q=J0Nq-O8(T%bN6%OsVdcJv8K8T{7s#
zV$i;?q%Tp|XnKvpq^3;TZ;H3NZLy%J9}>0^J4iGX8TOG1iSd~ZehovR=99M759PoD
zgYM7XAolv~=t#P09AT<7*RjD?u}rt-=}8(V9+2K>lA!q?Ecs_KtPN|UQ)?ReqLT4k
z5O6L>ITd6;1vM+0u!#CB#o+b@g)0$6{!8Kn8nQ-ndLnTw-bTP-V^L>ihrXHcY&Y4o
zs5A3Yyh7*4k4dy2*JqnanoWb3Nh2h|Qx)AOErVChXB@8JZ4&i^LpF*D9;@FcnD`9;
zoFvh#^!k4A3*J3d&tK!sANc15{`n36JXg<tz?*kTG`QQhTCtxK&%b=fGjaW1zfV=a
zlLWu2mrz4GKn*F~{iJ?>q*N_OsH^B<Kgg@-=r}0oZ>gSSXe1qLBjyUutwDuJGyF4E
z>Ep_Y%YXuBJ!~ujda(93@kdz0aASbpN7X2)LMRTCgt8Xny&1^%tu-ED+RU^8EJ154
zICyJ&{}3HMFt*)j5N_!l6~$GrqSpx<6#k<WAu;?*OhTYVPf0r9_IWaTo;dMl!#;BV
zRi$hlcLoo32ZOD(f6gig&#8t3JsIBe9ZpS?6{gq*+XqJv1`oGnjGUC}tTj1r(JA8L
z12U&hqo=hu*n+-BZ%nvOoiIY~js(ru)MIdu>B_?gCZ(@ZlyLvyu72`BJun)Ft)`)2
zf3d)mXH_{dM=4I6Mi05yf0R{<jyrS3&?mCfwB#RKLIwD)=fsQJp0?0u1Ul>m;*A75
z%Gu-q-$Kt2rM9O~h6B<_Q3pQY4&=GP6K)UZQ|NtVT`vLTyv2fX$pm-cee@Snlj$wG
zpFDiPC&q^lSLu9ec-v}(3qq^QF@9QE5eY-hnkwJNbt?KvHS>D>D&m=h)<a-eY3LzW
z7zPJZ30Q|cWLekLfv(XCsh7)&RQ<oLWi=xqatRx%@T#RwF?I)ZZo;#DHLplQse@KS
z(hOFTzDJXX^vf(`vl}$;tb!y;odq}SKS~;Ls}mi!I+y~tSCQq`1`hnx(u&y{hIFQR
zFvHLoms9AMXSFxeHZf1?A-)?8`j4XVXu7_2uOII6<-K$psFFH0O&_6p%~KUM(YB$S
zgo0(0tosD#Do@kVlLTo*4IiNSRrqo=;rFCmTl<Wl)q&e#M#8JoUYA)>X7xqX_nQD&
zywW<dN~=)$sm0(PtqYhDd(JLw{12X%BkyS$9p%Tt>oR&%dT-0%SLnC!X~{-K1oCoH
z`r%-Qipry(OYh;spiv&-B3?t8^tsD|t2}&Y*emy3qt7|ULi(X5P!4L#{VvN2L&6^3
zcVr>DZ1Y%=NBfQb5+UyPy$9GlAb_-Npz(Qd)@ZxmHGFkzoCQyFrZ+g=Nnz)q%~WiX
z4VHL&>%MOd?Pa;R3ZB45i%MRZzG^4Mis0*7Q&#Vic`Gxkcitw$w?KafyXq+T2EIkq
z>M-F$-IIi6cuY+%7zfZF4oSK45py#{7OO`p|MER%sn{X{t>RxM#_T3TUa8cC>~S(G
zqJHQdN|vdBO+amxuM>0@^y!m*EA8vEoiYlkBerA12B6Wt;Qmv|{r`-ScN*NkLbi&2
z!HCH|0Umu;^xY2zw8D9a>gZ__s5%4(YKtK<iA)WUgrV`GIL-2`I!h<-i}E85Bez<H
zlQmghDnHSpA<t+|&z*bvoMJ4F-d3*nG@CQ%nt8ih4+lH<cKd6&&rCg#LTKC%2{Mfv
zRA*oNAJS~;D`gAL6wfPL^xcP&m^x9oUWe9SwQ{c+$h6Ix4f{DVTl7QWy=@RFeQ;j1
znzZ9IN%L6TA|a{5%_#kZmMFBzl(5)fW66hFcEB48#>>TxB|(?N;wU-xzbgs94k0dq
z+Gng=E(7eTJOX~K{~i32_f!t7=2k!4dC>nZAHm;n(5FlM34zU{YxoJb(`~qfzv0d{
zrQ#3d*zN!QW8&p^@yf^YkWsj?XY#I|Swg|K9wPlxt6NOW27N;6-k@xaz5hV${lMw|
z^S30xpBG8c9ONq^e_|d$HVW<9-1lKL>Y>&z^Jt)TB#uTtOkrC>@`xWPq<-BT4{o5B
ziZmKdlJdJ-`q~o>5CL0v0u=r;H*zQ_44r#9omT|%tjd(yN$>MFNv@}i9@M${uT!Af
zQXo?~MS*hF=)6UNYKH>l!aeF+DNr5I40DQeCdGLrqeki7g7y09s~8eV$0H;z?QOyl
zqb&a|M)y;@KsZ%x1z7Hbf1%tzRk`S_m%z!}hkrOvU*lh)ImAONoXbzlu7n<GCy6+o
zUKobn=}x1Gm;Ki_yuP!hnRiv}VROC1lz&$c3X$0eeO3=YP8z2GP0C=eHjrhGvz|T^
z6iVdECxIt6%1R{_hK2Izb2g79&Ur(}yy02qLO=n9e%#1pIK77<`^h;E`(e>6LI}lh
zRHQol5H(Sc6T)va<3yr)<Pu=`UMDcLjzHzNBzloVC{Yo*J3-Ngh7LVWXqsvM<R8Yr
zDS8zLd2A0qMTEg~Tadxnkwa}2u7XJ$lu_JROgMS2v621fh^vpA%}*IrypE$ZhA(jS
z3kv%8DsfDdH5;D`lPaZHxrD|Ku<^APIq7{j)Gl5@Y%Ks-0Y)l(B7})S2JG)VXn5Lp
zJK00yFuqO8&7tbHfT~E~r@fM@p_TR|O4OsAbcEafaEgBWQeru6_^i9eEYp_1JG&`Q
z`Img}JG}Ngg6S>z^w`G0z>r4T9%>&Ou^$mC@!T2~PT<C!B=$%*@%OdRX(Hr~eDcGW
zPsPiuyV<waf2RTv#9QT*>mWQ<$3PIVj$E;?P<Dr87;68OGn{Er$MB4V95ZOH(_v@4
z3w~8k#URf0AVShy`i&cG8VpCNZ;`-1d@!J0Euo&Xb&;?Q3C9DyZ~Ny!IdcsB;Q>9|
z3dWh21PA^i(J~aHA74~j|CT5r%wCicoAM-1&SVGdjXdWOb;LLcjPNJeLxWFmhB19Y
z6NAF5qCK>{N8A7uI(Fp_R>`x7fT>t^l<>*!Jo-bjUs*5<;K_^y<LAM-zc3w%KFTl@
zDm0~O-W&$h@$OYqYwi!Lh*=}=XOEE`FoxCM3JI%Mj6qw^U+=9LR&Ip~Suq~*!OD1E
zujIvwo^>nlUaWkMs};zfV5r~8=I{CM`QBu*60bZuq+(!p=-kof=H_?yTPtVThqJUq
ze>Q00N?oS#r&yVl1;VvK3FtzDj>pg=85|x9ptnFOrg4&<6;r4Y=2kYVn>~Mlc1s$J
zW(%X;%@VIdEJw9M)%G|S+anx|qAGBEl|;C@Z;?NkXWl%RqZ3R<ZZM9m#Q;m7(ffo;
z9<8tcgbT-xm?p;V&f46DUhN`?pO$(a8EwX&-K6x-ZhxS;^6-Im{}aJjdViw1^yO{Z
zyPv=xr@f17X4m3Xh0-QI;X~)v(Ffdgh`SMDFx-di24zhQcwZ7~{mKNPwz2`u!wP8u
z?#6S4JMt<Hg~;`DCsVqs#2VcqjQZ+IF?LFJ@uexdD3$D@w6Y82IHdri5G-2*rvR-1
zbt4>!#xIFbc45<vjRlo6^j}ucb%Ou=*v_=Jw)zDbw^rVlmDK~@No1JOAVns4*t80D
zZ9h%a($OoDp+81`qQQjNkG&EfOZBdpOX%uh#)i3y>)_1-I1C#*NMaY|QIe2v#IwX|
z2}rGrQ;D`4vMMJyY<1u=7U#>Y%y}2Lfq<W($X|*7bG>g_9<PrG_%4t@IrNLGs8oxl
zl$brjQe`OR?opw^YEq?~pmvLR%z7?MUW-l#ZafZg=Ud&dgTZ8!pH8a0mAEjCBGYBy
zC~)X}R6A}!jc<&Wej#i$qVW;mV({3ZugJ{TNF@yrRDb7wAm)J32fH8XGJqC5ZNnqW
zAgQ<J8PEg#8>KGQLlHq_cbt1-&Ak=N;JFB2_KqayhfRHW^F)29h!?CMlwP=>O)Dc}
zxJgo+NA3Ytn&&pb%5HU(4ah;lu)YoZgZud14&8>9C9B1fyNjhDZIIObto^ebx+ziF
z5->q!9QhL6J8~U*>3mMSFmO3C6)GR+AEqKF3N>{qI<8eiVeu#>h*hTuD;w%_42!Tb
zI4GkCYc?#8X2*ywhCiq>SHIa>^v|i7fMum=0(wcTt(D9orhGX`r)iClm{uhUGg9s$
zxHQ!Y8R-pIE=(_9vNCf-U~|?#h7AuJi3Vz!s59yWNE)-f)jE&<QABs@;H>bH=xd=R
z$;#vjI*c%tdcg4|eidC-co!y{?&APPStdTqCkvMCrzrHTkjYLOFpg_$l`&Du($7~{
zpJ9a+p960iRpbe)3&V`^-qY@q)6Ei%#Ga5_$R!>T<2*SlO18K)w+E-Ez{m$PNFa|o
zdOX#4{FH<Tl`$O+X691y5pVDV_CyZ6l{#Gls|u52AOB3??iBugjgsJuGuOs!SWnJ_
z;n!6P2aPSr7<cij`P$W$H;=~aFc~q|jB`ypa_vK|sUP66)uzKF8?UQ-GPhE;ch&&?
z0G<i}>!E)ZeTDiS425;`S3JNe%UlvJoJAxiSYMw+42BL>^aD(tVJe~@AWp<SrpgcD
zoITVOnq@?15fp#s3&Y$6e0_l$H9UY{UD5Bpf~4cgHmBLOuavxM6e{dOm7z}=`fi37
zMRZ96oK6r3JA`wfo<MJK)`Zm}xKpEi#<7G!)0+a>Ae<17E8`;cMw-k1+GG^Bw^5Az
zy7GQaf;T>v@vDSBT)6uIygt+)m7gP2<j9Dfe$~qKJuHoZx}Xk&-L*Y}82(k@5|V?;
zVC%u!9=~#quQ(i>D)gM6e~Qk@316jtT6Vq}ePZYP@RLI`{Dn5G9Q3#8qe`9iX9Cs2
z4lpu;Z7Chx?aC0m!8F0-V*fZ|#;u)Dya4z28qXgzpWjsGPIyCx2k7aAvV&jMN&iov
zO14AK;hbtFI~?)g{!f3=9{2yu<Uxn3=tU8n6TuGlqEDM*st0J%=1%tD9NvUkga5l^
zcx~;p@EU2G6Lp~w<byr*>EX}AMg}{@9`e5D5luj#{#KUq3DRIO;$xU%2Gd?{BPgb6
zY#-5iu;*+ZY`b@!<=!WF@=201KZKIu+l@M3T}|x9a^AJE_>D~kiuu&oR{|6Ti2x4j
zo57#9KDx;m$vZObrbdtc3`I6bz)Y*3fcJp1CTnYden-IFusI~rpHOCn-`j`I4E{tk
zb-IG30hAVLEGim4i4E@R>XX>sa0?+aZ<Bc=qXz|D;v=)+t?G~pCe`H6RDK*Z=-6|G
zkU$d$_F9yJ(I|QR#Xy(u2cMM7#NKpDxlwNitsHruP)5cDoMSfb0*`ADm=D5Oo@4RP
zI-Uhi8TcPe_albE`V{RAarEpiGW2oZ_#}41bGC&s5H+8IX?hAjn~eDL5^jRJn3;sP
z#caV6hAu+5$9;y&M|tJLs_PH;9-V9R_PzCWALsnh-m$N-6vVfnZuoud3+EYp79K%G
z7PuL${!s+5as5#k3nNW*TN}k*$42qN*(kPm*Whq{mcX=XQaaiyKKPgCY6=sDyTG?y
zWR?pq_kASyn&Gb`(uLu8-x=ckVsrr`7G9XjpD+H~D5Ex<{iS3<Psu!i=tykckBM(=
zXj3$xt(jTHex-gE9b3EK41R568b4SwyAP}&90cD59{tb+5XPp|M$T9?PE)uLm94Kb
zTN&XYBCbYRwZ0yD+Ez35!;Fu3(n0pN?(67**y+2D572Qv*Rkt%ca$_VH_B%v__3pi
z2P2_x{)Zk)wqQ=9?-OIjY!H*I>F3qe9UYL%o~a)<MP_E6r!IFhu8iDh3YVTLR}YFm
z`VpBW;PbF!k<07*At`)#BCoBHx%#hYG|<keEx63eVtjUl$-!6>>P?o4-5YGJp^5yD
zh;H>Gp<AKl-TgqqV5-JH(FmanByH`fZMp$7;v#uS;O~|0frs}W)z#?X{jfIX%xnq%
zu7oQ6QfWt|)qySQnUYfE6%$7UFbTf7vbMYvRbKILD(@H7R4rAjeBA~GWR((O)0Xeo
z2voKQX5f@0d3#F<Sc+;$X7VC-UVm7?QCt!7!uTnbQGQe$!`2Kx>w{z1wo8edP&OUJ
zI>RH;5=+cEVs@PasiAjSFhes44ue@~<NmICHtIOkK(go<sgRCrJ*&T5jY=4v2qA-B
znH8eHSCULt9aOS1M6z<}W7VRM@I5`N-=g@M$iu3z0(fc+*~b|f^N_ZuMg<ajl?MZ~
z;)~`2vRNCi4@k{NChG%ZbW_V|__{J!AU0SneULN_W~<NwyS90UdQ)K)JS7;XKto9&
zsT|m+oj5jKQz^e5>+b5R8@=?FdM0$9QnP*^`!L0>qy;^o1IHK<k4p6Fb2>H0PR+4X
z{TCSJYJhpZQj~IQ-T5z93}<!63sgUWuA-Du!sf&d>K|spXm56_L)M})jNhgNceR;5
zH`zw!fmTU*PZDFG>9OkrBWRGo+1PMCNiYxOUAx!se@7OHKO`e%3l{zcv?@2V($@cl
zqaJIzda<@H7qwU3EPdnIvc&+|tSTAR(I8an6AU#OIbJwn+XshBdtKXR{IjZjc8%E?
zJlxst@A!m8+O_0ryX0zPX`9O>_giI=ED5C$%>p0=FF&Rih{%tZ29TbB3<+O_E|u#s
z=P{&&3qm|Ix{?5AM0O|@&W7n1wA|rxPQ@b!P^IQH2gij{T+0(mlI9jp9)Zom=@hAk
zuNkjgRYYo9=%LiaU_z6++8$9hfLscT+3Ci`r?FlCTy(wGFr=U5h}gV8R2C*?)mtSW
zuUT2tg|bdqO*gZOo$2&i6>q<5OkvBx3C%{t0sHa@>qX}b)I7l)2=v@_1~Qd*0h36D
z3K|HSDi=&3AkEOHM)nN)L^Q{}S*RYUyfp}U8`39lYP1kXMvRm62MTf>&_o5{P&sv`
zCP-WhW3r(&ZABPzK=E7`)1YpIj1Kb7Xd$%|Eks9@cA|yUZnO{)g~0$rK)k;Obk5bf
zOZk@~L7y@(s6>GM*-XNq3^Hv2zQw3jX(z*#`aiG|#!I4s*n(Qo-BLe^?r9}O!}aAt
z`<UFRv?CU<K3Io9d;dNQljuQEl8J(l8@@NmGWCrr4;Bne>%kTx-vke?%En}V6YwOX
z3!Vy@4u<g3En=IBzyj!nmw~eo=)O_FE4P4$rU3cgtM+>*x-WjEU0rm+FHVVDJDnx|
z;*@BD0>X&2tPVv`4I6`7LoBP2`3(I#=(`3zUm)$FoAeR0H857*V%m<Ic8F=aLE)%&
z_|ao{w6$f_Jq^w2c3+uUAUdwDKT6^CxeNA1=#-?hPY^wmhOIDBSfE$!w7=6L$=t>F
z1B}B5yQv9DChTW^UGmb_ws}j|;lzxKQ_4RKn<UHF4H&dw*|)!MzD14SG0{@Y5*pdd
z5RNoV*kz$IgxjTKTpu<uRdiHsT^?KDozJ+Dr0j)v+=PYf=ATTh4a=c+dFMl#4{@~Z
z%pe$3Lw-xim?ZO{YbSQ;mf^UQU&RPF)zAUMIhS@nQ2bEaDbY!`eu<oJmEzGKHF~de
zs;e8vM;inE%u%~XPCtmGrp`XH1v~kq_Me$G*Fr${#7oJ%IEsE*dG+N(id^z6{*aai
z8~$lr#|>WRN3ljU0Jye9&zN;hqW#LlvkSpqz|;uwH1}&Nu)8#JZAC6rS62gVzSJ_W
z(BdPQ*}|N$a?Ba4sA|9lAvldzzgpD9v(jU37Hv?ScN&1Y`)beMPfO_RC&G6?m%3PB
z0bO>1l|O8@0TDskC)Sxl2p)3HW`z27j-HliFl!AE^Qh8ZH}kT==heEkquNe&U>_Pw
zArF9@OfxSF65nrQ&!-D>+$gL@reHorh21nL>xGY|#t6z8OkkLU1S5tBTfTH=8C=F3
zQ-(84wlJ=c!3ow7j{>Ts;e1ukj3B|Dh?=+;B9fE<vA7h%h4KQ|!cbh3Q9B;^9sxfV
zN@-!PKB+z(&<CYsxq4vVC}!@#m}_IKKsDqFWIdo5FNk&CN^{qtlE;!Ffy}8jrPW2R
zlJ}~nW_Z+w?P8m^82YnCtmgfYF#@*HO*^;r)!8NTprYW9=}}r9M<!SBwjlJr)Z&4q
zLSYn=t0D(u><`mNCZKe>zOHElOuGW{0ya-Rr1j5fSwTyOWrUdPCmbqC`()=g(V@|e
zIie%r6OO|h^Jz(IiC{8708cWt>``nV3EsJ!IcK$$=~OCIWDgtngJuTrfs=4`)mtG-
zvqA8w8?yqwy`h~KR(dA$&m6_q)+L)+K3+#F>O?}Mm_?i;jxx7#%j9CEJ{JIekzo{+
z$av<(z^@VsfDTzKenh0#I3SZ?ZNa#tHjNln=x2jij1eAv;k-0@*qmPt#d#>B#WM;S
zk3uc_bhSn?mxzcAXR>&MDpNvbdMH*|t$ibK9OlYQl1fEH35i>m8_PvpceJ))3msjm
zr53LC7djI5f`PkQ{oHx1DmAXdHJx19PX1Imp}%CG8xDDe-m;S<o=Ne*)}y%mK%H5s
zr73*g%%h{N<B_}xHQiZ->0h_v&h`7&p4$zfqN(5Z?LNCLKfA3y%LQNR6HE9Z0PZ$q
z3ZeF+UT?h!3<sPBE{9t;+1DIFTomENh!=N~sJq(g7$H=*sZS=Nj(~t>o|JA}T}?`}
z#XXA=Y0`wUMTuXI_|KYcc}CuBwZpu;qsYBKw_FRKWDVqG3PD)w5QLw~7O?Umyb&yq
zHqrDuY=uGQI4+v0BT4y*Wv0BJ%AkY<ZYtBKW<pdnJRb$>R%6eW3e0>>;fD!Hjz9V-
zRs$4z?Z~KBKw3wcMk>WX5=uP6q+;0dqEkbPaa=@hE%^H;3S%m5^b1|_Qh#(P;)6=#
z>aqiC%PVDsPMndY3ew5fEkPI8UpBi?W`NR?c?p(UZKRif=&sas!*tmKrX)KCpktb8
zD>IxlT@8k`m4%A=yTu)-L#Rlr^ah%D-A>SU>1g5WuBxDnzQP0#_U+mVvW!5~;ZYp3
z8F>wxArM4Nw87tlwp7Fk7tl$X)v#zng_uV|Y(mJ7<bv0X#i3i$a;Jo)TKIaO2AV+2
zRUwmNr*@UI8fo}bK`>RyNd58=o!GS@Z`nncI*WZKJGH56YhSS=frbXOfVt{rbe1_h
zAuV?ItOi`;Cw`UiC+g@2F%GNfC}txHVQ=+=6O(}l$wa2qGgK|Z-4IuckgdSk(FDEu
zH_j;!;fP_U&T1c);)yy4`C67#28j8IRhO7POL!(j!bn&;8iai^DijE(W*fmG=oDe5
z6cqE(V7d+1Jt&Ianxq}QP`4Ivl1Af?5{_ChUYP+#siWUS@1_PD!}{pKk>L6qnB|x2
zvmgZgQ;`Mhp<-hLEfV<~(!K5eF60)%JU!Mn0<0z)WpkW<V`@cs(v6rp#i+ypIt9V{
zYIw<;OML!qCDOjd`*Puez#7jxV=hy)0`qP$97fTee#^H8Sl%)aTrkV{?77eDO))Ql
zS2W+$ui=a;edHnnu^}2(1SURxwG9c1yVC0{x^qpODrxQ>Jk1E?`wygQG#xDfFD#&&
zj$RBs&ak$r18WO4Opi)DDSj@>k1sHq%Lj~8s1A*<%j`TZFE9_<k=)7n5SOvNVIF<X
z6l5q(N)u)qSpA`|^-UYw8esnl4WgYeCPcPQ^fbv8LuLq8V-g#{En?Elq*z;fp6N-`
zJrT3z=)+X`L?cn7uH<<^({jW{UmDXQgRc}6EJTJX9PIkRi<l>kYDOYDLfekJ(j!x0
z%SBk&SHpfaLOS2TWd^NzuRk`@gYw21t5Ej3Q{BNWR`xI7wz4&Pv>xhaRU0*UU_jcg
zd(Dnms|EcKHnO70O}CqowBoSfPGuSLs>P6_JqhvTRg))gBt)5J%Mza)i4qm7kd7x=
zG%Gy#nm_7?{i`KrCMR$xP3BV=@F!<zO+0y=)zxT8I+Ye0KhtgH4V9Q)iXt(|*Vb0W
z`RP*9E+YUn)<T+oR(e?y+JG@#@P#dv2H0>ku;OetgMBnoBWKLmrqRq%yz26%Y>zZG
zB33eVA+~wCS&XZ+{KRcv%b>9+aH|x+JBEzqsGDmWI`AezHB=bQG^n)yd2Ws~Q|Tmu
z?VFlBz^!Gbxj5Hm=8-asLYFLpRN+2DJ)f<NGUTwa50R+oF0eh5_!?~|s;r?Fbe8Uo
zgnNUW$FUc!-cKHXaGn|8(n~W)iA7$iw3oR_T);~UwZuwyRV^XJ2KiN=Sb_X_Sz~qi
zwkUmuD53&(p%~@ZnZ*u~L+LwbisdxQ(8Y{+G+m8G4T7htRRL$?OqpV#G*+Z4>9r;@
z9VN*Z?%zxvZ=i~Qm9^HVAv)!ZVB-hwpH4Uk*Sk6}-Mq)_3w%l)9OxL(I5woVMRqt7
zXY*;FZS9G+p=`OgtIntXA}D6ov__rq9L}C~SuGK;6{0uGm~+&tw)C!}5JIe!TjLNu
z$JX2Y0V&<9S@O>2yo(^Moq7(84JC{e;ScWw6xJ{xUBwQ*Qs4B-?)^dk!Gm4rO`V1X
z<aP7ZW6RKP-E5f_5m5DzN+nBCDl5mh%0=A}`0C~A!57}7Ezz5nEx54-kc@CFpa7!<
zVU&cx22seJAPNe`3S&s+jyFs0#2Hd-Vvev><pnz|73JP^>hVX9@FP)g{l~+DSDS3;
zlAT_7z2185umA1%h)AcZ!|~s+Uj1QhEs1Nb@+hMGs3wfwf>&07Ao1r6Z~zxtF_PiR
zVJU0l0Pzq7tlz`aAWvzTE*2uBnj2)n9@yL<3yLAf&g19^Yilv)UR}*?<boPQ6~LIi
zO{4QFIBX7%R5U09@EwUmhi?53f>e0*>zCT_bXgOgE_j^EMZ{*54;jK*t_$fauGd;w
z4NDsUu7$u)k>p(X;w=<xNu9XB^~3dsm0CdM(54>d>65fEi5)zZt#1e8V@b^{x_pM#
z166obltBqwK^eSEgI6hhH@H+RP`El+94~?jGDEQw@+NtF@k3G7FH{t$FfW7g91S0k
zqK80u`Ggeq2KP7nn_InrDP3B=j+2jY0(%8BJM6L6X;Pf`7QqZk7e!RFO?zjGgH(0d
zSztBW>_|3QfrC2DKFD005)@EqnN89kisIv;m1wn+pOP8w>$pB!lHpB?OSYXsoTi+l
zWd+j1W?|^Cr+}Q;$fQ*1$yqv?PgRUvb!KY@M0k^)hD(Db;Hb*se0)J;9Lo9Yp3-1@
z{Rv?ZeCF7M8RjBbHb*LCWIG>SUA28lXy0kota@HxQ{WJO<~F`N5%xUOcPfX|bstjQ
z8{A;}C@Cai?xpbYbRvSapPamTw)f=i$<t>)zdbm3d3f^u%Y(;zFHe3rIQZ%0M1kbZ
zqU*B}eVxuWvkC?PIlRf*8r)X%8Ahe8s2*e(|DlX9TaI#LZ#MIT3rtXE@ux5%i$%S8
za&q|W$(v_yPhPxw`|QoDJ^0$wgOgVWZ%^JGK07&hbMouKyOZ}XUcNke{OsiUi#N}n
zM#&7hMe-qejd5_NQH&|r(@zifNzU5XbCpG06R2e1s7dwH)Iei5B(+u&$xQk(5vE$4
zO{1F!5B#PP%hv9L;DF@nXm5u5zfeL(&P=U4XDYIf^XlyIB2Si4R{`*n8$22;Pk^hU
zq|_HX&_j0z5_=C}R1syzk87*1CIfOSJ!dvEur<iA=E!cf`N_Xp;6N3qm`h{!y;pZl
zkX15DXcWF<%U)egyY%qrtnDh4bsbbipc?XNXCZ3Sb$C@&t@l;^)iG*Jq)x>zuaLPA
z51rM}$t$uFJNOs0*KT!qpbqC_#M*-;Qgj<9ut}Th;k<kJ>;k>IGV80g`kKCA51fJL
zPeFGVR86(VMtb*N1owA$cf#hh>dg_C1Nc&4?}n?^*ot|izd%B}6=B!E0|(zU`S|q7
zGa{O|%<CEdBINRmyeg)^pHbgn5MXi-0(K1va+G`9TmAdcFFQLAx3BL5YkcJ%!te`q
zIY;h(sbb7yBS|_TTZb13swLGpoP#|0364nE2jQA@A2$O*<=;>%@^5qFJ>@d2>4*(<
z7fkT5T*p92S*<DWMfG8BWFh=|hBjTB<*JC!>L~2a=EFRmRcA&091j0@%)c%Ve+2;{
zR04-7WkTSwAB>{Tq7u2RgakZ~Wh^gq2&YZGCZnI0ql^LuPxa#KJ&9q0<kO3lSuwph
z&8E|pWExkMh2yMxzH1b<Dt5<ZBPG|4&0jBTxw~B}JLXuy?nZix?^=$v8+3ag_lFVC
zigs!*?0)~<tHZtL&raGe5U_f0>Em8!bn#||-lRzi-9w!+iW~Kk55J{)@;#_!++9nj
z^jlSy2V;~ps>#XUQbB%$++#Ycrb;yOH5-pOHdl!@21_>;m@6KiuC7v+cFdw~er?%|
z9QBq`6(5?mY)Se(ht2D~%d7Y_U74mI;^bmwnw_S}MKVpRmCv|z@}gcDrz>comQGMA
zESAyAyh6}gTzVGjcJK9zim-8e>(zP>vOr0_^%-0uqAu)|#fp-URRo56T1=<KXDp{x
zgRr-5;sK3%zvnAZ5FB}XzDbUCa_l50Iys@_9#-cqd@CNq0Z=v(I%hteU<270aI(4b
zGL2!`o<o0OcBnEEs+G@>h;@Y1TpIqKpVc*-H}Bp(9dDkeclnqdSHR|On2y*mpV>Hr
z<15V9#Zr!ZInD99r~&!EEL|8;xol-DBUP76h+*xx4y(*v<Q6B1A+}5BU32!-XK}qU
zDQJo@C$rN29=ujCYO>i3dT4&tvG}5F$O@gVdJnr2msthguqBSJ%Mj+nDI0WRF5>nJ
z8<Qkm<eMdFUpHYl4=#1Dg@O&&Eb(ID2L*fvkFKZ{f11KiLTdH*JRLbY@=ZCin{ojA
zx%2RT=rZOG<HdVe*Q`3cI3E|&wKe`l(Hwe(jqI(*QYfvF==tGpf6(7X%ZQF#Gdd%v
zOuMK$@5ppo#vepk_i<nC$i|gFLGM?U^8s$XU0*E=7=*OsY=a%dKJU(kc-<;n{~=K9
zu53zSs0!-`)6QH(E=1)9gJ8U@I3;azbI-f`rYM0{O<-=Gs+?QFes}jMS(nPT9Zasx
zb~4Q>)ut`PYwXI4+H6(az2IwSmTCO;LS@-Sw8xGt<7tt6R9_kd2i?tt!%s{GziP4!
z?gx9FIbqhrsyCxHco3X-w=*ebx-TBulg1})4R)>DrQuk$vDeU5a;y}_RaQAftMn=B
zxW@dG@lV1(G5_p`hLzNAptdXwh1PKOobhXO{`ty3r~Fg3%hJjkgqDIFrAQC~WrTzh
zdjxu6yjTSH?rra0e`3o$BrSNj8{BljMPXZ7?H4Fmq(g^BqtjqptM+w{4v3An?=%Hu
zmkX=lPOTpRg7A}(w~}mGMc-Lm9ehR`q*+?l7s@CfEsWK+pkCmuN@rVJQ^~OHiMOAo
zRZ?a%IQorlcut=Pp|WJtd39CbxpLI`Esy0DVU59}Fk;lg_EEa<a__;z2RkNMXaWhl
z4|aBaw4TMA2iu5S3^Y|ex#y!71Kt2FL*O46tb1GceLMLRG3<@r9;M->o<gaZDIyMT
zrF#qxU)hIT2%%Gp>sq6XuO;=dy0u)0eQE(dgu|How;Dt2Gt_n;6~~17V`Z3&pxTUQ
zv*`uz)#gha17+4NszT`i{J#kdd{%qCm7d=n5?Xn~^=(LTpIyjM-Lymu_RVFN9c7Ol
z@ga3`kh`)I)BAzwUk%$>knh=ES;iM$uH(_?!xDz1I4Y0DfRx8W<G9Rl*s43z;0Sy4
zm^QDtMziRvD-vF8B2Z=Ris6Ji1}Y5ju#N|#$^)(+<HE-!9A{E|3;H9`kB7DP;K7s>
zMJc`XONOUd6u1>=u|UEG{YmUtCxI2%kWJkqH}qGl1zSj_s$wd43J06Le6ly0P<m&j
z;G3;_L0YqF>Eu>5)AjN<C&1~N2V@e`$f+ytW<-XofU{a}9X5iF9`0y5^>)^380uYG
zNwQfmRIQ1cchr-H^!j1ftq!`Tgs5fi)DjAIstETe=`*!+r^8JZyxjz7)u1{4oaEHQ
z8T*^6;SA>uOQcnq#+Xrxs*3Zq&ie3cW}Hv}*+vh+FssGLD}Z+z<?FqT9v#rrFh5E)
zEx9yBgk{j^)vy?q@D```@U8XU9^V`XPSaIROjG%u;^i?ah87qT8og9~yL0Hhid7Ye
zW@GSq0=dBmp)NVpo}AFLlanYP>L_SdY^g1q++pa{g=sOW7*nz;&TW@caE?Zg;EHVw
zI&|)oX-&yjC2ab9mBCn+?TOi_5Jk|y?cQLm1~Ucr7L+X=n3lv>-sK{&B3>iaW^66Q
z617t!)7zHnZ{_&u#X3Ep($e5kk&ciGRyTp6Cr)xY2`mA1o*;A%&u5bi*MV7XGS%i4
z#nT;auEoN$mA69Z;aDfK48~643T8O$$<!$ngb*21?6G+?9$NlwE;J%0brEcDJ?#IB
zY;)XX3}egw!G!Wq^@Lm@Cf|Rs4g8|z72;bnfb5raE#ndY&oUloWSG!kK5UKBc71YD
zAM|`7AW2wXP#@$YMSY56<K3jb^HNLy;N-}Yuoq}8vZ#r($NV=|2B~saedJ#A-&mb=
z(yEQa9{e{|1-Hgv(5lD(#31o!yK3`4FhulKQy0B`#{YrsGl}B%_L(#*)hV~l;4o{q
zA8Y=N-jar3tHjN^;C_jHJXI$A4)7qb^TGL8?O<@P$Vx`Mk|~@rI=3F3#e|KIuXVLS
zvUJCk8fgLc6y${O7Ife!xRyd{BOwD!*j0dryVg1?E;tT*X5nvP^rH;HZ)*mTJ3zdi
z@1p+Il~-!Pg4w)FbfiD(>8kaDUY7TcQEqTer`8Au6d(1Eg9?5I#|=)PH2Zin0r%c!
z8tm#a3HR;Bee*4vt@hO2U@^?@jdtlHk!uP&xz3aXmxw{oBgc?l;4mSATDJHNm$Enc
z6o<|({BX&~EA{azh1D|Y{<>mcx;}1sn2v8-MkZc(MHeHJv^kY3N(84;b#p2xL;9<n
zO1=5)mltney!sxm(9rJLQ+=fp;W4GXd$oV??iF7D|3blkK`4072nC7zL-sHC(EbKj
zwx{HP0SOHs_V4@tUy=#()afY`H`qXia{M@y=q#cGDL+)BJX2~sKDy&BI24nCgRG6!
zQ}v>nGh@YAQ<?fjHM8dQZ2x)|m0ehPXorPjEm=5-515tYa~^it+S+QqnN_5eh0l%Z
z&6HQ_CQBqV;VaZVYIo-v$QG#YC>wcYGz%Kfr+!#QV{(sIop(S~4L-lAZ}B^$D#Ul$
zhz5f?!OLL@XB6@Wd!oU+*z#HL+S$K%*M_6qGVS#e5ht{pM4a5#D5^%f>a&G15N1vw
z>*55Y5_iApmm^Swxhp+wyd?XV_T+1o!CIfA&2%sfj5yiK6FYUjYK*Y5!okfs1{wa0
z3Gf-lRi+Up(p=$DxwS@wb*Gl3<!(D7DcHh1NvE&GkbCqpjLTcbOsrbG2b(@heo4VA
z>YfJfB+5;U*J5q0m(S0~aEh_!0R@T)fDgdM1`JHWlOMPjW4)&5^+;cYz#3d){xA*H
zQVG<Pe1UbA-Oy%#tobE<dUar<f?m@XN_%ZY<&sTfE^Ub3ozszmQ7qAChXurWkouvM
zj6y<#cwu|bS*O~3P)rRD`sSJq>S<psXt?Bumr97-G2;#|9n{N_yb;6+QId?1NzV%p
z>3uoM^zdX{<Pf)<k+7H)67y0q!e}&f*lf!G&EB`Lw{0Vf{uPPan~*C=mhC+0vN~>>
zZgWmt_e;`~-pXoANtDEfA{CPIQ~K|BX7DB{+sU@Oz2CRnjYWbW2n+`E!eA!ZS`Ni&
zlU*CnAVSHzJWPuiD`Fa>h=r9m8`~e>+CJHrd8jP<znHquY>98COw5^YAQ3bvsWmAi
zn>B#?D6N8&Tbyr!=i2UNlbx8%#8qI5MQOj=_=VMNUr=DU6P)*J1}R!?fts{Qu4Wmk
zUDiSJSuGPyxdMJQmPem6J6pAK268!C<f4@Gp`3pOEv{7DjSKC*(xz)2Q!iyOSaQdt
z*kE;j9ii!JTOXPjwFNY2qoF4Dxq=xry}1zrsT3Buwh82{ZJ=#9okB~m<D!f(@E}m)
zwoNMR3Z|Z1c_h!_nw^#e9X?v9wNsyav_<>3R_NcYd0VVoMB^!}LpXX`g_@qqBk2^@
z{I8*(m!^I`BF|=}4ace0j7`Z=ms*TV7ju4~?<4!I$f_(v2jgvPo@*-opQ`sarhxI3
zAb!WbL+=OS<Hc_15G@x-SxStBuZy_J^nw27Mi9x*{mu@HKuia0S-eAKSL(|Y5PW+g
znLi!=*E=dFmSPXL_J&2A`ap_IB*A+NJ+MFs3YeUX*Xc8o=ipb`DXeXnsbPqi%1xN5
zvGp?5yDd}fmDUjZa3@s4eY}(!;DNk>2Zy2#mOrBDnFTJoJW9t(&pq)B<Hc;taF64k
z+)|m`s#Z%)nmgKX1sYux-N#S&`~UH-DU9<gD`B<Kg1zBi{3e<K+5oo`j>hDO4P8hd
zqDy*&MjJq(Fo}z3+UmB7HT25$tQy>H-BIh3r=LzF=xFH`Ht0l6n^O0d;i}04rxgL%
z?&EZm8-@jpNw>?k;8}(`e&}Zf|6w*KO<aV=FV;Cl{PAxLQ6F7;&362pry6-f?2sNS
zdqDoDSn>1E)7^!oNS!&-y3+2k?r*pE*Ok==_Hirwo|X&g;h;D_I^LM@Rh|nnLaoT<
z!r?stf)wJnUU7USrf~u*1H<IdM!hd<kQ`QdOwop|>Dwn&xp_y(=&)?mZm?mC#5<yd
z613<+%7|({A=MHkBnxm>HQR<0aojt=_@uojkPfK}Bc@@PZYj&*C+wd{1fUHRYUkS!
zarEl1BC63=itMGs9J7ynSH%!aO^j!gfRhUOOoEXJQw^H;li$Pv?s9PFR!L1-31M2S
z{fqm*x9cU`kC~8%$qp&UcA;Q3hYMNLcc$^V!%WyV1zL!<(hY;Q?zFrx_U?AeK&F1X
z48cvvcS;f>Vm_dj6d*8qj3EeQS`f&#UIlg{WEsyjZ}d9fu|@Oj$>V$Un#30L*H)VZ
z=!K#@hq;f4?K%7zGL7!xjn+|pEw1Xqf8^PE<?DUBH_<8yCz0`%GVQS!Z{Hf_3XjlN
z9fYq>75gg06X1$x9P)W&mQoU;9pt^)1fILbX0N7|spT_lDgYixSvT4#$q0Us!mOky
zd<(fegqqSF5~H<pA)QLOBP11~49?5Q;{lB`B*c_WJg9NA9XPx(2uwVRTPG7mh)n8P
zG&wP=Fhk_bgV9QH&~X9eE}p7k$DR!8mm_y7S;8+SAa9lMBBRw?e{T%Ss6AGu_@j2R
z*{q;wJ%Ee$YO{fh2M<=5<8jB^F7_*En2Fe!iPV^hm}WwMQ$jh`P*$@M8?&)ROUCYR
zky^IBwaP8sk=ogPx`FJL6<cZh;pE7aU=7itA}130(W^ewdhwD1JGhPX*K5KHs32v5
zpy91@$CO3h08ObtSh%Ut%!Vfp$*X%~rSYBLa)6tsK5d>x80G;*m7v7mBPp>rj2P&l
zkq$ZJd&nVgFjnC!KoST?Kq9cR=Zg@wp$y~=UyuzH^d`wB`LGyyTH?T4Q|ORO0*cXf
zXEGF5pn$n6Z##iIxI#UvS!kIIV^JG_)yx_Bd}N?KGgwfYqMQxzk1qs5RDM9Aetd8T
zGptiq?H>7d5n`rMX+#qD27Anoh&yt9+vbi()z`>sS8tsgSN0!0xuc(m^!v{}dkMhg
z(}~3+iU|L$IC~iIlZW>^5-Dk&E;-79U{+5?GNbvpe%O(8S9HAj^q@pmU@B1IK_Z(3
zcc}M3)5#A7&zMFt{Q33QB1+^H1$#zS^2pTYjbpTc@vx3o+?>s`9dIcc@mvSEfEBU|
z9H#?JL=_U_kPqm_dI;UY7^(aUpyr7*H6@uM+C^m`E*U5g)q!VZ+(JsSi77yOs%t!>
zr}0D?C$I^-rE2OD5D+l9T0|L4Rs^?%(Ngha_G^ZK2N6dc=fwC@zZaJQMu&pmB3OZ7
zd3cwUqHz;2RpKVVnhwk!)eyAoy`>jVFsu+i1508#op%lBwCfSaD}JPP67WN-1^pgC
zgEA%>6&wn$4SvKkq2DLFB3bNO2xEI8jOz;_)`jv!u(>$K^~GTibli9b*c|z|e)bnc
z+Hw7;FF<5mJJ}2188@D|Wd^*)^^>-+9LDxxS%Bf#J{!9gJ}h?w6qtS<f_|e{;E8Sg
zb7Y(XYX5go;Pd(3G@BHA6pN=jjV1t?ytgQq$skVQr8oreI-Lkq=>4O#ZaGYWeUzQR
zc>qs};Rvgy*v5}<UMW@0)iy<~{yHad8qeZr+9Fcaq7JnF2Jd&Aqt<y05_=2QddHzC
z0TdVl2u2G?coEK{7L=`N$31GLS=wF7#-`DED@xDfJWKJ5^fJ9j?H8>uowma1l+=MR
zX)U5;1&?Johoa{Yw5NfzD1j7JJBg3BqA2}{sQ|vsfar-hfJQy_T&N~I#$i(hxff|Y
z+_D)70&*6wt?fB0YL5&?U8=;}MKEKA2T6{RN2Z#SFYp8E?)0B;`PyI@)mS`8@XhB%
z^UkYroVslur)~_$BTrdJR)nn+_t|5LSEswztAJR?UvOkUU~yUfo9XGagw3XAjj5L{
zJI4Fi^un;D8lNGOc^sS?Ptm-+I6Afrsi!P+kIn9R>=+>Y!#a;DP;PU<Xc?#gqFlf^
zzmuhZ{8W}cZ(!-QC`K|UZ=JhKUOkb#y2j!|gT<HLxy8so-o?ndhhddSbq{3p#KMbp
z1o~7Zwch`-&{T32aHr)0Npb%u`LZ}lfXJ<eiRmGqbPhmE)s3yTw+j))y@ZJ3ZXqJ1
znVM9Eh@}=H)LdO@J?YkH1!l|ujLT0X@O`j%w%6I4>#2WZ+AQv9P%KfL#zEaL;>HOa
z-wFB-gCDp!aJG^wd;tsqFoUS3yEhE{(cZjKT`Y$YZM0x?X8MljgYcidr2~fU;S*z1
z=|aUa4yCa|_W8&Tnl}NOGtROk3W?-Q(D==LM+9oM_jUL`%&sjny|qLHhKYz_EzUVo
zkOk=|=TmJXP_qD`zbi*~E`vbei(5o6<&6*qp$jO5Nr4=P0=hdrr}M@wSl{zAMi>mV
zLY`?DV3;pQxKc#qW}>0|o;hDU*u$_$@P}QvApr}j@6yse5n4KghOl*7wM~YtItud$
z^@ztM;W5ut&v9AkkP@S#9>3Ubp+{-QZHG9^n@xd94B!ezO(g@z@ev8=#%mr`C!$FH
zLe=&d%_3$o%M9@OSqG4@0=vlbG-2o;t#rbgl~lZwAOpxxf@ruJv6XjJbb<?aLO@Ia
z<F=B@Bu(}Uol2;I1BzUSb-@p?at*6?xE^gb(a`y?|B{lQGx7$)cK}_%nq<aAWNS@i
zmPv*KYvTaOW5)IPq2VKs4@9L3p#kx+G8{aNO;J#T983gXE|HK&OtR<0edY{#Eny5C
zQKtst)fOy*MGNhNtsAFP*=_wji&NKOEu7A+<Cl8xv(U@@(ulrViJ%(^EonI7hX{Eo
z(uE8WeFv_Wazi^}c;pbRNSXfJ2eDP%<zab$<$gmt@(alS1yFlTA4K6TMFl`Q^^EpP
zL4-~14YI!3AUO&vo4wJ_zS$0Rj@{aZe(#|2p2|wC$Dlm3)fi|-)jctY*A;0)Gm7uk
zhTLn(l`N`h%Wa1T`(9-~{#|g>95~y5&CCa1W2p!-ep6~Qe}Btr_6>i@UKMY%W%Ndb
zBFAImDZFRITxZ;M!q2ux+Lb4`S%xeBk_ppfO&Pzm?3w85*zDur(P6m>Diwa6B`Tz>
zHP`7N;+0z_PE$4QU0vQ{Q{8Naqb);!B<oEKpm|jdB7EZRKRPsL1GfOQoOz83Gl-wM
z<dl6@NbGmac4%q}psXol%^5^?_Tb4=7HKamIw3Ax@<Avisenxa&SOvj;|#@=P_?f~
zT{wkTmOAm|t%7PKvQhBgil9fVqu~h|zY=cbRdR09DCZ_z&IJin2lR$JBQES}fC8$I
zrJnF<*)0YqyTstcyOH8=;weM)7_f8vWpXqoF?ei>!Q+}3d^hLcA;A`eY}P(z^KO|2
z0ntWodIyH4zd2!zNvS~Qu##edL~Y$4U;$uQ6i#2zGVL?DU(KV}L$?YTxCmSCsoiYj
z(;<_|x%>#RQN9vHdUO)$=c+_(OE<U>&y6jdNG(i}sxl(7Ali5n%}kF7>49RBXbQm2
zty5O*s4lP-B8h{~X@I@G5?nEEoVvA%gvs2R{*B-)es`Y<9)jSZB%J;S`T|<N?hqnZ
zQV+td{V<PwjR{;*DygM)5jFT^8wdpa$*d$Cy7`N@A)b6sY_c1#eG`q>bDn6;GV;(v
zk<0hCCV3UJ#aGJ}N_6qLNIg-bkah#r>M}19Z|rq=m95Kr^uw%Z_U2^Q<j5DXg89Om
zXu6&>1je`D61D8kHe;rKWhMg9z)jVbRIRLnbvK4s$IYDEP3vY%ax}z4L(lGtT4%n4
z8%*%d;r_k6EYKhH=^=L*eb#>_&R{-y^qf13^1Y{t-1)+gl)V%bPTWxe>H6tov{zu!
z%EQ2s?vwo|`yK{`bPu0DJMh>^Fm%*D82TC|S)qf($b#cM4qu1kD8Yh4Y^%X_8P2gJ
zOF+k9PF$R>=<s)$&FA#oI1sJ{F}Rt9(})g<r<4-K8JW(>^$ld{U8PUn+9zVUp}VLY
zwr#9~%^-)!0?b{CY0MfOHt#-oTY9}HMH-HY1W^5DDQS{I&ZCItQk&E2!R*uAZiPl|
zINuJ;8$9}3{-1-vRDcD;p|txug29o$^UoefHF%j^3ho$Z(Ri3RrVvqgy^4tve4}SO
zy48GI89RB`9HbO#$jCK963%s?eFF<v@R%5d=~z)%#LY0wM)legh4a=EiTqT^byP<9
zZ`MNerhBv+F}^JHJzpJkkAPsXi2QLce!&b~g&M<6X?NZGS$njhw+3G_{QGHiI>QI<
z(CCiQ5&4Y~nw`=44Lj-->&YZ43P<(~x7wi(!XeHcyYm9?9X=$isQWl`XDC}^2QAT-
zLE%m1L_mM*8LHr^8NFY}ts;L+Yf^yNi6Ye_65Z7_kN^*zXDjmTgyFF%hQ*+Pv1@!t
z(1y_)&QzyZt_H%6F##Klk1Z*p1_v-Z=N^BwVop5v5pT!6<)!B)t_L!?6DEL=j`;05
zofW$g*VDLI#s#Lhj2!<ObUdKPbNhWxR~_`sf`=e7xjVsm${{)q1z`N+!D&z5ISv!v
z4fH@>1H`3V7*>2J;S-G9V_<C1@;SR=H;4d*u}(gsU(l508DOd$slvS_4C#7MZPppD
z%M!`^4GCoGRyR5aV8J|g6JjMG<Y(!NB%XW#7_nMwpxt9z{EbCCodO&2fsL#q;L^_7
z<@Bi|Y>sT<ZBGri&ueySdwni|)BhZtqIciZd+wVzFx{v7PXyCFJitx$iDJKnV!tcm
zwX{hf+3%Q&63%ov`$eWJg40<LVGa*!%<3$;!gwXig_%x(Zo*X&Uu%x687nM@8~!PO
zB?*u<2`f!4=;OK?rxwQZsmPS2tBB9*0z{)V(lUiBE1OQOG@V*W0;oSR@)Sy_r#LXP
z7mB*C>ePMJM5&EW5-3$~aYNNQ4kPJPsT|T}{IJwMh+%{&rQQaqyyA+P<h3cen30G5
z&qy;OdCI)3AAC?v)Y3W`zW8zqq%qDqC`@k;>P6`BCOoCk5E5ag!EgBbzz_iGeLd$n
z9wC_?nkY0PDow~k_7zRg3rW2>c~(R_v52)mBAAS*hm+08Hqi8iNsdn~a(sk|R`e!~
zwqu_f>7!kJ6HM+!Uhv3^BrRe;))|+n({ZN*rz;m5&lUj`KLL&by;>7h9|Khn*$qdr
zV#|unhTg@CW7clZa2Kge;k6mu#o|sZc)3PPy~rA79mwv=J38$x$RZ^PEDZh{274Vi
zp~HK99uxz?xQRd-XKO4VTx&L9k!;@LsX{4PF0g3JPMHyYb4iw)g<82H8Y11;v?kqb
z&bbHi)}2^K6AkJ;WwV;kJ{Mak&{3FQIb2*3o!Sy{pMmDKfB5+t6({7OBIFaI+99Xy
zoRC|zofGnLReLf>v>?dmC@=%*5VRS6k%`$RNF^=kOiTe(0(a6x(I%Rr5rZ}=5w$e#
z<>#r46TODuHgz#ft<_MjN|d`~Yf9`|8>@1Rj16uRS`I4`lG^Q1Ao?8L^8xuoHW?TN
z3Ov3p#Pm2iEm{R<3sZDin|OGFsC8tXUtQOZuWC7$OE&y_9EDD{?CJi&UkHOP;%T`k
z48)n(ycBQwE;5^#EcB$QB4_DMZ}3Y}Hf|L9-1}{0**Tg7*DRaOim3G0TMr7S2AW?M
z{s}9V@Mk%NKgk^aTqf}6{&>z|K_wwtqRAOb&!%`hbS@EI#S;E3r|>61Y3LGo)E2l(
zv)QSQrb3`hwB?%)q5%q5fR6AN(6t2VcU@-Yvn~~=3K(dZ3dB=NKBS+)E$UvMy5#tP
zXwl(1E9`Z)MwjxiNukC>h5WQoB$7>w(_CmTV7VBkay4#e;!s7>`=8Wvb8(OY7HJR<
zDDJWx24L#78)Ke&A_v~lns1z23*L3Z;AZRLZUC<)zsE^PICKbCoX(_^_vjKU(#2-e
zr;2n#H3^$URl26SbfqfO9mCCg5VdGe{f5Wy5`9(OJi%PqP;D)&ESrsZK(p<Ms9zQ8
zwZ4rIO-w>m)CtkT;%N(;5Y33<EVc}-aQ_A~AfEB6Y9w5BP>Q8_eJqugU8Ks2{P-WE
z-hYgGf3#6gSVzV^eQwV*i=lzUGW%6bW5hE~XRfpedQ4sct5Qm<HmVplw8|o|?SxIn
z!zL5qXPfOj<Q)xTuUp(SGc;^N+|XVff>SKA3vD)9_b$HeeTxP#8MdQe58FY<#J1iJ
zBOdZ7WMb+|Tqm@@%T0H-cBq)%$~4eTP0ep+8{)3H$`!?)JA>bRj3A<-7cW)OF4LC@
zLw0R@M{u^O0!E@|0nkdN-=WoR!cvTu9|QXA{6wkwg2s<A$N=mH^(3yuA%@@2WcB>;
zj(Dm6GK<wN+8?LF1l44Fs#|M#^*_>NbZ`65A7JpAQwDng5Wi?J_w<VOco~<0y!dA<
zLgH&Rr*nCFlmpBPo+S%a#5h1YbTd%>s>Zs=RReG(Dt(e!XqOlp(;_C*PN>9KV_mQ8
zb)DFzlu{T;FsNQvpqMF+Rc#reDUPl9S~CsW$!8cIh@@f%w2|T9*<IPE|LyCMl3#-G
zR=gD!2=vjQg(<K2LJg-=+KgQ#VayLK-Mx6pOk}JwWt^?7SD_|a%anJ>e4F~CDS_zV
zA4wY2*mR>bY{Sa^*CHOXY=WVG`R`wbbnsr?PC2N~A4WLHFAT{B#~Pv>gdHR(2uvYE
zGSU^47ieC|h^!`^EXj)AENpsn3QH&tr*TH=OEmc~&MuviiqH~!Uv>8}StNy+n!mhU
zxz5?yH&A&FbZ8kQn~m!fpj&hQ<`^_x{A373iS7rn536al#$$lz0ViYV1D1ojc{Cfi
z=bgam8cUB_ly6{2d05NT4ppREANrfl&0>D<pMvgl9!#ZUIDHC7)Ri4rkpBJP!EvvQ
ziqhq`=sidz_w<qHKKvnxC?BLaK8Lf^k~E|hr$rfs(-vm?g@@d>*($RZETIzCOt?CG
zhzHZ*Yb|&NOQ`n{2_65C3@9T$OIZ7{O6^xb>*J!Uh*ZJv#T~aJnm{B|;<>>QTmd|Q
z&T_L!%yVL<n>!48!Tsc7gp1xSAOpRa&^ACA@2YvJmR6Oe1;AG{dh%BfTUZ~V<vi@f
zorg|q!m}SQ!t<ylKiO*;Fn7qC-q~{m2O_sI1$cy}0-_G5QRRV4lLrcU^V-_f<pyU7
zWPkNJOp$g92x%2peD>sCfo}d)hEvYp2uW>wd(}FAZ~NotSj~|zO{Dd_X27eMnmF<b
z`!|}%jr%TUDCZ8XyUkJIPIJ`yQ|#i(6#neVvuFSEDNWty&-#aC-@IdTiQ2#8l8z2*
z3bUjqTUF5pZFlIb@@N%dz6^?g0~aHY4yb-y#~4ghi9D0~?(&^DQqRD5UmQ_=<yx`S
zgHH^sS))z;7OX)mF%YCqyo$lCICEm+3~H&>+T-5OrjZ3LO`p&pv)<euO$~fJVbk03
zaSD1cAjV&e#MrduUqDMN5>niX3?cx*J?X{7oT}o!^n$j~6~TD?^xr@*ZkwPnny^=K
zk`(qf>>|tK>x^=OGw1hpQBsTm^h$-g@RNq;V~mUCOu~F>PxZJ^`>2ds*0<J1>#p51
zrI+YFnAoB^qnpJ(={w#veUClVcmFC>9P@oC0st4x<+kt|ZuHQg@u;W9L_#_ahh%g<
z5)#mH5ajEDNPcP~`EeD=X9F=mUHAcs82^HFxCX(Df9Z+@M8I&Mhig{%0&nm0v&b&(
z`{4%FWkI&Sfip{@OL#k3FVWMC?kMntEc3RAemD5dE}@qnawO?4Kt_vlQF#5}K}cBC
z<;dqx>{_A}s!ez`jf4IPFCk1MBD{M6FU$pOIb<B)cLA>f-4)(aba=j$51u^vE74lz
zDpx1E!fj?!*XI8O%n!8{yKzspN{?|S<1$)G^+k;1^EMUlEyX3VrpeEr@81!``rmG?
zvL?4`fcobRKy{zRsyF2Qy$5TqiRgz#cVT+<|ARAOgG<?<?h)v_&fiFE)U~<8S-mQ&
zI~!USCGCLtN7;qM8vHDSGA+m?PSM{^<Anl+#Ef|R>2~Hu-?u-&_#7HKHY}yT5K&IE
zf2_+g$_ur0$xyDmmOjZ}NfUI{>}Sw)JdC~6?_C!D8oiFz=ykM4ucI}39j&*LvfSHs
zX!gmhLJh;<78FQmNive~?m4kJ$P~SL){S00GPF+BtLFs0dX&pgJ4Lk$y;|~tlV=ww
zxD+76WWIUFy^=DD<f(HZn4BvFAuH?7#r$#~`(nV&Z_toK%{gp(Z%$^Zf-~Y|GfV%g
zApcbPbUr%xD@h{4r*lkBN~AOJ%Y=^8kjlNH;%S(FAXVcW<EA=!RKTJyOh%`R-c=dj
z+Q<ujC(c(*TC#6?9q2CVGSO3AfF0I%)Ng&O`+7g^My+ORki1B7@`jd(sa6~l`7rSS
z(?8+2DuF_)P{V`Pq5uUcD+mSBQwRX0sOTYBe(Bc8=s=NTL&x^2Ue@Ho64{Lu3h9Q7
z+3og3-D?bMw~I<CM>ekW@N$KB?e>W(<S5u~PgM!WMqIS)JgBbMYjeFGbG~+J(B36d
z3m`l*4*HLJRHR6OUdBISpt@fxBIozpR2l>EKW^E%asxWQm*^`1Yh#^l)_ig&7fpLp
zn53H*FY6)xTFI7ulQoo|Z`sSo4du%%`z~rIf4^n_{kowX#{55NL;0I6`~G7?`5ZLA
zM-AmL&^NP&@?y(=eBMz0VatAMDxYjw6gQNQw=90qP`=o*59@~V*ITx{Y$#uWRM-SJ
zp!};<LwUGmAKy2WUvF7HZYV$AvWssU%1?p!shG`@J;cNda>K<bL_#yoCght3bYpr2
z)Z!`uIT(XQrt>%Pd;v7*tNtMBIIBy}DYakVL<zVTAjfAH6eu3VzjcY3M4%nlYMWUB
zvR7eVM6X~`Pyi8lQ##Ah&XDVfE_8G3g9AE5pW#t-_3=V|ye4j|uU3x4;6lM9A7YFd
zcasX7a9m^wblPF^S(&W@r~4fK2cuS{B-I4Y<GxwAhzLlPQlvz)B)bTlVv=WQcC*3E
zZSxdt#}#@G5_|6N`yRj3MbaNr9v8S%nJuhV@@NSklC7Zp4S)3TKdz(v>Md>OW%)7a
zV@_`tUq;g|43D+M^*AfbYzen<(WMf&EJ_gXudtfqVg7PZ!3Ju+$_5+}v*Y)V><$_u
z_)_2qu@NeH@E~;4PGsjnYKnNm)0{ev3`e7apky#yQ1FUX62tVioN9t1J8s@)L&4U0
zR4u6NNBYZ&>A-s<<MLJ0AJrvS5KSo(md<=a!5J|FR1i@bC_4!ISOj608Mj#$*pb&t
zZ&3Q=${u9Gx0b?99_3&4kGy!82H7z02KytPRz-0d5iZw^pGr}1*EDd~4)`ZFOfc+b
zmH>3cMUSGzA|~NmLA&pXu(0*8hkP<0JP?yAmY9)3$}@X1GXfm7T@>+g-xo7DLQ_*u
zB^!)nkR#_6-@)bE^uLiz{~M;Zf|-t{xG@i9DU|hEFE3ZnwMbOOE&HeyrY-pa+@u!0
z>$NDFOUSzv#-I}SM4aL4AhxBoSPN;f6x?QXDGrjz2s5#;j^L4yMN=#EYNa{Rh6?dQ
zW#sBD<Il)9ahu9;@BI_nA9>jI)8GajWc~feef9$ARk$i5{}66K+6)u_un)yyo`D>Z
z_)q$Mkf1<|h|#;sOqB<>*132`C*hDO7DW05NBHLA5nuJL&X=ceNZZI{Ybsx!x`yW?
z5J7KbT0CE;OJ^cGp08Y9naGjntIX((XV&v&`gM#RdlMBC|KKSrR^bGIa3Fkz_YXnt
zAN$YQdgUKJ1A2au`j7gcN`NeP_yj6V0bnfkpFU$N{~3VjBc6g@ml=q!AwNiu$7uLZ
zmv7Mmg;h_H+VT?qj2NGK%GsbS<uy3zwr+H(d@+e;vOZqQ68?C^=0V$SJZQ>S_GZ%-
zOI#B6dWp?u4e`Q=#3~{_MgvXM2P!b)kMi>)5UFM1_wWMT*FyQqV5c&Uqo%FzjTE#p
z&?yFK6oE)_XgV??KHy7&9_T=noVloO@Dmsmw2|V*$xu7t_t?Z6ED~I!$sH%+K_pLS
z19jyB-#LncH*V?;Fy6nPZmBPPH@j_gl0zx-J6PWc5Btkm(b>SiFZSllab%i?y<hs{
zVSj%F#WDAS(t)$G%?2K4!+!Uv^;|P`V4_J3jURX{8yxu0Jb&+(VYf5tU&2ez!|u#}
z4~7rj(x89S0D3ED2C{Gy!T@gzTz1@AViXNqTW-5KVkod&M-XHO(~oS8nTpI{jMbCp
zZ*;}>zL3JMG~g5#d@J4?$<E6M$Hi4T+4=MznD-R}l<uqnLht1jFSR=DdPfFUSmB1}
z64JZnJbvn^R7b(wTZKZ5J`Yk#Th=#nPYQ1QZV|PBUVxC^dPqBl4?%WVC({=Cd;!0W
zr_eHwM2~U(p!O6+$}(R0EppUr6{{#oa40&Mn?3=frv9=*FvLz~H8$;LGlvN`mbF}L
zqW@O3QZ3e97%QS2T;c*ueGzXl9Slc4X20RZAoRkz<nca%h!1gpU_`MjB7H;d2tI(o
z9ZD1X$m93qf5#8qk32M-5xlE)k=zTH%7#b$_;<qtf&ait0RTwXhrpLe{2Wp3-V%AX
zN1SFFXG7soSYV$qaGzE3a45EuqiIa$1>Q!r6sTL66p=IX9*(x`;OW7AT_K)5eas~d
ztXg~*o<}@#>6(t9QF0pBQ;CH@)J4gL(9Vb{W=NGfisd3M_+AWPNlsf$o`Jcs>u|4D
zGtPYy&WjdcF|c!y6Sakjkg~KZV9JRp>Kaz=@<mv@N~b^{DW+^EaHfvf8k#5BI7~$8
zT$aZ3G|QtGVG)TZv3#;zCuNMj{^G$>KA2`DEJjgU$kKHhV_FGOyq3jWKNF=_P#SGn
z_TWL|sk9x%u7WOZ8=)as<R)}*l@p{KOelKzc>kWeGKc-=&$xm5;PBBQw@@RZh%MH~
za)<Q*&vX_rWufbNN10o&8`S<q;z2)T@p8pQ36j+Pm=%k7>7yvDF`~epJ-=Vacqek%
z#U82=*oblLPba$Eb#QMdHs(Nz=J68g&|bI)R~*fxEh2WSXviE6U73KVS#E%S7*W~v
zlNwS>#JNvhjmMIQV0d&?8ucO73Yw(M(Qi34Ri?eEq{Xm>x!L(TN7m+7ujo~0dSy#z
zIQp&R57~Ch5NSRE3md06msoh`Tm!;3jt1~oQ72Xyt^6P%e2Sa2fCf9Ur46E3yD;d~
zWG9`<xyxpO-q!g#YQ22>*vj!zF2b@U2TIy6_OUh9LssN0C%aIAhoe)<P^eH)GTR3a
z=tKqg7z%X_h8c$yx#kBa<@sUEevWe*;mU+b+TY)=?`6q(dG`45K;`YExp?~I;DA$!
z{liC(IF)#Q`1k<bRe!*91A-+W(Kvki=o#PEdiqFgYq^gOpFQ__B*C%-wbA8VvOLM?
z$UklZBc#2p^SQ}9mm#WK@hs=NV4RnZXm^YQkoLQ-lE^&gz2@>nq=@Qn%MfOlanVGB
zF+M#*CONUfylxw_iBn9`=F{avW%F5A!(XFljuS~cq%!}X#>8u}848m9FK7L;@+>`@
zo#m~)FN3d8x^GClQwu2%e6d09BJ-Tq%v`bUdWzKL7<s8`d1+;m23E#X*OcL0=HCfR
zXk%RPw1Z4O{XyDlPo+(aKf$227$1&UE66IL3ST}PnMr$o2vGz09$4u+E6%NV^IB&p
zd_9ym-Te`@-3e0q^|sB8omii2Y&Ge{=_Fahs&wUGV2<ohSv}{or|NFEAiP^C?p?|*
zBvul-*N8=s*Q?<nTmDSOO=|KNB=aR;U3L*o-@&3seZjsTq7S*SZ$@}-XnQnnPFi_R
zDA*S7|L;0UIjz8Uw4D+2PPq=?UwXDacoO!{*0ZQTYyIDBowt57zWiG&TM^z!7_!!H
z4rU9QgczvT`Hi(M7V%`!it%vHBEoq|uFleP^<6Xw{`B^33(zW@d??hB6mB_h#USeB
z+0y=K?<_sd8NMmRZW01zvMh#)v`EMKtznF^$7d;~+=|iyXiw`ZTekpbTH$0O(zT21
zUeIbD7aw{E35UW0@Us9nK*+yCY|gG=PCzh4bQN<@B}-a)K(a<(1yZGE?wA(Rx+IzP
zBPJ}G<Da$LP{Sl6xIRA)%MlV9MRB6$*>2QNBZVr?-yKW?J`gw^BcW7QjI*<|zoP-8
z_je3)h+nkmmR^=~?2LIz?HAYSq{589!AND^7aVvTdhc<VZ}86rN;bxT>8O5vv_R!P
z!go&GkL0W7iqU&acZxeqz*pFNd>GZ!rD*E>p1;m6#P6RDyQpPY(>ag^7Y022_q&1n
z=AOWnsCmggu-EK+_Kv+}U$Ykyz!Yp0-DeP2tMKK%fsJDBAPq2DLjxq-G`Q{+qzb%~
zjU${H0ER-JUk0iFf_g9e_7d|H{p9kSUujf%?*}4(?oE~ge@$^0-RK-=ab+(`DTUd0
z<udsiRw%|`1A!XT0Xls930h@uy{|i+BNc)trw=Ttm7~|fD@i0}0C@ytqjAt~=fpoy
zygqSXFglVL2QP-vh~8tl;&&jI$!nc-A*Q!6c`n~JBj&{mLFD2U!Z|9@R0s9AAku~G
z-SERm-vaP1>HC+ref)Epb=&7;mT~fEvd+;l;bk!iS9FrIB>zKAUQbA$ZCkFSGPDfO
z9ZbMN%+Z!P8Odtveh;4!27q1~6-Z29$IBRi^x>;Ykw@84L1g_N`wPDg^n}hl?Ce$-
zo#(F%UI$IQ#aF)$_C48-$3ApAEa3_K?r2gB;pjLxWhf7APeJSX5;FuzaxV5a6_I*N
z#ouK`iEszPUwQIPwglO@@G4k=yQ6OV<7R_o4CmtG5LU_vs;ylsyE==xb(Pz4V-LaY
zpfNQC&4hT)*Ibd*>_Lk#F=y_#S3=Syb42mXVY*)e#2;Y=7$=csZ`D)0v7Vo}b9#G@
zFN&UTHgoY7|5YPORDLo}+VN{5<tkeTnM?OaWqw7Nx9$}{GurMrSocz$2I_|I3y!(n
z9!C+n*U*D&S`YFUk1BgNiOfZ~Kxr2TjJEr0ZtVdI#v40kOAMN!Hmlh=^ku0#axOY@
z9GurWaupnlju3>d`Awl<bcOgpp~x14MR4UW0L@xX=L#tI1k(k%{|oK(BKX;YMhgga
z1-CO79uu5u?WM?k@F;Nr)GZAbTce$|-Oie~gQ>nmW~jCyP`;fkB0%F~zH|F7vk*qk
z?}G<F5J~dPoqyp0s;Ja39&wwvxo(^ypE!IHh&|y%AUyHrL-0F{gImHsadF*n)9)=W
zqDVX=@AU?614N4ty>*`S7UB(LyWiK^6Q8@IHM=FQqT6M_z^29fxCB9^r{!ZVP+kVF
zH=FO}^nKyo0F3r=w%V6>ftxm_gofM*?sq1*-zspwr30r4CFb}sPrP@*36CcZLw`lh
z8Bal~8VIn|pZRSCG5%1^fL1c(BLPgc@OQmwOuF?VAJW&sEic|V>2GV3{-W02{U-fw
z!=%5x_oTlIzTRwJ7?b`^PWrohO*%|7#wMhhmh<~ED8&4}Y?f$$Q15}v3qAEH0b6t)
zC*(?kTTJfDVCueXO4`-tHBpL}+c<X-gY@pU>i$3o1KzvZF4vE5UbiT$y}3<AbvrPQ
zivbW+1?Jubb1pEB1&GLSx3C{Bn6uCir}o1sb1wNq?Tv&v{+Ky9kZRT3-DkqMexg_A
zufcm@a_lGgLDtBA4&LDXx4{Med>0IVW^d@pNOtU7uO3>^PN_zW4dn7yAVmBMGVx&I
z{>pyx{9iYlpV)Wzo;R`GeI??5c(hc>N<lt@nn5Vc`>~!lxn0^x4$+Y+qVw#<u#c!w
z4zpe%b~!;pC~2_JW2>C;V$Ziqfk064QA!9b8|4>4#(zN>!z?~cu(FRepeV~j`O$h9
z^6OEr$d*wvsJR@Ia+Zup0^R5OMd}&br&|o12sFgVTj#FasN-NJ$rLk2V)9SPZxFNv
zO<~$#1Zq`>DTh~4<y3916)UVJ2aOfxwe@rn@4vnWWe$_rrzNb1wz{Ec<7hyp!HD&6
zglAEI^caP%y)Rx>7EGhdoAg_=EKv`?C1)_S_z)gqR1*V^XRth9&CrVTFo#dBQ#1o{
z>ka5DVQUO@1awT+x<I?qBwH?lGMnZjLUw8zQ!fe&QPGI=ev9^5SqrL8gy9L37`865
z{Db%&PLQ<|FkO?KD{QTRHB5>Epo89}Q98L|t&=QA1HmlwTZ^(>75?7d9GJ#>3=^~5
z3-J}0x<xcu7JEgQ#$|jRby4-*15yYg;ojp%Po?K&6Vz+$R-jsqyjqW?VNb-38B>rL
z1ll|*7g5f`%-jN?9#H60F5||Gb}y7k1BxF8FoWL!nF7AkdFVV8*=Tomzlpo-d;^eG
zh`5+D9HY>qH<DHv2h^{<uN)t{;(X<>wxOtPHe(b(P=)`N$n9o>)xI&6Igh<Wj_EPn
z4?Yc!VJN2_S<*qyW+KmCm8rcIh87@%mUS7Id`9+^j1G51fif>-`jZ3W+Q$^SQm<_{
z>$RZk3ppG$M+zl`1RZbWVXbd~WVH7|y)gz0Qrk;}k6GsCKqmc{91gjdD!3$_OAf?q
zGR{W?4N6GRXxMqn^^xw^QVV~JQV`#fdfi)PEAC~JAqyhlP_oS%sMWsHCd58;yGMMW
zXcoYBa{8P=87#ch;9!xotZ}abx~OaiXm_E#7QB%0lJFV{eRK)xH=14~q-#Ym(7|bN
ziXjkT&C_WZV{66p-FgqK4G!01yZU(hir8#0{1o3B7&;L*4Y8WBNNfC!utIBS&KCq<
z3w(WjxknyJu*~w>YQc51FXCpmgpCf*1sdBTVg`QgUF0!k&11i!U=2e$)!SA-x!w)!
zW_<|y>@^y7zeoG>JN$z<#l8;udb{o$j(~QUnzp@N)}ijnZuF)Rx_P`z%NXMni~TfZ
z?tOr^-Us1w1#D55eo3WCX%&7&g>x)qX|)}P9)4VB_!xPv^$~Z_9){iP<L=M>?(@Hm
zZuZ$he|zNpDc@#>(-&9$$pVrFseWU4cG>TD&n^%8qmJ-&JW~6~+D?9Uc{pizyWE|E
zeDO1nXPXyRT3xjZtsMg9Wt~U5b}nkCJfJC`E?gX5$1KP@hul>hPthz%(%AdO6#yG)
z!1d0$ozdSte~*jHv9w{f^;^Tev$N67!FJEsDI*VpNtQ_EmpUH?@eqk!_8JyKj_yRR
zLf8|xYGV2N3Qy_*|LIygdgfEp>K1y2axE%tHjVEZ@91g!T`(SdntyT6E;_z9I4k}>
zJUiPP$=^NZe6hc`2UFi8&tsvu=3=-YH`WCP^{^FPu97S+aThOIuFy?OM<dtO_V(mu
z7f2fB9t-+M>6iO`_}l4t=x?&8B-T{=&Ef|^^CS6I0Qbf+U--a19lK>jGNp$bPksJm
zB_@-t@$IdK*{e!I&~iY~<0iqqv!b)--KK>JB5M)Wsve<*^iq23ZauGh?q$o3l{Yrs
z!2sAtdTTkjF-WjK#E@h;KL;FQNEII4qKGNe<t)p%4?m9qgBSbw=K%j4;-5$O=P~|y
zf`3FHI0tPZJSGvjN%9>cktYnP1vWmV6UTU#-I-zlqiIROjOM^KM0N5|!Kw@VbQ0@^
zGkgI*w4&!25yrs{({Mb-s$={&jp;ACi%{W&u*X5r&{5|SUzpBPauY$P5%~9EJf)A&
zG3bxT&9JE)zr_9Z%L)EnkFRiC_z!3(oxcw$2oq1wgxn#c(+ogq=<iCLjljO58w;JC
zxZvGV!=2Em;ID+DI2h`bc<Ks&>2Lu~3jQwW4@?aH=FW&U+3#_JIZVRIB%*z0e$kyQ
zkV(mcqWBP9IXtcjb%v0HeyK_!PB=hs<1$S6fpRLya5Ik}OS8*Qap=Y+)J1LvnE?(D
z^@|@4GU1u3ucVJEm1Oyps^?izWO+O%B#=`Gl8b;XAwKWHG|u^7?gr`L!46E{jF)*h
zpNpnJn-YPC={N`gVG&a=W)YC}RUX6F$}3t5xub$b;E#e7-sooVZVB2>HWfGA!&<GO
zg094|50StNFXjuv^Jpf1l8}ah%3T*-#&DVNc*x6e9^n!3Lfr`S9Cuw_W+F*#8O=rC
zW2y>7mN$UZHm74Lc*#GBS7HP(g><Y$<n|LCN#cS|nE(hmfH`_B!~e(LoA|YjGmYc_
zN}BiivGL+$;~X5JDPIb`b~(C*Zo3c5+mA^Mc$?U%?LdL#{o8*tqr;Mq9Q0VqX4!%*
zOCxDC8qJJGqtEO&lj89ig-iO&k<e!cid;`-;X?xS+QGl5H1>yx*8wgC0Y!IamC*Wg
z;rAHx0ok5MCg4vJx7xcL8PtMVc3|af?4h?#5IDiW@4208O2AH{uFwDQ8Eku9jI4_r
zdOo3rPG1#eFa<FJVUK2`D25L4<QtDKL5KbB`uu_8QVy6n%>&IOE+RZYxZ^iH@*V;&
zXWww!9PffJ%8=QhV>7om7L1k0GQqzACHtN|1f9X9M#0M&AO$GfV@Iz}9iUQ&q!{Hr
z`F$uRk4TW0B|}1Q$j*6n&|9G=9%1aR)n}9hhUcu34qar=9%aMCjgj!gv|)IU)OVO>
zL-ifjt;iQ=$zYgxbwfu5&rhRuPkV7q$N}U7J4Gd)#hEpH16F$J$Tv=U>_v<mzWEHv
z-C;nk%}V7c*0{WVXu9D~C<xIL1)t_mL7($8-@CBG3k3=b5X_!LEOg%kR)suGJP-IH
zPA@~&A|$sVbV`9GM-d;KuB?*1!ko3Wq_~?PFore<!k^=Q^zjIxYz@7|n55SjmGp{k
zTJf7WG00vn)pEQi{@EG7tpT1r`8a@9Trg3Ey|5cX=p~Fq@{m)NBuIP^rwxH~gpn=s
z2L8FkBaEhsIY@UR@x*ulKK{*wn+v+Bo}pHp4VRCC!a`Jyfh9BMbLsj$n{z7s=6n?8
z;ZZb?hi#@u;515mpw&HDBTNG^IP59}{umBK-MB(BEuX!{(|0HuFFV7NC9PayAVC!u
zS9W|{^XkH(+ceX<eM=fj%#?3h>(&O*gs*peJ>b0V#B}@T@KLf)E~WHTHYiw}TuQ~l
zbTT#-b45!y5R(W*VkCF1!%JTHpEKW+t0zLDP+Pcu+0YhUXTmnaid<w1Gt$Xf#O2){
zodS&r7a2-g>vn8T-8_#`!a7gF69<>nC7IWD%9@4l+nE+tyd*T`dzEv!T)}J06P+HY
zBWA=scjFWCrnroaHXjVs+*~>)W(2s=6-i@j(2j%x#$AhAj>!$LtzZoQnYHHHO!phd
zhl45~KCt7dPhp{iaYi#EbCYGsn>sX#H6=Ra)0JCXQw*k^8ldf-4K#6<@C*$eL<}}T
z#s2WY5n+u2vNEASIT{5O)w3S`4ukfs>Rewn69*<_C<E^#|G<S~BErY58M<X+fPyxG
z!{ad;&R{07HuF$;6VaA`AC`#rUNjS3V`q(`aiXQhts~UWc7$i&^;WS>qeGbfN~8g1
zh9Kw37}fgjV8oBO@Uy6f48On}&SWc@EjxAOINL+tGnSTo3{$8C{0S&*p&5-gvM~~w
z#kh^~$Q9l@Wk%dpk<TY#04jMUYrR%C*x{+hTD?x^Ae^hhp%aykB`@-YZU_%TE0jxu
zxT%~JAugXw=iw7NP9XsfFrlX;NX?OS%M%KKDL*pRJi_FmlFU?K0<}lUd-kAoe2m(s
zsX#_9%d}GrQ+{F|)0<kgNbc&%yhU13ruxRYcqY!I`ECWviUxu>BfPO>z}W!*qUnM?
z)WkzwJT$~ZQ#`Ej2Z8MnU-+=lGYBp5ix>)eiHCz;V}EW|jt^<vQsL!o@XvgpwG3kL
zwY)e?r}Pl<2WiZqwo8K!dt*i&dR7fFl+cCM&h3eUWR+o0J^pa!I=wEf#QZh3(})DJ
z)vy<CH{vg-Gc&AmGZK3d56q@Rk7O{SCtp-NkWi%^iQc$zfS!jUGg9b~9tQk@+fI7)
z%uFY}6T0X%#&51jaLP>;^t<1;NtP1lbHy1Wk}8;#A*QVx3jGa)@pIDfRjC3MT_}w7
z>koqtSL;YOL7Nb??o4SNsAf1L@SxKP-Xo`cA&VG_9eq-<Q6A~@E0Jgimc+~Q=RS4-
zl{P%VDo#q_i83irQJ9lo{t8Eb{ql=>pq_b=R!&E8`^MGCbj{92B682|m>*^3o8j$9
zoNNVBe1#}!S6K>(rP@2Xaf6hEi$EmOKwKa%DRC5t2@M%Z#BUR6AzfH0tM7c2XNNc<
zwwVqolTU|dXHF0%-VZ2rlV}m`CMEmfbaAhU-a5QmcEVlm$YQt$aqOuljQ&SV7?K4_
z7!g<fiq60igtzITVIPKak1n**KuIZ22k5H+^*kzQf74Haj{J{~2TBgP!<Pg=kR~ce
z;)@C**bG{>SmKS6N&*DWF!_P}Qm0*Ft3Tojqu#KsGS_qQkcK3u&S=zOE3(S~jAI`a
zxq$Nl%s7^S^vP-gVe61WV9-W@PI^(<lI`*d|4O^a8((RWKN|V0MIK0EDYA~nX1Zw@
zJ|VhJ$A3i0t*zsk8p`+^&4E&~vA)t+uMKl;Qe#nO=dqeGK4PbW$Dy`ibYJ_f2LpuO
z{mCBqdJo+24}iv_zhoUSQwLcP&(cyC#VXvLNT7os)1b+#4_IPML~!Vw!Anga@`3R5
z-89}g2lU_r##cZ?(OaZ^%N`#y*hn*`1kQ9e#e`C~or9S@><*9N;gYPn5i=+51o5Q0
zwB!;7<4?z_TxILT;CrTaTlvadA99IAcvR#Oij96XV;1Q^9emo6Dyj9bGe_nbAM4Ew
zw#qUAz}5}V#l`*1Y?cvoh=3TE(r$%x)TRfdY+=)VQ{4OpCE^0OBB|@a?KnvTUUvcs
zY^0`mk{q<<2I(*l^SnWMh*zmdgDLx^E@@g<#h7yB>f@%u73kNCX<2ailM8RoGzQG2
zBecso?8v22%sv?46u)tntt52OtUQ(uB8Lq^M;6Bjvp5F&ujMg~upK6uMu`!02;+3a
zpYo^{XPTLTatc<Gp8cZ{ijuHU;wjwRB`1f_)s+Xq#8btkC3!NTxucQGN(W4y1wjM{
zT3L|osca%%j%@}6XKZ|EZlH3Zo*l9g#(S%|Lk9GGV2IJsNl<F-Jq-wBbc2mvxx8WI
zQm(@HOq4@<tWkv&r1n7hkRF_Y7@O3(0iVQ#!<x5Q&?%zns=>LX$|KT5jn>ExvqnY<
zPLnxpQmxZc(G&F?C5FS;$jP(lG<uvxw{rd1EM@m8d!8ENf`EAXr<V8xsEI-kqw$R-
zmv9V4T+dwgxS8wDOPp^$(kfx3lM+@GMI%F2QE@XxT2TN^lGryB@=MFhZV?(5vRb5Q
zLCYC!$p)4ooTh<g3y*mKyV;C8$*}W<Zd;%wkN+jGno<HyJX2#=en-m&26d_I_`}nl
zv-wl;r&jXQAxs_kRQ#!!`n2y;xMCjGu%#@!a<zXnlRZ&e%@d6`5(3I`;`>QE**hcE
z-_#Nf1OLhkqhLtGu&<MF9DY7@?4WZ|y1>XW(c>!Ur%voZ8pX#E<`B74G~0DLJ)3Qb
z-c{t+mka=ojw&#0ZrnxTJ19ygdXFAq(?FDpkE8>cZ<xxPHyex3gnHlmys7nhbKX9)
z0})Yb1Br(xM^P<z-ls%-4lGZ+PhqL-DGGy~G%0XsP_YWo9*t~nQpix>Gdh^!wu$bU
z9WyisX3sn|hnX_zUV3=TVrXVu<+pdXj<z;S`G~_tQa^HVHvvsaqk)1TyoX4X3sFW)
z)tNvp$W9?E+cAumY;Uh!8cZAL-e}ZgMF(c_m^yqciE+;?o}3hw!5+3tr!x%pa5Ne+
zpr;w8j*QXP7B3#<&5Sm3WY*+t*5OMxRxd5mZg@|s8yO%~g}+?(PEbZSHpZgcQM=@5
z-A?p3!qX=rbgtGla$Csg8j52Zx!|c(UIhsgA*-U4(jBK5ZBqtXA*xqruo>q{5ZUI$
zqzGYXCf`KG^BI11Y*Y2y+$AzCTWOfelA;B#NGu*?Epp1K<~?bv{lH^>oXVKW6kfPz
z(Np?ZGLlrO6k<VwGvEWmN~Hk<%V@~#?J&LNoCZ|0s}n8>I;IquDs`vIrz=xKjm6_y
zF6%Tw@Jor|q3rp_BBF`ST<wJXrSeo0#Y3JSS}_XbsaL>w5sxq;P)Tc`u)-xLBRj|_
zWXt%2JPDKN`0{d60ZLkTzFHqe|L7!6s&@{zwdf7y^Q@ZeC&4h1vu_wWDQbwz(D&q+
z!kirTwNf}y(ku=#38Q=lwi8HwoWWoCWJr#PMxLp$IWZKp^J)@E$l^d3LoeeFMS)qp
z1dc$aS%T#pW3Po5!@<}@zlF)pI(KlAkgAvJC&A?`;UEzo-0CFaGx(K54C+4`v6p@4
zY8Pr2uSfQ&czo^${pXI;74O@25V-ca^M+ulx6q_2=-J_gDE0zY!%iu2#YtS?31s=N
z6ZlI@&SPv2v}LSCMskiFY*l;xq+Nu+MH3TvtJ_u;Quzz}B3j+HYVb+Cv2S`0+EyKM
z=xHn;A*fwP0QAUGpM3@utxqc2o*jH_*Rgmak+*KxZ`YgHGIZ3&l&$`tU0;KgEj$51
zb&x_$L)orl-;@NFgK6VDM+0&w2|Nd&x!u5u@QK6iQQ|5>?8#KbaJzvGz$e~HL|_v$
z?n~?)I(@g@q~<udVUB6LQF{f^yc=;md}^;)*!55B{RMnSRK4Kee;;B1D&NC{A?+1J
zlA6Nuyd40YZ?#vj?d+M?g-Y^PdmUTFo|XL1+pATP|GAR?Igmk36nL%__-}h%7Wl7H
z;J-i|vVi*GJ$$H&5AWFrG`PXg9DW+wf%6nS4?xmcM+9VjDUM4ZKY^%qi-)9Bbc|cD
zSoDbe4lwB{If!#>K^t48rLat|Jdpv>Dc{6L#k`5u#0KTj6V=M%R07$Qb?P4k^hEX*
zf}WLi3)iSbZXC#rbhSB}d9S@DTcf3m#^{;XsVx~9sY*RBv5IthW=qJR)wZm3TmE3D
z1`>^-)SXX^=cLoK^B;a<94MWhoqr$lH!||?e^UFfqZpE`cxaVm0bR?<Ml~bXYiSTs
z3@2@CmGWnP)JTmRKCF0Hc@pQysKFjOpN5VH9M{6})RH8H51fu`_XIeaq{&oCuk3Z#
z{Rs2PV$>QZsjcJX58JhP-ib7^60kQ^uVgc8by^tGUlOgwxmatcElo_sXUwWxi-(D&
zsCo9$Wz_A6tSd6B_CeH)6x|hh*%&EFGM5f>jpfUN_tN<+a<RE46M)eL%wac+(Q%t_
zo0ex^nKW-ba-{1L7Zfk*ibyPwJ*vwfF+TPPHM?y^3ZhuOu}pL;Vqx~$x7%oaY0>dk
z*NfIzq|)P+RdZ#{TxptX4g3wf+%PHUGq0P<yk0lqe^}rk52K>2T#cp)|5Gj&)+{U2
zO4V$vnwAAsuEU>(X;qu>w+8=Kups)NPc8=;O{-=>!8Q1Y?LI<}v`K|lcr7b&p|N>7
z)oHEmNFOIZj+TK@M(B!e{m`u0X=_`k(q^N$w1E&4(E6upj?&5zD&9Q8XyB?A1oSgJ
zOhIu&KCz@z8P_qS4&-Z=iI7iJ%{T$PG@ZaV=VAi}()=4xY<h__5CDM#iZqV1HaElS
zXli%Vf=5tG+uyXY%ns!{3LK|pS1`UtoRH<ql`>O(QzY}dgCzT7Lp>SY(<}i>X3gfH
z*&BHC`NkFLYDonyVTn}RB%Bdk&jsCoCgoT5#+s(}W_I39Dzm&d%Svx~t1>%7n-e%3
z83!ID{Im&79o3wY>c}T7Lpa=eKzL-~q`B?lMQ0gwEHG<_5$IP}cF;ZYOPJl@JLS~S
zC#jk>uNpL{mr_|2L>fBl(4^uFdR7XyGTY4h1p1e-_UMq=s%B(hCsPJU?-OP)n07mB
z0tpKTn#(s)d2W^JwUJ}wWIs*=K1sxXqZygbw!A!!{Ww%sxslHd1yZDrp(M++lvRX(
zR^*<<(Uf_S!_Kp4_5%&iG|=T~*i912W9{Ar24q8FgM#5rBv3<ToZeWQpsD3ZC(-4a
zsSFjvnXVThX0rxoJU5AKX3#_1YE=aY?aO8+qi?r+6(L`2e!-k-<*^G{O6#ofpwUzJ
z>B^0g;7nNrs4Ejme%7myjF*Y4<>gEQ<wfGSYKbYLs1?~uB?kcbn;?JWurc%`%0f?S
zqAE(8Hd&Q)iixTrOdAaiSG0Y?5i-k)wjq7hcoqz2fgUhhk+K?;l@dlfzD?y(btARJ
zWe5ang=Nc3F3@5wDVkq$_-CFsIkYf=*9gMMnm=OvHx<r8d%_dfKC{N>058D$HLb{9
zXe=$C8xwhiK8rJvT0P01*ce%V#*rvnC)r@C2~u`L;bXiFl$RCRQx(lOAJLMV75@`W
z(ah+`jnT|LI2zFxW~Ss{m`QP*wGe`kz!!lGpB80>sAjVaCu<ZFYE+g)k})B4(_-?l
zC^6E6`P#@};%WAhM@us7G=r^LeRaS&hND@*b4;qEuE+<tP;N|uq-koSQS?Y%=Z<S)
z<)pS|Wt9p(=2ax6R**0&wFDqZ5~a8zv(97kDO)C+8R*yLgH|auUlr1zK!hn)ugh*4
z9k8PYs@I0%Ry~t+uA;bXWr^&XwN=TG@inLInO1AH8y$A)Ldc7oDI95N%O)Qh$po^4
zl;v@<;*pK`2@Ow*xcXQm++FTI5E%w|B}2y7oPo$P@aJ?VQ{;OQ#a+xG;aoW=mnL)z
ze_DeDTF4-7+^tO^P;%zYq?8wHHJJ;n(aPyhY)y$XOqKX@xj}M6r`6Gq8u3h7vn_{O
zvsE~KD`_f9b%*^lS|_1prom4e`i#u3e=TN{++xb0?`NMzqcA;PW9O}}Ghy@klKwbp
zx=x!S&pu_XI{FS%D|1_aGu?TdS*|etPqXFBIab=J-=Wekog0~3glT*#oAfD8lH3=Z
zl^evK0aHL8P6w&Yok;>xULE_Nl<%pJJ~cB;QzQ$Ul+2%yksandIkVAGS{zk+n5tb(
znt@5eic*8>^0$`D2WBohpVc@yVey#JY?&grxDR347N0#l7)nR&{4Dh-)H+{1O2Jv`
z5u}zO2~OZpUzIpqxt;m7dENISlC;l2nxkd8xg_|IW_g<~C2>xPGESg73bYaitxP(|
zYwkSaCmTxT)XhA55qFeX^PDNZtPj~IR=$02bO(=&g%F4LE*4X{%brC@wW$kSqQ+^&
zl<+M1vay)SP*?q$_?Ip$=?y7n2x;pki+XI{P^}U&gV_KKvNGHqA-4$sjwO=AJbCXZ
zzc<fvj#+A3?N;WNJojcD_OrxU&9|i``KXYCCVBuUmEo5CarGoAA1NL-T91|VTxCOb
z*vZ;6Q+vKFx*oT;R5dY_49NL?*F)y)buNrjqRFW~C7^(kC0*l1+T*IB8c*?*x7r;;
z*~nt{{qn|C%;`0pY$*GAO0gxo^3?UP!1JDc9#;O?+I{=%!|t>F7e_B?S5NHWm7*t4
ztcFpx<X#_ze%y7=?asAmrw|6vomJe*qO>}VV{0SG-ML0Ayv8_Tb}wU!2Sx^A>U~Zk
zzU}3^lH_Z|bW%WRk~T2PmakgRI33X?lk}9`+E}oVat6f>NOjT(uUx#=AxU?~shlU1
z2G^kByzSuK<W@`eP9CP71^oX_g1^CTxu6PacdB3+gUKjR>UV}>-l<^i#2Du?Pu;6e
zTgb%bG2ha7znQ^YmXmBvy85O0yH=IX^VBbCu19p2+s^C_ezlb_*#Qg7d^1>SRXfpS
zL8k-<7wJ1r>L^PeP-dgpmd+ed;?DeD5G5u+dIA}mNTAQT>}4YthcUa`j2VPBC>Uo5
zk6>)38`8F_Kc}g#<doSN4I|C1mX`%}WH8^{7U*JHg2$+fO7@}|d!>HGp0C`Y=a2HX
z5!0K6&-pfDdV}%#IBwFnL1Js>{xVKc7R_9?s@Xl)hb7hOv>zHX>B#tAN&U6W<zOyp
z>mO7Td@7KNV|&BF6dyo!@}?Mr&O?+&gqaOkTFTiTSM`9Io!cgQuu%gZwKGkJqG!2T
z4yR|?|CD7;y_1DR`I?-v7yhu<#h5y-H+0g3p~#T4xlZz-%{a)HJeJ6JfwcydL@+op
zV`lYP*~lOiMb+S2udPI`tetwLRMzJVC@TFarPbt&QkqdlDW;`o)|MnTt<HR_;$&DT
zZe|1GYGJypVlB{0D(RE3#j|B$jDN}~onetv0A$<i(k<Z1u2yxd0B7`6+f>y%o7|br
zZgIM(mYz{Ay*;E9&fH|0Mk$ArC`GjkPsck8DU^$NZZ*z<l8eo(&v}^11(LmAp4}2L
z!BcGzA7;Sn{v@m_8!j31K-<jK=YjSqv$SG4(~9bTh1vbiE}Qz6KZ2>LtEFeQH`BPP
zwLCLNCM-oa)*$F6o$R)!imAz&wMltat4pS4w@?)Z^)@C{uvW4q$qdTczP!xbkGWix
zJfXl2Q{<dHNntL}M3I&s9;+f5J+pnHqri51FkCw*lW4I#GY<2oi=-mCOz|vDuJIWw
z(3kpnI;PkPnPxGLbLI{^$5p1;E1$^nOU<ZiXiHqGri>+WS{~wLsZ8l5D5F<1f9DI-
z)GRyGv+QSO(H8`sVWKvW+~rgZ5m~OIQYU&O#7{nu`iHcvm=f+0W-HmgbnHXTmXWr}
zf0gz)I+KdqBR|NX8sbir)3Ld_QmZYlz*$^@bMLRfG3~6DOJrtQkMs`UT?o8ccxCNf
zqQ&sqUefA_mlEvw{kM_Z3)}qaZHksc1kIm#d}caLt=wVI7NZUT4kLK#3kW+0d-Bom
z3~3{k>WM2&U+jZ-`QTkvMt-MQp%m3*Plyh$111Fza_yDswQ5rdg)>kOIOBooP-$dI
zoNJAPXh9AE6=R_pJkF2lRRZ6S;(#_i2A3COwNyI%%J^|^_u{%|?4sJ-{JD>iwK2aV
z^yG*ROl7!xW||r@!#}3+%)VwK*~dkQM(?!EFMZ0V4oR3Z_RlVz8iK6|A{o-{QY+SK
z!@xC0rTifeOX-!?)@!v1?cft<##Zc!iKd{K=AF&})svmdl`-6a%I0>dYD#EEi4h^J
zm&y#s&Qa?jd1a-(n&7gjC6fn^M<!Y1ci&*$fDZqx03D{Qd_nA8S}F=i*%>OHe<dzm
zP?7<~L(sesLmwbVhBeT}k|5cSWxVuGdj}2LVY|aVO^3lVmc#KFJ2Ldxn01w=UV#|k
zUyVj_Hy+7vd+fr_ZO|t?r)Th>?G%5p$Nt3O6ABL7G3A%O42&qa7Dr6AW<t9MB_Ilq
zZW@E!;|^XTTk=tw!b{&_sXcQ0c)Mo_C4bWgZm+uri8?lwte#ml@c{9l4H$}(Pfd)s
zZu$wL>b136P~g+z0ixCyi0?fjCD{jNM*R~nw#u;XTVq_L<J@%9;&Z(7>5Uy}hFN7~
zhix_tmAF;ro=8*MvY`)SJX9b%g?^9k9Cl?<x><M2bJ@WrYQ{#^Nb~#wDsy3^7g$>2
zz$*?5#CHTsc;OT;J*Gf>PU!s<6~f^FSM)+Ah)QA4{s<Fn7~qDy9Tl$qVF9n+EZBvC
z-@86@dp#6A=*DINI;<4vw#?QqzW`J1M1O-s9Gw4xH)64bvM3rB4Ku4(-T9iHg{^Pj
z@-dFs8J?5AVRPyNy(|yfO>?VV-I$f`3du?Kq`ifdsM4D`16cwERiA(~Zq=HPoy`RH
z^g@LQFcT6ULKm+V1w2HBQzyD|9IsF<z#>-wFlGUZfu>QQo6ib(KW<pSo67-VfKm@L
z70w1>0fxr&<!}Ib8?A$O6`HYUM;Dc|o)2xXocb>?&6{j(?6d0xH8y2lw)+(XP}^XC
zt%|&QIN{yF`N)m5i6j}-R@+%V*g#HpgDlH2HZLo9J2<bA007TXM$h2f%oE%!qk!qL
zsZXOmHg(>11N`d@w2L!57nxBw$;_ali}tWoQhMf;k{vN%jr5W{ZV%(QBe9KR`R$V)
z_=ZOia9Gq(kO!R>Z6|F=k)~`tdGf>pz^FSRcY0KculHJ7sy=>K3UDzt$X5i^52j;*
zs^y)u1L(W2)PAmr|8l)AIc+*gOTj}y^q0A>mB{pv0V|hPD}7+s8{ufPbj;iKcu!a_
zs@Q(fS^sgsyXUrRKbQPv%YgZ4Lmlpk*=f7W7OcR|aYwJvhQ2;|SF!=khD;1uVrbgN
zW{El;npm=pcUp8Xb}6RWCW59km*0+}<57a~l6X|XjmI(qgLt6TRpRTNKDMFH<0O}(
z_*uxJ;_f)7;&$P?+a)gb25-5$!e5`;midvftKD|p+{X!Uguf0ksD`ZasW?W@hUvU?
z#V(q{k=T$^5QPy^B2VqkN8=hZ#aM`#w<WHBk3myq{olY$rqXTz;Cvpq%$AOM%}=E_
zxU92E6&l;-`Y|@t#P*qwj*OTWoR{7h#u3gvuk=j0t0vKS)O5E^rEO(Lt>hV-m<%Hz
zuTo_JUUvYPs`3lJc8RedcAf&e0CZyAqK1!9>QU)qqE}BmbmLoEdX&8^Kn3!Gua6R=
zBr{|PskU(&XA)!i5!8Iw$J@qtolB?3^;0|5lE-KUN{e=8Rz;mnrJhdfW1FFQY3Uk%
zo7j2A4)Jw^p<x`4$VY?euz)w^<{))625dA2%4m3aFD@`wq0o&%UV;`}-^z}<M6_d~
z>kn;LU1(o{a`u{I0hVF)OTX`QU0A^6XG{IOi`Q-Q4-NIhK1%&P`K_*g0|n}g?DRaa
zdHm%qh!Rin##Q(z%huE!Ok&v<xYc}s^r6)j{|<Knc=p-p40XqQAllJrAJ!i^2Xx^V
zlq~L@`dX!v41r`fS?;+Tgpp|LKE?)17oxFO%X!IwOx(kASGq@XCr0jt$Q{19Yoah1
zMeW@&<9oXsyTE#I;t4Yos91tHcF8+bshxsjWnxLo#%12uHkyY&XkUijJ2$$Jqo->j
zyf02pU+7PR{b{!J9y#s0(j!OhQ8cMXVdug@+gJw8V9;cPE1D@uh&MH@3&X<4r=h)R
zw~HQm0mk1;b{pNYd-k<~(ty3$S+-l9mfh}{aktq7FI&1>YS^wdt7=jclC0`#eYIh&
z)#~b(27YlGiBS*RO{XrS#<g$VZtL^%vMJ_8%QZD#*8;^+Fpw53${N1|VD@ro$_1wd
zVv}h<>A<?KtU@*{J6CA%<jWdka}GUS;R%VuO;`n5hd8&8W!dG9K{3n~7$GfP03$UK
z4b#!a@+z<gnRA~_f?ctgC-(lbCPBp>40_kJHDlVrIhnb_1Q`J#S+(lq-3AAj3Fr!%
z9MQ}IlX<n)Z0TZmrXAw%--k|cZ7`u(iE4l3^g;M6?D&1)SYhF*??+IXJ!t$ClCJ3n
zpiQvC75=x-ABL!ifIiac4ZBVko^hA0FbUSL_NC3vepHGiE~XL6YdP~Oe}AH<aL{w3
zQn64p=r#iO#*0Ug^tiUP6dhY9kJmw=!mdKv($YFTVN93kxOVc`8jUdhNxN~!&Vy3g
zb8P4_@BL-HQms@Ar$bB+L#AV0HZT#iO<be1@Zb08hLyWDffcTRo?F-xk6&RFm{!Jt
zUxHo@!;wHUO7oA~fM*BsY^{QLM98dvDKcf33YWEtwVFm~ogsANkwV<b0HX2T8PyH%
zaU?HuSzeZRF@YYm;a6gNX<L06jX-YnwT&_421VM|zzsFpx{{k{ZM>l|cN?to(YZE#
zgNZ!KqDr$^w%k{v1(AA<Mn{yBi^q)lQ^E<7PHJN)@(+O#c<21)2H<#)+;HFCFVUt7
z^3f6xNgIvX9%9zUk8l(({Zjhhzrtl>RD$3CF@8BWi$K7p+b(vY1rb0SxSfw^^@fF~
zxa@*<24t~pgXmYR;Qnse9=Jtw(7r`KzYj+TFJA0EYyEUgpCbPpW9$}xTDF&eDxUl_
zHhb;cSNpHu9<|)%VwqjZj`3k{w_k4Uzj)Rvc3{}go#JxGe7gJgO{;j?8wU9H+p|C4
zzHZ@_?ZW|o-#K`<Pbpph%EPqh2itECTg5ZKGYs*4d-v7$Zy%^xTd!XM>>l(4KEM+5
z_BA9!b;AMn5;H%0^X35RBO?sHzkIa=-!I%QeLZ}6@UB$^E#L~?#^$hne7n87b$Iw;
ze`^o2b?xi0Xzp+Q@!|Q~{q3Vy2hgxRmT-9V>~#y4F)e=|WW$S8iR%d^t{pp=T%ejL
z(RDg@*O^kLIzBP?+PA|&tG;H|*AO8^6Y<$<RLw>epdfC|o^uwp>Z@jbwN=FDq8Yg7
z7m&1W*4JA_dMTPPJzDD~yhn6zLfEkfPOG+R)}R!7gH$haf|gY`tvV#)3($^z?!1K-
z)Xh31vNx8xgDt5y%zA^R?@(*#`j-}l7+%3Kaj`upZ3lj@Wv!YPRL5T-FJ7q7s@KeV
z4f3+v6{6N!!(0Q9P!6OfCvsYi6|=E|IKwxf$Zq?%h_nyr<AW>5ObmrY@QHcW22u3}
ze_gb1vDklo&uNtbJG2uK!Q+|<VE%BOtCtQG3Z9GfRS<!IKeG1_5>`Myas~sK-|*5j
zfsG<3faiwUw?Fgex;c~=dctcBy5H;BgAl)2CTKHu4<D;0m(p0V+Pc|wL*!vyOn};I
zYcL>M!m8<_JrbT)%*gk9kvqVbCRTVz@&~*%%n;_q)9XX{4X<_VTX=Bx&T&5O@CqQg
zhC-m@b?pE@AQa2I1PsuQQn^+o_@{R88rcw?#x7gyCM*CEHNaXkuiP$hwAW<$^gTie
zj4w~MS?7Ta+;b0>yf=VY-|JmNQq%nCI0HOL4lfOp7{Y;f2(uU7>!$00CJ0TiYLxGl
z2b><n*0N>6`!%|3VD*T+(;-y3Zj$fPD`Zwj#L!yhHHk^&x37?n0SFXZl^<UE!vGRi
z1cv#0lW@QWq`@HX!3eosHnL`4yc{|MbX)WTz?I4P)B$ww2v*$T`2_+vpd0C+sU{T$
zmT|zy4_O^(v_+O)6vI#iFs-5u9PX+t=Q)38^L!9Em##kyMJk)?s2++GG1Yw-a<y!^
z;|3k{2B3`;m|B4yUX*M2?gLpCKNrWb#cE62bi6orKuo(hj!ri5@o|;CJgzd6w0#<u
z@ZBgYug;0lVwpF~R*Pr1D5;EZ^hDrV95AF+$IP4^Ptjsg%+N<x<^(P7!GDE6;lH9j
zQ6ayar<R<hkSZoAJSuY(<Ow-N;hE1+ufiTcTvR72wndw#kf2RdcxSWp76k$vZ94>x
z#D@ONE}VhNg9K3a1qtv(jSyH`k{s03BvEiE7tUqidm3@*UvwhT>&8s1Wt>vjXQCHL
zEj*1F@Hpl}w;bXNzYyX7@FKx%<DWtZ44hfU1SoWr!(An(AmkX9XAjwVt9VE+1$tv$
z<sV-2UW-rIPyT5i9z`+(_9r!g!@?H^iX}@(>;nQ~9|#UhWMFn^MUjBmD+47yNnqk5
zf)gJJpjv7hXm1!?E5&#UD<?lwLHP+0h1?2?!BYVri@-EH0dZ;e<&}8lpJ6dnKkqpD
zX9T$i8UfNG0c9@=Sn)LmEV4+@B1;ThWI^zU4orzI2hUy<@ZxI>USyHrMV1)6$il?f
z*G}O2@SUvz1@<b2j?5Qg;P6F`Da}7IqBcnv@mh*(Bwk7x6H2b6kg6}FkCb(kODCzN
zH1>fL3+gROuSYb2uvU1XDHFfobiu8%^s0M%;Ro&w5WL+3o<EFW@`9omxgGgF)>maR
zvIb&7Ms}qy(T}Wng@$K!fd=l#*JqwdEYFXW)foj=-Q2+r{IN!eSijbW;)VSI86n;=
z$bDtc(btfCq4gV;83=Se@0Lix5&Dl&al=xvb?JsK-U`CKm%F65;SK8^uyMSn88}%d
zDy@QiSd@`<^h|cQE6xG36$H%%eY{Ea5eV_bhNpI}AP$@1e!xG`Q|!c~PD)JV_f$yf
z1z3IV`EXhw_D>p4_<oV<7A>Fmvtzu?xqVVQE;~kA;6L3R?%X<|y<O2>rla1^2J-=s
zZRI-f{cNm?-95F%J2UaBe-gp6xy<m8b|q8WE6!)5)d$%sh5lw{jQI;nHo&Y7GeXdN
zt(f0(dadUFsd5^5%<yKjP+vt=aw(qtWK_roCYqSxFq+vYLTz%eI1Fw;nGF!h>b&+b
z*RNq+PwCf+2BhoP$_J)T$EuNhm-@AU9P8JppQZKdqFE?T)Ucu0An^MGlJX8n)!QaJ
zW&W3=!1kB`wS)U|ty&dm@G|ortPADT%?EzVJfA9f>VqYeL}ZW;4s#k7k=xmHLU$46
zm1(JX@0m;&SW#~F9(s6rl8g)w-N1uxk-SZWjh%c2skPQ1EGsa8(1v!8)u$vgKVzmV
zE6Myg+aFwdRla~EFH%{I6M17)_{wu5-XV5dlKMe;#ooQ8QA~~Ca~PxTo(omu2_sqN
z!X_Am770frsP|5N@chU<yJkcC?2_QnxgkAQM{L>)ir@~VN<Tkfpcdwicxiqz&&})h
zMQqy_4Dg!rr4BxdE>|^v$_avu@ugy92QX;dw9dl_$SlZ0_?J!ITX@mow4_Uv44lDo
z6+M`|PDuOG{CJ`S%=i@t-J+=Q6UY;t!;<VINv6r~g0Y+EgcRY)2tl}F&crp?N4}Ug
zq8&32wJ+wI3fjn{#i|@tHNBLZ-!fzGIf+@$%IR4hqNOE0Uj<koAObYUKKx<ZTznj0
zBC|8<?3Jb;G1MK&y3-&GdE`^{v!a-xmX<P`8Xpmef#Tu1QjxZkF33k$E>FpZWz-`B
z6e>fcF6r7(8Tyb{n5rm3k1%aW=MG~NCKF@ssrjTYP9M-$nD8ZP!34gaMqor|5*{XO
z^D%S7H!}V9BZpmMI4_$r?e-(3F9M^Y>k}3%+!4fmx+3{!nS*xB?wNz9Iu|46Q93|}
zH<=AuytIV-o&!y2Q=U2fl`**3BYE=8-i!nFai&S^vcxQv7ZrM|u-!gpn{-Sd8CtIg
zrW-Pwgl}S>ncg3obKtDynhaYl1#@Gg#l=#IJY6o}jsvOAjYd9?v!gGSQ`cOm5YfM!
z#h_`!(OA~ola@+g{9s5ra+?;Q4Jyo7T}rLIGk`0C1gXH9mVZ8gxP$%1Ie+$fP?}aQ
z-giDOAOCf7J1!YNFK<@NzyA8)|BU|UukZwSp#S>oKTCik_#6KGA3S$ZG)5zFuOuHL
zbWs2>k!cy3!=Pp`0GmOnV`OvRB!BG45Cxb5yz>0q2_#oe$YJWJnxf>4q>p|F-<<Z9
z(3zYMqI&>cn-gnGd>=v|JeDZB1nl{U@0*m+->MSbB=U=G6~nXyhUGV50K$TOvf73v
z+RuS5;VDO%X#A30(D*qg9Z$LYUN<a>b>xE^{(;z|OM0N6cKY7JSy_`5I==ld$*7`|
zE$b4#q-**jI6)D&rpkMJ<(-{kN`#7=KZ*H?bwy=-PpsIjrq`}+^d6`4Z1k3wjm~n+
z=2*LXCttv&HahLjU6_i-DVU#gM_;%mv})t~@&>+?a2Zri$+;LuqHEueN*Qj$c2f4P
zD3<!od$;<}G_pX)%38l!EGDs>OF+g<G?9-Fay?3+W6Weu<`9+gJoVb3WL225XJ}GA
zNSr(jQBn=?4BD8{tZcD>?xP@%F)#gr;(_lE>~j`7$uPMv9UCPw9n0FPf_6JL`z8e$
zpbcw0$m;;tXU@w!v4Y6hyk$Gu2jdo$aaiA#B`3p;J-#L!mZGG#l3J9c2X)@(Vlnq4
zHO38}F+)=_aCR{ycRb}tBnXsF%t>P(Nj&Jy{Ujx{g7bOcbRs<B7gETw0tN>J`f`E-
z16)8R*T<mSMd>2W-MWj{#TLUxSuVLMX|fnc2hhepp)8fyo3+HADAAo#BJwGE=eCVk
zOvmNBqWndXyz7fE?*`{W!0FH0^1dh$&RQZAC2Zc-t-H0=1~|eoULI9eNjWbdWlUYv
zVQv~%Q~Q~zc(j#+-$`h=dEl=z0qtd`b~$*>rjirpN?-I0)5Gv5(%ZBvSvKA*qP`aJ
z9tk{R0~3e&x&m+ZG%n(qS_y-UKsHPR-To7MlSjhym#w|a5k=hGia<t$p`!q~Z0O)i
zNLqqrY{Yi2WB+8+BRLD6TFk;-z=W}Z=SmSHY%$2ix8NWw8|W^voK|@GveoYw35p#!
zhcLBwZ2e*xQ?{SmA=t_z_eW4>10>;Hq=$6>7mOVg6DyPtYk(oX0W!37Zpu(rqtsQM
z#E^kM>+5wKsy*KtI{EWxG|im4yv#>h2&F25O6(Kl;A<rG`Vr!Qq=u!XN22H>nM06t
zUVXrwmBnOQ?-+pyn<|U{7TbDXo$WhL*XhbTwdI5m5`kk(={~Q4&**IMnb$T*dduF7
zU>kE1D=ABo^i$*5Anh>DE$|wrWvU;vqIdJY;*vP2^rMNTu@TAAG>=+gm{m6ZW{5t;
z(cU+-z!MA?d8T_YWVxn&CB%h#JUo)d#Yo?y%iN!1TYSp?+&HPT&9uv8u(bviz_$sD
zC(r<J{x&n}J8eR4ak^;A{Nzn0go1P`_ttb(Q)nPuW<^8no_6-oNm^Xx-a>Lqh>QY#
z`!oBR+7>d|ch@V`Gq;qM9Vw3IZ6Ft(6uRzZ(crtakf9f$ysl&^7ng^}S>R79v5URI
z4bBD^4_|pZs@G<QaQsNx&0|BjTI4vJ_)la7&%AlztA3+X!SASBtMj#=iYOJl%xLx;
zVAVa{Y^Y@7NyKO%F2@%IW&$!|7lahA)KCxdKiTcYMJMU;L~~L;Fcr@VtVc00b?hd?
z;@-rhHH9p8Wp)mXRWJbz^F(G~D7s~KhRIOU4v9+l%4tJiI=>W;kw;&bj9JEn1|C=h
z2*X$t2vB|T5YmH@HBMA&rg54DetPU?fS>8MFtH*b>Tzfpf^9ZXv!pxTFk+#&FjQRJ
z9Cd7+hz4UVRaD~*lmw-MB4#1YEZt_1DU_DtJ;2S|aVtVulPzKB!D))HdygpSqrai4
z>#3Qp*Ebpkn;wAUyT1IMZ7LD(1>=o{&O|UMYB8;y9}i2P+%<XdF}62v<7Q3=Pw<2w
zN?cvIor?`LfJPX0=<GN=X%`1Y^UOF)gk_}Tckl_ibq4wY474r6xR|_25$-@#4Hjag
z)Iqi4QPnVF@JT}&^Kms&q$R#&HX$P-M0RP`O3*BngSBEa8OqxHacOA}dksT)>?>P+
zWEBqRuyk9d*EYN-c=obfHYl3N-m!n|ot!||IzZh4QZ}6#$9NL~&}uukWjx>5U0QPa
z@kYpMkm!kqDcv50(PJGHQ+WJAu@uuGL2bm(j`^U%I0i-YM!o{%_yvu!^VCCp?S%_p
z(hD-P(cNMkArd)d04bW@jy8Fj676Sh+Z!9oVup%w-Xe}fh4cE+BYt2Mun?9!Lyo7H
zXmffs7Hyu`SdZi)tZt^-H1~%b!$C?}-Yx7N6-_Rzr;IOc_3Y|j$H)Ks*YU~ECwPGM
zFJrT`dvrM3JsR!qZsO0VcWarAF&=9zr3H^tlycEvW<m;<qbzBWvl*$*D6J^=WD%QZ
zJ7o5N7YYW>ouAnKuwx;TYHm@9g-JPGw3+{jn=6c#*nCz&#w)FXr>OG3r)}8T`57xq
zWls5n&0`>YY>9~AYJNGQe;rqT-aKK)kToOVV@q!DskSVkN2DFdYDT)i-lPInMuG06
z0%FH;UL7W@kh(i0%oYjf89{Mo)ewgGT|10u>Fp-Xe`$|f_M9q20WnI(37_?kQs#l=
zb|EatUP+u;H^f4l4L8?7ru&c}1UbFZYqexZZ7D>6q`)Vtv+2d&VG}p9Tf%UoY-DfZ
z=0V9x&m}VpL?Th1<4L5;jqsND#h`Px-=j&}?-AmYpS{l+0Hz!>M#J=A9&(>lS}ZS)
z?<5UQh<zEogpZ(+Y5WurC^puq@8cy8>Mj6SK&QV+_RfeXRWg*V5nfu`3dydl?M!vC
z8^G!w*HbjJ0clo*goC$&D#De1yy@;3)8WjAH@)nf*h_SPrnGQHo~JkZ)}K~~!2%aL
zX?wqs-67$LX)q-5*SHe}7L*O6pFrPu%p{E0o97?uu&5Xw(FF)*s_3FOl_CX|wg?!C
zK)xzH#EOt7OK>l`cuNuwEK}$`>AlCcB2cmr*z$C*)G84!mJmt4v4Ma}7*B)|S~sne
zp`Oqt+xk>GOL+ihv-nMwMgQ%)-c<h!BgZ2l4u6k!$Bd0q(6Tjk5AQM1D1@ysne@T@
zCKP%Qv2dX30u((a&5m!PnmpD_!4G(76=OrRr>(Zfr&iz^7e{3gJXo&B@zN9HGOd9|
zG-MO}G*dgtGf(yjK<AwKlbT0tAi2{uFHd9TH?lX%(K3?JX$;AOG?O#(Vn0mXJ7-(v
zFuELE>&!-1m6$q;%TBWIylYPSD1)>vCH%T+VNJOt%!?8MAqOehorYJo_@{fFKf1E5
z4&xrF2nToXL<X?A`jb(9zP@GkhPtWhOLy;|3Wb&~i*d08gW3uL`#OhCRS;_5yn>CT
zkXjQ|n(Cz1mke2Q5}|f;w<G2oXcf$+TwaswyPhv~ut5Dt=yYbNEyGRjQ8h!3m^26)
zz^qZ2Kw(;21fn&gPbqaILEQ;Rx1Z=UZx?4i`t)WR6*XIOP}Fae#$<Ar<{uIj-h3mX
zwPeNtnL<&VF(x)GzKAa-H$b>2dezV*dQI%eoet@ieT_Mhf;w#&X4n@ZyIgk&9Zd+!
z!r0c<E#k(LmC-1ATpf*g_&Q@WDqGAiP}r$x<6jumov~papK#$kIm)pUgWS2v@J*GM
zFhv;lKg+8*!mxpANI|&`#Eh`Ipi3vXHxx$<DFMd^yv@2r8$C1<#iPJ=x`nz`py)Oj
z#|Ag3VZEdF6-Y_I*oET>CLpLc5>6&68S@RjyVEWQu$h@Eg!)$I*9oLeV>+?IY?{uL
z&p{9ZEOLc{$@KJ=wNYe<IEd{W5uK(@r0f=F&KBNCm?GPxaN_+51d2v0o+d3OW9IMY
zMpO24r`E66hj%&faG$D%ETCa?q6uEh8`(n<Z6pF}rsoKT*1XH?(~cS(dna;V+L?A<
zFy5->t(KlAa%)@KX_YgiInhW`he&u(l8hO}Q27NjiUCN@D3+QxquAFw&M4mE`#qyr
zBkw+=glj`I*|lM6_2~&^BecYP;vwDUoKJipzVCeE>}C3dk{%@K2_;z6#2F=n7|lMJ
zltaH?AYR2lHgmt^Oe`hGL={A7CrqQ<dE>Nc=CIueF>~U>@!Ec&p5T0)X{0oCj;WLs
zXl4S=frTLmFE09QGjYZ4bo>BsI7LB5Mv%bU#fAeW(a<J(m{zS697ksU>G0%c6g%)e
z8fDt}i$(ohx^~!ot`q4<u54fC?v%>P6UIGtk2sGjiCB;Y_JHHHTom^;;cZxe`m@0A
z3ri-;7CuVhmN(qlm`T`8$gPt$(2}fT`l-=bY-)4tvj`S*_dyX5Hk?=+aZnpEOH2!)
z4g1FyvjJO4Ekibd3{5eY&bS%im;wchz`-nzF#Nutc!))I+_gx%2D7(5t}t(JDAUTG
zV?&m}GEK&Q=J_MV!lyAqQrsfN)lYK($f5Y079^`hV?Hjuv=xEDdQxkxG7vN{BG&5N
z=|n)7Zx2qCnreejNi?#>v0w-5PEH<Yo~_BwUH9-(rX&J2_ck7tQV<dkD=Zmo@9rSA
zcb8GI>CD3^M9kQ)({llB?#_#XU)FyCWj+*07lOOb0tsTiX&{TuyB8%}OtUzSjQR!q
zUc#8K3vszQ`=B&>o@puqy57B~0>WIIFrv`3ofm*f9R8vr{FPK^v#GFi_h?JSWff%1
z;g^d>fnC6nM6kq^GsXETyRBs_C*YXe<mHD~n9ia_-u;5*L<KYFnxYn+#787?X5&ro
ziIbt9@kqg6hh=hLb8}2yZbpX5Jm#}_CWnJ8GXvL|c`GtP^2Daa*`_b@b5%{}7^hdw
zBAtKjs{JsB{!-ayVTUvEJP`u=?$b&@m~TdjQgd>4*<9`xA!Am5iEo4iGG7;zf^+sl
zZ8vp<Y1Cifvqt6T^i`uW^ZKZ<hB5&k=Rhi+o9>{)X^b5%_!1gp5K`2@0W;4E3}t$E
zcOEJ}CpuV_RC_Xh>fJk=gf!o<CQHxRqf|E>!6mr8^UD|o2Qoje;05o%E=0Q>;k(C<
zmr@_UWQSP;G^f{%R(4*G8@&hAt=t1+bM{Jyqu-}HwOa`Ts-gOZhVpL4REH96cT}$#
z?XcaKd(UX#X7HlX^5=QeXqjg5s?j_36}@XTz<2Yq(c6|KpmuZ5C*NsE2+RyaLHY8A
zfIiNGde-Q#h;nusb#A{6tvSLXs~rl<^=V3U;f}5s6Su*n>xDnr^};)$iwV-M7v70-
zA%j_K;1Nd6^`h38=z8H#cD;aly)4%YC+~>+U3|Kx5vH0g$ERy5S!NIE7yESGjVQIo
z%t(_t^J+nqF;U8G+qnrc8Q3F>k|gxR@wD{44sq~qMpj?>Ab@Dd#KQpj#{d$&$=Q+3
z4%ZlmS}ElO3|U&rizK4n%gGM(i2&649q1UpI&_}1xOuO1bG~q{Q^V?I*v=`UlhhRC
zL65sDEIORK$oX+2sA1_dC12okla4DokBFQuK97u?(Gdr4ez-8t+sC({HMWWvJf>*E
z{7B!LQE<m&ljWj&Ykzz8XI@TQ=6v?Yv;Ct<Svxw=t=F$6<qqTA&<z&Yfvl)`1%|SK
zG`Qwv?Z%D91NC{?PGvTBahf0G<s8I~6&IdmXY7y7Q2hWz)rXN0rMK}4#eEy^ZObm-
z8;?)S(kBWRfnKSl%lO&`^OIqoQ<`~hm>1(XQrqRY#4Zds`PJXbP1f?ny;C{!j-v{a
z#fj<T&9nZXh*rxe^84^WH>{nQ0eoS1E{Y3x#TOU8$ot;((kG@JPb7~YTmw*^c3nhK
zHaHlKO8Aw9^uGw4Gah<7X#euR|8s1YZ%%%3E5PWZQebQb6j0QllV>Hr?LeBmn80h5
zd{#+R5wuKEz+$P!7qJ3)tONdv!AZtuC)IA-?8JA7hRQ)a-uM!p$dgecO#IH)B7->{
zU~JTJr|p>~yA5e__{2fLPT(Lj>%?CS(^f9tMot<9LnOzx4PQQdpl=^Ov^(U@GiZnD
zt2_p*Zk1(A;Xnk4yRbu|KOQr-d>;72LD9$#ub7Hw#SFACgmf-iyB8w9(<K8&;*M?v
zsN6Sn@)MUVV;DGFuseW<BU`a{Nf&SB3WS);@|8(=e<YSNJj={;u%!xbYjsM+$Kk;C
zo?wu!sNX9kbKo85m**vn1EXXG5sRS_58e&vNP5h{@M8L&ojxNE-2xB*-R=^M!2pSq
z(t>2dg;q-uqk>=pO_gpO)(vK#xHB~dz@<ipyR7}~iYQ|klWS!W%2*)Syy{sr9z9FP
z?;)m==bg2Eq0Qn-u~lpqCpQ7_4$Y}qe44e>nBTyVZ5|tkQ@?vXbsX48&C#hf=+r94
z0_3yu7{PSiOTAn1lq%D$ntG+EZ0PwZsX)KWVPEOBUXXVQBPC3!m0vMFQ@v#jdhd84
z%(b{;A!o}JPo_+-o!x8x4^=KMQ~x&Ap9p?{HYP67*seE)Cm`Jkx};}6e%6C%>(P60
z+be@!;{;pM?=7ydt>XUx{o1Fb^0ta)3$JpHdQL*K7hWJ0?JC}}ik;KQ%bAy2nYq}~
zaKPs0#2%$sa4}v=%H;AUI?URIU(0f3f!TRM&6?bAaWC;WyNkH9$a{w(#J3y)?Y83?
zM?fnx*9c$$GsBQ^EfZ0prIYqdL?{~?3iYIzGq_nf*=h{Km4o0+=oqc}d&~xQ8T7pK
zftC8sGlF}6PMH(@N|YI9McnnAc_DlG-DbvIqmd}}wPr_{Jv;jU#@WH{GM{&Luu|W7
zcCZV5rp*q1?avIeBkp?6?2x_uZnI;q(MXi~lGzc*Yy&<2%Vt2Fz!XruIP|6f|H^~F
z?c2e1Vla8vTKfI8^I%dfIL;floC%jHiz@UdZ`{43D0)o6MNbSPEp<+oI43pgLYEq5
zZIcjSCxPxKneObs{i(piB+bqaJZQ%;>#_y+IBZ>xARfrW<JqeK|L)~29{jrxjgf;1
zBzUSjAIX5S?c<Y;Y(K=<X>e)DXF%`BU{W)P&Xr7=ERbhB2iKqi#5EFIXR&v4@?e%Y
zoFLNqjU**QN#J*B;*nF@?Mm-f2<P6-Qq<1rOh^`Cc6c#!uLHG8qcsfxwj~DuwhbA|
zR~;oK&c7I}yb)mxdn0piBjpJCmC1=5>!y$s<(Y?^sDL7(<$9og_09myshxp5^K}MY
zWwA48Zxun1@xHKm*NK@7UhKve&U)rrJ!m^G3ZuXtly&27nYrf{x`97H0ig`S#jqgm
zKg%<sMNs=N?E1J|gyku);ZJl?77)r;2m(d~9sA>oQnuhbRl<$KWf~q?M|{a~&H@-4
zpOW%arro$S%W9VaDZTcWXlX-8!=4VP=Y~;v=!MaB59!2oDOb-;46AMdPK_F8#G6HN
zI@kBOk$;u}(12?Q4iyYb?56w6md8>a1Cuv4S3suqFC8%&Dk&CI(kkYU@dWA770AQa
zXJlD2OLIp2lviDeM#-3;dOg#~F9w(+K0KP(4S<3qlRRRYT4M8;(#=woBXymIco`;c
z1*X>6h>g%|jJMn;{}`zVxCw1EMe69Wq8M1?4?uP0ez&}$>>T*npAES;nZ9o?)iSxQ
zIW;c~soDz=0A}rdpq5J_JW$b*n2A#bAU;U)SSU@Mxyu6<rb$ah)Q2y$u|Yfw<lPks
zqW&*J0>k9pkswB5IuZy247yx9C9%zm1MwX2<(I;fYkQuwd5`h^aRQ;>A^uj_BxFnm
zSiK)t${5FMpIzGIdgql(Cx~2FCxO{d%y;1j?v3w7HeOZ%b4!{+P-c=ZLK;z$TE5)(
zH7WxRv4l5b-x-R3b_N`nd4;7LZPQI+UPgE5OUxcvs<A<L$}&)5gW3(_`%?*$_(0)V
z;<D($O)h2x<W_GFTWYi$-gH=rh8P>_XH&`9xo~^k08b26&fFl3F#d_&5WL%hxnlsK
zflyuw+8rRV!Ln6p{w#7;E*x~+C>c*+VZQ>o)xR=i+H#x}b^@3ON3doYI4+68%Syw1
zP~3x;{KI3aag+F7OVGVx%4WIHEVu0;yy$|mqdUp6tbl;MV;_I1;pOxB-=D;-<={5C
zS4xXHsl=;Kuqh!ZYZZJmbP+%_xRsGzeA7!15aA7j9n7lftmoUXR8t-WwgyPc0{|V6
z)7(p^NSDiYXxE)j95Nkykje-zjPDOCrJeF59CXa!E-ndZV?&Y@Qz$&)+7|n!DMvTr
zC0>oTBF{Pylj;^wYID7UT@Vc@hzj9j2bl=W3v^wR*uYlZ0y<mqpfR#(*+j*8B)41~
zd@h=7bd<85o~sNPYb#T0v&z7-;w@H_iDbixhsH9i5PsE5(V(ftc)LA~T+7K0i1f*o
zj2Z7IzfAR<U)DBpw&QFijO-x7D=ctvmM<7J5S@xMu0GSWE=4xWa>VE$P`o*^1iCQt
zuVjF^RC53lZ;Y{FOoZL_C2&t(In(VHxp7~HH&hRNrk#_>lcGTGHL8PzMC%^8JgAtB
zgVr3M%z)PGBw9UrE2>t~#GKe=X<v|g5LvqdWFw-+X-MhwlmuG#_V#qV>`lcB^Yti1
zh!#)`qw7)<J<QcOjUXj()D-B9F8OC{H%cqw6%7wXgTIjv4XULivWOd+Qg?ck5WUVP
zyhc|o$5BXjmZT?6yb}{Rmw%!i$RrTfY^B&hDCKH*s2ZJ&7>F2G{PaL_Nr}^?N~iky
zr|D1x7PN@KOm@ApK$0?>Vz{FFL_-O%=z~)-W~`gjTB6!oPPM+?Q6zO(nGBQe+RC3Y
zQi;X815g@)D%=Xu7pecUDhbeMcP41JF$ZyHf{dOpaFJoMd#J@)nbnVRYz{lbY5&aY
z{;8b>mTsY5+xf++0?AWE2w39r!nI!<<7eTUdF-41^7_x7sb%ntpS=@h0wVOhJFj!+
zANQp)@v<sq`g!rhQX5~gs%8!$_<0PFGI)6Z6rZ*Ed8`vOB^8V8%DFF@zdPimMb~f7
zIfJ#5cb&rmh%@&rmfra?6l+$p3?}Jw(vK$1<4B#yJ|D5=V!5~+B<8WKMux4-N{-j=
zK&?J+KD*29pJ)v$bk!S$V}@BQbg)pH;*b^mUiYWvlFnCHH_3WXh#@ckRD1$iMUToB
zbn5XhY_;5Y<Vz$4d`X?JAp}`tHyNu;n)8q~lNb!yFz4t<JTjsarmwKhjc<&{jOryz
z=n9_^S6%TLm8V&bIc?FGK9m`&eh%Bo<vWvkicfsUostLnj-4+`m>oQ|M@RPtf;)YY
zbg>Nr{4luwLP0@7nMYQj(@A35C#}mfG95Obfb3_N9s-r?xL?S1Tt4e2N)dtN3f0He
z&B1b;%h5~TX*k#rB;FcKnpBLy<+NgCixaEJa<g1i0H&Jk<BH%+N*grR6i8IMoHaRe
zOqMMR=<N%}B`+5P|G4d#$r~M~;(a1`o+}1FKS}{r_R^9a*JR+EggBX{23)4>j7DJw
zXParHf;8_780)RF0s59?l2Lh-V!Q)I!B1?gddkTknL)XfmId%-mk0|sH&F{NBFD2;
zz8s>zh&&A>ZQV=<?tBR=B&`wZn_Es(3*ME3av1g;{IfGbCsHGBE1^hIm;cPFHmNGx
zUQy^Aor$8}9O_sCWF8}prdl@kiW96yu=rLt+{cX?$S=$Cd~8&~jdr?aoi2Hf?NbwN
zOwxDmr^iuO%(u=J&LRep%_4HhFhk)Ig+f9RCsmHk$>g`K2Czubv^C6Rxc1Dfo^zFI
zuzqBi2}A?+c2gcuSh;OJ%DgAp*q}S>2P|~FB8BQujtA^&kA(Ki8Ync~F>PE#Gf1=3
zAZ;WFj7s21Ow6RI9BN(4342}zE5KaB43jp*E1Viu;uirJN7nI}Z9pY}EM5!%Svo*K
zej8(Vm#qhaOWW7LdKm|%-7rU`ok+18jvX}XlMPDQ7MRQZ11c+bdXQ8kr%nM)bfxQF
zie}vrZuuOGmx28`z2cL{zu<oOPcdf`HnfEOE>v5?dEnP*fMA~`6~4Y9a%c2$e-Opw
zSke>843bFWno7wS%T+WH0A+%;GU?mO4${qJN+*&<^KhUX$Rgv0UJ&7yj3<_r<%!|3
z&sJ@M$ymAlS@oRGtmd&*lR)t$CmXZ|1XGdk|HDuqRoX68j+rqI8z6_BHZie9a`GX}
zlyd4((2;EA)YBH%xQm;`moM>9)<sd7ywbRR!6FswMDHs$edbS`ZPcGk3EUNV4qCW~
zX~9bErHF9to6T1C2kv6UC@4`CrwNb8bnz;zaWH75#?OJl2hL3ooC^czP8&FeBsp{p
zcGlqarw(4R-%pQIKqV)R6F*LHmvQ1=-E)jnKWonBV!Y2V&Z+^7*Q#GQPgq|ix*6as
zbcfT?9foOiH>u=AbfY&-hEYf0E)UlQl)jHM&cK}LmYvj2O^R)mGOgB1O~)$Y)Dspb
zB(VDE5TXdXJ~6Qn-5IRfX4$H>tQt+07W2n5eZ0Mmn@0umwu)&vopC59PdjKinIg1-
z@IA5pUd%#Kn;LjhG!m`IXLqvz<xDCKmL}pX5cu@TfPl0m@FUmLlA6M~tCq%Ra)}XJ
z*WY487zfZWeMWD=1bP7-!ofq+EKbo81qLz56GzeD#N7ne2J;XFCBw%Jn^d_jg%{x)
zs-V(#?9gG+0b1A)7lhH+$(CZq%n&9i$uQ^=qB-Ck9zA<)x+>;&a-uo8#>Q#j*dI5j
z-7=g5wcY+IZI7=co3{h@EFG}*4yXYk_*y6fom*N~b?ckD+iBzQMtoe!{XLAbH;|d~
zRZ{Y&cs$$c>loR=+xY^X3eLXC8MO?57U;(2Y%8|dSIlaGoMox0@QV77GNX!{hbWar
zw8m2=Ix5RndTcTVhx`LlIH%19LV2iMPNU$Sc!hzt)r>~fBx0%0;djC7KZ!Y1=ChE;
zt%WUS8OTH*V@c9%Se%H-!M_)ipz9MFdpSbghKf{LAIQ41wA4%4)>1jixPv(rM;WZ^
zwB2LYf+>V=n8SARUL4&xv`Ge@(r~hM=rr3pWNaoz5#w8#LlI<CCZA3jxMgeZA}PP?
z<TjFsKc7t3h$06m8p)_bo`?(5!Z?qC!7|{u?6rfWf%76|ui7(3#EFSLd|c(b95m2-
z^1=;)p}lDs%5J%c8IWpwH_`SS6_DvkT8Fx(7FlDq4s}x<>fWtG;+S`;Lucv12vco8
zGqtz}v$g#!)%LTw+MWn*l4|*l(sGqYq-p8qF0^!$YW~gLnx9Kc7g-&couDr6LQof}
zUR~U+SGfdrkTWc4syes}RUM={a4=T~wCDgyeyUG}AWs*aR$)ec>?j{Cfm>$Zyj101
z^HcjWmVs@6f37ABdysP7J{QV0JCtL-i&Ml2mzL*8CHihahBp8N*GDEsZ(g=8HMtsf
zv+Jd$YvCJ?`#q(t_B9u2<k1@R9@whDFnaRfNPL-Gd@bH)DSj>$aZ$iFDoL!_AX;4O
zI=SeM8d`y66?Wm&fx^-!9;+eixKDiEnocEVeWd*!v)}#{M@h_sVQl6BXyp|#Ke2sa
zPVD^HZy)He_2z4|JNKOBl<rVzXu|YN2x<;DJc2t<36w>Qu_`3OfQu<I*_`yG&~+~v
zou{H}7`OwkTnm&7BwZADLh0U{jYO;X+H(hZbGJl9<H&A^Tt&V|Q{w0y*^QCR|9dnh
zj`oq!n0Uj2c<a?PB{#!@sk3>j29o|2EJ|0)@M-|dZ}azd)kv*9@q)o%T+OO|DW`hv
z`0TJAN@PA^oii$7s3W^`JgvCukQUaporC=KkW<8TRq88sKm4xU=a&5Z?sFRaw%z}x
z9c4i{c=+8OSqk*e7}g@MFx&m78TOg!z>1$hLaO`Bw>T5H{5%acV_^kGd-H{ML8tJ&
ze`HC|CjBxvosYz#OY+n}e8vik87WbRJMlk?Mx#fOF7p7RfCf~}M;0CzFdumazaUIG
z?yA2lA($x+SL(Ye3&ckq)DCf88J~;v&(1LBK<M7cHI~lj>BT4)+l4oa>ITe7F(YH&
z2X=^Y5{lS4?Ys01P!iF%HZwLtMk2c{eQ7Bxl}CHv;%ClH>WM28a$uOZZpi2#ub^uI
z2^nUU*?^{QW_<uz!acjD(D9{P^vr8T6?&_@e6{n;j72@>Gmgfama=Qb_obl5X#pcn
zd$>EFaE?|tz*@<fMJ^EGMf#K=9ua4gA*0eb7`Pg!BHnI6+Sd8Xx#tJY8y<LKmLM1W
zfHIpc8(%c=N#od;jC+;Fy#=_bGCwMO+VFXgxR;dPclAn_l9%FbX8L0CiREw62CH2N
zz)y;cErP1S)L2VM4AppXsm9A})fk&pARE@KAb@LU1DIA2zh{@sYb-raD>5D*=b`U}
z!b>EG!87HW%9)Rx&2i)#)i90np}McBc^ysm6`D~rRb=Ctvd7Y^nmu{vOMF4F%Iv+E
z*WWU5#3IHMIKP+2_)P~V^XF^fn#jcmDs7~JWGxEcWTj)hNT87k`V%;+Bp~JLQQ?rq
z_yk%$TJ%-6hkc+liTHf(fB5p?9XqStb$|)@*Qu*PwE-0;!P%0zlenWIKNB6nFS2?V
zi=J4|-Nzu)V|cb8N3wwVs7ftmcWb2@diTcV`EbwOK8xCyjKgyGdw-IU=DPJKS$NhP
z(cP){pl3jybRW7q(=F&Jtj&Je{2(1&MvH4R1?NugwR9=4>>lc4pRQNomv*1vP~493
z1`k3iKT(l`yA(+MYB>%W#4MLNqOl9X<5)TDTB{TdXjx{iI4&b=l;bC8B;ACz`U2hF
z^{<>@8#FZ-7^0v+aamWIH9ta>_9gF3kI5_0$ty)zlOhjkT^Un9MfjpzM9T~_cSn?%
zj%1Ou9Y1Cv*jErNn=?OpWxMi`>(7ncj4q@u@{<#mLe9)HS2JrTC@ODM<Yi<WsBvQ~
z3s9bLAeWXhh83^pi`47+@|d4mXBJEK19)avWQp0Ff47>3hG-6k2SO@sh3jX$9L+mj
z5mV4HU_-OM=+{I#+U1Z;b?x(;3-L0>NHkmu$39-rI5r`P_4TFgb$iYcWYV1U%z%MI
zr((}Y-JV5*#;~Le8hKeNJh{SeLNk5CbVnl$`2=GUq8SWt)-tm|o9MHgrU#!Wj4kZA
z)*bsNsklTx?fV57t_#0g@L=4!h2l@k{_;=7pNtK)Y#?Y7fdEFCEQPZZov1+s#Ia$n
zDMwJl@caT34rolC2Y!FM=K_AW(FNxbw-?ydpi&?sP0k6%GHrEC=<eY&Ey^3klHkCl
zcRAOEGsco=@VI(HSC26ZLCUC=SB%O~aEowU!k}oSE(pIo-WtqxF6nOXzS{ongSf^I
z23uT^$A<Fg;KhsGXJ*oh<_RmB>9=hp0}M)+qArx(d}-ssKpmPhiE=YLI=Di+e<Hzd
z+BIT$5H5*gw(9#P-*PP)6bMW0=gY1A7thRMrML_)J$^Y~<<<V{w@0QHT7>n_F7Y0+
zYtTd#EsP53hOay~%5Q~d7C&?@Z0{V+bjfx+-F^FJYAeLOdP*zi#c<a-9iERyOq~>O
z6Yxfxw!l=9?S*P~4&LqG4RMcR#9{Qed~|(uu9?1>!WY#4_Vu@~eK^Rd`}x84+rw`)
zSQBT%gn^>{ape96#VwH+J+{+jwC|N|KfZ0Sqkr;z_;}WHJKD8^Qa)EI@yv8JV{s>?
zF-GZPrP*j`wjf+g27VA_1icX~3C(VY!jDqi4qORv4sH8GPgolZ>OHm_@!1jyhM5<h
z@qmjS9uL7Qmi@;nFueWP@Oa!VtoaRo+KTW9s_;UODv^Co!yWl=2LmDhakq0KfntlE
zkDk3h+IsVBtJo4&UcPz4gQd12y5e&zvB}iktzM6+MQeo8tKv2YBeWPhbjL0(#pwcS
zZ!k&|VB%RSL=t(kQ;`x;wn=eCxdmhl3ss}Ot`8K(K_)p0!~u31UAs7VBOb^IhPhg;
zx739VXi|p|X9r|2gD_x&IQk2$=&t<>3DA{Jx8Ah6tDU;lt#<2YozB_%N~QC6SR9+p
znzgRpnmRVuo6V}8(x}!Fd8~T1si&;0G!uE&tm?`%`lNN5d^KT>2A=;!NN5HVXvLc<
z#{s3G5JPvG<AUowj!2&KL4s?e7$>9(e{9MsD<3{M;hx_e_D~E_(mD0CWy;uGtvA=E
zHk<@3Y6BjPrnWeSRJHF|bHl3EQe(}So>xMA8XI%B#fRs+BBHi3eFSw$Q#I1Oan2l&
z_&d^`0zA8LVTayNs1!ON_QCS*+C4V};j>%_hcNw7TUT-*Ge#TL#up-1rC(^Vyo@$t
zNEX2$jN2%<zU5~pj@^@zjj<j&6*A?FJ2rBxfn?a!X%9nDbShmRH;qf7(RvNSD)b1r
zN$B@39Z0G~7mim#9bue}z%<ikq)y_cA1jFh3y54^jlznc2mHES=(#-@^sednP<-=l
z2kVMTHube*hWye`6X-*|oi~w(-FA<eI((Q(+P&jItgWxrXJQJtGU*q|=b4(eZO`)~
zA{9_c>6~D}Mom=!EZ&v=SJrBc-08Stt*@W};*}cKilw00Eg?nOa##a&ri;7jwqaiM
z=-Of-C{*w&3|emHZluxDKxZ{JXdfek1-3{_F(-`xm0hN?0zOO6c|mFl&*A{Z%9-aa
zE%_za^wc|+-8<oxpRq;qL?3-g-RkUc?>Nn?Yu1E`9v_os=71=}91!6G;#V9G8WoTM
zUVRyjK>5Vz+TNLaK4jmaQAK9!bv@MSF}8HzM*N#$@=L1O1<NpPfy+gRT)zVHFy5G*
z$rVgG`WGV~I-uNJ?$KdI?3ABhK~d%}nzy1!Y~%i}d~~f@&tIUL)s?mE1uBm0n0eFm
z;dTGi?|}$*%$_PPNW6IK*U4z)92fuJ{}b;;in{a2%Utltc?4HG+&~9lOG`zMPWUKx
z5h+mI0!m9x+hcPe0I9;&WiW>M+pq;RpK+^v@Fc#m`xco$Zj871lVuV;w4CE$dHDoc
zrACyDi@^|_wcPPIlc&A%F451YfM;L&g9z=F3<plZ^Sv@Xqk&bh$I4&cD<Hn0D{Y%1
zi%A7+#1XgCh0H8_VPB$QHidFnftgjP0(_I--i~yE@!n#rsPUG><?SeEXt-j!hexr6
zN|KYn(n`xE5ut{d5bJ@}3o)Z^d%>FA0r8upM6bfYpg7KNkB8;U^`HUQNEIPpB<%6{
zu4~lFYBiU}8|zk8;rc)|Udggn>v@71lkS7K_bDfnfM}NN;$r#sMac13licvq%Ledp
z$vk1bVcr;CJK)@vq=%ThN?RNI;N5u%uh;6<3`;m-O<1#mP7BUv9-oTLTQ*-jGv>4~
zpG=j_;(N@)s$&CYSA=@<U0IoB)vVlMUT-w&%90+$q2aUm7ay6WB{4*x>#9qB&{jTt
zt;IgbS?qmcw@6RYCe0BKl^<Mr0`WUe*a_SL&=!*gq$w5~Pruo$PHs^=u5ZFf87-Gf
z#dnkea;Q{U3xhlAP%uODWB^Ywwn!CQpeJ;q*J8muINOYorlj)0%XY!}@PQWG4<AOO
z%))n7#7u0sf|%%zYxn9jX*PH5#_bC!O>4VJVzVh*G(SX@4)=~g847U-XytKSJWzp)
z6qaT?NwKWHp~yL6XgYyI9%^V<iG`qBg+I193vpB?kz^p_@tuSvjGj$+xHH47PS<&2
zIzm%a3>_xht*~(2ak8NWsxgZq&sspoaHT$=Z}&Tf+>$LGd+dse4hA{6vyO$!=yWS4
z5@5`E+eyv~VtHzHj00Xk;k3#XUf6vtOHAM~_}A#n6(7VxL4=ReQ{V47wi;@Z=npsq
z;VHdV^8)7aiMGi@SKtC=GTVY21E9M*>#Va`Y$gigY*uH9<Kl}ZlnYZ6lgQ5kzkhd|
z(@J%E2V!-C$%GDb82%c%1?!(+jA#Wx+qR9(#;C_c0u=8!7J4@xmGELGDd!p_-5Rtz
z$|5c@+Q2(mM<bUnqr@~fY}ym$qaPZ#BxwijP)f8|pFOMW+u>X|7z-=7dv`KgpJ8)h
zR^5f1`(PFfgYT@r+)*^Ft<}C>=feTIcK-<dUYQ^upwzEP#L6t>YwAbmI^?QMro_ow
z9156|@*tRqBBA=}YntM%{b_<Nwo$R(jM-H$iWLlvEMl&BIo8>D`wOQ3<D@ve5eeH7
z<3^8Sb1mp6o9avJcDxb&f3?kkqX+l%A7P;2tX(Ca4FD8Fb8Bl#Ps2>*%5?yd=Cq>d
z6W&tVl+&Pm?QPm9crXfNGyXy&{<^jsp_6B=f$<<G$gg~*;7b*Z1lPXt`aY>KO($D>
zD%m2r1nufZ@Yoh465u{)+dd9XFc2)4pFHD9yDBw>SdJKQkgvjLl5qJ_10BXyMeK7K
zF_*uixfGB#t1&(Yf3QThZ^x#a<N=5Uwj(SSJhmH5o<C_Ulmgi)p@;@|*6UZ(`=x?R
zR-0AJ5T(eBgL_;P2?yDb;=AR;To{eAgvCg1xkdV+p={k~#|c1srfc1V5(69_xxLrB
zE{M%L=2-_SQY_oV7`nTZW!3Aevmr@0g5>Nw2N~`R(Vd#cx5I&?<gyYge0T@qg&ivM
z4kR;mC^VUGll=j%OX1taLJ5PX2z_P<pX~73>%3CGYbix@(6*%_bY!1X7UjJdBdM1#
zeSKY<mx(s7G0KEJ^cXC{O3y^ckH&2;&-%vfWaD^`?^JAh%Fu$EUajuAbvL6{H=f;G
z4-eE$Ae(mM-<15(==el2BYkkaOaG&jX{GYp#c&v6oK2@o7n>AQ=26<sL_Nj%>~w|^
zcW?C5w=2GIJT^=PH!Rpal(k^`3_VZ!8yE2iM9+zs=Ez(l`L-tcH!_f}Xu@X{s_9A-
zCQr2k3>6xjx802mu?ToDqCMvvkbxE02H!J2FWJz=4HCskAP4w+2439gdP7GVz{hmy
zC~dxy%NwhQ!lrr=yno<-p;CFrYTRI%pLuTUcvNr%NRB(sy0GEl`IiBb%(KrOXTbcb
z@C&mZ7rBvBsRca-?bBd5h)UusgJo<$1@Yi)u<&<7KFox74;^xQ2rVQh8)`8sO0-+9
zw5}C*<4@P=L32aGcn0?Pw4v`NZMQIR<8h3kkh}Dhk|^K<D)zM5u!gMv<1uZz*|@DK
zr;6y#ZLIpU15BcCXu52P+a<`TE+?dxo!5xDKSEVe<tnfT?Nc7A3!SV)m0h$7$hR}?
z?FQdiR3j+TD_xi!Gktw2d5?p<#Ulk}+9J)Z_QBH9LFu4$Rf1^?nYWgfw$PIgZ<V9&
zY?&PtH!j*+3{t;+qgdv;xmLOhMNPOwsp6RX83-f@Iy%V~G#Lvmsd9<t70>tzVA~;~
z(onn?KJi^%@s4c7MmGj=@c@h`N?{HR^F}<W@LmB<pe%gefT#;Y+Yz;iiF>-V6iWhr
z>C}+8IyH+QKG;{b8x@VsNcw)9R(LA+0ns|;m4yEVwGg;_^0RQg;NOjw0yzsJZ*Ch3
zlzJ(ELd{9T9fzd>n*_8TY^Zov`M0m2){V&xnQ^3!A$r48eiI)R$v<cZn*nRM3;ez1
zqJx|Sd9GanC>QMGh|k*-%`cs80!NY&llEoCOdwL(WDJcPPSCwfvID`_BH{-;1~O|+
z7C<59?QKL!j=~@$B)y{xuGZrs)%BgQfc`2leJ<TDs`5Wk;h(trUX<9{8?&`?2pUw}
z0ak}fzI0NC$XCph>}L5y)k%!)@f~pbDn&~eCSua1=$KrYKuAL`&69S(Xbiw0@xn0S
zpIyHrXZ52PQyP*Pt*a<D(rp1nv{jl7s}iHEb-4N?TIJ!gVix$A*skN<S!C|egO+n#
zJsEFUv{^|_Csqz$Krz89(Q5G*ZggYcYN*iAwc_l(e!>s30NiID2#F5AdL>foe;3#9
zRQMtV>7x-E31~Fia*e@WM0jBdj-Q&l9mN3OFxLXD+V-*NTQTtcs5m|`9m#aB*|B8S
zR6wE=mGI=L1bD?Q#c?~2JM7k@n9hU=G+{rN-WE9M(kYUBH{5XF-Y-c%3^Coymg!4Y
z1Kfm}T{f1Nl|wrQly_rQIBo^!dUS$^$QF-?L>r0kd|rzj@FcuE3O*xdU)W7=@wN3?
z;Z2_<yW;`~hbCM<#GE}-mc<*hSL&NZMZqhYHwGl$BofaI^Na+uo_&q8tc_U)W-Qu@
z-57q8Oe#IY<sfS~aA!&NDd2kzkJ#z4cKZwzn{=J<0oiQaJUp9$Cx-CM3(QqJ_?Wei
zHE~xpOl*t-UT|+)?w}IxoE#h&X8smopM0BOrjUG<Zq_YdkZCXNvh+#SWP0kW8BUO_
zpn@$`Lu`M-DlsMD!DTY1OnDBA?w#PSo8l}K^0iN;Q&9lqPa`JXjKMB>#-`n}`EEmo
z7!XIWKn~7#repy+s&t8nLh4j8Tx3a;L`p`{LiH_X<dmm|CD@Z9!x)-|G6?nfBzEp5
z1}m=m_7pS(&ZQI3!B9oE<2*uo@ktlH%D^A6!wo)zC<GPG34GI&Y{HY~U&$9hS2j7*
z2-{cY8->`kE$25TaZSyFCZfV%;Q2Pcq?33He<saNoH2w)!IUsXaxQw&RxV0PtfZKv
z$ScVeN3i*KhWW@bq!AktLVUl-jv`h%7k01}m8!8YOD-7^UVO!v^)k%Yp4-7-C?b$3
zniPaHuo*`FK=ap%J5$|IE?tfr2MevTis_;ZJCDJ2SVt8~*g^&4GB#6MY~~=)J{$+M
z5uX^{P-sZ?vb6cKD|9u&u9S2<^thZN&pdkMj|HavWT!cqmaPr{NxQmHF6&o2DA@6F
z$1zA^h*oeqcFxvxBNpiCGB9%a;oly&B^3(W1RvZ0)*dd_&_#xEaxBv@Se>P%P$%fe
zffR}2%HuTL%-BfekAbQsl+>{>aCGLbi;9w?c$hW|0Uio?5{6DF6|P(uv>`f)Lvb{x
z@)i{D&|vf{WEK(4f~q<f=Z?I`MqZl1k|XbtfaRx0QBF=@A1EHEgBtIv%@p2X?2r`5
zCuqi|XPRWN(hI{1y&HH?PSy%gAGg(B(*-`riNvCX3PMbuE$J{TCXvIZ4=8{<z<vhz
zqIsoOg9?BQT7oif$p-!+UJ~e@jcX`<rYy;hQ{raa94gyV3}HM+NphdI<h%}3sMOv`
zRZ;?Ele485!^DX*dH9|3fv&kXHUSrIs0XA<T<w%aRuLmBsXQmiDq_A3s@f9o<rH*`
zd&;<?g^cSphWQTnEBAo-X%c;_CNdhN=7|l7+@-=-j5b1n#a2plgX&!^)W#mJt3A#M
z_%=Q6n2QCM43Me45fxQ(X}%RYXbW{EGggyZP==|+EpKc}ORqvHV(8V?192ODxdSA+
z^5r@}D$Cu>E|B3A7f9u-y(+>-cXZ7)Su?-f;nAw+JNV)mKjz21Qe9(i+;n^aw=+uU
z{F1*XsGO@CjhK(YXyo$0cImELa_DkA+3h^HMI;74O6?@;TV+CVM!}AIZI&E%USi{m
z&)2Q5)h9IGs@6EJQ>aE)n>^q7B%&FbzX-{=wK<=2aPIaZhF777<OgY~+srayb5(qt
z=|T)J^Q+Tzci<*6{gHT%$9_|^ttBh`2R)B*xbJYRl`ry+7NSTw%cGod6^Gf<o5pDe
zR;J6WnPp3meepnU?|TV6Q@}|rg_%Cg;+{RA0w7QvvXkWArse?IDsBnqAD;1-|1E8{
z-nye#h8Mxp+Q?cN)oTVkZuji|!08$c!he3LM0hI!DEh2#BL3-JXXkn||I}7|qJ^Dk
z#QBN-!h#jn8rl)k_#{_`3k2X~6W3b!%bUEBno^y1LRDj)B`A_Ua@8}`x>0dz9Jo9A
zn&&yfvdsnZHc*=6;U*fIJ8`F$ohTeD3?x=0;ZuAvC*w4alu)8vLzXke(LK`q2CQjr
z?*ZE{yAu<@L06bS=Z>rK>iU#81`?J2w~h<oRq*o4+y7=9?DNMMk8;&oS)aYJ-}wmq
z^wzJgrzM{WsQ!)z;8h3Gyo2vdi!i+}IQUL32nyG7(4lhr!FPX_gYOg29}xO$>&>~)
z|FsXhPo)oQeKqY#IkAEF^W3!VjjXC^bYe&0prBlP>=ci8$Me!tM}4(61*cOWY{&(<
zYSr^Rt-tm0=@M|!%72Z;A?n2;YI%ryY&KRJbF7Bn^XTtXR@Yq3@CMFndR$frW58bB
zb8l07%Q^!(`xycCK!B89Xq(D2X42r%HiFac*as9~Tt~&N-p@HyI~7fJEeh0^aIcm1
zwG8ex;Y_Ex1FK}ylwHS^j0t6KSi#or-dtB>wm{ks{aB0Qv-OW1XHmxQp&n`(n`_my
znPZyV_Ya(_m@Xey*VFcbJ8^^hdZU_*qmUK)aLo6KF$`|n@84@jNxy%0Ccl3hqr7MP
z{o{t{RKI`R9-YnafAF3B{s+3>|7YWNFtgu(Z+5@`z0Ih#H;do@yNBcVe|2}i|4$iy
z|HFTk-~Z`X_WMs^@B8}wi|)+r_y0NH@Bi}{BYlxyT92?c)cpSUG*ADGQvg`x28#?z
zH>N$!@Bbpl@Bg5Ev9xqix+uNje*bt3fQ5_a8pr|Q0&sZKK46fx+Nx9IUall}qcHmZ
z9sK?WclZ0hO!)l=C0F<Rhw(giXZ8CZCjI`0s^7nmWQK;s*f87se>lneKbY+OA58TA
zAKuyfKLf7r{qN>_|9c986<sOq{f}GBG^g-U5s}=syXgvBpl`H%&HMk;z4HG5G}Zfm
z_>H~)hur)B^qYGB5ATup|M1&-{|^<0asCf`|0|~tzK-|*yLr9;&!>3*ze#)l+uz9h
z-$(ENAk+Kb*S-IRjSRR)+WX(XtM`Av9no~}|0{(zUCrqIuO5m!GY6%uw4?u^be2f$
z8fI7X{>Lm~w)emD4ZZ)n^Lzh0U&;IbEaCl+xN~xFFv<IWi$^w{$@{-wx>WU<f%-bx
z3EoL~|6gL2y7zxHkN5v&sV54k-v60{{WZM*`-mu{&QSOM$D~PuC8OxOc>g;;miNCS
zy#L>r@AAC=-~ABY|JSp7|9k&7?|=UrdjF@K`eRSnfO*2o=$uLH1Se#-%JKep6W;&6
z;{EUDd;jynbratIaq<k_|8B}7-!Hiny#L({XL>9#i}(NZy1s$;|11rj>iz#k=RR`I
zaLCCS<a_@IDer%`9SHA#cdGZloACa3b?<*y^ZrLYZZ_|KcZ&DFS`8`y|6=d|;l1|$
zzsBvI;eGf1zy3$O|KEHK?|;NCilr<14H+}+A|*GizrGhg4}Uv-w|%Ypm9~+yonVri
z1=DWfA-5L2i;K9SX?KszxS{+&gSzpq;PMBE{aGSMfiLjN(i{cQeO355rO4CGa%P-J
zoUx--l1RT(bYAB11w_MIai^jECnB5DsN%NrJnp%YLq43-9CWSMRECUn`gIsGqyHpB
zp5b_g%0M3G84b0E@}$PtT&=F9!|6_3$RDWNQSeRNj{I5Njym7h;mH544o8{G&jiPq
zACAXizv5onKZGlK=leRq%6h{eK|;oTTUPbPLy?oYVBGsL1!UEKZC>Iz{fC9u-VY|W
z>V9~$9c?{*z+%&>E->l7SKs0E-|w9anfJgOo1ZQ-K5W5<%U2m6Zt%lR#)k_}$j?LV
zRE&x7Ud=B4I%E4gH|<;8M{NzwzGH{L2U^21al*`*#IBkLOzgGUBaB#9K5<z$<m}3u
zyL0mH4e`=w-#a)Bo#4_z+Bj<`6LZSKQg(*cO_)98Hm1A_H`Tr;;?|l6=9bwvFU?Qw
z(jL&;rF+htZ*Rv&1!Uu3>l|+s7iKXau1}lAV(XK6-QF|bwY%n<_L+IrzA-<yOV<_A
zEA!E#ck+ebO1`v&i5D=_bs0r8`yF1}P5005x?zOdm3jHt<}wFsm>=8!cOKt@w0HRG
zSrPb<nsyYpUC8=N(J*)0#Sb4oJU`e!`mpux+2O(7Gk7hU`)zB*JOWY8E}Dn!Vt9F8
zcD)`Twp_-fr|lx%Y7ft4w+0`J=60Mi2%TZqFFUL~Me|wSr!sn0(njqEo&^}+nftkD
zzUS{QO#Y&|1MTp=$i8wyzwd||U$=|2r(HDvZXXw49_{TG&Em^vTRZUQ@aWIoXZUyf
z&8yc(#S`<Db}@?dnUohB^`$_BHyf1<^S|vP9bR++{&PUUg&hov=F9f+f6eD7v10UA
z4P46(e||=>>Gs@7?!V~r779opCH?mV)nKH&KiY3grA`S0C!7B@Z_n&jG4x?!D4J(>
zD4$_K%Is139N>n)`LJgPEQ5GalFw`ql6vm>MZ~hON11eHN9YRbdh9DbiG(w|+bVX4
zz|%d4eHJfD@|k_wDxL<m*9}=7{v0Qs*&kcQk1kdAvCAJZCqC$}N(GoaHcY^a`8<h~
zDOd?-LQ6OWFJUfXpjj87VE%`V+W{Xps=ftzq077)e1p0OBtG|O|HZ>csDk$u-=NtH
zTljKXG@<kO^pRoU05K4Q*Wrh11))+yNccN|hW^PKx+Mwhw51Fb8)jv2*?{r!Ve}*M
z!)Q)HDWg$23XGlvzNqzEZ2ZDRwlEDRQBkNv+Jc_^&U(`4J<-UG5T_F<AvUHoM5s2_
zG$J~IoC%r{R7K;dPyh}c^{bElO5_aF;KCqTXV^;sWFysw{=I1ba%PvpQ84O_qEUBr
zI{G*Y!%-NF!rmy1jLqY}%6}D3eldS*6HNQs3BqzjJD0z<e|ZkPvaq?uxMg9pblhAi
zocwH*4zY!!H>_2oU2Mtd2x=egFjS465)wzx1IHNwBO4te(;NNfLXDN5e{oI6VTixv
zh+nT(Ic6H{2|CI45&27<B|}dw_Qa8PiAWQr<KkglB#g^2yj)_4PN#irnKiR+Hq55E
zVy>EN<~n3MF+Hapk)#ORymV|?rd2box@k2`t7*bYX04jmnrW?@wd#ps`T&P<cNhX~
z-BDK^xoAazmJlTdC9Q9VA7NPuoc8UDHwSNDOIBDu5Bwpl6o>D&UVk`vy|w-7=ucou
zSN5Rn5A2Q`UBk-t=GETT8%Q1mF344oa`<ffV1I|wLI-N^V(Qp*9g-PA#@$ejZvTO0
z!>IJ_LCJMcNML(qE@(ccp6z)~HnvL+SU3?ldud`W!#pn5J|kA>SBO3Co#QJKYmI)N
zI>@z(r=)@q33nZyTo%thEPS+9^xQ%D)Q>L2^MxO{H@KAdM9L)^usZS`|DY$n>ybwl
z*3YQB127}1P$PH#h7T_M8i2G~?m1_Xcn&yghZlkdstJfnWoxY(ztmQhmv!a&^cs<H
zVSmJu;lTCE0t~%yuP^?Je<Hi{v21;ok2U!Se}_Hf*cBodd{8L_-#Jy#CqWJ;h8Up8
zp^?n+q$?Ih9tQ@hh$c8$%F8cxRgTM18MEWGuPewrIP2IZ3lF*cf)e;HPx|~cbb{+c
z2d|U#1LOAiSWJ?>+q;fu7JGlqUQbM(s}qKC7I;a1=TLaK771pDzsr1Kblr25Z1kSW
z6*z;Q-C?q)nEy)JHYLg2_Av5Akur&#MNE3bQVt<O&k9ov`@^$sb-UXsXtrfti|_at
zx8JdY&P75#ra4F-UQ_xrkt~b(O!F!Cxh8}qc-o#!lDR3DQ?>`7q1zptlq_XSB*>f}
z9S8UoOdhl?!O}JiXg*`|0Z%<-i7{}d8I~383M*i#ua(5O&lmnxx$lCE?VS_PrT#+V
z9!q;gNhevSain`DS`}*s9>6??WdKd9)`=Npc-9t$UlA-vFlRwKL}joT1>DhQG(xjY
zx`G6Kmx|2ZeOz32mWwCcK`Zw42C;uDiURj^h#`^yqKDj8+_V+Q$abi}cIb#ayMKZX
zslj5R(yb!PDm34U^%6N>T1RG*j9Z7MPONC7jp<Up0TtqN7MWp)izG2&UY%%KLJLb1
z2W3tX0D?`9G8&CHI!;Ap5`>|O>|;CenJr=iryZ06JaZa4$ia+_0jzae$48?Qq$NAj
zeq=ESJv`K_Ew2D6o8+=><UPj(eNQ)zYks$Qbj&$+PTG-q>SRL}=57GSJfJo8QGO>d
zs4yCNCVyy*&S@vM%)yo^D0aTQfiX0U>Xoscw0q3i^%TVqW_@zn`{o`JzkB1fKwA6U
zs+!mEk1fOSfRe#`q#Jzr6C>VG!LHLTR;^mS(Og+wTenX;fQ<7C_wSFrzUL1<1z|M2
zy!w27v-Na)=h^cYFJJxo+wR`}!Rz1O93H*><K6o||Ep|qo;js>@5X6^02#H5#SN!i
zE<CAj7}0XO>m0Ate%`aAiwX+Le!pals?uzyoOQWz^bN&h5K!ACht45$)8LaQ0Msj&
z0dUg(rvSQeG>3Vb_-G8;#2VsPI-H<!9xmPDMSw-45)OK9R4NwWF}1s@z}HSJ9ypm2
zhEd^+ru56wFXv`)$?gv}ib`scQa^z(tR??M$^TPd*HRx-YERGlgc8p&F>cP5iV1B4
znpx%or#tL8+9^L}i)%UVfoB$5hzQXkKzs$T24iU!u||UqugB*^^$|b{1@67ao?y+W
zd}gno@%frPU*j{QU6#O}F_j2eJp4&q|I%sy)I#TJv(UQm!>DlkmscpDnXQaQFQ!+v
z3QVsmfYMa3oc=FXp-5_;(DGIaq}>%a^uoeIAc{9~i*vOw34qxYMDcoVandG}g~<jX
z%38T)Q3p*H6;_ey{pQMR5&#(hT0o`0>}E$EnfEe5%#OkdKxReb1Q0VKGZO;0DoyVK
zvjAZ6@n7Cw9tgcH&yPw(pTI{nE3jFRpOJ2ppBWwdpdy|1{Hs>s(hXf$gQ#Vv{^v4G
zAXxodc)e(Z@;Ic4YBM466J7ww4ocKDo?;ew*3+Kf`DjoD7Y;)>^l~G=8AA6g+b}+W
z+;X*I)tXdfoN5IKAE3{LtTD-wP;f%A+)@+Dg#GL?(8lVj)u^pCSF4kn+B?rJUz^m_
zUVgF3n8`0#pNv$gvoipFJ2*$>nhl^FY|6#HnSk!P(`O@n<#wZsRslu6$u$r_tqQF3
zE7j0*8DySU!tA+aN-_&I0S-?i6{cYG>?#}F*_8li5dcHZ7-<H?Ntro+PW>qI`%pEt
zg7uv}vp&ln777DDbm`ng!9E2J3IYWs^C77!-ALCj3^it<qMIfYvsj(8lPblcf|fcC
zLeA*(6wpa-5LXpAJx~WOCsZ|&OUMz5XaDqpC|^0JxXB^Sid@kam8x}%|EA|n4nvG`
zHq_1P{}+#&cu6&-#cJx|S=BP+G7I?I$ZpG|%-^SzoYpvj+ntYSeD%7J-tz-x-tc_o
zWEQjVKWAsPX5BXUvV=Cxa$tAeVVG51{chr*i*oUD#`Cb%tWZd{gxfW#;xks7s6&uw
zs!ruA)M)St`?;KC4I;n%W)_;FeSKhdx%tI6<SDX5yk1_o-LB)YX=8W0)W;MM{>9{c
z4gN?-Nj@I1o>Yx^%EgsAJrIjSH;gG&mV-B0DuZl8n4nH6)i6qC%`$SSc;>SCL=CND
zJ)J_(YQ7{fGX|}$Q-Wp7rm+Nxhbg#4{7IfZ9cR25cR^Wh(R_@tuFQnAMAjU<#S+9c
zv?bPkd`+TMqV0!3BKBZ59P*s0#ljz`beBK#CR5yfL(kWkm57>{wB{zAJMypZkEa=E
zNXaI#WPN6cVTvl+?_ybq<*21|)bt$nbdI{7qmj<h&~r4?IhuNom2{33J;!P~$Eu!V
zEuCXc&#|7)v99N^su?J&CUF*~@>DA;QtH%12BCXqX{EJV0t=adS99Q2*Xr!Q)!YiK
zWCcQR)hbxat%0ku)>>{2)n>hkxz-aE2?bY0V<itm)n*QSQm2zR>SaLA1KhAy@V~WM
zeg!EU)iP?R<-o7Ux<(f0wPfRk>X@U<2z{lJY}1f8spp0f-%X_ef#_81C~9I-YX%Kh
z=*+cP>f-`oIaV{rvYICap)F_XVetUFD$j*}cS<>Wb>ZhinTy8rXpu9i>)Lp@-h~sm
z8UtkVz7RY}_D{<EYBC7^j^j*LHxg<F&2Oy)4NtlNC7T7Zd20ES-BgoJn&*jeOXpQ3
zd=l`voNpzq5D9Az$n`cLPOdI<S$A}xih#nQ#%udL7M*zL96Qoga@%wJv^`ixNAp&J
zXVTWiNqN$6x{hwMOniZ6g+>nenTuxB>IP1SO@plB;;YFG!nrND3z&@73<EnK3jYY|
zXFew81CVY3JMw@}q}*k~N#sGRGDf?IoV-?j1)%AcMs6SZrr3YV1j_Q51;-AZGElug
zjPly}1>h78hu&P%CkkboI#uFai^;N>EZ=XkbcUyH2RQYO>jWiOzSeL>SZm<#Mhz`%
zUt<c*R7otV+1=^W3NuZcR5H(EN-d_;KQ^V1%#qSpzR_$-!Pf-2*=Cc>Ig3cQm{*H=
z^{<{+=%h4#fr3m^7buZuF_9J%>A@*TbV6k6JfU3ECQ6)XF;f;Z<@?PPv~t?P*O(+R
zq<DS|TyOgHfJ{?ohsd*-9A7XwYF|1zYKzJ7bti{7NvODfXA%d`mavS6j;Vm6gl|6E
zenh%oEDCc{YZy6$u(bA7bPg335%2%&J6+c<l<@E;`YW&l9Nlu?7qpJ=2BT!5<eRER
z+KjDeX2K3&#`=qyF;7s)Qszv~^qH{Cl&yZKAthryQSwY8*@=)ca?L<|RxZHYteS6#
zt9GNBY~F+{Sx{sbCIU+48WWZLKLPNgbA1*7UkZh3hK&%qoUT{@zvOVGd}AyltLls#
zWBk=<PKOw8k0Qx&UmGj!rZdS=C#NXy`oFNt*`uxOKF!i^G-AYl$$yrr(-DzVgfL^x
zP^Yq2j%_W6c;O}MX8ALA)H2M%q)aGdR@RL<+x;!8rM}ni(D%QG{XyIY1fOn$lINPW
zQ)@ypyKsIkGq2*g@$$WzL^x~S0cSni>#E~cZDzDk$;8I3`K9#oHLGQPU%kWpOjZ~;
z_|P?_<J9y4zcWl~^-ANP;40spm8I8|1!G+>)&*l-FxCZQ{bI(NDY?cQ(hBYJ7+~s|
zPRJ%ggOQ_1KFj_p5OZ}Z1w3jQDk{@;$O0J^eKoZttCyJ?Yre8UO_UmkHNUo!2Ov*P
zTVU}HSj?V3a`$;M?`P39>fN|X3M_|9lFD}}5!awp;!Rdg+dId`Vx+jPb3UoR-?9Eo
zrm#R$4w^ElO4+QP0bQlC)kL_{x~1h~CY2e0&j>pSdJXtWZ5H@|l^Gkqrq^KAu!^-=
zx-eS}sR~wRX@0FXTl1BC1id!P$j%5n3A<jK3Gp+w+)6^91uruKPr_~_*Q5Lzsxwtk
zRpF=j(qf`5CfZ`6eVd7vy|PI+i*Ho(RP~A%s;|rjT+NrsL4N!W;l82_ESwYmMHXLA
z*D@iKbODG%8c(Z$3rSOIh;t>YsI5+|0<z3dMVw3XHC4hx=hnlti?Styp=8vO$fMUG
zPSH-O!7}BU(%c$k9=!$(cx`6(YTibaXK6(_-3%GOdfISFVValV;xwN5%?~&*W7*in
z1p{DDi_w%k+}wA&T^^=QoW8A14&TI2xz;Ml6X`rEx2e90s080CDpsLzQ>N=y6m6f?
z%+pN*9OEe?0vvBQYiKftRmMT?To|<kjG7K3g)ttah!vU|!HBm%DEnUTS|FLdC69S)
zh!Z^+eAY%;yvw7=`f!xR_skGQ9hh857M-Y6Wp3><=*HEB3q%?Y><%4jzY1*TlCGbT
zt|mKFKJz=nkfP^Os6%=+^loP7`Jp?n$1Nid8g^F!KY;D_dg?)I_Dvjd?+k+g<51%p
zt3Pe}5=Erp%gUPzRJ*(tA+vt@b)FW)g_6d%+!?9d;*iG4H>n}f?=Qk5-dUkG+nkUk
z6W^yjo4B=L6kUZ`@EO75w%&n@{1k^`{)C~JFDVT3kr}lQO|RWk0!y1dz9s{nn?V~E
z0=&oZ5ruR2>4HT9<I*h}Z=CaIp9iJlUw>898x#Ket6Vh9;yL`X6Zy*JoQ$1ZfDy~F
z5wrst(bzSM6*c}afQiE$+wfk_{n}BB`tjYW0fi1ecko6^iMDG*TaSf5XHnjlmL8pB
znEOYG3lJgga~$AayFRSMu1<h1M3qnrDUIPkie?c*Y5aoM92jO)aXrro@anC$quh1J
zZZ)fPF5F&s-|sph-hGGn$OUbW$G<LH8^II&RW8dhIu7un&5~P*?DKt40$A|s$bUN+
zIKj3ZLiaX~<<(xhul9c{p2$1RYy-g26~eAD<_&PY5TuHy4z$cEMRW~n32DnP&*|D!
zLgG88ecN|G`@@WQ=C@st4Q`>ctxt~0pkeI%YX`4SzVQ8zVMdu#s&D6Dk7INj(Tgj9
zk`;$)Y_goM@H(^9N37wE)4rzbH{LkMyC<VjiT<{4$A(Ey6&k8geBiIjcWR>iOmAxG
z3%9Qn#<%wI35$w<<+Lf;{ET7R&5t^z?K<%V2@VdIi5E56f>v<6<@I>p=IyxU!O%O5
zAb>BMZu~jeJU(d!;xfqeMU$Hph`d#N98WQ`s08rN2xR_c;lY1u7k`q_vGQZ@#4vv<
z7JlNv!FjmwG0aD^_#|$LOINMzI!5Jh-}OpGWEPKqiN8mbI}R<r?}(dt*^I;+;n;7i
zkrNZU8>JPQcs~YC3P2@3ws^kr81G3a!T6L?7YxGtVJGl=z0F_#x98hkr#t%J&M&R_
z#l?4n-FNw}f_IKyAEGF47^6}8_Q6sSXnLDPYu+UYMN=ZQfV>A`^g%S4TFfz!qAVb;
zyz6NY-k7eFX7qUED0g}w)?hXh0S2aP+Q5+YOUcc!-Qk?Z9JJ;A8~&yWBz>POK*bw>
z)sXvmaVb?tAAo@%A8AF5+r>0q3ZOf7+d1wWS5Hoi7Q9z+J%N?rakvpIFB^7y0L<Pw
zcH13bbSKbkN8Ev0u*dP-I#lMCikCC}Isv>-)RA{fKlV2`I%t~N!8WknEg)y87}vz$
zNxRvst*<OC1&`a!mAbXQv;>6&>rIz|JT>T9X{FJ$YD=!M8L_L3OC_sXt1kt{<HuIj
zSY~govAoi3)>ok0JX>Ix9&q-tgWl9KZ7gp%D8+rZaI*7`Y~n30^48dr1rTxFi091H
z+-m^x=J+MuxUJl;@aU0W!5IW~u?L)0CvEoJqT3jJGlHoOd?T)S+fnbHE+wyre^Ogo
zl2jI7247QehOgnx@J1#4=nh^YCzed|5nX+YToJk#85{96OUj+94rAXqD_?^Y2J+1&
zq%n?<cZ={_P}DSHeL%FWWMSwE)nu4-dt00C!hs&rZJ!Za7N0rh2giKxm^)5e0yST=
z7hEdLzk%m;O3xg285|!By68GA{fRe};Z1J<=6UMdbNu!UX6Y-3$p!x<AkXRdOZxqm
ze*Zzg|3ejh&?}-*|3g&sL8*p+p-Mggoyjr$QyoLRD@a_7fpT5Y_VETG7YKn}Qfvu6
zUM@;n4VY+2cL}+$a(Zpo{6E`~LWpM=>^^draQM4pzHrowN105U!R?Nm(vD+lq>Btr
z%on^T2(oy1(F_c!pw11zn@aF}IVnZQby!JY<-&&(U_xdD)MqR$;hzatfE2x9|I`W8
z<rf%m#)U9|L;$W$RHz2>ZYXz&;CN=W4(DRqo3%-4iC|KbGFtIRW-Az5z{+K2)+~Pt
zY!iWQFh)$59J*d%2WW!J-Ort<b8&cy0uc<@YjsSWxLyxQ4TNF5tO^BR*$RS)*F%j)
z5ztrArU`18X*Bpaz;qvWh}0njg&-CbTohMQBg)DRJ;>I@qKQGwf#V>>QDwlxOi>!1
z$HoRsSdTRXXRRk;<LvgMQjaqaeti{Q0*coYwR++@C;kEHSx(j89Cd*%{nruf42B_Q
z%D?Kl{>aYdM9M^a$@B1T68DKkD_m>hf>9J-Z1l<*|E|wm*1Op|hgU1nI`}&<z89#=
z5Fd(E{-6te>BgA>h-$54kosa&`B5w{q}L@Yb6v93b;)Au5^FEet(0n_&HsYn>9_xY
znE_Y>g8dJB8ja||N8-hs=?ij!*ktXL{Bkq`Hc4nD;Uq#v{yu||%k|=Yl9BV(;=Rhq
z-MGtU)?z$+r*Sdfg{5&gNH50$Ha22yjTHpV5P@rh`0!t9e+12+A@g&*&D6lTkE3e0
z|GQDbRix7!!o(>Bhz-0Y2ybP{l#YW4vcv`01&%PY0g_?rpq@_$^*kHYb4H?J+eyn-
ziZJx2qxUl+iE{@z<|g3pZ|B%n;77*h?~s7EUxQN9j!c*p?DDb5X#I!hWvgj~D*a|j
z%jBaTC1#loO>KFbjuhkCAi%-!Wmtz`p+U9^SQAgrQQ4~CgksYYhU1ZsNdtcSTnv`=
zv_rR{<I2B@EG7PmEHP{&GvZ}U<>N+20xYrNHk8kxrHIGTD8z9RuW^?J0Q}0~i)F%*
zpLUSpz;t^=4`FIOg2hAvWNXSeUL;KqIGtEERq9c0Rwg1+Kb#hcOhN@JB$>(L;u_{u
z`EI&AB$=V?k_{bvE_;NwtaP8$(s=V`7-JU3Lwr?|p&7~xA`<Z!$}!>zt_mC10lGL6
zSK^R3nXR#HO$mOa&k>jkk4nfS!w4@wgcTU%?&u=$ujsz`BUqK61p!_xxovx%A7P-|
zUcoNV1#Sf!{+H@0j9DqVa6?p|@h`jkk9HT(tTW~e(e&j_a&3?~+Q+xRNLxja{fj1v
z;Hs_ZOkQ|LkfU~znF0W8=T;Ed*EmP~c6Gyl9BufZC3+}%#5~n!*ZBdJ3w}YZ{D5It
zcjBg^=&Ief=;q0DY6nsN;yO+;o$ER9WSHA%=%dFC&YfV&!|R4e8ji=az2N4BvB{7F
zY`}>!(36E`Q6|~1RB?qzMv}lHNqypZ^S0WG#;s^0L#_3Ugn=ZAMaT$OWM7cD+m5wa
zSWwuD*=gG-Tsp@Anh)_0+5d!X<VkgDsgsTTw8R;aN)aG7+csT6NpCK^F}ZkrVgi<J
zv;hP#>9H7yyrxfSpw8r6Ss9r{nZIb>UIlK%E~~Ui@GL=d$>tH#T0EfNy+||o3?fB3
zIE@(QV|#RprhSE`y(hIzuUu<YQ3tGT1dly3*Z9Xlxu#NgAY}AX7?BKwmpP_U2a5&T
zMD4+#2e5H<2Yjg(d|dfs8FLuvww=k-?}@b;l`U+l-?r3gShf-qacU#ACVGZ;_v2n9
zb=4RsXe?2i+7S;gQ<a&KOy)E#selcz5u5Z|tqxXtCThi1b_oxBfsNPT<f649Y|fI@
zJ!KI@My=n+i>m;rn!vszbKfbQMe1ZW*%wHU4IG}Zf1E{xcsnw0fa2VwjXr@LWj<v{
zo>f)ytfJ&85cGMo1QbwIHUh{v3Ik9aXm{~ypIq@~v|twX-4Nv%oDHSo!GNFeF9gn~
zp$mKs7Lc8Ty#h>Ny5sL7NLLkDNz5x7R?$?KGFE_@JB7C}C+^;T<NMLZBQ){#lGpOW
z;HJ`WQ^xFNUDjJQHABilRJu*q)B*+FM0`@;$dqLw5q)$vfxREOeaFZ7W>$^XXReGn
zv<O_l5PSX>08|l@(L5`=br#jiARul#bki+pfhKMs-9+ZV4nn7OOD4v|UL4K{q<KNJ
zq(4D=(I*B+0w-k6kxX@sQ3{AsYs`^KRY{X>cV`pZ4H=`s>S{C*83_pe6174HbSEjI
zql8y9HYtsn&FV%A-+&fSF$Ka9%s^_jTI2ZS9FMWbX<H9*09jeSUWJ+h_Nk8pUwQ!=
z3|}T)Qqkr8x8|*)@!_S@$=3NAGtrtVms(%NWBiiW2Vs~e?xfciXcYt|4GeAl^<0p<
zgX`8=WCFkH;w9O!sL|?1X5_z&`n}e!Gd2&Rw2d*X6wf+~jf^P_TtQj|oXvMFXQQMp
zzmk2*+l{L!1q3JxC^v%(T;M)czd}5%1hcT~v~*k0R-|p#WD60FS+q|9_cqKJ^A<0s
zMk8r%-V4AT&zHW$8rsM~<?c?=1}F)T6Dq;Jq$>d;$=`eLx|gxFS=(N(V3W;A?xBvy
zBpt;U6-VlpERt17{J3ws%+`&r9cZr+RBWrOXa~1(g@>Ps8h?1*KlOX&06(}9aI#+8
zAsDZ^=BY@8=OH{hpP{U|2T#O!QF=4Gu{C9HX=%?qYold#=yf-JU;#JnvkJR@;sT!d
zsow)!<UbO_Gq>8uSw0^2<_yLa+h`SwlZ?t`T#$zB{%j|d{Dnqzk}bN(%>R!bkqw&H
zCgF(v0%SA&_N^GG7KpC#&UlOKFhgax9F6(rZLw=d=$b>fwzpi9z2gWKTeeAcw6@H^
z2gz71T)`C3PTf981fTmoFKhvIM}yWczg%5iRj%q4KRExTR;^ZlA)(>Yb*`TJpIgOh
zp<0l*ywUd5FATI-UbYWF=l;Jmo{;IET>;y_WqxDvklg%o@w2t^bEUdcYnnx;4{IR`
zJ6&MoeWlIEPfyyoJwBjxfhe{h-$wR%t4P#URPlD}c3T>Zq8+$++tsPl>p9)i>mo?I
ztX%9)b2=K~weGkg%h4E|z{Ke~JtuMsDnLfjOv3ymRLwpc8_urXm|fc@PAs5goDwbH
zWHX}$GgSJ?c1$*hTA|6fqZs>35K;uggtnZEnX$Cw@hO5r-Z^fb18>;kyl4+<D4L&O
zg~%f<&`n!eC2{eXTGG63pT`aw@8Bi=E*R1$nW24ceo`{D-<jd2I$;DK;=IOFd5y1o
zf@pptcFcJ?AoRgBRcCypP4nFO?-?zdH~E;66H&g}Uv`5|QMx13B}YY-On5<ROEF^t
zyNoh`Dm$o9i*o+>1b#}Nj8+ypWVbzHro@?@m@_94!Bi5BH>0f9cS;>Y5(~^xPCu-k
zuzd?c7UQnJc$~NXQZuhxl_rRK3~GA|#0}OFo3kHT1;6jDsLboI@_D&a`TUEug0ouT
z6k+8WK3ww;MOqRkV&08W6){A`OW38hgz<a92~}*VKwR;q!qwI*TP{)^xf+GqYNYsp
zgiA{yEM|e|e@ElQ_U0`?YT3xS7-|^r?MOZ-**r*($ijM@pAqXgZF8u6f^WcRxoGG-
zjT_v~qK&vaYL68clYQ<*B~hUGQ0;>#$w<ZyqHVh1%IN|&Vu^2Q32{;^in$yvw>wKq
zA2*9Ks6i>7XE4-5r|bjOz^Izact<eS@Wo|c4EWOOs37Q;F1!V}uv|!hqXK3@%aMRf
zSqNx;tFl`pT4O@DitJc~QVwregG@ieBc8r^zgf0gmSGlkIEh?;id-CSkso_d;Ib50
zshxAoG={}Xa(~y<#sYK=ldYDX$(_A@Ag|NoV(M^4@uaQL3ZtqaPS{gpW2i{;r5>Nl
zLzZW+eJnS#_teES9N3;V3402ki*Pvv>X=-D&w(O$c-J_kjS%+8X!0qFeMMpc{#>2c
zXh-r$i3I8nOWcH1Y8a+vz&D{F5krfS773(r?>Ajt^+6P&cAsZ9db-3IIF%P~4&J^t
z(ksBgjxO#F_3+vD!T!$Hn?DVcT&RnxV|vl-w$SMWEy`b^uGeo~?M<x7f|^c%t>x5}
zQw-Hn9J}kNEk?!Sqtdi$VqD-+QQ6)_n(;e!ZXmrFmabv1$M)&e-E$!6h_qzGMAI8L
zZ7GttkFI$r;Xrx_S~dzcLdYqS<&Rgv9W8((BI%I}t<$!Ztv0fA#j5_8d0;{dK1Jk(
zNq>$V;f7i8OF+aj(b!0A^1LE-H@xt#_TrX>peaCA_yi()#i3oEpYTiJ%8f1x=rU0#
z{uFzd|5Pm4UbnznRZzT8BmCrs1>Wt-Pq4~T#ilP-vFnJ-BRD%U+Oo6+{mVriVu*QL
z(onzA3<_iOD#D@aJ9an>oYzi(d<i$RmX@yIe~@2-kMx&i*t}}pVp8i(Wb!0<9Gjn`
z_D|2Z3dNO5vtkv0GC%76jaLx?Qmj0mbx&Vlv;~K@A`KHWGtd+A8|Fk<rw&Lt<XkgD
zjbn2c=%0$TGVB2}HC|K*Gc;v$_=xQVMgY~dJ_54#^&yC-){)}Pk}@^{J3Uu?_BZv{
z(o^P6sfb*Ms&7of8nJ&^ny5)S3Y@1C;FQ#i+h56BrQ<yJbYB$`HOXcP{B83vYCVlw
z(MFC*F458>kQwoyLW%2tejB&J0gjQiDW?kRc{?n?6ny>s1UfM&>T7gDTS28*DVVTX
z<KylLkj6G<Eg=p;Dg_Ln!JEMN%x4owl$%Vl)DK)<ad)ILu#v@MhYe(WXuQqd$Wn6Z
zhbd?n(Y}tnni;U8B(0IP@1x@k4oIJ{dx!oo=s03k5V+s=`$Q$_1{Y%y(y90WluThX
zt;C9=s)o-&VJK`}Ike4zH|yH$8M5?AI*SZE)S`5W<BDOGc7C|OGIL|cBN`q$TxH{u
zi!q4O|GPkUT4^B3uv{5}<eo+Ha8FEZ%3-3srM~hrFb=GXn=a6WP_<sTT{D?P!h^6r
zXMR*H<2f!qaw9F%s|J=%ZgK|^%t2Se%X8sP)53Q`vv98=CqkBn_6N$1&TPg;X5-oc
z2N;{xNZAo!h08b}E#;&V6$dRMd4h?hn-YQq%$7ZLT$pC?<z@cz(g&oT;^7eOOq8qo
z>3ty1heRcl-fLn~?Dnnfxo<|Ted1zObvp*ugbgHBzRB?++Q9W0_oJMx!65KqCPVhu
zbR6osf;)jg##<r``162dpbsQJl$2$L(KeY~Qil4?m~dOqqT|%}lhG*70iykGRH5|_
zBo1m9;ENshpjv@za0d*mb0^YH7rn;qXG~M}hyNC77L|Avkt<bP=D!i&PJ2UaC%HwZ
zs@aaSZTEVocITtMfb2))?dVj{ZZES0aTXu5_{@f`ZO+QfcAVM8%q|%ul8vDql`ziQ
z*?iaPY`kI{&Tn+`L-(PbNHm|ekZzC^vl%w7cC?(};Tygf0wLj!q228|>@c39LOw!i
zLivQ-b!=ZYbnKvW@mlL9`f=c@7yzTk0hG@mLdBC;ua@Odm@W;^H0bIIl?R)e&Kt0_
z^nZT5PpGW3v`J?WT4?T5dF|`cQkF4hk`(oUNl|2`nUwFnq4~n1+A~&g7H?2qI4UaL
z*r%tX`1EW@+-OYagXsbjHq4HKY%Rlkv%{9PQrK4T#d$2!iS|NfH`_&pAuBa=X<J$f
z;tnvEQMNT^;O_gYNKAlIXx>WdMBQG|KH&|IAb~dG1Uq(QV?sDQ#o0>Rw2E8ybJhEo
zCai{bZ6C!Ti&@5Z+E+285siE)iE*PSxT!qz(|(|X!|djR6`wGOb;y#fx(kxmQ-EHy
z(s9*{_0M)-C~rXcX(&reu4?L0%9diymD$xrOU=@AM|i^>d+_%+M}jl)R9T$Wfd9-#
zY7-K>wMb28ZV*N!8|iPvAJK0SCKD~AN6+3Leb_(Pd8Rj1D}zXfI_-EEUn-iwT@?Yc
z9=t~1iU6qu@Il0Z{$25Y11{@w&(kB1Uzl0xS&w{GwFOU<h&VqXy735u{M@vXf(LNu
z@ubZUKXDldJ#JHE$+o<VJc2&6%WQMY?Z!LA;;^@6T|;$vq%FNG*49MI)Q)PAgN;>H
zpKqGAN&*~<F@d0>VCWP<#*qOpaLX2$OOd?V*ul$FbY8+S*{Ab_l6Rwh0x}Hn+*Leo
zncGHs|M`J*bY(qJxM|6YPjGGI3b4Zel4ooYhQ;|CdDKgQ#aXM)I|n^n11|Kn<k??2
zj?gIVbt`UIP`Z_yguco467q(c@1du@rw81WJCL!3dCy^+k8yppEUAY_#BmX^JxPgt
zSMrf%(oP9CG6D~_#XjXg<;<P&*bJF~{5I3P`-d`-i>NOZGv&vZq_t`@)*2fvVgnp`
z{}-{%o79f;Z-%xdx@%uML5Pg3XyPDiyPoK>5)-))x>!c)#ebNfb?8LO(ZDZfM#69F
z(PyFR#lCr=-@BA2e%k4S+H#=<+RRWsJQUFs)o@2M{h|vS5OZcZuE<U->b4WifAc?4
z>t&uML>^ypdBqVzHIckUUE9_C{n5(kGF_0~HkgI>SP5|Pn^~j)I>&JfL8&@1iiY%{
zb#vRL1@*`QgGXEVWX8Q8p;y^LubMb;9b`XIaDCfhO9d!Z!Sx|%<DJM4w$K9>u-PGP
zxbGRaWAgluJ*|y==sqw^$HRa>D6oL6>h}kz<QK&OoLHIiy(18bkRh}?IUEn0$O!EZ
zj7Nf=?_3A>)b_m^jf#qe7$<Gt<13eLvxeO2VUc6$(pShf)6+pm(Mxm<9su9Ga6Bao
zWO$Fk7F6vMumIwpdr6C+iUdSSjGs(3d1(o~^+Nb3;|5e%S2a=zN%3@ej#w7?{VPp>
zVui`RqSn8(1l`3mbYwCcXUwkuL~N4l(~AsjsT0psniZ&=0*{2}RJP}N*?|3FDkH5I
zQHCINXR|ChoW=Xt+V1rpMXtbwn7Mb@vE=Q7unQ6ycTv+6V>(RTA(?^up7r9-1NM1f
zo?^AM|38esp0cl}=AQTprMvO>J@y?v(;~6pm^bnFGYm{}W?rCAbL^LK5NEi+z$O>w
zmXK#cvmbxl!jD_XU^rSYV{e#GsyECze-Tq^E5Z#Or0Z6ZloS%0)Oo@)#(v}JP%}lg
z5u|vGI_QFI_d{}v)Wyc(=E2tx8@p0$Jjf9n4>HBZe#9iE5O<ASuXP@k&J8Bngq!E+
zVuD|dR&w)^WErt5EKbU{=zI<rfi7crtxt;F#COd0P){&~G-Pv8ZK!y1ap|lp<RnEX
zIuN2#-xSi*4Jf?qNYQW6gor}a%97K55yiVeQcS)3%=1AnWT9?YY>QSm;t3`*Yla^M
zg}HPRvE(Y*UChoBkc0Xr$C1Z26=^VBVwz)O8%}=oqdph74w%j#2-{egwQZ)G<Jy1X
z9*JswYyTdZ4jWPb(!~?!`Vkg#8qV~lK`6R;?;W@9bvSH+jz4i7Qfz$cwp+_L@VMDz
z(XySba47z6f;$BYCvxSPFkpo$*X+bRQm{Q>dQt3q%Z230Yj9)^^)>kT9rn`&!9lic
z6O!UL_`uqu9x7oH%H(~2Iq{5>)Y>;-_!zds(!i`4z>9~ddUfHC1;P|8iK+R&$L4-_
zY^J>~J!Kl(V(NAhQ&y;5kP`5zdumEoFtR3{C<4NeX00;Hs@r6mwn%fAetf>}wHFAt
zzNCNJmQ#{G^0DnmQ8az-%VPuU;|^m{JIk5#NI-oN_`?B;L?**qV5-hX++gPf?`XsV
z?ofu9)KW-=<vTQ^QNVbu8T*NPswzmnAm*==*jo=(vy2V1FOw<6@~lY|uso})CSNnD
z0kCMQE9R7?5@Gj&Gy-jv<jPvC*(Z+ACr`|5X2i1cfc459OmV2dpi}F4U(DmlE?CF8
zJA~BpP|=kJc-~O)R*Zd{yzvPwRpf9mVKnKM*l#eNj2&vDNx~SD5XER~yD2c*Oh{Cw
zn<gp(x9$+5<igl#{IQ20dudwX-7A{h*R<t~?;vT(!m5as>HVvCv<eIecU3obNcA;`
zR8KghdP#>=Kg%JN@fu(98jZ=glF7shE$?GzqWhnlbQtvT-0)o;20et(8JA+r#X)Ec
z$-~n^m-M4Ql|t9F*-#cktj-FXHYdach$c+{40ieTseg)w#ArjKeil@U=wHkZjrd`9
zFydEcM`{9qb|h!VUi@*0ABXAL5s`iE>rai#NE!KDxtx1pXOO|EAcMWx$$<Kz(m<%t
zK%R7&HaF&odSWuGLmLP=Ee`S`EQB9LJQ1>zzw$ugaiVR%KY;Fa53z4-gV&1=-5bZW
zss?$pL#C%Fhru-2?zw=yH+bUL*l^n+_xA5VC86;6?+BZXrtLj~nOh3d=V%hTnqeko
zK#<h5fs5T7xKQW{k<eDgR9L`0K8`_J5Ci;sp6UYgQ}HLWI7Cwq$X~~nRc)@<s-|UG
zwYs%_65DJ8Z4_b(c&7Mt3s;+BtH{oYPL`U<!IYoLrHvfTF7Fw!JE$;Uk|j{Ewn>M_
z3JGA_25KchfG7`l+Sipd4WNT3#<7Gi;#lDyxQkROB5jme5S*gHJ#c<yHo=_CS2Q+&
z(_UsCKCH|nY6F>shHN&oAu}f_o18Z=Q@FHL#8Wf4;njm@`pX96baEBIhW_ukcz9t4
z10{Yh#z!<ZpSS)CtO-B+J+}*E1~f73*#XA;r4E?IqYD>UOL2$Cl`)G?S%4a|_?sK0
z0RHEAcyf%7u*B^8S0aw^Ny~BY%K&wethHJYj^~kAPo|QmMBp?NaW|tlWMD?*P5()>
zY|#dmUTE1ej3;dhy@}yD+s)N_qrPcXYmJ{vL7Bi9%U+o>u!x(j00WXzJP7Ye+sAz^
zD(O>bxu9KBf@@-|z3K@jpzg&NI2N+x&?yBJd$WZ>slr1M{JZ6YPB0#qPC=k)ciA4M
zc>_;M9`mA&ek1JYN%+o<E=uHz$35`?c?a#^oYJ0oW|&*;1Ed{(o;>Ru%v+4l2I&5c
zqEUuLB}gg;!~<!FYlZA<tQn4(YwP6DZlyD0qp$3G_v1hl2krO+kf8WtkQx7AG`bm$
z@C;4T6{JnaTkWLh2U-9PUwCObx=V&<Zqbp8<kZ?=cEZGd9%rEPQEcO>-PAS(<Ndum
zZ4V|k1u5_fEw^}9Ogl0-Hb1p5xiLaL4S2kL(vHk`QR%?kOIZY5;hNu%O7VF};kqu2
z04{4g#-);WfW3G$w|FZ*C6*J6%s!_VGr0{L8^u<O$uYF6u$gdo?U<@F1G+Y<{<s|s
zs3ZMT+x9$8gr<{nU-XE_#s&(EI!u14EH&P>uvOTat%sJzxJ!m966`Z33@cDN`XUv3
zUI9ZF`;-(;9S;NltvFfnDD8THb^~&yRyvG8uR<P;2<t3>S?rF>0V-_^g;$&0Q_Zt>
z$<UhFTXRM9o)xQeheuViJ#-I>_tvt!(ttG39nn<L>!*ks@CSL&N70N*nVU~a4o~b*
z(Qfp>qo^WY*8Z)dFIv;Rb)`U>Rji!t`k+L)1w{L>lwaT+2x0+%&dgB=7LnsJBgdaI
zN5BNz=RF?}CgFmzZ|}o{%)b#{xy)(!wgXKpo(KL_5hfL$z-zNV%fZGeOyiFmlp(wT
z<?v%7OIgc;SNC9s&+zrL{)ukrk>7O4!vTJ{h7Z?zp{{@B$xnJ2cI*#7vZuCqSPs;E
z(pzj~%UUr%x2onf{3ARfUnX?n11r|5Qh3lwdMJ+{6Z82DYU$C==A@emGQ4tfqLt<N
zqsSwQu^deiTH=$fJ>1(hCK~OhS~N2SGBT@rnpxH7HkH`UNp@Fh;{<I;!C2OjQaa&U
zs5Ms%GLN;h^3-cTdzH`nVNpuE7Dq!<Cr&+fmegAL86I;_oThT=Cr$_L)QMA1o;WR3
z3sr-p`CD3eK<OfVOeK+6BkE{JkwWclfD5b*`r8y#xxdtYE?ZEv%+V!cSY@5Oq-DLw
z)<h$9q%t!vH9wV?ZKKc)6Y;rmmL_fR>9hGfhiXRaRj`u=oz6$v9C~<6p3O@h#RBgF
zED9x-y(#YddkQr^n*HPw2&C$(v?VKzqZy<ee!z2>=+m2(-Y(J|JSaEN>d}R6e5=`x
z5*S-DHeI6Dc=gG>v_agBVW5dSj(1du!z#%zO59JDg+FNfrid;xu|3QgZXWJ}VKe63
z#c>6@u|;r(P8|Ct)L77<?ed+K9z0RV#ZwRfS<;XnIR$lM`houhBl9&z7EEJgp2o=B
zJVq8}FtSK8GCS|+JhG_iN9W^QIwR|(8CjHMWP+D4W)@6hX0FD*Z0)TxBQx_;%uGAG
zA11fYPL++b0fvuhGfswgtz`uV8S;&DcBGmvUn}Aof7b3vs@se=+2TZ+S$iIZ%>hL_
zmtXFs`6V!@fLY^v#4ppW>S-Ktk8?!O%MDNgFD6x%V&pea;-FomDH$&_+yeyE{36~(
zm+_^~Ya!k;0da1(bwDcMThEQcR&fZ**dg9tci_DR35-5%GlNog4mBprao4;!!FWcj
z?yhqd7E_B7Hu!bwOgyw>OWC?8MeQNp??qM>JZ2il<7&}~PP2a^V>|L~)k`y%Rx*#=
zGt|-XeCSosEB%i|;}*=QBKM6+d^(^{guwBX{o6ASqx@$uPrkTW8`sRFxaV|Tn>M1=
zgi^7D3>>ZMObO|h`#$*?71+BWOp-`tz&Fze&eP%Q=t`R`bf9NTZ2Ui>jfwYryG1i_
z2B76{<MvLgh)OBBIss{Phe4}Y3t{bc)E%l+yaV0ErQ0g*S<RJ7(`+<WE33V-RjaI+
zwe?D~Q?}MBt7Uj9*PE5~a?PsL%1sMj8<q85tp*?Q*S1w#g(8i56@XX`i$GOP1?Wv-
zuTe#)tF@PFm1d!1RT?IOGn?=LC00!ff2~**Yqwc7>-cTE(X3czz1l=5R%Okst*x5^
zjD*;zA~0;}8UU-6>jcUwHyahJSH^BohYH(P18Z4tRO+Txh00gp721LjULq)fxI!PX
z*`3wOS{X{Lo7O4-t*ue@02X_<yRr^t*K3tJV5p8zo0S#drvR*8gK~%+6Y*5ojUfW~
z`uZw#WWBON#Q<~-+XsjMNae-~b+*#zLG#xU|7)FEmC(O#*5M6Ny<!5Wb?9SdWmiH2
z$d=W__A~&o02n%q<r`R{ZX)0^0WKrtGC?jQXmcH5tz*{!bQwUenFLyZLnPzyne}E9
z$pMgJB2vnT6vW3GV#dPJX%>hc5Yj3(VzrD&F%c<cKnipL%OO&B6_8lLD$&Af4Uhs4
zIF4l)M`#E(*D`4waTrY+Mi`hT5~78#wQ{45AL`Kh6=?lS0*06-+G?yI&?ZzyZK%O;
zLy2{G0OVXkiq#>Kwm1!zkr<H#vF6oX2?PKFk(dOW=ENEnfl<JQ5}{F3)tN&rTt&jI
zvzFIPY#=rD579~h4Fp+*;b@xF%r)$HjkV9jhF)MJ3xpXy`{03^iY+YDbdgX1A`Ti5
z%PN$p5seWE5S0-L5S7uaSi@Pe-a+CbQXt|YT0jaQGArx~aEO4_8qK{9O*F(<eFdo;
zr*H#D0}+7zrzy8xw{VPU%GK7Je9Eoj2sHoTla1PJHmg9hO~gI*yo@Noo&(u8{#Zkz
zqfxMUzmZ>1w~1fu3K&GFNbEQ%cWG8YhGqvQ0?jm<2sGD-M<EspNK|VyCAJ%@z^!V?
z3>wW<YAg+agvjSEq9f*dL|QAv0LnD&iPmHG7*j)GyS@s@H&<&o#n&3}xQ0wpz`Q{T
z$>0&>g)0PO&f0;^R*_$IS|o1=zIwYsClN4E=kJ}*uqZTFVBNoN73(VvSU@0QO_vkm
zwL1c}Ei*8oO^2v6YszkHz{A3aSlx!z*nr>ifrP@TfO)7n0mj;>Zde=aH{s0W3!N>W
zW?J&ZU9v?B<NOr&YAeXa>sIZeYyop#fpM$i3_@bViB#)U%d0S-SCROTp6JP{0zZT=
zwJP$%wKC8(6u~d})WL~h0h|Ud0qe+L*BR4Xg$a#7nvB5#39aA<V$gNqCF@uiNekyM
zvU|t|)P=MLY?raD+A6UotPAJZI;P=Mr-?LMHP=^>sp52|r!{C$p;I+iU~ZSO@g{Vm
z$)2bi+qG3>K=tYhEw5DoQpZ(9Am&CRmk7Nsj_)#h?1zmW`octXwa5GeSLFi-6A$@+
zqtfgFyIFzZfR+PV%qDRF;=T0uV!eaORpJ}vCaoWcSSVNK<p9^T^x(v8vT=uU<yyV4
zU8@s2s{uxcKcm32YAUts_?a6uRY}-YiJD1qy|`ql`W8{}<YaUvVdh}g)$qvQ=-|y5
z>^_0SH3He^>M3AsFH$1KE-mpm92DH1cAlc_veJM_wQq`t5?&jF)^fE0dG%+Wd4YOy
z4;e52!)H*p)rjGgw6vr_$E1u3eB;)m%K{iMI-Uv-c=R!1e|eM{evP2KRFS=w^xHiA
zoIdai3E0I1c+ad!PmJz;Y#P>rha{M4!UCSNXB-*)S~`B`n7>8luaW6^X5^W<#;-Zu
z(6i$?v_o&AttlO%e|BH=jodH@A)3(Xnvu!Z5)Zvp2!GnD!X2gR#C?EM-;Yoe8>rv@
z8<p_nZZ6`Ablw%1P%2LTtB6kdcij+lJdd1`Qr8P8=*S9(u`%#AadWISLo2e%qhlG{
z`#AN?t_M19K52ZZU6jX!HTb30?7FZL-3jT9MqYgTAa~<O+a@;cL<}f!pw@-(Fuw8H
z7g2?Wdp9rW4Tje|peJgpxkb-tf*Rvuw5~N5w?5JOQNS=)F#9*WN*C|Q+Nw7*Vw=Ak
zo7?@pj1S@1+<E#u<HP5%`TX@x#)qx3`CG4%@nLUl?mio2eE0|-_UaiQuEys6)9s88
z*TA5!{+sdPa%{f2Udi|{9Gi#HS;mLK*!&P>_2Uf?O?N%x!#;XPKh5~i9h+zVb;gI@
z*gSWfj1L`{jLt>I2X}1tk3MI72=J<#PZ=K$#%9pW`fvsx*0Rw4X>5l7`H=D9bZidS
zv(WCt{PnDi4;SOH2wIinh*J#xAS%=DDLWW)T(4D4JSK9?KRIEicw!dMs(2w)anD*q
zjTV#-vIu}IQ6R|!l?nFL0L`gTMNMK2|8>etF{*JzzQ*N4R5wBpB0)d|iLX#w=T9$d
zYipnafhJci)EZFLD*sx*uOSFBg&L|}sOt%p1#4crDW2fD>b!n-E}YB2_sYY8=qPrQ
zI!e7;UB%wj>h(&aU{yhg?r@0;dPtfQJ@L+2>osUjtt0zikoln5m?=zQWEb?Ag0)(Q
z=QZdyG`=<&g<&~Pu2LG-3rMO_SKSF+wPE1wz_C+ZEn;e!GSHw}XXui*x6&xAG&-ab
ztfB>}4z;rX51~6N*c!+HN^rFU?+qA(dJ|f;R%QRcY^+r~SQfHDDFjfU(xDFQC1e9-
z8M|YFNRKpuio_o)jhp`ZN&!axWuvi{3F(g-D5<EppfXS+OHCOYTLWFXS6+eElvh{K
zMg%ysupAU(1|2jXfI5QNYF43UL6$0vaJdGebph$JP8w5XrH5uE&`8J-fz;SU8&s27
zg+OOPvm)A=(5wh>nyBws1*#bmKntqV16olo*8rOZ>Id%v`=18Ro-%N!=s%epH%L^5
zt-4mlVI!C^x|F*3P$8}X%>`?P{jU#{l0Q^XUEl*n<6JGTRS^km_;;-eL$%E*Lhl%k
z-}(wCp#mRu29IXTOx5<vEGq+2EprNB#B<Y!JSz>xA7<!+wUPrU)LM7buR_CLHb95|
znox0|J8g{NJ&EzAdG64|bf?Q%ZiiSdC~}QL!<xdA7#r*W4I^0>klhxL-4+C^3{h!k
ze6%b%>dShK=pFcN8Tl>ROUsfQhh?;HA;T>QrrqO=9TC@njP>u&>L+nc!u(*$6zjR@
zikzHdn5s;&TGhHIys?264q7!70!S_nY{e<7D-Mtqu%jyOkC2H6e|5?dM5+K9+mUc;
zDuPoho5XlQENl&^2H0M`hZPj4mc*i%Ak?y0uX~f_l6bLBNF}xuN*qNfv8HxU&<~#^
zWjRSCk%e-O#H5%c)bgrI#-W%ZlGx>ppgx}F_7Uw9o@4^B^eOU4ou)pLRwl!pnPJsy
z+mrzO8OYJ10zgxHLWIfU*fRsK)fy9+^&D(97f^z&?%@<$`?5w8!^>*(9$Ls?U{}^)
znXlm_t~X#s-?or?>P@u2189%~5S4Y9<@G--5IR<|IVjd)J`zZfZ4u?I^sFjU*ebBe
z&Kl4h${hIDT4TfnC5T3b`3%eMIq0|#jLGSI%%qjtYJ(;L5O?-6`v+S#|EOmVcbLq4
z0VoFXsEIRv4F#Ge{%x#XHr8HN{{a2~B)QgvRQd!A623we>nnLR;J5*?p>+301G#Ad
z!IwGYG64rh*(tMHA%VV?>DwPD@q(-a^RwFQ;I7a*Np1~VuW%IWxVF*6q&=fL;<i^_
zZx+@8#41U2yjU_<NU#{30w(nsyXQ5qFZjT+@A6jAnC<0`S>N@BVQQ$>YL;cLt=4KL
z5JkOV7AasN26U$hzp{pd*r?;8x5A}IopN_^FxJ*)nJB$_Gf(ECws-US?$ArEjO(kl
zHPRN=nk06v;J8_pS_dcqCIwE26~faBNgccObqm<6)k7=&I&shrP9dv+T(!Y-VfK&!
z;fAq=sm%)X5yf>xL2spoY^w@0rw)}ga4A8$!d(H8J1o<}h>Vy+q`K+fs)eQ2VWI)T
z3OF^{Sgw^tJApA&5hAV^WJ0HD59<gv0q6&+F09aoIjh_%Q{{Z0m|78*vGNt7Db|Qx
z=r}b1w?$YhP*JFtagSsT+rXqF?0uQ4W^EvSqqe((It4a@R!w+Y#eEkGTTrHotE{1v
zJH(3DcyACQRZjmJRi=|z9SdtOFtT4Oh-QWy>&=4b3U!^TuhVh^4d}31Ekb&ku+Q-X
zymAHE*NRPYKhT(kKPbHy)D$Mr-}HgM7pgX2e(774oVoB(OQbX+(X(6<wS&OF(rp%N
z4L--3>rFPB>ckRPaPBf=#UzPj1%<Bae8LrW3AadLPS$coL@cMU!XC^;kmXi)n@Eeb
zmF8rDB}@rl*i;}3hM}8$24tUm?%B2LotMv95beZ_287pE)=hqff-#_KjTjIpinZ!m
zhw57=cap-|8qOXZsv5SvO2Sq`%$vagQm-Sa*H>3MC?z#;^{bKAUTEOXCBTM<?RA>%
z7BS=+m$|BIhm=f@h3X-GmiZv*W)IVW=h;@HQNVwUnn0ylTPq~ekcSffF4{Nd!Bm5h
zN@od^(OPUWA`yKejWN^BoHPcrp<c(`S27t9InPTlOwOYYZ%vs}iny&zs5+ZaL>)D&
zF`J;x$aFqEf(ilb+8-q2W!O(b-6lktaZRR`dh!5-DPvlhPkTa5Kc5cBSD}1i_s+^;
z6!;(0n&bM)TGcGt-M@z+U(6e9F5!aRB&$dj7&WR3HSv%72+0MKjNoHI829!VW2Hr)
zDHti#Q>bp~X_Svzf7$MvpK^OJ=w(PFD1+3^6|32(W7EmtP&=hDh6+F#oq?VG0i2J-
zHYt!OA46SVp)R9%IDJ^j4p^N{Ylg=DvBrk*JQo3<@v@f`X#)>ztfJpcwc4cLEBJc_
z-Rzp^*6E|?YOz1;Med+?4Ug>PA3Q{E-w8R>B%?Ula$#|-&a0v0>?94HPw?v8E5fb?
zguhBufzz^p!dYX^c?XTCgPsCw{`%?+yeu`9cG1<KPHj*yL4$JLJ~!V@<*{@cEUD?Q
zSF0A`xJhd{O>*S5lRB4SnV;VJRnd6jA@kc=nAuV=**8;r%MQ3@bhpO3OWIr=sA7e8
zIDeIuRnNDPuv=@?IMJ-)>P1~v$S&3Ayd4ng@m0PuF(AM9%;nRvm<_v%>Z466pb!j6
zd{k2~f$WXe$}Bne;1%F%S*w^=OMtvLeb7eBvsJ%mHBcI9)K|CEZ>umKuq<0z0htvV
zU9PP+Dz#*p)uvYG3MxwY3lv=jEl~};XVfF}(l~t1mj``6Eh}5K)m4xI*I`X(%H0Za
z|5}|$Y#VqXa%ZThULzwXP|G1EHrCMGS0~lI+F7ZR?rd4;NLWMjr`1I3#|jcIP$1c#
z>wKc33I);(DPE`#!Sb?NCWlGXO~^%*3~%U1Rz*b!$#Q*#jMLUC*04&Btn_HD;>x;0
zb{be(YbXz{tz%uyIw)=AK@63WnXd{Dw3@Br1YX5V7L#sS)6jpeUgmDsWvpTyeiK$d
zPMXgd78zVg*s9WCD@2Fs^=p#9Pnynrg`aV2b&eTJ(iM{>>+7>@a#H7ab2|@;Lv&Gg
zh8Q&@ZAw4y`KONfifCB1nf$nds%2x1)(or**v|^;$G`-T5Kz<P533dH5~v#l2GkIm
z3>)?MR|j3k0d3G~+MPgeL#x*yw?mjn9n@1%?`>eZ_<mslT@X>@M^tv{0e?Y7Knw5@
z)gIcVMdr%v7wg!>wF0;5tuuYNMv8llHWtxrwT9b|O`>B`#tTShWNW~wP-S)lqC+%A
zpi<pKdR)h@t|I|9&^%bCDx37D*0^j?!z}!WZrEsbUd3PQ^whCP3PeXr>{bnF-dgD)
z1}(%7)Poy<4YosBV_TJ|)uSyK0WkzLpl7R~TH-PYldw~xskcr@Z_pGX`%7nyFitMo
zYYYom9r=L56In{gLlb9flX?oYwbrBd!Ekoi-YpH}D#J{T%}FLABhGO?(o7+v4*ViX
zkoHAz3sY`p;v~k$GTYazlZBPis<iuy?Z@GxVQipgiIx=BF^h(`$p)F|tEQ6z{kkBc
zV7!fZQUhy-g|df(jmIr48tXMO)ijvJ1nDe9b5ohW^q@_Ii0%3sYWyH+t$`e~LfZ}a
zv|0<HA5|Oy#O&&Bqe_cchZ(x?SB<CzWGg}pV5HgTkolD5ARlx5%WM!hp5-+{brng#
zT4(#@c%r3mt)i$$^oHbEBl}UUOs4^eDuE6WgUorifqPIZWK=^vwAP_5cjBWs5%3%Z
zp4&j~O=C{G>DVx45L?@=ThPNbw(De3+B)sK^Br}I@2$VY&3z`<VeK`t^x>{EGY;-r
zYse8mL?umQjhVY@lqR2$=U>(<Ou;CiNL(kIJd!!LoB-}RYcx@tg&NT@sUZ0GWev5l
zI$P%&R4e|ik*ON8;}n#=WmsI@vMr2+5VQ#%+=B#nCwOo|@ZcIGxVs0pV8NZ>?$Ede
zcXxNUhVI+RyWg|V`R@Mi*?axyho{$~*Q{AJYm8Cdt0rC6``0u!W;m|`<gfYcc2o&)
zt0Q17_SDvIOF6Mc40=T{bqpL*c5wu!U(pE`e44m}8|$8jW9l>iVDgl!w*K%z@bFt2
z9ED*+pTyPk?J0ir0|#e=@CY|rH!=DX8S)a4gyfk0u6|Onp;z|ptBJNc)fWW0>BWR=
z@CijupO^Upa&DQm3%}mkED@fZ665F|6Gx8Py^JoNE&6=qv<57F60#`eHJ9IgxU=Ry
zSJW8-qOz0(nQ327n~TO~+3V8I1tY{Dub)-G6uxW>0f?oxpH#T|bYwnWO&P#yJXMaj
z@jg3EYp7bzAEvjATNQ6`K6%`sLWoIl>N7Wh-MPw5DhIyT>Ic~v<`+JkR-C1(hXA<_
zQ+RQ6*FHpP{Dh-IpnBEQ>Zn@TW%Kxgu!IP6gHl_+9@AI9bqmu6@49nzuqJHlbJXD2
z`keNC1N<Akn+=umAUwnuV|U!=569Tv3-HFiz)o{Lv0yN}Yg^-D87>$cG0u2DvvNRj
zVq|(m_jGtHwwrDVHcnSw{Oa^cTX~||G82@IPb1=rqxAF@C1#>*nT#a(+e;DH2&8q;
zm)x*}lJaPu=2g%deSoOT-LA=wsc{(}1M70(SNugWxX<NU;_xhO!W1Qx5p1HqxZW>4
zBMy%gD4AN!0Ku_}CJj||oP@~LvA#)oK)&;g{XVWqK!WQnDrCcUc3c@TjC=uO@SQiV
zaCm0#n5S@u^liphO6ID1@3n4V(tweU@c{0n8Qwxkh$5#P;kt^Go<N!Y;@Ua(te-H%
z?}LzcEyg#WtQ`}@LafZoOU;4jXPt}h35hq?f|qSeCbB<nUK03lHe%H(#@vFxMqZWo
zN<Ylz6)J*ic2afW_~l5~^t&tj5lIA=MJ%0J$Jp<$pRg5U{YhTx&E9VO;>ETn%LX8k
z0uZh0aKpJ1tIMvjydtkm1V{8XWrw`i5}D5JNi9HyT8~@$`)jNucWw2gh4~Pf)@38q
zXNLZ*)tTF^T1USmkm{M>!A_gy0UYyP_U}tjT9-o>z0>~j|1TMdHRYWe%$E8*46Q4S
zu83RdpK2t#hotJ0ZdvN}BzG1cGVoM0a7x{s@E|V>XW+iJI6-_vR5)%(+A44}9u!N0
zbVN3q5ZC+(9oPIr7{%$e9#_RkED70iSsTK&-OxB5iFMByQp(AC-O+uW$Af9*LqKNd
zUn;cr?_o$>UVC*oy@E7r&va3rGH>dx<5KaQpEVC*1$(?RklKFb7Nvf^LHyKh-S2SU
z($c#MSv6d<v}`rD&L6TL7gHDt9M(gLO04$1GU`l8l9s&rQUB`*m9o!ZvgNLA$jyCC
zXsd8l<LS4DA%~>PQ)O@!ZhlO(wKjA4XhWPD;YZA@)^#PJ0!&PGT;&CGCE(U@5b3si
z4fj$-O&KrS+pq`2rZLaQo+S5YgViS&rsPbBCHDnr<{F;E&M(3Th0PnLRKWacZS9A*
zFAZ2W*3M`Al9|}or@4SMD-^}}-MNp=k4BL`xHk|-d0`POya5fet<3U+B@VmVS?F$+
zi5)eoA&g7J?w5Hf^Bzxa)lwlNJ-0^B{ZDTa%Jlb4>n7<mn8EX1K!z5#S;>;C>jOi?
zi~dz|?T&|LakgUBncRHfBVPR;@5TWO&)Y=1MyH}D|AkwAmWXV3E9}CJqR)ChT=#9~
z2SroN8rnWCAxJi%6Ix;`MNdwy7U5SV=YTBX+<;Ps1SQ{$i%%9S{#-i1+_>2h8`a0~
zcfQ2@xm)c%zXE`cwAMIgP2nxLB?H7vws)|KZ#40eZHTYZjoNPr(PVP0J{zK0@~@3C
zl*~9k!^yNduc}M2vUzvMEP^XDgD_gEouvZxKZw72Zrgk1_Q0(qJ@t{!c<k;xkwTK%
z<B2pQ&Kv2u)2D)7%=sfhqVMBPlZ);{n?9Nt)omS~YRM$2CPByZ>6-J}#r^F)E|}82
zd^6kGM2ZNY%l};qRJYm*JZn81C@!f)w}y1buDQHQ<RMfj>=IU8#jU3Y7DHPZF<*K;
z>6a~BH*A!{P*`LZ)8h~!oOYa5VSx>&NC1}6LqK)iP+SYp?M*~g#S9WT=g}NGZVgjw
z;r-pE1CE844x?uuBBF&4GG$E|<$XQ!R((+Sgdh%9Vn(yhMc_l3ihFgjp`rGHr`>|$
z`Hd9{QrDaF+OjnvRTL>v>52Yb^Zh2fZ9ks%4)$Z-KBNIO&KNMP;~LSYDynyP+DSM7
z7e?zBqSaV^7)7KL1d+zxTa~@|p_mPHWs=7Wb?Crj81J&Duuo55I=oJ};}^m7=jHkz
zAZXAhdNN~$HfImekY5}>{cOu*=p+ZJVqA>gG~=~j#d?HlvK$$`Y;Efe9o8zjr^hq(
zL1<IH4s!FxzmiPOj8bUWh#u+yT<9M>G8}Isk4Nvc;T3fQ&Tb#zWy6FOydS%A)@s=t
ze`X_8omDpC>wt38_CPGCptJS0queePSMO$rPxJ0bfNL8>BV$K~=dJ^rgcG>&R(Z%T
z#CxA~w2!&7pHr@Dn(N!|HK8jId?TD|Z*+1aud#se^CUX8W++Qv(8Gp2UbDqrow2c_
z+4~GO<jX92agZlq2Nkk|p>7+|P#J!FcHqGXQNPGMy|zPm;`sRqz8Bs~*kj0KIMh?`
z<EHlX?MsOe!U1O%X(73LjtztIkAU1TkEKe9wKIb?QhZEYFTLw$J?%q-Pj)th_4}ZJ
z15lep7ku}XSIOoom(|1_^g`92A<DgN*7GjMpdwvu<&$&Wy)MA<mFpDRop?Poyyli)
z0dMU0iq78(JxKz`NzOhocpE%>nS^VuUHCjyM&V&FA7A`NkWI5b(h(8}Z_mk&*_q{l
z@of33I?Cy67YVSkU-%pSsdYE57cj)jM_*dw+H2y@$NC>P&N%}VoZaCf0Z_;8%KjQX
zo)=I(pF|SpuHIm6hD2|MXiE=}PIf8WYR7+U_`a7&*y29neYP^=^o37#<yO;=wUwFF
zA^A@Cn_Fy1dAo2i?y`Z?r!DB-PWi%>V<Gjwq7T29INhrg&hRG)1||_U+Ft_t3QlxR
z)cAsuR@Tm=XFA2m9J6+?jV3oA#>516ZJSgXk2fZ81l~0_{388IHuiS-`Hj-YZWTty
z+y&^*B`3PeT{||JEzd>nv?Y|DaJt;kRR#J59Dz7Ot)4^Z>CShz4+kn%FI#X>KCZg8
zHU^4un+;+Q%W<2L6TR5i(SBiO%y}(_+S#-v;XA39flfRI5VmUa>sDB{!ipkf%~*rU
zAl$nzA=vWRy=pv=_P=SqaYlHpYw6tDwa$G;tqUJk*0-fERrp~$pOp3r)eR$*vsDJ2
zltA#FBanGSr_|6Fzl*#(kKFJA6H(x%BdT!cjm62hQGbvP%h?p65I+8Naye`KUCJQh
zQ*BVaOflA(Kma+B3HnGq@q!osI%`h+*5vs)!45NV5&^h8)Q)$tOU$8e_aJqs#;13{
z(;rd$O-dG`o7%=2fqk>V>A?N_IpL8vNmmuDdKQbGyzYa0vNw9X^z5TadLcf5ikkjB
zL|RZ6YiGRU&^Ifi#uv$SQVC^<0yM5faU|~N2P-yjjN$~bTet>b!E3ziR7LlC2Eo%#
zvrY)`e(=?R4$@O!vPYkgu}oWTyI$FM@7Sv=1pAL3xp@N|RCpoCDhO|71-OJV+Jmax
zber5ejMz)*^rN;LTLbJmw@zreD-8RV?fmGjHiA};csIi?rq|aWpPY=VTy2%2Iyx7A
zwt960#4|^Z@O(i((f!VD;!eisRfeNi%0&8bSbbZ8AK!{2Y(v`$0HRwndvKI9L{<Qs
zQCU92qYj{~8v{H<Xv&zBvH(sMH#CaaXWggcBOCew%zB_+O0a3J!^j+X4&ZcBSgD$M
z|5%Oiz{DC&go0Wr%KEv{Qx33@>%ei03UX7~+nUqR&6A<q9YxpEj{;Mp$Q68C@ZGdj
zTpP>jZ$)Dcu1~F*^#t3?(@?{DZZ;49LM;0w7Xu@-xsGa2<!ig|^f_}Rxy+SE@&;bx
z_CQ@sixck;t=oM244*c;(55BT1b#qSR-1pY2CN+}b+jD1zRgfw+3_6j!uUM+cGJ$z
ziqSo6sygE|8KBNkvhn4MnGTcsi)3RJWo+4)PH(ur2k>`hi&8AV^(Omp|Mrcx_lY+7
znL<c388}Hu0dZ|Axbi#XACF=IvwT83tGGXVihsH0RGTSIDPASr$5r3u{TKN<wQIY}
z`!5~_=5f`G=zk`NM$kPKlZ6nwKG?BbpW#P?beE#1CV#(aEvz7m=h_6Qd*)$$Hall4
zF8jhXTVXwR+Rv|mZv{M1n?)W0GH3_UoLI-eI^4HjdTh)%%@hYxmi+W{wa{z44JoXj
zbAn5?2A>+lxZgK4IDB%A9OIYDRV{&*>Pp8Uma6Ef<xJ)sXHS`?jAv$_>Q}+wR;_)$
zmPX<*-Q|*dlz`KCq^W3_w|mde78_1zXudbX<KKAI_hH2uHHnb=9eU}LsVzEN++;oL
z@R3{rvVy!}KQg`0p6O0c%`(p$ArVp7%q=b3iguX-r*tOjFnPoGq2>Nvi1sB(;G0YP
zB4&rNGtPxVWou5>B!88bU+EqDM7`)}(rtXjz!LFIs@|ArX`Nm>;KfAoXE<GG^Nce>
zBJ<@}`9_4WT-~CV5YQa@nJI3#h$5iGTgFpVko$c4fY<98UlLE!9`{lok;xn0(0$<<
z4f5pB&CI;;&0}Y^lIP<<`OplFqdADUwarwnBs3`(w%Y>T&!7r&#`5Mcl9!Ep15xSr
z;sE1}h2KM7J%!j+EGuUeqZt99?tKX>JSZ^5wpRAZdAEi880|^Ni$E0x^tEpM+??+@
z*~?+JAvj1;#I<cq#Kx<F&!YUWb*4f1X(Kpxy<#{rOIbzmmFY%ylFuihO{y+o2pIqk
z1RvBn<6M%P@Iz(l(c|=LR45;vyJ{-8Py3psPmd**;38joW5R^^Igq&Zb3wcF$<&f%
za`{o{!C?z|Y8maP)>Q-lK9b?NwmB-R2sJ&`Tjgervc9gqunwEHiPDO{Rn9bNYuU*I
zJ9c6wFCDoD+QN3lerMHflNw`VW=YUm1xHA&=4O?NC$&$^TB{8{$XX^;V!45Ii{*B+
z6qIuYS^QV{s+*wI<K@AEru`e$JXHS+Y+VjOMW$ao{Fj^|9JVccqalU2H$|VzXhtq-
zf7Z8kFC%k=3!MB6U8!xJX<SltFsXCv&-sI+dm#^R5-f2a8C!WZ)a6dq;GgN*BZ;37
z8?tRK3Kwl=x?0xGK5ukIfPH^sy5KPgUaTwUEW90JDJvN97tZ>ycmW%vUG-htZB&<+
zf*Bv%_d#v+H!Q`C4QQYYQ^%5@Zoh1np8X&j626H0weWB^Co()&uzt(}8BQ}LpEoYv
zJ=O4J^e#r&>b`f;ZCBjQHr2-%gjXDi036&7&>LqUrQ9H{W=tGf7;g0*p$fWL9lQZA
zZ6GE(GoZCMO~!y2?%7xRhDKG|eOaGA1x&Ql0Jc$$$m>Y}%}-c+)O)m5Q)N+Vhe)jm
z&i%8SSaT)E<}ylds=j(-$dTCsKe|NkbaYimQEbp#?-Ck<78h+iI0Zbf4iEJ;?(YXH
zqAZRUUnf|D7B5<R1fsIOrS-dhWNsu7Rjs>n5qcu#oU5G@UBWvDEhlyV;vVm5s#U(q
zs;0gh+vST_Q_mnAu^IUIm*@pvgeZ)(7MW)Lh_y@FGS5tZPT36H?L$v*5&vp3J(R?4
zh?J5`n^CI^LS+c`xTzzE2RZhq|FUVA<2AA-_Xlm6+LeE?D?cEu_=`??%-<mf2TH8r
zc|qn9-SPjLda(YZw@vJM$GPX)@9F;^VR9?TZ9HfBNHQAa!CJckedbOj%xJO5Ga{O;
z*FcW&oSiP}%kJ1UenDO8+C*?d?Q5@Mg-YC&O!>wNl3ETsxDjIK6DD0GLLTmg+?mqW
zXZKuA8$T!$+ta(b6053dn03+ZEpN5Ro`P!CHn1JuFORu@pBs{9pHa@_?1aQVZ=gXd
zOh@N)^GKf4%f*f;*On3vCuR+_JS}1s)hIHTbpQ)z8;xFWKAMXq-}EH>@dOrmxyM%@
zo>vYBCK)p;m_7R)gk@z3v?gv>i6hmz!x+lUFHcjN&+lFY2~VwEofA1e_o<E1TN$Wd
zG(U8^WUj_btro?yG^6W)J^{&c!7?|g5L5IL*T<dGOH@VRdS>rI(#ywB;HwbbA7~@9
zEk+(*{P*~}^GO-*ua!4?S0@JS^|$xga=PC2d<;=;NImmLcr0Gw7(1`11LGc^9?L&F
z)pKgMSExIiweV?8vDo1}u7;d+*a=xQWVd=FLUgC5iOW<OY_?LB_I*r28GB3=4^usE
zr<ra2OR254B0f6!r47t4_d%$+hq~S3EBz^u1i=hoSjC--t?R1Macu?xEkTa3!8dRq
z`6E{F{@C1oYwn66yA}`zS+}s{VjfbW%IkRvCMfw*R_c9{$(fAm5i*LB{DOHE?Hqu{
z*lqF*Soc=&4fq`NUJ~*2L`PxJ2l4#K3JBt?Y_=T(PkuZS@pd}VKZx4W;d^h-+P@x=
zn{annKOZ*4e%43!kKn#E%R%nQI4{D>csT5Cw#RTxz=&#D3dfQPr#|sM*t*M~?k<AH
z?eXgEvmd#^Z!rL=`v>a|Zx>E(U(==%U=dhr_$#GAm4t4>Uoq{~-yUtju(*2{g@w>g
zc<}o9w@koZu$gWxPU};C-uGF2wweC%mnOJi-!S`BZk^fk-UP^EE3`pc(&XRoAOufo
z$6OMWz`kwJXbC>ryHne+J!>=Ut6$Tc34H&&=2<a0S7dFV?9%~VFV7_Z@c<RW-Mv(6
ziiD4Dy_h#cnB!K@N-`OMd#=E(u`YP;iyEjXlY^ESEaz7G3Wv1FTlY6foy{$9lIMEm
z>y(a!%8F-C(%@|?bdMQE&o3UDpxX`TfxhB7ze7C-SgL-0Mf^XK?SB(B9;y}wzCQmF
z3kHf0U%GPRyN`-22d)~=m7aYP-R%()i(v{Ic7CX`4~ktl9}~t;DFYFFWZ_%5d7bB&
zdRCI#oZsv2J`1unzhgQnCoSS`i2h;2;4w6VHP3j|2FlSrz_u7;=D%0}@nX&36`icu
zRxIdl{B|={8Z*0Hvcw}Hn1EhJGQ4<>K>iJh?H{|}d0%?>)DcInm2}8FdOV#*i5c9J
z>dW=jxx=Jg;Z#<`8+Y3HrZ}UcuMc(=1$(OscrD5n%6qy$;?BkN()0nm8U~}aehbE&
zv%AVO04h>=JM$yBg7GhKfqJX+`gxUN!*AoEUG*>33B9oRAED-PYBYWA6|v`y;Wh8#
zzDW@>+`@G{bUN2!xt02Kjv{c&pwrwD0A^x3PsSGZ-1z!jXOYSR*h|mJeQb8_MHm@%
zxvkqPO8pvSot(B*;YP%`9O$9CuzOLn4H+Ua-W9Oc8cF!AL@%!NefD?5@Mexv8N7W=
zs={Z_XItyWoHWQQPFp=k8ZSAcd!`CkrmmstBL{S&dH9Uok2`t#|A6@8CxPVuiK9?c
zTduvnS28RK?)9nJ{2-kvUm(6>C(>1ps`La0B5DXd$M>t3nt`5RiJM$tqwvrhy^z_t
zSq<e$FNs`dl-shcecSdIi1)fxKtGhKpoKu^^)>$cyGQd+K6(q?D0GKU5K#SD-Jb%&
z=@#I;Pkp1rB41^`ov%aq(A%*_%QocvES@DA;?7i_t#Lf={k({~gal|b2yb8OZWm^u
zdiNXlf%SjQJyh)@PThHg2O<XVfz<wTAoRkLe^8pUrgZ%>OV}LU`<4AJAysbd^-RuU
zpW;@NC1eE4+w`C&AMgPN`(JAsoT=Po%Dv`Y&VgK)YKjNZI<oOob-XPA^DX^gTvLDN
z!6kT%6&&K;kmQ-n4M|5C#Y{O2w=50<!vWTSzl(zaf;Yl2Y9t)sGn?O)K}h~Uqp<ly
z5_*TQ&J<w02Z0Uu9>^{Knal`UX8gOF7;~XGcWwQHr&<jw*h@Hqc>4~pu@-fCNBrbb
z#xr_$OcY6=wxgLXRQjY_v{CVh0ltK!Fnh`KOfm?M;G8&3jvX!%2_HG^=>92)0uDkb
zx}TrRFJmdXCAzSD_MYj^vy%$X7%UgjIEUa#i22;dNGILY*4l}1m(7#!1koZ$+#8o3
zPoSN!PQ*LNu>~v8Nws`=$0nl?TgBw8)k#k;f<{54lZE;l)m8sv*8fQgphXSbemoL6
zXd&dkWmCpSu+F29md*sl3GkIw1!%(@-!soTYVFq8(QA1TpHo-09C>6WY((_vYX4F1
z7gF<uqK5(VpRzqO=uN`W=;@9o^}E)Gvc(E3JPT$$q31UH%2xyNOsp*u9*^CJYub=F
z&ZAXMXaM|kDE~G;v7Wn8U2ztyr7X0$v$~0!pO7h=)KBW7S9X!y(b{SV7pAvC;oLhG
z1g~5c2YJ63nFs#FU9Krq>ZPA{stHh>m3K0pxp93E11*9%96dfQoME37B0&gpch?f4
zg9@<pgnn5YcAF)bAy}G0b}_)S!4=Lv3@>0B>VNopSbJ;=`M(Utuppa%+=rN*$uxX4
zOWZHHMv19lXL)|%w*~WU)6u7i;zgv0KPq~uz|+a$3#wPN^h#WHVSzMxAL|%0(9P6c
z>f8!&wrl;iiooqiw9RF5T1S<`2Jov9-jAorIBTv91GfD?nvSzq?6hx>x;DXyxeuga
zpo+J(*f2;)gUq3yIo8iLepSs~;ICd6?1zs~P6!TuK-t}puf6`D96kHdt;Ajp>+QkA
zu5k*^1W(APu5cbiQ{I8#&$86s#?`As7d*}D2iyKhw&{hsj%*x`&!%ef<uz=Y>G{|#
z*Pj@Lc@Z<1swzgc*~7^^od^QmW<fJoA5ZsWnVwt=;3nN(V~`I~WJ5ZofQ3k)Rg0en
zaAih;#N^Js{vz{8{Pc`NjC5Q025*mxYNuKJW?8%1agO~`(tl+NC{D74un*>MD-p6(
z{Tea#kcJ+!u`FT&le)>^>!GGZgD*w`lb$Kd_#$Og(n?3F6ST_`XgqQBx2Em>eRc+M
zFoU5L3fU9>BuX?)1t!V5S()1MbJ|(-B^;XP)`U^ioz5+H%3JC7Nk1J@3^l~He8>k`
zjpnxW3J3BLV~D~${T48|AX=6am$(NnGb_j%D|NFFEJYj%s&GA1?Ry*c&JQGrfPpF@
zO%Ie)eT}a<J4Sz!5<kqx9EJlQHwMk+vz#I-DSOH_FkbN+tZ6fH%Kd(WA%NH#13R3Z
z3(K6C@;Hz<A(4P)oUdNu*e|=^RE~)6xm?(mpIC45D#2ZPOdT1oR1NrQGQ+uVlBmG<
zn>vk_-FvIV`G6Nl&zGe=np1S)XVgBFO{C}%iZz2N!mS&}?I`dOXk@L!3}l6g5vQmh
z)!y0JZgc7^)j;?!p5_+Z=#JO5tT;7w>7+Bvb8VxBu5skM?i~#!?4LJg26X^uH00z9
z5glxRe4iZV%P{oJx1&dQs>ycx_Pg!2rfP+so~w6o3oN;x%vXXW_R7-8^hsR1#`1Z?
zoC@BccFZT-SEK4*aeLa$!c9;G*u5lijM2{Wdq(D$oPTYo{_a&^dgWQ!AB!dD6FQ@~
zUWN6(NkyuSdhOg5B_oRlos*^A4lu&9XYVQhY8x;jBV-2Pzg@LEqI^B!>*GZ(n<*#X
zoBSm{CZ>qmQt5Q00f{sN8F2@qAGGze&q%L&+%kTXcXWs)LMLuhp}7BNTEr#vvjgXG
zP~e~;=24O#{O4vSmAPpChIW0Xzhg1IGI#Q0_Y19l=V89NwCpL;<;cgolF+^4MBNbA
z#O<ri&TN)*k3Fk5NJyrd0V6jgz1fyzsz9k_Z>Nqb&1TS~8<3lbZ|R=r<$`)mc)?q;
ze>(eb?@Q%NSXHw9wz561>f1!KEnoT)yvu$4k8yg-UH3rTam{nRE1j{jKa-!8y~4)4
z>TjcH*q=d?6_7{w81^4bAH}W2^ku@8m5(R`UL8oa_Hq<4F*YW~N^Mp@c8SwY057gB
z6OeW6Dz7lLmEiL42dHJ=+zmn09&f-*>Dj?!&DMJ=ZR2rASIoGC>X*5XLc_NiclZ6-
z4LfHMi|Ln@XR@)3S(b#(4_kQQk_VGi&O1bu$FHgwa9?yO%-^Z~@igV}kiHb*i{8zM
z5$NQ<0u4FfUMS3!n?bk4wwOH-Kk^E33bRve0cQ$A(-_URcG?0SO*v3S-?GMxeR*C{
z4d+MUv{kDYi1bg|h{9+wd{1^9=w(y)R~{)xb*_D{^lo(i&$7dE{-kA*EOIoDTh)KC
zKT)%Uj+s`Y_3S?bU14zA&lKzLx;1~m!=`7%jGh^4Q9%zZBur|+tUI^K>nSH(jOrx2
z0f!r<xv9v8cl%F#F7aw<?=ruPq~Bph%4=v(Y?NHY<gCH`^X`8Shd2TEVq=I$@=vP!
zD+Aadc<9p*8zo}-RP$51(0;hsyg^`S2MlJQ&Y<g)akXxLJGPDBQrceI8IAj?Q{w_1
z3t<vjcA<heFzzMWoEI)}j8pO+urCRc!35X-q`x@iwM1~S^Pj9S8odme{`*U#7RzuK
z&7ti)HkEd&vW0ic@`s7ZC{)tP3T}=C>D3PUeG$qMA%Mr3<QjY3<YD;StCnN+m^va$
z+^zwK<5+Q+R3c;_#(FItDzHyws8JJE6V^N?qnL+r3PTxoWE?;*Cq1D;?mIe5911l~
zdm+0fCT3h)5}ARC#g?C%>EqVSuXrwf_Y27+ui=vYnq}_Ma^sEf%<m|;t<gj_-maLN
zG;7C+n~P){foqGeBx0oR(Ja49E6uZZ{XM(?o3pvFkO~fx+21{dZlOs<-Y)r=_-vzR
ztSIzr>X1Gwu_w+-K}sdvOTV)*j!TJ(R!gfTYI4iwY?Xuwm3<B%!5I3Hxo3t_;la)4
zaF6y&h#RP)>8177t4-i-t*${(j~~P-C};t`Xdk}&j5{Xq8D0g$yPLoS9ozZeUsfZ-
zojIlNd+&n3b{{xC&1eSr@A~+t&M*&*zLAB_mi#Y*Ulp?z*=vtTXu!@UCFsN0g)$=e
zB*6Xubv^MLNag=YcPHP1nU@+kJ&4%O41dirYxryX-Q?^fFQ-)F%=X4|`ecB9j9pK@
zMpfqQ?Y%CIPixCssw>2C!xW%nP8v2xqj7FB;SB1s5alfEiXy~8e|d_$^~04Ep3s<i
zy}{yH000!6>6SdyW41D8H=rDMddqqAL%4Co?M|Wp&5J4b_d#DqvdFv&bjD^89(%Xp
zkdTl<u~YnMFB9m#6}c;2HW#u#549VZviC1=e!6k<PtTk70@uynajZsis-0?O>0f=Y
zeE$A2U(p;F-tZ4*{=d`6f0=E~?v?Y_=u1%8itV!PrKo?ZAv;`dNjhshyHS1V#9nQd
z-J08o<s0YucipM0=C8uhS=3y(({TE`miY2?G91!W1ttdeByx#3$!;!Qm;sT^(4<_C
zV8@&=@}-P(1-|$`W|I@_Z5n&gPDiivDdFY6*uySShM(nS3_s#vn5m5Aoyv`)%}T(Q
ziYUK7oZfmr8^JiHR3!-V#x@P0pO}s^ti^P=)PTWm>2p+&O2)1ZOrG#a#<mxyy%`b<
zu*98Ov&WGtVJTr)9@9nshT!X(6B6mC>8}{F8E?zzL8V|J#w0xkhpD%Wq2sgVXVAl@
zw!UkQu_BCeYM}4O8Xm5FfAAdda`GVAg6(qhV%6Do?nj-cE9I`eJx+_Tqu|{aY}{S?
zgdQeDOT%x32AW!_K`ltDw8VFw**KafqOR88EnUuGH}R7fno<R7TfEmuheubDKIY!d
z)P0bazLoY5^me;dbR^90A2b~Qirl<WS4~ppd7bRn=l&%w0V!TqCy12tT08omaQ`>{
z=T7FdhWx?8e;_{Pv34hk#vt#mixq&s9`6!#6Z2Gtz1<o{mOdTE5>7#_x6wS*OvfdA
z45W<vL~l3iIJD_bygolwxyACLiSGQqn{f1$97ma5AHTv4flOIRfuHm>k;X+(4MWtP
zi_Vy4vyxPdz|5n=PW|STL0pUJ8>j`9GBGS3BR-lZ2?x<=QtcJ=bvNx+k`MZ9>Xas-
zMhiy!6Z#oQ@<`cq<QjkQ<8LJY-+0`}v^32DKC5@z8P^G2lTiA#Z5f*36|r|5iXUvf
zVleY9z-UxglBLD3nwV`V`{?2TFj{HUK(5ZoC`Tjf6J!E3Mygy!k_+K^eMdWCVFA(D
z6?ZU`^{YCj3N_J^w9n6*B%2_F;vs3me@mmXva)P#uDQQX4L)Wb$?P)5sMfpt(xEeC
z808|HMZ48y4*Un{!a6=>u8h|dJY#*|fOvX-(%l+lj_MgR^rh*p38luk?VarR@1V1R
zLI?cQa1t{-?zEJOO)OL|`N*rZncf2h%=N-v^0rwEyUoXLHT`o}R;D8R>5J|UbWM*Q
zADFJB8G@;!a*99GKy4tAjbUkidy+V7D)~Txcy_0>6xDaX<<mM<@wThI;SXHn8%TZA
zsUpMpO%KD_kp3?qjhWm^d9h}RN}2QK<-HWbjpnJARb6<8dms+FYY%VgS?`T-Si&+d
zo}{Q~PFx55RK=LYNd&Prjw`>bU)5%L{{qjRLt;R_bnyr$LFF)VDNL@ILN#*W)vHAR
z*LpK(MLU#y{4PCa77w12?!}THKA3w-keBm09D9VzK|bnaCCm;7tQJ^V<$sMW%pLr~
z!)*Z>&swwlmo#99<GWo%<=;F6-(U^-mdu3LRG^U6@zHCKu|3)5Lkr}>zP%9-VdY_c
zrQ=75<_nk21#3RA<HNDJoyEKyx&uL1+q`3Z_fs%Id<*Rchhea5Xi0Pz^oc}jIx1?a
z<-+cU3TRvh?<FxZ{(7m7Hp&)_W_~0uGH(^(>rFILyDU_DT{ZvUse1I24U^lgequ<z
zoJ+8T9z7+Ro01DxdjkpGOrqqil|U4)rK2BlkP}d)QVzNaF;-!~CA3q7V7OSt*0=N%
zXDRX&cdB8Wz$-N|Py9~3h3}8$>fMw&cI~mR(eM%%N#xtz6G~kjM5DulKW7mV6xxo;
zG7GT9l*Il5>fmX`b)I$rKcgsU4?(}fSsMfS2b&|f^WDC6+PLc_O%RsXz(p}^!PP#Y
zkQOp$R<8coKKmR(!iX#iJubB|spKd#9}CguO@1QTuzCGFn#<|GU00r<|F#C-Ki+-I
zTOyj7dL-fXwe%{8H-S&!l@QnLkO-K}q-mQ%tp%=0W#XuLtg5Cf6A`8S;zhAL`7Mg*
z$o7F+>BJ?o#q(M)_(=Mn{Pb_6QU0P#p!%jCD&zhEsjqL#^Z_3SH45?%TbIFOXAO7-
zTBWih_aBNSGMPFR{)`lky-y}2NA@ZVU2mA|*K$Cc-<!|SeM9TzZUlflkZL3|u(+r(
zclfN*rOAQ1&pzJk=XI)oDwMw^OHnQDLr%nh6DhAiYL$q=B-*eAhc4*{d}lMw^X0v2
zE&6T~qj*g7ki)8*Rl+%~q?Ln3SS-A{9R@4oJvA@IvN%T?St!G~!_?*kTj$+u7hjAI
z8tazxI$Wit!>XilDDZOOwokl91J}xgC*K1vT=Vou|794nUi@E+P~X&$Vf$0|`g8!}
z;C+#jroM4qPN~f8jT_*7SL0c0hK05Bynr8f+XM!lt#55}%SP#|1l_~-`|Gr=QaEb8
zOScJHsmLmxJ)}`@oOXgJ+gbR@BM|^FF7h%D_An&ad;m^YiFEf>xe6wYjIBZy0Vn#E
zK^?Qrc(^27_h7I&zTgDUjX2M}Cr>b-0iopta00m;Eiw`gtXnxWWcYRh%?K&g9wv+<
zlSK4q@_JL4o~fyD)qG>`MXUEH3O{_m-~57k1EQCEiy@c>8d_LDiEM{t^o{cPKmfwu
z4qVXxrJPFx{w3$y)hZ)^{I>e}5i?IKRkQad;IDhjh|uI#AB5ju$0Oon9hs@2oqs{y
z_xd0g5dKGf{_WfUMUK{g^P-~$sLmZZ_aAuo4dK<Z6+7>hl0!dxH&DZ^XUkW82j*LX
z`hP%&qck3-q~>bQPUz5lFqALiyn&NpXV)I$t*OlhNUS%U5*ARU_{52X`M9GQT2r91
z`)<n5U+ByHMc6#21i(0A%-1Dj&nfdBS)nlj+5knwND$MFI^FZ9O;d^YMNe$snioNq
z!@tjc<<;g{h#i98lrMO-Sl+Gh>&11~nakQvZC3(@bJUCtU0${ju}cj{%<7?H2CFxE
zPA?um4(@3M2rjHfI`>>Rl%y8#A_nhh)FeKESq!2v>)MYvyKcxV^@}y|v^OX!i#KJ|
z5~z7=L{Xp;%7gNKm*db_{r=bMZMTP)#gj>`L&Q@xQ+6|Y_+pF?=9%H?8KC*N+!*Qx
z!8t9dZu$2TAf68^wZmil22*7@uK43MiT{esP^@bHe=`H(Dlc#M%gh$Ab-RrRny^*`
z3mq3jWky{eKm5}JMc^2GSr>Y$iR;n^Mc_=UIY&IV0Lu*^uffM-$B~4FhjFl2o00LY
zh~($TLfU8!(nPJmhLvp8VMn5+0m8+GruMA`c%*W$H>Frih*qp7q;~5(N};2R<sw-l
zH6cd5b#AfL-qR(QTJwnKE~`$X`oz!XaRy&VFk^4KaFy6|(&?V^4)%Fc?TpF7Eri0i
z{nd$%R8KwQ*S?f3sV&`&+q5nnyA4u*^s2j?4@W-<(r5gRG*^$w&4)9AB3I#iKE)5C
zIZXU|QR@kxjvM3-4q7y@jb+suWAJo0mYO$`8>ke2DM(Vv*58s6(I@WlbMg+TbG##S
zb!eN%4zrxQTF!7_hD_#8O8l-v)rFIBVnEV%jziBmpQYNGB;NlfmvTM1r8*=+-D5CI
ztpP6kH^UaNd;$|@#7k}G8`h))hEg<Ur?S_ynFr2Ex4B;X2)vGY;GwI;o6gKMJfDHQ
z&w|HwCSo@4hsu;Sjqc>pQf+ka5EpvSES~B)i+|-c{<He{U*$-hH^=4ySsH0oDI!Pz
ztVLE?n~JLZ)F3!nzFjPL@z{1sGl*ID{PCG~mKjcHgx>Q9K!<#{-0hD}lZ|m@;^6ru
zT>lW9NH`y#kF53ugSx!(Ke*S&P01lvQ#!lCjruh6t_V6VN*0prdu+45xlmhPr`<Z*
z!qM;H{ONq%*M^)HL}3*}n|!NTcq5v=@n{n)?m2dc7aeJ-^gGKf8EsZbJ7i9b6wu<d
z+m~-@3R2QxzB|Ytbi^$j_d8OFR0LSIBa$lQ+hVrdRqSrhybhr%$5OtjGmN)}&5}o4
zGo#YI@^Vo{Pc2H7tE9#o!JR83&+etS8HZziOjfor8d7K+Ce<McYT4fIM2Juf8wb!N
zl8xg(sXtf*_YI7WZ#XRxE_xLbmV7ZKF;8Hg;b1p5-ObPCBx8rS;b&UG#lI-Fh8e3n
zd+t>o$&#BdR2?ZDnd77+Cx1A?RC^ovBOt+O0_kfhmjM@Z^8lh|yJ8_l5Hb#(vHQ)}
zcGkoOANy>@N&3rql?Ro`CS3E+>J7Qg^4fN)VS^bxfu}Ee0}ZRCShM-xvvwMX8~Ur@
zRAgdfg&}ci|9*v@><ak)I<*&$7Y9<m?xJH8r$N_R0Y+cIiLd$mOi_tk$)UhHRIZVG
zU~xYCDNd3tPkxEz!_K_5t?L<)`Xbv>y#G(motD>AfT!0U4B>rlUwd@3?9|>=&9QPc
znlFEol=sX}jqY*@x#}1gbvs#`Jyza>91Ci?YzmC|P~SPM*Tq-rR691qFshhuJbc{^
zjDZWH!ItK?z1$L()yy8BOnBkAJWo-@sOd~J7e{Tm!x9%KKep<Ie_(XDNk-G6ARKT;
zDlJ4tlUggDA-PA0&a#pILyz1vSSq0$aXr|+vIZ5#^d*e4K(}+z!3J{7%eOh_3Q9!u
zPsHP>H)-L!9jmt%Bve~&n=43c@aJ(EFcL9)3Bx76Qqh#`&|R3BnmIX5S9*uJJXXKO
z_V(uM8Jb^wd5p$qiz`~idULw6!-s&3z4^Mws={P(?4Xs3nf+y6dBf|rA<x0NIbP8R
z$AuQOQ;FFusn`k~J;c>iNH;>m9>fCE2VDhDn#z<2g&ngaAz;_Xla<=HhtfpSbKX9W
zxY9-ri7Ynx{ZlkrXb-AkUpw@qxZz7yqqXGr5OJvyarr6EkgHhBaI|tsmCx38oIR>v
zK0rd(dg&z-664tx4}N@FKgjrQrk^wN%&@MvnqZO5V(Brkdx=e}#PhhGH|=S}i-m;@
z1bWp|drum$v~5G|XwdNFnspqi+D%_r1$0)t!EVF>Sduj|JE>jzgm$tL2TmPd)O|E|
zeD~(9-$52<-LttY@yoDzOiAl#gC#%&(zLUMN2yHgL{$KJ#G-<AwCc}pk=NQ?MJK|O
z&V?On%Uv9MKFp<lyxk{vzX}@ZV`~}9Uv?xU=FT4oV@g(|gieFDZllb&W>Ig9tJe%6
zZyRhtV$k8vYukPtS|%8IzvMH#ZX1J~x@j8PG@9fJeXa#(UIpl@ZRxR>T~|V!rI@sG
z{auH3u*lih^GVRtcqziDGrL?ZL?X(qY<qAeZDG>(tBnV^x_X>;!OTn8I;4GJYbeV9
z2hV*l>q8iR9-0+>O*hWee!6&hy7?CwYvIL@A$}C~fyzrp^SAIuaCPa6BqblI3V89M
zHcj7ZB=DhPS5ZeSf+?+C?tk2U-`iMuvRTMbKyzrHvGyuYC9$^G26jrc9VP3Q6)IAJ
zN)eGxBUjTDa=vca0l&tpKC7DZT;0`vzYJ_Ur&~W`Q8>h!s4UGECzxe>tQR`A+zR!8
z>$!qIGd?^JE+@Pfsol<V1zp#o^nF&);>%+IB^7q;8=`6AadOWR%tKp1GIfz-DmOG^
zo4D8)i}}F?!K0ZI6`T0IOVvvxTcI8Mut?(}3iPb4%&I4~{@XRIRv<rCzdzohTQnB_
z7nW706y^G9k4!Uy29x>x-sH&WhYbuK9cWH(kJm>!AwwN>FV_K&>cV-hU^GgTEE(vK
zVV&bbw+H;Ca*ufP$W6wtQ0IN$8gr9B&kS##Ao2e<t#&;B;^xLC65MTq_@j}2oas%-
zhwF#y!nSVXxa#ohGPK`{xV07h@}1@;{O*#B{N%c(Ow>PRY%DCRhqT7W9m(g$m&+EO
zAW@Yw;w(R?d`+3=D5&HeOy+oTv}ZD%$%ridIh>azoNM;By-Ka)HNK$FMJ8AE-lD*H
zyPp^fzIRCmw|61?M}y?AWf2|eD_;lnglXxNvSJ!551n%pg%J7)iA<B$L9b=|3D4Uo
z`w7=TL45ds;(?^Qo)jPJcZlRNI^okA%Hr2O>o1aM(-7fjZUz4dsGlcQ^nXsxD~5Sj
z(?71T>@9xE?4I?|Onrm$wm11Yd?#NojbBb?r*}rDMs_=ITPikO{WMh$`n#9B>X-4w
zoHS1TvNUvnN-+~UijPth1o9G8(HkUN=w>Av42x5?y9Ohn4DcEbo1(I^!&AaOS{iZ$
z&bxAxeRsZmcRhJaaU!!^2#2z}+gYo@1%R{QM+m{JBe>zKe59t!Mn=ZZ@O?Zpg<_cc
zd@}FEj|5!9ALtUE7?+uZa5VYO2Hwogs!AK{Op#h!^KrzCZz2tlDbO>LsiM3Q?@Ogs
z$~rg2z}i<8Gn+gsr{86hm!q?&K^`~k%v+q2^K~cQlVxoR_k3CigW(>A7x_N&YjX~#
zab5Q?73N*t!vq7&p3+TjR<_QaFJqG*`Y=1QBn*`ug01BXSb=&MyjPl)mPn-}_q`#r
z9(MY92qxVg@AJN^la?lUsb6<i3u_+-n1nLhbvP4wW`oJvG4!IMn5RjrIwd_r<*T;O
zgB~fl=D#sl(MfueLr;EVX3f1G!9>@?`z|o{ZVGG9*vn2~7H@Arq1e-q^+UUML~?v&
zm{nN45P_xXn9~#32cI+G)u@Lf!xvQ<Cu_R=ZtBBhH?^_)ATNIJ0uevacLDJqYwkFc
zm5r~qi^(Plh{|Cyx6+ucW2om-$!D-9H1z!XbOt`wZZvj%9XA?DTyz4Qlh`Z&;*~2k
zxmE5QQU4D21)vT~aHO3@Bu@Ko0l5u$Y*tBr?KPQSK?h<QoNlM3ZtsCzvV&R@a4+h~
z%h#^t)AN$>BIrIYxq6zk2X7Mv`nM?5I!{%kkdkt=My0T+@jgHwc0LbX!8ci)q+{O@
z`*RhhiVVb$?c#K+9}a%37izx#BzTiNUFrrihTv?^r7=8VN)u17L$i`Q=He6(@C^qK
zBh~Z0)vxH&L=@usmbFk-RLiKt*IhKr3A%;Wh-df}hFw<DuIsFi*k9A9XB8s_Q<<_%
z5tPzcq;&W*oUBI>`#xRu`)|4Zba_-y#OFoc%|MfA-w-`QQ*ynNHI}7YxF)6B*_E%$
zpx-QvA1njZ&Q23V3w|O0%+mKFqYhRQn$5bA(KF`_n@KyUYVAj9VJM{BXS42hA+Cd7
zMlvv=JrPC*l5mao<4@7d1utS;^M=0xw4-X_ZzJhosW92UL8{21XgWO44LvD6OlEpa
zICU4Zf8yJnaXT{Y?MmeCv8eerp-CosodxCe%heS4^OH078}2&A<DZ<YV0E^Ft?W>V
zp|`f2<i!nX(@yR*`8;30dVn?=2n}VZpq_^dBJ<@r(F%F9U9c1!=rGSss@s;_36^uB
zF$oz?JrPB+#fY?!YsOCLkfz+77_XfP{LqFTf0`s$tiRGZ5vF8lg$l>w{1&I%aPawh
z+$9-0)_bB*r1hcqSHkVdm?E38Y?MM)yp!mETLA74{s$kx6ro@ZNUpMxTZ48XvsX_b
z>A~*32;kClH4KX|b79!aV{39GKK|Nt+hAX=a*bwirNhlbw>n-$vDN1<t~O+Qn1zUl
zetzCVFdZ-=M$APcTy^tSQ3jQ91KP0=@A2`}(UqoaCj@Z>=Qu5`W9Ay2Z@~0%8Sl^v
z^Vm}rqv$>-a{hjy5}nR<c>|XO>!4f&Yd?^LBr)ZMqSyXu7%1JO^>CWN(qP@#9W@4d
z9A-4$*nf&9X!KXLD{e32MLj}hfiG^y761KAfOG?#d0l*WJJQke^>w;exikN2#$8L{
zH^yX7Akn%sEs=1+thU@r!}njCAA9n1Qu9CEv3YH2*T#R8Tvs*^;89xnQd>l%_qlYg
zk(E5OwegZtc;4l<O{G#GRUbWsAsF*|X6tiJ8<OhHTh+Ju5uGsELr))^t^yBNmZq8K
z=`_Okv89dcCSYd~DkjG6`ga;`5alv00`t}8<~vjz`|Btb8+>vq2|7PXFUOXDLci~(
z+M`HIM|;##PqkS;;pE}<2yc*KVIgl>C#MpAObMBhn@@W%Bxv=NF_y>;dnv!6T~cYQ
zn)~(3_s7i!(&YkC2}23^P*=ny4{t;lLMHI1x}&2#huXXwM8OfxQZ3|p`gyvwu9ml(
zIlrc@hduefm9tuy6h-ZEhIbCDy-QW9YPs()dBr3hQ?a4ng?N^9af`ZJ_PXm;=GUOx
z__0CLZk!HM>vDNY8@jYOFS)%H?oSuPTSHHq=wFALK1$^&kQ25OP+Mbrv7XE0IV~45
z0wJF4EoVBrHb0cJwY+_d-Y<fGF2MNUGDYYUF*megRDsXrMuXaPCx^iU1QM%47ZsYf
z*lL(x(@@ftxHevv5?w5%pp_*5_#t?UGa(?A;&ws0Itf`rCvs|Exv;4qGJxTdsEe;|
zidccT$NOt&XI3`8BUVS*9qYI`sKrZhiQJgZsCfECI}fUqhmV1SvTCjuPduLmrCX=#
z#jQFOA_$H*vDaI813fC=21vf|^Xc-+v<8Wl+>zA4@v$~wyVjXE)=e|ODVMXx{hG@v
zj5Ax`feoYo#kg<^n}RC-Wy!htx<l#LY~d?G<f3P|_2q`>YIN&S$cF#Yl~3#TUlhBq
ziiHyPGp{+g9}h~;1wNYggfL1i!h-s~!(fKK>4D7uBYphg?ilR1kp~{qj>fzcngpXS
zDUGf_UMN}zh}+`z0#9H~d^KY2j6^TlyU5_T=^f1N%_r}j22|f$&g(6vC<x`~EB{z5
z*huvopwlnp0VJU+b$;0C)5oPS3qV!)498@p&uc;QX-qq&N$-G5JWeOM{u75Hm3OZs
zlda}5a_a#5>o4HDINo9+OzpZpO6zj+I<w8<@FOB8oEqqU*>5<+$PM3{n5NB&zuO;O
zlxF6U#LnGwA$3S7#+BWp7Ao5xqoB+js(YDNKbXhfS+ZPRLtpR?5KLm2^d8{=50BOX
z(t*iQSwO~ga&`GdUFHGtC>>i~dXwholfq6W^J^7?Vdd|()87$iD@!8HGJ;Fq>IZ|b
zf?XHz*u(%Y;h%`XT!JfvP4heqvX>(R^s??Vf#nna;GYj(x8CLfCigm7>IjGnu=6>4
zXXS6q-=EaL0s}noc-}X~<Zg>`cJGR?gWyNfwTATRUM>^uu^+HQyxhbj-`#7PamPTG
z>&Z6UIwwm!CW<Y|2+PC;P`X5z;)MeYP@LDb{Wu>%QHqXalM`9QSA?u1I$LFoxO)xw
z1un+aY~&h7N7<GJSBIxkG8fOHEj6!;%fH<(q=snl;0+dU(o1~Kr3ho=;NO(kn_63u
zjZJ4xs{hWQV0CertNZ%ij1y-?_d!(c<sxkw^6LZS*IA*R?-7U6F>0KpgCR4Y*y-uH
z(?x}Ne`)A$V>@KgVJ0JxR{L*V?vwKP68o=8a#{IEc#NAi3ohkx3Vk>d&gKL=D=F;_
zz_^dHtnPS#&IojgRxkQc%~+U}eBNTCZ3?Ql<83c7i7vx<y<4M(kpS!;!VY?oepKRq
z&h-5XOB*^d6=<dy6OIsOu_1fn{hsWwn|4lrc9I6%)}k6zf9|lgigG08W^Jb3jz(HW
ze2D{RgSk=tGOzmtY00Y-WF2lQ6=e=o4c;<vv?HTwMsz*M!Ai#uGlI9d%2?=}4vaRJ
za!lz)*|;k<bm0VYxeEJqFXc4{H;Du&JUM?CebFR{<zSuVL!`sNoV|~3Y2xx8wW-%1
zKQ2?#0aa#rP{I+$C!9CmW~?=6b}`Q$5z)Kd<KqK?3-fPTr-w1MP!@$1TuR56ciMld
z3?(z?s_)Bk#zU0uIZ^ONQx$x?Ha4HMac>j5Zf`2)Kx0WJUwiPf_&}!bko3hTS)g(`
z!1O-`ef%^Ip_xR>OBkgG9>g!z0x%~idNh@w!7c9X2ah#i9+btU!O`Y^A7WWK-<<TV
zWumFfZk$F*uEd{rN+tVrm;G+JMbD3hI`Tt9kqYL}<NL6o^*!S^A}i|I)(=Y5eZ{Ol
z=S(MIdR~~nMTQx7IdFb4j(5ESVNqWQ7e*P<B0GR_igv)D8W#B;9eg2j0&Ojvn6t>x
z7%+s8EfZl;E@En%^@i+wO%@|pqbi=rn}WNtzDwK7wVMuy9x^>8SrTt&<!1QT#p1@W
zkji=)PJ&Yg`=6R8(ocHPvQ97}C0$OC%||mNmMjuqRO*o&fb|r#BNPncXOp0F&|6z)
zjO0=d@{m>YEMH_mpAK-J+wz!#LOgW9p@hJK>=EuLv|10Nxq;btc(Md07-4(=@kK)`
zg<xhBLxuEOzovFGuYQ(j{+=#Qmdz`mL7ph=67%^OgVOZ_5-&(sp%qs3J$eyAu`A2U
zns3X=Mljr*w_mw>*2$Ld%NzJe=0-{nlVx&ZbP0jn=*#9Z!5c=cse7xk!WdL4T5N;e
z)`CH|=nDHjBRn|ULLlsofkj+Dn#u37$Zw|e@6ey_s|}=B_FVqDVQbOv%8OLw$WRbz
z=WjH`PPP?^fTIgl#-x_?JFx@9Xu?6H7}q12B@d9H9m?ipHn9h!HnAl)zf)CEZw0gc
zrd+>S)oapvqA!TYgnwmwh>_SosMep_%x^Y%M*g~02hp^6v=q40d2Zunj;>TNslmz+
zN<&@qMf=hSw+_CbC<9N%O}TGxh2F{%&0gm|_D#30_^M%?{mnq$YaYtEMGCQ>8fFT9
z65@P`3lMFbSWDPSWOb|@XW3>LJ<le?M~+&#9}Qw~?S^;_ParuAzPa*b#{%|)wMa&s
zU21K67w=sh?dISS{&_s7hU4poXsV4ULs!7P4}1&TRX(CXs$BD_TgPE;Qisg0x=h*G
ztXCi3m<7@@T>Hw$54WQZ{Ab(W%`1d%bltm#O*=zRmfBhLTs-LU2n&^7&%X_tu2EVv
zK{U^Hbo3|eX6XBHCBUKJE=0U=m13#$==r=evRc3%hgSh?CG0v)G}PfPQetL)#;WMw
zZig2hXg@1Q=xncuH{rp`oL8|ld^+>wnj0?P6TbBvvB<I%iEUW_P6qt2CVqnGJwRFe
zL-Vff`7~>jw(-S}#)<t}1l6`3%x_}6YToE)JzQ_UA<G$apR-_iGN!`${~yxcDL%5c
zYafhl+Z~%7cigdUb!^+{*h$B>ZQJSCwyjDs^}OHr`_CNA!Mx9$?Ak}QtM*#=TGzD*
z`oMf!g1=Hc%|x;+yiqZ*gV#5}5m}P=r(yQV;^v`_Dx0?UJvs)iul(w}*P+YLn<;A{
z%=;73OJ5dXWuqzRflw%&PTYiomq6ONh~3|gn33fM(Lq@+oMCld%!?lxLcUF~@d&69
zLpNJGqFnZL_mc!fb^P9W(T!zh-{ze<qMp`t-!CCE$JdU()xnGgfGRLOU9@6%(l8v$
zTi|{>FI?#Vz%@yP9?+64G}exLn$^&gd@X5aFqJ^pR>CLLe&d?8k=Ru<!de^5ejA<x
z^%9z$6Tps)>j%fVgop~U2PND3xjszQ;7OQ}Zn<V4$Dv`Mi=*sS932f^d7n>YUJ*W_
ztZ5;Ik`rwAFwvs<agZSeq#;2_)z^k;vM=|_@kNMbZLNV8ha#3VQnI2{d#R9a&VWHk
z+}eY#E7|iaXl8)ruD2geHdYn20;b~B7hf;-{((G)z#6qT$hPN#BJ<8f%+e#G2L8cL
zw#Tu0lvTPgem0aqQXRzj?0ugfimj&mnqM%CJ;p4byMYOTm3XIi&Yl)kC$<tKEq`_T
z45c}oC9*f+OFKaSe^^*d2=0H&Xvjw6M9dn~nOp%wDy_Yz1zHdRVQ_aa&X3_&nDRTt
z8&;=eE(_u7t>sU-$c=5s!?)PSdkI58u4@Cz`c+-}6I=Z{F~)T6(4j#sL@G?4@aNC7
z&aT{l2*Gzz!qe-rVr1_T@9Z4e<>TUo(&j-(ORh5n-K*8?0okLD?E&;f62a-*dD+(-
zj-X7yZTT7&%?o}Cf_82d|B_8#ScqRtje1DlZwUfmy*WQMd0E~|RrwS&a{6k6It;o-
zrpl39`}N<1HhbuTNhT<JWdZIgw|Sp13BYeP==>D1uaHDzoK(4Tk`gaPi4kT_L1s#Q
zYWdt2<4SL(%pZ;r`*(HYg+qrUp+|Vt8w@Yy)yz~G90$2nC2Nz7SZmIlYq>HDvVvFn
zGL0R-Ae?tsQOdJqBI5{zuzib!;bTi5Rc&l4KdM%d(Y+#kmJu2g^}=7o^qc>pk45Hj
zsfz)s-31GN%_TabJ6cc^k6TazaLjn9NNn2@?s~9|rvGSWa&r@*DK9%uApyAF=Rw~b
zrWty>Je_%9Hv63(6Z;mKbaDlsMraEWlg`t~#*;c%6+Z4^=*2jLRBRybSb2A9iTGAl
z4&yXUnX>bn#d2Li9of~R9W4Etx(zwpA;C_<9uV2ufSm%`9q6X%u3vEHpFFW!oBkyq
zvIX3e=5pzCZr4rA4GNO|qJ8e8eM7N+9e4*A9F({sEequ!470jJiwbeo)#W!?ORQH>
zyR=O0C1<<n!9Kp`H+c68eBOb8<j$uD$KG`gJA%t~$4R1ybcMzOi9I#AU5eq9TZ748
z!|Vxx8(tP}Gd!wK;h&*QKkW!*z@L)AzR+I4!?JBx5e0m0gxfZZa#|ZvR6&|K?gU_7
z_{@qS8PB%>d+Yd1=|s()o&fdv4EVP+LN#a<Qh!#;b|up+e*f4%WbO*Feb$JYWq$Y9
z_)EKWHR(=PJGD0SCWz>sX*oU=qKIf{N>F3cAP8$<XdnYv=pd1aYlk%v)Lz;65a4|;
z!Qp7Rj<YY36Ov%4Y;d99YfT!#{~l2Ugu_7XF+~Bdf$^MFu%e>OC{c~vmlC4t$|A;#
zZTAO!^eN5U`ew_FjRr?k+x1rON9Ek?mRszGK}Y3Nm_e{?A;O(Kztpz1coFk%Ag0$l
zT$gPJy1f~HBO=O|kJL&wObnCf>r4h;HMxt~nk-D+x5C~S5j^M_E(Y1k^-MFVv1J7Q
z1k=wF%|Bx^cl~SG4@KM(>#So<xjeL>AuF>$_5l?yLFq99pIUp?;Uc8)P&J52Za3QL
zU@+i$hOOB6hW#G)ECzA71CrD5_h+7+4hO61-ru_86hr*2dHYk@iQhx(Cn_Jg_|G0`
zVf$6&pj>1^TsTpXX(<iNFBV-;```6eWYrk;@yG1(rJhm2Ow3UY^$6du7H<mtgm!9j
zY`R^XOuaBK>6pg{yp>#7eo4?4Z8Zr?WPS7MX1oAZjNoXUlybk;;YLvyagUa<K72;@
zI+A7XKCi=#CidKWjULc8<U+FUlmJX{#iSuO<CDC#dlPcc=hZ>|MHQv=ME+|dg^m&;
zj+0-zN}iv-Tlj!OJ5hm(oQSpYxqLD01_%~k-bxL5rf6@=Pqd@0aKUjJj(nI6-E4$H
zbzL*=nDR~fRKcnyl1yIUB)W=@Hw~M!4%A#7oKnTAaObS}vpPI1H*b7+iKkkX4G1l^
zn6kLN+^-WF^m+9t*9v~l&X*0ls9<B2?XZc8J`FNNUgoo%2Rt&yW;|>3ja}3QP7x7T
z?37f9fsr)HjyyAjpST{XXEDi)$P3v8Yi;EOw1p3q7KFgO-X8BTfVixB?QlVm;442-
zQWLSD#u!regX`cUzwajRfLmiy6~ZV}F0j=rFd9795&H%UWWV=`lZ=kM1zOgAA(eVg
z?u!iT*T(0nU6uhCTSA*X;CVX^|Ds5@pBmoIh(D44$<BXi0kx*QQX<zVFIR;k$9;{n
zG}su})^9&@=h1&?<QPG+=t@>xBl(p#YTNjhTMF2{_tqz5Ldn7|x{_xW9GUoPY#QWu
zw^RuFq098B+==0OJB&|4zi8=e(6u&8M^AK`(LnpnRjp}kOV{%y@D!)v9eO^y=C!0e
z<@)+TKDi`k$NGLabgE^u^`<ve{cnr-(&YJr9K(xS5S>o3rKdf|)>`BY)N=E;2+G;^
z54|W#^Ds`kA8CSIoPaam<$*K#IbYsQsY5P#W^!rXupIqJ4usV|1`8m=O6DfCz9XH$
zfp(3&M1KK663<ISdl!E7Y^F_m{?J+kk2NFJ!A!}Yok#@f-bUBAWpjptClJ1+gOP9W
zf7;rog<oN@Aq^?Y#;PqHr=_?+!}Yw2$6|_ft-K#P^Sk|shy`Yf;(yO(d0Fwb#qzq<
z$^Q|?E_QL^V%uwTZNl~@uF7is^;)i79*jQ3J3UabAEE@YiQw60bm&#V6gDbj>5Beg
zQQLK9>~;9w`~F9QPP_iESmBQ4VR+`W`z5nJzu#-J;;QU`_wn=W&4DRwhKRS_{fWaz
zmSBS*VAY%BH!sm<6vDt2{_w^#Rd^U1(_zl`pzvqwS*c#Oun3AjUb80r4?@EHjz3dQ
z$4Bg^)@5(o9XB;cY=hr*eRvT8*LueL_>Hwz7?w8(kU7%keo9%rzaBwUkxoF@5-(|;
zTcf-`K8bKe&d2^tWrdBl23&J%+aBd~pK!cC5vM-Qu$eEVKN~oO!`a7vwZ5PZdMtm$
zqKXH`e&=tn<sEk`Ad2xDk$;Nd;w|H;?X!JXXeo<V%>H5_j%wp>y7)Bm#Kw(}jd?14
z#eO0Mp!dH}4SRRv4eN7Uxt|x^F8cTu^DSlj8WDUUYgdweVSL4MbL6P`mezfdb=ZA+
zZQLclRIhas)I#kNk6yWbzQ0_Jy}8IIRR@3#rXTCF5#v5>-~qICd6b=wOw$deV@j<J
zw`nR}Tjm^2CA;%xIlb5Fpu+o4g7ks=zgD}po|v+-dVa^n#UTZ6WOBL<8)%f64g^$z
zf>Nwq=+{$HuThO^ArIii?dNYsTm=Z%mS{jc!hHR<GRQ3{>O1opH*VIJtAvnfYS`)g
z(PlN$H^VF>sX%^5`I7)LS_gS==$_5J9|J}k)M0*?97I^)M=4x*A5sBFVqQzgKC?>0
zl^exF=X1>|w4OP!AEfW$W7~j7tXY992ijM5jTH%>sox&wb`|By2=25h<_}Q_ayo;b
z{^LUXOpHMHGD(fI*PAeh^fMz7f{Y9&yoVWhg%MxNq(DLK`@#J8sF4^|chL<&_fL}L
zk#i?bC{2{rWsFit(U!xbpojD>U36+VTJXD!&p!=Cl9YQi-?Q;v(L=CCyw$#~JTqjg
z=1C--3X_imx@Y8D5q_D7l-d#vd5ukXr@cU4MyXo$NA(VKE5@jEyL#*{56(>D)Ai;>
zG)vWaDTSnP${DazzfP(QBQGAZWlMahT1*i**Cc(vrsH_(yR_Mc2w@0o#t=|BXV!qB
z!_n*TU-mU1*=gEuGHYHktVK~{?tBVrb2SwD&YUS`Oj>E+e(8QGyvT!q)erX+y^JIf
zt>ql|Ia(WCh7E@R;BSvc(q1D>Rk~q^mWU<zNMd6~L;Jg%kWs+pRFL78v}KCP>8uh$
zLhBu;g)jq}8NmehAMacb779^H!2Y@CnDApTDv%V39{19}kz104EHK~&o*Z~JD4YVi
zcvJ)kavQmK)H#Ne+p-sl;X%N)of8lHN4zi5=2%gU$0q#A!Bm%<)0z2-Y0p$BI17r0
z^R{41B|n<o^-3C#o^n8+!FW1c6y!gRgP9~$V(Y%s+tilN(*X?WP@=w6W1mkVK&T)e
zP7O*69o^Fk6d+51K{&XyI4_Bf99np|0m*0oKUW+Jrv#uDfcO2(nD-TRew5k(%{4`k
zotRN_x$px0u@pwkV&{+M4xU8D2%6)F@M3}#E{qE7bD$B|Lkg#}=cmT!v}S>Z=p#U}
zQ{RpU-}|t<^JUwC#sL0NZ&^`T1#WY|&>;}U;6jQJXt1t<{_o>%vBm%Aq5sjde>Cig
zJij7kFNVy<jHT!6`uC~KHNEkn*Is$-Ykhv;W4MH^pU0Sf8{Y554E(3jhdrex4~8rT
zyqYTABf^jx_cfTByu!Rwa++cF!4MC|;|eM5kP4-D)fXW;=5%jua^JD^IIj1-BJvE(
z7^tK^sDYSRYZq`s2a>%`9s#qCnU76;IC~?7{jNmgCRc&i+YPf@>-W0BToh)Xn%Y|v
z^`c@p-L|x;lHpO-PaEK@sUErt#L=(0Qn!uFyyKdrOrazlV%<>Sp$Gc6Le&!Z@qJHc
zhz#u7lz2hw54f6=;KdN_bt&*>+x{8yJ<ZV*$J%NT@kT_T!tyC+G;~?iZim<@F+V{<
z`oh5FBwmORBkq18cLD~2cB{iZZa-ADI9u#0D63B~98l}D;93p*NEpMVkL>$CQ9|+e
z$bj2Q|L@yDNCzPu6zo0<pO(-H^ahlM7?rT2(ON*S^<sf*Ef~4v(4-)B8=T>U@E9(<
z%wS+}a3i{d^qAc&$uM}p6ipQa1as<zk`=bqn0AAtK^BY##Ig4_20VMpjs)}`nSY@<
zJ*u?QpcsU0c%;8eouFuGXzOSU{8Je71`4)eIVoc}{9a%y4CU$jFq#zlaKhR``Xl1H
z_r474Xll#%#NMCgHVDT$J>|8pqa-IZRkk?g&WnXCC7doqGVeVlOXe7;EEWrY4z#mt
zVFzMjf`fw}h&)mV709)mU^DjagTsxs;>YlzE_uNuBU;0I8SwwVy^GDhZsjLORLG}9
z<q|uYW65*5Lq5N-yndj>1f*@{3WDhpCZOT)XRyEuo>}mPOU|r0vj9k{cu`+Ybb}4(
zH1_L|7*FPU9#-)y_MD@2k?&E<M&`t8c^F}bSxV+Iu*x)-<3Tn32hw0Ymq;gF^plWe
zjATC}T(RmX#B@Y=LR(=pu-`?3EyE)(fIk>!0MP-p7!UZKfMSd^Na(gRQ!GnOrmAgN
zh(2vFtwH2g6WAnhjGE!?2|$k$?3&Lahig-jy|JT*B4;9;MOIpZx7MA5k9uYmRCYYf
ziF%%C3MHZhshioUoCq6(T(>^(S$6F-oK?&_!>r7yv=<Jq5001rS<(G#sigvQf<-c8
z+WBQ$`Ivjp@gWE;x|ZW{$#%LF%)}sv702XbXk4x-P!`xTHqPncVf91V{N5C^*_m61
zdf5jIvN-=DIz-M6wB0h#IRl<~RTK_@g28wJndZBMS^bWWtk|yOf48m%hod|kx<;qz
zT8bjbuu%m54w?it<tE*-xH<hE>0+0<J$9Msf{KmWY6^~hfecjHF#^UF;(mJ(pypbf
z8U3T)|ELl0V`95}*V2>5Hof*DkDK#?>xwlCFvWYt%15#WGu`1^RQt*cI=3}#<wo;+
zY=c$8$Be}XzpqMZMn5kW8ECR4M&U!CfTvL<NcIhMRv>$uvQeZbapxC&?98`T*k@yi
z#)ohJNGJtSr&bUJd+?jn|B+8R-~YM&e~9Y(Pk|~Lt_kDRDPW5&#<}nNU&#HRr|j3%
zZLBjm4XaE?7}M?EX}w1^??bb!*bk+14y*YD9BVR+;}l9lWWZwGLWYAQmHib68&(s#
zbFwnSqzamOH8CqwRgDtfNS&Z2gDyrnjZ&vq#a%sU!zTXXl2^~6F0)z5fd80EO;8aq
z6(l@A2cS<e67NHSPKk2;@xT5V5Q6$YUiv?@5l9$IKEh8v?{oYZqXS&55I=2j8rrxI
ze?>!SI~ES6kZHr&o(c#mcVa3=h|&xSn^om4G}r+v5R2q(<=8SB5&;du@@;~HGJ-++
zo0PvHX6q?)6H{^%Ps$(M<vJV04I*bRPZ+5wX7rVv242q!+ntJlLbh6gEZJNF4qo?C
zFGs92FCzx`Pqj_02yGdCQlv=8e6i56pC0>Fgub$9fXTR1`HlAruh*}+D^SlQgqDEk
znhM^YwWuO=DaHA_9Y*H!ig$~6J_JYm@wW0Kug6dY86|EXgclf#kPK@u>=T3$85+}|
z=w$ic`0q3l%KTel85HzE2o}<6aT!bi@mdyHp=5wJjdcZq%c|q5L)&iu`~3!~3d1Ar
zGSF+X#$_l+IzNfuHeRP`(e{{&)@A>8d?et)vu3(A{N#`@V@CMOAhZTc)nan(7HV1W
z4qL8v8Ho4PTPw{#KlUja7HD<Yhs2=-a}wXEuKS!#=?}9cgn~DO9I(Q^SwlvE=ydIT
znq2x1zzALTWnN~ahk*`lFsBd3M5rOG(Jj>q>l4=K1Fk~qGtQkmX|-0w<Lix+O3Dlc
z{l}4P#d+!1pdvs9Z`lILKPeT?e-|GRsO?GPLBHRA%NMNgOj>kl&TQfxhh1M<>%5S=
zBZo}cu<EWx2{FUT)f3HSzLNk2y7bfa(J70jd4UrO9u5`3kGso+>sg`q&HfnPSr71^
z!F&XjQb?7~^=s;&(dOKr5mxfmG#+mzdbEgYW;aUa12~Aygow}IVjQIh!YqR&gzA=8
zKRb*__MJM_O3%?BMYifX*Uuqgm~7N<Un~dU%_p>@u}KOz3){+2%yjE7TS6EvJNZ|U
z{U5G6JX77?LQ}6s$|<jyXaq@atl)s)vzs#izk^mqwDKy5SLC%n_$ZejT`}-nx|I#J
zi{?xxzGdc~d=iV>0$W+$KyF86o$5&)(dTKG(8X=vyb+@|C@BAXDe^kbd*573RwR-$
zYIpS2cJ!pS3&OaxF-dp}I{5W6r{5ldRP?3jd`*ES6Dn+O>`Z}16V7gI+)ROH5zcOA
z{^9G@BBK@kBXwbhh?;hvwK20sT1m*?*3<ihy`e+e)-(Eqy{W^})-(8&x}ihU)-(B(
zx~aq6*3<u_zM=E2?h867EFgU_X@4w*qL4tYnF96Dy#5>P3378rU!v$Sv`A=PBE&H?
zcxXW4;1Tpdh+$&z5p+<9P@?D&v`7ePBE%6icnE0X;34!t@Ge@=VX@OeKib9pMvUeB
zkoB*aUmLfj!zs1}1q8Q6h=L?5D?Yw?H_6v-g_J(A3;kC~o~|Z9%VzkyOZV&$%RB?J
zs=wGrC_JB`tt`;1ODC?-#|t2p#P%IZ&HgHI!5{>m`8U%JLH!+FMC)WFd`$D)_Q-5A
z;o*C~T0i)2pU$;myj{gsxEn@K(++su^_H8kdaSleq0{gzSMW!f`Bi&EoJZMuZj$;L
zPN9DTa#hdT_S`Ac%K4p(m4mbm@|Uo=)F;pLrb5=Wfd`LO&Q{JQ9*Y{<(*pVB=`hNx
zpi!W`KhN{`_kU1)JSH>6kHg$s>{OsR{)K_yU@&G5{lAcYP#@=if&G5~HV|5`#fICK
z8Ck~Xy{&p%@@?SjWv38}8b?;!6Jy)N5&w{L{Z`UYRO{NB?d!im&_y7Vr+8lsiLc5V
zXuvigaBDn6AtiDnkJo!}LMU;&AQ?>&2HHe^yxC5M^qDN5D)Vw0*P1kFO?U4#|CFg+
zZf(JCVDY}iAQ6ou^2*^?^kQXiJ-3I%SYC|%Abcj$4YYYiXfGnoGeQA6jan+)Jl8$7
zcPo_R1Bl<GLTJpYSjeSjKn~lK7Lm1LsgGr>nqn!fm*@TcOQaV_2SHRP?~mOBM&))+
z2vwl<(*$CjT$?hQ#U+pcAZY)JMpmJ4aIzD6owyh0p@$bQ{*vz6bg=m3yc)h$gd4%@
z(kHh2k5NKw<NkQg+MN1QS<o*LS<!<=t#+RE+W>KZ*0KY63g0zQbu=hST<nHhfHAUm
z_!x6BO*8N@o_=GV_;^Cm{#~#x;%Z}util_-qEwTr7r?lB)_)665OiFN>-xlEwNr#;
z1<P2qO(iuih_M8xj|qE}x3k+F{Wq-j!qdjPY4@Y)uxJ$C$#oBxPK88k4e|Ebn#S7V
z_;M_Xk*i07+-^r#0G6|}K~Rmu!Aa`%BY@Z#XsvHKP`~|GO0t8c9A)CeBH^ZNZ0@M7
ziencQ(_>Twv`;(+j!tVEf1)rSXY#q#8XKhb-zhdki^21C`g-5yzhB9OS5v<rp^N<+
z9$zl5tH@X~yxEVx)f0tq8>AnR@ty_51Iam4J~p+i{ExjnK$Y2x&zP@yQ&k{&!11Q?
zOojRqA_dz`f4ERLK&93iTsFlIyW{^hGEFESe%C)8h@)kfN$CEA{$*7VxxUoc(#d1X
zufE3uNO$+q$)x_fI77ME6iU<3&Q@A_19yw)0vYc24FdiN-iV$jG&_S(Cm@o#JUC+C
z_W-jDQX}n*lS;qY$77$}#yzO%{y|UewFo!UT_<8xRI`rh+vUev=)cFE<9><-rnDLd
z8_Y@Jt-Vu${;%9ha;vVPxs2Mcke`734gk0~^FMwBqmA3<CejME{7klc^I&1;uqU^U
z4-xx;OR@1@TfgEP0@$?tUeRZ<Xh;EHz;keA3#31r$k%5w^>Q3Dz~js;^*fnf`|sRY
zf$M}#9b(2Uso-kl7c6mRQIy-<zBrKNpkaL-Aa74oWF8FoRzMi{zsUeU!~abQ{3pTy
zj4fCQlC?Kta3}({hZgWQpnZ|^;`cc8)g12uHKloEm)wg$k&*#LDzC4dOK1M^=j63c
zc)dkc0bg?Q-m(7!U29$K`&DcWry}rs|Lb7J;&?Gp%scU>HroUzR<@Ne*;#yQFsL<X
z)e}?m!Y09`eNKoRA4Wn;k+0@+6oh92oS1mgowlbFB``Na2?QUHciiTfZ{B*}tlz!=
zvfeHB5K~Js)U}sepo>*(yq>X|U%7=~9u<AlM(zs<fM$?NYGoTlicjXOx=N3-%IAsA
z!-!32tj74AsginA6l7=cPhutgzf7#OXhft_$yI(X;7mo+w8&@r`{Ylhc=GP$GmrDa
z!6u0Kk!CA>&su$NIwI)u2h!8Q|A3}X#qRRiG9kl>AR>p1K%|HmD!*><M^66}>4CoT
z!624XlcpLl4)<wu4F|EY<ov5jsj<qx3IP&|aDm)a{CHQ=1c$?6$cr$sfk<I|YiEyt
z>1Mw{Bsv1XMs~QZL$iD)@!ZRXv;w8ipSyAu?5Qg;yV21mMfwJO@QaWgb|uDUzG>Q}
z3F)H)^icnmEr?FjGN0t;kYJnet!-sEX3y5`$QD!waQs>Zc9(ks88Yv;<6Mf9)j*o`
z$PCIa76_kv$Ge|fF)cah1Q*yx4CL?c2*AT6K>FWeG)wlpK_+99)f68tj?lWsWkY)!
z!Q!O5AamQ87!l+cRT&zll!b8|l>3EQ4k8&^DPmY2<-l6Dq4Qmhw$ta~@!`rg^?6{L
z2kVwagAJloH5|;rlzK2Zj~0PT?u}1layy0$J<5b=_J_%<v!sr0tS10aKS|{~0JuXG
zwa*aUi(B-Gj4wZOF>R8AAceQXL!>;j8fsBd0yc}*OYrTiK%OA3bsF*j6IweX3wmf`
z{LxTQ_;{5!g|W|hQ|c8wR-(#_$mb5UNkk)dl%W6W&^)9GjivKso9;l*t>iZp^&*00
zlb)t#%vXBTvEyTcN&kpTpb#=3P;i5PQl|GG1BLM8t3nZ5j3J@_;==J*7-Mz)A^a{!
zzbiAJ{z#bdY}^7WjjuMBbiW9gsTp>fN1KQ#>~RbA<MRGqPXHXd(m1H{HEJ?G)p~(i
z#7`=P&I+_s;eP{QjNyw<*Q!p4s3E)}#AYK=o@K3mSm;jHyFajA(tl^lG`A-JAQa?<
z+)npD|Jb80H6kjs>GmveXE`Q$BcLecHum}@GqP2?J&=tZZo~S}Y)`P)UIna|D7jzJ
z^WDLGzFmdi-f86U@Z8j5h>thh&**rKW}UeC9Ff=mSMN<#TCu}m0!OZDmoq5gkKp=L
zZlPfyG0-azj!u;^^s6jNf?nKXj@k}{ef8aKm(<qqkw&<}rR1ZnNZT6bfco;HM#f$e
zH%)7tI-hX$6aG|n4delzA;}`7!?E^@Z2Fm#Qh^n;b}lvKwIlOKho2Grm|$EXz-Pl8
z^{RuP?7Rw2M~#J^!~7BDUlMby#nwe*b}plU#|<59qdcEsU8sLZ7!dDNF%$ahSv;rI
zT0l*QZ%ipdHv|~75pseOLOsR)9S@)TYbi?8sG{HJvHu>>69M@iVQfBXQi19wiThr3
z6;gvL&!d~K<1e`%?qDg5E-}c&t~JI#5pbN{|9sO=a-)b_hwj;XfLagX@E(ONa`}+}
znW`P|*Csj_R`kTJ=EBb7U*)6K3*ra0Quw`gDC3rzRaks|^CAIR{Yx1MLxX6;CswS(
z7wLNWllRh@;Jn%Tfi_e4@4_B@*QjD09d}HeIOi2H8ioQvEYm&|e{Ke#x`+kjPHsh0
z)$)gHq>U}7+-LN~yL<zyp`VGl)W>2my0y;V?{_cm0mBAv!fP?mK&J+VrVRL?1A{A3
zHEXxB-wL~<DXoL6Y#oaX<Z&e^UhHLuJUy&7;KFGj!9~^eKO?t~@`B~()jMeVsnVjL
z7&f=vES@M$q>Ifo?YMRIt`OX&ouA3?-z6{Iz2n=1a!7<=2BonTVL$2Zzf9<sx+frU
z&WO|%OYwe`_;HT*uT0+py||3swDk@jbTe0X<EoOKTVRw-To!DU;|A2oJX={LaP5wk
z;NcfFcXW-5-R1f&97W??)nCq2JQD+2%!orHLqyf3YhP*cxrt9Cve{Kt_`h^ruJ^hj
zPrJevvD8!sw7i$-roBV;MB({;_E#tbAaIq;xs^-g+L{dQJ)#PIw5+TiSElD_PXY?c
zwc0UM!TCccUCuU}9x>L-))vhz8jhO;RY&@mepR05O-nl4AJN+!Q4dOi<9I-SjWw2$
z13DhmZNJS{o!k5Uc?adNnwN6istbB#Q9x$3)#e3{(UyE~+Opy3Tp;Odo!(#H!^~P`
zG`)d!`}b{pfWFSZ0m`<Dv7UjtyvA(Iq`|j0)Aw8vEpLJAz(60G5-{6lyMdxW-^kox
zxK1j=>%+lGl+@}q`8+tR?RV0p)t5c%0IlmJ>IXaV*)H*Kcw>`>bz?INXK}X35ORK<
z7_>YAR|)?Cv6>vmj!DBb4wxKz2ZF!S;#3)J__Mp#Y7lZ14=kEZFLU-AoJg5Bgi3mV
zpbO`&S*uF)^YlU*ue?>e#EkZO$FXsl_S2kDysai1Uj-reH3!Mh?LoRg=>#Qe<vsEC
zF}&^c%7Z9(`KFfP)CceNtGgKBvD%kDTi=)V+$DF5<~Z$O(E(9snk+0x<C@N5wOQH8
z=Da6`@jB)T*fH|DSM4xrJv$0zP81pL#J79KBA_Bb<SC#W&#Ha(uDw{%Ew*ebU2VJE
z(8@06zqgA^zVtY(e(Dd3+46_giWbe&3BfZh!~zoIIIuf{g&!^|Rlkybn&vW$(Vc(l
z6i5(s4)@5ZpS@#Yw6VZSok=a@t);j<mrT|7gqzJi`7CWQ-C|gBx--v*zIYOU-Twf-
z_#XQI4kfS{zMSI}#G9^fXw6y-(L-kI(x4qwSGz~rF~9_oLZyHwpF!GUdZX_#<DMb`
zQ&aE<e-O{$d<2X=&25)_bQf5{^X0wB57j#~)fe`O6c=*by7Ax{Kn`=PInH}WJJW72
zmd-Ts7H2~$Qa~bzw*&u;Vphu)TtN_8S+3|2bTEe!et_F*8v=O#3HKsG#F!W0ogkFU
zL)9{{$MX3U2Jy7>2jad%<PUSBD~Ro^vg1}u#U5Yiq!oXSB0as01-kt$#p2(j(^Q}p
zZt!E<T@9-kduQy$CjVDSwF<?GzNwSN+N_dQ5!PZHZIYx>X8q`4%=IMbuyU1cpUhjY
zfu6n@wkNB#^(sWvFfflK78@Q4#>ISJ(jJES=IFw?k~reLIpE+A3p1nkZg+l&DTn#%
zzECBF&ZQyzqQVcb<RV_aG30+hnCdFte54#nCJBJm-F<{)xB#*Ut&p;vmt&>9Kl%R9
zb{tn$<mHjvKO9C}t@ppBH3TgTQPx&0`@<oO+P<&ip&GP_KR3#Zv#a_IC(xqAlLiz2
zoXkyPLS~m0Do814%A@g~PYD1eAVS9Uf<cYaPOWmi+U&k$E##OF51lmTD4Dc$8Aokd
zB#klUnV3@w`}+IH&1+1)G4)3Iwo)uNePV+mu%>T8Kj<HYfc-Biy{%Aedn~|J+--Vu
z0jJx67<9ltH4W@<#@960o-M`i#v>NsFi-f;BYs+}1u)|uGeiL+CQHFn+mAGwi79+I
za4J+2h$TOnBh$Q+ReV{Q;oLYKXnv>rwGTW0;)7nw(HKVE-rIk9%GM~3&lS|X?z}|@
z(oo?wxoqxH!-#UEv+`BrA=xeJg}M(VhgYej`Kxd9zs%_Panh|rb4x~U)R^;xK@pgT
z$+cG(Ri*Rf;c9*{W2tqGZ0h8v1HvzR?2S57!2Ooj!7>pM>3_v+A8GL__1@ZX*IRp%
z=b=Z5{-+{f6z;!_N~fl@0;m0MIvBEqOY5Xwes2g%G5qp!w%g!l+undw{2O5_CkTCy
zmDUuo0oXlSz&3;8Z90=ow9$=Dvs@9Mz(K5{nzt%CY#P+Ep!24Au`z$VQ`MfE{FU6Q
z6`;Kt_!e2lq5pdHg2kn_Yh<c_U*PM&U5p)3%ya=Ca>o2tCLptGnR+4I#mV$P36YOS
zYXFOQ@!_{WUqUq6FjlSk2c_fVGWouc^<xjX@Iefi`3Nh&b~L?9k$$yeo%V4%Yt{5G
zxu>BNxwC<G&#Ny%LZ$t2RyOw5j*eLeQzx5AX^c<{1(L$XkhE-;7};4Pd~0F#`95BU
zF>_QkHwF#A9N8nLWwDIOU2j(s9GGD$(WL*1+6TTCEnc<OCaFE)JQXaI-)F(C(^fHR
zGwwnZoqTy5L8wam459%mFQ6QqEaL-17D9t5_++q?*4&OoX?jXU>-54MA1Ax$dNX<4
zdz?FT{G7!#ce!|1AQ+qUF1&+m%U+RcbkEPwoADmii(W7#q<-IbD;X1SRQJI(nw03u
zB>ev>vA7Z^0FSwfe(hp;+5}V4@^3=2LOcQ>hrXsH;BV9)mL%YR>ZB480YUI@V1Odh
zPb-(L@vlqIMDqepdJ9~z^<G~>H7Uq^ioeu3yk7xUi-@qE6Azv>_3ep*VP>gIQS9;u
z9G4y(A*L(!Hy!-$g6czWsuuaB|JUrEkWOJ)<VV0i3C91)Gx}A8YEw`c9hJ(_2d#fM
z7*m8>m83pgW$;xXtR%Fxy-8S3{xtp+KV?c1P(*Nz8B5uvt>Hc(_Ykp_qa)^3c%*tZ
zcfUl7{!l1cuEg~8I)`_47Ed}`Byw<ULW}KeY~M?7Xl0{+AH$25@jXoC!%8N8JcTZ@
zoyHMSdX}R5A{g`@fBe88)>}Ga%vAI#?>?BpSmU<rFDoi=$}g>|fR(2qMr2)V<v999
z(Tf3*j0YC!iy~>s(8leeQnxGP;;<ED<MRWf1BNXNy&>Js%3AfbN~&Wz6X}f8aPQ$Y
z?lEM_Hr@!KE|j0W<YVYzaSFA6-{|ng)SNLkWD(g8l1rkB&0R+BS0%h<5m6A?-`Tob
zgYPXd=i64Dzq`SoRc9e$i&b^&@x}Bvo>rC?ClobfssxwDDUUa^K9J6XHb~43;p>Lq
zxun1A<EPFTP9zeruWW*Y-#*O*<UD}@>|dx~**el_b!K0CnRMzzm_XDrc3b@4t2gi9
zdo&kuHPsbhD|ifLOP@h-&hH!nNT)c;`>PtdI31;Cq5f`G?zclLcIs7w?T3RnxQQh6
z+A$a_O3v_`odp=)f+U!0`87T3?E0z;hGwwqyeCJe39Xi-b6c%;f0TQgBDAj#wWWrz
zcVnHT@4!>bL(HQ?SlGqE2ROwmIx_hATxz49f;?+3TBI#595sg=a$V%s2tQA<7I??!
zd^+~i$)83S3u1|qK1P^?Ai30MM=q=%WAKsBMn2k=GHZF;J!jO`FgyCL7hvgRX;n`3
z9+GJID5RnKT!?wx_b}m@K;U>)(&~J5pJ>udJ;y_2lQMqgjEqF;^_Cg)77Us9G3_Pk
z_R^q#Hcq5Sf39<6-^E7MDbQ93UW1huD~D@JL^!ATsh;F>T-4jVhES6ymJQxHx#ejr
zhU8;Y={OA;Eo!2C*;-FBe8G~TJWtOrRI`MQIw9(Fzsr+%I9bBOj4lgW;aX2*k3zTn
z@KEW_RW;+}n9SvB4c&`~yU}*g2<4q?HIb*e4v!#)wyQluk!2|DM1SGd<LaEWelhGM
zKs{`HlIo0ehcejcdKogfMo!h45{0zDogWF|W>b515+k=AGFqv+qPQPq7^%>yU;pZ<
zg&VXJ(dZIl5L9?Gb|rpNSA<-xfN|}wfH8>XbhM=}j$HhxsL}(!K}jL$CH2z2jeL4!
zKWW{X4HZ$BaE-Q++Lw3|#$Ww_JV=NTP&{7h*P-D}?$Ox%Bvvc<LV<DJAY#`TnZiOE
z6RaJfWBkL`<syzux7s?qkH)$qd7%4uMxO;ZxV<t+?4c|FGED&iXc1-Zx<PhG)lW4W
zMw)en<pHA7wbcL<<d2rY&G%*nzwL>CDl-1RSJpsj6g;e~JR4c#!4_Ebu`vuq6=%m|
z#FR#lU|H+;_B&~kk5|YhDc>h(Uu{Tnb8`AwL`8|2KayZRt3gUjymD#q(0<-{3lZNF
zZdC4;vu_1+5aTQ@JY8a%)@CKvYlnh<+zHc!K~3>Qy;*Vfc*S9sDMU3o*vMqH8E=b4
z-vo21>=wK49fcwrNR_eeMumTaoxD2#?a-MfpPQfs#Y9{_^^Se9jJx8Q8WiGa$b<%I
zo1pJ!E^X+=kZQ@&$TQr9sa3rp#pQRb8)3Gd_u5dn+6mq|89g@sy`bFSVYao6j_W0n
zxb}Sqbh0~OXo8As`MhPv{jz%182`-@nHWRM-wTDleZ$vFtgFA?YdX5oc8n{mnfGwQ
zbHr3T#3p$H=#+SE|4@JXLMEptBPI3mcMl$ts3+|wQx;pI6W0I$^Q^Vh|02)I-ERae
zyj;z9#=nd?U;VB`oGl_Oj26A|?it;AdoPQV46K{D*fiwuK%X__6!<p*;OCsLuN*(|
zln>_j<1avuUwMnNl>tEeQhPu!^s?F)2}*fC=ga!L7TfS}P{U#EhZ)P7`^#uublB<n
z@V?7_Uz#nSCm+XD+r70NU*0Kz$yk0p^ZWFHzTxq}R-x@L*XwiZqH2GNV1L*k$@;NH
ztZ%h}m{CdbRVHI`U%s35k4EH)CD}fdr5!dCRcbx(&5fAcs1ep`Wz-RB307iD6sVRA
zDs)qsHmR1%!7vd~H()anvztf1J8P#<(_1xk{zlz_l!Vd2iT)OOfK4>=>)zt`Qtm;c
z+08tX{<i$f7Imylg?N^JEWtij*7#%5+4f^8qKWjIhZp%9JgzqNwEqaMg-{I6jB-Lt
z-iS5LX<bGvrhU=n8BBHu2E!;UxpupikX#7;;PP+x+v=Fn23p`GMV*GM!YcR2!XMNC
zU1chq-i5-QDy~+FgvM>(!6gb~o0U4P{sGBsqP$T<ZSD(*A&apKUwO0?rgmzqOZL~4
z(E@W%2p{o-z@tc<lyK|yvg{S5(!eIPsL`i3N?k;63WNK4KGiS`k!<Gvuamn#`<EP(
zPb04IHzWAS#fX?uB$e<M4X3eevEe6@9$tR#9kDU>`qg!zI_}=hK|g0UI6Ilv*uC5W
z3e9;m`Mb9eM_D01dkmg&$V&V~_LkV&fWC^iLJ&wsbra&=zDO#zCt<Xe{oODkJzG*k
zPg3-{hti2#KT%$EZu%sczj}Q!>zY#haDT;;sP?8d8}PguKQKOZ;Z0nL851b(<IIwJ
z6fA0Dl%ME_ES-L`kTM-e67=s@$19MyL@mdKU{ua(G)ozJy|3Jx(7BVg`dsi&vEH`t
zUc`rvzLCtr!tx)3v9IsNTzqeOrVUy76ziM%Dxix|=(oyD?0nHu^b`e;$Dq+%^O8-v
z`{M>{c^MC|+Ui{y#v6j)dGb+B#Jxu&XZ&n>9_};xZb2R-skUF^AapQnc6dWIhEW-Y
zE8hp>NC`i*OtgqO$_?05_v4?0fsm-;<h>EZn3!Oq=ll+R$B45}bZAxk#VuFKBXNo<
z$}FFJJ-1VT5zCv7&2fM)q;^UE#-t5fyDCqi_P1m<Tr3BZSA;z`b1B42SReaY*mm+w
z@pNJu0#QwB5@XsN^5&<%Y%iSrP+j!Of@qu29974qBHu}uHRv$Ph5r}Nyo$o~hSIZ8
zN5BCzwSuYC6Q!lncU25}fDx3neWDl_)r0^g-HMja&u`~<xcNfFMvokn6O{tDAQr@Y
zzcEpX6|#Oa?7MIy#3ND+O+BI}lfg~}dlnO;#2AG92&*rdf(|yml{z${#noSwQ4Hq<
z<L|*5l2FOL>g`HCAQyH%!P;{`6<l6449D8IA&M7+({|{1PjelN*ehrOt*_Ini`76f
zxmU3s^Rw^JHX-{uX*xa`@ui+?k*T)Q`J;$~UJzvbz!jk?rEi7rGCT;z4r*twN#9N<
zIpCbUXO1#hx;wWOxH&~V9Ar?kyJ?wDL-}IbN87+9^mwoz2`S3S$CU^r`vkMZ#G;sJ
z2;-$>&R;on;Nir?E@|&+!ZJCQ@C%exem9VZ9)O)u;7Nb>m)7F4DV+j6;aHTA++e1b
z=>;{yqx^<<TPV~Gv^;`8Z2SXD{byc~QapiHZbuR(2Ekk=Ub<IP+0<c-!*urP8n<=r
zrYnh!{WglG3;xW+IBqD?DIOUzbN8Y-I1;!d0^Yu2EwIZX-LXzrhDJW<L_1VZA9MXp
zV}GS2;ZUq;pIwhuPSfM|X8^g{nioNK5ejQ^8e2VWQzemqaZPo&N;j=byvPa;X_3%i
z6z#MWBiR+2wevU@>b`}?Oj;Tw)0}q~PM@F`0AizMz9W!X5L&jAfhl9&dd|m?DeQ#Q
z*R0j_DI9}FV@LFIN+FhB%cS<TV)-i3x+tQ*`xS=VYu0+*>|4bcSWhog68ld_|LERQ
zRpgi`A3A9K4VXn)yX@Zcz)j@%Zm&()3!aw_L3JfQWj6K|V&>zsGa^aTq6dfXL0&Kq
zg%0+yLEuS<Z#yYiBd!zyn4r2O>LE+;yth*6<_xv4homn*yU>1xkQWP^zOO!xf+@Ls
zTT+ze^#A>QD6IJnm13<mcf!=B-rRaxX=mUBh9B2=PZ$iAvvc^Z4trX;*+;GdvcK=|
z_>hjZD;QwQOu`2|k53<M!~?`$K_nzDMYQ}<{>bT8&40bwVozF9lp~jk1GXNX406*;
z1kRX3f%_~r;ThKu7DZEmUL}4h+_UzWW&05ILm}yI0|!1<$(mYUCs6wYb-SS48<J4m
za?nf^Y_>qeOTq8%8$?6>&ClMN#3-VYKZyj*6cvKj2=TXjXauye_TJo;bE51bHEmD%
zE!L3dbFHfw-hm6`tbHN-yNtWe$BNGH_xljJtEnexgeB>NZa?hxDnD^V?`!<7D&$F5
z{JwAlq5RR*?l6T<@QOX=2k_7QGUA|e9nLd6^abyV1?_~tYjx^muoHjgvK|JUVfTN1
zDDGe#-6<VDnm4EH6yRfi_f?v>D2r;={#i_>39l&*!$83jfAITEM+1LIoKJAh6#%X&
z-TrXPI^dJ%#s|Zwe@%T-lC_k8h}Y0m^TSD$LR2aG?FKnG``k6+oDbcmwH2j8mbSi1
z0_2FLMAP<XyY@pInq#m@<!6!hhM|=Ncr!2bwkB>mcOr!!)}I29{Tj3W!jS>#R)&52
zUyK7cVZ|orU7O5I2J!(@vukrvU@vV6_*tvfDCFY$lRgr>m#7fTTy`|!p+Eaqpn=Aj
zVbjBjC<qJE>bG2v7P=i}?cnd)PN-XVdY?xUPY_Vp@4FqG0OlELaa+_~8;YH^U|Z%B
z$RGOW-m#)c<=%eJ9NiARG|bzKtluw94q^YQBsA66BlZ34>$UB4=e4A4-m(?u4h>fi
zzHNc1%6<Oj2Jr--V{WP!3;lv~wE-@P|Dj=-uRpS#Ale1`w>?`EY@C8CW-46DJw!&|
z&QDsViu2{?Hm5|z&oNQ&A4QkvV3aZ<!HLkwYw~@o6xtxZm-?>9M8#1O<uJ7b2+`aE
z02;dYd#>PA?wr|Jyj45Tpjs52EabB99>qC$f=(t-J3*;2(|vX@xc*22=ZSUfTrA&B
zcHUo|aJqzh(-ajTp5{wt?e<rQR}9B0kWSVljp{KeeuAQZ|6wFd0jAEUe+5|NQ%(~W
z=!mBj#O>^5F#prVFU6ipJin26EdRMYB?%B?c<(TbNF1q$TM$N#r}`$w`x#?>!eSlz
z`@*l=Tg$MYfZa|LPOzaFBuV0MBJ)}oB5WUizcQu0m3IZ2l_BfLmHi87-h^0;kG7I{
zy&`6}f~39_G+<5bsWxVnn>zOM2D?rEhrTO7m5Pb}85GrH3i6p$IiYXEdsGI4CV3Eg
zs%W%6=6KvK9WD<YEhq+?&IJimp+r@HcgnpI9f9Fjz<7#2);U3b#kevEdSWF^pUV&p
zNKOT?b(H@BL757EXBYxPm@kB?7h9dyeWW~P(Q!_rZnnZG&=y47-?ESU$M!)PnQ1S|
zHL^2&;PKKGvlgTn*ZYrBCG6To`4Bm|65Lm3Fi@EiToLC$7Oi9E;rk!PP*9>ZgF>w<
z7UB+B;`Rs8GmGULscs`~wKO0An^t4*PPyKZbAdFIAt-);-tv8Rqtj*`Qi#ip7r(kB
zh+jGdkM<nzdWSV;%uH5|QhN<dXRYa5ecvE;lxK^yoxumrZK+tUTbtW!vK)EOU;Hbp
zDX61jUnbFO+R{=>MC`6x#c9s_`>xR;#GNC%<R$kmNrvCcxAk7(U9PIIV1ZFvO4lQE
zBTM51{3S}|WNAg`yPX#>R{8c>EmUS0%_xrt5CF-Y9CH6Ep+8=XH>uo(Q$gB4bF6a=
z!GkP*Zs@*8#25KtUh&y!nHGPh{3?4U5yEPrX9D~&7@I@tbAfu|?<i?q5U8hknm|gk
zZg%FZ*vz>87(^4k>Sx_=8hN;?Vw!fZZu_czZk^hSE8l*cAYUVFn5l^vcjX)PA4(%}
zv!i_}N0BQ+3LZVjm~tzJ8+5gHT-)L~-uc8NYJsu#?Z&x_!XjE+(|><S=Es7cgbR3b
ziK;n!`%Gv0CcX4XgVg3}h|kM6&*?pvnq+Hv*P7;!b#rxe_ZDq+Ig16I33AF>g%8Ck
zqw4Q+cbLqZ^`eex^laH2w|@ODxh6+Ww=M_|FDF}-_QZOO>=CW_5t&O{e`)(6grk4%
zey)FIMT!#`ig*}N8_$vTq+Ni@SDpN)7VfAH<6KU+a`9-%idKZYlNC;Gnsfb;?$OM#
zr&~GHyyVN%h{0K^=h|6|Scl5_hjV_ZUxOR|Y0)Ipqg~eYrN|CMxhQ2i@kmvEh4J$j
zCzd?62~R+v%$M(V$=if_D@dJo5X(}7`^s{@BS==(@^XRkCH0XXPZ;RKAC8}@%Ie3p
z&llE>$XmrJ!90;M-EHa_f*sXW?HcBpPes#2l@}&f;@|3bJFk}y+zzNjq0~q&kYUO5
ze4e?**>#SgD^bp46oYl}Mm?HO(2ChtD?{L$C$9Ni+sYuEV@XexL$C&5!KvE+JbQ1s
zj%eBK4%MC#k=~3C`Cdqhi2G*HgJMR^w1(@@{`f+({oW2U_>rXrajyHz5fXd(-E$Sx
zkd4kZjTCG&7ayqu(7Y%#a|G{#1}9`DAvW}AhEQ(r)NO*2x7P`U?R$;@TnC66^hO@#
z?b+7UXBs(Trqu!MN(#m773H8Xg^(H8FU~L{U>_HWNWF|*(!Q@ccB3Pdd7NAz%_+)&
zUVFJ4BncmKjzTOG%QkJNi3@<Kj<$g#T3NgZWEy*P9L`QUZCvt)Yg@{`Hn_U(2Lpqx
zGK1#wlJ8{J<f|o;ja9Xs+1cuFRkxg-nCsS?6<Zl>Q*f?QTRC{I{B34)>o41^-~O6+
z<M-{%YSkjB6+e|*=7;vV^+hclMs;mZcWL9f%84WQs<Wlbikw&*xN=32sky4`pK0+~
zcYP*ya(X!UU;Jgf?A4x{R^p>gbhGN?HZKD!kuK>czx;P6Rodt4e{n}4Lr^dH3O3%J
zRr2B6yAWj;P0{IdFJ1w+uvJ$$UN>7CbfjPDnqmwW+=qgRuH<^crj+1EB;x8WP3;&e
z516;s99LB~)6VDEn)?|M)I_A8wXBZwrF&zT{+TXTeEc;}xMVwy2Pie_W;EV^vDKH}
zTY%dlr}{$dnQQ)vE(dAN=z~{*%_Ht;(WNv|8aqOEmik^6x0w^7q4fTz^vt*}@#x-V
zRhjh)O5=hnG|CGTGz0|tnD@$W5O02pgD7+pF)@Hxy`z(fwQkYUjL)g-R41ao!qfWO
zvS9YEikeHX@r9`t>of-A^h+`Bb_VytxbnU>-GfX=_P&>wXOXoUw8nzVv@nt{&&&Bw
zyhkh7nIk3{Q;PcEO3EL?J02P1cad>(LyB@8jJ@WwWHZs9A1C!LEoppS$0Sw+(OUBi
z#Y?!++EeN-FEkMVdq`09btuC(GM?mdKS`eAi692alye3Y-3~dNsXmLT#ubZoBhdpi
ztlm<vjftE!=$Ky&PE~|%5qtZU&)ReaZBC!8Re1&Y%PWNn*XD*%w$IV&=wRBy-q$d)
z4=u|vcJE3241Mb3uehiH$)7gG%!+4X_h}lC49Bb>Bxz-2H#tGf%ptIpO5c1MX3wcm
zwwrQ5Y2M4vS8>AI>#)Q+5x|qR!xdSXn3OqS_SQF{l@yz?$4{h|sX|iu7CfMGe{W{G
zMNy$>7rdrDR7E8Twg=bV=k6OL^T{%HS{;z%=t3+7=>{Y4pY9dXYs(DVtPR(s%2yBE
zDyb&q$k^0qTBc7?vT@O%P$N24F9uumW%FHVpTnx!pq5sX*ND%TJs-+;AW8?<I;Fy!
zd^_k@CVQEX$R3ZY9dTqLBaXXFIF0k>Ss_Lg^c1dw-EXdSwP@xwTT9N2LC_`<U&4(j
zJ9O2=5|48dBijHLB)mB95$S%^VhWq(5yphKdjIwBRBe7tU^Mlh>X@In>vqZ`xd4AZ
z3Gv+IQY4~D-|}z?kU6g|Yk1LxfmSmO+K;VH<qy4`tSNRudLuQHi!wMy(R{0FXf3Nm
zHLuzU_wVi70t;qS(Ku+K&9Wh;@kaX-;J;6yS9yrFs`aAo#&X*OT5(ab1Mk)+3&j}k
zKE{O<OX^foJ{uqb@4ZvRzpOXLS>uf&<92L4RtWkK4zaI^IeU~Z-l}Mqi3P<9b~rE;
zvmzblSU``}nB{PC{TrINPn)8{C8T`{rqo=QqM}~J<JLuZYJt2GBKL?cLm>dXHE|-o
z5VizA{_+At!USGg#kxGQ1Eu%s0j-7F&&!|X>Me#G%=7(6Z%nxF53Ta%wUuAsyM#i2
zF=+!|_$osIS2^zXE3J6M!{d46?YFg4RyVwLdlkbJ{XW3mwL;@6DN`!1h?EW)=zCd#
zG30{n4y>n-d4o0q&D@rR`Yi{xfc>Pp65StLLPvjG?TwEoQZQ>*eg)RLvoIM~zbrlO
zn7Jc7giy50vwyyqYX9XELEFxVxnLMmUxWQk9K$pJRC&KKQDOLK5)iEn(^Ah4dSpE@
zl&udDQseB%6EK|qnj12<81Uf1e<L!Q>>-+M^h^<`v-SeEB+f?`bgY`|GyDLRF3~Kn
z=Qc$?$_U&zPIG7Cdr6=EYAW!50ZTx%zXaR7g4a(rpC4U;=24pYZJWpK^=-_n@UUz<
zM!-Xhh&2xe-`G-UKyjDdY&Qq7!NKX^o9M7~-D#P2*=l2lRqx1+bC=C2IhPG94{y3s
z;o;%GLmaxTY(;&SF?16109l^=;q(v#ej)6F)d3tfKIQAf$4n`hrfPFEA3|Te!cui0
z_JC>*v#)#V{`pGJU+0+Mrj7}^GkO8)Mik}g53jOR!y&6<;ulnF=pI!WNxgO8evPUp
zm{-zjmZQ7_mtNaVb<o;Et`w)3PcWfB(<aWo7}$jk1_&0U?JX(1>2AGRZ$ezI*|dkD
zY&ma92Qx1$p}5m;9?TICOtzx8TWuoD9_hnhx80DocU^_IA7(P#L9*L(FSU$i8dMy&
z#~Yg50khlV4Nd;hw%bV{A>*BUK@#WtpFa|Ps_O2dP0v*QTR`F(RJzYPv2uTYn3k%}
zXWSnYC=O2ZKXgNu1QAi#tFd3J@X+G+RNw0G&-;I!yuW`bPJg}s^$6~90S<46e-<ad
zUWn|-)8hZcKYy{u&o6={oj-p&J(VYt7E1Dt{6_x;H>Jq`LQ1A7Pk*uGyZDj`a6yvq
zzx~gbisbvR_xHc5>nPBDTLGg!GjoS8?2G%%Phe2q;q<pZ9pasT<ELhdpJ_S4;*|dW
zJN>o*MIDJmW%Pe7#mO)8z;6kC1ZTE*{~kcvdGT+_=i<vR^1XOJ`BJ=pfwA|vFU85P
zM<GAsLq!Lir{aWv6L5hz`Th6b@FUe9ua{4BRp1jr%}j9*$YO`MFTW^<uvn61M!&;*
zt!eQcS@wQ{k6NF4Qv-H?68b)$PESvZ-7^)BopmObB%7x!Hw)k(e-(0PUZ{Zae$VM^
z=fd3alZX0r^7-U_g@-7Sg~2DiLQpSW%~Q(J`}^k;n5JlOq@t-_`Wef~c$04_$**6z
zdHr&=@dA8RSzE+Uctj9+m3;cm&LG}xmm>T9_ww(zLc|5QS?f7jw=?*V_6tZz_W#sf
z3v=5>lKv|al2U-<2&Q7k_JYBo6vf#*tVogLI2%Rh;$tWw1_25HWz!`8`+eOr0}Mb=
zE8k<Uu4>l;27^IQPd~oy>0uT!aFk>?Sk_%HJGB5g=C%F4TAFk=X;55A)f{1d5nf&i
z=_5!^CU9-*wOildktZY#F%KR8kt3`nb{6ml2<KvOp7lqDsr&3n|0{@Ih;QOU1I2m&
zuU}xqmSKqn&@D3<*c9E|$4~puJ$^mI-P7k!@On-IJ$?EFT7;{wp7;Oei6LD*d-m89
zV_ZGQOQN8Qzdc8{Ie)M4L_#ATJ;N9yZc03{pka@m9(m$4ymZFNuqb{WGH4tZ6~CNm
zvWRILq#Ry5S7H*ba1kv0_(brNVD5T;mddl~uUKC9l5R&?mI%5ic(uT&YVe?L7S&hO
z7`%ELG3_z~el>td>CU_fhDe|307Ik?(lB?oFUI~K9#;O87~qUE{&fnOJA?f`G$D`d
z#zQs1AU`;88|_XnSL{z{#Dzcm;JG8$gH@PATRdY~GJl*)xQ-V<4_G)i7U(^s@2@tZ
z5UYCX$;R_whe?y>#H=Emh^aAOB(H^Ht^=^|Z1~e3!>PETmHYDOZ(eP}&uUS19+7gB
zTn_W&((QYjs@HMTu%#jFS(x^Ym}!U}uFIQ2_H{l;d*PAD@Q)`i)2on7_y7u!VO2Kt
z;;dyCl(!(00+yAb<0v+z7@h5PF;C*s1!3NL4F$@nU)gSrsV~g~@>|kXN%9-7*F$nh
z`dO5RS&(U3@v&S{g&}hv3k6FDU*?JZTzBy*p3opwD@#!k=9i}B@aSrgLT!n4u&0h+
zUGd+IOrXGNxPLS-%$tXOsE~Poko<etA0&r|YUmM$POb)Oyis)Q<|6R|J?bcORfCxK
zdR{QcG|WBT-+<2ju}7a7;C?Xoa(|H)H}Mp_!T{c2f2_&MFZ);PHT_G>p}*jy)mtya
z0#yE$#VND8a(@R0xP=W~_{Cxb{c{hG;LqGeFQjf_Vc~<jh8<*cc{YuzE7uFQJc53t
zU4fFC+e&KoBy=Wae^g=~sa~c1J}pwZND@dAoEl$L50B{Kah?yCeq8WhNQiM;&GytI
z`BE!G<5%)h`Vu&O>AIEtl1H!RMpQx8J*efN(^rD3?Z#BCc^2N0$maNC*@AtZN{&Bi
zB;8Ep6|>&SW#Q^;7=-vbCHp{p@wTXJ&<F}EGB<`f8*xqWX&E{{q@V_HvfP^v;{=Yj
zUdT5}T}i?e8o2h#n>>5JNBH4Io<ruAT6IImyk$>6f?EpMXhe=<6mBV;V9)W)ZR!Qf
zL3`K?sIwyD;vQoa!GS+=da~~Q{@&h3dXK!odgns}uXKW#K95vpoY$dq3Gg^nr~Lr}
zT{hbxO@~KVLFZBQnNxMD$S{(I)!;AGL{(30+TQJ)kF1OlkC7lqhvztKPVJ@b1PPO*
z#s?O1n2&GB<`N*gAu|hch2^tUJ|dM*$#6o?BZrlv=4Kk8tp`M&q3dVVHPc-`qpq3N
zH4D(z%OLMHX+P8SMJh}*F>sV$w<JhLZr<h2nNZBaaX>%*0qqr|@gZ-(3qT$@!xPQk
zoX}Hs*N1L-COD~Ijw+kSL&O*&tzU{;L&R_%E5lVty5eb|Sp}gFQbEiOG)Jf<16qdH
z%7J3w^~2H&+{z(hwwCjkP;E1~a$fp|TqX^`UyIZ#ncJG_{EBL%#p{_HFQ}WrI$r%q
zt)IGS4M9z`q&;;>ud60URB<0Xa5V`%Gxd2rM^6PI^$aF*oK58Giyy3Mnb0HlR>~m6
z2&E|BHzrv?Up5XAnF({_esQi}-gCa_)kF2ZaQ4R8BAM)^S-Cfod+K`=e~%)fJ^U|;
z-^paTHy#3OPxeO3y<v*4!4Y8=0REI~IFu<~f<*dXctO0W^#U}*9ET+NQT@$GdC0n<
z#m8#yGwViV_4J9eRj0b$YDENLO96RaOQC*sm4YBzfG-><UAer{^1Lb}fyCLotOMQJ
zzG0E<2t;ahriP*%0L=9?&S$^o!?cL0*RPp14yiE|YNZ|WeyDXd?sN<?QXV~!9XcOJ
zU9V(O24oC(n7jLZ{+HF$Q&5W=H)1%S%XIQGE=u~vu%K-?0Lc2acgrx%l;9@bN|ss&
z#W25K5DYJjuiOJpSrj*LNj857+p#H_#z`r2%lBH?hYTV)T?Bbq8Bdpnu)@wX7=S3l
z>eJe;!@iNID~tk*kpVJhU&}!T7)TDiet`ftNXhaSL#R(DEzMb`3<frgvtEV!t`%pu
zBmMPyUk8?xY|NkAZfQm^R-EyT@}Z@xU(iAX!W70k2^|1(HWH3_5jtd7##9L|Eg13^
zT(VLadMK!IndM7mVb<%_rp{YvdEZzV;&+w-W1%EV_6i~YtM&Q~M9I_2(i~f)cHTuT
zlJ1cX@8WCv#SkCnBR{4yXj;txjM+(79_2Wl<n-Y$0mca#bU%IK_bISxKR(Sy0A+ix
zhEsqv)nUKU;RJ>fA$P}<H%w`<cYZ_1QwWtbX9u56g8hn_AGi5R8J!H0!36D|bp5$s
z^LRq}S&uNSM0l2yK#t{woaPenVjNb^0!}qXn4SCAvV4t^PLxy(iP4C+t7R&pZ-RoO
zCRp2-N+(A3<0N_-Bw~R%kB0Q?Sg^qFT!6*u76#R^<mj{kAmCrgv14Sx7=hRT%Jo!}
zY^=zMEqh*hQ0)l~Qd&Tq;_w6P(*m>q8Gkd<u<FB;I-z)qp?uoJ%Vq$OCLQHIe(D)e
z@ue6k-I#{3=QZ^oiFyML&VdcYxd~YeZWL3$WoX><dM4-okVmozV{Pd&7qzAsU(RxH
zuK=9n@!2Z}h6UrS*E1LFRxf+j7tg>7dIX);Cg7N(Wb=Hc^Nz<JwTqA702%nz)bH>=
zl$tv~J9orfxVB3xqmS-NO*T*+3=@Eiy)Cy;h8CC7@YcfhkPgC<p#s5a*f;sKTMO6M
zoiYZTx>FvehuMHI=rM;{z@LQpmF1-lccJ2gxD7AwXq2m(57*XWEP4duYaWs_Se5>D
zW+LVHq2<=t(h)K4`yRaT!2w&8$XMXvWb)z;>t;m6JrOqy;CDTLA<m#jBn$5`72PYB
zv+PdZJ5W~_9*ar-mR6lE&cl@w-k_4=?v=X}%E^46%V}^e$aGmNSp^ZHbN>3(_YU;-
zXU?lb_e8zC(5Fs80<vfbkrF~_BK2zm{=+b4Yf<1Y%Qa^oJW5LVl_7Ok=n@PCcL)mD
z7@#2#C&pgOviLWcNSG<{RvDsNsA`H?x?lrus{n7_gS$!;D2dhM+b|Ke$mccF;*ADK
z-5=kOEQ(yt>6~FVH!ohCzdSy9@vmm6rs-38s$T<Gdk|k$m`EA5+spY?sJZ!RoUA{o
zxOtrgOZ@ZAaQx1Oc}q%|(bMm;{QWSWG@sF<5r%x%G)_&tQp1#~UtxLL3ea}qTSN!H
zV<-XT>Nn7;>40HK@x<>$3_@9#uxY~D*<lr@eiKhypW@G0AK(Gic-4;CxmI)=)Cs6N
z-Hvb<tT?=q6u<@BKFHbcNcHSLa(a~D*$5TSJ^bB9;)eivkx*Q2)9~IN^kO5ndt5Yo
zSUJzX>@-Uw6Je4GgsU-yI#E+vCjEytzHBI}xPMT`3C#2eOO&t=^~iq^VY_7ZFSqM+
zUXOx(+v9xKmPUZ5e}<ghhk(ZKVtg<AfH0Qho3s-V<~8KYfCw|%x?=oAdmt6A#8X6$
zyk<^7@bZ3G2%LF-Ilh8ro%{6)176PkdX4M#T~rG+a<N#IA`}M)lsqg5_Gxc?+Qe-W
z8@HX%JWsZ8+vyf=JE;-LNrl@KDkNB>0(=X{Y3eAS7XHA{J)yKR8B~fwy+0ZzF%B^w
z*x&jq)N_AII2MFf2?j`)m4GrSLvB`=)X2FYYU1RO&al&XAJO^}hTb%>*=~7+sfX!I
zT#L3cWXC@^-GTT@c$V6)qzJ{MNoBChe}?o<Y@~PRLt4rov@pJ;{ecSX^)=9I_mN(W
z_4+NG2b6c)KzW$Ff_i7XD92coGjDK)6*)dQ_yZt!pti?oHSWU8m+s87FyL()=Uv-4
zZ&~5IYa8e7f^pvhoiU2Lz89fUH;pMZKs$LTK%3bBZJYB|uHcq7tY67Q(hoek4rwLy
zpK`fIsd&2&mf*OAMH?-E035PQ6h7~;SR!ScmAD0CW%!3SJ}gZNNaMqd;fzj)=szbG
ztmzg%#B~kvYrvWk(oPxfkjN-m`LOC-6tgNDg1<EfQX#o<bCZy6OPxg->Fr(RL}CJi
zLj?v)JQB4or1jEd2E0sMZztxfIaFc3e*u#;hiD^M{NdIq`Mb(VG-p4k((-qg@l}X9
z@0_uLW49e}?DifwcKZN0rj?@%PdlO5dq6Qlb)p-HQ6vSsw|o!`JKYV#mMs{z?0{h>
zwHyClZMZa(5wkdT)x}V4g9+_vUWciB^i}_vCw}9CkJp~~Jakj{tFInEMJM-hpXyPL
z`p+Iedvf&r%g3JhN7z}fQ&%EI^<~i6RVjuxV%=SU5hDCQSg8VsUqVwqLBGc?Ka}fr
zhfG5r<Is8gR`oo@zvJ?7tX?>DdRtjObXBCjUGQPGxAEld+sZ!u<5FIQF8#Y+_r2cH
z#sy@;b7-c$d{)6+o#rJ6y_M+AtVC~0%F!R>U#Ek-*YmQ=+)ni7CY$eaQOht%bYfSE
zODf>HvdS9PYijX)Ig86ucI~6pdjnZh@^sFdfOa-*TJz4NcfF5LQW8>Wo-8{n>O^5b
z;O##drlKo<Z4JvosY+VATsbf=RMh}g<G~Q#5WGqOuS~&HU0qNY+JGeb<;IB?m96Zq
z;VtKe*}Q;(hJRG71zCfpXY{N8Z{j4mkYgF&NmY8&vUmKdMJFd`6~!x4?b7bUg*ALN
zaNQWNjokYX{v+bF>3V(iC`QxKqhSy$D>%fTp%<lLKX7+%!gC$L=Yj@t({)JuQTEKp
zgt_{|R8PR_4<JbM%_W^647V53qTQ6VA*|ZCnSWwfM4oAE@mtj_xgb=tw=UcA<KjZz
zE)Wh(s5FWQ7>BkTbSjhlpHe0Xp|+H%+^tO62;s?{oO~0Pg^oOg&U1#kG*FV9{YIBC
z#CVvcujdnbZf}=)D_#w^zm|<Ly#uO7A*fyI<VVM#G^{1`<-J1xFo`v>t4+&**SKTG
zp;d5$0QB>qY^cV!@r3`2PPWwWP}<^R>9qjX4L-4jKc~6n>B2`#&K^petZ0*<ZCh<$
zr?XEdZ#r$!N5h&m*`*)#08x8Dyy|+2xLrEtHfC?MOf-v^q!-D{{#777MIVczHZ+Qb
z+iIyv92<I!V&>b53Ckf?=XCxbBnCqPRW7JdIT!=8{JlejesQbuOMem<z?n;`UJNCb
zP5%`B-E}T9VEX*<dzC8y`2VqPrBs0IcB7?h+__QPRQo`lIn=-?saD4d4VKkzp=qMJ
z+qZGSVoH_dM|4jpD^9Op>OLG~3$-;Ak1KfLrv4&TXf3n`=7#3pYsZk}8a-MMt-K{A
z1WFc9%>E+F%2V3K>?kSbG7~Cx5{o?HzjHdxM#b|YE?#^9q6u_?&}O5HvdV3HklwGR
zwazI8vw74P++-%Nb;R5vgtdgV&9g>VTdH^R4{I&0&o^yiy|NpRIjV?laa&W^^;%bV
zRnYw)OHuQ{?PNkzv^u}03oEGPeV2=ER|fy+8$~o#=qt^>V4I_&Iay^Es^rIvq%7DL
zJh!8BU7#Ww%Np!j?+shr2I)Upq#HvPbQm{fxrLhD_M{kCmMv>$-Kd~!r~TL}hhV!=
zmwYJu(NNC+vL@MnE9IwJ92;%6`6AQRkU$LEMh>zyuzKDaSv9tX7V_cZT@9q3w})4)
zU8L_6Wm?tkm1Eu#*cO=#kK_}POFP9C%SH)iYdeIipIW8lRMMf1U?hVUB2OhEHd6u2
zH#&y@&GncsaU!kYI+tH(^d;^Y!VyX!NSXq9TCtj=Te(!{Kq`udvT^1>Dc6KGi)${+
zj3GV+R|rV!Q&R^A`L5#tKl;Yys(r79hmm#?o<=sxKh`_<l}^$w8`Y{&S}Zpk0Ae2g
z?3U4X4OSX~_Y{*UAL9j9RbpyYJW{W^l&$K%@q)Uhc^tWgOD7)4-UaRHl~Sy<F4)l`
zy#cAvqTH3HqIxr;9z691X_y1|TSU$UZyIvt$cD})Svl>@%4w%{PCKh|+NsHDXM8~o
zRPIOj_<L}0i%F|`kxW-Otk;U*G7D1nNE||qS+ol!+Vh5JC$jS>1j(<vy&UkMTb1mp
zKZ61|L1U(P6NMV-q>nEN6|@D7&inZ4aFJb<Gej^+=YGHiPUYRnsuTxLi-UtgFX*Ke
z7D13Ei?M7J$g4vAeJUU3>S50^0hALhO+%@pmd+fc(<^-#lU}JwrHhKNEF9BG6W|K|
zOKhW&GfTfSquzPQhecpSuH}b$0A0s-a>{d2MSYN0iL$x;x*&b0H^Ug~Md}`Jpav@t
zLR(5qNH7)^A;Ek@0VW}M8XTNu2`RX^Nq&%HGAG20qQL}pCa3^v7o)Jyx!fZ<PetOH
z7=jSq?=K>HBT(y{8tA9CDELrELRF_hQbE9lfrZ2EwP|Mm<YnoT5?qBN@DKqdfIeqU
zm8P-;kN&%^R0H)U+O5xhZ2JoffPS(;q|zVTAd<yZPRl?UP*r1~yn5U))KO<^U|MM<
zqNHK>^dk>=ig6Xh%`!#s6%`aSz$@Q)Y@+!+NXxj6?&fr3T%<^Fr<i2e(KG}F>_A8T
z7Vnk%Cwfeu|8o(P&Ex)Vp|Ix`NZZDjF=7ifr>N*G%Ppe9jlG}<=23gJxxj-YO6WNY
z@jdS=iR%J)^$x83q+=kb(muS>usCVBu>Cxjuh%u(X4@h4qB3YMV_oQ9ch_YF=FE_1
zqk)M{a>v;Q88i#KrdIzwOD9;Otzy=X5{;WS?7jK_t*e}(zfWK5Z&Y$^GRCr<B57|v
zsdNy$Uk1(jjcWW2h0>#9ZmBblwvw;c=5Cs2vq2t?N$ulW?d_8qT9cKX9z&9iEudW}
zk&|*HSSs_?)UpY&Xd0S)qx4}%tg|T0P6yL`cF(H+AMQD592)*^lJ$g~KUu(bNR<R;
zYy`d)>b)nj+&mz1JeDmmqII{!aPbia&fm>;ywsuaw42I$pfXGR`km}Z_E6I9md=1o
z)%N6toDMo`^lu5Vpy!>ARIg=t+j98^Qjuv(WsafP^Xa-A$y%4CCjcSu8fTv`9n;?t
zj_Hj{-PgIIv(bfLLQo_*s^+O>-K)8ElrL9Q`|VaIeM)oEhZIOsCBnDrG&3bqHq}ov
zoU3PYvR?OjA7!*COR^4gprE&fOs0f1=l0g0;pF~4tiw!}!=L1mG<ukn`f6O}iN53m
zu(;;R4L+s6MNRI~-c#i?5}yhv?`T(tmVmP1Tkg~uI)c3#ugvnkm8l)RRqT{T*D^?X
zeN4Pos2Fl?FJ{tMvuY%)lzxlO-qWwNRLgm_^X&P<gUz%NY|f;6EZsuXNh7auJ%aH}
z{klHH9dixV!WNnYN=>CBBVmLsX!)8l-1<lszI3g7t~i=WuH<p!^*W2HVz(gW;1_ns
zUPrxx(Sp|#%Q&Z>CeVxu=UZ!<iv{Bp81*;16!+pGihDtdi=J<wxEH(R;?kj`xrbx*
zpV@G(n$qFShu6~45<(>qck-nAm4l*D7N?$4UEI9t`>I?f64GP;Ho^#ZDrlr*6#$vs
zQ=EoY>TtqmM@=X;<wOGqlOOq#2E9>YdS;91aYIZS^Ab*r`l^L#q~DXUo-lnR&YC)0
z8rpDKQAXG57c}TX4fDUD2B%~|tm7g|6>jK<YEu41f*LT)!tueuxT?N<<X-x{e~ZHZ
z*bhEmZCvm2&#U#LKmWY)9$gFP&p$suqWo4kYXut$V$1}y0m@PbqZ1RM{%3b@!rr!x
zEe!t^nQzAxYe<poI161?kF&LD<2Vy1O<RvY4<%7H8<|u{Dqi*9-?IQ9Kti&UcILb9
zy|)unBz7Deoc&BB1tC6#fd1x#dHXXu+kN)MiBm<4MEWP7)zKZ?@%d_Sg`cl>J^{#D
zp=eh4u9dd$S_<Sv`hC2U0(ns)%U+QesUk00tG(&q%*nU}Ee{a&2^w8qnh4}l%p|UT
zTfMd+Er2QHQpQ}x)qtiDK!Qt@-vG<As{!K!qKCKf;H^Rr`@!1^J?uBo!(}YqO8h_r
zIgi6b0N5EPh+GySWtyCvBAAXNit9H?F5)pkEnJ`&2zQiCDdZqWP`N<O7S;%Ks1&SN
z{hA=NRsF)&%%~~ctQAKE+c#h2+0+WOq9eB4ISh;7N#7~B%R+pNn~Fq|mvSpauT)4X
zu>!c@l}O7$s0~+wa2idU5Esvv&=yUUP!<MyxiT=)Il$<t9i}BGs%MCSCLLr2IopxV
zCo7!2i-N_@vQkIxdSL(VkYP0v+-(%!sgDc+L7}?r5GbH{>ChXVK&A0fI2Pq0!v_4G
z9)(l<&69%{dq?3O+#EhI-OI4r#N=46%)m0I6j<hCY($p1h+$V;v1MR@p4#2DK5H6Z
z#o@<TypC5y0a9eR2IF_J5eWz}jRjJ7hBHm_<GVB)!~J{UfTmj_0BOe26$I#YjFfII
zgpb;&GCMh$lG^%C5q%gPO`~Bv1<-g$m0ObDL9APg_(SqVAY<y3WkG?}je>e~wQ+Tl
z5nhYz@4Itg?(n-9R?4-*Ok8`sDe4z*^pjXTjl+XjJg10M{RfYIag2}mAKZt>-|(^j
z=)txxo*^*cPUA(rKckH|VM86QWk6Eh(v=A4O>9y}W?U2&v&uKXju_#^IPzDaJdakD
z!DdQw;mcN;xH+4678j#DnW0HDj<H*Xb7PG^5ucK8Mw>SsO`sC%{7K>;&9sO8o$~wo
zy}DDv1u7SS9qp@&v^*M^KhQ$5{Kw`1R*grDSZA&0yY1`%fR1B^cZ_ONQn;AlmZ=s4
zSID#^hLsezRfW;`fjPD%16vl9t-P%VGK?~U-T(!G>-I7ZVWHtaK!U%;-O6&gIvOYl
z7uO87)kSJyn%bQfA)T{7X)7e;3-ttC@{-#VzY0DEMkg*Dr_O?_XIv`dHWgJh+(Gfj
z(%G5^-<t4RpW-OMs4zk!hCIc9gz-gE;$IzKOq9u4oXty^+W8Bhm#5QcR-h8$MI5%<
zPuPTV-hIB^eg690^S3Ww|9FJK(Wn^8MZ}ZX`274?^)+r4r`fqt;J26WR#b<tR&D%b
z$c=w8g{nXej4<`@PcdG&Z07uTSsR^Fn=HBm4kt^Wrxa2Bgk&c4gUC8~zMyO~{GbcK
zGkiaChjB<zDTV)Zhe<ka!)bj^r!{3>G`+LULN%<K)T(AGBWFXax3Elmsupz6Mm@bd
zwaLOwN0af`Y!TL@Y4>o)0Ycq&Y&2v~7cGmj$pqSBIM{JF-E%cd(>7X;$9EW{bH-Fz
zwzW#Oj$uZ0MT%K~1PVnwq5~^1e$mKa{86okSOtid(x7vu_)F0_dttk*cymSTlyGeW
zG>t>U3W%owL^F{XapJf4;BP+knSP#kpFY>GmJvV}<}s<z31A&`v#nq%kVcm3x6rU*
zeF55@mr%cjXQ8*qd@CEF<u>2PV^p@AR}HI+9lYm@m~8zk6tm!HgBDGQF3-jKx+1`I
zSs%ka?uF7Kbu1OS5;De%Wowq!sC8yhH8Q_qQHzfuDyw^CBv68;^cHG=VV+C0Ywt~h
z@MSFC*9gKtSTXWz9KMgmH!%eYee}o|zvJWPg9lr__$NL-e%ycHiyt{mX&=bHUt;nZ
z`4I;Aa~%E>!}|ClF4a?6{`a&Nt-ES1gr<QsdesleS$VLw0D0*sew|@54;HZbw^jpm
z@Yb$r%ahRC&1zb*mbJHNK+7Rj*eIsWsK5MjbG22bUv`&#nSF_gV%*RnH=Avm2gaql
zT7Bsj!lBu50Jeac)%=3mXj_w&D_GQVlE)({M$|mZNuJGTD2(Ck&BXoUj<W3WMV_6J
zHd0G0@nJm9Qan<U*A*VjasD=gPL4zlTz}N>UmC)j1XGwv8I61+2T~Dy?L&`-G3MkM
z(|AGxei9o1iAkfZ8mN=5FzV_DkJI?AhPzT&qed~yV>D#NX_8kO^bY;w>No{P%!US<
zQf;v7U%=`o>FXM`+}wxin_6>g4be(>m|e&%@lf^zR0a@|&$2G?)T3C?BT>ElIG^!f
zTzK_y%nzs8S$rg-rKs$#^rQ0CMdK^|+@$janx&=VY5Yuj(vpHLbiQ3t`<M9g8O$ZD
z{dU$cJcMy@=1*sN-tAC5tQf@}?oK=jYrmZ}bVOyWpiVVBQ_S%**--8MosptFoCYZ;
zo9{{ia!3KY(T$9e$`a>~YYFz$1V5`YY2YtOzE!84Pd5tQt3vv#WrRD1f9JCS;)K9e
zxH>ClfAU?0ajdHR4oD@r7*e%vu1|HSjGF4*qHeqFHi_m2iM(ikp}8|J7)LpyN4X};
zn_PX<RnW}U<h~NDt@7wmz^I@?*2P6yR;>m{MvbRsK3!Jp_?t6XLb*^>Zx~3-Ap@SP
z`PLtjw2_6i@%YHojuN^RIgpoSe1=HBIS`F96<A7_A-(MbFPqV&84ykdy86sBriU#T
zZpKCxX-iC4n@nYHN(PcLHncs(U3m5FA*w4v@7oR4h?-5?-}u%$`qrn-t+1@yf(hvY
zG;2UD;e2!o%ukM2?8o>L4w;K9uLOcRv_T{40$?8(dPXta!k3(%fnxu2BXh-ixP5T0
z`=(}DwHDvpY|)WCKTXhhx-ADr?-19bew4n27(E>B%`zJLN-Xc#cahehgW~hab62!u
zX>o!+tlS41pyX&0n>x#-M!B8#TDHEvmIF7(;|$d}(Zh(wxn_)0Vi?BZ$gD3K7im-1
zK=*qZR_7tC`me>cK+whDjp`8HR#G_)8_1*Wht@Kvv4?t7$OO54FG*+f@&*rY1Xty~
zq+7;Csn-dm3P^@wOn6uz1MMQY$}eGs*D#GqyUkG;N+Sv$_2lc#{vo{oNU!Mk;o}~8
zwKmLZ)*M$5O5ovtccsdX8iV+u(;u`O_l86=dMlB7e8)0O<Lp!j*ur3K|FDNgZ8XQb
z!bkhQdi(3^`M_m4WbRk9EoVcu0}~gcIviTUBvlQ_C5)bSs31V7+Ri2NYs=AuD>X(6
z&ePH@*SEyox`r!4UhOYvzaq8gGiTd3H(XGbau>o?lqOy(6tQC`C<t9uTcV5|*?V<_
zZf>}%(7<%M{XrCx2gM-j^n*l4We?hVI*o=>XG3_jqA)_69o@>H7epI<UnGZ71%PV7
z6hl(A#&aFH=DIUF998)%+-)IGV>Y%Lcy-;Shh7PD3g_a_LXLk*7Pe1Mqx@-xHq)|m
zJF32zV#bW`wIXba`9|;tY8Qvoqb{N~BFfQSt^NjwY=`KFInMlRDyM*O2uShc!a(pf
zCwT`c%1+&yvS|BC*iok}C1d0eEjsYuAa<cj6Hipv(Q?@_g#yz8T0??-=y7$DcyN!T
zZ+)#avWV|dsDK_srqxAiSzV+Cw}DB5BsVj~AZ{p)K#^w`<pN@iqQL00n2>W(onyyf
zX3`=JGu3ppI6~|rBN?5b<yfl8O)aZVMTXL~vv411<M9CKRF4%?Xf%Z(WzpDMTZ*4W
zGxJ7JVu(XH2dhlS<xbEoNJGT9Lm?AL#8rN3*o+Vl#~xE2vT5E%A=cV!<C~kcD>&a;
zOa$*H@b0tut}P>vcyv{FXdOG=#_3UbD&j+LSf>2WL+cOo1si~@t?dCxhn*76S)0Oj
zeTva3PP6lHh818NIz*A6IZ3?IS|nW}lB+SlZNDkaD@z%ov-bYX6lw3W1q{x%VJUq!
zKv^s7XJrLYF&~QiLKm*<ER|%K$*sy)hG^*%UfB-$cT^hk@4OUISu=<rQ61)))4I_*
zyH3J2)S0qa4WG0?4Sr}w9G)HGDrG@4D#NI(l$J=B{qM7MplGZpft71aBGw}@{mT+G
zsex4@mafr09I^i5Zlb9>%Zwb@+#>wf4D}h0sjgv^BTW~=q&!tzBaEVkJ)mO1euMr4
z73X+Inf$1%&YdZRG6yJ{603!9-5#^jd61^&L9%x9?>1+Fqwzo1oW&g5f5DukeQf}G
zCHYpsqNVN&F*3G?L3@Z90`G4<zVC}U=M)?QKHV!_G|G~IGYc^;>*4^XtBeT+E0bK5
zKlBGB5Y9d1bNf5l_oYg90R*d^?qX?Pi-nk&qmn*=?r|w831izGnYjd`3uu8anj>8O
zzpAbLiLS%Erf{5;I)a+E0091PT)nQV-9-F1s~T|#reIo*;`Wdzz^nW1CjjMfl$uS{
zM-21-w|?<&G$=B10a3;uVEYRoZdw2cQS0A(Q5v1Z`M+Cw<XsPsgNtYcG@2{%c(uqb
z|1u3Jr=@Y69LmoXUXn{HT^UHdK6wns75h32!G6gJKH*gDHuRs;wA`}7jG#}{a$>?o
zt@D(&oSGmLXF$DCQNwzzZb<%D)O}68sPZY(+C;XdJ&lSPszW?OF^EI2erk23sR&(&
z&wrWlkRu9H_4JqM3f0;Y^@myzDacZS_=;_8@{A_<!rX1SUWo~FmkF#C-9aO&1%RP<
zT4bcgQOTyH_#fG|TLPnLwocB8dN{0Y>(NRsR}ozXjpATj$?(6hSXg9Q34V!ZC5R!O
z6<O7>WId5()!3=>7f9hCp})Y@p=r;J7DCdZ`<djyJYZsL4C1w?7&K|44Pbk7GZppM
z9X@`+ln!8Lnxr4SU~l20+sm#y(CU>&QG@ES5pktyJnj{FCrhW7-a?#eesB+fWjw$*
zJCP@@IAH|Fo(}-f!f^l}_RH=c@P*bkOz=sqZCKP`LvcZkAOZ1GpM-sV+@;MHD<?cl
zr6skWx*Mit>u5potq5oU-+E<sktVE<=(I$eG-+@<S=h10$wG`E3YKFT=UkhU3ajUG
z2yU{u2?gA9F2nLQxOD-R&E9Dg_SvN6&q_d(HKv%+yjR4~?KsNOMXA=|S`V?S8D21y
zF4mvQ@N+3n_)6M*;EPM9K2P94eJI^<&EbI8*PS1gifhSdoqj;PwJ8wox_0P2A7g3?
zoxw`zv;;?hUV6Z`#1*>|_EE(C0lHh2*dRuZ<A<=PD9pYNHnC_+&#*GYMr0&#SlF|q
zFw)a&mU2y3H5o-z2V+1!yE*`6kxf5iYSQx53Z{o)d(oPkbr*|;Bh2*bj+W?3s#aln
zvEhp3xiCo{psBq>zSni)`6E0D*9)BlODF%;O?)gh{m!|~kb*#9@|9{>yCMVLjB}-^
zRN(q+5}&iYisLJgH>q^NuYyz#kUb0xKa5w#$i1K5?Y&~H9CnUJl9G7LBIFK`*g}oh
zX;zd*Uei+RMm2|_MmEgGmpjFILYeAxlRgkqMa+E#^!Q}|+3#MUnH+n1)Cd*(KdND)
zEPh?^p5g+MKDC>Dj`PVhJ11SL`tciC5vyOn%N4oTj^<@{!-n!V_;ngx`uA8{m~P}7
z8HQVdNzytQ+x4!t<FRe^H>mv%*dOD755ihoB^BH|c!|=_y|_HhROH~Bn>D?J>S2$_
z{3l%f9@Ki?>i5(zn`hIY#-Ex4?Q`CQgEHuoE8pNr85}@|PmCRXzG6q!gT($j6{`!~
z^n3om+I#lPC5R;h^fv@Y?2)>YavU&#3z)KO?;sh%)qk?%ry*Rqu1~(zl!^q5x^M+v
z`l5nUNPxwedKupEc|hviL+{;Bhz6hGKf6y}J@+cbTGbfJt2we99*d7?sO-%$HtqKO
z!E?&!oCdhvwL@tyRIqFXt7Shn_lcSF&^&qrEMWY$5+DCoArG`sSgWuH{6K&z>*!?p
zo|<7Apf@$8H*(s*F05n!-Dmqx-|szt{qFe9{=v(4FZW*`zu15EYX8H_*FRDcY)lah
z#Oa_6kSwib&wPs+lHhhoq?|CvxZS|B(eLNLRpdfumP4H-4CO3Kci}8y3<hmJfx_XK
zqq(7VL`1%W$|NG!`OjVcku_-1kb-hzjRs-i@Gx{INnWVsAxSnFA^3}S<PV|%ibN`i
z_pzB5VMM5M0DHqv7z2ei>KJ)0dSxJ#XJs`$ugu6+qg@xW{LojahjG4Ipwc&`hy9~~
z>iYwa(b_xs5y<CPWJ{ZxD}Vwcnm)!^0IFWiUZ-xq1-5lq@mewN5YDVD2fO3L<)bBf
z_*{8AS~>uaEwBb24HsQUXO#PzesVa7x9mjhJ;};4JJZ<;0Ah>y#Wahcy+d!9<-kXI
z8|jAkAsLsa-jToIE|FCw3?Id^O4_X$1(iIaJoFe7c^mN&IVaO}=~qfdOn6brUq;E)
zDk-rhjp-%oq0F*!toS}V^v+<1lhoS)@FZ^v>443fOAF)Qt%h8&KrSKF3VLRCuF^aw
zh{g$AYMTzb!DC-vZ_pgtH(2?7z&ffS$mIlD4i=j}@UqMIoIvOgn|M_tlMb=!&fzEv
zDo+muTaW;YF&B0+Lst`;KTt_RLDJJnax&-dK=gT}_QTw;l-RO+o+qXJ=8I*5?2J>Y
z!no_W#s(WSb7>o55W#umF)?(8qDD+W`@)vw8o>+87K|!(%IjI0E>)JPsAh?JJadZp
zTTO}LxCVFt!xR%e{8TFa88BkWNot1{y1P=t)L>}RAj83@zU-h1fCc=MA^K-}7?%tM
z(wOfVlRg{b|B9e_Z(fu?l@yUoT$6V|fV|73+=#mbUt&n09$<Wy*@p7&GK1FrY5+T`
zTrg(Sq|K0x1V1Grc#_R2nDtXS({EAZp(I;~v;|{ZI1&7d+!g$tk~*baA2g;g6G#=|
zfcPzq7+$ko$%?*Y_^6?Oy<n%UYiuy!b_MhjP+#&)$%Z@fvpj;T>kbuNV1gJ2v5#lp
z#^OFkT*oVz8mCB7G_nu;GnWgEkzcr{s>o0BcdoqZ3QY)7?M_5NEKJ|T&IoU#;^t<?
zn=)mhey8Y!a6wFkhspD1>IVkXmjmd8g;4!;!kGda0F~U>?Qg70rg67!I`7uaqxE(3
zm&SZR+*Fi;UPD+}0xDRvUrTnJBNho}|B-&rLgNN1x_kiv7N<2q!ym_IMDP542QBZ=
za0<6E)VC4+MEWVBT{k}v6!fG8$1sE?xkivluttaKb!LJ9DxtC+uF{!Gc#>PM04dR@
z2)An3<x2*}ANGX$g~NrPXnUITYR~Oi=}PD;==g#S_&Y-yTsZ5@p=Ala@)wOToObr$
znZaHDsD?AQhqI>w@}WU25TzBNIP!xMws2(d3nP;OXb+u1d%qrh08Nw%Y2@-3BMlU`
z0ecekD~%r^k?gxf#2R_<FGeakJxf$VKNjsFg+>`xaQ}PhBz;Z7uQUih6|;D)PenLF
z53@h9$^NKfJ&6oo8N}}zn$P}@>`^t0e^!hou_(;TXzCD7mH!0{XRSV3cz7u$f9H|n
z3ZoY;R5$}{?3WbwG;fft7;gG@=Ilp<5@a0Q*#7&@?Z0nr|9uM1jK{CXN3Ms+H6PH*
zFmLd#q<C()@Sl_Te3s=zw`G3fFu}MpdteTte<U12qy~9M$ddH98kwXf@>k+G66eb6
z02#PuamMXdd384+#sWIO7d#^ihmn5P*Jy>wY2BhuMn@v6PCBpT2tLq}$c$4jQCO~#
z*8-U~ksBE}RZ#F9NtUx<ftGxrPe+@O_$%5PUmqYq4Wru@(ho+V$1~?PZxa+`J8VG;
z%Rdq{R0IVjyr>Y<&CTz~cLG=xX7*>t4Nh5K<rRz>UujKt62>eA;aCGB0|(A{CY)~2
zN0CTWQ!v&waWs4*)DsRj_$$-z^Uwo2bO?Nv7XP<X<Sl!8KUJgiK^mm=3}1yD6u*Q=
zekTz;zs)7!=y9qK{ENO+=k^zUZbhyPqZ@~2+j(fVO`dxDDCprvP%=~_JuwOoH6m=q
zQeg2T0&pfsyD{SPe$9{=*_UZqUBU~&6s#_&s5ttoDn#n`Riv%E-Ke7W_+i0^<XVx4
z#zo&~dI6-0X@ocO$)MB~rVgoZ%sc=*#OM&%*=zK*2-;;xze*m|ccpCEmy!ER3~pBd
zVyg#&)XoUlOedy4Xo`W6S6#vK)J4E^M?nR5q*411p@p*6*R$%4jEds(`H-N{8_dvr
z8s}8V2MQBO>dCg(@q9p^IxOl&dpLl18^gf!jC=0qQt@xhjy3>p%L#B>CcteSk?>S?
z^$kH3-V-cCD)F8`eS2o~8{4_fzCcNUVsnEGD=TzBIUgOLo~YA?e2?S%D?ZWAx^ETk
zS7HK&N{czz$P`@K9KuFwga$8-2{TV5oy6r?lAh!8s1U_P?2^ZCyhTN3=`fXqiWtdA
zi~=?8od_5BmjLApQz?*Y&OKFHb_SZ>krY+a9>JX|=bYK+Hq*yD38j=;PKc*sh^Wb#
zV?c9K^Bm!eDND>~u9yYI;}+r7ISX25_>!Lk^-*VmIgF0N68_mJ4~wIFo1KjQi2QH_
z3^@|XgAyL$_3S7p4`KaB{*lP51*n~5wxz3h{s|0!z<(&7v^v!#u29uVUK4<{jX1Do
zQu(^L1Q4{VN6IX$adh>{9eER_BG8etdCx*>|F)vKb+thmhF3;w2DCgvUnO^_qqwVn
zt*-+|Qe;y=XAw-<`}bKkP9{m5>k|KNB}Ho-&+>Q_!PymP+SM|OrT<>@s(8h!7Bb|M
zbSLh{sdPBIK-57YH~3@~-B~u9#X0hZ^>-MwT)oi>ExVw8?PDBNvip$+bb3Q0l;a`c
zZ<*pgi;FVPF5|Is0KEowtc;)~GGgF3rIhk5%Jb~}p!%sC1?kshn!rfWx?IR1!P~`7
z>=^gYrIGSWn*Pu<g&ntpf3lY%7GaL(1u{Yy>X}dlqSf#h*`O|}z6eM6ckWPaDcpK6
zH@L#*XnBytg`&<^m7Yao6d>U^Ge90m8cpBm@y6B&t%-%p=WI+yLQ1Oa5qUDM$r@ex
zjRti4D|#JB&NJ|$A)Jdj#$%7eT=uMIEtF}N0;{K_U>XmsmQ`{k<g?nY;yUABRfE5f
z+P4Dbk&WR18D(d2lPn<(i=mA)jvpyLt!tyG$ypBpl)bY8u>Oa5_>s&K_p&Saci&^)
zO{W3@%JDs}Cp&s=#8rBoEbO64v69keN=lmpe$S8%%?F;hk#D2{3j$VIn~)ZOLogjC
zI_XfNeH}1vj-Je{ZvECc?zq&W#x{Cn0?aY6eU)lZLJRwt8UDc+9SvNbZ=Ne2Wd&ZI
z=lF`EGv^1AojJcSo8$Z>*(K+<^JF@GdWyPE=l4U{c~eYr1f}G3q@knb#9k<SMFpe0
zF8irmT4lK?kC;{!%W|Z;G}o0|tF~^soPewhNGw`1VAi&3VwlziC7OwjO&Mw4WQ2`Y
z0VG}F1t=L?QIO|RkAuZRf54e1re0jBm@-c5ofrpgZj3JN&Iu!s#68ReO}^Qym&Y6p
z$trITM5f+)Z7P3ZV7XALzFOt9Yswl5U%!y}J<Q<^*{K%K8EfE?F^qQhw1XxeE~~7H
zp22=Xb9vC*SB-%=<>TlyMx#cV_SeksW0;}tEbALZB6xvMchlsIg8aV7BTP}?Xxr#J
zRLOshQ5s?S<leZ#I_T{w%@szf#aiNJ#Fw*4wP|*fMABF=qcY~29bx{pvbLMDTx~=9
z<l&;1cVbYMlu9mMUtdd#*U{^?sj<dXcuDahNfWx6j5JB|UNSlN(nWM?w$$@>B#$9E
z1H}!nY+7j6Lvl+F9%OwThK<@*pWN%b8R}<bUIdJLkDoR&WtxAQvh|WQI8-qiR+}&F
zr#3UaoEq=SjEBV2=iwTvA6(aSy*z~=(6=*EP2)KKKI6X&mc_1V>5=zuZ=>9Re}VtP
z=M<lJEYdyN@LK9#Ly|q0x!zmD%a*s1SYLr<!fsk+);iDfj{-e5ig_O6izFRQ=i|7Q
zpdSZpWX!dJ$X7RSPV2gx!XBa|s-vQ%kXVZUbU1z)N%`bg-d%jd-&oS5zN%g4w_HL>
zlguC0TUC){N?b%nY-4#LeLfOrX}Ft8`ee)4;Lm@HJo_xI%u$i}Ia6Jw8+~876X}=e
zJ7w5JVoJl$aJ>Qv6=bxepMY{eYT6Sg@HCocqmSnaM%%r_pOox4uijRZ`Ovuj4tt_^
zbSpcbAv>?cO!wOV+PL{w$G^8+@CGzYo}7_^E3o}h)eb<P>vVM3q?B`hw(p6Xe--!0
zI(8=letvzO<eK<ci8cjNVKz&;&oq3ih%xPA$q;>h3aF?>VKUl<-vTt);87!VG&+k~
zZQ-|&#fzhHS8}RFc<*1ucLM$gL)y3}X1q|N!C|ELYNR*tkcP;sRG`e@$QQMD{Uhx?
zrdk*Q2>3_AVWcH@vv5{l+G@wzeG=5KB|+jh#V3(rI~+T+PF7ePiJn7cPTlF#IujIZ
z!0L94?Jxa7+bS8B*ijF7n;@!v+Td?}{1&UJqHI+h9xVqLTU1g_Hs-`_0CVj@@UPCz
zzc&2AzsBGFtBe2o?e2E~g#f)9IUchp%nvt@2p=Yu%o~29Xr=-}?;oD8JAPlnZ!%_!
z25CSRVE6jH-gn7@R9vU@<>towO!|>XHmko3v^Hs(lI|`_rr@rvtk7)vJZ!DNSa4=l
z>7tBMY8R0qD6_lc7RD`@q%4TZVNo{1^gEOl63n0nDCvQH)i`7Nw`q7y>AQk!x;6qB
zl8{#y8u(07hpoHG^P_dNC6*);X<NFDxn(QxkbFCm>;`oPkf3<~kwR_yUcmdsl2jIO
zo-M)T3}4h_kYWmR!@DAQQF2<f<gkGAjp=C3Hyg>}?5GpLKfWpCk%9@f2a3ehwjNqY
z(U4lV%@ylbsrZ$Qi&P8MBG#8hE<|Ll&<Im3TPv-SR4E85LfHR})E^vfq;N+B9}p@M
z82iYV_X7!B+e%Z1ZAcT15N|zSNxPR7+fc=%H7ONRAE*@BSI9zg``8k~QBbx<Vk25=
zv^7x6+FJ<eS+_3@?A1zd-EpNGLM~~0t3-l|W!*7eRf0XD;@W9Q2H8q*TVt+i-)hat
z6kfQCsOrQmB%Rm@Fdh0`D^WqNMFaRANoT&iesl~`xJF3n!bva(*taHm^JPDY>L%h|
zM#5Z{u-IW0FB;J$S)P=al>5g%0Ad(k!{@Uozigm_G@N3dXr;Y^=kE*n2mK^5ZdNpl
zKP2U;cCMub)rb>|3oP!Vr6L>M0qPUlFUrwf1)s5f{xcX!YK`QFTSk(}ktAswtI|k1
zZL@<Zt5Slg(l+XWvSF#d``x@C<4TFjB>ie5vKXiVxwM|?54JOvSZ6ARfXLfY{M|rJ
zQ#>zf>jK?LZt-056dnl)Ey1>EoQ%LWRltl=@$6l85|^iN;N-cxf2W&4p)vB&WdOnp
zp#t07#C$b`CQUuyv}cI@<l5Qu(5pwP@Ms{XtI-W$#i)KaL`(HkDUf>KCvDV9k)3F5
ziQ#o9zjji*AVdn!Kj5p;$_gWdYP=;#(V&)a`!1-9s3Bxht3z+fG_gGjUs>%?-Ch6}
zJeD>|NE0<YCo|Tav@-|(vSXlTe$}=PSGLxyrET9bUEZejKkUAJ{qpsXLF?Z%12w*X
zx6bATMHL{&N(?8E06)O3wq&6-lmYB0`e8ZnRM3a^rJ9;Z4CpIr2U3OrH-Tyv7EL03
ziZ2bzc)*I&T7b1V7BS&&4_^$GZM-~{V^r7z(K<WY86EB&b;jREhr=TmBn^)`A%5$$
zxgauT@N;AQLj=FwH8w&n(!nAQjPbr~)Z)8s!WBm_u6vuE@x4uPMb>$Z+ftmG%K59x
zCtwQw?bp63Ux;bt3n6yHNyjzU)6Txm(Oz8=8b>2}))|XkA8k_6kOP27iNi8uqVyqb
z1D*!Tb|Hp>TF4ROwRahTr(!NV$~cDjGgc_@@S;PNk37}@szdwWmO~2%VzlhE62WgC
zPYU)Y^@|ieKr7Oan{KGr>~o!d6?NdCgc|gMO^?<NRvwlJvYcPsRi=-w`^d;19x3Nc
z=rlf!KEu_-&Y7)GX#n3dksooSKyturo#5Ng*t+@lQoY3hMe>6b=EH}oX+@1kjth7s
z3fh_sdH<W6NV2=I%mpy-dRgx<Z%HII=pvI;s@8pIUSac4lik_+`mjA?t&ji1ustQh
z3`5syibEEm_upd)E(}E^xh)GYO5sM}3l^wIZCM82Qya1{AS1JFHju+qHP)b{F`O?Z
zq0tB#&SAb9yYp1HeQHf}uQsQ#HGxTev{!&NR$ufPB8@d5<nY}5imvjcX#fnk&(4%=
z(3()!_zFda`~t%U)(cJKyQ<U`#zAa$@Z?fQ#BB65uJ^R(=;^A_(*&a{?%v#-?X>4N
zH>Wo@pP7h|7y$(|^ns<{(ILPppv=$6J~<*wsfK|T=5B+kdw7RmgLu(SeA~nz+h`|b
zWtO0oS@V*R9x!!yPg5uES*@q{S;6kaj<H~gsHAQIS<7=BNJ;5RidEY(3wzhlYGcVh
zVz@xg2B&cQLld|6zfRgwQ5`vO=yF|>FtdaktEmn$R3?e3Is^^Hh+$A=Q5isP0`~$m
z!hpWi$lRl#XYYN9-nLG<AZL2@G#STgbsnvx_*ast*bGdg#=_SL)zXPVQ&P#ensvw_
z8(pwoI69+*#}(Y*&8uuzzn7-KY_<A>HUTE%*&iyyUui1)y~LI@V{&ru;`FMi@Nbf?
zb}LJwL+_%K&C5<U=~Tn;kkuzbnp*3xXsv&z)&Qgpnbe4_Fv;dY@8b5|<Rurxs9l=E
zC<B_mU`GtI3u`k@X7k<A2<WYx&gG8Q!z6XJK*cQ7>ioOKYUUOyS;wf-`nNgde^+|2
z0AWC$zbGBI&{jePEi2|T#1>E~LD_YQ8Zp$+Ac8=y;|=pMe-_H(Eefmg4HAq2V-E#R
ztW%r>EXJ>8dxU(%wIZ^D$~*~}dZ+VGg+;P3RqLK}q#SuJBzH`-ET9yF&KSAE4#sG9
zowTJt8;&PwXX?lF7K~)sS`9;~?WrgwEtv;22xLw<nBLqBZ*GczY+`8We{8~vMZpND
zjuM_m$}E>GYUgb()n8wqsfV@U`Z{XONEX=-GD)7GY3*J+WBNlH-QsUWc(76K9NsY9
zvOp2Kl(moJ&&eo$1LW=WEpFKNn{XSSrZ^je07;d>tCAkf4H;9WF|B0Y_8Jnvv4j$!
zn4~Ngj`hUsVK~rkP?fL6pfj?x3>%723p$0AHdU{P%7dP&fz4O9$@b2Ye#92ftrtvs
ziU^1ne+GPF$TONoWxO?RdmG~oZ+0PC-o}I<dOlpmz@mjc_%o+JmKjpD9+lt7mAwS0
zc|bDJm;pJZQL~fpuDIdxcc*sK!wnC|G3PjZ;k9L@6&Ubn*j-mBQxY=!79Q2s1nTol
zztDW;f%(10TH0lZY^fmzM6wqZKwT>6S%?ZTD%|||cA1(`QS`_l!$E+l!Iw>84w?2<
za~Gy5N4ms*m{PN2s?<SA;l{Oz99+yOtPRSB@mws$lO|KXzHWtGwiZqDVn86LZM&9Z
zb+hzU7L9|ty0P-U`59;zco$>nWSgmt(3&<i$hSn6yVV@FQAF9mY8Ah|HWpxt2$&@_
zTdwebZD<Zd)CER5Y=9Eu6u8*WQ@Bl34;64(ty02a(<BH%s%FqfHqFuwwOUjE8rPYv
zsO-0T8G^Skyo+>67zM+eh77G8-i*tfSqJ71j8eST5U;GY<CcPKxT=AxC{F=MS{NM`
z1JFDNkjdNL(<sHu9{v8&KmcRFwIcXWtExSJ!4W96shDLy<_NZkhBmNpHQTdH8g2P9
zpCbPX&!y=$|Kw1X6z9^mvDA1)hKwvkZdtBf8-}eE0$mvtQw(&|G%PqgTGY(GG2Beq
z{gZ^a15Dfyl%|m=2R4$QQ~aDRG5tp2nR$ZigEnZuyn0?1wmEBdfUXY98-=eoH}K79
zdyre70aVz6&NBM7{LI`lTkU*?#A-k(Hk%`kDGc^1M>A>b)hV^DS8aUD%mz(Y3TT9I
z9;N)@$F|8$Y9>>UQQ%90o@z<vGRx_Xk-SAs$-)vliL~<NF}Ur69hRA)HrM_G-O~=q
zZ_ndyJ;CuqnkOnst4OdIZJKM18Q_;!n>nkwM!dX@J$KhGv*_iGjO|8H$c`}yFVgP&
zGMN^k+wPrd(gFX0+u+3SGQ&ZY0Iyb;R1xl`_(GkD@I0k0{FsIpsd$wdT!rDrV0wUy
zY!;1BBM5|AmY`u7=TZsSn|&c(lW6>%oqNj&-}^r~EH?q7C$0g?B6&TE>SC1l<?Ts@
z`2@X`m&)Cf5pz9GLrifHZ>>S}%$HQaSae1&&1A>b7-Xj7B@xNZl9c_J&*mFz>M{-T
z9R{^qO~e{g+0|1F<GZxQ!=O|SdlE0gh8kpWMH@Q^;?(3rEpkjIhakv^4WLLDB-*-t
zV3<3AF{EcDmXO?Q)uLK$!}ZCcyVQ5<ZH-vdZCHL$6}@Ey!Bs`8EBBh!%B#v$*)OWg
zhdG#Psn?9X(~2<T9juwjvs9AOg>Y<Qpdie83%B%LfZ{|!JqwN;>)$fr8E40L5^ncE
zFNDU8=I3RuVz_EXDal9$uhK6X@SBS8cMjSZruxxDSa<4gSF=V-y3!k0TOMngrt9PD
zyH0g~UhYqxXg=wHvG85zOZ}2$`R?<TB*B{+qOK);vA&WAs{N`fn`u|*P<;wHUBaCa
z*6NWshbyVCICM5_fU}Sx?PmrlucFGJH-TejbP0b%3qM5d73ymHcf{xx?{nM2HrCay
z-u~JI7p|nmNKYF9^KBKm{$&N#uP+)Et-rKt*q*A?viW9x{Ss4U7!?e?m5GSawq{h4
z)7HQ!ZDD?roz}dX45rKk-z6;!9L1N=>w&B265l^r*i9GUfl-US78=e|jXh|<!X0u*
zuS#Je{T1COYGr<t+cS<>)D=5~>j3x01%%lZtLxtSuJJvl*0s^1F6ly-P~2Xqz_EC2
zFGhjl18dNl`l^k&x)a)X(Kf@;Ydr8S6`mQ09%wFyM9CpQvQLpFx@)4Rg}?LBWMe89
zmIF(fT5pfjERHzY)S*}Z>>VvlvG;SlH1W&wY%#D3npjveH3W8yF}y&Z9_4EGB(0}@
zF;c#0i%UxK!pdt;BMH=lqNb_9BG$4|1{oQ8*gG;JY+I_K|1J6Js(9f4nbc;mYX4(X
zo0((#FQhiZbvp(wUuW)VWD@Eo#arn`DAi~>-47YR>0cE`Vk8&3dm17M`Bi&1-Y{|>
z$#VeX{q$iWeuL4o6`sL$EW|T-J)cPfOAgS(8cZ3VM_E~7N=qG-N4!}f>ZlY)1hOQA
z(9k8N5_hI+mZt6TrmzUZjH6JyGWZO1iGUKHdn>Z`u#CMlbN1kP%$z-?m26hU{6bTI
z%*!(k+13g5vj#CU#!2yhi3!<no2=<ol|~*A?y1JwrFfG1^+Y|Xk&uU`V<zsw7aeJ~
zT?kCC>dHg2!1StOH=H5Ht7mOeIlI@Kd2)E2&cgPy^stufNoF5Cs?5;*4YY-77t&x#
znoyyk)^xBJ0Iq`nfWhAL0VaL%DO_8dh?B5>uN<W2b$VtTo6j|n|Fp0(lqqn6+lUfM
zC<hXQ{6bp;H4c?fmx}oq&Tq+0w_9CwWi+JtM1j}o!%+cn3t}Uu4bmCri0~g3T}m%q
zmhK^_#*>|FeLX|}z=b$P`WLAYol7hkkK@z}*5Z0j9Wy15t;S8*Ax&#J2f3Wcn=CJ*
zY5Rl|X}*8#x32(`o-Dp<zIGBL8hUNWu2e|NM}2B2pIupi-lRqrpyL!!P%R4(qGn3C
z%=i{l{=7+DDS!S<!#AmTxr+XPW-!sPra(^Ph<~cg$R0N89f>~xeKwQI$=tgd7dKPK
z$qpPT;kc_6N#^c;Rg_iQP3{B6Y^0leu@s5_t?A|vNZv{K39Vm$DLLI=xfxh(BQFNZ
zKaH1zE8QK_Q?+|RZ711x@qQ7ak()}W27BB|Z*H=ioBZY`xh)yqT@u@wxz=UDrMd3(
zf;+D|ITz#}^juPk%}8^}=snK`jn`-{RV-dPs{!JI!0X+5v6|y)lUc<No&LbaABqXO
zB}M$5vcU7eXEJ3TCexGi+N(0VQ$jtM7F^3!61|tH&q?*H{CN8CPO8PKu3mzkV6A|g
z6VscI)!E-O%1G=Hm`U{%hJpLqZmdI?B^WP^Wa!>-4mT_1ik$(MF&)f8@ALuG#Ro)r
zFg8qxhd(2z3uWMm^6Fs#${Jpu8F(GDg4bG~D8MswAW8`H2dc0VJc@~^ZiiT24F-<7
za;D95V)z#(hW{f4{N%#$vVVo#5Y4}EqWPav@jey5rs0cJd;>gB`|(!a7r*1vgZ|dG
zFaC*-_a8lY=!+lmar42}V_*D&kJ}HR=+F4{=)rwo#90%vVGVytyDxlBZl=SC!Rrj8
zq&%NY00sM2b}~Cy7p)P>j@0P|`Y9^`pGULKILbfbHH3dCk&U=>U9@%9E|(N@AVx1c
z3;+gewrU=P4=}*X8`E?cLsFFQ>>2)?cK<BkgnW~B|F9A_o=rO(*d$4(K-E%)3w1l{
zdWGNqoho8jARrIVysFTl(K_XGbR_pHlM*)GdtbyYnrVyH-%}^AntrKauPN9{+p-)0
zVsnUo`=4p|M{%7%r@@aY@Z?Vnm^OMC5FyZ^2pecXjz4JE(3V1c*<`R@eJ%<DZkY-d
zyVFdbJ$YfyM7RHUPGp#8=Kw~X8Nm^T)v3*jVC42$ap>l|%xeGq4|7(!{gtyi!hhiM
z%FsywM~`G3{(U(%Wk*?Nq_WTKG%N$_7t=GorD6S_k(xzhnVTIqBD!YUJPeTqA`hvi
zT`(DjCW6gG<}1oxV~pIItPSVIaSszS?qM1x81k?*{4;(Cdp9@j9Ai{rpsLDWW5LPM
z?<BQLZk5`7;eZ+&F_TTcES_t*oy;65WaJPvgDNDHUi2ihP1XtgnC4<Y#JC4oCe4<z
zrC#wFSQLQL>tq~wucFI1KL#f4;%u50fp=P#v*6yn^YioW`Bpc}Pws8@dcAv8hl>1$
znS5R4`i~z!zIQ=+e$o84H@hI)Tl&j>{9eDm-QC*S!Z$KJGQ7HvKhc@!Nru&0y_PHn
zfA4$JI`>I5`glTy_ko9cw?;7-+W`hF3eX<~kO?wfB)%6$ien(fhL>KDFHo?NHj??O
zQ;iFgqwtxt9sUFaZ2PCQA#w0dxTsviO%GLY@3HWEcVTL+@nIIBfAjSunN9=m|2(Jv
z^8_@zxBZ~|;K4)D!+)P{!ek$A@(<Ayn-99Ztq1V1{SX#mbJP=C{qE-DZ6V81-3LN8
z!M|Ds|LstjzI@x^KTrGpEnH63@}q~{#}E3lKXW8kEj6%y??LzB=H{sLsQb8gU-UZt
z2i^YWR%g5W`2HjH16tjDwAK3Q;b!;Y<EQj5RP1#hKHL%yw!7Of4%v>dn}vQJLEXm>
z#iPgF-u<7pdN8j0pF5Ac54InjZo{Vs_kX2NToS5@hxfbp`~B0-_Gb6-W^2^xb^8w=
zz`vWlE%<k98=vpf^Y$h_Kj=Lk!Eo<yZ+4(>{O94;gH9iMf@-h;k7)ecj~`)Ez0E#0
z*nc3PY#)XV4Q`7*{OR8po6zxA3$~$$kGN0Uu=?G{+mE2!W^a4cfz^Hd5dMAqXcN2a
z-|yhq@5|@@{qAP}(FoQMn|&-EbszROJDX7V(KfWR{orwD^Ko~p_oy}6>h_=jOzQq)
z7|GUFAO5|+jicJ$-W0g(5BgAO6D9@A@%X;D55t9tz|!~n>c>Nv=@xXi4c&^Z?)|MT
z?0NISCNu*iF8;Xx;BgCw-2*V#hM{glpAR2z2^hvhfx~?)HeppBKOXTY@5BDUWc!=A
zquodSO;`y4Dgnn7{ycrK1+^cFEm+U3`?&Q4Y_LuOLEr&&wb{j~GN3^hIAB=5O)5y!
zdI;0%BREpQ-lK;w76MOthB<BDhb4rcn~z{cVex4so7<0Zny@Lb$o>1Yf)DR+!d^b?
z;dHkE6kyS}w$0}$^xlUR+{Bae^l=}6?xA=9+Ybv3K=<e|tolRPxkthRy(>flQezd7
zb|=fvqkQ}}p0tz97o#jhgLu)D8IZsZU9f;oPd~Eb00vIPG_i!?BeH>xUu7qmh(g6T
zkY>|wul3P`v5h%2fKQ9WCWUB1|Hv8q(FqPrn)+32lj6h97N8v<b~w)*(QC|CaHei3
zGWG=7%}epWlL~(d%`T_XX6>~CDKw+syn~oim_xg?hc+uaJxqi>jPlMfk1!r#nFZ;<
zyGJVogxb9m;ABphj3~;i*2W!XHabI$_ScGlILDmzGf&w<<^!)K7uzETT}i59mTC<5
zF)whu=1-BXuX`<ubLkz~<nOOA6_#ZJ=gxD$^<}B;^`G;iOeWer)}xqvonc&_$8qYp
zC|OvYZ{j8w)$@$Tt5uLmXHnHy4e58T?;?`v%PHTRx`6jo0w&Y;m<Gxm4m`ZbqZ1O7
zUpqJ8whoa`hb@Oag&my&byOHT>Fx5HI$!Z6jn<*V`;lHqqTT|%DNF)Z5|>daGwdZb
zI{H+V9Yp}(RzVL>CWDIE{-5cRMfx?h$6RoAqrtcHv`o(8)_Uv797DCdOws3y+#<aC
zzBJn_i}A42Z1mm1vnMUbP@4@*rqPL2^(jVxOvfF-S8?kFeO=uGC$F@dkm)S%IEj3Y
zU}&ug!{w@OOJHAO8>ZgLSF0-`8JWO&94EyH^N3%XO&svY)-(N)fa&PVpp?!U5z_@w
z(=&}yx=D6#oQ(?O)jjkNEXsQ@@G?nHj!8`xkMEg-`YE2yDqhtbNC`+#y)LpaZ3FEB
zm&7d7l&VZsj#mjWWz&o=8S5+EG!?HqwD^(Qo#Zf1{P|%2b(ccav;p}>(}OYt)IqAS
zmt}kgx8cnVm0>jnpvHD7qb2IgEyc?X<5t4uhC$uT%WbJBjqli6(~-YpjiOMa5FC6n
z77;}w6{90gf|WUB{nFc&Vs7rm<0RtTJGHeaxd6J<{S7m5c}k6pKD0Mx>4<(lBG*n2
z4b)xMqt5u*RUI_rMw<;0EyP~d9LJa44BqLcXM8g5RC$}$u%|aOiywOLPLrZ#R8mfA
z6r*{brm)c{5b?~DfYG?J^u+3y=m_*(CqF>13%Hds9ndRb^-#33bb5(FaLN6>7{OH%
zw-k!NmyBD;0bWvnD9@55$1P|nPeuh+#<ecv7AEnHTX8xjZ;_%~ry=ZFdj~L>)&vga
z95`Ky&Wm1m(dQ_cBCCuOHpX7eN2ln8M=oc$9yl(#W#LDck=8;?5GC{<J@&;FJ@p;~
zXrAKZ!-tQ7w%pH1%Dwf-7rU9$f4&Cr*L>ATZ9WVaAQNMtEmj`@pjvAUq2IhJUtsxZ
zhzY$g?;Vz(Hz?sA#@bOe=2&AK?qQ7y{JHZHOY4$vn&D|C?Rc-~0X^CBk5%24Dx8U2
zBvntU^m%SMzNIYg+u8AD(594>eqq{85!G_sre2`p{nFHAk-p$U;eA0%ixJd&u#2Rn
z8AX5v(Afy?`z(iJ3n+XH0G>os+z_A{I~?c=C``;uN&Vapl1aObu@4H=u5`1Hm{5WG
zc*r537M0T{JAAUs+q`&(qvci}23p}tRUgAD|5@N7^7qF<E_)CojCe93&P5jPKQe<*
z_3sC2viG4x*+bPGMK<nJR#kW-hV4W)+<z3{Up67pV}SY3$ShN&EPXjV1eWmr(Gf?=
zu18X?gvm>!pXh0pw&mr3SP&`{Ga!%SAQCYyN-z~kfgXbxH)p&+2VM*>UByPfli0K}
z$ozj?a!HZbiQMRK`{D#e=d?_o@bogFEd}sF*%?9AUO_LEn(rNn<c`E;<_fXlGUK84
zN!6}<AZ@$d2b*YFy$Fmr(k@|?8Zy#>N$zKcCS!~jVs6l0`OVE2-hGaHh(;IC9mHo$
zBTl%(63qJr7tL%MU6L}}3tE_m<SZ@<xWI_E3o>)Wtn^^D+13TLAk`nQ_O?VZODIx;
z$!AM5sZQnADEU+!VIrtPRkS<Xy?=-n{_D#meDJ7@0`U>fok{VUC~6@h%)ul+&=s@!
zz!z`v=}{jQsps^v519KRTVZrVJK@O~e{bUn8uuoc<%5iHj>N|-l)GgZzF-N56^&|x
z&0*4be}byv_MvG=sSIkW)&K!Cjd|{DZ?h1uTm)rom@AMWjW$=vNk{|}qDX++WFM2T
z<FqLEI-4+5_~Rmz*I{L&PzrAtjgg$=za4KQ7i(yeAb-;;Vt7U!&X=qOFt{3;2uQs@
z*$%9<7QpzqhMZ!L1oC8Uw(}}8boU=KSc#hMzNs*zox>a}sMV)|FvfhHg|9O44q@iO
z{mm_3954m51&>bv1SSdYKy_kga7EAy40S~4CrOo}5s0M`oF=#zpSrh(A{=m3Glxhm
zyY<YMx#wmFy>jdkayfvR1^1mgOz(8tvjjgAV9Gk@q)F)jnjc$YlWL^I5!Oh`FCU1!
z5MXlXQGuCg>iHH-S}<Yo+r-G0DF<^*-Ev5_!Mih#%xV*<)y|QiCH~D<e6V=#-b)lF
zu))G<c5W;e-@kR~YNThC<E%zu#1Y^l_pENi|Ao3wCeb*SK|z+tOpEr~2xX>pBA#T2
z(y8xAA?MLNFYv5LUvpDzc-XiM=n5DO;1ZaXpYSd?E}yYbmx2~?7OvGhP|AQ}a7STI
z5iK_bW|Ks9%1zyCN$W=_>93HBj)X0S-Za2?^rf;!RR7tBga*|a#dtF~<*9IyjAJ(h
zy1<hXfCe^Ci2~~~!&VQn?)%^T_P4vQp1*x}a7~?4RwD1)YMt<f_|{u|>l+t{TGqNm
zvN?eGVwT@FfRf`#TkX>u?x5_BrPS?*o+WXs_qKW@KoZD-K)0{n`|W<b^<CArlsBO|
zKc2lHJp3Zd|5A_G(lMj-<0ZXYo#`Qv0=TfFBB{43Ad)q*+fY;Oo5xKN@m5Ebx|>Ge
z6UIdrz62UpX7N~!FD?21eN*?5GG&+@EjX14Z@6)F)mOpz^tUX9(VlxftPcNwTNDKv
z7TT&${2gIw4y4TvdAFFMc_rF!E`@0O;;mJ*R`C@9jaR?8?LzDbzPijVq2bm+f^O5R
zi~fpHS3HOO*elVH(7p!bx;e;zFD8v{TNzwWdEI?R(G~EWyQsK>eNM*XX>4A4HE4^M
zoxZQ6S6*kD2~@cwYWmE+2^pF2LQmusQ6d@>a|249*gHcdpL2Pt5dn1&OX^_5Ymxcd
z99?EfG-9!O7oDwEZK$#)2J0|zC_#;du#E*U$n#p`o~;QRCe!4K<$n&)vKAqhHrKo5
zZEFQs|LQgDT9;x4NoAg`Kza&eHL;OJ!JDL_LI*@J9<O3MIsJn&?Z%I%@#rJ*p{Q2Y
z?B{Qp%hdy;hEzUxShM;mjbK-}fmH5<cV{x6eL0hfK}r(S*uS6*#V}anF?pO6e;wJ)
zJ%imm&QRQ1V>j2<a^M|l-HHLy3}+o)vw(k~Vb{zPYwfk-=4Nf?L*c4WM=h)ToZx4@
z`UaQkO_F#zE@CpYodOi>>G6k2lTV$ReCnQg(#FK0J~KJg-!fRnW&T6VhQ7(dXPNjD
zdC$#9kAe4mxeAD+)05zM(S>##Qn17sP;nX1X($UFVu^HqHblP#QyTHYS(4p84H-zS
z_GttqSxodtCWHUr11Ey|12`^d`X?ti^E{S9G_`5;Jh6o_Uk=XVq6l7OqBz5U&&K%g
z^aTICnBu>@np8f*@K_7+K9f5|mw=~A9C{bH=y-{fS&KKt)xVemn<9R-6&x5@ks*v?
zPp6n_fdbdY0~A345W~M6Z=<a2h}AbXZr24iJo!R?^)^!T8~j{|Z@&Dr@*dEE<=N43
z#gjSH#}>~jZU!7y%3a5YR36%w873S!JlaWIj?qSDL9{eRU(k3OmvL(hKQUo5Er*H*
ziir#}EJQfqmlW7#pFfQ_F;EBALrr)m34hJn5v*}eqk~~^hGz?bwA-Wbdf^`?M<Ewe
zUGj`Zhn~!GQf%ZL_74lv!_7^P3epcMNiZ#o(leE%Cta8`#Er<C-j_*t^g#6(6N;;}
z!@+i)7_Z1Xs4E22wKlVHngqr*^Z_CWpl|dR)@CXu@M)r>wAM;kqPaR+D=M^hTAodT
z0}A#QVr=5KE5dKznE36d3;@r@Z|^gj+V5HTO(y<HxJ;gY#9DczBX!_8O2&Yuep~{&
zvKm3IRgoOWk}&`=X+{32<?bdO^v1T{Vkv$H{de+g+EPDpRndn}%0yB(q4X!x@>&RO
zN~2+0;a{}o%>+9+RZTAK9j>O?y!2$SA8qoHX;KxPV>pwO4*j>hF$oihA~S<)mn6wA
z(i-C|KFj>}k8omtuIpiyjfM6(z)&kneX~Egxw$?*CUws7F$OL*0=iNt!S(fej!RuU
zEEhL7_E+U_kdnIDFKZqKoCQ;7jD`vP%!)6*ES<4q;HBjrVRmUpMC=3PG+ZOn@3WnB
zW5ZVkDHXGkfEb5yC%*_h<TUsk2cK821emNSU!oc0bP9RsQNVLgr1%JgH-#n3^6+||
zCS{Q3GOlI!(W24`=D88PpD$)3S6Do#)y1Tx@gitu6^jQt_v`=H{@3`s_P@IS8gKXm
ze|GWBJzq9cs%ESl<cnZQ)qhkq(<L?AR_=grIYREc(>yLtvnkm?K+9-2k)%*R8FyR1
z;ve~;0Is~hNnQdi(i(NU-EV<h%l%rzUcF)XcMg9rw*aj~D+6%k)uZ~Pd`$A&oR*!w
z%9Y<RoY(Szd(LKIPq0g9mcGlAlM@sPV4?`rG)H;)JAEI`bBqqmKgPiIp1|O^)LC@#
zW<H%h%g)nhi3}swV-H;J1Ibl3PIDZPR7D=B6*XfsV_1557Yvq_cYw~aq66(m2tQ=I
zPcC1M+si7zuCZP_Tvno<YvT88PDU&xo2QgnYleZN8<QN)OU#=NaD*LnTV(rlhPsb`
zr7ih?r+B-h01~4Jvs9zmjf|?;I*TsJPUbZF976#p6#>~qHaySv_ga^6*{#|+h~t(r
z$~#HQ)A<l}#rL8V_~P;`O48&W+`6L@Zh#5=DB}(fx1%-6_mZNR$Hl$v#|Y=GGtBi4
zg)`lW$4-_$dy*d@_*jrygS?xYwh2r<VMXNL%g~hNGjF;C#kf0*PU7DKtKhqAK02j>
zm<zNjTH^Z{Q^RsC--KgT4&EKZ9C%Drzxv7HFqWhx5RQ`cmDJ5f$yTqsS-_<}Oh%ny
ze3is`8$Bv|-L1ap`<^dXYcKm8*A`1H4I=KPE2C$0m$fkpuUeh&)#}g=ska^V_J{B_
zp(K4^X7c>M%ihKlL}ePG`4}3!3Zsezn}wbr+?|pja$ydm>agG4{?3VMZf<Vhzf5NF
z3BAurkqnVnUAA|)Uv}n-9%rp^ErTyJS<EhQ7v(lSPsb*fyDJivG4NI{56w=8Cd7{~
zWJkEj&JS%|&bu#vpR7`y;pyAfr0%}t><Ybly@`x;l`&7=JVhpl1Y3+<sGu_Ev`&tv
zWAisJ166T-9bLMUvpAcVF00;V`T85mP$7E0Ogg1LpUQOZFr5nBV~o84@~?DNEzRy;
zD9kumRwS@|;CC7qHyl_EBtV+PK-2(^NK_7r-4Ytd#0u6uR-M+sD*J?D8LcSpSE~X<
z=N{Y#1P%>iqGv%Ns;1G1DbCe_=O)lzu4)i}wJCOrO|2NKM35l!8<>su#jSu&dBC4V
zW%P;&?VzM^vit*EMYF)NoW|q*<$%UHL!=-<BzTacuvd}5BZMZP45o3ED@e-?Z{tE5
zRu&w3YZg939FS(`ZNC$VX+`B5w&_qMGRg^M)K>_&brabAY<(U1bSNmGe;I<DlOoQ3
zhzIZ<7G1i}<e_l}vVnOBWa6PkFf^JN#GP3X`#L5Z23&y2rAAD84giRJaVg4B1wb!=
z8U<uMH8CTO4%V!<5XGY1-|jgMwa?Dvsc(=I`pNo6m#2ELz92r9f2;S4x~Uzrf2PH&
z3M~Uv<s6e1hw(ykdmJo_d96^=g{5+WXTe3ANJgWW!JY}UHBB*ThzzH$`8G3t?Or{!
zDW+Vmk^oeA%?M9YL9k!9YW)_SS|XUnWedx;ysE6%B9arh)AR%h(3ndgNgBsUOrD<t
zT{&f=L#Fvg?Aq0BJw<s!>+SR1XM4}PXT<%q=4iL~Em?Td*lJi%N5iS}1}Z58K#4IY
z#-<!7r@9^jSIajy?6#nqQ3)uf4u1iz>2cAeXWbV~&ee)9o1pnI*ZEy{ryrKEFx9wt
z6r8N<hua(0h!5z;rKPPnNe#Np7-W0->JVwj5$j|k7d~=&hnCerFAH4-kK(O0Vsd=s
z3UEYMl|MtO7efTyeNa^8iv~qCP;t{3lZ(w|FjT877gzu8PLjMRpQ6-j#V0%q6x0`v
z*Hg;0_7)?0`kIiCn+<1cq=O-gio{uSfo6>i^qUA_uZ9q6H9U<HDh9IE!UbsI_<^rz
zNs!V=G@2&mWtATBJj*|tb)%vcU(8@?@puK|_}91J`U^K!ToUuS3D8b&pSzy;)u(55
zAGe>I<<(X|>GDcTPmi<8tp{j%tuGy&>lpdVHr5rc-3r!TT~-wIy!xp&#38*>A+8-X
zXP+Z);lX<r=gH@IOod+L*%_+|mSkbFhEaBH3UUC`hW{{WhA*yb)TLQ>!4Wv@wXg~F
zx-XI<z>v5q!|o#$6EKE%7C&%vW4)^J4l+{^UL$b~gd;jv@#Pc5R^mvJg?WzQI<-Cq
zWu-WPd=OXU_xEAORtg(wC$=uLjeg)Ncdy^;Im#|w3g$olA6bo!^oP)%Sw~JgsFgBS
z<2$>Cy%M(s>P2Xi5oa0%)6I=!ycHuZ^|<0gJp7pGyvB_D$Z(wSiMKHEp9}_@TJ%^{
zJe6vko13*YS73ZAexrKXYHDU2rKH*e-RbT?#aI;Lb#0~#4B)*iS`Zu7u|g|1)mKYJ
zpU20*BgHwHMl{3SGz|5Ywu7Q1bK<HBs(+g?b2aLzNZ$~EL<Z|$+;Um1oVJnhE03oU
z*)%U!3_!IH{V!dBM$47YjZ7lO0kwPNS<~r%w~Vk_EX)LPtC@K-K?ckuj*3_pRxv16
zt&=R{TUWo<@2(l+sO}Kpv28Hd(huX^l!}Ta4cx8r+AYNZL+r7qlp~m=i1IK2@Xp;{
zAJZv1h8Jvnf%9$p2$bDonv7z2yWR6wy9=;Kt63SUu-6XNm|=}!IK>)s_yaZen%zlr
zRjfMJRrj#!BphSaEBFIdPs4O)mA7kAANrNmxb*jK26K#ZagBnfz~;P1vMwThg`=)0
zYJkp7jCqB(dpmRVls9{i$t6tgT`&>6v9<@yecR@mS?z8Y9hpT%I0R}GD$dwQXF=T_
zcn`NfpJHSer<2X8xW=%mMKI!Ue?^WKU5~f>zL?=-|M9~IMg)Xu-V|;f9`W{n$T->0
zPMKel{yORwZGUI2orh5umdl5GHjQ_rc}zIOrgFaUutDW7aCqeVJ2H|B`a{s20Cztp
z037*)BurG<ksl;%o-)G4WPjPhzmB?b8>9Cnz<NwC;pe2Sy)=<PP%fbZ>?i1(ZxYN>
znpC2=VP3NUXr`Loa;BQyGP6c(9R-JE&;9kOYBB3!thE1_{IGJW4YQk@N)`tf23wCA
z3}EIf;Wbo10gSz>nXkUn2BSZBsxo<^VF1=pTGXo1q*|2-p<opDgq;yJ^LIwyYm<eM
zism>Ai^CB$nshP9M|&oXrlt%P+2QO+<Qsj;>%%}XGoWJHfQqR<hyciB;i(@)3>8y^
z3Y7_T0sU30beJ4jYmzE6C)g$YxKLU6A~;{EGzG{O92tX7#)Hjm<7Dg^Rt+t^ooHHo
z`39P(0BW2Yw%E|wH9MzA(*U!%@}pn^FCGVq)<dh*5#k9X3*qlZ$$v${p@rF>*~m-I
z!7)(0pdJT^&gFCEoFiZOLF_6QlvP7*bT?MT$?!N+Kf@H3t(xMbab{po0XVe9OXXF!
zlYO6?{@K?IP5L%LXKlxYGTPBgoC0hN@ShM?7XOL@_$d5cEUF=0HHL&asQ*)AilKX4
zFgdE2N9D>*b6Q8JA?0Gw^eG(X#<|PQm+CBHG|({bmf0(e@e;qv&g1+kP&_0{Ph9U|
z58H__)eie6XolCcxq&yCUtOU?YE%N5n+CCvAdOa4YMl0QEd4>M06)}E8s<=!q`sn2
zWlD!?*WzdNm|~ekr^xAcIW^L0V}PZQ!bTj#q+I_TS1FYgYAg-ZSPu9RpxUbC<0-M;
zz_A)l=i_*fL(JT{S-TpwYrhg~#&eM6<((U?s!)T~PZ1ZRXcnUc`Ob}1Rj9G*r-0jX
zygQxNr+iC$b}eeteuet9V09Z%0+W`Mw-tjTjPK&{FL1rwQrsx1E&+g}SuRt5aXMyB
zN7cx`EDfPKDTy}mG5SeWKdIRd!o4{_4W{PX9qS&Fm(bzS4j=zak#b46&v#+(h*Tzh
zGCNj*i%9NEWB-tpr~gD(M>xzl=$-0LzD7Gg6y*jUh7KT3E0LU5vOoj|*sH%&e4p<W
z)!i(+Ex6laqyK%bZf946GnLP2u`}YlKj9Rbp0XvedNo_D8hJz`*EzClpO@{9jshJv
zfPcwW87FCA{xUYoI9>Uj+pQh@LH&&d2o^d>?%YT1pbhG8j6P}y5QwvDX<!1_dmPUI
zclQ=ZuL0CW+7WO^>70RXKTRfOoA!UL@HtA2B;1s#iUq|p-en)&0UcCPb6j9&Em>dJ
zEJ+`p57n<u|ENm?f<_8{GKk><gQu~962Km?<nt-;HdbYRDY#sqDgbvhVtP*1Vwv<s
zJerp=!`uvjXbNB?7ew~HU<-H}|1cb3VoSI|=jw@8WO#G4HkYe{=KvRA&<3JssD?9_
z4~=2y617hKpjPn8*_vypt*ARsdBgNB&$@Ut)vC<8>e$*1pnTP+B6D_qQ5{{VwgHWi
zs<XPM$Spe3MH_>*R?`c6JLB*76zw$zoV0g1KGGyGi~jgmo4#m*nSM!X6gL&))0pp+
z!GR{M&|@mx>lSd(-R_(%Nnv*+#ZBo3_ik>0>QQ)#+FpHk{O2)<6o^tV1Xu}rEyu89
zFgP%T91T14k|8hZURnHLEM<nIWqloCh4nIUwZC+S0tMic0dH(f6v=}8)|x;RP*tQK
zjJojCzGxL*!E4kc7}S*-?<kKRBWz<Wgkp>l43KjuoC1$R3Oo|PTy=rR42W=ApdDkW
zq1g}7^dsP+NQ~$PWD&;HzXogtf3ygrFhv+qZRuq*?j1nRLOTh-rYFGkL}U^QM=be1
z(#UkDGVVcOIgEe{J{risL4KGXMp|~2_`p#d(7Lq!qa%@QY%Ex;g9@&|DVI=tmho<9
zj@_nBysa{Ac;?!0lODdM6@v^On7@n`tCtI6@)8z<NZCqd_mKmsgzirb{{-o%3#*Dn
z<OPbZQ+c=eT|4rMn9nZ!D8vZPEHaJxq5KNm(V-S>s20t&4`)I;s8x0NUZ}vG2G}k_
zY|5w#XBfU1Bf_7x;b=%R@6Njb8l|`B0e~s7=uT3x(xqI?)Tb4tD>Ri?2g|kOoq$pr
zv?)r`c`RMi-~x7i-C^)^;=%}qW{MO?Opb>MT+bREMz9*mQ8+Tfxv9BZ?XAXhD8Ew7
zt*A7EN-&S%mhh;;24IPHCSsHDZI)Qwo08^9SdUjr`C`8k+G_L_SLiFz^4g?<zM@cx
zYDem>z(72}D)S;o@@qtRg>N5Y#WR^yHye!e_6W8k7@6|g#Fp14gzR{~GiP_z*{Qly
zH@krx%{t40mH}3+nd2be+&KJ{e0lNG#drWUrZJza{ao6>s}6P);JUXXF~#R`Q+%E{
z#pm)i5ruPoMyhMM2L;)5@{b(%0O$rkDD)o8S!O=3%glKX)Tu^?plLm4&FuTBI^i>Q
z!cm(uJ5rE|)X%MpHIyUvnXqmi!lhMj+t>yPw&Y5%MM8tx3*%z2-tXvOrZhkfV+z<Z
zf;&RTGIjb_E7_l$`a}Z-<YUkt6j37y-vC?W{@|J=!TozZp~SR@ET=BzQlR`w;&7+q
z+~M^k&(28O8pN6aSfG+(akL=03dI@q()ffGz<+5fYqw72E)%JbjpdSoQ#GNxami0@
zG|5^Hz678D)3-)=T_eIN^t}lb`NATyQIW(tB{{J~O6l(~y`;K#2gWl`n`eANs`dP@
zZN?A(fvu1Od;V!2P5<KP{u7Wg#UO`&X;|O?heq``tl0N|?}{xJ3m^>RMcWr=Ic0e4
zJ@mzAeth)E7oYI)@uS|BFHRix1Dq)}O2^Zf{c|X210^p;+l-i_c}m}ViobM+5Y;J$
zAMnLtBGMx}T-;f1WgIZw-#^o*XbjipJMwV{4r4}kkuF8}r+jJZ0xOr^dD?Hrmn2X7
zYqTzUk&WhrC$f~MZ>77l96r#zGF;+n1f``*kdF2vwt78(A&iv_P&QMoBgPsf=lM(6
zq4>PDo0D;)5^++Bk4iMnf&DNP2*=$Lhx+MW_q%&X7+mN>9v&WgDqbiC5Rm~xkD#;+
zEQ;X~WMol%%dzSxIVZ&*Ju*@SzRhomWlWX`P16f^7{s&|;L12LM&0Kap1=-xiFsJ(
z(n^Yg5N@P0ekQT7=We4IirRxFF@~z)@F*w=ywQlKc#8JN&0Iz4>QqH+2ve&t)D@;!
zVIB^#!XEsA3gd8?wK>jXAyb@mlo~^Ye}&CffnRCgWyDu<s+#D=$JqE)IKjqG;SV&v
zZ#HfOkJ7nRt|?N4bO{u@x~+X|>nz;Gwm!ojXzP=n*;61XhtcSxZ%4l4xG4u&_nT9s
ze1(UXv_>QtE(5OaGt3x|<^=}Rk~W!^(#f=xnrXSrrPcv>u84x67XHr2h=P|(0W6e?
zg9r-)YlbF!5eKkT$P#|5M}ngw7&T-1X*IlJFC~Dj=6Gi41V$A1teq0VLv(kdmvN7x
zVZeI5yAp?{k<#k)8GvSB`O<3nifZ{%xqRp&RbM{b0A9X4<Ymc>WyxyGlGT?b<5gD6
z?pmKK9lwo&wB)izwJ9ZUO0JhKK_Al?uLHGoDJ|Vzo0FIn;;ME-+#xjW+pLyiinC-9
zI_h9d3oG=wdB>dBYmPgUX?)>fm?rPOhcTPHZKLjod`bLA;SS3eIm7b#?O(F$AYP$8
z0w!kEp=mSWbvW}e#fDHf5uB0COoDP+#e^|~!(35t7<h9W%QvN1yF#ltis$DH-&Y06
zi%g?g3duK$W=RPviXpzNK!F%fmy9VmUhV=|wnoT6USM3!ZC=g$?(6#mQ<0mO;fXMb
zkl>Sbae6NZCR@YH76LJb(wM67ldk?78{EQwI(c^9!L;=`h8x7eZMg?$?$%jXKGBxp
z)nuVrwQX+tL0v{n8Ys@=b6dAws@4}v5(9H6acz)`A+--Ez-O=fIFHW&aFaBa#_s*@
zV<7|Z2cDTl&J&a}SY{wiGYoTNhNSckU|OxH5t18eiuvCaK=T52oDmJjwk{0diWyIN
ztsh#RhzU{E0y2-Fwz6}z8wh|*(VOH~K@$l=FWkfdS5M9GPneM*kH_;-ymYe7qZc=i
z9^*$5>p0jOwFs_sV${7~UHiR-E4)<G9-ZhK4D6A$IO=PQ^3KNN4n~WUU}6D9e__R$
zUEMr|*e^OV5LOL~!cF%4HSV<{Q2eElHzna|z?ddW7Z~kOPP-n?)@VY<zc<1w%UXzt
zbQ3CiH{Nym>LwdmF%<pF4f3;WPe$C_InT|c7NN@bM`DPNd3c$%&vReAayWOO5meSa
z=2Y~%K&5GX50HM(^VP5YtovEW<Z%P?F(!ENd~(?6suV5+p`1M=x3Y&M;k70h4R{g?
z#I(^@O1?|zmydrXg<SjT2(f39N0LHVQ6{NEylyNwIhp|?A9HtrGads+Ije~CAdy*X
zG9znEPCj3+bIQ!Ib>A27a-xM^!!{hakNahGHf`R?%~<T50kDI`JuAl9V&|X+2Amp@
z!Qcsj!2$ID)ZIVtS}GmhzC3_GupSf`#5Iq*QB1W=W`}la!+%{wJu6=OyBvV_8mWO`
zhW;#gyJfS>z($N{dnpWtxDfqq;(1*c*?wuHr<o#Z@~Q~3YcnIJ{s0CyOX9JI2^eRW
z7y@ZDO=iO^%E!&5n11^STn!8+r2!_;BraDlQ&|@N`Uz#0O67@MdOVwu_Ee8BBQJn}
z!JT6Hl4)|kzvYYH7><ttj-IhZV4lPM)FutB_dRDi_`zePtM~mq{lXF&z}mcVig}3f
zCHRXfo;V*|FVJtQ4w2}>RA`7CAw;4Pcn{g%0wHqP$f!n4hKGqZJrPZ3rx9|p6BMtg
za6oh2;1C<!3+LG282<Dz{aMYfH}a*iM;UUfFx)-nVbXAIuS<OxnTjg~f<>4+^0(2)
z%r&QSFbnhvO9!2P(D%P<mxCx6`CUrJ7^728l*jEMqPDLN4)1k38rD(`XC9n2{ey^W
z<n|T%o|z%wufk`VL7s_;V<Z*MmNp|~5c4H?qnQBl)|{$mOQmuSk=qgqA2YdXGN1Ta
zbfB?<m|tQ9ZyD|HPL%hwtp#&7$8bvsebhzF_~j|OB`!_2yCST9Gj_Z@B{H1-(Xzd>
z!_SZHyJ~jPx!<brm9I!Yim@vbT&>93GL{E6Hjbz~wtUD?vU78z&Y8uY*eP(BKdGn8
zHsZG15MoGY;bd2RDZQRL*oN5d$F%$OY%idP`QxW3)tzLQOzOunXp>B+vpOfh)w1&n
zB+G1?$OCAw_GKgDKHwANL$dRD{0_h$_EKh`(YE#WuHBL}z|58eFhL>=H&3b-nrYZ<
zUQ90!;_@YC*&;ib>*HgLs2ltSS2v2x>VUqiM>-XMLzlVg@<_`CBnd74B>L!0?(e**
zQBjOSXa`^ZZTB;0g1#g5+`O#+M9D;TNxLb~h4=$6?yU#CN4|Jr-?v{!pfwX20U=GP
z-31UrHIk>6fu56zSP6E3=)9QazL`D&$+;Rt3=ur#F8xHi<UAaD5mRfTQj;D_9eVar
zDaJJW$BHvpLH$LtVEkd8eoQflh5D#izQuxK4lz$4MVqC`rF;bu+`P<ma_;PIB97)g
z@pmU!S$cm&p324jf4mKrk1R>Sh7PC+x}kBInrM$qHLRQ(oYZLvs*qXMHkTx(vb|jo
zy_ZU~tg{}S^f>F08Io6vo&8&LZ7g@K<>sekm4`v)o+BC~UIv@{BgdF(fHsy*?5-U+
z#~<syknyP!xz+MwHEthQI+;5q%Ub~?1jLP`Id&0u4j#J<g%Y}@%qv*uR<+Q#wWtfW
zaG5x>ick`SI~};CXT?PiVY~G-YKO5Dy_s1@UjTk5yef0A0pdhHSDqM3UbZSdT5P08
zvlECK4d?L)(1fF9b>M`%9+uIyC?A@tCX=JV0y;CJeR-lnN{+^<T<bZ?Vk<+Mm2Rh=
zAMGppt*1y^Hikx?G!Z+qq{V+FOPXVR%M+z7P1W>YOq8Y|dVM`!o-!@|%PG@bN$6K+
zO^g5MWKFvp!ms4QXuJV;_7ua_7*`{|>XzAi6os=7?ybq8=rTfNdiT`KMkN(d>h{c1
zce(m*ZRC#Eo1sxLl`DoF9ZD+R|4kzBuczF9%8i8Q=`zCoSGSDT$^#N(3^X!mK!qR1
z`*4Bh>6UeVO6&e-c_&K}Fqw~H#Z$$o&!RCW`t5bMVhk<L|88!pADC>T()MjV+{RaD
zQGSx7uPBLiA79k+%?$xeDIt~0$ZBMPt0*;`6`q@cG_~_E7^tWCwQpSfOsjt0|AsTZ
zBD?07CbFv_D;3|ubzO<k;Hv(XLZz_Pkoeub|4v&bP4!n2A(Q^sA|XRe^q)<-_$(<#
z*l9d&-6{W~OirN7-YIcnoj7aSX?+nR^G)8yBrC}I%dzutD7z(oNQ!591~_&+Xf$G|
zy+5!%(<9>8R9?%<o=uG{8N^g|t*#6S^Z#^1g^YF+N*eCJk$QRMq4*Uw35c9bk)F)J
ztWXtZEM6haF?m9Qjt;|SWvD0l!I8Ngmj1nzn)lz;g+)vF<K4^{mDQqGhX*uiY`!Do
zMwhYUFL&$i3wps;f6nVc3RT#b1@C^t?IV{KS!tLzEV7a?We~#HfYB^|lV#H#j8=o;
zz0rH=x&)GG8uWzH-=a7IK6L5*#s>f3j~g4xsA>cUvKzx6ZB&($QI(D)fVqV-KRb+$
z2KbL`4RCOD6yOWhFTSX{t~_!?ocu?Y0nSQdFGa*l0Yf@G!l}bx*{rX=M?um+AY!V%
z@Pp8Zgp3{4Y7Kd{hV|7_S>M_#JVQrL&(M*a%`}`f2G#vD8^XM%Jg=#m*L3N;noXGV
z=&4CwFRU3A_KYldQ`o;UaYu@yt>#OC?O(>+k$RQaUy&ZZXj;jZf4`M%t-{ab*z7m#
zUr*Wob)W5Dck9*Sge;5EwpCTz#cH3!GpzOr{y??LM)NC7U9<2<t$WiZuO(W&{?dG(
z`a83BL&E5`IQ7L|+hK6%EUN5I*^IIzL;K6WV0pTa3trHIf5Js9#N3w_nsbqVp^au!
z*m@A>pOaDCQUuIpjc~bg-**i&!Asjr@MM`1afx}LH=j1yp#2XRSMRS<veRTKeP@Yp
zQ=5Nf(<45Z@arCu<&3Z47r$=tJzYqv%hZvm`IH6uqMFd>zdE6R!qUqqYHUE9R!sI{
zr%Y^3j@)0py)qUj>vqxvRSPA?YD@kylPDMC>)FIKx!nfI!8-~a`Sl$O>lz?U8MN{<
zB^`yW%9HS#qKG3a9VjUu#p-UAC>0f)Wf8cGUu!;*Rr(qraxhIuoBYV%zk90u!50hh
z^usgV>W3^xC*;;R$zx1&aY;d7F$5*s`W&!MMwhoNfLdJgF5`&@o@{C|$MmxA)1vwb
zV?vn(w{1<Dq{mgs*2vX8GOc+&pW!>U0MoPEebuVI!NC?MS)R>HV0G<+KdRSQ2Ic~2
zDt;RyEMgqnY76KC^eewWVVTz(#cO9#3SV<rEMAYd**Woc%NFOWY+@Tc)CxZCc{-kD
zNm?>Oi<j%M=lK+l1;Whxx3BP)&M;>R-5aRECiiPR%?<>%WH3d8m$Igyaa&p8wG76X
z6RwiNBK*4$lCY?)aPcvjp?%OoByOUGw6I94(BAzWs=w66p6}{5<ENYmS-81=7qh>T
zqizH&{Bp?&>|LG!|9W!+*a?06Su;GUEV-gV8en*^ylX=#5M;VcF>sydMF5nvt_Ps5
z_y8d3VQ<(!b~*qm2JrtE3N8%WO6^t9p|N{4gO#oAf0$hT=oZ@rr#cgdII?(q$=yeE
z0VRpQlhp4mc9Y_06mIyN#6WXXd<YGMuq$v;5y_WTH&6mUDzn@Oel4*Fj1p;LkTY;I
zQc8{6Mj5_F^;?H8VSr3GeSZQ4_b~H04z-A7>bLk+c9J!P7ii?SQh2e7UgW#mHHeS#
zr7bkyDVET)9G#}K<!|tv)<rLOpzQLeFokv-og?^pw`}+P&V&2@KQ<q1JlOWx`$$?c
zsjL9a6fiK7Sx#o?n7g|gyRPEQcwyFBAO+0C?{a6?^>yS9M(gWo+xzFio7ZTmII@?3
zDCyCWUj>y>B+oRg=$%=E-f;xBUV`neHJBQ*&}n5Alfxwm_c4+vu<i01e9JFeFHOQl
z+}6}^4xQQ!J;7IZZ6-1=fT|7aUhozUvpAIyw>pto?OMRBWwnMVXawOfQ=FBU!%O85
zvW3JNVwSi>;PDa<5#<ld8Y7}aD<KD*J8wSYh&dS5RmXE3^f5-XZ22%lfdT#rujex+
zX?jA^y6El=w?2H7_KXD!6H56~R@ex0fx6{uoWV44+UnRtkd`|zJh$b}*tE`3raO`!
zYZ~o{;gSoyF5kdClp>q|hD6n=N-Sc$j5)1&L0QftAQ~;_5L2a^F14`z8&nptt+GfD
z<0IBuAO^A>C``2y5+>T9K81@=9wgoFXyE;njAM@-ygXnitF36Y0m*eRVZ;y>Mkl^v
znf(=3qe{};bVhrG&S-ASf5YN)geIJ4?=H}Ub5?#*#{45&Gktdnxv{ooXREcshQ`#K
zG&TIR#V)$+D-~9R9KUAkOTG1K^OaI=4y>exQrJ+9U*1G%JU!N*j*rjI-@lJFFw_gu
z>*M2tlXv?-p{0ngr_ECQ{`mMZ`tzT^wN|&mc%j(_zdt^{KYjA(`7Ldf=m+8$EWSQI
zp1j@cj9~fVsbi@4_W1bW>D$ep;l`GHQnQ%)a(w(^@Au6g8{@H>Q4mru#P5%flb<&p
zeqP-K`9L*Wpx4L8yXoj{y1D@m8R-t+Bc5w0`YTLn-itr3ZjR_l$CUW}@o`+fn)O#U
zu@HL++Ppq~1UPw|gooa!D1g{R3pC*=*oMcX*q_nEWSY$258qkvkWD59Jxrv~^$iN|
z@SMZDnR<Q$++=bAZz34l`BQa>;KeB*vt4|N#WSL=jISlx)Ek)GJIlt&Btaqo%X2E5
z7s*8oh`}48*JOlufJ}XZ;{(K(74&%$jj2tY2HYH>X9UTZBqj||i?x+Z+VTx7!2WrP
zNy&gVxjeW$1N>Adaq_A%q+_9oY+2JYzpQKL?IxbZ03gY%%s5UwaG*f;=6I$^*vu&u
zWZGE_z~zW{f0ZB_REniC?C+G{*Arswlq!x`Dnpi4i7-ktD@J*QshrAxYz|=6c*Lj|
zSnC0}B1hf%4wpg>BhQYt6ki8D+A;F(EmJL20$0wkDhrUwg1D_JjK&Ylu`L;xtA|S(
z<!$=_q$W8<E;RRz>voFBz2aj1E^vJN6O4k>KE$6XvUK=>gE;bm%X}MunkSfLqIM3b
zHb>AB8eW|*`IwoX?DJ-R(Fc!SVy<Ao*eAifn>-bK+Vux>Y#KlCoM>qTBLUYe)d+FI
z6e$iEuLh>LrDBAk`mi3Lo@%hw#X0YO`XI?_dNzlv(S<o&3vW~{Hqgh4am~Bw_7Rg+
zh+P7;kphv7v7#E+@Y0_GCT{Nm8B7_Xu+;+SfPDa!X6G^~<{OI0=@~mOlf_jVxYk!Y
z22XM?dX8n5$eY#?C0!Ni!Q!oIv91@@)C`hw!PA4f#>4=fT;n|glag!%<!OX@?b^J9
zMnI(wIHdjZ&{_+|%gH55|K<iCd=z)E&XST7r}l5o7!3&JdCUQ65dEFhYMk7q#@l!j
zst0EowHRUb=qxAGoy*-ol?6U5M7n^2r|f=2d8NNJyCpZYzP_f~9H>szHyJu?M=`EC
zQ(@&QzAC4uOzC+XTWOHhPd25)B`lVI0fuhn$1b_0-JwXEQ^#97X#x^wiLJi5!Yjgh
z&%5s*qoOy67Y)E@@<FvmWtFGujJRv*Ud-%ts*1m;psO)_HUE%$((qN^4{lO@R#~{K
z%&Gd^lNM3>g+7(njypLew<*X#QXz9YZU$NmaKjWR4)F!rR4C6&5qBBMptCJ}uHzXo
zRng|EJ4x)JDAT%(#2BO0DI_K)SjoQl#1(ma!d-=(>vct4iNaLC?omAhp^II3(?F+a
zI}q!I6gcd0j3xxA)mOMod@@JQ76l_FR>q0c#m~EEz!(nOs3&2%b&o6sKG+{8Vmg>^
zc&v2@P%LYLh+21FybTe5N~Ep+77Iqw*Kx|u^obb8r_tvG7}41Rv$>#nQ{@Q_9GAx~
zrnU3MIkwLKIdQc3%(_uDF{Nb>&IX^m)h`cuPKpFTAJlUd*rbuY6Z=5nMkF<`=i&rI
zcm_FKD9<mF5(DIL)?v95NOWA0$ClmDL5h~Y6X5RCk$M@_4ykcty)`b#PqiC<f8kP`
zqvUTQL&sfCV*>SR?=d_(Om%<qM6azFDHx{3gCl`9V5c!|B%{+?Qkt?#t(n;LgYYgo
z6(<6_4ZorDPB!UOTk8eU0GO9KaE`3~Sr~c7E7X?`()P7IEPy9JNX6RNk#$sB5aQ5A
zv>?^6F6B^1yg(fJ!$333kf?>YP0Yv}=bK44<z*&A8__fzm~>#o>sQFF?FYG>%$qDP
zqiK89s$+dd#WHzmy)ikeI?9I+Dj~F;zH?_csc5+HGy!7AI$Gg=LRaxw67DAA^OrFL
zH8P(Hx98oTU-`@E+!{4pBjBs39Quue{QnC2cjV$M67(i^@*K;#krgbDljGnRT@~4l
zXcnhb&1MBtG>$QxmTPiEpHr~Ppki5sZkT@qva<M@FX1u1j8meO1ekS|r)k$Ja^Fy~
z<YepSq;1B;;-wbi6B@PPtb07!Z9pz3Nm!8=Hn*Wy8=iSFKP75QEOtSS!yBRW*;DMp
zqLQ^-CU(M?_4Rhl`NT?f{!w0HWXStq*QjM2N6j8muTqY|xzLu1SY+>j*MRsWw*Bp2
z=2?!VK8FH6s#Hyk5aqcdi3)s+#?m5_w3S8Jc;n<T*jVnF)OV6tKXkrz)@Jo+t=r~H
zXI<XmP(8RgAb=vw8ukpqBCP#(&j$d>tYQ6L!j0`^^CCw2=N*7=nareVTDaods+L~G
z5lnwcQ;v^IXD%nabe?j0OUClN82u7oQXX&n=U4NsOZn06aROL%4zn4DaENXG^sYQ4
zHPB=sjh1_StImlGVfbR^PB-%*nNHuQXScT0SJ!qOQWa06j~yK@&J=*5o>5JvqFMRI
zd(@)o_ly4|OTH3f-3*_^o17yB?tYKll05&1P9Hn03Mx#DxQ|xhw3?RWw41YS5@2?t
z>K#+tbk^HU_^miE4G#CO&ZMX|&YX$8pFpz1#hVm*R^|ejk-h0-b@r?zrnK{bY}%xa
z@O(8_<2;(P^PW>yA|zJHGDeOL>%!+HOh5A+<|50xoiqV1LcSbe44|Ny?1(Npb+Lr8
zB3+MxhQhTCmF$8M>dHaT<*njZH9Hz4K#jd74W>W%l)#^$q<@rj#Jt?Bo-jpFGslDM
zTOCym6mgZL=ZCO2unM7uL6hcYf9+UiE0VV=3yly7*9X!7ZF;>LMYyi*co5qk_{w*U
zOtLzJ07Q(Q-GuRg;YI6|^>x>V+hq(lR^x5k-&sCBJSRZM$Wgh9EX*T~rcjL=yD6x;
zJ4P{&Y~$=z_u`VXhXp)7dURDTK`072wO0;hIoV~efbMS93fu`3{e9Sn?#EgO<~?C&
zFsP5vwHHcWkT%xqmUfNlxMo<j>mo{5Vjgub$RJ%U4*<KmB&P96G`f_xM7y#3H#f)x
zC~>5PE_{FR#W$f1SZkM!wk2lu2YMehxFCvlj8B8SS<nxRDKbaIGh9BKuejIEfvg&E
zV{{8<Nr<f4Po?{qMg5@Lu#Lf+s?^NC&YE_cTzR3yN7_X5FZSay_O!aHvsebWt1G~Q
z$EKj%1*x4r-Titm&!QA_$lz|ZW7ihn+{8}ch8inuT_w}Zd)Pc+sARXnMd?=5swp1W
z9F$3a@d7mV943TR9u*W#SgHD5T612iVVj_b6@6ihg|t1ljfDy&sWFn31EAve0Jz^}
z6@Y>xn@Az$(iPQ5_4tx>u+0r_MQ=jeU{$_yWmi>RzPPLEuAb(qnyWToMGe;;thUm=
z1H9v2nB1h(^{k<ilc*Ky?@%JN<=eHAvy2CvJrGUW5se-mtspj*evy}hrf+*k8Z_<R
zX|hu0;;>vc$#^N=y}4PdG0p>`J*C3v8Ox{J){RvWgHFMIg${R?afmi|ZxZ@<n?5D<
zE*s23YHBOd&q)iL1v;Nsy30|Rc5RunK%th@V9un>g|&=R_|?=64$+HBtA6&(Us8RE
zn*W;m5=Adfg=K2!DNo^-77mMjDsL+)Q>jT6XYh!^QSlicP~rLsn^GFt69((2&rPtl
zEL}e*zNMg?h{V!Kj^Ot)_0(Bn+TG?#$51LYLSbqP9BKkX*d7cUg7>|;*uQDubZO`>
zt_*qlX<d=0<mbDFRv=-i@)^stKbyKf!;b$;6m^FB@`UwAv1I8jrCpw(eQU{L5R3+-
zWjsN=T;d~48A?^qAyR>o5<^q53Snb(H3$FrY4E9``Gc~-CnkpK3aq!L0_$@k-qsXY
zC#=9aPr|o}xNx}vkP=+apBXsO(Bh-pn_03$XVoJ*z&x}|!Sg&ZcO(|qb?_<cDyNj3
zi7sjryr@m^+AygqGnhf8*61~$*c)PE7&%p~)*xc4#bgYd-h52Li$uIi!gktzwDquW
zI4PO#6VgeR>@KRDP2~AP#60Prlko-VoDIj5!sS~r)4ml2`c_QC8D1(w_|rcU^U&k^
z9o1<SrhFv4PUV~wxw4hq*>FD@2XoUrzTT<J9m5V;R@UQfegwQEQP9+(UXtK4Y_Clb
zycuadJvfkA!`pLHkLu;*LO{6(rLV(Tbn$^56;n789HUW&+?vLd(sPE#zEfTt9hb))
zNHwhow5wwFny;Px+|rHY1+f?M)>Xa+zIg38!5kP(TG5l^)yXs)M$`8>xj4az2-o@)
zK&90F$G}=~#FDXp9ifCjt?2oIqUG_rF6Kj4J+|!<NQ&#$ywkFr1^4dty7d3vMlOT6
zge68F>7HUrd5q4YoSXr=N353^p~@P56u<_f(^npy6#(r9i8j>!xfq56-D!cqA&_Y2
z!t?x^51ZkqSLmnNR~`!OL!DJnv`4v@ROrTm0|HoH*vQZHHL)K4-dJnGEMR&xX1-3$
z^bY+8v{$>3L28Ak0y1&D0Cq>f&-BoGCJ_X@;fS?I;=t{5wmO_!HMe=vB`1?5zTSUF
zgtvyD^t<FPjz)F_fLOW%!Qx^^$d!M2Ah$1zvfK2!hQ-nd!07=6I9Pk&sH+I^gT@qr
zfi-T6PY=CuF0IwhR@3A!hwn7Ilzxe>K8NVGT@T;naBrNdFZ^(Or-zoW&r$u(t73if
zF}OpVPpk3T?ON+V)qI7slSKlvJ9X$pMOp+FodKi=kyY~2Qs2}qrmX_i2YK(@VKdk{
z$r&ou!ibL0b{HSvPN7y+NK@%&_r#4)BnR3=ozB2`2MIRybV)n`GBHse`W&)|?$h`J
zrZEOyFXvCs)$as(5+Im=B9Oj>n^tmj6rZO6yowP^^GmmzJ$jIiC~HM<En~eUCU%b~
zW_AtxFZTgW-B~D0nY^nSCMEqriP$_nm2Xu4Yt{ht_y5o^`aBF;-U1q-yQUgT-yDlB
z^d)1-+wC}9i!2@+_N3t~Zl^q6Hu$!YPB0ZQ=L<w@O5z#f#ln?o<oC1|!-NiiO!er#
zvdER#IgU{mV1gI2y7YGeOkB>$OIpyIT5spQ-t8}F&EC6OlM!YNn@*!y5w~!ZfyXDO
zC5O!UzmVW4;wfxUJVvyIOsK|Tm?HbweO%2td}ym$bW&kZ`i)GX-Uye6oY$Ad%R?*h
zTLR{#t5WsWJpF;H9!=+CKo;{_2mn|h2Rw~R%}y1|*(oOxvqsjxZkYRoG;jpvh>$WU
z%=1pa*J}~bmiZj1MKdW4dljP2I;|#B`h$|dvc)^nn$bqq_`*L^9Yq#+IGGgleh(H~
zTEzb@eWc70mxJ~fQSiT}DpnfN<f||R?5i2P_9-gnS`1?xHp4qUj?n4WvknLL0K9WD
zCUTVSD(<URhKWP+y5dbk^yawj@0N~BCE1$0lWfUJ?P-Oi40g()4=EiGPDc@}qDMh6
zn5P*uCZ}=%8WgtoI<q!cM-Ag}zvDa5(bd+(EB6Iu+VVyqn^Msry_F~aZ^@U%xvlVp
z=Za(dY!$)rBc{7i@jbq`-`a}1fr`(85(;$Q_W)UWxN4OM$HZM28B7NytWwcomgCf!
z%4$WrfGR3+EL8-WbkRYH4f4jxB1N7H_gjQ)NvWl3*NJm-6jsr%zBm@sVoX;pEVMPB
z`Cc>V;;*r&jQCbg?g^0ADwK<}D;=on4ct<Po+gKMI2Me6Y>-K6ulY46Q4%^5%h8ee
zGg+F<sTl*dexX@69{IMU_;^6C;ToGIl=!oLV~uVVF18ynWcPH1IaU~ldstxtf1tuu
zILz8IdO*>cMJI7*BGFQf&Ll9?gav1tJk?EKVblBJDK@<ef1v3zqv;M;tJ<!bF-TYX
zK`YJ8f7Z>PVe_BD&)ED4{DI~#T{<`e>zufW*G~=lFBWT`(4dY8*bmM1&~#C!U;&Cr
zf{q*{=vQR4CT*;wLB(4=?GHHZ^YATB`vU&Jv_FRX7N7D;{?<DqUjLQ2yJ`4a;)uJu
zGij$^6f}3Dg61Ci;@w{enak?V@hU3p<IN35SHd||0ttiqLgH)Ko+WK2^AA6Y@fU{L
zg(7e3@e3mqOj9nwqBDxqvXRJJA*S<s&B-*r=$z!)d8gN!U0PB<quMdxGZRS!xgi@U
zf>bm~;vlNC`(N4jQ;gh23m)tX%|8dbLSf+GTo}A_aPbBG_E+@Vh(!F(jzs)=StMd5
z5W{SyOQI5g<x(`GAdNd%vqjahHmdUT!lb0%IAo7sE-(Hi6W20D`~lL|1rpbonB+-T
zmf2a*LlQS0eT4P@beJ9?QDMo1J4_|y9Bhgg@Dizy)uO(vk<hM+Dp^ZlU<H7*u;SEr
z9#~$4DaKzy6|kfdkP@uX1KPb|eH~8s8vJ?X%mmz6v}br~3=x_z2!TKceZvuG8buKe
z^irF*Ek`#tn!jVrx0VWAci9a32H*4*SPT3{pXfqdEVKkxNd0kj7;!;un$SUhU%2nX
zbJu-%uJ1!dmE*niayh}Xl7Y{{&l#-N^8{mgB108QHdAU|HhTli{)+NVGiqaG2dYk1
z1gajeUk#I8RUz3|KJb8IU$2G~>PB;)1b0ytV6=cA9O8NgPgST<RC94`MxeDc%?Ovy
zbbZ~U_|q*4c8J6wzI7x$b;ZOsw*u(ykr5wzCHCjgrNaSoNhE89GZz#_bkkWQmbN5E
z8xgc&1^!4vi-mgO4j~Q~_ZuJ?{z&|r8@AnUWCmzt_RTr7Z^W5>N4L=?5jMeH6@Oq?
z1cBl(I+E0|f{vLD9fdPlEr;%6nT1cZa<$PwG0Tmf!&9}<d*M`V^w`?yJ?BR6{VjP?
z<=)f+_P;bBMutlt8#}(|2Sa1W=gW576E#pWd5vJS5L1RanWGj1ko7ko_~JdqA2XtV
znX$+?5||D{W`riQ;(5s!U&^`0jOz94|L&+>-~4Bydj0x8II7pL|NW?5zt<i4$#dW7
z2JiG+x4p3IZu&X^*InX9t@I98Ug)-eI7b&)h<_Tc-974+=}t#<CjhH&mIV*NTVu|?
zoBI^pgV<=px%<b&O2?<oBvUK)OfI9mBvsg%!VE_<vtzVOLk`|TA!XDWaIP5{tL1$n
zGt5-sSW3VXSyYsm3f>o2Ax~@R%x3klDAU2r9To*Yd_`E4vA9C{(TNoYWCB|nB+{->
zCbHF=jK(8{zxdHKYWqDAKh})e{>fH*za-(0iTHUHM%6fyk?WC&qwrco;N3y`>%p*$
z+-VzEz=_`PL;_7=?EBA&6jwF(y+f81l)7ih4p~Nqg~@`=1d3F1vMDShWBKC<rckpf
z)Q3q%;)=pD5*d&q?d{FYZJ<x^@zLY^kKp`9usdfltjh>x%4h_djiM=~Ru&#*2mUF+
zbQhP;ISdfI<$yrDb2NWCn@wXfu;G_KB`2p-RD~d=pkBTr6+Uck<XUScd?p2D{W?!l
zU=zBh+$G&OGRPEK|DZx$jNBV0=K$MP1!EW-B7u!tX3mR5kB*s<nPYQqga?|lBaC3q
z4{!pJ{7EDgY$lC3?ananY2mZ9l1RlNl8Srb97)A7{OO~B5+!kR_8vuuztZI=oTciD
zvs7K(7D#_>PrKfrJWH-@md*e~%39bpliEGI@3&>)DJ&V5kmhavPHg1-9k+EDdxEmv
zhRbWa(_ah2)bOzN(Gh@~P&;?JQk@MnLKwz_GB`X^bS{kYCnmL_@AQZ$W#HU)_S>Zl
z{NEGXJ!0g}%sEP0{tc%4iXy-5XmJmkLK{*pdWj@A&}N2+K`p5-GR_wh<WcwFba8~d
z>1TsfzdM1vw>;-cGA8p4*;SLdg1-NFBd*aZQ5pz;rT|y*XkNzuL;w$VQAASe(Pr>{
zpPyMeGIr?Q>I+pLVYN9W>D>~_uj$Bp#P^r#J4VeS2XA6G7m5VjWZIkEJA};!fI$Ci
zeAXNL32fEjs-fANt08mYA7Q*c0&R?tZQu^LDjCrrQbwM126!Ep8Yspf8l0j#P7{R$
zBhf@4z`2^}17oU{?x^gRAZ`eU@?-04*x6ccNpfarI(Nt87Ok|*(khC`dGbwcg^pED
zxn0glV<JLRP`-m0V%p)9Q+KdMz-m0{4k6%<Ms-;E7PADSGVcM!wX3cm^arcu^t<Am
zey5z%Z{KX9xJ=9F0tR4SSlGm_ZekysI16{NiO=w-k7@plCZ>F^QLPhQ>l4<x3{SAu
z2lxZE-ZqjJ&e0C$T-SMvbuPkltn(56K%G}6<Nw-b{9m~kf06;;J3dAO<>TXfY{G>S
zfOp~RN&;{IKUf0rBy6h`U_J$=giUPw_xkacczTEKX#WQEZ&*@Q?CW{>wCd{^e$+D6
zEWNGZzIe_Yxdci6g^dASgAQ82`vaouM#G~0q!asm_i(8r>(ICnt%-`Ws5|chtwd%I
zN{w$K!jFhL4A*&cq#t?rp!fcEuje*Mab|`fUulX!?i7#wQaKthTYRB2dQ1PKz?*Q8
z@vE13qXxKDQ_9%A-TQ~f3=@jE0v1P1VP}79ci@}9B!fa4nerI2GHsoqU45LlM%gTh
z$E`AJji$+Lm__-xreAPQa)R03JLI~sWSUJ8zf7DI$N+qd;$X-q-M5iUhot|*?80*!
zj@U*Hipri*#vf7}z;;Pe`Ki<+7*?R(`yy^pXPiXO7ECSGO;FPG&7N2_4GY_S-7NN2
z&0=oMg2~wyb=gt~_HUeviFLnjDyOTaa@CxQh36YCDt~D*CjS4r$$VZlnX~3(tQ+TV
zoC)7XUpI#jtLAXooP)gi<W{6VZ1rw#j(t1Z$|qJnGKtc#n6?DNz?Nrt{Tj&V1KXSg
zEnK4G^>y!k8ehyvpxaUxOp8U<t@G13)$-|95$EU+hbI_nt6S?B7{sE8PEc6?L%0R}
z3wwGjsrL*ZjruaRi%<l9j0-B$8YdGO7`8Qx%kvn<aGA~X)-cb`p{*7gik7FbY`5Ej
z`v%CC(-;Pv$5WseTUpwQMkBO>kGV;zLT%^Cq->obl(a?>;K0_rnm!+Fz8H(HM|*Ja
zA6xtSGD$ugK%gjt)}42StF=-hn_HeZQ2S9k%%cby8f2A&TiH>YGA|@$UIgzr`<;Wu
z2R!MZ&aYh5`I$|fUrHCY1yKA>`2!jwB6VkEp(1@gDO{gi(&b9>q>NOD$S}xHdzzsj
zQN<ZBNBQN;^vPuz7iPtzUh$Rg<V}?1!X6ho%*mKq6%1P`Utb>VtCX)byEfsWT^f7X
zRZ0WS^oXXDxV&V0P_!=N678Z1MrKi7;9e65x4l|(K!SvbW#;KeRzer>Go7Cu(3F5j
zpkFj6oDSxWEW2k(N+O#fK1UbyJP!|*IjZ-XqLj9>NsF6NhNZ<qILbW5&UKlQvkX%~
zGy+v{W)ze$wpx2h+F~IYm#G#xYEO}CY}SY_mev?T4Oa%TRmPDGb=twRCoP$FvYy3x
z%O=uholVp2?k5;2)ofI3kau=XbExb9XXP{1o^OArliO0iL_UJCBQ0jl<*n3?Ik$Pb
z{e@8w7NCuGjmMg6YK-ToF{r!j-BTdW(G)EyFROh#R5^*?WwTbl$2LNYfLrHDdD^1U
z0i8cbM@dB51rDWFixCc&LaQSakE>c)qgJCYBzjtm*;;c%`<|Gm32-ii<y1rYt=)6O
zJn|WzQLdUS%j;O`+^V=E*eTg&ND*<0E*`i5K`NuLM@?reC!=HU!(nsFDsZ!TrvK1E
zxl`KQ%KklS@He$0nF|;jCnR6K=&4ekI8VWy97LT<=r}*NuicSO5A82@W|5tj7qKKG
zNh_25G(t0<8H(=R;;}EuBrnsMmc@AZ_1Wa7k;`t~kw4x}FyAnTsBVR38u>XYe+(-I
zQ%g6DtR!fr(vCJ1)1YBICJ(M<%&Eo+fl)mqftYfp0RhTwVL_l*6KzF7vJL)rP(AME
zNkkOQyZEB4UeTot^xKn5)0ko}`d@8KF^>Kt#uTt>|6`3Q%(4BKj439O%a{V-uCj<A
zz;zf%Nb2xzVf5j!+_`9Uao3{i*j1xbSBR0L47os4f$q|(o5%fDZ9B^)jTh<=*WOvD
zxz?L~tc{NgakWGxuWT_=OFxg-wmEv@lPZOMp>7~j*upN5?FK9{X9JS!M|ptc(oq&5
zS~bf318s{_tb$NLnSM~^zpGQWoN*bNKc(`iPn;6^G-hli_L)aIZq`q+-!A-n`g!Vq
z*YEY}nSD~>&GPJo(uw;RW$SHd5GPhqU9dxF_-cJUy}8N7-oX0M(FmN~|0V-(c+&AU
zCj4`Jb5pON(0stk3>X801)wed53ZxD!7iX3fM~v)&MDH(<%ahUq&?WgM77CxL<DQp
zq3ueua}RiW;|*Rn!OVICS5GiC-=Oif7krklrgF81mtOEm803VKdtD9c78v_>;H|fS
zlx`^^y+C)(uw3XSG$<Q2nTmXiHXK)`4aXz`m|teYA<;~aFi4M(0|JE94J@j&cfDY9
zkJBi;ip0MA5HW3{(}M#AQi*UZ=hVL@LLz|xWkU9lGe^N%Qnb>nlwzVW`I9aD)ourD
zicgLvtus=1I?3K<(&o<nrL?)tG#{XCE6Ob9vu?MG<E6YEu*ha?oRyq7ew^6>kltc|
zpG$1^!|tnA+Y>rcI+BZm+DD;CP4;yfiEE9}fd$}=*L6E24%z4vAkZ@b1GT2V@rKbm
z@-dKg2imAt=512&!$;EVqXLO#&B|@L@&%THuia>+_gS3~gWX6@QW<_Aw?gZxlI^B5
zd#-h&De6R{Fh`x}2>$eszAErotp;MFRnCETQ&p~=WoizvPg$K~$gqP`MY><n1A21g
zAFGC1nJk=$sOnUeMJ<3GXBg?gogH8LUSt$b6X;Snyd`^Hw0eQIDx;4$1^gUt2@=EB
z*p|*cz)fV2R<Rc&Ah%+4^zES36n$TSMFsFlBFtJ{z~Sn!+na~G>XTnbYb$^i+3fY!
z!mypdkP3|KClL+CN2W3Kdpkqu@8cp}UmvwmV}6!}<f|V?xr*r0&V4oJ&228vUG#g{
z$98WEU^;0u{XjNdInWHL2S?k{FrUu=5lhLaoI(FVVAbvGVe}t6*KQfhcOFeCxEHSK
zmn^0l$K!zPrm9uUKI&<z6<O$A=GR*Q%6}FJd)&z8RuIYh0;V&;kb3-KJ5T_zX)f;O
z!y4dhK7{F)J!phQz_65GzNTB70eSsku)C^#SP7u?P<5XPA}kIMdt&q95wREAEVAjy
zlSx*Ig4S!U1{#7{XENSvj=}Er&@$1Fw_GhYW&mfnzgQ4Zk}a7)|IKSU96=<^3leAz
z*kQ)*%u@$r7(yi;AcWPWs))0?wbFpVa_h#e>_E{w1O*ZoWqX$SH#d<P#~?P2C>k$W
z*XDkNb_2#B3&GGBuw%`FEa9SXH)`)?K3ppJ^a|$viJqRr(+NGjgr`e-dJj(@=qW?e
zlAa29I;W>05UUsT^a9>}<gf7V)e^EjOADa%idRYckx2LG1omzZxvY%xAL3%=VO__g
zW9^}g;vUrj`taTfAjVUCAk$<tS(RrGpHSk`seVqT(Fr|pbO(IOfhFLg%1s3710*D)
zxTE52p^O2JVU97$3Jh)C#sg0Q1#@j-*y+P&=gJ(i?<+Qa6!vyT-$#l)9|3!Aw-p_Z
zj(mV?qb=1;2fryJG<n#uO;nCZgR8tVqkNP_hc5aKMp`BL4Bgp2hkK!`ZH8CdFr4Dm
zHitibw4|CtD{WT`zK8eV($7I_43`%cVhdGCrM${cGB({hwXIYwr+5YAMaZLsdtx{k
z27Bx4V+<~lfAmm!eR5iQmYnpLwEMbYq;p-;a0*oY<!^Lq&R|H^I`qv!qs%$Yh?63W
zGju>V$uKy}KQ=nfodz_stWhv?7Tk~7kU!<%#!fnR+H7p!J?0U4u2#n?D1|;$K`M;h
z3HI%|U5V?-be^!-Sy~rGW2DC4WwYR6&t)eBLpzO^2x=qv5MM+iic^B|E(0QPvmhO)
zLmQ|=Yma0Yv*l`_54UUG&LZ5Mr8OlsaMk>{x~4)OuBx9`S5?@=RrS;AsuCkP{lHh(
zl!(h!^Kx~~CVF$W^5K?NBvy4*eT#gH0e^55cMTBSUD2$Cv0ZJSuO600<F2|FvhI=o
zN5?~X9ffVUW5kcI_Mhy&I)1wU`e6Un^Mm78FJJ%Si+52dKkWYa{Pnxzz5Qp;#eshL
z_WAC!-*-H#((#*DyHB70wEyba^S6lMTn(?Ud&@tuwZrq*e%m>wo0~R_nMEzR43Xb9
z=K3nCp@i3wffG1oFA&e~BEf`>escf>LX{Gs3X%Wh^5qz4x-2U(8&Dhn+xfqjLuim)
GW+MQz$aR(g

literal 0
HcmV?d00001

diff --git a/web/ui/static/react/static/media/codicon.b3726f0165bf67ac6849.ttf.gz b/web/ui/static/react/static/media/codicon.b3726f0165bf67ac6849.ttf.gz
index 2e8eed7cc727dc52da83d7ae0d7ccb959e58d59e..2486eebdb3a77789fcebfab6550507e320fc8862 100644
GIT binary patch
delta 18
acmeymj_K<<CU*I54vtB+_cpTUO$Pu>AP2Sp

delta 18
acmeymj_K<<CU*I54i2w(D>ky{O$Pu=zz3-S

diff --git a/web/ui/static/react/static/media/index.cd351d7c31d0d3fccf96.cjs.gz b/web/ui/static/react/static/media/index.cd351d7c31d0d3fccf96.cjs.gz
index 12190e3d0f7e6162d86005fe1eb0fa23567e2c67..fd9844e13e3e1d00a48d994cf590c2c857f16c42 100644
GIT binary patch
delta 16
XcmbQrG?j^6zMF$%QtiEs?0k#>CzS-G

delta 16
XcmbQrG?j^6zMF%?>)nct?0k#>Cp83@

diff --git a/web/ui/static/react/static/media/prometheus_logo_grey.3cf697e5443028ca5e5255b93c7906c5.svg.gz b/web/ui/static/react/static/media/prometheus_logo_grey.3cf697e5443028ca5e5255b93c7906c5.svg.gz
index 1da4d74a72641810186407cf8a3126f656d5b54c..0ff3d70b809c06c809c06b2a42ff69503df833bc 100644
GIT binary patch
delta 16
XcmdnMzJZ-xzMF$%QtiEs>?@f8EQ1As

delta 16
XcmdnMzJZ-xzMF%?>)nct>?@f8EF%SU

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-grid.css.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-grid.css.gz
index 3b61a721a3e2962145633303e2adde4c92a0a130..c3e413cdc89f5dee1274bd3bc22639238f6f0bf4 100644
GIT binary patch
delta 16
Xcmca+e$AX+zMF$Xx%S>h_VdyJGm-`T

delta 16
Xcmca+e$AX+zMF&NakAJ(_VdyJG)@KD

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-grid.css.map.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-grid.css.map.gz
index 86de107d98182e03d06aeaf3aa5b7035de83500f..e92894fd66995d33580a384b6ca5ad56c22755bf 100644
GIT binary patch
delta 18
acmex(lkwwCMt1pb4i4qodmGtb<p2Oqcn9PF

delta 18
acmex(lkwwCMt1pb4vxpkVjJ0C<p2OrGzY=}

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-grid.min.css.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-grid.min.css.gz
index 75e5896ca576d9fd00df9e0450bc34d6826d8824..26c4f52605a87a465a569fbbc925077343cb7eb2 100644
GIT binary patch
delta 16
XcmdmQu-|}PzMF$Xx%S>hb_)prF6#v*

delta 16
XcmdmQu-|}PzMF&NakAJ(b_)prFQ)|r

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-grid.min.css.map.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-grid.min.css.map.gz
index 394b950f7ddf5247360503edfa11f7db87df7b44..8618101553ec2050f4e39fae7a67f76e8373e6c7 100644
GIT binary patch
delta 16
XcmX?Dbg+nBzMF$Xx%S>hb}LH&HiQMy

delta 16
XcmX?Dbg+nBzMF&NakAJ(b}LH&H$Vli

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.css.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.css.gz
index 52c0ec43948fc8f8c9d8957f4bae5ea1da9fc9b2..b8d1bbf46e950fe06e2bc4195e07cb0518a7c383 100644
GIT binary patch
delta 16
XcmX@idzhD9zMF$Xx%S>h_C0I>EQJMH

delta 16
XcmX@idzhD9zMF&NakAJ(_C0I>EkOl1

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.css.map.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.css.map.gz
index 6268df7050cef4606e967bdbb9d79f1a97f6c590..1abd1814507961e284215c4f54f8fa6315fba2cb 100644
GIT binary patch
delta 18
ZcmX@m&Um1mkzKx<gG0IY-bVJF&Hz2G27~|r

delta 18
ZcmX@m&Um1mkzKx<gX3|s*hco9&Hz4Y24VmJ

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.min.css.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.min.css.gz
index 2c744ab63413b174935eb5cf49b7e3e8898781c7..2cf01da6e04a3d356ddf2118d6507f34b191f206 100644
GIT binary patch
delta 16
Xcmcb`bBl*vzMF$Xx%S>h_Fy&uE=dI)

delta 16
Xcmcb`bBl*vzMF&NakAJ(_Fy&uF9ihq

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.min.css.map.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap-reboot.min.css.map.gz
index e616ebdb02886ac7847c36d0443df0ee2a8d93f1..b801c7605581c4d3f59cd4a158643c1d1d99a25e 100644
GIT binary patch
delta 16
Xcmext|Jj~hzMF$Xx%S>h_BZkXI2HzH

delta 16
Xcmext|Jj~hzMF&NakAJ(_BZkXIMN11

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap.css.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap.css.gz
index 99c92110cd67875dea8cf9f7c90c33249104feb6..2922ab8189a2d658d7fc7750325349cad012e03a 100644
GIT binary patch
delta 18
ZcmZ2>hH=>$Mt1pb4i4qodmGv1(*Qx924esK

delta 18
ZcmZ2>hH=>$Mt1pb4vxpkVjJ1z(*QzR20;J-

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap.css.map.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap.css.map.gz
index 76cd61b76d2fd602302fe925841dc3ff91d452d0..bf0c3de6042feeb7b87e1d2d31ea73d962a177b1 100644
GIT binary patch
delta 21
ccmZ25gKfbKHg@@L4i4qodyVW{*%>8!08Q%#rT_o{

delta 21
ccmZ25gKfbKHg@@L4vxpkVvX!u*%>8!08T*$ga7~l

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap.min.css.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap.min.css.gz
index e1b6b2bc106d526f05059260e1e3cb7fcdc17ff6..876db26a6a385673aa0dc4ece80770f4370c99f4 100644
GIT binary patch
delta 18
ZcmeC)#n`=zkzKx<gG0IY-bQwoSO7b=1?2z$

delta 18
ZcmeC)#n`=zkzKx<gX3|s*hY4iSO7e71;YRU

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap.min.css.map.gz b/web/ui/static/vendor/bootstrap-4.5.2/css/bootstrap.min.css.map.gz
index 9c802fec4be6f522cfe3919b112e0c0b3c020ee0..473573d672d75268db0fa72946434759daf62c59 100644
GIT binary patch
delta 21
dcmdnBg>BasHg@@L4i4qodyVW{*%^&z0RUDn2RZ-%

delta 21
dcmdnBg>BasHg@@L4vxpkVvX!u*%^&z0RUEo2N(bV

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.js.gz b/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.js.gz
index 6946e3edf35e0d1fc1fe85bf6090a35518d78b67..e7876d948c2c27201a097da41e962795b4eb4256 100644
GIT binary patch
delta 18
acmdn}hiUg8CU*I54i4qodmGtJ_5lD&!UtRc

delta 18
acmdn}hiUg8CU*I54vxpkVjI~__5lD(eg`@L

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.js.map.gz b/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.js.map.gz
index 3352fac959718d03df408ef055d368b1aac4f6ce..edaf3fbfc497a92a24e192cf1e99249a2056f3ab 100644
GIT binary patch
delta 21
ccmX?njrH&~R(APr4i4qodyVW{*%@uJ0bDo-XaE2J

delta 21
ccmX?njrH&~R(APr4vr_uVvX!u*%@uJ0bG~|M*si-

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.min.js.gz b/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.min.js.gz
index 15514ee0c5c817320646bc673e27894314edc260..ff89d2b1896ecac4fdb4971f9891ca4fc2964ca1 100644
GIT binary patch
delta 18
acmZ3nl5xdKMt1pb4i4qodmGsoh5!IQl?IUj

delta 18
acmZ3nl5xdKMt1pb4vr_uVjI~Ph5!IRSO#za

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.min.js.map.gz b/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.bundle.min.js.map.gz
index a62550592df2d652ed570176cb7b999ce2b74cb9..8528505eb3b8392791056adbf02aad11f4819a12 100644
GIT binary patch
delta 21
ccmbQ#$vUZ%m0iA@gG0IYUL*TfcE)ZO07@4IlmGw#

delta 21
ccmbQ#$vUZ%m0iA@gX2lESR?yZcE)ZO07`cTa{vGU

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.js.gz b/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.js.gz
index a6c317d065f113f52de4d9934265f53e457febb9..c3e0602de04f673643170358b41d1135a0ebebc2 100644
GIT binary patch
delta 18
acmaENoblapMt1pb4i4qodmGuGCj$UW*axlv

delta 18
acmaENoblapMt1pb4vr_uVjJ0?Cj$UXn+J^m

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.js.map.gz b/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.js.map.gz
index c76613d4205304140b04cff9aeb7f781826fd008..fa37f2b653c0b5b4cf50b6e9c87c83b559f6b085 100644
GIT binary patch
delta 18
acmX?cmife4W_I~*4i4qodmGsgJ_7(q9S6?<

delta 18
acmX?cmife4W_I~*4vr_uVjI~HJ_7(q;0LY%

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.min.js.gz b/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.min.js.gz
index 8f1440d10125477b530e76c631720afde5cdfe47..9a5163c46df6a898f3e079c603e6e8487ab9c244 100644
GIT binary patch
delta 16
Xcmdm6ytkNLzMF$Xx%S>h_HC8`Hy{Q_

delta 16
Xcmdm6ytkNLzMF&NNwU~R_HC8`H{%8-

diff --git a/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.min.js.map.gz b/web/ui/static/vendor/bootstrap-4.5.2/js/bootstrap.min.js.map.gz
index c526a02f8617704eba4e92b5961dc6a4eb8e182f..73aee6bcb80f46a14e54bd3529ebdeceb976d213 100644
GIT binary patch
delta 18
acmezSk?HS8CU*I54i4qodmGum?EnB%Z3u<{

delta 18
acmezSk?HS8CU*I54vr_uVjJ1N?EnB&FbHJ;

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/css/bootstrap-glyphicons.css.gz b/web/ui/static/vendor/bootstrap4-glyphicons/css/bootstrap-glyphicons.css.gz
index 8f4a353cccd73d924d4248fcc29e63286e85f00b..b4f69106a67985828393a529b2d395b5a94d04c0 100644
GIT binary patch
delta 16
XcmZ1@vPOhmzMF$Xx%S>hc2zC_DQyI&

delta 16
XcmZ1@vPOhmzMF&NNwU~Rc2zC_Dli0w

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/css/bootstrap-glyphicons.min.css.gz b/web/ui/static/vendor/bootstrap4-glyphicons/css/bootstrap-glyphicons.min.css.gz
index 0f9b4ea40b454df1952a741eeb8ea20ca7bcc4b1..9c6a8f83a121a53edc7e5aa4309ea342330049cd 100644
GIT binary patch
delta 16
XcmaDU{8E@*zMF$Xx%S>h_D7rmG4KW3

delta 16
XcmaDU{8E@*zMF&NNwU~R_D7rmGP4D`

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.eot.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.eot.gz
index c658ba95318fb56a256a582e41d739644e54777c..4cccc25b4eec19f550fa8730d7ddfb8d4ecdd2cf 100644
GIT binary patch
delta 18
acmdn?i+S5GW_I~*4i4qodmGvH{{jF?F$anO

delta 18
acmdn?i+S5GW_I~*4vr_uVjJ1@{{jF?^ap7G

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.svg.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.svg.gz
index 179265bc8721cecafab16c0abbffa2b79d9582f2..3b1185f0e8042fe74718564df80f8c32c0c1e51f 100644
GIT binary patch
delta 24
fcmey|!u7d@i(S5(gG0IYUL$)eJL6V%rko}KZj=ZE

delta 24
fcmey|!u7d@i(S5(gX2lESR;EYJL6V%rko}KZjlG#

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.ttf.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.ttf.gz
index bb572bbc022e4ffdb60bd728a10d9cfbcfe1dcf3..f0cb1762aaf16c5cc63274126a9ad53d2bc3147f 100644
GIT binary patch
delta 18
acmX@{lljC?W_I~*4i4qodmGsg{s90@hX_3Y

delta 18
acmX@{lljC?W_I~*4vr_uVjI~H{s90^N(dYP

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.woff.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.woff.gz
index 853b4bd1784c3103d2fbe6bf2d8e1f0736cddd00..9d6ea6052b83902e16bcf0aa11db1b0af3dc04dc 100644
GIT binary patch
delta 18
ZcmeDF#N7RfnO(k{gG0IY-bQwop8!Kt2K4{{

delta 18
ZcmeDF#N7RfnO(k{gX2lE*hY4ip8!M`2Gjrm

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.woff2.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-brands-400.woff2.gz
index 736fcc88a43a2fb8187972994654cce3bd7bcf97..e83b7f3569d32f67ffed17b45db67c133561aa60 100644
GIT binary patch
delta 18
acmX@IlKIF=W_I~*4i4qodmGvJUI73@BL`^!

delta 18
acmX@IlKIF=W_I~*4vr_uVjJ1_UI73@<_Aas

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.eot.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.eot.gz
index 953aff04920a6ac06f5d035e33870533bcf7065e..5fe594fc005619e306ade9623c8ba46a5a53dec4 100644
GIT binary patch
delta 16
Xcmcata<7D4zMF$Xx%S>h_HZizI$Z`W

delta 16
Xcmcata<7D4zMF&NNwU~R_HZizJ0J!O

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.svg.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.svg.gz
index 30cf35c01f5935f545bec9ebe53ec478da5248b4..8c16e3918158cce5f8b7cac1b8c4c0a038a6da87 100644
GIT binary patch
delta 18
ZcmZpj&(u1fiCw;%gG0IY-bVJiegHV`22lV2

delta 18
ZcmZpj&(u1fiCw;%gX2lE*hcocegHYK1~32s

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.ttf.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.ttf.gz
index 1b31d1416501623eec5e9bfa6f8f64e7c5624551..64691dc0526f8788249f9dc12f452a2a3e0a3a52 100644
GIT binary patch
delta 16
XcmaD^^0I_ozMF$Xx%S>h_9QC+JG}-@

delta 16
XcmaD^^0I_ozMF&NNwU~R_9QC+Jb(r*

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.woff.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.woff.gz
index bedb77bf8be674fd58a27700fe615706c318ec69..d29da7a3cc7ad2669e1fdb3412b53452295f7461 100644
GIT binary patch
delta 16
XcmeAx?ki@O@8;l8uD!RBz1<Q3F+c^n

delta 16
XcmeAx?ki@O@8;lmk}S57z1<Q3G6Myf

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.woff2.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-regular-400.woff2.gz
index fb33a435d074675ae11349805199ee701b922633..c86118db1d0736105a3f691ebde2439b28ce56f3 100644
GIT binary patch
delta 16
XcmaD6|014UzMF$Xx%S>h_J{faIz|ST

delta 16
XcmaD6|014UzMF&NNwU~R_J{faI|&AL

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.eot.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.eot.gz
index 1aaae04edb5c0987294c4311b4de16a0d9550b47..a678eb0400d2754e2b0f777911b2a360667140de 100644
GIT binary patch
delta 18
ZcmX@u%6zbunO(k{gG0IY-bVIahX6iI2L=ED

delta 18
ZcmX@u%6zbunO(k{gX2lE*hcnUhX6kh2IT+%

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.svg.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.svg.gz
index 28343dc6fbd5c32557960096f16e3ab24f4061af..2623612cd4d2f6857f19988e8f9986389c032e1c 100644
GIT binary patch
delta 21
dcmX@}nf=UXc6Rx04i4qodyVW{*%^=i1OQ{M2+sfj

delta 21
dcmX@}nf=UXc6Rx04vr_uVvX!u*%^=i1OQ|X2(ADC

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.ttf.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.ttf.gz
index d2434a49849b8f33d2564d6a1d021a301fab379d..af6ef451de4d7876e55d3e29b09a7efc0d29b3ac 100644
GIT binary patch
delta 18
ZcmaFR!u+6xnO(k{gG0IY-bVJwLjXZ)2H^kz

delta 18
ZcmaFR!u+6xnO(k{gX2lE*hcoqLjXc82EYIS

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.woff.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.woff.gz
index 0012d12379c8dd17e8a916bc1d27b509cf28ee49..d32acd5667c153e42846f97896b1c74bed083313 100644
GIT binary patch
delta 18
acmaF<hw1qrCU*I54i4qodmGsk_5lD;#s}a4

delta 18
acmaF<hw1qrCU*I54vr_uVjI~L_5lD<i3h&`

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.woff2.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/fontawesome/fa-solid-900.woff2.gz
index 915268ad19c882beac9629644f87894263123796..bcaaf983342d0f3c6f32a1de8854afa581953433 100644
GIT binary patch
delta 18
ZcmeBQ&(y!3iCw;%gG0IY-bVJ0=>R-L2A2Q;

delta 18
ZcmeBQ&(y!3iCw;%gX2lE*hcn_=>R<k26g}d

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.eot.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.eot.gz
index 968b249aac130bb3fcca170d4675e36693fa4145..3db3dbf9264e56044a5ef44c8a08a65e8f2bed3b 100644
GIT binary patch
delta 18
Zcmex7hw<|qMt1pb4i4qodmGtv`~XHh2GRfk

delta 18
Zcmex7hw<|qMt1pb4vr_uVjJ0W`~XJ)2C)DD

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.svg.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.svg.gz
index 128c9a2ebcc38f54208ee5bfd30c8c296cf62990..32c8e472ae11dd263febd35f6f42895abc0be70d 100644
GIT binary patch
delta 18
acmaEKk@3+*Mt1pb4i4qodmGtrX8-_8ZwI3Q

delta 18
acmaEKk@3+*Mt1pb4vr_uVjJ0SX8-_9G6#YH

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.ttf.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.ttf.gz
index 73f8c87c68009df4aa19db5e5a50cedcbb2fa0a3..40b5fd51b06944309036397fe8a44c46330d687d 100644
GIT binary patch
delta 18
acmeyio$=dtMt1pb4i4qodmGu`M*{##_y?W<

delta 18
acmeyio$=dtMt1pb4vr_uVjJ1tM*{#$y9a#$

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.woff.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.woff.gz
index 47eda4527d50431eb5e1a0e1a8fa2fa3c9bd143c..c06e70fc670775591f3faed9bc18d1816fa9c4ee 100644
GIT binary patch
delta 18
ZcmZqK%Gk1%kzKx<gG0IY-bVJ?C;&Sn215V<

delta 18
ZcmZqK%Gk1%kzKx<gX2lE*hco+C;&U=1|k3e

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.woff2.gz b/web/ui/static/vendor/bootstrap4-glyphicons/fonts/glyphicons/glyphicons-halflings-regular.woff2.gz
index 7305dd8344f709c267a54b483af0890e5a72d764..cdd792e40fe1e8ab424403e37bf478827c7db2e1 100644
GIT binary patch
delta 18
ZcmbQ(%Q&%@kzKx<gG0IY-bVH=Hvl*O1_l5C

delta 18
ZcmbQ(%Q&%@kzKx<gX2lE*hcm)Hvl-n1?2z$

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.css.gz b/web/ui/static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.css.gz
index f7967bba306de742b29e722997e3d97bc8e3bce5..c9d2afbf82e12f20a83f8ee5b08b948efa2da61b 100644
GIT binary patch
delta 16
XcmdmJztNsuzMF$Xx%S>h_Equ#FV+R2

delta 16
XcmdmJztNsuzMF&NNwU~R_Equ#Fqs8_

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.less.gz b/web/ui/static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.less.gz
index 209180c0575d5f5d280c8d5168f8698fd2a7fe40..dc82f6a5daf76ecece1d847909bf297d3b525eb9 100644
GIT binary patch
delta 16
XcmccSbj^ufzMF$Xx%S>hc7H_xGt32;

delta 16
XcmccSbj^ufzMF&NNwU~Rc7H_xG>-*$

diff --git a/web/ui/static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.min.css.gz b/web/ui/static/vendor/bootstrap4-glyphicons/maps/glyphicons-fontawesome.min.css.gz
index e55921154977f4029724026dd43f04eb57c6a086..69514cde2d2d14a6db82b7588a83581df21b3f10 100644
GIT binary patch
delta 16
XcmX?Rcg&7mzMF$Xx%S>hc6)gMF<J#)

delta 16
XcmX?Rcg&7mzMF&NNwU~Rc6)gMG93jy

diff --git a/web/ui/static/vendor/js/jquery-3.5.1.min.js.gz b/web/ui/static/vendor/js/jquery-3.5.1.min.js.gz
index 066057f8cffa15310b3139216b54f1b481efef17..9ba3719afb67095a446ea247c8ff039907f568e7 100644
GIT binary patch
delta 18
ZcmZqp$k_0akzKx<gG0IY-bVJy3IIX*2F(Bf

delta 18
ZcmZqp$k_0akzKx<gX2lE*hcos3IIa92CM)8

diff --git a/web/ui/static/vendor/js/jquery.hotkeys.js.gz b/web/ui/static/vendor/js/jquery.hotkeys.js.gz
index ff20b321b52879c335617c0f60d8d9eb0199df8c..b64591f28d14d44bac52487a592b7abf6f563239 100644
GIT binary patch
delta 17
YcmaFQ`<|CWzMF$Xx%OV_Mvmuf060VjL;wH)

delta 17
YcmaFQ`<|CWzMF%iq;-GFMvmuf06IkmeE<Le

diff --git a/web/ui/static/vendor/js/jquery.selection.js.gz b/web/ui/static/vendor/js/jquery.selection.js.gz
index b549428d1db549f9c6b0e2fa727618ca67474d34..689454a1ecf44e1319e1df2d8037c3035a7b93c6 100644
GIT binary patch
delta 17
YcmZ1@x<-^kzMF$Xx%OV_Mvf(105DPoj{pDw

delta 17
YcmZ1@x<-^kzMF%iq;-GFMvf(105Ver$N&HU

diff --git a/web/ui/static/vendor/js/popper.min.js.gz b/web/ui/static/vendor/js/popper.min.js.gz
index 06213028af6bdaceb454f8eb027246ef6f20e3f0..eaf71c84d9e82849228823b66955aee9d9b8a3fa 100644
GIT binary patch
delta 16
XcmdmPw%v?fzMF$Xx%S>hb^~buE|vuy

delta 16
XcmdmPw%v?fzMF&NNwU~Rb^~buFIfcq

diff --git a/web/ui/static/vendor/rickshaw/rickshaw.min.css.gz b/web/ui/static/vendor/rickshaw/rickshaw.min.css.gz
index bcf313d044bf01a14f170116f9f620947a5f45bc..fa32c10827d7c9ffa2f11cda6f0af709e5f418f6 100644
GIT binary patch
delta 17
YcmX@ieVCg=zMF$Xx%OV_MvmRA05UHHy8r+H

delta 17
YcmX@ieVCg=zMF%iq;-GFMvmRA05mWK^Z)<=

diff --git a/web/ui/static/vendor/rickshaw/rickshaw.min.js.gz b/web/ui/static/vendor/rickshaw/rickshaw.min.js.gz
index 2a6dbdd98b9b252f9de276669dad40995a170f0b..55bd6d2859ad79b637890c06500db65b484cbea9 100644
GIT binary patch
delta 19
acmdni!?>-7kwd<lgG0IYUg|~;JvRVCy9QYR

delta 19
acmdni!?>-7kwd<lgQKK%f67J<JvRVEyatj0

diff --git a/web/ui/static/vendor/rickshaw/vendor/d3.layout.min.js.gz b/web/ui/static/vendor/rickshaw/vendor/d3.layout.min.js.gz
index becec2eba120b916a2367478dae4bac21137d268..19e0ef36e146bf7ede483a4e92f27cab48f0682b 100644
GIT binary patch
delta 17
Ycmca@blZqSzMF$Xx%OV_Mvh=f067H(<p2Nx

delta 17
Ycmca@blZqSzMF%iq;-GFMvh=f06PW-9smFU

diff --git a/web/ui/static/vendor/rickshaw/vendor/d3.v3.js.gz b/web/ui/static/vendor/rickshaw/vendor/d3.v3.js.gz
index f187133f9a724b4ce5e2af827927e048a7aa7e01..5bebe8fcb8e21943e190bfbcce1aa511f1ffba60 100644
GIT binary patch
delta 19
acmZ48%DlRjnM1ytgG0IYUg}1U#fJbv_XjEf

delta 19
acmZ48%DlRjnM1ytgQKK%f67LV#fJbx_y=PE


From 22bd5b04ffd7cf4c3df690a5e0b198653c0907a9 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Wed, 28 Feb 2024 00:25:57 +0000
Subject: [PATCH 131/132] [bot] update rh-manifest.txt

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
---
 rh-manifest.txt | 86 ++++++++++++++++++++++++-------------------------
 1 file changed, 43 insertions(+), 43 deletions(-)

diff --git a/rh-manifest.txt b/rh-manifest.txt
index 95e037fab74..e1fa7afb6ee 100644
--- a/rh-manifest.txt
+++ b/rh-manifest.txt
@@ -1,11 +1,4 @@
-anymatch@3.1.2
 @babel/runtime@7.19.0
-binary-extensions@2.2.0
-bootstrap@4.6.2
-braces@3.0.2
-call-bind@1.0.2
-chokidar@3.5.3
-classnames@2.3.2
 @codemirror/autocomplete@6.11.1
 @codemirror/commands@6.3.2
 @codemirror/language@6.9.3
@@ -13,6 +6,37 @@ classnames@2.3.2
 @codemirror/search@6.5.5
 @codemirror/state@6.3.3
 @codemirror/view@6.22.1
+@forevolve/bootstrap-dark@2.1.1
+@fortawesome/fontawesome-common-types@6.5.1
+@fortawesome/fontawesome-svg-core@6.5.1
+@fortawesome/free-solid-svg-icons@6.5.1
+@fortawesome/react-fontawesome@0.2.0
+@hypnosphi/create-react-context@0.3.1
+@lezer/common@1.1.1
+@lezer/highlight@1.2.0
+@lezer/lr@1.3.14
+@nexucis/fuzzy@0.4.1
+@nexucis/kvsearch@0.8.1
+@prometheus-io/app@0.50.1
+@prometheus-io/codemirror-promql@0.50.1
+@prometheus-io/lezer-promql@0.50.1
+@types/body-parser@1.19.2
+@types/connect@3.4.35
+@types/express-serve-static-core@4.17.31
+@types/express@4.17.14
+@types/http-proxy@1.17.9
+@types/mime@3.0.1
+@types/node@20.10.4
+@types/qs@6.9.7
+@types/range-parser@1.2.4
+@types/serve-static@1.15.0
+anymatch@3.1.2
+binary-extensions@2.2.0
+bootstrap@4.6.2
+braces@3.0.2
+call-bind@1.0.2
+chokidar@3.5.3
+classnames@2.3.2
 colors@0.5.1
 compute-scroll-into-view@2.0.4
 copy-to-clipboard@3.3.2
@@ -22,10 +46,10 @@ deep-equal@1.1.1
 deepmerge@4.2.2
 define-properties@1.1.4
 discontinuous-range@1.0.0
-domelementtype@2.3.0
-domhandler@5.0.3
 dom-helpers@3.4.0
 dom-serializer@2.0.0
+domelementtype@2.3.0
+domhandler@5.0.3
 domutils@3.0.1
 downshift@7.6.2
 entities@4.4.0
@@ -33,30 +57,23 @@ escape-string-regexp@4.0.0
 eventemitter3@4.0.7
 fill-range@7.0.1
 follow-redirects@1.15.2
-@forevolve/bootstrap-dark@2.1.1
-@fortawesome/fontawesome-common-types@6.5.1
-@fortawesome/fontawesome-svg-core@6.5.1
-@fortawesome/free-solid-svg-icons@6.5.1
-@fortawesome/react-fontawesome@0.2.0
 fsevents@2.3.3
 function-bind@1.1.1
 functions-have-names@1.2.3
 get-intrinsic@1.1.3
 glob-parent@5.1.2
 gud@1.0.0
-has@1.0.3
 has-property-descriptors@1.0.0
 has-symbols@1.0.3
 has-tostringtag@1.0.0
+has@1.0.3
 history@4.10.1
 hoist-non-react-statics@3.3.2
 htmlparser2@8.0.1
-http-proxy@1.18.1
 http-proxy-middleware@2.0.6
-@hypnosphi/create-react-context@0.3.1
+http-proxy@1.18.1
 immutable@4.1.0
 is-arguments@1.1.1
-isarray@0.0.1
 is-binary-path@2.1.0
 is-date-object@1.0.5
 is-extglob@2.1.1
@@ -65,23 +82,19 @@ is-number@7.0.0
 is-plain-obj@3.0.0
 is-plain-object@5.0.0
 is-regex@1.1.4
-jquery@3.7.1
+isarray@0.0.1
 jquery.flot.tooltip@0.9.0
+jquery@3.7.1
 js-tokens@4.0.0
-@lezer/common@1.1.1
-@lezer/highlight@1.2.0
-@lezer/lr@1.3.14
-lodash@4.17.21
 lodash.flattendeep@4.4.0
+lodash@4.17.21
 loose-envify@1.4.0
 lru-cache@7.18.3
 micromatch@4.0.5
-moment@2.29.4
 moment-timezone@0.5.43
+moment@2.29.4
 nanoid@3.3.4
 nearley@2.7.10
-@nexucis/fuzzy@0.4.1
-@nexucis/kvsearch@0.8.1
 nomnom@1.6.2
 normalize-path@3.0.0
 object-assign@4.1.1
@@ -93,13 +106,9 @@ picocolors@1.0.0
 picomatch@2.3.1
 popper.js@1.16.1
 postcss@8.4.17
-@prometheus-io/app@0.49.1
-@prometheus-io/codemirror-promql@0.49.1
-@prometheus-io/lezer-promql@0.49.1
 prop-types@15.8.1
 railroad-diagrams@1.0.0
 randexp@0.4.6
-react@17.0.2
 react-copy-to-clipboard@5.1.0
 react-dom@17.0.2
 react-infinite-scroll-component@6.1.0
@@ -108,12 +117,13 @@ react-is@17.0.2
 react-lifecycles-compat@3.0.4
 react-popper@1.3.11
 react-resize-detector@7.1.2
-react-router@5.3.4
 react-router-dom@5.3.4
+react-router@5.3.4
 react-shallow-renderer@16.15.0
-reactstrap@8.10.1
 react-test-renderer@17.0.2
 react-transition-group@3.0.0
+react@17.0.2
+reactstrap@8.10.1
 readdirp@3.6.0
 regenerator-runtime@0.13.9
 regexp.prototype.flags@1.4.3
@@ -130,20 +140,10 @@ tempusdominus-core@5.19.3
 throttle-debounce@2.3.0
 tiny-invariant@1.3.1
 tiny-warning@1.0.3
-toggle-selection@1.0.6
 to-regex-range@5.0.1
+toggle-selection@1.0.6
 tslib@2.4.0
 typed-styles@0.0.7
-@types/body-parser@1.19.2
-@types/connect@3.4.35
-@types/express@4.17.14
-@types/express-serve-static-core@4.17.31
-@types/http-proxy@1.17.9
-@types/mime@3.0.1
-@types/node@20.10.4
-@types/qs@6.9.7
-@types/range-parser@1.2.4
-@types/serve-static@1.15.0
 underscore@1.4.4
 undici-types@5.26.5
 value-equal@1.0.1

From 95740d134a8272a5a3831d42ab620f36aeca672d Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Wed, 28 Feb 2024 00:25:58 +0000
Subject: [PATCH 132/132] [create-pull-request] automated change

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
---
 .../static/js/main.90fe45be.js.LICENSE.txt.gz  | Bin 716 -> 0 bytes
 .../static/react/static/js/main.90fe45be.js.gz | Bin 491402 -> 0 bytes
 2 files changed, 0 insertions(+), 0 deletions(-)
 delete mode 100644 web/ui/static/react/static/js/main.90fe45be.js.LICENSE.txt.gz
 delete mode 100644 web/ui/static/react/static/js/main.90fe45be.js.gz

diff --git a/web/ui/static/react/static/js/main.90fe45be.js.LICENSE.txt.gz b/web/ui/static/react/static/js/main.90fe45be.js.LICENSE.txt.gz
deleted file mode 100644
index 224f3a8ce6785ff2fd1e3054d7159321918f3e6f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 716
zcmV;-0yF&|iwFox?x<w|18rexZZ0`6W@R)rVr4FBb1qCtLq$$gMJ{xBbO7a6+iu!G
z5PgonV)6zEuK|;gqN<9Tq*73N3rLmvwzdbn#NKsx*R<)^ch(mmgj9WQB!uPh%${@h
z%&Z;sJQb}mwmvsTtfbe8yD%3r(Fk*;)6#gCnTSyugpaoiuNQb;&^z@`u2k`;#VWPn
zDn^6h1<WvkZ`>LsnRjwm7bQ^21U1;Ss)r^F9lGiE!614kskOy42-cYVtgBbTre(y0
z3gV1tNuHzGB0~>^@r#TL>DScZty{s+5=~*O@?fo`iPKET2h=t=sCY-KxP_jH82j`$
z>BCG(m~YFO%e}`8`HO;F%8uarYl-?1W_-ivu@;4;v`BLbZ9+C-LzmNXUjJ~p73XKH
zJ{KrwbNHYLlUqTgxJ*D1wuV?qt3^~=rOjXXHRc^bRC*Qcp1Oo<ZgEQ6Fbe&_g+IDj
z48v(S`M#9~8doS$bHem>DXqv6eE--s78(so+lLQ4#z?7$KHSQfx$JDe1*UMsyJb@o
z?BNAbrlKGx4}-hgtD8^ro0ipOg{3!@#s%g@Y2aGrLellUQr1|_i!p4@Sonqwpwj}{
zDmAGy_j)dBYy5H0ed-5EJEsmA4P1k8n{o+X(4sbtGl!lW41x2bb42eGCVTi{E7}l7
zE4$m;(Sz+|-Xo_m*bLZ+eh!#gACode%?hoOGIqVgXnD3aM_d2EC8tGL1AMs@nV_yP
ztSMWh!hlhwj*-+RNVC`)`a<Wy(seHg=^j*@(%45!V-p5VnjsOIW>e9Ws3k>rKvv^!
zz@Ez<p0i<C50!QiUzk@Rd%_yGYt__0uTl2e{A$mlS1A9#lN_8LQ2(d*UsbnvqUI{6
yw@-8NU2ptW66>^<_q6(;sX_;NZWs6B+uIGD^p3<72JDQDL+=lx9uhu22><|GEMC9>

diff --git a/web/ui/static/react/static/js/main.90fe45be.js.gz b/web/ui/static/react/static/js/main.90fe45be.js.gz
deleted file mode 100644
index 27d7640bf7e04f9c0d0c8d1da460df8bedb49f76..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 491402
zcmaI6W0YV^w<Vgk?X0Y{ZQH1{ZQHggZQHhO+qP|X)j8jL<M!?D`zLnHz*@0l&$-5k
zy#qf20z%@d#0UV`O3%!ihMmsXh>2O>h{oIjAS2z*W?iId@Y^R_V0Vw*P=IpIkjw6X
zjK6u^61`+T4_3SOoH@LFHgQs<NHNa-V&(11hAf;{JSuI{LpU}PZo1Rq$kzA@WQWV+
zuH@cX*|8{fxnn^lN!EBUQE`>(dZL&DkV1)5CGK!Dxif4nKi1iYww?E5fBkyv^G>U|
zt&~GH>vK7O^yjmaT*ii$<m~M3W~_%d7r;`3#Qgz{`T}J6&wC}uIG16&#4RoOCV%Kk
zG~umO>f}-JOjDLf!z}LhE79?X*V)+DvPhrp_*&JX?n}RVX;HU}sLNk*X#Hx-=oE?G
zoa2<8rF&!&GHWw3O@(#X95&*@b(%$@Ro_Zb+gFKkUF(z|lqg$D$?k;#rfFK5%D=GO
zsk|v1^Ma0edg@Ayf2o^4dJC_UNnHs%F=1c10cS@~rsP*+ZG2zgZ|r?@wz!Jg+%;bB
zwO+PY&vA}ELuV;_*sdyjI&OHVQBLin4_%(j8RG`>$kvJDBx)DQ3-#~PO`*@5y=Yut
zSDUQ1%$Kj*q#g0K2PH+AJ$^Y?jedG5LQm3uRqMT%<k&G=o{pmBwsrd`Iu)nsC?-EY
zdw8rDj64^OXt2L>$li?+{kDjHvlw4%*;$Rw-(FPNgm>2%s;}R2dzLs~j&mekZJ5)4
zu4FaKD;0_Mk8_8+S$kBESl4<Qd!12<r=N6rE9<HYsiC;@8ePU!F>%KO>n!8~(C9N~
zgojh71gckMg@>!-(_m03kij|{A^a4uS<4&~D>fQI^p8j5hD>+bh-%6}<+LEKgm}JH
z_CJ^zUR;`XuXw$=;DTv!iR&~s=@ox^Ff%ADF#2@mshFy}cjU-$8I~94fci}$*#;ra
zn?4o(;E3@&m-k*xltn_SWY;c1hsQ$&Z-!^gr#od{<XCOgHnTufijUSiGoxg;RNZb)
zs$b!B9P)X8Fl}N;P0_LD*|FUl!%F96wY??o(Il}2-S6Jqf)#X1FAG;pYUI*IM!R3n
zd=&5Km_?=1mF+yv#_onPe$#*rmgG2GuPGa6mqFF3_{ES#<Wj5!>q8wtkt$=;KP~Q>
z#>#$e-W$MR#f1|&mlzNrj1`>28bBwRWO4aw-1Ooub~s!yg|E(oa&nT{5dmglZkk=u
z<8u&iT4T<w#k@TIKJ7kv-%tHeBQnepTf?BSrx`B4En^}d<ej9)$t>DgUEbyM*<!NJ
zrB!6(vl-w6<=O<^tyy$P>v1#s^rT_aR=(Nn^I_kpy^r36E)g1-m_Dq=o!M8vb$=|L
z()(y_)sK>1jh7^zqGd9x<KDTiU5#ESeeSwg7K>Mj#tCNO#ypN}Vdkb!O)XndxH#mF
z;_6=iVBE`<BI>s}rvLwU=qA;w4ISO~?E8fr@2U+MW2PHf;=yxq!B6+sM=mpHkGoRu
zKi>QYZ!p-8k5Cgn|H0jdhSj7UN`jKE<-y7kxB<Ax>*wUPQAtSWrhgvF*cPM5vwNq@
zbJd{tx>>4{Jke;f-AUfmDc}}vNw?}l7MRt;=zo0N-%#y0{`C`0i<k9x1tQj%twsk)
zu^z7fVy+rj-P@kMzpHztmJMR2uF&a!W7Y*)x-);~s!d8FU7EWaP*=CA5cDIg_a}$K
zfx=1gC$EL0j^aU)n%$e(>p_uH``vejrd+2-j7<lKtlYf%U&0^aKw)E`Ov&rX?eQZ|
zK{}t=I}z+fp@yS|lj=orfh|{7z3n?=sjvnn(G{rB8ysJ{P}IkzCSIB~H^7C$Nkx_V
zwIjFl$3>Wvsog`aZa7*98hDW|_4J<KAaDdYUiH5l_iqTpl>Y{dr}}SDe}ezp{qIn;
zfA^em!CLSV&AdZyA2h3nQPEOx5RIZ;ZuKu%FcZvVSuo4Zg68rgy@6R=mCJ-x(k$5n
zlHGyi8eYLMP~ei|l5>Tcrk5Bd!_8OR_*0kNWfwWcC^Se2$Np0%=Nfj!-FJ#yrq>QC
zzCp?AV^lN|bV4g@ksJKS+aJK9Xp$TLuLI^)xp-J+wUSLB*(TQ{Dm>7vEvim6I{2kK
zoP5W~IeLjf*ng}TBt-q<5GifR{cF+Tukk-#y2!Zx>Ffs%0f&Rf!TS%)CBZhYlWPxJ
zqrL&j`Um8aKsRdq3Bb>!WHdO<@^3-)r>_Uu^*`uO(?1dV9pCiq`t<`3QvMgiDAj*_
zD!Bgjz{X|kn)7!F{|5|~uq+u6__L8sf35xn!4g!8mVTsv*MNjgQTtEvr|*v+%)cnT
zQli4t&eTp9>QAiy8g?!GC%Tqh+y33){(l4SbNGKl$MXx<jq`c;R`bQh4%za-s9tq#
zFC+|P4<QSw3&cwLTG56z)d(O-WB8+Ay1#V)$dYs^Z*VRI{NA+Iv{o0d;!y2hlI$n`
zVZNIy8a&k>+T6Gv{;A_-{pHr*7T5o)NIW_bZNAwn|0(`t0#1^q<#dF1|E0hc^ahfF
zuAIdobre+w54vce2q5UAUand+>Li{&c_BhL;*VJWJ9k_3?E3eD2Vwu=E*Dn>HX19H
zwd%&re{#bA-re!Wv|44YXM*4i*iWO|10og5d;#9Kfx6VCcllR*`u~Gy#@?7K{@YZb
z;0Yj-3!vc4USG%*g#S&P392DzqWDln|GuXpHtRn^wI;ZL`OjF3l-fQ#f(!8A&z^s#
z%I%C)=!OG@0R2&?M1^2PK0K&G16u<d9jL;e#E=Q?5m<wd@dW&j%n7n<7$Mqy_0Z{b
zfk+1ap9!Mk5K{&q7}?iW9zh1`FLnMwyC6R@Q2ymFvhOa4E*l_*48XqxHu<OiXU1;9
zkAErtFK^{K<o{9XhV8$6`orMA!u=m1rVMDXg5R#<j|{wjoz?s9Qt7fmLzsa5!|Q(l
z#uQL+z3+dB{ZIYhF@N(1NY=m7{Qnfhiet^TA(urV>vVofkBA1EG=Vpf-;>wl??xwE
zA)HtU4}UbPKdb+TsKX}z<^8T;!qh9Qzy~(ksJ??q^#rPh0ErrdDxk2T{M}l8Ty-2T
zvXs2R+`&KDway&YLjAvv?O$UxM5Ft|jHNC>WIBSS+`-upe{yvk_5Ys2S+1~_8fx$%
zEVgT&U{ib{YmF_OyK<Nbo<J)hYiUgzYvDknCZLMQY{_hOp^64L8ra@e7QBQb1S5bI
z=!_Qs+vH%+KAImDuKnSx|Kt0$9ORT0?dPiMmXe+mHpT637#4Tu*!a?=PQQ6Qd=u<0
z`NGX)!hg$@a9U0Lg<0}gT)23yr}JBj(ZH+eZL!kWrXCx2n8Xe1lW`5<opa!e=2iz=
z|JyYk!}}7Ud;KTgB|@}w7_SxLB;4!;(zZ<~ZL=G#i<!^%%m&Nk<(v#_!|{5<aeD*&
z%uAmAx!b4ZquE6^cZK%j<IIJl?aR#jx@rH#B?ErSw^{#1_lh2mqfS$bbMkA?*C<+j
z_qgZIw`c!`+kFVUHec87WyecDxXsQsYkod+<NEqp8#Y{D`$ReOrL4AqliCE2a~EZ}
z8ltFoQ%cnRuu^er!Az{o{h?`b+r*g6iw;Nrpl|}!e5I_+ayA7EKCDCrlTMkl3O-w~
zaKqb9hgkj1vG7@ccE0*_eutLF;GozZ8OWh_S&LYH12XaDwB>X0_NQ9mFC^w{$|OMt
z#|NS-eC12@KBqnDt;I4L;|NcjWZ803VI&4CByQI<uiH{t<xQITQQPa`9$z;Oi{7XF
z&8O>jqZ%q$pDkwm!l-@EPrvJmFRnM~=hqy3d7AU<3*O7iqpQ4;p@8=B)kZXiw6mRG
zw2$)>KBhhkE=XO|G&CwIXy!ZSO=OShF(>LiNp?+S;GfzysWOiO_c5g%8D2PCXSDO!
zt)pYTn~Rne0VQKqOcLiN*Me7dQwrZ~lXq%>^6_63Mmai0^JdECbk>?8lppg{%lwZd
zSV4ap5Mk4<{gO|u=A}{NI<zL6BqDlG86F2KsA!2P)gf7%XW!;GPiXUJ$<&J$Em<n-
z+{)QuI;grcCDh>ZA_R_-Lo5VvlU34G*0&dfo8!<X9Vdf@Sxv_pq>NG;@imfjS34q3
zZShF$@X-Do5x8(=+9Sq>#Tj=+`losQy+5uy>L0hu?VLAn8>{pd4x+TL88|YBFNw-s
z`YxwWnALnpzm9I5v&v`ncq^tlI3_3{t2x~>r#YnWRHlKhANToDj;{KxS>n~&yFZi0
z6ThC;kHhkptH;Vx4$-UeePm?wRi>9@)3fppcpV>g*>qY^XP#!aU{AD1JtIa6zOe=u
zlV*C8(rO+&o5l3G%ctVg<|A{jE}zwsmXl-f;J~IveLTAjN}1L|Q=HRrnWDZhzc{(L
zxj)voIktUxTiUP^jE;43%ZH`!rWw6igtZeLMo&d4M~gxZhu@%IN)(iv6>voeZ}DlA
zIT!Tm<vF4;T~c}AXt>McFJwR6`%$-^KD`>&-uj{O9Mz*)ji<~%CxW?Kzbzd*I?iSs
zS>j*wm)aM0O<8b7HQe)zoxWzMvZ$^NZStOjTrW?4Yfly<Jq7YVjE6IYt|hmvpNl+@
zB~5GFJrs6z-E?&qe5coCyi!Sp+7*wotI|&Xj;UzhT$fnPIz$;z5_W#n(%yCxTSkXS
zqco0wJ7pSg-11I7ZA)&igSyZ0b}W?-B5u&zT=e-&`&~Zn*L4anrLN3Ddw#5^Bm<6R
zuQ}%Wbent;52uV-+@|hf+4sv!bl3i6l{u%O3+rxJAYwhcAf}ul;r*ygtmI|QN=Koy
z7mSUvKYD#WrnZX%!C8G9HZ9`JiwxzI>jNs$bdd-4Qeb@5@s|sl40flS)%27gbw{~U
z1FJ^e`+NQU5uTKn!GXP(K>?Pw^)`kY<R@V#hVpp?T{BV33fV?Mt5)%=f$O_knofvM
zMf?ZXM`I-hzF<9|jX-&oyPl%T{X_rF@QZ=h>7n6=;|oD1)3ZDe6X-$6+s%ieQ&WnR
zN$z^Oi5(X&RlG@6GS?{{DQWhUHyeCV@fT$zxA^(coB8<D1*YbORMAt{`1I-7*Z8X1
z=A`u7?gv+9h*wqF@#v*eN@;*i(!yevn;jER)Y-j=L-SGc!BtcFF74IQM%C4lC3p9R
zmv^hXcJ#&O4Fz6tJdqdvnS}%XWp8j7$8dv7`59z`eYMm%wB>Gr+9XYi#5t$2+UL_}
zO&8As^n5NCW;fQ9g@$bUGXv%kIQVO7b@9l>j;=Ec2XCt7RY>O(ICy;h)@%9g{JhET
z$~{R%&(YqmOPNoiPx`C{l?4CkuhV(M8*(DE08w!8>@TJl1>_HM5SQ^mrA%E#(v_pg
z`8S=E<IAA@_D9OHUb)+F*4>Kvu832$$L)Ei;bXJ<JmL&kw9V|}O`WrB4(lz;rmhi1
zYS!hwC1eBSTd#WL4oGD0g-m7f4<5`8+0=&sr{C5e(Y!$v+=*w7&qj82m&@PA*3ra|
zLDjwJHiKFreO|7()z&>hZgkqNUL%^{$TiYwrUvS41K>Un*4*4vYkyD6@#nTbI4cyo
z@zO}I;ou<5Y#f4sg|L#wzvG?@Hm$J5zfi;C4}pWF!2rl5ey$!UWJv81)n&SpGIEA%
z<AE>}ub}V&#~7{d`DB-!A^#x5kKd#{7bI$%U0hUJbb2J<0%_5kZe~WS#_gOthMd1s
z`+&)ziXrDyaIQn$HT2@a!KpE)0Ta*Y{5=lHwy~oXr+tZ!<I?W<Qr|dbqE^2OKW7{X
zWSY#po+^>e-=aLA2I+~2w+9F+ti6j&9*r*Bjkl<CrcxnWoonqw&K=l|BZ?jd!CCg8
zqRRnf5ORUAEu`?Je&UkI;%jff;%d58*0@=dF5;T!`qapC3=z*!6T)KS9ICt(AC~Oo
zeH`XJ^pk@n)n^hGql{+Tx8ZQ+d>!rCLlz4!MlvO$$3yDNb1tk+XPKIG_iEc_W&AuT
z+$LwQs&WsC;_ET5aBtM(SrHevC||*;*RCLH5f?ASv0^GB3SPje>gvUoYI+ejc;A3S
z<@k4Wbnq1YNn)xHu2wLfqf<B9t9>=lBPpuX;W!yDvWtgnu$u5Yt<7>CfUG$zN1Ko<
zYqL=!>D(DsIPCyl)7CgN#2c(*N^$_Rm`;?}iK}oH$#YKkn6kcMI$)+vJXFIPxI7(l
z?-f+2hGR>b$@s&Wa!9qSyf#0G3OLBMa4fL@B6nn+!H)9^I5c4($qY4FGqbuwK`{52
z+pgG9&`=}FA~fvTt9`CSwRvFxG}pnItUB>UG%p0|LyQJ?ew)Ecqwv8}JQvV&#*kAO
z_!MfqH>%`A10LSfVzVDXI`=y4?`CuGotn)B?OF!iUSR#}t49q$H#YTf0wFXzV@wh&
zfJh!dhpx@+Vk}>Cqb$Nb*R5p0`vMJJGSCVFogI|<+Tom`iUn<TX_$mmmU<G20N=Hi
z8FE!MMLxiz+z&rOwfRV!{IvR(mbOknW+<M(Zhi$I3Ud5`^T)F+-4*mE#2E)D(DHcX
z=+j_d-^{$2-P8{jd6lCT*C4TRrs1p6XKIYIW&{E@1M+9<z4uNojm>MbO0mv;oQAr5
zL@-YYBzGUekc8K`14)O)evb*?5Cb`~<pL4DbuLlwKsgtGaA)}FC{MYa9Ot3^TzCoQ
z`>1Gom#<)R_}mL9Y#{=&9FMVLe81XPaNOI@=U#9T(-45GsBrJcUSMsO>nUIHH!QoK
zQr<`SWiRG;?lC-i^u+mJoLwm&{rBK@&eLRV?qG;yi6iHjbnU<d{g)DG5^0tz^=Y7V
zb4q4*qfD6vR-maQ6a?=DD2b+muiz0N(!oybbi~+6Rxq{Ip|4WDL%rnHFV9GRAC)6E
za%zc}kiBC910TU&>TH>ugV^>ktP`_EJ3M{>C>qBf>~O+)lOxYF5BW6{2vIl|KiWG`
zb{=;|UAm4N9FduM=O<wvmL@s3+wVQAf!CU<8O(4o(8bbHnZlR1D?z46t~UWrZdgDS
zQ{`WsLuF}67f5F}F)xFea}QwNeDd!K07fN1wJ!nQ8rNLMd*eThVg1yU^>S`4-y*>R
z7%L8V>rH@BX(YR1CY*jiTw9L7bqlG%@x65Kn&1NC_1OqAyl4|lJ-98ho5<qyej3sn
zfe1!C4^i}9Z+I}_9b*CHh(WxHX1I}CZL*%wTdtQ_EmiKr1Ot0V6}%E1Cm0C^)uu<&
zc@U%l^5jv~EuHh?OkMdav}8zW$qb#;zCT=ZhB(NsxI{Z#!I!4?(0&!S+V5z{^L#(7
zLO-P6%=xPv-K7+doZ10sUv-~gn|E~QW^qDks+@tJSAO>3N_K8HENoUavF3oFO+8yx
z_iCZ9!g&?Ho3E{kd*dcgUo%`ji4_K2V~b898=`!cruym&+T;w5Hl{XshXG$|{2~!<
z17if9AE%1DKxKk?BY$TM{`I<9zbhcc;3F^g4Pbl@f9afHIlcW@iP+s*HYTUm0}LS~
zRfdudy-l$q6#lphJ|pNlFHa)Fw<$(Fr`nBLzq89fA)Z+>GK;mUvwtC>v098EU)h6D
zea}D)GvSZ$lHftkM(8H+at#<lOyuG<>Ssfnl`GJ5WtJ2Mv~v+cWe5nCj&`5v8iHmc
zHQ@zf<q5uF+ks^SeNU1G5#{u@AQWA8kFmy&dnr(%VmIgCN;#A&=PAg@H*|n%PaWcF
zMRBmnfVxS|n0QWUa@_buE9@`Pjxr<X%j4Uco@(Jyr`|{t(%b`W)=-twkL3#d5&n%y
z)eGfOsxkju)^+1?)J4RojG$XnY$au1tAt`Vn6p$}10dP4T?w1DkT@yM4BxJ`|07M}
z$9kVvN=v4Z)7o+HQ)+=1jajzE8hX1~G!C`zW12CjAVX?xC~JE`a(ug9KO~jH%cTRj
zT8tfebX$VZ<^aW$Jn<<!k=@e+(olv!5YT}@2hHfA{<+2{LYOb|F)1dhu9&ne5N-;T
zr2%s$($?z_L0+aHm5JsA127E4cQBZxbFU5_30^L)gM_<5fsX-`pAcv>$?6-Z&n;!F
znDC2KS@#oi76uR*%6Th4YZ19QiJFL6_{&#7s#ZXb<7cX!gu@Sg6j+Mkj(F8ED+z8H
z!}-#!XQ$d$6A3*By)2JPg>ov&$oh?i%h1m%!pZZ4L=etOfde4`IKmmkSZ_I*d^^C5
zcO#AcHHguA2mCAE8VdWGpM`t*f^HZ%2Pk~VtK-&3mB|N6NDk7qcbdL#5ARK=tqP;J
zQ$|v9K~-=LaVBnCSyEo@p?$?`l%q99kuAW;K^<|sQ9bM$L!K4<jX(kfSSDBEY_r$f
zFDMdtKiT&CP5pMd{ijGJx;>f6mdjBbf=!OQ;A5j&)Ks2*IpBKkS5=s4ok6jrU(6Yo
zh^xA=pL@lu;Nm}_51Xt2%kd?=-dr$c(}Qw0Do76-gK{d0lj9V(JLRe)P`*Muf86*B
zb<)Jmw}rNvO%!EVM9Cd7!Vj!~mCay_Ol#70!t_EXv33+rJSOS7`=K{WJ|Lt386MEI
z%BUnGs9l+h>6M%>#az!^5$tHASFS+gNfifmZP6Tp`PJ{?JlJnZPU5;sPM4#t5<MLo
zv*LxB1R=A4)s*s1x@|zKEuE{Onn$WpGE9NN)9>dnmA6{RnKsGRBu~6=F^-7$QzQzd
zEqcLp+a!Ry((t^l>!~~f5n@%`H-@;a>vSjrMGy~~4GBv3JfxIb?M<NbCR1V{<$|bF
z<VsXtn<)$0jw+76b7d@PluZFC@BI#FtV8NIPK8jgnv=c%uy=FGOAZ)^^z%s4B}+(E
zT!!BYIzB+~GWIJ~%oOhsGaX|sePt-UHG(=FFPKXfZ=^*AR-;b$_Hz^0(cD5*K~UYZ
zZ%bb0;;-!9D{30+NFf%{F_O?3EUC`vxH`O)d+@2MZU!YX2SsY-%e#lPCe+Q|FFeOg
zzmowsHujaQn0F0MVo7Cw9AcVPXmc!b^j{Vq;@*cDZ~*+>D__hVRW4W0Jk_m=MuvRS
zT3?C}yuSlp#JH3remU72elfOlNyI)QNof<1q_mg%Yj1VQ+`H=WMX~bdQCI#*ecR9J
z1)vr*uw{Zxt7qV0p?K9xXaAY9S>{~b=sgw>l=56(fekE)yv!Lhf{?hLfip}iKqyCy
z*5m^B#Bxrknfk8FExFtW-T`1m{9veBi>Wy`-U6j;l7jFGPSy79A7d{t_fw8Y25m;T
z5y4IiL(o(Oc&O8<j{A}^`bZWr$7mcR;Zfu<#p0qHpT(zSoq|;xLelY#-voeZ71Yv5
z$s~gYEN{H@Iqp5ugyH2uFTQL~f=2T3ZQ{}vx!o7i>q=QU?{{WNjbVjt^JtI4^yPYH
z`oIq3mrrC!Sx@@Ir~n3;F|{(xw0Bj<fUX<$C@=8ZK+c|sy()BhbR3HEE05l-axPs%
zUqsG?o8C}m#GnoQ{_}5qy!wwk*2QE$ouv}PNyk%>@6F}a7S|*ST5?rkWAzoQ!j!63
zjx$1;_AOQo2d#<(9*{9?fL`h~NPAAt`Amp;5hLF?+B2s`H>=#!`sY>sxhoCwa51d}
zWC5AG<h6&)B<F-Rv>9o6`jy01(kefs_tFBUpP0VB)h=0P;}j0&L8<u9aak)}<m<O6
zd>8w`wth%{;fz<#zO_6q-6q2ZH@Z(1?oM^j*q$$Ld&xGmclZ(bz$Ji}Gr^;o0J7y+
z9hl^)+4Hblc+}!scS9LHTz3??iJXweu89|{0Y-qzgIG#U2OlfwGFPht@tR`LA0PG$
z_VH_+FdvpKU}@Of_ELlGEXKyI9HSTEnnt@LT>&j4-r?zB;v4L<ah^zA8+(2gGRj=6
zh!-sjx+e|}6;tIhDNtMUnHy48jw<g4K3DB_1BUw>ZmNz-h}Zeb4Z`fPIi-5|Yb&lU
z{rREIL~DUN1gj_GSv+31WuzuaDpv&h$X(f0(Ry1Rf=GFE58M&t!JQuDn#u(dsf!BG
ztgt2knHQvCUitpGWh+YTJo>YuZF5M7uB!}FZ@hy#vRr*3_-#wUx{Pxmk7qz&N+n#G
z84EqfPv#gM9{#=ftFJvc^i5ga(+`svy|=n;Q(+95W;)4vJx9k!&`(&8fHKrC$7OB5
zEJN$5W%9BHi>PW&gMoozn278|SNX-=ST>&*aKs%aM+WhAQ!Dk?>Zjn$4zLsyP9m1$
zNb8WPU%CouYNTfJ1yTb2?bAX>FEBao^s0EeTo#!O_c1A~4EOfYf_SC^X%*dGi@=6+
z8A3bpzzBZ}u}1|V5T$)LlM9efE-38U!)Q(8>5LTzS9ai@su=_X8yk)JL||>^VC3=B
zGZT^K4y`Gf+w8pFVnfFMkU@3E@eSiH3wZo9bYzLKS|wNhoa?TVNg^sa#C*;5OtvD2
zvtXl=dc3-t*^74dNGV0Zu3E8!Oi=o^p}i6$c_KK&+MC&Mc*SbnYY-HB28*)eqP`Z?
zR{a|k5NN)^5J905nu35pa25==(JOJFjmcuG=S1?jyrNu;Un(rAwo>|8#Mq=Pz#|sg
z0{Eg!mqid}vcL0?fjk-Yn?{Rlahf%nl|{2d@dFj7C~Ge!Y*Il7Ul5F+rk9YLmC&nl
z2|yY9;5GyBK`1?fJm%MgOMGYC9zV2KF)Gc^#aMpG3-$$-QK@HQH6kSju#}W{MOBb^
zIsI7-f;Iv_ZiCL{0$p5AM?Xm3+3R%cvw~VTxG~N`?&>tq2p*B(gNlX+8~eh?i^_=D
z3w*?&6wKlL;<6i3XBG=SFXAoVBJoPgjDw0p6<}U^)>RYR3^y<C)?lU-Xw&6`S+{PT
zeFXEcx>3S4aN1*Wwd68&Je#^huRX3_klNc=JL?P0=(j#2@p@>@og1R|37m&F|HsBX
z-<AN4BU2o;{2;pUp=Jwl-m5u#2B+DwvNNcXqRP1Syotv?hMtt;kr_E=&12%>pMt8y
z^QIB4YGOT6MsA53;INY2a*VTfSGu{sQtakWg_27jqbO`*AK&<ZiKn@*CJ@m*b@<a#
zwBOn!u+V0FHL5iX%QiaT;sGjidwLko9d@fWB?QI~-FDAmG6FaouI*$^P~H2!Ee`Ev
zRVG}U02BdpHKn!dL1JFxH>6G`T*7n#f1Q4>GO0pHI`yhUa3Ml0A}gnXSi~)EGc%${
zAA;B^---e9wyBn=rzN*<%9w1Y#yNLE)~;8YW?GW#kDy-f84-sod&p%+MoTB~X7Wl|
z(f^QY6xvHd=>wB)Cx*d#YO67pa9Gc!?nv@$B?RxL)nMxqiAVX-96>U%290ck&J5`h
z$(QjQ!2)w;|4mQcyZI>rRMa>bXI_0E$)OA3|DHa%k~u1{7K^CjX18@GiAcO@wmlsD
z`JlRvk6(_mci*lA?pT(2S3wJBnrJ@vk~n)ecALog>^e13hhkF&xAGZ9lpjsId#v25
z{<eOI{3{w}ibADO15{rVe!E#izbpxzVVie5#Sk50jY6*<k+UFP2c3$`_=YskhYAWK
zfyi>OYA4s9^(Ra4w;ZefHD<dJXoU7IC+h{q7Z9~53~xvzZp{q>PYAl@=n5{h4#5T@
zXCG@Y067>LYJbuK{*taFm3Mzhv~3XV&o_JmvI~T6zL2&jz9ysU-F+}y1pvZTR6!Vo
zJ?aFLm0tpxfq}sO7(jspU6F$AHDuyIGju-{RK~3HsRJp0qVDmZ=t(<Hlo$cQBf_3w
z=mOl@Qi104@*(#gAi(9s1pxv@S|iS=&i&B0IJ1Dj!Kjr~gK*-TSE<f<kcQ!<c*93@
z5)eXq6Gj0bfqPP|BhY`Q`|0T;v;vSqfDKQ~8D<_Lb+-pmrcWWg!VC><3h?KLjjyQ-
zOn$g;aU4AWvFGH&ObEnTD20fqs(qO4p>IufK*Ae`F3=hd)hZ{N)=!y!7XSkA97#V#
zfBhs}19aa}Tz|ookm}R}v|pexn7DB*1uK%Fq1C@I5b=Ik3XuwFcPqt3_#o^53MJBE
z2vZTt2==E(^!;s<fKqD|eCGrU)6-4AqyyMLOuvAalQIkxD*!-P05_NXTTUwJddEWZ
z2j0lXEUvGtpA#Pq-;KP%Gh8+h&J-f_Hr-EaS5U>MQ&=>kK!W%Td@X`LQA?wsSih41
zBHTD8VCiTSS_bN1gQ6ow?vA(w%yCg6+O`4~BCY4hR1#DtE&*p;JO;?JxSz5Gn4sn`
zgc*DEQQnrtLn$)=)-fyE17!RlEMT5?)?y&R{zS3jt%a#XvnIosNc1gyKl9zoa<Jn>
za2D?Xjz3Iaf-yqVc0$4IMr^+#W8n4P@QyKTg@1?uojUqDkOry&X=!0o>3R;csf7iB
ztFpt`twqOBt6cM4@v($dud-d2SP?lU&Qv*6>+=`KW*fIud$2u`5@dN$gTVLZrW~rH
z_X}1ZAMaHlAP~-xW(75MBdE*}kk!|+WGKt*mkkr*@0)eJ8(ROg_XHthtja{EJAYa(
zf<hl>htKbyWjk{ojO@b0m6xGM{2+sZqxxy@QOh1t*X@+0Ya%l3<61)evZP;!<X9Bn
z$hVrfQO@rt%9+zhAC1AwZZb7l+F7>ViI6ZE6+wz%oV}yQ(7oPih4v&!RrThD+M6-P
zKi`Ki;~rKn+XEoz)0tMWEvRgp6&eyE;O#q~vZsx#(?nxy;XuIZwJWbE<%E6`!*1b|
zQeE*j%apZ`#_Af<GwjMibor>dag1mb@kP1EC0F?iiG^BxFp&TbSGx4bZ<T=XbSe5~
z0sSXW`Go{h3?DFbMnE&{EIS5#J^=CYjx8G&`>}rdHLlRGfjd0*$}`I9!{{A{&j~}V
z#zy4(jof3ORhRLR3Ss-D?RgCkcI1Wnf!A5%v5{Aw0Sh#6H!BYtMilAPbx3E$F4z7`
zU#~z_Xq>^5kdyx_;lu+1$kG##)BOE_Cmc8Zq6dahf7Q+A!*|^lG2j5FrYTSt`p5Zp
z#CH8)|Mlwfg?a;C1TS(x^68{Iv8(MA=bc4}9=&$a{hLPZ9)aQsc<~uF;N1_`0*k}?
z`#wk!M9-4*)7pTjQ|3_Sj~!RO6z=a0vf6~^>4c6qDIYaicnpdGJHUxPtd2Ah6mIQu
zkVDgGrB#%k&FOD973;DU=Vf42I59&Gue~1(qbwRFa>hO?fe5x+OP~FM3);DTiu1%P
zemPAB-|w!Qb$Z*(41gemfLhlz1}Ey*%psfo56{lKOrQd;eer&1;~pKpGtI*aNxjQ&
zuaGIitBEZIS{Ie3UG(kbJZ@UR2_^Rj89F0d;dw~Ou7TFYD2gq0P!B1_(X&5oU^oTU
znIHp$=7E9)tRz6pPZD$cieL}vL8jSFbDOxux$t?{h3Xm*+!?zzki4qRjQRby>!3GG
ztTRd#mZg}QzbR+!-9hMFV||2>x@}L(@V#G)GA$|<Qa8Zzn)|r>K3aN@QBt!TP?NZ>
z2ODHP(PFyg)vGH3;%C9X^G<GE^R)skv#|r)HshX#+%Sg)Di_-~Jw=>OY*w&JXG`mp
zWzsUVS<i`GadatS-CW7opZF<J-)mdd67F#(=t8aO$=xCMQY`JYtxdPpyY^p3BcA$G
z54F7|j~Spn(W{9z-&tLJ`c|4^iNpJRgbxgv_#nm#I>3kqC~d+xl@ppWTjuLXfc<j<
zSwQIkOx4g{z29Au)NAG9;<MhnlCx?da-KMx&Mrvv6m$kAuhLSVoF`zn)07<X&?{x+
ze6T|GgFw?|d1$QUC^S<ZvEbSlwAF0FD#llu<kRh)an^=DeD~ypFuv+J#}YIli5*zq
ziB8L*4`W#gZr(aUf2a={2KMYSIP8hL6ra1aThm^$V@l}*$#%kQFH|=uPm_*YNId+a
zr!lV}k8Fm!=jvFKgnE-C;4Fwb;(fk#iPakT9ZRNWSWKLX@%s*pR10TV2G0Nm*EcNY
z2d4QQtni3}pAoJ>e6!~~l{s_4z$e`og~u6MHsN>~mQ%imxcZD$$k2jS(Zm73)*kVg
zyY?<hS?Dd=Fry_npCZl$F4wA26SBEa!#GHks~g_6rhbLE-O;1}n8sEp>X^Mc?d*XK
z0wwS&ObJxZ&1}l@W(yuv*Z%s36GPv8HZeuVRE~s-rKrSHZNioiCKC4D)adXSKcPwk
z$p*8f9;{Ey#6Ua9RG!E0>VT2`W&V<vQU41>5s7H!$O4@>I&!<h=3i`KgM3J|r$JS;
z(3VIYaWFlDn<M52quGSg6{vx@?>fa&7u1RcC*A1~naqgU`X$4);k`!w5mghpF6+r>
z2a5hE?7ll&oyS8PhzZpgwb4wzX#A#uAUH$Yueai%to%&I_4E2J=xoULO1dT&fsUF~
zQ7d|=H}V#&r8z1Ogf1Wu9M4Inz2q>;?}C;PGsvroJJ*&x*)!NazJrns*w1JMC;j!>
z?qN0Kl5}|2Mk&)7#6vDHNfOocunVEZm4uo~qHL&yRGp}+DRa8F$4LZf`Kq&I%JL`<
z)DYM@*;vufR9Ua?E)M<St&c|wF7KnKDtCp_&73%qFsMs?%fo}GMt8SF+``@3uj^1!
z1lRHLNH^oBc+u;2TJcybM+26x1_-WM8BqByKgAkPV*4vL)h{iw8hTINsXIeA&TV0s
z(5=i?;ZZ?`{GM#Fg!!4mo)WSlM_mY+gdZ#TDb&&l?p5dLte}iep-kXx$}E|Z*F+pB
zESb=I7wTpsGld65?pHdqt_E*JS50O9+%GwCQKLT^RN)8~9Ow2*KtW&O8ls$MZT!)b
zSzobG&~6Ds_&A)M48SK>idDCbi+Vt9QMD^yxht=sSm{p;IoUz@^2>OOYNry$f5)`$
zF1mxg!vvzA(%Okmqgn+6$Jlv>1zo%;ER4<}H@F*U3YZLmdk3?_mQ7B|Argb00BH#H
zUOYLU-$`jB=k-9P2WU#u6xf&d&7Wo5!OhD3xEH;@#Re6Gu`gBLmtFn0;7<R{9%d&Q
z<~*G$!&>U2%2w;SSKm9^b61W>k7a=Ok@l|RPt~I`fYQe|qn9XBQVi|=1#ko&dg~nJ
zG*0Wh)_q=KmhRu<Rh)H(lyOIZ?xGgL4H23!j<CY~C@3B3-vg+5@qsdRNM-B&(lO~}
zNZ*jVK?Ot9DYcu<E{9RyMqI$Mc-#|%lj0x^DIgr)Fau0t%GG2|9e(<P`q4eKh(zlM
zl|hk3HGy{vYnFstCs2L4%xeX!2nUH{8}Do^Y;n+q#=3edm5UrCRb8_08@VlL?d_**
z7%g}1a(4dDqU^QP<gMSufd1f`ddPus+H!B2E_~OgR`8WI3cTrTd7;JHW$C|RDjGGv
z;!EZH0Vxe64%Ml^0|J>#WgIgM7z=7~cU+?bkO@eOS=GGpO$adw)vW5;;#h}vzG_f7
z<bi))>-X>B;tubj4e>%fp#O~P$a@Pu;NSO)h{L;MT?#OsgR3_svMmqWjY?9rorQ*i
z7ZYSk%kIl0DayzUY)~!6kY5mAw)jb7fn;R?LDuXndSw-?j>MnpYCD?e#{B_<c9fRM
zT!FcpQ4KObI!Z2VzkuQ-#qSO3^c!6l|8hhR5_PwwJ%U&8gB<sXqJWfr0_ir@4RjMI
zt%54YYoA~1Z2=D#BE-EHn;{Qx*+RUikJa2=YO`l;AK%Z{*@d%|Qf8GQhc+<73}Jz7
zcj-{9tw4DQra&q$7=a&t^oqs{6Wo+oWKuT}CZjPK`7sL^owoEDLezW;x#YtLpM@3$
z%vu6&&CZawihsPniB6ifFd$w~Tme|X;I*x&jxiMllJyJ?L~hmz)>?n35~RIep3}ne
zI959?abwJkmd&3M_iHxY#c;~(M_P~DPF`gJ0|rG95ZQphjJyoDy1}IDf%#&(@{+15
zmYa`JUTb;FS%F~kZROz6QR>RF$xqfPA^nUnxfkUeh0K+Xfwhi_Ev|-q78cq>vq5|H
zd*}rcL_PQ$)G`3wNOczs8)#Sb&XcIc@^*p#Kes8?OwW9>fqUeHYyvg}Z$_A1sjO&{
zUx)o<X+@YYAASdi0UT*U(Xb}AizDQpbL!u1fY1sMorQ<9D|td0lFw{bZ7cR;`Il@W
zLiAs4;Rg8$I<SY@ULLp=yWtDb{7iXNH!|#rr`fg6&Ql^Iiv&5!+lA=Rh1a})1iBK(
z{Q9~wKay9s+OslEnea{=thH3w<Rr9K-+V_V#tq`k?%q`*el@%=Y*-zv1J=sxuFm8E
zs;m)avx<d#ECgZ`hXvLF7^!S3auhGAG4-zWi(AT_<1<1<X(WIxOGS#?#4+uS{Q>9M
zAY0ewx`sk4EKzxeTPTfN2p*0CJo8)0gjj+ig(8XaEDXUBdC0KKbDNPV4@fLM7<IhF
z-j0J_SNz(LH+1pp(ceA)UAl5FEa`lDa?Ak<*i8M?*a_0+TuVZ@FTJv8%7wu(i?*-+
zXNd@@LI{ae{ymjVK=b>1ds}RnshUT62{T7@|0?bpotB)ni9jwXhT?fp%3NvX7IM9f
zBfPs|7slILicGxP9miK73CnNM<Jw=p{I3lHMI|Kim{CpCT3nN;mC+w(tcEZPjN#z$
zN^88L@p!#Ecs)%4TsxE!XsoI_coA)?tKmD)u8INcL@QQZ7U~Ewj|!ym$(D*gyCz}|
zgt}oazd&Gu);Mqve#1&Ugk!|Y@Fr91>3(O3s1DTWu|oTM;rd5q6Vp3jUdIB2Ujn6e
z%t4yI8~+A=>}uGO)$hhpN@s*}6-gO8nyEVavc(OTrv;CyzP;F${P55?yku_PNjK<y
z>oTv!qR~%xB)5*49^q&4?t|+RfC?}MvoU&NY{Ig&7^mcX5@KaNbKoXKFIhO9<NO^(
z+nlqHW+)XvPQ=j#5&wW{90)bXBGhpi^9>5Vv5>M#L5^qEj>_ak@EZPLtWe)7tgBxS
zUFp`OZ950PNr5(_#S}=Q?2cUi=VRVEfyy#H58z}S`uFa@+w3Cj*-1ClG)d(xOQlHV
zZWb2n>^c#*#)96&#GDd-OBkHfda*IUjV+5sQ`|3vIo*&=Fv29<rcy;zIll;F^Dx&M
z-zlR5E#}88#3|L1TN{j{?6AXvwnPfL+VI3170j6^GD1a$0Og!cNOAl3uS=OQ#jIWO
z-YyD*E>s>=G=>!W5`AJq)?C2Mqy<RzsU01n66%vT39fhjqy)998mmc}qasi@<m*v0
z`y}@0VUvL`a~?_`EX51ItP%@!x)i6PwM&mL#qWSw>V1xKuB;pCEL3N?W6cd~XRh*a
z{;(*1G8C$?o;%3OPqq=yTglh7VGnYWZY?66z0`ccogxf7I{vaYcX+IG;izFBc3~FN
zhWiFsj@Hy6J_hFj3>vmMIx<_ni$Odqs60B|tZV?noho6)d&j#K6`)+v6ZKIY-IY}O
zAj`PdI4PImeNnJ83l`l3dQ7!%f^@0hB=h3t%;cg8tAq@Zq~ms6v-5o|Bk)-jek`oT
z>h3ab2>m$VS8KMk%h=z`{apHneC_%68dIaHY%`4KCw1E_hof9WFyv564vsbEK@QOq
z#c%y0zVNZ!sPHcuXA%NON>G<h5j|JG5KkhI67*5v<w5$xPM&9TX%Gtz_yr0Mg!1Bm
zfRV;SAOtyV(x#**p<n7xsSJXdlUF*?Hn}Q=SVbN55#919)E7^nEUs;p)tHv3<J2O}
zr82z_ifT@Xn%+b4P^xWgJ46DyM1Hc3(G)?7ocxL&r;FAp99JSAMBdAE9FT#USW6U|
zL*_{Z#W%nN6eYrkk^m3jWt<MT{7E841;lupu81Uy)Rb@+&r*jCH%Vok=%Z`o<eLVg
zOEt8MtI0}5Uy!n#WVcziTlNc4a3XbCcx}4xp?eH>c0{H{L9R8ET~4FWi?%yL*b~y`
zB(d=e`=!}u8{laYkZBm3N$K&NStQ6Jr<?^Vp~j_UdJ-puV?h}b+#qWp0&~!$AGvgd
z8qRO#C#H2vvo(6ep1VR}C`d!~^6&c_3Fxm$d6KAsf*=t!P4v|pLrK_gQZ|Q7nbu(s
zVAuijqg|@Bn;BWV#-O;lK3g#k!JpXIgV}o@V|~Y^n~b_%npT=)E;{JhdT9Cn>@xX6
z_v0YyNWyYF^AnNndW0cO`P}Ui{Sid&?IUZTi);+~Bn8FrqG^aUa!fE5>s-5JaT8oH
z?C4qgIW<3H>^;Y-+6EAWp+8K*-&zuJMHe%wL|!O^Zd4j;mPP$~Uh`>muW8a$_|buL
za!{S3uF+oLOmR$FD9vCe+&t|;0=S)EQ)oyFWwq-R5NG62V$u61I<<R)=;qP;#zKi*
zCmlr`z?7$yypS@%*eT#cux%PMRtrJLdRH3hM#b17Dwm<dJ*>O<wSK4kxZ##XG%c<w
zP_&QrZAfw4%0rnw!LB0gj$gUfY}Sh`WnG}D)5aSwX#TBctE)j?K$Nfo?2L1N*Y`BO
z!G?=__ljNTY!sqt(QFYSj$gRY@Zo_gD*?t$#*f)@7yu8TpX7-c{|vI<i6VVe+Tb0S
z4~bEbvV(M+L}lxQ^mxERGtq}VGEvbQ8`9q9oDQ~ex75%<&mgy&)g8<R-s#ZrI7x;q
zfTQ{r4@0ByQY>zm|K_2dTe`DwdQxn}ePX5#`RD%gC#nVlDGX}v%n)B@P#|Fr$s$CF
z{1RX2wHi)Gl(4?xaT+}xiL`Skx{f3}pn1FyGH!D+66T$oJNa#Hk2Ec@1XYq9N~n;9
zq|CD#MEe8_(`p~MMj4lc_o&<pOg)<($DlDi1R(yFSh$HDhyrrKd1D=dbYT)9Dl$r`
z&Y>f@OH~w77id8FE#&9Lh2lB7O+dMvYJqDpT0&t8TRz$rqCM-#qe6uGVNnb_gKb9C
zDyH#(g)mF-kF*#G<v})L8C!kklrUhOwymDV_c{{eAq1&8<HO2GnLx=mDv|vG3-gRX
zwJcTXoKYDoZdjz9b@7w*Q2IeX2Kqs!Zj4US<yE4HCVAN*?NC8qn&daWl4UqBG1<nP
z?`JmGoliozE05`Y-R*Zw1FsT=ciQ>Y?m_&E?12R6qf;du&1_PWW4m8(a&9~BFM+&1
z!LW!MFg!e>iWypa(>^z{zYbj{RKKR#VnUW`e~nn}wNL{t_@k^|CR>f1EQRsf9Qb;d
zc#vbqbPXoMZT2X#`*UucBAr?V^MIQ1{6Md?wyJYyPD4E&Hm&RlESo?(`~AIJWnsxw
zGNEX?YF6sgig@jTm~O?)!UG!tH9tY9^2>wSNMj_OPZz=oafbSVG8f2=00D@0re7*a
z_0M<th(n-wtL%&@EN#klWh1XO#n6!ve#(^_Rc)m9mQ8)3yjG0ajS;>evBn{JfSqOI
z5jZNaG(Y9K!D3}Ad_9L#$e;Fi5|qp*u)nVnGNStm5vjM5F2oh~kQoM5zFjCPj&sTo
zfkOSeA=FTaA5a%44PHY-3r%svOfF+XRiOiukYf0Q{N>+fGzf|*<UXx~RKE$1EGr{g
z3TD`_+}SXAunuQTJJMtUG+F_V=Mcg?2}X*IYHC2`r{rs-a`RH7HqJq3q(sw<)mOY}
z5&@xWm)ukp!8U$wxp(!A_G@2OK*gD1I?=sXB|$=ZbeqZDrD;?Wj!TL<C*0+w=*+^f
z+ZC~u5B>UPbk<X7?LtS6TMUk{3lf?3{S{NYUrMJV*xtSp=;>dThV80i;kzo&Ep1)$
zhE_#K$i4|>ivIW;_<jMDySpGXXj&cx>D*`|7q&?`DUt%0k;J#X`5sQ@5bn(&VN_W2
zA|w9LwU+UBJ_73*kc@Sm=1D7Ri_16ZnDMQ!|L1o8#XYBO=QUNGE!uPkE<>R(si6UP
z-aXr!>P4=BtbcHu`b+pQO!eGFFc*qMySV?)KFC-NS<qM&d47m|x84ZaOX)144t~iW
zy?yb8E3iHKJw9sFfFx@PMu)NN2bxGBi<(Gr;_6I4$qBS`8W5Qo^Isu#XFv_)QD5-q
zr9-(uW%j8f3z}5XZO~vk++re)4N|LgnSie@Mq=@l{Hvy6+IZp}JM%PO=WeG0IL6?A
zr6hx;6edIfUVYTHzk_O5FO%Z9=hFBw^q&n7+3{!NO@!LV%^4QE*PZ7+BfmnmRUtSV
zhNrT?i6Rxqj~pdvICkLZqPt^{E+MQ!r7eha<==*VU6NKkrA0(S3)d9Gs5HVxg5;E%
z$>6kRKEV`Xh}P5q__}O42juK*y08-7lL<Zj>T$ha2UNKlTtZ}$n|BtuA5+F4G!_Zn
zyIl-dQ+ES{Z#j#V7O37V^2ar48J9StLy#s!F1@-Qar}^74MPDQBP%1DO<m~Xw-a!V
z%a{X=cKf_>vAXW(=nBKS{S6ZE(8MMvW^Fjv_<J-7DX@55$W4HvY$$az<vQ$uwD7@6
z$w2b5wy<bL=(c3n4586}lS=R`CXkfgo{QdAC|FnGHb~|O(`vng^&!z}zf(zD{fth~
z#&<(R9|jX|3(&KPeL%}k`MJHFHy5L>WPCnnyO0$j>TWV$+f~wKPtm;PX$5_vcfZXw
zGKW<n*f}!U;Uq7@PMCaG*!Ds_I;8$bj*hF)$wH7@_mG4(=Y~=(=(CZjTY^{qIhF%(
z$#;-H{0@?-9D$ZFU;QPS-3e+8=%Eo#|E%b%KrM1ny@%QqN1?wK)w2sD?$pc)u`6BN
z97Znc&kj_N@O8#l!UvyaAgRrfFOFsT0UOKT5K_*0SmpPaU2EvZoVHBesSJF}@9o4$
zD5TY?f>seOf?Z|U(<r3gKJUswW@?dT6a?S(X>YT5*V`AvEe&|%cg~;A92~sxPaS?y
zb9Yls@dY=v@(>G^B%{AhNkFsh(CXwF-__P*zBu^B)Xn)rFIa4}!jhbP9oF#-Z-)qo
zU<Jj#xYO;hk(C!Q*5l2!(vy~$#X^7uDNWYI&8^b)aub-q-05N2%ozARu@7r%<4kAo
z7S;8`X*cqaoAM4jQl|a-Y*PFu+*N;Pjor%1pL%WgG&YlS6HSgM5jEiZ+PS#={@C}7
z4ypKp&{)Jjn-Y^y@JH{-@58%E&kW6;HMz&0{ILO)psu=fL8J`S9c2uyt~oTTUQi%q
zhESM7b)=-6iZ;h&P%cVLOqs`}L8V=2^kjjgBVo3BT^|{c7Am@@^a@G`m_7PvB@0R<
zeBBJC%^HbIgmFcXKS9y<rW^U-BnKs&H~niN$v7D!$0!1M<M7_u1%nxNl~{UQvxPex
z|48xA8Lh5LPXbNHe0;`AtMm|k4L4u-QG6em9z^g~A<o!*U9&{2(<yDRol7c0j*558
zW3qF;Y0-SqCKGybrKFvNk+iaA#YcE^WP-X`%BCvuz>1x(0+$%MmBh`nd|cUyxixr%
zK>?#0X5n2D@tBq;*J$;LlCK)q_enxI&V_II6rkeAkU%=hVN98{ynG^wSZM;ewvbCT
z^mFjohKsoxfR)4Nj}IgkcHdB1SVucWmN%{Xu&Tc5K67Ri-U~Y9_I8;nX)6F<*}M6G
zA0$q!B2uF>uS_Vsj)o|r*dk{u*@ShG2T&gd^WsY5r(rVc9vm`;9M&0WHa`6ueM{*-
zm^vpT=JcoC+)%pdcU^;E9D4Ba!+%&sxswn7o|nHi3?)#4Iz$(d48&EmGdwW3M+O63
zaH9XxFgQ<H{RMgl#U13~**|0`uWT#7_a@MHh>&c6k<T>RUISGmx(_`hD;7gU<CNm(
z3U667aN!&#pC~2=mrEaspZ+3(__QQRKGQ%KZ^P~W)CpF(Mmw@K<ZfX3Ik)xJqe|iX
zs?=yQxmyM-bCWgh7d(XCu@))1yg|`eUsUsmaA{x|)}L}7VUmFDUYZcgxjj6Swq+G*
zrcX@M5lNcr11ZVh1>u_-bgeqnW#G<g7QWZJmD$l&V;HpD6caHfaMwp6`hx_MyUpg%
z4igh^PLQEh(2jhxjx5I3q-E1lU2)7J5ks=q_ErP&ySDFOc2_?E6clW0CpUM{iD7gh
zOr9vp1{TS{x$c8<K?FRj46K`}#}I0c5t^@ltd5+H;o9I56b+jdB{l9oX_%O!V2B7k
zAvE$Q-0wSYo!BlqYWd#FE2v(M4P?*^*Wa0s6bZh^dv8E3p;k=fky-7v)h0S;9NHhu
z_1kQx1z||F{|h-l#=qu`#!3e5pNd8JF?Q=*K-tIz&`rw1JE4>$fJxkIG^QGn24+(Y
z$R*6A2mvO3gbS6pifdRg*RZN`4cIn$QmAy?s=JJ$1j#ivqq+k=S64}DoeLwkr>-i5
zyctHkP$ZCtqE#8RQC%CF;Ium2#0CtfUTE$fn#9_dL`3{eBc_i~S7&Z<73FIE&N7fY
z_qUkxf@{!SAm}b6=uU&>$$~&P4yGn13(LvWx3_5u+XQPnRWLmT%u%U=2xozjS^&XK
zDd?^a{RnKI4+H=#267-lYOr)B{;qxqXR~+N4@psG`Bn8>9$#do)f6jeODo&?sx(Cz
zBJ9Jo^s5?cIBzF0i{Fk)Z`N!;eiHA!&+-|i*T5f~Ami;4R+}<w&@X;@T%N}{CDfo_
zlq+L~rs>c$<;s|s!M&3YtHEG4hkqYFd5r&lH|XP^`2+a((SRNv&Efm~!2^7_KlqLw
zLVlnx52)CK+4Ld&8`Hyg^C<eT3L|=$Jr3um_vip0m1IuvCO&)ddFgadK73eSA1;>X
z;WRFjXoHVGkwf6-_tUP|U3H}h{>2yfTHiZg$|h}#5G>sL@b=zb85fjON0gbByheCJ
z&1HqhBP9twD!E$hR=jhK^hQ0E90qfEK=pecE=6xhNu>wf51*e5x@4eLX1^?#asDg>
zlFh}aZDsa4yOb~1>v<_FDw|Mg*4P<t?9t<1k2HafA>h@hQZ_Qx-bXP?i4Xe2YJL4k
z5W!|$=U*?cV6I8ZDoCWzBBx*hvuVw<Lc6t!;f?g)GhHN5>K(ukFuA#uQxNxS#FHM3
zim@>uOJFV+sencLRoHVCn1py#>jlqdn;?SZ`t9aEU+=FhBgs@OBiUp~+0>|{+j0u2
z>wTksl4`ldyyPVg98(+s;@%N{v8Z1u$-IFi5?VsRTC1(0eyj8J_(V%2CK8jx1eEAb
zVaz>MHc$&8%(X*YSEU@=ql8cciMe=iw*sI9AsL)`1^h6r&Ag?SdMMggQ58!iTU^$t
ziiPr6SOB_qURu_D?!*DI%PEwFRbpG`LE|sN=)A>vgQ5ztjU}md*%E@^ih#S89glpc
zOjm%vq(RvNOB@tS^P)h;?N#MW=_Qgrs^kiTb4i{?Rx`<<rA-DcnGBj_e3GSjh0nS?
z%zh?}V3Xh%TsSghLpMXukYNGps2~nlM(Y&YN<Zs5#g%IbnQE>H=|oY3gG($1sqCqY
z;WOd#cUZ%6&y)=M_T!!mj{smJCg@R#=P;KkKxng<Q7VjoIdZ9Mx|NBL1BNKFP5NJp
z{2No|X4VO0?>LXJYf6xxUJ*`c65uNC^qS)sv2Q8HMM9ra4tV9q8;_hik-KEiX@?8;
zlo)@rF+{3XueZuOAom?^R^^Tl<eV#`BZyJLwW@?Cd2o_)Nwi>Cq0gM=X@PYN$Ccm#
zqY&?J*>z<06rQ4n-0CUPJuL%<zznHbpkK$~XaP;-K)eR{4}Dxp^Sn&c<cQx!Ig6+w
z?u*J!U7T2^LsH}6w<+($Teiqn@SN(IPF=Se+dVUc1eZFdyNFr9VI#C;XH(g=y3XcL
z`WBujykAxYA5!3<(15yCl!Y(4-2iR<HU=b!X_XBqV_4r}hy5!{Q#c;>mL@q;w&9@x
zsEhOtE#de6M8fYs6EZ}vj}_?(U(=8|3lE88=z~hGZTPO<!fd&b6lt|yb|gtsYLcY1
zHmNPx5_fqG!xtvdV%Z&2$YrAk9hZb6U%84RCVNgPhC=#xl-U-IySq$DHO(-?8KT1;
zJD{M~k?e?phCOkSs^(iun<43GhSRsnm+k5u34EfgUZb0`pzmyj-R_69YuqB?>^NQA
z5PFX7eT>Uzd7g(22~#YsK#lav4AL(>7*0~mMS*x3#dayl>oN*%U;uW0%91+3(3TQP
zPL2ms7y_SAkY))GbXC#}qsl5xl#qR?gzRX8eSDezoM*s=l~<g7C_>=8E`td9Hx>s;
z3a4<dL!fX9P2q%=dRR--N(@UQ68+r!@Qw4~oArm;x9+{ODj|Yl;=jRrTF~$CAk2+=
z4zS`XH7Kfy(t}Ki!~N_8785N30pc{60D4}9XYuo}3=dnvqe~_FS0<b54`o`3hTZwi
zl*1*8Voqw?5~9a}Fo@7bf{`Tpvj+3zu+dyF6uWz?tzCNP@hEQF<w>l4fER3BxTqNy
z>hFpDJu!DaH*ZK_-^=(c%i#bwhK~_-zK9FQ-ZQ6r35+-<W`$cecK803C8^Wx8t4+g
zH|=eWWTMLeFu`HTY*$HvYAJdlhd5N~IK?H|gXb9GaX&-f?|wE4RVv;hC|FjAa&?SL
z;z&Iu+V#7gKnN5>Y-rdz68()L%nTrQj#`K+)gz#3YSp7)DHl2nf`}tfssMOl560Ka
z+*<~m`cr{lt~ZSbrzv{RNJO@(rDPzd?>`r%ikWg@708C;nY!r`yy-IcRtKW=P_|v8
zUeKJE4AqlUNt>eYM^d&~(c^un!e0q{O?TrMhKPd1<hz{MIg0{Sl}#sj?E+W$sp07{
zQF^r#^Yy9g=Z1+<ixT`#hrxh_G5A!|1BI1w%;j^GP|Va~5E;Kt=#@`YCwu<`fOK6!
zf2Mne=U58~N~g9_hg;F}8D9*IpQ-Z|x<B(3X#tJm1GR&nDOkHwf7wI*JGwKIzEktO
zuBQW@=1~5xVAhp)ujJAjY!!~nzvP;Oea-{;Cuy=XYq{BUax!_fMZo~BH&f*nx|okl
z66ui?7Xv!PNDhl2JXxN4Q{WkwbgY%)ed^+?V4-}brtorMXyzA2J{i$r(}~Xz!Pd={
ziQL_}i1V{}2WekG#wB4KqHK4%J>Xqw02%z_OudD^8jtvDJgQ!eay3>YOmx*i^OF^l
z()b53%<9xglzLw7K?B+4k#L<-l8z$yd+fniK^K3ORqz9}&V@FtQx$wq?Mj+BC`)`4
zBxa=>G+l3^rL6r$cP#6LHuseJ*&xt_V!9<r2C@@6;*1!)K`aEn(b$<Me@WWD;7492
zEg}`~|5knfg5nLsm$>w7d1cLB@$gTZ58oK;muytGN0<B4fsjRa7o{0F&UT9)9hw&=
zi~N#V99XYm+34lKvtCo^F$~9Hy#+*fltE!5`7y2O#a5llodTY-k#arYxoI)}^|638
zV*OOMN4G=YQkFZbMeCQ<H>6DZ;|68Y*GyenkAMD|_Mn<7R)HY{%vQd)%ud8#Z53vu
zu1sen8*7ezXy)p<b($VKo+H{er1iM-=*|U{xXcPDa*`y0a-iNxM52$R7jlHA9Ilf-
zhSL(w(SXsDT7a)_zg3&$_9=TEX5^7=W9p1a;)f&p5eAW;1W|9OrGmn>r9C2~HrEl-
z60wf3>HT5+9htEu)o-aspMc%Okc9~e3zYeU4#<uvvSJAs#sg0+H=^lmk1yYlYe^?h
z1f~}gBzcA=k%8OL9g2J0=)AxST@SQ4?Uit~%c0WaN?J`G8CH`EyzZ&F89V!7r1^!n
z)Vt&@C1z1>^+7Om0f(1K%Ce4Ca1_kUI-OuCHy^IwBfDks!F9(g)r#^2hqjuB;kpNA
zLsPS%^?DTqN4vX5aU`)-3CxwI#_JsQSL?O<);IgW1W`_i$=#hWSh>&#p;}b;>hPA4
z2Q8q;TzU<9f^S*%Lo`mO-$(FUiNY^X%Qf?rM1`>*Dzh^TcS+cDnH7Ghqds|OUx&P+
z^Hus07D(Id!?VO;m?YzMcm+4{pT%R$yXhVbb1;Fj$AihhS8JwAzDO~QU}Zd7ZKDDh
zH%KpaG{qN`0?zVUjAgnN-6%FvH7}<z)D6qyieY)#lkteG!zby`jLpci79Y&g5Yh0I
zZ*rcI+jbJeNmVc4Np-wkDX#6nQH~5`q2cd?si&Bg%W`1C19dm#ySq7>H4F2tmx%o%
zT{DCY3{ejyzP|%{UVklAmK-!#ED-yMaw15xCOkU}*O)5_VaUiWlWJLxZ2PH{YQo9}
zYe^*XvYAWwiL$tuvJsC^;?r5`58b^pAd4_8&?-QL2bgt6<*v%nl(!T!rs~iuh{eW+
zP<6^AM+QuTpgN`oy+N-lB!^3R#&JY*;9OQ{T0X<gc!hB+oH<{vb5vu_g*JP=K4N4s
z7m+Z?qKs%#x|T4CAi)7Wjccb3hPl$~EQ5T>LuS@>$7&*|WbXho7aeRV4)}3w!=?Ed
zBOcP!p5ZHJOF;t%Ra%%#>7a58uJ4F3O<{eo^Ql<$h1duWKX_AV1^{y~*0!mLT3bzn
zH@4(@Q;|DJ@lG=&43grU8?WFL0h$2RM;a<cVkNtzP_19XFfm~-9Swis>9giXo;+Co
z($rVC`1*0k2JA{~b>)~?ry@0S#{x0IKJ_&SGM($~ZA?zR$asa%hzZJU6`jWg>+eG^
z>}iuxNiP*{uJ6hmt`m95pd^QN&+6_}xotvMM`$72SCtqpA^}c_3O%&l<f{}&8@!r}
z(SmH>jqVop?iQ*$)J|_WVoPPSgrA;{ejyp?$x3)dV*0fe@*bSM*a-f;l_V8e2h8m<
zNIwkESl^UPZc1L+l<ZVX&v8>Sj^lBFm>h_lyq9R4ONPdKVr;N5aUauqV_F;mFPq8|
z$f7)KBc5H^pj!B|x@VPIhIu;9&2cKQwxNp@Yqph-(o_wt&8>Ztn*Ea8?GyjgA^EE_
zkHw@bF{Q(XkZzTz_q7o`XdJ-<a|91asg_VA)3%5ml$M6i&;iiHomeA1;|q|C6w{;p
zi&~0;_a!<`d7LW}w&Wu|N3bJ6c8KSYo=52(?#=h%vT$mV!$i-oO9zNzZz-0HLgMq$
zrToXKIw(|d00jr|KO^yTlN`xw*Xi6&(tC$I3nE(q5lY|5|D+yf+xD5OY*^s}Z^Kr7
z4I8E;EuGTbAz8QNx+98lCZo=(4Be9Dr3)ahyd8|Rp!$7DK|4kKw~zP~dIJIe_O6@n
zg#-ePAUZ)o^g-t*G&(}z;-}av#1FXgBgL+D3jPUY#Y@apBwo6%HE3-4Ak!m`1VP}b
zq?np5S%zt&7kO3oAZ8*YV_$tz6>h+NBdJWbjMKMBa*mYIfst?(D4SI56VFs=P;;?H
zFSDG^92Ipb+6t9Ja%5ai<oJ3+ogzcoSA^~;<I;RA`L|cV(GkCaD)@*f!59z@7pcn#
zS5q>1bkRo##02c&l8Oe!hK8=1DOVLUf?ZOU$6-%S5q0eN1rrWJ!GIPaukBoONC)Zn
zb8BR7X7wGO3Y(Lw(hLz`>c%e03Gi^f?QCQOZ$22hT9J;L0~pJ&YE5t25uuu<qzv^3
z104;g%0`V!C8I@O6U>)+TbCv2OPwKk?Ic1ZNXC~k4ACv)7YHiaG32{vf_|k{JHu2H
z7}!y=Y@YmV-01QZ;k~O{D+dg|qX<q;E20tW1sx_Nk%fUoQ5vBL@Da~OK%ztS>Ro2M
zAaSv5vdq*^78uJXC25g86>)h~eW&NW-TEKbl{lv+m^P-)R4*>}AElOJ%8?qww8!XH
zWJ!Wnx0lRqT|;wbwgAZZQt7e2NGLeG)%seQ+}hL*R6{Y0{8GkgP^(^h!N%fnMDQ#~
zWrgmH8fzo_#i8vRK!Z;AhR#BMkdjDtVyA5N#@Cm`2RBzV1($V2>l^m&y;v3H&NSYE
z0mri)L=o_3dbRUExUm1T16))>$0$r^JO86v{GYB48<0WkFsS{910(6EBA}!wUBaY;
z67~vgkVLf#FQ&dl7=HAdfvlA5V#{|vwUr|qTj$k`vLlWKF^Ga*u))uU+6x7;eKd;b
z*tr8+&Y`fkb1DEJ&?~wbZ-E5dPDP>IWyNoK^s491#1>`a;g4mO*3y!PR<hjEKFBGi
zr<Dz1h6mpFDqDjZ3VLhgi{$CG#||>qfX}qNDcnjEEr(P~lW$mBxR)f@i)Ctx6jb6(
zWoG`A%V#cd1<6nBM{72CW!JXUwHBN3B41Sv8r1jIfD+mzXq%Nu)@EgrX)BXaG!AWn
z1)7$KSE%5V&_%e6qay3CUZ~|6(W$HRq9k@+6gKQ2@>TGEZ{yMkpj_4iC>M4BWi23<
zx7-Q_zZy^N!LKBVbtJ+^i|=GE!d%!9={A+_>B#ku+)gmn6Io#>+U=<rEXmoCchu9}
zsGuXLmcpyX7=e*EW??VT!lbsAv{G+w(Db*+4Q{C~9yJnK3%V!;dM!RCONoeq0boRw
zsjR&p+x1Ke8*UZ#=vZY{>AR6_Tp-cAH6&Hlx*6oW{&MjTl8x3W)-rJ;?<zkJc-?Ru
z0x6)2;*i(f8s=6)gp6S;eU0_j*@r;|A*p;nsWd>GNXJo|E-)wlq+sKj%sFDTfy`W`
z8Fw77*O^8b7T~zTB)3wh*YhyO#zx}rn`dPSQ@2gZun17MvMP<|yjp>MMn@D_sj_|J
z+?9(Gmv7W-3_YdrzGGZgS$-Mj4SGT(BxLIMzKq5tb=N4F5xrEv#2`}ACbuL37bATS
z8jx69DYcOL=8@#M;)6s0LqLMUlflpt-?)r7?+yCm^#ln~S!$Mo>pM}g3Rpo}*%-ym
z@k(l?xs1Jal`_4dYhyaJ9x$m)rY+^(sR14YHkeDl4=H0Z`)nax;`$cVf!QR~nzmV{
ze#ArT-UUlk5BrTnaYbqiv+q$2-LYJ#`Z~7YxS85EnO<vZb!=KWcCDiJ3ZaR*;8^G+
zdGd;SH!dNK1U~l3W#FTDgGZMnm)7Z3w~n^@xV&o|)AM*+Ak)9_R^56X-bI8~zYvXd
zt!hs7e63|AU#sLqSY<>iE0tF)v-65&mXWZy2(TA9)&nDq(dSZ+g6zR6swSs$0dK|J
z(lY!O^Q-2gl_5k$`|P9r@0nulez9mG^OmU`pO&jdWa+L9!M)YxVGxVJU8*=lv2G5S
zXU!A`u_e>Oz@Jt+%h(ifQLB6~Wh`^lbBJBFRt4`*+sWr{?ufSpe-3i`=l$bIyKgG>
zHRnd2HJwl@c19t3E=r~o*fy<)%ap&Gu&4=1C7Ni{h+&`%Lnk>Za)l*ZV@Bp$AV-Q)
zqe#qQ&nYSN35vZA0(Da{(I@m=LdBi+hDLP9Tm^T>5RSuBw7elZ0DkmPf9~nr5jl!e
zxK(Tq=mQ)GhJOh%k%{?hETpUa4Qnryc#<FAWtA7GBhf<PBt7I>Qg+Ig-TE9T?Toy?
zl%hqxC{0<kwil;Ir7TkIbGU>+DxZZ+v*q^qU*dphND_@p@e{9>^kT49wBaQ#h<rV0
zTU*2q_A-@i%XDWvugNFXFC~<6tdXDCB~BH-<pR~u76KL|6h`^_6mtQ`E-!-!@p{_V
zhVsYOwVQVKU1<&&LEV1yE~~$LL)g@<uKH8EDXS4nfZ9G9Bkq+7Ohl7Iy_>-6IYqL<
zU^Rr+M}mi}frYrg^m{-7;~;@m1yb~FWvrN?;%#-}C0Zi9txp~O8c|#Ew$!l><Q|~C
z-PbKl%gt(Bg?P^e8Yhe@_`|RSvw?g(Ad65eVzc{dh>VdNz&AVXSEpwKaAv@)QP9#;
zC{Dy^_CV^b$}FgUs~p+J-UP>4KOwM@>F(}3jKY_ROhL*XOAL;+ns)cHH^f!kv|^w1
z)N6w_zBLTGx)uhPoCmc5SxS7CwFnRvrJz#@2lj_K>GG|Tt{5moM_#>Jng_3M8uL5R
zPEE6xWS5+CE`M1k!a%GFLn&xBs=MZnT6GOBQ6Uf1<usJUO-sepHICONDTx`zG$A4)
z1!8Foiw{JyU9H#C9J*~w(ZZs4>erZQs42b}vHea|^fjvz3@xRhb*h->Bt0G5JLQg2
z7<lD$rEt2eQ%diGAhu8<ypn5wU|<!sA81RY)xfHb5so-V??Q|vsBJFTg5#E`y>h*)
zdDmw{vqZeD&FyQ{=j&3M<!~nGSXt7f{3~+})1<7Idl3+FMUeHCWzCY9iC)o9iFMcf
zP^v(C5i9|naxs$edsA)wvOtp=GWHOrNJ8B>QKBKOf0RCbK`IN!+H5J6W=p%fKcTO7
z#g-=~Tb{J~I;DfZUds@0F~7!mV4`iQ|8)K7K?DG1G_IP1K2-y(yWj?@#k|Eqs6r?#
zyd~*=6l=BQ!=(<U+NPgMr7FEmLi6TWlL&|%a$bc=FeLv$;d8cTH-A^-PfE(Tq`_~T
zQ4i!B3;zIXF~XI@3~j2Fw`JWS&u9Y}n{t!^xH4<P3=Od#sgY;BHj+Lje?qDrgWgwy
zPCFPkx{m;fv89zP$vD8ou47^nj0=EnY04{D_xY^W=U4Kea<VE$KL*=zzY92SaQ-Zt
zVNj6Vod6RTl>O{KfsTS%`0&_+@&$*&Q$x&@4C6%^bXO^R2hVhLxwlsr(`+&6{{H)i
z)!_c)sO$3^yiT01c;|Y*-&DIOuh8kc?Dpuu&KDWfAI49<rAN5tX22i0u4vuqs`9S)
z536kzY~yT^O~b`IKvxs}({CzynLz886aItl|IhE9J1Ac*Vl-tEDchWMy~cz%tVGs$
zFxR5Yd;k4^?#Y<4WR@0-SP=KT55>3l44_T~?o@eoPtf`w>N_7Ud+vwny}kHz962$C
z#9Ic%?rs+l{yYya;sVwh`8<)lO+@HY=@f)D0aWaDM_rAA7wot%;xLyd3l3+yD+au9
z-2~OV=5X5+7`7&5GvXxe-s3Qr@PBv7XbQM5)t(Adn0QA1_Zq^ceESzIQCHrb$0Fw|
zMv2~8ihv0_PPez{b={rfJX<YhWUm7slZyngE7#b=)NM|V{tQzOgV%^`gcL~(h7t*P
z2R+H(_rAU7VayNp=H#&d&r>@xl#1in@AhIlDlkmA*Y$V0y(#V1#*yA0>-Ey5>x+_3
zb^sX_>vcGZ{a8dMl);3&oh~%7bKUJl;tjpnbhWH9;;qM-MF87qBA@}hT{aPyZ?M1(
z79!M$==nq1H3Rp+&in)b+sb79qda+0p03x*#D!l3ac}5JJVOg60^QwzWO(pot0uzG
zvJ5-<y`+TJbT0yk#iMMJW1grYE`P#jK$;?6>Ay-sl3un)4Lf$Q?$Vu<K3pkAF0!9X
zW$y8>yPy_<Ov=6NGL7@+Swwgqs7DxRCWGu@cy*3AL@`{DG7M+gvW#bM2}hpCaao|0
z?%CV7`i(R&{h9McXB>=4k;Dy61SiQ}fxk}W5ronH%pr5@rO{{+mlSw<+Igx;t56w;
z*W8z`bldKJF3Ged6M-Fwx#U)`*t_ryLu!&q(2GTk>nJXfF7c#RNo?q_1UQ<m%Gl`=
zICK%yF#6?%hHV%{dmIDxX$;3FcC1F=gv^t?D4(4ti<!_eUt}|JPl(kakygu@YJu8%
zd{kOSpv8<kKQ>7evDHYRc*3zv3`F@9B((qG7?{`45H-kRA_sejIoN@GBDZ+g>klyu
zff6883L`-=Kw(U&q~C0<ln69nSSyuc9TA5(;yYp<r1y9yNurmH!;zcztSL~|AiG5<
zVfTR|XktG*28mS!-7egggOTv9l*1Q|ETQY7($(^GPa--8&?aE8kqtK(W$js(mY6G`
zuyn{jF$}fX2g?SkaCp`Lhi*slireAU%!c@?46dK}-KSynvEVEK-}&8l;k4@w2Y&ZO
zO1@RYeZTwD>f&`4eT0Ym`u!un`}RDU127IB`xr5(%(DeNK#PY9c)Jg6JPVfv*W8CP
zFN!E!LNE8B$sPCujr|;+#lI}!_XGa@9FQ73J;ZK+DZLM!{E*=Va3AUeD$Oom$Jpil
zC*qMRe<vQ^BxmRF@xeemb88Q<Z9xC!TR7?H1NZ=%e?_1LzoCcc@ghbSw1?2nsOvo%
z`rQE50{$GuWeC6a<*(rYihqlLVK_bf3*+$cFI4TrUtG97{0o)u!C&lKuO4>%mQrAd
z7mo&d5wTnKd*58qNB6C#2V#MTj~>cjkMDE$Pae?>hEE>T6oya4@Scd_eJ6(Zofsa@
z?0;Z$hVcCa{^Fi}_<%p4z$yNP0{_+Bc>e@Yc>s;MuwqcQ1B(Sk{}23ug8u=3pxig`
z2gdQA@CSzY-|z><w+nxG%^t#-9A0Ff7r7@!{<|2tFGk)IBOi;A|1L&;AVxkBBmaNI
z$gjo7*J9us9{7KC|7+vDY~};f@KbVz0iSkv?>z$|@FM<j&-pOxxq@s~-zm?>;Ta}o
z@_r}-=cdNKkE4&-hkMYJO!Cmw(oL-#g;A|KW;_5ibpf~9FE>x>=<TZ)J0E82cR4Vd
zX$iBN_$QD1-<_^M%&zynjr(D5@7w&7f8(ToErTC`x_DXc?)F}mz%`5?KK8yr5#2ZC
zc!>W3PJC6KJb2Rk2JSBS_1z=-B}lGsO6DM-$`Gpr`wvtd_zNfHH0ZwULKRu;(L*Zt
z-M}a(n<LrhGr_Y$;okjy7l3n13C+L!MrjOQmF_>Qq0pS)O7t{<c7Ee2z#l_S^>-tA
zh%+1_+nhq<?=UBQjObX!B_rzEqRV{r9W_dra*6M)2uhs}37IJIA2Bp#2=|{eL|KdK
zuG~W*PYO2&hU{^T#(vaNnocQV`C%!;NIk!jbT{{GmNK%Y==eCQ@xPhrQ|?;}Fh!bq
z;PIPZO>-uk_p?O;qkThB$X&l->Ffe0r@GJBaN3hAl%mW;y+?<n_1btInhR1^g_tAC
z#zJy>v^iMj@uwtP6>pR20^mmFPAPR0M$@@vj0d}f<RRv5QZ9)|@dSaBQ&1JU#$68Q
z`~20fT{&^&X7r8-63p0BqS+H*XwZ36u9UHb0nMr>dI54P4icp@fl6^hCHw*di%Hr8
zWGD7hoRr)M1z<jPRW;z2=OMI5BaWDA!6>8QbYYDH>(V6A{7A2u#me8WY<Cqxd~-lD
zh>DhqSkAmCkzK&m4|Q_9<pslcP47~V-of88Tl&cFExl=0me~b7@DF2*p)p3TKM?iN
zofgjS`(%az<)Nv8Zic@65MwzuNQhFeNblzCrq7#UKEN-J=X0Rfq+)yy*rTYFqj$2{
zS4Y+}#}LHElN92cqfrI;S-M`R!J%P~d@w)i>c(Tuc(UDW!5kN5d{ey$(wb7BC?UQ*
zO0S%ds0jm$r)D8zEM7XH(2D-R4C3Du=ialN)AZWK4VzciHm|;OI%TxCOob9y!p%av
zo+9neLVN8%DqlIomMv5Li8{bHRaI3yLX0W2LMcXRCF=7XoDcaM>1kLf%r<3RT<$1E
zMTf#nLQTS5vB+?lPObrkW0D|DgvOMu7Vg0OuB}ggXRsmvA>lvodL0<^^%70RM_M#b
z0XJ-8_dF;$BWxmngyP32*K-1#i6%z+MUY_JFFnsr5E=#W4P|)MsA2k71Q0+KMU(<P
z5v9RQtfmk$uy)3fq~oqqv@Hy&Ku@H}WFwnQ4{TMDOcBJEUPNSo2M<W?0RFo?Poi`9
z8=-Ua0+BW?I(ruV7++1ZFrQJ{ItRtUGh&c3%s5h9rR6#1RKtvl@!l)}mJlccE}P42
zna$0tmfVPlJ-EFs+7ltB`kBEao}mh?`cBXONL}S4IO~$9Rb06nOM?RW2?5qIi=q@<
zw>PunUnqDvQ2uyBm8_6aejlzXqEy7=19p3ww_O0nRyAb$YJ(#y)7SoKvojCgqRJ|Y
zk&3`GaM+@xxGDDMl*Cfa0T1n9E5_;f%9Ql7hE>qKDfG&1TImg`9f=0NP#C21J6@&S
zsBt~cl&2k`+(md+1p95*B*03JjM4MsBTfj@Y<W!{-YVfmRvhx_+-j)J1DhDXF$j_&
z3v>;GZEBMw9ot$|9dp>ZO0+rE`Zmk&N<&p^XClL3tT$V93v6r{z!-_#Q<Snv<I`Tg
zN4n-i1eBYMqPK^?r{N*<rswKfYuE^jacvpJE&u@?S62~GRy})<j19HFtAWbM{w>og
zT)=H4GNRqEs*zaLJcw$miV;B6sy^OT-I1mWd!aBh;e;)N1=r#yraW2OL<sS{(^;<9
zouvRojJ63E!<!h`dw_hWKx+jw#uCq&yD1QNM>KIyj9@qDKS43+_P$YE-bwc^^P~ip
zf%PRwA;OJJAz^s@sz8A5(Dc?o4;W*XMY_7u$jyS|6z9SUJzKWUt1pt>&XCGiF~}o3
z26?1x?{8W}7`rumd(fjyjY!2q9oE2O;Z1J>g{c6AMKG;_!b;}g8$I4#iCx%rR>t0}
z^xn9}q^I_zry^&GHZA3yZaOMDXG|7_i=VRs&CZ(2>Z?t#yz&&dnfhrmn(66C3F{eq
zVBkr-2!MmdFi*&X4o60G6Pq1Qj2_r{Wk6vu%}t|FN1=EiGxHK7tLXyN2V5P%Eoa2L
zmXw`OfdB)z9=`z(DuSs5&5k-=F2=_+S|RQ|vrNbYiK5Mz2IQX2iRJj%TL5wrvRa<*
zGbLWwiAGT`P@#Vc3$x0NgBnk>RXQsUbNth81pTMOW06k-#VCV+L^NbfY>=WC_$V4%
zGpgk_SX5>lVS<CAw@|JTF#R#`lhXrbld#yUOpd7Gf_ReY0jfSw?Zkn&BD7cm<Z=M`
zZc)Q93Y4ys0CQ_Eg%RU2n8F06FbZR7g^YmG9OjteFa*d+&083Qui}LY2gP@?i9NBb
zKRl%Yn7D@WR0vx?8`8Wuonbpk<N5)>W4LX*hlJYqnNHE6Df5rdlN=-R{n?0sW+)})
z(SwL*9qh|+F!{%yX?+Xo(+mt){dNnrC2!TJL`j!;V2+sBSlPAf0m>ElmiK6+J_6;A
zp2sFv&tquSvvD`1KyysmGWH%Dh+W7xYV++>L<lYDRqnUZ4PS{GWnQ4tUL<r?By9|g
zi1@-PY=z6SjI{hU(otvL#R?LymP*XXW&t`h29z^z2r@!>CIIZ;k}>Q{I#Nr?YpCTG
zc@U#5ovER=AwCE6C^v{cp*4n9Sff=Pa*{=vXVC7(N$vWsP(<%h>R>1JPGSrhQ!^*X
zT-UTc9gIR9hd87xb>Zor0xiehn&d16;^b(>iJIE!QX>RCS0M)ZR^@3v&&ZPcua5g^
zURwqycbM9gj3<r8Z8YWDLj*eFFZWKe<JlN1;gD$^_Gx?6Nb{fVz8U}l05z)!^<Qat
z5i5hNE+4aQSEsM)IZbn)be(R`{y<huZm;Wh&2^o0Pr5y)OROibPa?qsJeh@{)@j#=
zUPWj6UYd0OgFcuMScQnbg^@IZ_9VsoWOf#}F|j607C$7j86tt3N>ZMnHrXlLcGv1m
z<0xye>}mvd&9iJ_@?vubgW8^=asCq-u8gjVSll3b9Z^w7j@WJXYI+$3ifIEWpfqow
z|4S9szO?9n8O&beFhSm<m&6{rQ7H1h6s)r?4l&H<&YCl~>II{Vr73BaC5$&ITvb;S
zRYLeicLt>m*qo<E${P*00cQa?+#)n<_2iTbC?#LO%}cRYBE37a`Mg~-A~3^t8sw`n
zl28jC$g!>0lGcO=yyY>ruJpG~R2X=1sqtH+7WHDe78`+66aHFD5wJ=I`?6Z<bD88+
zx|$Vz<v`O*ZMLDd>lfCU^)Qfcp+yP`@neW@fyb67rSOlQs$jE|<V61LOYiAbFr7?|
z-u+O-rXiwz0cSIW|6k$V%{9mSNW2qXflC@jBO9M`gUC11@L0#1jg<qt2otqLBmN^~
z1;;W7JcgUsLqNu!gF#J=U{F&T3~Fj^#YBwMISP)1g>#On_fUlaqn_^W9*MyYV6aoK
zgMo?**ItSMSOh1>QPfELj(&$>=fqU(R%zayAvLTrn85sfIgcY_9!GK>=9Do&puG>l
z&<_JN-|O{AHiDtrO%5msy%fm?2lqz@F4sFFnKm!Mz^E{~$Q!s5s|hp^P39$B&c^;b
z>3E^GWl>)cn1g<MQY(N*MJ-apXyjVqXgt*V1Kve5MmYt_C9z}%jV~g{+A7yYgT{m%
zNq{d@;5YCiomLN_UsoTTs$fXHo~LH*MP}_{)6vTa45|iP00L;w#sRy#2*wHq1|FB-
znHA{o1*3FeW~e?<>!BzYNyTF<TDXG^J=dqo?MzfIW_7j6DVTYrNU9X=JTb3*0vLcW
z5*&K{xuo#0aM0oV5&VnaXF=Idy}7yyGkyKdRTkg5b^XnHGKH^_(DL>71@JUne_!<V
zH>c}Qmg@yGj}X|(JMxy^0;V>g$#I&obi2jWME&xwmGKkMSRPR1GkA$sp~C(Oes8?9
z=JuqzZz6yA*YcOJFZQp=KGVNOp6e<N?!5qF%(gxIBQ@=>-a{E-%q2|1?C)>j`(2E@
z?An)U(CIku)Ajld{Qp(zdY|FVWxBh2?~E<kxNg$a^+#E>$%4)<`Wn{jGM;`+%9mMM
zzP$kE^&BbkB;7en_bO||Cam61viU>c)#9CJ*~M}NheEFc?~UudOM{<K&wcMGn<fhw
z$A`;a(^{?9e_(vT&+jnIA9>mp2m7w~HVv*X!pMIID_~gOL0M&T=dl}5;op0oq)p#}
zHd=l5@4d!9>wgS~O=XhUzf9rZ-_ZvXPNDxkofwnH>|N{iBmYf0>Agvjthj<-SM+P(
z(Qf#kQ~sfv_zXpydoPnbo@bx8Y`}Vb0{G+9<;Eh~FTd0In2O)3!H>}3N6}}J6|g8?
zn9g#zO#FL?`~!W98lZu<*MFUQMK}-h#Q!N3?^NTjX|x}vw4v|g>5oZyv)QFRbdmAX
zXOEgT*pZ1rCtdi_r$kkLw||j+>8t0B_tc<6feKszh7;ZuWiZ2__Sz0iQp4FuQJ0!T
zg+t?@KL%$|MoEB6%v=zARZVPqm(+vML{&@0Rs`EbOe}$N0Fo-E2gq!aT3j`5%B`BT
zUnJ|1f+$I{$^kf9My2h#I)Q2&X<qa?NiC@>N%2e-P`wS^gnKK!g=J(Wz3kN}O=)B+
zld262fkQMH#5GcU9VauR#iuH0BGU>E1|055+0eoM!$<4&lif_RmQuh+@SwMqgTW6x
zH08@C8T0<g>Q{^CsM|_bX2lI8TC`olf`XgWsWuwBcEqgK!PWa#VpemZyz<t{Bg<<~
z!v(5iCRM06^yE<Fux#Pp3>notRpM07*!f#1Mzq-iOZ(B1(6=Q0TF$S#V0pcUVMCu}
zM6b(o=(*9fObx!p{j6p&IVukjCd(j`Sw>2cbz*>8F?3g_0Efh^plkl*ZMw%8e!YgD
zba`M1^@)>{$Ij686C{kC1ZY-r;BkFuVgg_J1H2awPGlQ}1Xay!mv}jqWXiCe7_ovY
zI&s2DI3D;oBGmdtn$jM@sQA8MCJ<&(>|LS(CJd?w*o#gJ6Oh_uL>o2vNAAR2cY{v#
zg@W>M0w}ofU<j@c$C{)h2BeUz5V+xV<D3IBfA$skg4YnT_ja-a3JvzPy13De7ZDy_
zyoj^_MW<~KM3z{f>LrDqYYKfSDD()}eUn0uWB@`X{f5eg5SmMBec@g&fm&Z^YJF)X
zo@l!lh0jvsK?f)!Lokh%_M$~t6cn0)exY@BQ2A;WM|-eBXY(MZ*2>4&cAF}zwb6%D
z3Bm3tq5Q#_I)-G-_3V1IV|w#EjO%c-%yQe^sBO*zV_C}Z3}5Y)*)PkbbR(7*m82hB
z!;WelJh}_1FnLf{o5_7ur;Zau%I@qk70N|=X4YnanE~r-$^)z|rl}CvLJF|tOL=>s
z+jOT!1E9`{27)mx<fstk00EMW1H`~%<LcPm4KceduJNZ-4adWaU!F=r1E@^z5C7DS
zFVhJQq;7t2d!wYX(I`ondSM=-p7w)0h;a=_29=NFNg;${aX$wP3#<<6;c`;UJAmC#
zRJQa&^tWX6FlGCkY1KZ*Fb@znL~Kzi0&m4$V)&z0WJ5txTR=eVnh?VGu+IzkF4V<8
z<i5FgyV!qDP4H894B_1uce!WS1%))CZ9GU)LH(Dc=fTC2D}xDw3JUy$vaLM+#Ht`R
zUQ1eW@(nbml~aK`^{g!vA&e<xRDC!5XiI+sdeO*5;1ljf<nL4%gy}w+B1V_iQ?0#F
zdKQJ4yh;hfs?@|*VgzNz=+a<iDqb^zaHzS1nn|tK-7yxRss^UTUNsqXGZQZebD@}b
zJMOYhAoDGfP?tJNv7@DpvTjoK?ZlPA#tfx_T8HZR4Lx7n@Kz4CGGAF#vTzzhn5-yV
zx;3D2sxV<RFKWuu)^Gw;upw(zZm<$)Qr+IhNMOgDxlzMpg>N!{Hev(YME$QK(^tjD
zM46Vju{JZ2+QUyte2EswC=Gy3E@Kqgcv;mXS=ky)Qo(^{US=|2t}lAO1Ku{FaspF|
zeFahnz=_P$y{QqTfyfegN2cutMzNRT)@)_78Ts~W!_es|;N|i*zcQk*dCKhCh!BYw
zsLG&uoUDw^6Px%n9c@po&qVzK#tl{rXo+N^1HWOC)Bvquyp983adAUG)S0gP!}S^i
z4lc*J@W69NVGo)hLrl5ZIcB}>BzLi7FzpkzTQZn74_hr6>?0$}-a^w~r#)5K3i)Yb
z7qhe4<#TglTuWfJ!*mV5GkMtG|BbRu!p&bT+Z^0*r+tN~$j$f14b*dGIW@Vmoh&h8
zNRmY<W5gEjrJG!wb={H4sdl4_J_Ewj)qIW~3>EIP8|F#aKNqmuh1(4S)7X64=FgB7
zx1f9tgn2uB>E2ox*ko4o7vofW8Ui;`4@r8aainwmyV1T0Z*43!FsXla`2JC|%8uEi
z!L+wvZVm(ZC=<k7r-aWifKL=8z0k0qMyU<@E`)mmC>)olI10;yNnOivgkP)H(K>hQ
zo&*i2>~kETavUT=!JP!rM#Tmzf_zjQ3`Rx2FO5aAlcLYz<(BPTEOi&kctbV1fJPU3
zz6&|uDYVUT=cer~Pj$-!C2|t-;S{q5sP%ttOI*F&SoaZGK9nYEd6r_xEJ+vxV$4r+
zEy{E&B@Gz?3kW9AUFMahsfU*W!|yw}&g*B$)sU;u>TRVAQltO5A}=OJMHuFDPGd~Z
z(6KD6A~V*}fI=M=<Fammu^b1{s4z_S^{5N9*I#OT{pmpvk=;nu95QwmUesU0{4k_J
zqOMjHO;fhY=|Qw!F9QsWx6qJ^lo>FyIDD?X95)q15kqI88g*$yaQ;{cEfuDl4V^9_
zzjjcro%sn+|7b5ENswp~X&OuUf1=nV$R@cTqSIrei#mdz@;Rv(Rd2&I!fxwt7_Cqd
zy(flcixg1D2B7|{iYQQa8M|G&Ou8J6f^U|I_}dG*I~e<p9()niOcbPtiTDczM_7>U
z5=s$B^;8G$eQH|sDKYYk#<#yWzWu@!>Z>$3rbvuZVnDX;8XNvo!Lvx8q=Re3z|_aV
zD~utH>^=SxM6YNOkZ^%g%iMawgtDSZoz%1zPu+w5kWx~2l+z*=$s3B)<J<yD1_;eY
z$yj4vd0wI*#Ec%8xV(c)?(``uhio=NhWjKs?Z6x{!J=w>qizeeC@(9AoCA93@M$@R
zX2fCRFZ4Ul(Cu37cs>z(yB8G&UTHzM>(@M{o!k{ng_<8V=OW(*a{<VKe`}2=wZ^fS
zU!h|X58qk=WaadJs90b&0Ej0e3fDcq&D7hbw>N-qd6JPC_o+;axlsU(6@Iw`fh;Jy
zHu@MXc-ftRUMUR?kjm-=oSZ659-vD+iV{fJ9k80m<KY*Kw{4?YFK(l>Zy^;z@E5`9
zD|+lo_FB^MXM1HHrUlTVQqHCB&s<CLp94Kk;vX6^do+1lCEJ)U-r&b>qqQa|H`jrB
z*Uw(FgrYQgVd;XvhyhMMT#Ol7ri~J^M1Wn3b;3jCVIqXtiR%q2*2nmft?`ojhl=gt
z0Ba+mX84ihqp;aIE~I#ejpG3pd%$gsa->Lfrd!#ywuV$W+>|*mj7wRP*Zn38sd?U@
z?6*YjT1IQY$aYb!Q)@D|WT+%=tsjO!noi62EQ?@hv%h%uqdZNrb@ryR+_M07n+E+)
z!S+!nRUxud>BT5nS2gI5fx$rX);0@$o?A)+opt4PlE!W0l~hQvj3Wc{QM4R-NB90n
z$u4<7|4OAslb$IYHAOnD6uM@rA>Gsp|4F6EHf?1sP}X0dlVrh0i)Iql$rZ6b$?q)&
zeF2-$t%8|el?g(ajA!Fp<82cJ%#u%C_b=(sQ#Jy2d6?Qu!xX0J$gsA%GKkknQBrba
zH4wM?fZa{+YIygl{xszb7t47{9@V+cL5<uT=`xGN&e!XXftJ?m?$bA2B;Pd50Q!&?
z@j$Gord`82K9kn**`5|SA_LKRo9-p(z0t98WPv8$jrJzyo%%F|1L8`*#kTE-0RyGA
z7hSv};XIO4YE>9ZuqRDoh;}aGuvq0}!-r;#+tc|~FuP^1cCbIF8R!ssNr8g@s+b@h
zC%4xH7XRMKfA94FpHpEvnhOiW>R1xwi*h=UBaUd7G|8(mm@hg?kg*TOz{7`g5uA-x
z%ppe_39FGtl$zlh0i476XcMj$o=vpvVYUQ{4(F%$j8*k;GNP$?<KJ1{Z)%B0I`>hP
zCzonG=@)HKIwH~x>RRZZx1?y{Q6J}FwBRgUEQzONDNF2#_}y??IC&qKB()wcy5F!>
zBEJ|*-E%-C^#}LfzKq0&@$#tQULvFBsSXp5<MdGoKN+l#9stJWj(nACAd2hS1I&}y
z&GZ1<9uz@_%Ff1djY7+enAwJlKSm<Udx;@?3l9SJSx;<wTSmv?GBTxb9)wW47IQ$z
zH?=_j*Z(WV0yEeNG8VA-kvrH9{QtGy`W7S(>J<N^8u12Z$Q+*te<<f7SRF%YA$8B<
zMuFWkLd|XAr83)VJ8xH&eMxViy8gdqs&PwgfPsT2HGHg;-qNPqR(yN<`9(Tw)N+4?
zO5`haW=+-=_VF_fEaK{^G>ZP;Gq6x_j{;iw<5eI%Fhwi>Z!yRC_b9z@WuIp6Z<D3L
z|1CZE_6y!dkF?WiQ0l~uXkVfdPs;PrAs5~lWB81L_CFX{D)Vn{9f9y`g6|qzs4(HS
zov~;fI$$@z7+gfsN5?jgvW_hki2pF550*Z;fC0^zqH6)Hz8(+KiBItm6*uenZx`3(
zc0g-}mNZe_?c-FmfiQ(Xlkq5jvnef!E>Ge;l5Y=A0}kBb;VV9j9E~o(NcQFnvj}6K
zeN{q)EYt-k?qP6W6%ZkkVMxEBOdm!?vYNl&l@65dy-^z_7*)+X<QW2DFjA>PGx#kq
za1K9F#1tf6)JFF)=kX?9#Gk_S7O_Uo!$N{z8{+L42*bu66$m~+SXER%-a$9G4Sk=Q
z=iyS|*EWo!bcFq3{6NQ-#s{`LS+55uR0}#CxNH_#^ij!Od#DTQU@UPwL&y0n&L`!;
zU~)fx;`blGKlm`j2l$6<mjA|(kFMJC;$!uo*BP2pHS+h~5&#tNp&kwea!!h;`0#zW
zbjzUs5c>;Y2<+W1LNQ^oZ}iy?9FY@ul1=(F*r5+K-2M<M4SNpdk%e#j@M-AxAHgS6
z?fy6IZC;&(aRIa7YwJe+Xl+zuyzV>47BWMe4VBjOtlZ1yj%l@h2(0<vDGOK}z*n||
z#J;}&8dIyvDIDnqcfBMKtL;Ucp;w+<%Mi;WQ##zYXu@mGnui#@PuV{LbEERF^%~fW
z5JNq)pf3=5VR(=4gtXd_Ba8iMwef1c>VylzsCq3`X-zu3a*%qI%AlWzrlfeKA^$YR
zc%>BM36;0&Vw!_mb*URHT10@N?(S|y2O$0m9lLSbwg<2ON<T0XoMB$ymZXG7fX8-_
z(8-BFEp{%#tDQ6}F%2OBqYh71r^m#Qn}o9xzW)wT_`RvU=VZ4cOT~|O1M=pp#)RHJ
z;0pdnK<(Wit%ZqU)=#NF0!ta9H@K=asi{%^S2i0%4z_GIYJQB(-l0*zmahuh?=Nwl
z^@W+`pWpQ#&0W6;ml%j3I0tek52KGv$#_3DKn6#1`rF+J5+klq8&R^fP#xBa2(!@z
z2872F?yom|>jeco$zdmxY#a<G_UL{2$gyYS)AM-YE!)5jC%To}S7cJhN=HBWEj0-`
z-!6+|Qw7A})U$}o<lTXS;-S!@tk)F^$=OCC1rG(YAiisw{=m4B?{xMYi)kklM#-rI
zy2asPM1YJ8m82lgMYOBufajHds8n{66vcxqA0!teDAPbC{T_+?=YQq!;t&)JB3pS-
za?r2p*bfHwfJrR5J>EHudk3InM^JXyw}B73hL*q>!xn_X5N6#UQHbe!7FRpx;U^2F
z2yF8gU>40pXMdV9Bh7Y_MvGOEe2Qfhd*js$MJVm?%}>dq%o480A2?31_2HVfOGFjH
znrcMpB=t*l^_L$r<6}0-{L+Z4RA#oZR&B2L8|Ql8gs}S<<|GfaLEtFo%<L!mX)ikn
z;tBrJYzRKVy8AM3Gw#9PTG4fyZ417KYJ<k`d$TNRh`a}@B4h8(k^;aWyCkOK#e9yA
zCoi*Hnw1DaE9E$)=T(k(oFTAfu^fv;Wf~+@h9>D5TgS_nQ+h&js8G#?C5No~8OA2{
zsTtJf)__e>ZvaZvbIHbV`r#M@2&w@>dvFUSD8!dW_aBpGkhY0`U}2u2v?^|r(VF^M
zUJF~V*{Lmpz#1qwM(ix*a?p!QIqo{jgKA_)F~!DD8hYw0_NL>QV$ceG{woQC5mP9P
zWn2k>MP4^CYW9sJwpWVx<v7^L+1h`=Q@^Bc(=NIeq^JSR;mDp#e~EuX<XZ#0Ms*-m
zEDDcGT5M&RgERR(b<lr1)@IvoBOqH=K6GN<w+bDozA<UXZ975MDjR$<r<-pNe{IhX
z?x*THNPF)3Q2h2|s!xN%j`0l;X}@fNSqn4;)gqwKaNC%!lEsYWa?O%M&K`6y80p-^
z^2i&pZ_FT)(uj~?l7hQ93Jb73A$!K7O`)Qn&?K1cB4jUwGyta>H?z2u-{1|rDlyAE
zcD^H~zH@mVr#rJeyo5#FVOh}*YLbesNXUKNu)_Abcnxbgxy54Ju_5b-dFb699xF&W
z?)OL7Uy`okjmE!u1^sevy+Fy;s(aHnivz{+aJcV|YJ*bolVq(_s{PawRnG3ydYmMy
zC-b2fVQa3}jJWKg0WdCo_$LhpMo@YZ#%#?srvMrwOwoIN{g#y*4qYLf%B7c?8FG@g
zO!rbkEP=J<8b3*Z8cWSv;%{uFpEAAPLUmFrZ9)rVxs!Pk&j7Z=o#kS62F){smj~@v
zUzxRZ_T1>EJP%7rJMYl>At=60{~NZ{g+(WG_{yA(DW^7x->IERf!!)+(#H4%dcUTa
zV@AqF;YFSaD?u*=7<08uHbS=xX&YawLQsWu!pXolhKF%Ht8fYfjtt|s-Q9ewe0NDn
zhV7a&M30(E6)u$@$a+={WOF<b%R?=}XkSt-=9RHt7wfgzw4@uV*Jd60z^N$6_o#Le
zV^mwf(u}Bu50&BGLk3Tb>|vNj^+;5!9qeV(Rlb~5)?hO9_x&dFRi03je9Z)+aYZhn
z?F640P`ZlBw6QRXTtYMK93r7`T)X2YHkJx~eOtj(e>>iFw-L}LqH=G6sdCfnnb2NS
z&LJyQZ6I>X(d$IV`BEhQ8Q^d@4TY0akq}NrWe~=5pz2{UCYK!ZT|=zwEVFZADAUQh
zxn$aCE}05*Nv46Hp(FfBti43sn=+=U7*y0;_HPVj8J=zP_TDZdqS^xX!ZRZy!&ZOb
zZ2_R58TU4-bYl$CHW==X*V(0vc-1hhTRZW70}GX8!E5A`=8W7!`!TW~3;S_tKQ8RY
zsr|SzAFreAVhTT+XWDM3Os4y;ck~ywHE$Iqv?fr!oq(;I#$g^8K(c&wjv3uVLtwt!
z31J>K#pQd@SoMKf^#N9m>Qx^$R()uRxgNIU{3LmsB>S$U_~o+{zFfg|0@RD7r9X>D
z;iHrkZ_{vDoM&ZF)z`;bOTMflUCq+~UqGP0v$~V63}2vLH7u09t2m`sVg%N>tWj0R
zWSIIalC6W#J(d~VXM9oWyG#u1G8P=0W0v?c!&8Y$vmhze*@0QNgf$fl0!Kun-SdiI
zFy5O3X<9l(=8hEUkev)pF>y5qo8E)l0x8>x{pfHm8_LEi{6FL$6ar4r+$USadt5l}
zb^R`WuwR!<<{sY?8+2kt;l(gUJp6}fD}7-js!un_7V-LS1n*=fVVe=Y1n^mQL8e1L
zgz0P%=Y<kBiucFUBF@o1OhP`8AaRPJrh~-tUTn^U%LCt%;4nzh>4_-F*c=D3{IN9x
z;`^6*_6d#8B9sAWcEn7h6g!7muLq!jdN2#S@@;)`k&)$rt4t9h)R>S==RJLL%(Efl
z1?@5W;^+Wt00@}hTv#liUy2v1hC;T2HQl+8z<frE?rkZ3)n+%{3phQpYjmyrzJF}F
zCK{oEY>Q;z%~etULYKTDSfBxNuA3Hg#&khT5K-NRe$@R~hK2g|s9v%<B4Og}BK=o;
zi$_l7@qxAgA&78Ta5lP_z56J^qbV5CohT2B^LQp5u&kUw)gE-JAnxJC7x$VaEVDR-
znSa9m(VIvnELF=~X(>=2B$F8%qedKdhap>i8#w$n)_Al9#DCi+AiQhMCLp(5oV!fK
z$gQa+(?GQvP+I{{bqLOEOnGHLzPBIW*pHXiqrOu<*X|UyH0PV;GIJZ_ePzPdD5Go2
zX}V}lna4}<eS#<3N0b4`@5Ho|l6)2-`D+q2nQOE0@Oy)hOZx;Sm_Au+yTSuZx7Y7`
znG7fs1u3Q5L%5tKv*Z=rWVm_K8&LvECx}o$lc6}q2-8wj!n6SS5MX3dly>DY4J&|}
z1->sadFWn}!d<JSF3W&}g2xyXy!2EpKk}%ge{#ARi4ZO%8D4S=n0XhLi>}&_Et~jS
zYet0=-arQYfn||grM<NuGgot&p>oO#Yg{IUeieRsE?y3i$a(}TMc!AWA=R2hkKeki
zD8)kLszvHjRSGRZ>9tX;%$AgOR~14VQFv(-VNWoM2dhdYo_z1>(9wl^9RkB!Xofd5
z7~X4kBojVlKo4X~KbQVy$%fYYC;R-o`#O~;Zuz0Shsx|w5+(TlsiZ{8>}im<-9niB
zZwo=o<bW;crcN=+KK^w*wNi2r9=frp4`!{WqSn)Tt*2D$scWg7-eqr_6;3)9hw`f6
zh=il^U@$7>p#*$G$%xqBGvg5-q%=GZJApsPshA1}j!FZO5;3Dt0819L_lF)Dvue&$
zy!QqukcbWG5YczD_epvFhHVtuGPYxWuv%mY?dGRqBo925k(pv@89}WA6>*7uu1nOj
zFN3fjVg93uSap9Ge>Y0ThLh$=aynj&WVkAP^j7$%H$3%@H0(#-)b(as&#~}Ugs_js
z!3<hq*yt_28T|i|HzOGz?HR7!>R=&5arJ`z4W)?J2%alTU}CtDKtk|fH-@>>u}DOJ
zpX$tT-rKDwr{&yyqFl9tlq(Htp29|i)P$ns$rE3y3|V$eRU~c1Ou;#Ac5oOoAL>*}
zn|vPMZm_crIj0hVDlsQn9aZK+AZK-HK9Jc`R>V#u-zc251fT<)wbVE(QSq$NO2KNB
zObVXS?-_%!NlwfAQS4^H*9vawyG(s`H&UGyne7Bc8!Ez0S!Q`Dx@{3~Ic9tW_h3*l
zM!TW%eoN)EIJ<~p54KlV!f#P*y>^C!mKNt(v?^{G&9J4e?x9V}XYG~ki&w-8zWU#`
zdSLC;V10`uZBI35@?vbx+vZy%<d!0ag?zL+lv#sriY01;njup+*te%yn>)<wcW=lW
z2L7@m%bRzv$p;4hlH<x#Of>@a$#Lab7Cg<cj`xCoK_N{A{hrx3&&jC@`ea0U65Q)>
zJnmtHG9AxGg$?{i7C=+oCpZ81=+Pto@fiMhU;X!(Uk+OTyWRI2{(FqwQ~v`onEUtX
z=l#L9=C^dq-+}dd&MWYM{(JId|IwrU$NNv7e5e20zvF-3HU0NM{rBj>11R+5uC0F6
zf3kBmlkdKJ!awv5!W#UXHHH!U7v1}>kiz~a{Omez*Xy2~!avuW?&;`NHvXpyIQdGs
z`@hVBe`Y7IvQzJeEO?1=t->5x#>3JXxZW?-cSCpdb9VAWb{hPW!9Y%afnWU}GP((V
z&4PO;A6A2h-wpcsXZ`^GeKeqlNAo%S`<Ne|gwco9eEJX{=Ck?y^q%+4*IdP<HB=O=
zyoVR@r+5)m6*}sw0QP1pYNP7^xj%W4`OmbeZP65Yw&rOHZ3Dj2DX%kMjq?_P8mf#V
z1-b<8Ph*Kh$3=}r0KSk~AERAv2p!7c453(tzzEFX<d{6k8FbLDb3B-cs-;gAOF!l)
zUr_BpRHyg?Ku!R@gf^jit6}df{w!^M*mzdQz;4hk{wB1G<f+AT>jYJcK^=;)0aq#-
zJw;L%qdIaVM7A8v=`Y25%kZhp@V8=Y@s)a5uRAcDj9FSQ=f6!M3$e$);~CTQ_&zhu
zOfcF5(^?t8&%RHQ4B=-G<o~(vYSOzDVM)`Gj6T{KcvBJia2cqOFza<OPEMAmG#M_s
z3jUs*6sMzAhhvgLC8#-k6a*`##*Tu;dOd`%Ow<EHm<5YT=4ZX3HxG&tKpYy1ae~;f
z&eb}HZgp1}f0haG9kx3ELSKm&TBw<v2VY=iz2jinlNqAV5#VG+;+&3+PLh-3Q=#fV
zXC?|}bAF1_30a4uhMYrp$GzSuG>?F{?Df1O_lU2@FKjQe^MzVEC=l)y4f##x6dr#8
zp2GEh#0~ml3PPR%Ky;iLY{&%G#K(>MBKBU?qe+EmRD!=obNaK9S#e>Z&|h^ifuYY&
zVWEBcfpZWn%e>dy98Cx`3UBV=%ICo1gsxwV=k?LfX`n?gXYr+6T;#_u6ex@i4@v<o
zpAcI95YW;AAU`}vPA<^4t<1Q@83M^6@~&qLCZ7;Y{va?pV=%c2K2^Zveeg+u$(!KN
z0+Wl~-8Tpwst<VghXoy%@U`E+VEFi?;Nx>}$t(IXxDfF18Ka(>@bPiIPEI~@%bnn}
z1d7j?Pr3#cpQ)dZ3_}PQSMC+B=A{6NOVphmRu>uHdWYV72@sccfOu~L#H9cTG5kvb
z5Qkzuqc`G*0t#3kjNAGNf#MAeU4X?KF$)10Z~Fbs6$8c_7!Cu*6#~Ya`k3E{0Uri$
z3<LZhTM$ku5KgChpP=~1i0BHJi82@B+e8O%OeWb$!aL!kZ)P$!G<OLvx}RdU=*j-W
zM}CgN0u&Vh0xCw!aWq;=yu1pW3yLD7$cClsj)VONk0<}gPA*RU;e-7L;{X5)F0SFj
z{RcSqhxZ?;SC5}OoIKAE;@~Y5fBaY#2Qq0edEh@8ezz}QJ=q`Jry)Iha9=m_=;2`h
zK9<}cJP3jdDli;990EFCO;*9ee*!;tcOOvPWoHGa!}Va#mZ!l3EV1veyvMsMjN%Nq
z73R58RQM6hdj|7He0l`)K9ckPf(P%2j=^vrn*ZX$XH4WY3+PJ^oj&#-?9L{lWH9sj
zFAQ!ZwHJ>bV9jfdWue~a90Qu;7s8k$_q^9r*W+<;w7U!40Z(~8PU$C=nhb+rJ{kH?
zd}tm3>1cE~2228@Mf`9Y9FLBI^Zt<W4i0yB7i++jc~C&>&4Mqm3h)8&-WQj}j~5$G
zlnB5Tx!!hw!?3`(xl#-T&@&i?1`J|gP+1(aT2H-I5CXh~3J_tnO+XA4AkKo-Xf{3?
z&7cWbwnYHs=+XwenR`l~fN)WRng>z;{%DR;_<29LkKg|V7`%r^wZD)XNw4-#z4Ksy
z_sb;rAHcsu`2WPu{lVy**JyT%3ynojPvJ&`3C;zkQkY@*<huYGlcWtJ0;mze?H0^D
z`D>|u6-tW*fC{ij-ME0P0Zw^v$H6qfnDoK%WZ-Ke>5%4ii1Rwcc~RL5oX8<e1YvT2
z_d-h5=FYJzzN~|NmGb?8Dxp3;Kq>#W4L2!P6gg(2e5{0%By}|6!%jpvSJ+upBj-x6
zNKQYzvn2pY2;@;TlJWML=D`^}gez>Rdj#x5qz7$3AX=P5Ziq&CE{gyfXKJFgPqkst
zMF%@voXXm8oy-2F2+#>;frq_;p8#3qgbMqa>rSR*9hm{hE&w`nKoB$NV<sm&Iyxvu
z?hzlcqX5I#&ba?-Ny0?^KAgc7?DIl^1VBlFIp!R-7j&24Qz^^<^-b|Nr9H!IHWu{k
ziMU+`-T>VeUt|>go7T3(t8jO>qeZ=)Uo(zo7^^^rajpn<4yP?2*!@7-0{vZ`Z$vff
ziSe8vqNY9xibeZB@`TW;aiDAk(PGsIsf}ZhY?q!-?7=(;Kb3jV?HU$=xrv$xEs-(9
zc^uCAF)x3Fi3C`z&M~Da5NB*NBpjNt#88aH9C76HFrYWcA38u~rHBOvt~$hFpwtWu
zoelY8%M;UusjyowMAHLqT9<S;5gB?$!8aM@jRjUY6zZtJK?@GlCB7y$&M?hN0EGc#
zneBx|kpXEk;v<G}+D9<hC3goK;8OPved@u<9r~nP<k940x6MZo4jkseK-L$A2*dzp
zB13Cg7|w$2-7zke;dr2w0wF31l*#~~pn;A#2)SI^>}lE)o3@}_OWsnjsw1X6A{b3R
z(aQwjE%h5w&*5ok<CE2Ty;Pj?1aA8kKaIuPiSBo0OkECvoAX2^*KZhQZjaI^f`RMt
zuv_I)rq8qd-)Hbj3Jgq{YnbrhafBCFX?T%D+SA}DT#7H*g^((<RR|oPuy{uLf`rIu
z@fM@e#Iu)KZheC@`W9WLanC8dC@O;01E$ZhUcAfbF}YX*k)9OsVH%xhx$Hu{{s9iK
zd<p0$ir-3MGqO7wMb;ITEYDGkl4h3<AQBaBS$YS-gKH)bK4GW5Q{x?-@TPpgP)6A3
zqG`H*e1-gjb0X9lh;0#_6;*A{DXIWTc=wgrrj$mi)^^2)cuVXY60nPuJchD`bvklS
z(B{DKpCI$F{K{#t@M3sA94Q?Dt4Yn>Ua!l8)Y$F~+?|fq9l=Dbv=kTNl2Y|li+C!V
ztOlL!wcceO<^Z?e1@*40jSgf8o4!aVKx>|)%au^kvF<EM&&ZeAsT%g^^V4G81CRpX
z>rV1&dGUp=tH$8EnBV|CTDNQ6fJ}?Ws3wPPJYY>a8Ao7*BAvJ*-8gFbcwy~hj-HNt
zrjiJl-dq{xs1LC6NlGIYmqZfem}sQxv&fV{f){iuta)nJBU<vHfjikG5~jq<n<+V+
zKOQUJJNb})$YliP$PT_tlEzA;N?~a#n#D$4G_f(O8A3bQZ2<W)o;{BXOerqTwgR)n
z_0;ds<(v=;#GX?asLtaw8cl<#@hmxJ5y*Q=>#(x3GPw&D4P4`V{i%nD+g}l~-MET)
zw<`UTuGb>q{L}~@KD9DRStwB0pOEy{UsA|t;PJ7K!e4mkvExrSl$olrBCl7|Kt%|$
zYZZ>b2VzFYqVa!7Vb-3Ak>pQ}{N08(!v_Di5n1gi<)#MI-1X%iR}PP1!dL-hHfn3S
zuJ)ou9OfdAQ5ZB-M(cNm8DLaUM3_lnh`hq9;h)GOr|IhJ0uhm6sGxnN8oC6sjcv3N
zVInR}VlwptEgNVVJO_ik$LlrxiO!)I<ylVvMNr~EeNDiQ79ACM#C|Wmn5y^cK+=oN
zM;VtP$_?W=m6}%Yigc&aGKj4-Xb|2f>pE47ro;RO@3OtBnT(TpOV{gkoX3Vze7#0R
zhrDU!gv{$X^Xijlh9kkQ8&u9J+Hw<VVFy<>I%;#-)=t>QouZ?gqb2SU2gZLU!b?c!
zTW<WBpiV@40$u8+GGV+u%0*;W<3>QQD~u4#$&J|l0X@F$A&67XL3Qql&jk>Z@o&BE
z@^jZS8<{WS&ric5LBBtFbx!n8s^9}>#xV>ObP}K@SutUxk?U*Z4MRE_Lm<BLF7u>>
z;rN~5Mr4Q>!Kt}QBPSCm0pW`c2ZH_+FXk}5Tnp2+wzb?5NjWITS_8~`4QtiyDjStX
zECQ{(2&3~By9hbR?>6d&JULYeOzi@iv<OvJ!-p~(x6^+@Pv}KAWj%<5)le8jHLD@S
zZ)`PGR6}UUKuG5MJm1|-_y&++Zk7E|WZMr#WIwdY1t@<XE(<5Ao}OnaSa*BO1A%xZ
zslbB@p~ecK`j{L*&;FTkpK&>|fwapVCDQaS3=*K?Na(FDmQE<dK`d_%rSTbE0EZ|F
z7btl_Z=S-fFT7S(^2d?<F*EIYcXv}0rH>c-1vGQ8<RQ(2G-H=}r(w&zrI*_GLL+Kz
zV((n<%l4*?!FY?iG(1`bb1S$4EWlhlrNSzFkuInsmUHtK=`-{zj0AbzFIF>?b32H`
zms-$`bCJX9T%vRJLzTtUl)xl@F~&m~8?Cm@(q>p~-D7c{%uB@l^VUHi=cm4&RLk{;
zFb*yv-Ent!b)jXpM1RRZzk$DSq?~hC{!)WsnUjzZ-vBLl+sJ8fEIR>cKCW)+v9+nk
zav~cRO6Me-k_3-;5ghI%-Y57so6o&JjL$?SjV?s0kUyZ*A5`YT`-EBnG7{a$7>M)a
zvw>`polnh}+7<|HPsH{#71AorOaN|_Ntm9Dst(XGq5I;FZqT&Uqtft&E>AsW@NiR3
z7rr1^EFlS@L}gRMJZy;(4X3g)+hdD+W_Uxysi~U!+DUJbA?We0xXqA>M`@c^HeZOC
zcS&Wn6x<FhH8P|u>&$dUGr&4J0kl`kc4y(bp=)7x%389QoQ`l`k(LGaz{qJSwojvd
zK=t@9;QkDNQT0J-^tkQZZrDp5x*kMJs2L@~MaVq!>LsQqiPmsVv=3h&(ig7o+s1=3
zYYt9j1P_Z?Y$cLR5=0dSOfY+ERZt0Fb?H3I%02QglCJKsrD>of9k9k70D~Wm$ow~s
z3watRRWZak)kO%jh?8=n&kV*3G@s0A)4<J)8aW(}2a9x56?NL;4H<I;vy8sWC{BeO
z3#Vp|_Ck_dQm)=eco>WPep@ODsR_*BEuN9+Bdm<5ErYPwtRb8n)I^0r;SwOyKku%V
zF<KPRi+PfZ9Ai)xRU8Q01qyFOJ`j9GB?-`Rvx^g12vt&*G$JmCm!QuLRh9M9En2U)
z?Mj=dN{|E$6@+!2Zr2?(fJXy|qfE@HcYuvJ7ePs#g;&(ZRLC)LaA>kYF9H_y%+Y}X
z@oXRr!KMv-Rs}>y$aGKj0Rr|rb+}tk_T^0lln{d>ACBppOBI$}VW}%<hDiJt#bs2P
z8`lK@D@<oOAc);v#fDK(Jo6kG9U)C(Ngj=S?jxjNJ3&dlFJVzYfAQ??BBS^^hL{U=
z;i#F_(5b*9tpS0wxf>}fJaaf6jnpOX4u?Elta1_--~*L%t})dLwD>m4v&F)PO%r?;
zCT2>4zax8~aFd8ShS`kyppm9d9zV$wIAtI<FALQ64bf~-PH8gmG0T&hS7}05)^L#M
zzFa%mxU3(a)^_Tx>|_3BvIX7Uz26B!d4j^c25ztgA*;Yf3vwNlz|G|rq8u9QC(zGg
z0eo3pZN+eUlNv@-!MGQ}u9r{sC#U+#tf^I{iID4{uSsjyM0UxN)x%*q2y1e9RmCOp
zqM{w=BX=M$?=>6voGiWKbW{XK$S5q~&+v4!LYm}7L$4lvAp*F*REf+)y;ulg6}|&v
zhzGIa`D2#Ixb3zKI2(Hv-idW&a5o%gsu-!PT+fBKltrrwHcC*0&#W*Nps@`@RoWqq
z+_I&WHngRkkmHmtW9H8fQ9a!pXte1TG-)Xo29+&(37~lC_|wTJwO0%Nrnm^k+!OW4
zBNyy@DKF=eRqD7a7uhVCUrEgIODgp9MCUP_(Q#GD)QxmmoEI9)knN`W*$XYfj&$8p
zIgO|sNt&0<pN7<DvAerO(y0)RsRv8;V-+aFrbf7CPfW}mrTSb}5r!ux?Q{{^yPl{t
z9!$EhtCwLu>-ybk7=5Il9;L&WV#2R5zv?3LzL}<+w(r%5I9ufQa4AuRhs?t^&_%?}
zS}<c)7{X)2|H;gxic-5tgNn<>YNnJ#ipualHXJi!v0kGN#tI*&b-b?=G3Js>N^Sh_
zj&fVmL$S$oy=`zCY)p<v5^~fj@-C*RtErC!`Uo5P2z4I{8g=Z0i8$(fA$p~}b2<ap
z*YRyt;G(Ubxg%-qoXP?6EzROGIJvmh%t0vq6R_8%L2=lbCRM0N2^`z<mC|;Kfg+EJ
zI45m!eR!8&VHndg+rcxwBk>VMHxGB9BmF8{m1sgj@lelW6$MPYN~C*>ED9GtYY4_c
z^-=>p+$wpaUdWo%(^c}8n2-eqS4k+F7^aO+8?(0q<ftUL7N0GgF2=bc`74kq-J*Lv
zbo@7?WSEU;sLD(s&bIV!ngC@35Q-`w+;>=m)0ium`F#ui?ZE(h9|d_oG{t>I5cMUv
z6Ui`+#k`6!##wNRF)+vB9;b4{2+2sAMhE6ge%DFiRrOqT>>!-@syq;>J<}jWY7?ap
zh0g4oYTO?8GYX4T&&Z3?m-Dbe_hbct(J~dU3Jf)=N_yIm`}mjCttre$d3D`KrcJOZ
zWx-xUAQ=<1HzyDzi{NXvoU64{Rp~pHbS6A?EyK@E7DSuIbj=M$c!>R3g2RDDiXg}u
zO#zm{H02b|z)Aqm4aiBSQby`-0RYAZWHj}K#OKpsd9t82T%etugvj-JidXP>szOLi
zDM|&r;4l<o5YtA4CNgLLniL7J0<Tqy;~Vh83FjMN!v{3Z%REzasI~ih5zUP>c$m5A
zzz)736oSZPRSR1tG;R+~!23f>tb(ikTsvY2_gQq8NB^j0BQDZT28#-KF45AW=q-$s
zIz7m=!E<pCq|(@8u`L-kQ(&aUS_y5RD<g9riK;4VJBB!z{H=73T%Q$qGmA`{2eXrz
zA?yDVM3Xu1Ykx)C?61V*oE}GC4ni`#{9-Sli~wd?DHS#2rzw&zMKFbBsOMbPmxs0T
zO*pn4N$km#%iX+O0CS4q4`leN1g;<Tqqdsyq$KR_YKNN%`$qe`+jqzSPxQT~q}DfR
zHB%v#k5S}Mk;)^$t6c6`1)E(<qoc}*7%r6gE(X6*y3N$qZKhgi?}eBQsLFrJfS()$
zd8Fi2l*WmYhIONhJ|~PTgxZ->!3SM(3`Whne6K7-y5Y3Q7ORr#;08;h0r(K@%;NdZ
z*?F?_uaAqJi!|F={sBm@Ty>k6#s-m5Nl?!k2ZDR2aD^iOZ^-m&5u*zn^C$_5n^Mh(
zK|B$&y0`z>e+-xbU+`ByfjKbW>=0{fCbLhBH1(mGnm*EGyFv2&Te2t!Dx++qGL+vw
za_s#In(Ft<Qx&ukiOIv%hG9D^ZNz6w<}yUhT*HJUVvi|fh=F32DTfTcG&1>%3}s8w
zoIs^PU~6gp9+SWW=AW=rZGUL407=dcQY|CnOaVArpiUB3+-ZILed-d^dC$B;(53{q
zI6}LB2O6J)n>*KRWk6ztJV(PiicXFuWR^XdPWMQ{KGqO9Dd26FNPt{L=s|Dbo^<Qo
z`8#Qv%ybgk0BP$&3#Cm}Nx%`T-e+z#{Fsh1h*F#eJuA>xL06VXso&KSQBvtnq_9%N
zCrgzR0MhF+_V;}bA<?GA#nwB@&7!LP1+bC&WWcLGbD(EW=1{0XpkvCKw6zd!u_$qB
zq_HIG;8j{?ZOT}YuTzC2HSeB=E+iC5H6Y7V>ITt@D&b%6GEBM#aMzDjWK=xvjf4#U
zdJPvc+!Z2pDx>t2=%ri;h-^s<JC%5uQ1%EP3!h&fNa+z7`itA-x|2!qk(1V1<MN*T
zalj36efG@faAC@yA}1QcOF7IL1rIa6!K0Vb$rItlbT~7nLD1NP$sG}J%qYNbpo9o$
zwvl#AuQR=ZNX+w)cqILV2SicKXzddk1$Qrc?Iogj(W&eU-t&)*t&EeKgp8SxF)+os
zRL^`NG<m~%bS0aCu;RV!GL7@+;);e=@Mz4#)q;c!>ov!x1+qS7C;bKRY}1iYXe^ZU
zU(%M!+6Sn7l(NmPfJQ{;d-5<ka#ul^0=1ybcJKYSGfzIpvvpA>(Z?(I8)3j)Bdiv#
zy6jzYOGV4Hg;)=s@fgO#G&n!+?#l19Li#fk<<|>%Ve4!brm3<@XTm;_i&lymZF%@A
zUsyYWzVm#es}DRdZzbU53j+uP1V8kwL4G?U==nl$BOrtxdiGSmowIi;`j#9AWLu?V
zO~6UIbo9q7{CDCU2YrWr_UUyGu9cMX*h#7AO2XhVtn_gp-}m)<r~~-8TE3-p=%r(7
z9=kl|QBYAajNY*th?x%KP&Y-Ny^CO_+lCjT<G|@gum*9Clib}s90wN@ZtC#fe*fa$
zJ|JL}8{y~m+A0e};-dXfO{5QFb-C@0y@DC}Q~_JcY|F$sr@_-H=P$iPts-sbf#7U<
zXf}Hul#1;UZ=pP{pjEc9WFlA3=wCD{htNCMgMe1g&1I1z?>Vwzes*DjoR!6lx#oHS
zbrgxJ{X`D5Rs%W|KfUwy`q-s2z7(hK>6LTt9UD9PDZtnb19rd_!5S9&f*KjWd%^KN
zw2*R)cl|RL;2h&@aOEpi8Lz65`Opi_@6EhVx;nn>U%B7THl;XwVs4-4fH5TeAx@&4
z?I(HU6oCA(@jmVD(!~G_hx4g_?v95PK~n*X>-}Mr_@jT!C32(0hL%aX=Watn+LL<N
zF|n<#d!7}g=^0?$5TVCc=GeM>J-E{0|F5*?p}Hj1W$zWP*Du`0B9eN5d$hkaNufr8
zhP#nj70#uN_P^1&Pgo~!NodiQn}W&OTXCwUp+4DYd0M`IL%s|#KH*kD4|mLVVOe1t
z&9FgwM@Pb|<b>VoLMKO}(qHI3AonDt8fe!RW<hG&dW0y0&^pi5)OmV?c5kP$pGh5&
z@W>&*j~snH@?NG*e8^N$MKDDRH2!Er3kh?>2Ry}$MTRB{saFw|<$fTXtmtHkZn;U1
z$KvN37XA*+qPx5K!9Yeg0d^8oxM!v!34Q(PtfvP?=LvKknw=-johP#MP<NgformM3
z$!>!Bl5)SmEOHW_Vjv1jkV+cZye0TpOWZLTJ@e$WEy$SgdwJ8GpclbOq*688v$=k#
z{&QPmv$pEBKwCv_2Pq?re-O)SE%uF+QE^{jeIts%vRWT5393$fRJFEb4OI1oT|Fim
zOkE{Iw0RH&6w@q2U3FUNc}$fj*K}8TbbrMr?HJokglu@@$GXi`rOg9bikqb#Zf?4?
z+C0i@-UyP*@Cq`uMy3JiUDFP4v>L5|luJprI0dHmOdXCR6sWB*bnXD7n@CQ7CZ#s>
z;OJy_iuNL~xVblXDK-nN7EEsLN!|%KJl5-r=v@E@C6x8f1K80Neu-!YUns(+(yPE(
zTxoNr88k{$^N-{&MqBH3cmTvs2sKfm{KdV_f)(JCxt9cA;Dnuz*b4o8l8)!JZFuea
zUnb?4rQG~H7{SsUuh-7;!C<223g2d!r5lGgNe||lwC*g?U7sJv^1VB8BItb?%w1n}
zhea1iMj*7(8<&ioR=~tTsU@x55>{cd3|90@w&gGA+k)41f$Ivtc_}Fp+3v0!z(J5s
z0N+Iz51s1~bh9aQP{8Yj>nRk^7%i3<ZLk?Jfp2iw1aStt&Oldc?_3K_<L+QkE7+Z>
zvK2#zx2kp6kt$ai!(pC>S4JM?1cUe;&zYPsEhD|m1={%_5M%6#p#iZ>25iQKGpiql
zpy9R>p$&)ecPcz}G|onm5i6!ZEn5s{DC!LxbZo33Qc_4mDO89!b+j8uF^ZkN4gt_G
z@8N>!c41M%<qpyb{q3iI+E-OLCJ2}B4=KdrLa-#m1ALl}6Up`C@+>6#DwoGQ3Rc3B
z*YI^?t3sZh+bSl<rck^f*`lMM!vVCXc#k&%Rn&8ict_weRu8by(~XQiUa3J|*|{Gc
zpgDVWn*d1l&dzhoYmrgh*QTB#J)r4B+_nlN;=zj{He`UyaE9f89r7^Tll}m-tB@`%
zfGYkBh_?hHe-%vo1vyoZ<+`!!)#_mB8dRn2J~z_%*zAJo#N#}S7Hsb?TqE}ZUw4Kh
z2hD9_rkM}LH$dj@9v-kx@LRfv>ZB1z%jr1ID!`?ea<1NyPvWuukxNkoR%5^{OeD<|
zrO4uWxEs(JGz|LT2DP565#J372dKk1h2z+EAyjh@g31@nrpe8I$?41`cxw@`%@2&S
zWv185co_us<(t%BHTS{S6WcY~a=7z=ZS>@NqQ;X5q6xqEzj$!N)V?~@?D6hy#{w{A
z)_m-e;Dy~x@bXz0G3)sN4>cARsUQGg7cOvHtsT0z>W`;;=v|0#LoiA>C@NM&7HBIr
zX?=9;ngJs+889L<vWdDVbNIq0wm%C2p&Ffx8QJ!omkT(0=P>vr7!P7tF4Uv8&=rjk
zRa@!dkD&1*H~$AU{|7r;KjW2&bLc|65?qnfvV?~&;msnPhk0U~qAP@i%Xwe=@#6is
zUY8wS(kfolv0c?6#~2m{F*eFaXjo#BXDEQ^h=>#1eD~>_u6%<!TivQO*r2!@7;9-e
zmOlWF6JP=$%<$Q-PZJ5YPEghd4|5!iwBFi~--<w1m4W95A=*(!E*wuZXC3tGq$u_J
zD`m9gs<I##K54_iSaLX+E%WqgEe2Ye(m)hoG=w(!vP6DDpK$O{u9(Y!ONT;e`VJ{_
zmpn(7OT(cnWp2_WR}~Z_apz2;xYYsS;$9*J*!vTF;R_7Q(l?;3&d3so!2B?{V$;V9
z_`zp~mg#-Nxjy9X-d8P}-owG>)X5Z#QQ?L>cu$5D1~SMcGSHhV=J$pR-?W@?JC5Jr
zB;l;U&)|)swBhy~2hJNthi^2w_ujBX^u+_ZdWr_$*X$Qzm)xFNOH&kI>T%f^6X!T&
z$H}Ca_S;zMW6+>2jLMjm|1MkGB4obL!{riYiPoXKT?fOxhq|J+i&EjUZ@$zq_XrJW
zzR2LHIeDLyXMJecX=u40y6(LYN88de4)it0W@58%WuK0I>TvHloJ@vvbcRhRzU$o-
zb#Wl1DanCC5j**a!yzifr&6kX7uaz!b9Vw~>pxR}h?a&Jt|NC<;A^^ffGLyBY#hA3
z<>288Lh~4d=|8Us%uJmvTk$gIkreb7W?gE~MLRTU+9N(Fo1R?Q^q`|=)usoH^Oa3c
zLh;Pk>x8J2k~~oGS4x4v6KXb))R-~`Obj>N+;+pwMYIALB}vWoIB(jJYM2#egpb5{
zOujE~Ija~dOyj+ZIhMng78LFeC}2VjDi&s%J5s!mQUY??<<63$3+|<>i)oAz`O--(
z*b8cn#T25^BItfdF@0>cm};a4ZIG)_!>E^mj$@Y!%MjA=5)LldO`~uYx<e($*HX{r
zs0cDBvx$PG!D<{fFp(8GbtcjqDW~ju5}d4(1V@0!-ZU;R<2a?POi1ckL9)=y53T<W
z;QlSg%JmEGP>lIq_Tw>NC857BgK!LN69$Y9!p+7ty|@z_d^lMSo1q9k?2}(^HpaEh
z=4IWC@;Y<_W&WWJ&h|bTYjk0=V*#$2Wr6ahZh@lZUX;WVT{Z~aFlZj|lbD=}wiAfg
zsS&s^^D>e5is6IM*{3!cYFipiGmjFQQ~nrVAvTi9lEkZb$%XamUABtOt1n-oXubOK
zt+M*4y(GI1JBj_P<G0Y8RNm|IQpSG_cVLnl@uaM;)xKX8(a&(r7v?)M$NO9!#py~V
zgksgb%>IhDTkP2+UNmL-FoR^IXDCRihRt}%)E%W%*5fq_z>OWx4%G@6Uw-Drz?JCK
z8x~(h)3U%twkiw<YTe^356{lxnKVN*Lvi8!D8p?~eF11jcuI+>rdgTH6O1MRdmPVz
zr9Te~dhiUMpfnkWa5kg1kcy2l&{LNJ^>w`l=U~zSz**4F)~3?wn;d&{FeRr0zcGXX
zD!Uqbh_dCC-2t}RSh6}2OkTTjtQlCGa6QTIiOkkih0i9%St~5ZZGfypTImE?dWV|&
zaBSrS`RMIUS5x3lrGHLmz;@MwZu*)1bK_Z^pGnCB0f<E)Uq@NT5)_Rxi^Fk+IC^NQ
zrC_s^+farqLMlvJY5Y#<R#`Q)7&Ifxxzf{~t36*~oIu0b&><K2F09N9cB+fSR7n~s
zsw7?$)X<B3mC7^ja7pMwudVU<MyDi+8ct#oa;8m0lT=U^H&ady##t5VGY!v4GgoD9
z=c>$2+h(IvIk0--&ZIGMXQHXK2AEJr`;j#)v_lq--OsrS^dJJR-;iC?^fE=W?)DXz
z=7(n(X4<Q)yNpFr@siMjgq;NLR|HF8_lP0_NuhQy#iD9T^1UHOCqEs9ySqsz=!Dhp
z6c~j~p>0Hx*N`a^lYB{pnC_;Adg?X2>m^!Ve2V>KqkRS=oJ8u%83aKDfP502VxvtX
ziRvR6*%z7C@yj!FgEOUNX<$+ZF&?jH<X>2&5{w|f#NUX5ySw_sxOPML_T&42FZLgI
z%o=ZUsSR<|TbH73>)khkzuH&6>veR5h4s2)NdIFDS680LWdch&yl?gS#CV!?I3`}D
z23#i#oG$*lh|7?Eb{wY+t~icTGr1>QH5LW$92QxY`GT5xUzxId!1`HHfC^K%D|m1x
z&i?*)*617D2*{cH<pK@5VM&Ir?=%oxz@^0=Tx7U|*{W=c-+>W{pb@Ts?f~BY!vO_b
z^qT@+%;H6Ob;zra6=;y2-bSow<b~HwZ;j7m4_n?FomhfIBN@3$ohEGIRfnX9({kao
z8^m-v_x>Ad3Y$^BT~x439h7(gaME!Mf=K|F*tkX#&^$Q(78-Iq91N=6)d@*!#Yy6O
zWD$+6WQ$E(iox11bprH8ax}h09PC?nB~sl>4#p;MIe>~xzA4wFLIgLwBQ{M3I=w~Y
zQHcxN_z=C;Z7Jx#W_cT|Oa8F!DOB?$4naCVVIbBi1B0E)7#%s~sZT{7T#TBfxm&t=
z#Wmc(16AzfWG6rqA(IY&f@?(sVQMRR4PhR05nkUQnC>cIB7arP)h;5gkW)O}dXlDa
zt&6nbyNaz@{enpt;7q1Y<Z3#ATw?w}$p-gdu%O%O`dHC?%1zboTNjYQVd|eybB^IB
zou#XZ$XfRcJj-GekC;9@s?vulUkVQ5WA0*v=gNdW<|orr9hnV-SMR*WlB-(huk(|Y
znGKa>?|C4&pr>K<u~>!?9BqM5{U;t>&d3Yk8Cb-njG+5e2B459<OLZCtD3|6W>pRu
z^>Ya4H4m5Pcd3MO;ipKMs!Gpk9J<znN3ElLDFS9}PQCYe(4Cd%AG5Ca2BtiG<P9Ht
z!zbSU!253KeYfxJ?>~V5e`q8nyfpHo>^=V0w9#^VPiXZ%w+d^vri`zozRpYL;ZynM
zY7xuC*BHE*k%;tMWoq*6G6p98`m;aquKdBq{A7wVh@!F@ry`ty!Lpt;)4AIUWRyJ{
z$}kb9iaat#wQy8yB565O9Hf?m0mid3d@0md)<viw6x+jKS=P*H)tVXWk~Om_oUkMV
zVk5#byC`H5@m7hSVKocnppG=$E@~Jh4FU_g5JXTHz92ruI`*9*un~ccnyRmsT^YGL
z5Pz+T^p1l%!5T<9Q-ac>OqPqdGT-wOsNqF+c_cooE32r5E0dZCvwC8xSX4f!!6~ei
z{}v+!q3ypQvi(w$!5ebqGp>IG+K$uN)}I}Ih_fbfm@y@WU?Hv!OC-(g1}N4bU$bY~
zDlN4rMe7<e6myW$oig^;O{F;NpA6AqrjX553R!ZjK)9fq|G=At-7@TVWZx#={DyC&
zDV%z#hA7oXLtZk{Lchu}IwPDzgzGk;7I|MZP-&fE5Cqo33xb8$*L2}zU~S<rh2<jv
z?h3}9s`xR&CsI&5Y;bIK$6*0$V~~D(8X=;GV8w9&9U&yb_(wmJzl48*`SmyT^*7fA
z@>&K&1iU;lr&~dju?+uC%0Lv&R5Fm52(%>!NsGD|O0&PnfE+~z(nUmZHkV1t2{YO0
zOPa~nzcV65cRtH$a1^VRi3BJzNcJ90@}Pg23kdD2a;~p__96+Y0%rS<$kzmKLDj7I
zM8vgR=7_<Wpc*<#L`Uo(DtAEj^BeRdfn9<<^^}-B{nnS?Bu+yat-knVfGNe2G(l-2
zl(lbt1skDkpeiHtY}mdndr%qsz#B-P|0b@sa+Ac3qN2vj1b3yquyJ*mzBY#VrNZ(x
zmT6E%XpYpH=S?!$Q4=*212qGHjaEk!o21cFBTeN%hp&)?gpQg89$b`U9S;XGU6HC!
zk{O56l&EIx5^kNYsybx1Zn}XdCQj{@<zZG`iM`KtV$F1DtChcUD`-Nw&24X5*7k0?
z6e>qWuffM;d5A>R_Aoi5vy$1zb57sVkc3=(;#}m?k|&d~M49M1%pFa-c_QZ!`T=!B
zUL(d@O39jFcrGKRd)V9p#_)=2pGpj@gz5Zb(@{W4lPF!&r5LYBd=#j#hLg~bJpGb<
z&EXY>ctaRQ=332FC0Fn;_j-^UVc>8M%&nJROf(Orhc|=3@$TFZc7}xh@^Y2?<!Dxe
zBZ!-%qfIXYz3WtXk@dO*wAUX_StZR}B-1Ht6}jwpf?5gV>+WtH?5tSYvjiAY<d3ga
zbwBk0N#z8Fa{hZuG?4^Oa^u#RCZL;cnZV6NO0+CWO0~PYU9eiJQ(_(w7kEoU*n@q1
z%o|nFubW^0ln0c7h=L0z@$bmUL%-wULz(J@zFfxBk4dS%J{mmGEbKeegopwz2r*GG
zq%fRihL$@{$-%?OxCJ3rZ<cjd;ec?!+Lt*dv8$D8NM)z&oaqd2kZ66GqxV^viL7B9
zJywcx`omEg$lOLxuQ+ODEjb<*F>Hc3{+7t2%BN0JqaqDgycre30z)JoQFC{~Nh0iZ
z027f3kzcyKjLof(os|5|wGb`(>`5rBK3GiQM;nj3(wK*b)l-RN$hL({fKyD(eA6V$
zz!+Ea5JccHN`48bN(`l>NwkiqG{@s-GD3{H_nia@Np<v6@7g$UL<s;NUQl=>D<TQS
zi_x;jw}wR*3kj6Hk{*(Dh1xg1Hqi?;|A_rY|A>9lKVtvXAIfZu`7?m}vn)@(#FVfm
z4{W0{<nGFTu8jT%7&Fffm1hjv9St!5YZ?swL>D9u1_MI#Eklv`Mi?6)G-Bc<q`-;H
zH(GXwR$RH6-xVWl!1Z%5P*!WYUWhHx{b<)&dZFuf-~g~FBn*}$MI1$%byY4ts<Ei4
zr3giox}_+PyylL&`NCc<690-H?nc^AnW?nuR>CFQ!qv?CFglX7hV=<8sW)sao5)1N
zR!PJsQVJ1`>pl~7aVM0uG3xa^J${(^=5;QpAxj<>R~3`m4k~VniQ~0Y5V3EXLgH+^
zkGZsR2yC!dc++UJZl>Z$0s!us#~6c3sS%ypXp~;nO0+iI!0iL;vWm`$@2(7^)`~V8
zGql9F9HqLZUEL|kz*?96c5T5T66eyejAYoX6{$jp+CHlTLsPdO-?s%zc!3fjYv?>I
zQCO6@bsb1r(ShJO!}_VT7r}vwIGaKn5V1BOs%ir`8^?fzuOxE;N-_(Y@a6A(@56v!
zDSTI<!{m*^RE}@&fu(<=u(|bgu=JYqx>Pi88#_WkNjW^(Ud1ca*p>lZ5d}5_|4x&z
z5FtaU<xW6fFy*4eS5%%pV)!I3?@a^cWVB%1uoPCmEA5bkPKn-<%)ytzbj&3t3JpxX
z6(yABr<FHVRCqGU<ps&tbk6jvikmNbgqB@DBv%8#F}Y1Q9T1yY*(e=(_fA}qU{{!U
zBfE6+r!>vgHQ!KSGBEYI3{O`1l=g-s)KOdprtu#5#*4mVJRGFt66x9k_MA7<btjP@
zPI4Wbf63{(c~B?IQ_4U}aPMWxs3%qii6a{c)b-pBMzQ<M1P0m~!)1b6<6Gn~S)_Kp
zYAMV|>+x1e2*;QgErdKEJXOTKgo<_1l3Hr=Y2Jd<4>)`pjCic#5^cO^c`X;HsPL5O
zBq)Cna6~eyDq@UnG`0W2Ai3Hv-jQiPy)%@$jDB7To{uz+E`{CzHKM35lKf!sU>R+V
z_-&!meTF{r84@H``N%G>&7>n$CBht7(85!+k`7(6rq;CO?-kDo8u&A6(YgNYD_OgD
zrGEdmA$mz5J*WVTB%%<X7A^I39W8?AKv@51VZ(yq(0eYjssD`f;(x(EdNW?-A|zku
zA8N7D+ocSXg@{q}JO{S?Un<QjG!|nc#?1=tc2M(W-b)V#10yPs8n+?T9q%_3_|1^U
zj`t_d&p90V|GaN5>pyLhUBz&{!vYgk*D5Z=l+%E#ZlhKTZ&oXHN@2$3cMQD}wy1La
zO7;jzKatfp3S=M{!7im6uTY(fI}Dh@6QB)G{Rnv>ksHJ_xFW@f!PTWi6W1*M@zoWX
zlURu|jvMcWa6xL8Dx8p-1y(9sb|r&F51R_5(kOZb;s@V15pOqX&!lZIH%uO|>dL9Q
z*~zlZCm{DP-Rlg8NrgTz%xO=i1RXi~f%F&}3nrXnva1_6r|_biIwBq^q+2zyajLHj
zHR1sHhT3YuxduWfe1|4M^Oyv2)(c9M2hUCy#R6S#t5ca<X>Bi_&tVvcs7H-w0a>vh
zp>Uo_Y_UnGlx-A_Y~N(vM7FHcw;g*VmKUm=17-p_P8U~N?<vIa_9W)XA}&;R2s8Y)
z<v66hiKO3|48zM>Goxs)mj^+rm@t80GVBS6_eN0>OPJ8Ga_?Umg$XNk#8MK+AfDL(
zDrwF``4T4a2Id>*qjC>OZp<zL%sBpDWZ}#l-My0!p9h0J{PP6<KZYN}`RVokMi>E>
zux`a_K?%V!w1!eIyacFmucUQ7EJ%!$LIHOpLU5=6#u$ks1VUckJD*TUvT5^CQX-IS
z?~@i-=hbaGvjEi&r!7`EM^i!1R30M$k=Uk*Lu!MPI`1R^=cimoHwNUtoMvG@!yze*
zJ#pSKt**w3a)o<9M<;2QWW@G|Ri5-qnvJkWt?w;|Hn5$twLZxTsofTP4SRt4A@njz
zg^)KYX#aw)w7B$lD2nK4hg7vY{ow%qTYetxpw4z@IKbd&DqU2Y#jU<GQWbvN6HCHu
zA8VwL3}$$yg?%Zs9v_iDT3!YCch!v6n+(2BPJ!V&K`x;)G@bftlG?hLUs>_;V^mxU
z=Yo*Mx9AVTmShH6<b2Iu$Y?R+@1geMTd^14s>zGbMl#48_J_b1-e%xSG4Lo@)&`Dw
z(b!3mhBmc@eG7Lq6`q*~1+%v}<SB{1)C`zNm?{dw2wQ06x1UlBY?0wmwrb3LY0rE~
zGtUEcFt176oJve*;5eSIpLzK1GAUv|-zeFdOF{BDO==+526jB%lcm}4g_vh`ApmqG
zlZ>e#@}5FLLP>r;RTO}4>a<Q?m-w2>7&g5_i0y79S9JrT2qyqPq<|%4fcJLMfH9EI
zub>5!z^Nk!<<FVk88Kvk1~CZJ)`0FffdLFf$%}NRVvd{diD-hmvjv-E8iy#vqVWeU
zj>I5806dT%5GoD~1K(dNiXg%g`kXP%J-v<mirK}g0Be*WO-Lsvac}bfmbctQ>DaEB
zenNN;(=;nNn!5i(zLx<U!#qW59yOm|iMwi9FL_}oc>-P)9h)(!xI;={`X$%$Yq%sP
zrXmE5Sj2cwP=w)n!vRT;X-l>XkF{s5B{yx5BU99kHqkSAkF<)J0Y5i38MHUpFa{y8
zZtcbOXz@vgiy0Iv6IT=i9qVfTIis%O<-pvF{f<}KYMc#vtf4i#>sIC8El#~iBQ=#1
z#wN|5&@G@c{3>1FQn5d5?9K23X%(usc!UgYDkUar?27QOd4o9%fSH$xo(|fZs<}ZM
zv30b6)}%@+zRmC~`nMY3<Y#COZY`v*vjrl$z4AOxn*?}uk`%R=tz=l+=4uYNngrT9
z<BVi^yUFYP0=>?+o^;ba-EaU#`g=+_lc{_YP3L7+j5~96DHLMeH?77)zN3H~rG8-l
zG*byub?eH=hbq%<U4|n7+5&t;r#5MHFJ8Ek=~u>)z|2#0|GiI1u?iQzil}C$fn+KT
zBxPtB_&6ACL*XOGFuuI8eZv4#x9=Y0y&>(lybNeH3~M`;^jK$r_0SosBF+6KC+_lX
zT+-ujd2rHQ=5hZr50_o9n`Ze%xPTw{juQ@bNvG4Nl`Oia-rw&U*uf0QBfSLxYJ*>y
z8W+x@G}X7^#S(b;;CiF0vXN*oe4v8cvR!HLm|y4sJ*te3tP|WHnC%N?5L(l;m>YAs
zms$RO*kFuV@xHcH?}BRXSHHyaOV3WXV#g_R(q3SAX3)<lP8JSE8R@6rR_68X-b0Zt
zN56Ajx4LTIrrKj)POL3=Y1`N)&al@!vbbLz!9Az)rvDH|<$hZkmS1@`Eia!pWcjU(
z4uOa5ytIY)swm&YbHKajFhx1^Ee-u<xVNHfYbU5pyruD5<<kSkRVu_9G+~%JF&hsi
z@XoJ8|A`S~YB=~dbIFYjZ^_$~MQWg);4SCjH$k+_gCd#b>dJVL8HNiJ<(iN7M#=~W
z<}!AIkO<crDhO+5ysRGaw06X^+6m7weM=(_F$_`wL5~x;6@}c2WssZ{r=uloMRA+0
zSkm&UxKEL?iu1nT;y~4c7RkV?H21WS^QHAyami~q>H==xt<meL{@83;hU!uS{_zHn
zFNB91hs}+uT>=U{Gv^~cy?z(hRFJgI2)Xx`8Fd+X8VRt>CMP0jmv4s<v&y&=>(RHK
zNN}L@AZA<FmF>>-%vC*Ber~OcUIoV5sH&XLY-?3HRx>l<-%@*4donMYX~@p+l<Q&f
zbxUlop3bL$!k!vJQ5U3hhaI8BVy8-{U#V$UGwWy<P^4%?qDhu>=`B)bf(k}W2<=H4
z3;mGQ+4x)DsNOh<_nuz;oB=X94Z8HJ>+wrTe$acFT|$-rDHGrKWj*<(i~apA2lNhI
za)6*D*c%LnUYTseCwz^3r7_|DsF_ORvuq(Gd9vq=@T>@`8AR0S1)>)@jadtLIs3c1
z758AULHSVK;hsBj;>o^0aM%6&MkSLzkSo`i1VInILt*~3_E>-Em+nEF5cymo3J0z=
zdBZ(Gn9kIpot4a*r<<E8t1+P-a%3@z8(K!pvL@`dq28M<Q*EjU7wh7Rr_&fZs2Z1$
z0070UKvAJiTW7@%F)MZ`vtma<hN&_z_%@!eL&~gHW{2KFym{(P>CIDbg|-z;_!e-G
z>=WQoaz&K3m#&BILl_VpV>1TJ$;ww1mkkxEI9=#dAe5m_AESNa540=Y-CfZ*#yHUa
z@Dv9(atryygI<`APd%8OSBzKE*W!kOQ~&O0(F?dnzkuafX-n)`5G8xl6-sB-BojE#
z90?YU%VY*iOad`eBw8-mbP*dI`awh_PZlvq4W2m$-pdkl#8NPj&6{vCTP~LsTi_CN
zvl<3m6lhDu<d<PYQ4WoE&8VL{*#A}$iseZPt2q+6(E&FXOR~Z0_fv1^g(CGJN?N45
zo!?wWe)h6nFzku;yu2TTdqwg^`$%`31p3cq)M19q@+3PQMb$B6(0XKyAgYbPC=nU`
z@ApJoUeX7UR{iggiCQA<`(f_A9>r#G@?KC-Im0<;2?hFn7#OCWNP59i6kx5+K;2vH
z*+=U*aTWnE4RGXq_4<@@P7FOv(Mq{tlf)q;QyP|VE`XTzGQ;?B%3q^QjFb*Iia=O_
zCe|glJ?WGYleaDLRAMHc@=%)ZQbtiA0;^=7N<B5@D6s9Q%7F79(Spjjsl3!g*3zRf
zLc>yh82CW9b3HblC5D5mN*{Glpe%m?cR+~05k}|DoU_S6#p5713B=vq@&HroB~D`p
z)g-fRcbilN)NcG?<BdNwZ~Wn@58X9nX0TH*a5D-p(QtwhYKcFQ<4}%tGLHc&fdzYU
zk}}T$XF}Yek|vO0Aq^6n9cEgw8bgKCmDHfQ=Uun!%A{N+px5kfKrF<4Z6KUiLD=Ic
z{V<ZnB3xp$$$^&(N?Xu$_=4~S#`etrw*Z}cyqP{BD-~tggxFphLI&!#M-*mq7U_Cz
zJ!5pJ2fMi--%N`<J;uH=s2mRm6Q@#t!ZJrrN2_UZA>D*~zn;9!1|oD*G$G1`v*QC|
zv&pUh{WH`?aAUSN{p2-}>RV4A*`=w|m(l5))DB;!4qv7ZpYNnX1S6NrZ8*0|oJU_w
zc=jYwEChwtCbMuxo(0$K8L;?mY>I*YG!7t#u_hGYTJO|gCY8bY-L75IoaChIcYC$B
zP{qP8X@Y5y@06Lb8L!w#Wl#;@n%bi0qZpPZ+7|iK%c@>qLcm;e2kTi2CkiD&-p_hN
z%(PSwm@nylWhP>tNpp*V3>>9FbT2Vc)j`rj7Xi%sZtz=?5(_gJCCZUmMKR@!3X-<C
zrhF6#erPumil4c+j0q<F6n|mte?Qc*6K+JYn&sKER@y-niL0`wx<z-bJ=rn(Xzhuv
zf##>**g2b?))#LXWIaPdS{0q+q7FSL?x#Y4FVLVAk_!_=%vfY><q{o4qTWJ$|F$r_
zLI5cH(|h}tI0SAH;YK3scq?y;(1&9@s_7bVSYbc$%mfEC#t794Gh;MB&mOtnJeYCw
zU*Lz3tJ>Yqy)Rzci@rVbBJWNl8Ln#(5DO;INfVJ4i{c}rxWTbW1CP{J#gKon@Vqmf
z?ZlWvFY1TL>dA#FngAyCDB^u#0L%itd<2Y4`8UD{>{4|AN5P`ElG`|im0d~2(GnIl
z>n*;W^`_rCg3HYNv+B0;7f-gKk$I+fat<tmc?6GO50A`UxIIOyAqAuId8L6GJd4)V
z{-0s%qD8>c=|#hccXH8|{F@eyGplE#1>AolnNTgQ*uG&VwjdDK`jKA6Xfy?e?AxQ>
z@>>Al9Hzcu{=9%Ua?wVK)3TbdBgp7`(8vr1vLeH{&D{ts>&_&z)`Nix8hE0mET^Ny
zBD^NnM?o`5twk?KCub7+a1;urs0f!L8kb#!Oy`BwmIt!IxEIPDg9cYA1=n)KH?;F7
zqF1Sqs#MnPg<7>Hze2ucOx0Y~n5O-|MEKo7(pn+>@>>#q=(TMgC4w1rzY|2D%~Iw>
z5X#*?Ih6`JBIrDsD}-VYumK#tI4ChZm$5JWx?jRd+9D|OXB$Q1Ady`uuWgIEh@{QU
zC{#lW^{z3Qv<PxVrsj%F9rc0#C?-X)@D(?)=ojumK!RBq`o7G^C`4RKkIY?7ic<77
z1+3BwFjXuMIjjLr0u)GfijnY_TLlc@p~SLIF&?bfYE&yFG&Zhk9HvpG=r^D{Tt$i8
zsDj%fab8JsFsl>pPK|Om$n)>RC2Y4%<JAdo_pX%p88mw<-aGmC3Xmk)%X*4yl#}mC
znDR2T6x3XzW)ew>;EJr7v6rxf4`op-17lGbG=zV)2&gDxXNzub*rcJjB^jE^ZJSFC
zl)UBRaX!)CG_}LkS$Rp5vA*T<!lznN^`+ReyO3Yvo~jKHiQ;X2V0I#lY@5X6#E-`z
z>J5x3Nm5AlXwJ#{i0;<Pbb$I;ubpUuTD)=Sv##$zIc4q?BO!XNQ-hQ03tzraE}PIS
zS+Caz6M9QA7%^0H8vGHb!PSeeps~cYU0?BN`-<CZ<HqAi@cLBT=-%qiD-Qx$kmp%1
ziP@wue2SE37uq@oF~8D}NE$pI7ebHH)<1vm5A`q#QvAfbyM>l@Bo3x|IVdQ?Mau{a
zBFT(l-i|s`YSWt*be!4zMz}yKN}9T0J*mmzW<5Pl&Omoi?cs*@j0SYm{md)-7#>^3
z9yvK3#i-~~f^J2G5n;~m&&;^WAV(@2hqi`~R1%J;W({AcBpf;4p@p)5U%1!NUW}=^
zqy>B=onL5BVdCUoh?HJAHt!=rH>ij$_TY*9Ly`s9GHhU3p*r(BQJscep0W0{BjX^o
z_JF=u*ASCbXr(Hr8Z@M><hI`HVN`U3$noNX)PmGXtNqj~??(7GPXirgDu4>Zu_3iG
z0A5`JBs`$0c{Zzsyy{fPS!JH)(lD&+D^Eal^L&(U9B<l#{clV9ff**n3;r_UE!TsX
zoW!iUD^Gp+S)R)54&qAJBdORdC@P_BlqCly!BDE-BATE<8}I-v<A}J9GHm;j{|^bH
zy<7t!@+WG!0mqbzCbRE<a{6l!V)t}xDIv{<n=Qy|d<T;_P48XLXfNy~_4X3LUX^+w
zx7YL@n1+dsj`2?NO}V9U1|>l0Q`QJsLd@;np4!&vsAqzHcc<%j`(4-Q(V)CFVGUT*
zGP@U!B`4)6`K7~;{_xbT=yEUz@=4jNe~6`O98)3QC*~<nlvi|bs663a7O6yAZIl{~
zj4%L?Ts2C9DlLpK@VQQShja$}lBxLb@CLokbb7l_F|MqUMeZ_B$}&#h!42PLsFW1X
zuwJXB(vH=(K$tYN6aCYW&;(X_ZKbpf8&a4EFJ*gz2XJQ!lyAt@%qhDv#Z>z^Mwuz>
z$&!iOs9uov<+}S$dLVzV*CL&nTo2crtCkV~<E<N@_@mXOhV8=((5cndxd~O_Ua!8p
z?nc9fT0e@3)keh8eNIvI`3$~^7xAZ1rX5F5NmlAi<d40$D3c33pn~)tkh5vEl=4|E
z`~ezg(?KyH)l_e(STpe`Wj2hFNjRHPVp|rmBu+vJP5`YWz?-huK<+-2D-A`Fntcuz
zvBLy0YeYEJDBVQ>MS?6bz=2}@nlHw30aZpAaa7E)n@S;3+@<8KItf}CH+u$faE1o3
zwXz{?>Bqw>nL|!sUc78n0RkJ`B|=b8Ge$c;r~0lxw4$%KpN$5{W<(2U|D%XbQEA;P
zHKbQTTH`SksI{CKS)^Y!o*DVs)LrSpY@-SVN(Q*o*-x5RKXz5B<CG;7>)-)iAa>Tf
zmK~=?6-YQ%ly7r=CpRp<FJm9aHiA-dgho2v1=+FnhxWwGU4wPhhK}N(wPtUs4xZvJ
zz*!sNu5sk6x5<onmkKHryQ<g6se?k?x~J+#Pvx<v9^-T-`;(e$ae*0W3JjcZ3l`QK
z;mE-FUZ&OH{Ad}hXmwFV@sA$ftjq7oGr4Vk8kB$~OqyIvB#}D^8X$+g>2J8#n$Qjq
z?KUt8v8md?Nex-3TTft&ufhouow<Ist_i)aim(_Pj_JC_ZT-?ynGVyQ>+Wuam^F?+
zYO%9kkW3_T><@40z^;d9n4Xd?YqP<#mJ+hzJ#m<#t+SFYuEG&=9yIbz_83G+jbz4=
zF4`!_7V=R9Z~!{7jlx5=Hq1H3VFO}QFe}Ra+)inrtX5DOXaQ#v8*rB+>rtUV0IV{q
zY!23Y*pw-4nN*`E#%<{~$lSxuWQ0+wM2=MSAYHH7sT9~WL#>|*5k{yf%iK)MkxHxA
z$gWjpOVl1!D=7<Zk<Y?g+Ub;*ySqyaU2mpSS{mt;SR1tTrqTlz6Vt#htbj0ki;*gX
zQrB77NtYItq)Q7c>5}})NtbqayPuLGnJ(gPCz$RbKA11EOQ}L$v@P+-Sh$3A!Igyz
z;bncbB5x&EYZ+LpF<FUa((zUbPrh?E%b*)hi)^tXSLErQ^x9spyA+$ldO2C_W%GFv
zmz+PrU$mu<GFF>~L`!&Oq>tjHElHmNLu73+<{i576Gj4w`cBGDORi_lg(hCO`m>R!
zZ(%Z|?I1le2PE^y2zWHdP|BVq)R~=<esBv5N(cBR54JK>3B^$K)9T_f%frj9@~yw8
zN_KlKU9kW;t^_rRt$*v36AV)kF5=&O@#7yZ$_HH$KTZu#4$kxiD8h?I$+n1n#W=rH
zwedIeXm52$MR^bUrBbE}9788y6)|S{Ei-(=(03V41)s>GT{)M_SX<hQYW454&4t^N
zC3RlD2WPxY;7gFTo8QKNZ1DsZR`G$_CzOP!Rz>Ow@n}ePo*y5zCWvi|&ofItb!`Gy
zHjIEl;d)Hj6Nw?a%g<fkk)JQgE!O_(RqA&4&6gPWWf5Kl-6Tais!!}{7xzf90yclV
zRW_o=tA^nBhf+564Q$j=>xr~-<}@BmidQ2~<`NL0ijNT3s6yNz#%0Eds06l<X#|rL
z>nq3UCD7M^h%k_h{pKlElP`5l1@=L%y;hdrOoq>rQaXj(@2u)Nh>i6kp1sRN_Z{^C
z@j@^(o_^C$Sm}_$bCM@w{k0fL->jbp$B8uzih*g!&X&N6loWGvs56fo#UXMSGK8ZX
zpCCNY>-Kq)iyTW&v%S~v-pF)JbOpbWw3=@5MM^oKpHcpSLrk3#sAPAg2;Ov+!Qsv>
z;->H*UHJ+_ezB`6oYro1(KpR7yLcBzi?Ap#Dl&D>C*xR%904!?JqKdcfI8&4)DYgo
z5ZWU<HVtCqTCRgf;S%ji$a~9i_e{4u$L`Z>2!g@GRGxCk*1O&bj{05ZkZqz@8o}FK
z>2mQ&9u|6n4VI?|$vQ2MWBx&YL;kUFtWPhqT-7upN_-C-WtH>9cNk#CDn)Dgck+UB
ztlI7AC^1~<CE)80#h{baK2wLkn&9MAt*6xuT^oA?c9u6Gi!!`2II$M))YGZ^YLR9=
zBX+2EshFgc7RgUV%A^rTGOYu!6hfGSFzEt#fO49A9HbkW+z+D<lR#3Kc;t1%Rl~?`
zmT-m*z~~sd8Cn{SFxg55^+whVDMu*otJ6rt#KI<w{wSChD8z<u@oOABjvq~q6C!pF
z6Q>5om1AK;YE55eLFLx`>-M~;yh1g4kfz;$Rl%UL)T=VvatbwA&~d~=sMnA(Oju*#
z%^3!Pp!0J6Gb#OxgwkN~Ta40EU4y?|TS!7U<AN1|;YRv8*7#^tMTvUee*!m-WH@H#
zi8-2n0l@k$6B!8JC*`>~;hEPg^g;+L5<|`)cz9*pGC&EI;JP<XTEXsKJW*k>{X>z+
zsj{z1zvW7eXBFPP&`esVZ*N1MWnRWo4z6y0>pr4u!tQ0;RUuLcyp^N9J+$W4+etae
zvmd+=5bpz)u~PhLLZg;7Bh=~U+DH(}ohfyy)du?w6wMC??OPqHt0L~3qGuS4x~i<h
z?CCTfzV%_`loT?X7%sxy<4CYM=F0>0W_P8YOjdqX94?o62GkM;R*NVkS=4mhmICGr
zOa~!XPQ;$w-<1o#js&AsM@{$*nXW2^ve8};wcp!?5OOwO_mzv8*HlPSjqdvOksUmU
z@4HspiV$cb4&*l3FJ#BYHc{FR0f<|!f3LLDX9`jlvsi2)GfBCvqLjuZv3M9Y&kn-X
z9Aln0uJx--0cgklKgyK-ZX4xmxMN%}sojqH%}{S%+A2aTmA2TrgGt|co|N%h4B{rO
zuo}qtZeA|B80mZ_Urm6rfAj9O&jh|yeAW<8bNnr)TUrwdBPk<buFh|W4^_6S187AU
z%r>)Sp=F!V#K#Q9(HwY7c7Y3-tw!7NbHjOP5r_}>N+E$0`HWQ`>I3&Zaux@B-+lLR
zcXu%!?hOVH0e>XL%Or)BcNVT;GA<hKTMfJ8q00{ca6YG^rD?sTsojz^P`8F6+L{JK
zlZg9A5G<s2nfc0Kim}Cv0t<`noO*B?pTK3v;L2iD2X5UWewCIOa$51!6s7Q6qq29@
zRFbdDTH#TZLl0JBpf-;l9Lez-Wmiqy{1Fa)C_}m!9C^peVrGbsQR82Y$`|RVFeX#q
z(gLlPE8>APhOn*AS$*mRGaI$F@bglRFtcu6Ly#~_&G5NAoVjqxl#Kplk@(BRm9{3v
zHhN!zIVHWWOJOK_(m8w<!q|oq{AJW2!I{%Ij)T@p2hANyFtFZphVO<CC?>)qeJrj{
z76Hk16#}7S?^tfFyf$RHPVH)ux@yifaVT+uvc0Z~i-JR`K{f?L4G<$08qLj!ZW?4v
zZ7nhIc_Ibrg^~P3+%DoKeXZ<R3Y%u)oG5#Z(GDF-b&}9&NKguFpA&_S4*N~BaSt*b
z)Q`vasXjiuiryw)P~rYZ@X4^Z@y_5;)%UL8Nk;@6!KnT~y*fr0r%^k(_lI}pU3rK1
z&b$i|H&*qPq*5+N>$UlUb<Yn5lciSdeDTg*{|njxos%KZQfq?nldF91bv#jmj`!Xh
zTj#48U8VPZBlN!SgEuw3?`80w^}gQc;8J9Oty5qVOqhD}-d@&t4JVoWS*cV-4pq-k
z>7Kg2-EGD93ivcHA>+dDbB8DCeb#9fUc1+C_G0*>RMl@tRb5$e^b$jcg|4KJ!8S78
z<_nfGM5TGgn@CENLujJUw^cZ(($Pxj|50|;F05PDCAIDr`JA)A3!KD9_x~N_elj^Z
z^{vjl7?VoeK+|ud+_w|a7>it<g}C+|bAxK%EFqYNTW+h4LkMhe_JF{g=4;8Vw)*tu
z5Rf-FEEUAEZ38a0*@f*r>?_>W-+QS2z~Og%Zy4Xdx9?Us1C+((4Xi>U5sq9cDe<tT
ziMHM>c+8~5S<;7ozD+&D0nE$Ek)F@EDj4>#pfl{JZd2isb7z(+(w1?q@I#^a^@5pn
z_A&7mm6#Rgo!OvK+CsySN`D%t0qbyZVvM6@(2dB#3`1t_T}?3QO1A7x<^J8<?=SA{
z`(2XPaGCYGD{_$W^X{&k$b>5UvT}dXu(-?q!@=O@rCs(Gy_SNcOV)8~CEuy#CtJNy
zq|_(YQlHFxTV_V~LoxV@7)J~-)r(mNK0T%8%Gr&TO`F!n>tGv;ZOG=E+$3)4o53mo
zO;p;+%4%|SX)b$<sV(bL$y=`~16SoR<MECfj<-_61E{Xo`8WtQei<48L;9Jw|8T&e
z`P0A@7HfiFy-p5-sMlCuSI-YZOjNwPn~b9#{4gO@UM{W151m-wXiT`+2B!5yF?Th?
zD>=(^TyXjip@~UYMwn?$%oM<0o{B^`;u|kY3^c=r6Sqz-(_pdNz8G4h-y{dJh;}q0
zn+)RzKCCuIzd1O-kU;r(JXEYrlZdDzRK36|N$<0hQ<lwoq=C_?{dOpxiifWIY(pOP
z!*L=sT+<+JR<o^w6V6t3I+{w6=}M)x%5;>GBOu{t!D@6gRsm>^q)E#>n4KJvEzA5M
z+})jzBMA{Wrg<NL5QpW_dCr}A4_@#{iJ<(_oYtZVeli6=Sq*-2ZN>>J>g38(S*6xW
zFey@usfOg{XU67ZQlw^eDN$y@Quy2=!Wsula++0~n9${g?l`gD0+kohyUwbrrmQLg
z$0fIYP;N+3MVRdiZDus)?l3+X+BaJ||5p9IY&VER!$G7}p67U<WS;;hQM_st7l!$j
zgZY+;o^v8h4~6Nom=rk2jRhwD99XzOoIM1$bnh%&5*xWB|KJ4-U8v)};N7rj=Fo^z
z*4w&JY1tOFZJo-rY_uK#l?;93(3OUU^TZJu*QQFVsF*8WMh8s?%W$D;9hr(HCi^Gb
zcnr>eHVcHe-dy}39-dqL66E)qae&An(fm=+4d=4uW20qGYI(%%9|q@%v+|By?;>!V
z`YqD0Ts1%z^}e|Grc!=;9vt>Bp!vhz1^d372Tr9*pJ=1LQ47j9b;Sgj+4?N_f}=af
zP*wEn*oe>iDG<xwum)Pt@JEnu{eC8w=&Egr-m4{gBbTT_kkv$lk_jp-*dOk_PouNo
zeg6&g^1k<mSL!TiY7Fc2u>urr?TlL#t8=DS=gQs84yFR3EG78PJWMI?&Bs$Z?Mr9Q
z5RGp)8;Qj(-RlKlu}h7`7UmVE88C4&Zwih9YlePPefnG426L_V*+kmEeVhB)&71pe
zUQxTZU#yZq#MVYrxWB^-QaYPlt}Equ%2LKIVA{mQH`&1eztTQWGLUgCL-s01z147{
zs_U-^1yESV+9n<UMNh$%2Apu`D@*^lVn@+zT5*kq%`Hz=kSESj8Do0NbmMM3^8c%t
z?e7m{&el?!x*B*u+&mS@#<okz$V?wgJ?u$(DwxZd)vx%X%<%5BtRO85H-O#A10yej
zVYsu+?DU{Pw1=MeHJz`JzS#C9l?+<?>Mq3<i*AG*VFO0LUSG5^WbsX`gJ}fhHchhK
z$z2SoweKdWNNh_5?lLCZ@?!fz-m6W(iF;4<HVYD~Rq|);#>wE6?y2}-e=wMoeq#wu
z$g?@{S1p{3`O~s;cUdi9(QaYzEBYXN=jvdDvedvuB=x^VtE%r_Mg3$w^WCm3%4d|X
zlg$1U<lj2Q4qE!-IaU?tiEUp*9AZo{@9VxySh9k_04-H96)_9(K~9=P1GVLd+Ta{|
zNiT@|IVKn{8K-$U`M1_fmt4BU(${pG`H4!VYj|9Isd!vaQF0mL!W_~j7^sxo2&<H}
z06!cAL;b;sJ&2YjI!%NT6Eyu6vxZ|@fJE|I7;rE-<<O3Z`3o}q=|>dAZX6V{gQ%B}
z@_tYlgFm<97hnW!BbjS8Rr0M^^_ra|&p!f23s*B7k!#Eb9)KH_1Wds^c+tj#-xKRf
z%;9koT+?xA#OfPQ9LJWgbe{a-#yh;5>xvK_QBDTR&Ti|MfcvZw71HRAWfd&e3Po<^
ziZD$}m?B*usTG)-(xIK4*3e_1%@Al4vcnIh9e(7^vWs_QnGZjnO5=RnurzQU$BzKY
z?>W-Rt}mh)6-El}Hf@?rpItPj&n^U?w%Fr=1W^w-JH*t9X?@@!m#0P;$kJF=%4At6
zoCNZXgq$ho#-3JlW49){YV;eiQpaI%7YsTHXRMTG4Df}mgt9%b)!UO&`&@T&pkl^3
zja&k9k7D{7Qy1Zpaw)l1SxMv)0J@?UMyV<UW6Sk&X)ksG`2V}J<8jJyr#RqD1Xi{u
zs0OU(Sjq{CMz+nd=D~T9DET90R-xW1a!1TdP8Vm)@RJ!Y#DZ6X`-;=5oW}tb^i$7H
zh!q<NvGng&ra}x9)5{t)36*_Hg4eOkvV9G##1zA8H!>y^+^)ORrF_wU+`gVnCD<8Y
zE<vn(mITksJ(%xL$Va)}Rpt48<@pWZ+wSgyXbQi(*X>;;UUzpE<{$a-eX`NJa;YwL
zV_l!4c>S7vko`Kzd~f&OUKtk{NPVIsu-)7JaQW>$+sGUCy1R?|8@<m6is^dYNiiQ;
zd7fvN)FrV7FY+AVzWYmBtd<DC@oa~MomuYh=op)txxhwfpL(#;Js=Tyn?5H2%nRpw
zmUyrhUH@7obMNNyA}o_n@lGeXz)nJRXr5-DfzbvM3RBbNvpDa=n=UNdUUbo)bE<G?
zC0mt<>;3L<`FUps00|@fkNqM3ue<St=NKI9Mf}-n9$zSlFw%XC)kO+5y4bw1N6Ml7
z_7+0e&-7IpUljbYPpUGz6M)p0;YG5bjE8B)seC;xqVk7(4?MmyU<QN1e|A0T@%s<I
z8?G>!Uwxgr-j`PhljtQz;}s_YhI<j_XGsdT6^`h8*h+t&e!e}=lk_9rVsbw0MCWOn
zN*@#E!V6ezWYm3?NVjDtE|T;IYvh9D^}7#XD+VwVxix7<NqBcp#5hr}83OYel=&(?
zg;BqcryrB@mm<!OvRN{xFo@x-kD&|VJ`6XZJkI?rU0iiHV$PPklz*+~@%tPuv1u56
z^o^{*<}|Hjz%*Y9nj=5p3%w1z6k&RGc^>2P7>fxMkT}#k_9jGOj#jM;I3pMr1(tau
zj{BB^G{UYiITQHAW~mh(?Cj$j?>t(5R#n0)0$2?$%0Jr^o`>vVh~2}A0<W2TiFe4u
z5;te(VCUQB>Kl8WO4)(Qsm~}w0MwhR2fzCtv+wYK_N;GFZGV5itNJpIISkD_mGV(G
z_!?(^>!CfKJ(v&F(Ed%m?BBmH_k~6Ouhs4#Eaxvip{`Y&jE#-dn#W-`6Q=0yO50SF
z@v?A+?hX{10^EGu8Sd>DJ4rexQ(J8P{{U?>&*3U6R3T`i3uo2`2C(~(eq?YSlJbgh
z3Y}*kWmZjf_itTU58R_k%<^o>rY*Q&giA2SBp{GIglB-aWVXX6#$!yzpZkM7gmkZE
z^>jDpnNe%24_>`%arpk@!Gi~~C2NpP$Kj6KwbML2KGLGkFiin+BD&FZmmElej%~LO
z%Q_hFasNLTfI-6@GK9swsJ2j90{i%e5nds$8Nq0vl?xF?aXg>%YUq`_q0)EXVI_un
z6H_eXC<zys5CM@L7sk+aHezTh^&j)cPvqj9t>9MA3;5W4li}NL<rZzZvy!xk%U7w2
z#skfWt8{-bum`Vut<QJ<5dYWp<X|5~_&@9wyLuxAq9FP|X0ytiw>5qr|9hevkD|z4
ziLF#gGhJiT0Jpu+<sImE&y(3KPVHfckN|X?n%Xn2vY#lgMX}RV*|^j0)1CHk$zvfM
zhu_^tp!e|pKSY8H0Ek6%=8c|abj!B^`uB3#>Wdxk&-dr^HelaUaUcJCEGM}P(|A#|
zE`>qE6=f2Ayi!*(2Lq^po^I_X$kWtCwRRt{hQf40ZqWpiwR$2Cw5*D<kFB7*Wv~@U
zwkRAR08KcyB0JOp&yztL1Pq8lincgd$<x(*PMcLJOQa*NhDH(b1;7u1mw`rj2x>=>
zgF4R^v)IH+PoBVZS_WP1He1TJ&Y@dcX9m}4Jjd+k*ed6N?uKQVJF~D1`=V{v1Q|`o
zHQj%nIkswt?`W0v&b+z^&tm_-R{6sD@L$-WpWvH&#iz60=Zl3mh95idBQ1jNd08&~
zd-pCcFZV9*?`8SfJ;0FzEZW`S7#?so2i+YNvSZLa7%#)}9B9fs`xpn^|J=WigA&hu
zQEAxSnJ0@yz{B5}1>K|J&T#O<@ViH^hu^{ZKf-^958>evyoaa9I}cvtzr#n}dk142
z!NG_Ba{tTI^Foy@^GiDd|Eo_wYxapi{X6^fn|K+AC9Y*Zr=JQy^Du$!J)=EqK8tYU
z?e9N)C~HgsTV!b+051TB7kZ<T6gY`QaECnb#}@mvw;x~Z5R8iZB%CFyf=*%O$f_Qz
zJ50K*Fz=t`P#5F2{0H36!}&vRhiUV<D;u{CH-UF|*JliPt9GXk@PF9uV0M4@$YpXv
zVTU`6@cwuBKWJ$<9R6j)gSMbWKtrx#91$PPlXx-v>Yb_&tw<KoRCN#c9>y1y9Wy(x
zL6ky}di|{O^%Z#t(C5|Kk>iFLze!y0V-j>f0CI$T&U^he0gnOcsF=q%prG3|!r;cs
zFb~TNEydVxRHU6yA6nyG0P`NF4Kde608H$v7sR%{ma~~Ohx_CT9}^>)LO5%Vqo?gI
z&G_>pGnSnWQHHvx(MaZaPY|cTk~}3ejzI#YW<w3a$`ycvz*d}02Hnl}Qt}f*Zt4uh
zZwbodbVlefI8V`^0^_?x@^|8noN#wHnuz4mhjX|Id?&P@-zAtkdA)|el&+`y^i3B-
z+F@8V6h@+{XLRxEEXDLoLMv~K_#k(U(7d$R6umF8;w;vepseKR!8xPNCC<B5iA{FO
zIIv$y>y_D>5(c}vm15awrC6%857=OUrUOo{qkS4v>={u3+1=DjRnP>f6FFj|#-plH
zql6FCV1+^b3~&sEdmr)->16#Oy>~Vm$#j(cp;rV$Z)w<BHPm-dc_jtT_3xB)q@iDx
z4b8zMbn)jna#G>izvSjHz#r;OWpYMpgAX8Pd#9l3i5HCr6S*3G<huC6wG*|NfKeQX
z(BBJhx_$SiV)quow6=Q~)sS~@rFU<|0g5Y|he_@!EOAg^;BCEIQ+v0jtieixs8?((
zsBD8sw!v0MLzr2Jvj?a!4JZgMQl@z_i=Q7KA$)6VxwMKNUZn+;qYTs4<boLCJHhZH
zup*2L9JwHwUf)S|xqWlbGF~zfa{GQDjuM7WoG7#-k04CIM@%3~Atso_CKjrndVgrP
zDHDW9go;`oOoI6AJXy?SZagEJu8AME=YhS|q2F$rY#e$tkAo5YL;-o_0YBv^(#`n5
zy~&WdJ}utbfBUo?dso#geU79MCTZdDOFHT;=+5~G^+{aLlPls*N=z<x^VDlP!=IFP
z3MYc-jeJGc>vT*CCLObplbXibcLa_QmcYbEfUk`RpxT-Ot}U&3s{r7=|8}0g`gQ&D
z`t_^zFR$0fuh&msA3yu?@4p<sd$E50eEt00`iBp*_1hQE-n}~hY5nt?7w$JgE2g2I
zwNY>HYK229FS9<-3d)$9O9}*o_5e>?8|84rjSXXjp<}=)K`xTlAQ@K}VeJIHC8JhI
zM?o?TNiLRo93@5k0~|}QFy9=iP+q0*QNW{noGz|*cT<c(&C`l6-^L5hc|v#u(HVv3
zcg)eKURj-t?+!ULFvl!%Ws;<5y)MvuvTm<-a>|LC^DHa(n0^-`ppF$7L{VcSNrq+9
zBF;Zy^eHKJCj^AqghaqHBGGd7c+8hNn$wVomOh8_iNB6AilC#MUf!aaZcZ_i0{9dL
zL5_|%=66b-rj6@17^q}HR{O6px1(5QceF5&q_Kz`_y|Lvm@fg7<D`wPUeF)U+@2cI
zItWx6A7wRwTPT(cuX#*%kp=s@;3Pg7(rZ6es#@CV4E~*5Vg%9jYyq@fuf#ljE?FsT
zq$jT!E_nlK6Z9!SM%(tR&_N;+C~K;B0$+*~BwzEEtk<3IOQ$r0#2D33t=$;9hWrRL
zfWib{3R^;>wrBN(35*NO*(L|4!3f{#(V6hnI6Pgkb$nc;ZG;8@+uaGrcL4!<dydFz
z-LwIGRxv;;MJ39l-sql$c2r5aT!}DTm?Zqi`08D95g$Cq7io6sxTtTKG?jY>gZ2B2
z-UVDpBRct9HKg;FA`Y)7aE<dM2rzEWTU?)64g@h-`s!P2T=XNCq86Zu3smbOqbL)q
zwi(?k%3dcfQ1mVu{Lzh-jB_Rv!W^f9Mq(}+zgRCuZqn-s&WwtS>{->&#QNNY>ZGAN
zqGSN6#}LCaMEH-@E#{i5bR1#w2siBay{O;E?rGY9lHBXGAA~(4$a&H?B6|a+-cK--
zT{uqkXvb=>*HPdk{UD|6vgtt(PLh5K1V9h{*(fgKMxy^{48%Za7mrl&5Vi%c9vP0C
z?B>v9?$8h6-=}`G**IoI1!62XgA|6`_C8|rMn-YVenc5@VVeOCqH|~p&fgG-9_STa
zG@cTMfY-f!1s=?(7@kQ_VGTbfy^pdEtX&%LxT2mYS7!7ZMo9{wy!3yiL~X52QWmMw
zfx)^PL1E*C0Sv-<SiD3`qC;u1%;T87C^^>FALu7X$#*!5Fd5hw-iAyZbtn&?Bmm%Z
zE~9i&V16C8Ya%C<tLf0G5Ob+5x5$g^<>X52Q|x~>1<!?reoEeUIT_|VX(d#4szPO>
zQ!CoRiag5{xV+EB-Er{XYsV#8(A+0iP%r8gv16VN%m<<6B8*Jz0RvUD#L!<jFZq<y
z6@fS1z5o8Ow=<D6q3m`~W;k<j&$@v9Iry%^^T+`nmQZB6Dr1L)%u$x3hOO&P9O!93
z2vlQ=P0b9Xotalbf9PfU>Z0U2+t-m`^`yJgJq2L&jiYkIlwmR-(w(j`I6YHB5_XuV
z?B6$Nk@E_Mo@8`#j9X>C02=Gn@msiA99Q!STwGlaj-Hx^;6Om|uwnhJJwfk<-Q5-5
z3&!=`eL>+5yy1QHe6l-0a51|W)Vf%&pAe#|ydE28gqt|v-EbQQfc7K8B<zWc2d{08
zy<yW38d`h~H$5tf9z1eg+i8CVL{9@CjI7PzjGFM_AQ)8kNqvHQk%NQP{UTPdj;qS;
zENr+nHG+=X6^evu2}V(gOu|bjDq-Itit8c@kPmuac&6XGk7zl?wKKyUiYF0$i0_cn
zUOcyLe&c~8XA<E-%popv#zh#LR9NTp2iNa*g`xfd4%942USs4l4~0f(k1I?w-^%$b
zWLIV=tZ_m;PV?#<c*0Fn7FU8Aw}(-ajV#Bx3`dC!$}&jRYT$YjMfqB!FQV7J7Dt-f
zlAFG07&c-HoK&~!fPMo3sbzzT64fgsmJs6!tZ<Y`PO>tEWa!#lDaT@a_xg?j6Tou`
zT(nZS2z_JwM;pGo7l9SzNw@}xUKp4YZVt9<9vA>dd&cYe^on^pZB5HqO@disom$#-
zK_tnDy#+hJ_)7-YB|2-2q&yJ1oB<)0^`$R1i54|7=>&81=&LMa2*hs(10WKn0p?MT
zfgR`;#wfV&bfbdMN-*K2L-Ng6=vyxLhBk-SLq+>m6N==7kbmU#9|ncG6n95&<$Bg@
zTz7a0EGDf&L=26fvI1kZ6g2uvBt#70<U_>!u@re!zF>L?fKZ~Sx+BMcQe3z?^kP##
z#~jg<`fLVrEcPOu#k0fGWRD&WI4IjK+QkS@UwT1T6o@ggMRT>6EK=pcI8=w@@7$&a
zbfe`HG6AiVdDp8#m<;$|JT_B%m6jPYqkd-q^evt{4@s+$GI=*i+eJN_f#Ir2hgOhv
zaC(lsnM=-^oVA0bi!%&i1wEl#KT^Ral`KMC;0gs@-r?@Zu)MdpPlYwByy`=Ya3`w=
zb@o<OJkFD|1e1NvDGcD38;fE@Up0|y4Ut)OCFh>8%p01oN-TqOe32k%CyUwZq$pwC
zJ!JdB2q=)}XodkViq*8t;~0O2lH4q6C65;~QkUV@dA}zC5>)^!^yhcrBMKPZI2aDS
zfBcCoCg`pr#homyQ&}}^F%L&HPb;5vNI{uy1C5hsFOk$!Q9$z;?T>LMvz3kw`o}6>
z#VQKEsCdX^AdrZLV3Y_)IAg{~m1#FrXTnZhLIEgrkbN?yDMZ|0-7=5tEmbjI>(WM&
zk+X35s=1Xj^q`kLv9SBuc^rLIqnx2*r%AoBbXmyLXl0L9C0Y3%i<b?~aoa-zWsQD@
zLU%MudAV84ncNu8$7zE#V#SEGFE!F70;@F(iaH8(TuT!0ql_BEr?B=$(b-)K{;l$v
zI1G|bfiE0mL}``97eGmqltJcgh6lnIPYz-$I7d?AO~6YXS(%@#mAd9meA%0a!|^M_
z^yJu}*fNhl(Qjmh%u#H_dBcF-*4YV~U++!PWgfq&if;&51M8`w*w1Jy9GDLcg#^f3
zPi8Tl8X=IW5x7GMpK=xL6NJ7*Rxtx2L|BKB!+9+OCr0%bs~SjN3RekJsPHkK@K2vn
z^)Gb8xntuZc>EBFAGr>^xwR3=Glr@W6=GOw#Ambj6qp=gGfn}<MHbBjJ>f3#LSTe~
z*Rs>NBqlznE{u(FU}2gH+Xp5!kq3oxwcZ3pTnZ$LdCqCnFSFd-JQ(vZzE8pF#W_Ld
z?nFMJue3R?H;8f$1|4D-HOixoZ5(Jnd-h{TZlsJ$oGO?S_k&Z-G4_cvjM1Mi1_(j7
z@pBA^3unnc8F+hx!SGa`8FR>bM+IVaTd?!3R{T!OboY7Tv=m%cHq24r8qVHYH*I^?
zpi1wp=2T)c6t$DD(jUTfwm=vcaVNTp0<d>p*B7yR9UU=2cHi1>LsN`;JHra*k?R+m
zt@Ba7MIs%GpcoHqTqNlX<FuGaD6W$uBD+E!1Lju&_z7h{9JuBH37g(B(GUH@%dhj5
z4ZMc+^;$>T+RpYd8>t$YHE4?zBn^EkhljWwD{ReKEe<cesqzYjCo3v@PtsEg|8w2c
z3DVj?5v81BQ(B2N5ICu_21{!MPNuBE8oQ9VB2xrUj#xH^KZ@W<iQv(6T)Z*i-M*A>
z2+~reij^T%(;1i1+iQfcNwd=?%ixGMJ<dXdiedsNpSs#zgt`P=>Hml~#|$0DU6mBf
z(ut-@c`4$*I_7uaIgve2$Z(2r9jZfBQieKL;QHH1NhS7G!fsrc=3t9TXJV?D<J2*p
zz0B19dgj>G!?84rQRqp~i8j94*v4e`_HB<@MVnS4zgC3vFb9frNCqynHQLIhIpjcW
zZ=Og2e;xv%@&@XUT(qds&y~`K&4So-I~lX9fx#XCcTPG^Gt((zA*5-MZ{hfwj!Tls
zZ29VfeACMK=R8}6XCbeHS8^g<X24|3Yz!zwMj?i-1?VpVAxVBYUG|osd#mfE7(9`}
zWml#^HjmG;iwl4qr;8Skc-MMX+ss|u+<d33X?GE&5Xtw94X@%H<KOTrWp7fVIfpI~
z@(b}fGLi+r=nqSdI=sbZfCQib$!tX7NwW!$3{ixz_XHl$y6AM21sI?SMuic4VKBwX
z{wWNhIJqwqjbCf9_cPA~dq4NoVeu2sI4pj++33I}K#Tvq6h=I()s!i2Y%GMb9n%tw
zQP+>90zV@nUaAsSRPaPa8ixcwX<n<cpZ!5qRe?p{VXRv$YH|nnv1oH}XaiZuCt)ch
zq9c?B)&SC0zu;n>z)<dziC<uZ2qs~%JEEN88OPf|@>u1%wpI!)nG7Sw3<%FrcOEVZ
zOthU#fPNu-=qFjf?`Hw_5ag~(rkz@rcNtpVrKqz@ExS8&LneBkTh~1p7@_K!iqM)2
zjBTn?rP=UMh(nJmiBx4Os9g+r_6#xwYTbZfX$xCA6h?nAU~z63%X%`&klQM>(!szM
zaNXUA<J<ZtQ4pss^#*3tIg8?NYtWV$Dbrz+Xt9(jRY-f3%53!pOm#5w?YJ)eQp&^n
zr<3>;nwZ4Bo=?|zJ)CPH6!HT~i9ojy+sH9&g+&2mKs<Z9$j~CxfVGjC<=q%1+m>Tp
z%JNQ;ZnliMLwPQ499La7R<CihuuO=_n(qzCFj)+Yq9`L4p+!{@8p+=PEw>LVDD}WX
zF|Z^Et$`(CVD-!L#!-d#s6t`pD}j@VxHkKELmsT6$2dG(E8ZT^0Z0%yx*tnsLJxGd
zOzUc)=x9C-+^HlfmCa$5?e|_JEX-4MPJM}h5_o1x>L}t!LVotP08mPVg#6n?Oyo_v
zZKM*%RfOki;3k`654aK7Za-$%MqaJhCC{R`DBi?Tmd{lB5|(iaQ@6p*_>s62&7*8L
zh$lu^K~V#P(<ar|*V1K@O5XNR2EcfUu_@{TMc`m+U5sK1Q%DQ*y!sK{oEk4bVe$y%
z+eiM@UXHFvO>cOeObVHiLZQSiWV4YGtWtxXYL@fpHZRWZt}s>s{#hP^x^9FvCH6#n
ze(6z<enllRw)AG}b*H0bukuEz?TsOWO{EMr<q4sIoCR{Vm2HDT+|3ARsCZG?%oad!
zzfvcp{Wm0AcMD;Ssj||tBukNXSGbI8da&5gLFiSaWu-E0D`&Pt78s5_miAROYuf86
z2jv<oX-N5&tk4z+qiq3!G_h_rh40GnW2}&kzTir6!Nq8`T#@3S?Y|+#G4wB~y3jI=
zzf6)Gb<vnXFLgyd4-4^a=h*EzldY68@6$~OC#PCcg?4iIPmU-*X%bu|N^q6brW{Ja
zmCR^@G6tywbV7H8siY#qWYo!tXznBBH-Y0DiDWtfWfk(_jbcK?rxd+8l{H30X<}UM
z2vi_(VMP&5j0I&&k(4b(<S6{ymWi|o#q5=>T|c$dHL;qe%<)ub5G{_fPK9$4COo~J
z+~Vj<!^OqW6>G$3sKK}KLTwkMaMnR>!_!2cO<}BF3B#>bT{sWf$Tb`B`-!mTpU59<
zv_;MtUSgxR)-~@qwM0OJ#za7aQ$Y3Rqmf6&LOFu%uiq4klQlgCt5VL9As*Er;|P(0
zTU(#1Jlj(;1zm=13$x&vwcrhl%?aeu;!M92wlZ*%z03k;dH8OS@mjkmWu#I)tR*Ev
zMygJ9>{?(+R*)BA{_%N|msd_#TY)I0x9c^%C0{0yclrSosVmndN_`Hi<FW8A$ySAM
z{-jXxtT?ZH5oxkSHN#)jsA9a;8MFkdn3U-6Layn6wtapoDfALy5&kaR$TL;oMLN^?
z1qn`NHPB=UFyYRsjW@MbHxR%^q^f?y=gN>jur9c1_hX?1xlB^6X+qMyO?@nI3M!K0
z8+FYFIZ!XvIGhGfCl{JC!6UFD4P~NjLRJnaW|<5$7jI@WSvJJt*oHb12}I(8kd<xx
z=^E#+VL6-Ueg_WSYbo8jSX-pVE$gKgp?O$$U58nW@pGEUXhCy%>B!`}wIxMG{hFng
zF@><v(|o9`SSt12tCqTi%o^*a602)-3yXU|sZdSF_kU4PldzyBsS0Xtb)bpgkxJUC
z)UN5XrDWC!;cf)`o%yB)FYf2I7k8;Nry}5iNTiHvHJ*|dC+}o3+KDOND}%g48jg!e
z?xzQXiFGgdwToqATzn)I`?<|r(Y$DZJiIj}Gch0h>rJzz<8rY&OH#v7kDf8pFxlUQ
zOEY^ldI1%|^+rgrSP*Z&oF=p6Ss0z0HjH$94Rc5#I43$}UnGuY(&jBxoUIm6RvHP4
z4{w+P(&N->t)Oac!b(4<J4-%wt^DeDEev<%l!7BxGPiTq?yxA(p+4xE@sg{>*rSVr
zL{xKxOYxeBTY1aD8O1AO&;c;(B@5ewD^J4yg5oH5m)QbiE=gV(Q_tT#2ofw-XJ+)b
ztym?gJ(~VY`(hz^5Kr&&FfBql1%*+_e7#<0w!T*90?P6i0ELag)H4}NeY0LSd@dz5
z3|Ek6jVQ35YW9P_qgpUvTLZgg!Z9(2ia=uZJ2SAudOfTJdWcCE;OYS7D15V33ubgC
z3zaD2IJkA>PHJY3&m5iXMA}KL*XMGtQAy{e^7bKzI{AAqDV#6p5b4;BSyxqHl;;~M
zS|rO_4T=*`!9P+!uIx50GPgAxK2G3|3^zz5v&s!wgV}6d?2uQ)4!Ibp*mK%WLtT*A
z>Vibyjh3DAKN1rVG{;OIKjqCIMc!>?gJum}o*-hWsF}=a<^s+dG;_7k$+vk5gpTc3
zJd}a7tgG;n5@2w*`B(kWqD5hw`5kTA)=WW_t*<5by=7%tyqdLJCQQ3!BSsyq_8}9^
zTQ<Rkt?X@N@V&Kqqx0CH+6Y!8{tdDCU0VxubBKbrHbA&a6$gsyhEz{gYZH-H78hc@
zz9a%s)9V63HW2Jei|ds&LdIkBRL+l4x|Cle8<(T3*K^a8?9?D`vQt5Vk;YfbBvYVs
z;OLY{8fNpIu$-j6RlrWcfyLbk{_CGOW?ns492-0aiz`YpciMh6IUKmAYFv0j3PKEG
zA{c1nj2g)&MBa&KfOd+VGTV7U1ejrWumeYRC(X(oD3M*pvz<#guJAV95#JMxfxffM
zvooN&3lTelLh-O{wlkCw+*ouJHA!nD#c@P6X>FnWC@`fvYd2{cogi#Uqwy}k0!YRA
zh(S`<JC{j$z7y`0dRYPP!g6Pp#YOsG<qjv7Kp_Xbk9Q;~&9(PnYGF`F+`_2)y?Y%2
z>VB_LcSNXLi}M6g>Na7hARH-&(xu43EaDz`3qYh(5iw|6l3XN*gqZ7x951SgQ$4y+
zfV7w|Igom=gvN)izw87zl+@PrTiSA_!7rF8d5PX=4z|o7unKI|L`{Z?j?zLLx0+P+
z7_GWP$2qFBYYH}%U8nX!jsI{$`~ibAKWR%aDxe-Io&*of6-J5npkNH4j=#A)&%+`v
z+)kaaFuq!nR<yRkVyI_GgSVNaiHKbakzq=ujBz2HX19<+bb{*K4pp3cUz*O^7jf3+
z!I#=uI}hgitl|F8f*FxV=hBT82&(fv+b55!9tY=*R(7Kq;oEuU9E&g;$G*<gd`w=d
z9{)Kw7PelK{?G?FB8K%4QwED!obSc+IkasMTo+<ChrvZ{HlKn+F`G}CuABv*YDA+T
z6^&DUVV~*?VZWiif3d%R(FB{`Cqe6_-ps8st^Z6+N>G3BQnk)rDpQ&}#{T}ybeogb
z$voMe>q<?IZ9(Q3J~awTf66rM0+Dx=AzNGsnY~T?CFVV1k$=T`c6lh+GP*hcf3#hB
zciT3$|0*(1k4ugzMatSxrgbvuGU-HhCr#RyD(*WJMaf8Lk|8O_v8C_+?gD_|BH8KW
z{b5-GKoB5-i@X0czT_?+w%pxI)I{+{1$in(-azK$w%CYUb9kw-pIhacovX|jG|@}p
z9QbvY?Mu-iXI!i`)B2ocXfplT`DP<P)G;7EtM)%6WJ_i+i)TfVhMmpo-8$NE(=@us
z7td?>qq}P8?2H*?sbS<@$(``gU$u6^XaA!z@<Qv+XxinaeCgbrr$)!_r7Jm$UMw|n
zR&C+0>I;9x8^fM&HdC0<uW)vXf}%Xq_!4F_fP*xtndj%^Qq9Jpx$&N`SVsWQ9d`<}
z9F0sa_PaK`I%=_;YjW;bYv&FWw`-1#<qjt4zu}BjzhBN9-H|VlZhSlFdRb=`=#_S-
z!)!{YyYgYmOqgm|b@4Rdq?JK4X=S&x-&FX0shr(V52{1=|55x7So{t;#cypgmQUtZ
zf%%K%?z>6Xrmk}z;VV_t7p{sb!mSab)DR%#fwEhUh}yIi-X%E@H1sI6x+z1iGB(W4
zj5n6FUsKxYoRL<}89GICK)qv@<h;rj32P<*0%#;<F`w})JR288csYR8$F!_;ZBbFQ
zCBOV-^W_su4t(<d<rd3%WPaS5$K1~($(<X6IKbq&^X`oXV~OiyiK~UE_EWxNgH)+$
zFay#4VNd0-*Z#CN?6uq_<})(}H?0qD%A{Y(+6$1Q7suueRf3fTNY=F%vpB15#4#=!
zxpwckee@!hdi%X@FmCx@dS)nBN=37E=w8#DK>jXNv)_2syiUbu?v#~k5=55~gQn8C
z;m6(A3|&Po^j#~5I7x41ngtaBr!?v=#;qv@Y-S+DzEwP;J{1UJ*~D5$gy67I#$ZTe
z@|Ftbg`M}i1)el>Fhi0ZR_=4nHfD$D&aYNHQ-|SrTp*CFq$DWfB$&oOz$X|s#jGZH
zc}rIBzWKA#&QVj4DQM{o0bRE(dd;piakDEGn94f?7hkM|+J=p)Qb>_ac#n`+WtJ~a
z9ythy1Ke3O_!Q)cy{G4iB^OaIPSdQ1&Nien>|LZ#R)U<;d(<n%MO0Xx^}E!X_Lc$g
zKnvuUp!r<HXzh0-ls3~v&QW||KRk>bm6?7v@3h06jk`+yHHKi#;os<N%XzEj4dw#l
zRSb7|(h?wp!NjbJlm+Hj<x2zc=!GD}=|xj4H~3@pUBWy%<As*e-DFaU>|Ww8y3CJ@
zebU@wr!=?dWDAy^^4-FzQr}<0V!uAtIj*i@*~2rR&aTf6{1?JeEaSO9hobTMfFM8*
z59JqXDD{oI<OEW3Ewx8|x12|zMhmS{*B*sKxn8>$UPWN5^~{!G-q~ICwe@~e8&q9e
zvG>Ams-mn;sI5ZTLnP~n@!fqpI37-JAsk+#o^r||mK7$aB`9^LAL5ocJsE8_r^i6u
zZt^4l)HSHApWid-ERw)#C|llL+da(TPV+a3%M|r%2%V<RWxvq5OZ@^@OWliO_z{0(
z#mdLFVnrY5ATM4-&(Y$%+t#uY1bW;a+DG9`{t(`0;V>$4v;I;v_2;ysZsQ()WV4&Q
zO5GbWhI?oT=M|}jp`@{i)iW?FfiU(ghX-QLY)g4Pi!6%c5S>^&8F=U#Sx-I6k;)}O
zCdwctWF#si6?P2cM?fvhZQ%WSt%+lFx`imfmcCOp5rvcMk_yPPG~D!W3A!dAAd_o(
zFb@qwU3D+(9T(PV#29c4A5F&pi*;NI#@OY%Z^y>9Ri=D9nehc!MCik3K40Lt>fwJ*
zfkLYw;Tqq<-kz=4l+^#Rk+w6c`H~>P&$$hUi5Si&hDU3<+2mWN?%-;=sgxaFDv9CV
z+ER|SR+|yLb1*brwAvn7NmrgJO1iH^CUtSpR+WZ2%&p7FB1|KTz?f;}Y2i4jj<YhH
zJ@8#C6`5tBAx$~nn5|43?_QS=r`BP?qfvw-V>?UMw6hrXdA&ZbV~QA(_Ri1%H9*S0
zQbPgSR_Fhc*4(MhDp*!U_DhOSYW#i4LcR1uOViSAb*{G2m2d_a-Jchz_A4hh3HITY
zTbV1=sk=xs?QZ9tq0{ibe+OOGE9i#oV&_qhmv9f{jC5W01lhlo8f&q}WT=%M3;4HT
zyMLu5-YEkqR+jQP=$V+($?ew5&RbN0LahT$3tzX#32EN2%C+NQ@}`z}r@0fQjEEdW
z_TcL)WFm?%b1G!B;W#<o!{m$;=E=I6%#t(g482FGQ#n*z7Q5Q}k<-a5v&JJbwgSu0
zw|LrD`US>ilH|{>xu%jPH;Y1;yV7P?*HLJ=TkDQdo4WH`Qb#afN@_{wHx7F?6$OeW
zC<g#ZPF`b_=pMI%dWvzvRl%I0F(MbfBJWt_!HybSnuHjH&RaM9m8*8#^agRHcXsA7
zr0R|a3?OT0u#w&SpSya!P~-ZwZ@=W)xBA+MN%OOk8SbvdV)kRwC%eT&H##%ZP8qE5
z*SJ%wJM&&j2zjX*-QAa`y0GXP`fY>mX8nz!$rY*|!JS4`yT&-@E~9^bCXDZnC}AT-
z)I}~Gblp?^4eOmoS3l+Hx*ddV=JY^Hy|>e@{oa|pT&t7`ssp~P(j1t}9NlzsKSd34
z>vBc4(uzp+a^GK+0|Jz#*gd-3hlgY*Zo~%XvK|YHbA6rC%0TiE<U4|_J4asuqnu-I
z?UEB-y8;o8a*CYs{kO>g^Nw?JF9Q$&n9BjfD!){j#tUbHZx<u>ID1WrPMK+VOew(0
zPR^O@C#6IQ@Z>E$<xe4$DxEX<?4Wv-D+ie_jbo0wD^B(8qUDC-dY;or?3*hu@qHUe
z^gq+V%h#`*NiZOwU$}iRK$PvHk^9-Btnt~A7%-W0?%m%y)e%{!ldN(805+Vh{o7Vm
zGQphu3iv=ZtJYPAQultRQulscsS7`AFaCE4P8)Z=^v*rAYXR_!KuoO3NP_p|7_Bj>
zB}Ql1$Dz}H8o4W9HZz+6*+5ol5I-k;d3r0iA7^gn*H@74cC$g%Y3x_QGjJr~C^Lt(
zh@r%?#24Bx=pW(M91ka?$MiD!X2%9PRkVY`<<8jbRmaE{a^-OU7|FwKemeI8LDK)j
z&ijlOgKQZ><-j23G>ExcUPrOEKdgQ3?kJRwMF#{irk6uHNxi70r8$Kg#=HxdlAfH5
zTr_2j7e~IztiSYwBYS$ZaQ-3OYk!HG9Ja$6miuz+qLUjf@#S%WgWGJDCxsl}W<!I%
zKF+=C6P1Pg+{jSHFX_iL$En-bj(h4KoI?-C=hzjk_;G8IT)U?VrT}xgZ@bC2N`7_Q
z;nYr+WkjPR0f2?Jn^|n_z)|N89GPJvqcd+f?izvt*+s7NwP7$F+C7pEYOrf8HEJ+A
z8}DH-meo0C9@lznef1|Z8g~rCjKZxiooB>kJ1TotLR$cxQE7+iuvb%WVh|!mXo$4K
z5L%ky*h~t$3ZDk1KXLQfHz_mkxf}IUrpOqr;+zc@B3Fk39I_|F=5vy(`|oge-P@!V
zv)4g5?#MvZ2mo>%baAt5JeI$RFROJM>#HjTr+MJsu}?Xc*XE_&9qwaBP5(#MT&xjI
zOD2L+T&_f?icadKWy)&q+TA?+)>qf$FCwST{VPW3?>=31z3x=6;T>K-I_vOzp(9^%
zU8++|D63~{{E|OvL{e%WjXUb>H25rXYZBQclBgnrw-hSfuqrCxM0lIRcTuFM^F@{P
zRVwKcZ^ei(yEH=~1_WV$Tb3+NKGxZl#M=8A&0~Zjmo|g^^^7Zjj6a2Kbb^<-2(o~u
zw|+fJPu_apoS$5(8RQabh6AXJZHMxgssx{QD->6m(e`9DCr#s3IgOIFW9B)05Ixkc
zdAqW?RxFs2O@=0QYr>m-TI;y3uXgq&0o)q<2-E&iB*u=+&=iG1o+ozoTSdnkz@jn?
z->wIaO)#~7J&$QuTt=5m(-#C+-{P{eD}zn6&vPx|v^7aHZH;*g1EfORUb~&W+Qll1
znBDf@sI~mcZX!mc>(J2lpr!D)B*=>Mj-^mb3sZS=kb9T1F|tn={d$Rfd3uYRLq!m-
zQ-q<DZr&B6no3%!a?Yv$DKfYHlGDIq*tCxEs#$8kI&XEe?HsU`tS{zKULgxalWGo;
z<Dp3Z8UC*D{}g%@3I5`5b&i`{mX*uW9**Y{)26|q?9xczY%z0vWcK7m+xBf#QvI)R
zAKg{$Mr5$ur~3JxFmN$47_++hvr9ow)p38J$NNdx)<7E*5#q;jDrTGfeS`c1#lGVS
z@{z8_6=7J<=0Op??jDDp<O?9^=_gDDW8U{@C4g&xC2A?ZfKo{bW9Q<cUGQ-o<)4|_
zqTys<SV?iF$>E_4;Ky_g@@u6euM#}SZ>ez%rRo?;>3nHoZ<MOKRH=YDSBgq4@T)Lw
zN&YXX3nfIm<YMt-Dx&j<{VjeVL!dvW@+``crLD1&{+g<yt1!waG*BcT{DR8(+)+sx
z{EQn)JF|aEKY`>I)zL(>-w&x~kq4_O5XeH;`T<phu?RmrTP%ut$|7IzWtguj;E3!$
zs3ZVkT7(=;>A#{P<Ud|8L$r_;pQwU~2=C6q|G+)MLZfBme-w0oX|VHOMrwoHgz3c`
zzI3fH1KfLf=2;f*9PFjC`EsTp|FeERY#x@yD=IeGRln<UT)c*ZL5)4;J1WbnFG@9T
zX4T#c|KafIWA}x?6bXOs#H4a5GS3xmNIn|vL=D7>N~2{7D_w=A=YA^BNy&sNPgG)1
zeIZXkWIO$^6~jw@gtNVYi>0e@{$!^4gK}Sp2;FvDvAm^reM<32&owsmq?~Cq!x2fV
z9t*3k@C~@Us?89jX$|Q-7U(c2lg7=&**L%+4iL5;aoE;yG#8w0OCoV24mUv*Ypxh!
zbuWSpRV%X1$Z?G#;FM7*M;*hbX7Vv`k{_s}m7{4#j*%a0IY#P=bQbeieXb`s&QJW|
zIPdp0PSq^O9OfMuJ7R(!{hk;HhllSG0Xxw{Nyr20UxbWy5rh*9J}iXIWp=QbP`ED^
zz&c)EO)UCnc@``Js~Y_q(NMAi#~qiHixZeV>seg(ts`8VgRsnFUH%+?sEUiI40Od5
zesIOX=z!CY4T^KIth)RSe{mD`;`&|qFSLwpBeiH8<Tfr`m{Zbi4ft8u{}HwfYH>&r
zXG!NEf?RaJ5hk695~Q7l_q%{S{g%_${SgHpra@Lcmj4LT1D{{xHv+we-U^jDM!g7-
z4h5N8@$Bk4&;BO6^e+KN-Rb;2MqjDK4P=<jJ4=P%#Utdi=u8;^;B`3o+h<=|gh5XZ
z{Icz+0Pm`YX)n+V0bbORg^@JmP&H36gtzDgy*yg2V^lxOcJQvaf}D=}$RdBB7~ZA0
zg7@GCb--NMYDfdMbFhov{wWL&WMcf+HATmrBNzc;mf!2ylY?)Zd%L4rI@9wK?M1tc
z?4>VzaYH|t1r?ndTV%enl<pke$i}88b8%d?9v>YQj`U0pW(7U(dw<#C#bSedV{_qr
zb5AfDcjh<(#0LHR@BJ0nap_FV21&hv9d2;zZSc5)leN}YT5np|xVP%P<*Es#w!Zh*
zMY=GnTkrl&0$fSDO2jpJ8dCyhcyz#IdaxEUXH0|!86}*Emy!@vfgIqoVxkcOr^de}
zv48@>1(HZWLCyt=CO}C@IGq%VWMC}o^*q-Z&_N7-pNhn$S0il3w1{U3t|0v9-_)@?
z2zwF)9|N(&0~(*N6K~eMPwM{!2RSl;Ug`20_7b-U(+q@hEye7BE`m!*c?ADy*#epQ
zw;-g<GvMyssXrP|E7#yD9B^xUssMWDwMi`yYk-4^{dl(EsVzFDHrh2c%?xLX8MX^Q
z9{g{R)Y2UnitQ~BFUzdSR81zIJUWQXU?vEMv&7bX)aG!6BH(BPF@>TxL#k+ukW!8B
zPe)L8ddjKfu^DCqz*jPn|K+B}XXnk-5pc#HbvR!Q)2wcpRkxhWTgLDPnzvlT1LIpx
zfkdsDM6J6?lqM1j3_YCEgNF9}<qO^$K4Ew2OfgtTKVzPTQm;I7Zsvms{%Q5foSp7?
zy%e++3Upv1^BB+N+CA@@{<)m~wSV54{;7X0m8F4w>MmVcB5u)m(QeUv!44MT#y&j6
z3-u;ns`9(^VNCYCKG}2Sx~v<7^#-AtBRSpL7=^G{hc%AYU?U>!UW+?+c7|3@X0qf)
zhF$DGj2=`>!q1{<f9^7i{mxzol6}IQPRwB8H_1A|j(SrPj;Q98$nos(a3o#ODwNPS
zi9paF&Wo=c)MR^DXjLDRKTGdL>CANI^)tL9wW@a_$(i*-L3EvvC-6s*q5rS-eH2&4
z@FSu;Viu~Xs`6)WczmKFsCtt%Dxd(0Uy&83Uc+U07hvxibyNfl<`x-f;BF#&8riu!
zbR5KoQPDTB+d&*a_8H;naYNxph9M$9!Ey7GV3c3vM1K-YCzw13K;s8Y+tFLyeU)nm
z!&1jHldEHae!+^GGdTt-f{5X8Z2lINKo*)tjt<mXBCKDCT#HBc8rAML#mcWS-za=_
z@wh81;VWux8)%zJoSECuZkrHSv{-j_R}j(GfY0v2k1$J*90n$=nA(e3a0F6Cj@Ad^
zoH>&a`2<3q)hk~M4fs{=3``zkSMm#i>?)B%U5O7N_Fte#sTMU9#jpS-)tzIqdpKxj
zuE`#A|IgZmaMj`A{J@V75B0TkymkcFI>eYjH#l;$oB9OtHmaq25K=WCuBsFsnr;B~
z8HeB39xu8A5uu3!|9~Ne*$fu=H>CSw7ycXTu;+O?y9X4^gYd&DM-P<eX`JTh<R2sj
zXZPwIhzqnF21#jcUF+~~Ub)?lBRtp3U{(#~Y!E`rk}makUFxb!l;#fDmg=(IcQi!n
zBv1s_&C!;Cb|cQzIMnAXv-6^ia@GSNH3mYEj1K}z&1uW66(0G4G*(DcBW|vM9cIw)
zi(H4t1aEc~g|=+$j2+-djs(*NS8!-@8teugZ>V*Y?*JS=tLQ2t+^tH%Mv4;oGa_uY
zxpaUd*Q1Nz>Lq8*Dtyh6g_BYAzzf;uV6ckQc@XbP#B?5MK@Dz>SrBlXD*+oGLj<Qt
z8ouY-r@&jCr|WppI}a{FpeT#px2tb^7+8m#u8}=~XX3-)Ij$Ip5_MFU@aR}nP7HPm
zzmp@>->E!c<kF#qmk#Aey1(~a6HBSV7{gA@?dENSya|av>5k|0gDB5I%K28kiEn#p
z^$TwKt$H+b6lv2-I6W8b=VwV5@I52e&!ag^MCoL^u6+MWrKgvGU+hZF#|$VAW1m)?
z)?-R%*5{HGQZP==Zkakpo`5bbLL;HxSfOy4IoY%oz2?av>&moNQ>G2qn6HqmKq~hN
zA60teuu?8YZI_$Sk<r2Z5)U=)8Q0OYK<{+7I6@_!o^L+O4V`A0p1`JTmidJz^Br*B
z_7Ib`7hA`OnGyAv854t|m!lk9UjfdS!)w$Z3ewYRhOV)h-Ow#eM`2^{CVD-?CMMMl
z8^7-~3-VeLHHa0~KX<RzYQ>GBrvx!F)+`Q;*nmuwX_|=eb8%4v<0U<ha}%5xK*GkN
z6vxf-5_v)cNJKO+L;?g5*%G>VBb;`#N&CqO&}8<|sdl5yO&u>i>5nEx{0^T~kpyob
z4OV0%o^lZ(pz*wR0s|W2hYbHWaMv39whg(KHz3!rpU{`-TJ+8!2o;5^l9^yDgsU>n
zP6{JIZ$&gZHWN}Hxav5YbW~@KhbLm|rqYfbH1CXbggtl^)s#tiixa+PT=e@+tpO{(
z5^}1U75!148v?_3llz5?lczqiW9)yNahOoEhm?EBq%$5~ANZNPe#@x^W*8(dJw?}z
z!$5DZSXwFuIWG$2>$hWuwoDz~>%2z|_9vIa9s^UWtBGylnIZc+XO`tSP;DJi?c_P^
zWZB?|tKBtca_KdQgzBC&w%u^oM!yMBh&5&GMXX*KK6JAbF>F+{{UQh}{dk>vf&AL7
z*N={K;NVY!tqa|IF;Grhlbx6${^BOYpN0Tdb{aPiq&M=tt9yfWB0}K(C)R3hdDhBu
zML-AQt7!GZRc2eWcf<a>`Mae5?rOArclBfmU!KC3VDWA}d^`%@t?v(qbNY<vbBUk#
zzoXBm^tqr<s(t*JKA+Gh)GnhXv|lclPy6&QJhNbUu&#m6A9@xJ({i79);z*5-=XzA
z{7{e{+8tqo=o7Ku?r7v$m(pt<q=Y$?JODNz$a4{_kmDnH-n|cfMJ&g=-`yWVlj|r?
zd!NwHvM2k6@`ttZBu)CLg2XK6Q2D4<X;eJ+EOJsW(?0pS_7Ks9YT&NyUk+8+MAtmH
z&pwC1P6FRg921s4Y4()D+;U*CsP?;NZ)WY&hs|rH`Hm_dH7_+QpP*lJ)>|keJUmIG
z`T;yF9OEhvvU791k00HC^0e{5`n2oS6Mg*X5l%EE<siI^EDkvG7{suU7bEdJMR1$-
zn>9$M=wb|e0`_W75hgB%>WLsmuiL^C0d9}q%p&qw(B2RzdC(YM2Xm0$TP}avI23}M
zX910)5iP6(#fPg<g~LM~Ks-+upVjzkh3p(L4%McUfhXh|sDsrF>lb>rm4j(|{aV(k
z9UKOm&B16(IYn)bPE_-&?bvta#yYCk4~lf1hY@ZqG*333&fe}iJ36xH7L9)DciEa^
z>;IAWC+uw-$-*f7S0tVs1qhomDKBwALA+j)NoK4#v7KZlG$#)TLK0#MpaIabEb+hJ
zs_Ly83ne)-?|Yx`o5do4UaPCCt7~0F#@_4m(>O>tOv?zZ5)xl5BNYBeaGnskra%VX
zZ7-qLQBT_za2t=GF;Q)n)IZ3WXKkuRUNBd->*vwC#N33mHdbj)%gFbe-MX!CzNzYr
zLhkf(gZnazZkI>il|06R#93lt2V|R3@&+x6vu7bNAPEJO7DM7YzJWE=JX5Nfm;!GU
zxf`DWn5JhHGA(GzTZ&>JIUA!x{yEc|)Vq@IXaNp;9eG|kSp9G5e^sgETWtpS_tZz}
zfQp$ajV`~on$rlC7j3V@jv>rZ1QQX*FEj@fB%GvZ{m{MXzi0P0bw2-wz;+x(#x0@l
z;5E>piFXT(yAy^f&Rm5U-crZjR=marDQ(Ibam8M@n=r8gXq6x%CoS25FpnHD@)DUT
z9rR#<H)1OngRy9)e{6P&-S8O(Oa+3APIb~G*Wb@qa()<v4|$*vaJ;t5GQG=^_gl>U
z5?NhaVlS*ic$IJURcdSND7=3#=@H9x&<jRGJQ48m!NG%G@Vde{2$I~PM=JE?eRD8+
z)K8QfB6ZJWA<Br)UhkRImG78DYCRc|#*3n<sR&!4H~gr=)ZhzX_hpyf=n+~$syHVS
zaQpHE)<N5xmv%5BQ{F&%J&jOT@D1P^vYz$!aiVa*HFm#Bt7U?+w$|(}5%7vVilkCc
zRbz=9FqyT)*JNGOVxw#X`-s-r#`^*qUf%^PmD-~VC-WLk5(5PonSUlC%KAF!1os|l
zM@4-q-)=1uH^j<YfLKz4GV$JtWO~$S>|px6)kpaH`LHJ_AO9EOuO#!^R^UGaNEd2!
zbe!eO1zsgI^i+Il0#6zCkRid3Jbq2Dq}^#H#M~KVQX30e*kaloCm)ld_xed}Z!y`j
z<$7!qJBEg+PFgFTrHe%Zw=x}ADQWmKZaXVa(gG8>0vINLCod@T><22KpSGEFl5I*+
zjMS;2;o7tOd<A1#keRT@^9v!t!|MXFH@%`-_I4>9le!+E)ftp6lOHk^pIFB_8>mS+
z-44jT;Aph}@T+2Sh4-!?myX7C8AH2k{43Crn2PF<9Q4pHHbMRuwv5>gi^#RZ-_A6n
zCArHq^I&w^4417roKwItq1E5?=S+nVa2Tg!>|c~{Q4K~LUrBdRT^J~KySC#hz2g|4
zaHCUR!>fIw8V~B@B^Xto!>LGfk|^vAMnm`y(zH*V>MtpcY`1JihE79L?a@46R_TgD
zIp@p`D0Ht6I&gj^i<ivHY+nkH+KrS=IP1#xqblpBNcNg{UN^dUSY}aJxAiqsl}5ie
zjE`7_Fk~~bLB$-8EIx&%7&mPd<LZ!NvEpL)_Vh3E;Wc(Mk!v@@C26p^tkvUm2KSh1
zGMz~=#4;R?mxo&EF<xp*?Ri*Cmou>rWdMe`wemcM8pnt30x&bUD`^7fe4ifA#*4kZ
zg~Aw&SucN~IYf9&Q83qsL%)PB!*<ldX!a{KVZb80yYu~Mo_|PK+-kIy(zQ99r|a3+
zRIK317bgakCmfWUx@pyxHM^aum5p}wQW~MWbRFJoBGQ-IA+3>sl#cqB{*5+N)+NYW
zwWZYK*5MTDiZ+&7ISN)m#}41Xd2PoQEgP{U>y(B){aM7%Jvg~^s%1PdhJp^1p$X#z
z{bh-YOR5eS^-j5y6IgF2YD40sJJV^p0%?yi>A_7mU&6`R3z&aVQje&`$*67uy(HQ_
zjC2Y3+&f7>VsJTm9@{>$8~UK)wH`9v14|M}J63_8Oq*>N`Svb&rCLYKmx`A{pR8zu
zPC8E_ZeB0WZ!5lHp^a{oWYKPBZlrXY?COZC(IR=GR?fsnL_G@2?Ny7;s!V#3da0-l
zZYa-4Y5Dcy0g=}~6_+40$?BA{>cEqMM^OsO;*j#g5HA`Liq~sytFMyx;T5|02X$wE
zo|=;42Fnukv!w{0X!vWRL6b$NDzV|G2#)SkuHRwVAzX^e(?sx`%i4#r&5h-UmU0v9
zx9x+AhSoFuD622r;NcKe!B(=GOcSPp=c9Xt?9AZ^lOJlY-dwtIi>vAkeVKqu3NW6v
zjN;@t6!THy;*i_$4SC2}FJb)!TNJ(2(dAq(nb*mU)bOM$kfubtiM{wx>DwfHHHFQc
zOrbc;Z5dURO14(e-s~(>+Qjg#gp;NnpWV#laBXu7jL4@h1T8Dl9+0yWKNXPLJ~cCT
zHyq>Drs+7^yS(I$5sgd%)Y-q99o(-d6Q?@1bLmE(*WKt@bXAL6w+MmY(z!-3Pfh<i
zyc?1xorG(84S{{}aOmGg6b#1;OR{L}YrIxEZE1lM3s$d*=EvBv088U$S#Y<qw#`Gs
z=+h)WPhcUHQAdNZe<@R-SYofT7wJcnC4ikcdP6o(iuQau+p+7W<T}V7*7mK_{Y@r2
z=#jCJQ>5*xCn#A6PFoaAEfsL%Fti_l^+V1?Si1uVv|~ur>KGF74Q2<&sZQzatgf)e
z1PL;RXimC8;S`wE0k3h_ocDJlm;P91VyW#YBP-%(@iu`G%by^19b~>qNJ4|abBoN$
zNsg)7L+hppZSTqb7t6MI;;X_tM?36kK-GG_CU#p-n{if`qdJX<s*zJX<2tPy@LcdB
zaA^onBIgx_=<1OmV+*EG4RUYAh$?8c%>qjkKt*-?@G4`w+%h^c?w4Eg4<@DSU3N-W
zsxhgI(9w^I_Df|F7HyZx1nDGQDhsoPQkk7BZOu-06Sc4xsqW*N-<;5(pP$i!k}v5~
zs^t)C4dH!Lx&ept=#250g(Fyz5vAE3lL0eb;KKT;(79G7*@o0Jca}r*Sr`cR@fsst
z#P4z+kAVE-1diyRIH|TEcH=goWrne|9__LjN|o{Tb@S!Ftmo(s*}vKS1RH8^k2X*k
zrfgGb^V75oXk%sDhgpUqlJ<_02R>%qV6UmAqtOPBq5>|)=HgugtqI<(4=5@0;{0aU
zFk-2oL3x-AXhx==>g_$=f&?;&5(Fkkmc?6&C}H@fo(#<xnUYp}oP{cf$UmVuolZoN
zwkzqeh#sd>2*A1d+WL0P4D04)(1uH8Jwp!<``e0l+02UeNppZ&iV6Gekp#n6VLfXx
zbMXsa6p^O24oGf-F7NHFk#nhC5@OUP;f7ap1QMKROX!m~FTy^^1=<m4jx8uGSIzIy
zohR*>LfY{r6sP1$9+Zf|UZ@OK|0jui*3Ajp4mIU|Au0EZI^{M3-y+mGIe<?^vl)P-
z^qrRo9P6L|5=u5a9Ip=BaZgEkS6a%uY^8VQbcH6f-K21ZV&ysI3pthnlJV672LfmY
zzey2x4D>`PqYkYxaY4E!ijVAL0aQ|1gW^I}5GHgomLY-SA!~y4SgE8@gMB1i^!tdl
zBeh$piU8W*ANgyC7vXZ}rR26I^BZ_A&0R^^#Ha9N@^vs2XW>Fc@?FS*z0`qs;Y58B
zQJjjo&&}<Cjsy#>r&|y}o&Y>03A?_2ABl6$m^wj<RE$ya0eU4ud8FnzknotCPvnmv
zHKU?(!TH31M}lkMolHg#f}!7kvj0(oYH;QU2GX)6p^BgNb%g;`@WuPkUh#0zcbEI9
z$c?Ml=>io4?<cgp1J9i+*1kL>3<xxW^y_6{NS8+j3HJ8h;~A$)=t@Vjd1?u}bB7b|
zzLzZ9X=p|wJ8d-N4?ZEro*upgh8yFh%=aZ1NHUDmL&l2K!=YljNC&M<I;tlT=_Tjl
zr7v_Dd2WT?%kb2{7n5azyx_P6$j8*F(d)^%T!wloF9)9xjuwKS5M<)F@I(KMw%?HE
zfo8hPXeGD%D{*1y8>3?vijKVsFB(kh$MBV6Qa=(B9R9Yq_fcZX(FgnqV>!I+zr>$v
zRnW;3$N5o>^I-5P_-IFY;4{*9;gY@!N&1kF>*6;i9tXI0IndH~LK_8C18}-zcpq#b
zA{qB0D&+@GTbHesKj^|jx$eIU<#y<M=M&fl0quo>_n|*}F!<UZpYY1>ROOAk8hd*x
zA&Jz>e;_6NrP7=Hrj;rH)eWMKy(d=r>FF}@oU0mQdr!Q-vEV#e;++mQg_s*)q7x5)
z^3?g_NVV7vc#Dv)<E-JS#g$fo-{5O$I%@)VpDPnMYpfgc*!RX~vCF>ten*VW&l4pk
zjU!%e|C?fNZkVZJE#}~rjM&zYBiAJmfD<1g44h_y0(w{ckm?0jpU6EW7!6TD_wjZ5
z2^hDaH>W6C158YYp2$lw)ORb&B0+Do`nUtz500z<na}4v(eP9LpOc69-}Z(E>hc(5
zdF2IUA~T4|M#gmU1`xj93$}$3>gr=^^nD-y^BD8J(euSwiu{ylIjMsym3z=;bNgDz
z-7L>U`+oF5eK0CVOM-*~=m74TuvRCqlY*WxB-#t+3E)a1cJ_kk1g#u{D`kTe^uGME
z*V>}&9+(F?K3ph-3&w7!4_3j5IcmcwW${;SlWQwqhYnJWojqC(qBXri13+e8?xMB!
zMeFC2f4hdjja3u|`I_7zIsjMf4wR@C4HQY_tw#A&HFvjxZm(s=S}D9mkNg&NZ4t#`
zynq%!)^VASqV}yFtWEd*)<*buq8;y}@aiMr+hs7^h|{PoB-`{n0uqCfZ!Y<FU;MVk
z-~KMTViMtD;NFpmA$%LX*jAzG;0(8B&+pKxUT)W_exH{xATm=S#p-t5pDlei(XS&r
z?VgF&sIh6ci9{JBja>8w0V#dj=AC|rqcJnS&sl?O%(d_HIM?G+KbXl=fj8v@g_!z`
z%&g4Ppoop_Y}u6m!!zLAQtog|H_qi2y0=#4*&RZL|2O7rCD8eH33PsY2&@3zG1|(u
z#Zz9opCyH<T1D(?Mk@TGxq%nHc|uDaKMM;Uj1j)ey?T>;-9!O3nsK_rZ?zcJfbeu-
zyVypicgqHBdE17%W88KKsx%kTOZ~^Ks;k00dbuQfZRuT^Cm0?XmKA;#g{Ki5ykryY
zO)sOFORU`hpqG(<qdlkkP3j75lZ!|lpha1r<se8_mzN$s3c$FZ2;;WMLZL32Ucsod
zg%Oh6vJok!WH#Zu%5)9ds>_C0PZFBJZ;?7q1hH-bnukkChafg1*cv66icqu&Xz^mJ
z)i6eExP{-M^t#k$#3yO8TxerMl)@ucX=6h=mr)U<L#db-%4~sN0wST)S^YJhdKf3#
z8Uvv<0tVAIT#TqFFL^-6qNtz&<ZPs%9+OJT!PK6)L6%Z;HVla<p!YI~jJb_{5!Rkv
zQ=)C{o#$?I_#C>Ays<l4L^rKW6ae*A*@0(MZRf6n-?}s%1}Q8C8WbiVlLg8Fw?L6u
zL~d(OPiW;?3}fndvyfXP5_LS2;s7}W4JelJ#KEq8#G|pw31k|YG}~p+sG(R5*$0Vl
z5|Uf^*u)j)?e;~zam~0%4h1$*YI!{~8Tm@(^2neu6^Mg2k@A@{aZE_1n(w3;bdkkq
zL-=jx7t(;{33`YYm5J&kc?NQL<QWq)6CZD^qvAL@`DD_r2o0q#4<ng64t^d*CV5=8
z|M5`jBL`Kx=Pi{vQkfY09fkNPFsPT!@>T6OLZB4Bzs(pIZD$WLZe2oAhYHe!VT|I~
z<N<s2=7mgLhe?j~1SW$rC^s@hF{7h0P>ye70EDad(67~5k~x|iy`Sk=D>h?UgpE2w
zS(Pq@G4{N~B?1&0e38N(5&4`el`dWSPDxTp$t>{n@LR7?XSoKTNJNkDea9HGU^U{a
zR_)z5CkFPkLceL|Kd20B+Oi}ufuGD`<DEx7=5m=dG^sM>G6``yR#f{nn1dEZ9@w}?
z6^0J#P|#M=5rbc{G@b9#RyIyD^vy%X>OaM$`TZ|_vL$MF%EQf)tWEPgwPu8$N2Pox
z$)2Q@CI^_DG+`-Rg!cAq5DO<pS*O*3zWu7H9)&Vb-{50JQ6}ZvL!Gs+&tL!Rh~gEk
zoU;GIvP!S;G1|aQ0674(d*^#Y-vqp@_8!TUNSUrq?Y*qshQEbRE5?}DG@UR+WR%ZY
zWDJ(t2pA=qElCy=n~!K~rdpP<v~QnOE^adBs3k?l^^(-*D8If|MDmb+qVBa&Rv)Mq
z)HGMb{-M4B?MnOmmPEKY;A*j<(AYW>_Yp>pEn!(UR{lUSz$|_n>_!&`rW?2gZO~!7
z8=MTI7@TQqO?=lpK>1Gbx3H+3bEw=cA=CJvP)C}Elo)3=p`<Kt<iRR&<N{}?tOj4;
zAeAsD_#8Me6N!4WH-zL!Zs2weiQLJM8%Wv><#>&ZLc9=w$Y#;lZ5e>%HGm+*x+dH@
z+gqhkyVdHN!QD8m8k>Ln`fY4JyYPOD!UxvX>K${n`s|!uz~`}SI6$+%Wv*8864~Uq
z>D&_XGQp`+F2g5Nke;)2k-W^LJvO|^Sp+~#@M6N*Qk-8|m@;(JFN{@a10?Ij+zHCj
zY%`id=O&z>$_hgy2NSHGCHrrHm3#L*Su!rEXt-FXI!;bhmg#BcwMETIpapCf?x&LU
z(-oYuOv2x`K_KOadSSY$+e+vA3TN+X8;uEsfUBZZETsx@E9m8qk$kJ@+I9<RBk~X`
z9BP{<@uiGDNkT<Us;9YVONv%FLYj*R^V|xI8C%(XbbWn)I3(MzSJ7-^koZO9asiel
zlM!+oYlRUA8*G{h{cZi(4~J56(<m*uuUtlO`7vrFgL-p&cS9Z^{I0>lD>R5D!xCdv
z4|_4gcXOqQQLk@`0d5^EO_iV$wMK$$<3zc7-46Gs5yg0%WE5wK1D0{M6c7`=6Eon^
z0g{rB#g?A_r3hDT-s68n>LZQk&c5SvjG=9zTTDlp18l%&K8QEkYY?^dh~m#sH?%tx
znX`VXPYHQeZX~k$ni|*k)qZ)I#U2~%)`?*al<@JM?$W}pX~9J9byJ5@19uK|-=UeJ
z)_T53wKhlnu#q6UlIz~prN2Ea6<;@Ne!Cl1&a&yNk6DcA%r1{!MiuTAO+no?cbCHH
zq_*a|AHHg)D;H^WZ@@w}FsFt(%Jsx+qJ;S}b|bo)jWt#&q|BbOc@MH1w^xcrqY?fS
z<3GxVR3lSiQD|jQXw^WWrHKGN=X+FBoh4=wl5EU)4g}p>hf5v&ODJ2YwU72#A;aG3
zeC8WR|FzYP0UD|r!doN!CQ%Uk`W<t#U%77fE300VM5u6ROIq8?QOo9xZDyI{a3~gG
zIX*sIG@>V*gbR$AaB{<TI?>zd#BL{JmfDD8P~XzGi(v55K=5U2)QPTiE;q8;9b2uo
zDVV*}78a$RuM+uwW+QK`3-sxh*tBnZdt@4t$)T`DJY!jsnL#<9H&P=ao_$Uj6|M{+
z>QZxJ(%KL-ZBSZGSwK0Y^?DBOX}@`AyLZt}EOcuXcpYnQtMpb2k0MUJi*pKrVLo}c
z)8wleCU%0)Umi18I`yVqkU!kz1i|>~P@E+NUWJKwwIQ+Ie@H;gt}J)VuK|4M1+8Bs
zKJ{#qWCJ+0&B>~&*evV~rGr6Ia}ZJzDSe?FBdp7$sGgF&kjejU&}_mZP6hIcpjX|D
z#g?cm((AZzE7dt3F495G2B``|3w?^x4W|#48T(oIZG`dAGQ_XsWA!?nFVpOl`Eg=X
z&NQi}ut}!6l<l%7(}mllK9rmJ$n6$nNXIBacStK;T`iMYw#hKyIaBrGnEpHDcgF0z
zR#$m@-5~uV`{uv~#%BRn?$V03c)xM5*qyUU6<yk*af>a7#EBiZ+;zNc+bwccEtW>^
zuCD!A!`IQC!3sAlwnfrZH>#WJ*4gS7hvMdpS_geg-h0cSWxlDK?vI<6Fh1WpVSLzz
zv{3==ZlO8<(P|U;G=h`zpLYm?s5enP`eCK)CFt46u<B=>34Dk~AyK>I7t<P(Ns@*h
z98PO=-N95R>`{R?dC#q@wnetYh;}z{K~Pply?avm<9|l`z~odp##`A><mp40fyce`
zk>WXO#=!Xk*V<#Guv+9LX{1|5#^(iIDs+3y7W8s3a*I<;NAx1am3kh9nfKt)gKvEC
zQxuMd2M@%b5wNm9P^2>gzUT5lw@i_ZcZuJ-SgB6&=B)#9w+k8;;h#~zuQdV%olU#D
zmHw?m1;b&JM$7b5LTR4N)AhB(&(>0~zJa<s8MLy4P~2JMNtu0F?Z}<66Ya2uOqSbT
z_l+0!@C{;l<4G$A-;pHgS%jm2)^?!WfW`+)y(%#gk{NAj!hYH~KqiuWLITELBEU5y
zCkZSZ*B2{qRNT)dZlj4bMWVQACGr`gHor$etMW2gJiVlg@9&X!#h}w3-q2D?WWu3|
ze3fK>u?h4OSp9|iq&WLneIJ!)rWLgs!R}C&S?2k>Cud2t=q#aaSKGeR9{lceZX8vS
zBznI|tG&z6hPo>8%CR-!{Ato^`Ky6}j6UI!`7yOqfsHn^H@WYl)^PN{+%PN2RW>NV
z{Z<NapHqPQvtZax05am@6%=sL8YHQ)N5jl%aMkbHma7hvRL9<tz>!EO=$NSGo4m`&
z(i`pBuKlAStMvL^x>}(Hb9=>u&Wg1AyQ)3tto9_!vrAM#bya=bS+zrf+6dO0SO$=m
zBTTgFc*u>B5Qv`Mqnfk;twv>$zF{W*(O|UUpoet~6J}j1sc)NgsSy!KBvwDP@n;Ld
z2H!_`K_W5WWE2d249Q>0^_d)~=LEq%c|cE6>r~M!Cy(KkkPZf@#l?5m*Ko|Et|VQE
zTm^ceL9_%DRUhscLKK>OQWVkUJ}fN$^<q?_$6<^HOPI(V72IeVdYdDp1f~ejG3OZB
zfgKy!a|DCLOsPe{{V>MJY?=!#WyI359<kJBPO~0_P`>-@Ygrm2WXmvpb4wc6>@P6d
z)ij-j$uyhY$WN=8@FAOlg-H#gWuCPB&_kt*#5zEcajs>8aG{=}GAkim39@NEBb#)i
z#Vj}j52rH*5GMTkCGr5V+DPtDJeDWQuaWrT_Q^2Sfr5NOSXo$y!*O<~&85eg%(#W2
zMq%-H!>j|Del#3Xx+rym#yBsEq+I10<!6i#S9i4IM7eWumSj6L5g;TQ-J~Ua2bG3H
z8Mxb)tEV1(g(9@9ak{8Xi*mD2^z7ldILyWcOfH`mGj`$>vvFgW8Zg~*ql!{*RUs3-
zi>1{S+cuV}jW}F3+L%i=T&jf8OM8y-U}2Z9YP#*KjZh~OZ2i@At~co%HmSKPuHlvj
zsJ*tRy_AwUDJ@@36n;t4Emo+5UI=|01SM}MavO3oeKl?R|K-LU{n>dO@A5r`@gl$d
z7%$h0<mvk4Bq_>pGz)v~tDeAOKV<aIoND0#6s*5gMJZ_cF)}b^_yCKs7re+z$xM~u
zV^c`K>TSGVG2zdzQFx_wihsL>{XFcO&Ml|e74nEJlFTr1dV6TbMFsXP9PS2jDn<R9
z7KO5pZG=>#rN+Y4Vqs~puxwx<DS-aO3JMj)fe*O6!l?9f_%oV~8E4eX*5~u2uq?rH
zvJ93I8yNzXE&`QGXwk9dbrz6Ld+6_EXbl{PudGUT6U`dioZQGa+ms?oTmhs4NNP<y
zs#oNW0#e>M>IN}Sch(PkqUQ_vdvlO3&hOBLofr)7-rL{q$t;KN7hlIXq&JE)oc#Uu
z%OCe8YnGl|)~f`y=f0=Us7cT3^|OA@?*%=KY+`Nf*G1Wq-03f-)Ee@9P|MgTZ0WYn
z1T(VtZOIru(^6^(OaCv1IZAG%hak@j7+A(KDxiGq4P_oex<+9=Xj|v|e;{_j(a$WF
zshutt2g-saXAOt<P$(-O>w1+hw^{G~g*jKTw`JOiOt`M6%qN+lc&j$TAF{T<xBsDG
z{(QqQhc;i=4a0n0Me(~Wmpj)U*D@0ri;K^cq+rPG6ZH)phlo6$<Uy__2TDgWPRA*5
z0xBdL#ch*WK!-Lsn<|OH)x07EZqQdM>`3=b-J*g%vRdI-lf9G(8xcP8J5Y3w{nW{z
z578*szBRvUsgo;hqo!~)rVd1-xqd1Wl@3Pevd|nptYAsz&45qrHZUpik`m+_bs~z-
zMH0JRFzIlI5s76BQ7l@KNfyRriO8H?I&i>(GQrj`$SJ;7m5a!}SGL`XolnUE`y4Rw
z`g(|mYP|Pr)Zj_r7A=%}hooX&eBD-TY-}fF=)#p+t!Qs=CEZHkAlWVHNm6=K7n3rg
z4Z63&xF)i$(fYwTrGpTSm*_xEdb8!;9v)0swb>pVDH*gS;1g33z<DNBtt*ABo^j=&
zcA0PQb|Ffl@1qmTG_apivJ&Wc{N|*h`xQGA@cCElqbbagXOhgoV;lAj8sIgOy-y^n
zPWxPRG_7Vcn=HxnI**pP)jJMCDcoqedE7O{<c`CFs74OM#{{Qf5qs)J=rWHr)=>;a
zTQmB#dSc!|GR30H#1rrpFDvB~66k1ppHYmxH$WJe>|DwBoL0<e>Dz`o2+!9rxLZ+W
zYtoSH&*>UKn-{N(uaim?6f*InydcQj?68H+-Yq6SML|KK@`_|#CJWfT=3|8UQzC(G
z4d-e0Dp>)~{08T}vSl#JBHjM<{x5+AcI7XbPdBK4L;y++ZOooM4^>sM4u=90u9%C$
zLV15+BInXlst+MD%;J5xl<FOE3cujaD=zU3Ca?T0JRV;j4&|O)(nf`Q)?gHdDhceX
zFrI!e(IPX6<F9-{6Ds86`$0m<S_b#A8k6sP>+l1eCW8m{FUR<${qp}yRwQwLn!)&>
z3rtwF*r8C9J0_6Ir7v}<7viIM2e;D?Gw~vXVNk@i!TZAyt~1`p@Ci%_@OV&(2x*!I
z%a2k5l4jNDkp%fig2vz@iRyguCY1H$Yw<e#(PYBG_eXEW{_F4@YY|j`6tDg91vUEj
z$oo;84)mAYhjFQgL1Itbr>cX?v4**km^?$F!?*a)AK`~1bkxHTLH~pme;%Hy{-2Kh
zKaN5m21}A<{((Pmr0{Oy(Fz}i&j$#DGw+%BR=gMg6msF8i$BC~J~a1CZ`|h+CEzBe
zMglkVql1UT;pD`7FP;jh?*|M06RMZ}5v{2l!9S5E{qs;ax3_0|e6M?Z273j=QK3Hg
zTlV{pqrr$;kf`=k_{n>RfCR$yjyfBPXO`N)x{9B~Ps&8&B7CU|;rrhPr~XDE=LKd=
zq+b{WPVbNty+bS-DEmY_bO$2^*~;8iY3Iz%&RI(^jcJ<@tRMJh?X<gUNfVkMmOiD8
z9+%`gSBC3B>ch=libup;tbGyp`v&3^oG#|Ml<N5T;H%gdi!ho-n!!4liIdPg-4~yb
z930_4gYdq8JpI(~&!GItOxWN3(QL5b&j;-J(^$bzq4BYZru04c4L}#T(Jf3rwGmjZ
zm=P%Wf;+g0mmt$d#e_NN)jN%6KI41;7D?U!n9oAWHNpgcDyc<iGH(`RFAWPLEH&yg
zN+}(M8MNEi)%vNq4Zk!_auJ`$nW3IAUJ-K&x<VXTA`@VekrZQpCBcDO@D*$rSV+mG
z%IAIt%RN@?z)MdNZ5WbRiKU1JsVE0Be>Igz2N}atGsI5a)`M0a-~s0W9^kzvZB~8A
z$~@G}5w6HuUm>Qh!cwefc<Go-qnReXsUN@-MQ{c(p_K_!z6zpHwPL4MJmZqRzeQ#-
zQa1l5-1A_GDXZR*=g|<wtO}dRZxX>6UeUP#I~eyU{sr<K3^!xo0n`G{p)^w3WK4gL
z=4ykl;XPI+GiRcraG_ZPV)`Y$4|Ad1>cawmLBnArqJH>5<oHkK?0vOssi*Z=<}JIv
zK0chI7df?Z7%Q59MHeA<iNyT@4EiKgWyaE$QZ+2cdn}J;Ias{v(K)-TMlajkNyZBp
zlO&9)W!MM!4x3R#rU*}P=xdzB!br#}9B7XEHKbJCQ%93(N%khCLL9qj=lZfMFS<lJ
z3qv|n#dJi9=@@fXBO+RmAFebeW#n55)YT@ZlV_zD4PZKwOqXb|r+Xb&)4?E{g|SdS
z(m|qs7WQXO@If9WnykY-K%NAyMZk&V*7A2F*(TWZ?{U-1TMl&zJQ9Vn#3|uTO>>X0
z^@|U1;K4~f)B$37JQl^o)m(i)XmQzl;M)5i@G`7*JY#pK%%|j<@x$|(_`nX(_v|+u
zfF5%P9RDraPtI4Bw0wXjH1iBoo6hto|FK2x+@ax-v(^G<l0bx6m%KIYQcCZzwx+hF
z!GoC_z2c75@7wC6+PPEZ1J?IV(TbY2N47Sg%ht+N!IZ|0&}9lQn})5e3nM-3v@O+_
zEjvKANKB3L_s=mEao1g)$e9Vx(_$#1W$vi*?Er^DN+#*-l+SB&AoIZiqf;HSacTZs
z-@@&URf*9nJa9v2?fUo4y(ZcJGfy)Q#p^5{jH$id#!5Gs%(TU{egQq`KnDOK#RpU~
z${va$b0l?EB43~oKG(u`VvuSAcvQ$|7(xvxyXA#6Xj0-+4zsbJc0eH^pVRsnO@{J5
z%I#AN3zXnn)Js*cz_y&JLf!i9P&gJwXg(N+$vED{V|Ld|Vz0o1e;NZ%N`DS!l68wk
z2KNDf9EbS!z7?KCc5^P%7SV~qT^r$^4<K!D)Y+i&HFFA##BdxV+^*7TiOg^TefM!-
z>}ep=y|2RhTlX36nl><fBvv(bCUTe>A^aBGT7ZmU0LzP1+R|Oc5u98Hfo|!r8q=GR
zev?y>1pR(z$V$TDdZb>D?CX%fKd{ZHHxB}BZNu2)iVe+xc`W6gAxSx}uf6OLW18SA
z7*e2qVU|iSli^OP{E$At-^w?36ubG}UgC<tjhBda)=i8c9IgndQO1pp6E#U(Q7Y=_
zTV?nmJz&5>jH;uXD#s{s4NG6k)#LggVm%1dz^M?1MOaD+FkxNfB+e{!bdQ4O?(afp
z_(Qs7%X|LV+%glV9h%vS&uk^LoMv&S4Q!2AcLo{l(!4cQXH6;kE!A*t%)xe2p$TUZ
z|3#TS=}j7S4_fOU@VW=GE{h$bxG;===SJPp(<qXrLx;Wk{@<U<ZIpd_wtsc7L)5|C
zT6gy!?3JMx8Gk*K*VHY&rm@)-mMeta_Dcq5Sz4YY3)CN!(i(od#>bwd%D*V_)nPxb
zn4=p;<{^xsot$GViz=5c#p?Q(I~sQMe3Rr83r@TY`6~>C27J9znD~L^tyoOZY>Pq|
zhgD-Qw+7y%Ji~@N%;VcTWF$P^P&{t;&hSwFLy=uc{pw2vcZh00ntLu3jfLxGy#I$v
zF_?<D%YS1VM@duqL)vFRF$)G@w{BU7STn|wZmmYzOV)tIY6tq=OjC_z`fO28Br$Pp
z8;iq84u}prquE*E$!8Qh%dk2cPK+jEFd8Sj;c^VzWu@)LO5|$S;R^orWylY*ijnNw
zTCDqXeYZu8^qe1_f0x3%6xEro*_Bl#O1a5=-|&{O)^nGoM=%Z6LdNtv1|Gs^CsrJj
zxH5`?)0zWyS<A$8;#f(Eb^moe>Gk#QyhQ;zk1?svl@!rf>DaDngxPu_v%1h~b4tXs
zyQrH9;m9&?AywXMq<wN5orLnsT)))hs$--ljgd}Hf|GrNS}4Pr%<K9&U=D{0#Yn!~
z)q2!a+}0!O04~w~MD>FD*{=fZ6*`IZj#V3=t|r8&HKvRcwP(Yw7Fy4|b+6eO55-6f
z#RE&%4dK0I18m1O;6_p$-Z+(bLc#KHFzR<lhz4$MBi%>M=M6IvgM-@P)<$Tot@CGc
z8EP98dkyXyH$u+M=9Kx8k4Kx{5XMwJ85pAJL_E?38xfDv)`&;e9#*xr4AGtk2k9Y6
zTOEc`usWouM~J4&BY0jOMZUW=bGbG1hBb;Eq>9sK%<bkfXwtkMG-<O93o6=!>_m8-
zo@VJu8b_H*^0-yrL9{(-Y*V}+sckj(;W#x94Qm6P%3<5-$8!<t4c$6a&v$ubX4`R_
z9+bzVp(l+F8RAPyGg5oq?Ur#!|CMen8F2eWjJcVQVBEtSs?c@qYOT^K18d<|jG3tR
z8O>tGp%rmmos?+%AsM8F_I2SJ`sm|G2Sr0OeY&;o78(hW4fJJI$F|4T)z@6pMy_>w
zSUq=pu^%vopAudbWRu~Gu0G^tJfEb&bjG9<X)Gz8^+5PcnrC&EWFVq8SB5&)+$6x3
z`pVqKwWP=9k$R=P9sm#F-(4mDv(>V}K+}-jp_FFCUB0uDZEO|ND&DzrM79|h)$4%j
zQoV!zweel~eMQc@xc#)o?JIR6@cXG@?sJhEmOqu6Uae1Il2Y?Z$tsK4Or%|xf*Tq9
zCTourerpwNfJxBmJFnc4adI`g?bYFPT4y?nxcgdRjLDmA3e=lhcAGW*K(uvue})Ix
zpgCY+wPvXar$@&sFH6{l3f?=idNeujvzR<t_49c+-Sy{kZ>IlSGiS)Qd@f_=w_L9{
z|E?qxEr@_hhz>-^+Ytd-s}WiwC2ja%!z&gy;R9obZqJ*rfGO4}x{F7#VE+hU2TslK
z3fmV?^FcKHuKpOr^j8TZG$wbjZX0t{i`~OkrZU9PT>vAoJoKEwx}`N&qiY3;d!d%r
zg)PgXYr;y(sn=lVjr?1&U)v_u&1@>%v#M`)Xoae5eL#be--TmlG6_d=b`om#&c79F
z=kkDEOdZotPK`3K27^3wwi-s$Yh7zHu*tQ4q^;0srj3lUebR|}QW$3}i-vy9;KrPT
zbSaTfxxJG4cjZBA$CaaRttp=CoM{;=*Y90p9l^<#mAs+@M}jV5d5E5{x-|EJO{V#5
z>`8sgQAU5RuQ8<SAx3cXDFZwrUoMSC0h)CsPv&ZxGPT=fN^AnHJ?tjYw3>x!5Rtnu
zC0ZE4`~bo$6hmdQlU0|-rrWXtO{YrDyCLt}ZC9~Ps9P!rC~A(W7|AW5b5z>o>T~7u
z<1Y8abDD_Dkeb9hB|6iXKy`An4|!P%z9P%JYvxm-OHAQ{WiYreSz_6{5hVrTwA-~~
z&>sz|q5NK7p>tyKwb05Ab$^|eXX#1h<qEgQ^|7j6Xkc(2dzIM)T}yd)zSYcnOPrzI
zL<cX^(st8WC}jyO;*RoNQ3OFctZ;pco=rRZ!qzU~nH~(mQ|4`q){W~E#CXS?^*5|&
zGMll1<^Wqjq`!Up0WAmgh@JNbGr=<a(b#VSR893f@!HYVqFaK2MR}pbJ$=mjD;>6w
zF!%jC(^%R5g#EsO+y))u0nUeRvEyKY5M@6;AI+srpCo&*{7`bJ#VYinLuwfeg_KAb
z;-I4qhs`N|29IhkEBZD`m}eX>cRgTEeZ4j0p0=hk5`eW8Ed2J{%hpx1P~LKhxor!d
zf0uEF@wpcocO-WbIe)(JMPtXfWiRY{S<9_Q$6|A*ta;f6;!3*<iSo_sNLx6<?VCcL
zLVDP3$`)sL$d344Rfmo7Hj~Kd@<z3@h2bz6qVss5+ee{x2Oov=s_S0WvK$@sk=asq
z-n`m@y1Uy1lv>=zDmrXivs$|<#ks6C2vOBWh}4nB*F^d<B-;HJjyV{|FtFvO*{uJ-
zEGKokYh4)XY=R|odFw63*qI~m(s^Sz^l%i0BUhSTw}Khm{h8lBn!;Wj(C(=Y`X;6@
z5UY=!FmAsaZzYB04foGmRUWX~QS}0-a2E%q`~!t^BB>;HxZ+1c8=OkwUtT+zolUzt
zlDcSXnTX+HY;B4ggRR%4ov=Qvn3WZyfrvzo%*dfFdML|F!gMH_nxaPfs$<?(A-c-=
zrhw7Xib%PG5b~nR-I^6teKaXZr0zFsKjqQPvmD3$Fwtgi^@7vbdewFjs_W~OYfjMW
zWlT!@m2Y8frRX+&Q=3JU61-K-V?)YtY`ih1%5X3$VP*6;i&-A#43m_s=ID%ryutWe
z((&D<RItku5BlPd4w<G%tRs=QyXXH%uLGxB8S-Mgq19*KKRtU(&>^@n7uexwVm=&&
zNnjrm$`yu2sjB#){tQ1!f$c2bSeb6NGZ|y&WZZ70wT+dK+m;>U_G&3Am0U3#s>n3v
z&JpsmzIA@$vL;b9kFarp+AMB@l&B~Z`s!=LOrZB24m}UU22t8ck<!4(ivDP<T#`09
z>u)+36tj(Wyv)YYVRJMQ5W*@{c0K$GSuttBG@7+>AyQD#Syf-cZ>z;soMwZqa5S}@
zu_9dk<8W*&1f_z|UhA9T7ZRm5Gt|aW&0b~w{#aX2Z93Y4CBn-)VQUUp4F6MEiFMM&
zS{0SWwk=A7PO&t0_JYU;1ChJo8g8=5?7(_uqe=2E)H~KpE*o5!l@X9u)~IM(up1-i
zA$}Kw0d<czzt&z+m8ArO(>7MAn8~PmyJ<tGi=s!^i16<&>>5|6n>#w)rm6otcC&@*
zL$o{TcH=y3T7}Sgm{4Xra&wHG5NW3G<Jg>lyS4gNy%!1ZT@!+HXQZS&>sVU-u=Hse
zplCR1rVna~gLTUY=1724|1e=M-EsYeWq(9-Hd#NUdEFe<97aw-eo$I#Olxg4h1j~Z
zw7CQi#WKvt%fn*41d6p%y;jrZOybd8I)KDUy7Wf-55HR7dyKhirZaJjCKswh>sKK|
zW?(<Omtwp+j7&I}l~{!NbcJ5u)LRC><!)I4Nx+gTEfD|2O91>%`k#)%xw1b#>4%@t
z9B>te%l?QE;N)m7E1m)VFK6S*JF^y}XHFoHvxa$J4mJ9*Z;8@csU#2@mMeXUgCC4$
z{fz$T9l98+;skO8!&1OZ#Y<_%iOI^3Re^pyz;!hd@rGzve0^Q|-dY@^KR20HZjrh(
z(}mkx+V1V~ClR;!RJYcA=+t~TYmYQs4|mRjGOJ5qesY4&b;^+sqgjVusshW#6i~KH
zu8d`0Z*ig2@r1D)kI{?I-*);=>R`gA){KQBZ`F!vNf40h&*bf<v%45Ba=0JN(8x(T
zUSV!7V^NGw41f(Y7MC+`hU3gy<K||HGQ}8ANw;aNmSX>=Sho5IvbRypT_Dp|Hsd2R
zx9ZOnrHu|A%WR2tS<=|vNT&#>5!#VAoMBXi3=BU7j7+SF%rcA*O}Ib2&&k5`a5-5L
zUOx#&$v4>Xd{7>R(gAB6!Rp9}RMrolZkbSItrU0j!*ET^yK)IXw(fMY2#|#Vl0%cW
z1dEF~yd1B?<D+n4jSmv<7^ulwnP98k)L)7C2ryuGNl|OoXqcvRe_{UOBTXx#Fg;`d
zN&9`}AB5ms>KGs466!n=EBSYT|2}2$inUwCr@!pNMWXDVFf4nQ<X%>62Gf?wKLH+R
zF}Z+dp^Yaz$vU$hVvQd#-yA_5wF$^q1XJ~X2sC)co{S<_>1AZhP#Q1}@cJ5c;*O}b
zdnUCTjGemn`8NSG^ZjV?0r>&XZ$v)Uus_?P_G~505`tmXwG?uqTW=7uiMl^Xe74TE
zMGxdvrQ(_0pMf(^o?!!B?&U1I2*AEo!LzL=!97wt6AipXg79SPLE8n@#F{2XrO^tX
z=Zo|tO-yk8bP>J;I<qzLKzGP?!-}Fx(RgK6+AFi7uKh-0j%N|zdybhniu6OWgBZUP
z?dYNHRMBZqr%IHB1(BHsB$=#?E+&%o@wvslWr5M-_m12zYxNeXdKyk*5=zH%65U}}
zaY7&BI$!EBTrq3pM%Bj{7U~W_V1>JaU}aV8m&AuFO;K?Y!|)K}^bIh){f3mIX3w4@
zntix6(bU&`c{i}h?*N(3Z$hTFEEYx++B`Ouw4Y*Q>;6c5-;tG-a2*}4J!J6;8SRlE
zBytnls4$E~zK=0IF1x@5MW@w_CuzkX(j=W$MWmm4p_6b@tn%1PiEc8li>&EwQPjLG
z3KfjlPE!UGHK=$Z-62lu?hxdr0Y_rHjBh%f&4i2$Z_IfxGQ1`F812UdjnCnth1Nc5
zBUEtNHmEhtW<K-e-GXPvoZI;50lMK{U3P6z9Z|h(ji_GQ3+nFN;=B%_O}q`<_jKDU
z+wQSy7nqesy9?lbblO}MV~RY?#KPx5KX!qBtW$NF0!z2Rl5?I>i!9=O{293uDB;1_
z4PKc0B!I%$tp*LZCs;@g@}&)ML}6jU9C7zX$|`#xFeuYfO4u-s$o~F5usy52y(P-5
zmwgQOW0s^ef&#gM_x|1UCc*UIy|-^?*KgnM`(I6Z*VBK$y|+8--`h_<Ca74D>)Vm0
z;D-zb2gk|^IMHCI*Owmrv0S;{S1=Tepg-yLf-iet$_IR=s2;@rc=*Z>=wIP2`&2{^
zn2p_rjskvpx&%g)f+*P%dwacI=ney-12p6;5g_+^yYTYXqX%#*W<Vu@JO+wjWNeEt
z#tgIwk;U!Xv@VaAv6qWd93KrQvFc_hj(z2hUriUY@I-E5{Oucj{sfB)`25M@bLt#;
zr!gh7tK^VRW0fRHT;3=RXb-55xqYgp^_mv8D>enirQIoj@>TSH-6>-phE_>$#mU(j
zFdv<EeWSKI2(2x~O>iP(+PzhECdKXaQ&~4<(kX)^!+|F)c@(#eOCVqPTz^BgZ{yN1
z;SVOJRSVhqEoQbNB5zFrWm%}C$v$PR>{Hg2+9t)tRUW<(I}7Fe#(5aEdLKqQpY61y
zbOfnPs;IH`Se}W;4HrSu0_RietD|D!RxHe6x<YRDYJ=$#_RBb5VNUGTJ`^%Juz|^)
z%Zu+^orhPHK(;lT?|M5_t2U^TbU^xDTEIo_k$GFUO$9oNP>m8?xQ_PWROqjQl_Fj@
zLh}Zo8D3ZrxPm2f5qlN8@#;P|eOQ}V>UJ*sng>yVi7t>Zx|mw|z+7XjC}7jl{j>D+
zY>8=EiPn0|i4R4gy`Er2&=v}wPnP6F=Wi}!76|SV6KIPAVH0^=e9lcSG8Z}CtqBLV
ziZV?lW0k6Mt5D-LROqlRRe4^i8Ev*Frv_t5j?`%M7Z{fwqU^Y0wtHBsjaIT&cwc5J
zx@nQHmTkN4+H4DsrBtla`Zm&5w=vn<N(bxcD9o;}<3kuXo_UlHPDV<t!x}CeOEh3>
zxpM3#l0+cwryqEC)b|C<1mp7MlIcrWc=Xd)>$)-JnIhwq2!$*8JoCvP`&B3nfeb5t
zeNB=wvVzbU2-K^^L=X*x@iO-LbY5o4COs5gvhqnz)FcgVzBKDQ)5a^rijIEb;g%Q;
z6aU{2ky{n;cPZcmUP*Hm=%pWe`2@aUhLir%H-aOD&YlrkqB)HyDGt753iJ&^rjbE4
zzO?^S!E9A}L>k6?Z*OkB=r#AdR`JS}4dcAwzaF7S!tq~3n)$woh=S+?++X4-qs0ka
z(>{gKczmLT!e`;h;k=d#Vq%APqJ+dR!?Vem8fg%VCn1B?C%E}r$!;cI5*(f!p6~4~
zqzqYZn?sYFyG|R$6LC)at$jtHRVB-$Me!0!i}2FNb#VQR$CCL!yS{#TlqnY6`xKr*
z1>kFss*VAyEpcY^((~0XX>u@GpxwvaBc&p!1zS)CP3_#KW1A#3>wr0-KOp3Ik(2Pk
zQ}NcMJ%NtPrYF-5K25H+3`&D<v$=q-6R!a|Hdda14sqmTEZ)W8lUQYg7BAxPT@0}L
zQT=^Ge}9a9@!I@)s=hs=zfa-Kx8~O$>f1l*?;r5yxq9=H`unH)`vd*`6H5H9-h3B_
zS8;xh$8zu@79?L)kMR8kl$<Z~_+9PYB9CitDEZ!xF_8Wu#nje6;<Fk%?jL%76AK_O
z`qLZuggZVds!MwJIu=n?73q9knfkAx5S=!>!DTd0miz_w4(C*CUYtj9kvmn$Qe_!D
zjfIr>2G3%ghI9_VQqQobv#5w-D5+nV@ldV?{Z{7X3cig+3gqWh7XKDLoGkOG(hu`I
zUj}N43Mln)rJs^Aj#i0&it}Y&=!bP->cG)@kr#{LISe^jp5W`}v5fAce@9h*u79ty
zw9>zoET+)U2xKT*{6jUVUgP0a<jdMy!b;M2*FHe2>t#}VshbXd0(d4xa`IBYfC4|^
z7~w*9cAiveT>rAnPn$32X?2m7N&U4-SYCg<UM=97RDWw{Q2&Cc*le1hP=CF`17aOv
zE5V<*1kk_!jyq_MX~f|k_yb^VcDhWSs%QB81AH#uuVK8kmqZfu12&N82jU}OJN*$0
z^jbrl{HOUj!czZ)QtJ7j_I$tg{Gj&yu=e~&KdW9}^SS*&yQQr3@AvDxO7sITF=tVk
zmiig<x6AD#t7Y%>@AEv%&6ZR}Qvk(Tk*`nB^vg6WVf!b9O}K8$#5}~L4ptAT6spJv
zK&B}8owhICCywzMzWk2ZmSuS*7frnZ5)&t73Df>TC9P*4Ev5v99&2TRNAN+hZ`Jxy
za}cc`vDzYnZPNA;C@PSm)@rLHPTRk2#P@LN{0(j|S3pFA@8W#~w<M0}O7(7l&pqJD
z)n~QXyo7qi3h4#qrSv;iOs+F8B;T+iid^wB>J=-51dErzXZ9IMCjX4j>@yHY{uLhC
zM{_7RAki;bL5*{~oPNiODP-iO)GOYpJXYLQpjR&N(gyI{WsoNdFQRfksv=V;BhL_l
zi$>=M{!;kjnO^)^v!4Uj5kH@KN&cSC4>8rN)$_Y5?$G?PiUUWz#qQRQt;a!W=X<M`
z4mt<IIS;2g|Ij@U&C~Fj`W;_a&6qe#t6#E$hR5Lr%}Z9$a5lW4dC3a$d34Q>71!rD
zFRI`1aZ0w&8Kr#1#|Q-386G@48<2>(yZ`7FAHF?)ozdIZJ#wliIX9E1{=!X4UnGi*
zddTF?;YW~6TD7}IQM=Kp9i-IpS0hUQVyip*U$ReXH}ATg2(H&_H>?A`C^DY(m_NP{
zXOwoV%1O)t6#nH!_LD*ePuhd~aM6?UX9+g*nO7CccKoVc3jQ}~SPa)58<DBBF_<Xj
zbO|-WX@tgo$}am1BgbZ^>*zFj4kO18o-07oF#eYoU6O0871?|r%gd@Zf0?Sp(|Bix
zy@tW%MdZ}@Rn~}Xmg(H)h#bhUwAjze%6hF>W@Xa+t{P&QWf)uW`%;Fs$Ca^S4>_Wx
z{HwLMy&_pHkt~F0NCm^3%!9d2AG2XOe^+kK-<6{bN;kf5^uu|lF;!YV0q}lE+Ooki
zt+9glXQK9C<hyI6R5*y9PF($0$thacZqGA7DeENcA}OWPmM$5ybjh@(OGe%BE;Vjk
z;o4$!&^!PVk!ua#MymFpvE2++3;9L)BP<@Cs}54-ZAQ$AN4d4g5=PG!10PerMqJk>
z<C3YZQzitHfKpZIn-fUVRorxjj=Vv6BbBrg6e^5wfe=AU+<vj)Ny=jv-yC%gZ-(j@
z{md8`C@5{3b6ADi^n-kP)bvH#5aq$X)g_N~WcZEoq(Rm9@-S;S;4QU84$~hQr@Q5B
zJa^6K_x2KRE;4K5jn>@7?IySJ{)VRw8e-d2#SYqZS*f*Y0{>Oh$uLX@Qb#@MjJ-Ct
zwu_|Ji>XjvOo@rD-*gxEQ|&vUW$dX9V72*z90Xp&Whx0%eIO_a*3bXVfO+VRf(d#G
z-`8hH-W~J~$lOVKx^DB~XGDyJNWwkE52k(70xqSFu|<9?cUsdO-X@%`zZKC64$so#
zNjf`>_6(6j?!`F>ZC)lh1Cca`eMNazgX#Cu2%y~rixwHJ)f9K*&)|Gc^gLyFqAz%O
zqQAvlHF83}&xjL<5Im`MHK}Ol20Gmm@lF4@tGy`@Va={c;qgy-sRQ9CThv~Ue+QJo
zo0ivkzTLt?l~I0UPH>sU?H-y<t5KefSZ4FmVd3-)e5LQL%`53Q4P<L&27lRvmL}r4
z_Plp6q#fSEkd}qI**0(!kM|Hx*6OHMVPcko3}SSi9uv31wa^^^ABpJ#Z7Qc&D$kPg
z|1^K@GUBqGww!|xT+O#C*yc#nmYfjS(ni5Ytl%S4aMdjMH7oeFNq5*4IJLCdt!SHT
zp8ceVPN@y8(kB0$!v21dWML{FKcvaUDlaO`MMn+2OMwh7!cslPX9-G?UuNNo^~)k?
zR6s;tt4h<^XLtg%5@cpRPnm^d&rTC@&#%qY(*BFKd}B52H$<A^{G!hID0JI5MrvNA
ztW|sqzTHsMP93DVd=4C&3LA{=IZ5+cTlSSrQ>79~!_L?psvUHZRz_v*F*wntKwhG!
zq)paeLi-jx$6m7h!t?u>jHd}?Ti~dWTv;Yzj`@!C;&Sl&QiVZa(k_#-9F)p&*`J{5
zy#DG4<04mwSqn&c*(c<T$<*WWlj9(fDkj~cbw(h{*VP+~eBKEirv%GXu+nPyjS=F+
z%x=)B5A&9CY&r8u9yF(<+ChJEzCCt5)Ba%>ZZsS7S&WAE1=$e)&0{n07+ngVx=iPh
zV^vvT%yuJZ8~Z5#UEp!3wuPDnlv5bM3Ns{VdwZ0yumpC|H5KbZbs4=IHeUlHP|3aV
zeV3RejLubcB4|45Mi^7ORu}iAU#EMF*4WW^^N4?s$8hFJki&&fpRJy~p5f<>)2KVr
zt??(u$^??pVHsNqL+n>2l0FqH4^`mJQ2X)CZhSSE6c#B&>L7?p>tYTS5r_Oxv5^EA
z(W@jS)wf+4;9c^H(!+2;YW}h=UqVYS9Y2!Y`kn;vHGdLR0-v4+a3tnWgM32<A$f>v
z&YTy~x|eQiik`!KFgK07KUU~w2D`wEbY=w~Z<OqHm5Y(TaSl#nyNw3lGW{O6*JmZ0
zX8WsFv;CFgN!Ow2c`gSeO=j#%7!Hhaygod}Byj8|yvA`KTM5BJn%ghx=Jp#NeO2uW
zc_2Hk<u%U0?gy#f{Z*}gM@$6=Lrf|@nQ+eiR^>8D9}6Vpuq;VE_JX?x%3-7B3;Awv
z<W`@jnap%a&`l}B)wnpsA?)p?M|zN6oxYS_eTRtDcd<eRUd1RBBVS*EcD<Id0m(Jd
z{)z;B{(UF1CB5s)zN*Q2eV27oFzox6tV)+ZWVmcw!e#1FGPFu)J8W!gk`HRNShN;W
z3FBD#xyM798Bn@mHzk!h!W8S)jTtS|weSg(6~Irlk4o4zURq~&CE#>%9^S$I!4QO@
z6mGasgBuu;TDa%XnY=BkAv9|#SB1it9HZ|@W^{p0+~)3+Tc>r-@#n~>5Y?(BJFH)&
zb9cV&?6#9zBiDdKY@cee9fmsqS^{*?Z~{Rg)CpYYDCmI0ZLN(X|AK>h<(^`<^G+vx
z=NA?JF!>24mm>eLTzXUfMI<vnFs{q&@`2MuR<11xbvh`3-W%pd8V5?2hQnpEVL4!D
zC~fpU#lC|--PfSM$1TD}d5~L=>7DvPhBqyF{#A7TW$OH^=={r|MVXef^VZ!V=g}@C
z73Z+%PuEqChSlNc3a35VqRDezk$Y;=4LnZynApPb7`?iT;#)lPOH`7kn4m$tHDnS)
z75D#jjq+&qgSCCsP3ohytvTG3?4+`SzkR%cdIvx_e7qMiDl92X#s!S1sqPFwVQJ?5
z<i4mlvBXe9+Fu<*F>1-PKCUalR3@2`>+j@dbeT`N9_ypanM1V}ABNvDy)1PZWazn?
zR?48O?V=4Mv|ftI$w?9e!7}t9H}oKH(1U_|!xWffhsm~W5@}gRQwO*t=KEwfuBk)L
zt)-o%H_+M*70%dK6E!nWV^ff5+KVbusZJ_e%+X<hZ_@JwICtkF!`OXaJRA=Fx*p1w
ziI+)K=r*voac`YTxG#FU`l??f@7GCL{jgXj&tRVOD1L`Fv~5EgjDQ8|7*`dxGz80c
zRmsA^gCXkFeKFcPX3SOQj63s#7>|ji)2@YGQHE`^%AybHDcUZuoW&pEV9>8M;YO_q
zQyqSc_2&H;1ETzpt=82~NrpyK{-inDw&rTpV4WmYPs{Lw<OH9gIfHjMvWb*I(@flP
zD1EjvGko(}okR;QH76<Yx7i|88QkQHr|Sir7Umt+49&0oIr?x*jl9E@|Aw2qQ_?Os
z?F}j7aRz#GILZW*A88DG#O3(CL{`&u(N{77=cNonqp7I&T5$$0yo8+-WZ<7H6B^~~
z#IncK>{(QPm&a@4YQvz`4<8O&0i(~hvm}1^1O@MUF+Apd!>eoyudJ5W$s%HbCz{$A
ze_ZK9&pA|>>xz~rIt(%ff8_Y24<>x3Km=PQpo)#>$f!7OD-tvpbd8ILl>=6MGvsTk
zf$!Igg;oE4@}P;waFC%3L;d|>IP@L$1h%f@@B<L(NU-=rce6TBjY=Nl+HtsEU+<=M
zz!v>c@=&`~a;d2~a_d7xLMUL3c8hXiIE90U=ve@y?^SXh!Lfn#WAM<&KtdR}AgwbE
zhm=3ruIUku<Gv_aNjjffPLKjH9JQ0z*Gz;P0f8?1UOX8FG@o&O)B`rRK_$FW=Ol7r
z56j2KTDv#WN-xrKMF;JbI?DrgD5LogDLhNtjPGykJ~N%6le@PIqli0pe%Hpd?Xn1t
z&2rm`+Bjhs0FAN^G4A&TFSB2rC0W~QRCQ8|Y2ye!ZR*^!97rXj3FMx%rEO<Og8>4P
zkE(WuUnFSU+hn=j9k0Nxo;-eO|4qK@yprthI)q1|kTb}mAye^PB_H5=`hAoE3s95+
zFnmBF8sn+~5be*RGHfvcY}Jn|);-ZdzcwPt(2BHdDLyrNa5$lVQkaxgPqecL^7iMz
z0wf;hj`o^-xMr{u%jKgQ1C{ZUs~%b?473qIFOcsy!PSPe_AsrOPs<nOjk9b?GSu7I
z=_z`Rb0&+D>iYWL+t>G`!5SX6(jgal7I@qem2;OQCg@?=h$^JRAz;*;tlA+jm7QLn
z0zgR3ZhCU*;Sg996J+iTQ?x1_Lj(d`S(?J%(6M(G70>cT@}%;H{sc&9G=H6bO1?6#
z_xgu*fnJtei`VN>FjZBLLe!X^6nJ`Xt6mtYbmimfD9p!x)(`Qu0J@lu3v`s+SR0(-
zI6bV!X}^!fOu`oyWpl2E;6yb&t4yr2HO^d#cG&eNaqbv#>EHGm1P!R0kWU@stc>=E
zhYd3hqq*xanj3HYlnj#eQK=0Nt;li0Z*WZVuMI3;V^~>F8F5-q&R;ULwJu>JqnT4F
zvvZ(95#HQ(RZ$+Tnd18t<4AuSW2$W(xmm~R8QY*KsS!zyV~mU&4+ef7USZWBoyIeP
zW*k9o1lJ1`=_eSp4Wp`}O#%@I@<H7q`jANVnb97vHtiaEd3UaKAWX7W(<*x0SK$h?
z$99^-08wZ&_0(JIGY30ji6OKUgnII<;6#m;*1Am3*Gnk*6#XxW@6vCc=j-`WzIXNM
zz~dB0VWtGK#bJm!%_b@Q3`3xoc!&qEf29a{6HvbE;xGxIWa6vuP=)d|lGMBy$i{qG
zrvTd8EHo6gV)6lQb5=JBr6~!`Px%(Z)z1a2VV)KE+5ok;r$t@$LiAbF`W_c}>E!`r
zCXSd=HWdoKR<5J%Z3^qItL3>O=>zjR;Aw&4e7QbviD2-b!mh1@)>^|DZEBy<NO0E<
z$l}|94%(I$=_2`oP9t(7nA}vrEBpY+g%-db4Mxb__QPn<(kZ|#i3%W|aFAYqaSu*J
zkuo5eqW^J7nJ{8%oX;v(F``d4b|FQW%6a}@Ubij4SN0n6T9v|5ki|YG<S+tpH~P-j
z#b6nE<StpzHrZ+;*t)S)YzM=k9+%2Z#Ih|5BVo5e-4c~nkKzicL-_<w7<sI@!8^S(
zD~}}=i;+DJEeCPp@J80q{#aVaS8m9@jCdUDFi$b_C^sZ`i}*d-kC%A~u(|Yon>5{I
z?ZW)YCST-Bl&F#s>5<(dEiB>_gvRbrjD)t6gPU(FBfiQ@)Y7(s9YX+Yp@tZ1V<MAa
zDpNNW5|V^~+ADwZsgwt~f#j!>#ipY3{jB`28aeB$o1PFbYZN9CP2dp*m>^s$ONuQ?
zzuWR_v;?Fg6l<Pb+w(56^Gzx5b7mQb!`1X-TOtWl>^s;9^or2Er5z}+JvT}Rry-B&
z@tEhFNUSf9`mA%BDvL49+$609)Y0c>q5gn7<7G)Jt|LWs^sQI~hYDH3s{3X~fD97f
zt*%?t)I*ucsEBY9Y#DA+N2^5WjsdxRrwzW>CBx#EWj$?2HO|HsCYT8&!TbisoXi-E
znKqu3t<ioo9>H;($_P5%y??(gzq;q!V1FVG(JDgm9g&Fon%(fjFu%SoX!qu2KN6*L
zzp(U=a#>`dO0_^e>IFbn)RM3<Pwe5Q+bz0ikHDF9Ek6bsB?42xKo4P(_;!-+qnV86
zp705Sip0dfj*UN#GhF4wR$gD1q0N*=Bc%7*V?*h*bph$Va~MrBB5UI~L?@mN5=8kz
zmz%^B%$Y+6q)K@luoqR1k9I>!QD8#Xi?38(-}9Rdtu0a&c72{BE?=PAsY#;e<rFHj
zCFY&)PkZ~lel<f=yiNOcXqChOJ>})s2>DG8Tod{?kiXG175@6x0y~p|e#T0E1V6)=
z-^IU(C+%mH@zIK<CtJ{75WZ`FQq7B9E|c)L*sHoij+6f@vTNF5JdwV^fLES^6FjA-
znRm4jiFB8xlMJ~V;5M&tzUju7U6~M$Yv?wowCB&!Coo|4)@R9i@&*&oX7=}IMV@BX
z1jhCSL-sLA-UnB5_5RNCxhYDDl!T58iB4ODL?22P7gxuy5A@gfX!xP4UzV<>dHSj}
z4t|bw<{b4xiGnD~-buvpQ!2rIOs`RTt&32o`NRSi_<-%Pxlfde)1Roe-;<XtX4}p5
zs}DxN_@g(4z86vP?hW=(6E>R3%Ng^MfVy4}pL$5q0j%idfC9Y0_943!Iqmx2?rP|9
z4vjyH;<KbRq@}ggK!0IvXhClmNt_pvly1m#Zw=(}IlKjgIxS7<&sIk=$rUUPVvaTR
z$ac*OrQJvEnna$%q@j2OCKmHc$pp^UbX9uqw$FyWAR3Tp;}A@zyldM)Ev4?sC@yoO
z7~`hNTOcOea1y+lk2iWXD4FoCotGO3{O62pnRFCx8D6ns;f}F)%oUhOliOy*<GeNE
zac+WaDoa^(T7@I?Rm=^mh1cM8$p4KP5Q~1(d`7Ma{6+Y)d<L3BG&ZNm>po>U($deB
z47t0ihuk&hB2rT6G3xfJ41Y){oS5gR`hP3M6<ecr0>=svA-^a?PsdWw!CqKY7aqIC
z253=nKunw+!2+}B@GCmbiVCPgK^@#MK*9;9!or;J=qWa^2@96e6{f@#bmEV+Je#;0
zPVfvTKt@X~8x*4+_=1J3V38+)5+aX7l+e5C?d`|s15zp_iyiz;EGmpxg>UKwS4fgi
z0i@aD8HMZW{m=b_$MNHXhZtd`*#K;d+q5yCKZO50c+jI2|5%2j<bilshCR=p&aO5+
z@#3}z<V%#XTt&!3J|oAv0501qL{%BQE5&*A@pT+!&r^An1s_WRO#LD$j&Yp9>vBU8
z8-6V7d!yF^4=DJiwP4G<`6>OHoziFo8>)Dk$zt+j8N9L9xhjpsexZWB5;@jMSmXn+
zs;I?;IUoV9m4~;wH2$Qr6`f;G%NFai<}FN-woSW1TGR4yx3VTBnmi^(=t2&Ju4&i{
z3{lJD?$bBZhMY+Y#mrhMCNpr0xc@^O{$vhJIHQqxU_Rvn)0WZ`>dzZRpoA;~1l3{`
zoIK6Ocw2`RzaJ@U>PD6RNRGfC$1+r@j#N?XGlcYFV}9w|$QPxg$z=yk{+W`6csbd(
zW8kk3>7sSFASc9*VN!4=g#XXVaQd_a;ybfg`)z6RgxoqW?1Vp{Mn`FmUnsT;I+_ta
z{?U{i{<CzIX6n9yYK`9`$~%U#xq!>*YS}N~X@u8hq@Yed29&&-{3TLuM^Z-;Y8U@|
z09+w<gW1(|#EWcNz%^{f<!F{~e%>K}{G;Ul;hwyj!`0H({HaAe`k5hc;39;Yr5c61
zz6KJ9`Xx;Tudjg&Mlz5Bu@*``^h1`(5D7l;8S%Irm!Zz{sUuauipZO{$V5sITkY+s
zJ2zdLRoE8*hYg;a9StYdQMlBO1c#UxE2xg_3(A*e3{d~nvXhch0H#)US$9;Djx)yC
z9TqH+Vw2}Na7bv{hqrk9MpXTgPfV0vdnslp(fF#wRR;jWa9af;E9JdJS=9$4G5`-~
zZhd&bc<ge+Ba0vdsKOYJa7dO606K|zI27w}INn`KS9wXn_V(6?VLH}%&Xzjs4<=pr
z*8T9<cys9Spefk;t4y5Wh$q9~*l2XcCwiq{pwi}KH~fSNA2S`D*Mi`9dLr`{?RsYj
zhup=7MgK&o*fqN$P%9{SMvw{#QuBU)OsO5^R+}r(UD4STtOQW9K*9|h0*Jw%{%9lA
zaTlB&9YM7c{@sk{m?bqks?S)j{*nMSF-_|xc1O~(bfeHB5|Vu)Zy~$U{w&+kM(0fj
zyinmylv`g8zp8vAWR_2LTaDRm)!4|!CeE+Hc|ek-lxHd3eXfK|OD^Tg3GaOwqF2_z
zAic6|uv9^MsT7tNQbLo|ES-#wWYi9Od$I;?Fzw|ATXCsrkOEyvt1_R+>CVk`(b3I_
zX$*9S8}y5XoxjvOKl1&RTJ|01(}2F|k?O2|og-KS(#rv3+CDX$wHeO3bvUEVW`%g7
z;tflnVHR@}b2wPmV-VN+=56WS^h4QtJ^vk!LFK736W>uTsqfoM{?h*XR}9|q1yr2&
zG_&3lJ<hlHX2O0O9Mrz*NPkpHULUB84hF%#0xwsu%tH2I2~1rkdMflVy)kip;k^@c
zSeA!H#R@u}AHKs|bCqU|VX8QvRObB}ZWl7oSWk!Gr4I?(LcvQN<__N>FGMAEP)>ZQ
z?=JA#iPJZmjeji<zt9IGJZOi*f0f8Y{)tTF7v=QVawZOZ@pBpe3mFgbH~KM}jejYp
zKbN!c@1^%c32zyF_=ggGeOJ1f&EV4fopOXtWF*vlne1Og1&Wqf{lC{mXEQhDTT8y9
zts(7&;bw)(al|rh$j0`0W2H&BQ8pS|nS>i~N=;X@>+A1g_%mKkdV2g;V7#0d2c9^L
zNj9_e0|3uT^mG{3ou1}a;pGlp_o8ZtHrNg{K{@jLz_cSPzll!U>XkbNN3c%lX1`ea
zlVvbn&eQ;Y$=+r8MYdyNl>^3LcdTKX9_yulRRWv*(z3~=G2EKNA*=x!TPUs-6zAc(
z0mb8R?uHCI<~^<5p4Luol9w{)z{`5h0g7K$lO_$v>UiH*aqzr*JNHgS?~fh^+FwvU
zgS<0SXCm|G0T1wf2`4)qNS}1epWxeAp8xbQ1k$E&faxOmU2iKH#e5-DJf-)s2atMB
zqD|m27pQ}uS=XoE)$Ta+#Tj;PWuhx5_LLc{Vd%LPy0(KR4t^g)?YzvEm)1jB>CikB
zaA}3xE+%=vQ&e6~z0_AOy~K#GLKr~2!l+~!{f_8&PQTkT!$mY=(GZow4IOr%V|mzl
zLCsC(oHo-#oi`^99ramZ)Mo{804Z5^1+_95Y9Ey~j_Kas9_HLd=MSZAQ;#Gn3^MLl
zEDQ9d%2B2@OGzoo)sIjKYg(uFQkp-O9UfrWhUg$he`D&d6&Iqqp}b%!Jtd2JlfO$a
z)?vlG{7fQYx-Uv2%T@SrXd925#y>NbQPo&Nvdih(RxlxqIYz6rPpJS@uEpJ!B#m}6
zZcNmX9pe~MG`r#cr;T6?R7c39OL*zU;1BY~3ugkm-eiMxCBt;Gm$}IM=?YUD-h)N|
zLalnq7aY^yS%g^ePwP-abwGO8QfZ~vgUA%Y<aB#`EA?eA=Ka{}t7Cm1z<~!>tGo=d
z!4f#I;xx?y;FRGiKvR+5^8Q?Zo8!05I3Hw(;lWqwYEp!$Gg|;n;1%wxjOOZ;%MmKM
zvK~Hmrdsf+E*t=*{L_iGmR$_=<V=7-HSuF{+>h+UBdfwc5ho5vCL9=jTT9Oz#-U8l
z3$o{i{lc2|Q7GX8jg6|=MylI58H`kAeO&@lih&twNu6<>4|YTH$hjSAUn#{+V4a7X
z7;cFyCM}&zXMqYns=Al*^dN_igyne5ZG<j@u1T^0oqkw|Ah01_-G&4`H0EN9bv_og
zCeyH=fTqW2`+TTVu2NESw6qHgAfnnZAxC>?V4*1G8tp&~9zy+(BTiqJXqPc4sSG2h
z^t!*?musUZHK)RJ^;X`$uv{ryw!t-PK#n%;BB*%f@}K`Xx~P)E4@Q3>1ObYa<U+6D
z2Q25(<hccCj*@SH))0*?eLC-OMb~z<j>B?%d>F1wZq$mOjK_quQqp~dJV6Q9&+F^e
zk$i<$(op^+DsbXZfkop4{1l#qp$T?!7B09sH16iL-OcOC3CULuRUs|zJvqb-JoE6x
z7b>Ov6%H1dDxGBpQ3FoDU@fFeNN^%ZU>$rCn51Eu;QiF!9Ao!+e}t^!{1E-$G)!KG
z%kfK#x-S8Bi|NbRzHIK0eq*2Rz&utaoWr?m@(wTiBl^6Y?aKj##7ikI;13xk;*WZi
z2tzHl?L4h}B5BrcA|><Weo7rtPBL29C*mBD?SsLy!s6Kng=bH~4-GtfA3jldb{f8?
zS&K{fK@b+d!7n*s@d|!Y=i}Y?s`I_QSJ&6)d>fxiHt9D_axRG$`3w>tTu6K{w~C9<
z(!g^gc+gw-LYTef>@%d57Z~wqb1OQgp$W{N0o+IN4gvR~4R9|M;68>g8i4yT{HOr;
zCj3zX?lt_-y27XMn}CQL>@{>KYds6!NEp2q--gfnPc;q#oI?172siz9Aj{15_P*`+
z#XAn+XGre8-8k6w!iDJz#$y@)zH@0Gk>^#I*{Hl?<vuP~j-AbXbtg6Ad73@PM5h6|
zsAkE<-->*_dY&w!%itlr`7=+mH~F_8X!Ew6bQRhfm`1d7Ypo@17k6`W_5#Js854TC
zzOLvmdi$aJX1%(VcJJLvg{s{WZ=$BJo3Eq|p-nL3l`ExpQFojtD_ZzBaD0@Jwu#D_
zUQoHaEHL%qFbvZP8rC6F(uD_bQ(wozVsgGh8%P@vP=iwxesGE3oCp-G57Z{TTY1zz
z$+W8=67&=W@>y=#*qzKuPNsJP2-e#T<GsD!oFusTaDDA1A(|cLXby?~?z<y2TjC8w
z6-B?xzfa35FD?!LZ-bu@$R{{iD0m!ExFZ%DWs#Jz&d}HfO62hCJ))~LGWqrQYan2R
zQRaeGPH+a$u?}!kij`QxO#{QsTKJLg9hG~nUwQ42meuziqz1rn0Fv^w9e&9MNC7%Q
zw(P<yh7w!k9kM>T3JZfq^2hCJ!7fE0cZ_03Arc#hS{1B-s(02G|KdA_dB>~&obq(N
z0!pUzr>Mfs&%fo4!QPd`*c8KWv~KC%nMBTCVB|eikWx{!%bT360{!(>()jvm#m#7U
zcL`5O{0{v;Pfnus662~#(dfpXS@v}Cxx%2`3e5|<1VTDo0e}Q!abx+^ErX`k7`G8!
z6Dlh@ib!-6F@e#^Duh7}u^sV=evjz)nSMX?#Y_EuD0k?S)%LvNBJB$QBzK>-TvNXP
z+Kcf#qOiX?PrRu2n~pbZHegA*q_FN8VM7EbSXp^FG$SIpma1%Q&dB(<+D66wspQt$
z7AUpO80p9~D$0j81Z29lMC;n@&J}Vrrn2%(kZ=8Vt5Q?f9ldG8`f#$ZetS+0+m^c$
zLEG}&mJ(TK22Dq9UNa4^y}c)iAwTxDj{(*y1(&_OmrfZ4Epv)m`hVe+t3gCmtrKK*
zn4x9u1ltl36*m9-RoxuOjV`rZ`L{KngjRCx<_$YPVt1gh(CUK7staOiRTH;c)$A6g
ze*Gw?RFt*FKpQ)_Jb3lkXmB6Yu3s1gzWqpjzhW+W`t6N~pqd2;s$bgT-fszfcfP7g
z7{jVRI?DP7Xx)$vM#0d^(Y%65Xq7j4jt-rswGS?JH)iU_-aOIpMw5&{nxMU3;g#id
z6&?(kboX*)Y|C7moh(eI`psZ8lTmDHNT_6SI*bhZ`PYl622NK#3*M$z){WJeyvOA0
zN#H4c53pVYHaiM|k_)o7(j?YHg}y?WDX;^kdv99J_<{J_ikS>K6Uz+Ttyr8FK#rVs
z*xZWRal83Nw}IyPb||kb$m`)Tc5EzIlH*G@Jcn&M&Wuvy0_smQ96D)dD7u`XNxOx+
zThN+L9V*W9T5Q7@dIsC5U2^=Z!a^TF816NP$J+EZwe_613y}M>;Qh)@`(owVmmv~&
zKy1?d&`r?sONHbddJ{5c!>+Y%*N&j>$i~{|ibY67d`o2<;^%NDuom*fibP~Iir|>&
zALI>@mkE_l{U9AP`tW20+c>4xzLnrd`%rzlLwnky^tB_GNPWCkl89jy-ut&lyx?21
z_qdkU&c64>_1k^_o_M!~8TyNvCx)M&7;amx2Rtq`3nsaE&4D3Hi=p>44~Eab=*v`C
zbn#m1W^+?62G#h4F<sa>ABap@U^DNS3tM~OS;=b3bI-OHhtV{$gu~veV+>?%w`lBc
zQFg+iye_}K{<xCb1R!qsChpiKdwbcync-pKUJOyN#pE1bD%!3mq-)(ZZq&(5LCftq
zsO&UEC4*$$810;(rU_gW4#&}<$(&^**wd)rNBax;W1Jo#_=>}@B)eU@KahKn7hBfZ
zY<FNDd$ebyt(MxMJ#=bxWgBP=Y^57&$69tmRkVHh;={^D00lhMu|P$v$z)t-(t)q=
z16QKL`mA)U(g=A7DNeHJ_qv-8ar|7-{?4MHVFdJxY5fx(v~>;|P8YSJF}ou-a0||B
zoic%MPk6nzckkb_QAM0I`eMk6FrLQjxW)94snT^AVR+=eplH~kDRq)A@#JksLM7hb
zHEp1_N{ZQlL)BSIaM+4x1dfN10H0HV#wsXr(T%*|t6H1-Sv9MB(XebGa<*HzJ-7N)
z8=^kM`<dx3U>%L6EnwZmh3Uc_jtfI7)RAF2oDrX_-(r&)3CLSXkQKKnqmU~rb8oiY
z)e7N-k))MDN#d3(lvxIeAYmf#Z#ldBp|7bh;<kW5qIh?LMNf0``vr<sL>U+Pa`{76
z<rw4>%`9EUNfYyth2G@-D##6wWWi>W)tO747lp5Io9j133^hRXt=se^91yuALq{bv
zOxsOxiE1#BdnMQ%HK3!w(g_bo)^BbwT4o(8xg3xxAZvt8FW^EUQT8}r3_kTlvCe{%
zm2l-#*tW36E_>oUiskRuXX#0$D}HLPxJ<M4$DsGDDwek@Z#r7bVrN^5Jy}**tTrB1
z@nu^@=AQARdk2HNxUxh|G}%%-C9;cYhK}tYnf>CM`W3FZf2!sxu|-w*jhZs+=v1=<
zk|I8I<<KHNVC-Pv?3%`ebOqkP*e9gkxd#Kq1fx=NXL@?toV~Qkt}qN<uFMQrg=cOB
z8mY&{l7^>H^7{Sr{6q2-1H%^{iOZj^=<kMGfquJkWjo2o>Umno;ZuZ;x_=Wc1^EN{
zVfZxPfAQv(bcb1mEq4nV^Dgz_Z^S>l%cvq2Ii7#!Y>9PiOt&r4G$6%tZx8?7f1Oa0
ziKMXo|77l3l!eB6$Yd-nlRQmON;jz7C|tPkM+eu}_on}TTZ;X0FjFTwckf{7c#!R?
zScD(u24Dta{cU7UQP&Mdt_ez`C(OYpV2($0H^Wk6>wY%Lxp{wzUgX>fK>Ez=Mk<yH
z0R@P(KY@!;kV18`*^|z`QaL4zFJS2eCn|6+0B<@W|DjyxtqIhl%vj?im#-ZQvq`Lc
z0E5{01(Gj4yipC<T~mr|G8hFThT1>eghCWdM0wq*LJDWb+JOs^>er;GQVale>9NfY
zmv)3D<`cue6Wp;_`c3`<@a!pii$=wz!9Z;A_g4I;VeVr3pzpSPAM(xd{fb+9VnkS^
za?f8L!@8%aSV_>*_>g~)zvPF(0Z=r&p$>^RvG&{TfhsXb0@Xey%O4)LGBP&YZKgEP
zTx!Br`eSdqOG=fmh+c+98g^rOw38Dz6r1N&1$2~zsJCocRuP5o-;{Es>ID8E9~3eb
zaTSs(?tDMLfQ<?ppRW3->&7z?kEQGDixgOk3x7Ywy(}BhDhFw9^(F^aN*T*NrQrny
z@+~K?srMigXH?7Pu1Itbh>o&JQ4Jo#lnfgEQnSD!w4xBIDo8G#bd2M?1p#*VioiXB
zJ#%6#<8#A7$y&BK?4&uhotdUocoWTwMfs${m{vvWfduzBz8t4XMcWXrAJ1rIUg7nM
zoCOhi$R=IEmW;gQvJdoY3FdLMw}(V-byVUHS>|v>!Pm^j(ENp$+R=zBo$azGF6GW4
zJLT1&+}MzCmajlIfzm~pxZ2qUSq7pUzqV3_Ukv5=V#{}ja{Q|%LQKen<|*0-V+KZZ
zh_uqON(l!GDi*5K1g|!d5_%4CmRqi?AsjbMFVnR{<wS<MQ&-B$ZQl$#VytE5Ilv-a
zl9><MzbIcdYbQ5OQBEX>s>+c)erQh-{n{>2VYkcAHQ2!ofq22Bb%&TZfzn}CyKuuf
z&tHt_+-DBm`U{Hc&9}pbYql;%PTBI1F0QYU0nHXRb|4CSl-{{uuK0T8CWSs=3v<94
z3GC!TvEd%tXvAkZB4=PhmC|0;+G%8XDvwz52B-Tsho_bRtLcv%xwNw4VL`UdP!c^9
zwa2pk(>z+rxRLNMPZ#M6xN$5sUFT!WkmfYH_Q@cCZ$eG|vidy!;qnuI>tab8jJH1j
z|K7Sw|Kae+$+ELdgGa8GcN>u9jh!n%cBf`)+>oAI-a2k-nkZDU<-0?n(!VeoK_{3#
zbM(-n)~-`Cw0O&Rj7Lzq-?h^`VTp|yX_3fBEULtnMAZOo9+8fV)n99er+v~*F8^wi
zwPRH6F5Fvo-1GlpCoPk*sIXo#&8pnD?PfJu*psRq+m#FpuPt<PB{_O}DLvgSLfH&>
zPO?Wl<-*WvC{W`S9TpSMc7;)4F3^J%80X_9U5xNd3!)>+U1Z7upIk47xnv8Q)T<B?
zD$We+hR)uScPwO;g6w)y`H+$^k3OEzKJbc&V~}qGBPvs#;b^v+!seszmUb7SIF#2H
zb!TE^vZ$+8IC(UlYlXPlCR(v#xaPv3O$u;MD3yanprC8{{_3oV%Eap#Io^(nOoT3$
zl9q4k^q8Qbujo#&x1UmLpV4`z!I(;EtO8usw4=-<)|1xW4IkLN<^!uNH}>aAb&({f
zWN-sr0iq?CMJGR^R62O|4iafYV-lAYZsIcOa%m!z5;0rw&B*8^?G=YkDgcO72W^hb
zhQJ^i%pF19@+-`38Y?a=J(R!t2SZ>?cJEF9z4NxxLW~?aXdZDr9mL9Wffhq%TyP}i
znkh-q`9KLW%J3NmeTj68YyW>&r56F$Lw_)i!FY8DY&ThH^VSBd*?5JXFN47t4asn?
zz<wod69uZ)<AF7({Jt6+Y!#F*$du{8tyU8Yg%Wnbr09p$WE8-bKv>+HzFnUr!{LDb
zoanj7Za{j~j|Bj6ly)Sh#4Z`<>9LsoiwGc2T2G*bIiWsn`Hm;l*{zYn%8(QX#cz8B
zM~YlJcT$25_<WidutI1pf*zfy4jI!@=V-_#1E!|hc_j~3>*!O)z+E`t#=E`-xIZQV
zlQfV==t(zEkq=U}j($JY?l>u50n7P|($}R8C1o$s+Bov0v9wH25by2bze=`6NVXyk
zogDo2wHJp=G#)RFod&Je%huI6)2n6AuP4ifLoO;!Z{?L+7_ZzGS9{}?8@XP&dZuyx
zb(QODx3p-%H@nKgiRRfTPbN3{5z2LF0kv;gHqDrR9%JZ8_o!0K>`9@Ws`Jb7=8a6G
z45}f^2h$W?v#}M~QGdh&`4w&;zryw7wYFi-NzlP0<k~NcQjh30pfzd=wDMMgR&Jwp
zp>z^q=tj%YFxAj<Lk?4w{wR=TFpK!g_^b9uN)}gekP)B&U=$Qs=y%-zPzL+%t9v|c
zA}PIGin)y!&_J)bn&&c{H|DuE(R`HYoVkA4)Xi+xVy!s3{>m3!CFriY^6hE&$-kPz
z;(oG=JC~;&1?O>qP%^wBL9<}MQD9*6?@N#<FdU1;7BDOn7|?004u+HPxC0C)YQlq+
zIFXn2l{2x0JF$g|tiVb{Zi$GSZ8Ez}5A_8NEoh5U%c{Jr7A+NZwT;xEaSa$=p$Kxl
z26y%0PJ60jJKZW==s24cEp)=HEFzK$F0L3Eq-QS52elU3F{7)k%`Hu8cW%2L48+ow
zCeBxv49?P=bQzv5J@f)FKtElw6QwRnGM-K3&%|90vX13J*MzQ%Pi0d(5g>|CB~;8B
zT)=KZ$0A&7TrLB8zW3I9>tDZ}zMWmay?VQ8QF38av;N5XUef|qGGV-lv)HE4^3}b~
zYNIOYh{c1%TSf|a4U{EfFbZU3RVb>8u3|-3mJFT_BV}=^nsF?Y;H>SqRUGrKO~J<I
zUl33gXEf0PyChXlbz&m&Zb!?RaY7mpU=a!vQ^Q%00@DR5>&sZ@8q44^#v|Sba2z+2
zYy`Wzm?g3d=cN~8U${Y~BBUf2WMIa*thI&*#_L#QhF=HhAEp#dnfvdPH)WyNu9-jf
zi++C`P3TNjs7AXk&=EiYyAD$$xOE_zy7vre&X=n={SpkTaN6sMC4!;!t;ryUcp#EM
zUt*ryL2-%5;`pL=Wu}EGH1YTqZ>KB2d4q;yyuX@`v}l>%pm%Zr-R-W)k~nCZz@nNj
zxx{q93=6l2F>E3PqR3L7F-{MqK*Q=$+>4*)?~c$jD%boWRym4{7{5Zx900z^EI%kx
zT18;jBrY0bU-aayxyuw5e)0s3bwc%AOM^zr3{bvQvT*{djAFh;21P1RLk<-ItPDv+
z3SbfxdjMMZUJeJG!=<|69V(kma6=}VR}IoGJ+;jNDqj6Jhbl?7s}j*0Q~9)7JfPck
zWp*p9*bt~W?1xG)j{{(1F#Q}V<_@i6L3(K2Pja57F~wjZ?u)UX!VYhNVm}qelEq{N
z(V&ggu1@Lrt$|iajTVUu+l!?(m_o~=Cq<E8yhu(eWr0K{PV6OFQ#EgDHA4V<UH;Pw
z|0^Sr#~WXXW=(BP{q3$zal<JZ=_?dfH^#5t{-p{0=f=Nf_`j?=M~Rm*lPk$sPvH$&
zw*Xc^slOtv#ctEqha1~6tvt^!vb&CH*g2-Ht#yowwe~GVQg1fUO%#Z?vx>1I<XK>H
z*U0y1G?B_n$?#8e;__!`#6yC1Ma(^?5Lb3u)%gr}*e(gKrSx8F@wh?Yw;8!);$)C<
z#SLkJzvM`~yyKMN+ECSHutpQ8C^Dsa%^NDgj46Nnz-#hE=}i5%!wBnD+jS}TTTKJy
z$;^O|-f?O_uDHXKtLZeJN|FVxd^gK#qOGJ_vd^iksX+2oEVjc$=h?)wn_z{WOYl1(
z4o#I((8N>S`j8enY;wEfsQT#FK~H>a;pWjw9FP+#<y!x>&DeA*!TM^+U(V#q-<+3-
zY;WJ*Wfdr+Ue^t_H418>S?fw%wInxe={KJyhWC_!tx&gu8Ij@KZ64*;`vutXLPu(|
z!pX?L;`a$U<6$dD;ZQUG?Mwjh_jJHV{@9Cm!xCkE3_WaMFJ$+o^5rayL>mue&+fQ(
zc9$w^k@c~xxy-TMmezPCcB0p)F0Sso=EB~n{^P4|!`a-OreF~2Y%mD&!^*L@$oqXI
za-y(TInLbQwzaEnEp<gy)t3XaZi7t6W}VELSSQ~uWKisqk}$MGwr$U--hW=*bi85%
z_io;EPL!*L;#Uf%bBvp1s<`Tqoa#<0WH{iyn#;(AumUSDsh#z5FxhG|)1JDTGjtii
zKURwU`TGs#?saam#$k4V?zv;V(aC6$sfH=mHV%1so-h6i1FNjN{u=Ar(nz=ce~nrF
zrv`Siyalj1?^|bxw}Jb1(7rveKa<;5fcj4W`_{15Jo4`v(0Mzc-3jVi<x<sJE=?J8
z=g@_I)lElBr)$d!f2T_nx9Qy0Tj}oSE#2E<U+CszGk~9>(`3u|@blLC-{<EoT=;Fb
z)99~mrO^#bi#x&&(Oo5ZkH{9EKm6fe9sckZ!#5*z7g>$o+#B9ItXy=%iPCOe)W*jf
zW2+XkqMP~pr@(Df!YVZ$J%tl9+UIn@D!(ab4y>*rWVQBQIu&$NrZjK6Q?V?sV#d*`
zKH_Gzn(m+ZG_@M!0**@G5KTg*QEE2H0wyccwy9beV8(O99PT=pVcTF1?O;g3SkGBx
zOk(Be>U;r_n)w}=0;+J*IM|%eO>*pfZW2uAa|{08w5jd&z14JE-xxo0$KR%PM-W8Q
z_zco|Q%BMt=)W`z88_IS!=k>o>Ft>&2+rG<JIalC-ad}Mgy4KgNJq}<)P}y~|GArT
z)v124A@E#n3cpBNl`LshP-)Za&02IT+Vinpc$42rrNSZ6!s7i`AR)u2sEaUq4l6U8
z#2DW*5tRa)gh8S-qV{^~T&OY<OlVJu2?jkXF;NehN@asw8=CojW6VmWt9+96+sh7h
z*}BSx8<1LMh*h7X0An9rwX=oC-xrj!w6UhCV`G{(Y)tR4z+|(4`iCe+wqjEgRMJv^
z(3~Kg0$ur<@$5=4$tD#|_TgVm<M-(=UGtf8{^PP45fRlcjSSWa1*2SOPcJE1`gWP%
z6PZUyv>OSQ3;=Vz$Up(ToCH!VA@<&$lqh8+^TW7?dwaWX){%@w3eR^^*fAIuT#2?;
zMPB8k0Y8h%mlxSjDnrdaiX=$yY?91P^OpG(6iujlqVw%|7(648aw-%VQ)bq}-&FlR
z<tG|fhxOPuWBBI3BlBl7<7#HbA6EDI&Ki9;22%Nn!Z~u1^=cq~1GxPoKnS&2Cfkz|
z#<?$cVPk1n*4k7hX&1XNhE_2<>jg!upnd->rU&wRzhvclh3S5i#SR%K>|oo$POo42
zEE?5toE_@;V&hE1qnc(j70~g;GHgk2^IB$3vWuAI#d)+$KPBxs&dq19_v3f}c;53j
zt$AxV;zy>a{Qpk)qsoXHn=L$GMIX#;I`~Gxhpgbk?ID#=z#7K#H<=@;tZG9feZULa
zxJ$bu9aIt>lqt8CO4@vKk`y7FXYBE(9205L3ykR#RxHmRZXaIuHF{?0z)fcP!nAFD
zQ||?tSZ#tADi8eoby8f0Ze5@UT@jyFN%F2G+!G#m?&w4IY+Ul(Vl?o6OF=tvl{1jN
zpkPsQaD&mf9b^imwi1n3>lls`K8PCB?MZ+=x6D*hD7KI$ev<PNL$KOhm;_yD@8yT2
zSgHufZcpq>SEplre8}K6un;l<Uvg+NI5KRLpipN85H(7A-T=Nk`5HL;;R)6oTdVIH
znvjtd22RYz<3eX9i$X`?U-&vc5`o5xR3^>B26_Qj9Wf(zW+69|+*!)JJB2e0BT?Dt
z{*~L4%tHdl$i~2yI&IH*Zb>WBbo6N-=Z9@8oA<*56E%{3hjR<&zN@g1Hd1{&3EA_9
ztbm^KBvX{aZLyD01@oZlk2Zl<>#X0$?$G-uy}ounQiik`NyC9J@&OEY!(rJN+E5K`
z)G{<XFf$Mrvr*B5xkdq@U<EW0#9YYwx2If2GO|=_-)n?_q(=;;(k!zvZ`$H*yuLi2
z=a_5q$E7{Yrt&Rqa?D^p<3|#MfU@R&vs6<<tHK=rrAY<%_O&Lg2j`u54F~Dzd9SYy
z|9c<r?XR;m2GC7<y`Z=5`Qqu8!_S5o{me6L*m`)iR(&vY&osjzpk}xIy!u$_5P(%4
zrYb!1x<DC<IfR@8OYX!sOL6b*+iCgR^Q@R%zs;`S7HGKnZ>3|*Y~m+iZ~j=aFnw}+
z6bUIsUnQsCenc<Q*UP@Ab;vnW9OqhbobRWnKx&d_QJMIYUJ8)!`TW$~UKxut4p2{P
zKPzhyIpz?MXQ}r7F=&rx%RiT7*C5}XCKMRKYt-#LI8}`%De|vsr(MF2J7ax3sV!9C
z^j$yeL}Orm{zfB}LIbqXYc!^dn&_&s?4UVizj0o>XItyM)wCVB-)hkPQFC&7A`Kup
zi#5E};m*!jz4pyH<6*4OdVd*}71_pzi8^kb%7>wWvaUg-hPO#4qP5d*f<c-YV+`Pa
z#X}ODcugeL+g#*8!EjGdT5mZ0ZwFsBOucX(hDbStO_m*5YJf5@42)?u<MlNo{uFuM
zZ#m7m7F?0uO0vk~8zH_i*Q(~GYn#TQg1X<$8`bBTghS*U)F~vMEs0|N2Al6VT8VGB
z-gjDwEeUKYMtHL>>QLo90chG4L6xj1Ofy<DVS}eb)%Gxz`XqX`#9e^5Qx)r>(8-pi
zmCvD0m7Rt%pkgMJ*|fYr%4@#nXQ8zcTf=xG>4rjjNZC{-?T0Yhr#7rtNeK#xl5to#
zaUx<e9L7|CZfCLI$GDm(vcl0Jg^K#MQe;1b)<I@Ca_BK;WfpoG+D<eZ#K0NFz6}m8
z{@8kmZ^>rReu%aonp+N$|9eN`$ug?KZxv36Lg#2$XYanv7GBYRnB4a}PcmJu?I_dY
zfg?@yChBj%uvebE2}-bUb=z_;J`TlgAsRS0b$*))mf+G?vUVckiCintQ@lwKg_Ue^
z3uVVsXKQo5aOt-h#x~;38_5mKFm4M~;l&R_w?lK082)D|@vY7h;;HrFqlO>q;om@T
z9o#eR*O$&g$QnQozG?-9%qLL~{QplY5Uh^Edbsy$%#A1$V|xT#;bAU0qb!tSZ+?HO
zlmy)OkHUwK?jK;Z-ouAq-+%C6>{tE1x%an54m3BJr(16_e|-Ku=Q-SSOvdQn@?!C%
zK<(%=5~gEl((^Pkp%Pw5=Tp23eLR+TJW2p|ah5L=tXyJdKJnA?F1f^>FU6J-w0fH-
zfVrEtk(rEPY=HXR#?3nPr*)YQr@t)4_e*0{ncyC$yX#L&nM(-JnB=BEEW@AC#H@G+
z^MWm30*N~x7~=ry63ya%zeTy7#+w1!uJ!mJzgyZ=6q>}s(RqE1v65JN+Y#zQcEd%r
zj{uaOOOE!ZRs(b2j(824-S^AzgGAP6IA*Wo#OpZe7D=2JGWcz%dFkiy&g;JDNIgv3
z;lMrCUndo+v|utSUO7H}NRtZ`gsWG+CdHkjkX6`qLw#uL-BH%*I36f>U~yVm@Ku$V
z+clWiWaDSlrDT%bFUVU8R~b{-qq)6xm6zJQYQJ+Uv^9uHL@%%$x|)%ymzcJ=UN(~M
znNEC#)W-3&h@q~tF=?)ejh61^<fxx2N3RpFJgoMc+wc0iJUSQ->z$K+(~=09sMD$P
zlB3`OVi$0J+i)|%i(g;wata~b{C|9phzv14)EK|F=WYntLOJ`q@uFH!wOMVnl4rMj
zF8jcIo_l_yD)|zMC5rXuEJVYHv`pvA<W+|Q{mONq*N4$MT&a8fF|mk0E~P&uuxe{L
zmNoft?jEZPH}{NQXwP$TqSC;MPn1=aIF8-u`WjaQAaNo-kwavv^{6L@p?0bKbR-=}
zmy%}wzSPd^SSRpK<mc<_Pr3>;q{{x_lod-OY}mI1ya7JtKz%0t`p@cq{kAl6`b);d
zUoqm)%8GL8f#&qTEHU!p99ZZ#XURF7Wxf3-xeu-|KGUh(sreGltls~8^UcZ0*Iz##
z_BKLQiHi74lKtB?QDIgn=?>A`sI&UlWvEH0*OVjPe67rN3Xeq^!R4T=(m2FGBjSr2
zM3n9H-ZWxzwXLEoS?W&Y95Gj0gZz^aUFQYK(i<+MmGm){-jQ>kj@6|2j)JF;Wn9G+
z-Idk#Q7!zoG&I`78nKc;p+k1g?I3hodt_PV?+G-2kuH!Uy^?<^Rl$6YvN#KpAldjP
zk|4Da7=|Fy+U+u6%mMUR(bnJL4})GGPr?sLkye*|FQF#rbe>?kZ}uFJJbKFrOd4|@
z)k|l!$i%;vGT~Q)EB+T_lp3PuQLCtV#6``c87c6&3Bp}fyt(6>W+Pu^lw`{FcG1Z;
zFb?G^iDkSg^i5$%A6A;C<U})nT}nq8RtEEz%G@Oe5I;M<(mExOwVcwv2&=p__9tYY
zqf$C;Nn4zj-anSOHgL(biH@p#jRa7ta+#ilhgAHV8^kbCNgt~@TIWpAl1AAkrj<56
z$g`956#3e-x$=4b$1+S=YT&=SkICG5tmd~$po?(*V(BTOEw?;rZ#pvS5|?0kJPT$<
zXJnXuo8~1qOjKgXjiDMmUljU!+alK4E&LZ+rLZryGeD&4Yx+z>FMu5i)ts;fkvg6K
ziAS_Hd1r1LyIKXV9>)p`CQ0}OT;G5!0yicPXWgBO%Hao8_U}|yjmd$NP!%V~bBf6>
zHz0$NY#^CaOw#rybf2oJn<G?Pa}T(Se!#RBO;n%$Azl3)+eN++s88H?n7q{<#@j2g
zVMEoKJ}$F)+a;`n&SC<_4~cX6%IEb6#_B$xc9`$LO9ewXNFHPA=5cPr^9{W0a7fY+
zQT07^{i5Ga$UYJ4Ku)nFTPT2lYv^H^(-NVa&Z~|Rl&zB#ry@D~;ZTNwliXD4(67{n
zeN0gL8riUqIf^|uzSeNL7acret2|#;=}MikS^!H&ZHz~)FxlU(fZ7GA0J;)HBAVwP
zFvW0LCyFUHc^HW<YH_td6Tmse^xbS!oD#DT^uf}&k4vw&UiJiAR5e~&PvE(#&LE4+
zIrEcHn|IzFMZuw_mZrmb0yj0n)ml_v6H@!{BsrjdWI%yv&NHw`XSwqm>_pw}D-ug!
zr*s`|bon>yBtBK$5B-_1cSHC(g1IY-U>N`mOoK7wNv|(2bZBXYTq^ZNFx>%o`}-$(
zyar0P-Np91$9I|(9nbX`tL?c!R4^iY8jzYcqtGC1aa61)lyrKnHDJ%kA{c!{DI-io
z@QR}HRWkewhjP;cL|L|y8%R!J(^@k1NQ=>#i06Mrwt}Jy!^WrQNxrTyz@Or?D;<2h
zo{=86@&c2~NpUK!BxUY<jzzNk!t?uzS%(!1^^g5|ssyRN+avV!M*j44S<!9&1z)=o
z9aC4LV&fno!J#us6j$Hay<0<DR9d)bj51JU@*4}IGG7;QQjULu<w?tAAB|P>P8y<1
zDGz!Iou*_<J_b!X1ESv={i;Y7>p1Dmjb_roB4tk4XpxeJGFlb}jG_+)G20q*NP?LD
zgNQ+ev|!^U4j6FEt{cHw?iQ(3_GNLC$gWLj2EZMAuIR4Xby;Uq5LFpjk}S$s$q9g#
zOt$zliea^suMLwciRxxkXuBu5KW@fkRp007ne!s<G)I6owhYH?D{kSiNXn|nFI!rS
zmq}DOLsCPvH!@$8^V`bRr8PFtne;RR(k0P5NVZ&wWf>WDwDPu<jOqSBVRQ&!!PgIm
zg5Sv{x9PAD>ITSGQy%f+%6ZqmF(#EYPi0ZrJ<L9i)<hdhn=Io5Snh2#XYzfrc-JoZ
zu=$P9O)}{KM2b=(*>u$6a5mkBIm(nt1BPz{{;KKhUtnwo3|2Rd2A`e`exDhWC)6Hp
zy8%}Di~J%fP+jZ!@(5xtHcT@odA-aRJy?k<&EOo9*~3fVd}N|d&7F-Sw6sL~_C`_6
z*@zc@{Q>xP)iTNvY>dL(jZv7_0!15eFI{GtvO~cV020a${a|YJE6BhtQ-^`GhxCr~
zH0bp!BmdY4tO;~4>!^!n`NaMez>g-yaZ;AiDd3O$?D=pjK9|3Jp<|OEf!1Sf*NMAZ
z!U(9)tP|jFKIAf5@xIF;A={L~7kyM0c=g<Vqri}Z$eqEpeR+wjv5IL&Vw??{JV-<=
z0qyeHBsTE{@zF<<#Z_3s%_9z`u`$hpGoAS7p3v_~QKDqrKEso<RP%LJVVL_XR4)eR
zv26jKNRI*mCmFQ$4z2`wcAl@xWRYKF@YIWnG#V_Ud9v&Uy&YLR*y-uBFZT5>9C)u6
ze7WOAG0?7Z2MFj+?@Rp|rzpPkdtbsf*hj(FN~N`xbZl=A2fj!@bRf!WDn+OwE2z7`
z+`S9XRbM;NEHH?M!FRLiwP&5fx54ftgd(>W;-vV}hH&uKxTZ{VP09Ohwi2!o%ay{K
zQ>MzFzdY{Fv)sCe@C5rQM^2wV;O=ufv3pS-Oxec!0w%kjcS)vi6dr4Fak>b5z@DG~
z(d*Ma^<<d?-F<NI&4X_qeSPrF!>{OV5oK^$@hCQ>vh5i?GAXOiLm)$x@@Ht@Vauuq
z`_6GP>H*gd$9yke5%v-$9nZT&;@otj-O+<{>o_HJ;Lsd+S%v2QT19g*89^r&7(vj(
z&-46a&)p|A-qmC<cy4J$&xef$i%;9E<{^0SHOj8xBN`<5=^SoM#H|YXSKsQ4*V6sR
zto-%${rkLnMsCzb@8_8ul*xjoG8pwUIcIG>@xQfa)6avU+s}i$^aC`iv*G)XwzV{5
z1s`rJ=r)g$<8{4J4I~XPO4~zI<S2af5E*y%co=?zMj-Blj>4fn;>SF6K8;~oD?D@L
zlp&n6xjDNq_To6TEI^9c3-C-xXRv2}S*<ir(J=BiGg7`8DE#Dj*M3T2x)QuNtNyVY
zd0<t-34FXs8Ykk$oD&>n_3SH{M|J3~0y+0-pj0#3%E-Y)X@&w`xK*4c6~)?h*Am%i
zMkU$~2P^F8ZG_pZV#@)Dhc8sc5WlzFv9he+oVInkGTRf#dGGDV#n;AaPdTl2-nShL
zX_$yItGL!B)wM|=!@Q>4)vzRuFNn78vdh9wDSl>IQ!3s5P4~*0z@T&dG9na5OB38M
zSt!pVV$(=rK=Fu;fOaVA%`!)Lb~hGiYiiK5q)dJ&s})O>#mvKEJU>ia=*%T_)Z6LY
z1<i_s=4u(vmGjaPcptBnf#K%rHZGjPLieMbc?v<C9l87j9%ciO9WG~LNlAhl<(GrP
z*DgZ&-kx(J!~MrTP2_=j7M1M4BxKj%?P0jMwqw;TC3;n{M(mG5xDDK*RT>o(DiYkx
z-Q`5l?~}`S6FuS9WgM5>_Y7f&d{tx!yCFuJHBtjvQ@ZI5TU+yZIl7+7wKIq%YR*KO
zjY9qRN!}CcI?_owe$00k{J2LJg;q~Q6VFhqHuy`$#v&<WxC2E%-GCma3&yDceBZC(
zl6ss(<+?~b+K;r~FeX8ZtR5gAM6@zpc`u2UQapSZQ%51#`4<2IuJmWY=TWy7Drq-G
zXP24Q?x{BOlM|S#N?(e1<rSG=t|scc6vV#CSA)=_4+ARX-z$PlW!5~()eqVoZmoXk
zWj0Bt%IkWspvVG&W86T*_Hd~1iCSq#*Tyoy`l(vwWfn6RPkh`;2W2-lgELFh=NT~^
zdP$JM&+Bv!huW#o1M}ofhf6^$@>-o`moUT;gvb<~hzZhC1zqApJ4R)bo$OM+pYyR_
zA%7$v_}EnTS~E2n1VV-4r_v(f$*XcVd6kq&$gZdl>(R-XfVO*;^%1EpsILL}ucg<0
zXgarbOHdL{P^8|*G_g&gP%(u<)vi!5+0K%=l<98Bl3DWrsM={7(>OZ$#H-q@JQj0%
z&-`*-EWNj1!hswG={b<4d*z4I{>SsBID{WN@FOe3-dR<xf_wKaE-v;j?(gTt>Ai#D
zaEL{FJLaDLnFb?YBCMX~AH&{oXSnkK|JVCc^p1K)K9FSSWckahAD-psD?m+(cOiO*
z*#FU&evg?*oUp0kJik1I6*$|0`{wy@=V1Tg&hlVqFv7nh=nNk8@7@lIYu_cIl{+Nj
z%ihjOx?F}mG;7c$1{dj~ItzRIU-#}o@8V1K{HV7h30K&=-}_STyifBsqcV#yz2IsU
zEs$IWz5A<=JCET1`1kSZV^8H}#+Z#kZ!p3)h)^hn?NI>Bp13#zBz%nlyMi7t+=GiE
zT4^&hCRa-^padG8<;5Z?WP=Z(moi_%>io}QG-|1I5fvGFop)8s$=;}?A{}y_oqhAo
zH!XF}kQMK&^XSo{Sx1SV0-!rGK+hQ-vOOW&2;`Cp1Kk5??g7HEX~6g3!GoTN<pV)f
zH}Wc4r0bGa#$63s9vOoM0FTlW3>i}&p%OgF5n`<Tp!fCge|sW_1w(dV|7%snSSC2e
zfj{MCN+hGVgid$l$;8M1Dp@5FjHaN!gO6smDwTI{xc@Z_wBCtD2h-9IxbXwnJ3T@M
zzfpxDLrW!v3e9R771}yNL}=E~h|pF8(V$sF8FRE*W}ciZ7T<hhEi)a<0lV{tYHcwt
zhiRN-VpzzmLXj*Z>PqzXf(R4Ez-PRWV*H>ldqA^n*=P=^yOx+lYcUi{xsMMB2N|B<
zH+as?Ks5$Z_Vw*$^lCq-?dbYs*dnqC@HQ0O^v-THpq6ucZMnl6b=AV&P?vVPs!RN!
zYnsrx9%!==T%AWBC7T%ZM#CWj8l!BVEc1(h!IG@enG%Xloh!wx6>}Dgg=`kSqLa^a
zW1bX{>rNqKB5x2CNEo!W)jv*vcfm(!dA>Mlp+VnkM*u~LSPeyy;#xta{^%GZ5x<RS
z#c+TCN;5(dP|O^VTC@cQ8t6w)6cU^VF6Hbbw>4Va(!Vy?I-7^nYF;<}is67qJ{msF
zn(4by<LpWS%&p&CAegO7j<O--vUW+uHc`gH(`>GT{4+Dl85!-8%{g4R-bG$MM^~jq
z@-hp4UT%ExX+EQYzw8tiZ?T^yX3|(r=cN{eCm->So|-T{5rDIL0eo?iB?XF-yB&ky
zC7I-!+jw0o$@!b|NR-BewPaXoG?eVULaC+JDpfLT)!`6$Y=SHj9OJ&G5>9EKJmtiR
z4Iv%|wm+7zi}~-N&8#5tT16SOlnIy<nx%Vc%$2@jdS;u?tN~oD>%qapp-=e2azJH+
zdZ|jq703IiwCMLv=Q0<k%?@@roZ!$^Si7uWG=Y)p2zJb_f>s%&B<-%<Dz;b?A8Z4Q
z1%<8CU)lrN$bNd{yV}xP>q{xoXuUN&VM=yobO3`X(P8&bAn~Y62C(0Id!h8;6}LO{
zDzb?I?iFBxWljb8DEFpDADB&gZ{J>!@3JwEu~nx3etYq@oMFAUZ@<`szIrpx_@B=?
zmFTc&XvWl=T#*<z03@W1k3<E<HJ5GG@4*=QUzqF(R1>8$lPS#Tt1s?}d-Q$Q#8+sy
zEg?i#nuwao!mTs6${~%jX*wOwW~hGFgdhq><LEHuwgNenil`K`_AOj%Uzr+JT8_f{
zXMP|4&HaAwt1o(Lb*Ic%z4z~4KbAiB>P_s=HW&|z1Q35p?dJjQD$FX8!k>}RKQ~P*
zl6^)DFeQ{mC^U-Hv{O-|Y$C~dkkICn`n@u!aBHNC@8Iw(G@-%9KXhs_(Z#=mjN|dN
zOt7e?<x-=p$vKTy)AACIwIsw;%ytjGpSy-Q%}fRsqfh6|1wrPWr_L~^;@%#BdRGIn
z_XYiCd9e+Jy1q^)e1XhvD<;rFfYDODNnm$eE_%LwN+-~CKpUIF8)8<M1RbnTOP}5C
zF~DrXVi4#M1c7vayPSua^(ml3^tU;Wp<&_kYOW<UZji*pn8fH<D!<LiQ#`T3)UL1L
z9UkxiwUEex_T;^Aof<y6kMFi<e_OF&6;;5&8Wcd)nho1`k}ns@!aPRVrTGmv^f)aO
z8{zK~y${W!#FrtD28bWKLOp6z!(*v>2dp^3bVFl1CP~XxTE{drXPtn93Zt*3u8wfb
z#xJWv({UK4l!u!cC<U>gz%hM5ZaGOHtI;ylL)#767*tG>F1yi|043ZWi~%Nb0aNin
zydBZp2$QrBU#(i*(Vr~$0BHv3+diGi$azkznAVCWM~t1Sj-w|bC{$EDKmeh_!>RR$
z4a=4v`$MgTiG?VsHGn<=D8nkjsz#V!lhkX<5PulpaItCxRe=atRdfW*F1|3sEc@Z$
zU^v{=CtQjttj0`I_f^PvKQ?Is2S9MufR`RiD|FQWv4@tgGnGo(Oj^uCn#}5OXj#`a
zY=vXy)}YIx)A4wHc)YhaKU`YZR)p8uA1?s;rt{g}-U8t;pIu*j`E=gz&%(7Y))cvL
z;bVvjsBB=g(S4pkpP%6WXQ)4X2|u2ow(lJO`4EzwpEmLXTJRoqMyF8dvSXCuH<;Gx
z;pN`mCo|Gla-^sJc!in-@8oc~xAzJc@nnWB7t<3Q>!~kZ;s=kuyo6c6j|_fHa4}xO
zhbLI(JUs2gIN>Z0UZP0>f%PI(0Zc!JuMQ6$KAgNd3LiX%P7cF|UqeGj;WuB?)9Bz}
zauB?d1`DsyPyu~a0`CIDLcYR)0T=GRhtC)CC8HY9#Bl8Go?c%A7Jr08fr3;2wzmfd
z!$-2=oqn2y;j8QGO#XmZXQ<4Yq|;9{*C4g3HGnCar~MXw6sNRUuZ*wJr!WMFK-(z=
zW_dqRs92(Tfp<1RBoBr@;av)}8bG2dJek;C4uu9LVwiW{*i$~@>^WQpS4V>ptM@gl
zC#Ea0>bD{`b;_!J<5YV>Eq`J~S_Y3@^}Y8r9vTo$=3qChTz#glj6A>uD`9<{9@YXL
zhGjOAMcW81x8Wq0rXlxkyJG@-BvO5kod^?Hz~h9%Hu(Yif9&lQ(-hc~FpMYaR~ewW
z3L-)*)Q{5We^%1{Y}Mg@W{J^2F9G=!X&>+xx3-~1rs0YtiNJ=x%-&pLz*U<9{blwN
zJ?r3Er)`r)&Ll#4nLS;u3;YPT%~xc6nk-%__7m4)A#Gs(kzB&H1j{Koq;%zN-2ZyL
zjpAOn6d>;_8@MHnu`_5IZia7i-8rnNmhJqIo#errxj+sUF7wX}BU^SDV#}+<{xXlF
zB^8e_RkptK2oiZqGoa_nFkHEMzP`+2G;YVKZ_sR<Prkh`!03$w%Pqy^Ot%zh2QDwy
zVqpFwu#0GBO#v%69q_+n8_rVP=mt`YSo7n&VHcnD(F?pH19(&J&0L4Vka5X~dl0ce
zvk(#rriHv=gyGYC|J9opXeTU|c)rcUUX`zUVoj9gq#6|T2M*n0pTvHHO8ylK*x~X`
zE{mLmxmB4%BXoH0?ZK(655k2w_9rXoCfJ1!$Na+@PlXlPGb|26Z#7v5$G*=z7SZT=
zW%F;6HeVFF!xP^hRP-vg=k5d8X0jp42rcn!u6_5)iJDMgCy3MW2lrL_!%v~<rcyt~
zpN_(l>+4TP)aL}Fm6#GJB=rD{S~Y|5>eNSRf<V00S?E<x9sgeH7&QQ=;Z^R4Oo`u6
zx2Uryl+`6#j+#5%T=aq+ds~a{or&J+<9G*vD3z4_Ykcn|eucZ7wS%+wS)>nxUf)|z
z$_eS423dspv)~>l2c{oa^0R)A{sRUXUmL#w3O^lYIuC^neV%Nj_t%g_LTI^r7$!$Y
zBXgUv=D^iG<GHAksDDL)$uJ?S|5YZh@ddBpp;uVFRx<DkszBWj3SIN*4RTx?*ZF3{
zUlK%qhmvV62_UmbOJ%i805vEwth9N2F8zeqTatL;g1k!Jhga=}IXlJvxwPTIf@oe@
zGq6cmNz)*vI~3aFM_E2nz9-guye?4KOSCWS_3Y)5*+XRV`iK??c<ApdVT-hq(<1q0
z%|Y?STwO60ah000R)1VhI@PU}<+P+Dz=Z9(lKvj8GPjOo8DtM?g-QFgAy5R09ecHn
z5u=qj#?zn#8Gy8`ypI)(2`r$=Pcpg>B~(E3yUM%ww(Q?KZOIs_&hkcQ7zKn<gov!o
z#Oo|wEYR*l8`xzVt9Cp<AJk5;2nVsdKttXF02?{UA5l@{j`0PVy&9=Rs<PVv4?tf~
zGDl1Tx+eja49Bs_|321!@A)(aMi0<M{uq}>5k?5TO%je&;X@=!-`5w(tyODN^T*3O
zbp%-LQ@ElofXL8A3sT6zq*t0dwc^%0&kZ{)*up+UPO1gZWlo?)Qbp;~#MwrpSLMZW
z!y0QRv#yyvr-pk%s!H^R)g6k8jqtHVJzz(xPM=p@cu<+2I%RFUpPZaAI{SG`MRgft
z7B2ad4tr#oKlsicm6Ika{z5pYv}8)GU}>9-J2N2PN<^%ei3>z+YJgg21<<6&ZM)yF
zp?Nyihi$E{;qiLLwW`;i?K>AuDoqsHQ0FMrR`Y1ZA8AXy2<~*&qz_G)doO<Ig?Q70
zXPgm*7`!*|-Y)w77b+q?8I}Sk*GCDy!E_Vew|)R(P~a(*h07TUC|X<u{H*{WJ$t^c
zdQHV}R-1XjPGpKaK#>pBn&8P%JD2v^<pb5AWLf}Qnt+8jZ)N83{N*v$ZiZv{NEUiB
z<c*z2d6r)&d;&6(BE-4`p|HAHTcBHpF|U&)w;Z)?w@Xl&<C3wqY?`iW=VfwMvcTt=
zi-;*8)W@}Wnt!CD#O@}aHPNzc(yWm$ntzoM=Ywm~W|W*c9FUWh?go!^8?;f|3Ao&u
zFY=m0dTS{YKfPtECVH!8yJ2okWQi5RI8=7C6_ypk@YaAd(R`UK#yJ&6HyXY>!_Xw}
zFf>Z<DiMjKfwG-6i(_31Oa$&zQO6?@?}j?2H1ITXEZi5i(!Q{j8M&{}$51<BnX3Hs
zbeVWvL~o#L_r&gQ+z2kfVS9tNzjBsAE|OL?FrKyP_}wU?STndz`*$^hE?Qxr_EN#)
zCgrXsH8+}6H-J>zP;MDRs&y#H!NxbnZ)$S-m0cNqI47;4yxFB8v9}m*_FUV}jXO<!
zI|D*~rY}%^cjGyLh)fYJtsmVH#`?35hjy2#9Ez-H$Ue$!2JW6T8&>a4Tesm_bjQtV
zPwJ{|(^4O@ESsCJRz!uHkhj6H_9#>hGM~a3Q(}{G3$C7w{;ypUC0lQ8C2YdJF2=R+
zg8~(e*i5RM>0xk`UYhNY0?`eWlEE2Z!kh3VO=>517?NEQU^UL{rzlIv86WvZiQ#QQ
zTN+_aFnofZ^bT1u`o_D1H=SbB+{#9OX+L5+0I&3bbl2a01I4_7?Tq72Lpsw_I{3t<
z7|fi5+T@3+2^GdBv@afh=wMM04^Jh=ZX0<^8wKnSG@EGU4zexIMYq}b45_!<v8k|<
zmea64F<RAXcl0<LXBaVoxy0oCzAyROjPbR2I!-X&=Onw)>#g-V-t>5bq58oMtzpME
zdAbGpU|_CjdwXrnUDD~4h30Kt-|#Rq9#)QX70GfBGv!>x{i^7ll=Y%tm6rY<W!$fd
zyHw>?5XxMttoIsB0`8ASe{V%u+r6P$f|u0|ZzUB<Flw8|<d&<kX{`%NY!h#Ra`y@-
zoj)Cvio9xDE!{QT<&xsLCJ;(dg1$f3*B5C9SG{o&UXj`OknC}X${H6g5@^0jqG4@c
zuHMOoG%;If!H$d+Tno2_mPez)5d)*ir^A{AUJ9%GBW2{+eY$Za6LW*CM2<09&7IC}
ze?t_y(_Rrz;UyC~5iXY|{RS-vz1fe;5>KE|m0+anwlsC8hhcW9@bxv?BL-c4psFO;
z8H|!gC_*<AaqdN16|9{n0Y=+{ori%dMBW~&LWhd*8wCjWlaH$icnd~@T8l}4^#+ro
zy-t}*5P4A+2ni`~s>0@tQ=$(PX+W8(B-3<;*-|-UQNkk`<tULb!Gp9!veq(em}0Ib
zt6)WD$5>9~08WoG#i9*$;69%s9E3}uTQCVU;AX#~!0}1p=gujmUqkmQvO|6=iJ_g*
zK+U0t(MXsuY$-#@gtu#NnIdTCwAlULpw~~ue0zA3u{4FL%f5icAFlyEbB5__S@>8i
z+?$UhZnu|=g}P)Mhl|D~;{;n!(c*nCuH%e-7A0WH-rn4q{fW7LeDbdraQ*mXuOAC1
zrj!lExJ?9)uYbt&g%Zve6nkTgQJb3VE)7VJ6Wk^BSZy8W4<|@<?npbA+czGkL#~j;
zXn$@KC9cU_w%BApo8P3BMl;K&bBt|-(fzEh?ptn&IvNhY0zx>?b4(O8^pPr(0B<rv
zvl4v7u}>bV2i$NJ*p{&WkFA<C)JtP5g;ph+7Jevs5=Kimz7dLQYt<RX$OG&<Uxh_2
z=Dg0cr34LO+#NNedTsc%W)ymBb*PNmbPw0p)e+x<`tC<oJb`kwWuL`Q2=K~x=24r4
z7NHs83NvP0-R#!Od$XVuZZN=FXuyp#9$!#6-%5wf=HJMNLI+V{L*_tf4Bt2=&(}Z&
z+Qa-aBZaVqqXmv?Iuqu|;aov3)mkP(SHg}Pe!w84fLTX#CVd-gCVZz@>2%Z-+v4<*
zn^cHO3e1Kl1Lif`x}w-H*(RvS>Z8qgKQgkVHh~Uvu#fTH@Jd>C`8G<lG~hyBlax)w
zPmbVXZoZsQ<V9HlvyJF6m;wq{?2wiw)5x+hq`6KrGEOPD#fP~!$B=Q-{Jfl$-W)^x
zVL<+Y*6rDt;jjIxB@q4Bmgp}f(Kq+dwMt*|ZqC!P@N_gjJH)!@ppUS1>k+oLU_Dkz
zrcadpk}UEmJaJT)6P($JIMz1CILE*|Sy-G{SbT!gWS-oIwhj5D7^(&s3l|vb1mq<m
zw}ceYA(tb^c_v=A`iVRVhvM9Tsc2Qcscog>)^Rg_xGuk|Tk*q+`U6vn;@H+o<&&IB
z!5)(v<WTOU$zT-7K-*?{&eigqh3Ads`4FC|<#{p)N6AC+a{7VVnT1anWX@g4oEstP
zdvR)Jp4%=@RhRF>(?*w<;d^DL_*;0{Mm>Im^ZimSXZUj3*y_JcehYq+gXGA5>W=YL
zt}hw;iVLJ?A0<6|2he01r-mV(cwuL>O_5s3Ar2Dx_xk#s$BCh+*n_(uFBEiMg)bV=
z`7wN@pz|jDk+m@1{dj%-QSO`F@QwU|Z=@0!U&&umO0*k(RF)F*>5Y1lZ}l_QC;kFo
z&<}h=`v>39kI99kxIg*<@G5*r{t>(&+v1Dqh4py}fAj&=ydYbo7w#gx;AW&38#?`o
zsz!B1CTR=1j)+mH^-bsnCXZ&T0xHy@To@LhV23GF4`CoDBb$g#wCWcoRF||rC6izZ
z!-56{y7q1u@9hmnyG-9?@<o+aAvG=9MZl|YI9?s<X^&Sjh*dOQ@ls(}`d4wdQZcJ)
z`DB3G!JGz~pV%7ty5a}ige5Id{+8&42j|LTU#AcF*IZ>9NcWk|>qZn42F!rPVvZ@`
zzp(-S=jXWV%9sKstfR5&Lft}3ilglr?i^jLj8#ULsKO*Vf`tZd2Qf!k7o$vO8D*#I
z=rn<;MNi=F=vorIM>jlaJMn7XZA9T^YA(PbWQ$f|xsHkos7#CwuIlf2tuR$P(SNwh
z(VtR)>d1AN%@#f1QrAsHwWzOcY17w|Ta4h9U)GpbvyIG2#@o?Zpv>B!T?0=nLpg+_
zS|%B?Q_+rhm@H@u2gr~WTW(F(Q_Hwi%Tgz8A#D~S=98I)nC)mdR$-^d8N1N#Cev(Y
zyC3^mzfTp%`Jr_L*sZ3yQ!0m2N@`<W8_><tdKeJ_foU5G7ltW0Jx!sDnc}t3izc^^
z)>CHVrF@I{lPLUSzE2!KYESfr5fQ9^fL12vh5)180&0hn(y~b&XE$oa5?gQAsdwAO
z)X0=>u|DF2N^c6y_YH|q>7**6+?EljRHtqnmW@*vrDKu}T49o&U*>Y|1UPnE^>o@l
z1zyW+Fa4_$j<%&e+Dd-3rOv*CRztg4`0X{d3+J=g!gOkF%|LD%lEw_GitEr%r{G;$
zp$ftCIlEJm%|>^eV>ydI=K=*k5k?YcX2A!^qt1ZB_aFHxQ<V{};JQ4YhgT|=8z;Lm
zYHx321u#ExC*5szRM1dBs#U&PuX>FDz-VGr<jb;$Hqsh6q`CI8X-8bSS(uO*u|hjg
z9KxS-@)*^l`@wZLPRn1)q#*koua{=4wT!>e!<^yx)C+25770#a9|M0}M8yIN%2z$P
z!r0~STMk$)`~J*iaKP=fN7Il87B{}G2h_ks)tv{m+1Z^4wR>Z*QZ_q)a-|hM<9t#8
z(*@_mVwqS-k}3p4(c80$m6LCvk${~{<Uywl*(e#4W-kp1QjWd<iF{-vdH@1+0lY+`
zr;$l9_I_?m6$2h5nd*LQt2?X}`hKp(8o+tl8@`k@n?bMCpv!R881yn!$;!t|!?_eD
z6g+AM3~`+MS1TZnb4wgo`tofGL~a4czpOAwP+QNg9G1$aTkVnEFw?=3xm($UiSRUp
zmEy@|RBF9TEZHI&?BGxIqA8m<b5Y>~7;YcHc9CQy^TetQ^K1tm4jU3u)t}wC!WBTW
z+AKk(`0g&T`mM~F5Und_f5~I^i$ok?h8)H4goRM~R8v98RN;*8isF9@YBIbvBB9Dq
zn-vPQt*<3EBp}JiG*QRbDhGTLarl02j1|cqs%3TJ!!QlvL)+-}b$k?EUuz5|>l@vU
z#vjE(P<eLz{yukBSe+=;Ldzb&%feXGftHaCMnU`RID#|-hiD%M9@tvB>K9?fGeqaQ
zc2C#lQDHD@GK#B#B+IBjLtpxR8zTlKlhnaQw1FnzT_iVH=72*9&t)wt6!2!`Ap_(~
zB{Fwjd$p<*U*)A)UAXbCD589Ozoo)t6T+hiOKI6=PGGo82Mk;Mpk+Nrn04b;1j)%C
z)JBjD`e=QG;jg<$QgS<z#Cs-^WXVs~BtI<(*M(@#;w3G6F=_5VlQZM@xy1DEdDxMw
zZg1EvR}v!6(jeLwzqnyce!X3))_>0BUiP|jvzpE{^7&hne4gHr<Wt=URGLp^M{o4q
zHzfO{i-1n^X-NDR4$sZSom!UYyp!HY^^~5!&ixM2NHbFwUY<?PEKPLsoiu|6vluDH
zcXQag4S{hsVMzsVP|bDuX*CifreQWv*@2=kS3mWjZs<hsqo<d0C)!EJX3{ZPUZ8b5
z8eZ14GkrK#<&Vgxn>Qz@lPj{o3*t?1rS_|ejAklVd5|N!M%lGd)1yB{LI#2ks*RAX
zTqOH4!m8=IZ-S&?Y;Ip%H6tdk^}!mb`;EDVZTyWPm@rrgz+CE@uA(f<E0rt$QU+VD
z3DE;7qhx|p-UKCn#P#~uJbX3>+!9~R8N&X|Vv~JlkYsHT(m3+WEhMX<x5>DfUtjM^
z`+gKF(gj<~WUjBR;B=tA8KLT7)-d#{d;Ql=SisHExVMT<73Tm)&5H<8!x0WB(Tg!Q
zI}q%yF5`uBtHgUno7Ep$(m2KZ!N_EVcRee#6fD;7nOXRx_Nt$L<)LK*G!`V2VGzL;
zRPPJqmqIf;`7wx(P*~&f5BPeB7Aj3Qp<f8MVwopa>WKb!*KA6zY?=t_$I94Dv?V5#
zgxrRx!poEj5`$#<AOEpzrHf>qLyhDY>d+)DE!G*vowfa|Vo%~YS=rpCxVQ2W3#tUC
z+=ZiqcHh-~V-(sewZ4NC)z64q%zL9N?ED=C|Bm}g!!-#e!IPOoh1ZzJ(oLY*;;aPq
z;9|-A{?MxrqXMg>Je?9y-j&-ACM+aT5u!r@;8)o-)WT`OaiMMg(vW|i7L*1tM^U;$
zH6385HZn!=9uD{R7~M$;YmY|BeG|UItb3{vycVX?u6wN3JqqK-x}z1MTz4!D<<$Bf
zQ|8mUQQNWA+AsX8c%LFgX#|L+PQGI}%za+NOebF%41gE3rVp#Jw+aoMd{S{L2l5qn
zAZK7hZcjU;xjT%cgUxKBZXv&QZ{Doju@ZSoXKCi;mgiCc)1p!*u{@)2H(_a5y(U|#
zBox2syhpxxIHa_OL+#?Fse_UNiMchjalvI!W3EtR8O|H1u@09CHOxg7cEH-7)JV}m
za1ho8u(!A7QaZ0z<G#<ZXzpUs+}M5yCf5Gt=5$EocKSNjUXKmiY)vW{4b2>yDd}RZ
zvrGpP9glW3LxH5CWAPnU-Cg|5F212+lFR}-HRc4natU@}c4;RSc7R8X-bi}udp$?#
z2n9`4cWJ!rCyw+u%uy+epZ_Lv)sLP1O|}UsTxx0wqBRKMIBBGZMvr}$f*_3tB1b23
zA}uITJBjv2>!ms%y;|O8G?B087islF7D(jytP{tV*6rmM=%=UNt&KB`Y(i7QZLfG1
zIgy~{{Fk9%TKIzP1S2txZnz6lonv)lQnA@bTW76Y4#zFyx`F7*LVgFQ!*svE4du;!
zYwQ8o-Ym4mWK}zIjk9h<;MUT(G%Res;2s%8wjWDE)w|MKOvLu@=3eCPW?`P${!n$*
zA6LSZr~%c)OvxlcF;i6I5+>#aX6Lf}PQY;&7!#{6Fcq2_gSb^=pp~p;Xj1Df$<@!8
zsjpl!^_4ckD;<MOW42DapOUa~P%B@6s+AJoLE2D*KiN^7c=NqIIFsiJ9_fj4-{xzm
z4J&_duHlfIRJH){cD9tq;jsqbi3`A1JAXJujx`UVfOhPw3{d<`Kvp;`HY%NE8}Et!
zCIv=-&i0)sh#hqBdr1fV4bvf9QM8HgNpxA1!PVT2H0Su5w=AH(Ph$`T7D}R%^01H+
z_HdP+|8OZb^+e@fj%BEdTCPhc9)+(IEw?!WFm<%#Oo%r^h&Ox;EbB6IN+;Q(<21P6
zWQlGf)*XYrpuwWS7LxG;oynJ71u<cS_<L&_C2g$U6>bHyjqDuB)F7Cc;=AZPT~e%#
zEGNG_H-Qq|MlgMn$r%##WUQqfnK|S<`bZvkEH%g1GRcVk0xhSRM=!<BHxEBt`0y>w
z)VG6&y0FbrlAQO%nax=8zdeCQ0k374H<?jGC(dBGG-y`KRP5m278fO!Q)(phNnyKL
zqWT@}A8d3RP*zX(pL)JMN?h>LKp|N!(^Z+4tr?FxhhS1w;fw~DE3KZdW@Pf!lqqmd
zg-I78^WqHmA7UMrEQ!*sQ1X+Vt~H0nhFNXP#S--XXY_Sk%lCA1!zPTyt$O(S>#wQJ
zMO3`|Yh%6t;OmyLZf*B&L&fA*D&fu+kE>u#A^644wsLA=o2ilBew=@;|KI!4F6qNY
zLNmm?C$JJ((2EnERg3NQnp=E({u(E%+BdiZF4Pu{J`U8#_|7#k6){qz43jv|KfX>s
zQ6my@2WYL+fYlG=Z`z2ZD1#(k6>M|gwyF%Q7)aOOyH#}}H|oyK-0rKX-Dx1UIXRxT
z*4XALvvjpeDhlAxnp$Z{|2a5t5&6byC-fg#tzJQAN`s0(N2)ZAmI{dwp9U1=R4)I}
zlH2_e(HDb(X@)d%pb$}!-QI9#Kv~pw2K!%I5+*6sXdhE<Edc9bul>*C$B&!K#ACy4
z%_LQ?s6ww{PAi*sPLV`PCnwK{w2FWsZ$XdPq{fqp=f1(iMQwro$6F@e+<|&8sa$0H
zk2qO|F+J+>t)li;$6mqshMGO76BGJ)o>XV~!c7#W2}$qEx9j2Pn}aV+im+N`@&WCx
zd+;!xch;p74Y{|i_2bU^ACSxf)$OjnczpjM{2M=d*gXN_(dvoP+8Vk4sIw6=>AQIp
zqs|7BY<<233I_*KXVp~!%xqCzZUbV}-80<GFJOah9sL6SU5rL=*C)v^>1+wTbR>_r
zZ6w{ORLLFNS~Z#j8VI|$9^&4r5uS5krIwf>4!GB3{TZod=-QzbE4V?miifO{v`=hK
z`DH}4{tPDvrw3})INo-fPIg#=>HAIHGC~YSKymlq6hP0PCrcTaq;4wVlrT|Q>2jM%
znHajAQ49)ZNk+q`>Den@wgnCyP(aWc|Kk&Wnv`MI1qG@3uhLenPs5vaTFuCmizg~W
z^R0XTep`N}!YQT{Rlvu5KC$b*PXlb~JF-@N2XiGgj+sVNv<f4!#9k}iYl$85BpjGh
z1M}Fg`k}tdmS|_C(t`C@+TCi2DM?m+9i12Mnz<2*RQ=FsfJPgub3v8Lab2at;v2Zo
z?=*u!9H`cwx|xe&nh=a;eI<qBFQiL`jt4ChvPt`bGFbCu%B!d-yIpsL$&Ud4MEFnK
z2;p|`ZSgjnT))lk`OVeJYpZ1(v@iy)TC*&?H~pV4W^b>&NkE}C;cwtg|Gk-g<@=Ls
z{p;;UE#As!4K2eAZ3g=Iugpy_hc^c^OuKP^hQUq58a1uQu*k=Ug%+zE!&)nM&*h|;
z9?$m6<b4<}gE^*ZfJf;9O>PP6@R$T3Yo4WL0qreJduXdp+tqjj7Sjc_iOtDhhp@-}
zMZb@(*HRd{5JPbVUxK9|SL!*?%yqaR<;IElWTjRXuAdZKPr^@)U2qnjD2Sd(6gdjl
zdwc44zpoMUgMal25b}dX$WKze5J^NPQnU8fBDIm;C`FF`+n*cPXIRCR+6hDb+3(N$
z`lYUs+3lv1n3v(bw{N}a6_7B#th~Kaw}*xxrb+d-U$Q1;eoFDA4Ps9e#9oF^8W1}V
zUn+>5%cCZ=k&Dl1Qyr=9V1ea}!9bkD?ivhy2G1uhJfBE-rV^ejUNUw|#@y;!d!$5+
zu;=UW=WHMNSIqf!CI8}K;LwMyR>4LKUNZx(bog$3HYPXqIIWq@yZQX(ai^~2b^(`@
zT6m(?s|?Irt14t-wRU@9?yw-u4Zp}pUsMpp;P&v&yRrfQoog19O7DJPO6qAMc1UZK
zOzS)1JXC2`t4^OpNvBasROOR=9TaO{C1kC+(sf76-NJ?FQ`b2}<)E9{6tmWBis}?q
z=9W%WLm5LX*Xlow(vi%Z7}YZ;Iw+lUkTE@+)+PUtmFYr;KHRR*w1_0<wM8RW=^{1N
zEejB%7{RbIUScvV&taIT@H{A;KBDE4x_rAYqxJ1<TG5nH8LtA?#cRiMwOrrIa+N%e
z+HF>w=0XiWnA_P0p>HI*sYGkvhO%})#hAY&;g;_yG9wbqLY2PJl!&FQas5>jmA#bv
zt5PXua<I!Rc^J}otdLJlNgv8&n*r}mEd%p5dt5YUg`zA`vSXLKT04u52AncnMWW)9
zbf~>F{%s2ef01;N2-E#?ZFfnw-Y1TZ<%eV#qwZbGlxd%F^TtFpM+RLo<&^3|EpHjt
zEL(FlX)Uzz>aVEH03slomZ{vtG@D#1{ZydL@T3ElVWLXAkRd=-=39)7#i;fjRmg{*
z1-eBkqz|Xj8k=AFv$0VTyT)hb8r4~QdrL*gDjmQp&rZ@)tUQGxi?ujei@(oj0A^;%
zteaAbKr&D=t1w@)RcpH<Y6A=#Mx7#3@^Q&{iPzT&+6D~KWKYpd$J{hE098P$zwi4A
zI>Q`6;oYKx-f=r6g>Px!G3N#*O-<;^06zfW>lQ@{J4vanBzz-#CrzDleslftmaa`c
z*XvN7V{f8)4^HYV0H}?i)>(Q|;qSr7*Qdj`WgM*%S*m#&7>nl6u8*40?rv3EY!AR-
z=IBmEsSBkcGu(=f*SE}^X42;+z=sCwHInzmI{YEoKTA)~&|~I{)Mj-*Ue7u#{pDTr
zc<mdn>XS9<{1*B7w_I%thm6jH&~XM-Er_n|pylPnLo{6F<&)}Jo)-&f^CLPNQS{D#
zic9nRUpSVU4^gi1Yl|9R9-b867|+ejV%aXCb)hjZ*LaN<Fibn@;9qW!mJ=D}+FiQ5
z1LGSM_DD6LLzSd0Z3ptiXhC0z87fWII=q^rz$SrFOnY7r(|C*C75x9pp7^r&<xEI@
zQPA^en_zs@6Vf%}rvfnQV}hCKHsb6C-k~N_O1LcP2@2)vvLYR^K0_pYxeotN-VgkZ
z_oRY#ez{f_EO6R}BN)X#P*r+R)_PBF$LyRcr^*h7hhj?983i8KqMjFn%bx0Kr!h9B
zKgRYnagfJ#>wZ59b<jpk@P#blMhbCq&T}{Uufj+|+Bj}414)s?I$QgS5z^y{7K>mC
zu#_x-a#|MZZ-3;^HvVl{@kAr>`8w=*{&aS=IXvoFO!%;N<4zC9)#3SC%S)<$cz~ui
z@CI}KKFb$Ung{2r<_Og%d<`ShD7paF;&62Ec#;G-V0&J^U)S8O>TzGlj^wG@Z9PFU
z!t3i#YXbTyOd=;QALexweMnEEDlhi-?mfvC1#F79bCtH%eA`D)nJ1?h5ma0fr6n_1
zMP`w%I5Am_SEYBlo+Q>jBQU?ofE_VES!j#T3Jq7H#mj72cN8()h>M9_Y<YBWeSLr=
zQZq%PFqG*;bL57uud7|<M+9UYe^z;&J!n542;hy>>$C?bB#$O+2xIer;dykNHH*`!
zxl^PKoR0LJ0@z2usbdV3G?a#1RTxGZTVnV<d4WTUfC%dp%uyfy>mLEZ%l+V^{2B`w
z8&Op`GWx08i}&_kwa!aM%vGJeQ!VlI5UHCUB6Y5<c;jL$vEeLIiuY{}tW=&3n7G%l
zHctU?%E;yptc$c&Y(*Mcxk|KCuZ~qSktC~5$2XZpOZkgxENR6Z?e3-`hg5?D_+)Mu
zD$^}2F&aNBrYH+CC9WHx-!M{PSR#pQQCs}F+XspS{&jEfV(m5>DpaEjgHFEaURY$w
zfxb*oQbc;y*RPrmc(pp#PogWmh(aLc4+z_R!#HisCtw-T^aeM+dI%C?QVZZwEy;eh
z=Bu<j8oPXt_hb$DkyIB+g6Fk53+3z`JV>O|S{5o~&McL_SZ_fDQS}d4HbE`7WhlYu
zJ?&=4!&9MXw{K=D{n=B6qqSw7UTM!sK?|JHo`>s$dY$Rla8%C>?|4SMBfhj=m3H0r
zIU8m1SzeeDaN-iCSU*hVaEIU_JWLfcp>}R`eSPn3sm`9rNB=`Z;*h*eEOP2e^v!s&
zrA=eN?f@F7+8AMAkT7+SP~P2=+oB<hma}22`EKn7d8f53wyb3%Y6fj$3A{>g;%rje
zwDJq?Rr#xL(p~FCZf@FINq|HiDp*t;5_t_0#pgldMFX!fgg$5bi8Q;f(7^&B7Hxr;
zisq2t4*T;O_M6u&*q?93{=9+xc{}!#V=1jqX*WVlCv%B$-*EUpB6Q*=Nj6xo#u?WU
zKHh@sF&_$a@=A50r9-a&wut-pzcLkIV14-Sg#HbxaqC$TBgVx>>8p`#)#9RU3gO{E
z-fn21?v7w^VETt)(g-Np*&7-+|62Gyxmgg{qHSR7|7Sp#NOm6Z|1>YsPYIOp;aJ-Z
z7uEi6d9m2rlY@kj(ZF__%&|?F@V6LF6YUW61E%GGGh#48Z-IP!bWGzDjlSl3d_Icz
zBDjb|hY!b*_Q8y~_q~b-z!H5_xsWdn0qB!lDvS*URuNBOUzRi{OPgb>d!&WnCIkgb
zyfdbZ3sRX=s9WI*wSw~Hk?Fb|D=y27n2H%HhEGWMEXRimP}|YQ#L<zuZk!(-)`iMk
zNi$jc6rOZkgiBpvw4qhQXq5lGz2|Z}u*jUerZw^!eI9xJ(P2Q^FpOO`GX)i`$wAq=
zY3WVv$ZDd#RC(omxhizh_U(SqH;T$Q{u?jD=Jlv(y&e_jdQ=Te_*oZ8VBr8OB0x>&
zEsP~@8B2V-Tg_m^5|*!x>b4P=Vb~g%VaVe$3}?ZWj@38)buM0zR6jwNdhv_|=Q7i{
zxfDICisj&S`>jadt?FLlN_Lxcdru5~EuOoJ%-D5oG4ja@6DQp*@@v=dTxUc+z$a)?
z{G4*x;uwFP(<J!EUsm>$6^8$WauK(hkbxJRB2MLcfp4Wz>u12GF4RCs5wv7%jmixr
zaX2)uTElHr^>7=_6rYW78+&^)_Kg$YVp{8XMiTsI9YXjYz3Gejb}2k|t+G-5Be^_}
zR+H(|^$caUS~mYJNsKDxi?fIJlgT2j@`6kz@sX1CCTPi-uPYQhYJV2>$h>Iiy*9&?
zw2=%h>wY-W<Wf2DeA#=R{2Bea-gzBm<<4=Q<vp=u9DBZ0tx=w-vwXRr26^=XN_CS#
zd0AG;xp)dgdUqVfuj%nSC?|TafgUD1zx>b>ukv{g=V|Zz1gI?<dG7p}tYIooiZoh^
z-jDE+hS3wf7wJ5anpE|sgntJ>-P04%dxBl=kU{&-x99nvY0vi3eDV77e4a0Rs(oHd
z&yErk05`3KgKCDqDFb(?yfEOF-ZqP<JWCck<Sj2x2yLPbYtU>>+PW(PeBfJJd@*kH
zyJGH6_oV~W?H7@`XRP6@uC%|=dZ~SvjF-m&%x;vN?;I$9rwwzwy5HtMVeIPx!y*`*
z^tsTUHvjX@H{aaG^F$iwqkl|qFdE_PtmjpIvb`@chC5C5OR@9ii*=kXB02M4vNX;Y
z348rF3{{ISEdGqO^MUaUYjG{JerU$Y<*r^Qy*=gZ<Jdg!d}%$^hCR{da-+Np;Hz{L
z86424<e=5SM(mYxVIUVU{Z1j9i=o^FVsx;&vk%UHU`EQ5=07|o<x$Z-r|qsI5(OIj
zT~kplBBe%J{b`a%C-+ZIbcID4ox-*Q;$|qgeKknnL@o?LkPC6&c<(_|4~L`s9hUS|
zt<^h(S<sIj)qE6tqh1Y01m(JS4?6a=Tlc?BqQ{TFgz51e2%9X$A=NxuhRmI1^j~mV
z!Lf8Zj{N_=)5_aq{_y1gAKg`8;*YvrO#YiLDu{F6;F6gWElIvv96au!YWxp}dt+x@
zyW`zs{BMn#6{qvadw3vrzWzq+j7Imx&T#+0zY~M7OoKCI@mf1wEEcuXew!Pssr4wC
z15ML&R!qY!&hgHs+`2H3&pt{e_=w`v`}n+0S`If$pF6rBUqh-Bm?NTf`amBa$?4+~
zp!xD`YjpCavGxB1WNHFD!T;WL4BAE>J({0%`aRlWUq^9=dnBh@w<>?TBS1Ix=;6WQ
zn_)*&mT;KjBm6Id?+SflgWVBq)PFWMs%Gk-BCrw_bB?_YyV`{Mef-bk|1O&AKK_en
zUhCr4X#Vvh{O?`RT-RtvbFsrOzdP+4q1mWj{M+IF*NesdlMW<p#myE(-`2(*5q<G^
z{@|o#<8~l=JYPIaMmxLd`6@4HR2Jva%<TC(JTJ9<)by%~PJ{2_eK_LbVr>qy;Wv*T
zKa8MH{avb+%=hU2=;7!g`>w`e8yG%@|FQx`9P%B;3X)tAI%xRaRVc17mN7*hlWRLG
zg4_jK+t@efz=EEnd@A*3>5jl=_I?d76!zHHXyTCA$26lr<hoUPS=S$7O;BEGhxzz%
zs}uRm7eCzw`UeN`!-q*X^iSgGVYChUqX+YoXmKa#H>xzDe{%Bp;p2yQgMOpg{{-}5
zB=;Bhx2?c8adbaA=~{$8*J0*8c>L&VU;KbS4<6nB#uvZi&#xandf<!i)@X*FE*CJ?
z;5X0T&+-LkZh4iwU#GD40-xzalwEGb_iHD4f{}h#PBgVPD@Pe=XyXmVDVg<Y^GPzG
zE%GWy=G|%?$P_Gtn!lyX<uBPe(71~G7bzbhk}UoRL)_al4pZ}dajCK;%OukEvL>RM
zc@s*9kPNC}90lHyws+e9@%==$gq(g!a8l8eSVPy>jovyvxfbb%o-f>C^W4{sVdKK7
zMt(wqx8&o|izsd!qc2T!H=^2jC;QJdp#AapYpVAK7NQKlThsFVvJSsri(e68?tk<6
zfQL?Z)JQ5mIBd_-lcr?q&1q7-yvTl1w<9TuEVaUDTNz4vySL}%nA@)I^I`RztxY^n
z%D6~Z7~UDjxR3Wb*uX#vDB5?%W2KVYx5hiG&-qu)cylza4(p1YaivwLStxx}twN{b
z+MSBDJJtUlOaN+f#27LXQ$auv-$wD7J2%)R&m-xkR*4L%Q{3<yrdm!^0ZDUJfiyvT
z=bNg+X#9YWtz%$qJzUZ#Z(0XTVoeTT#(37oG)L8$j9|SEk<^rD(JJwNUGM*H5z-g`
z08*8fDETCMGzaES;9c-LWRdJE8EPb1*f&xUfUD2mp|FVhk_S$epPs7kI4%K*JkO(o
zwE}H8HR#k>CX1(+{4H{13m7xKgMIb#1V`^pO*7`bhgo4G6qC(-pwxLr+9W#yc=0i<
z_%lvj%}c#`h6cUtO@opP;~vTfiNVR9wS9m?En2pI(erBksIC&N-+<vviY!{%A;Brh
z79uXo;~Zm$N{A5_iBCVE`9K>C75`v60MO~Ny+OICl)V0JE$8CCN>RQ2DmiIuSoO?C
zuAvG&tmOgpQUaXe1mQ9vAh{9LKC7^Mu&VF&-~T2m0K1E<8}awGLpuMl_C<1R@O*c~
zFno7taT`7`tcEATPB>DcWq#VTSO|3tCc|$9*U|9dP%Z<!GkEp$+G5ntP550^GAJL+
z<>I^jWBj^l1O1f(l|*Ogz^V5g^t!3T6AHCM5~pln*uxXD$DjxoTTvZ%F(mqEGWn{}
zJi+8>(xDIi{XY_UAWQSHZ2ylOE~BXIe+u3GB&ECh8&Egu8lnD7?X|G|_5Pf^deG;d
zOd0Uhk-2W3nyr+^@50u%H&;GJ*Co_nHySWsx*L&7{m^~vF8-Rxly3h?mY$R5AiUvw
zcY|-DdB}dZ71UT6+Mn&kB*KRFXIruJD2q;$8g_*p@7o%nAia$lsxXz|4d2@uG*}$6
z-)#kDN<u~u%Cr2U1LCwJvb*!x&(p<mox!#-IwdnH(4s+(g6!-KU7~b2>hvOpjq0RX
zTIr+_n0>S&=Nml>yq#w{ZGzf79!xh!`y9p-!|o$nCLJB$>ybR9r-BP<xFI7YU;UAm
zG!wuG=tQ`4RI$z*?oW(kmIEZWX!+AvC$UM9El>B%#;iR9C7UCnN^CEc`B?*nnvEh&
zX!|Hh_io6RM7`4>*QKEoxCW|^&EmcTmTlLotw^oMD4Ukdikb$0)trjH*T5;8U&7}m
z_|=t#!^&4plLr%Gia`;1(ffQX!5zbPW6ha^jm?x%Lt!)8l`rJ!t46P$l=&RqyC{}<
zCFAbG+RL`-l%;h!l(sj|aA25##@szr$oaNI2E&<z!*PD7%^%0POuC*;^I6FHlUQsb
z9-~E?m%zj*j`4GOH}rhUJeRMKdyh^di3)-O&77zmy4i5r?CvCI?PZDD^43@iO*PP(
z>E|_FcKi(|>Kzf4Wn(T6F?M>F^>6MS5Y%)IxS>|o;wHzrI_lUxTO$FZ4b4Jt=Ek;C
zn4!_AfhT)=JddDu#p@_6SEjQqy>Oc@=A|WlhC@r7TuD!WdwRG3ZoU6!o@QQ8?DTx6
z<wQy@8pntVf!~3`WaP=jB+_6|iAj_lW`-^`6=0&hK6da^4R0*D142bO|2Ws|k?H^%
zZX*4dVVeT#qyxevOHskRd1tVS>UtMCG+T4bYRR^8P=Iv1E!1&$xZB#K-sO#va4JUk
z+?H2fA~(0?&}xwUhUm$~SsI_+hI-wGa%Id`7w6=dzB^SFW_f7%K2#R$`8eu_BT4Nd
zq;>_2GmOS$xxIl^#SjSpNG>VvLzqt52p-VM!N`)gz}C9HPH{wo(e-tEMTaUjvC%T<
zPPUC!95i%#Q)kf|bzL?k!CNDG4#NcB?LW`=lQM2yZcYdFg|HPMZ6`n*uK2-C=zXWw
zZ`cNs%xu4nY{@oqD@Mi=@~s^9Q0EBwW8QTg=m=n++_sAmMX(<Yhcs(sI-N5FsHGf0
z1sB!R1Z5Q(kG9fKgMQ6=BoB57zZPVh+wpcOc8vi|Y+6pQS4DI32I-03VAL#2%&In-
z3wxBG0LI>HE!V}=3bV1Y>Y0`ppd-P%{a?QE9XYxF>bKTuO5pVfd|jbUK0rPF6MFIm
z{d{$TKauV*x(Iv1mG;}%Z5N*3^-VT-{?Ye(L~aMzUXO1|BSQ1_7%g4q{R{TH9}?rM
zSe+)1Qe)TaP->`G43ykuQ(>dzpxQ3mk~L|+pR++}R=kP3&710et1M~UQC~Aq`b_L9
zVHm)U-9xvkwqaYCABH16+B>W%+_o{q%B$q`+m9=+=l%P7$M5x%e$U&v{=)D1<1U=)
zcn{zqTXruKJz(JAUXz}~Dr{RKjyN{i=1{n2zC_g3N^Q5ced1dk8wn7f6F1exFT%{J
z$!Fj49W4I7M&3aIPDwnC?|d71!hyX<fyfnfFRrXe+^hm_zuW=8-F-=j*>0z*zh0k}
zLM6g1ti6D;dA~Q%qS~HQK)+RmtPIyJX5Wj%_dD=HiG0;6_e7DLIBqDF=2ppPUbKUz
z3mR&=CcQz8f^unp$M`nRYsL2Ye!G^nv4?B7JG1|5bcxFdfH6*deNo)qt(D(xlfP)H
z;2tt6oPAhLq;0fLDKTa|twcp+VI5@(#UFFEDCn5H-%y_j4C-NkB`_d^60Vi3xLCmh
zuCrK%D*H5PoG>EqzSgXWHC9%t4RIV^;r$n`LILBfoI8@pGsB&>6*3>8AaKIJtau^G
zn948p2H@5p2!t$Wiv-<9^vLK^Pho!93zSN2C4fPYdI{tYHe$i?0JRk2Q~0m7C;ta~
zk@SK}pN*_!=^$Y3mhTIwafRuA2=u{XvPB|bi}iX&ZLzh6E`(g+*&RmN)SGM_XtVe&
z#@bSe5BFtQB11B%(*+zjr<iBx03X1$Vt2P>+PX+=ryRQX9tOLMNPqoV6v(#IL#Ej_
z*G2MwS&J(&T5-1a<_`2P_nW2bP&pQ#BwU0MV#yA*=u2qvl71~^Qn!a75Ol$4)|MN?
z-kyS$x{)D(tgdqnYdu%-cIziEN>X3?ZjhcEwH*y!vFjp)$*dd64LeKUc&(Byw0_fW
zr8;JIEB{yvc;*`~OpfuD<zQ4!=;N?D7Wr{F?U{7|Bs1%SztyP)Kjp<2e?+J7FB1JX
z^ow{tbl-b{q>U=cU|#xLZzc*L%4ojzZa;k{R8{#<H#=xm*SD(3+f@C0Bu)crNNsv=
zrtFrw^_eeQVx4V7dfXJok{ZY|O62}+4m26KM42R|6z~^kO5r&G6ar%oC`iDGm+ZTP
zhjTA6QPJS+Q{QEx-q+GFCO^i|?#{*mj#h32455(}un}?@m|(fLm&#Eehdnt>CR$xh
zWcVGKxLoz>t^8m$25hgB4Y<@+==gJmwFC3058bqFS1U}wP_XPA>;+{DS)u^n;!2iN
z?yBhXg-IdBvE8ioiZLfob57XSE!<z!O8FG{s<c|tXg30`$;<2O3PW4)T~-_eO1Qg>
zFuZs6uxBt_QrH?=_MS;l7@Ry9Jyg+8j>Gg=#M?F`ZoZi)`F6VXj@gJ+3lcjhoH;0*
zD^x8Q(#6NV3{YT^uF^<H<_U0J>pYoqzCs0GfD{d*#w!lt@)*Y324MuM1laO8Tpf$~
zG1_%L{^mYx2mCpDbnws@$N2LxT6ivG9?$jhK04H|Fp}mWUi!1sBXU)&;Q5|;0msaG
zxp<uyl@xWIxG>uq_fo+$*A^GG@RuG2RJ9fuz^iMC9-I;J*_)&|clye?yv!5{w5(Ld
zd_Y}GuG%?HVD;ms8X(tFQ;O2@q<W@8kpX$ow+)%v7mipA5g<Bx?)7AEl9cgtu&o{a
z4i9dsrZo9(gQA`u$D{|4hxPVc%BJe^@&2FX#}cX^3$2La_emIoK5L{>R8nJ$fxUAA
zUOB+Lym^5ga|5HHJ#VI_JKu|-x3*?=*`8dIa_3v!>W0JwX1Ggepta@sG4NYg%;`Sp
zNi@*_;jEE?sE{<7+}V&KpUD_iOu}r6YB6rT38o=k9BaeVj?UP<K+dxsbi87rVD-#;
zD~Ib;fVT%o(!^$I7ec`rluQM-HBPO7o7(d7by88_mhayjzX-1W_~WcPUj~)p_L9YB
z!z*Gmx}lcYcTC<<A*iYSmuKc%qyb7@;V@?#{GZN6!8tzh38~xthYt_n)`dSGK7w8Q
z@|bVQdgdx1xNtO!Qmn*M?xA@zP|G*1fm*)dro7+Gf+6r7jjE#|D>NF;R5<o=YvPNQ
z&Upa~fHq(Z6?Hx?8Qcl8$E#}qkm@j11!LGtVJsi!>ywkD2uuF-6fTG1N~y2c#WR^F
zK3u9iReApI39?9`x)(@oX1MOkkx}K6LF!By(wmx8j&@otk@{JDs_K95hatu?uUD)9
zNWIzr({n$->}w?v29w^d63Edb5L6o&CYF=#3C!=(q2{)*nbe;5RrNp#cU5Yqb$LeT
zLVKz%Hg}oi%1lXA_2ucaXA>HVp@GfWA~B&ejR$fqM@OS?fM0p^@ZtT3d&qoCn90Ni
z7*eU&UtDI<c^dyzByj>PWt@1DH%^Tx4I$VMQz8$p-IJNNSD;4rZ+VsTx#iZf#$YWR
zqK5?r5POxZfCob2Voac*AJm+Cbxf~6KA?83wUzv$7N}9%R{<p1BB%so_rLP8!N?zY
z2agU$4<76#lSctG9EZ`w7M@0fgPA%rRVZ^(@nSHvGIYBd#N+ZPJV@@NB3woc5539-
zI^D^DGE@Ama+=Tl>uZxiq0;fi(E#j8mS>l!62{<1vDT*U10AiNrl+s4Q(SP0h^$>u
zfNt6^QlZlqT@}+$Nm%;9md}T!Q4u#=4o96W<B&8R>g-r9%&HFU5faj6c=NUxtSE+9
z9i6VPNB2j=uMhSTP0kC6kKZk$Q;wb^f1*i9;I8AifsirWoR)n;ybW}!5yod5lTTtc
zruc*`@tmIB{n?n+vD;=XcZ<x})j-vwXza6>t9<1tbHY0A$1LfO9)BBAvccIJC)WMe
z!|pym?C#Hk2S804RUfogeK6bG<4<JP5r&DekmFOeMt%UV=AIqR4x5<JuOW+X60hLl
z8imaoY6ubB|4kq}53{k@Mh5x|dj}L#zx73QBvXgzO0c>(Q}#HTQDj3IKU<SdBCfW~
z!R#p1c6d7oJoh71+aSgjn)k}f-7wSf8QUio)4+E5*J%u6^9i}=tNRJYkSPSy?`DnK
z!g<jj)l1y3mpG`GIH;GnUoSD5iFgn`5IJI!m%~qm=5|;~%Q%`HXU(2+iW$1YK}LtM
zj;?9<4O;rN?->=L-Vm7DDX7m`!<i5n*pawqiH43|i|FK>4P!4q(sf}U90F>cM<2;I
z&(LAu_HvOjidFz2(^eUlIn0fE(4NthYl3zZ&QQ~gie9t69PCgG3vtR1d<H@}knZN(
zL+=(%Yw(lzT{rj<#*g5rX7dG>C$Ix)F6g@KB!iAU8l3M5nv@w@GxjnHvBy77v)OLQ
z)<f5kxCB>{e&1KY<TaeewY9PE>+9S$^|h){B-nrzLaN3Kp?<x_qADOunS)uD8XH@Y
zzi}Z)-}tJSTp>|epW|g!B+)s>1WhdWJ<wC|eYS-#U1`g$z`9LJ;ZIoAs8>eBN$=YX
zDO1JHWj_OwFxIW)wz|rJiRl$Mz3!9IV-Y$pfzqMhgAD5GWY3dxVmC0=E@!}7dDE5t
zLCi8;Dr+FE-LUW`Yx(#XgVa2|d`@xbx1nj$v9HEigNaVq$Y6Vk+UFtvoJ}4Fy2vW8
zbG7D9igO!;qi=@xE)`|3+o>gAYXt83F+tZKk84{_O@v_kdYM!17=rTy-|Re9<}50o
zC@F&~BRz_TPFP<>Z6%$^Om?N=SR)c<(rE(!2ND9dO+?!mI1E{Me>hZ4PiNdL*z)<X
z>a>|leub6kCsZSkIkRJ09v!gcw<g!*a9kYfisJ%v#9)r8X#oeIzssaHnono~4JEV~
zf?1N?X)zNrJac0Rhd2T~fV3eS$8HnocAPhYx3YWuXb;VeLrP7BLHSj$3HG`nOI@9J
z<?u1Ehjwle<-ei4vT$bWVZ;c95^9yE<ldgnv2gfcTw*O1mAsmkI6RozibF<zRyPZo
zP}v_Z8PQ$YgIg?}y|Sc@BL9`Q&t>h@o0c=Dc9Ys;6}f{BhA2oOfGkaDXN)bZa1!Pm
zC$HLX_pV8dzQ~)XvT_GmV)f8>_e1478)Y}yr?3)wTQMqUO|=~%LZyWWwVO1twFRD*
zNkbF>j65J)j)875ud`*%DZ|-!INOD}9C|cjd3jFlV5>0QY$0L##{(;J(Bx`3+;Evi
z%ffJ0qLMlE^hz|xw{=BCjR?RA2h^dKsc<I;R!k+_Km(n4xn2N~FyX^@WEcXkpv+*)
zrCb~+Ae`K)Q2qWl_YX!$<P4vwsh;96y$l!6AEdN8I;&%()-oe)Yi%J5d4mY)9M&tT
zN&){ZB3wrJY;u<#9*(}brhcy@6_+170qzDUPTC)t_1uL!zp7MX`0@?MHx{{>(ErJD
z*}*@IcUw-5`rZD(AEN_+EXwwi=NoC<jcBAC1{m^~Auiwu|2A7RWQe#XyUqRKW*Mq&
zUX32KCg@55Y+E$#*v}(>CUdj4eSE-q3Q7^z0>V3PqPl2fI1`QOg?7V~(RtD#2z3t9
zDlyT$Th74U8d_TTxk=L+6)}0*ecw6Lrq#?ehXFH8QzqWO5#rKvY?TY^HM5A2M(6_d
zZAQVj+a}#seP31EKLNBY;Y@Vzp3k&|x>J_?nasYtAAJt9&zXBi<n*5(q$b3Fag@n<
z+6hSK5OrmWaOX?#6dT-k<tNF^Z@awK1_{j8S<8kR+;_+ILSF+uYh({@Ju-IPXpV_d
z3uj?Ec5b42Z7zvPhzxB0ljE*+MP6M3sM!#{RdZm=<~44%VPzS2SnzHzVy3Ml7X<pk
z?!aGnVKrYYX}Yq_X{VqK<Zjz;sLrgqCuVvz61m#oFv$K?3v=7Z`8F}`L8~nGfQxYt
zP}E+?%P^89wV<_2u>j5+B@ek6;!mhCQA=HjLZ%{>k)z;~%*0@Fw?8=!wbIb=E>iJI
zv5cAuPz5@D<x~UG;ylC?N;isdok+aF4A+$U_`Fli+tC+|oGD!KpyPLZse`TLUnPt|
z{b}RW=~9p0prA8qIi;u@<2`o5jxMW=FVrZQc{>iRA*b;9;apcW4uw9|aT<6~2IgrH
zDrFcKUCEBkq1D3H+xjT|C8mi%Gq;HFVXF?ldx3D4RxY8?fV{@E@KLF`wSWhel(vxC
zR_D>>Jo%A!Ue{WgBHKx_f~=GsNv1Zjp)HIHnk>e22?<vsu*o^n>`<4oG$?KIn4F<d
zM}X~q@PP3Wl4RVe`h8nHY2k0TS3Y2Ur=OBL)*ji~S^GM$!r=ph75Mw6MQ2xwcb&!x
zTnNbayg4;f870HgWNF3MB+B~c+_VL0CCMXBl1H<^5n$E@q&3o<iEO~jTiR<4@ZKL=
zlJl8E`X$Y((W56t5nbYKt|!eYd%N0F)?_A5#x^<y9SM0jB;i$lsO7|CE8I%qgGttu
z@N~x*t^#hSQc5v8c!cR}uTn`d)x9h_3crCfE*cC3{Jj5wevakUGaB4KpyYT*;e$u8
zKM_eDVS7LU(|%ZrSmp6bzk&~&Y?4ijet#CGfpn^?yp+ZMqb$hnC)w7cWuO$~gdgS!
z_Lcqpu|i`k`@%9JL+u<{zSF<;X-LQ2r8M6>Jr=)hp{*U`qYPl0vPz={O<d!%b@ndo
z_1M$PlM^!pd_HhLAD}QreaD?^CR63_k}SMDX5C2NQ+w$QZ8O+PW=tz=6?$nwmrXOP
z3&tFDvLt|PJAqf3%wR4UvAy-yQVXm?y^B1ojow(%<Yhk@7l$(c*;u8JG%_5F{=g(%
z%5r2d$Y<kXpc0%9FgYq5|EW^@9}XwQ5hgqjiX%#VE?dn*-iDcdqpQg2s^7=1`e7uy
z%4AoOM(cv{x#<dk-^KSIu~to5cJ|67#fHtV4UbHcb~_%Mvn^9O+b}*>J!c!LbW8$b
zw5UBYq=h9elo>cpis{0?%JviZW0J9DJjJv|9edGFlIAI3&8GB{YuxY4!H`HSKeV5;
zaH3-PATn0hA!xoe2`RLKg<+(JvK=e=EPS0w4&MQ&3jZi{w;UXEhwhs`d(?yD<2i5=
z$`9PiYJ8S7*U_G1*EoWuISi|@U&pyr*|#V{VX2LL<JHIpdiS&p`v}|Dd=+m>mD0H*
zvDg4T@H?kDv;y`@L6FE&^I}+g9b&daky*8L94D*l4HoL==s)v#9pd;WEl5E*Jp+wi
z7Co}->+Fz?T3*7cvm(DB)_@Y+ev2t}ydDjC2k?I<UspSDSkEyoeA!d1x@<rmQ3<2l
zlGvK*11t9of!o48nQ&Nn*@C0$%Pmlq^V#%8OVjo7z%YyVBb-9D5je+IQa`n-+9_vv
zN~cLF)NaScMvKmX*=f?)1f(dkMgk^@Dxak?2hoIfVl#g`?+2#AAZvrh%7FtN=Uf9S
zkIrts*s02w*eK%Uj5LlI!Hw>%Sw)%NDRv>S5AD>`X^xqSEIvfp7A4tdCft-_X7>yT
zbtEyQ^3IW{Pw6_7v-QlDTw+o^hocV;L%4spFDU1OTtZvxZdPNd>~ZZJgE;)qng-mF
zBI*`KeuL{`V!7v(H*701H90?hNOw)R4&653&e}Lwg<@PY(#8MbB2L)Ukvu3?o{}Y7
zAz>dlTtzc0&cyoxtF0MdGTBQUItlG1p_y|#Qcz{W#IeI~Np7<POoKrkFH{Q+l)W`#
znYwzd4F9KJFk-IOV&d-q#HFW!*RoEQG&PZ{O$Ar9%6-)`HixV&(z?g&H>jN=wzbiV
z%6%rTEotM<YOmVPyhfh~Eu9|Jdp)Rk%b9cCZ=E}5rx3!9U^UhzCjT#S&)U^ClI33!
zoH<^pEf~v$q$69fB;>&iidi6?-S+r!WJ?B3jO0i%=@9$B?|sxuvP~zwANB*LRH`b~
z^VWS|ScT$gti2FedlnRHSUY;MP*{7)fw=*-6C^fa@u<$(4w`*XI6YTF`cwrNC)$Wb
zI*jH=07C%Hk2IQJm}tJiZM^(>iWr5i5*<hp@!4wfvJn9^Gzqm}_p1<wVB4-T^+;p%
zuY_3{0}3>~xJLP*!MwQ)wPRjM_b;MZP|KI`ZR@!Vj)EP}{dtb-Ty{lr0}%5e1X8kF
zX`UqiM?0ZB{sLnK==T?<O;g?E?u#6k_LPb&!S8;DOvUTCu_p+owOQ`yo;F5>j^+$}
z7nQTc9+il7eb9!+cClRM?Y1lRQn*?o1dpj~*IDJ{;EuC1l?@4lez5Cbfz{9}|9@Y0
z&G>_v5xTH0DV#8m0G1~3`u&_7$}}a?Jy;#QF91QZC#_@{jU0ntHxD4E4fpIUh}s9e
zS%2P}k+v3)sL5~!Z(0-Qs3YwzAd9rHO4MS>zn1nG)n@lRRL3-y0b^L3R7fyhE<cC%
z*sW#L5Kw!gHj`tirLhvW7PMd75JnkOXS>vc9lH`6snv>)!d6QvTMXyzgJ0skgOTv7
z+Y9@#*nHC<Y{y4Op8FWg+tao^?e{%&=8_B_NA3Xs!FZRf`GVhA^zWQFm@*kn-&`C8
z186s*vZ(yNFA!EZ;JCPHwn(gG1;DBe_=(_Zsy-n<TrK4vp)}f1%CE?W>d`o0t#YVV
zz*-gT<~KJiwTe9{&@;o*e-5=uH6Jzj1nCzmGj-DD61j=fFKCL-!(bQ4M~d?iYX&gv
z!%0%Yt@r)I;PlPSn-9PFyO5`JrY=6dIzM}T^YQZB-`(GJKb>CPTn%3T^Ud|m`@z+<
zu!%IYFHWxCZ^|BAs?u*yuC8w`-@LtibM+pL(p#;+|7%R!`CsF|?^hU;{Qt2x`{#pq
zj{6}bHn={M*J0iICPBe5TAlwE?VqtKn6~>O+%4ZnmwMMZz}FrtHKA7ean5cuUQxt4
zguNnz{IiiN1np<0O+<|<?^ixE&yL8~bWT=i`)NtM0>w~-!iG0Dbt7W~$lKlP9y*S%
zvXu_Is>7c^B)N@63A|DV(DCP0I-bGhVPlU;M^-*-Sd2FEBx182vripgeu|I#)z4q^
z(;~VhI#1s9!WvJB7A0?57Gx;~W9HE`c?;uG{B6v*&NaKcNRkrORQV;*4f2U)gYpT7
z{Z@QnJIC5A^|Vw{bykd_o+}BYV;qWKe<cKP?KXi)p|xEfZ9*P$*vb%hFOAb>Y_kn7
z={APDcu%JN#9-lzIpRj%WO1#DD%TC{)ms1(MNg`d92r?;17}RNnL)E{TFHqjWTHV2
z^_rNkK3;DFUrCBYXml51p5+V~MlrgCm%P;COk!ee<FEJYHEUdbZ4D?_OzQd5wDyBU
z%t?Jm^|b1v$Xjo<S96_iPBZhI;jXMv4)rg%O6ZUo4GgQ1<Y>|K!85VWchIMujDKQs
z`wHX5Fds>KC|VY%+|HB(ShSQS>Ou<y8Z(}{(&IJ|BpEaT7cJaO?;@IJI21hJX}`93
z8-yrn+cc(&`hhXy((tYzCkXcMk>(2UtWTE9s6FY|Cf^{!iq)z%J%Cc`&mCzWnzcT<
z+T6(4$i?~|PB-mc(`d{1Y;*QhFO1?pb<$Rv{(ANEfSDEfBp4>VPs7stD9xA((a<<z
zt!Pz7R1r91`j`|=*Az)j(0?21pkr&G_cp17*7ehtEy%bRV(vsMeHTG)^a3_@Zs_X@
ztylNJA)i-<r-7uY66YhT-Vs(0YEPDo;vt3(Xnfg99clMapb^5%VCj{RLGq)WY`L5(
z!U1=aJvZo!<#NVLyTddXKBM4yCrB|V3ho4v+J{18FrwJ8go)4GIW8twgu|$+K`nUD
zx^6RMc>!KPM(t|D8ztNcx+2*LW{mhdlANe;C^N-w1L_TX!^4f@SgOe<t}f%wn5T$}
zQ5y>~X(3CwJ9AMLTF%fd#?e@yB`d=+TWmdfYAXSQWj5bC(y9ZUv75Sz_5^?@T1gOF
z(AfLfhvgDbH6hn`q)<i^X#mg2!Hf|21T3UsvU$_^B<YmtS!f)m+F3G%J)tb~lp?ok
zs0NZ%Zcpol-iEHG@8Q3k9?4&Yj?h>XQkenvm>V<WD28hm1m=t5yfHg)YO1DYtKO$i
z+rpd6A;jW##+JNfw^eEKy{37L1d>Z+zG5sG5eqb#jZq4EDV*hUo=kw^1^^MOyN1to
z?cFdPp+x|n13|x=1&R_%H2Q<AJ)TwQ4$T~!c||0^UMKk_aUKD!3ug^&g}hee9E;Be
znC~Z=%Z<;H=;pgZmhA8cH_l?-_Oy^-z7XJbyP2<^Jv4mFQISC__KW=r6ffTDlK<B;
zH=!(&qgqemuIE)7^5DycY$@J)1*~^cLiN<V2hg7YaiIW;_a^;rZvsm!>y$xi+zN#|
zIqv!%P<SN{^t&+SIShgbU^p9{?_e6u{cw%)R;wF`3<`$IoGv-B_GxHGZrScSqOX!q
zQU>bH3Y(@lAX}?@s`>^l>+3)9tF(>BNRy*@t)z*R)ijX`DF7hTOmw5)si7;A&u6E>
z%U?Yq`2}!6nT8q?+hiNGSU#U8@rg;zZT4BB^sqL$ED?>bJ3{HyaTtJipO9@LF*Jdi
zVE(JnuFS%!#GKsRA%vL^y^+uyDx^A;;SmHdo<YdxTSP3RIvqfsol%p>&6R|<anbCh
zN6&tdii78ZJcRyTh3G#=QpF-5@D?PA7BVKyp(hkQjn(;4xh?KFLyxwUG=<Sr%?c5b
zKxN3fwmL@#9e{gY5NOgvE4jd+{>|R?JO}2mm)4EN(3^*;>8+lJ^?df?v2|PZq!){|
zo%6(IQ>L#R)kdiYL<SI<1Q_C`X9%EquQf5|2?=|F3SpvP;wUbqKpJR0Xmag|i;f~3
z$)N0E?COM$68zv5C!1g>W`5Pg8?b~RON0ib%fe2<=tN?vs1bv6RHfeJ#!6t=QaqJt
zp;WF^$?`R!R3TN#$j#MU1A!jgu_%KTxf=IkeeSf?qW4FsL#cH;!$KJuq6Zt)#bIMp
zyw~x+L)c?s3a;|H;3_u-SJ_HL#+HGatn;wdg847=S+bAbn0Mc%Sz6v%U(@Q&l8((7
z4nieUTmCw~2AT~r)p=08N1F+uB82THjZa)vi^*sH0<9)|XY-CaHk*YNN1uM1OA5Tj
zXK(qarG*gYTUJGX2;HO)xkU|GQ3c=2l}{rH__bdXbrl?v1Exl9tEH^Fc@gViA6_FQ
z#YL^ZIL3V8{ArP0a(f)Nx}YhXZC?_E6MIu$n8upSHm%8QUmCVzWT^EqNHWKhnj`AX
zvF9KB(#Rt|honHpj*!siMYYYXp0I~b_&@ncSJit67?^5VGwD|?B-(WPD2MvuPSIW3
z+gnL9WYsj_!7Nc?@l2<;=o<!Y3j>seaN8|LZX7JyUN6?<ZY)EoPoY3ea2~EdX=Z9q
zo#isD>&PD+BEX-nXR?Z}jrD0Rru=`cfxSju6ltOC8GQ!8t+3eJL(!ul!BMYbdbL{V
z@plo1h_`^S=)reoXcYr{Da0;SO7xF`*L&1+@d$HK3?D~Yq0Xo+N%MMxTv(B#HLrzu
z47TzmH=m>Wb3fUlbND*S{-d%`Zegjy77XfZRK&Z=Mo1!MNfR-k{y$BrF)b-ou_bYJ
z9v;^YV&b%St-T{_*WcakZ5>qJfC@^VxsD7R8!`QAXqKaI>ZE2Em~6KSBrk)TI6h^Q
zd7mi-;<BeaTo@p@?oY535}g<@drlu~%PmQzs6vj<%-%UMQ%Z&9*gFw`-cm6+1uN%0
zbP>*5#|eUoqi0F@SF%fY?zl}rnYPzg#C}L4i*R(*M^!FD^>v~<=<YgrbL@0jj9WHX
zyU-aNXM?%CT$TpoxHE$D%d#cDB6N8|`LNwty<PI_R&PU!r^;Zqs<{=carK_jtua38
zI1Q+2kAGrnqS@EzTe-(IH_Z=Q4vy=yQ@5Ev3VwaoVK*+l#+&Eppt7;KdrnV-=>|@x
z7)lNb)_Y-pp-p+P0>JEH2=uc%m5E20xC_D{Sg2*$$=pG32L~yU4p`iiU?c8;0~+j;
zFEBfHr|!w|2@^g3fKLA7pHAmMO{bbb?FS`xj)k8$X{NblC-O|kFv+_Jz%1>4R+pLL
z%l|Z9<tjA@g5-D?KH^%!Cl;@ma%s@%4H!2+7Rd4dh%T90NoNI30QnZ+&_*9=Yw9$D
zHrQFm^AneY*Q3R5%_$7kJ5oHoHzE6B-Z6ECHL|n~Olv1y^qB$`l9>CIm>e%@{54ER
z01~TV+V6Yl=%*TbZ5tnesGYCD^{4^YqkZ9#g9ck@;su|A9b`iYj~Mp)zL~ez+qOmV
zBz9zELUZcv$Rv>zr8Wy9wXes)+(m?E)}$yGeXm294|cWLmvIx3lzW&O5fEW>muA={
zhEdq6Jr35J!YOkIe1(8%NrEccZ+O81+D+3~v7oWSAYP-fra>qa|NdlBrv})kPwlbO
z{mny}qK_y+JUu$!V<4U$HSrV^@zh{w97VWmk8L39D1}CU?KX1W9M>2hyI2DnxBS6<
zV0JmC%2wT_b%PL^NSOR4<W1t+J30ElVhS<R6k;AkCRa@x?MjN_32!2a3O@ZV0$dfN
zEq-T|)qe;@bO~}s$hd*O0bg(d+c`Ux`pU$9a_^%*UKt#rS~ZhZ<T8Ivdd<bO%fQ)S
z<0(@<KJ9*@4J#T2wEJH4(r<pW=Gb@T)Mx4Jbh{yr{UHPd<^$VEeu6U*MnEXzDj}^c
zX`<!wL%7ezS5;ufdVwjr$kR+LvB7qPV~Z9`$p$l90VfRr-05Z7tyw04T@J7<W4So9
zArjuNxk1$=3cDhYuvkHCAVI$&vJaU76kJu(_aq(co4;gfpDzHsNS-WtrI9?@IHmZ^
zanKA%q4<C-KiIxocWUhr##YNA|2LAU{NH~eu82!MtJcDb6lPcvSbPjWGfxT<8GFxA
z)Cq^Wgr>F-F&DH4Em6p_)wx#{;iy}2o|HuFAhfdJV#HW#MkV+ZLj=LoP3Qn3tdLIV
zFxqCXvDbrC?i<bOLm2`^>4Y+fZxaWRWC|(ofZbh<#FfE-qT66p=Mt4(^7-XrmTZqi
zVd*l%YBcmlXk<LcxtifE)>j>x!3XF3!QseQkFmV@=dhsSJsMEN3Ctpkt86}Fu#C=#
zSRgzZ90rfQWxJu~^BFJIZ4`>zXaP4*^ELuJRB-&JL5!&Vnx66$&doIVJsM6&PJ_sf
z>p1NlwD2g@qVCY$+1S1VG?X(Nwvq!XyLUGNWOnbacXHI}o$T#F4K5AU1`g8hfIo>#
z?Thn0giGy<zSKgx)K-O7NQ2$@x5!SL>xDBcR_r69J*bFjf6p+mMs^f5wvlot@20Vz
zxfHm=p9A1P=<f^ljRDZb4iJEDg8SY_FC=dHIYn9+@pMk%hAT;yZ9LcOV{~eV7{u_I
zD}pF^4eKGnm8TvYAy5=3K7~NK;8i!OV|$WfMg+2c4Fwkw9jg1_3n`T$-EbOJ5uPTg
ze4x~*-J0C=3X&LJ%#gJ%m*{8H%%L?fTp!r$O-K%r+Ds1^MXtZKVDAB0I5iRP!zfrU
z4!QdkETGcGtqFZMRG@8g5%P4Q(@~xiPP;gWgDwpMOOO)3eou1-*|&L>b2g?h2M_{+
zMu|*8p4My$k{?jE(P7o3uLu$}U4}O5HTlSiq(&L^1R4stN<xjfGPzu0jI8yj6;x&|
zlX?2G)5_37b{sSCB@B!JGUm&)sw!OU1`SS&V&v(5qCf%fj8lHJ#lQkRyrBt{bvBBg
zVDD{<_{8`eT}Mwc#W2V$OzrDXT<-LW!;)#c9(fCDkeUjRn!}}If>bgH$^{eOE<}5V
zP$R7iHBwWkQJBgk$b5RrX6A=|SDA4Hx=Pm&cPnw_j)ELHHOh2e%jff9g)U*0y;4s8
zKHMnqS}70-{795!tEDL4iE*12K#ih;M6c+VO3S{kfH0x@>g$?XRxWsd$n6Aa4CLf8
zrQ6F54tZgyM@qJnn+vspw4pWt*iQyDwIfvr;DJ;JFnC2EpG3z`L-N$wRUR+#eV}qj
z6n_BDFQINlqn4+Zykny0+`-KQu9-U$fEqskC23cqdIKnHd#V9@Z8ADet8$KXKMdct
zPc<ZBLL07D6L+Hogyw))=!T;~UG0aK*X-{zGyu<zEA(L|%m|A0Qn0*ib|kc5j8#?}
z28}<&N*j5&#>^2Ya5?q%Dp36cPLJKl^_&ePsdi-jv@#?k-iR^g8wUZKd0X%E4ZY8G
z@AG=^bL>6qDVfE)=m>FLL0-4k%bL<H6Pxl{=tLdPGdZjlJUCf<1b5ZS6xkZlq^9ZZ
zqIe<>Q!Y{Qs4Ual%ob0AO3$<n7ZYQS;K3oThHL_jJ_&V!%@|bGz@SRT#o&rj;&4Ig
z^G!srnEPF9A%M;@IzSc_1j1&PScqj>1{s8nJH4DQxs^djNTh)JZy*es)w>C2&~EO{
zGU$VOi$D@-b=XEm(C6%!+~-sR6E%@0>Proa;!SGgD0lz)I<D9(tg)`fc2WvqX2X9z
z2o<({#RfAw3eZ-9a@@F!#M5_-jpu%sZTN^=tkkU3$Blf0ix8E?Q!z~fMZRVU6;0F{
z{w!W%ae?koIf?pcu8qWgR5^#O1=tHOd&IPJiPXzHY!^`zdZ#FLoz$BSbBrcUf`BU5
zD1`cZ$I$PCOZk&%`%jz|s4hq+5+-WH!Dyd$`>Sxu<N71e$-bb7WnhPToRqp~52$K9
zfXk)fqg3d;KCOYpZML-(0nRH2M0uiC{o4|D484)QrPuK7?ff`~(`)#-DVE0QXF#dK
zFagh~J7pGIYJ2l0S}k}>OfHaTpvEax*S;r?n&u-Jya&yjS+{}DH`>4pR2dy5DZ)5)
zdaQSAqoNl2pOg6Wn625zO>1@|;sFsL^_T}z`+p}xwNPc3E4BXRu!k6rV5F===f<@<
zBmRYBPnJu2qA1*7nZT9%1@{yp1I}<h3Ouz+Q1}M9oEe1~Q+^N)4$l)u0c+#44BYuR
zF_=fEVGT7*hSg}95YFE3d(XAm>P0BcrWCx?0h{?gJofxf)8)QRtWO1UWmU?C4=k&d
zzP;c~5F_>9p?em(zlXv1G@JU~Vb{%~4E`Uu<2;}Fo(pg{$HVJ)-8}OT+}k2w%x`AN
zwDO;cha$bbtNcS(n6*7$xo=JWrZM8*L%NaA^RG$qIzrYy90MRC-1pFd=;7A?)rHl|
zy8a9Jd{yQ5pZ%Ba1UZ1d*WttsO?~Nm9)I2Uy2#P@y#wU1``$D6%Oc9Ebe6y<+_H+}
z<iYozV+zLWdoSE_aqoM-B5&xk@4a-#-~4XJMU}98QTbiZjk4J9!e|S>d*CiIKqE@O
z`%JL@yN7Oq?_rQ1w+!<Awn6?D245!j_wzJMUg!5n-}!GR0P-p6Qh;y@9SfN=`QS3>
zJWpXQ;l_hkBFOg#VmKK2%z<!E7e$0!GP2G93{~kgO$y9>z|iXB88K(w-IH-?!5<V5
z{{|09agEH~lSy9E&z*HrrWyS}5|)R4Ao*~s3cpU$nZ*HzOY8M4x}WoJ82up<(86nI
z@HMtaJY7}yH2PMaWg%R^cbFbbjpU~!`OK;RNnp30Cb#f6t0MR<(gzHzY`vZ3d11Xz
z%PPMuqI+svKfWzk_g&}wm)IUU=W20pz0YUWCjb#}144RHSTJe$owE!v*fO!sU|JK4
z7U?pf$jtokj~qsJ9+i4L=kT20dL8`jS}+6Z4NQWWUO<C9){E4F`yvJm0XGK>^a3p|
zj5(5>RvDL341dtTC7NcG)+M?-v#uu53{8e_GwUj)zdH+~nbXf{QcfuG>KpakO!K=h
zSdvbR`py*{8~wPrSLtim3D>w0_z8aCh`_@C2Cx}c1Q%=<H=H^ojm_u4?t8ekUhzTa
zO~Jq7j9c&Ufa46}Y^gaAT@+ozE?L)bmg!qLpfC}9{h!IVuXz!>yRW`kpZI9Qhw_;<
z$gDE~(YX0@fMlGyL@;Kt-wlg2nk|fefz96MF`XaiG0gHuf(h1uhd0Y_)5$=5*WJBZ
zjIEP6w!*~>7B{v|VVmN4=~{2T%&ZT|7wa7N5!8PN|KC*w=3gea$sd@26}yEILNU&|
z0D|SDstwKkm_^06!5s5oHmke)q%u2TTMm^c+j4hzXpQKx1h7~nuL!@b+}-ciin7O$
z0bt-?i|+HNLpdqaLo3Jq8vx~-8zS6pZrJyEL@?q81;sZg0`d<4Msg-34>1Y<U$_y#
z4M@DC#GQX|0ALm12P6(Cfmw$H>ml)i5|{<$A8yUopLy;CKno-e+zEphNFQS8_WL=c
zUU2FLZ-9emFXa<{=@6=7C*UgMJ{%s38^mb;@P!)#__;~5n|nNokn<9AZt|(jc<#xJ
zuK<kT`QU%a`xf@Jb!F|pg0W3Pmz#!=Gz~4gr)za}ops3;kV~E9qp1T9aRZoOAXoV9
z-@KA+%iIDf`#k4)PMZ<3Y|lj=jYhIH3Xkte!|8a(s=M5MQ<Nw%yJhRNZTqxs>$Gj#
zwr$(CZQHhO+wSSR);!GH{P(VTnwM0P+FvF0Rb^Ew*c;~kuOb~rA`vp3OwgzGwEa!!
z%vPrp1fx(J&ILsy=SjZF#LYE@QOdlo++DUjwv+jr3wx33v(1~!n;}7a`zL1-s(aTb
zXTD(Y^{28b2L(Q+;T7Z?_xai14-dDA1mzf5XDYbl82b*?o22QE{!h8FY^pbYmfG5`
zw1(TL9{H|~47Z9fMowiU)HwT&Q7bv)8277ocWS58M`WbGof0yMm$`wLBt|aOcfQSK
za5t_&R_AS;{lVF+Z3spAT;an^&KZkLl~aOu)k{w2j~ym<el21qZ|yC=i>E7~fF;=P
z$y?)!sM-)=;-ec;%e$o7$C*7c98q@26pTYmrpKHr=jN)}+FN-~mW2O$j3K%am|5Ef
ze26&>0V}_4uEljr=Ert0hsAS4Ras;#rm$99&2MO%7Mz)mAg;u%!?yMnUuF*}xqGB!
zCMA63cjdTNy^-m>^p7ASr3XEB+*}s^cGjx2?(me2E#7V50GgNc3CFimR<6g7ZVyes
zdY6H`?;l*`-j4u!>qj~tCm=?|(+cPe8d$IH0qspLr*bE6*ppteDc)H4<l6y8J#p|K
zX!wq40U34xMn6&bj=6m&e|}@ke8(98X*Pg{-7v9kc=!)EzLPruhTTxHZvglYznB+5
z2Hsy7HQ(_K0D}))>>HTxBrlNRHw6B}Ki|=xY5rpgfHYcQ!)~D1H(=jMyx&vc_zxoh
zX+My$ZdmvaqyTBWe?~ts_>L=n^FU*NTkoU~*k~tk>>HHt<O%?T&TrzkGzs5H*53mD
z#Ja)ZKk)v>U}E1$_>MJx>jrGN4L0fthX23{kah!P$n$$MzZfsyNw{CwuPNtmm4OYv
z0r4MV0MdMbMnB>4H*mnxXaUC~u>v!RB72D@w8Bwm1UFiopEZ*$<Rp&UKFi2DwAor#
zj$XQL>bo@J9@O#%XSz?Y=at|9;(T^MYx|R0n+G7fNB>*~G;%1p{W_Va6=;Po`5Ex?
zUxY^9jsPUgfBCN#&Wixa=e>=0I}xDXNC`kM%QN}vPy($t{BNI7N(NW^nQPvp4Gn$b
z2hodC?8GliflaAu+y!JKK^+I5w#Ogc9vJrO%_J&r;L(a6z||9AIh2;m2I^9++L`Fq
z3xRDXgk!NsN`Q~cFcBw|^;^&nPoh<xcqfO!hn$<CAS=6%5F3E!7!ktDZ~e_$pX-6m
zo|yto-bu6d7P^Vsj5DCp*JL!4YePG{UM8HS&X0+8zrzmD*g!ad`+HIVEpI`f2P%}F
zZ?79fzM&mg?oRgH%c58@LQe<$hz(5`9>v2b8opf?4uJMU>CLgL%@8=BB|u4!r=)N<
zW#ksX-={@pR#To&+Zi930*L5_#ivTcb|9=VUjuyjmmA<d=le?s8|3+i2N3=l59q^a
zJ-j=UtguPtI}`(!v(*@k=(%a~l7U;*S>4#gNSV69#>iRQcxPggydi?2A}P(;bNKPY
zX7bf}GSb06eJXO8ow2%`alj$<?!X^oh1r<tV$!s2(o~0Gz=p2CVJH$S24f3v61+NX
z&VnHTG<!IADpDf{!v)89bBFFAZz6KU7ej{I82V$<5ZE}`I!&$H!1yRT4GeCQ%hT|9
z4v8@)Wb(6|-gsR-ER9q>Ev-a7D9vOYkg;N&fU(C+WRhzoI_*vCV_Z_CA<Zo>i>{$K
zi=m-9i+*9Le6n+~o4z40i}6AHV_H(iA@%KFhwgEcvVpNe1!F@|+oYvM%H(6yZ|`><
zh0%s7CQa)Kj1l-MJ&n6+Y_fY<|CrB$@j>|^&8@^K)vacW?t%Y;;Xw{6^{wzJm3{G@
zYM>EtBC$~;ncTvKN@4C=?U>I)H|^h5oKd&85k|)DVXD!z^jfI7jz@k@JBuNWpWFfl
z4(=HX=Q8D`Jg+{?SE|;WO-!^6#5MRe1nwj7v*>LhUOj=|aBO01Vw@rwee@GjGW&cF
zqVz$Aw=i64{3OI*ohQ-_5;g+1zidRMh@M1jq_5Ju@S5<8;Ee|2j~?RCn)<t#z@(9&
z@sz~4@pz)uaZGWIv5j%Bq8y^uv5s*dqVA&aqM)MIahn8ti@32|gl+;1g@cBo;-cfC
z6r!-P*o5o?K+aO&W&+|!`suL?fw?5a%mg72?2_OX0_sTn>F^VkM0RnSgno%6g-irR
z5ad##|Am!LkDU+vzh@ca8-dFIpMeHwy%D|!sD9LHl=n1)(ibPU&FM-UPh$)O4Fo2L
z3JABqhCipjhd-FVh(D=60pJ<J-@n90#3<s>`1Iw8hQ9N*af{>_{00`YG%7A@rH+VZ
z_i_{L*6b<NC3E)Gzx$VtHs^cmjy78|Ly{j>?X%UVYmZDLa|LBdN*l2QtQpFwN&mfI
z(eQU2MXHMR=o@Vrp!nAe8;$*c>EqPx6&ukg+$VrF8YAwm8E^Q&FGO<Bm`GB@`fSaE
zYte({>sBMKdAuwGe+hrkK9oM{KAb-8KHxs0KBT@_-^R>%#CV2y$Y1U1*ks=LXMz*L
zG6e>I<}MRZncp`@UVv&=jH!j-$R-l8&X7*qGBJ)9{*pZ0B4L$9%xVF+Nz66_w?s;2
zp*X~Bp`r0iZvBzi$~~3^c_ny%T~-q-+~S{|6<IaRP*Yy(f0_v+eFZp16i-V0DEi+u
z{m%>eA0x-UjiO=B<z%8L0uZrwNIcY6MGvq`ZeY-j^$Mb(^2nM0-UwJ=hJ$|Pe)`!>
z!9sMyVtednLT4`cIk4E41D|a4vg5JsfJHOf(tt`^?V64Ni}c{Jfo3tBX7U>e2keIT
z620=<O3f0RA~ZsH`os3Y@TcJ8pCUX$fP%DuxPbJ2@ZE~u3esV-9Zs+thviDj60qU3
z5wj8EYfI{{6IV;=ZxDA&>2DHGOYP4Pe@p6b6JJZ|?+|NGarjBtit%}747P~<4+4|W
z8|b?%f^Nn^m*CfF_#KRW)_<SIp*zrb9Ei<-Tic+mG5e;JY#-n^xj<QE`ljew=g|58
zt9lUDkp}+ewh4Jy&?&jNn~~@!+n}s2eN)^xN#8st(OKuCLO~5&TuI-Km<w+hNzXDT
z?IEB3vooG$G3-D-Q5cy?jfyB!`9aR}hsqhl9CBE<ZF`;kW-6s#xrZ`iAPW6aWG;-|
zuv{LyS<syeze-oP<-j)^y_|TiJ7C$2w=|&IR=aXYx1|uSiy&O)K)7W+BIh@8?;eHU
z|6vrP_w9eX-1R@U`R`o+{|R=p9p>;LJbSTfGFo-L|71GIvDuPI{NekTj*)TVSml*M
z<uD+XH7w!SV3;Ij*JsB^pXC7YK_zyVVu7)GdE8<;eWZ=1idn+qTixd>E}~AG-~Pbc
zfT>vDUBTweYHNj4c&$njIq6BhD4*4FJa#~n#HYVPHpEkFc_OLa+da^sNa0Jp<`nEb
z&$|#W=ahFpAl$A{r$Zzm5tcOkJmFLE(a(E7TT)v+%l>RgP0d9*21dlE(7IA#4)5_H
z+`A%27S1e@!uId@A-b0GC>p_Xj$?^{^_;?+?`L+o)^g9UY>7lx(pZ~$a#W3bh2^Sy
zhh^re_Zr(0CrY_mc~G%5Ys+H*gB%YPl3lrfw0CB6K8pFDw|9k3f@p2HhUZPz!TqA^
zNY>R6T35d;`E8{GX2y$PoAiQ|Ir5{8IK{GymhqoL9%f9fmc7T#og0p=*HEYZ&u&jI
z>es##V%H7i!h9KNd7VSf_nl1R2bCW0ocE;x4dZCUn_M|Ygk&$zbs^P$|DAMLf6d(}
z)@|p5D%Ne^11Yv`w~(8*ftPJpu<H2;*!>&D;U1whwuJqis?VJ_fg+V3Nyq|RJkG73
zI$G89I~B?w)^1}2y!u=FBMVeA@0AWt+l+jw&qa!)S5%30usO$D7|@x&JO=^`t!Ewe
zUN}P3Qr>F>X2OoGlAUvVYvm&O<nuUpB}8*8#B;2~VB9SMF`FH@OYL-swc2_YMIl5l
zO}7vq-4Sp}LoeO;NMrrW&fDRrWvJ8B^PdA9jZYjcMpjp9Z#Whv3*%N@4fbyDQzzif
z;P)UKAe<l_%GMqm;sNgM>P?A5F+mLnU*$#BEmWCS>KYwN7M3u!1U5nzcu;4abmg1t
zJCDXE!ZzEEFeO;%UAZY{&tMiIEiM+ME-x1`FK}!30|w8pcjO+=Oq0vOm=oG&hsMTU
zRfS19Z|Z6lo#$pKSC=Wp&c#ZsJ?1-&51W3@)m}5~>n>AcFpW@E%}%9DjeE;sEQ@Q(
zBD7~mRo&Xllp1iS>@Cu>9>-&DOJ3s&FUc>DSX~)57cYxtbGh@TvaF96Vc!?zIA3nM
zpKj4RqzAO;h*3STQ9aS8FE<7UH#P2z4@YDVLG6uk-VXX~1+v3A0!E7y@MEueE>FF;
zB8RvZNpqv8^arut*FEPiM9%t;(jCGzSgB2XCc-iA7x8XIDcdzT=-lGlXgwx0ys1(g
z%nUWAlkAvjD=5X8EFOus3op<8=;Q>2!ZP~Pu0^$miEZqyBvfg~<XV|#<D9{*3=7y*
zNk>VeIdu9aSDN7U&i3vd&h{QA%h!(0pd$s1&J$zRS>VJMUifO97**W15c&82MEQ;`
zNT2&lLC`En5s%)r$f+=l%xbl;qUuKux94XtI&hTgndn+1;Ev>;!-okSFB>LT<_+2s
zuj1v+P1d~0KV-);M}e#Iw7NJJt-cPI^v;%6#t#-KLy+H+0v2j8i&UQEQ!SDYwQ4X6
zRJfg4%RAe7g%A|GV~`4ufwok(nz8*9c^4{{v#w9kYI@=vT$|)bZfe`)0$QGfJuI;X
z#%WneX+;L*600WSw`mWICnz<hfa5Yc%Pe6Apmb6uYTzgdQ(6z5s<5^9^G=@(-kcf;
zW9;;JJ8!FrXKWJ9T2*OmutP>!rN^<9(vV&fS*!CCR*s^c^G3xmNHM$|;I+SxTR)Ev
zMGuX&XebIEhfh4a+lUhOyV{5f?B0*7AC1v@?heBarXB_+&-|PxZPqOvD3^kn*DVL0
zWyO_E8no7+VRO1n6C1(?Lp53&<fijV*fEcGjZ$3Ikd6sl6sEUoOYX^7b%z17d<sXV
zZ`Sk+s4=Tzgf&Pf*>G`e*zw&4@QBxjL&?_o^ibNkv8|rejzg{8bLn?X6KU&ki@-u8
zdGQm(f)^^!LKYM6|ITIKGdC7^nkDumUV*={Ok~bk0Y+Vkm{Dr81x*v0SltzUdyc8>
z$-NGBqPeLw?ZZ~t3Ue<!TRWMOLoGm=#Hg0Zua1$Xgq7ks`t+T=;_(~?D>vSsPJGY0
ze-9J69VED4%ys|e*&F#5Ylsyji}dPN1c9=uP;SiZsAZp2Kl&nk>h`%rD=YcRn8&%O
z`6AS_zYua9=KkfbZH>z5JUTGhINvu}xxamww!dvKSvocGSb)4u@Te)%#ODy&pblRx
z2LGJqj@MWJ%op^8QIU+$No;IQQT#o6!?^rT_&x<+_z+r8<$Mf{<VB*-m!Ylr?4n<M
z@H~K%@;+B(;YbX6igKdyuiLl73{K~ne4lh57Mk1j1ba^P7ym7f3|R@I$#oak-BhN#
z#|csPbEFJo`i8cF?kbHdn(K+0UHL>&8mJDxH)m$s5n?mLZpKXXpcr4OeRF2)7c&@K
z%AG7DQyDa_R5(YQqm(Ocd4p%|uF{6-kn4!oF{=rlEB$)7X)m!i|7xSPlFigepWXn$
z@s#?8t|}tGjFwBC6Y%yISo~BrBHk9Rx@l2b3*DMZ9s3@KIkH}aMcR4f9dWZJ*wlc$
zHg)PXmpvJgHOT5Sr?ZLC8$Q{p=)-QBY~N6gGVhF{XYrUeN7iQ@UV8$q=)-7Ye6em9
zQpYq{oPNcOOWO5BV{WWlBB|)h&KSh4*1#a5vrex{LE1_u#;iU_6?+USyiX_`6o_0>
z+<8`f3^>_1)<1PA&b?_-4&XE|I_JnQgRwxtdFa?m)%0ObzR+6q?pne~cacMaRgta&
zxzb(?f5WU?+KpVd)@NR^v=O9Y&CbwB52+%CQ{{aI0!6N`L34lhcuTdeHNP>SHD8)q
zf~I`Vcb-I>sRBLG_;a#sE-P%sRF`YR?DS4E?A2nvDVHHd#h?jsy?I>h-^n}YsAJr2
zpCPxQmGzRg5s7IqqCihW>#*1!e?gaXhLc><P&NAoH`#K?QV`7AChb^Uawo4Y7jVh(
zl+-w~d2AhNFO(&0&1fE~FLoJTD=ZaTQ?2DG*qLg4k}r%dEls1+wO<WUDMtj2Swa8U
zrnv~B!t9VdAry6|tHfyXo4&0zcN1cBQOxuNd<=*0k-~>fQRO`_rn-_pwC_+jn@m0|
z2^E@xhZ<B-l#?UE*0JbL7w&E<+m)fx&_Vca<u0e(RSD!WPpe3$nzlMZNu)GS(~zUY
zMDsFxXl|;?-^c5(3>_)u52lSNek`0Yh)Um)nX>v?Rq1zRz8HsUg^k&aaZyBbs?hQ2
zYX;^fM78DsP#)k08+7hxWX0aid*0f8Q7&O^`;vU7Z+(K-rOuD_s@x;0$<>ZUC|eN1
z@KChW>YuT`5i)5STx<6@d(7w(KxVWaUxxc|VotwPV}|A(eo=kjA}~hG!!xp+GmDEw
zAg<CO4O=jKpSYi@xA>yLm~}!xnLp`}s}%Y8*SNFtC9BW7&MYDNIpUp1ecnV$sNwx=
z;fS!~0IbJu)Ttu}*yPS1EPkB#!$Q+#J^KOkVb~=iINI#0x)mDeZquP1o54MuPfTQS
zT)DD}dy_odej$(ue3Ksr9x4t!Lr{Ytn9#ERyPeXV8`^p5g>k<xG(u0a)3l@NMUR-b
zobT`b)5Bafm?s_~#(>Nvd0;t_k*NuTCONhf-ZdtIEA7P=h5{ppie$ypzi}ZW^?JIN
ztdpXGx_N4EA4SY_JP{7$zS0FbXyrb`#x2Dub%`3Ig9Ji+g7NJF;nMzgyZ`}DkCpyl
z#XY&$C>FBQ(9`X#v$-w<km@9F#pc2K`2j~3Z^M))HW2$(1eAT1VDUgObYAxEC2k(5
zOCddH1atQOXW1BFp6I4<?Rq6syVDz%W|&)2!pI5PGs5${pPEgPAE)ZtFx|7Zmu;{d
z8>uDk2knz`@lU&&@Zn{e={4epl2GCJ@qgQ(ztkILADH?uGmAf>hZQMdoo(u2|ML8w
zuGO&klQ()k36D%gG8Crcz&7MVBlO2qsW8w;!}F!R;CRZwH<CGx7sfySd~d*1xlx=~
z3Id-Ck@5-98?22g53xepC^UC|7P|+#wEs@mpfPzpDetiawOFGV8k6#O?Ln?z?0-yG
z9`4<I`Mb&<P!TFKh0{ThromFiJ(B8ECfqFz#K=|CDPwSE%$G(0RDcs?<-R-;_eU2H
z2zvw(OZMb$e~B^-Hv15rQQn^Xty+0zyeI8gxHW?dG1yuDJa)XOyuy8l-dUYRsqy%>
zcq@XLzT&*{aH|(ut84g_)<oP2kBEN>U)Y=a{Ivbb|9%t{`+S-zX<te|TbsN$Z?D$)
zED$~^kn;72%TRd96yAVy*M|9kpSrg#-R2oV<3Y+%<!846(?u|QcZ&HT23k$<>&ZcE
zXZ{$SOQ=xl_;$2y#f4}gH~=GMQZf3If&GBK|5<VLl)AY1pa33HJV`w)NOW-`KJkL<
zXPeg^7uEaC#LfG-gIF04hqxwpy%U;!{3Qruzj8@$TUTNShmhQ7vQ8MnYm0d(`4Z+D
zlAfv|BUdaj^tpsf(KP!(X5NB-zAiv)Pmzz8GI9{z5(rM|G<@7Kk^1k5U`&ZR5NryD
zGmAWXXy?4>jxf2dVpM-nMGs~?CAA?iM}UO340l1@V?Q{{9}&v^+KQW6@A5E@&XR$t
zS)pcx8pK)@4~RU5_^2i0g}j>;gPVeB^;FTfi$^YooS)#x<><MlD={-nl=(BeeojXo
zxkp=;#W9sq%mZN=xb2wW=ns<S%u$6^(HW4@f!v<??R@SD$5WjNy!BekDdR=?3Z4UO
ze-YZjIbX03K1+*7vTsf$k{j9kf|}B!P8r>-Y55YIdl?k#5`x~~MHy6iZEL>2tyO4m
zjLAd`7IaL(!{bR|f4Pi^2B+<aVPzJ{#?oaL?mF$YNgb<GXOq*fIKUOvo7J}nF9l%%
z%CaFKu+*8V7xJ=ND#_!-Vfm0pl*$3xxAJ;eksP(^^7xfrEz-t(-N0tFyJYtjNZ(ZX
zy)h?$NF?={(ae><WOZsUCsK@S2|JWbGu;BLCes+qqr$3#pSvh)_pg9^1fr64o!OV8
zA;lHlxFtpX&*EdTit%~=&H;7P)k`fl9e1&8-BT9My!H|vl!m?_55dkk_y#h!w1r)l
zWow9};vlP^e3Ln=1-lS*N#&K5g~!bLc2o0?+6L$H^G2l-l1X!OWmRWW5KI*>$Gw@%
zA{=4f2zA4;XoW--l81l4_tGb-QV$v#3VQ50hXIWx$$}KFbP1XPRH*39veU+VFjzm0
zZqrds<QEcs5~{Z*9crwmG=bm%v;0-hOT&2WLs#wX;zT?`XDKPRe8t}sxA39-RPo1+
zKbJO})yyAGDUiXdz#?ULE}pZ;2G=8K%Kl{U<A406Ebj`Ft@rrd@VW#aehl!Wa<UZ~
zeQdZo<PsXNw)Cy^oq;!o!`7mnh2??T{7ku=kidWbXz&;o;6PQ6o~+uQk)|V+-mwFI
zC$*2WU{n>mcMiDx^L97C@0ybXD_zn*DX3f-O_Nb%5_c=ol^KO{vJ9(=D9YPXp}O!k
zReKq!pqzMl?uewQ#8p`}YRox25)9%F{1B558WZ7^Q-I4a#vQgeXHZi}(YFbyO~^xC
zj?h4FGLj=2+D|RM3uE=BkW&(U!-c$i1?niwM?y$PF=PNFPlpHY_!k%tW+1~;9a>x&
zDqY7ehk&Nsvl^Em_5n$wMxM~&pdEQNy%u5$)E8OYHM|2;G;fhdxzMsapD&ewAoa#<
z|D$KS)>GC{Q}SI}TOeOflB~k%*sbNTvJWPU_F=J1`n(c3!<ulCvEP~V$n|Bi)q;z`
zZ?pMyXlby6J(7Sb$C0kfeKu#un@E+vBqe{%Bhl7HF+L9;QrLc;w|X5Z?jOS}KU}-^
zN4x>5-x$qSYRX)UI=EUODy5B{0leWot2xJf^v_3JgXdUQNA{)htGA`v#b3uiBaE6)
zAb@gP(htjRB0h=YlO(Yr4BPAZIDy7_DKaFTl<b(`oSlaThcdS1*P#O?q*W{xm<DE{
zWa(<6;fW&W$%;8bI3$<e{aV(zZ~}6YnCp#P<MFce_aMuGA%)RgKWJ|oi`)xJaS!7j
zCsDUU>a9XCnMt=S{V5h}vq&Qnfod^4_Y?<hUKZ3S(nHl?YKvIS4Z#)_lJ_3^qb<p(
z1_Q5xqD+)7l&Ch;nJescsvjzj?-<Ubtt?vh+y>p|6(^Kr%iduZ7hah{3J{Cz$0li3
zZxl6s<*rdLM(4<^N6D*NP7;=_iKko*Kk14P-u9BDgS%~vZg&@(w)Ucn#7hx0To;N}
zO|p@u0u0w2M0Tz*Y$Z*@9%TuO`jltyzl(BUKTe`l@|6RF=V-1IVjk*JOhu)$So2pc
z_)ij~HME|td!E}!2U_wJp5r35s;h0=+Bc8tUn|&oHv=lT9ZI?$-`LHMKDnk$pyN(9
ze5U5hP<3!9o4F!4;p^{e)4DYDi{LHNY>M<A=fefURDu-Y`VA6qoC4ZW9`yPQENyg)
z@4Sb%ea|zlojT#YiVs3bSP{MX76ZpHi0IdAw04oYpoK;6tnK5*r?yO7J)=b=&mOa_
zvOLGBvlX#&ItfFBr)`9Ux;dn(_OrT|&g&D}xGgN3Su%^0Y+kGQyIh~inhQmJB#=lM
ze#FOm<nD{(e}u+*l<$Y~?Qd%a{o;RekC!5to_uW}ig8;m#u36W@j|cK=LgE23c!z`
zG0iHj<I{KXvnNFtRG;T*3(N4TpE5#u1I&;@&g0IhgJi<wonj)*@t?bf5~vGnhL!~&
z<=T|iG!en5>kVnlPMpFUQ+iwm6Sa36Iiy&J@E$CI?2o3oAY3I0>UPkMy@)WiGbWI|
z?HN=2H=WOn0&D#+Nl|)}xrkz+@fky+Lo<V>L^gZH?^bH*#JO9Q<HZ&2PVwy<!tRzb
zA8=t<Ne#)aJC%EyUJXtx*wA_}no<U^XwB6{jec}|7<D{8I68j?zr=(zG;CUq(r(F8
zv@(Ni>lOr{9Y0|iPWATcSIk2Bw=R1VkisQq4=HoCB^3nO%BkmU-^xpaPXA1B@m*4}
zq22Hv9#EM<l`H?FHyxbj;JMc3<$YPt;%U;{?w*;MaaLclWa<21z|;tw1hE=aI~StB
z4F6;J85CFV4S_|2mj3mWntsP7Z9@iOY;Z=Za)OXD7xH+5S~C&x@l>246(lhD0v<w)
zY-lIO<HVtrgGq;*oDhx~Pz!hZdizZ5iM%Kwf~>?}QVSbra2%r0I)ak$3HJ|hKV40N
zsx{r!Q8_%b*nKu&Ca|&-_8bBA&z8Dp^WOFxzq8ez$yGRg1@zZ(;h<(>DZ#4@x&zWb
zIUR(h3G@SnMqgC{@)PgWWDy9!e0iDxdl)nWQG3G#n9%c*i^iH6A(eo0jFR?Nd#d?u
zed^ssb_WWtc)Rdjh^Z9sUJ7=dQL9ijICfXSU)olvT4_uYT=&x<nep1%eTWpmEayv>
z&}i<ZJ=CO5RRMa5Qu<;1;Bibv2qU?H01~CD5BIyezy1d(gbnNq160wAj6|s$P&HC5
zu;<F$o3hLT4mFyd6^BbayW&pBi!>tCaD)PSbls_<n;N(1KKk*{TR8e?b45;b-Y1U#
z_NKcCaB)``v-o;TkO$gYO*C1$Z)^<h>7$b6c_h`*p>kLy^5wd9)1!*b*}KNl_pu(T
zP5yamvEF6?UnAR##EnP~mB2gVZ~M<2P8ab%QE@q1^CXv}G=muRY`KEl=e;i3B_I@1
z=o3q>yh;VmC2r*0U!$X{H6}w8<VA)W(iNzI@Eml}vFFpc&0E9y5h*Fem`SL38h=Co
zadI1~Z$#W7r4oo6p-&SsvK(Emnp+ZF5Rh4RGIiW6)*C3=(P{-1!Y&*db+fVzIxVgS
z*Ldl-ac^3jiHBS48*J$RW~$0TcsdDvaAJajS`V0S^xze`HZlA%dmr1CYIuDmF2Ocz
zL2vePJ>DNq0}%u%Ned1dnJe;pbc_Jn2u5kQrGp>K+jBmNgCyeQHW=R5)_zUC=TX%2
ze-+pdYn5pr`#xym+EWLYKe!K~O~^Dwj%E#%W?S}&zID?-*HznBY?F{pU-?EWASTWf
zF|!MJCv-5@di9>A)UEIcI_#giF{wIJy#E^Fs50Xzw`9z{;5hW7UOgPqm*HMejVHFF
z_3>D^+3(mw9_eGxoxAECaPgfh?=*3h)mNnM1=@mlXXO=B0I5-rCcbuK7pl9pVGnOT
z`HQ?Y%!MQHGY7?tS`}Y?(=H#9yrhMZWn9<%kLRvPg5n?W$Lz6ID@@JS@eXY4RKj&d
zg5$t)pX$I_f?GCrLV4xwsaiyxK-8<#?(!##G2j^wCKt?MW+szLs--Ie9@qZzgXXLe
zQzkyzrr9tp?12crS#ZJ@W7(Lg=EKKwyU&KU*bN6li3MQLv5J4C%(j~gKJN;AgH~B{
z=_|O6IZjP!duq>Rp1x+tZR<n1hq`Uei3M*bOR6q(4S0W8F>ZLq4}>;p$&ASZrZy#|
zRb~|am`HL9v9}S7RToU*p!VdmP>=IefdN&oiT=IY^uJ?;nV&ZiE}kRa>A4$znaS#L
z{-;5%pC9mu0Jmaqj)*%8zaR9FFj><X3$59EFa0{6t&9wb(jHZr5U7D_*skq+?yQ%F
zEx7PIdY5vSi;1!>U1hkzD|DspPVs0RNh*%igpF+1tJ>_jKS76b?5o=bcJG9#)AL@s
zgCXeGm95Id`mIy@)|S^gX>U0tz~;8iYN>C>^ozEGk}=`v!nioQR^p)AY5z!7N5yy#
zx5<@omj`7>RtVO+UjGPl)nPc(Vm*Y?ET%Qhy^cXLeSxOMZ7W%XEmIUUPZ7-9Eb|@u
zFCI8qKNJZzqap+@thytF)zw-<rRF3<!Len}V0&OqVr?TPkQvnNpz85;PpDvi&kH8-
z@1YV<l%RV@oBCuYiOK(45+|C0`My{7z60Es5D5w;e}Q(_Wcc{5leKTK9fK)}Pauv)
zR{)m?WK8jTJbD<T=9s}z7{7Dx%ZPCG9ngw}2w)1iZ<KYIVYTSvyBzKoy>LBjI}vW$
zlT9{fz~1dPRO~RN<!Au&GLyj=uF|l-ufK-eXF`TYuTOYLO_`a}A3t?|5Q(oq7Yw$$
z&h|(J+@ZW|@+`uZ;+$|{G^M`(UHCpiwgAp@>{yU54m^k2Da^^FJSOvTqNnp&G%C}T
zsCpbUTCN=!3h&N{!(!=>G7C(KpHmWj;v7Q@knKfh$J8}sw)<WbHW>G$O%=J%LL+X)
zT+c1@V7#p$FLGuW&|zIJLDW&ys7rXb?SIb04v^A7Dbb^!7CGKR3^fPvF@#Ng@Jubr
z^XW)^9ztq$LO7V>iucw)3!LJH*4FP53&mM0Vs%6Fe16N%onx4IL#U}(FWYod&IF6y
z%C%&B=g!8K+^u-O(3n;@0F`|KkR=F4+RkNS-NF`f+E0t0>~SI6l<CU2(=VmPo%soQ
zyw5}Y+H&DMC>VhDm_Or5g~{Af%CGyR0l6Tvg^!6V;|<|J`AiUPwA&)hKaO*J&1hPY
zY+Ipky&<j0tCQXxFw?FRvG>`N<wIJ<@aDUzB|7;>Yq~W9(hM2ZM+I?56K6OMx`%`i
z<Nnpks18@e!en6AhHw}cXg3JzxL}tH%M)v5Th*4ST`THsx$2>b8$~cwfC?AnBceZ*
z;5-L!1foKcVNoexU(d*_E=!dw@vC$Y-!h^I$Ep&AqHw`LuXuVh$`z?|-?%ANnbmFR
z%tyBB(=vKmSY%wRJIBe6lFNe%7hc*Yt}xt<<L&RfSEf8+IC9I`CFzrdspf6P`<aGa
z2#r`G85+t?FsV@9=1X%cl$jupn1UJ6kPD=h3$|Bln2lXbH6+|1d0m_heFz1T+gRKU
zYXrL@ihaEGqn^6#WL|b6kX_I!ack;7?l4dH)^CWsRvz-aR_l|&J;Zf--1}>tHc4Ts
z@4@~FvQn+;cR6md!_BJ~1z@*0YID8kYP`?o$J2AVV3mnBBzMHw7zG!1={j!Gcoj3~
zDaO6d;WA;UTn^8dVYdoB_7~Mz3IQNpHLVdiD!92(PeH4LovSJrgrEicVFCSHjz-T4
z3%6v0rOMuORjG^qbBzz>t@cJ-_*JIJDh||O^9J9gm_2<>eZk-rd9?lJfuPpAdo`+=
zzsPX*S<6i;)o46RL_=8P@c;gywDF>};Ss(l9Zn-3)=NnaZDoabVC`R*w{96>yc83@
z2pndIZ<0cVp(EUbQnoauX!&B}?kUNsQLH6UZn)O2@OvH1Tf}>1*R9675a>yU0L)R=
zs~HWwvpHEi1c#By`dpzM3ap5lo0Km~lQkiUQ6t9+rGx;kgX>v)Xz-6Ab5RWrAafl=
zQal^42e^UaCCS6Fg*ncf=VwV*WE_Rc-3(joBfXE{_PcLV-EW>w%RJ<)Fhw^kKbBxh
z5LR|jK>mu~o?lEt9=J&<PBD_TCO79NeKeIp%0pcg7oYkqr_W~=z;2iieXLEJ0wKT=
z^GQI$kKffLh5mVbeDt+o2`hWbDZo$>JOw5b5+C8M=22J_cZ_y5--W5mfUhTq-f2vk
zGGy{5>B-2N*Dezwfg%5t2}@|Y-%w1dVw+D<AF%d{ACT<~lv;CFiRHIi1b|J84E@GV
z88k#qpw03gOMp;QWS_J_85R?c&KJL{Fr698=z7;@RVm*39Z4nVDN^6iH8+q4$_@-Z
zK9J1+Hy;bHWkS&|9a^1mX+dh?Z6|i>-c(~L{dW@@f^~$`Ej1Aklo%m6qLnBO7wwQx
z&^eFr!yrc(IlvH&!;i!gHh~mA&X==-HSehz6TR_~YEZCML^5!AWVkUE-0-Ai85d8c
zbjihlc|e^SnyM|BmuwTRVL-5PYDyp<?^>p6&RZ4Ys}ylxmHXo3Aj{6#y|F6rfFVz<
zE`=fQY(X8VjU$LI_Q3%*#?og43GLf6VJ3RWCWfMjr-|@F&uVdLy;N#h_|SV8owh{3
z6PjMT9Q|ioXA}X-aL^oAiU*Q~cHoou0AWJhi?VuVqNJ{i+{fWwg%I}6+Gb)0=Z*4a
zXFI9qX7DDt(?&wO=kLvrhmSukxe79)RqM3|?mm(}-_ajyrfl{K<0=5VZB8L81qf%7
zgZ(>j<MUNHVbtWht^CpUT*?tfF(WdNUJc4+7E{&b?7g6|P?VP^7$XJ>&gC?6_ZH&$
zTgOg+bI9w!9a&X$7yYa)sz!<Y41eMCwf)dTiXrmS;@A3!f-D9#wje=M3rHN(<^ItD
z<~Rj9NM2Wdo`a=meRm_(tY_WPA`MhL0cYuv;>d*L(#h>i4&-MqJ41aM$Mo|-VNb|<
zwqZAqfwLD+K?tjMZq{xIckBaGq8~$y$~mcr*n4Xav&zqE_$%92?Wl=WiD9Eo)tPbC
zU@wG;T3*}<+4wYtr}Ix4>`f7koK%sGY>t>_t)g#n?!iC>HbzcAB3=}c?({L@nD$Pz
z)!m59m5$Z<QV@;p+_<hMviwRSd6|uS&RuRYM|y(erJmO<|DU_5ACnu6)^*`{;UCD;
zi~&*BD1(35`i(pwqk&r5P=*Xh)hU!345s?TBJm0E2S45w<vZ@^44e&|E;rX}5Xu!D
zOIli5HPzMcBSNj;P99%gE?-AQysnR1201=Xequ(~^saxn;A5w^3#69OZ&L-WlvZnk
z6OUL#w}%R{>t!9b{x&<JHO9()N?V@V@X&uWEff^S5yTWx@Q;5vH^GCxp2pd%ZAqMB
zgZ$&v@BaJOI7-Kqt{S6YTqy%=W4b=n<c2<2Z+$F%c-E4100X1AxHuT5n52Fi14bkY
z1_nuRivdj|nH@yLPePq)Gw=vESFx`+JIOFFj)pm;ZocoxtvH3G!uIbT!jUsObcx0U
z)ff&n6k7G$A@eM_wZe21vA7*~nEZCCpja@*G)HgSrYx>>P*VaaN{!Rt0!&o-S@7v@
zC{iq*e`DXRb+F~J9sUAGX?g+w{n<n`S-U!L-LUFLyy77wavG=*4WFNxUwJP6>Q^|7
zpgYwtFo!|l1H$JSjPGe8nw|(KyxZkHCyk3M*#33APWo-PM`T+sXejib<IdR=EEqs<
zJoGu0;fJmKO4$Nf-h!(MJiwK3ueV5g`7#hXttC6-vk<0_Ob*M%KE{#Wwlt}6kbg>|
zEiMSkbOiF$(zW!+WPRIxr(TavmRo39(3~rGAccbN`8WHFUN0?Pf`n_SjN^9Hr?f(%
zf}D)&;)<ifklZ-Pt;!*QD=}&yytYgl@7I5V@j!~8wV18@Ka+9&ngg@gqQYIo+^#tG
zw-M#T26_=_++ZDry*G@4Q^*@#vb>OhThn3FLbztn(QU@5uA1+{C+~UK=c#X+kK9p;
z6nC$RT>SkLzQkk?h*5FGFT+rW#gCrFk35UY8HkJ;2%|5;C#`(%wJG<Qr)@G$uNl_Y
zY>G?AQ61p;sW0wn7U4>y?9=d5?4mSjUKc-Gz3lg2-!x1@#yS=ilck<WVGRmc7*C?$
z`U#&r{Bt9FRu^iFbU*Xsfx~S){i@F0zZP60^Nu+{20cN0g3<97Eg&r2{5%Z-A}3<`
z83DGFNApp9oQuAtal$C*gYTKV5Zf)o2iZ&pqjYC_nfNGFYia8tyhF*ye#bpu`b6J~
zwX|cM`0;8Fe8*n?G@#{Iecpl{_-1lyfmfp!R3Z&p;y`3#`lMya1xLXO$2%#&vFIWD
zu;X@22erO3kLSDYlI=hfSQL(iJdP?ajq2BQPB+Xr)*WGolMN(XWKPi~%P|YPWzIIG
z>Pc2+kQ&JSer6zS(J<nbeg4@VPCKdgVjuOAjZ=-065H+CoBA48`yt;-17^XTweBp8
z#vO@UjX(DP85z)l2;rNeG(i43#A0Dhe|PA<U_b??k8zOv=PyRUb0Rk8<AR}xN2<bj
z2b+jEz9!xppSL_>`g9g}2>@;_jK_kChYun64C)2BvRoNLqDW8S=qvLQW#WT|0}`Dt
zjJ$zs?ADf0WRxvMVz*txr4iQNh$Sq+!sKWJOG=#69lqX4+)wcKx%^4kT2x&u;f&=p
zR(-ZIhx7U><`-~623Oj8MVT|8AH);37u^!6=R8}$jTDwuNhmup`Q|9-(72a2BquK!
z2XMWIqv|p}mXfL!R<|s^Q)>MyHLO#QYND8t#jL^}&S6}oB4>;H6ovRhbw0t-<Am}@
zlWoy0&Yv%aS10~QBix$jD(s5tm8q>BT$lU^KD6wM`R<9T2vG%A)~Ac$q`L3R*5i&O
zI1-=3f{%~!oi6H)&$Bpf1hW8bE;h<8&Z%Qj=SVwbXT3t>kF(Xggy)~wSVSx((-x$;
zWv&Q`W;AAXrp$namK4qnPMc?%7@6spm>3$TXBC?ZVxZ-^=4Xq*y^N{GTFOnH0EX_`
zMaM`_^Ghp`#q0ZRTHNcb9`@~~Zt%w(9tyYTjZys3Hsa;lg=pRqQg-Y2duLV}VK;`M
zP9ss1yDQ~^Sh?LXLhO5Rc(Uu%x^gYJ1jpU;FVCA&8R;0AXXzQAH<c(4igMN{O=x%4
z@+{w4`wG8-!!__%CR?<(g1Cm;l&n`0@|_^|;rY`JJN$6&2F);0_0>CmDUsncDP3{o
zcnw7gsj$$j)%!?W_^mLI2c24-tDxPm;XSX=vizb+Vf6?cN9-Cd-DfsvmvuGvv{@7i
zNn(Q`!W8yLj$T4%qDiYxO7*^%!9#4}de99U%yY;~Wyuc@^yC#B$TYy4T<|p&`A*>=
z=3=)_8_TYkgwqk;+vkPLhK@dM*RK{a^=|yGk(QmO?7NgM6Db>3*4K?Gn5Sfo6V8wg
zUY%^Kp6!lJUXGm)yPL)z4#F6ycauKtjeuV{O^DTG!2E{fzN9s>4f#bKhj?T`oX0I9
zGlg4JxUi+ctNf9gDLQ$ZJ%1`egFi-hQ;0h<k65L(mDO>o@A~-iZe1~CFl_P@7i^h`
zYZ6NF$~0;qTP(vtgB@WyW#2TB*0|i5AnIZn#tR;rJY`?+?Q;Ws3a2g4K&4|TKb4+L
zI;++-0#p2y4^po|Mt*ww*YD(Q3CTx+_G5iJ3#r$11G1}RbeE0XyaWmyiff=xjvT;c
zAyRp|EK#~6Ryso?XED9jB+hdg@F4bN`N&KrMr>hg(71BCqmYuEMcy_sem!-eh;7&R
z`3J}ttEu7J@;N6bV3(9RV`}%z#w+fjI(jTRYxF*CVE41sORLMw(Rsu49sI2Du0%CC
zyOMLvhS&iB4x*L*UWqegs(#7i)vvYsi=#0ME3fBF!k7_NHdQH1Vu6F47VAyQB~mqF
z=>|D_D1R8EqWWq5Iz`zClgfB?d`Z3tUI`if@OouZIefEl`euMSiYl2?#SE;hP{`m;
z8=}UsnUEs2j`pDGiv-0*j&k&!kP;5&-D0113~YF=3>i#vu(%_%6B46sZ|ymH_I7L7
zVi@$(=Jz;86K|NSm2InVmmonm2xsCn9SF=cDA6}Jx4cX}iQ<7UaRA87@ytLc$Rz2x
z!H+@99@`18BTC`F@^4TesVhEEIBWvcx7e14<rIGzQ^Xm@U-OhMf<VgshWkjfPa>3b
zQa5`T2n&=SOd}ydtI6(@BA=*jMQEGa()?pAn|KI?)_Ar%P>oH@2_mN>Z-9z;kR<`X
z8PtOP*-;R`^O3mis6di+v3+Y^RQeBt6c4bs$0z>Wm53wM`jNrE!=woh-O!UDkCfXG
zDy2+r?Hw|ElAW4)29rqLuS=f8_y>YA*3@n5?UV~AvalH%tAVWJh}$-qWBMsdApxP5
z!78f|sa2mcBS$M82?IegR|np&iPPjwcO-KN;_iKw0q6zU_GipgQZ|HWWO&n*8U%3w
z<S|LCn~_|(c0mBZhKW&Qu>`EO;EG&;DgMqUgolaDB5LHE?41J3lB*;@zzF%y++JHd
zJ(aeL#>epoX?#x`Kgse`B?0$@*!$5Zvmx{@is14R;690X%Ph&=gEUepn#JyH;qW;r
z^^&)N;G;4Pz-)gy+XD8l&l2V-RHoX>pyse<6Bjc@n`}%jfOH@f(T&lfGeBe0nbNv_
z+9e-CDwxmGzb4-$5HZ*vF)FBdc|4xKUd>%^R}(QUGRlz4nH0XU(Ji4UQpS0SQJ9Ol
zcot?BARy|K>~hf<BXNMG7yXMofCt74wW<F^H5f!`z(OSAfOXg&f8i|cpjbMO%&R*z
zwX%X6<`aNiTsj3GzXtRfF~V?#2=JeW>r8~=lvUS@pjc{2ypuSnUN-YYB6)R7bx3Hn
z5xXi4u5XK4;Mvx_e8F}3s+I@9j4NJR7d!d3mx9Xws9~m#RaT1J+J0xCd6{?x6)R`)
zJNp-%-d;ObN@JON-ap*S8#)_$i8wu^4}f-r->YoK`_K_-=uIIJ7G0cssUA8e5(`Gx
z`*27C%Ed6LxQ%VN=AVq($Y6<y;Ke^9IUSm3!n9o!<G!uDomS+=CG11+?pG2(62%YD
zn+{S8Q_Eq_yxpCNMU_4+%}PlHZcO!ZjIpixH=hXe1UUK58hD92iQk7GLLbG{R*jT(
zmLk_BrZmNAZdn67s(oU<Jc|Uza#W-7o>ohiKR}Vqud!E&klM5bx59DP$_Oz&&A*Uq
zOx>2N@)8P|*q+~jfOn2vvN*aQnic;#y85?)`ydaRPN2`kC@wjr1k52x5ZMl52EAt2
zm97DlUYFlNP{ndrVHNqv!JwKCsFN)Uf+|V{kxnIRXvtWOHBY*ytKYsgDf}|wI*sew
z-+;v?$3d6DXW5m>iN#t825D5-AujfBt2nz{2-po*4L#2AS=03OP<+wd4<V%tCG4Y2
z9)<S<#{~ulE3}Qv^8o!#V)NRblrB;Z+d-Ry)*QR8nB2ao?CgkMV7Y>BqcLtYVSa*5
zph?$9qjD_KO0mE&Yg%Y;AMBX)-;@HZS!F=!T2J#$4-B4IpkF4~J#CPwlg0;Ps$^wt
zuqVM+VKEw?-yh>DYisVVyeQXDGJKQhJ{rn;RbZglTB=s@_!$)>k@hwyx*L$?IE<?|
zIB;k}vXNtVihEFRZ;N`{Y3PE9wBFtUGCbSTdd7$9|2GAi`Vvg_EsQF|F*4Fh>WPnk
zd`NceT8sGxHidp#E3=6ml9gh*Tr<^@zjxAkUhEgq*>qIafmAp(TzHbM(m&BFl^z*?
z3b-QEiZIV8<!z?hdam>c*MofQ>rbrq-IV(xxp{_cCMIWxs-o&yHb6Wi6Z-K1j-HR1
zUu9YTDc`ThlaXBgZwNMh(M@H>Gu)S8`mr!k|M9VY9f{Tm!{!HZ!$jUskXt9l=OHiP
z)aqS78r(`(HUBk?wtc<vTJ8>tEwydrPHE?ls6H8mA9gPs|D2LI;oZ+pXh6k1sR;Jq
zl@Fv{?cPlc8%bg^nUp!g(ON43WBPM*gexD-ItMkqY{#L--Mvfyki6S6<X28J_-L%;
z;!R!rrzP{T>?hQbZN*AO#m%gVpCkCPss%cdUYKN#5faO*@UFa)K>1^?-K7vwbeAq#
zQnp$Vm>(%^`dlGpgon)4M@DzxBq#-zmi{nXH?C+rj^fF9wcun4W}j<9iR>RH_~4hn
z^M$^`GDcfyaQqU^c5?=|dZ(o?`gFCU8#&-n_dok{KMk%RKcD2br*Oh~yg+gkI6oqJ
zLf<BR5xnWmpJ?>mF!Y8Dem=a$pHOMjH{s~*eLl$ghd#KIuPWn2KSEI+azxtKG$bHu
zDjA--0CVvjg;W+qAm{bE#ntr2O%wiY>Pv&#)1JNkxklVbH93wnv}c>wTTTpnU{_-9
zN2I3Xi(t|g7Ij$b*!Xzha8?e>%*+TDX{@4*AE0K#HId}-b~U#~dq_S8pQ7p$A^%z}
z18v_v1Xh7+TK5Ljb3b+AkAKwBkALF$GLIXWoYA*I%4}{XMw3vmIp~u}w>B?J#2szg
z<tOssDDQ%W*MZjC^!{pG(Ljrq0L{}|ep3|EO9J$8Ytmbgvl4mRYam>3VN0m^QM??J
z|59z_icj^TaNL?Pb(r1fCM|TJE0(-)PDLLng|&pMt=;egys3!zweq6UBr0IyN&-z3
zKNu_dcEVyIpKH2q*+Sq;lff3kj5u^&|D^z~J|Ey|SC)!4XpgK>G)YEX8EbW<wP(R}
zJ-5D2tXY5DR?0Bc1C~L=T__O4KCZqcVoj#4rj=W36};E)+PufYtyB(9X+nBkD44hp
zW79;_gMda4W!2cP2{vqv#YMKBMii5t+{#+-;B0bfvGwYBiA^CSX&Lc;jiSMP`120}
zI;+va3U1~d(Z#cIxx{nYx7BRPZ~gWF_G5l*qI5T;viJEkhH1$u!h3~wRj`wOt0<&>
zzOaUFvUE>oHF7wws~OHIBMm#y{bELS&_s5cjANLo6qg*Svc&Rqi92v*x!9)+MVtUQ
zAXc#T-p?TcITdcCy!pilc?4mL4~bji1^HXFlnXX-Gy+MfkAz~`+8awW#QkA-p6e$K
zkJ*(a0Rzr|HQ6Pv(9pQ$bNgcTmbFV(1T;Xm(o4Fm%+ugCJ-P|1w?L%nLB|CeKZ?s3
z0Ad@+fCJ>ZJ_r!`wR^Z>>ERNa!*RsZ#RrB0nDiXf^fO84$ciLehhE_5$jEd@?XU$v
zYrsJhWZE~*_51XC+Frt`$3It!Q;H^aubLtnzp#R$C(|WQ-S>O$@Od}7tJ%pED47+l
zHr@=p#WnD_=A5h4Xd6cIpaNB-+6<vyY|vmvX96B|c;6NdRfL`7*u`bs2L;@3wm&vY
zG^lc|E)FOBW!>+Oaf$&p&zNKDPXreEA!DE9Hh>08DZALly?N3RHC^H#qfOEd@)ObQ
zZp)Y&6uG30lCS2dE>4vDkMhaqJti)1H>17c*$2-j*sO-3#P@dH@bYXM0aWfLJnr@r
z`PfbPp!=oBtE+!-uJY`)gkNMY5U3W~f<aaF?L3djeg`nLoXJYv<~~)?&1ow$xb<3Q
zqMj}58q5adNWk8=#?0%DRx5}Aghuk*+yhElGqYrel%qBm>D6zbW;m*YDz^TM3rvn)
zS!Qyl98~Kod#vV?y%%%13T^yGTI>0Jikk{|m@4GWRf)zLY)H5*SSk92i8*9VTu2xC
zZ4-SSpisxhr+8RwD`Dz#Qk0?ImCh}Z?)^P2dHEw@8FDGB4a9)KteZ^Hyp02GxXagh
zzTc=K0hc_n`A`b(E+zv^4_rk9%9H97tlHO4560ec76NpQSWT{EM-0X&b33z{#pJ{2
zOnF&eA&?^d)YY5#2yEfa@(6FbR@6#y$P}y>S{Sr>eL+sdV&OQMeF^LW;kwg0uS9bH
zf*>U6UqQ7&fJS|9)nD|y=-g8gpgc+eqAB<Zaz7fKI|ffBG3`_e@uA2Ns;jDwy;PEK
zDP=Y|PW`_8M}L2NLVyPF)nITg7eqyEpFBUl$YXLRg4UOQJCp7%U<IO*?dTx?BEzbh
z!t{vxpQ?nXoIVAirn)UAw{cNYp5Jm2G3J6$aOx7#xhWn#!#K<J0Z;LtoT{o}^R*|O
z#^H|&gInHdj1dA=3$Fa<m4OeHp%~9yu`Zc3b-}NJb<Ysg<^XSz=}^*{TNv}EHiqL`
zw}E%9tpjxWS?hVE1zYKjBdV62Hc|R`UgfRtS{+2e1p!PL1;E%v)6u@@^Z_bF;=(KP
zxEP@SK2sMKnpspg=Yf<X<Ns;t5?;$cyZ%NNj!CAG`OKNoA5TA?gXD=;y4t`)o(Y>E
znhmcGcEX@SZ>ltdXRr|aUjS=Bl)p**F=)Q43?VTaqBx$RI4=K!^r817gQqzkpNzJO
za#I5*^r}207_y<^`TpuYPG!bcs0XiTiGvgq_}A7%hz%8W1EmQg*ao-of&$nCE{uow
z@b(g_6h$w#cTUXj+S2t0{lYlQX`H##24Ddau@G&ig+^%GmP}6UnjN!kcEdigkL-%w
zvUlv1eP&<S2X?@Y*f~36uh<UTW0&k_w#!b~uWX;a|0Dc7GmL8czKP?$M?vg;g8-J)
zEL(;EmXTSj5^11r*0L)IvsS~+e9Oos4Puo_!t{kkx4O9tjc(G!WtrNVtX!6<O&Ge+
z)Hc?2qkh+q*w+SAn-$=o(bR@94{TGL74o2FYQqQ!?W~S{(v5Gbu(7N9H|%4ul&xOr
zzCKphwAR~4cH1Cdv3I(UTi!>tihs*ao5mqyDX8|REo0!loU$*_ixu_ZgKjG<1?Fr2
z3p>CTSw4zSW6&;(YjzYUOg~s#J7DL^s>#j*Dc;uZ<EumQC-$NEIgpuiUNOLHj1Hbk
zOLt&iN9a~`iptD`k%U!t!-zE?`IHF)e~$cyr*yy#{3`e@ec`qkvI@o@GQ?Pa%&Lfc
z%}li1X03Ski7i2!tNKg6o}XC_QQoQ9GNDhLEtpy`cc;eMFoUIXh}c-NI9zvSd%TBX
z)d>Qq?ko18Y4!F@F0$t-2L@P!OIvB&8L-tBz3kE$<#T(KKL?3HeJ>kj24+nqNyn4q
z>KeqWpQ*SeO*T#A=YDh7{-rs;OF6&iIKSP%QkHi-c64{Qt7fvXY%>`42g5cEU5pxy
z7dtgu#W~w)nui?W#uMq_adOX+{;GHUNi%f!gJ0Ly5(~&su-g~L5p-cD;^DA;D1JE1
z_xsHs^iNEfpU4@#e5n7wk~<q?yc)(_BdXWJRsK&`O=n=gk5$YN7wQ%<gI;lKSVdeg
z1dO~<T*&dzw@F-RJU^>aKNL2U1#WtuxoFA(GO@S#bO5qO%O0Ot#&H9aF(kcph1Q*V
zeHZl(Vhhp+2TGtUwXrKRR$$Vsld`Pe{6^>np!JW$fr36gYy1{<C0ju=W0-tP58J-v
zRyRA$I%(YO@L~e$nb9?;&Po&?VPK;s8#<oU>Jzn69nX<*I35Jr^sC3wgzK?+vj<g$
zz_=pTZ?Zhc+*hU}hUV%~!~<&#VyUfqbmS)^X40u&tS1W#vdk@oUORl%9P0$s>;Yf4
z?&;N@j51X@<Vf$^1*u1O!ax!3nI|~>2ub=9=u^nbDM0Fp`|;KuN(WmlJLsXO8GOEt
zrx|e#R1Y}L(2dl2hJC;gSI&jgrlSm5m<9%J>9a2524Onz(|ZvPD!InNhtYUo)iO?)
z&EkRey~+WJeb|x$E=rTKgv}p*eyI2QgmTrldKrDI|5T|wjLMq(N~%1J>NweMRL?x`
z8_|+)3FBNrBhFR@Ve{XDu(^S-%0Var(%8XcAmt-d%3K~MN{d}<;chK%mKblX91pJL
zxgP#jaU><n%S%;e;9MalLci@cZLzl+;%pfwzOq((I0gCpk49+YDmwWVwG(ntK_I+j
z6ZoKAw?yci=1zXD2G?;65HA)38BV7XaJsF#qey+%2wL4%`&C4dG0TN}c6&3-CY_|j
zsNPxbv7e&gZN$Edf+yWB`vv}NY_Pva!PD+0`*BJ9(8hSzlPvpylKeg<zX0qEo@{Q!
zPX(%!<y6GYb54%W&V^<jPLmT5(33BL^B8_V{?u~}{rz=X2^uU#XWH6WVg$#Ci}DTN
zBSv?ouy6dg2yc^Pa#Z-YPyhOk_zK0*eG{e;8huL|<epK)%G#Xd2CB`qUKRZT#WZ9q
zIV<%7>uAu(Y6h^(*H~ErOvU(C5Hwz5O&cb%dIeI|YSl1LDwM0v*|FR?0yro_pCaXF
z>ZhBcfP!Imq~m1`SeA2Fe0N7lZer_zcQ{KX(J3FVSOpwav6n{EEJ^9i0Y3Ql^xzCO
z=IHt)%)=XCH$>Vn4_CH-cFglP;0=T{!t7sW*~0db5yyci`)&?cldw4tb?sNyhz+yo
z*3UcmXW@yv5RHc~7QSKn5c3%Ym5Tu$eOQ`EOt%)6WSdG=Eb^?$Becc&TL&D`{@<{t
zWkhXxTOx;b`5~0VHhJ_&`rS%b((ob~u%36(9c($5mnk5~<t4^$8PSPhghA;fk1M#B
zcTx577SlD-(xg^08Y72Fn~SKHR9UX^FVXmyKM4O;OCDmWwDK8+!4j-W8n7y_VpTIz
z>2Ty4m-#d`LhB?~KEn3#Rf5#k>Fc1|p|=d>vI@#&4@Wt4Z)nWPBX7q@w9^^B%6l_>
zNwiDU?U*pYgsv5|OT4Y{hml0PP@-L-&~9`Q4$ysh%5zOk0yJdU7>Eb^Qy%_5BTPiK
zRiNUK=Smt@b0yVLF|$z7PJgyMWK`ptb2Z!QMK5-JAx+bey^!`Z`fSY?=1BP>{(<{N
z`ta9@GXM0$i1Gur4|6Cx(#62>Bbl(Ml~9NG6YB7OLjBNPW1~egceHPznfahJwi@S{
zlklpkj|bruHU4AJNq%T~mMoC2uBBj67dHGdm|x4E_16na@N=cy_6Wbw!2FP0$DQoM
z+S=;HcM*uLAhr%b^B7HL5i(3+!}Dr^v*nv}JXKX`OB)gyn(20bEpQo{D`D6&f}SIz
z^Wk@^pVfg}IH>#Lum3&T&oEk*=wxM_#FGd^fP&I7&C()X`Rm#7(f1VzsY96@t6$Nb
z5rJy&OU(@HnJaDX=ViAoNDUX=I6v;4JIW|xinD2;xm;@TEkLnM#5$hCp7m3{JF|t&
z_Z2?3ZmbF$RWdMh9`hcYMp5FQ?pJVRaUZ!#dH<R21?_HQJO51AH<EQ#NX|bsTtfKA
zoOBska{l&k{ZZslnBx&A<<;ZSY5VerzZpLjaW!S;zU`vOMhOp3kNE#nq+E$@a0PQg
zS&YT6w$R!QUX0Vk6x+&#aAk8wRAKAjDOS<$;z@f+Tpl!1d)CybP49wUjF~nvbSw95
z*__Eq<hyNxo-`e2cXzHziOZU+%0zMAmewD-AU9ORH>9gS$WUZkxfI_*CB7wi1r)@$
zQ4pf|R=^*A`^?rMM5b2ITyTsdZ%Zw}w9oV8j+l@_-HT%2dH$3nJv=hAg`x6wBV&~}
z>-b`8qx@A{1Dl&uGxIBl%jHA)xe9_>-@T^`djNJv=12~f>g!dcw??qMDe+wyiB_md
zH3^4WZy8r6mf)Qd9t^3wL?b5NVfI1Ls?Mri6*MQtYYB`s5{O+rpqExvP@K7#AFyYU
z-rd27jf0c6iI+S!skCoom40#)8aaW1zqv4y-2Anbz@m)bXrdcYT2guaih^L$mj4^l
z!r#I6qr2@`m}G(oEdw%2VPAN)f-Fc*)i4UbZUyQaV>h$ME^~AhqbMq)U?}PN%S|h_
zPO4M+2J3{0H}c@Z?o{vxtSdp3p~}$;qRaqMDL_=#K_vTKl2bOV0Ld5%E30s-OX0PC
z8m9CcwP)!FtNJ~xBpz2}LwT4I#ehM!!mSkZ8JT(Ab&pF^?@BOLh9Tf|uhwnu5=(&-
zV`)Xjv<ab2fdGIELQMMa(nf3RL~Qf-Se`NO=s~N(KdKg^mgqPhYsz5c_tk_(igU4|
z*JouOmhsiC*RPlP_w<1$>1FKo>+2s&g{i^e+N5mFF4@+`ZmVLWbz3ctaLfCkkt|$2
zA7m7tBUQk|SMwcF$PaqHsD*$2%K!YR+n}cv|HW6&TiOXR(sInwaSNlXak<t^bbxGs
zuZNM>CrY)Y!V%m=!dhU6DV;D4C%0c?JcUJs-%Y}+G%HFNKE*VsAzwDO&#rzyuPrgA
zi(=S;kIai~mXBgT773Gm*bHnmWY@z1E+S7M2-{=T@}=pV5M%=9L_jF+9IDk19R1r_
zxaAmcc8ozO5;w>42d@jWgrNWvCJ4<7lun*iP~4@DQ_S;xfC1KXmAIA{?(pWQ@vXMz
z90YP8>Mh9zuu>b27@{dAwszCpi;jQ}wLSsP=;7WsklOTOdoakK2_W}%M9_?DGihmD
zZ(Ezg!#-=RS>^L#vG=8n)1nCs+EGM^kH0Y~V>uRRj7MM?;QsHU4o`#b&Zl7x#LoZa
zup{$`Lt&XseGmlMBuuYn;Z?i~M8}_xCRq``!fX6-S@`pz{B_~D4s$Nxzd8K(y~DnD
zzGu$=aRv+6YBxBF^Xvmm(VqhhW8e87htyA&2Y44%x^Pq%S>7DY$OK0_IGmN4M5jhz
zD`e|%f`+mv9xnyCw9X{<S&q3fco$e#%*3#8*+p-9N8)Y4Tq_#kI7r>6&o*BGK^fC-
z&Bv_Zzh1{|+C~PJ=pl0JnaQy~&f@&`O;VIuervr@wabQz={M5+Mq#WbjF_L*z;2Sy
zWb`BA6O`|Bn&B<+A4izfPIj2H^&Xy?pyaR`r2UjsJ3pa6(!)<*OcWP@=Ts?VW#;GV
zQf_I@AK2%#Nduabtl&!>{f8IbevG+dCdnuUP(6R9EU`|f({Vf&#T3=SnPM_6`hvsA
zl?FIUl8!U0D=F&`o`1qX=C8BdfBcV&aQ*A{`upzs%S(Uo=)1=YrS;LgF}smFl6T+&
z^-GzE^>tM?GG#e783zsGlsH2~*RU+z`!WS+Bca*3hJB3&>evDmEsi1EP*T?TOFWvD
z@!zo?tPe~w3nO$aAK^>dKHJ8&q%5tx_)T(kO}_kCd#Z~0W@8gHc8xo;0&lN)!VhcM
zR5(+GXC!K1s0?<fY-KYvltsZI8p^)HpWc97<IAsyol6fOvyBhehn?3RmzHm0c2n(<
zf9R9y^9K9;7<|G$uiy{#dD}FKcdErLwm1#mVT;f32U>h-YVkp}_<}7Cf)Ci@2>$d2
zTeAM%cnm6mXQ`5-ai`8W-I3R^S&=*SItGh(=QZIRiP97pI?z)tY5H??`MG8!aQgF_
z?Uio*<DJ+AmulhwG!-Wb^A9K#Z}(4T{_f1%(k0|`40TRsLJkUpivo7n#em@~G{eKg
zOWn`UGyifnfaM-`Mzb6vtK+^Gs>F<2ohI^CJ>M%&K@&$SJ6RMTCRm6$;b7CIF${VV
zBO}7prSTV-l*lD}7+eF>$YVUyok!WoFIg-{2aIiR#-<?#teL_;*WwDm;cQYS0Mj$*
zbHukNFblls3^f4CX%SNK>turNcJQv@U=F^;cVTpQw~DEW-U1h<d&Zb!XgY(QK-<8p
zp3QINvN|d#LcAq6Jslkr&UH)%zD<oI=;S!v$4*d~HR={}J{?TU#S@BfuaAlyGgc{`
z0sOn!hzJS%Jgawr$LGi~<84aeg(khf<V4dSZFIYKhZIE&$*(xs=Ji-62T^1<am(>z
ziHGY6T_3T!42eo{&Qk>IJs?9D15SF#A!B4rI>*&0w1>t-cxZ&dq~>co3_?y?`6OpR
zsbN9oM29ru84Z6mD7<+Q@CSi%!@?agUgAj<Ukwg<*HQ5JAOE}fUyq6KLMM3F58a2@
zIGA9&LvJfu4aRG0Q|>X#Ss?EX`5^!GNIHN5YXa0M{qX{oFX7(t)tgT`G5k^P9TU^N
zV=6-rUBqlYA}lTNt{xtGrbrvmD|vtdqQ~|CNbKTv#<pSWp3UIl*9rV{k`OT7<-j44
z{C}6=KDZc2MkXCk-_1Pbg!*}+e;-Ws?^i~haEPK;6uOS)W-BiJS~)|v)kk|s1y^7J
zkv8BM3J;ifF~;wQo*W35fcA<}2%C)Mv$XL#c!#2Uq~-4MVP`m*p=U8hh5??t4=WF>
z4bjf-k*fnO9VXa;PT@!cUN@S2oGj2uAAra2l*o_+H5y{l4?IPdYB*tGnMv0Wj~yY?
z!F@4UAd{px2?;ru0Np<X;)b-;S5y@!ydu6q#G=kP8_iH}r)W7dauFsBnu+i6ak}%E
zI9A~Uoby;K5+M&&z%KZG@q}{wY!9Th09N(zu=8v2rSM$%@j4H$kVqraC6fpS;a`|l
z_B-$4)g&wm6i<Al_yPsi6Hd<>+IjAKY!*haeK9o_%DwRv@1g11M&;M^4f!JM8?Szy
zb$(>?1ZL;&&pHQ(o2&rbCJ%kTwc6*j2Rjd8U{rCU<deeyE5`nW850`atk>pbwk+zC
zf&FFA#hm%&JpfzhjB0&Y;!WP9oW%ZV-vLSWCgcgibOXmf=$m_P%qzu_<BJAnWd<@P
zQ1TC^DtjfQtk1+Mxr?$sHNR%gW5a20-1!6r{3DknqZ+Oejs8+p32izaOqnDZC(YJT
zu7wQ_96sWttMHuyV6mR%$yJg9beFo$Jn5=*k4-)+4j<skoAdLN72&P3G6pRnj{Frh
zHOryK@GQB{XQr5qMgUJ|*$9M_%-x+zOlUc>2q~vDL@J?ZP?Qn9pUcXAmQ<f}mo74v
z(jYN5ZxK#13r=skJUB^%_t=$->P1n2JVI3j^RdL-&q%N+XgQ1x)rH7Ey}LWm_<j1&
zEqSn{;@))Go-Mw+tnS#~u#=qQDdv9UmRsB$6F|khacc;a_=><=G?FEIfWzqJ{R1Sm
zjSpy)!MBm{B{w0et#Sy7{ub<QY5+T8K>ueS0YePJb4(xL9Yu&7xk+>!LPtpzY|;T+
zfqfj<!yO;8d2yY6_9Jn*{|q0#G662o<~eR{mpik(fN$27+nSbuSgno|1+rGfI~1hQ
z&x52TlugTQ>%rR~<8}s#_1uMmfVE&lGy%Qb1PyP7zn=9rpMu(eKc7G8!p~?-5r+@Q
zK>DzB^I7+W$G-B?F_d1917owGL0lP%EEAXZK}ARB3m&e93I?b~)xyb0X+RpdL7_+h
zM~>W5yRZr>A<pF+B_ZW!?Sgdr$h&jl-|xJ~SIlu>_IZH*bfA*n#8W^l#Er!8Y|B9a
z3!ILljc_1{J47|s!)fAxL_Xi$KHt7PKmPH@gFXNI3wl*%S67obaK2aV*!RxhdxUl{
z-#<Eed+r<GV2<FJ@O~D|ciwCt{kR7_m6lLdD?Ik<;O(jJpgd=m{%!A<w<nZ{X*R8t
z?;gK9qBl|YIW^zCKHhnIhFJhWNHWWJ4)%Bcc1bhZKH0}>fB+Pug8T(S?%NZnwkNX#
zo1N^Po*u(ExznRj{$_s{>R%_3Rr~DC@jGB`u#1e+1v?Bb<~s-5XJ?m3+lPC&b1|RL
z(e_W5uiqZ+obMmQ#147E+4<gy-vimytbYRn@O7=l?UEL^z?GLb=vG=p@hFVqd)k1)
z0rKm7HuX1Ou+0|;Fo)rK_)og*Nf&y-wPBNZT>6{O+2(V+a5e^!Fh>iNzxk4FzQk;l
z6k4JThyF_j&+r43VA2Bojpu9wTE#*qh*2!}dz-AcNy!2cr>DTV-ogkr+2$r10`ZBL
z?&3%`pRmm*ynL5NLl^1%-ZR#FhHI1Hct-s0n%{fQde7-LI6gw%DQqu)bAxSeKwW%*
zar!TwuouuJwBvUo{U^`ZlV|Ey^a8ZP3kSDdf%m9san+j1rBDDy``CQJuJNDaV2;h+
zgHG$O19Uj$hMzA$ySn`;i9d6<<JYqMIT}XtkUtkt@Qi_SLfRcXJY_dYibM#0KVdiF
z7x8<O&5C%3(`k6zKvpyfrv<+2u}L<<JFe@SU6|fDoJ~sJY~!Wk{#XEC+jzma^-vW&
zXUGll*E1l?8JcA9;VC0~8!!?0-o_JFz&?3(dj|i)<0j6nI3B-?;}5%1yjb6WQNb|M
zD9rH%_R?dY00M^@wdzv;!!SQV3V1^^>AhsbSy|EmdN0`LBm!c3LfMbAlt2ROD@wVJ
zwGL>&L&BT_V6${`3q?=ahd7?1pa2g~7!i`=lz8Dfpk9*FfysJrgX-;b5f7ew@O=9!
zNhAC`0&h5jPrl^AXvns6PPEfsf1x0Wq+Z@mfM(Cti#HjtSbzPQgs^yiN-*FH@`P#2
zSHxGA-N=Wt7}Q9-EeWs^-251(cMhWJ?CKgjI3}Yt43$x1AQ{^n{g5<fKpJ_uBbUK}
zZa}pG%J+F)?Q`+W_c>nuPO@1cOZi^M>*2CQZuJb7+-$o(O7am#g{9l6u(k5AxL)7D
z=M2!&`Qj|}+4PNdG<|##57yR>FUmn5fBw+r4?lGKloTNx7A`(}>&9a|@O)mmzuxmj
z^&S<i;}iX&?tIZPly!*{e=@eH<H#Ml+H2gP&LRA7<rny$V{cTbul8wA?NTU}n-qQ;
zdvvv{w<!D;I}|T(;t$ueHY$$A+NV%pZBuyWyL4WXwn_pj3dp$h;}CSEbwYskOrn4&
zv=D)pRnfsLts;f!<vRY9gHUcFhyBJz68qa&iH}TR3V%)bqOe7j5dmIkIy4tO{+OY`
znI2R(JNRcs38t#69sIKbs^E$gp?IA`B<H@vjjJp4#HT7=oQPS=S2$1c>Ii<yV&2&=
zGz8JtFBF^ryW+*FC;kFE;xDKlUdX%IC61yx;*Y#5`AT&rUt)LiC3R@F+5y~~f&Q+W
zi4xvUy{3lh6#@#W6*PliEBF%x&lI$Mq|*G&zI+s~ff<^wcVqiCc6pejGsH#els_2V
z%D1{>Sw(d%tLV;U73}^D4P=q%o<A7f%eT6FSw(d(tLW}!6)rKK#Cejzd(Hz^_@i99
zbJ}}i;qXDNDeXVGq9I8anwKIO(X5mcp(-bZQk#*k8hlhpCpA{;2!i4$hDwUzIc*^P
zDm>7Z(GR#?R)LAsx$gWr%agBo=raMDKPzGLega)B8L8)m&6O#rNiG>Ok}I1<ul6*D
zhTkTG2I?sIv#2E5^Qys}QD8L`eHHhd4?-MPtoF8ysQi~m2vJcLF^$l<Gec0h_MJZ7
z1sYKzmvkwqdU>6sa2@|sQY1qRy~JH#NuiB9Kx|SV<DFtQ1WGn4-RB@5I?|Q3QVH)0
za2Hp>LFl$2)J7{dC&TwnPTZNj#!NWu-!W61#Ii{$NVLyXO6e=Weg5Rj*#ohE*>b}B
z>)N!4ef~KoCdS-4Cv)OzVx$HByQd@L+q922lH=t%>YsDKVgb}xg%14Z9IOf5LvzHt
z52987P5`Una>GN-I=pI*R|P@=W=v;_-a?u&zP+I$1KjHHz#i;b8<xM8S)290?+nY7
z+xWQMJaA0O1#NsCvYE*tHU#Zy929}Jx>%wQVL*9UM>3EUWfm0rHSqPCer;$#wtj8A
z;QF*yjnuQ!uVv3#zefG6u3tNB#aXIhLo@Wno061wOsXC~C2oInjt(m%K<&m85V<zG
zfP)_!9TtzdHf%X89t(%XOX;)5p8%A6Nc`FXl?fLd8P<?*FLj@kKfad7in?4v$%slf
zOEDkSs^R?zTPdZSl*U@BN04GSo)FZHJ^=A%;e>zBC?<DUp*tJJ;;7*#A<Y_ZK(d#m
zN3)w@oU0&T#eSNU`Y=@uhrci$adsjUadkys!<y~Tg%9*<Qf;n7>Vv?d`jG{uXXs^`
zmC5*)FEu$3iSW^OEit_lg(3J~HZuWpNih>DzNE*}m-MpvZnQPuu6f~6VgnrlxK0`7
zuwv4HzhzfJdLrJ47~J?^_v0%!XtjrVEhmMYjCb|*EilzFCtjj!Kh~L<8gUaiK~SYF
zRUECpmsFmiBV`Gykt?xQZW#TA@H~@yMrDY4=sIU|vzc9cZHU-aOKO(8t@V34Otprr
zOgBgFXvPv5DbDyizzX!d%#$0}vyz%!!Y-!EI%3$g_lUagDmq^8!ed<_3d(tQ44ahU
z4{r|D&K%A=h1un<L&sXz*(5^NCFWEeSi^T%x4uLsf47#ZLL)m|Z<P1oxoTvS2IV7k
zDGr8O_Lj}HE;0Hb!A^b=3&a_p?o!Tf*?mlBmhu|{k$Llp<-sb9JC#YkzJYeJFjzI_
zC?PFDvV^PQi6t8aj>8H>MG@VYct9WNlW*=(o<VAL3XOC%81dR#PVtVcy85@k%k|y>
zc)rTs8FD{vlag{LOm5CR?$A?*A2o6VX3PMUh^bFmQgFjX&T!7$I8d-}fZ6|L?_c=a
zHjYMd_^VK8s{kfQ^QIdqh)1!V#I0qew$n7F_2hsgD4`(%8USTc691q5oy*>Ep(H!$
z^PKa0Pg7ICV(&XUJ2N|%e(3US^^KWB&4r!(<mHKn`+McjHa9qm!c=j7K6((NgJrMa
z;G%%P2}T_!pG9`BOv#{U16ZPox>nY;FPkjrwo9k<msD?APDS01mixK}@J9Y!aQW(H
z`2}t18}(6R^zq_uV>{34!>0T3<A446{!bs%3%pzZ`0>xXmV<xOXMaWp0h&dNW^<*Q
z>5^;~GPmtiuArF#CqA|(PBlU=qTGo@ORSI#Z0aS(KN5((K-Za&;L4Iu+%>SR|MT0%
zH8!(Q@Zfk?fv34KanF%oJx-KE0*wDb+{@Swx`xVb3;E@>jpMfE46AQaz=Q=CBo$6=
zx-TN9ytYnso>v!io^45QrX&SUmHXLW!}K3GduW(*XU6sVa;&E4nE(7TDT6SD(eoUG
zf@}IBv4w?KUyZY~#><yhi7M0Ge+X~NBgw>>CvA>8#P0H2gZXhe&tP7!JCk||Lvr`$
z7k>mo8%(^(@548FB*F^4ll*b`Ku-t%y=X%mP=exByY-83N?~aKeE`gJn|eh`ziC_&
z4F8X#DW0^l1#n{;%(9Aey&d461R2|Bg><4yld>^rTcPe%q-?cYHXGU{X4A=W6{r<B
ztYkwXhi-{-B0tR_#KZ_tB$L;RMKBGa2*z&nFMX!dU6YvCVv(vIDiuGIS-ji0*Dm?|
zqMLMdNf5ws5s)`Mkw~^e!#loeKiy!!62qg9d0=g~an|b(=UI`9DxGXVQ45XBEuSrG
z>qp(OFnz@$u`Q02tdvw2sVWh5@BTi}s99@6qcXhE$ySxt*di>g`89O;HwS!o<)d^s
zNNQYh4RPZlK;159Afw80Bsps><J2_N8E%4dlbrRRLmz*!IL3{2_S6z*vc&X}5?TBv
z{v0GPATI!_DnFIwuPlzL^TXHGb0zCpJhkTwSt5OEiBy*GMPE<9uCG4SBiQf06xMG_
zApVF6zXmuOypZdgsf)@~)7Kz2^|G2H-`3Q+veL84)T!B2PAIg+J3ys8&2b}7`M;=9
zqBsmNT7mgm3!^miqX}*<)*U9VlqLp>+*}EY1{I(Oy}TT&<a#@1rC`Gj0{7o(2J|Vc
z@=wd9TxG|wlps!}?MPR42qL5SVi-{X9C+%p7{7)IXmAke+2T{@v2~Hyh;suor3uH{
z4?px53rpANC&7Eb54hY_&Z}~cf}5g!eK{16*uh5gO{@hD5?F6rQLGq^$dTXBwA)NK
z#WlupxCKuJbO50CcaD0XZ|0F&AqIZ<^Zor}a^!m5CG!tOJ)3i8^C!q5&T2;(yAlmU
zrmb9bN9B-PVq1HF^^F7TvC)Z8PXo!gq4!=b<bFMS8wAq;`J+vK6G_S>a2^@HXu-q|
z)opB9xjal(-_R(7B%Yy?<V-2=iJ2jmR_B&;tkWuaCh0S``YRs050&0|urzj}Seo`)
zA0uOx%j$2^p4YfK7|`9ExS$Xdxb6NzF5lMsjg(CwuqM+ADN};gEPruXd1=Y_p2nr+
zrpRbM>FUif&NF0Pf2x-J0zANp!j9YRz@v$_9w(jI(7<K-7^r7;`IzUGC7)!{)F`3G
z`>m~>GL;lMQ1_>W`!bSnEc_e(TDmiH`Fj}I-OBs6dZ1W`ZMW^UlNwr8I^t>@1M#3c
z1T#xR9YtrOs#Y$V+AIMMB^Jy(Cb{}LdTHvrZuk4MqwX5?<$+mpRJ~Cy@{PTUzOpS-
z3HNDDy)-YYziM1m(rE05ZNvHUCd`ZT2U;LuSDCTGb6R*T-NBnGmWer9=c9y&b4vxh
z4Bdf567iP60PhXAS7xq-QP+;H%v|P&>k{hQ#0{q31~3stQKiTMV}7U_R{iE`C@55Q
zhKFk@Yk(TVYm_CQ<@}1gM*?$gJ5N~?0s=rYK)_>5K)@~JLrM=$)jCnBC#};{>MyU|
z6Y8(j6M3*9NnUboRYZ4nrLLXVbYfu1J_iAZ4L~DE`rE!x{xV_|R{=}qAoZyjEV(1~
zF3Sr?wmFZAJo~G?_90EoM=Gk>s!*%!94Q*)#1$n>k?-F9eLTd$i`#f4Kkd>TJsd6l
z;K6FxEv}jZX$ZK@aTYl_NHAImDo^-$u{J@IEA))?`6`@Tk#q12qYm7T(hJX8TJEiL
zi#N&VpCc3=1xdChQ%(4Uq1Q**1ptcA4nKgX5#7U}+wB(8PY6d7l!v4BwXVJ>eq^O&
zrv#evOJx_TJYZIq=3d5Vd%K*6fS+r4BPe3p!J3Q5-Q6jU+VkR3Y+So?R2+oD$W!T^
zL3HA^22rDdo!+shqZq?K!q6tLI}+R(9Hkk)CIIW+)}D!cn{anG6sE9{)giJNg?D+G
zT|luV(enq39CBm;n}}Ad{_RLCFsx}}xmW5HTG1~k*8bu)2~mC@!slvYK*=`&&f=Ws
zHi<TJNP)E+<4TnaXAtN^5`_WV2nYl=#1}g|rVHE1QR^I4^}qV`H~Rlz$0H)#u<56_
zZ0fQ+=&ZLwIPj+S21D_Q*a1ahm1o*Te;kee>*MI+*##O$e{_cSn-A~r-+Z`#^Ja+u
z-OumZZf}Do(-l692uJ7DZdk-hLSEwt%`oVLp<vX{w04rby?n|3nt_nN#8u@g3Hy=D
z9vVhY&#iC}8s=le?Vp6K27RxWt5hd@;Gmh@_V498g6jN?`bwEg3VvTAP&{snmU8*k
zihdk5pA9eA#62f8J#MS}Ra3?%d7rXIV8<yJID4o-yQ0AKp#t*C_e=S%szT-+oD|0t
z6rv==xh*Gmx$(wNGdjDcTSTN~^=f`Dm3@u#Z95kN8|;+C9>u#`JlJjN8^OsP*wvLk
zCMeA71?56e(B9ih`zV)=I&eEsBGM)H(9jBeP}`s{g;s{P!4NNJ?4Z2g+^Q-HiOQI(
zkgl{9`q}TUdW()k^pK8(M%FA(d1PT&03gCj6R$7a@Dsakgsf!~t}TK$T$Lh;>QoAf
zWknQzWgN%zz>mxusp?xOS;}^dYba4VckNW&m=`>%a=8TR!8V3jT~SVIQqcZ4rcKXV
z-T>}*&tAT|FPp=B*)N>Qd|@MkOT7I8_K}elu4QxWv6Dg~y9@UzPW9lV#;(H?CSLV`
zYOpY?`Ls3;YA{ZA^I{=wwpEW<Mv1~?AOdr71#(?&rWo9NL6sqi6}tt`Gcp>IEFrWi
zH6w;r?l@bK(&pr=9;8;3kKVlYa*F^OOUR_y8DK>iLedP+P%ZQXt`r-Ly%_H#9)-V>
zc4+mnF*H&AzvD1^ToWg!>kuow62l1*-hP)au2E`WvZC;A2PU-exm5`(to>rZ#$uIb
z2pQ0H4T_G4(-fE5Zf!wr)Z#?A1#$+mKc3m2h<afMrbi)(ztwrKjxA#@%iM9Sm+t{Z
z-fg%1Peuq2)cu9n;enbARI%ko@k?<aS2L(qXg~>2#RS~n@1O*28$`&vMpMUuRT^N`
zMRom|kBUedYV=L4Q=E^P;AhIVF-n?NuocjU_BPd$FP$b?(Uys-o(OnlBBMML+gD$<
zWGr=sPmSL_po%)bXlxbbzigZp6&OP{nYrIRR<klX3fqhc3rLQlc5Q)avkG&ZQO(Cv
z2-yXQE)CeM!mFTV9|h*=gV#HclL!yoBMjBiU8EiI`AWtu=0|pg{DjsjlqYvu6*S62
z3zDm_YDFG^yj)-8q~~N<+Ay%{rlj0|4Yv>7ihb!4nUy`TLT0w&0-4_)TAzo9_vOoD
z*7s$rlk3S77v~Y^G7)LvmgkSaqs5COVbaiYavVjDywPSnkJa|TVmujnm1})$NuF?@
zM)Jk!YLat%t{qa@nU}u_a8CB`@3Z69{k?GU=-l5o+N9Z`<ZYykAukdz#>?nJFa*UF
z*NP?T#;Zb;S%s|6yw)JAQjgCtzNyR=K`wQD#zN+tH0Xj{4GawB7^PLLJrTIwHeHa>
zN?0F~Fqqc5?HajZLWfJJ902DdJH#b^Vi48qn+HT$&~7G`fJz`OZbN@J9E*B}m8p`E
z=vRJy0L*E9A8fE1zAJeGAgEwQ1rx)31ie*VoH^2OsJDeJ5PtjhjeF(J5uJqX@`4!N
zD9&nB6|J1!GW|UL`t^6?kM<+qZY@lK)xzp>oVu*d=vMZS;`^X_X|jR2Goq^f1EA}C
z&Cbl(vy7q(b=My}X6LG}|3$Brc92pRP_k&l_IZm-osy-J@T{|KxADCG{@up)6n7h^
zZrg4A^(%K97ydtdw{a(b|89Gt3dy70C~r0&Yb)$E;j8c~_nKIk|K7bOP|)L>O=;|u
zH=9Ib5AHVQrRxhfnqkfU`$;ri*Kq5XEt}5BK`^|HZqwOti*4Ogfk(Sa#77ppN=He~
z-JRwWf<I=986EwKZB`_Xp45n_G);jJ3Q?z@NgsbQi4zRgg+!5ZlTrgfTrHV8;vl(Y
z_RW~<%-!w<p?E3Bjtykg*TUTe2V&M27&)g7U*vf~2bZSHsNW5}T#bx%r0>wTVK3<n
zwZ;#|8oCzFKdv^0NrTlu$MI4i%em7XtAwHWix+$ef>NmFp-aRfN_pJ8`6;r$FTGQe
z_~>^pl&okFXwD}<&d0Tx;~^!7<2K8++eMB>7B_@o8oh51gg7Ek+S0Q&JKBcdD{>fW
zvAwoMHzZFViEek>omk~9!WOx>s;p8B9#`7C8Is5x0wsn~TW|$=1&S>@VoMK-&EjQ+
zafH*23p%wbpV_)XW3i-X;@=HNvZ61$kCdezy=y2@OR}UvJi__4B~S3hSGJSid7oJl
zcTtUBe5FaHjLFf<4#yAQW1g4pF)JE&voFRl()02kIt#MWFP;cl@b}GytmP}FL+NAu
z?wz7)`m(K}ihb$5oGfSTdhK`k_n#lCsxKRkF877w(FMPJTT9o;zkAfOqA$99l7$|-
zae_MO#5iwC{V`Md@6o!q-f7$FoG@$FCx&Y|HJX<)H6^Q;Q@&LxuDZ{S_7=~6>T+Dz
zLm9kO&hPc_Kc39mzVM7Pi#~*Z6!3~kES^SYJ<0(~iH8(EyZ=zME9(4WtSibr5$Uo;
zMHSu^^&r}<nD@%OP35xu!LI3Sj}s7I)HK=CKHfBk9{8i1j?*o$SjzSk)cJJ$C>^u^
z?(HTk`m&uSOMT&qAdBVHOq5soKS0++)%9h=F$#X+h>ViPpjZ^}`}GH@nlIEFq%vQs
zFGz(<W@AoFU$x)Gyn>VolWcMF2f!p(RDvE(HZ@n!Iq~mSt)g1KaLTBR(UYQg<lj9B
z#R|U+42q?{aCF7u#y}0h?;nDEL|tEwe?-BrKtZBpP6JBXNsHj%zx&ocSKk+EKIO`O
zsn%1jurb8PjTgUYg!$@dfXZ0z(IFOu%Z{n<o7Pl4#lhu^nafvY3Hpa=Fy(4}f+kZg
z|2B=LT&AaJHsuQZks409ioZ_NDc`qj>!r(scJ^PpJXG5gmWA?dTMqj8lx1K`t3Po1
z*?Rhm^<{G1k&^11o#9p;v%(O*Qsw1ADZNs8i62&Zi7qH|Nm=D3x-cTPxSbxF%;r>H
zI=u%~UgC#UUZCA*tIA98kgJBT)UkUENX=|pbnG4l(dy;>-8yz(2cWsmJP|&(?6Lm`
zpalSxH(FnPh!-8+R9!u*%l3lVV>uv<cJ$96_6Hk)$c{W{1hU=yqcEB+x7*duR<$Rh
zZC-PBcelCIF$4M<hN99-eFbx6_`Oeq@7U4h>&oj5sRWsGhgrT$AkS!d4n<l2{BEWx
zU)|U67pky9$(4<ce!nhMsmd=R$IHdPgdQ)K#=&05&>`q;$#P*YRTz9GYEmee_TOIp
zvMpz*a=!Y<tG6E>%9`dYJ^k_ZL%EkaHw=LtlaR!CTY)oGKna((Wu56xvv<GhY%7(G
zqcb8vROg)Q&dR8Y)fulhZfbtOyKVynUtpZpw>~=5tS&!>1$5l=4Paz@I<qm7Jx1n;
z?1Ro8{b?Qc9A|JfYhJ&mL*n(SdD`7`;m@zxOZ@Y0y^nvs`;p#~y-)b(?YA!+7Yp4s
zKl|v7l@)T%XStyCb31Yasj4%zBS#19RW{~>T$G~78R)~VxMkdgEZ~R?K<|qo9Eag?
zJP6^8Oh(~_;jJc=_UJY#V8Iq{`pe~fZD%e!rqB`Z;Yi4cB>)8bE`R|vCkbGx0G`R&
z$Di>lyNC(!B>C1)$t#^#p6q~Zec5d3{{E%y*yOu-6`Vs=8z>GPnY_pF;_uM8+XFQu
z`2BeY%TU14iZ*#xb6v8Xda(@~Z!NjbI1=9MFlR>np-81qt-JAMbt~_GX2q5HSuzJj
zaNcgw+-v*9z-jXawP3K|@Fl7x-8L^*K?+1)-}>pp3k&Kg#6F570#k}rFT?3sys8X@
zr2QT+ax_6ho|{tU&5(h+%HEn+oX(V$1Rgp7n|&ukF3YIKX*sMhj3*avRRmRSxkl{O
z)+QJ7wIw4^mprDTr$!km+Cq7}3R|uEf6K&?89bW4X~5p(h6Iylv8%$u=q$rlSvrjw
zWYPmEyOC6T0}eL2>&p@-VoO_Aa&M~}cBHx*niO!rmsUU0mB9D6{#!Pir~t}Bljsr0
zxE7S4@iUM-KShfz(6N0jEjT^0Bwkw;bpp6;cM)mmF;cJH2pxMv#poU=2kryjAUoQ_
z-IktEOA+o4=@T9Cm{}Fn5kFXmAPFq@?nxkmZEQ@J4iQFadT@8CJ$iQ5{C9ejI`-@4
zzudctJkZ!)RRkIX_`ZddbYZ!Zt8hMr2Kpma*0KMEMd9>{qYo6me3=Bx0OKsH+(zbK
zF>@AXa~b&A$8g@{lo}ug9fOJhrUr7XtmxmX=Jzgb;=VXFXW>mS{W+XwSGX(DH>cwo
z1;%ICv=PY4+*?Mn8%9x(02b+&@CtPCJG{oJIO>BfYl)Zwz!FM+J6}}<tlU}<@ASCf
z--2~MFsCwY8d<L>oTcSjuTZFFUEqN=Uro_84R1kcKR#H$L@0Wv1A^VYws4L=ytMHu
z<7m%-|1~txaYO;&8{>>n9{~X0v{tOXI=-H;^gs<gw)9^-3emsU(RKheDT62U66v{$
zUS8nFy+H3S_N@6r;w;BKoq6XocQNxKyWQ$`9rybGPU4P8sVc%Q3DS7J!VXt{#bWQX
zV3~TOw%cyG`z^QIYPm=7uYCwV-F^5u=)g~>jgP%9J|FJ)FvCFyv+TEe_@~`z9bt}6
zuYH7hdWYRZ%yqPXuutFj4my;v+urN$2VHl++dAk3-HYbJU)mK;$ZGAN`;1(K1?rF^
zij413%Ffzg85XnVyHi*QXCO}3Xh?qEb4BeO{ps|JCn=MC5z}`MH7h-AsM$AYr*a~n
z%A%KVe!^ZlCh1$EmWBI9Eb$Y9m$_WP)h25anMF;Y3I{uO=0(j2ML$z?TA+NvbE~Xh
zVvPDY)|xM+`H4kjo$84}?-~<ghZ2~AW&nRSvoHbxUBl~)q+*)r{-RMyCvHu2J(!S!
z@9!Mv$$xsBqEfZX9)c2cE9OC^>WhFE8QBD#ZN=|Nx`A8(9$8P~0k#umV&<h?gfVM^
zYAQ`wF<&0R6e?2b`P%X`WmlH?y+qb{hKCF5P!vwc%fw$^HAIZ*6wjLXtMMYt3m*)2
zEbjwzQ$?9oP<1pr|7~Pl!a;^A={j1yC!CvqoA;hZ*a?c51mt}KnUz2zPu@vvSV5pw
z;m<0RzZIuGLcIx^jqC^jsIc<i-QXWg_f)N5?p%1n3MPlkEtHSh)zcYsJ0?*MeI@G3
zWS-3LX1YsV?H8BZHR*kr@Tn%{6nAPClIgFw>Bl$-3(!WhW~Yv2?q!WI<W|c8rx_Ef
zh+&46sd)@rgkTd%SAa1cJ(ZYT^1s?h=pl?>mN#jfX=m)Z5fS7#eJ>G<IembQR<i;+
zN;4mwO+FDJnGlL<bhT9^DyShstq}^<z`9+GCHwy}OkpwCq@=vQZN7m@QrNQ?x8gbn
z6;quNcB{<#1lWI{&C0OvJ~SpdqTf51_gv4@h9fdRVL(^GRmFgey2JDbAmo8`M$^C?
zD_I)q6=(e2Llq4^ZKxvi6NY*j1m&R?uvQtOVPK8mCRjkLs1r~D(njwv_bZusxMi+>
z07kuLRQdFIdT&;5@3i#{A?+di!wsl>7Di5fVAcMJp0tdfw2hun17=UQGsvH2-u2AA
zG`V8!@}&mp!m(o-U_6^F#;d#Y+5P?9ufHzw{nuanql-;ZzhQSbUtQ2t*}ZIYf1m%V
z^asd`ydzp%%H|4w;)OqTHzKpkQG}7Yq6?Ub%NbR-(JcI$Q|`9t%4IsPVD(KTT};(j
zgCu3sg_>0tM@Z(>mHDk-Lm_yUtnj)F@4~TOs~}8ZDp}|Af{o}hd1Du&^`sx}p_m8e
z=%Kkj@JKqFF+nbN8;EMv+RrmHxcc2jODu4PgQv|fI>97|3&K<-CSTchG>R|00DcT7
zltH!Qe$fnuq12VXUoXZ$nRDk7uSI=R{zEJCqAh%KEZy`E5;RKI-5Mnq)U(o{mZFx|
z>8oh92oltEQA5L0JQ{eS0pVX~Bi)H^uzT-jW@LH|IG6Ky4CE55=TJZPE3<xve#W1N
z{HHog)Vv(Rzv_=^FrN+arw_}BefpdiU<t{)xKLNlpyjgImhj~Y72e;Qi-h-EH!wc^
zo$Giv+uh}VO`cJ-wi2QG-p$<KDvDtDc6aq}xge&xZ)V;NV2<D5-*<8ZmZ3mkIkw}z
zoq2C&?uS{$?b+K|lT>IT^1ST6pLx$erq5|ozRgdHb`mAScMh^fV|VxcteFL=5gRab
zoPmm<mu=h^Gw<7(`wD9Qua9Y+>;5%gx5Ugt89uNDrQk!otwXfGnxPl>ez0->iNk3!
z9J?=P-alvVj|!*i4gBw!_v5Uv3*Fb0C`nfLUo-FJZ1_^AeDE(t99`<?cU6G#@0o=7
zf6XvVV=(&H?1E%2^yC@kF(!);h=k7FhPUTySzgUjj2DMPE*;7Ei1g~X$;SPmJUZ23
zYUZbz_ub6>N9Cmcpjz9wf5yog{&VYaf2pj2k!LW}zR-u(h~c&NliXexR$nE)g#z&Y
zX8_$l&k#Fu@1e@!Pq?i8f6S;mf8W|1qrc*w2za-CKl6T_xqq8^pJ(o0tE#Y4f(@hK
z{r%r(q_Cy>$l!AUd4A!}1h)X7qelIrbu(%;j{L^#qW<USp_^fPYdmVT`8}fd81fu&
zLVT;36zX1biyaGZy$>_jzs+?I&&-Gn5skhnVH@K9zmmzN+?@VfO#2(93E<128&QM2
zyBr#~nEhZ7cz;80al@>R@trq0b)jP8ysSaLj>W#m2Bj<NTd}<rutva6sl;J?t73k3
zU^5Im{X=M5e}^$Zr5ks0tBf|?R6d6s6>xc*qm)!sP7J~0`tHO{-KE!Z=cr6M#-EiZ
zbo2}Y<YE1%SETF|p#Gwvn6D1^Gc6I1-Ox+a#`F@gouLPr>jUoN3x&`%X@jYbniMot
z+!nQ8Qkbz5JS!q}>^I)s4I0Z6FVy8{N;ntZvL55q0E1hc{D~Rp5E!>&$O12G*wD6G
zrSUMmwIesg)TQI}fkuTIb(6Qoj+@9au6B3h;Ti5w+ZefT6uZjx6p-IkIMp%kZQO(%
zn4{4t2X0d{F_B}c*!N4wUKk}%adYmEzp>ezbS!Jg#gLph6-CdW$fmd!6O6M|%<8zl
z%$RxpEqPsRxd}`l(lY>eI}x0DKKkJS=&;8gx|;jh4>JppTjUHUw>FfDnj)1-18o@s
zpjuhthjZL?n01IX$&~)eajyV51C2k=N&BVi9q4Oul(-LKFNMXCi?)F}X7g2gRdKrO
zQ4jt8t&K|tnC@!h&H-oLx?{vtv;$XLb|5-^PyV3ICIM5-YV28JO7+Z$gg)&22PZB8
zxS${!?wu|oCcmG#Iv+4-?pbkc=!jl~3eQBS@M$oPAx|J9TLVhM=)jPZLto=CGvG7T
z_m%pd4{2RP4ZP`X)uB{D%mZGW-ImwQAX>cw(YtYPt17SM)R13s4BY$sT<Q-W&fdI?
zC$vWa2&!hKxH%IB13-vq)SF!a0!*4$L3nwU4a{(>nz_w5BXm1NK8N$7lI#6_?$b_;
z3HmdnM8m9);YX*pbW#U^V|~ZHqe8HiI4>XqheHjV=jTCTs7#~sK!*u)GZCtL5Q!c4
z1BLlb%-N4n#2DTN;u8iv$t8%A$l_FfK!lk8;0X=3sOe{!Ke;*|r$KU^Z<Wz$B$RxR
zyv_iX2CUNoZ?PzI&YCx*<vzomd`H1;^_^Ix3(8baedqHWI)v<?01ymxP35==<mJQ{
z9C|4c)+xEaugdNvYT$B&vfFkdV_};uKRo_Vs~}lRMOm5y9@xux@oJ9ar{NpqA{lPT
zgsFh>d^LE#jmOmP?(HqG-707zG2D9M=ySzH>gLMd#LNQI@~;&|wS9Sh_7<Zsq3Q#!
zR+8(hKs_`a@93%yQ75h^p&GuuLx#obQv!*gBy(q`na?C4QrIaeVx<JF4xy`J`e`+!
zR)YzyWoAdN3tks<WNZ>Sx`_^r1X~%2Ci(pb+NgjkREF^WK7{i*Yog>Ho5NWFQ1ZEv
z)VsR1C(t7}mEUK`jgB!ia0I*$V1NO|u6u=1PD=6VGmoNU<IN<D>K!cf{XK`z6Zk6e
zB$64x`H}t>F3%%U@C1B=Km=U0Eig<hF$^3UZZ5A!K{X`=>m_>_h<P0edZiFi9)VM&
zFowC6o+3~Vi)#%aHIu#y#nL%CpVg;TNAI0NH)fav28-9++6?4<zcDD9nk1OPuDwDD
zG%cWbe}_K$%=H_#gKnRfP-KzFNbQOg7tRxNDF{a~p^{F?PipKMTgju5Dm@#AFliah
zkgheZ8=;{*rai-bTLIGuMDD~XAt+KR;zPChF88HaHEP96@^B4^#zjLLgB34n51W8N
z0?It{M?uTB@~nCAwG|jTs%8~p#;B$(lPYiPObk8^Q`lJ%a_%xVoq2K+EopXx;kmRc
z+>#Qj+8UYK8U&6Jz#(odfJFs+$<V@};C)y{u7&^&!?7}``C_L_@<42NSAmw$l$5U<
ziGQX2*CQxc0yqZSnFwmIuuGN7S?uJqSbe~AlukBG+8v-l0n!(V2Y;Rc9voS!v(|+q
zn|Xhrfttbtfveb?%CEVu<jx1~(iRo6ogLP)tf~;uVDV&;yH=7Ez!;0W)(me&eq1Gi
zz8M)HBo1eIIsR%k1HkIj^BaE+><y<7t~$N-B73ichA4~MibE-A&i!#PM`)6fO#zyq
z)2Fx1e<1RxI>`cgUVotJZPHEkhu{WfxYi)@uft2UY=U8j%W>={)8^+S%mU0|XVS@O
zGrI~R+l*%#qg4Z150aEGH=%eh5zm8WAUvv(F)2H8U9M{xRGfDni>Hh!ZKfLw<Gu_2
zewX-{IM42#zL`pa%Jmbx8;gdeBWZL2leE*y-&SOf_3N*ZzX*Q))nbirTSOEvuf(l%
z=|`5)(r5>^0lMyTE3@gF#(8iFTc|;cM0!I$Ff)n1luNXdExf83q5QQ4P9)~8yl8){
zwTMifRM8j?bIbd(4zoKgqxo;FZ`^DYU%2paLDzm48>DL82&rcv4;*8g>ShpcnX~t#
zQ7i&<o>v?OYO=`{>swa-qW7`!j1zxiR%YE{1;OvCVq@|3r=7cytp-q5c)EG-&`#O7
z*ZD2|e~Y@Xpm0)RD1s?PAPrKysdWQE`o0g6Fi4r@@G7`tm89e=0ax2B)Cz+T5&M9q
z$&&fsg7y7<)CA!0;Zbts@+KQEUeMgaA0%FEXxTf%82FJndUmhU6(%i4z&U*);>Gk0
z!>WKKrgR`Cv=qR=<@CVf{77o4j*EAg9Fe5rI{;)ro4>3Eh8^4l7y_zoG`hQ+>o)8v
z82<&5{*ooIOY@Foy1vTinHOGy61=hg-Kw5>U5M3u3RGf1T5rZ{URNrYkExZd{U2R?
znO#hoj8e-^lvEtOp&bhpXd0Zan81&tAL45?8!>3760G@NB-Y`iy}L^Uzq%IQiq(qR
zp^PpN#mf%#{b4LQ0gVKs0^OlvRf^kZVlpQ292ox;p7@;K-j6g}!#Q#nFa1fFt@~!@
zf$7vh1-wza-`v}%BS;T<Shahhfb6>*5zHeDDKWm3u_e$8+cd<squ7)TWi3~XW$aIW
zyG($FpT59p=uZlYlZ#vTj;E!cN`pRB0HQMqRsYS^e0b@W^G3V2$lwQwk;Y<`VXP<7
zj~SfXq%GI(nku|}X7_6hMeqkF4QT>RK`rNgh8@$>Z=LxQ3)s^aXD@*-eevPl8_Tt7
z_1c8%;;6wjGBaPo16OKY6jW^T#H9NPsl?7+tK$rSTI{uZXtvxtIH14X?mqt6YaOvQ
z^WhPHKI$Ff-=n?#HlI0{x9<AZ{rUgSGl@_@rEM~OkvBM~lRJC;(!(dY`x)8=4nQ(7
zkSCnND|m8$x@~?JI?_PEab<C-3H62{@lL8<_3zLw9jk^X()M4@<C45DD^1Z!Yj;;&
zeCX+DT@1~aszXO$HP!1TH&1(JOAe(c<_IsMavrtzDOzKY-R6(beOum!iV68yO~`hA
z#VWgGhr~e-YyS-*F@UDfK_p4Z+P?`?I3`J4OE1j~woY1c>7yYn6LX7d6zH+TZk4z`
zLoW?UfsJd{E&>J=<bvXkLNhMIY!o!w7Xnu|k*>FlnigRMfT!O48&CGjRYOG`+0-LD
z<~~Z>Gz6m&HGvR0DX3a1x~>xTGit@md13nV)mtphwX*3UJ<39ChW{WL=a#58O?WYw
z+Z?H_a*HWaXWMs$EF))FK|9H*q6H){Oy46-^B5okns9X`2IN-}XtI$q)rf;vcRWT{
zH(TnjBs_t%$*UzQt)c|qW%DCcK9um}&<5oXjBG~91v0HwnNb4``OPp|1xj-Z4oC5T
za$JXu<EpV>R)hhfo*ty+*%Ski>+UW~$4;YgK`~jrLvJd!`06MeoCKd%0CI(FcCJE%
zrS}2knZ8W?&-T-iUI99?FM^H-@uawQlhc!@HO<}j*en#rW^6l_!aiZ=(pFO&7%zq}
z)Qj``t-G|zy&IX-HbzpPBB71<XU0^*K_2BTJ&=~pX-*Hwy4gp79om8=*m3|D7>252
zSog^hzSnRr9JI$Yx&@6TCH~{l>P!%9k>Srncx;&QGB|zlPzKU$8<0MNT^>b`Ih<2&
zr2w^M4+o)`93Frh<X4Put9{`itZD-91c77lRK+p6suLt2_)@CLTnjnTn<}pqU*NDr
zjFyg3tI1rOj^tukNdQvd8#oJ#5Q(1i*}>9)7{%EJR<;ZTKCEKgw~k$%Izp%`CPF2f
ztso~Nm!X8OHn<O}7Oa%>OBaOT=u2l#wo#b8Eoe<6G}8HD>VsBNA#p~N2*hOHrn5xN
z8zQbSRFx}Vve>DHnJ0KM$<e;r`ECw%Zw0wOjI@7Xe;NC~Dw9dz>)B?vCThZsSA-f7
zFU&QQr*uSpm7Ip}smgMiYRLNnNy`?<tCl*P-@13kwLKcw$V+%eU*^&48uzm#Qpkyj
zw{(X_XSs>IX_NFhlom?MFmtIv8afIrhEEx;oG)d$v`xNJDvtt;#%H<?Y>eZ%X<I7X
zumw|PGE@^Hm7;9DR4eCWsmWsA=o+<d8}C-0>*?18up2S>n*NODpH{zSxw@fIZ~;dR
z-9|k&h~m`XaLkcdr)e5bLLX;{H{2gTKVl>Qr)NiS3ESp|Y{;Y~oIjsKcS-7I&2e&+
zFl-s8A@;9t`C~FH1^O|Im;F6Ap?l}Ojcc03r6us12ALnuA2Ce(51n04b5tWN+WJ}_
zpu{@tn1YI&0p&H|8AJL_g4pfUuH^sqD5WI86%uO`IT@^&Ta<E}`3myy{G~v-LPh}v
za2_XGs7&W@-x|l+m9=?T6#4Gf`}x-WTzywfoCDret5b=@KqeoNczGh#4e5?M&Hj!$
zY(Ju7&XlyzbCjw(@q(>H0jgiaxu6dgc?dc~rtXs<UCpH^#=K@eC%aMJ1!({PGWC<S
zi5y-nmf5;S>UA})1uvg1VEB^ohU~0F<)~GWL-J<TQ|xXIn_GW3szftDRC~p(T|*^_
z+BdM}jEY_B8`p5T{|z_)P0c3b`r0+A{W(pPBAamk4j>g*q@NiydgL0b(U0?1{fV2K
z^}g?JoAds}{iGMHAG+bRpXQr4XF#ABJ+W_N^sDUC)S~z0b$~Owac@x4z2EC}9rw3t
z^<O3O4|;|X6}*wf)SGI+yvq6E-gb|>k;2arT}Wol@oMs0kfq8<L%F5VpOgohM0lWy
zy`<!UCiG&qR{_ZG;>8X5Wp0b7p*6DlmJQQmd~B(YXm8|LgNW4@{CYTQU(_wvf``sU
zeNu<d@Ysd4nx&l5K%bLlfMx;GDNVvoY03vq^;P!By2Fc$2~kK0j`Rd6>1sjm@E6`J
zV3F|G+9338+_#S)hMY4$VF8MJw7fE30X}AhV*Bt!7Er*$jXfO^2yMgB1zHZYg<hf2
z&au}Hx=IVn*w8}ziZ`y+2e^v8-)>cwr&0=8vXxNCrdD1rq2f+0XtD~1yjlzMZV}Q_
zH6vklg_0?H07#_OH|l?bWH?j}XHXUcUAw@{>IDi&trDV8B!#?FTBE@@3H;w!uS=lY
zr_Ga;TT=&9X(*O%&x+oFo2w|iu>;s|4sesN-=7OB?WjuKWmdUg#AN(0t4iC1DW+Hh
z6gE|LAnU2=6IdB@hhxz%|MBsZ*OV6T4;o@aj<Jdz%nZ`x^HrDy@0b3BeIHqsK9>Gt
z03Q>0CtnP)LQ$<BSLm8OdDm)nH+Op`*$J_;T&smKCe5y}BIfVy3fJ=0UCHZGZo#}I
zI?4JeN>|HeoFIcCh$Z%;fMgO93{O7JlDvk%!{ph+ESL4OpG0VMWzlx{E<i25X-(5?
zlIXW;3~#Ahi=+9vCMYlTKtBtUG$XD}<|XpY-3hn%v+7`atgCP1EX1utJw?YJ*!Ut&
zU<QG-gATw6g@?M(ZNSOI9Pw->bQEVQlsZ1vmO(-((Ilv$|0(pDZxy!r%`JBNikKVp
z(yX1YXx<r5??#4NqSbz|tZW=l*XB@S>4(JqutiZe_SsQYl=G%X90;!qb3;XpQ^nfT
zLEk`jG_C4iwQA)IdXP1e0<AK#-ayC5;T5v!Kte6j+Q(I=)#}u=>!v<aQsx%~cEQ{t
zpj?o{F84hW$lYFhA85_IyT0#Hh~!zqk5AD2fV1maJjomT^7j57e!M#r@a9XBA0^MC
zt7$ALZp=LC84A+`E9_a~t{!S!V~uOBk^LyZGj7cO<t?`ke8)0DUs>!Hth*oVxx$?o
zGv9id_}%19l!K={PqNeAxG%myhebe0te4$XWpV9TD4%dj00`b61HyS7eMeL$?QXUl
zh?~-Q5_&UPWdSj9QuBnQQ#uve39%jco8VuhRg&NIiCqh{w@YpN?atk?yK>LmsXKFT
z-7ELpJ=Gl-6@5;M`s~Pm3<i#%G}$pBKz$V42(!;x3l;P;yh<h!3$6<}u_Iq-uw%4q
z3>b)1H8h8b(SOtz88ZlK!E+Fm8q**XmNNDotvbpZEMk!n#IP&gJ|6}f#mf2PWVOts
z8xM=s_-p%cR+ZNP4QVTqsl!`V4AqZFM+85=V5g2~CsSFVETsxL8(!SThQJE(3}Sy0
z8~ZS&Xza&8ZN@ryj+k}g`HkYNaa;rZntG*gYCqiHtH{sv0LTSB-Bi}q*#qv^ZKKUJ
z4)>>bZ{7!fGPz>r+`c1hMhg-&vsS55@*yIYNT3f=?#Noh_Ca4D5Sh~H^gDY7eNlrf
zGN6aYc=K1`uW;F9PltFgk>q@0c+hi<&!kT2Z~2&J!P0Wm+*b`b)Dg?=><id|?iG4t
z_Jh3+`cJKEudj{1+2H#d5wxlX$R7?z64qGX)T?H+{*CpGtY}}^O!L<4?92J?9Jw<B
zW36Q*D_g>{|Cj``@W!>CTaNtf&zje{gt==C_1n^cGsy>nq;EwroM3R&!^9`S6zHMQ
zN3nJahgBnnV=9c$Gumb3&--DMA2ubk4^#5;?-aKOVtXFeQJ*|*tR|BnO%X!uG3f+F
z8S9X*QnmHF9kKU|GdgCQk^6fq6jKX(U<s2L)c*SZ{H??Z-43<I&`CNm<r%-f-zg^N
zjt<?KqdX#7HrWx405(T1PIvz+7l*fj61x4*EKhg8v^=Y=%X744c~(zco}>QMYq?_*
z^Z=%wdHm?YL2U{$uhgq6xf|%$?QrU~`+(uEjC)jj>d9BsfjGw#_5E#g7CAQ8jlnMR
z=S~&%uyJz8n?@sO4HS)vZW{7Y5qIOvTbaQ&&SbESGcNF%S%4HOkdJObirv2>v`56w
zM3FtdN%N!|muSrXog`lS`XFvZxvZ{9!}g~eSDiy`H|OrLf4+I(Oq8&_*ENxN@1QSy
zV*_^T9pE|9CZ_@j{eTc%i_TDj3EY16DV_#xr-_C-3X1kRPdniEI{osRSX6n9i6~?@
z_|&Rd^;2Nm)6~BVj3IAiRb4g>$0I}|S=d)go80gQWTfYgMu2jA2k4>=HELpUm+%S*
z6{tFt4ia-zWv+`kdI>MxHmVZCFL1fMf=#A?ML|t5RB5#`1eS;`E<hnooc@-t#a@+K
zDfLUjWz~=r^gT2#4WboQ<c-Iva2ao-`*Wi1^nBCa<cKP6zCGeE0#e}3H)XgZeW1H0
zim2#s&O_z{)#O={Tt(%(l7e&0D!9lRfx-|O*Ctfd)lB5{tV+0sau^sv;U_Mtu^!_a
zQDGjab98+Hry$q0h5z9Tx0k6<id7$2KM202Y!T(SoxK(;=O3ZCsQQ}IUQ~&w#VFlY
zqaq_ap+*%(LoQHKU<7JCB7huZvb4uRg17>*(awx2r0*B<s7X$YeAXs3YZcmc=FHfR
z^uk`APW#JL-zw@><u#aXpGX@SS7uY`uMBjXn@<P1>zsRTQ7><rshvGlZ^*6EImH!P
z3V22-6s{8s&QPwxR$Fn-3&SI}K1iEyk&%&Ts!HH=we7=v=HBsO4E?JD|BS41{v<Ik
z;fvo~bG`bd6;#{UXip@$9HsYkmBk1gNVDcWwHLpN0zUu^Ky-kr)+}It6$OBF%JQL^
z%yho`{Q>VHU;v40EEdbu^YXwa&bc|gh_7;57Z1v7izP)DBq<k|CV>($n#7%S_=pz-
zk6yezc|5_^0f;^rBM4ZyM>h;ln7XvsRxaGcDLISw$7#;Nw7Clw+eUC*j6WuMf1i-t
z&|-hl7RvOttM_Cj8o-tkK~qJ?`oN;e0=PW6b4pb42Xu~vr@78i3U_X&yc1<a>m0nA
zmZx~k<^bTsty@I0Mph^9(;QaugL}v0fm!PF2&)(K6)pDbsa!2%429*(UoC98D0xsW
zP8AyQQL2_n#gOp7CUk^f88HG8Fd12F4IEKH^%eo^t<s0llTXatQ@Y1@54rmE#0#0b
zo_GbC<-_!=R^k)PX?}hbKlz1|tjTrXB!*17*v}h&<mf<S>T(~7ibDm;Di=MaykH!}
zq!9IE>$<w-$QKn=8W%w2fCc6J#z(i(Uw*kr?sFbAK5qlHAYYxNCgePAUxp{G?!${v
z<QYt?R#3nTr)C@Bbh{pyF)QV-V$)nyY@RPC#C|QH|NM2ER1}JSD+J1sQCt@Bb?_rn
zhE>rZtatRiMj5OJg92_`3<cOXX#})%uwWr5y!a$TT`i!A-Mc?uRh&QTjr+1HbmfPQ
z`|53F^lJCbPnGew-SeL-(tq2yKmJ&e{sz*k`ty0?zB{c*pW;PpMf%Sh_oshWq~C1Z
zS=G2MH|}MtA{~9R{!)>CzHt}5iuA?CtqR<^+PLYzD$?I=+?)565zpOqW#n}Cwrcj@
zZj_o=WbYlej?m*$WVa8G=yJ(!qj1cpZ@rE~9Asqsj+;W#Az9!rE4-fms^rOZw*we`
z8ZR)Av%Ht+?mNwNH3oRHJMIw*JLV56L$)^Vc)N#j6t5_=lwjkoD(=tktX&|ScKyY2
zV7b;YKF>3JJi*6HeEi1x1|C1HVoLu8)Bn^x!sqAoeAD@EU@5mwVkCj~YyW(-dwgPj
z^ZerZrCTMz&PKrn33kqkuEYf;FMW7R(XqJkwFBib2pwEGbyQs>CC)<NilQqhp;8&w
zzwxYZ>KK)RFKuLh>ad#sj>E`CPf$?p#@e{klACkO=$Z1-X|;06EzwmJtiKB`fg`l7
z|FUg#zkX47*3M8pe>R?{#`Bf&yfB_qGaX+3Y>}h>Ci#{Uu0VI9T=y89TRGQZBF>3|
zk_gs92H8-7sVH#}*S+Lfwowa>Aj(lYVJjqdk3xP1d-%MMu|WCp(8b$-e8M=QcwY%m
z9aKM|rygEk#(+YqR6AfmmW2ap8LFaIE49Q>jA6uXLIc@J?(eg|paY+lRKYc_QM2bU
zObp#JM0HQ!?u3r^QRZe1FMNh!9+iu9+ge+4sO}ERvTW<KCB`cgrWOy{-D%T1(1oP;
zAYS3rfzivilofE~H+-d+$OuD|^Iwjtec1$emAYuASPNHG^LE@CS`A`{B6?}Gp9Osk
zs*Tl5SBcLib*PbIAzsT}G%v#WJY<!l6z@sH{Ac5fUo04{vVgv%`7c-TDxvgcKHX1W
z`fL0kXBr`JIn?Wt>H9O+n%4AnTIyO?#;XrQF<wI#CfMm?ZE0m~PcH6P7T=yftjr&x
zmX~@<ID2%`s?3bx=Dx$gS2pYrTA@CIJe>N4ZOba_w`SY|T==&bB-QEz4roLeYskNh
zq425q{J$<gPU|0=&AQjD|M|JQco3lh5|t8HK93Nmx8ZPF&cn=xGecv`t=_b-0$;^a
zfiu#&w2Uc)DPi|tbX}JI9A@T)>%_HC*ydS|2n;dzCV8JtIcv&Ldgr<W5_V}jE(s-d
zbFj~t4eMvZb|7}DI&S*;Hu^Pjc6U!X;zQ;PrAm(c3w%8^eT|0NYOdxE+N=ZZn>OEH
zIU5}#C}8Jd8~3_Wn@voxN9bG%4l=hx^v9@mfz$_T9Q)oBcH%Vn>D_BZquQZ9b3fMM
zv_;DRM=GKxLi-%2Ro<Dg%8tJgKH&Ya`at(Be46>gwE6jpMJ0WDBms^nB$$<77tk41
z+T>@1O&qIZ+iCON($S{wzBBaum?my*rS2;0pH)?7wPl~6kkDAGr~x=2eG#uJ$}>u$
zDp7>^>t8t-Vjq`d;!UA{%Bw#B!B8;clMTjIk{6J&4C}1N$j-|oIm?2xy@mSJ5QC-J
z*is+2y3Hlv2=k_GiR}tNf(Q3gB?tlN6Dgo?MJkA{yuG$KTJ`=6awsc950m<gj7oqP
zp#?FjilI!OuaU%^3Q6%zhIXm$Wmd**%~}4AW?H(Vx%GB-#`elFW5iV*kF2+9Tfe~n
z8fRyXmoIBS{Lo)4`YB-24OAep2b{aK6M%5QGZ<kXIt?d=g7smm&*yUv#L;Cxp5S=^
zbEm_0p9ujIj@+5OgmdrK!1S?gz>IqfIDS`8EfNDJ0Ks>PIXbq_oMCL6P~)EAmka4?
zV(ti%br(GoT~_%s8tT<0dG{xy2$Wgp%DjWdNSVxXQF!}v#f9}}l?5`qt2~{m)Y61U
z>UlgNI;6>UIOG*7<G^+z%N5@=5VbBYh&L|G28^U`MrDQOKUeI8>W0)|S<y8(g)gxW
z4)PPgNLI~av-zB)e8bCDlTWAz_C<ip3mE~ryf!|Vpk!<*jlVd59=g0%6VeR0^4eET
zob=zS<1Y$~3mw3FHQW`r+$h3$lXIFaxTLZ_12;3gxdnI<wFc2~Fo-aQ9>z}8ZVe)7
z$x(Y+%~8H);70~A)Eq<26eCdA9A6AF3Ekhu@jUP&r`l1zRy!d-a&*ZZ3C|F3tB_xq
zzV+YQZz)a{x+NY4ef45c;2#W7eqfZp*Bf3g0#1apZ3OShyG`N&3eDq$g1<WGO$D6*
zno<k_`v2w&dGu-lKdZ|yN}2V&3!_4Cb0H15={MT$8h>Eh;K{nv-W1|dHu=l_eWShO
zWz8G(Gts>9ph$o|q%SWqIx@PIK!1_|>$Vw`DYiLY(vGZ#onOJOQ^G?u95dgcJl8)!
zud2$<E1t~|UpNE&sB~squ8g~dVK4p5;GYdNwV0uwC~~82qaIM!Tt86c7bud&OZ3`A
z{sU}ws8v0-&4!HHUnFswUiqQHTk}8-k7~=#1a;K6_4f<<S?(WuoR#ymt*=mofKB%{
z-+4EnRjD3K#E#u`ZiH32j2HzF-4I1v%4@j6SQFUwIQ}gqRgqWMv~$=>DUZ(x5Twcs
zAWK<q6VWHZ-2!dl#l8`5DA2WI=@^OIF{Yv1kg-J7%~4ntYEz0vC@1=kIhRn#oQw}m
zqkGZ}kaar86D#3WO>o5=S8N&W-gwLS&?JN0nf#?QZ0_}2l2J<H--7pOAm_!xg>0nr
zqO)Q7EYkl9=euW-t5pk<#sQ#!AAN)_>Ix4^1x2-PEJw0!rql#FTo2)V#+m&P1Mk*y
zME&$;z#)d<tEzY{E1u*lUgs)qaTE(tvDygemR}Cu#z!C&QGu2;{q!2ASE~$=UQ`K5
z8Gt7HEs_vpxdbw~WbB8<K4v$HVZ2kz(!aw|u@aTIct|eCzTG}(xi#_s=3&dRT(u7U
zHbzyUdka;K<pLz4S_m*8%@&!zqtn*Mt`;c3j}%Fh{5esw=}<|ceUe0nB$8&=v2Lo2
zcN!U-qglAL@-{?5Mu{>)1Jx@c4%VOi`mD*}@+3_uz%iLUOXKzoZ@K6qh`bw<2^moO
zDo{~Af&$$yJA-92oO-FdY^uv0FBvea|IIOEsZqLTkxJOfH;R`RRO|6LIRP%&I(`m$
z@oDT?SnT9mGSN2z4@`iZ6E5#{?v=>RN^rGfHljPR457{ObCD<uVV5zc0tOlr#Z~^f
zD-sk@H&#z8*{*7R*(5vHru4ev8D3Z9H^3NPT;Ho(%Nw1D*u;y9se-KZtO)2%U`FJ;
zqcNSZf_Q;<Ucime44-)cJT_q)1j)~0mraedAH;?pL??kD*d4hY8)qm!ZFpzJK4Fi5
zqBBZJywI4Uo@c|G7RJUUN`n~VNudWPTwi;@u4_UfR4%F1V0G}VZ`ZG<7)=plt>vbI
zuLF51fYf^`eUv(Psd182Vi-xsXmp-;a;rnODR+*rg^GLLAe3@Z3el*#9zC-&_}d`+
zZZr}{j}VmD#>Dmo))=672ukc=Vn+p7L0n}QE}-yWKmwI6Ix0RT+dlz{u^h`F?GlYj
zlqf?w>Ht0(Ef)prot>Pt_jfycdoDa3(gXb4%`P?uZ^p!PB>ehXR?+AmW9KP{{Wdo4
zB8GJR=K!2-b_{1*fBNp_cfD8N!p8s8!CvQ8yJKNT0Ap2gt1T%D2O3L|+W4yUcY+6F
z4V*;edsPa|fn=+!!*LoE=_fDDtOb=~RJr_k0TK-x?Y<%beW16Eqtt%}qfVUXp%$i#
zAouYFU_YWqM6fIuC6IR**&>3%es)$JC8x%k3)_O|)YvTmQCT4}?`6)cGT@?!#0X`S
ze3%p@@YpEORB&)jn0i`z6QX$MD%hEg=$=aa^YjKU9Z)p7^5)MCZ>e&IE9o*gceFqA
zGg$hm=ZgYBL7yE@2WP;nQ6DLG7YTa((b)xxVsE_}ws!@8+86G*`MnMaZR*XbHztz*
z)^Qi&@!V;gy4T*kVaN5h^K6CF2GGqET{ybBa5(|vyxFJq=AL_vKMPpv6~J_k^g-KK
zn9CT0*E&oIrH@k8u`8U~EZKfhAuBl9^5|-Jci9xw0!br~+Ron?*n0lZz%<sYmhr0L
zYT>Glky!04?K@2E2ZAk2$-7t}I4)H9UzxPw7-&QHjC(1t<rKK+>G7Fd)~Q+_w3tN-
zc?G*<>c~!=duO95E`z*AJ~vc9;aRGQ&b)K!h}p<6le(cZXpiJUu!^!K`xfhN0Kzp&
z-0CW?yxWQ@uVj^1s>*8^()IB<?=%H{*K%Z^6l8Ih(KUhJrS}N|Yz=<^+I}u&(lGcA
z0Pp6+yWHJ{zsKIsI7{o@-FLvv*>{qX>+6+P#NCZtCwDE^NT_y`{{FY09UIn15`F#A
zrTg>6R#f4mTk{7+v$cO&gh^=9jC&h&HPkT9pHs*sY>mkEKAg-=Xv(DCGsa2jBU}L?
zrx0C_;!O|$Z=sSr3m~1%iOqph5lPldyZ91OZ!>iP)nMcXQ#w;H;3rnXyCd!#A7LJU
zGi+HHU#dX0cj{g`Y$h0T8!x{uy@(&i7^@N=e2;ZNl3~(s<NI`4IP;XFau)8%ZB?&F
zPB>z3e5c4)U(~%!HyPm~&cj<oK~ODfWCUMZ@v{dimeSp7`|K01J!E>OK7wh$8Nk6`
zNVN^r+Hfqvp5^o4Tom$Qd#d@Igj5^t3u;VW4jyAD`RpVbM*VDKtOxoeQ`8S6pz+I|
zLn~DHbg4d#i=W2olTV-EFRDp|*iQ;sS1~Cj?AScqu^6)N<OV3@K$JVUffKPh1i)Y#
z^R4iX$G#F$bW9EF@+STqBrp6FqY3Wr=12=*{2jI~#JIei2+e&4dOJ|D8g_Sg0t$qP
z9G^|+wcP?@k{o|HCbjC@ny+>&j^Y-3xfUHY6q-NS%bR>kPJ|`hxtWv2q1~TDb06)G
z=`+@;xof-KjRUXllaf9<&&iYn@4=LIj9Snbv2+`TXry#XDP2l&ba(u(?~hKZ+r$3H
zrqB}_{;_@Kl<!a-6ViGYX6KE*7rXG62Rr!q*UABOntOZCa{WPWsGQoVOzmE5oA^Jv
z^IyC&zk6U?SLsjo$ZyO}8{ZM=bT-ao?~lXHehF^&OK`Ja-2rF&%VX`<s~fLZ_n@x3
zA%(CM`Lc-HBpx!c4J!D+k}$tY|5{ET*g?RLqY(J4QOkw@E{OD^PSLt-geuLQ|7qp-
zA&)40;rh3$1c;|j&qx~se?w{Tj{iDP*Ldzve(Q_c;SI<zdf@^IkT?BNdw<XEb>ROO
z?quypxpt<0@|!Nz?jCWH%m)cN@iGb4SQ{kqKb0JC<`#7V(|)`1e+wb+A>=#k!j}V1
zUjVrnWiV8%*k~`Fhu49q=x`77qir^SV#SIPcDdbCEyT&>Dx5+^dtG-A2Gr_tI`GP}
zc9Apn=L;adMx8En1hTd}9sY0~#`7S9+`U7bu{NyAY&E$`L!Vm{vv?WLr<~Af?_s5S
zz@0;U2c9atjQgX5JsJ|Eh~d-fbz9i&3zzKac&gh6U8rjxzln67?@p(uSBBC>Q|%sn
z=pI5vJ^caJ0{ZNVe<FPuM!$)<I_$XZqpnC_2lILSSquaJb*QFAAfW+zq87&({K8LS
zoIDyTW{UjlwE&jRA%HP19Df$Gkz22Qs@Uk%Q3sX^I<;IS%XuK{rK;3&=p<T9?hRCv
zhI4cvHo{88zYCYV0UG1NP8SE;y4Y;&+{I_!-xY5{aW}4GI$!ze`R52jAqPpe&I!P^
z{3TLhoNcRV)id1T+UqFNC4d9ANxLV0bnT}W1~XHF?u_{kB&zPFVIqtwtT}q-tMbH6
ztaFQ4=GMj$BHa&oo9gZmkBn}P(Cri7u8L{+{@3fp`~@|C=0~vbiBoj+Vex15MI6Oh
z&A;};Icj$`Yp-Xub-el}32Lhp{W83MRr?%fS2e#j^XKyh2Jx$<u#;*~`qd2&(ygJN
z68uSmZ_-*2;uDluglPt}7OG=Iok<OKNNJ4zye4$P+*+Jq!5T7~HCPqsPwnOTix0p2
z_^RedQ|uud8DnRlqQ9>~*!DG4DneDl*xNejCQ5VVasY+Mrne$Ecs$@MJ$CKSv*?*q
zYFnMDg<?HX|1`J`C&7>5O)!6liY52=ZP)jb=I3DiTbO+d(*hlQk5U>l58hecKJYQ!
z{w?1AX}sl2TbOODBrkmKn<3EcNZqbQ`udJ@;Gkc~kj6&vbeb7y!}u%ZLXS52B#fuX
z$zr-@^EmtPq!0J^cN<ev0EJtL78H&yFeW+??rDEy{VAAE0QI6|*Pl%fXNUMS8Ta5n
zeCkd8gWeRMj(WXTFtq>?lK1q!h{4u!qxc2vt_AS-Z5BMJXmG-<0;YW%-+UV<0CgOy
z5}KGy(CkP|59ic77H?kwn_h-df6pz(xum>0@mz%TY{FTXlCMj4ec@7c6VcB?{o^>x
z;svy!E+R3|fq5m#>lIFZGuk8?2E{M@8b&Cq2tMRf7ol**xA1TH!Cz%DG5BXZB2{&&
zAFJk!Z$9-q-zF)~e?f9BJiDq|-VkRfT7{!5`hcyV>g_2`h06Cbn1l;-m!wiCey8mJ
z2Qy*gu6Z7d!)UfT#*89nwP?;MWGxor2PyMe#$lAn<=APvi9ZcjX}@b+@^)O5+9FKh
zUkNEQ`k&>d>%};p_pM2oOwjI`3Zn0yQu($~UU=;YmhAd)j0&r&4`xyLBCeV%dZA}j
zjMTk~lkgV7m)g4xk{CVOx#^V;o02B4>t0FE0J@S55JaJ|dHivF9S9d8@-qBSdp-Qm
z+5-5-HmU+rv29umGiP!W1t`dV&j+LcBxoHLR^&Jo70c-WFyIYq0xkMr)NWDan_8$I
z{%5K5H^%Hza40+wah&AaRK6fsDHjSjB_uyQCEM+H3?prrSn{0U^Z9<4m<l<s@yj)=
zLp$g`--oOuu|y4DG$W&Z&wu9pXUu<A{O1f2;uL>o-kl&15-~kQCb*0%fL?HKy_S0g
z|IWQTAbij*m=OFUoQsrq{%2ZFor13d_;n&*&g9AwAqahek$tNcUZx1YRpJf*>e~sK
zD&~VWoe<YjOtDjr?WK-{h0x{jMyE>mKhw7m74k;B1C!BZDRPl<UwMrh4#q`bPI3ud
zVb#P;R~KvTA2_zqu^=ou9DWlS=w-knSG;p0N&L`G=&w$3+2LGGCzy35E~Y!K`s#6c
z;4yVQt`KD>%Az15&Fg~86(C;Kg%%8@(WYt2U`*Muug8?hG5MqHf~8_&6baq(H(V<s
z%}C&Vkz9^vHTaO6uqZBZoK190^l#+hl@_zqE(QC;OFKTT0f3jXD`V(^?nyMr>UAgd
z@<P1jDErGCuPy(yzrPQp7rc31Yj-z;cE;ZL#A^-5$IZQAW87$V`mKIr?6@iP-xKm^
z8-<6K+pdqfLo3)Kt*zr%WW2qiS#Y>7LwhA8^XX`IVQ3q>_4>@|m!?JJhA!%I;^`vi
zc#<1iaYR_UTjMpjg)O?n-MmHmc7>{utI_Sn?k@g{oRFt2Za}W6EnN+ihULiBj_BRU
zg|FVuj(o*q!f{s|P0jn+K65{zstRg>LF!thPB|52v%p|g0UFb3MNhUKtJF4sJb(ZC
z!|Q*%`t|kO?_R%s{oxl_4e{yitM5<qpKj%+v(tb6`j68$KfTi1|4ItsvtzzA22>9~
zvEwyvDY%?S@?bMWC*sw=+1-tHJR^gD<3)f4V3uL);e|CWX-Qj5)-`oARcwapVkv7d
zBCTA8B|8)lG*zh6yHhB1<1Xy;W**(TqtFc*6NE;o3+EwlU3s~N+#UPOGfRt`Hs%Fw
zJSZHY)^bC1FU>GMVWid&*>Cb`dnPiiAIcOq$v6i?&m&1ffQK&{40m@!6TS#YP66s{
zqXg!m7lg=d#qpanc(hk-S2&qxO|F(ETl=TfVQNT|J?LVRvGCdGOkKKOG}mta{f72a
z#k_iF8-+7+pZO1vP%!b8>7J|~Fl2QOU~wuw5Ei@ks;7x)L;{yk#6=_^4MjL=hFF+7
zFQ)TxWt@+0T=!CW)hv+U*jvG&$@asa=rTQla>;QD1rlfJjYr9aYtOwij6@7`IdAf!
zz&@jM1EXdwz53E+CHti_WGbe=^t|@-7QEf!V*{QkXX94k#3fZHR~BAA;S#u9@4RU)
zGZoDzq3+FO6xWjrZ;8Dxcb+SPf}9O{ztcvimSQkX1vu0Xz#La{N&&Ae9e3VbbJ|*^
zsV1cX`1S5?Oa{g~pI9GY2U}~vj%M=0><<=Au`t&$z(4H^&JPcGk^2d1nxI|8m~_5y
zz3}Gy0pu|8DzK1%qwQb^jO(S3lxyP`w22Fwie;o(WYS6*U`7Zwa&XZFEe1TG-U0vd
z8cSzjU^`7pYJ?{--PXZ;-AF1?A#I>FVDq2h-#ftMpS{^&+rY%;=CM`m032d&4-gd1
zP4HRLk+T#>6Ty<bJO=2o*B$`U^5h*nzVi@%2&mxW&+z**e?(=Q&-jscp@BAetKLY9
zPVt4<J7L^OJYN3>`fG#&VP7eb+7Klq%UB4~QO@wZvnk=vq5X5+yKz6mPrZ=c>Dz1k
z_O9yNM(?Jz`_6IoM*7+P>};NL8hcYx`j@Zl>s=qv-b{bSV;(<~8lXY-e=-&Rf>Bnt
zunU&7VzOeA4{Ne6BHA`;MvkI{ck<uJY+u!XX<o@+Cc)A^ldQ_rsdRrqPEA$$wGve$
zU4_~ndV8GZXpIQKFC!EjkAP;YLmw|tP~BPDtdi@PM8vdEcB;#+3uVz#L1_^x&k%9*
zrcK^jZ|Ko+jW28dvZhD$=b(o3vz=3$7)1@lYc@Z4cM-*<lj83T{Vl^#`si;#>fRKX
zEy^=tIO<OrfXEJtYSazCgLU}#?rzSu>fgBADir=-m(rmWe)yO9L4=9^&LJ{RGOF%q
zeqk)%XBn2E?5`9i7KK{(_rzNYC3)H!i0BiU!ZHq0;z3;=G|KQOmZF%Yp`j#~vJm&V
z9f{Swzi&Gn-_oIAimFuILP1*1s+(y+Q>0@EI`pfQHS!s(22O9S;tLh!uU6d$UN38+
zAQE^s%8Vmza3C2H@8OdLY+!3JKaMmc3hHp|MKFtq>&83>oV@Z<6vLy8_;oak?TI^<
zmIdtHIYg<yvX6>^XQAl;K2$04LV5z}Ea4_&Ej{gpHHh87T!G?xBzlo=Oxp-ug<e%I
zLu)F%ze#~3tSYT2noP*qBz0irCQgY%iGxO|TT_d>+__9Mq-4NUi^Q_9%v~YzcZ)yB
zUb^SVKMGtM4$t~ix1exLNKKISq;IOkwGN>>==l&TY4xMh*w9ff<T)QgbL~Df3=44%
zAdEaKYvtV%snC)HAG(b9y{n-$gIBAMDo;c-)_n(x&FdaKxZ%(SvS*I8&)Ag$aCFIQ
z&zk&J_hO(oQN{npyF=MmDi*vUbGZDD!G!v@k#UB|4$7*}E~j9Hu#wP9%-rQem0A=<
zN!&IgBnyQ<v$z|}Qi>Nr;Xd?^&Ru$S&4OarHbe$ho(%rfTqf|MVZrmcissUvq901=
z7QdS-{-gLdhHqr2vWU~nTWP@kP4Mi*v3r+ffgm6U7hFlwmMDLiX}=qkgXOb;m<F@a
z^1>?#K<2}Fe-2+D$0k>iK?kz*&>hWymYq4J!&bCp2y}<oR^1DS<xlXT-|BDw-fs;g
zi=Pxp3b}cudtvt7ELb3h{vk8_eSYH@Uur9;oMz&XYw71xEAF7pQ=u+s%?!2rhxFT5
zq71Z;HZu4(L;CG2Q3fKqxDg2-NlHhw+1ZocdHivTpW<P=A3qCOMCoyBY{uhD28*g@
zE>2{CJqVl5XX8>~zLzx%*C|3=IKkSAbtlgz&T&g}hKA5aJ)U^vj7g&e(F>crO--DW
zVrl%S9*?Os@U>_F+a!|EMc)QMqM%F^cT`T~f?g*^XeDF1kpPtE2~sVoCeQ>n407u#
zgI{HcP!Zl)Ufdx`6G2^6M6GY|y8bPhs(K&bbHo$@;5tA8Hd(B@+3s$>!^+j0Lq_tI
z<1zXWX*Kc~CU?+i#LkV4ruAmvFfAjNn>&ANqIDZ0$^TW!yCQwcMsDYsO+sYBc=0t^
z-Aq!qR?j<*G-YIz7>TQkh^{Uod36zO1`n|X=5mlfcAQQ1pwvz6(t$e^#?}V$z$Odk
zaSokyV@A<tKE~OFjDYTAanzW3#o?2q3b<Ode={<onM5%cpO`bFqmv+<+r=)=1g-DR
z%)S=0a<4@e%B*@&%!+-PF%#g<a)T=76vLC5h|_W_fj=uKy_bku*fV&V(O7vzjUYG0
zE@z;#($gm><&-C_SprssOW-(ZIE^4b!J<Y!`n?j#&|pd+SI7}q1;#nJ-O>y9YFl0I
zw$ms#HR`a=ay+6wwspJ)C8I$E5*i<h7yN_rd?U_d<^9{|>Yzx-Gt7<Cpa(dA@BmUK
zXY#A7z9NO>HH^Bh9;!=MhE#dEGM8K=cnMONWi)IDfXSXkn|{S7wEp9-sQleo0zFXW
z^#cx-;5ne#iYjXKX(LaK5D%Gch(|32$M5rq5F-|-%x;-!nP#`<irvb#vRkF1lHFR8
z>6={ZN7*jK<<b!@@=`X*Ojw58!eigWmdbi+1=xOdoc{<of934hkt{P>T{yfwkX5)o
z7DNL)p3pHaxz`-#1^#Ce;LW#%j;WYp&e%6b^V%^8d`$}v6Sn`WPbB#ZPZfl3-_{w$
z4pb$89+Fif*uvW)oKDegdcx=-*9k%K8(n~-m5mXhZr=8~Y8VoW*qpwROMFFBBzWSP
zC#Z=87dvJymRVWX7x>;FOPH`~vffft=^PCMyPW7Wud)T%$@bA}4hk$p9?KDn&t58a
zR9TWJGWhE|bV4yBbTfyy@fhBGsk@NZk`ny9Z}Rg196m}!I4con%i+?NLynxjcy#ar
zgKu`&=qr}`OMGX_QQdW4Nk596#f0g1a*~SQosgbN>Et@5hUP3uK&TNGw^Vmie6t<x
zX=dzM(;x+a#ig`%iiHNEy=oVN;_UFGSYU{eCg|x{r0jTOAj}(W5&^;z@Qj8f3CYR}
zQ9?5Ri)vpfuhGr84P;Nk(`g+)&&V-?dgs@a?oveJH^<pjx>w)|Nf+kZ_{KUR*9&BM
zk2?lw!hU;sQ%hrv0{2Zl4-9$rxcWB(0rglUUlnt?z2(h7Fx#zxsD00<UEG*MMW|{s
zLj~U}*r!2cotPdJV2sm~(ij-uonS50xw=L9EN4@m9?3FEyeIYnTLZ)Npq7v9I-=MH
zc@Iw)K1LE9FsR~W5cMqjj7=xPv<xlFped~8#2V-;h4RLIU^kx`kT~@$%e~bVD1p+I
zPFrY>%=4~BExehz@<vzg)dh;L0qAd~`CZEyPV1h9<hE6}uh5Kwi9U47FtGYon$L~5
zrge!zjUs~d<5JK_U>0k0BTU;<nHH8|B2+f?IbT9FL~MaBLNu;uWWd(Fft~XbB9I*{
z!I|=c`Hfh>Z(RAL^!}u3_28TOv~CS}xrF}?rCrT#lv~EKm9#hI{dPr;7fPGP^G;Dk
z{1oHoNkK(E8(PwdSnEm}ayrbb#hg0*g592d4(Fw+s6pRQ&)oOg?x}Zbs-4iJExdEB
z$PTb2W^n7=@SgpqzL3hov;t!PT97O?hk0diCX3yHY^SiBt&<v0?>7zx8x-?<&KmHR
z@bH0=Vz<uoW|O<ed1Grz%n;;6Ww}%=`9kq<(i)1VezW_G2-5Tu;P4WuBItW1O>~5&
zxJ|@OgQy+nIZAXJhD@Fw=kcYTI7|$`d5gAk7%<q>U=?B$ACAEj6oZDI&-G8Fm*i#q
z8GU9qLI)1o<T>4G&yU;9z2U@b_vgpmp*`_B?);?F?CdG&i+_I~*4xKW8{Qmyo#vif
zuZKYLOuYH=0TkZrL#2~v-cpEt$Z@k&oZa1>92XLxl3WU1xCL`mP7@MJIV96nnHb&B
z?}v`ahK0o>;N$)MMC2;WjN!9B{{iofn9rE1Ci6Y0qf-)!6ypgOR2Z*^vV0!^TJ^KI
z!U6)XhiaI)CR7hnvO_?Mx`~z5*fossS6rx$I+aT)d!lp=s*0E;m`)5p9;nH1o*57n
zJ&(z|HY}4;l=9!AJ#OYrP(h^bKhs6!kv>7iG+)@-PL2bXqfLOoS9f{IMl6LQ;VRvr
z<mYr~0%QJ@({ID(v#h$|7AAOxdqN+0g%U#BFxIZYnq*tiXrp|+)sLn4DrvOo^82_@
zf#CSUVcd`FShx;nZ9P(96WWD7!uFARk}(CsHmJuqKN$|)9zQfc;*Qv=7fRCCjiYu{
zS%qC*bd|BpS%2z`s){t)d?kjy8&DDre{nGdJy-xbaa2j=9(Hlh#z{gPOXx~7^YrSj
zP^(0WUSkFsRY#jk`G&hfdWBLl54yl`<OY9a2gtw-ta33fa+Z;kdA3MJt=;R!m=P=_
zBD&=_H{<P7&z`XWp~2Dvj8TufKm&Wcad$F-1LXM1pg1#;R=X093v_2<bMydHu>iNm
z%sv0uY(8uK`8hicw{Ou!(=E=na_>IFK*n|fh0YvO?~$k6TicX36mAJqV$yg{X@D56
zxl&uVH4H2I+fV4+$!&?m8S*E&sHDovOBR}oC5&>|@C3M%=weX5&OxrZK0#~Pi3wD`
zH$f|A<d*A`+*M#<``IzN^AMMUG0MpW)G*_C4NN05k3Poisr1{5l5xe3$=NGhVW7yk
zv~P57-akQp|1c6qcU&kih?JsQt{`rw%p7@;-%j)jm1KH5soHW{CGTzYKt{?8Hs5LF
zwe8)}_=3rYKoFRNK!|vPBB_Z=)Y2o;*zkxnlk#NpR5><06aCe$CR*Jqx8<^<1~kB|
z>7SNk$tuW~5n7Vox>uN{JQyJ|<}U7Fz-VDkvb*~t=UAw8=O72qh6ONi7q1wAzj;O1
z53F{E8E8&iJq`ILToj3+H6c9yWD=I&7Mz$!K_6Y0PM|*%vp*9QNs!QEf@*3KtHTz+
z)gHmNL){vwWORSu-a%a=*!TE_Q=yNe5Y+?G%UgKSoF(ysoV$gnH!gI&QSd<~=Fk=&
zA;U9(z5bL;%~_GDZCy|~c<fjg>NJuUXbEa2iYvm@iw7|faEX^nck<XQ?58a5CuCmJ
zkBlAlBCqT{cpQL)alO7fCd(Q+(j8X5Hn0xf$KfoVqP_?F^KzOube|_wT5+?%GpTjS
zB-lDpbIrNdMy@sITB}^47ozt7af20_&?L}U2$18Z-nST+f?N{v<64BMpnaXv%Al-;
z9^hTJDR(}g<(R%_vHFT4ZlT>O%ku-g7t1fXJpNH%vHT8Id8`|}zvn)j=vMCUvDop_
z$iwZN7&Rdhp|%wU;&;~^3w2-NIec@?!7K|k@Vje{W|^x2-&~^;!o{cP3D26l64T@H
zERdjbet*A1Mi6GFrQ#D+hXPyv=$QSk$de&Sy)4zU)OnV&o@Jq)Tpp?iI<{iSIYS#8
zd8-K=O&;2n9hp1z&ZH;ban1|xIOo*YXZF5S5o6o2;p+Fyoez;PV#m2SzWP**&k-5T
zbnJHD%rDjqKNs@LRNXgQc$YShgvWZSFu&0htx!WH;GYI{ZL^68yT)Ewi$fg+=dgLt
zP35t3UV?>t?S69C?$2H{I!BLZKht&0XZWktXAqu#)^{F1=kGiS*_*T5b_vJ+Y~EWe
zfFHZ|SX0UKJ`YiJMtRf~L92h&e@8cse4${Mv%G6c;U})gHB`AUs}$D`xjJv5PI13T
z7YlYpu6IIGfmFlKTJ;A`i#&Y&tVolISSJ$}KY45DP-*0!yxV%azxJ-`Z5OySW1i&I
zx|#dh+&b4z9bi7U;})2Nuq8kdmd^mdMg5a|U0<89SKK2%=V;&;72{wu|8tSS5Xk;U
zu0ARzTn~8AOkv&tg?R%7347k0{LFY&tq%^jNa6y%jz@YWE>2qa_wfmdOK)&uxGH+`
zvHJ3a0bu=1$OUlg+5m>eRsXYFf*{f$Z>$-5RJl)Pxmzq(f)TQ&Xnca{e0&Yd3)U|$
z>!WMvYzzdl!GkTy?{8ka@|41q7t@lVn))4c?t#A`J-%4zkHk`QBxa8p$nuv9Ce#-y
zn23UjESPY?WFxdRh$F~DV8UK4bB@<JC6C#qS92MGpv7?oPys|u)@?pj1HDk$sBE6~
z4Dub2X_Z~Lt&0rLJF-2q560K4VlQ}FD!U=nKl1%hi4S+gy{gN+x%p_7KA4@sX{_uD
z&2PRVBI&^;!2zr0%wFj4ty~}I5H(sU;HC=jmKo?UY{XC_{lG+E(~gs4i8R6eid{pR
z_FncjEfKfiAu^CQGQN6b%QAK;z@|#MnbC@$o<CS>3VDgze?kj194#9@`q-rhH1#>d
zN3=nQKlS#7mif&k%W=l$ipOZTu{utOI>eNzc*gs#Fj@tJxo1;KW92-zr||pCK5NXK
zI$FEahmE|zogRCu-QB5C*{WFC+1ARYqB1OXLY+EE2r*Nq#B-rj{>_$7`8T>#C)6pU
zvQ@FNv#pg)MP(%3_s({A=PZJ!dd|eNs%PbKs6{CIoN9PRwbfVdoJD=AQ)kDx5NAeZ
z^I~Pwt(BdL%COW4b?PKmgF6$?g-*fXsyk)O)Y%Dj%BXB!tZcfqvNKT`uu2nHJ768|
z@711;=`e&D#b6uw2t^{~*v|mur+RO5zB8R~iupF?VP*J$l5W{ms2{btlHBGBHNRut
zf(Y)8IVYCr@3f&ms8!J-{fQkrL5${~NXd6SaRySz8;@+i?j=qm!QB>*{6<nwamT?U
z`h9>u@J@;nG?$51mt9Gz=hV5Idp>lxkwC+pft+Vt+60wzePFqu(K{yENys7k=zB|V
zUbnHRqswj7K3~bkrn!Bd8T&jdZOyE(HD?W2i!*n{dc&oCo*DbRP}yv2Wm8d^vClJO
zpJ%15nH9FC*{O<so*DbRP}yv2Wm8cZt`<?|l}A%1U>Dsyz(eTJdcY|JJ11g^;!Hd_
z3Z@H%_^WZAWdhLi-v<V!h*-)w6HgCSO=^J;RE^)Y+QO~3a<9DU0NR)#Hj)jUa6>~h
zW~V2Zq~|nM#&+l0`ZGd{Gg<cRM0VGnZY?|$g>l}n;S)J|$2@tmVOXi^hGB;KGeUhc
zS@!H$E`eycs_;w{c2{HrT9~L?IZ<cjNnAbfO-=9&zD;+$D<XonXDNKUGQQCb!;>Vy
z#Rx(Ji2|7{(ZPl&j+AmBMD9Hi69GCxw4&*yq(Co8C%^Pxv+Y<yYDg&b$Jfu>hl5P`
zZ4g+Ouj@k;89uXtkg6w0C9-yMoaR#lVQm@+E5RIr2szxx>+V(7-7D9<d5A0&S{nnF
zHNLdP1WHH6F!(EH;M0m45*9bgcdyu_GoVQ>3<9UJm~&u~m>4KSo?ObX!Eoh}qcW8k
zo-ToievJ7~;^mqpbwN1b20l<@>R4=a20r?C;rp7FrZZWNo+!frCO0Q=)|pNeSW+#M
zMicZYqu-F^jJ*jOo#pFk7?ljk^?*^x_;w-n4^nxKp$7ut!#`3_F<pbw2vV}p!l$Kt
zlHP?}#MF_OZkSq@%?#uNdVI{AMwIsvfaI?f$3&Ky<7(k@8ICiyZ~@v4i?7#hLK>{X
zUOqF(6`($V&Yu``zP9IIUhMAv)5gE<ga~{3)49+MxMSHRZ51w4)L=M1c_eMspNw#L
z3l(dt-chpAvITrpX#pR3jo?8G_;QBlosGnLl#UxzE0>$b&A6{Ii`v%saYM$qMJyJ%
zXhEB6$BnD-)dSmhcNbwr)2hF2V+&bJT?0j`Y1n0shGpebwHxPkZ>bD%M{}e=;ScUQ
z;bZ9jeg&)|Nw`)gAq&gSj(tu!JMo1Ic%IM!{!t!wC_ERmc<f5=ctF|@$4x(h9PSwm
zq2(q+aUAqJ&%~3v({}n3n;i{h7{Papj`7n#G!hkXY2-@cHpk6B<ro~us7*y1CcJes
z4n2b(5c}KJoOqL601BN`;Wi*>^w3dJiyVf?izql?2Ic@oK)Sy^@E<!di-%ak`s9Ay
z2W+xaItu_zJy>IBdyU)b%N>2umW^7f6L*U`*eH(!9oT7Ccep}A^3NiKv-c^XXu~e3
zTnY{2p1Y@m<<LI&ZauPro*{z+<T!xc8T=+L(1L+;Y>&MN1-GX_vaY<bJN8a7D_KvY
zS-m}z6`&C{d=Bb(aTQ<%P#aWmCM%fYjSp0Qido6>x{W@y<mMR5%`pWWEVj!;ZWqo(
zuFmL*x(kK540`kO=!v`Ko^chBe&*2=^$v(cu90X}dg5NVW3lVTxB(|(1G+1by23C!
z6G=~oeA}r*6xlGTc+;k?cg8TutH#(pYv7I1oP=|;`}^Db`>Xr=bBD^C+dq|j4is_R
z*)WxKDpch3jjzzmmHxWQeZ@ET*8F;w`wBImn>C;1YCgkWXo;SNsF%f1D-?d1cI{3m
zea}ljKm3h#cg3f_nu%=b;S6MuD^rm-Qc6mG(=RKmhQqMm?76-fvIE|<GVkUT<FKMC
zgLm!H^J@8h5>CC};0;wDy!Y-YN7M2r!Bsq;21!N8kZi-b*jI8z2IVAqBde3axhgWx
zFcX{Sl|SC%M`3AK{(6O9<5I<}&NA1LezjQznc2@|z+AG}7bbS1t28;~mVEIUbqtD4
zWkzTnVf?klb&GV9kc}e4M$2a1jv@T(llnjFe0ajHSG4@kV$-6<Gx7bGE#Ig39ZlQT
z@E6VGwrQDe_ZY*PD#B?@By<X;w$mu~q!XFl-8P!GM;vVh)ggohHX0E_heW(bLK2iF
zbX2xDo8e}s+nZfiHM=f1i<X?_R<&;HsS(kvVg@G!gVJHE_h)!pMf&|0c&`eZ?EQoj
zjwe+S^p)`-+c2vr6K5lIGK3R{`drvwAogw?VZ}g^Q}F6Z<)3o?buRzfVS5bBzQLYL
zhcn(g+~ffwu(dhLcX;zDEWIdTnuTF4EvFeQmf0FH2z$^rE&-nCU-q06e#GZfkDURZ
z3P0lI{hDdV;zqQ-fpR>KyT@IcZ?rDx`qn!)&EGWhdB+$EU2L$Cy`jRRoU(=(FrHn#
z+ox`ZT$H#dCR<MBLujHu6#Q96c;jMbjEIsH25Bj(!iz^wrb&Ma!Xc4z0h)U+V1LtQ
z$dL|9eamfjI!?}FLsq>mRK5P=s^(s*i*%#sDotK$sRY#dFh*DGXTGxa6DnI*RaU%6
zquPpzUT(noviW}GlfHJ^MEodH2jqxY+BS?#?EGQfSJp=qp%)D@+g;dccVuPL&lSTI
zEQh9Lh7Nu6@ELG_&{*h4S+0aggEF64kHq}QN$_pvFT(jc_l=V*hYyF4mp+iZ9)>Uw
zJBzjy-PBVCM6|oRJ4tRjjW;im#CwHXWG3X{o30FX4#{Mhs=)_c49YCUS4aGnT1K|{
zYP89zNa#s7O?D~GGiJ8kZ0|i2IY`DNe58d8z7J2x`gc#rT2ILO|J(_Y+dGOsu;El0
zTcia{k$QzfSj)P)mUW?)b*`3mv6h<-rpWeS&e|8-AWdf00Eg$Pim;8kG_D#;N9rr)
zs%~n(g2kM~OPM*Pi$NNz?&W%GFV~`%Yt_qjxtA=eQmwD^{akPF=Q`idb!9&_q6?;{
zKtH7#J4zKkuOe4v(E@hOsQ^}0!psuXL}JgvsVu|KvSeK3!OScq*pgdF5M(aQk5aWQ
zxk)<5Ii#=li6O$Fp@^(HHJ3#f%ZErXi{`(SvO0#dpga~POoLvy(UZEQQ4B<!E4VHf
zoE8hN&4MJCMt5B2&V<RW(Hv-Q{jB}voWq-kKa%~?nVg(kS3zvMsQkXcVBrS&ro0fa
zX9}P~8^}!>-UwVP&3xGRWDrG1mD~lEgLV`7B-cuUIk~8{fSUBselN1w?Zp^Hyh!pb
zbICCi@bqQuso*}OYb>AV81!DUxsLSpD4i3rFHuQJ4@lum5#lzIvBD(78RW9Mr{oIf
z8bho91`qG^ZqvoyP|+mFMXd5iX_Gt3Drb~>7s{X%ySsCKvA^Sm(ZLniF{Ky^(eD3d
z%^xN2c#RxPxi3HPASlIhgG!fJE%e8w%H$lF{_9I?m6h(abM<_O^_(`t^gT=fBt@6^
z_o5QviSvQ3sR_ze`2(^WuHqQ9WWf!Qv81rniK%Rhe3A%IooK~g0JF6SW*rhImu@hA
zHkFt4xcvT$ERUd)CG)=pYvdjH3DOop=5v~O8nBsQK3uvAT<V6dLeHgWBhan%Sz2!k
zc1~amBdoOY2Zjn9w$E%ew}&q%^Arc^89eb}HHD|L^W~YhVqdXn2zN%0u*a^v^!bX(
zXW$vr=V$y(HXl{hpwxV|)n^g8E+_^AKqvJN6gaOaFgBFvP+iElLNR<hD~Ux?_d;pY
zKSfvP3;dH)Z#xD0&pvI;PJm2=KgSLDyJ*~=oYSA<#<`f*Ywdw=MQr`4(+E&mS0$fO
z^1^9k7}Wdv*>(NXvrmJ|WA>qb2`f2*Rev7BM&6KjRO23SM~J%D?$7#;ZOd)gy7D$`
z?KQ>^-iDPkJnxW{=VxzSFMM$;=dn14*x`5d(zzI@*(6vjxtT_-52;G^4lpVyjVLWE
zPPskt7WFm!J%+zOqrS!|zCzK{`p@*)D6nuSqfzO?ArJP(EK70H98DMJXj}z&0wZ~b
zv`4Ce_)ewvt1~rIz(;|dJPTbL=D~RuQtWj9H5x(p6B%lXb|F9W7j#!j@)jF5J|He(
z4-5;<$VQ2f#*+BBQMM|^hC{Q{IwLky2sIWcs$9#uvX(a0g2GlMnL-+tJ=B`PkhJWE
zy-59N`i~NJGe3@27lSh@2M8NB=I-v9Xdd;``3ckH2s|%8BK@sh_=X;)f3an4uE^$W
zpou@LF}g+xH*hwY6#fCq9WC9l>D2irCES`cjc`uQ%4kl5MjHk+{5No3|MuW?k<O?8
z0j)Uwf0$QT|B&^%8DZ;x3jv(GlvLyeByGDi4`7A^bA|)Q&R}+f3&$jT*`?{<(18LE
zUuXk3{qM_ZgO$E;Q^uxZm@Yc~(nI*OJfYCHQt=`K37Y`+O>p6q!w6+Ewq{VdsRmiq
z2eFajXPFy6v$Hz773RbI?_{<)U_S!(kHSJ&Y^=cL-I-Br5OlSRHlMJ!V3B?V1Vvzo
zw_|!>zpxpovi?(6<e9wgA)1O@Rs6)BwZ3Zn(btSWg7HV@_+veOviO7vNS8cS7&#sX
ztB3aYf`uy?cN-9-qMrVUR^6z~r8Z`OUR3ms<b4<$`;f4Nic7^0jka$4`&?92#;+0M
z*Gv!}C|VPovZsCGsA(&(Q^R6HKQG(MD#Utwrc{rv_v~0|GQ?7oA(5B0317TAQXeVH
zU-Q?ql4`*7&R}KSiKn=uO)G%`tJ=4ld(YBAEEFPQlo;_PY=Rr!yfxLz5m{cNV7MYx
z2_y}d7|b`PAW_I`uUyVYx5+tuiIrifqn7G#wn=*acPs?}K_Y3HY#S{TSJE=E*T^2E
zWy%?VmN8c;D{36&7cFuBX%oB>v__*2g=dL@<t|iP!P(S83{W7zTLSmW%}P2{#XcCD
z_OJSK8c|KrSCqm^nPT>l=H^JmXou=2-y^(Y1YGQP3okcVAzdts5+?Y^6F>sK26z5E
z@(CBnmQ@f8;Yedykf|q9R01<YYXmfSN@VRa7o^Sn?8qy>v?)A7ku|jcOedg_eQ92W
zhv;09pzS@JhqnLRo-_cyQ|0v~M5q6=s5u1&YXX$IZM;=oic@T0y!<uSk)!ES5cs#`
zQKXO{WEwBfw-!YjBrma~bgKeQ7cb1@`4Sv^t^4~7e#@?jUPnMtzzH)2A|gtW?Ww`?
z){qHyYjn?6^DwAG-EwPu)kg1`R9iA59iyKtBgU~SLLTcF!5lM~YTZFhFJlCI!83GP
zNw*a;rB0U{x_}pm;KAIB9rAx5BMW<(QGrY{YLH1}^`;1qSdu}p0GI@Tf0LV1B9FY{
zI*9@DSLJ>}_tk8)P$9d7sJPV3hdkEqGEtxwIHV5(eVo&Mraa!LkO*M$#$N+z8PTl(
zo~mk-Vg)ha%_)vFF>1od$5JaS8HKvY1dI4aPSox*)cf2ed81Gw<&+frVB3%f$$H%Z
ztV&{op>%-}OwrT3aC>JffYClOD1w;NhrKAMig}}fbcO!DyQ_+cy@f)tmZt(g?(T}9
zYuLBVCMJRu&zs!*o3oXR%xQo#uEHpj0efn~O}TbIUkYK3ni}P})_{Nv_krICDdkO8
z%gZajIZ<u_DOh_|aCQ#2Dq^t8sH-X%t8qoxw}b;ps~9qO;{ay?R91F6L%%oXz9qe4
zbL6t?x@U+2aTqXDU)f7DrhIv_$Qe!5LSbAMW1XZro`74{$s@rDdI`fgC)%=CS@8~I
z#te0<hK{ww6{mRPJ5BL|bBJi;Ilk!oEKH*B;@&eBS0eVLxNk+wqpEc8ZX>T!?9`jU
zX-CRy^kjZpdgz_XkyeqVr69kZ(F4n1q16cCAxnr48%OZJ(gNfV2gY)$nz}i+LovX8
z0aLMbpxZB#Y%vOq6|}@CF~{L}cLLV>I@UNvtQ6wNitz4;#KuFw2#o&60<|tBG9OC>
z+gEw!P2hutTL&9Wnp9@-g_n~)Rk!Hfv7ZA`qYT?3>)D{-Tw))2{x9=@D_k)bB&?<u
zsibGjRiOAofl{!ifVOI)2GXH5>MmyuPxS72r!S~eGFP<q7a-_`^J&jZhY_Y<38(aZ
z?f*LE7#d6EeNtlhv5R7ru{TE%$_ni(P&9Z$K8ME5HO6c(f_K3uM)!!qq0}9}aSTmH
z-WWqu0f4~QLv<^HoI(VrQ(vXHH^51+Q5|Q_eD)ZHNh&)+B*L|E%?t-0As!<sLsyM3
zwGATit^Q<FI*X;pa&xf^D+k4!3x&<{whj!b?L@gYPw@bq7zZdWx?J_iC@tKVEsdP0
zV65sH(~)YNv$!m0-dHZnnVR_aMu$*2quR$+;Kk#5sKOgM>CSMGk;^w)z>_p+B4L=v
z$BCkBk*tJPaN;3ZWNxx=OQ2U}0t(gXBD&Q)Y<8_eK9qS70bOe85ek~C5mC5Z(uv$`
z?9X8|jXyX4{r6Rntf3DFhey4Bk@_0gftSyi>yi-lpyF4*OfuZf!X(Z5cQ^e;8(_B4
z-neN16yh|WL{aVAuG|~#4aMF=;Y9ArEX0eZNX$B_V%y{oHLq%GJ4%*F*Hx*!z_Q#?
zYC9LEEXK#4wvn&@d=*ac@^u<dR<w`C@pRps!CPt@!S>W=fDfuS&HN<OE)EOHb|Ga;
zdAB;b%pc(;U1evciGOMKg5PcVSj_4c-nX<g1|EVI5btm!jmX@*kI4yI!nlE&JEw^l
zi*HX?OUq5nDW4dZg}lCx&#t{?ehRbu(A3z)5zDDD2iA58qGq-;#M?EDRrWA!twi&|
z)Z$1$UjU0ZboBmd2&r>CuX*=MF|X;?V8@W=0c0W;-huuW_2YLUGrj;Pi-<q8t;Dk8
z#VhYelKUz5Zv{ncza0Dr^@ul)iZ`<*hvb9ljxre;j#n=nR^o&7FrPk%;o$JtA)dNE
zityOa;=U2^$OjDO<f2_Jr80Kp;TY6SFUm&5ov*s-ML(we^u$G@CB|+G2Y9HNy5@(6
zDliJ)-L(7CdmcIATI2g#zu$D!_bhhT9rZPfH>T8oE~Wkw<sS#bpr4&Y!>FI>Y-1#u
z<ZXLqXlIkCucFiHKHisKrNIGuD~Ho>j>0Q(Qy=n8y)Pp-3AJN{h_#XN7s!ZL_r3_S
zBsG#9)VN05QL!cBNH~kNv7x||AUbUIjk?KKQe~NSv5aa+Psoan4-w9cMuC@kw%P(>
z>)VB`hmIsDKHUy^V6IS7$IFZ}B%F=L&iJen&SPW^?X5Mq0s2?{B6MT4Hf6I2LqnEC
zi+V$ssV@wv0@PN{Z6<kI9r<1a>|EY$W=w7~@r!nw>62lAhYt+EAwTEcX8PzhGiJA$
z7-COaVb~6O(9D$81--L?hMj4K{Af7SR8h`Dv~CY2(U=SpFNEyNoHNY?@kPkaG-E@s
zJ~MRX%{^g4RTz;ay)+Jy3Ih^Snl}vrYRwzx1ci0wENhizjafEAAogB1;+<g_pdix;
z1_G7aR_;^P$pP(}u&@J$w(5>Y&?<VVtpOYi&NCHu5w6aiXzz-Na9?N?&wVA|i?oW{
zn_rvFuMGnP-TvBWfBj(l>x%Xt--+%Hkmj()ySq!^LK(U1ImQbBQl>LhwU~k}oL>@6
zY=aQSJDH(3MxOTRmDJNjKq1+j(Z^zY87?<6O47vKc5+zTM8jo(FyyrQl3KXrO0*4a
z(Fo35L!rMP7o1@l_e6)ed!jh!t1;G&D$GjLD}M=qoO4=f)Y!{i0y6)oPkRZU1~8)2
zJ2x%oSsMUDd6wS8`?Y~8S`Y76)Yj5QmeRD<jZJ4_MyfWCHCJ3JDwdZU?boUTVTTCc
zxpXXVA?brsRFlBY<zgE9f0&FWmQsZczf*wFzr(%KXHVrq>KYtQX8y!-2}b(Dy@@NZ
zZhsG@(*6QIs7fqX@Wp+r-E3PZtLPmZ<apH_i~2Z+O8(t=p@cT=OXIe`gb;*|g$$|y
z^ECNwcXy|aUJdz8UOVK`h`!|)-aAlzI8#FT04hTbVbmbT2d)a8n2Q!L+8bHhsY`tu
zO)iCrB?|dbK|r^YGsbpNR23PTQfKN7omf?CQ_ZSAxVI>Ippe~4o6kM>%2%kT-s%Kn
zu$~WLH<2ItQRkw0(>LGNj=Mk)I;yfPSf=i^cRp<QTka?L+v>O7OE^l_<e}^G#5+?n
zwmu=lQ*s<TU=L=Vbo}pL9_x(E3!jZHFNA|x6xtoHV5-N?EwAuwbXiBo?WhBHJDS%!
z7ak^k0(#@J?yZ#HDWe0<y6#Pt=O(i=+Zs6&jpS-vAI}OMosHHPx^nU+hMlipBOP=`
zy#k63a$!nJ51%f`jalM(lSf;};eEQOd!(jHqjRw_)uH5sU6{2z@A859T2p0E#fGLu
zxjTbq8Y?l;z8BVQN`Mv{=(cClNYIxYC0$>@i+ihrridrMjt)1x&bIzzld8jy4R)<N
z23>AUFX-Yst=sg5y-J~1Nn?V}qbLb_HNmhFVwRS?{!so_Et3HxO9zL)*xk)#nCn(=
zNw*(==^3Vm-s)}n4o?-c3^`UX0L%h^23$fF*lgtH^=>ztBDN((t2@FPth1<aC?@6b
zXNT}-x4Unm&#ggFjevTY873!qo|Rqo2};J2>4q{Eo}Dv{=i?~Zf=sbxY$pKq%1C}0
z-e1WJ#-Y`+`WZRWwFCSRI8tby)q{Spk*2ofMvrji5AiBNt`~sdxZN2Tcb4AB`m2xD
z4c`T0_&xIz_&r@F^t^`Ozpf(son!jy5`NzYaNJtwlMH^}#@F!sGMGpng$2VgRQsL^
zo{{OqhZWvD{fumz_2FuT%_SjL<!4wh@zRraXP7qHoqh}NB;aqVrQqZjCesRH(#Zyj
zPdIGb+!0O)r6#ga+3~IZ7-uLRi6aB(;|o)LXDl*AoB?`^%t9{96tjf3Jafo!#B$6W
zK}C*QKFgKWr@udN)-?C=H76#y#JNZ;Rkbi$6aB5Xi(NW1GlkJAqnHL}j!$Cbwh7Wk
zozJ^aZLY+7qt5q4GZyPy8#%rMVEBc!NB`1pwQ|{h5lt8JnOT;YWjVBb7_GHjSmw7M
z#kW%!r1j%j?%QXxYFh4%ukMI&M-cwB{sQ}QJVeKaef3#h*!e1gqTbzcwR0mNq44Uq
zti^-z&V^^L$n}#;q8QQMTU-hNeSsTwAn8nv3ecfigqBJCidH821!!yhc*z1&`X-;n
zr_}f)pSA1*w<Q87Zduyga`NGkPy}vRp!!2*3HX(Ohj(&zMcbdhT?m!?SgYLE9oawJ
za><40;7=c3@VoA${+^oOHI=6(JIRH<8Yl7Rl+{=%HX2Y}!4PkjXy38KTBdU(c7Aqa
z+sGxfRzvSj+{LtmE>hnx(*AzXbFW}7`rZ9t&z<_~{^5QPo)$R#erNBf6YRU6R=_3%
zN&n#BU>{!BFopd+_|`jWcAo9Go<V(tg-2~1AT|NhHR_lzd*(~KWxjQDZ*9D-#jc4e
z^vj<4f>r3ZZte}Lz#)kW<YP}i9_q)okps%X1c+kdsjHrv9qa%>1-_XtZR5G4p7Bib
zrA^-mYf_o^^M!FjEexuYng!s4n0QgI@n#en1dnq+uyx}+_ag)fMb;-Krwl0JkF_u{
zC+m-u?<^GsQpN!ErI;jsBtTh&2X^d<Smem>vVUG*h1uKPRipJhBb}@b{Cvp7d`{yN
zWFDsdiH!YN2(-8?y8_bf4E19_UuWy$SvV>-b780p5QR5ac3^0|6mU$lV|zXtUvLfd
z1O@Bx0K}e3#AmGUIdE0w+$TVb674u(a}SXN7(J1LbVdm>JmC(!a_}-saU9Od3_MUA
zcrHAy8K<x+j++?s^RS6+<-@tny!_Ya)4|G{QLxQ+e|Fp*cHmb<&s;qNK45j+CSP1_
zXQP8L8h~+sKU%qGZ1Qw#gnEQ-56;YYVHS1e-NL*=0f~BGzECwvpY<7U0d@4dw~o`7
zSVrZR)P~5dh!4(9m__AfvQ*@hG%D9h$Us+0G>NQ|2^7w#K|PnX`z)XNd6%<GNI<KB
z)F3`YZcU6}c2^8YABc9#aj#B1($$AyiCW$lKH?z7Cpmoi2~el_!o%hC-ZS$H9a3%j
z(18y$6|%ajdFVPSub7R8a_>8$D>xOoj4ct_*gd7VF!|7*uyM}41te2tNLSdTUX0js
z;kbIi?(fYt!F!h5<2GVjJ+c8?CmJ;kjBc2{t=qW;?)KZl3(BW*X?kANPoMDu)a_4=
zYv<Xm1H;L|S8n#1|KHa7?X#-(iGq}XG|a<M0gCFkPT%a@l_LVAE@Xhz#g2DwkUef8
zvS&qrR5~VH6^hXr7&r~j9hNhxi*Gx2&2-mifO-qOaSAU0cJwGk(D@LLrSqixnGT@L
z3|3fq5LM<tQwAABSDz)BSvQJ!jCjX<CVmd)*8wi!i+McxZD`g00{ntyk#E7$$G-r3
zW&Py`YhcVsdMvl_a9p?ge>v;_<-Jv(_c0x2WVk%;@Rk&x@tgIRaqTbDnpM|HR1MDN
zkUs*Gx4VmpV%+!lJ0bzWWw?|NklW(=eo;jVIsX0^V9@ZF@>uY*b>%j!>~D%g=nlPq
zC#hc+K5HNl@A;WR{UhB#UWUS~h#^90Srp8c=q#=i_qG?6RjPW2`v?7^B-vV}7~MVz
zCz&;fno~P-@4oMs`KZ&)M*2dC?1R=}4`l_BeRzaVsJnp?LxIqa?ES;uo}(3|CT0lE
zb5dMw{uZoLAh>Y9h!ng>`W*e3#LFPb*6+zoDV4kIp*&a(X*YRvO@b=Z#{Guseq|Le
zgLIOFON@bveQX9mbSXau5~nKWF;;wOWa_=-oMX2!Mx|sjB{!A<H+H8b?|>a-4q#b_
z=1c!>GsynZ8BWBsptj^r%fWShl~<#KkqOlc)MSS4_8%ExIuseE!7Pjdks*WwF>oI%
ziXjvGMxVBHsH%ZAb@H*<k1)6^?i(qOD=5-P1zxX0n#XVe7>;e*iXWO`#+3fhr1YgQ
zPY47z{fdu>HMcj1SC|p(o7Dul2+vdLJMvj8unuM4`l>;9nRD4(QllYjlFB9H83lNn
zuK=648fH<C7y2{{FIVdQa}s9adE@j+L;^+fdO11UR&iL}vA#F^ku2FMJ&^Zq1IVDT
z%eAu_<*hG<EfJBUJ~%#Q0Px5;LHj2=LH%x2@;1VivrX%h@J0A2zWBlpiR!dI@={d!
zI(?;PUmN|P`z|#C?UXXF`XgPX8ej*5J53UQ-3(Lui_#IP^?|?w|MEWhk)K*c3>;G<
zsF?&s=`^#j5r9aLU#$Q2zhtVVjCHvar~pyXs(^qUx%j3bpf)ZDjE=j?1g$iW^449<
zog-|T58Vb(rq;PKa)=7sjilwdlqMdIY<hj>FR2VrzwZMsUO6(#d@7NzDDwQj>|y_>
z@cy+EW$<)(-`>CPb{u$oG4~hCVCoF15*f`qa`GcBOc$D=Njts|FyewOAJUbJWme1L
zTDnXEe_D&;s6i_N5Cte8&HQK*G(SeKqZ;`-#H?fZBC@ztz{eid*d`>cEmmn(yYjDt
znqMm|z3tQ%L3R~Sn-+Qm%BhIq(#nespd(KLd7X&LC7ycI7H`0t#N=j)!4=jyI?e_W
z?4(%2zYf7}s)reuDS?aD5G@B`XBhNt^b;<<CO#j1Z2bB$y{OwwXZZZGsMaa#7y^|V
z|Fnc1`NB`pI>EB=_->}FF@OgKb4UG-H}Pkgp&rO@f&t1%208Oa7W-k8tojZd=gImG
z9$K4;kGC1u&Yd2~RpGGERyl~=5oTdgXW<P#g#fHb&B<pNYux<%grC(DicLkV2@$X2
zsr5pAMdY!&+rfI|h14Av>LY3I%3^&a>^BwWL4nF|&HU6d3T*l;D%bOHo?DN6H!{Zz
zsSZ?l#pmH1{TpH(K>uvm;f{|a#%Dj7z6)kWeJJTH0sBP06&HT`8~NDhW0s=bkue|k
z*qxAwC7TBn<ba-DPtj*Pm4nAK?+OX6sdsK$R1AgeBjxgJWfx_Ha8hFsh``Ut_5aMD
zveSP|`3_&OFXI?W1=N@H%Kwe~F@x%_=qfN>0t>Yi4?nJek)<x-+q;0=8KFaYpg{2p
zN{L`Cf~kxl97vx>B(GvWsO~Mr5lOSxfK}WpYAsy4=U6LhQ=H<~iqX#+OxuF%p1aqc
zJ%{am2g}^R{#!s(;4==&>c_537YPX`(Adyw4c};ZR^R7xI6`2h_zR52>Zj_tk?_#0
z{#d8c5Uu`_QpC%O>-uc<&*({v*6L41`#4~$KclyKX!UPJ;~}u0J1v0YE0xgDIw2N{
zz0?clf>UA~leokzagC($gz~G$V(txPw<MIDJ8tD+e6AwOKn|E`Dn-i>=)$L43ZJUN
zrxdN&JJogI>ggI5TWVOS8Wy@}`q^JLgc&`W_2B!tw5rb()n$@#*ADEKrCsG_?Rpek
z44JXrAZt)$!VDydBtFHlS=l}r5N9^tsX8Qgh257)4_=mAfs&f)Gh<BkY8#(`$~9h4
zmB+SlpIh#gjn=E5JkkgMbnVz@Zff&?fPSXX1qY+o!t)*D5j4s~YyrS5um%7r<Ba}z
z!}?A;pPV8oCvBB>Zg+Q)M2Y7GPC^byd~60t6_A4%k>YTY;5-BK+S0aO#H%?H3Rw-k
zD%KDQS{TVd*;QP6pHQ7JL*GR1+JniT^|MXYq6S+SIrJ({zA}(@PMcSLYS7V;0ci9!
zSsx4D(_Pq?c&e=NWdNl^SX-8fc-D8Y*-k$PX}kztQ(sSsenxUA_3jY0^h4VL90rJ+
z_qFjZ5UQC2F^_&%Xr7W7X53k>2w^1siVH|@aTJ`-up9P>UTI=nd?bR()fHYia@oyB
z6h78<3p8c69WHfa_GpI!o0v$*)fmQQ<N~eXqJDWFCGOYFBaSeemo8=5feI8MbgT2r
z<H0P`a*u$7I&8U}gBD%`BC^*d$YHhFLgxl=sOcxgZ9GRkl^Yyfhkn~P^awv){ORG(
z9{%j(&jJ1%;?EKOv|BgWOFSlwCgp*dPZFo5ktjBCc^Y}G%&FsjZmh1{@Me<4DpggA
zJbIC^+ZwH^UTxg`=7Jr-Fb`m%VcD`6Oi4H>K#!gcpo0Pu+~AP_4U-UZ*p<J821q41
zU_bvfagd~znxg>VGV&A7HL5GASr#vHelgw+Zdz;<_nCPAPCoMn#X<xr_`nN+1}8Ml
zFgiKCEd5jy%RMlrZKut`g@qDA)B@9QR8iK33ZF`2SWDJArkJfmVzx@YRdI?DD}iBX
z#|e6JNdjOFM;FCIPz!9hSBMMq;*Y2aOkNU>@#^XR{%(UlZ>K9@ZYpS6V5W@R=-5Jf
zKoUAs1Rxe1aF{FAB(4{`!li~;0e?4Da+teO<>}Rn<v~2Kwx98MriKgKdBOqzzyKq3
zJfoy5KwO~=d5T`=i0_AU*<q^!;oA*;7<0Qy5Y!~K@bu>}yRxm%!T7f@vz%ctvLg>2
z%Lpa3mXl`*>yfCk?Kl@+2wYDBe_ZG;9QRJaKNM1rMlaC`MZ<zKuaJ(4$qj6qXA|#A
zOeXWfi{(U*(8L|ywR97jr7y_upwL|Sy#N-0ffuy}hIbnvsh8f^j)5|f6A<RsPS7s7
zM8}<=;y=?4T%9|Lnwfv;=CcF#cMK*cL0uenHq24Jgv+Q`!uQC=?euz`hwl%v=C8j7
z=~+Bo&Cxbj-51c60Iap`qo)bq7WW3U+W6M)wz@z$;A5|Q)N_pM13%AX2Sy7(bl%BD
z3pP2kUMZ%swG@S1V>y-bm=}J8^b|^=YCgMxsrm4KMbnuIXsIa#)71f=8UU7<$U4!y
zy#|z1^i5V92LZYV3bWA1`|D|~QA<}#w5iMG!1jT7mutO~0lOi1e@)P5CM{_sqt#_j
zYA!linOQLfS@ndx$KKU~n`IKDc+bQ_r2sY^B##5K;jP7qF+(m<q*h%yAsYl*&?hk>
z1C*ViNI-pb?+iI!U&ytCoLswY%CU<wZrnk50VLW;13Xx{>hsyKGL<H$kDx@o`1Mzq
z2NA8a-8$$V^xB7=?jVx~b;ZqZgrP4z>(^g-NWj+uvE2~vrW#fqa9JpeJAi*6rv?0c
zrDC&+I_1WL3A;szw3IC=opG>dSa?GBZ4_sfW2>Tn8hy<9O8Ay}F<=U+n8nnJu^3^Z
z!U3T}iWb2lEZld?s8}Oe<sHxs=4TNK6;1Es*)0EwW2bGqm&*VMi7j+5gRJ7(F+e8`
z#s^mQ^ddK_W?f{pqzy)%B{mr6o%k36Eg;JPp=R1C3{)97MUO`0zU>7sXUPYcm;~V0
z;P4oYFNAM3o;Hj-mUB!NFP1<nM%mA7!xe<r0aJbjQ9iq1(;dZ$5nVQYUKu$^_{2|%
zI5-Bj9eNQ;Q*Ag^oFS4y;r)I4c?e1E=YBuLgxy^q$s=c&cr7%BtYS{HVMdePpSxIz
zo!omZM|isvL&aTXs~$*APS=0Tk(%ipgoh((EGUV~^+L`W`k$Q`OTkPd1`!i8pU6!n
zsP1N%z6(CBLZCrp$i1_i_ps8g3;t8PF3`I!Gk0B9z3VUl0ss`FKhj<K2R@?RDB89C
zv_wVa0w$t`v0L|$VVnlZbuj%l%u;6;rK+qBg_YV>l|r?+4}#o2$egbLT}BN-t_$ox
z&`i;UO~%(xB=DcZnN{87%W!%IoJ4N(nJ)cc@dYsIgeERAH7ur!0U$6p&Qp6Cs9pxp
z%ZK*#PtoGbJ35;cdRp?SMhmrV*XXK-#i}pSG`HB{ZF|tp&5hiJZt*5zh<65kbSI6O
z2~q`S;t4KqTX`uadnPxozis29qU{|3*L8@@@XCb^pCSR!KO=8OK#If(hR&A7HZGjf
zdtXD1hPI$bks!qvBx_BIGkh||sVRh54TlK=fv@iG)i|pM(cbSoG6<oP^Xl&vhvRtT
zPOd7_m$12isYqX$Iy{}Dy*BIcw2uz<w~Zf|nnplZrgg*Hi=VrQ0ZvuKf|u(~`<x}#
z5fvr{9rlILLSG1++CWb-8AXbfU!gJ#eV767SI8Ha2>kp-BwptS=5@ZXTgM2IsO?S^
zfzY=mFKkf*mVe?rN32)ZI>TuF<94>_`tSm2BMvlq9HCicGzbk_TB9d?wvWOK&*S)&
zLPed28<Jy)4fa>N#qjF&aFAA32dHF}%Blt_j1rxhc&Q5&KrblBJlQZho3LKr7|W5U
zcxLgAaVtodjCbiIPJ;f#PF&e2aAv}becDg>Qf_JD4^tfD+>uEAUyh(Lh0i{u(>)Sg
zyho3<<W5V;W^8!|+~4byVaSgduFfpQA%M&j=-gz!ng(ZhDI26ut~Otc>dhyi`>)k}
z`X2V_lPlFls6zef2I<6K20wf_d-LSVbP=jdzq-JS^;L;SYJt4Y(6aam{WxY%FAAAu
zS$LFTFkpofTw&lD?tTl_eT!*&%VpZ4h{E&^DGfX_+KptpkvWS)^R2I7$(&iS>srRH
z8-#Mt`+TS^=*Av81e*_OJF)eBj55Mv94~a$eo-49jV3XUUJC6Lg;??oZqkMU#7KWh
zSr9gf%QHjmZkrep=m1?VL;s&TIr;4{EF>6Hl;0)(lN%^(jA1dwXd?fCLi&(Xoj5Q5
za&ZoGDS*N~!$af9I1U13lCnW9<GVNsFT=<O@=$xGq#p1a9EcQ>mC;uFc}v}H`Q#>C
zp)POYxXX>UUIm~T1J34HBoZSwq}g1(Eq!PvqZK0A7!6BAl#-NO>#vlKw}&eAEI2%4
zFgT%jES`8n#~!*PWTlOBE{$(W-q5B`8TDL`dYl{c)EM*Jai<Cxx#%`%<W6OUJ_UxA
zqGh4j?qT2|Y(swxFhRr<K3bBH4gWRE!Ydrvt-(a^?up#pKtGKp2qiv(0Xkr{EV;Lr
z6vKyk)El}0eZLwD&n|!m(IdC%$F?F5ae+8&$)3fIe44ALL_Lii&Bkrm?kO8(3Yrx&
zxPq;492kaIc3j`u2i_PfMFh!m8|**OL2_-2MIXjFPeldB2{bg{jP)^2B~*J6%2b(f
zyhSdGbI7#vLP2YJ?H-?4-(2Jsyp;WTAnrbPt-dfk-SrpCfyFl($2xVM$;1<#cqtRV
zvA$7>pH?v@OF~{I|EbkI8d&7bfHVaFqhB~~fZ_Y*q~^BNH1fEhuRGVL4PFD8x}Jr6
zVlRt~8~3o?YCp^YNP_*a*EwQ>z0>V=DMW@H+m=wF)Xbi^p|H?CM)4d~8dT_Lc4tR%
zYgJO9Xm>Y6PgzFwmUGf*57C2tKZ5>aU!K<g-d?9Gj0R{V*njIU--)88V`h|-{KY~!
z%a$A{PQeTl%J43jp>G~p4mIY1%9S4RLo{8*Y>z0Rb3wo>M&7*Qwa7829MbzEbOVos
zrGuJ+OT1n|pHf2P0(^^599%hf9AbS_wI))Eg7I5?L)~ML?(QN^OHpx$k$^=QM+v~u
zwV3{<+O4D4LxpebqA;t`CUtuyAeP>}%Pb@IC^QvN221ouD#rkW#YtBUk5S89e&hx5
zfJ^PR5AtlT0KvhI(P9PA+-(ZVCwd1aMqKy+5B3bsi-(ObOiK$o#-+Zv1opzEFwiyH
z4A%>tfN90ZQBHUAf)b4PK)%zY8y*p|L0XXDtr`^eNrO{xY0B%3q2(EhYNUEJ>W*zw
zo!;Hu(HRXlW|B-xZEF-!tkl{ho(30y74GCXaskazP!mS0Kv7E+Tq1JBK8oO|-QA7g
z<W;?&7(wy^;i;i!IU2x+wvv8$i6Q?;9FrTV0J>zOWu+I6Ly=l!;fVB>-7X-Lr=gww
zy&l;r-I0&+=WyttPNId*wk`HM{v18^L()&l+;Ziqz!^3Vqfpbs6=@4YS2K<gKvJIZ
z>hk_xXc5Db`hao~X(`8LEG&BGN0&%3r}~5GC=iX@m&G#TRu;f@=|`}rDoR6uVZ+^J
z6R)j*2&dBk!(Aun^kpf+uE2777P{}ubeax2O&TWpLl&d?yL_9>!=+~>97v@m{_p7A
zpRd9!c)x^W-LrrIG(ONx{ZDBioKAW)@%sB&e7pVQBHjLNRq@52vNy#yVVa?xzimz8
zCE%!>D*+B>2E#+t;$Qk=rlk#?L*JLEuNq}987AzUj-?Swf#zi#`^gkNp*eSvQv7Rv
z_JMbXQl!wI#WjS`AfF$dP!<aSz`(w&y?#|om%${Qg%g15)eH`GS6KDss$hSf?1pW?
zI1N1<^H44fDdeECbShl9g?Jwz%y75X?-sww(y~1lE%KUi^a3WG94?e*QGT_HGe-(E
zdAH{r3WLKbEgg#BjjN5JmISz`n4aRQ^F{)mU`N#v+ys*s@nYelhe84aryN@e(*ZqF
zuG(imt-<bCP0$s^Y&D1TeXb1v#<|rExV&Cos%e$t+8HhPYnD6yqE#l0@!(p?*@iQU
z;XcswijpHS!&P-43G)>L%GFUGk|;U@^n$s^{^U2T0FJE1GP9hVKP^e`*v}XKq!y>O
zo9Cf0sPV7EOEguXoqc+Vw+Tb*<Eqnb9|DSgkpYf&>Q?=QG9orOi9g+aOrHU31iu?#
zC(s<nTEHs$mw^?srHFWins8t^Ksl;@?N7*7ZQR-`3gMx48jpZC$7Y5M`h0zdAvr3n
z15**Jf*^62djq)a%Y@VUoYK&1lM4i19^}mkVoOw)QL-sC13v5?lo<v(?2vCYb-*QA
z)4T*m?y@fw0IH}@bdKD7@%}xY?eIr1c-lLfPGftSV&Rrox-YF(EcxHMrvF___@*|k
z`B6<4ZyG+5(9A+I#V9<IgcTg-jW)oOWud(>>3qEabU=DvgL*wVjt34fx^NQbJ_1iS
z41w!D@qqu%j=gUC{=VHgAW0|;Ac4dauXjk__731%DQ$PRw}+Zp*2j-lJ=5e<d*8vh
zM18KMO^(+vCse#+V|$&$`+Jdav?t7~%%<RNe~;ddTJ&~wKyU3%$KlqLY8wzw<}(Zk
zcE@Zso2m^FZU*MU5%mOri7YXf(#zaz14rS;-8<;)Z;={AcDLK>Fx$4*JKQH*Z@b+(
zJYZw*z5UKUk~ENSuZ?lQkUc$YA0Q)zcIbsbQQ;!cB>dcL>I~%(ce3j{JN8+VDY;=N
z)OGN{MOtttfN8DNjWUd-OwFi@nzG8_hVB`%0J1it4o60!pt#Fq<Tpk+hnZ}Qm0Yo^
zw_Gk@{T=w6<Vv#u(5HY8DAyvEathgIxw6yy`<dagFkU4SnicT~xEN}Hgo&sjB`dI0
zH&t6oQ%f`^<7Z)>dFxTUi7WWSg>Rwxt6cN9_xD!<SMWyMDaj5YBko?7%m=1qp8T(e
z7gz-T=<MR5wRvpf@kAu2C@8leS0d0+afmI9P$6g|towIb*}rp^?n5o|A@t4_Z#)Q3
zu>Xw)cKVz;eVXet4{=L@9hlzHnTO?oDIJ~R-9yE23GU8JzxiWBJSKGy3=v(BlPakJ
z({`xX3YvE{5)F&aDrpaDHX!v-{f#te*=3Zp=Yy=}Mo?&OaDm<&xV3}cVNNTo#HnRf
zLc(&=&Q9JSQrXiJr0<j|j7M#brSNOSmDb(`m#=P?7Z%@;sbs`uGO<#e`R6}#Ur?C3
z5r)&kFuqd1N*ZYk3ta%Ip?<V2QYe&xv@EB;-)gtI8g<6zeUxzhOu@P6N;5qRlFI-|
zIN`D(aE2*rO$BaIVlf<{HoU{umwdVxJ^mTu%RoxIv+b(lF&V*cOvpAh3JUf|qP~iH
z9x~z|KJ<~ynzm~kR-5l5E^!<Tbcgn7B~1rJJ~`J60`Wu!;wk7S$U_BvA}EJ9m1{#X
z)-9%33EEk~l%kG>urI*LFXs)NyXwnI9s%xKF==^;n)F+MS@dSv>fV6-bim&bPhy`Q
zF#1e+ScK(=7_PMJKVk=fbp^clf(psADb*2r^haZdR*9#FQ9s=PX&yOry2!iUKD8U$
z;+5tt$t!Y17@HEXc*s^6WKKmbdZF<Gtg{=IN9R?f0o?{!X%qew&C!h^YD<3()8IWb
zcfr()Mf`)}E>u@}Ftn2Ll|M9lB)Z<8$cNa*Kbw@~I_0S@xs)hzzZ7Xe5#TkxWk)S<
zBFmwa<(Rxy$+$zK2cB2lNoZEF5y8z<Lx#45v!Hc!_%z9#q&y!&pW5q7{tFB%jxEC)
zr+fmqave;?KEy^q&Q{9*iMZW6IA}ZMzZtznx%nw)Pqeh_2R4xY91|Fhk@5)a#EW6;
zr~^jca?l|Yion09#|bPVUTO~+soWJkyyW%drB|3Lzb`=Ok1Owi%0^U0YblsUq_zfV
zr5d6iQ0!e;?bb(PVZaocmE+6YP+#VHZ3odwh*!C=OW_ZOQm4NFIOArzS`x$<UWmM%
zou$FQjyLZ9VXw@$RD)8d)pd#rf$la9f8jj<<%dJ#8AVJshA~B57^U2gB>)#z*()mp
zt)cO3`X-=gwpl+wsm`f1+!9U*EY~)2k_Qy|(j5C~@DG0ufMq#cha<KdKouI%v^%-m
zKSSdXJ{4|a9@3fIIz^fwP&2i&lc`?PbWJ#DFoHtAfiw!<57h0-ff$K2B1aoq;qWMF
ziz4V@_uybVajB4gR_M5t8nN*X5`DI1|JVJ;kEufq+QU9P-~ZXMT<a1riS_5U<!D*c
z$F%<Zl01UzwEy~;KD&p1f5tE7O^BCAm)qcr1wVMR`gCZ@%=yHlZwoMGPl6^oEMZD}
z2S*P<Nwr_9%(XP|s4GFlKxmI9dqh6%JVo2`tFTimq~g+?0hu|n{CW2Me7!`c*YfdY
zFf-oJ(iLB$a6#&~^ElD3XEEVk_5Q(dGl25HAANGCJqx}C{4}K}s^QFsKHrFUq1()5
zQKd$vrXjiU#<%D?o?iz>v6ta&1{3!N&8|s9gVIuh7aS)#D-vm$k2e-<o(%~wsqe4+
zY5bX9znjM~cMQ*oQ}y(%diq{Hy`!h^{Z*QVe)R2p#eIFfKrtvj5gnnQP?XMZak9LE
zabK?KmE%0o<Bu5YL3a)bn$_G-a>IJRjEyWG!Z}y^VU>&l9MD||#y?Mj@G=sfonT+#
z(!HaF#P}<I@_ph@L*#f|3!nVCk$_@uTB(a|yvHag=%57`q?=cQJ`Gp|!gTfZ)4Mka
zA!bJN9fg=^p$`>*hk{EO(OSI22AJ`1;ar@Y@pMYK`Uz@BWB4gU0_wHnN<&I8y$nQV
zW>;iZV^%K3@J)!7X)^n7K@tUX1$6w1AKwV207zQX3UcoC`y~at;TIIirIyqnIGz3*
zXm47MMTkoa{S8i|%Q=TDPkxi3xz(%e1;3GLI=!X8iR&4iA^lB01I=<i$^2_-c?q+m
zy1FD^t5Kn>NHu3cB&i%UzSHcV#`7=6^S|&p3CPsrbiTau&3C+g$==}=Af?jKuLD_i
z63qU|e}17q%fQcGpvi}Ndr4bNh_k1!ZZg!sgoQQ|zk_V6gvOhS-D7})OoBs*kPIcE
zL$EV))<xb>{3KI5GR>whgX_>2Xf4f9RSLHp)xSz+fL`8XfHQnur+^#Z_|fHx5daZ}
zWL}ceTY^y#)zdFxr>PaW4uj9%#y8^W17$*&4ll0!2mp;QUkTf;%SpF!yf}@fKl;%Z
z@7j&K*X_2RLf+xUhOn{u^;bC50K?>but~v$r0PpqOc$PRgmL6bH1Qxhj>)x|vJgYs
zJ~MPmq6??QYE-e>nTuq-O(y7>8EGLvOE01KfLAq!(haH$n}cK>fNz0Bf-MTfXU@KM
zSizA<AtFbF5teaDwWCDCFDK4868$?iMUsFKC&L|+MC>O`$!g#&v&ozwQJi>pdH<Bv
zMxGf=9-8rPb9WiTlx_M?7?z7>5gt`Xjs(m(BfrwvXK@ex;IwUbW@-t#6X=`#(3slE
zHie!dwI@mFjEwzry$TmdAijsaSMu#xuszb+xh&aa9~Q!sqXNr_Sx(i<9rB*|B*0|f
zmAL4Et3?tazQYl^`5K~6*qsU6RAvOx$bY|m&~x~*=wNSuAGvAN3OqQHs+RAA%$DBx
z0EH1eBGOqPxfIS4KAfXCSd1x>Q4~`eodl@h!&l;vEQ($@Io-`FHB<|UcA*<8b$NAH
ze1H*g+>1Z6nDF!%(cC1S(=Xlj<Iyg<B|CbBnZgAUN@28IVYx6R28R#f%OGMB=r=ql
zgN#lm9}45(>23$HazfFwtk2^lHy+`-Q5$oRzee<Hp$(*LsUb*iWrO}GxWF4#((cB{
zG4g7aBFDsaZ)!&v6h>R}<sCR;ds08QNmpE?q+6Rb-^H=isKt(Hn?k5cWO*4+ut;CN
za>(E7Kq}%ME8XjWqW`(piKPmoMg`!+{?;1;>*Gy#veRgkDrq#}OJI>;Ue)&U^uy@`
zbsg`FD9gyGO^#^Px)3#AT%6>qeNR9q2S^b|<;w^EvfQ55hm;gDF@DXP#r#YLl|~1r
z!hJL<%`J1B5?Ot69+Va-Rd1A!ax!`d2N;e3IA*x}ZTZfH2xMYAM*Y>yaqmRS=zj;r
zI6FpPZbk72%c*f}9C_B{)|CpELagx|AnKFX&pT~tvBbj$1~EcC##a%LJRzBI<pzuB
zDffLi?yJ57gS*ORhjdp}sArgpgnypB>8Ij?TrtsGe5aLs0ntEFCr~X^!d`%lUM9n&
zZ&^yFUA^3qsvv}w&NDBx)=_Sm!(rHu5Z|IV*)?`M#Xtah*f?Z=sEryT_Z!dpM%})|
zw(q##Ktex42R>Sr6M$N@o|5}z)aI{y@X0V<AJFBb+7`-C(N-N8%GjjAeD-1<qcRa}
zgS1~t+1*{4z(wKD)gVO6j*EYv!;b4y$_Y9!EHq9QrSP$UfE?F^<6Kjs`s3#X7$w}}
zl>AW3%?zi^1G}00Ga!n<6&U<(P)4l>-F>~E=N0>zEV7;i_;$-RVBfK0l5ff_fFr~-
z;~Zc=#~XFHpBXa3vjIEO)#v5{V+$^juUg;{w;)bXoX+HRhj^F<bhJV|FojOw!H3Sm
z&=1_LNgG^W5>rVI^ENJ06c0(P7`1!_2_sG`m^eBK;4eTb{Bj)WOyGL_%qJ5(sS^z|
zqXUtQjzx4Hm2zRBy^AshDf%)`pMdjQ3H%~>QzcT(&#2y-%12C>9UwY{n8-l(PEk;S
z=(i-T0vZjlewS1OjnJAP%u-8Y?ADYYtPR1f(R<W)&W+}d!%p)+D=*5aMzjlu94Ply
z@7&jX67~`Ur_+2y^v4yG8qpuuobE_JyLv$)`Q)nAl8w1?9Ys?vuP*h?l`9_cUjr5*
z`LuDnoz^1;{1rUv|6|{tz`hk&UY4X68Ks;XfCB5oCT>sU$s;rw60FZxu{tl~#ScLI
z&-3gKD$5bGL&|c8tzH)v#1>D|GycT816ukD$CkYYn3x19`MiR(SJBi+F{m;(-C~U|
zK#*o_8ZXE)hHOY_2Lbx@5qL?kV9QLxV1F7%0Y<8&7eEQ`DFFCL6&E$l{gl+NIgB{_
z5Al-}22Kf;&V)F6xSOFtZiV^|dzg16GL#MkU};c|SQ0~laY6<|8A^xTsBp9$nK3gm
zX2T5q_mZh4<Ea<l%6w7b$R+zMQ%yvGOdRn5QBs^kYUbbryq+@4pmee97Uq9qO^Q8(
zgS(<%5n*%PXsf)olyF60{z5DcQ8bQIY65i&%5zmH8<fgTfEon;_p;Q#+z3s-K5|l;
z%Xn!!0}~#a`7K0zR6wu6jb{u_B{~H_k^Zjadqsx<H$=Jq8W-!izDQy?G|x-o2L%NX
z3s8`zJ-Cy_r$~&;pH6WO(1~JU>}Ze`mpYesU#67eauZ4#uN0t_Pu)WQkO0hximk&A
zeRy`WM`l;YXpF>Iv3iQ&WR5O!ia@<7fr&WV3nH^zF|l~^wR(JlG;s1+#c*|h<u(=B
zOI^;2UCy?3xoYp_V7pWfJ453Ck|R2E5-p57EPILcij6X!QZFT&fXF!4bP0V?yI<T}
z5yBPdnou}(M60r@&B0y$QRRQF^D~oGfQfudc|=l#gUU0=JW`z8n;l4GyU@0s(z$10
zVnm0w?JBt=NBRA!90HJGpb{ZvMa~sn29)-gNf;0gOGQFqpXp@hk&XH|8q^&Vo*mKD
zhg95yYcF!6W`w9EcmSXTbZihOo77Qi@QdljMM~(43FrW?*rsXjmWOwQ)}1ufRwbpJ
zcLREVf2TZvqUNXJDV7w&c6W<{e8XYr=0P$vd+J?K#CJgvlf4M!>_~c06e~!79aa8Z
zBjwLE+T!4r08l`$zg*giS*sD<TC?iHdL=@In=mB@u71sM#)=+Zv0lqD6_2%hI~Dyb
z+i<U4W4xa9GBM0?H>ljg4mo8u!xJp_I!38eiTdAutC#$rf2)^lxz+m`HiPs_`GmoK
zyb!yTWDAmp<QGE-5vE!=0h~FDBp^`;GzwA)FKZe#$xPTLdfhf!ti;_pNr-3)4F*M@
z>CYAhshXkDR5mg5n!Y7Wq+SUh=~n|q>O_U~OhSJP*J^;J#ci{m%-t3qSog8uu{OvL
z0FRTL%4X4>@m4-M*CQBw7_ZXz;do98I1hFUGH>e?PU0WaC0u|fbq6zU=?)(%k9WsB
zkoAtJ5I1S-8H%s6({|iz>7`B`PE^<ztauK6Xx%|0>=f^JsKdFx$3I%RA1Nj{2P5T5
zjPFjjZ1ddYK^I6R<Kd~p2DVHcwf%&t%Qm)8C$ij=lL32G+A?rS-Dn;>s77b`$q?*B
znVEnNeAVo*{?(Sr={{-P6C5|8q;yblX!xHSvywgj2Znw4^kGY!yd1D6v~6H+_^8u>
zPSP=Rq%mJdW*8&8JY+3|jsF9KZa;m{)d$qP=<MbzcKSq}f?u=S$>M?z(())x592j?
zTO>ps#?`Y^Aq)FjG@k1l((hZkmh(Vdym1@mdsvkTn43SYpHw#@u=Hsi-GVmNLVf}2
zERjOv0jrDrcc2r#iue!gtKO3)U`)t_Xu?&|z50J{)O_#r9~kt}(+90+;xl2cy&Z+p
zjYsi%V|3xTDk&kqc=B3~Jh0|REL2FuJzZ4>(kdwl6CGh;W@7KSFvY&a-oCut2aew7
zc~4ybe+Fkip_$CTWUcH6sY}SQjk+Z3n?Iy0I?B=(4DOi|Zt9J&REwv*s6wI@2V|TL
z>~cR7x`j#?gN#8@7X&>m$$+tF-aE2x8Y0hI`Q5s3DjhvyB_hPDtRc?T@FRW97msD}
z7>bjt#3$|_wLxZ@I;S8h#C$rrVCc71_r(=xa7!fK?SkxF$l6DnV2VkXIeom0qI`6z
z#p9(AyXgYg1zo6uULUeBI9!J%sHxCz({jsm{c&0Ph_f#VylnW%(2qgeXY}m>#immE
zC84;y3R=;BdR$?8Yz|Oxxgn|n2;J1C0#&pg)Nke&y!x$#T`W@l#pB*>0r`A|5|j(I
z$>efX3ii>HTd17$-O}_`O`SlyIDISo>GR~%Ji#B?!s6i;CTzO$1uaZAaxNAqzrZP&
z=r_;!f*qMqN7!(<(pdOyoYlg`lA$-4*4BXgYKGDjDT7KUyI5{+D+NRbMHPGgrh)0y
zqp^N7zqpjXT#e`9<n>g3)9?J94IK1${f;9VD@XpOOvsd>yO9<QX~DRHUe>=wA3|^9
z327_gWp+h!WnSol-rApXGD!+Ry(OeBdS-1o3><9?tF8o=^}2(SVwT*%6W%HCAC{hE
zM%49eqlJ1?t(D_y;oq&RB!XA2DJVR5^FqW^Hz#3SxOwqo#TcHbb8bl(NBd4wzInZI
zk9tRsDA#<21Qkx}?}A`z3L#^1WYm^!jymlFB=}^;@=Z@_kKI6fPaRsbKsW>>P#=~`
zP`q%Zi5Po#qyP<6M7*%v5TG?>qhe@MtXKN&`U8_Yj%~qvvPRp?GQd<<zX+zG-=E;E
z*<fzRt`(v-I{ri$1v-{Gb?UEDDUzfB4pJzjM~+h+DnQ`M<`p1IG7XQLSi(!B55lEw
zrK`ol=g!~XFVWQ=8Fo>NAr+YleI?vMp(I}+=ZXU3P?t?l=W!GEKYC*!?1B&Iyx)zH
z7WtyFhF?F{P>&UQOl=sWAQP-{zOmAXcqk$zHxxNos@7j+S7b;PEc|c|CCLMEyg`%d
z3NR31SXjX{H@pd(W|_*e+lH#X7qnxDK48dYlr9~Aw_Nl_J;k`LkHd0EhPp;Cw!pLr
z(UFGej8-`kt9-e_KN+rbR9a`5EX*qSk4((3SMDv7F>+wZ1gu%6B?O`W5)fkO(ntVd
zSn5lR&4z`($ixTw5*y%yl9_K;FeTihn1LvK1c*Wdh!%e2Uxv};t7%B)c`-p#NYF%r
z8L=@&)(TzWS{d8C&i&{T4qG46(a!aKcuO`gVV3x8`HWUB;yLvfXkB_KUIo~Z0W2^D
zVu)ALg!D6+i(Y8%V3OkwwgQoW28l~by7+}-R;sWII9e_G=m-)YTsYH&!{419I^m>O
z0gmkx4q_E2f`bZWqotRO;tM2OqR|p>`<55Z#&C4urk+2T9H-jZh44VV9AM!TeO$=G
zbn*Tg)xO}(ZMSq75_DZE!*3GA=~vJECZJBuU~0NKcwi3kG~H>rZD-WFD8vmlZq7B|
zNE&>|d{C?(!`rZ9KhjDBjmS8@x}~|)1I>v_SS|w1s1t;95XvPtCSkS5G%HC{i#?{P
z(-@zV>8$_m<#+VD*|-Nsy+53wSViHdRe)h>P_-joAmJ?ur5~kVWi3B4lGxwFd%&WB
ziap1;hX@hWEzZZ~(%LhGj7Q|goE;;I1#2mzFW;keF{m_$Lb>%NYcTK!P6WMAufkb|
z79hUo%THKIRRx(d%rG*Lsvvxz0^SeoC_jvpUvyWxfk6Yn)*wBepkr~0Y8Aqtfs@wj
z0}(DImE($=FJHfZasKx0s}~<$y%g6sPzuT4Il3~GXT=y(FWeQ^CDEYrCNg$T^vlW_
zF6r!xo8O(kd2{~r>$l(E$4zMF!|Cg{uU`K8?Js@fQ-4X}0ORJ5?_Rxl^)i?Fecwpl
z6qj}zViFjl(a6w&pczn&wDQo7B_NHO*P_Rfn>E@FWOf1y+dV<Wi?-nJb<~zfE(7|6
zjl~POVAOu$WAX%VRzlHiv`hC*-X>ub<d(o|UwD?80B9Jps5$UD@Lj#}M>UgP4?e0l
z{wOEXJA`lYCHILI#B1;C@04O~$kwH}zsNM9wCRL>!nSQ1=J#`%t+7#TQI3FaBF&vh
zPcnR{w~>!?D&tA<dh^CscRsrYBn=zwJ|?KS8n*i_;^@&!%Tec%c-;Tb_Tc|7Y!4n(
z1bTw%kI*tk!vto7fl9`g&cRVzy&Udi40rj`>mI5XVwmL%oUrN{`FCaI5ULYx>j<eg
zCBypag%^_J?Q2i<(Kx@LMwTl-Tqj44czP#M@cc+GrNP$I`zeIe57#T<;0r32MINl#
zfVU@CZIszy^kD>=|AcHOM}&T0%e^YvG?)DC`t>xQ58lupy_B96ghd3$B9sws1muhT
z%U|iXroxQ8LL1pYwI;P5%li;?#|g(WTXSyu)-y}c9`wEccwsIo$X@ImG45aAISlm4
z(%nr(>osLQAe)oU-~NF4ARAOUAtXeu>Ov_u=jASKG#Txi3{rLEb5(g%HM=Mn$$*-b
zmvO;`*`KXN%mUb0(O+!Y>#?E0Y?B5K%JXuZUct+8wPAWLP;cQ%^5LTis3B(<LMhbR
z^;t1l%N9s%l#3&qN%x==XOrJQRb)@9eY@_!VTm2x<o9ruZ_WI<-G1JZr;AZtEgTZ-
z!gQL0<Dk;0<n5OBeKi$VVtrdq!Fe*deat+V9%72IxoCPG0oUu>B%VUIDL7>nh>0*z
zd34*Gt{AtQA7fKuAe-BD<I0u^CH@CmMj$d;2I>^(g@-J%6&&jb6nLkhtPF%QDE&c=
zPyEZCFyKKbuF@ZEgP=u+!WLd~g@a5nIyrU<`U}+g<||H`C3^mfrk;AD!_CV?yc+c&
zlZBfZtzyj#V*Y$_i^-8&Dp|FYa?>$jaS>kzNl|8I&gLLiVR>YZ#LJX|vg92xSb>a?
zmguPrM`2+Ofo#@hAS6dbz%$36?=-qCB8w?gX<IdKx^p1glgv438%l{%!>r`>q0zY*
z#A4j8n39+;Rx_<FuDe#~Rb;E#l7pe>mNa9?jdRtBtU3@d$&GR6NtlK6CMH*U0}g=+
z*ApmVF+Y!q<F?4N0taB)-Hl80uyG6EwryV3Tp9y++dDZw9a3(SITe%J#;Fuz5Cd0J
zsTR%X&f{~5Qz(5So3oL~*+`UFCJ-}Gi4e^3#cmGrWlzc34fUN|nRXv>H~kg6A2I#u
zd`^PcFwIiH`d%jSzkZUNA7AMYBFsu!(u`}!I62hJrH|4+7A$Agf@KmalPu6)IuzfU
zAZF>fjYfFvwHy(t7$F2cBW02k>tUf~S*Me0$9R_*QBGgSK<BV3Zbc~d`R*Lfg|ML`
z9AmqAk&?erlkj^_pzTL-qN?18m7+bHTarAqDiRj+kcqEeOT!QaE3J@Kx3r%vzEX63
zuQl+GwI`gNaNx_Ont0L3zZjUr;e@;>!JlF1P5Mylq|%>F=wTQ1H@v&i*99SVS_5Og
z+d8aBGmRHP-f2-awQ6TXaz<5Mp*oFgL{bCOn_`QE#7#(IjSldn08O?yNIbvE*vJ{E
zc~WX^`tYgNWGhuS!8z3Z^(C%TpgIAXfxN4SyipQk9)UI8Z-2R5jUD+Z--1;tIeCA6
z!=QgBgG~a5@-=8EjG`bBG95GiBT;=K9iCoeHjLKHuji{wyc(ED-8Yb{_sB-yn+|)e
zAoHw2HM2r0d^uO>n?f5Cx6p^Gy;prxp<!>Eo(%Uz`>e8@zGVrj_k(Hsj{88BD&h_d
z3kMAZMlIAK#Z3><%b!;7us%jsA4y5Ao+a{=_=rkWewMuHkXcjFS99flSAPpPH7I)(
z-4aIbU)V7XUVm)2Y$Yu4i|WgO#tSp~^d4_qlvn=YXFXC9qL;$FO;FRNL;yM=S%M+6
z^Eggbj^xP1i_=80l;3_7Hq`j6M7fU=3OVGxefuEWYu+N3lmr3KBRQ9EJ#o#Rg>Jsr
zWql2-SbHQ@7m^t0%y2|G3NFYk8qsUMB(J$lY~Dx4=%12lP%19+(4D0So=o?RR9+r$
zV(S;?yMkph4Qzz&v{G~3rY*g3&4sNbA*9ZrsOqVXR}CL~(vsWM^%kQl$PA2CWS#d)
zsN8n*XiPgQ7VqT6hXW@QK(18@tGB|o`k51bxPHo`>fgA%!|s>60{EXeciA!DKj}c_
zXFS>7Qzvst^a3a00;>Kt@uSHVq<kAjACfTmZtm0WpC$1EHAcxpyOtD~NnD|sa<iDf
zq{I(NKnN$xCFBnFnC@#j7!jnDQ3nPVY$_i8M+ZlgH{VE@%j$F1R+qCDd+6sfQ-o|!
zWY5KaEDJqp(e+I>d#H6Wpde7dnT`swYXKMH(6u>omUZ+m$$TWFqvnnq*1a}4vQQB~
zLyWvQX}<mGOgDkyt>=(&1%J=HV6*~0N~zl-;Myy148VBiuIi=g9OoFw|FB+n=aRsm
zdNx<%?553soWA+#)vs?}z5V{f4-~+W^UMSzR@J%pug+e>DY*1j&@EteC`kIuv!^E~
z?Vi(UOIB`G_huUmc8KbEOZ3^>7CD2_@}khTLxqPT@*P2(Xqa>Ve}(M*4%9W<mcQP<
zaQfT7x%j7ZL5t9s*V`NAMd#KFVGggncFR5Ya)ZBh2KM>=r1>HK_09RuuipLo?duN|
z$+F3>{{*T5%I))_-eUNm!8E=r)Kag9&gL^5V1a#p0%ia8>fJfu;A33#*Kc3l-?#Un
zPV`M$YU@Nbbz1fLSbhFZ1;-3|G4UFe6(P}?#w|kMLhE&%x>pWMk8(@x$)$F1K*~HL
za`4(Dj8?$_78G!%uZimgO{n6f<GKQP^HN}32t(!B8NkA~?@r&o_(2210Xj#A^uPXe
z_T#S~PQQKgN-EqWN|6XhxVsypR?aZ$Hz)$A7&2`BMyQl>k6ZWm{)v~Mu0k-1>i$Ke
zZRo>A7%HotKn0UyZ#j@Mg-LyR0#NCWVYAFhb}>GVorwnkGf*}N_V^@Lu}dLeJ-HYx
zy*bn`rU9O|;_o6Ned1N+vV?&jybH~t?<Y5rD~0tJRc!!AdELDW&w>Y5f<b8U_KqM4
zpEwNx-0Pvj3_fuhLb|tifJNbn(*$IDN0=;L%rD=;mh7lc-<hBO>9sp8_35Ad$=n-W
z7fYHc*2bOy3Y)O9O>tx<qVal1?L91RCUO%wkcFM!*+adbTq<YOFbqA#@#zHUNLn~>
zNh>IK0t=0x;yEpCdgr!|^#upS+}8Z=Aa~SPP#!BZ<7ks`q(mlc%ic1w|FgQ<Gm&rO
z;(_`f@p@Z9gyiXzJZ~by>5N+L{@z}<d*P1SokRDqyWhjdZp%IFv=8aA?e+lF@Tmid
z9e(V>W4A?*Jxt|Nd-%9VkNfUHo4+4GVvipW-R>TjKf=T#eC)N{ZkJl>b=>Y@o1U<u
z_C7uC<KqE6Voe>YsdtEvoENL=P~JW2HKp#g@sZlv>$nG9eu7^24*9VMU7=C$VOx7t
z>)t+eg*vqdJrx;`-0s2t#YK^iBeGe!3_9`l_Bu!VK(}Ie@NTbre;=H*+wC6w8`1>#
zrJ8>RJQ6v7&p8A~r<cK|xMtckz&yO==c2lQnZr|V%b|zZi#-(0H#~gYceA=zNfIEE
zZ|wql>E6?z95?Xx_JNnZ$FyC%G2Bv;HbMyylgf~E1}9t?wL=lNakCs9Jf?B-e+YZQ
z-nie!(P=sfL%~OIVp(j5WH{`tBZnii@9nWKrRSrM*~e(7;WnT58~<z6_}?FAca6=T
zKi(X+8Xs5R!T&CvUzUV=T3AbzHwv;f&|oyX04*>K87<S}117%}5rhI(;Z-I__e?O*
zheD?Ww<%FaWtXr^y3U%^+lm&KghRf@dfNdKLPnuB$~U7S{DXu!{EdZ=%|0YivvWtA
z*23t<&K(S4OacjYCx?WYB*!+JrMGNeZ_GkObT6UIM3O9gVvtM}B`F#NGn^2}ZSDT)
zMj1=4R3uWn4co#RSWdA6Z)sTeY6mr;^Q0e}-uNhQH9(_MM(Vq~mnz_@GJlAi-#gxT
z36_O}X76G5>R$up%E7#s6$37)l%GC)cc@;}F8HSuWfxdt*=K#7ZYDk-S-amHpA`3i
z_D0D^7@R;d3=CjwIAp9{f3f73BYauLDZTBt;BC&?_B-%=iO&}~XL*KH1a<n+Ldw`v
zalYHUzXG+tfXwFo<xc2sRzbZ_p>qh3aid9qOotf6ATTy!==x4Qg*JWICmb)qu+`1y
za|t+AObEiHc_<DbR|U+5g;A8@mk>X4r~AFVc4v2D+*>7eWkzONb|hOhqRi<;xd0qW
zu|!P~%v=H!A*Ky4&FU~udYp+XJ|VWOGYr`=MshJ`7w<h1SqE%wc{5bc)kGl>av;d7
zDvmNUrm)Cxnhh(3hPf<w%ipieR+z*bK%kf$j?>;VyO7-AGq;{k24HB=8C<8cyI&}z
zaRqL)SnXBgk@jU`KOgNLpL}D%He&CO#chl^tlf{RR_nAynVz!C+O)Bvak`}KRKOLY
z(aJi_TB>(vxpveL=sXw__p1biOrT)jeu8yv@AD<eHy>B+X|H|!@n*UQBLHd`emjRg
z{PvEf@Vj>~#@}fRe)kVB&;B%k-vhscztesAJ#5Y3*Y9B|{|IZC`uH2{V-2&`5&m`{
zXS+3lJnc^B5Pt*60~F*Q{$gA0-lU7aQ>YE7+P#l0<3C8*hn}?eCz$i-5Pv7_4t9Tv
z&$9#QRj0KNIXmq!{&p}=r#r#t?hMLydOgVB0m2-9kFacK+Jc^Rf*$_PCQw7S)rNj{
zJ7ef)cfSig?;iLQ_&uEAS08)c^$*(k8$iw7aVMY|XuUe~$CKIRd=bUVB+XVIKaOXM
z^yAIJ4A6TI{*6E09JS!z9{fA}c;oMXycu`l-_ggL3A|5c^YHTH>af*?j1%ZYuQl2K
zkrQ_Dt+PJ?2v#}Tl%t&l*TDcDVYA`-wOZl&W|K@*whm?MU>3-ez~4!$1s$Irc46YD
z(^fC>uXU|0%HCRD`B<WR)b=L{SKpe#-+h0t%gtOaVHi^wMmvr;LvL29ynDEuufG$3
zjKy2~ZNNpUwLNNWk87O3WQ_wz?Us5uIhur*R6%F27tW`;zg?=KyO^t#9;NgUfLkp<
z|A3y;)yJCvrX7Ib2A8qbZXeL^1b;g;aUDwO_@XZfl<*;U=eHD2k1J{#A*0nkfOVVU
zzeAdj;2@xh>9+RQJjn?8?L(*{qq=x>V`{JG!#1Y6x_eO!*f~t`t=*Z3>F!i4(B86Q
zVvoeKcczCE>?T#;T`Yr7RDF-OXsh+Zxj%uee-+MY79dj(w<NHS^t;bp#or^E7uwYA
zG4**&Gcu+bnc_@!aI3aD2VMF-q~Bn|qwXC1_={Wu{|J`=e`y|;Yif(y-KY8wd<<bl
zK(o*DJqYP5wYYzXBbatFe~!V51HA1E;hAQtw>J;gV$!h24y<ty#?%xyNaHx_(eGg*
zfpanqHHaJ#h#Vvn{&pAvLgZCx#TlmwIG9E>E7UI^s+iL{wZ?~8ki6u)Etn^<00*;>
zmeGf*=K=Tb<=KxP@Y{sym=GLHY4)f4F}Hej1O$D`kNb1^w1;7E`SBoDI|Tj))Yk0q
zx6dI(@6F;>@;b_b%fz4aC_2H5RWe_5p_hNBj?kjDX7Oq~5B?6P9DyNpLO&jHhv(69
zMT<=X=+H9vu=Ab0y*Luf#oq`V5U)d<2ecawdc5eDVMgEZT<CQ7>DNzIftct0ws`2w
zik&BP3Qf!sYM9`zM?C}#2S?k43$|NOD0wlDC)=l?8>cjZKA`prloBk(U|!IX*Q4J(
zg1xT4<ZVPJ;9=|KU*G==QArr%3UvGy{Zik?^gO20W11{l<Ia?(ETH2wzzOJfaS3{d
zQ_(7|=>bi;zn3Nc6`_$MKuWx$pd#_GCm&{Faue#sm?oDnU1xG|86>ofoi_b#`|Yc1
zMo>L&&|g!xsJqiWwJ`!lTD`gG7OmTqwicq<{SKV;jGKBDxamODO<f6a;N6Z$n=CMG
z)}pjd5@zAVpEHP^zWg5dM7KpB2?uoB{5zQl)X*CDc!qkEhpMI{2vFV;!0@Te2%W_f
zjLPh{@NnQ%;2LN~VTOu01e@v|P~+XHq%T@sqz+o$y&k>6v{#_rF|WYj<tr+1NWVw)
zJ0+xd$a}gqoqSpeINWQE2^qj}U%Y(t?x%m?^F9JY_kdbFq~8h7VV5>{cXpVAXE=)p
z*1AVAAzhjh03Fe9pwMo{W9~`>WL^B3hB*}{br4e{xGY`2H_Lbkr|)P9j;MwsntZ>l
z%eK%Tf>9S7D0qY-sQGw+W5sXYQ7LM9(hIm|SY1jU(*VauvWkP*VXn%9nO}H6!go;x
z^=(SiI}LO%Isu=a{^64FLYt;cO++x$S=;evb1wFPL`DGo)=wDC>_xmJr{BJL_kqY=
zBnVqQq5yhb0)f4N0EHIjV1kv2<^T34DlnyA%7jG3e*37))gQIHOWpWvPZDX}cAKXO
zjyGz?XIKM><OXTl|3R^;sh+)75SXt4J&UdSEfqPUUmqJ9Pet>4`*JR)L<qsbO7$PK
z^VQ8t)g93Ak>=kA@>*7R5D2V1I3*lL8weo^mZGP|>C2suE%%OSghvMzn0J=MzY+Fn
zW3PaAe)|E)6r`Qw<tHGWZ?NQ;W_LpUW^#@YYmc~(9_^D}a6rG5GDGOx>$K??mu!#D
z9bh-<moPbU2k^W1J+<ERe~=`>l<3}RD@S1y88Z=Nj32J4b!wN8dv7|CSQI8oQ`|lk
z^O-D~3WB1&Ux7UjbENknl{+M57J^aaO$fU#X?(OYuwqP)w>udjbfU-iTKi%T03*Ke
z=kxb~eG=L$d$Vzntlt+BY11+lkJCjH)$!$M4l6L<Bn28W;*(%+B{~+;G$U@>>mA7x
z<O99ZtoOP^6zmDC3<qjw9*&c6wIG0*Oa#DCJ$ncA%P`mOwiZlLbj9&=V9@wunkq4d
zkjAj@)9)<Jm}qKsDQ-O={a1|i={yE<R2<@ahXgN&hxAL(F{VCGBt=_w-W|>7!BkKC
z(Se+HzgwL4N!7Ibgi5HynD_o39OI&nNfif$3d}s9RuTddOJ+PhZAtd;(LC(8T7Ufj
z3@Gd(p!9JA?gcb7Iyv?N+7JXn`*iB=6Smu@Qx^~i{o=rYY{K7tEVX~2NRTd1{Rz%{
zH&`qLc|4$bo6*9}4r!UXv|6w=BwtGS5jIdj8)%<MhW!@R-);d(O__i|U}C&IVS1!1
z_D!dXW%X%7rbktbQGi|p62|SXzWe^odj!Y*E(tDrJ^IBC?Gx{_zegkA-^asR4CxK!
zr##&m5vzLv(~+I&7+AJf>R{hLAQuG$ufE@rxegBIew3+f{z0I?|Danzi25C_jj$UW
zNIromZn1rW(fvc}B%RUwNBm6PBWT(m)APiC_fi6`<Y6<)N~?X;3kc%^p-6<%UJ!~2
zXE2AQn9KoDWbe^iB`47KBKmFLpAm%ak2?%~ux__#O*?-RMhw{mRI1Sl0nubnfatz|
zBr$$xe?eq7F9l1LriXA=|FBv>ZmOj-Q&ZeSxCK7;)nCu)gjhr|idLWy!}5&z+%Ekd
z&@ZL5efp(mIuZ_ukvX7d4~Ta?plLlgq!x}OjosdxhnLjTt^)pc?o=Q;Zz8C8g6V@c
zwckE84uODj3F7)t0CTs+bKP#|5dVboPI#LP2-_cYTJ%eu>(0d7UeX&4p?ko`K*tXw
zKUu$K9CtVmfliwd=|wbrdq%l?N3?zi`$9%U{M!L>HwQhU@;d?*U*gs|AnbOqcc_@M
zaT+KYPG`~y(~xOeDDmP0)jXkz?O?!pB7pb1l7DS+tH8G`Gs;ARI;18J55<|&3Cer9
z*Al4zXd>oKk@sy{&Nguz2S<!a500cTqP4G&iWyDrOd@~YSR~SG9gu|MU`)>w7H781
zbsZDrjQ7M=>GpUzk19~ov;r3qdD;$WpcAIR4klFy02&Y-Km1KT5siP?`r)rWb{dNk
zBX>Yp{eZCg!HoJh!(}`q@!w(VP$B`vG)|UFF^vK*1T?nUKK+g*2JY_j;QWfg1yzIV
zRE>lPi9<Y!fLjJ~j!vRO5)>SEj_4PAez-@3A2C5kWB$c)9g&peh<2CX#b>{FAO~{9
zYkEv)&_pcgB3dHE9#ZB*N<O4{KcuaG*qcgGQ}+nSW1fidC2<^qkJm%;L~VB%$d1H$
z<<mSJ5>;}zM-}h4CBX-~OU~Pv=S>hJvy?K@U=CVz4g*Sm@$$QOAAb6WPhCAAfia24
z4hg~z1DXwz5**I3r6bz-M|3(di*~dxRxhGDX!jf*0?CZpL6hHtj7M~6@F>WJ9Uf6L
zwDgBKG8kV=P*_1P&*M$@;h+j5nwxIxkhpImst?BuyoZzSxX|7{351BrI0OQgav_&y
zFd5KLfyp?Wj_G$otxA?@?`R%#k#5U3SiyhL+{|ch_Ecx#KvOOB1SX<m|EPsidelA;
z%Q&D4j_3~Jh{SqF$aMhY($$QMQQ4j!0)so3rN4be%h99XJ^DSu(&LWk_Cz06<KB`>
zz5GCJ5=<TuC4AJIz!_(<UU^Pzzg3*1BO*|a5d45Xo5@K!Eals$UhVHwzKP7&p&7g(
z`BV3Z1cxR;bVSp0L`UG!5!FDqJx3$}KJuqHsP8p-)0z5t(r4fJcCar<AKz~mNS~=D
zeX2y;GvhcqB8Km1OvlmmaF+R+d-p@hM|Fh^ELtL*9}(pFM8*2;F`kbdluOJB5{Oeg
zBI?v9^ys%+c`3ya?KwC%v=m~mAeA^Myzi?TXg9N*!xs=M=6gId-zI(q_Ur~?5lM*R
z(;bB00i<bc$fKkD20c3Du}^4k_(Y@ny%zm;1gUk{n^4|yOHy3DHm?}5k9;E{$V-2Z
zF6@Xk_K7w24`{Lu5C{20eEI|;{$W4@(WBO$Ad>{SFr8Cb%DF!SzE07Pzz_g3QS3_j
zPG{O~MXU5jDerD~s}7l-<Z}Fjea79`a1Txxy4hh`(D!K#Nc`aYG#U~cjN3i>#jQW(
zYssSn`c;I2FQtg>Ue`qXJ_&UF@e%z767Ba6B--!o@jOhq)Mfganx!rf6+3Rh1_`eP
z9yue7;FCzspVDn<a7g|>^@O#?S0T^pB%%xi)zd?OBU%IKcC!8ed2UGH0q<EL$k6ZK
zP`iiJuGpHqdnE;a(1ktvCP)Q!==Tl<>5d>#u{LeqO5a9AvyBNp$3%3E39XF*ZKKjZ
z(RZzH@fnT|IT)DOmN-?JgJ}(3ynOZj4{zT7`0hPT#dvRzesPRrg3U2O-Iy+p$28&z
z5kV7@!c9m%&jiMV1cTFkT2YeN`+<PRcty32sn%X}X<RvUmM?@<e}781Apa<e1jTLG
z{1eKb#&pDv=_Y&(SV>D|jx?|Mfj-jQ9CfK`Nuly|b~-Fm?jD9pF40RAhYHi8F!Fdz
zQ$Zx@m{8%EL{DRanK2D{9MJW|zCLme+6G#dZPGOww5d?E`Y`4Xic>u@(Y46s)6sxk
zR;YV#WiV}H0;ut9%1qnR9IPl==npY**z8A5B2DNho^%ef4@vpJoe=*vA);!6{M&vf
z@C`8S98G4qrr^6g;|8z9j82H@pO6%ALX_cz1~BPSwR?2UxF6`bY?)`8m?SlIKDSpn
zVbkJ-^@23NHz!09P7aRDy=jcc_d9B7-sD>LX+zLzPJ(HWifMZF9_u5}n;_`HFUo9z
zBrbH$pOrffvnBYPAf#PI6EZ%!4w6*5bzxwgzyVabKqPdU5YswAnJ82_&MnZiRa_u3
zAD>oK2H#NL3TWiL5GRfi$R@<#OlC)EAkNtVHAqNxg2+oQ$zcfuI@o`+)RZIxQ@ml4
zrH)Gd5{Q31!RDvL%TI~mo5C{Yt0RD%qF6z70<}mWzpC!=a1sR5l+h<F6GGy&+o4~o
zn(mOMJ-RhLY!_B*+^Sryb^)s#$Q@N2?;c@B#DA)T-C_riSb>83_Z{_bKcHW%bxJxu
z(*qKH_1anz)5{Tny#p=NJt`v7UKMM2Wa@29Nqc45<};n-5I~)>h=<i@uCW({2dBiE
zPYD}NNlR%;48)XxcuIEwQ(~I}qVfWgodk4b1zrBdkp;b;l<n+wOp(r%lt|=t8L|G;
z3C+l~t3^6fQY@JY89*=w-jVC7kWd0IX$W|xq=PdRQV^f^+?3AnDdE!TY+nfVdy`9M
zQT-!%x6nPBRS`z}K~%is4@mSCwEf~8|3p8s&dQ#+5}wRyq7LY{YR!B<y;7r~`-$lx
zYiiJR6D1IIC&s#xM$dGQB|pHzYoYy=RGI+P1mXMbkF+MZlEJ<}M?_KwBpe9#x_qJC
z4SaF92ftCePrpRwc3~O`Q+3BZvI@TnQdX(yP6eUpPlWahmZE(V&{b$aCwo9hBp^H*
zkkUv%&=}B03}%x=T^n~=9YOofDi*veG(VV1^;@g-Oel5qTEyhbi;93Sec(?c;MGt;
zH4+!A`$tnjG6_YD0qeB{M1%&UhZ7LU2Pg^J_s3&-AZSbz;4KpTQV}{MgQ-tP(*KXQ
zcj0f^%Jzo83i!0C-I&ypd`;@+M}fA?K<O#aPA6pg=&}{7*piX$Kp;7v{ax$7_LlaR
z6=3E$&)XRs?fZT0b>Cq{l!d7aT_$mTaS`a3N!N!VL6;S(Q_3h`4AP=xZlH!d+%r)I
zQRz(T^fa)CWG4klo(}d!V081yd`)E(FNM{W0{u)u)}?^Csh2)`Av>u9UAPu%(i^Vz
z1cq&U84?HDc8{2HSY%osDg_ml0{c%PBTBIuQ)oG*pea%?+Eb=1yul1=jLg09223Q-
zuOdnn)R8y%vC@G8131)|W(=-P3j8Pqb2S}}4dpQ!YIam)==v=(#Q06XpcpKrfw6%h
zSLmtq7a1oNZ)!9(M9N5bdcHngCzr@L#qSI=74r=usgGEuokABO1=on;mTwS;W~R!*
z3!+`-2=bye?I$~GHcm^el|XG3vdW%tb%w$bV}=+f$5?D&{3+k>-he?j{j!qifbTMI
zAleIw7KqAh#@HT--{gVKEFRbsWWfXh<4Bn#Cra8kJg|{NamPcO1vaZ$U}*{tI<-A&
zvcM)43ycAn<no5DoIPo9Z72selLwAmY<NkdQOyF={6vP9G!@7_3~Zj3H{gv;zu1tB
z-;VvzuX$QytNmyXgQJN>PgxO=enD46h833#YM$1}=4p9@F&2pN1#d8!x;(96>W(_z
z8}$?m%P7g%<6|TFhI{#D=+z8574g92(=dtE(<l-9Vy5(wPx9n3zw;p%&ujuk3X6lJ
zr!!vQ#LDS4QiTYAB5$c4s%3a3`kXUJPKa`46-t5^tKto~4c<UusZ(^3nM?G`%LBOW
zLEPy<ztV$#rRR<D&1cnvW+nYb_|@F62Qg|zpOpH^Fz{#k@AQWkCaO}7@^A_IEG>dq
z)$>?afPT@10lL75tOrF`x+*G7g>fZv9Vso=7>USL6vrAMbzDG;mGu~({Q8nBWa%Q+
zJ;W~>8qSQWjXv;%9hp<5W2UoO*~dVIB(YRvX5Ph0V?IH+Tt3KHfl_XgX&d^3;j{J>
zO>Cm|!@bEs>jo03Xb{}T&(Z4%W}G<;9`r=%j$j0L6nd;iXbZPyfkln5Dg^(|Tta{%
zu$nWFkkgtRpLq?8oZ7*{gkT!a>T@;o^Qy&GbXlJcA5e})62&WYC`Ns}pFJPT?Hf>W
zvOzlbVk}(Lf!h~JOGY&<Ft(0`$H)a$H)_%^l!Af^%bjBBQ_u&KsKP3uK?AF>Sik9u
zg=U7P(^!^BD@mU){^I%2<M**+eIJaJ#A{5X&n!m|hz0dKsE072Y}is#0gIo0`t>=^
zEU-S$$2Rqu_NQM=8N)mJMLg^B(=Q)Yf5xlr$LI|vn)>nV*PkmC7MFUW?mrZr5?_l`
ze?r%WsBTn=jU#<(^&Ce#B*Xqej@)1{lPy2AZgtNeqjO_qq+8S++@U$RV^QXBMS-*i
z7Lyn>CQOQ`MW-0kR89&{8liAn6Md+qV)}Ar<|F06U}n?ThNY+J$-yY)-$7{cEoTjS
zl3)Z{4lykeT8?l(1+`Y>FmUNfOGl{n#7Ehh;Iq-LG~j%THNx5@QOhZ+G|k3fro!UH
z2ha`xB?D$Od4Ui8I~Mu#Z{Rt0Cq!rCm(M^jLD}g@Quq{jkk!&J*EIBu9z=<jBDCb$
z#3t0klF;0D1#(D_rT~R$oay^?hD^+$ppFL8q^Hdc21dVTtf?d10|Bm|z_;mEC`%<G
zru2h~Zk@Ezt&T=o0tL8aW=ueg2r}W_6|j`m3&t~>p7Wp*>jfi?{_`k3sK!zp+GDj^
zo1UY1jD0i{sx3A2+^9*<B^AAah9;Pe33!8XV5A6!$H;nZUVsA-Oj3P>CVtDliZw#|
z@X?DfSu?x{SRUpDA!ahdc%Xk6D10*=PrvAO8rVvq4{_(CU!nXCjXJ3BXrsm>Cpa55
zac5=gTT=5FM=U5_Edvd?8Y5*&9f=Zk5ZzZ(SE4j-NR%d8;&8IWaAx=op~2;A{zEtt
zgqYS}wOmwDt&=gHTGT$2S_~2XFk&l|Vsptyg!v8h%SR1*w)6|LFM#Rc6y{)49Htpk
zXJcc46AFuQ94ZZ43C1vkq8h=FnQQbbGc}XEV+)fW4$%~(H?(i`EfldTrN_c1`o#hc
zC&F$X4?N34g|gtlk4BX$`}g2AdqW_3LxAofK=*JmH0-dzNLnVbT8Cw*5#-6J<`@qL
zFBVyD!PGXHOq;$NE1~YMiI-GUrV&L*%eY%1W*?w=7@^ZFc%a|dXoO9M$%XVPZUYfv
zTQ6F7hA&ej3YQ+#cfDbP>BS)$CexPsg(EO))j4Ui<A}tpVsQWQ%TVk0ctc?4Pzk2r
z8GacEjR2}g0~i>3_{Ie=@&^XTPR;dg^iF)`@Cu>+m00RuRNV}}iJ3o5b?@Iti5Itw
zYBXpY)o>-ZJ;-$eP(Ouogt#dXexm@*1{e#o(dZZ7BaD=}81y?ddTry1c9>}5K1An%
z7LDktF+ehr{1Yv3pF|b<FcQ-U`WqF$X9)|qxpN`i5VB@tA*lSRX2i5If?-@1;U*q2
zB}l(mf|<7RjO2HW-_*AMj1dRaccfqo%E$;^?FrJyfZNcJ^v1wC#*t9%<H%V<1?ID|
zOedi*$LLFv?Jz4WW~N`vWQeYY=qj-JQ3xb7usQO9h`s_rsnYuTRbc)qUz(5DR6{IU
zWS0a3%j#2sMQQ-n2{TYI?@_qFlazf^Gv-bOjZkNe*}|+Qy0TQ_utAdH=1TZBR2SBe
z;sR~)X_%EE3J70avx;ffv00SXJsfyol!V}}`(vb~X0^tHibPES_o01EzgRvXPGjZ^
zde8_aC^^Zsf$2#8#LHr><WqC4A%bI?VYw<d@42Wq#qSKiSa;w*P~0Vq8NVZtUj6_#
zYshvik>s3hj42j(Z0uwAh&3BjMg^viaYc;->?e@DV{lx?zzW9!%JPLnze?Je%AcA1
z3FS{De`5I~EQU}QFd8MyprdZ1BO)O3QbXJ&h(tR>Y`;hf&-5TzPEUhH2S*bD{zRX=
z!;YJ24rMSgYMyHxoB+QQV++<|@ig-Fq(5RaOD=_5(;EY~8c)zIuyw{$w9TA4`o*Zj
z$w1?>;W(9hPDbtzBVmpEld^dCs!{?nmCsn61z*#^vKLm6E`VFkOjX?4V;s+Mh&2iK
zFO)bMOG}~1u-%5jR2rg<I<@6f3L+t8*%d2@e~d95^R)@2V%+hx$TPyjz%cSBzVJvx
zkhpBy5(4?jUN2!7&eziz^z;}boM3-Vu!APRPA0&ip`=W|oO1%oe8Pain*!`Zfs#;o
z*usM{nW5BdA{MNK_81O)iKe*d#DfHdu4KYPHYhK(jH<dOUQh`8lVJC{Hu*@$WoASJ
zqikhOBvh^G7t-e-5%XhFj|NRW0W){vkG1Jml$f5KTp$4hX9g#ow2?WT6j8o@RdK@!
zP$3&(^yO=z4>VjWuF!YPBs84}q<U|5h2U;VBR{J(v#~trHPbIz!0Da<YE5Xr?l$$H
z2FCt(w%%UBigFeWHnaz3Xe`bPT5aq?&u9%T-lCoqYlfO9VhIuX0%>Xd!tNRG--(Hr
zUdS<vS*7U`b-}~I1Xs``Lcg(PCka*yx8Ni(x~ka@nK2khC|D_4)afVV0T7e%NYN!A
z(+j$Z3nl;?lMn@QxlO`E@1VgzQ&r)>GrHWOM<+a!Nu&+$=!@>xwWN;)>m3h9mf8T(
zjOZX3P?LnIA@nFp*77%4S8W+fLqfKP<|`z6SxA=IKx<ruuM3<Bu5s$i$rxE2j0sSd
zsUN(S{L2kS3bO&2KT(`tyjQv4x-%8k{bf!@!a9WB6r8CkI8#&HHdAn*M$xbu12a4E
z6+`J#BB$7<Ls-*zz_X`*gvpwUY%P-Rr8*8udZU>yf4rgm4PsOyR!Z8GlQQ$Un-0w}
zdV>&pIMj*`bLP>g(Js5RP!!(q94iDi7!^L>8*kqMpa@t&)!<c6$8pPb5ZH$j82xk{
z6f3i@;&_{B+JU=Fgv`UAUj7y(i`5z;eQyf-Zi+oRW#Yt}qU00=H8g|0DQk0iQ{V_Q
z04FH!dQjZ;X1>-<6E#n&5q$=&IGtfuXEJ@GiTu%_vHS@%TJrEE_T&`z$23GioP%j7
zotq*%@P^S?3Xf;<M{0!l&FTnF=@cw}R+;8s$v;ZuPbh!nG{SI`Z`Pll{JM||fU-?x
zR&i9OK-i`Ux|pDPKK@i#_RCnR8VB-6_cf9~vX@3_@eUh2p1HjRE;p4s1vubT>Hdx6
zkCgYM(n0J@+h81_e_*9eL19gS*-cX!>sTro0~Z?k($8R6J32@!M+d5MbPx`lF3y11
z&4Ad=ATXPGsq{^TD2U<6(|?A|37z3?ov}|F`VH`l?Zk=;^o#15WkBPT(T-&b#xlJl
zv26;Z_r9#UQGHb`P4#@#O2i(sy0qvQSbR7(S1n8Ny%{7zQ0k^%?B?-4bsa~ORfel;
zn6_QAP}pEzQ?x)0xbnvs#u#iq*;})CwAo>bCOC%R5fW}N#IIUfHP0p}&1S#jf$tku
zIz?!?-^n9Da36;ehj%s=Uk{<G0nlI!R?irW*%-v#EQHm7H^b%vIz+!*K}g8-0DpNI
z!jT~vSm{=O#h(6(__TX)vg1WyBt|1C9i>9{#RF|Q6|b@85Yx{9US~;V{Q=`JCh-^>
z+aL!<6r+nVW(LP^hWmAv2-PstM9FYinj3Ct$mbo(pq9kfX_5Xr(Rb)@U;$vZ97vV1
zlmjfEDfCkV<-yR?%Dv;6`0HS8A+(dCpEzP6u$@pG%jkIFN6*r!T%yCop!A95_e8<(
ziK_gb%+?0y*`UH0zX>Xc#rk$sIYiN(50X`mbwo#etd&2OCO~OmyM;-OH_?{bO{on!
z7e01e2w`^Ui-Lq-3Tn+4;yzv^nhVUm%CKKha)?%ki7+;Xlh`1NE5u_@F)}<RWHux$
zQg$>&0UwJemFjJ**g+HTKwd;>z|*gfUlhT05aO1?Zl^0=$hcUeeJ6aDDEAD%$j2_P
zhJHL2M0f;cT3o#zJ4eymdpb3IV?we@q+#->p2j7-C^WbPq{R$+S*V2xz$F&~*$Z)z
zhBGuhOO0%Gh!Z-DryK2ICKBczeT9ZII7^J%o6s9%vdvW`dx-sAWOm06XA?65F%Hp<
znE@1t8Th!dq5e*bkB+6H3K0!L+i8rahamQmL0CZ$cFOZkWSwK=NDOirDr3+Jq$31l
z8#?stA_cVFP;Zly6w4t12grJ;K$i^kx$?a6Ktrw7JM<C@la5th4M@$538lDy@f1dt
zDm|WwMUeX_5)mRP6FE*QI&i2}b<&b4lnAH`3=-&fvX55{3w;iJCgJsgnVnz>AgzqN
zM5`+ppDP6bBhvht(Dwu!MYVfka>cxO5x5so(Bg|B(wHTr-4UqJXgIVMEP|XTVm<b8
z2#jzXCZ3aFhTjk=1IeKM9*lh$ZqaE=)N);du!(TaB3wxk#Ay-u2N8JE5q3|MGRML?
z9}%v)NUrBuARHFp`#uCg(Zn|w#$==|mXz%HB(17C!5~=)klGwzzQ$5hqHhPf9Kd3Y
zAoq`eR7N;sFifCd%r|gD-w(?;)BxYOYQS`Z1sTnhP8;jLp`MeetYio&M0GiY)#boo
ze_1lN908e(a8*Uv_>l^#(X5b$S&N`17ENR{@s;d7B@>QgsV6p>zNsfIR%X%?zf{8Y
zph|*W^*Pd1JL@zXp+Ktg3e^EqBpj-+0nZ|wwkQqQT1pNU&A3=aNr;Do9Z!v0%7S#A
zd-$DLOcgJk7zbV6GTvT+fPwq3*>rIKCt<KGvcFi(bGv)Xtic%Uxft@G80^3peDN5t
zI%XwjF9zc|X0u2S`hi{yv^~Z(8-xBxz!pis?Sc)Fmw<RoFp2~$=_F1{ZD$iqjn5R=
zMA1rKETM!DgFO=igNd1`M!&<#XVXA!7s4i(N=2R*1V*rRiOlFKb1uddso}iXGkUnJ
zV%#zDcv4f!X(;PB2s}+0gXJGXdn=v<l@F*CH)){N5Kclk3<AuEaW9GSji;@{;dqMT
zw4<pw+-}6{oLG;sHPmv2iA9faPsOZVAbTbPuR0oRHNSaS;|fMkw#0%2_?>R#8k|k`
zsZrkxZ6E<rkjDZBt#w2=sqD6j6BMcoFr#DWln3Ck#n2y!6O2?1R(ckoi5h^j5Cb!e
zlVNUXZYwSEb{Tp||Ai~9#YAYAaC=g%^?d>=AjVw+69?K~P^eD9#1Vj>PEM>`=^)=$
zq)|NK!yx61WNHLkYJV*IRC|D-udvL8#8(9%PXL|?jebc)I75U4oQwn{RRaE80wA7@
zM$1s7^nQyk5}0f;4X9RYF}A@O06v!hmrsD9B}4yBeMt@iZ1*GxH252N6%`mvEAzi$
z<t4=@>~hK0ByS1kXvd9VuDL!5G?hROBskE?cv8I01^(dLrkzP>-?}hp2ew86U9n^`
zR;j=g+9quNTm^7jk0lf4b2@rWCyCbt2$f&Y^fWXxJym9=Q!~?s7Adv>7?@}5<RsJ_
zOW*?u_<Bj`?O(_<S=*6l{HEi|SCT#*3C05{SrQHPoTi=;<fDrb7zr%89*>NgVYmRO
zLb*6F0Bh)jQ3$PH!eE&JhIUPF0h1GmYiR@MeV1O8TA(mVVW>VBJcM{syq~@)#fOup
z0LvBRqYA{l3gDCm=S~6JP}q42&`UA4>?z!_iWT%c1vY~ML777JFvUhoA-04<wU>@G
ze)zCJYXHdsBUG}sQ%$h3ftUv)3F^$ymIp%5Ma_&Wm$Bvnh8eiauq5$dCP95hKZ9}Q
z`KeOc#$a$3ln?DYruB6L(D_l}QfvH;#CUXAIfv57+QSkPf+mI|b6os=xMzS0t`^u!
z&@YO?UYzIwTQ~?fqox+#s=!WHP%bADLSwHpt%ZM*Em1EB8im_M;ryrx3=d{AC{1F+
ztBD|`fn7Uz3JN@ha5gfv>&qd8=s|&%prDJXW)tJoD%fh&<pf|Fh8gr5;1^2DgHfgL
zNAX&u!^g;j<p%8=+*RQADBx@=1bb{S7|Nd!evKPjbOt1z(uz@<h#we-x{#GA==!V3
z_$wh=dmla;?R=R&Fcnmc{YLneMQSVDCn^SQlIWAJ0?h%R$XTX2SYi$mWCmwcf$Rw)
zcEqXYKoq-zRHGa525eTPPzdla1(;5KW8Z{RqEgw-rMV)pX$iz(K~h6}DR!9)fz4<*
z4RbB0yjY@IAHU;mX{s0{YO^r`c#<>rPF@N|I!rp~mu3jJOps^-b(CJ}`FY5_0GBTH
z2M=XJru=x7o+XXRJOnHNS1PS<mOvX~81Y67RW;an5U{{zNT*s!A=Lmv?xzYurhrH3
zP^OjfK{-V!(3Vs)Z&oD$52klCsW~iQ!l_8aPocRC*zm_o0pd~!oYL`RDc7vG(Y+Xr
zjTego8Tf#vlVQ9Kw^^aNLZi`4`!v%wLnG*N%mh5ngfEuPgi=kh`O{FlDDz-1LBFwt
z64572!2nKqyZF4B2lzXMrf0ZhTL=PD8>PjuYB<zfm*Faun__H;?+h2MSjnWo#M0Ok
zgS#n?Ng9b0T5Pej5+0>d;^Y~)MTYy(FKE=NTj5;kU*-sIF-SB8%q~@)#?lhEw4dYH
zjUulA9_+ywOc-ma(sP*xEyvvu;>>@-HB0#nci<8sG@L?Q55vJR>&lc{!*>}NHOT_A
z9%I&x5NpFB4>B7O!bkY_uu=imDZo0hz5xABW$j=*7ep{i_2n1oe0|X`O8c?o^{YD~
zf?87qE|510s%U8OMdDII<N}^(YI?A-_aa!A21BV2K7=S~D1X4sVYo>t3VqaEUHYn<
z04GS489b5Lc%xW1g*%IJGb*9`tbGBCEX5loQ~9d^9tOjqNaX^*&7M)Hg6ZIqP>dHu
zG3HD%UUJ1^$;%g#KbS$uImE=lm;6A6k>Wc=e2S@L{Ktm^k?+Byyax;?;49sSfrRgk
z5I-~Qa%R6nhl5%ZPWsdU3RY2|*3rrgt;{M8b~>`X?okTp6{r&jQ6Tk<Yp;76>thWy
z8VULu8jBB4bi9Jf$)1*|oh;ulUa!61!CC$wLSx1Y=82O58#W%ohEdFA4ApxQ!!roN
zK1^TfcO>#h?4~fB6-Mg?yFWo?2{4lBpq?r!fznLKQi?AFwK!CigwgRWWtb^^Su!(4
zF4Q*9#lES51@B`R`;EP5CELggDiTYx;ZGig3|YpEYSMDY_{HLid@K~nZ5WF35^xZo
zEt=WBfigw-<*D>o3gC+`u`$6yqm;5n8upP7ENdFFY78z@i88VlALNe@kql*<?x%QB
z2KK$LCT;qLM$tdxyhAiO)T(=f(2&1M)(@=@WgE*#r=pa_n{*ls2H){gzW{+ie!pSt
zW~7i!USJqwqQ;1spb4XPD9vJHcw;R|nh4@OF&wgF@{4Ap%tkvUID&YkVH!SBOUx?o
z0@ISXIb@JS-<9V=eunCm{8ejEbAXsLrO||`rc+_(2(2+HJzg3&DRe-mnZ|!G6}X>s
z&J|)zVNz~$_2$iqC1p249=vYAwn(qU2N=N|mA)=Ed?39TU5^1I_-6HCW=Ow07@x^=
zAEquoT&Pp6h?&%UCL=1%mW+x}UW_t9wF#<CqH-f>i#MDOwP=7~{xDmb(;CidlG2Cy
z5B(aA(V@oQPGV;4O;c2@upd-vEEEL#hT8A2H%KeDk|T2wbKT5<=U;_!1?AQfE%-2F
zqTdj=^T>!6IA)m%D(;VCO*%y_&iDM0u1>whj0GZWs~BPasQw)5J;YuHI9q@T2b}hC
z6kruZ6RuH7y1usy&3lYq*Bk{OmPC}BIh?hfVK{T`4#O7TPor66bjyt<8)GXz*b6?q
zd(&^5CR-A2gq)*|GORpmYLtUH_}U+ZKb`EB`a%pA%Fqg6ABqu-?}xzud{z+0-v~Pl
zd)5bEn87GQX`pXyAEze(RuQoB1O4KA0xcFlU~@8>QJ&Hu8agVsz%Nu{m|<{1I6+6`
ztrm8&SY-xEpu~A*V4&4IWQ*~e$`%bqafNz^Q0fgelLW5^1h~fic(%V|#*X$ZupDu*
z&eU(t{LhK(i3EpGVXci(MwTOlnO0+i%W2zqKS_o4H%sEJASwQ=@+oT6#R@DIdoT52
zf<(W1ZsH5x3jtH9J}iPL$@u!zGFY|bOJl-UJY~VJ7i7kdz+|ezQlIdNKUhe^qB!A4
z@><DIp7>y1UYz0{9^!n%0Lo_rDE{T42ka42JA@r&Mv{jv0{aXC2+BPrYCp3iNi<zW
zotl|8bdN{aGe8@H5q1pkNZLi7u{PEi4)d8Q5pytN3nSs|jmCj+w5bvTISVL9g)}{d
zh%W=ZgfTpgQoWd)iR@AA&51S~8JSmW{IunOhMF}!<GZIqR3ULR+%()`!4yk3-FFBP
zM|@3S@Q<MWY$kYy0naeC*sQ};bjH(}Vdaf#5`yx`k%EeJDmX)Gcr6(Y5#}^hm19)E
zbiipgUcxL##;5hDc8sbp91+jaaMBelCwy2L`7m$t;X{L9BX)yAjOiTE${;~XQu#*}
zwpP#vq9-9F979@yHk1TATUJ&Hq93ID_Q-LR8c(UC%2O(wnZU7Kda?M6x%U2$IUfFy
znGHTX^ZPJ5qF<i(A-4CBYoy<3y$-DjA2KJ4euvlqvJVW=&*qsvJbhA4l^r!+KA};!
zSnT-IQnWrPmvPKGG>%zEt+pU-{$a(L-E?sO`$t;VMFXwgnL@8wp63sz7#N^1-Wj1g
ziepB&cSktSBVe#2#;|>O!e;l@{0oF^%t)FKt!_eOI42A#{4sl8@F&bK^e4bY;62%&
z;Bl=fZg;3k0=TiREp-Vq&Rih+jSb>5i^m3qVON{ltwm%!Xc*}{(DE6Jj%Xy2;GL0?
ztf8JU)+vPI3;mT_j4hfh(@hFvkt3ZNV`f+-ihdJ`OJ|jX*l<;gqK0^NgL^X_#>R1M
z1P_yZfq}Y#<{{ODS&sw3S3M1ery5V5j&?<LM}a*Qf@M5pX>+<*uEj+zd))Bxwt+uX
z=qB!*Ar3NLIPhWA<PR(O0GFtMBtsR5+XFAve-q(F5q=_?NnRMqR0lI54Q7)-NS)B|
zl0#`D#fBN+7j#G%nN`x*BC{}k7(LN1c)U>RuN;mgwU*OV2J4R))1hCK@e;Gxu_$v-
zCWZm`n$vM$N4|L+KuP2jzw-Rj1kAa?$YA8?5Ki?-EO2JiNGrLqvZ4=DDf$)V9lUNZ
z#tU+yVZ|mt{)iPed>B&EA;I^kdOj*JTFe>ZF+2PanIy*geU>SqGO+idj*1iqzP|WE
zdQ+m0*tDZDY9He`P7<xsFy84$o=$joh_qxf9NVM7MK+pD7Um#KHs*5}iTqe>?pPD%
z;tg8FF&%-yFavL61j1${_WR@ER^!8qB~I;VhIwZC)gLkQ(;vlXRaqKKC-sgUg<dEE
z6xuptTkIxX4zZn}ENz@ajKZ}MUysKId6pNw;)(J5%RNH>W6V;58IzY_>P;v_$zV!!
zqckjPJLzotW|v)Xy&}FNY<aLCNNh<{Ba59OlSI%)CMK-e8MDx6y~YU(3M9gZX%qbd
zN`guo`%}%;m^xgIG2bKfI|BWh)(cE=r~_sb;nWjQVJ>z6WE=xnB~@IF(BWzX6*<g(
zBZ?)!FCaKz{TL+5ct}@VMf(yAG&J^D6TcU4kPD@UBQx~rj1W;kYJ$MAiJe7;9)^Zx
z#rLIK1V9hC!gv%`Li>3CQZ!)X5h}!liUPAd9SMIa6eTy&xU{#ETt;J?lQz>Amz?`?
zxYQc+hKwB<BsA1+bMe;Wcq+dUE;=+g8|yoYHl0_LxptjOl=U<$#a?S1mC(+WhcvV-
zg-Y@!htj36(}siH#_R&Dvg{gI4F=I5UT7;9iL&@aV~GXJZ5(3)63r)?+I%9suRy=T
zCz{oKB1Bc(pmB_i6bqkdvY!%Fe4??&p&~*mwyZ$ok8!BSz*@&RMNmTa@g@NgsUCh2
zKhpS7j*Wo3YMgr7sg-uJlQQc9KAxtrr*BbVU5s(%!2F1s7`pD2;h>okCzeCyS?Y&$
zYeL2{Nn<A^SvNG1sJ|op&Wz-rZp)<7tu!K<kTnPWNr2XHgeHM#Y0ajiy)8USw5ZNc
zD#IAjo*B!u05=+@TDav+q<>y8G%lDF#ypbggYrGsKOXVpT4r}pLggg_y<^c4{lW;&
zpUMHNpg_D>F#w-{*){>SGhvPyVQQFw>BOL5Qvy=f_MXO7D~Ui)WY^~j8=sBmGa=A4
zy+F-nZ_u7(hZQ0;bA3DvOTWAgCQ)Q;v0A8tIQA-T<Anh!R1(`vEG5IKP<B%dJENVT
z0jN80Z%j<7SX>N<Xf^Jysm>{F?QaQ&FEZg&vMCPb1zTDG<^-e;?Cj_l69%sG#Nhs*
z_a-2VCW$x}2*;XhIV-iv65Sqtb;TH)%h_aHvoJNr@(XGM%WuM}j<S?vdvjnz3}#R$
znBtlkvDQWn45zG#O20{s1cVi4V0<1hr(z0O#MJlpd6iR#S2>mUQj9VO%@#oeP=!;h
z>=crwDOgN``%ZCZPD7+ZTmrKhf67;tKLsuXLz4k6H-8G`V>a-$BNwpWfFLcwj+=ra
znL=QK*CG5V^E?gu43ag}TY<d;`FNgzez78uSX37%Y?<hnq2I(GY|ODjOeKovin*=n
zws>U>zjk%}MEZb6CK0O`$zx;F*npG4Y>;X;E78NRg|j>|wh^pALUV=k(^$Wa5*q9<
z*1FgOZy0WNrAovAO&citEl-B|VIeFftxORoSYe=9Q^=^MG2I6h&jPR_GC~<qz8(UO
zOmWLhg@B8PS`6*c9@Q4R>7dwFYW-*~8i|o4+n=B?)PiOZe!)6v?0aSfc2L5Jks{{X
zqQxzX3Oa|71yPJmB7O04aWPs9r$*apjhr+5Dz(&xLM_UGBR%CY_63lgX_~YE9e-UI
zC56$<a3on{(Z?$hKC~)*7#b1+9~0K7{f0wVI%bc~zy4<E@a(UpaahaDXT0{{!&RM+
zHx_)sx@Q2BGaQQ<MgvnAKg69H@)h925x*}7C4}@3awPiY)QG7uAL{2mG_-vvGW!t#
zZOqq?AA>0iolQSh8qWehafX|E2Caq)orD3J;je=GF~e0JF~(r~4EHPNwF;bS7%<WJ
zFxJV~zOnrou0WzqYHv4*%M-WVN%``|quU8U$(Va=d*9|xG%C^u`C)>2#%#}m%JWHD
zeQD*-D26wCe+J<V+b8iaPZm^9{aG9@Lrt6biK<=(7+zQ%_6OB`fV&5y_(1|$)C}xt
z*c8$42)|Q{G}cd!PAziThXY)S+elk8gQ;_sJ99B(x)b!8MLc6dfsGN@#v~0QnMDDy
ziLm5nidCfK5JO}X1rys2eh{(k9&c)mMyLYRFuWhqFVAU+10H%9f+%`Hwl))=nDkc|
zG{eBWl2ADy9gfXgp};MYiPR@zJ~JzLB%WqKYsrguvmmKpBQ%)V>1CL_*}yeFYiRf(
z1gWql@<TxD5J+i=TPhq4v;ZfW=viEp$ce!OV~`26O0EhwTtJ9|bYOSSAL&KgWq9|S
z9~RJb8Y?#Wc=g_g3cS=f)dW&BW2gTXwHnC+%v#(B`<hSi2>fQ+s2BqH1R+>*BK)ib
z@X-3#GY3~HjU-dU#FEWN$~UxIqzucme5GF=@EPLD)|WR3_=#Ay0i*;B5d1`<&<v3@
zn|OMHjjO`2(sc&IJJluNe03Vv+dy2}i_815pNf@68X9^{d-=HkhzMJr4L<}QB8<?D
z2s;QoiBQIvqW9^n>KJTwE66dH)zf{|xYocoS7M4ui)H_SDhk1d4jnqghfx##&T6JY
z7<&dBnV8wYUI|^P^jleMh1lr$U|S$W0~qS*kAtyUr`Y&W!#d$T1Inn3sxO~k{ZfKI
z%C!AZGSe6<KwSh?g~;<-?#q<b&Zlf=6rVt(g_lz3mpdE<V#SK5NT2|b@S;Yz%_1N7
z4|sBsZ-etx-zm-s0>@Ircx+Z(3yxwGh%c^mB7eqable=wlYE#Z>7qIYCp{W!(TS*y
zr^Yh?`;w(Zo_(BE`h_Pwpg?lKCP>80N4U(QQMzQ*3yeHUww>~)P=QglwGMPc*-w9E
zLT8L8;5Z%+GtdP+z%T4+cn;#wEIi&#08S81ruK5`f{AuZ5*wY|`(cLl1m7Y8-y#C<
zHwq`!&S$ei(~Y;tfpr2d5zXN7d1he%Fp1_-)KT6{17ma1YNVO!D4lI5??1r15WB5d
zWUDnl?BK%^$&bLcixMm|UU9)N{YarhkUBw22tMoZJOY&&;~NN0JTr5a4EN~oI1aR1
zTJTV#!AP_Fqh!pYPcWgP(b%$}mM0D<gTejZ;5x#AnFR0zZbayKdxm}!vuNqmbj29K
z;;9Itg&Fe1P|=Gkr|plx$%(+!kZTp{+CCn$854zLZLC-yjLOj|dI|wkJc!=dU4>FZ
zJQ&1wPRv`(>;-I=B$zs#h^1jD{^GdPHw1|mOM^NwZtDav(%4r{C!pFR^|57>aQ<TO
z8ewDQ$GCeLb<+nanOIJBQi$kNPb`rM!wYN=AyOGgzjzc^;J1cyJ{v*lW8shM7vky-
zNeJ-B<VXy^YlV2A#A89}4bCr<1bqt_gwZc70sNp8D$5&dO>nM@-5CB9COm4Cn_|E?
zVKI2&FeLL~x8%prYJgdZ9|LiVRgIY@mAGr@Jf8zNllWCWBLUf>UaUwM+n1ZxuG3N9
zNhq%r5Hz>xzEpsd8ADnX$0O4N->z@?s>1a(pBko5^sANYzLgA_4f7+X)P1xCd10Ky
zrj?*{i|CGn{aCqBi(grk#(g&V@$u{n{c;n@z&9w}*hcAMC{4v_qER}-MF&a;Q>s9X
zD)fxQc)i(U8f$Rt|EN7*M1(k2egeL+9DxKA51S$%m_N*dbt#}dY$S*fgpG+-s7b(O
zf^5fE;6W*9nW&-eGn9T4*qDT~iKRcoNIe}Lqr!iMY%#huvJFr|?7;*~FDVEM%~W13
z35*q7BrX|4FmB-E%h&46(%(^7y>8-N3VU-}EQJXk#nme+rq?CrWQN~FtA<4_=6bxJ
zMJXeh%*=dEVm)s@s0TlZEY%#o*QonYuAIf1ClIZWA4F1WT&x-<M;POxOmOMJ0E-p_
z-{DkWlwPG^nxW@2S+RkxNEKp3J&PivQ=>+@2S%z1)IR~$m|!y}(agNzlIS;FjLxj^
zXkd9ozrX<E#Juhji7+x6w<rUQtJap-JU9db*AicMc2dg2e39`c6DAq_tP%km;y1!C
zwi(ok6gce)<ec)v-JLZv+HJ{+N-@hoY?D+9`uK$~Ym}7rF{2FFb`UChL8WYn2+g~L
z2^9Zo&J@B?cu{D@B+X16jcd1mq8vKXmu|c)(Bl+`$HVVLV?Ju&SufRS!^)}lv|hhh
zLnTl;7+RMSSY+u)8I?qkMu{BGQ1kZ3wI8??cyT(`+6d5+(mHhnWw4diL;#0^mIa$7
z;V<~&%Gf>lF#j2-nQZ^mGg@{j07Dw-_;~7~u6T>xSK#!(Dr*2!Dls69#*h>!;6-XI
zs`cXvuN~F~7*uv@Ix>mG*@tK%5xT3j>!3u(?$Zdl+hRPJ6<mB`lQjh(R5LNprkisF
zO)UCQqBJlF1}c|V0)v+K1$=!KXDh5Nt~fls<HO#nVhO1b1Hz*!K`d|VB&-iF1XVa0
z%QNKKy8|5q==7@yU5#bBrzlLgYFboYK~lIYqRKSGobC60Je=dJB-Ns9b}&Lg3^hrN
zw-MTIKAhqEVuLkig>Y;Sj@}5y0CzKL1v(biSoAvt(-cEZu@ay!Qt<auwqB&)5WiSI
zKQcZP{lI+ayS4zA6}<UW92kYZD4<XLyyD$@*k*}{`a*yFwvZ1^<!Ah!2JOEY_MYs(
zQC``ocr8vL#~vF(>w}G(2`_MtpeG-zESL91G39;=%n;UBKFl_KytCt{&{j%83Z@`?
zQm}_o@yQTIfiQ%ki6I44VnoMyeG1fi3J2bB>=UbeQ@1)oy})`?Fj7+JEm0emG&~&!
z{D_t|Z$bn5D^>>fZcrBWK&qBbLayPRbZ+)WOy8rC5v5id<FtWRMpBJRaARQ;(`nFX
z&Z7`XppH@)eo+0w1g9^pADpoF)`8+P?Bi`7KMnOexUe;(AoAm$OT%!fVH2G~ITwNF
z@8l)cpt96tV8Z5oJmW*r2jp<6v?``8_)24eMWYsW`baLjX&!Ghwmg*;Ni!`yO2PIP
zh1oR0OhQ_QH-G%JMbR(u+uT2o{mKdDXws%9SG|r@pkC?+bz{cAUZ9BuT-+&NSClj=
z`4JASHZqO|X3LK^7HL6+2lxf`5@?5^9v>KiKB*@HuEG89D_0bicHTQKIz$C*pc}xx
zi+<577B>d4BMG3~8+d#&0@$Gk-UPqQ)((6I3xUrfgTQCzO8{q5fzM=G;E$09`SHGC
zfYqa4V{*&XGIe8u-w?k>BhMQ|fzilIl1d{l4oy1IR7R>e)YN{W@;6fD7;`+qm?rX_
z^6wPCOdJJ+N|9@a5(#qEhVO*<3(vtbZ`**E#n+2BR+dU$pr3a>Nx=M06U^rnGs!m-
z{R)OEwm7qJq~QkTtab1r=-@@r!5ayH7A?HDuk=$<0Sq?-2pWSygh`9gN`&|bn<B=V
zvLXikB9Hb3Gn?27dMVa;5Df*T)NY6aqpznbJ-tL9`iU<Ga5fwnO}(Mk)C+`#X^aLl
zu2?1^8JTqpjZ8d8Jf<a)w>QRYHYyrYo`G&W4YUu@e}#>qlv((R8X5gO4Kr9jF8~!1
z=vTG0ejWueL8&O_i4XCC;a)NbrEQMwEJoO~X>94|1#q`Yzv8@ZsvR2-URnBi0gUA7
zH^yPXw_iCe9~ncI4DlX*N9Lg;!;MI3SkTX-jsis=4s{zb4BrAgYec`Oop&W2$f4HH
zn<SNRedeg@!K#IR6Rm+~RQ%%$l*i$Q$eAub{b;~R2LBm=`T?vQ15e&Lo5h;spko<T
zYW!(96StzF!Izj>LU4kW1P4s;(zmK~u97BXOnl=5q5xpQ_@=gM6-8pW6XQZ`XjB#O
zt^yw9q9U?*=EV_4%_tIpiy8cM3&?|>sg_7w<d{_^#R3mI#7jjBi&aP#%aY-2;DwlV
zfGjV@E=e#Y3h_!cG!NyFveA)f9@5F1HZ>0ecuk|<)X3~<Y|6O59nAciy}v-S*nr8P
zb|XS3H+0krN27}0Z`2iMuAU)vBx>jx#uq}<h7CjN)ZG8!Vg>k~0KNlidzEtz?t=c*
z9zW?;Ega=C$`0VqWYIW?yh^!@qgKYPn{j9nF&-cI0d5Lxa36P*Z%p7>g^N-q_zkrR
zmv%gsDy_ohY3~VIZHnqZeq1d6P}|l`$9ubQY&;zJs#crQz>-Bx0YgE)&Wyy4wZJJD
z;1`Sxf2P%*hDFVK_sv}uz=S}!0E;)c6EPD^hj{|M{pqOENZQxfk7Hv@wG(iL5}|Y4
zaohXG@$(|XjLk3uGvp5kMjwc_`?T5$46ik1jY)&giGjG?1;oOuN#jv8+lsQ)ELO{1
z1$4yH&J$iXvM0a>0OEbdssdQ=1Q4_Y?BRKUzq~5^#MD5-3VBiq4OxT}42Sq-IY=;M
z5EI~KkYI>Y!D{E6ckF2oLje)J^+R;go1Gw!G}oa+1gzQAQQi&<V6+lI5=6h~Ebari
z5DH+#L<oQkVvJwWu@WjU#U2%pf`OJ8hLtOhv8M?H&r1!yogfsT?uoevQuE+lV&UG@
zEE@DMYw{Lg7-^SnQE0IGnYG^njp2L#K=^7yuh3e{CqNDYyc3Y%SOmPWX!(UM8*72d
z{V*n?kdeb+h~{y4@D@@4qbT}CP1yXwI5C{hsm1vWU_=$L{|b#o_(qn*J2u42=V36c
zOqfDA01YR2tCnKk8m8z>i%M7wNUbquJIHqcd<3uLq07MB7hHKD_Ef-T-9sLjYddD$
zC)$iy<|zh=TO^?Kf!Q68^{up!j2QLQyuUIO9jW28mh?~sGqa6nu@-o;I#UQ^4KR4d
zHOC1ihoQznE>>t7iyRGC#<rE+js)<m5Wr`G{L)1x&fDQ7YzUO|VwuCgEKVsMfDwLY
z_{B;k7-E8Ng$k8%tYaR|f~#&H-oPvRiq)X07?v5j9pOyaU!j`;tpbw^X9Cq{TJAX<
z8{g>!f{o5$1rt3WGTN2w7H1!)eIUPl<c7xo&=Th%1q2ujmm9TR=_{6y$Auh;Ah4XV
zXdX?1x0kS0hn_fS2r4$bLTrp*Soeo!Ha37jK7IqFSi+5vk?`7%BxMUi%7@wlv^4a$
zX0I58Btj}i7KkXv$ol}v0x6vWxDGY{uEhXwJTxzzm1rozF7PWB;SS((h~E)*^1xUv
zOAPpx8)O>;&az-B7|skDCMhHQrt5k-Ja3B5k8M3I=CtudIQb&9KCxxeOl@&KOPEPH
zu)tHzEs*CH&Fhs|lj+zN{7G8C)?<RGc$J2n6xGjJVvEcgMRB@@v#O|h{rCi~yzr6`
z!8ry>qi6tNB2&O8ilVgs2|v?WZ{DF6X~v4xo9SZ0L;}hVfh!JMnG#d%Twq(7fQEn{
zO)ce(9hyFUQG{4v9N=M6Nm4Lp@RvDZ4k9hDVGrg=!DbRIa!ui2t`)YW3h{1+b~vll
zV4)3URG4lm9aOD97R9R^Wr1pp<V8xbEMSyEzoKr+`WK3_vgk2@Jzs!Vtb!4<B?8!2
z(J$gb55PBI0HY}S1(#p@&WMdeuE;2t;IhP^MxOS-5XQl7slT+;<&jiA#johGiZ^6J
zkPHBd(h2}+;RoDT2e3V);raL-nah&Zlg(&`7{Sn%dYeuW9&E)@>yh+C7@8HzwnpVB
zp?!=ba_K@+X7dO&QZgE2j=(p8Cnfrg1O=&igp7AsJVM|Y=F4EgAaF;x>F`to;}KR3
zM60}!GW0pQkh_l|%y`NU<aucqOIlpi5~3gAK)`xR9zG3V`a-{a>_^}|jBxpkfCY|Z
zqJRaC6qZO;9NGwwkbiX;GPS4@5k}zPY8NuGc~=FU!D$;svEDFBoXUsh9d7Y~3<y4|
zwpBdTV6wo<$LLey<Hnf8GhM@^+9*-A(R_QOf%qFK;RVN{BsPuAMl*sqy}g)94#qe)
zV<-Su+sjNJyJDg=-`-xj=aKJjFK|PseZ9Rb2g!s3d-#>PGA^Ao+Yu6LN<>RO5M{r@
z+h#W2hF7NOcUs|X25$x425rF5pH=8tXuT08j<2D|0?of*Jd$7D(PQ{l_5sh})Fv21
z(8_-i7yGt|JAl9bU^0L&2>QztI2p%P`UF-(!dYbJD!SAty3o&bdLoOV%T!zUsF7hz
zv$ZsJ2qR@BV(P-6ddzlIJ!Tuo4el>X@z)%9`|unRalQpq#;?8vW1y4c8HUW_SNa7C
z03wjBy3oy;r>7MUf%y>B`%};0ek>)WOjG<~>oEN`45BGsM;ivl&2@}*4N-UGYxxgo
zhcT`^BCzYz&M!-4<~<ZYjExT#-}rx$f=nxML6aJLW#v^lh1^GI88EJdG8)5t*;f+=
zH=?<hOrVJ$z{ZPKQ`QvX&r1IVj~WalU0h>_^4d%om_r1}GnU<iON<|e5;dxDsIkWr
zXoU}kGWEDo$Dqr`sdhq2NTM+v@GMGU493rx4`2h!((FZH<N!Ka9Dd`CIArH})FB?g
zgv|?RgATQBmgfUK2w()cf+ck@0WCe@ZqqL|F%Afft>`z#Z)#rpfh{*11qFDBi++)r
zZ%k7huFpr&sIp;Y=g*FQk{Ig*>@q~eM>Ahg^HJ=oDGAjduz{G|A%l^=a7QXOUUB&a
zbn`XS?+qk+TEZYw@AWgWfzmuAu+#!rQ3rT1jLxlI0d_VUz()lAM$K~-$C}6*8|B-m
zdM{aTAGUA|VC+x7>YcU{p&A#;kXGPDPJlN~!hyEv)sAzg!!&bM2?r_2@7X{*?oKZj
z#)9H4*ML1d0X+nBt6+kg0ESrf%gZ+f#xMn-odVmLf^j>=LQeq+rvN!q+@{kQIa#wP
zn1ahaO~;idC6yQ!i>1yIz#xp;_H88`=q#k6!A(bk#L9_L!kw5XEj=Gq?=$OZ%CHpR
zfJ_KYs=VE#5J(8;d^j{H1wZgY1I6GV{2^S?AjLtLRF61&rZ+)sl!Ho44oZ5p_iVKf
zRDIhCP6{jm`n#}Vq?w&yX1&r{=BY1}u8avcGuMTuIt`5Jt&tpVQ64KGP=twdib?f7
zG9_}=dK)5ueOZ7<tmqnuwOdh+Fy56@V}EPh?Ju$5n4eMgOm$RQJODbF2V2;WEA0#H
zg7MfqciQ6EQJ6FXb~e4ldwt#z{Q$duiWm9dR3?~$p)m~y)jP~y5bZgi4yM2fr?t%(
zO<+<vpQb=+9KJ3v9$ZG#88+%n`069`z*ZU>*RPyoZF8fi8XADgpMsq}jnM#-^z29G
z7N5$MQ_nv5qc97j*-xt3j}kNc%De+zEyJu$3ajteL^fiA!6Z17$~Qi42GyI<Gs|(c
zhQa(Cl?-=kq}A+}j^Z(b)Hm$jX*jL*a^S=%jV%|}41gvqmKA$Od4KUem74){%y6sD
zAV`IsWdJ2I`kmqzF+i!o=m_wTQ7{8nafVB62385);|W54P=S<mQkm3VqVh3*;hI^A
zHJq9mUtWViX<!ZJ`wYzaSunXMHLE+8D^9&;@()BXAkGYo!x^^b43yOjkPl+oU^W|v
z>$SebiS#YD3wVfv6Ki8>D$Hx~F#@#-s$y2GwViYt8A0X(8+(Gvec|>7-qgUg9pW(`
z<K$vx?(!(G5NFtm1+(dJqu2=5LbqqQux1Q23?pNz{Tx`#Al8+F>w~@GkTlO&f21lN
z?H7;jmzRKp&%mso%~GYU#|iz5oBGJX4EOacOsjV+=x!fb?^p~*p4OJaQ{*}_&=ahr
z5}d*r?w?trW%A$@i;^B?KwsiizZf1x`t=~=0IzaA7Hv^S41U|x!2aR5#pO~Euw!O$
z?`A}y+FYR-R&bUYi=V`c&DW^yk@4{a7dlU$N~5}3qoc)-%+N6y<9GkrYcUoujl+<P
zey6!b?qU5Ya;%{a-B(UBuP-GV+16|}$S&TCd}=n+7DN2RxiCn;`3_(d7KFGRphZZ(
zybvL-w{RR*51#9N4(TzB*eR#cHN8OG2*28TC>&LC1|}on4T4fdk&)e%iOU_Y<#qF5
z*fzbE1&AlC!f-qe_50c!(*|Z4EWlRDn?Of|Jv^Z6n*4z^68%OR-iIKUU`$HCn2ylg
z#3A$;LQzu=K;L`7fao_h>rLM+nmR^+cOR1gjgN3v`5Fl7mj-63(29ojCIv#QML4Vq
zMANE(ii{@I#0xSJqorCK)Oxry2m!W3Q!&JAFuS7kecyj{<E%9KFo}G-FHqwME9N70
z-snOM0OPUM-(Z5E9}%_qXpA*fl<q+$5GHXwgM4D(tW2dDwB&*im@SNqf(TrB7;Oa+
zcnuLadlB1&1d(sv9)v~&EZ^uivM^N0JVd8)IJ8^<Q=LA3$7auq*Ro+$zvTl(*szWI
zuE>Kn-)-ZtZFd@D>=pVw#_vpX>s5VegPDOhBt|?b(48taObFn`Df-2P;M_(~l!$P>
zMYwMwNQI&aVj$>@2n<y3+-oL&i1C9Uj7EO-&b@XoS-o>_8Cy_3<Q{ul!!aI>Qtbn*
z#VWsY7aWYMmodB~X`8I5ZL;)2{gq<`Sa9(SO)%*%`5S+Av{^5+ZMW0u9j(H3x0~+r
zc$*b@SM@%WYP&1*JL)K2gyn-GQTMmqLGPy5>)rH6v&rnZ&fMSjK6G{)b!W3Jvv}J%
zc^3Vp;_VSXQJt$_%3`g`?NxW%@BI0v+B_|i-BNY>A1;X|RmXP+H@!achP&l<o~yTa
zUS|2$8{aR>@T%JpRzY~NeDjK+7j4~l9-(p`tXpZV-VFrcyz}6dY)FxXc?Vn+hy$hn
z#=AnR6#Je3bmZ*)_hTbBNq10FT9n<(u)MRKdnem()zOmB-R<IJdwAGWXWR3$!TI5w
zKJIz=^iE96H~*It_>_i}chAmd{m#LQFgod+_s<6O{j+-egw;1W?E4g<-o?u*^$pLD
z3FNy~^_>(;R{u0X>P(#1Im6Yu{$A7Mo4|5y6)NpOxT%Zdm1Yx&3-)KhAx|30ilj>1
z6w+5ua`MY3Rgzj|I`HB0n3|^g`}y&d*1BI%IKSkWn>vGfv*QONB$MwUQ^Yf4<+<3a
z<f5vCXG>Y5K*uHMk9q7-8OE=x<jC|LQ{krl6xP)&i?@+APY*K!gxNNW!{v`mSR-N7
z|BxShgE9J){>7Fv=#)P&?W(GROI6zSm33+`<VB7)_1b05W{8!w#Oq?0*Xt1P%2L&H
ze`S3~<)z);hBk4%i!x<R*ZQgo6lIduGZ3;aO|=WH9l2T5MPkCUmMZzRidgZDQMIHl
zs_$QDdp!jktg2_X_U%AWZ%e@Ws>&=b>z>f|4V}qRWny(MR?L02YW3{l)kmpxhL_TE
zctbbnJHen%&D<S#|DxIv2)doW&ofkqwiy%0RdBbe`%2`AUF#$4Cmnj=4(pNI<RiDq
zM^2NE>^2^|1s}TwA3Fsf+XWxJ_^Ae7?jWAIbv|?JeCE{otWnf%LNx2Dq|K5|B~9?9
z+sI3|k(W**FYQ|YaC5%+>DjM8*W2U0J;|ZlM(CCdoi;*uAfdC6WtLmDD!Yx?T}b6N
zsoW-&)1<Q7$lQXNTQGA9W_Ce-jIcV??jQ=c&cdy;aOx}?MeQb%?6OX9mvQGdv2&Z)
zIZf>BI<MTE+eJ}YfX~i(-+@4(6S^Pa4UH<%4c;#<teY%!LJ!>bV>kG~>3Hmf9yrj+
z4m==g#A+gTgAd(c(nuvdr>L*4#0@@jMy;w4V;Ya_E+{+j$QiM6LXX_$l^gug8S#Y^
z`q7=_3pe<q-GK``@MC>a7zO#ssdV9lesV{@aD$KCt(v*P$Iet`&Qv{irXX`dkL|uv
zG3!`8{+oT`v%l=n-<*#B<%It3!iLw4;063mo8S|72QJ;<6SwTr4L)&KZ|Me~tTKCS
zOE>t$o!q4x{MqeB?goE$yOF!WpWSZcji7_kKKl8`dM{eQ_L;Mqg|nK^l87ZMRiYbw
z=G?c11GIm2hf%u0U)^DpZtz!k7^NG0?pC#NgU_Aqv2jAr8;Fh@eC{^0af2`1%v(43
z!p*#Glyw(;>jq!Chim5sUplL^b3!j&xUh4BFP$rO=Y(Fm3%PTHFP&4nb3(s6Gy2vE
z{o#bJ+%)^X`KP;P@7>@(?X&aV4*b)d*Y|bMV`?$Y3&F)fA7rbw61;yLFrcg(8IKr_
zRPe_e@>X}Rqq<@yh}?;_2%Cpi=bQ<4=FBSa!dcvU+D8np9~N)(@2jRfe?oEhm+M81
zyMM2?b>PR)(3@yPEv>Xi(7CI-@K3woBkTLc!cKWySb@KX>vbJ^60X?oy9qws)j+8J
z{6|)OJ_89-_u!X0>DNV3-BHi83u_QB!n&@PjUoK9sB3s&egCqlzl()XD?D?dGjowW
z%nN7c5@+Vr+N$rpUCRF6I@6Zf)Arh#wxv65t9pES{rS!sL1Wt1byB&giLVV$Tj~bu
z&RMg#vxl>`rY*L<?L5UwU4+#nVw{_+m9r|<^+5GqT0NETk=dFx(Vb-VjC)fvN0;`<
zBoOEYsFR{FeyyyX0RGA2XK_tVKm3~&_|XphZTH&F_uL9Rc9Q;hY?s=o(h5GYYy8;`
zym<bT75ckL@&q#5E&tOB+_%2Jx4wU~M`0JXd;Q1?{L^mTZowIh-9vj+*7s9;fY!G?
z$-h|Nzgpk+oW8KWUs~Tk*nRlPnLsP>z)pGY2As5??*D4f$scykXFu4TuxINJyGMW6
zix67hk@bCPeP3ALiS?Z+EAW0{2kczd_g~hxy#<%n_saUtt?$D6UR&SxUfWpTTkCsg
zeW!LG>`rg((y^VgX$0)xA}sAWxw3N>soe>Cwyx|RU71Dj08Q=LwkPbu4*caD;l%EG
z<|JJ?^Y5PSrCnqGmopdk7+?Qob#UjL?!+whWH4d8L**7<Qmq;RFK~mys@8mG=UwmM
zKcG4)i!6V>wz;E=Fe|MLKNHm6W|!(I;ibEkoAv$M{4Xm|e=kdmxwo`<=7#^kKt4}w
zZp6w7EeeN4`&-Si<q<76Hox$}ve>8xtUCVRyTT^JIG0r@X)pA!*hNd_7LBUB9(sLo
zp)CHh8;tk`xN1zxq)u6=C94&1kg>?MDpwY2&(aHa*;0j}ky*h-C$x1F`R=M?0*uvR
zp_X-!Q`w|WRedBJRBfxlEv~8o;0TxD#u6w*l?;I|?KgF!6OjfuyMo06z7`A6zKUP#
zcq1J6xgaDotVe9&8ISYJY?IMCyl@zgnIN$fNM&}K@jPVAd26HZge@C{IpBWA#cI7&
z?{r06IAaP{dd^4bVq;M|i;$M3uI#6@PWq`>*L_?s!#sX%?NNJ&W~=a`nq`d0s%FXD
zOp9T&tXU~}xZRZyx)@loTPcgf&N6{bUDI2YvDQPiOYHvrw;iB~cDlo1Cs4OozN<FM
zwhT2D0eG2j)djylZ)S02A&T#n+Lm>DS%s={#z>WUQR9ja!mFja+Ef)Qd-@;QfgcK@
zC+T45nmO}RK1I3RR#7I_`3sjSwGqk4=Bi#~{L*X<ewHTD^U<$$wk2XKOH)<Kd*2W1
z%r%;+ERI!H9}Y++YOu>e-wk>rH`NUWZgA)Zy|EJ<xj}F0R^<jqZg3*O;S77Rtmp1I
z!P)K0^?i8yuJ(hSBe4SuJFr_PL{^4Q(fqBQBUg6lN%2;dzp_S`+Z^JbsI(ECI~~od
zPI&@&IQ&+FoS_IJb(DcNPwet9?ZB^g;GrGhHn&S>CafTL@`X}vKUa7nWw*8?EWq?O
zcS-=_7RBpj^_XdW;}x&V+U>gCqh(#;vM59q6<M8yv8HZOPZnPd^>HYz?`2{qm;jfE
zogEPGmTs_0HQbG*LYH_<b+$U*?JDP5i01CjohY8(-&DLUtd-)TFV~G&&bSv@Ql&em
zJ``@`N}Mgsp{3gxmTG@D?woT_rMGNn9^bNlZL2;lyLBT9^HN%_E^5f*>`AH&x%8}A
zjMq22Y?(!6W@#nl%lr1RSvaB64hi0~KU9ft0tJa}8E?{FXG=~~F|SSItiN@-sqE0k
z4LLcN_w9))@7vq{eRff8)UiHDwa!Obg}jm8F6fdy><P}B(}ELPIH9zlYuwTlC@KXI
zz$;q(tqZOs#y~6eF0%yAxf_IYrfOsltsCvpQmt&AgrAG89R&=dX2ImeHn*58rKLtf
zc!nL^SX*l4C<;Jr;1^pxg)p&7U4<L`p0HC_(zq<%hOS!3I?b#6gmY*-Pxs2wzJQC}
z>ZZ?GRoj}>kQt+nG74gD>inxsVi(`6ErKJflX5#C`;<ryFjl{}ki4H6&%7-$w3I<A
zh=XpjzbfwLcr?(9Pca)ut0vy<W!cqPfQnU>KeoQJ%ub1m+zviy1RKfmTPJl{#IN6G
zL=+V{-Dl-vM*d0*X$;>s%5N8hG}W3Ik%~iWSCm9GTI80am_$3K-c-B=Ru654_o7&B
z7tTU&vQ<;-2vODyGEG!v^CrkuTI7dpm{_OJkRHa5tlbjV>u1*2<*L*2+Ywr2s%q36
zY-M!~UEi<a5i45R%T_b^DZhob=T4f1S>&OuU*>d)klMuUk;IrD@l09ON*ThS*Xm7k
zlDQFkj(4lITeHM8vZ(z$?lRE&o3^S+13h<BZxHpyk&UPJ22rIQy1&_E7q&Ru*=ww~
z;b0})vfg%YRdS(&oO-F0l}MK^j1=Bfph>y9M!7TVbZjol9RP1beU5JF%X(-gd|sil
zOSPw#*HF3J%W&alSUz$mbNR?E-$=f2lb89U2JBg0D*c3+Q_Wt!i`IO63sN>)<&vAG
zhM#O@;FHm0B4G-i_j-0C7q=Duu~GO(r!eTgx3*B8&f0_B`hk6BmTF@W+80|p#frCB
zNK^o)S%-fl%6Y3w7cAsUI}2ShR_F;;pbJ%T7fZX3Z8<1fM?JB7yteS5*ouvJmee}7
zL%)<NR*Bl|fvrv41Y6YR^IaS(m6+T$+h%L(v3qE8JJs$YcdH^_v{9~}=|<mnZnm{5
zt&B92sI3mv3rPvqh<9t{_KVwdA*@xuonZQ$tH#E@49g9w$<>=?&)YMv?aUyem_Dv|
z*h_YRYN1V1+nZ{_tW}^6ma1*m-c<9ppSwAEsM?yOH`X-i+V;^B#BCal?xQA%vyhVq
zp!FP_P@-HFQ;BmKe1)w7EE#Ojt~FX+5xT?~gwm^{91e0+ymOSODeNM$6ya()vfDt+
zW)%Y>=7q)m;TCEUqNeVx8tX2tibPpFHj8|+OZ?_^`L|0q_|OjJZeo7vrn)udZrOFY
zD^<;N1Rq1+ZjG_JvDg82Zhd%~O62_JguQ8;x?0PWb{WQ(vx~xFCa$c&YPXb^0W0)S
zm9eb~mTzP0sM95Giwfxb(wcCP5SKMrS#n3}1<Wph64()TX$r<xM>uFfr6db$z`wB%
z|7JrZerjdB%o0UtwzK`B;_cQ_24A|Vr5j|Xz_xaQS>@u1Z;98)v4!izEc&p=h6s1`
z&n@`-+#0BTr#`Ua+1-1MciE;5e2+THg%<l>HrdieQ8;XEs2?xf<R33wj6+>CF&MSE
zXy8!GCi0>-x)JcPc4}=ixs-LoS{LB+Wtg|!Epip!l4=3;TN9g?6ZdJE+o;5a6IxS;
zoQRDZ%$N4YriR+ix6Y<+&F6OavX*CIk{lV#&Iu)MDBD<MJO?(HZqVKf9D&mIiWgfQ
zSz!kpb6GEvgd-cV=87KeS7Xt9d1mnk-chKo&i-b$iQ5!~rKz#Nn768~=lePc{%fpU
zjl|65DF3i5Y&K@<1d}qh`60>D3GUp~otqlv)_t@ti_{Saal~e4$yv4vo`Fm{L97cc
zCLBrKww5=wYzGrJHK|j1AEzZ<l=VhkWqJd$I3m7U#@j2WSD`Vhf}T*ZHrFaob#Z9}
zcS0UaaIB&Gd&851;@fh?PJF|7VF|+AC@7;68S_0`AE|oFMv(=}IIuMlkT7zQUqY4{
zEr{H&x5~>rX-_b1C^u^z#U0s}YjHZm5fJ&a<jY9lMm%2;ff(tBHy+lg&vVH!61=8n
z<x}9YnrjMZ>2#n&OFOi4(soYTWxXOCTH2vS;)HfiPTdvVd~LTvf#2+aWwk`1houv8
z(vl}m+R_O*X*;LfOQ+74PTI~X_tL5JrIU8)l>5!8^EW5$(kb_wQ|E6^+E0lcT0C^p
z+|bU+`O-;qLYMATJ9zPLKh=w}TSUv()k-g&P{b@jgr*3+wyd%^<l7-_ljU(i3yqeN
zjDEPN^&@6!|E9{T=c{nJd|oGlBWzp9t-|uPss&Eza+}wTLqfp}pT<H&(BQUt*Etb>
zGn*@=s?fr~Z6vWFnN!|LNlfv*W*i||bw@)$QM|9OR?V{t1S(WY|GxC5qKBq{%=S&c
za}e64lZH8O&NnCgkS!U8G*YJ07~`%r@ZMUmdA%s~g#yWPs;Gi`5vzdDiJNtpSo#?8
zlF*?l>q3R))*{3RkuLINv&**C8f<o&VJUmSvJTZ66m=I_PNpFwmn29Z*L#|7NX=21
zN+0#a;yO|9bc3AJ@PMB)CL0<dqR$|9>D&%w6`C?cW~<hP&AK4Udtu02pIhZyUkJkH
ztpnt%J!u(QjNsA^Jh216+JR-^6skfZ+2ZZkltOcCn-p4SZb{N2Kgw{MD3Q}{6$hGv
zjSQY{RHW<G!Y8&=&mZw*68-524=+nM_>(Q9d#WiHF-EpiqSv7_;O`wdaU(S;8xbtN
zD8oe!$F&^MmJd}jMic4xMHOLdVf^7Xw2?(OxV-PCx<M9jrndaW2}1nYNH$?8uDuP*
zMZKq4b;AlSUT>5$V2XGfx*}XIVwK-0$K;u_*TJ{B2~KNuj(A_4BewZzEETs%$|SB8
z(@Q%bIo*j_*K;fi3@a-;GE@hnbhER<fGt8`O_IWnSngPP!X|c;a#uz8`n<O(BWUdg
z-WZJ(qYlwlO0*wZ3f1}(_O`RC*o!tw6nhDE?adwB-bh2;!cMZ4HJb75&1f~7w#m9B
z`sMnT1kItlWp>+BZfQuy(H`I4%<?B|P&+$N+JVFl&}P~-_EKVp%iYpRFO#K{zGN*J
zYwL5khDv24wRBQ<PECo^&adq2;PGm`%q*^wa`c2Y*~$s?sj@i|WlPv%BrUg<nh_s&
z!nmBucTs64)1B&QB`wozW20|waOVb-I*8l6a9na!p&>2_LO!jV-VSlvX1Q}xH_N1v
zo;1>T)&%7jR;m+XFCmsrD*Fk!u-RwJU+hKSmL|xE%jJ7<*=6SH($<@(SfELD5r($J
zt8_xiTNj1iHNv7{5r)l(s2LGABa&vsUZrU>;-VR05jFbxvZ~*WaNG!&VIyMMj3^xK
z-on-osWym*fYHZAXj$Wz$eL`5Wnw2=7e|pgA#1q{Ypp5IrXj+9R3D3CSx<FTg*4Gl
z|F43Cx@|1=Ckk4m!5*I<;Mf&3?IqvF?{6u)pN?A{I>xSw4?;E@Jin|nfFmN0VpJ2b
zYDB0vmvsc#AxwP{ZKce<W~A}g-BLYN%kawL(<KH+2d^T#C~OWUhh1?JMbtcYO^WUu
zJt(G~-WUPF2xE1$byC&<GZ9*sGIca;LPtZVT(9MAoNDlKBO-5v*F~0Z?Fb_7oG^Va
zD?|@E%{&5oyKy+QBM5{$6TyLG=L8)-HHEitYg>v{?aYXiA(GR@eSyVx<)s^Z;2bVY
zf8qum?%*oiENs=;hODF!mSAYH>>BB|D-Ak3PR}UpN*A|mmuqSM&`ehfc0ACKNKeZX
zNmvPsp|WR-m2z9;MBky~bZBiM929Egwd<kpsBENDgqy<&hHiBt^sPeS+9KyUZL_Mv
z_pLrYb5!J9Ejg?61s&RAZQlY(9pOoY1)j@GJEvV|eWKs0q+$>EMI={S%+MySxhkTA
zSL7Faa)&CiQq&ALwyFlLM}0c9`c*^bfQYL2-r=!$V)ns-#+;Q_Nn!x2@Wfp$&4W(S
z!<tpN+}cO>!U-+6t{T&Y6V~#yHyajZHMEMVSVykbmi3~M6#_X&0O$rKwP++4&GfRF
z!6x$RoqA!TmDU_ySl>%qf$qW%EFab9^5T)zf}_cI;e<Ht!b!8rUDWsW#qyCorV9(a
zusG7jtu5sNb>YN2dT|$S(Dr6jokpiSPER@Ik(2bu-UqCGBpOKWef~4;7nRhhwxm|{
zmMV>=wt~$(hQz;E{$<USW$M0-Er&LCfM(22azdMx%{+6}NmtvZ5)VhYBcU?QOdMtD
zy|7}VGhaqZY^gldV{atdIyRN@+@30ym06Udt<{R_Z%BiohgT)$cB-|#H#SU1IsMAE
zRn*GyOMT{^TXVaM9Q_7Y*NIXcC`ZYSaKuU-c6uWmsYdmxp)WvL8c<eZTve^TEH)%&
z1ut8E&JGRC4OS_JH8mb>#jt(Nu-4pbCpT_On>!raifyr@v=uw5ZQQP-1GjdW%u$2q
z+{oNyNhfxgH8(8erdT_w9IIt4RWa)Puu_5IBMY^o8n_T{UsrQ!Gj%SjBowoWtDkK=
z+YXeDT0Y%jc96d9TaEf`2lItZ(=$b&*LGH!V{D94lGfDCbsVqKa2N~&_9$uVp^nDG
z3F8s>jlm+1<biFy_;6#nIQr2J{LRkxcRS^0JLQ=j_{9$Vx83M-JLQEPcxeZIvje}|
zfq&S6KkUFi?LcS;B0CV<fyC}xY6li}w#*LvWd~l{fu$W-*@4`ydTpn?u>++Y*w}%s
z9oX4{OFQt^4!pAiS9ajN35<a9TK2x*r*%IcTJevp?;ou1A5&|mSn+?izMoj%Pp$8t
zt?y^n_b=A>e_Q=|ZpFW_zF%73zggeETi^e%zW=c546XRc`i`yd#QIj&cWQlKSl<il
zJF~w3vc6y2HrCen%KFZ&@51_CTi<W2@6!6-Sl?UgduM%LTHkN2?|0VsmG%AJ`o3>l
zY=3V8;<3p}d1MEEumeBZWggopf3pLBw*yb?z*D<|XC}b((Q`Z73p?=A4*X^Zezybv
zumgYC?SytpWCvn9kk|ob2U0t5VFwm=AhQF1*@4$~U}*<db|AL{h2smr4!m&;@9n_G
z4s7kf&JJAKfwy+xogKKc1MelE4Irko!5D|hc9oZAPH5?b8i^*A>+4TO<FVt<yPyAW
z_%e@+ME&FGljo>oZeo6V@$|{4C2rW3&&}b4TC&frR_R;ic0F}yScQHra=P8KOc$=R
zaDXvq^+LVdR)PClYBSnxRTcB{#ShaeP}N{JU-hZcU;22&8M6H1sRSP?C-^AeX4|VL
z>QXJ|mqnJ`8Jw^e^`c+)vwk?wyTfS^^!hP<%_iQY*Wb|BXfzr2PVU-{+|`*n;tmbY
z=N<an>2n0e=ur%RbZ)wZ+u-$e*X_WEn_jQqto4by2;(bMET2-h9w^r?pHzR@7#|vN
z2He^LrkCsI52^kB^9PR~qjG#n<fC_6m2a|3HTNl@3h5Hnss&uigd`E`JEVC2ppIsZ
zb<s1?>}a)$t`~e+r}=!oJviuY=LJuE56hO%JNa%Esj|bVS8G+IcebY=mOQ)1+neL9
zaeJR1A&zntSf$hah;0ifT<V!U?GF0k-a+WmoE<k(nsNV-sGELcPyYWp2-zylL9}(h
zePGrg^a=Za(0$$83_Fnfy0H#CdSvCPwv?T*ifrcQjb>-$u+DSaq-C<}xm4T&xy%g3
z763DGn;Ilx)-Vz43R2t(*Q-(l))jozgwc{=d;dah>${?QCt_W<b3@?&_Ifeq&#x5O
zKchwg5dT)KT;wxqwgASzRee?NGui;~`S+^lB2+Whb7}5?Ppv1Q{pYo_v^LYnN3gda
z|IHTcqMy+cZt(v%g8-`VpH+=@h|H~g`#MxG>@%B*YN+?o0n||Q->mqPQ`3aU|3Upy
z@H1Qa+_n7=2JpFS`yW(2{QqZiM*r`d`Nw~_(6U2s`d%;`9@~hVLrAD2^=@61+s)k0
zlBL}a=g2QQcdM&e^|p($czcI=axW<AQCSvcm$17vbzdcS!aKT1uX-}*s8s7^7_06#
zXV<S@eYolN&R(7W>x;v$Pmj*Ox#)LZz53z+LqNR0pwp{!-IK_7e$wgP-1GwiqPKTl
z-Y~+0Oh@ao*cRN+qs=mlRX?BWS*;Vc#dCD;mLUU|pKll0=7dLYlC1F;*Vmo10@dF6
zK_{PcdVUm#%VoFdwNH@AYxO0{^5hN|qG>DgJ6X;yS;8$l;Jec~EP5yAjV7Wk2mwa*
zVR^A*$1<C~*CTr4X}Db+t-^PNQxy6Mr+b<HU@GM7oCuJ?$>!VeWOI1fi;vd3&7#}+
zqI0<E@d(Sg=~uVI-61Tj-_h$<y%*K(9L7g~6&dB}cY24N-iJG8m!Zf}xLz-5uhOjb
ztN!&)?%Z^G*6UT+Pn?Gay4i+#%(Gd_l;?z8S(Ri*agoR2w%Z(ZuUG9VS=nyhBTOtm
z&5ya@jZQO_sgKsg6hl!jhxBAUw>o@tvaZwTR^EPT#q&b1`*zNJw_KXOl(d6~BR}{!
zB`^Cf@A6*nS$p%AU2}b1-1JA&$>>w(Vh=Ew16||V_IQu-aHVeQb3?G@+1uPeqlfG<
zFk7<(n3gi{ZOf|<d6%|WM>ZUtR+{Q~(WO<*WfHbWruxlK;U#;uNwbR`VAs#o)MoB(
zkGtD$@A~>~-jmMW^)L*YP-h<zwCr$4D-d({t~xlNA71RL{u@21w@l&5_9$X?${+0h
z?e$47B6aKFpoRwZ<P{Xnhu@h*uD;vTb6KzD_NG4_`m@j22>o*Y{3_pu?*KdK@S9H3
ziLXEkoo;*ac`<Zvv+h?;o#wQ5zdBTOdU=*8X(wv3y{=g`qS9!uZa!!2H(2{k_rp!U
zQ?2^D-iM8>`rbjRA!2ybU(PqDc3R!>wXVq>&c*_I9e_((dG21_@2dO_T`tG#egxEe
zG@-%uch-P@F<anSdVSscuHK)2Vw?Q==S~0VoQ9XoJG4n~DJRyt^D}@`Tso)4@vd73
zd;N6&q4VYai;I$7_R3Oy**R{l#mz-Exe<M;hwG%`_-n%7@7Po3t(DeUxW+nUia*{e
zSkhFJK{Z9EJ37c`&#zWdu{_Fjj`MD>cU*9}%~c-%P!=oNmT_D8I+LDMihF9}epI=X
zXpL+u(bfbKx9mWFbL-G0nTIW3ROI{Y;&Hyct%Rgf0r}wkMX^*N_eOtF+{17i{+6k?
zx7A|OsUGtwrMTbxheCpmz5MktMOEK+`~$lDi(H|v`;nAWC>yDv`nKck8ulY8r`e2V
zcd5&8$$9Ayr_!G)hxw-XAC^V94Scf|TW7$|L$hE9O%3DWr)$u8Obt57HDr0X%-*v%
zv;0?ekrDj5y{4ADTw_Z#*IaMEjDojq%g5$`-`4753m{bAQc%Aa`jL`4hZNNTDf@|e
zuX9M*dd{;A4LHLNG@pq5Is6$>^p{(>1s2=}4Fnwg?fEmVq$6ms)g4Ya<sW2w8m@2a
zHziSr=~uF~b;Bxm*DiN(z#Z&roq*o0FpE)RUOf6kp`XEGq_BKYjNA$oBOesQss{=i
zk7Db9Nf9t&J}H)ZyUI4|wlV5t8mIn}BJXZpOe9M7cf5pbMOa-Rb%0Y8TqVbKsuLkO
zmNLB7rgSnjroT|+f~YuD#vc^(T-{m$B~fAem298AfRxu-KnmTyfX^3UsglpQ@%A!u
z&zf;uAy8kcMLw#S+YUjeb9>(qk9_i}V=JVMlDNqijQCV28$~jp<#1w-b)q9ohLFNF
zI&s^O9sHvXn6eL+;mT^`_A2a*rY1X1SNI7CW@XWp)G&-gp8#T37G1msV|0U=nK7Rf
z`@0HXe+0VdWU5Sm=_0h(KURd2brJf~MLu!_bh0i&UpM{t71Dc0F<uJV7Mz48cEr{6
z@_F3tgq&az+r2v<h;TkpOTyq$vgJyuOPg|Ew-me$&$_McPuHQ#YBq`bNE^KqB8|Ga
zO*Hpz8r8O(ySn<arFyQmM76uFMS&A3Z&(&*+w*ze&u{t*VBz)gx6k%j$4cn*J5@!U
zbAuzdWdBIUKMB1mGqt%TGc&T0-Yk|D<)biO+*(YhH;cViSGPCCiOmAg0Jyz~BugQC
zmo_HBPTHT0CZewk>}`!tlx%79<5e`P(^$J(kB;2SY_N4Vw~1}buJ*F-cL7k!&4;M{
zj0VeYWH!-z1#G<9En}y&7t_deOEI0YU#xW>+`5qN>VJCSZ&~wyZ@DW}+pVOEZY!WK
zr@az7zO6{>oY(PtMHmPEg)v2B<Pc}!h$>ldk1V~ivusQxveC`uwn!0sO$kEl=99R+
ztb*yfStYJ5tH2J!FuyHxzhiQ^<p5NkrMDN;8Bj_i$ZpSc<X+e8%zthdD!(;1^^KD4
zLVt$KWg|PqI5|qC=>j{GL^kqmisfaqt2!1rYn0s`SRKDNHW!a?6m!yAiZa&TEW&Yn
zS)Z%MCZLG@Oic{BQKXr?UjcSSqm=BFy{y2Y8(9(8lC{FIoB6ARy+Sp{?Ut$ITZ^=`
zQbq3-sIhRjL>=E=#74JUO4`Y-6|_P#E1|VeD?GCj_6up`yHP^N?q%0_x0_o>wr1Yj
zk~-4OeA9o%!u*jR^!oSdYwC|@z5Z(cOr$#%tDi&trc6*ILB0OvUUo=}_VRDmEJW<}
z-?UdRTiMF5<(Iww#b*}SNc~ss+2!n7+0{E0_xiujzd8HYmq%x>&d(38U!8SNkGuCy
zUnPh1@#={F_D*}(-LuYD=e;hco!))r_s;(H>ec!6t5-+8uTOgvra<>}juKSGE6Q4Z
zUVr&TulLPG|JV69uU>Uuz3QD(;B8Zxi^-Zk5dciu-0v>>MUSxZV&3_(b4bYf;;cCD
zoej<pDNO6sO(|UpW%HEMxKu`%{!=QH&EK=gwBJf$Wd{d$x0X0H>~{DKsx04R@tqC}
zGw$Gtj!pkgwA<dvHh1!3dnddMvn5M_j_&+ISRaubX|_~%!kjW}cIs{=Hu?}Qvv6}v
z^g_5&M8J!pY<6=~w^;7Cm=sFdLDN**O{*-K=c!$Qetpe)aLPz&Zy6r<>CS4m+1`n$
z@6=#^56%&4@jBIB2}X2f-+2cIok%0Qb(8KKe#KW_@%Aar23K^)RARNJtN03yut<kG
zeAWHtUtgZm-aG&L%hNBu=_^~%P4o1BzWhITR^b(<hALUpO~{po`PEx~q5>-vZtu{I
zOvx8no>SwLn%q(Jk2^^T?(jQCL9i*I-_9>+f(I-D&+&QB>j{<J5e-B7V2OOMv5>UD
zSz<M^!IjacmDI`$@v`7KxkF>=ST*LR#_hjdW3g6wU8B&=XXi$U{f7Gfd%tV%ntt9d
zdmoB3BhDv!_Vi7+?El*DeBpI^$J^^`1<Cad%?6#p+${azG^aCn-0AeQ`CIPzVZjHG
z_F+GsXOKqr*Yts1-e1n|di{ukI0GjU&Tm8&^e?-4f7Lys**)(^EO0kk2)nu0e>%TA
zIN5z`8a>$^&OKR^WS*bx&in6aJrY@(1wQrC(60N6X7c^@b?2*&{`f!oLy{IIX<?EU
z1XbSO<-g9XueC@Ldt`IxZMI$9dBYD!Ze#~9!b>_iEE?pAmlVC4mgJL{GdVbTdVSrc
zxflqXiUoufhx5)+=P>C3g7ww}wc_)NDZ=OB?tCo*>n^YUopn!(uieueG4QE32Tf!P
z)Z%?#4QUUARlw?o#jXbjyF>50YRzTlpUpSjbwBBytmj=?pS#akR((NNCw1%@LC|i8
z9ecC%<2PP<M6)oocZxs9>$BusSTj%O_fZq=6OKF~0DX5!JA;Q$1HQSb<*a=#7<`sa
zL+8&wFP23VF8|!+*_)mEGfV#bvsL4$lEUUk7j#R^yYiR7W$)0V7Dp3D59lLW6f9=%
zbq&4K(5a#$!OLAXR1b=tC2}qx*$yk?3Gb#yg=*=vQBSz3K2FM`MYsV9@dRu05RHDn
zyJ)I7l-*v>43yvew3_v3PZqX9h1I@Z^1VI`ZfqTc@}|#n@6TG8R`xuQ?t=sQOOup$
z$K&Cs_p$Z5MK7Y;7H{gOdr{DPs|Xb+icYUJQOfa&Dme$wVUKmgxO4xOTAN(TEqYzj
z0)d{Ev{sD>DX^(kRdCz4cf1lHnA`)c*h1TEJ2!(PIJNEcD(#!@R)E%?#?IDl(`chf
zHPA)7Rqag>&28`hwuaoQf$xVcLqWyd*P&0Cfm3_SHqf;*ukzqvP&daBw2B72eP%W8
zx<H4=skJ4&tr0mEA6siG#a+QM)y1!`3%WFc8rZ$PyElIZ#6R9Vs?;}SE*Vw)&xTqn
z<rtp%C$ga}Zer-)WvdTBm+R}h1B7b5(q0q5F_an2K4Fe#!0#s^2A%aDD{Se*VYb$b
z@Pe9Qn(p)30Uc<yQ?!v$dkaBe+M1i*O+Oe6MxWQ<XgnSA&GCUyi)F%3w5fMn<_K(9
z5jU>GjUbW<*oM0$Q@LviXGCCz*p6C__hBOkqRQ-2CC|6vR<ZsKsO?+Qs&cFB9U&b2
z#hb3`z*ahTL-^r`T(>HlSZ9?9Lf=`-s;s^cSJ4_0$hKFgES!J%;tScNGV0YjEY)WW
zxV>*Nfy9$a7`Cx=vx=i^^Hi-0iaHIC<1=+++9edByom{8{-G$}hGp`rO3&S1m5TLL
z|IJQOXQ)nY@_Zg@3!PSsf{^LkAq^qf9|I|ldRpt5C7ioefvunH0qK@A$8ty_DT-T&
z(H!xK0Uu8Zu(O1%6y%u8mQ)rBec_zJJ}8B79vZ#ch_8a0Mu-U)-LekchT@4B7@WNS
zHZ;V-;o*B}XfY4Z-h&NrH#=LLQ;l~Ef<gs-^Ywo>r9f%|F$H1{7;JY(1j?cZylG7x
zT=btA4aEDb!B}CbTj-Aa{;^Ax@15*?{xM8N!zdac6I-Wsu-hqBNVBixrB5Qw#shB<
zFwWGHi&rIF>P%xgf^C`7GQ6<rny^7>OE&5JpKOMvb57adw5`>$VBSY5*}NfJqqb+`
zw{Uc}!Hn?#wrm=r>B<OrwB~|L+3K9fbmlG9#k-OpX>fDz+UG{j_MfFnbxxm7M(gzK
zHbiu9Ooag*l#gZmbD3@QnEV0l+_t<c0s^|a5$)=>EX(lymCiCI(zh)OJo)REJmzG!
z4U@3)koSPuEZ&4Uoh>;_wOJQ=wQAn9ziJ<6Ob|uqnbn~6(pY%xDRHTT10iwe6}zQ|
zwI>^*w?*kTX6m*$))9&_aTXoFJjS0${$%nemOr8Vd3tQLZcj8+w(26_Q?;q9TuZT?
z{CO{bQu(vlud9Xv$WdAmH`Oe>u`U>%5t@bQW_tv=Gwh0&{q50%YNH}5k|;h3^k>63
z(|ldW{h|-kd_!^i8Q^(A-}UV@-*HeM_IXBuC$xL!@9BfDn|VqfzW`v&Oa9cScpg(g
ztbovwkb`;`&!18t+teLz(Qf9!USI2BE^knvF}61*(ivS#UAmU_ja{G``t1caQozj1
ze#VdPM|)SWMXpq4P3-Lr?{r=>>$m63Bqx^S_FV5Jm#o*Vxl+lc7xVUfrOszo`u3c$
z<g~WI?Ri6;*X)tob3T=vzcD*guMML?ZR@i~jw+jIcA{Y=Eq@~U6U(1a{yddG303g%
zRqr~>{+^22;j|InG{Wmfc-II&YlQDN!mCDj0W){O!seGm7!g_UaRQ>o%h<%n_o;%>
zaQd0#6wzI5$H2UpsW<R?-OjDVd8bF1#r~Sz?G|)$4h~vpd7lUaEze9u!xy-3Q2%o-
zTEfmhY-{Ik1`ty(Tx*N__Wni~!slDFv*!b+17&yxz63XJCDayp(y=3<S9&+LbxgI{
zGt2(#rb~n{A9FZ9s76RYwO*|FG&`m<<WIfN;;6AQkhLgGqJ>xe@^)Sdqk(#PZ?Q-G
zEST8MPVF)_A5(J}Ebisj;$E@{;kcSh?!L^UDa9PNSupx223=jHc7IKkGICV<35F6a
z*?-{8h9KrL%yKEYFDB|2#z2f&HaWIVxAH{MWxU3c2(aau<YT`pRY#dqAsio<bI|Po
zUK?_(gV`F5{m(ho;w=VVVsNCzON?v;m{)x$SUvL-yo(M41<KYcDF!I`U_49g*<xik
zCq%iMH8@`PwK~o*-RQS+F}KAp>|uGEUGlCA&-SAsCJ^TbZT+|4)GcJOWoK5Oh>f$q
znQT<`m0_DEJG{K@JfaooEW^$AG2zMYL<V%XyFEB4cw1q_v}|=LoE$0>8iF#fWfDLP
zZjRf4>n**pEe7pQTHs4o4(9_$fEn5&*Vwt91<_B)M99!)zSabnpL6KwfRDzWZ9sl^
z?-=nuDVE!8ef(jwDBd35_4@H<^MEFHbKFUn#r8$E?g+mt-yV0q+}ydo^N-^@U%sQi
zf6(8nPX8SP7sAt4;r5sTSO2ORv7+J&a7-ke2vbIfHj6CXZjL{^J0`mG>ewIL7*5WM
zg%Z}yCJ)zOX%Y0;ppVNeeob9NpvZqJE>+opWH<dU#OC^#q2UQ#>N3!0Yqr-kp%y7L
zTN@uy(l5m(<G4BXj5|jCLK55Cz_E*McFK`;Ek=(5*5<5CakQqXq@UeImK%ZoiME+W
z+AosCM%_iPvJIaPPRefy&>bH3nmNVV+pYMlJclf}S3~a1taQ!*BR_h_eF-nrKl=I6
zmHz&NpzTI&U&xG@VbcMrX{oRaxYqlSA7Sd5s6Xwht}w1xHD*yPi8|=^dSW8m;eIW6
zS!nk#IA0L)pj#k>$Es$2*Xtd3W8DCy@ZDOhG^X0^(W&TmjxVzf+s;FT)ZXkaZ)@0T
zXwb8UWLo?n46ufrzNnxB%<wmF%5Ars-&4J>@q5@U?rrIte`zPM(o2sfkxq~qV@6Ha
zJC2Qzk9Zdo)=}0v_&JuZN>{8%euPbqy6AS|%WSVA<dBZjHRIHAQD(^zKftN(#|*T8
z4U=rQp*!e9l8I&haeV0A^w)C$;gGQg!DhB0t&6R$KvQ5gVm2Spg?7*DFX!IL^4sDl
zq3mWGFKKs5%-QmucYZcF|CZ2<cLa%bBu9NGQQd4#d8n=>0QNn;d}A3&#OF*G$+!p|
zxjN{b-}HA@j@Zo+OOB^|%ZS@JmWzc5ly2ObL%1bvLQ`X|PA%uu+!kxynzN{LD(;wE
z&mrdRn{GF|SM<K=miO|?%>iW$=iTz_uKGH@w>>O+hdF=Wix0Q=vL0oQzefJUf`U|I
z{B?LQ{#qSw8Mm|g-aC5topu(H(W&j1bVlN%ci+|yBuw0um9L<Zh_mu>oGiv>PL1*=
zxtB95@N4S**X4<QBEo3X-B54VUvCeWy>IGMviW*Lks4Kq=3#Z9X#FI>oi=qv-|bF!
z$I(r<IC>YpV-V-ZUD_(_zTwJ>xZ;R9N7T#_HFNBmId+`mu4t@0{dRL?&Vx~L3Axff
z)zhcu``qHUVOM|lskS~>K*u-kr}M6CJG}luwc}6rUiHsPsp61ZyT^U{y32Lk<Nkib
zeZp7oymw-s$fx~mt5(M!sydI;K7RwXIZpZl7>*15A<>HN_f`-?r))j{03d&C&qzuq
zrq>6+Kei_(rK8ikA#?#ysR5~39jTtHZwYpsx^Qm8^6yoD-8*iUY^{#MMe%xrOXATb
z)Z1{8)qrQK1sV=qn+q-}0fJMNB3zBfx^Pg>3mX)*#WNCsVa!{T`>nC<dATY=Se9z5
z+WWv6c;~^7OiQ{3_3hy2)&hJLyNiG8P#SwgqeZ7QGjDm;=bg7%!U`$*(L%xt#m@<K
z=vuC_WO=U2-y8W5`IF9kvUhWzd_I1#*U1XOgQV)CwIFMU5c>vJ(O2EV<im})D%e3~
zMmrt;BxNIR7W}UI+kAf;5`pmVU>cv!TX&Q>{M?%wAyR~HRhix1qO<$>*&epZ`htxW
zAR4kbDt24FbX~e)_8<nZZvtDH$tnx_k-S%gOuxIQx^MZx__w_yqUws}lAo{Y_P(p4
z&-C6o@AmGoVIP+P%lln@;ZUGI!1%8A>U&YF8`UjLbs4I=x;LkL5!UWpQSUUjv36>v
z5&orAm%O9hOx%T*j2vHAe$}k}s!{n>Tjf_&$yL84Bgcc!XaQ0iFDd$^(W%~F(vaeW
zPb(x=cmM1Nwbmy(01j+I#=DLd+tsogw(q4bqc`p(5W>;u`Av^qE^Rj55ByMVGyg|+
z*0xwT>$-h!-SjXk4C7lE&wIr*?RRi+TM9dh>S402i^%4g>=PWEk^k_7u?w8$as7B{
z$=dDVdUiR6RW`c@ErsiLzD=^r?`qd-LWVkHIyh*FJTmn9!GYm?by>spV_AE>iYeRe
zR*m2JhMGSLlLUFXpQs>QuT`GBD7thPCs&<n+OR{`dZmv$AwQbOzC4+!*HWWR>eKk7
zcofF3FG_adblmx`G)+7G&ii{A7(K@wZ!jEm2#-nFLGW>Ba5Pk_JA<RKT6GvNC<*f3
zD?#>jICX^hl+MIG#?cTr<v7Vo^{wCCp+08Go&WMYuVd6kjyrjgv)R|%1z|Y%Hfw_G
z9gcikhU*TXvb)0ep=>v*s91yFe7X6CXtHm<jK3iy`<pM9@4g{4oBm#X(~s!yyH`ga
z27T|Q`zoQoH@$BNcmC$ft7h!2w8+-blG{b8Hhde=ZO@Ld4T8zUQ{hB-=l#-&@Xveg
zZXT-2<6U{Fk|#`zen$15strUf?*Nw!-m0~(UB~Ys-e>;T(h~4uY54Q<9%9fPAUbZL
zGrLAJnp@NL+})Z^Q`y&+7WMGLNG+}5iXQiK1aQ6C`R1+JB&{7#La;Vhje0;cZhNix
zGrL(cT-Htp4g{r+%6VhwOE&Z@U5lQUm0YVbCLnj3&6`o5*aAA&27H3OSZ7YzO<Ysb
zl%c->GGX%9ZnOO@T=JVx*@h3|H(##zP8IHke$`S_2(Zq;aQb+svD^dR1kj#piEry`
zxHq>sV}^tXwkvPD>v&ohjQeg<@7PYGz5U4=<6>EqR*jp!n`GCx(KTX{St<S<3)89D
zZU=-Wo1|D(t?R0U4lOj)4^26{^7ZYNU$s=etSi6zbmdD_E)3kwi)^J>zHaqe->uo^
zA2s*7yX`fWDbjZszgxKtSL+uA=kDgMSDVEczhxeJy_POr?RDvok9BF+-ld|oOIK}O
zx@vZ5f4k-%Jz5bRq`b9U@zHX-K64pA1x{qfwnRH=p6An(r_~<$wO|$5<R83OUT_wg
zpwmt%v525M8)Zd2m&|SWZ`wepQglpNNbWX&_ViqQoHk>dFe71+;_bVv*VSncsDBp)
zSJlXIy4S>6axO>vxHajrCsu6DeR^v(wKLvVU$8gcFX+DxOfEi&PFz__VP@;SGh22J
zXTq$6=A6C1eOj*er^Tx1?ET)%G*U4+#r}!;SY@})kG>l}bF<1R+p7Ir^j)V34xIc9
zO`PQ3evdl6Pad1A&*;fjr)?_go)nGb+j^p0Ot{|q4LtZWX7Eg%SAd)uIduIpXzN(G
zQ!`7maSMXCDO|L+{&DbKX=HpNU$ZBF{O|PS>N9(Cb$d_TgZ00%EOAxk=Pyp<mYUn_
zHs<?k?@%JuBsi@qk1^m2*KWs=A;nN}-Ie|JJGd4-w^N^565VsVxqnwR#73IqRy|*$
z*W_rWE%>zSV6DCJg$EPdD%8&*)B7QNr;=_#D8PJM9W1#?8|!ByLvxo!DLsH7jit~~
z59oF(6o`RmLvnl@Mw^=z+@9~FQp{laNOEPUyw~r&3)<mZw)dWa5S3%!6QA4p20*nD
z0Jh<G#P8treqf2cqm99ay*c#X^ze?i;ys|FH%+I1smcww8iS+h(WrCNyXpS*-#b+@
zH*Yd*m>L-uad+JXb2Nrpw7-l_$f@OB`Y0)4=&+q~C3gosr{hqXsj^sR%Gy1>bn#Bf
zZ&;UVb0@qbJXJBT4)2(fHSY=2aLg-o(~c2H1*h@{{@E?jG1!-TicuNsHiWm>yRa3z
z`1Rk=SGo+hr~B~oj-*ujEiDQ=cZ^eb?IoU?<OOBhcwY7Xl0LvkqBbM8(A>?VT4nDk
z1zg;upUj`u>FGR?#$^y}1oMI2(Y1i~c9Ps6$d<~`QBFXT^>J@eDS~*7eWSDtR=^Hx
zPQ&Shtj10M{=BGmLw_~@U@X5jWz2u_f@O~Q5Y0Q*xO0pLEC|Oet9h5;)%ErL-cgJP
zr46sMBkEkDdzBrrmiV0aJ!6IiV}+|8KSKsPZ>)IrKo9dh>@d3tIXK9eGi}AuHaf|V
z7Aj0Mv+)6&=5@2)5u2gq+n;IXG`rQLv}^wh??s)e!%mxL+uM|!PouM)*=*;v8rZQ(
zhlKlL-U*H-M_#9YHUEa6{rKXWtp9t%Myu`#ol13-=AuNzDb~#YT5Dy&>%FlQXO-Pr
zdzLN_9-GmAl-uU+Gf{x-gz)gg6oI%R*;2pvpWveT|877(_dL-DuBYv-jS=YG$u}go
zZ@%e3JSpC)@<F&!-5&0KC+6mN8sYqR>(PV{f4yN4bbQgbbTW^BHztaM{<Z+<Z+Yw_
z)@IEFV(1_{52EZZu$}o>eLFbiuQMgQaP4#BSmMqJDiB0?z76BoPL;9%zaOnsd7*?Z
zu{zD7x|&5#LsXYqLlr=f?rqkoY3t+fTHA)RF-%&8>$Yri;hCOwsUP9G+W@fkj?#w4
zj6ZEzR!B7ikhV-^qw2W*Z4as-&B{&N!!xKrz3C1p5362&B+EUI@~BIdf4U#PA6*dg
z(;TC<4ZGVzulJ=dgDaBcf1%1dTT`EU)3W;3exc)bs1Cc>OveLPI#V~8L#I9ec6)k;
z?UkROAD^9b_4)1Ht@aLq$GvSP+w*wc-w+CLOrVke^u=uzhwyRJr%lCAFD7$7a^|}s
zT(UKx!g;mOX9I$1A6S{*qf58xZHTT+ZT{cFDh{Dy5<0cTy0*hZB24!{Y<PXW=!U)P
z>u$);IZ~tZ`9}Dqyhic8d%ctR+sz3VuiUT@v1-@f>($-}dc~YQ60rU_pv<3t;?6uc
z2=5BLzdktNKfk+b<aEza7fM&%mM@<kix@(#F`E;aeAms8_fF5wkIU=pW_6U1AJeEy
zRyW|{bF(1bHO)3vd@L&Ix>v|j)DPW+^$K=B5VjZ61%9mYwa#Jp;t-PZlA~9wO;A(c
z51IOAJ@C!1bU(7Wc3;7M+|^`tF+m19c~PwG9eLAthO~be`nkDkL>aoN|4&1!Zb=yR
zcDJnO)$6t1sx-|{4a9O>_Vgh9vo!V(4ie*!g6)8M+|ftuCF{11TFxqJweQNuL0>%8
zu>aLPC4NSEJ_uUGSK|>rZ}@U<LUY?g+JMm>zO%6}^UCYjN%3v2?FtO8N+=K=K>pJ^
zDQJs}0%(ONDc<vUy?JYaUPMUO>x%Nd=`)_ywoLO*hkMm$`q?0r(26h7!4pEx&ZzP8
zlU{yE`;@C;HzdYC4I77CUwimVw1+klgxdE^#~GwjBY;kxK*|qwR_*{?5*_D!)xB1Y
z`@Nn?Mp0_7Srtl4Gpi37P4KC?j`MztjoK;Q=Etgcyw>}L-IuYSXiZP<Ew_U-Y)|ib
z$4j#%6&5|){Nw49heh0SGYBHYECZGY^CKO(HexH@=Bj+CXXyG`^_tUV_TtqMJA>&`
zo}8&_gH_RS!DE7q8t_;fb7k1AbRBICj5e!X?>p=+bym_c1M#jICX#1fGOvy=$GurG
z4X_V0s&zn+utGV*`CWnn-)7K6ze`JUR#Kjx=#~^(6`kU$-BdL3n<hyypgPaaofA~l
zBgwukPBLmr-vdNMQ1uxBXJ(ENke3!q>l|frjy_qSes_qm$z7Hl)9trgGo5|>{-#})
zS~)i2OLp(sfO)nT)$40y&p4;PBTjqo2pw5jwuvzZjI*@4h=!^HuXV#6-1bCn-Rbn2
z*i3X*!Q;;1_ONr_Ip4#^d*Yk!9n-+Yy8n8vk%=dBgGcm#o_EgpQNF>eSKC*w%2%)Q
zSFh6ZPX7fSK$EU@JOAn&{(RUuyk_T<|GH+!ldrUY$ye|{*^~4yI{gm&F#H{gNFiG_
zv>tngv^61D?Np&%=(3?-(U~;BjAK<*>1q8*SHv-g;GV=BL8EMRaNvy(ZcT-Y3sKd6
zKL4hB_G)nN)jKbJ^=^`$U;m4}Z}#ZV7d+Z`Q%c+YK>xjZd++?4i<)rz-bF1>JFf=3
zeH4A{(lkvv$J!xicfdaL4m+=2bq=XZi?Dn^W4lkA)jaU$^(uBl*BevTJ4CS}J5g2g
z4()Trk9rhshQwW_aBDQ-dH;Jowg>b3{YUe)#f!3W!?GXtH~n=#>hJnVKb=47FM!AZ
zAL&1%!+M|ot>%ihQ~y%_ypcZ_^5?3Rqm0Ge0?lK$Y;+0#I`6~_6~9)=^#;SB4>*;$
z4tLukrN!CcixqILd3noXxw%f*JMwjsZP<TNa=plsMCI4nhCs~qlJJ@9)sFddOLfgI
z8L#QSOp1JYb*(vG)E4_mNIL!J^N!xGwB3{NUV8uD59c4e{`dx4_w*V`|EiC`HRYql
z=H;iw$F86?>3=_`H913>ue+VY=Z76W20DE9^}oKjzWYDtr}LhUIX(WWYmSLNH(#C8
zdHL%4Ri~Nos>3O-I@h}1-nFiU&RVDc=e%=VH~8vRx7+>qtL|MlQ~1@+SLf%~ox|^`
z=C6C#N0jdsH{Jh-4FdRh%jxbvYyk~l_vH^I|I(J+J^SwPf4CJ2^s20XHCnj-jv^o1
zk$?93|7_MrQ}6}l`(gg!@xx;$?Z5N{QR;&y_n$v^Q)$q3`iuKNx~Y<MefIS^C*ObZ
z;@9IwyWi8;o<Dl|@L4l~I{DzI$4?raIqqU7f}*}=n)y24F8JR)4)pGI;cn`>NbkWO
zRTfpx7L(7{MDNmaogLC9>~(3=e%;Hj>wTpYbodqf2)^!B8wLy5$=D*3?xDs=dB6Tj
z)9{7Pk}H)MXAjM>adonG$91pNo9hc2lZ>bypgRT%(78!^r|7!XvF_>o>|fOPFLW1g
z`ajLT;a+9=dbick;hH-`P&>SicH3={_n5i%lJYHHCH(oD6!|ZL+jL54?A=#y>6eyR
zM^J(O7xQn<sO#VK|8VxuC!j#r1_M34>HoX+ChH8|F*p|p@AdADN26d|F$##_%)cF+
zYTL}TELIOR-0$Xx$l5z@P5kaVZ*V;t`Ll7~8~DLNemxooKHISMf3#_QT=M<D&v(jF
zU$>k{f;Vh{=fMGU_&RB(mdQqKY2JJN4@p)Ycj~LSLwkYtKxe5gh%oKkh(D%Ovx~C1
z=CVCF!rtW)8`}F$C_A&mhV@q6<i@8H^)j7*K)nrg_fhrCYh3v?yn)9u2PxmnX1}4^
zv%SImtv2k_&+f7&CS7{V{?mRU*ocF|)4jJn-Bw*bp21%-<0kCHv(5E0lgEs)JUcj;
z$sZ5F$|WeMG3Eno_yr*r`(0me*by&_a6DbKyPp3BD{sb&dw9op%}QjPhY7J~+Bt0~
zHZhvG`2Ol~LilaZX)8R+5~jyYWNHW`ww0(}>`8DzCoPp79Q>`uv9?r-G3ifL$-P^%
z%43y7mWZ_)>LxbdU%dz~nC|I<T7w^99%*pi)6#)DCsd9(?<ec5a&q_kaIAax;*8z$
zcHoL^N2|0G`ip0m`}%aQc>ViK`117sWs<M2f3b2hk<m@&Uzn(agP64|>r+Gdw>_Xc
z@5L_@9sF)QZwNX%SweUEX*_RYbKSTHEtW>!emr0F*xbLnoG&p~6^(T7-brssM9#b$
zpLYJMa~L0Yj<rK59`9kKx}4lQc{*R#PdwjPE+pz{Opd^yH=VgpOZpTOSUF!~SKNfe
z-K6YnczN}KId}_RDG|UlMp%1ldq$nE5YiXo=vp7d`fxH1Dfp=6K-=;@0f}NQ`)69N
z;4${TV}=P~luxuayRpMMQ({oi?Vb1YGvqy=mlinKD*I{Jv&H$GIcRlyu4<Zp)0BJF
z(9`npd-pCMY74Set~kt;*}KIhejF(lAOqgot-Dj$-Q5?U-+9aIG~ArRNQ2ac;J#Hw
z`SB{cb`{sx2+5_}>D^Xk_VFtDjjI()uNaQnL)WY>b0?j4pm!xXt#7N0Q$babyK}s4
z2D8mWD}qIjbqs-6maP4~%SUy;u+=yZ*-o>D9ooa*+PAJn1kMk)eJ3rq4XT+1qF6d@
z+<mhv_i%2WcRvaFaOY>`JUa`|8FJA#ZP9MQfA||uoZmS1?9Pt9MNLArg5ZM#Yv*sO
zosVZAPWL%m#}6tt&t2x?^Q}}^a_pkX`8uULt-F~Qdn~bjG{4I{bz!%432{i~Yf++6
zo9pZK(OVV0&bCh_!ayfZSZx}S{g$|cg9qp!UE7tR2|xbT6LX>UT_{fGZ1MtI)F;_y
z%lbyF^RO&Jg1$fY`tNzl_(mk`u?@kxvv#D@s>e5EO+DY;xKl2yzP8wIRj6_Z-s9$J
z7t$r1gILA@Z|g{6d=4{NC1r6RxcRH>n|+vHT_93A-fVsfH_hVq^WAP0RDKa|x?lH?
z|9X>#uNBi!1poFx;^0Q=*Ash6_h_0ex2imP{IKOgi2DBcqyOK%=Jnt_@x6c7GNid-
z6D~RmiCe#U#-m-I$VG<^4x);2)x?x)fpC6$mb2iG#&`UGJt$3F+<J_wfeKLFkCO?g
z`o=pQesTWSr$mH{trG*!7+fWt!R(eE_UxV+9FH&;2z1K%w&kecd5pnHHZQeE<3DRb
zBPm!gGaoPR|M>5yN4CM!(_1lJx^VUmo$6I<0e;1QupBn#%ga*fC)|P@bCWyf^EV-h
z2-5Z;8VtQ(Jbg0nd>h^&`1V!jaB<lA>dvB6>HMp&?o>DBSLW-h@4o#e{O((!<Le^#
zn5MoZzo^~aF^oZ~m+Fv6`jF`FI(^jwx6VwV^G>hw-o6t|(PGt|9*b9W;e4>MNn2f6
z@;`IwY+G%V)?P0BFBCfbx~0(3e;pk%6XKSl$C@eHQnF6!cUw?Vjj;6^lmqV(!uEwz
zibm}f-8Qr1MV@}=A?4g#`)a8OLH41i+0uWLsZ$%4Rs&GEB=zlV|IT1^?^=e@zJ8pa
zHqS@50_w!qyk^oe)ASYZ3;X)BmVz#~4!begRfDt`N;^$sUDE*e_~CSj0d~#FWQKTu
zpq)?My;VAK@9y@tqzbGPndvcx(<XvsbKqtyY^ZLNhHQJs9{b9B4-wHrwPoTe5z%~m
z3Ah-|PnGe_>9jVVKX7;m5BjRd^46{7-hL`K_0>BrPqlcqq|*1QZ|dscczBR=eXMM>
z=^bxw_{QL8dG7qpV3F;D3FZdD`51nPZ0lDATEr`Q1%Vm&Bcfj}&bDnVg>A2gmu6&H
zllln=u#T>;TW~p^GJ_Oreo-A!;nWpZ$HJv9L=*U?8qv1Dk>Q-F^PZ)U{kPlXa7Jdd
zzi)sw%W!Kc9tv@FAstP-s=W8%<CSP1np>3oi7?!yI?G)tC5xPkg9D=*V&&{Na`sLO
zZnJ+kGRigPC{(I8<!O1`zy)*k94aymXKxK<X?be$4s!PI?DA5@#YLXIR|!A-RjLgX
z!1=AG9xLz2!$;5Qu(Y_S%;C-rqI4*W(5aV$^?b`<kky9lFuP;YTV~Mfzc$}jL>UU@
z2o;VD_zs^SmT<$cKsztVw6p$`f~m(RrhLxIBwn>qO7Ir?P##P3)&bnER#)eC)CZwS
zw-u^~pU|jTGRLDqU!eRi8?{S{<E`rBpdJ6vuh*D$s2Bl)E|pq_?78gtL+88B@jh=_
zloMH_hh?LC=@flfMVIO_D|VabS+vB{q*mGgxh)f6#uW7fQ1{~x5COH38fV`5oPQiN
zzOT-LbArV5ODEuLh~E+G4qH-LWMnh~OX%|wq8Rh+_ydfsel0N`(%gz<>7)H{4oSb0
zZx_-4C7GIn-l^`JJ_;0KpHSS>`C*s;oN|Bpb4<Cs-m(96x5E-2sVjgQbds15n|@J#
zl%1SY@27hij`<IRb*I4_BSdREG<UgmB4}uC%+dbg2s5CWuUy9|@8V+&=ah5K-RV9i
za_6yR&si&N%iPnP0j7j<V+PQr`@Z7B+}rl<RS&RXT?Sn7pq@g;Ik>glim?|ffUDS4
z?;e&fev0&S7fuhDD0nCk>>WwkyKUP*)V8T*k$CR6xzbE<TP(G8<YC=^Rf1W{D)Kv)
z&hdn;sQNaJ!&YXvMJMYhuIUjgKuhy!dbUZ+b~`A~Y{?FAvzvb7SUP%LwH=DFCzC6y
zTUe^wqWo2!QYX;u<GVZ~<smE4btLMvWX$H+<T&MrQz-Z^9n8hwN?C2Bym!plq)D_B
zz9Sr^^M#!z`=#D&($xRxEUfEuSXSHQ9}Mci)bBMby`Jl5F}tNG&Xm<wG<6?(sGZ0e
z@nhVCB}P5ixEuoL03K3r>V7zfvt2v>-jMZpJ6d#&ZrI9%g`S@lL!P^LmBr4rHZ=D{
z8+o%}j`dMkIG3@a*=dKRk_Jk*0r$DhB<{bT$D+&GX0*`1Kfg=Z$=$fWn#;pnDNwvj
zU$n`Id_**+Xddx{iOgb%Pv3T<{(C}_+3kH3J)?@A&J&uEd<hc_=5#-0qaUl^^`l!5
zJ)MQ8=@D)vkTl2X5zjKd&->xQ!F}n*YTn(=nTfib^V>PJQ~3{TQuheiV~Hfc$twaZ
z2n+d-f8LMgyMu$&lEj|v&S^Y{hZIeCERT!oTFrO!0UfTVtRF@oh)3!U@ZjL^a7Fn+
z!hBd#oAa}0v^XoOjkQy6Dq-S%+KF7BbapG9-G02YeaHh=qNUpXRQE*3__mcGWSqK6
zrMM&1gGhQ1Sv}ycuc*}sFT2rj^{(x%?#)Zsi(g-_zAWftK#=d7;=B3a=BDMsvJ@J5
z=K;OhV1$t42?jwC4MexTd<hh4)k8uqrMw`P<`|XK>(i0}OIbYvd`kG<nd&Q|hx_??
z-)^dDSFf6gvm=jiv`P!sd&iLWq!8+?m@f@3$>N9}3nEy#6v7FH$89%KiC26JN<J<b
zrIP76{*V{j<82$)3G66Am=`TF!&<eJC#5+Od0Dq|S4)E^424(rX~Pkqs+3D(9#uD+
zv)5R;<YO5T{mFWb@rZX=bKL<Q=(C4$RL$C@eMBO7H<uj>?l!H(-Z*cU-$6UUBHFkH
zLwDU)jcOng{T88~qod9C3tH>DzDE?_BWQ0K<`=iM^-qm?;Re2C2ctapZ@<~K2Jp2z
zDmJo70hgci=#*bu;(jzRfOo6qF(+{A%`}PEK)5Tm)%Ly@F`#%-u7-{4@a8Q+M#V1B
z97#SA;t)_)P^EfmKwL+LWz!B#c5rdDEQmmd(rNw8$8u5OU2yrNHHDy=lO;s+6h*6D
z8*^3Ggif+v<ZbD<NoK;BsVL1`tDly=x#9O20V{ssYUQ=Yt~~I>+z4jrUSIzYMT8Oj
zqQHs?Y`f!3b?<t;zG34bOr)x2QQn4_)`Dri_>KPOHIjtAYtjrC_oi>YT1V{&lkHGd
z0Xp8-x=(ejcxBzG5)32CQ{TZS>VzY#OPlY*+N9#!ahr9C^r7tuf$C~FLhInYvrVfi
z+s5`%AG8W@VRHnYzP8LiwPY5V{im102=_5Vvi8VeWd66=nVhuOhR5Tox>)221RL*g
zT<o)^VI5@3G!)h=1H`aRY)Q~ofK@Yt#nL+4-t&-4z1hoC6AEXnmX{xHk8{b(#)|tj
z)^-<zll<H5Nq#u@ds+u2uN_k0+4dy)Xa(M<Dp>9hsdhCXCK6SjzuTVD@5#M;jGvsC
z3JbTwi}ng@Q;({;lf%P;I@ewggoS1o6Lm1R_Vk<n2X?kt;DJy++EMY2zxk~zyt+x0
z+uNc{_&ZyL7xKP~jW5li+;U=Aw;wjUXq9c{X-`6K_VbsL-zY4sS$U||Usx&!HPd>2
ztlqwyUm7ZyPV};3s-6yxmxk7neh{|M$6E|*ycVOmK_{`M3PR>E7ySHsIe#d+dT|ey
zg|zYGd8{idnQ@@$yX)(i9cc@nj%w!Z!bXEs!!K10VCI!ZbE%(cPZjbkP9YDeqEZVt
zx&sx?x>56ZaZd!A-0vRu^9RD!tgfypC<EXx)|R90f3oqgubJe8)3rA$Dvn~ac2iAo
ztkaL<(~1$)J7%-HO|P2ydI=+CK(pMdgMMvYN7L5noNT|%PqzH-z#;5FMYdZTA5}H&
zlyiunbW{RgXZX%Y@AY-TE_DfnSxiKJ5Qc_#|M0Lj^#)9;iCGKfJlTq^m7$xqmc>eF
zcA3&8YE<HOvX?28_*}mh)NG-p33<(x>!{u!zo{&vKHfV%2u(7rU$U0)mOVXgjr)cZ
zquNP?9kdFWcC)FtIX~o}#~Lw*j0sSjGgeWI`iR@_W{p@?YxdMpWU2`tXS!@%sv5N~
z8MTKyl(X_&=WDsGkC~-cH<&1!31Slw1OZ~&eVcmst><E5wyn&S={PG*NwC>x-px=C
zn>rh|e18pfKMuq_+xoZaLTYuvA~+bv6!MC0F;C$pgBRy+DRCvomEyzF2J;%^nH^==
zC^VY){Ii&ww>$dJ_zl0?uZIDSN@ZSH!n_c)3d<Dg+bh3ebH>isoqk;Hu2Y(n;~2!(
z{W+^f-_2+iPM;mqbU*7SM8R?wAsIW(yZ8G~`7Cy`Q+3P_ufyV6MsfUfeqTR|vz}Ao
zr$qJ>4Yuy{>QFkJm$m6*1ln##n=itOJUx3)UrgTJ*I&DyrIb>#oC+T@>NQVKG=JKx
z?x|F_mNmRjA*$!31d>A?=Zk_maw8n0+e%aIl_)do?|R1x#}oC%?oQ9v+{uvt?0V)c
zhNl?roS9!wwW(fr(Kq$e#L#Xy)x8L5iD|BkN-qUn^}zQIOf}vBs(l^91(ir%&cN|z
zfPYR~KW2ifO5)p-4nchC9S@kjbQ@{P4|vjr#|(ECn73!slfishCPGbqnows;R-DPZ
zF>iY6&)s>>2aF$c>(v`B(z%a!`lIF<2!Wp6oS&?}4NunMWuSD&yw+pxQTx<k0z*8%
zz4IFMaRIqft?WjJ8bURW)mLP%#}8X$#<Th1;rb-|He}zBc9WT|1IDhE4w&k$zoShd
z9l$4Fh!r<>%|?RyiEe#8)2cw=vcBg_ji+=Lk2~z8dQbPd?61G2llZ=_at#QA?s06z
z;H_eDANOva8Y^0Jv7?9e7Gt)JWnUrwo&ZAMSa{dnSSF<a!XY~Cc&EUI;e<s|R|+V)
zGQTG?(DOJnUnep9!RcE&rQ-J&6(hwmV*YMmziVl1KX%%sC;_DR1Q^-Uu`}rOS8Ui!
zUBBf1znSO#3x3y>0a&FZ)@5+FV^xo5hjXEJ-q5LVJT_ckA9?*>=ND#dJnkLzQDZ1T
z(Agq5a-TiL8OMHf-Y?GXpHnPt39zJTC&-K?{0bBEK^s~VR1xbY@Mf9cjd~~VX(uE`
zEABnP%b3kf)@;Ne2aaG?Pcv@0H_zr*w4}^0eLBDUo|`*3SlqkE{O6U-_ETDYs%vpb
zkeD)ZhZj|!sJ%kB_rAO8U-HZX#)jxWO}ub+@AJa0Xl&Qlm-y}SpZPo8CpJ@Ncy~!V
zN}s7^|No=zPt@DClC@FzRwQgk4VaKb$wLy#FdxT5>~s_-wi6|x7$1m)B*YXz1CZr`
z{I31fTeU_Il%3vt|L6OiZV^~m^H8hidPmTM4h{9>omoceT+gg99S%<_Ju{nAjSTLR
zqWEHIc&gwXrnHZiv<I-mCyGB%5+0$;PVA<B&g6t6A92WuHD10lf_R%WP1xJX%v6uN
z2Gdf4!A#o<$e7k75*5ibxdcvi=?EN+y~q81LQ$VRLQ8Zw;8{9Sr1rOoYb4E_a|g(z
zEE{IHCU!$b5*p3VaH64=OI0v45dc;=^~R>CJecv`EnHq%Y~e+!i3dT)_0X0A0-x--
z7KYl4hG;JnNG#vpX8H*MzhW0q(j}yZAQ<pGkr9k)zE_Ecxn>~BVkgyinpo}>zU5A#
zjDb>p&F1l56mQb{Y0f)C!PFX9={<^#5tmvFqIi(A#e#t$UFGbVa`S{X5DeOV^P!ba
z#N~4CgqbzhO>HS|kK@k*+<6weS|rK2_7@ODoE(0LlxiAlL!ZaYgY`AM)~S^5U1K?a
zjadvU&>is_B|pTX7BZp>X{=O4%wY7{P25Aw8cP@R9AnAoMGjE%T%H>P_-Z6H<(mxZ
zIdqdi!G~?CR*b9Y%URaEf`d9?fl~ro9VFKJz%*3Syh=BbB<yWUP*0TRsLZ(CM$}<I
zh}SE=LR+pijGj_)fZLYn*GMb|9ltG_TC+)lrxLhhg<SYNP@ZA5{|y8A%4Pg}vW^Kg
z8h0=_{gw!Vi8G}_*KG0p_>o>hK5yQcj(<*e|GF2B((RAq(O<{A$Nl>Qb}G>vSI5Qi
z>G)<e^52hlhxfzb;2!1OyT5>SuVw4}-4g2~yzx*u_R89U3bkBW`_F;%9JnVbAkDE9
zZ)bVmTY)aLYT?;jU)uVR0WzzrIZ`KB`<Bt~-Tq_~2$LLzecB$upeX5VK_>$W%R<3x
zkhJGn-VEi$wG|l|zaA37HXxG9&q9rBS81JN^7n-}OmjSqg`Zeyt3!te@iH7AY8Ah6
zxRO=FS);AqQZ~arSCi+mf!WIwVI9rAl374hsiUJ<!H1Wqq#1HQQhIR`j@4-bw5eN_
zOb&#8sKt`E<^8>(hh-EI+!`q@pDw)^zn#C8*FV1YH({6@7u^D%YYVdJcitrk+T2t*
zJ2Y{&wjP<w7IQi<-OyG>OMzR@;y=Zl{<yvw-WwfX9UqN*_oLBY_s2IE|K(WJAFv~w
zR>)i5!w)0+-pU&5>1SP?RJci*1owoJ>5mEBxi8PwIm*}#B7bW*5~7QRvE#v?#%g-8
z*ep37ht{`-a!<1(PAG@$c_~s$9Sv4o?=|KdV{6*>x=G+$OyVF?myd=xtAi$XJw?(B
zU6pkPQwc5^H(CdU59q2g_TT}pYphI-OHtlv`<ZJZ>r}Og#EB$)gALUKi{sT$l&TY_
zxZVmiZc-%=+IBi6%(YoB4%HC`TE))kP4*;6g}z=aKp2_=nO{Io-~d<0(B5`CaLn>y
zsD61XhDQLA#y?mn^$_~tAVJt{@w4P8d?5SuiR@BAo$3YjfavwtqRD5A2Q#80cH^hX
zC)RnP94wa*`FG7uZz0u!Tmk{xJjb`c+N;vJm-kxtvXzT?fDq#TRe|u49#C9ZKAL;f
z*T6S1h3+3@_lkpT1;&Y|QD}L)Fm4%7W@VkZUO9btbqWe=n5^jY4uC8;1|MMqI)sGN
zEI<oQ!C8i78HyjYNCOVyX~d>`;B%$JR7CJfe{HWtyR5mv*rgktLL)Wv<O?mJnOl~z
z2ek8Okh3%u(Nnvw|6!MJId!dLMq;(wBjYcQfwP7y09peDP#Aux2hWUI7QL!LC1DG~
zVnqYu!S>!VPF??|o?EGFbg?~ewRE@%zvrzN@r_MYe%JPL>sCtNL+wGg<(YKQde<8k
z?4YG_bM~o2`mI%6S3P`bI|mmoawK>yMekH~cnx{8Bch2+Za(?zltJ6Y*uP)VmTYU`
zJ2Jc4deKtg#Jap~9Yj_4gO-;Pw=W&lUzdGN3!fje+YS#JHGRQUwY4fyw3e67b@@FE
z-9?5I*vQeQU{}Wm7I&6+l`oK41M7~=$~&ZvaQVm>&ZOZ=Vl-Sy8icI1&}0|$84<35
z4y82F`cZ7}B1Z|H<6W0F5Q4WP`|J)d8(SR631Q**ZEh?k8SnylO0;)G>I>SRFrF0v
zR5E|VP!T1EUvt1X7+~R3);jbcLKVeNEUy8o#E4x0?TWYsNGjG><D2!jWEXz!915-H
zy1BdI0!zyw`@`DNIH|w1{Oz!(41)0IA;<Tq%8R@v?4Z)FV|S)ykumO-<}-Har}H)d
zPe8E0=UHJh@^lWge}6$PVDY3S(NSb|or;xQG}fb?hg1<FOxB*sPL_0m|5cFo$*>X?
z^vhJ#kKdSM=4}!>T+OI}ZxM+X37p3|{9VS%G|CA69G3YuyfU}Yf(jzCYzN+HL10m}
z2Zniu66#(ye7J*NZ*tFQb4ILYn~x?&WP!kjg<zZrUs=wd7f;ezoiP_qmxDpZUUWdC
z%r4661Ke35fe5F~JurjAJSiZo<4CFV<Wt(|pgULM(Z;Kr2AS$R-Kqs{fWZ2sX19o2
zE;OK=LPuNnI%INiIRL-TxmH~nl&pTIXk-V$c}pMZS`JGVjagq&gq}&)YJEOnh6Il+
z9V1cwvW}+K>H8dnaDuOcnl$2zl#rf-Nc-KS0ntPj_n@gh+1_57#@pDW!BA{{2weya
z%3wSF74<f6@>%IbRj>5-I&xMCZ$Da67(#ftJ63fwU&gc2#Vpzt5xoby3aL*wk0PDb
zZC0%Ml^x}c=XBZLQ5A2$Q5I`YTuOapsO@oxFdy4J6~n=nT~pNE(bxHoZnW(S-znGG
z-*Rby!Q6G_{Rj>#tE_`Hl8i<H(f;}AhX9vtc?OHZAa;OK7|1~jqBW`e<9HNMv2un0
z;lY%n)OuL~AU3*d@jvxrUC}g<TG?-V8~_Oar<Lx-svcAdo$df8+l)+9$)_5Dc{&!M
zAUt(;m42wZ_ODzHc3tF>SXn0q{GH0^e2FL-Ex=Sh_xd38mZ{GIc)gIWA0Gpn8ZRV+
zx%%M>xg6adGgy_UgM0+ae(Vu?(rAU-xib*M0pEbmU1=Vfc95;Z6c)CVx<El(^MdM&
zbVt^L&INU$KkfzC=fPMStJrn6ZBl#+#hJLDiXz+KGR6#ghtkUB`xZw?tu}sJ+g)-`
z#N)pcaUk{rY6}Bt&eUg^-OEKT!$z($OHlccpd+SpPRJvW6UvhJ)w!rG!=c3KHc!i?
zC>tNl*&F|An1Zr95)5vQlDANN9?l6D8P2ulLK@~Y-Ww1C$>Sfu&<0`N>&4e+GO3MP
zK`cy!vLL2!@I9#zmpTD6CuY?Ly}q1VCWA23SwekscQmjqm?8)+RASHSy-ZMQlCj$L
z)3SU6n!Ec8b$lkudbA^Yd-oH*!>Mn7bo8xJ`;4Ke>eT^J&jgS|rvWgYP$TLes@jt^
z-$UR^?ia>arO#n^S(5`WzvMvo`9)S<LM|K`mvo)Sx&*4$ACGR0nI2BVKA~h#b{JNJ
z8*%BaQH*%j?VLEEgB$#Df8`?wiui+1mwTqv<29tt&|E4RG+SUwldqznO<Nv<Q<Ns)
z>k%qhj_!;PDuF<R98$mH2|PKXgDyZSk_p`4jBagbh*_;Yf9RB3Zc3kX;3kjtwBdzz
zHCJ0A0oNv6fdcM~JFLs|Rfq%xRdEal-FLBHh=!x@ZUC;zOm0qlmMu?3+lpQZSGhWG
z(V%iAuf#qn5(4Lmj{QNmR@=EK95On)C~`GRI_!Mt$|yl73e3e*yUF`|!<9A$MZCS;
z0Izk9JX3&lw7`(Qmw@;Kp`|ZKpwT*aoU0=lZ#GeE?qJOD4qw7hPoWJ?^a))-^j8Qi
zBjC>E&QvZ13Mg;<!ntEKV`?`H(cIbCN}}*RIJJnlv3N!Vc2&^Bi?le)7B4V!8DR|z
zaksEwb<|&9Jd61B-`G7^2b5ZJ&5}9y<&3?~smGnGv?6?-lD;?g5wMMDXVHQ2OiLT4
zB{pLsf~T(2vkcbVfGh0%;z*d+k9AIO-93ooxlB{kv3528Z*TY5+w%v?`#?E^Y<Z-6
z^!!knas61PQ@GRl0U)k3ulTO}A=157A-UwGYp4EO)|!w8xi36fV0*}rG#ixK;=Cpj
z4N--7I7;(opq{-$7m8WVaC=+T%sC<Q;0mDFXI|hYXA{B$T1_wi{r+O{Z|`6{h(||b
z&6ebRJg7v*hF~)nb2taZ33wnGUg8+gm5=#SB%=ETae!80o=nS^ld7D}hTdYU7U{Bk
z(BVyR&DyPI)C(uaC$sTUmHN1`XAsa;Cw;b1P+)7O)X+*6v|8i_WG}M@YRHdr%xM`Z
zRqVJN)etRmr3c!I*LqT6%8@?fCZvU#up@t{0ZoR4TPlfn1^EWrrtwoJ;?-!WzKooi
z=>_kiLP-|td-H=D5kJBP9V+7q-MfnC!zp#FKRFuI`LG$xhPofoV2=2h;A)gm@QRy^
z0MPbDy}cV3^tdgm36aawDl?zSzSESy&gUj}hRIj?O6gj|sLA4h>UX?*6m<X60b#^A
z>pE+`OntHVw)MW*b0qE#Vx2J@L3A~75@~%*_R?(UGN1N(OL<84;?&h55`QdR-1(7P
zVaqoJB12`&J#>uUhOHt=Gf;v7aq3`gk7GAqtn^eHaCcAhv&)M44<egK(7ZZpR@l<U
zwweXB7=n^Yt@7!bs2Ww^9*&cu6<bMtDkDE2PSuVj=xhSn{p^UrYkSZdJjgpQLG^(s
z*~x_Nj&+Q7TR-9RT})p}G<k}l5$d3i1CjC6@(TN7D_<oP6IWE5bLB|^+e_{q_L500
z^V$F-q>bRmLgP^E;B6CbN1aJ{$Pw(JhNEUYXgp?U<SM=j4xv0Wmm@Gn$IH;241j$n
z#Fs<`y>9m@Oi|U@`U<+}Jgpz4P5R|~-;SQ3f4e{Mu)>gelCkDpn$gD9PxDM^Pka*9
ziJQmE#qmf#j}eJrMp;G=w*T~k$DH^kN_IsO_D<VU0%QHrU`k`!4th3fG~wjI_KmHe
zZE3x-w>VB&JM^lMi$w>t3YzMYZ%mGn3f^!amvI;X-iwnO_QV6_DJUrg!(KK(q;I8i
z^25vLKZ#NVpP*<7S6qT+RMDqpojH41tR9NQck5Lwk6bbP%6e*xXAU=wuOXBvC+_Pq
zp8BP{^GGG-!0K+OBlM_U2C)_t#-*I0y}qvA$x6Mi*H%37D`q6dQ7>3&rsa86B+c;M
zfH1nLUfkN-O`>Jv2#;8{RP%lS!NlSLM;O03QJ>;KO(k|s9cXv>g|Q=&qn$D-ftF~G
z;zjUo>uE{0tuk|j)u8Zf@6a7^l8N0EN4z_j$gXHN?E1T_)I&!&UxAoR7`sTg+G;ug
zD_m1$E0I;TLjqB}x4<cC!w2}3*3-i(NA4FM4dT`n+C|+LbV=g3(#nfZ!g!TNlrNZs
z?j72S!rIZA+GBPOloVfWv$vPoW!8NWV@9k(SHkvQr|;pFhzlX~pxQ1N2m~tOX1Q3b
z1k&Ve&arT{e+U^IlvW<ZYVve+v(;`9#7a~TloQRP9nK}KgIj1+4-0G4O1WNhHjt9y
z(C`38?3xds2*&G{DYv)T<}O5AiBgNbEabCWHj33Xl(Q%;HUdj`366HuXylkjY=MA~
zAbf6Fe!~n6Fo&F;cE?RrQ_neq0}FIy5efl<W~z($lgNkGv+h?oLM~JqHD;-cvFy|p
zFx9nC(%F420q;^bf|r0eOEAN6f%$H4{d>hwudfDmnfCr@@U%hquJ^ZxIcf*~R!}D*
zR;vvE`Oew`yJD3dyME3Q>e!*5If>oXOlDbH{c>$hYVXL-k2%8dDi6`c_lN-ZIaP95
z#HptXHgUOg+uJ4Fh`F?N9>e5!De-`>SwUG5wh2*(lU)eG-bumAQA$haZCr8A&07-}
zL$4RBH{OjCOYBWTm%-N<F4HBjs^0c^2;^&e^LS?w9Z!4oGRhv0`2)Q!qTQXkysRc!
ze3&KeNLU<3D@qno81ycoY0Z@4SL2%|I@UBxM!~CcPOmTWvvbJEzAKxiyr734v(qLR
z$ER7c!Y+tEcG7^3GGEJaYAo(Sh-ND<=4G8tMMsfm??qWEpC{peP%ShEoJzv;O#IJy
z`P7s?&yp_6C@3In#QmNn65_OOKFl~C2M6q11mXh3OBJI+_z2OZkKkDuia07q5IJ=2
z17iv81Zqn5``}}*x<lM3cP5vJmfb0+pQt;ARTJt28)(iEAJ~y)$QdLuCy_4008ZuT
zMvG^jEkr9D4U#g^=AUnE_38*_nxc1XniB)#+1A#Knn6avmg?PPpPHX97D%T?di7$l
zCkNz6ri?o~>&>G$+}qBhoAejqw!&zavhEO?bPq1c!ZZO7W;e+XW;dzMmBLCiZrm?G
zT$1!=iv?PQ8Ypx=hO=IX-`-wyvl#7<2R;0S5)$EMmr(7VLxR$zRg=u<34z6-dsH!N
z<069)!YtZ58!d-jHTZk4Ost0*YW*T}>2UEwxpPuZKX}f)i<Wf}o4%{9(>PlvzAlcA
z*>ZBL2PcqGP#Nw*Qh}9j#_%?4>2ClX6=jINV<`<YUN+Z7yjnm-nSC~lEB&1x!;z!z
z0al@cD+C1zOJ@v=g?K8X&oGMhYk}efjU-@GkJib0p0P%YRQyh8xq&pf=`<-RvBIjI
zmcf1#20wc!RwEP9QzhPo*+|*%P{mQDy7i#z^YW_WEWTAY9pkR&`Ls&|K;?m`xjZ|Y
zbzOoTvFNj*!uQc~sC3}bf_`4Pe4nd!hDY+NOX^oCEVwa4!!t$MYxgz_c6h_F2tUv#
z-{Prd@I-lzQ2fT?uZwbeIm>P=j(4f9zteZ=BAZ;KQ9Y^hd9$0Z#%87KM9zRdNl&Wu
zj1NQP9hC=dL%eDJ4tu6aR=y~QO$Y5rV=7(%4~);0|5?W%hyxpqpq)o~>2JE+^nVnu
zUk_)r520^~U%rHBKeXPA|4Z#CjB0bkPw0q{_ut>!HO~RHP?TK#Ln)Q8tFbjT>rg=8
zNw%st;U?4rYL-W?(bS=h{az3tY~apoFxrc$ci?MMp@2FkkK=e!&IY4>^YI?NpH=1M
zT(X%rr$keE1sVWHRVhEZS*hV$?X35jN@cI^ca(Xp#y=SK;YBhC#ttaI${YmJuwbqU
zL$ezFq&r!82qE~?T~#}f!>}W^gRTOW`92d>93Y!G@uLj(TZ6)a_xEk^PEg&6I9}W<
z4+?^P3Pxs-a|UO#@+6%>fEmOvAyS~bX@4Y8@gm#dc~0<fN;noC^xE=sD!b?fE3~H5
zm>>9cYW5gGe@dWdQ%vnW-drk{iVk+1{7XOmOIBM)NEyr4d;{3D*!r*G@m23&*RJr7
z>)hRFyY~1bY1Tp>i5qiBvp2P~cX)4la42>v><;H}9ErolJZg)gh~U+WbQ$N4x0rl9
z$gKqGjp88Yir19F|H6q6SJr^NNfLfgI9U!Zv~2Nc)kk_w6Fi#Gl}q!i&qSO$;GhP6
zbhLBcT+Dv1GNpo@N4*-D(kuZTdN5<o7dT-WG#uFRrCv}}8pMgK>+bsIq+4FNpDNgh
z9vp0z8G>o&{wJ+cSc-!@xf~s8j}Il=k0~|Lobc%T+j|kKnJITfW|HS{vXMi3flj?Y
zxjA^pd@}{?zUV!S-|0x93o~vp9nHAKBfV0}i(n8$#&S3}Xu=7jjX&{CI{IseZbndR
zJK+uj7CW2sRpz=nH_0!Z<UO1GUCV6}tG&dNmi*HQiFhYXHu4TGM8Ql+B77me)MRWE
zaRU=>0RCa)+`)Tb-X!u?@!bJm*I*ri`=qNFs1M*Dt%!LFWG^YZ&a7UYE-2r~Ra7M}
zGqY}+Cj6=~s$t$O(*|&F)<qi<(omj)hX)m%E`7r#QP*b>AEx}n4y^e7h=1sK<7V&R
zWx#V{!_>O6cc^H(3g7+ELnGy&QBN$>ADZND4M_V0RHB}zlMKoP=NuuTS`pzCmg6YR
zGT8-(1$q6d%FoWSN||6aV!&BOp>C<3XOldgF*yf&6>#p(aN5NBof&u#Wu|ATjM7Yf
z*`W(Gak#k91C3RyAxJU5i><sEeF;q6tS2}9?BXJu=7^c$_94#L5DWG!0;@t3#TQhY
zU$Y)*BQp_}EEPANXO)R`+%Z%jM0HmWUQ*6EVOFm)wivPOH;3;F(Bm&Aa;voDliZnz
z^3gVPTjOFy`!0)5;m=*QBM!VWZIuWIySzo127|77q*Lf9<i@K5vvJoL7@lUV#Gp5R
z(c1WNSSKH45H-{w>|3J5-vX@}AVdu5KdL^kBRKPBPv-S;<&Nw`sukqer4og8s6T-q
zV=oLk2)3g<Cabdq$0Jni`XF+Jv$zxW{XNGec9@*PwaicI?rcW$vGM`4H>S%zoY1W&
zwJ850JKDiW6d%&upCs+$b;!qyZm6&to_L3BaI$kk>!4h=AI59T&Jrt~U>B5!aY+-x
zb)1S+uQVW{h_PM+S-n`V`=Ih;+w(41<HAC&GHe9{f~LxO$_|)FbS;LLbn!ES6RJm8
zR+!N}EH4XqtUSSKyqqK0?It|b^PBZfF^yB^$hCEV0DV^Uf(|KjL^aX}%rky<O|vMT
z>D{h(ub+^}bbx&_ywrv#mwtbHy|_<R4HWV*voKjsEC%U_o&J-PYlX3Jed8SDkBEnE
zPnUMY_l295qbU40_N@-{ux9)50w-a4{r2Uc25^VU(R^A#RgRB$qM)aD5xo)Ovvczp
zY-&i)LOdbN3WT@DAC!vjO=ullA<?clrA;*3(OaL;6yR7`S5B9OpFm_QJ9xHZHZXM%
z_E4Np9|@o%H*W&o5XQ4<)3K>9Jr_uBnbxM+-li=n8)9oqKiPd59l+h44VA~3Yg$dq
ztHK-#ouEsB5;9=($W?BnkB9c77Pav~w60DMq3}~jdM%CU>ad4R!5fu!@j+Xyqn0gc
zvIo-2hU`cLGmkZ-?e=w|wenc5Ab59Mf(2?r_v<u&4>XMSxQiSFy1B)o>rNTf;sT4e
z+H7UNny;TkN;83120{dqy@TdnyEE+UWI`B<)kCHi_BU&{IXk%*VG->R!aN?SIiMZ0
z$Ggc%bL`=3L$T>TDri)@nc}&)ULlk>9Z`2+EVEg|?Zpbhfruo`KnJTIoL<$nYKOXd
z5yLSzUHX-2W>h%UU4zJ=-g>7p2Sx45e8)|3GiW-;Jz8O{+NCv1@|fn2fE?9<AFG;0
zXk)m7eCFmjD=bthg2J~NN~A7!HB$Bv&GZ1ZT4gn%fC;mI>s7?CUPbJzB#oA?tQ);{
zTU-9Sx0bPPiIu5jg4Zje@F5t%YiQ%c3fk-lD1de2Z3eqdN6`ckp7O~X*MWStBcAB*
zCwodo6ydtrlgvDsdlu)6%PN0aZne7BP3z*Gb&2ODrfH=8bF$qn!F%!YUNbAm;J4|h
z!U}@z6B%%*<3FZ|$X<F##PBE-2P#VSC7iRRrt&T%pH!sAxw*~={!>lR0?-cFa|1dj
z$`?0w!C-FJAzvDGn7J~my4QTRl#V}9v*U0^#j#IXtJ<yBd9=gO*eaLCS^Oz02!?2l
z&bEdpt68$|E{A5+YDhQ$c>yjO4ED94yX%`L;Jd!~%9l|#ZfTgV9iLJU_{@;5s=U$9
zO0kudAz&%m?OJ4Hly%3$Y=CP*%_J+QDTpxm1pRM>$ocN_MCr%IyoCp!7=7$eV?>7u
zkJKmoOaZAzyE>#>1Qm!wZyT@SA=JOs@nE03n|sSxQ5yd{txyyFrDZ*LC}e8*@DCf&
zcc^Iyfh_1P<%|0yqXV8@7BaIgnDe`!A$6v}9RQHGiC7WUOWBc*vJ}CTqc)dfC1OyQ
z6=nFW%W4A+b{TVs;-K0st1)RedCPi^sU)kh<MB2dxFif*8{@voAC&gw#ERpRO%n22
zT`oV%Rg;1JJ8dOtEjWhb?T_m2%G`MyzRCtKb(3<f>wU1bbxW=Tesgqyb&9<L20BeD
z^3jCMf0r!mS~Q!QEZ(~k9Lf~HgO?#eH5W&|=NH+_CcT&^GNbx+u^>VR67Q=}v4ZU3
zhbM@51&Bi1!}uQ?sL%20jAN?0FeFL82Gx-aFY}8_9wyjoKE|+W486KF4%Y31R~c;W
zHq~d-3Ww%t;Uxs?e6-}BG~CIHTHEvr{v&O7&C);V#Pyu9YkRYXttZm!mEJCmccpaJ
z{5$)A%jSgd1@>b$!Ev9N8|oZ(b<<bnB}eB#N>j~LscF`v`3z6I7(Wv!&V?>0U1gzm
zv)}c@A9!E|NA>kxo?WR{D!C7*y4C8TdVV8W=|`uiNJQpIx;4wG3%}b(Zmc{#r3>zN
z`^c$tqL`bkdNy@lnEFQdh&alM-|Zup5GdfxLQ^W~ki3}mtMi<006C0?Uy1p*KCL9^
zR=_`b5yU66%SyeLbn~ou12U{`zEBVf(I|r*!W)`WMD$2L!N~$Btop>^K`G$JG;c8D
zp(F)^038bA(%osW)I#%=s-P*9Mm+epwFO&ep_vUuqRPWbsfMI}e+&=TP%qgyX(J_$
zrtm|fY01b%YbvxL=OApe@FT(IS6N_e>f*Dw;X%G1^$`1g1#>Z&m+6S$ADZE?a^l(F
zz}jwRt!{4bMMJ+cnYPSXcZbIlU;Da=qAql(ajgfqMZF+w#o+Rw8oPO|JY(IWD2Ueb
zK8duc_ZnA;KMSH-i};YLLlsL}5MgsQU-!BVI!qlof;;3}Y8opnXl@sD%{u)Lk7Il9
zARjtC$k~8%by({bb<k~qs|M#RdBy9!6t~y{UoOhaI>QA@P=%i<ADw4@oMq{|OeYht
z(a=w2S8q~4y{IDkQx}BlI>P>riZxf09tAdairrfHQVcI$h6`ex=CVXJQMAKR%Y9|Z
z0jC6{C6(cX5CLu&Io(pqSe1c|fu2xD|I7=0r}aoxkG`|&-<-aT%VL$6y)Ju<eMz^|
zIy*%+kXXfekYeV>c+z(#46YhmY&Q|rmX^~rEX@@4f}Nn}d>YtK?D9f+JTDCsi4lx$
zk+_NoQ-N=qMRK&LVH^cSQ0np@%RDkzEgC;5j)!da&O|7-k)SiiU$9{ArE;LTUV`iy
zr_hu)t`gp3XtRh$!r~t5BQEaE^5V^I9>1nfN?8o9i-&{JU&(lp(6iPd+kqb5?@&IV
z#Cw~^qlb?kyn1jvS{#p$$M-4ihHH`c$hQd=pMk)%KyF@ztIjJM*WqE%RLIBftF`09
zFkt1N0O1sfj<#a)pMA4p-r1q(U#<(B*b8>yoIsc_wx++Gn%HV@R}{6aR)z^6a|f=3
z90JdnVGT6AT4~j7=~>pv_d8gLFUD9<OZ0>Acv|{nL_TH@I(Os>7e1aS_jb_Rn$YfS
zt8RIU2-GX&0n6^7Zgn9~9E(55U0j!Zc@%4_EJ)p)xMY92<4)E^7C%s&3EB6Wi6IjW
z(^<766B7t^pbCh>ZlHA<`5ns9p0=VTtNGPYuz2F=%{K`_SvfX3{-LOK_2Ww$^64<S
z+}?|)>~lUoP0qt9%i~TLi%WQwT-8?r1@CHdZf(6*!<$A{fuVK0jgu()@|NBXPGKzq
z>BQ7wG*dTO%?e!V_({f|kr+gaGW{j5T397NGL8zTy1t4z5w!4o<9Qxs#TiEd%Qbq0
zKNv(AQz}6TODka2e1*H(YCip(nE)&YC-*K7PH3OalZs=9A96^qBhfMq=P|pgh~QdB
zD}bf(6+W2i;O{_*x<)668Fs>>n<%ZSbd(yui0uJN@6!114DrtT)R~FuOp2<s64u;R
z!rHXvUvpny5nVL*@hqNmbh4egqP_>Bri|_9*5+^W;nB|PjB5I|no%?0xgT;V)T=*8
zh4H5XCT0WVfxnl<yam-b8KU(W0z%GR?KWfG{5ztZN7%!WVR$<L>8a5za>AP>&Crd#
zK(Gyp{0Az?QmK^KS>1iH07Nex9}HO3EG-yhTuIoy(hE8aUzQ(5`Tl*zS)5h&@_Hr-
zW#sA28>?nl!LXBm%+9@6kd;=D)3#=HTqhs3&xFmkf;5ex?TKQqWoxc1;3YhY*0y0?
z!AYbXiqomQVnv*GkU#>KIbsB+?1ml;dv*sNiMWN%9v6#Qt<$YAZ&&optBA=~zJMlr
zCRLA|`FA2kL2WVKtm)cj!LD7RiJ03JD;BgS>Zk~I+k#f!M6RiCX7-UNB^8m17Ep{P
zne|1$Y5Kym&M9;X?4E}$JP7b_;0wW74^a!j54;u>%C#&;b>?`e2)%cWmn~Nf%sCKH
zXOL-^l<&|0S<ToLJ6dn#6^rX^)hz}ToFq;?WN6BYgJWk$tH|S?k_tL<zrBvMZ`(<@
zTA7RMXwzn{0d}@xg$h^dtRmaNXLype2o-;b|9LMTnOXJpbCt;`(Hj3*hcvS0H@4T2
z_H8>!3v6u94w@ahNV2N=j-@RCPM%M1?y5*){&`QiZ5Q^o5>}dK8zT05f7*2Ng#H&A
z^r9(o<14;+O<V`odr<d~aGIf^$~qbCI80&dBFZ>=3`k&42i&LAI<5*Q#F6qVh$wZ9
z@)y+%LGSZ0fMl%3T;I@0j<KHRA>!Kl;zMo)iA)2DtlbY2<U6Yn*C!4&VO%sB1^sSk
zKw!Z?HV#PW<wZ6!76I9H76D^;0dMR3V|!O0BrJ#~HCP8jjiylA8|zoCkyUd#o}kjC
z@AyGkHfo<~KqrTt&-pd*NMT66!(=VQ7#S<e>vp`QX#8z{;P|eVV}7sSF*ea7W_2{x
z8D*WJRE(+nnHMWU2KK5P1o9MUAciFM7{u-w8w3J7bm{{>*8v~zKu-aJC<M-Qbg{o$
z?)o#&*i&M&v1_v2ME!$<ayqT)y(B+Kfh#5{yQpMlq6i!LU;x`X3ae2{yQ&$(KjPfP
z2P`Bahj&OF|NEu&zyE97GF@Av4>#xUBQZ(uX^ZsV*tyyEZhXVH1=rGakA5&zW1d|(
zaX6Ztat@9q8{tB69bJ7`UJyN+O<#&tG3~NHvK1M&K|B+sa8`-4tsLqw$^x7oWBW*S
zW;M21;i5yi{-?!pvY`gULtMtccymI~SM(?sGy|9h%eDDF>qd%y(|QCE$MNQNH0sEf
z(l;1^W!ni}Dy<B{6gCxGEDD4JgUeLTl(s|aYN<D@bm;;ojF!=ER{VC1vti8fac7>t
z&t~71?|F9XklOuKbr5mfe=(h9?rFVql~37;34!LkIO3NaFX?-EvFT2#E|;VTZLjLk
zX{B4Hik(vMMPg9fbeQ&nVBo|k|F_2$`{cP#6I}$jVpcQDo17I0qcz^Gl?tcMNGPdm
z0Bc&!r0!YtX|BwWCw0w{9D})vL^()L*tc_bFw0Jx!S){h&EFsJcn5d;^msuH=f!qY
z&IkB1Pp5GBI3PN@tfmA^`T;au*Ho|LkRB)l=mDFNQ_=U^b^a0cNG;oxasa0M>8!jO
z)a)iwwLC~Kn^HIC_Q37uR|nj`uY&m0x1gQ-xZg~<ha{49<+#$fA_=GtQF<%qwCVTu
zaXE6F3iJi;Dk3x73f?S|fLae|v)sC?vT`yk?oA5!(w5V+lLUJ92|VkjW;-Ir<$bk#
zE5d+WI(Qx_XO#|nt#L3238GwH(gnz_!=B8_l%r5B1z2mY7JP?yTR&6%-5(BS#$aC$
z1+H+;xV49~e4Yd<91NBd+rqaZ?k)l|VRqlbBsMRFUr)m7*Bxc8_oa{VC(8Mfchrk)
zmahrX0L#S+F6>=6vL;`u^68kZYqAwUB&5MZvqjeACHzu$w)Ayf4|7}PtLjls3sC1!
z0cayB;w;|S88bdQ;jla_%cofIU1sfIxf4FQW-Da>6mY2HJfTsh^Ew;U8SO#@41&?S
zUzGy{oaJ^-`UbU-Pi@KbOb#4<3J5ju6Tfv6jsFMnTG0jyErPJ|Ukiz;z5*X$f|l@^
zdPWmesg~ote$;bPrTeeSxm+@xU&Z~6$-ua}ocgCyXY0&o%yr?wD+0fMfJ>dD?Bq=j
zZ#swN#{j-m1Hu_PR+v{(CMIqg&-n-|QR;wuSQ%X4HHSoMp!?~%HO*Mk#RN~Y4i{`V
z{G{&)wwGDcxgz-?^Zeey>N%rCA_aO)#0?mB_>vI;<q)=PVEzhc91Gsegx76PMj0WE
zJH2Q(u4r6lYdT={U0&xW`79@TGC0qt)2s+$eHE$Av5a#nOcyGl#4qRR1p5(j>`!S=
z9`SMvg4_Lm;5w9TJbWq9er&8q?{dg+nD7I5u^;V^x5EMw`l!eL-Nh45G-xagpEMoz
zxJkfQ2UBRny#YM=AZ!3!7xyJ9C=}#}fo!W_py6g<gbID}ADZ5~O-OjM9|dxeX}2o#
zo^dHu^rjhHOl|f#P*yn%O>HW3y>0yusY^KU3+dW7R|}{vN`CmD$GB9vXb{%D>+80u
z?5@?#eof7T$(QBR>&EWn?z5*LYQb4Tew<`E#1DZS)u7j`?)Ap(_3?JTU2jje;d=-x
zAJ@IPUG2KHgBXzpQ<%`)m76T&0Owm<fyI?PUr?q%0AWtaL>M6?3ac*xw!W;-*isgy
z7R1!p*QN)w9f6AlIvi?uU$?f1CZbPWcUTySy9vH^=n!yq3FG~n4z>bxKFEt%zQ*a5
z43k4|0ZOwn+>30|)FvLJ@>%qS^94^)BFASc1)dGW64mPyYuM;xN&vCyI(IQ#ai&oZ
z=i4s#+&SDfOa%haJF2W471+t=NI9tE;>_?<2?#~d%%>r=O0!`|@Y)9|vte?vC!}H+
z>;;2@m933;uED3Y$S+ub@)^NFeqiepX#AyM;5RRj$SR3E=w}z{S@seeN7Nc;mlw9g
z=`4HyeN|rR=a=VIUcBKq3sqs@Q03DHbX)1?hg^;S_PCh(2`}MTODDaMM%1H|m)=Z9
zY^0~AQ9XrtWK@G6=I5!XS=K~ai>X3BEw4D~<1-F?il?%?;9=ym*>hVDQ7z@vdFOy|
z?rT-P$qsYq8s!&xW7BLVUJSl|VdKrWb%%b9D9YU0^m(1%wB8lg=6Hc45WwE1>GE)h
z`ne(MVOS*Y#2WYwWWm1PbZqMHyiObsG8Q_}iKQ(`rxuS^%2UB50$aGtnH^SxISl3;
z-Xonp?bU%Da+&M2z!9%F8a3T?%DY_!@D>!jYXjl$ZL(uJbxG+@Fh^S~FsP!(k)l=|
z*G;VBx@eUMf$UZk3D~E#b;WCm5Wuhy!%1k|=UJ5l0AMES)=VTU?@E>HhC-=u)x$Yb
ztOX6!;<&nkBNI(l{GfZD{q&k@oWm}xyOQDcOBs3V<}Ozs9?tAaiyJs|r?7*#>LQ&f
z7jX^8M`%PtpaEB2{I1dT6+>EK2a;CMCzVfm{RBV{o>Yd=U>r!C9>eh*1%hM~dMk*~
zc$G8hj4f$HMSW)UHr*_hnfl6=5@{!o-M0yU`VMPOo7QHb9Ne#=y3fmK@CRn7YT^!2
zfXT!nfV!irYHbxdkS27EdK4q>PmA5M&uNYI!go&!y^Jr#6QHe=ltXo)mGJ~BoW^sw
zV%ZS}_n)9X&T8k_3)`v{ePK%bj2p%E>X}z=BE!m}%4|a<j82@7xG=*4bCBBUBP55>
z6V;o-;oBtt&O(coSYo}sqxc$C7>+XzxlwI(cE@yX3sA+|yca&%GK2oIYhPSn3*tNo
zI^k--3TrF~V$BVsM@2a+%(jDxZ;ndV!(kE8w%vrT76@w;K&PuCv}=Kok>U?v10KbS
z@j*%S1yl|ys(K0!k!S$Q2Xw|q<@P@R_MH$COP5wKu0n0^02q^$rDeXfy$uwv6P>N{
z+gT(51A|sz1{t}<!%f8b^j^i%3);p+HH_`9W6A_qnhB_))oYxn60U#I0vZW=%R;o%
z>8D)DdtO~-S&__}c)r%wi9P~$b~uy(`6vRhS$3hV(x{d>og1Y_TGNUmBJPoTwobf6
zla*bk)k&i*Y~adNNwTjJZ7HS=aNysxlt=b{nz!!R!rrrVsa;m9;x-xOT)}bOU9(*>
z1%QXvl7KEsr;O>o{l1K=%Z`X;aq+pv+zHs3UJ5R(g1eVAC5fK1ku#TLEzE8gyqU%Q
zc(41L($A1uwJ@CKH`KGbZD&8a+4St2Utis1b0q?GldO)Q*ud-hMY<?*M>=K0!Wd($
zn^f~%B3CWr6|%+Ir0%!atuOgxY&Kf=v|1bEkc-h-^x4s+(DBQWJj!IrwDT~PS*{25
zZRlr3ycKo)WHuxn%5i+Bf)L$gcjy4pb*p;>f!_0+n%Y-V5Tc{A<C`vIyQbgZ#qsB;
z-FL?AuLcH~cmv>XJr3&37PQ`!E9~JF9sQ1Ez7;>U$J!bIjvgm?I(%In)OL3aTRws2
zO4n)R)mON(R=@4s*%ox8q;<N<k3T<)cK01~pMc8-XzKKRva%6lvoK(EVp|bRJ89y}
zMjX+Kf7}K9)-K?!7O`ax>6`Vce#3F8H>FGX(+RLz*2aIZBRoWe!>izhzHT09viV5`
z|D9{n!)XJ97boi3RP~fiPTr;LHi%xEe1ZU+mUDnW3f5uwnizRAZ8d<~l3uJ4t*z)|
z<9oN~`(3c>K_+tOMwpE1GEerm5dcbG(>)?!_-2pB38fkyT|ukwh{eNdN72_wrKF~~
zP;EcX4d=_%I1Qf@VvaixPDq-u1VEzOZbF!s`zg2?j3eb%y4q>Em1ZAvP)-%dSFmlF
zu^X{nc;2j{2B`2kHj~m_as2zcF#vWX(6TrC+Mx~~39Nt@e4aX0S#vncD4#Wp1xLv!
zTt4Gm;5!z%H#Zl>Hpk`I+YXCeo5)N>>G)hGsBTY)PREqcZ5Uc)W#R;7MSzMq+z!&r
zmiP7u@gEig&=RYe_ToNens@;YGIqrQJsrfbpO`2E;yfcmkcD|YaP0&znt9`-5v}=2
zDTzL2@BtQx0FuE9hO&f3ptdhov~!--gT^F2mrHO!1c9E+fthYSeS^ZxWGu4;*SN}a
zDBc~zLd&OBm>CUvj=Q#IluI6Wyb<swRv%;lX70^uDQ_ilDdyFlC8PDT+YDRFJ75g9
za-DXFZb-7(H)>X9=?hu<J*z`A48MF~V<O(7!NiSFtdkWk0CDl0uL0@BrjML^mM)y3
z5Kb$GfUt7lVH6Qu#k1pJA2H8`A(X=%nPf;nM$n<zWZ$77JEPBI6U7XB*ynhZ%;FGI
zhq)Y)=|rBSO1&38TTLA$e3eQsA@-6+scUdzlT=EPx?wN)OIQGOtbXLfBoD9{_(XSi
ztcx2kb<RHQOExR;!>r8Z+E>l-hlsN#Qi9#8iN3uJaSWxzS$y8WXViJ9yUGY9{0P}s
z?M7@4^(zx0UFFd4Dp0yg#k1~?ju5Isr>j&v8<45e<jq`n7g-e=I8etLXn-3%n8y+u
z#vL-?>wI~%WA0aLf%LqIKk18N@QH4U!Kh;|D(c0abMfq<X6ymNzzcd6Td5u(PO%&>
zV^w{N0ObJIDvXQVPy<*SY2SMXuBKd{Ek0X{`cQ?ZUFTkOwAK7qc3$QunOI7Vs57e#
z<_~*CtIIg5RxGug#k-o(hPU`qJR%)}V4i9oaeV6Wn4dGHY(0x2{133IK*q~D`h~0+
zc(9D`^2zk0NO2&nh(^MxFs(?<O9FXk>V$TR-52+gwPonmLI8r;ru2I8W!JUcnP`h`
zZ^t$+7WY!E+G3IV(WW>wIW+M!NE;Kjsl8z`0-*J^7_@*q4g?Kl-YIPenwirf<kK0E
z$ufytPM#4<77{hbL(E5jHOQRu;xaopg=>^U0HlvwTOXO}Vi^x*1aHe>opgj`jF>v{
zQx79+V{y`sp$JC&j#kr3MpN?~+sEIX=Rd}=TKPHmO)F-w(Uh}wEEm?s9SLV0(Qdfl
zkZzno_*PuiLw(f9F>E-UdE8YzmO@yr&=D}sXhr00TXX`DCPdn1GVhGPa|)&)vn6YG
z{K$aO!wQWO%AAAs@-)mjo{afK9XB=4z$1YJTwBoZ6I;OPiKTk%EGI^_p>t0=8EpkH
zTy)mV{j%qN`NRFPKjxiIducB|j4<$zL)|uQ7q}xmg}+`-i3T6Ncy$^+#GkYR#vDQ1
z5RplhNH$NS_;hQ_S=o+>HM{e4u~5qydoCz79HK5d#~{W5iB$iI2ss_%qznkdiZAKP
zM1>zQARHsjWjSRBfnaax6wM3k)1e<*nA;ApH}pvf4X3kc;D2BYQ0sUT20<{d6Lxb@
zwT@_wE>=yIf6~|RfT)8_B2ycLsfScMvv_Z&F>CpbV6Eq@G}|mK-avPAd3s9ZtS*-H
z2aaS-b-;e+&`0_Ob17svMpV1CILRZMJRWpsF*v`L^OXXTsmmO6*IX~^iNoN*hOnGX
z;k-r7Mr<G5O9QADW#r)Y<;*duMGdN*R<t>l4sQlapDlfw5`-+*dqiNYLzzW9hk1LA
z2!cvJANO@69c(sGnT*{K4W(t(MD=9K@q+rcPBNIZ0eU9E8+k@05;`PHEf#D;*oF+z
z-%{|}A67Pe2fN-m&5OJ~XJFhg>Iv;mvw6}T`JSXPt}Tg-%G2fq7fluKQ|4BEkJG44
z33-R0OI07)wLY}G#SOybUK=w}94)v}_p}MgN|3-ceix+qO^yg=tb)AQd_3ul-y&k5
zGk=j#Z{o5Nf4SGR3E3ZJWMgo%u7A3k@z5X_wvf<&#sair-8vKjF1x8ciI}ePC+_Sf
z$0rUs0Xs|9vw*57WOUl0aTV`H(ZMEMAOX4P3c)C=-oeykw-?Mb)S(TpomJoQKL;co
z>8TCI9D>cC>9If6CBYj*D2tPOwIOM_TCps#z#QH~W>$V3+j?9<jh)s;rnQl2RmOdo
z%|^|p7+<l>)0s`wVrH`8nG|+g9}b4udaa}qw3;X<o%LQE(4_ae9+ZtkEAn!MSjK`n
z#)4F?NX>O%&r_IZ9H?LS>hbiHgjY>V*A+sn=(bUi<E`P?N4SK*G)T>!GoN}!U3>(G
zMU+cnzcDBNI_D%Ff=YTN;mwe&MoJh1f!=3@RgIE5mYn|lvT;6eP4YoiWWTBEmS14|
zv<leuI2#S6Wq`6LVI5_dyKTVBCXFo3mdv~}JQgnPkz&VjK2666s}+UHx<*cLVfGgh
zE_=~IVW<_w5T|{}ykW&CcIa;puIheh)I{^s(~4aXdOYi7@0Rn~9oY#KhEEtkf`zUN
zGPlCZCYB7bbLS_tA<C=4-F~0escr`Q^kA6(xBGo{@6s_K40(;ACaU9j6$aOUMl+^b
z1wM`)VDBmbn9BwV;107LjO2r2rT?Yq4C!2zGS^)ZZ?20a*QJjyUWkIvgsBrbA6>x*
z${kIhBkTn_V%+m03B;6z{p?DhEQ#7dXlA3_9c9zF%V0otFp{!K&;;6flnQi5)$zk`
z`g>wp(n{(Nn)rgHrHB`Sxav>Y`2N7dn~;9JJpYKxt`(QZ*6q$e2_kGut&Qlt(luXV
zV5wqU=upYaMH7#H_VE*~1SxUgrsv9o@OUs#wVFVvA`*EXB%pAb$XqDNb;|&kh3-yl
z4ghPd5H@_!3`|%gM?XP8J3VlkH!D~Q#QV^?Y?Z6kS0<IwWox2nSPsI>k7-B)>A~?x
zA(fn&N|c8tu0n^tK?RCW02VuknMrjgBI#Uzz{sy2{y;*Sw4|5Xv#+~3sdd@15`mo6
zkM;Ie7opm?M%|z@!lR1JuJR^8kywYebN{s^ZEP@V7=l0m+pHCF)LtajsN~pStNx@4
z-k%RvM7FXqHLk^`0<D!S;GW7GQz0x(<0y4?=Sak7)#u&gtKRNe)Qv`5G)k?|tlI%6
z`J}8Dleo2ajnxD&QPh`?WB$wBF{R?EY8j@yRn+$!vPEqJ{7%Vud36^8-xk^_)IvO|
za_G^wDr3697bIDc@0nvv7iMk%m2spDXg2~!uKK|>zVnZ@(pqtYfzHyJ!&C&0a`=&3
zgD?NcqG2}ZG}HHc<_D6UuezjPfvKW9a6L?IxwiidOm&P>M^gWj{JmVf;}zJt(#8J_
zwr;F}l(=?u53n~I_D17q{fs>@_~l?uv=6@!q#-j0nV)Nrm7a(udAI&c3-rNikCl!c
zCly0uOU8z0gLjQ~lBQj%(eU4{CbBEVDmxwa2itqBB_gvk06UEk<K|-aq^yFNH|Rk2
zDGCNyHV<>)YsS$e(FnzwA!V*x1lM}r^Ah5^2+=k2OvQp9wsllG>W1z?(<=O>t+Yre
zwMq!;o2Ap|#q0yj>(ci>@&Q34-)uHhref;tXQd87ManDsR3N>asi(_2J51;Fa0+FR
z@01R#HX3<6m5>M?nFbui>|l1b<6ZVld9LV2QYRkr0(Pjq85yh*G{UD|$4Lgsqry4s
z`oheiiJSO?BF$Ow!HQLl<HxGAQi&p%=#oV6thmdeBefCq&JeB~0YY?m5yaLu+L(~2
zLd24f<H9QBQ!$PyB3?G2?$2)rX>tZ$5Qhm&6@#blfXCoFVI<-LMj2lIPtK!L<+W4U
zhQ-7GU(c<ukubjpUGsZ?d+#7B663DKev1F&30I5)fIR&*2uvXJ_A;!f6qqX!MsD_^
zOc#sxP5RjdE9`<fje84Lm<8id2E1q;ToHmrlVM}rI;(mVPsG~{bbJa~;x#NW<Kr+-
zROjd_>mO8>Cs2WXloaq7g6K!J)J%v{?lo0LgWPteRD4Doyo1dKWFX>*BXstZ#0oJ!
zyMx!S%?<JTb)e&RdTV{%@|TJ)oI&R0v6lUc8Br4PDncmL*Br{EuXt+Mk{Pz-fr$DQ
zI<1^`6<&-ZITIhSXXRX&J>N*=U%{!hQN-q+_Ne=U5Xj?d_spkdi7;3PF|_w4!z5oh
z>1A@hZWm~t#6ico){^xqDTn?})q9zG71B1PO<yHY!&XupyIZSa)x#J6z*M4oBPt|S
zr`I{f7{nsdj0Y@RW7Lb9bhN8gbhUPJw+~p>)={`v<KSXe37O7)z$6%3UvX7JkyWx&
z2G!8-MAgxQ>bmC7R-1>&K)F8GjYq>`6*Ujxgqt(aX9Ff*G=OP}#4Rvig$^?6Va2+8
zU`w*B?#u8*)gjjt#3pMppTW?H-2rB7P$o#vnp)LH)p65nM#Fu4Doqr7YFi1dl`rK<
zk}@k{!12q{Vcy#t80}0ktjO>6hxLFyv3_aIYA?`B2$|wF!NGuEmK^+iYiqMG!N#C~
zTe#?({y>1_Ds;cV=v6|%!)L6xlRTmmB*%a*9*u(@s2E?3af>=xvB_#YFITO}!O3`&
zX#)~hA2o%TAY@(C)EQY~y@J`Ds4C>W1<P%QJ1n9?xJA99?C;%Mi-fYp`Eu!Du8K8h
zd4X+=(mR3URYrmY-)P&$7~)ntV0H!qUm7yC3^Hkx8TKPn3Vw_1)@UsxS#jH~Huf+m
z3j#5UyBKM5|EfvKomn{%9nSZNk&F<wj`DN-25@?~OJJJmCL$46g@|#%PF^A3SQQpV
zP6yeST|=NCyV@vs9z8$&8Ff~X)cvF?FJ5waCf(@J?Y_U55hi0D)#<u~8$?4@?AH3b
z53kZQ0HZMAx~i<Ih#G^-b4VsPS?0!RVeqV=X&}%+V;O8fD|;v)x^UbzcS38=^C8Wl
zj;dM&xE#RE;#vJs@kUhi6#iN0&@G6Y0*(2f{8j9V7<6F3n)1yWe_9QaCN6Bc1K>`R
z5smu+{A(X-?L_5LUHM=iWbsGmn{n&U8EoiD8@iU@6V^ISE|W>Z4$L0JU@jCbTWa@x
z^G8KZpY~S5O5>oOT0D7&F=QyTB&SZRF?3=?0R*(PgwKW2l2ddb#0xfh?-U&QYr@{0
z#vQ64MBvksn(*yOHQXQEik)eoKA2$4lx{<FCQhbdX8_)hpAEn(EIA#>P05%{Kpcry
zAwhLmvaEe)j<WH<1EVo(^Q?vxJ{7l@&?h+2)30Kwns+6KWKNB6fh$_QlN}urkY1j%
zi(w9kn)p$P7mL$aFLd2I6$f;wbFUC_bI?ke$_0|bzeaj6VH@vuc$EjVMO40t>qrpF
z^-|Rl?Sb+NhPz8mlu^^uQLZAfW@`hxUM8s)%H;R==ytV{l`))fW`g9VpN)_!^^8qO
zz|;m<iV);f<~9Y@L-o#~k1!wGFI!uA#$G!@vj@B~CVHKY57-WFW_^3hfKIX2Sx3Y)
zNIg%CUXY1~Y)sXpQJQj=cfu5YlRZl>7S!qUu%N9JshvQ*4G9d$KtlZT#<T&v%{iy;
ztXl?zc3z3lb4mb`=x}N)jIJ%&6#+*Iul7M5s)_FFguU6C2(vm6)f(Ly1C1R>La_If
zf}>u9yZ#b^p1t<rixWq@iB{ZScR}^fir@Uo(Ni(njBG@zrz$f2Ivs9MQ;uo>MpvaA
zOGp!KuYe4Uj>mL=y=3}rcwFqB#owt5uf9CF$QvalSmbbTvY^=|@O7HcGL{=WyjH;Q
zCi`%f6_G1Ucx?Q+XcDdqzf$;{FNmgFk?yBgnw1+3OZXLt2B@+ZjOgZHy#)*}x+3I1
z0E8X~L@w!Q5KQr7$_Uj_W$Ey|MHfoZg7<Zgn#eR(aaC|bDzz~}m0l#BoEdQk+qG^S
z%$AP(pgAZ<T1{u1WCg<F{rch=9Ig>*!EVWVK|+-L>KB)aA~XZz5js@MTZ7d}W=CQ>
zf4{xVst?LF|If2DFN}(uUW3fH&lmC%*JEr6O*@y4Im=^sm}d(XES(W(she{vh+6uB
zgyhl1*6jpPO>U?dC@Q0jL_9~hNgWk%!L~nYQAJRaX5qGE3jegUV>Wc}W5u#sa&Qn<
zU0kiukocbcG^Pv_t#}Z5O(>40**Ltd+SeW@0D$?s#(JNYuZrj(KyD(!FrnWXpsUy9
zaz1?jh$8ZCu{w%K<Ir7*^CygD(8w;3kj0sy>|YXPe_R2FW`<@*-eOH&@ocPN(`$k(
zU+wn^9Q{sD|Fv_IfYc*;3P;1Oar8PF{k1i|xf}n?0BGmtkWkr;<7Rv_9Q}nV$2SQ+
zon6F#D**NV<5!EPj~_e&uKo;Z$GgY7yYZj!{ue*tzfYSaxVal>Bg^0>p@qM8=%b{r
zqu}3MQKhdnvr0TQM$;0NA81q0KGDuC`L8F-#OXZ;qQ(O85>AbogBSDw=}H3oV3w7}
z+Xw-(n?Wp=U>O@fKvJt!t_w&gTHhEQE8O@*H`;JoTwg$+?@8nM{R=1Zy*7?4Mw7AV
z6$<#ES2omf_oXT`PbNzJcCBvee6h$Ei;8adVLsd>By}DsKG6WdjM63ra%c6)=TV&E
z4{R@?*RCnd)XfchIXXNQTP6|W#!GF7{zuc|szb@-@AUo4tZArs_0B0_1<IllNVv7(
zYa+{?BftlAihVs~1IY19nnFS>i?IZMcS75_W}mQ6iL>Re4NE7JEBSSma3*jcJm|->
zv_@3H{4^&N1-i*i%4VW&Uk9HqtJy$T!l+F^M<F2e=EsuA#DPftPl%FT5Tc0xZxiKO
z;i}*1ZF8IOQ^z+xF8{?<KIN#!H+BW|Tq%3=NlAF3gazUVt5pdr2abrs4%0pq6BYd&
z)Ha6&gwJ-`vWx`ozTdvOy4t3xyx68L%PluO*g#ZRI6nFH)syXSf*7_FFqCCuwx^AR
z1`*!E9M@MMaRej<k3sw%?_Nt6vv|X>BjUenc97|0K#I!ocls_>abA|X@6<Z#+&w;_
zpW~BVX_8*?yDRn48-D34#Ah{K)OGeG&t_9qIM9i|AO0AqQRpQ2g4Ny9X+OMt{*(0J
zT~;;9oR7O041~ub9F`3pGbUPIQA;pDY2nGJWDI;@SwPF!+0wFQ^isWtYqq7?RF`Yi
zD4HRi8a_DwSpmT@_ybH=H<hEhAi>5dA~^adc!rets!9tQb=4s8iAroW+ez<-Ee&?)
zHY%3~McdXdzKjp;xxSn$E9@z_Co=BE;!qeZ^2+u_)`!JZ;ZAf>hEw>l5suDB&o(|j
zr`Lz+Yz7Buux=<O*~SG?I2A0fo>S#@lQx$%f*dnBe*q}_4u9SzfdpkH>>xf%K0)sO
z;bjAIrXSM*e4#eRQ%Y}zc@obdbZ5+k=ucIsC7OyR`MD7j&YZ~QbkwXwt$@&HoP=vX
zd433*(LQ30B<U#Y$h!3Kj7IQ`M&W-kRE98+2eX+!mM-@INkF#0)AM0IFnSL!#Gk~<
z$erzIZOdpov^zKMNP;fx1$3HKJoaS_6R#?tW{3HO#4}yXq(w7_I~OWnlIa@k+IBAw
zTYS%>Gi{-kjn345aBUtM!KR->&1QtZF_dUL-#m1dPH<d0^g$Mjw+7vVcN@+K=KP1S
zuVc?InPm8A+!UNe@!<}^fFy+32R|+r>I#XV!f5cfXHD#Y|6Z`W3mY>PQg!DdYtBo;
zQX3Wc?a-u17RqU^<Rr8&jJ`zc@u48lHk5QYtCB96@`6Br^r`N~)xe~#<u>KP#Og(U
zVy}|q*VcG?xQNTTp)0*^eX03_;%2{yKKT^^YSOgIu(q}icbps1#zVB2j?Sn`B%0)r
zSIjD88Cc#FHjy^~FXKZ((P+8mn&LlWT;znd4BLt_OhVgoFB1XLXNyfiA$mQ=JUkXb
zzyJ}->vkpO$M<bV-ynTfL4!8`Ry2xag+QKX+Q!^tai3RcxMpV9Go*sLf+tAGK*JdR
zEYiR>sA?AF$MoYh^`jR60lri{6r5QLs-oCg2B%wA5|XqQjAg>TBz$8`kcLFt4uWA2
z_0-ZSH9(bLIDg>L6B)+><;ryLQ6n)x;>+#|gV#yWd*AFps?+QBF7-jJ<S{?h=pegF
zaPdR7m^#~OL(edHcDk+eY`@GAJuzM>$-Fm0F0ZTPr?SZ4sc3Q@*xZnQ+hw+Eub7mr
zRc_qZsJkUq!S*XwK=vvi?6af514bAF7uFE^kM1Z`a^!y*57&O_fllCVyU9abWxc0O
zFF4qEoAh`3djS|t16z%F=%Mk;^%iw>^Td80ok)no!ySoJ^pcQ%?QO|T6CuwuK8p{*
z$~7{{GX>+hlD7z`L2rZ>b0phC>z0CMiw%hh2f1W}WTddGibD~sL2c>=5HJO07@0WR
zv4}{r7tgk~PFt{p11^oIS7Q$@(R6?Wz{EFV9D<07;Urn>!buM#Q27HmF)*bgf$MYF
z<iTAVQAQW>hsZ)>zFV8~s=V5GaquDB-iu!leaqJ>zXd;)8wS&KDf$mg_@;3!mnbmB
z2k}Mxj!?4ZU=H`TAa5tIk@aj{CYUhAlFpMFP%HMPE4$wx-X`qrgr1W9J`F#+cdOrD
zEN=C0Ll^)*x#7i%xwGRG%0}i?ln4hQGQ07Bb{bX0eBh`y0yg6#L4v4f235h4TR|mT
zXG}uomQGY<U@a2{1spe-ffQojS|YrP4o+y?Z*c#iGw^#6<<c)KfDIE~2!<+A+;~`u
zycw|$U60Ql<w+`4W6ENvDq6DBh!iat&F6em#=f;>yOKlbkdK$)Asv(yL6c5cH(Ckn
zbqr4zJcz{7$-^|1mxHw`58dtxS*2<lyB1NjY1?bs@>$G*X9(q=xofE|CZ7Enq2hwW
zGcM?~8_h>)8@ctSF_j=$IpW30b~wmc^^4^s4p~Z*#A1|=bViC1_OyhY3O#(nG@B4y
zP6CX=%m~=4Kps0SqgmOZId+3#z6(^P`fJu>=N$o0^P`&gKn}N21Vs7K3GY2;ZJ7xa
z(v9a;MBx+tcc+30Hj$}=-)OtC!{u~{Y}I(c*7I}T)o^_eHG`SiL=()vv!^+8isn<y
z2m_fqA~Gn{0t3;Dz`F%Vig#Kw4d-b!#QZZzhc5<zO0s<5x@?>hN{(Yd<7i4uz;e0t
z>rucvh%xVjW{I7CL3{lqicf}N3nvKQC1+hH{ztm+4H_UWMOKi2<Q-k+Ys%xg*TvM;
zPuZh*UjQ3{La<%~zQKS!4d24chmH_1Q1DMun+x5K0bO4gOc7;-5M2l|b&_m`59md%
zC}46AlDF|DVN!1iG*AtCO8Jata7)360n=3kWA!5k+zE-ue+!a^=IW#8>1!H~F5|cH
z**F?}bX|Q-akagTAB=6KAn?NHAm<hE_b$bgp<Ih<nFjp!So(-tl3KnTpt^H*p5rt^
zX*1TQ@b1@#>i#x&?Dn?C=UFAD3!5)l^GlQCXH0g3CA7w3YU4=TY!Ijt=qIH5O9pS<
z6t^y;=Ag0Rkv)AZC=$j9nbdSRE^k>#`LQ9+L*)y<S}aPKz?<7PQamT?HH$e|nXo&X
zSVN>iC5NPl)u9=%%Zj$(i}gm7xw6Nj3d2=0-cslWy)%)zSTlzs8F>(zRRSEmH8Dlm
zFbAsM+_nyVzJd^#8RtQ}V-?n}8LzqBnAULEuzQA4yXUhM-CN9M!z`Dv1@kRGur?ID
z>LATsOSE@YrE`STT%A9Mi@`T{D9%}+?qgMV!LJ89??|~6hNpE;t0daV-iH0i37@I6
z`PMF8tX*Am+^h%&O>|wB<sD=ae^@aU*#7t+LJwDyjYHSS1YH$%am5qDOgt-!?!fF{
zVmM(c@XaQ~TH-p-97o0$!q8cDXszOh#g1AfmT|ffV<YKy2Ycz<F(UYk{eZ5#@pZDH
zXvZyF7AtLd5l(p>p;}2dL>Qcu(+@#M{BCPrVnVlSk*U@M<kO`cH7X;|d7WKO%UU~K
z>TuZ6%E&>qR6Nt}PhFL4(waG;41w{wG0v_Dx4_MKGN||Gm5XHp;c$ZJlsms4{`j<M
z=8DWzSV)GG%>3|Qn&eZTJqhgX@86<_+spX-rY-2AMrezCr2SIW$>!$wM7Rf6G^Y=%
zjOMAy(^(C*@b8=WBNt4l3S?8AHRM$X<P;rKsd}+M&6}CW&C_U(7m(b>0b?>q`UiT1
zL(hgv`8s1RUnUeM-sse`{2AtPb$wM<Qz!~iX~A(_+}b8iU`^{JXk1!l)I=1KK|5_;
zaaUSsi=c65sE}_4zi+Fh%BI^KaTwO?o#{#7uWb;~Ejd}`DWowgTOV|)7rR@B@%SR4
zE*G;ho$>=?QT)V2I6o=Mo1dAiWz=kPo)%{k2|QNJ21e#4nh!BhD4AHdta!|tC^TxA
zhy7S(jRtwB)8mPQvEjon%}6JWp)}Z$O{82LFk@oq8O2KEFHx6jvy+wb3_qRZMOu9r
z*yQEl6AQ%rj7w^|Q;rcv60=6ntGG7yXIIZD!8A2=YlUlOe`wdC7<A6Qvz$PsCl1>I
ze2O(37Wgg-m4+F5Agd>gm5K0FGLLH~)SY-u(v(fD;)4jQ1+MU0!U%4M6+1qQQ+db2
z#go`SJ0T^BlIwedJ0la8JWBX$CAaa0C){0=o=q+~)8B8~FP;oowYGbF5)KEbb%BhL
zB(vc63s9@fMW7u-3Mv3{LHW~VP&yx?nmG4{t*o9fVe#s;ir*4oi_UafaJ{A#3%6VF
zD^tq@Lxs8<ax*FqEF`!mdGEua3!Ce>g&_rvL?P>w68#T!hKKSV*VSaeAf9qk%>fSA
zh9dj?%e&D&5OMHCA$x193LStX<mm1GZN3ZT6@11AjFbB@QGqOW?CwHNk@30k?*`g_
zKR{I}iH?WiFxgt%h!)2~F}rX!E=a5SAebltvB>=AT3);w6Xf5GDDg6(Cz|lR;I$(W
z@X+au)o`-TU4({MH((xgM~Bg@M)6d(!&zzP{9x?pY5JpKK!1ZSZw!j(&$68CzbnhJ
zjVgglfZsqaeyUK$!K>-1_-KVB-G4o?KwJG3SVwpXA>4y_De+_oRVI#vXyi3Nh`gp(
zMT6Ev@dP<yAw6MQlB066MrXw*)Zrz{b{E|ZkC&*GnXK^(*rZo!y+K&<2KEtVEKX_k
z%h;cdM6ogRq=d>U{&?<!6Jvk5jEgRxsRqX6!=td&7Ti$d4r%yYUmj<|L2FNV)0#_c
zWN4frKxzslbQrhgVanuKn&eLG1`Udq5|ECiyH8)SV+-!?iubVO!A=eq2|n`1>L?Uq
z6M}}YI`%neD&$Fmd)R~b@9oNu`x3<a0%Q#}q44u%h(pFaJ+7mhWbd%18ji+;u-jf*
zX$k^>!(OCo@I#o?h0T`^IciJCPtqD3ei4U1FqUIVS!@*qmY^|{2XLPWU#igRtCF8Z
zp(Kl<;ize~fKY`Ijj&376c4ryf~@7V*d~tL5iPz2(?>fOS#?Hv$8qHnZIRKIL@;n>
zE-+5D)?o_l;6Y)6OmNKhZMX-qODbWXufs93{XnAM`Z3;FKU*z@VmA$%F4waX=r8#B
z`O8;0g4%aXAEJa6MomRvtHrAkWi`dcjoMCrGYCP<5vA&pJuHW~PpA32`^Gz3=xjrF
zlW;0N@P*FS2b&hp=e?z?w6y2OFkdVj(E#JvO`MIz)wkkpv<PA40dU$yeh{)lFf=qi
zDm_+*aasq~nTjBy&lxo$Br{uTKIg~vUUQ6e<;Vn5R<QvC1ZjY&W_$v@r~t@xKEZO%
zZCpJQNiYejY?gw@8o;z^ruq<yA6Zp3vsvTXCd@b{UL1Pi3FmOPm%kU+XB^WY@73;&
zh_Fi#K@Gzc{&Qxg6GTqzz?mx?@uBKy;D_VQ5ssI>I!U#}Sr%u;2xg-#0}Ico?Ien{
zJ7MrDF#{*~mACB){`OLv1+8-)Jg9fdg&$mI0jwm?*j{|t?C^_j_aqw3czRAGG?K$3
zEZb|zbVb`MfWFi%#yhkwGdj3tYNd9}X3>658)Gyp&JtSQ2;eex4KD_^^yRwvgoJ07
zK5x>saf?5}l`qd~4<_1Y*&ouY7;`s}nN(kXmoLj`z=isfrN7i>^05i-?)%2jY)$P;
z(;XcG9C?)ig|gdGc5dmOlIWVTT3N1&glA60$|Mk2E!F3rnUe?ioKy8tT^0x85Er(l
zxSENo;OAB@c7|XMYsa}3&aC4G35K8&8)e0FKfF1Br>Hy52W%xi`m1toBBMufC5zO~
zgvenwmln3z_1>=dubE<rAw^Y7t<L&yOAGC+9AQ(8x0bOxm0xP@;xo0q)xaEm$*g*1
zG?-p2PBY)<?k5{e4T4UymxI^@Uz2pT`&R>Viq(pj2e-k&is#vK#gUs^Q)w)zvC*G{
zy`Cr8;M?{-fL{man7T23jdH;dE{q2-nK+<l6Gkp9=*1c1po)uOHOSr59dWUwT8g*d
z6`1Ba{~hr?qArim#P;Rzt#dlPv!8XyTQ`5<1^U$?(3>dM0qtSsgY9o`7^;;6s}2f@
z;bB%(#R@mUhk2_HRJ@c92f<RxL}F#^I_PDZeKLSP;2<dJQbe*_0c%I_I+xBmTgGqF
zo<3m8jwfb|TvxcO;d6mS{jiP}@<qpQ8|c`(*4Arf54qO(I@fccgse|vuWcDgG;Bs@
ztYbRQQ*#OUP;3-T7?5(dZyC|i+YzCmSMtXuAX>w~k!eKQe<&a4-kZ*#;}S~-|IIcY
zX>%IP&`=IO#yp8ka7CU1N&uc0r?j_~h*vyTd0W>ikH%K?9Jl1wt_0kZjmK7jtYhQ1
z9di4?j+ZLaC&@u8VE?^N&aF#k%90nd%lNWbDbgx%dTL5ger+@VnLr29K^3q7{%<==
znKHPlRy-m(%?CGc21?$C1gaWZ(>DVi!Z~CQ*NvbEgNyRA&R{<dU5Ush(HVLN*RFK^
zx*$D(pNkE4da<GWU~Fg?7#l<u<R7yQ*@PRkxh8KmrYAFb;994I4an2wTz*0C$rC!O
zo~SO{uMOLu4PkR{h<)*f*d=eg$v$ws^gBl^E<8~6%3gzJ?lN#xgFe5boatY20ooth
zRTM^Itb^5RWeYY07nCw9lHI>X$Mx~$lgCe<9KV0iANLk8OmtJCR)!nwJZoN+@7rFy
zjUgJNYb)F~;T6CtK!tE9fbu(W9+QdS-<E#dkK(F>v6N|&Z?RxFSZYI$b_MKytYWSs
zT-4YfaHfP88CO8?&&%2L1!NJvcNBKVOQ}a`-t>9{^~OOnSR;cq?-I`@Rr6P%xRN*q
zO-II9Ho4-mPgFz6IlqcGiR3v#pi`z9lrWMC<(LWnmMge2-sQQ>Pc+IZpLB%RkWyCc
z9lFlLd@XU<?ow6hPhsXpf6v7CJLS7r@Arp2h{4d@F}BDGQ4U{P>?ABY7V&7QR}sM+
zB6c-Ggn3ytHSG)`d4Qn*{R`}u;sVb%Y@C~-d{`EzbaXrAhLjZuA_up*krcGkSimH8
znJ?<Kq0dLlxYONt<z_@(N63r0x%18K{S~n2jv>6Y-v_Gxky$`t5$@f&dj};ceLXMW
zz=mN=VSox3q#IbSNfR8H+K0BC3Dtb-ZvPwTm{rM0y^NjN&yzsc>G(UN;}#M1sMi3@
zQGXF~>TB5dWh-899C40P1Z2^hcJRT<F**#8CSjpK3IkIeqn-o1e_ATceuY1;>Rl|}
zgu!8nGra)`;m5MbHW05jCxE&kA9nt(cQ#&T*~WR(%<IAK?gc0R%^?nV8&ztTFqV4v
zzjkRH+j+Bl0+q<D+ErH06FU^w4N#r1I%Yh_@7~zzV9#7HP4~aOJIuDf`FfDuzk8dW
z_P-ru+qb{52D>Nrd?Ij!>)(iDrSv66${uT1(cJ7I<~`wt5`6ad9mUg4E2#24Xu`g5
zOZF(s_8y{5Xuk{`Z6ZzX_HU-W8Es#uOyh+xsoVnjE|rMWUNQ@-R*{<qsZ4K9?0_yY
zAR8DLHD+#&>~on$4X@3%)M4A@gcv3#2!U#Rnid>d1tE$@utK&B4_nXFizXyfxd>Qu
zXtY0euhf!KZkZG)B2dC@H;b<R5>8Mr;m_?dB)r_e-;75&=_>b;gN!oPTY>cuBI@Wi
zR<IxS?q;`da$wT~8U!UKd%OK5kqD)+;!$1)u=452NmUOHL$+sh`yMGO8Xq|X)Me4+
zvziFFc{zvU7w}g4i)M6Z?AXPh^8KY;dA<hMV9FrfWca88o@t*CI*dIINu4xK*k^Z|
zn-a%Qc}o)|E$wGM9HrYIH^#l=Xg7}zg6|Js1p@jZcx2oEg7>&CFnX~4=Xm!F-WZjw
zWngXQor*c%r(5xzrDUcmbVLM3D2y4cc%w~vY9N@<q=+3Rf_SOZ@I&$0oGE$EvRFL{
zdP1b^%Sl;fbQ(?7D#4b1u;O;`piHm@LL!FJW}A?fCfeQG&u-J+IEXMC*%j19=`U{e
z5E*(Up)9()iD6|730WF6Nn!Q&OtTlhn|Qao?0nOCA9`Q6y>Elej*82fx1sZ8+exPq
zn5G@O3%Oh?ZMc%My;5$V@?aaXaA%f*3`;A_iTUCz)H@G?F!;FSV6Po8gq;|~DX8?6
z{Yc=(p$CyW+dAK_y3;gq#HmQF;gkZL4Bw1Hg%YO4i25Wm%B@5tbW)yQ6)Mv82T=^3
z0ARpFq*2M8M3Z(-AZ03$57;>dJk_?pXG)t+SY^+OX10S}gx&q5tmy27k=7KSDvNna
z!8Q0N%_u8J;I>wD!!3Qp^AViKuq%(odfe=|eNO@Il*e9H|8LH-4Rm88o#*k!3DHPX
zI+zgno`W=M&QnTBn{)%%P&VCx#<i&C%%V?A>l%6`!kuOgo0GyGSe_69`bU;lVYI!E
zYtuhVW!y)!F1kcVmA+s0Xm8y9hIa)N$=U@96wqf6kz3UxBQg&NY&VDnrh_Y~r>-MR
zXFh_Yf-V{7X1mP|cNZ&rh4gn_y~uEvGw7X=LzIgcyK0lx$y@ldo9k@~x60)`6IUKi
zTR%x>Q0epVMaTiR3By!gsVD4?n$RAcZGnw+_e+erxpBOr?cBu|;sruZ8_IJI;BJnq
z=Ks6)YBoBD=vVlr)0%*Q!<(}>c<uT+IkKmd_Xv-%GrR^Z7P}(sKu6N#1LV*Z)1VH<
z5J_Ni)}sV<n&YXA-?3_<he<d+dLb|<OV~rX=%S>EaA!S5)8VcgI7gtKoet9u1(X!h
zGc3p{7LQrRX`Dh$0UrIZ3tzCf_C<)4_yyg6VJNLgu}JRr3X)vD#dG9K#jT_5?3D}L
z{?qBJXsC*SUzt2iEil(eG&a&0VF?ALEhQQZPb#w5UcI-NMew^Q#=JhIo$+2jYwz9R
zCcULPiZUy(yly^T5cTgY$Qz+g3=QWfOcLxX;YPB94ALJ(Pi1S%dkx)7=f}`6{Dt6W
zD|<FMXF+_MchQgG=(n`&u~C~_LnvX)Ya6l0=F4WHJz;`#Q<$?}DQA)bg86cIFRCbP
zEL#bO0XBreMP6JsSseh7G#|O<Wmw<aUo4;zQg3a|@7<+>Uqnr9+)p<4ckb@=cQ*bg
zFE{8q-e4iAlY_v&rk8qwP+u<91rMrrnvzei+mcfU`*eJ@F)Ex0+EGiA;Jlb5esD3f
z+F(g4*&-H+i)Ae1*USd*@}CW)QKXNm0q3gsh$;vw?jgRTxf`KANoA@$t5-GQ%=ipX
zUR-#-$v)I{Xjgr+8BA^)dRi5Z8YAR}gRjgGc*WNTxxjc*SAGTs6K8mIT};d-R3S)l
z3DkTEu<PxVJqF^ZN81z#PBpBy_Xd>O+#{6!#~lt+b#aoPU6z+M;T%_KH623rx4B>H
z@5<+~`pV=g_T)X7<Zc5wHb@5AGmvvskC#jltu?gZy&>-CWm$o>Xn|u_DcbUUH%Sh{
zN$QQ0EF&s1n^)Nc3LqSrI(=7G8w3_OFP%sw)r-6xx7x1BxwgaWiZ0{lE+lbp-(=;e
zI0$=BsLu4H4h_j-JIt6!w5^95S=x?gPCnZkcl4JKWAJ{#;1!t^@n{hKUT+!ysE>OR
z^mp#;+`bi160o}8bTSfN3lUl1ah4ZvYPwD7k)0JMIUdcKp_}1HK(XYAevvo1!h^3f
z1%nx(1nMZJyNol|E_v?m|Gb6VM)oXw_gMkXSjTPF@*n~~c0NfCUuk^(eq@4t$*QAj
zJW*>t41C1gF<JRSJv@G&*95%G{gSylMLUE$zdSFmSpLLZIX3|cvu_{>VL04;bm|NL
z74({3@UQ5zJABhGZVDn?{pRKi$O)*YXO~%BcX3$R5{3hIorUa!oHEM-ucGf7Db3J<
zJj&bTP9|=A5$T~A0n>qB-&}AYO$B9^3Tl)mZZrvECOM^t%VG`{&Z&9)j+XCkKRH3a
z5J^-HM)E%Hf=rmvZioiQ4L{oT?O<g4FkP=R%0J{%onjL9ehThL7Pa=<CZS;1Vaj~L
z^JA|<%Bwp;X2C`nE8C7WeMgv?hK?^FOt+xIkX7smvlPRtpW;_A94sua^JTYLjtk>n
ze;le`fii65HgF8-T+fZ)eMx;v8@@YI@p75b?oED-4V#&FgDP@4r*o)asa*k=*`9di
zup)+|-B8=Wyn$)4goG0E`qx(vIab;0si13kObG>_#tpwl9zNE%_!!JLX*iYqMjZDE
zPtH0}ego3W=-%F4h#tU`b!=@Kn_o%$xt0SbJ=`u4B9fcS#gT~cS3u*^_I!mo^XG$!
z{ZEe2&T$2*3}&!N9!neppp1M!ZeUw&TwK--0U9EAq;R}(Ml?SIlZ_GmsCwXr*f+wY
z{sGFwdh7U0W(+SoaMg3xBo}T1!4+xDGXFov`$xHLTrt$!-5qteFO^OjR>$upgEh<>
z>R<uh%h0|=>ca!D8}$dg-~%m6@?FTkcxB!eC-9TXp|)uFQ{ueFt4Cs0*sC4ws&f*>
zKdm_^(A+0DPxUIV?8z#|*&-9Z?Isg!6=AfNX888YX$B5y;GW)Qh)tow5(q4M2wyN<
zUfmc3hqWixktjGz^vyBoIt7j`PSupcuNE-$kVxo<a;XHbKT`ANC56K+9Po#BLRn)h
zhD5DH)Q4yj7tB^SGBan@d{LRQNixu{bU>X;^*M`X@>Y!hB@WX!cjZnln}Mf+Na%k&
zEiR>-w&c8<9AivZDHZ+GIwu~RdZnO`5NI`Am%Oi)rmZS^mNiZR97Ju<#qfK5F5G<z
z32eJYV2?o(15_~{_B02=;bYC6*|8E(``wWVu14(2oVEFhKmOB+JXyE&xWb*<@%m5e
zzU*)YZ%}5-%B&80y&@`A6sC}Urx%tr>4@kKTQU)GKFr>f*?Yo@lVN-cbO!_RL7`t+
z&08L$m@~4U?&qf}pL(Ng>Iui!l@_-2oo*NvD5$H-1?~#a4EB^=%$pDJL2+3?N9a}g
zCM#-0%#!zKh$(<qXb7Fo%B#Wle#}OJ&@6op9j87k<48uTCl}oFait<6tM|jQXwJP9
z;pB7Ebyg{qRYE;bEp>?>MmDBc?w?ZvLFh=PD~5W=G|w*Ntva3Tf3v@jLRVS#W}1FD
z%xjji4G<vD6%DraJa%5sPkEB*H#rSCfCW9aq=eR^Kd`0W&{@skL!A(ED_n4=)$6rU
z>In8MnU}70R0!MBQoInZe3~6S?eL^Scp9%3KiO$^UwM|@gd>>?PHN2yr<tX53(3lG
zN^5E01P@L{W#-|#Oh0dJm62GbzLtAI{KSa;VYB0H8J*~EIipDGps7TxJS{IPZS<fH
zdtN`O%8yyGwbe>+)UB!myGlu=Ir}!PB^Q-toQAXrt$20W@G$%cL@tX4_-#)JXsc$~
z!8N5Teb|-Q$)QtzZ^StWHj+Yu?%(gb%sS1bV~EcBD2^8oRy_l#(oo%ohvduPK~k<D
z8i0ZqL<HKa`&~=hEzV(+rb4lvhVzhVg$IK1NVi3?rk$E}WQ?V_F2Gq-;;BjmgrgTp
zoT<cF!Y`62yGwnMm&7JZp626)%0N$vN>HtX&@o-6=fosR2E|m897<SilO@kwcb5PL
zc7^UQi+6RW`6aQ*aelua*^4G;nc18J+m^`#=z(xa)>60H&}|{EvYpYC#WXQ;G__$V
zZRi7%0k*Z|SKB`{F)G~(kWINpy<jhhw71Jux+UT*<J=}^>u&A0Lgq7yWqQ}z6fGGV
zw_fhlmvdGpeWchs^!+HU3OGa|Z0%Y(h!%2OQGWj|44mpVuB1LhtIK?0oHc$hhlnow
zR`^>PPq{O-RjSZH(8XI#6%3fx%`@)i6F6VdGCr_@kmno$87(4CYDbJUD}u?#f{n0q
z6a-H_E{I0Wi8$Q|Eba}F)+BUaW9>jU?FE<)_uD8P_t;PP0es|Yqs;C7NQmz$ahpG=
zwMp^v0~9BZiwF8E>b*v?R7XZl2E`CSP}AfQe2ProKmme4S&OV#r3DGC=1{ot6*TW$
zaU7QQAFmqQYFsh*F64lkSE5_dmdz=gxNB!>U08zG?%~kM4qB^|{wZqvqw5*MiT*QT
zeQH|UH*gXORFqj*jF__C^a!2{@D?2iG@#>hnxARypx1;gJU?Ze;(0aAi*&}ZC4bBc
zm@XtvRKD=K{B-YKR+CKhnF*4vexgNR1ijtk>8HJTf4Qqu?FfJJk@rJbOlFZA^uyrY
zDP!IdLW(f<Jq%gZjtU&|6Nf{J^b2PZihPr?^<k;;_JQ&lT`~^eF|C`rP1B?_#l7QF
zU1Y;6ES3R_Dwq;fl9$(lJ+NxKcBpU!UnCBrcIZ5Jq8nP<#|{T<z(Pl!H5iZ}4lk2W
zH4&GO(hq}R^s1ya-bkDA#*eRpxX9i&I{l)oz)N#K0r?yRQ~I|t(&_MMDMkK(L#4{C
z4&S8A2;MNq8-7vr;xR#;LGWYX9PRJ?kaB7x(~Vn9(~3{7pR}Xv(c^rBu;it}rNEVQ
zR_mc(c@Xpr8<SnEH`_*ps?|U4C;eeD40>=uJqWhpgB(TX<yE-Xw?;($xMEvJt#3$+
ze?mx1xEJ+G24Rnr-SBuc`s;W!zIjZzL3n&jn|bu~e0*^c)^#*o9F~j2!y*1#JSrED
z9`T<c{#($*4X5-|4i{IWa&a{tE{^E;h<<;ew4dmp-B~XF;C~DIm;Nk1eA<t1FBcyu
z+u2!oc6K(TroR6^{Qmpz@suqdFVe+>#rgSg@$~6%@#f8Nad9zR)b()jlB)f7xp=?$
zeev<*aPjA#!^KXtdltX$9LkTcUM_xowfOPJA^uy;sPOG2vj2|L`pARdKer<xl?SUT
z9wpNp-TZb!t3u`#Ql3YE;ow&DGc;7YJbXM1tL|GSh8k<kaW|;Kf-5PyYT$h**dH9&
z(;6$-x3*?T!0qPy+l!N{bx}vKS$R3$g~Jph<fN%xAci1IIh{ygyT`|pW@~-sNfZ-Z
z@nfSq&8EXzmUypVs^ifJiUEL*%{Wmn1Ah5CEL|-=m-njh96B|Q7`_lOd@rG62L-Gl
z{_4Y*i5C;A2xhzeXG<5<pt7(9f5L8$-Kmb^-_g6@*`Mb#+}wBsi8$~xYND4>U}u`1
zxQO5#m$~W438|*y3?-FXB1iP&h^epHcdrD+CUl>G!q(Pn9VkvLc}+kBC_a1n<6=A6
zvm^le@HF{E=VcI_4=yeSb-nQ*h<|(~ulzg+4i9%9J=(=7rdNJHJluE`Z|Ia((uOI@
zp8#s(jjjyNDg4zE%K}sV;X^&ESo6gf1lrIki^XO!YzE<)`iK_R+jE@&kVh3LAIJ9T
z(IfqYp^4|a%!FqfWH#2cR)AP-U2w_Y5)<AUq)=ez<3?Mi=j<ge`bQFcH4Wll5`){=
z!r!;GC^TkdHU^i?q!a&6KAm1t-VBDk8(-ByJg5CK2)?Q}(zB8-$3c*8oDxP>XN1H}
z>3dB{Urp`%1#*bYj$SVKqZZ-C=k&4II48V|p3nIkUf|Oj#psr%rzxk?GbLXk85|{g
zyyA4c(1$~A1~?!+A4)5Dqfa03=|h%M8y`OK7rfN&4*Q`E=VfNJ>kkmL1Z(ZhT}8vn
z6dBkk9=l&nck|dqA+xL<s<l-uLIVUc#{o>^;U3vGR7AsqWj9U}H8r8=jVAN1tHNun
z73k=o5#BKU?FDtfPXwwQQoqcc?Y*kWIHUrM*JLX(lvXrTtIP-YZm2wmLTHi_@rVV7
zMQ6O|cs#`1A7ZM8m}eZa$&rR+UyN&hx-4?oq0g(ltn%i=AjeEBEe0xT04=Lga|P&P
z+l_eyKeccKE17$Reg(gb2>I~UULOMIJ^|~mZuh}#bY&o3nS1>qqimBbpD}pv5BU9b
zR<?8~XLj6BQ3IDp3vECQZf)iDlbptzi6@vMnP<#8a=Lqxc_TE#E?R8kVi+D~+KWmN
zb#ZBQV5w+usdKst3YXd1>lDl*aT4A$OtN7>e>kQ}k1kQ>C^>?VOe4uoHOBCgw^yJw
z+IbsqZDCz@KCp&+q<w-glt97#Z?zw}EM&h=Gi=RR`c+@kuOc?J#6M*2YsA<7XUn@f
z&{KCCyb+f!S;8k%)6p5Gg5~R0vZ7DLX-6RB%u=v8Bnh9*NI4T)kwbw!D3~jq#T}fK
zF}Q=~MX_M0rFQRJ89zGNc)AIEm_KImd4^kQH-65)czVE3pKdL8;|qDbO^@&Ban#!$
z59$3by}woYhr98adQ`6;oL7}}l&Px^mA=p~sP@XKb}vT7@A-3YH-2M3(c6#o_U8ic
zsB<vnzMkdrPhNUB9LT3=h>x$FD#GI()dl(%zr>gR_P66t{doV*-R0<C>GsFt%YOes
zf17^pJb6NYzwYDZ(bsr+@-4qSdGru3kDl<$lm6HEyC*M?pNw(4Q*Db8mA=ab`gf`H
zuKo}n*Efg$NBt=h%)klI{hc{c9~rv7;Q-aHl-}{VLeO+rAnJrATK&U432C*nXvlS0
z7J6)1(*uW<^EmTu=^nf1;B^*SyfrvJ4r13jnurY|^P&ZQh{`)2!Q6ffqAxlgBbAB4
zmaj`MzyN#_Ef(csQ7t346R$m(?C5rGA5)`$-MHBs?t~Fd{`k|9RXvZ7Zy>t$N4~SL
z;eYpUuSZ!+(4p*EuC*JO3FP*Ih|?Oe3j=XP9x*|s%vR(emwb?ar@04<KdJ1XepY?p
zzIaY!WKPPR*H;Ptuw54dJK%-CE#1la+w2y_#@gDNgui3Sx3+$lHIIv(*D2MjkjZCR
z{3i_lo*;hI(=6GKf6bCx@o!mjJHC-6cj7;?<Zk>+mV6z5pC#YeY5TXgv%>7Frq@JY
zIhX$r7XB%jCS95GWHb*p=uHBG!h22=@9kT0M=uGR?E<ERF>Zxo$T#?K|J%X-H-lSy
z+r?L3f3?4SmaPcfln(id%uS_tggvl=HKEf50{3V@+JjevI5wHJ6w})4%lPLoI1J(u
z$c=b^90!MG;D=~;eL%?-)Y}7Yf`Ta2kNcfs;Z>G_AkQz)IcB7~$4y25K}~KYgr)`x
zRj2VpacbYciDH6680FhcJ@PYM7y9)uX#4XpWU<p}0xPTyj`mc!&lYsc(CHYV8)$#U
zB~3GWlBu(|y=QYDO8(UnE@e?@@TVGOhBP~@DvUVsKu%OOl!mIoM?w-jVLOZP#o<Vk
z1V5z3Wm<iB{Ukf7_~9_ECg-mo5PCYJ=MS%cxGXaIGyCxR!R6Uy-MoI8&6^CmGOwRc
zni9W1mG30sQ8wWR<3Z&$C{<|%EueB#tt&>os1|jiHq?Ylyz)hp>^>TmkH$mAkvkrP
zC$~7RqaJ3AZpgApUS@HHzxL$kjgK%6b49Yt<f)h$>TP5YukpZ3_sT$U&y+R+{U#FL
z2;FnRDJQZ|<FuHjh$j+^-72qZ+G}se*5GJ>T|W}uw0@nOv~EoDv1tC|{;z9rwUy4{
zOqwpgt3nrIce{iq;%2$E@|G79f_5qdla?!T*!7`CpITqUG;?pC;Ak1;$uu18XSZS)
zV|JH;wA(^S1?KWt8&I|e(A}d}9qWr5vT_(GmQgcgTO_*DpE=4DtKCG{x?#m)qCt0w
zR-fDg|4Czu#XoN5iwmr)`<g*J6!q$MJ22YC&i;A)KAjl*r%B^zsz~vJ&Ru8J68_se
zF|u2+Gy-&II~GuHTC<ys>T$<Lb1>!Lub}7dyUIg`gB?bWd%+F*&4cR>!1_AnJX~Kf
zjYW&NF1&haGV`Rflf7WEww<`EDz}SyyC=FATU&+|+i2$;t23y1;Knl+TZ>3puV}|i
zb(Vz}?5;kqWOgW|dDAji*>qSJx<IzZ)fe!?-M@&iys@i+e$)U7(UAvH-;CojcHmz>
zEBgtj84Z@i>g^&gLe2dE8$&Znpt}1xCP={Z6)?u{X^766Ro%m3I5#L|Cksgj@v=N5
zRllpU+gNn>2gzmn>tMgGB5t$7_-@0EVK`Cky><{nM2wj_kc0-fdTYL9#EtW>UZ9*D
z4cfKaZ$Z?8K=xBoHvZXYH@CI*pLNG!r2VhW%$i=TnUC(NkXfkOvvAD>T-&O{X~PzB
zOa*<4Kw0u?s(NWz*{s4%e{$b_2|;|ZfK<@F!Cjzq8`==B0Q`bK;r3_!CI1Is+$zOS
zg|M%oC}5s)^W^oGneMMMk)_6!daGEnYKOLeTU0>RXK|mhx<=l85(d3o3Az@55RrEs
zt?crZ+SaZ1N-NbDwQ^kzWk(GTYt=m+!WOu7_wL}<-8)MnhW}_&!k(GBKqSLuxR-oO
z|AtWRxE&3G9^BtDP2DG&9@0{x>HBL5dZ`RD1h){1-A1v1C0y<Y`f_K@7y5LU;H>)<
zM7apbf)9!&m)AWZpsC0kMT4WbLy}8<FS7W;NuZRgEPm&v*d!*GRg(TTj{lS|s=gJH
z`%j{TB?gD`iCT)r`>U(+QGS*;?71e328t!7>snJ&cVSa(O(`z(4ABVVy*}sesHe-c
zmpj!9`RD%KZ-#r{_WJ_@6Oph9KQ_rp=7=j|_GV-Z0i4UO_AWcu(^g{{o1n#HBTnq*
z+vBj~P!kF#R{J*V-R}3ja<LH@O?;<75n|ibP71Ud+^YO)9H({<8dp`Yt4HCNc>rN!
z@<jF7w#*(p2^;Z!eK;dwvn9&l4TeJlxQQ9ZIJve~rzf$)f4uO?ljQ4Ov#kfZ9e&-z
z1khP4Bh`;b>4z}dZlbTg?v>knju)=R<xaEslVdUM^}fCtHrso&g}&|;+a(Heo5*Jj
zeeTgrrU^oyCmHfi29x^?zTj9o>%sToWSbM{^34%-KAA-ECv2rb9<vrD=3$UJDC^r*
z!Ye_`2HOJ0mnM#IlCelt6%8_{p6q@d^^9UkdT(!7CTZ`if!iQe&-NbIG)V8CwJINm
zlzF?I8r!11J@(RRK2vrY6x0F+Wz1u%objBsR?4g#)rjYwbVRGw@oa6Ey^6-*=#0B}
zg3J(KIB0ZdT3-3DA0oDa!F6#3?(Nl;aBr_lf_|*az<kvsd^<XlZ%6o+*X5CX25=Uw
z2dY9|^+(F9z_nz!BQNIj9f81CmZN%g<$>=b`{n4!eEAt5`U>q`aT75<cCs~_QK^*(
z;c&~yB!oSA)Fhv1Mh5+uCSq{ck%hcy+G;F%`Wz=q>+*bXTpn5AlB{x{kzbHg*TRN_
zhX{5E^Kv>|**0v;r|!-F#;N$NqD}Vb=H@#8acw_({J*YvP}xAsE`}>sjv-7slqHpB
z8AlNnVIEBDTC)1foo#w59V?Z7_4Q)$we1Pl?@)BFT5L?E+SJ5fN7`ewjiQ9u#I&=g
zK$3zfwlp+)c(+fd|3rqMJ9$WWnlFu*{$~|+2{xwxVO_0iGN~g_pJlj@RiZkUl8$4{
zDo)rb=8Q{9<{xuOe5_77zwPbWWA7!nMfMc-HnoR5vyYGMBZj_CI^xWJTdXqul5(8_
zndui5bxScwLLq5YYWN~aOKXp>k+tkhTap$vi()P*t@FxYA=ZJy7WjMFB*Dwef@*nv
zSn|)S%dE!lQ8q2)>DBpV#Sc%a96v8pngpz#D?s^9Dnc!&0>x1fWl+G&`;hZeR?0~k
zDIaB{TwbQfEN*$te}DIdE{|L`RiecPdJ?tFK)(<C*HN~$waE_UG=EHgF@l%R$SjP3
zI4e)S0&VNx578hS79&P8AlGm-nSORIW?SCx2Jgm>8ar~?Hab2!lJGBRmCnv*+oU|}
zTBJ{oD)oOPd+`o|BYpAGTg>gF?r#@)vGPUu-e3C?n7wht<0+#xC5;fph47yf#H@C0
zrJ663=v-Y}#}`R-w3hEWDT~*HC!YCC!PP;2Uh2}G-FAEbtf$usY*yM?m-};l`sZ`7
zuB9&?z;#{v@)G~;Zd|*<js?PXqA#y8Px$rhTH%*h&Tw4UfP${${&^sAN~36hiVT=o
zk&Zc_!V1Y&>TtzmT^~DzTIN7^NVJZRcZO@kW&fz|wIZ|b2D;$jb=3nbe!lW`aLpIV
z`P1PD<vPaF@zr!?9T5FOp`C$88c*n2&$VK^cHzzyyQZ{PxMMXwBlBwy`Z}rKlSVo6
zkWIZJ@Y8ZJd>v>dHErr5qBeP+y4<6Ilg0^c4-!N&{%BYezKxP0Rf$ez;)80l{eAkM
z^;b?MV=uk0w^zv}i}-x?^)=M9?vm}#um7|^#!lXl?>}`<gy%aAJ-0*n>T7gr`)lK$
z+kPVY*mmx>RpHqxOm@U)9$^Dv*Dsv{G;<VJgjrq%t`Kdd=CGqc^0;ZA+fGs1m$q*w
z;>Q2-M0ATaS4qsSDe087u6|5juTIWdY3o1ln4POX{&(k!AoThUX(GOBp7ghlS<;`9
z-&f|yZ*FylzN|ZTc7FNK1ha|^BK%{5Kg!32C!_t^7tv~zqXAm-S_xL%Yfj5)S3Y`T
z+<fJ;{*sEYmQb3Bc2N=Q7!>gHufNXC*SY?BkQ#~Y#5~pJX>R4Y9f!Ov;he9Rk#?Md
zjv7~2{7bW5CwQ&Duv^#FG5LHQ{{CC3A-z`o`+b`O&Gw0q!|pE@d;2!yzt?13EcS0Z
zit38B@-xeW)(d-m4Ibs}Ds<~rdM;u~$!a>Dc7E38sJ+&;Fodxg8`q|F&hdpL_?#a}
z0-m%uJ{B0dPa&#!`cw(51Ge8}Hs?7$oS&-?-#48228nOpsKkFu;`znJs_0zxBIteZ
zdRmEk55v}A_cgPXszLbB|3*bRO&P4Zl|Q|<kM3ez)5E8q>EY+9S=T?>NkJ+Rr1AKG
z9`}T0EatSd7Qzme*S%Z9cBLX&A&(F2<5SBBKDUo=?Bmm?p3La{+<SfV#{Y_WJF_ns
z{|8->`|YXy#wr2S2wED)zv>jox2X0NZmSmGF|+lc8T|_70N7cU!~UQ&D)}^88fHi7
z0+{vB7Y>h@UJn6J3wu(8@yiv#RDlNFQIoXI{fL=)tlY;T5|Yv;;Q3fH0DX^b?;qHj
ztURp*wm$l;m5$W)ZDC43*V=8z4dp*;nzkR(Z?w{@^<8@Uzc75K?*Ffbt6BU-k?fAr
z`It!Yiy{5l&Ev9Qb&jWE%I@iMRPAuT+5NpeIBuC=1cTt`!(c$qDV`r328`UKMLa2z
zPuh>n;AQMP3>Z9(9sB>mZ?UrHAN(OA{T0VZgI{9T0)6oBSlKXSP3##0H0;xIaMWnu
zmi6GJeWq)5@X)?WneUp|yJrSPv5adDQ8_O>Q@EKQ;nr0`RfcRD*NYtcRG76Tdr*ai
zT^ppQuo%~bV29tM6IX@@R}9?&l7iQCz_;PU#L*b#q9zuj2?PTFXvT%BWN5(MLsRgE
zrll-YU1W{&XaJI-M`$Mk^x0g@@H=Sk_YauNEt6>xR*n!=At<P?&B-u68^O$&fiY7=
z^t`<nom5%+=AhZ$Ugo`?CSp@Zig4KB7gTw@2>u%VwR=qe#y4-c$k5dIS1H&5l;_{Q
zhCw1>|8Nkgd^c}x9Tu#nTz&XdBq^)`Pfn^>`JG(RnR6VXKTHdRIXle@_;HwC&a#bv
z882u53ZQ-nw@-)?G0l?T@cE-(e|-G<r{}L;KY9M^PmkzkTY}MX3L|zE60M9raTmGg
zdO|qGQTFrV30PBC=qJq~v3ib48+?>((J-ZX82sms0Y$K&BEIo>5dm&z;}K2ihw>7R
z*w3<NqbWJS+eY3DnW|9p=y;bcjQOK1Wa1pG32T~5l))rZPEBishKSyWf%IHD0w<|-
zb|K(|qiq$;LKL(mM<|yiygtVp;<YV8_f(MXlqL%yGvJ+EU8}klx1G*fYQj@y(~Yv2
zeSqtGxM*cZ^b^|0Tw%%%^QGuozw`(|oxvf!^0Qd)O2gYyZkMaPC@c8HJ1r$jEYF2@
zLT6Ozl~F6y`>1;9cx2MCZ@f?AsO(7eYPG(6X*c00`E{GKJzuGYsPWZAW~Z+vD;F0k
zJcTqrXqMv5_5fa9RiB(AphBO$3V)&tkNt`k94Ul<c4*2TBM`i&6@e`$@uhGEc?p+t
z;6SIMoUUK_v*Wbb7j2xk_pN6dO&izQtlF2Std=|Ep(Me6;HS`AOpIlqsur-CMPf=_
z>MT%*{z)Pc%G#71jzSJg6szEVuK>loMx`IInmjddagE@0I$Yap>1xN9I3s9E^-)i`
zR_!NH)#%Qrjbh0&Zk0hDgJT`JM<Ke-qks_=RoY97;!R_KoQkCi{Nqbl3pJ0%KAFwb
z^=k8_>1cjBgzXC&vGeJ|a}J1x4Oe(;Ya5!raByv0QM0$00`{=?`iN;m55SzB5Q;H+
zN{M?&q=)-(!2xC6nDa!#r^xZEE=CXc_iuwJhn+WGsbZ)r6u|u!3wgX@AOAodzoL%c
zbRG0?|IW9=-;j7iC*F|68%X>^C(^@xsC@sC4Yv1U9?xq%phsFs5+l3!CmdDYf0~I`
zoTp4oxVa&pp!;-tPvjPq=a<erQ+VBWa(%CJ=}ZZ{N;6{lju6+sj_aFYI2?#Si%)l#
z3wFN|ZBrWDT5RLb;z&Kp!$RC_@J|#`#_-i*BMP-UjMndHC#ITv(UAWOI~->$s1JYQ
z>y6#`?KOQ;U9vsu>d<1fNB+-0>(5!S&f7=)p-4troqqf9aQhKq9lNH_+h+E5$4cwo
zWa8npGJH?}wns<fqoeJ|CX1f;Ru2FBE)o8wiAP=o@Tuao?ltWe`{R$pL$~{TeOpd_
zq111drXSo5)6XN@lKJR<+h4kknJ#|qHX=!Py_~uZP8-KZJmF8DiYvOEm-LTw98U-4
z4}7llxLTbr?#vgrv#sQ?U)@hC6;!9&0rQ{JJo3aHd160H>#O<Vq^mTQvP)C(f{)4W
z5ES2W7;eMgOhkm|71FW)iRfFry37_w*>v&h{BrT6$`>!wX7Tcp?yBK&9SuX}8ZJ7n
z!ynRO@gzH09H!Oc!Mvj14~riz3;O?T@!;}o@iLn)o==*^PvyJCqiljASXTJW<VQLX
z1Np%Tk*A1SK~H{twfO$<)nfGc;o;BY(aT5USJ5II{rM68IMsHeY9cyo?}<SC_0^ys
zQ-1pU_|dDu_Wo^pcu5bp`u+IfBmKZBcl+_-BmIDs+xz|a=STX1Q@-gtB<GvesE({%
z4~xdQPTmznw`7xW5-k>Q&2v0YK4>Z{o+U?x<Cne`>W|@TUYG2ZpB-7wjR#B0^#L>n
z;@xqLHA1@5otQ{6qPZrU&<~OK{qX@)ZcBqKR{Ev|r4>2>1~&Ity{jJG8fz*PZO`1c
zk6LZtLfd&lPy2MkA@pAFNcE%LZhlR>$hBE&l<c~k(!<+h5#XK`x+Ax(zo@QKX%hSy
zEZH-E)eCcuZQKh}{*C{(xRzJUQMPux{KUDed76xVV(heOOz2N|*4Mhz1$3wFYw5pM
zc(oovx3-jQ$7INnfrv9l``T`|mf?_*JKsxge>>dIZuOc$!`5MJ7=$-R<J#k3I9`v!
z(O+RSzIhA>M8$E#4v02fzewS6eO&jVmGr-mesj0wL<wm(c73O<FI(IygeUy2aU!Pz
ziPH8m@M!BesWplTM7=O)P;rWMAP}6E!d<@DbMOD1X&MNu-Yf4p8nhcpy{{tpwbqeP
ze3;5<JC1U@igxM!=G}hJA)Ft2IOvtyotSaNh~UkuV!0)>r3%`$gjL?cpMCtfgFkoi
z=WC+HHeVJTusMc9S=BuR1W6NkiRG9O-yz30DDW-*>><uGY^#$8Uc@RCk`Ky6=}-v-
zGOGlllMs<q0!=U&QUPhee!cF1Ja+cx3pH#W^MM@xq#1?`E+sI7t%Z<EMS$3}_~94l
zG{G~5UdIOI4%7MBld8Pnz%WnJ+3X~pz{|b%qGxwn54+6u)756GYL$>oyI3DKuA1=g
z&ggAG_?@D>a+E@-$;&!}_RVP3d@R;UhsyC^V{~&Gc8Dou+6BDaDy!|*qptf25^V7l
z@Omm>zD&6Pn9C~x!949Ls2}hB3EqF^yf#XQLv`fIYu@Q8lS?K362<Fgg83K%r}SlI
zO**KQHPj5E6wq0E0EpO+y+X0>RZ_HOPj}yZkh#&;%D22>HDh*{rJfW10|RDe6B{YN
z_t`5w+~@thH|P&^eM}AV3loHW{q~#pcEfx7gGonvRPN{j&vX?@U!CjF?xF|H;CT~y
z#)M+VrZZ%14X?~q@3Koshn<P|e*_$CKc&;D5}E03)XBuer=2M`M!$%jt=D}Omb-2~
zf9^)K;yRuymJYkAczqS^eE+?U*3#@8*~iB)S%ksjZQ4t(!7Kaz``B#Nw@vs*K~uuk
zSRZ(6m6GcS=E`AM$=hRki@+JE?thIfTce+1`)K(cS}l!L=-a6u2>sKou~n<;&Dojl
z&D`(86(yjwUa@9pIz*4?Hv(6nx_{U7MT4iEY{)sXULI2w8S>GOlQSArglEMiMpME_
zvf%y<JGcatU2}{&K2Le44#G+D4wV>lT|Jy+!o%@SE~VL1?ASdNN-+<3+9m?%JbU^4
z^*49>BB0TUFP=PnjXMdBT3@q*4)=<KiXqmG-Y3p3LBs>b%4f-3<K8EUM5U@BYk9)e
z$7aDI<F9+M7>$kCMZiZb*f7U_2S+cQtK1K>5Z;=l3?kHk)1Ok4Mk+WrxK0rnX%3=<
z@(`S0b%G71AQ$FJbmNxoX|f@TPkM=cc{Iw$!>|~-GqN{uDpz63w9e4q=rJ5BGIY=(
z&!CsOw#)&4@gkumv+a|3{@KyYBLmRxC42j@>(N{}CFNz%z!^Als{1Js!H_~rTCwRE
zf@%qu%3`JNRswGU>a)T|w=$`*lT{zLgm$*fW|c-7)?r`U!%bi6hh;$%A$I>0v-u%a
z=KJ!(k{FEKh*;o_&j3O|y}#Ui=8KzsrB=9?H&Qj#N6gF6f0fW5IwO=22w0TrQCwrg
zTL*Y~Jz4{T08l#uh~_}yaFydJ@BX=l#wGNcXZ_S6Us-CW@n|7p-AH`6&@^q<j@RWx
zR;VSi0@0o+T4|DZ5+=u9SaQEfm}hymsT@`LlzTR+#vtv8COa38rzztSd5?pg`8yb?
zd;Oad8*eq9U(6rsNm*q{9#4k(J+SpldM=Vii3A8VEf(})vEY58KE^3MPZ;7JAk-$D
zT)E*HG{{r<nBb7`sLVm-io}T{NFWnNg%HZ~i_ij>A)$s0VU^oSTBe2-fRMoVcHAg!
zA5NLga(Nqf+NEY&TdQ6vcoRDp^3xW=`!=Kv{wuTboe=O2hS0Ds_MTX#+Aro%J3H=I
zr*4MX%*;P^&}bEt&O9v^&*e00nF}_vnK<a@i&4<?@RJkcv%jQ;>+p*uXFN|D=Y-FR
ztkn*$;xh<t&8S%<bb=(_*3BS?lYKrmgJQ^6+Tb^a0f@gTLG`9Obg`>p_gib+2Xj;D
z3QaLMS^Z{Ws^WXcxQ0xl!E0kQ4As_YEX?fM3u`t)G)Pei@7=+yqbJd|^p~UK?Kw|o
z|02-o(3X$lZ=RW1fKDZyrpD|T{#>Zf1%EEgd7<GTLh{yD&2ygfbKi0H!jRl#o~*`w
zBv>^u&}E{7ELKRIQA0>cGW?uUuO=phV;R%Yn7FFhjybQIRX3>Z9^z%KnX2R{l<>J5
z^QwH8PqXPpUb9#~FE-MRiVpEvk$<FQ!iaznZIsmpVN4rh1*=8ntUAzCmr5gnDz7(C
zJ>=|v*Ro<!ym57&PtJ7%RW{4hlUcTrPO7r5H>l9YNmX9eSw%0!bVEf4uXi?ng6joo
ze;17dKB*qm99(>w6WqM4(z9&3v+?sROA&A{JIyL|;LBw0f7jcnc17CmZ(4s7;t2H|
zaw*u*?&Xx99gSPM5s#L!MK8T{Mk;?Puq4t~sL|3g(0u7&X4y2}aMT<w()S!EFH33I
zUp7ptaGQ$l1|9yN{wTWL#&{+tPS^r36au@37JHU#@I2%R_`Wq5ba(w=Fx3A`26KOP
zFpg($UkeOa3Ck``T;817iXs)|r+Cxog{js-oGBHtM)>J_2j#uSy4Efu80LFHB9H(V
z<pm%-%9Ud$0G(CWcEs1z)gZ6G%c!L+h)3g22Sst;Q^GFW#UGqDS#^DBzER4KxL)j!
zi0+f2eh8yMPoJM<T$IU3d+>UDNmw=-GJdu}kt+WivDOgQQF#KvFF3_u8^PEKK2>^1
zCD6PoDZKCz?Qrk3U@V2!Ca(n)OH5!^))Z4dM&M1(i4Nb6i7u*sB?qcy?Kqp2ue&F+
zGHq-Yx?G^Asb3kf19L*(QBH`OawUvXJ4$ozWO-9E=Ic0gwv!?uHGn=cX17@MX_A^9
zwF-CzanDPEmt6UB0gbPmbs#wvoDq+cL{LIJ*NMgp@itF1a)`HC;$euCbl?pop_Q|q
z6K%#i>CJk3*{z%N-rel>&6=MlH}8T!Zi8@AuC({{&D?XRm-MRMt(#?UZ~tatvNkC+
zJmpPcd(R7FW`A;dLU)rJ<!s`HGxOq;rjG7r?d7`HA8zm6WHr$WYI3x{ZW2D@B)F)`
zylh!bU#DP7D`Mj-YBgc|HC3Dkv0bj%b{Wc-F#Kc{R9M)82Irku>P^T%1#voiJ>&bT
zmpjf;%k{P(juXMlW}>{KVuuC2z&cRtGgh>Xs6WsSjf>vH@c;auFx$P`XVZa(-?Oi1
zQQ2r<NlgZS(m5YcW`6!tta71@Pmez-z5GAbGpoKM3ng?b(JO>YL^+UfT+%VgV(S3q
zq)c|h(Q)s1dn^hgyJt?sk;}3j4<l??#-|uGS<7ovQi($%poX*@v|qu_39C`1S8Z?1
z%$%OB<D>+Chvo;9JdQ?t;~paWKtvS{`*6d^nn3;WupDeVyYJBJTjh{RVv~z&V`l=F
zB_a5@;TfZ@CvcjSS=4?2gfena{q4fOVA7b2%Mr8r#eC~kE8cMnG4arK@<DS?)v0q{
zw%v2##O3}-{ngvaDf-bnF3@t8qbu>p0ayM*``b=m##v-_Arsocdee9zgoOLz#67*Y
zcUM?lVRn<2UT=*}$547}tC2`4r5OBZ2&4k4Yd>v59AMLm?;mB=4U)H_OOOskE)HyH
z$R>^}tGGTZey++h1j`+MCvC)ZF=X4h6k{3Ypu2!Esce5(6Y$*lLGCEQ<fwdIwyrR2
z&3vFIz|plVJ%cb~CEnqQOhFaZx`jWPjqbJG22GCcp%<#s&(`;1<2_i(saG-VDCe);
zUTne`U!F8o3Vm`lW?l+4Iab@SbOWeMRS=A{8ZsYZ$fNt#vvvo8F5S_vn)dLIW`Aj~
zQpyz8nL@QY+@V?YWW(?CJ7<12TZd1yHirTUoOKw`J<?tqT1vVC5N^(y{I_lN$0@)l
zyM}Gbmv-N4MxBb!l(`diZ;>;#7@PA@FY2S0uU?+#gdI;kAmD$JfG2TdnGPH8Lh<Dk
z(Xf+WnZ2{~IvujVJarnT;5()aHTfZ4tvG2<E};*|8^d0N9g`BcyWiJG+bas5=Sr&M
zE7H#M>KeMR%N9Ahu1IHz7hhOHm?|zzT>6k_m59D7p;ETJIPOJ5=yM%UZ$_h?jWKJG
z^;qw#r`5jb0UB^OmGb0!r|8cpJKFAzhlqj}?~HFoe@KOX;$c_fQCH$4PJFfc;prFG
z`%*gUXo$7(kyzZMvhKWgvx-wW%#%+SHDoX@Rvk|VA~vhzL;l7X^Ku{|993k(p7>)0
zzC2`?+P!R$@A$|$fr&6pu1ckt5pg_1LSbm}QbJ$|5gzPO*FJrKUrl&CX6boE82P!p
z{VH!4^7fm&)$(>jedAZcv4Q)uI6I=`CAa+k3tIlMq`II66VYJ#<rcqO$;)kinaax@
zemR$yyZmw?FJJRZEicfFA<S{06wolq%fV_u!yKU<Ppk3*F=?S2)|C7ts{OA@h->p5
zWQbyZY+&5Sb54+{PAYG<<9z23NfOnE2se<_MBL?3%u9{1W?394x+Y+fa+Rmu%B+r`
z&aKHYtMoz*IqGWewo5ceUs1N!MlGiQb^^n(4|SwV!eWc)ro)o|$*a!-%R-G(6Qisj
zU;>5h-wYe=j@N|Agn5U8=|GQk4IH>@NAWXQTC=@vz7?(A+-&!*sl|;%`l{@*zw&^Y
zAAy^YbZA?}$Rn&7X7(p)1_m(P`bqLcey_IuUdCo_%s3d;{^Vw&)22)%`;KtsrH@$|
z2x?tXwuqQg$ENFnGzs5R_bg*CAgV10=UJ7P(|AMtz(zi+&#+}J$Ild$0`Z1a5bgW}
zODS5J?VP2e*>szBV0zJEE>$ttzNBM9^ofH4W3U=YbLQqdMOPSi*0`3vc~6s??^-}j
zIz;MCt-yh|_H?+FO6+1$#S=Ovz)3l#td0=Uo7{vy>a8t~4jX_o7N{Kj9Q9IU$gKhm
zlU|umdgaJNR6z?Xr<-80m=M|YrrbF#lC-qm%4rI;@HELwzBnJ23GIx%IG}ljzfFGK
zrgx371`Z$ewS($)&`XPj$0T{l8615!7m>Df=wiXuE*5hC{46hz<VWqr%#pk~wy%#`
z96yoHY=R7<EwG6zK$wkn5ZkZ;irrW{e8)p!I@X5w$evqMj{eQR^z%ruBx}o>JU8sg
z+GSK;7-nVdvMp<$b=i8wTOGg|Ozv?kSvO>U0J(ZpB)E!cXtcE?I<>JS-r915XF5#3
zTzGz)#<O|D@s&kvb(+rr87<Gm0EkVA=gCX6G&&`8a<;Y{Nci`cEI^%JWRG}Om3)?-
zW@+8nv?F2rB2hh}%wr;I0@pE)nV5ex8PEJ{YiF9Do&uK1dT&}i=i=V>-JxxHK<|4)
z+bMeQ4^7AEZEt9XMsNE=Gdz0xdT0kWuyr~b5UN+;J{!)uktbMYJ2*acaNKtYS`#<H
z$}b0hx3aQC!pm#qlLI5FwB?nr0Gu~gCaZ9D2?I4kfW4|A$fMk2=SjJv&HY6cL%?iB
z$JUM*{9@|Fo3Me=`4E2{kB@Y9ak?j>5iuXs=vST0=mtY!_X2S$ykNLb9D-4#=`9Y!
zQ*S$*F(XV^Rhm=N<{*J<>hP0**16{v%pr~t56OY|Mfo5$5c|HvR2w+Y_dKFhPjln)
z;~YhX|L^*L&+Wh0XIhh1kKMekI)c7wjsI(R1hl8lB$_j*U^Af2uuUvh?n~YpTo?%7
zl@OR9i~^|44OIn#2*UlqKu?mw$B@RQBa|*dMEDtUw~*9>Bv<diC(FKcZOZ?VwLzzy
z)gcJ)yvCp1VE3T(P~1yCv#RcJ|L_q?HLjQGh4?~Kr&rGvk{su0UszVny<hnIw$Mae
z&9345Dpv0%Z3y9&Gsm?%UwxH>7hfe1HxWhTa;MsyBxrr}!bG1Ygyjl)G02mDD{Qkw
zoMy3BI^Ya~Yj`=_&srGjS8>bDqL!X=@b_&rk$E{33gYIVp}091b8)}lx|`i`GXS{T
z?=VRD=I(7j3rlJJJa_xIzcHDn*=c$?YX-ue-!3)Zuo&ipIh`bDE&p8_+j<?=?_Q%G
z)XHrCTPP!SHFXn!y|9B=lz`(NNoR0BeImERg34}}bhqOt+6~L?RvBQ!x)hx($<@l!
zbMnx4DC;^x+#lLpOkGy)wlK&FqEpqq2dA+chlht7j~;EnzH~zye{PJvKYTU*^H10G
z2`B4wUPqPZQ*n0>@$b;<1MO)A&Mg5hv&z=t>iIqg1^W}oz|b=%9=#g7#;&73$As`)
zlYzQFcq37ZY!s!YeD?CW&<h0Eq<>8*N<{8Q+?z%p%!7ZuyZxK(BYKlgN2|DHQ~Vjk
z7!Cc>qB`UH%&69l$#GRzh1aZzBB3=I7Vh5MP~O#E=e=O#=57>d{;_DVC8|U~mtznd
z_z?3)5v~z=UL}TS>de4UH%DnS0QJIrn?Di70CiI52`LOlL9golD-6c}f<F2^H#D4L
z&Z<oz;o-#ed0=9uf&JDsH36N$y!WqB5TRlRy~}z{ujrM|#1*`k;paQkobF$-H;3hp
zf+&J!QsSVM6sbM_r;c*s&69^g&da({U2rdzvg*2#EKz^PluhQ|+#=Pm3p{*NhM$^}
zk5UZ2-XL3=BkpvBvhJK;UZl{nqg|p<DX)``t1MR{QB`eG6q*sc4_9QB{|^m@2f@Rk
zVf{}JCS4g!Q?3qWQW*-<2vZCvVCd>{h))pXNTo@hYey=c#)lRTE?ZkDagO&Zy@Lrz
ztZu%}oPZF#3G2$!fSaWNJ8jO`GtqjBecqTmYfxikuS)0H2I{y>&obqO=(0*NH9H%>
zt`-hmM@PC`-PUPbGm&ol?m7w!z_NknRa+-X^089btV#&%#wQi@9%fa1$qy%0d{`y7
z?)2~8+W+R}Wo0XydV4j@zG`|+^p(RVKCRlm=$w#zs}TaD?Zax|NBeUSSVx!Ox@vV$
zy;ik0nUfr`b>;9uJbz;Z%Sw)d)xzI}skP?T=F3<iqlM>U{bMyat>}QbIA@a-UT9&&
zH|xYK+Zp*;V@>YMSGQVKDBShB3R)!uN4&NGzX+-)tt)dqShqSg=@@ZeUYRBrb$}@Z
z?(^$pBv(BFU;fgnqg7N|yTG5i<kogV+q&t6?$Y(!GWF;tTo_$eQ5Ob(O|^8kqAs%F
zx+1g6cM<P!m7DA1TRSQf{}*j?!nd)_xA*?L8@+dHrJ66;?9_a_)PHNk_r7k`_CK`g
zSL*#wH-4`@+-o*}FS)F?|H=MuP5*T#pqHFT-8ck(xoeL>FPW)wGnD&ppM?i2SD@3}
zHnR^T*{G(uKE<5EPDoOppaE&`lzCVAe9aCL$W@!EJnc+{IgL#8Q9~lfn(C$pEUA3s
z72rpiRF!HDw&xGvtg|hS*9z4G)uMLZY8qyXGt)W?RtA}I8?K}(gUs<Vt;L&}<7L{D
zdwPAOua1Q8Lwmifd{&{J9*ybw|2uNZp10Y_FWj|+N#RGO)8~W-b+V|h#?P4(Ak^mi
zl(Q|FIy|vZE9&($7F=uKB3?0{uz_>hVzC@jN%G=M$D7L28f6a-k`-2`Z22ZU34Yhw
z?nI2HS_GpN-xUB~l?JAxV!Tu5#Ux`N4p5xX2`i!m`zgtt{T#bhT^3C~Q&)oZ0x+=O
zlD*x&2M?r21JkzD&}!QO5>8c4FN{-KM-if0VL*yWxXdA@Oxb#59PjSe`P_tbD|s5V
zq=yx?ITqb1%~1{e4|uC=l}Y6b$eY%ei7r!B<yGsOS(`@9+D{7d|70KNiCRu^PwQ(L
z6}r>-lg^cYE|+ARw6iU>a^i?*Y3%srAynJTX;niiUuMU9;~qWm@(lL|+j}e2U^6Vk
zOm8rOI)jxI@cObH0m{%LvN|0GiV5STBS^2et`M3T(~|67L#wFtg?%3S+TB*NH&7Xu
z@ZLE^HmMe5A_W@)*p~h56_DYz3#eTiI1<N~{}+!C+xH)i5k)#i`Q87uqr~z3M`L8~
z$*UuL=#S87!Cybdygf!9V(xT4H~r%C1!JHungF+sYHO=<Yg#OFXSB{&ceE}7x?P6O
zcg@|uS@bwn&aKDWlN^rAD3_~bLI+_w;K<p;4f?a{3Qgo?8`v~{cN{sbZQ}tg*%!27
zvaN69_iM(1t^Y+MF&Wpl^Qgrt-0}M787uwVmDNm_m-X-NtfoJ{gNk-$^b;;GR5$=G
zu~@u!6o3Bo&VU4V9YGg_{^a<Rc3j0c25I{kl;T9>HB?R&>_p^0Kb4&gM{(88i}4_|
zQfD1`XB{hfrH+Hv0<FaV$=62^@|IzxV0nE(v(zgEi_f)aR&%9jb#1VsCzZA+>&GLw
zNs%Q%*d3Q6|I|GJ-&cN|P)$8+D%DWZtMT(3-%0DgeQ-4_KG(1!vUOuF&CSl99CZf=
z^*?JoO54wPqa&lL_m8gpfA~aK$Dj_no6UG4veuA)`N!2=*`9S*`F+*)!jQM)DZW+Y
zHF9wO24Qob@XWJ@qn}s8yoW=ne^>1=vGUy!B(F9H*HJc&KmxqIiBpq4okQy@YV|@%
zS6u0NtdZ1r4Ciu6(za_jk8SXSyS4N*FbiOk<+CvKc}&snEyahIq+2(`3``xLgT=9~
zev;Tt0i8^oXo++6)0)(E$xb@piB0!D;MmKj4+xn>fA+?4@SzO&J7&xM`ay@^>iR}M
zx7L58-`lOPF#Dv=JgU^A_w2vW+t1D$z5ZP(TTy!EqEbd>R=HLTNUf$);kjnwz%jf}
z3r%3tMjEmYQTm=#1AbJ(ug8?aahlK{8rXYf!}`H{_FvpLn%!r*`_P*FAb-@~57g~H
zwIwX&T|bBeJBY4ZmbI64e3k37@-691i1VGNX4tSlt84R6=PGCbBIBx87``8Zvop1W
z)&-%nkO;0+ZNcxq|4cy-zUs1cIZ=~nG|&|XHnk%ezQl3E*~**`t6vcM%+wHLbdu)g
ziqUroi)OR#NrIPePj&~j@<wfxGy90fop5L9yYniYdy&N#<~wpY39A2BS^Un)a%NI~
z#%5D<qUS~pS&DY<!e&%jzjgbOib=++CiThaSIbr?TaAfW<DK&As(h56<>DGG(_!p>
z0iX(gDIMn$GQHN-#4l=QP0H6YI4XKBM+lEz>u4GNKnebGZwUsg_8tLL!BaeKwBS*x
zmBpn^qc<)M%Imk%+9MmZ?$IM}VNgq}buFMAHp<)KO0X>WXn0+^(X-ZO{V^-@tY}Qk
zIH<K#7sl~ZHTsSYH0<@1BZ~=WpuR)9SewshIY$x`I|eV1Sd&{#bjQ{^yoR*g?*7JN
zph#(>(dF1iCc1(%V}%~6HNx*LtkNU3PU`kIi>2Q=i&-<1dRwm+)pKN)4sQ=M<mER>
z?Dj)oT~*p$AHrN<6u_0fT$D=wA>DFp3ZzFmVNdnv!fvFC3$u~9J1|3_v~m2KR-Th(
zI@A^maA8jE*JvLu{-u4bV9M<~#tYKEPT0F6jn=mPy7t>=;|G{D+)(Y8d0gdjF1>iE
zjUdnq5NOnsm+K->{-6J&Lryv}2zbhNE(+)xt%3LJihHGBYGlMyv$daJDs-gdI@wdY
zXI}kY-6(x$ZRsy4PUY{eE1%u^g7Q?s*J~@d{UsGp4d1M-;m#M;KvjIZwu-xJs*rQg
zGL+G$!Aah`EBo*z4k!b2ev{Yd=2hNtXv;j2g*_-Wd+c8FExq(8J%}hf?N~y=EI3PZ
z4G{kjfQY#dgZ@s?W3PK~zk*8F)cA;NOmnBkNxtgehaHP4zhaJ`nRPiImIC>kY`XDl
zk;92vI@^FelPjq7sdp`p;G%;L+((7j!{3G_1wOjTLJ9Eso#)A0tF-9^Nz5Ip=8u9W
z#bxlEI6YtIq{}KLy4<`=x8`g)&jH_)hh<Dp+7u-DQ(kdlBv1GmCO*mc{Kz`&$@2=&
zB1lULd8x{aq%@B|l~+l{Z%vux>H&!<KNC@xOfx(wg#JO3T=5sB;GR4!<xN!9lV8ni
zLpWTK{HETa<DT4bUY=J{{tqur)$)r<6uaCbZV*~sNiC0}(l&8kK(i-vPPj<lC*K$R
zlo!b_{DfJ~i?b)Q^sG)^a5lE5=b@>)HaVAcWdN8wE@d{@!$9&@&5iPCc&1))_b2bv
zi;<-!naoj9&yl&Q;!Y3VFF#zIlrtTuL*B4jM2^h!k$n$?qMT-bLx~`t=~{OtmvvLp
z{WxCrMiz+o#d}J{R_T34z2JVZjHItWynOys@<DZ6_4)@M@nw;}PcHb2;&vww_)UWS
zl?BiBdrnd$bMnf*flf|d>UW&3<U9SwIKV@G174GSY-F8(%+fi3JLd$A{U=Y=Rx`MN
z@++q(BsQ^+b@GEOKJdO|#?`>m?ODN?U~*zAPSkImyl<S^6Z=>vZ%l5gfZP3}a#Boh
zesTM!v;Njfq+MYO+^D2uv}v+j^)XRhO`e!mk^0o_9TI-kgHpIu!xcbtAW^?{QtEwA
zm`-Az>ZHhJ%L5E1=BZBdT=E+jnao?>4l2%Jv{#akrFu`Em*)5-4@!N?7?vd${C=L+
z4`%rpZF)FURu#NcXZz91SIJxT%=+BP2le)=Y3#_RBro*ytB2}YL+@mg>sQ{4b*?A5
zhE6I!Y^0M(R@Y_KR!N02DSO$}9vOo;%OkUuYSC)N)3sG_7F|aW&zeYYa;||NuB`w$
zZ26B;9z*ifYLT$svt;Oabor+qCQ<V)(Sl`UmPh+gIRg1@-`l<a2hl$3X1kV3TE^>u
zPXt+l_^gyW_b^Xhb=|qsyv?3sS9W<a1<{l>93oTGNY$tqvk!Skt2TE6*UUl{(J!;+
zq4bo&$(fE1phc6WVWlUhP<xiWIR5AM_SpelH7dsm7b)E$x?heut}~wCq%3DyTDZ35
z!%z&8A(wUh^)`ukVuQh(bboU%zBcE9b{)p^l@jHcTM5AcP7NiLi441NhTX(r(MzMR
zzNWDVsp|L_|C;@aPr#v&tW_(k7Uelg!@2K~L1w_15jl#N*Jb30)^6?xW@WX`ky$Yv
z1>4Pj@%ij4O}zVj86q;N#G!+xeHR}BO1eS8lV6eM*asvxkf0bD$@h5CPO_8BoL`Ok
zhDvaQgeO06mb7l3TvESi2WLnC1pN^Y;M*o|D*ed(kmN`6?s(fzeln?6LiXCES#jHA
zC(R1Pe&<vLIP=E7@Kh$LlOmm{ofN6!uw6=$FFBd-?+^TVnpbR*t}er?Rw7^NFH9l6
zUmtm|v{K36UW#<`XD>~<`KOmAJ^F36tbDl9Zbp*-;A8|2NScDjs6#4L1p?GU@htv?
z86Av1u^zx6==b}3+x)*EW@UoG-flk@b%4QM%wdFs2SrhCJSyp`&k1VrYEa^%AZEJ|
zJS}6V!v6N&{`M_X;dV!jf`xB9Jg@S)v2}j;P}fOM%kjDZ_PZ)}Vc486>Sj?)7u7V{
zHG%J4gAC=L{i{743Tz|mv5R5wiNKl$vtk%PEtwq;4+HAYKq3SMP<p*3j}<*4SF~J0
zla)yYb8Yf#_nj@DC1|z1|4$2D31hl`MM(N=Ws=EM_`DGC`__6gwKv*X?#m$AVXG&a
z^L@j<&BN7HEurRpZgPm%7L{8Lr7f+z==jQ``0l4zZCLfuN!Qq=D#R~ZqgJKzqfxxo
zSxwu5AaNo;wgrbDR<8RuB?skj0vNcx?Iq>Ss^!B*IsH<f*#DRD{-yJa!=tRr8}5;R
z3w_9~G}euX_hNmvZ8zVQN7~=(4;@Wt?J$>xqAu3*KKHe|toBpeU5{OOxG8p4T5D-~
z+bh4H^tZNB{yU++2)V&2{C9E>DPi7AnE8B@y8dGxP9nPD;dPf9ApD~C_fP&6te}YY
z$ikdexhaGG#;$G~d=ekHwb?)oz7+V<s4udGim&!>$7v5Aid}@mn)H$iZ*TH2MLfst
zL^@Tm(KCIR>>>=y<f~+FKdyzWO5<AZzDZoGEmyWS+8cLSZhzD7-^_ORZr|;H`?aJ0
z>gJJ;lna?14bJ>}!(^D-TfZ@@O9&K9p^Gg86D_zA;}Vezu+FJgcXigjSBktKF1$U^
zdxLlt#==Ayd}x6}%a}wb@7_9a>`_eW-o7ZfcD3$EJbrA!8{4`Vj%YZy`!)4hS<_pK
z4gFP*$F;#w-}Z0c#Ai0=_v|RlI^FJb4mbqx3?@_ts<<yX;8Z|WVcDxXn{!O%G&E7K
zG$#MeIo*(KpzxUP$|?+gE#4I66(X+Z%?7xnju!f>Hb=9il<z|{)ta4McRs(`+rPPg
z=iB}4ZtvFK9h!u@H?^Ir%7OC$zrT(`th<fZ$cWRLL)2iWewQayLU_*)<r$BURWd!k
zmPfjN<KN{G0)$8M$T}192zPRS%Oj+b&*brg>uKvxXKLQ8c*%X@!A?0EamNgfvL5wu
z9JU7j^a}>wUJ5|VQ8wm^cshQ~lc#y;JG6@8-z3#0+|b!X<`l($NP>9MisE17Rj88q
zdzD*}K=HrjU0irM)ANHfJ#)3rs3MGZzn0hpS?b6eV|aeA>%r~YG5xs{U*OOAV1GZJ
z4)*WHS8VVR9}f2RoH)!y>S`2eiq)ex;0Amz-rOwcdUGw=%e3RR&LZ{@4H`X5!wOpq
z8;EI8{mw3dC-(gu@3noO;(c!45Ai;;?^k#~vF{)7ewol^R_xUE))oup@-ePAO5k^u
zKsVhU-Y)`vDRwUS?Se2}N|>mx=K;SIJLmj%9>fz$sMXhLz%K=YG1A*Kh-(vzSdr5^
zS45a!CYOuFOclC9q1iqDLT^_=JVSg>&NEke4v}Y0c@FvQFo@@raH76`z*kW<IvGc!
z{V~z~m!n&7S$e-uPq)W(%N40Bcer$o>eFtM=qw!sI+M$ZfKOvuGIoe;E$&kf>yc`}
z;Kre$5{{LEoTHF`sHe0diFomDQd*;=AuI`XyO#2)aguV4E#);v_XpN<J^N%ch|j9m
z(#-IIAR_AG#E6a%eOoEpu%(X(259@$`B?#rs3wI+ZXH9i)=^R$-jQL>gWjoOqDz<n
z9UU>bgHcVfs*T7V4-u8gA@jqYs1b_duJ!Lw3MiPQ9n?ncta?cMB-#!M2_^iZ=cpOa
z)9YM$e9^2sh^n#?nxtKH3oczc+2*5=EHfv!q7_aObuqovW^Ve3oxm>~LBpC+M;E{R
zDj~Eo<G+kt&KNnIF>+WY^$_-NPxANKG`!`;+TI!VdlGAV5CpV$PT&A<8$w0eLv^cT
zwAm@?B+@xjn}f&F{yuSPa3`Xjuj&Oq2feTu=Dng9{K2u7df|*-XFUQ8@;V=;y?HNq
zq+SUu6KYrwgI79XIDy~Mr|LDM*UXl#>9y<yFC~uCAo#ieC=g!;spmdZPxLG`BDt!J
z>5X<)a+dScbebITlM$c2kPmh8lX`F^vB`HTQLSe3&}0&d;IVpt%5=bM_4Ww({O{^T
zL^Y3eLBa5UR<FNkvC!Wt;SWappYfX(YrWz(Me`-^`Ay`hfATY=pHKM7qj7$ffvUIP
zR0iqy4So~q<qv*l8sry#6tU9}Qb79qJ--M|@^2}tyow}gidR>vI9DmHR~F^Ti<OL;
z7cCi;x@ukcC=8s}RaYI36I;(nRI@cU!lG>QNyeT!Ch0tH(peqR4MoHu+E&uqpTppH
zB~^!9Q3UPpRf<{%rQrJB>hMvKS4u7G_n=#)$i^n)NI8y6W(i65NNW5{S=L8VA<R@1
zwj|i!+5dLuHXXt659S1&67b0B7vkg}3OuCmldOz6eqhqz0rIdZejz)Zab{WHb3ErY
zGkH(IRgwidMK#(b?Q=L=QQl1mW8wlLz)jBR#qcj5pe`$8JIPIbyvEN9X-d~LDNQ$o
zv-v!CY6JW8T`q23@*?|D`t`9ehTtmYyfCd$4+^ISsq`Y}d7z7DMw|9mB6o<mCbZB)
z7+(Mz#jdN;)|Xf3RaT#uvuTp!lkZqFd4?evI3%m^^wr^ycV0g^e3g89^x)OwSI-U~
zzy9(0!v{YOR{YZhv7h7h%f}C&|MckPYR&=h!B*zO?tJ3i33=Vmv|*{_AW-dcHKsM&
z1g9T5NmAR<<H!FVu=?os=xBU&6vT(me|q)QG!QJ~av4U;`0h7*-+CO>00&gmumj}`
zN+BWyyq;enD9Jplnh&B(P}4oAK3gYb=V|R^q>FJS$6S4TRzEH-FR}{33=guM?ESn%
zxL}8rYN`*6IC#jAjR_`fPMkgkPJ;AgLIe(n5xX-^f+=+V?f|#y90lYLpiH5JX)1*<
zN=8mdmjox<qd&b~)Qp1HK~I`uZI_4VY4xz2W?>PH6ZYj1^!N5}-M(}8>u<h=V#YPC
zHV9cX54#)+HH6Z_S+H3D1d%`B()xJEaOu3Ao#%hQnOzj+{B2b?!A?D&<qZl#Q{!<u
zIrm$ERitRqcbB)b^(G@)a0L-9ovtk>tjKC8yUo2NZLFbJ#@S#X0rmV!sA9KcHcXJ`
zs5-LTkXN*Q6i38sf^Ligp)pTzcg$wlbmJ;-&Y4<5+)b-2W3W6a4z2`<{yNz^sPDBM
z2p`n6=%&AO1ijOEx#J$V9!F6jb~SlChs1O;nvav5{_svDiX%-L#OBsD&1h52?im}p
z8MRXC3ewSREOp=s)$nh$)CTmE<ubl?yTAXrW81N>GI%arcAd1$5kmHbj^gON!@b>%
ze)o2Z0e*|c0<Kpjz(oU>!PJ?({x@F_+SlSrhltb&Z}q?ZhMmfXbVhE0f~PbZ3TXEt
z{I(AydqPilzr6)UZ&HOs48$_w(Lov3@h3V-KbNx)r-VNZ(m21E&oZn6-%x`*uFvy}
z!DI<hfF5JLj8XF!_7J`421V+`b&#@ZC+79gJPk^k7!2dfnw6nfdWyO`Ai%D)gi583
zX8Z}!HkbUf%7!w1;>E|*P}laq{pQXWbnU=_y?_NqN8&RuKVQwEu}og-TX(+!SN+Rw
z2HFUl6FDBAbS>gqBo6d@0CtYb<SNC|a0632!r&z%TL#4iD=`TggNy@zL~MWZv#y9U
zbaj=IO+4SS3dTfbc8Di;oIH*<d1oHjJ%4<ee7XT<OFrT4{g428HrVXPH&DKu$#eFe
z$P&mw@p4*0-fEs6%i*vIH9zJ>kyTH#{Or83???HxIp^21xF|oK()`wwD$5FSg4gvW
z10a?UM60+p^1H2Zo}OjDiyD!6|HFH)bT_HyayCQYcjxt0Id|TEcb@-{=WKS$4_DdA
zo4k1j#~9i4(RWVTOPcExQPoaMNzDuBsciO_@u7RjaE063!k%%-zltP4&Z|FaWaV-c
z+z5K$S1EH#`5r?#NZ2=tq%cowmH%Tta*ZdUeOI@wjV{n%b|jgbm_S9@u>n;dvaYr{
zy5vZbH=d}XV`Ru>EYSDn_ymv#QVlw<9HCauOQi&~*+?wE&GOp293V#D-{9A66lJlk
zx+rX*X)>odM3oab-joaUexGVqQ=K8Iu3nr|gz~(X+1S9R(WTgpD|GQR;v2ej>oTQ3
zQt6Lw>5r|_A0rhpPM0{Bu((s277KJ}LeA;7H2piLyVI}dTzXNPmY=t=qHDG!Reh)#
zX$S*yfIZ{9uj~&XXtXpBXmk(m&FttNM9-<;F8G4p#OT4;?L6LX|M^Wru*>DrURx#M
zD7S9!f648~>d?*=z@d`mF63Jxcac%LJ@R1(W&=sgazJ<m-D}Rpf+7d$4zPmOAz!)F
zvem2BMS@quU}tvIbi|%mhI=tEiN(TgstYNDn0`13OMPgf!Gvv^L>%fCPJP^!6Bmng
z=^#7wf?4}Ql5X{O?!*nX|DeW!0Os63&;#eAZ^Ag0G;l8$E%F!?QDI<UH~gVQiE88~
znt&eWm_nbR8&2t7@=pd262Qg2zWue2@Hk=L4%q31^}<*s9avsitRjOO?i^WLJtw%&
zh8C|MH|D7@Pp9TdMDLCd=g<j&(5Uci%HY!lT*g0nQX(kHX)h^syyIf2!HLT?H{p=y
z$?jjHjpOFHIIfN_`~Ci8+}kDmh*IN~<P#+SwUT_9?2h6wc-x1R;dqLtDLri?`X1u$
zje86Jxp}-JuZSHu${vqLy={riM@a}CNRT@Ih|A(YsK9U*#i#d^T95DJ0np@=NL-T;
zn#FM%7*vGYd(jYKDh$W{lA|0y59uhKyP7xj!o*w=&Lj2$PS6CQ<fa)R6Zsq<PqjY*
zl18-sgN9~0ZsoyghufbfoJ0|#(<y%@xveyXDT-T0E(!+a-1mtd7_HbI0#w;Lcpp;d
znVS$w=De3oRA(7issme}SKXSLsQA+O4|8hKLy>45UOVojbhovxA=A#vEO;}wrdCte
zN;l%u?PPC>33GHGo`*JWlG@|(Jf6iTv^h8TXkUF=GOmWG-swFZIQk$ZlDkf5ovTqg
zjz$w3P@3rod(ir^{RZ;EnAgu?UQY+Z;S|%ZI^1cp8czhBt}w287($FvL@cj`15ALJ
z*$~fzCYeQpsZ->=TV%1wZ7Il%xJ;3pL<6^(b6qB1*G!IP@N{rFRHVb!mU`Hkm1o{d
z7(5d;@<v@vp!aWAfbbl`LxAJ_D}dbRUmIzI#|b^|KzICf=dzkX6^eRsx^o2|;RQcV
z6A8mckLU11@=><VDfkD=XsB)3nz)Px1>Er4Yp9Br@!p;ODu+SS&Uf$L*>fr8Lwg+x
zb34hMlu3Cp&u3ZUUj@cLRIb7vN6w{6m*X2cEU!v^&CnTH{V0BWlFI|-<ifi083o}n
z{o8>9pKx@1yt^}&@T9}R@$rDZT`^cZJ`O|vp{$G1U-%89any^BkE3X~xb|~6>fIbt
ztqZE{W)uZu>o_P5&RmTTrB$e}hC&=Z<ph331CQX>EMa1Fn$7ZyoK7&^PrHE%aZI;h
zWrBqs$ReC@Jasy6#fXm2A>BainUIn6UZN1XFpUqv<~i)0=o{!VqR*F9Mj(Np_Zgi>
zI<*McP8ULfD5K}}b9)>=r=L4x!dnZ(6uqFIug3=yj=0I2X%cbwg-&><h@4Z6Z4gdA
zC7k0lew#=P_y;tsoBR-;CBd+j^nrV@Sj^%hVDHZlR3o2Qq4^^n&0a5_SA>(lADpsz
zhncRyhq#<$u8Af;i|J0v(q`~BrmfiIl=Lo6Ys!_^Zw8y27nIz9ejgkS=iyN_xEKaI
zH-kYi`YY(w;fJUfjC;diX}N#tJ&O#f=@l;!P+y!Nh@qYgC*r89nLz}7In923@eGPI
zMn*k4-W~qec=xQ!zkTpk(39&BtZupz`;oyH!@awa?=N%dYFtcOyN!>9L|D#DC_FLz
zFmx8|KRWQjQ3d^v0)`>Jo2=o0x<|=7YASm{bR&pQ5K+kB>Sj=l$AC^)eonCV(~?l5
zu);$GONplWFiZz#svZ*1C<{Vz>2l~F%xz!i;13H&Hyh2F)Lo6RK2yhpPRL|5W4C6;
zGA2nb#d2sz@0sY+Y)9=CXm#|G*^cb9=zySflNXoSvWtfP7flCE8Bxx`zk1S2?_U9;
z7@TAqig^52v;@)^UPhvhG24;t*-4bIuMmuODHv~@T;h3><?krt|MRaNWXC%)1^MX*
zYN;3eKO&I9g><PGy)|Y%vV(u#5gJ`~F>gNnD>C@*AuZD3J>Ay9Ar^_+J4x#Ba&$P3
z;?05<ORmt9=re;SB4VXocHSYWdei+Y`0QMq=(*@6JQ;^Wy|jawg|<=eL{K&9@@z+g
zi=jQam+r~^pF6h$nxB6*IseJT(AN`6{TEM!o&i1R4WwyUmpgb~?Se2n`f#*EH(&DC
z=HSMsWf+Z)$BX0L<KuBeQxY5>-`I1_t>)|MNT~SnF0RwAVl&@+jL_mu>`-ebZp9!{
zYeETfh@^)B0rTAPK5(hgmy%=A!MKjlwz#2N*vf}0+_Qy1BO%=BhThx*^$bINVCVo`
z{ey`GMH3B*<^+l+9w@R<bRMNWItBB{Ub&Ze*C2*&?|=d7+<~USK_iz6;kR=IF$gpr
z_Eg@>-XZ0>30D%m<S?0=V?CT}NH)Ce5h=s@hBP6nm`*~PeG5b{c1ry!T1W`dgh{HY
zzNv;KG`y)1iO`g$Nq9Qc+4`}~I7sOPa@$k<CO6PB_c|X2H-bU6wROr1M&CHk;s)Vt
zv(US5f?i6OOA$q$lf}c9Az#Pp#%f7pFSxJNJM7?0;A$@~tBLj%v`Yx!aPxRbdz9g6
zVc3OYDXIy7wij(&bfwgo3hQiIM1@}su0qt3LRRQWV=MG%(Um=et+4dP+^%v!mJ)*-
z3cABKu5NqE-bGjLdxf>oEYd|Tp=M<4P8;qj@FKQ7a++09t*%fEno-GEJ`p4wdq&5g
zS;pV=Z{6*%CR1Xo4))Kdyna~D%If9i9JD|-l{th|qlr(-*_3{!`33!jGE+XG2k>#L
z8QsN5gq0**OvUH<bea|PfCKv`1I)cVJ4Yo1q2ADMm7%UP2wmv+LpGb0SN!=B#V^t`
zh(PIS@*zcrt8-dkE|7jewzKb4Jtt=`xTce{?^RtVXMdR5C>z&za&~BHJUM$Pb)K9Z
zNv%s)fXrd0EO7;g4jIo0eOkufe!KUD0?=>1{pMDrBSeXWxc|+bO@X9%Z*Sj8ff(`j
zw?u=R6iAN0`Fj7hO+o+ee(hwLqtHHlF3mjt<|Hh1WW)w=$03-^PB5anQpenl!%A}-
z#WpLVI~CHqAZ@BkNCUOs>5YmS7=5CfV-OIjo59TviyB>dEi;|Pf$h91-+y?1x&t>I
zHNg>1<QMOrXja(HM9x_hyV1CHBZmyQvsGKDv`%?Q6mpmnur=&pD2AwBN)QGfq$1L@
zc!b0;q?i-d4#we;vBAjr{|^Rdy7`5p1Mpt*t!Xy?ES~9IMbEev&vF3D2h9sw`EUl^
zs=Hs`{j%Nf@AYcsJmf1oJ8kdmmLiS2pVRLBTv{~(v!BZ~`*~7cNbE!tgR~3*JByI|
zc_(rwW)e@##7vekPTLnug62>sT;nbO2>X*UUzxDk3UD}C0S=cdQ+U{(!YQ)cxwUUo
zPSKq^x9&#q$K-T}pgnZ><8ykx_yB%HxQEe$B@tq=omsx{P|bCEUYTrrSVE`+aG{^*
zCZmfwYlym0S7Drar1d)`8q7u?$KZ5k{<$(-(PSF7Ke33A8R0und*2Kj!Yd0zAe<7F
z3$9Msh)#2)#mglWT{Bn$oWkgO_JLjz)I)H!x8CNvbT{8&Yx9}0*Jjr>n)`=$D`(R?
zZEis)kc1W3;!dY160l}}yb5as$xtR<24-dHq_a}+saLA7sElK9d6qTL=;)^neNrCC
znFE#~7{|Siei#OhvU0S!W5)6cZ_GLxA2oy<fvXX<O7#-s#!+pWcD2RQjQ1*?y}4!*
z#oxQHGidp(ymd<S4mgw1{Szv&f!hA7QiwzoD2+!{f}@C*+2}+bLy^rn*9TG`Ws_OG
z+CSH^{jdvz79X~#*7lnX$3O^8sZthCGCTu?#`G=U3Uh0R!UaGG|D(#J7B^grt%z-a
zx@yam%NSEz#<kfRkYO3MCI@%R|M=uEs?s$%HSHxR0{qhnYFB7$`cEfG*Z4(~Bv<hN
z_%tb;u4|$sQo%o)q}A%Ap8s@;Y<*ueNe|^l@0g{QS7^UE?diy11T1iO+f$&yX>KjT
zYjmhqF}=p+6h}%6J5x&7g^TGG;{%5dMzj?KgK}x%PfFQ1ffFU|#lTn?gsBQ=Ky)s2
zPN(6-UXZoAAoHa5FG%LID1UYxSgq!l=<9P9eIlR=tWaN{wOpU>R9~dkn@4%o=;#Yy
zfK~rb%^=-Fguya78d^tGQ$n)MR8(pz%A{JE3QTS(ld*Pw*_Dn(y(8P+|JbBo7VHen
znfDW!_mlR#8%1mgGu^w=zgcJFr1jp@(qN~B%5S0CaiX1FzpxYFlP}V%&Qr+##7<h2
zi&KJW7Y|#HEhVMVzY>dRQ_UQg2J<VuIaYYzj%g>fI3V5gB@MN*LoF2!sK-MPHLDu&
z_R|f1l_HUuR8b~U8s~PSSM5#Ibf9yzaS1v)`?gi_fi*IiQm@U}CuV<5R`yqY-Ts1E
z#Uvw`+>dMbXixm3J@K~Kd}WIj_mVL6H`aV?;%nQaB<*Q9=7-i;yPstK*$?VJnf@=E
z>(9-!L_eGojbLUvRWprvhwYi35FGjJOmleJiJ9wp^eLsep4+)jy}7PC<~q#%sjgS2
zx*jKaul#3IU1b;LyX@h4K3j#$CeXT(d$L|=Yu-C1IU8#VMwHRIXc#p$8G;sgLv0fi
zv|{(g9^Ox7%lLmX$Op68I))D2GSe<9$?Ske?Eo6Qw*xW-XT0I+Wi9}RU{ht5xmkg!
zUVGpwe{Li!?D-9ic4CGOf4C6FeGL1r$Rb@#m^i2qf-o@VPxSkydZKBb%r2=%VJV~q
z0t%cGW&zb_HDr@TzCcW%KIuEuh^BzKu`%iOgTt}>@Hs?Ib`NJ|n6Ap!<wXam?kb9$
zZb{xz>x*`1aSpSA<wbz$k(jrx<KP6iw5>845yV7tyPL6_R$secM*Xp=5P08zyS}wF
z{`Q`2$w1ikuvxB!ZrNQHWywXz{!i2)(~5SYL7mqc*`woS)Nc9$oF|NAWvfWmq!Y=S
zD9}7t2Xt#oKkYbxFPz6gepcYJHz4{{Fs{=TOxI`yR%O{(GKFsaX*pp`lvO4$k&Nr`
z7}U;lM>2~~{E?ifk<5~lm62Q~Gc}S+Gm^`$kz96;<isDzi9ZrWXJrY&?E{<0=YFly
zz5;yFii0NxO&h0qHe-jl7kOQ0tZRok*wC)BgXmyY!9>-`Y(xPhO31GpgA>{j+ImhC
zH+BYKD17xDy6Em$n6Opfa`TOKM?n0(Z&t^l9aV9+(ZQ}Us45?DcSL358ZPPRe7sl`
zv|cBdSSz|aJ<wrRHtSkh$_*Cj))pA1@tQTM2-Dp;VZ3!~3sx;%-qjmFTj&)_yswV)
zkC#v>fcqeG*`>PY%+b|1@u7heFmXf%`Xlb0J8oYkfUI4x<=<l2s2PjJX2_349AGth
zJV3S6D!r)no8AZfzF1`LT>~#VOCLZwoRmO~g{PAMJlYxxPc`AXRsk7n7qXB1`Y3PC
zL*Ym|LSt89>{=O6p=ChDwK5={3nSlwsl}SD*6F8c=rcbon`5Ubd7U^$^m2g3q>D;l
z$9nX*UwLjU3&>j|zaL*J{JOt4Bs6ZoMx%SK5R5LI&MD9;whFNvWw!U8tcypWL3A@*
z*>X56^fioZ`Q?Da3Djx}D4@Mw=3xuMNsL_RYPR??mTItMCMRzz{^L-a4%@xsgczm{
z?BBJNQNP2{q>C2o@9Nbee!2iS>~35~mF%I>8pY1WNgqbGA~iH3vbRP?C_aEai+q@S
z+6>@d`ldqucj0jQ62Ddrv_{@{gw1p8gx*qKEv0+Q<rublMOIjf+Pt}D0HsY~=}6@c
zk75vfVWG+^<g>xo7JBX#a+r{xDfhtdVG9LWS1NURFSv%1O<Gwkw9`Ai)5pSF=eiPR
z=<PdqzR(E$OOzqL-oJa-7YF;&%}HCj2|?<&-`?5x1*y<^iCBPoXMgY8sAaF5x{|y}
zTZ|l6+TKFxz;-A|%vJ=-%;OFo*7eH|MU%c~tRaY@iJI1Bkz_H%p|hP+DCyU%(oAn6
z0Zk@RJm>fM?D8xxl6lk}2c=qbgQrw@l`g4<R3mh9l8X8<DQA}#bniq1lgdB#Q>7j#
zB`c;sB1@{XP{Ko1fyxEPg4kJybd{%PV0ZG6X;$X&x%RS2CvRR=gez=qt@#k<u!f@9
zoONiE*qYbDzzg{-fJ-KB=sfp=!3H}Bb2Il6#j~BMK-hR11otL2SS<6)=6=vU^8y_y
zQS%*4h15pReC?SxHA!(h^M?8^+rpBo=jGK)-VD%bUCVhfWR!TEQ@Uj8l9z*~SXlDu
zKt;b}qIAB~*6X6Fr{m6{5N1#^vpNg#2g%M>c8{y!ak0xL4seopk-iVjaJO&8?Ab!T
z<c0mx+mCaj2w!WweG+N;1+Z{!Wij{kt3nw0ToTO#MYH&j9;$2_Pw5w0UoE?Dqxp8o
z#5BQ_j;{==gg7XZ&K#NcJF}4+tB%Qv8yhVw&Xcsa*DGL^L8}?!PabLQ%{uA@8;gwq
zBg|Qdgz3=qCz!Mrg`NV1-XI*hXQ<k^Q9EaQ&(($g>$n-K%oZ30_k*Zc!Ot}9yW@ho
zG4GYo<kTD`^h~~6r#r_8yP$WS^%&9322)$f+nb?lC``MGYNR@)3pxNeYfjs}uD8Fz
z9qN!lf~Q||5}%lx`(znI1LezZmAmfs(5++SUo&5HseJi$(F$H|wT`ki(Ato-*HXMm
z8J2KLL^m}3{Ui(2qJP0c10T3kw}~;2I5$e?7PeA<bMflYVh^<#L359q+1?J|Ui${$
zFggcwoLUH><Dv$x#nqbD%lJ;efBOq{rrPV8uB_{1WnJr)b)C1@)z^-!-F2ORMw={M
zr%jfJpD^JA%kROWMUl}1EUglt)iaye<!H(mSxvoLdkWhm6Z}FL53-gh>W_!+%fNWk
zVm3y}ipEu}c8O!Z5!n@F9n$DvX7KGF(~lpdcdK~4&1ES1Rpfq+X5ljanil3iJ>Z@)
z8}`b#KGHY}_%cUq(TRR}Hl?@P=(b^N-1$Z{W|fv3Yu7=wH)5^2Tl<Ki3T?V?ZhaH6
z7Twoh@43owr^fB>3a9e3DsrcSKObn7c<FHbF@X+usubZrLBXE0oX5}U@+d5K@VVj+
zo+r;&xPuRpb0xIC&`{)oK#|w48S#JpdT?n;fMs-WfqoLy;a^>bU)ts7ZaL_<u|~j!
z;VyoNK0V*b=*Msup9^=92K3RW1*)gyb40bwFc=W=M~&@#5<5u!9=}cA?Wh%w&uIGI
z(bavRzb0qOvG7}NRT&;|_M{oT9kbz>p_@K>8Xq_>hv7#tSl4viYL;4O(e&YJmZ{F-
z5O%A%W;&OpPggUYAk*iWlel{oAJ_3-avGnSBY3)uvBUot@7TRtefC+B?g;j9n9d)T
zMGc=)bP%1?@8NO@><$6gckg`57U_(f|N7#`SLM%yU&16E#yjV)$|sV}r}TDz|682W
zO9Do9IeVAULA}IDJfXMCCSzUKyZ!zxP-q1KO<3P5qVOE$iF%D#=T)G=0~KB}4B!V*
zd^xd$D#C3plJCUbHJtPi4foExA8u_CGX2&yr7%z;GcGSy0r_4hAm4KV`5psu+7^{j
zhfux*!C2~I`y#!|_x5IE%;Z+t+dr3e^YG<M$DB=b&l*BI082o$zqK!0stB1B-Xgv_
zgxp~#-Np)!=-1=R)9m!rAPba%?j*Pbxja2R&06V0spUMazk7ZNW`wO&JtzcuPphBl
ztb1|69xLg1Z@ybBcK<rQ>J5%}k9T*q5*xk};xg5bmhej?WndEybtYQet*r}VjL#wl
z-4#UDfw`#&3KTI4uqlceNy&cDu+77Wt3B8>Eo^P&nu6p8b>SDXdBYqm74zA!@1{v`
zkAc<(DAk~M8s6m~rAC4}H*{$_cWUObSPU@JD2LtK>xKMkY2gY<=uUdF=5>X$GUAmJ
z=>LJMomCjk17DG?&*Y`HlDd~Oi?;!fyNt_T0#j)9wYPVm8cv#}$PxQYI^HMX-B?j%
zlqUAgcU=Vmq4~Cdklw2g;He|K*Ng}<^}>2Py?=i%8b@_9QDs>SByCK3R5_T8lY<kY
zQQs`-skf&l^b^}V5iJ-K$u`Kgn^8KZk5+swETC?gyki}(3Knj4f`wZySh%IZLeu4K
zsL{G8j1}{xvceu}b|jjarcKR;k&Qu=s`^fgIu|}r0b0GB2`x>ekWQT_qP4rB+G}XG
z(vbOnP$j~eq75>$4OL04Q#D`3i261QEf8(j%Kg67J-p=VL?XvI%PK$1S@eNL&@?Tf
z_J>34;B#6h<2dP1^TURRT;D)eUS4A95xuFdb(d4QbV>EW7B&pFWqhbHn?pXy;MOun
zD;liytQt0|%0^e^cAy&S7AyTZUmDmN8#rT|h!k$rt~6F1rix5Y;g*y;I?y#PV+YWM
zC+x$5>tp{ZCl>BG2HWgXTrxRu3whYTl^i8mt?sj=6puGG`173#%Ly}}(L!cMOr+j)
zMz>#%8lMo<kfEEUX_gG_Hzz)~jjCVW=>^BWxUSklS6gc2zfL~U<P1VYW;JaLPwX?V
zI-xrzCGHrF`ULUFVsT=x0{TC&C6J@e<;-1~c-vPWVY|@qxWqZ^f^(YM=6u$Leafy8
znJl1h$^*kHhQWC^bT;S$z|BGWF3o3PMrakc4ULJgl!2}kbyLphZd?kaO4Voyn`{Ue
zJ`vqV->w!HqUM5vpKi5^>}|VV$!7(Ppe3PW8-8x)&G(950|ZHSbbJUpUCVQkJ6~P-
z4wnuN7p~QkMii9<!8=BQAVzT53P0*R>u~Z))bBxKZK)frKTgQ}s2M9SIDFZ%KN8q0
z>({o@@0@i6gi!pnG`o?57dlhJShLRRr|O`)krF3n@aVZti1%@8>!aZ`JOiLuNeJIY
z%lO+ncfZgqaqrfxuUm4cZ(An0x7z$dkL56FlSE%?%_l~8@P46<?x4wY@qyV4cl!Hx
zh0k!CXrPEG7cuH(lBM6j4U#3KdcXdb9;pkrzxg^6;^p?OySKz(kC_!0$tTT?8U&9t
zUn<6~90b^^K`cb(AP|`=ed9NI2C+-!=x<u7c+-k<9R$k2BA{y~`GjCPw9kI#%LD#r
zB^ob#)qRdYs`RUy$1|GdG+Q+%Uy9RT=?k7zE3Leb-{+0aub-uiepBU4Mruz#>wf5W
z^iMr6iFEstu`J^=cwW_%-3Ld*qSN7Hm)gZnbDkAW)J!Ye0WFhUjD&303Jz@naw7^t
z^BuT&zS2%k1}idc3Dd-!ct2|tvqq5^uM9^;T=atNpx4A_c*2AP`T@z~LE~oX&f->Q
zs~HcZpu9K{K<%`B0>gst+Uy;WT8D*d2Rw52?^ztUt4J-hMBbEJb~okJYfrh3SX&Bh
zunXluKYo|f&0JRX01h(cS%1ov?!}<*xM{ia^tMivW$Kp*%vGT);r9`!!(zV&#D3#(
zOHEU3*kmHZsraSrM^_jCjUxIq12@m6=#6H{gApq!dQV#MLa|sV-T^(y)NNWjEl*)l
z5<w~zu0a{xez@=FQI%W~rH8r@T}y6<PPRm;KJqVXqVN;pe!w!APi|j1x|k%;F?^SB
z&5n1MG=b}~nnmqYC(Lx@MO@=WIsi<iKFUi3L>Et-s-Bf+VVIM{D9vc(w<lCFC77y9
z=F1AcnMap&S)Lk|h$_+)%N6r#MbOLKbB(%J)P_`ap3UY6yfg_XxJKU#r&Y2KoT9M;
zOoR7Yc}H;dI&phgRyujD5?B|A%2fRHY^b`Cu|l7ug}LfN6tNbVwOno#BO&X?W&$fV
z2pnrKqxN?V3M38MQCSjT4x_%$mqb2mh*V!+#u0)r{bI@qX8Gl1CBKVfesNjKYt{J$
zcwJNQLouN;$Y&c9@#<$rDg||3$7ZrBs4J_s1D(Zn?(mCb$ZiGh?BWKz-ij3^Qq?AM
zix|MH4vy&Ol>2pYInOQ@E^>)4Ew7q)D&Q}l87@PK;m?Hd=QXruIkbxXqL`Qlx;Qz7
z59sV@7|A-BX{t3_(546|s4j~K((5R0WpE55x;w8Kxzasl_ihplpV#y_T0MHJnGDc$
zI^tAK+m-t(1fq$Dn5eja3Z8x5=tj%XL?fPh@gdan@w@;U0Ns{r8rHI_TI_S`wtbEr
z7lXy$6z&jeK%Uk=f)@FI*?SkZxQ%RW^shjFK8!R7+zlApYAgNWTjInRkFnz<gw3Z`
z3!}J^I+EHphMwPk)}=11BsJj7%--jm=j4fLsZ=V}b=9hMc~_p65)n!gC0wt=)dCoY
zp<fXD(6<gahd5+~m8DNrVb!K)Q3=Xe@<xU7CD1HFtd-2RvohnOmfhr|Mhp<uV#)V~
zs~YrC=Jru0ya#SsT;U!mxs&V+)x`0yPgB7gbxqVZ|D=Y4SC6!a6}t*Lg~2J+FdfKW
zE2hI#8Fx=xaH(_I6jYg-+>DeV-X2;s(S7Z&D5g-*tdb8?nRI8uEJx-+4GMwS%0y(p
z2-3Ez^Yw(h!32$Y;JywV8xe<%JXF#4tj@bUtAV34%N6aUKKO#2PFq|weh+=l%z9z%
zx#0(ucea^pN7=CorqP&^2ytx8ueF|jA!c{!&hApV0;}#Z1zqEZs^W;We3J8qPcn;N
zGEenHK#_w=9IXm|2FH?rB+G0*nnuZx#b7K%q0h{sN>3NXR{GYBSFDn=IG;=v+T}E;
zjjM^(g0E`agQf$MN<@!9a`(`3&^{B~*=-2ym_4n>ZBJ{>|7ePR!}MFyGwD!;s#(J8
zA^}q9B!ZYWSDB!#dHZ3P!GiF7pl`rQqP7EJePJ#<T#UZi?a_t^#rg~P?e1l7$|J#R
zhh#w@Ra`?ie2aXvWMUM)<BMPiveOc`X^8;4fZFXnpgxL!O2$6IsD3WWj~u{`c&HV%
z!wZW<QI8uvy<6k2N1q&V1Z0nPO6H?m8Z@o6F=huzO3*_{DMBb(!=^fV{mc<h{UPsi
zI#Xma@b{7S3xjCe(JgR#s!8M4v%6v{7sTEYj*T}dc#X~wr9d-*8DN74lqPh*JlGE=
z!6~mGV?_!~ec3!PBGnoW{R)N(d1pR?Ll=?0JHc?b{ZO!IQ6HtxLwc|klJ>NIBw0AE
z2uA;CEF>D-SNc@!Wof}pSWv4MUTHX5!NHlgchuV!9}6qE8>r_GgOV%rFl@ZR$%8@2
z^H#k$Kv_=R$JiJ&V!MX1vx@>V`0DkYuwGx+AKP+Dz8@}U7FXNcqAKIwu4+)y<{G(I
z`&e!Qo1l4T`=NeE@sm|_^u|m4WA(;14}`TDwEed&dLQ~)seWl|dz&R6Vfzz#?{)U|
zmg(%RhrvvJ(sZ|eiPN_m-MvlSJuuz9MV=bfk?<`hD%&{-gJ7zLVf&u`+}5`9x%(!)
z@1#Erjhe87#cqwoT%SWaG6$+DJA+^n-M9ebe|@##tO8bH-?9p@Y>-ueg@UZyX~%Au
z>soFF&Q_jiM`X2H+yRaeJ>*)WJQxS~p4i^>RJb3=jV)H=WQJofki+pXv|xe!G$?^P
zvjv;Asx$05D{Z^6hPT}{3_WzZbOG;%_}fEB7F&y|E@sG!Ky%2#DmXgY3I^L4q7<4q
zCnk<w-`T<8@X+SWuydw2cOEp?3nJHj01o|Ebb<CJXd6{;^@5#UUEHp2;f_P4b{^>T
zd(Qm6*AG>j@1fIHy=~gOGr)SL*wk%R_`U7WUAXtQA<HSD+X4@kRcGEklXo|iM+oN>
z4?{XG=d&8PM3(TmGHB$bRUr><>RS?GA06!m1DLl*KuEUn7giE92Woe3mwUV&<3KQ3
z-N1?z`Po8C3F>>TgTv5W<rrB<V@ygHSro~q;)IbOQ#==$KqlU965Gcf!I>9YMJI!9
z*~T*9B0eP4_OR4uZA$}~ouLxFWDWc$I0CJ$-Tkkly^Y_Fl@>emm;1Godc<1&Wn}fY
z((`pf+2D10n=6P<{kFV7&W=N&8{NHUtp{BhwTc}Ng~LbvO=Uv3`X^M@?`|AEF~(ff
zK1|8IGT@jd$tVjm(oQ9=qAS3RN69gt61zC&lDY_s$|$oh&w+(|4&;MMa|d@q>ABO$
zHyf{ec*Grc`ROJ-O6@L)G@f@t^f=HetD&@5W;M;#m2;rciMc+iU6Q$?bsjK<k<ROp
zfe123(&EU?avV@BV>+BB>Tv30z-V7?3Q4IfAgHN6VcNJkwbOEY3yWpc#{?L1>zdwm
z*xg@xrr9Sbbd1(PXIZV|v+_D%kwyBjLgZKmh!V(E$7DMwQ?T8u74l^o{#9{fbU06W
z^}j)mYG_Lbep$hp%AzcI8wSQBh3HUS@GzN}mIedlNIoZlhfKh_%}KPP>V|dlaxG@b
zo1m?^7EIcT<}L=T-yx(tnjbsmi;-?;TtJV|PN2_Gye$CLtQQ^|UK=~5xA6ym_|f{9
zF!gbCre9nSlaIkiV>j|K*z0g&@jjv>L1+3R*nO}&xTPbrV+~S9mt+FlY2%5~S(x!E
zvc>8E*z`V3HMp2!(ipGiQ6c3;b0fK(x3+?PBe@-q@ZGTY`|mx9xiZFxXtU8ihDU?J
z#83F)-+F(;hd>|x#<?)P51-!mLyp0>KdNA!gd8XjZjd~9)kXv_qXl7w#KIsu?Nb1E
z3d5F+ydE->@!DF(vpn8}UOGqJgK4ZEV&n`>R44u=awii@RObTz%0rbjmFRaAnJt29
z7AKwRno?OHr@>Kgr5B(fa)5Cual=KkmH4KYf*zbX`@RzZpbSbgmr8V9+q$K3QFCtm
zM|~yO`vH9=CRvFR4DyoDo)B}op2irkCBOhCRXQX4B66{4I8&S&m#41{H-|HG4-;#=
zwl-f|+efRTCC(1WDFqpHv<u&8SjDI|CSwOP45^D(6hMSG0YrGn`MRLz))^q{FlEoG
zeN?tC(Z(%z=Ekz|%cIp*=U!{((ob12hlSYQ#`Ux7nM!lk)Y+k$l`o_NCefh0kr9Qt
zYC+Vp_Cwhl64s3HW+M9t6VJB!WSBZ%v@05e5;mUE%ER4K%GcR|!8&``@xhIa3_Duw
z;*z*#4U9XR$-=HxFUazvTj{fW9Mv>Zb|a3q$9*KVI{HbR=S5AXW!eC|8%XKuYL&1&
zk^ZfAPY`9dDbfj8t{W<bYvh0zXBDsU>WQ{J_~t3CTU9v)jjnkX{yQ3j0$o*}=Kv%l
z*lM|Fy108}2}XU%pqS-CE5n$(1_}{U$m5OkNBv#YAJ!WizVx;8(&h_C^|7xs8hy4N
zgM+pK=Ii~hl}Z!b8Bi^tk5SK8Q=AHsNL;l-tkY{lyW%+ROExOk@3}wv{qFC7|6fPH
zAO2n)|9$lP-+#Y*=kAAdg442E(6qjBLf9EippHYQyOt6XE!>v=ltq-gL<4P=hXv|;
zjtVpg#vc|0piP#koE~>ns=X^QIyLSph`1Cq3PfdqB`Pbzam*3w6B)*j^R(qsc`{<b
zZXU#0dXyJxu)gaJ^*m}<FgLr1&~A_z;WbQhq(s+Xffin4Ieeo{g2w%AwkBss2cI0G
z*kpXF6M-#I3cl4r)L0>n1@6T}o#}jpLPNii0j=E{Nl`PQA?>rEp%f7dIvTzqy(dgh
zQy&`k#ES!VF>kdsBVu>Gp@krZ*OCpTdSv3IHx3UGM{g#Mmb#3Vr2kupqAkv$@^$ez
zuF~C|YpjnR&reU&a>PG0%{}Qa(;IUEe)t*4Rq=UqTo<u7&(kW2XQ|hY?TPN_!gy&i
zxwdO*$`3WBuj$%RZxYvWh=ZLa^zPk1D%dr-GJyj6(5<t662i?V>_E)>#)0V);(TKn
zf`ZhAV7r*@E9N!ODrAX0f4zsV_Y^z?o+^fhnj8M9_j`$ck7UT9t_`7CkLvZ_-M@G3
zB?y<Y^7p&eIMROj2E#H{^HCQ`tP9-?mxy*zPMnHZ$(~U4vL#73JKf$|bbdX+hOQfO
z)mlLgtc-nn)IS!aWta*_FgYNG=0w~EOLS6Sm>-dO3;E?=lFL!6oQ0%blZhG^?@~Im
z{Y%?Wpu1+Gyzd6u%c{Q!v~O7Z(ZV(1X)=VKW<Xk;f$ka{n+6{)&M)eTv*+nICA~G@
zaY%*DX-LA6p6JJ+ximd%;eoNkmc#*I*2{2Rk9rn319_PaFD&P|yTp~lzs+IoMa-(1
zHdae-v#0$mZcChKsbc^G_ZTa=R>Gy7Lxxlmewabmph_z-jzW*N7*W3??9*MsS?vyR
z{l7+t4Amz45(*n9%j@OC;IxA#w48@x?mKywj{ufw?Cvm3SBtZh-iU29i~mC_Q<e6A
zRydO9tsMpzODazbx2rCGiv->R70c`ek%5@IneJ%4Qcy$#1ULo0&m|mjq^VG^O-1_4
zsfc*AaIG6JEZG*Zloh%mVIk8_l^{GJDeZu5ni0cjKF?@@MIe(jWZ=disEkBHUomXd
z$S|EI;w#QU;Q9jVA<JdEFS6IE$fG{i$fa@8)R9C`@)!dPnU80!&kZ^X?{^mC2Ohe)
z>p->n-4DJ$@``l>DL~HesIYjUi5Rf}Wu)V&Y~+4euA5uxW~x7Rw04QFl&0qD>JrhG
z!%G-Og*gM+Dy7e<;Cf15gL4AIGFRz&1}y-hBm7;(NT5^JUl<2??Z#2SJZ21TJ6*Q^
zU88mT`Pn(Hi$%w>zlQB;h%#U|JX>4)sy0dzL3+MJH3c_i42pX_XM?|fiK0ac%rmq-
zI7*MZ+++_H!S21m)@^-WZ;Zs*mP)fnYGOQ6E9reoE~gBnMUJQqaJ7a%Tc+aB3`^t1
zhW2y9Dc$K4>C|>&)W<qj*a_J+t7{SxXX*xtusSyL%1T;ZSTnCtYEX%iTva4}XUH&>
zMD>-vm(Q55%VL%ymbiE&P(D1D-M%<u<+{UDVonu`y{S_Lg)cKV^Ga!c=EB&U%#QX^
zD|;GEP%HZteg?<GQ!RWF4LJ4DhuTTTZu)A&bY(X>biFFx7v;zQH@I}!hJTYcSI28N
zIdR#(yxxCH(~uK7JIN9##kjpxBvb<S!ZVXxPD~L*1{2wsH8;*FOFSZ4pNlZy>MdQz
zj*f+2zzu$4BJV9-!cP8wpD@=a>^di~f6;%d%iU(V)_o~x<HK8{vbxcZyHOk6Ehuhn
zL5V?3sDOdehzS_Q<@|!+6d1g1%=^=TVH;_uvOfCz(rg^5ZAzksx}0NN2#ZWbk*rYP
zpeVdSIYe`xgU`99^$h%(28B;?-HI<4j1GsfV72{Bit!jTV`Vh#F>^<bTMk-NHmb?)
zqBxFfUmw&c+lUg&&;^z(eU-k{HgjJ`#SEn_RkpUq03T6F2sQgq670WJlsPZu<e5HM
zqSn<0N`D=T)Cn4vxyoVWWh12l#;|2->&IYmXplmtVI~%Xrhpn%RiVbl5wI2*9jq0m
zt>_HXrh-xpyM&4fFno}Aq$MW6>v}59(+G4rSw_r@-H3T{!!?egl))ckYirfmOTfaG
zcKf#=2Qp_Rv_0B^BF;agk16Cl>3{H8f=d-ydzVv{XJ&R*NCQ5377mI~VL-4H?3DA=
zU<V=Lc7QJhCB=>ATF|tJK_jqYc2boTjfW$p<T64Exh#9+a_B~XyMb8i*gN9JRr*1?
z_Ofk-w!1yR_Fr61^I__E5vIb)@IoUR+v5grC4oaQ>h*{bT*V$%WgnL61pW;xzh)v!
zE1^D)Fzkt(W<qaVblL&@i}eUFYCDZvBY+_Xj!iLOtgen*mnD%u{~a|_r%NO(sVo0g
zlTOASwE!S){kkJ#{x?>SD$r3oC8k6G@oRV%ZKZ1Qthgjb#QE1EB^lFblo>?DFnbi6
z7z7#vD~V$C7fqDjVpO9kT|M%awG#*$N_Z3P#osYdm}Q{>!I*BifgWx2y!1<#YQNbx
zQgNcchXFTvK6ea^ioCgwf%>H7(tq$<8}eJ@CDC%b$ZW?XPaCly<L=<E*OVsaWV5ic
z%fqxe|AwjA1RVDn6O9ddg`uCC1Ve4@cjC|2ooNV>ee5Imqw49LXs!#Qtn7yk^Q7Xl
z1+8@Iw;;W`>Ug96oTj<ht2$xk1p9o60X7&wsK(IRS6Aey9?ul;ZQrc6SPSQG%~4bP
zW1l0qsh*BoEOu;gO>qy2$>iB(krUs~;Q<M4zXb+|TR+kl9(e%OjC*4=o9%a#wY5aO
zqQC1FVBfXeeXL_L*Jxf1j3qHvz6#cY_CqAl+N|uuAoByHR{?$GQsJG4RX|Kzm?-8A
z7&o|vzl!PPDw*&)c-T-#^Jvq;ZVP@Z(1{b%j2gob>~^lq6tLxsyvn-6)!2Y<N)Kb?
zd`^HGN0zTcHn)`lOyg6c@hD-(0RZYg^73ean85=-%rTUi1m-O)B5JGNk2{b0qQ0^U
zggDG3P$402y6rblMTE)EMLBVpZQBDj{wwDiZlDPqD;B#-&n@zj*jbr(U)~Ib;M(1v
z8ryWqKr9-Agj$4lc}7XlQJPf_tPd6%qSnoApAQ>7R@|<~ilsePm|50*u+AkIhh*)D
zz#1#vYh8WS=%G-J`O-S*Ie`vg*nhbxyV-BDw-$Uy+N4o;8*Bz&RAO0PdcHm|?sSOC
z4c~smjYA(H(w^u*Md%j7HF*^2w)#~34P)pBmrRP72;~lhz<(y}C&D1=K%Z2izF8g*
zG&@JJR;(Z`AOY>={`KIX-yB%75%Ezyx#>u1wn6~_rBa9`=Hi)mW*t<c=h1^FXuK&c
z!xUh`5;K8RdjP%yc8^(fS`^7gZJ468k9U91f3Gfg7ID3z4L3NS-$7%C>RF_Ih3$ha
zCFtE*vo3`~c^~vb>!Mi8W!v>YZ8KPy-vPE@#(z1Fd{iB?^ogZZ!zRmUnL$70ERy@?
zNpp=(p-as-2_{AaJ6Qy%cDtPjma$_|^m>11w@*f<?BQXhqj6I@no)u}Vwr$53O~_6
zTEyDVF4mn`uwKj7Iu2q}>o_Rf7@<(WBEU-hRo&%Z5+!rsAB5`N*|~RLX)Y=7&(s9|
z8EXXHxeoUe>_?aB`K-P`99Z^20@5(NPF9MZ8m@d(1)Px{F39>TQ^9#j0wnWLsY3Bv
z*1W`M`i)*RnOAjjuGwgtOu_Wt79Z0*`)X}<$r4;C*_nR?Qq3g$lJWP$e&Cv<;oNOY
zDjVf53(r{V3{mCTKCs6dno-vs!c^1@Qx0x>2d8XGW6%<`WxvgZ=V_`O5IY3hAq0gU
zb!IOV9lIW-s4%sT^}V5bep;sKq3&%Idx$&>l?Nri?i1~9puq6?u8}9MH<0^Kc^I;{
zk>yf<0H@p==ee58%CM+DLrH{kNrvhu8zZap<mxQt4@nh1R3npNn3wcu>zLrl3=0>T
zZA7sZu=j2s!&Zqob?7SSMHQT7E7;ibmEm6X_d7ZQi|^NDmrhfe&z{rtl$^ZyuFO81
zk+{;h8x;ijN=7&T<w04#cl2M!fB*f^r<*%>(dmeaETAS%p#=e($#M&*vIxqd`}O*s
znRoY$3MVdFqE69fnVQ9HwcI#T*B_Bc&P4~t0<ZaytsO_XgByYPFs>Qmgr&o3$nG3b
zMb6pmbXEBQyLX~f<q<1QO5hqw3_YuyD^-S3&xft@xMvS9aO_4k)#Z}c79wk(p#QaT
zFP?ITN<)Jl=h82jSs1iv@)C@1W&mi+cba)=aU>iOYa#VMcCC+rUw{)bc@g_4FI0dp
zuuAC#L>oqLRdpD~${uCbzaAcE{Bj^0LMk#G0brV|YsiaHy?2r*IvAj*Y}T~Eg()yC
zs&w+WgzCc)za&U*6~!VZH>Y7@>!N5Ex-nHza+KKmBYA`I6^>37P{!-}Xy}fDu$rDT
z48(gNPo&Z^_*300MY(Pdm#>)qv060FG7$uL55r1O&8z3Y$vq>AYSe)kc1ka|p4ms+
ztBa#tE|*!6V~nU;ZmOn(O}dy1#L@9AMzjNMHzRgmv=me`F29ymmP9K{_}0}`_qtCz
z{MNMR5CUNV8Kg3DC}SvBRIyl~G4!xU+X)IKu~Gfwp+6v#YCU;cLyOVFq`+_;+3vIK
z6wW6{s`0ra5$M_i)X?SxL{D_vMJC8hb#U!+d=QwYW*%qmq|JQZ-?%)tMhmV{gVf3o
znoqz|H*fOJ@4mNAdxItr)N!b3r$N5^`)9RVVIIGu<Bp1B(RHH0Mel_1(p5NApqzhq
z5`ca-y4*a{U6`wAt2)G)m7@lv;7&WKL9DyEK?GuCkC<574jHOrUkXRQ<l}yZz&;L>
zqdz&5vvP*Ba)z@KyLr_fpH+V!&5m)D8W9Gd<4sNt5~{*Jv6AvRIW+|{n7}Km&Y9es
zN)ln|!uph?5ZsTp@TuHLoZ1x~)zVEIM<(7fGWxJ}??<!Y{&)T1zFvTnXneG<r!Z~~
za|K0Uy%ko`?MDp<)O@05F@~-t@&FZBpD(U?*K@lmXti!0q|uo19?fTXzMA1yDg13R
z;5a2K-)_G&TTI$222)VheQNvJ%=6_~V91=<;L<%m;4rs_io;=>MKeLA593J7aVb%{
z@T3Z{Pgb?ceaSSn(u#W7)?{q#k&i;_f?-MEj*?Ry0DnXzo}QTHjyID%X3I-)c!PbT
zWF}DP6M<2S@sHxfV3}TfV4)R6EEn(vHy>Lx-&T(*$*$FgT??6Us?pe6GZ-c>@MvL;
z{D1`2!<?4esoHEC%C~Od{<rkt$_=r}%+(k%&q-dWWCSs^fP}OlbKq%;NN_d7+$<~P
z;b>RGOdA^oJ@c-wqunumdpI(OsD)yXwa1vb9bU`KLCtN07Uj3_GzswPs&ON)6iT^Q
zI476Cdx*O)zHQc08E9!H>Yp<*`*8Td;HJ?tXE#T};5H{Ho4YL<leH=iM6=xF>R^^2
zrh(BWSuVF$+GUF#CLL>5X4m*c?KA-=C7-#D5Rp4Q+tYOrwBM$7MIFV`0|ch=*F~3g
z3TX6uEdLw1h23&hIieu9KxJ$&2SPCet~i}M!9#>3iAo5tOd#VH*F1|%3pggYwfK(=
z#J|$*B9NMp&|K%#CPh6RZF9uY&Xc31jYbNEngbnfNdRM0)q!C&RU_cDR%*0-Cb`JV
zdWPJftF+Q^75dUx>S)1U8Z1-Z2$%aj>yQ=&b#wMGxeQVxOH^u~=B$Q2UP&2E9TBTb
zFv8dLL*Q^GCZJVwCHps7S}<y(F%raBkO+rt!p{bHd<mw=eT{+B9Y3muW7H;FM#;+}
zlm;Ne8*j^FbjaEmTwN6-=MXdU63hnEW5hpbL&f4I^y`DPb$+z&KH5J@fGY1F#TXnp
zz@qd)U}NBqrik$cXCj2$^YulDsY4F4sG#70V@oIV#Nqmc@qD^o6QhO@BSRhpRH9vS
zkIe!|2<M9hY1XVa!?Hc?T47e;9MIeoO9S7qeRQdP-0M@zKx<r{mHhfz(Qf%K)vN0y
zMb&8>k(boxHeKUZz<$5kDMP=OeNeZp674and&wI6Mx5S7R1b?s=Ez*EuT!JoL@U~p
z5*`|Y&j+S5wKVxyN^3R0O=~Mc9O{yE)KJCLfl8^AId%-ZXVV-TV@bvq+;|$zwD^Eo
z<{SrUhKm442~p^9nFb77hjcbU$U0(d6X@E|N+C05aP@gV<AV>Jw?AYm0SZMAp)8-L
zx;LiGIZlfCc$z+;vqudFF_b%*NCuS~$)FNgcBu7J-PREHbu&N4SwmV__ui>jSH}8X
zL(hR@SU7j6ffwI2a*J>K9wWh0SBcU|+_PvVtkds6hw64d@31J}Rt5d)%HkWED|nb|
zowl3o7@POp-2Yr~s>0!Fvj{7LwA18U8vB%9TTu(^n#QI}x>+1om+jo$U*4-X@Ffbx
zP|WKUGMF&mteqO*9qk_N8Z40}bqs-}BDcx!vNuLTWx&D&eG53Ge7!LkmfuBvm#m`{
zwIqshb+v_iIa!JUbF{JHFCBHR+)8C@XJ`kWMMrqPTpxsVz+80d>rqGl;NdNG^yI-*
z8trsOE>F9=KIyPogHO?B`#TSn?wUMtQFncR_kN#s*Bl!bb=QMI{~;@{S+l)wG}{y7
zrz?>jb>!GHeEI-=s1A(cTSSv3e=g}(^~o`pZJB7-!bBTI&cIvckJ4cdTMyaVTN7<-
zb3b4sB(*!bR-Lt?`Za;xLxBW$1tj^C4nff&`zK|Zt#avg1mZyN5a8Vlr6~$zx|go^
z!WCunqQ0~8Ij&YFDb9TIGhf-yK5%T>l@If5l7_$MXLUWR!n=3VPucVw=t~yoqz}HE
zz>LeYWSUlYRiPUXHn`Z0b6pG^r7vF{JbiZZ?A6a?G6Gy3p8;OKd;IdnlaqIEULtHs
z@c!xH$>G71pPs!v`QhO3ZK&K&MDpvsw?A|xAG|TSpYI*MJ$du&`I~2lKcHE|=F7cT
z-><FxPuIXvcP50d)E=1M=MM)-0)OxCZZ${g_xXbd@%Z=oz0>~o@ALcjwjOL^+G#R?
zyN9RnWOuuNAD(aDyDx_9^XJc-pSNNANzQ1*>SC59cel2-c6+|och?GhUe({i&l}Fr
z1xk<7pczLdBE#>*H)!Z408qDkISPKbfTe!rXcw19rN>sfKFVg;=qqZHA+2Zij?ld4
z*w-1^oi->J!6$*$TEQJzYD8b*3eT8m4;;<l27#TUGq_L;bJQUoCdDAiC?H!*ftr`)
z+E=+ypSLVesq&Q9lyji-ppngzJbU_E%Bp`^zNyORh6{=cND@J*qY|?K0~u$C2p_|p
zF}RBo%&R{$rHtHJbGUxbKGo3}t~rc#v=5i;Wgku8lA@bOr<jOO5AXsTwg(qvg?Aog
zO@wUklP@r_KT)5u9oDBsaPPt3mJYnGMOE3dsLBj#aU5kGsKtp)wW!4vZE(2hA&gi0
z1!|6+n_vVOXh}>WEJ_#~d}CCpXnf;+xJG5e^#)jhvOq9aSj0GR5Mh>QOp92eTh&I^
zPv)>nR|Q0fXb_w0nA`z_;q{m#lw9s8H_?hUZObC_DFkxJ*<!Kum7)N$V`I_e79VH<
zhf0n()nb)#UW*li2vg#b&mv)#VWVkGX7L?LVZEis=caJ2Dw|_&>Le=Y3iCZ}S?Xl6
zUY!;r_8L4#_cLA_$MX8;R<j@u%4!U+^TSzPB^QutK88i$AppKojUY$jghDe@0QSIZ
zoRI{8*MA|@>+e+;3gBIo#wgXG`HDL)uL%@kK#7)@|3QItSu|3KR8(s#hC*Vn{rzqa
z@kjFSHU?{J1^sPKe<Q(my2H~Qh!*=OcJqZW6R0{+t0e%>x=n03*2J0ooq;BkGu(w>
z($}XOqX&TjguA+0_DawKjpJIl*qD0M-=rU&eVI`Q?PJFp4}ou}l}5w7Mdeyq4K7G@
zW0isqgwQ%LxS+ysLPLZC<sBnTv7QEM>MW_6cl2Mu@wy+}^*IP-D_~4DpW)_$rzDzl
zD?ox)2!Rg1y3$+E-Raz^lt^7j$q2cGU?w|4(!w-A%!M9y^8=@aUCXBnz>-!w9Uw`p
zr^PgCd60&^h5u)2GISy?3S3!k!%CI|naLAOiuFrL1ER8aAn%&5CFWbrT(l`wT!PMo
zESN-(>VVLbgQT$_<!Hg#4JJVdgC)P{FBFffj@!B8kE6%ZV|=33qAQpXA@kM63TE#5
zGJaCRJ{h*TV3##BD?0GpB^7BBCEHsfO-E01la0tzVPVkJEA{?mT8Uaq0Z80AtFCn_
z?3h!8MTYdbLVKw8(-ZsHJpf~5N%|&%Xy520fZ~GxWVi~%9rG1F%kC}<CRhkD(?Wyk
ze+Ee8=y=!&ETIljQSZU#&gS60(#EO)TRiqT&h}~c6;1OyLP*TJg_Mr(jVw+_wUi;Q
z>?e-WW53~Vtd3a!33v}x$-cqdbs}!At#!sTsQFA+E`98TuwIsjjzlBN29o=7s6;bo
zO?PI~LD%RI&~l)3gW;4WE?QR*X%QD~l}&inL3xx#8SH=N9!-7iQ$J`g*sLjY%1n?p
zKWFT7ii>7Lw=MSy&M1P7lmhrUYfdxqS_ke-*2pJg8QXm)ySiG<cnH_l;L0L@GzoIH
z-ZQwV1}Bvp(6iCbVvc$pH=|x#RacwfIKWWB%pO9Guh|sHLT56Nr=17)|Ba_ml6l70
z#G@(w%fclZ7E(~d_$nkcCm4$pho-b~Xav;DrbQg=IBne$2~7f_b>rXs>x80K6IWqU
z*dS}_RAm#~nM*bdO2~R`Mj5=G-N+oM2;IRtzKl>U-iR&NDB(1lBD6!7fuky_7iqHr
zCmzWyZ~$p2+SA=}XIliY!`)*31||EZIa_Spn$<~bR#!Buw?qmBdwMwN+Z2@hKe)fO
zV^dIIf+_)%FgGfMeMiJKMJsr1yFW&D&a4+R)e1d$inhamc^HMzf;9lEPCXncIE{kM
zWUj8f!q|bq;Zm=P1U`Bs0hkC!X}Rfsp^aM*dBj+>pnYhcan#hdYb|rWGiOyc;Tasa
ztxfnz;XDC4<)L)O093&C;8YRc^qrR9W>*UkbV_lc?GK0-+r{&-1Zh9UF-4m>Y_i|c
z;!(Y<jc)5h4gVn%-AF8_Sy|PrUSreq1h&x9?!<{v-zUyatkm{yJ>;FhM@w9Mw1n}|
zG~E>b&<bhv-;YHl#JdHF;hC&Mr^{frL;~`KH}{A89pM6<)l^^*!u|G6=Sr2`NQL|G
zf+i>X!Q8w|q0aZwIrjeGw(;g}u|v9aB5u-&#L$V#r~zkA^)pE^;%<szKqd=IG0J5W
zgH+a~p%|s07^U4u4aLx&Kue)t+2b<SCSsf$`q4!caNW;Uu90)6Wh24w)!**|H;ayV
zu<?y*vf0vsPS6~;rz~V4k>~jVtkj-zv@o86DVxUUW=bV;TbTjpr02mbNbEd73-lS(
zA8{@JUGw0Q^x0t#j^F{3)w~XSEAU@0;QFIZBc$kwe2<lo_t?I$XR?!VhkUM78=OQI
zoP0@!ZjXz}1%lcuWzoy@w5GDu{Tp=Eqy(dQ4_625X1$cNYjJfH0U(7**TIUJ)xBIc
zgk>Bt+i<)*Q1ag4+ZCLxE0}Mkx6UuD_cmAd<BM^+a#76TwRD0~kmL+uS`6ncj#Zm#
zrs(gvXtoA#YMHI{7`jv1{&pf-H8N}KOBx!rf2tny<fCtJA~uU54SMK)YYjJXfO`gp
zMP(s}T$_gmU9T8jliuCG!y;Sfh-~ZmI!UBOOK)=cli#x|lubEU)=ge!xmn0RV^Nr!
z9aV678W$Wi3qbon*D>en%5hsF_f5>#8}{6Z=oPZ&%N$nt4Klz^gI2AK6Qpkj&^0mc
z8b_G}j^Si>f3xq5?Zn>y#(7N&w}K%p;`3_Ms+)30@L^#Omj!7|8=eEB+;pf(3(@`p
z(qa8$BiT0F>6U!G5YZ^h$TR!~jWC;vd-VvN_<PMM1uw6cG!h1!4pzkVrkZIxuwY*}
zOwsv5M-o&>aP>xH0YTh}XswBG3iinyQ<hIgnHoLVFsWLBsGL6(q8@OEjX}?vAyy$b
za&pDhRW2LdX&>j<%XBZE_V%W~Ttm<HE_*n|IH-jgK2)g57Ak)TO^V#^VQ@bmw%d;6
zpl3D^Bq)ux=ZzKDTlCr!eyMf1KI@>Yn=B}5TFhM&ncPd2;k1#&7ehT}3iSn7ff^@c
zfx3#G3>qP*RL1Nj^V<|uRGnRE4V4mY(BwB+7F3@8e1_&zyhUo1AuJ=tdTPzBy@@W-
z0K99B+B}G#tPg%NvDq+a5s!}a-RFUzOd2RtNd?g6o<?EaLo<1b_*ED0W;5-axt<8`
zS5e$ibv)u}30GbWi#Uv%@hsD&5n{W>47dv4=>{u(V=FN1R1A$GS|1f~jun&XX46H9
zKipB-C5r^d9=A94;f^cqThiIKT9Z-hV&gPXV#R%aW|q*uTI0SYeO*H4j`}fEvAk|C
zh!?$Holg5N<r_J7q1URfQCj6<QNqv`=t=@V#sNxSMU>vTFdWBiO`x4b6-J!G{+Nl2
z#_Hu!X^r|tz^>m9F``!wO;Q%r73x?ed*rd?r>~*d?wDzRh+8d<73aY2YjC*8O_qTU
zIm}^Bt|mJ8*nj<=AFtmbLk4QlvXzyO1Z4-hi>IodJ#_#FkvGfM{Uim2rfZ&F&jh;t
zf|>tc)+q!~^R1n7Evn7Z<*lOutL5$KRfDSqLGiR$2w?zku|`y%)$S_k=(8GyMA!9M
z-OOYg-?dnlxf=Wn<d`_Vn|NB=Vkh-K-e6+K{$hJgWU=&C8;s%vuOZ<}eIGh%^H-K5
ze_xo$$aJSytMJ&;SErhSF}aR(z~RU4!B~%xU`aa&mwP0*?gdTH{ZMdH^|IWG1S~6y
zrn`kBC=3fqSh<MbL>woc0@U%OTt}?js1Uni-k7CEt=jx3Z?-++E)Cw30V#nG#*fNj
z%#LN5&>Pwr@-w4AEI)E8z#GG_8EGPJ)btvmRTcO=>{LlMbTsHFaZ4u*3?3sL1*lpq
zBCe%e7*PYv=gOcopDPyu2C8wUzVj*bnhs+VaoioRr|x^gXm|7c!aP2QLl3lN=idG0
zg)8U6zx6iJ9_<NGu)P|gP4eh(y}vcmiU>oEHWJIIcek0AQOM&)VvI-hMp^<HPn(Ir
z?*Cpl6K5DAxtTbPdPmK)anw6*rp=?C*G$`wdVVu)62XDAk#-uvv9OW$6~#4;w6m!9
z_h#Bb)C-$wdnh1jq@721kAAOz&woGty<F-2ufKWz-Qm&izyE%Gxj>5aNj_es=i%^w
z>kL=F-}Oe(?|=6p=bzEt%_HdgzhU&(<GaBJd~*_SoF3oJ#B6U;*^A(P@Fw^id<i}V
zFN0UX+u$&G{MYrx!IOwWgYwclIQ9JCS@d`_`;Y_mA&F=eoJ3Ew!_O~KKX{6|^VbN3
zVwTb$p7BCUTW)o|^*Z=PTNzv;PMI^sUmK*3z<{GP?FV0LTBL}@YXwV&r)2M!@1he$
z(jG_3#+U1_t1wh3k{8erF`B>lj2gL;h4d5iPsKko{z=03(J#YEarqwUYNLer{^Ii)
z8j)Qf9@Ev;1*2Z!PsKko{z?4dVRWQ?)`BPM5d2H<-am#ueZMgf*pMqz{_>cACj4{C
zKL`Btm4Eg_Z1szXtq;f)@rkOPcR`<g5xfX~k?@x*^ALLNRrFK~Y@QkqWR%;#ZFJE(
zdf(1V+9zMFt-WPD<+luE{+7Y}@h9V-ihmORnfaHh^Wc*o5t3sA?J~Xh@DXE)?DvBA
z2wY7A{p{-MF~7tZEPr@C?G@`2M%c^f{m`l5%Z&lrZx=)V<pvB8eC4AWlaJiz>ix>;
zc5D{>Q0Fs3OtVhZ^3PG@9jgEPtE)fRp7*mq!cTZTgkgk!4n6mapUp=k_~%N^qnC$o
zq6-H5`CBgp8Xnx(TW`AhYJFgPOBoyf)y`6{FY7AVh`sRK+L>b|f^+VaCqA?T#RuZ~
z=!rQb%hxux0{p7ROTEo!ix67|tq#5*RFAtH*LCw~u|kF~NFthx7K{F}wsygB(k^%s
zU+^Tp;7NSJ;gK(RE_+nm2h}_(ix$7Hz{ZBHM})*qwdky2tjhEk*!<hHU4z2ne1S^0
z7AYj3jR?WaU0tYE`DJ~}hb-_-oHC>LhMb2mVKiF{JT%tDsDhSM#}B<vjbZ=P81_%y
z!~Ur??91Ezl=p-~pFXJ>&0p5ngF|384PaA;f*33C+6b(0YghytEWacBFJ$|Rp>A(t
zyDk??Hs$&#MeINPLC@081I`kERM**&ESS*9?cb#cUaC%IPW)erHP_I{vbtYeWd+td
z3F=R0ZS;P^Unf2t%GfATN2tq{-hrI6N(u9>UBoHcvkUW1k6=!`<d;m?1)csxza_#i
z7<f01Cr5(k3`5Fg$A8_t51TSFSBeiZT@hTebzLazcS%40MMLMnWq@mf@9}EkYil_9
z)<|5VhpaMIz>kFHs_W#G1(`X@WQ*Xz?!#Nowe5Qkc6`^xdSUJ|yhHcIDy@~PBkLi`
zpku{2bCIEY2(O2>wAhB%Od_F^e-clp=yQUuvTtFkRVy$M*#tcetCdMsrb#`$&=#=P
zBVv331Cy@&AJhbI;1sR?&kAs0AE7@tSKdK8O?iw%Xl^~9wEFN>EZ}@|<xLt-R?dN?
zT#4%ybR!P$-aQ?|;M|4o+Mt&=>{oi)QzKzS!rqG<nv}(Pz4CKbOqI)5vao$vi#QT+
z_ROj`>7R3G*Ca}nx#eYy*2-ZTj4?zyVm*zEVhTT4Mu-Ra^Kn|j1)CAW1@Gl}L1#?3
zh;uA}3OYE&2p-dvEICqrg^h<h?Xg0cC<>!4mQsp5wZHUA9aLvA{ia{y1QF-m{tUCA
zH9f-8T4`;XoKa39PatkPt*L2e6Hq^xyS@i!2ArC=IFCoY!)H(4JbQcc^x)*x0lKUo
z9-h4Y;l<&}!JCs`58j=;fAR9=$>V1y&tJTG_Ou7(ZnrDo6m7<?5Go8fb_;WFMg94V
zk4Qjt(R{F()$BAolFiVBMM=mOoeC2ubNT0-2)M8<n)FqDZ7mf?x^AKQV1VsfED3}j
z^iEFFYQLC}EL!19t@alP1pTC#UA!%xOtaazh|7tL(_Ti2hn8nM_t1@%Znp1jVR-o%
z_yG#i67-53OTdd6dBUJs2O4OWY2FiO&cyAAbko*ol!lj@VM@g+tE3=GwTxn8u_>lX
z`H<EkY#H}drIk(B<sp9t(k&Kk+hq&V)mg;Tv`WfsRu?Rlg1rh|U(w5oLvj&Aq#y~<
z>(UC}OzUQ@Wy4@tKWc9A!&=)PFb@5y*yn4x&(~~A{(o(aD%CBhfnV+WoA7~WF-ByN
zE&IwV1l6w?llX=fR->+2g(y;KaMP<8W*`)GT2i6zX^WM-srP}O@Uam#Y>esPsWBnr
z2yR*na>@2<3`N^AH@hb9<pLH#V;<rFvgt@BjYje)Lram`aQ3<XUDQXDN*&YGs3pq<
zTjk$sMrSw9=x?l0D+=ID75SoiX6Cexu1ztgYzwS~u<7%06X*;PX0+or0nKPDa<pD3
z#JY*(&D9kgr!i`Aewuxl^K)d@*%mCz*(PA~bD7oZnI9~hLj{f%1sXQBoI5CdbKR#E
z1!m%YI5?H)@Dj5R2p9F%$q8`FKzF$?Tll`U!xLPTt4p!k#y9CH8j?YS)s@`^9Cz5(
z(@ogI&z&q?o=X&HO6Tg6(YR{IV_-+pSXjSnks=Rv>wBJhAvih~5sQJ9^f@XQ8<QIv
zk7{(!%<+b$c#aECqx<TK&GzoT69+zz+Vv<cxJ!_k7!su-wsg#CqrbG4ITC*1A%+@-
ztE;XawEn%Mn=vP@T9~3DE2LQ8r)ime0$x_MqFOnRFII{iSYFL`(05mga>Y&wQ&mJo
zUT9lwF=;1CxXLvk3ng0v=%y4l+(cIcUtc+ktNd^E$~a9ipfa4PfeA+m?*{VR2-M)@
zz+sp55R~*(?A@o`t7T;Al1S|~8!-#WkRSIg5-!tUQ-iM!oE(l>-MKOGzM*)WJg`J1
zWFRR+QSe?<5MqWx6~Znhf9o?xY_QszL7lGWaBil3dfD_i#ExG9CKvc?bdOy*pI7xt
znqe>+7={&m8|OuAW-M90nnkKRpQAnDEEcpoxD>N4R6UT&Ha6Rjm_*C^uxH8zj?tEZ
zF$LkXit2flaX=t!_axf)Dsl9zv~S3;-GQrKDxK|Np>=lI6LJyf(_OrhOyjCri7Tgv
z)N&CK#M>@;K`y}0YHjaX^X3R!qhPHHqvibSO%TnSNTMPzNkAaP$J+BWNBW0M@H9g+
zPKT}0zz(>lRv0#fB?~cJFxQMe9-Eq5CIDQ;L<h6Ts4+L6s0^D(LlAp>8hL#y8}PjX
zn;x&N#c(zCgW1~JjKAp~IP@%44>wh%O>Uil?$~J7Y{HvHRp8~3aT5cYwLGl3_T!vk
zq;QYz#e-D0H#H4RO}kMeirhtvgR-pE)@{+|paAI4_$Ul5pLsJ6STrc_5^)l_Eh;P*
z-z?Zme{F5-$z=m?6qE*B!jk1sU$-2pg=Z`EdQK(<3}k`<v6|<rv*4?D7W7np`~u>K
zasOzDBGpOic7dKpTQ?nWjqqoC$8UZVIIU(i3L)(&;QYMRzoqXl9S2E(x%*)7kg*X5
zTYWctp#!h0aom7rCG{UL8s&$(lOn0^lE`g?@gvI3v-*5G%CzVu>aD}bz_BQAABzaE
za6Rg+!ISFf7_;Ur3>gV#s3%WvANIl14EDe`SeF&5z{>xE_t$&Fl}}lf)hM1@?;#Qg
z38PMtAS<CBZP*l<2?%w8=zyxQN&0Ce%|B&jk>eNXWqOgy2U?X+R^rKoq}uUx<t&}f
z;PHxfu-#<)VGZ2DbT9U{w(cu<I~J}Trs#qSClYytL|V!R9mHZ;2WmNkhNAnT-#Q5q
z+AqqzVL<}*OD$ubLWd@sP(_l9Gv3HJTJ2_88NCL$rR5I|hTH9OsqIWHWi%?d`(H=l
z-o|ey@y6HR=l%YZ{s#U$-KD<|=;k@yJg1wj=g;Bq_I=8>eg7%_eGWH+=lEm`O4y*E
zr}&q$Z4DmalP7(;dHxJ;w)_17+&sOH?>v7<Po6)0f;Uf})6MhePmlkfTCv|ZHv1b7
z@zam*<7fK(&0YG;_H+8oPXGAtckTxJQR~>}27eDGc-TF4Cfiqy+^z+{jNg(Z>8!5Q
z;h>7PB8u9(%|AQ%!;<~D20AjH*D1xRC^`~J+phijkuQ2z83L?b{`KjU3Q2`BLr3R~
zk<a~_BG6W*ymrWEm@KVXEfB?uzk}8pQPs)>bsA+cucjBU&|c(uTK@2M|K*CJ(_|>6
zZ=RsE6xMxaa-k3#Svm!I_H4rYgA$;c$3I+57@g2Os4u2zPg^Um^t$9DKuphY)gleR
zLFfl?I94WLaD{mLuv;G;^>{3vF!)t3Q1=@O4Xbw?9QBBOdPTUxd`+oHd7ooIw;p_5
zrPQ-$f6lW{kcQVADcu|&ch^rj=O8%v8S&6m)jAkZRWZs#v$opnU-uMz2fF6N2X$S|
z(&?1Cxu;M4OFr#%%@%#n4KUUIbUa5-W(26gPXT|DmOz%@qzbl9%krr^l6j@7gaeqC
zpVGbQ>@5C<+BCo4175QD{2USwf$YJ|i>r$~S;0y@$IsE#>nR)=v5U%LTIp$rzi>>L
zWK^YzzIYAWGm!ijxw_ElZ(!orDVBsrJcKRvs`!}|G3m-#HkrW3r$sS?&5Q-HaABUq
zI)e=cUalC~X$4Ur5BLzv{R0=&hm(~mf!qkr9G_2Nmak-WdVYv$-#D|kZ#8@guRa)(
zbLf<8Mx%2ML<E!AFApwnGeGdYe#c7cC3+L>!7h~}^wh12+v#4I=;eq~aoF4Ory_I#
zv@ObSRqF1NQlYp*EJOQv-KMO2H+L{G90zFJwh<nCN3hQw`*%OsZD6kvX3TXMvOLGR
z4fMgPgtNvT11$Xri3K@x4?T5mE=PUiUKJ7m^wuK_KkfAj;vxt;ymz3lQ7qZx6Ash}
zp1ji6a5%fV@?5?)D1@Ll06{>$zgotk)UN!`d5z7fu%fy216v(v%QcHcN6~}L87$<e
z$4Yl&#B!86<}K7Dlk=te*l0Cx?zADHoo-Mt6pU}~jH!;J7u@sFKL9yu$_Zz6t!NQq
zI^8@gClo;~S+=Mvq60jucC$U+wl1t@o1Yz1ICdwe-3zsI9Be<Y@Hj`wyUpaQtHF1*
zjn}|9K~Oh#xxnbJ0s2q!*mbGkR#*2~f_WMs(xbkcz#Wt^*T9aWQ#Jqzy@|2}f$5Ke
z1YdPKnKh@1d)U)_3Oo-H^sN>tK@YJN{jh8@Eu-|PbU2pd$dtUjYMl;yy)X|6O3UGg
z=rr8skb>)L2i=6smse^ZMdrfFwKam`%11qP#a)N-9=Q#9bqHr@JodF4h%yd;LHtBs
zZ=9v*Aie?{#Rod>Y#_uXZ4q%9kF#V0cbXNQxIsZ$R)D1H7ZW&xZp`BPjISu<0XoW+
z8yT<!<xFYZyV5pTPgkjD(6^AF-)6xCa#fQ8j%Kl}SxN|q8@LgE045L4WANg1qks<0
z>I=T1ik!lRIN6{A)wRh3yYa?pe4b6!H4<`rwGmJLKv^Cq)G!&7GktS0RT;He0o{D&
z?)Wghn4N8);eom=$_#py+j|B#UlGK5+VSucs^JnmP+~5qz^9Eb>Kgtae*Kq~>>LiR
zqHCsU4IQ|FGl_1o3UHxXd>)q{;VI<Sm*<(eq-|ye=37bQs?D@)3b5PB#~c}eSq#Gl
zm4J`JbzW5I#$aVu&{%E&*8r#T6;me~V(1jINf1@7>SCtqMVERYP$2O!#k2DK!<nsy
zn{4X>>BYx%V-iF8DEyNN985!}U?X6j%3DMU(f8-5_@8F*qf<nU@b+^yfk}-5uZ=iQ
z&QOAY*C^jm!3gNywh;H7MrYb2+k$zXp>$(ooJ}%wLpE4=S63S|?A7y?Pa84vrsEW5
z1>7LW1%BnzMm9-{4`n<%qxAC_jbvh;I-dx|U?V*}MU4c`D4ItXd}*eUyt|-KG-e8+
zEDT5S9KkofoKInE`T`C3xbj6U_?wwP?c1+Ch7N)~zw02;Vx{RrVGL|9vaIT^On_<D
zcj6L;`?I>Nv)Uw+NblcQ#hx-Z;-Cd2>l!?K`0y@$tmklW&{-i;C}836avGz_8eOvC
z`Spjbzf_f9_FrOk9^B3KcH&kE&SGTpiO0jTsHy`R@>}tigIh4~XPeXwKa}aIdaq{^
zdR&4U(=$rBsWWNUhH6)3f|>c9n0YNa%%1P@&A-@yKH5@f=J-=oY@VDb`=l4I-adQt
zYVYNtwp4m|_^i`LDflzm?GO6f!3X-?4KC>Se(;`t9|Ujkcd!$Dru&D%7rO5UAL(~1
zcuBw8!7KdT>IZM>{$6lMzq`R>N*@GI==VYJjD8;mC-}SF4}PKFrJ7=GZlp|&pu2dc
zJ&kP2@XzR}*CR3RrZPe6`OqMfNZ2b=NV~9Ur*N!SIp5n<mMWhh(SQeUL=n8FmpwG+
zm#Lq!38j9qsU$=Af+c?x-z&<`aXC4`$>2k;*-y?ZIMbqk9`s==^#lWFz@xYJ(K&Ee
zJ+!knDbx5XqFp?;DU9CX2ev#q_xdmlCJDBQKQX5Aq=()*CV7&M=O0e$5*DHEhZFG<
zY)vE|=%H1$twH)BPA*RP^xk7h?d#x==oUk&?bhsB?uCr3!CYku$DtOoX*$BEVaGS%
z=<&zeT6**cg|O}Y@Bgho(mVD?DIM+Xk?^;s2K%*-1_@H??JGNiT$8yRjfazuI#jnt
z*U!C`zk6}L;*b2h{_r(Axu~OGPaPi6O>X`5I_q+uJ0XXDuqsGs?sE(D@mz;R&m*c1
zhK)eC%tNfgTO6q2l5}k~hwafQfsXx$+sI{FCZUw-&6H-Sa*@^Cf)-tvxyoi@ZLMum
za)}je+f>xS(XsA&V>?$Z+8I+c|ESsOg33}ra^hutQCSR$_Q+Q{##_IKO)@Faht=8|
zI?c8)xhtL)B8X_Dk|gp&kO8S~r^b=RfS`aV22E)22z@>JkI;*xJc^Ie$>b<G9{S0~
z2I-bXj$yp95kNW)wa81=#;_(a9A(iT#b*y8%-#QPV<Wk`lDWlX#bmRo_t0_~cP7}!
z@Uo{}*K7rJ?CgaBZp3LGESsS^nh{D1;OIBWDwOWwu@dnFkRL#ZrV%buxUj4C9j;n+
z?1$Yk{-93%=0yLS#}3x&NI%%M4|*?&V5$e(;=!RI#_Hk2j)yOaBy)y7J7I0{&%k^=
zjebzyM_xb`HfTTHWVYL8+S=;KbkfY#Q4;b34KWJzm+i2h6`6A_35mci+k8!?&T(OR
z$FMUTf_+oVp0rfvLf7rN-hjD9A9VU_-mE$GjY-w}FQ>oP>4&so@8dqjPhOfQdMG*l
zRWqGNanXs$o%&{C-MPbQs`g((JzL!#={?bV{(5gyM>SGk{%qelQLMo=FTd6-1;6|;
zw0t#A0gD>bD5O?n(!<b`&J(Xkd*-P3oLLYcpB`zG{az^2^o)M1r`FHz0(vad)r3@!
z4nwTq$t=D=p>%+9zZ10Vl7@Zo76zrT8>vBZb$8=CVqKfzxO7F4bjPj=>P8Kr5@hmh
z<QpqQHB08YRr0Gm$`BNSB~Rp#gMEs^O9}(2U>qcCjxt|T1&oU?JtfF3<4ML6Vj+qC
z2Yv}UiquGN$=S1n!D^(mJh$rzt2i?1hEVCDg1p-XSDJ)NBSx{Oli5+Pw~lsZ<P6=^
zyOQ{^8_uQMlqbhZEPDi;gLT}3d}ykHiF#^ZV?Ecjlk0|eEiH;{2dFDIHOLwe&C4y$
z;Jd<FFL#XUDZ<{*OWe5%`uNW+m=mr6Jgkcu4Kq5}h}WA_fDU^Kk{QPcy$#9H&&;Lo
z6>VP?GJidZow8_nYb#OLQ3`b{Je~?N=t;p7F5Of!Zq$Prl)}6_je&LQg~~$L4`7KD
zKI<Snvcpu!k7V(0>-tk0!$tD#M6kN1nzqUq=?i6s<onK6CP+@YiD&Ll+JFQ1EkqPl
zBuLs$Q?jk%j}AnrZn&}ZLUS&d6t31?+ek^pyiWThZ&Ya^>n`$94n27Cxr|X;1$<GB
z;kC#pRu#MueV3-PX1tTvoAQ$=M|V@uz>hv<8Zt6hHmmyBFputdIy+T+q<+I3F-M$=
zMwf0)!y-@#KPxL&r7E7nGnXh5X>}+ggW)u48ah>xo^Glm_&EU~saJqfp^ne0V{4M~
zm^X9vrYb?LfID8Tr*Wa`V)aY8uQwYs$!7m(Bz#Q$={1~Nbg@d%SDw0yNCy*|XLR3u
zY-4;>^YMAchTqsX=<CK<?rP@I3~H-a3>IzOq}%$*sHE0zD!an4ol(vh1fY^HVCTr^
zz8~nRr+Qi27dNL9HPuauR#%(3#OM^MHuA%h>ayk_w{v|1j6a7N%2m_7s}vAGbuR;-
zTJw1x7;7)BW`!DoVNImFd%f~%!;l$rUYN12as9|zM)iU?GlGoEnXT|r<?GoKxoyu~
zPbmT_F1MxRqGwCfvtlyC9u4Fe0f5s|2OjlV+@j72sLpdLeM9?0H@lqj&0=!7gJr4f
z&JqEY)kaX--V_-XukPT8?1oiX`&=zqO#?@^$^%QWG1uV~#He3hZOwjp6!a|(o2_P?
zI$C#R3bo}h(iE~xGe`gauzZwjTgH;2S@-ThyN}9aRP9nu73^A?kRl9zb9UcB?kqpn
zG>WdZO$h@~curbW`awxT3Qkvjf2behj!cpdt^<t59RkN?UW2Qi%BoXqq2d-?%bf5q
zwXy{VI9eWmx$OM1Kh&!WrE{1^nGPWU0!LwA=p2fd5Y@JWk))1$9Fd=HbGe2I>qCJX
zt9Nr}kM7#U&1}431<3unN?lIE#Gg`&i|ZcQ*%#D}{XEcHkZ5JIHCr5a(hW$J`^uYP
z@Li-Qq2GLS8^?ko)h}S^7mBJAvS5$#*cZ$8eD0e&p5qKObK2`{s;x~#O#-A1JOguo
z)zD3`N9K07k?*6gZiCWvkeOWVRjX0aNrMV$j+{DYKRA#pv&kV7^yNd2yZ}#DF>Ni~
zXS-$SIy7humnx6&X)i!E=+ayd?(V~5`m_JC7gV1<bY<M?_xpF@Sx=bB5+i=;%3^w$
zM<0T(DTWP!uwvKbZq=@N%D%SQVh-)QJAo2c0Y7wY0XRaVIhmSV*A#``i=c?vhy1__
zen!_9AF{xHk_M+~@HLIRQyEiS5h31nNqzb5%?p?Y<8%`~3RO22x#%RC`Z#-3LR1e8
z9rh+^G=Y|O+n)oAlYIitM!eg51jT=cQ8^9nnh2J;-g|VHo&!;tC}>vN9f!`1uNg|Z
z_2e^lTmrVz&5o-epKx~h43TF#k8b;id$ZZv8vSghU()1VUd5;B%L0zz&s8suWOwog
zdu@KtYah5zdFr4)O?a9L*N-#1QwaYj(JCaauzC%YHl?nuZIdk>ihbT%dpcsn6$b9l
zdWky(1IQ+sE5eeG^X#0AEMAZXDno~wIh<W#pB$4R$_uoFIhfZdrf?Gv(O9mL_8x6H
zIPJ^xY5GN6eh=H;Ox+)p6O_H1B*v>TU*_8iFHcn=r(D8kef^p&KR%`U{_w0s{kOV%
zm41lj(*vv^31rG_vInzPU%%lJ)#bB%BJR*kRNkT;kG^NL9rsSW%?Yvqm7>c)OQ!c^
z=7D!;xbkEgpU?Eo59X1wm7z=Bh@zaG#oRr0JU-06vQK6<DLzx;SF%N*tD-ok&t=o;
zfh~zFw8T9MdYoId%Xz9Tf7~Rt{jq8L#=OU-waU`dViD}6(NXVxI{uiUsr@-x_U;#7
z;qQS&y*M|A0f)+>tWpbE9h1|ZqLIB2vHaEfVO8env#9f+B|5}Y%|UvU9*;cOZ)+Wc
zIjq-vvoAuQ^C@lk=#wig#<xa0wSZNZ&BAkY&||At16a1P(L-l2XeY2#zyJd|8TMdU
zVxsnpl-*0J>NzF(+Un329F*vHn;%EzVj-~=4$>u-ID2U~h6E6U^;9Fe_5DU50~rQ=
z;0Fif>Py|V@Qr21pL806Jz$O&>@>`mv07wks6)S{TG;rL!uZfyIiu9<`~&@<#2PQ4
zAs^CQtp!@s=V?u)QHU0rR^)R)D*y$DH2>)n3qe&sI8+t>{)rVg_Q95`Wlhm_{CR^h
z9c<sn_+P_YaQ2e>H)lAvwB0@z)wUp5TI|);s@FR?p}jxLm*;C%d>5^CMU80k0>jbq
zWqQ<nean~Z^o8wU0&z^m1n+5?L`N)gI0Q7*Zao{&dgBZ7GnD9<tEx0*PnxvuH_)1?
znKm!8RvJeOZzUsdq!Q1wszTd5vK=*+<%6aXcwcnI`_vkRuwi*zen?5C3-vM*UiRQa
zw1%<-POQi=$o#uX^H9i^BT{YmQ$N@?;VN*yA8C~AR|H-~d-|J{kI0|Z?-%~Hi{fLd
zVd5iHx%f++^4~NEf9pZt_l?-T!czu*c*y6mtVH+lH>oEc1xoW<JG15`)!=hF`hx#!
zT-*?93ac}OiVJzhtCT@NKBwAI`ZE+4eW63@7rf(UQmf!QNS!;JG~qFOXxftBHUv7J
z)O{TqF$zZ8wOLe(&G;DWM;-qpjozlgvlML!PEyBk<`>MQ423=`*&SSdK`9m%5MV1s
zp--Jts_bg(e~~*%1>R$_QU$YDc?u^_9u=rROGB-^R4Y&W;D_=~`@`zQr^S3cP2G$l
zt(kov2vPd9_?)*>I<xKrd*4p!%=&KDyzk8R3~i=+p;tt!g^}N&Q%iyVx#M|Vv(}H-
zDjWO@ohb&iC!vnML+%;(G`dGGe<+s?Nrb)@haIVF%Xq<2LkjI=bA@dWVAh$3Mh29#
zy&BCbC~ZvkUzqd<hCv#3D+d3dkY+&0KB4P<LlcQ*5sZa$DUK(TXJ}uJMh9t*k*Cn%
zqZdFSf21at@(Ep@QK_y@Q~tuh&gmCoMWG*TkOazNY8J6z$U4=M7Y?gGEoRL&$8N0+
zI@rv&kysU40r%q+mN^#u8?D9XibDKAckk5Q&(LuyzoYv6jR2FLBMlP5i94N@cguf~
zs+#?r3LqV!xR=tK0G9QTPUP{F+$ihRS4UYT$oDyR23^wu98Pfvnv6;SZ_wY`MVgDe
z-ZcJDv73+1kCRhhE9<A!fKF|*E-U^p${S{e|Ii!5fOi=(S<=)VZ93tcF(KKKAThP|
zwxX3}n?svI<3%IvifV%n1k?76+<VhWx535tx?a?Ss}{h=Fk=rMNb32M-Qc>+zfBF5
zs#*B7L51lXEp87#U<_NZ25i`w8h}+8PSnc{ha##HkDV>O^cmxrVVg>~A}UWNedRoK
zWKu&4`$tp^QC*qk^K`)$Y-mBpJSD!$SA0Oh@)H&u45`RWZW+*{B}|f`N-x~>dYD0B
zRW?Q}(nVKSQ>+ce17SoCRmVIkp%XGIFJcS^SR<9GPQ}%!IGkL9i%q{~+Eh`U_#t!w
zWY7;Qv{qCV!_i9=ID>9{ckvmPvaI+FzrVEjX6qj!BSXzMqqoYjtet!h``k<Dt(Mb5
zx@JP<c7NYY=B0|^m5<V}UXXEuyPJrhjzezkJ-wu_u6FgM1HPpW9=`fj<AuKe`b@%O
zM#i_ezIdV%L0YYKmkd={S@k;VI8{MSYduT47Upg9QFTGz)}7tG@PBNcxSiFj2?<xL
z=54wb(;RWzY(<P~Byo|@bRg$-P}D(L;|$Ge4EGQ#{ZgWSEA>08$=hK+o&{5TIi`2!
zb<{gYjstz3SLkX!Td9kAa+V-O)0D5#H;gXW9W0)INsw_`nT)4=q1?RGJL-<gRM$`{
zy82^5_{-%?V7FgM5WIyQq424=<xFs%rh?#?;1uuzN+WKEe5+p2RZ`3@RuZ@XuAxp>
zxLPXaud)loGyV!GrdO1*T6h52{c^u<v(J}g@}Eu)@-Pi1#W`^i6fU(6$hGb80=|0w
z9QU(uuzQsUIf?KnUswiwo<ad;3|vlGg-6A)gn6rZvNVpBghY_#=CB8M1+aLb8fgK!
z-{a1$jmaL~Pt%wf({^qeXmsJzM@G8GqN{dhHG(3$PQe#uxCf%~6dHbW`iqH-q|p0N
z)Mk1}UUynltq0T2(nL?4){>d&aAZI=f$4cPxE{e)x?g+t9kYvz-M_};WR2SCy2f7&
zZVCKNb7-#+!^9kq?QrTM%e6HUC0NAG(kHYwJSF0;CDH9_yRqk`rwbKgnaG@?e#HZx
z<C3j89g6OTB-7b@>j?Ov+}duXn`Zt3;Utx70iWNT#>jGKMVZwX4!~o!ImhJ($BvV7
zp1;rPGo8&tWV4PpazsUAvD!kL+-x(CCHDx$Ejhw|Sv%GV5Qiss7Twb?^3#GiKhz1>
zw_MVDRtsZn(t4Vl)__lj7j6#cux}6GdI)~P{*o&{Xitv-aR~xv2D+mrW~-TXxtVo=
z)1&|@iGZIOOnJ=!!>Px#@}SmIW@;~XvtBx4mhB;GIkuH{3TRl?XjvL%SnFYTcU@Zc
zm`q&l6Zl|?-&Nel|44UUIvu8JV*5-J1)FJYEps2E%LdF)=)ssk02F04G$P@L2|Y|2
z4=a9H(ZfnVoYh8DeSiR6&aHsTP$XYAL94dii4B`PVhGpB@`-g>!M2R}Er`31F7BRq
z_6miBQ?s)7YG0l)KGFKH)_%fR^Bf6fO6;GQD*h#;XFM9d2&;`aZCMx4Z>ErbWz)#o
zwb3-B?6?H%NSxzHV8{wF0OvRWBCX=Iiqb@PyS-hbg$0`bjGY?7xnzvB^KY&k^N@X8
zfDwMdd38(}B=(h||CR8!wS-Gfy0M*frq}<hrI_r};_M$aOx}-?CwARajSgx(J&t;x
z)ir{9lRAo0&+!71h-Lgx3tcI2Ss{GAx2F?&fxUi)!MX#JH`996<!>0(t9*}Gx8?5~
zssQD68Rv%eqwH@@3govpRINpDfi_^l``W=Md!xzy1xZO&Khh1Il0V4gRO6OLluSch
zbAS;#8FiTE)8qHGQ*e}vu!wM?#aKagbggNDQniV$MuLX=4~?zoDJ%33^`;ywdlPhI
zFe7w*Hjc((Zhfb7n-#I|I|C%{Sd#v^j-c~<va;x_+eppC1o_x_rX$tA<aFnA=(20i
zD{t-PVU6*q#zjeZXZ-uQ4s5A7Tc8>u#ZFSFf=K6y81&%af-XIL_1auvngW-wkKUSu
z$(#%2V}?k0q7%~dS)CC^mAJ~2@?utZTu<CzJa3ENHXluCuQ|<NK=uf_%K1qr2peQ>
zp2{0kPC8Hb-GoZ@5MCde>lWwEiLJU|2U1WTc~ur4@F3@2R%!Z?pNp%S;i;V~axinR
z>g*hjt%zWzZr-VzmoV0~Lqvk!=a`@?#FbFpKd!s5?1ceow59hr)L#cB{;Usx6hu9k
zT<cy5yFx<?T`FLv0URsdlIsRy?%?EB*KjbHd1U}cLf8*IXOqv1&%Vct?MWRyuoZo#
zi5`no*NhQ0<{R7#NYqZxwi?fNf-UoGr}1n%*ikC7EqJ8q8<}p8Jj}2K6%XmvZ7i1)
z2f_B1N`<?J_Cep|-nzG|Qy&I!W3ppt82#jd$-dKnX!73=@XoxjGkCB&7?^MDns?xO
z>)~MM-fmw%yNAzq?+^M99_+$LC~YUu3F@`M_RiMe{{5{7`mOE2B$<*Q^zUu=cei&<
zCfg5#{{8LyP^m4`j6q=2;1o#>lLx<(+EtL@B!+4D63${3jf|9b!rOhNAnT*$aF9g=
z;fq*&^hOY)j*XXsPD-#;C{o?);m&-N7?u&u5aSm?t;izX==*Eh?4ydZwSUG#d|r)!
zZGtIR`SiMKda?#Zk`EI+O4K7h{Ha27D8N_mX7b&n`I>IH5$7@<8I<68{qNvnd$92v
zEEeA%^~1rVM}`0B(ZJsr1bsfq*X(yd!S(93SVdo?Q&ss0KVU?PPcTHVZZ{rR5Lzk!
zFjbx9D=n-|XAMrh78Q7q8Tw@e-$%qPsu2nciYulDkmsMqhqSOG{!1+|7y5jh+Ax#k
z-kLiH5JN%Es*$}3#rf}Pr_4w=Ne`4WvqolH*-{C{2fEKH#MiY4-}xuBWCVrss!dhi
zemgI&aGm*q$ort3l~(sZNv`7ARK0}NgEYD~*g}zua?y5*sqqE7{M0M30CykkY~O>`
zjt&N{d>TF)IR1ODW%s9R8$v_>NA1E^A05-7VSDgh&VbWe!EY2OLMdnt;O_WcMYUS7
z^~PY>T%2nJ!Yx)OCh&YiHta3zUX_1To7n}dChG(12u*)Clj+y(t&zR#inc(3B1Z5G
z3h|y}6Yu^|U-kW~{vvp;%9$1)f*;iN%U4@e<9Br=_MUfDT0X`@4Aj*eC4Y9ZG-N};
zotiu^jMlKW=BCfmt1C1YP%);yN5|A>=@3m07(wGOg*{MbH|Pc)WXSxht6vBu!m9g3
z$v@ZLyE^#3-W&t_N@qz^jCA4@Z%`GGzT6?hH?JfEH`onnc8P;8it`@Ltuzm&6$ula
zj|7>WC8UX99obLzgN}}@Tw5b?Z{ZugMX8LC8lN)WI`GBJevZU<;+ybl)4CT0*9}7n
zBTH7L#&vYcXKnLJpiwD>Fj?hJD0kACTL_a??uv3(ow*%pveqUVQLkQRGv<x50Lqz>
z1FeU%K=wNnYD?{qF{_fC;!!?e%AH<Yu7IPoeXkwW)BrA?6x8DdBSxXKhS20TCtUPC
z^$ID#f_ayhF!;WXhVv_`Fx|<*(s(niVpx53{9&lYzp*3sEm7>7S+OtdMJyVX0$F|~
zTP~B`CVec5V6$sQux{bXPpZ^%9nHV!9x4MR93g7<qtZ>KO2k#?4MVS7#ZRgYCsgM|
zI;c;hG^fZKD#`~i-zG@ZkM-zB?NkdF!frgs3<S*3T3P|qkmG?Ks*myjw6_{^PZt|0
ziw7u78v?N8N5w|XSu?nxNNr|gpqQt`=%>NpQ9T-L7$0ikf$3=TKc*KL9$3dI(BXo~
zjbYT+_B}coNYh|j%LsvAgN-+;f!9>xD@p=R{1IwF*a`v|3BfRw)|Ow&kz<i8OkR?_
zDI~N?7rkG`C>bH^l@kK0B7k-U%6`I9;1{q}XyA9kY*(1>LZ++H-}wcN;I5R(Z#j`C
zi{G+;j+LdxQG86V!7m(DYFI`gBJ0@Eq3EsEQyqVU_S$q3sik8gd6*}oc2Y>tw%VwH
z-K<7s9>%IkS%uY#KPbUM0Y|_|q#oLUwNB`s8JDf9<sv>oiOm{lq$(9~MfBm2eY)K8
zM$H7z4}0_cV~(b60_aP&h>8*S5n}Bv>%B7f8D~K>d`WPac3m6qjan(oYRgLI$Mf-c
z$|cDJiVC-UIH<-jb*ij#x_c2oc1|XRZH@tth*DK~Fw28!9*pzok{bT{46VZZ!I(Z+
z!4+4404#uc1`h79Mt6t~&Me(DkFTztqNf`)53#{olMPOK)!TAj(e)yj=Mk*PG0@Qc
zJR+~kaUNWL%F@pvI#dE_o`x9Ob3*y{A>XOWw-5OkRPGnZ%2&T)rKbog`-{24H0ZAM
z7xhbd>T>#1dV%ku{F*Q0sk%VX5nsU)-7h8>7lr-z!q3oOWTi;`gcsOPC3F(Bhu3sh
z_t-FJn@(Ps9H(V*t^}&|+}b6NP+<N{hsl*0!$vWS04)H|soCwX_sl~k!0D#V?V+X2
z6g?a853@Y@R6*3BIkQ)hwJZ1Z#x&QLFnvt=uQvTxKZFPHP9G*$l=?x1Q&WHO*X!!{
zYqNg8LQ!ZA`IQF$6bAo{u4w#EVf;~^NAlj&w8UxR2M0C-P7rrwD94`7fm6+hOv&n@
zAHWN<3f{=*4ld^tGYItlxtOPkjzEN>$F8P18Fcg9x0Ds9lZcJ}MD;v}M*r#77#q!1
z`2b7zS(Su6_!DC+r$h829LHtYTj>Qa)6+Wa?ZN5sGhX(BcQbYSZq^IlkS`P8({(RE
zLtvFcR>Hy4bQ<=alF+;tywBj_!C^1hPxE=G(WmgH7wpYuRU_#TfotJ){(XtSlEHrQ
z6^>Lnow0C%_1@*#1Ui-i5A_zo1+?cu*n1o&9~GSI!?5=@9`^z`+xMPK)3}7oZD=ns
z@xfph%Etu^m-qSm@G-c7LiVPZ3h%#;=ZH$X)ekYAP{lRbx^FuT&Xd?(+uNA;1DY}i
z+dF*C-LQQRzc_&l_}&i%#v9qb@AT~U1JSeF58ZCv={ude1Em4?kfOwSXV>=c0NeO{
zfEQ4c=UaFI)p)**7x2#W9lU@Sp5Ma@sKE1Gyns(XzmFI2+2;?itKfUjAL7LT3+&?+
z6^&(YVc7#Ld<P1DH9zP67+|gBP;G6&V-%Ugu)K$1f$j`@Od)%L>gcei=qSz!n3Fw4
zIAQQ{P{N)juF|FWjo=hpJE$=~Z4%y5I|;oLR#$;Ne2;uC@Jp+!sKK(F-e=+C`G$oJ
zU&P*l@!#Z%CBt7x)Rp^y8cVoGFi`v@Um$0~Iu^4UsZ*PC2@1*vEonsG@keU*hU{@m
zbp459g$b@u8HU*cuC97y8zzdpP?f`%5Gd5C7a|@8h^q|*Y+5ADzTAG(E7MsT*Xmu`
z`n$G4&AoR~y^cPh=eXgkN-ufs#)g|#V_BcivgGWWD)7zU07Cqc$nO^*#4p|5#~i;y
z^7E|E;FnRtap%DA!+{++Csdl{==c9xBxX}$Qt%g9lKL~UZtxx#N}=tMR|0~09+wwP
z@L##R8{05e^a<SH-kN*X+)Zpk$2fP+hmN7f55IM{AQ=bZHhbowT6eT(r_(y_<Wu;G
z-X&GO-siJ4ojw(hHquRzhVy{3cCr@y#3}MuS>&%BMLHQeo|`ZJMl32^?DJglgU8fO
zhcH#1<k8VX*sEZtfeq$3c$P<FV6dK8E6|2^Iyh0H0?eir?)&Q0tnYzOgKS0}FSGIK
z{ulntTiAvh<pX^@$%Ci#+*^H?UtOI5$M@h7{v8ayi%y`@uk)yjC~a@~!5_KfJoO^)
zH0<P+q(oF3h#33Cy4TivSuy^jS&BxCzx9x?leF|eXX2GC3_2&)g~{5E8uQ|IOc;yV
zET={jzmsGVeBwad!iiwmh~qLcp6ApRc=ZEpjN}c8p022w)xUTc!t0*C*&tflV>eqo
z)1dn-?4snA&z{ljNn2GIj{vVJCIWfY0^5^N#yXwy&lmE@)nA#Hl>9kO(dAa`weO@<
z2BA+h6s5d&jc~Ng#yDNoqt(?P$an{O={R&;u7uLyXMw=*66JwG|B+WmCk2L-F@^)a
zZ=)Y^2-|t?^@Lr4wm4w9BT9vpD<U6JLpZT27pE$$(IgWacSi}^er*cd{z2{kh@v_v
ztomN>_uqRZIa?Zuw2*R&*vP6<(xRTv&_CwJ_lso$g}A8;RGo7_iY3erE=qQq7uVa?
z4D-SbUt>xPdP-!A)<#7qVmiF5axc;%stXoq!X?xhYMvst&1xqtxw?AzsGG<LiC+QS
z)g3%J-pOg%Bxgi%u!?$n(4$$xIKtrE(Z+FBbXRCtN0xKa9xOMPwKW*5U$y2I^;p<{
zFxhG-Fh~P(@I}|Ef8@cl)F*Rd5-MB$i*hM7niqBkWxb1_4OwB3&a_H_M2#Lcl%`ey
zEd_=TqZr-LSl}}ZVPYvJ79vEGrrGSyXiaUDU!&zn_{Oj-#wmz;MMyOZF<r?Yw2@ny
zXjUS#<6PM>(fL*K2<)C^%FQvWM&`;1y(_@kSj3BZVwB|G#e~6KjFN>yh?I5R^#a(=
zn<9GJ6+X62nen9)_p1Z_-^APM3=UA6$F()7W`hQa=Rnw0GC>*eD(Xi5SIWfHG0f&T
z-3Hwa!*wG$m=+3FHo)NB80ZTdbA&g?2t<LuzAdRO>z)@{-8&@O?jY~Dm^E!uw_gam
z4QLk?W;6)}yYk=>rm&bcj6jyI7g7<S)fVX^vX1}G^x-AG7Z!m+DXBNo#Sk&v(~#?|
zz5(S!VTbH~gn+kBg7)iOV7m3Nhg${oM>Q`Tr;0+(z*UNnuv)Wjo`6RvWqVb+?~~x2
zF??$4)6XS|&%zQ{nxo2yb<{ngNg?PWdi+3sjga_S@qKtu^#;3ZOEaM9h1BqVEj+85
zNF&8A*3nO}Th}t^e7cF?5-*;YKsePtGUOl$JcGM1A5`Sh_bi0cr^QW-KBF9Y3-oei
z59-xiIicalJ@jXFUiZyjVH{fphj3Q>Rc2%b$%f!a@Q#qr<spu_Bqs^jCFdUaB<Egp
zTQ<>e_>?1v4dE73jz*MMCW{9}bUnw8%ys8x8tgH~E--@p`$_%&Svb7*2eUJ&sO6hH
z1;`&UH${dI9oQ-KBz7S>hku%2gL`nbSHQgg35FM;lg&QFrjS_<q-qZX6`tXe8Wqtc
zTRs<?Zq5Mhn?>TYe6k1&G|I-1VT6DICBe#eY6APAn_v+3vh=fs<AAg1p)S}1*3lLk
z@Z|y1lVVfe2DJ6kr;AN<&8g-EakqeeUt5EX<P#7m><k!&0=d@$x!3ao*;lTH!@kyn
zeN~Tjz*fb+;*d4i*IKZz1*&4SauE6&mi%L2D3q(A{$Y1N^|z=}{a1MYC06XJyalz(
zApSExjd1bAb#9zks0hc2@ma%}G5&C9-5TkS;*j`vMe{l<<LSIq4vhNmCk(-BeudBD
z)28p^YvBY5f8Whk8V;OKr7Pz-qf98TNc|TB+N-}9bC~~hxo|#N>d^Vrb?#JG@Fg@Q
zP=1$q`9xik+of{8gaa5w4(1<n#neA7*V89mZm7>(e^k2UzW;<sW%~PkqYh2N*Aq@T
z0nQ;DvK8}(EMC;W>Z|li#v}VoUyxHJUA;6{Xv{(v2Y6wWLwvPwu5jq-;y_;%CO^HY
zI+5O0*Zblc-&dCh_OcLfQYjUQr}a-=e1JOJALuD6pRTBMlGyNHr;`TMNr!c?Wqp1w
zfVowj+hEBZSKNjR?{XJkWwk9o`yQFU_r;?N%^JcD@PEp3`l2{`UmU{#4yT@rmJ%FU
zH`YKHB^~>L%}Qf-V^(FxZpsz@u7P8~)Of*^e%%YRj)T0STn@P?40RCH09IP_C?xt$
z6>i9^DMyk)O~LfX+|t|5;5UEoaf*naFZjHTk+0=wLp6+SD(IO>(j#~m7<$tqLgGhn
zH71Q|%MyQZEAeVqP?T*PKALm%-&DT#Jm|G1`Ct43ovPlzvLi>A73Gw&;yS0SxSl90
z%GqSaxR<Pu0qP35lB`&lkQLVlWW_jqG<OG#`Kg^XB!w5GoTImro5qSVd0nxN87^Vg
zo)>c6e=dkqI84RnPJ6iC6tQwHRdXVE!W;)i+<OBYg5?RnG<ZVG<Fa81$EEEJ)26*q
z&^D<IGDOY^W^@L-qXBa$#EFH>34T+tLVjxjy*zxNMspfHPlru>A7H3{Ao!klX@vH3
z6qi|nV<RSche4D*GkjDBxH?j99kq1RY+<0g9xMf09uM)nXxOeHoH^MjQ3bgp7(!$C
zWzOvz=u;fU7#EF;O`-ygv8pK9)JLvh1~*Riv9tsd_2+^L-4oW<%1)~t;Au5h6^v&I
zqcFoLZxsvbuud_wF@9t=j95XcSCPln@vo^%@NcLH!K(bAM?8(*r47U;Ax3y9#RySM
zz;iGb>%Ef`wkYZi$qkWD9FI{joCaGI^E5}KEA)Y&6V)pq3T$`Ba8|gW*2$i`jNxE#
zF5!x|cXfF9EwMV@(or)#dQ}`_C<Xk*8JKiqZGJAOS}2G*#9Eo)ynev<eSN=h&gF+i
z(-3y&ky$Y2pkRVTm`6uD$0K=zYQ88RE)xf?tvy_o2Rk@>VCW+^`hs>LhLg-H9IsT9
zG>#w>m)@$C>kZ4RXbU3>E_m9*aAiLF*WhsV*1dYvGX}>!HGKXsrcx6eKRkp(89TsB
z6=X<UqU%>o1DVKPdfe)zw``vbOIc};jCE8w+6qhM@6iv-=+|1{ZD91e=pQ=8XnCUV
z>jj#qS|fS<Sc>j9ips3MCSibKs}<;a&+v>ofmub4FyNJBaaWAY_?4ry4akPyx>P--
z6*!1+TrMzvOJ{Z{HoQflw<$?RsCiOIBY7rqh4w!325TtxqRTD1)bqtpLlVIaCFGWN
zR?-H;+BBQYtgo(i*xFiA#bvhCObeljS62_<ClM1k5rQ;<!38gH(M<X@gp~#riig^N
zE7ldF8dY2)!dvt3;gSmZwlbBdOx3K6Zal0CjZ;Kjq&@eYu7Y~zCC+&LmV$orR4sjm
zf1;3}88ktIg{`Cuq|ZW*Npel~y;XOYrVpOj=!iJ_{_w=8IJ8Z=#%DIVjuWBlaG=i>
zoIyaw`#DAtJv!D~V-mgM70NysX09f>`{z0AHq8)?LQ|_<-g3kM(Ho1a@|D`+D*Bj9
zTpi=lF^l-R2fOY;I}5|~L_L%`w6lzfd8cRmwfGbcD}3L~%Ni4`_ZCAOkY%S^buCBH
zI7CW_vP3U!4JpO_eAa>`>O?IPry8v5*SracB(RY1Boa2ATkJiY?mK{!^u73|k@uMU
zf`;bI`M8i`sC-&}A#X*y1=WSZUdh5%KGz)n^o#oaSVNXQC(BDrdh1j{?PZWYanhN1
zL-J#HXp7l}?pD*`d_se~pYp#7=p=o9oDLBpB{xO%io}_^9*T<B$4j<en_4b77)Ps9
zj3vyyfqX(RkESC{qejVk&mgc8EMhX8;u_bS?tU<V?LlRqD9U;odHd1CccE>On(ZSg
zGn>XK5Ze9dRP!8jgE!@!Mo&|363o%vY|4_)X9Xmj2K%Vf2*!%iPa=(Xx9C5bTA^w}
zM<rk}f|)h}D3Pm>GSo!KP^Sw8{YN|7ee`o<{@5-trRfu0PMzhg!pFqQYh=?&K)%@<
zdUp-^!&PraAd<qU`06T`rrDSYHiQ}4BhHS}@|ZAmuC5XS+5tYr$nMKg8B&VN$&C_M
z7_RpSR<S5+;h-8pBMUtOP^<2W8T)a6M3rKQDX7T|-x{N1*35@0--Fv3kMXX)q-?CP
z_e1y^W9|WOKxc^=_w*E~Q*atJ#8C67A;Oxdt`<_GIq_kLaxVLvb;D5XOI55Zftp7x
zDHas13h3dg;BC1YC1F{jTlc<7nQ;o7Yt$s0dZ)o;y~iXGj=wn5d@YV2!&$-U%xE8~
z!!r^++alt$J*X!aHOHcu_~Oi!MePUEMp0uZYKnC|4XU-ZnXj~<^JoT*=|hdDQ8nBj
z?nl2A9xR*5`Z}%JeRy^n&4;JMQ+#sj`}^t%oKz<p`$K<<=}_`S$M^0(+TVb+J;(Gp
z^o35x3~Kmb`D&bfT*#Cl@M85AsEbxbEvCXnj;}Q>fhIjIJObklrhK~N2Qx!I#wyDg
z`f5sHKJD43$Gj7sZ$~g*g&%5dkX08ZOVou9SagNp&InLXyeBF5ki>nBe##9*z`Gnd
zH@NsQ_rFF}!KNc$qqrc>_bkfTXvV9eq&tjnb$uA$q!qDJRRuDBjgrC~fxc40SMt8}
zM?dG#J6~xYg&xpF3`dusF;vs6#5;omod{E?vfH!)G@-6GZXbV}qBJIfPKTMUf)xg5
zjXn=rc#YU&XTDI1p0$*sP^rBlIzy#qp*5O*H}3{d&r!|T4dci=DC$D{?uIUyqYmE6
zFh!(A4L;yR!;W-#h{iD+IlqI#7dbi^RZ|u#esObrmgDkmaKcR)Ec*lRMO_lxp~GZ0
zM9g9H9h4w1eM9LSS}!Tlt+Aij(*_f?44&sBGUlWJq+Q=@7)`IOZEdlpS=niJyry8V
zhI{brDf$(CEGWk0CR>z4>T`?;)A0`E+8ed&0N;bMo};zdL4+=}h+>&r?^y508V+tt
z9c0mBv+t8h;u$J+i(pTxa`%Xe|CxJxO3>5AcI*kZ;|$|IkM_teG&%_NE_@LEmNV?3
zr=KCy1L?oGfvQ?|v(0f=2fE)-KGn2?)!xioWGqW2@C<zIp^a`oc%7?PtWLs&lBb9$
zb&UJhYv{~Bas`>)Fq&n^-v!NzhA|h+`RCeoxmj)Ip;n(k$;v($F-mc`&<`5MOM6F?
z1ua66(!y`_g<{S-YSior6h|YBGTX5u^f6nx<CQXVr=YJY0|J(E1{Eh3T^QEZ29Nm4
zHP~9=L<VZ6PSy{)ETnaoMXR<;MpmqfTCEBm3LYTU_XIDZ3=zl<L29Jr3@-HyZfdR6
zF<9A*E}PqB!z`gRvv=_kX&whhvlvZA`Jl|Zv=BN>O+jHDIMV1a7j{`EMH7vxw#SvA
zz;lYm>@?WzDY?1ZlgT~uS(e9=j5;Dy{DzlB6tRPPu|Q}KLMo)XXM}~|=BqiMKC`Gy
zXj+=OXw?n?jyB}fHiZu2_N2HJZ!66IwY7Vz8pz)m<1q^+FmN1Up6;d$=8APlXPJ%0
z4251mao$ji<#N(g7)FlN1FeW9%&sx?I&XgWm`xD9I-_&TEGX645_qAf7#}Oc{)%P4
z!Y2b@r@~S*l#Q&qYgImkvCPdW5aoMjJ})<#iDjJB*M$!A@`tjVdQmhiz<(<`>8*-1
z!n->!j!<w0T6m!?!L%>IDiDx)T|7q)#^Pw0k3DzH4c*`*xZTaP=`7ym1)SZpnGI~x
zVVh?HVaedj9Z#FC49g==i4fH{<XD<vlLK5)zyHu}6I`W)_XAAc$X@D*xbM2(Nzl7f
zza?+fdv;8JrbWk*twhiz8A-9%BWt)+Doxa!#1%O%CKnvA*?mb8xjWXRmfuW=_^M-}
zs_`!LR|vj@%?8PSloyqz8$wt1D=VlX1~SN?kF}Ajg>32%Q$D0Ua9U#V)sRM$*60pJ
zr-ONLXVqMd=!%i_gf%m;jrGO`aelqKcT`lndVPJ-Q5OgQA3yq!LSeRjUqrXi#|1y3
zB995y^9-i%o!<KQMew6dMNMSIscC6a4Zt!#sqGU|f$$3gQKb}irAI#%$E?ydxM(s^
zffct8a~+}}M=1@EEPT~OR<?xGtQT5u=B%8Xm6WSE4s0+@BP(|=Hk78qb$<?3HftoC
z<Gjp$sSc2xZ=Ehm>%fGruT(CE!$v_9i*Zsb#!;7pZF_AlO{^5-iczYq>|Ug@u;wC_
zfh(K<V=g$^wiB0K)N>_0`VlMXwj_2&tu77dtWgHm3IPS4X#)z4U6GUsXjYZchA@+z
ziEmyi-UAvaA~jQn{&!W0N?{Y#BPoxn@;Klh6=9;>*buE5mueF!*VlDE^S-rUQ1M&m
zC1UyRml0HG4y@LMu22wiT1NBIR`_e_;w6%!gF4>gN+*27Rf7`*uWDNlXCp6=ZBYy4
zMNZRpy07B<yvxty>SM}Lca?j-qy|f0+;6?c_-4R_sbKY`0vA4l&Zv*<_>o*Jm6i0r
zsdm_*x2{x_`9UU3%;mJR2=6Jc&?lm6eW92ai{PLHjsoV%1jY@1_GM7Hy;3OS_DenL
zC^svcCNaBc5;MjEP%A#h0t4x;b6z&hcbp+jHMx;h4!UBM6{x6_Jz|NB;TmzEP`B8~
z>5=4X)uZQWE4otuLGUx#MD*S%tQzFw^eB@zF9X^c^mS*=M~yjvOx?0!P2qsx4C~d^
zyu{UFdpY3FOm$~Y%oD;iv*_d3ckF5_DA4Xh3}%n#R5d22F!alpMXRcCE^+3Isi+^S
zbTj${Sk5?N!G-#LUtR}0_{MqK1jY|OJC9ilWgdQU-#shl)5)({I-LX`-EXFU&eN)X
z4LfcfymTJHs0Xi{6r4ib?YfRHfk&SPZ=GB(&d<|H2HkENa#-F7!1&n7(g6B@;yip=
zd^S&>xnG`4?MF|D5dWg>Kw!~)EJq(p7ar-U8i?2G_m2`q6EDi>C6I#Pw=x=}JKw!1
zM=zcC)GWt58!t-Xar+zzh&pV%f@@{W^0w3m|A!A*vw3J!9&pNIn{uC1p4gOKPI+ci
z?ira)b0c=6!TvzYvH_<0@S!f}ZOJ7+G$^NsI_17jd8|`*b;=W+VnA7+mA9<VyRzXG
zNEL*Ipu98<mtVR<29xtmX{;O!uU>i*FYtA#A-Z0dLp`vc@#V#@rS!x6RlT?RM`_r(
zr|>dP0*y$<78cB?JS~S%{f7^o05R-!=SDVFdpaTUPl`)8=z6H;U=e`k8=+U=5UeJk
za<<A5Aq~6F)CNVUCH!g(zIBA#hCX;(26uqE<i^&6X6}N6EdB!~{pK5Drg^zO#?pag
zon{~GWc|K0GCgv_GFV-}l{Z3a*Nop#vpmGfXc@Mn9K$%{51C*JY+1)^`X^$D*ud^b
zH9Bdg@Dj5oUSfuzaajZzR9?XiXO@Tj$!rKipu0a|Od@8eP83H47yO*z--KgYnOSL6
zQ|{zOH$#gf#Y`~7ZS4~`B_u#_`110OEG%A;Pp+U2?2+vz2KI#EHS+sIAx{$AwraqS
zC?(^*Vo9IifF>zn_2x-N%#UuS@(krJQqH+5eo{qtV&1cu4B_0IO+W59voXChR_m?~
z*s6|jtdY~`kYT{tL_<JtE3-SSet;0`Ivsd^1X-ZZhG|fYVe|NuP9A4<6+&NOD$NQV
zpd`)YaQxV0&9?i<nn4fMF!!8Zi7u(tVLy;9g>R^!&nSLkxj2s+_A`kCB7<9$x|590
zDw*TVSJ9kJH(6Qpk9i7n@e;$aGulccG$&W(aa<|nf2u$*joWF}85|ua;iUp>R(+D5
zo~B8y>urxpYPfJ>h>8TYQ!Umo*2}AEu3Obqv&E(~>x@&(d9LaY{2E=Dnx~uUN(%m_
zncPDz4Zt+YpJ5DP%;3yQaDNwQT+cm}D9(uQ?8Fi0JUff!(h=?VHC15lma6J&knEu*
z0i#;Yi_lY7IsF8=N+-8KehG+xaO2M06QLZNqDhIY#V-c>@sPuB*Hn>LMO8(^Q1;pw
zBX|Y&DmM8PeVSVUZ|>ck$OCmTMKrVBys554UvKJ5(c`+KvQddPks(GlrH+Y7B#f8M
zt<rs^wy!7}N~tE)kesH)HPf_gPRmTs!=gD43o{P`728cNi`)d|LOD)jZu_HFS4Rlp
z$n_7J+2z)>pSi}<nL8<lOk6a8a&yfkkk(vg7(|v@W@fF>1z>zU_bJaCf`5prU>eP+
z*29^a)_Rvgt-&acreVSlV6{avdTqR9+A5HgIa(o&or&A1@^G%gDyZ+wN8?s+PQ$tW
z?zq{TGZh<F*%156)+Q6vB8mFJID*D;Yhmk0<6WHO)P#MwF-w4WfMTuk*{IiAv`{;!
z5@PM_^NQ)yVu_u_61Nvi+_hMIZI(NMjqx;!wYs!|sk4v%JRA~QS;*r)+ZL{Slju}`
z4p#X*nlRqPelQOz-xvl!x?^0hvK>x1ly$VR(|>q>P2FAX?hKWUzA%KYy2Sd<mq*TL
zLk#?Gn8(VP8qJy2lr_@<6mYut7bd`+=`IrGbJe2lt-#hO)2r4Wnak)XJ`O9^FvU8k
z<9^4eRsX`M={k%@-ZUCV`@t-l`=Oa4`$2LQRRR&+Lt}G%<U7XY?d7Trs)sS!u;ZRm
ziKW<F?yzJ#7xY3?t1;R5&HX?uhiDeGNJ-RD_Bi+h8j%EwTcj(8d5PvS5^N@<XDHuN
zqY;=ZhiB!$>!<{&t&3MJUA$^`@zQ-SNK2`}MD!yrxPZ0NB|&S+?j8<M@jEPet|FcY
z@o}daY?|rkm12`@Q*snN0V{r534yMl)_J7I5D$MGU9}N)UCe%98A3i_F=l|<k9ok*
z!OWGfxqFWoI3;5`%c9Gy+ArpWx7-HBBhbur)0J@Hp@71y<ClPO%>Tr~57U}=(WXB_
zM*&JYJ+D0Uz1b&_oGb!X4RzSVOfMWAr?u}YQP8VNjF=w~GnV<m1PTgDlr-u}y-8=&
zI7$C)6@&F14T67T1)mpXqB#oJdS+Sea;{yWYFA?ID8L3;I7C~vMzz)8qPc^uQLSoJ
zsu~p(w!u!$12Z|v<1;pD>JFma5Z|-#&`f)78RD9Er9-b`>EWt?Z$i`^0p^rdujggT
z;tBmSV)2X%YBb~?qZeW(HA;J#E7)CyRT|AvA5lx4iH5IhX~Z*YCNct^GxIV(^vdWA
z-4sWsWhg|=88XwFPcGc@9mPT6k4T48`XMTM7!jl<gNODS)@nrRS5b&c8L3}Bo#;as
zR4@y~SYQx><^%$^;9u3bl;5gz5iIJtAbP28P0*#`uL<yoM*Dp>oxVwvH2aj25D87Q
zmOi9Ov82RzuMYQ~KRda$;G6Pr`KsnDyf_1Hp-pVOTIUKH@{dmqKD~4l4<$j`!3Gy7
z1E%I)5R|l&M5l26K>5H>Tl>hFef^v+bzVKUv(C9~v(e0jB^J;bBPR;Bw0>Pg0_*o7
zt)HePbR_3{UKZyp6hw1o?vo66v?b*(8`WjSUR`zNF9|3pk7q!SYPNo3QY5pB4Zm|j
z&~}L?<6SSbbE2e5o1=9$qU$Aeziy{`-Mw&aHLrPy#+JwgX+pDPDwldpl&AA8X2G(0
znmRnqCaQjx9p7P|<j*YHE6ex-Xg~c5bSudiTCodShMoG|1A<N?ZD2nxVDp6BX_VcC
zb30g7A=q0Y!G{XK0I{{qvR!oQ3wQ3LZchdK>h;!5FiE>B8&VG~kPVPCoF387<_TMV
zy-82WDToq7m|c=_V;OhB{3dGfPcyQP;FRccVd68VBNgNpb@CzpL3XZ|UqPKTdt9)|
zne0QiwObE%e4nilbVoKaJnU0Qy0(SWg_WgQL%3Cgv(^}aLC`zm5mk7S$Jkpf6i97m
zq|g%mk(vf8a3nrMw2^A%vbXNyGH(7+WVzQ1R(k$=Z_x{D$yL11+QESMgrfP3nvOls
z=!l|~1I0)|6>>6${t>x=Hw<e&K&b@xsgeTfTRQZpQ}zRKV9EeeK&`)NTO#e0YgH=M
z6vfc5dHX`~U!`owx=n|yk|Wg-hjlUa&^MD7x(!)7bkN6Zii4<b3CJ0BK-i?l$D}2Z
z6wboO-c@W~%kM{hWN7&17KTLTsZG=vVe>mhkd7orW*wA9B>1FU{-b;ZwdAhcLeupk
zbnkNkm@0z9rzZZnD49gx>RpH7sq9uSI-0HicBu=|yvl>s`440*Fq+AP+<KJa2K5`T
zKjZ#E)6Gd2GWyQXFol6LGrRR6V?e$b9H|BRg34rmgGxS)41o;_`=tVFP((jN4e8y0
z+&T1{Y$)#3d}%pCDt}GK?C6d`d;BH-`D{xkQ{2qi`HWjl&?S`HO`=Z!{x+R1jAxII
zmyN*K9GJ3>7TtG-`i}f6vQ^(U*mJQ5c31*;8UQPz!1D}tqFR67{fdOabyRP9I@ySd
zn|JQ;V<k@fQ~QnNI8kbzD2gg{Oq5(s6h6ivw2P@q&SJa|p{Y2G)skA{{`6-?_D3%~
z1M15iZC_#D#c8eDce>3d_nTb0?t>AvD%47n_7HU1VCTNOGTB5vWC8&rqC;f1yI;r^
zO!w!@x_^b%CNT%RSmE+wq-H0NgPG6dFc4bW!A)}dT@*KU^QlhHsnc`6yLEO|Q0H@p
z=Sw<#BHb7|JGSWRSQ9Ln1{-(=M5D-cJWJ?VmfUppY$2dcbk7z`d)AcA%etW5FAwQg
zf3A>yj+jM7v(JHPrWc^!={Z);?eeK?$93OA=RzKZf=0oF=3E(fbp?f=)Wc9CHSQdS
zQ(*VWBiCAWu&yIu-`!vw#i(0=z4@!-%sXCNJAIUx;F2hR9rI@U-Ra2t8jY35wI9N@
zVF}oGb{{@E4w9qOW0d4uq4pVTO(Lx|`KrYH3)phUW+y(AJ8_LgAxKH)ok2rR4YxZT
z&7!k#YWRsWXwVtd=__{PDfzOvUR^ntG!yk1E6a~YLp8fGj^>Dn#m&HTE!JY(s>N8;
zVhpty8|#-Dp~sA)f<C?MGhd?#lv)O-@>8jq%wJ`9j5nFb*Dd%;Q|UCMU+$)_tqOh>
z75oYn{A#_Au*5bpmNn+Y?oZJLESL#YYQhO4*f_?fc;WFdcb(X#&12NPzAxs4S4C6i
z>7m`NtOMVIzM-0qX6$K{z+6Sm-5DnwD20e;tncB3wR*5Qfurg0>-xIL00XWj@z;@e
z7M&{Bem{h3XA<wxBt8ue*sT=WD(20ena7BSaSHR=&f`-vkN2AM_!MEbGH(w$@2hXs
zMAK+5G%G0DgE_nh)jGp@%x#b}7|NK6nw+W`yri{yiXG5QwrycVip)D`Rpmfb<p8R3
zVCKq{Ci5vx=2QRXFHXEunABezU$yi4Kz7e*V_qN7y#5*<@Vx%kx>AX^o7YoKH-)$!
z<=7QZ?pbuL@NI1^Gkb&?_>5wP%?Pb6YwQ>rF7et@ae$}3+QPE-7N%e$ru-#D=Fk&=
z#%?Dwwa-uK?tY|kJvdCVt}x7EXzWb)p&!s80(F3mItw-{g>Px4v5CPvYaB}W6E_qu
zS;iU4&5Q1@P$7DO)pP?bHpMP%d*~DdTw=5SnrTFpC{8E0Imn||$mMcDoJUvE;c}fS
zBdZ@&vZTsv!HJg|Hb9NlOw9^=dS^`~j}rrM?htQ4&N@q>)u?x!6gRVbETY_Q5|2vJ
z7!_#E(t}ZRFbX*suKZyEg#l-uxjkmfksY+?WD2t`rZCeKFhjYUcJoF1r(NA;BX3Ew
z+M~^FzzqMmrm8@66bjm(C{@=rI5p$}AH5JyzB*5)Yik!uOW2#khI0zTHE~z_>P#>3
z)G_2>i-)aH*;#O^N*>$`n|tI|@Uv$_7#OWu&&uYw!K}-ElSS_{v`7v<^VPr)zMyAM
z@G(Q%+%Hh!m*(n~z7hbNnU0tUje#eP>fGP4o+3iJbC@~KxZ~1$l_~$2mznbI_?QLw
z%~S;6&^GI)6Y9uA36u_eU?7g*mH0fR$f57vya@MsBZ2dR-vEuQBY0M$n3;SlM>4QS
zSo=;fiqlTn5sm<07E`RJuC6@CKhD^H2%k=|RrK>JlQ@mkb<lyYGULKBWce;6ezb`}
zPPJ5a%>J-eTIfb^<&I}Q75>r`qHH*w8nHnBga)-Q#`Kp=JG?5dJRuz<@i~V?p-HOD
z+g<&DFu};Jy%tH~C+XS61mTs@=0`iHk^`&tT4iJk8(>TCD}#snyN=dWf0`6Sn;2d?
zo*tAFCF>_U=G~n&CBo|{)(AY=d-GCV=;dFNkdu-OX5)hVMbS8gr<0MyQUx{RC=GaO
zRU8VkRKZP<fZAkQm@-Ty)P)qdw!CtmDr@i8>h}-V;P{1OQ~JE}?ghrs2I1y&XWQ;Q
zefIL%+h<REff6;y1gVCWavd$bHpV+b-aYc<ohvm@8&dPsk(#?tMG!xiib%3~FO<HN
z4b2P;9hsyXy21cy0=>yRZ9_{ba1LKZc(?rkM3guA-LUn!o{DG2mRCxHx$V^9+H$Xn
zWcXYY;6F009eSOy<Fj6zq_<I>#d-u3pA}y2_^_k3h0bKG*p<!Spucr*O>6SDcw({j
zE6h2dNHDdYA^}?9EzUnEy%w>ieC^+GU3vJfbXPJ|$htZhrwoCeAzYcIhckz}Qm;|b
z*73;fS?E`zxe1QnxB7?SE~o-jw|<~(Yim8B&^vn7ct`in(s-h=gAr0dU9UbbSVk!+
zl&=ihV3dHKszn*p++}h=@FQFYBDkqx+0kmt>PMTpS&D9|i7dnXwUli4eKIE1oh!Z?
zd<)!w!VM7E0+&4YE;@o?7Y*RRogQxuNb&X6h^~M>DhvWq!a`9rb;N+Xr`d=;V>w;<
zL6&u@VHG~1KjWrMZwms+fg>}5#5C?;nG<LWdgRfaOuBX5$&S+F&6CeX`SAq?qoc3^
zKc{5{Z>u=HEIu=@MSb?i${PMyPcz^zfPAH8@O|@{@YM=_%A$VoqpElsD<>)So5#3-
zirAs|W$bAmGBfg91IIZ(cHA6<Ke&ogXVLX*1If}r+Q<3GG3qEl-SyGw;#iuV(TAa3
z8MX^8YTAZU4M!A}#Ac@b;2)N~(MoR{)Xyz#^fnF;V_@ELGWLVMg0Dl%CIub5sQ*^I
zt$W{Pt<};;u~W7l4Y0dS&$sI(YV+8BN%=3p_mF82d0xdqt(S2cTSqLm{^jxJ59(3p
zQLbC{>v!_lN$hFo$4jRx*s#p{MVMP^3*Y`}FNL>8L-iGpe#{zUh7}IsPtC1BMNBLd
zrm-g{TN>*MLOIqozz{dIENs_YZ6&&+6kT3kr%=^JFs0CiF~SSP2<3u6j}o`3Nh`5;
zTV3ekyMDtqN_a%Y!l}S^tx9G$o<DUGU36HC->QF&L#62ES?r(>b(x)v5Ysypy6kCe
ztxIs20^~WVW<tD}w>k%x2D`1iLHD^boxDjW^CT^!RAW@cWSwo>jUfx#9w(W!`YAPb
zRmmgAKg!W3Q2sv2LX;X2+?Q+G?vz)mvPe8(#%9Pc=1G)kP}_2-JfG0Rg&aT7&EuzR
zZR(Q%O_hko*Od};vb!KgR;R8EXPbNh^Xo%es{VjfdCSjuvZyCKS%kX>RMmZnPN*_>
zh&HzRb1K{|%f`7%(|>c7^bw~Tc}Y}7V+<SNho&FKK*yOjUqw^$379Ts%2CL5<C?9l
z&1hU~iBMFi%1MG5qTDt11B^AHTu_@k1?IKJ@0q&eiBSda{8VqKb#v4x3NlaBhI}ma
z|Np7QVZR28#7ti@WnOlmhPj-#eX?Mw=*5CNT9kTOkm!j)@n6IsB;55g4A*h{PR<Nn
zvb{^DF{0=F&d$zsXJ<hndUYPVhTQcgqDm+x3S;$nXslMu%OuricJ=ivm+Yny(u4>m
z6|=~5f`tI)ie0D!NX1pnUJexL^#*RP2!NF%SD~7~0Ie2A)RJd_%@~-;fNCybeqi_@
zZGUi>h^f?aRo>BdiJ99=qzSR#530yA7(mRb&AA#HC**^M5sJN%;S*5r5zUSU$H5qW
z`p3f=Y%oLi%4-?`??-boH4G-vzBIQ*MCwhh$8e69^D)BOjd`kng)QFtM!OU15{nD>
z1AaNI1M_NFECOl+pZ%RiI3JJlU>{A>%>7hhHpt!?DpoZ?L&Zzv&qU8b`Z%EJKgAPQ
zivAa0(EzqNbFSd<S?UEyDVV#R4_-wXd;VdXnimaET}1XN1^)?<73n{+flamt8^6_F
zjJl1%qes=SII51Jgdkpv{yAGLV0SpmVepD$e`ybC7$)1ypc(ihZH!?aIo(Kr7rB>;
zj?(6_)IGzl?kO7Gqwp*;)HKNN^Ayhrw;%pNgSa^}3=@DD#BgyM)O<1LfUK};9l!QK
zlTYgo-ypT&EDl-}DI70+LwTcV^fDGfgMK8D>Wt}ogc>WmnJ5zpvvS~}JC|pI8jk&7
zEDT@_wNv8)G=TP!CWOhU*ldu8A1-I(Qi@-Vc;_u@Ey*$}Fv!!6oAht#!BqBONB^}p
z)>KgbuY&v;`<qMju}p)cOo?d^CTUfd#YLFI)vOAO4i4F?@#G*~hDRQ;V_I6Mvb&k+
zs3|0h%Kut{5VN3KW<Yg9M|KQn?0WM<Bl)6ee888Mt!J@=jwJx<0vztfI7&#e*e>d-
zl~XuKwKf-;M$ie$5+A)x+^@iZ46g7Mh0JN(5epVeO5@J+R`FPwp$@(-UQ#=j4X<a8
zxV{1xfYVQl&&i^AQ;ogQ>}4@<g!o`)Mfg-OR2?gmp-SskP0U=ZGUu#>eRprL8|(zG
zRpy^=uJi6(A6mI~f~`iLi(8z{cufa*L<=OrWTc#huVKb(sRl7`839A;yzEFy7CP{l
zFo18;r(7SybMYArGp@o=9;L@zlR!1}B6dQrLFFY`dxNvr-hPgyGJ<AMZD&xeq~V55
zc4vtzUoWI1WQNnB09M8y6~M`aUgO>92tIp^#vZ0BU;ewQ!UJ@3g+4kJLLe~$n|knF
zK6>~7=%L(2Q-YI%4FGf8e*`)1H*#<(-)Eb38Rv{YK6LJ)0qyfCDSvCv#td_F<qHS;
z`(=ZBZ#dQR0kqTy(8kGA2{Fxivms~#Zm4d`2w*7UkvjTkp{H>|m;ftj2>K(Mvr&dT
zm4I(W1@(`afo+Y~)?!NWi#S5bTHlC*Tpw%w@vAFLXEX=_oaDu7vuJFazOT{3l12vJ
z5348!PBbU3G;@#nagd4gH=JOB0V1Gmr5$93Y6i>6dK`1S%ov&JSo>#&aTWk;sDS{(
zGNxPgknhw!$u}>~XDLS6{gnO?=aXrwl3&Ib#k_WMqEo24)MKjePSq8UEMGrO$MX+_
zgk%y<Qy@nZnfBJqHT@ChEf4uzz-b4w7`T`h6QE?-X{J7_LI1MqRr>i&iUbPIxn;OI
zSOjmc?-SQ6Tic_w_hDG2Es_AMb|HI|i&p*gsk=v;Uh3aWZ1=7qwynYHY~7yNm&{nY
zIhke%?sKJsA_mvevxS@+%~mtX=qjI^4M%4vzi5hi1W#KtPh0#&o;K}ZY3rL<+M><U
z>M4IFru=Dh%D?HD@@=0!;`>pu1banLz|X)UA;+zdjrA=kIw4DU6Z4u*kT9u&e9>5Y
zts^2-jCO`7MbUt&5^}N8N7+d!?sQlv4F96Nd~cot&EaObz@<2!qHI9i@m`_C2B{Dm
zK%4fFUsOk{PP!qQDU|0FCDZk|RM2AD>N0#1Xy-%tCfTwcoFck($Ke(Om{G**-0PKL
zZ{7PxvA*tNr2A4vbkC=)JjX7teK7%4xK>mLFodpWSzY8rfw{fsZ2H%H5C&dx`K%ib
z3@9UhHCp-}<h!2I9$rsrKgUaH<)7WO@_l>v`CxaSFV5~WHM`G&T#7Ae$Taq5F;9ta
zUZMPM_Y(c{e{_j*&Fu0#!n2~qCGT2~lkV+wS&u>4Hw^#d|H<JW-*WiJ|HAN({~tU2
z<Nx6Bk8e5rPvVC0!U1}T2hUuagcBh=P)2n|bwBz{PQP>%Ku5GU85z$|rUt_JFT#$1
z5SBJe+RBZL9JUTUG#M6y8vjUGA7Dry<0yZ1^(;32!dKBCP_-mO0c{o-Ht;W-c$xI_
zTC{O*a9;yqtwsMVgDj!4N_lpA+BSnQ>SrYx$)(|1mm>|FM}DZh*kDHy44Q=FwE-#!
zmmw}wku`U+j!>{FJb>rqP(~IRXbYVwLwD-dAQgs@Y6Mg29YRmK7qE9I9AaK`D`VA4
zV}BfL7=8k?^2)W$r+7_P7DSZ_Ji`=|<)~_eKgz>#;d^-ML8#)A&=RO>{z!Fp=7(}P
z+4DR${>#_2LxdFS9wRnB8>8)!TibSR@D-Z=+|F#Rw8p2(ghfr1z|?!FV$5zo*wOZJ
z7J65A;BR6ciyHsY(x*v#L&iwcE)d!EHWp;vb(T$lF!acz9_PW;RZmlZjS14q4Fp>N
z;=BPlmDxV$^wl960~B+D-;_@iF6T>z*<A#GRvgG&p1?hW{JXPeT~Lj2NH$`mI@UU%
zgh6*|EufMueDF?7L@uh3sw$*R6o$8{ZAUf2Tp2o=hh7mm)$BBK@<W8Aqf!gQ4J#Ui
z@dEVxv_t*Ekq|MtGbF@%6dMwds<}yS#um>27RS~DF@t_{$STv)v(n2O*g=M}B6JYW
z+CbCT{F`ZP{-2_;&z-iwoT7&4Rw1Z6f+8s+@Q95+O*6Ej+oEXMj`W03N!x<85>zv{
z{9sQbSp=Wd6>mmL-n7y|`^9&Iq-o$jj1`7dqKsE!4dfKe6l%h9oG2T4cQ%?KKGe()
zXFQ6tu94R6Y57threNF|!)w|N&=fBNXc~^YA)4Y_;CgkxxAX-#lc51badpMftJl`f
zabR$pn)!jn(Ve%9Fk*#<G)IgiWDjB-%Bq<!P{ku$Equ)eD7m^yfFg8u7o%k1^qAsQ
zX_ZOAs*~*M>VR`4@bx+Q-1;N$oBHk=c&oS@-l}^by9(_}T>@%#ZRM_ch`P=jDkQ+C
zY70IE#N{u&7c|yi)G|zpDvF}19_mR_1!iGJGg$A*U#<W`95SK0bZLVEZ*S8GSj@F{
zgLDvLMoIX6sqs4!TkRPv;|9Ah7lfrnNH7SzBsEqXUX3cGD;1iB5nZX4)0O>e=*rNW
zb`qBTZzL@Ke>YtjtA#J=N~P#Z(4r|pCrueL%5#(ch~g)=qbvKCuIwXSX_X0dWhUv$
zjOfY)-5*EZ^jrFlyZctXrZM?$Ls@jOoylH7Rs9A6V~bn<RF!%gI-`qo*6TOTPx<cF
zy<L|~b@rh7EDXD2=dPyhylwoB7=@h`T)nx1f9)&Slv_~FNf+gu2+CQZ5$yk$`h<zO
z_AqjpW#RkOID9I8U*Y>VT^c!_+1lD_tWQbh+S;E4GZmoZ-kvTCXa9H-+kl12iZt$C
zz@2oO<krg6L&;x+KF4zUmUX5R03Wqo;SMs*nK=jWLrP3ga1g4qLc)2PN+AZX6ix1T
zoS5DTt12gUrQY?FWOB4udi|i8+Dc%5Q59$}G?!~@>UF(yV)wJNv+JeLuD3tO!JRnx
zH4gp}2j9ohWy5bPfW9m*UXpRSz;FJ^J?95ybL-Bc6Ke%Z@;3#VRkWrK8r2n%XHRK*
zuo~M0NAK~r)(|JQ7<nj<5C^i|d&VfmLg=-Yg3%zBo2N=Fe08<T2}ZUUW3IPnS@qmx
z@iLf3<mG&l1%tIrKwNr8qGiimTYHXpVPusl1Rgd+5Tmiok1=61W#WLn{M4T>S`+X4
z7~|Hr(FsIb(l0Y$o6^b4BA#G8fq&CywV-2r``*2so$W2Ghv((dua$R+(w4CIDMKIO
zv=`|1hXnoEiIrx>UpekRO?zMHE0|#FfGv=&Y;Wd1*=z7p&a`l^#pkr;9tcM<a#|aT
zJ4bG^z&*iAb)3*!|7=TDzDF)9#BjT<isx+-!XjrWJovF?<ECICO!KVXT6MXSmf0S!
z7lBgSmA-&y_A=R!J|c^VwHpC7$#5W1@}o3#LC&CprAAtVcZAEexy&q>rlzcDv~OFb
zI>Tv|(->Sastow(yUHtrr4uS&__}?y(MslOW)=eO56vSTlut*L(gZ+FjSKlT$f>E_
zDn#?@q%FNtbKZ!YhbbIuB(PJmbo}x~L;H$iYV}zZwvRlr6J^PjJEpliriqEa7ORjz
z+OX7f8=1>H*M>A!Hcq0it_PQ;3^@zF6W?_Ds9+RUL_Q&O9AZ5*Nzj~%1>dQ=2ePmO
z5EKHcHc`<Hv>Q-8Y{$;CmM(g}U_iS7gYOxX1F;s1#N~yQ<!Iw<WK6_b-UV6p7^u|e
zxSUiJ!VUQpV<}>8A#=$wU;1Pk5<&~(Y>HxK_}RxP!ZD(hCNf)uUc4#Fj?fCt6vvZU
zB$)DHdc-tP#PMR`(1m<~Ux`ZfSdF6;@R!Mr0)ByhfzDY}EV74Mqvg;+wWY&6u>6AW
z`$aTZE3USz6mxgS@si}Vt2qg+rSQ{`-N`jphR!N5L)eAAo5cVUnGk;D(1H6<uQVQ+
zA{1nY-g5+Ek6!Q+vV-IyCcKaY?MOR8JM?_Kx-!ZlS%3(^m^J}B%v4To*^6Q=8elz`
zlPQ`6w522=T?DmRL0ps!Z_$IQ)1>QBpBpk1ln!QNZor%gM%_Xs8y1a_UP$?t`xJ3a
z_ky*AFMVPF)CZ)_mcnM_cEfO}JaCDLhx{)RmmqV9nFisZri}Fh(rw{&+4)7?uyQE%
zaUO14%Nl3Z%%uk96PsKqwoGU$d^TNhz59w!x~}SV0jHufVE#hgR<plp6PvDg4fasS
zXd8Fl=J_QvYu{Oguz@&{D;wcG$q7@ji@e<PHK`u+8^zh}O)sq`ywtWuYm}HdJao9T
zn1OTQPQ;Eab`(P-?D7-qg*3osglOAp6zYqToaxu>$4)TRI5F@C2>T&mWSADK#ilre
zkib8Xo?2uCIVmM{y2K98qXtg8nx6S6RpcK}&~EkREK7>%G@e!Iq!;GR8Wc;`d+yYr
zShBi{Q7zySuwbW3eC^aLEZkleXam>oO+y1LZ6SITqS;{AK$&$RoZaW22P##)q!GY&
zB-GAO0;Ua2%<3~O@CM3ofT6r?-fa`tI`jNS^mc>*2|Pz&;x~i<*tJGdRWwBg%>+dj
z-D9#{X>iPahsV~Dl}bTxD|tXujN}J*&_Yl&<zDy<-&O`N4Nx(PfKglH4*7lAzF(zb
zL7+9pDn^B?G&UT;YT?3M+0q)MV|UlWRM6z14Y`4IMqS`vx^gOA_o23?cNL-<+xh6H
z;y6N&iyz?^P3w92PO^AfeCUNQ3$K^Nd6G_hxb@QQw15l-!I0Nmc3Q^gX^*CnR($YH
z3Mc&u7lh%#nlFCJCTXFv#`8&5^b|*g@G)-+2_FMRyeW>-<3<T=%F16zvEN#CJO7|Q
zke$aLbR}Uuer&uHEUV-s#YJ6lcG$o^Oxqoh&*sqN6b0c4mz3q7;%U|@tV*ZUJH_V7
z=Q5tnw8z5b=eXL3EiRi)({Ob)**sS_i|a}=!9l{R`_l^pS&f0nKcsLbPEgFll0rY(
zJd3M?&*;DnHK{K=)a`m%lpM{DgPvx5QBpG-bs$ZSfLn$d&}z+5z?YGC<&k|e$d0=N
zJ{dx8y00QEW$SHBgaWFrYVumlFq}<(n3O>Bsh(?V*aa0Qp#74b?0RymvHFLHz?;--
zgcsJ?tCR_$XgbG`r~8ZqzoE;hbSX5F%_4s?%_!n#0oMs$N3UU!3Iu&|%s2|+$0vpE
ztkYC2nnlR&XBH1F3$sm%H1kxUJCX;_INdy}&!^P6^As&QWbz36Dw~m}GAFCH*(N)b
zDriU#$ib%`MIeEae|Wq9GU`3zcfNb{`(1U_3z)S(FFvJ&U*@F}%nT+$8@(RRf}{55
z@&L}CAwFE7Y_0v=5A+B`d?cP>EDf_@Ml*96t@dgA{fb-qj4mR+hcjE)D*DwS9hrhu
zk;RnAViEkzG#=rO1}4@SLCvMXEV@WJh|G1wGj)h3d3zOqk$|>eUP43>swophG&4jr
zL*Kb!qm&Lp+ELHj5z|x>({?GH1hwO1hNu$SY!>~<7Y>O_ot3E<V-{tpz}a<|ZF)WF
zEd=S!IGk<~T$0y<_5i)M4h~ILHBZv(s;-F!w0}V)I@3l(8L_Pi((Wl*2u_=XFj3}N
z<7j%691mfUT|j3>7*YBYesc^9ZxZJp(z2LW(~HBjexX+}=VCI0@s~&A&65+P2&$Dp
zV!!Gl<W7)u>;&VH8>k8+e&FvI3OUn-w0429dI(e=pI7tQ3{gbXp73mvkxJlwT;?j$
zRszIc=lX%zJQ(f9^LSnt&w>0^D#2@Q9*M77J#OqBiMw~CT0sN(&Y_w~Fh=8{#j^b*
zrTqjUjDbun+fP#3Pr7F<f30A&cQik&(t59kz8=r()ay|)?TL3hmC0W+!7Tw4(^+jP
zUZOwYk7BH^lPAH-o0_PZ`7>9jo!iYJ_R;J1!A$Ifsk0CM#xYDATb?;0cJS1T)?sEB
z!)kZ3>i=Le-nK$EjCnh#TOp!bUC*ZHjT1!B#iozEHk;n4jb_PdSEp`Of?wA#3ssP~
z`{x1;6;8y??(eJZ?Jdkd{2T^EQN_zmtmx>)fjQ?*QSgRJ_@)_7Q!k2=c~)iQ6t>BP
zfdyVBQi2{*KrY20w%SPQtk4*<Hx+ECxX+D#Rp?TTIqzy$`PV5-*@%2iNOeajY5WB#
z$S+B>4GqF9c)v}*aK41}9iv!1OxWAm8*J}v4esCHy1({Ef=XaF?M32WT^&^3VG=w^
z(3Q<AuCDUNlviPCXe4%=1GhcHay#E5RE-(RhQeH&bq9T2Op&>#;K4&&Flv;w46`-b
zPCO$#949TkxOsUN6;_Dv<F=LfapEyqH0J866R(kuUnd*aa?F_$S+Y1yh~ESKMWaYc
zfZdb0C)DMV=T3s=5Ri4gl}7R)N#zrXCmbb`%uiv{^JWWj6xbDLoSOUE8el6(T57$d
z^(jbdsH;SuCr(_y#MQ1P+Ib>KglrgYTx+97qEPiFZS2m(6{D&&OIDP;+o{P++?Yzu
zl(1D-O=W7;Zq^``&5AaFg&K8s1|Oc0t>=sdJa{1+)73U2T_n&WoQ5jYjwpP}QBHdL
z(8IS2SB9wF!<12mr8QSu*8D~)KQsX)sp8t&Z>8sd_b!pN0w#Kbb|q%EHw_)si4mnv
ziSH-?enC@qmS(q#)46ijpP;>Fa%atOE&5{daK#<J7%eKs@C{PtDqy7b=Nk%Ixwg0}
zP4zB)m>m?h{*K+XQFQ1NsSmA}OLKp{xlf0MRAY`j6H29}f<Z$(+nL+|U_VX%S!i+w
z{1jeUxZS{AHlp|ODk!AVG$@q(*{A?yH#r>`bah7b8wq$_dxKh<L-Bk~MuRn&s3H9I
zDIBQTLAJJ4zzwrieW<)nsjag<sY^6#*EF5F!EI_)yG?cMn~SFYWjA0Mx=;&O7@4FC
z1b+~ol{yv(%f1bWIekU1;hp}&-8I7JSMcnRa3A^y=1wa6W*axxWukJu<9Vj|RsgT9
z2loV0amUBBC|hNr7#4DOZ}M?eaq+>Mn*a=gTZDb&@+M2T4W~ZW%#{XW|4Kt!GE<r-
z4H1(^y&iI<2;P~mNAElpM@MOw6@;`#!OShBUK#a%&#8Y`KBPJMPv;+2V74V6!<F7T
z!UtDX{2^V3Y<Npg)RI(UfK&i4(tD+-=u}h`__3;(rkf-eftkw3E>#zdUYXJwgqhs|
zg^&}@-_NmtR?tC+wG&&Du|Q&eFH(`Zuda6WrJru1z$2fqXih|<um%D|2RS5wQHd#4
zW$xMv<g}}`Z3Tp?-?0?PJ1qrrV=0hJO936Vz&u~%O+x|wL~gE&1@Oj^=)*<utJ`zd
zh%0N_A(JE9Dn-3ao%5M{hGSb|*c@oOc8dX6N<{}IC9X;kCV#n%in1zcRV%MP(JMJr
z){;XN%LG)-lB^6uNu%hyN&CC)llyAd$-V1fUo1V?QxHd^fhdSAB1-|n!Y`T<8WbC4
zU5QHOe>6V!`M9p6U1J?;4j<9ni}7nSf7UD|rgI`3-f|B7eiR=AAz?0QsibU`!fje9
zn7Y4NU^Tu$U^Q+Etj1jetFb@A<0cLgGSpE*@x>T0cdYEthNg=P9aFNvzQEXW>KL7k
zuy@oH2|7Dn0ZprYd8&_RGr!s0SS*tw)zPaRJ$-crykARXiRm39U`K80cf7N<HiL{%
zy(#>(hY(Y>BQbWB?k?cubvF@84BG}>ClVcxylFHYO<iFq#>*Sc8fmJR7?^uX0U_O?
znfeXc>3Gx@F(H4fM57{+8sL`J>#a|3B__Satm~X)o@tOH79BUmq5;%v1`npXm!VcI
zzuBqTMraafEFj461UlEi<aA7E=(R=O>P<EK0u}#p93{iXS!CQ494>-?bZr57hgyxx
zOgjDN-UC_Ok7pzG8^S;9Sui(7955ZHnYS^ZVB84ou#HBo@dau@qD$pbs6gSh!3Pm-
zqv5A0t|*R@``ABlF8_lLB;O}!B@FyUpK!>89q;}%wa`HYh^bxbl;Q@T6*OJjJ?qNa
zHg(|MaMgmsD;2z6=6H^{=bEg07s(tSr6<TLk=bik=X7mSg%t$;l#G6Y-8%ie0;}9R
zs?V|tDCkegW;~gAcxQUkSK!w*vwK5)*sh1>;DSr@=#cn7eZm=~VXwD9yr`U-KUqGb
zphhG08^S+3qfQg)c7relG786%VX6r_QNx`Y{_=Ij@x_TSHt<X>v~c3Y1d|3w?bwM<
zXhn6a%#n5)W<=V!2&%kwZ&%9+?QzgXM{0<`Tb9Z-V=)V>q9tBtUfqbJ%2qI=T=?+j
zJ~ALF(DD+YcV6TqftYp`7ipZYhV2uD@p9Vq^L27qzj-9x-Ij;ZGqZS2F#Fq#fDq=G
zpg4Htf;-Fezlv;yJZ@Cm$Ooq$8X9}sYkUya=4h$X9t=~BEgTh|Z{kd;6IM#Ia`Eq~
zjPkJ<7CQC_osoCY+_vP}DM9goTtvJR^zwim=^6j}6e88BnL8IPB#Pkjch+(}j>af!
zl(wDBJ=SV8rWhjtjT*`ZoNx*osPP2nUfT<^9lYaqQxsJQG#!_9`r6tg^K!zw^o2}f
zS#}ke)CiZwG0@CTJ`BppfvR^?o!55m!hGEsiF@56VOkOq9IzM|R1K>2+vrYIl%690
z?D-~|phJ(e)#O7%pLhwWrM0Ew#WqC~O$myuT;8<AC%apVoU6M|J!k|>aUWV2M)Bkm
z8oJ<r*VB%Jq$w0ghYc}+UeBVRIo4svKH^a%Vq~;@R6c9wa8$@UGzh9@)A*tn^m3TR
z@RPxGF6$U$=7z<ldK~dnR{6N!S3;SFevUpoEG?{QX*LVEDw`ausfIr)^*7l?MYX|H
z<UAF1M%F~jJgk63)Xr*NfeiF|VWXNxVB&3UTan3@5uX_Q;Kr~+dc=WK{sr+$SM=0x
z5U-?vUA$tk@~sK@McK{5U6d#ZD9+Eb`gsNin|Jv+(of=1mOS%5l*rT?Dc#~0+{n&#
zdm=InE*-Q_WOP*Dupw$=)7ua#?@F?Ppv@20Ou><|13N)|9WHlg4fgpHiOGesNo;WG
ziDtbf?=hHxxeA1!gFF#Kw6Fpj=9_>QtUJ*Wn*5N9$soErRagN{I|Id*x3v0cXHktN
zpkutO>%EXFD&$Q-eBbjt5i{qUINKH$R4P@HX@^!ZZEHf)mL@dq(q%S1+f<_CYN*om
z<mbDlwo^nuNJK1(d)nRV>T26w?&wPq4S|~;$`H|w0Ie!g^e5~|<1Zxx95?oXz6wT-
zo*a6yIGbs{*$nQBND6Y0w)I9?M-69tM%!vQ-!v+KaWMzGf_FN@h}*rMuY($|MH_?r
z7&Wz4eoC}AeGBP=&d@hLfmY77qsL0R5HyU6zYQH5-m@fo*Io`D=xeUXmTr}=3Gj*u
zh8P*j%_Gg-Eb=WU=L?ENYYS%_PP;AYmMx0W2Xfy-Lz)YHC8B0DJV$7<0kOjASg_c?
z!0MKMic!7n7eX2SHA59!o<K>X2MtRi5z-yA!FJ0$C#`7M5Zh^9qX?RdwiLhlN{+~N
zXaOPh5~(jV&-o^Ezi*0y^yxG=eTnsMtVe1sY$m4<A$WGR8-=?E@a{`yCZ<EB@1Za`
z>3l9Cl>EELqpOGWMpxakX%{y%t@F8vanfWk147RT2=k2>%PK;B!tqRzGj?hnIx9MB
znauTtVSbbes+BoZ%TlbBv_Z3Sg{Rd;vtSKnk#_lCAa>zGvBag-jPZf;lIzQUG8ki`
z#3*o3eRu&_odgl?RBtK66gZdA4Zb~d*ZK_Q#M*6M*<GNdwCePropn;bnW26&%edJB
zW+ua8)}(m)3Dv@Q&|>7t92+Kj8CPp!S8E~{yfosk{4i-G;7pV$qFCQB);qR;MSwxW
z@XES$459{~(CtDm)3V7Cn{N?ATAEQZU%5>oxG0xsEz8c)Db47Vc65x^5}Qq;3bkkP
z?&4*PVALEgosBBiX0+ejUM|<>gtdlPFfu}pXmNruU`AUgqxfINqasJFL`1~@`s7Mt
zIOD)vMNTX%HvXVcYsfeYZnwY>H$^k<VciuX-m{!Nx#igz$Bu9A0ZpAQjZC&7nJI>;
z^p4Bgz0?t@TFb1J->&iuQCeTN#q5<aI$yAn6O^t=GBiCtM^9m;`@BebzShx&Qooi_
ze^@>;(bCKHXiJCl&5p`rSiA7EK4{tZ!>Yc?zW=Mv<(lxHspNBX2n#CYF0?g_tIy84
z(%q`$S^J@}LC5`Dx>;-rFN@%sXPqYNnPak^yGH04nXIF@PbM2JrfZ|#@qXKgJ?zS4
z{ELo`!(I=+31=H;4)2E9t-Lz7tVs{al<IETLqpEhC4+7(2JQPw`Vw`Grq?J;YRaVj
zrg*E{77L2{Az>S_gG57-VIQfG7@z6j*Dw@nK51M1P!23G=>F^tVz1ARj-;E$5vEFW
z9UE*F%XDj=o}_W&0qKn<37Y@Gl7AM%+ORe{wWg6TDjClO0q1g*Q$Yq)P_v>5i>S|1
z3~pagxDr9+za&neA!{_JClbfvZ3G-P7Ijv3=$i@8c9TtuIx{cDD|CMRm_++=eYTmT
z*)({WG(r+QRndLYGI-T|#^DOyCQ&~)WTTkivHE?2iO=xQNfOOUukQ!H;N4U8{59VE
zfq!1$pWpD$bM@>8ym^;IgS&mJ75h2y{L6Pd6W8zc`&9KiN${(B2{ohx)R5BMPwMwa
zO4V|Nx{4n5gS?84j)Q{!mg-4{M$)l1Vy@ua8dR7x!#`7%KCYa&3@C8c!^R?@2WxK=
ze}pv*HwNf^RE?4<gyJwsC~Gm^n}KZKTH_I>%}g7>61290gSWQ#57FTRW7~}e;g-%(
zQC#&ZdY!OA;Xg_d62rg5Bm`RYl%xZ0pC_Z|i4$)&>?8MIRm#?JXYgQmFxXoA=d5z@
zoN74Gli@Aj;nXx)VTx_AeQ@+(@Ni4U$VsWrT9fk@ogyASAam+8dRlvfE$D0X#)RwC
z2_xk0NYH#uJqGuft~`8TQu-=I3HKlF>L(A>1EX=+Y8o2$7YjUjR+STTl;Xr`^pJb~
zM_HxlxHDG_eIh$eOa8GXRDkb#PQ0k?X$yTupu=7u-bk>coJ|h!E%XdgYI_Q0I3SG_
zb>IW;K%N^s;r4Joh2B@z^%6kNTPzrtOmGL@M}HwTnckxN$-@VHVtn{;mCmPzx2;CF
zAhfz1<ENDskucP(sq%eXr=p)!Gq1<5BA!WTJp_i8h8}W-VQ?^&fOXhImUT@X=o+n%
zdbzAf)&JXCRx=VJm$0D<uUhI9V|PI3COq3$^NJ*tI%qW{&0r<zdo+1Szsxc=yFv5L
zDoCQ#S#ZPtqofhHI?-{fgDG%(6<Ka=;J{BUt(dK0NN1V{GYpM!IfZ_CR(msT6Z51V
z;=9qH|0o)drt4ex`r$5L-b=TEDydV`^bxApJXKK>Z5zr-C|EYhx=(Pf@-!ViNsva=
z@Bx}%g)c`FeoxA^wa*Az9k?B4B)lr^b(s}qR$oMYzX_1VE3G4|v<j7<S`6;dx_}w6
z=j_79|KMpk@}8E_QGOh}E~7W4_qGgvg?<a4mTXi+ATKAS9}ae?s66_)^d3G88s!l#
z;x&{>pSvu$%EO0-y>ibr`kZ4dq#tSm<)F6Q@3O2gB<$gRM;4;XHjfo~wBP725#ny&
zdw|UY0!YgS8lMMejkfz;!&kS)S@1MxdV}Mg6m}lkOvNVIV2QW4?)%ozUY3ii;0bKB
zsN|LDt9DYX2)?d0W%VwZw=%PO=WQ~43-ouetB!(i;9Eqk4ii4qJxN%G$JF$KaRB|{
zkd!MQF*ieGv3jKPFW+O9iY+40D*k0+%x*H|l}b&>9w(zB>WAK;WSI)s1k_gfIzeYa
zpFY{Q(!M_1DWi}&Vmmf$02=KJ?mv~>|IZkCr@{RzWUJ^GjF{{b;L&GA-~C`fE1ZX@
zj-DogszY#~wiqIl$kYHy7#c5%(=5-bvvl&lC_myba;s%HS(D|Z@)Io@@{H#6+_|UE
zDaPXHZRL7TvpIvVnYX+3aIkZ4x4)MA%+v!ZgvR}lAk(-(b@sLYA<dS)Qnuhs@w~D{
z-+d^FsS}0kb!h!nEBBg#Oxvv4u%9EdML!hY+Xj)+2j@krNjpxHG>^qC5|S$1jM7hN
zi9(x935yLjmVBsX2fVRhyj<K^5_CB%j*?^lyOQwh5aJT3ea5=wGQgh7BjCsS-@z|=
zPvyXBZuP^R2mSBz5&R7YeY(V-5ZFArhM#ad-G)o}8}4jVD*ix@-TvP{CSHCQuY4>I
z8HF2rChzK*B@}GyA<{3ky2Zq7&?lts4a(No`wzt451j5le@g=Vd65LoLB1mLC*}cU
zqtLF+eIG`n9%}tEj|N&t;%MZ<6t*QKkNA;7>etQj;0AiBNTcB-DZjg=uRYNK5wLY9
zK;b`gBZq>*(7Bh>c|{=4s!XY!^ge%+<a)~JL7kibIt8jN1u~UW6ew4X&RZ0yb|_FT
z+@rpg0@VS{FsC?YQk+*ZYLwnBSg)_XiXoA7JVN5q-X<I|%JSc0bU(EVgj3a4faN~;
z7s~xpm5a`L37our_=ofKHU1TvLp-#?x%|ZJO6ZYxl8EE!g<<HO?lhWs*?)b*>pN?j
zc~`|AHrG2$`F91O5Sfk8XZ7&oq;U$+qzv|I16k%c>*+H=p+v5H5_n>xtW;8ASSXJ^
zXY*L%oHumL8=hq@1Qbx{$Bj&e(|Z`QpPcis9~R9bgis7eMXIw8Q4{qzA^b)&P9&N~
zE&+z`bpk`{2vmMcq8CYo5*4Al6BKP|=+NVYrkUnX{$c!^qE~T{$M*13L>N4`1sRMT
zIn-9+DwwoE8O4pogp=nQ8`*!3xca!+{FFh(>o`hd_ySkIprC)R630YYv+=nwsZxrS
zOKAK68((XYliqhj?cx>0)&hVPV5Gt)LYNq2!2ZsIhNpeElRY#J<J+{{9I9>$sEP!B
z+AFCVT4_(BL_Nw$N4V_|r|7pYC6?2M&$?^OGHv<0vzzjif64d0!)w1InBIa<k8KPL
z3~8k8q4u#6`w^iM&#htM1a90(Vvlqae_sooCPMDWCqI1oRJ_c(n|*8jcPaouyj4!Q
z4#Hz~3<MGD$QAnvWp_x1q4r-n!<iO!49`f&F@xqh9d^dM;8*oj4B}i5A|%bF-?+i1
z!EluN776^r2LsyG66!fy7YW;ta6Hiawto(kGsnOm9?-+BV4QhLaNsWzEkiN-@kOQe
zZ;2AZ>_r)|DNo|$Om@KD$a5Z1M~sue2!Db-H2Cyp7}F;-F(|w$+C$5G#0@~9V^{8A
zl{||Gn2Kdb37_oFqdz43l?Af^p3GP<ejc3r3)7M4qYOi#LQ|UN&0#<t?_M>v=KipX
zm^Jc#_88d#V_5C2kg$5i7_{~L_1=nM<yNSW72^>ftc>UNN?xq!S-0};#meWnT7mot
zhWeds{+|Dy?@cBv@yeq^Dh6hU&K+%TZhmLKwQ`nyI7>_PXM+~5)MW~Pij`SeAY2=i
zfG#xXcnm#~!Qrt0dJCjt8Yk&lF@+joZe_E&+4C1@x1_;nwlLb=Eb%JDa#Sl+ZI5%Y
zJ;K2#ssguHNrbEW7WspD=FNjSI>BV*2IJUT46p<my-&F0(fayNxNz)<X=3c|tj%rc
z)h>egX{qOt(PsSFO-ldl_6M3P4<A_fKM{<j_a~Z5U*4v@`w9GU+Pk=Bb}e32C~e{s
zK6Gv!eZWnJxEmn`!+pqZP}anN_a&j$uS^hXD;v-}tdJJqZai1GBd_96h+IE+GNrpp
ztkEsPsIRURW2a;nUz)OuQpqk#E4x6BQwlH&!Ll`Q3eXx*H^Px<{E`S|7dGA4SWr1b
z|78VTC-~2g?M!QHt6z|DYvp}eSv}yLM1~m+Qe=XMO{-AX_R~Zy9latM`eWoL8cc}&
z*emg|RPTzpgsvWDY?!OK4&E$)!?3Y~Bz93AB?<XPJWH&WfYiD;m1w&mt8#+FRtGL)
zalYKjoOf{>2>2O_{FV4W*ZY>`@%o5>?*a*wL%+C+O0{T8iP<A8RfbaT9u*p_CRNG_
zYPX2Ttmm@iwdi!<#^VrozSRvo7)(a_>7>eAi3`&xGF=9a0*B5=wc`fV_{M1I7s5s(
z8Xxg329F*3ip+eCRMG%J^>^+EVh#v>u=|lN18Bk1HaxNnl6q^N0X@LKQR-4X6cI#r
z$GIog+*`2>o{R8h??`ff*wlwNPt=Esc)|KX>4p2*v@#-wn<T|~<Q`C^d2SP|>{dtF
zfE*+Y>)WtDxR2lM&~0d0vRW*;yI2a+21(7&+CR&on-Y~R0TWclkuTA`BiEsq&gaAn
z1D7LHq4IJ5VJdQ>P*bO(<61Qo7LQVbSapi9vY|f5um~%IgEES+X2bGmc8us^_=75Q
z^_#6l|D1{mSXP=QpqIqjTFES8%9oRLn$`%3X;q>yBjp}~OH-|ok=}6S!u0YbD>Fv~
zHfQ}~*zmBCXrPvfI-^d2q%qrDt@G#~MRcbQ&I&Jyz7|@NtW2Ju!w6HU2OMAGSJ7pK
zcVV*WJ`P}%W#Y4ZvS8VMibCHCne3zi<G8j~855-}{d{%x8CF>FIq;@YMV_#_Fw7|L
zJ?$<z-7L{a><PJrT;dTi&XcpEWQ$vKdvJORjC?SI1oEh($5VaBPf2)C8Pm~VW-b*U
z@diI&PvpQ`snaE}sxUeB@y`VAPT}9zC<)Fub8XCq_2fJleqE(-(Aa{EaTmXuuU%bv
z^Ju&dlM!>xIM=iz*FNN$`T-tWZ8}V{@w&Pvb1P+gXARH~;Hdzx9{Oj|SE%p7P*^vA
z#RHtO%q8K%Swv!j_4P@_VCYaqKfu%(rXu<Q;zaCYs{9bn*+WgCSw?ggLGfq4Fw9-R
z*B7W!!vpx$75(ljNIITubDCZIO3AB6p~5ay8Tyo=?`C*WM3*$c=>&nWLpTTO3G@bM
zO;|00J2lE@97`B9y(y3l!U^%XGA=@Iq`B;`O-6Bh8^y@4EAQ7Nc;jOkze?!Cg}WcX
z>qGrf`8h&Gj*QspSFKFn!_pY23+gb~UE3pw;a>$VAvvfFwjQkQ@hj)}io?OFLeKg6
zr|6uV@Kx%kW#^mGCw9IMKRGnRUueV1L4TV*s?=G3CQvQx03##VmeRr9t_;B&OcP8l
z_KzcG+}a7n3vhq0@%%ya`Auc+gg0b(fSz6`JNQ+d^#25^WIOa6&Z%ay!x0be|MVB_
zasSUu9(1URUKGJO5$s?u`m`ygdVm&f?qm<n;Z2w|_`ger*Vax8uaUMnQ5On9KG;K_
z9{xORWUy20A@6%0(F6qQZ)GW;APp8HK87h~Fzw|wf?}G+_7R;2d(P&;wtMGU?tOwM
zpCl>sLns-(-Kg``)x>Tr=Up3%-`G^3m`{y;B|uS-2;iW;8T@JMqnnJ8yd%?YYV_#O
zP-KGy%(VImcn>IRvbOf;cLdxGn?n-)31wFJy?yA+;7>$Trz=<*KxvW2qN3rG*x;_N
zK8fuOw-6%pHkmgvdQi|MJ~A8Lst&1OQceC$<;OvTjy+ch2{dtFuSF>sjgrS-40QQ^
z@JYE$>`kYX8})Y3%8~a8Wn^5yIcDQ7@VEwn`5=ttITrt{<5}R8f&amDKVlfHPto2G
zN6+peLm&5zPhuxLXImHpQS&L7rl;_;$%sEM;U=hynMrtC%oZ$R=puxB+-JCalvh5i
zy8dwQ(YZEn-&<ezan2v@9s3$fL3|79hTq4&aGt?u;Sp41ft%6lA4LEg*B^zkFw#V~
zwNdPKY!n}yjbeLu4G!052~4XdrK7FlgMWFhrZ7>s3w+x}X1U;U-$!z<8U9KlT^Nq{
zogvOIMi($*;f1OE`QpEgGHS!wUrHAAl*|)|j>OjenE1wqHbn#4nweGXSL$ccv9<fn
z;MX>$@q;z9`@jmqLGWGR(GN`kVQflm<cvk*G=&RM+4?H8l@T5y;%byt>+7MXZ8cLr
z%=m~W9b|9ozK$M<oxbb%03FwJ9lLIKM@d6-qkL9^A3KV8FcSLaf9RoP3+6QXJ~3v@
z1~JK+eqLSO(E+*anfh^4WM<}h>T);Z%E*nTaOtUX^`Q8pACXxCJ`Xz<xxBs~lEQ~4
z^4c1itN)5d1MQsJg3GKd#%D*E9E>HQ-ejrRy}{NRn#li%=vF@xx)oa9-47%TrfU2X
zjS#v(($=2ZrW-ILE|P}?{$A-GczFL&U5y^z4{Kx2%$DHqN~qE=m3Bm09oV9tDJex>
zF>yoyli-^xYs))P<rV*?@_tcG)l#*}*KJThRw)rSZTWtUKxKPi22M$mx3`plrKpBv
zCNE;=^@jx<#T6khjGs~&<wwOaY|ZeqJ~)PLyOg*IWz#{dGdvP4vBaDsX4g588hV!n
zGc<$XFqoA#?(eE+qmDxjB#Vxb3hBt!v--=`sD$B(5HjeMSt0s+CCOyfK_x3gBrBIb
zRxSDn-_x`DEsC#+Jgf>UfTzZgeVmao4{3X9R3M>Oc`!gLzGyBWo3-)!fYf|svOX|I
zH?^FGuPcKEVuRJv2T9XlwhAq<YnykdHx*XFQ-W~{G?WCA%7J~_iDT0>mGbMc?yj!7
z(MxZsXF}&GHS71W4^!+)TF?VJaEuZ0s6?+mr&Dw6)Eqn2e}Pf12AJn7MJcz|o&R#h
za8`G`K=l*oDoQCOY)<T;{$VDJ_GY&_WGyPg_-#sXSDWc`lWk-kXqA-rBryh>9=kp;
zf(8kkjSc6M1oJ@NwR`>kcVv<HLo!mfVBv2-t8z0dZT(+3>anJ)7i;TsQG4ah(l?$h
zTMUrRs*+J14ML?p!BCTt<AoEpeQ>z6*R^fNKdZ`T*O;Bb!=3H^j!#&mT}!UEORhGS
zwz*t#zf~5=l28iKEC5pQ@?&~|i2QhI0O<+HknmOLQn?;;9z#mFAjC7HD+zE$WQS7W
zY?yvQ%N;J~R6KG3RccOia9k+GwLGCDX>Q@<5!fu8PLXQ(n(@k2MWm*M9!gCNCN!z5
z?Ga@I$fdBDoo-xw8r${HMb~Q$L;6{ch|T*$Wnp4gy;bt@nw3ReDC>mPbTg~inNF`&
z@%FpM6t*0k&}>8;urH6WUUbet%@fRlK+j!gAX9l4Fo{&Cpn;&Na=`=w(hPlSWY3^a
zM04Dmh3bLITZ53dA${_uMhkId#5hTRpdi-)O;ivLl~ZSGg2c5jCL3DQR)ir36wh@r
z4eCb7=pgTm7E(LWLUcrFCt67DMhg*97yv6k)W2*%=UlD3lz%A_^eF>_N(9)S%_I!U
zAk!A$TZ~$jb~0S4{{t&wyd)ZkEvOaUE%lS=o>o#cTwgA<kI9`%J7NLrgLMeB_wTbX
zi5>(cnJ5Uk;d_%TQ{SlaV8Ot&9&91<P4M8VY)s}i0Z%fz;Hi-5U<fbWBDSdrEP!5k
z88{1p?i&TXatnB93Xt!;YQJ})`{GyH)kPQl;*_|x(^=v#PKhQcAdE=M>QDsLuratb
z#IhQh&(ObvzH89)1=1e6Ngpv=17qbartP?ChnTh-6pm_#A3cUgTU$om)6kr5_m!Ci
zqT}lNqZD4ByI^00PDwiZ1kp2T*a{Pc1$xy^`#UX?%w2pxz&L!co0^bh!hYu0B`<Al
zo3~^gPRzJCrToLNNwSRHfI$nEef#_7Th#a+6D`Fop^?1|;Yh=TT^1@sxLrEN^<fiJ
zMMu@v<*^0c`HUM$%3gTKO<2fo{>jwZupDZacRr-~5J%h241zH=<hPWJNiq+*c4C)q
z8IC*oRg7>`4IMC?b7}Vj#SgWe5}jo0m&oZ>DIWb%qxU+ey1H?Ev@y`n9JPDo^n*xh
z>g*$1u#-<}|Cw2HEd*pwyp+s~qv)5FS6@D)$R*F>4{2$z;h)BJ+~9S76l+8SfNM+i
zj9J$t+OIr3yAbRJOpOpvbHAnnyGtY2R^&o;bv4lDOD*#XEk1&oEzB7!$DFZ>ss?Nj
zg41aAt3^#bD?R3B(FWCdrva$DulD@?w1m!nB76sQsfz^`&}A1``NL)#5D}z(Vx1|3
z;33y+MyPM+=xK=tv(^AHk1FkTGcOx_Uaea@s_j$<_Mx#9@&L%mH1o0`@%=XTe7Z2l
zjlybV3g%N(*iD17UifHgjG&ys1co_CFk*<X<x6Ll!DY-bWjMoR3*!nIoL~*{D4<Fj
z&R6x!2omgxsEK<aB1s7li%TI~C@*j=48=7Wwc~;B5%6Q7losadlj_p}eNZ}<s|WUt
zV&)!<xi-cMR70*n)&q+1f>`IRG<O{;c`PXs$edbJT3z%id9P|}hDUAKF1C4#p+8&1
zYTgeSBVZfdv~x>eon0aiDhmFX9;M}RWO4;>3qtQpEgo1Z6h<MrDsnK!{xE%H0!pXr
z>zX#ev?~xVVDscdTK}Au6|{6%Mu@q7!l9D1Pj-G29U9%3BRT>;;W)f8pO&<i2qpsr
z@FY{q9>w;N;GN5vb5={4PNhOc_ONk3XlC#pI0;u*y%nM~8w8)aF)QHP8`^ncrDrn#
z%u#%8U9y?w<8`#6P9#K%S;RTwD03UPOfFXHa{<s78Ad^gjAvd9{3?+E=#a(YM?`v!
z12PHL7K}@3(}+=pem0237~#<u&P$_*&H2?(oQE=6Jfo2DDAb})S8Eh=iHOK>CW|+y
zG9^@|hhml0+BX8nVXn+1sZ>OikhpcZv0TJ;M{66l(9xw@YT;^sp(9~07`Us|&z;Ar
zQsX*Y)5(?X<WH3o`b+k?;gDD8Ejvl#nG_FfJ&MZ@)R~o9n!@MJJUZGs9?6?f)16hA
z{&g$vT)%Jax!n*dn)+?u?z7wSv)k&kT=1nnv4kH2;BG^v5Nbc__125PaKLHca=3Mq
zea#WXMG;PncyT9*x~r{@5khsF`eY*N2ncBAN$JMb)uc3A+_M;wCQT??l=$U{|E$@T
zXXMRRJIu>Firo8i%eC-H)<90C5QMc3LHMa`0V^NE8^Q8u6HULvRv2WC<D!{5l9ZoV
zX3G1i3`$7grZRnMCPYQU^HHE~HTG<&z|7YaewdKt_@kd<H9(=)j*Myrq;-^Oq*4qd
zp~NFhDux{|IyIyi$3^7Ug1>K~Fs9N*zt9yg^+$&yKBzRVE<3Qcyi!K!#2HztAf0^O
z5_EC>WwQ%q1}H6=mtd*YMtb>&?n+HJOqVTSO0r`BI;NSnGQ&yJ)nG_lS*V!5Tik&<
zgo?CEZ=iYC?F4O?juyV|stU^JD@^cU->$77%Lqgr9>p=6k=L*p0zt$?8~i<JOGTV;
z0iC2-4T~mJh<PN$CWQP*E_lsY9J(bfcS=~Qg|GK%pb4~G6*4JyYF9a{k%m7N1XHDq
z)Gr^=iCr7=mR)qIv)E^{Q=7WB_7yu4XlOtSn5$k!XPLtj(qebdYQQyq;#UcOqK<wL
z<FJa3Vm6`>_EtYQF&TJ}Ok_$uL)9|e4RN&y*$SK;P0*Wv<DBvkju>|8toC6ko~VP6
zuVqPPfS8|Hb&2V-gl94&jD)45LD(mwLV<8<wh=6XP7!8GK`|c<rrUtsgQDoIN!rm1
zb!!19X*B*Q;iv`Ul^I}^I{HoYZfdYGtdAZX39iq9S$?@b3qrs@6<M$zDmFIIB9Xr#
z-P`W(LT(|<(_?KTz-ppVHpl5VrdEU}-H54Ej7kikQxL4LhL^m##OL2uBJEqeFBdKd
ztns`v<}yVqFz*(_VHEA@w|r}W<t+oj1+$FLp8LGs6!Q{zMe|Ml8qTQFM=l}|8=_%F
zVB*tP+mN8RE4|L5JJ-ailIHHg(~LmA|3Ion)6oL(!UDSK=*7_E3~QS@u(nXc^r*y>
z;^(6L_yVK3e84z`>d^SQ%+BNT0`s69$(@W3aT(hi=F#U&L59+#G-0-Z)gSs=-?Xu<
z0rs!ZAleCILS*YiPm^3RWQJfhCb0qBA|}mDinX=pnVvM=6ERzkK1`KQG!ixHN}d-q
zEk|thr7<ls_)0;+LS(4I!LA>?h<VbeW+b8`wC%VnJu(%xT!e*vHSAX-r1K42X3(1V
z`eP$KC~usx3T3Z5)g9boW&iSRD_f&S>!EH|wNZly2Bht}*X)S3TF?(+BP*KRbh{Zz
zD-H|pRF)yHS`0bblMqi{HF@$zLX>H?Eb+;aC{eKr>3EVwv%-U~`J;Z=zgl8uasr3a
zWIlxfe{zP_#FNKaU5%EcQ)!{`Gu>9+P>JcKC=!!=ZEaPYpDrcsG6GOzEu`sZrI#h4
z4H(k}U)WM<fDK0jE6#Q^*heEZa>k5p8qFNVt1fTK_DEABVkJWtVw<O%#kfk#Pu%vk
z3>u39w@LxLW5`&Jy1BNY18)*kLxs^ygG&3K=jJ#wl}-}azNyIr+*)Rui*s#e9x1aZ
zbjcz}749?C^V!NMLk=7J5Q&QJ0^2i*uhDj*${K1xXX)NZxHrgo9DC8~{p9fn=b7;>
zy)=WASmc#TdzqWW1-!ISORRKP)e=H%kYDwQ708d5HCC5zi_&L^A}U}PicyZ8S?mxw
zl)iJOSWcr1UCf9_)75CyAb6@;6>v7rlqnWUV@0ZxUTY%LQIdS&{>|j^2CDd1S!;b7
zqEpTYHh$p#>4bxDy{iM$&3nwgz^Bx~fsO%<V?%0NWQQ|xHlOy{)}Ck^%9eY(>U`=i
zf?{S(Yt#wP;p|zL)e-?)A$qfnIY+%}OYb@gA;e0#H4fo(Y`x7NkkY-HCGTv`y9m<S
zspr7hP{K$N{_svfVGRS)RqWs^^-Ztr-XHWIJlJ*K)M;2iUN=uYwhZmo&6a5q0aXvF
zRI(JMvT}^8T+|JLuU@VmeBn*n61{2Jf*V@^$q2^+3NTs_Mo9>45QW?cqM%@`Fosm_
zc(deAoFT;~<_JqwUa-SbQSMEr9)I)*KN9uUe>^;RwaJDq+3AJX>#f)R`rnR^h;*tt
z9RCgL)gRW@lDO6?k0Q#CYQpF(cx4p`5`WGB2XLVkBN?t7ma;Yu5D!tn`aL`i@|2e8
zVj)7Rxj`1}fz1uFpcr!OJdTdAwiaXV)z#caE~qh70gTz(G&-+>!{*>fMT0T`-;p?U
z=+^%rNQGCweyI&lmo?$(g2$;`L~KU+kRhz)x{$u&daae!u(Sc-S_u3UNzR2Y-a^5a
z)QJmRKU{BEsRdLHZR%m3K1mys*uhiT`gSlrmekCm%V%gkP=!ZD8I-UUl)=k1c$LC;
zgG<E%g{y<b@gk@oGZZ@^Z<5CsKNMB{LPdcJ^D-FE(eME&dI*G<Pe@^JaDTJExz!7p
z(xv6=IQa-Cuvaj%!yap$CdGMg5zL@;QA9P{w0EXBNL81e1y-}oj%1S+IH=R?gUrP#
zK>>x9*(Cj;C_WxqiB>E5DVgEEj_b1}8Q!G0WZN0UY061jRv<lW7KRRc3do6#OiGoW
zoTZcbRK?g;XSQZQgg5DFxHMP-j;b8a#}_olp`5?&DGj#QpAZJYXO2ynVJ?DYbEHB>
zw)4@|Roj<@_MKMEs^<kZ1rFh7ZsWTXVb3#tr*b%5_aW82!40O5l0p*ZUJ4&iCn8w;
z$;q2%dr#h;Jbm`_+k=CbhbP~^Jb1kK^5lnugP%@L6iD7Ix;`7x*Xe9Ct6%_-!<($F
z!EH64VN}|R>OqF_AIb=`<tR7yW-~vyzyxI$e+nbASk#**Cx_3Tym|Ka<i)GE&)&S+
zgReb3IC*vO_T=5+vy+22C%+!NJ9+=&<;#=D&rY7dc=POOl+2J@Bp;I37zcM6#h8LU
z{q$g;<gAT7S6Re0fl3CBnp8hc4K#K`QfnoV%%m?9VXDR1G`e~4z;7C{Z0$Y>4oI$!
z_GY;M3ngUa%+$JbrXu?|ug(rH@?;rx6#y@}!K1<Q1h^_nN`0{dJ#=><vG)*06;XEl
zxVHLgG9b6ob7nIGTZ0U1j_g*OpZu!@4pf1Pxin_qdv(_YStX-{M&UcQ?A6t@OAn9E
z+O9%b*FjYTsv)0t7NRy?hgU__dSBIF9izrX>Qwyl3YiP>&{++gydo>HgMUGL?N)~e
z>To_rtUXvFMYnMRo3yDO&bx=tF3_thv%XrZujvc+z!`Y{6m)k%)l_?Iq<8N{aDR7q
zCu~lu-W+i`fG-91Zn$cVt(Zsp3na8#5qAAMaPUo&k58XGBcgfByq@tdLN33^t6~cL
z8TAbY0Vek#VAqf!N4dAX)xQt@va|DW`}#hx##ink48Ks9bL8%qD#koElB5%|b$F4W
zT2hU}Imm;b;E05M5Uxr0aWfE9{tdMv|28+?Q!c}rj@UqV!2}P>bqs`*)td5NR3GL>
z7Q(M*Xw$V>u8R1qj>7J2KFs4;byn2R;qZ^g{Oj`YR}c_FC2*KhCIlY)!6@o1Dv`@d
zNWk-0#_}?UaN5*sGWuyb$|zv)R4=~XlNcsQKD}6(71N8;Y&u;@rg2qSIL@l)yGBu~
zVs~6NQgZFs{PnVyyW6$0V~!Q<Zlt&PuH{&}LAUpDe;5I+Xs7nV?)TrlI^28y?4<ny
z0ju|xKJIl!7jIVRO`4?8J=7_qxKS_p@LQ@U--BAl-L-T|zg1;<Fh)tEnw<PC734R_
zJ*Km2szf7Sv+;;ybCqaguyj*_x#IEZ>MCVv$1LjR*Otx5QEw?#@u6wUmZaZv*u37m
zyoyiLm1+7RPA*oa*=d?wB-6B7`HV{^FY1+Xx`GyJ=>(<1Vi~Q>D+H~@rDvgT_g=rK
z2phMzUaj{a3zXDbpTQ*}>cUQ0tSAXtMPRt6#dKPH#&TLU2z%=$9?+=wd%gk%!I8J;
zo8(w0$4+vhlM_nrVRhcZx8gAz0A&-QbLP_tHjs@0Cz~rT(-@ZRIrJB1hbkkXTKNo#
zSVuU`rQz@SSzW_<^X}c#@#cAYmyg+T1#Iqy>4**UnT<0zzQTN6Eak|T(;Tmh8j%0X
z(uEO~%T~rRQgyk67}k#Ku*%#;ZgG+rV!L$SHD^zK7S}72f~FXAGAr%x!D|JhCY#Nm
zhvruui!aKCtkCJI_pmE*nN{EoTjJ=t3}HT;vOy>2B5uF1F-g)zzFCs?brW{;;8OQm
zDA;h#5-%2hP{3#K=!#nLrz!j-q*i~=(~+Yi-;^V}DF?8hI}h)NE@SR6Uc85O&8owT
z^Kmg<TjO68&7oJ=$liJ^h0+>{o*(Y^2mNidjOfTUqceiaw2P|qj!dUz{6Um;ANSRc
zY+U&h^nO)2AK=#8_0_U~K}bu^HrPSz^X_bj*R8Vk9|Fbh%BB>Cs<3`A?aW2wLR4-r
z2*%5bQ_?0k_q@AriV|qm1m@<c%DENncXyAHb*XII!Q|R(C)2D_ZQ4S-#;&}m%~r+T
z3%+({nZ{o)RF+*td+f+Eo)*bR^`${@(A`Wp{KRDNt0v3fez4b>6J|ZEdNXQ+2f=xF
zJCkCj`{JQJX?)VwVAr}`8je*PdktMB$4X&bWtBs;N}sZhYs^0x|0Mhq^Ur>0SV`>$
zYRke<Xbo4-8NW8?pRfFL%0E@REUm0TXer21iUbi*Mo1{JN1zwRi$!qn-uCYGC$`)}
z(t?M(!A%ET6t<<+eu08TI&^3>It{k9YG3E*fY^BZPE$a3xv&cE)cOG+2tOHlE6J8s
z^qs}k!DqBVnx$oZp^Wm;!dPt!>IL4abhfoMl?>aSc>8HuC1o~)qu=O;=k$pXDoZw<
zS62m|D@UE*@>pIG))*`bBStN3AEgT~_Z~cauw#OSCXlfEU}x7y>sh>cu#LFIKvUI|
zdp>$G;0@3+1pa}+y0>-Tx062+!`|raQ5s(ADU^ztBI4jyy2s$~m3_#C5IVKEt~JW|
zT2ddYTg!#mrxxHtIE=Y}t1-krLv8m_aZIQ`R))C<s?B&dn_lo<ZN9`YP-fktDwGbu
z|C_+TXSLT`>G|Cup_MmW--Z<T*@X<%O-saJ-&}UtQTEsoA5td=xhp#{y&s7F)v%2P
z`JU~SWqje~Iv#yKEMZ8Bqw-h`NO?Roj>`;(t-3P}j<83MY4eI}G>g8vBH_g*0#(+o
z7*4ojpuzwT>v%A#JmC5<E___VaVEvLpg$7*cvx!>9!yD5l+sJTWO#~2fm?wV3nXmN
zpTv%J5?Fx^+0;F9Lw~heu!Ur*DyDL$aIo3SCwr3#rFT{ezS*i5q&2ISPHt5*T`zxg
z0-UaSKqeuLoVwy}Mr61OIIH#6VI%11;f|(LZ)dHBq28sHB%1|8)tabzM?GmsuOD{Z
z>Y!^%h+5`OEumniig1sTK2tk)I^0yj+f9I04VvT6NlrbSvA?Mr&T!taL|T<;j2We<
zsyJWktPj6t#t8+GZS)Wfvs#S20(hrUzTVsD(E&XT^P^PLl1o!WSO$$=4U16;Z*gi5
z-&*hO@y&7IG+pJyG?niuULK=jXn`@I(M#30JBQw@SXF^&HU^(3kQ<B;>XJk4$q79>
zIf?S2j)G>zmfEt(9fnR_m=>doF(s?w+;%Ai=V<f@uGq$)L+4JJ)|7lz!lutx8H{Dw
zo|ugaQ3MU#?hV#zFjHV}LD|xQX-RzLT`mGE;x$rj#@0eCQ9Cs<y=|%fR*s)utkVN3
zEe$Re=?JM{brTqR;v}b&z!FgB2}0-ad^X8&9hl`NQ*B;RJl)aeS}Z(Uc`Jk-j&&l-
zVC*EWV1~n<Or1hO2$3<x9-Bwwq2=G^LL*{Q7s2+{!~Va>HpflIFt+R;OehakPskNw
z^8E+fz%N=}A-**O$bL!JG9K~&EaP!Th6xSk!`3Km*C!YCLC+Tgl7#gI^+7&T)TcN$
z-c9N|FSYa!PL4bYdx6#>i<&rl%ztBLkScf8NA5NMjnzpft=c&3!GBX#aBB<(t$O@V
z3=)5~t2X}wLquOSb<x{r{2$mplPGR)pGmV)opRd@4zqUqvF6|CEolh0O5Cgq?w8od
zQ)R;M01pB?ADoZX4hHv%tYpM1nZhZfbL-JrOxXDNT2~t+OLt7EkrrT2K~DH?K?jb4
zYbm5Q5;DMqT?J^kYptW=g5$7f7XB7SKgtmNwq_8y1H|k3F6v)hd8HOCn9aLHNBX0l
zu39hXWqI!y<p$SuYK?F}@lpRcsNiRC+~5RCvyV3uaPMuV!LBZoaNlm+H{YV!YERt_
z7Q^h`XqP?`xu&p_>r6>-i5LVuat!GO4ih4%WsBc%DSMMoap>&A50`wrQXj8USS^$8
zuPgSY>*JP(>G-x~Wa5QabTKkXn^UQxL~trqH>ZL!q`%6k)SJ(KdGYqetMBm&4eg#i
z)mJJJ9#h)8SNjL=Ug7osFBJS2go5{sP>{GkWdCvx?Qd{pdrA%%kkIg9|Gw}4C7B>k
zot`prgAHUT$B#pa&LTRH@<TPsGo{AkqdV?`LopdR$l6#vRWGVJGggc>m8oA;Giy%I
z_OEAA*@cCNc33FZl7)l#fLTdC=V6zvt*z#pSw%`&_}r-8OnIelvP41?zCzujc6Y9U
zY=QcYvXNItv!L;O>W5`CCii&Nc?U$*;PadM7QZv9LVTBvXfUV~yd0KrMj?N&CmOtq
zEuZzSo&9@vZ8*v;(_SwTaYDOE#K~=qqH3h8K3gaQVdey~E>1uyarc{kIRZtPyVBFf
zOR|4yPrg<eto1qCOb5fjh?A{6u~X-(#t17b9Ne5^km1jm0H0x8Wg1~3%@rP%TWdsE
zcWOym?zSV6f-TIGboxpRxkoR<xV&Y|#Hz)6u<4`ZmlV9B?rGpoqTIxIE!Nh0`TTqg
zrx<G<P@tFq_yAmNz`ztd`GI>e)@yoRkMu<dtidJb57R&`l|Vho7g%T64Q=+vnqShV
zR|hsK=rw(zwAV&dF4;8Z(uU~WIUOk&#S(pXSU{WysUJGYC?qt97q<7Db*jw=#nj-S
zZ?4&(p7zy(hD&~Usf5TKGw$%xLA@Nw8$p~9CCLbx^t|wp-j}0H4^PHL4spvF35!V~
zF)tM(j7CF;&8AEjjzMwWCD%qDL`ZpC#(9-t#{ZkWZ((oSMi%`m61O)YSCA~*dD3Nd
z+%(<hoVf0nq$j<V)s~Vdi48?6B;}{{-|x)eO;Wa#ZFhUWZ?_wZ1VIoO4CaNw45l%P
zSXg<pvHkI_?UQ|(hsvV=i>dp}miT7M#GLsC5<!!aT9ZPuSp%q#(ke)~#rYO^uI*kn
z*@?+aTm`0Bl=i!gUs&Dt1qFsX!Fj)CkfPNVs7agTYL=neWgR4+)iTkPE8tgSdGtB6
zvsEi+AeW;>E=oBc%K2B&;!4HcxX|t^ZMxPm^->0dC3j4U4OZvZ5t^>H^`VJTTR?+0
z8fs#nE0|H!n;RjJN@0;}n?TOm2HJ+xDYW!DF3Jc44+14_+oZy-VCu=0NAeu5*=b48
z;iH9GJN3CoTeN>`h5p@|x5c_eG@imbgrlcbsOhOZl1^dG{~G#vY3k=A@@!VxaGYw*
z*pwV~sl~W-G3N*RKC<76tja=kFy6N2xu(+psd|573K&lb;&<#j^nMUNUhIYr(Q<*5
zrNmhHx`>-hALwsx1d;sQ@9eM$#B{)x#XD4XrM^r7!M7)p`P1Qly`yqsDfVz{Z&<{s
z52VOM61=z20}F(pfXT^tojxOZ4t}Mb!rF$J8it6e+=Q7LTQ5_++cL#oX$`RtcS0rH
z$4jXJ9>^Pba470v`6HU1S>U3}qjaqF+!N0*Ud*-(_c;E^EtScwYPHm)xuXqNpwUIq
zef)I4{~zy~!Z^RO5>^{6*c<-EZ=xBX4RAZ*XiSdS(1r9Nx}-;Fv;h<flembct!}GW
zL$6%Vs=?jX9knib`sqZ1j+S0wgHF`6DRpldu9`e>S`mQlK2A5eVOYSJbh~T|o@J=x
zhkjP@A7*pX#6@WQVx3dOAOFS>_0gr*Y{$=es*yLu4(YM72jqW>6+izx-CbCU)R`l#
zEA1ZZ{&stRU0Ho#AGfmaX}ORd4vO=m<BbVl<+&gu)QVg#9Nq&UNFjdf6~|X%8Yi$a
zFiZ|@)cdjq$zhep6m8g=zI{@an|Fka4$DUE1{=0Wydz2|L5m)wjHu=lQY}$JvH)jQ
zvu!vL$GroLPuhC|>5#fGVj70&ma-gv!v2Xw0NOyIcD@Y}N3Z@Wq8e?b$X+_kG5g4O
zRSdz@#CSFdIH{1&Bp8V>)u4Gl`Ar<)E(dpRmDHq_5T?c2zqtQ<yI#Wmm<f59?2vM7
z7YbH$xR5n{XBwY7%!F-IpoM5F-7skDPRk2p?{2pYWa_ue5Zr`(rz9aF<^yU;0Rp4P
z7=l2i1%YhqRbVGVmhoKkMz8Z7TQtv}JibS-No+xXZM8{&UMR|QnEQy>p2MFZ)94=F
zXdTtp;;JtEN1m-$zTUTc6RnbP5*cqP(;j>A_N`H_@Cbd?LHPPqv9Cfr0j_w)A)iNP
zDJ3D=LEf89;JIsT_G((0T0X<30^os^b)%h<jNk_;%u0&Fw~)(2s43kcF<L7Z(y5d?
zLQ)~h;Jl1H9?&>LLQL7jgBmy6fx{bvz{I1tbuv+e$fTY{lM}NFGepij7_Afs9T!0E
z;;9;T?8%^hIdZ3xCH!In@>U5iGFrX$_r|b{+GAykKWZnN%?gUv1Gs3fHXFEj@L+{G
z9(TO$V!wihnTU;<NR63@X(seHC6r?gWi=bIF&kU7WbFPHsb$++tK8BZsh!=Y8^~^1
zv6Z$TPL50o)(|Z!aw3r*z3MZq7cVKWgWE`dy(YYX3Q`sb8r~{*Oj+a&(3A><g_|19
zY<S|3yt+458sGUX2e^6a)8=V}VIELa2}=Auk`jBvh=Cp&>5xOdhaB<-V->yvB!O@Q
zBmygYz6fC(%0S-m1=&DBZ<1`14~vnfB@Vnbg$}tSpcq|uCPQ%r3Yfd{wiCF6E7Y@^
zg_g-M7PawL&76_XM+Vw6g9WuI%Gm(__(C8=<p&h%#|L*X!#ZWv?vZa7A!ZttMkH}>
zu*d9(xFgrMZSHtfeT}Sk_13v@W&hEWJNk)8zyI8`mjFyYomf1gi16Qvvxfmcd3e7g
zk&@QwlA|05X7ywwGn$X<haE|GMaP>@4@zVOrUDfnB(h0xhk6e*o%~SnjA=B(pI?71
zqC{R%uxC^yk4$aeI7SN?59?^f&DlKL0hgi?&vk$cSRt#xaXP?6R3R}A`G9V$htM62
zk;<<CYMw|_Q<5p7T~r3*l7RwI9e75@Eu<uym;$7yy2dkl8c&pQ0-LZ~s-`Xh0Re-n
zMU=s0MQ}?PEfqgzzh(${5OKtDPK+=0dvO_HbSU^Of)xmshj&RS8aDw`C2j(&>A>t!
z4MEG^TYB*X!wT^;uq2k#dDnnWyB=}8;zwF10Y9`_(C+~>C}W~g!J+Wl;72?Y`hBu1
zlEtotFt!)MxV{i#T_{fkn~P&yUmW&8$Bk!z&5@7mXMaJY9oLWg0z}5Olf3|*apQ?w
zX25G)KWPigVQe3k1sIO)v$0#@!*Vx3f$8TV=r?)=p4i4eN5(0j_J0QjKA-PRvq`Z>
zv3R=EXaa!Ady8_J4B`}CibDXe(}_TZ-aks~mcta-N7)IS2k@jAj<9NqZT$G=l~UDQ
zZBx|huX7To@hpy}Eh0rN>Okvn@P5ZRYMsX*vA1BYcN~fmK!G8EV6=dQ7vVf=LD`yi
z+@n^SrQM}$Y#N=nqVzn@vlPEbFVl<Ee$fikX)BygNgW82)*?z)@K}a(D0&V-dm2cK
z5=c?CllW*Wiqemm3gFueh@OZ8Xw*~Bg=)fM95z*udy&?|Et`=bAZPK~+Mctb_Q+t=
zrAoYA1T$uMkmMM7WU4v&0zaVcPXGCquMLJ#jm3im-+W#)@4OnvsoUmp>c)UP@|1OC
zMc6uVpFO5{b-H`K3W#<51xNM+7MIn(nVwEd*lcRnn0nc=W4w<|FAPhn@fjkS$HA%b
z6wTX<qhrgEddf2Q*zBIijse0ytn;V><u(_LmVpW&$_1SBJ6Zb2Pi5)z29{onVkCp|
z*15an)f369Yb-uASbXW7Ta5hUU5uQ27*>f?_drHZEWB7ppifm&>-{eaO(j<WcUmrx
z6!(vkFN>oDh}>$Jm>%*;=K!=+-Pme-yAV;_ONc1$79v8LsYz9cSZX0c&DE9GlWvVx
zV8#r<xco!{-v@hVd!4<xp87YY&Ek#*#S+D79Mt_HZk)jJouKb9_<@T9XDhkF7r+1j
zGl*)sd&9sV?adq2#c~+YMhiw~rtf$@2>;nzI$-D?J~1|xE>tYzP#P;_pO5UIc@v;H
z<19;}kVwu1jo;jNM4(oCUx)w0?AkKZTT4V>n1~qG;+!J|S&)u$KGik?H46~>yK;2r
zG6)2|xJ3k0-Uwk3x`0xc6v%NXpu5v^I&a*9^*ujhguy^7<e7#6hWT=YD@8<ZCK}4`
zne)YiJq(Kkf7pc^60o59E-l>?p`}A;2wSIB+ho|PqcD$9k9b@X9`j7~9G8U-DKR?g
z@r&&idX#qDc8IgQ*%X+>0Ip!vR5EZJACZ7=yyj7LB8ucMRBeyZEMgY3%mAOCbpRPF
zu!}rT6NdiLN++yYNyR$}GJyOfh=!{XTX{!CC%AAY1jGa|ZY!xw(qzBTse~FhpvZMt
z7yJM#*RX1b>(OQt4W0k`FDdysBX1yl2hbI)NoGt$w$?;unPfPyHV%M1W?YXS8b0#)
zKvb#_8W0~V!@<MY6a_WN!9?)o5(#<4Bzr#GXU>q<62`z0b!s49ZNVZ~w9r1-x^X&{
z-PYf;ICUM?!s*;PeyR693%$%Qjp(bD2)dEbl7=IGh>({eUC0p8ci?&{H?$*$M-I`7
zl<CiX5L?w<9+vl4?l+_(zkvK-0JX>TK@{FnQ~;z?&uFg{MA+2cAnThAlB2M)*&FTb
zo9#g7*sX2o_YNxWsjSp`49YWGje%xV-4la&U6D34qxfEJ$i0?a$)cLJ+;(`d?^X8W
z-vu|#fwTSB%zW@QmWm+bH>Ec7_qVKO-|(00Rq-}kMsGwYay%xU!h1%{b;eyM{A_!q
zU3r3=Ww`P$nJ`V(l<`Z;o{6rG%{~qu9hRG*QsLKGqC(1AbDa(%Ub$uBG*#2y)#WWV
z)y-x&+A{P<vfji1npf2z!YA(jqeF8xa0@`onb)W=gZQaSPT6OL#D2$Yho+_g%9=9P
zoIzw~51u?_k@mu(6XL=pAB0kp3fLszJO%|Y&QMGVRr{LMg;RKCsS{7$DyT*x8wLNZ
z2ztai8lI5xE8#|7CFdrMa&E%qT#!I@KySD+;=-;5D4_aS>It8g-C}UEOAJoD8!7%K
zo-#y_0XxTECP!lugU6;AJg$kscXR$75^O=pX6<7(@0Mv05N+h9cVKAxn-kWUlnP`H
zD=8L8)Ykn07667t;q(P9(>{~?)jWDVbgO`Yi?H>c+RZjT9Wt4m%a0Hn<tss?M<<bf
zu1dtVbb|}=+}Og2)WQ_0DkCBbqK!Av%=Czm9w;V>rU2~RI%U<4>H=FKk~sLB2H4vx
z!4>1isau;!n9Qx|-w4j)clVj#AqXBy!s&mYFQE174k2<S^&s5Z5A(>^n7}2al3H39
zQG-vmfk42Y%u2$co4<G);>q{KCcE+4H_>=K=ZV%VBM&_kxqNSHl2<WXe6?JmL>Hfn
z)DtxdX*W=<F7qPs#$Jb4*}A+(Kg^0|Z%%eij(ia-m@mAErt3*VV0`;6QOoXZGiK^n
zW+DI$+*EBz)ygVZcVmck+|0S%v~I>EM?*X`^z5#vb>=&`!36Id?%&JH0{uas9&(4#
zXZ>g54Ca$Z&$+WG-+P+Koi7YY*-Js;#2poouAe?edj%G)JPaJ^KG}b=?_p3#_wf0%
z1CN~qLr3j{p|4Sr6*@?aEI7{N@O3zj5-cdhwi;ZQ;T%h{1au7M#Kq}~4u6-~d`{1e
z1L0Z_gPU16jp&egN-0sCk?EXV-$0h$Rr=(ueIk|{x{JzT+r~QB404Dpz}%&n#;nm{
z^X`MUrPqs6q~VxI0M%cXk|rtSJc?*8wK=UG%s$QSR%q0Q^X<UA!K1(B|2Y^;1z0c~
zO1r-!7##UK|Lk#8gO|yr;Er(?jfaV23K4bJtC%RkH+r_CTg|7Hv6FYrK}w;9j9eom
z;amsWH?V*OkBL#3junMP+zi8PRIfczIBz|X$WMh_M`eWnW-UZ-x<{)K<I6(d^VLE3
z2nYs?$RGFO7tGLAs4?7>cGtb1wMQFzYw#t*zn?~@Gko9<jqVs7k>41h*%_VRu%k|~
zo=l>maAePLs~!3v9OCS;J1_9w;X}fTx{ot=hO#ww&=PGK6y8)$1oXF_p$eXw(ff7W
zD)Ps)CIyI{C{jHl(Opdg3GmQ)wj$3?7#^EqSPU8%yT*qEZ5X}bOm&LoY9Q<w6R^Sf
z*peb@Z~(J&?(s(}=EP$k@pjx>UV3igdLWZKVFC#0h~KW$S+N^&J&lWHTwsdJ$nmd1
z#{+six8LV<)j`iJcnBhsyAzzJ9HQe;0LDKaoc8pc<1pdfKo8_KKwQd&Va10MKEcR6
z2F3<0pR+4=g9uO<>*OQ)1x;C=0jA24D%@Mbkgf;SW}Wf6ERnq5kU*wxb)$0t7R+Ne
zAyxuHewMyS;>ibq5v#QZ+C8?#-&n-cDX<YA*vL8pF72FMPM<o$=ExS__SA6uyk@7i
z*XIH_{m;QEdiOoO=e~IZ(|x-CL@?dM1Kd=fDE3<@_PZipOPd6e{f?<9;Y^paUu3!>
zIGqI%=J24#tj>}vj90Q;nCS%QCR`QqwdTm0vBGk=;h*wXk^otgu+r3mKCY{AYGFK|
zicDF$iuk-PKr~t-EmOF%vgy=H)2Wptfcg_7Poac*iUTuyp{V<+PTf~cl-l?tfl~Dr
zH&m_TFp@r%${}6G4@>QX7)F><>TQt9E3TMHUYnAO8F|?Mj5H&Xr_9Ux!3WhuEv=K`
zi!Y}@8sn^k!u0l_UW6WR!cz(jArWR8{D!X&3;~ed*K?lZ5t8Yli9#cy(u6!@U(p1;
zkkp%#XGOFVi&zUJg2{+_IN6+R15IC;<oMJg$48iGMQ_q*JNBuOKHAkc!Q@`#1&_Q)
z(jxX_opG5u9d|l#x^l7cY!N{56W|!ot2I&eF;Ml8-Eb5uwyfA}=v}-xX6^P2cah2z
zUYo&PEbhdDmus}ti>zVRf$Xllqto7kEK-ud!r-rAu-AbTI=t8CK`{`Fn+T+Fw#EX&
zwPphr$>uGdDwLAt0*kinlo{bSmt?tFsFf?CA<~UaYtqf;oO=*&-HCNH(V*T_HmmvU
zbFqa29fkRo!^IWRsVx!r8E9_%ho7%eaY7y{LOvm?9dg>v3AshvIUyfcwI_o_3xa%(
z0yB^fL7UMRnV4;YRMLXZ#1ud!a3@U^ZK5d}F=(R_QA^`qexAxW(Q629Qy0V3S`Fo@
zM7c}0ro^tbu`0*N*x)vy<**_lsof3*qR-JiACNy}lYvp7z~k#eOpl|}qE&FVFh!TO
ziH9eMT1V#j)phOos+M!PWW&G5QRrmLp6(y~g)rzMo|cQkK%9xqOYxTPBD0CfLQk41
za+coo2EQa_<3^#+z28Qbouf%`&9d37h)RFG^`LNSp!sFtpRi&Hf0k4Dlg#1IWdeWh
zkLMf~R1%^knw+8ZY>LN2=Mv#nEaA^`3V#xmhAx3eZGo#ao1NNdDg??zTfXTa8lZ3m
z=m>uST}zOD*JWlt>r#QLfPsdoKs=@7L;4xqqVDynOO6kS79Fm$!d_=<bSV#;6lzRV
z$WIGJBH6S!&4u;?mWyF3SL1dj4pk(*|4BVJ7Y8X|kp}UA;x5Z!0H$8MG3Kc!a^M}U
z`Np}m;9WNiZnhro2JmX~dz^%XLx*t1=}bC#k1nwyU2Haesz^6fldwrtrE987SE@4I
zG2FZdQH%D}Z+QGJ(O1>Y6U>zj)z-qwve}3SG~1qt`c<J`>)Qy?#3V#Toe(W7p0=<F
z(Tph0V$0A9_ir!*;u){1M#5DGrC6HR$5L6@MXIdGkN+|1{l}>HM;rBob!6Pr=k`pq
z7#c_{vtPwDMm*zm=1Pm8$K(~TDy6h)ql#fet1JTBPS|8TY%&pkw%N`@-qA4jy2VX1
zL&G-24eiw-IK?8n&}O4`@8a9uw`c&9VLSTuupM+vZ0qeX;vtVhCZ@i`bwc~Q+;nGa
zhl=T~OatB2)cj_)A?}*1Tv6<~Gx*KN2qG$a@lqA-GJTmaWY@NL1ZSHnU?h4L0IgK|
z9a`-sEX8Q~F`&=RPn4Q3X#5z148U$sPvS}(V)*?`R?iRbh?n{=vsmq-{c$QxP))X{
zy0wN^|07LC_qPB10S2ErWv~YT@rwp?Pp?>ymvI@$i+{!<B)(R2I+v$MIl!#oS+Y<?
zj02=YHv`qLYOIS~H2_zl(kGdPc8ReuEn+h5gi4Gx*7eF>*NJUPDTR>)gX(n!ikaeA
z)s_*O;@FC>HPfJ-e1_qHNGf(f8yOCs-Iaa%-@YCx`6UQ%#am&4KpzcSnDUA*)Nneb
z&Dd2E#{9t2-HVsZM8+yp#@Whx6>6fjOnHaQx2Zpx5{M4|k)%P5O*cxzHmux#E#fiD
zCK&pc|Ndo22k+JGl!NO0VT6PH!jNomtRc!l*g=AVz!WkhBV9pxf##Kr$ZFEblC0>>
z!lpN;u!Qn(8fT=wM3WEW?9v&j2raSqRd*kgMN){V`OC|d>zti^1C{4Mhn7LI*|<&t
zx;6K2jzQDKPliC0=zb9Uu$oqDJO+3ka59EIU^%FpN3(%@-U*zpvGk}#`38oRhqX-Y
zP(`}+p}*<eEavzADd;}u!Bjei)2DDmUD<&J>E90?9QVqoC|!Pw-h)JPPak>i!yl4}
z@<EE@b2v*aNkdw3T9i>ZZDF=wc*t#=tukxD5-MTMgsZcMcrYEl)`DlSgnAE=(D4t+
zfHLB<gtZ^5)P4oDJ}$b7NEQ5E+;Kai2}Cj_o*Nv&6~F`NEH|6PJSS$lxx=6r+)pk>
zxai#iGSG_&Z3Beyu9}x>X;oQT0DMKGCx7*@h4m3y&cjaJdFZqzJp1t?JdaxPlf9M!
zbBDa?ojpfzAaWa1fJbO5AnI@$RUWuBd7zLtudPj8Zg7@B_E(?76lte`kXCWUXHV`G
z=;mK#IOY6}kkq!fSFPjswm*K3)f@@aL|V^l2E2-?i6gJDf1`=qxbI?ya_-Q&+Z+|{
zG)JvJ#V)Q);m@8td-gA%($szatba)M%{wNSsQo)G>FBVgFiU!}RTXW}c8AU?k5&=p
z%b@r-a53`efa=F}jKM^e$TO+$F5ihG^$dLX#Szt4t`$o?_{6}PHQLl~!5YL813~J<
zs~FshGbbj_pq5&#J?{N%8d=cN^a%|z>&@-a)WF9RHoYAmr=SM|V*JHOj7?kq1+>H>
zA;qo8AOaBFlU_{BsVeSEFK7#05sb%A{|yA=wh0=e340YMNnvlpF0wqn&L}51bADeJ
zCB+CpuT-cDKWTVA#<*C{B+RGwRF4a_kIJZJeQRyB?%F+5dWr6Xi7l!#x>@X#zT;if
z_t-;y_pd_5G2fRW0C2%vZVRvBMh^`dk9ulMB&6eTNJi%)Apso+LB1Y{<fk^0A6Jol
zHW2gEg&&ZJ@h?b+YY@!%m##=a1PljyxMp=P@b*4Gi|o?AA8t@x7G&!iII|?WgtwFR
z5<Si6jsj1}GH;9McZ1*T5_<U|N0ROWWV9$3h1U-rgoH(1j(q;at|dyL+JslrIOw17
z62e3x!n+sn!d$?XL&oua7w{U;UEwW7hv!TA;K`G}60KFPa&@9B+-4?qZT?Td{7_r5
z8~0?Z^cZI{E~BMXU&J^*Z&UH!Qd|;in*99v{vAQA|LxW)YjUdwsDIu7RQFk|dPCmd
zd$8u3h<;df7p7PLKR6RMxRed*9)Z5={Efs$U7I_c)vL0)v!P{C(hi7!lwC-y!Ot=%
z(}GOm6#eZqUMNsV%!s$2Zf9=veftB9&!M4X!&3SS5#==d$GR+|yiiM*4CTse>684G
zG(lI*eg;j)!`Msx-euvh(d%f9UPo*6I$ERG(RwQ>%e`HPW}nO|)G!QgL4kypBqIs$
zo)epcOwp@n-RRXLL+ez%dQQ-*N4fm8Q&g+at0f;ed3J$<O93)W=9_oiD=DK$o;nwT
z$+<!hva;@6%rEz`F9zKF1`RpXoWrK~=46&CI3rFrv-H0T@=ujd=c9wak|ZL0I>+Rs
zL^=b%Oz1cbsoX0no`(4cQZ>#oZmN?<1uXi)WOTadU6t{zjlAG@;(XPlCHtn=f$pL%
z6Ft=h*kOG~{nod-ulLh#)M~Z{$%_;xZ)k~_YQ-^;4-*eC{S$tx5-79^H9Tl73Q&-;
zf>0nmg#bW`iXMXHmu`)W4iqUibZoEcWlb(Dk=;n4kZ#DB-EL3Ry~eP1yQq|MWaByy
zFIRZiZl9<^j)Lv>RF!aS#6`=_gX(&{HrMMh=WC}1?Oh_Z0Kzllp#P{xMT!*YW&9%s
zs{6Gfa(=%}r7;ly<CdK(H=y%-iM|4`HrCl@%_nzq(X=;(NxFIQvL52Em2BBJSws2x
zmc4x3P`=!<@1lnC_gnVguN%r?%>R=%l)u@s?>{z_&q4Eh)KCrseKTt)FShK*=MCi_
zw(O^-^2wG(aYOld%i<Re<%=!*ux==Sy=BYGhVm6ig-vh+%D-AQl!sgP@qI)2^_J!1
zhVtVryZE-D{1kYfirFmLLrlCNH(Z=TBs9}(LcV!GH>OuWEv^!fgE3fSI)4+-7eIr)
z>JOrhv%2J*Qu_r?lz@8ya(s3{f#N~@TbGzg1ln<}wwV<mdllwI^a>UQ1rUKZrL!FE
z47rZzLN~`gIG{uH86HJfA1~C$YvQ*0YUM}_E)-1iA;y?-H>to0$3>PvryVArmDwtA
zy3gT%FltpwQcd7I?wf^+h=5cnMM^YFvWvheCV7TtHyg~{Hc!EJT%qS6vFHB2@9{fb
zB>gevae+IP*}`fikCyNu*$T?v@JA2-<2uT(-qLnnmLG#Y=JaOqWi;)=@K{S+kF&DO
zmT(&vT`Gagq6G2&3adFD<}U{oY@p_=Y`_sQJAVJj?w~P(F9nVe8=;a14?;KXM0Ose
zridpz&8g$aa5O3iN(RFP1+Q2oF-&jEsU|40<K}HP6l|SG)q=`?q`#b)4!k!qE?+hM
zQC)Hc(Uc-#>C7h-oDnlX1reozvV*XXMG$tGahqj<9eJ(v2BlA~>_H}cYbo61QT|o`
z$cu+*kPY*0us`ByRTQTY;d0IRsT2iwO#^rBfPZ4c1jBA-2|!m|^e9>^ViLX;wELb2
z3tJC+$S3o`12L&$i5V%RJhLY=BfwGHMG+tOeKCV0G&S{9vcX6OIdWd{9bCRm{~O8l
zzhP=CnCWPW8}m?>LRqi%@^S@Ti$qo2vX5F}+L9l@O={7*UW=l+guF{(3@UL?#2LO0
zVq02^wU8D|!EHvD;vk8PFcS;w2p$PpG_^vnR+<xSs1PqyMy}p6{)~JRx2X*G-an!J
zk%wJB4Q|ju*57~JXD@(Wg{va+58(!+%`ou~`%oO_8ORZd|D@js2@14`7`>~^RC#b~
zor`yL5)PSSL8M=Bgl{e$@m25Ye0lnYw2e%*rt;;fYj{2a5%fl;#q)K#bSARn`O4*$
zi5z*p%8br<W<6h~U&rXNH&HS151z7O6;1#M2f|l){}AN<vHzT{SN`EMpywB<|ELeD
z1jurSPoUBi0LD`P=`*(Sp8<$I;wk8LnSuBk@`LnvjE4Vo`4%luSoIXCEid8Ei1DeX
zoDIrSUW1cv>qeK#7n5iv>*J*?;g3gb9<<%YgQk3CZ#HeQ#3f;`m)LC95HE~KtRmuL
zG|)tSpaLWQC_g^}ky;jh4==!dEtIbeb}HjIYTEkVNI@$Donnwi5r`CrrXwTb1HL5a
zfeu8;nTzTMKY>9(8!2v_47C$}k4?P6BEdD9+;JivMDlbtP**PSouept<EGvK<Nf>T
zmioeXv)e`|Ig}#5gY}K@u)mxYoeli^VsFkIN2Y1m`=vh~_V-6n9CI%y9XKo7Y~XP=
z?0279&oxsACYr?1_<_f=!GZtG^Y?xkb~~f~CA{=J?9S}>VEE824f;0?pto{nAPYAk
z4DhzVWyh^0M$xdf<+ht6h62lV1VMH%{m9mssmKh*SUq|EMpta_3n}bM15RPVx8l8#
z?7Vz%TwJA-olpOPd0#O=>CPG;^j==^QmfOhcVu9N6>fMgA-!A9<EM^Fbrj6KRVc*h
z^B|?PWql*}q~ONy7Euf61qkV_hqPn(5M+mSGHs#H7x3G73N7<U^cdF<YEMz5EaR2m
zB1gSev5JxehoXbI=@T$&>Mtt<L+oT$W7BRnbC_^rS<A&H`fo)m)neU+u_DUBB`(0!
z7x5O;!Eoeb_8VRdLNBaK9`6%~_z?F8Mik2;(l_Le-~$NUp)|3NJbq99cl^-($V0;!
z!Mj=)$-Qu?Y<R?ve>Xf3_z$cU0DyFT2z-ge&k@z`Es<w?#A&8+HWUtp1@;*O_gN(m
zhhjT9n#N>a;B8b(fx3lB5ji98;b_Yao*vxS72?^`$6V6Ds>OHVdBh`^uIUIGC8u#c
zl~@QwU6gDH?TnaWhE%DeST5p%@5KO?<h0e~8JHWp4)<y`<J>3Vyl4Ry13MQvQCpY@
zDNDNorkt3fu3_aaUxdZ0bPDv5V#;;`XX=Qpp?Q*x!$g$MWobN5vpjkc7Lj-o%O}fq
zQpV`(FCHxAgK1X6Vicu?EM2EDrj-!IYgx?oGf{d4rO}pU4<0n0O50KFD(K?25gLL;
zZbAoFIYG+7grbL!_wTtYbJ&0Wj2oyA4j&zI3pFB&*kXMwcUTYbOlJX87P_8yl(_}F
zLG5289`r*NFIQZYAW7YiS+R(hK8nH`BMR)<^ZRv-cOsWv?4cTgjTp!NbfU{$2lsYj
zV-BQf9xss&?S*@A#nDXKB4W3ShRos6l?iy7<p$`75tUs(sUfvQocq+(cr1AchDS%G
zQ6EyRph?Oc{gy*hW!jrcS`1s5o1L$7WNm)+ie7c5SGIJ9qu)yYkZrdNk>(SyuyKlW
ziG_F0H6U!`XaIi|bz+6l$`2C4r?^QAXs{Do+8~Ox3xiHgcG9VwyKENdZJn>9*2}k#
ztsF1qA}m{Sprrj`A6rvBWJS($vI`Y>I69>ag$e~FvwiS@PE>G@p-|Ugm~mK<YkqK2
zo*%~S=QyVku1uJu{r&y=UY4AfXO9mLRNhXSi>FTx4mg$AKYa9vQ;Fw?j}OpY^#?pR
zAXowtjl-vpp7Cw1r;o(8miy@N*>kT)5-dwl8(q#N%ae?b{NpAtLfYFppPS5c8KSxs
z&vL#C#(C+8cE>mXX}{|#iOh4}Yc5Yjim2|k3}JQ|7fm!6<I^)_k`pV;>$WkQIK>og
zK3zUkHlKAh{56W^IFYnND)awoOuQDGp&;4+a@Id9&(gEmS>D?FGWZIm`-a3jwUF|_
z7aQa*GS6wv%oW?Nr$}9nk(a8LmsTceU}ZdYO&QK*{++OdHpT@{JILhIAEd4JRNBP&
z6AW65@!^QIf~*p%@a4minY8DJ5H*1Bft9|q;@o;SuXTpP*F$;J-5*igogk%OZ`<71
ziS^0GR+C<wPLegON>>gB=E(k()pI_3s_u3R!n>8?-lgn9VkMz_jaUSEy&4{}<<Df?
zq$YnsGG7ALWf#%(9V~j(7wr2X`j89zW`yU4wnyXUq?PA{f^G5s|E`mi(+X@y+Zi$M
zl<NTgrDyAdCt?3=J&XFY*8k1cdFwah%fGd<72%D9A#45SV78!1h=F>Y-&pHn5l<Ga
z7!T(xBAl1x>MT81-$jGqPjBD00IkBwhe91m;g<7O45Ch+E$xr?&eGGI;hRG2CLvHJ
z%VL;Fi*%gd8pbGle3oL$ttc&k_O!0DbpTgDsJ{zvrWH;mB3--4?gg#paq*#tkZ>q0
z06#m#=IjdQ1O!t=S1|`wvZR#<By03lAXRGSj%gvSOOjbXV#1<1{#m;XHB2&s>+|EV
z93i1m6ent)?MD4HQmEqm-N7{A1A)^q5=v#oI6FK0I~p*0f5$L~_(h9u>18>`&X}jv
zesP^nD$MvBj8x`*!GXu2_a2A&2LD{3WMd4Nj_TJ(3smkSeCNddNWN;W7`?}Ir?|re
ze1*NohfzIUil)x*`RnXL{Ql{%i&};?odaobVZhUWzZ<x3?g?CpnwRVYd(FOQ@7P=R
zHG3feOu<IceFky03SaIU*eK=>(g341G(f^lgX>;Fs=zzhIKr6$U?}wYWsv$WsQ0pO
zFELNiPcFatl}45KejxJa-ef88*A#crjm~ivSN5WmQkZ>LE|afeg<=dg5U4R7pu@MH
zpjGzP`?}LPQXzP9`oNM}IeIO;l0;GlkVil^8VBumPW%JK>l60{qa%rN@M0K^=slJz
zeg|@yyw*t<VtN~s=kjecVqUxuL@r(-oTCy=bx@BBB3;Pd4L^+ZEdcM5zJGb!$3Lf8
zw|!1#87Ge>>l_^uUKW#ZMJG8+@;}t%^@Q}<w&hAHL(A~o!2~SC9BrACk*v1v_wX5E
z0O+MrfyDH6yo>=zAHJ#-d6XR$MAq-IzwqloPw33U&Te(ldH%}ab<o6HeD&*K-;?cl
z>_ex+5}v^CjwZzrj*f#<hVsz%6ttc%F+-3f=VE_T5vjLS{9RU*2zMa-l_%e1OOTBV
zuYwi0JL<MSZZ=59a4tR$VWo_q+S;|UtFxF}SGg@W_7L0-8dFoyOo-=v%@s+_9<&G(
zbLM_~B_v%kM-<N-ru!v8{1H}waS~bfRz1ZV>-mX0r?=<$qUiZ%GZ%01Up1mc<tO8$
z9ls`0uCjHIxpaS2=2wJy>s|pgqwS7^buZOvpl<lS;F#O(aTK9@4L!J~^&o%osIqsH
z$XtXAly-5zXuH4W)*hf>ys=}p#Gn~!vznblUzWNf=b|IW!FjDCSHZF92tnwY-xLZ)
zSBMW3ifl1h1Xun7(5&Tju7Gk+FkO)QztB!Ef}bsDw17}oa65D1F~O<UUW&{Ij}iw!
z-O^yOHQHI*?W}n_nCeSphH4uE<=e?30yIA6JGbvL3t{B^K6vm0ktEOD`4=9bib@UR
z5x0q(>&7YaiNhy>*b`0!!V_;k1i!;LxF!4(7uO9p{oe8-io`SWUT^R=K(zSKTjxn{
zA>Kf?`+coF@wq!%vs>aSx?KhgY+AgJOAu6gT0Z6i<z?`Cv-w_5-xuBuz-S+5t9^MF
zxM^cbXvmG=erJOFtpfL3I&hj$VvZm4#CsQ<@Oa`d^jFlJ@f4)0fdEVWncr3r;}6vg
zXeC2F62Mdof7hGFq+2iYA$=X(^5UJ7{<b#hFKX@GZ_?j3O#0h<Px`yy>&@ncG3oE*
zq`$k@q{B30Y(ko8IlnK1Ld@^WW{LI(^&ZH)&{K~Rutn!_LarpZ#pJ#WrtZt8q+M-Z
z6Qy{$jdK?<Nbhc|?hk}8;JvHua{c(`b&JB<o7+@Ww*%w27yv<4VD4Qo=K|wcfQSrt
z3;W@MISc)8YCoJZ=aN6v-bk3^kC}r5saDP1eI|_SCwgW68oUQ4$9{qzWR2|S;0@k?
z8(iSecfs&y_J*E}WXHbs>Y)YglxoD-KrVj;Ld35i6Avctuk0t!|8=wZiG6qPc@x{+
zS0et0M@yBg6y!6g8HB>TAM1&e+ohf45FM!^I?rAV`-mFlFzXd!mlGs}k_HPsw#peV
z_I#@p2m}=$rG&t;QGO9*{1=ol%;M7oEBjajin2VEAFYQWzaI69Y#B9!n#(aMXUT{p
z(0#67q@J;Ty2ZeWKtqhYb?(ZIIu2%%Ofh35CjXTD20>fU6s8SEpjLI5a(ES0PSxgG
zvBGL{&{$z!TTd79{_A^C<}itUTEcp0s~d_ojs|2Jj93pxcoy|Xk5TB_`{Gq)!8E$O
zNxwDA67}#~at1?-58)w3H8J3L2Fvr+46Qg1bNJ*sMKch$-hjRmw#Gn5K*waQ3$!au
zvgHyevuQpeWT&Pv^`fv46^%IWw`iZ0wV>)m7@jbRVe2BxKZx()1X())(>2+-!qy5{
z!=xwxI_O;*rIRbxI>~Z05X>^awJ6I~;qUFufoZJAFfq%$5MP0*TSSv(u~&p?T*lW?
z7ggUqAcY_j?md3=RC-=ELA}Oq1*+A^tMynK_C(y6F$IZ1pv|Ll5#>D0%q;-w0fj#0
zGH%Rh_d=O8p!i_`Gx!aVDd0Puht5Nhjdo}Eo4Cu)Hvn0Mh>JPHF$z6;BWaa!K>gbL
z%JH!)&Q}g=8;aUyGe!XfRrqg-+-^2l?Hf~>^Vmz|m>$FZ;M3q3hH~nWB^~5!Ci3i6
znc7=nXaPcKS(kCiXJk*w=x|3ADDy(5KRGb2eN3S%_1bo`UJJUuki$`Pq)<Xg(D6nd
z*7^oWMtdLB8)L8_wY^06m}PDbWYT}h;gE}|f=kl5<UqV8<9tNWpo9dChMl)uAL)KA
zweYtn1@RrJ*S%G?;$AixvLFHuCEL7#TJ1Y+LhM7gd&CEdW&vy`r_TwL!NNNY4i-tv
z8uu!oi^_I@b{E=f!3!BL39pgRN0*>}qv=ILx>f`O9h?TI7y=R2Je`IywpKjft@ps%
z;BY;*tB<#@h|LDWPw}mRp%Zb_5UUxBw8q~EE3}5@d_nNFz}MH8d*qP>%Pg<07F<XB
zB5rm|*y!+Fps_6?X5iP}MIKYuJoYOJ)-a?~y>0cA>)p_9)`y_aUZYX>d$cdV!#{{q
z?CYSfx9h&)2xy0?Y1`Xn9qOL!MsFISo5#zvj4@8J*iTdD-Un#weGo2Jz!r7smsFaR
zR^eAvILAVkR@-st;m37`kCEqEA8`lmVc5Ms?*82GKL6Y3W}hAOw@2Qe@@-}~eR0*F
zEFfu+>NkdGm;HYC?DC*L>IhHABekEb?c`^dhm&@<%iSr+7eDiOws~Qt)m6LD+96<G
z)_J6B=c0DX1Df*b!o}fr%!0gg$X&(p6wQ((jlEx70kDw<T<@&g8U5Y!_qezmOB-fe
zzct)DI~&~`Z1;?vGV&mpWQkOMsq<kF50ThquVEqN=uYG+ggtSqCYG<S@T4B_pRTo|
zXFfHpZlPx=*P_y9)A+9Oj-IyP1>>=&`4{)>qT_pmv*Pc=v$MUC{M}>D7yEmAF!eq1
zJQj*;E`|$oV_jfS4_ndYD#_v!ck!a-3f;7HG;&>SZ%<x!fuv#Xv7mpHe!1U=znzYU
z{w8}$VojyrEPfC)Kay_+aBnR0g%8}*v0FwYQ+l}Z)aOrDVlvqp-`;ANy{aSxEe8ZW
zZW7!(D>{4LZCaQhvKC>j>JeH<FQvEc*7K_8Ubfs=d1KQZ41j&4x0Zt&g9Q6S3`v&r
zbHE{nRN>JrikLE8&a#aA@befjc(IRv4)D(*{&|Fd9^;=U_(ueSbI=yTV-k^@B;O$t
zdBTudVB=Fdag1l#ohb$|nwAvIXbxOMR3{G=th&HYC$Vlg!x!*FD|(I*VI15r4aZ}w
zI>vv~nEs->2o+8UdmID}9d$18h3PCMHxYCifqx&yQ~C%UgZ_xz44caFOWa?-oZ#Q}
z_zK5`|A2<l`TLN9F!A(E$Q?2|%>a~!{;tH?2<$7mvC!Fx3*Id?+zE{e{z@o{gP~4|
zr>^jq4j160;O~O|z{KEh?u=NI{T?Tn!z7$cBHCx>7v0GMnUpLjiVxA1!{eGzX9!8?
zm#P%vgah<8F2jT$D5ru9H}eRxG`sv1hi+U#UF2qv8Q}0xzxd%G6P~I1O8Tf$NtREk
zdY%<UmdA5K0y%{sxd_-2;`1I%<DCEHZjcTh?7;NRc$tUuxo8@+DG_*>j)MRY7BTf=
z76Dmb<uQD%yrQL$J1STN{wPS{jcx|-mZ0rqQ*pyRtkoJS=t>;>5DC2SV!j|ek7nX0
z327Lp+;!1q43`OyhrA5u5grjQ)QvFDao6Q#CX&>a(OmRBrm8?>c>_pob2^rSm;94>
zB}M>KNXJS<Za>kHBrfQb34o9Tn4`xsyySnm6pz;^T+*)q!jc~-ic?iZObOuY|6}h>
z{MyEu#_@k8&HMb=cyY3E4vx^2FNI#a9Nj{<-G}Av$0P>4P3+Wmpg{8e?Z27PVaZ1h
zdMstLY{8bLku(~OW=5k?2mhkd*dHQZ2e=dj6y2FsLhH|k-($=NWP2W&fImsxYVUGn
zPzz?+ft9ndhu%6t-~<D|=XS0s0XvDhKL5jKu<dm*vMz4u`GgiaeN~jf6vPOGJ(`W8
z7&^q0Z#=#P9rnBH^9PPgIbh;64>Xgwi0}a6j^FgidkDOoeZy^YybHc4LuP}H&D`Et
zFjgMR1pfw<?0fbQbOx6i1utiS6rgO69lbhrfJz;bVwCsf_o0|PB0*l33<<p<JLlCw
zZ-t(Cgt5C;pHUJRp0i3ibdf!KlnoO%M#2-*hT%O@-(i{!)puC8B43;(gJI&;4ILFc
zKaJKs?Zq`A2apf!6qR@uXV&lySm~uB-#F>97cp}9<})OBhXJ`ZE0v>I<MQ^Q>4ra{
zAVg0Te40N6ea_E(@4^l*6euh}FnbcQ(0vbB74kIkJm8Bsy$o54klcpQDFv1sMSO6&
zvP$*}bJo_9;%<V#7}^{Ne~$an$0LNYHS`u^l3rs}(kr@Y#c$%oAbYt~%kiH0XJ`Dj
z26*=5;{aN5!9*4I!fptmmoO5^LrztaAn`$*HU!QQMz+Ws_~#OjFq$gnAl-??6XOB+
z_%{=7F6gFuhFWnpTs{g43sE%&mdu#XrR(=>&Z+R5^HG$CN6|bUwwWG*(<tqMR`+C$
zFb%}uu&WUGV>l3X;|j^NeD)eo-=S!{><mwqv~r1o1XWyI+3|7Bs|$y2(@g93Eomq*
zQ@&}fTN^|ZzTWZmfb+T&)9s(bN69|9l+sh#pkQ%wDHRLT$=FoP6)oXFOd=48k=(To
zFL~jA&U{a<o(PFTZQ=T5LtAv63EK=Sa*-{}NGE3zmv?(~3N#{IWGHE^+p#%y^E^fg
z>pTfh99&YDWM11TYZkh1XIfbClF*dzRnFyd1+Ohnbb6qUm=X8fjZes%;xabcd@xXR
zbLp6v5#UBwB#o^>I}!>QcP(l;CO5pcf-(GO)|zWG-ESNp4yt_kz>cRrg@qEv8O@B$
zO_n8Z>d+|Gl<1I8S8j1lF_?C0fVO)!(8O87Gc<S*G1vqZ`@;uEgf$At%7g;tXcSab
z&wBJb4BEG<bA8oJ9GH-y47`*40~d~o2p_j*=$45A3fcq?kH=^@gPFwI%tPT#L|guS
zSR&ec(M)uWoi&QaiIy6-j!-|_5uSb5Tg5hw4q^H$kp`F<f}AH~RO`Eg5kKO>&!QSK
z`~q`0ldWX7?9`FtY!7|USX%NiOra9+C!nx}W;EW&#z<rq<2K48S9tG~8F5!dKA(gE
zsN|Kb^;+Fvho>5A^*Wt{aIOl6PE<OUyvP^2Av_4JP%a7LrgBn*xO^_1hfnA@g#<Xj
zgr1ThHAm7dPbdJU{K!=E2$P3OGE;#G)E*`8*@M#YF>0Tt0vWk1(@rr=`H6W<Z)(*d
zxvMAh7HLJ9>Ko_cnK+Z?yA>=e8VKTy@Wzq>X9N6;rVI8^6AyLq&=3zz@vy=l1hzwb
z;lo1DAhg6UVkqb(9u9hq{kd5=KBRF=g_pO%Kl6dsGKj&~^5QU^(nG`_q%nuuE)6>D
zjTv?5SvAB^LKjv$w<ijcRfawF_`{j&^t!YX^Vir;BNE6~!(O=Eh`*rD%&^MMNbE&C
zFq;lNlEH|cd{Oa0LX~zTdgI0cdLD|*NTEY|81M&fJL%CgGoAEK=%Uvczqum8DK}Nn
z?|$DVSxTJG6=#e{s$f!vn6_>x^fwU3&q>2qr3zGZp)k^~KMXotts~t8Z9>qxGo^K)
zn&FJVgH9)SkDT&_EMh2j^hw1=d8E&;M4}y75--c2``7_g+VBLcI4OlE%A`O=VNQPe
zD;)jx%P;1Edgeu1IUU9A8&@OKH9H%L$UV1Xew3AOhPNYevK2`26{4hFWho$*YVYXA
z4N?*=0+C1qae=&~#8Dt7G-M<ZzfGitbYZ2ezVlI@9pZ@CW;&!yJ{_K&IYF3sKcLV}
zqD8cul<bGo#l0eW>+ovX33s_8i{T!`v8SFe`X4c2NERqzL|pYNIs;1(-lm6!eHh9;
zy3k4kC8azapsxbd^QfTxO+N)X@;^ErC^_T~UlIU8ny4I!FDi&&Gicdji8o3r2@pKP
z<OlLgopy<>{)j7#dc(HLT+hWr8j_qkqfv*g$Swmgj(t?*0?r38<5&XHC#wa7twRcd
zK^p-&=|yErw#z5{EA1k0e5FPHXymgNc_4|U$T}LE>84@$gy=dQ{}Cm(wvK0NDC2K5
z2TIAt`buNHHq5n2jYXNA$7;s-h@A=^huVhGeeJs*3=n$vCwt)QJ#fQ602+_}l6AmL
z9b`c~OG{l8t8jNBfewC5gC?&&V2Lpi!J%^oFExG02g1{L(|G3`(1Q;cUjYq8Z;|pX
zdwk4bBh8o+IMdk_6H4874rcbSJ3NMmOS0-l%$&Fr#FOgMl1mtjKOLuXm8}zl@0r?d
z<tuZ2$R!ftQISU|Hu}|!S)>DX@M%Y?q}IdE9GPc)tT!{*D$4`_TQ@ux7xy!>Sw_qu
z0%BZByA{$=n;wv|g-!QOaq}CLhzsC~q^<|I<0K7u-3cVHk(%O3a?q9=q{BSS^9JQ1
zUZo-prtFuxq-k9hW6F`MkDCftpkFVhWx?T3F1$I@7%-QP&@Sh&BbP=o`(S`m{Ki?f
zlF&u7@>n{E95x6YSsWwG;uz?^md7;0c9>)uB}UL8jMEK&%A;DGX=Vn>DOgE*_K!v=
zO2R^kr*LzZoE$<|R~`ftPZgJz<jI8Qjz%sk9WZ$o1Q8r)WkI&5vWa*(wiytdvGJj~
zfy#w?cF0B;@2%zz8PM~AAx1+dL8-O(G$4%84K{k^@`jO1xeDJiQ4Z;`Mio+!+5_c7
zdT<6}Y*On6d=e85Yu;u-r--Jj2IrP4k4O_WS|dBm8W|-xP3E*owN6V#Pt<di7!G42
zC(okO=y4X^%JpNjl-;N7d1{CY0^;ePTH+I+CJH@_#y65&!Z8$aJ#*RPX0AIgalZLT
ztAvqGN?1`8jSN{u#my9HMFBKPV&6>2FD);-MQB*aYLTJ^EoZbP8(4;Lng*6FJmvxH
zW;5<2!_F7FZGo0N{+GaNN(nUaOpRUn9W5Ie)TOfH4^Ml}=1;|+TFFm`Fm>Ql@uy<y
z)4osPig{SWma^>1)&9{;_C#$pPc+_02q?#i?<ehK?~GJ`Q%f`q{3|bvf*}pVzD~k%
z`1#PWgU&_i0wc#nkE@`cI<W(36dy;JL*!1;Y}e`ZY_=tOSCL;|G5|O_s=%<haTkT}
zpeUW_J$i&q15qkIk`83PVJdIlY%D$#>V5C?rq<`pdHc)`L`10#Bp#j|MYY^{pAzvo
zusrcTg{88mC=7Peq`;v;#VSC1G_tu#Awzx7=wOQ5Cc0;K%+MT|J@eEYX3C^{>ESJl
zp_y@&-`?3e+S)ATBMuu${m8-H1T-a$1`2}k9wJdLL>VzvX9Bq(JB6%l$1qy5y}fp6
zFm0fFqfw6)9hk*q>hQ57#yzuma#B<Vd)O|W&M?@+(P+qko@SUjGDcflym*v1Gup_J
zS(CF_hcDe&y|hTX;XSEtWPnr^{&LwnK^fiH7>jO4?UJK)JJH_=PoId;xmwrAZ6Tv;
zD2{F9f~Qh>6(mfAtcp@fcbsChO&Mr~s9v4HW}GWQWSbL{B7~utd=nMVXZY2zP1SF6
zm&mkirC};diWa;gv3QWR$SJ3q_oS`%1CRM}Dq|{Bc;TK!Pw8XHNK&Ozhy@AGfDa5S
zl?Dtfqam}m!}OMO8c@xyPPioKm{MS>)SW7yu1pOz7LRMWtkVR+FC~VDvgaF%h$c33
zwG;A}%2Q1g4|#rQ#VC-cUIF7pJi>@TC9Q$N3YVOW>>#6%E#nXJBut{?%gadxC~4jK
zYJC*_qmwwP-Z|XXqBoS!vud)R1j9(qzG3L3s39&x-;-ksb8^_%O5sFFvpC2kjPe=S
zP9XJh27lp`Avq!%d8WqZ#8A-At4SasivwK@y^K2)1!naUI0Bhw36^t=y%t^!2V)cc
z7A8CE+`&mgs$Qy}1eddfgG79AtCNV&;8zYYsQ+lhUiO`<U8q^S9@(ej@wp%LpF2)h
zyl>k<;M(WT8-k_YLX)bXXNMP}*b7(<JEg=GCvkx%kmbKl;4dvXkFhz>ma!HY$vJkg
zRqgeYb`ky-O-$geZd+AI<uB}uXm#7F!6)&?zUe(^TXo2xr?Gs5pmrSr&?8HI_8C;P
zKB;JXcJQ%X$Kr`Z-nwDGU2kH`&`}#xw)%s1eGO8!@B{?aK?*euWxI}jQxaGXrj7F)
z4alJ+@Em~Vb^|NICl0qqiK_^)CsPr_?FKdgpLi<~flbV~FR^#%^xbxon&aSxIi~GK
z?G;4xZp88Msl8%h*FUlM7w{cX^@4x@eTV_5d=C$Xv{w*GY6{Eqb^vs~)n382vu9ox
zD#=^zb!-)TR`Ne@uU19==Su$PKn68Y;JH%ZzwLEd;J-?N{{nHy0_unN@S!R`yk{TK
z;08l;_-SYd&QtU}07+*Z5s>wzI4*(w1fte09+FPcF>b+P(IfIZz@(?-AkM7?ZETg6
z!ZN+`L<U5sd=noP^Cnso8<a;+R4a>931m~&secgA6WLb?dREpgT%!`XaUe6&)#hmC
zz4n@Hjg~GNqi0^Hwq#_aD)qd?D$?nhEg^$e+p^Ma`GcJrNHm60cRn$mlTOdhfB1=U
zpmch6{(Z>b$jHC{N$taqVo0*$p;eLvbS)<v)r?%Pr9nh7oV2Y~%AfgBBQ<XLu;O9m
zNt`3227Bmy8af_uTnoojOOg~ma5}Et6X0l)CQ~K7ve#YrBg`j@QEQx}wvLxSY}ev>
zC(^`9z}`^3lFh8uX<<lzNwgN{Vy&UJG%*pMF{^Sd9wwHe=GjM=QMV(quE?y~2T?Op
zbXVkMW27X>Tsq7(mM;t5OXsu5#paq!07e%uhuthj$8ExGTAqDn(!BM^k*-TzP`s!s
zBC$aBs4j!V_}C-V?6wsth+_4|GSRJwh1qN0Zlm?3MaNrRFIr=fN{?4o&6PECrD?7;
z@Hg;s!=#+gylyJ<dfkNoVS$4@jEb^yHJT>;Pq|oFv#d-jRkN{bS{78f4u2Y^Rc*rG
z8vI+qg6M-jxg2CPt(pY|*We$v`v^VKCKX!YwXDR2#^&i%r?s{teVqI_S_VcLp)0!e
zL$hY5t!<%7n~mbq20~0g>z}GQN-IaGc=HIOfvZ{&(9iHN1;q{d#F9>BT*r_)kgr)L
zLOxM7;{@>1bOPU;iwzh^^KU@0=_S%Y00a&w(m2lA+zhLusohZv9ziW_f78Y?JCyGz
zaGaK1!T1_+LY6OA%1rf5k<9N7lI)KS^<;EUvjixaHJgKGZ{W@68&{;OB^9`YB~opZ
za7J)F7j*xblwa8!Yns-Z*?Bjq%<|qWE4}5d%IpknPT+849C(oM(<U%=RC7wIBcHGg
z;c)8#;gN-t=C+F$on_Fmz^olcpkH0tLHEcnVRnP>lv6{Wq-xf@YS5rwN@Y<HY3Qs&
zlZrFwSt;1cY%}W<=wHIxqeEt^nvsE>Oc@}(Pnf}A+U=|fBrF_gF5g7uxmBvyMvjq_
z{WuNyBoY6OW@I|s^71(L<4{@UMm{qXNRc{*k}T6wRuTSLk$VzHQ|3huJI|uo4>UZ}
zK$oXsH%TOqwR;yBkPU?m3Whh4Kn;~~dSh*Zrj{d}M3-x(GE@v_x?Y5s%^IBX+$6G@
zK@V-KRTUt#FPoW+zTNIsgnY621#_yE$1Y?kt+T>|Mo-<RD>q7lGi4E=u1qBPS+7De
zUM8-Vmoo{J7m4GlC8mg?R%9=g901^Ng8Y%g#?X@}3q7fcswi#RWL45BCaQ)oZ8S7o
z(e?>P$Sf<`hV)hASumUhdcbT&%4$$nN*L|<HkC)!jnopCArPn)mMt^6K#RGgXnx7z
zpLyQo(82^>BM2jF{)qA4R5%Om2~S-6%o?8qya4Ohv?6z*v9x?{Oym*zEY3t~^(22{
zV`TjqN1|+<WP_<DNZAdAkMTB8URGpJRW#pxL`!Z~{7*DRGovFnMl<{1XhdI_nUa5D
zCdF~qLI^?vUj#CIT9g%{n$0qttWiv;QCSj6#)QyKi^;>H#7Gn7Ya@e+r`by$Ey=Lc
z47O_Z)dA-ij%EeVF{zHaA|K#FxiJZnrm2la(Ia)8JFbb9liHe<RVw(HSCN!jLBg!m
z5`ZL0l;VoaI*-YxY?*9kpkJ2{TBX!{RY-#Z5vEwZF1u-Tz>XTIUK@&A^-R*aisG`B
zC9-SQRwYBm*POOzTCLS?bl9m2Aun#GaHOFvn|x>_6UYuymdDA8M>gUoG(0Kd>SK{`
zce(pOWEkL;3>jZ@1|rMApVOU8k?%zmcQJ#6bLF61n$Ru$X$=-=A%nPaw>E`9$(c8k
zQeLdpWG=8qE2lrPH6_k4RpQI#2FVSbR!2W-#4}~hwj65BR^jxmq^T&?9rn{`orIQ|
z20v}+GcvpWwU|wEiz$P?pM4sQ!t`{FowvTugw5+q`s1YOI&F$P`;@in=sQfU%x(S6
zbmwtqxx)BA&6YFgSZSkvhf2S6Ze(r|rtzt4(x*5{a$j&(ZV-D0OaXZ~9i%pQCJ9J+
zb?kpqzNbF=)XXqVkt}RdGJirwc9`?z%tl9Paa8GHs&+ML1||tBN)4*Z-&!son7QbD
zR^#M^#bZXZWs2P5K7?soeD?5QC>^!)v(%$d>wNVn1!t*8kXnW$IDtcbRpM~vcIMaS
zb>E9f(mn%ej+W)-lHfy{<!!o@#5pC(IDzgc&`KDzGU*_%x$}shY$%meH}mX8+)-xD
zbEf#RK4hO*`S!ih9Xv7?LLA<^SWM+Edln(prY>-a8mAFc!n5Sd#$qNzUG;0?U%IfQ
zH>8*$q^+AQ>alr4wMxhgW&<$D%5Zmt+#>utmPiis<h`T(-aN}WW~ptpTbWz(+?#dS
z&k|=f-<Fo-qe2dv=mDTqhFkW>)sv)rq<Gk9Jyz0ll?~NlCu`44?fJ6kdfeVp)x=OT
zAm{g851F&qxiCtJCa3z8fC5UEbd48jkE@1iJjGMqYIh7}Ba7Mh%NtWMr`K?@q3q`=
z#g^>KQ`f@+&wKWHSovdX_wBO}yU+Gt9KEDnJ+X&Zik>{N8b;ZYdwmr8ao0JwJJ+I}
zLKr}IR&gtf(&{vht&Jde=Nhr_8smi7y^JXy7#W1A_c@99wwLcplCKfdNdcuv+Q2AV
zzG^+=bVQd-(o=S8W5Gho85B1l)k!0~a`9S+B;6gSa-K{YT!V)5wu5(*TP@i;d6;?@
z@c%an{sz0{f-0!pse)w;CZj;9-x-Q|r-HQ;W1P!8b+0~cArqU&d`si~W(IRvPO>%W
z>X+v4T2(sFQ@^CS9?@NHJF_?V)mFk}2P`b}&0wWf?L?CWoe~^er0+PXqbz+unT=vw
zI&(mYJM()%l$ZeN31ny@fj;N5myKK;#_Vo0W)Rw-V4NX5g0Y!yNZYFZoTj>xQ)Xv0
zj5N1eUKZ4m!F+RDpo?h<9-}TQ*^6fEmHHKXzH*12Kg!!iOm7xG=i7+s4aVo=xJlmz
ziLIIY%Q!_@G;`UiX7^klmQ<_LerU|3BjbA|_189+gSn)we^5>EsX!`@?F|Q0d;rzS
zn_>()4^bKsW;S4HDQA0J)dOaBZky=AMh$q>&NLm0p5<maoStR>Q<gdPP8Jg7YjVn7
z_`_ZoW9qox&`A@9B16vRI?0DN;~-!1SR&sA)*4U}!QjM<nbl`yBZE*BRfBK6wi3Cr
zcIuT<S)VhYsPw0lR+BSIX+{~Pn3kSdTawtcI`gfHlVPE_nGJ}mh3T@2wLmMWq));Y
z&z6NT{wbq$hDA;RkZrF^w}30VTGg=voY7NlQ&sP5a%VQX#p$A2dPceQ_K;FIbCYQr
zr5sM86xA*~9q%lpP%h%R)i?)AE;h41=V2xnNcMhtc1y$rPqjgOm;tN%ld!66xMa)&
zZ8KM&2im91(u(CwE2{eyX7@Y0Z0cM72&Sg4mY&((OyjE7^2{8WuoT@`gP@yqvfG|2
zrY2|BCgoYJE}5F$LRA>l+n7+nTFI6qGbn5O@-lNj=5kf?gaSKEk#q7Sg}FQvMOuD%
ztcqmx%=U?n0^9AuaP6Q>qQ&yeILx0el8WRq#j`ZI#%HWRU+UxOm|`nrn#DNInLF$p
zSD9w7d?L#)HKVGbEpe%uGM30`d5DvxGNqTGj9$(Boi9*Rv+PXIvY(YjUl4ePiP}JN
zms2rBWVwz?o#>GeKlwoFAJVd7O1MXutz`Ssu@5y{M%pI-Rodg|Oe$`V{2+sBh&xeE
z$L8uvt+u!VXK@A2y}ts-w6j_+k(p&Z(mQ~6A@FA5m9=+?7Q<_MNvk7XO0eVi-$rgP
zZ1bzPDOw5<G=JjpndvmOa)&`%j5+`~jNqv+AnY9M$w$94q>WUnC$2Pou@BzmgLhdO
z`JG~gQdE;YAv(Mcm=rw7wO6Xws!b&n&Okljj0dJerI96Zt~Cy#1vvy%jD=?KI6tOW
z34A|_1KRW$TwaXTQt9w3<Hxz(i|d}Ti)wT8=RQK##{7=ZlOsAXmErE0X==y}|Cq)z
z`<jVl9~U7Sz0)?o^eLY@Bw^0jKf82l2(}`KWJtG5tyrrK1J@Xp@`pSurB_;8uhk~B
zgHN0pTd^l5nu21QcRB-9Pj)I-#&82Fo7<(TDWMr9Muf0lDl;5AN3DnCm6iHxg3G3s
zOddEMnPidQeS>uaI{dQ&beOL41+jN&sVE?2XQ+7omAG_4Nd^=TLGwZkeSjPp)<7Fe
zf@D9I@zOi(9W-c%?GF1i9R|->4##8c$k1bB)>WE%1!91IH5$d;cqG5=u?su5L7(uP
zp235*Q~bpq`xA#xC^&4#lwbNXFrwgE95L0J3GE(~fG9k=X$*3YJ9vp~$wz4lFMWrl
z_Q>ty?Vcr+{7oOYz3v($>ey7WdS=zc1H^+iU?@&LH8I}0=_iP)*Vbx5flrGEh+1DD
zzW0cfWFMFr^-sLmD#N;Ojd78VbJI<W&+*QuH+G~MW|fg0w%IUL;#Qe^B28_}hCYn(
zP=V|e`aQmL*p)@;X5B5%We1z685>z6&GQGS%!QF&U}=d1uQ)6a-w`a~g;Turm;&)R
zq4!f%2!{h)(F>U%Duq4!BTTSifE)65RJits1-yE*U>62{@A}N`^-%Pn8=D2_uu`Dg
zGF!j=0!+0N{S6XvaQ+M4h{Y1hqG(t&%&cB@=WBWvw!VGK$2ekVcux9;&8Z9YvOH)v
z&8>EIV^+E=Bq!OE_7+m2N^j;2WC;{heFD<BRck(WHWS#>3l$>3Oh|YLUA$Tp@DLSF
zo#@JOyh61Ai(CP~m<22bnnr<cJ}cn;xM2ZrE(e4GN<GX}I2(io7#h!)!vW-Nv<});
zXvUr$T~y9`KD5Dd>c7A=Z?d(q&#n{H*pzwM?pF{%ZG-)_D)Q>#gm(w$BRA3}l4Mj{
zZD;vl13B3ZvMk5gysY5u;Jiix06a$-J%e*IPjIu00;b2NK8^a=)Op(t@UJt_F3#{=
zWJcj6GlPmQ+QU*w>6ueXcEo@+(o6EVJ&fay#5RuQw@-TD8y-QxVNpXt9&}o?owOlE
znzHre$rB3zqwa*<=}{@Z-fL;8`uJTbz{S`gUlCA0n2rUimUq$)pzpp?`?(_i%k{qG
zwCN-*1rG($U*^76BGW?#tXx*D^nqP(grm*UF>l-BJz>45V*5pB{l@|Cp4+bdT=JJK
z1LmU*b+{*Hr|m9VumU^B9lb&u`ugNu$p$nVGBIR{p=leNCF*!+V#zk%Y0<&hrI==$
z2%6GdemjbeM+wGD;!y=R9?J*};(=CIiLZD1*oHojlU$DCXCaG<yW^aS+lB9Lm$=j$
zyyfl+e|>IS=10b^cH4DxA1A;O{yM~<8nVi#;ut*}rt{JjyJ!kWVna?r6h=siJheL?
zjcd#lV<BSRmbm^s22GXqe*-g_O1lAo^LgMhTRP@7Kb79#vd$`1Xl$G7$JkI4+h;yH
zGGbnEUV38~M>zMq(lh0*nndGK)7>_ewv`>Vl4opUGK_${N|gn8-2q^#$}jxdCB}l-
zc?#?T(1~@68a_g)N2QO6UOn;9jc;k`QTDO`703&|K1z&|%#b0Z+Qx01NsQ%3Q1e|M
zZyVorE}b6NPwiAo9-|p3E!vq`6?Hb1dOEF-ZHDHhrEB<YV&@q<#McdmhH*S19}T9%
z0^XFHgVfO&u+bPOqv7GbxWHV6LN^9^30iP{D?92E(T<6(KeSzSp?w9)*=vpkSccUv
z{l3$6VF8n$E%oy*UboFZG}I6KDE0T`x4QZb6sR+@)APXQ@t3zCN<76ISK*^9TT^o|
ziDg^hR`UVUhgMtsJKP1}*=MIS)E)1EXh)-cSbyXk(1l-6vbcBZYn4ti1d`okx#w;W
zMxw3z7#l2Ih{j$m=OqI&aSzK~=^n|Q7`YcBclhS6iNatMwRgvi@9l2v0_(wvC(KNs
zVhQ5dCGSwBb_$M_i6t!?mw8{?XdeEceHnW1+~`7%p00)PzBoC3p+61wr`ghb<h1Kb
zj~ul}(WD-QoeKwTV;MAqL6Z%xXr?3~-qf@%3=1EhhW4i2E_&nz7=JI>ZFI}-+1Cb2
z1NLTT*=}`OcDrN7-DVTKZ0T;PVY}9>s!2^qvZ|}~)rPfJtE*oc_{C`?Mm=mdow|$~
z*S>YTt<THLrkEEk*VK4j3lvAeKw7XUYy1v?*~_6R7n~M|O{V>%1M9l73fZviT%o~}
zFKdj=IrMaeCnOFxVHIc{;@m=(WtTe!#V}W3gtT-4jMPLlOh+5btH2&)&V4oscEw_z
z*!#<x1QmNQ=v~v+jA;kwWabJJWCVm{)vA+s8ys9Fpetx{L^BIa=G9uWrHkE}c8I@!
zA3DLc!GvZds{N7E2jR1@<M)AMg@vcSA3<gIpz%{kx~3a|Ho*#4_}@Z*7@{Hq`beiY
z>^fa|#$C3;Bv`-Nmo_{5Q7MwRm_{hC<;<)6{fVB!LC=j!#X`}b+X&bjFCIbC<J!_v
zbZnhGUI&E=y9#MbOY8K6F<qkL+R0;UG{W>J?ZzED4@zmzv7yJj_m}lbwNfpd4lz9p
znT~bYz(mkCagENxf8VDYR_@jWR=5IsZedS6euYtBS{Vm^33@dQM*__#%|C7fo*l%q
zwF=@9A+!Fa$dp|wT-GYqY8s(+hR}^i3UMa`h{ktkR5!fGk-W@hd0F1Y1bWbhUy1Fd
zZS`d|0=d!GHpY+}6lq%nH`HkBN^YXH@rK6SZLrEm=i2lQCh{nYD$Qcqa$k)WMCvsf
z9Z^m$9y8`o2`5N8sg0q?KLkeLo%5R;fa5)K!+m?dM4KweM@u{;Z8T<kh*=vy!cn~R
zOX+|A3YU#h34Z^__~qOz0s)(DyV!*mL;!8zc0Quj8y248vJ2W7kj1hMqF=Fs`@3a(
z;1<n6`xgEDJ{%pqc(MDe_0utZiu`kov0MCU*<Svsc=FTO?6q%S?Z19|)N+@LWp*Vy
z#)rM#ez~>(;#sTMfnh&)ipw4I>F(P%t>S5K7~tD)&;ES-x`kJ^4+s2x=iuEwrF8u(
z57V9>Y`;Bh70>+6FvR!m-B;VceV}G-y?zC-d(ad3087l<*N_a=4F}ju%>3-ln**qi
zj4=5A^3@J}zi_+s_3-7vyH*jjfGc<#o5S|;?e^~0;o*n<tv$%rwXegXxxe+thv#qi
zw~t;OK*RP}!r{@g*DYAawETUL4KGq9t|yeZcI;qsfoh^e*Xh_@XG)ps_{7|6-wp?@
z`kGl^LxdDf#AmBfH5*lcg19w%&RNu|ubTDMRuP|zX5gM*K+?KdUvCxZrD($RXsw&@
z9?`uCVaFagt=g(tgHr4bQoYCtT2|e(>X3*pKs)xi^A=iAH|vnd-dO4mwxr%L>kXE^
zL#?6fUs@Pqcm>DA#rB}I9r(SLwQ5>W9e;(qc%ee8UNh@8$jfe5h+1n6a}7X3Igpy1
z$Z0iJ%*G1h4BvnvyY1s5(mtS%53U?DF%%NPC+1ljMAaMob<w`XV*m9$r&R{*&`v}I
zk837?`NMUtUOG@HcrMacK?DN+$lgOpSONLS84O^4!%NcyHj118o*QQ0{>-22=1^Yf
z39mKiey?W_Li}c#pv~Ale5{&WN@K-p>t@#tk%x6L0cxwQ!GLH9tEP+gNO)Q?Bj4{u
z?f_q!Sm7bbAMn;NLzov&uMgojyw<UA;lbHE$N9L!D}dx03W1K-wFCTsP%QHjFhDy>
z<yw{CpW4A|WJ7csyKJqSumD8V0Bg;>a=XCMUX$h1_Xs60zC6`tod+^-&plZ3-T-2K
zuXhbeP4lDU4DcX1yfjQ=2nXIF%wBk}o300%AT+_MQNC9maC#71%a#T2*XXi=)g$sw
zhfw9ZNxn<3kXaoOLu-}SBqovHzCt<%AW&>oet78*14vjA80POy!T}qQ27|l@Bjk43
z$eMlea_9`uZP5<^S0>|A2hhDESaFBv7YN{hZlr^znp7BA#sMQgWObm?7Fl{x3_}sX
zw2C%xxT~_9=lq?`^FiQTy8bW}scf#JdMHxFRQF-X)w1P|8+6bcfHqQKY6W(9QLf>;
z4`f;VTpY(1t1WHQ@#5G4G40|wI@!d>$5r<7xXMh@_GwtcccZMlIwwYpW!@}XEuP(?
zq%ywI6M<`Sz>roQGjn!4MT<o-Lmye06STMo{}uj(|BCuVh5T}!T5^^`s+gqksLWB2
zC*%}`XFfx{3VQ%?QJtvR7HytFf;LUzoz2o)6bNv%?GQK;8~QW5a0V(55<uA(B)}6j
zLSSi0a!^x~M8Tn4IG2I%X~dy_(TPN_8#A$%aY|vIiC!eN@HAq;<CqWKa)>YdLWKXr
ziv+Wce+nTmaAp}3pwLkcca@xikYiY$J!I#t;vu~h=#6!ie|XJ%Ek0pC`KNt&6v+(O
zpVR~n3tt#0mMkH$4+w~TAUG_Mf!U!IMFL{443zjJfr*a@PJASQYN>6Yy<u>z6yqtZ
zocv4$<tIcGaw{kXPX&A|0@LgS#HHDnSK^g_hQ(0*yyNJf5#%0d1W1bnl)Wfm#n%|H
z$Ra_DEHQAA1;HOWFeSPiJbO{Vi?1<wkwt<RSz_=a3ln2sJAv!NceVx;*sB;iGGB;+
z!xuTGH2=hi+9X}XYbmmkcqwH}D7lhCs=kmuQr1x}ouro1*auE5sJAG+9?=BCTH%GJ
zO#Fh=1-Hu5tM2WEAGkL_@OBS){xE{c3yNaocI5k5UzN$o8i)lM*_FOTKeFN#8lKe!
z8n`20pLr&+JU>!aXB1d<a|b){#~LAG{aPD}7xo8agm}jw_mw?IUqkYR)^Aj1Akg)^
zTOtKV=s!lq4NJw=r5n0<D+u>q?vmbyH>`WW#_^tJ;AEYsv<mWJQAXC$Guhp)I0wj9
z5HuI`@g~(rAjA_Jp4z#BIBbUd0sll#u@jRzDKU}XQz4}nVD-7@!)bxoKWRAO`$ei-
zw0z#rj`23<_DSuy>=<c*|8#e_bL)imc13%cj(R^E%m+ZWmFvLwv#~06_tX~e%*3ny
zNd(L0GQ&gKl}v4~IG>GHA7rZ(`kR?C<}WDO0JA#G2tn_)Vt&i%wVMB@%4y^=!<)@Q
zeHB&7rFim_Q6U?cXkv!LXlA1bwaLNaFt`C_Hb5k+^V-K;zlL=^rC%!=kgi`VADBKJ
zt48u&>em8ttY4#kme#L}W}!Gy!-ism!0!)8$~z!cZ=39t`CpC#+hYRM4(`jfYE_`Y
z%glSQE|gO@ANVcve5&B750+38kwHE<%xPFeZfDa8-9?mFrlsP&XEI%2MY-8~=;7r_
zGBP}L0}r}I@-`7RcJdXZ)>?zGtiS+58`?cqpOVb{jG3;iB=h5Je{ktl`2v!>NM$ij
z<c(3`E6<I1huCdN>IdZ&d-s+`F*SnEVT`tWE>w*tjAWS$n_v)HBpi{T-aGZd^CS1{
znhou<OM*k^hV)z=v1u<Tf;*Hd{rrG|T9`ZHrTNJ`H?P|lv29;4z-!8vI`}BMT-Ep~
zCkQgemx_@cz@Tx{Iu9ctvmguMUp9Gf;YEkjk}gp)a0bg&^kDKjA?-`^<B1Y5<5wJX
zi=x6$AWw7-OR|$BnI^vr#%`h$QiLZX1mTJ~6W3rL`C{6LcFa7~zL;++Xd{mnt8!G;
z^ipnq%Z$C}BxX4)r)PDDmX`E<6<~pY2+$n+@P}=4@o|8O%+9E@SDJprP<JHjPJ=My
zkx$XjieiRZTFPu{d_*7yiihh;McPifARk@1JS7{JQI8Bzs0@+1q-#TE=tEv%s-g%z
z!n7fsJB&@3OpLjw=99iSeL!Df!k4H86Zn1_ff1cac$l!w$IK1i$n@Kf9CnT2yll#}
z+mDpK2#kuZPgt;UM-cbvisYYV4%#uhXAYj~T#T4U=>Q$xWHxB=(h}}_4m6=ndFJ$2
z#^7R)<jFUCGY-_pnI^Hz60=lZROqe3cKeuZ(lLQ#XuTeoZpdsBzKMNidVgrnfwPut
zGHkUJ%#Do}7fU7bbh&^#4x~Ca8u>iVj=oe*U2~yAME`OYgQg8fV_9!cS}K9@gCXh2
zZCZdfs4!!7DYf#>0ImoUqylSN{`mmn4)z=8{MqM0X<E5>-}$(F{MX6txMcjiyjd~-
z`s;uHGy0#u!V}zq{_C&*ECG(-Z}{_n@Z3Ss7>&fel6;8JMFGG>re$OfgPOqrYzC!{
zk<ERR{IMfL6krPQ%JXw4kX$(-hpD4#ijp&uKKdPebJ|xzXL3G>?g4adPOL5QeF%N<
zSfc0>u;(MbZ&E^kt4ef}$S<~44AT-AmfwT{2n+VfY8#elKL@&mryOOX@k@3=<L8`o
zJmv0t-LNFqkq>V82V##d>4ARQ>3a)jWld7(`1Zpjql!wltV{TkuIY>51V!AMD(~%;
zcXo;?5h`x}B<3g96_xQlv0}HHUc0){dz{X*(OX_NI?FMeW9{ypd;yo*=(Ia`VJaG@
zV1CXWec_tWs*Uf<8~9SfWl%XK=VBa*u6;i$Ww;I7N!h!iSn4<L-ReKn$O0WJYyD=i
zn8b1}0U0yVL_R*q^(cjoF_Sr&LsZK1)N6y1Rbk4Wp-J^1aq=)kNj1PTXk$jRvc&?r
zkAgVHyz~c(2fjbB&sppw!{owrY?R1!ENiO@+U?lvn-pY#Hmva=uLE44IWP0X3L<0k
zmhEUCj9XB~VSQJYoD4Vi_?mE7ijvw&YEhCN)Onwa#oUk77&m;z3{A<v*~O6D@suNx
zAW%9nCyjk1@t`;Nla$a3&gX&CiSUSDNFmD#7#tAj%Lxh$Z~>WIAA@cerHeRs>n>gw
zTMQdzx#X&($zmKGKpX#rvQ%Pk))IT7M0ZMw$fxL?+csV?9hdKl@)t$&t}nj48=MOP
zr$1}U`=UfRYl%>luz6dz?$%Zt;0VWfc~n^?<-CBDF?CUgxoKQY?PsRq(N+$AC!yiy
zfxpfKw3nIM<={1&N=}$7ebF;a55u2GZ_}=1*?6;v`dYwyB=Cq0OdRIx3cT6VxQJ(J
zB@8kG*)R=s`%mmm9tqE1w)QSZ6mfGa0vQp8jsoPep@T0WX$h9G5!=0v{gX|P<Sck<
zF$;GA6UGLfD@Ba3#UK~of`hPZpu5C!TH)o(R=-~)D0bi+!qnce^^0Xp*?w+^U@MQ@
zA3>Q7kc4-U9@70^Fm_N(tWZ9z0fzVn$k5WcDMML}Qde~nLk9k=uh(&?_IzvT<j<qg
zG;`|mG9PInl&T0Su}_eLuaVH}M~DNG8kUwGiK35W4nfj+^#ONQ7L#ecV+0~>sx1Cn
zZ0mh>w(mGyrz`K&mJ>oq1dcJK`@9A|qqD(hUfUq)EqgP9ZOlomq%29&PmN=Pw8J>J
zz-yeAseaIk-p%`pOX8%`k0zGJMkGtqJZgnuR@wNQA^H?Yd*9FkPcU5MneN4q<(l@D
z5Ett4@JJdLBYlr9bAOI)@hSUr<D||u(=L<2)*4g*-zF@cKm)+}+svr%v<bPz>7ps~
zlQ)?V3eu_EThmodp@DFj6%Da_+Sx-VX>pZ%3&|}ZG79wV&+KbzTgYVJU9VKn+)`S0
zq&S|pfn0b}=(?9hgYVWthF*m7x{{?_Tpk{0fj_ClF7^gDI2&9%eC6$^UYi-h@gr$B
zj}75!k>hOQKamwY^X7%G`i)KnzoTxg&ewh_qEzrQquFzSRrhqWp^}Lw5u<^)9A6Ze
z3CM_D5K_ESLp{j<WVaU=outPT%}M#dR6HxN9>u`av6~EwdlQq^6tdWr**P#)!2~eO
z6Pbab=$6?TCPPU(Br4r2rwx7S{8Btd9(`RhW*HM2cwiAA3}a0oK=s8#NDoHVI8mvY
z#%UJ#>9Lyuex}>P#EOKd$Dw5iw%I_<lJ0oJh=t<9P;qf{)UkCU8jQ76QH?iH5|j#x
zn1wX6beln@P+E%j05@;Ptq5gJwuGSvrzyhjJ))qG{)VQmr)Iid-)IzUdH{~^`tp0W
zsYJXNj5iiK6TzUU#k6*QJS=^3*W|&+*xtO2n>igk!4rZgadqK#E;i5r8e!O>v*Ylj
zT^tn6Gvh1~mXVI%!6)d}8R!Qv(6$KUV)7<MxC2o&Scs8Q2i1y4Rl|tECk<)L$JI!Y
zmiUs{gp7y~*`--4L9<W}){4z!C~Nb_rKLUWH4NdguWa>^RXCu-(ruYu+wh*?*~@a-
zplBj{$NsT*asplJ0CfjQ*>q+c<4puWtL@yD@qA-<Y02fs8zHMfq9+=rbbAy=k9AN?
z;qeE>QcQ;gwGlr%=7S337!=JL`3jKZ7c|PwQxEaA7cP8BFUZVBcZ+d^NaU0Oq-c6O
z+T>+Qw4b?cZ)_-w87jtki#QS$&g(~y_<>QtLRj()Ii6mk&FR%xw0UA<J(7#Cx|wRz
z+#hlb2PtKFx3GIuG`X;zGQPCcv#Wm{AOG)P$0t9Z-~raZjLp*S(cx(KXtcY#i9e&>
ztz|aGc&xRQ7CcH(%0+{j2`N~PvZO`MW~4f!w4&IPMQon!kl6!XC>S_*eq#5-j)h37
zxkV)wCgpU|X8tE`t}t3+^H~KMue1i9qRRiCwqa-IXRIuhIpq&FkAdv5B_e{W`Q?cI
zbzJ#*^MoBk){KCUExEm?+OmWmk#-=f8R-IhlL}ZF1-g?8h#kjyb(pL|>h6#*TO^!k
z1jU(ELm1+B?J%OHx0^Kor9E!hbE*&p#3&gjeAYionFo^Fg|HxdC2?lm5DRTK+*|{h
z?n8nQ<n&6f)si8#r4Rv<0-vbPrWbpMP29+C3B!%Dk-dqV2PG#xm&_~>i9~shCy_2U
z!du=KgU;E0k0x!uM~F{;_C99-m~zY*4by{p$bC|2vAj6GlQcLX_GR=EK7vN3@l!yc
z*jT5&kC!~CyCm5=BcfEvPykIpvcI-Qcxi1bB)hV<Gu6dz0IPdkPtnW<q*)OX4&Dl?
z2v_>?rn_TIhch4E^s;keFVO*-(!v#ap5EwNe_9;|3tZ@=?fph}hlD4l!H~pX<4zP<
zP&SNy0)68#lQ3Ryo`0yrqGEVN7a*9aqKn>CiWF4ZB48*2`Kt5~D?*+u!M*6>ElE7E
zOriIr_a57dK*>U2%hSD5t3<e1LL~Xd1_CN!JP}4{-Ly`IdP19Q>r?40<pG$@;x|<m
z{kQLWQ~fWD9FK%J{5{$oGd4;=%huFAyvIPJ5Vpo-(g*XKQ0PI#!hxy_Q1qBIJHCl(
z@>nwkKj5KNj1AGAw%Q(_T7hd^9F;}zV7VU0OHYi;v<4c{kWKK@OzkAkJlQ7zopa_-
zY96tH<WASTJdKs#$lfSN%ScA2F(ePtOwP!Q{V;X!oNblE=yGtaGaFr1V(KU^JITKD
zt~u$W4AQ!k@av|9HRX~pFG>W29HeA-8eZArpYC=3=*qS_jC-Ua9NfJV8NlZ1Pe%Fq
z`j*uj>ZYnM-MxP*6k570#>Em0YAXor>l`{&L8yK63O1HPYE4jSs*_q@GGxg~gxbyB
zj+k$tRWO@!c}=eGdcM@b0`()I)0v^R3^%z))eJde(jaI6vqoV8g=uXOh}MigrPPrG
zbtfR*exlF3U7Y#o)0=5j)NIK?QNK+ZlgVA0e@Ik#^Nonsk{JhN3Po|onAo)VBEFd1
z0O6kKRYQ~LHL)XiI;30nHRePL>a<~)VPA;sa@`?xG$AYtV_RFdh#OB<Mx*F)bu{AP
z>x|K;Y%#w;VW*;ve_>E}#)f%(!iDqXD926=a_1()H&tH36k*u^EU)GW!v?A$1?4sn
zGs5bEE}h`sP#iI&1RNjmHtQB`^w3BYj{?`}7V1`kqT65`8{D9V^^V$CASD4~7mg>G
zfS}$;IGLzq%s2GzPP-hyW@f4o>RXv#Cy+Lc>BI`NX*yFr2SEt1$Q24E)6-klMv)=n
zAhvTvbecAivRj-vTX-X3ifog@iT5WEC>pJJnzWdVnZKVKP1(<#TEAW&-sQl<eX1I=
zfQHS9CU`AxWDiBOkqD@no+B7q^DeVbJ8E$3oydJ@XWDtec&nPXT6&(yt!-(iRnCy+
zL?cNZBH=+vGG-J*<rmB-1|T`3SZdykVqfn#qj-z&_l#nVy!(t2t_{&-*M_Oprzez+
z&=T{Bhjg2BKJkJ0zVnH*m+2EqdXS_ilweU4XOs+LH2Y*y4*h<CcohTL%>9xxv6LJW
zRS>0}FpYBOjnk%?!*(OY%!v=jYx{+Ig7bBzk<!pPrczR%nF%-t7KR|axahOZ#1*^K
z@dLc!6a^U>K>}|V8xEL6L!0PfTD4Me9GUs2!;_m)?7;VElxgEH7WH%K+F|#(PNXBb
zvVEDmQz|P@828jY;ykV-VnG(z1CG~nQQX&rw_yS5&jP<MESW4@_$Y;2-f(AQCSf-r
zw@%tXOR|dTr$%S7sm-y^B3R7b2Sq^GaAIx5L2bk=F)f5P>>pdq25cp@4A}rOG{syx
z<7R+k3KT2?2eUZB@cV+|Ar{$j*COp2%-;IA!o0nqOe=ei4Os%qG#UGu=Z_Q%pT-PH
zaf=jJKg|IkhvIWukgOJs`MC7bRs;s?Nv*ZYK+wR5SgUuZ69HkqJvdQnstrCR(a09Z
zf*q_oIeDCUwkA7w-NQ?nk_gn?+jvw;K}bBTuw<~kyMxr;T}H*GGY_W_F=M|@&jqx(
zJ1+`;S^ou;`A{HT2<|=$B#8N@fh;!fUX*Mx&EhyR>KE{P31hx4#O3DfgVN}Erl|<%
zdiS0R2y<=1h(gnLUH~R>_=}40S5lqLroztMqb(JeRgf`<UoIL2b^%8c!4gx>6z8k#
zwwA4&fMar#mmgkXI*S&0_Y0O270jG#idu9MACbhFjW@j~PKJKQBL#mQmdSz5%`tho
z85t(?n9t&w91gO~3|wdCt;h(;6Pp%io4&};RW+SsoL)7HbpExg_QM?dOJ$pd9nQq_
zL<s1+Pb&doz8NJ-&B@tibGciDj9L99z7Z10d|glq&e;pK-P94LQGbEY8kL{ZSB=Wd
z>!ZdR$^?9z1F3j!x`Pg<F?P7%OK6NiNKpd^%seYFl<D2wd8qiD=wMY+?aBD5ckgTx
z(tN|3EIntBQr&O_m*Do!FJlxO$o#y57rX<z5bbt^?;bl|N`3s29cB&CoL)Ct*?B!~
z^d3;Rau1Bn*()86exL5tZY2z;hUyy{%DWj;9ZIy_QN3og!**ZpJ)?n}!HY)ApXW`Z
zWtzpSM(@;D^sdnW-_6TLZ(Ejt+RZ(me5WBHFf$AV<;xoa`Zx>fS);!q%Gqhux&1b@
z<_L?db|@^@rzz2eJGx#>+y;}b7ye||3-5$3CP=$pcqht*3}&r?M;JBNi&|r%>xDnr
z^#bbkvRp5myd&;+@#&gIm}<5hpRTE7nLVUm?9+8OqSP8QBTeSas|8WUL@Bpz=O)Nx
zV2><HlF$>!)6(}k#KF56S$*Y$0HPri4+G>M14#5HXGb<WTw@$+rIZseWN9fcl8AaQ
zCp*w50#NIBpkw^%(0R_{=DpI*`NFwQ4Xc-7JEw?FQd5uzJ?^fs=y2{L=f{nphNaJx
ze1XqRI<DwEB67O;JTh`dM;yHQ;ley`AK!x3*eYW1n4$^uBYkT|!5xoHmW%GK{q5PG
zc{y#F^VuKI_KzlI?dU+aUcZ`@JB)KfH&|c?vZCe{7|H_D;F_1U8#fvc)aPY8mD$+E
zX?~EGa}YOHTzHn9u|GCL^#c%9A4W!$-o`5w_ienlExUYgJU%f?pD0`edZm^w<7*qt
zPlkC;Y38|MUX0^NZI|N`yD;43SAQ!vS<4gmPUXxyjw(nNC#H`#&-#NRS}mi<@52M#
zuy$ew@P*yEC@$O;UtIVi?|airpO|($kvx8I4M2I?brD6`;9xW=;a3*Y{~~bCc<Ak*
z{mcLU&#_&;Ir+t{0Hcpefw37-Kv9EEo|XKz18MSN0<Tr_StU_L&@x2<i=`T0#0uoG
z4)`kuCmEZaRJ(1n6W<{kDhKg+<4brVPezR}@jF|K4CZuzu~EmJwr7^?Hl)en69)l1
zfrHGf6Mr#GTe)}}IcXFOksRALeEIN!zJ2)6?vOXnpdF^K@))qXRhBJ<0}&wZ!VZc4
zc+A-HdEgHRMI$@BVk({$Gtj~i(z$5uUWoWkmkbz*JGv2|a^KL&Ph7H$Vc=}R?f@Q+
zY{l9oUA&bm5MnONS0>^8kyy&`EHlr+mMXlh)hQJphXdPtf<d~Xey^0wfp?%^o|iBV
zjFJ^ZEQUrrcsHOU=`jbxi|KoI`iwku3qSyLyGt+z10+sL3z7*JS}jG43W5nVRl0Fl
zH<*3m&eRwHml_%Fvi7$tqKsiou9Zb7V}W4vs%O!7^ei2}hnPy9ch>fWHj698R<T)}
z+yuNkG^b|qY1U3-egi|cd2Ad`{qFVDabP1gN2k`HQ>z#Ykk86v1k-gd^=`#es!X?P
z>Xo9hq35Th0{t$BeWllWLEa^dlrW`Me#Q7q^_DT{z2k*2*W!wWoGnv4nKHe0cCYzA
zRJpiJ{o7Q3BKQH?n7Bk^yWSL@fOIG5lAiteSr4MENAJaLuMB#P6KqMpx46Q#ivI)j
zYoC(J+bWhVyvjN1ISI{Pc!5;3t9ZvMc1|NNXI^S$=3-030h^x_dz50q#ds+xlgpdv
zFl!fnEz6Y!X6FSpYjVHEy~N|}F5=E2?;VN|-*N=B+m2@(0j<njBY*+S3`54XOhkp2
zPTDgOp=@X<)RSV);AZ7yt1%2$4uUhGW3=Y)F&o%r(DTj*R_Z&?2=4tkWlr!bQD&GG
zao2O^h3w^bn;CPBMxxZ$njK;G?CAd+X9v5>eBRl?N`2?q!7lWfHaqyWKQqjZxa&Ey
zL-z8!&5pT7BT?#0W=9;e4fOmkn*nhGQ$Y3N(3=AMD-Qy<ZwJ?j!Q@?Q>G#vlgGsgE
zIB(o?CS0a0s?eXjarcg*=rIKsJu!^5)Hzw=oYbfbU22%MO+tX31iGJOy0ZiKrveX?
zG&?)+pdH7o%NE?@uyr|tcpwjtXRiYMyO+0k@b5k}Mh+&B;HmC>Bm>H}k54wT{SafP
z!KEdi0lg!GNzEWSS2AU?K%Vg&T!RV_*GO!g#oo=ygIVHmf=K5#l9UW3f#0QxM^0(C
zE4^DGoO?G*Q9GwIAz6gk;l<3o4%8}*)-(XvmK*@sHe@JYb(EAi|6;K6Muai!jm*7`
zlq2X@CMR;Nn?g>MXC88*0*Z*1>w)^!I|DGMb_Vjy*BNw`#m=C;RRlrC`@-g3CuTBu
zu^U@B>zQlypzXXUi~@U5){VPm=AK*V2L1pAgfa*h!-BZ~EYFA*LG8n^>*I0}mZ!jm
zKhZ^5Kqy}!2pAD`?2ju-*@Ev>2{#UxX?SEE@g>JO3t((~O3G82cH`14t6c`9^x9vd
zr41nsdpe+=8%E`!7e?1Tq!ZJnTs=22thxm_HENs@Zx+SrT;JnH{#gb<1Fj)BR4^>D
zo9-`L9!q%)Oy1aB0h!jnbi`<=q*zQztC&B=6QoC1AP--kk!8s&%^C4iUUelJC1ZZ-
z^-Lqb7+{Y0@MvN;01A>!@`!0_iOpY1H%n2D)O8x-Wtg}Xm|9~aHbSp4-g2M(W27SB
zCbZEMsiVh=VqlFw0M(WI-SUdEbKqxxHss!9`o6tX%jCA^)VwgHYA-+ln6>wTS}uw3
zKt)GlCQcQA_#nw+p)_^oE)Q6kCM^|FAHLAW2JtMAcUL5c`o9PX43l?9f*6VENFWR_
z=yL6p#5OMu#B;!xUkXpI?RnDXJ;wLP350@&_*-F<kTDrx^?qC_V;rx2c4?FAomVcM
zAaY@y1ZF=m--REzH@+9ycv%I^EolltnMu9~X+%kC`EuXas0=v765fb?XDI&J8E|0c
z6_#$aO*e^o8Qq~TF?(RC#s=Lf%Rq?@YB!AUPbEm=1BGXa%c2K2xtI}<TfIGOsnKqD
z(_tkVVr;0NO(kdN!tHefJTX)`bAvF#_$PWp@NNs{jsb)QLU}1@cYwqO%T}fNv&dDs
zaL{q1WITa|{R-q(|H_bQ%W+cJ31A)^!J1{@xFiZMD-H8OaSvYd509zFP2zhkLHC9!
zo8>~Y+_s1Cq6^B7?j*~y0s{7qef*_{m(S;ae-gKrgWKd@DJ|xt60bhNri7rZRq)Nw
zMF7#@Rz`O5O)o(}gf|R!Fsr7so^QiaO?ed98XzqX0CYf3b1$7DT`t?9U3Wfl$aL&M
zDkHowzCWy#cFL1*&@qF%xFn#B4M|c=q40!jTkM;r9NmbQcs1IJJnKMAs#`#*&Gia)
zK{TKsDuj<6WFjyx&~;5>16y?q=xoJ<#>l2+6BXx?+;Va7xoEP{QObIHt}<Y(txT=W
zDg(=kw^&Ukk_{&w8q2Ig_*E}OgQgba?e;WsEhjr5(kE9kX1t&LGSzc_S=+?fj<c08
zvV#b(u)xJxzF^cqbSloc`b^Wh6xl4x5u<}Z@#e@9=)%aqk^$yY%>hWfF~){55q8&?
zz&&~8Ot)L)#(f#yP(AROc1|KsiUPUUs16bmt$XD1pkg)-T626d16r?>X!Yc+s9H%A
zb7GgJeL?O)WbF!&jffhjA*Ih#5@^}m+tcx~Hx)0;*P{?2T0k+3u1iVuFjwO=f|S5f
zQ=l`t<e#zKD6NQBG&~dy{zg7DsFsq*B5r6(-RV(6^g5sL8eO#<M<Ll+lAbv6PE6oj
z{)u)VlR#Lrm0|;-l&jsLYIHJUAYxqc(*wyRB~F(ro$BYGrb7`}&>{je+4af-Ny==B
z;fn4P4JE*$4^GLLv2IRliE3*()%tozk<?*jGEBN_D}TyJB^K`vKxqW3a4SS#r2fmQ
zBtW0tnV{Xq9K@XoGJ3+mMTW`lp%!apRzJqEIqVRp{WGuor*;-tx`lde=NGFABu^0`
zV2Q^I*M4z~pM`Jcv2Xgz>py#@mccWA_D+-uh|u%yyw06}+?UG4%c_*==fx9CZG6e9
znmL5v=P^La;NksKeAedYu};vGR4lS9=e}hA?vR%jUB5l&4Ax5Cbq)(4&fK$Ddgsef
ztXau2n5551Kbka;BXu78e8iTE<>GRXn8&gj8MZPjIbOR1wfemI>@K%|qBX40Rc{oI
z8D_E2!9s0{Lssy6-Jh0AI$vSkB<n#ThP?b!@d;!VJt|w!smH&t)pFyJFOd}RC3U`r
z5M+(rWUMl2&O_ErVlZUGoTDT0$cRpuzQQ^;zA+v%s+TOGD||*=b;V~?o@P1bv_)U~
zP-d+9Icz7F?@Z<?KJguQN*?4pcD^WKcJS059o-uU?({{{#Wo1=!{GW01qBIZ9$A4-
zCy8mFv@Xxcbl7|XvY%ag2vn})ej(R!`K+5LMFf&7R3BG22g_|PM=yD&;b23Mcxy0e
zQZWLT(~6NTPOKu!&2muzm};_*D}pmAZO~X#AW`XZ*5t@BS+*>ow=Wo%yj%?Y<F;ca
zZ*-iB_le+nt{D9MC<Rp6OG|cKlYws%;$)T@aGA0*8ig60ZKjb5(!4KVthdSr=v$IW
zM&(h8@eULPKe4guDJOqq2IW#(7QmNXA}rY4L@l_89M4wya)|yS@-&dNbu%5f^Chg1
zv_`0JZaGaYcvlX}Vc2u<&&~v$NR7Cygd#~@{xhrEq^fLtMWJ(aCW?A<sACC`d5kog
zYT4K;POu)q;#=KtA2(_szbwo1u~7v#+Ub^cy5u>wPffHjN#D7j9!Fg<-#S+~ix@;U
zi^w6v424S+3JFD=R5>;$li#))z#>7@)-aRd+B36y&Q+?x`jKHK5DnDZO?g0J<+k}K
z^PXg5gYK*!u+Z^}6skix9<ZxD6520opwM*3v~dy5Ak9vLw2>e%DuE|4F_WfpsC6kP
z?0FTe0CNd5Oxh5yaB5hIUj$$rS;u3x0hIu<crgHE=>P%wZH(PrwjKyBZC?ZHWgM7x
z!yJ`%BE@bvcF?R(HYjCVU@rF$sI1)SK~j;NIt4V*m9Bd!nsrCG<#Q}v2KMLliccQ@
zg8Sh=#hgvp&=U5$P;Cw8fnTEmf_;`$`1*#(ozchrK@^i?Nlzp*NFt4EDkWnqSJ6ZO
zlnK_#q;D%bNH>!yok$kV!+~-ji;Nq3L4;c}o>*3vCx*v9TeS%$W99Z|)pI(tn#Wd6
z0>zh{Y|t7IOhvx`4?}@eX}eH4X2v*dfE;$(#KacK$%img%Be>|N3xYuPg`8$E^ZcI
zzQjXW7e!_AO5^qgi&U%=y|38xnLly1QGYTea989xXyGEJ1uM0eBEq$AHe1;rxQi8|
zphQ)iCOjU~#jCK!!Jw5IKL-XMI5$0TE)1MIZQvM^<j^tLS%cS~I(Wr?KRr$Xm7F+E
z{5Zi~#)*4%&oNH@tT~&D@jk;is|GM$tA61;VSSb8W`MKM9ZpAg7^czPq>>ZSjovgF
zMje5>JX{x0`aaG$19PHVc2YYvDYjM0v|1}Q9jk~_PgtCg!0Mwzh$8Iz#Kb~$XRvCU
zWvkY*YBX6|%pcG6@%A=u9u>&jDyHRh#-W@%?V#mkiqHna_r&&lF$+a)YT!xHNVFoK
z-OU1&GpRIKnuxPN;L|4q0@9Yik6cenY6|DBS{k3pB}Qyre~S%a96-bL8NCG)=mm5L
z2M<lNI7LSk7{nk?97Tf@cN16}%tI8E3?DaaQsuf7UW9L`f=b)5Lx)8NXkkNK5JqDs
zTZ$PoLztu_!=Ouu=74i}^z60is+il!iRR=Q8>fL|f83yU%Ww|VcKfTeJ-(7`-VWHa
zbimd-paz8CYoQEuZfRN7t#9gXr;WoK@o^>h_b|%dKxWEUNy(q$@ocNFV`K+!=L>i$
zIQu4N)H3{8pc|XBt=M8;F{=e~mZhe`E9yhaj4Ey(qEr^q8c&(%s4QFQvB?-5@()Pi
zoHiQ><)Lypje>jP6$ai`Ga6Nsh^0P<-vzJ#B<4_=&q5xz7PgpWAQOFzB}ubkaUv!M
z|6WXju1{#}<p^~fDpF~EAnVT3QZHp&OXVcv4(3!GWw5T(c8^&LrVzei4%^9ladhL*
zCK-52!^zg6(`@UIv6&b}jBjNQMUYLId^%;|maVyqr2MXv+ejk*d@@}liX5b9B%=;_
zA}&Y^<2(ii%Yfsu*A9{f&Wn`2YR?oACnomrah30K&_M6W3pWIY_NHMdyX7KgK&tKC
zMB8&zK&B^Y9qO7|WR2N6)J=7$d$$gWW8SF_ouvmOOtt;Y)Z!k@*7mbh+t21|dm^|=
zs^vFI%T*qcrlp&^(9%t+`8RiKel9ItWOZP6g1Wd1L0zPJb#b>|<r36E&akAZ>fkO^
zb&%@7!CW2Cq5~xPsXi5gJY95Jg&Fm+qkOakZkc`aQk8$rPwmTC2DSnIxtcKSLCSUe
zTqxJ<P>%U7P7x<uTAm-3=(_<K-T)9>ADI}vdD*(u<Z9H-u9udsg>N|S_msBU*IcBL
zM{Ce~V5<Vd=*fd4@nv%HwRoGQ__<WXMFHEWB(Y|LXmPFU<f1!jXa$y4*o9LE3QM1O
ztcI-PKJj^LI+d99k@kDce*04#B{2_%v6%;;l~=_4#P)$XvGZfUeW1hEo3GLC+;f&w
zx<jR*3DYwns5#v52<|*3P!=)9s*nf+E~dz2bJCMS*S%zPo{Fwv;10ZUEl@6ybWz+1
zrF(BS60PEE&mG{+-4YRvBfBAT75N@biKBO9H%2o5@6nhz+DArX;tdPptyj~O+zbn*
z&gQKeNcvZ>C|xbXs{t&(&EMNqBenL#3kHL6HLLceoa(jXv%`8Qk@<vm&ZvZ;j_l6y
zwBo8mT3FY14)WJSP7%{psjt-i@Vj=OTk`X}&uQ@6cK@4plm+47;dgsvDbPP-Sc|;E
zZ1<mL*k`5#D}DkAsqQo1;!NQ3^EA|qg%ud>%@^7Qox=D2ktIEw^vmFMJ`#&A$x{RI
z87nMiq(mL=#Q!K7jUGk1%ma)98c;PKS$JH)eB>GYf-vQ{tNyNpV5T@+sqd;R5Fd3=
zJH&Zqd@j;IJHwa*p?f3OSUR7l7o%Kk7v3zY8!#uujEsFB*dfMAC}QWd@6tCwNkre;
z%-9GSiR`xYrKPM?9_@jPpE)<FC$3D$fnnadA)|l1g02N5WSCWE1Dd*-^#NoF_w1TN
z$Cqx=Gp`j@=&kbd)y^|B7WJ6VI2vzS%B~gPmx3Cn1&lcD;qH9GIa=KSYb9qExj=*$
z=~IGuM4U~Aj7sBR;A)_Xc)JB@Tjwk1o*y`Gc;Jayf?V(e%51i5e9^!sjbmRj?o}H1
z7T~7J{HXA0!{<HXUQ&AB)hk^}UW&Jw>5IuHmcK<Ctac#)KPfJ@2&x8CV=W;uRO7{^
z8ZWa|V{B4^Y*@2`0Ir=4U|K=^o?SApvGhEx$as95hrSaEFOeVy&y;H_XFhT^$B}PT
z!!*i=>b|Dtbu`&mXhzXgk&S1{9!sxk_T-%}@dd#uv-e_Nf6KrTix^Mf{9Yd8HyxbJ
zpRa{$A{QU1w2=mqwJ3a(m5%iyfkr0iPvEGMfRw98g+mtO6KMHp(O20X_JPtQ;`6!x
z;md<}?5uXz0Vd#Ir>+Lo22`8`XG`Wz;*N^^Omqal$m(G%dSX3yAA?Mf;n{*5$pYr1
zDz%i|t(9u%-5ZzZ!##KVENWje4$Ix|{YgTa>(-xS;aP7)cc<Qio&kB%edz8?x1gu6
zHv47sgLHHmEw0TJoIAPK(xt$%d#I0nx?Y7}+I@mUaXZEvJP4`$L`4qnQXuuK<v3&z
zvs~tg#x4YpW96`Gtx`0gWtq9+xQwh(j-Q~BbQ9X@3v_$ezjA_Y(9~dHh=KyeWnF33
z{0LFnm%KAQCa*vzuM}ZTiaexsWla4P;frz+Ei=sA9Z_OBl10vT{FsGcUqP^J&iv?=
z?aD{4KR0qSx{$iaPfl10IWx~(&8(fEsJu~;myvOx#*MKoKzYJ}Tw2N)R=l1sQm^OB
zV}5F#SuE8L;F(>KC1!K}-D(;dqB$5I2&uFcuAlL8H1BjpOhLzh4bA$ZUlZwQmqRku
zwa;%Z#LE~X(Qqjo`*=a)*n}k3*O#`}?Kww~NpsRO0|pMAiajHBdln5E!;&&+<YlSw
z<O;tD&GZe^9gQ&L6O2iSW-z>2%gh38qR(=g9(<xOwy@(`ckG{};u8I|?-yXWF8pr6
zgK_H?ia#y;%Rd!=GB(t*fuKnQ0vKho6wXd`q6QHV$A-D496=4k^9xKkpfPzK`2Fpk
z3;5ke7o11jUSLy$N`Z_tIVTv)wAC@8yNA!TC~p)?f&-V{<y;re7)zqT<LU`rJ;p2q
zDWg_iF)BmBEy8gLgQAtXApG)pYcSWjq`STQYWuej;u=2~Y;i#z8_J`D7cX|7nMo^}
zC#-0u-?otqFeqJ$x=?oWrHuyzb!g5c%FXQP;0o>ji3Gc8*NEXkxFm|%s_&b8%e81w
zAS|_?FSqtzJTr@x;xfGS_~m?+SNpHu9+_Hb5!OGu#CyoDK@(B5Fe;=QzVh5CzZITY
z{Ls0uy>m3vCEM|I_wAdhtq}L>DXo|n!(Hcecs?32byB=dz#DDa0#ix07pmDgc(;Ey
z#65};htc2i(e=@}X8L9dUr_(s*WbSO;UJ^#=Lg$w55Lu5O`HuA28#B_k^37Iw?tm_
z*iM(xzE`&W__o20{>k&<<5|z`Xx9o#`CO^QGt<?K#hsMK7^RDqW}~6mf^abz_(7Br
z^hU5GG`k%NKT2^sa3#PwwCxW)VQnm^_t<X4XG<g)W?p#411@@aJOr;;_8+Uj@b+WF
z<8iyN<~R6hE5akF!V5jBMD{ricjUhv421m0-Oh;wiY<CRdiMTk>&>&RVoO+g`Q`}^
zmfDKwiqEmcCR2B}dOfNZtr1GEirXNJ&|>V+9lN*`rwgdP!6;3DiD#)0N#xB=MM^~3
zCdC!y7LYM4RE_$&K2R73ndB%C2iR$J?c(5#cpxJf=4!RxQWrL$NgYC*9gw{Y!hj9p
z=r6FMyY??6Kvz25deiEzcIsBQ+O3~;I%n%EmCoN`acnkg*1CFY>eyUwHmiC{qgqSk
zvFg>Pp0cviOypU!sw>mzlh$eS)r2(~c>WV1p&3k|6>q8>2b6|F4Bcst3$FJ#B6-dS
z39gM|oRBK~u_>#peE8smdwzG=Loq~2=hV}dDPwcB-dvm7a1yYn4R|z~+Ts{e)xKlR
z4Xav9jWuI>UJ3DOY|PyjAD-`uh}z2Z5!5A3)kyQkIdeeb??`(J@a)2c9eO{ZQs{u#
z2g|!__uLSK&vGFg!t_UNUCDvW7;RJ=Ux-+hexb$kGTMkCSp<VHZlmD(mY<zCc27z+
z#(L;f$dohg*vPR4l3`P)Jq$(BsdRnZG%kfk>oo|g&?Dd`q2If7AgK~vI9>^LgmE?k
z(@d9<I*FHltRxC7AaZ#%3M+yh@auM==k{RGyQbqq@y)v(tSc(n)Ypy~@=HHWpbzzS
z-b5aD+dXFL@L?ut_l^Uxw!T)Mi7DX9q+cYTXKLEEJ<pGbR6r%AbAkmMHB|wycvt#g
zS*ta2r{jvXzJdaXS87-*mV#!tgcN1VVGYokF7Bq=hI!GWYm0@TP{FG(Xt|lYkw!}c
zoz>W&eT)ni*di^(oHPPdcA3fw_$)o=1*s`KivtuZXP&pT<d<C2Q}0-I?}S%=#umvF
zee@-DtFyzs<20|XSraCDd`y;^1ELIbK!gj3UvWHWR6quJ^<^{y<rAZ8duQ(XkbQ?n
z6`8Hq^-!nB*wTR;@o$F7FR5l1EW@+~E*Bwk{R+s#cw=@ZS1{@5UyOX{fO2oSM~4-$
zQ+|F0MVY^7-iju%jr+Uu(Y0nhe}QUNSJtu@s5r7?=1tRw*Zot!2O`)pd#bn~@#3vt
zC!>*bT>O9kPrMf?>dqrCbHO9$5nSzX108@ZEfqaF;iK3^q(E^CC@nc{kIjJqqzYG;
z!5HRm!xqqd#;x+fllaE&TV(#YG2Y@&mPz!`a*l)L<r8F;8c{MX219Vxa>wILp7zSS
zL_ePbo_*;LBD7aB95@Bf_saB)23ElyD}Q;ffcS#0v~7wkCKa#|N8C;qGPCT3eTjzI
z6v|-*W>%pJ@J)VuJJJQldyBE6##<7Xx1*e);fm=V9>o?aNlpSwD=n8qgc@Q(tOr&v
z#EiP_1#5B##BY)ky$S<^;yAxO9+ofHg9cn9RfK$zu*c)Ou2Czi)m$2HtXoxu>jTwz
zCCgf^=Lu#^x)0*sr<_azqFJ(wi{;xFA;)7)a>Gk68^FUQ^Mv(=d1H9(fOA)p9%Ak)
zZEfs>cjqO%UaMO(Ea8YXVa*0QEjXKbd@3?;*?jTLnA5_1GF3K<?=cUnjt!Vy5$efz
zWo4FCvvP-dz0s&EOL`E8hR@<(d}NlE#1Mh5t1kILTlw&{7W*J)vG<AHB0Wi)G)FvC
zesJXp#P2v^CvXQqTTB*^rdVt|{bsW|xkd4~z6m2`v|KI~-%$q0p;Bcn4DP5y!3@ol
z0X)UnB2{dGp3sS2iv{!GY%@lhlFA1!+Xd&t2U>7Hd>D-~3*S`{GqK?cVxl{)-K*22
z+1#}ow=bkLt?ed>&8BS8{18<-+&cngD8wP4mB(@MKm{&RSeor5#j^T_BIk&q=>!gW
zsG(sc7J_aS{@CIy#8H_<l7WoJcM_H`dN$$V&J43UUFV7E2u)EjbeL?n!oqdO$%YoF
z#w?0FYXKd@mHL3b-R~H3OSX9Iu`4P%806s2Iu<UY)2*0DfHCK7Cpj;O<*C&%4tN2D
z(<)bZVfVExF@eY6U!yZud=Lu-5k5*!eZS|}YN$z~Kj09Ar}SFQ3z)|z+9nTOfeVz$
zYzuM>fbQ<Bv(9F*nJ9>}S)C=0i!Yi`E=)~KB0mfK{@ra(E7j>8h}8)u6FSUc_-p7E
ztbc+rq7?*f+cq{EqaG6pP`u+<=-qf!!i$}xoNJJDYtZf}i@3;W1Mg%Vja<Hr64TtU
zX-|}oerVj1q#d+FDbZqm_N=mRhjZazEUe(}-N|TuhRuapbr*8(gIO>PzO(*vN71mh
zR{MIL4+rSl{Uh{yWrBc!Qokk<E3=TVsUMx|kgGD85+`eMC}2*?gJ2?xgzBfSX^OY@
zrwO*$M#XwFW>>u^RxmWOh`HkBSZCwyFPQ$1lj873By2~F8$F86wV<DDsxPhE@kaFj
z)iwi;9^B7=gn@#yc9ncK08k9gt*t3N4KtN1*8xPD(~6=`cuQ$hPJ{Bbw`rr`!6=Z;
z_zR8r>)LLFPM);}#)F(7zw(uWFI6xST>HlB`=rJ+oowx?WQ*hyw5uDzV_T3&fcv0r
z`#3nkK(JhX@{A|#s?-!>Iby&;z6zg7!sSa1bQo6^vCn11T>g&cQb5|Q#`qlk!4lcN
z9h+{F2Ot*Mj<8tp*lsX+{-m)`3S_5*A{yLTuU}2?mkKgjZB{Kqlp-?@?r}{d9Ara^
z@0Jg9VKmAT79+Xk7U_qEvUQ^!CjjZ0u5}Yi3~+el_FnJ0AU5xqXC0_Wv1}7#=<ZUM
zRj;qkh9unxlC$p|WVka#cWN5n4hNEw%Sx>9;T?z<cBsrdkj&Jf&}6<%_6N8wg>M%N
zB@CV-^qC=ivcqey^Gf}$r4-FU+m?#Zk$p~Cl=otcq+Y`G^>uAtCfdBlC=>S3W3UJ-
zJrf;28n?YX>l?F^jpIGOQ?cnOLkntpwYull-Hck@cy@C=JWw}*Y}$=~Q}Rcn;}gY<
z^uhHm{f|zjmCA1y!(oVVHk~eAY*I{_M`<?`^%Uo`(-}tGz0ptKuK2?7*f15`uweI4
z)`ICX^gQWrT*M;~JttzCBXf=9+nVIx$UwTH37=7@rYlXDJk<^`RA_MCb~iS}BH+P@
z_MCG-23BAje9!p2WJ4D>NE9c59N_O6cyXia4IOC!AJe6ywE0RdZ>$~)o9adI{(=96
zO647^af4-k=DDroQNa-)Iqo>?!iI<EUj|4r&pvmY0rRWEFU)#e<VH@V7W5djPlMqg
zDv7TQmazd9#DlZJ!ru+~FcaQAbja-?w2+)^sKux#(QdiYx>nqcKV7E>%?%0T8Q9~~
zhQ6D$-NL|)$1#RN?$T3AqJR&m*wbdi8nXV6$F%8Y<F=-pDxy2LvFgtbFp0jQ>9Qqm
zmms6MoRC^}UL)rI2vtRutH2(#PkE>=bg~jvcF`&z-_EqR8+>C?ji5-cbYXVP^!26W
zJr42~j}(+?i!`^|2TMx_rGwH{38pP%-dbAPLQg)tRgSu|Wp+^9xM*)NNd5MWVwvma
zTIntnHQ^Gaiev6)Adn#F=p<XvWGu9#$|agtJmV{XZHI(PL-Aht#CLhcJF*cQ-5A8h
z12CQ_g*h<H8}X#Vdj&XwvhaBWqAm<=N7N=J?&;D}ED89fQ$ynF)GU7ZU|-p8R5Ugt
z>HBe7;i=pQMC+7S68;y|Lg4Pn&%*VBe>YkR<SdB1xos#=>ZJe*H75;s9F_)b63}|E
zq2gKP-@bxcHzqe^#*sRP=nYT#O?*@&|DYXg2CU&O@b{LB4ssIYxpoDhT(FNLK5tJn
zzjU?<97#q@+LswKfk<VOF*I&CLH9Dr4g_C|h#&A6$gDM40EL*hw-F^d3WJc4^o}mL
zT91oV*LT7K`m4b7xpcdz%Kt=#f8y$UQDSRv%+|^wXi#wnSRE?)(n%R2UolUzo8=Q#
zCo#6icfjeZ6fI$xh)I{CV{&BzAq~AWPuc;aF#v<a3&VtecKwc=)sJFKX-H<YuA<mT
zw*?f@R%te@N{q7B;p&fQm50lUS>R)0yN-8fk-0+;TF!CxWV~U~W+gS9SUG$F#RRWJ
ztHocq(T#npp+ZB~inI6n2|vgJaG!Y~Bs%=+l}M@oU0lCY;foZck49)DpwVp0H3oYT
z;e{nQeroP^6a#$2Tnn^n+sC4B#lZKY;`qdLB-6cS$C6o70f|mj!jq>G;1#zN$L&1s
zuv?E}Iuj<)g#BE4Ti~Eer%3YMaKn9jza;%I#B?uPrY~6ya1&;B*;rmy4(%9F-i=k^
zxD}l1(Fq<RTRb8XZ6v<)c`b6llkoB=_>7o+VK=?S*Vbo+H+`1ujtd|hnsEIPbM{PG
z7H`a6sc#k)1+Qq{7?60ANIWylGZM^t_BGD3Hf9-^v1luHWB5%nsq_q&gRJ4eoh8+$
zfbTUtVyDO2?K4np(sjZIWV3Pe@N5R27{W6zFjwv1W7a;_#9h@eu`vpG!M$y{gG#t_
za&Tan`CEj2@@;~dLh@C*S+{&aroFVw(kE4u>8Y<~I6<<43bs@YvHc0F#FT^wm&u$m
z<vA?6cY?cainCD2*FKd_MFEgMjhJ*Z2D{`Ln|90QyA2s)KpepWIXK^$k_G6f(j_7a
zsZ+&pktIzMDH%lz)wh_DQ=S@@U{8t+V`v)6Ak^cN*twe+thnmiQ_v7Nmrg(jLlxPM
z^9bq1Ctdg|1Ao8{H~0*q5L7rP@J&y$2~V1TC0_tt+2l+kY+spg6k^l1oZpzlH8l&G
zhzf&&=iB^}PU0>6nKV0b#t<F_Q^FL<x#&e(xhN^Il46n~uOwF-!RFr?<|D_DMr=d~
z@%<t@idgAf*uhp*s>Z@Bxnx9m@fBm%%P?PiZU=**h(MxfQV`C-W*GSc&0j0-Om#!K
zbUAJuEVRlhri(J{JO<Zc9aSh{3l)sZ*i31$nS((4a2(J^d}4G%p&`}F(&o#q(A5aL
zQqu9z<8q2T^XQR37MS*vo#td(wl@4H?dnFktY7V*V8_QD#~_IzTEXeqIa||>SfHoN
zz{ur?e|y}PR48l{d~gF;d$?Fb7a7LMu}s5Yb(WSwouD5FQY4BikJE57V<VA22C9}&
zQpdu;(V4q0DoT#xVcIMNcqrgW7&@U;xN>38hUg>?#nGI~TTr}1gVC>$Swu7os_I;v
zJMtbId1(eqj=V<#mY*I)IXQiOpm?ATYP_#DQ+R{1LsB50pc$K<X_CQ8FAOX6Zs0*V
zSt~$&+*W%{7x*A25{nip2r+%Oq{FP3L=K-mpaAj!`x)Ge=9O9vDgZKQ3Cg@B8~BTO
zNuYZ+uA%gqvLriBiJNhAsBB9ygz+3D$$i?A^EynSQhO&=NePfm&X!^f6DQ8(;djah
zy5`>41YEeG9*`<=wNn;ZMU1SZ@|+~Ai1{|CYD>JAQ_wN)DdUP3GOpJc<~!W4+ymmL
zN%XCn$Y_w7CpIK<mkM7o+6V;}TPe*As&}<e8+*8}_Bbct+w{0&E*4xeK&JLaR8+~O
z`BvzlE!36FSWRw08KxGuys;@Qy$Yp>p;uQA#BKED4v^@|m+JtjEO#@zK!#IXAeFQB
zst6z5(KXj(&HQqQN2{Li;EQMcm>>5_b&a`k)A0q|&M2YtOa7jqa;|PPVm=0=k<0(u
zrMqs)q08}PxAWW<kr@0awUexGl?lZe1v~DwS#sEUiH$ElU$?$ipU`-#TI0A*p&DIn
z@_gr$h-PU1A|&J1=6ue<x!a2vUWFc#AEc#jGs}d{Rq=7A3o*dVuTIn5ft$$mN8&ji
z`%TfdmaOm}^gPDlzQeIrzQ{XTh$7`Ik8;9Q9A-;z8mAptnJ%+tmMuZ{#RIv$?<Md|
z0VlN-X8JITd-i||fIxA`PLg|@nge93xFwu_c*bA;x3t-M>yBO-UIb5TBWq<;uNm;T
z-Lv}xr)w|>|M{g7;jILq=(E0w_@{TBo$Jl~Q(N(g7IvZ$=O_9L3szWbXh%rnlUx}t
z5P*|STx;PkZ}LWJN_E-^RgHO;ph)`2RnJiCM#ZUd;O^vWp63Y5HW$d-KxvYPn`mh6
z#GP7pqHwG*kXVs~Pw~l|jMF?)LWyz>S<Vzk_ek>_u%@}a2W-FWPD}s?U10*9JFdp7
z>r>(wNL2dYIxc`$!OJUe|C@2J&mUtv%2jJ+efGwF=OggbTfe%VmV73l`a2$gR~<<6
z4!$!j!t}o2;5)e>C|t`yhsx;(-~Cw*zE41ZK<KZnH|IkC*FNk%l|HQX)wCz&#0K8a
zbJMyvvZ|)hi5-Q5f^zM#Q#{@s&r44o_0`%GoKAtTAs6JTRnPOZ{?^B*OTa}d|1}ne
zs27K*<ss^^*;r}Ju^N8QqrX#GU2`?V8#u4&aakdZ0ef}Ny-n>c>kR1ZX9Uy(0aALQ
zZ7R>0NrOk*2u{0WA5egC9Tm5FKj%>GR5aDKC{SO*y;j!OGPu`-Go9)VtddPrb{$hP
zCX~5h1zWp&b6t(u0%<?=V=ao$)<1TfMH#<`dZ=Y=u2s`!j%jk=KX9&Mx_nq&PumOb
z#0~1}jcPKELRRR*G2bV~Ft};If3F=S{r=sV{Qhl>@}BMYj~k*>{r+)#bT+^L!FTfe
zALxGnpN-qW%zpp9+5P_aHlx<wEPns*9**Dt)!qI6KV|s+5C2tu|EFKs?>~jT@9Xz3
zx-+-m|L1(a|IcHL^hJJYJ;K^h^ZVb^JpD6H0br3EEHWtFnD#Wk|BD>I|AY3$($Yog
zqV$IQ{o^qJ7A~G^AP0a8z~N2%fI-@7t4@u3xsu$C!sz>V@cSR!-S7W0;rAbuT;1;<
z#`D;n)$f0p^!p#Ge*Z#}85$B}!))*W;Uw?>V6yjrFwy&ecxUhb47j@Yznkm*?<ojY
zbfvWSKW;J8oWe&%L~`5irYmfLzR~hE@BdHt%KQJ*RPX=cH}?J?a_|4sZ|eO&yhq;u
z!*A>TKU5gT`9JLaube*kI^O^9=JozRpW^-hChh%ie<SaIAHDyBOz(eR_x=|)GT<I*
z?|=WU-v0r2MAN<huN2;NHKX^xdMNJ99F(@wj{bwvSt7A(m|e~LAG3tn-v7=w^#1S8
z@BQz5CGY>Ug!ez<&dI^SB=7$%9@%sz@Be=3Qq^Y$>g!}Dcqifge~DG<-v7}&-v5`S
zo+zMt|7Q;N*YN)DBchNxL*4rylO_q4jH2)2{qOu(-v5s9{(ob>%k%z!_d|I9U(fFS
z@BQ1n|NU?1{hxB`k3C@n<_RmKb0)D9oRHlr$NS$+c>nu~_rII({m%#2O?dyu$uoHW
zyD5)+zvNEv{&zE+>9NEt-v86<`Uc+rvov_B_x~52`^Y)NAtz^$@BJU7y#L*HAiV$G
zsowu?!u#LVz5iX!`ychV*}VVVDc=8THK+jmi@pDc_uBja8n<_b_uc#d`XBNBfAclG
z{}Hz+magbGWX!OOl-#ub`d<7z{O$DJ_O<F)+D6WHf=O-`OuL1L+*<T5F5-r!-90kn
zhVlaq>c+c*%O4>2XNepIzQ8L>a}+@LRpIB9B2PEVnQ<a<#*S7=BK=O$d6~x-5Dja^
zord<Gh-^xuirdQbxaUd^`EX8i(6wGu88Xu8*I~$v{*w%OhT|D319_NdG}Io-lNw`l
zwYruLr#o>Wf1qwh!8dU`@@H{7>U>{^BmcWP9Az#)6C7iHI39=nihF7Q5U%K*@9O|7
z>kWSd2^sfoS=Ad4MNZ~|aqq_zkX8S+d5P!r9~NGFKbY96`{B)YwDt4>i%qAxz@+<L
zeTUP3zjrcZ-UDxJe!9%~umvA3UuAr_!4EeXA1*v0KM%E2F($@)HM{uhjP38-v~O`A
zwKX*RjvWFYXbs222{UIByJ{XVvDapgFk)Hx#AV%(vny}z&dIws#7m=n@8C3af=dT!
z<E))b%qa^?*%?|lVfK*QnDQ>%RQsNYTWcPeTV~(9G(WXVdq8iO?m2V5y&W4Bkd1?_
zbG%Vpn8kp&K5Z6@txx84d(V8=?wW7fXXaJ=#{AqaT~|b}%tw#j$rpYr`O*?5UcgM(
zWfalucX(|#-9NwUh7oR8=H+9X%N(p>er*5Wd3+1f-r=ifMc_kf+EL(kA?q(i!`y8b
zKYaM`{9ym+!`8cJhX;Gl;I(M(x2+ZP2t+lzXdbqU;pKVR^?HEVav77Jwu^YHJv^7)
z8hk98+i}VubcS8O?6CF}&1ZR^%IH~18?_&J7GQj5?&qTUp1->=`HSWbw8Qrz`^pLZ
zz9VXU-7eCecG3L1eO!Ebw6|L{i!YyT?ZBVIqd#|_;ot2yuU;P&Ps~@^#VFEeQeJG-
zmjV&qY*aGL|F(;Cc+my;&jA4!b}%TKFWbleHJ_iviqTs&a4kFh`5DEg+jA$m|DwxV
zC?J89^xqRygOT$7XumC$IwcI8Z2s50J+oWI(1(SgXr9@je1-ujvq$A~fExnm!=4?m
z4B|yeKC?kc>bd6^5zE3JWzv})p)08Cv9I(b63*;ytJoa^Pxl=5S-dF8XZC5UcpBJV
zH)MJEbDVf)e{2;$x>VW6E`P+F_@KWk6=3q%Faa;-^CVKHU?rRhE#VZrgt>@;W?g`S
z`5!iJ2YlS9`WEDcF7s;e4eBD0_}ruY7Y`qy3f@<IgJv^q;mc{!gwEsBM}~m|#6S#Q
zhaajHgh~w|;qL$%`X_7XmL#y#mNHOmn3ch01IEXP(T~Irqd5hoj7H@sFnSXBqSkM*
z@e32#!Ze&jMWGI93wrW9>q(#YL?bssoKB>K*qG7~q1sr}i0A}zCTK=b6^*At0XTHj
zuRiuGkuyw#3xi~xVJ`uYjZ`1{_oDsFnOzD;!KgQiM%~fr=;J61M`17ud!sNiHjn=*
z|5Z5o#r&;JFzst62+I-eT>jer<vH-m!sZs^mW9pIadV|`^0QGo#1@X;uvU$Bu_dD;
zsC~4<P&Il=NE|&69A^ZKY;=fBZ}giBHCBH9#Wfv=A^wshe!W`dm}#&l=p@@m<S%uW
z3_Z2j6Gz%5B2AQzi-&QMFfPOJa)}{2o%XS1*37!uFq`IzxoWPN>yYil^qh7?k|J>P
z(y?WkR?W2PrqwX5rU@&VwQ5>xrnPR?swal&102TPVF<K!M_qN~q7?yJLX;Skw7wmF
zgk>dg+P5#>9K3xkSz-A+@Q1Kc9KPFn{o&yC*7mETKY=M-*@Ln_usd#a4J+51S9@D;
zAbAkDAXh=k;j`_7{T)gR9jLvFsbkZ1NM-~XcSAM0{Rfr}qtdqrCD%bAf$f#Kp!t}3
zw&yw7*e*F>;Y8r<rHQ!=^SD_1j98&xA@;a;j;~0pHTr$(AlE9Mk_tj3+;w<zSv>o&
z@X=b)a|h*9Ke`al7k=R0;8NZbDVJ!#>d1HegP!=VM;=vJKcnsrz>KIujokSgKDh8}
z0Mcr?=bT02IpC}vUI-efCLk)6t+i_WQd?DC)|KbeYed3@{Sixs1J^4HF!aK`zW6Kt
ziR{kDvh`U$*5o7n9rlo8SBPBjL8TCU=Tt$T1UZ}-Vt^utMl!>bu2>X#92lq~n&4z9
zFTd1PIW9+K%#PE(t|0T^tYe!jJmm5VO5nRZ>GRXj39b(vyiU>&jN9X5F-iJv?>e4Y
z?EN)+Ju!K%P8h~n;3fH;L*e0CB$yrkF7t)ab<a_<(R(Ua;0$_phsmB|{wrzQlq7T8
z!^js!$|Q0YG3gCUIfMi~D@-x$56`yM?QW-_*_L%JzT;!ue#Z_v7YX^8<{*7|P3g}>
zvMlB^&8OVwnh=)YX?rqB=B8Xu*&cv~Zg+4}vXm{6Aaj0n9N<?ldC;~5OWQD@`Haa2
zJoS(z#=x0oSXQ(vtbnDyRubbrU-(z$z6&z8cTPN)`U{DBEbSE~on)QHk?xsjRje6!
z0P`4@0W_^zCuWf0Sz8o-MX(&foCWO=mBC^Za7UZb2+cO>3KH~PDl&WbadFvME}n1)
zt=QKa#Qv=)3f$8nhDZX49&%f8(^eoO+o1y6p(FC_{s}sy28)SGw~8#Q(0nV_OXPfM
z9hpfoZXKFBv7(JOrc3z-REW=6WQHLwlEj30b)snrEi6qOlsQEJ2sSy&Xf)pFI2Dyi
z5QZwUkL|=~wulX!c2ElN%xUN#2QxMXu-0iEAB{?omh4FTk;NeN@KCR|yaJ?blFPP{
z_Z$=SJ>592`Q75tG3VGhX-DR%lMPvzy8#&UfY#JU`JKR^!f51~{Gl;Ar=8d`2V16~
z*!l7X#?UaTSH^nM?lEWAQxrd#^~q`Pn|nz7?v2v|Y3*~XYF@)XwhY4qN(S$dZt&qx
zjCex@yH2}UwQBW7b7ggH-9GIAGR`mDzd!c+o<H~$gwgQw>htx@*3<2sXU|`}eD&*Z
zyL<ZwuYZ4Yc=Yy<ckloFud>B?=9J>S8>bBdWYjJeH=J_0@T9t7M9b~2bG%afdC!h6
zDkv!X{gN@NO0%7E*5$_0Hx!RSKy8;CI)}_ngHN6SP_JADz)Aa`0_eig9Oh}_qcLa`
zYlvUzaDv8pxO9sb0Tzu)IOw@isaSx=)b6SRUpujQ;ABb|Mujt)(l1NDoSVfZyFb_{
zDyc<E{RG0Wmi!YX|4)5gOMOhKJw59aN<7EJxH(%YCbSJ`W|<3|?y%!%r~H&HuI0D~
zo>^=mB1DG(@fE-tjHOw`8Vx$U9-kA{M*t}lxc44=f;FS^nZ16-=WF(Sjn9mBSps{;
zR3c>Y@F#KoOQ-!)3!SIULhHg0qr&Z9UZH?ywlW&Mm|oc`Fuke(N>jmd`oCC(BB^;o
z%Udasc30fc3kwT@DBj2|&eg&s0A^DV#p}7nNt;X-CL4q(Yvq<j9W+@~SVgAyn=7vX
zW<Z(0NdRQ9n;m&%-pd3rI|?TNnH7x_K+K5DObFbnG`$PV0)WNGe|dj-AoR98KPnM@
z0w2+=z-B>yM!HRYW_0X>igecVuUdsmH*{eQqL!WdpUW_TVD)d|^`a5V<B%q*&4k2H
zcmW_gC{fpVido=UPkVmnqd^s1I1J&?%Z>bI2;H-6!}tJl%hifiYf_PMsudu7fIb(p
z#w1HZ!3o83OHC*f_Or`C8>_2Uqqf#utxjrc?>x7BZBkQv`Nbw<Ccj{PGE$|^&H(i7
z;2f1}Hh^-lDHr=@0=nx?pN;gD+l?+-1r+%v*FXTZDzMJ4R71~Yka=DSv*(s6$t=_a
zI6RG1n1ao-t88#*R|1?x01P=}q!|z=W#;@j^`pq|L)Fv@)_3;I`Yd}`C=C42rE?Pn
z`xH1R2o#jehoq`>BVE5R)R={eZkkNYVs*|=suYU~TIx6mIit^0Kqt9DTvg!oKpnW8
zP}M{(Ax9{l{nH1ceC3?tCWkaDaz$HIs@5(3o1Qm03^B^tP&cdpUp#K&CDoJ`tEq=)
zRm+geEZ}b=yDgJ4f1gfrTH^$6cRr%=)$2lf&kvM&!}FDsS<J%!oSoI0b=%;}652G&
zf!%e7VODYVyNQD?%EikW&%;);LLu1_Zr7xW&sb@q4nd-+I+d?bqroTa=W>!Yi2U-K
zS!jy(^?}*t<`>_Pr^piVdU@e?yN<`Ejos~1A5%d17nAcf_#+`D`FOy3QZ?c!7gy%=
zKr9a3Fs4*l4&G#`46+Sjf;y#C!zh_G%gCkTnak!AHMEZPbP7SM`I5xU7__=h36?FJ
z#u6kRrr;LwCwcmGobhJd1!cKK^D)M{G857gS#$6fOAyo0mRR@kHHlJ*wjTnC*n`<{
z$aAI^3xA-}UH;6QOmX)OJzry1B5GpNnwxa)$iKcno@SsSC7Z;O^_d}tDXM6{i)A5}
zqn6H5({t3*IqG_jMmk4B&(TchXzDpu(m7W29INRZt9p*LbdEJW$9g))x}L+TW}vK^
z#95fiQ?0B>sZ$dfgzlN8mDXwrEMx*+&4F88tF!-Bb1Sft6$rgmt6(j+2Cm9lYq>R4
zoAoB<T2E9Y6kHXJl{^epn>p}FolfGYmjO8saKl=`|JG{x6{K)f%c!B21HT^Y8d;#%
zl8qOtV~#Q-^p#4oO+((Ko*PDdH<bbeqEoS>sEJ9f88lp>GuL9Nj|+t5Sj`;EYMvB?
zww$Sl#RKfBJQw=iDdp(Zg`W#$E*j6HMb4zIYvbX17f#@643NqDLhvBjKPmI8$sqVU
zjx$-^NT?Y!zqJxHJm~_IY!=AospU_0Q%yE$o+rjFomZ9cNx<iFzLm5>B&<0g*V}+N
zxw_0{-O+(60t$y3ukG_#bmF0N>_}J1ZO`q~_Fx$u&07VYNm~~u<w?WoI=am=@dcU{
z8ad!+E}BuR8#o;{4YG=huO>GL=eFQ3U@}@W4D5U;{3EEJ`IwjwK)MC&$OAr+a+e7w
zkq52H80{i*@>=y3fTmj-xqalDV*e=<D9d9O96NN%K=uAG%4_2nfKxaedUH*mD3opL
zREcvfCd*>7e80)k8J@Zw;M6y+6O>^2TEi7#t%1KAHMFdKjVUx!C9$Yxcc)J)%rtFM
z$vlfGwU|=>*pxytM@nD$MzbjeUlZhJn@uw3EF#@vUM=R;zj|JwlhX7B3NlSyphTX<
zL|ROw2d5y>36ZJugmO)rC~>C6Oj*p7?>AG>%4r8*W0J&>;`uRfz3I~fGEJQwBF|!S
ze8J?Xed*+=Ehfj;ogCsMq2l_TNgO;|!ZIE@rUHr*zWHqX5$S%hD9lN%VdM<L(%M(i
zIaF9gy#KH7bX~hp!o#2FufPs)bjy8T&^o>wjFN?tZ>kn)Gq$3c2|Iup>n~=;JV7B#
znKL=lXTma5w)&xll#KO6$uo&$Cql}|H3RWkxd3ysYQ7<^+Kp<mc@wf^L6KdU2q>9r
zOjPp!1i+8Z^;rOXDHNs|HbUrfx?cVNlEanqjj@cZsxxwo@mHfc9b&vaiX_K<ZLGAL
z&Ll^joT9wz|H3Y3kG8V=G)uqHh!OiG|5>U|M?_8$!i+UToyuN0wzVAMg_o?G<<Hnr
z%P<R*GNFuFSvTfv_qVK;`d+_7-~S%=2XPw^e7X%vo@>@ltqIBO!uh$(yo%?>%lB#$
z;jDQFob_z4tBzZ>nbATe6C1bYm(t7Etd{kC^$znhSz+MdL)Vm!Q_~0h&M>LfD~*4G
zt9*A>mR?g9jCH|S7mRhmSQm`-iy3RC<Qi{CE40gFfT?FXA)5#dMvfx+Ec>fK%+;wB
z@Tg^|s7%)(3uILE)zp%#US?{n`N{@0QED94{Mt$$fIKyAfyFyuF?;^V-RH@?pGDWG
zcjGE4upBN)D&M6<T!T`HH(5Dt?;IP8k>a|}`K11S$NDpw!U9b>Xv(B2WwUk$bd}0h
z6X8zlmX?p1RAvA^BkUyTHQ+0?S>OX!W^DYLUV~M`D%NJ{!fZ99Dp;AN`L)_?%~$df
z^x7;VJ0tKU?0Rh`#Lw7rD+zrTyvztZ3A>S8kMe7%&Qw8Fg`eU}i;1?FXp4#VZ6;dw
z$|l_`zERCn)hk}8zA_tdHD4wN`SCl1`-(EKa8CFaS$sWR%Y;nQ1t1P-JgovQBu%Ly
z&Xug9wmP*6$TC9}aW2i*R0$8ATMyGN%9ad<l2J<{k6wp3MLVSi%amtIb8C=!^cpbW
zwVBzgc^grlr4{9LGi3bgX~QLjX<mYh(|G1LKj6TOWn&i?41hf?MpN=|bKmWDd6+hF
z`nEPXd=o$ATB{^ar1PlUrur(P5`3$uScSq(nXX$=w0%}HPd5p0jHiqUaJ=2Dp~)Cl
z83(y@Vbl^ZYC4P*#(0n-R%mJjBi{a??0dayfn@fUJm#$-PV`{#SsP{XE{`JX!%-IB
zGeZ=0U~(Z@bfQv~xwXrn8&?-D5NSBDJ9Mc1DzKSLx_(Bwn(R>d%<l|Cik?fM4(Zj<
zyP2Kmhwi){w~Rb!*j)wu0JhufsRymuH*v(hGYkTZLyd2&{<P^!6p@B6D{n4P?ebQH
z%=+cmd0G$`N*dpCXQXnALmDUFq=rPlzX*?bXNB5qb3&F(e4qAg;?{yubQNa7X9SPi
zdIv7@Qyhx<6NX~Gq%h1!X4F13y>?FtEN%Munhbbu25ndf@E*rU6wckJ3l<5COSfpe
zan7H89+ZlI{Z&zKO!(`sa?vo0=kUu;<SUnRGInwSMl8oh&<<ooW7jNJ)cC^yCJuLO
z!+SaRYey~W$9Jm+6gv3a!5b+h+O838Jr@3)MR{LZdUTFq?jI#CK!mi<ae#a6`mhqa
zIsv*6RYEPKG=>8ynnety@e5vaV3<+G^*krQtGC*Ya@QTZ)vVIFaC_Z-zw3l}_Z{9N
z7qmSd|GI2#1W)i+xh%)%IKYcGOKv5y&-XzIV8N>+|LtJl1lx89-P<^pS9|Tg+W)P1
zBJVV_4FE@12)o9ZH^B8mkSd-!&@!hK(KV<gq%Ffdr)yIQiSL~DZQuRu4>RJK-*!PZ
zxP{KPJ~<|XhOzUn9lSpI!uLOh8D&nXzMX?Tj?ryIFRlPeRvfCa$#TBJ>&#Lgv4%HJ
z`<kxbc;g)Jo{UB%`rE!88zwzfXsAN*fxjx>sfqG4y{V-y+`dv6-`d9~EGqt$)23we
zGlpq5KkAgW>%<o%I5=D;Uess{TEX#_*W-Dcx8s%vL+>zx0KROx@#kRk_@otx%OKMi
zO>R;k@>cP2JjKkS62LnnkolK|2mh&E{7FK`%8$Jh!~CgO_=yJx=i$P~Fdxn0lei@=
zUA4077?r<$*DDo~Sv>wF{vJ{8IJEe_BW~hlGZJrvW52ORPE71>lvZTo{TMhY0G0UI
z;`zp7yeFXq<5NmqFbMC5oxtz)Hh=lwo^N-Z?&yCzzqH~P7vBwb-{rds-Z^@Gh@!k<
zj7I6(2TMhu>1`IRd6ys*O^MI~@*afI2hn6|F~>lPvVgequBSnGW4cb7(c_V$-06W>
zgV{_37?`eU14Gs?B{#!%hjSWp(3baa_?s$_^nJ1b6>t1iL+<0nrBoe#00x45q!lr4
z7t?qtfbQ6B=eToRJvlL2@Lt9B1XhB_;YP5$Y}oAqFnj0NZFhjtoj|i4aR+L_9>;U*
zP?=jQUe5IE1n@plN8T;{*x%sjplN0Y+rW0WfSjRXToZ#Q?PjyKzOu9wJZ?8v>el+w
z5)=}wH(dtu)Szdjl}6L5ExE>K#I7<fm8@#5z7!abA6r#pnZ3Ej@=CK=Ux9A(Y=L2V
zz}d$RdQ;1^vAp4+6!+c2$<8~niMP1OTVqQWK*V(;o-<E#uK~!L<Ck>fwsOD1qep%P
zXAsoI9&lEjwApiuZe#Gx2&Ovljkw}%N4<Nxl)N7PNo{FKQdxW%d`-O>zJ@o$8<p^*
zJ9vqlSTe~+boDKAMd)5+Y{b_rDR-(mjD6#*d<{|<$Typi#yCFSEy8a>QPYU^0nxUS
zg`q1{lVQ^BZEd;>2YN`ieMW3qeCC)R9P_<n?l^4;)O^ieaH%l=2A<O?J#*M)aC|W6
zqU*5qC*DwoH@yLv=c#Yc@!K<)rLP<&7yOriJg46;>Gxau{RjR24^{L*uZTwd4^hnr
zr5gT)D)|6(Cdcqkbqw*YAaOAU%5_28#~XxPAOv<vu_gF;xhQEhV4@}6CFH`&>9t++
z|7=GJA)aBd`^a6w;qQ+5!ci|CWio9Bw>xr5JC3Q5E;2YVU+|tF$l~EeGccrrIyV4s
zD#7#Rq!b<3VI_f;3m;B^37HX4pRu%re<oZ3QuK!XQzuZDUtqu)7s3D%0k}3%p&H1$
zq1+{c<C)buoQrL5)+VJTf=NxvXvH6ytzc{cE0>vBv-~NrO$55Z7%^RP=z4`6pb0K_
zKX;<e#o;9iL@;2l)iHJAdOajH5Qg!xDinNWD+nT94>cM^Kwm+dCa7Vi(ct3%(|y<>
zQil)}f>=;+QCvxlC@VMgAX^uUCI&GFj)N3Ol>rYkMQL~*8yhfTJ=PGMwVs5Hv)hkK
zJ<dG%^;LKYC|*z0>WS-|_y?qCIaPmi)CIcqUq`Sr7>1ZB|ElNuBRiK9DHH7_&%?V(
z+$R>TaIJ|8Mp1mR(JN>CyFPPS?`H2DUadsy;P1frUZ5^Rd?-@+gD&)?8)pU}s<n<m
z>Wfk3N3pz+UYD%Qb;(lKC5x>~ti3?DQmTnI{|kbr-~Iz;24D>c_CM@tG@=I|i5G9C
zFUSRAleJUw%h3qfB%zgrlL#64`wT`d*NgW_M$T7@_bMZI<1U+7i}CE8#>IFSmd4>A
zy&MPF*od_?RuD8p1g;I@!+)v$5j1~>%+K*QQv>Hdj;h`M??wq%kxp+26Q>j)Ht?1p
zyp<(WIu0Vp5*J_>IKs>ZNQS9{dOjW0^K4Mh8Ht8%CoNkk!qA_N-p`06&K=~Kn}EN+
zonu>p9~qm!LjvA@4N6TrGGSJ*%f}+4^&g&>t)>yG^qVCulaG3om}NFJwdHL(QjBYZ
z00+aDVI6{n2H7fLO*}nEWvhY{icL!xjz>Nw4fySIF<92q4&8>1EB_|4l=v&M#ITLb
zh?g~$j~g8cu*8PjP(Fi}A|6Mh5XVWp#$6Tw@GFNemI+6G+Chc`)9n#GgsJri7841O
zttsPpku*KvbYj(1sYkh4nTSaJa9SiX2^FZ2WG0J?YnW5zyXo?fWQMX!Hgxd0>=D|s
z(tT1(<IS64j9C~D@l{ENW+*R+NW^0($A~AmDr{T_=;BCRi9_OKw#K$KCHRp(M_?*E
zDj|~$BfR_&R$!33ql>`5qWj{HU{!t=1bDIJw(WU-gn@2*1-n2OxD{;pU#h1tW~J!D
z4N-l@zwGWm+Fd}i&X_Yq)0a2NwL#`+AKwBaZ52WGFPbERtG1>ydEp&Fj@n6P3IMR3
zTR~u7;~eqZ)eZk~wBdu6=%M5h^HiT*=Lb|S_yx7{1BPMUiJOX|t9IX_n<vky9Ypzy
z>p01DuIIp$VQ!<Lj~+KTcY-MouNxj|I3CaTf}0n{CPNOe0Vm2pPZpX*nPk6G#T6bI
zNdk)`^@-=r+iEKsx1x;<wbnBd29hWiAtPLoeL>=GJJx1lL18aur){Hf=^O`WKEyv{
z{}Z;6C)K5;PB!w>5@$pzMS$3B+jIpby}9tl<l^y(30St#1`xoc$6_Gznm(n0I+Jr{
zWn>m*{-Sw%6}S<*tkNREvjoj0n@31%@qm8!BF*44h!pAIG-8;K?a?Wk_7$4;p42wI
za;;TG9k8|$Jod<3;~xj*no8Y)kkLzFL^2Rw=9oquEEZ@JwFiS9z{b@b@TFStapjL?
z%weS4b|z21C)Q?Ewy>#w+ft`t*-A{rsg2Z{=o#AGk9(2SRb!x_u|#cZM?AbtRc1yq
znbWkS0ye-#Y|?MFI#}tMs1;Y)B|Pv2HeQ31i`Is)IZIOaltmC3wSFHjt^%NH0{f24
zeW!F5sgv1cUm!g;aCpN0aTXEc?Z~_VigS}T`UG~A`II4fR#nNfijt>5(C5t(P(V@H
z2q5Dq3_x+9-NmbYa>bj`f?3peLzH81Hk6771AfB45ICQPF7P#2Kz0uH3NV4`j=zr}
zT~%NuF|TY`MN?hMSOI446yCy|xO?}F??)St(8SkEUds!En@Yn?8MBvlS#Q<U3@Hau
z={8+c3lww{@kxCnQ<jND^wHS__I~8{9UteLSv6XpxiaR^B5(mi?D<;&P(?^a^Q`RF
zSyU^7fVl0@O}C&0nz(^<6PW`$2%Xj~nHUp$aX2H8<^|1?{sieopBNkooRBp~GSxLk
zDIiL%F-Iy@B~7~BolR^vWQ+!@tI<ScBp~!l)CwKYour745?;~Rq%>wWs~atR16n}E
z6bM5w1F6+&jpLJZJjNcUZ9T*RWM%n!6>19Dr#=pR=>=#oe3^7fMVI&AnzxF^hnG$#
zTjy)cL~E*CYJC-t@k?GGgkhezlU`e(RS=joFtqj8b3yJ7u3Kl33H+*ymt@DHMynf{
zk^eI4_gcHo*gS~RHpaA4JnJkrGNv$a1!)y<Hs7_Jjgq?jO7<ylH?F1>5TGca+zc*o
zf%{bb3h}fO%)+kI(rrOok+xZrEkrnG(LM#-+c0CyTfCeajikAGF93HuU-}YjXd?%e
zyE{c2pd>&}s090xt^|lAfA78PUdGmDZF{|fO*SLBhdLgUbQE7y9I0EfNLC^7<G$@O
zTQ|CPpuI*=v8}G69o)th9)2cj{NZ)~)bE)C{NP5w$$D*vV7%&@ry>!ahw$uthO*`!
zJQ3qX>CNoM)|9=ar9Jbkjh5A+*WL7i1>CgHD(w1+3wYwEeh+Yw|40na+-e_Z`FPly
zGZ<HFqg5<UGAfsGK^n6Avz<`#7aGw?w&)@=|37*}HfUa(gd_F~kj?blw_>1LAiBmo
z<1Mbk43*t-H0GPP#jYKpYYyGo-f~U$jw4iT*(TM|+A;$lBxAL31yevfb^9O@eD3$W
zum#i|4O+kaa&>i8xvE$E;QW_bwOaj!goaDkxq9k<ZWXJAYC+=iM%z=rFwkCk***ZB
z`~T8-LZ*Lq1#JJ8`HjUxa`Vf@&(_M%mFh~ZX%?M6tc57-bb*ccl{OzgJ!#|i_<+&{
zqS%6b8`<ZrB2iaS#oMjhZD}xycHrV|SEo*|=X6i6iy-Z?a<Mzj>1c%4y5ov0M`LgT
z6Q}F+oX9Dt02xIy3G<UsHT!IAIJ<UZc5RzDv4E0sO0;~F&5RbzQ0XVzG1(kyg(l;U
zV(c$LND&MZ+Hx*t#?q3<rw9sp=eT(eykU#;qCKdgXnukfB9F8{H*IB=#KmK3N%OjW
z9y@5fgO~WbU`U^2hW54jNy*TDXNH^Vgb{p*^BPa(HNNf%qWO*3G3V)k&<E30o$--2
z&2#6!XS8hI<YPuoMEPoe*$p~H>5fd792HeE;RUHJ#f%B;GRgp|?4Uv|%K76H_$hrd
zT3P6j-S&u?5@&W|&YVO9Q%N-5jIvtaDRm4<EHFno{jhq%_ALlmjJy8gao+k%&Ae_^
znjq>isO>EfH&{n(&VFPS{JyuMGOxqR=jBf2^Dov4&T55Igq3UfaLqpyX-S-jc{fH?
z#1IuPVVBwx#_t6uRI#N3amAMkS6i=axkz>7Y7}a#k>UdqE-i(ym<6K$9gP#)o3{k1
zWh3WesA0UfBl)0Y^B_GU3+r)yMy%ts&7txMz5%1<qM`FNZg4w`HsbE6Jyu*y_PH08
zM1kT%wGW~sBN;o0w&{W^rwiDKCBCI4#7VIz=5n~)?kp{R+$_qV2BmnO!B7vKvJX@P
zqiQPS9l=<`7ngl8;7hBcf}mTv@D||0av=eZ3YY~gM*=QoA)xuK%5ITpjS1Z<vSSfS
zIlN&FGW`sXc>3b~X4z_4hFR3%By#;Ja&fpte(XVk%Ti#acFr-=7#1(d{asTV3(z%8
zwpw~7clP#yyiSjcslyq?leR)DjH-q>VNZ>Xp(4$fdVDSqS)RT2vE0nwQy0^4V0+pm
z>?wRM!sQUCV{!>T2a4R`UE`ECLf9jt$)_mx6^RA-b9G*$9myjl5~w>YaT8LhVVITy
z--Loh3@t`lB#_3v-*k1=2T_FDeV*Cq=@Mh$R9?I}c>CH&uK)u(y0|;k!)MzE`#W22
z{xnQ-p)RV9=|!{KLZ=h7D1U{zUcY&@H?bxQYB~Y7mQz<wF;qu!?5?A>7!`|;O4F)|
zae+rgWqTKC#_!m<f%IZnx`w?T+ow}^&w->P(vl4mO>f+^rAXpFy5^yT1L+}X*(lfu
zA*V=|KVAiQv;dBXq(?5aPTN+t+Q`lotNLT+fe9`66p<Gu{W*4o8)m^T0TIhYV<WN2
z^NQ5n@WQ{^i(3|grT|sp6Nu;)hjw{>!Y_p@H@YaG%S560Q|w{>Q?X!s-2!V>LGeP3
z@RJ)Bc(*G*!757?o4#1Zt|Kmw;Oxj~%hD3`FBf%)A?9sKL;XfGD2&ak2#2cg*x@j6
zUONHuCEUzfTDpS&L4FB7(qEQg^Qv`=Nv$`L$&=u5Y<`Z~KRw?n6jv(EidFo{{HXgk
zUPS~*vGRP@J$-@E7984&G)&CQKu^eTm=j^0Iw0kcbIlAjj?G=5e=5?-um{Z4cu^tD
z(3H*LBeoY90aVxe2*}#khajF>M~XK~%Gd<#^jz`T-_&1APnkQVB61z7zA*`F#QtGv
zq9*AmaGp+pQ&KZ-e<g2~j`Q5peN{-*B%3Ahx6Q+-^)zZl8#yMqL`#oAX2gREC9ePZ
zZQKS2I7Zf{oGPg2?XUn-@b&W(=)|C?uh9u@1(jl@V8UjNkGm&88rzt)gg6AL6fl4W
zZvx{ppG_c9ZZgSIKX7@)-I2<`Mi!49Hjwe5@iu!SOUbDprl4U&`#SP!X26b;v_{sx
zkB&1qAbrB_9s0wd<A_y3;C|ch6P2VJT#Q9Xr{V)pGKJB!5-W<T8a@Ywp|Ex3&^8C&
ztZTDp$kHe2EHdy=i_#^ID~46t`QiS`%#9t7Xn5#wm5oa-#vn@n?*iRvrGX^Fa%BjT
zdlt#VJu$H<hl%o*`pVD1IIu2mx<D5~)q3G}&14b@55oGK`BAZq=eYRDjkHX!8dy5H
z$sI&62VDs-&xJQl3*QON!o7x^2w581A1F6Evl$zijcW%SU~E<+Wk-M&F5`T(l#@zS
z9JGk!2_}|qN(d4#TlUa#VVc30m-)*}ACP*AheNb8QLgHz_klPc5|vDPuZc;q+qbgk
zz8SUliHlX$?HE`SHjq^LCdY?p1J`HVk8-vKgTRNG4B21Paj5GG?gRoEZ;3GA&jXTy
zK9KxSQkEG;+hlf08R|D<!fic^j#J-HMx!_fi1xcth1NTeIH+BKFLv02Y6Y&r9Wb!Y
zok%-f^cuIHF-_SY{#&G3RN_@cu2gZE|3-W}?G3S=<QAQ(W;@Qd-Rqs&osaqgvLBJR
zqf<e<z04BCS$xdmGaI_LIV&^Uab_1YyJV0^HimXo!Z>SZ^Ifa6@rrFYztPDL-G_D}
z(R|uMx<OLRX4tse(Q<-^Z}?&egoHbWcDL)W!+44c`3R*6<r8k#v3=Rlv4hUVYpt8;
z$APP20E`|7P(FhQ6;EEhT9!j$x->k~psOoX9&BnlZ@|*h|M~Ggp|Z}>CY?cOp}9}x
zwXaJ{S;m-2Qq%_~MUk0iQoi?w<_n8z&sf1(yg_;4sHk*fpPr85)3YIQqcNQirVC8i
zFgpsewG8jg4qMhrVOzl$=dnm9+6$T8Y!?-Vtkle<ZD}cpJHT8<+18kWyYH_eF#$@U
zc`K<Cb$dnogf~2b1loub?AVcw3E}V*XDe;fDsI`&RqtP#uo~L6eH4Q%W*OgUU&W9{
zH1ee+#*L!jrt-{B`+*J)vzrfAe8M2sAxpOEE=XQa0eaC&$5k`dKih$!yaC~-p)4)A
zs;NgQTZ%PTW>*(2HA~MO;SG1}!QbB;3C_e*WpP#m{xct`O-St4A~l`4K^T#2q`wh=
zM88FtOtg$1J$rxjVgF#~nch&X3?d!swBuoXsb~UsRRqX-@EUz90;Cea2N4JQcg6b+
zxU9=PPmer)VP>UgJ@Qr67CccR;{1f@#v=^!bJI!+9>Af;lQuv6#AP7#xJ{8I+wwB<
z2>Q$}v&}8H8}AT{!`_y44b|b1w)C!8TN5c$JE}zvHda-AzG>Df32-dN1cHi!p;H7I
zM+UsWEn8qNMe=H62QN?2c?rj4pUx9X-i`JN$S}ZjSMj)IZX4<S=Lgc!mGwm7rX?>v
z!L^YqzzY9Mp0Pz37Uyr|Q7-`&XRSK#9Q1GvxX{;<XMg25LZh(Pt+-)9=~iwM`X<{;
z$Qx?Dho1VL9&l6cK*kp4J%?>R#`V#%q#hm-$3?{UBqj1)$w!t+J0;x62t3#p`;-Hf
zGk3;gGh_nt+f4KBAId~7qP|qjlpkM`)~d}|YizWL4RGZBU&J<VQajGS8QPZUu6^wU
zAu_U}iG!@|dZNopOyol7Vi~Cy|6zjGp%W=b1HYUZ3BRpJpM|Oy`{spy?^2%lX{Qfr
z%Y_zbGei0CP()Ky!yV1^i!N+H%$eo5B0I6D+fFe5&HqHLmwB2Hd3?p?6-NlwMDiAO
zZCCU6M=PVtbU}LCU>4eACBVgRW|0Eu9LFsLrRu~e8q$N-&25(!)FTHB9&O>18TWpK
zUS$itYU03kko`o#^=*eO6`)iF*N32ucOpO7LJwHLW{0%lzGvKy$@4$<v^Mgg`@k?A
z4+H+7zyh+W-yfioUla#$Vr9zrjzA<rhS2Wha6D`xBeXv-9tnEBa~<4M+xKcTDk>IY
zoV0z9uUxv#8gi?LMUJIQUm@E}PX`@EFVQu40DSYp@suo(;XMXhP_<9M0*HU^B`ty~
z5)dUZelpeMr6u&%3*n!P8&F|g)kq~I#na(AVp-((uQdIM6(;+NTL01#bQjOik;!bF
zF}wZ~u}Q8^FEX&DPCQd-R-keUJQAK$*`DWR1NMihjI>@v8G_KA&9dZh7Vl$gyVrXZ
zxdInr=H6k)lD7-OE=XkDMNLzT=`eMNWCreg){8$6*yn+Hiq+Eo|1kb~%D$eOd*UmU
z?#AEu*mv|yi^PIs-o)R}FfhrPd4WF7v0uhPoZ$ikn_QS%LY@iDe*AF@KW-s|;b^^#
zy<tA7-Z1C<MNFx!2sd<)u3JS?Qb=f0=Lydk`;DhV%@o;2km51wpbN6y56LZ37aND0
z2VX;M>`JlmAV+LG$P^p<5tEog+%<B&)_GJqH<)A-Zl0ry34S$N$<0TSWyG$qI4Rqr
z^Eq4ux{TemJ}Gh&-!a=mJ;4ytkj+K4q2kHKrL(S(lN6!oK!{3xQ%FxYpzyLIMZZN8
zA_`F}OHTVm6z>8_G4<{<&j-Dbg}Py}En3}(Cz#Bv8GaNL=F&;TlB;BQF*{2@4(gj6
zM;_Z$q``2BX^x3)IQh|!`dr{TU^;&wY-3^8wwZ2@YyXLRB&zkT{d;6OY()J_7f+n)
zM_9;dIMbU3q3Gtlcig(y;jjfd{={`ivGJ+fZY|%y<7SgZ%XYTHq4>KA?i47T$dzZp
zfEB7-vlH`3!S;aZMX~QK7m_Eh!I3%C*WlxK*iRP(2idYsNQ&R!18a|ZsDw!<llT4Q
z#4}D(Yu|w3W7rN$1G8oTFCL=m)rCJ62ve{mrsn@1oBQ3dnfAK$lxb{>soP0RS)q18
zO2DV?sVQB-$eMJb2na)(waO@~Zj))+BF$a;@%g&fULf51lKyF1PD%R6$F?Iy(e$}5
zj}5GkJB&r`EN9Lm0rf@T4+kg`nGA1%sX8BVgPjw+qY(?ZLm6UHOCc4O@6e1!0pqo1
z>?i7}sv!A-n7>Y9Z#`7aGB(V<Or{XavnEl%@~p0!e9fc=z@n+Hm{XQYgxv?y2((p_
zD{HZ4pEy3BJTbGG5zER0)+=`~#i0U&POayCF^?y^U>)b~5K_-WMOPZ&c|*lpG4^fp
z#wWB?k;B1+(WF~qzrlDicBqXe31dt`6r-)}rod=3AyJubny3iex<ibT3uCA8#~yy{
zrD=tCuV`{#)0Q*7gQO)3t0GpW_pjp7Dlj12Ro&Pj)z=(SJ>ih*B^^@zEQeIaYkbLT
zG$!LpCKD^PypNrU?tgC5VbH^K!*_KU^bkU4T#7Ll2ca<}4^InS(vSXB3SHA?Ls<;5
zIxB42oDdTrnlu40*yY!!{wW#~qYaJvSx_mWe=$2W;)mJ6h+ml<sR;nuk(?cS@y8*4
z9HwVSME13>KQ%5RW#n_^a_)tlK?bLS4EAOx1L})P1EE3#dD3Ot+?XTkiOH-EZ6M^d
zILM2z5PlT#M9511$^(VRiMIXz0J_&b#J;f&UN1UyZyeLA8syCmnVzB?2GeA_=K}WL
z;E7*j!)=G$+rI;qgu>&$BWyOBw)Y5TZYfBgqe<v$hMANBK~mEOE_QR^LZK@}LR%SA
zVFCB}I0k7!4Dj!Hste3d#h=XL5KTQGe;r#^wYgranwDkN>el*6Y_kotQHUwvnc~we
zTy2W2B0DEKS!yN+Q+_6wHgYt(yl2Gjpu&7fmO#PUCLJCtB!F!jsFeT#qCDJbUsuvJ
zfDWD*#}dAXV}*a<E>fw8v{7b3aEb=^!1<Ng1amT9(bxb^dzpFouriaV4P+7;vf0dr
z%$%fba^Ap9;nGqOPtD+lR}Y@)FB^>0$yERw`oH7i;e{Oxl=!_EAJN!+-uf@FCj9L8
z+%Ak6(8RE32N>^{I$#!$E?i(O#T_13#w<Q%0cy<RZ*G(V_@Cq9$uT~{60_@Hi8#V1
zEyuwx1Jp&b)@ngGo=09inM$4#fzwRH-HhUpff<oE{U_0~MH^Upp=HZ3p0p|SCWhy1
zH&^S8`leN_HGVDyWddU?du7VNB5t+<3`k1xAiO7SANRGWq)(ycf_6;_u8FbsswbF$
zx))#ISjdt?rxZ}^%@ziw3J*o_@0Jfb!FXIc1%amBWqX+B4Lm7%%!@Yqjj*F9;X60F
zD3L23_rwF_9khRQN_*y+VQ#e#kaqZa@~m?(Z!ta_p!+w9Mi~~BAgLG-52PWk6|%3f
zW;kZ9t&>B$mClTfzOw7xj{{8{wBrvzg5rxoX8eQE=w>v+Gc-w8kTxA}wUeG7XaO{Q
z;icv1E*YM=MMo}@Q)`3S2^0HyoPo+mv5lv8Q`;1b_xJ9!J($=Oq`)h*+~Qd=?a1KR
z{M5eW#t8K^;PLiJJ2Kxzr2}&>Wf5?NYkof}#pfY~>$)%kxUB6MmrB|J_Ttgp;;sCY
zSWYl9`<!0P<Th+<6k9DO$I!0AX2RXIW2(*!=-R0I<90Bhj`UA$+w(XPnoi1n(IXxk
z8z?a9F!`mj)OgpzR$*(l9$FgXE*Yjsu+Nw<tU&4Li&X4+1q@y6Q&Ko}JPiD|;$+36
zwCe%d4ak*R=`aGl3VAdltg`@Su{$mYsI)B<UTtzuHP6~5Lu+Pl%@xsmR;<n)9#zTq
z&^;*LTg&oF1JXcuL{mktpCW3&ALKzFMKda8ZayhFJh4MXyU_!WqKbG~`?rq1XifLl
zl>%v2v2wQSgA(Ny5beWKet~l!hy?&TGe;p<M2^dh9Dm9j0TXPW_k28<gbT{Py$=sE
z|3-M_GN<9&4m7cN9{5*9m{fQIug(4}2OFm_jX!QshVTNE!;gt9Wi1O{-GdoE!`ILH
zC%U0We$ycj2l(L{K3waCy8e|XKj~%Iu|NFCp4#GJIZ*dWZ?TarYsLKBs+!mEkMM|m
znb3s~tXQi`;Xx<qp*(&}%;z(xrAIrPlWr!+@XE=FR+i(BB9AD>ax_I~iBGonaBtU`
zXtbYd(aaRc$gJvVW>uftRAM_P*<GcL6SN@(V_8Q^>4a;c)?6{jJl4+2Q?LE(RX*#7
zMJerC91TsKIQ7_BQfuXBc+5R<n#!f0I32W8Cr&+i;<QjLR1K2mZ)xEHrHk}2l|*8V
zsG}W43bnTZF0eM}Z&Og^{!;t7Y(dd7N0*3Um38uxmh~Q66OGi7%FMjf{8V1HjY2m}
z#OKCYnzX^E&*t+Ssu`_U!A=@<Iv;6s=;1MWHZOS;3%m=kD3n<Crnv9#Db)CA_LEB>
zkgBiJmaH_6W{`6D0ncHgPj6OwyGVENpxi*KM;E&Bt!6t)U~I|QbctHy)hGAT25~or
zfhO)a-ccbAt0coHaX(oW{-EufBD&1P_AqC-dAJLP&6sl+#}(|x7Qq=haqOE=V?l$q
z%Xe0K@I)aOPeA}=Nke|*6x5072mTX`%-0xMFpZIU8Y6S_7+I9T$Rf$e?7XA%$fBkn
zosV<rjI5JpWKoil30}gOSuly2xf=VjwYScU%*;<QGwtktnA|=)RW{BB7(S-WI2qox
zmK7Xi$T!Z}k!rept%z&<S-U5xZZqCwixX*P?RgY72NdmGez}+Cm%yL`W{vL=zf8BP
zr*XtR&JjT`H$Vlvm{eJck>5axgLaXoWW3C94-ioEi+C4Z#+N>?g?P&Z#JSzp0jYp*
zJvRzl#UUtThj@G4f%g_9F#5F33`*HK)R-*CUGw4u;~BBKyUtlyOf5>-;Mb`$@z9Pf
zW$U68wTF1W7g<&Cm}wl3t3@X|&Hjmu?Z~%PFU?$9$vkq;P)En}p;tk#^gj}fTQH-F
z+&3oi>3}{F0>@MKZ_hl8@}I#x`Qm16Tr-p6p3`-0+K5&YO2rZ~aI~s3C8S&K`{ZL(
zVDE-7Ng|a2-%KAkPlv0cD{ZpSfu1d~@&AZ6Cf@Ju7R|sJfR?|F+dHiyDy8J=1f<a&
z2CZT(gtgmIcc@bF4s;inZmYOwHCHN4v(Z?stoF)Qt+Ha))+^0U*;=ctmf@*fZ&udJ
zHLFr9H!XZ^RMva78hpfG+g5EAiZtp~0Ae*P0#!8?pf`oRMirs1)?ThvnuU&4X_yGk
zY{CPSST!yDwPIDQ-DcIS<G1ZbvtpU`Y7?PYl{K@rwr&bA5@Mr@z_6uj0IXK76DX_P
zY*egX8M{FpDr{Q~tYy7Xshd_6Dqn$DXbVDkiJ$=D3Vp<8cUCKFWhk+3TB`uGwno(h
zSnS>I$~u%?uT|=Rp*lisR#t$Y0<d}w${}`4#8Y86h6v#6>#NX_^~wqr1JE^WA0PrC
zl^ZM6*-E1a&0k0SuXSowLjSs1hc`s^iV2|Bp^uf7T?q{!TUHa>(*VQ*VCXQGZ(xbK
ziGa%lxQvj?1i6f$&2@yej$H%LWdOZq5@-Pqk&MG<)|*Wv2SAF6NGT&y5FcxZ84E|J
zSs;2qNUPY0)iNT*M5L4fDbNKhhe+8~Kw<@}L<_4mKngtIIF?}?p&{5@%cOC{VKiwN
zVPKj_h!(!q%8fdHs6*>lp!F{a7-E`etFeMWn@}0Gp$5YZCD!2qkaGzsR)<L1;xt%B
zVnh<enpbxv5C8~7ViItg6KhxmMgbd2ghowOXAZS+6$!V_T3$1;fz;GLL@NO_5M&jG
zqiIqz*RbC;);<#(dV!5B5N7!7g9mCVwy;doMM43HIA}mDt5BjwG)5#qR7NB~R7SI6
z4QI)E2Z@VFfryJ}0V#mUtgtJ<Ap%xwH1|3*(GX+x6{K>U!VMe^L;&`mrrdVj!ZD^P
zS6grLDYuFv(ENi>HfpoktOCt85%<*dGNJ%`4rJf>V-1OpM#19!Mt(uvCVsIiU=X1q
zvE!uNrC9+PnjM%3G}CAz&|D)Pg;*#cQLWLG*lw%>x2hpCXf#);u`~b@BA>g6j+pBa
zX{`_gDATkjT94UdObvzY`YIsbT&>|0Uu(eQ8Zt=%^9Cg(gGZ1Tt`LklYX>%4MSj(3
zk-Q!F>g@)dM8H6uzjr>vqR?D{b^p3mtgkd+0fB@yT~3JC?g-Sj%)o>;9iq;xDZ8-&
z4+|e+bsJV=1AfZ~5(=jR=Aq^U7;B@tVQsMAgfo*bbhdn&X~`3J$rde)^Hbcbtsob#
zTeXX_1<ZK`#;uAo2#F0RQms=huflv@MdCwxq9>~g{1Cp>s>l!5%0Smp1i#=@2Pc9B
za2mJ-tRsJ2XH0VyCNu(RG6n}Ew1OXqLDzwotYcv$Eu6o|?jajc7t$KAUB<F%tHheH
zE}UcQn1)ZCCem!xTwg_|iqn~%)}TR!PSsq2xn0J_o6wCWd!lY^*H)1M)vGJCyjB57
z9aj;7m>Z2;BJ{dAzRT#bA2xdE3lq`R9`g@el@A<DJmmk4O0x&-W(9@=S`KJ2o5TT#
z_tM{s^$sRiiEosfw0<CBp<J1l16<S6gA=#O#vRI)YxTl*txoK$1{fj!i~`T9sno9H
zXKvI~C1F=3Y9__?;*zE6TSUQ=lhK)knS)tZ!y|vAgEwQa`vel#2xOnDr+~4&NQo4?
zw8Z0ZP;h(Nd5W^jN&_a<z9}9`cx?<?%hd+t)t`Ch1?t5;WW4+jpF!PLBZgDb(vk)p
zlQJssja!c{3t+(Lcq%;L(Z`7W<xyt%HG=X|MfO_KZ}aeT`oJ$FU>6hMJ+me~F}nA$
zX;=#$l3=O{3wX|+ab)mo>G+*v{uY_PMyBJLk!R)_zvgs9&yMHN4!w!CrgVt@*?rMB
za>F2mXhNrJMkZfNJoHi_{AsHSca*9V_W@3QKSE7xpnm&rRKk<Hxri&$c~@XUsW|zs
zB0A;YbwkkcJaS4(T`!=ZBP$%n#=zUe&9T-Dt;i~mj%94`<J2>|9_YCFr17P8Q63Z4
z;Fnsn>%vNOC!{wTdGYOo+>IY?o7l7yF`&SKS{K5@_{M8rL=_(H-MpYT7+&*$o~W(n
z7Coa0YK)7~y4GCW`b6tT0mEFu?BDPzUA!Y}tKQ6rZT@a-Zuj>xK7?a)=jro|51+^8
z^Vd5WAGXHkZ@oswhrO}6`)rW$;Uj$5t7m+;8k_r1w=+Im1B1T$Z^nnqvH9kDCF8?z
zY#v5u86O5?^Fx%?k2gRx-SvzQ`{*70G~+{eY@Yeo86SFM^W1SVK6GF*Iu{uq+_Bj|
z`ke70z^iUPWqddon?W<{!x?;7%R>97u^Im7L&k^Gu{m7NLc0(1*RwJ{T#UyeXjP6Q
zPBHX@s7$-3>|n@oy;e2xn8-2z<b<8#iCH|W;)PVjJ!=g$T2Ma7A^@^Pfg}%9CfHL0
zG^aupHHkI+*C{i_sKyof8kY}I-3UR51OX8wzCvxCKfSE2t$_*znq0L|Yd}@2{A&Tf
zh9JlkYN&dlt|wF$ta<IGc!KAu^ZMDja4rMiD-Q>vqu5F6DD`f26?<2!*DH;JRRtls
z!zC){A!$nV#5-rL*PuDIj_iLy=7VNqrZ9z(UC?I=)@mJ|*Pz?b_}XL?hUGZ9N@-Xx
zAgM-ObtiPyhJmvK$4+&%h^b}DK!a+Xp-bN0N~5sS=#WaViWa0g)XM%pgzl_hYajzC
z!PO4DH((6vO=#6xmHq#+u~zM1S;z*Z5I})ShdQvAkPVb&?2ZK@J<<d!5`U~TZu;vh
z1sM64jmBCgq(5q)q@v=2%0P`QHDzpU4Rq;Vc?DWiUR^;O5#Y?ia!`mFbkKYN>Ii15
zS%sPfS*kF?<r;|A1*FS5X-t)s9-5UvBOyZsQezWsP)%kP0-XiTifCs-vm(H0qP}Al
zsAfn2EvQZpXhpeP18f$kAG{0fe;PP@%D|nX|73F9AW<2%>RJ_tjbO&;QtIMEg}4SZ
z7pxWbzdle({!l@6fe#dobG5uyMI@}@-?b_X)i$RHy<<3j>nogu3VhTVJen;tRog4G
ztPDuC%qf5o&rKiltTY&Zn4t^SN)Dh<Yu!!13JrhR03G^kLdAjZv@wSFB*vTOxkC@r
zoi1m&9b&nl$TbQLYYI<dY_J0~jAUIvc3VJpTM(==M5Uea(X!;IFY7g;ci^{W<hN)q
zElX}3meIb247VVdc8@c5L|g+h*1tcipTso@^Mff<tmmRDa&nGgsxrxHRqLMc#s*qA
zXw^^%Ah|fO6{oDOI6zjwj;gpnLM9&k)hSC5sRC$hN5ZM82u`hR65|E2ur;6>V0-l*
zR#2c?5{qJjP|ISy?oF0U;>9{4mDo}!aTKA%n%X@<KYWsu<s^|r7RosilVXxk%d09G
zhhmCIVwW?5`goe#N3>6Pk_o`lr^q99n)*munGAPkhE=a^Qv&d3AV-S|08Q-)5hjac
z&kVd)YfNC)bFkH1Knb?Ghf{3r%Nk7#FRRUaXd#1vU0H)=zJ`;y-hdT-+d}H8H_`qM
zpg|5mRMugZ*Z;6U=vc+(pje0bNFYJBMU=PFv#Lm8tH35ZYd~`-bKqZVjS&-+AQ~Cw
zGc3F3pyNI;Ca3c;lU8c04VnZ%+}X?QA8gtDqn<t7VKVatpcurXCeHXZ6lj|Gx3PBF
zSbJIh1NZ}w<XRI_=@T$W_zG35ujJK$;|9cr(%l~o<fa7#U*?d@1RNM;r_5@F1o~E{
zZ-1b~3$hN(&uX)SyF%+Exix6L!cnZ_+C~$T_KfO?+g^FSSy%@Ut0d9!V#!<~!D4U<
znABtJp4Y&>-~-FP%UeNXwwF6*eb*a?si9h{S(drBTC15r6!nH#q=1PS(48jy${G%0
zqmGN-3YQ*r%H74mSX-NAqV(#`JeiBy-p%K`Loc;5uCLbCNLyHIlGwR|<7QQA9iRZ1
z6gVMP2u~{{b?nyHEnu@&53Tg;#6deag{%T{)dtUn*+T+^8^#u<HY?Ca6xR_2y_FiW
ztt!l%I#klYr3C2;cLhZ5uuKahGGY#q>ZX6I7M5Cvi3SKO;M8PexmFhK1jbNBh`3&m
z37w`rtRvV2pdYBZutFQ=ta7VNmGgaKYDHMa%2$Y{SR;0!<J17$7GbSGMWJ5CJ(4wS
z1Cx%h_hqV@wSn}F+U^SK6xaw_HQ{X)_gyS(L76J9vW8Ob5G!8ey+MdnIsI!?nNDJL
zEUdl2$bPLLni+DeHw&UG)OD)9PRk86pu=jl2<c_QKF1UA$`xc^D>ljfKw}pEp!8l)
zQ<y-1(+B=usM>t_rEgVo=E6rUk<y4n&vHrB4g&v5w^^(;_#A7lH`#2e6H8pdxyy_d
zlO&QA6uPSO30K%9+#-cJS<4j>v7EvRdoUM4mRsFzA}!Wdnv(^VFeQ9pQ-LfPhHmm1
zkbUmCXV<QGUOs0*v=cKL5MEnZH~AR~#(=6dVnCoM)~ahAs&Ad#NeXLgID2rYYS{KF
z30ny<Zw3QMy^f?_UtQ^-l+?i0uSQyXp@BP>02>~**J-v}#E@%T=Bln8QZhXjs)zVl
z=7Xf0Jxm9lXIqU%0sk>-0+nWMt&m7V9!mJTXy2FzQw>Hcoh3|0Yq80QMD&R?#!NSJ
z(iqH!dL4IP$z(+2JTJj8IgdKLHDyXE;<hrO>TE(0b=0iJY=Sl;)A{rWDg>}=e~^rq
zVLu6Vn-FEjHJMiG$pa9kjA>;)?Flvgd^#Xsh4O{nJ1d7#;D1bOj_WIHRkLV!{~m^X
zF>kQBgbQ|)tRhul)Tl1h#6RjIBo|0Bf{z7Z+}mS}l@@`fV5Cq_p}M7~Q9f$@WxH>F
z%I(3Rmm!Uy3{p2&tY)K*O(%mx?UcqCDgb4426pxba6S^-q(Gv440U~lx{TuC^kF4C
zV0AXF85;Y?8XLm%Tm*c^%U)8X4Lq>1iheWIYLkAi;O`Z5vumPTr;nbi#s07txr5#{
zJhGF2@DRCuC*(|%jN)X=g~hQtuZE7ZlQeWb!K-tx2)h;#{wh%gPRjxcXN@`M9W<g2
zdJ3%h>#H;HveZ=CMOTA5wL!rI4a#-<+<Z5c$I@xAq^7@Kty+ZRCavW($&uGi>Rg6p
zetPRyMdOKw%x`C5W=p|j-%RZ-JK&bl-5TpIX>)a;iWT1B{8d&~J>N#cZmm({M6-&k
z7j;=7yHua^c0j1dSNY1sfc)Mwmru)LHtZ^@k2a}*LNFxpQBA=FvNu{Qv*g@^SAeT!
ztzup+0rKATK^ra4R{fsUKxw2=U)@r_t-^S~vTSJuWL9W&xwhV@)RJXZn_8VKs3_qt
zP;?ozL^bf9QIE_^<M26O9`yaRtZda*S3w3`hc%rkcPqsGYjq;AZQzB-ouQ(7jf|W?
zEr*!cSVMDPomBT~XQfKIvt^+pVGYfnRuiosD@eFNfn<NK^NETo6i73qc%eQ7%gbt+
z941jWAs10HyrCai6%`>Q%k>p9PFt&3!zwwl(xbJCE9(l`X<%usp**;@j&(KbptO+(
zF;q%szA8M>YPO0Kcoj2QOuA)FL;tyYnY&$=v5Iy0O<4UnX+CFIWN;;6t4f2d5FMu1
zuSxzsX*%;2e#WiUIc6+LS4@_yug|i{NuA%#?K~(B(M8!AV$_hdDgC_XpE}|zqG8o$
z^5Y7smW?%9Gq5gTKP#vo0~0_(KuwcBtX8Z`pl%QtP(x@kY}Dgl9dsQBv_Y$BcLKc)
ztzLuN4q+m7P)|j@w}I*6`-KH`K}3xoQQ4&j`~?*OEx<=qduW#ynJcqjtYZ_`3f!u<
z&h+6LDeg7eSVXhc8g4%}iH=DbFCdwbtpTS(mDvr54$%~WN_7wEaUHw5js)01^I(~(
zY|@`v<FY{wv+yIjVWZV~6@RVMQ^z7H5FIJ8TQ#J4Yo&)6v=Bc~4{iW9*bZflZB?RH
zkG5b0#1PPco~?pviOV2N!cL8*-Z~+@K~sqAFP$~QIJs!AF)Uzp<O2#%WGNvJO`NSw
z>M79HT94WX!`Webw=|He3^O%0Cz*(hILG-&Glh&g@QWlt+84nsOu3nflNcY%Y+tiZ
z7FJ5D((W&|ABT^Iv4NT;T2ffYEE?V>8)TxdnobJz>w<`a@iyW~4Xha!${r3j9=EV)
ztk=j?(_j`8q_YssO=bSlgEkQ&w(D!C@q?tb26D^_Z8zZ4YAu9*RB;3lv#Yy}DlJ|e
zX6V9SHKG=ftq3uIk!GVq=2Mn~e9ZALvq9i^me&Z?RU`pxo$Zt3iI%>#ilQFT8<Jy<
z>_@dSodzJP1Uf_vGUwd}?m?}PQ4RIbT8FmWiI3t$z;hIMZUebDjXCY6W5bw1Y;Cu0
zK@Zp1u9HP+>$LCAchoJuxBe10_nBOWwb#hfhr7<qIJj%AAx8ial{AetX6~v{ntVc@
ze_5|E1*3o>ah+`PNaoyf0=Vm}(L`+)YDCARg5ckmHPpuHY@KURt@yV_rfSHJQ>1_f
zMVP#uRUo9j1yo$!wlx?aKyVT~coN)$y9EpG?(Qx@gKKaPPH=ax!aZo9a1CyS7Enl6
zzVF`q-uwG?_r0TQFc^$Fr#M^Yo^!4>cI}1EHGR~dqG_!){1K@%TQ_jIVP5G)C?0~0
zTj)>oOwB8$_dl-ERV3EY1h7oeS_uoOQqJRa0{3XHOW(VoMntT>CHM(h?l2YDo&B})
z#IeqS?#TlVrnP(a_Ntv+S^g}%iqDcw@d+}o@!BfJqujw4ORZqu+4%@PY6)nU-M$L6
zcWmtNRP(Cy<lq}35-8Uxbg2UQJ=b4AOY3&?I5YOvTUNV;-RYh`c30x(*iWk#qDTad
ze#zG(#uuT7ebE6v>+J@a5W4++GjQt>F5qxdF&xq8yiW|Wdj(Q9Rj)Fx@H`c3C<_CD
z&sNzVJiXKw{KK9x<0N+!iV$WDi^9e72A=0?=V~>|gjwOfV_@fR5|L9Ft5xSd84O(b
z@ar~>9*J2#<HB{Vh+UHfw6!7zRb=cy=X&{XEfK*t{M5q1hK`%-m}b6n;fkUJ1|--5
z>+9Wn4XU^1Sn+UANQHhFME8>$*IPC%I=4`Ev6c-@&ywiIxQwb2a76=FhG+F%lDnjJ
z$DFdggv402-)Xo>`io6<k@F5F5y=*pU@yXVZ(ks?Qhz-w`9@z{(=POM;C&WQfsVSm
z`aLb>dqUG;WxrEyyRj7(ic_1-YmDxzr-;f}*3nmRI=4h%w(=VOZ>`5Uf`pPnDXW9U
zzwBs-CE*PW9uB*G3W%4bh1Iqe*&o9Dw8f=JX~WFKKQ!EGKQQ{^3tv9Ic)#e={;jir
z>D~|P+2CEAdjh5IaIU^t4Vlm!tNmBSIluG9AnSlWRW0PF2W0BI+i5Y1r@+)S!E6QJ
z(J@O(2*h(hRYPZf7BUQRNMo{|C$@T++fbMi5?z9Ja87jKzu(bK$`Lx5Om*}|IcD|q
z4aVprBliM3Ayh362uyCwUaAU6pn4PfYA=Vg>?sWgh6sJ|6(Fgd(_viG8f~6YyyBcl
zyXFXpWTAul>9%)|`IVmJ+8o3M=LZaVtw5Iivr?ZJ&Ryczu4+i)d^DHiW@iu$PBptA
zKhhx8MQEKX;eT#n2D^~kz)mjy`}4$&Zf2Zwt2y?>XOT@^u|GY*<>1M;7!2f#21|Vl
z{zNIZdp-tgUo>hD=ky<lvoz3JPv##H$P}i3`CI{Xymp1F@IBx{_sD$F9H#ux$eOXs
ztPXszzEs)|#|*A8JM3^y?R$E4)tI#h;U4k6SP~^J;2=HC?J4Q9$=^osT9LSd15rL4
zIjEzhwE`o20(Ijzx`9XZiiD?iA*2cKfAbpjgnNRqT1Y21&rb1uo_(VIYO2l?n^Ne<
zM6r13a6Sew@#u`gPsAZw8oVQ#vt44YVUHmUmpNO5(C;1iL1S{gP0#<#@Iys_lVS^M
z=PqJ<-V{JTjf)m!#8eIJZ=9>9zG!XzwbYtvP;-CDd>Rmc^mEM)IMKX2oJG4Ey(4sa
zfMa-g9scEVz0Jt~sb;nROmh}%svq&=6Vvc5T<t~Pc|d^eJzVB3i^Slg=orxL#nVBi
z|5s|}_`2@rF6%9LA~dsyS<c57@_H1efiVH?#g4Q6(>k+dL%Q&j-sH`8p8F$77A9xs
zkWn&HE}Z4KYw}A=wdSDg?{l9^jJj@3(VnZ1ceRPDCT2^bN&Crt!tLPpj^2!vYN*Gh
zJ{=k^<m`o%^lfBm4Q|foU!YkmpLMf_9o8vlg%!H^JuYrQdP@owfJXL@tEAMORFbwB
z?u8ei%`&EmnqJ|rPcfMF)oNmJ-h--T?r2MHkFlS1xPj^iEcGuuj$>k>PfS=(Gx?3`
zSv$<9I+gD{Tf0}01<cL#jR5ZBp0RiHjvTa+_0Ex;l_$Q!HI*96*J!loOJ5902ZnDk
z#BHE`{`g|Yqf4Z(gQ#9pUO{r+|K3>_p_G>`iWgk((~TlbIX(~Y`g~7yh5X!Aj=m^k
ztp$Gw+FSdw0}0|pPgnpMs8xLqFtdIE=?GZ%8`@sp*1e6}Z;J|FN+ER?@H$blIRSYi
zKLaky-&a)k@-;qUN%^l+YHiu^WTQT-ebHSge<)|JnCcvcoCh~q%&v!Zz(<t&m6xkI
z;kF_GhZJt3<$VMy1?is+zEJ6uo-Bjd2LT#1A-^gO`L)K|!8u#&W0UHo*X~VVB65<_
zN4l7C`q+(S`j};WOeu((oR;^Y#{kZ5i^9Q3c~qo*(dB@-a1W?~>BB3_?%8I4s2URq
z3Z(@3_rm<W!35;3uLzU1dxSI;+`mNbk*EAzl?D=PR~+><1Xh|FU%whrAQaE@|76RN
zc=xRj-}J-hmEy*?b(SE$hkAtDrV9p@b7+a)OSD=X!t(BpAgV`h+}B%vlJ^n1CET>w
zwU;F~{?#wTk2OX6`9Vhpw-ZvQR2DszaYW!7e43B8Ra+H$>5q6<lG6mccgEwy#{PVK
zt6{?Q2*UlrMMpKYNem*wsStxaOySPuJuF7LC!V_lv}pg?(W#;^{C+^+mWkU*oJ-DG
zAL}tNIG`pDRdMs~U_#mWh)Q4zNE(wcU3G<40#t8C6S?GiWFg;pcIT4*rsHZpGkLgl
zzhwzqfp?(in9*-dAZ}xGf*;Mo4iogjLD$D!p>h@{hx$z$@JIJu$Rx$u{H6F8g30U;
zY2tc4Y-_#D^}v#|rU%1;fcDuTJn-xf6%1Ug+Q(zMG&Y(GKbc5J<z-@AQU{9V9*R5G
z&DoIfw$Fkw^r!ZH_<q1}zW^g?tt-E2NPvA=xbi@k{X)SRR`D4G9|a425>gfAvs^2&
zPT&XBEFzP{gESkj*PRu5+e<X{`DCLB*G_KBbFbhm!r*1#`u<^lEW5Bb_ZCe2DCX0t
zT6G(G4M}0L@EdyG>EkmH>8u@MfhkCIE>Qr7&%+*eOImJM4P}ychqob9t1g<)LoeAg
zMR{urhVIoP+0A1hrSUXGV*R=49}kWO2&V(qbw3EO3aq#M-Fm~TM}rh^LiLs9Fh5Nn
zUv<}*0718);b-vRNo_PDp6f&DrY2ITWRud+^GI*(o{hh!rXxK!;?dl)>O;r<Q>l(q
z_?+^$TnwDlr*0wgC1&Ar)#~|8LwmI|wHs^$hmFw@VZ!gto=v(3xCR~peZm^ZSb<Z4
zsj4wD(R;#J=jnYr8cns~Qkvk}{Wa!*)<A(=R*0pD42ELU)HjP|eCQ{vjxD%oU}X=&
zsw1B0x#p`qUbS<Q%c)0=Tkr)PzuVI4@?MEz9nrA{qx6@(^Q||St65a4tn8~<p-$L&
zp7yV^66U6`*k10%62N^9_`>HVApB6fgM`WN+#t{6(C_7s;N_6DU1Jk-mNB_q{2pcg
zXnq;*lULQ^Ico5FXPOrVZS&i>VA5>rgf#!WarWP$ALhaIyuMaf8?)E|4$rzMIFnc5
z=t*G_1F|IGUkLm;sg|Wp;&G$|fSyi8$6F&KCDZmnxiw2_a_}tv5`CFM=OucWQ!+2d
zvWFSu<m*s`Lac0GpKUVGP0!}GgL-hs3JvS$TxN+Q{p1tg`%4ruJ9D!jvftXF0k*>j
zVQufXk@cTBEcGUUgT7_fmpl7Zxh!)5JEh}1hW?~af}Im&No0A)XhSa*XXxJ7f7^Ux
zR7|4YOa@NhaF+Jo?<w&Fn#ai8C><|RAm0Y;jmPJ01%wi*fV4q)=r1vcg<b@-A_VO}
zlL`g&uJ+@x)YXm;18zuaj@EypPsr~)Fv#I$F`h5ndfnp>?ta-hgp2!GTl|$bar**u
z5HYT$aHTVf$aM&@cs!iIqh>FHVNf+V_~;UpFtF7l$_tNdS#og$hou1E;M)Gd+vuY_
zk$e!?c-5rgTi5RUyJBn!Xd-u^@z9wM7JA@o>^h!qt>yqc9e(U~!eFIf`I;nn442W^
zE)pp8t84zdfO02Rhd6h5Fb2T)gdpzr`?m>BL#Uzfucq8y4Zp3UG5p^h{Q@qGtlg*s
zPMa5Of@X0O)3xl!d-B<FhNfQ<=!??%`F#U<@6#ArGd`OmMAZoT2}hG%a&;0eIZWtW
z-i>i)B)<el9(`mXZ)9c{g};pmW*<&?(VGu)_Tw^b-r6Lb!!lYdF~qQ*)BDTTMdw~&
zIq6tJY)E(R_gI{CjrUpveJdOh&dRs5y)@j@E=AGAov3mnh6d`I_URPHyxUEM^r|Yu
zN{X`G+w@)=CCW=EGm0WXQ3&^-s({iug_l8lqfDsxVGty3K#KqUhjcFuJ!<sNHwxMu
zDdEypQbJlsx5+-bKi*U@Z%2;i2+9lpG~ALMT}%3x`RW+DUQ7Cy54+#qFlQr!*b3l#
zwP7(mdT#6t^-KXx1x|hJg%xB8U~e`(@-XRd><In3*>1eb?HMa=E^gBTHVbx;!wL-5
zJ{Ie0GjKdt+u>z4wumB)Z(fd`g=&J-E8fIb79(wy`E4$d=PVh3Q0$uTI>JQ{H`muD
zls7qr&Pcv#RQ1|4)rvjWsPo#jx97nDF9R~0I&+m5y`j)coBX5WEe~36=b9}R^mavR
zIbry$EC{3`6vWB#V*Xj={jOd<GIo=h^9Pbiyb7b#QpB@ert>+I4;zAv*S~3P{BJm~
zN?JQ|{d%{b*!fgCk53bY2mCHtOOo~B;y-TFw4<Vu4_6u7gT}`40po%|kXf!|(_FtE
zs=^7gCw!qRE<Xpw^<n8#^_$2fTyddy?s!9wgHjbPC|;{eLqJETJm>exvGy+)(9uSo
z&kXrHziTtX3kp`=)19MSuXL-H>|I@(66zC<Xb%UIw%%ey9GFA6A1)^`fSqRVPg8vQ
zwxlUL=rzAj<)3(hZ!+1cs10I~&?|Ufh7CLc`^-wYcZXL($VC>1O2j++j*mI@%{?|S
z0;BlE_wfbv?naOwK3vL;`L?JmW}L0na)Ujut<{*0JLbgt3J<PKZ+>d8zr`1V+q@P+
z=(_GYENv^l)L4H4hZ9Q%0Y7pFNy=YSq=$wZJSpErB)xim2o~Tt#==F?T&{}Muu+gd
zI%}KchbHr_^ee=@b)4=a4Cwh})1US(R4UE=3daNNl5xM(r07^<++IynTyYj=*Ib}<
z?j4Tu)`!&)VvtnJrsJo+D0N`c^cIbn0UmfQ*#M~jN0g%)0B&yHn^e;B-~ADC%xRVc
zEI=Mw+S6&;@UO=A2hNbpSVRt`o~JyB`d<Q!k6Y-d@SWHFWBL}N8&0DE&$hDvi@y4(
z+q{OH^l;eyQMEJme~ImS(OF?;(Fuyf^5bmxNe({@hM+>1rc92Z+2W-eOjm{}#*4-h
zYLD4Njco_vpDA;@q|wZO=_vWGrCPQ2ehYZlNT01u7vrkrmdgW7z7hr)$h85gqn-H!
zT|?2>?-3kenhvQw!$L=i2C&>e)i7PN{zGSbt{&IkZ3b@M0o0uxiJSMKup7&N^_6a|
zaUJ_)PFEH0G6C%&$WP$}aAbM2n6G}dFl>$^zXX82=GALlLWdf_lUrW+w(PxM5Ldt4
z31x(528w>b65wPP`my}JBK`}t**v+Ik7Pwf<TrvE_N(7@MV7aY;pAFNRUEgwpT$pW
zHYVMO8Tb|N;0M95EHE@vAf7!YbirF-|3Wb<Evv9!p@mPUj0TLqK&l(9s8>^8NGH0Z
z4(Bh(z!7#~g^IT7`9+<VrIQ!Drn!c1V+%Z)1A~87R0JDuZqoqy%ByUp)S6Fhhc4e-
z@&vteA={Se+OT=0J~y#`2lo7>H>-eVZ`gh2YKY0QE`qZ+Bl$CUG<8Mz`;nZE{uc)h
zAf@czLGSY*IUna`L8hOL<e+|Rp`XW%WfV>(F~8gCo3<2X2E(-oDzn%EuNm(X_R0^Z
zb08bJ(^*naX5gy9UQAQytJApe18v2ypMcK4?bMm^IyvDRd_S0fG1NUYR{MMCgAbrx
z61@n0mwpwn;s2j7fvm*q*Btop5S$K7g*~g*$<f7H7hbRljpBy0*>_L=;3>`!o;6LM
zckq`Y)|ipJD&y<XaSPzu1b9!)^rLWiE;My`QQ2**n8j%{T-+Reo9{&Y<HQ2yCb0%4
z)^ygt;B{P-hbjPdyl(D?^cm0e|9x*55CVu(i%un%yb0$9OYc_p8Jg07m0c@ln5Js*
zem3Q<7Hk}2c8xOAj(~(p7rTt{*7wu<9T7YXOhhz$IoJ-~f4KIncrV-H3jlygCm$J^
ztgR%LeLOjIFc_*E3r0FD4|~^faG&G?Ci`5cu8DO8D{4da2aa~J*8RK{$-Wdy_U`k!
zov1zr#oRN@IX->ot=u|DYZzr0cnk`_FEM<(uX;C0?rqJ*p?em4at*5)<7I5<eJJrM
zl)y*o{a9c^;aCJ}1GX%w<f;Pzinm|kF)PpqoWIvC?P%b>1})Cp-2n_1vri7K<oo*7
z_kGBl5r*zcSHmvuNgsUVRXrOusye?pise6NocQE)MEq97*=q~9A#-%R=!JW9H?Ca+
z5ayk+$CUeE;JA}pK55=~J<$W!)_XR;#MRAu+vHhAJcUr+<Am)i5*7#>ZePZFME|sU
zgs1h&t{yafuF=>5k3elJi<|22n*!#IJ|2_uu^7GS^y2Oo=4eDuyB7Wm<%Pp^!9yY<
zZEf-7rFtgqu4#BY1$7_x3PNRNs}Szynu3e?V?7UEjtr0lv&U+zRV<q@&`)*}2W$N$
z{m-Mhk@PQodJ7G_b}O)sMn$L8#duB~SQJQ@QX8Q~aqDR+ScQLZ>$40&4h#7c3_OEU
z|90I>_fJOm{*DRYZm{qA-;@H2Bz)BW#`Fy-RH(el>iass0`9HD52-63SeT${22{Q*
zcX=yyUHEJb0V>=6&1D0VA-T$J&3>myDUZF~cOe0lyQpN7cjz(wU6uG66Y=4j)ps?y
z>$;(RU63fEWq(U`9Hi@j%dXFch0UQ7k8s?u_2RSepEgjC>F`?pXTekDGNdbl93brt
ztnsgY$k~336-L9l9hig#W$foLlGXPl&ZV~v1s6mIEaaD|8yOIA&xut*8_RWCTrs=5
zyz6Rs`iA!QVC4pUPdfA$>R7vlE7hGT-5CD|+5T5h1Ec>?xTpVB3*J|h6K|{<?eiiy
z<9H|OHvm*oGH{^iqV2RFmv@Fn@gyz!grAMfnon(|d-lyhQt>nPfSTCDRQ#g@?X$l8
z)sDsv|Gc#oAsax|F`cHOQA;J{G}^mJwNwyzykThl#y6bu2P4Kesnd1w<!HxuG9mYG
zt6(LrZAxj0n92=oIn2Gf|LS+c?FjTW$b-Yb2A<*I?7V{?GjucHD;p8$5YA~rvwIXX
z9uWv<vBb;sl?JWw?Y;W>l{HH?*ZIMLuAVslcS7N-Rcc|IKLKMjV7(6@%=&@x9<UDu
zHvcUyu-QVMh4@5=AcyTiHU5q|VK-L%18Qe&amuq0wj8MFmGSyPWHiagv!z;w4#TtR
zZ;lszEZ~J2w*z>r`;OLbQ<VpBXva0E+`d;J%QGtW@MsB-fP;U15tLKt(2mz^?BW32
zb#8RRIaN3RJ~Wy5%-|EBaoK3isriTh1}1|a^S?6~s5LlN-#(@cFzfW`Ud{`Fj6*xy
zFE2Q^M?nH_6mvZkXODVHqEA7VWe`;oUFnYh7m2UCyfk|IKXeq<)w3Cha&NUAB#T(L
z%i3S9!@_fX(#cDLxA)=>hs@~iN|DU4F6ZPD+3oilB98&j#tq&0N`C~W->~b3y3}=8
zGu%yqrDqnF;t6bb#ysW2a$vyO#`;mA@}r+Q7R!&)%jdIY0O+p-LR*}0H?d)8O?irf
zG4$}ob18KCr%exOFHo^p;OVHXHO!<=9C~f5Yeyrn5yo`yj|F||j<5YA`_D`N7<-9z
za=G<0rZ;4SIcK_mPaw;^f6YHq27o<}pr&fX2=7hLLNut_s?yhh`O>Gdi&T3C+{#5y
z{N1O!67lgrnd0c&y8y|Z%vE1#+YIe5hfMtk+bSTU#`NO%`y)HsW?#d)<Hf65MMAQ}
zRf7xTwFggT9$B+;mg+M6do%&x=Re6oAuF?o7g}GYZh^o*nZbv&ciT^SJBEBOp55ey
zMQ{j)wKksDIGh7xU}?sGW)npQh4p7!tha`B<Oy#cSv}&{g+l`PN7p^UXHBqjsSU0i
zHd-l`q4%{HKKWt5L-E_OXG_2p=caVc1BYfKNJhBA*7c!sGR5bwgs8v|@+fo&q+?Vn
z3Y`E&@gW;h(j9J)1E{IA=Ke*C<>j`&FBl-br|k!I(Q+y@UW0J3dhc&K9JQb^d$!=f
zg)3ck^7&f9?Fz{9lYueWn)LlzhY0x20;F?;LdORG$Eg1|Q(%yyLt^N~3QL6iH#UWV
z%JTqf<t`E3`24Q6>omO37@W||>%W{deeG;(`pZkbjh;i3feWo_vhXN?iDrLL_$0LJ
zFGCABhH)5wN1A0yEqJ%Z23W6O+U0w91sUymN1@o>e~f=}fK?IT_$WJH=>vkLd;VKf
z{#}34s1MR~U%sA-%>t}8%*mQaF*JP+)<>=Qv<gd(e_LmMD(z(YmDK>b^&G3fzkkhP
z`dqBzG?^oYSD^&@i7BMbJ(r*k+TOuBv4ze~ohX|FRU31uA8cbX12l#3GZlRA7+WGS
za@BM2DzhKIi{I)J1C}1EuwSe!*}$JRokT)ky(JVY4Kz9`ygy4J<>LY~!~qS546Y{U
zH5i_SeL(Fge3K!LRNNx#SKS9Ruk5hC($f0^_3+9yY9%nqw7PCtlJI}LqNQgI(-vP=
z;>-S0eA?|#o#CdvTZ@QXm<!;w7~u9NHfuHgxpFgg+TL<=)VuYRT6jku1+AfJ#C?H+
zGQtw6$FTv{8mj}H6JmPnUJdLf?C1Rcfp}R<#N?;)tFTFJtvqY4U&0$8sBIy^F+rIE
zepel+jag3#Qi;sXsBCc&h;{JdYult+*()Q^N5{~2oG2f0*PyOwNH%H7Dc_+1b+^bK
z7hW!BNMHl_FnR@!9uM8=AeU4G{sO9S2c54Xu+0;uo;M2DXG8oPn|`qd&a?H#Vt1H`
zQXGenrr__SCOgN};&`a(*rbab5gM<f-gJ*o>?r2YSZDNQ{8n)(#YkV+v1kzd0DB!t
zr&E$yv&aQ_@92%yHnNdf1LPdg^EBRkD7`MX!gVM>%96qJVJ8>eZe^AE`nzAMWU4ik
zOo^Jg*gV}JFIQI{q?<=y!J!SdMxLPR@hE{PZ)dxtmAPh^XnoQNpd4W{1#KIa3>P8C
zlSKIjE@E>%>)1|T;2+@U)=;$88ss6`in!_4;rnK~43zAFPbIQ|A+q6ZckHu+t$3W>
z6R={kcMI`{(Zcte16J~R?lHCR`>VCEU-28S>oRf5{dt2SnA9E{H=3Ob$BOj*p8-gH
zOFhNcEO8u|KV%_C!uKc@u;I}G__4=u9iLN!%dA!9|N4jENlX#19Ng;~xyG%a1;#pL
zlsES~+K~;-s`$CGPm(UeB!syh-`N8eejlH{Mj|8@@ygH?QD7okCHhgRwY4#9+tF<K
z?74MU({QP>AS!Ohsck?fonuw#6gzr_C*OPPW+LJ8xH&hXk99^(Nx2x){Sm7upn&Bf
z3Nx2x;>c4y-Py=x7vN-}QKI%(zk^?F%l%-r8Y%&*%AznL^Xi=};*D}ICPMFCNV%;=
zH@cJu@Yn`gCHC+j7`nyl<^?{Y@=GqfHqm5!6_Q<hR`pkpB^Oe9V!2*L4G?`tX^egC
z(Hr|&76UdW%e&oAh%3GWr~GT#z?huyIjo@Hb-O>6ucp5S_)*H{%E=F;TPMZGmr~g(
zou0IykmsNx?>rlYZkG*;8`e+RCT;OfjIze)CvGW}50z!bT)_T!$O0Z3yfMwOPeoDK
zUk@{{EyM^iaUQgQuQG)-sc=T6@1@R=$2cD-D}R=JCFb6<B66=h)gas}_4nmgPd+Qy
zXU~oZ1;s);_~$iQe;HDI`TBbYAm7FU<ErmL`#LdZw!I%o@NvbW#4I<(e@*s3XJ4vF
z!mjq?pI!of)J06UJGHMKA$Z<4XHL=E?s|vdPicb<FZCy@{u=ze{MC;vYe9;NCVM%j
z`N2Qv?xX&L;d^%@@#`Yx(k?)ZfuN~Fz42lKIW-|Z-cDoQD1o2TS%@I9D;Fydc0{nk
z>~@OhzYkE`LD02M>>h9MT;<upeZ#is2VJu%H?KE|DfLK&_d?@0v5?!L{Fa@wn5FEC
z+B4Y%raW6+kGpN;Xvu?_4<0)t?~h;AG2p-KRak&%{58|>k4KH9h+htD#r%W~{wwIH
zE&jOz2B?AjWZq`};M0*`xO<edV#iaiAdJSSf9qx~5>QtIRgGY$g|M$IC~Dwkmi)5o
z^n;TB4@UVH#Z;qvG>R%QPAvSj?Ec9w3;1<I2m8|v%P4QM8gw3m=1>VL;dLM1Z7}v}
zXClC5=fqE(ndtnX8XS~2R9N%g+~%)m-SM&O)0~H0ua!Wv-&z>=AKJN-G_n|Tt$*r6
zaK6cF=}vD}oKr~v;a)-4Y|4!PfQppTV<1Rm0fnEQX{#^g|3+|fe1nWMPiCG{r%H)i
z1A~YR0IZQ5^f^o;3a-xI5ywt3TuQ&!cP0|c^cy^3Z6Qvh$S+a&1WZKw2=c=xjdxGq
z0}iG==P<(q9*mYo{g&UJ@BAlgjM^~g^U&>uDRdfNN_+J8kB_Q=4^@kdEAoe_>1ZFM
z(-pqB6=&DG8V$xMON4XZ&!soG7^IIQ6kc{5YsNQ`*y8sNyB;TedhwkEbsbxmiR8_*
z@IrsvO5_TPU8JtKk5L9g74El0EW?8Alp48YOx8p+Dm=2;3`W>QuF1yNer!4yVPJpU
zJlv5XX6;(|Wlnxcf6oZ{*1(|6vx62rEU$~8bSuNHlX05*;kAy^e!6hgq3`PtZ~Xh-
zQoX_T`1e8k^HY#D-!3{@z?N5^a>eD1;Ualkuw~1#y9P)~_*YEP^|WwB0vSV*9NHCZ
zjW8yrn9u)A+`la^P-Fn*A&1oO?%gf+9vP@wVmj6zyF&R>=1SaWKx3|AM|c|2B)5i|
zTIqscql8!={1Idpgjo?cxhs`-MU01D@rxZtAqLjs+;q+TMJ=y7J}yiniPrI$vj34k
zg#~5nzi_fVPQp0)R?XLOzd6eRWSGrKYxM-tRDTRQ&Z_$WW8%ijx(AysxW{=#t6PkT
z(0f%50d@FZ@OAXWe`)Cd7vf{BZtMN@8-^$^nVWqdgQ!~Zv{-avN3!X3jrB>iFZbGN
z?&MfVd$842SL7!7Miz<N<8B(?DF)H(oFo!e4fHd&R2C~~$(I(ZFF059_H@e|>){Ns
z)r#K0`&Z0QUV>*;1?_%3UH3|I;c&t0d#W^4-vu9KdG5Joi?UV`sHM-Nqt00Bm^L#{
zu}~98!(KmzaX%&0$ccWM3r_r&GjYYxF*5EE+km8Y{Us>-$1lI9rg;d*+P5Z+QwPzW
z-K6<@I*iY`Q;bOcFrobSb;RQSlj7hEDqhD<>*nv!m)rvuF9!=f2IVGV7V9N*XM+ay
zA)Gbl3&tJj$X#=9@JWp-9Wt}<hI*Ize(2}8W~mEI5AR77l5kR7pTE=uqFQ1|c^$z`
zx?>kfnH36Hf4$GAe7m=0;z#={ZbL|kpy(wCw?Y|Vo|h>a+Q=|ho4`9;m`IzKf@>Kg
zbv|7-6kJK9o0D(ibF)f2j-*~tMmk_cwfnp71+7QbK~^j)of!&Sp=mm<%O~3FQNL(g
z{MmIEJgExSBjwiIE?jK17w4a_h!GlIo?#B~Z|dAg>-`GUi_by)0Pvz{e;P#Si!iV3
z{y9zI?T;_e*9~uqPY?&5-J{7}a#iiXRXll#$?t1(q9f#s?aJF0wMyQe1LZ(Pb4~ed
zk`~O#)*oEUSk>3N`qD8u)(0>ZRp~+5$u-(U?1kWrK7PC+PPP>1zfL|rv4)~j2$^e=
zk(R!Z4hr%Aa---*TogWHGUb5UzS&ey)^fLRi}d!WNJfKNj@cd0KW55Nuouws4_hY{
zp<hRV{YU1bFUUrDB>$quzb%m?qK^^PUix~S;PH~d@EJ(_qD3YCl0L{yg`t-*D%m&m
zi2kS;=6arErB%xMwU_Clq3(gEihZ$t*uR^*x3Ruwt%}kYSah=*T%w8;<YjpXz2m9f
zLbKE)nGA3fv^)?a6}?b9noL=aQVf?l%`}HCtR8yN-s7fc^Crz=;YN}#dg?Yuev2^|
zJ!aLCqi^==ho%a91aLCnh^dOz{$)!4+4_HVM-z#EiGmj2((W%z{-OCleX;vqmLNC7
zX7b>@ZojPR;>UN8pO0a3N$Q`776{j@7{+n~F`Y1wWbFv7C;hmbe{_C;HBoEpNukNf
zBu6b95NZxIL#bUskqhT}JxS}lJpWWT9=SV_3U9h7^Jc6u=J#irBGCc_7>kmpP#Bxr
zYzJys-1p6mRi&DF*OiT(8mr_Uecok?SBHHUfDV%ZFeHgLL3Uvi@V?OX-{(wu3xk&3
z^gGR#9YgZgz80)Y`~o(xD1FJ!+8*<G;&nZvvdSs&eeQ&DD}#5IJ_j$m;Q&A3edgOe
z-iqk4><`_F(W>4jH>o%v@@Dwpp=f8(l)`Fqh0h~%>#{BxQaWsm&baD3AOE08D=6gL
zYo=|EZ=BZf_l6g8(}`7#@KcTF{q?8+@(BMl4a(Na)S^T%W;K>7`rF0bR2gBZcnc(L
z_*5Bx;^>2A74n3}IQum^UR5G%ZGM%?YPd7ddoI)($#yk{X(&BP<;TZ+y<Zaxb?SkA
zJ!mm_o`MsDytxe|j1nsLHPc_sHH;7mNnH}vDYB$$abs>v9YmPOrx)Aa3#pFnCC#gH
ze*P@B&4B7Wm*KjuYj&S@2w&A`L3YJuZpz>uEkG)-&}Uu#C?4!T^!i_{|4$i!1vkmF
zN`wE6_(S{{7J`#^($BL7rw$<5Ew?5Bs*}^9vAZn;T(`YoPXya)i`N2?mMtf@vpWri
z17*hSyyModASSc&n3u$`OnyPgYy{C3)u|Bb7(P?-kND(xr(8@dLl`d5Cs`bu7>V_o
zc*X=8^Qv0lj5|2t@0~ejU7%AlLneEd>QyD9(gMF12kjkPS`O6JokxAGVi&aRLTPxi
z@v3ra&sldXuU{S0RzkCb%<He0iJf_Ag(Fnw8+fkyViy*NhLoj?$xvJoH#_IvI7)&w
zxrzWsbKvp9*0te?Ff>{FIBN2)&l;VA`9l)o%u^WOR9kn82y%#q=Z1IItI?Q7j663D
zs}a+fb~<-T&Om;m;*Icvq|l^xFzmeJ(OhcAXvDg|rZEw+B%55BT;u+nFBKgW4|_eN
zzC@WFE_t#>@X)sD6D?+O@1pd!!vfGdplw0A*{*8+Cd#MwcD<EziI04Z6^bwoUy>8s
zno|VC*Xz09RHz27l<m8(?k%WqP6i`Fyx`Tlu%U?g78h;|^Hz5RO;3*E&+Z@oD@^!j
z+)&y``>j0YzeNhKpc=KvWoC@CD((i=&wCJlG*zbgB8!I)a|McNMl_U^ly^*lM5aaJ
z(?wq-!dWch%};yQy3wnDDiY`xd*>Kt1uTZJ2fU-K|1M!mdslx|D0~$i;qUb3e+7=O
z^8X1O1o6147pm9f*#~@QbL|UnO)B(jJFWK62#y1;7rf7^!fu8g+)lnmeqXx4<EnS9
z0F-FR@Fh{f{De<r)!S#T8E=<4uYI$REEp3j0+yEDxHR8XW50zux=RELSIxYmesc5`
zoT<V3U&%Y&%N%Cq{~5PRF0=#*va;9Vxs)q89j>LC`KpyNvexS;YfwS&JHsiASKJL1
zn=tw9a=S$xoBA<GD60ObZ2pYwD#6(wmCgGtE5!14r<4sJB+xTg)2rF{dcs@8n{<Cu
zs$MyVL*#J^8$-Jr?XZue$M19RCzNVBjlw}=p~{;b4DV@aqt*p%j6#~XB{{E<bFqfN
zPwhsY5BZOVYeeoR(As8QeY?M)^qsClbAE;qc2?-x6(>_qOB)?U#U;sy4?fH;nV%wA
za;TMo6}@io(|v6<S=n7v`_MD%<CsgxGnjzwaf0%H!$ZWS=3kQn0->g!dm>|2Cf8*G
z`R8?j<Lf6`Pzu;cH)C(N;v>U~SfAtAR&W6NdEPx9_L=<m(BNOOf<Do)RdAkGR$a!Q
z{0Gf(Y2%+HNgb1k;pY+Yx$E{-cQRqq9W-4c^$yqh_>d4YSFuWgE$8kEmlyq`49A4V
z|E@YoRX!X9A1!*`B!>w{lzPbk4Xp<}?*-qj$*<Oiq~B-0Yl6A6r_7fqj~A7Hbk;TX
zKuk23<Je2$c&PyS<Dg|X|Kw%6qAwzi@AtUR=OU(pZ@y4v`<6MjRrsIxXUwlZa*6Ey
z`_1`YS!)b)=j?h7(3`?lPe)%FOi%$+k9<;}5NotfLgXsZvCB9K8@o;bn>3-p=7s1{
z?O@Vm6TVM<SFuO`RZE41`Xxf2OQp7~e?WSzRHV-Owa%t@JSVGqWptI(Yb|wWnu^iH
zEbV;6H*XTV5-5!Mb}V(>xV<krS3=6KsA^pLu8!UGt_cQ}WQCUYOiK2Int#)p!Aev$
z%}+b2DoqP1sI)L$UMeiORnP*^_d8PmD|hkFWJcl4yEX0qQ<ad{czOGfayy>f0ggUQ
z!a6ambX*LzIZgBY2oHDfLM9QadNG&Hd5)c4_u3e6ER9fO$vq+*oERGNu0l~1Wa|&-
zt5R_&-ZMX{CQD^v$ujjCd(tAXlMZoRgx$DTpLyMg1XTcqhp~U>YnaUopYZq=;MB6p
z2~f{lQ2oX`Ys9P|S?6f_&>=XnYTLrNc;3zZXoG%6HsN}qe}=Sn!1s^<{pxRB;fd4K
zDgIi-Fyy9~!DRV0*7o>$p>qw`OJTFD6^tbsz5u=dajo{P`mpzr(eVbCW4FdI?{45o
zc+S^SIZdBM3jCS=Mz{FtN}dt5o{B+ln79UPzv?uuo0w)!Q<y-d3&m2v8@tTTB>Bzo
z79YE_&A<*-qVHOuWp8B!cvb55n%^p-%H#D9q^;bBEWy`+;^$KC7Ft@Ex5<gTr9Vmz
zp9Hgab2)Cj>dMh(5(%fduQcr-@c*)mT)&Vok^z0=mon+rAq$-rx(XuUQwi8{AG_aB
ztd0&C`JpFx++;2e3{BRps2@E2{+4UK^AxK-dVTKJ-c~J5#`!;q&O(Y+>Nu9#PTcj*
z?uU=~`Y3wtINFpd4PW|Zs^4;uw~LMIU#7y$#rIT-b3H5P)PQ|31`~HJjVxZ}48>=?
z|0ELp(f=*kbX;XiVXVu&0ENAHA*S2w>y~O3ks(d*&aVtmK^C7X^Qqe*`fT)EsWYt*
zeKgc7*nq<lj+yII-+ts^*${%OLwU06p7%{XRdTSJ_$O+B@5KyuRaR^~F5DPiVtd4|
z{i(oU5>)}#-!W-5@?G)U-m1<wXMTqg6(qLuZ9P%E4IgcJK4}}&de>eosTyj;s&iE|
z_#=9A<@|6)^7rI$YmU#$H^V@QOnmd<kPN+QZ+ALeDE=b{(EQs+j{hY8U=ubtJTbND
zzD&I2x5uV2J1#IqZ&+?^F+4slt7$800ozN+yoyhFUT*(lvgzz$K>cT)+(L=^&&r=5
z&i62JJ$eJ%>6;mxVmgiDP|0P?#nL|PqYY3jc^8U`M`z}JZ2@3QjSFxoRGgu|SW&%G
z{nmzW#ZkVjyjon<N<UzxXd<Q<WFp44SeQPQl$UN)FTvJR76np_LK%4ZoeB0k1a@&#
zbTs0pNnln~fIgU9-!V~(uCwL|a}h78LGSThEov=?0^4Y{R^fpScwQ}0^5YMAepZ>C
z1$$>6k2nU>j1!rjUzry_BVdQ*M0BM{YzuIkuuSn(#4H>UzSZN%EKtTFKiCZhuWkyk
z*1H-&L7YCnu1%8?#*?|UTtCi0!lK19kM(>4n*uh#0XI37{LVRhz(go7cu8h~S({J)
zYbs_V*q7T?Ogc~u2lWRj&)s=$QKgdA!Do0r2a<$^R7U=0+mRXMezT-h>DhhXJ~(P$
zl}oh#esKBB^@|lHOpjE!?*11PQI-psoPv6AGaH|9g;46n1Az#c`B|>YqzlUi^1)^T
zik&o~CNB(TaPnTwbS8S?f%l!wEX)d5C0dFHD?8E`EhdlH>RVf{WZjsA<PD>l-$!l<
zCTy<hSF7fUP?Cwp+~^cPW=+Umd^GJ|z2+*=%wV~@=aZt%o$zVt=^B1}MLW}UbkyxL
z8^E)Db7d&MHEI0$MPz@Bsj(z{tIO0w982-bc&{Jh5m>shjc_;L=-@uQVUKvOqfAH_
z9be#vU6dZDus9~3g~acdW|UgD?>Y&&*w^*USw&SaRfo0GGaU$@cW4ci&bX*Z^6Mv|
z3alnwpvyJ31t30*b*M1mTG(SP>gB*AqDqlxC1*M^TAGM#LRu!9`xW`n!_ppvCw^=O
z$+Xxq&x2yV+Oytr2BWuZnPa?!6is}-XJO+h4tB~E1f)jC#8Pd4U?puVZYQ^|?h|>f
z+gp0dRtXJc3p`YCk5gy<$mhWtqP$vmS~u!WNNXZXIQJ-Zc#69arJKI{a2Co5J9z2Q
ze-T%c%Ed9d0?w&uht}g>r&rp8(i!s9+O?hWjZ<7O<G5wvdE{jI2^$d=_Xa;J`D2Tu
z>(mW7I}gc^-r`nmlj=*VwE!a(#G79%8`Dc`U#w1SkoRZ5aCez&%6%*+r63Q$B46a%
z)^aMXm@`f=HDIuI;kIn%$XZ@r12Qsle7@0MS6t3_ylJg3%%jEx7|Q|PAz34QA3b&&
z;P9qNu%*$-R9TJV0vYE;Fd3^s2<IQW(?#4%+K1=~BCRpQSj+k61U1?)5hUzT3frHh
zS4jc8f;(TlxSw^KOH})^9Nl$ukBX(fugp6-DWCBbYaSioj0hd|U_c}t6=;-O&RY#z
zM#`V)IkN72bUuISHMqqEdlJ%IN0w^ME4{<BCGyiHziB$}7lhlo3-tVWebsb?B!tbx
zOSdK@coM{xmXwMKNqHPoHFB#9tBlShw#7KE3p6L##EzuZ)sO1r=bg(J3G59-;=r7%
z7fJoeBI~qHJ1Mh7?IUI>q@$(u|Ijo0dUAAQHP3RNN*7Y3sD(F@?#~JB{EKqGrn{>w
z4pSe^<g&Zbm8n=Ie*eC{VzhCwS{~$s%@3_F^#)v6$6K!wHcOmNsSwv3`vOn8J>Zz?
zE%Nm}HwC{!lYhFw@V&}$8eHRO!T$qn5_w4emxtHa7kpnML*E<h&YaLgba!$GleY?3
z{lN_t?x$bhnM%56+K=|Tp<{I-)SCzOuuU~!yVDBsHJOp?;%OOB(d^AjhiWFgl{;03
zj9(nZwY($g950Xd%zx!Fp-SsT^Rh;B&EEj(G`h(M1q04=x$5_p1i*kmeb#;diX3kL
z5_T2ibcd>|?(9{EVZ(JgI;Fh$*4jgl!c-x|Az~8AG^3}8qHT=yv*GhW$b=Gd@VjOh
z^i8!O2&V9J*@ym(|AYv++^XqV2*S4Oic){-e@72gW?E500!X~8_x;dy!JEaF-E{K@
zVUmAc=T)?8xJ+4RYrCySWLEM6t;+eRUy@7}e3II{kxJ9xk5jLa4?A!krHm4v4y8X8
zmPPz#6EI!bw8OKN@Oe8SP|53T{=!y4&&oRT%l)1rTC_~xM3&6bEt%3@PP&`!o8hHm
z5x<cvlH}#7tIbuVXT!eCiRbyMGPWb;m05Q8*N<D{GI-t1xc!qVpZlVC>53A8p+f^D
z?_~E#dAFC^Q6npD?+dHs!;#+T2*45b%M>C0u%Qed_QHW7Vh!EoMVHOK-2JNhfL3uN
zrG&i(oDO5UnolN*Qq8s(9g=54tg!Cujj%5-BI>_rKeWRWtjPM|d~M?bdLwR-MET=#
zG#-)FQgKcNTJH|L`ud^zg+nC8*P;7UcuF*npMe7iz}qQr7R;DN3ddW<h~$gI=%&uI
zD4}$SWrH6p%Q+S1LToV0FS34ut+DCz(53fW3lS`JBdH_+C7*sI;&Upl#RwMIMYMA&
zi)27X-{w(J;$DWi_f}RV%f!h27RjPaiXtQRh-dU`*Lvjy`RREn)1Sv}vFp!Rg%;R7
zU*a67sy>%hGZneDe##J>JX~z9bsU<+rB#YBcT%yr0U*7PvdhuK>+eDeXXxJJ*^?zU
zL%Fe#=9J)=*UWP!NW``0sjely(rPI3SVibe(@S>2M6k{9Q**k+YZF=OQ~x@6k57yI
z8dbJg>}(QBWcSK1*X_Xe0wDXbiRE)7i*vUJiEsW51pwPHHWt>+x*kbiO27wdmL}x$
z&|5Ls-`Iu`EQTq4o8`6$%*k6EjpxB^5_AetbXzI|RQwzHBoE1B6?=inEXq-yD(%#_
z)*3I>6$Pm|ZOOV_1GBR*@Ld}-Mt*!wlY#7C>aT84m<%BHQyXG0&lGm-h=re=dYa(%
zWfppe)S`M8fvlH%_y;S}S&80|dBq5YO3^f3tC~(0qm^pI;nIvNgJLZo>vj=L%kTVp
z&O3kcKQhQ(kszv0hP_*L%D+aU?SxV#7A4!=>wIprR;?<Dx;-#+IU=p%Y#KCG)Okg4
z#TIB;6|9^mvRNC{N7GDrip=_|DvKTU>u^F2=YH3LaE|MG`WumVY};Dt2`{QiIG(qo
zVaiEH$G+8<`riJlpXncwMc)drlm1|V&HhhWC4vrK34ZYA->5C|V{alS3t!9en3plH
zo_WtR9^|w1&?rm*B$XJHKf&>_k&k&!i8=7HGD*Ea(UXrjWTLsI5lm7c;cn^jJ5Rx2
zqk01~0D)rIB3U<5;je!eFNYED)jA4wdb0)TE4ovghmRAVh@m)Pf3uNm$BpckeqTI2
z)i@U-(}kIInkH9nwAeEprDS4<4$taAgV$#_lI?9pMh$DLkd(=PZVXn`i;&qQoFDRj
z66B=6+g@B9<t>wA)<^Ept$wV^I>Pl6haL5ap%BIG#yH$sw?WNd&f`86jDYOrWrA_o
zvzw1eoRqt8pF~3ymg-cTy~^(A=gKF5vw6`Myo>6g04td6jZA9B?stmj&V}Lupns+2
zJ1uGVV5b$%@3pdtPlj_)ErMeeLPnOF@zT+6|1=8v&AjvQ*IQZR4Kr`_c+{yE6G>)4
zv(%vzW1U|313%B35p#>b;&)&2-_8X~x4>I9CG<6;jICVVWZPGJ@UP`SI>IBE(tUv>
z8`8AL!o~Bta;r7TV_PcyMFroB)F2=IwsjkmR3tZ)t%7-!R?AvSNrd$nL9J|?_;*e_
zQvS8;$3EdkU$}a3F*VVttSW}uEPN2k53$M>J`)AQiKW~HAMV1<`81d5*DBZIPSZLi
z%}F9_5%@|9ual*%&y%tGmcLHb(Kkg<oF)au3akoA7_$YHIl20@tMG0_%1lV`@DpD(
zRdcO(FAHz{K4w~@7aa=u9Te^aowg>^U^jN(jkX4#(<R`2qo?NxZPPH`ESFqWp}QV%
z6mC@y4eF0Va@ZoaJG&!Zsp_~DpR3Nzot#dbC%@tV)!NV*RT!1{qOIpdL^G?luw9-|
zWDb_5<n!c!7?IxV*4c^moNghcQMOWu0>ZLU3_A@6VYLohBwxMv?Z8`7<fHkHq4@%|
zr1xDCpu$51O`qs6EZxc&O1T>#6-ah1if!c&wY#-WZdAVN>t@kUcFt{nxVij!4DieV
zT7L>PxqJME2)R-GhIHHDWc>2ct8FJZ;yS?6h1u>p(c(sGp7!E8GT>)@No}Ijw%&e7
zJqni5PK2u^7o&-d&CP=5r%Mv^-GKlv+2;U$r(bs-eZVf45X=SK0fo`sj~>rQ@~9^E
ze!W}uZhAk{g%Lm{vj%1>oMEayfD4vFqq9CP3=x>IP+Guta%uIB_bRiGTnNf0<Xjk_
z>+a+Yv8<&DmJ}TXZ2~5nAM@ud<Fw(j({(>~W^%6R9O4Dif(S=;Y^PL5*ufVsv{QCc
z%^+XpkO~^@`PIFRO3jaSL&y++`NKJ#E=y^LbCo<h4W9h};}O1kk_1K!%ishy@3PyH
zX3=-8(Oc^`Uq6b#))?F74SO#I!f$%lQWvY4TlZmgQQHN>rE~?M0wd+jrQ*%+fx~o0
zB|KPZ=t?~@JA+2}?<|AS74+bl?TmPB$kZlv<68|6xcZqoSnbQKa-<)kzUgh$x8ivv
zSiC#ETbJD}b&<B4dmGo-7WOMAvVytV^_TiM{kV+z6nba`VoHXy4o+PjzwP_34MOFs
zoOM4r^>Q7??6lj)0^#ToUwY76rxtnYY!ri?)NFM&^DnGd*d6Hf(!f@c3@CDHULYr;
zvvqEoVu#A8Eu*Ij$0k0v%#J7hvu|Yjj8SYsNLR5yZJ55jz$J&CARK#RE@)s35KpAT
zy1#J-ZaFwu8y*<c)=qSk)X<)(pyv37->CT0u>m4Z%-DAZ-$l<ejM<GZ7~nY~f@YJ8
zaZ4)D(G52mN<u|mPQ-<rxkzqxI;Dan%eJx0lPi;Zw?0Pv(WGaRuOskkuNjd$hk&uG
zouKI+!K^SP!cvrQ*!;qB%DxBFm!VcNVEsH2^Aq3OU#9-=!`g&zt)d6+n8FT7wIk7A
z%`bTG>u7bg^UKfy46Qsl#OCl`3;S$iqYb^&R@W<v5H5`<K>rzgJ9T&E2~qj5H&(>7
z6NRJedta*g@=04>qD9kUcvOTqRGjjiJ|#Q{8_&K-8-mF^<_OqQp0lvPWtQ$oQbWv+
z#Ai07%q^tC4RH-8J+emx<XZ8m<>9dF8Y`?NxfaXsje|7Sk2H;g>zJsABt#;UM1vjU
zEzeKg;eGrDxtr+sh=*q(1){#YqmUrCWr+ylyttx{mwEee`hpZ~XX2=b#m_iXOfRUW
zeKNtPC@OU#%1jTXt3)pggsxmLB$@2DggbQAt<Xw{A=+AGqqh9ZGxq6?9@3hxI%Pt}
z-o|6L(AYr`&svx=NqGw%HHc!vrw0NF_sKR2qcPnI7-BJe$9*i2&#2`JNT<y(Swb$=
z2TpDLt-*dzVKp-D7_Nax*|#UOp|4zgs0Wuso_X3e48-P1=SNS22vwpH*;f25ezMWB
z(GX0-JunR>0|YPeb!>x2Nl9++PDOWYSGtt)M2rJO(Jfo}FbV66_nkaxI;7ZK-HbFu
zs|u#Vm3Y2~qV36-00B<UPfTb&vc}MR(9z@G*hg*?q|ylhkt{r60*4$5#d%)Fe=Pb)
zG~X1Pb}|KCs0mGoW-?-lKzq|rj{PrgF}^&lL0DiGAG_qmC~eV4bnebpjtv6>gaswN
zLqv2f^y7AU>~g3Qe$Hx*NK)e958YpMDCUn866Rpndi1>0im7I|(l@4a>A!5*tzVeH
zH{u|^*za)Thu=rLzW|M^-)v0=)#FR^iL7puyhLHg-YGN|Q1TJYPA{UpLCwi?5iNaF
zn8^@NL}G>XYKPG(8iQ;OQ7LTGucA(X<iS%AOu{xykenEvtDk%-5<>r48@9o{O66M^
zG)m7#ga6GlXj_H!#Z<Y|DzNoQ8y>wBnL=ElVPAaN4W;&7H=L$6W!Ce{2~7B;6#Cy&
z#298un**&!mX8+S^go5rzW(B%E{^fZ&`41EhF$FP1~FdS8&Ra?E3SU-MrvBo-mLSE
z`2m#2R+bylO^x<yg#rEwW0U(zZP*A(^z?-&N=TT}d|fsYE00zhPD1=ORxy;=sYP%l
zelspN|H#}5%9AJdD6)-~Gi*TCA{(y%dUC(8)4^8OFM6H>pleI_0RaV7BAvI!#$|20
zBI|r1^o78IqljO6=5J?lB170b|4D)TJ9!bXub0^G@qGm*SJ)X;$y_oKVuA3XXPDK5
zh)5*Zh27cxw2^NLyKi^`zJ3UNF2n~95)`^2s;pkgQaPjkc<+q*-uZJPDDgjg=&QAA
z1a@`H`SlB<+ZG`XWLj10%Jh^^Nr{V%Om}S2OK_@clW0YqwA)YzyyhmPHs*)n7-N=q
zj%+e*-exnevJ!0V6Y|t5*-N_Ly(1kvey)ldZhD~=T7jb6K?SRU1khvid#gkJbD0v(
zur6Bn$&dO~wymZd-)zR!*<dQ_Wg=4>zwl)g(_`RI{sjW}mgB3IxDT7LCb#If0SFx*
zFN=@`zRTUuUVfd^WC={^ulcRBUImSD&zU1>MfB|`ia*ZY^H>|9o7V6<?79lc_!)$=
z+~Q{pIK5G0=2FO~s8vMuoD{Q8Bh3q)fh8c(YY1t6UQY2G+_{-eT2{LsTwcd<`+T2}
zHt2jhcX-vI8|A*5C)U<^rRYnR1jT%yfC4%!UP1v1shiTiCW=*&=fKNFJ@$^A=Y>no
zioj|(iM1frpa*I{oF?*H%D5>Ti&e-?M{rcv#v7|G$--HDwd+(_3d|j?J6>O$<tz$%
z*7()#F%fW+9qKE-slI-42cz$Nz^`g(=arb*wl7&gj5%Qz6JpCHJ<CHmUKQP^+<f#e
zE84e@Q$Q3wS&KpMcBccEve{re8_nT<i-!GQq`gykrA^m08r!z*bZpzUI<{@wW(S>g
z$F^<Tw(VrE=l#CxKiT`>f8Kp^U+ZYCT2-^=9Al1Ab<^r5j4OKaW1WlG&$T}dFDHu*
z$a$X(Y4Dg{2<8g;H9{xCAx90~tm=w#+)&+5;1SgF`4q%9l$w*zJGaL?t?9jAg5!;?
z9h28WjRXQKGCp0jV0IAGA0t{~lb`=y==;PbONQ*%mfIL^BDyT7?MS*)u+<rhqiFig
z&fWB2pT8d0S2RG^5Xtu#TLk(Plwah_fI%Dz$+QNI1-lC(>XX<MYj5_*y<t^m8O*h4
z80cywdzs13PEa!u?Ui3i!k}PUOfBSt;y26KZT6UKKm*|32;41Q;YO^x(+Xl~?7xrp
zV8T)nON*)4kaHspFnDJjqhL`Cr@S|Dmo}l9avB{vy3y>T)zSV&{XJ4ZWHQdt)z~kJ
z?So`mE{Y2RX5rCZ<}kEP2sS^;HDIc;gt7I&eNi03qY{~h{1$5Q+_n8iCh1WUyx$2-
zbfm++wF9_$a&NRG(f>ZQSn+4)Q~%|=aoste^Jn`{_mUICj4Xf_a`OA-CxDbmjK#dv
z97^IE{ttf(ej&s~iNqd=`CrENbEu2i7cr7Z1R;0Us%zyIQ)L(APrMZ}7y-=)>C7T&
zn+9)SxKnj;bbFEb#*kVgq;LKtA4gm_CuTYw!=RKUY{IL%m{41b*Dn{kXomRgMjAA3
zpR=CW-&5->WA)G_0U`^DPkB~vJ?;|#<C}}Goph{~jBdVL(bUXg-X+(DN!L3cuM+&-
zJ{<RE%C{Da<S1cvnXMzFe}9q@Y(wL48~sbo&GhYK*$mrl1Svs(JESQY8(Ozo<LizP
zi}w?Z5lD3M*oXYHp7sw+JM)y+K_G%L%0G{GZPzyu0<&j=DRn2^4o+~Nb5iIBE{ta<
zSZ_y=ZwIi4&<}1gp$bu`E%-v+J{3PK9bap!TEl4FVY|v`Cq~WSxhzIY*;y(>*>hvr
zsZd?#<J+lFFRQSD<viF!ep1epY{cb5cPkf!N-VsUHL)*!EnS31@(ngwL##<LihdN*
z>zqa&49;YgllW->4p7&hNVP(jvZf#&vZDIMu;ij5HS0>fZo@JkP0&r{;2}nqTDO@&
zer12|0)28GW9;bjapQ&9?Y6#+?wnyV%n-gCqhG<NoM(`XrF6_HcKU&(kz@;%v4ePK
z;yY*}>f6{jNmkTh0&c$`QEUg|$|@h?Z0y$FuEFsE0e%p93(M5y{Il5DwRHbk*e=3H
zCp2&;5@<Pre`ExG_kH1O?OrH5e`R2_X>dH-j(gM4ZOIyrJt@WVcGdahg+U{gL4}3L
z)$(#{uMwP6I7DWAlBSKG58hVZf&(+RsP?FFw>CcxY`@&$*kC`->`i4QJR3(4sY4x-
zjHNRa%$$uqFA3vxUA)P6uDVM4hTBEd>B<DZq5<<EvxA7|)n>}^^3n)>=oIa{Hz%wL
zys|X%PPB8MlZnw%;e8)%Z?9?XwQ_fMYanOOaANGHi7yxeG?sB9o$C4o#BUb0Bg6+$
z&t_8mHQ8;i89v-)HB}kd-&C8xCVOJ!_mqgl22h`|$ryo|EMO&p;B;hx=;W=^yJ-q9
zJnfL+!1hr|qyxr;_8A!{p+zUCu=aYAW)UQ_lfg(xup+vd08c3KwHz`e<X%ChxuXU`
zWIZ|fSheG+<og=UwIiQgz4n=)Ob-9?s>|&1qnW>+^C9qA<?I@86ccDLw_jOWzSftl
zA$_Qv_Sb8A?eOn+tz_)1yrl&F6q5|N@exkUsBO!8=&gxL9Mk(0J<*Oc-l1xUZCsz+
z-I|j&FeK1Et|*aZ)A_4X<<Pi38~k&QwVAq@D#mQgO3@Fvq6C=-_>8)JW!FpKLbJ^%
z8ZjNj_d|j3=cNXsvu6eugj<-%DZ!vVQ_`fNU5<+*s*y6oc{*XX9t!=%9Q2eJ_C+d>
z!FC(RMg(!qabOz}V4H?a7>3$YeLH_1abos8j5xGfeQe44ZK*aTpb`qiLOfkB+BN#)
zzrX{#{hD5vCQ~of8mfD!5bvcH2Q%<XQ@oa8@Lkg`UfXIQMX8r|e$eiAIv)xO;_tKl
zs7>7#xX9$_eW@BYWA!_UJmx^K58dRfxh1$|+~)krzhW0~a(?G}AR9h}BPoHDdBP{z
zOf4sfhGP`bXBHn}6_z|_{Fkm;oL5%c;oYE~XZscvN6*^;V=MXOC`!Jov|`C<0-JG8
z1lMgIM|8z9{*wJ&=}kqe#fwZ$dEKLhLp%*%ydK)j6qQ3mt731p!psa8mq#u>wb@#=
z(d!O3tAy>(U~~L11oHFYaj6yZmUk38eqHs{2<v4NGkXbQ7@zKai`@NkJFnfAF*s%Y
zFbuo5PestLDh%j=1$O-HW}?FNR0G#8CVT<#PGl=je~2RzjG{OUl7r!2!OcJmrq_Yn
zNC7sotJ(P;1EQQ^nNWxhw!9bN8bOFPYB>ocvYCq0Bf_l#o5OxD$ZsB3khp<Fgy*nj
zy<a@}XUy@4*#5oZLE4Rfj%L^ib7rk?MzOOKE&AAS{q4mI1&C)K8vbBgC>Z_Xp5^Ci
z6y`kaFxEt!hdF}j#~(k2PLCd?4pLo@%;=){3@2%yJqs?p3!lFCb?p#z(NAd;=>5QB
z{GMMzdEO}%f(LQ!Tu``GUKzx-52#Tse+_)J5~;57_zgIold__<Na5{%x(i!kJaI)R
z>)mzqt4zDAdtN{-&o8Kc5*L?!+ikxO6jxtr8%K+!dY-3oXB)oCA+zkXchSR|ksnug
zJ&h_$@chY}IV&H3tpnKTYh&f6{9O;RTtMvo(uFp4o3}TH?h?<>kA8{C#5_m|6icQc
zvGfK1-tTOB{>nr09+6;E$2+3_dvq#g(F>Ts!f~OSpdF=4_3fV9!Qw8mbNG*V_-8)q
zO92Yw8KcS388_@9r7l`X;%|!fvQaMDO)w&_+e`|cG`Gsz+54!sFHfHr-gI#aVfU-b
z+XMcqjX{1>7`=?8$<2v~<F!To8{Y=Exvax-yHXT+v};bp>NrekWEYl`!>H8j$}T(-
zmeN(Zhd;efW$~A(*Pz$t1eG?U(wK=s<*B4j-209FK93)V8serL@b|gfBK^tf<TePm
zos&hwkM3U+UpMCWi)2?GE-XLb+U>ENw|@~4Om(FA`=P?V?w1vLdBVU80a>k>(F3`<
zL|mD%Pv>UO|E@1S^S|!v&YDKrcX_;Iz3KLjjkTZYt5W*g%Yx>^Q1B_`3X;7Ds>+oQ
zX`#?mKC}Dd?(yB*1g?_OoZX#(WFMmI*rqkp|E+NOV%=YNO<+1-%X%w#l9;B4?`wZg
z0_j-qSwI{Mnt$(MqV1AuJJyTy3twQBcI)EzSr0_}rO0N9xVY!nun*JG(L&vO^r@bS
zC_ndF(UHMQ_>BV8{x7WiS1T<4#g_fb^dXJs*UURj@3%<D4*{Fns1KD7fujW<?bm{#
zujq@e*K5adjlFiOd#4_p5Pzcf?bqx5cFOZ*KBYDY7$oaF_emd<6=&-kd)HIh$;@=i
zFnX@Sx=`OgHEWyV!^M=ZVZ!S-mcuwiFhz)d#AlJF&tB`@E^c2G!otGbNKVdc8`!}{
zxoPl_O%PxS7WMw4S@{;fh^+bGtOetu-Duk&VS4j^A}^4BP*w#7=A}WDKU2rA+HuvQ
z;4MxC-Gdxf;X?}agOLlxj${)#qOm&hMPN=(??9^%*?<qog~tOyy#f``5JB+7EXjs#
zVZ`+-PPT0)&fITxmk@ds_<o?jq%I#L9P{PHvM)-0cz0C=-lTj+uKP4+84{XvYN!Dr
zBga$(5ChXd#&)*=$_sOmVFaj*I1iDnJW51_A<<XgKTj-6=OjT<FwkDf?0G*?7qx9>
z7gOc3%=z1&SS3tVjXcumX<oyN-v{)e)vWp?(nwb<kF}-%-$-V}pB)dY0|hi~ynC%w
z!|i4d^-uz(64+R(`*(hU-5(i=@C9w2XxHRC??3l28(7pUp;<t1k43rk4_6LD4NwJG
z>??r6Y1U{4ucXkm*Ej=b^AA{5umx1pr#%QBHHz7sXF8SlI;s~|Ae)<gQPG<4)|6iq
zEBg(JD-1m@LG<4P0|S=hmh)D%!+V7_dvDedkJduLcY7Q#Vnb_!b{qE_Vb#u=G@)o$
zIP`g5SgmG--bnk|OZ2IjZk|urxos@nb)|df@$mSZ9#p1!0QEau#x8DaBGzt8$tzuL
zWkv}-=<kh?6*DiS15Fpyf2#8c3>Heh)67fsxD*I73rrYijY$LO+!0w|1Qf&`V+`OK
zl*kS!@uEyfF%4Xo5~9ud!+-V&u~F~4yC+X)9wgp8T`1GLj$9e@lR2KZCQFNq(m&a8
z5e5VgW_`am>YgM!I*pCbJmkP3f~l=(m@oitJYvV795mZ^F8`vxn>>(B7C1<+xn%F_
zhybX-Ph1H07mxL8&nZc8ASQ?yfe!mJpn*$@h$JZR1(p=>H2ggY7%4Iw7^$uNJM!!z
zts`VW8Z#@sfXrg;H8_wKq2E9Uu=EbRVpI#5&lvMgG8Yky7+`IGV|j8BRrNgP+pN?K
z;vs=K3wG%FN+3i$myf<r1`sL&{^%_mGP&Sk{w-!Y0LGZ1!8sa^T0s8q&kY!0{qK+d
zC(Zy7wiX{zr5(i+)sQ>*@zqUP!qQnElX@Ll&VMu>1+zp-(E52u?tf@SrfzSyLOLHU
zvv}0#(qz%m<d*4<*0pCz+7Xr%Rucak%K#bks5PgW#umLw`ch*Tva-kG&NlXi+*)|+
zB04?JMx7H!5ds&EhrezSK4dU3;{NO<=aT=~-JYr^QYiLWK5lXC^<dcf*I@nSFiNm+
z&qHV5P_kZX7LCi{PxfCpq~kBmpMd-Psw&utz9ovb9G%1Rx|N+El$?BBumPKXEixlX
zJ(qzh{(KhMM!!c}{Hx}Xwj&Qk9n;R17Jj7-S|C2coVaMbw+#eqmK_kVH?p=<PbIy6
zm|ar6E0}06#8f`=b%?&KA@2e=cZi5#?IcHo&l;Ai8(o!IEhQ=gVgpvxJ3*g;Ekq2N
z{owB+SauQ7Op6D-|K}qT<^Z^(kS<vA!zNCZ{DklXw=#YfY5yH)y;}TQFH8&>I?H$d
z0Zj-!EV(%y6EZ9c%AEWFJ$biKFcu;h`=5p;q#oTmnM%D1a{Eb&Kvxn&<eYn76}lPC
zAVU0zXrQFRT2VSFWK851Vg`_<!7ro&oIMgAh84m-2NB(n(lEfdB4GDOGJap<%23H+
z$yljaFLBu1$FhtP8Eoyzf{+$8GUqsdmh~Nx2Iv22Xfygdr<OdFv$o*Lborg9U8E#B
z@LS0|$=<V%0*;3p1u#1A11&efSc^$=o2Y42k|<9J3VW=EYbY}6Jra;+oBzAHaDjZ6
zUmX`iTTzhD?PAWQtmH|(|G*D}5fK)Cqif}gMX8cxAf&S4)q#rH8n%JTEvsL3x#Ll_
zWcr$}M4FcW-D8WXxKiYKSSj|if0byM;fh5+y1>^WTp2ITUAlmoT(-D@7O@K^nGyP<
zi6{TLjtMiOC4z{0O=}<t%@H{ecaOwS?*b9IjF_QrKj@Pfj$=S9!wN7@L4fHBl6vdP
z6)V<P&+C~|<|vs?>tsLBe06aiVdlU7fRJbUdXRUIqdHJ#>+P<^is^6>6p++ntZ@}%
zWZD}4kR46+|FI>ojN_F7G{7HR&p=3lX;Yv0thas}CL|GBrcvWp*9T2Jh9b^ST=|xz
zwOyr7H%w;BJ-_R(kb4|4K8q;L+PAcz)6P`{lMv`TW|;7ZNz1bc!;TLPO}&0_SP3jw
zFbPO@bB7KEy3f#P8Bui{7~GxUCuN~?whTQcsMI$iiY+ymhHqLLEm!uuqNh&4WA-}K
zhO*eWR@Ek}1;QT<4(SLNkcv30+w`02?mX9wOPzXtl+6lDV!EO`Y4Ex=0)UVucWyEC
zhw6t1MDFj>=>LTG|4xs8d06>raf@YNUHH*T&34PU%N@sc%lJ)z1u5tCTWa6YHJGS3
zPxWRo8HMvW-ed0IgDqIIG@pMcKR+O46B09`;Q)4{5<L4Uq~N=UU-k^br+iR0JuiRy
z4#h@1^2}WNKP#le?$G-ssEd?7vHO44=ME5C|L>(Tk5iX2NoZyLbMHOPIS0Nki5Wv$
zJl|1tFve><Vb-0Y!g+pY1d`o-g()(wJ5wY+Y#QyfV8PN#l`IJ!`H#=PDIr@W))=*6
zG@-I0`gfR8Rf(()dS$AbQSKF;6Z}%pV;iSY!PKEds5gGd;!{T6(K-5ao)9JYe@e0m
zI2^Phm&M26A)uyUgNxv4{#XP4-}-!uDgHlI`aiVsAHw)VTKGQg|JBM0u~f<S(rh$w
zbd-|KhGR3Dh@ul^L)}vR{vms-E=rA3j0Bt87^Xbk6&n(g!r#g@X)`5%Hx0vg_=Uvs
z3FqgUO@<;ko)sXk9VA~^KDW<xJB1TSFWg+zo}a+$FE<H)T%LS3l?tJVQ(=Ue<ECR=
zE`6<6%3f1g><0&=-=<fEvqiElktpf3_s6l9i!wV^-cTc0ttFs7?c&24=zH}E#w!uM
z%;BWt7hTV2N)?W_&fIQ?lEaqq{U%N%%EC#Wzry160eW>*h6xzz1@r(I^C%L<3Ti~8
zWCs!|b9odk<<Fpuh#^>JAz38Ufshs)X0;oC3-_o53h=w)no6ey({a<`!!X$EY3Fdo
z#sza-fX{MN&`zFyZWVWMzRTFE^rH}Y(2HVh(Rst7rgI?tbr~<Wm+8aatp-}xs&nNP
zVpI7ZU%!0`UgFHtvdB(8=Q$PUeP<{Z(=Y>S0^6~D=uJcihOo>Pi!KBmu3E3hT7U`Z
zX6<&3Mdv>N155wCSGT=}2oGzjuog+3sl%<qt-uN&0@eupeaIRzK2W@9zfR2Z21tZP
z$q5Gn3s6YBM6P^0#hK8MyxNJepu%ztCI3}_;I-%L=b7w;|9SM+$eptK@~YF)6&0n8
zj`e*V&uBcFrc?E6n=o3QQGge6VBZKK_&+7xo|NOyqWpV)^2vhY=filjOqU4cr8_Lo
zmEbWv5%Qfw4GmY#+^CfSIBVhI3vCr&YstZBvS%r)W^S)c0lYEmiW}=jI_DTYJYg9!
z0r;T4`TKQLV9fNbc0rZG0;1>eon191QAdN`;C?wgV?Mn-n|?sdTEbC@aE|L}(>6v^
z!~K(q0MK0f^_kw*DXxASVR=?d_wSE@o@#0U_<YHV_;=7My^L3httGw(<TgWhd0ok3
z;Z;7=HdQ>GKHVXx@ZBG)6&f1)6m)=;V{$ZXL{7F`Qvs{>^q!5$DLLccuj18++<k91
zWu<&vi_IlO|J9fN*%#5mVHe)*=fEd$zr|2CXa$6h(<cX{s+*vzb1(-atDB&+b3X^9
zi<_Xkv)LVxb>v?pQ<~aeY@&u!?oI;M;Wcg#2VWrT1`f`l2VW%X1}@Hn2VW@b22Re!
z2VXzd4cwd$558d54IG_Q2fhg52q3IbRN^Rgk`kOaSCd3jibm7O@&#7xAQVt?3E{BA
z<WX`6;jkd&QL+i)FvH|fvIyZYAmmUo3E|MgWKl8*;m{ytQPK(FP{U;4(z2%#VP$Hj
zoq5XSFzYk9vK)ttaCF*Y<D3T4**^jdjh|mb`!u??6SE%plwsRd&Q=ovM~p+rpWI5*
zb@FX78ep=Yz=@-p4oYCI9-V}eo-S``m8N#EG<#cNm4ngkddRv0oJYp0srG)<GjOhn
z`xA<+yQN&i>OdosJ>6R2T8BvN()6^Sq+T+(*lza`j%gp%K@^j^t-&v_$eH(t8ZB^)
z9tDi>uY>(JAXlyQIBGxBu<U6jQy$(fFjCuKLzlTaoE_87UPxGYjI))iQA|4@@1&S-
zXFZ+eDt7Me1Sb59eD5C=FRtE`0F)X$WS|R3#~DgY1A*j4_zC|D>HUrV7uf#?U<07F
zr2t7=aa5^T*qQl#>8*pkho`n5QY?L2pRaC%kRK4&YHH3@THo5P*Bh{t^MeypsQ6?y
zhK=eaRL~^c`#?NjG8KHUfF)3Jkvra?3ME?-9>hXij{A8O=Zglv-jCfsB74dx^_3IX
za_i1^rFF%#0mYZz&3J6waEHquse9GEwPMjcEq}B0XJAVaUrC6GBc*l_SNS2qoo20+
z4o^D1`^Jp3sSr6*sL)Gt8i!)2_&`&RrPTy1_zH7aDi`^)YV;I9LGl=s!jV8#nWum4
zgOl(C7P%|p`xw3PPOUE5t>NHv-GEB|S2VIwcwuG6<)UCeGfbW+OFf(Z(QUZ+b-e|5
zSb`eQ`oYh)<3CA><KXCF+ue=hTSdt~7s1FIU$kXT=-Ux=0N<h$c!e}9SZy>gRbKs_
zMv*k4cJPsMIn^lWF_!DRpYC~G#D+Z14so@ylTYyy>8DJmz883#NjdB=qXS%CzZu}L
zUqxWLb_ID$gWoSIxo<^HS|2sCjPRiFcXnyQy}I+p+r_Zw<+OAX#);KP^9sd43rmiH
z?fT-H;@oCRm9~u!g4m8g_gAu&o2f6&#eqrc!)Hjp7(lijS{6<DS3we_Bg>rhIEc3?
z7h5oDt7g=}%>5OW3IoVb0i%<a&gMVV7X+e@G-sz6d@qw7P%{xCoWMcP74}<Lh}#Nx
zcx2K38y;VZ<0{sggX0cs@A3WP#{i-qwcVBb7XT0Vu|GHVjy)`Zo&(rrq=cP(_nC%J
z;EeH2?uj1G2V^Kzi1l2(L7-T^1+qc9E#BC33LcL;FYy>G5A08iPDi&L;MyJYZ{Cr@
zxYEf(&+pN%5-|YXRfwSacYTIZ3^tJkj9_nLtEr<66s2gB9S7$Jx@)ShHJOe;>?uIP
zX-dwXk2!|^3$Gn|BTQr27jHcy=x?6T{RUE-f1yUp`#yvanc8Ki@$&dJng9}Y?6X&_
z10`uHLV>iFaAO--E&pGY74<#0&;n+yOmvdl=&L(KtX?R<I;k8SHS{u8iTy3(cy&uw
z2~PhG8oFcEo!J(howE0>Ok;xL6o^cJ%SJ(uy93)ot=qx?nu7a$*C^B#>AN{D{iU}T
z;c-e4B>dhX<L2z!;z5ht#=oP3)r%xF5DXy#qKbgy?+D=SKgD~IAk$*p1pikI_y|S*
zA4%Xp9R@&e;m>Ep$(-_n=&e7dinRmb3txzM)UuD(=;VEOVOUhdu_^%hM2gzU3;5aw
zR^>mM7akA8*lw!}*^;SEk3&BzSlH_9wg_~si2}a&UpF%}XtTXIul!x?C+XHTJ*uE1
z|4QhiK-7RYtaYy_yE`}Z`(kk4DoSppy_s&Zpqxn2pkb$u*`H2k0)ToZ5deIQALpx`
z+<T_hT;5BKk7#`R<&!lIoRyWxp;bB^myhSSZlkMbq^H^Nfnh=rG*Bt+O(F4!s;@P)
zS^ubtJmU>h=9QjnQzmm#*6T}0=n4e1HTJFlrLeO3liDhev-VBJn3bbsgWnP4DUx01
z>@p&{kLsF=OcLQU)I)mL#q4@H%lQEWKu=Nr2Q*2%mI?oX2&G5#8nA`orsB@~ctu!P
z2P$NQhb%`y9QvKS*afq&!&PK7h)%8%)mBeKUN0>IP9R1Nb=2@=(ZcAMf=kG+O3Dkv
zjdy2JzARHMn2sbnb_<Iad|ZR=_QY(xQ;cB^%}}}h93<RZP^11LFUf=mj`(bw!aop7
zNG_0W(rE<YD|h29_Fv@!wx3o7%*P9OlXUOBdrdj>9&VRjU%I!;8G5*Y;HGcox=hIl
zPRcijEwNy*%la5bdYBv^CH3Ul@{@O{G013+xwvNeXETNTYm7D<g3=w6XsYwHxqvk^
zryt&1{E?wNhFI9j#f`wnsm@&7p{Y!3EI6Sevh2ZBO65y-A`9I&g;pJId|0xLON(27
zq%Q}Md9(+H4JVQE)rnySQVWnY!pfL7I8W~lnf-a9WSNpY1wj)J=gA#i`Oa?d$AA2K
zfxjQ;K<c$ci4;+PrWXgib3JvD8##oo!;&@QZ#DY1vXmGA2oT%`7-QyhSlox55&;A)
zLKSZ*v`1DPEE|iOzGVKbaCU>rvkGK6HGzuZQbjMk?o2R%KKJi8&Ac%Lx%HVxS|FjQ
zaWvpQ1P&;Vu-^uD^7VI>Gd8MFbihK=NnnAFf}8X!3bjBKkVqf54Z>(@JV7-d+lB{9
zl;bPF(3d>5AuMv%OYSyX@tY8IwwhupQyTXI-8j>7GITsiUt8E;n>V{7PJoRzhobUH
znoP~HUni0B6hb98GH}OABn?RtL!VJ%-CXFMk90weA;c)W!BGiZ?8-d8H#^=?ztiDR
z*z0)15)+0o!~?qx8d;Pd<(bg*dKSAkm=k>BoRDx7bD7DE@7?c*=&euGG&-~1=NNI`
zbk&TRGiB`k8mO@`Y|iKtJil~s>T2C6DxMc>e|5w$M%VvNDBuhJU(Fl6*kusCF=u1g
zI-IoGmkmd7QW&%!fM2@-GD#DZiW((&&9nwlJ3QeR<hcK@zOK6vsx@lOC}~5+)=*!F
zmrGGP{wDtgZsX$lf^8^wBDGcMGdSL07q<$-nos&A5?}2qZ8)oHTJ-Bc7E`Ck7PuT|
zDiQD}$0D(o>!*l{W*P^r!J38qMG>(7j+pDH?yJYoZbX1DIXmk`gg#-rWB)_K0C=aN
z&jrY<cvGjZ1e=r8i9-T^0wQkGWd+OyYehhsmQ-A(9JzQ#*%$mc_8Rhw2IGP@u7EhX
zQhbBl^dh|tvrC-!)Fsjhm?D;Rs1#Zb54n5Bg8Z2dGS3@kyB{{VN5XVK{scH#VgzO2
zl0_e`@mU5#*A85|nJtI{sbIUauKVzxwE3^~XuVi*6l<-gi@<C_?RDkBm)B5+J9iiz
zdua?*8LXn}QLK7vugD+MjE)Ew9)8eGZ1xwhhqoOPXqQ)G-7AI_)!aWrU*U#0pA${`
z5OE*;UN{SeQT4PVak?2|OWF4M{IMV3pxX#G{5N#T1(aW`DzB%*>!<H=gEyfqc?bYF
z1zJ+}_PH90Dn~u{w5r#WaO_Y15KYY<1tZMaierX4=seo*^!A`l!-*ghQ5WE{_#Wmf
z@`nqL#AOntO<^&7asPE3IR;M`y$;TC&-QB(<RiOCrzfB%e)`v-_fO#zZ>Ah<Lr>a1
z=6hg$_YJ+Mcf87W&IkUai)@9bYMK8k^(oh5F?Vv+2j1hYY`x5x$#iZ)|M(%~M!_`Z
zh>NE%{hQ(LdCclF<-6#BwQH%f(LS6uVMe@Jdi}R`LSU&XRa$f?o2pj#J3Y1-<2z4;
zpt%OUWc9<^q&xarIBYQh!3UIHG$^D1V~%?fMM3npiZ}pK)$|3_X~)}`HlBQ;2!WT6
zj2yJ4R~oOq3(ED{apfUJVH7>jHM$;i)#=q2uWtPub#-pY@>lz4JgZ#RcJ_Vd@LOh@
zlYyqO2BZ-!GJ8J=D#W)w-|3bhko}Edk(BnU465o!0z8d(Ce!_<UF(*X*a)8T$*k&k
z#V`AMAiu-hS|wuZsWBhQAqfaS$NvT>w~6tcLAzbXO!kBz4fXR(Z&PiZ!P*G`#v_UB
z<lN>cB3L`qHxXtV&UE>(xZ<I>cg4JoifjK_@N5O{Ej*0xGKu_2PWOIJ@Za#p#h<ma
zYeOp;UI^#{5knaGyp9_=PYM2-T#Et8libEooN^aGfTYzp{*)1I?OU26@-v;0Nj3oY
zdz{h272hE%T0(p+tcLvBRc71bQ8B*atvn^*v$ws@i!ZiYm4Fm$Go8Gta69N&4j}SH
zt%hQdk}i;q#66|3_OY%@V%g(c+`=)KySHs0=K*Z1IL1=@c*fJv_zkwD-`7J9z`C7G
z$#FloINiq@jDo$_Cc=p>a<{>PqAw>kE~9qKvT^%l5wP#=IyQA2avWGsVzQ{*`;P8=
z>x|tq%N7gGj+>mVJ+q!Bx`ou6j#Jy$U=g{!Kq)NPP(q#1tx^)T1pzH7m=R}1&_$)j
zEVZXaar-#A8Dhs+0>>MiZ*INPYaPXdAu_5`T0LtEovqDZ?Bib~c|z;YTHf6QDt}jZ
zdS!9<&V4_oK>-v0Rrl{u!a&GwwQ-Dinys_7&>!@AG!M68$%OW{J^HRjBDgRtO$604
z%oep9xrly~-#ma6N|#{H{+IUQHRiOSRqNSRX_zRA|1vhk;L=P_Dc)OD$$#tBimm}D
z#lLQ`0+jUr=TN;)xw)mP2xgTw2$i1?EWm8@uNhn$cWfJ~OGT-Xx8p@0mfHhji*4xb
z`9JMmb|lWiSgU-Nzx>!eO*6cA4~Yn8Cr?mj7pM_9$FhRxf#&ljEi`<2_0C3FU!*)M
z=ajHpQbpPiF4ZPNrBIV!lOg7WRTS6lKn5}Ym8e!FUJ1cbq|xt|XNEYM@zW+yk)+>;
z4M)R9g#fQi+4tFT=o<bTLSTBO+S0z6T@(-IKxwGqG@(T``YrUMNp_t*N&J_vUx+v%
zU}ke8Pv7<)kywZ2x*>6;g>JPm?NgGTU{%wuZpZ}w0bv@Z*0PM;fet}8<2$?f!C3Ja
zDbfj9CszxG=P(*m>Fw0!tnj<b@jw7WlNRv5r8Q0)O-yx_gE6?6Z8oomxY$2SWl0?W
z#CbNsgwx9~;V7Xfm=#K}XrOtNBneXsnes_pRB*flRsbQgV+U|z>!eVz(|mnTs~&tb
zk^xVVVw_w_yIG|0Zz_Wl>$#j?A;ke@*7ha2z^s0s!eBi{pcR92GE^6Yia-260YUjM
zDSaC_-x>eiI`$@)yNdD4kS`b<sQynFN&7FJ?TGe7vbn6`h+|I1m+a@inu@S7z<l0d
z1j$;c?EcGtOysoh45<`z={Ryodg*>%sVTpX_E2rC4iuAFeVyXWXWrsz`v1h1@QIG!
zU-$l*DIWA?(s@6m0HC3OTIhL16i!{n{kPmK9-YIpNOAZ{X7G?!NxnT@HaoZS!O)@(
zJ1CE!U#B+&2Art}3s4L+H0VS5sXMZIH8mdz+?^w>?ns-y`ywy35kB<nVIA06Ycja}
zvaK&Afrq;fN9s;vL*$uI9RG0ykkbCkuC$)^o_fN(+i>V05rd;%)BXg3cG&0jY^US#
zgpV_(s1z;0bA~seW4J`)bRV9rVvvJ<u~0@S*W}9fv&;yW-k7x^PqsQWZ5hS7xbmiW
zr@3HpT*Fq3C0lLJ3f#^W_KdM)$>%V8UuQ!zG&<FHGX8DwFhidztE+|)t*rm#&l^){
zxn3RY<66i62qMqR^|!-VnQ7@JUy#K%#1*?yNkufYERk>MBNX%IbZ||o5kCyG1I=#>
zxHEROe?uP6Sa!nb>>CNE>`j8b$Qx*3Vi}sv$;IB<vT@tN>PGVF%+Y9L|D#!A{PY^)
zWEYCIt%25)gS;LfFA~$-Y&87zWzX!^#kBnqe!m(BFjo9RQu<fa9_lDvy?wt=S$oxZ
zC0@CF%ALlhyrIpeH3T)K@cTFuRh9k`Sq6Y2u}3CL#b7X$aZ!?PnDi8_wsTR7KMGL>
zy@<yaS)QwaoX>VX=PsQ-XR%E~w=WD)TNb=(@8R2uk9a!VD$5mCtQHJX_cZXR$*10>
zV|^XkA!uika^0AvF#i8oEZT7$;W*nkj-H2B++h_hftR=|*fQ<~u#R-3?HtC_eo5QC
zIO}<N0ESN{ZYR(9Wf?d%Bfb2|u&!)uu|<Pa7YQlT76v4%142{D_z|nUfdK6}d1_Hp
zFi<2C>R7mx%CG-SyWv6YqPkL$;$Zs{*OqplyTPx8`TwQvfjcIaFg!v2M}Pf~&iGM@
zW0#l^ky*rD3um_<KrTUTLRpYv-uxouTI1Hz+AE{4@fQDzTimVqCd$0RMWGW`-f@%=
ze*oXgRq1mfxcF<MXtz;@^+_aGzh3?1vXXIS7F(%I!+T(KQJVK|?kviBYHzCMg3_Ax
z$7`y=ou;ba!XLtvHZEg0sZH9-4`-x%>g8t@9}lhUb_emt(zhf56^rA)(0|h6rXmZQ
zswjAieOO0S_m?uV6M<BaRIQ-s-h{|X8xM{alm^3C76&~Mn;wCcE=VR^<R<{HA*fX=
zZl<~9cIN)O9uhf!EV6{j-Yyo!Jb?2wlk<c*ufZV!6(60tpI*?)i=i&ifxdy)IJLvf
zm08R1H`NO+N>XHaD0p{+yUM@%mf{UzLqiCaH%r}h)DF$paot!)gHghitLaOVHao}N
z{fVan(J44Tlzsr`dYf+7$5xj=oL<3c#?T!RZeU#i(r*p)rhm8SVEW=`nS;<VXt%>4
zLMM=>ZP+%*RlD0b<A<4=xrv?-dBs@>Tfr8nVa53PEzfUb*;sR9SEGx<JZzAy%H2Us
z<8Hl1l=C!HV-wk+8XGQULz!86m-{&7o6i7Mi|DQ|yLlfqrSM#Go9q1SKQen|p`zaV
zU8eG%OEh+^>Gss<1|b4d^rMKnWf+BQ7(+8y@Nnx`l~;C8Hw(Q#))3D+>$Vw+YsXE|
zhXa?mEZtv<+?B7XB%Uwhtm9TlHRAcb6rTvY!O%B!g$V2G7kTV>{}Mi*OFQ;mot*LM
zSZZ8AbgNKSu$C$od(Wzr+$7LpgDv}>>_lo%bpTOaC>jmDxvu^(Ogp8<WLL7w@+BZ-
z^aB19cNv3G1l}E?;s*Rj_GO+yhvC(J*<(zAW=OcS;;RETKTDq244-;V>r1U5dZ}i-
z=@7FpMz#cHe0nqVry6FIevZQ=dbFCk&_{bMbMpsfgy05`f=c@k9?3MD&*6nY?8Q_m
zJrR+?cZF#Uy*CNr2FRh(Ymj>G>H<^n)(%b-t#F_Hpb_?!=zbDkaR(`lA6`dqnFwoR
z{+;~JvB&1kkNVy4TPM+!`8C>G;XUjC$LBrF;7$QuCpJ{{-=?yJm`4+uo73pAE$Gok
z&27mOsLgoQPNR0;-+eSl-S9?_5RD&#r}3-4D+XfdCe<V>(A6XXY-=N}wHXZR&(%#{
z@I4}$K|tXbwu6jo%k%mBULv>%dibksP1Lc3tFX2v&zK1^G;gB0I<U^g7ph-BUElpR
zW4}a*Rvf)&4DmU1ILW?y2&!95rXH5C`6^8IapGl00w@#Rr3Cy35AZzd5HMz+qneC`
znE@GvdGsA5AY8ZDe3D?@4Vv#3mA<#_E}8FP8^!&4UHH?N@js4?|9fYRVeFi-@pg2r
zC0R@f_;dprOO}_oGG`$>fliGtFzmExELAnTlKiBMU8^(g;mXQKG4l_Mg2iCf4IOkk
z{KIX-)4wnM_u#%0?hf@~<#QgWOFo90D(lS}DZOs;V|LgO596@KcsQ)*OlQ@bA6G)^
zzlE9Sh8me&kK%kW+4@ko6hpK3BC~P%1E`CqLRd)B$e7xzDTi)<@&`&=VR!iaWxqD4
zF)%kg*F(S<3+<FdYmxH%ET9j)Y}73qoH@gKR<~$%qTT$+b*Ij=4L_PrGP_6E`N2U!
zyB|{)G%K=yRJF0A;Ma2%49WBkfx-A|L$`W6Xuq-DEZ+8{oX<zm0{BX(=EUj!68#Zo
z{ECZXu8n*fZ|y3D@f<(h7QIQ0q1~qSqQ$f@<wGE*CL$!{0eBA?gK#tqDq0p@s~XGb
z7NE2C75*1G>k(8mz<6mIJ!jj%Q)Rv{>Fa?24K2m$bbZctH#E&*q<SO~TJIjdcpxVj
zzWVZyv;JQ<fc?L|{lBoap879-ecyk7m2Syb2Hx5?+QWZiHMPHSVadk&f7S0=Ok&|8
zPNnrf{Tj5`-z6PpCn%}LjbDz1G;X^+xm{pAo~rM>4Jlz^=OEy9#~AA0*~*;e$h+%~
z;j?z$YpL@O9Sv_yZX3PWs;*CM11BQ}lf{xvlC!f_0-@FHm5i}TBp3O5zig@ukCm0r
z<wITAtb4S0)N%MTk|ZijA8PeGv+hy1@&}<%8dBb_9&(#bXA->*egSm-D!d%kbA^k)
zP#{%Z1cQ<CMRi(xEX#uqGU}8iw}w;cFh)X(^dt0S&IGi3nq`JRTkd9e@lQEPsjY3P
zuh1BHwDg)GXiGr^ECu5v_JVL5hSS<`MDz-2m203a9!&TVWK!!kfO$1^V&GNMCU*;X
z^{;G(=YHNLne9Ni2Dt2QUKWiIVi*Ouy-yE(;_ug6&?Yiy>pp}<Jbn4O7br29;jy0*
zBl6B>Q{HH`E=%G~79~>4q6A{|q$e^Y=B&A)HDV^4vX5g&!lo68hJs7kFz$;tfdT#F
zbDH?d51s>1-$j!weY^fit=W2{XHjf6>ZII6JV?Y-W^&}~5h0g>{_d|khV)Uc<mH`~
zCgq?TzAq9y1x&_$dT5Z?<fBO#9!csvW8~nky@{t(m^JpYa|<0q;9lOYQV<}z3?o~?
z!I2WEP2|Wqj^8qf?YI%Y^hYEo@XrcA31{U+VQ|Si8k!yU+`@j?d!B-fk>1+<(rUtA
zvxEC)0B3N+<d#a}9FZAoR?XTnnqXI^Qx8WYts}4ALqbr14*{t%?g*OrZKxGz8jTg#
z9NihU6l5Nhz05yLhHOterT;g+0u~M*dE2{6sBV&AG*0EdA}Dgwz+~e=;LI@urNmKe
z?xN$jON1B6*v}sv(>T<J3|sIKjhJ`Ud4Wr@=uz}LPkL&**nE+|nBQ6E#>Pv8Y>B-@
z<4>L$$gNK4b>GosFi#@Q!}(xb$(egH;b#~xcwblJ-3VqtF+~{V_$!1_#e<j_);Zu@
z_+cL6uP6`xQJ}QfO59+;F)GF0sx5S{`-vr5;IHxyrBA@0>GWVH7aAxur^*KrTIr@d
zatlQ{>Y3i6+hz*FRS#cEr*~6O=<2c$NDP+H4w8nMhSYe-!|FfPj1F<c(l3@IZi$|g
zu&G35K(AbeYV&heE3blFK&PG+^G8xH^i*3MDyS@8R>9JG5illm$X;{kjAb6FQ!DQN
z#6#Fd40=i)NxAM2%rR)9z>@G6w4qrKmHV8Ko=ZiApR>@2kz_$N7W_g&Fbo$At6N^A
z3=z2%KeVC4Hc(YfjAsYp>PA~NS0%dY=}0|b5oSFx+cU+mE8ClqfHm_7AE65aT=nWJ
z&ts_dv}zMz^B3cyo*c5yl5Xihz+(fHf#lm}O{KwD;P3>JB0W_tQ_%vIK3JrIqfShA
zn+DRgZvc)AxVo|~qY*Rd?Nqu~i4;nyuc!;WGh6WiQb?hHgC>cZ?8UT~h8a=l_F%6b
z+k>5VF&IMX31p3NPCr>6>8VW78!L8n{!Qy|^3Kgj#jhkTIbM^v9&pEuR@Cf5kBPDk
z8cS1c*Cb>qmBKjW8u%PozmT6ev>#LMJG;5zWx9DHyI%o3zh?xgr4ZO=j3<7;gjq<l
zO(tur4c(1!n&Y-LK;Ysv<2&H;E=#EM57pKwhgFGmfK7v@*sp2__6m~3iu<EANC)B%
z>sFW>j~O$*1r{u7yfrbX<381zSgPl>;4z~AsW{<PG>kxhBgjr?Zjl8)N}_|I&gKxD
zOXmYgWq{E#K^~HbD8*zhh^qgIj_eM~&23g6aNFWxCixJCY0;Gfzw?XFFKCgYza5-I
z09>krp-s;6hqe9c6Vm4JH5^AYACVRu4yUsB=7bIeJqqW?VM9Ba)?Ydn7Q%dU#3b8J
zr8+#i3e1(zBrhq18epo%yTQOEdokls$O4~}Pg+eqhqvDO=6U?y(%|lQTJpiLvy!2&
z5a#qw9<sFJnc*X_JmQ(8p&?Xu1jV7#U<n+&^+YH)Fq1%ClUCi8NDgI*V>n!;t6;<h
zT%#~9VH(xCUmNgnL}AOrS;=k8HkXXy?`Ia8Nou4xm*hOA!MF--IPByOK-eAI!c-Ng
zvid0VjyUy?6bu|txX%5UDz$6SHQpR)Zv?uY{FH8oz&%26rouQVrAyrz?NNvz6HRLP
z1`Z@qfgR-t33{m1CtH@v7NmjFN`7e8zmPD16M;j8O&vr3f|?WT>mkf4h*2vv);UlO
zM%}H#XM`f$qDGBzBpCe`_K_k3!slLqT;$jeV4-CR2fN@NJ#oyUmfDr9I~xz%!JfA3
z$#;SZ=lFz?6GUyuqDA#Jgk6bW>mM>i9Y9EQW4OS%B9V7T5Nqe*lLt!jjSE|KEK_=c
z0@GOCi`Qr3`*t?)yX*aWS0G#fO{qz?-x1bedJHGvXZmhNC<V5P@A~C-ud(I+#}!H<
zHvNcZGE|^klq=s#;-!22j#t>7QB*&iLI#?>4I{8$gH1sn*1kQ^gs!kSAvAnO5Cug_
z-;w~<x==H6lGb)eAi4OrGbSS{FXn3`<j~<bKKN_Hc(F;WIN_yE0v_;fVoD{$2WZuC
zUFIHxoG2>8#K2GVXp>8%054g~B&(z+9Qxl8c*NLc{--z!D|2%JSMt4X>RD!EWKtX?
zwP^Vt_lZoW6}#}fX}9R}n=_vPF`uXY{10{x^$d2a%K|;3U)cdoyiIxpaFNdEMlVA%
z6mQ1+GnS@^sNV%kne8pXbq-+rMg=vA78%e-vY@Q&NoF)cJb6&txH7guB0yv9wo~{B
z$WeLO0q@F@83L~0nmP9nJYIA~6oo1D`Su{#(%Hen*tYqBb!oE8G^d$V{G$V5N^(fh
z-X<574cYpbm6$MinD*lZGDv$SbCooZ<r^Ye`;4UX3r617W~(efi>AV0P#{6F6Lc;k
zPYSG$Y%y#yKsrM>>6xROyaa>Rr?@;jSS;U!jK5&)@f;39);FZc9C9tTcZJLvD9_z~
zO$Acrg|rw_ll4s-pYSUs_4O6EFFGUsS|WCWqcczks$}YqYL3l`)TMcx3#iRa-wf9a
zJTd%8?(~@<+@voQ1on#G6&8g34ig0$Sm3M6-n%W{Jtz;I*EoKgSyDm;_^ome5JCbL
z5_Aum!ZD9K2P1k|0^@aYoPrn63Os#bvqWUcopTmt9hYObo%|l7RpvIlN=^rwRz5^j
zKnD$V)@{6rSiBJ`oXNMdTU}28m*f@+x}T*BFjV|pTI-q)BEtIenkK!8V|(+nsJ3?A
ziqSW!Fm5znTifp&li)euf+Raw(2psTC#LvSZprvB7mijLLH(u;JxZOlwt#?+;-K~f
zW+_7(1{0FH4C%d~5@j-}apprE*T9*(TA}gVRPAt(zl$TkD%%8>?%FU=70kxvq8kxr
zO^-%{p{0^ucRYtiL4TEng1m1&Bji%v?}UM233t3f_Lw)1y$}3IU!1Z0n_*vum4Dug
zoX@q7mw!F4nb>Cp^$b}D-m6mNjzyna_})3JR{CRQFI|}QkJ_`3HUVUb+B31XK4GQn
z$v#&;F(`P_^*~_zN}0D~WtQ_nL-j%-XL|gwLXAAoN2P|ux(9uH?6TidZxp)rOKy`f
z-{Fw!I2PIv@3o5!1@MI>%HeF()ZvzRd5y2BZEBy7*iNI=JSI4WwxMdd9yg!ya720z
zI5&qku7Ty^9&PSdm$FSh;n|X~i(O|>nX<zyHi6!%mroa}W;gJ}N8=c|zPT#&USrM)
z!Ov?O^&lY9qQ-?+&xgiTR*B)LlpoM$C)}J2^L;r~56)8uA$`b&2)_dOpwG>rcPtdm
zwqei5>E;G{;eX34;d1um<B+^BRQ)u$dg@C)hAWR)5SSrz(<d9b2rSOzL6POkqR5!4
z@xgt^z+D?Ahu&-eg~*1_jkIzv@#d%rNsthj<~#&A_>H4k@{Y>CJKWW?J4w}=FH0nx
zoF_WEWofeA7z4?NfLe1)ccNuA6W35lDwP+GRVgCmbcP#pedT*U#&Z@)99~{4rctxF
zRAt<+`#GMHCYfl!=9U?JGMC+-eHgSFDiCU?7t<<b?|&@s)>r*@QQI9}h58+E&x*TT
z{m3Slj8_Af^2gG4-q~;rtm2T7a?^6Pdje^_G*i^B`5eMhr}3}N^V~EidTrtOcm>}9
znz(CqXW>XnyQ{aKPw`%*cYSq>A=KG&2yGvPxNDYutoTh$l35>JM*Z&$cPry6b~bgD
zT^yt79v)5=n`QdJUvZyp;@E|iALkLpBO-5lwDWC-+y%f%kWp>V-rfmKVm_tshNgCy
zc$7%wKgO2#ThtpoFRr$=_Ya{n(<q7Oeb?FxzJ9_i_qfR@4!u(4J)>9S38rf-ep+Dj
zMcw{dDggDhL{rvUSmdtYYsb6jj4uT%U<fW^ad)~;cTd&Btj9}VS5BV}b59~KLP_5(
zJ3l&bKfv^W2qT_AgeEP>d`IKM$s2}*Lp??>f@+;jC^uQ6kUca>4pU=N^V2AZl@lZK
zW)(`OS-?ue<{XXotS*sLs93<ze?C7#2C=Wa9@cjr>7h?1ClbEJUk-!^Kj;oQe`etI
z^Dp1)<=%9u*m<)vkmDh;`MCm5DhhPk_-U7})3kP;;bBA&B0O`bq+a`o-8r|JGllK(
zm$PcCQHLA!$n7gi{}DY)Aa_Okx}<k+9&qrx9+?k|?~Rkn%u8L+s35I~kn?5`Cggl6
z>dHZh&ZDen+Ienv@CO(?DAVC?rxIvrCDL_lJY$Yd-Q4@>CawzF221-Ygig}&IySd%
zT6m+E>WHb`>r=@U^+ZqN$f3=(-*pWpM6~x%;c3m>#VH?`uX`w1C-y}-v|dPT1+-YY
zRiIc`c8<r~0b+*Xdn`WTk8dueW3giRy(`-TCJ@V93FG(TB8TY5M=ff-VG@P(WVQ07
zaNE=r9>qqk=7-q7)P1W^I9KJ7W+C8yLlqFN?`x`zPLoir_0Vt1Esy?IzO^w$9a#AS
zvzb>dBLD^q3UQaZ{T$oPO??Hiq5mpjxi{9V-mos+z25#~vz-BE#ctR;8$0xAr;Gv!
zd5M;?cg{o1ktsO442PG_3hUu{u_ZN8UF>C^eNrLDxH_M~@4R>-c-CA$t;z-`g$4JT
z$zA1O2l8<5*wV&E;EGl#N4n43@U`2FBkQhP=oF|KHA4^^>8;g!n_O6&-2O|nC?pwW
z^(!@!iw*GpTLCkkQh{xBHuC-^^T^G<1fxG>`8zv19^sqQY2q5r@b7-kA`&~{ht$_m
zq7}}yEIBJ{E(~HyYJ99Y=lat%B;_4_%q}GK(B?24<{k#m*N<2<r=`2WMqX*zdHs~m
z-o;evkeV}1L&7j_+$-mjI4-na(*ukyW@Jo(%DJDyJ8H=zPRR+qkF%*wY5_vkfxoOD
z-+SfuEoU8{mV_2Ku~@@&T&h^G*vqQ#?o^Oku3$jKOW=f;#Tuj&yJNN6#)2oMl8z*Z
zTIy4oUSZ;B%Ld`r$w)zPYXU;YdOAK**L!+@8&#y9%L{q<oNmsI8Cu15lcmq}cGBA@
zQ@J~t!4W()=AeS$>iQhR$lWxn#Mz&v;8XWvj;&z>e?&@}{$^4<^SH;-1gAD91?tJD
zCAs+(%A^>I453W!%Q4fgVYpq43ru}hRz8b$)5eS`mIDQvYJH=GLdl?l0kwCL$6G+9
z0$XfaT$$X*FulkIIx~VdB{4*LQ>o+|(-tNXMW`pdlDd4ujF~6CEKm3fB8?fSW{yeh
z8{W=IJ%>?bl-%HWe^|uR-K|=3AYrUxjdA|7es%x>28#w#Yu;+WX^4RD8uuRB)DHRY
z6$quoeA&`r>^hrVNDVD6tO@wR8ZybtxJ2AYg2RyVFzI#TW6mMNYfH1hnV(CDHp-CP
z&r5Ma_bDe8C*GNH5Pm0u0<7#shPghdx)RBN;Z7=i!uX5wal$6ylL7ZWWMmBcv&3iR
z=B=4lx;ztkuf(lp3bYpAd_sJU>Q9C!TCsfzO2&kPI%^v?KirK#F{PcC`b*LH0zSuj
z%gSJ{kw{ZgPA*Xlw{x-zSZgpGdQPGq2ZtsgBXo3%*H}sOb4-|DqJ_kUoRO8Y8zfpV
z&F;9M-?TGhc2NBF_*bY*kpt{{TD)x&l|MuvG3YBm86Q0DQY+@?AbK6#$BtyJ1j8j2
z^Grc(X=p-dAEzu!h(VF~buS`L*V1WCYltozguX@bUVzMyFVo1+h>3{`@5!{V@ulnU
zkrzb}nNS0gs;PuS(R-408^~fg^&(Bo!#IhoR|;*^-0Xru+sB(*gkG{?V~p0>@Q`O#
zz46>cUHCSX(-y-haG;#Q<Ta?E`e?hcoXY+Cwv2YIJWgoet4_i`Dav~*2Vm^2gKw6F
zLWjVpg|#S@4>2-A<isPKVY%USuZQk_tAwMlbFICVxq2)kwL4a;gvGf4`$6WJw+7;B
z>oko7gi@e{j7D4TI)@@QK?w9(=j)&xx)$zkOH3xc;V0clX_!<?wT;9k+`Rr}w!Pw3
z$Zf$fQ!vxy40Y(2A=S)rtzDhBX1qrimmgQrWVvLcbMhqi)pq?raw<1S9Ma^AB*JCy
z3hP8>Z0VVwo9!}r1<ryfk>{_@l1NzHp&n7zO+L+CwD^AjQb4W0`j`0-Y~l(|J=t`6
zbO-8JX{HZN7PnKkF)iK0qU;y}&kZbAzZiUPQlTEfT~xE(ANU3bw}bD4!_;-FVc12f
zjcJy(Blp%^*0<zrG_1J1X;X!Vm;VlNXtuHibxlU!P0Ryiar1}MLk!r3a0(U&a5(ss
zFArZcrl6Y2!%=?;-8zY-@<QwZ)f7fwwbb4Fm5#m6F~CjjBIK3PGY~f-D{g-{nWYL2
zmpUYFLbZbKP?eC_*$3|Cs5*i<DXn@s%DHgql--mUtqtT>af<N-?fSD^#hHnLURa@n
zU_iOPC7CnawUg_Oh>bPt@-XBrYc1u@%$7wIPx}3{z5;^5R<w4@Lxj<z{PNdB+b8X9
zRpG;@kqmp0?BU7@En}Jn1;@kjf+l;x?BRGplY6!8VdM$OIQL$V#M=H>FC@QJ^?2PR
zXUh65Ah881?M)t7dAd3bOO^LCo(>We2e<j3+dfT#h`?{vn6FiMZZLbwZ*}<R<G)Tn
zKF+d>-yeUyfO(vO!Q0~B#Od!Xku7<V{h#>fFZS|nD_GR}^UKABJe4$4lDFh{`Y)I%
zS^5`JvYhhbH;aCVvqXRi68-q{KW8P$kKZ33f0g|x(0yOPLVaWU31{rge&(mpD4uZf
z<xh+F;NSU$9^yAz3^2Q(U%%4tGZ55)h*U!V*HE1P)-U`X(HAggvyUGhq!}0g9(~Ks
zev=>B$LU%2aRzPYb!XY>?-wDz;Y&pejHm3Be;3d}oPPcK1wYdK<K6s~E;4*0h?y~-
z0h#R(clMidaEm3GC-eu*Ye};oxMUxv_^RcFGc;K46OljX<l^EY+ij?LX)O~mC&@Hs
zsonq!`74t<J)sQR`#q;`t!w?n69;v2`t9^%ftM(83B7N61E*fR>9-WEkB@JsFicTf
zk&>pI^aj((_>k{0N$=jco_?|0*a4?1E1P(NR|IjbqLVLX1mSKy7s=PJ#ozCl2s1FV
zmQ%89Uf@I8GvJU!(H|!TXPm&cHg!I+40NKqefjhMsk;{Dwv8nHS0p5*0LKwb#g6R-
zgF`8bvw2vNBFAwyiq6HyP(lm>6adPmN&ffyx@QI$fS^{s$6j64t_2JRgPxv#eBIN-
zsHI6~lLp0=RLv3Q7vbfVkUoOsWCGW=Uc2=T9(h925cAOSA34HWVrKz=fN(Ab=UIPb
zn7YrN^uL1Wh4>~uG*F!P|M~?+Y#EkV0NpZ!flblPef+fl+~e0X+&z8%1h3~b(9@?+
zphdX)>UsZfo*2^AvuBSzF~-$%yd(;`_}g=IoAdVyPb4(r(KC!O;-<tC3mW$5>5(T+
z!%JtJ42$CDA%n(oQSr-}CX1N1LCWE^b0sF>3Kzk`k52?Y3FfZnXQ@1!{)**wFX?ua
zWr?7Rf>#TSss<10W>I}bjlrw85z{U+;8z2Pl<v%%V2JdY4lqReAPsYO`(o_>;bG-Z
zi2=?y<6ozcxii@BLlg4IZah>I4Dy2mx6$tOa>f3HMqK!_51u=6Jy?Y~w8b-)CG*F*
zgzI<#^nitPV}ag7`u=Jo3bCrEo@_i1c9=A2PRuI8iI^JmMe<rG<~jiT&W1nzF`SAU
zTDdQe{^r#t{HzvL=MgD4$>lIVF5SMjsd^nZ4O<$*o`q@eh?$1y;kvvTWMAilv=<(U
z4F7oYGQA4Pgb$zq8CGROFV0$aL3s-@DPUO{I*wvfiqY9#7xN@8T@dE2*HECG`jze0
znEKK@AipJDl_bCMdOakEq@P83m<5@p6(7qLRTwh&u~4vd@MWIZ&vh5C;t35>wXzfy
zVSZ^^4v($|Db$u&2Yc%H)fNBU$OH<UhWkeY!@POehYFeZ2g$#O{XuegsD>V4=;Ugk
z#v4V)ZY~lp(4&qbS2c)vujd7GOvBvc{SD~cAA9tf0qzHLFZUN|aT8C$D-7Tb_Q#s6
z{IY+wUemwC9Qq4RTD|o$EI{R7S)4MfEBAMBfLqw$g<mX2&_DO^2>#4n^g`+;78X9Z
zYuG_HmuJ(cx^lf>%OmJV+7&3NxvivTPeNx>_D3b=k?K|2@6#fsizI<0!Kv{@_3(%u
z9_RUR>Bj~Cg@hQl)of2ak}tI~G=3#7r7wZgm#$mMFM0H8ZbTJi-Gf>VI(;Rm+HOqM
znrGo1iENHPmMz%lspR;RM$*khUNP&PTo$grhCzt0Q?d`l7jKKo292PwB6DMyvk}(>
zpO&HXLkemDC(FI*FizlT>xF!y)RiPmp@D0!yveiodxRfe<T+$+sZ}?0%v<*KBe<o2
zjYi}+M&Xvi3HBV%+@@Zz9JGhcfI2HOF77c_5ghm<rzh*)@9*txr1!`Rtam;%@Jc6$
z>GMcs#(5n&mjI7Lb=n^w&}Fk7(sX!)6?7g&pE*^hiVP!ZSPlL{O;q*7rtRI%`N+x`
z@fZn$ba;-#=G0!=PLME3YJ6ZJhxz!1Y%T$^8#1#HS6Dtv<s(x0lnf{IJaSk$YHp?h
z+Im3b8M=N(T{GSFGwPaIU9$jfy$teRllC)BU!=lB69Y&2bxVR|<mO%OoC(D&90&B{
zAJASg8Xxioya42pGd$7k%?UkKcYWxVXM&UZ<*2fGJVcBk()y*iHAD>Ou`*nRq${2V
znpF_`AQi;iKy!pzGN5I6tsE!@UOz0oz^xo2W@|Zr3Dq`(E9a$e$Ys(1{Iy7}lDVy!
z&abFOTD+dQ@q)S;tmD;>)cUEL))3T0OWISH^tx(tL>2eJ16PyKGgF_}bM#aYQqN!_
z$Js=_zWBkKmI*y#Z>0=Ej8Ka5ePfaZ^kw4^k(n?z?ic6!<vr(%UOiOr3ukYfEt1Jz
znw5Jaxu?E2@%Jbq+Qa{n_?=9ad*dOn_GE9g+#9C&8XOU30pL%$hC`X+B}k<Ig%`w|
zS}#B|%yCGPAJyNCl!vSvT70bLKC^B_R!^TeTXm}2tyV-3wiJ-(wG`@CS1Aah1^B{&
z(v{0AEzhe$5=flQ%R11l?Hd-!jzFYFXKE<Q0l-{O<9zmOK1_?4di|PN<B%Fdp;p=<
z?}u7f<4(sQBjwQp*`f1s)b&ahWkAMohq=4o=YLr}Jq5M6aU+KFxlAW7<D#Tr3=7(Z
z1Awewd$$bJObKq{tz@ZnPz>|y1;Oyb_{u%tltpm^mt^yYupOI%X`GZYw|uXKeaIk^
z(?yV%mGN|G2rKMNg8_&#tUj&nI_w*Xy22>17#SdA_O%>jfPv)D>lX-cgOn_PF@*Yb
z($bt|%3xr_IO|oo?^<zoJJMgT_jO=7$;SM-?UrT)W5pTYC?8t7`UNdSAWUJrlh6Sm
zXCvW=7okITWlWXe(t;sx!6hq&p@)JRms!447G}L(ZR)&*miLW?A%15WFcwO(WUmnN
zzgn-~K$JYKEX}b+YUf?lBIzFK@GiclUkveKKJsHagQnFCz?hwM<x!5)NlqXB5@4K=
zLHE-qexCxH_T$rR1W>m3YB&W*Qyumj9Zp~<5ps7tdBc<zd*?TFJcUq6b9V6AB-pQ*
z`Ei@Cl+no`8BEabN!OqIHIFBhpY;gSN`z-Q3FKH_$Z0MCFUDczEZ|gQgxR@&Ez8#!
z=|oAzkQj}4yIQ6q`X(qiYJ#<WsdQpgKTe{jK_V8I^JqxFjs*++&IMSkZedUzOO8$(
z00RD%96Lr9j1h<ppj=Ni$;OJD*s|x92i2a?Af*MwDGootJ}of&pYb;%4XZvpsS}E)
z7|N$jyle&lY0^>d<ENeh6<>;x(v4{ddtOujk*GJ|;2hXMoSTrv;6^d^TZYCxuV-@Z
z4|ybuFxHkXb5U!G@#QQB_X@yC9-qB(U|2BDdOdT&ZuPQfeen#ephwVYZ32!tN;c1D
zI`4SwQM>pE4v>LgP5lo4L#es*vvWtxg=@RCGWzJQ)MNwI!7u^H*xPaoWoU6J4R0-6
z59uH*87dH*hJBMyyR~qA-6><hsXOIidYBCegC29J1^h{fUs+!2a2F~*h}-b;jz+nv
z`EYG5#-c|czUCo0gH`EYXC_j9A6jmWEgcc#zVE>c9~`hniHrpvP9`tzux>^~+!Jxb
z0Djl=7vc<hM6&Q6Q_;P0Im_<ky#sZ1;jx(HZ)w%(;yhd_;SDM&?q0b&p`6V3xts>q
zf=rjSl2s59I_IxneeXbTf9AY8bWhaF3w`PoBp{215Gf&)CQ`p9;6DswwiX5cvRrfa
z!K0*vUl~$&g)YHRaEG9PjR6`0aboPXEQ^1GiG-OFZ<Qgcg{r2Qr3*IjwhHj(J-Dkx
zfs$A~z6}#mi+o-)E#7E=)cx@d$)d>RoX#0`bMxZG`OD*z7yoL8YMMTkr}{O3wFmK4
zg^83=yS<!Wg_@h6#>x7ViksJ2u*5&#49D+mn75>a89n_j%ij<4N%I*!8ezzHP2<$W
zD>Y1+`W2R^tpIH&zD0EKJBAWau6_fpnhqF-6i@t4#2}P)37aOYogG$j>NoMU^(p?0
z^#LAGjaTiMoohw6L7jlQ)9na%!HUBxNda82?Sq{Cj#SV7Bd13Ro{doP+{52(Bz_2x
z7YW7XHVyCXK`%C9yT?Vdhn4gE%TBX2G7%=3K)4!Hs1r4%Wzv6W<I9Gkiu(t3oWM+v
zutW*_P>=iv5w=Ta|8l!N=k+Mqw>{2xZD|B}`e(@5eF$j$F2?t=4+vv9zDYX~VO~SN
z42UqJtt-Y~v<Fh*N<2m6$ZO^V1TXK0g}|BTm*Xo~*12D=FyQ6fuh+O<-$k`RBNvNR
zDME2@K*_^`V4wEJr%l{8v2oi8&GTdnx1Da`wv!r>oK(0?p+bU1D!{jJoTiTQY2gnH
z-4jYHlR>2@)cd1h65|l_f&Hz&LOu7VgkwQym0*B$SqUhUGUR4;NsXKfq9#rb=?puK
z_YtixVdza0o9&iIn0lDb#I<NELw5Xw(;bMfglDP!N{UcCnp6h6{AWn-#725|KBT4m
zK?~zc+8?OEUS9*fb|2~0Sg+s0c|du$4U~t;E2wwIi*k%bIr9c*Sdrs{gFgUr2Woqa
zR^u+beCf_S3j^M^ao)9!^OhCPyS8!OE*SSM&>5q+>w6Izb<>zq1GJNe0<@V8(6%{W
z<qB?T!}^s>B>ljn>yTDL|0$Pil!~|eU<r;(ShUds2*4q`MB(!eizQOFS&3UPR)&9Q
z<HORVfHXeL7|!T)i2ie8!J2OILtNJozXq%+A?=jm4vCDCl@F`VMKP<gA^2N!AQh4u
zH#Z6Cw$xdak>1`_P9!EUI8<P;#3NDbLRv3PX28qD^>$*unnM-l`xh`tbBH#A#UE~+
zlE15*M056oDlLC^8DE8%^UfI?ICk3s$8PU|W48~0V_G@N@U#<(y$2K{R42ND7)4UB
zd&>vGu+!ZzY}tZg%MKWJQoHf*)rLzm88M4fS6vL%Hki<!=5?65M_=`ydEz%N_;~G!
z&qFtLzxwL&Q*?44_o*J`sQ>KovnNN-zkKY8e}tX&I&~#dR9^<2U6o>JBi7vo7$L&{
zgOw_9_$4&;6ZCuR@<X{^cgQs4F%F%#Z&lAj{5viW$LfVcr?-{mLsv!W+XWw1dmB&Q
zzOC%jKQ84}=+eLIb>Hh9ZCpSmJcnl5%V!nL)oEUG&|8V#%u4j8q#XT0{&hOYdp$3^
z%<V*PZnF6<7qtwNL??EoxTFHEE32$wy`~n=m$SGmW!FAhy*H3GB~RzP320~2rZw+O
zde{31B_$!1=E<_NqD~a{1K$3VVJf=v*VeEcl&Yk)%asH3LRAe=H69G%4Z*7v@X8cC
z)zt-cp$$l)Uv8XeQQ6Aw8s2hln9U0qX!u9PT97qpdPcwc|0Yh73ptkYom8baEqlkW
zT6A)9R#Ch%)h_KmTv)?b1J{iK+sM5S;Xfiyo37VKk76_(JsJkFvVueW8G2C~_5*kK
zCOp>>d@g7ZH(iIcA7#&sOqi=bO!Wk;{s4kB-(1oO!f<;bE!s^<8^WrMoB1b(MdX>r
z7Qa=^k_$pLd+V|-KQ1oh?E>Mzgi51`fN^NcL8mgw|0!jX5Nb=A%H7J8jS!yP$;mfy
zS?I_^=sahrO9Lgz*>7|SLyU)6`g%U0=k|7)x8l`s`)k=4(>tJQ6oT5NPJVO@O2b-0
zU*0S950h9EyV|r2c#S(|99ji82tYp%%7$uu8&CMZ=wwR`52Y<GmR<{B-QW{j_;Z?D
zo-TZ}<m{oe$%-}!+P2m9bvpZW@}|=keKf3DlU@2z4-mBn#H+5Sh})%OZe#XF%S5wy
zNqUjI>|X`aQ}nSYYD1$~xUH6&#Id2rC}zH`n6MmTbx!C1L1HizQ00OOm4h)b%ilXh
z=ohydzw{?@0i3y{>cvn}+4N80-(BY-1E$XpzgM{efd3!sR!RlPZZ}%G#+@6rO|=i?
znL`bXl4^CV&|q2Z7MdoiyL}rMET&XRenj_#vf}jmrS8K)woqF`@wkE)Zt5>mh1NoA
zU~Xvcy><*quF<3Q(8^m<LZD>v#OyD!tURS%%#M;`E;FHGC$Y#A{yV4BY*aii;^M^z
zAeulI2yHgHD68DI2kHH4TI-xrFq=nx!A)lJT1U(+LRd>!+dOM@wWWF||FG85`h3$S
z)+@X5n4^l=7PmEpU9WX@R|VY<vJ^EB+)gGmMXU2`y0C&u-gmj!c4hF7zEMO|g}&14
z3${5bnv+##p-O(tNXmk3!E-x0*99t~v8=(a_1>_>ZIJ$xMY=I$L5FcumRqRVZBL4U
zW!bW3){P3vcG{1vatO8?b;*aa9}VUFFKd$Rw^Dwp#j(+5n=dk54GF}sZR8+Z1FPq)
zkyT@BXdxdi-qk?rd3$)(+C}<KQKnVhUODD1fo+k=@JK!pxwKPUv22uJwzfmK`l(e)
zP9+`M2u3n!A@WorVlx%Me4}Id-&~LR5+~9Mu5<ZyMqlEdAsnFuf}|;srxmL?x|K_H
z4y2-ZC>v)ElyXg2v$*E6%oyTRaD{-hJ~ef4kncJU@S|^BuG;r%co=CX;b~-}{A0ay
zU+E<6vQe!XrNwfy0U+k#&u$rQ*I=a)cuz5z@-bduRVAiY#Uu5qOWCUK8!xD9n#Yk_
zxOC!y>|M~FUMa;&>w+CE(i@NpEy`VKDylal>cLZQkcK&MzeVI+@TMVGj%?^`l9kiW
ztekdQ=d`mbr=6OdcE%UfK;?dPkG}^8x0tl57s+&m!+Na<F0&wIkHjI=m_@r#qCIbj
zb|O2ELXiBr+sgqDx>d=p`ZFki6EtRuH&LjOPWt$gP(fSJ=)8}w4j0))IYR`KbnXXS
z;8fn7tV(h4v^Y2@^nzYmVG#srvKY%ofxIfz->33nt{(O*6F@o9(lnGhYU#{DI=#||
zG3k|>RJy1L%fd08Gy$&Qzr;2gIkWUTGwPj(d{_iV<XV212heqVC#O6YRn!N0l_;Cb
zuM5(5dNYi%UZn2v25PVZA+)8$gal(z5faQd6krm9r@_HlmXLyro8$*MCUZi}C>l&q
zXMzf#b}<SIoy$F<^He0Bi6IE#{r)1NHv+ZJseyiKi-HezBvf@8Bozc)7+5&mUYln2
zPhOTjDZy1Z0uK>T0_bzrRB0+p@aVtmN;Ob#qTTx3$F{$)0O%(hL@NEU4I)`w<+Kcx
z0aY~y%B#l>LmhRt2Bwu(B1#%|Pe1a2rx;g3+$>WBUr|9Z1HAH$$0nNJgS3q6=x$Co
z#zl$*cZx}d9Zf?}zz%fOZ}DEKf1=0q`9Bvy**xy=77BZAfwXOW86&n(bBc=2vfLsn
z+}I0>U>>zcn+rThqJ*Ba5a08@lDIB#SMR{ePdWy2D(%B74U3b83)|0g`FdTmZMGd!
zFDirPGS-Fub$4A>V9pGAHX4}NBzK%`kU_JsYijl1vvh(b+A3!KDABlS!`_?!-@3{v
z`up^?{zfI&CSxqyDU$Z)lS&7{`(@Ca->AmlP$)er=9W6+Xe;@8ZSJOdHXG#OnAAS5
z)!sg-p*30A=`keP*aF&x5;-YHf~7KFO)Z-ci>9H;H%cFN#5#+@>~t{AXZNi7|KXm4
z#-ZWwCRtC&`I7}~hg3;m#zx><q27BU%gqBK$79(7BU*Pm3>P0^;QZZe$4eawPrIqC
z2P(6~uiwdzWDh0nZs`ojRBcaQ$myW7M*o%&3wqw^NcCEVw=I`%AQhRmROT3pJ)f@2
zk*sxDdIAvgu5tGH(lPxV;h5gI)P0>RIvZX1B?Lv1qiUX7*1eirNBMF^wcl=a(x)^h
zeMo^MRU&+=PBT*?WmEk$!?}7UC+l^e_fbZRvLx#;2MT&y$Ye@Lb8c__8BXr+!#d1l
zIs8d3Nu!5JsjtRmp6E+H0E=s`+~8CCTh!z(?LAdaBk`$#@{V?OXbC7AzU5Axp(EI<
z@yaakTbbJ7Tg6UkbS;CF*T=+bg^D5P_F^WDHLFI#O6j-g>^=QTOSPO=JI|g!JlISd
z!RAc5$I>lCoiy?q*CQCu)UWG9+%eZ+Eo`Alpwv`4G7?7Ef|jo-!>x~G;Y-)L=Zd45
z<VqelUazyLDs~G}4t`;G>~+*D7%g}`v5a&2X#&ltaK5#sxmYkxfl+_6OK~qAqPQ2N
zxaj!?ihHq3E-oE9ntM1_|CtTvswo}Le0VJ#Eg@6_aVJlzUpXimWpU~$)y2)LzOTw<
zA|XBYZzGIwr-DX0RsoR7J;iBgr4A>2cGQGoQ%*E+F!_-$Y0w)brf0U89yi3aF)!h?
zsIOX>M*2Mo>j~3G;;gB|rJ)U%6=ig-enEpS)G+@WYH&&h#5yjbRN;nxs3zrKB&Y$y
zEF2#kjH~L)NA9KH`?o0kkNx2D)yDNM|GZj1`t#2#@6okz{`~XvBg$`uvsSR7AjV8E
z8=x$8Fgh_2>Qo~LaT~(?Euw{cM~Ch1y#MU(P1xJEv4!EkBJ=IIVht&h9cQ7->T$L<
zZ5(Ifq-pE%=b<FZW+RgdNyV%F`+F7u1V~7B($0MMz4vxvio}kCgR>uT;#3hMk^Tv2
zb#w=Je7+i7;peNJPXMx3D4G?%Yo+bGmI8T^ejo3oKwgx{vRC9qs>qAhYHvC?b22VL
z%L7Dxf<~8@CIYz>Gl^^8R<CVH3t$SllrdLvHJ~X3kl+&KH^B1jYQXq_=;3WVc&pIE
ze(<(J5Bm-Da2boY5<k#D&g1Y90CvU+B9}!-nI<Qv2&UtR;`&XJi+D^>3l}H`!X0H(
z3OUFTR4!1ng*5^lDg`T6zb43RRll$`GinMqYsFE)_RSZ0Hnjq+=!h+M4#OgN(sv5(
zvJfBRrXrE#rQ8b9D;1JTtN<=}CDL*bYQvQvoJP|o#KrR^v_%sol!bv_t_+NH4lsIZ
zhiS=)>KS67Ne5X$&UR$;$qHxhqF}MJtkjXa9@xJ-WLS*^cN@ib>LWuyP^d0D1PUl#
zI`oDoP-%P=jzxLMumQiPN8uEI^W@;g-ch&*H-`^Q_cE+DF*%kiGqB7l1(x|38<Ax$
zV%QZ|Y#A7!r*?O(&zi<pariM7uj3U_fD{?7!T4QlL;^xgV}aD2;Y^eK_%6-HaQ_}S
zpy`$fK$>xM1p#^;Bc)pl;iERH%uY_Gq_)0OL?1>+(`Xn^0W{uG<(8y(5bM?={*ZhT
z$e221Sx{hgqo5vLZCssXgx4bb`|cc=JNzz&m2&Mc6W1PZiu%PH{UjDo<M1FB&nY5R
z|G{Hl9OL8t2lwIeH+<|rda&(_X9x_q(|A$u&uHUK*ic7n8IV-BbR`0M6PwhL85f1c
ztnv-8BSv^Jj{H?9&!bgku$huv__9?dZq6p2#l<L3W@yrkW9(Mp+*spJ#HZw&(dJD@
z6R5;Gf0Fn|Gwor2r~JNtukMs^fyxD7NBim`EsqA~544ah|FJoMRpSvO)>-TMZaX^w
zpyQa~9i!Tm6fP#XWva!%6*4V}VI{?FRbe!KV2*9cz?KDND{t$845N&oH$Xw)y1k4;
zSZMeUkl=4|x3XNWjs^<C#WjO%b&*<_rgo=ANayTN+6oEzLOlVOyyW)8uY!+((TNMk
zsk7kf8JEhqO+{4=cToJXbhhTfw<f&Sr#K2QDvZ#GAx|+NVSJI4_*cgl6J>H1XY&%K
zcK!nB<>@q<6{tjb5r^&e6E>locb{)}pTB<h{O!xvKOSLlG%AL25%DB8K0kj}eT`ei
zX?AWD`0eGp71iOZRU1DUa^s&&p(;=VBTW7KQ;Zibn>qho)<&n)CX4QX!^zU;DMeI2
zA(;vNAhHggFDTm#Kj;GR4BwC3VH{FaO5s1<VUmv9a9W?!X-%0IP48^8Pz|dlwW^uQ
z$l1{9EiBWXss$aiQBUtqZL)CF(PTU}TZHv!+CAKHfKay`8x7ghMa!aWGJ&=j4tCs4
z_gu}=w2hYI@f`-~oH13FZLN~6W0(<Lkzy7gfkF|F=)ek$Uo<ipe^l!sRso`=H0Ycu
z{!(<#Uf3=x-dxc-C0yG8P2<q80^%tE(M%*pocQfM_?r)Xrl05Cr_c4PWdx9gc}yyF
z0$2y#Y%7=wq>-iiEi`OcUx2pfCDd=>S?Db?-^xa4xy|?S7?thjRm19H2k-eJCR_gs
z#Vk15phXj+%X6{5t_Uz)*2i#<d!e*Q9ZQ9-gpBcG*_x#_YMohBjm)oD)Z$}^%IaPj
z36!8Iy@lFenCBAh+Iy2Ad>M=PHG=RDR*d`_hwo$YO-zA8A3gHL@A$a+;K7zJ{)vx|
zANL>l;ztfs+6VIQmzaD;euM%39EZQeus*(sOZ8Ni|2?fm>#kZ0p=ltEUiAZVRvxS^
zKwdhEUuT%ig9U8<t<?Y>ytQlE@+9<jvznHyW$i5*&~iu>Hi~I8>My_CTy2%<m)#{_
zW?y2W7&mmt&1ReCfpO`sR$sb>aA<ZMfGuEVHNT)X+SX*{3Kn&o<nc&~5jD?pl4tW7
z3S&5XGjYGTqbz%Tk!NS5jnooLd>D_j6pxhTb%h6WoWISWlOvG>*B|x!mxk~r!4zgv
zMkC+Ifm8%v`_Q9dj5&G6G@g)vpTq`0V$vw92I{0MjJo>4<1~J&;jR?cs8P)F7!6r*
zn&g!Ry+i-FI!=KRv!Q{eR2%I27qI$C`npCfH}|3Xrq<kAL$uNzW*2fxJd`~Fl>vn0
zv#bj|^(YqfNK`LB&S(4=7hZiF^TTO&79WXdDJr`w{iu9((fCR~H|acqW@+ho8b6bs
zw4`7Qoo`pv{w2PA26G8(znwJ<4`Cdf`O{gRcRN%MD@L)0yAw~s+HYqK9Z?x8s8bEk
z6m$GcHdK3mXQXHkr$Nfe=DSjW98$n;bR%P=vc&o0T7o?_!O!YU8u&|+Z`En%(~W}n
zs*wI_8R3rM-}!8SI3aKquFi_tpL|zg9IGn715!yYhE%Pa>r)*nqo#VdsM{{PO`^F$
zA}`usXzt7l#!=4bQLf4ICRg8d6*O}-xvvCkt2}xXFe<2!b#alFRja{~QR8WuPnXp?
z{^m@UP%aeJ8wL_{$bjc+zV(MBZDe6>JU;TYql9in4&-GSpCQt34n(6&1(wofNN@YV
z%Vu<G282_Au0HdO>0!%-o3T+v+7c7iCR3T4l7Xa*4Q)?x7hZjPi0X>a`*uS$qGr?f
zH@@|bzV&HyD=h1_U_!b8%^FZkI3Jw?^ONHh`!T+RL+0YjD}kU6ZP19i0NBTco>2_9
z@FnMGpxFQ1$Xu}=ZXcZMzNuMOt;IJtTXZDPPZKnrZp(quJH)l9AEj?0Mh}O3vy6tm
z63aXGU8FVWp!j_9+!gIuTAZK{EBC<$C^?$Mrp|JyQEsQbmaVU^<-pDHI72l~^f01v
zt{LN$7>02;GV6=RMcULg(EXl<)p-c3{%dh95OgtkqdG*ll~hi{2J&e8p|uQZ?4jNi
zGC^+NOVZiAyurg8!Bu%L>6UR(>UBb?0+L}E6CM`GK)Xn;@=I9ZHB4jDZgUid(ujgb
zJ^6aGe+chC(kuFX__#-2tqrr9HOCc%5_tIEU8%C8#vp#^^at(6y&;i|-b$n%-?0qS
zI6D;rwlG-RKkVUA8_n^q@X@}n-v0V}K5$tMnfujj%h^!vz{JI<4u_U7NmT=K38SYS
zDhLp&wsVR6+Hy4EN{x|%^R#r!^(}F?uHlN1SNjXvuSo6r%-QzM4HuN9+=XxzrHPjc
zMeNuK3PM-amMCLK_Ff&Kn;Y&bG%%fRe-MS_K{1Fr{UFg%*@L#8PNSjJ*$^JBD2&i%
zN4GNQ1<^*|7s+8%0iaqi#gJ63@mxo)x$cY(M^*j`cU#EQn2oIlUR`(Tp;yA3!nydf
zkmH|{h3(VRD1Vxv&9v;?j;b%Fm@(sftq7Z9z7f2E+Qs4YsEcTgh;npStG~e^+ada4
zjx+z7$|)cm0#f|AFc5srN!~$<vQxLFEZV*jcGM|L$rw3Aiw^uZh+U}C#1qwZv|M&f
zp}@3&){r0{dR(0(9^518TVE@UEaH0<Dxe3EX?2lWRu`$kZD5ih$<0hLh#N{HP~_P~
zxquj>C@}ggCgfaH=h!irnY2j5Of_9Cju89ENJb}UIhJa2Q_HGTk)d?$EZhg$csu|)
z)nmmJ8cktHSv2<6mf~m8%)Akl7~&Al!79^nxf65?(hxE3P{;%lah0DMHY3EtvB#8$
zY?`-Gh_&|G_~vHq3eL9{6T!O)y!&jvYs<(Z9$nQPTE~vJae5S<iulkQmMOpU(E7uC
z!3H2}YkNS_VW)(1)~0Y>pJH^1)9gH)VFlQR4pAg%P7<%Q7D<<g<Z8@s+iyzq%2I~t
zti3-oMcTV;0fVz`SW2G_P}U0jSy=&8%!lH>(1q(dOC=d*a;x%{AzJ!`SGGg`9hHXs
zJ1<34)(j#@REK%yv~IM{u9I*Lb*3y<!zV3JgCCj^hi8YlN?Fj1$}lP`r6tm3|NAT*
zC>kqDVC5Q<i1kQJ|FQ&4YG9R!rE9bgN36fNn`r9JG9w2zw+R0=Lw&|$s%seKNYjNd
zDNhyG2&1TB52zTh-=P0M#W~(lCO;~xb7xAS%mIp~#A+d2x5un>9;B&xkgVPOyUkhP
zX#9^gXEDe2UodBBUmJj4Nxl`ZXsP=`jEwDJ&>muj!24T|@B3oTIR%G+Pxnd}jj|-*
z%tDOIx;Vh;Dq}*y$|M)%5B)(2gmVx1-2P7XeW{XN0KsafyI7jnVj(8xsH6{|dt6FN
z!q|34W-h_#0$SjU<_K5+uWBoQqU$iPDI6!Ij-aM30D%7+SFh`8Hxd8Mszw}wDVUa{
zxIH8a@alg12|#%qrDhZL5ySldtzY~b4T_9hK$P(Z*!}{Dn-%~<)cW^cltw3U{_mC^
zdDp|^;366Ujpj-`UM;fAzf42QX=xlMhw^iUm*kR4R|ZnAPaeZ@#l8+huwQb5PdHV(
z4gIGyEw`*NBj^*goS1M?>pZ0`rzXh68BlLj)UaNw8<PJObzf62s(i|{Hj%AqPorXn
z>JZOR4C2tMpIRMhDnb|H^Is-B<cPvlJ^dxRLbbL;{h<~_3bK?SzG54jJfjJ|Fn3$7
zS7O54WdbWjchHDx0buBz78$8=RI({4{zrE0mcVG5t&?-29u8~UdbE<uRYaFTqc|8>
zGW;(r78aRSf?wiU31Wz6MOJkzSx;nHHFm1}1yVRj=r3?}Xxek5g^;x9ekOS^517~*
zgLv&J22I*%1K8f&Ohx^5hmT({r32WRCh12n*jxDM_Oj~^w0fmc)S!B7L|kbak9$Sl
z$<pbiw-BeAAKU|A84obdPUMLzP8fl)=K}z=a2&vg{j&Q9e4(`s6MRx@8x}R#P+U+W
zNI<;QCt+V7cWJZ5$_dX>X-Vy;?uKdEI$BVCD*_t8w_cfDqzUUIIxW#AO&Z)z7Iv(0
zvJfMPg5_AoIoIZ-!s@vkf}3n^LIL-j%dmV6Ze4(7vv(SWeKu+Nvl7r`jVWd{?-en0
zJC1U6QL1&g)<f)Sh8GN_i}j~6{9K9?zLGW{_~MeO&l5OMA4)e|b2#Ajb>~N=;#%@q
zryme+Z3;xYt{r;M$C#QzXRs1FEx{3>mmaV!amB8LeH5{OfbLc$Hi(hq_#x~m3bU_+
zO)T2dGpr1;5g7>_7WOPDjP&%HrCifhO-2#b!5EOwt`0z1WYf=>nzTH%g6Uz{UbN<B
z-Nj<z2s6F9qb0hMs#RECY`7wME=-aKXln0}?{%Gc{s>RP^+G4X(#d~y6CX=WzjJOg
zq#zKOe5D%JuE>Bl<6J2!6}bMI#OExp;`j>WO)6dRt00vFWDf(w595_Fa_^^id#_k4
zhn?e*q$D1*2)P3!wov1BniZvy*R<5SQO#kfkqxu)<xX*)P^LQFqz{Bt5p!PwJwDlg
z_PZBoCdZy0HA2Pyk80Q`i(ePKr?`NmPwi%(<9ssB&PkW5e*8vO#Ol}Yaz*a7qj{O#
zu%Y}7ew{{_{yo+frW^T2hT&FVlC)07cD<|Zcx+q!4Qjsw_QyEjgRs_CNd@-~UZV7K
zFD_3r6*>6kW=$`lde|c}{|Q&W2eqEJ`aLzw=Gio;@u%iM`<yr7pbYxt$~SmY1_#jL
z6Jtl8uh>!bAhG{W#p*&g{hmLt_MZK631Z0r{SCnpd!+8990v^G0;Vk6J4l9b^`Gqc
zX$V)Y>yvLar6K{NE?j|^zNp|75@2zrUWPY(9*{cs(0lh2qQPhQ&+d~~&%H{qRyBt5
zYK|<2$KoRzDtohxO}jmR@SHL_rvYwv?NHha6)ao9YT1v?ePZT3G>_f@3mCtx#K*r?
z$OCN@)++1)KM<hGIyzatr)HQ2=uJ)Ojhr^H3+vc__u2l__j}J@zdL@jfAI3%%l+5K
zFZN%(+W+wK^^cSU8&d=WaXKgiBui`AGv8u{B)A<CDJRS^Za463^!qt*6}ga^<xpn{
zLpjURT{ue^gF%~5pl~?mXl`g75s~kpGKt7_{&SaqWDQz0q@bKwqd{0WJPh4Qk{4=u
zNRmxP2>zlS`GY8cB9RK>eQf4M7!j%*z~1l^#z3KsI!2z0UKt4GSy_$GD>JgyXxD`-
zKlD}VVVtiPsPs+gVgD$g`u@OUwDt~u1oHV6+0v%w3ZTG<rjKzJfT~xs*QwiYfo&aD
zyjF}mgflD4!S48Q`DlqAK3Cq3mJYyU3#@@h!$sH88RfpFpBxV2Ejtl=PqMPi&UCf{
zfY>5_G0h@q@6a1&Iq*^5M!MmBNXF%<cjRxlOJr3E!$+~Kl6EUbK_!nU4?V_2-bQ>x
z&dD@g`jwIq6JAvEmr*jcN=mFrV|s~tD6^~_E56STy))S1B=t4`Jjt6vI$-nW(!%(6
zt07k`kV^=)f}WY3t2ECEqHzM3+NQ&9@YvVa8#IUZ4OV_1u#Rd7ayfyPgT<x~yzKHl
zClLC>CSKLZq(iK_b2!R^%F{!^79_x8%!QrI(A9+I4^)y+ko0ttoXq(<5Pcr0{V+Ey
zCARFI=SeBQ`C^$MJL8n9Fz!08vB3t-T-t^hL~tH?Obnf&s1Xy;zOW^^M)1P21*3|c
z@_Lr0OO<6Rs#&5Q&zvIuR#T!lt^ppvFvUa<Kb1;<28>v8lG>q#?yl4@H5i&S$Z+tf
zFFU9LU;+PRi2j)##wA06H0FE8q|b)<zanVfn-}FzB}F6?*W?`#An!6MH{veAmlzVL
z2N<7awxPVc%%F9@8o-V!7mV37X)|Oa!B2?@o@8?hX8n}T^jp+;D9IKgZNb<UP6YoV
zcLjf^q)sW<2aPGr1X4vfAbv|DhSzLYvZ5~;K5FP+FW7188XF9_T>-rW)R#O{vf+;W
zERUe-x<f@5m>|YM?Bm(DvAB;B*YOIb#wn5%jqC&e%;iF3<QML#D)N*3ohz@pLKA{i
zyAx3m3)45TGs4@bxVf3}rc9Zr-zhpFTo6;?Ve-70`hmgp<p4TiAyhw|aHhZpKqWVJ
z`y1<$Y22-w&bxK<Xno!Mr7<56Hx;Fz*AP~gfC?7v*ODFQh(&_gf27~D(71t$E?+=^
z#c55@@W=5P(K~<NLCZTdoWgAk^=(8yk$#G3*Ub+E1wCoOF$`fzt`TGstkI!*otYqj
zN~mmyt8}Ikp5)dmKuYu}!mS#1`I3S0hdrTw;c($6+MedT+H-qWx)S;dI=)~7{?3pF
z7tT6!Xjy`<{6!-Sr=2}`W^k83s^QG-;q0k^d}t60L}^7Rj{Km6EgTvA!pLL*+Cyj1
z-meEAKog}x8oB(%NCSm!z@7yCO5;aJB>OHAu|^*Ji;+rB&k~i;k41Y(p;3kv-2YxW
zNnexjD-FU=#VlUyQxT5P!|YFNvOlU=Pa?xt2JyRw=Ci*edsGeMpA}<CEDG~7nmUA2
z<$nRgS*wp09$t#c-+83C!svwy70v(~`z3`v%^PGZhMT^fIs4I|1Q`c6w*S6!`|n%Z
zf1iRg<MHe9k?SFH%?GqH%p1HbDV`fH{O2S-pJh4GZJD1qOfc@u9+-pZ9|?yLsX^Wm
zvLrpOMkc9={FOM4#JTc1KnAW^oN>EVUfm6dv4GC+1<%OBVWgk+HCkbETDPc^(UHii
zlg=wSf)8{gGUL=s6qak`wLqp#<VFTg6%>3&lI1K|pd}yZ)6pg*{))E7*9Qnt!|1k!
z^n+38@yxl++XMyK4qK4I@{a@!6+uA>FDk@zbMrg$od6bvnf=*ugHzU5c?Dy}S6Y*u
zgfUA&IM%?(z=1QK38x$MQ6v)86pVFE91Y(H^@PI>{>t?GJoJDL9Rgpa#sBRTdCQ*O
zPu1vrkOnC|!&e~(#V_HJ-$?||Z*vJadYtM5|DrF|x&1|-Tahcn=*FShb{?8-lc(N3
z3VOH^lnm8KPmIDtjR;$@6j=O-0GtWZZjAW6Uo#{|_GMaDm+(R`1*;1xDvtiD3X!^f
z6=~~kH>#*Tepv7!xmF~ianU!LUI3|L8sUw6GAMP0sYB`;GY<d{F**cx_8NUHf_53w
zuaXD#T`61kW#s-6gWDB=*y@2GwKD=X(~0R1nqpw&RadY)brJB~QBc7hY1IBhXrZk2
z^{jd$qoVkHJ|rmg1~W9D#yJ)8fx<+Rda~_xJRi`f4vV_c9uDB$#xU?a<DUDuRQwyW
zqYZ%Dasu3z32<9SBs^7JeM1n1_XNw3O1vjf-<}!$#&&MAFHjPo*xVq)$_gD&&PT_m
zC+f5z-{biHichq&?puZXm6(8`(qaxaG6k15hp>?vp}|XI!psv%Cvka}r02LiDnxM+
zyX5g3Z&8t1I!q;@B1SS2qd<*&C&C5(B|!PYR0^b;b5E6)oq?uzBt_M<M{uXgIcN5{
z&Ghk3LMf$|6XK~DB5HEx7|@*5JV*Fq$`Ui0D`r9QxJ7t%&VrU1zU1dXebiZC4x^*6
zgnu^5!{X@PW+$URB0n4fLyko9poB+wJv$1@Ls<Wje<bp10ct0iZRskWe*(iF@E?jN
ztxk1`D^#_T*90JKBMz*YRK6}Q0R-*pkunQw99_L~N8UuK2y~=u-m{R}zpbclU2RZ?
z;g!*v0WFWvSIHgfDDJ9X>+8Ug6xkHeSp-w|{(Y8>lSvZiy2QU*Nzod|vpgO}aCQZn
zcD0OR>A%;!DqgXwg$(&5-HE$#Djm))5Oq+<4L(^#cb3g&agMxU{T&7^S8udJ%Py#2
z`xpn6?0%#Ho!-z0<#<T=Tc)_r;-bv6%Xq9DK(B!vD<f!$j2JjhDW!ai@;o~~sD3I(
zLHaeBCNNU8E*El0@OH5iJI4KUX{7v;rav@IVaM&@pX{ZGMVRAxfs7D_dL~qXXf^yr
zHmHlLFT&CNojX)p3b!824X*GxS{@{Ep{Vm!rDxF?1xPr~43I~XM$<QXys<SxYhvN@
zIUAFakdi8UM4pUmvPM^aqXFIiie3kj^9;Ob2<Kvs@z~=qmp$uQ3uT(6!0IU}n8pLE
zWtChB`K-39xX$=j)!;9r_N_p9WMeo$M%h{1BuhxcVrV0c<41~5>)I%4a@IotW$&y2
ztp6b%ek8NRz3dA9-S?Px)2Tp!a(s{L$&Owdag|;t3wvl%tfaJ=lG5gY-!o)G^MU7W
z<Qr+gf`C=lCZq-65KM=OPCArmUk8kvqbD<~Tfa4qJ1+I8v5g*?0CNm%U!@w9(84}u
zhJWxyM+2AVo9Bv0S%H`5IliLk%=v+2XU;Fo<~Tn|cFFneJef|Po}#YP`TY=f-V{?D
zK`A*MY3OJ<u@}l-QNbv$%YG`CR#`5}Bc@fwvK*-{&2{D0s;!$YCm<^W5{s4$n6<5%
z7^ZbWiDsf>Q%0IM8DXPU07+MP0ZPVJ6y$l-<6yDSA8_W0sTWr&ri{~iC&odW8>36R
zbHWHDaSt;=lW+Fw<uOM?vdY^7k*T*{o627pST2;RuU0wjnzDw%*DoY~4|8}!cB;j5
z#u|8J45OVr?V!nr%POm)XRx2pTpl#{RbyaI`8Ya_(Wp_T{WbIZ7-pzD%lbx<2wvdR
z-84C)Aipp22vZa|+BW(QRq|hBltx%Sxi_w`4tje^bA^#=v6grl@#Sn%ZJOOAku(;}
zsEoO0N0@)DtnH>OSKH7&dAR81ofwoQrIL%+*VmHbb@aMzYOFC8UQ)bB(u8g%BTbUL
zmrTyRbP=7JE%m$|$zw>)Kyd>sn--e&kld1k2U%Z-VWYOyC-*vUhWZ(q7Xjnm<EM>G
zndYCSY`r864pmHs)#gk4sm)9;r^dT7<00|%dANq^2iNsnFHa!|^zDpP(>Tt*&-m|x
zWwC2odgT4v+bB2SU*Ny+ImPE4i*%1Ryq3DxkYvwguJ_jPvgK_g)>mMeu$xwywa&Br
zqd<?1VxGtNB1uQn`8aMR=*IyY8FOtQ^3~0o)4J}au!ks#>ZoWbB$nbo9gbf{Qa<^W
zcNgFAH<mQ1uWHx%EtineB=bl0R#haK5*LvX+gM&mpO3^@8t$f&KG`xh`19W)&pt~l
zb5taL&Qw?FM&DQNMEWKAP8l|ln9}ewT(3Yv1sN^rC!idVn)bvAJdLK==;L{U(RMHK
zCnY=1tGCr;J~Xbs!=C6J-OA2q$j&P<)4le;Hg5ja@$W4cya5f9Cud~f3T%H=wFA)S
zIvpK0Ddn7>?R(<pU&TGLj@^lXpI=`mxh6hVqD_HRn9Y*zGY#J=VobYOGDM%B0xD`z
zn2dJew*U<`c+?0Tjn1N0Tlg(x@#1LQm7Ho3-uqYaoq+$rkT&j#886gma2V;m8tDx@
zq#^Pu6(}<}@<r`k|44g}sTM{60{&5O7-`AfES%Msw%W0Fp9J-5Ns#zW@kwOZ4#&={
zlNA<6qUTVVQ+N8b&IAP;u(};%`%8b&wn~O2cGLsjCWvaEHuzf~zr|{*C|ebWN6P`m
z7L`<!jX7}}z+8I}{Ht^GuML0jukm;P>f*nCyZaqLAwcg&j>jwt^TW*}!iPyE^M;=&
znyG-$`-kW2j^CH?n~d3_K^l++*u8$Q_g%6e71t?!xw-K^lYS(U&FU`$txZ~{q`Qlf
zDY$DZD>Pd^4_hlR7MxjCx+tTR+C^jt%IxmAg>efeDGOq9Sd@)0{SIY?1T*LXN_t>l
zHO`p+Z5m!v`mW%bu8jbOB;?hF20oM2Ve4-4{Ae9*i6zNI+Lmr(ZrKVvB;SrCyFr}+
zBq-j0q)?l_7w~?uB$Wl6XG<_S!xuFfq?p3o@U946l$=&AIV|9OV>(*%%|>!KJL*L6
zk8cWjq+o*Wfg&-rt%nv;G^EyTbH%z<Dt;y7BGp2*i1lTW3lUi>G{O|i)=H}+RSJTN
z5cYo~^#_L=Dcljk2ZV|Q#y;}p{XhcOw$jvL8`4B0#9Pl-((Yx&HdHZbO-hB-2P#GO
z6|#`rKDLB#6qK!z*oc-IZ4K12_7*~V*6m9Jd$rPAcU<X)kW1R$Dv_XKS$B+Am0*vk
zxON(nLADay)|hMBw_0;Dg%|E3sycBCNhdY}Oox8gN>q?*(Ez?j(wQ%>A00y!t`SnY
za1zV`_N__YeA!Q;x{0`#kuaAfEOuDMi$-)wmM7&U<^Hh`fEb3?@cAstFB_;J4X2nV
zT4}G~`TGL?K|e{1n-$IC4@r5dooi`9HR8nL0*m`-smMlmfck{?i*j^V!Dnor{|rWw
zS|j=4mXTy~BuU!Fsx*>L+w5S<s+3@=w2gY8Y*?!Aem5`3xKg4rNx#~NECy;oF0E(!
zgY8Tu)|rYSAo8{pe>YIm6wiy=x<Gf5TRfLMg-1d{ORy~(CnK;;6)>YzJbRa&#N{a*
zIC<{w-|1#hXpDSx8G!IYsK7QiF<%X#NmCCv?HOV}xpwwE^y-l+JQ~R9YIFlwF{<AU
z(Ng_X3Z&lmNgK6NWG7l%Vt5_OubmVx2$90`5BO@dvcd?V8gB_wG^i!qz6<IiY6zLs
z>d>1qO>B?CS5`Yzw->+#kEKl#(nJl<$&7U;?aYC{>=>w-U$w2nm8~^vY1_9<m$xbX
z54&$)zkK~;(E2ycK#lL;t+RPSQ3c4c62l23zz=Y%Em>#{WdJ*hepn7X74)Hfsir0p
z1Nw^Efs`S@O`w{EMUzOM;!DFa9<buH7GQ0TMNGKc!xuwk8!u1g7!|faw9bxpMu&Sx
zo$>e4;qb@>NyDQ~h~GMGE{Kd7{M;D-5W#PEjg63tbg+m6W4tdLwfJtEaK#af>)vK(
zd~Z`+k#%0<wiKtPa{j9F37A5E`?YV%7h+oZLWtdP(s9l8w6m{sv{#pe#?eTgb;e@X
zN1IeM<NzR2;;_t^D18XqfTw}7U5KHe7IMUR?OjITshA6oGL9ksj1>wzyy#HnBabzJ
z>d-#8<<P=`7%e-kMDUx(lY;$8{USvV(26wVrW@)t`&_4AMIAUOp$5HR)1$S6m4_vQ
zEaw+@mFc7FJ~Fb0N6I-9I*m`G&u}%db7t#P8o>8V<VPGSkQ^{uC;0X=wr;+?RBtgr
zk^CTq`S77?T2bSX;{qOug0?0@-v8z%lI$)la{<h|Ue-IzTM|hPy2vDzs&yZlSJ*t%
zWOuf{K5Wle>*N10Y)^?W!_c*w;*dq?{r6ac3quh}Zp#9UQn(TLf(0s4Tb9B1)P^h!
z$jEG)4dgIYjWsA~4CjkUXf#5GbC|Ej?mX3PpIX!0tIcU_O<+<V?G<2+)fat+NMj8M
zIXpMNqN_Y<8UO?Cvoj?dv?kOwzCw{9zre78^+FT*t}1nfaS)pwJh{{nF&jON>pkr`
zdb(=#G{NYKyEivyJMH<+&FRg}XC@*fMnC}#ePHQ#bO^8tDDyM2Pmah^s$rmox!a)X
z9^T>CAYQZ+-!?JGHrfeUnI&jt*1RO72TUE_)6|K3R_p0~R<Jv<V=P!ADydsQ*795j
zQc}8-V%4_H!rnEs+E}uW7%q^r!71GS(8TTiuakCER7VaRx?Gne%q-!?YN~?_l}Tc%
z4nadPVi;6eR0fcnz`X#CFrY6rGWRIx*?V82x2=;d$eCU}O~$cWokuGv{*`1ZHUrbB
zvG8?5wRED;lvFaVW*u_KMi;CXj?O6IaRoPc^D5ib@1-d)Tdn?}O@PUG_J_*wSDMOx
zFR>-fn4H|ZIK65r{F|h!-O7^a(7Whl^RkmoI@K^dWc7)Vrq=o^TI=7bH2`TtCN*L!
zOtN{<ySRNfdC3JaYL})k%7ErC*b&3*!rF|J*?f020(vW_bGf7SFiBl4P%#U&I{$95
znz@Ba)-kHI{%ubA-<2LLO2;j<l~4dqK(W6;%Zm97u?190P<CCSMhrDHh#-*bc*A_m
zpM|n`i^6Jrg9Ky1*h7I6>l7yei}7pO9w8rbt%$6kGEV}g-s${PVUa9M)w<^#DMy|Q
z$sH3d3n;~)Ge)kkgE5+2CvEA^hT}=vnffuk1tVFuR>M$gdn!svOXdL$0+~||rZ+dk
zo15Yvn;07UADggZQ7{6kqlBlCGRq~4+IgEx_1D*D>S1lTzK&Wml127|Op+&PTD#ZI
znEsGPxA<ET9&D65hc`^OEKr0lW$okmb25tG0C_uoiyQX+CfvrSDbB_qKvHG!s-y>V
zL&lV8Oe>kUy@mvEETIG_CMk=BV?8l@7!I@>ROM?i=!`5a!-gW%f=(f&P1P%+@}Q?`
zVDr^&vc0pUAF;)A>jjgZA_Ahtp8=m3@{FcY8E=i--o|*tn_Y;Ow=v;|o)1?suxMcq
z{><r*WrkF(N98wiWiJ709*|5lW<XA9)a>NDD{grF-KpL5aKpoK%sCEUcx_o}1qM7C
zcGnfkl!VN_g-5kDf%-htFEn3yV1BQ$mUbB;TWW{_k?chUP?rjN7NSCo3O7H#U8W{f
z6g@J?a1dZ>@MTk&L#BPz+=Xe%kuI?xrqt}1Ds@m&xN&VF2NyF6YlE_3JQqvxq{)=8
zuUlc4twoc(7!b&5+pgtU-7I~TMdP5ZZmhg-eg@hF-o+R?*=A}Zw5ClB@-30&ZZ(H(
z6j3&?TE%a#jRlw@0%i%#mMi>U8=Auqb%Bu%8=%BE1upjU6mApMLj_z`tCVoqGzmhG
zsu}c=O|!H^t=81P#&u>ZD*LTohTts>?;>3iM!_(rAwz42H{&vA)`9s0qZF?-#4Bs<
zxTPQ)u4>>a%2NQ67Dk7~05s15Wb(H6G)nQZN56kG5WpC4tqA_ps%p<)a0E(iDrVV_
zIf5;sp$#lt&GsylMq9qjr^vs;b7{KGKRJ{o#ksU?EHz${AtMWsTb66rhG8p(KvxFE
z6a(Ef4GRvB7B#bP3^!AD|0E&q024O^rD-I}fsN$n6hEg+OutchW}e{spbZ)@ub!8M
zZO)n<psU03M&awt4SX}&9^}?%02Q{Nvy6T%KQs5tRy&^|u^Lc{&E|+>3WL4M(M;NU
zbxLjPRU6+jvq9690vaKlM=5{!v2Ajbn#t5-6!?;$r&^M^%yPP8ByUkuvarNXBCULR
z3~u{ihh=7{&9(nP_q0Ru+w-_vPjLK@=81~ZDiSP4o90?$2KeRGX3lD^5if6J&)v1l
zEP8n(W4jR)vSUobi?sW`Or}NXwtHuqbijY$HaPLS%y3X8z^m0IRfM}KzEEc(JWpv0
zKc?YDDqf`qS7Ep@m>%FFn?)nk2m+y&C1_a2xl{u7W?zWcBpQEb=iV~H_x?`~%T0jj
ziEDteNM4Vkx)|ksd3#b}K0z<#rE>RV#9WWl5K|n)TWb(K^CcB97M;;cGud%92AS!2
zNknq9BxOJ5v-!rFx=e$7he7RD6S2lrcJ&m)_%3bnFesJ7p2Ul=p#~XT(Z&vfI5qiD
ziyV{5AqX;J11Qo3iMDPZ80HRO4Cz^kB_#J+wWwCxaDB4qF7@4dTO-zV8<t;GMQ<5F
za8=Rj%DrZ_@~Sdb_KWKBVGgER>NR8Uv?9!S2Ww{XES02mAsm|+C<wFO!YzFlpg2)b
z&w?Yz`nODY#@X?mgxfvP3!!nN`FWYE7_OR8N-|QxtMrQo{H7xOor5-pseUvO)}8v>
z)vVEyuJp#$mdBc=>H7Hku2bEgm-~|^nol}lEPU7bQokfwzWaP7N${qIsA~ydtgqyO
zYQO5rX4(}xRG&glmvCo<wR$AZ;Y#W&4xJ4f;4EZF`<X$?tEe*QP2iXrUBVyH!Vgh<
zg}U1Q9WlDa``os$jdiuFx4$;Qg)3<>($hx3d|O4Xe_28G>x)K3>o2Vuwx=q!Y`$4v
zzr<7-Mg>D}Wg=p<tr?Z%v^6kFTbQ3@r!}u8gDEq?cS#EaNAV@}df+O$#P?4YcGCrT
zVANu-g@*G~V-FgzaEBbyt5TRqe?|9+TAAPE_KYJIb;S<hI>5bg0bzE<>bkeSYkZHX
zb#1h$OS;e{6t@>Da4a6%i&3EXz#6oszG`Ex?u0g8w9Rnz8V|fng=Yq$2b#+vQE~{7
z>{FzP?waUn;qQDj*_g_O<-k&=*4yJWiz7}pb?DVUdq+!C?EM@sP5iPvTMVp%CKi@V
z4S^kF3@^~9N4c6kN$aU!jFd0h;*yfQu=3i|NCNessA(#&h_!5#K}Loi_Ku7Q+m>qR
ze@p(lDjxWMCbb!?+W*+pX6D%b3#rX;-Hw6F*O_}7nS{DY@m6{fN;R5J_d~{S`d7t~
z7|Dh1o`y(5e$}3hH;mjz@*Kc;KYdt;-(d7?g=cUb3-JtI&u7xWk^}Ux22;l8QC60i
z(ozTI5pPzAIx58xfh-9jG;~R+#GUDyrD=P-DJ;S;<0#aw3_b&0BA~?Q-ioX}EMqUt
zoIN-mGiOg}C7V?-ztGel^YTnXwsk`NtU=6-aZ<crVnX)YCTn_CrI81Od#bT^DW0T$
zJyB0;B;=v#n2CGvMMs)#7Xs6(y7JI0FukhS4QGh)>RFpq&h9m5o*Z7Mv#|XvJ**{r
zlG#U(Dl;^H18t$&g*2FwCRAvsH682)fUDp?V6gXmfJt9`3fI;q;v}r!D+j50ot_!T
z=5r0?KP~JGWeS|&Hll<Q%7MfnztGk|jYB2WrD8sY^ILM$?N%3E84W2uQQ&p@a8v-?
zg4oDugLH;DBK${1m(oj@rF#gf@nk1kU(e7#a3M~S{zYm;=MqcC<2dz#wYZ*B$4tp%
zt8o){NYh%*K`tlqCd<oc+CJe#n(rU`?JK~fCyTF|ubsq*hF%-8D;3i6QJ)&hXIB=W
zH>r^Y=r{!wRLcT{sF@NjGrq-?KW|c3%AY^e@J%XSuA)Dn8B8>+DUj1R;-4xrvWJa&
zN8%4apUtFlGWV{=#m&@lvI9p-IPPjilDWHI6=junlly=%8|mg=EJfmfYq~iEl6Mk*
zLhILGN>2AzZU$D{$cusUPvhm_N_WTfRPA0++e!9aykCT9<fam;!5(+go15(BCcn8!
zZcB!Dm&A5vu60>(X|6lH;LfW~&IP##J(rYXGtyi#de3t~<29N~6^mESYJj*P@Ormi
ztmb&yWLEJ*r$4aqhhl<mNfCdiEbu(=nM|37$@JvB_NvV8lu!?*1=n(wMDJzlb5cDk
zKb}6klWMW5tCyfBSS#S>#PsH4b@um+G7@_PW>P(cVc@>D8|x5e3C0T}8M-%|!_7*$
zVrRf*Ob4^jJAD9k@c~gDj13dw;m-)_LK%3Xym}abvWC}Z242Uk;I-B#3h>Mvh!Vp5
zfhw#7k76RK+aZ=$gMp*2oN4o%82*Kc;r~bhKe;fx>|Y@_MDs74X#S^EyidiiY4{=)
z-vH0ke!SK9#qap^pue^4i+|$d{YMWT`r=1?+<dV0*cZRx<Msn6`ZGQ~dT`$tan^)v
zSi@h^?hBujo9QrO@H)dNDbFVpK*7G1oy-o_MQenzBXxR#e#%O~=h3V)j`ELq4dEY3
zWFzie7j2!j%O%Aeh|$Xq1AxJrt(phn0}Sx;#xxzqkQC)Rdxk%!-9HOBA>X9kKdi)!
zXVVS`Hc8ScP_>ldLfwwKUg5WYr-~RB2*|@TuPStCv`+aP9m)O5q=b$4-WPF;X4<0l
z_teR&reA8<YYMi~wk!vL*c_tY{%6|#QCug`Y4BqTJoys?ri~s3L<n>!!Uh_U;}6<3
zw51SVHW{o}pNoQkTc$$A?lhBUPhOZa(e3}86B*{&Ie<}TMsS2-b!xLB7`c5`9J=`~
zv)VuZ!<?0Ff90%>@E^FmGISEa(IZ)he_xJG*-@4msq8a54a>m##q^ACX;}Yfq-GIW
z=4Qu@h_0D74?|>u$U~}W7fgnsiC{C4`HHgF7$dhPYr}bQ+{46-dzgj^hCD0{|BN5P
z-px%r#~4)@sH*bUSa5RmJ4x-5TcvhiIH1Nx%w&@<i|1NyCo@M1897AFpb8147d^>r
zlXU_=rnwjpG427DNwcMFsaJdk76qX6IvEGvtLQS$kAX?MIGd(L;GLG`EVy^?{QSIo
zzSYh0lY5)JUhf{&p(4LwCSO;%{^Q4w?_E%yUo^k%%`V9Hmj1FIzt`_?cel2-@Qn<Q
z46p9vPjn`Fl3}%0uO*AY-}|1l&V3S%KAw=_ec++qtx*idc7Oqk0`x}#WP(f=iSLDx
z;uuJ=;iVVk3lwamjby&+RO7<rD17E@hd%)U+x{tSNF2NqE-Ke>(?b>9do29kU6@*H
ze3(V(-+VnurqjUtKhNp^JORz_Z9nKfc<@m4@ZYDKFxiKj{6qA_=7Vl;>j6A$KZHft
z9QDLjzq|Q(TgY-$_koa2@UK?Ee>+sBFW+|f&(nT?3zt*1{ODo#@q@nX&m75BOAV~w
zd(eHjxjE`Q>OSt>7rjpZLASrT)!FVozW+%5fL1pjZMA-SxY>R9_$mDh6?@%>54XgF
z?d~>=L$)LAW}%-)Q1|ge@#t~4cmJoY9*pb$=g#BqgY8GB+wkeZ{a@)5mxOBK;r;IY
ze*d(yz1e-d*&20v-TuP|@b6}C3;x~O#^?L=yuFFf4|<PBFx>mwn;qyI|9QCepwow*
zpc*W|BO3qq<44$3Z?lgL_8$l++lOI8gWIAHfBN^uCUm^jf^F#GBkt2StbX_L_9G~_
z+1nm<V09lqgnu7D+QcsV_d7WD`|`Pezq{FgG=eq6W*>`3-G}|n&L-4-v<>ZSKX}~P
zeB9mYJ!*}%x;-cWle+&HMzXclhkx&H<EXZ`Hw7;HgFY16gh|12JiagP!*F3Du=KsY
z`tcBEx&_^BL$_k9dw**Sd)|Do3C#eBi$Cr^c-+Ea_W%sGVW`{C=flTa0*3KW;BX&{
zO<0x3k4HSp`>;PS+5RT(X!lWn6IKF%O29FNKTjWQLG6cP3)XY%K5jh$8?2K+5O@Gx
zZFX_03~0~=4j7hilM2$b9>TQx2#!>+_vj&vg}{@ZVNTokVF}^q<|9~9SbQ4E=JsQp
zCTt2Ua{oT9;KTcyu$K>eINdD(1z7a0ZS#2wz4u`SH}RxAecT72dng{j_QOI0&^>w#
ztNsvn?vb!S?+THC)L2EN-O2LvC?CI#C+#Hj#V8BWAYL?O1|+aU7c8LD(~s;pfPoV+
zO)O#fh-{$aSJ_D>qEPV-q}lY_Ykl-!Y-0`$;L{?pNg<lhKXL|tbb<qurhXOMr1-G2
z1!xC|9nLdH^cwROoT(d%j6Fei^HTipq{5#<v&*TpS$nNO3eD&@?;z$B=Fl$fq0P!p
z4-;Vzqr5ZBBaBB_W<fge?$HVXp?2>CIGNKWBZ@MswQ+};jm{9G{k0+>&M{~G%u}|I
z`M_(*#rDWSSCXojr5eM1%nKZ^`BS9p>t2iETzW?~`THwOg=Lw*x$_)weOYRI{pY+W
zlZkeZ^(f|EXBd~~ah!TCN)}e<o4CnE^*p2TY87PCSyVMvL;9WTyNG1^a?1CnF5o?t
zfXTEyrhzht0}n6q=!C@N*Uk;NtwZF~Vas7pVMnJx9Tmn-db|9l&R2X%qjl);exw(Y
zsJB3G3X_19#AQ^<40}n9jy_doM-c$HRnWte$)IAk|7W^nk$z3>F&A9jXz=YkEt9jj
zwcdI%$51UVQ}p>Fw+OGkFU|JKVm$0L8+~{1>`BWp)Mf*dX>?*$eToqv({TszRor?(
zUst!l$t&$9WID?`P9mQp7+Pz>aJj1664;m6hN*Y*)#{2!Mka6`$4N25JmQyT69@dU
z^-O;xU^@CTD5bMT#B>4F^h~3aZj#*_XQRS+br1ami}D@}yiC%QV^WjF<9p_yeu}5F
zidQuUQUVfGuZt{9+d#X(B{9o1r7BaE<5faT*)-!z#`;P(O~vaDEq<hSCpnB0e?HiM
z-K7vUZ9u-!^q|ZDb&x9TWf`BrZFqA-WmruCsIgtjXo>oAOYw5UxRr3ZVNf^oa$71&
z<2$z2bmZ??qbSrU1P9-YMMTj^#psBWU}X+jzw~ycn45d?IEgs-PHinpE`Tm|f5S{%
zo>C*D5ABUvI-;MC$hFf$19g}6s55?cRR_(u(Pl$L3$d3q$MI!1gLk^=8J~<hRo<pG
z?CH(S;)mY5)1+t_m6Vej#b}<VDQq+fL_G5(U^K2QJ+b;FIs$#y$q&%$0&b;D2lPr<
zJru1honB%PTylReMsStHErlZRCF2%yfS1%C%Clt2aSK|?lTm?{ajna^g-LwlR-BH>
zTcqgLX$X7P-T@4zHGxAp2Tqrw^P<;X^f^kV$SUK6jj<Q=(J6Z2k;@sb2abzwS@_Xq
zq_q$eL<#*zk9~1PPrb(gny2{q@Zn>iE%!5$a&JBI#ct;GpRWP@HD5JSn-9YU$ix_E
zi`54JsMcCT=r^y*7g&B8VnQ#>dxz!c4NAC&v369AIo245dst%vf9`z5(z@iEW_X%O
zJKigLKu@;(V^z1M3TGl0N!61oeV$v6Zz+rWc6NLjv?(Q}Uzm1NM712ZsTZhtzce*j
zq%XKocwf-cVg&Ub>>_DtMiF2EbT)$fKFi_Q0tz1kfG5!uHw0+L4hOmd3KKI^Qa|^D
zWYTV9?1KWeE8XlPCRCt49&!k%MdkF#4xjAuHZR`cXt|Y#fmXOu)yJ^Pe-^li{QYr|
z%O1oCBc4o%bCHGnkIW!c{riEM?0qOv_E2?4k&XM5RTbWdVLOox_a6oLmrY3Y7-0T0
zGRqVxOJ5ETfhD|ubi|Re>yeZzVe%5`CwiKtZFxB$7K94L49Md+h(wHw5==!>pvNG_
z%^5GyffvI|SFzFWBsQ%KGXEc!TvFt9A~*WmzBobAIW3bXJiSb4O96aPc1BROSI`Tk
z=6gpXxg&9zxk7BX%y_7MQnl+INZW4r!6sT(F9IWuv`ZMJhKzJzlKYvV$r$5>m>aZL
zeslAMcc0@PqR|C(2k{xxh!gIx1oM8uMKha5m!!=0f)?f>Ig5(|E-<3)g3KH-D?M0k
zwsiq5NcG37y)9A95{i^y^4Zc%s#Cc&N<LLbm<Xy+746P;?;oOt|N1fsA3Q3fKzxLA
zXHvW-idu*Wb1;bybj55w@Woqvdelcn>N&ma1LnTSRv6vTPIxlL-`jYC#=Qw<`5+^l
zBk?f{<!%{<FId81MWfnabC@*VpP*{EeP|j|DubG;H9!DOW1c(P+bqN@7eN^t<_cs;
zqs<j^5)#3LC=#GH*~cX8I4#P(&L#{M{<z5Gby(Rbl)@WEV<hMJZ^zrn#TuF<$ltVz
z7@kpw^CfEm46cSI0#ff!wgW4z1u%ZDA*a|Qfjn88?Yzni-TlW5R-&f6Zz>FF=P<_#
zYV~O#j4@wl;j2u%LzsDRe{;(h2TZ|i!Q&GEfk}cpP@UKrToLpFLmd(NNm8X~1Y&6f
zrwQ)Gr|zwx2nQV1%pp?CZawp5?z!1PuN-@XTn=Dn!F{I=(>vYvEWytNn6l0}X;M0X
z=Es)Uq#7x4gf)`#%LgJa1ehFpRA45WdcFmd7EBoYHZihg%E25{w;Ymf@a~Kwv)V*z
zwR0qBiGTAIA1t1`_Y#E(Y_M>eog2%=_itUg8tGZ(IIB?@aRm6tJ*(UBf1&P^Ni>dS
zP>>}u)1tjLLYXO@h$q>hbm}`&$ayr+3p^{**W45v9yTrmx&lT6xCCb9C%g-e%V#Xq
zrJzNeg=_T=lro?g+)<cQM9WQq*(6b&a#QzO()tlf`YYt3BVmi7Hw`czeW|Pw)qnOO
zp+R*<G2RSLc`95a<Jb*>F7TuTpn=U(qQJV$u+@XC`~Ek-{q63n=WpK~TvO+imB{<H
zS|@xVzV#O0`o;yKmbEUCYz`p4nB}((pyW8xR{QjZJ1DzjDRujyXGz@Zy{#SzkOXod
z(Cw@De!CxUeOI+D<xQy0k7q9k55LIrztkhPbj&FIcuDV8XL<;v050sPNb0Q$h-8iI
zHq=!6=5bR*ywy>q?xqp=gmICDFM)=YSv*$bOH2NL-_(7iOc`cJ3r=Oi8*W@(^;IxF
z{VhvjwC7$AtHb}_7Da)Eg|_Mwe@9rF18K8E-YsTmUWxXbOCj36cxx4{ReVK2<JB*2
zyAV5quP(DoXt;HdpxgB7qQ7F)70)3*_DVD)w66iVZVocwi%Fx~RtDEoUU#2SbOn6p
zE-LO|pOf);8k?714cg*mr|&E2mDibO0#)vanm)5{LPjRM&=Yw@l!(T}+<;Oi_Rdhr
z=Ukp@L_i(Hk~-M%T4cU9N0(U=jaaPSMQ5v38>*~{!8!~aN>F1VY-0fo^1Rl#XKTWS
z$uzlQ`JV%{tVM{W&Gl}1+gbtEzj_V3)}>fMQkiEfke<R=O>AUQ@FuCK&;b#Q$E(;*
zPXC}xyYb^`Jo-p{D5{k;`}teua`nKdA(hV^)~tR?BiI#gAeB4e-I>g1U(RG=kdnkS
z_Ae+yF$|V?Odco2Uq^Ox&tNx?GZeSh*v+-I9C$}sw_<=a!&!&dEZ`q#*fsOST6?Xy
zxmla}P`E18QOhbnC-_;fzQLt>lO&#wi<k^;rvL?edi-J1<Wr|6pSowBv@vn0&rA;W
zw+xnXng0;8p>MMAStkBO-gEQOW8ghst^y+I^dvZ5bfF!G6fAKDR9psh8p=Y4SR$RD
z4bgAGlt#R8mSne2Lk3c-eHuYY78CuE$>2Zuz=@##0FDcq{>cf>JddRiO>G)IPi$e#
zmxHsoD1sN6D9-TTvoZcVJ;8r3ruZ+fCY6scJk~<I&*V<gCE%$Nhu#G)I$q*r*5XZZ
z^)IHtrifo{1qVh}WC)|!(<!D}pun~907Xy$#PDy&+bAnLV)c!U+jW5rPri^}y^YlT
z20s_#n=e1Dya#k(d3JPM@np{QvBk5Bn*oQFa@X-8m526ah6x7_k9HE5W3-W35G{?-
z7c`#6W!xIWPfXZM%b}uyVj{x~3lR?ZB?Wfb=T9R}4Ag=3P!rxs!e6s?1Z$kr=wKL}
z;n_kU?e-|VUigQ}QOLzqmpr4<p(nGP6dO5*{lkLvaC6h6g7kw*5=_gY^h{;xNf+h}
zaU=4k_hr%@Jy1QygyJggaIjq`#w+p;>IwmMt<7wlCV_DceSio8=o`I-wV8?ue46Me
zt+f)CXs(XdiVCfrmS<DofP%e+7@PR*ityVvCVu-V1HiNK+xv{B_Inn7lZk&4E|aGp
zu~r`GNF8{Nk};sEAD4ixtVWP)RV2r;WDGz|T9JQhxw}aRy|JygSc>04|D8OWw$x8t
zRrKMLGLh6xDE*1FycR;6(rDOL_!q5tGr>+yRg+75hpTBeFFhITN1J?Pnp8#S7|!IR
zL;o#rOu_`B$jso{B}wv&w8l7#&oaOLBb?Zu>v~vaW1)QxFw}}t-|SCrZmy4yNu6_i
zjDbsyfUXouaDBa=<5Cw7%f-!&{Z%;}q@-^4%bJG)XTj7NqhSI+v*L>{OK0pDcxkyu
zm|fZt5&Hl+4cCbD`)nuO*zi?BO2up>AjV<b$u9yAISoF?!RM7L0VXTTmuLn#okAXZ
z6!6>=DLw+>O<~EhJiMN#Ng1TMjBD9_w5W7~d2R&n=Zo3M6&4R_bunpaya<|E#o~d^
z{rdm4|26)u{jcu7#vA^?pIv-&&zH@Vsu?Q>`65_S^&eHubV<#&l{?^Dj*$EAG>?nZ
zY)Uo|&@viMBq`KS#@*Jh_(y&yfGh8Bl9xb>v_{=-_gf&>a=+HFS8o{pox>l@EkG;L
z$^aaB^{756ACvqxr)8(Fa^*J+=e0cGp0iol6YLV2rSJ0O<OD?mm?#1@%~4+dPTxoK
z9HRsCk1=q)ConiJbrxN`nNO$Bvh(y=BEyLF*aMgQKysCh(;NpRRgnj3Ma|gE7?xh%
z1%qYf9iX$U=s^1s!VlT*lgpRm_Oc4FYpmA}mzAjJn)p4NlMzeF<|$>?nqlDR#w3UH
z67!}59AO9D7TNxsq3+{fX-od!Dc&wAfW#=mEY)asBcm#|&Z0}QlR1q($4~%DML;%@
z4bQXvz1C%1cB^&{;<%-Z@=lWSbUs8~@x3SozPLP#k~Fyox9+Hf8(;!I%DBVB?P!hi
zy`(7SadB_^F~WK440F9h;Y@epv6H3Gp5zAzJ{F|bAn)d;Z30tISP{ARGBjoR%$qJj
zG49Tyllb?*D)=s&k4~u|<^rvXmiRu#)UaI3H{n>7gLlU;2ObmEuYPhkj3sFagrg*V
zC3Uk=veoNu7I3K#lTl|FUnOzgMvsbKcdIY@zURx;+RHx2wZ&3PgNS?S%IF#0Wo?YY
zt5)ZGwK}vz>TO58{ULl!C`lifnLPjRvbXUBQJF?)K86Ob!l+`wW}zntcc&zXT$sbC
zI_!71zjI=mo15GBFOyk(Lho}@Btzs?m+c+ymz}wy$5|^}%izmQ7PAZ7MY)a7)3J%=
z?utZZ47`=gL$lMN3Gw3#*%2<X^Fte#^X|*vC#zIvc>1<Ask<*ZyF#yCZz3aIWz3T|
zPm#$X!4_i|DyYmkt&`*F*!<1QKvi5{N0;v8EY9Yo%c{3ozW#<XREVB0lTNA6r!t*8
zOs7Kk7-MgM{3~5mOS8Kd3NsFt6$vaK_?^bZ4F^^O36Lf+5H)}!5|x8uw}i$qv4VAv
zRi`zu%08i3Mk|W@)v5r|xd-<FfkT6s=vh#Rs%bQ0igR_~xe2tFs~W^#ZHk>@Q!B<Q
z5hTd`24<suaVwxx9`I*T8NDJxJ18lfEdRh((JZhmr}21yIiPXQ5GhCy2_EDq>{TT2
z2%!lmgJ~S)3es}J+qjU1l?8|1nuX602c+3~+wVkTT2c9iZ8}tmjB-L5^%Vkc-2`?&
zTVF>$9SREQUxpy(q=>U0;sLyeMVIa~d1#!0Y+xP&nRsXs42>oRac369zK#ip0T*C$
zsS%T&0{|jlT#7PO0niJeMgdt*P0Wa+gEi|dM6qc1w|kC5?Xxp^>Ko*QezLyN<*6R5
zFNlxj-|GFMZfeKupK0-`LdyVEIme{MVZ4ys9tX=}UMrMzVX2(pS#Z%NlF=w;uxA2o
zO;b!7BEzX`zRiqZyH^iwiYb??Bmfm&Gs2Tp5bW2jTE9i7mI$VC*}}3duPW=ch~xzB
zG(ABAH0BaWlEyI-ljo;ES5DdJkZHaVyLNS3Pf?!Gdi#9$+1~T+8F4?YIoj=gOBS9q
zwi*`H(QxX#fl3MiP-4u9u_*`2sji2>)$+{^yDg|@R04{r!(V`FdR%nrS@%VgbG72j
zCTM=lb$-{~>4zmOOf@bZ1t;tJ;r50#;sg3|X=y7?QiCot2H9S|Iz$?B#5$SCg^!%x
zp=EW@%R*Pdqj+nLm>eIu0vyp*<<F4n#SlSv9~4#jqCrs&RNOSi<YIFf4Am;j#nr#N
zlO!+7rzrJW@d?iY1@(pF^^`KLy~T*0z9uB(X2aPU>0rpBB5~GSpjjgW{U$=#t09D1
z4Ns$lih*pkZ~<C4e&8!w5~MT|jiyO?S*1rj&+?CE-Kc2A7c-bzJYIn~{`Kv*{=$tF
zm&AN-0<_cH=dLGy_32sN$L;54d9@W#y1dfT)8nji>j7F`>q|%HI!6Aojdg`<w}Q1-
zmlXv)uYRfxaY(OJh-(MU+2_bxc<`RZdGa|PQ=u1mcE)OgC0UrPVU%5)f*ioK;Xh28
z;fw1Ub!paJa0Cu}Eo=h4?u(=dFeI+Zu=_~G1dQRG#Sh%vSg&flgUl3!*GL=#;fT&v
zeE9^il{ivlVV+~SPOXnYSt$-6AH)^;{e76RmBL2aiLJ|QqaV1+-Rt*yj<QRag87gC
zM^<Aa{UNkx){)Z=YNd?T_|C3juf#2ZdJ)=W#F+-cbaNvaZ^ej9J+Al=4?iY4uQ4M(
zG8`v-;w?=4CxgMJ7CjafPo)~?=4Nfp6&T-&->6=;nwl9$DXI2Ace*=JF&2e*U7P6w
z19&fs7Q}{itkB9$_0>|*=kYP{NO4Z45zTNn4MV-9?Vu>hoVcoj>fdI}T#b4v(l-Pk
zk-_>Gw_H{$r)?zs%HwH7HqDC_15oWl|4SF3(Q@T;Ba?`6K<yrR)^z&cEhDTJ3o}97
zYG&R{kO4D^qaxOYRSb$%>m<wg*43}|yKBZcsyhUDY#YqA^uu^JrJ`a<19z*uc1tn9
z5PR$?<p?GzqC89hymPnL$8?I0;RPFC;C!1t0%f<DCZibMZuk7v?gH%5YF36S?6pHR
zW>{kwPO-)u{y>erW_QwD6|0VQ)jg~_3CCFV3jRRV(=gpx<?UM3hkj)>F8#fm!5pJp
zT%+JAusQFMtcyrr;ixN$8lZC%V_xCy-p(97<;~t>atV`r7fb|itnC4F-?q7CR=e9p
zM`lqG4uKkliZeFSSx~nJ-ox$Brx@AA>11;%t}(1?5sWz8Uy-9l*W>NJFJ}1IfBf))
z5dmSEH-%e=N4)(XGEVlhQ|6bXzmB>^+uvDh=V8=^<?`X4P2(MD9up3+shlr7Y*6_N
z93J`pj*R4j{t$F0z}?RY07w2H2@_Rz<Od0xr;Knh*<ZHsucL0<#^`+supZM(_&I57
zFHIy6luPIU`w9Byn*_6zCY2~|nAa=-nyF^DoT+BF%&ZYxN5LW4bANrRTFiPFEA2lf
zKdhW;!|dj!lEuM=!Pa921DN?rcnuX$0AsIe=Bw|t!RXJOs!X0}7=SgD7PV?Lsa7RI
zC>Vu3VP{0m{GHMF+GJs*qB+jO;&4QbCS45j(Vj`8sVPH6b~rl{`9`1e`Y=$;45*kk
zpknF|A^<X3c<KicL&X%KLS+J7K!4RL9VSQCnxx9i33drTE>sr22+mh3O#!k6N5-I&
z@nCb?I2n6}RYOZ}Cz=*tzJVqxfEwq9EjDy^&Cco3G{9`G{3w{fi^qYY_0TGHgm?nU
zLioE;@?Vi~XkqqeHu92la10bLsK)`KbNO63=g1d+5WC6+Wz|p{-HlaoGCa=I&oG5$
ztEM<<oEg|t01j>OQhC+wWZ&nefA%#)lfF&RS=(`;jCS-ArvMuR{3nE!#lNBeJ_>&q
zi)u($jUizU>i^W3V(1<hOpYq%QMq!{oYoO)NVym^eF}%Uaqe>Sr8<ik4K&QVW%deV
zyu`1v^EiJB6c5SL6W4p#!*(J}wZpy%n&CBVZs1MkS6Aqe8kIoira>$uNTXGi8mE06
zOMj3mzz_A4hB?$Fsjp~MnbM)!wfGr5rdTG?DRR19PK|Wh7+@)+un`9_Dc3*8RZ1m=
z8cPE;mIHnSsJ3ePcuK4{aI8kt`8eL=5Hojf)~-hF+OGtg@f>7%dFMu}D%4>0Q^dt6
zn#CwVzH?($6>6;dDd4so?@p)nDc{nbU5nbZU!guNSltGcz@#PRZN;Dn<GXnL3tTU^
z6gNt$O90?#mdn&%oQ|2(Q8n@}OG9W*N}^4CjDAwpPippqaBmJ!gQ@v;$GV5)C3JYS
z!^b~Uq+Am2^Ih0GB9%#>%#KyyB9i;k*gquY=|9oc5e_pBdZ)URuhGsAMY(~8p#zB1
zN+hS1ED(VK_Ui8x-{(6;bvMgy3+}eq=zpK9+u7CNOyzT0?2I_?PdJ69r)){AUd<M(
zMjp|~b&l-X=ViO2qd<oZ;9s&;#z`8Ozl@DCPFH^Cc5BCeP=8|qf`tx}JNHpLXoLD2
zqmSAF1mf&k8khj~9>+7l-Mt0UYXEhTb_Co}I%lBUPm@X6ru|<le2!8h2{&b`VnOkY
zciD$`KnGRS92eMGOV-ylOVWquL-niEKkCweppk-~3}U#z;Aw221h5Az`Fskzja8Xn
z3N9C@3cwwWn4VL$SSEcDkLG2}FgF7rngSTf1(Cfk*aDu$KMY5h*b;8gxq6}%8Q$Ei
z&E=}#Ilu)Nw1Maus^QG#Lt_}aM6FXls1>|&w&ogYE9%Zu-Y~t(vo0P@wJNi&I<|HL
zC|@<I$edkYR7V%8Z9rqB>a6Z5a*K|1(Z-;y)%3#N&iMO1MSG0_C+!`Mk2DF)qCfuC
zrZ1XcreBg8#ZATdH0C>HaG(h*^q30wx&<6`w>xJ`QrI0yaZ|d%y_*}LdK8|bwpZUB
z|9K1|1)>xT0ak)u%Q5U23=Rw-N5c-iWXOxUR~A1QOPL{QSzkw3VZ97o?JwP-Kmqt<
zz#AJAMY15jwI&b+R2At5qb~fkFIt6H@ESD<26d&zJIbTS2-{c-p%`NX1LPbEr@*6-
z0*?eRS6$#S10tLjXvbJ;X!b)i{Rp@y5+k|+S%fk5uK`=ZA1%TtOc6#@TYA}ydk2uS
z&`tud=?O4B5t)R-5lg<0G&0?(jC&AR4kO@#j|TE@kRPUpk(OO0K5!HVv@UJ`=tv|R
z8w(cepn@xK$|cmEWxU&&W4CD&Z>vljp1C&Mq=#>5#UO(R<}ahg>g9r%yoALdQnpgr
zedItYq5D(AKS4U`!m45sd4ZzqRNgIq*N(g*=Ccbw3NeB+i%esFD8B-Cbf^Uzszr0{
z!<mo{YE>P+7b<Y40k(?}n=-1x8HO*$i124^I2zK-yYnu9M(Hhj0ANZix|39_bSW1z
z^=U=v3QgtJ!E!BmC!mxDZHkg~9!u9WxPV<>cNqMfxG;jDnIgpzljC6m*Rw{45v)dX
z6poB=ZffpUd#mvr%C8i2D=N*P63k<`B|NII0a&7)iP$83n<ZBFrlffi*5lPuzSysX
zwi<oK75YlFyf$f|uP9Wa+L5{|Fc1&0%Dl*t{2CEn;oHYp@k}Pw%?9JVJ%a5BMy9+r
zvE{W1Av@mh%-LOacB<~w&2At^v(9p$Wq?&{<~YbVHx54~UtYX)F&;pTY0M{UKbJP}
zs)HQ`xbE#pO!0Z#6rU$f@wvQBMB!YYk?LCRK|wa1{3FLb0J^~s3cUw&mYL7%GIQPo
zb*j-JXj;!%Gy8t3PWVinaMb3^jud1f^>gcD4dsY^Cajx>aB0=sHnu^6Ex8hGk<g&_
z!nhc$_d7b6DGiXrm;$zp;EvF-Or8GKO7`cbKG8q{`53eZMbt>bH^3ITKe%Q|aQ|LU
zC^79J%c)Db6ez!vINa$tcX&O?voq4R2C*gp7O13H94$z$LUBgDG(KSk@L!tB+O1Q$
z%S7s9W4UDDR88n^T=G*JO|q7QFTv;k^sNzI*NAWmeQyFqzOaaFR3x!ZNlq-0Qu;eg
zFRAX`f$_}K<{6)mYCZpJoAJYcU@PRno`0H0)4w>n{{*B=G05Rx8rJv!p;7$}EB5{0
zyJCyQ0tmx+(e}kzP8lA14}I~OA0IvP#V34x{HV9(ixY?a0B1^#((yEA{~QY1K*@{I
zHY4U}p3?W8;xFAHM0JYc2Yhjui1f$~7k8Fh83#=F_s{ex8pE~uj(psK!<dm>q)QS0
zDPNkpz{;g}p7xvZCCStN8m)_7WTQFZi7e&mTj}mBhYvKb441eXL22m{q@(?atzOSx
z2xBD!l+9G@h_Ob=dHxc1C_ZoP=49NcM4Xi3qY_PXU_T56!g066p?<p8{qEio1{eB}
zhlhuriWiCjL}b9wBPcBci(+^L8CewHa;!Q^&Pnk{kBn4-Z}VGX8IvVK)AYg}1~IJ#
zxH3+RQTI89C$IxvVjkAHw34DAgd3@hpGhq2x!Wj)qV}LkjG<~cJPJwzZ#3d5o}&G6
zGgnc%I#m%H!qh4Zb%iNbn1@5Gum^vj!Z;jeZI1I;$P_0XrN&U<UtzOV;8)sr8S#~z
zswTSeF*be`PO$M)_ydjan~fX6qjWBnYl;*hT>{0fZfhUgItzEPt<UfW+WMqt_7q6U
zVKn;a+mY`$ZpuN{{pJ)YU*X{;tq}=^%Ydu<3^T@~d4a*Sq)n!!bTTcaW?C+DsdWIJ
zE23big}*a0qTuCH01Kt!Ai~1HnxV;F!~rZ7vV`C2k>IEZM$MRhS`Dw*O9^1BIi49h
zff2<$Yo~<p5Z#^VW!$4^7_eUNuEe2fq_jGH2A~;OzO-7tqFTOGE+6_x)t3)9fR`^1
zd08@JS+d%)Wc6jqc$L+%yVmDQ$8Vz`ExD{wZA!_TlIx{Q(8n~!>p(4CN=vub<|HPC
zxT@U{cL+`UHmjwW;w)K&jyf3A!U}zE-ZAI(n&Zx78ee!ArpdeSVaz6P+o<~?UlRXO
zxWn>A&aixb`<JXbh*xNjfQcD(XxdD89nO4Au_4q=1ZN~Olc1bdF=5Q$Fjo{D2HqUU
z@=Yn$uFxuu;`uql_f<jiBGYJ=Lh_BGSyIA^Vu&v*P$0(BC1VPXm%9L#tr0Si7Z_J_
zn^*I``}#h?ROIGmcp^+9B=}@qoZbt9$=2|)g+Pp<G^Q&2q^tkN2Dk8^PM)22Fl~K~
z;RbPVTkgS`yLHx;PqbxtHCbp@ZJV2ZP?r&t28#3e+}5p^s`bT^#K0U%TpQ$KNbLg(
z@Y(A=&f_xx+$4>qv3tM!SjYhUfoEos^8}>~mKjLX48t6mAt}8Bm{u!lgycq=V*Ymp
z(7b>hXGFuXtqTLVV#ZTm>xY&nVnS54fXpMPt?XRw1_B^c^d|XL&_sgJ3pa7V)l)P4
z6J}({<MDhHFP&`j=*7*W$M{jiIu7<mErKhZ7<KPg*M4u|3NO{PM<==l1AAmGj{4f7
zytDDRgVEw7m{>s3Us!QwS2s@~_KS`TgjK_$aFacMjeD&K6n|;tO-XnfFs8}U1x7oR
z)2@fJHJZ@z?~U-vvKAsD-GqwXjdxwXy2(aX3`PHPgZwPplMy#}&T})VMX2)qkr?7*
z9$sec^V}D&9L^nR1eJA<ITigbP-z<91Ek;ceD!NT>wXq8dE9_}j0s*mpBy&2DuoL{
zC}$7Jt?VI5c&!OW1D=EeF>UmflJ64w<>OyTA=iF7LhPC3k)#k-lu4=(uNw<aj%I+!
z$J`y@jK{!H&MM+ONMzQU%*a}klh4=doHBE4-S@@2oM@rfunh<9<9->PO`CUeGZs5%
z0PJ9K&x&!j*g2?y0jCCJFnB^>Z~*;3b@$J^mP&`WFAv}ktOo@Kan0jy6jLpe*`b}<
z@Lv~E&x+UnE(f5!Mrt6Kp+5`WZrSWIun{BLUJ8RDE<}HucwW~<wqF|QX{Lypyefk1
z+RTWlKY+o_l6dT40>;@ThCmukli4tf@^LdMrr&-7R|A7dX@ChdiOUttRF;LmenOe0
zQh6em9?vGEJ=G)3$O|A~aHm+lWSZRXZ~5XkhT~&^qh~A;nCEamwMj$keb1Q=e(+f7
z>V1Dtzp#V`ur_a;Vjg0A3I3vrC(Z}g3-p_+LnOK|6&fN(2$5(6-b41cK!_YRGO7`i
z;bEdpPejw%X@s2Y1jQ>V9MD`hIK&3`!Z|iLhCh8we^#^WjeKeBQHI<q40n%tm^575
z>rx*^rs7J0U=iky{B86xbIqw7%mRJF(m|&m^!@MJ<sb@1ewUIl#^{t2<#Bt6sO_tR
z!+V{MhP70~nFnW0{~+QTxqXGcXJ!catMHj-kY{4z7)gb*rOgN##C!?fXeL0sHK*#?
zQmLFn<hF#u$4su8%qM;p9cZi|=9d`3TSoi46XiW^Yr&k&G29YDA9WEketC*+iA$61
zt_Z8&j2$mei413dv~2I}@bhE)u9{tR?zbv@<tx&UV(iKUS1Yo%jOBrijUy_LEgv$J
z?A+X_b7rw8b_yKkPwFYNjkxVLgc#CUIN4QSO0TC5wjs9rG3`D*+Y9Jn{`e_Mbtl;+
zllrj?+9VU|tj-B=wd}kC$ugTJ@&FpFec6b(5BLQ6knB7jzXR}xy_6Yfv~9h;Yqul~
zFta5AOppk}&6BEyW*Rn|7t_mwxO|COw#W|V`uG?l>IT2T)r}&vI-oD>kxs?m&}FW=
zJkoLjNkWT1i9ULh`#W!HR1~8S+QFB9+x^U$pzlaMH!tfyQ8H0o(ryZLA^yONd+R~(
zkuP4@_wCmaXw5`MKuA++cL9V@jpV6ipyy;FR)QTMIxl9qZ>CQ`a;^puLj+H`OFz*r
zIS+?k#MGLo)TGB!hn{^@iZRXpvEmF?P=Apu7=M_jA5#osp*|{>Z?T}5L(CIM(Pn9K
zDPKVZH!m}toIAUlh@*K={M`vwmfjzcr*d)sA8&)@BTG`Sp#y4yZfIPlCfXxY4J)Sx
zCv{qaDrA<m%_WJcY;V^?@1+tg>#Rp7J<fV$hUC>^XaCk*8_Qj5x%nws<zY~{=ZMCL
zm%--#$T6lGpp9h{yK4u|@yEI^WPGYbZneBvjoZhSPUcR@@>T!|0dXT~j$Oo^gU2pI
zp@eQJ^9t6vRW0;wE$V_TTqe$}B9sK-P6ux3S#i-r*ls<I+F>k3Z)Vof7l7XhugctO
zfH;xQl_!Rhm#s>V78~i&>;$4l!+AUcG~sAj9XR2xhh=mv%7><^$>eCTfX>WlU!JIt
zlB01d*Lse!*vgP*rQ50JNBfF?>nYNfjiHezO~lSDY4KmllI9rS@<eG%Q#Jh;6QwDL
zUSE%wr%a3ga>_JU68hCy)8hX*S<~)@@GH468gIazJ;iV}#?{ELx@GnrMd9p&duwti
zx{MH+-aR$5QAtIVx;?YhU9P@c8@c24W@uDQ<%(fPhmwl-f0GFO>nZo2awFk+x{PrD
z)h(m7@_@t`1C0zCP~nI1K3w2=x@Dc8(z^dy-pP^#Oy;9l@l-MDvuMnTetX@m7(<Km
zznk0Y2PWI7w0&C-xAE0kl%FK&D@tPB#}~DHb3*`AN=T(LvKm?7DoPD!h394<P3=4k
z2I?t(?Hd<A)2g5Mzu}Cp$gcUNiR>!KO2xNuT~}f>xT?RUP$_IRBz|}AztfgUQ~i}h
z$fW<ZNXQTq{b!RdK1+%bb{daccgnvglN0E&cS@XCC(fF7T3^J-e3Q2^$qI7*a_l@D
z%5I4tlHysO0gfFH8jTog?+>ic^oTe%mDjSeXH#QK1~FA#t1Cmo{6F1LA*0=dl7{<l
zq+VWmD1Jpv0wO0<q$e{lD^!IUi&sc<OrDUSqr<RS8R|)XaAa<WrGGD_=KXhdVbK!)
zcsDafWwq$l;Q>t=oA1cD(PixT%iX&Bf?lxIpYwW<LKXI9!MopZ`^cq5RvP9Fi>xF}
z8H6x4U^I*0WZ85Fqt#$|Z}eWeE`em420fwlw<wN)4_$h{vB5w1<Hm+Esv5z8?8fj%
z8&&0GRHY*cU~Zwz&km!b0sbRf0~{P31^7bsi!Z9KD~}uzC;yRUfU}a=OA+x>z>p4)
zaOyBvHtVbJQIIqch?uG`{2(+UA!A3iT0>r~VSTk!*0=Tw&(M+6Gjt?pGYw~rL3RJk
zhA^)w&ugmYHC;NdW)tQ-dTNr_3u{J&JtNEA6!x!7+>zpFtNBu3`<F3yq+aFqSEPq8
znpU#q-)|*btMD^9Hv0|x*HgBC-DmsP-Fme+A<JU4ZB^BFvD)YG46A*DKTxf*(fkTi
z*DU-|>)y1<Yl&8`zck;c{?4r3kTAL}PJOZ0b{HHwiz>TQHlr-b(Ejo-Sf1|Vf)}*l
zpKuWiG54i~=3L}oXrtK_wjRX!=VTPO6ajNtBV4ZB_g%wG@X|IDJXxkhTw)&R&8JN^
zX#WGo)%&ZI>@-<Q-&x|@)aGB=^oS28{JMu^Ipb^i#jjg@PZ!eaGIb<sK4n3^s3!FJ
zuTJQnu=FyD8XFL&6_dT#DHB_hBllNtuZ+dXx}7vZ)k2A}+LFJ_B+AA3dNwglZnr^l
z@Qy-9etpNnx&}y72Ce)|Nk?I;@+7>bDB{RU2TICEvASC&N<{@{Sp@Fl*P2gcmA(du
z9843^CO`7`@181u@Wnzr{qRh;`XS5F3Ar^+@)*-xTv8BN3_;1ZJ_oFm(d8`*pca?B
z%Xs2}C!3ngF}>{jw5Wc<m{2CcZCjHj>2X!EHF9;2OlzLcXZVgS!1U~PU$v@laInQm
zmS^)4SY5l|kLop+fw=&hir>Zvix|hY+5-9j{mL&;SmyOc@!DCG!q*%Yi`V0Ac22zA
zvc>r-o7e^qwStd(o{nc(l9r6n;^lhmc|L_>fiUy_?JK;cGt8Mn_XcXP$^9Bnvjc%G
z8BEdOrK~Av+*Ve2ErT)UgsY^m2>&jGBrIwxTzpJsXdko?iJNF4EiBS1w0D1p>Mymi
z=exSi_$ens7H+QJ#q6)-s2c$bzg%(xdzUA`zuw#cc0%8N)(np-ORi{;1{fYJ@7hob
z1eq>V3|!}V5dbBv>j9`MJ^)C1*c<kboeqGC0sQ}kf(yg8QhOD2XzX6iU}bCjA0}5n
zy2W<Esm{b9jx63@a`zEkKuO~7B=viX-K01gg&Y1RG0@x;A3_5m><U~|MDk_T4V1u-
z$}Bg6UrX!(qePk*<P6-5lv3liQHHNk{np`27$DP4-=9FiJ<NQLLoH&N`YnEyon%en
z1seIS6ke>N7y0gX4dP>bX$#GFiY4?cN2lp*`5Szvb<xWmD7*YAOrhOI=Lmk@E!#c6
z^WeV!kIe@g54L^wK9ZJ9Dl0%U1q_U2mXjGe=I*Y>uB$jRUYNBONC7kPyWH7zeI2=j
z(fWGY_WpVB<~3R>j_f5MN_uqUS3zYI$ukWrdS}+4cN~GOmtebV4W@=HbXr-(<ZwyC
zeT*auY`eS$-}1}WOOtRBw>34KL#K8_Pw>@Un~BT|plZXq7rceTEKViFtxjZCyB08O
zS*;-o8bLVB6lW#o@KQO1Y$36Rm?bU|c)Y|zMES$A#)v4<O2`4{&YRCTVh%=i)$v>h
zeT)$;TRzNCV1R$Z>-mgHnx2rfF1mZetq&iiJ!8Sbgi^kg6*j_Lpl<mZXE05iwmS9@
zq~#6_&uzIgHm!4%>5k;bnnpWfxa0z_%QtWjrO4*LAyIXz5{nowV@_*cP?qxuh(^mf
z#8j!KOD$~w29-r@t1QyP_=vR@h=FVe3RA6wgo!q&PvIhz2T8X(8hAe?<Je;dFAo^X
zYAaf8Kyn>S7%@bJ(TT5EW`Bj%sFE}{ozWhlGn(7-->~=`p$X^Ny9+eooRy!HG5^Tc
zOy6BXZmezD*=nt@p)oZlO$|S7v5PMIN`)06$FJG?Qg6N5e5I6|11qVa6gE`jmp4%w
zPmlGd<KwgQ_wQp34E2Ka`uO<Z<lR0{Xer|BX|oi+KR&*U{`}`}t<`NXUTC(#?~jk~
zPoF$`eoGrA`hhqGi?5H5CvP`9BUrw8>KH1%JwAST`gZeYxUnUl)GVgH93Q{f`+f7r
z#(1n|6ok|Z@%!WB<mZitpI0|QK2XgT==JgOZaR9Ku5Q3XM!LiIi02xL{t8o?_u`MM
zn<IMCF(rO~d>ogrX8n~-EW}=dHm{E#0Ztw#;h{Gw3LrMo0!?@dw&5`;_Gk1knI<#%
z!*>=uWRpoj4-+YLeS^X~Jm>Ikrk>vbH<?_(n+S$>{!|?zcyS8IY!_c*@r<Y|<7-Ja
z^#&&Q&a!bbNstJ@@|?=%MRE}XV(^COH5uU@AXDGq_yF-`1$~}GV`@{U0XIkJ89_28
ziAe+0Vr?apwtNE%uz#LnQZk@TE)Oox06!H<oV=<G=~yTtTh{c<FYDTQyNPEp07x<`
zGmaAv94L^zIi4vJHggIEnRXTfa5>`LUnPhJm13z3`#a_L^@JEZrHUh#%8+GMB8<|^
zicub6DgnhJI^C!8ADaVMH6AhQ1=f1L!=;eJ$g^WD#n(ZPc8t7x%Tx=Mz?Czs$^vAv
zAa1J)qwxcCY)b~_>fw?`dD}h!sYy<e3(bAwx}73&ueeyh3mo761f$@z5AkP;EFC`J
zAdY<CGT+9Z<_Tt*sGS3<%@MSOhF9lHK4#`8`@ET7^ueQ-m@61C_DL}BCQk*QcKyK|
zo5l}3Ct4c8NWe8qHA0*)MT!H)tAQzQsTg6XKCB0*ry6W^an8G+K1i~fp3UKEbYTwH
z!W&hK4fL^MT=Q<aeZ*uHVwXT|q(CHNtf<B{y!5AliQ9WX22+M8Y_$M7U>`uG*||)L
z`Gz8LddAMnWO3C7uJzT9!IRvJo@1FM@}_k}NmoUBuz0Iltm{QJHG^ba@bsXrF)=_V
z*LaV>q$C?bc^Y9}yEgBj5m2cE4r#wUwAO<0a&n2%zq!E&AH^N4v!vw2sr{QXMgu~5
z9&<n%M1Lo>8Yg$D@iv}>>cLq?Ek;;9I?Ks)=W;htWq}V1kuIR%DZ3w0Ug<B*ZpjU;
zudk^#2dWeGO@<EJQH-n3R9Lx+ugd8uQ+gi9RvKjWlTGPx35(@lfT3IYu}f}gcPP^4
z)bZ9%nt;SvVykbi@QSeB^X~h{sOSyiMFTLJd{C`XS>>rZBko$d7c)DZs^Tvy=xPjK
z%|E1`G<?<fgPT;JRTl0lbE-b~q(zi|p-<(t<4#V=Z3;4wRLI<pn}HSs+%N@-LwtcY
z70UBc#9c-*=xht0>v%>?RkXS4P7-@4%Cs&cF~%r$3W<pcR<bWXaYf#qa93gHdR<Xh
zqA(S(dsNRr=wcV%G|(y94#avP1rB>0qX_|O^%X7?pUjc7MZt)Pm2o0<@$>E(Fowf6
z>PeVx-6KnZ5BA52m=2~J9%~%}6w8_*qSoCPZ$reN5^1Zy#e$Lab)2#@eIkbOY4kY(
zMs&8oY%VC?RCz)J$K|n$Y3+P*j;-^5P8=;hvu+ekOljGJv%%+X^~*z^lOh4o2lZS9
zHfdz<#6D2C5lIc~xj4ZPo<R;5%JYk)!~i**by)5M5*=6Mv1K=OkfP=91i1Tjq+SNK
zLu%YuZ;cD`Q|*S|U$_+KDEXVn&~ca3m_WVSdkoJGQ{A6D(Q7M43WjO%;7Fhi*lCO#
z$>{W!l%}jwYbG}RAiRrC#fiXf!*A%klTA9+)_OrS0On;5oFi+07Dk@&3iYLfw0&(4
z3*gBQQn5C6WF3_jggCSjEl4%2OF7gLFAzumFwo30Bx)gU6EpJ0`DW5hd6~)3Ml=lv
zCLI{@`W13(`#~-z^Crv7Xxd)2>R6vqu}ofCZ%mG=j`HDyN(gPI@7&o<DjF_4O@P?3
zj#jvz&{cevgu99O{AJ8Qjm)RQ?Rod-SN<|Ow?+-u2>2>0hkoNA|G$F%9l1D*1igu!
zJjZfwWChFP<TyA+S4DOsn#Czqvsu9ujbjX_<(eGP=M=0ms8|-E8|L4DtSo-!OL&Yg
z<CJJ60cKt0Y1*}l+&5G#IoY~7X`3;zc&UZ>ghnkm>mE;b8<5LM5?17e&28w_hG$;P
zPl?(Ri(OFT@J1+o_7wZDsAMgdiJkCeeZ3uXKCx1rf0UOP8S*~ZHEJ2hQL~5CtCVAK
zF0`d07TG)CH6T8TZGZchd6r|T&!K>iDpeCBM0u`Aq5|Kdv9!n}ZDkQQ-Z*&-HkNxP
z^_?Wv51ntFwOKt{>$dsQS(kS>R1a<r2%reFhCM^D2y4IH^8r9IYgoURaASMfyoizh
zc?aNICNpW87OwcVs-;(P1k+#Al;h*lnac?;ou{1MlCeB5M!&?Dl*ilt`PF>uQhv01
zoB&px!)(SO9AcY4y(<q%4K!Iuqvamos&gVk7`~Xf)6INHrqlQ7*{v=0)wNxRRK*kN
zV@HRJGX-F%XH=7^XjZ=Q9<^xt{o+5#lCOkVH^V3KCg(_jyWb<XB+vh$)5i|0f(jEO
z?xR&Wt)?Y8?dEKo1eo2ZddJi@o%J>oek;yPgTwu+GbyT#GiPG&Cy?xL@g{|ymAL?B
zWN-RdojogwDeXKUn>J}9JYUV#IFIJ+yyuja2#Hm)jFF?my6|}k)6YDIxybTvCryBh
zkS_-q11M-FJEDtDT`Xa&NY`Vap>S<OCA(mRx^fV7d8_zU&5i~MP-Cx2gXs@GCGaOG
z=^rH>F)uf(CrlC4%<&-mR!3C>MO-E6`628LtU{<^(4@K9UptoBisY@zLL)@N^?@`%
zn_jO*5w2@H9>n$szVcloldKLQ01=~SH(@+rc+om#eciR;b{WHs)p*<Xcb1P2&k4{m
za#XG&3-d^$DOBUeZVIaIj#11b+c<mGy}0D;VF8bi9$l475Q;)h?Uh4WPIlQVpu1bO
z0(Zhhe;@Xt`?1!6c~96G4C*6v?S+yTq>c5urCnn>t{GPCx`@)1m`B|UGDug;1Hi5>
ziD`TijV|Ra(QfSi%?&aEN*rmS3*R4n@l9w0*4kyGZHZa^f!;?AE{LKX<I^B-7W4yS
zip&x5442R5EADl3Agc!47~O(d5+bYiQ|UftQ9tN5Y-8}IDmC-3v!>l9S6(Rbkv7r%
zi~YEaJ*}?lES3T8>I$&nu_-8bL29Q@cfa1tvna(JGPqmq*tNwsH?b4Ap~ebZSIIQ<
z9ySjcD%ovtQMwhiYKjLo2W8S<ya0_ohY2B-M+HR_R;qrN)|{7W*e2*<MPC?WA#KlX
zW1&JxYK&y%0I0Y<0Pc5L1)$)_CQ?YbbVc=1J-#FzY;%KK(VNgVSe36_*;SR7FYc<k
ztEaiD=Bf=?QNy(dtF5%}0PnaLCO7GHJ!`1sBx;5FJCq1*`F5@3EaL%Z4@8r8M5BjC
zD~OGyU*zSW>D%6s22Hznnyi$$I4qY<GG2;zZ*JCVjPrnKPpL3^#`5X5bz@b;pi{74
zp~IbJ9HPzLn}q(|rcVjI%LcQMn%YYAbJD_QfzIcZ?s62SU0dcXP^cv}m@_GJVJ+hn
zel>N2L-eB3s-HdcmsDS(=D()CMA1uAVVN3w%2W8Ig~MW>%G-*{RBBSi89btJRD8w<
zRJeY^rj$nZgu(jha}%sBOV`hdZz(7zBC&LmBlx{cJ$06tcDK3GF_cP;P?*{Rhnm0;
zwg<z8;C-(y_HP<ET^jm}D?^@sT36&L`T4G)6-ZdBe8w{E&!(==u;c#{MV+C(JYoG&
zELnO>X_sec-&(R51fv0I8BY)|m-q-%hEf%Dh*Y4Y#L!f%Lf9Bx&A~r@8hmPK{-A8|
ziHV`Q0_&}*!1|nsw>1UU2`jM9lkjaKE?jN^qy*RVX9i9*wD{=uW|r*GS@nnxFc0lg
z@H|h<9f`$t9em2V$|)shqKn!DFKQFKHcYC@3}#TNHF^yw_J)`kMov|$HHesMF&V?A
zHy@MmA`!2Wu${IaZ9VK8PD-ZxgmjW6yNfDk6M4Q6F;DvEWPCw7XT$NNaQRluv~NX$
zz7^AOhL_3^{`8N;JoLDJM|E0-DIW>1Q#mI^u52ZDHr!9f!Q3>DuXpNl$FM_|mGyX=
z9|12(6f||Hmn66h+iOz<Z$?^A4-RD3@b=u)qk1{H5K!(x>FaP7U3_3i#T1SN$7qxx
zx2Ex=^qk?b@01ru$K`PcQcddt?W&l)=4)p^w{#<ULF|RRb(ODyFJ3!NFb77HR`ld}
zbu!I{(e!;zE>3VF!nHmHP${+lF|bw~v1IIDM=0S>D|&vQXnDM@i}{dMk8QgIlH$5G
z@3bsu!M%IEF8#l^k;@=1VTsX4x~G^@9;34;Cue}}5$h#JsIrD11+c;B^p!_v1wgw&
zq7AiwE{5SicUmBD2qfCM@I1ff!)EyD75ZuRm4`z6P-hhs?NRO}6}oZYfB=>kHu5ul
zO{|B%H`bak3z!~_nXeNwy+i*2?bR-1kXqrXfJ_`OfZY-BGd;APNdy6JIAZOQIB@%%
ztq$i_&264^$;o7iulL^(;jQ5({VutSqmdl}AeQbxu(;R}a^+th$nDFb>^8lwVX-s<
zaC$%i4%Qwx>MBC~pfN>YV2#`2(?f5ZOKY{W)in9b;XBPPrC*|}&mp>P*TXkC+#9Fr
z3qRc6>7nK8b5y_cs#u?V4DJx;(`vkSyVg2THDBTEWRbw^P8~W?krshPX8`FzWR<+M
z)HijDX{$i>LEbxe*bH_~a)wH^Frp*09mWT^Q>axH(p37{J#pg`$$>Uer!z3#L4r*^
zT@p`#OiYxAK8Gx#`!v3QX^er_%lXrD^*ceH1PJDz2&6CJrj^_r#pfviuVTc~{L<}a
zj~=8W%32Xz%UExTiQOZLnO(#F%Y8socNWT0Chw|-NlAZDA~sJ?<r~%inl%9Z{XaB}
zJ`aPIw}3|IuBpb-H^-t2eaTqzb~_H&B8$g{J!v?L+bNHi4Zdxp6HG<S`2x|Jl6Z!A
zv2bM?`8}=0Frfn=Q$4z`EOI4wj$_mXnBax1F8y5q6PGjck{0x)*4ufncl!%kv-hsn
zWP};RrqgIv#4Q|U;PJ_6$su$8FC;jMcnTX7j}dJl6RL3-rpP{aA6K&uAKI!Gom3c<
zej`(;H^Sv1=k;ar^3V$WmVkNbs#Lu-Pk*4QN7MNjkj1<f0st1s0Z*e+vs1-#cFIY_
ztdaGv8|FSC4IDu^BBTro^SsmV^;!h9Wj;r0(M(FiUWKT$POFKO{-7kVZ1Ik?X0(wt
zzVOdfN09{{PA0{?--E@L7V*DJA1QOh<)HmV6#TELij_t*`6^5S`)UTSeTs^?7Q+~a
z&G3$oBXqj;tiypl0PmcPi5#W7iu<aSVd9Xyu6WZBy*Y0CyQSk&Nw((hBwKP)ds-nW
zgPn5dLrMpP(@_Mg=ur?1=4l3v$*Ej`28Hdt&aBPVQNuXg@AwXMbhS0{%6&nZw!9I@
zrc^XYZ{>;qTk>UbZYzA@x#HM9TSajEi0N)re2?$#x3=PLpyG3&gaV!SJwR3-u39C+
zF>x102Gc<at5kHD<v4YwvRaWYpo&TyOBI18U35@lgS>IFNRj8l{T3lxQfjH%b>f^H
zg;n&cFOJ2u7}He?3vJD3zSj)8_-iaGBfgcBdjh1j3gzPLN(ZWX1Gm(nr^z85js+ti
z8)TB&Yktj1l!T7Na&#pAOqM2dYQ})AUuf2iN4_m7J|56(xW;A)CH}16Sfg8oi|s}X
z**#rhjupn?9#)vZAE<B@4zsq59#C{<(MjByNVHU=GYQNzVZqrZPj%B**z|sQicRmr
zA87i_Xu8AIs<x|U4APZ;&`NXjpLO$R*!-vPGd6z$f1vqGmk!RrIwx-8^;3iXi^bX}
zG^is2_Cs?$G+opwSb$=Zpd$wf`V|?iNgFF^Q1Mnz`vXq<Jba7OzJNb4?T_KU#izWI
zzxB?D*MBAMZW{iUIO6W^Oxo!e1<jqPpt(oBc=s1V=CZnTyow6@cyoi%m2eJ~K*FHD
zkoX$5XGxpM{KJo8{Dq-*p~%~M{K5zY)09iF=#1jDY$Wnli0Qmub25!DIwyH{-s!bw
zmzLDesCEqa%tR7FZpa3TAQerLIEd=({#W+>6eD-hf(QFT^UuMqP#8Ek7Y6SfTzo;l
z{T2N-A`!o{BN4w|7KvC1#4wxblBmRAxfIPPNaGIHY*BTrjjH^-Fe&Lb4%y?E%Zq=>
z#I;Nje}J@gfy6Z?CV7&TWp)<yki?BgA7TAJ9i~S}R9G_M4pRv^2b<yryhQ3_wWu#^
zB($rdO4bq>SOFj{tT^?Z2bLFMit(3F1uUrqqy%g9fOc<KUx(AZ27g{TGXXai?HQgL
zLxd&_LLksV-*5z)Mo~lqz0~Gy%h8RE=I<Eut)&9jT{eTh!8d&c)&jrLC%O<93oU^a
zQh!_>MqE&vCUlVB7w-G;+;tzG>-$hq<#;c>Tu$(;WZ<*#a|WyRJi%C=$WVon&6Jv#
z&E5dBzoLB8jM^C4fvS@gfvN}WSHomiRY>-g4?LjQ*Q+6gy3yPx!Ch1Z7%kujhq#`>
zQx$3y)m$8#5oj$<Gs2}aU0?So{&b6i9U^gvZyiZbT`{rEtpK`vWW>i_iTycr>2QEt
z63JTO%msxJ-E`K7r7g+PMg(nGfj^SaVxeBRLx{u0{RT*eKNA1uhHbYSnE@J^eRIz2
z8*yge(QULzgiUZ)#UI!eL7+H{jwCg#pkro3N8wCX%b~kiX5ka9Tx~Q^%yOgW@KkN|
zUN}`7J+?M_&$-cie@mWJxi__d{VxrOk>S$E#*Xj#!O+<8`LZ4NL=BWoULzPS#FU{<
z=BUL0Wc|$tzIadZ$BgJ-W-Ky}1g67~8KKFncwREbmvXK#qk8@NzdNeeH~*QaUcdei
zj_UR6e?O|%?{!Ch^4xd2!8`rdZ7=M)o4yXfb(gqNE4{;&7rN~q&d~)H;-7|VcaM5y
zy3-Ne3Bc-`Wx+%6)|j*J<~{}YAU4`??*1{c((!3C$<&HHlglVCNfmacFvHQz>=-T6
zkb}2SNEx*ToNGqLYI&c?3^P?YmJ;wp78NC?g7?K$$kSRnvspbX%5*Suheg2;UlA5%
zEUr*~bYjH;nZT9?iL@(}iEQ;Iqwz@LFMc$Q+I~;Ok2RyVf3nryFG=`gB7R<lQ8kWa
z<a#9HD7@AXcz2NgdN3>_ciP4kaH97+kw8-z`~Gtx#Z}FH?~o-0rS4g>Lza<YVX|N|
zfg;tMYzoWBSpGPIDb#EV^<k2cxT3I(L<ZzYdwX+p8|V{!eDwJKBRIbi?9N#X>oP)_
zG8%zqqi9O0m4!#yfqzOc-Nof|4g&;lIUvyP9L=B3X49AqZ209*$;s&yRUt?zsF$xu
zg%6t>xz?HqpGiSkzs{2s*o5vWcS$#n3^Ik*Kd4X_Blm{MIly*R!59XINMPfZne!si
zqhn@d=GdGY;eqDt2qT#D1Drr4e-cRrn@J;1yEBY?TKFujBvNsRq~cyUM^bSNfBGn(
zL`j^Sy+;w^uXOndXQ{g4ELB&x1=3&J)2=rt&yp*fr85ALvKDsDq;}8l`)yfx3QLA1
zq<Nda6B{{y$88<Po}g^E;quz<^w+{LH9Ty6bOhig)Xtr*RA&Q?5Qg!f3=WSJoeQJ<
ziAinfJ3S&w8929{{dOq>|M$dpj~KZ#bB>ahe}n11qR4MMTHJ%C(1w(YULwg2w3#7d
zP)q8IjPu0=dDJ~PT^u2A`q?1W?@l1^Ezh}<jLCdMcGYCApzlB4h-<V;lm^0|DZo`c
znwRlE5x|386p@sAv>ANg=Vz9Vj2(Kn`a;!5SZz*8dbfn~YdZ2C@%^Rxj#0D7!JF94
zg(3krnf7M)4q>waAkhCBpY_Im0$X*sYH0T6YRFvpM;Nb<KpP`u8@L0mN=7t@l#wT$
z0ba+Y28uC=2B+wb(?lV`NHh@$aIPl$z?f>KJ1V;+h#SJ8{Mb4hcD9yVlAIZu&fW32
zMJp|{w2C5fo_rHqp<|U(ZkKb?n2696l<y#hn07ej)E#UQuo_RgLkPH|Q5{yk#Vo<7
z%zHp_?W!vX{lRKE{jNBt-zn$x+c%piF4Ho)fB~2n7B;b~o7l%D&ca=6;xqi|W12ss
zi7DS}RO>|7`h>ME!xOCa0scU(w~eHQbF_mw*LB`vor~}s>wJViQ0JA&_`kLp|5q-?
zpJc%Ij*rnm`S|!An{c57;9dB-k^mgQ50(Ht3EL_Km`{NzVH4Z_y?(qUp5CE5+P?w)
z8<tcR`+6Qet@=8KAGJ(1OK&T<FP<|;E<uuiVPinopo13h{($JZ(XePg>BK(YJzVO@
zIy7!XYog*T>dw1BE0NiQQsbM5@FSuQ!*$*q=||o@=)J$)>$we5oS7lWSDGS_JH;cv
zRE`GB7GLO$-qQal@FpB&{OTp%r~z)(lrna2_x|BA!-Qh4fW;A0*xBFO9r)%i$)J!%
zraXqMOj~DYS0CrCQ8r8BajVQ)qiHf5W>G$_=@*=noM5*14!JHYnPyYOFB2yPG5{Z=
zI2bZY_iZH8A?g1xyYSqGBes!)qOxa{@rTp~uw9Z=ek%0{h83vyzKC1Y87I-R1yf6P
z6O=T4vnN(f!@_o7H;cVhvzQyRU~;xaUA7d0{Tt_EV%@Ks%IT`9Ts5a+;rWJ(%3qp{
ziT}TDGM`sX=Bzmx>&E#TXTrD9*UjO>sySRX=OAxBxfSUTTfLi`W8coU@`;s?OrkU_
zrY*rRu;m$EzXme;z&0mA3zz74ecgMX#uqaZ=(f}a(_)cz>-;oMwS2l&#5wxI;R%M?
z>ef022C*oj6BO3}5N-kg!k!*W>OBKUqrOb-A{2oi<ATbx#>qqmhHVYw@;rtyTxRpU
zHO#YfXsd;WqUC8U+wHdCz5%l3G=>4^@f7IAR+hG+(Fm>JV{VeFP}_MjDO+a<C9P2e
zIIuOZrq2hPFUF$l(H<Q9$JV~SOp?zA5Gcx^b?05-YOR#W=9VW8)PB?s^C&`w23h6c
zR(8~;%nM1G7r{Hue&=BE0Z%%p^D7s1er8kWm(qo80TjPe{(#1aNZlD(s7Rkr3fCu>
zbh(l|DI?V(G7R$5o@OXWRB;B(QGWR{eR5gGg;_DFSA3;Ac@rhMu*ZcCb26q@1;bX#
z*Ov$TD&=d<u1$Dom&P7;mC}GSJ)-F(E-%?06s^m+M7wB$ky(@%xYq>2ZLiiGkRTyq
znR)t=mCyzJOy_3@G$r5>=oifir-Qj8%kEi{lE`L=&(Q@v&%;Ayj_SRpD5b4z(&A>6
zVQH}tjxtZNb6sZSEW=a~jX)Kg83kpGt=3+Wwpd8UWvWGv+Ee5jn>C_~r8S07!<B(-
zm2qT4op$i-NlT`ktY>lFvWc`=XVY}M`w2!$H5(Nh<egp994b4&S@}%0=iA@u<hIl=
zk&j^PNQ+r>c`LPJ&TXD<e_<4a1!$vP<FV$N8sj-?4C*d>_Y{b8G(}6w%W5AFRZik}
z*{s#?v5gQT;MRFkp0;RoK<CfVQ4*1MfkUa)VuZt`(CWy<<EmEHsMY8TiJlf?w$>cc
zz9;5s0-OtBIn_{pYxmqRk9@{wl&dDo@;a6}w<_)kc1pGxQbe4hiw7=1kjg0RQPUaA
z$>`YoaM;|k3fyd-=|6N(?vysSvVV^n{7tP$<^smX3CWi)da9Hs&QowF2T|t|I?j*n
zYj>p6L;H)JS!CzsMJ&lk(#j-1jnK?zhN647c<f6u$;))6WicLpeKz@N<g#0L<d3%#
z%s0#-s#~F%Mt+XUAH#~l)Y1(jD+!vZw4)8hG-w!)$%AVdbE<JdU{nuDAf}vYK!9>v
zSP<ydL|ajiY=gfYRFAuP5)no7F1{$MS9B=@{r2S2G^W^#{#P4QjHCaEF$JvJ|5#%R
zb8P=5V~R=SGNu5yt1Kc2a2*B`k~+Lw7=1V_cP<)T+_k7WcGc+A6=LKlLoU!%pu4o{
z=5fDO+s<-H<AplJwRhHOuJvXgYvbcWTrE+_D_e}z($C|yZH}J!q)K65s2hkBwy+Ci
zy8%ng*?{EwQ63<<bd&{%R*iE1K-=OJs~{9mrXN)K@9LB-XIzHnPpN$B6Q_hejTu{s
zeddvloAp!dw+sKCexCZ@^?SW~W}j4evphSYbmBfn*?Joq#EDf@7wixkzFJ>TZ*Fq2
zH?Tf*Gy-S$zsbNGo^-s83I815+|(;5G#{`s1IEB$0ceZ=gX`#OunTAhAet|ybBc6x
zx#9f-X%99rQEl=a5y2XDXuHzv+ykE8c!SqXFtgsk)e}t3H)y==1)t@ssa);hr5Ah>
z205YRURQ&<1;)M|c<U`7rCW+fFVI~xEEl>74a!DMrXt^>4ab#f!!d~f=9k%UNHo(U
z4ALXyfB+$N1B>eHT`$<&<1`AdBC+p2L`<9L^x!~&R3aS9IrXoJkVqgvnUFo?%u%qG
z6s<HXrI=_;{$vY(wc7!k;*+CE>x>khPO`U|w7GMCDQ#{u%?D`PiZYA&tlRD4cqwlO
zEV3CJXC)_&A7^#|q_-I0=MtO!u=}dj_Jod<j^v`C_E9KOlYN~=;#wngU;%jJb=?k$
zLpJ&Z2=q+AK&|O-ykYc?d<<mWfi~)ud7Bjc@R9WTs6b*_vvOOme1WClYd2cyeO4#L
zU^kMJRE8hOt<buvWV`9io@<?GiaOCK%uy#gf<OJEuL?X?tAW^Pm2=?TRF!LInVJLa
zQ&#5~GVI_~k?vRYfSw%r$Eu-LCJQGbsybC=Q43(l8AdvAXUCVm7a4`q1iBOsZ^@n)
ztzMw5%IG6b0Y8UZg2b>jwxx3qa1+_1RqVwG$gLP1eLE;MMc)@-Q2~6C2(wlfaJV|`
z_U7TP`sCNq+6rJrHhaCbFl;9<qyi)RNkoJ3k!cM5-p&yE`?yHg*GFyCn4e`K`Rd0}
zt|Gd$b6<^lbDPU^7yTagvEADOm`)l^KafpV4m3mR!O?a!%;z&e#8NUUXV8BTSath)
z82!i2wOhvWokvp&?uD!RC5x%X@i-v6scIFok9wMFMHYIO`Slin@}C959yhYN6-2VW
zfay#yq#l3R4irFanv1*num(7r4`KRc4;o<+Ff8Sluj$riKwdu>?5=7bRstwJRNZHS
z2#dqRp4fbNMC^q&i)=dbWRg{)p!J%ofren#nT+?EW3YQYv`qBlEmw<;8NeCtFBSxp
zWJ@N{fAg9SM-U0~f&^Lvc9^j{^VGo@hERzI2w`=pD&nketu!F8+`4fqJ5clvL4m|Y
z*`8(o%}r#+F^G*LipERUwYeXm-GDL3LNGK2>{zoPOSmZ9joN#e50?r)y@GjvqNnHZ
zbV5%r;pvi|-ow)eddiTrq^AO&&gp3g#Oeh-y?}Qg`76A8wS;WX(gG;G;#HD<B+@-P
zfxX*9E-Rz_hqzdISl99BSbHd=xJPw>KD>7Vi18F3$TS&ER^{2lCzQB!s-Kf-bV3gt
z-2tC+U<tUWaub32013$`?x=WMC}V(Qm}5+`0z+H3@xW6+!CYGycKWc{xiW|B`-)8;
zg}t58_mN`HN5G!jZAFKpBOl<}XiGKI!Eee4O&)e^6O|*<;41ITC?93fp^LtQkyc4Q
zLwB~%;a=!!o8i?q45xUt&EZcUEve?vO54?f@8LbT^mEV}!{vpA*g{oODX+4Vj7_&r
zZ7WsFDP9425%MVEo)`{>!QT4%7=ugXA3aoFpPZJSB`5tQ?Y?dp>0FmIoB~yU`5T>@
zGZ>P!4t;abD05CT;-m=U3?0x-G7Qf0kByFVrvc3@YZT0!1@~h%<WD)cv6GISHXGY_
zk9kC%tJSdzN}&%`kP2gWf_-~#SK@jyohK}Imexhl7^(4h*(`Y2bJ+>O&`#qeg4zf^
z#23+s;*?;#%YX>nEJz3H&<5(z+9MgpY`Gff!|htPvj}%*X-$a@Ts1$guBp(6tLo>~
zRTVaIRsFQOs>Dc6Kk(HxCE{|`yj)$giQb&8e7L0*iB(-y-y+{)z#kmNT>}JnS2Sy3
zY**XotB0l0xU24ktb3&Y(eY4TM`0W881dt){U^Jxj-T$oKG=Wt{NVW2%h$j7;$0NV
z54%4;fBo)wZ~xhIaiCwmeZKqb_Z`owbo}Pk?$hT#?Z0~V{4HWQSHtV;-ttdu?eP4y
z-*%4a=B5o}W>HHnL*%!OxxR{ODB*Qv-~>+D3&iugNHAfe-y8seP^CnuLgYWWd^rZ1
WF3U>H2Gqv?cK$Cno7gEVW+MO~yDj+u